diff --git a/pkg/sbomscanner-ui-ext/components/WorkloadVulnerabilities.vue b/pkg/sbomscanner-ui-ext/components/WorkloadVulnerabilities.vue
index 92beb1d..485ab33 100644
--- a/pkg/sbomscanner-ui-ext/components/WorkloadVulnerabilities.vue
+++ b/pkg/sbomscanner-ui-ext/components/WorkloadVulnerabilities.vue
@@ -326,14 +326,15 @@ export default {
 <template>
   <div class="vul-header">
     <Banner color="info" class="vul-banner">
-      <span>Data provided by</span>
-      <span class="text-underline">SBOMScanner</span>
-      <span>, Want to learn more about this extension? Read our</span>
+      <span>{{ t('imageScanner.general.workloadBanner.text1') }}</span>
+      <a href="/" target="_blank" rel="noopener noreferrer" class="text-underline">{{ t('imageScanner.general.workloadBanner.product') }}</a>
+      <span>, {{ t('imageScanner.general.workloadBanner.text2') }}</span>
       <a
-        href="https://docs.rancher.com/security/sbom-scanner-extension"
+        href="/"
         class="text-underline"
+        rel="noopener noreferrer"
         target="_blank">
-        documentation
+        {{ t('imageScanner.general.workloadBanner.documentation') }}
         <i class="icon icon-external-link icon-underline"></i>
       </a>
     </Banner>
diff --git a/pkg/sbomscanner-ui-ext/components/__tests__/WorkloadVulnerabilities.spec.ts b/pkg/sbomscanner-ui-ext/components/__tests__/WorkloadVulnerabilities.spec.ts
index 4775237..1c31352 100644
--- a/pkg/sbomscanner-ui-ext/components/__tests__/WorkloadVulnerabilities.spec.ts
+++ b/pkg/sbomscanner-ui-ext/components/__tests__/WorkloadVulnerabilities.spec.ts
@@ -6,8 +6,6 @@ const mockUpdateTabCount = jest.fn();
 
 jest.mock('@shell/components/form/ResourceTabs/composable', () => ({ useTabCountUpdater: () => ({ updateTabCount: mockUpdateTabCount }) }));
 
-jest.mock('@sbomscanner-ui-ext/tmp/workloads', () => ({ workloadsVulnerabilityreports: [] }));
-
 jest.mock('@sbomscanner-ui-ext/utils/image', () => ({
   constructImageName: jest.fn((metadata) => {
     if (!metadata) {
diff --git a/pkg/sbomscanner-ui-ext/components/common/AmountBarBySeverityPoppedDetail.vue b/pkg/sbomscanner-ui-ext/components/common/AmountBarBySeverityPoppedDetail.vue
index 12dc0cf..6d85a33 100644
--- a/pkg/sbomscanner-ui-ext/components/common/AmountBarBySeverityPoppedDetail.vue
+++ b/pkg/sbomscanner-ui-ext/components/common/AmountBarBySeverityPoppedDetail.vue
@@ -53,7 +53,7 @@
         </div>
 
         <div class="footer">
-          Provided by 
+          {{ t('imageScanner.general.cvesPanel.text1') }}
           <a href="/" target="_blank" rel="noopener noreferrer" class="provider-name">
             {{ footerProvider }}
           </a>
diff --git a/pkg/sbomscanner-ui-ext/components/common/ImageInUsePoppedDetail.vue b/pkg/sbomscanner-ui-ext/components/common/ImageInUsePoppedDetail.vue
index 39fc222..0dda259 100644
--- a/pkg/sbomscanner-ui-ext/components/common/ImageInUsePoppedDetail.vue
+++ b/pkg/sbomscanner-ui-ext/components/common/ImageInUsePoppedDetail.vue
@@ -36,6 +36,7 @@
               class="learn-more-link"
               :href="learnMoreLink"
               target="_blank"
+              rel="noopener noreferrer"
           >
             {{ t('imageScanner.general.learnMore') }}
           </a>
@@ -65,7 +66,7 @@ export default {
   data() {
     return {
       showOnTop:     false,
-      learnMoreLink: '',
+      learnMoreLink: '/',
     };
   },
   computed: {
diff --git a/pkg/sbomscanner-ui-ext/l10n/en-us.yaml b/pkg/sbomscanner-ui-ext/l10n/en-us.yaml
index 134c1c3..69a2452 100644
--- a/pkg/sbomscanner-ui-ext/l10n/en-us.yaml
+++ b/pkg/sbomscanner-ui-ext/l10n/en-us.yaml
@@ -433,6 +433,7 @@ imageScanner:
       complete: Finished at
       failed: Failed at
   general:
+    product: SBOMScanner
     refresh: Refresh data
     ago: ago
     justNow: Just now
@@ -452,7 +453,14 @@ imageScanner:
     apply: Apply
     yes: Yes
     no: No
-
+    workloadBanner:
+      text1: Data provided by
+      text2: Want to learn more about this extension? 
+      text3: Read our
+      product: SBOMScanner
+      documentation: documentation
+    cvesPanel:
+      text1: Provided by
 typeLabel:
   sbomscanner.kubewarden.io.registry: Registries configuration
   sbomscanner.kubewarden.io.vexhub: Vex Management
diff --git a/pkg/sbomscanner-ui-ext/pages/c/_cluster/sbomscanner/index.vue b/pkg/sbomscanner-ui-ext/pages/c/_cluster/sbomscanner/index.vue
index f20f230..2103589 100644
--- a/pkg/sbomscanner-ui-ext/pages/c/_cluster/sbomscanner/index.vue
+++ b/pkg/sbomscanner-ui-ext/pages/c/_cluster/sbomscanner/index.vue
@@ -9,22 +9,8 @@ export default {
 
   components: { Dashboard, InstallView },
 
-  async fetch() {
-    if ( this.$store.getters['cluster/canList'](SERVICE) ) {
-      this.allServices = await this.$store.dispatch('cluster/findAll', { type: SERVICE }, { root: true });
-    }
-    if ( this.$store.getters['cluster/canList'](SCHEMA) ) {
-      this.allSchemas = await this.$store.dispatch('cluster/findAll', { type: SCHEMA }, { root: true });
-    }
-  },
-
   data() {
-    return {
-      allServices: null,
-      allSchemas:  null,
-      index:       -1,
-      store:       this.$store,
-    };
+    return { store: this.$store };
   },
 
   computed: {
@@ -36,7 +22,7 @@ export default {
 </script>
 
 <template>
-  <div v-if="allSchemas">
+  <div>
     <InstallView
       v-if="!hasSchema"
     />
diff --git a/pkg/sbomscanner-ui-ext/tmp/images.ts b/pkg/sbomscanner-ui-ext/tmp/images.ts
deleted file mode 100644
index 892d35d..0000000
--- a/pkg/sbomscanner-ui-ext/tmp/images.ts
+++ /dev/null
@@ -1,205620 +0,0 @@
-export const images = [
-  {
-    'id':    'default/057bac2937699cf9efbc2bce0bd4af115f9299fce80612fedccd02f7149da133',
-    'type':  'storage.sbomscanner.kubewarden.io.vulnerabilityreport',
-    'links': {
-      'patch':  'https://localhost:8005/v1/storage.sbomscanner.kubewarden.io.vulnerabilityreports/default/057bac2937699cf9efbc2bce0bd4af115f9299fce80612fedccd02f7149da133',
-      'remove': 'https://localhost:8005/v1/storage.sbomscanner.kubewarden.io.vulnerabilityreports/default/057bac2937699cf9efbc2bce0bd4af115f9299fce80612fedccd02f7149da133',
-      'self':   'https://localhost:8005/v1/storage.sbomscanner.kubewarden.io.vulnerabilityreports/default/057bac2937699cf9efbc2bce0bd4af115f9299fce80612fedccd02f7149da133',
-      'update': 'https://localhost:8005/v1/storage.sbomscanner.kubewarden.io.vulnerabilityreports/default/057bac2937699cf9efbc2bce0bd4af115f9299fce80612fedccd02f7149da133',
-      'view':   'https://localhost:8005/apis/storage.sbomscanner.kubewarden.io/v1alpha1/namespaces/default/vulnerabilityreports/057bac2937699cf9efbc2bce0bd4af115f9299fce80612fedccd02f7149da133'
-    },
-    'apiVersion':    'storage.sbomscanner.kubewarden.io/v1alpha1',
-    'imageMetadata': {
-      'digest':      'sha256:701eaafb5abd6063d54a424fe49167499dcf35cf2f636be7adac6efb785a9d22',
-      'platform':    'linux/386',
-      'registry':    'lsong-demo1',
-      'registryURI': 'registry-1.docker.io',
-      'repository':  'library/alpine',
-      'tag':         '3.19.2'
-    },
-    'kind':     'VulnerabilityReport',
-    'metadata': {
-      'creationTimestamp': '2026-01-14T18:51:23Z',
-      'fields':            [
-        '057bac2937699cf9efbc2bce0bd4af115f9299fce80612fedccd02f7149da133',
-        'registry-1.docker.io/library/alpine:3.19.2',
-        'linux/386',
-        '22 (0 suppressed)'
-      ],
-      'labels': {
-        'app.kubernetes.io/managed-by':          'sbomscanner',
-        'app.kubernetes.io/part-of':             'sbomscanner',
-        'sbomscanner.kubewarden.io/scanjob-uid': '445c600a-c4b6-40b3-bd71-f2d2140a37d5'
-      },
-      'name':            '057bac2937699cf9efbc2bce0bd4af115f9299fce80612fedccd02f7149da133',
-      'namespace':       'default',
-      'ownerReferences': [
-        {
-          'apiVersion':         'storage.sbomscanner.kubewarden.io/v1alpha1',
-          'blockOwnerDeletion': true,
-          'controller':         true,
-          'kind':               'SBOM',
-          'name':               '057bac2937699cf9efbc2bce0bd4af115f9299fce80612fedccd02f7149da133',
-          'uid':                'edfc741a-538a-4c8e-981b-b7b5ed471ec1'
-        }
-      ],
-      'relationships': [
-        {
-          'fromId':   'default/057bac2937699cf9efbc2bce0bd4af115f9299fce80612fedccd02f7149da133',
-          'fromType': 'storage.sbomscanner.kubewarden.io.sbom',
-          'rel':      'owner',
-          'state':    'active',
-          'message':  'Resource is current'
-        }
-      ],
-      'resourceVersion': '1',
-      'state':           {
-        'error':         false,
-        'message':       'Resource is current',
-        'name':          'active',
-        'transitioning': false
-      },
-      'uid': 'b8ddff89-fd75-4a3b-8603-ab7db3ab2cc7'
-    },
-    'report': {
-      'results': [
-        {
-          'class':           'os-pkgs',
-          'target':          '/var/run/worker/trivy.sbom.4098758479.json (alpine 3.19.2)',
-          'type':            'alpine',
-          'vulnerabilities': [
-            {
-              'cve':  'CVE-2024-58251',
-              'cwes': [
-                'CWE-150'
-              ],
-              'description':   'In netstat in BusyBox through 1.37.0, local users can launch of network application with an argv[0] containing an ANSI terminal escape sequence, leading to a denial of service (terminal locked up) when netstat is used by a victim.',
-              'diffID':        'sha256:6c2d7c7ca1d86ef4d53b1dd62b130b2c9bae1bb1f655263265b9cf97a239005c',
-              'fixedVersions': [
-                '1.36.1-r21'
-              ],
-              'installedVersion': '1.36.1-r19',
-              'packageName':      'busybox',
-              'purl':             'pkg:apk/alpine/busybox@1.36.1-r19?arch=x86&distro=3.19.2',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2025/04/23/6',
-                'https://bugs.busybox.net/show_bug.cgi?id=15922',
-                'https://www.busybox.net',
-                'https://www.busybox.net/downloads/',
-                'https://www.cve.org/CVERecord?id=CVE-2024-58251'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'In netstat in BusyBox through 1.37.0, local users can launch of networ ...'
-            },
-            {
-              'cve':  'CVE-2025-46394',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '3.3',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-451'
-              ],
-              'description':   'In tar in BusyBox through 1.37.0, a TAR archive can have filenames hidden from a listing through the use of terminal escape sequences.',
-              'diffID':        'sha256:6c2d7c7ca1d86ef4d53b1dd62b130b2c9bae1bb1f655263265b9cf97a239005c',
-              'fixedVersions': [
-                '1.36.1-r21'
-              ],
-              'installedVersion': '1.36.1-r19',
-              'packageName':      'busybox',
-              'purl':             'pkg:apk/alpine/busybox@1.36.1-r19?arch=x86&distro=3.19.2',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2025/04/23/5',
-                'http://www.openwall.com/lists/oss-security/2025/04/24/3',
-                'https://bugs.busybox.net/show_bug.cgi?id=16018',
-                'https://lists.busybox.net/pipermail/busybox/2024-July/090806.html',
-                'https://lists.busybox.net/pipermail/busybox/2024-July/090814.html',
-                'https://www.busybox.net',
-                'https://www.busybox.net/downloads/',
-                'https://www.cve.org/CVERecord?id=CVE-2025-46394',
-                'https://www.openwall.com/lists/oss-security/2025/04/23/1'
-              ],
-              'severity':   'LOW',
-              'suppressed': false,
-              'title':      'In tar in BusyBox through 1.37.0, a TAR archive can have filenames hid ...'
-            },
-            {
-              'cve':  'CVE-2024-58251',
-              'cwes': [
-                'CWE-150'
-              ],
-              'description':   'In netstat in BusyBox through 1.37.0, local users can launch of network application with an argv[0] containing an ANSI terminal escape sequence, leading to a denial of service (terminal locked up) when netstat is used by a victim.',
-              'diffID':        'sha256:6c2d7c7ca1d86ef4d53b1dd62b130b2c9bae1bb1f655263265b9cf97a239005c',
-              'fixedVersions': [
-                '1.36.1-r21'
-              ],
-              'installedVersion': '1.36.1-r19',
-              'packageName':      'busybox-binsh',
-              'purl':             'pkg:apk/alpine/busybox-binsh@1.36.1-r19?arch=x86&distro=3.19.2',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2025/04/23/6',
-                'https://bugs.busybox.net/show_bug.cgi?id=15922',
-                'https://www.busybox.net',
-                'https://www.busybox.net/downloads/',
-                'https://www.cve.org/CVERecord?id=CVE-2024-58251'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'In netstat in BusyBox through 1.37.0, local users can launch of networ ...'
-            },
-            {
-              'cve':  'CVE-2025-46394',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '3.3',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-451'
-              ],
-              'description':   'In tar in BusyBox through 1.37.0, a TAR archive can have filenames hidden from a listing through the use of terminal escape sequences.',
-              'diffID':        'sha256:6c2d7c7ca1d86ef4d53b1dd62b130b2c9bae1bb1f655263265b9cf97a239005c',
-              'fixedVersions': [
-                '1.36.1-r21'
-              ],
-              'installedVersion': '1.36.1-r19',
-              'packageName':      'busybox-binsh',
-              'purl':             'pkg:apk/alpine/busybox-binsh@1.36.1-r19?arch=x86&distro=3.19.2',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2025/04/23/5',
-                'http://www.openwall.com/lists/oss-security/2025/04/24/3',
-                'https://bugs.busybox.net/show_bug.cgi?id=16018',
-                'https://lists.busybox.net/pipermail/busybox/2024-July/090806.html',
-                'https://lists.busybox.net/pipermail/busybox/2024-July/090814.html',
-                'https://www.busybox.net',
-                'https://www.busybox.net/downloads/',
-                'https://www.cve.org/CVERecord?id=CVE-2025-46394',
-                'https://www.openwall.com/lists/oss-security/2025/04/23/1'
-              ],
-              'severity':   'LOW',
-              'suppressed': false,
-              'title':      'In tar in BusyBox through 1.37.0, a TAR archive can have filenames hid ...'
-            },
-            {
-              'cve':  'CVE-2024-6119',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-843'
-              ],
-              'description':   "Issue summary: Applications performing certificate name checks (e.g., TLS\nclients checking server certificates) may attempt to read an invalid memory\naddress resulting in abnormal termination of the application process.\n\nImpact summary: Abnormal termination of an application can a cause a denial of\nservice.\n\nApplications performing certificate name checks (e.g., TLS clients checking\nserver certificates) may attempt to read an invalid memory address when\ncomparing the expected name with an `otherName` subject alternative name of an\nX.509 certificate. This may result in an exception that terminates the\napplication program.\n\nNote that basic certificate chain validation (signatures, dates, ...) is not\naffected, the denial of service can occur only when the application also\nspecifies an expected DNS name, Email address or IP address.\n\nTLS servers rarely solicit client certificates, and even when they do, they\ngenerally don't perform a name check against a reference identifier (expected\nidentity), but rather extract the presented identity after checking the\ncertificate chain.  So TLS servers are generally not affected and the severity\nof the issue is Moderate.\n\nThe FIPS modules in 3.3, 3.2, 3.1 and 3.0 are not affected by this issue.",
-              'diffID':        'sha256:6c2d7c7ca1d86ef4d53b1dd62b130b2c9bae1bb1f655263265b9cf97a239005c',
-              'fixedVersions': [
-                '3.1.7-r0'
-              ],
-              'installedVersion': '3.1.5-r0',
-              'packageName':      'libcrypto3',
-              'purl':             'pkg:apk/alpine/libcrypto3@3.1.5-r0?arch=x86&distro=3.19.2',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2024/09/03/4',
-                'https://access.redhat.com/errata/RHSA-2024:8935',
-                'https://access.redhat.com/security/cve/CVE-2024-6119',
-                'https://bugzilla.redhat.com/2306158',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2306158',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-6119',
-                'https://errata.almalinux.org/9/ALSA-2024-8935.html',
-                'https://errata.rockylinux.org/RLSA-2024:6783',
-                'https://github.com/openssl/openssl/commit/05f360d9e849a1b277db628f1f13083a7f8dd04f',
-                'https://github.com/openssl/openssl/commit/06d1dc3fa96a2ba5a3e22735a033012aadc9f0d6',
-                'https://github.com/openssl/openssl/commit/621f3729831b05ee828a3203eddb621d014ff2b2',
-                'https://github.com/openssl/openssl/commit/7dfcee2cd2a63b2c64b9b4b0850be64cb695b0a0',
-                'https://github.com/openssl/openssl/security/advisories/GHSA-5qrj-vq78-58fj',
-                'https://linux.oracle.com/cve/CVE-2024-6119.html',
-                'https://linux.oracle.com/errata/ELSA-2024-8935.html',
-                'https://lists.freebsd.org/archives/freebsd-security/2024-September/000303.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2024-6119',
-                'https://openssl-library.org/news/secadv/20240903.txt',
-                'https://security.netapp.com/advisory/ntap-20240912-0001/',
-                'https://ubuntu.com/security/notices/USN-6986-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2024-6119'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: Possible denial of service in X.509 name checks'
-            },
-            {
-              'cve':  'CVE-2024-13176',
-              'cvss': {
-                'redhat': {
-                  'v3score':  '4.7',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-385'
-              ],
-              'description':   'Issue summary: A timing side-channel which could potentially allow recovering\nthe private key exists in the ECDSA signature computation.\n\nImpact summary: A timing side-channel in ECDSA signature computations\ncould allow recovering the private key by an attacker. However, measuring\nthe timing would require either local access to the signing application or\na very fast network connection with low latency.\n\nThere is a timing signal of around 300 nanoseconds when the top word of\nthe inverted ECDSA nonce value is zero. This can happen with significant\nprobability only for some of the supported elliptic curves. In particular\nthe NIST P-521 curve is affected. To be able to measure this leak, the attacker\nprocess must either be located in the same physical computer or must\nhave a very fast network connection with low latency. For that reason\nthe severity of this vulnerability is Low.\n\nThe FIPS modules in 3.4, 3.3, 3.2, 3.1 and 3.0 are affected by this issue.',
-              'diffID':        'sha256:6c2d7c7ca1d86ef4d53b1dd62b130b2c9bae1bb1f655263265b9cf97a239005c',
-              'fixedVersions': [
-                '3.1.8-r0'
-              ],
-              'installedVersion': '3.1.5-r0',
-              'packageName':      'libcrypto3',
-              'purl':             'pkg:apk/alpine/libcrypto3@3.1.5-r0?arch=x86&distro=3.19.2',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2025/01/20/2',
-                'https://access.redhat.com/errata/RHSA-2025:16046',
-                'https://access.redhat.com/security/cve/CVE-2024-13176',
-                'https://bugzilla.redhat.com/2359885',
-                'https://bugzilla.redhat.com/2359888',
-                'https://bugzilla.redhat.com/2359892',
-                'https://bugzilla.redhat.com/2359894',
-                'https://bugzilla.redhat.com/2359895',
-                'https://bugzilla.redhat.com/2359899',
-                'https://bugzilla.redhat.com/2359900',
-                'https://bugzilla.redhat.com/2359902',
-                'https://bugzilla.redhat.com/2359903',
-                'https://bugzilla.redhat.com/2359911',
-                'https://bugzilla.redhat.com/2359918',
-                'https://bugzilla.redhat.com/2359920',
-                'https://bugzilla.redhat.com/2359924',
-                'https://bugzilla.redhat.com/2359928',
-                'https://bugzilla.redhat.com/2359930',
-                'https://bugzilla.redhat.com/2359932',
-                'https://bugzilla.redhat.com/2359934',
-                'https://bugzilla.redhat.com/2359938',
-                'https://bugzilla.redhat.com/2359940',
-                'https://bugzilla.redhat.com/2359943',
-                'https://bugzilla.redhat.com/2359944',
-                'https://bugzilla.redhat.com/2359945',
-                'https://bugzilla.redhat.com/2359947',
-                'https://bugzilla.redhat.com/2359950',
-                'https://bugzilla.redhat.com/2359963',
-                'https://bugzilla.redhat.com/2359964',
-                'https://bugzilla.redhat.com/2359972',
-                'https://bugzilla.redhat.com/2370920',
-                'https://bugzilla.redhat.com/2380264',
-                'https://bugzilla.redhat.com/2380273',
-                'https://bugzilla.redhat.com/2380274',
-                'https://bugzilla.redhat.com/2380278',
-                'https://bugzilla.redhat.com/2380280',
-                'https://bugzilla.redhat.com/2380283',
-                'https://bugzilla.redhat.com/2380284',
-                'https://bugzilla.redhat.com/2380290',
-                'https://bugzilla.redhat.com/2380291',
-                'https://bugzilla.redhat.com/2380295',
-                'https://bugzilla.redhat.com/2380298',
-                'https://bugzilla.redhat.com/2380306',
-                'https://bugzilla.redhat.com/2380308',
-                'https://bugzilla.redhat.com/2380309',
-                'https://bugzilla.redhat.com/2380310',
-                'https://bugzilla.redhat.com/2380312',
-                'https://bugzilla.redhat.com/2380313',
-                'https://bugzilla.redhat.com/2380320',
-                'https://bugzilla.redhat.com/2380321',
-                'https://bugzilla.redhat.com/2380322',
-                'https://bugzilla.redhat.com/2380326',
-                'https://bugzilla.redhat.com/2380327',
-                'https://bugzilla.redhat.com/2380334',
-                'https://bugzilla.redhat.com/2380335',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2338999',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359885',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359888',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359892',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359894',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359895',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359899',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359900',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359902',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359903',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359911',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359918',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359920',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359924',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359928',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359930',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359932',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359934',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359938',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359940',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359943',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359944',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359945',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359947',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359950',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359963',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359964',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359972',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2370920',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380264',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380273',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380274',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380278',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380280',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380283',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380284',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380290',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380291',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380295',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380298',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380306',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380308',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380309',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380310',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380312',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380313',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380320',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380321',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380322',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380326',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380327',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380334',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380335',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-13176',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21574',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21575',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21577',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21579',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21580',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21581',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21584',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21585',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21588',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30681',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30682',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30683',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30684',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30685',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30687',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30688',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30689',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30693',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30695',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30696',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30699',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30703',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30704',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30705',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30715',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30721',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30722',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50077',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50078',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50079',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50080',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50081',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50082',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50083',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50084',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50085',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50086',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50087',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50088',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50091',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50092',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50093',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50094',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50096',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50097',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50098',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50099',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50100',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50101',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50102',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50104',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-5399',
-                'https://errata.almalinux.org/9/ALSA-2025-16046.html',
-                'https://errata.rockylinux.org/RLSA-2025:15699',
-                'https://github.com/openssl/openssl/commit/07272b05b04836a762b4baa874958af51d513844',
-                'https://github.com/openssl/openssl/commit/2af62e74fb59bc469506bc37eb2990ea408d9467',
-                'https://github.com/openssl/openssl/commit/392dcb336405a0c94486aa6655057f59fd3a0902',
-                'https://github.com/openssl/openssl/commit/4b1cb94a734a7d4ec363ac0a215a25c181e11f65',
-                'https://github.com/openssl/openssl/commit/77c608f4c8857e63e98e66444e2e761c9627916f',
-                'https://github.openssl.org/openssl/extended-releases/commit/0d5fd1ab987f7571e2c955d8d8b638fc0fb54ded',
-                'https://github.openssl.org/openssl/extended-releases/commit/a2639000db19878d5d89586ae7b725080592ae86',
-                'https://linux.oracle.com/cve/CVE-2024-13176.html',
-                'https://linux.oracle.com/errata/ELSA-2025-16046.html',
-                'https://lists.debian.org/debian-lts-announce/2025/05/msg00028.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2024-13176',
-                'https://openssl-library.org/news/secadv/20250120.txt',
-                'https://security.netapp.com/advisory/ntap-20250124-0005/',
-                'https://security.netapp.com/advisory/ntap-20250418-0010/',
-                'https://security.netapp.com/advisory/ntap-20250502-0006/',
-                'https://ubuntu.com/security/notices/USN-7264-1',
-                'https://ubuntu.com/security/notices/USN-7278-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2024-13176',
-                'https://www.oracle.com/security-alerts/cpuapr2025.html#AppendixMSQL'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: Timing side-channel in ECDSA signature computation'
-            },
-            {
-              'cve':  'CVE-2024-4741',
-              'cvss': {
-                'redhat': {
-                  'v3score':  '5.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   'Issue summary: Calling the OpenSSL API function SSL_free_buffers may cause\nmemory to be accessed that was previously freed in some situations\n\nImpact summary: A use after free can have a range of potential consequences such\nas the corruption of valid data, crashes or execution of arbitrary code.\nHowever, only applications that directly call the SSL_free_buffers function are\naffected by this issue. Applications that do not call this function are not\nvulnerable. Our investigations indicate that this function is rarely used by\napplications.\n\nThe SSL_free_buffers function is used to free the internal OpenSSL buffer used\nwhen processing an incoming record from the network. The call is only expected\nto succeed if the buffer is not currently in use. However, two scenarios have\nbeen identified where the buffer is freed even when still in use.\n\nThe first scenario occurs where a record header has been received from the\nnetwork and processed by OpenSSL, but the full record body has not yet arrived.\nIn this case calling SSL_free_buffers will succeed even though a record has only\nbeen partially processed and the buffer is still in use.\n\nThe second scenario occurs where a full record containing application data has\nbeen received and processed by OpenSSL but the application has only read part of\nthis data. Again a call to SSL_free_buffers will succeed even though the buffer\nis still in use.\n\nWhile these scenarios could occur accidentally during normal operation a\nmalicious attacker could attempt to engineer a stituation where this occurs.\nWe are not aware of this issue being actively exploited.\n\nThe FIPS modules in 3.3, 3.2, 3.1 and 3.0 are not affected by this issue.',
-              'diffID':        'sha256:6c2d7c7ca1d86ef4d53b1dd62b130b2c9bae1bb1f655263265b9cf97a239005c',
-              'fixedVersions': [
-                '3.1.6-r0'
-              ],
-              'installedVersion': '3.1.5-r0',
-              'packageName':      'libcrypto3',
-              'purl':             'pkg:apk/alpine/libcrypto3@3.1.5-r0?arch=x86&distro=3.19.2',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2024:9333',
-                'https://access.redhat.com/security/cve/CVE-2024-4741',
-                'https://bugzilla.redhat.com/2274020',
-                'https://bugzilla.redhat.com/2281029',
-                'https://bugzilla.redhat.com/2283757',
-                'https://bugzilla.redhat.com/2294581',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2274020',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2281029',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2283757',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2294581',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-2511',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-4603',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-4741',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-5535',
-                'https://errata.almalinux.org/9/ALSA-2024-9333.html',
-                'https://errata.rockylinux.org/RLSA-2024:9333',
-                'https://github.com/openssl/openssl/commit/704f725b96aa373ee45ecfb23f6abfe8be8d9177',
-                'https://github.com/openssl/openssl/commit/b3f0eb0a295f58f16ba43ba99dad70d4ee5c437d',
-                'https://github.com/openssl/openssl/commit/c88c3de51020c37e8706bf7a682a162593053aac',
-                'https://github.com/openssl/openssl/commit/e5093133c35ca82874ad83697af76f4b0f7e3bd8',
-                'https://github.openssl.org/openssl/extended-releases/commit/f7a045f3143fc6da2ee66bf52d8df04829590dd4',
-                'https://linux.oracle.com/cve/CVE-2024-4741.html',
-                'https://linux.oracle.com/errata/ELSA-2024-9333.html',
-                'https://lists.debian.org/debian-lts-announce/2024/10/msg00033.html',
-                'https://lists.debian.org/debian-lts-announce/2024/11/msg00000.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2024-4741',
-                'https://security.netapp.com/advisory/ntap-20240621-0004/',
-                'https://ubuntu.com/security/notices/USN-6937-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2024-4741',
-                'https://www.openssl.org/news/secadv/20240528.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: Use After Free with SSL_free_buffers'
-            },
-            {
-              'cve':  'CVE-2024-5535',
-              'cvss': {
-                'redhat': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-125'
-              ],
-              'description':   'Issue summary: Calling the OpenSSL API function SSL_select_next_proto with an\nempty supported client protocols buffer may cause a crash or memory contents to\nbe sent to the peer.\n\nImpact summary: A buffer overread can have a range of potential consequences\nsuch as unexpected application beahviour or a crash. In particular this issue\ncould result in up to 255 bytes of arbitrary private data from memory being sent\nto the peer leading to a loss of confidentiality. However, only applications\nthat directly call the SSL_select_next_proto function with a 0 length list of\nsupported client protocols are affected by this issue. This would normally never\nbe a valid scenario and is typically not under attacker control but may occur by\naccident in the case of a configuration or programming error in the calling\napplication.\n\nThe OpenSSL API function SSL_select_next_proto is typically used by TLS\napplications that support ALPN (Application Layer Protocol Negotiation) or NPN\n(Next Protocol Negotiation). NPN is older, was never standardised and\nis deprecated in favour of ALPN. We believe that ALPN is significantly more\nwidely deployed than NPN. The SSL_select_next_proto function accepts a list of\nprotocols from the server and a list of protocols from the client and returns\nthe first protocol that appears in the server list that also appears in the\nclient list. In the case of no overlap between the two lists it returns the\nfirst item in the client list. In either case it will signal whether an overlap\nbetween the two lists was found. In the case where SSL_select_next_proto is\ncalled with a zero length client list it fails to notice this condition and\nreturns the memory immediately following the client list pointer (and reports\nthat there was no overlap in the lists).\n\nThis function is typically called from a server side application callback for\nALPN or a client side application callback for NPN. In the case of ALPN the list\nof protocols supplied by the client is guaranteed by libssl to never be zero in\nlength. The list of server protocols comes from the application and should never\nnormally be expected to be of zero length. In this case if the\nSSL_select_next_proto function has been called as expected (with the list\nsupplied by the client passed in the client/client_len parameters), then the\napplication will not be vulnerable to this issue. If the application has\naccidentally been configured with a zero length server list, and has\naccidentally passed that zero length server list in the client/client_len\nparameters, and has additionally failed to correctly handle a "no overlap"\nresponse (which would normally result in a handshake failure in ALPN) then it\nwill be vulnerable to this problem.\n\nIn the case of NPN, the protocol permits the client to opportunistically select\na protocol when there is no overlap. OpenSSL returns the first client protocol\nin the no overlap case in support of this. The list of client protocols comes\nfrom the application and should never normally be expected to be of zero length.\nHowever if the SSL_select_next_proto function is accidentally called with a\nclient_len of 0 then an invalid memory pointer will be returned instead. If the\napplication uses this output as the opportunistic protocol then the loss of\nconfidentiality will occur.\n\nThis issue has been assessed as Low severity because applications are most\nlikely to be vulnerable if they are using NPN instead of ALPN - but NPN is not\nwidely used. It also requires an application configuration or programming error.\nFinally, this issue would not typically be under attacker control making active\nexploitation unlikely.\n\nThe FIPS modules in 3.3, 3.2, 3.1 and 3.0 are not affected by this issue.\n\nDue to the low severity of this issue we are not issuing new releases of\nOpenSSL at this time. The fix will be included in the next releases when they\nbecome available.',
-              'diffID':        'sha256:6c2d7c7ca1d86ef4d53b1dd62b130b2c9bae1bb1f655263265b9cf97a239005c',
-              'fixedVersions': [
-                '3.1.6-r0'
-              ],
-              'installedVersion': '3.1.5-r0',
-              'packageName':      'libcrypto3',
-              'purl':             'pkg:apk/alpine/libcrypto3@3.1.5-r0?arch=x86&distro=3.19.2',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2024/06/27/1',
-                'http://www.openwall.com/lists/oss-security/2024/06/28/4',
-                'http://www.openwall.com/lists/oss-security/2024/08/15/1',
-                'https://access.redhat.com/errata/RHSA-2025:1671',
-                'https://access.redhat.com/security/cve/CVE-2024-5535',
-                'https://bugzilla.redhat.com/2294581',
-                'https://bugzilla.redhat.com/2294676',
-                'https://bugzilla.redhat.com/2301888',
-                'https://bugzilla.redhat.com/2318857',
-                'https://bugzilla.redhat.com/2318858',
-                'https://bugzilla.redhat.com/2318870',
-                'https://bugzilla.redhat.com/2318873',
-                'https://bugzilla.redhat.com/2318874',
-                'https://bugzilla.redhat.com/2318876',
-                'https://bugzilla.redhat.com/2318882',
-                'https://bugzilla.redhat.com/2318883',
-                'https://bugzilla.redhat.com/2318884',
-                'https://bugzilla.redhat.com/2318885',
-                'https://bugzilla.redhat.com/2318886',
-                'https://bugzilla.redhat.com/2318897',
-                'https://bugzilla.redhat.com/2318900',
-                'https://bugzilla.redhat.com/2318905',
-                'https://bugzilla.redhat.com/2318914',
-                'https://bugzilla.redhat.com/2318922',
-                'https://bugzilla.redhat.com/2318923',
-                'https://bugzilla.redhat.com/2318925',
-                'https://bugzilla.redhat.com/2318926',
-                'https://bugzilla.redhat.com/2318927',
-                'https://bugzilla.redhat.com/2331191',
-                'https://bugzilla.redhat.com/2339218',
-                'https://bugzilla.redhat.com/2339220',
-                'https://bugzilla.redhat.com/2339221',
-                'https://bugzilla.redhat.com/2339226',
-                'https://bugzilla.redhat.com/2339231',
-                'https://bugzilla.redhat.com/2339236',
-                'https://bugzilla.redhat.com/2339238',
-                'https://bugzilla.redhat.com/2339243',
-                'https://bugzilla.redhat.com/2339247',
-                'https://bugzilla.redhat.com/2339252',
-                'https://bugzilla.redhat.com/2339259',
-                'https://bugzilla.redhat.com/2339266',
-                'https://bugzilla.redhat.com/2339270',
-                'https://bugzilla.redhat.com/2339271',
-                'https://bugzilla.redhat.com/2339275',
-                'https://bugzilla.redhat.com/2339277',
-                'https://bugzilla.redhat.com/2339281',
-                'https://bugzilla.redhat.com/2339284',
-                'https://bugzilla.redhat.com/2339291',
-                'https://bugzilla.redhat.com/2339293',
-                'https://bugzilla.redhat.com/2339295',
-                'https://bugzilla.redhat.com/2339299',
-                'https://bugzilla.redhat.com/2339300',
-                'https://bugzilla.redhat.com/2339304',
-                'https://bugzilla.redhat.com/2339305',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2274020',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2281029',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2283757',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2294581',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-2511',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-4603',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-4741',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-5535',
-                'https://errata.almalinux.org/9/ALSA-2025-1671.html',
-                'https://errata.rockylinux.org/RLSA-2024:9333',
-                'https://github.com/openssl/openssl/commit/4ada436a1946cbb24db5ab4ca082b69c1bc10f37',
-                'https://github.com/openssl/openssl/commit/99fb785a5f85315b95288921a321a935ea29a51e',
-                'https://github.com/openssl/openssl/commit/cf6f91f6121f4db167405db2f0de410a456f260c',
-                'https://github.com/openssl/openssl/commit/e86ac436f0bd54d4517745483e2315650fae7b2c',
-                'https://github.openssl.org/openssl/extended-releases/commit/9947251413065a05189a63c9b7a6c1d4e224c21c',
-                'https://github.openssl.org/openssl/extended-releases/commit/b78ec0824da857223486660177d3b1f255c65d87',
-                'https://linux.oracle.com/cve/CVE-2024-5535.html',
-                'https://linux.oracle.com/errata/ELSA-2025-1673.html',
-                'https://lists.debian.org/debian-lts-announce/2024/10/msg00033.html',
-                'https://lists.debian.org/debian-lts-announce/2024/11/msg00000.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2024-5535',
-                'https://openssl.org/news/secadv/20240627.txt',
-                'https://security.netapp.com/advisory/ntap-20240712-0005/',
-                'https://security.netapp.com/advisory/ntap-20241025-0006/',
-                'https://security.netapp.com/advisory/ntap-20241025-0010/',
-                'https://ubuntu.com/security/notices/USN-6937-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2024-5535',
-                'https://www.openssl.org/news/secadv/20240627.txt',
-                'https://www.oracle.com/security-alerts/cpuoct2024.html#AppendixMSQL'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: SSL_select_next_proto buffer overread'
-            },
-            {
-              'cve':  'CVE-2025-9230',
-              'cvss': {
-                'redhat': {
-                  'v3score':  '5.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L'
-                }
-              },
-              'cwes': [
-                'CWE-125',
-                'CWE-787'
-              ],
-              'description':   'Issue summary: An application trying to decrypt CMS messages encrypted using\npassword based encryption can trigger an out-of-bounds read and write.\n\nImpact summary: This out-of-bounds read may trigger a crash which leads to\nDenial of Service for an application. The out-of-bounds write can cause\na memory corruption which can have various consequences including\na Denial of Service or Execution of attacker-supplied code.\n\nAlthough the consequences of a successful exploit of this vulnerability\ncould be severe, the probability that the attacker would be able to\nperform it is low. Besides, password based (PWRI) encryption support in CMS\nmessages is very rarely used. For that reason the issue was assessed as\nModerate severity according to our Security Policy.\n\nThe FIPS modules in 3.5, 3.4, 3.3, 3.2, 3.1 and 3.0 are not affected by this\nissue, as the CMS implementation is outside the OpenSSL FIPS module\nboundary.',
-              'diffID':        'sha256:6c2d7c7ca1d86ef4d53b1dd62b130b2c9bae1bb1f655263265b9cf97a239005c',
-              'fixedVersions': [
-                '3.1.8-r1'
-              ],
-              'installedVersion': '3.1.5-r0',
-              'packageName':      'libcrypto3',
-              'purl':             'pkg:apk/alpine/libcrypto3@3.1.5-r0?arch=x86&distro=3.19.2',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2025/09/30/5',
-                'https://access.redhat.com/errata/RHSA-2025:21255',
-                'https://access.redhat.com/security/cve/CVE-2025-9230',
-                'https://bugzilla.redhat.com/2396054',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2396054',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-9230',
-                'https://errata.almalinux.org/9/ALSA-2025-21255.html',
-                'https://errata.rockylinux.org/RLSA-2025:21255',
-                'https://github.com/openssl/openssl/commit/5965ea5dd6960f36d8b7f74f8eac67a8eb8f2b45',
-                'https://github.com/openssl/openssl/commit/9e91358f365dee6c446dcdcdb01c04d2743fd280',
-                'https://github.com/openssl/openssl/commit/a79c4ce559c6a3a8fd4109e9f33c1185d5bf2def',
-                'https://github.com/openssl/openssl/commit/b5282d677551afda7d20e9c00e09561b547b2dfd',
-                'https://github.com/openssl/openssl/commit/bae259a211ada6315dc50900686daaaaaa55f482',
-                'https://github.openssl.org/openssl/extended-releases/commit/c2b96348bfa662f25f4fabf81958ae822063dae3',
-                'https://github.openssl.org/openssl/extended-releases/commit/dfbaf161d8dafc1132dd88cd48ad990ed9b4c8ba',
-                'https://linux.oracle.com/cve/CVE-2025-9230.html',
-                'https://linux.oracle.com/errata/ELSA-2026-0337.html',
-                'https://lists.debian.org/debian-lts-announce/2025/10/msg00001.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2025-9230',
-                'https://openssl-library.org/news/secadv/20250930.txt',
-                'https://ubuntu.com/security/notices/USN-7786-1',
-                'https://www.cve.org/CVERecord?id=CVE-2025-9230'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: Out-of-bounds read & write in RFC 3211 KEK Unwrap'
-            },
-            {
-              'cve':  'CVE-2024-9143',
-              'cvss': {
-                'redhat': {
-                  'v3score':  '3.7',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L'
-                }
-              },
-              'cwes': [
-                'CWE-125',
-                'CWE-787'
-              ],
-              'description':   "Issue summary: Use of the low-level GF(2^m) elliptic curve APIs with untrusted\nexplicit values for the field polynomial can lead to out-of-bounds memory reads\nor writes.\n\nImpact summary: Out of bound memory writes can lead to an application crash or\neven a possibility of a remote code execution, however, in all the protocols\ninvolving Elliptic Curve Cryptography that we're aware of, either only \"named\ncurves\" are supported, or, if explicit curve parameters are supported, they\nspecify an X9.62 encoding of binary (GF(2^m)) curves that can't represent\nproblematic input values. Thus the likelihood of existence of a vulnerable\napplication is low.\n\nIn particular, the X9.62 encoding is used for ECC keys in X.509 certificates,\nso problematic inputs cannot occur in the context of processing X.509\ncertificates.  Any problematic use-cases would have to be using an \"exotic\"\ncurve encoding.\n\nThe affected APIs include: EC_GROUP_new_curve_GF2m(), EC_GROUP_new_from_params(),\nand various supporting BN_GF2m_*() functions.\n\nApplications working with \"exotic\" explicit binary (GF(2^m)) curve parameters,\nthat make it possible to represent invalid field polynomials with a zero\nconstant term, via the above or similar APIs, may terminate abruptly as a\nresult of reading or writing outside of array bounds.  Remote code execution\ncannot easily be ruled out.\n\nThe FIPS modules in 3.3, 3.2, 3.1 and 3.0 are not affected by this issue.",
-              'diffID':        'sha256:6c2d7c7ca1d86ef4d53b1dd62b130b2c9bae1bb1f655263265b9cf97a239005c',
-              'fixedVersions': [
-                '3.1.7-r1'
-              ],
-              'installedVersion': '3.1.5-r0',
-              'packageName':      'libcrypto3',
-              'purl':             'pkg:apk/alpine/libcrypto3@3.1.5-r0?arch=x86&distro=3.19.2',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2024/10/16/1',
-                'http://www.openwall.com/lists/oss-security/2024/10/23/1',
-                'http://www.openwall.com/lists/oss-security/2024/10/24/1',
-                'https://access.redhat.com/security/cve/CVE-2024-9143',
-                'https://github.com/openssl/openssl/commit/72ae83ad214d2eef262461365a1975707f862712',
-                'https://github.com/openssl/openssl/commit/bc7e04d7c8d509fb78fc0e285aa948fb0da04700',
-                'https://github.com/openssl/openssl/commit/c0d3e4d32d2805f49bec30547f225bc4d092e1f4',
-                'https://github.com/openssl/openssl/commit/fdf6723362ca51bd883295efe206cb5b1cfa5154',
-                'https://github.openssl.org/openssl/extended-releases/commit/8efc0cbaa8ebba8e116f7b81a876a4123594d86a',
-                'https://github.openssl.org/openssl/extended-releases/commit/9d576994cec2b7aa37a91740ea7e680810957e41',
-                'https://lists.debian.org/debian-lts-announce/2024/10/msg00033.html',
-                'https://lists.debian.org/debian-lts-announce/2024/11/msg00000.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2024-9143',
-                'https://openssl-library.org/news/secadv/20241016.txt',
-                'https://security.netapp.com/advisory/ntap-20241101-0001/',
-                'https://ubuntu.com/security/notices/USN-7264-1',
-                'https://ubuntu.com/security/notices/USN-7278-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2024-9143'
-              ],
-              'severity':   'LOW',
-              'suppressed': false,
-              'title':      'openssl: Low-level invalid GF(2^m) parameters lead to OOB memory access'
-            },
-            {
-              'cve':  'CVE-2025-9232',
-              'cvss': {
-                'redhat': {
-                  'v3score':  '3.1',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L'
-                }
-              },
-              'cwes': [
-                'CWE-125'
-              ],
-              'description':   "Issue summary: An application using the OpenSSL HTTP client API functions may\ntrigger an out-of-bounds read if the 'no_proxy' environment variable is set and\nthe host portion of the authority component of the HTTP URL is an IPv6 address.\n\nImpact summary: An out-of-bounds read can trigger a crash which leads to\nDenial of Service for an application.\n\nThe OpenSSL HTTP client API functions can be used directly by applications\nbut they are also used by the OCSP client functions and CMP (Certificate\nManagement Protocol) client implementation in OpenSSL. However the URLs used\nby these implementations are unlikely to be controlled by an attacker.\n\nIn this vulnerable code the out of bounds read can only trigger a crash.\nFurthermore the vulnerability requires an attacker-controlled URL to be\npassed from an application to the OpenSSL function and the user has to have\na 'no_proxy' environment variable set. For the aforementioned reasons the\nissue was assessed as Low severity.\n\nThe vulnerable code was introduced in the following patch releases:\n3.0.16, 3.1.8, 3.2.4, 3.3.3, 3.4.0 and 3.5.0.\n\nThe FIPS modules in 3.5, 3.4, 3.3, 3.2, 3.1 and 3.0 are not affected by this\nissue, as the HTTP client implementation is outside the OpenSSL FIPS module\nboundary.",
-              'diffID':        'sha256:6c2d7c7ca1d86ef4d53b1dd62b130b2c9bae1bb1f655263265b9cf97a239005c',
-              'fixedVersions': [
-                '3.1.8-r1'
-              ],
-              'installedVersion': '3.1.5-r0',
-              'packageName':      'libcrypto3',
-              'purl':             'pkg:apk/alpine/libcrypto3@3.1.5-r0?arch=x86&distro=3.19.2',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2025/09/30/5',
-                'https://access.redhat.com/security/cve/CVE-2025-9232',
-                'https://github.com/openssl/openssl/commit/2b4ec20e47959170422922eaff25346d362dcb35',
-                'https://github.com/openssl/openssl/commit/654dc11d23468a74fc8ea4672b702dd3feb7be4b',
-                'https://github.com/openssl/openssl/commit/7cf21a30513c9e43c4bc3836c237cf086e194af3',
-                'https://github.com/openssl/openssl/commit/89e790ac431125a4849992858490bed6b225eadf',
-                'https://github.com/openssl/openssl/commit/bbf38c034cdabd0a13330abcc4855c866f53d2e0',
-                'https://nvd.nist.gov/vuln/detail/CVE-2025-9232',
-                'https://openssl-library.org/news/secadv/20250930.txt',
-                'https://ubuntu.com/security/notices/USN-7786-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2025-9232'
-              ],
-              'severity':   'LOW',
-              'suppressed': false,
-              'title':      'openssl: Out-of-bounds read in HTTP client no_proxy handling'
-            },
-            {
-              'cve':  'CVE-2024-6119',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-843'
-              ],
-              'description':   "Issue summary: Applications performing certificate name checks (e.g., TLS\nclients checking server certificates) may attempt to read an invalid memory\naddress resulting in abnormal termination of the application process.\n\nImpact summary: Abnormal termination of an application can a cause a denial of\nservice.\n\nApplications performing certificate name checks (e.g., TLS clients checking\nserver certificates) may attempt to read an invalid memory address when\ncomparing the expected name with an `otherName` subject alternative name of an\nX.509 certificate. This may result in an exception that terminates the\napplication program.\n\nNote that basic certificate chain validation (signatures, dates, ...) is not\naffected, the denial of service can occur only when the application also\nspecifies an expected DNS name, Email address or IP address.\n\nTLS servers rarely solicit client certificates, and even when they do, they\ngenerally don't perform a name check against a reference identifier (expected\nidentity), but rather extract the presented identity after checking the\ncertificate chain.  So TLS servers are generally not affected and the severity\nof the issue is Moderate.\n\nThe FIPS modules in 3.3, 3.2, 3.1 and 3.0 are not affected by this issue.",
-              'diffID':        'sha256:6c2d7c7ca1d86ef4d53b1dd62b130b2c9bae1bb1f655263265b9cf97a239005c',
-              'fixedVersions': [
-                '3.1.7-r0'
-              ],
-              'installedVersion': '3.1.5-r0',
-              'packageName':      'libssl3',
-              'purl':             'pkg:apk/alpine/libssl3@3.1.5-r0?arch=x86&distro=3.19.2',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2024/09/03/4',
-                'https://access.redhat.com/errata/RHSA-2024:8935',
-                'https://access.redhat.com/security/cve/CVE-2024-6119',
-                'https://bugzilla.redhat.com/2306158',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2306158',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-6119',
-                'https://errata.almalinux.org/9/ALSA-2024-8935.html',
-                'https://errata.rockylinux.org/RLSA-2024:6783',
-                'https://github.com/openssl/openssl/commit/05f360d9e849a1b277db628f1f13083a7f8dd04f',
-                'https://github.com/openssl/openssl/commit/06d1dc3fa96a2ba5a3e22735a033012aadc9f0d6',
-                'https://github.com/openssl/openssl/commit/621f3729831b05ee828a3203eddb621d014ff2b2',
-                'https://github.com/openssl/openssl/commit/7dfcee2cd2a63b2c64b9b4b0850be64cb695b0a0',
-                'https://github.com/openssl/openssl/security/advisories/GHSA-5qrj-vq78-58fj',
-                'https://linux.oracle.com/cve/CVE-2024-6119.html',
-                'https://linux.oracle.com/errata/ELSA-2024-8935.html',
-                'https://lists.freebsd.org/archives/freebsd-security/2024-September/000303.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2024-6119',
-                'https://openssl-library.org/news/secadv/20240903.txt',
-                'https://security.netapp.com/advisory/ntap-20240912-0001/',
-                'https://ubuntu.com/security/notices/USN-6986-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2024-6119'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: Possible denial of service in X.509 name checks'
-            },
-            {
-              'cve':  'CVE-2024-13176',
-              'cvss': {
-                'redhat': {
-                  'v3score':  '4.7',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-385'
-              ],
-              'description':   'Issue summary: A timing side-channel which could potentially allow recovering\nthe private key exists in the ECDSA signature computation.\n\nImpact summary: A timing side-channel in ECDSA signature computations\ncould allow recovering the private key by an attacker. However, measuring\nthe timing would require either local access to the signing application or\na very fast network connection with low latency.\n\nThere is a timing signal of around 300 nanoseconds when the top word of\nthe inverted ECDSA nonce value is zero. This can happen with significant\nprobability only for some of the supported elliptic curves. In particular\nthe NIST P-521 curve is affected. To be able to measure this leak, the attacker\nprocess must either be located in the same physical computer or must\nhave a very fast network connection with low latency. For that reason\nthe severity of this vulnerability is Low.\n\nThe FIPS modules in 3.4, 3.3, 3.2, 3.1 and 3.0 are affected by this issue.',
-              'diffID':        'sha256:6c2d7c7ca1d86ef4d53b1dd62b130b2c9bae1bb1f655263265b9cf97a239005c',
-              'fixedVersions': [
-                '3.1.8-r0'
-              ],
-              'installedVersion': '3.1.5-r0',
-              'packageName':      'libssl3',
-              'purl':             'pkg:apk/alpine/libssl3@3.1.5-r0?arch=x86&distro=3.19.2',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2025/01/20/2',
-                'https://access.redhat.com/errata/RHSA-2025:16046',
-                'https://access.redhat.com/security/cve/CVE-2024-13176',
-                'https://bugzilla.redhat.com/2359885',
-                'https://bugzilla.redhat.com/2359888',
-                'https://bugzilla.redhat.com/2359892',
-                'https://bugzilla.redhat.com/2359894',
-                'https://bugzilla.redhat.com/2359895',
-                'https://bugzilla.redhat.com/2359899',
-                'https://bugzilla.redhat.com/2359900',
-                'https://bugzilla.redhat.com/2359902',
-                'https://bugzilla.redhat.com/2359903',
-                'https://bugzilla.redhat.com/2359911',
-                'https://bugzilla.redhat.com/2359918',
-                'https://bugzilla.redhat.com/2359920',
-                'https://bugzilla.redhat.com/2359924',
-                'https://bugzilla.redhat.com/2359928',
-                'https://bugzilla.redhat.com/2359930',
-                'https://bugzilla.redhat.com/2359932',
-                'https://bugzilla.redhat.com/2359934',
-                'https://bugzilla.redhat.com/2359938',
-                'https://bugzilla.redhat.com/2359940',
-                'https://bugzilla.redhat.com/2359943',
-                'https://bugzilla.redhat.com/2359944',
-                'https://bugzilla.redhat.com/2359945',
-                'https://bugzilla.redhat.com/2359947',
-                'https://bugzilla.redhat.com/2359950',
-                'https://bugzilla.redhat.com/2359963',
-                'https://bugzilla.redhat.com/2359964',
-                'https://bugzilla.redhat.com/2359972',
-                'https://bugzilla.redhat.com/2370920',
-                'https://bugzilla.redhat.com/2380264',
-                'https://bugzilla.redhat.com/2380273',
-                'https://bugzilla.redhat.com/2380274',
-                'https://bugzilla.redhat.com/2380278',
-                'https://bugzilla.redhat.com/2380280',
-                'https://bugzilla.redhat.com/2380283',
-                'https://bugzilla.redhat.com/2380284',
-                'https://bugzilla.redhat.com/2380290',
-                'https://bugzilla.redhat.com/2380291',
-                'https://bugzilla.redhat.com/2380295',
-                'https://bugzilla.redhat.com/2380298',
-                'https://bugzilla.redhat.com/2380306',
-                'https://bugzilla.redhat.com/2380308',
-                'https://bugzilla.redhat.com/2380309',
-                'https://bugzilla.redhat.com/2380310',
-                'https://bugzilla.redhat.com/2380312',
-                'https://bugzilla.redhat.com/2380313',
-                'https://bugzilla.redhat.com/2380320',
-                'https://bugzilla.redhat.com/2380321',
-                'https://bugzilla.redhat.com/2380322',
-                'https://bugzilla.redhat.com/2380326',
-                'https://bugzilla.redhat.com/2380327',
-                'https://bugzilla.redhat.com/2380334',
-                'https://bugzilla.redhat.com/2380335',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2338999',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359885',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359888',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359892',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359894',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359895',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359899',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359900',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359902',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359903',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359911',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359918',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359920',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359924',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359928',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359930',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359932',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359934',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359938',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359940',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359943',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359944',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359945',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359947',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359950',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359963',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359964',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359972',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2370920',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380264',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380273',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380274',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380278',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380280',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380283',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380284',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380290',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380291',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380295',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380298',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380306',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380308',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380309',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380310',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380312',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380313',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380320',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380321',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380322',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380326',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380327',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380334',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380335',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-13176',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21574',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21575',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21577',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21579',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21580',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21581',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21584',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21585',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21588',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30681',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30682',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30683',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30684',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30685',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30687',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30688',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30689',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30693',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30695',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30696',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30699',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30703',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30704',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30705',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30715',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30721',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30722',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50077',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50078',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50079',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50080',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50081',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50082',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50083',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50084',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50085',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50086',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50087',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50088',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50091',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50092',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50093',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50094',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50096',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50097',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50098',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50099',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50100',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50101',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50102',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50104',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-5399',
-                'https://errata.almalinux.org/9/ALSA-2025-16046.html',
-                'https://errata.rockylinux.org/RLSA-2025:15699',
-                'https://github.com/openssl/openssl/commit/07272b05b04836a762b4baa874958af51d513844',
-                'https://github.com/openssl/openssl/commit/2af62e74fb59bc469506bc37eb2990ea408d9467',
-                'https://github.com/openssl/openssl/commit/392dcb336405a0c94486aa6655057f59fd3a0902',
-                'https://github.com/openssl/openssl/commit/4b1cb94a734a7d4ec363ac0a215a25c181e11f65',
-                'https://github.com/openssl/openssl/commit/77c608f4c8857e63e98e66444e2e761c9627916f',
-                'https://github.openssl.org/openssl/extended-releases/commit/0d5fd1ab987f7571e2c955d8d8b638fc0fb54ded',
-                'https://github.openssl.org/openssl/extended-releases/commit/a2639000db19878d5d89586ae7b725080592ae86',
-                'https://linux.oracle.com/cve/CVE-2024-13176.html',
-                'https://linux.oracle.com/errata/ELSA-2025-16046.html',
-                'https://lists.debian.org/debian-lts-announce/2025/05/msg00028.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2024-13176',
-                'https://openssl-library.org/news/secadv/20250120.txt',
-                'https://security.netapp.com/advisory/ntap-20250124-0005/',
-                'https://security.netapp.com/advisory/ntap-20250418-0010/',
-                'https://security.netapp.com/advisory/ntap-20250502-0006/',
-                'https://ubuntu.com/security/notices/USN-7264-1',
-                'https://ubuntu.com/security/notices/USN-7278-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2024-13176',
-                'https://www.oracle.com/security-alerts/cpuapr2025.html#AppendixMSQL'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: Timing side-channel in ECDSA signature computation'
-            },
-            {
-              'cve':  'CVE-2024-4741',
-              'cvss': {
-                'redhat': {
-                  'v3score':  '5.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   'Issue summary: Calling the OpenSSL API function SSL_free_buffers may cause\nmemory to be accessed that was previously freed in some situations\n\nImpact summary: A use after free can have a range of potential consequences such\nas the corruption of valid data, crashes or execution of arbitrary code.\nHowever, only applications that directly call the SSL_free_buffers function are\naffected by this issue. Applications that do not call this function are not\nvulnerable. Our investigations indicate that this function is rarely used by\napplications.\n\nThe SSL_free_buffers function is used to free the internal OpenSSL buffer used\nwhen processing an incoming record from the network. The call is only expected\nto succeed if the buffer is not currently in use. However, two scenarios have\nbeen identified where the buffer is freed even when still in use.\n\nThe first scenario occurs where a record header has been received from the\nnetwork and processed by OpenSSL, but the full record body has not yet arrived.\nIn this case calling SSL_free_buffers will succeed even though a record has only\nbeen partially processed and the buffer is still in use.\n\nThe second scenario occurs where a full record containing application data has\nbeen received and processed by OpenSSL but the application has only read part of\nthis data. Again a call to SSL_free_buffers will succeed even though the buffer\nis still in use.\n\nWhile these scenarios could occur accidentally during normal operation a\nmalicious attacker could attempt to engineer a stituation where this occurs.\nWe are not aware of this issue being actively exploited.\n\nThe FIPS modules in 3.3, 3.2, 3.1 and 3.0 are not affected by this issue.',
-              'diffID':        'sha256:6c2d7c7ca1d86ef4d53b1dd62b130b2c9bae1bb1f655263265b9cf97a239005c',
-              'fixedVersions': [
-                '3.1.6-r0'
-              ],
-              'installedVersion': '3.1.5-r0',
-              'packageName':      'libssl3',
-              'purl':             'pkg:apk/alpine/libssl3@3.1.5-r0?arch=x86&distro=3.19.2',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2024:9333',
-                'https://access.redhat.com/security/cve/CVE-2024-4741',
-                'https://bugzilla.redhat.com/2274020',
-                'https://bugzilla.redhat.com/2281029',
-                'https://bugzilla.redhat.com/2283757',
-                'https://bugzilla.redhat.com/2294581',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2274020',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2281029',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2283757',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2294581',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-2511',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-4603',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-4741',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-5535',
-                'https://errata.almalinux.org/9/ALSA-2024-9333.html',
-                'https://errata.rockylinux.org/RLSA-2024:9333',
-                'https://github.com/openssl/openssl/commit/704f725b96aa373ee45ecfb23f6abfe8be8d9177',
-                'https://github.com/openssl/openssl/commit/b3f0eb0a295f58f16ba43ba99dad70d4ee5c437d',
-                'https://github.com/openssl/openssl/commit/c88c3de51020c37e8706bf7a682a162593053aac',
-                'https://github.com/openssl/openssl/commit/e5093133c35ca82874ad83697af76f4b0f7e3bd8',
-                'https://github.openssl.org/openssl/extended-releases/commit/f7a045f3143fc6da2ee66bf52d8df04829590dd4',
-                'https://linux.oracle.com/cve/CVE-2024-4741.html',
-                'https://linux.oracle.com/errata/ELSA-2024-9333.html',
-                'https://lists.debian.org/debian-lts-announce/2024/10/msg00033.html',
-                'https://lists.debian.org/debian-lts-announce/2024/11/msg00000.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2024-4741',
-                'https://security.netapp.com/advisory/ntap-20240621-0004/',
-                'https://ubuntu.com/security/notices/USN-6937-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2024-4741',
-                'https://www.openssl.org/news/secadv/20240528.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: Use After Free with SSL_free_buffers'
-            },
-            {
-              'cve':  'CVE-2024-5535',
-              'cvss': {
-                'redhat': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-125'
-              ],
-              'description':   'Issue summary: Calling the OpenSSL API function SSL_select_next_proto with an\nempty supported client protocols buffer may cause a crash or memory contents to\nbe sent to the peer.\n\nImpact summary: A buffer overread can have a range of potential consequences\nsuch as unexpected application beahviour or a crash. In particular this issue\ncould result in up to 255 bytes of arbitrary private data from memory being sent\nto the peer leading to a loss of confidentiality. However, only applications\nthat directly call the SSL_select_next_proto function with a 0 length list of\nsupported client protocols are affected by this issue. This would normally never\nbe a valid scenario and is typically not under attacker control but may occur by\naccident in the case of a configuration or programming error in the calling\napplication.\n\nThe OpenSSL API function SSL_select_next_proto is typically used by TLS\napplications that support ALPN (Application Layer Protocol Negotiation) or NPN\n(Next Protocol Negotiation). NPN is older, was never standardised and\nis deprecated in favour of ALPN. We believe that ALPN is significantly more\nwidely deployed than NPN. The SSL_select_next_proto function accepts a list of\nprotocols from the server and a list of protocols from the client and returns\nthe first protocol that appears in the server list that also appears in the\nclient list. In the case of no overlap between the two lists it returns the\nfirst item in the client list. In either case it will signal whether an overlap\nbetween the two lists was found. In the case where SSL_select_next_proto is\ncalled with a zero length client list it fails to notice this condition and\nreturns the memory immediately following the client list pointer (and reports\nthat there was no overlap in the lists).\n\nThis function is typically called from a server side application callback for\nALPN or a client side application callback for NPN. In the case of ALPN the list\nof protocols supplied by the client is guaranteed by libssl to never be zero in\nlength. The list of server protocols comes from the application and should never\nnormally be expected to be of zero length. In this case if the\nSSL_select_next_proto function has been called as expected (with the list\nsupplied by the client passed in the client/client_len parameters), then the\napplication will not be vulnerable to this issue. If the application has\naccidentally been configured with a zero length server list, and has\naccidentally passed that zero length server list in the client/client_len\nparameters, and has additionally failed to correctly handle a "no overlap"\nresponse (which would normally result in a handshake failure in ALPN) then it\nwill be vulnerable to this problem.\n\nIn the case of NPN, the protocol permits the client to opportunistically select\na protocol when there is no overlap. OpenSSL returns the first client protocol\nin the no overlap case in support of this. The list of client protocols comes\nfrom the application and should never normally be expected to be of zero length.\nHowever if the SSL_select_next_proto function is accidentally called with a\nclient_len of 0 then an invalid memory pointer will be returned instead. If the\napplication uses this output as the opportunistic protocol then the loss of\nconfidentiality will occur.\n\nThis issue has been assessed as Low severity because applications are most\nlikely to be vulnerable if they are using NPN instead of ALPN - but NPN is not\nwidely used. It also requires an application configuration or programming error.\nFinally, this issue would not typically be under attacker control making active\nexploitation unlikely.\n\nThe FIPS modules in 3.3, 3.2, 3.1 and 3.0 are not affected by this issue.\n\nDue to the low severity of this issue we are not issuing new releases of\nOpenSSL at this time. The fix will be included in the next releases when they\nbecome available.',
-              'diffID':        'sha256:6c2d7c7ca1d86ef4d53b1dd62b130b2c9bae1bb1f655263265b9cf97a239005c',
-              'fixedVersions': [
-                '3.1.6-r0'
-              ],
-              'installedVersion': '3.1.5-r0',
-              'packageName':      'libssl3',
-              'purl':             'pkg:apk/alpine/libssl3@3.1.5-r0?arch=x86&distro=3.19.2',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2024/06/27/1',
-                'http://www.openwall.com/lists/oss-security/2024/06/28/4',
-                'http://www.openwall.com/lists/oss-security/2024/08/15/1',
-                'https://access.redhat.com/errata/RHSA-2025:1671',
-                'https://access.redhat.com/security/cve/CVE-2024-5535',
-                'https://bugzilla.redhat.com/2294581',
-                'https://bugzilla.redhat.com/2294676',
-                'https://bugzilla.redhat.com/2301888',
-                'https://bugzilla.redhat.com/2318857',
-                'https://bugzilla.redhat.com/2318858',
-                'https://bugzilla.redhat.com/2318870',
-                'https://bugzilla.redhat.com/2318873',
-                'https://bugzilla.redhat.com/2318874',
-                'https://bugzilla.redhat.com/2318876',
-                'https://bugzilla.redhat.com/2318882',
-                'https://bugzilla.redhat.com/2318883',
-                'https://bugzilla.redhat.com/2318884',
-                'https://bugzilla.redhat.com/2318885',
-                'https://bugzilla.redhat.com/2318886',
-                'https://bugzilla.redhat.com/2318897',
-                'https://bugzilla.redhat.com/2318900',
-                'https://bugzilla.redhat.com/2318905',
-                'https://bugzilla.redhat.com/2318914',
-                'https://bugzilla.redhat.com/2318922',
-                'https://bugzilla.redhat.com/2318923',
-                'https://bugzilla.redhat.com/2318925',
-                'https://bugzilla.redhat.com/2318926',
-                'https://bugzilla.redhat.com/2318927',
-                'https://bugzilla.redhat.com/2331191',
-                'https://bugzilla.redhat.com/2339218',
-                'https://bugzilla.redhat.com/2339220',
-                'https://bugzilla.redhat.com/2339221',
-                'https://bugzilla.redhat.com/2339226',
-                'https://bugzilla.redhat.com/2339231',
-                'https://bugzilla.redhat.com/2339236',
-                'https://bugzilla.redhat.com/2339238',
-                'https://bugzilla.redhat.com/2339243',
-                'https://bugzilla.redhat.com/2339247',
-                'https://bugzilla.redhat.com/2339252',
-                'https://bugzilla.redhat.com/2339259',
-                'https://bugzilla.redhat.com/2339266',
-                'https://bugzilla.redhat.com/2339270',
-                'https://bugzilla.redhat.com/2339271',
-                'https://bugzilla.redhat.com/2339275',
-                'https://bugzilla.redhat.com/2339277',
-                'https://bugzilla.redhat.com/2339281',
-                'https://bugzilla.redhat.com/2339284',
-                'https://bugzilla.redhat.com/2339291',
-                'https://bugzilla.redhat.com/2339293',
-                'https://bugzilla.redhat.com/2339295',
-                'https://bugzilla.redhat.com/2339299',
-                'https://bugzilla.redhat.com/2339300',
-                'https://bugzilla.redhat.com/2339304',
-                'https://bugzilla.redhat.com/2339305',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2274020',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2281029',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2283757',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2294581',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-2511',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-4603',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-4741',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-5535',
-                'https://errata.almalinux.org/9/ALSA-2025-1671.html',
-                'https://errata.rockylinux.org/RLSA-2024:9333',
-                'https://github.com/openssl/openssl/commit/4ada436a1946cbb24db5ab4ca082b69c1bc10f37',
-                'https://github.com/openssl/openssl/commit/99fb785a5f85315b95288921a321a935ea29a51e',
-                'https://github.com/openssl/openssl/commit/cf6f91f6121f4db167405db2f0de410a456f260c',
-                'https://github.com/openssl/openssl/commit/e86ac436f0bd54d4517745483e2315650fae7b2c',
-                'https://github.openssl.org/openssl/extended-releases/commit/9947251413065a05189a63c9b7a6c1d4e224c21c',
-                'https://github.openssl.org/openssl/extended-releases/commit/b78ec0824da857223486660177d3b1f255c65d87',
-                'https://linux.oracle.com/cve/CVE-2024-5535.html',
-                'https://linux.oracle.com/errata/ELSA-2025-1673.html',
-                'https://lists.debian.org/debian-lts-announce/2024/10/msg00033.html',
-                'https://lists.debian.org/debian-lts-announce/2024/11/msg00000.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2024-5535',
-                'https://openssl.org/news/secadv/20240627.txt',
-                'https://security.netapp.com/advisory/ntap-20240712-0005/',
-                'https://security.netapp.com/advisory/ntap-20241025-0006/',
-                'https://security.netapp.com/advisory/ntap-20241025-0010/',
-                'https://ubuntu.com/security/notices/USN-6937-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2024-5535',
-                'https://www.openssl.org/news/secadv/20240627.txt',
-                'https://www.oracle.com/security-alerts/cpuoct2024.html#AppendixMSQL'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: SSL_select_next_proto buffer overread'
-            },
-            {
-              'cve':  'CVE-2025-9230',
-              'cvss': {
-                'redhat': {
-                  'v3score':  '5.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L'
-                }
-              },
-              'cwes': [
-                'CWE-125',
-                'CWE-787'
-              ],
-              'description':   'Issue summary: An application trying to decrypt CMS messages encrypted using\npassword based encryption can trigger an out-of-bounds read and write.\n\nImpact summary: This out-of-bounds read may trigger a crash which leads to\nDenial of Service for an application. The out-of-bounds write can cause\na memory corruption which can have various consequences including\na Denial of Service or Execution of attacker-supplied code.\n\nAlthough the consequences of a successful exploit of this vulnerability\ncould be severe, the probability that the attacker would be able to\nperform it is low. Besides, password based (PWRI) encryption support in CMS\nmessages is very rarely used. For that reason the issue was assessed as\nModerate severity according to our Security Policy.\n\nThe FIPS modules in 3.5, 3.4, 3.3, 3.2, 3.1 and 3.0 are not affected by this\nissue, as the CMS implementation is outside the OpenSSL FIPS module\nboundary.',
-              'diffID':        'sha256:6c2d7c7ca1d86ef4d53b1dd62b130b2c9bae1bb1f655263265b9cf97a239005c',
-              'fixedVersions': [
-                '3.1.8-r1'
-              ],
-              'installedVersion': '3.1.5-r0',
-              'packageName':      'libssl3',
-              'purl':             'pkg:apk/alpine/libssl3@3.1.5-r0?arch=x86&distro=3.19.2',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2025/09/30/5',
-                'https://access.redhat.com/errata/RHSA-2025:21255',
-                'https://access.redhat.com/security/cve/CVE-2025-9230',
-                'https://bugzilla.redhat.com/2396054',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2396054',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-9230',
-                'https://errata.almalinux.org/9/ALSA-2025-21255.html',
-                'https://errata.rockylinux.org/RLSA-2025:21255',
-                'https://github.com/openssl/openssl/commit/5965ea5dd6960f36d8b7f74f8eac67a8eb8f2b45',
-                'https://github.com/openssl/openssl/commit/9e91358f365dee6c446dcdcdb01c04d2743fd280',
-                'https://github.com/openssl/openssl/commit/a79c4ce559c6a3a8fd4109e9f33c1185d5bf2def',
-                'https://github.com/openssl/openssl/commit/b5282d677551afda7d20e9c00e09561b547b2dfd',
-                'https://github.com/openssl/openssl/commit/bae259a211ada6315dc50900686daaaaaa55f482',
-                'https://github.openssl.org/openssl/extended-releases/commit/c2b96348bfa662f25f4fabf81958ae822063dae3',
-                'https://github.openssl.org/openssl/extended-releases/commit/dfbaf161d8dafc1132dd88cd48ad990ed9b4c8ba',
-                'https://linux.oracle.com/cve/CVE-2025-9230.html',
-                'https://linux.oracle.com/errata/ELSA-2026-0337.html',
-                'https://lists.debian.org/debian-lts-announce/2025/10/msg00001.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2025-9230',
-                'https://openssl-library.org/news/secadv/20250930.txt',
-                'https://ubuntu.com/security/notices/USN-7786-1',
-                'https://www.cve.org/CVERecord?id=CVE-2025-9230'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: Out-of-bounds read & write in RFC 3211 KEK Unwrap'
-            },
-            {
-              'cve':  'CVE-2024-9143',
-              'cvss': {
-                'redhat': {
-                  'v3score':  '3.7',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L'
-                }
-              },
-              'cwes': [
-                'CWE-125',
-                'CWE-787'
-              ],
-              'description':   "Issue summary: Use of the low-level GF(2^m) elliptic curve APIs with untrusted\nexplicit values for the field polynomial can lead to out-of-bounds memory reads\nor writes.\n\nImpact summary: Out of bound memory writes can lead to an application crash or\neven a possibility of a remote code execution, however, in all the protocols\ninvolving Elliptic Curve Cryptography that we're aware of, either only \"named\ncurves\" are supported, or, if explicit curve parameters are supported, they\nspecify an X9.62 encoding of binary (GF(2^m)) curves that can't represent\nproblematic input values. Thus the likelihood of existence of a vulnerable\napplication is low.\n\nIn particular, the X9.62 encoding is used for ECC keys in X.509 certificates,\nso problematic inputs cannot occur in the context of processing X.509\ncertificates.  Any problematic use-cases would have to be using an \"exotic\"\ncurve encoding.\n\nThe affected APIs include: EC_GROUP_new_curve_GF2m(), EC_GROUP_new_from_params(),\nand various supporting BN_GF2m_*() functions.\n\nApplications working with \"exotic\" explicit binary (GF(2^m)) curve parameters,\nthat make it possible to represent invalid field polynomials with a zero\nconstant term, via the above or similar APIs, may terminate abruptly as a\nresult of reading or writing outside of array bounds.  Remote code execution\ncannot easily be ruled out.\n\nThe FIPS modules in 3.3, 3.2, 3.1 and 3.0 are not affected by this issue.",
-              'diffID':        'sha256:6c2d7c7ca1d86ef4d53b1dd62b130b2c9bae1bb1f655263265b9cf97a239005c',
-              'fixedVersions': [
-                '3.1.7-r1'
-              ],
-              'installedVersion': '3.1.5-r0',
-              'packageName':      'libssl3',
-              'purl':             'pkg:apk/alpine/libssl3@3.1.5-r0?arch=x86&distro=3.19.2',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2024/10/16/1',
-                'http://www.openwall.com/lists/oss-security/2024/10/23/1',
-                'http://www.openwall.com/lists/oss-security/2024/10/24/1',
-                'https://access.redhat.com/security/cve/CVE-2024-9143',
-                'https://github.com/openssl/openssl/commit/72ae83ad214d2eef262461365a1975707f862712',
-                'https://github.com/openssl/openssl/commit/bc7e04d7c8d509fb78fc0e285aa948fb0da04700',
-                'https://github.com/openssl/openssl/commit/c0d3e4d32d2805f49bec30547f225bc4d092e1f4',
-                'https://github.com/openssl/openssl/commit/fdf6723362ca51bd883295efe206cb5b1cfa5154',
-                'https://github.openssl.org/openssl/extended-releases/commit/8efc0cbaa8ebba8e116f7b81a876a4123594d86a',
-                'https://github.openssl.org/openssl/extended-releases/commit/9d576994cec2b7aa37a91740ea7e680810957e41',
-                'https://lists.debian.org/debian-lts-announce/2024/10/msg00033.html',
-                'https://lists.debian.org/debian-lts-announce/2024/11/msg00000.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2024-9143',
-                'https://openssl-library.org/news/secadv/20241016.txt',
-                'https://security.netapp.com/advisory/ntap-20241101-0001/',
-                'https://ubuntu.com/security/notices/USN-7264-1',
-                'https://ubuntu.com/security/notices/USN-7278-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2024-9143'
-              ],
-              'severity':   'LOW',
-              'suppressed': false,
-              'title':      'openssl: Low-level invalid GF(2^m) parameters lead to OOB memory access'
-            },
-            {
-              'cve':  'CVE-2025-9232',
-              'cvss': {
-                'redhat': {
-                  'v3score':  '3.1',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L'
-                }
-              },
-              'cwes': [
-                'CWE-125'
-              ],
-              'description':   "Issue summary: An application using the OpenSSL HTTP client API functions may\ntrigger an out-of-bounds read if the 'no_proxy' environment variable is set and\nthe host portion of the authority component of the HTTP URL is an IPv6 address.\n\nImpact summary: An out-of-bounds read can trigger a crash which leads to\nDenial of Service for an application.\n\nThe OpenSSL HTTP client API functions can be used directly by applications\nbut they are also used by the OCSP client functions and CMP (Certificate\nManagement Protocol) client implementation in OpenSSL. However the URLs used\nby these implementations are unlikely to be controlled by an attacker.\n\nIn this vulnerable code the out of bounds read can only trigger a crash.\nFurthermore the vulnerability requires an attacker-controlled URL to be\npassed from an application to the OpenSSL function and the user has to have\na 'no_proxy' environment variable set. For the aforementioned reasons the\nissue was assessed as Low severity.\n\nThe vulnerable code was introduced in the following patch releases:\n3.0.16, 3.1.8, 3.2.4, 3.3.3, 3.4.0 and 3.5.0.\n\nThe FIPS modules in 3.5, 3.4, 3.3, 3.2, 3.1 and 3.0 are not affected by this\nissue, as the HTTP client implementation is outside the OpenSSL FIPS module\nboundary.",
-              'diffID':        'sha256:6c2d7c7ca1d86ef4d53b1dd62b130b2c9bae1bb1f655263265b9cf97a239005c',
-              'fixedVersions': [
-                '3.1.8-r1'
-              ],
-              'installedVersion': '3.1.5-r0',
-              'packageName':      'libssl3',
-              'purl':             'pkg:apk/alpine/libssl3@3.1.5-r0?arch=x86&distro=3.19.2',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2025/09/30/5',
-                'https://access.redhat.com/security/cve/CVE-2025-9232',
-                'https://github.com/openssl/openssl/commit/2b4ec20e47959170422922eaff25346d362dcb35',
-                'https://github.com/openssl/openssl/commit/654dc11d23468a74fc8ea4672b702dd3feb7be4b',
-                'https://github.com/openssl/openssl/commit/7cf21a30513c9e43c4bc3836c237cf086e194af3',
-                'https://github.com/openssl/openssl/commit/89e790ac431125a4849992858490bed6b225eadf',
-                'https://github.com/openssl/openssl/commit/bbf38c034cdabd0a13330abcc4855c866f53d2e0',
-                'https://nvd.nist.gov/vuln/detail/CVE-2025-9232',
-                'https://openssl-library.org/news/secadv/20250930.txt',
-                'https://ubuntu.com/security/notices/USN-7786-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2025-9232'
-              ],
-              'severity':   'LOW',
-              'suppressed': false,
-              'title':      'openssl: Out-of-bounds read in HTTP client no_proxy handling'
-            },
-            {
-              'cve':  'CVE-2025-26519',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-787'
-              ],
-              'description':   'musl libc 0.9.13 through 1.2.5 before 1.2.6 has an out-of-bounds write vulnerability when an attacker can trigger iconv conversion of untrusted EUC-KR text to UTF-8.',
-              'diffID':        'sha256:6c2d7c7ca1d86ef4d53b1dd62b130b2c9bae1bb1f655263265b9cf97a239005c',
-              'fixedVersions': [
-                '1.2.4_git20230717-r5'
-              ],
-              'installedVersion': '1.2.4_git20230717-r4',
-              'packageName':      'musl',
-              'purl':             'pkg:apk/alpine/musl@1.2.4_git20230717-r4?arch=x86&distro=3.19.2',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2025/02/13/2',
-                'http://www.openwall.com/lists/oss-security/2025/02/13/3',
-                'http://www.openwall.com/lists/oss-security/2025/02/13/4',
-                'http://www.openwall.com/lists/oss-security/2025/02/13/5',
-                'http://www.openwall.com/lists/oss-security/2025/02/14/5',
-                'http://www.openwall.com/lists/oss-security/2025/02/14/6',
-                'https://git.musl-libc.org/cgit/musl/commit/?id=c47ad25ea3b484e10326f933e927c0bc8cded3da',
-                'https://git.musl-libc.org/cgit/musl/commit/?id=e5adcd97b5196e29991b524237381a0202a60659',
-                'https://www.openwall.com/lists/oss-security/2025/02/13/2'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'musl libc 0.9.13 through 1.2.5 before 1.2.6 has an out-of-bounds write ...'
-            },
-            {
-              'cve':  'CVE-2025-26519',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-787'
-              ],
-              'description':   'musl libc 0.9.13 through 1.2.5 before 1.2.6 has an out-of-bounds write vulnerability when an attacker can trigger iconv conversion of untrusted EUC-KR text to UTF-8.',
-              'diffID':        'sha256:6c2d7c7ca1d86ef4d53b1dd62b130b2c9bae1bb1f655263265b9cf97a239005c',
-              'fixedVersions': [
-                '1.2.4_git20230717-r5'
-              ],
-              'installedVersion': '1.2.4_git20230717-r4',
-              'packageName':      'musl-utils',
-              'purl':             'pkg:apk/alpine/musl-utils@1.2.4_git20230717-r4?arch=x86&distro=3.19.2',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2025/02/13/2',
-                'http://www.openwall.com/lists/oss-security/2025/02/13/3',
-                'http://www.openwall.com/lists/oss-security/2025/02/13/4',
-                'http://www.openwall.com/lists/oss-security/2025/02/13/5',
-                'http://www.openwall.com/lists/oss-security/2025/02/14/5',
-                'http://www.openwall.com/lists/oss-security/2025/02/14/6',
-                'https://git.musl-libc.org/cgit/musl/commit/?id=c47ad25ea3b484e10326f933e927c0bc8cded3da',
-                'https://git.musl-libc.org/cgit/musl/commit/?id=e5adcd97b5196e29991b524237381a0202a60659',
-                'https://www.openwall.com/lists/oss-security/2025/02/13/2'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'musl libc 0.9.13 through 1.2.5 before 1.2.6 has an out-of-bounds write ...'
-            },
-            {
-              'cve':  'CVE-2024-58251',
-              'cwes': [
-                'CWE-150'
-              ],
-              'description':   'In netstat in BusyBox through 1.37.0, local users can launch of network application with an argv[0] containing an ANSI terminal escape sequence, leading to a denial of service (terminal locked up) when netstat is used by a victim.',
-              'diffID':        'sha256:6c2d7c7ca1d86ef4d53b1dd62b130b2c9bae1bb1f655263265b9cf97a239005c',
-              'fixedVersions': [
-                '1.36.1-r21'
-              ],
-              'installedVersion': '1.36.1-r19',
-              'packageName':      'ssl_client',
-              'purl':             'pkg:apk/alpine/ssl_client@1.36.1-r19?arch=x86&distro=3.19.2',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2025/04/23/6',
-                'https://bugs.busybox.net/show_bug.cgi?id=15922',
-                'https://www.busybox.net',
-                'https://www.busybox.net/downloads/',
-                'https://www.cve.org/CVERecord?id=CVE-2024-58251'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'In netstat in BusyBox through 1.37.0, local users can launch of networ ...'
-            },
-            {
-              'cve':  'CVE-2025-46394',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '3.3',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-451'
-              ],
-              'description':   'In tar in BusyBox through 1.37.0, a TAR archive can have filenames hidden from a listing through the use of terminal escape sequences.',
-              'diffID':        'sha256:6c2d7c7ca1d86ef4d53b1dd62b130b2c9bae1bb1f655263265b9cf97a239005c',
-              'fixedVersions': [
-                '1.36.1-r21'
-              ],
-              'installedVersion': '1.36.1-r19',
-              'packageName':      'ssl_client',
-              'purl':             'pkg:apk/alpine/ssl_client@1.36.1-r19?arch=x86&distro=3.19.2',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2025/04/23/5',
-                'http://www.openwall.com/lists/oss-security/2025/04/24/3',
-                'https://bugs.busybox.net/show_bug.cgi?id=16018',
-                'https://lists.busybox.net/pipermail/busybox/2024-July/090806.html',
-                'https://lists.busybox.net/pipermail/busybox/2024-July/090814.html',
-                'https://www.busybox.net',
-                'https://www.busybox.net/downloads/',
-                'https://www.cve.org/CVERecord?id=CVE-2025-46394',
-                'https://www.openwall.com/lists/oss-security/2025/04/23/1'
-              ],
-              'severity':   'LOW',
-              'suppressed': false,
-              'title':      'In tar in BusyBox through 1.37.0, a TAR archive can have filenames hid ...'
-            }
-          ]
-        }
-      ],
-      'summary': {
-        'critical':   0,
-        'high':       4,
-        'low':        7,
-        'medium':     11,
-        'suppressed': 0,
-        'unknown':    0
-      }
-    }
-  },
-  {
-    'id':    'default/0c687c3d66f379f40a5196f216524a3c4bfaa836c020f9f5cc969c51fe20da5c',
-    'type':  'storage.sbomscanner.kubewarden.io.vulnerabilityreport',
-    'links': {
-      'patch':  'https://localhost:8005/v1/storage.sbomscanner.kubewarden.io.vulnerabilityreports/default/0c687c3d66f379f40a5196f216524a3c4bfaa836c020f9f5cc969c51fe20da5c',
-      'remove': 'https://localhost:8005/v1/storage.sbomscanner.kubewarden.io.vulnerabilityreports/default/0c687c3d66f379f40a5196f216524a3c4bfaa836c020f9f5cc969c51fe20da5c',
-      'self':   'https://localhost:8005/v1/storage.sbomscanner.kubewarden.io.vulnerabilityreports/default/0c687c3d66f379f40a5196f216524a3c4bfaa836c020f9f5cc969c51fe20da5c',
-      'update': 'https://localhost:8005/v1/storage.sbomscanner.kubewarden.io.vulnerabilityreports/default/0c687c3d66f379f40a5196f216524a3c4bfaa836c020f9f5cc969c51fe20da5c',
-      'view':   'https://localhost:8005/apis/storage.sbomscanner.kubewarden.io/v1alpha1/namespaces/default/vulnerabilityreports/0c687c3d66f379f40a5196f216524a3c4bfaa836c020f9f5cc969c51fe20da5c'
-    },
-    'apiVersion':    'storage.sbomscanner.kubewarden.io/v1alpha1',
-    'imageMetadata': {
-      'digest':      'sha256:8f482337efb630a6ee083da36af420c3ca7198aa4b2f159983da32f164d3f9bd',
-      'platform':    'linux/amd64',
-      'registry':    'demo-02',
-      'registryURI': 'ghcr.io',
-      'repository':  'linuxcontainers/alpine',
-      'tag':         '3.14.6'
-    },
-    'kind':     'VulnerabilityReport',
-    'metadata': {
-      'creationTimestamp': '2026-01-09T22:45:53Z',
-      'fields':            [
-        '0c687c3d66f379f40a5196f216524a3c4bfaa836c020f9f5cc969c51fe20da5c',
-        'ghcr.io/linuxcontainers/alpine:3.14.6',
-        'linux/amd64',
-        '15 (0 suppressed)'
-      ],
-      'labels': {
-        'app.kubernetes.io/managed-by':          'sbomscanner',
-        'app.kubernetes.io/part-of':             'sbomscanner',
-        'sbomscanner.kubewarden.io/scanjob-uid': '42184d01-4b15-466f-98aa-e802d1b6b6b8'
-      },
-      'name':            '0c687c3d66f379f40a5196f216524a3c4bfaa836c020f9f5cc969c51fe20da5c',
-      'namespace':       'default',
-      'ownerReferences': [
-        {
-          'apiVersion':         'storage.sbomscanner.kubewarden.io/v1alpha1',
-          'blockOwnerDeletion': true,
-          'controller':         true,
-          'kind':               'SBOM',
-          'name':               '0c687c3d66f379f40a5196f216524a3c4bfaa836c020f9f5cc969c51fe20da5c',
-          'uid':                '3ee848c2-ce99-46e4-b338-9d24afde998d'
-        }
-      ],
-      'relationships': [
-        {
-          'fromId':   'default/0c687c3d66f379f40a5196f216524a3c4bfaa836c020f9f5cc969c51fe20da5c',
-          'fromType': 'storage.sbomscanner.kubewarden.io.sbom',
-          'rel':      'owner',
-          'state':    'active',
-          'message':  'Resource is current'
-        }
-      ],
-      'resourceVersion': '6',
-      'state':           {
-        'error':         false,
-        'message':       'Resource is current',
-        'name':          'active',
-        'transitioning': false
-      },
-      'uid': 'a4754e7d-b623-4ee3-9074-77200ed81e72'
-    },
-    'report': {
-      'results': [
-        {
-          'class':           'os-pkgs',
-          'target':          '/var/run/worker/trivy.sbom.2777371506.json (alpine 3.14.6)',
-          'type':            'alpine',
-          'vulnerabilities': [
-            {
-              'cve':  'CVE-2022-4450',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'nvd': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-415'
-              ],
-              'description':   'The function PEM_read_bio_ex() reads a PEM file from a BIO and parses and\ndecodes the "name" (e.g. "CERTIFICATE"), any header data and the payload data.\nIf the function succeeds then the "name_out", "header" and "data" arguments are\npopulated with pointers to buffers containing the relevant decoded data. The\ncaller is responsible for freeing those buffers. It is possible to construct a\nPEM file that results in 0 bytes of payload data. In this case PEM_read_bio_ex()\nwill return a failure code but will populate the header argument with a pointer\nto a buffer that has already been freed. If the caller also frees this buffer\nthen a double free will occur. This will most likely lead to a crash. This\ncould be exploited by an attacker who has the ability to supply malicious PEM\nfiles for parsing to achieve a denial of service attack.\n\nThe functions PEM_read_bio() and PEM_read() are simple wrappers around\nPEM_read_bio_ex() and therefore these functions are also directly affected.\n\nThese functions are also called indirectly by a number of other OpenSSL\nfunctions including PEM_X509_INFO_read_bio_ex() and\nSSL_CTX_use_serverinfo_file() which are also vulnerable. Some OpenSSL internal\nuses of these functions are not vulnerable because the caller does not free the\nheader argument if PEM_read_bio_ex() returns a failure code. These locations\ninclude the PEM_read_bio_TYPE() functions as well as the decoders introduced in\nOpenSSL 3.0.\n\nThe OpenSSL asn1parse command line application is also impacted by this issue.',
-              'diffID':        'sha256:b541d28bf3b491aeb424c61353c8c92476ecc2cd603a6c09ee5c2708f1a4b258',
-              'fixedVersions': [
-                '1.1.1t-r0'
-              ],
-              'installedVersion': '1.1.1n-r0',
-              'packageName':      'libcrypto1.1',
-              'purl':             'pkg:apk/alpine/libcrypto1.1@1.1.1n-r0?arch=x86_64&distro=3.14.6',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2023:2165',
-                'https://access.redhat.com/security/cve/CVE-2022-4450',
-                'https://bugzilla.redhat.com/1960321',
-                'https://bugzilla.redhat.com/2164440',
-                'https://bugzilla.redhat.com/2164487',
-                'https://bugzilla.redhat.com/2164492',
-                'https://bugzilla.redhat.com/2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144000',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144003',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144006',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144008',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144010',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144012',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144015',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144017',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144019',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2145170',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2158412',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164440',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164487',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164488',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164492',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164497',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164499',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164500',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4203',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4304',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4450',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0215',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0216',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0217',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0286',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0401',
-                'https://errata.almalinux.org/9/ALSA-2023-2165.html',
-                'https://errata.rockylinux.org/RLSA-2023:0946',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=63bcf189be73a9cc1264059bed6f57974be74a83',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=bbcf509bd046b34cca19c766bbddc31683d0858b',
-                'https://linux.oracle.com/cve/CVE-2022-4450.html',
-                'https://linux.oracle.com/errata/ELSA-2023-32791.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2022-4450',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0003',
-                'https://rustsec.org/advisories/RUSTSEC-2023-0010.html',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://ubuntu.com/security/notices/USN-5844-1',
-                'https://ubuntu.com/security/notices/USN-6564-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2022-4450',
-                'https://www.openssl.org/news/secadv/20230207.txt'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: double free after calling PEM_read_bio_ex'
-            },
-            {
-              'cve':  'CVE-2023-0215',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'nvd': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   'The public API function BIO_new_NDEF is a helper function used for streaming\nASN.1 data via a BIO. It is primarily used internally to OpenSSL to support the\nSMIME, CMS and PKCS7 streaming capabilities, but may also be called directly by\nend user applications.\n\nThe function receives a BIO from the caller, prepends a new BIO_f_asn1 filter\nBIO onto the front of it to form a BIO chain, and then returns the new head of\nthe BIO chain to the caller. Under certain conditions, for example if a CMS\nrecipient public key is invalid, the new filter BIO is freed and the function\nreturns a NULL result indicating a failure. However, in this case, the BIO chain\nis not properly cleaned up and the BIO passed by the caller still retains\ninternal pointers to the previously freed filter BIO. If the caller then goes on\nto call BIO_pop() on the BIO then a use-after-free will occur. This will most\nlikely result in a crash.\n\n\n\nThis scenario occurs directly in the internal function B64_write_ASN1() which\nmay cause BIO_new_NDEF() to be called and will subsequently call BIO_pop() on\nthe BIO. This internal function is in turn called by the public API functions\nPEM_write_bio_ASN1_stream, PEM_write_bio_CMS_stream, PEM_write_bio_PKCS7_stream,\nSMIME_write_ASN1, SMIME_write_CMS and SMIME_write_PKCS7.\n\nOther public API functions that may be impacted by this include\ni2d_ASN1_bio_stream, BIO_new_CMS, BIO_new_PKCS7, i2d_CMS_bio_stream and\ni2d_PKCS7_bio_stream.\n\nThe OpenSSL cms and smime command line applications are similarly affected.',
-              'diffID':        'sha256:b541d28bf3b491aeb424c61353c8c92476ecc2cd603a6c09ee5c2708f1a4b258',
-              'fixedVersions': [
-                '1.1.1t-r0'
-              ],
-              'installedVersion': '1.1.1n-r0',
-              'packageName':      'libcrypto1.1',
-              'purl':             'pkg:apk/alpine/libcrypto1.1@1.1.1n-r0?arch=x86_64&distro=3.14.6',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2023:2165',
-                'https://access.redhat.com/security/cve/CVE-2023-0215',
-                'https://bugzilla.redhat.com/1960321',
-                'https://bugzilla.redhat.com/2164440',
-                'https://bugzilla.redhat.com/2164487',
-                'https://bugzilla.redhat.com/2164492',
-                'https://bugzilla.redhat.com/2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144000',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144003',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144006',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144008',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144010',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144012',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144015',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144017',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144019',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2145170',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2158412',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164440',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164487',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164488',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164492',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164497',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164499',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164500',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4203',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4304',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4450',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0215',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0216',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0217',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0286',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0401',
-                'https://errata.almalinux.org/9/ALSA-2023-2165.html',
-                'https://errata.rockylinux.org/RLSA-2023:0946',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=8818064ce3c3c0f1b740a5aaba2a987e75bfbafd',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=9816136fe31d92ace4037d5da5257f763aeeb4eb',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=c3829dd8825c654652201e16f8a0a0c46ee3f344',
-                'https://linux.oracle.com/cve/CVE-2023-0215.html',
-                'https://linux.oracle.com/errata/ELSA-2023-32791.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-0215',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0003',
-                'https://rustsec.org/advisories/RUSTSEC-2023-0009.html',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://security.netapp.com/advisory/ntap-20230427-0007',
-                'https://security.netapp.com/advisory/ntap-20230427-0007/',
-                'https://security.netapp.com/advisory/ntap-20230427-0009',
-                'https://security.netapp.com/advisory/ntap-20230427-0009/',
-                'https://security.netapp.com/advisory/ntap-20240621-0006',
-                'https://security.netapp.com/advisory/ntap-20240621-0006/',
-                'https://ubuntu.com/security/notices/USN-5844-1',
-                'https://ubuntu.com/security/notices/USN-5845-1',
-                'https://ubuntu.com/security/notices/USN-5845-2',
-                'https://ubuntu.com/security/notices/USN-6564-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-0215',
-                'https://www.openssl.org/news/secadv/20230207.txt'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: use-after-free following BIO_new_NDEF'
-            },
-            {
-              'cve':  'CVE-2023-0286',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '7.4',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H'
-                },
-                'nvd': {
-                  'v3score':  '7.4',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.4',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-843'
-              ],
-              'description':   'There is a type confusion vulnerability relating to X.400 address processing\ninside an X.509 GeneralName. X.400 addresses were parsed as an ASN1_STRING but\nthe public structure definition for GENERAL_NAME incorrectly specified the type\nof the x400Address field as ASN1_TYPE. This field is subsequently interpreted by\nthe OpenSSL function GENERAL_NAME_cmp as an ASN1_TYPE rather than an\nASN1_STRING.\n\nWhen CRL checking is enabled (i.e. the application sets the\nX509_V_FLAG_CRL_CHECK flag), this vulnerability may allow an attacker to pass\narbitrary pointers to a memcmp call, enabling them to read memory contents or\nenact a denial of service. In most cases, the attack requires the attacker to\nprovide both the certificate chain and CRL, neither of which need to have a\nvalid signature. If the attacker only controls one of these inputs, the other\ninput must already contain an X.400 address as a CRL distribution point, which\nis uncommon. As such, this vulnerability is most likely to only affect\napplications which have implemented their own functionality for retrieving CRLs\nover a network.',
-              'diffID':        'sha256:b541d28bf3b491aeb424c61353c8c92476ecc2cd603a6c09ee5c2708f1a4b258',
-              'fixedVersions': [
-                '1.1.1t-r0'
-              ],
-              'installedVersion': '1.1.1n-r0',
-              'packageName':      'libcrypto1.1',
-              'purl':             'pkg:apk/alpine/libcrypto1.1@1.1.1n-r0?arch=x86_64&distro=3.14.6',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2025:7937',
-                'https://access.redhat.com/security/cve/CVE-2023-0286',
-                'https://access.redhat.com/security/cve/cve-2023-0286',
-                'https://bugzilla.redhat.com/2164440',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144000',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144003',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144006',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144008',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144010',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144012',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144015',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144017',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144019',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2145170',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2158412',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164440',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164487',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164488',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164492',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164497',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164499',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164500',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4203',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4304',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4450',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0215',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0216',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0217',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0286',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0401',
-                'https://errata.almalinux.org/9/ALSA-2025-7937.html',
-                'https://errata.rockylinux.org/RLSA-2023:0946',
-                'https://ftp.openbsd.org/pub/OpenBSD/LibreSSL/libressl-3.6.2-relnotes.txt',
-                'https://ftp.openbsd.org/pub/OpenBSD/patches/7.2/common/018_x509.patch.sig',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=2c6c9d439b484e1ba9830d8454a34fa4f80fdfe9',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=2f7530077e0ef79d98718138716bc51ca0cad658',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=fd2af07dc083a350c959147097003a14a5e8ac4d',
-                'https://github.com/pyca/cryptography',
-                'https://github.com/pyca/cryptography/security/advisories/GHSA-x4qr-2fvf-3mr5',
-                'https://linux.oracle.com/cve/CVE-2023-0286.html',
-                'https://linux.oracle.com/errata/ELSA-2025-7937.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-0286',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0003',
-                'https://rustsec.org/advisories/RUSTSEC-2023-0006.html',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://ubuntu.com/security/notices/USN-5844-1',
-                'https://ubuntu.com/security/notices/USN-5845-1',
-                'https://ubuntu.com/security/notices/USN-5845-2',
-                'https://ubuntu.com/security/notices/USN-6564-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-0286',
-                'https://www.openssl.org/news/secadv/20230207.txt'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: X.400 address type confusion in X.509 GeneralName'
-            },
-            {
-              'cve':  'CVE-2023-0464',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-295'
-              ],
-              'description':   "A security vulnerability has been identified in all supported versions\n\nof OpenSSL related to the verification of X.509 certificate chains\nthat include policy constraints.  Attackers may be able to exploit this\nvulnerability by creating a malicious certificate chain that triggers\nexponential use of computational resources, leading to a denial-of-service\n(DoS) attack on affected systems.\n\nPolicy processing is disabled by default but can be enabled by passing\nthe `-policy' argument to the command line utilities or by calling the\n`X509_VERIFY_PARAM_set1_policies()' function.",
-              'diffID':        'sha256:b541d28bf3b491aeb424c61353c8c92476ecc2cd603a6c09ee5c2708f1a4b258',
-              'fixedVersions': [
-                '1.1.1t-r1'
-              ],
-              'installedVersion': '1.1.1n-r0',
-              'packageName':      'libcrypto1.1',
-              'purl':             'pkg:apk/alpine/libcrypto1.1@1.1.1n-r0?arch=x86_64&distro=3.14.6',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2023:3722',
-                'https://access.redhat.com/security/cve/CVE-2023-0464',
-                'https://bugzilla.redhat.com/2181082',
-                'https://bugzilla.redhat.com/2182561',
-                'https://bugzilla.redhat.com/2182565',
-                'https://bugzilla.redhat.com/2188461',
-                'https://bugzilla.redhat.com/2207947',
-                'https://errata.almalinux.org/9/ALSA-2023-3722.html',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=2017771e2db3e2b96f89bbe8766c3209f6a99545',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=2dcd4f1e3115f38cefa43e3efbe9b801c27e642e',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=879f7080d7e141f415c79eaa3a8ac4a3dad0348b',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=959c59c7a0164117e7f8366466a32bb1f8d77ff1',
-                'https://linux.oracle.com/cve/CVE-2023-0464.html',
-                'https://linux.oracle.com/errata/ELSA-2023-3722.html',
-                'https://lists.debian.org/debian-lts-announce/2023/06/msg00011.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-0464',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://security.netapp.com/advisory/ntap-20230406-0006/',
-                'https://security.netapp.com/advisory/ntap-20240621-0006/',
-                'https://ubuntu.com/security/notices/USN-6039-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.couchbase.com/alerts/',
-                'https://www.cve.org/CVERecord?id=CVE-2023-0464',
-                'https://www.debian.org/security/2023/dsa-5417',
-                'https://www.openssl.org/news/secadv/20230322.txt'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: Denial of service by excessive resource usage in verifying X509 policy constraints'
-            },
-            {
-              'cve':  'CVE-2022-2097',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N'
-                },
-                'nvd': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N'
-                },
-                'redhat': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-327'
-              ],
-              'description':   "AES OCB mode for 32-bit x86 platforms using the AES-NI assembly optimised implementation will not encrypt the entirety of the data under some circumstances. This could reveal sixteen bytes of data that was preexisting in the memory that wasn't written. In the special case of \"in place\" encryption, sixteen bytes of the plaintext would be revealed. Since OpenSSL does not support OCB based cipher suites for TLS and DTLS, they are both unaffected. Fixed in OpenSSL 3.0.5 (Affected 3.0.0-3.0.4). Fixed in OpenSSL 1.1.1q (Affected 1.1.1-1.1.1p).",
-              'diffID':        'sha256:b541d28bf3b491aeb424c61353c8c92476ecc2cd603a6c09ee5c2708f1a4b258',
-              'fixedVersions': [
-                '1.1.1q-r0'
-              ],
-              'installedVersion': '1.1.1n-r0',
-              'packageName':      'libcrypto1.1',
-              'purl':             'pkg:apk/alpine/libcrypto1.1@1.1.1n-r0?arch=x86_64&distro=3.14.6',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2022:6224',
-                'https://access.redhat.com/security/cve/CVE-2022-2097',
-                'https://bugzilla.redhat.com/2081494',
-                'https://bugzilla.redhat.com/2087911',
-                'https://bugzilla.redhat.com/2087913',
-                'https://bugzilla.redhat.com/2097310',
-                'https://bugzilla.redhat.com/2104905',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2081494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2097310',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2100554',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2104905',
-                'https://cert-portal.siemens.com/productcert/pdf/ssa-332410.pdf',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-1292',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-2068',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-2097',
-                'https://errata.almalinux.org/9/ALSA-2022-6224.html',
-                'https://errata.rockylinux.org/RLSA-2022:5818',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=919925673d6c9cfed3c1085497f5dfbbed5fc431',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=a98f339ddd7e8f487d6e0088d4a9a42324885a93',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=919925673d6c9cfed3c1085497f5dfbbed5fc431',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=a98f339ddd7e8f487d6e0088d4a9a42324885a93',
-                'https://github.com/alexcrichton/openssl-src-rs',
-                'https://linux.oracle.com/cve/CVE-2022-2097.html',
-                'https://linux.oracle.com/errata/ELSA-2022-9955.html',
-                'https://lists.debian.org/debian-lts-announce/2023/02/msg00019.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/R6CK57NBQFTPUMXAPJURCGXUYT76NQAK',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/R6CK57NBQFTPUMXAPJURCGXUYT76NQAK/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/V6567JERRHHJW2GNGJGKDRNHR7SNPZK7',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/V6567JERRHHJW2GNGJGKDRNHR7SNPZK7/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VCMNWKERPBKOEBNL7CLTTX3ZZCZLH7XA',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VCMNWKERPBKOEBNL7CLTTX3ZZCZLH7XA/',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/R6CK57NBQFTPUMXAPJURCGXUYT76NQAK',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/R6CK57NBQFTPUMXAPJURCGXUYT76NQAK/',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/V6567JERRHHJW2GNGJGKDRNHR7SNPZK7',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/V6567JERRHHJW2GNGJGKDRNHR7SNPZK7/',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/VCMNWKERPBKOEBNL7CLTTX3ZZCZLH7XA',
-                'https://nvd.nist.gov/vuln/detail/CVE-2022-2097',
-                'https://rustsec.org/advisories/RUSTSEC-2022-0032.html',
-                'https://security.gentoo.org/glsa/202210-02',
-                'https://security.netapp.com/advisory/ntap-20220715-0011',
-                'https://security.netapp.com/advisory/ntap-20220715-0011/',
-                'https://security.netapp.com/advisory/ntap-20230420-0008',
-                'https://security.netapp.com/advisory/ntap-20230420-0008/',
-                'https://security.netapp.com/advisory/ntap-20240621-0006',
-                'https://security.netapp.com/advisory/ntap-20240621-0006/',
-                'https://ubuntu.com/security/notices/USN-5502-1',
-                'https://ubuntu.com/security/notices/USN-6457-1',
-                'https://www.cve.org/CVERecord?id=CVE-2022-2097',
-                'https://www.debian.org/security/2023/dsa-5343',
-                'https://www.openssl.org/news/secadv/20220705.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: AES OCB fails to encrypt some bytes'
-            },
-            {
-              'cve':  'CVE-2022-4304',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N'
-                },
-                'nvd': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N'
-                },
-                'redhat': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-203'
-              ],
-              'description':   'A timing based side channel exists in the OpenSSL RSA Decryption implementation\nwhich could be sufficient to recover a plaintext across a network in a\nBleichenbacher style attack. To achieve a successful decryption an attacker\nwould have to be able to send a very large number of trial messages for\ndecryption. The vulnerability affects all RSA padding modes: PKCS#1 v1.5,\nRSA-OEAP and RSASVE.\n\nFor example, in a TLS connection, RSA is commonly used by a client to send an\nencrypted pre-master secret to the server. An attacker that had observed a\ngenuine connection between a client and a server could use this flaw to send\ntrial messages to the server and record the time taken to process them. After a\nsufficiently large number of messages the attacker could recover the pre-master\nsecret used for the original connection and thus be able to decrypt the\napplication data sent over that connection.',
-              'diffID':        'sha256:b541d28bf3b491aeb424c61353c8c92476ecc2cd603a6c09ee5c2708f1a4b258',
-              'fixedVersions': [
-                '1.1.1t-r0'
-              ],
-              'installedVersion': '1.1.1n-r0',
-              'packageName':      'libcrypto1.1',
-              'purl':             'pkg:apk/alpine/libcrypto1.1@1.1.1n-r0?arch=x86_64&distro=3.14.6',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2023:2165',
-                'https://access.redhat.com/security/cve/CVE-2022-4304',
-                'https://bugzilla.redhat.com/1960321',
-                'https://bugzilla.redhat.com/2164440',
-                'https://bugzilla.redhat.com/2164487',
-                'https://bugzilla.redhat.com/2164492',
-                'https://bugzilla.redhat.com/2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144000',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144003',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144006',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144008',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144010',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144012',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144015',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144017',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144019',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2145170',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2158412',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164440',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164487',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164488',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164492',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164497',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164499',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164500',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4203',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4304',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4450',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0215',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0216',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0217',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0286',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0401',
-                'https://errata.almalinux.org/9/ALSA-2023-2165.html',
-                'https://errata.rockylinux.org/RLSA-2023:0946',
-                'https://linux.oracle.com/cve/CVE-2022-4304.html',
-                'https://linux.oracle.com/errata/ELSA-2023-32791.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2022-4304',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0003',
-                'https://rustsec.org/advisories/RUSTSEC-2023-0007.html',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://ubuntu.com/security/notices/USN-5844-1',
-                'https://ubuntu.com/security/notices/USN-6564-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2022-4304',
-                'https://www.openssl.org/news/secadv/20230207.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: timing attack in RSA Decryption implementation'
-            },
-            {
-              'cve':  'CVE-2023-0465',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N'
-                },
-                'redhat': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-295'
-              ],
-              'description':   "Applications that use a non-default option when verifying certificates may be\nvulnerable to an attack from a malicious CA to circumvent certain checks.\n\nInvalid certificate policies in leaf certificates are silently ignored by\nOpenSSL and other certificate policy checks are skipped for that certificate.\nA malicious CA could use this to deliberately assert invalid certificate policies\nin order to circumvent policy checking on the certificate altogether.\n\nPolicy processing is disabled by default but can be enabled by passing\nthe `-policy' argument to the command line utilities or by calling the\n`X509_VERIFY_PARAM_set1_policies()' function.",
-              'diffID':        'sha256:b541d28bf3b491aeb424c61353c8c92476ecc2cd603a6c09ee5c2708f1a4b258',
-              'fixedVersions': [
-                '1.1.1t-r2'
-              ],
-              'installedVersion': '1.1.1n-r0',
-              'packageName':      'libcrypto1.1',
-              'purl':             'pkg:apk/alpine/libcrypto1.1@1.1.1n-r0?arch=x86_64&distro=3.14.6',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2023:3722',
-                'https://access.redhat.com/security/cve/CVE-2023-0465',
-                'https://bugzilla.redhat.com/2181082',
-                'https://bugzilla.redhat.com/2182561',
-                'https://bugzilla.redhat.com/2182565',
-                'https://bugzilla.redhat.com/2188461',
-                'https://bugzilla.redhat.com/2207947',
-                'https://errata.almalinux.org/9/ALSA-2023-3722.html',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=10325176f3d3e98c6e2b3bf5ab1e3b334de6947a',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=1dd43e0709fece299b15208f36cc7c76209ba0bb',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=b013765abfa80036dc779dd0e50602c57bb3bf95',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=facfb1ab745646e97a1920977ae4a9965ea61d5c',
-                'https://linux.oracle.com/cve/CVE-2023-0465.html',
-                'https://linux.oracle.com/errata/ELSA-2023-3722.html',
-                'https://lists.debian.org/debian-lts-announce/2023/06/msg00011.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-0465',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://security.netapp.com/advisory/ntap-20230414-0001/',
-                'https://ubuntu.com/security/notices/USN-6039-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-0465',
-                'https://www.debian.org/security/2023/dsa-5417',
-                'https://www.openssl.org/news/secadv/20230328.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: Invalid certificate policies in leaf certificates are silently ignored'
-            },
-            {
-              'cve':  'CVE-2022-4450',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'nvd': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-415'
-              ],
-              'description':   'The function PEM_read_bio_ex() reads a PEM file from a BIO and parses and\ndecodes the "name" (e.g. "CERTIFICATE"), any header data and the payload data.\nIf the function succeeds then the "name_out", "header" and "data" arguments are\npopulated with pointers to buffers containing the relevant decoded data. The\ncaller is responsible for freeing those buffers. It is possible to construct a\nPEM file that results in 0 bytes of payload data. In this case PEM_read_bio_ex()\nwill return a failure code but will populate the header argument with a pointer\nto a buffer that has already been freed. If the caller also frees this buffer\nthen a double free will occur. This will most likely lead to a crash. This\ncould be exploited by an attacker who has the ability to supply malicious PEM\nfiles for parsing to achieve a denial of service attack.\n\nThe functions PEM_read_bio() and PEM_read() are simple wrappers around\nPEM_read_bio_ex() and therefore these functions are also directly affected.\n\nThese functions are also called indirectly by a number of other OpenSSL\nfunctions including PEM_X509_INFO_read_bio_ex() and\nSSL_CTX_use_serverinfo_file() which are also vulnerable. Some OpenSSL internal\nuses of these functions are not vulnerable because the caller does not free the\nheader argument if PEM_read_bio_ex() returns a failure code. These locations\ninclude the PEM_read_bio_TYPE() functions as well as the decoders introduced in\nOpenSSL 3.0.\n\nThe OpenSSL asn1parse command line application is also impacted by this issue.',
-              'diffID':        'sha256:b541d28bf3b491aeb424c61353c8c92476ecc2cd603a6c09ee5c2708f1a4b258',
-              'fixedVersions': [
-                '1.1.1t-r0'
-              ],
-              'installedVersion': '1.1.1n-r0',
-              'packageName':      'libssl1.1',
-              'purl':             'pkg:apk/alpine/libssl1.1@1.1.1n-r0?arch=x86_64&distro=3.14.6',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2023:2165',
-                'https://access.redhat.com/security/cve/CVE-2022-4450',
-                'https://bugzilla.redhat.com/1960321',
-                'https://bugzilla.redhat.com/2164440',
-                'https://bugzilla.redhat.com/2164487',
-                'https://bugzilla.redhat.com/2164492',
-                'https://bugzilla.redhat.com/2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144000',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144003',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144006',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144008',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144010',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144012',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144015',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144017',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144019',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2145170',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2158412',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164440',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164487',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164488',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164492',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164497',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164499',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164500',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4203',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4304',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4450',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0215',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0216',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0217',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0286',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0401',
-                'https://errata.almalinux.org/9/ALSA-2023-2165.html',
-                'https://errata.rockylinux.org/RLSA-2023:0946',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=63bcf189be73a9cc1264059bed6f57974be74a83',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=bbcf509bd046b34cca19c766bbddc31683d0858b',
-                'https://linux.oracle.com/cve/CVE-2022-4450.html',
-                'https://linux.oracle.com/errata/ELSA-2023-32791.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2022-4450',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0003',
-                'https://rustsec.org/advisories/RUSTSEC-2023-0010.html',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://ubuntu.com/security/notices/USN-5844-1',
-                'https://ubuntu.com/security/notices/USN-6564-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2022-4450',
-                'https://www.openssl.org/news/secadv/20230207.txt'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: double free after calling PEM_read_bio_ex'
-            },
-            {
-              'cve':  'CVE-2023-0215',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'nvd': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   'The public API function BIO_new_NDEF is a helper function used for streaming\nASN.1 data via a BIO. It is primarily used internally to OpenSSL to support the\nSMIME, CMS and PKCS7 streaming capabilities, but may also be called directly by\nend user applications.\n\nThe function receives a BIO from the caller, prepends a new BIO_f_asn1 filter\nBIO onto the front of it to form a BIO chain, and then returns the new head of\nthe BIO chain to the caller. Under certain conditions, for example if a CMS\nrecipient public key is invalid, the new filter BIO is freed and the function\nreturns a NULL result indicating a failure. However, in this case, the BIO chain\nis not properly cleaned up and the BIO passed by the caller still retains\ninternal pointers to the previously freed filter BIO. If the caller then goes on\nto call BIO_pop() on the BIO then a use-after-free will occur. This will most\nlikely result in a crash.\n\n\n\nThis scenario occurs directly in the internal function B64_write_ASN1() which\nmay cause BIO_new_NDEF() to be called and will subsequently call BIO_pop() on\nthe BIO. This internal function is in turn called by the public API functions\nPEM_write_bio_ASN1_stream, PEM_write_bio_CMS_stream, PEM_write_bio_PKCS7_stream,\nSMIME_write_ASN1, SMIME_write_CMS and SMIME_write_PKCS7.\n\nOther public API functions that may be impacted by this include\ni2d_ASN1_bio_stream, BIO_new_CMS, BIO_new_PKCS7, i2d_CMS_bio_stream and\ni2d_PKCS7_bio_stream.\n\nThe OpenSSL cms and smime command line applications are similarly affected.',
-              'diffID':        'sha256:b541d28bf3b491aeb424c61353c8c92476ecc2cd603a6c09ee5c2708f1a4b258',
-              'fixedVersions': [
-                '1.1.1t-r0'
-              ],
-              'installedVersion': '1.1.1n-r0',
-              'packageName':      'libssl1.1',
-              'purl':             'pkg:apk/alpine/libssl1.1@1.1.1n-r0?arch=x86_64&distro=3.14.6',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2023:2165',
-                'https://access.redhat.com/security/cve/CVE-2023-0215',
-                'https://bugzilla.redhat.com/1960321',
-                'https://bugzilla.redhat.com/2164440',
-                'https://bugzilla.redhat.com/2164487',
-                'https://bugzilla.redhat.com/2164492',
-                'https://bugzilla.redhat.com/2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144000',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144003',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144006',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144008',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144010',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144012',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144015',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144017',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144019',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2145170',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2158412',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164440',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164487',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164488',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164492',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164497',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164499',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164500',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4203',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4304',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4450',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0215',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0216',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0217',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0286',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0401',
-                'https://errata.almalinux.org/9/ALSA-2023-2165.html',
-                'https://errata.rockylinux.org/RLSA-2023:0946',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=8818064ce3c3c0f1b740a5aaba2a987e75bfbafd',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=9816136fe31d92ace4037d5da5257f763aeeb4eb',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=c3829dd8825c654652201e16f8a0a0c46ee3f344',
-                'https://linux.oracle.com/cve/CVE-2023-0215.html',
-                'https://linux.oracle.com/errata/ELSA-2023-32791.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-0215',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0003',
-                'https://rustsec.org/advisories/RUSTSEC-2023-0009.html',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://security.netapp.com/advisory/ntap-20230427-0007',
-                'https://security.netapp.com/advisory/ntap-20230427-0007/',
-                'https://security.netapp.com/advisory/ntap-20230427-0009',
-                'https://security.netapp.com/advisory/ntap-20230427-0009/',
-                'https://security.netapp.com/advisory/ntap-20240621-0006',
-                'https://security.netapp.com/advisory/ntap-20240621-0006/',
-                'https://ubuntu.com/security/notices/USN-5844-1',
-                'https://ubuntu.com/security/notices/USN-5845-1',
-                'https://ubuntu.com/security/notices/USN-5845-2',
-                'https://ubuntu.com/security/notices/USN-6564-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-0215',
-                'https://www.openssl.org/news/secadv/20230207.txt'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: use-after-free following BIO_new_NDEF'
-            },
-            {
-              'cve':  'CVE-2023-0286',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '7.4',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H'
-                },
-                'nvd': {
-                  'v3score':  '7.4',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.4',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-843'
-              ],
-              'description':   'There is a type confusion vulnerability relating to X.400 address processing\ninside an X.509 GeneralName. X.400 addresses were parsed as an ASN1_STRING but\nthe public structure definition for GENERAL_NAME incorrectly specified the type\nof the x400Address field as ASN1_TYPE. This field is subsequently interpreted by\nthe OpenSSL function GENERAL_NAME_cmp as an ASN1_TYPE rather than an\nASN1_STRING.\n\nWhen CRL checking is enabled (i.e. the application sets the\nX509_V_FLAG_CRL_CHECK flag), this vulnerability may allow an attacker to pass\narbitrary pointers to a memcmp call, enabling them to read memory contents or\nenact a denial of service. In most cases, the attack requires the attacker to\nprovide both the certificate chain and CRL, neither of which need to have a\nvalid signature. If the attacker only controls one of these inputs, the other\ninput must already contain an X.400 address as a CRL distribution point, which\nis uncommon. As such, this vulnerability is most likely to only affect\napplications which have implemented their own functionality for retrieving CRLs\nover a network.',
-              'diffID':        'sha256:b541d28bf3b491aeb424c61353c8c92476ecc2cd603a6c09ee5c2708f1a4b258',
-              'fixedVersions': [
-                '1.1.1t-r0'
-              ],
-              'installedVersion': '1.1.1n-r0',
-              'packageName':      'libssl1.1',
-              'purl':             'pkg:apk/alpine/libssl1.1@1.1.1n-r0?arch=x86_64&distro=3.14.6',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2025:7937',
-                'https://access.redhat.com/security/cve/CVE-2023-0286',
-                'https://access.redhat.com/security/cve/cve-2023-0286',
-                'https://bugzilla.redhat.com/2164440',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144000',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144003',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144006',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144008',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144010',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144012',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144015',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144017',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144019',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2145170',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2158412',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164440',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164487',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164488',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164492',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164497',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164499',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164500',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4203',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4304',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4450',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0215',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0216',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0217',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0286',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0401',
-                'https://errata.almalinux.org/9/ALSA-2025-7937.html',
-                'https://errata.rockylinux.org/RLSA-2023:0946',
-                'https://ftp.openbsd.org/pub/OpenBSD/LibreSSL/libressl-3.6.2-relnotes.txt',
-                'https://ftp.openbsd.org/pub/OpenBSD/patches/7.2/common/018_x509.patch.sig',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=2c6c9d439b484e1ba9830d8454a34fa4f80fdfe9',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=2f7530077e0ef79d98718138716bc51ca0cad658',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=fd2af07dc083a350c959147097003a14a5e8ac4d',
-                'https://github.com/pyca/cryptography',
-                'https://github.com/pyca/cryptography/security/advisories/GHSA-x4qr-2fvf-3mr5',
-                'https://linux.oracle.com/cve/CVE-2023-0286.html',
-                'https://linux.oracle.com/errata/ELSA-2025-7937.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-0286',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0003',
-                'https://rustsec.org/advisories/RUSTSEC-2023-0006.html',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://ubuntu.com/security/notices/USN-5844-1',
-                'https://ubuntu.com/security/notices/USN-5845-1',
-                'https://ubuntu.com/security/notices/USN-5845-2',
-                'https://ubuntu.com/security/notices/USN-6564-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-0286',
-                'https://www.openssl.org/news/secadv/20230207.txt'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: X.400 address type confusion in X.509 GeneralName'
-            },
-            {
-              'cve':  'CVE-2023-0464',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-295'
-              ],
-              'description':   "A security vulnerability has been identified in all supported versions\n\nof OpenSSL related to the verification of X.509 certificate chains\nthat include policy constraints.  Attackers may be able to exploit this\nvulnerability by creating a malicious certificate chain that triggers\nexponential use of computational resources, leading to a denial-of-service\n(DoS) attack on affected systems.\n\nPolicy processing is disabled by default but can be enabled by passing\nthe `-policy' argument to the command line utilities or by calling the\n`X509_VERIFY_PARAM_set1_policies()' function.",
-              'diffID':        'sha256:b541d28bf3b491aeb424c61353c8c92476ecc2cd603a6c09ee5c2708f1a4b258',
-              'fixedVersions': [
-                '1.1.1t-r1'
-              ],
-              'installedVersion': '1.1.1n-r0',
-              'packageName':      'libssl1.1',
-              'purl':             'pkg:apk/alpine/libssl1.1@1.1.1n-r0?arch=x86_64&distro=3.14.6',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2023:3722',
-                'https://access.redhat.com/security/cve/CVE-2023-0464',
-                'https://bugzilla.redhat.com/2181082',
-                'https://bugzilla.redhat.com/2182561',
-                'https://bugzilla.redhat.com/2182565',
-                'https://bugzilla.redhat.com/2188461',
-                'https://bugzilla.redhat.com/2207947',
-                'https://errata.almalinux.org/9/ALSA-2023-3722.html',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=2017771e2db3e2b96f89bbe8766c3209f6a99545',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=2dcd4f1e3115f38cefa43e3efbe9b801c27e642e',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=879f7080d7e141f415c79eaa3a8ac4a3dad0348b',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=959c59c7a0164117e7f8366466a32bb1f8d77ff1',
-                'https://linux.oracle.com/cve/CVE-2023-0464.html',
-                'https://linux.oracle.com/errata/ELSA-2023-3722.html',
-                'https://lists.debian.org/debian-lts-announce/2023/06/msg00011.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-0464',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://security.netapp.com/advisory/ntap-20230406-0006/',
-                'https://security.netapp.com/advisory/ntap-20240621-0006/',
-                'https://ubuntu.com/security/notices/USN-6039-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.couchbase.com/alerts/',
-                'https://www.cve.org/CVERecord?id=CVE-2023-0464',
-                'https://www.debian.org/security/2023/dsa-5417',
-                'https://www.openssl.org/news/secadv/20230322.txt'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: Denial of service by excessive resource usage in verifying X509 policy constraints'
-            },
-            {
-              'cve':  'CVE-2022-2097',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N'
-                },
-                'nvd': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N'
-                },
-                'redhat': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-327'
-              ],
-              'description':   "AES OCB mode for 32-bit x86 platforms using the AES-NI assembly optimised implementation will not encrypt the entirety of the data under some circumstances. This could reveal sixteen bytes of data that was preexisting in the memory that wasn't written. In the special case of \"in place\" encryption, sixteen bytes of the plaintext would be revealed. Since OpenSSL does not support OCB based cipher suites for TLS and DTLS, they are both unaffected. Fixed in OpenSSL 3.0.5 (Affected 3.0.0-3.0.4). Fixed in OpenSSL 1.1.1q (Affected 1.1.1-1.1.1p).",
-              'diffID':        'sha256:b541d28bf3b491aeb424c61353c8c92476ecc2cd603a6c09ee5c2708f1a4b258',
-              'fixedVersions': [
-                '1.1.1q-r0'
-              ],
-              'installedVersion': '1.1.1n-r0',
-              'packageName':      'libssl1.1',
-              'purl':             'pkg:apk/alpine/libssl1.1@1.1.1n-r0?arch=x86_64&distro=3.14.6',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2022:6224',
-                'https://access.redhat.com/security/cve/CVE-2022-2097',
-                'https://bugzilla.redhat.com/2081494',
-                'https://bugzilla.redhat.com/2087911',
-                'https://bugzilla.redhat.com/2087913',
-                'https://bugzilla.redhat.com/2097310',
-                'https://bugzilla.redhat.com/2104905',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2081494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2097310',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2100554',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2104905',
-                'https://cert-portal.siemens.com/productcert/pdf/ssa-332410.pdf',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-1292',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-2068',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-2097',
-                'https://errata.almalinux.org/9/ALSA-2022-6224.html',
-                'https://errata.rockylinux.org/RLSA-2022:5818',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=919925673d6c9cfed3c1085497f5dfbbed5fc431',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=a98f339ddd7e8f487d6e0088d4a9a42324885a93',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=919925673d6c9cfed3c1085497f5dfbbed5fc431',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=a98f339ddd7e8f487d6e0088d4a9a42324885a93',
-                'https://github.com/alexcrichton/openssl-src-rs',
-                'https://linux.oracle.com/cve/CVE-2022-2097.html',
-                'https://linux.oracle.com/errata/ELSA-2022-9955.html',
-                'https://lists.debian.org/debian-lts-announce/2023/02/msg00019.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/R6CK57NBQFTPUMXAPJURCGXUYT76NQAK',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/R6CK57NBQFTPUMXAPJURCGXUYT76NQAK/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/V6567JERRHHJW2GNGJGKDRNHR7SNPZK7',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/V6567JERRHHJW2GNGJGKDRNHR7SNPZK7/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VCMNWKERPBKOEBNL7CLTTX3ZZCZLH7XA',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VCMNWKERPBKOEBNL7CLTTX3ZZCZLH7XA/',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/R6CK57NBQFTPUMXAPJURCGXUYT76NQAK',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/R6CK57NBQFTPUMXAPJURCGXUYT76NQAK/',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/V6567JERRHHJW2GNGJGKDRNHR7SNPZK7',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/V6567JERRHHJW2GNGJGKDRNHR7SNPZK7/',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/VCMNWKERPBKOEBNL7CLTTX3ZZCZLH7XA',
-                'https://nvd.nist.gov/vuln/detail/CVE-2022-2097',
-                'https://rustsec.org/advisories/RUSTSEC-2022-0032.html',
-                'https://security.gentoo.org/glsa/202210-02',
-                'https://security.netapp.com/advisory/ntap-20220715-0011',
-                'https://security.netapp.com/advisory/ntap-20220715-0011/',
-                'https://security.netapp.com/advisory/ntap-20230420-0008',
-                'https://security.netapp.com/advisory/ntap-20230420-0008/',
-                'https://security.netapp.com/advisory/ntap-20240621-0006',
-                'https://security.netapp.com/advisory/ntap-20240621-0006/',
-                'https://ubuntu.com/security/notices/USN-5502-1',
-                'https://ubuntu.com/security/notices/USN-6457-1',
-                'https://www.cve.org/CVERecord?id=CVE-2022-2097',
-                'https://www.debian.org/security/2023/dsa-5343',
-                'https://www.openssl.org/news/secadv/20220705.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: AES OCB fails to encrypt some bytes'
-            },
-            {
-              'cve':  'CVE-2022-4304',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N'
-                },
-                'nvd': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N'
-                },
-                'redhat': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-203'
-              ],
-              'description':   'A timing based side channel exists in the OpenSSL RSA Decryption implementation\nwhich could be sufficient to recover a plaintext across a network in a\nBleichenbacher style attack. To achieve a successful decryption an attacker\nwould have to be able to send a very large number of trial messages for\ndecryption. The vulnerability affects all RSA padding modes: PKCS#1 v1.5,\nRSA-OEAP and RSASVE.\n\nFor example, in a TLS connection, RSA is commonly used by a client to send an\nencrypted pre-master secret to the server. An attacker that had observed a\ngenuine connection between a client and a server could use this flaw to send\ntrial messages to the server and record the time taken to process them. After a\nsufficiently large number of messages the attacker could recover the pre-master\nsecret used for the original connection and thus be able to decrypt the\napplication data sent over that connection.',
-              'diffID':        'sha256:b541d28bf3b491aeb424c61353c8c92476ecc2cd603a6c09ee5c2708f1a4b258',
-              'fixedVersions': [
-                '1.1.1t-r0'
-              ],
-              'installedVersion': '1.1.1n-r0',
-              'packageName':      'libssl1.1',
-              'purl':             'pkg:apk/alpine/libssl1.1@1.1.1n-r0?arch=x86_64&distro=3.14.6',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2023:2165',
-                'https://access.redhat.com/security/cve/CVE-2022-4304',
-                'https://bugzilla.redhat.com/1960321',
-                'https://bugzilla.redhat.com/2164440',
-                'https://bugzilla.redhat.com/2164487',
-                'https://bugzilla.redhat.com/2164492',
-                'https://bugzilla.redhat.com/2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144000',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144003',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144006',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144008',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144010',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144012',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144015',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144017',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144019',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2145170',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2158412',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164440',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164487',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164488',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164492',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164497',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164499',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164500',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4203',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4304',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4450',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0215',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0216',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0217',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0286',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0401',
-                'https://errata.almalinux.org/9/ALSA-2023-2165.html',
-                'https://errata.rockylinux.org/RLSA-2023:0946',
-                'https://linux.oracle.com/cve/CVE-2022-4304.html',
-                'https://linux.oracle.com/errata/ELSA-2023-32791.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2022-4304',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0003',
-                'https://rustsec.org/advisories/RUSTSEC-2023-0007.html',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://ubuntu.com/security/notices/USN-5844-1',
-                'https://ubuntu.com/security/notices/USN-6564-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2022-4304',
-                'https://www.openssl.org/news/secadv/20230207.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: timing attack in RSA Decryption implementation'
-            },
-            {
-              'cve':  'CVE-2023-0465',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N'
-                },
-                'redhat': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-295'
-              ],
-              'description':   "Applications that use a non-default option when verifying certificates may be\nvulnerable to an attack from a malicious CA to circumvent certain checks.\n\nInvalid certificate policies in leaf certificates are silently ignored by\nOpenSSL and other certificate policy checks are skipped for that certificate.\nA malicious CA could use this to deliberately assert invalid certificate policies\nin order to circumvent policy checking on the certificate altogether.\n\nPolicy processing is disabled by default but can be enabled by passing\nthe `-policy' argument to the command line utilities or by calling the\n`X509_VERIFY_PARAM_set1_policies()' function.",
-              'diffID':        'sha256:b541d28bf3b491aeb424c61353c8c92476ecc2cd603a6c09ee5c2708f1a4b258',
-              'fixedVersions': [
-                '1.1.1t-r2'
-              ],
-              'installedVersion': '1.1.1n-r0',
-              'packageName':      'libssl1.1',
-              'purl':             'pkg:apk/alpine/libssl1.1@1.1.1n-r0?arch=x86_64&distro=3.14.6',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2023:3722',
-                'https://access.redhat.com/security/cve/CVE-2023-0465',
-                'https://bugzilla.redhat.com/2181082',
-                'https://bugzilla.redhat.com/2182561',
-                'https://bugzilla.redhat.com/2182565',
-                'https://bugzilla.redhat.com/2188461',
-                'https://bugzilla.redhat.com/2207947',
-                'https://errata.almalinux.org/9/ALSA-2023-3722.html',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=10325176f3d3e98c6e2b3bf5ab1e3b334de6947a',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=1dd43e0709fece299b15208f36cc7c76209ba0bb',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=b013765abfa80036dc779dd0e50602c57bb3bf95',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=facfb1ab745646e97a1920977ae4a9965ea61d5c',
-                'https://linux.oracle.com/cve/CVE-2023-0465.html',
-                'https://linux.oracle.com/errata/ELSA-2023-3722.html',
-                'https://lists.debian.org/debian-lts-announce/2023/06/msg00011.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-0465',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://security.netapp.com/advisory/ntap-20230414-0001/',
-                'https://ubuntu.com/security/notices/USN-6039-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-0465',
-                'https://www.debian.org/security/2023/dsa-5417',
-                'https://www.openssl.org/news/secadv/20230328.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: Invalid certificate policies in leaf certificates are silently ignored'
-            },
-            {
-              'cve':  'CVE-2022-37434',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '9.8',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-787',
-                'CWE-120'
-              ],
-              'description':   'zlib through 1.2.12 has a heap-based buffer over-read or buffer overflow in inflate in inflate.c via a large gzip header extra field. NOTE: only applications that call inflateGetHeader are affected. Some common applications bundle the affected zlib source code but may be unable to call inflateGetHeader (e.g., see the nodejs/node reference).',
-              'diffID':        'sha256:b541d28bf3b491aeb424c61353c8c92476ecc2cd603a6c09ee5c2708f1a4b258',
-              'fixedVersions': [
-                '1.2.12-r2'
-              ],
-              'installedVersion': '1.2.12-r0',
-              'packageName':      'zlib',
-              'purl':             'pkg:apk/alpine/zlib@1.2.12-r0?arch=x86_64&distro=3.14.6',
-              'references':       [
-                'http://seclists.org/fulldisclosure/2022/Oct/37',
-                'http://seclists.org/fulldisclosure/2022/Oct/38',
-                'http://seclists.org/fulldisclosure/2022/Oct/41',
-                'http://seclists.org/fulldisclosure/2022/Oct/42',
-                'http://www.openwall.com/lists/oss-security/2022/08/05/2',
-                'http://www.openwall.com/lists/oss-security/2022/08/09/1',
-                'https://access.redhat.com/errata/RHSA-2022:8291',
-                'https://access.redhat.com/security/cve/CVE-2022-37434',
-                'https://bugzilla.redhat.com/2116639',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2053198',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2077431',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2081296',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2116639',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-37434',
-                'https://errata.almalinux.org/9/ALSA-2022-8291.html',
-                'https://errata.rockylinux.org/RLSA-2022:8291',
-                'https://github.com/curl/curl/issues/9271',
-                'https://github.com/ivd38/zlib_overflow',
-                'https://github.com/madler/zlib/blob/21767c654d31d2dccdde4330529775c6c5fd5389/zlib.h#L1062-L1063',
-                'https://github.com/madler/zlib/commit/1eb7682f845ac9e9bf9ae35bbfb3bad5dacbd91d',
-                'https://github.com/madler/zlib/commit/eff308af425b67093bab25f80f1ae950166bece1',
-                'https://github.com/nodejs/node/blob/75b68c6e4db515f76df73af476eccf382bbcb00a/deps/zlib/inflate.c#L762-L764',
-                'https://linux.oracle.com/cve/CVE-2022-37434.html',
-                'https://linux.oracle.com/errata/ELSA-2023-1095.html',
-                'https://lists.debian.org/debian-lts-announce/2022/09/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JWN4VE3JQR4O2SOUS5TXNLANRPMHWV4I/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NMBOJ77A7T7PQCARMDUK75TE6LLESZ3O/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PAVPQNCG3XRLCLNSQRM3KAN5ZFMVXVTY/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/X5U7OTKZSHY2I3ZFJSR2SHFHW72RKGDK/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YRQAI7H4M4RQZ2IWZUEEXECBE5D56BH2/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2022-37434',
-                'https://security.netapp.com/advisory/ntap-20220901-0005/',
-                'https://security.netapp.com/advisory/ntap-20230427-0007/',
-                'https://support.apple.com/kb/HT213488',
-                'https://support.apple.com/kb/HT213489',
-                'https://support.apple.com/kb/HT213490',
-                'https://support.apple.com/kb/HT213491',
-                'https://support.apple.com/kb/HT213493',
-                'https://support.apple.com/kb/HT213494',
-                'https://ubuntu.com/security/notices/USN-5570-1',
-                'https://ubuntu.com/security/notices/USN-5570-2',
-                'https://ubuntu.com/security/notices/USN-5573-1',
-                'https://ubuntu.com/security/notices/USN-6736-1',
-                'https://ubuntu.com/security/notices/USN-6736-2',
-                'https://www.cve.org/CVERecord?id=CVE-2022-37434',
-                'https://www.debian.org/security/2022/dsa-5218'
-              ],
-              'severity':   'CRITICAL',
-              'suppressed': false,
-              'title':      'zlib: heap-based buffer over-read and overflow in inflate() in inflate.c via a large gzip header extra field'
-            }
-          ]
-        }
-      ],
-      'summary': {
-        'critical':   1,
-        'high':       8,
-        'low':        0,
-        'medium':     6,
-        'suppressed': 0,
-        'unknown':    0
-      }
-    }
-  },
-  {
-    'id':    'default/0ce19683a457835b1a65ce5bca7792403bfb8487103bf49b66f3c5acff2579c8',
-    'type':  'storage.sbomscanner.kubewarden.io.vulnerabilityreport',
-    'links': {
-      'patch':  'https://localhost:8005/v1/storage.sbomscanner.kubewarden.io.vulnerabilityreports/default/0ce19683a457835b1a65ce5bca7792403bfb8487103bf49b66f3c5acff2579c8',
-      'remove': 'https://localhost:8005/v1/storage.sbomscanner.kubewarden.io.vulnerabilityreports/default/0ce19683a457835b1a65ce5bca7792403bfb8487103bf49b66f3c5acff2579c8',
-      'self':   'https://localhost:8005/v1/storage.sbomscanner.kubewarden.io.vulnerabilityreports/default/0ce19683a457835b1a65ce5bca7792403bfb8487103bf49b66f3c5acff2579c8',
-      'update': 'https://localhost:8005/v1/storage.sbomscanner.kubewarden.io.vulnerabilityreports/default/0ce19683a457835b1a65ce5bca7792403bfb8487103bf49b66f3c5acff2579c8',
-      'view':   'https://localhost:8005/apis/storage.sbomscanner.kubewarden.io/v1alpha1/namespaces/default/vulnerabilityreports/0ce19683a457835b1a65ce5bca7792403bfb8487103bf49b66f3c5acff2579c8'
-    },
-    'apiVersion':    'storage.sbomscanner.kubewarden.io/v1alpha1',
-    'imageMetadata': {
-      'digest':      'sha256:a243de15b52a44b19c2a02647b11fcf598007ff7f2b07cb8195a0979eff30a0d',
-      'platform':    'linux/ppc64le',
-      'registry':    'lsong-demo1',
-      'registryURI': 'registry-1.docker.io',
-      'repository':  'library/alpine',
-      'tag':         '3.13.6'
-    },
-    'kind':     'VulnerabilityReport',
-    'metadata': {
-      'creationTimestamp': '2026-01-14T18:51:17Z',
-      'fields':            [
-        '0ce19683a457835b1a65ce5bca7792403bfb8487103bf49b66f3c5acff2579c8',
-        'registry-1.docker.io/library/alpine:3.13.6',
-        'linux/ppc64le',
-        '32 (0 suppressed)'
-      ],
-      'labels': {
-        'app.kubernetes.io/managed-by':          'sbomscanner',
-        'app.kubernetes.io/part-of':             'sbomscanner',
-        'sbomscanner.kubewarden.io/scanjob-uid': '445c600a-c4b6-40b3-bd71-f2d2140a37d5'
-      },
-      'name':            '0ce19683a457835b1a65ce5bca7792403bfb8487103bf49b66f3c5acff2579c8',
-      'namespace':       'default',
-      'ownerReferences': [
-        {
-          'apiVersion':         'storage.sbomscanner.kubewarden.io/v1alpha1',
-          'blockOwnerDeletion': true,
-          'controller':         true,
-          'kind':               'SBOM',
-          'name':               '0ce19683a457835b1a65ce5bca7792403bfb8487103bf49b66f3c5acff2579c8',
-          'uid':                '07bd97e0-a5e4-4448-bc8f-026503381f0f'
-        }
-      ],
-      'relationships': [
-        {
-          'fromId':   'default/0ce19683a457835b1a65ce5bca7792403bfb8487103bf49b66f3c5acff2579c8',
-          'fromType': 'storage.sbomscanner.kubewarden.io.sbom',
-          'rel':      'owner',
-          'state':    'active',
-          'message':  'Resource is current'
-        }
-      ],
-      'resourceVersion': '1',
-      'state':           {
-        'error':         false,
-        'message':       'Resource is current',
-        'name':          'active',
-        'transitioning': false
-      },
-      'uid': '30c97c47-3a6d-4b71-a972-bd5b3e239660'
-    },
-    'report': {
-      'results': [
-        {
-          'class':           'os-pkgs',
-          'target':          '/var/run/worker/trivy.sbom.2406041395.json (alpine 3.13.6)',
-          'type':            'alpine',
-          'vulnerabilities': [
-            {
-              'cve':  'CVE-2021-42378',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the getvar_i function",
-              'diffID':        'sha256:1ec79c72d048427efba9e9f8cdb832fd7b4d8edd8c2cd3047695822ffce11c19',
-              'fixedVersions': [
-                '1.32.1-r7'
-              ],
-              'installedVersion': '1.32.1-r6',
-              'packageName':      'busybox',
-              'purl':             'pkg:apk/alpine/busybox@1.32.1-r6?arch=ppc64le&distro=3.13.6',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42378',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42378',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42378'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the getvar_i()'
-            },
-            {
-              'cve':  'CVE-2021-42379',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the next_input_file function",
-              'diffID':        'sha256:1ec79c72d048427efba9e9f8cdb832fd7b4d8edd8c2cd3047695822ffce11c19',
-              'fixedVersions': [
-                '1.32.1-r7'
-              ],
-              'installedVersion': '1.32.1-r6',
-              'packageName':      'busybox',
-              'purl':             'pkg:apk/alpine/busybox@1.32.1-r6?arch=ppc64le&distro=3.13.6',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42379',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42379',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42379'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the next_input_file()'
-            },
-            {
-              'cve':  'CVE-2021-42380',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the clrvar function",
-              'diffID':        'sha256:1ec79c72d048427efba9e9f8cdb832fd7b4d8edd8c2cd3047695822ffce11c19',
-              'fixedVersions': [
-                '1.32.1-r7'
-              ],
-              'installedVersion': '1.32.1-r6',
-              'packageName':      'busybox',
-              'purl':             'pkg:apk/alpine/busybox@1.32.1-r6?arch=ppc64le&distro=3.13.6',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42380',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42380',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42380'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the clrvar()'
-            },
-            {
-              'cve':  'CVE-2021-42381',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the hash_init function",
-              'diffID':        'sha256:1ec79c72d048427efba9e9f8cdb832fd7b4d8edd8c2cd3047695822ffce11c19',
-              'fixedVersions': [
-                '1.32.1-r7'
-              ],
-              'installedVersion': '1.32.1-r6',
-              'packageName':      'busybox',
-              'purl':             'pkg:apk/alpine/busybox@1.32.1-r6?arch=ppc64le&distro=3.13.6',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42381',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42381',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42381'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the hash_init()'
-            },
-            {
-              'cve':  'CVE-2021-42382',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the getvar_s function",
-              'diffID':        'sha256:1ec79c72d048427efba9e9f8cdb832fd7b4d8edd8c2cd3047695822ffce11c19',
-              'fixedVersions': [
-                '1.32.1-r7'
-              ],
-              'installedVersion': '1.32.1-r6',
-              'packageName':      'busybox',
-              'purl':             'pkg:apk/alpine/busybox@1.32.1-r6?arch=ppc64le&distro=3.13.6',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42382',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42382',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42382'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the getvar_s()'
-            },
-            {
-              'cve':  'CVE-2021-42383',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the evaluate function",
-              'diffID':        'sha256:1ec79c72d048427efba9e9f8cdb832fd7b4d8edd8c2cd3047695822ffce11c19',
-              'fixedVersions': [
-                '1.32.1-r7'
-              ],
-              'installedVersion': '1.32.1-r6',
-              'packageName':      'busybox',
-              'purl':             'pkg:apk/alpine/busybox@1.32.1-r6?arch=ppc64le&distro=3.13.6',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42383',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42383',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42383'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the evaluate()'
-            },
-            {
-              'cve':  'CVE-2021-42384',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the handle_special function",
-              'diffID':        'sha256:1ec79c72d048427efba9e9f8cdb832fd7b4d8edd8c2cd3047695822ffce11c19',
-              'fixedVersions': [
-                '1.32.1-r7'
-              ],
-              'installedVersion': '1.32.1-r6',
-              'packageName':      'busybox',
-              'purl':             'pkg:apk/alpine/busybox@1.32.1-r6?arch=ppc64le&distro=3.13.6',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42384',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42384',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42384'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the handle_special()'
-            },
-            {
-              'cve':  'CVE-2021-42385',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the evaluate function",
-              'diffID':        'sha256:1ec79c72d048427efba9e9f8cdb832fd7b4d8edd8c2cd3047695822ffce11c19',
-              'fixedVersions': [
-                '1.32.1-r7'
-              ],
-              'installedVersion': '1.32.1-r6',
-              'packageName':      'busybox',
-              'purl':             'pkg:apk/alpine/busybox@1.32.1-r6?arch=ppc64le&distro=3.13.6',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42385',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42385',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42385'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the evaluate()'
-            },
-            {
-              'cve':  'CVE-2021-42386',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the nvalloc function",
-              'diffID':        'sha256:1ec79c72d048427efba9e9f8cdb832fd7b4d8edd8c2cd3047695822ffce11c19',
-              'fixedVersions': [
-                '1.32.1-r7'
-              ],
-              'installedVersion': '1.32.1-r6',
-              'packageName':      'busybox',
-              'purl':             'pkg:apk/alpine/busybox@1.32.1-r6?arch=ppc64le&distro=3.13.6',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42386',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42386',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42386'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the nvalloc()'
-            },
-            {
-              'cve':  'CVE-2022-28391',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '8.8',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-88'
-              ],
-              'description':   "BusyBox through 1.35.0 allows remote attackers to execute arbitrary code if netstat is used to print a DNS PTR record's value to a VT compatible terminal. Alternatively, the attacker could choose to change the terminal's colors.",
-              'diffID':        'sha256:1ec79c72d048427efba9e9f8cdb832fd7b4d8edd8c2cd3047695822ffce11c19',
-              'fixedVersions': [
-                '1.32.1-r8'
-              ],
-              'installedVersion': '1.32.1-r6',
-              'packageName':      'busybox',
-              'purl':             'pkg:apk/alpine/busybox@1.32.1-r6?arch=ppc64le&distro=3.13.6',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2022-28391',
-                'https://git.alpinelinux.org/aports/plain/main/busybox/0001-libbb-sockaddr2str-ensure-only-printable-characters-.patch',
-                'https://git.alpinelinux.org/aports/plain/main/busybox/0002-nslookup-sanitize-all-printed-strings-with-printable.patch',
-                'https://gitlab.alpinelinux.org/alpine/aports/-/issues/13661',
-                'https://nvd.nist.gov/vuln/detail/CVE-2022-28391',
-                'https://www.cve.org/CVERecord?id=CVE-2022-28391'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: remote attackers may execute arbitrary code if netstat is used'
-            },
-            {
-              'cve':  'CVE-2022-30065',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.8',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.2',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox 1.35-x's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the copyvar function.",
-              'diffID':        'sha256:1ec79c72d048427efba9e9f8cdb832fd7b4d8edd8c2cd3047695822ffce11c19',
-              'fixedVersions': [
-                '1.32.1-r9'
-              ],
-              'installedVersion': '1.32.1-r6',
-              'packageName':      'busybox',
-              'purl':             'pkg:apk/alpine/busybox@1.32.1-r6?arch=ppc64le&distro=3.13.6',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2022-30065',
-                'https://bugs.busybox.net/show_bug.cgi?id=14781',
-                'https://cert-portal.siemens.com/productcert/pdf/ssa-333517.pdf',
-                'https://nvd.nist.gov/vuln/detail/CVE-2022-30065',
-                'https://www.cve.org/CVERecord?id=CVE-2022-30065'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      "busybox: A use-after-free in Busybox's awk applet leads to denial of service"
-            },
-            {
-              'cve':  'CVE-2021-42374',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '5.7',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-125'
-              ],
-              'description':   "An out-of-bounds heap read in Busybox's unlzma applet leads to information leak and denial of service when crafted LZMA-compressed input is decompressed. This can be triggered by any applet/format that",
-              'diffID':        'sha256:1ec79c72d048427efba9e9f8cdb832fd7b4d8edd8c2cd3047695822ffce11c19',
-              'fixedVersions': [
-                '1.32.1-r7'
-              ],
-              'installedVersion': '1.32.1-r6',
-              'packageName':      'busybox',
-              'purl':             'pkg:apk/alpine/busybox@1.32.1-r6?arch=ppc64le&distro=3.13.6',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42374',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42374',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42374'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'busybox: out-of-bounds read in unlzma applet leads to information leak and denial of service when crafted LZMA-compressed input is decompressed'
-            },
-            {
-              'cve':  'CVE-2021-42375',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.5',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '4.1',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-159'
-              ],
-              'description':   "An incorrect handling of a special element in Busybox's ash applet leads to denial of service when processing a crafted shell command, due to the shell mistaking specific characters for reserved characters. This may be used for DoS under rare conditions of filtered command input.",
-              'diffID':        'sha256:1ec79c72d048427efba9e9f8cdb832fd7b4d8edd8c2cd3047695822ffce11c19',
-              'fixedVersions': [
-                '1.32.1-r7'
-              ],
-              'installedVersion': '1.32.1-r6',
-              'packageName':      'busybox',
-              'purl':             'pkg:apk/alpine/busybox@1.32.1-r6?arch=ppc64le&distro=3.13.6',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42375',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42375',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42375'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'busybox: incorrect handling of a special element in ash applet leads to denial of service when processing a crafted shell command'
-            },
-            {
-              'cve':  'CVE-2022-0778',
-              'cvss': {
-                'bitnami': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'ghsa': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'nvd': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-835'
-              ],
-              'description':   'The BN_mod_sqrt() function, which computes a modular square root, contains a bug that can cause it to loop forever for non-prime moduli. Internally this function is used when parsing certificates that contain elliptic curve public keys in compressed form or explicit elliptic curve parameters with a base point encoded in compressed form. It is possible to trigger the infinite loop by crafting a certificate that has invalid explicit curve parameters. Since certificate parsing happens prior to verification of the certificate signature, any process that parses an externally supplied certificate may thus be subject to a denial of service attack. The infinite loop can also be reached when parsing crafted private keys as they can contain explicit elliptic curve parameters. Thus vulnerable situations include: - TLS clients consuming server certificates - TLS servers consuming client certificates - Hosting providers taking certificates or private keys from customers - Certificate authorities parsing certification requests from subscribers - Anything else which parses ASN.1 elliptic curve parameters Also any other applications that use the BN_mod_sqrt() where the attacker can control the parameter values are vulnerable to this DoS issue. In the OpenSSL 1.0.2 version the public key is not parsed during initial parsing of the certificate which makes it slightly harder to trigger the infinite loop. However any operation which requires the public key from the certificate will trigger the infinite loop. In particular the attacker can use a self-signed certificate to trigger the loop during verification of the certificate signature. This issue affects OpenSSL versions 1.0.2, 1.1.1 and 3.0. It was addressed in the releases of 1.1.1n and 3.0.2 on the 15th March 2022. Fixed in OpenSSL 3.0.2 (Affected 3.0.0,3.0.1). Fixed in OpenSSL 1.1.1n (Affected 1.1.1-1.1.1m). Fixed in OpenSSL 1.0.2zd (Affected 1.0.2-1.0.2zc).',
-              'diffID':        'sha256:1ec79c72d048427efba9e9f8cdb832fd7b4d8edd8c2cd3047695822ffce11c19',
-              'fixedVersions': [
-                '1.1.1n-r0'
-              ],
-              'installedVersion': '1.1.1l-r0',
-              'packageName':      'libcrypto1.1',
-              'purl':             'pkg:apk/alpine/libcrypto1.1@1.1.1l-r0?arch=ppc64le&distro=3.13.6',
-              'references':       [
-                'http://packetstormsecurity.com/files/167344/OpenSSL-1.0.2-1.1.1-3.0-BN_mod_sqrt-Infinite-Loop.html',
-                'http://seclists.org/fulldisclosure/2022/May/33',
-                'http://seclists.org/fulldisclosure/2022/May/35',
-                'http://seclists.org/fulldisclosure/2022/May/38',
-                'https://access.redhat.com/errata/RHSA-2022:5326',
-                'https://access.redhat.com/security/cve/CVE-2022-0778',
-                'https://bugzilla.redhat.com/2062202',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2062202',
-                'https://cert-portal.siemens.com/productcert/pdf/ssa-712929.pdf',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-0778',
-                'https://errata.almalinux.org/8/ALSA-2022-5326.html',
-                'https://errata.rockylinux.org/RLSA-2022:4899',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=3118eb64934499d93db3230748a452351d1d9a65',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=380085481c64de749a6dd25cdf0bcf4360b30f83',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=a466912611aa6cbdf550cd10601390e587451246',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=3118eb64934499d93db3230748a452351d1d9a65',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=380085481c64de749a6dd25cdf0bcf4360b30f83',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=a466912611aa6cbdf550cd10601390e587451246',
-                'https://linux.oracle.com/cve/CVE-2022-0778.html',
-                'https://linux.oracle.com/errata/ELSA-2022-9272.html',
-                'https://lists.debian.org/debian-lts-announce/2022/03/msg00023.html',
-                'https://lists.debian.org/debian-lts-announce/2022/03/msg00024.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/323SNN6ZX7PRJJWP2BUAFLPUAE42XWLZ',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/323SNN6ZX7PRJJWP2BUAFLPUAE42XWLZ/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GDB3GQVJPXJE7X5C5JN6JAA4XUDWD6E6',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GDB3GQVJPXJE7X5C5JN6JAA4XUDWD6E6/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/W6K3PR542DXWLEFFMFIDMME4CWMHJRMG',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/W6K3PR542DXWLEFFMFIDMME4CWMHJRMG/',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/323SNN6ZX7PRJJWP2BUAFLPUAE42XWLZ',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/GDB3GQVJPXJE7X5C5JN6JAA4XUDWD6E6',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/W6K3PR542DXWLEFFMFIDMME4CWMHJRMG',
-                'https://nvd.nist.gov/vuln/detail/CVE-2022-0778',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2022-0002',
-                'https://rustsec.org/advisories/RUSTSEC-2022-0014.html',
-                'https://security.gentoo.org/glsa/202210-02',
-                'https://security.netapp.com/advisory/ntap-20220321-0002',
-                'https://security.netapp.com/advisory/ntap-20220321-0002/',
-                'https://security.netapp.com/advisory/ntap-20220429-0005',
-                'https://security.netapp.com/advisory/ntap-20220429-0005/',
-                'https://security.netapp.com/advisory/ntap-20240621-0006',
-                'https://security.netapp.com/advisory/ntap-20240621-0006/',
-                'https://support.apple.com/kb/HT213255',
-                'https://support.apple.com/kb/HT213256',
-                'https://support.apple.com/kb/HT213257',
-                'https://ubuntu.com/security/notices/USN-5328-1',
-                'https://ubuntu.com/security/notices/USN-5328-2',
-                'https://ubuntu.com/security/notices/USN-6457-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2022-0778',
-                'https://www.debian.org/security/2022/dsa-5103',
-                'https://www.openssl.org/news/secadv/20220315.txt',
-                'https://www.oracle.com/security-alerts/cpuapr2022.html',
-                'https://www.oracle.com/security-alerts/cpujul2022.html',
-                'https://www.tenable.com/security/tns-2022-06',
-                'https://www.tenable.com/security/tns-2022-07',
-                'https://www.tenable.com/security/tns-2022-08',
-                'https://www.tenable.com/security/tns-2022-09'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: Infinite loop in BN_mod_sqrt() reachable when parsing certificates'
-            },
-            {
-              'cve':  'CVE-2022-2097',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N'
-                },
-                'nvd': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N'
-                },
-                'redhat': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-327'
-              ],
-              'description':   "AES OCB mode for 32-bit x86 platforms using the AES-NI assembly optimised implementation will not encrypt the entirety of the data under some circumstances. This could reveal sixteen bytes of data that was preexisting in the memory that wasn't written. In the special case of \"in place\" encryption, sixteen bytes of the plaintext would be revealed. Since OpenSSL does not support OCB based cipher suites for TLS and DTLS, they are both unaffected. Fixed in OpenSSL 3.0.5 (Affected 3.0.0-3.0.4). Fixed in OpenSSL 1.1.1q (Affected 1.1.1-1.1.1p).",
-              'diffID':        'sha256:1ec79c72d048427efba9e9f8cdb832fd7b4d8edd8c2cd3047695822ffce11c19',
-              'fixedVersions': [
-                '1.1.1q-r0'
-              ],
-              'installedVersion': '1.1.1l-r0',
-              'packageName':      'libcrypto1.1',
-              'purl':             'pkg:apk/alpine/libcrypto1.1@1.1.1l-r0?arch=ppc64le&distro=3.13.6',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2022:6224',
-                'https://access.redhat.com/security/cve/CVE-2022-2097',
-                'https://bugzilla.redhat.com/2081494',
-                'https://bugzilla.redhat.com/2087911',
-                'https://bugzilla.redhat.com/2087913',
-                'https://bugzilla.redhat.com/2097310',
-                'https://bugzilla.redhat.com/2104905',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2081494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2097310',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2100554',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2104905',
-                'https://cert-portal.siemens.com/productcert/pdf/ssa-332410.pdf',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-1292',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-2068',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-2097',
-                'https://errata.almalinux.org/9/ALSA-2022-6224.html',
-                'https://errata.rockylinux.org/RLSA-2022:5818',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=919925673d6c9cfed3c1085497f5dfbbed5fc431',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=a98f339ddd7e8f487d6e0088d4a9a42324885a93',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=919925673d6c9cfed3c1085497f5dfbbed5fc431',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=a98f339ddd7e8f487d6e0088d4a9a42324885a93',
-                'https://github.com/alexcrichton/openssl-src-rs',
-                'https://linux.oracle.com/cve/CVE-2022-2097.html',
-                'https://linux.oracle.com/errata/ELSA-2022-9955.html',
-                'https://lists.debian.org/debian-lts-announce/2023/02/msg00019.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/R6CK57NBQFTPUMXAPJURCGXUYT76NQAK',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/R6CK57NBQFTPUMXAPJURCGXUYT76NQAK/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/V6567JERRHHJW2GNGJGKDRNHR7SNPZK7',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/V6567JERRHHJW2GNGJGKDRNHR7SNPZK7/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VCMNWKERPBKOEBNL7CLTTX3ZZCZLH7XA',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VCMNWKERPBKOEBNL7CLTTX3ZZCZLH7XA/',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/R6CK57NBQFTPUMXAPJURCGXUYT76NQAK',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/R6CK57NBQFTPUMXAPJURCGXUYT76NQAK/',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/V6567JERRHHJW2GNGJGKDRNHR7SNPZK7',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/V6567JERRHHJW2GNGJGKDRNHR7SNPZK7/',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/VCMNWKERPBKOEBNL7CLTTX3ZZCZLH7XA',
-                'https://nvd.nist.gov/vuln/detail/CVE-2022-2097',
-                'https://rustsec.org/advisories/RUSTSEC-2022-0032.html',
-                'https://security.gentoo.org/glsa/202210-02',
-                'https://security.netapp.com/advisory/ntap-20220715-0011',
-                'https://security.netapp.com/advisory/ntap-20220715-0011/',
-                'https://security.netapp.com/advisory/ntap-20230420-0008',
-                'https://security.netapp.com/advisory/ntap-20230420-0008/',
-                'https://security.netapp.com/advisory/ntap-20240621-0006',
-                'https://security.netapp.com/advisory/ntap-20240621-0006/',
-                'https://ubuntu.com/security/notices/USN-5502-1',
-                'https://ubuntu.com/security/notices/USN-6457-1',
-                'https://www.cve.org/CVERecord?id=CVE-2022-2097',
-                'https://www.debian.org/security/2023/dsa-5343',
-                'https://www.openssl.org/news/secadv/20220705.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: AES OCB fails to encrypt some bytes'
-            },
-            {
-              'cve':  'CVE-2022-0778',
-              'cvss': {
-                'bitnami': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'ghsa': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'nvd': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-835'
-              ],
-              'description':   'The BN_mod_sqrt() function, which computes a modular square root, contains a bug that can cause it to loop forever for non-prime moduli. Internally this function is used when parsing certificates that contain elliptic curve public keys in compressed form or explicit elliptic curve parameters with a base point encoded in compressed form. It is possible to trigger the infinite loop by crafting a certificate that has invalid explicit curve parameters. Since certificate parsing happens prior to verification of the certificate signature, any process that parses an externally supplied certificate may thus be subject to a denial of service attack. The infinite loop can also be reached when parsing crafted private keys as they can contain explicit elliptic curve parameters. Thus vulnerable situations include: - TLS clients consuming server certificates - TLS servers consuming client certificates - Hosting providers taking certificates or private keys from customers - Certificate authorities parsing certification requests from subscribers - Anything else which parses ASN.1 elliptic curve parameters Also any other applications that use the BN_mod_sqrt() where the attacker can control the parameter values are vulnerable to this DoS issue. In the OpenSSL 1.0.2 version the public key is not parsed during initial parsing of the certificate which makes it slightly harder to trigger the infinite loop. However any operation which requires the public key from the certificate will trigger the infinite loop. In particular the attacker can use a self-signed certificate to trigger the loop during verification of the certificate signature. This issue affects OpenSSL versions 1.0.2, 1.1.1 and 3.0. It was addressed in the releases of 1.1.1n and 3.0.2 on the 15th March 2022. Fixed in OpenSSL 3.0.2 (Affected 3.0.0,3.0.1). Fixed in OpenSSL 1.1.1n (Affected 1.1.1-1.1.1m). Fixed in OpenSSL 1.0.2zd (Affected 1.0.2-1.0.2zc).',
-              'diffID':        'sha256:1ec79c72d048427efba9e9f8cdb832fd7b4d8edd8c2cd3047695822ffce11c19',
-              'fixedVersions': [
-                '1.1.1n-r0'
-              ],
-              'installedVersion': '1.1.1l-r0',
-              'packageName':      'libssl1.1',
-              'purl':             'pkg:apk/alpine/libssl1.1@1.1.1l-r0?arch=ppc64le&distro=3.13.6',
-              'references':       [
-                'http://packetstormsecurity.com/files/167344/OpenSSL-1.0.2-1.1.1-3.0-BN_mod_sqrt-Infinite-Loop.html',
-                'http://seclists.org/fulldisclosure/2022/May/33',
-                'http://seclists.org/fulldisclosure/2022/May/35',
-                'http://seclists.org/fulldisclosure/2022/May/38',
-                'https://access.redhat.com/errata/RHSA-2022:5326',
-                'https://access.redhat.com/security/cve/CVE-2022-0778',
-                'https://bugzilla.redhat.com/2062202',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2062202',
-                'https://cert-portal.siemens.com/productcert/pdf/ssa-712929.pdf',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-0778',
-                'https://errata.almalinux.org/8/ALSA-2022-5326.html',
-                'https://errata.rockylinux.org/RLSA-2022:4899',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=3118eb64934499d93db3230748a452351d1d9a65',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=380085481c64de749a6dd25cdf0bcf4360b30f83',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=a466912611aa6cbdf550cd10601390e587451246',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=3118eb64934499d93db3230748a452351d1d9a65',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=380085481c64de749a6dd25cdf0bcf4360b30f83',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=a466912611aa6cbdf550cd10601390e587451246',
-                'https://linux.oracle.com/cve/CVE-2022-0778.html',
-                'https://linux.oracle.com/errata/ELSA-2022-9272.html',
-                'https://lists.debian.org/debian-lts-announce/2022/03/msg00023.html',
-                'https://lists.debian.org/debian-lts-announce/2022/03/msg00024.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/323SNN6ZX7PRJJWP2BUAFLPUAE42XWLZ',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/323SNN6ZX7PRJJWP2BUAFLPUAE42XWLZ/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GDB3GQVJPXJE7X5C5JN6JAA4XUDWD6E6',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GDB3GQVJPXJE7X5C5JN6JAA4XUDWD6E6/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/W6K3PR542DXWLEFFMFIDMME4CWMHJRMG',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/W6K3PR542DXWLEFFMFIDMME4CWMHJRMG/',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/323SNN6ZX7PRJJWP2BUAFLPUAE42XWLZ',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/GDB3GQVJPXJE7X5C5JN6JAA4XUDWD6E6',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/W6K3PR542DXWLEFFMFIDMME4CWMHJRMG',
-                'https://nvd.nist.gov/vuln/detail/CVE-2022-0778',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2022-0002',
-                'https://rustsec.org/advisories/RUSTSEC-2022-0014.html',
-                'https://security.gentoo.org/glsa/202210-02',
-                'https://security.netapp.com/advisory/ntap-20220321-0002',
-                'https://security.netapp.com/advisory/ntap-20220321-0002/',
-                'https://security.netapp.com/advisory/ntap-20220429-0005',
-                'https://security.netapp.com/advisory/ntap-20220429-0005/',
-                'https://security.netapp.com/advisory/ntap-20240621-0006',
-                'https://security.netapp.com/advisory/ntap-20240621-0006/',
-                'https://support.apple.com/kb/HT213255',
-                'https://support.apple.com/kb/HT213256',
-                'https://support.apple.com/kb/HT213257',
-                'https://ubuntu.com/security/notices/USN-5328-1',
-                'https://ubuntu.com/security/notices/USN-5328-2',
-                'https://ubuntu.com/security/notices/USN-6457-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2022-0778',
-                'https://www.debian.org/security/2022/dsa-5103',
-                'https://www.openssl.org/news/secadv/20220315.txt',
-                'https://www.oracle.com/security-alerts/cpuapr2022.html',
-                'https://www.oracle.com/security-alerts/cpujul2022.html',
-                'https://www.tenable.com/security/tns-2022-06',
-                'https://www.tenable.com/security/tns-2022-07',
-                'https://www.tenable.com/security/tns-2022-08',
-                'https://www.tenable.com/security/tns-2022-09'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: Infinite loop in BN_mod_sqrt() reachable when parsing certificates'
-            },
-            {
-              'cve':  'CVE-2022-2097',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N'
-                },
-                'nvd': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N'
-                },
-                'redhat': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-327'
-              ],
-              'description':   "AES OCB mode for 32-bit x86 platforms using the AES-NI assembly optimised implementation will not encrypt the entirety of the data under some circumstances. This could reveal sixteen bytes of data that was preexisting in the memory that wasn't written. In the special case of \"in place\" encryption, sixteen bytes of the plaintext would be revealed. Since OpenSSL does not support OCB based cipher suites for TLS and DTLS, they are both unaffected. Fixed in OpenSSL 3.0.5 (Affected 3.0.0-3.0.4). Fixed in OpenSSL 1.1.1q (Affected 1.1.1-1.1.1p).",
-              'diffID':        'sha256:1ec79c72d048427efba9e9f8cdb832fd7b4d8edd8c2cd3047695822ffce11c19',
-              'fixedVersions': [
-                '1.1.1q-r0'
-              ],
-              'installedVersion': '1.1.1l-r0',
-              'packageName':      'libssl1.1',
-              'purl':             'pkg:apk/alpine/libssl1.1@1.1.1l-r0?arch=ppc64le&distro=3.13.6',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2022:6224',
-                'https://access.redhat.com/security/cve/CVE-2022-2097',
-                'https://bugzilla.redhat.com/2081494',
-                'https://bugzilla.redhat.com/2087911',
-                'https://bugzilla.redhat.com/2087913',
-                'https://bugzilla.redhat.com/2097310',
-                'https://bugzilla.redhat.com/2104905',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2081494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2097310',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2100554',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2104905',
-                'https://cert-portal.siemens.com/productcert/pdf/ssa-332410.pdf',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-1292',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-2068',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-2097',
-                'https://errata.almalinux.org/9/ALSA-2022-6224.html',
-                'https://errata.rockylinux.org/RLSA-2022:5818',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=919925673d6c9cfed3c1085497f5dfbbed5fc431',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=a98f339ddd7e8f487d6e0088d4a9a42324885a93',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=919925673d6c9cfed3c1085497f5dfbbed5fc431',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=a98f339ddd7e8f487d6e0088d4a9a42324885a93',
-                'https://github.com/alexcrichton/openssl-src-rs',
-                'https://linux.oracle.com/cve/CVE-2022-2097.html',
-                'https://linux.oracle.com/errata/ELSA-2022-9955.html',
-                'https://lists.debian.org/debian-lts-announce/2023/02/msg00019.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/R6CK57NBQFTPUMXAPJURCGXUYT76NQAK',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/R6CK57NBQFTPUMXAPJURCGXUYT76NQAK/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/V6567JERRHHJW2GNGJGKDRNHR7SNPZK7',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/V6567JERRHHJW2GNGJGKDRNHR7SNPZK7/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VCMNWKERPBKOEBNL7CLTTX3ZZCZLH7XA',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VCMNWKERPBKOEBNL7CLTTX3ZZCZLH7XA/',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/R6CK57NBQFTPUMXAPJURCGXUYT76NQAK',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/R6CK57NBQFTPUMXAPJURCGXUYT76NQAK/',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/V6567JERRHHJW2GNGJGKDRNHR7SNPZK7',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/V6567JERRHHJW2GNGJGKDRNHR7SNPZK7/',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/VCMNWKERPBKOEBNL7CLTTX3ZZCZLH7XA',
-                'https://nvd.nist.gov/vuln/detail/CVE-2022-2097',
-                'https://rustsec.org/advisories/RUSTSEC-2022-0032.html',
-                'https://security.gentoo.org/glsa/202210-02',
-                'https://security.netapp.com/advisory/ntap-20220715-0011',
-                'https://security.netapp.com/advisory/ntap-20220715-0011/',
-                'https://security.netapp.com/advisory/ntap-20230420-0008',
-                'https://security.netapp.com/advisory/ntap-20230420-0008/',
-                'https://security.netapp.com/advisory/ntap-20240621-0006',
-                'https://security.netapp.com/advisory/ntap-20240621-0006/',
-                'https://ubuntu.com/security/notices/USN-5502-1',
-                'https://ubuntu.com/security/notices/USN-6457-1',
-                'https://www.cve.org/CVERecord?id=CVE-2022-2097',
-                'https://www.debian.org/security/2023/dsa-5343',
-                'https://www.openssl.org/news/secadv/20220705.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: AES OCB fails to encrypt some bytes'
-            },
-            {
-              'cve':  'CVE-2021-42378',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the getvar_i function",
-              'diffID':        'sha256:1ec79c72d048427efba9e9f8cdb832fd7b4d8edd8c2cd3047695822ffce11c19',
-              'fixedVersions': [
-                '1.32.1-r7'
-              ],
-              'installedVersion': '1.32.1-r6',
-              'packageName':      'ssl_client',
-              'purl':             'pkg:apk/alpine/ssl_client@1.32.1-r6?arch=ppc64le&distro=3.13.6',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42378',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42378',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42378'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the getvar_i()'
-            },
-            {
-              'cve':  'CVE-2021-42379',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the next_input_file function",
-              'diffID':        'sha256:1ec79c72d048427efba9e9f8cdb832fd7b4d8edd8c2cd3047695822ffce11c19',
-              'fixedVersions': [
-                '1.32.1-r7'
-              ],
-              'installedVersion': '1.32.1-r6',
-              'packageName':      'ssl_client',
-              'purl':             'pkg:apk/alpine/ssl_client@1.32.1-r6?arch=ppc64le&distro=3.13.6',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42379',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42379',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42379'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the next_input_file()'
-            },
-            {
-              'cve':  'CVE-2021-42380',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the clrvar function",
-              'diffID':        'sha256:1ec79c72d048427efba9e9f8cdb832fd7b4d8edd8c2cd3047695822ffce11c19',
-              'fixedVersions': [
-                '1.32.1-r7'
-              ],
-              'installedVersion': '1.32.1-r6',
-              'packageName':      'ssl_client',
-              'purl':             'pkg:apk/alpine/ssl_client@1.32.1-r6?arch=ppc64le&distro=3.13.6',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42380',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42380',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42380'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the clrvar()'
-            },
-            {
-              'cve':  'CVE-2021-42381',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the hash_init function",
-              'diffID':        'sha256:1ec79c72d048427efba9e9f8cdb832fd7b4d8edd8c2cd3047695822ffce11c19',
-              'fixedVersions': [
-                '1.32.1-r7'
-              ],
-              'installedVersion': '1.32.1-r6',
-              'packageName':      'ssl_client',
-              'purl':             'pkg:apk/alpine/ssl_client@1.32.1-r6?arch=ppc64le&distro=3.13.6',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42381',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42381',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42381'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the hash_init()'
-            },
-            {
-              'cve':  'CVE-2021-42382',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the getvar_s function",
-              'diffID':        'sha256:1ec79c72d048427efba9e9f8cdb832fd7b4d8edd8c2cd3047695822ffce11c19',
-              'fixedVersions': [
-                '1.32.1-r7'
-              ],
-              'installedVersion': '1.32.1-r6',
-              'packageName':      'ssl_client',
-              'purl':             'pkg:apk/alpine/ssl_client@1.32.1-r6?arch=ppc64le&distro=3.13.6',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42382',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42382',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42382'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the getvar_s()'
-            },
-            {
-              'cve':  'CVE-2021-42383',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the evaluate function",
-              'diffID':        'sha256:1ec79c72d048427efba9e9f8cdb832fd7b4d8edd8c2cd3047695822ffce11c19',
-              'fixedVersions': [
-                '1.32.1-r7'
-              ],
-              'installedVersion': '1.32.1-r6',
-              'packageName':      'ssl_client',
-              'purl':             'pkg:apk/alpine/ssl_client@1.32.1-r6?arch=ppc64le&distro=3.13.6',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42383',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42383',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42383'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the evaluate()'
-            },
-            {
-              'cve':  'CVE-2021-42384',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the handle_special function",
-              'diffID':        'sha256:1ec79c72d048427efba9e9f8cdb832fd7b4d8edd8c2cd3047695822ffce11c19',
-              'fixedVersions': [
-                '1.32.1-r7'
-              ],
-              'installedVersion': '1.32.1-r6',
-              'packageName':      'ssl_client',
-              'purl':             'pkg:apk/alpine/ssl_client@1.32.1-r6?arch=ppc64le&distro=3.13.6',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42384',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42384',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42384'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the handle_special()'
-            },
-            {
-              'cve':  'CVE-2021-42385',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the evaluate function",
-              'diffID':        'sha256:1ec79c72d048427efba9e9f8cdb832fd7b4d8edd8c2cd3047695822ffce11c19',
-              'fixedVersions': [
-                '1.32.1-r7'
-              ],
-              'installedVersion': '1.32.1-r6',
-              'packageName':      'ssl_client',
-              'purl':             'pkg:apk/alpine/ssl_client@1.32.1-r6?arch=ppc64le&distro=3.13.6',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42385',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42385',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42385'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the evaluate()'
-            },
-            {
-              'cve':  'CVE-2021-42386',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the nvalloc function",
-              'diffID':        'sha256:1ec79c72d048427efba9e9f8cdb832fd7b4d8edd8c2cd3047695822ffce11c19',
-              'fixedVersions': [
-                '1.32.1-r7'
-              ],
-              'installedVersion': '1.32.1-r6',
-              'packageName':      'ssl_client',
-              'purl':             'pkg:apk/alpine/ssl_client@1.32.1-r6?arch=ppc64le&distro=3.13.6',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42386',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42386',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42386'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the nvalloc()'
-            },
-            {
-              'cve':  'CVE-2022-28391',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '8.8',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-88'
-              ],
-              'description':   "BusyBox through 1.35.0 allows remote attackers to execute arbitrary code if netstat is used to print a DNS PTR record's value to a VT compatible terminal. Alternatively, the attacker could choose to change the terminal's colors.",
-              'diffID':        'sha256:1ec79c72d048427efba9e9f8cdb832fd7b4d8edd8c2cd3047695822ffce11c19',
-              'fixedVersions': [
-                '1.32.1-r8'
-              ],
-              'installedVersion': '1.32.1-r6',
-              'packageName':      'ssl_client',
-              'purl':             'pkg:apk/alpine/ssl_client@1.32.1-r6?arch=ppc64le&distro=3.13.6',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2022-28391',
-                'https://git.alpinelinux.org/aports/plain/main/busybox/0001-libbb-sockaddr2str-ensure-only-printable-characters-.patch',
-                'https://git.alpinelinux.org/aports/plain/main/busybox/0002-nslookup-sanitize-all-printed-strings-with-printable.patch',
-                'https://gitlab.alpinelinux.org/alpine/aports/-/issues/13661',
-                'https://nvd.nist.gov/vuln/detail/CVE-2022-28391',
-                'https://www.cve.org/CVERecord?id=CVE-2022-28391'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: remote attackers may execute arbitrary code if netstat is used'
-            },
-            {
-              'cve':  'CVE-2022-30065',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.8',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.2',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox 1.35-x's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the copyvar function.",
-              'diffID':        'sha256:1ec79c72d048427efba9e9f8cdb832fd7b4d8edd8c2cd3047695822ffce11c19',
-              'fixedVersions': [
-                '1.32.1-r9'
-              ],
-              'installedVersion': '1.32.1-r6',
-              'packageName':      'ssl_client',
-              'purl':             'pkg:apk/alpine/ssl_client@1.32.1-r6?arch=ppc64le&distro=3.13.6',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2022-30065',
-                'https://bugs.busybox.net/show_bug.cgi?id=14781',
-                'https://cert-portal.siemens.com/productcert/pdf/ssa-333517.pdf',
-                'https://nvd.nist.gov/vuln/detail/CVE-2022-30065',
-                'https://www.cve.org/CVERecord?id=CVE-2022-30065'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      "busybox: A use-after-free in Busybox's awk applet leads to denial of service"
-            },
-            {
-              'cve':  'CVE-2021-42374',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '5.7',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-125'
-              ],
-              'description':   "An out-of-bounds heap read in Busybox's unlzma applet leads to information leak and denial of service when crafted LZMA-compressed input is decompressed. This can be triggered by any applet/format that",
-              'diffID':        'sha256:1ec79c72d048427efba9e9f8cdb832fd7b4d8edd8c2cd3047695822ffce11c19',
-              'fixedVersions': [
-                '1.32.1-r7'
-              ],
-              'installedVersion': '1.32.1-r6',
-              'packageName':      'ssl_client',
-              'purl':             'pkg:apk/alpine/ssl_client@1.32.1-r6?arch=ppc64le&distro=3.13.6',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42374',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42374',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42374'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'busybox: out-of-bounds read in unlzma applet leads to information leak and denial of service when crafted LZMA-compressed input is decompressed'
-            },
-            {
-              'cve':  'CVE-2021-42375',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.5',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '4.1',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-159'
-              ],
-              'description':   "An incorrect handling of a special element in Busybox's ash applet leads to denial of service when processing a crafted shell command, due to the shell mistaking specific characters for reserved characters. This may be used for DoS under rare conditions of filtered command input.",
-              'diffID':        'sha256:1ec79c72d048427efba9e9f8cdb832fd7b4d8edd8c2cd3047695822ffce11c19',
-              'fixedVersions': [
-                '1.32.1-r7'
-              ],
-              'installedVersion': '1.32.1-r6',
-              'packageName':      'ssl_client',
-              'purl':             'pkg:apk/alpine/ssl_client@1.32.1-r6?arch=ppc64le&distro=3.13.6',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42375',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42375',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42375'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'busybox: incorrect handling of a special element in ash applet leads to denial of service when processing a crafted shell command'
-            },
-            {
-              'cve':  'CVE-2022-37434',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '9.8',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-787',
-                'CWE-120'
-              ],
-              'description':   'zlib through 1.2.12 has a heap-based buffer over-read or buffer overflow in inflate in inflate.c via a large gzip header extra field. NOTE: only applications that call inflateGetHeader are affected. Some common applications bundle the affected zlib source code but may be unable to call inflateGetHeader (e.g., see the nodejs/node reference).',
-              'diffID':        'sha256:1ec79c72d048427efba9e9f8cdb832fd7b4d8edd8c2cd3047695822ffce11c19',
-              'fixedVersions': [
-                '1.2.12-r2'
-              ],
-              'installedVersion': '1.2.11-r3',
-              'packageName':      'zlib',
-              'purl':             'pkg:apk/alpine/zlib@1.2.11-r3?arch=ppc64le&distro=3.13.6',
-              'references':       [
-                'http://seclists.org/fulldisclosure/2022/Oct/37',
-                'http://seclists.org/fulldisclosure/2022/Oct/38',
-                'http://seclists.org/fulldisclosure/2022/Oct/41',
-                'http://seclists.org/fulldisclosure/2022/Oct/42',
-                'http://www.openwall.com/lists/oss-security/2022/08/05/2',
-                'http://www.openwall.com/lists/oss-security/2022/08/09/1',
-                'https://access.redhat.com/errata/RHSA-2022:8291',
-                'https://access.redhat.com/security/cve/CVE-2022-37434',
-                'https://bugzilla.redhat.com/2116639',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2053198',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2077431',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2081296',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2116639',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-37434',
-                'https://errata.almalinux.org/9/ALSA-2022-8291.html',
-                'https://errata.rockylinux.org/RLSA-2022:8291',
-                'https://github.com/curl/curl/issues/9271',
-                'https://github.com/ivd38/zlib_overflow',
-                'https://github.com/madler/zlib/blob/21767c654d31d2dccdde4330529775c6c5fd5389/zlib.h#L1062-L1063',
-                'https://github.com/madler/zlib/commit/1eb7682f845ac9e9bf9ae35bbfb3bad5dacbd91d',
-                'https://github.com/madler/zlib/commit/eff308af425b67093bab25f80f1ae950166bece1',
-                'https://github.com/nodejs/node/blob/75b68c6e4db515f76df73af476eccf382bbcb00a/deps/zlib/inflate.c#L762-L764',
-                'https://linux.oracle.com/cve/CVE-2022-37434.html',
-                'https://linux.oracle.com/errata/ELSA-2023-1095.html',
-                'https://lists.debian.org/debian-lts-announce/2022/09/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JWN4VE3JQR4O2SOUS5TXNLANRPMHWV4I/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NMBOJ77A7T7PQCARMDUK75TE6LLESZ3O/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PAVPQNCG3XRLCLNSQRM3KAN5ZFMVXVTY/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/X5U7OTKZSHY2I3ZFJSR2SHFHW72RKGDK/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YRQAI7H4M4RQZ2IWZUEEXECBE5D56BH2/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2022-37434',
-                'https://security.netapp.com/advisory/ntap-20220901-0005/',
-                'https://security.netapp.com/advisory/ntap-20230427-0007/',
-                'https://support.apple.com/kb/HT213488',
-                'https://support.apple.com/kb/HT213489',
-                'https://support.apple.com/kb/HT213490',
-                'https://support.apple.com/kb/HT213491',
-                'https://support.apple.com/kb/HT213493',
-                'https://support.apple.com/kb/HT213494',
-                'https://ubuntu.com/security/notices/USN-5570-1',
-                'https://ubuntu.com/security/notices/USN-5570-2',
-                'https://ubuntu.com/security/notices/USN-5573-1',
-                'https://ubuntu.com/security/notices/USN-6736-1',
-                'https://ubuntu.com/security/notices/USN-6736-2',
-                'https://www.cve.org/CVERecord?id=CVE-2022-37434',
-                'https://www.debian.org/security/2022/dsa-5218'
-              ],
-              'severity':   'CRITICAL',
-              'suppressed': false,
-              'title':      'zlib: heap-based buffer over-read and overflow in inflate() in inflate.c via a large gzip header extra field'
-            },
-            {
-              'cve':  'CVE-2018-25032',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'nvd': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '8.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-787'
-              ],
-              'description':   'zlib before 1.2.12 allows memory corruption when deflating (i.e., when compressing) if the input has many distant matches.',
-              'diffID':        'sha256:1ec79c72d048427efba9e9f8cdb832fd7b4d8edd8c2cd3047695822ffce11c19',
-              'fixedVersions': [
-                '1.2.12-r0'
-              ],
-              'installedVersion': '1.2.11-r3',
-              'packageName':      'zlib',
-              'purl':             'pkg:apk/alpine/zlib@1.2.11-r3?arch=ppc64le&distro=3.13.6',
-              'references':       [
-                'http://seclists.org/fulldisclosure/2022/May/33',
-                'http://seclists.org/fulldisclosure/2022/May/35',
-                'http://seclists.org/fulldisclosure/2022/May/38',
-                'http://www.openwall.com/lists/oss-security/2022/03/25/2',
-                'http://www.openwall.com/lists/oss-security/2022/03/26/1',
-                'https://access.redhat.com/errata/RHSA-2022:8420',
-                'https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-25032.json',
-                'https://access.redhat.com/security/cve/CVE-2018-25032',
-                'https://bugzilla.redhat.com/2067945',
-                'https://cert-portal.siemens.com/productcert/pdf/ssa-333517.pdf',
-                'https://errata.almalinux.org/9/ALSA-2022-8420.html',
-                'https://github.com/advisories/GHSA-jc36-42cf-vqwj',
-                'https://github.com/madler/zlib/commit/5c44459c3b28a9bd3283aaceab7c615f8020c531',
-                'https://github.com/madler/zlib/compare/v1.2.11...v1.2.12',
-                'https://github.com/madler/zlib/issues/605',
-                'https://github.com/rubysec/ruby-advisory-db/blob/master/gems/nokogiri/CVE-2018-25032.yml',
-                'https://github.com/sparklemotion/nokogiri/releases/tag/v1.13.4',
-                'https://github.com/sparklemotion/nokogiri/security/advisories/GHSA-v6gp-9mmm-c6p5',
-                'https://groups.google.com/g/ruby-security-ann/c/vX7qSjsvWis/m/TJWN4oOKBwAJ',
-                'https://linux.oracle.com/cve/CVE-2018-25032.html',
-                'https://linux.oracle.com/errata/ELSA-2022-9565.html',
-                'https://lists.debian.org/debian-lts-announce/2022/04/msg00000.html',
-                'https://lists.debian.org/debian-lts-announce/2022/05/msg00008.html',
-                'https://lists.debian.org/debian-lts-announce/2022/09/msg00023.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DCZFIJBJTZ7CL5QXBFKTQ22Q26VINRUF/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DF62MVMH3QUGMBDCB3DY2ERQ6EBHTADB/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JZZPTWRYQULAOL3AW7RZJNVZ2UONXCV4/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NS2D2GFPFGOJUL4WQ3DUAY7HF4VWQ77F/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VOKNP2L734AEL47NRYGVZIKEFOUBQY5Y/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/XOKFMSNQ5D5WGMALBNBXU3GE442V74WU/',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/DCZFIJBJTZ7CL5QXBFKTQ22Q26VINRUF',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/DCZFIJBJTZ7CL5QXBFKTQ22Q26VINRUF/',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/DF62MVMH3QUGMBDCB3DY2ERQ6EBHTADB',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/DF62MVMH3QUGMBDCB3DY2ERQ6EBHTADB/',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/JZZPTWRYQULAOL3AW7RZJNVZ2UONXCV4',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/JZZPTWRYQULAOL3AW7RZJNVZ2UONXCV4/',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/NS2D2GFPFGOJUL4WQ3DUAY7HF4VWQ77F',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/NS2D2GFPFGOJUL4WQ3DUAY7HF4VWQ77F/',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/VOKNP2L734AEL47NRYGVZIKEFOUBQY5Y',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/VOKNP2L734AEL47NRYGVZIKEFOUBQY5Y/',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/XOKFMSNQ5D5WGMALBNBXU3GE442V74WU',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/XOKFMSNQ5D5WGMALBNBXU3GE442V74WU/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2018-25032',
-                'https://security.gentoo.org/glsa/202210-42',
-                'https://security.netapp.com/advisory/ntap-20220526-0009',
-                'https://security.netapp.com/advisory/ntap-20220526-0009/',
-                'https://security.netapp.com/advisory/ntap-20220729-0004',
-                'https://security.netapp.com/advisory/ntap-20220729-0004/',
-                'https://support.apple.com/kb/HT213255',
-                'https://support.apple.com/kb/HT213256',
-                'https://support.apple.com/kb/HT213257',
-                'https://ubuntu.com/security/notices/USN-5355-1',
-                'https://ubuntu.com/security/notices/USN-5355-2',
-                'https://ubuntu.com/security/notices/USN-5359-1',
-                'https://ubuntu.com/security/notices/USN-5359-2',
-                'https://ubuntu.com/security/notices/USN-5739-1',
-                'https://ubuntu.com/security/notices/USN-6736-1',
-                'https://ubuntu.com/security/notices/USN-6736-2',
-                'https://www.cve.org/CVERecord?id=CVE-2018-25032',
-                'https://www.debian.org/security/2022/dsa-5111',
-                'https://www.openwall.com/lists/oss-security/2022/03/24/1',
-                'https://www.openwall.com/lists/oss-security/2022/03/28/1',
-                'https://www.openwall.com/lists/oss-security/2022/03/28/3',
-                'https://www.oracle.com/security-alerts/cpujul2022.html'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'zlib: A flaw found in zlib when compressing (not decompressing) certain inputs'
-            }
-          ]
-        }
-      ],
-      'summary': {
-        'critical':   1,
-        'high':       25,
-        'low':        0,
-        'medium':     6,
-        'suppressed': 0,
-        'unknown':    0
-      }
-    }
-  },
-  {
-    'id':    'default/11b6804126b01b05199670eb61ff5f26ad02c3bf4a7af5010f1daa660247b979',
-    'type':  'storage.sbomscanner.kubewarden.io.vulnerabilityreport',
-    'links': {
-      'patch':  'https://localhost:8005/v1/storage.sbomscanner.kubewarden.io.vulnerabilityreports/default/11b6804126b01b05199670eb61ff5f26ad02c3bf4a7af5010f1daa660247b979',
-      'remove': 'https://localhost:8005/v1/storage.sbomscanner.kubewarden.io.vulnerabilityreports/default/11b6804126b01b05199670eb61ff5f26ad02c3bf4a7af5010f1daa660247b979',
-      'self':   'https://localhost:8005/v1/storage.sbomscanner.kubewarden.io.vulnerabilityreports/default/11b6804126b01b05199670eb61ff5f26ad02c3bf4a7af5010f1daa660247b979',
-      'update': 'https://localhost:8005/v1/storage.sbomscanner.kubewarden.io.vulnerabilityreports/default/11b6804126b01b05199670eb61ff5f26ad02c3bf4a7af5010f1daa660247b979',
-      'view':   'https://localhost:8005/apis/storage.sbomscanner.kubewarden.io/v1alpha1/namespaces/default/vulnerabilityreports/11b6804126b01b05199670eb61ff5f26ad02c3bf4a7af5010f1daa660247b979'
-    },
-    'apiVersion':    'storage.sbomscanner.kubewarden.io/v1alpha1',
-    'imageMetadata': {
-      'digest':      'sha256:801b48676d597c86ea0f149529e59353afafe1624814e598a973044e8e37db3c',
-      'platform':    'linux/arm/v7',
-      'registry':    'lsong-demo1',
-      'registryURI': 'registry-1.docker.io',
-      'repository':  'library/alpine',
-      'tag':         '3.20.5'
-    },
-    'kind':     'VulnerabilityReport',
-    'metadata': {
-      'creationTimestamp': '2026-01-14T18:51:34Z',
-      'fields':            [
-        '11b6804126b01b05199670eb61ff5f26ad02c3bf4a7af5010f1daa660247b979',
-        'registry-1.docker.io/library/alpine:3.20.5',
-        'linux/arm/v7',
-        '18 (0 suppressed)'
-      ],
-      'labels': {
-        'app.kubernetes.io/managed-by':          'sbomscanner',
-        'app.kubernetes.io/part-of':             'sbomscanner',
-        'sbomscanner.kubewarden.io/scanjob-uid': '445c600a-c4b6-40b3-bd71-f2d2140a37d5'
-      },
-      'name':            '11b6804126b01b05199670eb61ff5f26ad02c3bf4a7af5010f1daa660247b979',
-      'namespace':       'default',
-      'ownerReferences': [
-        {
-          'apiVersion':         'storage.sbomscanner.kubewarden.io/v1alpha1',
-          'blockOwnerDeletion': true,
-          'controller':         true,
-          'kind':               'SBOM',
-          'name':               '11b6804126b01b05199670eb61ff5f26ad02c3bf4a7af5010f1daa660247b979',
-          'uid':                '26bcfb39-fd74-4889-8f06-1218ba5404af'
-        }
-      ],
-      'relationships': [
-        {
-          'fromId':   'default/11b6804126b01b05199670eb61ff5f26ad02c3bf4a7af5010f1daa660247b979',
-          'fromType': 'storage.sbomscanner.kubewarden.io.sbom',
-          'rel':      'owner',
-          'state':    'active',
-          'message':  'Resource is current'
-        }
-      ],
-      'resourceVersion': '1',
-      'state':           {
-        'error':         false,
-        'message':       'Resource is current',
-        'name':          'active',
-        'transitioning': false
-      },
-      'uid': '519b2784-e8a2-4f4b-a9d4-5e46b4985e91'
-    },
-    'report': {
-      'results': [
-        {
-          'class':           'os-pkgs',
-          'target':          '/var/run/worker/trivy.sbom.1745422248.json (alpine 3.20.5)',
-          'type':            'alpine',
-          'vulnerabilities': [
-            {
-              'cve':  'CVE-2024-58251',
-              'cwes': [
-                'CWE-150'
-              ],
-              'description':   'In netstat in BusyBox through 1.37.0, local users can launch of network application with an argv[0] containing an ANSI terminal escape sequence, leading to a denial of service (terminal locked up) when netstat is used by a victim.',
-              'diffID':        'sha256:0f7a9cab315eb02b95758540ba65771e943979b12837ff0757caa208cad58e82',
-              'fixedVersions': [
-                '1.36.1-r31'
-              ],
-              'installedVersion': '1.36.1-r29',
-              'packageName':      'busybox',
-              'purl':             'pkg:apk/alpine/busybox@1.36.1-r29?arch=armv7&distro=3.20.5',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2025/04/23/6',
-                'https://bugs.busybox.net/show_bug.cgi?id=15922',
-                'https://www.busybox.net',
-                'https://www.busybox.net/downloads/',
-                'https://www.cve.org/CVERecord?id=CVE-2024-58251'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'In netstat in BusyBox through 1.37.0, local users can launch of networ ...'
-            },
-            {
-              'cve':  'CVE-2025-46394',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '3.3',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-451'
-              ],
-              'description':   'In tar in BusyBox through 1.37.0, a TAR archive can have filenames hidden from a listing through the use of terminal escape sequences.',
-              'diffID':        'sha256:0f7a9cab315eb02b95758540ba65771e943979b12837ff0757caa208cad58e82',
-              'fixedVersions': [
-                '1.36.1-r31'
-              ],
-              'installedVersion': '1.36.1-r29',
-              'packageName':      'busybox',
-              'purl':             'pkg:apk/alpine/busybox@1.36.1-r29?arch=armv7&distro=3.20.5',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2025/04/23/5',
-                'http://www.openwall.com/lists/oss-security/2025/04/24/3',
-                'https://bugs.busybox.net/show_bug.cgi?id=16018',
-                'https://lists.busybox.net/pipermail/busybox/2024-July/090806.html',
-                'https://lists.busybox.net/pipermail/busybox/2024-July/090814.html',
-                'https://www.busybox.net',
-                'https://www.busybox.net/downloads/',
-                'https://www.cve.org/CVERecord?id=CVE-2025-46394',
-                'https://www.openwall.com/lists/oss-security/2025/04/23/1'
-              ],
-              'severity':   'LOW',
-              'suppressed': false,
-              'title':      'In tar in BusyBox through 1.37.0, a TAR archive can have filenames hid ...'
-            },
-            {
-              'cve':  'CVE-2024-58251',
-              'cwes': [
-                'CWE-150'
-              ],
-              'description':   'In netstat in BusyBox through 1.37.0, local users can launch of network application with an argv[0] containing an ANSI terminal escape sequence, leading to a denial of service (terminal locked up) when netstat is used by a victim.',
-              'diffID':        'sha256:0f7a9cab315eb02b95758540ba65771e943979b12837ff0757caa208cad58e82',
-              'fixedVersions': [
-                '1.36.1-r31'
-              ],
-              'installedVersion': '1.36.1-r29',
-              'packageName':      'busybox-binsh',
-              'purl':             'pkg:apk/alpine/busybox-binsh@1.36.1-r29?arch=armv7&distro=3.20.5',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2025/04/23/6',
-                'https://bugs.busybox.net/show_bug.cgi?id=15922',
-                'https://www.busybox.net',
-                'https://www.busybox.net/downloads/',
-                'https://www.cve.org/CVERecord?id=CVE-2024-58251'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'In netstat in BusyBox through 1.37.0, local users can launch of networ ...'
-            },
-            {
-              'cve':  'CVE-2025-46394',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '3.3',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-451'
-              ],
-              'description':   'In tar in BusyBox through 1.37.0, a TAR archive can have filenames hidden from a listing through the use of terminal escape sequences.',
-              'diffID':        'sha256:0f7a9cab315eb02b95758540ba65771e943979b12837ff0757caa208cad58e82',
-              'fixedVersions': [
-                '1.36.1-r31'
-              ],
-              'installedVersion': '1.36.1-r29',
-              'packageName':      'busybox-binsh',
-              'purl':             'pkg:apk/alpine/busybox-binsh@1.36.1-r29?arch=armv7&distro=3.20.5',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2025/04/23/5',
-                'http://www.openwall.com/lists/oss-security/2025/04/24/3',
-                'https://bugs.busybox.net/show_bug.cgi?id=16018',
-                'https://lists.busybox.net/pipermail/busybox/2024-July/090806.html',
-                'https://lists.busybox.net/pipermail/busybox/2024-July/090814.html',
-                'https://www.busybox.net',
-                'https://www.busybox.net/downloads/',
-                'https://www.cve.org/CVERecord?id=CVE-2025-46394',
-                'https://www.openwall.com/lists/oss-security/2025/04/23/1'
-              ],
-              'severity':   'LOW',
-              'suppressed': false,
-              'title':      'In tar in BusyBox through 1.37.0, a TAR archive can have filenames hid ...'
-            },
-            {
-              'cve':  'CVE-2024-12797',
-              'cvss': {
-                'redhat': {
-                  'v3score':  '7.4',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-392'
-              ],
-              'description':   "Issue summary: Clients using RFC7250 Raw Public Keys (RPKs) to authenticate a\nserver may fail to notice that the server was not authenticated, because\nhandshakes don't abort as expected when the SSL_VERIFY_PEER verification mode\nis set.\n\nImpact summary: TLS and DTLS connections using raw public keys may be\nvulnerable to man-in-middle attacks when server authentication failure is not\ndetected by clients.\n\nRPKs are disabled by default in both TLS clients and TLS servers.  The issue\nonly arises when TLS clients explicitly enable RPK use by the server, and the\nserver, likewise, enables sending of an RPK instead of an X.509 certificate\nchain.  The affected clients are those that then rely on the handshake to\nfail when the server's RPK fails to match one of the expected public keys,\nby setting the verification mode to SSL_VERIFY_PEER.\n\nClients that enable server-side raw public keys can still find out that raw\npublic key verification failed by calling SSL_get_verify_result(), and those\nthat do, and take appropriate action, are not affected.  This issue was\nintroduced in the initial implementation of RPK support in OpenSSL 3.2.\n\nThe FIPS modules in 3.4, 3.3, 3.2, 3.1 and 3.0 are not affected by this issue.",
-              'diffID':        'sha256:0f7a9cab315eb02b95758540ba65771e943979b12837ff0757caa208cad58e82',
-              'fixedVersions': [
-                '3.3.3-r0'
-              ],
-              'installedVersion': '3.3.2-r1',
-              'packageName':      'libcrypto3',
-              'purl':             'pkg:apk/alpine/libcrypto3@3.3.2-r1?arch=armv7&distro=3.20.5',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2025/02/11/3',
-                'http://www.openwall.com/lists/oss-security/2025/02/11/4',
-                'https://access.redhat.com/errata/RHSA-2025:1330',
-                'https://access.redhat.com/security/cve/CVE-2024-12797',
-                'https://bugzilla.redhat.com/2342757',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2342757',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-12797',
-                'https://errata.almalinux.org/9/ALSA-2025-1330.html',
-                'https://errata.rockylinux.org/RLSA-2025:1330',
-                'https://github.com/openssl/openssl/commit/738d4f9fdeaad57660dcba50a619fafced3fd5e9',
-                'https://github.com/openssl/openssl/commit/798779d43494549b611233f92652f0da5328fbe7',
-                'https://github.com/openssl/openssl/commit/87ebd203feffcf92ad5889df92f90bb0ee10a699',
-                'https://github.com/pyca/cryptography',
-                'https://github.com/pyca/cryptography/security/advisories/GHSA-79v4-65xg-pq4g',
-                'https://linux.oracle.com/cve/CVE-2024-12797.html',
-                'https://linux.oracle.com/errata/ELSA-2025-1330.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2024-12797',
-                'https://openssl-library.org/news/secadv/20250211.txt',
-                'https://security.netapp.com/advisory/ntap-20250214-0001/',
-                'https://ubuntu.com/security/notices/USN-7264-1',
-                'https://www.cve.org/CVERecord?id=CVE-2024-12797'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      "openssl: RFC7250 handshakes with unauthenticated servers don't abort as expected"
-            },
-            {
-              'cve':  'CVE-2024-13176',
-              'cvss': {
-                'redhat': {
-                  'v3score':  '4.7',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-385'
-              ],
-              'description':   'Issue summary: A timing side-channel which could potentially allow recovering\nthe private key exists in the ECDSA signature computation.\n\nImpact summary: A timing side-channel in ECDSA signature computations\ncould allow recovering the private key by an attacker. However, measuring\nthe timing would require either local access to the signing application or\na very fast network connection with low latency.\n\nThere is a timing signal of around 300 nanoseconds when the top word of\nthe inverted ECDSA nonce value is zero. This can happen with significant\nprobability only for some of the supported elliptic curves. In particular\nthe NIST P-521 curve is affected. To be able to measure this leak, the attacker\nprocess must either be located in the same physical computer or must\nhave a very fast network connection with low latency. For that reason\nthe severity of this vulnerability is Low.\n\nThe FIPS modules in 3.4, 3.3, 3.2, 3.1 and 3.0 are affected by this issue.',
-              'diffID':        'sha256:0f7a9cab315eb02b95758540ba65771e943979b12837ff0757caa208cad58e82',
-              'fixedVersions': [
-                '3.3.2-r2'
-              ],
-              'installedVersion': '3.3.2-r1',
-              'packageName':      'libcrypto3',
-              'purl':             'pkg:apk/alpine/libcrypto3@3.3.2-r1?arch=armv7&distro=3.20.5',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2025/01/20/2',
-                'https://access.redhat.com/errata/RHSA-2025:16046',
-                'https://access.redhat.com/security/cve/CVE-2024-13176',
-                'https://bugzilla.redhat.com/2359885',
-                'https://bugzilla.redhat.com/2359888',
-                'https://bugzilla.redhat.com/2359892',
-                'https://bugzilla.redhat.com/2359894',
-                'https://bugzilla.redhat.com/2359895',
-                'https://bugzilla.redhat.com/2359899',
-                'https://bugzilla.redhat.com/2359900',
-                'https://bugzilla.redhat.com/2359902',
-                'https://bugzilla.redhat.com/2359903',
-                'https://bugzilla.redhat.com/2359911',
-                'https://bugzilla.redhat.com/2359918',
-                'https://bugzilla.redhat.com/2359920',
-                'https://bugzilla.redhat.com/2359924',
-                'https://bugzilla.redhat.com/2359928',
-                'https://bugzilla.redhat.com/2359930',
-                'https://bugzilla.redhat.com/2359932',
-                'https://bugzilla.redhat.com/2359934',
-                'https://bugzilla.redhat.com/2359938',
-                'https://bugzilla.redhat.com/2359940',
-                'https://bugzilla.redhat.com/2359943',
-                'https://bugzilla.redhat.com/2359944',
-                'https://bugzilla.redhat.com/2359945',
-                'https://bugzilla.redhat.com/2359947',
-                'https://bugzilla.redhat.com/2359950',
-                'https://bugzilla.redhat.com/2359963',
-                'https://bugzilla.redhat.com/2359964',
-                'https://bugzilla.redhat.com/2359972',
-                'https://bugzilla.redhat.com/2370920',
-                'https://bugzilla.redhat.com/2380264',
-                'https://bugzilla.redhat.com/2380273',
-                'https://bugzilla.redhat.com/2380274',
-                'https://bugzilla.redhat.com/2380278',
-                'https://bugzilla.redhat.com/2380280',
-                'https://bugzilla.redhat.com/2380283',
-                'https://bugzilla.redhat.com/2380284',
-                'https://bugzilla.redhat.com/2380290',
-                'https://bugzilla.redhat.com/2380291',
-                'https://bugzilla.redhat.com/2380295',
-                'https://bugzilla.redhat.com/2380298',
-                'https://bugzilla.redhat.com/2380306',
-                'https://bugzilla.redhat.com/2380308',
-                'https://bugzilla.redhat.com/2380309',
-                'https://bugzilla.redhat.com/2380310',
-                'https://bugzilla.redhat.com/2380312',
-                'https://bugzilla.redhat.com/2380313',
-                'https://bugzilla.redhat.com/2380320',
-                'https://bugzilla.redhat.com/2380321',
-                'https://bugzilla.redhat.com/2380322',
-                'https://bugzilla.redhat.com/2380326',
-                'https://bugzilla.redhat.com/2380327',
-                'https://bugzilla.redhat.com/2380334',
-                'https://bugzilla.redhat.com/2380335',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2338999',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359885',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359888',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359892',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359894',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359895',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359899',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359900',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359902',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359903',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359911',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359918',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359920',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359924',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359928',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359930',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359932',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359934',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359938',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359940',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359943',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359944',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359945',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359947',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359950',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359963',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359964',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359972',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2370920',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380264',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380273',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380274',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380278',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380280',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380283',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380284',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380290',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380291',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380295',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380298',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380306',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380308',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380309',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380310',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380312',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380313',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380320',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380321',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380322',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380326',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380327',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380334',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380335',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-13176',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21574',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21575',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21577',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21579',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21580',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21581',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21584',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21585',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21588',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30681',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30682',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30683',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30684',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30685',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30687',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30688',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30689',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30693',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30695',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30696',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30699',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30703',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30704',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30705',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30715',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30721',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30722',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50077',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50078',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50079',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50080',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50081',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50082',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50083',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50084',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50085',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50086',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50087',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50088',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50091',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50092',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50093',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50094',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50096',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50097',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50098',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50099',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50100',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50101',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50102',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50104',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-5399',
-                'https://errata.almalinux.org/9/ALSA-2025-16046.html',
-                'https://errata.rockylinux.org/RLSA-2025:15699',
-                'https://github.com/openssl/openssl/commit/07272b05b04836a762b4baa874958af51d513844',
-                'https://github.com/openssl/openssl/commit/2af62e74fb59bc469506bc37eb2990ea408d9467',
-                'https://github.com/openssl/openssl/commit/392dcb336405a0c94486aa6655057f59fd3a0902',
-                'https://github.com/openssl/openssl/commit/4b1cb94a734a7d4ec363ac0a215a25c181e11f65',
-                'https://github.com/openssl/openssl/commit/77c608f4c8857e63e98e66444e2e761c9627916f',
-                'https://github.openssl.org/openssl/extended-releases/commit/0d5fd1ab987f7571e2c955d8d8b638fc0fb54ded',
-                'https://github.openssl.org/openssl/extended-releases/commit/a2639000db19878d5d89586ae7b725080592ae86',
-                'https://linux.oracle.com/cve/CVE-2024-13176.html',
-                'https://linux.oracle.com/errata/ELSA-2025-16046.html',
-                'https://lists.debian.org/debian-lts-announce/2025/05/msg00028.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2024-13176',
-                'https://openssl-library.org/news/secadv/20250120.txt',
-                'https://security.netapp.com/advisory/ntap-20250124-0005/',
-                'https://security.netapp.com/advisory/ntap-20250418-0010/',
-                'https://security.netapp.com/advisory/ntap-20250502-0006/',
-                'https://ubuntu.com/security/notices/USN-7264-1',
-                'https://ubuntu.com/security/notices/USN-7278-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2024-13176',
-                'https://www.oracle.com/security-alerts/cpuapr2025.html#AppendixMSQL'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: Timing side-channel in ECDSA signature computation'
-            },
-            {
-              'cve':  'CVE-2025-9230',
-              'cvss': {
-                'redhat': {
-                  'v3score':  '5.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L'
-                }
-              },
-              'cwes': [
-                'CWE-125',
-                'CWE-787'
-              ],
-              'description':   'Issue summary: An application trying to decrypt CMS messages encrypted using\npassword based encryption can trigger an out-of-bounds read and write.\n\nImpact summary: This out-of-bounds read may trigger a crash which leads to\nDenial of Service for an application. The out-of-bounds write can cause\na memory corruption which can have various consequences including\na Denial of Service or Execution of attacker-supplied code.\n\nAlthough the consequences of a successful exploit of this vulnerability\ncould be severe, the probability that the attacker would be able to\nperform it is low. Besides, password based (PWRI) encryption support in CMS\nmessages is very rarely used. For that reason the issue was assessed as\nModerate severity according to our Security Policy.\n\nThe FIPS modules in 3.5, 3.4, 3.3, 3.2, 3.1 and 3.0 are not affected by this\nissue, as the CMS implementation is outside the OpenSSL FIPS module\nboundary.',
-              'diffID':        'sha256:0f7a9cab315eb02b95758540ba65771e943979b12837ff0757caa208cad58e82',
-              'fixedVersions': [
-                '3.3.5-r0'
-              ],
-              'installedVersion': '3.3.2-r1',
-              'packageName':      'libcrypto3',
-              'purl':             'pkg:apk/alpine/libcrypto3@3.3.2-r1?arch=armv7&distro=3.20.5',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2025/09/30/5',
-                'https://access.redhat.com/errata/RHSA-2025:21255',
-                'https://access.redhat.com/security/cve/CVE-2025-9230',
-                'https://bugzilla.redhat.com/2396054',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2396054',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-9230',
-                'https://errata.almalinux.org/9/ALSA-2025-21255.html',
-                'https://errata.rockylinux.org/RLSA-2025:21255',
-                'https://github.com/openssl/openssl/commit/5965ea5dd6960f36d8b7f74f8eac67a8eb8f2b45',
-                'https://github.com/openssl/openssl/commit/9e91358f365dee6c446dcdcdb01c04d2743fd280',
-                'https://github.com/openssl/openssl/commit/a79c4ce559c6a3a8fd4109e9f33c1185d5bf2def',
-                'https://github.com/openssl/openssl/commit/b5282d677551afda7d20e9c00e09561b547b2dfd',
-                'https://github.com/openssl/openssl/commit/bae259a211ada6315dc50900686daaaaaa55f482',
-                'https://github.openssl.org/openssl/extended-releases/commit/c2b96348bfa662f25f4fabf81958ae822063dae3',
-                'https://github.openssl.org/openssl/extended-releases/commit/dfbaf161d8dafc1132dd88cd48ad990ed9b4c8ba',
-                'https://linux.oracle.com/cve/CVE-2025-9230.html',
-                'https://linux.oracle.com/errata/ELSA-2026-0337.html',
-                'https://lists.debian.org/debian-lts-announce/2025/10/msg00001.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2025-9230',
-                'https://openssl-library.org/news/secadv/20250930.txt',
-                'https://ubuntu.com/security/notices/USN-7786-1',
-                'https://www.cve.org/CVERecord?id=CVE-2025-9230'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: Out-of-bounds read & write in RFC 3211 KEK Unwrap'
-            },
-            {
-              'cve':  'CVE-2025-9231',
-              'cvss': {
-                'redhat': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-385'
-              ],
-              'description':   'Issue summary: A timing side-channel which could potentially allow remote\nrecovery of the private key exists in the SM2 algorithm implementation on 64 bit\nARM platforms.\n\nImpact summary: A timing side-channel in SM2 signature computations on 64 bit\nARM platforms could allow recovering the private key by an attacker..\n\nWhile remote key recovery over a network was not attempted by the reporter,\ntiming measurements revealed a timing signal which may allow such an attack.\n\nOpenSSL does not directly support certificates with SM2 keys in TLS, and so\nthis CVE is not relevant in most TLS contexts.  However, given that it is\npossible to add support for such certificates via a custom provider, coupled\nwith the fact that in such a custom provider context the private key may be\nrecoverable via remote timing measurements, we consider this to be a Moderate\nseverity issue.\n\nThe FIPS modules in 3.5, 3.4, 3.3, 3.2, 3.1 and 3.0 are not affected by this\nissue, as SM2 is not an approved algorithm.',
-              'diffID':        'sha256:0f7a9cab315eb02b95758540ba65771e943979b12837ff0757caa208cad58e82',
-              'fixedVersions': [
-                '3.3.5-r0'
-              ],
-              'installedVersion': '3.3.2-r1',
-              'packageName':      'libcrypto3',
-              'purl':             'pkg:apk/alpine/libcrypto3@3.3.2-r1?arch=armv7&distro=3.20.5',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2025/09/30/5',
-                'https://access.redhat.com/security/cve/CVE-2025-9231',
-                'https://github.com/openssl/openssl/commit/567f64386e43683888212226824b6a179885a0fe',
-                'https://github.com/openssl/openssl/commit/cba616c26ac8e7b37de5e77762e505ba5ca51698',
-                'https://github.com/openssl/openssl/commit/eed5adc9f969d77c94f213767acbb41ff923b6f4',
-                'https://github.com/openssl/openssl/commit/fc47a2ec078912b3e914fab5734535e76c4820c2',
-                'https://nvd.nist.gov/vuln/detail/CVE-2025-9231',
-                'https://openssl-library.org/news/secadv/20250930.txt',
-                'https://ubuntu.com/security/notices/USN-7786-1',
-                'https://www.cve.org/CVERecord?id=CVE-2025-9231'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: Timing side-channel in SM2 algorithm on 64 bit ARM'
-            },
-            {
-              'cve':  'CVE-2025-9232',
-              'cvss': {
-                'redhat': {
-                  'v3score':  '3.1',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L'
-                }
-              },
-              'cwes': [
-                'CWE-125'
-              ],
-              'description':   "Issue summary: An application using the OpenSSL HTTP client API functions may\ntrigger an out-of-bounds read if the 'no_proxy' environment variable is set and\nthe host portion of the authority component of the HTTP URL is an IPv6 address.\n\nImpact summary: An out-of-bounds read can trigger a crash which leads to\nDenial of Service for an application.\n\nThe OpenSSL HTTP client API functions can be used directly by applications\nbut they are also used by the OCSP client functions and CMP (Certificate\nManagement Protocol) client implementation in OpenSSL. However the URLs used\nby these implementations are unlikely to be controlled by an attacker.\n\nIn this vulnerable code the out of bounds read can only trigger a crash.\nFurthermore the vulnerability requires an attacker-controlled URL to be\npassed from an application to the OpenSSL function and the user has to have\na 'no_proxy' environment variable set. For the aforementioned reasons the\nissue was assessed as Low severity.\n\nThe vulnerable code was introduced in the following patch releases:\n3.0.16, 3.1.8, 3.2.4, 3.3.3, 3.4.0 and 3.5.0.\n\nThe FIPS modules in 3.5, 3.4, 3.3, 3.2, 3.1 and 3.0 are not affected by this\nissue, as the HTTP client implementation is outside the OpenSSL FIPS module\nboundary.",
-              'diffID':        'sha256:0f7a9cab315eb02b95758540ba65771e943979b12837ff0757caa208cad58e82',
-              'fixedVersions': [
-                '3.3.5-r0'
-              ],
-              'installedVersion': '3.3.2-r1',
-              'packageName':      'libcrypto3',
-              'purl':             'pkg:apk/alpine/libcrypto3@3.3.2-r1?arch=armv7&distro=3.20.5',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2025/09/30/5',
-                'https://access.redhat.com/security/cve/CVE-2025-9232',
-                'https://github.com/openssl/openssl/commit/2b4ec20e47959170422922eaff25346d362dcb35',
-                'https://github.com/openssl/openssl/commit/654dc11d23468a74fc8ea4672b702dd3feb7be4b',
-                'https://github.com/openssl/openssl/commit/7cf21a30513c9e43c4bc3836c237cf086e194af3',
-                'https://github.com/openssl/openssl/commit/89e790ac431125a4849992858490bed6b225eadf',
-                'https://github.com/openssl/openssl/commit/bbf38c034cdabd0a13330abcc4855c866f53d2e0',
-                'https://nvd.nist.gov/vuln/detail/CVE-2025-9232',
-                'https://openssl-library.org/news/secadv/20250930.txt',
-                'https://ubuntu.com/security/notices/USN-7786-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2025-9232'
-              ],
-              'severity':   'LOW',
-              'suppressed': false,
-              'title':      'openssl: Out-of-bounds read in HTTP client no_proxy handling'
-            },
-            {
-              'cve':  'CVE-2024-12797',
-              'cvss': {
-                'redhat': {
-                  'v3score':  '7.4',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-392'
-              ],
-              'description':   "Issue summary: Clients using RFC7250 Raw Public Keys (RPKs) to authenticate a\nserver may fail to notice that the server was not authenticated, because\nhandshakes don't abort as expected when the SSL_VERIFY_PEER verification mode\nis set.\n\nImpact summary: TLS and DTLS connections using raw public keys may be\nvulnerable to man-in-middle attacks when server authentication failure is not\ndetected by clients.\n\nRPKs are disabled by default in both TLS clients and TLS servers.  The issue\nonly arises when TLS clients explicitly enable RPK use by the server, and the\nserver, likewise, enables sending of an RPK instead of an X.509 certificate\nchain.  The affected clients are those that then rely on the handshake to\nfail when the server's RPK fails to match one of the expected public keys,\nby setting the verification mode to SSL_VERIFY_PEER.\n\nClients that enable server-side raw public keys can still find out that raw\npublic key verification failed by calling SSL_get_verify_result(), and those\nthat do, and take appropriate action, are not affected.  This issue was\nintroduced in the initial implementation of RPK support in OpenSSL 3.2.\n\nThe FIPS modules in 3.4, 3.3, 3.2, 3.1 and 3.0 are not affected by this issue.",
-              'diffID':        'sha256:0f7a9cab315eb02b95758540ba65771e943979b12837ff0757caa208cad58e82',
-              'fixedVersions': [
-                '3.3.3-r0'
-              ],
-              'installedVersion': '3.3.2-r1',
-              'packageName':      'libssl3',
-              'purl':             'pkg:apk/alpine/libssl3@3.3.2-r1?arch=armv7&distro=3.20.5',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2025/02/11/3',
-                'http://www.openwall.com/lists/oss-security/2025/02/11/4',
-                'https://access.redhat.com/errata/RHSA-2025:1330',
-                'https://access.redhat.com/security/cve/CVE-2024-12797',
-                'https://bugzilla.redhat.com/2342757',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2342757',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-12797',
-                'https://errata.almalinux.org/9/ALSA-2025-1330.html',
-                'https://errata.rockylinux.org/RLSA-2025:1330',
-                'https://github.com/openssl/openssl/commit/738d4f9fdeaad57660dcba50a619fafced3fd5e9',
-                'https://github.com/openssl/openssl/commit/798779d43494549b611233f92652f0da5328fbe7',
-                'https://github.com/openssl/openssl/commit/87ebd203feffcf92ad5889df92f90bb0ee10a699',
-                'https://github.com/pyca/cryptography',
-                'https://github.com/pyca/cryptography/security/advisories/GHSA-79v4-65xg-pq4g',
-                'https://linux.oracle.com/cve/CVE-2024-12797.html',
-                'https://linux.oracle.com/errata/ELSA-2025-1330.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2024-12797',
-                'https://openssl-library.org/news/secadv/20250211.txt',
-                'https://security.netapp.com/advisory/ntap-20250214-0001/',
-                'https://ubuntu.com/security/notices/USN-7264-1',
-                'https://www.cve.org/CVERecord?id=CVE-2024-12797'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      "openssl: RFC7250 handshakes with unauthenticated servers don't abort as expected"
-            },
-            {
-              'cve':  'CVE-2024-13176',
-              'cvss': {
-                'redhat': {
-                  'v3score':  '4.7',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-385'
-              ],
-              'description':   'Issue summary: A timing side-channel which could potentially allow recovering\nthe private key exists in the ECDSA signature computation.\n\nImpact summary: A timing side-channel in ECDSA signature computations\ncould allow recovering the private key by an attacker. However, measuring\nthe timing would require either local access to the signing application or\na very fast network connection with low latency.\n\nThere is a timing signal of around 300 nanoseconds when the top word of\nthe inverted ECDSA nonce value is zero. This can happen with significant\nprobability only for some of the supported elliptic curves. In particular\nthe NIST P-521 curve is affected. To be able to measure this leak, the attacker\nprocess must either be located in the same physical computer or must\nhave a very fast network connection with low latency. For that reason\nthe severity of this vulnerability is Low.\n\nThe FIPS modules in 3.4, 3.3, 3.2, 3.1 and 3.0 are affected by this issue.',
-              'diffID':        'sha256:0f7a9cab315eb02b95758540ba65771e943979b12837ff0757caa208cad58e82',
-              'fixedVersions': [
-                '3.3.2-r2'
-              ],
-              'installedVersion': '3.3.2-r1',
-              'packageName':      'libssl3',
-              'purl':             'pkg:apk/alpine/libssl3@3.3.2-r1?arch=armv7&distro=3.20.5',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2025/01/20/2',
-                'https://access.redhat.com/errata/RHSA-2025:16046',
-                'https://access.redhat.com/security/cve/CVE-2024-13176',
-                'https://bugzilla.redhat.com/2359885',
-                'https://bugzilla.redhat.com/2359888',
-                'https://bugzilla.redhat.com/2359892',
-                'https://bugzilla.redhat.com/2359894',
-                'https://bugzilla.redhat.com/2359895',
-                'https://bugzilla.redhat.com/2359899',
-                'https://bugzilla.redhat.com/2359900',
-                'https://bugzilla.redhat.com/2359902',
-                'https://bugzilla.redhat.com/2359903',
-                'https://bugzilla.redhat.com/2359911',
-                'https://bugzilla.redhat.com/2359918',
-                'https://bugzilla.redhat.com/2359920',
-                'https://bugzilla.redhat.com/2359924',
-                'https://bugzilla.redhat.com/2359928',
-                'https://bugzilla.redhat.com/2359930',
-                'https://bugzilla.redhat.com/2359932',
-                'https://bugzilla.redhat.com/2359934',
-                'https://bugzilla.redhat.com/2359938',
-                'https://bugzilla.redhat.com/2359940',
-                'https://bugzilla.redhat.com/2359943',
-                'https://bugzilla.redhat.com/2359944',
-                'https://bugzilla.redhat.com/2359945',
-                'https://bugzilla.redhat.com/2359947',
-                'https://bugzilla.redhat.com/2359950',
-                'https://bugzilla.redhat.com/2359963',
-                'https://bugzilla.redhat.com/2359964',
-                'https://bugzilla.redhat.com/2359972',
-                'https://bugzilla.redhat.com/2370920',
-                'https://bugzilla.redhat.com/2380264',
-                'https://bugzilla.redhat.com/2380273',
-                'https://bugzilla.redhat.com/2380274',
-                'https://bugzilla.redhat.com/2380278',
-                'https://bugzilla.redhat.com/2380280',
-                'https://bugzilla.redhat.com/2380283',
-                'https://bugzilla.redhat.com/2380284',
-                'https://bugzilla.redhat.com/2380290',
-                'https://bugzilla.redhat.com/2380291',
-                'https://bugzilla.redhat.com/2380295',
-                'https://bugzilla.redhat.com/2380298',
-                'https://bugzilla.redhat.com/2380306',
-                'https://bugzilla.redhat.com/2380308',
-                'https://bugzilla.redhat.com/2380309',
-                'https://bugzilla.redhat.com/2380310',
-                'https://bugzilla.redhat.com/2380312',
-                'https://bugzilla.redhat.com/2380313',
-                'https://bugzilla.redhat.com/2380320',
-                'https://bugzilla.redhat.com/2380321',
-                'https://bugzilla.redhat.com/2380322',
-                'https://bugzilla.redhat.com/2380326',
-                'https://bugzilla.redhat.com/2380327',
-                'https://bugzilla.redhat.com/2380334',
-                'https://bugzilla.redhat.com/2380335',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2338999',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359885',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359888',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359892',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359894',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359895',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359899',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359900',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359902',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359903',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359911',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359918',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359920',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359924',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359928',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359930',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359932',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359934',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359938',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359940',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359943',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359944',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359945',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359947',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359950',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359963',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359964',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359972',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2370920',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380264',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380273',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380274',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380278',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380280',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380283',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380284',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380290',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380291',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380295',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380298',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380306',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380308',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380309',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380310',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380312',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380313',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380320',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380321',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380322',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380326',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380327',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380334',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380335',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-13176',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21574',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21575',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21577',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21579',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21580',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21581',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21584',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21585',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21588',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30681',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30682',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30683',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30684',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30685',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30687',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30688',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30689',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30693',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30695',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30696',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30699',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30703',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30704',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30705',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30715',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30721',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30722',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50077',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50078',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50079',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50080',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50081',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50082',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50083',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50084',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50085',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50086',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50087',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50088',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50091',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50092',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50093',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50094',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50096',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50097',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50098',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50099',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50100',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50101',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50102',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50104',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-5399',
-                'https://errata.almalinux.org/9/ALSA-2025-16046.html',
-                'https://errata.rockylinux.org/RLSA-2025:15699',
-                'https://github.com/openssl/openssl/commit/07272b05b04836a762b4baa874958af51d513844',
-                'https://github.com/openssl/openssl/commit/2af62e74fb59bc469506bc37eb2990ea408d9467',
-                'https://github.com/openssl/openssl/commit/392dcb336405a0c94486aa6655057f59fd3a0902',
-                'https://github.com/openssl/openssl/commit/4b1cb94a734a7d4ec363ac0a215a25c181e11f65',
-                'https://github.com/openssl/openssl/commit/77c608f4c8857e63e98e66444e2e761c9627916f',
-                'https://github.openssl.org/openssl/extended-releases/commit/0d5fd1ab987f7571e2c955d8d8b638fc0fb54ded',
-                'https://github.openssl.org/openssl/extended-releases/commit/a2639000db19878d5d89586ae7b725080592ae86',
-                'https://linux.oracle.com/cve/CVE-2024-13176.html',
-                'https://linux.oracle.com/errata/ELSA-2025-16046.html',
-                'https://lists.debian.org/debian-lts-announce/2025/05/msg00028.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2024-13176',
-                'https://openssl-library.org/news/secadv/20250120.txt',
-                'https://security.netapp.com/advisory/ntap-20250124-0005/',
-                'https://security.netapp.com/advisory/ntap-20250418-0010/',
-                'https://security.netapp.com/advisory/ntap-20250502-0006/',
-                'https://ubuntu.com/security/notices/USN-7264-1',
-                'https://ubuntu.com/security/notices/USN-7278-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2024-13176',
-                'https://www.oracle.com/security-alerts/cpuapr2025.html#AppendixMSQL'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: Timing side-channel in ECDSA signature computation'
-            },
-            {
-              'cve':  'CVE-2025-9230',
-              'cvss': {
-                'redhat': {
-                  'v3score':  '5.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L'
-                }
-              },
-              'cwes': [
-                'CWE-125',
-                'CWE-787'
-              ],
-              'description':   'Issue summary: An application trying to decrypt CMS messages encrypted using\npassword based encryption can trigger an out-of-bounds read and write.\n\nImpact summary: This out-of-bounds read may trigger a crash which leads to\nDenial of Service for an application. The out-of-bounds write can cause\na memory corruption which can have various consequences including\na Denial of Service or Execution of attacker-supplied code.\n\nAlthough the consequences of a successful exploit of this vulnerability\ncould be severe, the probability that the attacker would be able to\nperform it is low. Besides, password based (PWRI) encryption support in CMS\nmessages is very rarely used. For that reason the issue was assessed as\nModerate severity according to our Security Policy.\n\nThe FIPS modules in 3.5, 3.4, 3.3, 3.2, 3.1 and 3.0 are not affected by this\nissue, as the CMS implementation is outside the OpenSSL FIPS module\nboundary.',
-              'diffID':        'sha256:0f7a9cab315eb02b95758540ba65771e943979b12837ff0757caa208cad58e82',
-              'fixedVersions': [
-                '3.3.5-r0'
-              ],
-              'installedVersion': '3.3.2-r1',
-              'packageName':      'libssl3',
-              'purl':             'pkg:apk/alpine/libssl3@3.3.2-r1?arch=armv7&distro=3.20.5',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2025/09/30/5',
-                'https://access.redhat.com/errata/RHSA-2025:21255',
-                'https://access.redhat.com/security/cve/CVE-2025-9230',
-                'https://bugzilla.redhat.com/2396054',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2396054',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-9230',
-                'https://errata.almalinux.org/9/ALSA-2025-21255.html',
-                'https://errata.rockylinux.org/RLSA-2025:21255',
-                'https://github.com/openssl/openssl/commit/5965ea5dd6960f36d8b7f74f8eac67a8eb8f2b45',
-                'https://github.com/openssl/openssl/commit/9e91358f365dee6c446dcdcdb01c04d2743fd280',
-                'https://github.com/openssl/openssl/commit/a79c4ce559c6a3a8fd4109e9f33c1185d5bf2def',
-                'https://github.com/openssl/openssl/commit/b5282d677551afda7d20e9c00e09561b547b2dfd',
-                'https://github.com/openssl/openssl/commit/bae259a211ada6315dc50900686daaaaaa55f482',
-                'https://github.openssl.org/openssl/extended-releases/commit/c2b96348bfa662f25f4fabf81958ae822063dae3',
-                'https://github.openssl.org/openssl/extended-releases/commit/dfbaf161d8dafc1132dd88cd48ad990ed9b4c8ba',
-                'https://linux.oracle.com/cve/CVE-2025-9230.html',
-                'https://linux.oracle.com/errata/ELSA-2026-0337.html',
-                'https://lists.debian.org/debian-lts-announce/2025/10/msg00001.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2025-9230',
-                'https://openssl-library.org/news/secadv/20250930.txt',
-                'https://ubuntu.com/security/notices/USN-7786-1',
-                'https://www.cve.org/CVERecord?id=CVE-2025-9230'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: Out-of-bounds read & write in RFC 3211 KEK Unwrap'
-            },
-            {
-              'cve':  'CVE-2025-9231',
-              'cvss': {
-                'redhat': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-385'
-              ],
-              'description':   'Issue summary: A timing side-channel which could potentially allow remote\nrecovery of the private key exists in the SM2 algorithm implementation on 64 bit\nARM platforms.\n\nImpact summary: A timing side-channel in SM2 signature computations on 64 bit\nARM platforms could allow recovering the private key by an attacker..\n\nWhile remote key recovery over a network was not attempted by the reporter,\ntiming measurements revealed a timing signal which may allow such an attack.\n\nOpenSSL does not directly support certificates with SM2 keys in TLS, and so\nthis CVE is not relevant in most TLS contexts.  However, given that it is\npossible to add support for such certificates via a custom provider, coupled\nwith the fact that in such a custom provider context the private key may be\nrecoverable via remote timing measurements, we consider this to be a Moderate\nseverity issue.\n\nThe FIPS modules in 3.5, 3.4, 3.3, 3.2, 3.1 and 3.0 are not affected by this\nissue, as SM2 is not an approved algorithm.',
-              'diffID':        'sha256:0f7a9cab315eb02b95758540ba65771e943979b12837ff0757caa208cad58e82',
-              'fixedVersions': [
-                '3.3.5-r0'
-              ],
-              'installedVersion': '3.3.2-r1',
-              'packageName':      'libssl3',
-              'purl':             'pkg:apk/alpine/libssl3@3.3.2-r1?arch=armv7&distro=3.20.5',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2025/09/30/5',
-                'https://access.redhat.com/security/cve/CVE-2025-9231',
-                'https://github.com/openssl/openssl/commit/567f64386e43683888212226824b6a179885a0fe',
-                'https://github.com/openssl/openssl/commit/cba616c26ac8e7b37de5e77762e505ba5ca51698',
-                'https://github.com/openssl/openssl/commit/eed5adc9f969d77c94f213767acbb41ff923b6f4',
-                'https://github.com/openssl/openssl/commit/fc47a2ec078912b3e914fab5734535e76c4820c2',
-                'https://nvd.nist.gov/vuln/detail/CVE-2025-9231',
-                'https://openssl-library.org/news/secadv/20250930.txt',
-                'https://ubuntu.com/security/notices/USN-7786-1',
-                'https://www.cve.org/CVERecord?id=CVE-2025-9231'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: Timing side-channel in SM2 algorithm on 64 bit ARM'
-            },
-            {
-              'cve':  'CVE-2025-9232',
-              'cvss': {
-                'redhat': {
-                  'v3score':  '3.1',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L'
-                }
-              },
-              'cwes': [
-                'CWE-125'
-              ],
-              'description':   "Issue summary: An application using the OpenSSL HTTP client API functions may\ntrigger an out-of-bounds read if the 'no_proxy' environment variable is set and\nthe host portion of the authority component of the HTTP URL is an IPv6 address.\n\nImpact summary: An out-of-bounds read can trigger a crash which leads to\nDenial of Service for an application.\n\nThe OpenSSL HTTP client API functions can be used directly by applications\nbut they are also used by the OCSP client functions and CMP (Certificate\nManagement Protocol) client implementation in OpenSSL. However the URLs used\nby these implementations are unlikely to be controlled by an attacker.\n\nIn this vulnerable code the out of bounds read can only trigger a crash.\nFurthermore the vulnerability requires an attacker-controlled URL to be\npassed from an application to the OpenSSL function and the user has to have\na 'no_proxy' environment variable set. For the aforementioned reasons the\nissue was assessed as Low severity.\n\nThe vulnerable code was introduced in the following patch releases:\n3.0.16, 3.1.8, 3.2.4, 3.3.3, 3.4.0 and 3.5.0.\n\nThe FIPS modules in 3.5, 3.4, 3.3, 3.2, 3.1 and 3.0 are not affected by this\nissue, as the HTTP client implementation is outside the OpenSSL FIPS module\nboundary.",
-              'diffID':        'sha256:0f7a9cab315eb02b95758540ba65771e943979b12837ff0757caa208cad58e82',
-              'fixedVersions': [
-                '3.3.5-r0'
-              ],
-              'installedVersion': '3.3.2-r1',
-              'packageName':      'libssl3',
-              'purl':             'pkg:apk/alpine/libssl3@3.3.2-r1?arch=armv7&distro=3.20.5',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2025/09/30/5',
-                'https://access.redhat.com/security/cve/CVE-2025-9232',
-                'https://github.com/openssl/openssl/commit/2b4ec20e47959170422922eaff25346d362dcb35',
-                'https://github.com/openssl/openssl/commit/654dc11d23468a74fc8ea4672b702dd3feb7be4b',
-                'https://github.com/openssl/openssl/commit/7cf21a30513c9e43c4bc3836c237cf086e194af3',
-                'https://github.com/openssl/openssl/commit/89e790ac431125a4849992858490bed6b225eadf',
-                'https://github.com/openssl/openssl/commit/bbf38c034cdabd0a13330abcc4855c866f53d2e0',
-                'https://nvd.nist.gov/vuln/detail/CVE-2025-9232',
-                'https://openssl-library.org/news/secadv/20250930.txt',
-                'https://ubuntu.com/security/notices/USN-7786-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2025-9232'
-              ],
-              'severity':   'LOW',
-              'suppressed': false,
-              'title':      'openssl: Out-of-bounds read in HTTP client no_proxy handling'
-            },
-            {
-              'cve':  'CVE-2025-26519',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-787'
-              ],
-              'description':   'musl libc 0.9.13 through 1.2.5 before 1.2.6 has an out-of-bounds write vulnerability when an attacker can trigger iconv conversion of untrusted EUC-KR text to UTF-8.',
-              'diffID':        'sha256:0f7a9cab315eb02b95758540ba65771e943979b12837ff0757caa208cad58e82',
-              'fixedVersions': [
-                '1.2.5-r1'
-              ],
-              'installedVersion': '1.2.5-r0',
-              'packageName':      'musl',
-              'purl':             'pkg:apk/alpine/musl@1.2.5-r0?arch=armv7&distro=3.20.5',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2025/02/13/2',
-                'http://www.openwall.com/lists/oss-security/2025/02/13/3',
-                'http://www.openwall.com/lists/oss-security/2025/02/13/4',
-                'http://www.openwall.com/lists/oss-security/2025/02/13/5',
-                'http://www.openwall.com/lists/oss-security/2025/02/14/5',
-                'http://www.openwall.com/lists/oss-security/2025/02/14/6',
-                'https://git.musl-libc.org/cgit/musl/commit/?id=c47ad25ea3b484e10326f933e927c0bc8cded3da',
-                'https://git.musl-libc.org/cgit/musl/commit/?id=e5adcd97b5196e29991b524237381a0202a60659',
-                'https://www.openwall.com/lists/oss-security/2025/02/13/2'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'musl libc 0.9.13 through 1.2.5 before 1.2.6 has an out-of-bounds write ...'
-            },
-            {
-              'cve':  'CVE-2025-26519',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-787'
-              ],
-              'description':   'musl libc 0.9.13 through 1.2.5 before 1.2.6 has an out-of-bounds write vulnerability when an attacker can trigger iconv conversion of untrusted EUC-KR text to UTF-8.',
-              'diffID':        'sha256:0f7a9cab315eb02b95758540ba65771e943979b12837ff0757caa208cad58e82',
-              'fixedVersions': [
-                '1.2.5-r1'
-              ],
-              'installedVersion': '1.2.5-r0',
-              'packageName':      'musl-utils',
-              'purl':             'pkg:apk/alpine/musl-utils@1.2.5-r0?arch=armv7&distro=3.20.5',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2025/02/13/2',
-                'http://www.openwall.com/lists/oss-security/2025/02/13/3',
-                'http://www.openwall.com/lists/oss-security/2025/02/13/4',
-                'http://www.openwall.com/lists/oss-security/2025/02/13/5',
-                'http://www.openwall.com/lists/oss-security/2025/02/14/5',
-                'http://www.openwall.com/lists/oss-security/2025/02/14/6',
-                'https://git.musl-libc.org/cgit/musl/commit/?id=c47ad25ea3b484e10326f933e927c0bc8cded3da',
-                'https://git.musl-libc.org/cgit/musl/commit/?id=e5adcd97b5196e29991b524237381a0202a60659',
-                'https://www.openwall.com/lists/oss-security/2025/02/13/2'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'musl libc 0.9.13 through 1.2.5 before 1.2.6 has an out-of-bounds write ...'
-            },
-            {
-              'cve':  'CVE-2024-58251',
-              'cwes': [
-                'CWE-150'
-              ],
-              'description':   'In netstat in BusyBox through 1.37.0, local users can launch of network application with an argv[0] containing an ANSI terminal escape sequence, leading to a denial of service (terminal locked up) when netstat is used by a victim.',
-              'diffID':        'sha256:0f7a9cab315eb02b95758540ba65771e943979b12837ff0757caa208cad58e82',
-              'fixedVersions': [
-                '1.36.1-r31'
-              ],
-              'installedVersion': '1.36.1-r29',
-              'packageName':      'ssl_client',
-              'purl':             'pkg:apk/alpine/ssl_client@1.36.1-r29?arch=armv7&distro=3.20.5',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2025/04/23/6',
-                'https://bugs.busybox.net/show_bug.cgi?id=15922',
-                'https://www.busybox.net',
-                'https://www.busybox.net/downloads/',
-                'https://www.cve.org/CVERecord?id=CVE-2024-58251'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'In netstat in BusyBox through 1.37.0, local users can launch of networ ...'
-            },
-            {
-              'cve':  'CVE-2025-46394',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '3.3',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-451'
-              ],
-              'description':   'In tar in BusyBox through 1.37.0, a TAR archive can have filenames hidden from a listing through the use of terminal escape sequences.',
-              'diffID':        'sha256:0f7a9cab315eb02b95758540ba65771e943979b12837ff0757caa208cad58e82',
-              'fixedVersions': [
-                '1.36.1-r31'
-              ],
-              'installedVersion': '1.36.1-r29',
-              'packageName':      'ssl_client',
-              'purl':             'pkg:apk/alpine/ssl_client@1.36.1-r29?arch=armv7&distro=3.20.5',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2025/04/23/5',
-                'http://www.openwall.com/lists/oss-security/2025/04/24/3',
-                'https://bugs.busybox.net/show_bug.cgi?id=16018',
-                'https://lists.busybox.net/pipermail/busybox/2024-July/090806.html',
-                'https://lists.busybox.net/pipermail/busybox/2024-July/090814.html',
-                'https://www.busybox.net',
-                'https://www.busybox.net/downloads/',
-                'https://www.cve.org/CVERecord?id=CVE-2025-46394',
-                'https://www.openwall.com/lists/oss-security/2025/04/23/1'
-              ],
-              'severity':   'LOW',
-              'suppressed': false,
-              'title':      'In tar in BusyBox through 1.37.0, a TAR archive can have filenames hid ...'
-            }
-          ]
-        }
-      ],
-      'summary': {
-        'critical':   0,
-        'high':       4,
-        'low':        5,
-        'medium':     9,
-        'suppressed': 0,
-        'unknown':    0
-      }
-    }
-  },
-  {
-    'id':    'default/130314fa8a14333a5adc6074bfb85ab48b004711001f01fe45198eba929d9303',
-    'type':  'storage.sbomscanner.kubewarden.io.vulnerabilityreport',
-    'links': {
-      'patch':  'https://localhost:8005/v1/storage.sbomscanner.kubewarden.io.vulnerabilityreports/default/130314fa8a14333a5adc6074bfb85ab48b004711001f01fe45198eba929d9303',
-      'remove': 'https://localhost:8005/v1/storage.sbomscanner.kubewarden.io.vulnerabilityreports/default/130314fa8a14333a5adc6074bfb85ab48b004711001f01fe45198eba929d9303',
-      'self':   'https://localhost:8005/v1/storage.sbomscanner.kubewarden.io.vulnerabilityreports/default/130314fa8a14333a5adc6074bfb85ab48b004711001f01fe45198eba929d9303',
-      'update': 'https://localhost:8005/v1/storage.sbomscanner.kubewarden.io.vulnerabilityreports/default/130314fa8a14333a5adc6074bfb85ab48b004711001f01fe45198eba929d9303',
-      'view':   'https://localhost:8005/apis/storage.sbomscanner.kubewarden.io/v1alpha1/namespaces/default/vulnerabilityreports/130314fa8a14333a5adc6074bfb85ab48b004711001f01fe45198eba929d9303'
-    },
-    '_id':           'default/130314fa8a14333a5adc6074bfb85ab48b004711001f01fe45198eba929d9303',
-    'apiVersion':    'storage.sbomscanner.kubewarden.io/v1alpha1',
-    'imageMetadata': {
-      'digest':      'sha256:aa8b9d7cf9278047ce9e75e72aeb7d3499fa9969886671b2c26989ca1e3896a6',
-      'platform':    'linux/amd64',
-      'registry':    'demo-02',
-      'registryURI': 'ghcr.io',
-      'repository':  'linuxcontainers/alpine',
-      'tag':         '3.16.0'
-    },
-    'kind':     'VulnerabilityReport',
-    'metadata': {
-      'creationTimestamp': '2026-01-09T22:46:11Z',
-      'fields':            [
-        '130314fa8a14333a5adc6074bfb85ab48b004711001f01fe45198eba929d9303',
-        'ghcr.io/linuxcontainers/alpine:3.16.0',
-        'linux/amd64',
-        '25 (0 suppressed)'
-      ],
-      'labels': {
-        'app.kubernetes.io/managed-by':          'sbomscanner',
-        'app.kubernetes.io/part-of':             'sbomscanner',
-        'sbomscanner.kubewarden.io/scanjob-uid': '42184d01-4b15-466f-98aa-e802d1b6b6b8'
-      },
-      'managedFields': [
-        {
-          'apiVersion': 'storage.sbomscanner.kubewarden.io/v1alpha1',
-          'fieldsType': 'FieldsV1',
-          'fieldsV1':   {
-            'f:imageMetadata': {
-              'f:digest':      {},
-              'f:platform':    {},
-              'f:registry':    {},
-              'f:registryURI': {},
-              'f:repository':  {},
-              'f:tag':         {}
-            },
-            'f:metadata': {
-              'f:labels': {
-                '.':                                       {},
-                'f:app.kubernetes.io/managed-by':          {},
-                'f:app.kubernetes.io/part-of':             {},
-                'f:sbomscanner.kubewarden.io/scanjob-uid': {}
-              },
-              'f:ownerReferences': {
-                '.':                                                {},
-                'k:{"uid":"560497e0-144a-48e4-8995-2e66583e2ee2"}': {}
-              }
-            },
-            'f:report': {
-              'f:results': {},
-              'f:summary': {
-                'f:critical': {},
-                'f:high':     {},
-                'f:medium':   {}
-              }
-            }
-          },
-          'manager':   'worker',
-          'operation': 'Update',
-          'time':      '2026-01-28T18:34:37Z'
-        }
-      ],
-      'name':            '130314fa8a14333a5adc6074bfb85ab48b004711001f01fe45198eba929d9303',
-      'namespace':       'default',
-      'ownerReferences': [
-        {
-          'apiVersion':         'storage.sbomscanner.kubewarden.io/v1alpha1',
-          'blockOwnerDeletion': true,
-          'controller':         true,
-          'kind':               'SBOM',
-          'name':               '130314fa8a14333a5adc6074bfb85ab48b004711001f01fe45198eba929d9303',
-          'uid':                '560497e0-144a-48e4-8995-2e66583e2ee2'
-        }
-      ],
-      'relationships': [
-        {
-          'fromId':   'default/130314fa8a14333a5adc6074bfb85ab48b004711001f01fe45198eba929d9303',
-          'fromType': 'storage.sbomscanner.kubewarden.io.sbom',
-          'rel':      'owner',
-          'state':    'active',
-          'message':  'Resource is current'
-        }
-      ],
-      'resourceVersion': '9',
-      'state':           {
-        'error':         false,
-        'message':       'Resource is current',
-        'name':          'active',
-        'transitioning': false
-      },
-      'uid': '4fec085c-55bc-476a-a8b0-c4298c85498f'
-    },
-    'report': {
-      'results': [
-        {
-          'class':           'os-pkgs',
-          'target':          '/var/run/worker/trivy.sbom.4224213670.json (alpine 3.16.0)',
-          'type':            'alpine',
-          'vulnerabilities': [
-            {
-              'cve':  'CVE-2023-42366',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.5',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.1',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-787'
-              ],
-              'description':   'A heap-buffer-overflow was discovered in BusyBox v.1.36.1 in the next_token function at awk.c:1159.',
-              'diffID':        'sha256:d36ae5a9766e0f6eeea876bbd3f661a610470acf0f6c639ad675091c3db8748c',
-              'fixedVersions': [
-                '1.35.0-r18'
-              ],
-              'installedVersion': '1.35.0-r15',
-              'packageName':      'busybox',
-              'purl':             'pkg:apk/alpine/busybox@1.35.0-r15?arch=x86_64&distro=3.16.0',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2023-42366',
-                'https://bugs.busybox.net/show_bug.cgi?id=15874',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-42366',
-                'https://security.netapp.com/advisory/ntap-20241206-0007/',
-                'https://www.cve.org/CVERecord?id=CVE-2023-42366'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'busybox: A heap-buffer-overflow'
-            },
-            {
-              'cve':  'CVE-2022-4450',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'nvd': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-415'
-              ],
-              'description':   'The function PEM_read_bio_ex() reads a PEM file from a BIO and parses and\ndecodes the "name" (e.g. "CERTIFICATE"), any header data and the payload data.\nIf the function succeeds then the "name_out", "header" and "data" arguments are\npopulated with pointers to buffers containing the relevant decoded data. The\ncaller is responsible for freeing those buffers. It is possible to construct a\nPEM file that results in 0 bytes of payload data. In this case PEM_read_bio_ex()\nwill return a failure code but will populate the header argument with a pointer\nto a buffer that has already been freed. If the caller also frees this buffer\nthen a double free will occur. This will most likely lead to a crash. This\ncould be exploited by an attacker who has the ability to supply malicious PEM\nfiles for parsing to achieve a denial of service attack.\n\nThe functions PEM_read_bio() and PEM_read() are simple wrappers around\nPEM_read_bio_ex() and therefore these functions are also directly affected.\n\nThese functions are also called indirectly by a number of other OpenSSL\nfunctions including PEM_X509_INFO_read_bio_ex() and\nSSL_CTX_use_serverinfo_file() which are also vulnerable. Some OpenSSL internal\nuses of these functions are not vulnerable because the caller does not free the\nheader argument if PEM_read_bio_ex() returns a failure code. These locations\ninclude the PEM_read_bio_TYPE() functions as well as the decoders introduced in\nOpenSSL 3.0.\n\nThe OpenSSL asn1parse command line application is also impacted by this issue.',
-              'diffID':        'sha256:d36ae5a9766e0f6eeea876bbd3f661a610470acf0f6c639ad675091c3db8748c',
-              'fixedVersions': [
-                '1.1.1t-r0'
-              ],
-              'installedVersion': '1.1.1q-r0',
-              'packageName':      'libcrypto1.1',
-              'purl':             'pkg:apk/alpine/libcrypto1.1@1.1.1q-r0?arch=x86_64&distro=3.16.0',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2023:2165',
-                'https://access.redhat.com/security/cve/CVE-2022-4450',
-                'https://bugzilla.redhat.com/1960321',
-                'https://bugzilla.redhat.com/2164440',
-                'https://bugzilla.redhat.com/2164487',
-                'https://bugzilla.redhat.com/2164492',
-                'https://bugzilla.redhat.com/2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144000',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144003',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144006',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144008',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144010',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144012',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144015',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144017',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144019',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2145170',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2158412',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164440',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164487',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164488',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164492',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164497',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164499',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164500',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4203',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4304',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4450',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0215',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0216',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0217',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0286',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0401',
-                'https://errata.almalinux.org/9/ALSA-2023-2165.html',
-                'https://errata.rockylinux.org/RLSA-2023:0946',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=63bcf189be73a9cc1264059bed6f57974be74a83',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=bbcf509bd046b34cca19c766bbddc31683d0858b',
-                'https://linux.oracle.com/cve/CVE-2022-4450.html',
-                'https://linux.oracle.com/errata/ELSA-2023-32791.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2022-4450',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0003',
-                'https://rustsec.org/advisories/RUSTSEC-2023-0010.html',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://ubuntu.com/security/notices/USN-5844-1',
-                'https://ubuntu.com/security/notices/USN-6564-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2022-4450',
-                'https://www.openssl.org/news/secadv/20230207.txt'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: double free after calling PEM_read_bio_ex'
-            },
-            {
-              'cve':  'CVE-2023-0215',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'nvd': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   'The public API function BIO_new_NDEF is a helper function used for streaming\nASN.1 data via a BIO. It is primarily used internally to OpenSSL to support the\nSMIME, CMS and PKCS7 streaming capabilities, but may also be called directly by\nend user applications.\n\nThe function receives a BIO from the caller, prepends a new BIO_f_asn1 filter\nBIO onto the front of it to form a BIO chain, and then returns the new head of\nthe BIO chain to the caller. Under certain conditions, for example if a CMS\nrecipient public key is invalid, the new filter BIO is freed and the function\nreturns a NULL result indicating a failure. However, in this case, the BIO chain\nis not properly cleaned up and the BIO passed by the caller still retains\ninternal pointers to the previously freed filter BIO. If the caller then goes on\nto call BIO_pop() on the BIO then a use-after-free will occur. This will most\nlikely result in a crash.\n\n\n\nThis scenario occurs directly in the internal function B64_write_ASN1() which\nmay cause BIO_new_NDEF() to be called and will subsequently call BIO_pop() on\nthe BIO. This internal function is in turn called by the public API functions\nPEM_write_bio_ASN1_stream, PEM_write_bio_CMS_stream, PEM_write_bio_PKCS7_stream,\nSMIME_write_ASN1, SMIME_write_CMS and SMIME_write_PKCS7.\n\nOther public API functions that may be impacted by this include\ni2d_ASN1_bio_stream, BIO_new_CMS, BIO_new_PKCS7, i2d_CMS_bio_stream and\ni2d_PKCS7_bio_stream.\n\nThe OpenSSL cms and smime command line applications are similarly affected.',
-              'diffID':        'sha256:d36ae5a9766e0f6eeea876bbd3f661a610470acf0f6c639ad675091c3db8748c',
-              'fixedVersions': [
-                '1.1.1t-r0'
-              ],
-              'installedVersion': '1.1.1q-r0',
-              'packageName':      'libcrypto1.1',
-              'purl':             'pkg:apk/alpine/libcrypto1.1@1.1.1q-r0?arch=x86_64&distro=3.16.0',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2023:2165',
-                'https://access.redhat.com/security/cve/CVE-2023-0215',
-                'https://bugzilla.redhat.com/1960321',
-                'https://bugzilla.redhat.com/2164440',
-                'https://bugzilla.redhat.com/2164487',
-                'https://bugzilla.redhat.com/2164492',
-                'https://bugzilla.redhat.com/2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144000',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144003',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144006',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144008',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144010',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144012',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144015',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144017',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144019',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2145170',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2158412',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164440',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164487',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164488',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164492',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164497',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164499',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164500',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4203',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4304',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4450',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0215',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0216',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0217',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0286',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0401',
-                'https://errata.almalinux.org/9/ALSA-2023-2165.html',
-                'https://errata.rockylinux.org/RLSA-2023:0946',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=8818064ce3c3c0f1b740a5aaba2a987e75bfbafd',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=9816136fe31d92ace4037d5da5257f763aeeb4eb',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=c3829dd8825c654652201e16f8a0a0c46ee3f344',
-                'https://linux.oracle.com/cve/CVE-2023-0215.html',
-                'https://linux.oracle.com/errata/ELSA-2023-32791.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-0215',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0003',
-                'https://rustsec.org/advisories/RUSTSEC-2023-0009.html',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://security.netapp.com/advisory/ntap-20230427-0007',
-                'https://security.netapp.com/advisory/ntap-20230427-0007/',
-                'https://security.netapp.com/advisory/ntap-20230427-0009',
-                'https://security.netapp.com/advisory/ntap-20230427-0009/',
-                'https://security.netapp.com/advisory/ntap-20240621-0006',
-                'https://security.netapp.com/advisory/ntap-20240621-0006/',
-                'https://ubuntu.com/security/notices/USN-5844-1',
-                'https://ubuntu.com/security/notices/USN-5845-1',
-                'https://ubuntu.com/security/notices/USN-5845-2',
-                'https://ubuntu.com/security/notices/USN-6564-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-0215',
-                'https://www.openssl.org/news/secadv/20230207.txt'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: use-after-free following BIO_new_NDEF'
-            },
-            {
-              'cve':  'CVE-2023-0286',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '7.4',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H'
-                },
-                'nvd': {
-                  'v3score':  '7.4',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.4',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-843'
-              ],
-              'description':   'There is a type confusion vulnerability relating to X.400 address processing\ninside an X.509 GeneralName. X.400 addresses were parsed as an ASN1_STRING but\nthe public structure definition for GENERAL_NAME incorrectly specified the type\nof the x400Address field as ASN1_TYPE. This field is subsequently interpreted by\nthe OpenSSL function GENERAL_NAME_cmp as an ASN1_TYPE rather than an\nASN1_STRING.\n\nWhen CRL checking is enabled (i.e. the application sets the\nX509_V_FLAG_CRL_CHECK flag), this vulnerability may allow an attacker to pass\narbitrary pointers to a memcmp call, enabling them to read memory contents or\nenact a denial of service. In most cases, the attack requires the attacker to\nprovide both the certificate chain and CRL, neither of which need to have a\nvalid signature. If the attacker only controls one of these inputs, the other\ninput must already contain an X.400 address as a CRL distribution point, which\nis uncommon. As such, this vulnerability is most likely to only affect\napplications which have implemented their own functionality for retrieving CRLs\nover a network.',
-              'diffID':        'sha256:d36ae5a9766e0f6eeea876bbd3f661a610470acf0f6c639ad675091c3db8748c',
-              'fixedVersions': [
-                '1.1.1t-r0'
-              ],
-              'installedVersion': '1.1.1q-r0',
-              'packageName':      'libcrypto1.1',
-              'purl':             'pkg:apk/alpine/libcrypto1.1@1.1.1q-r0?arch=x86_64&distro=3.16.0',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2025:7937',
-                'https://access.redhat.com/security/cve/CVE-2023-0286',
-                'https://access.redhat.com/security/cve/cve-2023-0286',
-                'https://bugzilla.redhat.com/2164440',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144000',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144003',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144006',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144008',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144010',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144012',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144015',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144017',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144019',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2145170',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2158412',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164440',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164487',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164488',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164492',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164497',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164499',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164500',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4203',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4304',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4450',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0215',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0216',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0217',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0286',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0401',
-                'https://errata.almalinux.org/9/ALSA-2025-7937.html',
-                'https://errata.rockylinux.org/RLSA-2023:0946',
-                'https://ftp.openbsd.org/pub/OpenBSD/LibreSSL/libressl-3.6.2-relnotes.txt',
-                'https://ftp.openbsd.org/pub/OpenBSD/patches/7.2/common/018_x509.patch.sig',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=2c6c9d439b484e1ba9830d8454a34fa4f80fdfe9',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=2f7530077e0ef79d98718138716bc51ca0cad658',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=fd2af07dc083a350c959147097003a14a5e8ac4d',
-                'https://github.com/pyca/cryptography',
-                'https://github.com/pyca/cryptography/security/advisories/GHSA-x4qr-2fvf-3mr5',
-                'https://linux.oracle.com/cve/CVE-2023-0286.html',
-                'https://linux.oracle.com/errata/ELSA-2025-7937.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-0286',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0003',
-                'https://rustsec.org/advisories/RUSTSEC-2023-0006.html',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://ubuntu.com/security/notices/USN-5844-1',
-                'https://ubuntu.com/security/notices/USN-5845-1',
-                'https://ubuntu.com/security/notices/USN-5845-2',
-                'https://ubuntu.com/security/notices/USN-6564-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-0286',
-                'https://www.openssl.org/news/secadv/20230207.txt'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: X.400 address type confusion in X.509 GeneralName'
-            },
-            {
-              'cve':  'CVE-2023-0464',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-295'
-              ],
-              'description':   "A security vulnerability has been identified in all supported versions\n\nof OpenSSL related to the verification of X.509 certificate chains\nthat include policy constraints.  Attackers may be able to exploit this\nvulnerability by creating a malicious certificate chain that triggers\nexponential use of computational resources, leading to a denial-of-service\n(DoS) attack on affected systems.\n\nPolicy processing is disabled by default but can be enabled by passing\nthe `-policy' argument to the command line utilities or by calling the\n`X509_VERIFY_PARAM_set1_policies()' function.",
-              'diffID':        'sha256:d36ae5a9766e0f6eeea876bbd3f661a610470acf0f6c639ad675091c3db8748c',
-              'fixedVersions': [
-                '1.1.1t-r1'
-              ],
-              'installedVersion': '1.1.1q-r0',
-              'packageName':      'libcrypto1.1',
-              'purl':             'pkg:apk/alpine/libcrypto1.1@1.1.1q-r0?arch=x86_64&distro=3.16.0',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2023:3722',
-                'https://access.redhat.com/security/cve/CVE-2023-0464',
-                'https://bugzilla.redhat.com/2181082',
-                'https://bugzilla.redhat.com/2182561',
-                'https://bugzilla.redhat.com/2182565',
-                'https://bugzilla.redhat.com/2188461',
-                'https://bugzilla.redhat.com/2207947',
-                'https://errata.almalinux.org/9/ALSA-2023-3722.html',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=2017771e2db3e2b96f89bbe8766c3209f6a99545',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=2dcd4f1e3115f38cefa43e3efbe9b801c27e642e',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=879f7080d7e141f415c79eaa3a8ac4a3dad0348b',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=959c59c7a0164117e7f8366466a32bb1f8d77ff1',
-                'https://linux.oracle.com/cve/CVE-2023-0464.html',
-                'https://linux.oracle.com/errata/ELSA-2023-3722.html',
-                'https://lists.debian.org/debian-lts-announce/2023/06/msg00011.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-0464',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://security.netapp.com/advisory/ntap-20230406-0006/',
-                'https://security.netapp.com/advisory/ntap-20240621-0006/',
-                'https://ubuntu.com/security/notices/USN-6039-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.couchbase.com/alerts/',
-                'https://www.cve.org/CVERecord?id=CVE-2023-0464',
-                'https://www.debian.org/security/2023/dsa-5417',
-                'https://www.openssl.org/news/secadv/20230322.txt'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: Denial of service by excessive resource usage in verifying X509 policy constraints'
-            },
-            {
-              'cve':  'CVE-2022-4304',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N'
-                },
-                'nvd': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N'
-                },
-                'redhat': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-203'
-              ],
-              'description':   'A timing based side channel exists in the OpenSSL RSA Decryption implementation\nwhich could be sufficient to recover a plaintext across a network in a\nBleichenbacher style attack. To achieve a successful decryption an attacker\nwould have to be able to send a very large number of trial messages for\ndecryption. The vulnerability affects all RSA padding modes: PKCS#1 v1.5,\nRSA-OEAP and RSASVE.\n\nFor example, in a TLS connection, RSA is commonly used by a client to send an\nencrypted pre-master secret to the server. An attacker that had observed a\ngenuine connection between a client and a server could use this flaw to send\ntrial messages to the server and record the time taken to process them. After a\nsufficiently large number of messages the attacker could recover the pre-master\nsecret used for the original connection and thus be able to decrypt the\napplication data sent over that connection.',
-              'diffID':        'sha256:d36ae5a9766e0f6eeea876bbd3f661a610470acf0f6c639ad675091c3db8748c',
-              'fixedVersions': [
-                '1.1.1t-r0'
-              ],
-              'installedVersion': '1.1.1q-r0',
-              'packageName':      'libcrypto1.1',
-              'purl':             'pkg:apk/alpine/libcrypto1.1@1.1.1q-r0?arch=x86_64&distro=3.16.0',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2023:2165',
-                'https://access.redhat.com/security/cve/CVE-2022-4304',
-                'https://bugzilla.redhat.com/1960321',
-                'https://bugzilla.redhat.com/2164440',
-                'https://bugzilla.redhat.com/2164487',
-                'https://bugzilla.redhat.com/2164492',
-                'https://bugzilla.redhat.com/2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144000',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144003',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144006',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144008',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144010',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144012',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144015',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144017',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144019',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2145170',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2158412',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164440',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164487',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164488',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164492',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164497',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164499',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164500',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4203',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4304',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4450',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0215',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0216',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0217',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0286',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0401',
-                'https://errata.almalinux.org/9/ALSA-2023-2165.html',
-                'https://errata.rockylinux.org/RLSA-2023:0946',
-                'https://linux.oracle.com/cve/CVE-2022-4304.html',
-                'https://linux.oracle.com/errata/ELSA-2023-32791.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2022-4304',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0003',
-                'https://rustsec.org/advisories/RUSTSEC-2023-0007.html',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://ubuntu.com/security/notices/USN-5844-1',
-                'https://ubuntu.com/security/notices/USN-6564-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2022-4304',
-                'https://www.openssl.org/news/secadv/20230207.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: timing attack in RSA Decryption implementation'
-            },
-            {
-              'cve':  'CVE-2023-0465',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N'
-                },
-                'redhat': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-295'
-              ],
-              'description':   "Applications that use a non-default option when verifying certificates may be\nvulnerable to an attack from a malicious CA to circumvent certain checks.\n\nInvalid certificate policies in leaf certificates are silently ignored by\nOpenSSL and other certificate policy checks are skipped for that certificate.\nA malicious CA could use this to deliberately assert invalid certificate policies\nin order to circumvent policy checking on the certificate altogether.\n\nPolicy processing is disabled by default but can be enabled by passing\nthe `-policy' argument to the command line utilities or by calling the\n`X509_VERIFY_PARAM_set1_policies()' function.",
-              'diffID':        'sha256:d36ae5a9766e0f6eeea876bbd3f661a610470acf0f6c639ad675091c3db8748c',
-              'fixedVersions': [
-                '1.1.1t-r2'
-              ],
-              'installedVersion': '1.1.1q-r0',
-              'packageName':      'libcrypto1.1',
-              'purl':             'pkg:apk/alpine/libcrypto1.1@1.1.1q-r0?arch=x86_64&distro=3.16.0',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2023:3722',
-                'https://access.redhat.com/security/cve/CVE-2023-0465',
-                'https://bugzilla.redhat.com/2181082',
-                'https://bugzilla.redhat.com/2182561',
-                'https://bugzilla.redhat.com/2182565',
-                'https://bugzilla.redhat.com/2188461',
-                'https://bugzilla.redhat.com/2207947',
-                'https://errata.almalinux.org/9/ALSA-2023-3722.html',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=10325176f3d3e98c6e2b3bf5ab1e3b334de6947a',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=1dd43e0709fece299b15208f36cc7c76209ba0bb',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=b013765abfa80036dc779dd0e50602c57bb3bf95',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=facfb1ab745646e97a1920977ae4a9965ea61d5c',
-                'https://linux.oracle.com/cve/CVE-2023-0465.html',
-                'https://linux.oracle.com/errata/ELSA-2023-3722.html',
-                'https://lists.debian.org/debian-lts-announce/2023/06/msg00011.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-0465',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://security.netapp.com/advisory/ntap-20230414-0001/',
-                'https://ubuntu.com/security/notices/USN-6039-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-0465',
-                'https://www.debian.org/security/2023/dsa-5417',
-                'https://www.openssl.org/news/secadv/20230328.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: Invalid certificate policies in leaf certificates are silently ignored'
-            },
-            {
-              'cve':  'CVE-2023-2650',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '6.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-770'
-              ],
-              'description':   "Issue summary: Processing some specially crafted ASN.1 object identifiers or\ndata containing them may be very slow.\n\nImpact summary: Applications that use OBJ_obj2txt() directly, or use any of\nthe OpenSSL subsystems OCSP, PKCS7/SMIME, CMS, CMP/CRMF or TS with no message\nsize limit may experience notable to very long delays when processing those\nmessages, which may lead to a Denial of Service.\n\nAn OBJECT IDENTIFIER is composed of a series of numbers - sub-identifiers -\nmost of which have no size limit.  OBJ_obj2txt() may be used to translate\nan ASN.1 OBJECT IDENTIFIER given in DER encoding form (using the OpenSSL\ntype ASN1_OBJECT) to its canonical numeric text form, which are the\nsub-identifiers of the OBJECT IDENTIFIER in decimal form, separated by\nperiods.\n\nWhen one of the sub-identifiers in the OBJECT IDENTIFIER is very large\n(these are sizes that are seen as absurdly large, taking up tens or hundreds\nof KiBs), the translation to a decimal number in text may take a very long\ntime.  The time complexity is O(n^2) with 'n' being the size of the\nsub-identifiers in bytes (*).\n\nWith OpenSSL 3.0, support to fetch cryptographic algorithms using names /\nidentifiers in string form was introduced.  This includes using OBJECT\nIDENTIFIERs in canonical numeric text form as identifiers for fetching\nalgorithms.\n\nSuch OBJECT IDENTIFIERs may be received through the ASN.1 structure\nAlgorithmIdentifier, which is commonly used in multiple protocols to specify\nwhat cryptographic algorithm should be used to sign or verify, encrypt or\ndecrypt, or digest passed data.\n\nApplications that call OBJ_obj2txt() directly with untrusted data are\naffected, with any version of OpenSSL.  If the use is for the mere purpose\nof display, the severity is considered low.\n\nIn OpenSSL 3.0 and newer, this affects the subsystems OCSP, PKCS7/SMIME,\nCMS, CMP/CRMF or TS.  It also impacts anything that processes X.509\ncertificates, including simple things like verifying its signature.\n\nThe impact on TLS is relatively low, because all versions of OpenSSL have a\n100KiB limit on the peer's certificate chain.  Additionally, this only\nimpacts clients, or servers that have explicitly enabled client\nauthentication.\n\nIn OpenSSL 1.1.1 and 1.0.2, this only affects displaying diverse objects,\nsuch as X.509 certificates.  This is assumed to not happen in such a way\nthat it would cause a Denial of Service, so these versions are considered\nnot affected by this issue in such a way that it would be cause for concern,\nand the severity is therefore considered low.",
-              'diffID':        'sha256:d36ae5a9766e0f6eeea876bbd3f661a610470acf0f6c639ad675091c3db8748c',
-              'fixedVersions': [
-                '1.1.1u-r0'
-              ],
-              'installedVersion': '1.1.1q-r0',
-              'packageName':      'libcrypto1.1',
-              'purl':             'pkg:apk/alpine/libcrypto1.1@1.1.1q-r0?arch=x86_64&distro=3.16.0',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2023/05/30/1',
-                'https://access.redhat.com/errata/RHSA-2023:6330',
-                'https://access.redhat.com/security/cve/CVE-2023-2650',
-                'https://bugzilla.redhat.com/1858038',
-                'https://bugzilla.redhat.com/2207947',
-                'https://errata.almalinux.org/9/ALSA-2023-6330.html',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=423a2bc737a908ad0c77bda470b2b59dc879936b',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=853c5e56ee0b8650c73140816bb8b91d6163422c',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=9e209944b35cf82368071f160a744b6178f9b098',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=db779b0e10b047f2585615e0b8f2acdf21f8544a',
-                'https://linux.oracle.com/cve/CVE-2023-2650.html',
-                'https://linux.oracle.com/errata/ELSA-2023-6330.html',
-                'https://lists.debian.org/debian-lts-announce/2023/06/msg00011.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-2650',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0009',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://security.netapp.com/advisory/ntap-20230703-0001/',
-                'https://security.netapp.com/advisory/ntap-20231027-0009/',
-                'https://ubuntu.com/security/notices/USN-6119-1',
-                'https://ubuntu.com/security/notices/USN-6188-1',
-                'https://ubuntu.com/security/notices/USN-6672-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-2650',
-                'https://www.debian.org/security/2023/dsa-5417',
-                'https://www.openssl.org/news/secadv/20230530.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: Possible DoS translating ASN.1 object identifiers'
-            },
-            {
-              'cve':  'CVE-2023-3446',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L'
-                },
-                'redhat': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L'
-                }
-              },
-              'cwes': [
-                'CWE-606',
-                'CWE-1333'
-              ],
-              'description':   "Issue summary: Checking excessively long DH keys or parameters may be very slow.\n\nImpact summary: Applications that use the functions DH_check(), DH_check_ex()\nor EVP_PKEY_param_check() to check a DH key or DH parameters may experience long\ndelays. Where the key or parameters that are being checked have been obtained\nfrom an untrusted source this may lead to a Denial of Service.\n\nThe function DH_check() performs various checks on DH parameters. One of those\nchecks confirms that the modulus ('p' parameter) is not too large. Trying to use\na very large modulus is slow and OpenSSL will not normally use a modulus which\nis over 10,000 bits in length.\n\nHowever the DH_check() function checks numerous aspects of the key or parameters\nthat have been supplied. Some of those checks use the supplied modulus value\neven if it has already been found to be too large.\n\nAn application that calls DH_check() and supplies a key or parameters obtained\nfrom an untrusted source could be vulernable to a Denial of Service attack.\n\nThe function DH_check() is itself called by a number of other OpenSSL functions.\nAn application calling any of those other functions may similarly be affected.\nThe other functions affected by this are DH_check_ex() and\nEVP_PKEY_param_check().\n\nAlso vulnerable are the OpenSSL dhparam and pkeyparam command line applications\nwhen using the '-check' option.\n\nThe OpenSSL SSL/TLS implementation is not affected by this issue.\nThe OpenSSL 3.0 and 3.1 FIPS providers are not affected by this issue.",
-              'diffID':        'sha256:d36ae5a9766e0f6eeea876bbd3f661a610470acf0f6c639ad675091c3db8748c',
-              'fixedVersions': [
-                '1.1.1u-r2'
-              ],
-              'installedVersion': '1.1.1q-r0',
-              'packageName':      'libcrypto1.1',
-              'purl':             'pkg:apk/alpine/libcrypto1.1@1.1.1q-r0?arch=x86_64&distro=3.16.0',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2023/07/19/4',
-                'http://www.openwall.com/lists/oss-security/2023/07/19/5',
-                'http://www.openwall.com/lists/oss-security/2023/07/19/6',
-                'http://www.openwall.com/lists/oss-security/2023/07/31/1',
-                'http://www.openwall.com/lists/oss-security/2024/05/16/1',
-                'https://access.redhat.com/errata/RHSA-2024:2447',
-                'https://access.redhat.com/security/cve/CVE-2023-3446',
-                'https://bugzilla.redhat.com/2223016',
-                'https://bugzilla.redhat.com/2224962',
-                'https://bugzilla.redhat.com/2227852',
-                'https://bugzilla.redhat.com/2248616',
-                'https://bugzilla.redhat.com/2257571',
-                'https://bugzilla.redhat.com/2258502',
-                'https://bugzilla.redhat.com/2259944',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2224962',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2257582',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2257583',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2258677',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2258688',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2258691',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2258694',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2258700',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-36763',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-36764',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3446',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45229',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45231',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45232',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45233',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45235',
-                'https://errata.almalinux.org/9/ALSA-2024-2447.html',
-                'https://errata.rockylinux.org/RLSA-2024:2264',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=1fa20cf2f506113c761777127a38bce5068740eb',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=8780a896543a654e757db1b9396383f9d8095528',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=9a0a4d3c1e7138915563c0df4fe6a3f9377b839c',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=fc9867c1e03c22ebf56943be205202e576aabf23',
-                'https://linux.oracle.com/cve/CVE-2023-3446.html',
-                'https://linux.oracle.com/errata/ELSA-2024-2447.html',
-                'https://lists.debian.org/debian-lts-announce/2023/08/msg00019.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-3446',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://security.netapp.com/advisory/ntap-20230803-0011/',
-                'https://ubuntu.com/security/notices/USN-6435-1',
-                'https://ubuntu.com/security/notices/USN-6435-2',
-                'https://ubuntu.com/security/notices/USN-6450-1',
-                'https://ubuntu.com/security/notices/USN-6709-1',
-                'https://ubuntu.com/security/notices/USN-7018-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-3446',
-                'https://www.openssl.org/news/secadv/20230719.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: Excessive time spent checking DH keys and parameters'
-            },
-            {
-              'cve':  'CVE-2023-3817',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L'
-                },
-                'redhat': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L'
-                }
-              },
-              'cwes': [
-                'CWE-606',
-                'CWE-834'
-              ],
-              'description':   'Issue summary: Checking excessively long DH keys or parameters may be very slow.\n\nImpact summary: Applications that use the functions DH_check(), DH_check_ex()\nor EVP_PKEY_param_check() to check a DH key or DH parameters may experience long\ndelays. Where the key or parameters that are being checked have been obtained\nfrom an untrusted source this may lead to a Denial of Service.\n\nThe function DH_check() performs various checks on DH parameters. After fixing\nCVE-2023-3446 it was discovered that a large q parameter value can also trigger\nan overly long computation during some of these checks. A correct q value,\nif present, cannot be larger than the modulus p parameter, thus it is\nunnecessary to perform these checks if q is larger than p.\n\nAn application that calls DH_check() and supplies a key or parameters obtained\nfrom an untrusted source could be vulnerable to a Denial of Service attack.\n\nThe function DH_check() is itself called by a number of other OpenSSL functions.\nAn application calling any of those other functions may similarly be affected.\nThe other functions affected by this are DH_check_ex() and\nEVP_PKEY_param_check().\n\nAlso vulnerable are the OpenSSL dhparam and pkeyparam command line applications\nwhen using the "-check" option.\n\nThe OpenSSL SSL/TLS implementation is not affected by this issue.\n\nThe OpenSSL 3.0 and 3.1 FIPS providers are not affected by this issue.',
-              'diffID':        'sha256:d36ae5a9766e0f6eeea876bbd3f661a610470acf0f6c639ad675091c3db8748c',
-              'fixedVersions': [
-                '1.1.1v-r0'
-              ],
-              'installedVersion': '1.1.1q-r0',
-              'packageName':      'libcrypto1.1',
-              'purl':             'pkg:apk/alpine/libcrypto1.1@1.1.1q-r0?arch=x86_64&distro=3.16.0',
-              'references':       [
-                'http://seclists.org/fulldisclosure/2023/Jul/43',
-                'http://www.openwall.com/lists/oss-security/2023/07/31/1',
-                'http://www.openwall.com/lists/oss-security/2023/09/22/11',
-                'http://www.openwall.com/lists/oss-security/2023/09/22/9',
-                'http://www.openwall.com/lists/oss-security/2023/11/06/2',
-                'https://access.redhat.com/errata/RHSA-2024:2447',
-                'https://access.redhat.com/security/cve/CVE-2023-3817',
-                'https://bugzilla.redhat.com/2223016',
-                'https://bugzilla.redhat.com/2224962',
-                'https://bugzilla.redhat.com/2227852',
-                'https://bugzilla.redhat.com/2248616',
-                'https://bugzilla.redhat.com/2257571',
-                'https://bugzilla.redhat.com/2258502',
-                'https://bugzilla.redhat.com/2259944',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2224962',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2227852',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2248616',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2270358',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3446',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3817',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-5678',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-2408',
-                'https://errata.almalinux.org/9/ALSA-2024-2447.html',
-                'https://errata.rockylinux.org/RLSA-2023:7877',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=6a1eb62c29db6cb5eec707f9338aee00f44e26f5',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=869ad69aadd985c7b8ca6f4e5dd0eb274c9f3644',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=9002fd07327a91f35ba6c1307e71fa6fd4409b7f',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=91ddeba0f2269b017dc06c46c993a788974b1aa5',
-                'https://linux.oracle.com/cve/CVE-2023-3817.html',
-                'https://linux.oracle.com/errata/ELSA-2024-2447.html',
-                'https://lists.debian.org/debian-lts-announce/2023/08/msg00019.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-3817',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://security.netapp.com/advisory/ntap-20230818-0014/',
-                'https://security.netapp.com/advisory/ntap-20231027-0008/',
-                'https://security.netapp.com/advisory/ntap-20240621-0006/',
-                'https://ubuntu.com/security/notices/USN-6435-1',
-                'https://ubuntu.com/security/notices/USN-6435-2',
-                'https://ubuntu.com/security/notices/USN-6450-1',
-                'https://ubuntu.com/security/notices/USN-6709-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-3817',
-                'https://www.openssl.org/news/secadv/20230731.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'OpenSSL: Excessive time spent checking DH q parameter value'
-            },
-            {
-              'cve':  'CVE-2023-5678',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L'
-                },
-                'redhat': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L'
-                }
-              },
-              'cwes': [
-                'CWE-606',
-                'CWE-754'
-              ],
-              'description':   "Issue summary: Generating excessively long X9.42 DH keys or checking\nexcessively long X9.42 DH keys or parameters may be very slow.\n\nImpact summary: Applications that use the functions DH_generate_key() to\ngenerate an X9.42 DH key may experience long delays.  Likewise, applications\nthat use DH_check_pub_key(), DH_check_pub_key_ex() or EVP_PKEY_public_check()\nto check an X9.42 DH key or X9.42 DH parameters may experience long delays.\nWhere the key or parameters that are being checked have been obtained from\nan untrusted source this may lead to a Denial of Service.\n\nWhile DH_check() performs all the necessary checks (as of CVE-2023-3817),\nDH_check_pub_key() doesn't make any of these checks, and is therefore\nvulnerable for excessively large P and Q parameters.\n\nLikewise, while DH_generate_key() performs a check for an excessively large\nP, it doesn't check for an excessively large Q.\n\nAn application that calls DH_generate_key() or DH_check_pub_key() and\nsupplies a key or parameters obtained from an untrusted source could be\nvulnerable to a Denial of Service attack.\n\nDH_generate_key() and DH_check_pub_key() are also called by a number of\nother OpenSSL functions.  An application calling any of those other\nfunctions may similarly be affected.  The other functions affected by this\nare DH_check_pub_key_ex(), EVP_PKEY_public_check(), and EVP_PKEY_generate().\n\nAlso vulnerable are the OpenSSL pkey command line application when using the\n\"-pubcheck\" option, as well as the OpenSSL genpkey command line application.\n\nThe OpenSSL SSL/TLS implementation is not affected by this issue.\n\nThe OpenSSL 3.0 and 3.1 FIPS providers are not affected by this issue.",
-              'diffID':        'sha256:d36ae5a9766e0f6eeea876bbd3f661a610470acf0f6c639ad675091c3db8748c',
-              'fixedVersions': [
-                '1.1.1w-r1'
-              ],
-              'installedVersion': '1.1.1q-r0',
-              'packageName':      'libcrypto1.1',
-              'purl':             'pkg:apk/alpine/libcrypto1.1@1.1.1q-r0?arch=x86_64&distro=3.16.0',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2024/03/11/1',
-                'https://access.redhat.com/errata/RHSA-2024:2447',
-                'https://access.redhat.com/security/cve/CVE-2023-5678',
-                'https://bugzilla.redhat.com/2223016',
-                'https://bugzilla.redhat.com/2224962',
-                'https://bugzilla.redhat.com/2227852',
-                'https://bugzilla.redhat.com/2248616',
-                'https://bugzilla.redhat.com/2257571',
-                'https://bugzilla.redhat.com/2258502',
-                'https://bugzilla.redhat.com/2259944',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2224962',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2227852',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2248616',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2270358',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3446',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3817',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-5678',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-2408',
-                'https://errata.almalinux.org/9/ALSA-2024-2447.html',
-                'https://errata.rockylinux.org/RLSA-2023:7877',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=34efaef6c103d636ab507a0cc34dca4d3aecc055',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=710fee740904b6290fef0dd5536fbcedbc38ff0c',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=db925ae2e65d0d925adef429afc37f75bd1c2017',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=ddeb4b6c6d527e54ce9a99cba785c0f7776e54b6',
-                'https://linux.oracle.com/cve/CVE-2023-5678.html',
-                'https://linux.oracle.com/errata/ELSA-2024-2447.html',
-                'https://lists.debian.org/debian-lts-announce/2024/10/msg00033.html',
-                'https://lists.debian.org/debian-lts-announce/2024/11/msg00000.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-5678',
-                'https://security.netapp.com/advisory/ntap-20231130-0010/',
-                'https://ubuntu.com/security/notices/USN-6622-1',
-                'https://ubuntu.com/security/notices/USN-6632-1',
-                'https://ubuntu.com/security/notices/USN-6709-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-5678',
-                'https://www.openssl.org/news/secadv/20231106.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: Generating excessively long X9.42 DH keys or checking excessively long X9.42 DH keys or parameters may be very slow'
-            },
-            {
-              'cve':  'CVE-2022-4450',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'nvd': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-415'
-              ],
-              'description':   'The function PEM_read_bio_ex() reads a PEM file from a BIO and parses and\ndecodes the "name" (e.g. "CERTIFICATE"), any header data and the payload data.\nIf the function succeeds then the "name_out", "header" and "data" arguments are\npopulated with pointers to buffers containing the relevant decoded data. The\ncaller is responsible for freeing those buffers. It is possible to construct a\nPEM file that results in 0 bytes of payload data. In this case PEM_read_bio_ex()\nwill return a failure code but will populate the header argument with a pointer\nto a buffer that has already been freed. If the caller also frees this buffer\nthen a double free will occur. This will most likely lead to a crash. This\ncould be exploited by an attacker who has the ability to supply malicious PEM\nfiles for parsing to achieve a denial of service attack.\n\nThe functions PEM_read_bio() and PEM_read() are simple wrappers around\nPEM_read_bio_ex() and therefore these functions are also directly affected.\n\nThese functions are also called indirectly by a number of other OpenSSL\nfunctions including PEM_X509_INFO_read_bio_ex() and\nSSL_CTX_use_serverinfo_file() which are also vulnerable. Some OpenSSL internal\nuses of these functions are not vulnerable because the caller does not free the\nheader argument if PEM_read_bio_ex() returns a failure code. These locations\ninclude the PEM_read_bio_TYPE() functions as well as the decoders introduced in\nOpenSSL 3.0.\n\nThe OpenSSL asn1parse command line application is also impacted by this issue.',
-              'diffID':        'sha256:d36ae5a9766e0f6eeea876bbd3f661a610470acf0f6c639ad675091c3db8748c',
-              'fixedVersions': [
-                '1.1.1t-r0'
-              ],
-              'installedVersion': '1.1.1q-r0',
-              'packageName':      'libssl1.1',
-              'purl':             'pkg:apk/alpine/libssl1.1@1.1.1q-r0?arch=x86_64&distro=3.16.0',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2023:2165',
-                'https://access.redhat.com/security/cve/CVE-2022-4450',
-                'https://bugzilla.redhat.com/1960321',
-                'https://bugzilla.redhat.com/2164440',
-                'https://bugzilla.redhat.com/2164487',
-                'https://bugzilla.redhat.com/2164492',
-                'https://bugzilla.redhat.com/2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144000',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144003',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144006',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144008',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144010',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144012',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144015',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144017',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144019',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2145170',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2158412',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164440',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164487',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164488',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164492',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164497',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164499',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164500',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4203',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4304',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4450',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0215',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0216',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0217',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0286',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0401',
-                'https://errata.almalinux.org/9/ALSA-2023-2165.html',
-                'https://errata.rockylinux.org/RLSA-2023:0946',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=63bcf189be73a9cc1264059bed6f57974be74a83',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=bbcf509bd046b34cca19c766bbddc31683d0858b',
-                'https://linux.oracle.com/cve/CVE-2022-4450.html',
-                'https://linux.oracle.com/errata/ELSA-2023-32791.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2022-4450',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0003',
-                'https://rustsec.org/advisories/RUSTSEC-2023-0010.html',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://ubuntu.com/security/notices/USN-5844-1',
-                'https://ubuntu.com/security/notices/USN-6564-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2022-4450',
-                'https://www.openssl.org/news/secadv/20230207.txt'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: double free after calling PEM_read_bio_ex'
-            },
-            {
-              'cve':  'CVE-2023-0215',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'nvd': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   'The public API function BIO_new_NDEF is a helper function used for streaming\nASN.1 data via a BIO. It is primarily used internally to OpenSSL to support the\nSMIME, CMS and PKCS7 streaming capabilities, but may also be called directly by\nend user applications.\n\nThe function receives a BIO from the caller, prepends a new BIO_f_asn1 filter\nBIO onto the front of it to form a BIO chain, and then returns the new head of\nthe BIO chain to the caller. Under certain conditions, for example if a CMS\nrecipient public key is invalid, the new filter BIO is freed and the function\nreturns a NULL result indicating a failure. However, in this case, the BIO chain\nis not properly cleaned up and the BIO passed by the caller still retains\ninternal pointers to the previously freed filter BIO. If the caller then goes on\nto call BIO_pop() on the BIO then a use-after-free will occur. This will most\nlikely result in a crash.\n\n\n\nThis scenario occurs directly in the internal function B64_write_ASN1() which\nmay cause BIO_new_NDEF() to be called and will subsequently call BIO_pop() on\nthe BIO. This internal function is in turn called by the public API functions\nPEM_write_bio_ASN1_stream, PEM_write_bio_CMS_stream, PEM_write_bio_PKCS7_stream,\nSMIME_write_ASN1, SMIME_write_CMS and SMIME_write_PKCS7.\n\nOther public API functions that may be impacted by this include\ni2d_ASN1_bio_stream, BIO_new_CMS, BIO_new_PKCS7, i2d_CMS_bio_stream and\ni2d_PKCS7_bio_stream.\n\nThe OpenSSL cms and smime command line applications are similarly affected.',
-              'diffID':        'sha256:d36ae5a9766e0f6eeea876bbd3f661a610470acf0f6c639ad675091c3db8748c',
-              'fixedVersions': [
-                '1.1.1t-r0'
-              ],
-              'installedVersion': '1.1.1q-r0',
-              'packageName':      'libssl1.1',
-              'purl':             'pkg:apk/alpine/libssl1.1@1.1.1q-r0?arch=x86_64&distro=3.16.0',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2023:2165',
-                'https://access.redhat.com/security/cve/CVE-2023-0215',
-                'https://bugzilla.redhat.com/1960321',
-                'https://bugzilla.redhat.com/2164440',
-                'https://bugzilla.redhat.com/2164487',
-                'https://bugzilla.redhat.com/2164492',
-                'https://bugzilla.redhat.com/2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144000',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144003',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144006',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144008',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144010',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144012',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144015',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144017',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144019',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2145170',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2158412',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164440',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164487',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164488',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164492',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164497',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164499',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164500',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4203',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4304',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4450',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0215',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0216',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0217',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0286',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0401',
-                'https://errata.almalinux.org/9/ALSA-2023-2165.html',
-                'https://errata.rockylinux.org/RLSA-2023:0946',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=8818064ce3c3c0f1b740a5aaba2a987e75bfbafd',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=9816136fe31d92ace4037d5da5257f763aeeb4eb',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=c3829dd8825c654652201e16f8a0a0c46ee3f344',
-                'https://linux.oracle.com/cve/CVE-2023-0215.html',
-                'https://linux.oracle.com/errata/ELSA-2023-32791.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-0215',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0003',
-                'https://rustsec.org/advisories/RUSTSEC-2023-0009.html',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://security.netapp.com/advisory/ntap-20230427-0007',
-                'https://security.netapp.com/advisory/ntap-20230427-0007/',
-                'https://security.netapp.com/advisory/ntap-20230427-0009',
-                'https://security.netapp.com/advisory/ntap-20230427-0009/',
-                'https://security.netapp.com/advisory/ntap-20240621-0006',
-                'https://security.netapp.com/advisory/ntap-20240621-0006/',
-                'https://ubuntu.com/security/notices/USN-5844-1',
-                'https://ubuntu.com/security/notices/USN-5845-1',
-                'https://ubuntu.com/security/notices/USN-5845-2',
-                'https://ubuntu.com/security/notices/USN-6564-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-0215',
-                'https://www.openssl.org/news/secadv/20230207.txt'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: use-after-free following BIO_new_NDEF'
-            },
-            {
-              'cve':  'CVE-2023-0286',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '7.4',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H'
-                },
-                'nvd': {
-                  'v3score':  '7.4',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.4',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-843'
-              ],
-              'description':   'There is a type confusion vulnerability relating to X.400 address processing\ninside an X.509 GeneralName. X.400 addresses were parsed as an ASN1_STRING but\nthe public structure definition for GENERAL_NAME incorrectly specified the type\nof the x400Address field as ASN1_TYPE. This field is subsequently interpreted by\nthe OpenSSL function GENERAL_NAME_cmp as an ASN1_TYPE rather than an\nASN1_STRING.\n\nWhen CRL checking is enabled (i.e. the application sets the\nX509_V_FLAG_CRL_CHECK flag), this vulnerability may allow an attacker to pass\narbitrary pointers to a memcmp call, enabling them to read memory contents or\nenact a denial of service. In most cases, the attack requires the attacker to\nprovide both the certificate chain and CRL, neither of which need to have a\nvalid signature. If the attacker only controls one of these inputs, the other\ninput must already contain an X.400 address as a CRL distribution point, which\nis uncommon. As such, this vulnerability is most likely to only affect\napplications which have implemented their own functionality for retrieving CRLs\nover a network.',
-              'diffID':        'sha256:d36ae5a9766e0f6eeea876bbd3f661a610470acf0f6c639ad675091c3db8748c',
-              'fixedVersions': [
-                '1.1.1t-r0'
-              ],
-              'installedVersion': '1.1.1q-r0',
-              'packageName':      'libssl1.1',
-              'purl':             'pkg:apk/alpine/libssl1.1@1.1.1q-r0?arch=x86_64&distro=3.16.0',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2025:7937',
-                'https://access.redhat.com/security/cve/CVE-2023-0286',
-                'https://access.redhat.com/security/cve/cve-2023-0286',
-                'https://bugzilla.redhat.com/2164440',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144000',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144003',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144006',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144008',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144010',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144012',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144015',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144017',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144019',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2145170',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2158412',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164440',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164487',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164488',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164492',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164497',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164499',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164500',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4203',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4304',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4450',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0215',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0216',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0217',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0286',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0401',
-                'https://errata.almalinux.org/9/ALSA-2025-7937.html',
-                'https://errata.rockylinux.org/RLSA-2023:0946',
-                'https://ftp.openbsd.org/pub/OpenBSD/LibreSSL/libressl-3.6.2-relnotes.txt',
-                'https://ftp.openbsd.org/pub/OpenBSD/patches/7.2/common/018_x509.patch.sig',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=2c6c9d439b484e1ba9830d8454a34fa4f80fdfe9',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=2f7530077e0ef79d98718138716bc51ca0cad658',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=fd2af07dc083a350c959147097003a14a5e8ac4d',
-                'https://github.com/pyca/cryptography',
-                'https://github.com/pyca/cryptography/security/advisories/GHSA-x4qr-2fvf-3mr5',
-                'https://linux.oracle.com/cve/CVE-2023-0286.html',
-                'https://linux.oracle.com/errata/ELSA-2025-7937.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-0286',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0003',
-                'https://rustsec.org/advisories/RUSTSEC-2023-0006.html',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://ubuntu.com/security/notices/USN-5844-1',
-                'https://ubuntu.com/security/notices/USN-5845-1',
-                'https://ubuntu.com/security/notices/USN-5845-2',
-                'https://ubuntu.com/security/notices/USN-6564-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-0286',
-                'https://www.openssl.org/news/secadv/20230207.txt'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: X.400 address type confusion in X.509 GeneralName'
-            },
-            {
-              'cve':  'CVE-2023-0464',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-295'
-              ],
-              'description':   "A security vulnerability has been identified in all supported versions\n\nof OpenSSL related to the verification of X.509 certificate chains\nthat include policy constraints.  Attackers may be able to exploit this\nvulnerability by creating a malicious certificate chain that triggers\nexponential use of computational resources, leading to a denial-of-service\n(DoS) attack on affected systems.\n\nPolicy processing is disabled by default but can be enabled by passing\nthe `-policy' argument to the command line utilities or by calling the\n`X509_VERIFY_PARAM_set1_policies()' function.",
-              'diffID':        'sha256:d36ae5a9766e0f6eeea876bbd3f661a610470acf0f6c639ad675091c3db8748c',
-              'fixedVersions': [
-                '1.1.1t-r1'
-              ],
-              'installedVersion': '1.1.1q-r0',
-              'packageName':      'libssl1.1',
-              'purl':             'pkg:apk/alpine/libssl1.1@1.1.1q-r0?arch=x86_64&distro=3.16.0',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2023:3722',
-                'https://access.redhat.com/security/cve/CVE-2023-0464',
-                'https://bugzilla.redhat.com/2181082',
-                'https://bugzilla.redhat.com/2182561',
-                'https://bugzilla.redhat.com/2182565',
-                'https://bugzilla.redhat.com/2188461',
-                'https://bugzilla.redhat.com/2207947',
-                'https://errata.almalinux.org/9/ALSA-2023-3722.html',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=2017771e2db3e2b96f89bbe8766c3209f6a99545',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=2dcd4f1e3115f38cefa43e3efbe9b801c27e642e',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=879f7080d7e141f415c79eaa3a8ac4a3dad0348b',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=959c59c7a0164117e7f8366466a32bb1f8d77ff1',
-                'https://linux.oracle.com/cve/CVE-2023-0464.html',
-                'https://linux.oracle.com/errata/ELSA-2023-3722.html',
-                'https://lists.debian.org/debian-lts-announce/2023/06/msg00011.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-0464',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://security.netapp.com/advisory/ntap-20230406-0006/',
-                'https://security.netapp.com/advisory/ntap-20240621-0006/',
-                'https://ubuntu.com/security/notices/USN-6039-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.couchbase.com/alerts/',
-                'https://www.cve.org/CVERecord?id=CVE-2023-0464',
-                'https://www.debian.org/security/2023/dsa-5417',
-                'https://www.openssl.org/news/secadv/20230322.txt'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: Denial of service by excessive resource usage in verifying X509 policy constraints'
-            },
-            {
-              'cve':  'CVE-2022-4304',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N'
-                },
-                'nvd': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N'
-                },
-                'redhat': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-203'
-              ],
-              'description':   'A timing based side channel exists in the OpenSSL RSA Decryption implementation\nwhich could be sufficient to recover a plaintext across a network in a\nBleichenbacher style attack. To achieve a successful decryption an attacker\nwould have to be able to send a very large number of trial messages for\ndecryption. The vulnerability affects all RSA padding modes: PKCS#1 v1.5,\nRSA-OEAP and RSASVE.\n\nFor example, in a TLS connection, RSA is commonly used by a client to send an\nencrypted pre-master secret to the server. An attacker that had observed a\ngenuine connection between a client and a server could use this flaw to send\ntrial messages to the server and record the time taken to process them. After a\nsufficiently large number of messages the attacker could recover the pre-master\nsecret used for the original connection and thus be able to decrypt the\napplication data sent over that connection.',
-              'diffID':        'sha256:d36ae5a9766e0f6eeea876bbd3f661a610470acf0f6c639ad675091c3db8748c',
-              'fixedVersions': [
-                '1.1.1t-r0'
-              ],
-              'installedVersion': '1.1.1q-r0',
-              'packageName':      'libssl1.1',
-              'purl':             'pkg:apk/alpine/libssl1.1@1.1.1q-r0?arch=x86_64&distro=3.16.0',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2023:2165',
-                'https://access.redhat.com/security/cve/CVE-2022-4304',
-                'https://bugzilla.redhat.com/1960321',
-                'https://bugzilla.redhat.com/2164440',
-                'https://bugzilla.redhat.com/2164487',
-                'https://bugzilla.redhat.com/2164492',
-                'https://bugzilla.redhat.com/2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144000',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144003',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144006',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144008',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144010',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144012',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144015',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144017',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144019',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2145170',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2158412',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164440',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164487',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164488',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164492',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164497',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164499',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164500',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4203',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4304',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4450',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0215',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0216',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0217',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0286',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0401',
-                'https://errata.almalinux.org/9/ALSA-2023-2165.html',
-                'https://errata.rockylinux.org/RLSA-2023:0946',
-                'https://linux.oracle.com/cve/CVE-2022-4304.html',
-                'https://linux.oracle.com/errata/ELSA-2023-32791.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2022-4304',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0003',
-                'https://rustsec.org/advisories/RUSTSEC-2023-0007.html',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://ubuntu.com/security/notices/USN-5844-1',
-                'https://ubuntu.com/security/notices/USN-6564-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2022-4304',
-                'https://www.openssl.org/news/secadv/20230207.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: timing attack in RSA Decryption implementation'
-            },
-            {
-              'cve':  'CVE-2023-0465',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N'
-                },
-                'redhat': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-295'
-              ],
-              'description':   "Applications that use a non-default option when verifying certificates may be\nvulnerable to an attack from a malicious CA to circumvent certain checks.\n\nInvalid certificate policies in leaf certificates are silently ignored by\nOpenSSL and other certificate policy checks are skipped for that certificate.\nA malicious CA could use this to deliberately assert invalid certificate policies\nin order to circumvent policy checking on the certificate altogether.\n\nPolicy processing is disabled by default but can be enabled by passing\nthe `-policy' argument to the command line utilities or by calling the\n`X509_VERIFY_PARAM_set1_policies()' function.",
-              'diffID':        'sha256:d36ae5a9766e0f6eeea876bbd3f661a610470acf0f6c639ad675091c3db8748c',
-              'fixedVersions': [
-                '1.1.1t-r2'
-              ],
-              'installedVersion': '1.1.1q-r0',
-              'packageName':      'libssl1.1',
-              'purl':             'pkg:apk/alpine/libssl1.1@1.1.1q-r0?arch=x86_64&distro=3.16.0',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2023:3722',
-                'https://access.redhat.com/security/cve/CVE-2023-0465',
-                'https://bugzilla.redhat.com/2181082',
-                'https://bugzilla.redhat.com/2182561',
-                'https://bugzilla.redhat.com/2182565',
-                'https://bugzilla.redhat.com/2188461',
-                'https://bugzilla.redhat.com/2207947',
-                'https://errata.almalinux.org/9/ALSA-2023-3722.html',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=10325176f3d3e98c6e2b3bf5ab1e3b334de6947a',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=1dd43e0709fece299b15208f36cc7c76209ba0bb',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=b013765abfa80036dc779dd0e50602c57bb3bf95',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=facfb1ab745646e97a1920977ae4a9965ea61d5c',
-                'https://linux.oracle.com/cve/CVE-2023-0465.html',
-                'https://linux.oracle.com/errata/ELSA-2023-3722.html',
-                'https://lists.debian.org/debian-lts-announce/2023/06/msg00011.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-0465',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://security.netapp.com/advisory/ntap-20230414-0001/',
-                'https://ubuntu.com/security/notices/USN-6039-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-0465',
-                'https://www.debian.org/security/2023/dsa-5417',
-                'https://www.openssl.org/news/secadv/20230328.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: Invalid certificate policies in leaf certificates are silently ignored'
-            },
-            {
-              'cve':  'CVE-2023-2650',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '6.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-770'
-              ],
-              'description':   "Issue summary: Processing some specially crafted ASN.1 object identifiers or\ndata containing them may be very slow.\n\nImpact summary: Applications that use OBJ_obj2txt() directly, or use any of\nthe OpenSSL subsystems OCSP, PKCS7/SMIME, CMS, CMP/CRMF or TS with no message\nsize limit may experience notable to very long delays when processing those\nmessages, which may lead to a Denial of Service.\n\nAn OBJECT IDENTIFIER is composed of a series of numbers - sub-identifiers -\nmost of which have no size limit.  OBJ_obj2txt() may be used to translate\nan ASN.1 OBJECT IDENTIFIER given in DER encoding form (using the OpenSSL\ntype ASN1_OBJECT) to its canonical numeric text form, which are the\nsub-identifiers of the OBJECT IDENTIFIER in decimal form, separated by\nperiods.\n\nWhen one of the sub-identifiers in the OBJECT IDENTIFIER is very large\n(these are sizes that are seen as absurdly large, taking up tens or hundreds\nof KiBs), the translation to a decimal number in text may take a very long\ntime.  The time complexity is O(n^2) with 'n' being the size of the\nsub-identifiers in bytes (*).\n\nWith OpenSSL 3.0, support to fetch cryptographic algorithms using names /\nidentifiers in string form was introduced.  This includes using OBJECT\nIDENTIFIERs in canonical numeric text form as identifiers for fetching\nalgorithms.\n\nSuch OBJECT IDENTIFIERs may be received through the ASN.1 structure\nAlgorithmIdentifier, which is commonly used in multiple protocols to specify\nwhat cryptographic algorithm should be used to sign or verify, encrypt or\ndecrypt, or digest passed data.\n\nApplications that call OBJ_obj2txt() directly with untrusted data are\naffected, with any version of OpenSSL.  If the use is for the mere purpose\nof display, the severity is considered low.\n\nIn OpenSSL 3.0 and newer, this affects the subsystems OCSP, PKCS7/SMIME,\nCMS, CMP/CRMF or TS.  It also impacts anything that processes X.509\ncertificates, including simple things like verifying its signature.\n\nThe impact on TLS is relatively low, because all versions of OpenSSL have a\n100KiB limit on the peer's certificate chain.  Additionally, this only\nimpacts clients, or servers that have explicitly enabled client\nauthentication.\n\nIn OpenSSL 1.1.1 and 1.0.2, this only affects displaying diverse objects,\nsuch as X.509 certificates.  This is assumed to not happen in such a way\nthat it would cause a Denial of Service, so these versions are considered\nnot affected by this issue in such a way that it would be cause for concern,\nand the severity is therefore considered low.",
-              'diffID':        'sha256:d36ae5a9766e0f6eeea876bbd3f661a610470acf0f6c639ad675091c3db8748c',
-              'fixedVersions': [
-                '1.1.1u-r0'
-              ],
-              'installedVersion': '1.1.1q-r0',
-              'packageName':      'libssl1.1',
-              'purl':             'pkg:apk/alpine/libssl1.1@1.1.1q-r0?arch=x86_64&distro=3.16.0',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2023/05/30/1',
-                'https://access.redhat.com/errata/RHSA-2023:6330',
-                'https://access.redhat.com/security/cve/CVE-2023-2650',
-                'https://bugzilla.redhat.com/1858038',
-                'https://bugzilla.redhat.com/2207947',
-                'https://errata.almalinux.org/9/ALSA-2023-6330.html',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=423a2bc737a908ad0c77bda470b2b59dc879936b',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=853c5e56ee0b8650c73140816bb8b91d6163422c',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=9e209944b35cf82368071f160a744b6178f9b098',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=db779b0e10b047f2585615e0b8f2acdf21f8544a',
-                'https://linux.oracle.com/cve/CVE-2023-2650.html',
-                'https://linux.oracle.com/errata/ELSA-2023-6330.html',
-                'https://lists.debian.org/debian-lts-announce/2023/06/msg00011.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-2650',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0009',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://security.netapp.com/advisory/ntap-20230703-0001/',
-                'https://security.netapp.com/advisory/ntap-20231027-0009/',
-                'https://ubuntu.com/security/notices/USN-6119-1',
-                'https://ubuntu.com/security/notices/USN-6188-1',
-                'https://ubuntu.com/security/notices/USN-6672-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-2650',
-                'https://www.debian.org/security/2023/dsa-5417',
-                'https://www.openssl.org/news/secadv/20230530.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: Possible DoS translating ASN.1 object identifiers'
-            },
-            {
-              'cve':  'CVE-2023-3446',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L'
-                },
-                'redhat': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L'
-                }
-              },
-              'cwes': [
-                'CWE-606',
-                'CWE-1333'
-              ],
-              'description':   "Issue summary: Checking excessively long DH keys or parameters may be very slow.\n\nImpact summary: Applications that use the functions DH_check(), DH_check_ex()\nor EVP_PKEY_param_check() to check a DH key or DH parameters may experience long\ndelays. Where the key or parameters that are being checked have been obtained\nfrom an untrusted source this may lead to a Denial of Service.\n\nThe function DH_check() performs various checks on DH parameters. One of those\nchecks confirms that the modulus ('p' parameter) is not too large. Trying to use\na very large modulus is slow and OpenSSL will not normally use a modulus which\nis over 10,000 bits in length.\n\nHowever the DH_check() function checks numerous aspects of the key or parameters\nthat have been supplied. Some of those checks use the supplied modulus value\neven if it has already been found to be too large.\n\nAn application that calls DH_check() and supplies a key or parameters obtained\nfrom an untrusted source could be vulernable to a Denial of Service attack.\n\nThe function DH_check() is itself called by a number of other OpenSSL functions.\nAn application calling any of those other functions may similarly be affected.\nThe other functions affected by this are DH_check_ex() and\nEVP_PKEY_param_check().\n\nAlso vulnerable are the OpenSSL dhparam and pkeyparam command line applications\nwhen using the '-check' option.\n\nThe OpenSSL SSL/TLS implementation is not affected by this issue.\nThe OpenSSL 3.0 and 3.1 FIPS providers are not affected by this issue.",
-              'diffID':        'sha256:d36ae5a9766e0f6eeea876bbd3f661a610470acf0f6c639ad675091c3db8748c',
-              'fixedVersions': [
-                '1.1.1u-r2'
-              ],
-              'installedVersion': '1.1.1q-r0',
-              'packageName':      'libssl1.1',
-              'purl':             'pkg:apk/alpine/libssl1.1@1.1.1q-r0?arch=x86_64&distro=3.16.0',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2023/07/19/4',
-                'http://www.openwall.com/lists/oss-security/2023/07/19/5',
-                'http://www.openwall.com/lists/oss-security/2023/07/19/6',
-                'http://www.openwall.com/lists/oss-security/2023/07/31/1',
-                'http://www.openwall.com/lists/oss-security/2024/05/16/1',
-                'https://access.redhat.com/errata/RHSA-2024:2447',
-                'https://access.redhat.com/security/cve/CVE-2023-3446',
-                'https://bugzilla.redhat.com/2223016',
-                'https://bugzilla.redhat.com/2224962',
-                'https://bugzilla.redhat.com/2227852',
-                'https://bugzilla.redhat.com/2248616',
-                'https://bugzilla.redhat.com/2257571',
-                'https://bugzilla.redhat.com/2258502',
-                'https://bugzilla.redhat.com/2259944',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2224962',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2257582',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2257583',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2258677',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2258688',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2258691',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2258694',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2258700',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-36763',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-36764',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3446',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45229',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45231',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45232',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45233',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45235',
-                'https://errata.almalinux.org/9/ALSA-2024-2447.html',
-                'https://errata.rockylinux.org/RLSA-2024:2264',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=1fa20cf2f506113c761777127a38bce5068740eb',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=8780a896543a654e757db1b9396383f9d8095528',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=9a0a4d3c1e7138915563c0df4fe6a3f9377b839c',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=fc9867c1e03c22ebf56943be205202e576aabf23',
-                'https://linux.oracle.com/cve/CVE-2023-3446.html',
-                'https://linux.oracle.com/errata/ELSA-2024-2447.html',
-                'https://lists.debian.org/debian-lts-announce/2023/08/msg00019.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-3446',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://security.netapp.com/advisory/ntap-20230803-0011/',
-                'https://ubuntu.com/security/notices/USN-6435-1',
-                'https://ubuntu.com/security/notices/USN-6435-2',
-                'https://ubuntu.com/security/notices/USN-6450-1',
-                'https://ubuntu.com/security/notices/USN-6709-1',
-                'https://ubuntu.com/security/notices/USN-7018-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-3446',
-                'https://www.openssl.org/news/secadv/20230719.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: Excessive time spent checking DH keys and parameters'
-            },
-            {
-              'cve':  'CVE-2023-3817',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L'
-                },
-                'redhat': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L'
-                }
-              },
-              'cwes': [
-                'CWE-606',
-                'CWE-834'
-              ],
-              'description':   'Issue summary: Checking excessively long DH keys or parameters may be very slow.\n\nImpact summary: Applications that use the functions DH_check(), DH_check_ex()\nor EVP_PKEY_param_check() to check a DH key or DH parameters may experience long\ndelays. Where the key or parameters that are being checked have been obtained\nfrom an untrusted source this may lead to a Denial of Service.\n\nThe function DH_check() performs various checks on DH parameters. After fixing\nCVE-2023-3446 it was discovered that a large q parameter value can also trigger\nan overly long computation during some of these checks. A correct q value,\nif present, cannot be larger than the modulus p parameter, thus it is\nunnecessary to perform these checks if q is larger than p.\n\nAn application that calls DH_check() and supplies a key or parameters obtained\nfrom an untrusted source could be vulnerable to a Denial of Service attack.\n\nThe function DH_check() is itself called by a number of other OpenSSL functions.\nAn application calling any of those other functions may similarly be affected.\nThe other functions affected by this are DH_check_ex() and\nEVP_PKEY_param_check().\n\nAlso vulnerable are the OpenSSL dhparam and pkeyparam command line applications\nwhen using the "-check" option.\n\nThe OpenSSL SSL/TLS implementation is not affected by this issue.\n\nThe OpenSSL 3.0 and 3.1 FIPS providers are not affected by this issue.',
-              'diffID':        'sha256:d36ae5a9766e0f6eeea876bbd3f661a610470acf0f6c639ad675091c3db8748c',
-              'fixedVersions': [
-                '1.1.1v-r0'
-              ],
-              'installedVersion': '1.1.1q-r0',
-              'packageName':      'libssl1.1',
-              'purl':             'pkg:apk/alpine/libssl1.1@1.1.1q-r0?arch=x86_64&distro=3.16.0',
-              'references':       [
-                'http://seclists.org/fulldisclosure/2023/Jul/43',
-                'http://www.openwall.com/lists/oss-security/2023/07/31/1',
-                'http://www.openwall.com/lists/oss-security/2023/09/22/11',
-                'http://www.openwall.com/lists/oss-security/2023/09/22/9',
-                'http://www.openwall.com/lists/oss-security/2023/11/06/2',
-                'https://access.redhat.com/errata/RHSA-2024:2447',
-                'https://access.redhat.com/security/cve/CVE-2023-3817',
-                'https://bugzilla.redhat.com/2223016',
-                'https://bugzilla.redhat.com/2224962',
-                'https://bugzilla.redhat.com/2227852',
-                'https://bugzilla.redhat.com/2248616',
-                'https://bugzilla.redhat.com/2257571',
-                'https://bugzilla.redhat.com/2258502',
-                'https://bugzilla.redhat.com/2259944',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2224962',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2227852',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2248616',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2270358',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3446',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3817',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-5678',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-2408',
-                'https://errata.almalinux.org/9/ALSA-2024-2447.html',
-                'https://errata.rockylinux.org/RLSA-2023:7877',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=6a1eb62c29db6cb5eec707f9338aee00f44e26f5',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=869ad69aadd985c7b8ca6f4e5dd0eb274c9f3644',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=9002fd07327a91f35ba6c1307e71fa6fd4409b7f',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=91ddeba0f2269b017dc06c46c993a788974b1aa5',
-                'https://linux.oracle.com/cve/CVE-2023-3817.html',
-                'https://linux.oracle.com/errata/ELSA-2024-2447.html',
-                'https://lists.debian.org/debian-lts-announce/2023/08/msg00019.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-3817',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://security.netapp.com/advisory/ntap-20230818-0014/',
-                'https://security.netapp.com/advisory/ntap-20231027-0008/',
-                'https://security.netapp.com/advisory/ntap-20240621-0006/',
-                'https://ubuntu.com/security/notices/USN-6435-1',
-                'https://ubuntu.com/security/notices/USN-6435-2',
-                'https://ubuntu.com/security/notices/USN-6450-1',
-                'https://ubuntu.com/security/notices/USN-6709-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-3817',
-                'https://www.openssl.org/news/secadv/20230731.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'OpenSSL: Excessive time spent checking DH q parameter value'
-            },
-            {
-              'cve':  'CVE-2023-5678',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L'
-                },
-                'redhat': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L'
-                }
-              },
-              'cwes': [
-                'CWE-606',
-                'CWE-754'
-              ],
-              'description':   "Issue summary: Generating excessively long X9.42 DH keys or checking\nexcessively long X9.42 DH keys or parameters may be very slow.\n\nImpact summary: Applications that use the functions DH_generate_key() to\ngenerate an X9.42 DH key may experience long delays.  Likewise, applications\nthat use DH_check_pub_key(), DH_check_pub_key_ex() or EVP_PKEY_public_check()\nto check an X9.42 DH key or X9.42 DH parameters may experience long delays.\nWhere the key or parameters that are being checked have been obtained from\nan untrusted source this may lead to a Denial of Service.\n\nWhile DH_check() performs all the necessary checks (as of CVE-2023-3817),\nDH_check_pub_key() doesn't make any of these checks, and is therefore\nvulnerable for excessively large P and Q parameters.\n\nLikewise, while DH_generate_key() performs a check for an excessively large\nP, it doesn't check for an excessively large Q.\n\nAn application that calls DH_generate_key() or DH_check_pub_key() and\nsupplies a key or parameters obtained from an untrusted source could be\nvulnerable to a Denial of Service attack.\n\nDH_generate_key() and DH_check_pub_key() are also called by a number of\nother OpenSSL functions.  An application calling any of those other\nfunctions may similarly be affected.  The other functions affected by this\nare DH_check_pub_key_ex(), EVP_PKEY_public_check(), and EVP_PKEY_generate().\n\nAlso vulnerable are the OpenSSL pkey command line application when using the\n\"-pubcheck\" option, as well as the OpenSSL genpkey command line application.\n\nThe OpenSSL SSL/TLS implementation is not affected by this issue.\n\nThe OpenSSL 3.0 and 3.1 FIPS providers are not affected by this issue.",
-              'diffID':        'sha256:d36ae5a9766e0f6eeea876bbd3f661a610470acf0f6c639ad675091c3db8748c',
-              'fixedVersions': [
-                '1.1.1w-r1'
-              ],
-              'installedVersion': '1.1.1q-r0',
-              'packageName':      'libssl1.1',
-              'purl':             'pkg:apk/alpine/libssl1.1@1.1.1q-r0?arch=x86_64&distro=3.16.0',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2024/03/11/1',
-                'https://access.redhat.com/errata/RHSA-2024:2447',
-                'https://access.redhat.com/security/cve/CVE-2023-5678',
-                'https://bugzilla.redhat.com/2223016',
-                'https://bugzilla.redhat.com/2224962',
-                'https://bugzilla.redhat.com/2227852',
-                'https://bugzilla.redhat.com/2248616',
-                'https://bugzilla.redhat.com/2257571',
-                'https://bugzilla.redhat.com/2258502',
-                'https://bugzilla.redhat.com/2259944',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2224962',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2227852',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2248616',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2270358',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3446',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3817',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-5678',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-2408',
-                'https://errata.almalinux.org/9/ALSA-2024-2447.html',
-                'https://errata.rockylinux.org/RLSA-2023:7877',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=34efaef6c103d636ab507a0cc34dca4d3aecc055',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=710fee740904b6290fef0dd5536fbcedbc38ff0c',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=db925ae2e65d0d925adef429afc37f75bd1c2017',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=ddeb4b6c6d527e54ce9a99cba785c0f7776e54b6',
-                'https://linux.oracle.com/cve/CVE-2023-5678.html',
-                'https://linux.oracle.com/errata/ELSA-2024-2447.html',
-                'https://lists.debian.org/debian-lts-announce/2024/10/msg00033.html',
-                'https://lists.debian.org/debian-lts-announce/2024/11/msg00000.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-5678',
-                'https://security.netapp.com/advisory/ntap-20231130-0010/',
-                'https://ubuntu.com/security/notices/USN-6622-1',
-                'https://ubuntu.com/security/notices/USN-6632-1',
-                'https://ubuntu.com/security/notices/USN-6709-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-5678',
-                'https://www.openssl.org/news/secadv/20231106.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: Generating excessively long X9.42 DH keys or checking excessively long X9.42 DH keys or parameters may be very slow'
-            },
-            {
-              'cve':  'CVE-2025-26519',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-787'
-              ],
-              'description':   'musl libc 0.9.13 through 1.2.5 before 1.2.6 has an out-of-bounds write vulnerability when an attacker can trigger iconv conversion of untrusted EUC-KR text to UTF-8.',
-              'diffID':        'sha256:24302eb7d9085da80f016e7e4ae55417e412fb7e0a8021e95e3b60c67cde557d',
-              'fixedVersions': [
-                '1.2.3-r4'
-              ],
-              'installedVersion': '1.2.3-r0',
-              'packageName':      'musl',
-              'purl':             'pkg:apk/alpine/musl@1.2.3-r0?arch=x86_64&distro=3.16.0',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2025/02/13/2',
-                'http://www.openwall.com/lists/oss-security/2025/02/13/3',
-                'http://www.openwall.com/lists/oss-security/2025/02/13/4',
-                'http://www.openwall.com/lists/oss-security/2025/02/13/5',
-                'http://www.openwall.com/lists/oss-security/2025/02/14/5',
-                'http://www.openwall.com/lists/oss-security/2025/02/14/6',
-                'https://git.musl-libc.org/cgit/musl/commit/?id=c47ad25ea3b484e10326f933e927c0bc8cded3da',
-                'https://git.musl-libc.org/cgit/musl/commit/?id=e5adcd97b5196e29991b524237381a0202a60659',
-                'https://www.openwall.com/lists/oss-security/2025/02/13/2'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'musl libc 0.9.13 through 1.2.5 before 1.2.6 has an out-of-bounds write ...'
-            },
-            {
-              'cve':  'CVE-2025-26519',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-787'
-              ],
-              'description':   'musl libc 0.9.13 through 1.2.5 before 1.2.6 has an out-of-bounds write vulnerability when an attacker can trigger iconv conversion of untrusted EUC-KR text to UTF-8.',
-              'diffID':        'sha256:24302eb7d9085da80f016e7e4ae55417e412fb7e0a8021e95e3b60c67cde557d',
-              'fixedVersions': [
-                '1.2.3-r4'
-              ],
-              'installedVersion': '1.2.3-r0',
-              'packageName':      'musl-utils',
-              'purl':             'pkg:apk/alpine/musl-utils@1.2.3-r0?arch=x86_64&distro=3.16.0',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2025/02/13/2',
-                'http://www.openwall.com/lists/oss-security/2025/02/13/3',
-                'http://www.openwall.com/lists/oss-security/2025/02/13/4',
-                'http://www.openwall.com/lists/oss-security/2025/02/13/5',
-                'http://www.openwall.com/lists/oss-security/2025/02/14/5',
-                'http://www.openwall.com/lists/oss-security/2025/02/14/6',
-                'https://git.musl-libc.org/cgit/musl/commit/?id=c47ad25ea3b484e10326f933e927c0bc8cded3da',
-                'https://git.musl-libc.org/cgit/musl/commit/?id=e5adcd97b5196e29991b524237381a0202a60659',
-                'https://www.openwall.com/lists/oss-security/2025/02/13/2'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'musl libc 0.9.13 through 1.2.5 before 1.2.6 has an out-of-bounds write ...'
-            },
-            {
-              'cve':  'CVE-2023-42366',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.5',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.1',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-787'
-              ],
-              'description':   'A heap-buffer-overflow was discovered in BusyBox v.1.36.1 in the next_token function at awk.c:1159.',
-              'diffID':        'sha256:d36ae5a9766e0f6eeea876bbd3f661a610470acf0f6c639ad675091c3db8748c',
-              'fixedVersions': [
-                '1.35.0-r18'
-              ],
-              'installedVersion': '1.35.0-r15',
-              'packageName':      'ssl_client',
-              'purl':             'pkg:apk/alpine/ssl_client@1.35.0-r15?arch=x86_64&distro=3.16.0',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2023-42366',
-                'https://bugs.busybox.net/show_bug.cgi?id=15874',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-42366',
-                'https://security.netapp.com/advisory/ntap-20241206-0007/',
-                'https://www.cve.org/CVERecord?id=CVE-2023-42366'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'busybox: A heap-buffer-overflow'
-            },
-            {
-              'cve':  'CVE-2022-37434',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '9.8',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-787',
-                'CWE-120'
-              ],
-              'description':   'zlib through 1.2.12 has a heap-based buffer over-read or buffer overflow in inflate in inflate.c via a large gzip header extra field. NOTE: only applications that call inflateGetHeader are affected. Some common applications bundle the affected zlib source code but may be unable to call inflateGetHeader (e.g., see the nodejs/node reference).',
-              'diffID':        'sha256:24302eb7d9085da80f016e7e4ae55417e412fb7e0a8021e95e3b60c67cde557d',
-              'fixedVersions': [
-                '1.2.12-r2'
-              ],
-              'installedVersion': '1.2.12-r1',
-              'packageName':      'zlib',
-              'purl':             'pkg:apk/alpine/zlib@1.2.12-r1?arch=x86_64&distro=3.16.0',
-              'references':       [
-                'http://seclists.org/fulldisclosure/2022/Oct/37',
-                'http://seclists.org/fulldisclosure/2022/Oct/38',
-                'http://seclists.org/fulldisclosure/2022/Oct/41',
-                'http://seclists.org/fulldisclosure/2022/Oct/42',
-                'http://www.openwall.com/lists/oss-security/2022/08/05/2',
-                'http://www.openwall.com/lists/oss-security/2022/08/09/1',
-                'https://access.redhat.com/errata/RHSA-2022:8291',
-                'https://access.redhat.com/security/cve/CVE-2022-37434',
-                'https://bugzilla.redhat.com/2116639',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2053198',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2077431',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2081296',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2116639',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-37434',
-                'https://errata.almalinux.org/9/ALSA-2022-8291.html',
-                'https://errata.rockylinux.org/RLSA-2022:8291',
-                'https://github.com/curl/curl/issues/9271',
-                'https://github.com/ivd38/zlib_overflow',
-                'https://github.com/madler/zlib/blob/21767c654d31d2dccdde4330529775c6c5fd5389/zlib.h#L1062-L1063',
-                'https://github.com/madler/zlib/commit/1eb7682f845ac9e9bf9ae35bbfb3bad5dacbd91d',
-                'https://github.com/madler/zlib/commit/eff308af425b67093bab25f80f1ae950166bece1',
-                'https://github.com/nodejs/node/blob/75b68c6e4db515f76df73af476eccf382bbcb00a/deps/zlib/inflate.c#L762-L764',
-                'https://linux.oracle.com/cve/CVE-2022-37434.html',
-                'https://linux.oracle.com/errata/ELSA-2023-1095.html',
-                'https://lists.debian.org/debian-lts-announce/2022/09/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JWN4VE3JQR4O2SOUS5TXNLANRPMHWV4I/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NMBOJ77A7T7PQCARMDUK75TE6LLESZ3O/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PAVPQNCG3XRLCLNSQRM3KAN5ZFMVXVTY/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/X5U7OTKZSHY2I3ZFJSR2SHFHW72RKGDK/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YRQAI7H4M4RQZ2IWZUEEXECBE5D56BH2/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2022-37434',
-                'https://security.netapp.com/advisory/ntap-20220901-0005/',
-                'https://security.netapp.com/advisory/ntap-20230427-0007/',
-                'https://support.apple.com/kb/HT213488',
-                'https://support.apple.com/kb/HT213489',
-                'https://support.apple.com/kb/HT213490',
-                'https://support.apple.com/kb/HT213491',
-                'https://support.apple.com/kb/HT213493',
-                'https://support.apple.com/kb/HT213494',
-                'https://ubuntu.com/security/notices/USN-5570-1',
-                'https://ubuntu.com/security/notices/USN-5570-2',
-                'https://ubuntu.com/security/notices/USN-5573-1',
-                'https://ubuntu.com/security/notices/USN-6736-1',
-                'https://ubuntu.com/security/notices/USN-6736-2',
-                'https://www.cve.org/CVERecord?id=CVE-2022-37434',
-                'https://www.debian.org/security/2022/dsa-5218'
-              ],
-              'severity':   'CRITICAL',
-              'suppressed': false,
-              'title':      'zlib: heap-based buffer over-read and overflow in inflate() in inflate.c via a large gzip header extra field'
-            }
-          ]
-        }
-      ],
-      'summary': {
-        'critical':   1,
-        'high':       10,
-        'low':        0,
-        'medium':     14,
-        'suppressed': 0,
-        'unknown':    0
-      }
-    }
-  },
-  {
-    'id':    'default/1322c3fb541e6b4a41f216decd057d43d980effd98568ed9cc232f09290db318',
-    'type':  'storage.sbomscanner.kubewarden.io.vulnerabilityreport',
-    'links': {
-      'patch':  'https://localhost:8005/v1/storage.sbomscanner.kubewarden.io.vulnerabilityreports/default/1322c3fb541e6b4a41f216decd057d43d980effd98568ed9cc232f09290db318',
-      'remove': 'https://localhost:8005/v1/storage.sbomscanner.kubewarden.io.vulnerabilityreports/default/1322c3fb541e6b4a41f216decd057d43d980effd98568ed9cc232f09290db318',
-      'self':   'https://localhost:8005/v1/storage.sbomscanner.kubewarden.io.vulnerabilityreports/default/1322c3fb541e6b4a41f216decd057d43d980effd98568ed9cc232f09290db318',
-      'update': 'https://localhost:8005/v1/storage.sbomscanner.kubewarden.io.vulnerabilityreports/default/1322c3fb541e6b4a41f216decd057d43d980effd98568ed9cc232f09290db318',
-      'view':   'https://localhost:8005/apis/storage.sbomscanner.kubewarden.io/v1alpha1/namespaces/default/vulnerabilityreports/1322c3fb541e6b4a41f216decd057d43d980effd98568ed9cc232f09290db318'
-    },
-    'apiVersion':    'storage.sbomscanner.kubewarden.io/v1alpha1',
-    'imageMetadata': {
-      'digest':      'sha256:176bc6c6e93528f4b729fae1f8dbd70b73861264dba3a3f64c49c92e1f42a5aa',
-      'platform':    'linux/s390x',
-      'registry':    'lsong-demo1',
-      'registryURI': 'registry-1.docker.io',
-      'repository':  'library/alpine',
-      'tag':         '3.17.1'
-    },
-    'kind':     'VulnerabilityReport',
-    'metadata': {
-      'creationTimestamp': '2026-01-14T18:51:37Z',
-      'fields':            [
-        '1322c3fb541e6b4a41f216decd057d43d980effd98568ed9cc232f09290db318',
-        'registry-1.docker.io/library/alpine:3.17.1',
-        'linux/s390x',
-        '68 (0 suppressed)'
-      ],
-      'labels': {
-        'app.kubernetes.io/managed-by':          'sbomscanner',
-        'app.kubernetes.io/part-of':             'sbomscanner',
-        'sbomscanner.kubewarden.io/scanjob-uid': '445c600a-c4b6-40b3-bd71-f2d2140a37d5'
-      },
-      'name':            '1322c3fb541e6b4a41f216decd057d43d980effd98568ed9cc232f09290db318',
-      'namespace':       'default',
-      'ownerReferences': [
-        {
-          'apiVersion':         'storage.sbomscanner.kubewarden.io/v1alpha1',
-          'blockOwnerDeletion': true,
-          'controller':         true,
-          'kind':               'SBOM',
-          'name':               '1322c3fb541e6b4a41f216decd057d43d980effd98568ed9cc232f09290db318',
-          'uid':                'f5e42017-405e-4780-b727-ac297ea91942'
-        }
-      ],
-      'relationships': [
-        {
-          'fromId':   'default/1322c3fb541e6b4a41f216decd057d43d980effd98568ed9cc232f09290db318',
-          'fromType': 'storage.sbomscanner.kubewarden.io.sbom',
-          'rel':      'owner',
-          'state':    'active',
-          'message':  'Resource is current'
-        }
-      ],
-      'resourceVersion': '1',
-      'state':           {
-        'error':         false,
-        'message':       'Resource is current',
-        'name':          'active',
-        'transitioning': false
-      },
-      'uid': '233d1978-20c5-4e63-9e0b-0acf3d169867'
-    },
-    'report': {
-      'results': [
-        {
-          'class':           'os-pkgs',
-          'target':          '/var/run/worker/trivy.sbom.4050888916.json (alpine 3.17.1)',
-          'type':            'alpine',
-          'vulnerabilities': [
-            {
-              'cve':  'CVE-2023-42363',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.5',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.8',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   'A use-after-free vulnerability was discovered in xasprintf function in xfuncs_printf.c:344 in BusyBox v.1.36.1.',
-              'diffID':        'sha256:b5902734b682781f128d816229ad15ec369201ddec7177fc18f3a8dcfeb00697',
-              'fixedVersions': [
-                '1.35.0-r31'
-              ],
-              'installedVersion': '1.35.0-r29',
-              'packageName':      'busybox',
-              'purl':             'pkg:apk/alpine/busybox@1.35.0-r29?arch=s390x&distro=3.17.1',
-              'references':       [
-                'http://lists.busybox.net/pipermail/busybox/2024-May/090760.html',
-                'https://access.redhat.com/security/cve/CVE-2023-42363',
-                'https://bugs.busybox.net/show_bug.cgi?id=15865',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-42363',
-                'https://ubuntu.com/security/notices/USN-6961-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-42363'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk'
-            },
-            {
-              'cve':  'CVE-2023-42364',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.5',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.8',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   'A use-after-free vulnerability in BusyBox v.1.36.1 allows attackers to cause a denial of service via a crafted awk pattern in the awk.c evaluate function.',
-              'diffID':        'sha256:b5902734b682781f128d816229ad15ec369201ddec7177fc18f3a8dcfeb00697',
-              'fixedVersions': [
-                '1.35.0-r31'
-              ],
-              'installedVersion': '1.35.0-r29',
-              'packageName':      'busybox',
-              'purl':             'pkg:apk/alpine/busybox@1.35.0-r29?arch=s390x&distro=3.17.1',
-              'references':       [
-                'http://lists.busybox.net/pipermail/busybox/2024-May/090762.html',
-                'https://access.redhat.com/security/cve/CVE-2023-42364',
-                'https://bugs.busybox.net/show_bug.cgi?id=15868',
-                'https://gitlab.alpinelinux.org/alpine/aports/-/blob/master/main/busybox/CVE-2023-42364-CVE-2023-42365.patch',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-42364',
-                'https://ubuntu.com/security/notices/USN-6961-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-42364'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'busybox: use-after-free'
-            },
-            {
-              'cve':  'CVE-2023-42365',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.5',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.8',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   'A use-after-free vulnerability was discovered in BusyBox v.1.36.1 via a crafted awk pattern in the awk.c copyvar function.',
-              'diffID':        'sha256:b5902734b682781f128d816229ad15ec369201ddec7177fc18f3a8dcfeb00697',
-              'fixedVersions': [
-                '1.35.0-r31'
-              ],
-              'installedVersion': '1.35.0-r29',
-              'packageName':      'busybox',
-              'purl':             'pkg:apk/alpine/busybox@1.35.0-r29?arch=s390x&distro=3.17.1',
-              'references':       [
-                'http://lists.busybox.net/pipermail/busybox/2024-May/090762.html',
-                'https://access.redhat.com/security/cve/CVE-2023-42365',
-                'https://bugs.busybox.net/show_bug.cgi?id=15871',
-                'https://gitlab.alpinelinux.org/alpine/aports/-/blob/master/main/busybox/CVE-2023-42364-CVE-2023-42365.patch',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-42365',
-                'https://ubuntu.com/security/notices/USN-6961-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-42365'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'busybox: use-after-free'
-            },
-            {
-              'cve':  'CVE-2023-42366',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.5',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.1',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-787'
-              ],
-              'description':   'A heap-buffer-overflow was discovered in BusyBox v.1.36.1 in the next_token function at awk.c:1159.',
-              'diffID':        'sha256:b5902734b682781f128d816229ad15ec369201ddec7177fc18f3a8dcfeb00697',
-              'fixedVersions': [
-                '1.35.0-r30'
-              ],
-              'installedVersion': '1.35.0-r29',
-              'packageName':      'busybox',
-              'purl':             'pkg:apk/alpine/busybox@1.35.0-r29?arch=s390x&distro=3.17.1',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2023-42366',
-                'https://bugs.busybox.net/show_bug.cgi?id=15874',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-42366',
-                'https://security.netapp.com/advisory/ntap-20241206-0007/',
-                'https://www.cve.org/CVERecord?id=CVE-2023-42366'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'busybox: A heap-buffer-overflow'
-            },
-            {
-              'cve':  'CVE-2023-42363',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.5',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.8',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   'A use-after-free vulnerability was discovered in xasprintf function in xfuncs_printf.c:344 in BusyBox v.1.36.1.',
-              'diffID':        'sha256:b5902734b682781f128d816229ad15ec369201ddec7177fc18f3a8dcfeb00697',
-              'fixedVersions': [
-                '1.35.0-r31'
-              ],
-              'installedVersion': '1.35.0-r29',
-              'packageName':      'busybox-binsh',
-              'purl':             'pkg:apk/alpine/busybox-binsh@1.35.0-r29?arch=s390x&distro=3.17.1',
-              'references':       [
-                'http://lists.busybox.net/pipermail/busybox/2024-May/090760.html',
-                'https://access.redhat.com/security/cve/CVE-2023-42363',
-                'https://bugs.busybox.net/show_bug.cgi?id=15865',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-42363',
-                'https://ubuntu.com/security/notices/USN-6961-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-42363'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk'
-            },
-            {
-              'cve':  'CVE-2023-42364',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.5',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.8',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   'A use-after-free vulnerability in BusyBox v.1.36.1 allows attackers to cause a denial of service via a crafted awk pattern in the awk.c evaluate function.',
-              'diffID':        'sha256:b5902734b682781f128d816229ad15ec369201ddec7177fc18f3a8dcfeb00697',
-              'fixedVersions': [
-                '1.35.0-r31'
-              ],
-              'installedVersion': '1.35.0-r29',
-              'packageName':      'busybox-binsh',
-              'purl':             'pkg:apk/alpine/busybox-binsh@1.35.0-r29?arch=s390x&distro=3.17.1',
-              'references':       [
-                'http://lists.busybox.net/pipermail/busybox/2024-May/090762.html',
-                'https://access.redhat.com/security/cve/CVE-2023-42364',
-                'https://bugs.busybox.net/show_bug.cgi?id=15868',
-                'https://gitlab.alpinelinux.org/alpine/aports/-/blob/master/main/busybox/CVE-2023-42364-CVE-2023-42365.patch',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-42364',
-                'https://ubuntu.com/security/notices/USN-6961-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-42364'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'busybox: use-after-free'
-            },
-            {
-              'cve':  'CVE-2023-42365',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.5',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.8',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   'A use-after-free vulnerability was discovered in BusyBox v.1.36.1 via a crafted awk pattern in the awk.c copyvar function.',
-              'diffID':        'sha256:b5902734b682781f128d816229ad15ec369201ddec7177fc18f3a8dcfeb00697',
-              'fixedVersions': [
-                '1.35.0-r31'
-              ],
-              'installedVersion': '1.35.0-r29',
-              'packageName':      'busybox-binsh',
-              'purl':             'pkg:apk/alpine/busybox-binsh@1.35.0-r29?arch=s390x&distro=3.17.1',
-              'references':       [
-                'http://lists.busybox.net/pipermail/busybox/2024-May/090762.html',
-                'https://access.redhat.com/security/cve/CVE-2023-42365',
-                'https://bugs.busybox.net/show_bug.cgi?id=15871',
-                'https://gitlab.alpinelinux.org/alpine/aports/-/blob/master/main/busybox/CVE-2023-42364-CVE-2023-42365.patch',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-42365',
-                'https://ubuntu.com/security/notices/USN-6961-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-42365'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'busybox: use-after-free'
-            },
-            {
-              'cve':  'CVE-2023-42366',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.5',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.1',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-787'
-              ],
-              'description':   'A heap-buffer-overflow was discovered in BusyBox v.1.36.1 in the next_token function at awk.c:1159.',
-              'diffID':        'sha256:b5902734b682781f128d816229ad15ec369201ddec7177fc18f3a8dcfeb00697',
-              'fixedVersions': [
-                '1.35.0-r30'
-              ],
-              'installedVersion': '1.35.0-r29',
-              'packageName':      'busybox-binsh',
-              'purl':             'pkg:apk/alpine/busybox-binsh@1.35.0-r29?arch=s390x&distro=3.17.1',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2023-42366',
-                'https://bugs.busybox.net/show_bug.cgi?id=15874',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-42366',
-                'https://security.netapp.com/advisory/ntap-20241206-0007/',
-                'https://www.cve.org/CVERecord?id=CVE-2023-42366'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'busybox: A heap-buffer-overflow'
-            },
-            {
-              'cve':  'CVE-2022-4450',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'nvd': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-415'
-              ],
-              'description':   'The function PEM_read_bio_ex() reads a PEM file from a BIO and parses and\ndecodes the "name" (e.g. "CERTIFICATE"), any header data and the payload data.\nIf the function succeeds then the "name_out", "header" and "data" arguments are\npopulated with pointers to buffers containing the relevant decoded data. The\ncaller is responsible for freeing those buffers. It is possible to construct a\nPEM file that results in 0 bytes of payload data. In this case PEM_read_bio_ex()\nwill return a failure code but will populate the header argument with a pointer\nto a buffer that has already been freed. If the caller also frees this buffer\nthen a double free will occur. This will most likely lead to a crash. This\ncould be exploited by an attacker who has the ability to supply malicious PEM\nfiles for parsing to achieve a denial of service attack.\n\nThe functions PEM_read_bio() and PEM_read() are simple wrappers around\nPEM_read_bio_ex() and therefore these functions are also directly affected.\n\nThese functions are also called indirectly by a number of other OpenSSL\nfunctions including PEM_X509_INFO_read_bio_ex() and\nSSL_CTX_use_serverinfo_file() which are also vulnerable. Some OpenSSL internal\nuses of these functions are not vulnerable because the caller does not free the\nheader argument if PEM_read_bio_ex() returns a failure code. These locations\ninclude the PEM_read_bio_TYPE() functions as well as the decoders introduced in\nOpenSSL 3.0.\n\nThe OpenSSL asn1parse command line application is also impacted by this issue.',
-              'diffID':        'sha256:b5902734b682781f128d816229ad15ec369201ddec7177fc18f3a8dcfeb00697',
-              'fixedVersions': [
-                '3.0.8-r0'
-              ],
-              'installedVersion': '3.0.7-r2',
-              'packageName':      'libcrypto3',
-              'purl':             'pkg:apk/alpine/libcrypto3@3.0.7-r2?arch=s390x&distro=3.17.1',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2023:2165',
-                'https://access.redhat.com/security/cve/CVE-2022-4450',
-                'https://bugzilla.redhat.com/1960321',
-                'https://bugzilla.redhat.com/2164440',
-                'https://bugzilla.redhat.com/2164487',
-                'https://bugzilla.redhat.com/2164492',
-                'https://bugzilla.redhat.com/2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144000',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144003',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144006',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144008',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144010',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144012',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144015',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144017',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144019',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2145170',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2158412',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164440',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164487',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164488',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164492',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164497',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164499',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164500',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4203',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4304',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4450',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0215',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0216',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0217',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0286',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0401',
-                'https://errata.almalinux.org/9/ALSA-2023-2165.html',
-                'https://errata.rockylinux.org/RLSA-2023:0946',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=63bcf189be73a9cc1264059bed6f57974be74a83',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=bbcf509bd046b34cca19c766bbddc31683d0858b',
-                'https://linux.oracle.com/cve/CVE-2022-4450.html',
-                'https://linux.oracle.com/errata/ELSA-2023-32791.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2022-4450',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0003',
-                'https://rustsec.org/advisories/RUSTSEC-2023-0010.html',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://ubuntu.com/security/notices/USN-5844-1',
-                'https://ubuntu.com/security/notices/USN-6564-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2022-4450',
-                'https://www.openssl.org/news/secadv/20230207.txt'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: double free after calling PEM_read_bio_ex'
-            },
-            {
-              'cve':  'CVE-2023-0215',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'nvd': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   'The public API function BIO_new_NDEF is a helper function used for streaming\nASN.1 data via a BIO. It is primarily used internally to OpenSSL to support the\nSMIME, CMS and PKCS7 streaming capabilities, but may also be called directly by\nend user applications.\n\nThe function receives a BIO from the caller, prepends a new BIO_f_asn1 filter\nBIO onto the front of it to form a BIO chain, and then returns the new head of\nthe BIO chain to the caller. Under certain conditions, for example if a CMS\nrecipient public key is invalid, the new filter BIO is freed and the function\nreturns a NULL result indicating a failure. However, in this case, the BIO chain\nis not properly cleaned up and the BIO passed by the caller still retains\ninternal pointers to the previously freed filter BIO. If the caller then goes on\nto call BIO_pop() on the BIO then a use-after-free will occur. This will most\nlikely result in a crash.\n\n\n\nThis scenario occurs directly in the internal function B64_write_ASN1() which\nmay cause BIO_new_NDEF() to be called and will subsequently call BIO_pop() on\nthe BIO. This internal function is in turn called by the public API functions\nPEM_write_bio_ASN1_stream, PEM_write_bio_CMS_stream, PEM_write_bio_PKCS7_stream,\nSMIME_write_ASN1, SMIME_write_CMS and SMIME_write_PKCS7.\n\nOther public API functions that may be impacted by this include\ni2d_ASN1_bio_stream, BIO_new_CMS, BIO_new_PKCS7, i2d_CMS_bio_stream and\ni2d_PKCS7_bio_stream.\n\nThe OpenSSL cms and smime command line applications are similarly affected.',
-              'diffID':        'sha256:b5902734b682781f128d816229ad15ec369201ddec7177fc18f3a8dcfeb00697',
-              'fixedVersions': [
-                '3.0.8-r0'
-              ],
-              'installedVersion': '3.0.7-r2',
-              'packageName':      'libcrypto3',
-              'purl':             'pkg:apk/alpine/libcrypto3@3.0.7-r2?arch=s390x&distro=3.17.1',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2023:2165',
-                'https://access.redhat.com/security/cve/CVE-2023-0215',
-                'https://bugzilla.redhat.com/1960321',
-                'https://bugzilla.redhat.com/2164440',
-                'https://bugzilla.redhat.com/2164487',
-                'https://bugzilla.redhat.com/2164492',
-                'https://bugzilla.redhat.com/2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144000',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144003',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144006',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144008',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144010',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144012',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144015',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144017',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144019',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2145170',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2158412',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164440',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164487',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164488',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164492',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164497',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164499',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164500',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4203',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4304',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4450',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0215',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0216',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0217',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0286',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0401',
-                'https://errata.almalinux.org/9/ALSA-2023-2165.html',
-                'https://errata.rockylinux.org/RLSA-2023:0946',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=8818064ce3c3c0f1b740a5aaba2a987e75bfbafd',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=9816136fe31d92ace4037d5da5257f763aeeb4eb',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=c3829dd8825c654652201e16f8a0a0c46ee3f344',
-                'https://linux.oracle.com/cve/CVE-2023-0215.html',
-                'https://linux.oracle.com/errata/ELSA-2023-32791.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-0215',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0003',
-                'https://rustsec.org/advisories/RUSTSEC-2023-0009.html',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://security.netapp.com/advisory/ntap-20230427-0007',
-                'https://security.netapp.com/advisory/ntap-20230427-0007/',
-                'https://security.netapp.com/advisory/ntap-20230427-0009',
-                'https://security.netapp.com/advisory/ntap-20230427-0009/',
-                'https://security.netapp.com/advisory/ntap-20240621-0006',
-                'https://security.netapp.com/advisory/ntap-20240621-0006/',
-                'https://ubuntu.com/security/notices/USN-5844-1',
-                'https://ubuntu.com/security/notices/USN-5845-1',
-                'https://ubuntu.com/security/notices/USN-5845-2',
-                'https://ubuntu.com/security/notices/USN-6564-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-0215',
-                'https://www.openssl.org/news/secadv/20230207.txt'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: use-after-free following BIO_new_NDEF'
-            },
-            {
-              'cve':  'CVE-2023-0216',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'nvd': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-476'
-              ],
-              'description':   'An invalid pointer dereference on read can be triggered when an\napplication tries to load malformed PKCS7 data with the\nd2i_PKCS7(), d2i_PKCS7_bio() or d2i_PKCS7_fp() functions.\n\nThe result of the dereference is an application crash which could\nlead to a denial of service attack. The TLS implementation in OpenSSL\ndoes not call this function however third party applications might\ncall these functions on untrusted data.',
-              'diffID':        'sha256:b5902734b682781f128d816229ad15ec369201ddec7177fc18f3a8dcfeb00697',
-              'fixedVersions': [
-                '3.0.8-r0'
-              ],
-              'installedVersion': '3.0.7-r2',
-              'packageName':      'libcrypto3',
-              'purl':             'pkg:apk/alpine/libcrypto3@3.0.7-r2?arch=s390x&distro=3.17.1',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2023:0946',
-                'https://access.redhat.com/security/cve/CVE-2023-0216',
-                'https://bugzilla.redhat.com/2164440',
-                'https://bugzilla.redhat.com/2164487',
-                'https://bugzilla.redhat.com/2164488',
-                'https://bugzilla.redhat.com/2164492',
-                'https://bugzilla.redhat.com/2164494',
-                'https://bugzilla.redhat.com/2164497',
-                'https://bugzilla.redhat.com/2164499',
-                'https://bugzilla.redhat.com/2164500',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144000',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144003',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144006',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144008',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144010',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144012',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144015',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144017',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144019',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2145170',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2158412',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164440',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164487',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164488',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164492',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164497',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164499',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164500',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4203',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4304',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4450',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0215',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0216',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0217',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0286',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0401',
-                'https://errata.almalinux.org/9/ALSA-2023-0946.html',
-                'https://errata.rockylinux.org/RLSA-2023:0946',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=934a04f0e775309cadbef0aa6b9692e1b12a76c6',
-                'https://linux.oracle.com/cve/CVE-2023-0216.html',
-                'https://linux.oracle.com/errata/ELSA-2023-12152.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-0216',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0003',
-                'https://rustsec.org/advisories/RUSTSEC-2023-0011.html',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://ubuntu.com/security/notices/USN-5844-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-0216',
-                'https://www.openssl.org/news/secadv/20230207.txt'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: invalid pointer dereference in d2i_PKCS7 functions'
-            },
-            {
-              'cve':  'CVE-2023-0217',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'nvd': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-476'
-              ],
-              'description':   'An invalid pointer dereference on read can be triggered when an\napplication tries to check a malformed DSA public key by the\nEVP_PKEY_public_check() function. This will most likely lead\nto an application crash. This function can be called on public\nkeys supplied from untrusted sources which could allow an attacker\nto cause a denial of service attack.\n\nThe TLS implementation in OpenSSL does not call this function\nbut applications might call the function if there are additional\nsecurity requirements imposed by standards such as FIPS 140-3.',
-              'diffID':        'sha256:b5902734b682781f128d816229ad15ec369201ddec7177fc18f3a8dcfeb00697',
-              'fixedVersions': [
-                '3.0.8-r0'
-              ],
-              'installedVersion': '3.0.7-r2',
-              'packageName':      'libcrypto3',
-              'purl':             'pkg:apk/alpine/libcrypto3@3.0.7-r2?arch=s390x&distro=3.17.1',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2023:0946',
-                'https://access.redhat.com/security/cve/CVE-2023-0217',
-                'https://bugzilla.redhat.com/2164440',
-                'https://bugzilla.redhat.com/2164487',
-                'https://bugzilla.redhat.com/2164488',
-                'https://bugzilla.redhat.com/2164492',
-                'https://bugzilla.redhat.com/2164494',
-                'https://bugzilla.redhat.com/2164497',
-                'https://bugzilla.redhat.com/2164499',
-                'https://bugzilla.redhat.com/2164500',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144000',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144003',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144006',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144008',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144010',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144012',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144015',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144017',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144019',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2145170',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2158412',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164440',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164487',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164488',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164492',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164497',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164499',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164500',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4203',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4304',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4450',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0215',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0216',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0217',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0286',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0401',
-                'https://errata.almalinux.org/9/ALSA-2023-0946.html',
-                'https://errata.rockylinux.org/RLSA-2023:0946',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=23985bac83fd50c8e29431009302b5442f985096',
-                'https://linux.oracle.com/cve/CVE-2023-0217.html',
-                'https://linux.oracle.com/errata/ELSA-2023-12152.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-0217',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0003',
-                'https://rustsec.org/advisories/RUSTSEC-2023-0012.html',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://ubuntu.com/security/notices/USN-5844-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-0217',
-                'https://www.openssl.org/news/secadv/20230207.txt'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: NULL dereference validating DSA public key'
-            },
-            {
-              'cve':  'CVE-2023-0286',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '7.4',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H'
-                },
-                'nvd': {
-                  'v3score':  '7.4',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.4',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-843'
-              ],
-              'description':   'There is a type confusion vulnerability relating to X.400 address processing\ninside an X.509 GeneralName. X.400 addresses were parsed as an ASN1_STRING but\nthe public structure definition for GENERAL_NAME incorrectly specified the type\nof the x400Address field as ASN1_TYPE. This field is subsequently interpreted by\nthe OpenSSL function GENERAL_NAME_cmp as an ASN1_TYPE rather than an\nASN1_STRING.\n\nWhen CRL checking is enabled (i.e. the application sets the\nX509_V_FLAG_CRL_CHECK flag), this vulnerability may allow an attacker to pass\narbitrary pointers to a memcmp call, enabling them to read memory contents or\nenact a denial of service. In most cases, the attack requires the attacker to\nprovide both the certificate chain and CRL, neither of which need to have a\nvalid signature. If the attacker only controls one of these inputs, the other\ninput must already contain an X.400 address as a CRL distribution point, which\nis uncommon. As such, this vulnerability is most likely to only affect\napplications which have implemented their own functionality for retrieving CRLs\nover a network.',
-              'diffID':        'sha256:b5902734b682781f128d816229ad15ec369201ddec7177fc18f3a8dcfeb00697',
-              'fixedVersions': [
-                '3.0.8-r0'
-              ],
-              'installedVersion': '3.0.7-r2',
-              'packageName':      'libcrypto3',
-              'purl':             'pkg:apk/alpine/libcrypto3@3.0.7-r2?arch=s390x&distro=3.17.1',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2025:7937',
-                'https://access.redhat.com/security/cve/CVE-2023-0286',
-                'https://access.redhat.com/security/cve/cve-2023-0286',
-                'https://bugzilla.redhat.com/2164440',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144000',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144003',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144006',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144008',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144010',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144012',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144015',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144017',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144019',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2145170',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2158412',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164440',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164487',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164488',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164492',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164497',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164499',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164500',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4203',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4304',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4450',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0215',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0216',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0217',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0286',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0401',
-                'https://errata.almalinux.org/9/ALSA-2025-7937.html',
-                'https://errata.rockylinux.org/RLSA-2023:0946',
-                'https://ftp.openbsd.org/pub/OpenBSD/LibreSSL/libressl-3.6.2-relnotes.txt',
-                'https://ftp.openbsd.org/pub/OpenBSD/patches/7.2/common/018_x509.patch.sig',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=2c6c9d439b484e1ba9830d8454a34fa4f80fdfe9',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=2f7530077e0ef79d98718138716bc51ca0cad658',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=fd2af07dc083a350c959147097003a14a5e8ac4d',
-                'https://github.com/pyca/cryptography',
-                'https://github.com/pyca/cryptography/security/advisories/GHSA-x4qr-2fvf-3mr5',
-                'https://linux.oracle.com/cve/CVE-2023-0286.html',
-                'https://linux.oracle.com/errata/ELSA-2025-7937.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-0286',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0003',
-                'https://rustsec.org/advisories/RUSTSEC-2023-0006.html',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://ubuntu.com/security/notices/USN-5844-1',
-                'https://ubuntu.com/security/notices/USN-5845-1',
-                'https://ubuntu.com/security/notices/USN-5845-2',
-                'https://ubuntu.com/security/notices/USN-6564-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-0286',
-                'https://www.openssl.org/news/secadv/20230207.txt'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: X.400 address type confusion in X.509 GeneralName'
-            },
-            {
-              'cve':  'CVE-2023-0401',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'nvd': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-476'
-              ],
-              'description':   'A NULL pointer can be dereferenced when signatures are being\nverified on PKCS7 signed or signedAndEnveloped data. In case the hash\nalgorithm used for the signature is known to the OpenSSL library but\nthe implementation of the hash algorithm is not available the digest\ninitialization will fail. There is a missing check for the return\nvalue from the initialization function which later leads to invalid\nusage of the digest API most likely leading to a crash.\n\nThe unavailability of an algorithm can be caused by using FIPS\nenabled configuration of providers or more commonly by not loading\nthe legacy provider.\n\nPKCS7 data is processed by the SMIME library calls and also by the\ntime stamp (TS) library calls. The TLS implementation in OpenSSL does\nnot call these functions however third party applications would be\naffected if they call these functions to verify signatures on untrusted\ndata.',
-              'diffID':        'sha256:b5902734b682781f128d816229ad15ec369201ddec7177fc18f3a8dcfeb00697',
-              'fixedVersions': [
-                '3.0.8-r0'
-              ],
-              'installedVersion': '3.0.7-r2',
-              'packageName':      'libcrypto3',
-              'purl':             'pkg:apk/alpine/libcrypto3@3.0.7-r2?arch=s390x&distro=3.17.1',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2023:0946',
-                'https://access.redhat.com/security/cve/CVE-2023-0401',
-                'https://bugzilla.redhat.com/2164440',
-                'https://bugzilla.redhat.com/2164487',
-                'https://bugzilla.redhat.com/2164488',
-                'https://bugzilla.redhat.com/2164492',
-                'https://bugzilla.redhat.com/2164494',
-                'https://bugzilla.redhat.com/2164497',
-                'https://bugzilla.redhat.com/2164499',
-                'https://bugzilla.redhat.com/2164500',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144000',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144003',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144006',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144008',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144010',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144012',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144015',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144017',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144019',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2145170',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2158412',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164440',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164487',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164488',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164492',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164497',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164499',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164500',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4203',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4304',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4450',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0215',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0216',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0217',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0286',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0401',
-                'https://errata.almalinux.org/9/ALSA-2023-0946.html',
-                'https://errata.rockylinux.org/RLSA-2023:0946',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=d3b6dfd70db844c4499bec6ad6601623a565e674',
-                'https://github.com/alexcrichton/openssl-src-rs',
-                'https://linux.oracle.com/cve/CVE-2023-0401.html',
-                'https://linux.oracle.com/errata/ELSA-2023-12152.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-0401',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0003',
-                'https://rustsec.org/advisories/RUSTSEC-2023-0013.html',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://ubuntu.com/security/notices/USN-5844-1',
-                'https://ubuntu.com/security/notices/USN-6564-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-0401',
-                'https://www.openssl.org/news/secadv/20230207.txt'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: NULL dereference during PKCS7 data verification'
-            },
-            {
-              'cve':  'CVE-2023-0464',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-295'
-              ],
-              'description':   "A security vulnerability has been identified in all supported versions\n\nof OpenSSL related to the verification of X.509 certificate chains\nthat include policy constraints.  Attackers may be able to exploit this\nvulnerability by creating a malicious certificate chain that triggers\nexponential use of computational resources, leading to a denial-of-service\n(DoS) attack on affected systems.\n\nPolicy processing is disabled by default but can be enabled by passing\nthe `-policy' argument to the command line utilities or by calling the\n`X509_VERIFY_PARAM_set1_policies()' function.",
-              'diffID':        'sha256:b5902734b682781f128d816229ad15ec369201ddec7177fc18f3a8dcfeb00697',
-              'fixedVersions': [
-                '3.0.8-r1'
-              ],
-              'installedVersion': '3.0.7-r2',
-              'packageName':      'libcrypto3',
-              'purl':             'pkg:apk/alpine/libcrypto3@3.0.7-r2?arch=s390x&distro=3.17.1',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2023:3722',
-                'https://access.redhat.com/security/cve/CVE-2023-0464',
-                'https://bugzilla.redhat.com/2181082',
-                'https://bugzilla.redhat.com/2182561',
-                'https://bugzilla.redhat.com/2182565',
-                'https://bugzilla.redhat.com/2188461',
-                'https://bugzilla.redhat.com/2207947',
-                'https://errata.almalinux.org/9/ALSA-2023-3722.html',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=2017771e2db3e2b96f89bbe8766c3209f6a99545',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=2dcd4f1e3115f38cefa43e3efbe9b801c27e642e',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=879f7080d7e141f415c79eaa3a8ac4a3dad0348b',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=959c59c7a0164117e7f8366466a32bb1f8d77ff1',
-                'https://linux.oracle.com/cve/CVE-2023-0464.html',
-                'https://linux.oracle.com/errata/ELSA-2023-3722.html',
-                'https://lists.debian.org/debian-lts-announce/2023/06/msg00011.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-0464',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://security.netapp.com/advisory/ntap-20230406-0006/',
-                'https://security.netapp.com/advisory/ntap-20240621-0006/',
-                'https://ubuntu.com/security/notices/USN-6039-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.couchbase.com/alerts/',
-                'https://www.cve.org/CVERecord?id=CVE-2023-0464',
-                'https://www.debian.org/security/2023/dsa-5417',
-                'https://www.openssl.org/news/secadv/20230322.txt'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: Denial of service by excessive resource usage in verifying X509 policy constraints'
-            },
-            {
-              'cve':  'CVE-2023-5363',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N'
-                },
-                'redhat': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-684'
-              ],
-              'description':   "Issue summary: A bug has been identified in the processing of key and\ninitialisation vector (IV) lengths.  This can lead to potential truncation\nor overruns during the initialisation of some symmetric ciphers.\n\nImpact summary: A truncation in the IV can result in non-uniqueness,\nwhich could result in loss of confidentiality for some cipher modes.\n\nWhen calling EVP_EncryptInit_ex2(), EVP_DecryptInit_ex2() or\nEVP_CipherInit_ex2() the provided OSSL_PARAM array is processed after\nthe key and IV have been established.  Any alterations to the key length,\nvia the \"keylen\" parameter or the IV length, via the \"ivlen\" parameter,\nwithin the OSSL_PARAM array will not take effect as intended, potentially\ncausing truncation or overreading of these values.  The following ciphers\nand cipher modes are impacted: RC2, RC4, RC5, CCM, GCM and OCB.\n\nFor the CCM, GCM and OCB cipher modes, truncation of the IV can result in\nloss of confidentiality.  For example, when following NIST's SP 800-38D\nsection 8.2.1 guidance for constructing a deterministic IV for AES in\nGCM mode, truncation of the counter portion could lead to IV reuse.\n\nBoth truncations and overruns of the key and overruns of the IV will\nproduce incorrect results and could, in some cases, trigger a memory\nexception.  However, these issues are not currently assessed as security\ncritical.\n\nChanging the key and/or IV lengths is not considered to be a common operation\nand the vulnerable API was recently introduced. Furthermore it is likely that\napplication developers will have spotted this problem during testing since\ndecryption would fail unless both peers in the communication were similarly\nvulnerable. For these reasons we expect the probability of an application being\nvulnerable to this to be quite low. However if an application is vulnerable then\nthis issue is considered very serious. For these reasons we have assessed this\nissue as Moderate severity overall.\n\nThe OpenSSL SSL/TLS implementation is not affected by this issue.\n\nThe OpenSSL 3.0 and 3.1 FIPS providers are not affected by this because\nthe issue lies outside of the FIPS provider boundary.\n\nOpenSSL 3.1 and 3.0 are vulnerable to this issue.",
-              'diffID':        'sha256:b5902734b682781f128d816229ad15ec369201ddec7177fc18f3a8dcfeb00697',
-              'fixedVersions': [
-                '3.0.12-r0'
-              ],
-              'installedVersion': '3.0.7-r2',
-              'packageName':      'libcrypto3',
-              'purl':             'pkg:apk/alpine/libcrypto3@3.0.7-r2?arch=s390x&distro=3.17.1',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2023/10/24/1',
-                'https://access.redhat.com/errata/RHSA-2024:0310',
-                'https://access.redhat.com/security/cve/CVE-2023-5363',
-                'https://bugzilla.redhat.com/2243839',
-                'https://errata.almalinux.org/9/ALSA-2024-0310.html',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=0df40630850fb2740e6be6890bb905d3fc623b2d',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=5f69f5c65e483928c4b28ed16af6e5742929f1ee',
-                'https://linux.oracle.com/cve/CVE-2023-5363.html',
-                'https://linux.oracle.com/errata/ELSA-2024-12093.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-5363',
-                'https://security.netapp.com/advisory/ntap-20231027-0010/',
-                'https://security.netapp.com/advisory/ntap-20240201-0003/',
-                'https://security.netapp.com/advisory/ntap-20240201-0004/',
-                'https://security.netapp.com/advisory/ntap-20241108-0002/',
-                'https://ubuntu.com/security/notices/USN-6450-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-5363',
-                'https://www.debian.org/security/2023/dsa-5532',
-                'https://www.openssl.org/news/secadv/20231024.txt'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: Incorrect cipher key and IV length processing'
-            },
-            {
-              'cve':  'CVE-2024-6119',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-843'
-              ],
-              'description':   "Issue summary: Applications performing certificate name checks (e.g., TLS\nclients checking server certificates) may attempt to read an invalid memory\naddress resulting in abnormal termination of the application process.\n\nImpact summary: Abnormal termination of an application can a cause a denial of\nservice.\n\nApplications performing certificate name checks (e.g., TLS clients checking\nserver certificates) may attempt to read an invalid memory address when\ncomparing the expected name with an `otherName` subject alternative name of an\nX.509 certificate. This may result in an exception that terminates the\napplication program.\n\nNote that basic certificate chain validation (signatures, dates, ...) is not\naffected, the denial of service can occur only when the application also\nspecifies an expected DNS name, Email address or IP address.\n\nTLS servers rarely solicit client certificates, and even when they do, they\ngenerally don't perform a name check against a reference identifier (expected\nidentity), but rather extract the presented identity after checking the\ncertificate chain.  So TLS servers are generally not affected and the severity\nof the issue is Moderate.\n\nThe FIPS modules in 3.3, 3.2, 3.1 and 3.0 are not affected by this issue.",
-              'diffID':        'sha256:b5902734b682781f128d816229ad15ec369201ddec7177fc18f3a8dcfeb00697',
-              'fixedVersions': [
-                '3.0.15-r0'
-              ],
-              'installedVersion': '3.0.7-r2',
-              'packageName':      'libcrypto3',
-              'purl':             'pkg:apk/alpine/libcrypto3@3.0.7-r2?arch=s390x&distro=3.17.1',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2024/09/03/4',
-                'https://access.redhat.com/errata/RHSA-2024:8935',
-                'https://access.redhat.com/security/cve/CVE-2024-6119',
-                'https://bugzilla.redhat.com/2306158',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2306158',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-6119',
-                'https://errata.almalinux.org/9/ALSA-2024-8935.html',
-                'https://errata.rockylinux.org/RLSA-2024:6783',
-                'https://github.com/openssl/openssl/commit/05f360d9e849a1b277db628f1f13083a7f8dd04f',
-                'https://github.com/openssl/openssl/commit/06d1dc3fa96a2ba5a3e22735a033012aadc9f0d6',
-                'https://github.com/openssl/openssl/commit/621f3729831b05ee828a3203eddb621d014ff2b2',
-                'https://github.com/openssl/openssl/commit/7dfcee2cd2a63b2c64b9b4b0850be64cb695b0a0',
-                'https://github.com/openssl/openssl/security/advisories/GHSA-5qrj-vq78-58fj',
-                'https://linux.oracle.com/cve/CVE-2024-6119.html',
-                'https://linux.oracle.com/errata/ELSA-2024-8935.html',
-                'https://lists.freebsd.org/archives/freebsd-security/2024-September/000303.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2024-6119',
-                'https://openssl-library.org/news/secadv/20240903.txt',
-                'https://security.netapp.com/advisory/ntap-20240912-0001/',
-                'https://ubuntu.com/security/notices/USN-6986-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2024-6119'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: Possible denial of service in X.509 name checks'
-            },
-            {
-              'cve':  'CVE-2022-4203',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '9.1',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H'
-                },
-                'nvd': {
-                  'v3score':  '4.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '4.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-125'
-              ],
-              'description':   'A read buffer overrun can be triggered in X.509 certificate verification,\nspecifically in name constraint checking. Note that this occurs\nafter certificate chain signature verification and requires either a\nCA to have signed the malicious certificate or for the application to\ncontinue certificate verification despite failure to construct a path\nto a trusted issuer.\n\nThe read buffer overrun might result in a crash which could lead to\na denial of service attack. In theory it could also result in the disclosure\nof private memory contents (such as private keys, or sensitive plaintext)\nalthough we are not aware of any working exploit leading to memory\ncontents disclosure as of the time of release of this advisory.\n\nIn a TLS client, this can be triggered by connecting to a malicious\nserver. In a TLS server, this can be triggered if the server requests\nclient authentication and a malicious client connects.',
-              'diffID':        'sha256:b5902734b682781f128d816229ad15ec369201ddec7177fc18f3a8dcfeb00697',
-              'fixedVersions': [
-                '3.0.8-r0'
-              ],
-              'installedVersion': '3.0.7-r2',
-              'packageName':      'libcrypto3',
-              'purl':             'pkg:apk/alpine/libcrypto3@3.0.7-r2?arch=s390x&distro=3.17.1',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2023:0946',
-                'https://access.redhat.com/security/cve/CVE-2022-4203',
-                'https://bugzilla.redhat.com/2164440',
-                'https://bugzilla.redhat.com/2164487',
-                'https://bugzilla.redhat.com/2164488',
-                'https://bugzilla.redhat.com/2164492',
-                'https://bugzilla.redhat.com/2164494',
-                'https://bugzilla.redhat.com/2164497',
-                'https://bugzilla.redhat.com/2164499',
-                'https://bugzilla.redhat.com/2164500',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144000',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144003',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144006',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144008',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144010',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144012',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144015',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144017',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144019',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2145170',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2158412',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164440',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164487',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164488',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164492',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164497',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164499',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164500',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4203',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4304',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4450',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0215',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0216',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0217',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0286',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0401',
-                'https://errata.almalinux.org/9/ALSA-2023-0946.html',
-                'https://errata.rockylinux.org/RLSA-2023:0946',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=c927a3492698c254637da836762f9b1f86cffabc',
-                'https://linux.oracle.com/cve/CVE-2022-4203.html',
-                'https://linux.oracle.com/errata/ELSA-2023-12152.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2022-4203',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0003',
-                'https://rustsec.org/advisories/RUSTSEC-2023-0008.html',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://ubuntu.com/security/notices/USN-5844-1',
-                'https://www.cve.org/CVERecord?id=CVE-2022-4203',
-                'https://www.openssl.org/news/secadv/20230207.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: read buffer overflow in X.509 certificate verification'
-            },
-            {
-              'cve':  'CVE-2022-4304',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N'
-                },
-                'nvd': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N'
-                },
-                'redhat': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-203'
-              ],
-              'description':   'A timing based side channel exists in the OpenSSL RSA Decryption implementation\nwhich could be sufficient to recover a plaintext across a network in a\nBleichenbacher style attack. To achieve a successful decryption an attacker\nwould have to be able to send a very large number of trial messages for\ndecryption. The vulnerability affects all RSA padding modes: PKCS#1 v1.5,\nRSA-OEAP and RSASVE.\n\nFor example, in a TLS connection, RSA is commonly used by a client to send an\nencrypted pre-master secret to the server. An attacker that had observed a\ngenuine connection between a client and a server could use this flaw to send\ntrial messages to the server and record the time taken to process them. After a\nsufficiently large number of messages the attacker could recover the pre-master\nsecret used for the original connection and thus be able to decrypt the\napplication data sent over that connection.',
-              'diffID':        'sha256:b5902734b682781f128d816229ad15ec369201ddec7177fc18f3a8dcfeb00697',
-              'fixedVersions': [
-                '3.0.8-r0'
-              ],
-              'installedVersion': '3.0.7-r2',
-              'packageName':      'libcrypto3',
-              'purl':             'pkg:apk/alpine/libcrypto3@3.0.7-r2?arch=s390x&distro=3.17.1',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2023:2165',
-                'https://access.redhat.com/security/cve/CVE-2022-4304',
-                'https://bugzilla.redhat.com/1960321',
-                'https://bugzilla.redhat.com/2164440',
-                'https://bugzilla.redhat.com/2164487',
-                'https://bugzilla.redhat.com/2164492',
-                'https://bugzilla.redhat.com/2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144000',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144003',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144006',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144008',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144010',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144012',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144015',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144017',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144019',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2145170',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2158412',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164440',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164487',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164488',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164492',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164497',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164499',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164500',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4203',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4304',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4450',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0215',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0216',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0217',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0286',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0401',
-                'https://errata.almalinux.org/9/ALSA-2023-2165.html',
-                'https://errata.rockylinux.org/RLSA-2023:0946',
-                'https://linux.oracle.com/cve/CVE-2022-4304.html',
-                'https://linux.oracle.com/errata/ELSA-2023-32791.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2022-4304',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0003',
-                'https://rustsec.org/advisories/RUSTSEC-2023-0007.html',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://ubuntu.com/security/notices/USN-5844-1',
-                'https://ubuntu.com/security/notices/USN-6564-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2022-4304',
-                'https://www.openssl.org/news/secadv/20230207.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: timing attack in RSA Decryption implementation'
-            },
-            {
-              'cve':  'CVE-2023-0465',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N'
-                },
-                'redhat': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-295'
-              ],
-              'description':   "Applications that use a non-default option when verifying certificates may be\nvulnerable to an attack from a malicious CA to circumvent certain checks.\n\nInvalid certificate policies in leaf certificates are silently ignored by\nOpenSSL and other certificate policy checks are skipped for that certificate.\nA malicious CA could use this to deliberately assert invalid certificate policies\nin order to circumvent policy checking on the certificate altogether.\n\nPolicy processing is disabled by default but can be enabled by passing\nthe `-policy' argument to the command line utilities or by calling the\n`X509_VERIFY_PARAM_set1_policies()' function.",
-              'diffID':        'sha256:b5902734b682781f128d816229ad15ec369201ddec7177fc18f3a8dcfeb00697',
-              'fixedVersions': [
-                '3.0.8-r2'
-              ],
-              'installedVersion': '3.0.7-r2',
-              'packageName':      'libcrypto3',
-              'purl':             'pkg:apk/alpine/libcrypto3@3.0.7-r2?arch=s390x&distro=3.17.1',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2023:3722',
-                'https://access.redhat.com/security/cve/CVE-2023-0465',
-                'https://bugzilla.redhat.com/2181082',
-                'https://bugzilla.redhat.com/2182561',
-                'https://bugzilla.redhat.com/2182565',
-                'https://bugzilla.redhat.com/2188461',
-                'https://bugzilla.redhat.com/2207947',
-                'https://errata.almalinux.org/9/ALSA-2023-3722.html',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=10325176f3d3e98c6e2b3bf5ab1e3b334de6947a',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=1dd43e0709fece299b15208f36cc7c76209ba0bb',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=b013765abfa80036dc779dd0e50602c57bb3bf95',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=facfb1ab745646e97a1920977ae4a9965ea61d5c',
-                'https://linux.oracle.com/cve/CVE-2023-0465.html',
-                'https://linux.oracle.com/errata/ELSA-2023-3722.html',
-                'https://lists.debian.org/debian-lts-announce/2023/06/msg00011.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-0465',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://security.netapp.com/advisory/ntap-20230414-0001/',
-                'https://ubuntu.com/security/notices/USN-6039-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-0465',
-                'https://www.debian.org/security/2023/dsa-5417',
-                'https://www.openssl.org/news/secadv/20230328.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: Invalid certificate policies in leaf certificates are silently ignored'
-            },
-            {
-              'cve':  'CVE-2023-0466',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N'
-                },
-                'redhat': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-295'
-              ],
-              'description':   'The function X509_VERIFY_PARAM_add0_policy() is documented to\nimplicitly enable the certificate policy check when doing certificate\nverification. However the implementation of the function does not\nenable the check which allows certificates with invalid or incorrect\npolicies to pass the certificate verification.\n\nAs suddenly enabling the policy check could break existing deployments it was\ndecided to keep the existing behavior of the X509_VERIFY_PARAM_add0_policy()\nfunction.\n\nInstead the applications that require OpenSSL to perform certificate\npolicy check need to use X509_VERIFY_PARAM_set1_policies() or explicitly\nenable the policy check by calling X509_VERIFY_PARAM_set_flags() with\nthe X509_V_FLAG_POLICY_CHECK flag argument.\n\nCertificate policy checks are disabled by default in OpenSSL and are not\ncommonly used by applications.',
-              'diffID':        'sha256:b5902734b682781f128d816229ad15ec369201ddec7177fc18f3a8dcfeb00697',
-              'fixedVersions': [
-                '3.0.8-r3'
-              ],
-              'installedVersion': '3.0.7-r2',
-              'packageName':      'libcrypto3',
-              'purl':             'pkg:apk/alpine/libcrypto3@3.0.7-r2?arch=s390x&distro=3.17.1',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2023/09/28/4',
-                'https://access.redhat.com/errata/RHSA-2023:3722',
-                'https://access.redhat.com/security/cve/CVE-2023-0466',
-                'https://bugzilla.redhat.com/2181082',
-                'https://bugzilla.redhat.com/2182561',
-                'https://bugzilla.redhat.com/2182565',
-                'https://bugzilla.redhat.com/2188461',
-                'https://bugzilla.redhat.com/2207947',
-                'https://errata.almalinux.org/9/ALSA-2023-3722.html',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=0d16b7e99aafc0b4a6d729eec65a411a7e025f0a',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=51e8a84ce742db0f6c70510d0159dad8f7825908',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=73398dea26de9899fb4baa94098ad0a61f435c72',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=fc814a30fc4f0bc54fcea7d9a7462f5457aab061',
-                'https://linux.oracle.com/cve/CVE-2023-0466.html',
-                'https://linux.oracle.com/errata/ELSA-2023-3722.html',
-                'https://lists.debian.org/debian-lts-announce/2023/06/msg00011.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-0466',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://security.netapp.com/advisory/ntap-20230414-0001/',
-                'https://ubuntu.com/security/notices/USN-6039-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-0466',
-                'https://www.debian.org/security/2023/dsa-5417',
-                'https://www.openssl.org/news/secadv/20230328.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: Certificate policy check not enabled'
-            },
-            {
-              'cve':  'CVE-2023-1255',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '5.1',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-125'
-              ],
-              'description':   'Issue summary: The AES-XTS cipher decryption implementation for 64 bit ARM\nplatform contains a bug that could cause it to read past the input buffer,\nleading to a crash.\n\nImpact summary: Applications that use the AES-XTS algorithm on the 64 bit ARM\nplatform can crash in rare circumstances. The AES-XTS algorithm is usually\nused for disk encryption.\n\nThe AES-XTS cipher decryption implementation for 64 bit ARM platform will read\npast the end of the ciphertext buffer if the ciphertext size is 4 mod 5 in 16\nbyte blocks, e.g. 144 bytes or 1024 bytes. If the memory after the ciphertext\nbuffer is unmapped, this will trigger a crash which results in a denial of\nservice.\n\nIf an attacker can control the size and location of the ciphertext buffer\nbeing decrypted by an application using AES-XTS on 64 bit ARM, the\napplication is affected. This is fairly unlikely making this issue\na Low severity one.',
-              'diffID':        'sha256:b5902734b682781f128d816229ad15ec369201ddec7177fc18f3a8dcfeb00697',
-              'fixedVersions': [
-                '3.0.8-r4'
-              ],
-              'installedVersion': '3.0.7-r2',
-              'packageName':      'libcrypto3',
-              'purl':             'pkg:apk/alpine/libcrypto3@3.0.7-r2?arch=s390x&distro=3.17.1',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2023:3722',
-                'https://access.redhat.com/security/cve/CVE-2023-1255',
-                'https://bugzilla.redhat.com/2181082',
-                'https://bugzilla.redhat.com/2182561',
-                'https://bugzilla.redhat.com/2182565',
-                'https://bugzilla.redhat.com/2188461',
-                'https://bugzilla.redhat.com/2207947',
-                'https://errata.almalinux.org/9/ALSA-2023-3722.html',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=02ac9c9420275868472f33b01def01218742b8bb',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=bc2f61ad70971869b242fc1cb445b98bad50074a',
-                'https://linux.oracle.com/cve/CVE-2023-1255.html',
-                'https://linux.oracle.com/errata/ELSA-2023-3722.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-1255',
-                'https://security.netapp.com/advisory/ntap-20230908-0006/',
-                'https://ubuntu.com/security/notices/USN-6119-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-1255',
-                'https://www.openssl.org/news/secadv/20230419.txt',
-                'https://www.openssl.org/news/secadv/20230420.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: Input buffer over-read in AES-XTS implementation on 64 bit ARM'
-            },
-            {
-              'cve':  'CVE-2023-2650',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '6.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-770'
-              ],
-              'description':   "Issue summary: Processing some specially crafted ASN.1 object identifiers or\ndata containing them may be very slow.\n\nImpact summary: Applications that use OBJ_obj2txt() directly, or use any of\nthe OpenSSL subsystems OCSP, PKCS7/SMIME, CMS, CMP/CRMF or TS with no message\nsize limit may experience notable to very long delays when processing those\nmessages, which may lead to a Denial of Service.\n\nAn OBJECT IDENTIFIER is composed of a series of numbers - sub-identifiers -\nmost of which have no size limit.  OBJ_obj2txt() may be used to translate\nan ASN.1 OBJECT IDENTIFIER given in DER encoding form (using the OpenSSL\ntype ASN1_OBJECT) to its canonical numeric text form, which are the\nsub-identifiers of the OBJECT IDENTIFIER in decimal form, separated by\nperiods.\n\nWhen one of the sub-identifiers in the OBJECT IDENTIFIER is very large\n(these are sizes that are seen as absurdly large, taking up tens or hundreds\nof KiBs), the translation to a decimal number in text may take a very long\ntime.  The time complexity is O(n^2) with 'n' being the size of the\nsub-identifiers in bytes (*).\n\nWith OpenSSL 3.0, support to fetch cryptographic algorithms using names /\nidentifiers in string form was introduced.  This includes using OBJECT\nIDENTIFIERs in canonical numeric text form as identifiers for fetching\nalgorithms.\n\nSuch OBJECT IDENTIFIERs may be received through the ASN.1 structure\nAlgorithmIdentifier, which is commonly used in multiple protocols to specify\nwhat cryptographic algorithm should be used to sign or verify, encrypt or\ndecrypt, or digest passed data.\n\nApplications that call OBJ_obj2txt() directly with untrusted data are\naffected, with any version of OpenSSL.  If the use is for the mere purpose\nof display, the severity is considered low.\n\nIn OpenSSL 3.0 and newer, this affects the subsystems OCSP, PKCS7/SMIME,\nCMS, CMP/CRMF or TS.  It also impacts anything that processes X.509\ncertificates, including simple things like verifying its signature.\n\nThe impact on TLS is relatively low, because all versions of OpenSSL have a\n100KiB limit on the peer's certificate chain.  Additionally, this only\nimpacts clients, or servers that have explicitly enabled client\nauthentication.\n\nIn OpenSSL 1.1.1 and 1.0.2, this only affects displaying diverse objects,\nsuch as X.509 certificates.  This is assumed to not happen in such a way\nthat it would cause a Denial of Service, so these versions are considered\nnot affected by this issue in such a way that it would be cause for concern,\nand the severity is therefore considered low.",
-              'diffID':        'sha256:b5902734b682781f128d816229ad15ec369201ddec7177fc18f3a8dcfeb00697',
-              'fixedVersions': [
-                '3.0.9-r0'
-              ],
-              'installedVersion': '3.0.7-r2',
-              'packageName':      'libcrypto3',
-              'purl':             'pkg:apk/alpine/libcrypto3@3.0.7-r2?arch=s390x&distro=3.17.1',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2023/05/30/1',
-                'https://access.redhat.com/errata/RHSA-2023:6330',
-                'https://access.redhat.com/security/cve/CVE-2023-2650',
-                'https://bugzilla.redhat.com/1858038',
-                'https://bugzilla.redhat.com/2207947',
-                'https://errata.almalinux.org/9/ALSA-2023-6330.html',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=423a2bc737a908ad0c77bda470b2b59dc879936b',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=853c5e56ee0b8650c73140816bb8b91d6163422c',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=9e209944b35cf82368071f160a744b6178f9b098',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=db779b0e10b047f2585615e0b8f2acdf21f8544a',
-                'https://linux.oracle.com/cve/CVE-2023-2650.html',
-                'https://linux.oracle.com/errata/ELSA-2023-6330.html',
-                'https://lists.debian.org/debian-lts-announce/2023/06/msg00011.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-2650',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0009',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://security.netapp.com/advisory/ntap-20230703-0001/',
-                'https://security.netapp.com/advisory/ntap-20231027-0009/',
-                'https://ubuntu.com/security/notices/USN-6119-1',
-                'https://ubuntu.com/security/notices/USN-6188-1',
-                'https://ubuntu.com/security/notices/USN-6672-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-2650',
-                'https://www.debian.org/security/2023/dsa-5417',
-                'https://www.openssl.org/news/secadv/20230530.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: Possible DoS translating ASN.1 object identifiers'
-            },
-            {
-              'cve':  'CVE-2023-2975',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N'
-                },
-                'redhat': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-354',
-                'CWE-287'
-              ],
-              'description':   'Issue summary: The AES-SIV cipher implementation contains a bug that causes\nit to ignore empty associated data entries which are unauthenticated as\na consequence.\n\nImpact summary: Applications that use the AES-SIV algorithm and want to\nauthenticate empty data entries as associated data can be misled by removing,\nadding or reordering such empty entries as these are ignored by the OpenSSL\nimplementation. We are currently unaware of any such applications.\n\nThe AES-SIV algorithm allows for authentication of multiple associated\ndata entries along with the encryption. To authenticate empty data the\napplication has to call EVP_EncryptUpdate() (or EVP_CipherUpdate()) with\nNULL pointer as the output buffer and 0 as the input buffer length.\nThe AES-SIV implementation in OpenSSL just returns success for such a call\ninstead of performing the associated data authentication operation.\nThe empty data thus will not be authenticated.\n\nAs this issue does not affect non-empty associated data authentication and\nwe expect it to be rare for an application to use empty associated data\nentries this is qualified as Low severity issue.',
-              'diffID':        'sha256:b5902734b682781f128d816229ad15ec369201ddec7177fc18f3a8dcfeb00697',
-              'fixedVersions': [
-                '3.0.9-r2'
-              ],
-              'installedVersion': '3.0.7-r2',
-              'packageName':      'libcrypto3',
-              'purl':             'pkg:apk/alpine/libcrypto3@3.0.7-r2?arch=s390x&distro=3.17.1',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2023/07/15/1',
-                'http://www.openwall.com/lists/oss-security/2023/07/19/5',
-                'https://access.redhat.com/errata/RHSA-2024:2447',
-                'https://access.redhat.com/security/cve/CVE-2023-2975',
-                'https://bugzilla.redhat.com/2223016',
-                'https://bugzilla.redhat.com/2224962',
-                'https://bugzilla.redhat.com/2227852',
-                'https://bugzilla.redhat.com/2248616',
-                'https://bugzilla.redhat.com/2257571',
-                'https://bugzilla.redhat.com/2258502',
-                'https://bugzilla.redhat.com/2259944',
-                'https://errata.almalinux.org/9/ALSA-2024-2447.html',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=00e2f5eea29994d19293ec4e8c8775ba73678598',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=6a83f0c958811f07e0d11dfc6b5a6a98edfd5bdc',
-                'https://linux.oracle.com/cve/CVE-2023-2975.html',
-                'https://linux.oracle.com/errata/ELSA-2024-2447.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-2975',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://security.netapp.com/advisory/ntap-20230725-0004/',
-                'https://ubuntu.com/security/notices/USN-6450-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-2975',
-                'https://www.openssl.org/news/secadv/20230714.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: AES-SIV cipher implementation contains a bug that causes it to ignore empty associated data entries'
-            },
-            {
-              'cve':  'CVE-2023-3446',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L'
-                },
-                'redhat': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L'
-                }
-              },
-              'cwes': [
-                'CWE-606',
-                'CWE-1333'
-              ],
-              'description':   "Issue summary: Checking excessively long DH keys or parameters may be very slow.\n\nImpact summary: Applications that use the functions DH_check(), DH_check_ex()\nor EVP_PKEY_param_check() to check a DH key or DH parameters may experience long\ndelays. Where the key or parameters that are being checked have been obtained\nfrom an untrusted source this may lead to a Denial of Service.\n\nThe function DH_check() performs various checks on DH parameters. One of those\nchecks confirms that the modulus ('p' parameter) is not too large. Trying to use\na very large modulus is slow and OpenSSL will not normally use a modulus which\nis over 10,000 bits in length.\n\nHowever the DH_check() function checks numerous aspects of the key or parameters\nthat have been supplied. Some of those checks use the supplied modulus value\neven if it has already been found to be too large.\n\nAn application that calls DH_check() and supplies a key or parameters obtained\nfrom an untrusted source could be vulernable to a Denial of Service attack.\n\nThe function DH_check() is itself called by a number of other OpenSSL functions.\nAn application calling any of those other functions may similarly be affected.\nThe other functions affected by this are DH_check_ex() and\nEVP_PKEY_param_check().\n\nAlso vulnerable are the OpenSSL dhparam and pkeyparam command line applications\nwhen using the '-check' option.\n\nThe OpenSSL SSL/TLS implementation is not affected by this issue.\nThe OpenSSL 3.0 and 3.1 FIPS providers are not affected by this issue.",
-              'diffID':        'sha256:b5902734b682781f128d816229ad15ec369201ddec7177fc18f3a8dcfeb00697',
-              'fixedVersions': [
-                '3.0.9-r3'
-              ],
-              'installedVersion': '3.0.7-r2',
-              'packageName':      'libcrypto3',
-              'purl':             'pkg:apk/alpine/libcrypto3@3.0.7-r2?arch=s390x&distro=3.17.1',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2023/07/19/4',
-                'http://www.openwall.com/lists/oss-security/2023/07/19/5',
-                'http://www.openwall.com/lists/oss-security/2023/07/19/6',
-                'http://www.openwall.com/lists/oss-security/2023/07/31/1',
-                'http://www.openwall.com/lists/oss-security/2024/05/16/1',
-                'https://access.redhat.com/errata/RHSA-2024:2447',
-                'https://access.redhat.com/security/cve/CVE-2023-3446',
-                'https://bugzilla.redhat.com/2223016',
-                'https://bugzilla.redhat.com/2224962',
-                'https://bugzilla.redhat.com/2227852',
-                'https://bugzilla.redhat.com/2248616',
-                'https://bugzilla.redhat.com/2257571',
-                'https://bugzilla.redhat.com/2258502',
-                'https://bugzilla.redhat.com/2259944',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2224962',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2257582',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2257583',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2258677',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2258688',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2258691',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2258694',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2258700',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-36763',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-36764',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3446',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45229',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45231',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45232',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45233',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45235',
-                'https://errata.almalinux.org/9/ALSA-2024-2447.html',
-                'https://errata.rockylinux.org/RLSA-2024:2264',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=1fa20cf2f506113c761777127a38bce5068740eb',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=8780a896543a654e757db1b9396383f9d8095528',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=9a0a4d3c1e7138915563c0df4fe6a3f9377b839c',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=fc9867c1e03c22ebf56943be205202e576aabf23',
-                'https://linux.oracle.com/cve/CVE-2023-3446.html',
-                'https://linux.oracle.com/errata/ELSA-2024-2447.html',
-                'https://lists.debian.org/debian-lts-announce/2023/08/msg00019.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-3446',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://security.netapp.com/advisory/ntap-20230803-0011/',
-                'https://ubuntu.com/security/notices/USN-6435-1',
-                'https://ubuntu.com/security/notices/USN-6435-2',
-                'https://ubuntu.com/security/notices/USN-6450-1',
-                'https://ubuntu.com/security/notices/USN-6709-1',
-                'https://ubuntu.com/security/notices/USN-7018-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-3446',
-                'https://www.openssl.org/news/secadv/20230719.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: Excessive time spent checking DH keys and parameters'
-            },
-            {
-              'cve':  'CVE-2023-3817',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L'
-                },
-                'redhat': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L'
-                }
-              },
-              'cwes': [
-                'CWE-606',
-                'CWE-834'
-              ],
-              'description':   'Issue summary: Checking excessively long DH keys or parameters may be very slow.\n\nImpact summary: Applications that use the functions DH_check(), DH_check_ex()\nor EVP_PKEY_param_check() to check a DH key or DH parameters may experience long\ndelays. Where the key or parameters that are being checked have been obtained\nfrom an untrusted source this may lead to a Denial of Service.\n\nThe function DH_check() performs various checks on DH parameters. After fixing\nCVE-2023-3446 it was discovered that a large q parameter value can also trigger\nan overly long computation during some of these checks. A correct q value,\nif present, cannot be larger than the modulus p parameter, thus it is\nunnecessary to perform these checks if q is larger than p.\n\nAn application that calls DH_check() and supplies a key or parameters obtained\nfrom an untrusted source could be vulnerable to a Denial of Service attack.\n\nThe function DH_check() is itself called by a number of other OpenSSL functions.\nAn application calling any of those other functions may similarly be affected.\nThe other functions affected by this are DH_check_ex() and\nEVP_PKEY_param_check().\n\nAlso vulnerable are the OpenSSL dhparam and pkeyparam command line applications\nwhen using the "-check" option.\n\nThe OpenSSL SSL/TLS implementation is not affected by this issue.\n\nThe OpenSSL 3.0 and 3.1 FIPS providers are not affected by this issue.',
-              'diffID':        'sha256:b5902734b682781f128d816229ad15ec369201ddec7177fc18f3a8dcfeb00697',
-              'fixedVersions': [
-                '3.0.10-r0'
-              ],
-              'installedVersion': '3.0.7-r2',
-              'packageName':      'libcrypto3',
-              'purl':             'pkg:apk/alpine/libcrypto3@3.0.7-r2?arch=s390x&distro=3.17.1',
-              'references':       [
-                'http://seclists.org/fulldisclosure/2023/Jul/43',
-                'http://www.openwall.com/lists/oss-security/2023/07/31/1',
-                'http://www.openwall.com/lists/oss-security/2023/09/22/11',
-                'http://www.openwall.com/lists/oss-security/2023/09/22/9',
-                'http://www.openwall.com/lists/oss-security/2023/11/06/2',
-                'https://access.redhat.com/errata/RHSA-2024:2447',
-                'https://access.redhat.com/security/cve/CVE-2023-3817',
-                'https://bugzilla.redhat.com/2223016',
-                'https://bugzilla.redhat.com/2224962',
-                'https://bugzilla.redhat.com/2227852',
-                'https://bugzilla.redhat.com/2248616',
-                'https://bugzilla.redhat.com/2257571',
-                'https://bugzilla.redhat.com/2258502',
-                'https://bugzilla.redhat.com/2259944',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2224962',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2227852',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2248616',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2270358',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3446',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3817',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-5678',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-2408',
-                'https://errata.almalinux.org/9/ALSA-2024-2447.html',
-                'https://errata.rockylinux.org/RLSA-2023:7877',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=6a1eb62c29db6cb5eec707f9338aee00f44e26f5',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=869ad69aadd985c7b8ca6f4e5dd0eb274c9f3644',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=9002fd07327a91f35ba6c1307e71fa6fd4409b7f',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=91ddeba0f2269b017dc06c46c993a788974b1aa5',
-                'https://linux.oracle.com/cve/CVE-2023-3817.html',
-                'https://linux.oracle.com/errata/ELSA-2024-2447.html',
-                'https://lists.debian.org/debian-lts-announce/2023/08/msg00019.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-3817',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://security.netapp.com/advisory/ntap-20230818-0014/',
-                'https://security.netapp.com/advisory/ntap-20231027-0008/',
-                'https://security.netapp.com/advisory/ntap-20240621-0006/',
-                'https://ubuntu.com/security/notices/USN-6435-1',
-                'https://ubuntu.com/security/notices/USN-6435-2',
-                'https://ubuntu.com/security/notices/USN-6450-1',
-                'https://ubuntu.com/security/notices/USN-6709-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-3817',
-                'https://www.openssl.org/news/secadv/20230731.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'OpenSSL: Excessive time spent checking DH q parameter value'
-            },
-            {
-              'cve':  'CVE-2023-5678',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L'
-                },
-                'redhat': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L'
-                }
-              },
-              'cwes': [
-                'CWE-606',
-                'CWE-754'
-              ],
-              'description':   "Issue summary: Generating excessively long X9.42 DH keys or checking\nexcessively long X9.42 DH keys or parameters may be very slow.\n\nImpact summary: Applications that use the functions DH_generate_key() to\ngenerate an X9.42 DH key may experience long delays.  Likewise, applications\nthat use DH_check_pub_key(), DH_check_pub_key_ex() or EVP_PKEY_public_check()\nto check an X9.42 DH key or X9.42 DH parameters may experience long delays.\nWhere the key or parameters that are being checked have been obtained from\nan untrusted source this may lead to a Denial of Service.\n\nWhile DH_check() performs all the necessary checks (as of CVE-2023-3817),\nDH_check_pub_key() doesn't make any of these checks, and is therefore\nvulnerable for excessively large P and Q parameters.\n\nLikewise, while DH_generate_key() performs a check for an excessively large\nP, it doesn't check for an excessively large Q.\n\nAn application that calls DH_generate_key() or DH_check_pub_key() and\nsupplies a key or parameters obtained from an untrusted source could be\nvulnerable to a Denial of Service attack.\n\nDH_generate_key() and DH_check_pub_key() are also called by a number of\nother OpenSSL functions.  An application calling any of those other\nfunctions may similarly be affected.  The other functions affected by this\nare DH_check_pub_key_ex(), EVP_PKEY_public_check(), and EVP_PKEY_generate().\n\nAlso vulnerable are the OpenSSL pkey command line application when using the\n\"-pubcheck\" option, as well as the OpenSSL genpkey command line application.\n\nThe OpenSSL SSL/TLS implementation is not affected by this issue.\n\nThe OpenSSL 3.0 and 3.1 FIPS providers are not affected by this issue.",
-              'diffID':        'sha256:b5902734b682781f128d816229ad15ec369201ddec7177fc18f3a8dcfeb00697',
-              'fixedVersions': [
-                '3.0.12-r1'
-              ],
-              'installedVersion': '3.0.7-r2',
-              'packageName':      'libcrypto3',
-              'purl':             'pkg:apk/alpine/libcrypto3@3.0.7-r2?arch=s390x&distro=3.17.1',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2024/03/11/1',
-                'https://access.redhat.com/errata/RHSA-2024:2447',
-                'https://access.redhat.com/security/cve/CVE-2023-5678',
-                'https://bugzilla.redhat.com/2223016',
-                'https://bugzilla.redhat.com/2224962',
-                'https://bugzilla.redhat.com/2227852',
-                'https://bugzilla.redhat.com/2248616',
-                'https://bugzilla.redhat.com/2257571',
-                'https://bugzilla.redhat.com/2258502',
-                'https://bugzilla.redhat.com/2259944',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2224962',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2227852',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2248616',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2270358',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3446',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3817',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-5678',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-2408',
-                'https://errata.almalinux.org/9/ALSA-2024-2447.html',
-                'https://errata.rockylinux.org/RLSA-2023:7877',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=34efaef6c103d636ab507a0cc34dca4d3aecc055',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=710fee740904b6290fef0dd5536fbcedbc38ff0c',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=db925ae2e65d0d925adef429afc37f75bd1c2017',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=ddeb4b6c6d527e54ce9a99cba785c0f7776e54b6',
-                'https://linux.oracle.com/cve/CVE-2023-5678.html',
-                'https://linux.oracle.com/errata/ELSA-2024-2447.html',
-                'https://lists.debian.org/debian-lts-announce/2024/10/msg00033.html',
-                'https://lists.debian.org/debian-lts-announce/2024/11/msg00000.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-5678',
-                'https://security.netapp.com/advisory/ntap-20231130-0010/',
-                'https://ubuntu.com/security/notices/USN-6622-1',
-                'https://ubuntu.com/security/notices/USN-6632-1',
-                'https://ubuntu.com/security/notices/USN-6709-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-5678',
-                'https://www.openssl.org/news/secadv/20231106.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: Generating excessively long X9.42 DH keys or checking excessively long X9.42 DH keys or parameters may be very slow'
-            },
-            {
-              'cve':  'CVE-2023-6129',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '6.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-440',
-                'CWE-787'
-              ],
-              'description':   'Issue summary: The POLY1305 MAC (message authentication code) implementation\ncontains a bug that might corrupt the internal state of applications running\non PowerPC CPU based platforms if the CPU provides vector instructions.\n\nImpact summary: If an attacker can influence whether the POLY1305 MAC\nalgorithm is used, the application state might be corrupted with various\napplication dependent consequences.\n\nThe POLY1305 MAC (message authentication code) implementation in OpenSSL for\nPowerPC CPUs restores the contents of vector registers in a different order\nthan they are saved. Thus the contents of some of these vector registers\nare corrupted when returning to the caller. The vulnerable code is used only\non newer PowerPC processors supporting the PowerISA 2.07 instructions.\n\nThe consequences of this kind of internal application state corruption can\nbe various - from no consequences, if the calling application does not\ndepend on the contents of non-volatile XMM registers at all, to the worst\nconsequences, where the attacker could get complete control of the application\nprocess. However unless the compiler uses the vector registers for storing\npointers, the most likely consequence, if any, would be an incorrect result\nof some application dependent calculations or a crash leading to a denial of\nservice.\n\nThe POLY1305 MAC algorithm is most frequently used as part of the\nCHACHA20-POLY1305 AEAD (authenticated encryption with associated data)\nalgorithm. The most common usage of this AEAD cipher is with TLS protocol\nversions 1.2 and 1.3. If this cipher is enabled on the server a malicious\nclient can influence whether this AEAD cipher is used. This implies that\nTLS server applications using OpenSSL can be potentially impacted. However\nwe are currently not aware of any concrete application that would be affected\nby this issue therefore we consider this a Low severity security issue.',
-              'diffID':        'sha256:b5902734b682781f128d816229ad15ec369201ddec7177fc18f3a8dcfeb00697',
-              'fixedVersions': [
-                '3.0.12-r2'
-              ],
-              'installedVersion': '3.0.7-r2',
-              'packageName':      'libcrypto3',
-              'purl':             'pkg:apk/alpine/libcrypto3@3.0.7-r2?arch=s390x&distro=3.17.1',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2024/03/11/1',
-                'https://access.redhat.com/errata/RHSA-2024:9088',
-                'https://access.redhat.com/security/cve/CVE-2023-6129',
-                'https://bugzilla.redhat.com/2257571',
-                'https://bugzilla.redhat.com/2258502',
-                'https://bugzilla.redhat.com/2259944',
-                'https://bugzilla.redhat.com/2284243',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2257571',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2258502',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2259944',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2284243',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-6129',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-6237',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-0727',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-1298',
-                'https://errata.almalinux.org/9/ALSA-2024-9088.html',
-                'https://errata.rockylinux.org/RLSA-2024:9088',
-                'https://github.com/openssl/openssl/commit/050d26383d4e264966fb83428e72d5d48f402d35',
-                'https://github.com/openssl/openssl/commit/5b139f95c9a47a55a0c54100f3837b1eee942b04',
-                'https://github.com/openssl/openssl/commit/f3fc5808fe9ff74042d639839610d03b8fdcc015',
-                'https://linux.oracle.com/cve/CVE-2023-6129.html',
-                'https://linux.oracle.com/errata/ELSA-2024-9088.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-6129',
-                'https://security.netapp.com/advisory/ntap-20240216-0009/',
-                'https://security.netapp.com/advisory/ntap-20240426-0008/',
-                'https://security.netapp.com/advisory/ntap-20240426-0013/',
-                'https://security.netapp.com/advisory/ntap-20240503-0011/',
-                'https://ubuntu.com/security/notices/USN-6622-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-6129',
-                'https://www.openssl.org/news/secadv/20240109.txt',
-                'https://www.openwall.com/lists/oss-security/2024/01/09/1'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: POLY1305 MAC implementation corrupts vector registers on PowerPC'
-            },
-            {
-              'cve':  'CVE-2023-6237',
-              'cvss': {
-                'redhat': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-606'
-              ],
-              'description':   "Issue summary: Checking excessively long invalid RSA public keys may take\na long time.\n\nImpact summary: Applications that use the function EVP_PKEY_public_check()\nto check RSA public keys may experience long delays. Where the key that\nis being checked has been obtained from an untrusted source this may lead\nto a Denial of Service.\n\nWhen function EVP_PKEY_public_check() is called on RSA public keys,\na computation is done to confirm that the RSA modulus, n, is composite.\nFor valid RSA keys, n is a product of two or more large primes and this\ncomputation completes quickly. However, if n is an overly large prime,\nthen this computation would take a long time.\n\nAn application that calls EVP_PKEY_public_check() and supplies an RSA key\nobtained from an untrusted source could be vulnerable to a Denial of Service\nattack.\n\nThe function EVP_PKEY_public_check() is not called from other OpenSSL\nfunctions however it is called from the OpenSSL pkey command line\napplication. For that reason that application is also vulnerable if used\nwith the '-pubin' and '-check' options on untrusted data.\n\nThe OpenSSL SSL/TLS implementation is not affected by this issue.\n\nThe OpenSSL 3.0 and 3.1 FIPS providers are affected by this issue.",
-              'diffID':        'sha256:b5902734b682781f128d816229ad15ec369201ddec7177fc18f3a8dcfeb00697',
-              'fixedVersions': [
-                '3.0.12-r3'
-              ],
-              'installedVersion': '3.0.7-r2',
-              'packageName':      'libcrypto3',
-              'purl':             'pkg:apk/alpine/libcrypto3@3.0.7-r2?arch=s390x&distro=3.17.1',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2024/03/11/1',
-                'https://access.redhat.com/errata/RHSA-2024:9088',
-                'https://access.redhat.com/security/cve/CVE-2023-6237',
-                'https://bugzilla.redhat.com/2257571',
-                'https://bugzilla.redhat.com/2258502',
-                'https://bugzilla.redhat.com/2259944',
-                'https://bugzilla.redhat.com/2284243',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2257571',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2258502',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2259944',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2284243',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-6129',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-6237',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-0727',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-1298',
-                'https://errata.almalinux.org/9/ALSA-2024-9088.html',
-                'https://errata.rockylinux.org/RLSA-2024:9088',
-                'https://github.com/openssl/openssl/commit/0b0f7abfb37350794a4b8960fafc292cd5d1b84d',
-                'https://github.com/openssl/openssl/commit/18c02492138d1eb8b6548cb26e7b625fb2414a2a',
-                'https://github.com/openssl/openssl/commit/a830f551557d3d66a84bbb18a5b889c640c36294',
-                'https://linux.oracle.com/cve/CVE-2023-6237.html',
-                'https://linux.oracle.com/errata/ELSA-2024-9088.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-6237',
-                'https://security.netapp.com/advisory/ntap-20240531-0007/',
-                'https://ubuntu.com/security/notices/USN-6622-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-6237',
-                'https://www.openssl.org/news/secadv/20240115.txt',
-                'https://www.openwall.com/lists/oss-security/2024/01/15/2'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: Excessive time spent checking invalid RSA public keys'
-            },
-            {
-              'cve':  'CVE-2024-0727',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '5.5',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H'
-                },
-                'nvd': {
-                  'v3score':  '5.5',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '5.5',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-476'
-              ],
-              'description':   'Issue summary: Processing a maliciously formatted PKCS12 file may lead OpenSSL\nto crash leading to a potential Denial of Service attack\n\nImpact summary: Applications loading files in the PKCS12 format from untrusted\nsources might terminate abruptly.\n\nA file in PKCS12 format can contain certificates and keys and may come from an\nuntrusted source. The PKCS12 specification allows certain fields to be NULL, but\nOpenSSL does not correctly check for this case. This can lead to a NULL pointer\ndereference that results in OpenSSL crashing. If an application processes PKCS12\nfiles from an untrusted source using the OpenSSL APIs then that application will\nbe vulnerable to this issue.\n\nOpenSSL APIs that are vulnerable to this are: PKCS12_parse(),\nPKCS12_unpack_p7data(), PKCS12_unpack_p7encdata(), PKCS12_unpack_authsafes()\nand PKCS12_newpass().\n\nWe have also fixed a similar issue in SMIME_write_PKCS7(). However since this\nfunction is related to writing data we do not consider it security significant.\n\nThe FIPS modules in 3.2, 3.1 and 3.0 are not affected by this issue.',
-              'diffID':        'sha256:b5902734b682781f128d816229ad15ec369201ddec7177fc18f3a8dcfeb00697',
-              'fixedVersions': [
-                '3.0.12-r4'
-              ],
-              'installedVersion': '3.0.7-r2',
-              'packageName':      'libcrypto3',
-              'purl':             'pkg:apk/alpine/libcrypto3@3.0.7-r2?arch=s390x&distro=3.17.1',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2024/03/11/1',
-                'https://access.redhat.com/errata/RHSA-2024:9088',
-                'https://access.redhat.com/security/cve/CVE-2024-0727',
-                'https://bugzilla.redhat.com/2257571',
-                'https://bugzilla.redhat.com/2258502',
-                'https://bugzilla.redhat.com/2259944',
-                'https://bugzilla.redhat.com/2284243',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2257571',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2258502',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2259944',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2284243',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-6129',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-6237',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-0727',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-1298',
-                'https://errata.almalinux.org/9/ALSA-2024-9088.html',
-                'https://errata.rockylinux.org/RLSA-2024:9088',
-                'https://github.com/alexcrichton/openssl-src-rs/commit/add20f73b6b42be7451af2e1044d4e0e778992b2',
-                'https://github.com/github/advisory-database/pull/3472',
-                'https://github.com/openssl/openssl/commit/09df4395b5071217b76dc7d3d2e630eb8c5a79c2',
-                'https://github.com/openssl/openssl/commit/775acfdbd0c6af9ac855f34969cdab0c0c90844a',
-                'https://github.com/openssl/openssl/commit/d135eeab8a5dbf72b3da5240bab9ddb7678dbd2c',
-                'https://github.com/openssl/openssl/pull/23362',
-                'https://github.com/pyca/cryptography/commit/3519591d255d4506fbcd0d04037d45271903c64d',
-                'https://github.openssl.org/openssl/extended-releases/commit/03b3941d60c4bce58fab69a0c22377ab439bc0e8',
-                'https://github.openssl.org/openssl/extended-releases/commit/aebaa5883e31122b404e450732dc833dc9dee539',
-                'https://linux.oracle.com/cve/CVE-2024-0727.html',
-                'https://linux.oracle.com/errata/ELSA-2024-9088.html',
-                'https://lists.debian.org/debian-lts-announce/2024/10/msg00033.html',
-                'https://lists.debian.org/debian-lts-announce/2024/11/msg00000.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2024-0727',
-                'https://security.netapp.com/advisory/ntap-20240208-0006',
-                'https://security.netapp.com/advisory/ntap-20240208-0006/',
-                'https://ubuntu.com/security/notices/USN-6622-1',
-                'https://ubuntu.com/security/notices/USN-6632-1',
-                'https://ubuntu.com/security/notices/USN-6709-1',
-                'https://ubuntu.com/security/notices/USN-7018-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2024-0727',
-                'https://www.openssl.org/news/secadv/20240125.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: denial of service via null dereference'
-            },
-            {
-              'cve':  'CVE-2024-4603',
-              'cvss': {
-                'redhat': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L'
-                }
-              },
-              'cwes': [
-                'CWE-606',
-                'CWE-834'
-              ],
-              'description':   'Issue summary: Checking excessively long DSA keys or parameters may be very\nslow.\n\nImpact summary: Applications that use the functions EVP_PKEY_param_check()\nor EVP_PKEY_public_check() to check a DSA public key or DSA parameters may\nexperience long delays. Where the key or parameters that are being checked\nhave been obtained from an untrusted source this may lead to a Denial of\nService.\n\nThe functions EVP_PKEY_param_check() or EVP_PKEY_public_check() perform\nvarious checks on DSA parameters. Some of those computations take a long time\nif the modulus (`p` parameter) is too large.\n\nTrying to use a very large modulus is slow and OpenSSL will not allow using\npublic keys with a modulus which is over 10,000 bits in length for signature\nverification. However the key and parameter check functions do not limit\nthe modulus size when performing the checks.\n\nAn application that calls EVP_PKEY_param_check() or EVP_PKEY_public_check()\nand supplies a key or parameters obtained from an untrusted source could be\nvulnerable to a Denial of Service attack.\n\nThese functions are not called by OpenSSL itself on untrusted DSA keys so\nonly applications that directly call these functions may be vulnerable.\n\nAlso vulnerable are the OpenSSL pkey and pkeyparam command line applications\nwhen using the `-check` option.\n\nThe OpenSSL SSL/TLS implementation is not affected by this issue.\n\nThe OpenSSL 3.0 and 3.1 FIPS providers are affected by this issue.',
-              'diffID':        'sha256:b5902734b682781f128d816229ad15ec369201ddec7177fc18f3a8dcfeb00697',
-              'fixedVersions': [
-                '3.0.13-r0'
-              ],
-              'installedVersion': '3.0.7-r2',
-              'packageName':      'libcrypto3',
-              'purl':             'pkg:apk/alpine/libcrypto3@3.0.7-r2?arch=s390x&distro=3.17.1',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2024/05/16/2',
-                'https://access.redhat.com/errata/RHSA-2024:9333',
-                'https://access.redhat.com/security/cve/CVE-2024-4603',
-                'https://bugzilla.redhat.com/2274020',
-                'https://bugzilla.redhat.com/2281029',
-                'https://bugzilla.redhat.com/2283757',
-                'https://bugzilla.redhat.com/2294581',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2274020',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2281029',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2283757',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2294581',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-2511',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-4603',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-4741',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-5535',
-                'https://errata.almalinux.org/9/ALSA-2024-9333.html',
-                'https://errata.rockylinux.org/RLSA-2024:9333',
-                'https://github.com/openssl/openssl/commit/3559e868e58005d15c6013a0c1fd832e51c73397',
-                'https://github.com/openssl/openssl/commit/53ea06486d296b890d565fb971b2764fcd826e7e',
-                'https://github.com/openssl/openssl/commit/9c39b3858091c152f52513c066ff2c5a47969f0d',
-                'https://github.com/openssl/openssl/commit/da343d0605c826ef197aceedc67e8e04f065f740',
-                'https://linux.oracle.com/cve/CVE-2024-4603.html',
-                'https://linux.oracle.com/errata/ELSA-2024-9333.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2024-4603',
-                'https://security.netapp.com/advisory/ntap-20240621-0001/',
-                'https://ubuntu.com/security/notices/USN-6937-1',
-                'https://www.cve.org/CVERecord?id=CVE-2024-4603',
-                'https://www.openssl.org/news/secadv/20240516.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: Excessive time spent checking DSA keys and parameters'
-            },
-            {
-              'cve':  'CVE-2024-4741',
-              'cvss': {
-                'redhat': {
-                  'v3score':  '5.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   'Issue summary: Calling the OpenSSL API function SSL_free_buffers may cause\nmemory to be accessed that was previously freed in some situations\n\nImpact summary: A use after free can have a range of potential consequences such\nas the corruption of valid data, crashes or execution of arbitrary code.\nHowever, only applications that directly call the SSL_free_buffers function are\naffected by this issue. Applications that do not call this function are not\nvulnerable. Our investigations indicate that this function is rarely used by\napplications.\n\nThe SSL_free_buffers function is used to free the internal OpenSSL buffer used\nwhen processing an incoming record from the network. The call is only expected\nto succeed if the buffer is not currently in use. However, two scenarios have\nbeen identified where the buffer is freed even when still in use.\n\nThe first scenario occurs where a record header has been received from the\nnetwork and processed by OpenSSL, but the full record body has not yet arrived.\nIn this case calling SSL_free_buffers will succeed even though a record has only\nbeen partially processed and the buffer is still in use.\n\nThe second scenario occurs where a full record containing application data has\nbeen received and processed by OpenSSL but the application has only read part of\nthis data. Again a call to SSL_free_buffers will succeed even though the buffer\nis still in use.\n\nWhile these scenarios could occur accidentally during normal operation a\nmalicious attacker could attempt to engineer a stituation where this occurs.\nWe are not aware of this issue being actively exploited.\n\nThe FIPS modules in 3.3, 3.2, 3.1 and 3.0 are not affected by this issue.',
-              'diffID':        'sha256:b5902734b682781f128d816229ad15ec369201ddec7177fc18f3a8dcfeb00697',
-              'fixedVersions': [
-                '3.0.14-r0'
-              ],
-              'installedVersion': '3.0.7-r2',
-              'packageName':      'libcrypto3',
-              'purl':             'pkg:apk/alpine/libcrypto3@3.0.7-r2?arch=s390x&distro=3.17.1',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2024:9333',
-                'https://access.redhat.com/security/cve/CVE-2024-4741',
-                'https://bugzilla.redhat.com/2274020',
-                'https://bugzilla.redhat.com/2281029',
-                'https://bugzilla.redhat.com/2283757',
-                'https://bugzilla.redhat.com/2294581',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2274020',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2281029',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2283757',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2294581',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-2511',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-4603',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-4741',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-5535',
-                'https://errata.almalinux.org/9/ALSA-2024-9333.html',
-                'https://errata.rockylinux.org/RLSA-2024:9333',
-                'https://github.com/openssl/openssl/commit/704f725b96aa373ee45ecfb23f6abfe8be8d9177',
-                'https://github.com/openssl/openssl/commit/b3f0eb0a295f58f16ba43ba99dad70d4ee5c437d',
-                'https://github.com/openssl/openssl/commit/c88c3de51020c37e8706bf7a682a162593053aac',
-                'https://github.com/openssl/openssl/commit/e5093133c35ca82874ad83697af76f4b0f7e3bd8',
-                'https://github.openssl.org/openssl/extended-releases/commit/f7a045f3143fc6da2ee66bf52d8df04829590dd4',
-                'https://linux.oracle.com/cve/CVE-2024-4741.html',
-                'https://linux.oracle.com/errata/ELSA-2024-9333.html',
-                'https://lists.debian.org/debian-lts-announce/2024/10/msg00033.html',
-                'https://lists.debian.org/debian-lts-announce/2024/11/msg00000.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2024-4741',
-                'https://security.netapp.com/advisory/ntap-20240621-0004/',
-                'https://ubuntu.com/security/notices/USN-6937-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2024-4741',
-                'https://www.openssl.org/news/secadv/20240528.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: Use After Free with SSL_free_buffers'
-            },
-            {
-              'cve':  'CVE-2024-5535',
-              'cvss': {
-                'redhat': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-125'
-              ],
-              'description':   'Issue summary: Calling the OpenSSL API function SSL_select_next_proto with an\nempty supported client protocols buffer may cause a crash or memory contents to\nbe sent to the peer.\n\nImpact summary: A buffer overread can have a range of potential consequences\nsuch as unexpected application beahviour or a crash. In particular this issue\ncould result in up to 255 bytes of arbitrary private data from memory being sent\nto the peer leading to a loss of confidentiality. However, only applications\nthat directly call the SSL_select_next_proto function with a 0 length list of\nsupported client protocols are affected by this issue. This would normally never\nbe a valid scenario and is typically not under attacker control but may occur by\naccident in the case of a configuration or programming error in the calling\napplication.\n\nThe OpenSSL API function SSL_select_next_proto is typically used by TLS\napplications that support ALPN (Application Layer Protocol Negotiation) or NPN\n(Next Protocol Negotiation). NPN is older, was never standardised and\nis deprecated in favour of ALPN. We believe that ALPN is significantly more\nwidely deployed than NPN. The SSL_select_next_proto function accepts a list of\nprotocols from the server and a list of protocols from the client and returns\nthe first protocol that appears in the server list that also appears in the\nclient list. In the case of no overlap between the two lists it returns the\nfirst item in the client list. In either case it will signal whether an overlap\nbetween the two lists was found. In the case where SSL_select_next_proto is\ncalled with a zero length client list it fails to notice this condition and\nreturns the memory immediately following the client list pointer (and reports\nthat there was no overlap in the lists).\n\nThis function is typically called from a server side application callback for\nALPN or a client side application callback for NPN. In the case of ALPN the list\nof protocols supplied by the client is guaranteed by libssl to never be zero in\nlength. The list of server protocols comes from the application and should never\nnormally be expected to be of zero length. In this case if the\nSSL_select_next_proto function has been called as expected (with the list\nsupplied by the client passed in the client/client_len parameters), then the\napplication will not be vulnerable to this issue. If the application has\naccidentally been configured with a zero length server list, and has\naccidentally passed that zero length server list in the client/client_len\nparameters, and has additionally failed to correctly handle a "no overlap"\nresponse (which would normally result in a handshake failure in ALPN) then it\nwill be vulnerable to this problem.\n\nIn the case of NPN, the protocol permits the client to opportunistically select\na protocol when there is no overlap. OpenSSL returns the first client protocol\nin the no overlap case in support of this. The list of client protocols comes\nfrom the application and should never normally be expected to be of zero length.\nHowever if the SSL_select_next_proto function is accidentally called with a\nclient_len of 0 then an invalid memory pointer will be returned instead. If the\napplication uses this output as the opportunistic protocol then the loss of\nconfidentiality will occur.\n\nThis issue has been assessed as Low severity because applications are most\nlikely to be vulnerable if they are using NPN instead of ALPN - but NPN is not\nwidely used. It also requires an application configuration or programming error.\nFinally, this issue would not typically be under attacker control making active\nexploitation unlikely.\n\nThe FIPS modules in 3.3, 3.2, 3.1 and 3.0 are not affected by this issue.\n\nDue to the low severity of this issue we are not issuing new releases of\nOpenSSL at this time. The fix will be included in the next releases when they\nbecome available.',
-              'diffID':        'sha256:b5902734b682781f128d816229ad15ec369201ddec7177fc18f3a8dcfeb00697',
-              'fixedVersions': [
-                '3.0.14-r0'
-              ],
-              'installedVersion': '3.0.7-r2',
-              'packageName':      'libcrypto3',
-              'purl':             'pkg:apk/alpine/libcrypto3@3.0.7-r2?arch=s390x&distro=3.17.1',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2024/06/27/1',
-                'http://www.openwall.com/lists/oss-security/2024/06/28/4',
-                'http://www.openwall.com/lists/oss-security/2024/08/15/1',
-                'https://access.redhat.com/errata/RHSA-2025:1671',
-                'https://access.redhat.com/security/cve/CVE-2024-5535',
-                'https://bugzilla.redhat.com/2294581',
-                'https://bugzilla.redhat.com/2294676',
-                'https://bugzilla.redhat.com/2301888',
-                'https://bugzilla.redhat.com/2318857',
-                'https://bugzilla.redhat.com/2318858',
-                'https://bugzilla.redhat.com/2318870',
-                'https://bugzilla.redhat.com/2318873',
-                'https://bugzilla.redhat.com/2318874',
-                'https://bugzilla.redhat.com/2318876',
-                'https://bugzilla.redhat.com/2318882',
-                'https://bugzilla.redhat.com/2318883',
-                'https://bugzilla.redhat.com/2318884',
-                'https://bugzilla.redhat.com/2318885',
-                'https://bugzilla.redhat.com/2318886',
-                'https://bugzilla.redhat.com/2318897',
-                'https://bugzilla.redhat.com/2318900',
-                'https://bugzilla.redhat.com/2318905',
-                'https://bugzilla.redhat.com/2318914',
-                'https://bugzilla.redhat.com/2318922',
-                'https://bugzilla.redhat.com/2318923',
-                'https://bugzilla.redhat.com/2318925',
-                'https://bugzilla.redhat.com/2318926',
-                'https://bugzilla.redhat.com/2318927',
-                'https://bugzilla.redhat.com/2331191',
-                'https://bugzilla.redhat.com/2339218',
-                'https://bugzilla.redhat.com/2339220',
-                'https://bugzilla.redhat.com/2339221',
-                'https://bugzilla.redhat.com/2339226',
-                'https://bugzilla.redhat.com/2339231',
-                'https://bugzilla.redhat.com/2339236',
-                'https://bugzilla.redhat.com/2339238',
-                'https://bugzilla.redhat.com/2339243',
-                'https://bugzilla.redhat.com/2339247',
-                'https://bugzilla.redhat.com/2339252',
-                'https://bugzilla.redhat.com/2339259',
-                'https://bugzilla.redhat.com/2339266',
-                'https://bugzilla.redhat.com/2339270',
-                'https://bugzilla.redhat.com/2339271',
-                'https://bugzilla.redhat.com/2339275',
-                'https://bugzilla.redhat.com/2339277',
-                'https://bugzilla.redhat.com/2339281',
-                'https://bugzilla.redhat.com/2339284',
-                'https://bugzilla.redhat.com/2339291',
-                'https://bugzilla.redhat.com/2339293',
-                'https://bugzilla.redhat.com/2339295',
-                'https://bugzilla.redhat.com/2339299',
-                'https://bugzilla.redhat.com/2339300',
-                'https://bugzilla.redhat.com/2339304',
-                'https://bugzilla.redhat.com/2339305',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2274020',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2281029',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2283757',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2294581',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-2511',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-4603',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-4741',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-5535',
-                'https://errata.almalinux.org/9/ALSA-2025-1671.html',
-                'https://errata.rockylinux.org/RLSA-2024:9333',
-                'https://github.com/openssl/openssl/commit/4ada436a1946cbb24db5ab4ca082b69c1bc10f37',
-                'https://github.com/openssl/openssl/commit/99fb785a5f85315b95288921a321a935ea29a51e',
-                'https://github.com/openssl/openssl/commit/cf6f91f6121f4db167405db2f0de410a456f260c',
-                'https://github.com/openssl/openssl/commit/e86ac436f0bd54d4517745483e2315650fae7b2c',
-                'https://github.openssl.org/openssl/extended-releases/commit/9947251413065a05189a63c9b7a6c1d4e224c21c',
-                'https://github.openssl.org/openssl/extended-releases/commit/b78ec0824da857223486660177d3b1f255c65d87',
-                'https://linux.oracle.com/cve/CVE-2024-5535.html',
-                'https://linux.oracle.com/errata/ELSA-2025-1673.html',
-                'https://lists.debian.org/debian-lts-announce/2024/10/msg00033.html',
-                'https://lists.debian.org/debian-lts-announce/2024/11/msg00000.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2024-5535',
-                'https://openssl.org/news/secadv/20240627.txt',
-                'https://security.netapp.com/advisory/ntap-20240712-0005/',
-                'https://security.netapp.com/advisory/ntap-20241025-0006/',
-                'https://security.netapp.com/advisory/ntap-20241025-0010/',
-                'https://ubuntu.com/security/notices/USN-6937-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2024-5535',
-                'https://www.openssl.org/news/secadv/20240627.txt',
-                'https://www.oracle.com/security-alerts/cpuoct2024.html#AppendixMSQL'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: SSL_select_next_proto buffer overread'
-            },
-            {
-              'cve':  'CVE-2024-2511',
-              'cvss': {
-                'redhat': {
-                  'v3score':  '3.7',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L'
-                }
-              },
-              'cwes': [
-                'CWE-1325'
-              ],
-              'description':   'Issue summary: Some non-default TLS server configurations can cause unbounded\nmemory growth when processing TLSv1.3 sessions\n\nImpact summary: An attacker may exploit certain server configurations to trigger\nunbounded memory growth that would lead to a Denial of Service\n\nThis problem can occur in TLSv1.3 if the non-default SSL_OP_NO_TICKET option is\nbeing used (but not if early_data support is also configured and the default\nanti-replay protection is in use). In this case, under certain conditions, the\nsession cache can get into an incorrect state and it will fail to flush properly\nas it fills. The session cache will continue to grow in an unbounded manner. A\nmalicious client could deliberately create the scenario for this failure to\nforce a Denial of Service. It may also happen by accident in normal operation.\n\nThis issue only affects TLS servers supporting TLSv1.3. It does not affect TLS\nclients.\n\nThe FIPS modules in 3.2, 3.1 and 3.0 are not affected by this issue. OpenSSL\n1.0.2 is also not affected by this issue.',
-              'diffID':        'sha256:b5902734b682781f128d816229ad15ec369201ddec7177fc18f3a8dcfeb00697',
-              'fixedVersions': [
-                '3.0.12-r5'
-              ],
-              'installedVersion': '3.0.7-r2',
-              'packageName':      'libcrypto3',
-              'purl':             'pkg:apk/alpine/libcrypto3@3.0.7-r2?arch=s390x&distro=3.17.1',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2024/04/08/5',
-                'https://access.redhat.com/errata/RHSA-2024:9333',
-                'https://access.redhat.com/security/cve/CVE-2024-2511',
-                'https://bugzilla.redhat.com/2274020',
-                'https://bugzilla.redhat.com/2281029',
-                'https://bugzilla.redhat.com/2283757',
-                'https://bugzilla.redhat.com/2294581',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2274020',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2281029',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2283757',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2294581',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-2511',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-4603',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-4741',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-5535',
-                'https://errata.almalinux.org/9/ALSA-2024-9333.html',
-                'https://errata.rockylinux.org/RLSA-2024:9333',
-                'https://github.com/openssl/openssl/commit/7e4d731b1c07201ad9374c1cd9ac5263bdf35bce',
-                'https://github.com/openssl/openssl/commit/b52867a9f618bb955bed2a3ce3db4d4f97ed8e5d',
-                'https://github.com/openssl/openssl/commit/e9d7083e241670332e0443da0f0d4ffb52829f08',
-                'https://github.openssl.org/openssl/extended-releases/commit/5f8d25770ae6437db119dfc951e207271a326640',
-                'https://linux.oracle.com/cve/CVE-2024-2511.html',
-                'https://linux.oracle.com/errata/ELSA-2024-9333.html',
-                'https://lists.debian.org/debian-lts-announce/2024/10/msg00033.html',
-                'https://lists.debian.org/debian-lts-announce/2024/11/msg00000.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2024-2511',
-                'https://security.netapp.com/advisory/ntap-20240503-0013/',
-                'https://ubuntu.com/security/notices/USN-6937-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2024-2511',
-                'https://www.openssl.org/news/secadv/20240408.txt',
-                'https://www.openssl.org/news/vulnerabilities.html'
-              ],
-              'severity':   'LOW',
-              'suppressed': false,
-              'title':      'openssl: Unbounded memory growth with session handling in TLSv1.3'
-            },
-            {
-              'cve':  'CVE-2024-9143',
-              'cvss': {
-                'redhat': {
-                  'v3score':  '3.7',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L'
-                }
-              },
-              'cwes': [
-                'CWE-125',
-                'CWE-787'
-              ],
-              'description':   "Issue summary: Use of the low-level GF(2^m) elliptic curve APIs with untrusted\nexplicit values for the field polynomial can lead to out-of-bounds memory reads\nor writes.\n\nImpact summary: Out of bound memory writes can lead to an application crash or\neven a possibility of a remote code execution, however, in all the protocols\ninvolving Elliptic Curve Cryptography that we're aware of, either only \"named\ncurves\" are supported, or, if explicit curve parameters are supported, they\nspecify an X9.62 encoding of binary (GF(2^m)) curves that can't represent\nproblematic input values. Thus the likelihood of existence of a vulnerable\napplication is low.\n\nIn particular, the X9.62 encoding is used for ECC keys in X.509 certificates,\nso problematic inputs cannot occur in the context of processing X.509\ncertificates.  Any problematic use-cases would have to be using an \"exotic\"\ncurve encoding.\n\nThe affected APIs include: EC_GROUP_new_curve_GF2m(), EC_GROUP_new_from_params(),\nand various supporting BN_GF2m_*() functions.\n\nApplications working with \"exotic\" explicit binary (GF(2^m)) curve parameters,\nthat make it possible to represent invalid field polynomials with a zero\nconstant term, via the above or similar APIs, may terminate abruptly as a\nresult of reading or writing outside of array bounds.  Remote code execution\ncannot easily be ruled out.\n\nThe FIPS modules in 3.3, 3.2, 3.1 and 3.0 are not affected by this issue.",
-              'diffID':        'sha256:b5902734b682781f128d816229ad15ec369201ddec7177fc18f3a8dcfeb00697',
-              'fixedVersions': [
-                '3.0.15-r1'
-              ],
-              'installedVersion': '3.0.7-r2',
-              'packageName':      'libcrypto3',
-              'purl':             'pkg:apk/alpine/libcrypto3@3.0.7-r2?arch=s390x&distro=3.17.1',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2024/10/16/1',
-                'http://www.openwall.com/lists/oss-security/2024/10/23/1',
-                'http://www.openwall.com/lists/oss-security/2024/10/24/1',
-                'https://access.redhat.com/security/cve/CVE-2024-9143',
-                'https://github.com/openssl/openssl/commit/72ae83ad214d2eef262461365a1975707f862712',
-                'https://github.com/openssl/openssl/commit/bc7e04d7c8d509fb78fc0e285aa948fb0da04700',
-                'https://github.com/openssl/openssl/commit/c0d3e4d32d2805f49bec30547f225bc4d092e1f4',
-                'https://github.com/openssl/openssl/commit/fdf6723362ca51bd883295efe206cb5b1cfa5154',
-                'https://github.openssl.org/openssl/extended-releases/commit/8efc0cbaa8ebba8e116f7b81a876a4123594d86a',
-                'https://github.openssl.org/openssl/extended-releases/commit/9d576994cec2b7aa37a91740ea7e680810957e41',
-                'https://lists.debian.org/debian-lts-announce/2024/10/msg00033.html',
-                'https://lists.debian.org/debian-lts-announce/2024/11/msg00000.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2024-9143',
-                'https://openssl-library.org/news/secadv/20241016.txt',
-                'https://security.netapp.com/advisory/ntap-20241101-0001/',
-                'https://ubuntu.com/security/notices/USN-7264-1',
-                'https://ubuntu.com/security/notices/USN-7278-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2024-9143'
-              ],
-              'severity':   'LOW',
-              'suppressed': false,
-              'title':      'openssl: Low-level invalid GF(2^m) parameters lead to OOB memory access'
-            },
-            {
-              'cve':  'CVE-2022-4450',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'nvd': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-415'
-              ],
-              'description':   'The function PEM_read_bio_ex() reads a PEM file from a BIO and parses and\ndecodes the "name" (e.g. "CERTIFICATE"), any header data and the payload data.\nIf the function succeeds then the "name_out", "header" and "data" arguments are\npopulated with pointers to buffers containing the relevant decoded data. The\ncaller is responsible for freeing those buffers. It is possible to construct a\nPEM file that results in 0 bytes of payload data. In this case PEM_read_bio_ex()\nwill return a failure code but will populate the header argument with a pointer\nto a buffer that has already been freed. If the caller also frees this buffer\nthen a double free will occur. This will most likely lead to a crash. This\ncould be exploited by an attacker who has the ability to supply malicious PEM\nfiles for parsing to achieve a denial of service attack.\n\nThe functions PEM_read_bio() and PEM_read() are simple wrappers around\nPEM_read_bio_ex() and therefore these functions are also directly affected.\n\nThese functions are also called indirectly by a number of other OpenSSL\nfunctions including PEM_X509_INFO_read_bio_ex() and\nSSL_CTX_use_serverinfo_file() which are also vulnerable. Some OpenSSL internal\nuses of these functions are not vulnerable because the caller does not free the\nheader argument if PEM_read_bio_ex() returns a failure code. These locations\ninclude the PEM_read_bio_TYPE() functions as well as the decoders introduced in\nOpenSSL 3.0.\n\nThe OpenSSL asn1parse command line application is also impacted by this issue.',
-              'diffID':        'sha256:b5902734b682781f128d816229ad15ec369201ddec7177fc18f3a8dcfeb00697',
-              'fixedVersions': [
-                '3.0.8-r0'
-              ],
-              'installedVersion': '3.0.7-r2',
-              'packageName':      'libssl3',
-              'purl':             'pkg:apk/alpine/libssl3@3.0.7-r2?arch=s390x&distro=3.17.1',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2023:2165',
-                'https://access.redhat.com/security/cve/CVE-2022-4450',
-                'https://bugzilla.redhat.com/1960321',
-                'https://bugzilla.redhat.com/2164440',
-                'https://bugzilla.redhat.com/2164487',
-                'https://bugzilla.redhat.com/2164492',
-                'https://bugzilla.redhat.com/2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144000',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144003',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144006',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144008',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144010',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144012',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144015',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144017',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144019',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2145170',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2158412',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164440',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164487',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164488',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164492',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164497',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164499',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164500',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4203',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4304',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4450',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0215',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0216',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0217',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0286',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0401',
-                'https://errata.almalinux.org/9/ALSA-2023-2165.html',
-                'https://errata.rockylinux.org/RLSA-2023:0946',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=63bcf189be73a9cc1264059bed6f57974be74a83',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=bbcf509bd046b34cca19c766bbddc31683d0858b',
-                'https://linux.oracle.com/cve/CVE-2022-4450.html',
-                'https://linux.oracle.com/errata/ELSA-2023-32791.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2022-4450',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0003',
-                'https://rustsec.org/advisories/RUSTSEC-2023-0010.html',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://ubuntu.com/security/notices/USN-5844-1',
-                'https://ubuntu.com/security/notices/USN-6564-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2022-4450',
-                'https://www.openssl.org/news/secadv/20230207.txt'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: double free after calling PEM_read_bio_ex'
-            },
-            {
-              'cve':  'CVE-2023-0215',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'nvd': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   'The public API function BIO_new_NDEF is a helper function used for streaming\nASN.1 data via a BIO. It is primarily used internally to OpenSSL to support the\nSMIME, CMS and PKCS7 streaming capabilities, but may also be called directly by\nend user applications.\n\nThe function receives a BIO from the caller, prepends a new BIO_f_asn1 filter\nBIO onto the front of it to form a BIO chain, and then returns the new head of\nthe BIO chain to the caller. Under certain conditions, for example if a CMS\nrecipient public key is invalid, the new filter BIO is freed and the function\nreturns a NULL result indicating a failure. However, in this case, the BIO chain\nis not properly cleaned up and the BIO passed by the caller still retains\ninternal pointers to the previously freed filter BIO. If the caller then goes on\nto call BIO_pop() on the BIO then a use-after-free will occur. This will most\nlikely result in a crash.\n\n\n\nThis scenario occurs directly in the internal function B64_write_ASN1() which\nmay cause BIO_new_NDEF() to be called and will subsequently call BIO_pop() on\nthe BIO. This internal function is in turn called by the public API functions\nPEM_write_bio_ASN1_stream, PEM_write_bio_CMS_stream, PEM_write_bio_PKCS7_stream,\nSMIME_write_ASN1, SMIME_write_CMS and SMIME_write_PKCS7.\n\nOther public API functions that may be impacted by this include\ni2d_ASN1_bio_stream, BIO_new_CMS, BIO_new_PKCS7, i2d_CMS_bio_stream and\ni2d_PKCS7_bio_stream.\n\nThe OpenSSL cms and smime command line applications are similarly affected.',
-              'diffID':        'sha256:b5902734b682781f128d816229ad15ec369201ddec7177fc18f3a8dcfeb00697',
-              'fixedVersions': [
-                '3.0.8-r0'
-              ],
-              'installedVersion': '3.0.7-r2',
-              'packageName':      'libssl3',
-              'purl':             'pkg:apk/alpine/libssl3@3.0.7-r2?arch=s390x&distro=3.17.1',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2023:2165',
-                'https://access.redhat.com/security/cve/CVE-2023-0215',
-                'https://bugzilla.redhat.com/1960321',
-                'https://bugzilla.redhat.com/2164440',
-                'https://bugzilla.redhat.com/2164487',
-                'https://bugzilla.redhat.com/2164492',
-                'https://bugzilla.redhat.com/2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144000',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144003',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144006',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144008',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144010',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144012',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144015',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144017',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144019',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2145170',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2158412',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164440',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164487',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164488',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164492',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164497',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164499',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164500',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4203',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4304',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4450',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0215',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0216',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0217',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0286',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0401',
-                'https://errata.almalinux.org/9/ALSA-2023-2165.html',
-                'https://errata.rockylinux.org/RLSA-2023:0946',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=8818064ce3c3c0f1b740a5aaba2a987e75bfbafd',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=9816136fe31d92ace4037d5da5257f763aeeb4eb',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=c3829dd8825c654652201e16f8a0a0c46ee3f344',
-                'https://linux.oracle.com/cve/CVE-2023-0215.html',
-                'https://linux.oracle.com/errata/ELSA-2023-32791.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-0215',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0003',
-                'https://rustsec.org/advisories/RUSTSEC-2023-0009.html',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://security.netapp.com/advisory/ntap-20230427-0007',
-                'https://security.netapp.com/advisory/ntap-20230427-0007/',
-                'https://security.netapp.com/advisory/ntap-20230427-0009',
-                'https://security.netapp.com/advisory/ntap-20230427-0009/',
-                'https://security.netapp.com/advisory/ntap-20240621-0006',
-                'https://security.netapp.com/advisory/ntap-20240621-0006/',
-                'https://ubuntu.com/security/notices/USN-5844-1',
-                'https://ubuntu.com/security/notices/USN-5845-1',
-                'https://ubuntu.com/security/notices/USN-5845-2',
-                'https://ubuntu.com/security/notices/USN-6564-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-0215',
-                'https://www.openssl.org/news/secadv/20230207.txt'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: use-after-free following BIO_new_NDEF'
-            },
-            {
-              'cve':  'CVE-2023-0216',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'nvd': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-476'
-              ],
-              'description':   'An invalid pointer dereference on read can be triggered when an\napplication tries to load malformed PKCS7 data with the\nd2i_PKCS7(), d2i_PKCS7_bio() or d2i_PKCS7_fp() functions.\n\nThe result of the dereference is an application crash which could\nlead to a denial of service attack. The TLS implementation in OpenSSL\ndoes not call this function however third party applications might\ncall these functions on untrusted data.',
-              'diffID':        'sha256:b5902734b682781f128d816229ad15ec369201ddec7177fc18f3a8dcfeb00697',
-              'fixedVersions': [
-                '3.0.8-r0'
-              ],
-              'installedVersion': '3.0.7-r2',
-              'packageName':      'libssl3',
-              'purl':             'pkg:apk/alpine/libssl3@3.0.7-r2?arch=s390x&distro=3.17.1',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2023:0946',
-                'https://access.redhat.com/security/cve/CVE-2023-0216',
-                'https://bugzilla.redhat.com/2164440',
-                'https://bugzilla.redhat.com/2164487',
-                'https://bugzilla.redhat.com/2164488',
-                'https://bugzilla.redhat.com/2164492',
-                'https://bugzilla.redhat.com/2164494',
-                'https://bugzilla.redhat.com/2164497',
-                'https://bugzilla.redhat.com/2164499',
-                'https://bugzilla.redhat.com/2164500',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144000',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144003',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144006',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144008',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144010',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144012',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144015',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144017',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144019',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2145170',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2158412',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164440',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164487',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164488',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164492',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164497',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164499',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164500',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4203',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4304',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4450',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0215',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0216',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0217',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0286',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0401',
-                'https://errata.almalinux.org/9/ALSA-2023-0946.html',
-                'https://errata.rockylinux.org/RLSA-2023:0946',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=934a04f0e775309cadbef0aa6b9692e1b12a76c6',
-                'https://linux.oracle.com/cve/CVE-2023-0216.html',
-                'https://linux.oracle.com/errata/ELSA-2023-12152.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-0216',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0003',
-                'https://rustsec.org/advisories/RUSTSEC-2023-0011.html',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://ubuntu.com/security/notices/USN-5844-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-0216',
-                'https://www.openssl.org/news/secadv/20230207.txt'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: invalid pointer dereference in d2i_PKCS7 functions'
-            },
-            {
-              'cve':  'CVE-2023-0217',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'nvd': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-476'
-              ],
-              'description':   'An invalid pointer dereference on read can be triggered when an\napplication tries to check a malformed DSA public key by the\nEVP_PKEY_public_check() function. This will most likely lead\nto an application crash. This function can be called on public\nkeys supplied from untrusted sources which could allow an attacker\nto cause a denial of service attack.\n\nThe TLS implementation in OpenSSL does not call this function\nbut applications might call the function if there are additional\nsecurity requirements imposed by standards such as FIPS 140-3.',
-              'diffID':        'sha256:b5902734b682781f128d816229ad15ec369201ddec7177fc18f3a8dcfeb00697',
-              'fixedVersions': [
-                '3.0.8-r0'
-              ],
-              'installedVersion': '3.0.7-r2',
-              'packageName':      'libssl3',
-              'purl':             'pkg:apk/alpine/libssl3@3.0.7-r2?arch=s390x&distro=3.17.1',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2023:0946',
-                'https://access.redhat.com/security/cve/CVE-2023-0217',
-                'https://bugzilla.redhat.com/2164440',
-                'https://bugzilla.redhat.com/2164487',
-                'https://bugzilla.redhat.com/2164488',
-                'https://bugzilla.redhat.com/2164492',
-                'https://bugzilla.redhat.com/2164494',
-                'https://bugzilla.redhat.com/2164497',
-                'https://bugzilla.redhat.com/2164499',
-                'https://bugzilla.redhat.com/2164500',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144000',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144003',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144006',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144008',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144010',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144012',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144015',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144017',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144019',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2145170',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2158412',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164440',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164487',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164488',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164492',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164497',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164499',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164500',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4203',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4304',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4450',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0215',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0216',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0217',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0286',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0401',
-                'https://errata.almalinux.org/9/ALSA-2023-0946.html',
-                'https://errata.rockylinux.org/RLSA-2023:0946',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=23985bac83fd50c8e29431009302b5442f985096',
-                'https://linux.oracle.com/cve/CVE-2023-0217.html',
-                'https://linux.oracle.com/errata/ELSA-2023-12152.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-0217',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0003',
-                'https://rustsec.org/advisories/RUSTSEC-2023-0012.html',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://ubuntu.com/security/notices/USN-5844-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-0217',
-                'https://www.openssl.org/news/secadv/20230207.txt'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: NULL dereference validating DSA public key'
-            },
-            {
-              'cve':  'CVE-2023-0286',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '7.4',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H'
-                },
-                'nvd': {
-                  'v3score':  '7.4',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.4',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-843'
-              ],
-              'description':   'There is a type confusion vulnerability relating to X.400 address processing\ninside an X.509 GeneralName. X.400 addresses were parsed as an ASN1_STRING but\nthe public structure definition for GENERAL_NAME incorrectly specified the type\nof the x400Address field as ASN1_TYPE. This field is subsequently interpreted by\nthe OpenSSL function GENERAL_NAME_cmp as an ASN1_TYPE rather than an\nASN1_STRING.\n\nWhen CRL checking is enabled (i.e. the application sets the\nX509_V_FLAG_CRL_CHECK flag), this vulnerability may allow an attacker to pass\narbitrary pointers to a memcmp call, enabling them to read memory contents or\nenact a denial of service. In most cases, the attack requires the attacker to\nprovide both the certificate chain and CRL, neither of which need to have a\nvalid signature. If the attacker only controls one of these inputs, the other\ninput must already contain an X.400 address as a CRL distribution point, which\nis uncommon. As such, this vulnerability is most likely to only affect\napplications which have implemented their own functionality for retrieving CRLs\nover a network.',
-              'diffID':        'sha256:b5902734b682781f128d816229ad15ec369201ddec7177fc18f3a8dcfeb00697',
-              'fixedVersions': [
-                '3.0.8-r0'
-              ],
-              'installedVersion': '3.0.7-r2',
-              'packageName':      'libssl3',
-              'purl':             'pkg:apk/alpine/libssl3@3.0.7-r2?arch=s390x&distro=3.17.1',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2025:7937',
-                'https://access.redhat.com/security/cve/CVE-2023-0286',
-                'https://access.redhat.com/security/cve/cve-2023-0286',
-                'https://bugzilla.redhat.com/2164440',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144000',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144003',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144006',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144008',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144010',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144012',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144015',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144017',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144019',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2145170',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2158412',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164440',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164487',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164488',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164492',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164497',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164499',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164500',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4203',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4304',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4450',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0215',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0216',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0217',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0286',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0401',
-                'https://errata.almalinux.org/9/ALSA-2025-7937.html',
-                'https://errata.rockylinux.org/RLSA-2023:0946',
-                'https://ftp.openbsd.org/pub/OpenBSD/LibreSSL/libressl-3.6.2-relnotes.txt',
-                'https://ftp.openbsd.org/pub/OpenBSD/patches/7.2/common/018_x509.patch.sig',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=2c6c9d439b484e1ba9830d8454a34fa4f80fdfe9',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=2f7530077e0ef79d98718138716bc51ca0cad658',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=fd2af07dc083a350c959147097003a14a5e8ac4d',
-                'https://github.com/pyca/cryptography',
-                'https://github.com/pyca/cryptography/security/advisories/GHSA-x4qr-2fvf-3mr5',
-                'https://linux.oracle.com/cve/CVE-2023-0286.html',
-                'https://linux.oracle.com/errata/ELSA-2025-7937.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-0286',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0003',
-                'https://rustsec.org/advisories/RUSTSEC-2023-0006.html',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://ubuntu.com/security/notices/USN-5844-1',
-                'https://ubuntu.com/security/notices/USN-5845-1',
-                'https://ubuntu.com/security/notices/USN-5845-2',
-                'https://ubuntu.com/security/notices/USN-6564-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-0286',
-                'https://www.openssl.org/news/secadv/20230207.txt'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: X.400 address type confusion in X.509 GeneralName'
-            },
-            {
-              'cve':  'CVE-2023-0401',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'nvd': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-476'
-              ],
-              'description':   'A NULL pointer can be dereferenced when signatures are being\nverified on PKCS7 signed or signedAndEnveloped data. In case the hash\nalgorithm used for the signature is known to the OpenSSL library but\nthe implementation of the hash algorithm is not available the digest\ninitialization will fail. There is a missing check for the return\nvalue from the initialization function which later leads to invalid\nusage of the digest API most likely leading to a crash.\n\nThe unavailability of an algorithm can be caused by using FIPS\nenabled configuration of providers or more commonly by not loading\nthe legacy provider.\n\nPKCS7 data is processed by the SMIME library calls and also by the\ntime stamp (TS) library calls. The TLS implementation in OpenSSL does\nnot call these functions however third party applications would be\naffected if they call these functions to verify signatures on untrusted\ndata.',
-              'diffID':        'sha256:b5902734b682781f128d816229ad15ec369201ddec7177fc18f3a8dcfeb00697',
-              'fixedVersions': [
-                '3.0.8-r0'
-              ],
-              'installedVersion': '3.0.7-r2',
-              'packageName':      'libssl3',
-              'purl':             'pkg:apk/alpine/libssl3@3.0.7-r2?arch=s390x&distro=3.17.1',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2023:0946',
-                'https://access.redhat.com/security/cve/CVE-2023-0401',
-                'https://bugzilla.redhat.com/2164440',
-                'https://bugzilla.redhat.com/2164487',
-                'https://bugzilla.redhat.com/2164488',
-                'https://bugzilla.redhat.com/2164492',
-                'https://bugzilla.redhat.com/2164494',
-                'https://bugzilla.redhat.com/2164497',
-                'https://bugzilla.redhat.com/2164499',
-                'https://bugzilla.redhat.com/2164500',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144000',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144003',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144006',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144008',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144010',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144012',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144015',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144017',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144019',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2145170',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2158412',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164440',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164487',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164488',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164492',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164497',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164499',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164500',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4203',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4304',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4450',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0215',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0216',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0217',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0286',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0401',
-                'https://errata.almalinux.org/9/ALSA-2023-0946.html',
-                'https://errata.rockylinux.org/RLSA-2023:0946',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=d3b6dfd70db844c4499bec6ad6601623a565e674',
-                'https://github.com/alexcrichton/openssl-src-rs',
-                'https://linux.oracle.com/cve/CVE-2023-0401.html',
-                'https://linux.oracle.com/errata/ELSA-2023-12152.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-0401',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0003',
-                'https://rustsec.org/advisories/RUSTSEC-2023-0013.html',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://ubuntu.com/security/notices/USN-5844-1',
-                'https://ubuntu.com/security/notices/USN-6564-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-0401',
-                'https://www.openssl.org/news/secadv/20230207.txt'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: NULL dereference during PKCS7 data verification'
-            },
-            {
-              'cve':  'CVE-2023-0464',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-295'
-              ],
-              'description':   "A security vulnerability has been identified in all supported versions\n\nof OpenSSL related to the verification of X.509 certificate chains\nthat include policy constraints.  Attackers may be able to exploit this\nvulnerability by creating a malicious certificate chain that triggers\nexponential use of computational resources, leading to a denial-of-service\n(DoS) attack on affected systems.\n\nPolicy processing is disabled by default but can be enabled by passing\nthe `-policy' argument to the command line utilities or by calling the\n`X509_VERIFY_PARAM_set1_policies()' function.",
-              'diffID':        'sha256:b5902734b682781f128d816229ad15ec369201ddec7177fc18f3a8dcfeb00697',
-              'fixedVersions': [
-                '3.0.8-r1'
-              ],
-              'installedVersion': '3.0.7-r2',
-              'packageName':      'libssl3',
-              'purl':             'pkg:apk/alpine/libssl3@3.0.7-r2?arch=s390x&distro=3.17.1',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2023:3722',
-                'https://access.redhat.com/security/cve/CVE-2023-0464',
-                'https://bugzilla.redhat.com/2181082',
-                'https://bugzilla.redhat.com/2182561',
-                'https://bugzilla.redhat.com/2182565',
-                'https://bugzilla.redhat.com/2188461',
-                'https://bugzilla.redhat.com/2207947',
-                'https://errata.almalinux.org/9/ALSA-2023-3722.html',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=2017771e2db3e2b96f89bbe8766c3209f6a99545',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=2dcd4f1e3115f38cefa43e3efbe9b801c27e642e',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=879f7080d7e141f415c79eaa3a8ac4a3dad0348b',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=959c59c7a0164117e7f8366466a32bb1f8d77ff1',
-                'https://linux.oracle.com/cve/CVE-2023-0464.html',
-                'https://linux.oracle.com/errata/ELSA-2023-3722.html',
-                'https://lists.debian.org/debian-lts-announce/2023/06/msg00011.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-0464',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://security.netapp.com/advisory/ntap-20230406-0006/',
-                'https://security.netapp.com/advisory/ntap-20240621-0006/',
-                'https://ubuntu.com/security/notices/USN-6039-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.couchbase.com/alerts/',
-                'https://www.cve.org/CVERecord?id=CVE-2023-0464',
-                'https://www.debian.org/security/2023/dsa-5417',
-                'https://www.openssl.org/news/secadv/20230322.txt'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: Denial of service by excessive resource usage in verifying X509 policy constraints'
-            },
-            {
-              'cve':  'CVE-2023-5363',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N'
-                },
-                'redhat': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-684'
-              ],
-              'description':   "Issue summary: A bug has been identified in the processing of key and\ninitialisation vector (IV) lengths.  This can lead to potential truncation\nor overruns during the initialisation of some symmetric ciphers.\n\nImpact summary: A truncation in the IV can result in non-uniqueness,\nwhich could result in loss of confidentiality for some cipher modes.\n\nWhen calling EVP_EncryptInit_ex2(), EVP_DecryptInit_ex2() or\nEVP_CipherInit_ex2() the provided OSSL_PARAM array is processed after\nthe key and IV have been established.  Any alterations to the key length,\nvia the \"keylen\" parameter or the IV length, via the \"ivlen\" parameter,\nwithin the OSSL_PARAM array will not take effect as intended, potentially\ncausing truncation or overreading of these values.  The following ciphers\nand cipher modes are impacted: RC2, RC4, RC5, CCM, GCM and OCB.\n\nFor the CCM, GCM and OCB cipher modes, truncation of the IV can result in\nloss of confidentiality.  For example, when following NIST's SP 800-38D\nsection 8.2.1 guidance for constructing a deterministic IV for AES in\nGCM mode, truncation of the counter portion could lead to IV reuse.\n\nBoth truncations and overruns of the key and overruns of the IV will\nproduce incorrect results and could, in some cases, trigger a memory\nexception.  However, these issues are not currently assessed as security\ncritical.\n\nChanging the key and/or IV lengths is not considered to be a common operation\nand the vulnerable API was recently introduced. Furthermore it is likely that\napplication developers will have spotted this problem during testing since\ndecryption would fail unless both peers in the communication were similarly\nvulnerable. For these reasons we expect the probability of an application being\nvulnerable to this to be quite low. However if an application is vulnerable then\nthis issue is considered very serious. For these reasons we have assessed this\nissue as Moderate severity overall.\n\nThe OpenSSL SSL/TLS implementation is not affected by this issue.\n\nThe OpenSSL 3.0 and 3.1 FIPS providers are not affected by this because\nthe issue lies outside of the FIPS provider boundary.\n\nOpenSSL 3.1 and 3.0 are vulnerable to this issue.",
-              'diffID':        'sha256:b5902734b682781f128d816229ad15ec369201ddec7177fc18f3a8dcfeb00697',
-              'fixedVersions': [
-                '3.0.12-r0'
-              ],
-              'installedVersion': '3.0.7-r2',
-              'packageName':      'libssl3',
-              'purl':             'pkg:apk/alpine/libssl3@3.0.7-r2?arch=s390x&distro=3.17.1',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2023/10/24/1',
-                'https://access.redhat.com/errata/RHSA-2024:0310',
-                'https://access.redhat.com/security/cve/CVE-2023-5363',
-                'https://bugzilla.redhat.com/2243839',
-                'https://errata.almalinux.org/9/ALSA-2024-0310.html',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=0df40630850fb2740e6be6890bb905d3fc623b2d',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=5f69f5c65e483928c4b28ed16af6e5742929f1ee',
-                'https://linux.oracle.com/cve/CVE-2023-5363.html',
-                'https://linux.oracle.com/errata/ELSA-2024-12093.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-5363',
-                'https://security.netapp.com/advisory/ntap-20231027-0010/',
-                'https://security.netapp.com/advisory/ntap-20240201-0003/',
-                'https://security.netapp.com/advisory/ntap-20240201-0004/',
-                'https://security.netapp.com/advisory/ntap-20241108-0002/',
-                'https://ubuntu.com/security/notices/USN-6450-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-5363',
-                'https://www.debian.org/security/2023/dsa-5532',
-                'https://www.openssl.org/news/secadv/20231024.txt'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: Incorrect cipher key and IV length processing'
-            },
-            {
-              'cve':  'CVE-2024-6119',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-843'
-              ],
-              'description':   "Issue summary: Applications performing certificate name checks (e.g., TLS\nclients checking server certificates) may attempt to read an invalid memory\naddress resulting in abnormal termination of the application process.\n\nImpact summary: Abnormal termination of an application can a cause a denial of\nservice.\n\nApplications performing certificate name checks (e.g., TLS clients checking\nserver certificates) may attempt to read an invalid memory address when\ncomparing the expected name with an `otherName` subject alternative name of an\nX.509 certificate. This may result in an exception that terminates the\napplication program.\n\nNote that basic certificate chain validation (signatures, dates, ...) is not\naffected, the denial of service can occur only when the application also\nspecifies an expected DNS name, Email address or IP address.\n\nTLS servers rarely solicit client certificates, and even when they do, they\ngenerally don't perform a name check against a reference identifier (expected\nidentity), but rather extract the presented identity after checking the\ncertificate chain.  So TLS servers are generally not affected and the severity\nof the issue is Moderate.\n\nThe FIPS modules in 3.3, 3.2, 3.1 and 3.0 are not affected by this issue.",
-              'diffID':        'sha256:b5902734b682781f128d816229ad15ec369201ddec7177fc18f3a8dcfeb00697',
-              'fixedVersions': [
-                '3.0.15-r0'
-              ],
-              'installedVersion': '3.0.7-r2',
-              'packageName':      'libssl3',
-              'purl':             'pkg:apk/alpine/libssl3@3.0.7-r2?arch=s390x&distro=3.17.1',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2024/09/03/4',
-                'https://access.redhat.com/errata/RHSA-2024:8935',
-                'https://access.redhat.com/security/cve/CVE-2024-6119',
-                'https://bugzilla.redhat.com/2306158',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2306158',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-6119',
-                'https://errata.almalinux.org/9/ALSA-2024-8935.html',
-                'https://errata.rockylinux.org/RLSA-2024:6783',
-                'https://github.com/openssl/openssl/commit/05f360d9e849a1b277db628f1f13083a7f8dd04f',
-                'https://github.com/openssl/openssl/commit/06d1dc3fa96a2ba5a3e22735a033012aadc9f0d6',
-                'https://github.com/openssl/openssl/commit/621f3729831b05ee828a3203eddb621d014ff2b2',
-                'https://github.com/openssl/openssl/commit/7dfcee2cd2a63b2c64b9b4b0850be64cb695b0a0',
-                'https://github.com/openssl/openssl/security/advisories/GHSA-5qrj-vq78-58fj',
-                'https://linux.oracle.com/cve/CVE-2024-6119.html',
-                'https://linux.oracle.com/errata/ELSA-2024-8935.html',
-                'https://lists.freebsd.org/archives/freebsd-security/2024-September/000303.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2024-6119',
-                'https://openssl-library.org/news/secadv/20240903.txt',
-                'https://security.netapp.com/advisory/ntap-20240912-0001/',
-                'https://ubuntu.com/security/notices/USN-6986-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2024-6119'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: Possible denial of service in X.509 name checks'
-            },
-            {
-              'cve':  'CVE-2022-4203',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '9.1',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H'
-                },
-                'nvd': {
-                  'v3score':  '4.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '4.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-125'
-              ],
-              'description':   'A read buffer overrun can be triggered in X.509 certificate verification,\nspecifically in name constraint checking. Note that this occurs\nafter certificate chain signature verification and requires either a\nCA to have signed the malicious certificate or for the application to\ncontinue certificate verification despite failure to construct a path\nto a trusted issuer.\n\nThe read buffer overrun might result in a crash which could lead to\na denial of service attack. In theory it could also result in the disclosure\nof private memory contents (such as private keys, or sensitive plaintext)\nalthough we are not aware of any working exploit leading to memory\ncontents disclosure as of the time of release of this advisory.\n\nIn a TLS client, this can be triggered by connecting to a malicious\nserver. In a TLS server, this can be triggered if the server requests\nclient authentication and a malicious client connects.',
-              'diffID':        'sha256:b5902734b682781f128d816229ad15ec369201ddec7177fc18f3a8dcfeb00697',
-              'fixedVersions': [
-                '3.0.8-r0'
-              ],
-              'installedVersion': '3.0.7-r2',
-              'packageName':      'libssl3',
-              'purl':             'pkg:apk/alpine/libssl3@3.0.7-r2?arch=s390x&distro=3.17.1',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2023:0946',
-                'https://access.redhat.com/security/cve/CVE-2022-4203',
-                'https://bugzilla.redhat.com/2164440',
-                'https://bugzilla.redhat.com/2164487',
-                'https://bugzilla.redhat.com/2164488',
-                'https://bugzilla.redhat.com/2164492',
-                'https://bugzilla.redhat.com/2164494',
-                'https://bugzilla.redhat.com/2164497',
-                'https://bugzilla.redhat.com/2164499',
-                'https://bugzilla.redhat.com/2164500',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144000',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144003',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144006',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144008',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144010',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144012',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144015',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144017',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144019',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2145170',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2158412',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164440',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164487',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164488',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164492',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164497',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164499',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164500',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4203',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4304',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4450',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0215',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0216',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0217',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0286',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0401',
-                'https://errata.almalinux.org/9/ALSA-2023-0946.html',
-                'https://errata.rockylinux.org/RLSA-2023:0946',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=c927a3492698c254637da836762f9b1f86cffabc',
-                'https://linux.oracle.com/cve/CVE-2022-4203.html',
-                'https://linux.oracle.com/errata/ELSA-2023-12152.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2022-4203',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0003',
-                'https://rustsec.org/advisories/RUSTSEC-2023-0008.html',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://ubuntu.com/security/notices/USN-5844-1',
-                'https://www.cve.org/CVERecord?id=CVE-2022-4203',
-                'https://www.openssl.org/news/secadv/20230207.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: read buffer overflow in X.509 certificate verification'
-            },
-            {
-              'cve':  'CVE-2022-4304',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N'
-                },
-                'nvd': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N'
-                },
-                'redhat': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-203'
-              ],
-              'description':   'A timing based side channel exists in the OpenSSL RSA Decryption implementation\nwhich could be sufficient to recover a plaintext across a network in a\nBleichenbacher style attack. To achieve a successful decryption an attacker\nwould have to be able to send a very large number of trial messages for\ndecryption. The vulnerability affects all RSA padding modes: PKCS#1 v1.5,\nRSA-OEAP and RSASVE.\n\nFor example, in a TLS connection, RSA is commonly used by a client to send an\nencrypted pre-master secret to the server. An attacker that had observed a\ngenuine connection between a client and a server could use this flaw to send\ntrial messages to the server and record the time taken to process them. After a\nsufficiently large number of messages the attacker could recover the pre-master\nsecret used for the original connection and thus be able to decrypt the\napplication data sent over that connection.',
-              'diffID':        'sha256:b5902734b682781f128d816229ad15ec369201ddec7177fc18f3a8dcfeb00697',
-              'fixedVersions': [
-                '3.0.8-r0'
-              ],
-              'installedVersion': '3.0.7-r2',
-              'packageName':      'libssl3',
-              'purl':             'pkg:apk/alpine/libssl3@3.0.7-r2?arch=s390x&distro=3.17.1',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2023:2165',
-                'https://access.redhat.com/security/cve/CVE-2022-4304',
-                'https://bugzilla.redhat.com/1960321',
-                'https://bugzilla.redhat.com/2164440',
-                'https://bugzilla.redhat.com/2164487',
-                'https://bugzilla.redhat.com/2164492',
-                'https://bugzilla.redhat.com/2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144000',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144003',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144006',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144008',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144010',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144012',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144015',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144017',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144019',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2145170',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2158412',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164440',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164487',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164488',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164492',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164497',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164499',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164500',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4203',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4304',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4450',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0215',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0216',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0217',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0286',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0401',
-                'https://errata.almalinux.org/9/ALSA-2023-2165.html',
-                'https://errata.rockylinux.org/RLSA-2023:0946',
-                'https://linux.oracle.com/cve/CVE-2022-4304.html',
-                'https://linux.oracle.com/errata/ELSA-2023-32791.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2022-4304',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0003',
-                'https://rustsec.org/advisories/RUSTSEC-2023-0007.html',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://ubuntu.com/security/notices/USN-5844-1',
-                'https://ubuntu.com/security/notices/USN-6564-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2022-4304',
-                'https://www.openssl.org/news/secadv/20230207.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: timing attack in RSA Decryption implementation'
-            },
-            {
-              'cve':  'CVE-2023-0465',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N'
-                },
-                'redhat': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-295'
-              ],
-              'description':   "Applications that use a non-default option when verifying certificates may be\nvulnerable to an attack from a malicious CA to circumvent certain checks.\n\nInvalid certificate policies in leaf certificates are silently ignored by\nOpenSSL and other certificate policy checks are skipped for that certificate.\nA malicious CA could use this to deliberately assert invalid certificate policies\nin order to circumvent policy checking on the certificate altogether.\n\nPolicy processing is disabled by default but can be enabled by passing\nthe `-policy' argument to the command line utilities or by calling the\n`X509_VERIFY_PARAM_set1_policies()' function.",
-              'diffID':        'sha256:b5902734b682781f128d816229ad15ec369201ddec7177fc18f3a8dcfeb00697',
-              'fixedVersions': [
-                '3.0.8-r2'
-              ],
-              'installedVersion': '3.0.7-r2',
-              'packageName':      'libssl3',
-              'purl':             'pkg:apk/alpine/libssl3@3.0.7-r2?arch=s390x&distro=3.17.1',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2023:3722',
-                'https://access.redhat.com/security/cve/CVE-2023-0465',
-                'https://bugzilla.redhat.com/2181082',
-                'https://bugzilla.redhat.com/2182561',
-                'https://bugzilla.redhat.com/2182565',
-                'https://bugzilla.redhat.com/2188461',
-                'https://bugzilla.redhat.com/2207947',
-                'https://errata.almalinux.org/9/ALSA-2023-3722.html',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=10325176f3d3e98c6e2b3bf5ab1e3b334de6947a',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=1dd43e0709fece299b15208f36cc7c76209ba0bb',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=b013765abfa80036dc779dd0e50602c57bb3bf95',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=facfb1ab745646e97a1920977ae4a9965ea61d5c',
-                'https://linux.oracle.com/cve/CVE-2023-0465.html',
-                'https://linux.oracle.com/errata/ELSA-2023-3722.html',
-                'https://lists.debian.org/debian-lts-announce/2023/06/msg00011.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-0465',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://security.netapp.com/advisory/ntap-20230414-0001/',
-                'https://ubuntu.com/security/notices/USN-6039-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-0465',
-                'https://www.debian.org/security/2023/dsa-5417',
-                'https://www.openssl.org/news/secadv/20230328.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: Invalid certificate policies in leaf certificates are silently ignored'
-            },
-            {
-              'cve':  'CVE-2023-0466',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N'
-                },
-                'redhat': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-295'
-              ],
-              'description':   'The function X509_VERIFY_PARAM_add0_policy() is documented to\nimplicitly enable the certificate policy check when doing certificate\nverification. However the implementation of the function does not\nenable the check which allows certificates with invalid or incorrect\npolicies to pass the certificate verification.\n\nAs suddenly enabling the policy check could break existing deployments it was\ndecided to keep the existing behavior of the X509_VERIFY_PARAM_add0_policy()\nfunction.\n\nInstead the applications that require OpenSSL to perform certificate\npolicy check need to use X509_VERIFY_PARAM_set1_policies() or explicitly\nenable the policy check by calling X509_VERIFY_PARAM_set_flags() with\nthe X509_V_FLAG_POLICY_CHECK flag argument.\n\nCertificate policy checks are disabled by default in OpenSSL and are not\ncommonly used by applications.',
-              'diffID':        'sha256:b5902734b682781f128d816229ad15ec369201ddec7177fc18f3a8dcfeb00697',
-              'fixedVersions': [
-                '3.0.8-r3'
-              ],
-              'installedVersion': '3.0.7-r2',
-              'packageName':      'libssl3',
-              'purl':             'pkg:apk/alpine/libssl3@3.0.7-r2?arch=s390x&distro=3.17.1',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2023/09/28/4',
-                'https://access.redhat.com/errata/RHSA-2023:3722',
-                'https://access.redhat.com/security/cve/CVE-2023-0466',
-                'https://bugzilla.redhat.com/2181082',
-                'https://bugzilla.redhat.com/2182561',
-                'https://bugzilla.redhat.com/2182565',
-                'https://bugzilla.redhat.com/2188461',
-                'https://bugzilla.redhat.com/2207947',
-                'https://errata.almalinux.org/9/ALSA-2023-3722.html',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=0d16b7e99aafc0b4a6d729eec65a411a7e025f0a',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=51e8a84ce742db0f6c70510d0159dad8f7825908',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=73398dea26de9899fb4baa94098ad0a61f435c72',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=fc814a30fc4f0bc54fcea7d9a7462f5457aab061',
-                'https://linux.oracle.com/cve/CVE-2023-0466.html',
-                'https://linux.oracle.com/errata/ELSA-2023-3722.html',
-                'https://lists.debian.org/debian-lts-announce/2023/06/msg00011.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-0466',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://security.netapp.com/advisory/ntap-20230414-0001/',
-                'https://ubuntu.com/security/notices/USN-6039-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-0466',
-                'https://www.debian.org/security/2023/dsa-5417',
-                'https://www.openssl.org/news/secadv/20230328.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: Certificate policy check not enabled'
-            },
-            {
-              'cve':  'CVE-2023-1255',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '5.1',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-125'
-              ],
-              'description':   'Issue summary: The AES-XTS cipher decryption implementation for 64 bit ARM\nplatform contains a bug that could cause it to read past the input buffer,\nleading to a crash.\n\nImpact summary: Applications that use the AES-XTS algorithm on the 64 bit ARM\nplatform can crash in rare circumstances. The AES-XTS algorithm is usually\nused for disk encryption.\n\nThe AES-XTS cipher decryption implementation for 64 bit ARM platform will read\npast the end of the ciphertext buffer if the ciphertext size is 4 mod 5 in 16\nbyte blocks, e.g. 144 bytes or 1024 bytes. If the memory after the ciphertext\nbuffer is unmapped, this will trigger a crash which results in a denial of\nservice.\n\nIf an attacker can control the size and location of the ciphertext buffer\nbeing decrypted by an application using AES-XTS on 64 bit ARM, the\napplication is affected. This is fairly unlikely making this issue\na Low severity one.',
-              'diffID':        'sha256:b5902734b682781f128d816229ad15ec369201ddec7177fc18f3a8dcfeb00697',
-              'fixedVersions': [
-                '3.0.8-r4'
-              ],
-              'installedVersion': '3.0.7-r2',
-              'packageName':      'libssl3',
-              'purl':             'pkg:apk/alpine/libssl3@3.0.7-r2?arch=s390x&distro=3.17.1',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2023:3722',
-                'https://access.redhat.com/security/cve/CVE-2023-1255',
-                'https://bugzilla.redhat.com/2181082',
-                'https://bugzilla.redhat.com/2182561',
-                'https://bugzilla.redhat.com/2182565',
-                'https://bugzilla.redhat.com/2188461',
-                'https://bugzilla.redhat.com/2207947',
-                'https://errata.almalinux.org/9/ALSA-2023-3722.html',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=02ac9c9420275868472f33b01def01218742b8bb',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=bc2f61ad70971869b242fc1cb445b98bad50074a',
-                'https://linux.oracle.com/cve/CVE-2023-1255.html',
-                'https://linux.oracle.com/errata/ELSA-2023-3722.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-1255',
-                'https://security.netapp.com/advisory/ntap-20230908-0006/',
-                'https://ubuntu.com/security/notices/USN-6119-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-1255',
-                'https://www.openssl.org/news/secadv/20230419.txt',
-                'https://www.openssl.org/news/secadv/20230420.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: Input buffer over-read in AES-XTS implementation on 64 bit ARM'
-            },
-            {
-              'cve':  'CVE-2023-2650',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '6.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-770'
-              ],
-              'description':   "Issue summary: Processing some specially crafted ASN.1 object identifiers or\ndata containing them may be very slow.\n\nImpact summary: Applications that use OBJ_obj2txt() directly, or use any of\nthe OpenSSL subsystems OCSP, PKCS7/SMIME, CMS, CMP/CRMF or TS with no message\nsize limit may experience notable to very long delays when processing those\nmessages, which may lead to a Denial of Service.\n\nAn OBJECT IDENTIFIER is composed of a series of numbers - sub-identifiers -\nmost of which have no size limit.  OBJ_obj2txt() may be used to translate\nan ASN.1 OBJECT IDENTIFIER given in DER encoding form (using the OpenSSL\ntype ASN1_OBJECT) to its canonical numeric text form, which are the\nsub-identifiers of the OBJECT IDENTIFIER in decimal form, separated by\nperiods.\n\nWhen one of the sub-identifiers in the OBJECT IDENTIFIER is very large\n(these are sizes that are seen as absurdly large, taking up tens or hundreds\nof KiBs), the translation to a decimal number in text may take a very long\ntime.  The time complexity is O(n^2) with 'n' being the size of the\nsub-identifiers in bytes (*).\n\nWith OpenSSL 3.0, support to fetch cryptographic algorithms using names /\nidentifiers in string form was introduced.  This includes using OBJECT\nIDENTIFIERs in canonical numeric text form as identifiers for fetching\nalgorithms.\n\nSuch OBJECT IDENTIFIERs may be received through the ASN.1 structure\nAlgorithmIdentifier, which is commonly used in multiple protocols to specify\nwhat cryptographic algorithm should be used to sign or verify, encrypt or\ndecrypt, or digest passed data.\n\nApplications that call OBJ_obj2txt() directly with untrusted data are\naffected, with any version of OpenSSL.  If the use is for the mere purpose\nof display, the severity is considered low.\n\nIn OpenSSL 3.0 and newer, this affects the subsystems OCSP, PKCS7/SMIME,\nCMS, CMP/CRMF or TS.  It also impacts anything that processes X.509\ncertificates, including simple things like verifying its signature.\n\nThe impact on TLS is relatively low, because all versions of OpenSSL have a\n100KiB limit on the peer's certificate chain.  Additionally, this only\nimpacts clients, or servers that have explicitly enabled client\nauthentication.\n\nIn OpenSSL 1.1.1 and 1.0.2, this only affects displaying diverse objects,\nsuch as X.509 certificates.  This is assumed to not happen in such a way\nthat it would cause a Denial of Service, so these versions are considered\nnot affected by this issue in such a way that it would be cause for concern,\nand the severity is therefore considered low.",
-              'diffID':        'sha256:b5902734b682781f128d816229ad15ec369201ddec7177fc18f3a8dcfeb00697',
-              'fixedVersions': [
-                '3.0.9-r0'
-              ],
-              'installedVersion': '3.0.7-r2',
-              'packageName':      'libssl3',
-              'purl':             'pkg:apk/alpine/libssl3@3.0.7-r2?arch=s390x&distro=3.17.1',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2023/05/30/1',
-                'https://access.redhat.com/errata/RHSA-2023:6330',
-                'https://access.redhat.com/security/cve/CVE-2023-2650',
-                'https://bugzilla.redhat.com/1858038',
-                'https://bugzilla.redhat.com/2207947',
-                'https://errata.almalinux.org/9/ALSA-2023-6330.html',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=423a2bc737a908ad0c77bda470b2b59dc879936b',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=853c5e56ee0b8650c73140816bb8b91d6163422c',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=9e209944b35cf82368071f160a744b6178f9b098',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=db779b0e10b047f2585615e0b8f2acdf21f8544a',
-                'https://linux.oracle.com/cve/CVE-2023-2650.html',
-                'https://linux.oracle.com/errata/ELSA-2023-6330.html',
-                'https://lists.debian.org/debian-lts-announce/2023/06/msg00011.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-2650',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0009',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://security.netapp.com/advisory/ntap-20230703-0001/',
-                'https://security.netapp.com/advisory/ntap-20231027-0009/',
-                'https://ubuntu.com/security/notices/USN-6119-1',
-                'https://ubuntu.com/security/notices/USN-6188-1',
-                'https://ubuntu.com/security/notices/USN-6672-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-2650',
-                'https://www.debian.org/security/2023/dsa-5417',
-                'https://www.openssl.org/news/secadv/20230530.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: Possible DoS translating ASN.1 object identifiers'
-            },
-            {
-              'cve':  'CVE-2023-2975',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N'
-                },
-                'redhat': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-354',
-                'CWE-287'
-              ],
-              'description':   'Issue summary: The AES-SIV cipher implementation contains a bug that causes\nit to ignore empty associated data entries which are unauthenticated as\na consequence.\n\nImpact summary: Applications that use the AES-SIV algorithm and want to\nauthenticate empty data entries as associated data can be misled by removing,\nadding or reordering such empty entries as these are ignored by the OpenSSL\nimplementation. We are currently unaware of any such applications.\n\nThe AES-SIV algorithm allows for authentication of multiple associated\ndata entries along with the encryption. To authenticate empty data the\napplication has to call EVP_EncryptUpdate() (or EVP_CipherUpdate()) with\nNULL pointer as the output buffer and 0 as the input buffer length.\nThe AES-SIV implementation in OpenSSL just returns success for such a call\ninstead of performing the associated data authentication operation.\nThe empty data thus will not be authenticated.\n\nAs this issue does not affect non-empty associated data authentication and\nwe expect it to be rare for an application to use empty associated data\nentries this is qualified as Low severity issue.',
-              'diffID':        'sha256:b5902734b682781f128d816229ad15ec369201ddec7177fc18f3a8dcfeb00697',
-              'fixedVersions': [
-                '3.0.9-r2'
-              ],
-              'installedVersion': '3.0.7-r2',
-              'packageName':      'libssl3',
-              'purl':             'pkg:apk/alpine/libssl3@3.0.7-r2?arch=s390x&distro=3.17.1',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2023/07/15/1',
-                'http://www.openwall.com/lists/oss-security/2023/07/19/5',
-                'https://access.redhat.com/errata/RHSA-2024:2447',
-                'https://access.redhat.com/security/cve/CVE-2023-2975',
-                'https://bugzilla.redhat.com/2223016',
-                'https://bugzilla.redhat.com/2224962',
-                'https://bugzilla.redhat.com/2227852',
-                'https://bugzilla.redhat.com/2248616',
-                'https://bugzilla.redhat.com/2257571',
-                'https://bugzilla.redhat.com/2258502',
-                'https://bugzilla.redhat.com/2259944',
-                'https://errata.almalinux.org/9/ALSA-2024-2447.html',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=00e2f5eea29994d19293ec4e8c8775ba73678598',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=6a83f0c958811f07e0d11dfc6b5a6a98edfd5bdc',
-                'https://linux.oracle.com/cve/CVE-2023-2975.html',
-                'https://linux.oracle.com/errata/ELSA-2024-2447.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-2975',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://security.netapp.com/advisory/ntap-20230725-0004/',
-                'https://ubuntu.com/security/notices/USN-6450-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-2975',
-                'https://www.openssl.org/news/secadv/20230714.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: AES-SIV cipher implementation contains a bug that causes it to ignore empty associated data entries'
-            },
-            {
-              'cve':  'CVE-2023-3446',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L'
-                },
-                'redhat': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L'
-                }
-              },
-              'cwes': [
-                'CWE-606',
-                'CWE-1333'
-              ],
-              'description':   "Issue summary: Checking excessively long DH keys or parameters may be very slow.\n\nImpact summary: Applications that use the functions DH_check(), DH_check_ex()\nor EVP_PKEY_param_check() to check a DH key or DH parameters may experience long\ndelays. Where the key or parameters that are being checked have been obtained\nfrom an untrusted source this may lead to a Denial of Service.\n\nThe function DH_check() performs various checks on DH parameters. One of those\nchecks confirms that the modulus ('p' parameter) is not too large. Trying to use\na very large modulus is slow and OpenSSL will not normally use a modulus which\nis over 10,000 bits in length.\n\nHowever the DH_check() function checks numerous aspects of the key or parameters\nthat have been supplied. Some of those checks use the supplied modulus value\neven if it has already been found to be too large.\n\nAn application that calls DH_check() and supplies a key or parameters obtained\nfrom an untrusted source could be vulernable to a Denial of Service attack.\n\nThe function DH_check() is itself called by a number of other OpenSSL functions.\nAn application calling any of those other functions may similarly be affected.\nThe other functions affected by this are DH_check_ex() and\nEVP_PKEY_param_check().\n\nAlso vulnerable are the OpenSSL dhparam and pkeyparam command line applications\nwhen using the '-check' option.\n\nThe OpenSSL SSL/TLS implementation is not affected by this issue.\nThe OpenSSL 3.0 and 3.1 FIPS providers are not affected by this issue.",
-              'diffID':        'sha256:b5902734b682781f128d816229ad15ec369201ddec7177fc18f3a8dcfeb00697',
-              'fixedVersions': [
-                '3.0.9-r3'
-              ],
-              'installedVersion': '3.0.7-r2',
-              'packageName':      'libssl3',
-              'purl':             'pkg:apk/alpine/libssl3@3.0.7-r2?arch=s390x&distro=3.17.1',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2023/07/19/4',
-                'http://www.openwall.com/lists/oss-security/2023/07/19/5',
-                'http://www.openwall.com/lists/oss-security/2023/07/19/6',
-                'http://www.openwall.com/lists/oss-security/2023/07/31/1',
-                'http://www.openwall.com/lists/oss-security/2024/05/16/1',
-                'https://access.redhat.com/errata/RHSA-2024:2447',
-                'https://access.redhat.com/security/cve/CVE-2023-3446',
-                'https://bugzilla.redhat.com/2223016',
-                'https://bugzilla.redhat.com/2224962',
-                'https://bugzilla.redhat.com/2227852',
-                'https://bugzilla.redhat.com/2248616',
-                'https://bugzilla.redhat.com/2257571',
-                'https://bugzilla.redhat.com/2258502',
-                'https://bugzilla.redhat.com/2259944',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2224962',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2257582',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2257583',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2258677',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2258688',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2258691',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2258694',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2258700',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-36763',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-36764',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3446',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45229',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45231',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45232',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45233',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45235',
-                'https://errata.almalinux.org/9/ALSA-2024-2447.html',
-                'https://errata.rockylinux.org/RLSA-2024:2264',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=1fa20cf2f506113c761777127a38bce5068740eb',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=8780a896543a654e757db1b9396383f9d8095528',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=9a0a4d3c1e7138915563c0df4fe6a3f9377b839c',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=fc9867c1e03c22ebf56943be205202e576aabf23',
-                'https://linux.oracle.com/cve/CVE-2023-3446.html',
-                'https://linux.oracle.com/errata/ELSA-2024-2447.html',
-                'https://lists.debian.org/debian-lts-announce/2023/08/msg00019.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-3446',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://security.netapp.com/advisory/ntap-20230803-0011/',
-                'https://ubuntu.com/security/notices/USN-6435-1',
-                'https://ubuntu.com/security/notices/USN-6435-2',
-                'https://ubuntu.com/security/notices/USN-6450-1',
-                'https://ubuntu.com/security/notices/USN-6709-1',
-                'https://ubuntu.com/security/notices/USN-7018-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-3446',
-                'https://www.openssl.org/news/secadv/20230719.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: Excessive time spent checking DH keys and parameters'
-            },
-            {
-              'cve':  'CVE-2023-3817',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L'
-                },
-                'redhat': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L'
-                }
-              },
-              'cwes': [
-                'CWE-606',
-                'CWE-834'
-              ],
-              'description':   'Issue summary: Checking excessively long DH keys or parameters may be very slow.\n\nImpact summary: Applications that use the functions DH_check(), DH_check_ex()\nor EVP_PKEY_param_check() to check a DH key or DH parameters may experience long\ndelays. Where the key or parameters that are being checked have been obtained\nfrom an untrusted source this may lead to a Denial of Service.\n\nThe function DH_check() performs various checks on DH parameters. After fixing\nCVE-2023-3446 it was discovered that a large q parameter value can also trigger\nan overly long computation during some of these checks. A correct q value,\nif present, cannot be larger than the modulus p parameter, thus it is\nunnecessary to perform these checks if q is larger than p.\n\nAn application that calls DH_check() and supplies a key or parameters obtained\nfrom an untrusted source could be vulnerable to a Denial of Service attack.\n\nThe function DH_check() is itself called by a number of other OpenSSL functions.\nAn application calling any of those other functions may similarly be affected.\nThe other functions affected by this are DH_check_ex() and\nEVP_PKEY_param_check().\n\nAlso vulnerable are the OpenSSL dhparam and pkeyparam command line applications\nwhen using the "-check" option.\n\nThe OpenSSL SSL/TLS implementation is not affected by this issue.\n\nThe OpenSSL 3.0 and 3.1 FIPS providers are not affected by this issue.',
-              'diffID':        'sha256:b5902734b682781f128d816229ad15ec369201ddec7177fc18f3a8dcfeb00697',
-              'fixedVersions': [
-                '3.0.10-r0'
-              ],
-              'installedVersion': '3.0.7-r2',
-              'packageName':      'libssl3',
-              'purl':             'pkg:apk/alpine/libssl3@3.0.7-r2?arch=s390x&distro=3.17.1',
-              'references':       [
-                'http://seclists.org/fulldisclosure/2023/Jul/43',
-                'http://www.openwall.com/lists/oss-security/2023/07/31/1',
-                'http://www.openwall.com/lists/oss-security/2023/09/22/11',
-                'http://www.openwall.com/lists/oss-security/2023/09/22/9',
-                'http://www.openwall.com/lists/oss-security/2023/11/06/2',
-                'https://access.redhat.com/errata/RHSA-2024:2447',
-                'https://access.redhat.com/security/cve/CVE-2023-3817',
-                'https://bugzilla.redhat.com/2223016',
-                'https://bugzilla.redhat.com/2224962',
-                'https://bugzilla.redhat.com/2227852',
-                'https://bugzilla.redhat.com/2248616',
-                'https://bugzilla.redhat.com/2257571',
-                'https://bugzilla.redhat.com/2258502',
-                'https://bugzilla.redhat.com/2259944',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2224962',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2227852',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2248616',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2270358',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3446',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3817',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-5678',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-2408',
-                'https://errata.almalinux.org/9/ALSA-2024-2447.html',
-                'https://errata.rockylinux.org/RLSA-2023:7877',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=6a1eb62c29db6cb5eec707f9338aee00f44e26f5',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=869ad69aadd985c7b8ca6f4e5dd0eb274c9f3644',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=9002fd07327a91f35ba6c1307e71fa6fd4409b7f',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=91ddeba0f2269b017dc06c46c993a788974b1aa5',
-                'https://linux.oracle.com/cve/CVE-2023-3817.html',
-                'https://linux.oracle.com/errata/ELSA-2024-2447.html',
-                'https://lists.debian.org/debian-lts-announce/2023/08/msg00019.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-3817',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://security.netapp.com/advisory/ntap-20230818-0014/',
-                'https://security.netapp.com/advisory/ntap-20231027-0008/',
-                'https://security.netapp.com/advisory/ntap-20240621-0006/',
-                'https://ubuntu.com/security/notices/USN-6435-1',
-                'https://ubuntu.com/security/notices/USN-6435-2',
-                'https://ubuntu.com/security/notices/USN-6450-1',
-                'https://ubuntu.com/security/notices/USN-6709-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-3817',
-                'https://www.openssl.org/news/secadv/20230731.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'OpenSSL: Excessive time spent checking DH q parameter value'
-            },
-            {
-              'cve':  'CVE-2023-5678',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L'
-                },
-                'redhat': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L'
-                }
-              },
-              'cwes': [
-                'CWE-606',
-                'CWE-754'
-              ],
-              'description':   "Issue summary: Generating excessively long X9.42 DH keys or checking\nexcessively long X9.42 DH keys or parameters may be very slow.\n\nImpact summary: Applications that use the functions DH_generate_key() to\ngenerate an X9.42 DH key may experience long delays.  Likewise, applications\nthat use DH_check_pub_key(), DH_check_pub_key_ex() or EVP_PKEY_public_check()\nto check an X9.42 DH key or X9.42 DH parameters may experience long delays.\nWhere the key or parameters that are being checked have been obtained from\nan untrusted source this may lead to a Denial of Service.\n\nWhile DH_check() performs all the necessary checks (as of CVE-2023-3817),\nDH_check_pub_key() doesn't make any of these checks, and is therefore\nvulnerable for excessively large P and Q parameters.\n\nLikewise, while DH_generate_key() performs a check for an excessively large\nP, it doesn't check for an excessively large Q.\n\nAn application that calls DH_generate_key() or DH_check_pub_key() and\nsupplies a key or parameters obtained from an untrusted source could be\nvulnerable to a Denial of Service attack.\n\nDH_generate_key() and DH_check_pub_key() are also called by a number of\nother OpenSSL functions.  An application calling any of those other\nfunctions may similarly be affected.  The other functions affected by this\nare DH_check_pub_key_ex(), EVP_PKEY_public_check(), and EVP_PKEY_generate().\n\nAlso vulnerable are the OpenSSL pkey command line application when using the\n\"-pubcheck\" option, as well as the OpenSSL genpkey command line application.\n\nThe OpenSSL SSL/TLS implementation is not affected by this issue.\n\nThe OpenSSL 3.0 and 3.1 FIPS providers are not affected by this issue.",
-              'diffID':        'sha256:b5902734b682781f128d816229ad15ec369201ddec7177fc18f3a8dcfeb00697',
-              'fixedVersions': [
-                '3.0.12-r1'
-              ],
-              'installedVersion': '3.0.7-r2',
-              'packageName':      'libssl3',
-              'purl':             'pkg:apk/alpine/libssl3@3.0.7-r2?arch=s390x&distro=3.17.1',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2024/03/11/1',
-                'https://access.redhat.com/errata/RHSA-2024:2447',
-                'https://access.redhat.com/security/cve/CVE-2023-5678',
-                'https://bugzilla.redhat.com/2223016',
-                'https://bugzilla.redhat.com/2224962',
-                'https://bugzilla.redhat.com/2227852',
-                'https://bugzilla.redhat.com/2248616',
-                'https://bugzilla.redhat.com/2257571',
-                'https://bugzilla.redhat.com/2258502',
-                'https://bugzilla.redhat.com/2259944',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2224962',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2227852',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2248616',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2270358',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3446',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3817',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-5678',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-2408',
-                'https://errata.almalinux.org/9/ALSA-2024-2447.html',
-                'https://errata.rockylinux.org/RLSA-2023:7877',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=34efaef6c103d636ab507a0cc34dca4d3aecc055',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=710fee740904b6290fef0dd5536fbcedbc38ff0c',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=db925ae2e65d0d925adef429afc37f75bd1c2017',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=ddeb4b6c6d527e54ce9a99cba785c0f7776e54b6',
-                'https://linux.oracle.com/cve/CVE-2023-5678.html',
-                'https://linux.oracle.com/errata/ELSA-2024-2447.html',
-                'https://lists.debian.org/debian-lts-announce/2024/10/msg00033.html',
-                'https://lists.debian.org/debian-lts-announce/2024/11/msg00000.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-5678',
-                'https://security.netapp.com/advisory/ntap-20231130-0010/',
-                'https://ubuntu.com/security/notices/USN-6622-1',
-                'https://ubuntu.com/security/notices/USN-6632-1',
-                'https://ubuntu.com/security/notices/USN-6709-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-5678',
-                'https://www.openssl.org/news/secadv/20231106.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: Generating excessively long X9.42 DH keys or checking excessively long X9.42 DH keys or parameters may be very slow'
-            },
-            {
-              'cve':  'CVE-2023-6129',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '6.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-440',
-                'CWE-787'
-              ],
-              'description':   'Issue summary: The POLY1305 MAC (message authentication code) implementation\ncontains a bug that might corrupt the internal state of applications running\non PowerPC CPU based platforms if the CPU provides vector instructions.\n\nImpact summary: If an attacker can influence whether the POLY1305 MAC\nalgorithm is used, the application state might be corrupted with various\napplication dependent consequences.\n\nThe POLY1305 MAC (message authentication code) implementation in OpenSSL for\nPowerPC CPUs restores the contents of vector registers in a different order\nthan they are saved. Thus the contents of some of these vector registers\nare corrupted when returning to the caller. The vulnerable code is used only\non newer PowerPC processors supporting the PowerISA 2.07 instructions.\n\nThe consequences of this kind of internal application state corruption can\nbe various - from no consequences, if the calling application does not\ndepend on the contents of non-volatile XMM registers at all, to the worst\nconsequences, where the attacker could get complete control of the application\nprocess. However unless the compiler uses the vector registers for storing\npointers, the most likely consequence, if any, would be an incorrect result\nof some application dependent calculations or a crash leading to a denial of\nservice.\n\nThe POLY1305 MAC algorithm is most frequently used as part of the\nCHACHA20-POLY1305 AEAD (authenticated encryption with associated data)\nalgorithm. The most common usage of this AEAD cipher is with TLS protocol\nversions 1.2 and 1.3. If this cipher is enabled on the server a malicious\nclient can influence whether this AEAD cipher is used. This implies that\nTLS server applications using OpenSSL can be potentially impacted. However\nwe are currently not aware of any concrete application that would be affected\nby this issue therefore we consider this a Low severity security issue.',
-              'diffID':        'sha256:b5902734b682781f128d816229ad15ec369201ddec7177fc18f3a8dcfeb00697',
-              'fixedVersions': [
-                '3.0.12-r2'
-              ],
-              'installedVersion': '3.0.7-r2',
-              'packageName':      'libssl3',
-              'purl':             'pkg:apk/alpine/libssl3@3.0.7-r2?arch=s390x&distro=3.17.1',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2024/03/11/1',
-                'https://access.redhat.com/errata/RHSA-2024:9088',
-                'https://access.redhat.com/security/cve/CVE-2023-6129',
-                'https://bugzilla.redhat.com/2257571',
-                'https://bugzilla.redhat.com/2258502',
-                'https://bugzilla.redhat.com/2259944',
-                'https://bugzilla.redhat.com/2284243',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2257571',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2258502',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2259944',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2284243',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-6129',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-6237',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-0727',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-1298',
-                'https://errata.almalinux.org/9/ALSA-2024-9088.html',
-                'https://errata.rockylinux.org/RLSA-2024:9088',
-                'https://github.com/openssl/openssl/commit/050d26383d4e264966fb83428e72d5d48f402d35',
-                'https://github.com/openssl/openssl/commit/5b139f95c9a47a55a0c54100f3837b1eee942b04',
-                'https://github.com/openssl/openssl/commit/f3fc5808fe9ff74042d639839610d03b8fdcc015',
-                'https://linux.oracle.com/cve/CVE-2023-6129.html',
-                'https://linux.oracle.com/errata/ELSA-2024-9088.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-6129',
-                'https://security.netapp.com/advisory/ntap-20240216-0009/',
-                'https://security.netapp.com/advisory/ntap-20240426-0008/',
-                'https://security.netapp.com/advisory/ntap-20240426-0013/',
-                'https://security.netapp.com/advisory/ntap-20240503-0011/',
-                'https://ubuntu.com/security/notices/USN-6622-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-6129',
-                'https://www.openssl.org/news/secadv/20240109.txt',
-                'https://www.openwall.com/lists/oss-security/2024/01/09/1'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: POLY1305 MAC implementation corrupts vector registers on PowerPC'
-            },
-            {
-              'cve':  'CVE-2023-6237',
-              'cvss': {
-                'redhat': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-606'
-              ],
-              'description':   "Issue summary: Checking excessively long invalid RSA public keys may take\na long time.\n\nImpact summary: Applications that use the function EVP_PKEY_public_check()\nto check RSA public keys may experience long delays. Where the key that\nis being checked has been obtained from an untrusted source this may lead\nto a Denial of Service.\n\nWhen function EVP_PKEY_public_check() is called on RSA public keys,\na computation is done to confirm that the RSA modulus, n, is composite.\nFor valid RSA keys, n is a product of two or more large primes and this\ncomputation completes quickly. However, if n is an overly large prime,\nthen this computation would take a long time.\n\nAn application that calls EVP_PKEY_public_check() and supplies an RSA key\nobtained from an untrusted source could be vulnerable to a Denial of Service\nattack.\n\nThe function EVP_PKEY_public_check() is not called from other OpenSSL\nfunctions however it is called from the OpenSSL pkey command line\napplication. For that reason that application is also vulnerable if used\nwith the '-pubin' and '-check' options on untrusted data.\n\nThe OpenSSL SSL/TLS implementation is not affected by this issue.\n\nThe OpenSSL 3.0 and 3.1 FIPS providers are affected by this issue.",
-              'diffID':        'sha256:b5902734b682781f128d816229ad15ec369201ddec7177fc18f3a8dcfeb00697',
-              'fixedVersions': [
-                '3.0.12-r3'
-              ],
-              'installedVersion': '3.0.7-r2',
-              'packageName':      'libssl3',
-              'purl':             'pkg:apk/alpine/libssl3@3.0.7-r2?arch=s390x&distro=3.17.1',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2024/03/11/1',
-                'https://access.redhat.com/errata/RHSA-2024:9088',
-                'https://access.redhat.com/security/cve/CVE-2023-6237',
-                'https://bugzilla.redhat.com/2257571',
-                'https://bugzilla.redhat.com/2258502',
-                'https://bugzilla.redhat.com/2259944',
-                'https://bugzilla.redhat.com/2284243',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2257571',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2258502',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2259944',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2284243',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-6129',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-6237',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-0727',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-1298',
-                'https://errata.almalinux.org/9/ALSA-2024-9088.html',
-                'https://errata.rockylinux.org/RLSA-2024:9088',
-                'https://github.com/openssl/openssl/commit/0b0f7abfb37350794a4b8960fafc292cd5d1b84d',
-                'https://github.com/openssl/openssl/commit/18c02492138d1eb8b6548cb26e7b625fb2414a2a',
-                'https://github.com/openssl/openssl/commit/a830f551557d3d66a84bbb18a5b889c640c36294',
-                'https://linux.oracle.com/cve/CVE-2023-6237.html',
-                'https://linux.oracle.com/errata/ELSA-2024-9088.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-6237',
-                'https://security.netapp.com/advisory/ntap-20240531-0007/',
-                'https://ubuntu.com/security/notices/USN-6622-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-6237',
-                'https://www.openssl.org/news/secadv/20240115.txt',
-                'https://www.openwall.com/lists/oss-security/2024/01/15/2'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: Excessive time spent checking invalid RSA public keys'
-            },
-            {
-              'cve':  'CVE-2024-0727',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '5.5',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H'
-                },
-                'nvd': {
-                  'v3score':  '5.5',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '5.5',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-476'
-              ],
-              'description':   'Issue summary: Processing a maliciously formatted PKCS12 file may lead OpenSSL\nto crash leading to a potential Denial of Service attack\n\nImpact summary: Applications loading files in the PKCS12 format from untrusted\nsources might terminate abruptly.\n\nA file in PKCS12 format can contain certificates and keys and may come from an\nuntrusted source. The PKCS12 specification allows certain fields to be NULL, but\nOpenSSL does not correctly check for this case. This can lead to a NULL pointer\ndereference that results in OpenSSL crashing. If an application processes PKCS12\nfiles from an untrusted source using the OpenSSL APIs then that application will\nbe vulnerable to this issue.\n\nOpenSSL APIs that are vulnerable to this are: PKCS12_parse(),\nPKCS12_unpack_p7data(), PKCS12_unpack_p7encdata(), PKCS12_unpack_authsafes()\nand PKCS12_newpass().\n\nWe have also fixed a similar issue in SMIME_write_PKCS7(). However since this\nfunction is related to writing data we do not consider it security significant.\n\nThe FIPS modules in 3.2, 3.1 and 3.0 are not affected by this issue.',
-              'diffID':        'sha256:b5902734b682781f128d816229ad15ec369201ddec7177fc18f3a8dcfeb00697',
-              'fixedVersions': [
-                '3.0.12-r4'
-              ],
-              'installedVersion': '3.0.7-r2',
-              'packageName':      'libssl3',
-              'purl':             'pkg:apk/alpine/libssl3@3.0.7-r2?arch=s390x&distro=3.17.1',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2024/03/11/1',
-                'https://access.redhat.com/errata/RHSA-2024:9088',
-                'https://access.redhat.com/security/cve/CVE-2024-0727',
-                'https://bugzilla.redhat.com/2257571',
-                'https://bugzilla.redhat.com/2258502',
-                'https://bugzilla.redhat.com/2259944',
-                'https://bugzilla.redhat.com/2284243',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2257571',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2258502',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2259944',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2284243',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-6129',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-6237',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-0727',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-1298',
-                'https://errata.almalinux.org/9/ALSA-2024-9088.html',
-                'https://errata.rockylinux.org/RLSA-2024:9088',
-                'https://github.com/alexcrichton/openssl-src-rs/commit/add20f73b6b42be7451af2e1044d4e0e778992b2',
-                'https://github.com/github/advisory-database/pull/3472',
-                'https://github.com/openssl/openssl/commit/09df4395b5071217b76dc7d3d2e630eb8c5a79c2',
-                'https://github.com/openssl/openssl/commit/775acfdbd0c6af9ac855f34969cdab0c0c90844a',
-                'https://github.com/openssl/openssl/commit/d135eeab8a5dbf72b3da5240bab9ddb7678dbd2c',
-                'https://github.com/openssl/openssl/pull/23362',
-                'https://github.com/pyca/cryptography/commit/3519591d255d4506fbcd0d04037d45271903c64d',
-                'https://github.openssl.org/openssl/extended-releases/commit/03b3941d60c4bce58fab69a0c22377ab439bc0e8',
-                'https://github.openssl.org/openssl/extended-releases/commit/aebaa5883e31122b404e450732dc833dc9dee539',
-                'https://linux.oracle.com/cve/CVE-2024-0727.html',
-                'https://linux.oracle.com/errata/ELSA-2024-9088.html',
-                'https://lists.debian.org/debian-lts-announce/2024/10/msg00033.html',
-                'https://lists.debian.org/debian-lts-announce/2024/11/msg00000.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2024-0727',
-                'https://security.netapp.com/advisory/ntap-20240208-0006',
-                'https://security.netapp.com/advisory/ntap-20240208-0006/',
-                'https://ubuntu.com/security/notices/USN-6622-1',
-                'https://ubuntu.com/security/notices/USN-6632-1',
-                'https://ubuntu.com/security/notices/USN-6709-1',
-                'https://ubuntu.com/security/notices/USN-7018-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2024-0727',
-                'https://www.openssl.org/news/secadv/20240125.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: denial of service via null dereference'
-            },
-            {
-              'cve':  'CVE-2024-4603',
-              'cvss': {
-                'redhat': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L'
-                }
-              },
-              'cwes': [
-                'CWE-606',
-                'CWE-834'
-              ],
-              'description':   'Issue summary: Checking excessively long DSA keys or parameters may be very\nslow.\n\nImpact summary: Applications that use the functions EVP_PKEY_param_check()\nor EVP_PKEY_public_check() to check a DSA public key or DSA parameters may\nexperience long delays. Where the key or parameters that are being checked\nhave been obtained from an untrusted source this may lead to a Denial of\nService.\n\nThe functions EVP_PKEY_param_check() or EVP_PKEY_public_check() perform\nvarious checks on DSA parameters. Some of those computations take a long time\nif the modulus (`p` parameter) is too large.\n\nTrying to use a very large modulus is slow and OpenSSL will not allow using\npublic keys with a modulus which is over 10,000 bits in length for signature\nverification. However the key and parameter check functions do not limit\nthe modulus size when performing the checks.\n\nAn application that calls EVP_PKEY_param_check() or EVP_PKEY_public_check()\nand supplies a key or parameters obtained from an untrusted source could be\nvulnerable to a Denial of Service attack.\n\nThese functions are not called by OpenSSL itself on untrusted DSA keys so\nonly applications that directly call these functions may be vulnerable.\n\nAlso vulnerable are the OpenSSL pkey and pkeyparam command line applications\nwhen using the `-check` option.\n\nThe OpenSSL SSL/TLS implementation is not affected by this issue.\n\nThe OpenSSL 3.0 and 3.1 FIPS providers are affected by this issue.',
-              'diffID':        'sha256:b5902734b682781f128d816229ad15ec369201ddec7177fc18f3a8dcfeb00697',
-              'fixedVersions': [
-                '3.0.13-r0'
-              ],
-              'installedVersion': '3.0.7-r2',
-              'packageName':      'libssl3',
-              'purl':             'pkg:apk/alpine/libssl3@3.0.7-r2?arch=s390x&distro=3.17.1',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2024/05/16/2',
-                'https://access.redhat.com/errata/RHSA-2024:9333',
-                'https://access.redhat.com/security/cve/CVE-2024-4603',
-                'https://bugzilla.redhat.com/2274020',
-                'https://bugzilla.redhat.com/2281029',
-                'https://bugzilla.redhat.com/2283757',
-                'https://bugzilla.redhat.com/2294581',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2274020',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2281029',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2283757',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2294581',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-2511',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-4603',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-4741',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-5535',
-                'https://errata.almalinux.org/9/ALSA-2024-9333.html',
-                'https://errata.rockylinux.org/RLSA-2024:9333',
-                'https://github.com/openssl/openssl/commit/3559e868e58005d15c6013a0c1fd832e51c73397',
-                'https://github.com/openssl/openssl/commit/53ea06486d296b890d565fb971b2764fcd826e7e',
-                'https://github.com/openssl/openssl/commit/9c39b3858091c152f52513c066ff2c5a47969f0d',
-                'https://github.com/openssl/openssl/commit/da343d0605c826ef197aceedc67e8e04f065f740',
-                'https://linux.oracle.com/cve/CVE-2024-4603.html',
-                'https://linux.oracle.com/errata/ELSA-2024-9333.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2024-4603',
-                'https://security.netapp.com/advisory/ntap-20240621-0001/',
-                'https://ubuntu.com/security/notices/USN-6937-1',
-                'https://www.cve.org/CVERecord?id=CVE-2024-4603',
-                'https://www.openssl.org/news/secadv/20240516.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: Excessive time spent checking DSA keys and parameters'
-            },
-            {
-              'cve':  'CVE-2024-4741',
-              'cvss': {
-                'redhat': {
-                  'v3score':  '5.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   'Issue summary: Calling the OpenSSL API function SSL_free_buffers may cause\nmemory to be accessed that was previously freed in some situations\n\nImpact summary: A use after free can have a range of potential consequences such\nas the corruption of valid data, crashes or execution of arbitrary code.\nHowever, only applications that directly call the SSL_free_buffers function are\naffected by this issue. Applications that do not call this function are not\nvulnerable. Our investigations indicate that this function is rarely used by\napplications.\n\nThe SSL_free_buffers function is used to free the internal OpenSSL buffer used\nwhen processing an incoming record from the network. The call is only expected\nto succeed if the buffer is not currently in use. However, two scenarios have\nbeen identified where the buffer is freed even when still in use.\n\nThe first scenario occurs where a record header has been received from the\nnetwork and processed by OpenSSL, but the full record body has not yet arrived.\nIn this case calling SSL_free_buffers will succeed even though a record has only\nbeen partially processed and the buffer is still in use.\n\nThe second scenario occurs where a full record containing application data has\nbeen received and processed by OpenSSL but the application has only read part of\nthis data. Again a call to SSL_free_buffers will succeed even though the buffer\nis still in use.\n\nWhile these scenarios could occur accidentally during normal operation a\nmalicious attacker could attempt to engineer a stituation where this occurs.\nWe are not aware of this issue being actively exploited.\n\nThe FIPS modules in 3.3, 3.2, 3.1 and 3.0 are not affected by this issue.',
-              'diffID':        'sha256:b5902734b682781f128d816229ad15ec369201ddec7177fc18f3a8dcfeb00697',
-              'fixedVersions': [
-                '3.0.14-r0'
-              ],
-              'installedVersion': '3.0.7-r2',
-              'packageName':      'libssl3',
-              'purl':             'pkg:apk/alpine/libssl3@3.0.7-r2?arch=s390x&distro=3.17.1',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2024:9333',
-                'https://access.redhat.com/security/cve/CVE-2024-4741',
-                'https://bugzilla.redhat.com/2274020',
-                'https://bugzilla.redhat.com/2281029',
-                'https://bugzilla.redhat.com/2283757',
-                'https://bugzilla.redhat.com/2294581',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2274020',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2281029',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2283757',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2294581',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-2511',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-4603',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-4741',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-5535',
-                'https://errata.almalinux.org/9/ALSA-2024-9333.html',
-                'https://errata.rockylinux.org/RLSA-2024:9333',
-                'https://github.com/openssl/openssl/commit/704f725b96aa373ee45ecfb23f6abfe8be8d9177',
-                'https://github.com/openssl/openssl/commit/b3f0eb0a295f58f16ba43ba99dad70d4ee5c437d',
-                'https://github.com/openssl/openssl/commit/c88c3de51020c37e8706bf7a682a162593053aac',
-                'https://github.com/openssl/openssl/commit/e5093133c35ca82874ad83697af76f4b0f7e3bd8',
-                'https://github.openssl.org/openssl/extended-releases/commit/f7a045f3143fc6da2ee66bf52d8df04829590dd4',
-                'https://linux.oracle.com/cve/CVE-2024-4741.html',
-                'https://linux.oracle.com/errata/ELSA-2024-9333.html',
-                'https://lists.debian.org/debian-lts-announce/2024/10/msg00033.html',
-                'https://lists.debian.org/debian-lts-announce/2024/11/msg00000.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2024-4741',
-                'https://security.netapp.com/advisory/ntap-20240621-0004/',
-                'https://ubuntu.com/security/notices/USN-6937-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2024-4741',
-                'https://www.openssl.org/news/secadv/20240528.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: Use After Free with SSL_free_buffers'
-            },
-            {
-              'cve':  'CVE-2024-5535',
-              'cvss': {
-                'redhat': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-125'
-              ],
-              'description':   'Issue summary: Calling the OpenSSL API function SSL_select_next_proto with an\nempty supported client protocols buffer may cause a crash or memory contents to\nbe sent to the peer.\n\nImpact summary: A buffer overread can have a range of potential consequences\nsuch as unexpected application beahviour or a crash. In particular this issue\ncould result in up to 255 bytes of arbitrary private data from memory being sent\nto the peer leading to a loss of confidentiality. However, only applications\nthat directly call the SSL_select_next_proto function with a 0 length list of\nsupported client protocols are affected by this issue. This would normally never\nbe a valid scenario and is typically not under attacker control but may occur by\naccident in the case of a configuration or programming error in the calling\napplication.\n\nThe OpenSSL API function SSL_select_next_proto is typically used by TLS\napplications that support ALPN (Application Layer Protocol Negotiation) or NPN\n(Next Protocol Negotiation). NPN is older, was never standardised and\nis deprecated in favour of ALPN. We believe that ALPN is significantly more\nwidely deployed than NPN. The SSL_select_next_proto function accepts a list of\nprotocols from the server and a list of protocols from the client and returns\nthe first protocol that appears in the server list that also appears in the\nclient list. In the case of no overlap between the two lists it returns the\nfirst item in the client list. In either case it will signal whether an overlap\nbetween the two lists was found. In the case where SSL_select_next_proto is\ncalled with a zero length client list it fails to notice this condition and\nreturns the memory immediately following the client list pointer (and reports\nthat there was no overlap in the lists).\n\nThis function is typically called from a server side application callback for\nALPN or a client side application callback for NPN. In the case of ALPN the list\nof protocols supplied by the client is guaranteed by libssl to never be zero in\nlength. The list of server protocols comes from the application and should never\nnormally be expected to be of zero length. In this case if the\nSSL_select_next_proto function has been called as expected (with the list\nsupplied by the client passed in the client/client_len parameters), then the\napplication will not be vulnerable to this issue. If the application has\naccidentally been configured with a zero length server list, and has\naccidentally passed that zero length server list in the client/client_len\nparameters, and has additionally failed to correctly handle a "no overlap"\nresponse (which would normally result in a handshake failure in ALPN) then it\nwill be vulnerable to this problem.\n\nIn the case of NPN, the protocol permits the client to opportunistically select\na protocol when there is no overlap. OpenSSL returns the first client protocol\nin the no overlap case in support of this. The list of client protocols comes\nfrom the application and should never normally be expected to be of zero length.\nHowever if the SSL_select_next_proto function is accidentally called with a\nclient_len of 0 then an invalid memory pointer will be returned instead. If the\napplication uses this output as the opportunistic protocol then the loss of\nconfidentiality will occur.\n\nThis issue has been assessed as Low severity because applications are most\nlikely to be vulnerable if they are using NPN instead of ALPN - but NPN is not\nwidely used. It also requires an application configuration or programming error.\nFinally, this issue would not typically be under attacker control making active\nexploitation unlikely.\n\nThe FIPS modules in 3.3, 3.2, 3.1 and 3.0 are not affected by this issue.\n\nDue to the low severity of this issue we are not issuing new releases of\nOpenSSL at this time. The fix will be included in the next releases when they\nbecome available.',
-              'diffID':        'sha256:b5902734b682781f128d816229ad15ec369201ddec7177fc18f3a8dcfeb00697',
-              'fixedVersions': [
-                '3.0.14-r0'
-              ],
-              'installedVersion': '3.0.7-r2',
-              'packageName':      'libssl3',
-              'purl':             'pkg:apk/alpine/libssl3@3.0.7-r2?arch=s390x&distro=3.17.1',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2024/06/27/1',
-                'http://www.openwall.com/lists/oss-security/2024/06/28/4',
-                'http://www.openwall.com/lists/oss-security/2024/08/15/1',
-                'https://access.redhat.com/errata/RHSA-2025:1671',
-                'https://access.redhat.com/security/cve/CVE-2024-5535',
-                'https://bugzilla.redhat.com/2294581',
-                'https://bugzilla.redhat.com/2294676',
-                'https://bugzilla.redhat.com/2301888',
-                'https://bugzilla.redhat.com/2318857',
-                'https://bugzilla.redhat.com/2318858',
-                'https://bugzilla.redhat.com/2318870',
-                'https://bugzilla.redhat.com/2318873',
-                'https://bugzilla.redhat.com/2318874',
-                'https://bugzilla.redhat.com/2318876',
-                'https://bugzilla.redhat.com/2318882',
-                'https://bugzilla.redhat.com/2318883',
-                'https://bugzilla.redhat.com/2318884',
-                'https://bugzilla.redhat.com/2318885',
-                'https://bugzilla.redhat.com/2318886',
-                'https://bugzilla.redhat.com/2318897',
-                'https://bugzilla.redhat.com/2318900',
-                'https://bugzilla.redhat.com/2318905',
-                'https://bugzilla.redhat.com/2318914',
-                'https://bugzilla.redhat.com/2318922',
-                'https://bugzilla.redhat.com/2318923',
-                'https://bugzilla.redhat.com/2318925',
-                'https://bugzilla.redhat.com/2318926',
-                'https://bugzilla.redhat.com/2318927',
-                'https://bugzilla.redhat.com/2331191',
-                'https://bugzilla.redhat.com/2339218',
-                'https://bugzilla.redhat.com/2339220',
-                'https://bugzilla.redhat.com/2339221',
-                'https://bugzilla.redhat.com/2339226',
-                'https://bugzilla.redhat.com/2339231',
-                'https://bugzilla.redhat.com/2339236',
-                'https://bugzilla.redhat.com/2339238',
-                'https://bugzilla.redhat.com/2339243',
-                'https://bugzilla.redhat.com/2339247',
-                'https://bugzilla.redhat.com/2339252',
-                'https://bugzilla.redhat.com/2339259',
-                'https://bugzilla.redhat.com/2339266',
-                'https://bugzilla.redhat.com/2339270',
-                'https://bugzilla.redhat.com/2339271',
-                'https://bugzilla.redhat.com/2339275',
-                'https://bugzilla.redhat.com/2339277',
-                'https://bugzilla.redhat.com/2339281',
-                'https://bugzilla.redhat.com/2339284',
-                'https://bugzilla.redhat.com/2339291',
-                'https://bugzilla.redhat.com/2339293',
-                'https://bugzilla.redhat.com/2339295',
-                'https://bugzilla.redhat.com/2339299',
-                'https://bugzilla.redhat.com/2339300',
-                'https://bugzilla.redhat.com/2339304',
-                'https://bugzilla.redhat.com/2339305',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2274020',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2281029',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2283757',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2294581',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-2511',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-4603',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-4741',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-5535',
-                'https://errata.almalinux.org/9/ALSA-2025-1671.html',
-                'https://errata.rockylinux.org/RLSA-2024:9333',
-                'https://github.com/openssl/openssl/commit/4ada436a1946cbb24db5ab4ca082b69c1bc10f37',
-                'https://github.com/openssl/openssl/commit/99fb785a5f85315b95288921a321a935ea29a51e',
-                'https://github.com/openssl/openssl/commit/cf6f91f6121f4db167405db2f0de410a456f260c',
-                'https://github.com/openssl/openssl/commit/e86ac436f0bd54d4517745483e2315650fae7b2c',
-                'https://github.openssl.org/openssl/extended-releases/commit/9947251413065a05189a63c9b7a6c1d4e224c21c',
-                'https://github.openssl.org/openssl/extended-releases/commit/b78ec0824da857223486660177d3b1f255c65d87',
-                'https://linux.oracle.com/cve/CVE-2024-5535.html',
-                'https://linux.oracle.com/errata/ELSA-2025-1673.html',
-                'https://lists.debian.org/debian-lts-announce/2024/10/msg00033.html',
-                'https://lists.debian.org/debian-lts-announce/2024/11/msg00000.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2024-5535',
-                'https://openssl.org/news/secadv/20240627.txt',
-                'https://security.netapp.com/advisory/ntap-20240712-0005/',
-                'https://security.netapp.com/advisory/ntap-20241025-0006/',
-                'https://security.netapp.com/advisory/ntap-20241025-0010/',
-                'https://ubuntu.com/security/notices/USN-6937-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2024-5535',
-                'https://www.openssl.org/news/secadv/20240627.txt',
-                'https://www.oracle.com/security-alerts/cpuoct2024.html#AppendixMSQL'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: SSL_select_next_proto buffer overread'
-            },
-            {
-              'cve':  'CVE-2024-2511',
-              'cvss': {
-                'redhat': {
-                  'v3score':  '3.7',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L'
-                }
-              },
-              'cwes': [
-                'CWE-1325'
-              ],
-              'description':   'Issue summary: Some non-default TLS server configurations can cause unbounded\nmemory growth when processing TLSv1.3 sessions\n\nImpact summary: An attacker may exploit certain server configurations to trigger\nunbounded memory growth that would lead to a Denial of Service\n\nThis problem can occur in TLSv1.3 if the non-default SSL_OP_NO_TICKET option is\nbeing used (but not if early_data support is also configured and the default\nanti-replay protection is in use). In this case, under certain conditions, the\nsession cache can get into an incorrect state and it will fail to flush properly\nas it fills. The session cache will continue to grow in an unbounded manner. A\nmalicious client could deliberately create the scenario for this failure to\nforce a Denial of Service. It may also happen by accident in normal operation.\n\nThis issue only affects TLS servers supporting TLSv1.3. It does not affect TLS\nclients.\n\nThe FIPS modules in 3.2, 3.1 and 3.0 are not affected by this issue. OpenSSL\n1.0.2 is also not affected by this issue.',
-              'diffID':        'sha256:b5902734b682781f128d816229ad15ec369201ddec7177fc18f3a8dcfeb00697',
-              'fixedVersions': [
-                '3.0.12-r5'
-              ],
-              'installedVersion': '3.0.7-r2',
-              'packageName':      'libssl3',
-              'purl':             'pkg:apk/alpine/libssl3@3.0.7-r2?arch=s390x&distro=3.17.1',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2024/04/08/5',
-                'https://access.redhat.com/errata/RHSA-2024:9333',
-                'https://access.redhat.com/security/cve/CVE-2024-2511',
-                'https://bugzilla.redhat.com/2274020',
-                'https://bugzilla.redhat.com/2281029',
-                'https://bugzilla.redhat.com/2283757',
-                'https://bugzilla.redhat.com/2294581',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2274020',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2281029',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2283757',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2294581',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-2511',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-4603',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-4741',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-5535',
-                'https://errata.almalinux.org/9/ALSA-2024-9333.html',
-                'https://errata.rockylinux.org/RLSA-2024:9333',
-                'https://github.com/openssl/openssl/commit/7e4d731b1c07201ad9374c1cd9ac5263bdf35bce',
-                'https://github.com/openssl/openssl/commit/b52867a9f618bb955bed2a3ce3db4d4f97ed8e5d',
-                'https://github.com/openssl/openssl/commit/e9d7083e241670332e0443da0f0d4ffb52829f08',
-                'https://github.openssl.org/openssl/extended-releases/commit/5f8d25770ae6437db119dfc951e207271a326640',
-                'https://linux.oracle.com/cve/CVE-2024-2511.html',
-                'https://linux.oracle.com/errata/ELSA-2024-9333.html',
-                'https://lists.debian.org/debian-lts-announce/2024/10/msg00033.html',
-                'https://lists.debian.org/debian-lts-announce/2024/11/msg00000.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2024-2511',
-                'https://security.netapp.com/advisory/ntap-20240503-0013/',
-                'https://ubuntu.com/security/notices/USN-6937-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2024-2511',
-                'https://www.openssl.org/news/secadv/20240408.txt',
-                'https://www.openssl.org/news/vulnerabilities.html'
-              ],
-              'severity':   'LOW',
-              'suppressed': false,
-              'title':      'openssl: Unbounded memory growth with session handling in TLSv1.3'
-            },
-            {
-              'cve':  'CVE-2024-9143',
-              'cvss': {
-                'redhat': {
-                  'v3score':  '3.7',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L'
-                }
-              },
-              'cwes': [
-                'CWE-125',
-                'CWE-787'
-              ],
-              'description':   "Issue summary: Use of the low-level GF(2^m) elliptic curve APIs with untrusted\nexplicit values for the field polynomial can lead to out-of-bounds memory reads\nor writes.\n\nImpact summary: Out of bound memory writes can lead to an application crash or\neven a possibility of a remote code execution, however, in all the protocols\ninvolving Elliptic Curve Cryptography that we're aware of, either only \"named\ncurves\" are supported, or, if explicit curve parameters are supported, they\nspecify an X9.62 encoding of binary (GF(2^m)) curves that can't represent\nproblematic input values. Thus the likelihood of existence of a vulnerable\napplication is low.\n\nIn particular, the X9.62 encoding is used for ECC keys in X.509 certificates,\nso problematic inputs cannot occur in the context of processing X.509\ncertificates.  Any problematic use-cases would have to be using an \"exotic\"\ncurve encoding.\n\nThe affected APIs include: EC_GROUP_new_curve_GF2m(), EC_GROUP_new_from_params(),\nand various supporting BN_GF2m_*() functions.\n\nApplications working with \"exotic\" explicit binary (GF(2^m)) curve parameters,\nthat make it possible to represent invalid field polynomials with a zero\nconstant term, via the above or similar APIs, may terminate abruptly as a\nresult of reading or writing outside of array bounds.  Remote code execution\ncannot easily be ruled out.\n\nThe FIPS modules in 3.3, 3.2, 3.1 and 3.0 are not affected by this issue.",
-              'diffID':        'sha256:b5902734b682781f128d816229ad15ec369201ddec7177fc18f3a8dcfeb00697',
-              'fixedVersions': [
-                '3.0.15-r1'
-              ],
-              'installedVersion': '3.0.7-r2',
-              'packageName':      'libssl3',
-              'purl':             'pkg:apk/alpine/libssl3@3.0.7-r2?arch=s390x&distro=3.17.1',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2024/10/16/1',
-                'http://www.openwall.com/lists/oss-security/2024/10/23/1',
-                'http://www.openwall.com/lists/oss-security/2024/10/24/1',
-                'https://access.redhat.com/security/cve/CVE-2024-9143',
-                'https://github.com/openssl/openssl/commit/72ae83ad214d2eef262461365a1975707f862712',
-                'https://github.com/openssl/openssl/commit/bc7e04d7c8d509fb78fc0e285aa948fb0da04700',
-                'https://github.com/openssl/openssl/commit/c0d3e4d32d2805f49bec30547f225bc4d092e1f4',
-                'https://github.com/openssl/openssl/commit/fdf6723362ca51bd883295efe206cb5b1cfa5154',
-                'https://github.openssl.org/openssl/extended-releases/commit/8efc0cbaa8ebba8e116f7b81a876a4123594d86a',
-                'https://github.openssl.org/openssl/extended-releases/commit/9d576994cec2b7aa37a91740ea7e680810957e41',
-                'https://lists.debian.org/debian-lts-announce/2024/10/msg00033.html',
-                'https://lists.debian.org/debian-lts-announce/2024/11/msg00000.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2024-9143',
-                'https://openssl-library.org/news/secadv/20241016.txt',
-                'https://security.netapp.com/advisory/ntap-20241101-0001/',
-                'https://ubuntu.com/security/notices/USN-7264-1',
-                'https://ubuntu.com/security/notices/USN-7278-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2024-9143'
-              ],
-              'severity':   'LOW',
-              'suppressed': false,
-              'title':      'openssl: Low-level invalid GF(2^m) parameters lead to OOB memory access'
-            },
-            {
-              'cve':  'CVE-2025-26519',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-787'
-              ],
-              'description':   'musl libc 0.9.13 through 1.2.5 before 1.2.6 has an out-of-bounds write vulnerability when an attacker can trigger iconv conversion of untrusted EUC-KR text to UTF-8.',
-              'diffID':        'sha256:b5902734b682781f128d816229ad15ec369201ddec7177fc18f3a8dcfeb00697',
-              'fixedVersions': [
-                '1.2.3-r6'
-              ],
-              'installedVersion': '1.2.3-r4',
-              'packageName':      'musl',
-              'purl':             'pkg:apk/alpine/musl@1.2.3-r4?arch=s390x&distro=3.17.1',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2025/02/13/2',
-                'http://www.openwall.com/lists/oss-security/2025/02/13/3',
-                'http://www.openwall.com/lists/oss-security/2025/02/13/4',
-                'http://www.openwall.com/lists/oss-security/2025/02/13/5',
-                'http://www.openwall.com/lists/oss-security/2025/02/14/5',
-                'http://www.openwall.com/lists/oss-security/2025/02/14/6',
-                'https://git.musl-libc.org/cgit/musl/commit/?id=c47ad25ea3b484e10326f933e927c0bc8cded3da',
-                'https://git.musl-libc.org/cgit/musl/commit/?id=e5adcd97b5196e29991b524237381a0202a60659',
-                'https://www.openwall.com/lists/oss-security/2025/02/13/2'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'musl libc 0.9.13 through 1.2.5 before 1.2.6 has an out-of-bounds write ...'
-            },
-            {
-              'cve':  'CVE-2025-26519',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-787'
-              ],
-              'description':   'musl libc 0.9.13 through 1.2.5 before 1.2.6 has an out-of-bounds write vulnerability when an attacker can trigger iconv conversion of untrusted EUC-KR text to UTF-8.',
-              'diffID':        'sha256:b5902734b682781f128d816229ad15ec369201ddec7177fc18f3a8dcfeb00697',
-              'fixedVersions': [
-                '1.2.3-r6'
-              ],
-              'installedVersion': '1.2.3-r4',
-              'packageName':      'musl-utils',
-              'purl':             'pkg:apk/alpine/musl-utils@1.2.3-r4?arch=s390x&distro=3.17.1',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2025/02/13/2',
-                'http://www.openwall.com/lists/oss-security/2025/02/13/3',
-                'http://www.openwall.com/lists/oss-security/2025/02/13/4',
-                'http://www.openwall.com/lists/oss-security/2025/02/13/5',
-                'http://www.openwall.com/lists/oss-security/2025/02/14/5',
-                'http://www.openwall.com/lists/oss-security/2025/02/14/6',
-                'https://git.musl-libc.org/cgit/musl/commit/?id=c47ad25ea3b484e10326f933e927c0bc8cded3da',
-                'https://git.musl-libc.org/cgit/musl/commit/?id=e5adcd97b5196e29991b524237381a0202a60659',
-                'https://www.openwall.com/lists/oss-security/2025/02/13/2'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'musl libc 0.9.13 through 1.2.5 before 1.2.6 has an out-of-bounds write ...'
-            },
-            {
-              'cve':  'CVE-2023-42363',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.5',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.8',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   'A use-after-free vulnerability was discovered in xasprintf function in xfuncs_printf.c:344 in BusyBox v.1.36.1.',
-              'diffID':        'sha256:b5902734b682781f128d816229ad15ec369201ddec7177fc18f3a8dcfeb00697',
-              'fixedVersions': [
-                '1.35.0-r31'
-              ],
-              'installedVersion': '1.35.0-r29',
-              'packageName':      'ssl_client',
-              'purl':             'pkg:apk/alpine/ssl_client@1.35.0-r29?arch=s390x&distro=3.17.1',
-              'references':       [
-                'http://lists.busybox.net/pipermail/busybox/2024-May/090760.html',
-                'https://access.redhat.com/security/cve/CVE-2023-42363',
-                'https://bugs.busybox.net/show_bug.cgi?id=15865',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-42363',
-                'https://ubuntu.com/security/notices/USN-6961-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-42363'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk'
-            },
-            {
-              'cve':  'CVE-2023-42364',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.5',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.8',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   'A use-after-free vulnerability in BusyBox v.1.36.1 allows attackers to cause a denial of service via a crafted awk pattern in the awk.c evaluate function.',
-              'diffID':        'sha256:b5902734b682781f128d816229ad15ec369201ddec7177fc18f3a8dcfeb00697',
-              'fixedVersions': [
-                '1.35.0-r31'
-              ],
-              'installedVersion': '1.35.0-r29',
-              'packageName':      'ssl_client',
-              'purl':             'pkg:apk/alpine/ssl_client@1.35.0-r29?arch=s390x&distro=3.17.1',
-              'references':       [
-                'http://lists.busybox.net/pipermail/busybox/2024-May/090762.html',
-                'https://access.redhat.com/security/cve/CVE-2023-42364',
-                'https://bugs.busybox.net/show_bug.cgi?id=15868',
-                'https://gitlab.alpinelinux.org/alpine/aports/-/blob/master/main/busybox/CVE-2023-42364-CVE-2023-42365.patch',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-42364',
-                'https://ubuntu.com/security/notices/USN-6961-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-42364'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'busybox: use-after-free'
-            },
-            {
-              'cve':  'CVE-2023-42365',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.5',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.8',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   'A use-after-free vulnerability was discovered in BusyBox v.1.36.1 via a crafted awk pattern in the awk.c copyvar function.',
-              'diffID':        'sha256:b5902734b682781f128d816229ad15ec369201ddec7177fc18f3a8dcfeb00697',
-              'fixedVersions': [
-                '1.35.0-r31'
-              ],
-              'installedVersion': '1.35.0-r29',
-              'packageName':      'ssl_client',
-              'purl':             'pkg:apk/alpine/ssl_client@1.35.0-r29?arch=s390x&distro=3.17.1',
-              'references':       [
-                'http://lists.busybox.net/pipermail/busybox/2024-May/090762.html',
-                'https://access.redhat.com/security/cve/CVE-2023-42365',
-                'https://bugs.busybox.net/show_bug.cgi?id=15871',
-                'https://gitlab.alpinelinux.org/alpine/aports/-/blob/master/main/busybox/CVE-2023-42364-CVE-2023-42365.patch',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-42365',
-                'https://ubuntu.com/security/notices/USN-6961-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-42365'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'busybox: use-after-free'
-            },
-            {
-              'cve':  'CVE-2023-42366',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.5',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.1',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-787'
-              ],
-              'description':   'A heap-buffer-overflow was discovered in BusyBox v.1.36.1 in the next_token function at awk.c:1159.',
-              'diffID':        'sha256:b5902734b682781f128d816229ad15ec369201ddec7177fc18f3a8dcfeb00697',
-              'fixedVersions': [
-                '1.35.0-r30'
-              ],
-              'installedVersion': '1.35.0-r29',
-              'packageName':      'ssl_client',
-              'purl':             'pkg:apk/alpine/ssl_client@1.35.0-r29?arch=s390x&distro=3.17.1',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2023-42366',
-                'https://bugs.busybox.net/show_bug.cgi?id=15874',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-42366',
-                'https://security.netapp.com/advisory/ntap-20241206-0007/',
-                'https://www.cve.org/CVERecord?id=CVE-2023-42366'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'busybox: A heap-buffer-overflow'
-            }
-          ]
-        }
-      ],
-      'summary': {
-        'critical':   0,
-        'high':       20,
-        'low':        4,
-        'medium':     44,
-        'suppressed': 0,
-        'unknown':    0
-      }
-    }
-  },
-  {
-    'id':    'default/13f4ac299b94b0c7b6ad1cd131adfdcceb5ee81ef2446114d7d54bb70fbcec39',
-    'type':  'storage.sbomscanner.kubewarden.io.vulnerabilityreport',
-    'links': {
-      'patch':  'https://localhost:8005/v1/storage.sbomscanner.kubewarden.io.vulnerabilityreports/default/13f4ac299b94b0c7b6ad1cd131adfdcceb5ee81ef2446114d7d54bb70fbcec39',
-      'remove': 'https://localhost:8005/v1/storage.sbomscanner.kubewarden.io.vulnerabilityreports/default/13f4ac299b94b0c7b6ad1cd131adfdcceb5ee81ef2446114d7d54bb70fbcec39',
-      'self':   'https://localhost:8005/v1/storage.sbomscanner.kubewarden.io.vulnerabilityreports/default/13f4ac299b94b0c7b6ad1cd131adfdcceb5ee81ef2446114d7d54bb70fbcec39',
-      'update': 'https://localhost:8005/v1/storage.sbomscanner.kubewarden.io.vulnerabilityreports/default/13f4ac299b94b0c7b6ad1cd131adfdcceb5ee81ef2446114d7d54bb70fbcec39',
-      'view':   'https://localhost:8005/apis/storage.sbomscanner.kubewarden.io/v1alpha1/namespaces/default/vulnerabilityreports/13f4ac299b94b0c7b6ad1cd131adfdcceb5ee81ef2446114d7d54bb70fbcec39'
-    },
-    'apiVersion':    'storage.sbomscanner.kubewarden.io/v1alpha1',
-    'imageMetadata': {
-      'digest':      'sha256:c3d45491770c51da4ef58318e3714da686bc7165338b7ab5ac758e75c7455efb',
-      'platform':    'linux/amd64',
-      'registry':    'lsong-demo1',
-      'registryURI': 'registry-1.docker.io',
-      'repository':  'library/alpine',
-      'tag':         '3.11.12'
-    },
-    'kind':     'VulnerabilityReport',
-    'metadata': {
-      'creationTimestamp': '2026-01-14T18:52:03Z',
-      'fields':            [
-        '13f4ac299b94b0c7b6ad1cd131adfdcceb5ee81ef2446114d7d54bb70fbcec39',
-        'registry-1.docker.io/library/alpine:3.11.12',
-        'linux/amd64',
-        '21 (0 suppressed)'
-      ],
-      'labels': {
-        'app.kubernetes.io/managed-by':          'sbomscanner',
-        'app.kubernetes.io/part-of':             'sbomscanner',
-        'sbomscanner.kubewarden.io/scanjob-uid': '445c600a-c4b6-40b3-bd71-f2d2140a37d5'
-      },
-      'name':            '13f4ac299b94b0c7b6ad1cd131adfdcceb5ee81ef2446114d7d54bb70fbcec39',
-      'namespace':       'default',
-      'ownerReferences': [
-        {
-          'apiVersion':         'storage.sbomscanner.kubewarden.io/v1alpha1',
-          'blockOwnerDeletion': true,
-          'controller':         true,
-          'kind':               'SBOM',
-          'name':               '13f4ac299b94b0c7b6ad1cd131adfdcceb5ee81ef2446114d7d54bb70fbcec39',
-          'uid':                '26986e8e-2003-4e3a-932f-80f2a48eb08b'
-        }
-      ],
-      'relationships': [
-        {
-          'fromId':   'default/13f4ac299b94b0c7b6ad1cd131adfdcceb5ee81ef2446114d7d54bb70fbcec39',
-          'fromType': 'storage.sbomscanner.kubewarden.io.sbom',
-          'rel':      'owner',
-          'state':    'active',
-          'message':  'Resource is current'
-        }
-      ],
-      'resourceVersion': '1',
-      'state':           {
-        'error':         false,
-        'message':       'Resource is current',
-        'name':          'active',
-        'transitioning': false
-      },
-      'uid': '88f4004e-559f-4a7e-8c87-2a645adda994'
-    },
-    'report': {
-      'results': [
-        {
-          'class':           'os-pkgs',
-          'target':          '/var/run/worker/trivy.sbom.1018507339.json (alpine 3.11.12)',
-          'type':            'alpine',
-          'vulnerabilities': [
-            {
-              'cve':  'CVE-2021-42378',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the getvar_i function",
-              'diffID':        'sha256:39982b2a789afc156fff00c707d0ff1c6ab4af8f1666a8df4787714059ce24e7',
-              'fixedVersions': [
-                '1.31.1-r11'
-              ],
-              'installedVersion': '1.31.1-r10',
-              'packageName':      'busybox',
-              'purl':             'pkg:apk/alpine/busybox@1.31.1-r10?arch=x86_64&distro=3.11.12',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42378',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42378',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42378'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the getvar_i()'
-            },
-            {
-              'cve':  'CVE-2021-42379',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the next_input_file function",
-              'diffID':        'sha256:39982b2a789afc156fff00c707d0ff1c6ab4af8f1666a8df4787714059ce24e7',
-              'fixedVersions': [
-                '1.31.1-r11'
-              ],
-              'installedVersion': '1.31.1-r10',
-              'packageName':      'busybox',
-              'purl':             'pkg:apk/alpine/busybox@1.31.1-r10?arch=x86_64&distro=3.11.12',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42379',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42379',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42379'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the next_input_file()'
-            },
-            {
-              'cve':  'CVE-2021-42380',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the clrvar function",
-              'diffID':        'sha256:39982b2a789afc156fff00c707d0ff1c6ab4af8f1666a8df4787714059ce24e7',
-              'fixedVersions': [
-                '1.31.1-r11'
-              ],
-              'installedVersion': '1.31.1-r10',
-              'packageName':      'busybox',
-              'purl':             'pkg:apk/alpine/busybox@1.31.1-r10?arch=x86_64&distro=3.11.12',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42380',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42380',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42380'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the clrvar()'
-            },
-            {
-              'cve':  'CVE-2021-42381',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the hash_init function",
-              'diffID':        'sha256:39982b2a789afc156fff00c707d0ff1c6ab4af8f1666a8df4787714059ce24e7',
-              'fixedVersions': [
-                '1.31.1-r11'
-              ],
-              'installedVersion': '1.31.1-r10',
-              'packageName':      'busybox',
-              'purl':             'pkg:apk/alpine/busybox@1.31.1-r10?arch=x86_64&distro=3.11.12',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42381',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42381',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42381'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the hash_init()'
-            },
-            {
-              'cve':  'CVE-2021-42382',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the getvar_s function",
-              'diffID':        'sha256:39982b2a789afc156fff00c707d0ff1c6ab4af8f1666a8df4787714059ce24e7',
-              'fixedVersions': [
-                '1.31.1-r11'
-              ],
-              'installedVersion': '1.31.1-r10',
-              'packageName':      'busybox',
-              'purl':             'pkg:apk/alpine/busybox@1.31.1-r10?arch=x86_64&distro=3.11.12',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42382',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42382',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42382'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the getvar_s()'
-            },
-            {
-              'cve':  'CVE-2021-42383',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the evaluate function",
-              'diffID':        'sha256:39982b2a789afc156fff00c707d0ff1c6ab4af8f1666a8df4787714059ce24e7',
-              'fixedVersions': [
-                '1.31.1-r11'
-              ],
-              'installedVersion': '1.31.1-r10',
-              'packageName':      'busybox',
-              'purl':             'pkg:apk/alpine/busybox@1.31.1-r10?arch=x86_64&distro=3.11.12',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42383',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42383',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42383'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the evaluate()'
-            },
-            {
-              'cve':  'CVE-2021-42384',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the handle_special function",
-              'diffID':        'sha256:39982b2a789afc156fff00c707d0ff1c6ab4af8f1666a8df4787714059ce24e7',
-              'fixedVersions': [
-                '1.31.1-r11'
-              ],
-              'installedVersion': '1.31.1-r10',
-              'packageName':      'busybox',
-              'purl':             'pkg:apk/alpine/busybox@1.31.1-r10?arch=x86_64&distro=3.11.12',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42384',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42384',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42384'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the handle_special()'
-            },
-            {
-              'cve':  'CVE-2021-42385',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the evaluate function",
-              'diffID':        'sha256:39982b2a789afc156fff00c707d0ff1c6ab4af8f1666a8df4787714059ce24e7',
-              'fixedVersions': [
-                '1.31.1-r11'
-              ],
-              'installedVersion': '1.31.1-r10',
-              'packageName':      'busybox',
-              'purl':             'pkg:apk/alpine/busybox@1.31.1-r10?arch=x86_64&distro=3.11.12',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42385',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42385',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42385'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the evaluate()'
-            },
-            {
-              'cve':  'CVE-2021-42386',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the nvalloc function",
-              'diffID':        'sha256:39982b2a789afc156fff00c707d0ff1c6ab4af8f1666a8df4787714059ce24e7',
-              'fixedVersions': [
-                '1.31.1-r11'
-              ],
-              'installedVersion': '1.31.1-r10',
-              'packageName':      'busybox',
-              'purl':             'pkg:apk/alpine/busybox@1.31.1-r10?arch=x86_64&distro=3.11.12',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42386',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42386',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42386'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the nvalloc()'
-            },
-            {
-              'cve':  'CVE-2021-42374',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '5.7',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-125'
-              ],
-              'description':   "An out-of-bounds heap read in Busybox's unlzma applet leads to information leak and denial of service when crafted LZMA-compressed input is decompressed. This can be triggered by any applet/format that",
-              'diffID':        'sha256:39982b2a789afc156fff00c707d0ff1c6ab4af8f1666a8df4787714059ce24e7',
-              'fixedVersions': [
-                '1.31.1-r11'
-              ],
-              'installedVersion': '1.31.1-r10',
-              'packageName':      'busybox',
-              'purl':             'pkg:apk/alpine/busybox@1.31.1-r10?arch=x86_64&distro=3.11.12',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42374',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42374',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42374'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'busybox: out-of-bounds read in unlzma applet leads to information leak and denial of service when crafted LZMA-compressed input is decompressed'
-            },
-            {
-              'cve':  'CVE-2021-42378',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the getvar_i function",
-              'diffID':        'sha256:39982b2a789afc156fff00c707d0ff1c6ab4af8f1666a8df4787714059ce24e7',
-              'fixedVersions': [
-                '1.31.1-r11'
-              ],
-              'installedVersion': '1.31.1-r10',
-              'packageName':      'ssl_client',
-              'purl':             'pkg:apk/alpine/ssl_client@1.31.1-r10?arch=x86_64&distro=3.11.12',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42378',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42378',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42378'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the getvar_i()'
-            },
-            {
-              'cve':  'CVE-2021-42379',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the next_input_file function",
-              'diffID':        'sha256:39982b2a789afc156fff00c707d0ff1c6ab4af8f1666a8df4787714059ce24e7',
-              'fixedVersions': [
-                '1.31.1-r11'
-              ],
-              'installedVersion': '1.31.1-r10',
-              'packageName':      'ssl_client',
-              'purl':             'pkg:apk/alpine/ssl_client@1.31.1-r10?arch=x86_64&distro=3.11.12',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42379',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42379',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42379'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the next_input_file()'
-            },
-            {
-              'cve':  'CVE-2021-42380',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the clrvar function",
-              'diffID':        'sha256:39982b2a789afc156fff00c707d0ff1c6ab4af8f1666a8df4787714059ce24e7',
-              'fixedVersions': [
-                '1.31.1-r11'
-              ],
-              'installedVersion': '1.31.1-r10',
-              'packageName':      'ssl_client',
-              'purl':             'pkg:apk/alpine/ssl_client@1.31.1-r10?arch=x86_64&distro=3.11.12',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42380',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42380',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42380'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the clrvar()'
-            },
-            {
-              'cve':  'CVE-2021-42381',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the hash_init function",
-              'diffID':        'sha256:39982b2a789afc156fff00c707d0ff1c6ab4af8f1666a8df4787714059ce24e7',
-              'fixedVersions': [
-                '1.31.1-r11'
-              ],
-              'installedVersion': '1.31.1-r10',
-              'packageName':      'ssl_client',
-              'purl':             'pkg:apk/alpine/ssl_client@1.31.1-r10?arch=x86_64&distro=3.11.12',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42381',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42381',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42381'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the hash_init()'
-            },
-            {
-              'cve':  'CVE-2021-42382',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the getvar_s function",
-              'diffID':        'sha256:39982b2a789afc156fff00c707d0ff1c6ab4af8f1666a8df4787714059ce24e7',
-              'fixedVersions': [
-                '1.31.1-r11'
-              ],
-              'installedVersion': '1.31.1-r10',
-              'packageName':      'ssl_client',
-              'purl':             'pkg:apk/alpine/ssl_client@1.31.1-r10?arch=x86_64&distro=3.11.12',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42382',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42382',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42382'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the getvar_s()'
-            },
-            {
-              'cve':  'CVE-2021-42383',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the evaluate function",
-              'diffID':        'sha256:39982b2a789afc156fff00c707d0ff1c6ab4af8f1666a8df4787714059ce24e7',
-              'fixedVersions': [
-                '1.31.1-r11'
-              ],
-              'installedVersion': '1.31.1-r10',
-              'packageName':      'ssl_client',
-              'purl':             'pkg:apk/alpine/ssl_client@1.31.1-r10?arch=x86_64&distro=3.11.12',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42383',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42383',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42383'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the evaluate()'
-            },
-            {
-              'cve':  'CVE-2021-42384',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the handle_special function",
-              'diffID':        'sha256:39982b2a789afc156fff00c707d0ff1c6ab4af8f1666a8df4787714059ce24e7',
-              'fixedVersions': [
-                '1.31.1-r11'
-              ],
-              'installedVersion': '1.31.1-r10',
-              'packageName':      'ssl_client',
-              'purl':             'pkg:apk/alpine/ssl_client@1.31.1-r10?arch=x86_64&distro=3.11.12',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42384',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42384',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42384'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the handle_special()'
-            },
-            {
-              'cve':  'CVE-2021-42385',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the evaluate function",
-              'diffID':        'sha256:39982b2a789afc156fff00c707d0ff1c6ab4af8f1666a8df4787714059ce24e7',
-              'fixedVersions': [
-                '1.31.1-r11'
-              ],
-              'installedVersion': '1.31.1-r10',
-              'packageName':      'ssl_client',
-              'purl':             'pkg:apk/alpine/ssl_client@1.31.1-r10?arch=x86_64&distro=3.11.12',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42385',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42385',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42385'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the evaluate()'
-            },
-            {
-              'cve':  'CVE-2021-42386',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the nvalloc function",
-              'diffID':        'sha256:39982b2a789afc156fff00c707d0ff1c6ab4af8f1666a8df4787714059ce24e7',
-              'fixedVersions': [
-                '1.31.1-r11'
-              ],
-              'installedVersion': '1.31.1-r10',
-              'packageName':      'ssl_client',
-              'purl':             'pkg:apk/alpine/ssl_client@1.31.1-r10?arch=x86_64&distro=3.11.12',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42386',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42386',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42386'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the nvalloc()'
-            },
-            {
-              'cve':  'CVE-2021-42374',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '5.7',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-125'
-              ],
-              'description':   "An out-of-bounds heap read in Busybox's unlzma applet leads to information leak and denial of service when crafted LZMA-compressed input is decompressed. This can be triggered by any applet/format that",
-              'diffID':        'sha256:39982b2a789afc156fff00c707d0ff1c6ab4af8f1666a8df4787714059ce24e7',
-              'fixedVersions': [
-                '1.31.1-r11'
-              ],
-              'installedVersion': '1.31.1-r10',
-              'packageName':      'ssl_client',
-              'purl':             'pkg:apk/alpine/ssl_client@1.31.1-r10?arch=x86_64&distro=3.11.12',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42374',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42374',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42374'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'busybox: out-of-bounds read in unlzma applet leads to information leak and denial of service when crafted LZMA-compressed input is decompressed'
-            },
-            {
-              'cve':  'CVE-2022-37434',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '9.8',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-787',
-                'CWE-120'
-              ],
-              'description':   'zlib through 1.2.12 has a heap-based buffer over-read or buffer overflow in inflate in inflate.c via a large gzip header extra field. NOTE: only applications that call inflateGetHeader are affected. Some common applications bundle the affected zlib source code but may be unable to call inflateGetHeader (e.g., see the nodejs/node reference).',
-              'diffID':        'sha256:39982b2a789afc156fff00c707d0ff1c6ab4af8f1666a8df4787714059ce24e7',
-              'fixedVersions': [
-                '1.2.11-r4'
-              ],
-              'installedVersion': '1.2.11-r3',
-              'packageName':      'zlib',
-              'purl':             'pkg:apk/alpine/zlib@1.2.11-r3?arch=x86_64&distro=3.11.12',
-              'references':       [
-                'http://seclists.org/fulldisclosure/2022/Oct/37',
-                'http://seclists.org/fulldisclosure/2022/Oct/38',
-                'http://seclists.org/fulldisclosure/2022/Oct/41',
-                'http://seclists.org/fulldisclosure/2022/Oct/42',
-                'http://www.openwall.com/lists/oss-security/2022/08/05/2',
-                'http://www.openwall.com/lists/oss-security/2022/08/09/1',
-                'https://access.redhat.com/errata/RHSA-2022:8291',
-                'https://access.redhat.com/security/cve/CVE-2022-37434',
-                'https://bugzilla.redhat.com/2116639',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2053198',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2077431',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2081296',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2116639',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-37434',
-                'https://errata.almalinux.org/9/ALSA-2022-8291.html',
-                'https://errata.rockylinux.org/RLSA-2022:8291',
-                'https://github.com/curl/curl/issues/9271',
-                'https://github.com/ivd38/zlib_overflow',
-                'https://github.com/madler/zlib/blob/21767c654d31d2dccdde4330529775c6c5fd5389/zlib.h#L1062-L1063',
-                'https://github.com/madler/zlib/commit/1eb7682f845ac9e9bf9ae35bbfb3bad5dacbd91d',
-                'https://github.com/madler/zlib/commit/eff308af425b67093bab25f80f1ae950166bece1',
-                'https://github.com/nodejs/node/blob/75b68c6e4db515f76df73af476eccf382bbcb00a/deps/zlib/inflate.c#L762-L764',
-                'https://linux.oracle.com/cve/CVE-2022-37434.html',
-                'https://linux.oracle.com/errata/ELSA-2023-1095.html',
-                'https://lists.debian.org/debian-lts-announce/2022/09/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JWN4VE3JQR4O2SOUS5TXNLANRPMHWV4I/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NMBOJ77A7T7PQCARMDUK75TE6LLESZ3O/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PAVPQNCG3XRLCLNSQRM3KAN5ZFMVXVTY/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/X5U7OTKZSHY2I3ZFJSR2SHFHW72RKGDK/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YRQAI7H4M4RQZ2IWZUEEXECBE5D56BH2/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2022-37434',
-                'https://security.netapp.com/advisory/ntap-20220901-0005/',
-                'https://security.netapp.com/advisory/ntap-20230427-0007/',
-                'https://support.apple.com/kb/HT213488',
-                'https://support.apple.com/kb/HT213489',
-                'https://support.apple.com/kb/HT213490',
-                'https://support.apple.com/kb/HT213491',
-                'https://support.apple.com/kb/HT213493',
-                'https://support.apple.com/kb/HT213494',
-                'https://ubuntu.com/security/notices/USN-5570-1',
-                'https://ubuntu.com/security/notices/USN-5570-2',
-                'https://ubuntu.com/security/notices/USN-5573-1',
-                'https://ubuntu.com/security/notices/USN-6736-1',
-                'https://ubuntu.com/security/notices/USN-6736-2',
-                'https://www.cve.org/CVERecord?id=CVE-2022-37434',
-                'https://www.debian.org/security/2022/dsa-5218'
-              ],
-              'severity':   'CRITICAL',
-              'suppressed': false,
-              'title':      'zlib: heap-based buffer over-read and overflow in inflate() in inflate.c via a large gzip header extra field'
-            }
-          ]
-        }
-      ],
-      'summary': {
-        'critical':   1,
-        'high':       18,
-        'low':        0,
-        'medium':     2,
-        'suppressed': 0,
-        'unknown':    0
-      }
-    }
-  },
-  {
-    'id':    'default/1579ec19943976bfa925404fafce73dfb102a9f0f59185f9d5bfee1e71b99545',
-    'type':  'storage.sbomscanner.kubewarden.io.vulnerabilityreport',
-    'links': {
-      'patch':  'https://localhost:8005/v1/storage.sbomscanner.kubewarden.io.vulnerabilityreports/default/1579ec19943976bfa925404fafce73dfb102a9f0f59185f9d5bfee1e71b99545',
-      'remove': 'https://localhost:8005/v1/storage.sbomscanner.kubewarden.io.vulnerabilityreports/default/1579ec19943976bfa925404fafce73dfb102a9f0f59185f9d5bfee1e71b99545',
-      'self':   'https://localhost:8005/v1/storage.sbomscanner.kubewarden.io.vulnerabilityreports/default/1579ec19943976bfa925404fafce73dfb102a9f0f59185f9d5bfee1e71b99545',
-      'update': 'https://localhost:8005/v1/storage.sbomscanner.kubewarden.io.vulnerabilityreports/default/1579ec19943976bfa925404fafce73dfb102a9f0f59185f9d5bfee1e71b99545',
-      'view':   'https://localhost:8005/apis/storage.sbomscanner.kubewarden.io/v1alpha1/namespaces/default/vulnerabilityreports/1579ec19943976bfa925404fafce73dfb102a9f0f59185f9d5bfee1e71b99545'
-    },
-    'apiVersion':    'storage.sbomscanner.kubewarden.io/v1alpha1',
-    'imageMetadata': {
-      'digest':      'sha256:a180ec8e5c7247c920c91508fa4ce86088946cc9e65f4aeb39091038bba88b0b',
-      'platform':    'linux/amd64',
-      'registry':    'lsong-demo1',
-      'registryURI': 'registry-1.docker.io',
-      'repository':  'library/alpine',
-      'tag':         '3.20.5'
-    },
-    'kind':     'VulnerabilityReport',
-    'metadata': {
-      'creationTimestamp': '2026-01-14T18:51:33Z',
-      'fields':            [
-        '1579ec19943976bfa925404fafce73dfb102a9f0f59185f9d5bfee1e71b99545',
-        'registry-1.docker.io/library/alpine:3.20.5',
-        'linux/amd64',
-        '18 (0 suppressed)'
-      ],
-      'labels': {
-        'app.kubernetes.io/managed-by':          'sbomscanner',
-        'app.kubernetes.io/part-of':             'sbomscanner',
-        'sbomscanner.kubewarden.io/scanjob-uid': '445c600a-c4b6-40b3-bd71-f2d2140a37d5'
-      },
-      'name':            '1579ec19943976bfa925404fafce73dfb102a9f0f59185f9d5bfee1e71b99545',
-      'namespace':       'default',
-      'ownerReferences': [
-        {
-          'apiVersion':         'storage.sbomscanner.kubewarden.io/v1alpha1',
-          'blockOwnerDeletion': true,
-          'controller':         true,
-          'kind':               'SBOM',
-          'name':               '1579ec19943976bfa925404fafce73dfb102a9f0f59185f9d5bfee1e71b99545',
-          'uid':                'cf087e19-2aa1-4796-9bec-5d4c52ae5e73'
-        }
-      ],
-      'relationships': [
-        {
-          'fromId':   'default/1579ec19943976bfa925404fafce73dfb102a9f0f59185f9d5bfee1e71b99545',
-          'fromType': 'storage.sbomscanner.kubewarden.io.sbom',
-          'rel':      'owner',
-          'state':    'active',
-          'message':  'Resource is current'
-        }
-      ],
-      'resourceVersion': '1',
-      'state':           {
-        'error':         false,
-        'message':       'Resource is current',
-        'name':          'active',
-        'transitioning': false
-      },
-      'uid': 'c94b8068-e941-4290-9887-67d2e2d97491'
-    },
-    'report': {
-      'results': [
-        {
-          'class':           'os-pkgs',
-          'target':          '/var/run/worker/trivy.sbom.2081304423.json (alpine 3.20.5)',
-          'type':            'alpine',
-          'vulnerabilities': [
-            {
-              'cve':  'CVE-2024-58251',
-              'cwes': [
-                'CWE-150'
-              ],
-              'description':   'In netstat in BusyBox through 1.37.0, local users can launch of network application with an argv[0] containing an ANSI terminal escape sequence, leading to a denial of service (terminal locked up) when netstat is used by a victim.',
-              'diffID':        'sha256:ce5a8cde9eeef09160653b9c3d14f0c1c0e2900033476a5f2a9fc950161c0eb2',
-              'fixedVersions': [
-                '1.36.1-r31'
-              ],
-              'installedVersion': '1.36.1-r29',
-              'packageName':      'busybox',
-              'purl':             'pkg:apk/alpine/busybox@1.36.1-r29?arch=x86_64&distro=3.20.5',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2025/04/23/6',
-                'https://bugs.busybox.net/show_bug.cgi?id=15922',
-                'https://www.busybox.net',
-                'https://www.busybox.net/downloads/',
-                'https://www.cve.org/CVERecord?id=CVE-2024-58251'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'In netstat in BusyBox through 1.37.0, local users can launch of networ ...'
-            },
-            {
-              'cve':  'CVE-2025-46394',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '3.3',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-451'
-              ],
-              'description':   'In tar in BusyBox through 1.37.0, a TAR archive can have filenames hidden from a listing through the use of terminal escape sequences.',
-              'diffID':        'sha256:ce5a8cde9eeef09160653b9c3d14f0c1c0e2900033476a5f2a9fc950161c0eb2',
-              'fixedVersions': [
-                '1.36.1-r31'
-              ],
-              'installedVersion': '1.36.1-r29',
-              'packageName':      'busybox',
-              'purl':             'pkg:apk/alpine/busybox@1.36.1-r29?arch=x86_64&distro=3.20.5',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2025/04/23/5',
-                'http://www.openwall.com/lists/oss-security/2025/04/24/3',
-                'https://bugs.busybox.net/show_bug.cgi?id=16018',
-                'https://lists.busybox.net/pipermail/busybox/2024-July/090806.html',
-                'https://lists.busybox.net/pipermail/busybox/2024-July/090814.html',
-                'https://www.busybox.net',
-                'https://www.busybox.net/downloads/',
-                'https://www.cve.org/CVERecord?id=CVE-2025-46394',
-                'https://www.openwall.com/lists/oss-security/2025/04/23/1'
-              ],
-              'severity':   'LOW',
-              'suppressed': false,
-              'title':      'In tar in BusyBox through 1.37.0, a TAR archive can have filenames hid ...'
-            },
-            {
-              'cve':  'CVE-2024-58251',
-              'cwes': [
-                'CWE-150'
-              ],
-              'description':   'In netstat in BusyBox through 1.37.0, local users can launch of network application with an argv[0] containing an ANSI terminal escape sequence, leading to a denial of service (terminal locked up) when netstat is used by a victim.',
-              'diffID':        'sha256:ce5a8cde9eeef09160653b9c3d14f0c1c0e2900033476a5f2a9fc950161c0eb2',
-              'fixedVersions': [
-                '1.36.1-r31'
-              ],
-              'installedVersion': '1.36.1-r29',
-              'packageName':      'busybox-binsh',
-              'purl':             'pkg:apk/alpine/busybox-binsh@1.36.1-r29?arch=x86_64&distro=3.20.5',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2025/04/23/6',
-                'https://bugs.busybox.net/show_bug.cgi?id=15922',
-                'https://www.busybox.net',
-                'https://www.busybox.net/downloads/',
-                'https://www.cve.org/CVERecord?id=CVE-2024-58251'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'In netstat in BusyBox through 1.37.0, local users can launch of networ ...'
-            },
-            {
-              'cve':  'CVE-2025-46394',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '3.3',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-451'
-              ],
-              'description':   'In tar in BusyBox through 1.37.0, a TAR archive can have filenames hidden from a listing through the use of terminal escape sequences.',
-              'diffID':        'sha256:ce5a8cde9eeef09160653b9c3d14f0c1c0e2900033476a5f2a9fc950161c0eb2',
-              'fixedVersions': [
-                '1.36.1-r31'
-              ],
-              'installedVersion': '1.36.1-r29',
-              'packageName':      'busybox-binsh',
-              'purl':             'pkg:apk/alpine/busybox-binsh@1.36.1-r29?arch=x86_64&distro=3.20.5',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2025/04/23/5',
-                'http://www.openwall.com/lists/oss-security/2025/04/24/3',
-                'https://bugs.busybox.net/show_bug.cgi?id=16018',
-                'https://lists.busybox.net/pipermail/busybox/2024-July/090806.html',
-                'https://lists.busybox.net/pipermail/busybox/2024-July/090814.html',
-                'https://www.busybox.net',
-                'https://www.busybox.net/downloads/',
-                'https://www.cve.org/CVERecord?id=CVE-2025-46394',
-                'https://www.openwall.com/lists/oss-security/2025/04/23/1'
-              ],
-              'severity':   'LOW',
-              'suppressed': false,
-              'title':      'In tar in BusyBox through 1.37.0, a TAR archive can have filenames hid ...'
-            },
-            {
-              'cve':  'CVE-2024-12797',
-              'cvss': {
-                'redhat': {
-                  'v3score':  '7.4',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-392'
-              ],
-              'description':   "Issue summary: Clients using RFC7250 Raw Public Keys (RPKs) to authenticate a\nserver may fail to notice that the server was not authenticated, because\nhandshakes don't abort as expected when the SSL_VERIFY_PEER verification mode\nis set.\n\nImpact summary: TLS and DTLS connections using raw public keys may be\nvulnerable to man-in-middle attacks when server authentication failure is not\ndetected by clients.\n\nRPKs are disabled by default in both TLS clients and TLS servers.  The issue\nonly arises when TLS clients explicitly enable RPK use by the server, and the\nserver, likewise, enables sending of an RPK instead of an X.509 certificate\nchain.  The affected clients are those that then rely on the handshake to\nfail when the server's RPK fails to match one of the expected public keys,\nby setting the verification mode to SSL_VERIFY_PEER.\n\nClients that enable server-side raw public keys can still find out that raw\npublic key verification failed by calling SSL_get_verify_result(), and those\nthat do, and take appropriate action, are not affected.  This issue was\nintroduced in the initial implementation of RPK support in OpenSSL 3.2.\n\nThe FIPS modules in 3.4, 3.3, 3.2, 3.1 and 3.0 are not affected by this issue.",
-              'diffID':        'sha256:ce5a8cde9eeef09160653b9c3d14f0c1c0e2900033476a5f2a9fc950161c0eb2',
-              'fixedVersions': [
-                '3.3.3-r0'
-              ],
-              'installedVersion': '3.3.2-r1',
-              'packageName':      'libcrypto3',
-              'purl':             'pkg:apk/alpine/libcrypto3@3.3.2-r1?arch=x86_64&distro=3.20.5',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2025/02/11/3',
-                'http://www.openwall.com/lists/oss-security/2025/02/11/4',
-                'https://access.redhat.com/errata/RHSA-2025:1330',
-                'https://access.redhat.com/security/cve/CVE-2024-12797',
-                'https://bugzilla.redhat.com/2342757',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2342757',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-12797',
-                'https://errata.almalinux.org/9/ALSA-2025-1330.html',
-                'https://errata.rockylinux.org/RLSA-2025:1330',
-                'https://github.com/openssl/openssl/commit/738d4f9fdeaad57660dcba50a619fafced3fd5e9',
-                'https://github.com/openssl/openssl/commit/798779d43494549b611233f92652f0da5328fbe7',
-                'https://github.com/openssl/openssl/commit/87ebd203feffcf92ad5889df92f90bb0ee10a699',
-                'https://github.com/pyca/cryptography',
-                'https://github.com/pyca/cryptography/security/advisories/GHSA-79v4-65xg-pq4g',
-                'https://linux.oracle.com/cve/CVE-2024-12797.html',
-                'https://linux.oracle.com/errata/ELSA-2025-1330.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2024-12797',
-                'https://openssl-library.org/news/secadv/20250211.txt',
-                'https://security.netapp.com/advisory/ntap-20250214-0001/',
-                'https://ubuntu.com/security/notices/USN-7264-1',
-                'https://www.cve.org/CVERecord?id=CVE-2024-12797'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      "openssl: RFC7250 handshakes with unauthenticated servers don't abort as expected"
-            },
-            {
-              'cve':  'CVE-2024-13176',
-              'cvss': {
-                'redhat': {
-                  'v3score':  '4.7',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-385'
-              ],
-              'description':   'Issue summary: A timing side-channel which could potentially allow recovering\nthe private key exists in the ECDSA signature computation.\n\nImpact summary: A timing side-channel in ECDSA signature computations\ncould allow recovering the private key by an attacker. However, measuring\nthe timing would require either local access to the signing application or\na very fast network connection with low latency.\n\nThere is a timing signal of around 300 nanoseconds when the top word of\nthe inverted ECDSA nonce value is zero. This can happen with significant\nprobability only for some of the supported elliptic curves. In particular\nthe NIST P-521 curve is affected. To be able to measure this leak, the attacker\nprocess must either be located in the same physical computer or must\nhave a very fast network connection with low latency. For that reason\nthe severity of this vulnerability is Low.\n\nThe FIPS modules in 3.4, 3.3, 3.2, 3.1 and 3.0 are affected by this issue.',
-              'diffID':        'sha256:ce5a8cde9eeef09160653b9c3d14f0c1c0e2900033476a5f2a9fc950161c0eb2',
-              'fixedVersions': [
-                '3.3.2-r2'
-              ],
-              'installedVersion': '3.3.2-r1',
-              'packageName':      'libcrypto3',
-              'purl':             'pkg:apk/alpine/libcrypto3@3.3.2-r1?arch=x86_64&distro=3.20.5',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2025/01/20/2',
-                'https://access.redhat.com/errata/RHSA-2025:16046',
-                'https://access.redhat.com/security/cve/CVE-2024-13176',
-                'https://bugzilla.redhat.com/2359885',
-                'https://bugzilla.redhat.com/2359888',
-                'https://bugzilla.redhat.com/2359892',
-                'https://bugzilla.redhat.com/2359894',
-                'https://bugzilla.redhat.com/2359895',
-                'https://bugzilla.redhat.com/2359899',
-                'https://bugzilla.redhat.com/2359900',
-                'https://bugzilla.redhat.com/2359902',
-                'https://bugzilla.redhat.com/2359903',
-                'https://bugzilla.redhat.com/2359911',
-                'https://bugzilla.redhat.com/2359918',
-                'https://bugzilla.redhat.com/2359920',
-                'https://bugzilla.redhat.com/2359924',
-                'https://bugzilla.redhat.com/2359928',
-                'https://bugzilla.redhat.com/2359930',
-                'https://bugzilla.redhat.com/2359932',
-                'https://bugzilla.redhat.com/2359934',
-                'https://bugzilla.redhat.com/2359938',
-                'https://bugzilla.redhat.com/2359940',
-                'https://bugzilla.redhat.com/2359943',
-                'https://bugzilla.redhat.com/2359944',
-                'https://bugzilla.redhat.com/2359945',
-                'https://bugzilla.redhat.com/2359947',
-                'https://bugzilla.redhat.com/2359950',
-                'https://bugzilla.redhat.com/2359963',
-                'https://bugzilla.redhat.com/2359964',
-                'https://bugzilla.redhat.com/2359972',
-                'https://bugzilla.redhat.com/2370920',
-                'https://bugzilla.redhat.com/2380264',
-                'https://bugzilla.redhat.com/2380273',
-                'https://bugzilla.redhat.com/2380274',
-                'https://bugzilla.redhat.com/2380278',
-                'https://bugzilla.redhat.com/2380280',
-                'https://bugzilla.redhat.com/2380283',
-                'https://bugzilla.redhat.com/2380284',
-                'https://bugzilla.redhat.com/2380290',
-                'https://bugzilla.redhat.com/2380291',
-                'https://bugzilla.redhat.com/2380295',
-                'https://bugzilla.redhat.com/2380298',
-                'https://bugzilla.redhat.com/2380306',
-                'https://bugzilla.redhat.com/2380308',
-                'https://bugzilla.redhat.com/2380309',
-                'https://bugzilla.redhat.com/2380310',
-                'https://bugzilla.redhat.com/2380312',
-                'https://bugzilla.redhat.com/2380313',
-                'https://bugzilla.redhat.com/2380320',
-                'https://bugzilla.redhat.com/2380321',
-                'https://bugzilla.redhat.com/2380322',
-                'https://bugzilla.redhat.com/2380326',
-                'https://bugzilla.redhat.com/2380327',
-                'https://bugzilla.redhat.com/2380334',
-                'https://bugzilla.redhat.com/2380335',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2338999',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359885',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359888',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359892',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359894',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359895',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359899',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359900',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359902',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359903',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359911',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359918',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359920',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359924',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359928',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359930',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359932',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359934',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359938',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359940',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359943',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359944',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359945',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359947',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359950',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359963',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359964',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359972',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2370920',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380264',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380273',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380274',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380278',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380280',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380283',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380284',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380290',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380291',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380295',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380298',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380306',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380308',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380309',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380310',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380312',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380313',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380320',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380321',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380322',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380326',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380327',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380334',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380335',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-13176',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21574',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21575',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21577',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21579',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21580',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21581',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21584',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21585',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21588',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30681',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30682',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30683',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30684',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30685',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30687',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30688',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30689',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30693',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30695',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30696',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30699',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30703',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30704',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30705',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30715',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30721',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30722',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50077',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50078',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50079',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50080',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50081',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50082',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50083',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50084',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50085',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50086',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50087',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50088',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50091',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50092',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50093',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50094',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50096',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50097',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50098',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50099',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50100',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50101',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50102',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50104',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-5399',
-                'https://errata.almalinux.org/9/ALSA-2025-16046.html',
-                'https://errata.rockylinux.org/RLSA-2025:15699',
-                'https://github.com/openssl/openssl/commit/07272b05b04836a762b4baa874958af51d513844',
-                'https://github.com/openssl/openssl/commit/2af62e74fb59bc469506bc37eb2990ea408d9467',
-                'https://github.com/openssl/openssl/commit/392dcb336405a0c94486aa6655057f59fd3a0902',
-                'https://github.com/openssl/openssl/commit/4b1cb94a734a7d4ec363ac0a215a25c181e11f65',
-                'https://github.com/openssl/openssl/commit/77c608f4c8857e63e98e66444e2e761c9627916f',
-                'https://github.openssl.org/openssl/extended-releases/commit/0d5fd1ab987f7571e2c955d8d8b638fc0fb54ded',
-                'https://github.openssl.org/openssl/extended-releases/commit/a2639000db19878d5d89586ae7b725080592ae86',
-                'https://linux.oracle.com/cve/CVE-2024-13176.html',
-                'https://linux.oracle.com/errata/ELSA-2025-16046.html',
-                'https://lists.debian.org/debian-lts-announce/2025/05/msg00028.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2024-13176',
-                'https://openssl-library.org/news/secadv/20250120.txt',
-                'https://security.netapp.com/advisory/ntap-20250124-0005/',
-                'https://security.netapp.com/advisory/ntap-20250418-0010/',
-                'https://security.netapp.com/advisory/ntap-20250502-0006/',
-                'https://ubuntu.com/security/notices/USN-7264-1',
-                'https://ubuntu.com/security/notices/USN-7278-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2024-13176',
-                'https://www.oracle.com/security-alerts/cpuapr2025.html#AppendixMSQL'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: Timing side-channel in ECDSA signature computation'
-            },
-            {
-              'cve':  'CVE-2025-9230',
-              'cvss': {
-                'redhat': {
-                  'v3score':  '5.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L'
-                }
-              },
-              'cwes': [
-                'CWE-125',
-                'CWE-787'
-              ],
-              'description':   'Issue summary: An application trying to decrypt CMS messages encrypted using\npassword based encryption can trigger an out-of-bounds read and write.\n\nImpact summary: This out-of-bounds read may trigger a crash which leads to\nDenial of Service for an application. The out-of-bounds write can cause\na memory corruption which can have various consequences including\na Denial of Service or Execution of attacker-supplied code.\n\nAlthough the consequences of a successful exploit of this vulnerability\ncould be severe, the probability that the attacker would be able to\nperform it is low. Besides, password based (PWRI) encryption support in CMS\nmessages is very rarely used. For that reason the issue was assessed as\nModerate severity according to our Security Policy.\n\nThe FIPS modules in 3.5, 3.4, 3.3, 3.2, 3.1 and 3.0 are not affected by this\nissue, as the CMS implementation is outside the OpenSSL FIPS module\nboundary.',
-              'diffID':        'sha256:ce5a8cde9eeef09160653b9c3d14f0c1c0e2900033476a5f2a9fc950161c0eb2',
-              'fixedVersions': [
-                '3.3.5-r0'
-              ],
-              'installedVersion': '3.3.2-r1',
-              'packageName':      'libcrypto3',
-              'purl':             'pkg:apk/alpine/libcrypto3@3.3.2-r1?arch=x86_64&distro=3.20.5',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2025/09/30/5',
-                'https://access.redhat.com/errata/RHSA-2025:21255',
-                'https://access.redhat.com/security/cve/CVE-2025-9230',
-                'https://bugzilla.redhat.com/2396054',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2396054',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-9230',
-                'https://errata.almalinux.org/9/ALSA-2025-21255.html',
-                'https://errata.rockylinux.org/RLSA-2025:21255',
-                'https://github.com/openssl/openssl/commit/5965ea5dd6960f36d8b7f74f8eac67a8eb8f2b45',
-                'https://github.com/openssl/openssl/commit/9e91358f365dee6c446dcdcdb01c04d2743fd280',
-                'https://github.com/openssl/openssl/commit/a79c4ce559c6a3a8fd4109e9f33c1185d5bf2def',
-                'https://github.com/openssl/openssl/commit/b5282d677551afda7d20e9c00e09561b547b2dfd',
-                'https://github.com/openssl/openssl/commit/bae259a211ada6315dc50900686daaaaaa55f482',
-                'https://github.openssl.org/openssl/extended-releases/commit/c2b96348bfa662f25f4fabf81958ae822063dae3',
-                'https://github.openssl.org/openssl/extended-releases/commit/dfbaf161d8dafc1132dd88cd48ad990ed9b4c8ba',
-                'https://linux.oracle.com/cve/CVE-2025-9230.html',
-                'https://linux.oracle.com/errata/ELSA-2026-0337.html',
-                'https://lists.debian.org/debian-lts-announce/2025/10/msg00001.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2025-9230',
-                'https://openssl-library.org/news/secadv/20250930.txt',
-                'https://ubuntu.com/security/notices/USN-7786-1',
-                'https://www.cve.org/CVERecord?id=CVE-2025-9230'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: Out-of-bounds read & write in RFC 3211 KEK Unwrap'
-            },
-            {
-              'cve':  'CVE-2025-9231',
-              'cvss': {
-                'redhat': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-385'
-              ],
-              'description':   'Issue summary: A timing side-channel which could potentially allow remote\nrecovery of the private key exists in the SM2 algorithm implementation on 64 bit\nARM platforms.\n\nImpact summary: A timing side-channel in SM2 signature computations on 64 bit\nARM platforms could allow recovering the private key by an attacker..\n\nWhile remote key recovery over a network was not attempted by the reporter,\ntiming measurements revealed a timing signal which may allow such an attack.\n\nOpenSSL does not directly support certificates with SM2 keys in TLS, and so\nthis CVE is not relevant in most TLS contexts.  However, given that it is\npossible to add support for such certificates via a custom provider, coupled\nwith the fact that in such a custom provider context the private key may be\nrecoverable via remote timing measurements, we consider this to be a Moderate\nseverity issue.\n\nThe FIPS modules in 3.5, 3.4, 3.3, 3.2, 3.1 and 3.0 are not affected by this\nissue, as SM2 is not an approved algorithm.',
-              'diffID':        'sha256:ce5a8cde9eeef09160653b9c3d14f0c1c0e2900033476a5f2a9fc950161c0eb2',
-              'fixedVersions': [
-                '3.3.5-r0'
-              ],
-              'installedVersion': '3.3.2-r1',
-              'packageName':      'libcrypto3',
-              'purl':             'pkg:apk/alpine/libcrypto3@3.3.2-r1?arch=x86_64&distro=3.20.5',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2025/09/30/5',
-                'https://access.redhat.com/security/cve/CVE-2025-9231',
-                'https://github.com/openssl/openssl/commit/567f64386e43683888212226824b6a179885a0fe',
-                'https://github.com/openssl/openssl/commit/cba616c26ac8e7b37de5e77762e505ba5ca51698',
-                'https://github.com/openssl/openssl/commit/eed5adc9f969d77c94f213767acbb41ff923b6f4',
-                'https://github.com/openssl/openssl/commit/fc47a2ec078912b3e914fab5734535e76c4820c2',
-                'https://nvd.nist.gov/vuln/detail/CVE-2025-9231',
-                'https://openssl-library.org/news/secadv/20250930.txt',
-                'https://ubuntu.com/security/notices/USN-7786-1',
-                'https://www.cve.org/CVERecord?id=CVE-2025-9231'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: Timing side-channel in SM2 algorithm on 64 bit ARM'
-            },
-            {
-              'cve':  'CVE-2025-9232',
-              'cvss': {
-                'redhat': {
-                  'v3score':  '3.1',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L'
-                }
-              },
-              'cwes': [
-                'CWE-125'
-              ],
-              'description':   "Issue summary: An application using the OpenSSL HTTP client API functions may\ntrigger an out-of-bounds read if the 'no_proxy' environment variable is set and\nthe host portion of the authority component of the HTTP URL is an IPv6 address.\n\nImpact summary: An out-of-bounds read can trigger a crash which leads to\nDenial of Service for an application.\n\nThe OpenSSL HTTP client API functions can be used directly by applications\nbut they are also used by the OCSP client functions and CMP (Certificate\nManagement Protocol) client implementation in OpenSSL. However the URLs used\nby these implementations are unlikely to be controlled by an attacker.\n\nIn this vulnerable code the out of bounds read can only trigger a crash.\nFurthermore the vulnerability requires an attacker-controlled URL to be\npassed from an application to the OpenSSL function and the user has to have\na 'no_proxy' environment variable set. For the aforementioned reasons the\nissue was assessed as Low severity.\n\nThe vulnerable code was introduced in the following patch releases:\n3.0.16, 3.1.8, 3.2.4, 3.3.3, 3.4.0 and 3.5.0.\n\nThe FIPS modules in 3.5, 3.4, 3.3, 3.2, 3.1 and 3.0 are not affected by this\nissue, as the HTTP client implementation is outside the OpenSSL FIPS module\nboundary.",
-              'diffID':        'sha256:ce5a8cde9eeef09160653b9c3d14f0c1c0e2900033476a5f2a9fc950161c0eb2',
-              'fixedVersions': [
-                '3.3.5-r0'
-              ],
-              'installedVersion': '3.3.2-r1',
-              'packageName':      'libcrypto3',
-              'purl':             'pkg:apk/alpine/libcrypto3@3.3.2-r1?arch=x86_64&distro=3.20.5',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2025/09/30/5',
-                'https://access.redhat.com/security/cve/CVE-2025-9232',
-                'https://github.com/openssl/openssl/commit/2b4ec20e47959170422922eaff25346d362dcb35',
-                'https://github.com/openssl/openssl/commit/654dc11d23468a74fc8ea4672b702dd3feb7be4b',
-                'https://github.com/openssl/openssl/commit/7cf21a30513c9e43c4bc3836c237cf086e194af3',
-                'https://github.com/openssl/openssl/commit/89e790ac431125a4849992858490bed6b225eadf',
-                'https://github.com/openssl/openssl/commit/bbf38c034cdabd0a13330abcc4855c866f53d2e0',
-                'https://nvd.nist.gov/vuln/detail/CVE-2025-9232',
-                'https://openssl-library.org/news/secadv/20250930.txt',
-                'https://ubuntu.com/security/notices/USN-7786-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2025-9232'
-              ],
-              'severity':   'LOW',
-              'suppressed': false,
-              'title':      'openssl: Out-of-bounds read in HTTP client no_proxy handling'
-            },
-            {
-              'cve':  'CVE-2024-12797',
-              'cvss': {
-                'redhat': {
-                  'v3score':  '7.4',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-392'
-              ],
-              'description':   "Issue summary: Clients using RFC7250 Raw Public Keys (RPKs) to authenticate a\nserver may fail to notice that the server was not authenticated, because\nhandshakes don't abort as expected when the SSL_VERIFY_PEER verification mode\nis set.\n\nImpact summary: TLS and DTLS connections using raw public keys may be\nvulnerable to man-in-middle attacks when server authentication failure is not\ndetected by clients.\n\nRPKs are disabled by default in both TLS clients and TLS servers.  The issue\nonly arises when TLS clients explicitly enable RPK use by the server, and the\nserver, likewise, enables sending of an RPK instead of an X.509 certificate\nchain.  The affected clients are those that then rely on the handshake to\nfail when the server's RPK fails to match one of the expected public keys,\nby setting the verification mode to SSL_VERIFY_PEER.\n\nClients that enable server-side raw public keys can still find out that raw\npublic key verification failed by calling SSL_get_verify_result(), and those\nthat do, and take appropriate action, are not affected.  This issue was\nintroduced in the initial implementation of RPK support in OpenSSL 3.2.\n\nThe FIPS modules in 3.4, 3.3, 3.2, 3.1 and 3.0 are not affected by this issue.",
-              'diffID':        'sha256:ce5a8cde9eeef09160653b9c3d14f0c1c0e2900033476a5f2a9fc950161c0eb2',
-              'fixedVersions': [
-                '3.3.3-r0'
-              ],
-              'installedVersion': '3.3.2-r1',
-              'packageName':      'libssl3',
-              'purl':             'pkg:apk/alpine/libssl3@3.3.2-r1?arch=x86_64&distro=3.20.5',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2025/02/11/3',
-                'http://www.openwall.com/lists/oss-security/2025/02/11/4',
-                'https://access.redhat.com/errata/RHSA-2025:1330',
-                'https://access.redhat.com/security/cve/CVE-2024-12797',
-                'https://bugzilla.redhat.com/2342757',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2342757',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-12797',
-                'https://errata.almalinux.org/9/ALSA-2025-1330.html',
-                'https://errata.rockylinux.org/RLSA-2025:1330',
-                'https://github.com/openssl/openssl/commit/738d4f9fdeaad57660dcba50a619fafced3fd5e9',
-                'https://github.com/openssl/openssl/commit/798779d43494549b611233f92652f0da5328fbe7',
-                'https://github.com/openssl/openssl/commit/87ebd203feffcf92ad5889df92f90bb0ee10a699',
-                'https://github.com/pyca/cryptography',
-                'https://github.com/pyca/cryptography/security/advisories/GHSA-79v4-65xg-pq4g',
-                'https://linux.oracle.com/cve/CVE-2024-12797.html',
-                'https://linux.oracle.com/errata/ELSA-2025-1330.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2024-12797',
-                'https://openssl-library.org/news/secadv/20250211.txt',
-                'https://security.netapp.com/advisory/ntap-20250214-0001/',
-                'https://ubuntu.com/security/notices/USN-7264-1',
-                'https://www.cve.org/CVERecord?id=CVE-2024-12797'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      "openssl: RFC7250 handshakes with unauthenticated servers don't abort as expected"
-            },
-            {
-              'cve':  'CVE-2024-13176',
-              'cvss': {
-                'redhat': {
-                  'v3score':  '4.7',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-385'
-              ],
-              'description':   'Issue summary: A timing side-channel which could potentially allow recovering\nthe private key exists in the ECDSA signature computation.\n\nImpact summary: A timing side-channel in ECDSA signature computations\ncould allow recovering the private key by an attacker. However, measuring\nthe timing would require either local access to the signing application or\na very fast network connection with low latency.\n\nThere is a timing signal of around 300 nanoseconds when the top word of\nthe inverted ECDSA nonce value is zero. This can happen with significant\nprobability only for some of the supported elliptic curves. In particular\nthe NIST P-521 curve is affected. To be able to measure this leak, the attacker\nprocess must either be located in the same physical computer or must\nhave a very fast network connection with low latency. For that reason\nthe severity of this vulnerability is Low.\n\nThe FIPS modules in 3.4, 3.3, 3.2, 3.1 and 3.0 are affected by this issue.',
-              'diffID':        'sha256:ce5a8cde9eeef09160653b9c3d14f0c1c0e2900033476a5f2a9fc950161c0eb2',
-              'fixedVersions': [
-                '3.3.2-r2'
-              ],
-              'installedVersion': '3.3.2-r1',
-              'packageName':      'libssl3',
-              'purl':             'pkg:apk/alpine/libssl3@3.3.2-r1?arch=x86_64&distro=3.20.5',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2025/01/20/2',
-                'https://access.redhat.com/errata/RHSA-2025:16046',
-                'https://access.redhat.com/security/cve/CVE-2024-13176',
-                'https://bugzilla.redhat.com/2359885',
-                'https://bugzilla.redhat.com/2359888',
-                'https://bugzilla.redhat.com/2359892',
-                'https://bugzilla.redhat.com/2359894',
-                'https://bugzilla.redhat.com/2359895',
-                'https://bugzilla.redhat.com/2359899',
-                'https://bugzilla.redhat.com/2359900',
-                'https://bugzilla.redhat.com/2359902',
-                'https://bugzilla.redhat.com/2359903',
-                'https://bugzilla.redhat.com/2359911',
-                'https://bugzilla.redhat.com/2359918',
-                'https://bugzilla.redhat.com/2359920',
-                'https://bugzilla.redhat.com/2359924',
-                'https://bugzilla.redhat.com/2359928',
-                'https://bugzilla.redhat.com/2359930',
-                'https://bugzilla.redhat.com/2359932',
-                'https://bugzilla.redhat.com/2359934',
-                'https://bugzilla.redhat.com/2359938',
-                'https://bugzilla.redhat.com/2359940',
-                'https://bugzilla.redhat.com/2359943',
-                'https://bugzilla.redhat.com/2359944',
-                'https://bugzilla.redhat.com/2359945',
-                'https://bugzilla.redhat.com/2359947',
-                'https://bugzilla.redhat.com/2359950',
-                'https://bugzilla.redhat.com/2359963',
-                'https://bugzilla.redhat.com/2359964',
-                'https://bugzilla.redhat.com/2359972',
-                'https://bugzilla.redhat.com/2370920',
-                'https://bugzilla.redhat.com/2380264',
-                'https://bugzilla.redhat.com/2380273',
-                'https://bugzilla.redhat.com/2380274',
-                'https://bugzilla.redhat.com/2380278',
-                'https://bugzilla.redhat.com/2380280',
-                'https://bugzilla.redhat.com/2380283',
-                'https://bugzilla.redhat.com/2380284',
-                'https://bugzilla.redhat.com/2380290',
-                'https://bugzilla.redhat.com/2380291',
-                'https://bugzilla.redhat.com/2380295',
-                'https://bugzilla.redhat.com/2380298',
-                'https://bugzilla.redhat.com/2380306',
-                'https://bugzilla.redhat.com/2380308',
-                'https://bugzilla.redhat.com/2380309',
-                'https://bugzilla.redhat.com/2380310',
-                'https://bugzilla.redhat.com/2380312',
-                'https://bugzilla.redhat.com/2380313',
-                'https://bugzilla.redhat.com/2380320',
-                'https://bugzilla.redhat.com/2380321',
-                'https://bugzilla.redhat.com/2380322',
-                'https://bugzilla.redhat.com/2380326',
-                'https://bugzilla.redhat.com/2380327',
-                'https://bugzilla.redhat.com/2380334',
-                'https://bugzilla.redhat.com/2380335',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2338999',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359885',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359888',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359892',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359894',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359895',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359899',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359900',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359902',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359903',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359911',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359918',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359920',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359924',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359928',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359930',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359932',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359934',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359938',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359940',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359943',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359944',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359945',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359947',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359950',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359963',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359964',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359972',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2370920',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380264',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380273',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380274',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380278',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380280',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380283',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380284',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380290',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380291',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380295',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380298',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380306',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380308',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380309',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380310',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380312',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380313',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380320',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380321',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380322',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380326',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380327',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380334',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380335',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-13176',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21574',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21575',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21577',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21579',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21580',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21581',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21584',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21585',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21588',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30681',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30682',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30683',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30684',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30685',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30687',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30688',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30689',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30693',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30695',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30696',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30699',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30703',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30704',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30705',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30715',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30721',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30722',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50077',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50078',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50079',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50080',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50081',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50082',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50083',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50084',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50085',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50086',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50087',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50088',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50091',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50092',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50093',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50094',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50096',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50097',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50098',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50099',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50100',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50101',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50102',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50104',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-5399',
-                'https://errata.almalinux.org/9/ALSA-2025-16046.html',
-                'https://errata.rockylinux.org/RLSA-2025:15699',
-                'https://github.com/openssl/openssl/commit/07272b05b04836a762b4baa874958af51d513844',
-                'https://github.com/openssl/openssl/commit/2af62e74fb59bc469506bc37eb2990ea408d9467',
-                'https://github.com/openssl/openssl/commit/392dcb336405a0c94486aa6655057f59fd3a0902',
-                'https://github.com/openssl/openssl/commit/4b1cb94a734a7d4ec363ac0a215a25c181e11f65',
-                'https://github.com/openssl/openssl/commit/77c608f4c8857e63e98e66444e2e761c9627916f',
-                'https://github.openssl.org/openssl/extended-releases/commit/0d5fd1ab987f7571e2c955d8d8b638fc0fb54ded',
-                'https://github.openssl.org/openssl/extended-releases/commit/a2639000db19878d5d89586ae7b725080592ae86',
-                'https://linux.oracle.com/cve/CVE-2024-13176.html',
-                'https://linux.oracle.com/errata/ELSA-2025-16046.html',
-                'https://lists.debian.org/debian-lts-announce/2025/05/msg00028.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2024-13176',
-                'https://openssl-library.org/news/secadv/20250120.txt',
-                'https://security.netapp.com/advisory/ntap-20250124-0005/',
-                'https://security.netapp.com/advisory/ntap-20250418-0010/',
-                'https://security.netapp.com/advisory/ntap-20250502-0006/',
-                'https://ubuntu.com/security/notices/USN-7264-1',
-                'https://ubuntu.com/security/notices/USN-7278-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2024-13176',
-                'https://www.oracle.com/security-alerts/cpuapr2025.html#AppendixMSQL'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: Timing side-channel in ECDSA signature computation'
-            },
-            {
-              'cve':  'CVE-2025-9230',
-              'cvss': {
-                'redhat': {
-                  'v3score':  '5.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L'
-                }
-              },
-              'cwes': [
-                'CWE-125',
-                'CWE-787'
-              ],
-              'description':   'Issue summary: An application trying to decrypt CMS messages encrypted using\npassword based encryption can trigger an out-of-bounds read and write.\n\nImpact summary: This out-of-bounds read may trigger a crash which leads to\nDenial of Service for an application. The out-of-bounds write can cause\na memory corruption which can have various consequences including\na Denial of Service or Execution of attacker-supplied code.\n\nAlthough the consequences of a successful exploit of this vulnerability\ncould be severe, the probability that the attacker would be able to\nperform it is low. Besides, password based (PWRI) encryption support in CMS\nmessages is very rarely used. For that reason the issue was assessed as\nModerate severity according to our Security Policy.\n\nThe FIPS modules in 3.5, 3.4, 3.3, 3.2, 3.1 and 3.0 are not affected by this\nissue, as the CMS implementation is outside the OpenSSL FIPS module\nboundary.',
-              'diffID':        'sha256:ce5a8cde9eeef09160653b9c3d14f0c1c0e2900033476a5f2a9fc950161c0eb2',
-              'fixedVersions': [
-                '3.3.5-r0'
-              ],
-              'installedVersion': '3.3.2-r1',
-              'packageName':      'libssl3',
-              'purl':             'pkg:apk/alpine/libssl3@3.3.2-r1?arch=x86_64&distro=3.20.5',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2025/09/30/5',
-                'https://access.redhat.com/errata/RHSA-2025:21255',
-                'https://access.redhat.com/security/cve/CVE-2025-9230',
-                'https://bugzilla.redhat.com/2396054',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2396054',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-9230',
-                'https://errata.almalinux.org/9/ALSA-2025-21255.html',
-                'https://errata.rockylinux.org/RLSA-2025:21255',
-                'https://github.com/openssl/openssl/commit/5965ea5dd6960f36d8b7f74f8eac67a8eb8f2b45',
-                'https://github.com/openssl/openssl/commit/9e91358f365dee6c446dcdcdb01c04d2743fd280',
-                'https://github.com/openssl/openssl/commit/a79c4ce559c6a3a8fd4109e9f33c1185d5bf2def',
-                'https://github.com/openssl/openssl/commit/b5282d677551afda7d20e9c00e09561b547b2dfd',
-                'https://github.com/openssl/openssl/commit/bae259a211ada6315dc50900686daaaaaa55f482',
-                'https://github.openssl.org/openssl/extended-releases/commit/c2b96348bfa662f25f4fabf81958ae822063dae3',
-                'https://github.openssl.org/openssl/extended-releases/commit/dfbaf161d8dafc1132dd88cd48ad990ed9b4c8ba',
-                'https://linux.oracle.com/cve/CVE-2025-9230.html',
-                'https://linux.oracle.com/errata/ELSA-2026-0337.html',
-                'https://lists.debian.org/debian-lts-announce/2025/10/msg00001.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2025-9230',
-                'https://openssl-library.org/news/secadv/20250930.txt',
-                'https://ubuntu.com/security/notices/USN-7786-1',
-                'https://www.cve.org/CVERecord?id=CVE-2025-9230'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: Out-of-bounds read & write in RFC 3211 KEK Unwrap'
-            },
-            {
-              'cve':  'CVE-2025-9231',
-              'cvss': {
-                'redhat': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-385'
-              ],
-              'description':   'Issue summary: A timing side-channel which could potentially allow remote\nrecovery of the private key exists in the SM2 algorithm implementation on 64 bit\nARM platforms.\n\nImpact summary: A timing side-channel in SM2 signature computations on 64 bit\nARM platforms could allow recovering the private key by an attacker..\n\nWhile remote key recovery over a network was not attempted by the reporter,\ntiming measurements revealed a timing signal which may allow such an attack.\n\nOpenSSL does not directly support certificates with SM2 keys in TLS, and so\nthis CVE is not relevant in most TLS contexts.  However, given that it is\npossible to add support for such certificates via a custom provider, coupled\nwith the fact that in such a custom provider context the private key may be\nrecoverable via remote timing measurements, we consider this to be a Moderate\nseverity issue.\n\nThe FIPS modules in 3.5, 3.4, 3.3, 3.2, 3.1 and 3.0 are not affected by this\nissue, as SM2 is not an approved algorithm.',
-              'diffID':        'sha256:ce5a8cde9eeef09160653b9c3d14f0c1c0e2900033476a5f2a9fc950161c0eb2',
-              'fixedVersions': [
-                '3.3.5-r0'
-              ],
-              'installedVersion': '3.3.2-r1',
-              'packageName':      'libssl3',
-              'purl':             'pkg:apk/alpine/libssl3@3.3.2-r1?arch=x86_64&distro=3.20.5',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2025/09/30/5',
-                'https://access.redhat.com/security/cve/CVE-2025-9231',
-                'https://github.com/openssl/openssl/commit/567f64386e43683888212226824b6a179885a0fe',
-                'https://github.com/openssl/openssl/commit/cba616c26ac8e7b37de5e77762e505ba5ca51698',
-                'https://github.com/openssl/openssl/commit/eed5adc9f969d77c94f213767acbb41ff923b6f4',
-                'https://github.com/openssl/openssl/commit/fc47a2ec078912b3e914fab5734535e76c4820c2',
-                'https://nvd.nist.gov/vuln/detail/CVE-2025-9231',
-                'https://openssl-library.org/news/secadv/20250930.txt',
-                'https://ubuntu.com/security/notices/USN-7786-1',
-                'https://www.cve.org/CVERecord?id=CVE-2025-9231'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: Timing side-channel in SM2 algorithm on 64 bit ARM'
-            },
-            {
-              'cve':  'CVE-2025-9232',
-              'cvss': {
-                'redhat': {
-                  'v3score':  '3.1',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L'
-                }
-              },
-              'cwes': [
-                'CWE-125'
-              ],
-              'description':   "Issue summary: An application using the OpenSSL HTTP client API functions may\ntrigger an out-of-bounds read if the 'no_proxy' environment variable is set and\nthe host portion of the authority component of the HTTP URL is an IPv6 address.\n\nImpact summary: An out-of-bounds read can trigger a crash which leads to\nDenial of Service for an application.\n\nThe OpenSSL HTTP client API functions can be used directly by applications\nbut they are also used by the OCSP client functions and CMP (Certificate\nManagement Protocol) client implementation in OpenSSL. However the URLs used\nby these implementations are unlikely to be controlled by an attacker.\n\nIn this vulnerable code the out of bounds read can only trigger a crash.\nFurthermore the vulnerability requires an attacker-controlled URL to be\npassed from an application to the OpenSSL function and the user has to have\na 'no_proxy' environment variable set. For the aforementioned reasons the\nissue was assessed as Low severity.\n\nThe vulnerable code was introduced in the following patch releases:\n3.0.16, 3.1.8, 3.2.4, 3.3.3, 3.4.0 and 3.5.0.\n\nThe FIPS modules in 3.5, 3.4, 3.3, 3.2, 3.1 and 3.0 are not affected by this\nissue, as the HTTP client implementation is outside the OpenSSL FIPS module\nboundary.",
-              'diffID':        'sha256:ce5a8cde9eeef09160653b9c3d14f0c1c0e2900033476a5f2a9fc950161c0eb2',
-              'fixedVersions': [
-                '3.3.5-r0'
-              ],
-              'installedVersion': '3.3.2-r1',
-              'packageName':      'libssl3',
-              'purl':             'pkg:apk/alpine/libssl3@3.3.2-r1?arch=x86_64&distro=3.20.5',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2025/09/30/5',
-                'https://access.redhat.com/security/cve/CVE-2025-9232',
-                'https://github.com/openssl/openssl/commit/2b4ec20e47959170422922eaff25346d362dcb35',
-                'https://github.com/openssl/openssl/commit/654dc11d23468a74fc8ea4672b702dd3feb7be4b',
-                'https://github.com/openssl/openssl/commit/7cf21a30513c9e43c4bc3836c237cf086e194af3',
-                'https://github.com/openssl/openssl/commit/89e790ac431125a4849992858490bed6b225eadf',
-                'https://github.com/openssl/openssl/commit/bbf38c034cdabd0a13330abcc4855c866f53d2e0',
-                'https://nvd.nist.gov/vuln/detail/CVE-2025-9232',
-                'https://openssl-library.org/news/secadv/20250930.txt',
-                'https://ubuntu.com/security/notices/USN-7786-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2025-9232'
-              ],
-              'severity':   'LOW',
-              'suppressed': false,
-              'title':      'openssl: Out-of-bounds read in HTTP client no_proxy handling'
-            },
-            {
-              'cve':  'CVE-2025-26519',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-787'
-              ],
-              'description':   'musl libc 0.9.13 through 1.2.5 before 1.2.6 has an out-of-bounds write vulnerability when an attacker can trigger iconv conversion of untrusted EUC-KR text to UTF-8.',
-              'diffID':        'sha256:ce5a8cde9eeef09160653b9c3d14f0c1c0e2900033476a5f2a9fc950161c0eb2',
-              'fixedVersions': [
-                '1.2.5-r1'
-              ],
-              'installedVersion': '1.2.5-r0',
-              'packageName':      'musl',
-              'purl':             'pkg:apk/alpine/musl@1.2.5-r0?arch=x86_64&distro=3.20.5',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2025/02/13/2',
-                'http://www.openwall.com/lists/oss-security/2025/02/13/3',
-                'http://www.openwall.com/lists/oss-security/2025/02/13/4',
-                'http://www.openwall.com/lists/oss-security/2025/02/13/5',
-                'http://www.openwall.com/lists/oss-security/2025/02/14/5',
-                'http://www.openwall.com/lists/oss-security/2025/02/14/6',
-                'https://git.musl-libc.org/cgit/musl/commit/?id=c47ad25ea3b484e10326f933e927c0bc8cded3da',
-                'https://git.musl-libc.org/cgit/musl/commit/?id=e5adcd97b5196e29991b524237381a0202a60659',
-                'https://www.openwall.com/lists/oss-security/2025/02/13/2'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'musl libc 0.9.13 through 1.2.5 before 1.2.6 has an out-of-bounds write ...'
-            },
-            {
-              'cve':  'CVE-2025-26519',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-787'
-              ],
-              'description':   'musl libc 0.9.13 through 1.2.5 before 1.2.6 has an out-of-bounds write vulnerability when an attacker can trigger iconv conversion of untrusted EUC-KR text to UTF-8.',
-              'diffID':        'sha256:ce5a8cde9eeef09160653b9c3d14f0c1c0e2900033476a5f2a9fc950161c0eb2',
-              'fixedVersions': [
-                '1.2.5-r1'
-              ],
-              'installedVersion': '1.2.5-r0',
-              'packageName':      'musl-utils',
-              'purl':             'pkg:apk/alpine/musl-utils@1.2.5-r0?arch=x86_64&distro=3.20.5',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2025/02/13/2',
-                'http://www.openwall.com/lists/oss-security/2025/02/13/3',
-                'http://www.openwall.com/lists/oss-security/2025/02/13/4',
-                'http://www.openwall.com/lists/oss-security/2025/02/13/5',
-                'http://www.openwall.com/lists/oss-security/2025/02/14/5',
-                'http://www.openwall.com/lists/oss-security/2025/02/14/6',
-                'https://git.musl-libc.org/cgit/musl/commit/?id=c47ad25ea3b484e10326f933e927c0bc8cded3da',
-                'https://git.musl-libc.org/cgit/musl/commit/?id=e5adcd97b5196e29991b524237381a0202a60659',
-                'https://www.openwall.com/lists/oss-security/2025/02/13/2'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'musl libc 0.9.13 through 1.2.5 before 1.2.6 has an out-of-bounds write ...'
-            },
-            {
-              'cve':  'CVE-2024-58251',
-              'cwes': [
-                'CWE-150'
-              ],
-              'description':   'In netstat in BusyBox through 1.37.0, local users can launch of network application with an argv[0] containing an ANSI terminal escape sequence, leading to a denial of service (terminal locked up) when netstat is used by a victim.',
-              'diffID':        'sha256:ce5a8cde9eeef09160653b9c3d14f0c1c0e2900033476a5f2a9fc950161c0eb2',
-              'fixedVersions': [
-                '1.36.1-r31'
-              ],
-              'installedVersion': '1.36.1-r29',
-              'packageName':      'ssl_client',
-              'purl':             'pkg:apk/alpine/ssl_client@1.36.1-r29?arch=x86_64&distro=3.20.5',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2025/04/23/6',
-                'https://bugs.busybox.net/show_bug.cgi?id=15922',
-                'https://www.busybox.net',
-                'https://www.busybox.net/downloads/',
-                'https://www.cve.org/CVERecord?id=CVE-2024-58251'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'In netstat in BusyBox through 1.37.0, local users can launch of networ ...'
-            },
-            {
-              'cve':  'CVE-2025-46394',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '3.3',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-451'
-              ],
-              'description':   'In tar in BusyBox through 1.37.0, a TAR archive can have filenames hidden from a listing through the use of terminal escape sequences.',
-              'diffID':        'sha256:ce5a8cde9eeef09160653b9c3d14f0c1c0e2900033476a5f2a9fc950161c0eb2',
-              'fixedVersions': [
-                '1.36.1-r31'
-              ],
-              'installedVersion': '1.36.1-r29',
-              'packageName':      'ssl_client',
-              'purl':             'pkg:apk/alpine/ssl_client@1.36.1-r29?arch=x86_64&distro=3.20.5',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2025/04/23/5',
-                'http://www.openwall.com/lists/oss-security/2025/04/24/3',
-                'https://bugs.busybox.net/show_bug.cgi?id=16018',
-                'https://lists.busybox.net/pipermail/busybox/2024-July/090806.html',
-                'https://lists.busybox.net/pipermail/busybox/2024-July/090814.html',
-                'https://www.busybox.net',
-                'https://www.busybox.net/downloads/',
-                'https://www.cve.org/CVERecord?id=CVE-2025-46394',
-                'https://www.openwall.com/lists/oss-security/2025/04/23/1'
-              ],
-              'severity':   'LOW',
-              'suppressed': false,
-              'title':      'In tar in BusyBox through 1.37.0, a TAR archive can have filenames hid ...'
-            }
-          ]
-        }
-      ],
-      'summary': {
-        'critical':   0,
-        'high':       4,
-        'low':        5,
-        'medium':     9,
-        'suppressed': 0,
-        'unknown':    0
-      }
-    }
-  },
-  {
-    'id':    'default/15e1d71b11b9d3869484139a1e15a57266308aca4763b860f49003a8994b1067',
-    'type':  'storage.sbomscanner.kubewarden.io.vulnerabilityreport',
-    'links': {
-      'patch':  'https://localhost:8005/v1/storage.sbomscanner.kubewarden.io.vulnerabilityreports/default/15e1d71b11b9d3869484139a1e15a57266308aca4763b860f49003a8994b1067',
-      'remove': 'https://localhost:8005/v1/storage.sbomscanner.kubewarden.io.vulnerabilityreports/default/15e1d71b11b9d3869484139a1e15a57266308aca4763b860f49003a8994b1067',
-      'self':   'https://localhost:8005/v1/storage.sbomscanner.kubewarden.io.vulnerabilityreports/default/15e1d71b11b9d3869484139a1e15a57266308aca4763b860f49003a8994b1067',
-      'update': 'https://localhost:8005/v1/storage.sbomscanner.kubewarden.io.vulnerabilityreports/default/15e1d71b11b9d3869484139a1e15a57266308aca4763b860f49003a8994b1067',
-      'view':   'https://localhost:8005/apis/storage.sbomscanner.kubewarden.io/v1alpha1/namespaces/default/vulnerabilityreports/15e1d71b11b9d3869484139a1e15a57266308aca4763b860f49003a8994b1067'
-    },
-    'apiVersion':    'storage.sbomscanner.kubewarden.io/v1alpha1',
-    'imageMetadata': {
-      'digest':      'sha256:80f691e9e10cd37a21364379cd20481518ef27871941820f5702d8d6486a6c2f',
-      'platform':    'linux/amd64',
-      'registry':    'demo-02',
-      'registryURI': 'ghcr.io',
-      'repository':  'linuxcontainers/alpine',
-      'tag':         '3.15.0'
-    },
-    'kind':     'VulnerabilityReport',
-    'metadata': {
-      'creationTimestamp': '2026-01-09T22:45:57Z',
-      'fields':            [
-        '15e1d71b11b9d3869484139a1e15a57266308aca4763b860f49003a8994b1067',
-        'ghcr.io/linuxcontainers/alpine:3.15.0',
-        'linux/amd64',
-        '29 (0 suppressed)'
-      ],
-      'labels': {
-        'app.kubernetes.io/managed-by':          'sbomscanner',
-        'app.kubernetes.io/part-of':             'sbomscanner',
-        'sbomscanner.kubewarden.io/scanjob-uid': '42184d01-4b15-466f-98aa-e802d1b6b6b8'
-      },
-      'name':            '15e1d71b11b9d3869484139a1e15a57266308aca4763b860f49003a8994b1067',
-      'namespace':       'default',
-      'ownerReferences': [
-        {
-          'apiVersion':         'storage.sbomscanner.kubewarden.io/v1alpha1',
-          'blockOwnerDeletion': true,
-          'controller':         true,
-          'kind':               'SBOM',
-          'name':               '15e1d71b11b9d3869484139a1e15a57266308aca4763b860f49003a8994b1067',
-          'uid':                'b3a9a0e4-4799-4868-9872-10ec619c2e1e'
-        }
-      ],
-      'relationships': [
-        {
-          'fromId':   'default/15e1d71b11b9d3869484139a1e15a57266308aca4763b860f49003a8994b1067',
-          'fromType': 'storage.sbomscanner.kubewarden.io.sbom',
-          'rel':      'owner',
-          'state':    'active',
-          'message':  'Resource is current'
-        }
-      ],
-      'resourceVersion': '6',
-      'state':           {
-        'error':         false,
-        'message':       'Resource is current',
-        'name':          'active',
-        'transitioning': false
-      },
-      'uid': 'ef7641b7-b677-4d16-97ba-f92d82680d53'
-    },
-    'report': {
-      'results': [
-        {
-          'class':           'os-pkgs',
-          'target':          '/var/run/worker/trivy.sbom.1861063725.json (alpine 3.15.0)',
-          'type':            'alpine',
-          'vulnerabilities': [
-            {
-              'cve':  'CVE-2022-28391',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '8.8',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-88'
-              ],
-              'description':   "BusyBox through 1.35.0 allows remote attackers to execute arbitrary code if netstat is used to print a DNS PTR record's value to a VT compatible terminal. Alternatively, the attacker could choose to change the terminal's colors.",
-              'diffID':        'sha256:9118d71d4a4416e4a3502232ac38f47ab799e075c285ddf0733c98288ed2aa11',
-              'fixedVersions': [
-                '1.34.1-r5'
-              ],
-              'installedVersion': '1.34.1-r4',
-              'packageName':      'busybox',
-              'purl':             'pkg:apk/alpine/busybox@1.34.1-r4?arch=x86_64&distro=3.15.0',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2022-28391',
-                'https://git.alpinelinux.org/aports/plain/main/busybox/0001-libbb-sockaddr2str-ensure-only-printable-characters-.patch',
-                'https://git.alpinelinux.org/aports/plain/main/busybox/0002-nslookup-sanitize-all-printed-strings-with-printable.patch',
-                'https://gitlab.alpinelinux.org/alpine/aports/-/issues/13661',
-                'https://nvd.nist.gov/vuln/detail/CVE-2022-28391',
-                'https://www.cve.org/CVERecord?id=CVE-2022-28391'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: remote attackers may execute arbitrary code if netstat is used'
-            },
-            {
-              'cve':  'CVE-2022-0778',
-              'cvss': {
-                'bitnami': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'ghsa': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'nvd': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-835'
-              ],
-              'description':   'The BN_mod_sqrt() function, which computes a modular square root, contains a bug that can cause it to loop forever for non-prime moduli. Internally this function is used when parsing certificates that contain elliptic curve public keys in compressed form or explicit elliptic curve parameters with a base point encoded in compressed form. It is possible to trigger the infinite loop by crafting a certificate that has invalid explicit curve parameters. Since certificate parsing happens prior to verification of the certificate signature, any process that parses an externally supplied certificate may thus be subject to a denial of service attack. The infinite loop can also be reached when parsing crafted private keys as they can contain explicit elliptic curve parameters. Thus vulnerable situations include: - TLS clients consuming server certificates - TLS servers consuming client certificates - Hosting providers taking certificates or private keys from customers - Certificate authorities parsing certification requests from subscribers - Anything else which parses ASN.1 elliptic curve parameters Also any other applications that use the BN_mod_sqrt() where the attacker can control the parameter values are vulnerable to this DoS issue. In the OpenSSL 1.0.2 version the public key is not parsed during initial parsing of the certificate which makes it slightly harder to trigger the infinite loop. However any operation which requires the public key from the certificate will trigger the infinite loop. In particular the attacker can use a self-signed certificate to trigger the loop during verification of the certificate signature. This issue affects OpenSSL versions 1.0.2, 1.1.1 and 3.0. It was addressed in the releases of 1.1.1n and 3.0.2 on the 15th March 2022. Fixed in OpenSSL 3.0.2 (Affected 3.0.0,3.0.1). Fixed in OpenSSL 1.1.1n (Affected 1.1.1-1.1.1m). Fixed in OpenSSL 1.0.2zd (Affected 1.0.2-1.0.2zc).',
-              'diffID':        'sha256:9118d71d4a4416e4a3502232ac38f47ab799e075c285ddf0733c98288ed2aa11',
-              'fixedVersions': [
-                '1.1.1n-r0'
-              ],
-              'installedVersion': '1.1.1l-r8',
-              'packageName':      'libcrypto1.1',
-              'purl':             'pkg:apk/alpine/libcrypto1.1@1.1.1l-r8?arch=x86_64&distro=3.15.0',
-              'references':       [
-                'http://packetstormsecurity.com/files/167344/OpenSSL-1.0.2-1.1.1-3.0-BN_mod_sqrt-Infinite-Loop.html',
-                'http://seclists.org/fulldisclosure/2022/May/33',
-                'http://seclists.org/fulldisclosure/2022/May/35',
-                'http://seclists.org/fulldisclosure/2022/May/38',
-                'https://access.redhat.com/errata/RHSA-2022:5326',
-                'https://access.redhat.com/security/cve/CVE-2022-0778',
-                'https://bugzilla.redhat.com/2062202',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2062202',
-                'https://cert-portal.siemens.com/productcert/pdf/ssa-712929.pdf',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-0778',
-                'https://errata.almalinux.org/8/ALSA-2022-5326.html',
-                'https://errata.rockylinux.org/RLSA-2022:4899',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=3118eb64934499d93db3230748a452351d1d9a65',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=380085481c64de749a6dd25cdf0bcf4360b30f83',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=a466912611aa6cbdf550cd10601390e587451246',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=3118eb64934499d93db3230748a452351d1d9a65',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=380085481c64de749a6dd25cdf0bcf4360b30f83',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=a466912611aa6cbdf550cd10601390e587451246',
-                'https://linux.oracle.com/cve/CVE-2022-0778.html',
-                'https://linux.oracle.com/errata/ELSA-2022-9272.html',
-                'https://lists.debian.org/debian-lts-announce/2022/03/msg00023.html',
-                'https://lists.debian.org/debian-lts-announce/2022/03/msg00024.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/323SNN6ZX7PRJJWP2BUAFLPUAE42XWLZ',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/323SNN6ZX7PRJJWP2BUAFLPUAE42XWLZ/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GDB3GQVJPXJE7X5C5JN6JAA4XUDWD6E6',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GDB3GQVJPXJE7X5C5JN6JAA4XUDWD6E6/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/W6K3PR542DXWLEFFMFIDMME4CWMHJRMG',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/W6K3PR542DXWLEFFMFIDMME4CWMHJRMG/',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/323SNN6ZX7PRJJWP2BUAFLPUAE42XWLZ',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/GDB3GQVJPXJE7X5C5JN6JAA4XUDWD6E6',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/W6K3PR542DXWLEFFMFIDMME4CWMHJRMG',
-                'https://nvd.nist.gov/vuln/detail/CVE-2022-0778',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2022-0002',
-                'https://rustsec.org/advisories/RUSTSEC-2022-0014.html',
-                'https://security.gentoo.org/glsa/202210-02',
-                'https://security.netapp.com/advisory/ntap-20220321-0002',
-                'https://security.netapp.com/advisory/ntap-20220321-0002/',
-                'https://security.netapp.com/advisory/ntap-20220429-0005',
-                'https://security.netapp.com/advisory/ntap-20220429-0005/',
-                'https://security.netapp.com/advisory/ntap-20240621-0006',
-                'https://security.netapp.com/advisory/ntap-20240621-0006/',
-                'https://support.apple.com/kb/HT213255',
-                'https://support.apple.com/kb/HT213256',
-                'https://support.apple.com/kb/HT213257',
-                'https://ubuntu.com/security/notices/USN-5328-1',
-                'https://ubuntu.com/security/notices/USN-5328-2',
-                'https://ubuntu.com/security/notices/USN-6457-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2022-0778',
-                'https://www.debian.org/security/2022/dsa-5103',
-                'https://www.openssl.org/news/secadv/20220315.txt',
-                'https://www.oracle.com/security-alerts/cpuapr2022.html',
-                'https://www.oracle.com/security-alerts/cpujul2022.html',
-                'https://www.tenable.com/security/tns-2022-06',
-                'https://www.tenable.com/security/tns-2022-07',
-                'https://www.tenable.com/security/tns-2022-08',
-                'https://www.tenable.com/security/tns-2022-09'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: Infinite loop in BN_mod_sqrt() reachable when parsing certificates'
-            },
-            {
-              'cve':  'CVE-2022-4450',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'nvd': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-415'
-              ],
-              'description':   'The function PEM_read_bio_ex() reads a PEM file from a BIO and parses and\ndecodes the "name" (e.g. "CERTIFICATE"), any header data and the payload data.\nIf the function succeeds then the "name_out", "header" and "data" arguments are\npopulated with pointers to buffers containing the relevant decoded data. The\ncaller is responsible for freeing those buffers. It is possible to construct a\nPEM file that results in 0 bytes of payload data. In this case PEM_read_bio_ex()\nwill return a failure code but will populate the header argument with a pointer\nto a buffer that has already been freed. If the caller also frees this buffer\nthen a double free will occur. This will most likely lead to a crash. This\ncould be exploited by an attacker who has the ability to supply malicious PEM\nfiles for parsing to achieve a denial of service attack.\n\nThe functions PEM_read_bio() and PEM_read() are simple wrappers around\nPEM_read_bio_ex() and therefore these functions are also directly affected.\n\nThese functions are also called indirectly by a number of other OpenSSL\nfunctions including PEM_X509_INFO_read_bio_ex() and\nSSL_CTX_use_serverinfo_file() which are also vulnerable. Some OpenSSL internal\nuses of these functions are not vulnerable because the caller does not free the\nheader argument if PEM_read_bio_ex() returns a failure code. These locations\ninclude the PEM_read_bio_TYPE() functions as well as the decoders introduced in\nOpenSSL 3.0.\n\nThe OpenSSL asn1parse command line application is also impacted by this issue.',
-              'diffID':        'sha256:9118d71d4a4416e4a3502232ac38f47ab799e075c285ddf0733c98288ed2aa11',
-              'fixedVersions': [
-                '1.1.1t-r0'
-              ],
-              'installedVersion': '1.1.1l-r8',
-              'packageName':      'libcrypto1.1',
-              'purl':             'pkg:apk/alpine/libcrypto1.1@1.1.1l-r8?arch=x86_64&distro=3.15.0',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2023:2165',
-                'https://access.redhat.com/security/cve/CVE-2022-4450',
-                'https://bugzilla.redhat.com/1960321',
-                'https://bugzilla.redhat.com/2164440',
-                'https://bugzilla.redhat.com/2164487',
-                'https://bugzilla.redhat.com/2164492',
-                'https://bugzilla.redhat.com/2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144000',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144003',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144006',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144008',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144010',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144012',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144015',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144017',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144019',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2145170',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2158412',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164440',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164487',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164488',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164492',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164497',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164499',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164500',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4203',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4304',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4450',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0215',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0216',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0217',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0286',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0401',
-                'https://errata.almalinux.org/9/ALSA-2023-2165.html',
-                'https://errata.rockylinux.org/RLSA-2023:0946',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=63bcf189be73a9cc1264059bed6f57974be74a83',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=bbcf509bd046b34cca19c766bbddc31683d0858b',
-                'https://linux.oracle.com/cve/CVE-2022-4450.html',
-                'https://linux.oracle.com/errata/ELSA-2023-32791.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2022-4450',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0003',
-                'https://rustsec.org/advisories/RUSTSEC-2023-0010.html',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://ubuntu.com/security/notices/USN-5844-1',
-                'https://ubuntu.com/security/notices/USN-6564-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2022-4450',
-                'https://www.openssl.org/news/secadv/20230207.txt'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: double free after calling PEM_read_bio_ex'
-            },
-            {
-              'cve':  'CVE-2023-0215',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'nvd': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   'The public API function BIO_new_NDEF is a helper function used for streaming\nASN.1 data via a BIO. It is primarily used internally to OpenSSL to support the\nSMIME, CMS and PKCS7 streaming capabilities, but may also be called directly by\nend user applications.\n\nThe function receives a BIO from the caller, prepends a new BIO_f_asn1 filter\nBIO onto the front of it to form a BIO chain, and then returns the new head of\nthe BIO chain to the caller. Under certain conditions, for example if a CMS\nrecipient public key is invalid, the new filter BIO is freed and the function\nreturns a NULL result indicating a failure. However, in this case, the BIO chain\nis not properly cleaned up and the BIO passed by the caller still retains\ninternal pointers to the previously freed filter BIO. If the caller then goes on\nto call BIO_pop() on the BIO then a use-after-free will occur. This will most\nlikely result in a crash.\n\n\n\nThis scenario occurs directly in the internal function B64_write_ASN1() which\nmay cause BIO_new_NDEF() to be called and will subsequently call BIO_pop() on\nthe BIO. This internal function is in turn called by the public API functions\nPEM_write_bio_ASN1_stream, PEM_write_bio_CMS_stream, PEM_write_bio_PKCS7_stream,\nSMIME_write_ASN1, SMIME_write_CMS and SMIME_write_PKCS7.\n\nOther public API functions that may be impacted by this include\ni2d_ASN1_bio_stream, BIO_new_CMS, BIO_new_PKCS7, i2d_CMS_bio_stream and\ni2d_PKCS7_bio_stream.\n\nThe OpenSSL cms and smime command line applications are similarly affected.',
-              'diffID':        'sha256:9118d71d4a4416e4a3502232ac38f47ab799e075c285ddf0733c98288ed2aa11',
-              'fixedVersions': [
-                '1.1.1t-r0'
-              ],
-              'installedVersion': '1.1.1l-r8',
-              'packageName':      'libcrypto1.1',
-              'purl':             'pkg:apk/alpine/libcrypto1.1@1.1.1l-r8?arch=x86_64&distro=3.15.0',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2023:2165',
-                'https://access.redhat.com/security/cve/CVE-2023-0215',
-                'https://bugzilla.redhat.com/1960321',
-                'https://bugzilla.redhat.com/2164440',
-                'https://bugzilla.redhat.com/2164487',
-                'https://bugzilla.redhat.com/2164492',
-                'https://bugzilla.redhat.com/2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144000',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144003',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144006',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144008',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144010',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144012',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144015',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144017',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144019',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2145170',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2158412',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164440',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164487',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164488',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164492',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164497',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164499',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164500',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4203',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4304',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4450',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0215',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0216',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0217',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0286',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0401',
-                'https://errata.almalinux.org/9/ALSA-2023-2165.html',
-                'https://errata.rockylinux.org/RLSA-2023:0946',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=8818064ce3c3c0f1b740a5aaba2a987e75bfbafd',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=9816136fe31d92ace4037d5da5257f763aeeb4eb',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=c3829dd8825c654652201e16f8a0a0c46ee3f344',
-                'https://linux.oracle.com/cve/CVE-2023-0215.html',
-                'https://linux.oracle.com/errata/ELSA-2023-32791.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-0215',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0003',
-                'https://rustsec.org/advisories/RUSTSEC-2023-0009.html',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://security.netapp.com/advisory/ntap-20230427-0007',
-                'https://security.netapp.com/advisory/ntap-20230427-0007/',
-                'https://security.netapp.com/advisory/ntap-20230427-0009',
-                'https://security.netapp.com/advisory/ntap-20230427-0009/',
-                'https://security.netapp.com/advisory/ntap-20240621-0006',
-                'https://security.netapp.com/advisory/ntap-20240621-0006/',
-                'https://ubuntu.com/security/notices/USN-5844-1',
-                'https://ubuntu.com/security/notices/USN-5845-1',
-                'https://ubuntu.com/security/notices/USN-5845-2',
-                'https://ubuntu.com/security/notices/USN-6564-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-0215',
-                'https://www.openssl.org/news/secadv/20230207.txt'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: use-after-free following BIO_new_NDEF'
-            },
-            {
-              'cve':  'CVE-2023-0286',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '7.4',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H'
-                },
-                'nvd': {
-                  'v3score':  '7.4',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.4',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-843'
-              ],
-              'description':   'There is a type confusion vulnerability relating to X.400 address processing\ninside an X.509 GeneralName. X.400 addresses were parsed as an ASN1_STRING but\nthe public structure definition for GENERAL_NAME incorrectly specified the type\nof the x400Address field as ASN1_TYPE. This field is subsequently interpreted by\nthe OpenSSL function GENERAL_NAME_cmp as an ASN1_TYPE rather than an\nASN1_STRING.\n\nWhen CRL checking is enabled (i.e. the application sets the\nX509_V_FLAG_CRL_CHECK flag), this vulnerability may allow an attacker to pass\narbitrary pointers to a memcmp call, enabling them to read memory contents or\nenact a denial of service. In most cases, the attack requires the attacker to\nprovide both the certificate chain and CRL, neither of which need to have a\nvalid signature. If the attacker only controls one of these inputs, the other\ninput must already contain an X.400 address as a CRL distribution point, which\nis uncommon. As such, this vulnerability is most likely to only affect\napplications which have implemented their own functionality for retrieving CRLs\nover a network.',
-              'diffID':        'sha256:9118d71d4a4416e4a3502232ac38f47ab799e075c285ddf0733c98288ed2aa11',
-              'fixedVersions': [
-                '1.1.1t-r0'
-              ],
-              'installedVersion': '1.1.1l-r8',
-              'packageName':      'libcrypto1.1',
-              'purl':             'pkg:apk/alpine/libcrypto1.1@1.1.1l-r8?arch=x86_64&distro=3.15.0',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2025:7937',
-                'https://access.redhat.com/security/cve/CVE-2023-0286',
-                'https://access.redhat.com/security/cve/cve-2023-0286',
-                'https://bugzilla.redhat.com/2164440',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144000',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144003',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144006',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144008',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144010',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144012',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144015',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144017',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144019',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2145170',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2158412',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164440',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164487',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164488',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164492',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164497',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164499',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164500',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4203',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4304',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4450',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0215',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0216',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0217',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0286',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0401',
-                'https://errata.almalinux.org/9/ALSA-2025-7937.html',
-                'https://errata.rockylinux.org/RLSA-2023:0946',
-                'https://ftp.openbsd.org/pub/OpenBSD/LibreSSL/libressl-3.6.2-relnotes.txt',
-                'https://ftp.openbsd.org/pub/OpenBSD/patches/7.2/common/018_x509.patch.sig',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=2c6c9d439b484e1ba9830d8454a34fa4f80fdfe9',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=2f7530077e0ef79d98718138716bc51ca0cad658',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=fd2af07dc083a350c959147097003a14a5e8ac4d',
-                'https://github.com/pyca/cryptography',
-                'https://github.com/pyca/cryptography/security/advisories/GHSA-x4qr-2fvf-3mr5',
-                'https://linux.oracle.com/cve/CVE-2023-0286.html',
-                'https://linux.oracle.com/errata/ELSA-2025-7937.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-0286',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0003',
-                'https://rustsec.org/advisories/RUSTSEC-2023-0006.html',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://ubuntu.com/security/notices/USN-5844-1',
-                'https://ubuntu.com/security/notices/USN-5845-1',
-                'https://ubuntu.com/security/notices/USN-5845-2',
-                'https://ubuntu.com/security/notices/USN-6564-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-0286',
-                'https://www.openssl.org/news/secadv/20230207.txt'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: X.400 address type confusion in X.509 GeneralName'
-            },
-            {
-              'cve':  'CVE-2023-0464',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-295'
-              ],
-              'description':   "A security vulnerability has been identified in all supported versions\n\nof OpenSSL related to the verification of X.509 certificate chains\nthat include policy constraints.  Attackers may be able to exploit this\nvulnerability by creating a malicious certificate chain that triggers\nexponential use of computational resources, leading to a denial-of-service\n(DoS) attack on affected systems.\n\nPolicy processing is disabled by default but can be enabled by passing\nthe `-policy' argument to the command line utilities or by calling the\n`X509_VERIFY_PARAM_set1_policies()' function.",
-              'diffID':        'sha256:9118d71d4a4416e4a3502232ac38f47ab799e075c285ddf0733c98288ed2aa11',
-              'fixedVersions': [
-                '1.1.1t-r2'
-              ],
-              'installedVersion': '1.1.1l-r8',
-              'packageName':      'libcrypto1.1',
-              'purl':             'pkg:apk/alpine/libcrypto1.1@1.1.1l-r8?arch=x86_64&distro=3.15.0',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2023:3722',
-                'https://access.redhat.com/security/cve/CVE-2023-0464',
-                'https://bugzilla.redhat.com/2181082',
-                'https://bugzilla.redhat.com/2182561',
-                'https://bugzilla.redhat.com/2182565',
-                'https://bugzilla.redhat.com/2188461',
-                'https://bugzilla.redhat.com/2207947',
-                'https://errata.almalinux.org/9/ALSA-2023-3722.html',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=2017771e2db3e2b96f89bbe8766c3209f6a99545',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=2dcd4f1e3115f38cefa43e3efbe9b801c27e642e',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=879f7080d7e141f415c79eaa3a8ac4a3dad0348b',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=959c59c7a0164117e7f8366466a32bb1f8d77ff1',
-                'https://linux.oracle.com/cve/CVE-2023-0464.html',
-                'https://linux.oracle.com/errata/ELSA-2023-3722.html',
-                'https://lists.debian.org/debian-lts-announce/2023/06/msg00011.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-0464',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://security.netapp.com/advisory/ntap-20230406-0006/',
-                'https://security.netapp.com/advisory/ntap-20240621-0006/',
-                'https://ubuntu.com/security/notices/USN-6039-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.couchbase.com/alerts/',
-                'https://www.cve.org/CVERecord?id=CVE-2023-0464',
-                'https://www.debian.org/security/2023/dsa-5417',
-                'https://www.openssl.org/news/secadv/20230322.txt'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: Denial of service by excessive resource usage in verifying X509 policy constraints'
-            },
-            {
-              'cve':  'CVE-2022-2097',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N'
-                },
-                'nvd': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N'
-                },
-                'redhat': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-327'
-              ],
-              'description':   "AES OCB mode for 32-bit x86 platforms using the AES-NI assembly optimised implementation will not encrypt the entirety of the data under some circumstances. This could reveal sixteen bytes of data that was preexisting in the memory that wasn't written. In the special case of \"in place\" encryption, sixteen bytes of the plaintext would be revealed. Since OpenSSL does not support OCB based cipher suites for TLS and DTLS, they are both unaffected. Fixed in OpenSSL 3.0.5 (Affected 3.0.0-3.0.4). Fixed in OpenSSL 1.1.1q (Affected 1.1.1-1.1.1p).",
-              'diffID':        'sha256:9118d71d4a4416e4a3502232ac38f47ab799e075c285ddf0733c98288ed2aa11',
-              'fixedVersions': [
-                '1.1.1q-r0'
-              ],
-              'installedVersion': '1.1.1l-r8',
-              'packageName':      'libcrypto1.1',
-              'purl':             'pkg:apk/alpine/libcrypto1.1@1.1.1l-r8?arch=x86_64&distro=3.15.0',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2022:6224',
-                'https://access.redhat.com/security/cve/CVE-2022-2097',
-                'https://bugzilla.redhat.com/2081494',
-                'https://bugzilla.redhat.com/2087911',
-                'https://bugzilla.redhat.com/2087913',
-                'https://bugzilla.redhat.com/2097310',
-                'https://bugzilla.redhat.com/2104905',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2081494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2097310',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2100554',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2104905',
-                'https://cert-portal.siemens.com/productcert/pdf/ssa-332410.pdf',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-1292',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-2068',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-2097',
-                'https://errata.almalinux.org/9/ALSA-2022-6224.html',
-                'https://errata.rockylinux.org/RLSA-2022:5818',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=919925673d6c9cfed3c1085497f5dfbbed5fc431',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=a98f339ddd7e8f487d6e0088d4a9a42324885a93',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=919925673d6c9cfed3c1085497f5dfbbed5fc431',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=a98f339ddd7e8f487d6e0088d4a9a42324885a93',
-                'https://github.com/alexcrichton/openssl-src-rs',
-                'https://linux.oracle.com/cve/CVE-2022-2097.html',
-                'https://linux.oracle.com/errata/ELSA-2022-9955.html',
-                'https://lists.debian.org/debian-lts-announce/2023/02/msg00019.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/R6CK57NBQFTPUMXAPJURCGXUYT76NQAK',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/R6CK57NBQFTPUMXAPJURCGXUYT76NQAK/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/V6567JERRHHJW2GNGJGKDRNHR7SNPZK7',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/V6567JERRHHJW2GNGJGKDRNHR7SNPZK7/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VCMNWKERPBKOEBNL7CLTTX3ZZCZLH7XA',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VCMNWKERPBKOEBNL7CLTTX3ZZCZLH7XA/',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/R6CK57NBQFTPUMXAPJURCGXUYT76NQAK',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/R6CK57NBQFTPUMXAPJURCGXUYT76NQAK/',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/V6567JERRHHJW2GNGJGKDRNHR7SNPZK7',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/V6567JERRHHJW2GNGJGKDRNHR7SNPZK7/',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/VCMNWKERPBKOEBNL7CLTTX3ZZCZLH7XA',
-                'https://nvd.nist.gov/vuln/detail/CVE-2022-2097',
-                'https://rustsec.org/advisories/RUSTSEC-2022-0032.html',
-                'https://security.gentoo.org/glsa/202210-02',
-                'https://security.netapp.com/advisory/ntap-20220715-0011',
-                'https://security.netapp.com/advisory/ntap-20220715-0011/',
-                'https://security.netapp.com/advisory/ntap-20230420-0008',
-                'https://security.netapp.com/advisory/ntap-20230420-0008/',
-                'https://security.netapp.com/advisory/ntap-20240621-0006',
-                'https://security.netapp.com/advisory/ntap-20240621-0006/',
-                'https://ubuntu.com/security/notices/USN-5502-1',
-                'https://ubuntu.com/security/notices/USN-6457-1',
-                'https://www.cve.org/CVERecord?id=CVE-2022-2097',
-                'https://www.debian.org/security/2023/dsa-5343',
-                'https://www.openssl.org/news/secadv/20220705.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: AES OCB fails to encrypt some bytes'
-            },
-            {
-              'cve':  'CVE-2022-4304',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N'
-                },
-                'nvd': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N'
-                },
-                'redhat': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-203'
-              ],
-              'description':   'A timing based side channel exists in the OpenSSL RSA Decryption implementation\nwhich could be sufficient to recover a plaintext across a network in a\nBleichenbacher style attack. To achieve a successful decryption an attacker\nwould have to be able to send a very large number of trial messages for\ndecryption. The vulnerability affects all RSA padding modes: PKCS#1 v1.5,\nRSA-OEAP and RSASVE.\n\nFor example, in a TLS connection, RSA is commonly used by a client to send an\nencrypted pre-master secret to the server. An attacker that had observed a\ngenuine connection between a client and a server could use this flaw to send\ntrial messages to the server and record the time taken to process them. After a\nsufficiently large number of messages the attacker could recover the pre-master\nsecret used for the original connection and thus be able to decrypt the\napplication data sent over that connection.',
-              'diffID':        'sha256:9118d71d4a4416e4a3502232ac38f47ab799e075c285ddf0733c98288ed2aa11',
-              'fixedVersions': [
-                '1.1.1t-r0'
-              ],
-              'installedVersion': '1.1.1l-r8',
-              'packageName':      'libcrypto1.1',
-              'purl':             'pkg:apk/alpine/libcrypto1.1@1.1.1l-r8?arch=x86_64&distro=3.15.0',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2023:2165',
-                'https://access.redhat.com/security/cve/CVE-2022-4304',
-                'https://bugzilla.redhat.com/1960321',
-                'https://bugzilla.redhat.com/2164440',
-                'https://bugzilla.redhat.com/2164487',
-                'https://bugzilla.redhat.com/2164492',
-                'https://bugzilla.redhat.com/2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144000',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144003',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144006',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144008',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144010',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144012',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144015',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144017',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144019',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2145170',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2158412',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164440',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164487',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164488',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164492',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164497',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164499',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164500',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4203',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4304',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4450',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0215',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0216',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0217',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0286',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0401',
-                'https://errata.almalinux.org/9/ALSA-2023-2165.html',
-                'https://errata.rockylinux.org/RLSA-2023:0946',
-                'https://linux.oracle.com/cve/CVE-2022-4304.html',
-                'https://linux.oracle.com/errata/ELSA-2023-32791.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2022-4304',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0003',
-                'https://rustsec.org/advisories/RUSTSEC-2023-0007.html',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://ubuntu.com/security/notices/USN-5844-1',
-                'https://ubuntu.com/security/notices/USN-6564-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2022-4304',
-                'https://www.openssl.org/news/secadv/20230207.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: timing attack in RSA Decryption implementation'
-            },
-            {
-              'cve':  'CVE-2023-0465',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N'
-                },
-                'redhat': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-295'
-              ],
-              'description':   "Applications that use a non-default option when verifying certificates may be\nvulnerable to an attack from a malicious CA to circumvent certain checks.\n\nInvalid certificate policies in leaf certificates are silently ignored by\nOpenSSL and other certificate policy checks are skipped for that certificate.\nA malicious CA could use this to deliberately assert invalid certificate policies\nin order to circumvent policy checking on the certificate altogether.\n\nPolicy processing is disabled by default but can be enabled by passing\nthe `-policy' argument to the command line utilities or by calling the\n`X509_VERIFY_PARAM_set1_policies()' function.",
-              'diffID':        'sha256:9118d71d4a4416e4a3502232ac38f47ab799e075c285ddf0733c98288ed2aa11',
-              'fixedVersions': [
-                '1.1.1t-r2'
-              ],
-              'installedVersion': '1.1.1l-r8',
-              'packageName':      'libcrypto1.1',
-              'purl':             'pkg:apk/alpine/libcrypto1.1@1.1.1l-r8?arch=x86_64&distro=3.15.0',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2023:3722',
-                'https://access.redhat.com/security/cve/CVE-2023-0465',
-                'https://bugzilla.redhat.com/2181082',
-                'https://bugzilla.redhat.com/2182561',
-                'https://bugzilla.redhat.com/2182565',
-                'https://bugzilla.redhat.com/2188461',
-                'https://bugzilla.redhat.com/2207947',
-                'https://errata.almalinux.org/9/ALSA-2023-3722.html',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=10325176f3d3e98c6e2b3bf5ab1e3b334de6947a',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=1dd43e0709fece299b15208f36cc7c76209ba0bb',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=b013765abfa80036dc779dd0e50602c57bb3bf95',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=facfb1ab745646e97a1920977ae4a9965ea61d5c',
-                'https://linux.oracle.com/cve/CVE-2023-0465.html',
-                'https://linux.oracle.com/errata/ELSA-2023-3722.html',
-                'https://lists.debian.org/debian-lts-announce/2023/06/msg00011.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-0465',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://security.netapp.com/advisory/ntap-20230414-0001/',
-                'https://ubuntu.com/security/notices/USN-6039-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-0465',
-                'https://www.debian.org/security/2023/dsa-5417',
-                'https://www.openssl.org/news/secadv/20230328.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: Invalid certificate policies in leaf certificates are silently ignored'
-            },
-            {
-              'cve':  'CVE-2023-2650',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '6.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-770'
-              ],
-              'description':   "Issue summary: Processing some specially crafted ASN.1 object identifiers or\ndata containing them may be very slow.\n\nImpact summary: Applications that use OBJ_obj2txt() directly, or use any of\nthe OpenSSL subsystems OCSP, PKCS7/SMIME, CMS, CMP/CRMF or TS with no message\nsize limit may experience notable to very long delays when processing those\nmessages, which may lead to a Denial of Service.\n\nAn OBJECT IDENTIFIER is composed of a series of numbers - sub-identifiers -\nmost of which have no size limit.  OBJ_obj2txt() may be used to translate\nan ASN.1 OBJECT IDENTIFIER given in DER encoding form (using the OpenSSL\ntype ASN1_OBJECT) to its canonical numeric text form, which are the\nsub-identifiers of the OBJECT IDENTIFIER in decimal form, separated by\nperiods.\n\nWhen one of the sub-identifiers in the OBJECT IDENTIFIER is very large\n(these are sizes that are seen as absurdly large, taking up tens or hundreds\nof KiBs), the translation to a decimal number in text may take a very long\ntime.  The time complexity is O(n^2) with 'n' being the size of the\nsub-identifiers in bytes (*).\n\nWith OpenSSL 3.0, support to fetch cryptographic algorithms using names /\nidentifiers in string form was introduced.  This includes using OBJECT\nIDENTIFIERs in canonical numeric text form as identifiers for fetching\nalgorithms.\n\nSuch OBJECT IDENTIFIERs may be received through the ASN.1 structure\nAlgorithmIdentifier, which is commonly used in multiple protocols to specify\nwhat cryptographic algorithm should be used to sign or verify, encrypt or\ndecrypt, or digest passed data.\n\nApplications that call OBJ_obj2txt() directly with untrusted data are\naffected, with any version of OpenSSL.  If the use is for the mere purpose\nof display, the severity is considered low.\n\nIn OpenSSL 3.0 and newer, this affects the subsystems OCSP, PKCS7/SMIME,\nCMS, CMP/CRMF or TS.  It also impacts anything that processes X.509\ncertificates, including simple things like verifying its signature.\n\nThe impact on TLS is relatively low, because all versions of OpenSSL have a\n100KiB limit on the peer's certificate chain.  Additionally, this only\nimpacts clients, or servers that have explicitly enabled client\nauthentication.\n\nIn OpenSSL 1.1.1 and 1.0.2, this only affects displaying diverse objects,\nsuch as X.509 certificates.  This is assumed to not happen in such a way\nthat it would cause a Denial of Service, so these versions are considered\nnot affected by this issue in such a way that it would be cause for concern,\nand the severity is therefore considered low.",
-              'diffID':        'sha256:9118d71d4a4416e4a3502232ac38f47ab799e075c285ddf0733c98288ed2aa11',
-              'fixedVersions': [
-                '1.1.1u-r0'
-              ],
-              'installedVersion': '1.1.1l-r8',
-              'packageName':      'libcrypto1.1',
-              'purl':             'pkg:apk/alpine/libcrypto1.1@1.1.1l-r8?arch=x86_64&distro=3.15.0',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2023/05/30/1',
-                'https://access.redhat.com/errata/RHSA-2023:6330',
-                'https://access.redhat.com/security/cve/CVE-2023-2650',
-                'https://bugzilla.redhat.com/1858038',
-                'https://bugzilla.redhat.com/2207947',
-                'https://errata.almalinux.org/9/ALSA-2023-6330.html',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=423a2bc737a908ad0c77bda470b2b59dc879936b',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=853c5e56ee0b8650c73140816bb8b91d6163422c',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=9e209944b35cf82368071f160a744b6178f9b098',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=db779b0e10b047f2585615e0b8f2acdf21f8544a',
-                'https://linux.oracle.com/cve/CVE-2023-2650.html',
-                'https://linux.oracle.com/errata/ELSA-2023-6330.html',
-                'https://lists.debian.org/debian-lts-announce/2023/06/msg00011.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-2650',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0009',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://security.netapp.com/advisory/ntap-20230703-0001/',
-                'https://security.netapp.com/advisory/ntap-20231027-0009/',
-                'https://ubuntu.com/security/notices/USN-6119-1',
-                'https://ubuntu.com/security/notices/USN-6188-1',
-                'https://ubuntu.com/security/notices/USN-6672-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-2650',
-                'https://www.debian.org/security/2023/dsa-5417',
-                'https://www.openssl.org/news/secadv/20230530.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: Possible DoS translating ASN.1 object identifiers'
-            },
-            {
-              'cve':  'CVE-2023-3446',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L'
-                },
-                'redhat': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L'
-                }
-              },
-              'cwes': [
-                'CWE-606',
-                'CWE-1333'
-              ],
-              'description':   "Issue summary: Checking excessively long DH keys or parameters may be very slow.\n\nImpact summary: Applications that use the functions DH_check(), DH_check_ex()\nor EVP_PKEY_param_check() to check a DH key or DH parameters may experience long\ndelays. Where the key or parameters that are being checked have been obtained\nfrom an untrusted source this may lead to a Denial of Service.\n\nThe function DH_check() performs various checks on DH parameters. One of those\nchecks confirms that the modulus ('p' parameter) is not too large. Trying to use\na very large modulus is slow and OpenSSL will not normally use a modulus which\nis over 10,000 bits in length.\n\nHowever the DH_check() function checks numerous aspects of the key or parameters\nthat have been supplied. Some of those checks use the supplied modulus value\neven if it has already been found to be too large.\n\nAn application that calls DH_check() and supplies a key or parameters obtained\nfrom an untrusted source could be vulernable to a Denial of Service attack.\n\nThe function DH_check() is itself called by a number of other OpenSSL functions.\nAn application calling any of those other functions may similarly be affected.\nThe other functions affected by this are DH_check_ex() and\nEVP_PKEY_param_check().\n\nAlso vulnerable are the OpenSSL dhparam and pkeyparam command line applications\nwhen using the '-check' option.\n\nThe OpenSSL SSL/TLS implementation is not affected by this issue.\nThe OpenSSL 3.0 and 3.1 FIPS providers are not affected by this issue.",
-              'diffID':        'sha256:9118d71d4a4416e4a3502232ac38f47ab799e075c285ddf0733c98288ed2aa11',
-              'fixedVersions': [
-                '1.1.1u-r2'
-              ],
-              'installedVersion': '1.1.1l-r8',
-              'packageName':      'libcrypto1.1',
-              'purl':             'pkg:apk/alpine/libcrypto1.1@1.1.1l-r8?arch=x86_64&distro=3.15.0',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2023/07/19/4',
-                'http://www.openwall.com/lists/oss-security/2023/07/19/5',
-                'http://www.openwall.com/lists/oss-security/2023/07/19/6',
-                'http://www.openwall.com/lists/oss-security/2023/07/31/1',
-                'http://www.openwall.com/lists/oss-security/2024/05/16/1',
-                'https://access.redhat.com/errata/RHSA-2024:2447',
-                'https://access.redhat.com/security/cve/CVE-2023-3446',
-                'https://bugzilla.redhat.com/2223016',
-                'https://bugzilla.redhat.com/2224962',
-                'https://bugzilla.redhat.com/2227852',
-                'https://bugzilla.redhat.com/2248616',
-                'https://bugzilla.redhat.com/2257571',
-                'https://bugzilla.redhat.com/2258502',
-                'https://bugzilla.redhat.com/2259944',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2224962',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2257582',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2257583',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2258677',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2258688',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2258691',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2258694',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2258700',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-36763',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-36764',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3446',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45229',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45231',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45232',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45233',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45235',
-                'https://errata.almalinux.org/9/ALSA-2024-2447.html',
-                'https://errata.rockylinux.org/RLSA-2024:2264',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=1fa20cf2f506113c761777127a38bce5068740eb',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=8780a896543a654e757db1b9396383f9d8095528',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=9a0a4d3c1e7138915563c0df4fe6a3f9377b839c',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=fc9867c1e03c22ebf56943be205202e576aabf23',
-                'https://linux.oracle.com/cve/CVE-2023-3446.html',
-                'https://linux.oracle.com/errata/ELSA-2024-2447.html',
-                'https://lists.debian.org/debian-lts-announce/2023/08/msg00019.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-3446',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://security.netapp.com/advisory/ntap-20230803-0011/',
-                'https://ubuntu.com/security/notices/USN-6435-1',
-                'https://ubuntu.com/security/notices/USN-6435-2',
-                'https://ubuntu.com/security/notices/USN-6450-1',
-                'https://ubuntu.com/security/notices/USN-6709-1',
-                'https://ubuntu.com/security/notices/USN-7018-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-3446',
-                'https://www.openssl.org/news/secadv/20230719.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: Excessive time spent checking DH keys and parameters'
-            },
-            {
-              'cve':  'CVE-2023-3817',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L'
-                },
-                'redhat': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L'
-                }
-              },
-              'cwes': [
-                'CWE-606',
-                'CWE-834'
-              ],
-              'description':   'Issue summary: Checking excessively long DH keys or parameters may be very slow.\n\nImpact summary: Applications that use the functions DH_check(), DH_check_ex()\nor EVP_PKEY_param_check() to check a DH key or DH parameters may experience long\ndelays. Where the key or parameters that are being checked have been obtained\nfrom an untrusted source this may lead to a Denial of Service.\n\nThe function DH_check() performs various checks on DH parameters. After fixing\nCVE-2023-3446 it was discovered that a large q parameter value can also trigger\nan overly long computation during some of these checks. A correct q value,\nif present, cannot be larger than the modulus p parameter, thus it is\nunnecessary to perform these checks if q is larger than p.\n\nAn application that calls DH_check() and supplies a key or parameters obtained\nfrom an untrusted source could be vulnerable to a Denial of Service attack.\n\nThe function DH_check() is itself called by a number of other OpenSSL functions.\nAn application calling any of those other functions may similarly be affected.\nThe other functions affected by this are DH_check_ex() and\nEVP_PKEY_param_check().\n\nAlso vulnerable are the OpenSSL dhparam and pkeyparam command line applications\nwhen using the "-check" option.\n\nThe OpenSSL SSL/TLS implementation is not affected by this issue.\n\nThe OpenSSL 3.0 and 3.1 FIPS providers are not affected by this issue.',
-              'diffID':        'sha256:9118d71d4a4416e4a3502232ac38f47ab799e075c285ddf0733c98288ed2aa11',
-              'fixedVersions': [
-                '1.1.1v-r0'
-              ],
-              'installedVersion': '1.1.1l-r8',
-              'packageName':      'libcrypto1.1',
-              'purl':             'pkg:apk/alpine/libcrypto1.1@1.1.1l-r8?arch=x86_64&distro=3.15.0',
-              'references':       [
-                'http://seclists.org/fulldisclosure/2023/Jul/43',
-                'http://www.openwall.com/lists/oss-security/2023/07/31/1',
-                'http://www.openwall.com/lists/oss-security/2023/09/22/11',
-                'http://www.openwall.com/lists/oss-security/2023/09/22/9',
-                'http://www.openwall.com/lists/oss-security/2023/11/06/2',
-                'https://access.redhat.com/errata/RHSA-2024:2447',
-                'https://access.redhat.com/security/cve/CVE-2023-3817',
-                'https://bugzilla.redhat.com/2223016',
-                'https://bugzilla.redhat.com/2224962',
-                'https://bugzilla.redhat.com/2227852',
-                'https://bugzilla.redhat.com/2248616',
-                'https://bugzilla.redhat.com/2257571',
-                'https://bugzilla.redhat.com/2258502',
-                'https://bugzilla.redhat.com/2259944',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2224962',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2227852',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2248616',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2270358',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3446',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3817',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-5678',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-2408',
-                'https://errata.almalinux.org/9/ALSA-2024-2447.html',
-                'https://errata.rockylinux.org/RLSA-2023:7877',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=6a1eb62c29db6cb5eec707f9338aee00f44e26f5',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=869ad69aadd985c7b8ca6f4e5dd0eb274c9f3644',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=9002fd07327a91f35ba6c1307e71fa6fd4409b7f',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=91ddeba0f2269b017dc06c46c993a788974b1aa5',
-                'https://linux.oracle.com/cve/CVE-2023-3817.html',
-                'https://linux.oracle.com/errata/ELSA-2024-2447.html',
-                'https://lists.debian.org/debian-lts-announce/2023/08/msg00019.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-3817',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://security.netapp.com/advisory/ntap-20230818-0014/',
-                'https://security.netapp.com/advisory/ntap-20231027-0008/',
-                'https://security.netapp.com/advisory/ntap-20240621-0006/',
-                'https://ubuntu.com/security/notices/USN-6435-1',
-                'https://ubuntu.com/security/notices/USN-6435-2',
-                'https://ubuntu.com/security/notices/USN-6450-1',
-                'https://ubuntu.com/security/notices/USN-6709-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-3817',
-                'https://www.openssl.org/news/secadv/20230731.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'OpenSSL: Excessive time spent checking DH q parameter value'
-            },
-            {
-              'cve':  'CVE-2023-5678',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L'
-                },
-                'redhat': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L'
-                }
-              },
-              'cwes': [
-                'CWE-606',
-                'CWE-754'
-              ],
-              'description':   "Issue summary: Generating excessively long X9.42 DH keys or checking\nexcessively long X9.42 DH keys or parameters may be very slow.\n\nImpact summary: Applications that use the functions DH_generate_key() to\ngenerate an X9.42 DH key may experience long delays.  Likewise, applications\nthat use DH_check_pub_key(), DH_check_pub_key_ex() or EVP_PKEY_public_check()\nto check an X9.42 DH key or X9.42 DH parameters may experience long delays.\nWhere the key or parameters that are being checked have been obtained from\nan untrusted source this may lead to a Denial of Service.\n\nWhile DH_check() performs all the necessary checks (as of CVE-2023-3817),\nDH_check_pub_key() doesn't make any of these checks, and is therefore\nvulnerable for excessively large P and Q parameters.\n\nLikewise, while DH_generate_key() performs a check for an excessively large\nP, it doesn't check for an excessively large Q.\n\nAn application that calls DH_generate_key() or DH_check_pub_key() and\nsupplies a key or parameters obtained from an untrusted source could be\nvulnerable to a Denial of Service attack.\n\nDH_generate_key() and DH_check_pub_key() are also called by a number of\nother OpenSSL functions.  An application calling any of those other\nfunctions may similarly be affected.  The other functions affected by this\nare DH_check_pub_key_ex(), EVP_PKEY_public_check(), and EVP_PKEY_generate().\n\nAlso vulnerable are the OpenSSL pkey command line application when using the\n\"-pubcheck\" option, as well as the OpenSSL genpkey command line application.\n\nThe OpenSSL SSL/TLS implementation is not affected by this issue.\n\nThe OpenSSL 3.0 and 3.1 FIPS providers are not affected by this issue.",
-              'diffID':        'sha256:9118d71d4a4416e4a3502232ac38f47ab799e075c285ddf0733c98288ed2aa11',
-              'fixedVersions': [
-                '1.1.1w-r1'
-              ],
-              'installedVersion': '1.1.1l-r8',
-              'packageName':      'libcrypto1.1',
-              'purl':             'pkg:apk/alpine/libcrypto1.1@1.1.1l-r8?arch=x86_64&distro=3.15.0',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2024/03/11/1',
-                'https://access.redhat.com/errata/RHSA-2024:2447',
-                'https://access.redhat.com/security/cve/CVE-2023-5678',
-                'https://bugzilla.redhat.com/2223016',
-                'https://bugzilla.redhat.com/2224962',
-                'https://bugzilla.redhat.com/2227852',
-                'https://bugzilla.redhat.com/2248616',
-                'https://bugzilla.redhat.com/2257571',
-                'https://bugzilla.redhat.com/2258502',
-                'https://bugzilla.redhat.com/2259944',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2224962',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2227852',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2248616',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2270358',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3446',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3817',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-5678',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-2408',
-                'https://errata.almalinux.org/9/ALSA-2024-2447.html',
-                'https://errata.rockylinux.org/RLSA-2023:7877',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=34efaef6c103d636ab507a0cc34dca4d3aecc055',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=710fee740904b6290fef0dd5536fbcedbc38ff0c',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=db925ae2e65d0d925adef429afc37f75bd1c2017',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=ddeb4b6c6d527e54ce9a99cba785c0f7776e54b6',
-                'https://linux.oracle.com/cve/CVE-2023-5678.html',
-                'https://linux.oracle.com/errata/ELSA-2024-2447.html',
-                'https://lists.debian.org/debian-lts-announce/2024/10/msg00033.html',
-                'https://lists.debian.org/debian-lts-announce/2024/11/msg00000.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-5678',
-                'https://security.netapp.com/advisory/ntap-20231130-0010/',
-                'https://ubuntu.com/security/notices/USN-6622-1',
-                'https://ubuntu.com/security/notices/USN-6632-1',
-                'https://ubuntu.com/security/notices/USN-6709-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-5678',
-                'https://www.openssl.org/news/secadv/20231106.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: Generating excessively long X9.42 DH keys or checking excessively long X9.42 DH keys or parameters may be very slow'
-            },
-            {
-              'cve':  'CVE-2022-0778',
-              'cvss': {
-                'bitnami': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'ghsa': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'nvd': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-835'
-              ],
-              'description':   'The BN_mod_sqrt() function, which computes a modular square root, contains a bug that can cause it to loop forever for non-prime moduli. Internally this function is used when parsing certificates that contain elliptic curve public keys in compressed form or explicit elliptic curve parameters with a base point encoded in compressed form. It is possible to trigger the infinite loop by crafting a certificate that has invalid explicit curve parameters. Since certificate parsing happens prior to verification of the certificate signature, any process that parses an externally supplied certificate may thus be subject to a denial of service attack. The infinite loop can also be reached when parsing crafted private keys as they can contain explicit elliptic curve parameters. Thus vulnerable situations include: - TLS clients consuming server certificates - TLS servers consuming client certificates - Hosting providers taking certificates or private keys from customers - Certificate authorities parsing certification requests from subscribers - Anything else which parses ASN.1 elliptic curve parameters Also any other applications that use the BN_mod_sqrt() where the attacker can control the parameter values are vulnerable to this DoS issue. In the OpenSSL 1.0.2 version the public key is not parsed during initial parsing of the certificate which makes it slightly harder to trigger the infinite loop. However any operation which requires the public key from the certificate will trigger the infinite loop. In particular the attacker can use a self-signed certificate to trigger the loop during verification of the certificate signature. This issue affects OpenSSL versions 1.0.2, 1.1.1 and 3.0. It was addressed in the releases of 1.1.1n and 3.0.2 on the 15th March 2022. Fixed in OpenSSL 3.0.2 (Affected 3.0.0,3.0.1). Fixed in OpenSSL 1.1.1n (Affected 1.1.1-1.1.1m). Fixed in OpenSSL 1.0.2zd (Affected 1.0.2-1.0.2zc).',
-              'diffID':        'sha256:8d3ac3489996423f53d6087c81180006263b79f206d3fdec9e66f0e27ceb8759',
-              'fixedVersions': [
-                '3.3.4-r3'
-              ],
-              'installedVersion': '3.3.4-r2',
-              'packageName':      'libretls',
-              'purl':             'pkg:apk/alpine/libretls@3.3.4-r2?arch=x86_64&distro=3.15.0',
-              'references':       [
-                'http://packetstormsecurity.com/files/167344/OpenSSL-1.0.2-1.1.1-3.0-BN_mod_sqrt-Infinite-Loop.html',
-                'http://seclists.org/fulldisclosure/2022/May/33',
-                'http://seclists.org/fulldisclosure/2022/May/35',
-                'http://seclists.org/fulldisclosure/2022/May/38',
-                'https://access.redhat.com/errata/RHSA-2022:5326',
-                'https://access.redhat.com/security/cve/CVE-2022-0778',
-                'https://bugzilla.redhat.com/2062202',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2062202',
-                'https://cert-portal.siemens.com/productcert/pdf/ssa-712929.pdf',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-0778',
-                'https://errata.almalinux.org/8/ALSA-2022-5326.html',
-                'https://errata.rockylinux.org/RLSA-2022:4899',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=3118eb64934499d93db3230748a452351d1d9a65',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=380085481c64de749a6dd25cdf0bcf4360b30f83',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=a466912611aa6cbdf550cd10601390e587451246',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=3118eb64934499d93db3230748a452351d1d9a65',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=380085481c64de749a6dd25cdf0bcf4360b30f83',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=a466912611aa6cbdf550cd10601390e587451246',
-                'https://linux.oracle.com/cve/CVE-2022-0778.html',
-                'https://linux.oracle.com/errata/ELSA-2022-9272.html',
-                'https://lists.debian.org/debian-lts-announce/2022/03/msg00023.html',
-                'https://lists.debian.org/debian-lts-announce/2022/03/msg00024.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/323SNN6ZX7PRJJWP2BUAFLPUAE42XWLZ',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/323SNN6ZX7PRJJWP2BUAFLPUAE42XWLZ/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GDB3GQVJPXJE7X5C5JN6JAA4XUDWD6E6',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GDB3GQVJPXJE7X5C5JN6JAA4XUDWD6E6/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/W6K3PR542DXWLEFFMFIDMME4CWMHJRMG',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/W6K3PR542DXWLEFFMFIDMME4CWMHJRMG/',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/323SNN6ZX7PRJJWP2BUAFLPUAE42XWLZ',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/GDB3GQVJPXJE7X5C5JN6JAA4XUDWD6E6',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/W6K3PR542DXWLEFFMFIDMME4CWMHJRMG',
-                'https://nvd.nist.gov/vuln/detail/CVE-2022-0778',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2022-0002',
-                'https://rustsec.org/advisories/RUSTSEC-2022-0014.html',
-                'https://security.gentoo.org/glsa/202210-02',
-                'https://security.netapp.com/advisory/ntap-20220321-0002',
-                'https://security.netapp.com/advisory/ntap-20220321-0002/',
-                'https://security.netapp.com/advisory/ntap-20220429-0005',
-                'https://security.netapp.com/advisory/ntap-20220429-0005/',
-                'https://security.netapp.com/advisory/ntap-20240621-0006',
-                'https://security.netapp.com/advisory/ntap-20240621-0006/',
-                'https://support.apple.com/kb/HT213255',
-                'https://support.apple.com/kb/HT213256',
-                'https://support.apple.com/kb/HT213257',
-                'https://ubuntu.com/security/notices/USN-5328-1',
-                'https://ubuntu.com/security/notices/USN-5328-2',
-                'https://ubuntu.com/security/notices/USN-6457-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2022-0778',
-                'https://www.debian.org/security/2022/dsa-5103',
-                'https://www.openssl.org/news/secadv/20220315.txt',
-                'https://www.oracle.com/security-alerts/cpuapr2022.html',
-                'https://www.oracle.com/security-alerts/cpujul2022.html',
-                'https://www.tenable.com/security/tns-2022-06',
-                'https://www.tenable.com/security/tns-2022-07',
-                'https://www.tenable.com/security/tns-2022-08',
-                'https://www.tenable.com/security/tns-2022-09'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: Infinite loop in BN_mod_sqrt() reachable when parsing certificates'
-            },
-            {
-              'cve':  'CVE-2022-0778',
-              'cvss': {
-                'bitnami': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'ghsa': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'nvd': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-835'
-              ],
-              'description':   'The BN_mod_sqrt() function, which computes a modular square root, contains a bug that can cause it to loop forever for non-prime moduli. Internally this function is used when parsing certificates that contain elliptic curve public keys in compressed form or explicit elliptic curve parameters with a base point encoded in compressed form. It is possible to trigger the infinite loop by crafting a certificate that has invalid explicit curve parameters. Since certificate parsing happens prior to verification of the certificate signature, any process that parses an externally supplied certificate may thus be subject to a denial of service attack. The infinite loop can also be reached when parsing crafted private keys as they can contain explicit elliptic curve parameters. Thus vulnerable situations include: - TLS clients consuming server certificates - TLS servers consuming client certificates - Hosting providers taking certificates or private keys from customers - Certificate authorities parsing certification requests from subscribers - Anything else which parses ASN.1 elliptic curve parameters Also any other applications that use the BN_mod_sqrt() where the attacker can control the parameter values are vulnerable to this DoS issue. In the OpenSSL 1.0.2 version the public key is not parsed during initial parsing of the certificate which makes it slightly harder to trigger the infinite loop. However any operation which requires the public key from the certificate will trigger the infinite loop. In particular the attacker can use a self-signed certificate to trigger the loop during verification of the certificate signature. This issue affects OpenSSL versions 1.0.2, 1.1.1 and 3.0. It was addressed in the releases of 1.1.1n and 3.0.2 on the 15th March 2022. Fixed in OpenSSL 3.0.2 (Affected 3.0.0,3.0.1). Fixed in OpenSSL 1.1.1n (Affected 1.1.1-1.1.1m). Fixed in OpenSSL 1.0.2zd (Affected 1.0.2-1.0.2zc).',
-              'diffID':        'sha256:9118d71d4a4416e4a3502232ac38f47ab799e075c285ddf0733c98288ed2aa11',
-              'fixedVersions': [
-                '1.1.1n-r0'
-              ],
-              'installedVersion': '1.1.1l-r8',
-              'packageName':      'libssl1.1',
-              'purl':             'pkg:apk/alpine/libssl1.1@1.1.1l-r8?arch=x86_64&distro=3.15.0',
-              'references':       [
-                'http://packetstormsecurity.com/files/167344/OpenSSL-1.0.2-1.1.1-3.0-BN_mod_sqrt-Infinite-Loop.html',
-                'http://seclists.org/fulldisclosure/2022/May/33',
-                'http://seclists.org/fulldisclosure/2022/May/35',
-                'http://seclists.org/fulldisclosure/2022/May/38',
-                'https://access.redhat.com/errata/RHSA-2022:5326',
-                'https://access.redhat.com/security/cve/CVE-2022-0778',
-                'https://bugzilla.redhat.com/2062202',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2062202',
-                'https://cert-portal.siemens.com/productcert/pdf/ssa-712929.pdf',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-0778',
-                'https://errata.almalinux.org/8/ALSA-2022-5326.html',
-                'https://errata.rockylinux.org/RLSA-2022:4899',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=3118eb64934499d93db3230748a452351d1d9a65',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=380085481c64de749a6dd25cdf0bcf4360b30f83',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=a466912611aa6cbdf550cd10601390e587451246',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=3118eb64934499d93db3230748a452351d1d9a65',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=380085481c64de749a6dd25cdf0bcf4360b30f83',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=a466912611aa6cbdf550cd10601390e587451246',
-                'https://linux.oracle.com/cve/CVE-2022-0778.html',
-                'https://linux.oracle.com/errata/ELSA-2022-9272.html',
-                'https://lists.debian.org/debian-lts-announce/2022/03/msg00023.html',
-                'https://lists.debian.org/debian-lts-announce/2022/03/msg00024.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/323SNN6ZX7PRJJWP2BUAFLPUAE42XWLZ',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/323SNN6ZX7PRJJWP2BUAFLPUAE42XWLZ/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GDB3GQVJPXJE7X5C5JN6JAA4XUDWD6E6',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GDB3GQVJPXJE7X5C5JN6JAA4XUDWD6E6/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/W6K3PR542DXWLEFFMFIDMME4CWMHJRMG',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/W6K3PR542DXWLEFFMFIDMME4CWMHJRMG/',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/323SNN6ZX7PRJJWP2BUAFLPUAE42XWLZ',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/GDB3GQVJPXJE7X5C5JN6JAA4XUDWD6E6',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/W6K3PR542DXWLEFFMFIDMME4CWMHJRMG',
-                'https://nvd.nist.gov/vuln/detail/CVE-2022-0778',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2022-0002',
-                'https://rustsec.org/advisories/RUSTSEC-2022-0014.html',
-                'https://security.gentoo.org/glsa/202210-02',
-                'https://security.netapp.com/advisory/ntap-20220321-0002',
-                'https://security.netapp.com/advisory/ntap-20220321-0002/',
-                'https://security.netapp.com/advisory/ntap-20220429-0005',
-                'https://security.netapp.com/advisory/ntap-20220429-0005/',
-                'https://security.netapp.com/advisory/ntap-20240621-0006',
-                'https://security.netapp.com/advisory/ntap-20240621-0006/',
-                'https://support.apple.com/kb/HT213255',
-                'https://support.apple.com/kb/HT213256',
-                'https://support.apple.com/kb/HT213257',
-                'https://ubuntu.com/security/notices/USN-5328-1',
-                'https://ubuntu.com/security/notices/USN-5328-2',
-                'https://ubuntu.com/security/notices/USN-6457-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2022-0778',
-                'https://www.debian.org/security/2022/dsa-5103',
-                'https://www.openssl.org/news/secadv/20220315.txt',
-                'https://www.oracle.com/security-alerts/cpuapr2022.html',
-                'https://www.oracle.com/security-alerts/cpujul2022.html',
-                'https://www.tenable.com/security/tns-2022-06',
-                'https://www.tenable.com/security/tns-2022-07',
-                'https://www.tenable.com/security/tns-2022-08',
-                'https://www.tenable.com/security/tns-2022-09'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: Infinite loop in BN_mod_sqrt() reachable when parsing certificates'
-            },
-            {
-              'cve':  'CVE-2022-4450',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'nvd': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-415'
-              ],
-              'description':   'The function PEM_read_bio_ex() reads a PEM file from a BIO and parses and\ndecodes the "name" (e.g. "CERTIFICATE"), any header data and the payload data.\nIf the function succeeds then the "name_out", "header" and "data" arguments are\npopulated with pointers to buffers containing the relevant decoded data. The\ncaller is responsible for freeing those buffers. It is possible to construct a\nPEM file that results in 0 bytes of payload data. In this case PEM_read_bio_ex()\nwill return a failure code but will populate the header argument with a pointer\nto a buffer that has already been freed. If the caller also frees this buffer\nthen a double free will occur. This will most likely lead to a crash. This\ncould be exploited by an attacker who has the ability to supply malicious PEM\nfiles for parsing to achieve a denial of service attack.\n\nThe functions PEM_read_bio() and PEM_read() are simple wrappers around\nPEM_read_bio_ex() and therefore these functions are also directly affected.\n\nThese functions are also called indirectly by a number of other OpenSSL\nfunctions including PEM_X509_INFO_read_bio_ex() and\nSSL_CTX_use_serverinfo_file() which are also vulnerable. Some OpenSSL internal\nuses of these functions are not vulnerable because the caller does not free the\nheader argument if PEM_read_bio_ex() returns a failure code. These locations\ninclude the PEM_read_bio_TYPE() functions as well as the decoders introduced in\nOpenSSL 3.0.\n\nThe OpenSSL asn1parse command line application is also impacted by this issue.',
-              'diffID':        'sha256:9118d71d4a4416e4a3502232ac38f47ab799e075c285ddf0733c98288ed2aa11',
-              'fixedVersions': [
-                '1.1.1t-r0'
-              ],
-              'installedVersion': '1.1.1l-r8',
-              'packageName':      'libssl1.1',
-              'purl':             'pkg:apk/alpine/libssl1.1@1.1.1l-r8?arch=x86_64&distro=3.15.0',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2023:2165',
-                'https://access.redhat.com/security/cve/CVE-2022-4450',
-                'https://bugzilla.redhat.com/1960321',
-                'https://bugzilla.redhat.com/2164440',
-                'https://bugzilla.redhat.com/2164487',
-                'https://bugzilla.redhat.com/2164492',
-                'https://bugzilla.redhat.com/2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144000',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144003',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144006',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144008',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144010',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144012',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144015',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144017',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144019',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2145170',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2158412',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164440',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164487',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164488',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164492',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164497',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164499',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164500',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4203',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4304',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4450',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0215',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0216',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0217',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0286',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0401',
-                'https://errata.almalinux.org/9/ALSA-2023-2165.html',
-                'https://errata.rockylinux.org/RLSA-2023:0946',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=63bcf189be73a9cc1264059bed6f57974be74a83',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=bbcf509bd046b34cca19c766bbddc31683d0858b',
-                'https://linux.oracle.com/cve/CVE-2022-4450.html',
-                'https://linux.oracle.com/errata/ELSA-2023-32791.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2022-4450',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0003',
-                'https://rustsec.org/advisories/RUSTSEC-2023-0010.html',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://ubuntu.com/security/notices/USN-5844-1',
-                'https://ubuntu.com/security/notices/USN-6564-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2022-4450',
-                'https://www.openssl.org/news/secadv/20230207.txt'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: double free after calling PEM_read_bio_ex'
-            },
-            {
-              'cve':  'CVE-2023-0215',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'nvd': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   'The public API function BIO_new_NDEF is a helper function used for streaming\nASN.1 data via a BIO. It is primarily used internally to OpenSSL to support the\nSMIME, CMS and PKCS7 streaming capabilities, but may also be called directly by\nend user applications.\n\nThe function receives a BIO from the caller, prepends a new BIO_f_asn1 filter\nBIO onto the front of it to form a BIO chain, and then returns the new head of\nthe BIO chain to the caller. Under certain conditions, for example if a CMS\nrecipient public key is invalid, the new filter BIO is freed and the function\nreturns a NULL result indicating a failure. However, in this case, the BIO chain\nis not properly cleaned up and the BIO passed by the caller still retains\ninternal pointers to the previously freed filter BIO. If the caller then goes on\nto call BIO_pop() on the BIO then a use-after-free will occur. This will most\nlikely result in a crash.\n\n\n\nThis scenario occurs directly in the internal function B64_write_ASN1() which\nmay cause BIO_new_NDEF() to be called and will subsequently call BIO_pop() on\nthe BIO. This internal function is in turn called by the public API functions\nPEM_write_bio_ASN1_stream, PEM_write_bio_CMS_stream, PEM_write_bio_PKCS7_stream,\nSMIME_write_ASN1, SMIME_write_CMS and SMIME_write_PKCS7.\n\nOther public API functions that may be impacted by this include\ni2d_ASN1_bio_stream, BIO_new_CMS, BIO_new_PKCS7, i2d_CMS_bio_stream and\ni2d_PKCS7_bio_stream.\n\nThe OpenSSL cms and smime command line applications are similarly affected.',
-              'diffID':        'sha256:9118d71d4a4416e4a3502232ac38f47ab799e075c285ddf0733c98288ed2aa11',
-              'fixedVersions': [
-                '1.1.1t-r0'
-              ],
-              'installedVersion': '1.1.1l-r8',
-              'packageName':      'libssl1.1',
-              'purl':             'pkg:apk/alpine/libssl1.1@1.1.1l-r8?arch=x86_64&distro=3.15.0',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2023:2165',
-                'https://access.redhat.com/security/cve/CVE-2023-0215',
-                'https://bugzilla.redhat.com/1960321',
-                'https://bugzilla.redhat.com/2164440',
-                'https://bugzilla.redhat.com/2164487',
-                'https://bugzilla.redhat.com/2164492',
-                'https://bugzilla.redhat.com/2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144000',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144003',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144006',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144008',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144010',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144012',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144015',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144017',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144019',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2145170',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2158412',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164440',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164487',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164488',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164492',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164497',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164499',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164500',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4203',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4304',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4450',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0215',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0216',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0217',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0286',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0401',
-                'https://errata.almalinux.org/9/ALSA-2023-2165.html',
-                'https://errata.rockylinux.org/RLSA-2023:0946',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=8818064ce3c3c0f1b740a5aaba2a987e75bfbafd',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=9816136fe31d92ace4037d5da5257f763aeeb4eb',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=c3829dd8825c654652201e16f8a0a0c46ee3f344',
-                'https://linux.oracle.com/cve/CVE-2023-0215.html',
-                'https://linux.oracle.com/errata/ELSA-2023-32791.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-0215',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0003',
-                'https://rustsec.org/advisories/RUSTSEC-2023-0009.html',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://security.netapp.com/advisory/ntap-20230427-0007',
-                'https://security.netapp.com/advisory/ntap-20230427-0007/',
-                'https://security.netapp.com/advisory/ntap-20230427-0009',
-                'https://security.netapp.com/advisory/ntap-20230427-0009/',
-                'https://security.netapp.com/advisory/ntap-20240621-0006',
-                'https://security.netapp.com/advisory/ntap-20240621-0006/',
-                'https://ubuntu.com/security/notices/USN-5844-1',
-                'https://ubuntu.com/security/notices/USN-5845-1',
-                'https://ubuntu.com/security/notices/USN-5845-2',
-                'https://ubuntu.com/security/notices/USN-6564-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-0215',
-                'https://www.openssl.org/news/secadv/20230207.txt'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: use-after-free following BIO_new_NDEF'
-            },
-            {
-              'cve':  'CVE-2023-0286',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '7.4',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H'
-                },
-                'nvd': {
-                  'v3score':  '7.4',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.4',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-843'
-              ],
-              'description':   'There is a type confusion vulnerability relating to X.400 address processing\ninside an X.509 GeneralName. X.400 addresses were parsed as an ASN1_STRING but\nthe public structure definition for GENERAL_NAME incorrectly specified the type\nof the x400Address field as ASN1_TYPE. This field is subsequently interpreted by\nthe OpenSSL function GENERAL_NAME_cmp as an ASN1_TYPE rather than an\nASN1_STRING.\n\nWhen CRL checking is enabled (i.e. the application sets the\nX509_V_FLAG_CRL_CHECK flag), this vulnerability may allow an attacker to pass\narbitrary pointers to a memcmp call, enabling them to read memory contents or\nenact a denial of service. In most cases, the attack requires the attacker to\nprovide both the certificate chain and CRL, neither of which need to have a\nvalid signature. If the attacker only controls one of these inputs, the other\ninput must already contain an X.400 address as a CRL distribution point, which\nis uncommon. As such, this vulnerability is most likely to only affect\napplications which have implemented their own functionality for retrieving CRLs\nover a network.',
-              'diffID':        'sha256:9118d71d4a4416e4a3502232ac38f47ab799e075c285ddf0733c98288ed2aa11',
-              'fixedVersions': [
-                '1.1.1t-r0'
-              ],
-              'installedVersion': '1.1.1l-r8',
-              'packageName':      'libssl1.1',
-              'purl':             'pkg:apk/alpine/libssl1.1@1.1.1l-r8?arch=x86_64&distro=3.15.0',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2025:7937',
-                'https://access.redhat.com/security/cve/CVE-2023-0286',
-                'https://access.redhat.com/security/cve/cve-2023-0286',
-                'https://bugzilla.redhat.com/2164440',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144000',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144003',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144006',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144008',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144010',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144012',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144015',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144017',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144019',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2145170',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2158412',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164440',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164487',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164488',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164492',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164497',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164499',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164500',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4203',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4304',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4450',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0215',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0216',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0217',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0286',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0401',
-                'https://errata.almalinux.org/9/ALSA-2025-7937.html',
-                'https://errata.rockylinux.org/RLSA-2023:0946',
-                'https://ftp.openbsd.org/pub/OpenBSD/LibreSSL/libressl-3.6.2-relnotes.txt',
-                'https://ftp.openbsd.org/pub/OpenBSD/patches/7.2/common/018_x509.patch.sig',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=2c6c9d439b484e1ba9830d8454a34fa4f80fdfe9',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=2f7530077e0ef79d98718138716bc51ca0cad658',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=fd2af07dc083a350c959147097003a14a5e8ac4d',
-                'https://github.com/pyca/cryptography',
-                'https://github.com/pyca/cryptography/security/advisories/GHSA-x4qr-2fvf-3mr5',
-                'https://linux.oracle.com/cve/CVE-2023-0286.html',
-                'https://linux.oracle.com/errata/ELSA-2025-7937.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-0286',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0003',
-                'https://rustsec.org/advisories/RUSTSEC-2023-0006.html',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://ubuntu.com/security/notices/USN-5844-1',
-                'https://ubuntu.com/security/notices/USN-5845-1',
-                'https://ubuntu.com/security/notices/USN-5845-2',
-                'https://ubuntu.com/security/notices/USN-6564-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-0286',
-                'https://www.openssl.org/news/secadv/20230207.txt'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: X.400 address type confusion in X.509 GeneralName'
-            },
-            {
-              'cve':  'CVE-2023-0464',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-295'
-              ],
-              'description':   "A security vulnerability has been identified in all supported versions\n\nof OpenSSL related to the verification of X.509 certificate chains\nthat include policy constraints.  Attackers may be able to exploit this\nvulnerability by creating a malicious certificate chain that triggers\nexponential use of computational resources, leading to a denial-of-service\n(DoS) attack on affected systems.\n\nPolicy processing is disabled by default but can be enabled by passing\nthe `-policy' argument to the command line utilities or by calling the\n`X509_VERIFY_PARAM_set1_policies()' function.",
-              'diffID':        'sha256:9118d71d4a4416e4a3502232ac38f47ab799e075c285ddf0733c98288ed2aa11',
-              'fixedVersions': [
-                '1.1.1t-r2'
-              ],
-              'installedVersion': '1.1.1l-r8',
-              'packageName':      'libssl1.1',
-              'purl':             'pkg:apk/alpine/libssl1.1@1.1.1l-r8?arch=x86_64&distro=3.15.0',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2023:3722',
-                'https://access.redhat.com/security/cve/CVE-2023-0464',
-                'https://bugzilla.redhat.com/2181082',
-                'https://bugzilla.redhat.com/2182561',
-                'https://bugzilla.redhat.com/2182565',
-                'https://bugzilla.redhat.com/2188461',
-                'https://bugzilla.redhat.com/2207947',
-                'https://errata.almalinux.org/9/ALSA-2023-3722.html',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=2017771e2db3e2b96f89bbe8766c3209f6a99545',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=2dcd4f1e3115f38cefa43e3efbe9b801c27e642e',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=879f7080d7e141f415c79eaa3a8ac4a3dad0348b',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=959c59c7a0164117e7f8366466a32bb1f8d77ff1',
-                'https://linux.oracle.com/cve/CVE-2023-0464.html',
-                'https://linux.oracle.com/errata/ELSA-2023-3722.html',
-                'https://lists.debian.org/debian-lts-announce/2023/06/msg00011.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-0464',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://security.netapp.com/advisory/ntap-20230406-0006/',
-                'https://security.netapp.com/advisory/ntap-20240621-0006/',
-                'https://ubuntu.com/security/notices/USN-6039-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.couchbase.com/alerts/',
-                'https://www.cve.org/CVERecord?id=CVE-2023-0464',
-                'https://www.debian.org/security/2023/dsa-5417',
-                'https://www.openssl.org/news/secadv/20230322.txt'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: Denial of service by excessive resource usage in verifying X509 policy constraints'
-            },
-            {
-              'cve':  'CVE-2022-2097',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N'
-                },
-                'nvd': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N'
-                },
-                'redhat': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-327'
-              ],
-              'description':   "AES OCB mode for 32-bit x86 platforms using the AES-NI assembly optimised implementation will not encrypt the entirety of the data under some circumstances. This could reveal sixteen bytes of data that was preexisting in the memory that wasn't written. In the special case of \"in place\" encryption, sixteen bytes of the plaintext would be revealed. Since OpenSSL does not support OCB based cipher suites for TLS and DTLS, they are both unaffected. Fixed in OpenSSL 3.0.5 (Affected 3.0.0-3.0.4). Fixed in OpenSSL 1.1.1q (Affected 1.1.1-1.1.1p).",
-              'diffID':        'sha256:9118d71d4a4416e4a3502232ac38f47ab799e075c285ddf0733c98288ed2aa11',
-              'fixedVersions': [
-                '1.1.1q-r0'
-              ],
-              'installedVersion': '1.1.1l-r8',
-              'packageName':      'libssl1.1',
-              'purl':             'pkg:apk/alpine/libssl1.1@1.1.1l-r8?arch=x86_64&distro=3.15.0',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2022:6224',
-                'https://access.redhat.com/security/cve/CVE-2022-2097',
-                'https://bugzilla.redhat.com/2081494',
-                'https://bugzilla.redhat.com/2087911',
-                'https://bugzilla.redhat.com/2087913',
-                'https://bugzilla.redhat.com/2097310',
-                'https://bugzilla.redhat.com/2104905',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2081494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2097310',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2100554',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2104905',
-                'https://cert-portal.siemens.com/productcert/pdf/ssa-332410.pdf',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-1292',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-2068',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-2097',
-                'https://errata.almalinux.org/9/ALSA-2022-6224.html',
-                'https://errata.rockylinux.org/RLSA-2022:5818',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=919925673d6c9cfed3c1085497f5dfbbed5fc431',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=a98f339ddd7e8f487d6e0088d4a9a42324885a93',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=919925673d6c9cfed3c1085497f5dfbbed5fc431',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=a98f339ddd7e8f487d6e0088d4a9a42324885a93',
-                'https://github.com/alexcrichton/openssl-src-rs',
-                'https://linux.oracle.com/cve/CVE-2022-2097.html',
-                'https://linux.oracle.com/errata/ELSA-2022-9955.html',
-                'https://lists.debian.org/debian-lts-announce/2023/02/msg00019.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/R6CK57NBQFTPUMXAPJURCGXUYT76NQAK',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/R6CK57NBQFTPUMXAPJURCGXUYT76NQAK/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/V6567JERRHHJW2GNGJGKDRNHR7SNPZK7',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/V6567JERRHHJW2GNGJGKDRNHR7SNPZK7/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VCMNWKERPBKOEBNL7CLTTX3ZZCZLH7XA',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VCMNWKERPBKOEBNL7CLTTX3ZZCZLH7XA/',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/R6CK57NBQFTPUMXAPJURCGXUYT76NQAK',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/R6CK57NBQFTPUMXAPJURCGXUYT76NQAK/',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/V6567JERRHHJW2GNGJGKDRNHR7SNPZK7',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/V6567JERRHHJW2GNGJGKDRNHR7SNPZK7/',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/VCMNWKERPBKOEBNL7CLTTX3ZZCZLH7XA',
-                'https://nvd.nist.gov/vuln/detail/CVE-2022-2097',
-                'https://rustsec.org/advisories/RUSTSEC-2022-0032.html',
-                'https://security.gentoo.org/glsa/202210-02',
-                'https://security.netapp.com/advisory/ntap-20220715-0011',
-                'https://security.netapp.com/advisory/ntap-20220715-0011/',
-                'https://security.netapp.com/advisory/ntap-20230420-0008',
-                'https://security.netapp.com/advisory/ntap-20230420-0008/',
-                'https://security.netapp.com/advisory/ntap-20240621-0006',
-                'https://security.netapp.com/advisory/ntap-20240621-0006/',
-                'https://ubuntu.com/security/notices/USN-5502-1',
-                'https://ubuntu.com/security/notices/USN-6457-1',
-                'https://www.cve.org/CVERecord?id=CVE-2022-2097',
-                'https://www.debian.org/security/2023/dsa-5343',
-                'https://www.openssl.org/news/secadv/20220705.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: AES OCB fails to encrypt some bytes'
-            },
-            {
-              'cve':  'CVE-2022-4304',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N'
-                },
-                'nvd': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N'
-                },
-                'redhat': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-203'
-              ],
-              'description':   'A timing based side channel exists in the OpenSSL RSA Decryption implementation\nwhich could be sufficient to recover a plaintext across a network in a\nBleichenbacher style attack. To achieve a successful decryption an attacker\nwould have to be able to send a very large number of trial messages for\ndecryption. The vulnerability affects all RSA padding modes: PKCS#1 v1.5,\nRSA-OEAP and RSASVE.\n\nFor example, in a TLS connection, RSA is commonly used by a client to send an\nencrypted pre-master secret to the server. An attacker that had observed a\ngenuine connection between a client and a server could use this flaw to send\ntrial messages to the server and record the time taken to process them. After a\nsufficiently large number of messages the attacker could recover the pre-master\nsecret used for the original connection and thus be able to decrypt the\napplication data sent over that connection.',
-              'diffID':        'sha256:9118d71d4a4416e4a3502232ac38f47ab799e075c285ddf0733c98288ed2aa11',
-              'fixedVersions': [
-                '1.1.1t-r0'
-              ],
-              'installedVersion': '1.1.1l-r8',
-              'packageName':      'libssl1.1',
-              'purl':             'pkg:apk/alpine/libssl1.1@1.1.1l-r8?arch=x86_64&distro=3.15.0',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2023:2165',
-                'https://access.redhat.com/security/cve/CVE-2022-4304',
-                'https://bugzilla.redhat.com/1960321',
-                'https://bugzilla.redhat.com/2164440',
-                'https://bugzilla.redhat.com/2164487',
-                'https://bugzilla.redhat.com/2164492',
-                'https://bugzilla.redhat.com/2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144000',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144003',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144006',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144008',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144010',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144012',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144015',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144017',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144019',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2145170',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2158412',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164440',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164487',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164488',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164492',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164497',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164499',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164500',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4203',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4304',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4450',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0215',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0216',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0217',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0286',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0401',
-                'https://errata.almalinux.org/9/ALSA-2023-2165.html',
-                'https://errata.rockylinux.org/RLSA-2023:0946',
-                'https://linux.oracle.com/cve/CVE-2022-4304.html',
-                'https://linux.oracle.com/errata/ELSA-2023-32791.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2022-4304',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0003',
-                'https://rustsec.org/advisories/RUSTSEC-2023-0007.html',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://ubuntu.com/security/notices/USN-5844-1',
-                'https://ubuntu.com/security/notices/USN-6564-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2022-4304',
-                'https://www.openssl.org/news/secadv/20230207.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: timing attack in RSA Decryption implementation'
-            },
-            {
-              'cve':  'CVE-2023-0465',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N'
-                },
-                'redhat': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-295'
-              ],
-              'description':   "Applications that use a non-default option when verifying certificates may be\nvulnerable to an attack from a malicious CA to circumvent certain checks.\n\nInvalid certificate policies in leaf certificates are silently ignored by\nOpenSSL and other certificate policy checks are skipped for that certificate.\nA malicious CA could use this to deliberately assert invalid certificate policies\nin order to circumvent policy checking on the certificate altogether.\n\nPolicy processing is disabled by default but can be enabled by passing\nthe `-policy' argument to the command line utilities or by calling the\n`X509_VERIFY_PARAM_set1_policies()' function.",
-              'diffID':        'sha256:9118d71d4a4416e4a3502232ac38f47ab799e075c285ddf0733c98288ed2aa11',
-              'fixedVersions': [
-                '1.1.1t-r2'
-              ],
-              'installedVersion': '1.1.1l-r8',
-              'packageName':      'libssl1.1',
-              'purl':             'pkg:apk/alpine/libssl1.1@1.1.1l-r8?arch=x86_64&distro=3.15.0',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2023:3722',
-                'https://access.redhat.com/security/cve/CVE-2023-0465',
-                'https://bugzilla.redhat.com/2181082',
-                'https://bugzilla.redhat.com/2182561',
-                'https://bugzilla.redhat.com/2182565',
-                'https://bugzilla.redhat.com/2188461',
-                'https://bugzilla.redhat.com/2207947',
-                'https://errata.almalinux.org/9/ALSA-2023-3722.html',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=10325176f3d3e98c6e2b3bf5ab1e3b334de6947a',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=1dd43e0709fece299b15208f36cc7c76209ba0bb',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=b013765abfa80036dc779dd0e50602c57bb3bf95',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=facfb1ab745646e97a1920977ae4a9965ea61d5c',
-                'https://linux.oracle.com/cve/CVE-2023-0465.html',
-                'https://linux.oracle.com/errata/ELSA-2023-3722.html',
-                'https://lists.debian.org/debian-lts-announce/2023/06/msg00011.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-0465',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://security.netapp.com/advisory/ntap-20230414-0001/',
-                'https://ubuntu.com/security/notices/USN-6039-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-0465',
-                'https://www.debian.org/security/2023/dsa-5417',
-                'https://www.openssl.org/news/secadv/20230328.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: Invalid certificate policies in leaf certificates are silently ignored'
-            },
-            {
-              'cve':  'CVE-2023-2650',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '6.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-770'
-              ],
-              'description':   "Issue summary: Processing some specially crafted ASN.1 object identifiers or\ndata containing them may be very slow.\n\nImpact summary: Applications that use OBJ_obj2txt() directly, or use any of\nthe OpenSSL subsystems OCSP, PKCS7/SMIME, CMS, CMP/CRMF or TS with no message\nsize limit may experience notable to very long delays when processing those\nmessages, which may lead to a Denial of Service.\n\nAn OBJECT IDENTIFIER is composed of a series of numbers - sub-identifiers -\nmost of which have no size limit.  OBJ_obj2txt() may be used to translate\nan ASN.1 OBJECT IDENTIFIER given in DER encoding form (using the OpenSSL\ntype ASN1_OBJECT) to its canonical numeric text form, which are the\nsub-identifiers of the OBJECT IDENTIFIER in decimal form, separated by\nperiods.\n\nWhen one of the sub-identifiers in the OBJECT IDENTIFIER is very large\n(these are sizes that are seen as absurdly large, taking up tens or hundreds\nof KiBs), the translation to a decimal number in text may take a very long\ntime.  The time complexity is O(n^2) with 'n' being the size of the\nsub-identifiers in bytes (*).\n\nWith OpenSSL 3.0, support to fetch cryptographic algorithms using names /\nidentifiers in string form was introduced.  This includes using OBJECT\nIDENTIFIERs in canonical numeric text form as identifiers for fetching\nalgorithms.\n\nSuch OBJECT IDENTIFIERs may be received through the ASN.1 structure\nAlgorithmIdentifier, which is commonly used in multiple protocols to specify\nwhat cryptographic algorithm should be used to sign or verify, encrypt or\ndecrypt, or digest passed data.\n\nApplications that call OBJ_obj2txt() directly with untrusted data are\naffected, with any version of OpenSSL.  If the use is for the mere purpose\nof display, the severity is considered low.\n\nIn OpenSSL 3.0 and newer, this affects the subsystems OCSP, PKCS7/SMIME,\nCMS, CMP/CRMF or TS.  It also impacts anything that processes X.509\ncertificates, including simple things like verifying its signature.\n\nThe impact on TLS is relatively low, because all versions of OpenSSL have a\n100KiB limit on the peer's certificate chain.  Additionally, this only\nimpacts clients, or servers that have explicitly enabled client\nauthentication.\n\nIn OpenSSL 1.1.1 and 1.0.2, this only affects displaying diverse objects,\nsuch as X.509 certificates.  This is assumed to not happen in such a way\nthat it would cause a Denial of Service, so these versions are considered\nnot affected by this issue in such a way that it would be cause for concern,\nand the severity is therefore considered low.",
-              'diffID':        'sha256:9118d71d4a4416e4a3502232ac38f47ab799e075c285ddf0733c98288ed2aa11',
-              'fixedVersions': [
-                '1.1.1u-r0'
-              ],
-              'installedVersion': '1.1.1l-r8',
-              'packageName':      'libssl1.1',
-              'purl':             'pkg:apk/alpine/libssl1.1@1.1.1l-r8?arch=x86_64&distro=3.15.0',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2023/05/30/1',
-                'https://access.redhat.com/errata/RHSA-2023:6330',
-                'https://access.redhat.com/security/cve/CVE-2023-2650',
-                'https://bugzilla.redhat.com/1858038',
-                'https://bugzilla.redhat.com/2207947',
-                'https://errata.almalinux.org/9/ALSA-2023-6330.html',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=423a2bc737a908ad0c77bda470b2b59dc879936b',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=853c5e56ee0b8650c73140816bb8b91d6163422c',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=9e209944b35cf82368071f160a744b6178f9b098',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=db779b0e10b047f2585615e0b8f2acdf21f8544a',
-                'https://linux.oracle.com/cve/CVE-2023-2650.html',
-                'https://linux.oracle.com/errata/ELSA-2023-6330.html',
-                'https://lists.debian.org/debian-lts-announce/2023/06/msg00011.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-2650',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0009',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://security.netapp.com/advisory/ntap-20230703-0001/',
-                'https://security.netapp.com/advisory/ntap-20231027-0009/',
-                'https://ubuntu.com/security/notices/USN-6119-1',
-                'https://ubuntu.com/security/notices/USN-6188-1',
-                'https://ubuntu.com/security/notices/USN-6672-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-2650',
-                'https://www.debian.org/security/2023/dsa-5417',
-                'https://www.openssl.org/news/secadv/20230530.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: Possible DoS translating ASN.1 object identifiers'
-            },
-            {
-              'cve':  'CVE-2023-3446',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L'
-                },
-                'redhat': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L'
-                }
-              },
-              'cwes': [
-                'CWE-606',
-                'CWE-1333'
-              ],
-              'description':   "Issue summary: Checking excessively long DH keys or parameters may be very slow.\n\nImpact summary: Applications that use the functions DH_check(), DH_check_ex()\nor EVP_PKEY_param_check() to check a DH key or DH parameters may experience long\ndelays. Where the key or parameters that are being checked have been obtained\nfrom an untrusted source this may lead to a Denial of Service.\n\nThe function DH_check() performs various checks on DH parameters. One of those\nchecks confirms that the modulus ('p' parameter) is not too large. Trying to use\na very large modulus is slow and OpenSSL will not normally use a modulus which\nis over 10,000 bits in length.\n\nHowever the DH_check() function checks numerous aspects of the key or parameters\nthat have been supplied. Some of those checks use the supplied modulus value\neven if it has already been found to be too large.\n\nAn application that calls DH_check() and supplies a key or parameters obtained\nfrom an untrusted source could be vulernable to a Denial of Service attack.\n\nThe function DH_check() is itself called by a number of other OpenSSL functions.\nAn application calling any of those other functions may similarly be affected.\nThe other functions affected by this are DH_check_ex() and\nEVP_PKEY_param_check().\n\nAlso vulnerable are the OpenSSL dhparam and pkeyparam command line applications\nwhen using the '-check' option.\n\nThe OpenSSL SSL/TLS implementation is not affected by this issue.\nThe OpenSSL 3.0 and 3.1 FIPS providers are not affected by this issue.",
-              'diffID':        'sha256:9118d71d4a4416e4a3502232ac38f47ab799e075c285ddf0733c98288ed2aa11',
-              'fixedVersions': [
-                '1.1.1u-r2'
-              ],
-              'installedVersion': '1.1.1l-r8',
-              'packageName':      'libssl1.1',
-              'purl':             'pkg:apk/alpine/libssl1.1@1.1.1l-r8?arch=x86_64&distro=3.15.0',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2023/07/19/4',
-                'http://www.openwall.com/lists/oss-security/2023/07/19/5',
-                'http://www.openwall.com/lists/oss-security/2023/07/19/6',
-                'http://www.openwall.com/lists/oss-security/2023/07/31/1',
-                'http://www.openwall.com/lists/oss-security/2024/05/16/1',
-                'https://access.redhat.com/errata/RHSA-2024:2447',
-                'https://access.redhat.com/security/cve/CVE-2023-3446',
-                'https://bugzilla.redhat.com/2223016',
-                'https://bugzilla.redhat.com/2224962',
-                'https://bugzilla.redhat.com/2227852',
-                'https://bugzilla.redhat.com/2248616',
-                'https://bugzilla.redhat.com/2257571',
-                'https://bugzilla.redhat.com/2258502',
-                'https://bugzilla.redhat.com/2259944',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2224962',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2257582',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2257583',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2258677',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2258688',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2258691',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2258694',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2258700',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-36763',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-36764',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3446',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45229',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45231',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45232',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45233',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45235',
-                'https://errata.almalinux.org/9/ALSA-2024-2447.html',
-                'https://errata.rockylinux.org/RLSA-2024:2264',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=1fa20cf2f506113c761777127a38bce5068740eb',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=8780a896543a654e757db1b9396383f9d8095528',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=9a0a4d3c1e7138915563c0df4fe6a3f9377b839c',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=fc9867c1e03c22ebf56943be205202e576aabf23',
-                'https://linux.oracle.com/cve/CVE-2023-3446.html',
-                'https://linux.oracle.com/errata/ELSA-2024-2447.html',
-                'https://lists.debian.org/debian-lts-announce/2023/08/msg00019.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-3446',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://security.netapp.com/advisory/ntap-20230803-0011/',
-                'https://ubuntu.com/security/notices/USN-6435-1',
-                'https://ubuntu.com/security/notices/USN-6435-2',
-                'https://ubuntu.com/security/notices/USN-6450-1',
-                'https://ubuntu.com/security/notices/USN-6709-1',
-                'https://ubuntu.com/security/notices/USN-7018-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-3446',
-                'https://www.openssl.org/news/secadv/20230719.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: Excessive time spent checking DH keys and parameters'
-            },
-            {
-              'cve':  'CVE-2023-3817',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L'
-                },
-                'redhat': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L'
-                }
-              },
-              'cwes': [
-                'CWE-606',
-                'CWE-834'
-              ],
-              'description':   'Issue summary: Checking excessively long DH keys or parameters may be very slow.\n\nImpact summary: Applications that use the functions DH_check(), DH_check_ex()\nor EVP_PKEY_param_check() to check a DH key or DH parameters may experience long\ndelays. Where the key or parameters that are being checked have been obtained\nfrom an untrusted source this may lead to a Denial of Service.\n\nThe function DH_check() performs various checks on DH parameters. After fixing\nCVE-2023-3446 it was discovered that a large q parameter value can also trigger\nan overly long computation during some of these checks. A correct q value,\nif present, cannot be larger than the modulus p parameter, thus it is\nunnecessary to perform these checks if q is larger than p.\n\nAn application that calls DH_check() and supplies a key or parameters obtained\nfrom an untrusted source could be vulnerable to a Denial of Service attack.\n\nThe function DH_check() is itself called by a number of other OpenSSL functions.\nAn application calling any of those other functions may similarly be affected.\nThe other functions affected by this are DH_check_ex() and\nEVP_PKEY_param_check().\n\nAlso vulnerable are the OpenSSL dhparam and pkeyparam command line applications\nwhen using the "-check" option.\n\nThe OpenSSL SSL/TLS implementation is not affected by this issue.\n\nThe OpenSSL 3.0 and 3.1 FIPS providers are not affected by this issue.',
-              'diffID':        'sha256:9118d71d4a4416e4a3502232ac38f47ab799e075c285ddf0733c98288ed2aa11',
-              'fixedVersions': [
-                '1.1.1v-r0'
-              ],
-              'installedVersion': '1.1.1l-r8',
-              'packageName':      'libssl1.1',
-              'purl':             'pkg:apk/alpine/libssl1.1@1.1.1l-r8?arch=x86_64&distro=3.15.0',
-              'references':       [
-                'http://seclists.org/fulldisclosure/2023/Jul/43',
-                'http://www.openwall.com/lists/oss-security/2023/07/31/1',
-                'http://www.openwall.com/lists/oss-security/2023/09/22/11',
-                'http://www.openwall.com/lists/oss-security/2023/09/22/9',
-                'http://www.openwall.com/lists/oss-security/2023/11/06/2',
-                'https://access.redhat.com/errata/RHSA-2024:2447',
-                'https://access.redhat.com/security/cve/CVE-2023-3817',
-                'https://bugzilla.redhat.com/2223016',
-                'https://bugzilla.redhat.com/2224962',
-                'https://bugzilla.redhat.com/2227852',
-                'https://bugzilla.redhat.com/2248616',
-                'https://bugzilla.redhat.com/2257571',
-                'https://bugzilla.redhat.com/2258502',
-                'https://bugzilla.redhat.com/2259944',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2224962',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2227852',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2248616',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2270358',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3446',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3817',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-5678',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-2408',
-                'https://errata.almalinux.org/9/ALSA-2024-2447.html',
-                'https://errata.rockylinux.org/RLSA-2023:7877',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=6a1eb62c29db6cb5eec707f9338aee00f44e26f5',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=869ad69aadd985c7b8ca6f4e5dd0eb274c9f3644',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=9002fd07327a91f35ba6c1307e71fa6fd4409b7f',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=91ddeba0f2269b017dc06c46c993a788974b1aa5',
-                'https://linux.oracle.com/cve/CVE-2023-3817.html',
-                'https://linux.oracle.com/errata/ELSA-2024-2447.html',
-                'https://lists.debian.org/debian-lts-announce/2023/08/msg00019.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-3817',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://security.netapp.com/advisory/ntap-20230818-0014/',
-                'https://security.netapp.com/advisory/ntap-20231027-0008/',
-                'https://security.netapp.com/advisory/ntap-20240621-0006/',
-                'https://ubuntu.com/security/notices/USN-6435-1',
-                'https://ubuntu.com/security/notices/USN-6435-2',
-                'https://ubuntu.com/security/notices/USN-6450-1',
-                'https://ubuntu.com/security/notices/USN-6709-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-3817',
-                'https://www.openssl.org/news/secadv/20230731.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'OpenSSL: Excessive time spent checking DH q parameter value'
-            },
-            {
-              'cve':  'CVE-2023-5678',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L'
-                },
-                'redhat': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L'
-                }
-              },
-              'cwes': [
-                'CWE-606',
-                'CWE-754'
-              ],
-              'description':   "Issue summary: Generating excessively long X9.42 DH keys or checking\nexcessively long X9.42 DH keys or parameters may be very slow.\n\nImpact summary: Applications that use the functions DH_generate_key() to\ngenerate an X9.42 DH key may experience long delays.  Likewise, applications\nthat use DH_check_pub_key(), DH_check_pub_key_ex() or EVP_PKEY_public_check()\nto check an X9.42 DH key or X9.42 DH parameters may experience long delays.\nWhere the key or parameters that are being checked have been obtained from\nan untrusted source this may lead to a Denial of Service.\n\nWhile DH_check() performs all the necessary checks (as of CVE-2023-3817),\nDH_check_pub_key() doesn't make any of these checks, and is therefore\nvulnerable for excessively large P and Q parameters.\n\nLikewise, while DH_generate_key() performs a check for an excessively large\nP, it doesn't check for an excessively large Q.\n\nAn application that calls DH_generate_key() or DH_check_pub_key() and\nsupplies a key or parameters obtained from an untrusted source could be\nvulnerable to a Denial of Service attack.\n\nDH_generate_key() and DH_check_pub_key() are also called by a number of\nother OpenSSL functions.  An application calling any of those other\nfunctions may similarly be affected.  The other functions affected by this\nare DH_check_pub_key_ex(), EVP_PKEY_public_check(), and EVP_PKEY_generate().\n\nAlso vulnerable are the OpenSSL pkey command line application when using the\n\"-pubcheck\" option, as well as the OpenSSL genpkey command line application.\n\nThe OpenSSL SSL/TLS implementation is not affected by this issue.\n\nThe OpenSSL 3.0 and 3.1 FIPS providers are not affected by this issue.",
-              'diffID':        'sha256:9118d71d4a4416e4a3502232ac38f47ab799e075c285ddf0733c98288ed2aa11',
-              'fixedVersions': [
-                '1.1.1w-r1'
-              ],
-              'installedVersion': '1.1.1l-r8',
-              'packageName':      'libssl1.1',
-              'purl':             'pkg:apk/alpine/libssl1.1@1.1.1l-r8?arch=x86_64&distro=3.15.0',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2024/03/11/1',
-                'https://access.redhat.com/errata/RHSA-2024:2447',
-                'https://access.redhat.com/security/cve/CVE-2023-5678',
-                'https://bugzilla.redhat.com/2223016',
-                'https://bugzilla.redhat.com/2224962',
-                'https://bugzilla.redhat.com/2227852',
-                'https://bugzilla.redhat.com/2248616',
-                'https://bugzilla.redhat.com/2257571',
-                'https://bugzilla.redhat.com/2258502',
-                'https://bugzilla.redhat.com/2259944',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2224962',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2227852',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2248616',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2270358',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3446',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3817',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-5678',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-2408',
-                'https://errata.almalinux.org/9/ALSA-2024-2447.html',
-                'https://errata.rockylinux.org/RLSA-2023:7877',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=34efaef6c103d636ab507a0cc34dca4d3aecc055',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=710fee740904b6290fef0dd5536fbcedbc38ff0c',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=db925ae2e65d0d925adef429afc37f75bd1c2017',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=ddeb4b6c6d527e54ce9a99cba785c0f7776e54b6',
-                'https://linux.oracle.com/cve/CVE-2023-5678.html',
-                'https://linux.oracle.com/errata/ELSA-2024-2447.html',
-                'https://lists.debian.org/debian-lts-announce/2024/10/msg00033.html',
-                'https://lists.debian.org/debian-lts-announce/2024/11/msg00000.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-5678',
-                'https://security.netapp.com/advisory/ntap-20231130-0010/',
-                'https://ubuntu.com/security/notices/USN-6622-1',
-                'https://ubuntu.com/security/notices/USN-6632-1',
-                'https://ubuntu.com/security/notices/USN-6709-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-5678',
-                'https://www.openssl.org/news/secadv/20231106.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: Generating excessively long X9.42 DH keys or checking excessively long X9.42 DH keys or parameters may be very slow'
-            },
-            {
-              'cve':  'CVE-2022-28391',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '8.8',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-88'
-              ],
-              'description':   "BusyBox through 1.35.0 allows remote attackers to execute arbitrary code if netstat is used to print a DNS PTR record's value to a VT compatible terminal. Alternatively, the attacker could choose to change the terminal's colors.",
-              'diffID':        'sha256:9118d71d4a4416e4a3502232ac38f47ab799e075c285ddf0733c98288ed2aa11',
-              'fixedVersions': [
-                '1.34.1-r5'
-              ],
-              'installedVersion': '1.34.1-r4',
-              'packageName':      'ssl_client',
-              'purl':             'pkg:apk/alpine/ssl_client@1.34.1-r4?arch=x86_64&distro=3.15.0',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2022-28391',
-                'https://git.alpinelinux.org/aports/plain/main/busybox/0001-libbb-sockaddr2str-ensure-only-printable-characters-.patch',
-                'https://git.alpinelinux.org/aports/plain/main/busybox/0002-nslookup-sanitize-all-printed-strings-with-printable.patch',
-                'https://gitlab.alpinelinux.org/alpine/aports/-/issues/13661',
-                'https://nvd.nist.gov/vuln/detail/CVE-2022-28391',
-                'https://www.cve.org/CVERecord?id=CVE-2022-28391'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: remote attackers may execute arbitrary code if netstat is used'
-            },
-            {
-              'cve':  'CVE-2022-37434',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '9.8',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-787',
-                'CWE-120'
-              ],
-              'description':   'zlib through 1.2.12 has a heap-based buffer over-read or buffer overflow in inflate in inflate.c via a large gzip header extra field. NOTE: only applications that call inflateGetHeader are affected. Some common applications bundle the affected zlib source code but may be unable to call inflateGetHeader (e.g., see the nodejs/node reference).',
-              'diffID':        'sha256:8d3ac3489996423f53d6087c81180006263b79f206d3fdec9e66f0e27ceb8759',
-              'fixedVersions': [
-                '1.2.12-r2'
-              ],
-              'installedVersion': '1.2.11-r3',
-              'packageName':      'zlib',
-              'purl':             'pkg:apk/alpine/zlib@1.2.11-r3?arch=x86_64&distro=3.15.0',
-              'references':       [
-                'http://seclists.org/fulldisclosure/2022/Oct/37',
-                'http://seclists.org/fulldisclosure/2022/Oct/38',
-                'http://seclists.org/fulldisclosure/2022/Oct/41',
-                'http://seclists.org/fulldisclosure/2022/Oct/42',
-                'http://www.openwall.com/lists/oss-security/2022/08/05/2',
-                'http://www.openwall.com/lists/oss-security/2022/08/09/1',
-                'https://access.redhat.com/errata/RHSA-2022:8291',
-                'https://access.redhat.com/security/cve/CVE-2022-37434',
-                'https://bugzilla.redhat.com/2116639',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2053198',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2077431',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2081296',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2116639',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-37434',
-                'https://errata.almalinux.org/9/ALSA-2022-8291.html',
-                'https://errata.rockylinux.org/RLSA-2022:8291',
-                'https://github.com/curl/curl/issues/9271',
-                'https://github.com/ivd38/zlib_overflow',
-                'https://github.com/madler/zlib/blob/21767c654d31d2dccdde4330529775c6c5fd5389/zlib.h#L1062-L1063',
-                'https://github.com/madler/zlib/commit/1eb7682f845ac9e9bf9ae35bbfb3bad5dacbd91d',
-                'https://github.com/madler/zlib/commit/eff308af425b67093bab25f80f1ae950166bece1',
-                'https://github.com/nodejs/node/blob/75b68c6e4db515f76df73af476eccf382bbcb00a/deps/zlib/inflate.c#L762-L764',
-                'https://linux.oracle.com/cve/CVE-2022-37434.html',
-                'https://linux.oracle.com/errata/ELSA-2023-1095.html',
-                'https://lists.debian.org/debian-lts-announce/2022/09/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JWN4VE3JQR4O2SOUS5TXNLANRPMHWV4I/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NMBOJ77A7T7PQCARMDUK75TE6LLESZ3O/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PAVPQNCG3XRLCLNSQRM3KAN5ZFMVXVTY/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/X5U7OTKZSHY2I3ZFJSR2SHFHW72RKGDK/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YRQAI7H4M4RQZ2IWZUEEXECBE5D56BH2/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2022-37434',
-                'https://security.netapp.com/advisory/ntap-20220901-0005/',
-                'https://security.netapp.com/advisory/ntap-20230427-0007/',
-                'https://support.apple.com/kb/HT213488',
-                'https://support.apple.com/kb/HT213489',
-                'https://support.apple.com/kb/HT213490',
-                'https://support.apple.com/kb/HT213491',
-                'https://support.apple.com/kb/HT213493',
-                'https://support.apple.com/kb/HT213494',
-                'https://ubuntu.com/security/notices/USN-5570-1',
-                'https://ubuntu.com/security/notices/USN-5570-2',
-                'https://ubuntu.com/security/notices/USN-5573-1',
-                'https://ubuntu.com/security/notices/USN-6736-1',
-                'https://ubuntu.com/security/notices/USN-6736-2',
-                'https://www.cve.org/CVERecord?id=CVE-2022-37434',
-                'https://www.debian.org/security/2022/dsa-5218'
-              ],
-              'severity':   'CRITICAL',
-              'suppressed': false,
-              'title':      'zlib: heap-based buffer over-read and overflow in inflate() in inflate.c via a large gzip header extra field'
-            },
-            {
-              'cve':  'CVE-2018-25032',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'nvd': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '8.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-787'
-              ],
-              'description':   'zlib before 1.2.12 allows memory corruption when deflating (i.e., when compressing) if the input has many distant matches.',
-              'diffID':        'sha256:8d3ac3489996423f53d6087c81180006263b79f206d3fdec9e66f0e27ceb8759',
-              'fixedVersions': [
-                '1.2.12-r0'
-              ],
-              'installedVersion': '1.2.11-r3',
-              'packageName':      'zlib',
-              'purl':             'pkg:apk/alpine/zlib@1.2.11-r3?arch=x86_64&distro=3.15.0',
-              'references':       [
-                'http://seclists.org/fulldisclosure/2022/May/33',
-                'http://seclists.org/fulldisclosure/2022/May/35',
-                'http://seclists.org/fulldisclosure/2022/May/38',
-                'http://www.openwall.com/lists/oss-security/2022/03/25/2',
-                'http://www.openwall.com/lists/oss-security/2022/03/26/1',
-                'https://access.redhat.com/errata/RHSA-2022:8420',
-                'https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-25032.json',
-                'https://access.redhat.com/security/cve/CVE-2018-25032',
-                'https://bugzilla.redhat.com/2067945',
-                'https://cert-portal.siemens.com/productcert/pdf/ssa-333517.pdf',
-                'https://errata.almalinux.org/9/ALSA-2022-8420.html',
-                'https://github.com/advisories/GHSA-jc36-42cf-vqwj',
-                'https://github.com/madler/zlib/commit/5c44459c3b28a9bd3283aaceab7c615f8020c531',
-                'https://github.com/madler/zlib/compare/v1.2.11...v1.2.12',
-                'https://github.com/madler/zlib/issues/605',
-                'https://github.com/rubysec/ruby-advisory-db/blob/master/gems/nokogiri/CVE-2018-25032.yml',
-                'https://github.com/sparklemotion/nokogiri/releases/tag/v1.13.4',
-                'https://github.com/sparklemotion/nokogiri/security/advisories/GHSA-v6gp-9mmm-c6p5',
-                'https://groups.google.com/g/ruby-security-ann/c/vX7qSjsvWis/m/TJWN4oOKBwAJ',
-                'https://linux.oracle.com/cve/CVE-2018-25032.html',
-                'https://linux.oracle.com/errata/ELSA-2022-9565.html',
-                'https://lists.debian.org/debian-lts-announce/2022/04/msg00000.html',
-                'https://lists.debian.org/debian-lts-announce/2022/05/msg00008.html',
-                'https://lists.debian.org/debian-lts-announce/2022/09/msg00023.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DCZFIJBJTZ7CL5QXBFKTQ22Q26VINRUF/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DF62MVMH3QUGMBDCB3DY2ERQ6EBHTADB/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JZZPTWRYQULAOL3AW7RZJNVZ2UONXCV4/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NS2D2GFPFGOJUL4WQ3DUAY7HF4VWQ77F/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VOKNP2L734AEL47NRYGVZIKEFOUBQY5Y/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/XOKFMSNQ5D5WGMALBNBXU3GE442V74WU/',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/DCZFIJBJTZ7CL5QXBFKTQ22Q26VINRUF',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/DCZFIJBJTZ7CL5QXBFKTQ22Q26VINRUF/',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/DF62MVMH3QUGMBDCB3DY2ERQ6EBHTADB',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/DF62MVMH3QUGMBDCB3DY2ERQ6EBHTADB/',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/JZZPTWRYQULAOL3AW7RZJNVZ2UONXCV4',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/JZZPTWRYQULAOL3AW7RZJNVZ2UONXCV4/',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/NS2D2GFPFGOJUL4WQ3DUAY7HF4VWQ77F',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/NS2D2GFPFGOJUL4WQ3DUAY7HF4VWQ77F/',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/VOKNP2L734AEL47NRYGVZIKEFOUBQY5Y',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/VOKNP2L734AEL47NRYGVZIKEFOUBQY5Y/',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/XOKFMSNQ5D5WGMALBNBXU3GE442V74WU',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/XOKFMSNQ5D5WGMALBNBXU3GE442V74WU/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2018-25032',
-                'https://security.gentoo.org/glsa/202210-42',
-                'https://security.netapp.com/advisory/ntap-20220526-0009',
-                'https://security.netapp.com/advisory/ntap-20220526-0009/',
-                'https://security.netapp.com/advisory/ntap-20220729-0004',
-                'https://security.netapp.com/advisory/ntap-20220729-0004/',
-                'https://support.apple.com/kb/HT213255',
-                'https://support.apple.com/kb/HT213256',
-                'https://support.apple.com/kb/HT213257',
-                'https://ubuntu.com/security/notices/USN-5355-1',
-                'https://ubuntu.com/security/notices/USN-5355-2',
-                'https://ubuntu.com/security/notices/USN-5359-1',
-                'https://ubuntu.com/security/notices/USN-5359-2',
-                'https://ubuntu.com/security/notices/USN-5739-1',
-                'https://ubuntu.com/security/notices/USN-6736-1',
-                'https://ubuntu.com/security/notices/USN-6736-2',
-                'https://www.cve.org/CVERecord?id=CVE-2018-25032',
-                'https://www.debian.org/security/2022/dsa-5111',
-                'https://www.openwall.com/lists/oss-security/2022/03/24/1',
-                'https://www.openwall.com/lists/oss-security/2022/03/28/1',
-                'https://www.openwall.com/lists/oss-security/2022/03/28/3',
-                'https://www.oracle.com/security-alerts/cpujul2022.html'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'zlib: A flaw found in zlib when compressing (not decompressing) certain inputs'
-            }
-          ]
-        }
-      ],
-      'summary': {
-        'critical':   1,
-        'high':       14,
-        'low':        0,
-        'medium':     14,
-        'suppressed': 0,
-        'unknown':    0
-      }
-    }
-  },
-  {
-    'id':    'default/1832fe7eb400d5885b0caca99cdfacb07bad4da30f3907a4c6613e17ad95d973',
-    'type':  'storage.sbomscanner.kubewarden.io.vulnerabilityreport',
-    'links': {
-      'patch':  'https://localhost:8005/v1/storage.sbomscanner.kubewarden.io.vulnerabilityreports/default/1832fe7eb400d5885b0caca99cdfacb07bad4da30f3907a4c6613e17ad95d973',
-      'remove': 'https://localhost:8005/v1/storage.sbomscanner.kubewarden.io.vulnerabilityreports/default/1832fe7eb400d5885b0caca99cdfacb07bad4da30f3907a4c6613e17ad95d973',
-      'self':   'https://localhost:8005/v1/storage.sbomscanner.kubewarden.io.vulnerabilityreports/default/1832fe7eb400d5885b0caca99cdfacb07bad4da30f3907a4c6613e17ad95d973',
-      'update': 'https://localhost:8005/v1/storage.sbomscanner.kubewarden.io.vulnerabilityreports/default/1832fe7eb400d5885b0caca99cdfacb07bad4da30f3907a4c6613e17ad95d973',
-      'view':   'https://localhost:8005/apis/storage.sbomscanner.kubewarden.io/v1alpha1/namespaces/default/vulnerabilityreports/1832fe7eb400d5885b0caca99cdfacb07bad4da30f3907a4c6613e17ad95d973'
-    },
-    'apiVersion':    'storage.sbomscanner.kubewarden.io/v1alpha1',
-    'imageMetadata': {
-      'digest':      'sha256:bd9137c3bb45dbc40cde0f0e19a8b9064c2bc485466221f5e95eb72b0d0cf82e',
-      'platform':    'linux/arm64/v8',
-      'registry':    'lsong-demo1',
-      'registryURI': 'registry-1.docker.io',
-      'repository':  'library/alpine',
-      'tag':         '3.14.1'
-    },
-    'kind':     'VulnerabilityReport',
-    'metadata': {
-      'creationTimestamp': '2026-01-14T18:51:18Z',
-      'fields':            [
-        '1832fe7eb400d5885b0caca99cdfacb07bad4da30f3907a4c6613e17ad95d973',
-        'registry-1.docker.io/library/alpine:3.14.1',
-        'linux/arm64/v8',
-        '47 (0 suppressed)'
-      ],
-      'labels': {
-        'app.kubernetes.io/managed-by':          'sbomscanner',
-        'app.kubernetes.io/part-of':             'sbomscanner',
-        'sbomscanner.kubewarden.io/scanjob-uid': '445c600a-c4b6-40b3-bd71-f2d2140a37d5'
-      },
-      'name':            '1832fe7eb400d5885b0caca99cdfacb07bad4da30f3907a4c6613e17ad95d973',
-      'namespace':       'default',
-      'ownerReferences': [
-        {
-          'apiVersion':         'storage.sbomscanner.kubewarden.io/v1alpha1',
-          'blockOwnerDeletion': true,
-          'controller':         true,
-          'kind':               'SBOM',
-          'name':               '1832fe7eb400d5885b0caca99cdfacb07bad4da30f3907a4c6613e17ad95d973',
-          'uid':                '39211eb6-71f3-42d9-8ede-42c1845c65bd'
-        }
-      ],
-      'relationships': [
-        {
-          'fromId':   'default/1832fe7eb400d5885b0caca99cdfacb07bad4da30f3907a4c6613e17ad95d973',
-          'fromType': 'storage.sbomscanner.kubewarden.io.sbom',
-          'rel':      'owner',
-          'state':    'active',
-          'message':  'Resource is current'
-        }
-      ],
-      'resourceVersion': '1',
-      'state':           {
-        'error':         false,
-        'message':       'Resource is current',
-        'name':          'active',
-        'transitioning': false
-      },
-      'uid': '6078cf82-b5b9-4b49-b122-995e9aea5fb2'
-    },
-    'report': {
-      'results': [
-        {
-          'class':           'os-pkgs',
-          'target':          '/var/run/worker/trivy.sbom.4244419686.json (alpine 3.14.1)',
-          'type':            'alpine',
-          'vulnerabilities': [
-            {
-              'cve':  'CVE-2021-42378',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the getvar_i function",
-              'diffID':        'sha256:5bfa694cc00ae6e2e670e35d19d7fb0c2ee9b90eb11d684e1b58980995df0528',
-              'fixedVersions': [
-                '1.33.1-r6'
-              ],
-              'installedVersion': '1.33.1-r3',
-              'packageName':      'busybox',
-              'purl':             'pkg:apk/alpine/busybox@1.33.1-r3?arch=aarch64&distro=3.14.1',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42378',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42378',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42378'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the getvar_i()'
-            },
-            {
-              'cve':  'CVE-2021-42379',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the next_input_file function",
-              'diffID':        'sha256:5bfa694cc00ae6e2e670e35d19d7fb0c2ee9b90eb11d684e1b58980995df0528',
-              'fixedVersions': [
-                '1.33.1-r6'
-              ],
-              'installedVersion': '1.33.1-r3',
-              'packageName':      'busybox',
-              'purl':             'pkg:apk/alpine/busybox@1.33.1-r3?arch=aarch64&distro=3.14.1',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42379',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42379',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42379'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the next_input_file()'
-            },
-            {
-              'cve':  'CVE-2021-42380',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the clrvar function",
-              'diffID':        'sha256:5bfa694cc00ae6e2e670e35d19d7fb0c2ee9b90eb11d684e1b58980995df0528',
-              'fixedVersions': [
-                '1.33.1-r6'
-              ],
-              'installedVersion': '1.33.1-r3',
-              'packageName':      'busybox',
-              'purl':             'pkg:apk/alpine/busybox@1.33.1-r3?arch=aarch64&distro=3.14.1',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42380',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42380',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42380'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the clrvar()'
-            },
-            {
-              'cve':  'CVE-2021-42381',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the hash_init function",
-              'diffID':        'sha256:5bfa694cc00ae6e2e670e35d19d7fb0c2ee9b90eb11d684e1b58980995df0528',
-              'fixedVersions': [
-                '1.33.1-r6'
-              ],
-              'installedVersion': '1.33.1-r3',
-              'packageName':      'busybox',
-              'purl':             'pkg:apk/alpine/busybox@1.33.1-r3?arch=aarch64&distro=3.14.1',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42381',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42381',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42381'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the hash_init()'
-            },
-            {
-              'cve':  'CVE-2021-42382',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the getvar_s function",
-              'diffID':        'sha256:5bfa694cc00ae6e2e670e35d19d7fb0c2ee9b90eb11d684e1b58980995df0528',
-              'fixedVersions': [
-                '1.33.1-r6'
-              ],
-              'installedVersion': '1.33.1-r3',
-              'packageName':      'busybox',
-              'purl':             'pkg:apk/alpine/busybox@1.33.1-r3?arch=aarch64&distro=3.14.1',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42382',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42382',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42382'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the getvar_s()'
-            },
-            {
-              'cve':  'CVE-2021-42383',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the evaluate function",
-              'diffID':        'sha256:5bfa694cc00ae6e2e670e35d19d7fb0c2ee9b90eb11d684e1b58980995df0528',
-              'fixedVersions': [
-                '1.33.1-r6'
-              ],
-              'installedVersion': '1.33.1-r3',
-              'packageName':      'busybox',
-              'purl':             'pkg:apk/alpine/busybox@1.33.1-r3?arch=aarch64&distro=3.14.1',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42383',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42383',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42383'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the evaluate()'
-            },
-            {
-              'cve':  'CVE-2021-42384',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the handle_special function",
-              'diffID':        'sha256:5bfa694cc00ae6e2e670e35d19d7fb0c2ee9b90eb11d684e1b58980995df0528',
-              'fixedVersions': [
-                '1.33.1-r6'
-              ],
-              'installedVersion': '1.33.1-r3',
-              'packageName':      'busybox',
-              'purl':             'pkg:apk/alpine/busybox@1.33.1-r3?arch=aarch64&distro=3.14.1',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42384',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42384',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42384'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the handle_special()'
-            },
-            {
-              'cve':  'CVE-2021-42385',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the evaluate function",
-              'diffID':        'sha256:5bfa694cc00ae6e2e670e35d19d7fb0c2ee9b90eb11d684e1b58980995df0528',
-              'fixedVersions': [
-                '1.33.1-r6'
-              ],
-              'installedVersion': '1.33.1-r3',
-              'packageName':      'busybox',
-              'purl':             'pkg:apk/alpine/busybox@1.33.1-r3?arch=aarch64&distro=3.14.1',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42385',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42385',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42385'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the evaluate()'
-            },
-            {
-              'cve':  'CVE-2021-42386',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the nvalloc function",
-              'diffID':        'sha256:5bfa694cc00ae6e2e670e35d19d7fb0c2ee9b90eb11d684e1b58980995df0528',
-              'fixedVersions': [
-                '1.33.1-r6'
-              ],
-              'installedVersion': '1.33.1-r3',
-              'packageName':      'busybox',
-              'purl':             'pkg:apk/alpine/busybox@1.33.1-r3?arch=aarch64&distro=3.14.1',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42386',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42386',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42386'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the nvalloc()'
-            },
-            {
-              'cve':  'CVE-2022-28391',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '8.8',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-88'
-              ],
-              'description':   "BusyBox through 1.35.0 allows remote attackers to execute arbitrary code if netstat is used to print a DNS PTR record's value to a VT compatible terminal. Alternatively, the attacker could choose to change the terminal's colors.",
-              'diffID':        'sha256:5bfa694cc00ae6e2e670e35d19d7fb0c2ee9b90eb11d684e1b58980995df0528',
-              'fixedVersions': [
-                '1.33.1-r7'
-              ],
-              'installedVersion': '1.33.1-r3',
-              'packageName':      'busybox',
-              'purl':             'pkg:apk/alpine/busybox@1.33.1-r3?arch=aarch64&distro=3.14.1',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2022-28391',
-                'https://git.alpinelinux.org/aports/plain/main/busybox/0001-libbb-sockaddr2str-ensure-only-printable-characters-.patch',
-                'https://git.alpinelinux.org/aports/plain/main/busybox/0002-nslookup-sanitize-all-printed-strings-with-printable.patch',
-                'https://gitlab.alpinelinux.org/alpine/aports/-/issues/13661',
-                'https://nvd.nist.gov/vuln/detail/CVE-2022-28391',
-                'https://www.cve.org/CVERecord?id=CVE-2022-28391'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: remote attackers may execute arbitrary code if netstat is used'
-            },
-            {
-              'cve':  'CVE-2021-42374',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '5.7',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-125'
-              ],
-              'description':   "An out-of-bounds heap read in Busybox's unlzma applet leads to information leak and denial of service when crafted LZMA-compressed input is decompressed. This can be triggered by any applet/format that",
-              'diffID':        'sha256:5bfa694cc00ae6e2e670e35d19d7fb0c2ee9b90eb11d684e1b58980995df0528',
-              'fixedVersions': [
-                '1.33.1-r4'
-              ],
-              'installedVersion': '1.33.1-r3',
-              'packageName':      'busybox',
-              'purl':             'pkg:apk/alpine/busybox@1.33.1-r3?arch=aarch64&distro=3.14.1',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42374',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42374',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42374'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'busybox: out-of-bounds read in unlzma applet leads to information leak and denial of service when crafted LZMA-compressed input is decompressed'
-            },
-            {
-              'cve':  'CVE-2021-42375',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.5',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '4.1',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-159'
-              ],
-              'description':   "An incorrect handling of a special element in Busybox's ash applet leads to denial of service when processing a crafted shell command, due to the shell mistaking specific characters for reserved characters. This may be used for DoS under rare conditions of filtered command input.",
-              'diffID':        'sha256:5bfa694cc00ae6e2e670e35d19d7fb0c2ee9b90eb11d684e1b58980995df0528',
-              'fixedVersions': [
-                '1.33.1-r5'
-              ],
-              'installedVersion': '1.33.1-r3',
-              'packageName':      'busybox',
-              'purl':             'pkg:apk/alpine/busybox@1.33.1-r3?arch=aarch64&distro=3.14.1',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42375',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42375',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42375'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'busybox: incorrect handling of a special element in ash applet leads to denial of service when processing a crafted shell command'
-            },
-            {
-              'cve':  'CVE-2021-3711',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '9.8',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'nvd': {
-                  'v3score':  '9.8',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '9.8',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-120'
-              ],
-              'description':   'In order to decrypt SM2 encrypted data an application is expected to call the API function EVP_PKEY_decrypt(). Typically an application will call this function twice. The first time, on entry, the "out" parameter can be NULL and, on exit, the "outlen" parameter is populated with the buffer size required to hold the decrypted plaintext. The application can then allocate a sufficiently sized buffer and call EVP_PKEY_decrypt() again, but this time passing a non-NULL value for the "out" parameter. A bug in the implementation of the SM2 decryption code means that the calculation of the buffer size required to hold the plaintext returned by the first call to EVP_PKEY_decrypt() can be smaller than the actual size required by the second call. This can lead to a buffer overflow when EVP_PKEY_decrypt() is called by the application a second time with a buffer that is too small. A malicious attacker who is able present SM2 content for decryption to an application could cause attacker chosen data to overflow the buffer by up to a maximum of 62 bytes altering the contents of other data held after the buffer, possibly changing application behaviour or causing the application to crash. The location of the buffer is application dependent but is typically heap allocated. Fixed in OpenSSL 1.1.1l (Affected 1.1.1-1.1.1k).',
-              'diffID':        'sha256:5bfa694cc00ae6e2e670e35d19d7fb0c2ee9b90eb11d684e1b58980995df0528',
-              'fixedVersions': [
-                '1.1.1l-r0'
-              ],
-              'installedVersion': '1.1.1k-r0',
-              'packageName':      'libcrypto1.1',
-              'purl':             'pkg:apk/alpine/libcrypto1.1@1.1.1k-r0?arch=aarch64&distro=3.14.1',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2021/08/26/2',
-                'https://access.redhat.com/security/cve/CVE-2021-3711',
-                'https://cert-portal.siemens.com/productcert/pdf/ssa-389290.pdf',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=59f5e75f3bced8fc0e130d72a3f582cf7b480b46',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=59f5e75f3bced8fc0e130d72a3f582cf7b480b46',
-                'https://lists.apache.org/thread.html/r18995de860f0e63635f3008fd2a6aca82394249476d21691e7c59c9e%40%3Cdev.tomcat.apache.org%3E',
-                'https://lists.apache.org/thread.html/r18995de860f0e63635f3008fd2a6aca82394249476d21691e7c59c9e@%3Cdev.tomcat.apache.org%3E',
-                'https://lists.apache.org/thread.html/rad5d9f83f0d11fb3f8bb148d179b8a9ad7c6a17f18d70e5805a713d1%40%3Cdev.tomcat.apache.org%3E',
-                'https://lists.apache.org/thread.html/rad5d9f83f0d11fb3f8bb148d179b8a9ad7c6a17f18d70e5805a713d1@%3Cdev.tomcat.apache.org%3E',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-3711',
-                'https://rustsec.org/advisories/RUSTSEC-2021-0097.html',
-                'https://security.gentoo.org/glsa/202209-02',
-                'https://security.gentoo.org/glsa/202210-02',
-                'https://security.netapp.com/advisory/ntap-20210827-0010',
-                'https://security.netapp.com/advisory/ntap-20210827-0010/',
-                'https://security.netapp.com/advisory/ntap-20211022-0003',
-                'https://security.netapp.com/advisory/ntap-20211022-0003/',
-                'https://security.netapp.com/advisory/ntap-20240621-0006',
-                'https://security.netapp.com/advisory/ntap-20240621-0006/',
-                'https://ubuntu.com/security/notices/USN-5051-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-3711',
-                'https://www.debian.org/security/2021/dsa-4963',
-                'https://www.openssl.org/news/secadv/20210824.txt',
-                'https://www.oracle.com/security-alerts/cpuapr2022.html',
-                'https://www.oracle.com/security-alerts/cpujan2022.html',
-                'https://www.oracle.com/security-alerts/cpuoct2021.html',
-                'https://www.tenable.com/security/tns-2021-16',
-                'https://www.tenable.com/security/tns-2022-02'
-              ],
-              'severity':   'CRITICAL',
-              'suppressed': false,
-              'title':      'openssl: SM2 Decryption Buffer Overflow'
-            },
-            {
-              'cve':  'CVE-2021-3712',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '7.4',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H'
-                },
-                'nvd': {
-                  'v3score':  '7.4',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.4',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-125'
-              ],
-              'description':   "ASN.1 strings are represented internally within OpenSSL as an ASN1_STRING structure which contains a buffer holding the string data and a field holding the buffer length. This contrasts with normal C strings which are repesented as a buffer for the string data which is terminated with a NUL (0) byte. Although not a strict requirement, ASN.1 strings that are parsed using OpenSSL's own \"d2i\" functions (and other similar parsing functions) as well as any string whose value has been set with the ASN1_STRING_set() function will additionally NUL terminate the byte array in the ASN1_STRING structure. However, it is possible for applications to directly construct valid ASN1_STRING structures which do not NUL terminate the byte array by directly setting the \"data\" and \"length\" fields in the ASN1_STRING array. This can also happen by using the ASN1_STRING_set0() function. Numerous OpenSSL functions that print ASN.1 data have been found to assume that the ASN1_STRING byte array will be NUL terminated, even though this is not guaranteed for strings that have been directly constructed. Where an application requests an ASN.1 structure to be printed, and where that ASN.1 structure contains ASN1_STRINGs that have been directly constructed by the application without NUL terminating the \"data\" field, then a read buffer overrun can occur. The same thing can also occur during name constraints processing of certificates (for example if a certificate has been directly constructed by the application instead of loading it via the OpenSSL parsing functions, and the certificate contains non NUL terminated ASN1_STRING structures). It can also occur in the X509_get1_email(), X509_REQ_get1_email() and X509_get1_ocsp() functions. If a malicious actor can cause an application to directly construct an ASN1_STRING and then process it through one of the affected OpenSSL functions then this issue could be hit. This might result in a crash (causing a Denial of Service attack). It could also result in the disclosure of private memory contents (such as private keys, or sensitive plaintext). Fixed in OpenSSL 1.1.1l (Affected 1.1.1-1.1.1k). Fixed in OpenSSL 1.0.2za (Affected 1.0.2-1.0.2y).",
-              'diffID':        'sha256:5bfa694cc00ae6e2e670e35d19d7fb0c2ee9b90eb11d684e1b58980995df0528',
-              'fixedVersions': [
-                '1.1.1l-r0'
-              ],
-              'installedVersion': '1.1.1k-r0',
-              'packageName':      'libcrypto1.1',
-              'purl':             'pkg:apk/alpine/libcrypto1.1@1.1.1k-r0?arch=aarch64&distro=3.14.1',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2021/08/26/2',
-                'https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2021-3712.json',
-                'https://access.redhat.com/security/cve/CVE-2021-3712',
-                'https://cert-portal.siemens.com/productcert/pdf/ssa-244969.pdf',
-                'https://cert-portal.siemens.com/productcert/pdf/ssa-389290.pdf',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=94d23fcff9b2a7a8368dfe52214d5c2569882c11',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=ccb0a11145ee72b042d10593a64eaf9e8a55ec12',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=94d23fcff9b2a7a8368dfe52214d5c2569882c11',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=ccb0a11145ee72b042d10593a64eaf9e8a55ec12',
-                'https://kc.mcafee.com/corporate/index?page=content&id=SB10366',
-                'https://linux.oracle.com/cve/CVE-2021-3712.html',
-                'https://linux.oracle.com/errata/ELSA-2022-9023.html',
-                'https://lists.apache.org/thread.html/r18995de860f0e63635f3008fd2a6aca82394249476d21691e7c59c9e%40%3Cdev.tomcat.apache.org%3E',
-                'https://lists.apache.org/thread.html/r18995de860f0e63635f3008fd2a6aca82394249476d21691e7c59c9e@%3Cdev.tomcat.apache.org%3E',
-                'https://lists.apache.org/thread.html/rad5d9f83f0d11fb3f8bb148d179b8a9ad7c6a17f18d70e5805a713d1%40%3Cdev.tomcat.apache.org%3E',
-                'https://lists.apache.org/thread.html/rad5d9f83f0d11fb3f8bb148d179b8a9ad7c6a17f18d70e5805a713d1@%3Cdev.tomcat.apache.org%3E',
-                'https://lists.debian.org/debian-lts-announce/2021/09/msg00014.html',
-                'https://lists.debian.org/debian-lts-announce/2021/09/msg00021.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-3712',
-                'https://rustsec.org/advisories/RUSTSEC-2021-0098.html',
-                'https://security.gentoo.org/glsa/202209-02',
-                'https://security.gentoo.org/glsa/202210-02',
-                'https://security.netapp.com/advisory/ntap-20210827-0010',
-                'https://security.netapp.com/advisory/ntap-20210827-0010/',
-                'https://security.netapp.com/advisory/ntap-20240621-0006',
-                'https://security.netapp.com/advisory/ntap-20240621-0006/',
-                'https://ubuntu.com/security/notices/USN-5051-1',
-                'https://ubuntu.com/security/notices/USN-5051-2',
-                'https://ubuntu.com/security/notices/USN-5051-3',
-                'https://ubuntu.com/security/notices/USN-5051-4 (regression only in trusty/esm)',
-                'https://ubuntu.com/security/notices/USN-5088-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-3712',
-                'https://www.debian.org/security/2021/dsa-4963',
-                'https://www.openssl.org/news/secadv/20210824.txt',
-                'https://www.oracle.com/security-alerts/cpuapr2022.html',
-                'https://www.oracle.com/security-alerts/cpujan2022.html',
-                'https://www.oracle.com/security-alerts/cpuoct2021.html',
-                'https://www.tenable.com/security/tns-2021-16',
-                'https://www.tenable.com/security/tns-2022-02'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: Read buffer overruns processing ASN.1 strings'
-            },
-            {
-              'cve':  'CVE-2022-0778',
-              'cvss': {
-                'bitnami': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'ghsa': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'nvd': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-835'
-              ],
-              'description':   'The BN_mod_sqrt() function, which computes a modular square root, contains a bug that can cause it to loop forever for non-prime moduli. Internally this function is used when parsing certificates that contain elliptic curve public keys in compressed form or explicit elliptic curve parameters with a base point encoded in compressed form. It is possible to trigger the infinite loop by crafting a certificate that has invalid explicit curve parameters. Since certificate parsing happens prior to verification of the certificate signature, any process that parses an externally supplied certificate may thus be subject to a denial of service attack. The infinite loop can also be reached when parsing crafted private keys as they can contain explicit elliptic curve parameters. Thus vulnerable situations include: - TLS clients consuming server certificates - TLS servers consuming client certificates - Hosting providers taking certificates or private keys from customers - Certificate authorities parsing certification requests from subscribers - Anything else which parses ASN.1 elliptic curve parameters Also any other applications that use the BN_mod_sqrt() where the attacker can control the parameter values are vulnerable to this DoS issue. In the OpenSSL 1.0.2 version the public key is not parsed during initial parsing of the certificate which makes it slightly harder to trigger the infinite loop. However any operation which requires the public key from the certificate will trigger the infinite loop. In particular the attacker can use a self-signed certificate to trigger the loop during verification of the certificate signature. This issue affects OpenSSL versions 1.0.2, 1.1.1 and 3.0. It was addressed in the releases of 1.1.1n and 3.0.2 on the 15th March 2022. Fixed in OpenSSL 3.0.2 (Affected 3.0.0,3.0.1). Fixed in OpenSSL 1.1.1n (Affected 1.1.1-1.1.1m). Fixed in OpenSSL 1.0.2zd (Affected 1.0.2-1.0.2zc).',
-              'diffID':        'sha256:5bfa694cc00ae6e2e670e35d19d7fb0c2ee9b90eb11d684e1b58980995df0528',
-              'fixedVersions': [
-                '1.1.1n-r0'
-              ],
-              'installedVersion': '1.1.1k-r0',
-              'packageName':      'libcrypto1.1',
-              'purl':             'pkg:apk/alpine/libcrypto1.1@1.1.1k-r0?arch=aarch64&distro=3.14.1',
-              'references':       [
-                'http://packetstormsecurity.com/files/167344/OpenSSL-1.0.2-1.1.1-3.0-BN_mod_sqrt-Infinite-Loop.html',
-                'http://seclists.org/fulldisclosure/2022/May/33',
-                'http://seclists.org/fulldisclosure/2022/May/35',
-                'http://seclists.org/fulldisclosure/2022/May/38',
-                'https://access.redhat.com/errata/RHSA-2022:5326',
-                'https://access.redhat.com/security/cve/CVE-2022-0778',
-                'https://bugzilla.redhat.com/2062202',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2062202',
-                'https://cert-portal.siemens.com/productcert/pdf/ssa-712929.pdf',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-0778',
-                'https://errata.almalinux.org/8/ALSA-2022-5326.html',
-                'https://errata.rockylinux.org/RLSA-2022:4899',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=3118eb64934499d93db3230748a452351d1d9a65',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=380085481c64de749a6dd25cdf0bcf4360b30f83',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=a466912611aa6cbdf550cd10601390e587451246',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=3118eb64934499d93db3230748a452351d1d9a65',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=380085481c64de749a6dd25cdf0bcf4360b30f83',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=a466912611aa6cbdf550cd10601390e587451246',
-                'https://linux.oracle.com/cve/CVE-2022-0778.html',
-                'https://linux.oracle.com/errata/ELSA-2022-9272.html',
-                'https://lists.debian.org/debian-lts-announce/2022/03/msg00023.html',
-                'https://lists.debian.org/debian-lts-announce/2022/03/msg00024.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/323SNN6ZX7PRJJWP2BUAFLPUAE42XWLZ',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/323SNN6ZX7PRJJWP2BUAFLPUAE42XWLZ/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GDB3GQVJPXJE7X5C5JN6JAA4XUDWD6E6',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GDB3GQVJPXJE7X5C5JN6JAA4XUDWD6E6/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/W6K3PR542DXWLEFFMFIDMME4CWMHJRMG',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/W6K3PR542DXWLEFFMFIDMME4CWMHJRMG/',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/323SNN6ZX7PRJJWP2BUAFLPUAE42XWLZ',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/GDB3GQVJPXJE7X5C5JN6JAA4XUDWD6E6',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/W6K3PR542DXWLEFFMFIDMME4CWMHJRMG',
-                'https://nvd.nist.gov/vuln/detail/CVE-2022-0778',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2022-0002',
-                'https://rustsec.org/advisories/RUSTSEC-2022-0014.html',
-                'https://security.gentoo.org/glsa/202210-02',
-                'https://security.netapp.com/advisory/ntap-20220321-0002',
-                'https://security.netapp.com/advisory/ntap-20220321-0002/',
-                'https://security.netapp.com/advisory/ntap-20220429-0005',
-                'https://security.netapp.com/advisory/ntap-20220429-0005/',
-                'https://security.netapp.com/advisory/ntap-20240621-0006',
-                'https://security.netapp.com/advisory/ntap-20240621-0006/',
-                'https://support.apple.com/kb/HT213255',
-                'https://support.apple.com/kb/HT213256',
-                'https://support.apple.com/kb/HT213257',
-                'https://ubuntu.com/security/notices/USN-5328-1',
-                'https://ubuntu.com/security/notices/USN-5328-2',
-                'https://ubuntu.com/security/notices/USN-6457-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2022-0778',
-                'https://www.debian.org/security/2022/dsa-5103',
-                'https://www.openssl.org/news/secadv/20220315.txt',
-                'https://www.oracle.com/security-alerts/cpuapr2022.html',
-                'https://www.oracle.com/security-alerts/cpujul2022.html',
-                'https://www.tenable.com/security/tns-2022-06',
-                'https://www.tenable.com/security/tns-2022-07',
-                'https://www.tenable.com/security/tns-2022-08',
-                'https://www.tenable.com/security/tns-2022-09'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: Infinite loop in BN_mod_sqrt() reachable when parsing certificates'
-            },
-            {
-              'cve':  'CVE-2022-4450',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'nvd': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-415'
-              ],
-              'description':   'The function PEM_read_bio_ex() reads a PEM file from a BIO and parses and\ndecodes the "name" (e.g. "CERTIFICATE"), any header data and the payload data.\nIf the function succeeds then the "name_out", "header" and "data" arguments are\npopulated with pointers to buffers containing the relevant decoded data. The\ncaller is responsible for freeing those buffers. It is possible to construct a\nPEM file that results in 0 bytes of payload data. In this case PEM_read_bio_ex()\nwill return a failure code but will populate the header argument with a pointer\nto a buffer that has already been freed. If the caller also frees this buffer\nthen a double free will occur. This will most likely lead to a crash. This\ncould be exploited by an attacker who has the ability to supply malicious PEM\nfiles for parsing to achieve a denial of service attack.\n\nThe functions PEM_read_bio() and PEM_read() are simple wrappers around\nPEM_read_bio_ex() and therefore these functions are also directly affected.\n\nThese functions are also called indirectly by a number of other OpenSSL\nfunctions including PEM_X509_INFO_read_bio_ex() and\nSSL_CTX_use_serverinfo_file() which are also vulnerable. Some OpenSSL internal\nuses of these functions are not vulnerable because the caller does not free the\nheader argument if PEM_read_bio_ex() returns a failure code. These locations\ninclude the PEM_read_bio_TYPE() functions as well as the decoders introduced in\nOpenSSL 3.0.\n\nThe OpenSSL asn1parse command line application is also impacted by this issue.',
-              'diffID':        'sha256:5bfa694cc00ae6e2e670e35d19d7fb0c2ee9b90eb11d684e1b58980995df0528',
-              'fixedVersions': [
-                '1.1.1t-r0'
-              ],
-              'installedVersion': '1.1.1k-r0',
-              'packageName':      'libcrypto1.1',
-              'purl':             'pkg:apk/alpine/libcrypto1.1@1.1.1k-r0?arch=aarch64&distro=3.14.1',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2023:2165',
-                'https://access.redhat.com/security/cve/CVE-2022-4450',
-                'https://bugzilla.redhat.com/1960321',
-                'https://bugzilla.redhat.com/2164440',
-                'https://bugzilla.redhat.com/2164487',
-                'https://bugzilla.redhat.com/2164492',
-                'https://bugzilla.redhat.com/2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144000',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144003',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144006',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144008',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144010',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144012',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144015',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144017',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144019',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2145170',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2158412',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164440',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164487',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164488',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164492',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164497',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164499',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164500',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4203',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4304',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4450',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0215',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0216',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0217',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0286',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0401',
-                'https://errata.almalinux.org/9/ALSA-2023-2165.html',
-                'https://errata.rockylinux.org/RLSA-2023:0946',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=63bcf189be73a9cc1264059bed6f57974be74a83',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=bbcf509bd046b34cca19c766bbddc31683d0858b',
-                'https://linux.oracle.com/cve/CVE-2022-4450.html',
-                'https://linux.oracle.com/errata/ELSA-2023-32791.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2022-4450',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0003',
-                'https://rustsec.org/advisories/RUSTSEC-2023-0010.html',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://ubuntu.com/security/notices/USN-5844-1',
-                'https://ubuntu.com/security/notices/USN-6564-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2022-4450',
-                'https://www.openssl.org/news/secadv/20230207.txt'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: double free after calling PEM_read_bio_ex'
-            },
-            {
-              'cve':  'CVE-2023-0215',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'nvd': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   'The public API function BIO_new_NDEF is a helper function used for streaming\nASN.1 data via a BIO. It is primarily used internally to OpenSSL to support the\nSMIME, CMS and PKCS7 streaming capabilities, but may also be called directly by\nend user applications.\n\nThe function receives a BIO from the caller, prepends a new BIO_f_asn1 filter\nBIO onto the front of it to form a BIO chain, and then returns the new head of\nthe BIO chain to the caller. Under certain conditions, for example if a CMS\nrecipient public key is invalid, the new filter BIO is freed and the function\nreturns a NULL result indicating a failure. However, in this case, the BIO chain\nis not properly cleaned up and the BIO passed by the caller still retains\ninternal pointers to the previously freed filter BIO. If the caller then goes on\nto call BIO_pop() on the BIO then a use-after-free will occur. This will most\nlikely result in a crash.\n\n\n\nThis scenario occurs directly in the internal function B64_write_ASN1() which\nmay cause BIO_new_NDEF() to be called and will subsequently call BIO_pop() on\nthe BIO. This internal function is in turn called by the public API functions\nPEM_write_bio_ASN1_stream, PEM_write_bio_CMS_stream, PEM_write_bio_PKCS7_stream,\nSMIME_write_ASN1, SMIME_write_CMS and SMIME_write_PKCS7.\n\nOther public API functions that may be impacted by this include\ni2d_ASN1_bio_stream, BIO_new_CMS, BIO_new_PKCS7, i2d_CMS_bio_stream and\ni2d_PKCS7_bio_stream.\n\nThe OpenSSL cms and smime command line applications are similarly affected.',
-              'diffID':        'sha256:5bfa694cc00ae6e2e670e35d19d7fb0c2ee9b90eb11d684e1b58980995df0528',
-              'fixedVersions': [
-                '1.1.1t-r0'
-              ],
-              'installedVersion': '1.1.1k-r0',
-              'packageName':      'libcrypto1.1',
-              'purl':             'pkg:apk/alpine/libcrypto1.1@1.1.1k-r0?arch=aarch64&distro=3.14.1',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2023:2165',
-                'https://access.redhat.com/security/cve/CVE-2023-0215',
-                'https://bugzilla.redhat.com/1960321',
-                'https://bugzilla.redhat.com/2164440',
-                'https://bugzilla.redhat.com/2164487',
-                'https://bugzilla.redhat.com/2164492',
-                'https://bugzilla.redhat.com/2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144000',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144003',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144006',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144008',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144010',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144012',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144015',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144017',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144019',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2145170',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2158412',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164440',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164487',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164488',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164492',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164497',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164499',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164500',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4203',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4304',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4450',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0215',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0216',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0217',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0286',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0401',
-                'https://errata.almalinux.org/9/ALSA-2023-2165.html',
-                'https://errata.rockylinux.org/RLSA-2023:0946',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=8818064ce3c3c0f1b740a5aaba2a987e75bfbafd',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=9816136fe31d92ace4037d5da5257f763aeeb4eb',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=c3829dd8825c654652201e16f8a0a0c46ee3f344',
-                'https://linux.oracle.com/cve/CVE-2023-0215.html',
-                'https://linux.oracle.com/errata/ELSA-2023-32791.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-0215',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0003',
-                'https://rustsec.org/advisories/RUSTSEC-2023-0009.html',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://security.netapp.com/advisory/ntap-20230427-0007',
-                'https://security.netapp.com/advisory/ntap-20230427-0007/',
-                'https://security.netapp.com/advisory/ntap-20230427-0009',
-                'https://security.netapp.com/advisory/ntap-20230427-0009/',
-                'https://security.netapp.com/advisory/ntap-20240621-0006',
-                'https://security.netapp.com/advisory/ntap-20240621-0006/',
-                'https://ubuntu.com/security/notices/USN-5844-1',
-                'https://ubuntu.com/security/notices/USN-5845-1',
-                'https://ubuntu.com/security/notices/USN-5845-2',
-                'https://ubuntu.com/security/notices/USN-6564-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-0215',
-                'https://www.openssl.org/news/secadv/20230207.txt'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: use-after-free following BIO_new_NDEF'
-            },
-            {
-              'cve':  'CVE-2023-0286',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '7.4',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H'
-                },
-                'nvd': {
-                  'v3score':  '7.4',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.4',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-843'
-              ],
-              'description':   'There is a type confusion vulnerability relating to X.400 address processing\ninside an X.509 GeneralName. X.400 addresses were parsed as an ASN1_STRING but\nthe public structure definition for GENERAL_NAME incorrectly specified the type\nof the x400Address field as ASN1_TYPE. This field is subsequently interpreted by\nthe OpenSSL function GENERAL_NAME_cmp as an ASN1_TYPE rather than an\nASN1_STRING.\n\nWhen CRL checking is enabled (i.e. the application sets the\nX509_V_FLAG_CRL_CHECK flag), this vulnerability may allow an attacker to pass\narbitrary pointers to a memcmp call, enabling them to read memory contents or\nenact a denial of service. In most cases, the attack requires the attacker to\nprovide both the certificate chain and CRL, neither of which need to have a\nvalid signature. If the attacker only controls one of these inputs, the other\ninput must already contain an X.400 address as a CRL distribution point, which\nis uncommon. As such, this vulnerability is most likely to only affect\napplications which have implemented their own functionality for retrieving CRLs\nover a network.',
-              'diffID':        'sha256:5bfa694cc00ae6e2e670e35d19d7fb0c2ee9b90eb11d684e1b58980995df0528',
-              'fixedVersions': [
-                '1.1.1t-r0'
-              ],
-              'installedVersion': '1.1.1k-r0',
-              'packageName':      'libcrypto1.1',
-              'purl':             'pkg:apk/alpine/libcrypto1.1@1.1.1k-r0?arch=aarch64&distro=3.14.1',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2025:7937',
-                'https://access.redhat.com/security/cve/CVE-2023-0286',
-                'https://access.redhat.com/security/cve/cve-2023-0286',
-                'https://bugzilla.redhat.com/2164440',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144000',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144003',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144006',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144008',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144010',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144012',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144015',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144017',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144019',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2145170',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2158412',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164440',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164487',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164488',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164492',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164497',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164499',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164500',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4203',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4304',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4450',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0215',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0216',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0217',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0286',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0401',
-                'https://errata.almalinux.org/9/ALSA-2025-7937.html',
-                'https://errata.rockylinux.org/RLSA-2023:0946',
-                'https://ftp.openbsd.org/pub/OpenBSD/LibreSSL/libressl-3.6.2-relnotes.txt',
-                'https://ftp.openbsd.org/pub/OpenBSD/patches/7.2/common/018_x509.patch.sig',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=2c6c9d439b484e1ba9830d8454a34fa4f80fdfe9',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=2f7530077e0ef79d98718138716bc51ca0cad658',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=fd2af07dc083a350c959147097003a14a5e8ac4d',
-                'https://github.com/pyca/cryptography',
-                'https://github.com/pyca/cryptography/security/advisories/GHSA-x4qr-2fvf-3mr5',
-                'https://linux.oracle.com/cve/CVE-2023-0286.html',
-                'https://linux.oracle.com/errata/ELSA-2025-7937.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-0286',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0003',
-                'https://rustsec.org/advisories/RUSTSEC-2023-0006.html',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://ubuntu.com/security/notices/USN-5844-1',
-                'https://ubuntu.com/security/notices/USN-5845-1',
-                'https://ubuntu.com/security/notices/USN-5845-2',
-                'https://ubuntu.com/security/notices/USN-6564-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-0286',
-                'https://www.openssl.org/news/secadv/20230207.txt'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: X.400 address type confusion in X.509 GeneralName'
-            },
-            {
-              'cve':  'CVE-2023-0464',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-295'
-              ],
-              'description':   "A security vulnerability has been identified in all supported versions\n\nof OpenSSL related to the verification of X.509 certificate chains\nthat include policy constraints.  Attackers may be able to exploit this\nvulnerability by creating a malicious certificate chain that triggers\nexponential use of computational resources, leading to a denial-of-service\n(DoS) attack on affected systems.\n\nPolicy processing is disabled by default but can be enabled by passing\nthe `-policy' argument to the command line utilities or by calling the\n`X509_VERIFY_PARAM_set1_policies()' function.",
-              'diffID':        'sha256:5bfa694cc00ae6e2e670e35d19d7fb0c2ee9b90eb11d684e1b58980995df0528',
-              'fixedVersions': [
-                '1.1.1t-r1'
-              ],
-              'installedVersion': '1.1.1k-r0',
-              'packageName':      'libcrypto1.1',
-              'purl':             'pkg:apk/alpine/libcrypto1.1@1.1.1k-r0?arch=aarch64&distro=3.14.1',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2023:3722',
-                'https://access.redhat.com/security/cve/CVE-2023-0464',
-                'https://bugzilla.redhat.com/2181082',
-                'https://bugzilla.redhat.com/2182561',
-                'https://bugzilla.redhat.com/2182565',
-                'https://bugzilla.redhat.com/2188461',
-                'https://bugzilla.redhat.com/2207947',
-                'https://errata.almalinux.org/9/ALSA-2023-3722.html',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=2017771e2db3e2b96f89bbe8766c3209f6a99545',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=2dcd4f1e3115f38cefa43e3efbe9b801c27e642e',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=879f7080d7e141f415c79eaa3a8ac4a3dad0348b',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=959c59c7a0164117e7f8366466a32bb1f8d77ff1',
-                'https://linux.oracle.com/cve/CVE-2023-0464.html',
-                'https://linux.oracle.com/errata/ELSA-2023-3722.html',
-                'https://lists.debian.org/debian-lts-announce/2023/06/msg00011.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-0464',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://security.netapp.com/advisory/ntap-20230406-0006/',
-                'https://security.netapp.com/advisory/ntap-20240621-0006/',
-                'https://ubuntu.com/security/notices/USN-6039-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.couchbase.com/alerts/',
-                'https://www.cve.org/CVERecord?id=CVE-2023-0464',
-                'https://www.debian.org/security/2023/dsa-5417',
-                'https://www.openssl.org/news/secadv/20230322.txt'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: Denial of service by excessive resource usage in verifying X509 policy constraints'
-            },
-            {
-              'cve':  'CVE-2022-2097',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N'
-                },
-                'nvd': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N'
-                },
-                'redhat': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-327'
-              ],
-              'description':   "AES OCB mode for 32-bit x86 platforms using the AES-NI assembly optimised implementation will not encrypt the entirety of the data under some circumstances. This could reveal sixteen bytes of data that was preexisting in the memory that wasn't written. In the special case of \"in place\" encryption, sixteen bytes of the plaintext would be revealed. Since OpenSSL does not support OCB based cipher suites for TLS and DTLS, they are both unaffected. Fixed in OpenSSL 3.0.5 (Affected 3.0.0-3.0.4). Fixed in OpenSSL 1.1.1q (Affected 1.1.1-1.1.1p).",
-              'diffID':        'sha256:5bfa694cc00ae6e2e670e35d19d7fb0c2ee9b90eb11d684e1b58980995df0528',
-              'fixedVersions': [
-                '1.1.1q-r0'
-              ],
-              'installedVersion': '1.1.1k-r0',
-              'packageName':      'libcrypto1.1',
-              'purl':             'pkg:apk/alpine/libcrypto1.1@1.1.1k-r0?arch=aarch64&distro=3.14.1',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2022:6224',
-                'https://access.redhat.com/security/cve/CVE-2022-2097',
-                'https://bugzilla.redhat.com/2081494',
-                'https://bugzilla.redhat.com/2087911',
-                'https://bugzilla.redhat.com/2087913',
-                'https://bugzilla.redhat.com/2097310',
-                'https://bugzilla.redhat.com/2104905',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2081494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2097310',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2100554',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2104905',
-                'https://cert-portal.siemens.com/productcert/pdf/ssa-332410.pdf',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-1292',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-2068',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-2097',
-                'https://errata.almalinux.org/9/ALSA-2022-6224.html',
-                'https://errata.rockylinux.org/RLSA-2022:5818',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=919925673d6c9cfed3c1085497f5dfbbed5fc431',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=a98f339ddd7e8f487d6e0088d4a9a42324885a93',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=919925673d6c9cfed3c1085497f5dfbbed5fc431',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=a98f339ddd7e8f487d6e0088d4a9a42324885a93',
-                'https://github.com/alexcrichton/openssl-src-rs',
-                'https://linux.oracle.com/cve/CVE-2022-2097.html',
-                'https://linux.oracle.com/errata/ELSA-2022-9955.html',
-                'https://lists.debian.org/debian-lts-announce/2023/02/msg00019.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/R6CK57NBQFTPUMXAPJURCGXUYT76NQAK',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/R6CK57NBQFTPUMXAPJURCGXUYT76NQAK/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/V6567JERRHHJW2GNGJGKDRNHR7SNPZK7',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/V6567JERRHHJW2GNGJGKDRNHR7SNPZK7/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VCMNWKERPBKOEBNL7CLTTX3ZZCZLH7XA',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VCMNWKERPBKOEBNL7CLTTX3ZZCZLH7XA/',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/R6CK57NBQFTPUMXAPJURCGXUYT76NQAK',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/R6CK57NBQFTPUMXAPJURCGXUYT76NQAK/',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/V6567JERRHHJW2GNGJGKDRNHR7SNPZK7',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/V6567JERRHHJW2GNGJGKDRNHR7SNPZK7/',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/VCMNWKERPBKOEBNL7CLTTX3ZZCZLH7XA',
-                'https://nvd.nist.gov/vuln/detail/CVE-2022-2097',
-                'https://rustsec.org/advisories/RUSTSEC-2022-0032.html',
-                'https://security.gentoo.org/glsa/202210-02',
-                'https://security.netapp.com/advisory/ntap-20220715-0011',
-                'https://security.netapp.com/advisory/ntap-20220715-0011/',
-                'https://security.netapp.com/advisory/ntap-20230420-0008',
-                'https://security.netapp.com/advisory/ntap-20230420-0008/',
-                'https://security.netapp.com/advisory/ntap-20240621-0006',
-                'https://security.netapp.com/advisory/ntap-20240621-0006/',
-                'https://ubuntu.com/security/notices/USN-5502-1',
-                'https://ubuntu.com/security/notices/USN-6457-1',
-                'https://www.cve.org/CVERecord?id=CVE-2022-2097',
-                'https://www.debian.org/security/2023/dsa-5343',
-                'https://www.openssl.org/news/secadv/20220705.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: AES OCB fails to encrypt some bytes'
-            },
-            {
-              'cve':  'CVE-2022-4304',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N'
-                },
-                'nvd': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N'
-                },
-                'redhat': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-203'
-              ],
-              'description':   'A timing based side channel exists in the OpenSSL RSA Decryption implementation\nwhich could be sufficient to recover a plaintext across a network in a\nBleichenbacher style attack. To achieve a successful decryption an attacker\nwould have to be able to send a very large number of trial messages for\ndecryption. The vulnerability affects all RSA padding modes: PKCS#1 v1.5,\nRSA-OEAP and RSASVE.\n\nFor example, in a TLS connection, RSA is commonly used by a client to send an\nencrypted pre-master secret to the server. An attacker that had observed a\ngenuine connection between a client and a server could use this flaw to send\ntrial messages to the server and record the time taken to process them. After a\nsufficiently large number of messages the attacker could recover the pre-master\nsecret used for the original connection and thus be able to decrypt the\napplication data sent over that connection.',
-              'diffID':        'sha256:5bfa694cc00ae6e2e670e35d19d7fb0c2ee9b90eb11d684e1b58980995df0528',
-              'fixedVersions': [
-                '1.1.1t-r0'
-              ],
-              'installedVersion': '1.1.1k-r0',
-              'packageName':      'libcrypto1.1',
-              'purl':             'pkg:apk/alpine/libcrypto1.1@1.1.1k-r0?arch=aarch64&distro=3.14.1',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2023:2165',
-                'https://access.redhat.com/security/cve/CVE-2022-4304',
-                'https://bugzilla.redhat.com/1960321',
-                'https://bugzilla.redhat.com/2164440',
-                'https://bugzilla.redhat.com/2164487',
-                'https://bugzilla.redhat.com/2164492',
-                'https://bugzilla.redhat.com/2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144000',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144003',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144006',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144008',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144010',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144012',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144015',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144017',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144019',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2145170',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2158412',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164440',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164487',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164488',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164492',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164497',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164499',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164500',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4203',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4304',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4450',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0215',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0216',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0217',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0286',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0401',
-                'https://errata.almalinux.org/9/ALSA-2023-2165.html',
-                'https://errata.rockylinux.org/RLSA-2023:0946',
-                'https://linux.oracle.com/cve/CVE-2022-4304.html',
-                'https://linux.oracle.com/errata/ELSA-2023-32791.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2022-4304',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0003',
-                'https://rustsec.org/advisories/RUSTSEC-2023-0007.html',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://ubuntu.com/security/notices/USN-5844-1',
-                'https://ubuntu.com/security/notices/USN-6564-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2022-4304',
-                'https://www.openssl.org/news/secadv/20230207.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: timing attack in RSA Decryption implementation'
-            },
-            {
-              'cve':  'CVE-2023-0465',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N'
-                },
-                'redhat': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-295'
-              ],
-              'description':   "Applications that use a non-default option when verifying certificates may be\nvulnerable to an attack from a malicious CA to circumvent certain checks.\n\nInvalid certificate policies in leaf certificates are silently ignored by\nOpenSSL and other certificate policy checks are skipped for that certificate.\nA malicious CA could use this to deliberately assert invalid certificate policies\nin order to circumvent policy checking on the certificate altogether.\n\nPolicy processing is disabled by default but can be enabled by passing\nthe `-policy' argument to the command line utilities or by calling the\n`X509_VERIFY_PARAM_set1_policies()' function.",
-              'diffID':        'sha256:5bfa694cc00ae6e2e670e35d19d7fb0c2ee9b90eb11d684e1b58980995df0528',
-              'fixedVersions': [
-                '1.1.1t-r2'
-              ],
-              'installedVersion': '1.1.1k-r0',
-              'packageName':      'libcrypto1.1',
-              'purl':             'pkg:apk/alpine/libcrypto1.1@1.1.1k-r0?arch=aarch64&distro=3.14.1',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2023:3722',
-                'https://access.redhat.com/security/cve/CVE-2023-0465',
-                'https://bugzilla.redhat.com/2181082',
-                'https://bugzilla.redhat.com/2182561',
-                'https://bugzilla.redhat.com/2182565',
-                'https://bugzilla.redhat.com/2188461',
-                'https://bugzilla.redhat.com/2207947',
-                'https://errata.almalinux.org/9/ALSA-2023-3722.html',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=10325176f3d3e98c6e2b3bf5ab1e3b334de6947a',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=1dd43e0709fece299b15208f36cc7c76209ba0bb',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=b013765abfa80036dc779dd0e50602c57bb3bf95',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=facfb1ab745646e97a1920977ae4a9965ea61d5c',
-                'https://linux.oracle.com/cve/CVE-2023-0465.html',
-                'https://linux.oracle.com/errata/ELSA-2023-3722.html',
-                'https://lists.debian.org/debian-lts-announce/2023/06/msg00011.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-0465',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://security.netapp.com/advisory/ntap-20230414-0001/',
-                'https://ubuntu.com/security/notices/USN-6039-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-0465',
-                'https://www.debian.org/security/2023/dsa-5417',
-                'https://www.openssl.org/news/secadv/20230328.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: Invalid certificate policies in leaf certificates are silently ignored'
-            },
-            {
-              'cve':  'CVE-2022-0778',
-              'cvss': {
-                'bitnami': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'ghsa': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'nvd': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-835'
-              ],
-              'description':   'The BN_mod_sqrt() function, which computes a modular square root, contains a bug that can cause it to loop forever for non-prime moduli. Internally this function is used when parsing certificates that contain elliptic curve public keys in compressed form or explicit elliptic curve parameters with a base point encoded in compressed form. It is possible to trigger the infinite loop by crafting a certificate that has invalid explicit curve parameters. Since certificate parsing happens prior to verification of the certificate signature, any process that parses an externally supplied certificate may thus be subject to a denial of service attack. The infinite loop can also be reached when parsing crafted private keys as they can contain explicit elliptic curve parameters. Thus vulnerable situations include: - TLS clients consuming server certificates - TLS servers consuming client certificates - Hosting providers taking certificates or private keys from customers - Certificate authorities parsing certification requests from subscribers - Anything else which parses ASN.1 elliptic curve parameters Also any other applications that use the BN_mod_sqrt() where the attacker can control the parameter values are vulnerable to this DoS issue. In the OpenSSL 1.0.2 version the public key is not parsed during initial parsing of the certificate which makes it slightly harder to trigger the infinite loop. However any operation which requires the public key from the certificate will trigger the infinite loop. In particular the attacker can use a self-signed certificate to trigger the loop during verification of the certificate signature. This issue affects OpenSSL versions 1.0.2, 1.1.1 and 3.0. It was addressed in the releases of 1.1.1n and 3.0.2 on the 15th March 2022. Fixed in OpenSSL 3.0.2 (Affected 3.0.0,3.0.1). Fixed in OpenSSL 1.1.1n (Affected 1.1.1-1.1.1m). Fixed in OpenSSL 1.0.2zd (Affected 1.0.2-1.0.2zc).',
-              'diffID':        'sha256:5bfa694cc00ae6e2e670e35d19d7fb0c2ee9b90eb11d684e1b58980995df0528',
-              'fixedVersions': [
-                '3.3.3p1-r3'
-              ],
-              'installedVersion': '3.3.3p1-r2',
-              'packageName':      'libretls',
-              'purl':             'pkg:apk/alpine/libretls@3.3.3p1-r2?arch=aarch64&distro=3.14.1',
-              'references':       [
-                'http://packetstormsecurity.com/files/167344/OpenSSL-1.0.2-1.1.1-3.0-BN_mod_sqrt-Infinite-Loop.html',
-                'http://seclists.org/fulldisclosure/2022/May/33',
-                'http://seclists.org/fulldisclosure/2022/May/35',
-                'http://seclists.org/fulldisclosure/2022/May/38',
-                'https://access.redhat.com/errata/RHSA-2022:5326',
-                'https://access.redhat.com/security/cve/CVE-2022-0778',
-                'https://bugzilla.redhat.com/2062202',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2062202',
-                'https://cert-portal.siemens.com/productcert/pdf/ssa-712929.pdf',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-0778',
-                'https://errata.almalinux.org/8/ALSA-2022-5326.html',
-                'https://errata.rockylinux.org/RLSA-2022:4899',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=3118eb64934499d93db3230748a452351d1d9a65',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=380085481c64de749a6dd25cdf0bcf4360b30f83',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=a466912611aa6cbdf550cd10601390e587451246',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=3118eb64934499d93db3230748a452351d1d9a65',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=380085481c64de749a6dd25cdf0bcf4360b30f83',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=a466912611aa6cbdf550cd10601390e587451246',
-                'https://linux.oracle.com/cve/CVE-2022-0778.html',
-                'https://linux.oracle.com/errata/ELSA-2022-9272.html',
-                'https://lists.debian.org/debian-lts-announce/2022/03/msg00023.html',
-                'https://lists.debian.org/debian-lts-announce/2022/03/msg00024.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/323SNN6ZX7PRJJWP2BUAFLPUAE42XWLZ',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/323SNN6ZX7PRJJWP2BUAFLPUAE42XWLZ/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GDB3GQVJPXJE7X5C5JN6JAA4XUDWD6E6',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GDB3GQVJPXJE7X5C5JN6JAA4XUDWD6E6/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/W6K3PR542DXWLEFFMFIDMME4CWMHJRMG',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/W6K3PR542DXWLEFFMFIDMME4CWMHJRMG/',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/323SNN6ZX7PRJJWP2BUAFLPUAE42XWLZ',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/GDB3GQVJPXJE7X5C5JN6JAA4XUDWD6E6',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/W6K3PR542DXWLEFFMFIDMME4CWMHJRMG',
-                'https://nvd.nist.gov/vuln/detail/CVE-2022-0778',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2022-0002',
-                'https://rustsec.org/advisories/RUSTSEC-2022-0014.html',
-                'https://security.gentoo.org/glsa/202210-02',
-                'https://security.netapp.com/advisory/ntap-20220321-0002',
-                'https://security.netapp.com/advisory/ntap-20220321-0002/',
-                'https://security.netapp.com/advisory/ntap-20220429-0005',
-                'https://security.netapp.com/advisory/ntap-20220429-0005/',
-                'https://security.netapp.com/advisory/ntap-20240621-0006',
-                'https://security.netapp.com/advisory/ntap-20240621-0006/',
-                'https://support.apple.com/kb/HT213255',
-                'https://support.apple.com/kb/HT213256',
-                'https://support.apple.com/kb/HT213257',
-                'https://ubuntu.com/security/notices/USN-5328-1',
-                'https://ubuntu.com/security/notices/USN-5328-2',
-                'https://ubuntu.com/security/notices/USN-6457-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2022-0778',
-                'https://www.debian.org/security/2022/dsa-5103',
-                'https://www.openssl.org/news/secadv/20220315.txt',
-                'https://www.oracle.com/security-alerts/cpuapr2022.html',
-                'https://www.oracle.com/security-alerts/cpujul2022.html',
-                'https://www.tenable.com/security/tns-2022-06',
-                'https://www.tenable.com/security/tns-2022-07',
-                'https://www.tenable.com/security/tns-2022-08',
-                'https://www.tenable.com/security/tns-2022-09'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: Infinite loop in BN_mod_sqrt() reachable when parsing certificates'
-            },
-            {
-              'cve':  'CVE-2021-3711',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '9.8',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'nvd': {
-                  'v3score':  '9.8',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '9.8',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-120'
-              ],
-              'description':   'In order to decrypt SM2 encrypted data an application is expected to call the API function EVP_PKEY_decrypt(). Typically an application will call this function twice. The first time, on entry, the "out" parameter can be NULL and, on exit, the "outlen" parameter is populated with the buffer size required to hold the decrypted plaintext. The application can then allocate a sufficiently sized buffer and call EVP_PKEY_decrypt() again, but this time passing a non-NULL value for the "out" parameter. A bug in the implementation of the SM2 decryption code means that the calculation of the buffer size required to hold the plaintext returned by the first call to EVP_PKEY_decrypt() can be smaller than the actual size required by the second call. This can lead to a buffer overflow when EVP_PKEY_decrypt() is called by the application a second time with a buffer that is too small. A malicious attacker who is able present SM2 content for decryption to an application could cause attacker chosen data to overflow the buffer by up to a maximum of 62 bytes altering the contents of other data held after the buffer, possibly changing application behaviour or causing the application to crash. The location of the buffer is application dependent but is typically heap allocated. Fixed in OpenSSL 1.1.1l (Affected 1.1.1-1.1.1k).',
-              'diffID':        'sha256:5bfa694cc00ae6e2e670e35d19d7fb0c2ee9b90eb11d684e1b58980995df0528',
-              'fixedVersions': [
-                '1.1.1l-r0'
-              ],
-              'installedVersion': '1.1.1k-r0',
-              'packageName':      'libssl1.1',
-              'purl':             'pkg:apk/alpine/libssl1.1@1.1.1k-r0?arch=aarch64&distro=3.14.1',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2021/08/26/2',
-                'https://access.redhat.com/security/cve/CVE-2021-3711',
-                'https://cert-portal.siemens.com/productcert/pdf/ssa-389290.pdf',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=59f5e75f3bced8fc0e130d72a3f582cf7b480b46',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=59f5e75f3bced8fc0e130d72a3f582cf7b480b46',
-                'https://lists.apache.org/thread.html/r18995de860f0e63635f3008fd2a6aca82394249476d21691e7c59c9e%40%3Cdev.tomcat.apache.org%3E',
-                'https://lists.apache.org/thread.html/r18995de860f0e63635f3008fd2a6aca82394249476d21691e7c59c9e@%3Cdev.tomcat.apache.org%3E',
-                'https://lists.apache.org/thread.html/rad5d9f83f0d11fb3f8bb148d179b8a9ad7c6a17f18d70e5805a713d1%40%3Cdev.tomcat.apache.org%3E',
-                'https://lists.apache.org/thread.html/rad5d9f83f0d11fb3f8bb148d179b8a9ad7c6a17f18d70e5805a713d1@%3Cdev.tomcat.apache.org%3E',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-3711',
-                'https://rustsec.org/advisories/RUSTSEC-2021-0097.html',
-                'https://security.gentoo.org/glsa/202209-02',
-                'https://security.gentoo.org/glsa/202210-02',
-                'https://security.netapp.com/advisory/ntap-20210827-0010',
-                'https://security.netapp.com/advisory/ntap-20210827-0010/',
-                'https://security.netapp.com/advisory/ntap-20211022-0003',
-                'https://security.netapp.com/advisory/ntap-20211022-0003/',
-                'https://security.netapp.com/advisory/ntap-20240621-0006',
-                'https://security.netapp.com/advisory/ntap-20240621-0006/',
-                'https://ubuntu.com/security/notices/USN-5051-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-3711',
-                'https://www.debian.org/security/2021/dsa-4963',
-                'https://www.openssl.org/news/secadv/20210824.txt',
-                'https://www.oracle.com/security-alerts/cpuapr2022.html',
-                'https://www.oracle.com/security-alerts/cpujan2022.html',
-                'https://www.oracle.com/security-alerts/cpuoct2021.html',
-                'https://www.tenable.com/security/tns-2021-16',
-                'https://www.tenable.com/security/tns-2022-02'
-              ],
-              'severity':   'CRITICAL',
-              'suppressed': false,
-              'title':      'openssl: SM2 Decryption Buffer Overflow'
-            },
-            {
-              'cve':  'CVE-2021-3712',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '7.4',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H'
-                },
-                'nvd': {
-                  'v3score':  '7.4',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.4',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-125'
-              ],
-              'description':   "ASN.1 strings are represented internally within OpenSSL as an ASN1_STRING structure which contains a buffer holding the string data and a field holding the buffer length. This contrasts with normal C strings which are repesented as a buffer for the string data which is terminated with a NUL (0) byte. Although not a strict requirement, ASN.1 strings that are parsed using OpenSSL's own \"d2i\" functions (and other similar parsing functions) as well as any string whose value has been set with the ASN1_STRING_set() function will additionally NUL terminate the byte array in the ASN1_STRING structure. However, it is possible for applications to directly construct valid ASN1_STRING structures which do not NUL terminate the byte array by directly setting the \"data\" and \"length\" fields in the ASN1_STRING array. This can also happen by using the ASN1_STRING_set0() function. Numerous OpenSSL functions that print ASN.1 data have been found to assume that the ASN1_STRING byte array will be NUL terminated, even though this is not guaranteed for strings that have been directly constructed. Where an application requests an ASN.1 structure to be printed, and where that ASN.1 structure contains ASN1_STRINGs that have been directly constructed by the application without NUL terminating the \"data\" field, then a read buffer overrun can occur. The same thing can also occur during name constraints processing of certificates (for example if a certificate has been directly constructed by the application instead of loading it via the OpenSSL parsing functions, and the certificate contains non NUL terminated ASN1_STRING structures). It can also occur in the X509_get1_email(), X509_REQ_get1_email() and X509_get1_ocsp() functions. If a malicious actor can cause an application to directly construct an ASN1_STRING and then process it through one of the affected OpenSSL functions then this issue could be hit. This might result in a crash (causing a Denial of Service attack). It could also result in the disclosure of private memory contents (such as private keys, or sensitive plaintext). Fixed in OpenSSL 1.1.1l (Affected 1.1.1-1.1.1k). Fixed in OpenSSL 1.0.2za (Affected 1.0.2-1.0.2y).",
-              'diffID':        'sha256:5bfa694cc00ae6e2e670e35d19d7fb0c2ee9b90eb11d684e1b58980995df0528',
-              'fixedVersions': [
-                '1.1.1l-r0'
-              ],
-              'installedVersion': '1.1.1k-r0',
-              'packageName':      'libssl1.1',
-              'purl':             'pkg:apk/alpine/libssl1.1@1.1.1k-r0?arch=aarch64&distro=3.14.1',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2021/08/26/2',
-                'https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2021-3712.json',
-                'https://access.redhat.com/security/cve/CVE-2021-3712',
-                'https://cert-portal.siemens.com/productcert/pdf/ssa-244969.pdf',
-                'https://cert-portal.siemens.com/productcert/pdf/ssa-389290.pdf',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=94d23fcff9b2a7a8368dfe52214d5c2569882c11',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=ccb0a11145ee72b042d10593a64eaf9e8a55ec12',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=94d23fcff9b2a7a8368dfe52214d5c2569882c11',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=ccb0a11145ee72b042d10593a64eaf9e8a55ec12',
-                'https://kc.mcafee.com/corporate/index?page=content&id=SB10366',
-                'https://linux.oracle.com/cve/CVE-2021-3712.html',
-                'https://linux.oracle.com/errata/ELSA-2022-9023.html',
-                'https://lists.apache.org/thread.html/r18995de860f0e63635f3008fd2a6aca82394249476d21691e7c59c9e%40%3Cdev.tomcat.apache.org%3E',
-                'https://lists.apache.org/thread.html/r18995de860f0e63635f3008fd2a6aca82394249476d21691e7c59c9e@%3Cdev.tomcat.apache.org%3E',
-                'https://lists.apache.org/thread.html/rad5d9f83f0d11fb3f8bb148d179b8a9ad7c6a17f18d70e5805a713d1%40%3Cdev.tomcat.apache.org%3E',
-                'https://lists.apache.org/thread.html/rad5d9f83f0d11fb3f8bb148d179b8a9ad7c6a17f18d70e5805a713d1@%3Cdev.tomcat.apache.org%3E',
-                'https://lists.debian.org/debian-lts-announce/2021/09/msg00014.html',
-                'https://lists.debian.org/debian-lts-announce/2021/09/msg00021.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-3712',
-                'https://rustsec.org/advisories/RUSTSEC-2021-0098.html',
-                'https://security.gentoo.org/glsa/202209-02',
-                'https://security.gentoo.org/glsa/202210-02',
-                'https://security.netapp.com/advisory/ntap-20210827-0010',
-                'https://security.netapp.com/advisory/ntap-20210827-0010/',
-                'https://security.netapp.com/advisory/ntap-20240621-0006',
-                'https://security.netapp.com/advisory/ntap-20240621-0006/',
-                'https://ubuntu.com/security/notices/USN-5051-1',
-                'https://ubuntu.com/security/notices/USN-5051-2',
-                'https://ubuntu.com/security/notices/USN-5051-3',
-                'https://ubuntu.com/security/notices/USN-5051-4 (regression only in trusty/esm)',
-                'https://ubuntu.com/security/notices/USN-5088-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-3712',
-                'https://www.debian.org/security/2021/dsa-4963',
-                'https://www.openssl.org/news/secadv/20210824.txt',
-                'https://www.oracle.com/security-alerts/cpuapr2022.html',
-                'https://www.oracle.com/security-alerts/cpujan2022.html',
-                'https://www.oracle.com/security-alerts/cpuoct2021.html',
-                'https://www.tenable.com/security/tns-2021-16',
-                'https://www.tenable.com/security/tns-2022-02'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: Read buffer overruns processing ASN.1 strings'
-            },
-            {
-              'cve':  'CVE-2022-0778',
-              'cvss': {
-                'bitnami': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'ghsa': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'nvd': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-835'
-              ],
-              'description':   'The BN_mod_sqrt() function, which computes a modular square root, contains a bug that can cause it to loop forever for non-prime moduli. Internally this function is used when parsing certificates that contain elliptic curve public keys in compressed form or explicit elliptic curve parameters with a base point encoded in compressed form. It is possible to trigger the infinite loop by crafting a certificate that has invalid explicit curve parameters. Since certificate parsing happens prior to verification of the certificate signature, any process that parses an externally supplied certificate may thus be subject to a denial of service attack. The infinite loop can also be reached when parsing crafted private keys as they can contain explicit elliptic curve parameters. Thus vulnerable situations include: - TLS clients consuming server certificates - TLS servers consuming client certificates - Hosting providers taking certificates or private keys from customers - Certificate authorities parsing certification requests from subscribers - Anything else which parses ASN.1 elliptic curve parameters Also any other applications that use the BN_mod_sqrt() where the attacker can control the parameter values are vulnerable to this DoS issue. In the OpenSSL 1.0.2 version the public key is not parsed during initial parsing of the certificate which makes it slightly harder to trigger the infinite loop. However any operation which requires the public key from the certificate will trigger the infinite loop. In particular the attacker can use a self-signed certificate to trigger the loop during verification of the certificate signature. This issue affects OpenSSL versions 1.0.2, 1.1.1 and 3.0. It was addressed in the releases of 1.1.1n and 3.0.2 on the 15th March 2022. Fixed in OpenSSL 3.0.2 (Affected 3.0.0,3.0.1). Fixed in OpenSSL 1.1.1n (Affected 1.1.1-1.1.1m). Fixed in OpenSSL 1.0.2zd (Affected 1.0.2-1.0.2zc).',
-              'diffID':        'sha256:5bfa694cc00ae6e2e670e35d19d7fb0c2ee9b90eb11d684e1b58980995df0528',
-              'fixedVersions': [
-                '1.1.1n-r0'
-              ],
-              'installedVersion': '1.1.1k-r0',
-              'packageName':      'libssl1.1',
-              'purl':             'pkg:apk/alpine/libssl1.1@1.1.1k-r0?arch=aarch64&distro=3.14.1',
-              'references':       [
-                'http://packetstormsecurity.com/files/167344/OpenSSL-1.0.2-1.1.1-3.0-BN_mod_sqrt-Infinite-Loop.html',
-                'http://seclists.org/fulldisclosure/2022/May/33',
-                'http://seclists.org/fulldisclosure/2022/May/35',
-                'http://seclists.org/fulldisclosure/2022/May/38',
-                'https://access.redhat.com/errata/RHSA-2022:5326',
-                'https://access.redhat.com/security/cve/CVE-2022-0778',
-                'https://bugzilla.redhat.com/2062202',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2062202',
-                'https://cert-portal.siemens.com/productcert/pdf/ssa-712929.pdf',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-0778',
-                'https://errata.almalinux.org/8/ALSA-2022-5326.html',
-                'https://errata.rockylinux.org/RLSA-2022:4899',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=3118eb64934499d93db3230748a452351d1d9a65',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=380085481c64de749a6dd25cdf0bcf4360b30f83',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=a466912611aa6cbdf550cd10601390e587451246',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=3118eb64934499d93db3230748a452351d1d9a65',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=380085481c64de749a6dd25cdf0bcf4360b30f83',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=a466912611aa6cbdf550cd10601390e587451246',
-                'https://linux.oracle.com/cve/CVE-2022-0778.html',
-                'https://linux.oracle.com/errata/ELSA-2022-9272.html',
-                'https://lists.debian.org/debian-lts-announce/2022/03/msg00023.html',
-                'https://lists.debian.org/debian-lts-announce/2022/03/msg00024.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/323SNN6ZX7PRJJWP2BUAFLPUAE42XWLZ',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/323SNN6ZX7PRJJWP2BUAFLPUAE42XWLZ/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GDB3GQVJPXJE7X5C5JN6JAA4XUDWD6E6',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GDB3GQVJPXJE7X5C5JN6JAA4XUDWD6E6/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/W6K3PR542DXWLEFFMFIDMME4CWMHJRMG',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/W6K3PR542DXWLEFFMFIDMME4CWMHJRMG/',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/323SNN6ZX7PRJJWP2BUAFLPUAE42XWLZ',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/GDB3GQVJPXJE7X5C5JN6JAA4XUDWD6E6',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/W6K3PR542DXWLEFFMFIDMME4CWMHJRMG',
-                'https://nvd.nist.gov/vuln/detail/CVE-2022-0778',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2022-0002',
-                'https://rustsec.org/advisories/RUSTSEC-2022-0014.html',
-                'https://security.gentoo.org/glsa/202210-02',
-                'https://security.netapp.com/advisory/ntap-20220321-0002',
-                'https://security.netapp.com/advisory/ntap-20220321-0002/',
-                'https://security.netapp.com/advisory/ntap-20220429-0005',
-                'https://security.netapp.com/advisory/ntap-20220429-0005/',
-                'https://security.netapp.com/advisory/ntap-20240621-0006',
-                'https://security.netapp.com/advisory/ntap-20240621-0006/',
-                'https://support.apple.com/kb/HT213255',
-                'https://support.apple.com/kb/HT213256',
-                'https://support.apple.com/kb/HT213257',
-                'https://ubuntu.com/security/notices/USN-5328-1',
-                'https://ubuntu.com/security/notices/USN-5328-2',
-                'https://ubuntu.com/security/notices/USN-6457-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2022-0778',
-                'https://www.debian.org/security/2022/dsa-5103',
-                'https://www.openssl.org/news/secadv/20220315.txt',
-                'https://www.oracle.com/security-alerts/cpuapr2022.html',
-                'https://www.oracle.com/security-alerts/cpujul2022.html',
-                'https://www.tenable.com/security/tns-2022-06',
-                'https://www.tenable.com/security/tns-2022-07',
-                'https://www.tenable.com/security/tns-2022-08',
-                'https://www.tenable.com/security/tns-2022-09'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: Infinite loop in BN_mod_sqrt() reachable when parsing certificates'
-            },
-            {
-              'cve':  'CVE-2022-4450',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'nvd': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-415'
-              ],
-              'description':   'The function PEM_read_bio_ex() reads a PEM file from a BIO and parses and\ndecodes the "name" (e.g. "CERTIFICATE"), any header data and the payload data.\nIf the function succeeds then the "name_out", "header" and "data" arguments are\npopulated with pointers to buffers containing the relevant decoded data. The\ncaller is responsible for freeing those buffers. It is possible to construct a\nPEM file that results in 0 bytes of payload data. In this case PEM_read_bio_ex()\nwill return a failure code but will populate the header argument with a pointer\nto a buffer that has already been freed. If the caller also frees this buffer\nthen a double free will occur. This will most likely lead to a crash. This\ncould be exploited by an attacker who has the ability to supply malicious PEM\nfiles for parsing to achieve a denial of service attack.\n\nThe functions PEM_read_bio() and PEM_read() are simple wrappers around\nPEM_read_bio_ex() and therefore these functions are also directly affected.\n\nThese functions are also called indirectly by a number of other OpenSSL\nfunctions including PEM_X509_INFO_read_bio_ex() and\nSSL_CTX_use_serverinfo_file() which are also vulnerable. Some OpenSSL internal\nuses of these functions are not vulnerable because the caller does not free the\nheader argument if PEM_read_bio_ex() returns a failure code. These locations\ninclude the PEM_read_bio_TYPE() functions as well as the decoders introduced in\nOpenSSL 3.0.\n\nThe OpenSSL asn1parse command line application is also impacted by this issue.',
-              'diffID':        'sha256:5bfa694cc00ae6e2e670e35d19d7fb0c2ee9b90eb11d684e1b58980995df0528',
-              'fixedVersions': [
-                '1.1.1t-r0'
-              ],
-              'installedVersion': '1.1.1k-r0',
-              'packageName':      'libssl1.1',
-              'purl':             'pkg:apk/alpine/libssl1.1@1.1.1k-r0?arch=aarch64&distro=3.14.1',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2023:2165',
-                'https://access.redhat.com/security/cve/CVE-2022-4450',
-                'https://bugzilla.redhat.com/1960321',
-                'https://bugzilla.redhat.com/2164440',
-                'https://bugzilla.redhat.com/2164487',
-                'https://bugzilla.redhat.com/2164492',
-                'https://bugzilla.redhat.com/2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144000',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144003',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144006',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144008',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144010',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144012',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144015',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144017',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144019',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2145170',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2158412',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164440',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164487',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164488',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164492',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164497',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164499',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164500',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4203',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4304',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4450',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0215',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0216',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0217',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0286',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0401',
-                'https://errata.almalinux.org/9/ALSA-2023-2165.html',
-                'https://errata.rockylinux.org/RLSA-2023:0946',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=63bcf189be73a9cc1264059bed6f57974be74a83',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=bbcf509bd046b34cca19c766bbddc31683d0858b',
-                'https://linux.oracle.com/cve/CVE-2022-4450.html',
-                'https://linux.oracle.com/errata/ELSA-2023-32791.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2022-4450',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0003',
-                'https://rustsec.org/advisories/RUSTSEC-2023-0010.html',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://ubuntu.com/security/notices/USN-5844-1',
-                'https://ubuntu.com/security/notices/USN-6564-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2022-4450',
-                'https://www.openssl.org/news/secadv/20230207.txt'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: double free after calling PEM_read_bio_ex'
-            },
-            {
-              'cve':  'CVE-2023-0215',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'nvd': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   'The public API function BIO_new_NDEF is a helper function used for streaming\nASN.1 data via a BIO. It is primarily used internally to OpenSSL to support the\nSMIME, CMS and PKCS7 streaming capabilities, but may also be called directly by\nend user applications.\n\nThe function receives a BIO from the caller, prepends a new BIO_f_asn1 filter\nBIO onto the front of it to form a BIO chain, and then returns the new head of\nthe BIO chain to the caller. Under certain conditions, for example if a CMS\nrecipient public key is invalid, the new filter BIO is freed and the function\nreturns a NULL result indicating a failure. However, in this case, the BIO chain\nis not properly cleaned up and the BIO passed by the caller still retains\ninternal pointers to the previously freed filter BIO. If the caller then goes on\nto call BIO_pop() on the BIO then a use-after-free will occur. This will most\nlikely result in a crash.\n\n\n\nThis scenario occurs directly in the internal function B64_write_ASN1() which\nmay cause BIO_new_NDEF() to be called and will subsequently call BIO_pop() on\nthe BIO. This internal function is in turn called by the public API functions\nPEM_write_bio_ASN1_stream, PEM_write_bio_CMS_stream, PEM_write_bio_PKCS7_stream,\nSMIME_write_ASN1, SMIME_write_CMS and SMIME_write_PKCS7.\n\nOther public API functions that may be impacted by this include\ni2d_ASN1_bio_stream, BIO_new_CMS, BIO_new_PKCS7, i2d_CMS_bio_stream and\ni2d_PKCS7_bio_stream.\n\nThe OpenSSL cms and smime command line applications are similarly affected.',
-              'diffID':        'sha256:5bfa694cc00ae6e2e670e35d19d7fb0c2ee9b90eb11d684e1b58980995df0528',
-              'fixedVersions': [
-                '1.1.1t-r0'
-              ],
-              'installedVersion': '1.1.1k-r0',
-              'packageName':      'libssl1.1',
-              'purl':             'pkg:apk/alpine/libssl1.1@1.1.1k-r0?arch=aarch64&distro=3.14.1',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2023:2165',
-                'https://access.redhat.com/security/cve/CVE-2023-0215',
-                'https://bugzilla.redhat.com/1960321',
-                'https://bugzilla.redhat.com/2164440',
-                'https://bugzilla.redhat.com/2164487',
-                'https://bugzilla.redhat.com/2164492',
-                'https://bugzilla.redhat.com/2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144000',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144003',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144006',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144008',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144010',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144012',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144015',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144017',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144019',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2145170',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2158412',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164440',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164487',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164488',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164492',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164497',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164499',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164500',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4203',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4304',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4450',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0215',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0216',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0217',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0286',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0401',
-                'https://errata.almalinux.org/9/ALSA-2023-2165.html',
-                'https://errata.rockylinux.org/RLSA-2023:0946',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=8818064ce3c3c0f1b740a5aaba2a987e75bfbafd',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=9816136fe31d92ace4037d5da5257f763aeeb4eb',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=c3829dd8825c654652201e16f8a0a0c46ee3f344',
-                'https://linux.oracle.com/cve/CVE-2023-0215.html',
-                'https://linux.oracle.com/errata/ELSA-2023-32791.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-0215',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0003',
-                'https://rustsec.org/advisories/RUSTSEC-2023-0009.html',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://security.netapp.com/advisory/ntap-20230427-0007',
-                'https://security.netapp.com/advisory/ntap-20230427-0007/',
-                'https://security.netapp.com/advisory/ntap-20230427-0009',
-                'https://security.netapp.com/advisory/ntap-20230427-0009/',
-                'https://security.netapp.com/advisory/ntap-20240621-0006',
-                'https://security.netapp.com/advisory/ntap-20240621-0006/',
-                'https://ubuntu.com/security/notices/USN-5844-1',
-                'https://ubuntu.com/security/notices/USN-5845-1',
-                'https://ubuntu.com/security/notices/USN-5845-2',
-                'https://ubuntu.com/security/notices/USN-6564-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-0215',
-                'https://www.openssl.org/news/secadv/20230207.txt'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: use-after-free following BIO_new_NDEF'
-            },
-            {
-              'cve':  'CVE-2023-0286',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '7.4',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H'
-                },
-                'nvd': {
-                  'v3score':  '7.4',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.4',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-843'
-              ],
-              'description':   'There is a type confusion vulnerability relating to X.400 address processing\ninside an X.509 GeneralName. X.400 addresses were parsed as an ASN1_STRING but\nthe public structure definition for GENERAL_NAME incorrectly specified the type\nof the x400Address field as ASN1_TYPE. This field is subsequently interpreted by\nthe OpenSSL function GENERAL_NAME_cmp as an ASN1_TYPE rather than an\nASN1_STRING.\n\nWhen CRL checking is enabled (i.e. the application sets the\nX509_V_FLAG_CRL_CHECK flag), this vulnerability may allow an attacker to pass\narbitrary pointers to a memcmp call, enabling them to read memory contents or\nenact a denial of service. In most cases, the attack requires the attacker to\nprovide both the certificate chain and CRL, neither of which need to have a\nvalid signature. If the attacker only controls one of these inputs, the other\ninput must already contain an X.400 address as a CRL distribution point, which\nis uncommon. As such, this vulnerability is most likely to only affect\napplications which have implemented their own functionality for retrieving CRLs\nover a network.',
-              'diffID':        'sha256:5bfa694cc00ae6e2e670e35d19d7fb0c2ee9b90eb11d684e1b58980995df0528',
-              'fixedVersions': [
-                '1.1.1t-r0'
-              ],
-              'installedVersion': '1.1.1k-r0',
-              'packageName':      'libssl1.1',
-              'purl':             'pkg:apk/alpine/libssl1.1@1.1.1k-r0?arch=aarch64&distro=3.14.1',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2025:7937',
-                'https://access.redhat.com/security/cve/CVE-2023-0286',
-                'https://access.redhat.com/security/cve/cve-2023-0286',
-                'https://bugzilla.redhat.com/2164440',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144000',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144003',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144006',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144008',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144010',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144012',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144015',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144017',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144019',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2145170',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2158412',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164440',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164487',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164488',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164492',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164497',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164499',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164500',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4203',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4304',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4450',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0215',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0216',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0217',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0286',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0401',
-                'https://errata.almalinux.org/9/ALSA-2025-7937.html',
-                'https://errata.rockylinux.org/RLSA-2023:0946',
-                'https://ftp.openbsd.org/pub/OpenBSD/LibreSSL/libressl-3.6.2-relnotes.txt',
-                'https://ftp.openbsd.org/pub/OpenBSD/patches/7.2/common/018_x509.patch.sig',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=2c6c9d439b484e1ba9830d8454a34fa4f80fdfe9',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=2f7530077e0ef79d98718138716bc51ca0cad658',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=fd2af07dc083a350c959147097003a14a5e8ac4d',
-                'https://github.com/pyca/cryptography',
-                'https://github.com/pyca/cryptography/security/advisories/GHSA-x4qr-2fvf-3mr5',
-                'https://linux.oracle.com/cve/CVE-2023-0286.html',
-                'https://linux.oracle.com/errata/ELSA-2025-7937.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-0286',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0003',
-                'https://rustsec.org/advisories/RUSTSEC-2023-0006.html',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://ubuntu.com/security/notices/USN-5844-1',
-                'https://ubuntu.com/security/notices/USN-5845-1',
-                'https://ubuntu.com/security/notices/USN-5845-2',
-                'https://ubuntu.com/security/notices/USN-6564-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-0286',
-                'https://www.openssl.org/news/secadv/20230207.txt'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: X.400 address type confusion in X.509 GeneralName'
-            },
-            {
-              'cve':  'CVE-2023-0464',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-295'
-              ],
-              'description':   "A security vulnerability has been identified in all supported versions\n\nof OpenSSL related to the verification of X.509 certificate chains\nthat include policy constraints.  Attackers may be able to exploit this\nvulnerability by creating a malicious certificate chain that triggers\nexponential use of computational resources, leading to a denial-of-service\n(DoS) attack on affected systems.\n\nPolicy processing is disabled by default but can be enabled by passing\nthe `-policy' argument to the command line utilities or by calling the\n`X509_VERIFY_PARAM_set1_policies()' function.",
-              'diffID':        'sha256:5bfa694cc00ae6e2e670e35d19d7fb0c2ee9b90eb11d684e1b58980995df0528',
-              'fixedVersions': [
-                '1.1.1t-r1'
-              ],
-              'installedVersion': '1.1.1k-r0',
-              'packageName':      'libssl1.1',
-              'purl':             'pkg:apk/alpine/libssl1.1@1.1.1k-r0?arch=aarch64&distro=3.14.1',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2023:3722',
-                'https://access.redhat.com/security/cve/CVE-2023-0464',
-                'https://bugzilla.redhat.com/2181082',
-                'https://bugzilla.redhat.com/2182561',
-                'https://bugzilla.redhat.com/2182565',
-                'https://bugzilla.redhat.com/2188461',
-                'https://bugzilla.redhat.com/2207947',
-                'https://errata.almalinux.org/9/ALSA-2023-3722.html',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=2017771e2db3e2b96f89bbe8766c3209f6a99545',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=2dcd4f1e3115f38cefa43e3efbe9b801c27e642e',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=879f7080d7e141f415c79eaa3a8ac4a3dad0348b',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=959c59c7a0164117e7f8366466a32bb1f8d77ff1',
-                'https://linux.oracle.com/cve/CVE-2023-0464.html',
-                'https://linux.oracle.com/errata/ELSA-2023-3722.html',
-                'https://lists.debian.org/debian-lts-announce/2023/06/msg00011.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-0464',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://security.netapp.com/advisory/ntap-20230406-0006/',
-                'https://security.netapp.com/advisory/ntap-20240621-0006/',
-                'https://ubuntu.com/security/notices/USN-6039-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.couchbase.com/alerts/',
-                'https://www.cve.org/CVERecord?id=CVE-2023-0464',
-                'https://www.debian.org/security/2023/dsa-5417',
-                'https://www.openssl.org/news/secadv/20230322.txt'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: Denial of service by excessive resource usage in verifying X509 policy constraints'
-            },
-            {
-              'cve':  'CVE-2022-2097',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N'
-                },
-                'nvd': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N'
-                },
-                'redhat': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-327'
-              ],
-              'description':   "AES OCB mode for 32-bit x86 platforms using the AES-NI assembly optimised implementation will not encrypt the entirety of the data under some circumstances. This could reveal sixteen bytes of data that was preexisting in the memory that wasn't written. In the special case of \"in place\" encryption, sixteen bytes of the plaintext would be revealed. Since OpenSSL does not support OCB based cipher suites for TLS and DTLS, they are both unaffected. Fixed in OpenSSL 3.0.5 (Affected 3.0.0-3.0.4). Fixed in OpenSSL 1.1.1q (Affected 1.1.1-1.1.1p).",
-              'diffID':        'sha256:5bfa694cc00ae6e2e670e35d19d7fb0c2ee9b90eb11d684e1b58980995df0528',
-              'fixedVersions': [
-                '1.1.1q-r0'
-              ],
-              'installedVersion': '1.1.1k-r0',
-              'packageName':      'libssl1.1',
-              'purl':             'pkg:apk/alpine/libssl1.1@1.1.1k-r0?arch=aarch64&distro=3.14.1',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2022:6224',
-                'https://access.redhat.com/security/cve/CVE-2022-2097',
-                'https://bugzilla.redhat.com/2081494',
-                'https://bugzilla.redhat.com/2087911',
-                'https://bugzilla.redhat.com/2087913',
-                'https://bugzilla.redhat.com/2097310',
-                'https://bugzilla.redhat.com/2104905',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2081494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2097310',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2100554',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2104905',
-                'https://cert-portal.siemens.com/productcert/pdf/ssa-332410.pdf',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-1292',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-2068',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-2097',
-                'https://errata.almalinux.org/9/ALSA-2022-6224.html',
-                'https://errata.rockylinux.org/RLSA-2022:5818',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=919925673d6c9cfed3c1085497f5dfbbed5fc431',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=a98f339ddd7e8f487d6e0088d4a9a42324885a93',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=919925673d6c9cfed3c1085497f5dfbbed5fc431',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=a98f339ddd7e8f487d6e0088d4a9a42324885a93',
-                'https://github.com/alexcrichton/openssl-src-rs',
-                'https://linux.oracle.com/cve/CVE-2022-2097.html',
-                'https://linux.oracle.com/errata/ELSA-2022-9955.html',
-                'https://lists.debian.org/debian-lts-announce/2023/02/msg00019.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/R6CK57NBQFTPUMXAPJURCGXUYT76NQAK',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/R6CK57NBQFTPUMXAPJURCGXUYT76NQAK/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/V6567JERRHHJW2GNGJGKDRNHR7SNPZK7',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/V6567JERRHHJW2GNGJGKDRNHR7SNPZK7/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VCMNWKERPBKOEBNL7CLTTX3ZZCZLH7XA',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VCMNWKERPBKOEBNL7CLTTX3ZZCZLH7XA/',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/R6CK57NBQFTPUMXAPJURCGXUYT76NQAK',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/R6CK57NBQFTPUMXAPJURCGXUYT76NQAK/',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/V6567JERRHHJW2GNGJGKDRNHR7SNPZK7',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/V6567JERRHHJW2GNGJGKDRNHR7SNPZK7/',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/VCMNWKERPBKOEBNL7CLTTX3ZZCZLH7XA',
-                'https://nvd.nist.gov/vuln/detail/CVE-2022-2097',
-                'https://rustsec.org/advisories/RUSTSEC-2022-0032.html',
-                'https://security.gentoo.org/glsa/202210-02',
-                'https://security.netapp.com/advisory/ntap-20220715-0011',
-                'https://security.netapp.com/advisory/ntap-20220715-0011/',
-                'https://security.netapp.com/advisory/ntap-20230420-0008',
-                'https://security.netapp.com/advisory/ntap-20230420-0008/',
-                'https://security.netapp.com/advisory/ntap-20240621-0006',
-                'https://security.netapp.com/advisory/ntap-20240621-0006/',
-                'https://ubuntu.com/security/notices/USN-5502-1',
-                'https://ubuntu.com/security/notices/USN-6457-1',
-                'https://www.cve.org/CVERecord?id=CVE-2022-2097',
-                'https://www.debian.org/security/2023/dsa-5343',
-                'https://www.openssl.org/news/secadv/20220705.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: AES OCB fails to encrypt some bytes'
-            },
-            {
-              'cve':  'CVE-2022-4304',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N'
-                },
-                'nvd': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N'
-                },
-                'redhat': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-203'
-              ],
-              'description':   'A timing based side channel exists in the OpenSSL RSA Decryption implementation\nwhich could be sufficient to recover a plaintext across a network in a\nBleichenbacher style attack. To achieve a successful decryption an attacker\nwould have to be able to send a very large number of trial messages for\ndecryption. The vulnerability affects all RSA padding modes: PKCS#1 v1.5,\nRSA-OEAP and RSASVE.\n\nFor example, in a TLS connection, RSA is commonly used by a client to send an\nencrypted pre-master secret to the server. An attacker that had observed a\ngenuine connection between a client and a server could use this flaw to send\ntrial messages to the server and record the time taken to process them. After a\nsufficiently large number of messages the attacker could recover the pre-master\nsecret used for the original connection and thus be able to decrypt the\napplication data sent over that connection.',
-              'diffID':        'sha256:5bfa694cc00ae6e2e670e35d19d7fb0c2ee9b90eb11d684e1b58980995df0528',
-              'fixedVersions': [
-                '1.1.1t-r0'
-              ],
-              'installedVersion': '1.1.1k-r0',
-              'packageName':      'libssl1.1',
-              'purl':             'pkg:apk/alpine/libssl1.1@1.1.1k-r0?arch=aarch64&distro=3.14.1',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2023:2165',
-                'https://access.redhat.com/security/cve/CVE-2022-4304',
-                'https://bugzilla.redhat.com/1960321',
-                'https://bugzilla.redhat.com/2164440',
-                'https://bugzilla.redhat.com/2164487',
-                'https://bugzilla.redhat.com/2164492',
-                'https://bugzilla.redhat.com/2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144000',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144003',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144006',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144008',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144010',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144012',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144015',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144017',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144019',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2145170',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2158412',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164440',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164487',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164488',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164492',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164497',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164499',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164500',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4203',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4304',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4450',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0215',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0216',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0217',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0286',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0401',
-                'https://errata.almalinux.org/9/ALSA-2023-2165.html',
-                'https://errata.rockylinux.org/RLSA-2023:0946',
-                'https://linux.oracle.com/cve/CVE-2022-4304.html',
-                'https://linux.oracle.com/errata/ELSA-2023-32791.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2022-4304',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0003',
-                'https://rustsec.org/advisories/RUSTSEC-2023-0007.html',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://ubuntu.com/security/notices/USN-5844-1',
-                'https://ubuntu.com/security/notices/USN-6564-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2022-4304',
-                'https://www.openssl.org/news/secadv/20230207.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: timing attack in RSA Decryption implementation'
-            },
-            {
-              'cve':  'CVE-2023-0465',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N'
-                },
-                'redhat': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-295'
-              ],
-              'description':   "Applications that use a non-default option when verifying certificates may be\nvulnerable to an attack from a malicious CA to circumvent certain checks.\n\nInvalid certificate policies in leaf certificates are silently ignored by\nOpenSSL and other certificate policy checks are skipped for that certificate.\nA malicious CA could use this to deliberately assert invalid certificate policies\nin order to circumvent policy checking on the certificate altogether.\n\nPolicy processing is disabled by default but can be enabled by passing\nthe `-policy' argument to the command line utilities or by calling the\n`X509_VERIFY_PARAM_set1_policies()' function.",
-              'diffID':        'sha256:5bfa694cc00ae6e2e670e35d19d7fb0c2ee9b90eb11d684e1b58980995df0528',
-              'fixedVersions': [
-                '1.1.1t-r2'
-              ],
-              'installedVersion': '1.1.1k-r0',
-              'packageName':      'libssl1.1',
-              'purl':             'pkg:apk/alpine/libssl1.1@1.1.1k-r0?arch=aarch64&distro=3.14.1',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2023:3722',
-                'https://access.redhat.com/security/cve/CVE-2023-0465',
-                'https://bugzilla.redhat.com/2181082',
-                'https://bugzilla.redhat.com/2182561',
-                'https://bugzilla.redhat.com/2182565',
-                'https://bugzilla.redhat.com/2188461',
-                'https://bugzilla.redhat.com/2207947',
-                'https://errata.almalinux.org/9/ALSA-2023-3722.html',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=10325176f3d3e98c6e2b3bf5ab1e3b334de6947a',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=1dd43e0709fece299b15208f36cc7c76209ba0bb',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=b013765abfa80036dc779dd0e50602c57bb3bf95',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=facfb1ab745646e97a1920977ae4a9965ea61d5c',
-                'https://linux.oracle.com/cve/CVE-2023-0465.html',
-                'https://linux.oracle.com/errata/ELSA-2023-3722.html',
-                'https://lists.debian.org/debian-lts-announce/2023/06/msg00011.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-0465',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://security.netapp.com/advisory/ntap-20230414-0001/',
-                'https://ubuntu.com/security/notices/USN-6039-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-0465',
-                'https://www.debian.org/security/2023/dsa-5417',
-                'https://www.openssl.org/news/secadv/20230328.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: Invalid certificate policies in leaf certificates are silently ignored'
-            },
-            {
-              'cve':  'CVE-2021-42378',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the getvar_i function",
-              'diffID':        'sha256:5bfa694cc00ae6e2e670e35d19d7fb0c2ee9b90eb11d684e1b58980995df0528',
-              'fixedVersions': [
-                '1.33.1-r6'
-              ],
-              'installedVersion': '1.33.1-r3',
-              'packageName':      'ssl_client',
-              'purl':             'pkg:apk/alpine/ssl_client@1.33.1-r3?arch=aarch64&distro=3.14.1',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42378',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42378',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42378'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the getvar_i()'
-            },
-            {
-              'cve':  'CVE-2021-42379',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the next_input_file function",
-              'diffID':        'sha256:5bfa694cc00ae6e2e670e35d19d7fb0c2ee9b90eb11d684e1b58980995df0528',
-              'fixedVersions': [
-                '1.33.1-r6'
-              ],
-              'installedVersion': '1.33.1-r3',
-              'packageName':      'ssl_client',
-              'purl':             'pkg:apk/alpine/ssl_client@1.33.1-r3?arch=aarch64&distro=3.14.1',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42379',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42379',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42379'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the next_input_file()'
-            },
-            {
-              'cve':  'CVE-2021-42380',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the clrvar function",
-              'diffID':        'sha256:5bfa694cc00ae6e2e670e35d19d7fb0c2ee9b90eb11d684e1b58980995df0528',
-              'fixedVersions': [
-                '1.33.1-r6'
-              ],
-              'installedVersion': '1.33.1-r3',
-              'packageName':      'ssl_client',
-              'purl':             'pkg:apk/alpine/ssl_client@1.33.1-r3?arch=aarch64&distro=3.14.1',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42380',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42380',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42380'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the clrvar()'
-            },
-            {
-              'cve':  'CVE-2021-42381',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the hash_init function",
-              'diffID':        'sha256:5bfa694cc00ae6e2e670e35d19d7fb0c2ee9b90eb11d684e1b58980995df0528',
-              'fixedVersions': [
-                '1.33.1-r6'
-              ],
-              'installedVersion': '1.33.1-r3',
-              'packageName':      'ssl_client',
-              'purl':             'pkg:apk/alpine/ssl_client@1.33.1-r3?arch=aarch64&distro=3.14.1',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42381',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42381',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42381'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the hash_init()'
-            },
-            {
-              'cve':  'CVE-2021-42382',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the getvar_s function",
-              'diffID':        'sha256:5bfa694cc00ae6e2e670e35d19d7fb0c2ee9b90eb11d684e1b58980995df0528',
-              'fixedVersions': [
-                '1.33.1-r6'
-              ],
-              'installedVersion': '1.33.1-r3',
-              'packageName':      'ssl_client',
-              'purl':             'pkg:apk/alpine/ssl_client@1.33.1-r3?arch=aarch64&distro=3.14.1',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42382',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42382',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42382'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the getvar_s()'
-            },
-            {
-              'cve':  'CVE-2021-42383',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the evaluate function",
-              'diffID':        'sha256:5bfa694cc00ae6e2e670e35d19d7fb0c2ee9b90eb11d684e1b58980995df0528',
-              'fixedVersions': [
-                '1.33.1-r6'
-              ],
-              'installedVersion': '1.33.1-r3',
-              'packageName':      'ssl_client',
-              'purl':             'pkg:apk/alpine/ssl_client@1.33.1-r3?arch=aarch64&distro=3.14.1',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42383',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42383',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42383'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the evaluate()'
-            },
-            {
-              'cve':  'CVE-2021-42384',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the handle_special function",
-              'diffID':        'sha256:5bfa694cc00ae6e2e670e35d19d7fb0c2ee9b90eb11d684e1b58980995df0528',
-              'fixedVersions': [
-                '1.33.1-r6'
-              ],
-              'installedVersion': '1.33.1-r3',
-              'packageName':      'ssl_client',
-              'purl':             'pkg:apk/alpine/ssl_client@1.33.1-r3?arch=aarch64&distro=3.14.1',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42384',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42384',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42384'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the handle_special()'
-            },
-            {
-              'cve':  'CVE-2021-42385',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the evaluate function",
-              'diffID':        'sha256:5bfa694cc00ae6e2e670e35d19d7fb0c2ee9b90eb11d684e1b58980995df0528',
-              'fixedVersions': [
-                '1.33.1-r6'
-              ],
-              'installedVersion': '1.33.1-r3',
-              'packageName':      'ssl_client',
-              'purl':             'pkg:apk/alpine/ssl_client@1.33.1-r3?arch=aarch64&distro=3.14.1',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42385',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42385',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42385'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the evaluate()'
-            },
-            {
-              'cve':  'CVE-2021-42386',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the nvalloc function",
-              'diffID':        'sha256:5bfa694cc00ae6e2e670e35d19d7fb0c2ee9b90eb11d684e1b58980995df0528',
-              'fixedVersions': [
-                '1.33.1-r6'
-              ],
-              'installedVersion': '1.33.1-r3',
-              'packageName':      'ssl_client',
-              'purl':             'pkg:apk/alpine/ssl_client@1.33.1-r3?arch=aarch64&distro=3.14.1',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42386',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42386',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42386'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the nvalloc()'
-            },
-            {
-              'cve':  'CVE-2022-28391',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '8.8',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-88'
-              ],
-              'description':   "BusyBox through 1.35.0 allows remote attackers to execute arbitrary code if netstat is used to print a DNS PTR record's value to a VT compatible terminal. Alternatively, the attacker could choose to change the terminal's colors.",
-              'diffID':        'sha256:5bfa694cc00ae6e2e670e35d19d7fb0c2ee9b90eb11d684e1b58980995df0528',
-              'fixedVersions': [
-                '1.33.1-r7'
-              ],
-              'installedVersion': '1.33.1-r3',
-              'packageName':      'ssl_client',
-              'purl':             'pkg:apk/alpine/ssl_client@1.33.1-r3?arch=aarch64&distro=3.14.1',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2022-28391',
-                'https://git.alpinelinux.org/aports/plain/main/busybox/0001-libbb-sockaddr2str-ensure-only-printable-characters-.patch',
-                'https://git.alpinelinux.org/aports/plain/main/busybox/0002-nslookup-sanitize-all-printed-strings-with-printable.patch',
-                'https://gitlab.alpinelinux.org/alpine/aports/-/issues/13661',
-                'https://nvd.nist.gov/vuln/detail/CVE-2022-28391',
-                'https://www.cve.org/CVERecord?id=CVE-2022-28391'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: remote attackers may execute arbitrary code if netstat is used'
-            },
-            {
-              'cve':  'CVE-2021-42374',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '5.7',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-125'
-              ],
-              'description':   "An out-of-bounds heap read in Busybox's unlzma applet leads to information leak and denial of service when crafted LZMA-compressed input is decompressed. This can be triggered by any applet/format that",
-              'diffID':        'sha256:5bfa694cc00ae6e2e670e35d19d7fb0c2ee9b90eb11d684e1b58980995df0528',
-              'fixedVersions': [
-                '1.33.1-r4'
-              ],
-              'installedVersion': '1.33.1-r3',
-              'packageName':      'ssl_client',
-              'purl':             'pkg:apk/alpine/ssl_client@1.33.1-r3?arch=aarch64&distro=3.14.1',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42374',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42374',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42374'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'busybox: out-of-bounds read in unlzma applet leads to information leak and denial of service when crafted LZMA-compressed input is decompressed'
-            },
-            {
-              'cve':  'CVE-2021-42375',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.5',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '4.1',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-159'
-              ],
-              'description':   "An incorrect handling of a special element in Busybox's ash applet leads to denial of service when processing a crafted shell command, due to the shell mistaking specific characters for reserved characters. This may be used for DoS under rare conditions of filtered command input.",
-              'diffID':        'sha256:5bfa694cc00ae6e2e670e35d19d7fb0c2ee9b90eb11d684e1b58980995df0528',
-              'fixedVersions': [
-                '1.33.1-r5'
-              ],
-              'installedVersion': '1.33.1-r3',
-              'packageName':      'ssl_client',
-              'purl':             'pkg:apk/alpine/ssl_client@1.33.1-r3?arch=aarch64&distro=3.14.1',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42375',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42375',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42375'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'busybox: incorrect handling of a special element in ash applet leads to denial of service when processing a crafted shell command'
-            },
-            {
-              'cve':  'CVE-2022-37434',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '9.8',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-787',
-                'CWE-120'
-              ],
-              'description':   'zlib through 1.2.12 has a heap-based buffer over-read or buffer overflow in inflate in inflate.c via a large gzip header extra field. NOTE: only applications that call inflateGetHeader are affected. Some common applications bundle the affected zlib source code but may be unable to call inflateGetHeader (e.g., see the nodejs/node reference).',
-              'diffID':        'sha256:5bfa694cc00ae6e2e670e35d19d7fb0c2ee9b90eb11d684e1b58980995df0528',
-              'fixedVersions': [
-                '1.2.12-r2'
-              ],
-              'installedVersion': '1.2.11-r3',
-              'packageName':      'zlib',
-              'purl':             'pkg:apk/alpine/zlib@1.2.11-r3?arch=aarch64&distro=3.14.1',
-              'references':       [
-                'http://seclists.org/fulldisclosure/2022/Oct/37',
-                'http://seclists.org/fulldisclosure/2022/Oct/38',
-                'http://seclists.org/fulldisclosure/2022/Oct/41',
-                'http://seclists.org/fulldisclosure/2022/Oct/42',
-                'http://www.openwall.com/lists/oss-security/2022/08/05/2',
-                'http://www.openwall.com/lists/oss-security/2022/08/09/1',
-                'https://access.redhat.com/errata/RHSA-2022:8291',
-                'https://access.redhat.com/security/cve/CVE-2022-37434',
-                'https://bugzilla.redhat.com/2116639',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2053198',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2077431',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2081296',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2116639',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-37434',
-                'https://errata.almalinux.org/9/ALSA-2022-8291.html',
-                'https://errata.rockylinux.org/RLSA-2022:8291',
-                'https://github.com/curl/curl/issues/9271',
-                'https://github.com/ivd38/zlib_overflow',
-                'https://github.com/madler/zlib/blob/21767c654d31d2dccdde4330529775c6c5fd5389/zlib.h#L1062-L1063',
-                'https://github.com/madler/zlib/commit/1eb7682f845ac9e9bf9ae35bbfb3bad5dacbd91d',
-                'https://github.com/madler/zlib/commit/eff308af425b67093bab25f80f1ae950166bece1',
-                'https://github.com/nodejs/node/blob/75b68c6e4db515f76df73af476eccf382bbcb00a/deps/zlib/inflate.c#L762-L764',
-                'https://linux.oracle.com/cve/CVE-2022-37434.html',
-                'https://linux.oracle.com/errata/ELSA-2023-1095.html',
-                'https://lists.debian.org/debian-lts-announce/2022/09/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JWN4VE3JQR4O2SOUS5TXNLANRPMHWV4I/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NMBOJ77A7T7PQCARMDUK75TE6LLESZ3O/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PAVPQNCG3XRLCLNSQRM3KAN5ZFMVXVTY/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/X5U7OTKZSHY2I3ZFJSR2SHFHW72RKGDK/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YRQAI7H4M4RQZ2IWZUEEXECBE5D56BH2/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2022-37434',
-                'https://security.netapp.com/advisory/ntap-20220901-0005/',
-                'https://security.netapp.com/advisory/ntap-20230427-0007/',
-                'https://support.apple.com/kb/HT213488',
-                'https://support.apple.com/kb/HT213489',
-                'https://support.apple.com/kb/HT213490',
-                'https://support.apple.com/kb/HT213491',
-                'https://support.apple.com/kb/HT213493',
-                'https://support.apple.com/kb/HT213494',
-                'https://ubuntu.com/security/notices/USN-5570-1',
-                'https://ubuntu.com/security/notices/USN-5570-2',
-                'https://ubuntu.com/security/notices/USN-5573-1',
-                'https://ubuntu.com/security/notices/USN-6736-1',
-                'https://ubuntu.com/security/notices/USN-6736-2',
-                'https://www.cve.org/CVERecord?id=CVE-2022-37434',
-                'https://www.debian.org/security/2022/dsa-5218'
-              ],
-              'severity':   'CRITICAL',
-              'suppressed': false,
-              'title':      'zlib: heap-based buffer over-read and overflow in inflate() in inflate.c via a large gzip header extra field'
-            },
-            {
-              'cve':  'CVE-2018-25032',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'nvd': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '8.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-787'
-              ],
-              'description':   'zlib before 1.2.12 allows memory corruption when deflating (i.e., when compressing) if the input has many distant matches.',
-              'diffID':        'sha256:5bfa694cc00ae6e2e670e35d19d7fb0c2ee9b90eb11d684e1b58980995df0528',
-              'fixedVersions': [
-                '1.2.12-r0'
-              ],
-              'installedVersion': '1.2.11-r3',
-              'packageName':      'zlib',
-              'purl':             'pkg:apk/alpine/zlib@1.2.11-r3?arch=aarch64&distro=3.14.1',
-              'references':       [
-                'http://seclists.org/fulldisclosure/2022/May/33',
-                'http://seclists.org/fulldisclosure/2022/May/35',
-                'http://seclists.org/fulldisclosure/2022/May/38',
-                'http://www.openwall.com/lists/oss-security/2022/03/25/2',
-                'http://www.openwall.com/lists/oss-security/2022/03/26/1',
-                'https://access.redhat.com/errata/RHSA-2022:8420',
-                'https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-25032.json',
-                'https://access.redhat.com/security/cve/CVE-2018-25032',
-                'https://bugzilla.redhat.com/2067945',
-                'https://cert-portal.siemens.com/productcert/pdf/ssa-333517.pdf',
-                'https://errata.almalinux.org/9/ALSA-2022-8420.html',
-                'https://github.com/advisories/GHSA-jc36-42cf-vqwj',
-                'https://github.com/madler/zlib/commit/5c44459c3b28a9bd3283aaceab7c615f8020c531',
-                'https://github.com/madler/zlib/compare/v1.2.11...v1.2.12',
-                'https://github.com/madler/zlib/issues/605',
-                'https://github.com/rubysec/ruby-advisory-db/blob/master/gems/nokogiri/CVE-2018-25032.yml',
-                'https://github.com/sparklemotion/nokogiri/releases/tag/v1.13.4',
-                'https://github.com/sparklemotion/nokogiri/security/advisories/GHSA-v6gp-9mmm-c6p5',
-                'https://groups.google.com/g/ruby-security-ann/c/vX7qSjsvWis/m/TJWN4oOKBwAJ',
-                'https://linux.oracle.com/cve/CVE-2018-25032.html',
-                'https://linux.oracle.com/errata/ELSA-2022-9565.html',
-                'https://lists.debian.org/debian-lts-announce/2022/04/msg00000.html',
-                'https://lists.debian.org/debian-lts-announce/2022/05/msg00008.html',
-                'https://lists.debian.org/debian-lts-announce/2022/09/msg00023.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DCZFIJBJTZ7CL5QXBFKTQ22Q26VINRUF/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DF62MVMH3QUGMBDCB3DY2ERQ6EBHTADB/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JZZPTWRYQULAOL3AW7RZJNVZ2UONXCV4/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NS2D2GFPFGOJUL4WQ3DUAY7HF4VWQ77F/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VOKNP2L734AEL47NRYGVZIKEFOUBQY5Y/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/XOKFMSNQ5D5WGMALBNBXU3GE442V74WU/',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/DCZFIJBJTZ7CL5QXBFKTQ22Q26VINRUF',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/DCZFIJBJTZ7CL5QXBFKTQ22Q26VINRUF/',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/DF62MVMH3QUGMBDCB3DY2ERQ6EBHTADB',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/DF62MVMH3QUGMBDCB3DY2ERQ6EBHTADB/',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/JZZPTWRYQULAOL3AW7RZJNVZ2UONXCV4',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/JZZPTWRYQULAOL3AW7RZJNVZ2UONXCV4/',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/NS2D2GFPFGOJUL4WQ3DUAY7HF4VWQ77F',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/NS2D2GFPFGOJUL4WQ3DUAY7HF4VWQ77F/',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/VOKNP2L734AEL47NRYGVZIKEFOUBQY5Y',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/VOKNP2L734AEL47NRYGVZIKEFOUBQY5Y/',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/XOKFMSNQ5D5WGMALBNBXU3GE442V74WU',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/XOKFMSNQ5D5WGMALBNBXU3GE442V74WU/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2018-25032',
-                'https://security.gentoo.org/glsa/202210-42',
-                'https://security.netapp.com/advisory/ntap-20220526-0009',
-                'https://security.netapp.com/advisory/ntap-20220526-0009/',
-                'https://security.netapp.com/advisory/ntap-20220729-0004',
-                'https://security.netapp.com/advisory/ntap-20220729-0004/',
-                'https://support.apple.com/kb/HT213255',
-                'https://support.apple.com/kb/HT213256',
-                'https://support.apple.com/kb/HT213257',
-                'https://ubuntu.com/security/notices/USN-5355-1',
-                'https://ubuntu.com/security/notices/USN-5355-2',
-                'https://ubuntu.com/security/notices/USN-5359-1',
-                'https://ubuntu.com/security/notices/USN-5359-2',
-                'https://ubuntu.com/security/notices/USN-5739-1',
-                'https://ubuntu.com/security/notices/USN-6736-1',
-                'https://ubuntu.com/security/notices/USN-6736-2',
-                'https://www.cve.org/CVERecord?id=CVE-2018-25032',
-                'https://www.debian.org/security/2022/dsa-5111',
-                'https://www.openwall.com/lists/oss-security/2022/03/24/1',
-                'https://www.openwall.com/lists/oss-security/2022/03/28/1',
-                'https://www.openwall.com/lists/oss-security/2022/03/28/3',
-                'https://www.oracle.com/security-alerts/cpujul2022.html'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'zlib: A flaw found in zlib when compressing (not decompressing) certain inputs'
-            }
-          ]
-        }
-      ],
-      'summary': {
-        'critical':   3,
-        'high':       34,
-        'low':        0,
-        'medium':     10,
-        'suppressed': 0,
-        'unknown':    0
-      }
-    }
-  },
-  {
-    'id':    'default/1af1c7062793c11f61974fe772cde08a50d0f949dc8f433b526c55f3fe81d0e2',
-    'type':  'storage.sbomscanner.kubewarden.io.vulnerabilityreport',
-    'links': {
-      'patch':  'https://localhost:8005/v1/storage.sbomscanner.kubewarden.io.vulnerabilityreports/default/1af1c7062793c11f61974fe772cde08a50d0f949dc8f433b526c55f3fe81d0e2',
-      'remove': 'https://localhost:8005/v1/storage.sbomscanner.kubewarden.io.vulnerabilityreports/default/1af1c7062793c11f61974fe772cde08a50d0f949dc8f433b526c55f3fe81d0e2',
-      'self':   'https://localhost:8005/v1/storage.sbomscanner.kubewarden.io.vulnerabilityreports/default/1af1c7062793c11f61974fe772cde08a50d0f949dc8f433b526c55f3fe81d0e2',
-      'update': 'https://localhost:8005/v1/storage.sbomscanner.kubewarden.io.vulnerabilityreports/default/1af1c7062793c11f61974fe772cde08a50d0f949dc8f433b526c55f3fe81d0e2',
-      'view':   'https://localhost:8005/apis/storage.sbomscanner.kubewarden.io/v1alpha1/namespaces/default/vulnerabilityreports/1af1c7062793c11f61974fe772cde08a50d0f949dc8f433b526c55f3fe81d0e2'
-    },
-    'apiVersion':    'storage.sbomscanner.kubewarden.io/v1alpha1',
-    'imageMetadata': {
-      'digest':      'sha256:a2c49065a4a5161095f5d60c527f8b8ab3d4a4e0af79333eeccf4dd260aae64d',
-      'platform':    'linux/386',
-      'registry':    'lsong-demo1',
-      'registryURI': 'registry-1.docker.io',
-      'repository':  'library/alpine',
-      'tag':         '3.12.3'
-    },
-    'kind':     'VulnerabilityReport',
-    'metadata': {
-      'creationTimestamp': '2026-01-14T18:51:17Z',
-      'fields':            [
-        '1af1c7062793c11f61974fe772cde08a50d0f949dc8f433b526c55f3fe81d0e2',
-        'registry-1.docker.io/library/alpine:3.12.3',
-        'linux/386',
-        '44 (0 suppressed)'
-      ],
-      'labels': {
-        'app.kubernetes.io/managed-by':          'sbomscanner',
-        'app.kubernetes.io/part-of':             'sbomscanner',
-        'sbomscanner.kubewarden.io/scanjob-uid': '445c600a-c4b6-40b3-bd71-f2d2140a37d5'
-      },
-      'name':            '1af1c7062793c11f61974fe772cde08a50d0f949dc8f433b526c55f3fe81d0e2',
-      'namespace':       'default',
-      'ownerReferences': [
-        {
-          'apiVersion':         'storage.sbomscanner.kubewarden.io/v1alpha1',
-          'blockOwnerDeletion': true,
-          'controller':         true,
-          'kind':               'SBOM',
-          'name':               '1af1c7062793c11f61974fe772cde08a50d0f949dc8f433b526c55f3fe81d0e2',
-          'uid':                '722c22e9-670c-4023-989e-997ecb6d3144'
-        }
-      ],
-      'relationships': [
-        {
-          'fromId':   'default/1af1c7062793c11f61974fe772cde08a50d0f949dc8f433b526c55f3fe81d0e2',
-          'fromType': 'storage.sbomscanner.kubewarden.io.sbom',
-          'rel':      'owner',
-          'state':    'active',
-          'message':  'Resource is current'
-        }
-      ],
-      'resourceVersion': '1',
-      'state':           {
-        'error':         false,
-        'message':       'Resource is current',
-        'name':          'active',
-        'transitioning': false
-      },
-      'uid': '5fe417e1-8cc0-4d46-979c-d4d202a1a748'
-    },
-    'report': {
-      'results': [
-        {
-          'class':           'os-pkgs',
-          'target':          '/var/run/worker/trivy.sbom.331901039.json (alpine 3.12.3)',
-          'type':            'alpine',
-          'vulnerabilities': [
-            {
-              'cve':  'CVE-2021-36159',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '9.1',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '9.1',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-125'
-              ],
-              'description':   "libfetch before 2021-07-26, as used in apk-tools, xbps, and other products, mishandles numeric strings for the FTP and HTTP protocols. The FTP passive mode implementation allows an out-of-bounds read because strtol is used to parse the relevant numbers into address bytes. It does not check if the line ends prematurely. If it does, the for-loop condition checks for the '\\0' terminator one byte too late.",
-              'diffID':        'sha256:c982e88d8e8d015a1e98891266e62b05b4c3d2986986ec2a988d7097150b7437',
-              'fixedVersions': [
-                '2.10.7-r0'
-              ],
-              'installedVersion': '2.10.5-r1',
-              'packageName':      'apk-tools',
-              'purl':             'pkg:apk/alpine/apk-tools@2.10.5-r1?arch=x86&distro=3.12.3',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-36159',
-                'https://github.com/freebsd/freebsd-src/commits/main/lib/libfetch',
-                'https://gitlab.alpinelinux.org/alpine/apk-tools/-/issues/10749',
-                'https://lists.apache.org/thread.html/r61db8e7dcb56dc000a5387a88f7a473bacec5ee01b9ff3f55308aacc%40%3Cdev.kafka.apache.org%3E',
-                'https://lists.apache.org/thread.html/r61db8e7dcb56dc000a5387a88f7a473bacec5ee01b9ff3f55308aacc%40%3Cusers.kafka.apache.org%3E',
-                'https://lists.apache.org/thread.html/rbf4ce74b0d1fa9810dec50ba3ace0caeea677af7c27a97111c06ccb7%40%3Cdev.kafka.apache.org%3E',
-                'https://lists.apache.org/thread.html/rbf4ce74b0d1fa9810dec50ba3ace0caeea677af7c27a97111c06ccb7%40%3Cusers.kafka.apache.org%3E',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-36159',
-                'https://www.cve.org/CVERecord?id=CVE-2021-36159'
-              ],
-              'severity':   'CRITICAL',
-              'suppressed': false,
-              'title':      'libfetch: an out of boundary read while libfetch uses strtol to parse the relevant numbers into address bytes leads to information leak or crash'
-            },
-            {
-              'cve':  'CVE-2021-30139',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-125'
-              ],
-              'description':   'In Alpine Linux apk-tools before 2.12.5, the tarball parser allows a buffer overflow and crash.',
-              'diffID':        'sha256:c982e88d8e8d015a1e98891266e62b05b4c3d2986986ec2a988d7097150b7437',
-              'fixedVersions': [
-                '2.10.6-r0'
-              ],
-              'installedVersion': '2.10.5-r1',
-              'packageName':      'apk-tools',
-              'purl':             'pkg:apk/alpine/apk-tools@2.10.5-r1?arch=x86&distro=3.12.3',
-              'references':       [
-                'https://gitlab.alpinelinux.org/alpine/apk-tools/-/issues/10741',
-                'https://gitlab.alpinelinux.org/alpine/aports/-/issues/12606'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false
-            },
-            {
-              'cve':  'CVE-2021-28831',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-755'
-              ],
-              'description':   'decompress_gunzip.c in BusyBox through 1.32.1 mishandles the error bit on the huft_build result pointer, with a resultant invalid free or segmentation fault, via malformed gzip data.',
-              'diffID':        'sha256:c982e88d8e8d015a1e98891266e62b05b4c3d2986986ec2a988d7097150b7437',
-              'fixedVersions': [
-                '1.31.1-r20'
-              ],
-              'installedVersion': '1.31.1-r19',
-              'packageName':      'busybox',
-              'purl':             'pkg:apk/alpine/busybox@1.31.1-r19?arch=x86&distro=3.12.3',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-28831',
-                'https://git.busybox.net/busybox/commit/?id=f25d254dfd4243698c31a4f3153d4ac72aa9e9bd',
-                'https://lists.debian.org/debian-lts-announce/2021/04/msg00001.html',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/3UDQGJRECXFS5EZVDH2OI45FMO436AC4/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/Z7ZIFKPRR32ZYA3WAA2NXFA3QHHOU6FJ/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZASBW7QRRLY5V2R44MQ4QQM4CZIDHM2U/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-28831',
-                'https://security.gentoo.org/glsa/202105-09',
-                'https://security.netapp.com/advisory/ntap-20250509-0005/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://ubuntu.com/security/notices/USN-5179-2',
-                'https://ubuntu.com/security/notices/USN-6335-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-28831'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: invalid free or segmentation fault via malformed gzip data'
-            },
-            {
-              'cve':  'CVE-2021-42378',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the getvar_i function",
-              'diffID':        'sha256:c982e88d8e8d015a1e98891266e62b05b4c3d2986986ec2a988d7097150b7437',
-              'fixedVersions': [
-                '1.31.1-r21'
-              ],
-              'installedVersion': '1.31.1-r19',
-              'packageName':      'busybox',
-              'purl':             'pkg:apk/alpine/busybox@1.31.1-r19?arch=x86&distro=3.12.3',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42378',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42378',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42378'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the getvar_i()'
-            },
-            {
-              'cve':  'CVE-2021-42379',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the next_input_file function",
-              'diffID':        'sha256:c982e88d8e8d015a1e98891266e62b05b4c3d2986986ec2a988d7097150b7437',
-              'fixedVersions': [
-                '1.31.1-r21'
-              ],
-              'installedVersion': '1.31.1-r19',
-              'packageName':      'busybox',
-              'purl':             'pkg:apk/alpine/busybox@1.31.1-r19?arch=x86&distro=3.12.3',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42379',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42379',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42379'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the next_input_file()'
-            },
-            {
-              'cve':  'CVE-2021-42380',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the clrvar function",
-              'diffID':        'sha256:c982e88d8e8d015a1e98891266e62b05b4c3d2986986ec2a988d7097150b7437',
-              'fixedVersions': [
-                '1.31.1-r21'
-              ],
-              'installedVersion': '1.31.1-r19',
-              'packageName':      'busybox',
-              'purl':             'pkg:apk/alpine/busybox@1.31.1-r19?arch=x86&distro=3.12.3',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42380',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42380',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42380'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the clrvar()'
-            },
-            {
-              'cve':  'CVE-2021-42381',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the hash_init function",
-              'diffID':        'sha256:c982e88d8e8d015a1e98891266e62b05b4c3d2986986ec2a988d7097150b7437',
-              'fixedVersions': [
-                '1.31.1-r21'
-              ],
-              'installedVersion': '1.31.1-r19',
-              'packageName':      'busybox',
-              'purl':             'pkg:apk/alpine/busybox@1.31.1-r19?arch=x86&distro=3.12.3',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42381',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42381',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42381'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the hash_init()'
-            },
-            {
-              'cve':  'CVE-2021-42382',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the getvar_s function",
-              'diffID':        'sha256:c982e88d8e8d015a1e98891266e62b05b4c3d2986986ec2a988d7097150b7437',
-              'fixedVersions': [
-                '1.31.1-r21'
-              ],
-              'installedVersion': '1.31.1-r19',
-              'packageName':      'busybox',
-              'purl':             'pkg:apk/alpine/busybox@1.31.1-r19?arch=x86&distro=3.12.3',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42382',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42382',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42382'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the getvar_s()'
-            },
-            {
-              'cve':  'CVE-2021-42383',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the evaluate function",
-              'diffID':        'sha256:c982e88d8e8d015a1e98891266e62b05b4c3d2986986ec2a988d7097150b7437',
-              'fixedVersions': [
-                '1.31.1-r21'
-              ],
-              'installedVersion': '1.31.1-r19',
-              'packageName':      'busybox',
-              'purl':             'pkg:apk/alpine/busybox@1.31.1-r19?arch=x86&distro=3.12.3',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42383',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42383',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42383'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the evaluate()'
-            },
-            {
-              'cve':  'CVE-2021-42384',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the handle_special function",
-              'diffID':        'sha256:c982e88d8e8d015a1e98891266e62b05b4c3d2986986ec2a988d7097150b7437',
-              'fixedVersions': [
-                '1.31.1-r21'
-              ],
-              'installedVersion': '1.31.1-r19',
-              'packageName':      'busybox',
-              'purl':             'pkg:apk/alpine/busybox@1.31.1-r19?arch=x86&distro=3.12.3',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42384',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42384',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42384'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the handle_special()'
-            },
-            {
-              'cve':  'CVE-2021-42385',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the evaluate function",
-              'diffID':        'sha256:c982e88d8e8d015a1e98891266e62b05b4c3d2986986ec2a988d7097150b7437',
-              'fixedVersions': [
-                '1.31.1-r21'
-              ],
-              'installedVersion': '1.31.1-r19',
-              'packageName':      'busybox',
-              'purl':             'pkg:apk/alpine/busybox@1.31.1-r19?arch=x86&distro=3.12.3',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42385',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42385',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42385'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the evaluate()'
-            },
-            {
-              'cve':  'CVE-2021-42386',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the nvalloc function",
-              'diffID':        'sha256:c982e88d8e8d015a1e98891266e62b05b4c3d2986986ec2a988d7097150b7437',
-              'fixedVersions': [
-                '1.31.1-r21'
-              ],
-              'installedVersion': '1.31.1-r19',
-              'packageName':      'busybox',
-              'purl':             'pkg:apk/alpine/busybox@1.31.1-r19?arch=x86&distro=3.12.3',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42386',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42386',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42386'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the nvalloc()'
-            },
-            {
-              'cve':  'CVE-2022-28391',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '8.8',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-88'
-              ],
-              'description':   "BusyBox through 1.35.0 allows remote attackers to execute arbitrary code if netstat is used to print a DNS PTR record's value to a VT compatible terminal. Alternatively, the attacker could choose to change the terminal's colors.",
-              'diffID':        'sha256:c982e88d8e8d015a1e98891266e62b05b4c3d2986986ec2a988d7097150b7437',
-              'fixedVersions': [
-                '1.31.1-r22'
-              ],
-              'installedVersion': '1.31.1-r19',
-              'packageName':      'busybox',
-              'purl':             'pkg:apk/alpine/busybox@1.31.1-r19?arch=x86&distro=3.12.3',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2022-28391',
-                'https://git.alpinelinux.org/aports/plain/main/busybox/0001-libbb-sockaddr2str-ensure-only-printable-characters-.patch',
-                'https://git.alpinelinux.org/aports/plain/main/busybox/0002-nslookup-sanitize-all-printed-strings-with-printable.patch',
-                'https://gitlab.alpinelinux.org/alpine/aports/-/issues/13661',
-                'https://nvd.nist.gov/vuln/detail/CVE-2022-28391',
-                'https://www.cve.org/CVERecord?id=CVE-2022-28391'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: remote attackers may execute arbitrary code if netstat is used'
-            },
-            {
-              'cve':  'CVE-2021-42374',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '5.7',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-125'
-              ],
-              'description':   "An out-of-bounds heap read in Busybox's unlzma applet leads to information leak and denial of service when crafted LZMA-compressed input is decompressed. This can be triggered by any applet/format that",
-              'diffID':        'sha256:c982e88d8e8d015a1e98891266e62b05b4c3d2986986ec2a988d7097150b7437',
-              'fixedVersions': [
-                '1.31.1-r21'
-              ],
-              'installedVersion': '1.31.1-r19',
-              'packageName':      'busybox',
-              'purl':             'pkg:apk/alpine/busybox@1.31.1-r19?arch=x86&distro=3.12.3',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42374',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42374',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42374'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'busybox: out-of-bounds read in unlzma applet leads to information leak and denial of service when crafted LZMA-compressed input is decompressed'
-            },
-            {
-              'cve':  'CVE-2021-3711',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '9.8',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'nvd': {
-                  'v3score':  '9.8',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '9.8',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-120'
-              ],
-              'description':   'In order to decrypt SM2 encrypted data an application is expected to call the API function EVP_PKEY_decrypt(). Typically an application will call this function twice. The first time, on entry, the "out" parameter can be NULL and, on exit, the "outlen" parameter is populated with the buffer size required to hold the decrypted plaintext. The application can then allocate a sufficiently sized buffer and call EVP_PKEY_decrypt() again, but this time passing a non-NULL value for the "out" parameter. A bug in the implementation of the SM2 decryption code means that the calculation of the buffer size required to hold the plaintext returned by the first call to EVP_PKEY_decrypt() can be smaller than the actual size required by the second call. This can lead to a buffer overflow when EVP_PKEY_decrypt() is called by the application a second time with a buffer that is too small. A malicious attacker who is able present SM2 content for decryption to an application could cause attacker chosen data to overflow the buffer by up to a maximum of 62 bytes altering the contents of other data held after the buffer, possibly changing application behaviour or causing the application to crash. The location of the buffer is application dependent but is typically heap allocated. Fixed in OpenSSL 1.1.1l (Affected 1.1.1-1.1.1k).',
-              'diffID':        'sha256:c982e88d8e8d015a1e98891266e62b05b4c3d2986986ec2a988d7097150b7437',
-              'fixedVersions': [
-                '1.1.1l-r0'
-              ],
-              'installedVersion': '1.1.1i-r0',
-              'packageName':      'libcrypto1.1',
-              'purl':             'pkg:apk/alpine/libcrypto1.1@1.1.1i-r0?arch=x86&distro=3.12.3',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2021/08/26/2',
-                'https://access.redhat.com/security/cve/CVE-2021-3711',
-                'https://cert-portal.siemens.com/productcert/pdf/ssa-389290.pdf',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=59f5e75f3bced8fc0e130d72a3f582cf7b480b46',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=59f5e75f3bced8fc0e130d72a3f582cf7b480b46',
-                'https://lists.apache.org/thread.html/r18995de860f0e63635f3008fd2a6aca82394249476d21691e7c59c9e%40%3Cdev.tomcat.apache.org%3E',
-                'https://lists.apache.org/thread.html/r18995de860f0e63635f3008fd2a6aca82394249476d21691e7c59c9e@%3Cdev.tomcat.apache.org%3E',
-                'https://lists.apache.org/thread.html/rad5d9f83f0d11fb3f8bb148d179b8a9ad7c6a17f18d70e5805a713d1%40%3Cdev.tomcat.apache.org%3E',
-                'https://lists.apache.org/thread.html/rad5d9f83f0d11fb3f8bb148d179b8a9ad7c6a17f18d70e5805a713d1@%3Cdev.tomcat.apache.org%3E',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-3711',
-                'https://rustsec.org/advisories/RUSTSEC-2021-0097.html',
-                'https://security.gentoo.org/glsa/202209-02',
-                'https://security.gentoo.org/glsa/202210-02',
-                'https://security.netapp.com/advisory/ntap-20210827-0010',
-                'https://security.netapp.com/advisory/ntap-20210827-0010/',
-                'https://security.netapp.com/advisory/ntap-20211022-0003',
-                'https://security.netapp.com/advisory/ntap-20211022-0003/',
-                'https://security.netapp.com/advisory/ntap-20240621-0006',
-                'https://security.netapp.com/advisory/ntap-20240621-0006/',
-                'https://ubuntu.com/security/notices/USN-5051-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-3711',
-                'https://www.debian.org/security/2021/dsa-4963',
-                'https://www.openssl.org/news/secadv/20210824.txt',
-                'https://www.oracle.com/security-alerts/cpuapr2022.html',
-                'https://www.oracle.com/security-alerts/cpujan2022.html',
-                'https://www.oracle.com/security-alerts/cpuoct2021.html',
-                'https://www.tenable.com/security/tns-2021-16',
-                'https://www.tenable.com/security/tns-2022-02'
-              ],
-              'severity':   'CRITICAL',
-              'suppressed': false,
-              'title':      'openssl: SM2 Decryption Buffer Overflow'
-            },
-            {
-              'cve':  'CVE-2021-23840',
-              'cvss': {
-                'bitnami': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'ghsa': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'nvd': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-190'
-              ],
-              'description':   'Calls to EVP_CipherUpdate, EVP_EncryptUpdate and EVP_DecryptUpdate may overflow the output length argument in some cases where the input length is close to the maximum permissable length for an integer on the platform. In such cases the return value from the function call will be 1 (indicating success), but the output length value will be negative. This could cause applications to behave incorrectly or crash. OpenSSL versions 1.1.1i and below are affected by this issue. Users of these versions should upgrade to OpenSSL 1.1.1j. OpenSSL versions 1.0.2x and below are affected by this issue. However OpenSSL 1.0.2 is out of support and no longer receiving public updates. Premium support customers of OpenSSL 1.0.2 should upgrade to 1.0.2y. Other users should upgrade to 1.1.1j. Fixed in OpenSSL 1.1.1j (Affected 1.1.1-1.1.1i). Fixed in OpenSSL 1.0.2y (Affected 1.0.2-1.0.2x).',
-              'diffID':        'sha256:c982e88d8e8d015a1e98891266e62b05b4c3d2986986ec2a988d7097150b7437',
-              'fixedVersions': [
-                '1.1.1j-r0'
-              ],
-              'installedVersion': '1.1.1i-r0',
-              'packageName':      'libcrypto1.1',
-              'purl':             'pkg:apk/alpine/libcrypto1.1@1.1.1i-r0?arch=x86&distro=3.12.3',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-23840',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=1908036',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=1930310',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=1930324',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=1934534',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=1934600',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=1939637',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=1940085',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=1965362',
-                'https://cert-portal.siemens.com/productcert/pdf/ssa-389290.pdf',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-23840',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-23841',
-                'https://errata.rockylinux.org/RLSA-2021:4424',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=6a51b9e1d0cf0bf8515f7201b68fb0a3482b3dc1',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=9b1129239f3ebb1d1c98ce9ed41d5c9476c47cb2',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=6a51b9e1d0cf0bf8515f7201b68fb0a3482b3dc1',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=9b1129239f3ebb1d1c98ce9ed41d5c9476c47cb2',
-                'https://github.com/alexcrichton/openssl-src-rs',
-                'https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA44846',
-                'https://kc.mcafee.com/corporate/index?page=content&id=SB10366',
-                'https://linux.oracle.com/cve/CVE-2021-23840.html',
-                'https://linux.oracle.com/errata/ELSA-2021-9561.html',
-                'https://lists.apache.org/thread.html/r58af02e294bd07f487e2c64ffc0a29b837db5600e33b6e698b9d696b%40%3Cissues.bookkeeper.apache.org%3E',
-                'https://lists.apache.org/thread.html/r58af02e294bd07f487e2c64ffc0a29b837db5600e33b6e698b9d696b@%3Cissues.bookkeeper.apache.org%3E',
-                'https://lists.apache.org/thread.html/rf4c02775860db415b4955778a131c2795223f61cb8c6a450893651e4%40%3Cissues.bookkeeper.apache.org%3E',
-                'https://lists.apache.org/thread.html/rf4c02775860db415b4955778a131c2795223f61cb8c6a450893651e4@%3Cissues.bookkeeper.apache.org%3E',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-23840',
-                'https://rustsec.org/advisories/RUSTSEC-2021-0057.html',
-                'https://security.gentoo.org/glsa/202103-03',
-                'https://security.netapp.com/advisory/ntap-20210219-0009',
-                'https://security.netapp.com/advisory/ntap-20210219-0009/',
-                'https://security.netapp.com/advisory/ntap-20240621-0006/',
-                'https://ubuntu.com/security/notices/USN-4738-1',
-                'https://ubuntu.com/security/notices/USN-5088-1',
-                'https://ubuntu.com/security/notices/USN-7018-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-23840',
-                'https://www.debian.org/security/2021/dsa-4855',
-                'https://www.openssl.org/news/secadv/20210216.txt',
-                'https://www.oracle.com//security-alerts/cpujul2021.html',
-                'https://www.oracle.com/security-alerts/cpuApr2021.html',
-                'https://www.oracle.com/security-alerts/cpuapr2022.html',
-                'https://www.oracle.com/security-alerts/cpujan2022.html',
-                'https://www.oracle.com/security-alerts/cpuoct2021.html',
-                'https://www.tenable.com/security/tns-2021-03',
-                'https://www.tenable.com/security/tns-2021-09',
-                'https://www.tenable.com/security/tns-2021-10'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: integer overflow in CipherUpdate'
-            },
-            {
-              'cve':  'CVE-2021-3450',
-              'cvss': {
-                'bitnami': {
-                  'v3score':  '7.4',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N'
-                },
-                'ghsa': {
-                  'v3score':  '7.4',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N'
-                },
-                'nvd': {
-                  'v3score':  '7.4',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N'
-                },
-                'redhat': {
-                  'v3score':  '7.4',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-295'
-              ],
-              'description':   'The X509_V_FLAG_X509_STRICT flag enables additional security checks of the certificates present in a certificate chain. It is not set by default. Starting from OpenSSL version 1.1.1h a check to disallow certificates in the chain that have explicitly encoded elliptic curve parameters was added as an additional strict check. An error in the implementation of this check meant that the result of a previous check to confirm that certificates in the chain are valid CA certificates was overwritten. This effectively bypasses the check that non-CA certificates must not be able to issue other certificates. If a "purpose" has been configured then there is a subsequent opportunity for checks that the certificate is a valid CA. All of the named "purpose" values implemented in libcrypto perform this check. Therefore, where a purpose is set the certificate chain will still be rejected even when the strict flag has been used. A purpose is set by default in libssl client and server certificate verification routines, but it can be overridden or removed by an application. In order to be affected, an application must explicitly set the X509_V_FLAG_X509_STRICT verification flag and either not set a purpose for the certificate verification or, in the case of TLS client or server applications, override the default purpose. OpenSSL versions 1.1.1h and newer are affected by this issue. Users of these versions should upgrade to OpenSSL 1.1.1k. OpenSSL 1.0.2 is not impacted by this issue. Fixed in OpenSSL 1.1.1k (Affected 1.1.1h-1.1.1j).',
-              'diffID':        'sha256:c982e88d8e8d015a1e98891266e62b05b4c3d2986986ec2a988d7097150b7437',
-              'fixedVersions': [
-                '1.1.1k-r0'
-              ],
-              'installedVersion': '1.1.1i-r0',
-              'packageName':      'libcrypto1.1',
-              'purl':             'pkg:apk/alpine/libcrypto1.1@1.1.1i-r0?arch=x86&distro=3.12.3',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2021/03/27/1',
-                'http://www.openwall.com/lists/oss-security/2021/03/27/2',
-                'http://www.openwall.com/lists/oss-security/2021/03/28/3',
-                'http://www.openwall.com/lists/oss-security/2021/03/28/4',
-                'https://access.redhat.com/security/cve/CVE-2021-3450',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=1941547',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=1941554',
-                'https://cert-portal.siemens.com/productcert/pdf/ssa-389290.pdf',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-3449',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-3450',
-                'https://errata.rockylinux.org/RLSA-2021:1024',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=2a40b7bc7b94dd7de897a74571e7024f0cf0d63b',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=2a40b7bc7b94dd7de897a74571e7024f0cf0d63b',
-                'https://github.com/alexcrichton/openssl-src-rs',
-                'https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA44845',
-                'https://kc.mcafee.com/corporate/index?page=content&id=SB10356',
-                'https://linux.oracle.com/cve/CVE-2021-3450.html',
-                'https://linux.oracle.com/errata/ELSA-2021-9151.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CCBFLLVQVILIVGZMBJL3IXZGKWQISYNP/',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/CCBFLLVQVILIVGZMBJL3IXZGKWQISYNP',
-                'https://mta.openssl.org/pipermail/openssl-announce/2021-March/000198.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-3450',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2021-0013',
-                'https://rustsec.org/advisories/RUSTSEC-2021-0056.html',
-                'https://security.FreeBSD.org/advisories/FreeBSD-SA-21:07.openssl.asc',
-                'https://security.gentoo.org/glsa/202103-03',
-                'https://security.netapp.com/advisory/ntap-20210326-0006',
-                'https://security.netapp.com/advisory/ntap-20210326-0006/',
-                'https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-openssl-2021-GHY28dJd',
-                'https://www.cve.org/CVERecord?id=CVE-2021-3450',
-                'https://www.openssl.org/news/secadv/20210325.txt',
-                'https://www.oracle.com//security-alerts/cpujul2021.html',
-                'https://www.oracle.com/security-alerts/cpuApr2021.html',
-                'https://www.oracle.com/security-alerts/cpuapr2022.html',
-                'https://www.oracle.com/security-alerts/cpujul2022.html',
-                'https://www.oracle.com/security-alerts/cpuoct2021.html',
-                'https://www.tenable.com/security/tns-2021-05',
-                'https://www.tenable.com/security/tns-2021-08',
-                'https://www.tenable.com/security/tns-2021-09'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: CA certificate check bypass with X509_V_FLAG_X509_STRICT'
-            },
-            {
-              'cve':  'CVE-2021-3712',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '7.4',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H'
-                },
-                'nvd': {
-                  'v3score':  '7.4',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.4',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-125'
-              ],
-              'description':   "ASN.1 strings are represented internally within OpenSSL as an ASN1_STRING structure which contains a buffer holding the string data and a field holding the buffer length. This contrasts with normal C strings which are repesented as a buffer for the string data which is terminated with a NUL (0) byte. Although not a strict requirement, ASN.1 strings that are parsed using OpenSSL's own \"d2i\" functions (and other similar parsing functions) as well as any string whose value has been set with the ASN1_STRING_set() function will additionally NUL terminate the byte array in the ASN1_STRING structure. However, it is possible for applications to directly construct valid ASN1_STRING structures which do not NUL terminate the byte array by directly setting the \"data\" and \"length\" fields in the ASN1_STRING array. This can also happen by using the ASN1_STRING_set0() function. Numerous OpenSSL functions that print ASN.1 data have been found to assume that the ASN1_STRING byte array will be NUL terminated, even though this is not guaranteed for strings that have been directly constructed. Where an application requests an ASN.1 structure to be printed, and where that ASN.1 structure contains ASN1_STRINGs that have been directly constructed by the application without NUL terminating the \"data\" field, then a read buffer overrun can occur. The same thing can also occur during name constraints processing of certificates (for example if a certificate has been directly constructed by the application instead of loading it via the OpenSSL parsing functions, and the certificate contains non NUL terminated ASN1_STRING structures). It can also occur in the X509_get1_email(), X509_REQ_get1_email() and X509_get1_ocsp() functions. If a malicious actor can cause an application to directly construct an ASN1_STRING and then process it through one of the affected OpenSSL functions then this issue could be hit. This might result in a crash (causing a Denial of Service attack). It could also result in the disclosure of private memory contents (such as private keys, or sensitive plaintext). Fixed in OpenSSL 1.1.1l (Affected 1.1.1-1.1.1k). Fixed in OpenSSL 1.0.2za (Affected 1.0.2-1.0.2y).",
-              'diffID':        'sha256:c982e88d8e8d015a1e98891266e62b05b4c3d2986986ec2a988d7097150b7437',
-              'fixedVersions': [
-                '1.1.1l-r0'
-              ],
-              'installedVersion': '1.1.1i-r0',
-              'packageName':      'libcrypto1.1',
-              'purl':             'pkg:apk/alpine/libcrypto1.1@1.1.1i-r0?arch=x86&distro=3.12.3',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2021/08/26/2',
-                'https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2021-3712.json',
-                'https://access.redhat.com/security/cve/CVE-2021-3712',
-                'https://cert-portal.siemens.com/productcert/pdf/ssa-244969.pdf',
-                'https://cert-portal.siemens.com/productcert/pdf/ssa-389290.pdf',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=94d23fcff9b2a7a8368dfe52214d5c2569882c11',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=ccb0a11145ee72b042d10593a64eaf9e8a55ec12',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=94d23fcff9b2a7a8368dfe52214d5c2569882c11',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=ccb0a11145ee72b042d10593a64eaf9e8a55ec12',
-                'https://kc.mcafee.com/corporate/index?page=content&id=SB10366',
-                'https://linux.oracle.com/cve/CVE-2021-3712.html',
-                'https://linux.oracle.com/errata/ELSA-2022-9023.html',
-                'https://lists.apache.org/thread.html/r18995de860f0e63635f3008fd2a6aca82394249476d21691e7c59c9e%40%3Cdev.tomcat.apache.org%3E',
-                'https://lists.apache.org/thread.html/r18995de860f0e63635f3008fd2a6aca82394249476d21691e7c59c9e@%3Cdev.tomcat.apache.org%3E',
-                'https://lists.apache.org/thread.html/rad5d9f83f0d11fb3f8bb148d179b8a9ad7c6a17f18d70e5805a713d1%40%3Cdev.tomcat.apache.org%3E',
-                'https://lists.apache.org/thread.html/rad5d9f83f0d11fb3f8bb148d179b8a9ad7c6a17f18d70e5805a713d1@%3Cdev.tomcat.apache.org%3E',
-                'https://lists.debian.org/debian-lts-announce/2021/09/msg00014.html',
-                'https://lists.debian.org/debian-lts-announce/2021/09/msg00021.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-3712',
-                'https://rustsec.org/advisories/RUSTSEC-2021-0098.html',
-                'https://security.gentoo.org/glsa/202209-02',
-                'https://security.gentoo.org/glsa/202210-02',
-                'https://security.netapp.com/advisory/ntap-20210827-0010',
-                'https://security.netapp.com/advisory/ntap-20210827-0010/',
-                'https://security.netapp.com/advisory/ntap-20240621-0006',
-                'https://security.netapp.com/advisory/ntap-20240621-0006/',
-                'https://ubuntu.com/security/notices/USN-5051-1',
-                'https://ubuntu.com/security/notices/USN-5051-2',
-                'https://ubuntu.com/security/notices/USN-5051-3',
-                'https://ubuntu.com/security/notices/USN-5051-4 (regression only in trusty/esm)',
-                'https://ubuntu.com/security/notices/USN-5088-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-3712',
-                'https://www.debian.org/security/2021/dsa-4963',
-                'https://www.openssl.org/news/secadv/20210824.txt',
-                'https://www.oracle.com/security-alerts/cpuapr2022.html',
-                'https://www.oracle.com/security-alerts/cpujan2022.html',
-                'https://www.oracle.com/security-alerts/cpuoct2021.html',
-                'https://www.tenable.com/security/tns-2021-16',
-                'https://www.tenable.com/security/tns-2022-02'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: Read buffer overruns processing ASN.1 strings'
-            },
-            {
-              'cve':  'CVE-2022-0778',
-              'cvss': {
-                'bitnami': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'ghsa': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'nvd': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-835'
-              ],
-              'description':   'The BN_mod_sqrt() function, which computes a modular square root, contains a bug that can cause it to loop forever for non-prime moduli. Internally this function is used when parsing certificates that contain elliptic curve public keys in compressed form or explicit elliptic curve parameters with a base point encoded in compressed form. It is possible to trigger the infinite loop by crafting a certificate that has invalid explicit curve parameters. Since certificate parsing happens prior to verification of the certificate signature, any process that parses an externally supplied certificate may thus be subject to a denial of service attack. The infinite loop can also be reached when parsing crafted private keys as they can contain explicit elliptic curve parameters. Thus vulnerable situations include: - TLS clients consuming server certificates - TLS servers consuming client certificates - Hosting providers taking certificates or private keys from customers - Certificate authorities parsing certification requests from subscribers - Anything else which parses ASN.1 elliptic curve parameters Also any other applications that use the BN_mod_sqrt() where the attacker can control the parameter values are vulnerable to this DoS issue. In the OpenSSL 1.0.2 version the public key is not parsed during initial parsing of the certificate which makes it slightly harder to trigger the infinite loop. However any operation which requires the public key from the certificate will trigger the infinite loop. In particular the attacker can use a self-signed certificate to trigger the loop during verification of the certificate signature. This issue affects OpenSSL versions 1.0.2, 1.1.1 and 3.0. It was addressed in the releases of 1.1.1n and 3.0.2 on the 15th March 2022. Fixed in OpenSSL 3.0.2 (Affected 3.0.0,3.0.1). Fixed in OpenSSL 1.1.1n (Affected 1.1.1-1.1.1m). Fixed in OpenSSL 1.0.2zd (Affected 1.0.2-1.0.2zc).',
-              'diffID':        'sha256:c982e88d8e8d015a1e98891266e62b05b4c3d2986986ec2a988d7097150b7437',
-              'fixedVersions': [
-                '1.1.1n-r0'
-              ],
-              'installedVersion': '1.1.1i-r0',
-              'packageName':      'libcrypto1.1',
-              'purl':             'pkg:apk/alpine/libcrypto1.1@1.1.1i-r0?arch=x86&distro=3.12.3',
-              'references':       [
-                'http://packetstormsecurity.com/files/167344/OpenSSL-1.0.2-1.1.1-3.0-BN_mod_sqrt-Infinite-Loop.html',
-                'http://seclists.org/fulldisclosure/2022/May/33',
-                'http://seclists.org/fulldisclosure/2022/May/35',
-                'http://seclists.org/fulldisclosure/2022/May/38',
-                'https://access.redhat.com/errata/RHSA-2022:5326',
-                'https://access.redhat.com/security/cve/CVE-2022-0778',
-                'https://bugzilla.redhat.com/2062202',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2062202',
-                'https://cert-portal.siemens.com/productcert/pdf/ssa-712929.pdf',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-0778',
-                'https://errata.almalinux.org/8/ALSA-2022-5326.html',
-                'https://errata.rockylinux.org/RLSA-2022:4899',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=3118eb64934499d93db3230748a452351d1d9a65',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=380085481c64de749a6dd25cdf0bcf4360b30f83',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=a466912611aa6cbdf550cd10601390e587451246',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=3118eb64934499d93db3230748a452351d1d9a65',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=380085481c64de749a6dd25cdf0bcf4360b30f83',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=a466912611aa6cbdf550cd10601390e587451246',
-                'https://linux.oracle.com/cve/CVE-2022-0778.html',
-                'https://linux.oracle.com/errata/ELSA-2022-9272.html',
-                'https://lists.debian.org/debian-lts-announce/2022/03/msg00023.html',
-                'https://lists.debian.org/debian-lts-announce/2022/03/msg00024.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/323SNN6ZX7PRJJWP2BUAFLPUAE42XWLZ',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/323SNN6ZX7PRJJWP2BUAFLPUAE42XWLZ/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GDB3GQVJPXJE7X5C5JN6JAA4XUDWD6E6',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GDB3GQVJPXJE7X5C5JN6JAA4XUDWD6E6/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/W6K3PR542DXWLEFFMFIDMME4CWMHJRMG',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/W6K3PR542DXWLEFFMFIDMME4CWMHJRMG/',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/323SNN6ZX7PRJJWP2BUAFLPUAE42XWLZ',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/GDB3GQVJPXJE7X5C5JN6JAA4XUDWD6E6',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/W6K3PR542DXWLEFFMFIDMME4CWMHJRMG',
-                'https://nvd.nist.gov/vuln/detail/CVE-2022-0778',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2022-0002',
-                'https://rustsec.org/advisories/RUSTSEC-2022-0014.html',
-                'https://security.gentoo.org/glsa/202210-02',
-                'https://security.netapp.com/advisory/ntap-20220321-0002',
-                'https://security.netapp.com/advisory/ntap-20220321-0002/',
-                'https://security.netapp.com/advisory/ntap-20220429-0005',
-                'https://security.netapp.com/advisory/ntap-20220429-0005/',
-                'https://security.netapp.com/advisory/ntap-20240621-0006',
-                'https://security.netapp.com/advisory/ntap-20240621-0006/',
-                'https://support.apple.com/kb/HT213255',
-                'https://support.apple.com/kb/HT213256',
-                'https://support.apple.com/kb/HT213257',
-                'https://ubuntu.com/security/notices/USN-5328-1',
-                'https://ubuntu.com/security/notices/USN-5328-2',
-                'https://ubuntu.com/security/notices/USN-6457-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2022-0778',
-                'https://www.debian.org/security/2022/dsa-5103',
-                'https://www.openssl.org/news/secadv/20220315.txt',
-                'https://www.oracle.com/security-alerts/cpuapr2022.html',
-                'https://www.oracle.com/security-alerts/cpujul2022.html',
-                'https://www.tenable.com/security/tns-2022-06',
-                'https://www.tenable.com/security/tns-2022-07',
-                'https://www.tenable.com/security/tns-2022-08',
-                'https://www.tenable.com/security/tns-2022-09'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: Infinite loop in BN_mod_sqrt() reachable when parsing certificates'
-            },
-            {
-              'cve':  'CVE-2021-23841',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'nvd': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-476'
-              ],
-              'description':   'The OpenSSL public API function X509_issuer_and_serial_hash() attempts to create a unique hash value based on the issuer and serial number data contained within an X509 certificate. However it fails to correctly handle any errors that may occur while parsing the issuer field (which might occur if the issuer field is maliciously constructed). This may subsequently result in a NULL pointer deref and a crash leading to a potential denial of service attack. The function X509_issuer_and_serial_hash() is never directly called by OpenSSL itself so applications are only vulnerable if they use this function directly and they use it on certificates that may have been obtained from untrusted sources. OpenSSL versions 1.1.1i and below are affected by this issue. Users of these versions should upgrade to OpenSSL 1.1.1j. OpenSSL versions 1.0.2x and below are affected by this issue. However OpenSSL 1.0.2 is out of support and no longer receiving public updates. Premium support customers of OpenSSL 1.0.2 should upgrade to 1.0.2y. Other users should upgrade to 1.1.1j. Fixed in OpenSSL 1.1.1j (Affected 1.1.1-1.1.1i). Fixed in OpenSSL 1.0.2y (Affected 1.0.2-1.0.2x).',
-              'diffID':        'sha256:c982e88d8e8d015a1e98891266e62b05b4c3d2986986ec2a988d7097150b7437',
-              'fixedVersions': [
-                '1.1.1j-r0'
-              ],
-              'installedVersion': '1.1.1i-r0',
-              'packageName':      'libcrypto1.1',
-              'purl':             'pkg:apk/alpine/libcrypto1.1@1.1.1i-r0?arch=x86&distro=3.12.3',
-              'references':       [
-                'http://seclists.org/fulldisclosure/2021/May/67',
-                'http://seclists.org/fulldisclosure/2021/May/68',
-                'http://seclists.org/fulldisclosure/2021/May/70',
-                'https://access.redhat.com/security/cve/CVE-2021-23841',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=1908036',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=1930310',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=1930324',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=1934534',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=1934600',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=1939637',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=1940085',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=1965362',
-                'https://cert-portal.siemens.com/productcert/pdf/ssa-637483.pdf',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-23840',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-23841',
-                'https://errata.rockylinux.org/RLSA-2021:4424',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=122a19ab48091c657f7cb1fb3af9fc07bd557bbf',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=8252ee4d90f3f2004d3d0aeeed003ad49c9a7807',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=122a19ab48091c657f7cb1fb3af9fc07bd557bbf',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=6a51b9e1d0cf0bf8515f7201b68fb0a3482b3dc1',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=8252ee4d90f3f2004d3d0aeeed003ad49c9a7807',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=9b1129239f3ebb1d1c98ce9ed41d5c9476c47cb2',
-                'https://github.com/alexcrichton/openssl-src-rs',
-                'https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA44846',
-                'https://linux.oracle.com/cve/CVE-2021-23841.html',
-                'https://linux.oracle.com/errata/ELSA-2021-9561.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-23841',
-                'https://rustsec.org/advisories/RUSTSEC-2021-0058',
-                'https://rustsec.org/advisories/RUSTSEC-2021-0058.html',
-                'https://security.gentoo.org/glsa/202103-03',
-                'https://security.netapp.com/advisory/ntap-20210219-0009',
-                'https://security.netapp.com/advisory/ntap-20210219-0009/',
-                'https://security.netapp.com/advisory/ntap-20210513-0002',
-                'https://security.netapp.com/advisory/ntap-20210513-0002/',
-                'https://security.netapp.com/advisory/ntap-20240621-0006/',
-                'https://support.apple.com/kb/HT212528',
-                'https://support.apple.com/kb/HT212529',
-                'https://support.apple.com/kb/HT212534',
-                'https://ubuntu.com/security/notices/USN-4738-1',
-                'https://ubuntu.com/security/notices/USN-4745-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-23841',
-                'https://www.debian.org/security/2021/dsa-4855',
-                'https://www.openssl.org/news/secadv/20210216.txt',
-                'https://www.oracle.com//security-alerts/cpujul2021.html',
-                'https://www.oracle.com/security-alerts/cpuApr2021.html',
-                'https://www.oracle.com/security-alerts/cpuapr2022.html',
-                'https://www.oracle.com/security-alerts/cpuoct2021.html',
-                'https://www.tenable.com/security/tns-2021-03',
-                'https://www.tenable.com/security/tns-2021-09'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: NULL pointer dereference in X509_issuer_and_serial_hash()'
-            },
-            {
-              'cve':  'CVE-2021-3449',
-              'cvss': {
-                'bitnami': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'ghsa': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'nvd': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-476'
-              ],
-              'description':   'An OpenSSL TLS server may crash if sent a maliciously crafted renegotiation ClientHello message from a client. If a TLSv1.2 renegotiation ClientHello omits the signature_algorithms extension (where it was present in the initial ClientHello), but includes a signature_algorithms_cert extension then a NULL pointer dereference will result, leading to a crash and a denial of service attack. A server is only vulnerable if it has TLSv1.2 and renegotiation enabled (which is the default configuration). OpenSSL TLS clients are not impacted by this issue. All OpenSSL 1.1.1 versions are affected by this issue. Users of these versions should upgrade to OpenSSL 1.1.1k. OpenSSL 1.0.2 is not impacted by this issue. Fixed in OpenSSL 1.1.1k (Affected 1.1.1-1.1.1j).',
-              'diffID':        'sha256:c982e88d8e8d015a1e98891266e62b05b4c3d2986986ec2a988d7097150b7437',
-              'fixedVersions': [
-                '1.1.1k-r0'
-              ],
-              'installedVersion': '1.1.1i-r0',
-              'packageName':      'libcrypto1.1',
-              'purl':             'pkg:apk/alpine/libcrypto1.1@1.1.1i-r0?arch=x86&distro=3.12.3',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2021/03/27/1',
-                'http://www.openwall.com/lists/oss-security/2021/03/27/2',
-                'http://www.openwall.com/lists/oss-security/2021/03/28/3',
-                'http://www.openwall.com/lists/oss-security/2021/03/28/4',
-                'https://access.redhat.com/security/cve/CVE-2021-3449',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=1941547',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=1941554',
-                'https://cert-portal.siemens.com/productcert/pdf/ssa-389290.pdf',
-                'https://cert-portal.siemens.com/productcert/pdf/ssa-772220.pdf',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-3449',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-3450',
-                'https://errata.rockylinux.org/RLSA-2021:1024',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=fb9fa6b51defd48157eeb207f52181f735d96148',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=fb9fa6b51defd48157eeb207f52181f735d96148',
-                'https://github.com/alexcrichton/openssl-src-rs',
-                'https://github.com/nodejs/node/pull/38083',
-                'https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA44845',
-                'https://kc.mcafee.com/corporate/index?page=content&id=SB10356',
-                'https://linux.oracle.com/cve/CVE-2021-3449.html',
-                'https://linux.oracle.com/errata/ELSA-2021-9151.html',
-                'https://lists.debian.org/debian-lts-announce/2021/08/msg00029.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CCBFLLVQVILIVGZMBJL3IXZGKWQISYNP/',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/CCBFLLVQVILIVGZMBJL3IXZGKWQISYNP',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-3449',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2021-0013',
-                'https://rustsec.org/advisories/RUSTSEC-2021-0055',
-                'https://rustsec.org/advisories/RUSTSEC-2021-0055.html',
-                'https://security.FreeBSD.org/advisories/FreeBSD-SA-21:07.openssl.asc',
-                'https://security.gentoo.org/glsa/202103-03',
-                'https://security.netapp.com/advisory/ntap-20210326-0006',
-                'https://security.netapp.com/advisory/ntap-20210326-0006/',
-                'https://security.netapp.com/advisory/ntap-20210513-0002',
-                'https://security.netapp.com/advisory/ntap-20210513-0002/',
-                'https://security.netapp.com/advisory/ntap-20240621-0006/',
-                'https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-openssl-2021-GHY28dJd',
-                'https://ubuntu.com/security/notices/USN-4891-1',
-                'https://ubuntu.com/security/notices/USN-5038-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-3449',
-                'https://www.debian.org/security/2021/dsa-4875',
-                'https://www.openssl.org/news/secadv/20210325.txt',
-                'https://www.oracle.com//security-alerts/cpujul2021.html',
-                'https://www.oracle.com/security-alerts/cpuApr2021.html',
-                'https://www.oracle.com/security-alerts/cpuapr2022.html',
-                'https://www.oracle.com/security-alerts/cpujul2022.html',
-                'https://www.oracle.com/security-alerts/cpuoct2021.html',
-                'https://www.tenable.com/security/tns-2021-05',
-                'https://www.tenable.com/security/tns-2021-06',
-                'https://www.tenable.com/security/tns-2021-09',
-                'https://www.tenable.com/security/tns-2021-10'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: NULL pointer dereference in signature_algorithms processing'
-            },
-            {
-              'cve':  'CVE-2021-23839',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '3.7',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N'
-                },
-                'redhat': {
-                  'v3score':  '3.7',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-327'
-              ],
-              'description':   'OpenSSL 1.0.2 supports SSLv2. If a client attempts to negotiate SSLv2 with a server that is configured to support both SSLv2 and more recent SSL and TLS versions then a check is made for a version rollback attack when unpadding an RSA signature. Clients that support SSL or TLS versions greater than SSLv2 are supposed to use a special form of padding. A server that supports greater than SSLv2 is supposed to reject connection attempts from a client where this special form of padding is present, because this indicates that a version rollback has occurred (i.e. both client and server support greater than SSLv2, and yet this is the version that is being requested). The implementation of this padding check inverted the logic so that the connection attempt is accepted if the padding is present, and rejected if it is absent. This means that such as server will accept a connection if a version rollback attack has occurred. Further the server will erroneously reject a connection if a normal SSLv2 connection attempt is made. Only OpenSSL 1.0.2 servers from version 1.0.2s to 1.0.2x are affected by this issue. In order to be vulnerable a 1.0.2 server must: 1) have configured SSLv2 support at compile time (this is off by default), 2) have configured SSLv2 support at runtime (this is off by default), 3) have configured SSLv2 ciphersuites (these are not in the default ciphersuite list) OpenSSL 1.1.1 does not have SSLv2 support and therefore is not vulnerable to this issue. The underlying error is in the implementation of the RSA_padding_check_SSLv23() function. This also affects the RSA_SSLV23_PADDING padding mode used by various other functions. Although 1.1.1 does not support SSLv2 the RSA_padding_check_SSLv23() function still exists, as does the RSA_SSLV23_PADDING padding mode. Applications that directly call that function or use that padding mode will encounter this issue. However since there is no support for the SSLv2 protocol in 1.1.1 this is considered a bug and not a security issue in that version. OpenSSL 1.0.2 is out of support and no longer receiving public updates. Premium support customers of OpenSSL 1.0.2 should upgrade to 1.0.2y. Other users should upgrade to 1.1.1j. Fixed in OpenSSL 1.0.2y (Affected 1.0.2s-1.0.2x).',
-              'diffID':        'sha256:c982e88d8e8d015a1e98891266e62b05b4c3d2986986ec2a988d7097150b7437',
-              'fixedVersions': [
-                '1.1.1j-r0'
-              ],
-              'installedVersion': '1.1.1i-r0',
-              'packageName':      'libcrypto1.1',
-              'purl':             'pkg:apk/alpine/libcrypto1.1@1.1.1i-r0?arch=x86&distro=3.12.3',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-23839',
-                'https://cert-portal.siemens.com/productcert/pdf/ssa-637483.pdf',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=30919ab80a478f2d81f2e9acdcca3fa4740cd547',
-                'https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA44846',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-23839',
-                'https://security.netapp.com/advisory/ntap-20210219-0009/',
-                'https://security.netapp.com/advisory/ntap-20240621-0006/',
-                'https://www.cve.org/CVERecord?id=CVE-2021-23839',
-                'https://www.openssl.org/news/secadv/20210216.txt',
-                'https://www.oracle.com//security-alerts/cpujul2021.html',
-                'https://www.oracle.com/security-alerts/cpuApr2021.html',
-                'https://www.oracle.com/security-alerts/cpuapr2022.html',
-                'https://www.oracle.com/security-alerts/cpuoct2021.html'
-              ],
-              'severity':   'LOW',
-              'suppressed': false,
-              'title':      'openssl: incorrect SSLv2 rollback protection'
-            },
-            {
-              'cve':  'CVE-2021-3711',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '9.8',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'nvd': {
-                  'v3score':  '9.8',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '9.8',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-120'
-              ],
-              'description':   'In order to decrypt SM2 encrypted data an application is expected to call the API function EVP_PKEY_decrypt(). Typically an application will call this function twice. The first time, on entry, the "out" parameter can be NULL and, on exit, the "outlen" parameter is populated with the buffer size required to hold the decrypted plaintext. The application can then allocate a sufficiently sized buffer and call EVP_PKEY_decrypt() again, but this time passing a non-NULL value for the "out" parameter. A bug in the implementation of the SM2 decryption code means that the calculation of the buffer size required to hold the plaintext returned by the first call to EVP_PKEY_decrypt() can be smaller than the actual size required by the second call. This can lead to a buffer overflow when EVP_PKEY_decrypt() is called by the application a second time with a buffer that is too small. A malicious attacker who is able present SM2 content for decryption to an application could cause attacker chosen data to overflow the buffer by up to a maximum of 62 bytes altering the contents of other data held after the buffer, possibly changing application behaviour or causing the application to crash. The location of the buffer is application dependent but is typically heap allocated. Fixed in OpenSSL 1.1.1l (Affected 1.1.1-1.1.1k).',
-              'diffID':        'sha256:c982e88d8e8d015a1e98891266e62b05b4c3d2986986ec2a988d7097150b7437',
-              'fixedVersions': [
-                '1.1.1l-r0'
-              ],
-              'installedVersion': '1.1.1i-r0',
-              'packageName':      'libssl1.1',
-              'purl':             'pkg:apk/alpine/libssl1.1@1.1.1i-r0?arch=x86&distro=3.12.3',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2021/08/26/2',
-                'https://access.redhat.com/security/cve/CVE-2021-3711',
-                'https://cert-portal.siemens.com/productcert/pdf/ssa-389290.pdf',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=59f5e75f3bced8fc0e130d72a3f582cf7b480b46',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=59f5e75f3bced8fc0e130d72a3f582cf7b480b46',
-                'https://lists.apache.org/thread.html/r18995de860f0e63635f3008fd2a6aca82394249476d21691e7c59c9e%40%3Cdev.tomcat.apache.org%3E',
-                'https://lists.apache.org/thread.html/r18995de860f0e63635f3008fd2a6aca82394249476d21691e7c59c9e@%3Cdev.tomcat.apache.org%3E',
-                'https://lists.apache.org/thread.html/rad5d9f83f0d11fb3f8bb148d179b8a9ad7c6a17f18d70e5805a713d1%40%3Cdev.tomcat.apache.org%3E',
-                'https://lists.apache.org/thread.html/rad5d9f83f0d11fb3f8bb148d179b8a9ad7c6a17f18d70e5805a713d1@%3Cdev.tomcat.apache.org%3E',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-3711',
-                'https://rustsec.org/advisories/RUSTSEC-2021-0097.html',
-                'https://security.gentoo.org/glsa/202209-02',
-                'https://security.gentoo.org/glsa/202210-02',
-                'https://security.netapp.com/advisory/ntap-20210827-0010',
-                'https://security.netapp.com/advisory/ntap-20210827-0010/',
-                'https://security.netapp.com/advisory/ntap-20211022-0003',
-                'https://security.netapp.com/advisory/ntap-20211022-0003/',
-                'https://security.netapp.com/advisory/ntap-20240621-0006',
-                'https://security.netapp.com/advisory/ntap-20240621-0006/',
-                'https://ubuntu.com/security/notices/USN-5051-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-3711',
-                'https://www.debian.org/security/2021/dsa-4963',
-                'https://www.openssl.org/news/secadv/20210824.txt',
-                'https://www.oracle.com/security-alerts/cpuapr2022.html',
-                'https://www.oracle.com/security-alerts/cpujan2022.html',
-                'https://www.oracle.com/security-alerts/cpuoct2021.html',
-                'https://www.tenable.com/security/tns-2021-16',
-                'https://www.tenable.com/security/tns-2022-02'
-              ],
-              'severity':   'CRITICAL',
-              'suppressed': false,
-              'title':      'openssl: SM2 Decryption Buffer Overflow'
-            },
-            {
-              'cve':  'CVE-2021-23840',
-              'cvss': {
-                'bitnami': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'ghsa': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'nvd': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-190'
-              ],
-              'description':   'Calls to EVP_CipherUpdate, EVP_EncryptUpdate and EVP_DecryptUpdate may overflow the output length argument in some cases where the input length is close to the maximum permissable length for an integer on the platform. In such cases the return value from the function call will be 1 (indicating success), but the output length value will be negative. This could cause applications to behave incorrectly or crash. OpenSSL versions 1.1.1i and below are affected by this issue. Users of these versions should upgrade to OpenSSL 1.1.1j. OpenSSL versions 1.0.2x and below are affected by this issue. However OpenSSL 1.0.2 is out of support and no longer receiving public updates. Premium support customers of OpenSSL 1.0.2 should upgrade to 1.0.2y. Other users should upgrade to 1.1.1j. Fixed in OpenSSL 1.1.1j (Affected 1.1.1-1.1.1i). Fixed in OpenSSL 1.0.2y (Affected 1.0.2-1.0.2x).',
-              'diffID':        'sha256:c982e88d8e8d015a1e98891266e62b05b4c3d2986986ec2a988d7097150b7437',
-              'fixedVersions': [
-                '1.1.1j-r0'
-              ],
-              'installedVersion': '1.1.1i-r0',
-              'packageName':      'libssl1.1',
-              'purl':             'pkg:apk/alpine/libssl1.1@1.1.1i-r0?arch=x86&distro=3.12.3',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-23840',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=1908036',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=1930310',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=1930324',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=1934534',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=1934600',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=1939637',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=1940085',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=1965362',
-                'https://cert-portal.siemens.com/productcert/pdf/ssa-389290.pdf',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-23840',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-23841',
-                'https://errata.rockylinux.org/RLSA-2021:4424',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=6a51b9e1d0cf0bf8515f7201b68fb0a3482b3dc1',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=9b1129239f3ebb1d1c98ce9ed41d5c9476c47cb2',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=6a51b9e1d0cf0bf8515f7201b68fb0a3482b3dc1',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=9b1129239f3ebb1d1c98ce9ed41d5c9476c47cb2',
-                'https://github.com/alexcrichton/openssl-src-rs',
-                'https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA44846',
-                'https://kc.mcafee.com/corporate/index?page=content&id=SB10366',
-                'https://linux.oracle.com/cve/CVE-2021-23840.html',
-                'https://linux.oracle.com/errata/ELSA-2021-9561.html',
-                'https://lists.apache.org/thread.html/r58af02e294bd07f487e2c64ffc0a29b837db5600e33b6e698b9d696b%40%3Cissues.bookkeeper.apache.org%3E',
-                'https://lists.apache.org/thread.html/r58af02e294bd07f487e2c64ffc0a29b837db5600e33b6e698b9d696b@%3Cissues.bookkeeper.apache.org%3E',
-                'https://lists.apache.org/thread.html/rf4c02775860db415b4955778a131c2795223f61cb8c6a450893651e4%40%3Cissues.bookkeeper.apache.org%3E',
-                'https://lists.apache.org/thread.html/rf4c02775860db415b4955778a131c2795223f61cb8c6a450893651e4@%3Cissues.bookkeeper.apache.org%3E',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-23840',
-                'https://rustsec.org/advisories/RUSTSEC-2021-0057.html',
-                'https://security.gentoo.org/glsa/202103-03',
-                'https://security.netapp.com/advisory/ntap-20210219-0009',
-                'https://security.netapp.com/advisory/ntap-20210219-0009/',
-                'https://security.netapp.com/advisory/ntap-20240621-0006/',
-                'https://ubuntu.com/security/notices/USN-4738-1',
-                'https://ubuntu.com/security/notices/USN-5088-1',
-                'https://ubuntu.com/security/notices/USN-7018-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-23840',
-                'https://www.debian.org/security/2021/dsa-4855',
-                'https://www.openssl.org/news/secadv/20210216.txt',
-                'https://www.oracle.com//security-alerts/cpujul2021.html',
-                'https://www.oracle.com/security-alerts/cpuApr2021.html',
-                'https://www.oracle.com/security-alerts/cpuapr2022.html',
-                'https://www.oracle.com/security-alerts/cpujan2022.html',
-                'https://www.oracle.com/security-alerts/cpuoct2021.html',
-                'https://www.tenable.com/security/tns-2021-03',
-                'https://www.tenable.com/security/tns-2021-09',
-                'https://www.tenable.com/security/tns-2021-10'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: integer overflow in CipherUpdate'
-            },
-            {
-              'cve':  'CVE-2021-3450',
-              'cvss': {
-                'bitnami': {
-                  'v3score':  '7.4',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N'
-                },
-                'ghsa': {
-                  'v3score':  '7.4',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N'
-                },
-                'nvd': {
-                  'v3score':  '7.4',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N'
-                },
-                'redhat': {
-                  'v3score':  '7.4',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-295'
-              ],
-              'description':   'The X509_V_FLAG_X509_STRICT flag enables additional security checks of the certificates present in a certificate chain. It is not set by default. Starting from OpenSSL version 1.1.1h a check to disallow certificates in the chain that have explicitly encoded elliptic curve parameters was added as an additional strict check. An error in the implementation of this check meant that the result of a previous check to confirm that certificates in the chain are valid CA certificates was overwritten. This effectively bypasses the check that non-CA certificates must not be able to issue other certificates. If a "purpose" has been configured then there is a subsequent opportunity for checks that the certificate is a valid CA. All of the named "purpose" values implemented in libcrypto perform this check. Therefore, where a purpose is set the certificate chain will still be rejected even when the strict flag has been used. A purpose is set by default in libssl client and server certificate verification routines, but it can be overridden or removed by an application. In order to be affected, an application must explicitly set the X509_V_FLAG_X509_STRICT verification flag and either not set a purpose for the certificate verification or, in the case of TLS client or server applications, override the default purpose. OpenSSL versions 1.1.1h and newer are affected by this issue. Users of these versions should upgrade to OpenSSL 1.1.1k. OpenSSL 1.0.2 is not impacted by this issue. Fixed in OpenSSL 1.1.1k (Affected 1.1.1h-1.1.1j).',
-              'diffID':        'sha256:c982e88d8e8d015a1e98891266e62b05b4c3d2986986ec2a988d7097150b7437',
-              'fixedVersions': [
-                '1.1.1k-r0'
-              ],
-              'installedVersion': '1.1.1i-r0',
-              'packageName':      'libssl1.1',
-              'purl':             'pkg:apk/alpine/libssl1.1@1.1.1i-r0?arch=x86&distro=3.12.3',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2021/03/27/1',
-                'http://www.openwall.com/lists/oss-security/2021/03/27/2',
-                'http://www.openwall.com/lists/oss-security/2021/03/28/3',
-                'http://www.openwall.com/lists/oss-security/2021/03/28/4',
-                'https://access.redhat.com/security/cve/CVE-2021-3450',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=1941547',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=1941554',
-                'https://cert-portal.siemens.com/productcert/pdf/ssa-389290.pdf',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-3449',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-3450',
-                'https://errata.rockylinux.org/RLSA-2021:1024',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=2a40b7bc7b94dd7de897a74571e7024f0cf0d63b',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=2a40b7bc7b94dd7de897a74571e7024f0cf0d63b',
-                'https://github.com/alexcrichton/openssl-src-rs',
-                'https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA44845',
-                'https://kc.mcafee.com/corporate/index?page=content&id=SB10356',
-                'https://linux.oracle.com/cve/CVE-2021-3450.html',
-                'https://linux.oracle.com/errata/ELSA-2021-9151.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CCBFLLVQVILIVGZMBJL3IXZGKWQISYNP/',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/CCBFLLVQVILIVGZMBJL3IXZGKWQISYNP',
-                'https://mta.openssl.org/pipermail/openssl-announce/2021-March/000198.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-3450',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2021-0013',
-                'https://rustsec.org/advisories/RUSTSEC-2021-0056.html',
-                'https://security.FreeBSD.org/advisories/FreeBSD-SA-21:07.openssl.asc',
-                'https://security.gentoo.org/glsa/202103-03',
-                'https://security.netapp.com/advisory/ntap-20210326-0006',
-                'https://security.netapp.com/advisory/ntap-20210326-0006/',
-                'https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-openssl-2021-GHY28dJd',
-                'https://www.cve.org/CVERecord?id=CVE-2021-3450',
-                'https://www.openssl.org/news/secadv/20210325.txt',
-                'https://www.oracle.com//security-alerts/cpujul2021.html',
-                'https://www.oracle.com/security-alerts/cpuApr2021.html',
-                'https://www.oracle.com/security-alerts/cpuapr2022.html',
-                'https://www.oracle.com/security-alerts/cpujul2022.html',
-                'https://www.oracle.com/security-alerts/cpuoct2021.html',
-                'https://www.tenable.com/security/tns-2021-05',
-                'https://www.tenable.com/security/tns-2021-08',
-                'https://www.tenable.com/security/tns-2021-09'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: CA certificate check bypass with X509_V_FLAG_X509_STRICT'
-            },
-            {
-              'cve':  'CVE-2021-3712',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '7.4',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H'
-                },
-                'nvd': {
-                  'v3score':  '7.4',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.4',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-125'
-              ],
-              'description':   "ASN.1 strings are represented internally within OpenSSL as an ASN1_STRING structure which contains a buffer holding the string data and a field holding the buffer length. This contrasts with normal C strings which are repesented as a buffer for the string data which is terminated with a NUL (0) byte. Although not a strict requirement, ASN.1 strings that are parsed using OpenSSL's own \"d2i\" functions (and other similar parsing functions) as well as any string whose value has been set with the ASN1_STRING_set() function will additionally NUL terminate the byte array in the ASN1_STRING structure. However, it is possible for applications to directly construct valid ASN1_STRING structures which do not NUL terminate the byte array by directly setting the \"data\" and \"length\" fields in the ASN1_STRING array. This can also happen by using the ASN1_STRING_set0() function. Numerous OpenSSL functions that print ASN.1 data have been found to assume that the ASN1_STRING byte array will be NUL terminated, even though this is not guaranteed for strings that have been directly constructed. Where an application requests an ASN.1 structure to be printed, and where that ASN.1 structure contains ASN1_STRINGs that have been directly constructed by the application without NUL terminating the \"data\" field, then a read buffer overrun can occur. The same thing can also occur during name constraints processing of certificates (for example if a certificate has been directly constructed by the application instead of loading it via the OpenSSL parsing functions, and the certificate contains non NUL terminated ASN1_STRING structures). It can also occur in the X509_get1_email(), X509_REQ_get1_email() and X509_get1_ocsp() functions. If a malicious actor can cause an application to directly construct an ASN1_STRING and then process it through one of the affected OpenSSL functions then this issue could be hit. This might result in a crash (causing a Denial of Service attack). It could also result in the disclosure of private memory contents (such as private keys, or sensitive plaintext). Fixed in OpenSSL 1.1.1l (Affected 1.1.1-1.1.1k). Fixed in OpenSSL 1.0.2za (Affected 1.0.2-1.0.2y).",
-              'diffID':        'sha256:c982e88d8e8d015a1e98891266e62b05b4c3d2986986ec2a988d7097150b7437',
-              'fixedVersions': [
-                '1.1.1l-r0'
-              ],
-              'installedVersion': '1.1.1i-r0',
-              'packageName':      'libssl1.1',
-              'purl':             'pkg:apk/alpine/libssl1.1@1.1.1i-r0?arch=x86&distro=3.12.3',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2021/08/26/2',
-                'https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2021-3712.json',
-                'https://access.redhat.com/security/cve/CVE-2021-3712',
-                'https://cert-portal.siemens.com/productcert/pdf/ssa-244969.pdf',
-                'https://cert-portal.siemens.com/productcert/pdf/ssa-389290.pdf',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=94d23fcff9b2a7a8368dfe52214d5c2569882c11',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=ccb0a11145ee72b042d10593a64eaf9e8a55ec12',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=94d23fcff9b2a7a8368dfe52214d5c2569882c11',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=ccb0a11145ee72b042d10593a64eaf9e8a55ec12',
-                'https://kc.mcafee.com/corporate/index?page=content&id=SB10366',
-                'https://linux.oracle.com/cve/CVE-2021-3712.html',
-                'https://linux.oracle.com/errata/ELSA-2022-9023.html',
-                'https://lists.apache.org/thread.html/r18995de860f0e63635f3008fd2a6aca82394249476d21691e7c59c9e%40%3Cdev.tomcat.apache.org%3E',
-                'https://lists.apache.org/thread.html/r18995de860f0e63635f3008fd2a6aca82394249476d21691e7c59c9e@%3Cdev.tomcat.apache.org%3E',
-                'https://lists.apache.org/thread.html/rad5d9f83f0d11fb3f8bb148d179b8a9ad7c6a17f18d70e5805a713d1%40%3Cdev.tomcat.apache.org%3E',
-                'https://lists.apache.org/thread.html/rad5d9f83f0d11fb3f8bb148d179b8a9ad7c6a17f18d70e5805a713d1@%3Cdev.tomcat.apache.org%3E',
-                'https://lists.debian.org/debian-lts-announce/2021/09/msg00014.html',
-                'https://lists.debian.org/debian-lts-announce/2021/09/msg00021.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-3712',
-                'https://rustsec.org/advisories/RUSTSEC-2021-0098.html',
-                'https://security.gentoo.org/glsa/202209-02',
-                'https://security.gentoo.org/glsa/202210-02',
-                'https://security.netapp.com/advisory/ntap-20210827-0010',
-                'https://security.netapp.com/advisory/ntap-20210827-0010/',
-                'https://security.netapp.com/advisory/ntap-20240621-0006',
-                'https://security.netapp.com/advisory/ntap-20240621-0006/',
-                'https://ubuntu.com/security/notices/USN-5051-1',
-                'https://ubuntu.com/security/notices/USN-5051-2',
-                'https://ubuntu.com/security/notices/USN-5051-3',
-                'https://ubuntu.com/security/notices/USN-5051-4 (regression only in trusty/esm)',
-                'https://ubuntu.com/security/notices/USN-5088-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-3712',
-                'https://www.debian.org/security/2021/dsa-4963',
-                'https://www.openssl.org/news/secadv/20210824.txt',
-                'https://www.oracle.com/security-alerts/cpuapr2022.html',
-                'https://www.oracle.com/security-alerts/cpujan2022.html',
-                'https://www.oracle.com/security-alerts/cpuoct2021.html',
-                'https://www.tenable.com/security/tns-2021-16',
-                'https://www.tenable.com/security/tns-2022-02'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: Read buffer overruns processing ASN.1 strings'
-            },
-            {
-              'cve':  'CVE-2022-0778',
-              'cvss': {
-                'bitnami': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'ghsa': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'nvd': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-835'
-              ],
-              'description':   'The BN_mod_sqrt() function, which computes a modular square root, contains a bug that can cause it to loop forever for non-prime moduli. Internally this function is used when parsing certificates that contain elliptic curve public keys in compressed form or explicit elliptic curve parameters with a base point encoded in compressed form. It is possible to trigger the infinite loop by crafting a certificate that has invalid explicit curve parameters. Since certificate parsing happens prior to verification of the certificate signature, any process that parses an externally supplied certificate may thus be subject to a denial of service attack. The infinite loop can also be reached when parsing crafted private keys as they can contain explicit elliptic curve parameters. Thus vulnerable situations include: - TLS clients consuming server certificates - TLS servers consuming client certificates - Hosting providers taking certificates or private keys from customers - Certificate authorities parsing certification requests from subscribers - Anything else which parses ASN.1 elliptic curve parameters Also any other applications that use the BN_mod_sqrt() where the attacker can control the parameter values are vulnerable to this DoS issue. In the OpenSSL 1.0.2 version the public key is not parsed during initial parsing of the certificate which makes it slightly harder to trigger the infinite loop. However any operation which requires the public key from the certificate will trigger the infinite loop. In particular the attacker can use a self-signed certificate to trigger the loop during verification of the certificate signature. This issue affects OpenSSL versions 1.0.2, 1.1.1 and 3.0. It was addressed in the releases of 1.1.1n and 3.0.2 on the 15th March 2022. Fixed in OpenSSL 3.0.2 (Affected 3.0.0,3.0.1). Fixed in OpenSSL 1.1.1n (Affected 1.1.1-1.1.1m). Fixed in OpenSSL 1.0.2zd (Affected 1.0.2-1.0.2zc).',
-              'diffID':        'sha256:c982e88d8e8d015a1e98891266e62b05b4c3d2986986ec2a988d7097150b7437',
-              'fixedVersions': [
-                '1.1.1n-r0'
-              ],
-              'installedVersion': '1.1.1i-r0',
-              'packageName':      'libssl1.1',
-              'purl':             'pkg:apk/alpine/libssl1.1@1.1.1i-r0?arch=x86&distro=3.12.3',
-              'references':       [
-                'http://packetstormsecurity.com/files/167344/OpenSSL-1.0.2-1.1.1-3.0-BN_mod_sqrt-Infinite-Loop.html',
-                'http://seclists.org/fulldisclosure/2022/May/33',
-                'http://seclists.org/fulldisclosure/2022/May/35',
-                'http://seclists.org/fulldisclosure/2022/May/38',
-                'https://access.redhat.com/errata/RHSA-2022:5326',
-                'https://access.redhat.com/security/cve/CVE-2022-0778',
-                'https://bugzilla.redhat.com/2062202',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2062202',
-                'https://cert-portal.siemens.com/productcert/pdf/ssa-712929.pdf',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-0778',
-                'https://errata.almalinux.org/8/ALSA-2022-5326.html',
-                'https://errata.rockylinux.org/RLSA-2022:4899',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=3118eb64934499d93db3230748a452351d1d9a65',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=380085481c64de749a6dd25cdf0bcf4360b30f83',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=a466912611aa6cbdf550cd10601390e587451246',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=3118eb64934499d93db3230748a452351d1d9a65',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=380085481c64de749a6dd25cdf0bcf4360b30f83',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=a466912611aa6cbdf550cd10601390e587451246',
-                'https://linux.oracle.com/cve/CVE-2022-0778.html',
-                'https://linux.oracle.com/errata/ELSA-2022-9272.html',
-                'https://lists.debian.org/debian-lts-announce/2022/03/msg00023.html',
-                'https://lists.debian.org/debian-lts-announce/2022/03/msg00024.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/323SNN6ZX7PRJJWP2BUAFLPUAE42XWLZ',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/323SNN6ZX7PRJJWP2BUAFLPUAE42XWLZ/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GDB3GQVJPXJE7X5C5JN6JAA4XUDWD6E6',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GDB3GQVJPXJE7X5C5JN6JAA4XUDWD6E6/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/W6K3PR542DXWLEFFMFIDMME4CWMHJRMG',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/W6K3PR542DXWLEFFMFIDMME4CWMHJRMG/',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/323SNN6ZX7PRJJWP2BUAFLPUAE42XWLZ',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/GDB3GQVJPXJE7X5C5JN6JAA4XUDWD6E6',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/W6K3PR542DXWLEFFMFIDMME4CWMHJRMG',
-                'https://nvd.nist.gov/vuln/detail/CVE-2022-0778',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2022-0002',
-                'https://rustsec.org/advisories/RUSTSEC-2022-0014.html',
-                'https://security.gentoo.org/glsa/202210-02',
-                'https://security.netapp.com/advisory/ntap-20220321-0002',
-                'https://security.netapp.com/advisory/ntap-20220321-0002/',
-                'https://security.netapp.com/advisory/ntap-20220429-0005',
-                'https://security.netapp.com/advisory/ntap-20220429-0005/',
-                'https://security.netapp.com/advisory/ntap-20240621-0006',
-                'https://security.netapp.com/advisory/ntap-20240621-0006/',
-                'https://support.apple.com/kb/HT213255',
-                'https://support.apple.com/kb/HT213256',
-                'https://support.apple.com/kb/HT213257',
-                'https://ubuntu.com/security/notices/USN-5328-1',
-                'https://ubuntu.com/security/notices/USN-5328-2',
-                'https://ubuntu.com/security/notices/USN-6457-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2022-0778',
-                'https://www.debian.org/security/2022/dsa-5103',
-                'https://www.openssl.org/news/secadv/20220315.txt',
-                'https://www.oracle.com/security-alerts/cpuapr2022.html',
-                'https://www.oracle.com/security-alerts/cpujul2022.html',
-                'https://www.tenable.com/security/tns-2022-06',
-                'https://www.tenable.com/security/tns-2022-07',
-                'https://www.tenable.com/security/tns-2022-08',
-                'https://www.tenable.com/security/tns-2022-09'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: Infinite loop in BN_mod_sqrt() reachable when parsing certificates'
-            },
-            {
-              'cve':  'CVE-2021-23841',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'nvd': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-476'
-              ],
-              'description':   'The OpenSSL public API function X509_issuer_and_serial_hash() attempts to create a unique hash value based on the issuer and serial number data contained within an X509 certificate. However it fails to correctly handle any errors that may occur while parsing the issuer field (which might occur if the issuer field is maliciously constructed). This may subsequently result in a NULL pointer deref and a crash leading to a potential denial of service attack. The function X509_issuer_and_serial_hash() is never directly called by OpenSSL itself so applications are only vulnerable if they use this function directly and they use it on certificates that may have been obtained from untrusted sources. OpenSSL versions 1.1.1i and below are affected by this issue. Users of these versions should upgrade to OpenSSL 1.1.1j. OpenSSL versions 1.0.2x and below are affected by this issue. However OpenSSL 1.0.2 is out of support and no longer receiving public updates. Premium support customers of OpenSSL 1.0.2 should upgrade to 1.0.2y. Other users should upgrade to 1.1.1j. Fixed in OpenSSL 1.1.1j (Affected 1.1.1-1.1.1i). Fixed in OpenSSL 1.0.2y (Affected 1.0.2-1.0.2x).',
-              'diffID':        'sha256:c982e88d8e8d015a1e98891266e62b05b4c3d2986986ec2a988d7097150b7437',
-              'fixedVersions': [
-                '1.1.1j-r0'
-              ],
-              'installedVersion': '1.1.1i-r0',
-              'packageName':      'libssl1.1',
-              'purl':             'pkg:apk/alpine/libssl1.1@1.1.1i-r0?arch=x86&distro=3.12.3',
-              'references':       [
-                'http://seclists.org/fulldisclosure/2021/May/67',
-                'http://seclists.org/fulldisclosure/2021/May/68',
-                'http://seclists.org/fulldisclosure/2021/May/70',
-                'https://access.redhat.com/security/cve/CVE-2021-23841',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=1908036',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=1930310',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=1930324',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=1934534',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=1934600',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=1939637',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=1940085',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=1965362',
-                'https://cert-portal.siemens.com/productcert/pdf/ssa-637483.pdf',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-23840',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-23841',
-                'https://errata.rockylinux.org/RLSA-2021:4424',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=122a19ab48091c657f7cb1fb3af9fc07bd557bbf',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=8252ee4d90f3f2004d3d0aeeed003ad49c9a7807',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=122a19ab48091c657f7cb1fb3af9fc07bd557bbf',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=6a51b9e1d0cf0bf8515f7201b68fb0a3482b3dc1',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=8252ee4d90f3f2004d3d0aeeed003ad49c9a7807',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=9b1129239f3ebb1d1c98ce9ed41d5c9476c47cb2',
-                'https://github.com/alexcrichton/openssl-src-rs',
-                'https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA44846',
-                'https://linux.oracle.com/cve/CVE-2021-23841.html',
-                'https://linux.oracle.com/errata/ELSA-2021-9561.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-23841',
-                'https://rustsec.org/advisories/RUSTSEC-2021-0058',
-                'https://rustsec.org/advisories/RUSTSEC-2021-0058.html',
-                'https://security.gentoo.org/glsa/202103-03',
-                'https://security.netapp.com/advisory/ntap-20210219-0009',
-                'https://security.netapp.com/advisory/ntap-20210219-0009/',
-                'https://security.netapp.com/advisory/ntap-20210513-0002',
-                'https://security.netapp.com/advisory/ntap-20210513-0002/',
-                'https://security.netapp.com/advisory/ntap-20240621-0006/',
-                'https://support.apple.com/kb/HT212528',
-                'https://support.apple.com/kb/HT212529',
-                'https://support.apple.com/kb/HT212534',
-                'https://ubuntu.com/security/notices/USN-4738-1',
-                'https://ubuntu.com/security/notices/USN-4745-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-23841',
-                'https://www.debian.org/security/2021/dsa-4855',
-                'https://www.openssl.org/news/secadv/20210216.txt',
-                'https://www.oracle.com//security-alerts/cpujul2021.html',
-                'https://www.oracle.com/security-alerts/cpuApr2021.html',
-                'https://www.oracle.com/security-alerts/cpuapr2022.html',
-                'https://www.oracle.com/security-alerts/cpuoct2021.html',
-                'https://www.tenable.com/security/tns-2021-03',
-                'https://www.tenable.com/security/tns-2021-09'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: NULL pointer dereference in X509_issuer_and_serial_hash()'
-            },
-            {
-              'cve':  'CVE-2021-3449',
-              'cvss': {
-                'bitnami': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'ghsa': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'nvd': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-476'
-              ],
-              'description':   'An OpenSSL TLS server may crash if sent a maliciously crafted renegotiation ClientHello message from a client. If a TLSv1.2 renegotiation ClientHello omits the signature_algorithms extension (where it was present in the initial ClientHello), but includes a signature_algorithms_cert extension then a NULL pointer dereference will result, leading to a crash and a denial of service attack. A server is only vulnerable if it has TLSv1.2 and renegotiation enabled (which is the default configuration). OpenSSL TLS clients are not impacted by this issue. All OpenSSL 1.1.1 versions are affected by this issue. Users of these versions should upgrade to OpenSSL 1.1.1k. OpenSSL 1.0.2 is not impacted by this issue. Fixed in OpenSSL 1.1.1k (Affected 1.1.1-1.1.1j).',
-              'diffID':        'sha256:c982e88d8e8d015a1e98891266e62b05b4c3d2986986ec2a988d7097150b7437',
-              'fixedVersions': [
-                '1.1.1k-r0'
-              ],
-              'installedVersion': '1.1.1i-r0',
-              'packageName':      'libssl1.1',
-              'purl':             'pkg:apk/alpine/libssl1.1@1.1.1i-r0?arch=x86&distro=3.12.3',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2021/03/27/1',
-                'http://www.openwall.com/lists/oss-security/2021/03/27/2',
-                'http://www.openwall.com/lists/oss-security/2021/03/28/3',
-                'http://www.openwall.com/lists/oss-security/2021/03/28/4',
-                'https://access.redhat.com/security/cve/CVE-2021-3449',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=1941547',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=1941554',
-                'https://cert-portal.siemens.com/productcert/pdf/ssa-389290.pdf',
-                'https://cert-portal.siemens.com/productcert/pdf/ssa-772220.pdf',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-3449',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-3450',
-                'https://errata.rockylinux.org/RLSA-2021:1024',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=fb9fa6b51defd48157eeb207f52181f735d96148',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=fb9fa6b51defd48157eeb207f52181f735d96148',
-                'https://github.com/alexcrichton/openssl-src-rs',
-                'https://github.com/nodejs/node/pull/38083',
-                'https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA44845',
-                'https://kc.mcafee.com/corporate/index?page=content&id=SB10356',
-                'https://linux.oracle.com/cve/CVE-2021-3449.html',
-                'https://linux.oracle.com/errata/ELSA-2021-9151.html',
-                'https://lists.debian.org/debian-lts-announce/2021/08/msg00029.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CCBFLLVQVILIVGZMBJL3IXZGKWQISYNP/',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/CCBFLLVQVILIVGZMBJL3IXZGKWQISYNP',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-3449',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2021-0013',
-                'https://rustsec.org/advisories/RUSTSEC-2021-0055',
-                'https://rustsec.org/advisories/RUSTSEC-2021-0055.html',
-                'https://security.FreeBSD.org/advisories/FreeBSD-SA-21:07.openssl.asc',
-                'https://security.gentoo.org/glsa/202103-03',
-                'https://security.netapp.com/advisory/ntap-20210326-0006',
-                'https://security.netapp.com/advisory/ntap-20210326-0006/',
-                'https://security.netapp.com/advisory/ntap-20210513-0002',
-                'https://security.netapp.com/advisory/ntap-20210513-0002/',
-                'https://security.netapp.com/advisory/ntap-20240621-0006/',
-                'https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-openssl-2021-GHY28dJd',
-                'https://ubuntu.com/security/notices/USN-4891-1',
-                'https://ubuntu.com/security/notices/USN-5038-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-3449',
-                'https://www.debian.org/security/2021/dsa-4875',
-                'https://www.openssl.org/news/secadv/20210325.txt',
-                'https://www.oracle.com//security-alerts/cpujul2021.html',
-                'https://www.oracle.com/security-alerts/cpuApr2021.html',
-                'https://www.oracle.com/security-alerts/cpuapr2022.html',
-                'https://www.oracle.com/security-alerts/cpujul2022.html',
-                'https://www.oracle.com/security-alerts/cpuoct2021.html',
-                'https://www.tenable.com/security/tns-2021-05',
-                'https://www.tenable.com/security/tns-2021-06',
-                'https://www.tenable.com/security/tns-2021-09',
-                'https://www.tenable.com/security/tns-2021-10'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: NULL pointer dereference in signature_algorithms processing'
-            },
-            {
-              'cve':  'CVE-2021-23839',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '3.7',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N'
-                },
-                'redhat': {
-                  'v3score':  '3.7',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-327'
-              ],
-              'description':   'OpenSSL 1.0.2 supports SSLv2. If a client attempts to negotiate SSLv2 with a server that is configured to support both SSLv2 and more recent SSL and TLS versions then a check is made for a version rollback attack when unpadding an RSA signature. Clients that support SSL or TLS versions greater than SSLv2 are supposed to use a special form of padding. A server that supports greater than SSLv2 is supposed to reject connection attempts from a client where this special form of padding is present, because this indicates that a version rollback has occurred (i.e. both client and server support greater than SSLv2, and yet this is the version that is being requested). The implementation of this padding check inverted the logic so that the connection attempt is accepted if the padding is present, and rejected if it is absent. This means that such as server will accept a connection if a version rollback attack has occurred. Further the server will erroneously reject a connection if a normal SSLv2 connection attempt is made. Only OpenSSL 1.0.2 servers from version 1.0.2s to 1.0.2x are affected by this issue. In order to be vulnerable a 1.0.2 server must: 1) have configured SSLv2 support at compile time (this is off by default), 2) have configured SSLv2 support at runtime (this is off by default), 3) have configured SSLv2 ciphersuites (these are not in the default ciphersuite list) OpenSSL 1.1.1 does not have SSLv2 support and therefore is not vulnerable to this issue. The underlying error is in the implementation of the RSA_padding_check_SSLv23() function. This also affects the RSA_SSLV23_PADDING padding mode used by various other functions. Although 1.1.1 does not support SSLv2 the RSA_padding_check_SSLv23() function still exists, as does the RSA_SSLV23_PADDING padding mode. Applications that directly call that function or use that padding mode will encounter this issue. However since there is no support for the SSLv2 protocol in 1.1.1 this is considered a bug and not a security issue in that version. OpenSSL 1.0.2 is out of support and no longer receiving public updates. Premium support customers of OpenSSL 1.0.2 should upgrade to 1.0.2y. Other users should upgrade to 1.1.1j. Fixed in OpenSSL 1.0.2y (Affected 1.0.2s-1.0.2x).',
-              'diffID':        'sha256:c982e88d8e8d015a1e98891266e62b05b4c3d2986986ec2a988d7097150b7437',
-              'fixedVersions': [
-                '1.1.1j-r0'
-              ],
-              'installedVersion': '1.1.1i-r0',
-              'packageName':      'libssl1.1',
-              'purl':             'pkg:apk/alpine/libssl1.1@1.1.1i-r0?arch=x86&distro=3.12.3',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-23839',
-                'https://cert-portal.siemens.com/productcert/pdf/ssa-637483.pdf',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=30919ab80a478f2d81f2e9acdcca3fa4740cd547',
-                'https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA44846',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-23839',
-                'https://security.netapp.com/advisory/ntap-20210219-0009/',
-                'https://security.netapp.com/advisory/ntap-20240621-0006/',
-                'https://www.cve.org/CVERecord?id=CVE-2021-23839',
-                'https://www.openssl.org/news/secadv/20210216.txt',
-                'https://www.oracle.com//security-alerts/cpujul2021.html',
-                'https://www.oracle.com/security-alerts/cpuApr2021.html',
-                'https://www.oracle.com/security-alerts/cpuapr2022.html',
-                'https://www.oracle.com/security-alerts/cpuoct2021.html'
-              ],
-              'severity':   'LOW',
-              'suppressed': false,
-              'title':      'openssl: incorrect SSLv2 rollback protection'
-            },
-            {
-              'cve':  'CVE-2021-28831',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-755'
-              ],
-              'description':   'decompress_gunzip.c in BusyBox through 1.32.1 mishandles the error bit on the huft_build result pointer, with a resultant invalid free or segmentation fault, via malformed gzip data.',
-              'diffID':        'sha256:c982e88d8e8d015a1e98891266e62b05b4c3d2986986ec2a988d7097150b7437',
-              'fixedVersions': [
-                '1.31.1-r20'
-              ],
-              'installedVersion': '1.31.1-r19',
-              'packageName':      'ssl_client',
-              'purl':             'pkg:apk/alpine/ssl_client@1.31.1-r19?arch=x86&distro=3.12.3',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-28831',
-                'https://git.busybox.net/busybox/commit/?id=f25d254dfd4243698c31a4f3153d4ac72aa9e9bd',
-                'https://lists.debian.org/debian-lts-announce/2021/04/msg00001.html',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/3UDQGJRECXFS5EZVDH2OI45FMO436AC4/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/Z7ZIFKPRR32ZYA3WAA2NXFA3QHHOU6FJ/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZASBW7QRRLY5V2R44MQ4QQM4CZIDHM2U/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-28831',
-                'https://security.gentoo.org/glsa/202105-09',
-                'https://security.netapp.com/advisory/ntap-20250509-0005/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://ubuntu.com/security/notices/USN-5179-2',
-                'https://ubuntu.com/security/notices/USN-6335-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-28831'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: invalid free or segmentation fault via malformed gzip data'
-            },
-            {
-              'cve':  'CVE-2021-42378',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the getvar_i function",
-              'diffID':        'sha256:c982e88d8e8d015a1e98891266e62b05b4c3d2986986ec2a988d7097150b7437',
-              'fixedVersions': [
-                '1.31.1-r21'
-              ],
-              'installedVersion': '1.31.1-r19',
-              'packageName':      'ssl_client',
-              'purl':             'pkg:apk/alpine/ssl_client@1.31.1-r19?arch=x86&distro=3.12.3',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42378',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42378',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42378'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the getvar_i()'
-            },
-            {
-              'cve':  'CVE-2021-42379',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the next_input_file function",
-              'diffID':        'sha256:c982e88d8e8d015a1e98891266e62b05b4c3d2986986ec2a988d7097150b7437',
-              'fixedVersions': [
-                '1.31.1-r21'
-              ],
-              'installedVersion': '1.31.1-r19',
-              'packageName':      'ssl_client',
-              'purl':             'pkg:apk/alpine/ssl_client@1.31.1-r19?arch=x86&distro=3.12.3',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42379',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42379',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42379'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the next_input_file()'
-            },
-            {
-              'cve':  'CVE-2021-42380',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the clrvar function",
-              'diffID':        'sha256:c982e88d8e8d015a1e98891266e62b05b4c3d2986986ec2a988d7097150b7437',
-              'fixedVersions': [
-                '1.31.1-r21'
-              ],
-              'installedVersion': '1.31.1-r19',
-              'packageName':      'ssl_client',
-              'purl':             'pkg:apk/alpine/ssl_client@1.31.1-r19?arch=x86&distro=3.12.3',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42380',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42380',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42380'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the clrvar()'
-            },
-            {
-              'cve':  'CVE-2021-42381',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the hash_init function",
-              'diffID':        'sha256:c982e88d8e8d015a1e98891266e62b05b4c3d2986986ec2a988d7097150b7437',
-              'fixedVersions': [
-                '1.31.1-r21'
-              ],
-              'installedVersion': '1.31.1-r19',
-              'packageName':      'ssl_client',
-              'purl':             'pkg:apk/alpine/ssl_client@1.31.1-r19?arch=x86&distro=3.12.3',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42381',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42381',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42381'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the hash_init()'
-            },
-            {
-              'cve':  'CVE-2021-42382',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the getvar_s function",
-              'diffID':        'sha256:c982e88d8e8d015a1e98891266e62b05b4c3d2986986ec2a988d7097150b7437',
-              'fixedVersions': [
-                '1.31.1-r21'
-              ],
-              'installedVersion': '1.31.1-r19',
-              'packageName':      'ssl_client',
-              'purl':             'pkg:apk/alpine/ssl_client@1.31.1-r19?arch=x86&distro=3.12.3',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42382',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42382',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42382'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the getvar_s()'
-            },
-            {
-              'cve':  'CVE-2021-42383',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the evaluate function",
-              'diffID':        'sha256:c982e88d8e8d015a1e98891266e62b05b4c3d2986986ec2a988d7097150b7437',
-              'fixedVersions': [
-                '1.31.1-r21'
-              ],
-              'installedVersion': '1.31.1-r19',
-              'packageName':      'ssl_client',
-              'purl':             'pkg:apk/alpine/ssl_client@1.31.1-r19?arch=x86&distro=3.12.3',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42383',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42383',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42383'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the evaluate()'
-            },
-            {
-              'cve':  'CVE-2021-42384',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the handle_special function",
-              'diffID':        'sha256:c982e88d8e8d015a1e98891266e62b05b4c3d2986986ec2a988d7097150b7437',
-              'fixedVersions': [
-                '1.31.1-r21'
-              ],
-              'installedVersion': '1.31.1-r19',
-              'packageName':      'ssl_client',
-              'purl':             'pkg:apk/alpine/ssl_client@1.31.1-r19?arch=x86&distro=3.12.3',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42384',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42384',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42384'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the handle_special()'
-            },
-            {
-              'cve':  'CVE-2021-42385',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the evaluate function",
-              'diffID':        'sha256:c982e88d8e8d015a1e98891266e62b05b4c3d2986986ec2a988d7097150b7437',
-              'fixedVersions': [
-                '1.31.1-r21'
-              ],
-              'installedVersion': '1.31.1-r19',
-              'packageName':      'ssl_client',
-              'purl':             'pkg:apk/alpine/ssl_client@1.31.1-r19?arch=x86&distro=3.12.3',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42385',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42385',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42385'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the evaluate()'
-            },
-            {
-              'cve':  'CVE-2021-42386',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the nvalloc function",
-              'diffID':        'sha256:c982e88d8e8d015a1e98891266e62b05b4c3d2986986ec2a988d7097150b7437',
-              'fixedVersions': [
-                '1.31.1-r21'
-              ],
-              'installedVersion': '1.31.1-r19',
-              'packageName':      'ssl_client',
-              'purl':             'pkg:apk/alpine/ssl_client@1.31.1-r19?arch=x86&distro=3.12.3',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42386',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42386',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42386'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the nvalloc()'
-            },
-            {
-              'cve':  'CVE-2022-28391',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '8.8',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-88'
-              ],
-              'description':   "BusyBox through 1.35.0 allows remote attackers to execute arbitrary code if netstat is used to print a DNS PTR record's value to a VT compatible terminal. Alternatively, the attacker could choose to change the terminal's colors.",
-              'diffID':        'sha256:c982e88d8e8d015a1e98891266e62b05b4c3d2986986ec2a988d7097150b7437',
-              'fixedVersions': [
-                '1.31.1-r22'
-              ],
-              'installedVersion': '1.31.1-r19',
-              'packageName':      'ssl_client',
-              'purl':             'pkg:apk/alpine/ssl_client@1.31.1-r19?arch=x86&distro=3.12.3',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2022-28391',
-                'https://git.alpinelinux.org/aports/plain/main/busybox/0001-libbb-sockaddr2str-ensure-only-printable-characters-.patch',
-                'https://git.alpinelinux.org/aports/plain/main/busybox/0002-nslookup-sanitize-all-printed-strings-with-printable.patch',
-                'https://gitlab.alpinelinux.org/alpine/aports/-/issues/13661',
-                'https://nvd.nist.gov/vuln/detail/CVE-2022-28391',
-                'https://www.cve.org/CVERecord?id=CVE-2022-28391'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: remote attackers may execute arbitrary code if netstat is used'
-            },
-            {
-              'cve':  'CVE-2021-42374',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '5.7',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-125'
-              ],
-              'description':   "An out-of-bounds heap read in Busybox's unlzma applet leads to information leak and denial of service when crafted LZMA-compressed input is decompressed. This can be triggered by any applet/format that",
-              'diffID':        'sha256:c982e88d8e8d015a1e98891266e62b05b4c3d2986986ec2a988d7097150b7437',
-              'fixedVersions': [
-                '1.31.1-r21'
-              ],
-              'installedVersion': '1.31.1-r19',
-              'packageName':      'ssl_client',
-              'purl':             'pkg:apk/alpine/ssl_client@1.31.1-r19?arch=x86&distro=3.12.3',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42374',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42374',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42374'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'busybox: out-of-bounds read in unlzma applet leads to information leak and denial of service when crafted LZMA-compressed input is decompressed'
-            },
-            {
-              'cve':  'CVE-2022-37434',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '9.8',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-787',
-                'CWE-120'
-              ],
-              'description':   'zlib through 1.2.12 has a heap-based buffer over-read or buffer overflow in inflate in inflate.c via a large gzip header extra field. NOTE: only applications that call inflateGetHeader are affected. Some common applications bundle the affected zlib source code but may be unable to call inflateGetHeader (e.g., see the nodejs/node reference).',
-              'diffID':        'sha256:c982e88d8e8d015a1e98891266e62b05b4c3d2986986ec2a988d7097150b7437',
-              'fixedVersions': [
-                '1.2.12-r2'
-              ],
-              'installedVersion': '1.2.11-r3',
-              'packageName':      'zlib',
-              'purl':             'pkg:apk/alpine/zlib@1.2.11-r3?arch=x86&distro=3.12.3',
-              'references':       [
-                'http://seclists.org/fulldisclosure/2022/Oct/37',
-                'http://seclists.org/fulldisclosure/2022/Oct/38',
-                'http://seclists.org/fulldisclosure/2022/Oct/41',
-                'http://seclists.org/fulldisclosure/2022/Oct/42',
-                'http://www.openwall.com/lists/oss-security/2022/08/05/2',
-                'http://www.openwall.com/lists/oss-security/2022/08/09/1',
-                'https://access.redhat.com/errata/RHSA-2022:8291',
-                'https://access.redhat.com/security/cve/CVE-2022-37434',
-                'https://bugzilla.redhat.com/2116639',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2053198',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2077431',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2081296',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2116639',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-37434',
-                'https://errata.almalinux.org/9/ALSA-2022-8291.html',
-                'https://errata.rockylinux.org/RLSA-2022:8291',
-                'https://github.com/curl/curl/issues/9271',
-                'https://github.com/ivd38/zlib_overflow',
-                'https://github.com/madler/zlib/blob/21767c654d31d2dccdde4330529775c6c5fd5389/zlib.h#L1062-L1063',
-                'https://github.com/madler/zlib/commit/1eb7682f845ac9e9bf9ae35bbfb3bad5dacbd91d',
-                'https://github.com/madler/zlib/commit/eff308af425b67093bab25f80f1ae950166bece1',
-                'https://github.com/nodejs/node/blob/75b68c6e4db515f76df73af476eccf382bbcb00a/deps/zlib/inflate.c#L762-L764',
-                'https://linux.oracle.com/cve/CVE-2022-37434.html',
-                'https://linux.oracle.com/errata/ELSA-2023-1095.html',
-                'https://lists.debian.org/debian-lts-announce/2022/09/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JWN4VE3JQR4O2SOUS5TXNLANRPMHWV4I/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NMBOJ77A7T7PQCARMDUK75TE6LLESZ3O/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PAVPQNCG3XRLCLNSQRM3KAN5ZFMVXVTY/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/X5U7OTKZSHY2I3ZFJSR2SHFHW72RKGDK/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YRQAI7H4M4RQZ2IWZUEEXECBE5D56BH2/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2022-37434',
-                'https://security.netapp.com/advisory/ntap-20220901-0005/',
-                'https://security.netapp.com/advisory/ntap-20230427-0007/',
-                'https://support.apple.com/kb/HT213488',
-                'https://support.apple.com/kb/HT213489',
-                'https://support.apple.com/kb/HT213490',
-                'https://support.apple.com/kb/HT213491',
-                'https://support.apple.com/kb/HT213493',
-                'https://support.apple.com/kb/HT213494',
-                'https://ubuntu.com/security/notices/USN-5570-1',
-                'https://ubuntu.com/security/notices/USN-5570-2',
-                'https://ubuntu.com/security/notices/USN-5573-1',
-                'https://ubuntu.com/security/notices/USN-6736-1',
-                'https://ubuntu.com/security/notices/USN-6736-2',
-                'https://www.cve.org/CVERecord?id=CVE-2022-37434',
-                'https://www.debian.org/security/2022/dsa-5218'
-              ],
-              'severity':   'CRITICAL',
-              'suppressed': false,
-              'title':      'zlib: heap-based buffer over-read and overflow in inflate() in inflate.c via a large gzip header extra field'
-            },
-            {
-              'cve':  'CVE-2018-25032',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'nvd': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '8.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-787'
-              ],
-              'description':   'zlib before 1.2.12 allows memory corruption when deflating (i.e., when compressing) if the input has many distant matches.',
-              'diffID':        'sha256:c982e88d8e8d015a1e98891266e62b05b4c3d2986986ec2a988d7097150b7437',
-              'fixedVersions': [
-                '1.2.12-r0'
-              ],
-              'installedVersion': '1.2.11-r3',
-              'packageName':      'zlib',
-              'purl':             'pkg:apk/alpine/zlib@1.2.11-r3?arch=x86&distro=3.12.3',
-              'references':       [
-                'http://seclists.org/fulldisclosure/2022/May/33',
-                'http://seclists.org/fulldisclosure/2022/May/35',
-                'http://seclists.org/fulldisclosure/2022/May/38',
-                'http://www.openwall.com/lists/oss-security/2022/03/25/2',
-                'http://www.openwall.com/lists/oss-security/2022/03/26/1',
-                'https://access.redhat.com/errata/RHSA-2022:8420',
-                'https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-25032.json',
-                'https://access.redhat.com/security/cve/CVE-2018-25032',
-                'https://bugzilla.redhat.com/2067945',
-                'https://cert-portal.siemens.com/productcert/pdf/ssa-333517.pdf',
-                'https://errata.almalinux.org/9/ALSA-2022-8420.html',
-                'https://github.com/advisories/GHSA-jc36-42cf-vqwj',
-                'https://github.com/madler/zlib/commit/5c44459c3b28a9bd3283aaceab7c615f8020c531',
-                'https://github.com/madler/zlib/compare/v1.2.11...v1.2.12',
-                'https://github.com/madler/zlib/issues/605',
-                'https://github.com/rubysec/ruby-advisory-db/blob/master/gems/nokogiri/CVE-2018-25032.yml',
-                'https://github.com/sparklemotion/nokogiri/releases/tag/v1.13.4',
-                'https://github.com/sparklemotion/nokogiri/security/advisories/GHSA-v6gp-9mmm-c6p5',
-                'https://groups.google.com/g/ruby-security-ann/c/vX7qSjsvWis/m/TJWN4oOKBwAJ',
-                'https://linux.oracle.com/cve/CVE-2018-25032.html',
-                'https://linux.oracle.com/errata/ELSA-2022-9565.html',
-                'https://lists.debian.org/debian-lts-announce/2022/04/msg00000.html',
-                'https://lists.debian.org/debian-lts-announce/2022/05/msg00008.html',
-                'https://lists.debian.org/debian-lts-announce/2022/09/msg00023.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DCZFIJBJTZ7CL5QXBFKTQ22Q26VINRUF/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DF62MVMH3QUGMBDCB3DY2ERQ6EBHTADB/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JZZPTWRYQULAOL3AW7RZJNVZ2UONXCV4/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NS2D2GFPFGOJUL4WQ3DUAY7HF4VWQ77F/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VOKNP2L734AEL47NRYGVZIKEFOUBQY5Y/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/XOKFMSNQ5D5WGMALBNBXU3GE442V74WU/',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/DCZFIJBJTZ7CL5QXBFKTQ22Q26VINRUF',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/DCZFIJBJTZ7CL5QXBFKTQ22Q26VINRUF/',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/DF62MVMH3QUGMBDCB3DY2ERQ6EBHTADB',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/DF62MVMH3QUGMBDCB3DY2ERQ6EBHTADB/',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/JZZPTWRYQULAOL3AW7RZJNVZ2UONXCV4',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/JZZPTWRYQULAOL3AW7RZJNVZ2UONXCV4/',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/NS2D2GFPFGOJUL4WQ3DUAY7HF4VWQ77F',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/NS2D2GFPFGOJUL4WQ3DUAY7HF4VWQ77F/',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/VOKNP2L734AEL47NRYGVZIKEFOUBQY5Y',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/VOKNP2L734AEL47NRYGVZIKEFOUBQY5Y/',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/XOKFMSNQ5D5WGMALBNBXU3GE442V74WU',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/XOKFMSNQ5D5WGMALBNBXU3GE442V74WU/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2018-25032',
-                'https://security.gentoo.org/glsa/202210-42',
-                'https://security.netapp.com/advisory/ntap-20220526-0009',
-                'https://security.netapp.com/advisory/ntap-20220526-0009/',
-                'https://security.netapp.com/advisory/ntap-20220729-0004',
-                'https://security.netapp.com/advisory/ntap-20220729-0004/',
-                'https://support.apple.com/kb/HT213255',
-                'https://support.apple.com/kb/HT213256',
-                'https://support.apple.com/kb/HT213257',
-                'https://ubuntu.com/security/notices/USN-5355-1',
-                'https://ubuntu.com/security/notices/USN-5355-2',
-                'https://ubuntu.com/security/notices/USN-5359-1',
-                'https://ubuntu.com/security/notices/USN-5359-2',
-                'https://ubuntu.com/security/notices/USN-5739-1',
-                'https://ubuntu.com/security/notices/USN-6736-1',
-                'https://ubuntu.com/security/notices/USN-6736-2',
-                'https://www.cve.org/CVERecord?id=CVE-2018-25032',
-                'https://www.debian.org/security/2022/dsa-5111',
-                'https://www.openwall.com/lists/oss-security/2022/03/24/1',
-                'https://www.openwall.com/lists/oss-security/2022/03/28/1',
-                'https://www.openwall.com/lists/oss-security/2022/03/28/3',
-                'https://www.oracle.com/security-alerts/cpujul2022.html'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'zlib: A flaw found in zlib when compressing (not decompressing) certain inputs'
-            }
-          ]
-        }
-      ],
-      'summary': {
-        'critical':   4,
-        'high':       32,
-        'low':        2,
-        'medium':     6,
-        'suppressed': 0,
-        'unknown':    0
-      }
-    }
-  },
-  {
-    'id':    'default/1e879d64c75916b36bb2fd98996bb5cc649238615d7dc92efbb82d4310fba4e6',
-    'type':  'storage.sbomscanner.kubewarden.io.vulnerabilityreport',
-    'links': {
-      'patch':  'https://localhost:8005/v1/storage.sbomscanner.kubewarden.io.vulnerabilityreports/default/1e879d64c75916b36bb2fd98996bb5cc649238615d7dc92efbb82d4310fba4e6',
-      'remove': 'https://localhost:8005/v1/storage.sbomscanner.kubewarden.io.vulnerabilityreports/default/1e879d64c75916b36bb2fd98996bb5cc649238615d7dc92efbb82d4310fba4e6',
-      'self':   'https://localhost:8005/v1/storage.sbomscanner.kubewarden.io.vulnerabilityreports/default/1e879d64c75916b36bb2fd98996bb5cc649238615d7dc92efbb82d4310fba4e6',
-      'update': 'https://localhost:8005/v1/storage.sbomscanner.kubewarden.io.vulnerabilityreports/default/1e879d64c75916b36bb2fd98996bb5cc649238615d7dc92efbb82d4310fba4e6',
-      'view':   'https://localhost:8005/apis/storage.sbomscanner.kubewarden.io/v1alpha1/namespaces/default/vulnerabilityreports/1e879d64c75916b36bb2fd98996bb5cc649238615d7dc92efbb82d4310fba4e6'
-    },
-    'apiVersion':    'storage.sbomscanner.kubewarden.io/v1alpha1',
-    'imageMetadata': {
-      'digest':      'sha256:1f2e2eda6c64b2d73549fa66378f5c3474ba1fad4ef7ed94fd7298ca9e8862fd',
-      'platform':    'linux/ppc64le',
-      'registry':    'lsong-demo1',
-      'registryURI': 'registry-1.docker.io',
-      'repository':  'library/alpine',
-      'tag':         '3.12.3'
-    },
-    'kind':     'VulnerabilityReport',
-    'metadata': {
-      'creationTimestamp': '2026-01-14T18:51:17Z',
-      'fields':            [
-        '1e879d64c75916b36bb2fd98996bb5cc649238615d7dc92efbb82d4310fba4e6',
-        'registry-1.docker.io/library/alpine:3.12.3',
-        'linux/ppc64le',
-        '44 (0 suppressed)'
-      ],
-      'labels': {
-        'app.kubernetes.io/managed-by':          'sbomscanner',
-        'app.kubernetes.io/part-of':             'sbomscanner',
-        'sbomscanner.kubewarden.io/scanjob-uid': '445c600a-c4b6-40b3-bd71-f2d2140a37d5'
-      },
-      'name':            '1e879d64c75916b36bb2fd98996bb5cc649238615d7dc92efbb82d4310fba4e6',
-      'namespace':       'default',
-      'ownerReferences': [
-        {
-          'apiVersion':         'storage.sbomscanner.kubewarden.io/v1alpha1',
-          'blockOwnerDeletion': true,
-          'controller':         true,
-          'kind':               'SBOM',
-          'name':               '1e879d64c75916b36bb2fd98996bb5cc649238615d7dc92efbb82d4310fba4e6',
-          'uid':                '45eea864-01e3-4a07-a074-da444a5de9d8'
-        }
-      ],
-      'relationships': [
-        {
-          'fromId':   'default/1e879d64c75916b36bb2fd98996bb5cc649238615d7dc92efbb82d4310fba4e6',
-          'fromType': 'storage.sbomscanner.kubewarden.io.sbom',
-          'rel':      'owner',
-          'state':    'active',
-          'message':  'Resource is current'
-        }
-      ],
-      'resourceVersion': '1',
-      'state':           {
-        'error':         false,
-        'message':       'Resource is current',
-        'name':          'active',
-        'transitioning': false
-      },
-      'uid': 'acfc6cec-b57e-4bec-b88e-6b18af84a3cb'
-    },
-    'report': {
-      'results': [
-        {
-          'class':           'os-pkgs',
-          'target':          '/var/run/worker/trivy.sbom.103236687.json (alpine 3.12.3)',
-          'type':            'alpine',
-          'vulnerabilities': [
-            {
-              'cve':  'CVE-2021-36159',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '9.1',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '9.1',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-125'
-              ],
-              'description':   "libfetch before 2021-07-26, as used in apk-tools, xbps, and other products, mishandles numeric strings for the FTP and HTTP protocols. The FTP passive mode implementation allows an out-of-bounds read because strtol is used to parse the relevant numbers into address bytes. It does not check if the line ends prematurely. If it does, the for-loop condition checks for the '\\0' terminator one byte too late.",
-              'diffID':        'sha256:34db83edb16a705056c939afc7ee704663597e4c6794e8da795f800710a6b4ca',
-              'fixedVersions': [
-                '2.10.7-r0'
-              ],
-              'installedVersion': '2.10.5-r1',
-              'packageName':      'apk-tools',
-              'purl':             'pkg:apk/alpine/apk-tools@2.10.5-r1?arch=ppc64le&distro=3.12.3',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-36159',
-                'https://github.com/freebsd/freebsd-src/commits/main/lib/libfetch',
-                'https://gitlab.alpinelinux.org/alpine/apk-tools/-/issues/10749',
-                'https://lists.apache.org/thread.html/r61db8e7dcb56dc000a5387a88f7a473bacec5ee01b9ff3f55308aacc%40%3Cdev.kafka.apache.org%3E',
-                'https://lists.apache.org/thread.html/r61db8e7dcb56dc000a5387a88f7a473bacec5ee01b9ff3f55308aacc%40%3Cusers.kafka.apache.org%3E',
-                'https://lists.apache.org/thread.html/rbf4ce74b0d1fa9810dec50ba3ace0caeea677af7c27a97111c06ccb7%40%3Cdev.kafka.apache.org%3E',
-                'https://lists.apache.org/thread.html/rbf4ce74b0d1fa9810dec50ba3ace0caeea677af7c27a97111c06ccb7%40%3Cusers.kafka.apache.org%3E',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-36159',
-                'https://www.cve.org/CVERecord?id=CVE-2021-36159'
-              ],
-              'severity':   'CRITICAL',
-              'suppressed': false,
-              'title':      'libfetch: an out of boundary read while libfetch uses strtol to parse the relevant numbers into address bytes leads to information leak or crash'
-            },
-            {
-              'cve':  'CVE-2021-30139',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-125'
-              ],
-              'description':   'In Alpine Linux apk-tools before 2.12.5, the tarball parser allows a buffer overflow and crash.',
-              'diffID':        'sha256:34db83edb16a705056c939afc7ee704663597e4c6794e8da795f800710a6b4ca',
-              'fixedVersions': [
-                '2.10.6-r0'
-              ],
-              'installedVersion': '2.10.5-r1',
-              'packageName':      'apk-tools',
-              'purl':             'pkg:apk/alpine/apk-tools@2.10.5-r1?arch=ppc64le&distro=3.12.3',
-              'references':       [
-                'https://gitlab.alpinelinux.org/alpine/apk-tools/-/issues/10741',
-                'https://gitlab.alpinelinux.org/alpine/aports/-/issues/12606'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false
-            },
-            {
-              'cve':  'CVE-2021-28831',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-755'
-              ],
-              'description':   'decompress_gunzip.c in BusyBox through 1.32.1 mishandles the error bit on the huft_build result pointer, with a resultant invalid free or segmentation fault, via malformed gzip data.',
-              'diffID':        'sha256:34db83edb16a705056c939afc7ee704663597e4c6794e8da795f800710a6b4ca',
-              'fixedVersions': [
-                '1.31.1-r20'
-              ],
-              'installedVersion': '1.31.1-r19',
-              'packageName':      'busybox',
-              'purl':             'pkg:apk/alpine/busybox@1.31.1-r19?arch=ppc64le&distro=3.12.3',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-28831',
-                'https://git.busybox.net/busybox/commit/?id=f25d254dfd4243698c31a4f3153d4ac72aa9e9bd',
-                'https://lists.debian.org/debian-lts-announce/2021/04/msg00001.html',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/3UDQGJRECXFS5EZVDH2OI45FMO436AC4/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/Z7ZIFKPRR32ZYA3WAA2NXFA3QHHOU6FJ/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZASBW7QRRLY5V2R44MQ4QQM4CZIDHM2U/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-28831',
-                'https://security.gentoo.org/glsa/202105-09',
-                'https://security.netapp.com/advisory/ntap-20250509-0005/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://ubuntu.com/security/notices/USN-5179-2',
-                'https://ubuntu.com/security/notices/USN-6335-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-28831'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: invalid free or segmentation fault via malformed gzip data'
-            },
-            {
-              'cve':  'CVE-2021-42378',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the getvar_i function",
-              'diffID':        'sha256:34db83edb16a705056c939afc7ee704663597e4c6794e8da795f800710a6b4ca',
-              'fixedVersions': [
-                '1.31.1-r21'
-              ],
-              'installedVersion': '1.31.1-r19',
-              'packageName':      'busybox',
-              'purl':             'pkg:apk/alpine/busybox@1.31.1-r19?arch=ppc64le&distro=3.12.3',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42378',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42378',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42378'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the getvar_i()'
-            },
-            {
-              'cve':  'CVE-2021-42379',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the next_input_file function",
-              'diffID':        'sha256:34db83edb16a705056c939afc7ee704663597e4c6794e8da795f800710a6b4ca',
-              'fixedVersions': [
-                '1.31.1-r21'
-              ],
-              'installedVersion': '1.31.1-r19',
-              'packageName':      'busybox',
-              'purl':             'pkg:apk/alpine/busybox@1.31.1-r19?arch=ppc64le&distro=3.12.3',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42379',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42379',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42379'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the next_input_file()'
-            },
-            {
-              'cve':  'CVE-2021-42380',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the clrvar function",
-              'diffID':        'sha256:34db83edb16a705056c939afc7ee704663597e4c6794e8da795f800710a6b4ca',
-              'fixedVersions': [
-                '1.31.1-r21'
-              ],
-              'installedVersion': '1.31.1-r19',
-              'packageName':      'busybox',
-              'purl':             'pkg:apk/alpine/busybox@1.31.1-r19?arch=ppc64le&distro=3.12.3',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42380',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42380',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42380'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the clrvar()'
-            },
-            {
-              'cve':  'CVE-2021-42381',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the hash_init function",
-              'diffID':        'sha256:34db83edb16a705056c939afc7ee704663597e4c6794e8da795f800710a6b4ca',
-              'fixedVersions': [
-                '1.31.1-r21'
-              ],
-              'installedVersion': '1.31.1-r19',
-              'packageName':      'busybox',
-              'purl':             'pkg:apk/alpine/busybox@1.31.1-r19?arch=ppc64le&distro=3.12.3',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42381',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42381',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42381'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the hash_init()'
-            },
-            {
-              'cve':  'CVE-2021-42382',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the getvar_s function",
-              'diffID':        'sha256:34db83edb16a705056c939afc7ee704663597e4c6794e8da795f800710a6b4ca',
-              'fixedVersions': [
-                '1.31.1-r21'
-              ],
-              'installedVersion': '1.31.1-r19',
-              'packageName':      'busybox',
-              'purl':             'pkg:apk/alpine/busybox@1.31.1-r19?arch=ppc64le&distro=3.12.3',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42382',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42382',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42382'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the getvar_s()'
-            },
-            {
-              'cve':  'CVE-2021-42383',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the evaluate function",
-              'diffID':        'sha256:34db83edb16a705056c939afc7ee704663597e4c6794e8da795f800710a6b4ca',
-              'fixedVersions': [
-                '1.31.1-r21'
-              ],
-              'installedVersion': '1.31.1-r19',
-              'packageName':      'busybox',
-              'purl':             'pkg:apk/alpine/busybox@1.31.1-r19?arch=ppc64le&distro=3.12.3',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42383',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42383',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42383'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the evaluate()'
-            },
-            {
-              'cve':  'CVE-2021-42384',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the handle_special function",
-              'diffID':        'sha256:34db83edb16a705056c939afc7ee704663597e4c6794e8da795f800710a6b4ca',
-              'fixedVersions': [
-                '1.31.1-r21'
-              ],
-              'installedVersion': '1.31.1-r19',
-              'packageName':      'busybox',
-              'purl':             'pkg:apk/alpine/busybox@1.31.1-r19?arch=ppc64le&distro=3.12.3',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42384',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42384',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42384'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the handle_special()'
-            },
-            {
-              'cve':  'CVE-2021-42385',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the evaluate function",
-              'diffID':        'sha256:34db83edb16a705056c939afc7ee704663597e4c6794e8da795f800710a6b4ca',
-              'fixedVersions': [
-                '1.31.1-r21'
-              ],
-              'installedVersion': '1.31.1-r19',
-              'packageName':      'busybox',
-              'purl':             'pkg:apk/alpine/busybox@1.31.1-r19?arch=ppc64le&distro=3.12.3',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42385',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42385',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42385'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the evaluate()'
-            },
-            {
-              'cve':  'CVE-2021-42386',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the nvalloc function",
-              'diffID':        'sha256:34db83edb16a705056c939afc7ee704663597e4c6794e8da795f800710a6b4ca',
-              'fixedVersions': [
-                '1.31.1-r21'
-              ],
-              'installedVersion': '1.31.1-r19',
-              'packageName':      'busybox',
-              'purl':             'pkg:apk/alpine/busybox@1.31.1-r19?arch=ppc64le&distro=3.12.3',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42386',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42386',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42386'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the nvalloc()'
-            },
-            {
-              'cve':  'CVE-2022-28391',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '8.8',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-88'
-              ],
-              'description':   "BusyBox through 1.35.0 allows remote attackers to execute arbitrary code if netstat is used to print a DNS PTR record's value to a VT compatible terminal. Alternatively, the attacker could choose to change the terminal's colors.",
-              'diffID':        'sha256:34db83edb16a705056c939afc7ee704663597e4c6794e8da795f800710a6b4ca',
-              'fixedVersions': [
-                '1.31.1-r22'
-              ],
-              'installedVersion': '1.31.1-r19',
-              'packageName':      'busybox',
-              'purl':             'pkg:apk/alpine/busybox@1.31.1-r19?arch=ppc64le&distro=3.12.3',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2022-28391',
-                'https://git.alpinelinux.org/aports/plain/main/busybox/0001-libbb-sockaddr2str-ensure-only-printable-characters-.patch',
-                'https://git.alpinelinux.org/aports/plain/main/busybox/0002-nslookup-sanitize-all-printed-strings-with-printable.patch',
-                'https://gitlab.alpinelinux.org/alpine/aports/-/issues/13661',
-                'https://nvd.nist.gov/vuln/detail/CVE-2022-28391',
-                'https://www.cve.org/CVERecord?id=CVE-2022-28391'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: remote attackers may execute arbitrary code if netstat is used'
-            },
-            {
-              'cve':  'CVE-2021-42374',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '5.7',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-125'
-              ],
-              'description':   "An out-of-bounds heap read in Busybox's unlzma applet leads to information leak and denial of service when crafted LZMA-compressed input is decompressed. This can be triggered by any applet/format that",
-              'diffID':        'sha256:34db83edb16a705056c939afc7ee704663597e4c6794e8da795f800710a6b4ca',
-              'fixedVersions': [
-                '1.31.1-r21'
-              ],
-              'installedVersion': '1.31.1-r19',
-              'packageName':      'busybox',
-              'purl':             'pkg:apk/alpine/busybox@1.31.1-r19?arch=ppc64le&distro=3.12.3',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42374',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42374',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42374'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'busybox: out-of-bounds read in unlzma applet leads to information leak and denial of service when crafted LZMA-compressed input is decompressed'
-            },
-            {
-              'cve':  'CVE-2021-3711',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '9.8',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'nvd': {
-                  'v3score':  '9.8',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '9.8',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-120'
-              ],
-              'description':   'In order to decrypt SM2 encrypted data an application is expected to call the API function EVP_PKEY_decrypt(). Typically an application will call this function twice. The first time, on entry, the "out" parameter can be NULL and, on exit, the "outlen" parameter is populated with the buffer size required to hold the decrypted plaintext. The application can then allocate a sufficiently sized buffer and call EVP_PKEY_decrypt() again, but this time passing a non-NULL value for the "out" parameter. A bug in the implementation of the SM2 decryption code means that the calculation of the buffer size required to hold the plaintext returned by the first call to EVP_PKEY_decrypt() can be smaller than the actual size required by the second call. This can lead to a buffer overflow when EVP_PKEY_decrypt() is called by the application a second time with a buffer that is too small. A malicious attacker who is able present SM2 content for decryption to an application could cause attacker chosen data to overflow the buffer by up to a maximum of 62 bytes altering the contents of other data held after the buffer, possibly changing application behaviour or causing the application to crash. The location of the buffer is application dependent but is typically heap allocated. Fixed in OpenSSL 1.1.1l (Affected 1.1.1-1.1.1k).',
-              'diffID':        'sha256:34db83edb16a705056c939afc7ee704663597e4c6794e8da795f800710a6b4ca',
-              'fixedVersions': [
-                '1.1.1l-r0'
-              ],
-              'installedVersion': '1.1.1i-r0',
-              'packageName':      'libcrypto1.1',
-              'purl':             'pkg:apk/alpine/libcrypto1.1@1.1.1i-r0?arch=ppc64le&distro=3.12.3',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2021/08/26/2',
-                'https://access.redhat.com/security/cve/CVE-2021-3711',
-                'https://cert-portal.siemens.com/productcert/pdf/ssa-389290.pdf',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=59f5e75f3bced8fc0e130d72a3f582cf7b480b46',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=59f5e75f3bced8fc0e130d72a3f582cf7b480b46',
-                'https://lists.apache.org/thread.html/r18995de860f0e63635f3008fd2a6aca82394249476d21691e7c59c9e%40%3Cdev.tomcat.apache.org%3E',
-                'https://lists.apache.org/thread.html/r18995de860f0e63635f3008fd2a6aca82394249476d21691e7c59c9e@%3Cdev.tomcat.apache.org%3E',
-                'https://lists.apache.org/thread.html/rad5d9f83f0d11fb3f8bb148d179b8a9ad7c6a17f18d70e5805a713d1%40%3Cdev.tomcat.apache.org%3E',
-                'https://lists.apache.org/thread.html/rad5d9f83f0d11fb3f8bb148d179b8a9ad7c6a17f18d70e5805a713d1@%3Cdev.tomcat.apache.org%3E',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-3711',
-                'https://rustsec.org/advisories/RUSTSEC-2021-0097.html',
-                'https://security.gentoo.org/glsa/202209-02',
-                'https://security.gentoo.org/glsa/202210-02',
-                'https://security.netapp.com/advisory/ntap-20210827-0010',
-                'https://security.netapp.com/advisory/ntap-20210827-0010/',
-                'https://security.netapp.com/advisory/ntap-20211022-0003',
-                'https://security.netapp.com/advisory/ntap-20211022-0003/',
-                'https://security.netapp.com/advisory/ntap-20240621-0006',
-                'https://security.netapp.com/advisory/ntap-20240621-0006/',
-                'https://ubuntu.com/security/notices/USN-5051-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-3711',
-                'https://www.debian.org/security/2021/dsa-4963',
-                'https://www.openssl.org/news/secadv/20210824.txt',
-                'https://www.oracle.com/security-alerts/cpuapr2022.html',
-                'https://www.oracle.com/security-alerts/cpujan2022.html',
-                'https://www.oracle.com/security-alerts/cpuoct2021.html',
-                'https://www.tenable.com/security/tns-2021-16',
-                'https://www.tenable.com/security/tns-2022-02'
-              ],
-              'severity':   'CRITICAL',
-              'suppressed': false,
-              'title':      'openssl: SM2 Decryption Buffer Overflow'
-            },
-            {
-              'cve':  'CVE-2021-23840',
-              'cvss': {
-                'bitnami': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'ghsa': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'nvd': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-190'
-              ],
-              'description':   'Calls to EVP_CipherUpdate, EVP_EncryptUpdate and EVP_DecryptUpdate may overflow the output length argument in some cases where the input length is close to the maximum permissable length for an integer on the platform. In such cases the return value from the function call will be 1 (indicating success), but the output length value will be negative. This could cause applications to behave incorrectly or crash. OpenSSL versions 1.1.1i and below are affected by this issue. Users of these versions should upgrade to OpenSSL 1.1.1j. OpenSSL versions 1.0.2x and below are affected by this issue. However OpenSSL 1.0.2 is out of support and no longer receiving public updates. Premium support customers of OpenSSL 1.0.2 should upgrade to 1.0.2y. Other users should upgrade to 1.1.1j. Fixed in OpenSSL 1.1.1j (Affected 1.1.1-1.1.1i). Fixed in OpenSSL 1.0.2y (Affected 1.0.2-1.0.2x).',
-              'diffID':        'sha256:34db83edb16a705056c939afc7ee704663597e4c6794e8da795f800710a6b4ca',
-              'fixedVersions': [
-                '1.1.1j-r0'
-              ],
-              'installedVersion': '1.1.1i-r0',
-              'packageName':      'libcrypto1.1',
-              'purl':             'pkg:apk/alpine/libcrypto1.1@1.1.1i-r0?arch=ppc64le&distro=3.12.3',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-23840',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=1908036',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=1930310',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=1930324',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=1934534',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=1934600',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=1939637',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=1940085',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=1965362',
-                'https://cert-portal.siemens.com/productcert/pdf/ssa-389290.pdf',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-23840',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-23841',
-                'https://errata.rockylinux.org/RLSA-2021:4424',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=6a51b9e1d0cf0bf8515f7201b68fb0a3482b3dc1',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=9b1129239f3ebb1d1c98ce9ed41d5c9476c47cb2',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=6a51b9e1d0cf0bf8515f7201b68fb0a3482b3dc1',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=9b1129239f3ebb1d1c98ce9ed41d5c9476c47cb2',
-                'https://github.com/alexcrichton/openssl-src-rs',
-                'https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA44846',
-                'https://kc.mcafee.com/corporate/index?page=content&id=SB10366',
-                'https://linux.oracle.com/cve/CVE-2021-23840.html',
-                'https://linux.oracle.com/errata/ELSA-2021-9561.html',
-                'https://lists.apache.org/thread.html/r58af02e294bd07f487e2c64ffc0a29b837db5600e33b6e698b9d696b%40%3Cissues.bookkeeper.apache.org%3E',
-                'https://lists.apache.org/thread.html/r58af02e294bd07f487e2c64ffc0a29b837db5600e33b6e698b9d696b@%3Cissues.bookkeeper.apache.org%3E',
-                'https://lists.apache.org/thread.html/rf4c02775860db415b4955778a131c2795223f61cb8c6a450893651e4%40%3Cissues.bookkeeper.apache.org%3E',
-                'https://lists.apache.org/thread.html/rf4c02775860db415b4955778a131c2795223f61cb8c6a450893651e4@%3Cissues.bookkeeper.apache.org%3E',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-23840',
-                'https://rustsec.org/advisories/RUSTSEC-2021-0057.html',
-                'https://security.gentoo.org/glsa/202103-03',
-                'https://security.netapp.com/advisory/ntap-20210219-0009',
-                'https://security.netapp.com/advisory/ntap-20210219-0009/',
-                'https://security.netapp.com/advisory/ntap-20240621-0006/',
-                'https://ubuntu.com/security/notices/USN-4738-1',
-                'https://ubuntu.com/security/notices/USN-5088-1',
-                'https://ubuntu.com/security/notices/USN-7018-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-23840',
-                'https://www.debian.org/security/2021/dsa-4855',
-                'https://www.openssl.org/news/secadv/20210216.txt',
-                'https://www.oracle.com//security-alerts/cpujul2021.html',
-                'https://www.oracle.com/security-alerts/cpuApr2021.html',
-                'https://www.oracle.com/security-alerts/cpuapr2022.html',
-                'https://www.oracle.com/security-alerts/cpujan2022.html',
-                'https://www.oracle.com/security-alerts/cpuoct2021.html',
-                'https://www.tenable.com/security/tns-2021-03',
-                'https://www.tenable.com/security/tns-2021-09',
-                'https://www.tenable.com/security/tns-2021-10'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: integer overflow in CipherUpdate'
-            },
-            {
-              'cve':  'CVE-2021-3450',
-              'cvss': {
-                'bitnami': {
-                  'v3score':  '7.4',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N'
-                },
-                'ghsa': {
-                  'v3score':  '7.4',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N'
-                },
-                'nvd': {
-                  'v3score':  '7.4',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N'
-                },
-                'redhat': {
-                  'v3score':  '7.4',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-295'
-              ],
-              'description':   'The X509_V_FLAG_X509_STRICT flag enables additional security checks of the certificates present in a certificate chain. It is not set by default. Starting from OpenSSL version 1.1.1h a check to disallow certificates in the chain that have explicitly encoded elliptic curve parameters was added as an additional strict check. An error in the implementation of this check meant that the result of a previous check to confirm that certificates in the chain are valid CA certificates was overwritten. This effectively bypasses the check that non-CA certificates must not be able to issue other certificates. If a "purpose" has been configured then there is a subsequent opportunity for checks that the certificate is a valid CA. All of the named "purpose" values implemented in libcrypto perform this check. Therefore, where a purpose is set the certificate chain will still be rejected even when the strict flag has been used. A purpose is set by default in libssl client and server certificate verification routines, but it can be overridden or removed by an application. In order to be affected, an application must explicitly set the X509_V_FLAG_X509_STRICT verification flag and either not set a purpose for the certificate verification or, in the case of TLS client or server applications, override the default purpose. OpenSSL versions 1.1.1h and newer are affected by this issue. Users of these versions should upgrade to OpenSSL 1.1.1k. OpenSSL 1.0.2 is not impacted by this issue. Fixed in OpenSSL 1.1.1k (Affected 1.1.1h-1.1.1j).',
-              'diffID':        'sha256:34db83edb16a705056c939afc7ee704663597e4c6794e8da795f800710a6b4ca',
-              'fixedVersions': [
-                '1.1.1k-r0'
-              ],
-              'installedVersion': '1.1.1i-r0',
-              'packageName':      'libcrypto1.1',
-              'purl':             'pkg:apk/alpine/libcrypto1.1@1.1.1i-r0?arch=ppc64le&distro=3.12.3',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2021/03/27/1',
-                'http://www.openwall.com/lists/oss-security/2021/03/27/2',
-                'http://www.openwall.com/lists/oss-security/2021/03/28/3',
-                'http://www.openwall.com/lists/oss-security/2021/03/28/4',
-                'https://access.redhat.com/security/cve/CVE-2021-3450',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=1941547',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=1941554',
-                'https://cert-portal.siemens.com/productcert/pdf/ssa-389290.pdf',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-3449',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-3450',
-                'https://errata.rockylinux.org/RLSA-2021:1024',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=2a40b7bc7b94dd7de897a74571e7024f0cf0d63b',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=2a40b7bc7b94dd7de897a74571e7024f0cf0d63b',
-                'https://github.com/alexcrichton/openssl-src-rs',
-                'https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA44845',
-                'https://kc.mcafee.com/corporate/index?page=content&id=SB10356',
-                'https://linux.oracle.com/cve/CVE-2021-3450.html',
-                'https://linux.oracle.com/errata/ELSA-2021-9151.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CCBFLLVQVILIVGZMBJL3IXZGKWQISYNP/',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/CCBFLLVQVILIVGZMBJL3IXZGKWQISYNP',
-                'https://mta.openssl.org/pipermail/openssl-announce/2021-March/000198.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-3450',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2021-0013',
-                'https://rustsec.org/advisories/RUSTSEC-2021-0056.html',
-                'https://security.FreeBSD.org/advisories/FreeBSD-SA-21:07.openssl.asc',
-                'https://security.gentoo.org/glsa/202103-03',
-                'https://security.netapp.com/advisory/ntap-20210326-0006',
-                'https://security.netapp.com/advisory/ntap-20210326-0006/',
-                'https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-openssl-2021-GHY28dJd',
-                'https://www.cve.org/CVERecord?id=CVE-2021-3450',
-                'https://www.openssl.org/news/secadv/20210325.txt',
-                'https://www.oracle.com//security-alerts/cpujul2021.html',
-                'https://www.oracle.com/security-alerts/cpuApr2021.html',
-                'https://www.oracle.com/security-alerts/cpuapr2022.html',
-                'https://www.oracle.com/security-alerts/cpujul2022.html',
-                'https://www.oracle.com/security-alerts/cpuoct2021.html',
-                'https://www.tenable.com/security/tns-2021-05',
-                'https://www.tenable.com/security/tns-2021-08',
-                'https://www.tenable.com/security/tns-2021-09'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: CA certificate check bypass with X509_V_FLAG_X509_STRICT'
-            },
-            {
-              'cve':  'CVE-2021-3712',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '7.4',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H'
-                },
-                'nvd': {
-                  'v3score':  '7.4',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.4',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-125'
-              ],
-              'description':   "ASN.1 strings are represented internally within OpenSSL as an ASN1_STRING structure which contains a buffer holding the string data and a field holding the buffer length. This contrasts with normal C strings which are repesented as a buffer for the string data which is terminated with a NUL (0) byte. Although not a strict requirement, ASN.1 strings that are parsed using OpenSSL's own \"d2i\" functions (and other similar parsing functions) as well as any string whose value has been set with the ASN1_STRING_set() function will additionally NUL terminate the byte array in the ASN1_STRING structure. However, it is possible for applications to directly construct valid ASN1_STRING structures which do not NUL terminate the byte array by directly setting the \"data\" and \"length\" fields in the ASN1_STRING array. This can also happen by using the ASN1_STRING_set0() function. Numerous OpenSSL functions that print ASN.1 data have been found to assume that the ASN1_STRING byte array will be NUL terminated, even though this is not guaranteed for strings that have been directly constructed. Where an application requests an ASN.1 structure to be printed, and where that ASN.1 structure contains ASN1_STRINGs that have been directly constructed by the application without NUL terminating the \"data\" field, then a read buffer overrun can occur. The same thing can also occur during name constraints processing of certificates (for example if a certificate has been directly constructed by the application instead of loading it via the OpenSSL parsing functions, and the certificate contains non NUL terminated ASN1_STRING structures). It can also occur in the X509_get1_email(), X509_REQ_get1_email() and X509_get1_ocsp() functions. If a malicious actor can cause an application to directly construct an ASN1_STRING and then process it through one of the affected OpenSSL functions then this issue could be hit. This might result in a crash (causing a Denial of Service attack). It could also result in the disclosure of private memory contents (such as private keys, or sensitive plaintext). Fixed in OpenSSL 1.1.1l (Affected 1.1.1-1.1.1k). Fixed in OpenSSL 1.0.2za (Affected 1.0.2-1.0.2y).",
-              'diffID':        'sha256:34db83edb16a705056c939afc7ee704663597e4c6794e8da795f800710a6b4ca',
-              'fixedVersions': [
-                '1.1.1l-r0'
-              ],
-              'installedVersion': '1.1.1i-r0',
-              'packageName':      'libcrypto1.1',
-              'purl':             'pkg:apk/alpine/libcrypto1.1@1.1.1i-r0?arch=ppc64le&distro=3.12.3',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2021/08/26/2',
-                'https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2021-3712.json',
-                'https://access.redhat.com/security/cve/CVE-2021-3712',
-                'https://cert-portal.siemens.com/productcert/pdf/ssa-244969.pdf',
-                'https://cert-portal.siemens.com/productcert/pdf/ssa-389290.pdf',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=94d23fcff9b2a7a8368dfe52214d5c2569882c11',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=ccb0a11145ee72b042d10593a64eaf9e8a55ec12',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=94d23fcff9b2a7a8368dfe52214d5c2569882c11',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=ccb0a11145ee72b042d10593a64eaf9e8a55ec12',
-                'https://kc.mcafee.com/corporate/index?page=content&id=SB10366',
-                'https://linux.oracle.com/cve/CVE-2021-3712.html',
-                'https://linux.oracle.com/errata/ELSA-2022-9023.html',
-                'https://lists.apache.org/thread.html/r18995de860f0e63635f3008fd2a6aca82394249476d21691e7c59c9e%40%3Cdev.tomcat.apache.org%3E',
-                'https://lists.apache.org/thread.html/r18995de860f0e63635f3008fd2a6aca82394249476d21691e7c59c9e@%3Cdev.tomcat.apache.org%3E',
-                'https://lists.apache.org/thread.html/rad5d9f83f0d11fb3f8bb148d179b8a9ad7c6a17f18d70e5805a713d1%40%3Cdev.tomcat.apache.org%3E',
-                'https://lists.apache.org/thread.html/rad5d9f83f0d11fb3f8bb148d179b8a9ad7c6a17f18d70e5805a713d1@%3Cdev.tomcat.apache.org%3E',
-                'https://lists.debian.org/debian-lts-announce/2021/09/msg00014.html',
-                'https://lists.debian.org/debian-lts-announce/2021/09/msg00021.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-3712',
-                'https://rustsec.org/advisories/RUSTSEC-2021-0098.html',
-                'https://security.gentoo.org/glsa/202209-02',
-                'https://security.gentoo.org/glsa/202210-02',
-                'https://security.netapp.com/advisory/ntap-20210827-0010',
-                'https://security.netapp.com/advisory/ntap-20210827-0010/',
-                'https://security.netapp.com/advisory/ntap-20240621-0006',
-                'https://security.netapp.com/advisory/ntap-20240621-0006/',
-                'https://ubuntu.com/security/notices/USN-5051-1',
-                'https://ubuntu.com/security/notices/USN-5051-2',
-                'https://ubuntu.com/security/notices/USN-5051-3',
-                'https://ubuntu.com/security/notices/USN-5051-4 (regression only in trusty/esm)',
-                'https://ubuntu.com/security/notices/USN-5088-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-3712',
-                'https://www.debian.org/security/2021/dsa-4963',
-                'https://www.openssl.org/news/secadv/20210824.txt',
-                'https://www.oracle.com/security-alerts/cpuapr2022.html',
-                'https://www.oracle.com/security-alerts/cpujan2022.html',
-                'https://www.oracle.com/security-alerts/cpuoct2021.html',
-                'https://www.tenable.com/security/tns-2021-16',
-                'https://www.tenable.com/security/tns-2022-02'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: Read buffer overruns processing ASN.1 strings'
-            },
-            {
-              'cve':  'CVE-2022-0778',
-              'cvss': {
-                'bitnami': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'ghsa': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'nvd': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-835'
-              ],
-              'description':   'The BN_mod_sqrt() function, which computes a modular square root, contains a bug that can cause it to loop forever for non-prime moduli. Internally this function is used when parsing certificates that contain elliptic curve public keys in compressed form or explicit elliptic curve parameters with a base point encoded in compressed form. It is possible to trigger the infinite loop by crafting a certificate that has invalid explicit curve parameters. Since certificate parsing happens prior to verification of the certificate signature, any process that parses an externally supplied certificate may thus be subject to a denial of service attack. The infinite loop can also be reached when parsing crafted private keys as they can contain explicit elliptic curve parameters. Thus vulnerable situations include: - TLS clients consuming server certificates - TLS servers consuming client certificates - Hosting providers taking certificates or private keys from customers - Certificate authorities parsing certification requests from subscribers - Anything else which parses ASN.1 elliptic curve parameters Also any other applications that use the BN_mod_sqrt() where the attacker can control the parameter values are vulnerable to this DoS issue. In the OpenSSL 1.0.2 version the public key is not parsed during initial parsing of the certificate which makes it slightly harder to trigger the infinite loop. However any operation which requires the public key from the certificate will trigger the infinite loop. In particular the attacker can use a self-signed certificate to trigger the loop during verification of the certificate signature. This issue affects OpenSSL versions 1.0.2, 1.1.1 and 3.0. It was addressed in the releases of 1.1.1n and 3.0.2 on the 15th March 2022. Fixed in OpenSSL 3.0.2 (Affected 3.0.0,3.0.1). Fixed in OpenSSL 1.1.1n (Affected 1.1.1-1.1.1m). Fixed in OpenSSL 1.0.2zd (Affected 1.0.2-1.0.2zc).',
-              'diffID':        'sha256:34db83edb16a705056c939afc7ee704663597e4c6794e8da795f800710a6b4ca',
-              'fixedVersions': [
-                '1.1.1n-r0'
-              ],
-              'installedVersion': '1.1.1i-r0',
-              'packageName':      'libcrypto1.1',
-              'purl':             'pkg:apk/alpine/libcrypto1.1@1.1.1i-r0?arch=ppc64le&distro=3.12.3',
-              'references':       [
-                'http://packetstormsecurity.com/files/167344/OpenSSL-1.0.2-1.1.1-3.0-BN_mod_sqrt-Infinite-Loop.html',
-                'http://seclists.org/fulldisclosure/2022/May/33',
-                'http://seclists.org/fulldisclosure/2022/May/35',
-                'http://seclists.org/fulldisclosure/2022/May/38',
-                'https://access.redhat.com/errata/RHSA-2022:5326',
-                'https://access.redhat.com/security/cve/CVE-2022-0778',
-                'https://bugzilla.redhat.com/2062202',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2062202',
-                'https://cert-portal.siemens.com/productcert/pdf/ssa-712929.pdf',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-0778',
-                'https://errata.almalinux.org/8/ALSA-2022-5326.html',
-                'https://errata.rockylinux.org/RLSA-2022:4899',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=3118eb64934499d93db3230748a452351d1d9a65',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=380085481c64de749a6dd25cdf0bcf4360b30f83',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=a466912611aa6cbdf550cd10601390e587451246',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=3118eb64934499d93db3230748a452351d1d9a65',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=380085481c64de749a6dd25cdf0bcf4360b30f83',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=a466912611aa6cbdf550cd10601390e587451246',
-                'https://linux.oracle.com/cve/CVE-2022-0778.html',
-                'https://linux.oracle.com/errata/ELSA-2022-9272.html',
-                'https://lists.debian.org/debian-lts-announce/2022/03/msg00023.html',
-                'https://lists.debian.org/debian-lts-announce/2022/03/msg00024.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/323SNN6ZX7PRJJWP2BUAFLPUAE42XWLZ',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/323SNN6ZX7PRJJWP2BUAFLPUAE42XWLZ/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GDB3GQVJPXJE7X5C5JN6JAA4XUDWD6E6',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GDB3GQVJPXJE7X5C5JN6JAA4XUDWD6E6/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/W6K3PR542DXWLEFFMFIDMME4CWMHJRMG',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/W6K3PR542DXWLEFFMFIDMME4CWMHJRMG/',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/323SNN6ZX7PRJJWP2BUAFLPUAE42XWLZ',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/GDB3GQVJPXJE7X5C5JN6JAA4XUDWD6E6',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/W6K3PR542DXWLEFFMFIDMME4CWMHJRMG',
-                'https://nvd.nist.gov/vuln/detail/CVE-2022-0778',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2022-0002',
-                'https://rustsec.org/advisories/RUSTSEC-2022-0014.html',
-                'https://security.gentoo.org/glsa/202210-02',
-                'https://security.netapp.com/advisory/ntap-20220321-0002',
-                'https://security.netapp.com/advisory/ntap-20220321-0002/',
-                'https://security.netapp.com/advisory/ntap-20220429-0005',
-                'https://security.netapp.com/advisory/ntap-20220429-0005/',
-                'https://security.netapp.com/advisory/ntap-20240621-0006',
-                'https://security.netapp.com/advisory/ntap-20240621-0006/',
-                'https://support.apple.com/kb/HT213255',
-                'https://support.apple.com/kb/HT213256',
-                'https://support.apple.com/kb/HT213257',
-                'https://ubuntu.com/security/notices/USN-5328-1',
-                'https://ubuntu.com/security/notices/USN-5328-2',
-                'https://ubuntu.com/security/notices/USN-6457-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2022-0778',
-                'https://www.debian.org/security/2022/dsa-5103',
-                'https://www.openssl.org/news/secadv/20220315.txt',
-                'https://www.oracle.com/security-alerts/cpuapr2022.html',
-                'https://www.oracle.com/security-alerts/cpujul2022.html',
-                'https://www.tenable.com/security/tns-2022-06',
-                'https://www.tenable.com/security/tns-2022-07',
-                'https://www.tenable.com/security/tns-2022-08',
-                'https://www.tenable.com/security/tns-2022-09'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: Infinite loop in BN_mod_sqrt() reachable when parsing certificates'
-            },
-            {
-              'cve':  'CVE-2021-23841',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'nvd': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-476'
-              ],
-              'description':   'The OpenSSL public API function X509_issuer_and_serial_hash() attempts to create a unique hash value based on the issuer and serial number data contained within an X509 certificate. However it fails to correctly handle any errors that may occur while parsing the issuer field (which might occur if the issuer field is maliciously constructed). This may subsequently result in a NULL pointer deref and a crash leading to a potential denial of service attack. The function X509_issuer_and_serial_hash() is never directly called by OpenSSL itself so applications are only vulnerable if they use this function directly and they use it on certificates that may have been obtained from untrusted sources. OpenSSL versions 1.1.1i and below are affected by this issue. Users of these versions should upgrade to OpenSSL 1.1.1j. OpenSSL versions 1.0.2x and below are affected by this issue. However OpenSSL 1.0.2 is out of support and no longer receiving public updates. Premium support customers of OpenSSL 1.0.2 should upgrade to 1.0.2y. Other users should upgrade to 1.1.1j. Fixed in OpenSSL 1.1.1j (Affected 1.1.1-1.1.1i). Fixed in OpenSSL 1.0.2y (Affected 1.0.2-1.0.2x).',
-              'diffID':        'sha256:34db83edb16a705056c939afc7ee704663597e4c6794e8da795f800710a6b4ca',
-              'fixedVersions': [
-                '1.1.1j-r0'
-              ],
-              'installedVersion': '1.1.1i-r0',
-              'packageName':      'libcrypto1.1',
-              'purl':             'pkg:apk/alpine/libcrypto1.1@1.1.1i-r0?arch=ppc64le&distro=3.12.3',
-              'references':       [
-                'http://seclists.org/fulldisclosure/2021/May/67',
-                'http://seclists.org/fulldisclosure/2021/May/68',
-                'http://seclists.org/fulldisclosure/2021/May/70',
-                'https://access.redhat.com/security/cve/CVE-2021-23841',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=1908036',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=1930310',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=1930324',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=1934534',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=1934600',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=1939637',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=1940085',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=1965362',
-                'https://cert-portal.siemens.com/productcert/pdf/ssa-637483.pdf',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-23840',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-23841',
-                'https://errata.rockylinux.org/RLSA-2021:4424',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=122a19ab48091c657f7cb1fb3af9fc07bd557bbf',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=8252ee4d90f3f2004d3d0aeeed003ad49c9a7807',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=122a19ab48091c657f7cb1fb3af9fc07bd557bbf',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=6a51b9e1d0cf0bf8515f7201b68fb0a3482b3dc1',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=8252ee4d90f3f2004d3d0aeeed003ad49c9a7807',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=9b1129239f3ebb1d1c98ce9ed41d5c9476c47cb2',
-                'https://github.com/alexcrichton/openssl-src-rs',
-                'https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA44846',
-                'https://linux.oracle.com/cve/CVE-2021-23841.html',
-                'https://linux.oracle.com/errata/ELSA-2021-9561.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-23841',
-                'https://rustsec.org/advisories/RUSTSEC-2021-0058',
-                'https://rustsec.org/advisories/RUSTSEC-2021-0058.html',
-                'https://security.gentoo.org/glsa/202103-03',
-                'https://security.netapp.com/advisory/ntap-20210219-0009',
-                'https://security.netapp.com/advisory/ntap-20210219-0009/',
-                'https://security.netapp.com/advisory/ntap-20210513-0002',
-                'https://security.netapp.com/advisory/ntap-20210513-0002/',
-                'https://security.netapp.com/advisory/ntap-20240621-0006/',
-                'https://support.apple.com/kb/HT212528',
-                'https://support.apple.com/kb/HT212529',
-                'https://support.apple.com/kb/HT212534',
-                'https://ubuntu.com/security/notices/USN-4738-1',
-                'https://ubuntu.com/security/notices/USN-4745-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-23841',
-                'https://www.debian.org/security/2021/dsa-4855',
-                'https://www.openssl.org/news/secadv/20210216.txt',
-                'https://www.oracle.com//security-alerts/cpujul2021.html',
-                'https://www.oracle.com/security-alerts/cpuApr2021.html',
-                'https://www.oracle.com/security-alerts/cpuapr2022.html',
-                'https://www.oracle.com/security-alerts/cpuoct2021.html',
-                'https://www.tenable.com/security/tns-2021-03',
-                'https://www.tenable.com/security/tns-2021-09'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: NULL pointer dereference in X509_issuer_and_serial_hash()'
-            },
-            {
-              'cve':  'CVE-2021-3449',
-              'cvss': {
-                'bitnami': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'ghsa': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'nvd': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-476'
-              ],
-              'description':   'An OpenSSL TLS server may crash if sent a maliciously crafted renegotiation ClientHello message from a client. If a TLSv1.2 renegotiation ClientHello omits the signature_algorithms extension (where it was present in the initial ClientHello), but includes a signature_algorithms_cert extension then a NULL pointer dereference will result, leading to a crash and a denial of service attack. A server is only vulnerable if it has TLSv1.2 and renegotiation enabled (which is the default configuration). OpenSSL TLS clients are not impacted by this issue. All OpenSSL 1.1.1 versions are affected by this issue. Users of these versions should upgrade to OpenSSL 1.1.1k. OpenSSL 1.0.2 is not impacted by this issue. Fixed in OpenSSL 1.1.1k (Affected 1.1.1-1.1.1j).',
-              'diffID':        'sha256:34db83edb16a705056c939afc7ee704663597e4c6794e8da795f800710a6b4ca',
-              'fixedVersions': [
-                '1.1.1k-r0'
-              ],
-              'installedVersion': '1.1.1i-r0',
-              'packageName':      'libcrypto1.1',
-              'purl':             'pkg:apk/alpine/libcrypto1.1@1.1.1i-r0?arch=ppc64le&distro=3.12.3',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2021/03/27/1',
-                'http://www.openwall.com/lists/oss-security/2021/03/27/2',
-                'http://www.openwall.com/lists/oss-security/2021/03/28/3',
-                'http://www.openwall.com/lists/oss-security/2021/03/28/4',
-                'https://access.redhat.com/security/cve/CVE-2021-3449',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=1941547',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=1941554',
-                'https://cert-portal.siemens.com/productcert/pdf/ssa-389290.pdf',
-                'https://cert-portal.siemens.com/productcert/pdf/ssa-772220.pdf',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-3449',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-3450',
-                'https://errata.rockylinux.org/RLSA-2021:1024',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=fb9fa6b51defd48157eeb207f52181f735d96148',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=fb9fa6b51defd48157eeb207f52181f735d96148',
-                'https://github.com/alexcrichton/openssl-src-rs',
-                'https://github.com/nodejs/node/pull/38083',
-                'https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA44845',
-                'https://kc.mcafee.com/corporate/index?page=content&id=SB10356',
-                'https://linux.oracle.com/cve/CVE-2021-3449.html',
-                'https://linux.oracle.com/errata/ELSA-2021-9151.html',
-                'https://lists.debian.org/debian-lts-announce/2021/08/msg00029.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CCBFLLVQVILIVGZMBJL3IXZGKWQISYNP/',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/CCBFLLVQVILIVGZMBJL3IXZGKWQISYNP',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-3449',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2021-0013',
-                'https://rustsec.org/advisories/RUSTSEC-2021-0055',
-                'https://rustsec.org/advisories/RUSTSEC-2021-0055.html',
-                'https://security.FreeBSD.org/advisories/FreeBSD-SA-21:07.openssl.asc',
-                'https://security.gentoo.org/glsa/202103-03',
-                'https://security.netapp.com/advisory/ntap-20210326-0006',
-                'https://security.netapp.com/advisory/ntap-20210326-0006/',
-                'https://security.netapp.com/advisory/ntap-20210513-0002',
-                'https://security.netapp.com/advisory/ntap-20210513-0002/',
-                'https://security.netapp.com/advisory/ntap-20240621-0006/',
-                'https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-openssl-2021-GHY28dJd',
-                'https://ubuntu.com/security/notices/USN-4891-1',
-                'https://ubuntu.com/security/notices/USN-5038-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-3449',
-                'https://www.debian.org/security/2021/dsa-4875',
-                'https://www.openssl.org/news/secadv/20210325.txt',
-                'https://www.oracle.com//security-alerts/cpujul2021.html',
-                'https://www.oracle.com/security-alerts/cpuApr2021.html',
-                'https://www.oracle.com/security-alerts/cpuapr2022.html',
-                'https://www.oracle.com/security-alerts/cpujul2022.html',
-                'https://www.oracle.com/security-alerts/cpuoct2021.html',
-                'https://www.tenable.com/security/tns-2021-05',
-                'https://www.tenable.com/security/tns-2021-06',
-                'https://www.tenable.com/security/tns-2021-09',
-                'https://www.tenable.com/security/tns-2021-10'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: NULL pointer dereference in signature_algorithms processing'
-            },
-            {
-              'cve':  'CVE-2021-23839',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '3.7',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N'
-                },
-                'redhat': {
-                  'v3score':  '3.7',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-327'
-              ],
-              'description':   'OpenSSL 1.0.2 supports SSLv2. If a client attempts to negotiate SSLv2 with a server that is configured to support both SSLv2 and more recent SSL and TLS versions then a check is made for a version rollback attack when unpadding an RSA signature. Clients that support SSL or TLS versions greater than SSLv2 are supposed to use a special form of padding. A server that supports greater than SSLv2 is supposed to reject connection attempts from a client where this special form of padding is present, because this indicates that a version rollback has occurred (i.e. both client and server support greater than SSLv2, and yet this is the version that is being requested). The implementation of this padding check inverted the logic so that the connection attempt is accepted if the padding is present, and rejected if it is absent. This means that such as server will accept a connection if a version rollback attack has occurred. Further the server will erroneously reject a connection if a normal SSLv2 connection attempt is made. Only OpenSSL 1.0.2 servers from version 1.0.2s to 1.0.2x are affected by this issue. In order to be vulnerable a 1.0.2 server must: 1) have configured SSLv2 support at compile time (this is off by default), 2) have configured SSLv2 support at runtime (this is off by default), 3) have configured SSLv2 ciphersuites (these are not in the default ciphersuite list) OpenSSL 1.1.1 does not have SSLv2 support and therefore is not vulnerable to this issue. The underlying error is in the implementation of the RSA_padding_check_SSLv23() function. This also affects the RSA_SSLV23_PADDING padding mode used by various other functions. Although 1.1.1 does not support SSLv2 the RSA_padding_check_SSLv23() function still exists, as does the RSA_SSLV23_PADDING padding mode. Applications that directly call that function or use that padding mode will encounter this issue. However since there is no support for the SSLv2 protocol in 1.1.1 this is considered a bug and not a security issue in that version. OpenSSL 1.0.2 is out of support and no longer receiving public updates. Premium support customers of OpenSSL 1.0.2 should upgrade to 1.0.2y. Other users should upgrade to 1.1.1j. Fixed in OpenSSL 1.0.2y (Affected 1.0.2s-1.0.2x).',
-              'diffID':        'sha256:34db83edb16a705056c939afc7ee704663597e4c6794e8da795f800710a6b4ca',
-              'fixedVersions': [
-                '1.1.1j-r0'
-              ],
-              'installedVersion': '1.1.1i-r0',
-              'packageName':      'libcrypto1.1',
-              'purl':             'pkg:apk/alpine/libcrypto1.1@1.1.1i-r0?arch=ppc64le&distro=3.12.3',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-23839',
-                'https://cert-portal.siemens.com/productcert/pdf/ssa-637483.pdf',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=30919ab80a478f2d81f2e9acdcca3fa4740cd547',
-                'https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA44846',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-23839',
-                'https://security.netapp.com/advisory/ntap-20210219-0009/',
-                'https://security.netapp.com/advisory/ntap-20240621-0006/',
-                'https://www.cve.org/CVERecord?id=CVE-2021-23839',
-                'https://www.openssl.org/news/secadv/20210216.txt',
-                'https://www.oracle.com//security-alerts/cpujul2021.html',
-                'https://www.oracle.com/security-alerts/cpuApr2021.html',
-                'https://www.oracle.com/security-alerts/cpuapr2022.html',
-                'https://www.oracle.com/security-alerts/cpuoct2021.html'
-              ],
-              'severity':   'LOW',
-              'suppressed': false,
-              'title':      'openssl: incorrect SSLv2 rollback protection'
-            },
-            {
-              'cve':  'CVE-2021-3711',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '9.8',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'nvd': {
-                  'v3score':  '9.8',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '9.8',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-120'
-              ],
-              'description':   'In order to decrypt SM2 encrypted data an application is expected to call the API function EVP_PKEY_decrypt(). Typically an application will call this function twice. The first time, on entry, the "out" parameter can be NULL and, on exit, the "outlen" parameter is populated with the buffer size required to hold the decrypted plaintext. The application can then allocate a sufficiently sized buffer and call EVP_PKEY_decrypt() again, but this time passing a non-NULL value for the "out" parameter. A bug in the implementation of the SM2 decryption code means that the calculation of the buffer size required to hold the plaintext returned by the first call to EVP_PKEY_decrypt() can be smaller than the actual size required by the second call. This can lead to a buffer overflow when EVP_PKEY_decrypt() is called by the application a second time with a buffer that is too small. A malicious attacker who is able present SM2 content for decryption to an application could cause attacker chosen data to overflow the buffer by up to a maximum of 62 bytes altering the contents of other data held after the buffer, possibly changing application behaviour or causing the application to crash. The location of the buffer is application dependent but is typically heap allocated. Fixed in OpenSSL 1.1.1l (Affected 1.1.1-1.1.1k).',
-              'diffID':        'sha256:34db83edb16a705056c939afc7ee704663597e4c6794e8da795f800710a6b4ca',
-              'fixedVersions': [
-                '1.1.1l-r0'
-              ],
-              'installedVersion': '1.1.1i-r0',
-              'packageName':      'libssl1.1',
-              'purl':             'pkg:apk/alpine/libssl1.1@1.1.1i-r0?arch=ppc64le&distro=3.12.3',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2021/08/26/2',
-                'https://access.redhat.com/security/cve/CVE-2021-3711',
-                'https://cert-portal.siemens.com/productcert/pdf/ssa-389290.pdf',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=59f5e75f3bced8fc0e130d72a3f582cf7b480b46',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=59f5e75f3bced8fc0e130d72a3f582cf7b480b46',
-                'https://lists.apache.org/thread.html/r18995de860f0e63635f3008fd2a6aca82394249476d21691e7c59c9e%40%3Cdev.tomcat.apache.org%3E',
-                'https://lists.apache.org/thread.html/r18995de860f0e63635f3008fd2a6aca82394249476d21691e7c59c9e@%3Cdev.tomcat.apache.org%3E',
-                'https://lists.apache.org/thread.html/rad5d9f83f0d11fb3f8bb148d179b8a9ad7c6a17f18d70e5805a713d1%40%3Cdev.tomcat.apache.org%3E',
-                'https://lists.apache.org/thread.html/rad5d9f83f0d11fb3f8bb148d179b8a9ad7c6a17f18d70e5805a713d1@%3Cdev.tomcat.apache.org%3E',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-3711',
-                'https://rustsec.org/advisories/RUSTSEC-2021-0097.html',
-                'https://security.gentoo.org/glsa/202209-02',
-                'https://security.gentoo.org/glsa/202210-02',
-                'https://security.netapp.com/advisory/ntap-20210827-0010',
-                'https://security.netapp.com/advisory/ntap-20210827-0010/',
-                'https://security.netapp.com/advisory/ntap-20211022-0003',
-                'https://security.netapp.com/advisory/ntap-20211022-0003/',
-                'https://security.netapp.com/advisory/ntap-20240621-0006',
-                'https://security.netapp.com/advisory/ntap-20240621-0006/',
-                'https://ubuntu.com/security/notices/USN-5051-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-3711',
-                'https://www.debian.org/security/2021/dsa-4963',
-                'https://www.openssl.org/news/secadv/20210824.txt',
-                'https://www.oracle.com/security-alerts/cpuapr2022.html',
-                'https://www.oracle.com/security-alerts/cpujan2022.html',
-                'https://www.oracle.com/security-alerts/cpuoct2021.html',
-                'https://www.tenable.com/security/tns-2021-16',
-                'https://www.tenable.com/security/tns-2022-02'
-              ],
-              'severity':   'CRITICAL',
-              'suppressed': false,
-              'title':      'openssl: SM2 Decryption Buffer Overflow'
-            },
-            {
-              'cve':  'CVE-2021-23840',
-              'cvss': {
-                'bitnami': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'ghsa': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'nvd': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-190'
-              ],
-              'description':   'Calls to EVP_CipherUpdate, EVP_EncryptUpdate and EVP_DecryptUpdate may overflow the output length argument in some cases where the input length is close to the maximum permissable length for an integer on the platform. In such cases the return value from the function call will be 1 (indicating success), but the output length value will be negative. This could cause applications to behave incorrectly or crash. OpenSSL versions 1.1.1i and below are affected by this issue. Users of these versions should upgrade to OpenSSL 1.1.1j. OpenSSL versions 1.0.2x and below are affected by this issue. However OpenSSL 1.0.2 is out of support and no longer receiving public updates. Premium support customers of OpenSSL 1.0.2 should upgrade to 1.0.2y. Other users should upgrade to 1.1.1j. Fixed in OpenSSL 1.1.1j (Affected 1.1.1-1.1.1i). Fixed in OpenSSL 1.0.2y (Affected 1.0.2-1.0.2x).',
-              'diffID':        'sha256:34db83edb16a705056c939afc7ee704663597e4c6794e8da795f800710a6b4ca',
-              'fixedVersions': [
-                '1.1.1j-r0'
-              ],
-              'installedVersion': '1.1.1i-r0',
-              'packageName':      'libssl1.1',
-              'purl':             'pkg:apk/alpine/libssl1.1@1.1.1i-r0?arch=ppc64le&distro=3.12.3',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-23840',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=1908036',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=1930310',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=1930324',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=1934534',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=1934600',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=1939637',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=1940085',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=1965362',
-                'https://cert-portal.siemens.com/productcert/pdf/ssa-389290.pdf',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-23840',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-23841',
-                'https://errata.rockylinux.org/RLSA-2021:4424',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=6a51b9e1d0cf0bf8515f7201b68fb0a3482b3dc1',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=9b1129239f3ebb1d1c98ce9ed41d5c9476c47cb2',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=6a51b9e1d0cf0bf8515f7201b68fb0a3482b3dc1',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=9b1129239f3ebb1d1c98ce9ed41d5c9476c47cb2',
-                'https://github.com/alexcrichton/openssl-src-rs',
-                'https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA44846',
-                'https://kc.mcafee.com/corporate/index?page=content&id=SB10366',
-                'https://linux.oracle.com/cve/CVE-2021-23840.html',
-                'https://linux.oracle.com/errata/ELSA-2021-9561.html',
-                'https://lists.apache.org/thread.html/r58af02e294bd07f487e2c64ffc0a29b837db5600e33b6e698b9d696b%40%3Cissues.bookkeeper.apache.org%3E',
-                'https://lists.apache.org/thread.html/r58af02e294bd07f487e2c64ffc0a29b837db5600e33b6e698b9d696b@%3Cissues.bookkeeper.apache.org%3E',
-                'https://lists.apache.org/thread.html/rf4c02775860db415b4955778a131c2795223f61cb8c6a450893651e4%40%3Cissues.bookkeeper.apache.org%3E',
-                'https://lists.apache.org/thread.html/rf4c02775860db415b4955778a131c2795223f61cb8c6a450893651e4@%3Cissues.bookkeeper.apache.org%3E',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-23840',
-                'https://rustsec.org/advisories/RUSTSEC-2021-0057.html',
-                'https://security.gentoo.org/glsa/202103-03',
-                'https://security.netapp.com/advisory/ntap-20210219-0009',
-                'https://security.netapp.com/advisory/ntap-20210219-0009/',
-                'https://security.netapp.com/advisory/ntap-20240621-0006/',
-                'https://ubuntu.com/security/notices/USN-4738-1',
-                'https://ubuntu.com/security/notices/USN-5088-1',
-                'https://ubuntu.com/security/notices/USN-7018-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-23840',
-                'https://www.debian.org/security/2021/dsa-4855',
-                'https://www.openssl.org/news/secadv/20210216.txt',
-                'https://www.oracle.com//security-alerts/cpujul2021.html',
-                'https://www.oracle.com/security-alerts/cpuApr2021.html',
-                'https://www.oracle.com/security-alerts/cpuapr2022.html',
-                'https://www.oracle.com/security-alerts/cpujan2022.html',
-                'https://www.oracle.com/security-alerts/cpuoct2021.html',
-                'https://www.tenable.com/security/tns-2021-03',
-                'https://www.tenable.com/security/tns-2021-09',
-                'https://www.tenable.com/security/tns-2021-10'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: integer overflow in CipherUpdate'
-            },
-            {
-              'cve':  'CVE-2021-3450',
-              'cvss': {
-                'bitnami': {
-                  'v3score':  '7.4',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N'
-                },
-                'ghsa': {
-                  'v3score':  '7.4',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N'
-                },
-                'nvd': {
-                  'v3score':  '7.4',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N'
-                },
-                'redhat': {
-                  'v3score':  '7.4',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-295'
-              ],
-              'description':   'The X509_V_FLAG_X509_STRICT flag enables additional security checks of the certificates present in a certificate chain. It is not set by default. Starting from OpenSSL version 1.1.1h a check to disallow certificates in the chain that have explicitly encoded elliptic curve parameters was added as an additional strict check. An error in the implementation of this check meant that the result of a previous check to confirm that certificates in the chain are valid CA certificates was overwritten. This effectively bypasses the check that non-CA certificates must not be able to issue other certificates. If a "purpose" has been configured then there is a subsequent opportunity for checks that the certificate is a valid CA. All of the named "purpose" values implemented in libcrypto perform this check. Therefore, where a purpose is set the certificate chain will still be rejected even when the strict flag has been used. A purpose is set by default in libssl client and server certificate verification routines, but it can be overridden or removed by an application. In order to be affected, an application must explicitly set the X509_V_FLAG_X509_STRICT verification flag and either not set a purpose for the certificate verification or, in the case of TLS client or server applications, override the default purpose. OpenSSL versions 1.1.1h and newer are affected by this issue. Users of these versions should upgrade to OpenSSL 1.1.1k. OpenSSL 1.0.2 is not impacted by this issue. Fixed in OpenSSL 1.1.1k (Affected 1.1.1h-1.1.1j).',
-              'diffID':        'sha256:34db83edb16a705056c939afc7ee704663597e4c6794e8da795f800710a6b4ca',
-              'fixedVersions': [
-                '1.1.1k-r0'
-              ],
-              'installedVersion': '1.1.1i-r0',
-              'packageName':      'libssl1.1',
-              'purl':             'pkg:apk/alpine/libssl1.1@1.1.1i-r0?arch=ppc64le&distro=3.12.3',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2021/03/27/1',
-                'http://www.openwall.com/lists/oss-security/2021/03/27/2',
-                'http://www.openwall.com/lists/oss-security/2021/03/28/3',
-                'http://www.openwall.com/lists/oss-security/2021/03/28/4',
-                'https://access.redhat.com/security/cve/CVE-2021-3450',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=1941547',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=1941554',
-                'https://cert-portal.siemens.com/productcert/pdf/ssa-389290.pdf',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-3449',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-3450',
-                'https://errata.rockylinux.org/RLSA-2021:1024',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=2a40b7bc7b94dd7de897a74571e7024f0cf0d63b',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=2a40b7bc7b94dd7de897a74571e7024f0cf0d63b',
-                'https://github.com/alexcrichton/openssl-src-rs',
-                'https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA44845',
-                'https://kc.mcafee.com/corporate/index?page=content&id=SB10356',
-                'https://linux.oracle.com/cve/CVE-2021-3450.html',
-                'https://linux.oracle.com/errata/ELSA-2021-9151.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CCBFLLVQVILIVGZMBJL3IXZGKWQISYNP/',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/CCBFLLVQVILIVGZMBJL3IXZGKWQISYNP',
-                'https://mta.openssl.org/pipermail/openssl-announce/2021-March/000198.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-3450',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2021-0013',
-                'https://rustsec.org/advisories/RUSTSEC-2021-0056.html',
-                'https://security.FreeBSD.org/advisories/FreeBSD-SA-21:07.openssl.asc',
-                'https://security.gentoo.org/glsa/202103-03',
-                'https://security.netapp.com/advisory/ntap-20210326-0006',
-                'https://security.netapp.com/advisory/ntap-20210326-0006/',
-                'https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-openssl-2021-GHY28dJd',
-                'https://www.cve.org/CVERecord?id=CVE-2021-3450',
-                'https://www.openssl.org/news/secadv/20210325.txt',
-                'https://www.oracle.com//security-alerts/cpujul2021.html',
-                'https://www.oracle.com/security-alerts/cpuApr2021.html',
-                'https://www.oracle.com/security-alerts/cpuapr2022.html',
-                'https://www.oracle.com/security-alerts/cpujul2022.html',
-                'https://www.oracle.com/security-alerts/cpuoct2021.html',
-                'https://www.tenable.com/security/tns-2021-05',
-                'https://www.tenable.com/security/tns-2021-08',
-                'https://www.tenable.com/security/tns-2021-09'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: CA certificate check bypass with X509_V_FLAG_X509_STRICT'
-            },
-            {
-              'cve':  'CVE-2021-3712',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '7.4',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H'
-                },
-                'nvd': {
-                  'v3score':  '7.4',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.4',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-125'
-              ],
-              'description':   "ASN.1 strings are represented internally within OpenSSL as an ASN1_STRING structure which contains a buffer holding the string data and a field holding the buffer length. This contrasts with normal C strings which are repesented as a buffer for the string data which is terminated with a NUL (0) byte. Although not a strict requirement, ASN.1 strings that are parsed using OpenSSL's own \"d2i\" functions (and other similar parsing functions) as well as any string whose value has been set with the ASN1_STRING_set() function will additionally NUL terminate the byte array in the ASN1_STRING structure. However, it is possible for applications to directly construct valid ASN1_STRING structures which do not NUL terminate the byte array by directly setting the \"data\" and \"length\" fields in the ASN1_STRING array. This can also happen by using the ASN1_STRING_set0() function. Numerous OpenSSL functions that print ASN.1 data have been found to assume that the ASN1_STRING byte array will be NUL terminated, even though this is not guaranteed for strings that have been directly constructed. Where an application requests an ASN.1 structure to be printed, and where that ASN.1 structure contains ASN1_STRINGs that have been directly constructed by the application without NUL terminating the \"data\" field, then a read buffer overrun can occur. The same thing can also occur during name constraints processing of certificates (for example if a certificate has been directly constructed by the application instead of loading it via the OpenSSL parsing functions, and the certificate contains non NUL terminated ASN1_STRING structures). It can also occur in the X509_get1_email(), X509_REQ_get1_email() and X509_get1_ocsp() functions. If a malicious actor can cause an application to directly construct an ASN1_STRING and then process it through one of the affected OpenSSL functions then this issue could be hit. This might result in a crash (causing a Denial of Service attack). It could also result in the disclosure of private memory contents (such as private keys, or sensitive plaintext). Fixed in OpenSSL 1.1.1l (Affected 1.1.1-1.1.1k). Fixed in OpenSSL 1.0.2za (Affected 1.0.2-1.0.2y).",
-              'diffID':        'sha256:34db83edb16a705056c939afc7ee704663597e4c6794e8da795f800710a6b4ca',
-              'fixedVersions': [
-                '1.1.1l-r0'
-              ],
-              'installedVersion': '1.1.1i-r0',
-              'packageName':      'libssl1.1',
-              'purl':             'pkg:apk/alpine/libssl1.1@1.1.1i-r0?arch=ppc64le&distro=3.12.3',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2021/08/26/2',
-                'https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2021-3712.json',
-                'https://access.redhat.com/security/cve/CVE-2021-3712',
-                'https://cert-portal.siemens.com/productcert/pdf/ssa-244969.pdf',
-                'https://cert-portal.siemens.com/productcert/pdf/ssa-389290.pdf',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=94d23fcff9b2a7a8368dfe52214d5c2569882c11',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=ccb0a11145ee72b042d10593a64eaf9e8a55ec12',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=94d23fcff9b2a7a8368dfe52214d5c2569882c11',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=ccb0a11145ee72b042d10593a64eaf9e8a55ec12',
-                'https://kc.mcafee.com/corporate/index?page=content&id=SB10366',
-                'https://linux.oracle.com/cve/CVE-2021-3712.html',
-                'https://linux.oracle.com/errata/ELSA-2022-9023.html',
-                'https://lists.apache.org/thread.html/r18995de860f0e63635f3008fd2a6aca82394249476d21691e7c59c9e%40%3Cdev.tomcat.apache.org%3E',
-                'https://lists.apache.org/thread.html/r18995de860f0e63635f3008fd2a6aca82394249476d21691e7c59c9e@%3Cdev.tomcat.apache.org%3E',
-                'https://lists.apache.org/thread.html/rad5d9f83f0d11fb3f8bb148d179b8a9ad7c6a17f18d70e5805a713d1%40%3Cdev.tomcat.apache.org%3E',
-                'https://lists.apache.org/thread.html/rad5d9f83f0d11fb3f8bb148d179b8a9ad7c6a17f18d70e5805a713d1@%3Cdev.tomcat.apache.org%3E',
-                'https://lists.debian.org/debian-lts-announce/2021/09/msg00014.html',
-                'https://lists.debian.org/debian-lts-announce/2021/09/msg00021.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-3712',
-                'https://rustsec.org/advisories/RUSTSEC-2021-0098.html',
-                'https://security.gentoo.org/glsa/202209-02',
-                'https://security.gentoo.org/glsa/202210-02',
-                'https://security.netapp.com/advisory/ntap-20210827-0010',
-                'https://security.netapp.com/advisory/ntap-20210827-0010/',
-                'https://security.netapp.com/advisory/ntap-20240621-0006',
-                'https://security.netapp.com/advisory/ntap-20240621-0006/',
-                'https://ubuntu.com/security/notices/USN-5051-1',
-                'https://ubuntu.com/security/notices/USN-5051-2',
-                'https://ubuntu.com/security/notices/USN-5051-3',
-                'https://ubuntu.com/security/notices/USN-5051-4 (regression only in trusty/esm)',
-                'https://ubuntu.com/security/notices/USN-5088-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-3712',
-                'https://www.debian.org/security/2021/dsa-4963',
-                'https://www.openssl.org/news/secadv/20210824.txt',
-                'https://www.oracle.com/security-alerts/cpuapr2022.html',
-                'https://www.oracle.com/security-alerts/cpujan2022.html',
-                'https://www.oracle.com/security-alerts/cpuoct2021.html',
-                'https://www.tenable.com/security/tns-2021-16',
-                'https://www.tenable.com/security/tns-2022-02'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: Read buffer overruns processing ASN.1 strings'
-            },
-            {
-              'cve':  'CVE-2022-0778',
-              'cvss': {
-                'bitnami': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'ghsa': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'nvd': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-835'
-              ],
-              'description':   'The BN_mod_sqrt() function, which computes a modular square root, contains a bug that can cause it to loop forever for non-prime moduli. Internally this function is used when parsing certificates that contain elliptic curve public keys in compressed form or explicit elliptic curve parameters with a base point encoded in compressed form. It is possible to trigger the infinite loop by crafting a certificate that has invalid explicit curve parameters. Since certificate parsing happens prior to verification of the certificate signature, any process that parses an externally supplied certificate may thus be subject to a denial of service attack. The infinite loop can also be reached when parsing crafted private keys as they can contain explicit elliptic curve parameters. Thus vulnerable situations include: - TLS clients consuming server certificates - TLS servers consuming client certificates - Hosting providers taking certificates or private keys from customers - Certificate authorities parsing certification requests from subscribers - Anything else which parses ASN.1 elliptic curve parameters Also any other applications that use the BN_mod_sqrt() where the attacker can control the parameter values are vulnerable to this DoS issue. In the OpenSSL 1.0.2 version the public key is not parsed during initial parsing of the certificate which makes it slightly harder to trigger the infinite loop. However any operation which requires the public key from the certificate will trigger the infinite loop. In particular the attacker can use a self-signed certificate to trigger the loop during verification of the certificate signature. This issue affects OpenSSL versions 1.0.2, 1.1.1 and 3.0. It was addressed in the releases of 1.1.1n and 3.0.2 on the 15th March 2022. Fixed in OpenSSL 3.0.2 (Affected 3.0.0,3.0.1). Fixed in OpenSSL 1.1.1n (Affected 1.1.1-1.1.1m). Fixed in OpenSSL 1.0.2zd (Affected 1.0.2-1.0.2zc).',
-              'diffID':        'sha256:34db83edb16a705056c939afc7ee704663597e4c6794e8da795f800710a6b4ca',
-              'fixedVersions': [
-                '1.1.1n-r0'
-              ],
-              'installedVersion': '1.1.1i-r0',
-              'packageName':      'libssl1.1',
-              'purl':             'pkg:apk/alpine/libssl1.1@1.1.1i-r0?arch=ppc64le&distro=3.12.3',
-              'references':       [
-                'http://packetstormsecurity.com/files/167344/OpenSSL-1.0.2-1.1.1-3.0-BN_mod_sqrt-Infinite-Loop.html',
-                'http://seclists.org/fulldisclosure/2022/May/33',
-                'http://seclists.org/fulldisclosure/2022/May/35',
-                'http://seclists.org/fulldisclosure/2022/May/38',
-                'https://access.redhat.com/errata/RHSA-2022:5326',
-                'https://access.redhat.com/security/cve/CVE-2022-0778',
-                'https://bugzilla.redhat.com/2062202',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2062202',
-                'https://cert-portal.siemens.com/productcert/pdf/ssa-712929.pdf',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-0778',
-                'https://errata.almalinux.org/8/ALSA-2022-5326.html',
-                'https://errata.rockylinux.org/RLSA-2022:4899',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=3118eb64934499d93db3230748a452351d1d9a65',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=380085481c64de749a6dd25cdf0bcf4360b30f83',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=a466912611aa6cbdf550cd10601390e587451246',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=3118eb64934499d93db3230748a452351d1d9a65',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=380085481c64de749a6dd25cdf0bcf4360b30f83',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=a466912611aa6cbdf550cd10601390e587451246',
-                'https://linux.oracle.com/cve/CVE-2022-0778.html',
-                'https://linux.oracle.com/errata/ELSA-2022-9272.html',
-                'https://lists.debian.org/debian-lts-announce/2022/03/msg00023.html',
-                'https://lists.debian.org/debian-lts-announce/2022/03/msg00024.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/323SNN6ZX7PRJJWP2BUAFLPUAE42XWLZ',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/323SNN6ZX7PRJJWP2BUAFLPUAE42XWLZ/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GDB3GQVJPXJE7X5C5JN6JAA4XUDWD6E6',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GDB3GQVJPXJE7X5C5JN6JAA4XUDWD6E6/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/W6K3PR542DXWLEFFMFIDMME4CWMHJRMG',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/W6K3PR542DXWLEFFMFIDMME4CWMHJRMG/',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/323SNN6ZX7PRJJWP2BUAFLPUAE42XWLZ',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/GDB3GQVJPXJE7X5C5JN6JAA4XUDWD6E6',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/W6K3PR542DXWLEFFMFIDMME4CWMHJRMG',
-                'https://nvd.nist.gov/vuln/detail/CVE-2022-0778',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2022-0002',
-                'https://rustsec.org/advisories/RUSTSEC-2022-0014.html',
-                'https://security.gentoo.org/glsa/202210-02',
-                'https://security.netapp.com/advisory/ntap-20220321-0002',
-                'https://security.netapp.com/advisory/ntap-20220321-0002/',
-                'https://security.netapp.com/advisory/ntap-20220429-0005',
-                'https://security.netapp.com/advisory/ntap-20220429-0005/',
-                'https://security.netapp.com/advisory/ntap-20240621-0006',
-                'https://security.netapp.com/advisory/ntap-20240621-0006/',
-                'https://support.apple.com/kb/HT213255',
-                'https://support.apple.com/kb/HT213256',
-                'https://support.apple.com/kb/HT213257',
-                'https://ubuntu.com/security/notices/USN-5328-1',
-                'https://ubuntu.com/security/notices/USN-5328-2',
-                'https://ubuntu.com/security/notices/USN-6457-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2022-0778',
-                'https://www.debian.org/security/2022/dsa-5103',
-                'https://www.openssl.org/news/secadv/20220315.txt',
-                'https://www.oracle.com/security-alerts/cpuapr2022.html',
-                'https://www.oracle.com/security-alerts/cpujul2022.html',
-                'https://www.tenable.com/security/tns-2022-06',
-                'https://www.tenable.com/security/tns-2022-07',
-                'https://www.tenable.com/security/tns-2022-08',
-                'https://www.tenable.com/security/tns-2022-09'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: Infinite loop in BN_mod_sqrt() reachable when parsing certificates'
-            },
-            {
-              'cve':  'CVE-2021-23841',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'nvd': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-476'
-              ],
-              'description':   'The OpenSSL public API function X509_issuer_and_serial_hash() attempts to create a unique hash value based on the issuer and serial number data contained within an X509 certificate. However it fails to correctly handle any errors that may occur while parsing the issuer field (which might occur if the issuer field is maliciously constructed). This may subsequently result in a NULL pointer deref and a crash leading to a potential denial of service attack. The function X509_issuer_and_serial_hash() is never directly called by OpenSSL itself so applications are only vulnerable if they use this function directly and they use it on certificates that may have been obtained from untrusted sources. OpenSSL versions 1.1.1i and below are affected by this issue. Users of these versions should upgrade to OpenSSL 1.1.1j. OpenSSL versions 1.0.2x and below are affected by this issue. However OpenSSL 1.0.2 is out of support and no longer receiving public updates. Premium support customers of OpenSSL 1.0.2 should upgrade to 1.0.2y. Other users should upgrade to 1.1.1j. Fixed in OpenSSL 1.1.1j (Affected 1.1.1-1.1.1i). Fixed in OpenSSL 1.0.2y (Affected 1.0.2-1.0.2x).',
-              'diffID':        'sha256:34db83edb16a705056c939afc7ee704663597e4c6794e8da795f800710a6b4ca',
-              'fixedVersions': [
-                '1.1.1j-r0'
-              ],
-              'installedVersion': '1.1.1i-r0',
-              'packageName':      'libssl1.1',
-              'purl':             'pkg:apk/alpine/libssl1.1@1.1.1i-r0?arch=ppc64le&distro=3.12.3',
-              'references':       [
-                'http://seclists.org/fulldisclosure/2021/May/67',
-                'http://seclists.org/fulldisclosure/2021/May/68',
-                'http://seclists.org/fulldisclosure/2021/May/70',
-                'https://access.redhat.com/security/cve/CVE-2021-23841',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=1908036',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=1930310',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=1930324',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=1934534',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=1934600',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=1939637',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=1940085',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=1965362',
-                'https://cert-portal.siemens.com/productcert/pdf/ssa-637483.pdf',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-23840',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-23841',
-                'https://errata.rockylinux.org/RLSA-2021:4424',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=122a19ab48091c657f7cb1fb3af9fc07bd557bbf',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=8252ee4d90f3f2004d3d0aeeed003ad49c9a7807',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=122a19ab48091c657f7cb1fb3af9fc07bd557bbf',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=6a51b9e1d0cf0bf8515f7201b68fb0a3482b3dc1',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=8252ee4d90f3f2004d3d0aeeed003ad49c9a7807',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=9b1129239f3ebb1d1c98ce9ed41d5c9476c47cb2',
-                'https://github.com/alexcrichton/openssl-src-rs',
-                'https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA44846',
-                'https://linux.oracle.com/cve/CVE-2021-23841.html',
-                'https://linux.oracle.com/errata/ELSA-2021-9561.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-23841',
-                'https://rustsec.org/advisories/RUSTSEC-2021-0058',
-                'https://rustsec.org/advisories/RUSTSEC-2021-0058.html',
-                'https://security.gentoo.org/glsa/202103-03',
-                'https://security.netapp.com/advisory/ntap-20210219-0009',
-                'https://security.netapp.com/advisory/ntap-20210219-0009/',
-                'https://security.netapp.com/advisory/ntap-20210513-0002',
-                'https://security.netapp.com/advisory/ntap-20210513-0002/',
-                'https://security.netapp.com/advisory/ntap-20240621-0006/',
-                'https://support.apple.com/kb/HT212528',
-                'https://support.apple.com/kb/HT212529',
-                'https://support.apple.com/kb/HT212534',
-                'https://ubuntu.com/security/notices/USN-4738-1',
-                'https://ubuntu.com/security/notices/USN-4745-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-23841',
-                'https://www.debian.org/security/2021/dsa-4855',
-                'https://www.openssl.org/news/secadv/20210216.txt',
-                'https://www.oracle.com//security-alerts/cpujul2021.html',
-                'https://www.oracle.com/security-alerts/cpuApr2021.html',
-                'https://www.oracle.com/security-alerts/cpuapr2022.html',
-                'https://www.oracle.com/security-alerts/cpuoct2021.html',
-                'https://www.tenable.com/security/tns-2021-03',
-                'https://www.tenable.com/security/tns-2021-09'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: NULL pointer dereference in X509_issuer_and_serial_hash()'
-            },
-            {
-              'cve':  'CVE-2021-3449',
-              'cvss': {
-                'bitnami': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'ghsa': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'nvd': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-476'
-              ],
-              'description':   'An OpenSSL TLS server may crash if sent a maliciously crafted renegotiation ClientHello message from a client. If a TLSv1.2 renegotiation ClientHello omits the signature_algorithms extension (where it was present in the initial ClientHello), but includes a signature_algorithms_cert extension then a NULL pointer dereference will result, leading to a crash and a denial of service attack. A server is only vulnerable if it has TLSv1.2 and renegotiation enabled (which is the default configuration). OpenSSL TLS clients are not impacted by this issue. All OpenSSL 1.1.1 versions are affected by this issue. Users of these versions should upgrade to OpenSSL 1.1.1k. OpenSSL 1.0.2 is not impacted by this issue. Fixed in OpenSSL 1.1.1k (Affected 1.1.1-1.1.1j).',
-              'diffID':        'sha256:34db83edb16a705056c939afc7ee704663597e4c6794e8da795f800710a6b4ca',
-              'fixedVersions': [
-                '1.1.1k-r0'
-              ],
-              'installedVersion': '1.1.1i-r0',
-              'packageName':      'libssl1.1',
-              'purl':             'pkg:apk/alpine/libssl1.1@1.1.1i-r0?arch=ppc64le&distro=3.12.3',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2021/03/27/1',
-                'http://www.openwall.com/lists/oss-security/2021/03/27/2',
-                'http://www.openwall.com/lists/oss-security/2021/03/28/3',
-                'http://www.openwall.com/lists/oss-security/2021/03/28/4',
-                'https://access.redhat.com/security/cve/CVE-2021-3449',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=1941547',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=1941554',
-                'https://cert-portal.siemens.com/productcert/pdf/ssa-389290.pdf',
-                'https://cert-portal.siemens.com/productcert/pdf/ssa-772220.pdf',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-3449',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-3450',
-                'https://errata.rockylinux.org/RLSA-2021:1024',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=fb9fa6b51defd48157eeb207f52181f735d96148',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=fb9fa6b51defd48157eeb207f52181f735d96148',
-                'https://github.com/alexcrichton/openssl-src-rs',
-                'https://github.com/nodejs/node/pull/38083',
-                'https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA44845',
-                'https://kc.mcafee.com/corporate/index?page=content&id=SB10356',
-                'https://linux.oracle.com/cve/CVE-2021-3449.html',
-                'https://linux.oracle.com/errata/ELSA-2021-9151.html',
-                'https://lists.debian.org/debian-lts-announce/2021/08/msg00029.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CCBFLLVQVILIVGZMBJL3IXZGKWQISYNP/',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/CCBFLLVQVILIVGZMBJL3IXZGKWQISYNP',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-3449',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2021-0013',
-                'https://rustsec.org/advisories/RUSTSEC-2021-0055',
-                'https://rustsec.org/advisories/RUSTSEC-2021-0055.html',
-                'https://security.FreeBSD.org/advisories/FreeBSD-SA-21:07.openssl.asc',
-                'https://security.gentoo.org/glsa/202103-03',
-                'https://security.netapp.com/advisory/ntap-20210326-0006',
-                'https://security.netapp.com/advisory/ntap-20210326-0006/',
-                'https://security.netapp.com/advisory/ntap-20210513-0002',
-                'https://security.netapp.com/advisory/ntap-20210513-0002/',
-                'https://security.netapp.com/advisory/ntap-20240621-0006/',
-                'https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-openssl-2021-GHY28dJd',
-                'https://ubuntu.com/security/notices/USN-4891-1',
-                'https://ubuntu.com/security/notices/USN-5038-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-3449',
-                'https://www.debian.org/security/2021/dsa-4875',
-                'https://www.openssl.org/news/secadv/20210325.txt',
-                'https://www.oracle.com//security-alerts/cpujul2021.html',
-                'https://www.oracle.com/security-alerts/cpuApr2021.html',
-                'https://www.oracle.com/security-alerts/cpuapr2022.html',
-                'https://www.oracle.com/security-alerts/cpujul2022.html',
-                'https://www.oracle.com/security-alerts/cpuoct2021.html',
-                'https://www.tenable.com/security/tns-2021-05',
-                'https://www.tenable.com/security/tns-2021-06',
-                'https://www.tenable.com/security/tns-2021-09',
-                'https://www.tenable.com/security/tns-2021-10'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: NULL pointer dereference in signature_algorithms processing'
-            },
-            {
-              'cve':  'CVE-2021-23839',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '3.7',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N'
-                },
-                'redhat': {
-                  'v3score':  '3.7',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-327'
-              ],
-              'description':   'OpenSSL 1.0.2 supports SSLv2. If a client attempts to negotiate SSLv2 with a server that is configured to support both SSLv2 and more recent SSL and TLS versions then a check is made for a version rollback attack when unpadding an RSA signature. Clients that support SSL or TLS versions greater than SSLv2 are supposed to use a special form of padding. A server that supports greater than SSLv2 is supposed to reject connection attempts from a client where this special form of padding is present, because this indicates that a version rollback has occurred (i.e. both client and server support greater than SSLv2, and yet this is the version that is being requested). The implementation of this padding check inverted the logic so that the connection attempt is accepted if the padding is present, and rejected if it is absent. This means that such as server will accept a connection if a version rollback attack has occurred. Further the server will erroneously reject a connection if a normal SSLv2 connection attempt is made. Only OpenSSL 1.0.2 servers from version 1.0.2s to 1.0.2x are affected by this issue. In order to be vulnerable a 1.0.2 server must: 1) have configured SSLv2 support at compile time (this is off by default), 2) have configured SSLv2 support at runtime (this is off by default), 3) have configured SSLv2 ciphersuites (these are not in the default ciphersuite list) OpenSSL 1.1.1 does not have SSLv2 support and therefore is not vulnerable to this issue. The underlying error is in the implementation of the RSA_padding_check_SSLv23() function. This also affects the RSA_SSLV23_PADDING padding mode used by various other functions. Although 1.1.1 does not support SSLv2 the RSA_padding_check_SSLv23() function still exists, as does the RSA_SSLV23_PADDING padding mode. Applications that directly call that function or use that padding mode will encounter this issue. However since there is no support for the SSLv2 protocol in 1.1.1 this is considered a bug and not a security issue in that version. OpenSSL 1.0.2 is out of support and no longer receiving public updates. Premium support customers of OpenSSL 1.0.2 should upgrade to 1.0.2y. Other users should upgrade to 1.1.1j. Fixed in OpenSSL 1.0.2y (Affected 1.0.2s-1.0.2x).',
-              'diffID':        'sha256:34db83edb16a705056c939afc7ee704663597e4c6794e8da795f800710a6b4ca',
-              'fixedVersions': [
-                '1.1.1j-r0'
-              ],
-              'installedVersion': '1.1.1i-r0',
-              'packageName':      'libssl1.1',
-              'purl':             'pkg:apk/alpine/libssl1.1@1.1.1i-r0?arch=ppc64le&distro=3.12.3',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-23839',
-                'https://cert-portal.siemens.com/productcert/pdf/ssa-637483.pdf',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=30919ab80a478f2d81f2e9acdcca3fa4740cd547',
-                'https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA44846',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-23839',
-                'https://security.netapp.com/advisory/ntap-20210219-0009/',
-                'https://security.netapp.com/advisory/ntap-20240621-0006/',
-                'https://www.cve.org/CVERecord?id=CVE-2021-23839',
-                'https://www.openssl.org/news/secadv/20210216.txt',
-                'https://www.oracle.com//security-alerts/cpujul2021.html',
-                'https://www.oracle.com/security-alerts/cpuApr2021.html',
-                'https://www.oracle.com/security-alerts/cpuapr2022.html',
-                'https://www.oracle.com/security-alerts/cpuoct2021.html'
-              ],
-              'severity':   'LOW',
-              'suppressed': false,
-              'title':      'openssl: incorrect SSLv2 rollback protection'
-            },
-            {
-              'cve':  'CVE-2021-28831',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-755'
-              ],
-              'description':   'decompress_gunzip.c in BusyBox through 1.32.1 mishandles the error bit on the huft_build result pointer, with a resultant invalid free or segmentation fault, via malformed gzip data.',
-              'diffID':        'sha256:34db83edb16a705056c939afc7ee704663597e4c6794e8da795f800710a6b4ca',
-              'fixedVersions': [
-                '1.31.1-r20'
-              ],
-              'installedVersion': '1.31.1-r19',
-              'packageName':      'ssl_client',
-              'purl':             'pkg:apk/alpine/ssl_client@1.31.1-r19?arch=ppc64le&distro=3.12.3',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-28831',
-                'https://git.busybox.net/busybox/commit/?id=f25d254dfd4243698c31a4f3153d4ac72aa9e9bd',
-                'https://lists.debian.org/debian-lts-announce/2021/04/msg00001.html',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/3UDQGJRECXFS5EZVDH2OI45FMO436AC4/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/Z7ZIFKPRR32ZYA3WAA2NXFA3QHHOU6FJ/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZASBW7QRRLY5V2R44MQ4QQM4CZIDHM2U/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-28831',
-                'https://security.gentoo.org/glsa/202105-09',
-                'https://security.netapp.com/advisory/ntap-20250509-0005/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://ubuntu.com/security/notices/USN-5179-2',
-                'https://ubuntu.com/security/notices/USN-6335-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-28831'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: invalid free or segmentation fault via malformed gzip data'
-            },
-            {
-              'cve':  'CVE-2021-42378',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the getvar_i function",
-              'diffID':        'sha256:34db83edb16a705056c939afc7ee704663597e4c6794e8da795f800710a6b4ca',
-              'fixedVersions': [
-                '1.31.1-r21'
-              ],
-              'installedVersion': '1.31.1-r19',
-              'packageName':      'ssl_client',
-              'purl':             'pkg:apk/alpine/ssl_client@1.31.1-r19?arch=ppc64le&distro=3.12.3',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42378',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42378',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42378'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the getvar_i()'
-            },
-            {
-              'cve':  'CVE-2021-42379',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the next_input_file function",
-              'diffID':        'sha256:34db83edb16a705056c939afc7ee704663597e4c6794e8da795f800710a6b4ca',
-              'fixedVersions': [
-                '1.31.1-r21'
-              ],
-              'installedVersion': '1.31.1-r19',
-              'packageName':      'ssl_client',
-              'purl':             'pkg:apk/alpine/ssl_client@1.31.1-r19?arch=ppc64le&distro=3.12.3',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42379',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42379',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42379'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the next_input_file()'
-            },
-            {
-              'cve':  'CVE-2021-42380',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the clrvar function",
-              'diffID':        'sha256:34db83edb16a705056c939afc7ee704663597e4c6794e8da795f800710a6b4ca',
-              'fixedVersions': [
-                '1.31.1-r21'
-              ],
-              'installedVersion': '1.31.1-r19',
-              'packageName':      'ssl_client',
-              'purl':             'pkg:apk/alpine/ssl_client@1.31.1-r19?arch=ppc64le&distro=3.12.3',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42380',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42380',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42380'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the clrvar()'
-            },
-            {
-              'cve':  'CVE-2021-42381',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the hash_init function",
-              'diffID':        'sha256:34db83edb16a705056c939afc7ee704663597e4c6794e8da795f800710a6b4ca',
-              'fixedVersions': [
-                '1.31.1-r21'
-              ],
-              'installedVersion': '1.31.1-r19',
-              'packageName':      'ssl_client',
-              'purl':             'pkg:apk/alpine/ssl_client@1.31.1-r19?arch=ppc64le&distro=3.12.3',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42381',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42381',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42381'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the hash_init()'
-            },
-            {
-              'cve':  'CVE-2021-42382',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the getvar_s function",
-              'diffID':        'sha256:34db83edb16a705056c939afc7ee704663597e4c6794e8da795f800710a6b4ca',
-              'fixedVersions': [
-                '1.31.1-r21'
-              ],
-              'installedVersion': '1.31.1-r19',
-              'packageName':      'ssl_client',
-              'purl':             'pkg:apk/alpine/ssl_client@1.31.1-r19?arch=ppc64le&distro=3.12.3',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42382',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42382',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42382'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the getvar_s()'
-            },
-            {
-              'cve':  'CVE-2021-42383',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the evaluate function",
-              'diffID':        'sha256:34db83edb16a705056c939afc7ee704663597e4c6794e8da795f800710a6b4ca',
-              'fixedVersions': [
-                '1.31.1-r21'
-              ],
-              'installedVersion': '1.31.1-r19',
-              'packageName':      'ssl_client',
-              'purl':             'pkg:apk/alpine/ssl_client@1.31.1-r19?arch=ppc64le&distro=3.12.3',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42383',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42383',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42383'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the evaluate()'
-            },
-            {
-              'cve':  'CVE-2021-42384',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the handle_special function",
-              'diffID':        'sha256:34db83edb16a705056c939afc7ee704663597e4c6794e8da795f800710a6b4ca',
-              'fixedVersions': [
-                '1.31.1-r21'
-              ],
-              'installedVersion': '1.31.1-r19',
-              'packageName':      'ssl_client',
-              'purl':             'pkg:apk/alpine/ssl_client@1.31.1-r19?arch=ppc64le&distro=3.12.3',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42384',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42384',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42384'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the handle_special()'
-            },
-            {
-              'cve':  'CVE-2021-42385',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the evaluate function",
-              'diffID':        'sha256:34db83edb16a705056c939afc7ee704663597e4c6794e8da795f800710a6b4ca',
-              'fixedVersions': [
-                '1.31.1-r21'
-              ],
-              'installedVersion': '1.31.1-r19',
-              'packageName':      'ssl_client',
-              'purl':             'pkg:apk/alpine/ssl_client@1.31.1-r19?arch=ppc64le&distro=3.12.3',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42385',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42385',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42385'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the evaluate()'
-            },
-            {
-              'cve':  'CVE-2021-42386',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the nvalloc function",
-              'diffID':        'sha256:34db83edb16a705056c939afc7ee704663597e4c6794e8da795f800710a6b4ca',
-              'fixedVersions': [
-                '1.31.1-r21'
-              ],
-              'installedVersion': '1.31.1-r19',
-              'packageName':      'ssl_client',
-              'purl':             'pkg:apk/alpine/ssl_client@1.31.1-r19?arch=ppc64le&distro=3.12.3',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42386',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42386',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42386'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the nvalloc()'
-            },
-            {
-              'cve':  'CVE-2022-28391',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '8.8',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-88'
-              ],
-              'description':   "BusyBox through 1.35.0 allows remote attackers to execute arbitrary code if netstat is used to print a DNS PTR record's value to a VT compatible terminal. Alternatively, the attacker could choose to change the terminal's colors.",
-              'diffID':        'sha256:34db83edb16a705056c939afc7ee704663597e4c6794e8da795f800710a6b4ca',
-              'fixedVersions': [
-                '1.31.1-r22'
-              ],
-              'installedVersion': '1.31.1-r19',
-              'packageName':      'ssl_client',
-              'purl':             'pkg:apk/alpine/ssl_client@1.31.1-r19?arch=ppc64le&distro=3.12.3',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2022-28391',
-                'https://git.alpinelinux.org/aports/plain/main/busybox/0001-libbb-sockaddr2str-ensure-only-printable-characters-.patch',
-                'https://git.alpinelinux.org/aports/plain/main/busybox/0002-nslookup-sanitize-all-printed-strings-with-printable.patch',
-                'https://gitlab.alpinelinux.org/alpine/aports/-/issues/13661',
-                'https://nvd.nist.gov/vuln/detail/CVE-2022-28391',
-                'https://www.cve.org/CVERecord?id=CVE-2022-28391'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: remote attackers may execute arbitrary code if netstat is used'
-            },
-            {
-              'cve':  'CVE-2021-42374',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '5.7',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-125'
-              ],
-              'description':   "An out-of-bounds heap read in Busybox's unlzma applet leads to information leak and denial of service when crafted LZMA-compressed input is decompressed. This can be triggered by any applet/format that",
-              'diffID':        'sha256:34db83edb16a705056c939afc7ee704663597e4c6794e8da795f800710a6b4ca',
-              'fixedVersions': [
-                '1.31.1-r21'
-              ],
-              'installedVersion': '1.31.1-r19',
-              'packageName':      'ssl_client',
-              'purl':             'pkg:apk/alpine/ssl_client@1.31.1-r19?arch=ppc64le&distro=3.12.3',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42374',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42374',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42374'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'busybox: out-of-bounds read in unlzma applet leads to information leak and denial of service when crafted LZMA-compressed input is decompressed'
-            },
-            {
-              'cve':  'CVE-2022-37434',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '9.8',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-787',
-                'CWE-120'
-              ],
-              'description':   'zlib through 1.2.12 has a heap-based buffer over-read or buffer overflow in inflate in inflate.c via a large gzip header extra field. NOTE: only applications that call inflateGetHeader are affected. Some common applications bundle the affected zlib source code but may be unable to call inflateGetHeader (e.g., see the nodejs/node reference).',
-              'diffID':        'sha256:34db83edb16a705056c939afc7ee704663597e4c6794e8da795f800710a6b4ca',
-              'fixedVersions': [
-                '1.2.12-r2'
-              ],
-              'installedVersion': '1.2.11-r3',
-              'packageName':      'zlib',
-              'purl':             'pkg:apk/alpine/zlib@1.2.11-r3?arch=ppc64le&distro=3.12.3',
-              'references':       [
-                'http://seclists.org/fulldisclosure/2022/Oct/37',
-                'http://seclists.org/fulldisclosure/2022/Oct/38',
-                'http://seclists.org/fulldisclosure/2022/Oct/41',
-                'http://seclists.org/fulldisclosure/2022/Oct/42',
-                'http://www.openwall.com/lists/oss-security/2022/08/05/2',
-                'http://www.openwall.com/lists/oss-security/2022/08/09/1',
-                'https://access.redhat.com/errata/RHSA-2022:8291',
-                'https://access.redhat.com/security/cve/CVE-2022-37434',
-                'https://bugzilla.redhat.com/2116639',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2053198',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2077431',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2081296',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2116639',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-37434',
-                'https://errata.almalinux.org/9/ALSA-2022-8291.html',
-                'https://errata.rockylinux.org/RLSA-2022:8291',
-                'https://github.com/curl/curl/issues/9271',
-                'https://github.com/ivd38/zlib_overflow',
-                'https://github.com/madler/zlib/blob/21767c654d31d2dccdde4330529775c6c5fd5389/zlib.h#L1062-L1063',
-                'https://github.com/madler/zlib/commit/1eb7682f845ac9e9bf9ae35bbfb3bad5dacbd91d',
-                'https://github.com/madler/zlib/commit/eff308af425b67093bab25f80f1ae950166bece1',
-                'https://github.com/nodejs/node/blob/75b68c6e4db515f76df73af476eccf382bbcb00a/deps/zlib/inflate.c#L762-L764',
-                'https://linux.oracle.com/cve/CVE-2022-37434.html',
-                'https://linux.oracle.com/errata/ELSA-2023-1095.html',
-                'https://lists.debian.org/debian-lts-announce/2022/09/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JWN4VE3JQR4O2SOUS5TXNLANRPMHWV4I/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NMBOJ77A7T7PQCARMDUK75TE6LLESZ3O/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PAVPQNCG3XRLCLNSQRM3KAN5ZFMVXVTY/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/X5U7OTKZSHY2I3ZFJSR2SHFHW72RKGDK/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YRQAI7H4M4RQZ2IWZUEEXECBE5D56BH2/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2022-37434',
-                'https://security.netapp.com/advisory/ntap-20220901-0005/',
-                'https://security.netapp.com/advisory/ntap-20230427-0007/',
-                'https://support.apple.com/kb/HT213488',
-                'https://support.apple.com/kb/HT213489',
-                'https://support.apple.com/kb/HT213490',
-                'https://support.apple.com/kb/HT213491',
-                'https://support.apple.com/kb/HT213493',
-                'https://support.apple.com/kb/HT213494',
-                'https://ubuntu.com/security/notices/USN-5570-1',
-                'https://ubuntu.com/security/notices/USN-5570-2',
-                'https://ubuntu.com/security/notices/USN-5573-1',
-                'https://ubuntu.com/security/notices/USN-6736-1',
-                'https://ubuntu.com/security/notices/USN-6736-2',
-                'https://www.cve.org/CVERecord?id=CVE-2022-37434',
-                'https://www.debian.org/security/2022/dsa-5218'
-              ],
-              'severity':   'CRITICAL',
-              'suppressed': false,
-              'title':      'zlib: heap-based buffer over-read and overflow in inflate() in inflate.c via a large gzip header extra field'
-            },
-            {
-              'cve':  'CVE-2018-25032',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'nvd': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '8.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-787'
-              ],
-              'description':   'zlib before 1.2.12 allows memory corruption when deflating (i.e., when compressing) if the input has many distant matches.',
-              'diffID':        'sha256:34db83edb16a705056c939afc7ee704663597e4c6794e8da795f800710a6b4ca',
-              'fixedVersions': [
-                '1.2.12-r0'
-              ],
-              'installedVersion': '1.2.11-r3',
-              'packageName':      'zlib',
-              'purl':             'pkg:apk/alpine/zlib@1.2.11-r3?arch=ppc64le&distro=3.12.3',
-              'references':       [
-                'http://seclists.org/fulldisclosure/2022/May/33',
-                'http://seclists.org/fulldisclosure/2022/May/35',
-                'http://seclists.org/fulldisclosure/2022/May/38',
-                'http://www.openwall.com/lists/oss-security/2022/03/25/2',
-                'http://www.openwall.com/lists/oss-security/2022/03/26/1',
-                'https://access.redhat.com/errata/RHSA-2022:8420',
-                'https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-25032.json',
-                'https://access.redhat.com/security/cve/CVE-2018-25032',
-                'https://bugzilla.redhat.com/2067945',
-                'https://cert-portal.siemens.com/productcert/pdf/ssa-333517.pdf',
-                'https://errata.almalinux.org/9/ALSA-2022-8420.html',
-                'https://github.com/advisories/GHSA-jc36-42cf-vqwj',
-                'https://github.com/madler/zlib/commit/5c44459c3b28a9bd3283aaceab7c615f8020c531',
-                'https://github.com/madler/zlib/compare/v1.2.11...v1.2.12',
-                'https://github.com/madler/zlib/issues/605',
-                'https://github.com/rubysec/ruby-advisory-db/blob/master/gems/nokogiri/CVE-2018-25032.yml',
-                'https://github.com/sparklemotion/nokogiri/releases/tag/v1.13.4',
-                'https://github.com/sparklemotion/nokogiri/security/advisories/GHSA-v6gp-9mmm-c6p5',
-                'https://groups.google.com/g/ruby-security-ann/c/vX7qSjsvWis/m/TJWN4oOKBwAJ',
-                'https://linux.oracle.com/cve/CVE-2018-25032.html',
-                'https://linux.oracle.com/errata/ELSA-2022-9565.html',
-                'https://lists.debian.org/debian-lts-announce/2022/04/msg00000.html',
-                'https://lists.debian.org/debian-lts-announce/2022/05/msg00008.html',
-                'https://lists.debian.org/debian-lts-announce/2022/09/msg00023.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DCZFIJBJTZ7CL5QXBFKTQ22Q26VINRUF/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DF62MVMH3QUGMBDCB3DY2ERQ6EBHTADB/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JZZPTWRYQULAOL3AW7RZJNVZ2UONXCV4/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NS2D2GFPFGOJUL4WQ3DUAY7HF4VWQ77F/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VOKNP2L734AEL47NRYGVZIKEFOUBQY5Y/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/XOKFMSNQ5D5WGMALBNBXU3GE442V74WU/',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/DCZFIJBJTZ7CL5QXBFKTQ22Q26VINRUF',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/DCZFIJBJTZ7CL5QXBFKTQ22Q26VINRUF/',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/DF62MVMH3QUGMBDCB3DY2ERQ6EBHTADB',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/DF62MVMH3QUGMBDCB3DY2ERQ6EBHTADB/',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/JZZPTWRYQULAOL3AW7RZJNVZ2UONXCV4',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/JZZPTWRYQULAOL3AW7RZJNVZ2UONXCV4/',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/NS2D2GFPFGOJUL4WQ3DUAY7HF4VWQ77F',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/NS2D2GFPFGOJUL4WQ3DUAY7HF4VWQ77F/',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/VOKNP2L734AEL47NRYGVZIKEFOUBQY5Y',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/VOKNP2L734AEL47NRYGVZIKEFOUBQY5Y/',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/XOKFMSNQ5D5WGMALBNBXU3GE442V74WU',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/XOKFMSNQ5D5WGMALBNBXU3GE442V74WU/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2018-25032',
-                'https://security.gentoo.org/glsa/202210-42',
-                'https://security.netapp.com/advisory/ntap-20220526-0009',
-                'https://security.netapp.com/advisory/ntap-20220526-0009/',
-                'https://security.netapp.com/advisory/ntap-20220729-0004',
-                'https://security.netapp.com/advisory/ntap-20220729-0004/',
-                'https://support.apple.com/kb/HT213255',
-                'https://support.apple.com/kb/HT213256',
-                'https://support.apple.com/kb/HT213257',
-                'https://ubuntu.com/security/notices/USN-5355-1',
-                'https://ubuntu.com/security/notices/USN-5355-2',
-                'https://ubuntu.com/security/notices/USN-5359-1',
-                'https://ubuntu.com/security/notices/USN-5359-2',
-                'https://ubuntu.com/security/notices/USN-5739-1',
-                'https://ubuntu.com/security/notices/USN-6736-1',
-                'https://ubuntu.com/security/notices/USN-6736-2',
-                'https://www.cve.org/CVERecord?id=CVE-2018-25032',
-                'https://www.debian.org/security/2022/dsa-5111',
-                'https://www.openwall.com/lists/oss-security/2022/03/24/1',
-                'https://www.openwall.com/lists/oss-security/2022/03/28/1',
-                'https://www.openwall.com/lists/oss-security/2022/03/28/3',
-                'https://www.oracle.com/security-alerts/cpujul2022.html'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'zlib: A flaw found in zlib when compressing (not decompressing) certain inputs'
-            }
-          ]
-        }
-      ],
-      'summary': {
-        'critical':   4,
-        'high':       32,
-        'low':        2,
-        'medium':     6,
-        'suppressed': 0,
-        'unknown':    0
-      }
-    }
-  },
-  {
-    'id':    'default/250c891fe70aea9cfdb139fb30088c8cf567a57dff4fd77d7006e821950f8b0b',
-    'type':  'storage.sbomscanner.kubewarden.io.vulnerabilityreport',
-    'links': {
-      'patch':  'https://localhost:8005/v1/storage.sbomscanner.kubewarden.io.vulnerabilityreports/default/250c891fe70aea9cfdb139fb30088c8cf567a57dff4fd77d7006e821950f8b0b',
-      'remove': 'https://localhost:8005/v1/storage.sbomscanner.kubewarden.io.vulnerabilityreports/default/250c891fe70aea9cfdb139fb30088c8cf567a57dff4fd77d7006e821950f8b0b',
-      'self':   'https://localhost:8005/v1/storage.sbomscanner.kubewarden.io.vulnerabilityreports/default/250c891fe70aea9cfdb139fb30088c8cf567a57dff4fd77d7006e821950f8b0b',
-      'update': 'https://localhost:8005/v1/storage.sbomscanner.kubewarden.io.vulnerabilityreports/default/250c891fe70aea9cfdb139fb30088c8cf567a57dff4fd77d7006e821950f8b0b',
-      'view':   'https://localhost:8005/apis/storage.sbomscanner.kubewarden.io/v1alpha1/namespaces/default/vulnerabilityreports/250c891fe70aea9cfdb139fb30088c8cf567a57dff4fd77d7006e821950f8b0b'
-    },
-    'apiVersion':    'storage.sbomscanner.kubewarden.io/v1alpha1',
-    'imageMetadata': {
-      'digest':      'sha256:2c3295b9af25b232414bee1f328d29382079a9a559d1f4aaffe0d4eb3cb6cdee',
-      'platform':    'linux/amd64',
-      'registry':    'demo-02',
-      'registryURI': 'ghcr.io',
-      'repository':  'linuxcontainers/alpine',
-      'tag':         '3.15.5'
-    },
-    'kind':     'VulnerabilityReport',
-    'metadata': {
-      'creationTimestamp': '2026-01-09T22:47:00Z',
-      'fields':            [
-        '250c891fe70aea9cfdb139fb30088c8cf567a57dff4fd77d7006e821950f8b0b',
-        'ghcr.io/linuxcontainers/alpine:3.15.5',
-        'linux/amd64',
-        '21 (0 suppressed)'
-      ],
-      'labels': {
-        'app.kubernetes.io/managed-by':          'sbomscanner',
-        'app.kubernetes.io/part-of':             'sbomscanner',
-        'sbomscanner.kubewarden.io/scanjob-uid': '42184d01-4b15-466f-98aa-e802d1b6b6b8'
-      },
-      'name':            '250c891fe70aea9cfdb139fb30088c8cf567a57dff4fd77d7006e821950f8b0b',
-      'namespace':       'default',
-      'ownerReferences': [
-        {
-          'apiVersion':         'storage.sbomscanner.kubewarden.io/v1alpha1',
-          'blockOwnerDeletion': true,
-          'controller':         true,
-          'kind':               'SBOM',
-          'name':               '250c891fe70aea9cfdb139fb30088c8cf567a57dff4fd77d7006e821950f8b0b',
-          'uid':                '5e0fbe7b-6004-4b9a-b643-4d4fddd8317e'
-        }
-      ],
-      'relationships': [
-        {
-          'fromId':   'default/250c891fe70aea9cfdb139fb30088c8cf567a57dff4fd77d7006e821950f8b0b',
-          'fromType': 'storage.sbomscanner.kubewarden.io.sbom',
-          'rel':      'owner',
-          'state':    'active',
-          'message':  'Resource is current'
-        }
-      ],
-      'resourceVersion': '7',
-      'state':           {
-        'error':         false,
-        'message':       'Resource is current',
-        'name':          'active',
-        'transitioning': false
-      },
-      'uid': '2c03b1c9-9aa9-4b9d-ab11-baf9fd99602d'
-    },
-    'report': {
-      'results': [
-        {
-          'class':           'os-pkgs',
-          'target':          '/var/run/worker/trivy.sbom.934581700.json (alpine 3.15.5)',
-          'type':            'alpine',
-          'vulnerabilities': [
-            {
-              'cve':  'CVE-2022-4450',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'nvd': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-415'
-              ],
-              'description':   'The function PEM_read_bio_ex() reads a PEM file from a BIO and parses and\ndecodes the "name" (e.g. "CERTIFICATE"), any header data and the payload data.\nIf the function succeeds then the "name_out", "header" and "data" arguments are\npopulated with pointers to buffers containing the relevant decoded data. The\ncaller is responsible for freeing those buffers. It is possible to construct a\nPEM file that results in 0 bytes of payload data. In this case PEM_read_bio_ex()\nwill return a failure code but will populate the header argument with a pointer\nto a buffer that has already been freed. If the caller also frees this buffer\nthen a double free will occur. This will most likely lead to a crash. This\ncould be exploited by an attacker who has the ability to supply malicious PEM\nfiles for parsing to achieve a denial of service attack.\n\nThe functions PEM_read_bio() and PEM_read() are simple wrappers around\nPEM_read_bio_ex() and therefore these functions are also directly affected.\n\nThese functions are also called indirectly by a number of other OpenSSL\nfunctions including PEM_X509_INFO_read_bio_ex() and\nSSL_CTX_use_serverinfo_file() which are also vulnerable. Some OpenSSL internal\nuses of these functions are not vulnerable because the caller does not free the\nheader argument if PEM_read_bio_ex() returns a failure code. These locations\ninclude the PEM_read_bio_TYPE() functions as well as the decoders introduced in\nOpenSSL 3.0.\n\nThe OpenSSL asn1parse command line application is also impacted by this issue.',
-              'diffID':        'sha256:ad543cd673bd9de2bac48599da992506dcc37a183179302ea934853aaa92cb84',
-              'fixedVersions': [
-                '1.1.1t-r0'
-              ],
-              'installedVersion': '1.1.1q-r0',
-              'packageName':      'libcrypto1.1',
-              'purl':             'pkg:apk/alpine/libcrypto1.1@1.1.1q-r0?arch=x86_64&distro=3.15.5',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2023:2165',
-                'https://access.redhat.com/security/cve/CVE-2022-4450',
-                'https://bugzilla.redhat.com/1960321',
-                'https://bugzilla.redhat.com/2164440',
-                'https://bugzilla.redhat.com/2164487',
-                'https://bugzilla.redhat.com/2164492',
-                'https://bugzilla.redhat.com/2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144000',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144003',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144006',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144008',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144010',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144012',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144015',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144017',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144019',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2145170',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2158412',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164440',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164487',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164488',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164492',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164497',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164499',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164500',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4203',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4304',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4450',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0215',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0216',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0217',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0286',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0401',
-                'https://errata.almalinux.org/9/ALSA-2023-2165.html',
-                'https://errata.rockylinux.org/RLSA-2023:0946',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=63bcf189be73a9cc1264059bed6f57974be74a83',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=bbcf509bd046b34cca19c766bbddc31683d0858b',
-                'https://linux.oracle.com/cve/CVE-2022-4450.html',
-                'https://linux.oracle.com/errata/ELSA-2023-32791.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2022-4450',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0003',
-                'https://rustsec.org/advisories/RUSTSEC-2023-0010.html',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://ubuntu.com/security/notices/USN-5844-1',
-                'https://ubuntu.com/security/notices/USN-6564-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2022-4450',
-                'https://www.openssl.org/news/secadv/20230207.txt'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: double free after calling PEM_read_bio_ex'
-            },
-            {
-              'cve':  'CVE-2023-0215',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'nvd': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   'The public API function BIO_new_NDEF is a helper function used for streaming\nASN.1 data via a BIO. It is primarily used internally to OpenSSL to support the\nSMIME, CMS and PKCS7 streaming capabilities, but may also be called directly by\nend user applications.\n\nThe function receives a BIO from the caller, prepends a new BIO_f_asn1 filter\nBIO onto the front of it to form a BIO chain, and then returns the new head of\nthe BIO chain to the caller. Under certain conditions, for example if a CMS\nrecipient public key is invalid, the new filter BIO is freed and the function\nreturns a NULL result indicating a failure. However, in this case, the BIO chain\nis not properly cleaned up and the BIO passed by the caller still retains\ninternal pointers to the previously freed filter BIO. If the caller then goes on\nto call BIO_pop() on the BIO then a use-after-free will occur. This will most\nlikely result in a crash.\n\n\n\nThis scenario occurs directly in the internal function B64_write_ASN1() which\nmay cause BIO_new_NDEF() to be called and will subsequently call BIO_pop() on\nthe BIO. This internal function is in turn called by the public API functions\nPEM_write_bio_ASN1_stream, PEM_write_bio_CMS_stream, PEM_write_bio_PKCS7_stream,\nSMIME_write_ASN1, SMIME_write_CMS and SMIME_write_PKCS7.\n\nOther public API functions that may be impacted by this include\ni2d_ASN1_bio_stream, BIO_new_CMS, BIO_new_PKCS7, i2d_CMS_bio_stream and\ni2d_PKCS7_bio_stream.\n\nThe OpenSSL cms and smime command line applications are similarly affected.',
-              'diffID':        'sha256:ad543cd673bd9de2bac48599da992506dcc37a183179302ea934853aaa92cb84',
-              'fixedVersions': [
-                '1.1.1t-r0'
-              ],
-              'installedVersion': '1.1.1q-r0',
-              'packageName':      'libcrypto1.1',
-              'purl':             'pkg:apk/alpine/libcrypto1.1@1.1.1q-r0?arch=x86_64&distro=3.15.5',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2023:2165',
-                'https://access.redhat.com/security/cve/CVE-2023-0215',
-                'https://bugzilla.redhat.com/1960321',
-                'https://bugzilla.redhat.com/2164440',
-                'https://bugzilla.redhat.com/2164487',
-                'https://bugzilla.redhat.com/2164492',
-                'https://bugzilla.redhat.com/2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144000',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144003',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144006',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144008',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144010',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144012',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144015',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144017',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144019',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2145170',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2158412',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164440',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164487',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164488',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164492',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164497',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164499',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164500',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4203',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4304',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4450',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0215',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0216',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0217',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0286',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0401',
-                'https://errata.almalinux.org/9/ALSA-2023-2165.html',
-                'https://errata.rockylinux.org/RLSA-2023:0946',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=8818064ce3c3c0f1b740a5aaba2a987e75bfbafd',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=9816136fe31d92ace4037d5da5257f763aeeb4eb',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=c3829dd8825c654652201e16f8a0a0c46ee3f344',
-                'https://linux.oracle.com/cve/CVE-2023-0215.html',
-                'https://linux.oracle.com/errata/ELSA-2023-32791.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-0215',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0003',
-                'https://rustsec.org/advisories/RUSTSEC-2023-0009.html',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://security.netapp.com/advisory/ntap-20230427-0007',
-                'https://security.netapp.com/advisory/ntap-20230427-0007/',
-                'https://security.netapp.com/advisory/ntap-20230427-0009',
-                'https://security.netapp.com/advisory/ntap-20230427-0009/',
-                'https://security.netapp.com/advisory/ntap-20240621-0006',
-                'https://security.netapp.com/advisory/ntap-20240621-0006/',
-                'https://ubuntu.com/security/notices/USN-5844-1',
-                'https://ubuntu.com/security/notices/USN-5845-1',
-                'https://ubuntu.com/security/notices/USN-5845-2',
-                'https://ubuntu.com/security/notices/USN-6564-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-0215',
-                'https://www.openssl.org/news/secadv/20230207.txt'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: use-after-free following BIO_new_NDEF'
-            },
-            {
-              'cve':  'CVE-2023-0286',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '7.4',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H'
-                },
-                'nvd': {
-                  'v3score':  '7.4',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.4',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-843'
-              ],
-              'description':   'There is a type confusion vulnerability relating to X.400 address processing\ninside an X.509 GeneralName. X.400 addresses were parsed as an ASN1_STRING but\nthe public structure definition for GENERAL_NAME incorrectly specified the type\nof the x400Address field as ASN1_TYPE. This field is subsequently interpreted by\nthe OpenSSL function GENERAL_NAME_cmp as an ASN1_TYPE rather than an\nASN1_STRING.\n\nWhen CRL checking is enabled (i.e. the application sets the\nX509_V_FLAG_CRL_CHECK flag), this vulnerability may allow an attacker to pass\narbitrary pointers to a memcmp call, enabling them to read memory contents or\nenact a denial of service. In most cases, the attack requires the attacker to\nprovide both the certificate chain and CRL, neither of which need to have a\nvalid signature. If the attacker only controls one of these inputs, the other\ninput must already contain an X.400 address as a CRL distribution point, which\nis uncommon. As such, this vulnerability is most likely to only affect\napplications which have implemented their own functionality for retrieving CRLs\nover a network.',
-              'diffID':        'sha256:ad543cd673bd9de2bac48599da992506dcc37a183179302ea934853aaa92cb84',
-              'fixedVersions': [
-                '1.1.1t-r0'
-              ],
-              'installedVersion': '1.1.1q-r0',
-              'packageName':      'libcrypto1.1',
-              'purl':             'pkg:apk/alpine/libcrypto1.1@1.1.1q-r0?arch=x86_64&distro=3.15.5',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2025:7937',
-                'https://access.redhat.com/security/cve/CVE-2023-0286',
-                'https://access.redhat.com/security/cve/cve-2023-0286',
-                'https://bugzilla.redhat.com/2164440',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144000',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144003',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144006',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144008',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144010',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144012',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144015',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144017',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144019',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2145170',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2158412',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164440',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164487',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164488',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164492',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164497',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164499',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164500',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4203',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4304',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4450',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0215',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0216',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0217',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0286',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0401',
-                'https://errata.almalinux.org/9/ALSA-2025-7937.html',
-                'https://errata.rockylinux.org/RLSA-2023:0946',
-                'https://ftp.openbsd.org/pub/OpenBSD/LibreSSL/libressl-3.6.2-relnotes.txt',
-                'https://ftp.openbsd.org/pub/OpenBSD/patches/7.2/common/018_x509.patch.sig',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=2c6c9d439b484e1ba9830d8454a34fa4f80fdfe9',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=2f7530077e0ef79d98718138716bc51ca0cad658',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=fd2af07dc083a350c959147097003a14a5e8ac4d',
-                'https://github.com/pyca/cryptography',
-                'https://github.com/pyca/cryptography/security/advisories/GHSA-x4qr-2fvf-3mr5',
-                'https://linux.oracle.com/cve/CVE-2023-0286.html',
-                'https://linux.oracle.com/errata/ELSA-2025-7937.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-0286',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0003',
-                'https://rustsec.org/advisories/RUSTSEC-2023-0006.html',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://ubuntu.com/security/notices/USN-5844-1',
-                'https://ubuntu.com/security/notices/USN-5845-1',
-                'https://ubuntu.com/security/notices/USN-5845-2',
-                'https://ubuntu.com/security/notices/USN-6564-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-0286',
-                'https://www.openssl.org/news/secadv/20230207.txt'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: X.400 address type confusion in X.509 GeneralName'
-            },
-            {
-              'cve':  'CVE-2023-0464',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-295'
-              ],
-              'description':   "A security vulnerability has been identified in all supported versions\n\nof OpenSSL related to the verification of X.509 certificate chains\nthat include policy constraints.  Attackers may be able to exploit this\nvulnerability by creating a malicious certificate chain that triggers\nexponential use of computational resources, leading to a denial-of-service\n(DoS) attack on affected systems.\n\nPolicy processing is disabled by default but can be enabled by passing\nthe `-policy' argument to the command line utilities or by calling the\n`X509_VERIFY_PARAM_set1_policies()' function.",
-              'diffID':        'sha256:ad543cd673bd9de2bac48599da992506dcc37a183179302ea934853aaa92cb84',
-              'fixedVersions': [
-                '1.1.1t-r2'
-              ],
-              'installedVersion': '1.1.1q-r0',
-              'packageName':      'libcrypto1.1',
-              'purl':             'pkg:apk/alpine/libcrypto1.1@1.1.1q-r0?arch=x86_64&distro=3.15.5',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2023:3722',
-                'https://access.redhat.com/security/cve/CVE-2023-0464',
-                'https://bugzilla.redhat.com/2181082',
-                'https://bugzilla.redhat.com/2182561',
-                'https://bugzilla.redhat.com/2182565',
-                'https://bugzilla.redhat.com/2188461',
-                'https://bugzilla.redhat.com/2207947',
-                'https://errata.almalinux.org/9/ALSA-2023-3722.html',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=2017771e2db3e2b96f89bbe8766c3209f6a99545',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=2dcd4f1e3115f38cefa43e3efbe9b801c27e642e',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=879f7080d7e141f415c79eaa3a8ac4a3dad0348b',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=959c59c7a0164117e7f8366466a32bb1f8d77ff1',
-                'https://linux.oracle.com/cve/CVE-2023-0464.html',
-                'https://linux.oracle.com/errata/ELSA-2023-3722.html',
-                'https://lists.debian.org/debian-lts-announce/2023/06/msg00011.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-0464',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://security.netapp.com/advisory/ntap-20230406-0006/',
-                'https://security.netapp.com/advisory/ntap-20240621-0006/',
-                'https://ubuntu.com/security/notices/USN-6039-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.couchbase.com/alerts/',
-                'https://www.cve.org/CVERecord?id=CVE-2023-0464',
-                'https://www.debian.org/security/2023/dsa-5417',
-                'https://www.openssl.org/news/secadv/20230322.txt'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: Denial of service by excessive resource usage in verifying X509 policy constraints'
-            },
-            {
-              'cve':  'CVE-2022-4304',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N'
-                },
-                'nvd': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N'
-                },
-                'redhat': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-203'
-              ],
-              'description':   'A timing based side channel exists in the OpenSSL RSA Decryption implementation\nwhich could be sufficient to recover a plaintext across a network in a\nBleichenbacher style attack. To achieve a successful decryption an attacker\nwould have to be able to send a very large number of trial messages for\ndecryption. The vulnerability affects all RSA padding modes: PKCS#1 v1.5,\nRSA-OEAP and RSASVE.\n\nFor example, in a TLS connection, RSA is commonly used by a client to send an\nencrypted pre-master secret to the server. An attacker that had observed a\ngenuine connection between a client and a server could use this flaw to send\ntrial messages to the server and record the time taken to process them. After a\nsufficiently large number of messages the attacker could recover the pre-master\nsecret used for the original connection and thus be able to decrypt the\napplication data sent over that connection.',
-              'diffID':        'sha256:ad543cd673bd9de2bac48599da992506dcc37a183179302ea934853aaa92cb84',
-              'fixedVersions': [
-                '1.1.1t-r0'
-              ],
-              'installedVersion': '1.1.1q-r0',
-              'packageName':      'libcrypto1.1',
-              'purl':             'pkg:apk/alpine/libcrypto1.1@1.1.1q-r0?arch=x86_64&distro=3.15.5',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2023:2165',
-                'https://access.redhat.com/security/cve/CVE-2022-4304',
-                'https://bugzilla.redhat.com/1960321',
-                'https://bugzilla.redhat.com/2164440',
-                'https://bugzilla.redhat.com/2164487',
-                'https://bugzilla.redhat.com/2164492',
-                'https://bugzilla.redhat.com/2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144000',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144003',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144006',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144008',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144010',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144012',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144015',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144017',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144019',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2145170',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2158412',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164440',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164487',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164488',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164492',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164497',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164499',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164500',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4203',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4304',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4450',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0215',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0216',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0217',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0286',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0401',
-                'https://errata.almalinux.org/9/ALSA-2023-2165.html',
-                'https://errata.rockylinux.org/RLSA-2023:0946',
-                'https://linux.oracle.com/cve/CVE-2022-4304.html',
-                'https://linux.oracle.com/errata/ELSA-2023-32791.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2022-4304',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0003',
-                'https://rustsec.org/advisories/RUSTSEC-2023-0007.html',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://ubuntu.com/security/notices/USN-5844-1',
-                'https://ubuntu.com/security/notices/USN-6564-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2022-4304',
-                'https://www.openssl.org/news/secadv/20230207.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: timing attack in RSA Decryption implementation'
-            },
-            {
-              'cve':  'CVE-2023-0465',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N'
-                },
-                'redhat': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-295'
-              ],
-              'description':   "Applications that use a non-default option when verifying certificates may be\nvulnerable to an attack from a malicious CA to circumvent certain checks.\n\nInvalid certificate policies in leaf certificates are silently ignored by\nOpenSSL and other certificate policy checks are skipped for that certificate.\nA malicious CA could use this to deliberately assert invalid certificate policies\nin order to circumvent policy checking on the certificate altogether.\n\nPolicy processing is disabled by default but can be enabled by passing\nthe `-policy' argument to the command line utilities or by calling the\n`X509_VERIFY_PARAM_set1_policies()' function.",
-              'diffID':        'sha256:ad543cd673bd9de2bac48599da992506dcc37a183179302ea934853aaa92cb84',
-              'fixedVersions': [
-                '1.1.1t-r2'
-              ],
-              'installedVersion': '1.1.1q-r0',
-              'packageName':      'libcrypto1.1',
-              'purl':             'pkg:apk/alpine/libcrypto1.1@1.1.1q-r0?arch=x86_64&distro=3.15.5',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2023:3722',
-                'https://access.redhat.com/security/cve/CVE-2023-0465',
-                'https://bugzilla.redhat.com/2181082',
-                'https://bugzilla.redhat.com/2182561',
-                'https://bugzilla.redhat.com/2182565',
-                'https://bugzilla.redhat.com/2188461',
-                'https://bugzilla.redhat.com/2207947',
-                'https://errata.almalinux.org/9/ALSA-2023-3722.html',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=10325176f3d3e98c6e2b3bf5ab1e3b334de6947a',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=1dd43e0709fece299b15208f36cc7c76209ba0bb',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=b013765abfa80036dc779dd0e50602c57bb3bf95',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=facfb1ab745646e97a1920977ae4a9965ea61d5c',
-                'https://linux.oracle.com/cve/CVE-2023-0465.html',
-                'https://linux.oracle.com/errata/ELSA-2023-3722.html',
-                'https://lists.debian.org/debian-lts-announce/2023/06/msg00011.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-0465',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://security.netapp.com/advisory/ntap-20230414-0001/',
-                'https://ubuntu.com/security/notices/USN-6039-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-0465',
-                'https://www.debian.org/security/2023/dsa-5417',
-                'https://www.openssl.org/news/secadv/20230328.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: Invalid certificate policies in leaf certificates are silently ignored'
-            },
-            {
-              'cve':  'CVE-2023-2650',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '6.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-770'
-              ],
-              'description':   "Issue summary: Processing some specially crafted ASN.1 object identifiers or\ndata containing them may be very slow.\n\nImpact summary: Applications that use OBJ_obj2txt() directly, or use any of\nthe OpenSSL subsystems OCSP, PKCS7/SMIME, CMS, CMP/CRMF or TS with no message\nsize limit may experience notable to very long delays when processing those\nmessages, which may lead to a Denial of Service.\n\nAn OBJECT IDENTIFIER is composed of a series of numbers - sub-identifiers -\nmost of which have no size limit.  OBJ_obj2txt() may be used to translate\nan ASN.1 OBJECT IDENTIFIER given in DER encoding form (using the OpenSSL\ntype ASN1_OBJECT) to its canonical numeric text form, which are the\nsub-identifiers of the OBJECT IDENTIFIER in decimal form, separated by\nperiods.\n\nWhen one of the sub-identifiers in the OBJECT IDENTIFIER is very large\n(these are sizes that are seen as absurdly large, taking up tens or hundreds\nof KiBs), the translation to a decimal number in text may take a very long\ntime.  The time complexity is O(n^2) with 'n' being the size of the\nsub-identifiers in bytes (*).\n\nWith OpenSSL 3.0, support to fetch cryptographic algorithms using names /\nidentifiers in string form was introduced.  This includes using OBJECT\nIDENTIFIERs in canonical numeric text form as identifiers for fetching\nalgorithms.\n\nSuch OBJECT IDENTIFIERs may be received through the ASN.1 structure\nAlgorithmIdentifier, which is commonly used in multiple protocols to specify\nwhat cryptographic algorithm should be used to sign or verify, encrypt or\ndecrypt, or digest passed data.\n\nApplications that call OBJ_obj2txt() directly with untrusted data are\naffected, with any version of OpenSSL.  If the use is for the mere purpose\nof display, the severity is considered low.\n\nIn OpenSSL 3.0 and newer, this affects the subsystems OCSP, PKCS7/SMIME,\nCMS, CMP/CRMF or TS.  It also impacts anything that processes X.509\ncertificates, including simple things like verifying its signature.\n\nThe impact on TLS is relatively low, because all versions of OpenSSL have a\n100KiB limit on the peer's certificate chain.  Additionally, this only\nimpacts clients, or servers that have explicitly enabled client\nauthentication.\n\nIn OpenSSL 1.1.1 and 1.0.2, this only affects displaying diverse objects,\nsuch as X.509 certificates.  This is assumed to not happen in such a way\nthat it would cause a Denial of Service, so these versions are considered\nnot affected by this issue in such a way that it would be cause for concern,\nand the severity is therefore considered low.",
-              'diffID':        'sha256:ad543cd673bd9de2bac48599da992506dcc37a183179302ea934853aaa92cb84',
-              'fixedVersions': [
-                '1.1.1u-r0'
-              ],
-              'installedVersion': '1.1.1q-r0',
-              'packageName':      'libcrypto1.1',
-              'purl':             'pkg:apk/alpine/libcrypto1.1@1.1.1q-r0?arch=x86_64&distro=3.15.5',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2023/05/30/1',
-                'https://access.redhat.com/errata/RHSA-2023:6330',
-                'https://access.redhat.com/security/cve/CVE-2023-2650',
-                'https://bugzilla.redhat.com/1858038',
-                'https://bugzilla.redhat.com/2207947',
-                'https://errata.almalinux.org/9/ALSA-2023-6330.html',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=423a2bc737a908ad0c77bda470b2b59dc879936b',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=853c5e56ee0b8650c73140816bb8b91d6163422c',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=9e209944b35cf82368071f160a744b6178f9b098',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=db779b0e10b047f2585615e0b8f2acdf21f8544a',
-                'https://linux.oracle.com/cve/CVE-2023-2650.html',
-                'https://linux.oracle.com/errata/ELSA-2023-6330.html',
-                'https://lists.debian.org/debian-lts-announce/2023/06/msg00011.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-2650',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0009',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://security.netapp.com/advisory/ntap-20230703-0001/',
-                'https://security.netapp.com/advisory/ntap-20231027-0009/',
-                'https://ubuntu.com/security/notices/USN-6119-1',
-                'https://ubuntu.com/security/notices/USN-6188-1',
-                'https://ubuntu.com/security/notices/USN-6672-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-2650',
-                'https://www.debian.org/security/2023/dsa-5417',
-                'https://www.openssl.org/news/secadv/20230530.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: Possible DoS translating ASN.1 object identifiers'
-            },
-            {
-              'cve':  'CVE-2023-3446',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L'
-                },
-                'redhat': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L'
-                }
-              },
-              'cwes': [
-                'CWE-606',
-                'CWE-1333'
-              ],
-              'description':   "Issue summary: Checking excessively long DH keys or parameters may be very slow.\n\nImpact summary: Applications that use the functions DH_check(), DH_check_ex()\nor EVP_PKEY_param_check() to check a DH key or DH parameters may experience long\ndelays. Where the key or parameters that are being checked have been obtained\nfrom an untrusted source this may lead to a Denial of Service.\n\nThe function DH_check() performs various checks on DH parameters. One of those\nchecks confirms that the modulus ('p' parameter) is not too large. Trying to use\na very large modulus is slow and OpenSSL will not normally use a modulus which\nis over 10,000 bits in length.\n\nHowever the DH_check() function checks numerous aspects of the key or parameters\nthat have been supplied. Some of those checks use the supplied modulus value\neven if it has already been found to be too large.\n\nAn application that calls DH_check() and supplies a key or parameters obtained\nfrom an untrusted source could be vulernable to a Denial of Service attack.\n\nThe function DH_check() is itself called by a number of other OpenSSL functions.\nAn application calling any of those other functions may similarly be affected.\nThe other functions affected by this are DH_check_ex() and\nEVP_PKEY_param_check().\n\nAlso vulnerable are the OpenSSL dhparam and pkeyparam command line applications\nwhen using the '-check' option.\n\nThe OpenSSL SSL/TLS implementation is not affected by this issue.\nThe OpenSSL 3.0 and 3.1 FIPS providers are not affected by this issue.",
-              'diffID':        'sha256:ad543cd673bd9de2bac48599da992506dcc37a183179302ea934853aaa92cb84',
-              'fixedVersions': [
-                '1.1.1u-r2'
-              ],
-              'installedVersion': '1.1.1q-r0',
-              'packageName':      'libcrypto1.1',
-              'purl':             'pkg:apk/alpine/libcrypto1.1@1.1.1q-r0?arch=x86_64&distro=3.15.5',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2023/07/19/4',
-                'http://www.openwall.com/lists/oss-security/2023/07/19/5',
-                'http://www.openwall.com/lists/oss-security/2023/07/19/6',
-                'http://www.openwall.com/lists/oss-security/2023/07/31/1',
-                'http://www.openwall.com/lists/oss-security/2024/05/16/1',
-                'https://access.redhat.com/errata/RHSA-2024:2447',
-                'https://access.redhat.com/security/cve/CVE-2023-3446',
-                'https://bugzilla.redhat.com/2223016',
-                'https://bugzilla.redhat.com/2224962',
-                'https://bugzilla.redhat.com/2227852',
-                'https://bugzilla.redhat.com/2248616',
-                'https://bugzilla.redhat.com/2257571',
-                'https://bugzilla.redhat.com/2258502',
-                'https://bugzilla.redhat.com/2259944',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2224962',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2257582',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2257583',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2258677',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2258688',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2258691',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2258694',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2258700',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-36763',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-36764',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3446',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45229',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45231',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45232',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45233',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45235',
-                'https://errata.almalinux.org/9/ALSA-2024-2447.html',
-                'https://errata.rockylinux.org/RLSA-2024:2264',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=1fa20cf2f506113c761777127a38bce5068740eb',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=8780a896543a654e757db1b9396383f9d8095528',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=9a0a4d3c1e7138915563c0df4fe6a3f9377b839c',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=fc9867c1e03c22ebf56943be205202e576aabf23',
-                'https://linux.oracle.com/cve/CVE-2023-3446.html',
-                'https://linux.oracle.com/errata/ELSA-2024-2447.html',
-                'https://lists.debian.org/debian-lts-announce/2023/08/msg00019.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-3446',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://security.netapp.com/advisory/ntap-20230803-0011/',
-                'https://ubuntu.com/security/notices/USN-6435-1',
-                'https://ubuntu.com/security/notices/USN-6435-2',
-                'https://ubuntu.com/security/notices/USN-6450-1',
-                'https://ubuntu.com/security/notices/USN-6709-1',
-                'https://ubuntu.com/security/notices/USN-7018-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-3446',
-                'https://www.openssl.org/news/secadv/20230719.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: Excessive time spent checking DH keys and parameters'
-            },
-            {
-              'cve':  'CVE-2023-3817',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L'
-                },
-                'redhat': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L'
-                }
-              },
-              'cwes': [
-                'CWE-606',
-                'CWE-834'
-              ],
-              'description':   'Issue summary: Checking excessively long DH keys or parameters may be very slow.\n\nImpact summary: Applications that use the functions DH_check(), DH_check_ex()\nor EVP_PKEY_param_check() to check a DH key or DH parameters may experience long\ndelays. Where the key or parameters that are being checked have been obtained\nfrom an untrusted source this may lead to a Denial of Service.\n\nThe function DH_check() performs various checks on DH parameters. After fixing\nCVE-2023-3446 it was discovered that a large q parameter value can also trigger\nan overly long computation during some of these checks. A correct q value,\nif present, cannot be larger than the modulus p parameter, thus it is\nunnecessary to perform these checks if q is larger than p.\n\nAn application that calls DH_check() and supplies a key or parameters obtained\nfrom an untrusted source could be vulnerable to a Denial of Service attack.\n\nThe function DH_check() is itself called by a number of other OpenSSL functions.\nAn application calling any of those other functions may similarly be affected.\nThe other functions affected by this are DH_check_ex() and\nEVP_PKEY_param_check().\n\nAlso vulnerable are the OpenSSL dhparam and pkeyparam command line applications\nwhen using the "-check" option.\n\nThe OpenSSL SSL/TLS implementation is not affected by this issue.\n\nThe OpenSSL 3.0 and 3.1 FIPS providers are not affected by this issue.',
-              'diffID':        'sha256:ad543cd673bd9de2bac48599da992506dcc37a183179302ea934853aaa92cb84',
-              'fixedVersions': [
-                '1.1.1v-r0'
-              ],
-              'installedVersion': '1.1.1q-r0',
-              'packageName':      'libcrypto1.1',
-              'purl':             'pkg:apk/alpine/libcrypto1.1@1.1.1q-r0?arch=x86_64&distro=3.15.5',
-              'references':       [
-                'http://seclists.org/fulldisclosure/2023/Jul/43',
-                'http://www.openwall.com/lists/oss-security/2023/07/31/1',
-                'http://www.openwall.com/lists/oss-security/2023/09/22/11',
-                'http://www.openwall.com/lists/oss-security/2023/09/22/9',
-                'http://www.openwall.com/lists/oss-security/2023/11/06/2',
-                'https://access.redhat.com/errata/RHSA-2024:2447',
-                'https://access.redhat.com/security/cve/CVE-2023-3817',
-                'https://bugzilla.redhat.com/2223016',
-                'https://bugzilla.redhat.com/2224962',
-                'https://bugzilla.redhat.com/2227852',
-                'https://bugzilla.redhat.com/2248616',
-                'https://bugzilla.redhat.com/2257571',
-                'https://bugzilla.redhat.com/2258502',
-                'https://bugzilla.redhat.com/2259944',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2224962',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2227852',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2248616',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2270358',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3446',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3817',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-5678',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-2408',
-                'https://errata.almalinux.org/9/ALSA-2024-2447.html',
-                'https://errata.rockylinux.org/RLSA-2023:7877',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=6a1eb62c29db6cb5eec707f9338aee00f44e26f5',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=869ad69aadd985c7b8ca6f4e5dd0eb274c9f3644',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=9002fd07327a91f35ba6c1307e71fa6fd4409b7f',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=91ddeba0f2269b017dc06c46c993a788974b1aa5',
-                'https://linux.oracle.com/cve/CVE-2023-3817.html',
-                'https://linux.oracle.com/errata/ELSA-2024-2447.html',
-                'https://lists.debian.org/debian-lts-announce/2023/08/msg00019.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-3817',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://security.netapp.com/advisory/ntap-20230818-0014/',
-                'https://security.netapp.com/advisory/ntap-20231027-0008/',
-                'https://security.netapp.com/advisory/ntap-20240621-0006/',
-                'https://ubuntu.com/security/notices/USN-6435-1',
-                'https://ubuntu.com/security/notices/USN-6435-2',
-                'https://ubuntu.com/security/notices/USN-6450-1',
-                'https://ubuntu.com/security/notices/USN-6709-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-3817',
-                'https://www.openssl.org/news/secadv/20230731.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'OpenSSL: Excessive time spent checking DH q parameter value'
-            },
-            {
-              'cve':  'CVE-2023-5678',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L'
-                },
-                'redhat': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L'
-                }
-              },
-              'cwes': [
-                'CWE-606',
-                'CWE-754'
-              ],
-              'description':   "Issue summary: Generating excessively long X9.42 DH keys or checking\nexcessively long X9.42 DH keys or parameters may be very slow.\n\nImpact summary: Applications that use the functions DH_generate_key() to\ngenerate an X9.42 DH key may experience long delays.  Likewise, applications\nthat use DH_check_pub_key(), DH_check_pub_key_ex() or EVP_PKEY_public_check()\nto check an X9.42 DH key or X9.42 DH parameters may experience long delays.\nWhere the key or parameters that are being checked have been obtained from\nan untrusted source this may lead to a Denial of Service.\n\nWhile DH_check() performs all the necessary checks (as of CVE-2023-3817),\nDH_check_pub_key() doesn't make any of these checks, and is therefore\nvulnerable for excessively large P and Q parameters.\n\nLikewise, while DH_generate_key() performs a check for an excessively large\nP, it doesn't check for an excessively large Q.\n\nAn application that calls DH_generate_key() or DH_check_pub_key() and\nsupplies a key or parameters obtained from an untrusted source could be\nvulnerable to a Denial of Service attack.\n\nDH_generate_key() and DH_check_pub_key() are also called by a number of\nother OpenSSL functions.  An application calling any of those other\nfunctions may similarly be affected.  The other functions affected by this\nare DH_check_pub_key_ex(), EVP_PKEY_public_check(), and EVP_PKEY_generate().\n\nAlso vulnerable are the OpenSSL pkey command line application when using the\n\"-pubcheck\" option, as well as the OpenSSL genpkey command line application.\n\nThe OpenSSL SSL/TLS implementation is not affected by this issue.\n\nThe OpenSSL 3.0 and 3.1 FIPS providers are not affected by this issue.",
-              'diffID':        'sha256:ad543cd673bd9de2bac48599da992506dcc37a183179302ea934853aaa92cb84',
-              'fixedVersions': [
-                '1.1.1w-r1'
-              ],
-              'installedVersion': '1.1.1q-r0',
-              'packageName':      'libcrypto1.1',
-              'purl':             'pkg:apk/alpine/libcrypto1.1@1.1.1q-r0?arch=x86_64&distro=3.15.5',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2024/03/11/1',
-                'https://access.redhat.com/errata/RHSA-2024:2447',
-                'https://access.redhat.com/security/cve/CVE-2023-5678',
-                'https://bugzilla.redhat.com/2223016',
-                'https://bugzilla.redhat.com/2224962',
-                'https://bugzilla.redhat.com/2227852',
-                'https://bugzilla.redhat.com/2248616',
-                'https://bugzilla.redhat.com/2257571',
-                'https://bugzilla.redhat.com/2258502',
-                'https://bugzilla.redhat.com/2259944',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2224962',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2227852',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2248616',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2270358',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3446',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3817',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-5678',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-2408',
-                'https://errata.almalinux.org/9/ALSA-2024-2447.html',
-                'https://errata.rockylinux.org/RLSA-2023:7877',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=34efaef6c103d636ab507a0cc34dca4d3aecc055',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=710fee740904b6290fef0dd5536fbcedbc38ff0c',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=db925ae2e65d0d925adef429afc37f75bd1c2017',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=ddeb4b6c6d527e54ce9a99cba785c0f7776e54b6',
-                'https://linux.oracle.com/cve/CVE-2023-5678.html',
-                'https://linux.oracle.com/errata/ELSA-2024-2447.html',
-                'https://lists.debian.org/debian-lts-announce/2024/10/msg00033.html',
-                'https://lists.debian.org/debian-lts-announce/2024/11/msg00000.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-5678',
-                'https://security.netapp.com/advisory/ntap-20231130-0010/',
-                'https://ubuntu.com/security/notices/USN-6622-1',
-                'https://ubuntu.com/security/notices/USN-6632-1',
-                'https://ubuntu.com/security/notices/USN-6709-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-5678',
-                'https://www.openssl.org/news/secadv/20231106.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: Generating excessively long X9.42 DH keys or checking excessively long X9.42 DH keys or parameters may be very slow'
-            },
-            {
-              'cve':  'CVE-2022-4450',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'nvd': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-415'
-              ],
-              'description':   'The function PEM_read_bio_ex() reads a PEM file from a BIO and parses and\ndecodes the "name" (e.g. "CERTIFICATE"), any header data and the payload data.\nIf the function succeeds then the "name_out", "header" and "data" arguments are\npopulated with pointers to buffers containing the relevant decoded data. The\ncaller is responsible for freeing those buffers. It is possible to construct a\nPEM file that results in 0 bytes of payload data. In this case PEM_read_bio_ex()\nwill return a failure code but will populate the header argument with a pointer\nto a buffer that has already been freed. If the caller also frees this buffer\nthen a double free will occur. This will most likely lead to a crash. This\ncould be exploited by an attacker who has the ability to supply malicious PEM\nfiles for parsing to achieve a denial of service attack.\n\nThe functions PEM_read_bio() and PEM_read() are simple wrappers around\nPEM_read_bio_ex() and therefore these functions are also directly affected.\n\nThese functions are also called indirectly by a number of other OpenSSL\nfunctions including PEM_X509_INFO_read_bio_ex() and\nSSL_CTX_use_serverinfo_file() which are also vulnerable. Some OpenSSL internal\nuses of these functions are not vulnerable because the caller does not free the\nheader argument if PEM_read_bio_ex() returns a failure code. These locations\ninclude the PEM_read_bio_TYPE() functions as well as the decoders introduced in\nOpenSSL 3.0.\n\nThe OpenSSL asn1parse command line application is also impacted by this issue.',
-              'diffID':        'sha256:ad543cd673bd9de2bac48599da992506dcc37a183179302ea934853aaa92cb84',
-              'fixedVersions': [
-                '1.1.1t-r0'
-              ],
-              'installedVersion': '1.1.1q-r0',
-              'packageName':      'libssl1.1',
-              'purl':             'pkg:apk/alpine/libssl1.1@1.1.1q-r0?arch=x86_64&distro=3.15.5',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2023:2165',
-                'https://access.redhat.com/security/cve/CVE-2022-4450',
-                'https://bugzilla.redhat.com/1960321',
-                'https://bugzilla.redhat.com/2164440',
-                'https://bugzilla.redhat.com/2164487',
-                'https://bugzilla.redhat.com/2164492',
-                'https://bugzilla.redhat.com/2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144000',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144003',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144006',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144008',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144010',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144012',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144015',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144017',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144019',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2145170',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2158412',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164440',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164487',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164488',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164492',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164497',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164499',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164500',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4203',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4304',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4450',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0215',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0216',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0217',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0286',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0401',
-                'https://errata.almalinux.org/9/ALSA-2023-2165.html',
-                'https://errata.rockylinux.org/RLSA-2023:0946',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=63bcf189be73a9cc1264059bed6f57974be74a83',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=bbcf509bd046b34cca19c766bbddc31683d0858b',
-                'https://linux.oracle.com/cve/CVE-2022-4450.html',
-                'https://linux.oracle.com/errata/ELSA-2023-32791.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2022-4450',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0003',
-                'https://rustsec.org/advisories/RUSTSEC-2023-0010.html',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://ubuntu.com/security/notices/USN-5844-1',
-                'https://ubuntu.com/security/notices/USN-6564-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2022-4450',
-                'https://www.openssl.org/news/secadv/20230207.txt'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: double free after calling PEM_read_bio_ex'
-            },
-            {
-              'cve':  'CVE-2023-0215',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'nvd': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   'The public API function BIO_new_NDEF is a helper function used for streaming\nASN.1 data via a BIO. It is primarily used internally to OpenSSL to support the\nSMIME, CMS and PKCS7 streaming capabilities, but may also be called directly by\nend user applications.\n\nThe function receives a BIO from the caller, prepends a new BIO_f_asn1 filter\nBIO onto the front of it to form a BIO chain, and then returns the new head of\nthe BIO chain to the caller. Under certain conditions, for example if a CMS\nrecipient public key is invalid, the new filter BIO is freed and the function\nreturns a NULL result indicating a failure. However, in this case, the BIO chain\nis not properly cleaned up and the BIO passed by the caller still retains\ninternal pointers to the previously freed filter BIO. If the caller then goes on\nto call BIO_pop() on the BIO then a use-after-free will occur. This will most\nlikely result in a crash.\n\n\n\nThis scenario occurs directly in the internal function B64_write_ASN1() which\nmay cause BIO_new_NDEF() to be called and will subsequently call BIO_pop() on\nthe BIO. This internal function is in turn called by the public API functions\nPEM_write_bio_ASN1_stream, PEM_write_bio_CMS_stream, PEM_write_bio_PKCS7_stream,\nSMIME_write_ASN1, SMIME_write_CMS and SMIME_write_PKCS7.\n\nOther public API functions that may be impacted by this include\ni2d_ASN1_bio_stream, BIO_new_CMS, BIO_new_PKCS7, i2d_CMS_bio_stream and\ni2d_PKCS7_bio_stream.\n\nThe OpenSSL cms and smime command line applications are similarly affected.',
-              'diffID':        'sha256:ad543cd673bd9de2bac48599da992506dcc37a183179302ea934853aaa92cb84',
-              'fixedVersions': [
-                '1.1.1t-r0'
-              ],
-              'installedVersion': '1.1.1q-r0',
-              'packageName':      'libssl1.1',
-              'purl':             'pkg:apk/alpine/libssl1.1@1.1.1q-r0?arch=x86_64&distro=3.15.5',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2023:2165',
-                'https://access.redhat.com/security/cve/CVE-2023-0215',
-                'https://bugzilla.redhat.com/1960321',
-                'https://bugzilla.redhat.com/2164440',
-                'https://bugzilla.redhat.com/2164487',
-                'https://bugzilla.redhat.com/2164492',
-                'https://bugzilla.redhat.com/2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144000',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144003',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144006',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144008',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144010',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144012',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144015',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144017',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144019',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2145170',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2158412',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164440',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164487',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164488',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164492',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164497',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164499',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164500',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4203',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4304',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4450',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0215',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0216',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0217',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0286',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0401',
-                'https://errata.almalinux.org/9/ALSA-2023-2165.html',
-                'https://errata.rockylinux.org/RLSA-2023:0946',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=8818064ce3c3c0f1b740a5aaba2a987e75bfbafd',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=9816136fe31d92ace4037d5da5257f763aeeb4eb',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=c3829dd8825c654652201e16f8a0a0c46ee3f344',
-                'https://linux.oracle.com/cve/CVE-2023-0215.html',
-                'https://linux.oracle.com/errata/ELSA-2023-32791.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-0215',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0003',
-                'https://rustsec.org/advisories/RUSTSEC-2023-0009.html',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://security.netapp.com/advisory/ntap-20230427-0007',
-                'https://security.netapp.com/advisory/ntap-20230427-0007/',
-                'https://security.netapp.com/advisory/ntap-20230427-0009',
-                'https://security.netapp.com/advisory/ntap-20230427-0009/',
-                'https://security.netapp.com/advisory/ntap-20240621-0006',
-                'https://security.netapp.com/advisory/ntap-20240621-0006/',
-                'https://ubuntu.com/security/notices/USN-5844-1',
-                'https://ubuntu.com/security/notices/USN-5845-1',
-                'https://ubuntu.com/security/notices/USN-5845-2',
-                'https://ubuntu.com/security/notices/USN-6564-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-0215',
-                'https://www.openssl.org/news/secadv/20230207.txt'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: use-after-free following BIO_new_NDEF'
-            },
-            {
-              'cve':  'CVE-2023-0286',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '7.4',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H'
-                },
-                'nvd': {
-                  'v3score':  '7.4',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.4',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-843'
-              ],
-              'description':   'There is a type confusion vulnerability relating to X.400 address processing\ninside an X.509 GeneralName. X.400 addresses were parsed as an ASN1_STRING but\nthe public structure definition for GENERAL_NAME incorrectly specified the type\nof the x400Address field as ASN1_TYPE. This field is subsequently interpreted by\nthe OpenSSL function GENERAL_NAME_cmp as an ASN1_TYPE rather than an\nASN1_STRING.\n\nWhen CRL checking is enabled (i.e. the application sets the\nX509_V_FLAG_CRL_CHECK flag), this vulnerability may allow an attacker to pass\narbitrary pointers to a memcmp call, enabling them to read memory contents or\nenact a denial of service. In most cases, the attack requires the attacker to\nprovide both the certificate chain and CRL, neither of which need to have a\nvalid signature. If the attacker only controls one of these inputs, the other\ninput must already contain an X.400 address as a CRL distribution point, which\nis uncommon. As such, this vulnerability is most likely to only affect\napplications which have implemented their own functionality for retrieving CRLs\nover a network.',
-              'diffID':        'sha256:ad543cd673bd9de2bac48599da992506dcc37a183179302ea934853aaa92cb84',
-              'fixedVersions': [
-                '1.1.1t-r0'
-              ],
-              'installedVersion': '1.1.1q-r0',
-              'packageName':      'libssl1.1',
-              'purl':             'pkg:apk/alpine/libssl1.1@1.1.1q-r0?arch=x86_64&distro=3.15.5',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2025:7937',
-                'https://access.redhat.com/security/cve/CVE-2023-0286',
-                'https://access.redhat.com/security/cve/cve-2023-0286',
-                'https://bugzilla.redhat.com/2164440',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144000',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144003',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144006',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144008',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144010',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144012',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144015',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144017',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144019',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2145170',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2158412',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164440',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164487',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164488',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164492',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164497',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164499',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164500',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4203',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4304',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4450',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0215',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0216',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0217',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0286',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0401',
-                'https://errata.almalinux.org/9/ALSA-2025-7937.html',
-                'https://errata.rockylinux.org/RLSA-2023:0946',
-                'https://ftp.openbsd.org/pub/OpenBSD/LibreSSL/libressl-3.6.2-relnotes.txt',
-                'https://ftp.openbsd.org/pub/OpenBSD/patches/7.2/common/018_x509.patch.sig',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=2c6c9d439b484e1ba9830d8454a34fa4f80fdfe9',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=2f7530077e0ef79d98718138716bc51ca0cad658',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=fd2af07dc083a350c959147097003a14a5e8ac4d',
-                'https://github.com/pyca/cryptography',
-                'https://github.com/pyca/cryptography/security/advisories/GHSA-x4qr-2fvf-3mr5',
-                'https://linux.oracle.com/cve/CVE-2023-0286.html',
-                'https://linux.oracle.com/errata/ELSA-2025-7937.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-0286',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0003',
-                'https://rustsec.org/advisories/RUSTSEC-2023-0006.html',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://ubuntu.com/security/notices/USN-5844-1',
-                'https://ubuntu.com/security/notices/USN-5845-1',
-                'https://ubuntu.com/security/notices/USN-5845-2',
-                'https://ubuntu.com/security/notices/USN-6564-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-0286',
-                'https://www.openssl.org/news/secadv/20230207.txt'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: X.400 address type confusion in X.509 GeneralName'
-            },
-            {
-              'cve':  'CVE-2023-0464',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-295'
-              ],
-              'description':   "A security vulnerability has been identified in all supported versions\n\nof OpenSSL related to the verification of X.509 certificate chains\nthat include policy constraints.  Attackers may be able to exploit this\nvulnerability by creating a malicious certificate chain that triggers\nexponential use of computational resources, leading to a denial-of-service\n(DoS) attack on affected systems.\n\nPolicy processing is disabled by default but can be enabled by passing\nthe `-policy' argument to the command line utilities or by calling the\n`X509_VERIFY_PARAM_set1_policies()' function.",
-              'diffID':        'sha256:ad543cd673bd9de2bac48599da992506dcc37a183179302ea934853aaa92cb84',
-              'fixedVersions': [
-                '1.1.1t-r2'
-              ],
-              'installedVersion': '1.1.1q-r0',
-              'packageName':      'libssl1.1',
-              'purl':             'pkg:apk/alpine/libssl1.1@1.1.1q-r0?arch=x86_64&distro=3.15.5',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2023:3722',
-                'https://access.redhat.com/security/cve/CVE-2023-0464',
-                'https://bugzilla.redhat.com/2181082',
-                'https://bugzilla.redhat.com/2182561',
-                'https://bugzilla.redhat.com/2182565',
-                'https://bugzilla.redhat.com/2188461',
-                'https://bugzilla.redhat.com/2207947',
-                'https://errata.almalinux.org/9/ALSA-2023-3722.html',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=2017771e2db3e2b96f89bbe8766c3209f6a99545',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=2dcd4f1e3115f38cefa43e3efbe9b801c27e642e',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=879f7080d7e141f415c79eaa3a8ac4a3dad0348b',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=959c59c7a0164117e7f8366466a32bb1f8d77ff1',
-                'https://linux.oracle.com/cve/CVE-2023-0464.html',
-                'https://linux.oracle.com/errata/ELSA-2023-3722.html',
-                'https://lists.debian.org/debian-lts-announce/2023/06/msg00011.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-0464',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://security.netapp.com/advisory/ntap-20230406-0006/',
-                'https://security.netapp.com/advisory/ntap-20240621-0006/',
-                'https://ubuntu.com/security/notices/USN-6039-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.couchbase.com/alerts/',
-                'https://www.cve.org/CVERecord?id=CVE-2023-0464',
-                'https://www.debian.org/security/2023/dsa-5417',
-                'https://www.openssl.org/news/secadv/20230322.txt'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: Denial of service by excessive resource usage in verifying X509 policy constraints'
-            },
-            {
-              'cve':  'CVE-2022-4304',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N'
-                },
-                'nvd': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N'
-                },
-                'redhat': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-203'
-              ],
-              'description':   'A timing based side channel exists in the OpenSSL RSA Decryption implementation\nwhich could be sufficient to recover a plaintext across a network in a\nBleichenbacher style attack. To achieve a successful decryption an attacker\nwould have to be able to send a very large number of trial messages for\ndecryption. The vulnerability affects all RSA padding modes: PKCS#1 v1.5,\nRSA-OEAP and RSASVE.\n\nFor example, in a TLS connection, RSA is commonly used by a client to send an\nencrypted pre-master secret to the server. An attacker that had observed a\ngenuine connection between a client and a server could use this flaw to send\ntrial messages to the server and record the time taken to process them. After a\nsufficiently large number of messages the attacker could recover the pre-master\nsecret used for the original connection and thus be able to decrypt the\napplication data sent over that connection.',
-              'diffID':        'sha256:ad543cd673bd9de2bac48599da992506dcc37a183179302ea934853aaa92cb84',
-              'fixedVersions': [
-                '1.1.1t-r0'
-              ],
-              'installedVersion': '1.1.1q-r0',
-              'packageName':      'libssl1.1',
-              'purl':             'pkg:apk/alpine/libssl1.1@1.1.1q-r0?arch=x86_64&distro=3.15.5',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2023:2165',
-                'https://access.redhat.com/security/cve/CVE-2022-4304',
-                'https://bugzilla.redhat.com/1960321',
-                'https://bugzilla.redhat.com/2164440',
-                'https://bugzilla.redhat.com/2164487',
-                'https://bugzilla.redhat.com/2164492',
-                'https://bugzilla.redhat.com/2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144000',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144003',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144006',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144008',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144010',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144012',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144015',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144017',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144019',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2145170',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2158412',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164440',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164487',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164488',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164492',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164497',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164499',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164500',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4203',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4304',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4450',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0215',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0216',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0217',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0286',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0401',
-                'https://errata.almalinux.org/9/ALSA-2023-2165.html',
-                'https://errata.rockylinux.org/RLSA-2023:0946',
-                'https://linux.oracle.com/cve/CVE-2022-4304.html',
-                'https://linux.oracle.com/errata/ELSA-2023-32791.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2022-4304',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0003',
-                'https://rustsec.org/advisories/RUSTSEC-2023-0007.html',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://ubuntu.com/security/notices/USN-5844-1',
-                'https://ubuntu.com/security/notices/USN-6564-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2022-4304',
-                'https://www.openssl.org/news/secadv/20230207.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: timing attack in RSA Decryption implementation'
-            },
-            {
-              'cve':  'CVE-2023-0465',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N'
-                },
-                'redhat': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-295'
-              ],
-              'description':   "Applications that use a non-default option when verifying certificates may be\nvulnerable to an attack from a malicious CA to circumvent certain checks.\n\nInvalid certificate policies in leaf certificates are silently ignored by\nOpenSSL and other certificate policy checks are skipped for that certificate.\nA malicious CA could use this to deliberately assert invalid certificate policies\nin order to circumvent policy checking on the certificate altogether.\n\nPolicy processing is disabled by default but can be enabled by passing\nthe `-policy' argument to the command line utilities or by calling the\n`X509_VERIFY_PARAM_set1_policies()' function.",
-              'diffID':        'sha256:ad543cd673bd9de2bac48599da992506dcc37a183179302ea934853aaa92cb84',
-              'fixedVersions': [
-                '1.1.1t-r2'
-              ],
-              'installedVersion': '1.1.1q-r0',
-              'packageName':      'libssl1.1',
-              'purl':             'pkg:apk/alpine/libssl1.1@1.1.1q-r0?arch=x86_64&distro=3.15.5',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2023:3722',
-                'https://access.redhat.com/security/cve/CVE-2023-0465',
-                'https://bugzilla.redhat.com/2181082',
-                'https://bugzilla.redhat.com/2182561',
-                'https://bugzilla.redhat.com/2182565',
-                'https://bugzilla.redhat.com/2188461',
-                'https://bugzilla.redhat.com/2207947',
-                'https://errata.almalinux.org/9/ALSA-2023-3722.html',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=10325176f3d3e98c6e2b3bf5ab1e3b334de6947a',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=1dd43e0709fece299b15208f36cc7c76209ba0bb',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=b013765abfa80036dc779dd0e50602c57bb3bf95',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=facfb1ab745646e97a1920977ae4a9965ea61d5c',
-                'https://linux.oracle.com/cve/CVE-2023-0465.html',
-                'https://linux.oracle.com/errata/ELSA-2023-3722.html',
-                'https://lists.debian.org/debian-lts-announce/2023/06/msg00011.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-0465',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://security.netapp.com/advisory/ntap-20230414-0001/',
-                'https://ubuntu.com/security/notices/USN-6039-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-0465',
-                'https://www.debian.org/security/2023/dsa-5417',
-                'https://www.openssl.org/news/secadv/20230328.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: Invalid certificate policies in leaf certificates are silently ignored'
-            },
-            {
-              'cve':  'CVE-2023-2650',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '6.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-770'
-              ],
-              'description':   "Issue summary: Processing some specially crafted ASN.1 object identifiers or\ndata containing them may be very slow.\n\nImpact summary: Applications that use OBJ_obj2txt() directly, or use any of\nthe OpenSSL subsystems OCSP, PKCS7/SMIME, CMS, CMP/CRMF or TS with no message\nsize limit may experience notable to very long delays when processing those\nmessages, which may lead to a Denial of Service.\n\nAn OBJECT IDENTIFIER is composed of a series of numbers - sub-identifiers -\nmost of which have no size limit.  OBJ_obj2txt() may be used to translate\nan ASN.1 OBJECT IDENTIFIER given in DER encoding form (using the OpenSSL\ntype ASN1_OBJECT) to its canonical numeric text form, which are the\nsub-identifiers of the OBJECT IDENTIFIER in decimal form, separated by\nperiods.\n\nWhen one of the sub-identifiers in the OBJECT IDENTIFIER is very large\n(these are sizes that are seen as absurdly large, taking up tens or hundreds\nof KiBs), the translation to a decimal number in text may take a very long\ntime.  The time complexity is O(n^2) with 'n' being the size of the\nsub-identifiers in bytes (*).\n\nWith OpenSSL 3.0, support to fetch cryptographic algorithms using names /\nidentifiers in string form was introduced.  This includes using OBJECT\nIDENTIFIERs in canonical numeric text form as identifiers for fetching\nalgorithms.\n\nSuch OBJECT IDENTIFIERs may be received through the ASN.1 structure\nAlgorithmIdentifier, which is commonly used in multiple protocols to specify\nwhat cryptographic algorithm should be used to sign or verify, encrypt or\ndecrypt, or digest passed data.\n\nApplications that call OBJ_obj2txt() directly with untrusted data are\naffected, with any version of OpenSSL.  If the use is for the mere purpose\nof display, the severity is considered low.\n\nIn OpenSSL 3.0 and newer, this affects the subsystems OCSP, PKCS7/SMIME,\nCMS, CMP/CRMF or TS.  It also impacts anything that processes X.509\ncertificates, including simple things like verifying its signature.\n\nThe impact on TLS is relatively low, because all versions of OpenSSL have a\n100KiB limit on the peer's certificate chain.  Additionally, this only\nimpacts clients, or servers that have explicitly enabled client\nauthentication.\n\nIn OpenSSL 1.1.1 and 1.0.2, this only affects displaying diverse objects,\nsuch as X.509 certificates.  This is assumed to not happen in such a way\nthat it would cause a Denial of Service, so these versions are considered\nnot affected by this issue in such a way that it would be cause for concern,\nand the severity is therefore considered low.",
-              'diffID':        'sha256:ad543cd673bd9de2bac48599da992506dcc37a183179302ea934853aaa92cb84',
-              'fixedVersions': [
-                '1.1.1u-r0'
-              ],
-              'installedVersion': '1.1.1q-r0',
-              'packageName':      'libssl1.1',
-              'purl':             'pkg:apk/alpine/libssl1.1@1.1.1q-r0?arch=x86_64&distro=3.15.5',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2023/05/30/1',
-                'https://access.redhat.com/errata/RHSA-2023:6330',
-                'https://access.redhat.com/security/cve/CVE-2023-2650',
-                'https://bugzilla.redhat.com/1858038',
-                'https://bugzilla.redhat.com/2207947',
-                'https://errata.almalinux.org/9/ALSA-2023-6330.html',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=423a2bc737a908ad0c77bda470b2b59dc879936b',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=853c5e56ee0b8650c73140816bb8b91d6163422c',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=9e209944b35cf82368071f160a744b6178f9b098',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=db779b0e10b047f2585615e0b8f2acdf21f8544a',
-                'https://linux.oracle.com/cve/CVE-2023-2650.html',
-                'https://linux.oracle.com/errata/ELSA-2023-6330.html',
-                'https://lists.debian.org/debian-lts-announce/2023/06/msg00011.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-2650',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0009',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://security.netapp.com/advisory/ntap-20230703-0001/',
-                'https://security.netapp.com/advisory/ntap-20231027-0009/',
-                'https://ubuntu.com/security/notices/USN-6119-1',
-                'https://ubuntu.com/security/notices/USN-6188-1',
-                'https://ubuntu.com/security/notices/USN-6672-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-2650',
-                'https://www.debian.org/security/2023/dsa-5417',
-                'https://www.openssl.org/news/secadv/20230530.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: Possible DoS translating ASN.1 object identifiers'
-            },
-            {
-              'cve':  'CVE-2023-3446',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L'
-                },
-                'redhat': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L'
-                }
-              },
-              'cwes': [
-                'CWE-606',
-                'CWE-1333'
-              ],
-              'description':   "Issue summary: Checking excessively long DH keys or parameters may be very slow.\n\nImpact summary: Applications that use the functions DH_check(), DH_check_ex()\nor EVP_PKEY_param_check() to check a DH key or DH parameters may experience long\ndelays. Where the key or parameters that are being checked have been obtained\nfrom an untrusted source this may lead to a Denial of Service.\n\nThe function DH_check() performs various checks on DH parameters. One of those\nchecks confirms that the modulus ('p' parameter) is not too large. Trying to use\na very large modulus is slow and OpenSSL will not normally use a modulus which\nis over 10,000 bits in length.\n\nHowever the DH_check() function checks numerous aspects of the key or parameters\nthat have been supplied. Some of those checks use the supplied modulus value\neven if it has already been found to be too large.\n\nAn application that calls DH_check() and supplies a key or parameters obtained\nfrom an untrusted source could be vulernable to a Denial of Service attack.\n\nThe function DH_check() is itself called by a number of other OpenSSL functions.\nAn application calling any of those other functions may similarly be affected.\nThe other functions affected by this are DH_check_ex() and\nEVP_PKEY_param_check().\n\nAlso vulnerable are the OpenSSL dhparam and pkeyparam command line applications\nwhen using the '-check' option.\n\nThe OpenSSL SSL/TLS implementation is not affected by this issue.\nThe OpenSSL 3.0 and 3.1 FIPS providers are not affected by this issue.",
-              'diffID':        'sha256:ad543cd673bd9de2bac48599da992506dcc37a183179302ea934853aaa92cb84',
-              'fixedVersions': [
-                '1.1.1u-r2'
-              ],
-              'installedVersion': '1.1.1q-r0',
-              'packageName':      'libssl1.1',
-              'purl':             'pkg:apk/alpine/libssl1.1@1.1.1q-r0?arch=x86_64&distro=3.15.5',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2023/07/19/4',
-                'http://www.openwall.com/lists/oss-security/2023/07/19/5',
-                'http://www.openwall.com/lists/oss-security/2023/07/19/6',
-                'http://www.openwall.com/lists/oss-security/2023/07/31/1',
-                'http://www.openwall.com/lists/oss-security/2024/05/16/1',
-                'https://access.redhat.com/errata/RHSA-2024:2447',
-                'https://access.redhat.com/security/cve/CVE-2023-3446',
-                'https://bugzilla.redhat.com/2223016',
-                'https://bugzilla.redhat.com/2224962',
-                'https://bugzilla.redhat.com/2227852',
-                'https://bugzilla.redhat.com/2248616',
-                'https://bugzilla.redhat.com/2257571',
-                'https://bugzilla.redhat.com/2258502',
-                'https://bugzilla.redhat.com/2259944',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2224962',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2257582',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2257583',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2258677',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2258688',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2258691',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2258694',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2258700',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-36763',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-36764',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3446',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45229',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45231',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45232',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45233',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45235',
-                'https://errata.almalinux.org/9/ALSA-2024-2447.html',
-                'https://errata.rockylinux.org/RLSA-2024:2264',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=1fa20cf2f506113c761777127a38bce5068740eb',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=8780a896543a654e757db1b9396383f9d8095528',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=9a0a4d3c1e7138915563c0df4fe6a3f9377b839c',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=fc9867c1e03c22ebf56943be205202e576aabf23',
-                'https://linux.oracle.com/cve/CVE-2023-3446.html',
-                'https://linux.oracle.com/errata/ELSA-2024-2447.html',
-                'https://lists.debian.org/debian-lts-announce/2023/08/msg00019.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-3446',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://security.netapp.com/advisory/ntap-20230803-0011/',
-                'https://ubuntu.com/security/notices/USN-6435-1',
-                'https://ubuntu.com/security/notices/USN-6435-2',
-                'https://ubuntu.com/security/notices/USN-6450-1',
-                'https://ubuntu.com/security/notices/USN-6709-1',
-                'https://ubuntu.com/security/notices/USN-7018-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-3446',
-                'https://www.openssl.org/news/secadv/20230719.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: Excessive time spent checking DH keys and parameters'
-            },
-            {
-              'cve':  'CVE-2023-3817',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L'
-                },
-                'redhat': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L'
-                }
-              },
-              'cwes': [
-                'CWE-606',
-                'CWE-834'
-              ],
-              'description':   'Issue summary: Checking excessively long DH keys or parameters may be very slow.\n\nImpact summary: Applications that use the functions DH_check(), DH_check_ex()\nor EVP_PKEY_param_check() to check a DH key or DH parameters may experience long\ndelays. Where the key or parameters that are being checked have been obtained\nfrom an untrusted source this may lead to a Denial of Service.\n\nThe function DH_check() performs various checks on DH parameters. After fixing\nCVE-2023-3446 it was discovered that a large q parameter value can also trigger\nan overly long computation during some of these checks. A correct q value,\nif present, cannot be larger than the modulus p parameter, thus it is\nunnecessary to perform these checks if q is larger than p.\n\nAn application that calls DH_check() and supplies a key or parameters obtained\nfrom an untrusted source could be vulnerable to a Denial of Service attack.\n\nThe function DH_check() is itself called by a number of other OpenSSL functions.\nAn application calling any of those other functions may similarly be affected.\nThe other functions affected by this are DH_check_ex() and\nEVP_PKEY_param_check().\n\nAlso vulnerable are the OpenSSL dhparam and pkeyparam command line applications\nwhen using the "-check" option.\n\nThe OpenSSL SSL/TLS implementation is not affected by this issue.\n\nThe OpenSSL 3.0 and 3.1 FIPS providers are not affected by this issue.',
-              'diffID':        'sha256:ad543cd673bd9de2bac48599da992506dcc37a183179302ea934853aaa92cb84',
-              'fixedVersions': [
-                '1.1.1v-r0'
-              ],
-              'installedVersion': '1.1.1q-r0',
-              'packageName':      'libssl1.1',
-              'purl':             'pkg:apk/alpine/libssl1.1@1.1.1q-r0?arch=x86_64&distro=3.15.5',
-              'references':       [
-                'http://seclists.org/fulldisclosure/2023/Jul/43',
-                'http://www.openwall.com/lists/oss-security/2023/07/31/1',
-                'http://www.openwall.com/lists/oss-security/2023/09/22/11',
-                'http://www.openwall.com/lists/oss-security/2023/09/22/9',
-                'http://www.openwall.com/lists/oss-security/2023/11/06/2',
-                'https://access.redhat.com/errata/RHSA-2024:2447',
-                'https://access.redhat.com/security/cve/CVE-2023-3817',
-                'https://bugzilla.redhat.com/2223016',
-                'https://bugzilla.redhat.com/2224962',
-                'https://bugzilla.redhat.com/2227852',
-                'https://bugzilla.redhat.com/2248616',
-                'https://bugzilla.redhat.com/2257571',
-                'https://bugzilla.redhat.com/2258502',
-                'https://bugzilla.redhat.com/2259944',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2224962',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2227852',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2248616',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2270358',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3446',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3817',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-5678',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-2408',
-                'https://errata.almalinux.org/9/ALSA-2024-2447.html',
-                'https://errata.rockylinux.org/RLSA-2023:7877',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=6a1eb62c29db6cb5eec707f9338aee00f44e26f5',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=869ad69aadd985c7b8ca6f4e5dd0eb274c9f3644',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=9002fd07327a91f35ba6c1307e71fa6fd4409b7f',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=91ddeba0f2269b017dc06c46c993a788974b1aa5',
-                'https://linux.oracle.com/cve/CVE-2023-3817.html',
-                'https://linux.oracle.com/errata/ELSA-2024-2447.html',
-                'https://lists.debian.org/debian-lts-announce/2023/08/msg00019.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-3817',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://security.netapp.com/advisory/ntap-20230818-0014/',
-                'https://security.netapp.com/advisory/ntap-20231027-0008/',
-                'https://security.netapp.com/advisory/ntap-20240621-0006/',
-                'https://ubuntu.com/security/notices/USN-6435-1',
-                'https://ubuntu.com/security/notices/USN-6435-2',
-                'https://ubuntu.com/security/notices/USN-6450-1',
-                'https://ubuntu.com/security/notices/USN-6709-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-3817',
-                'https://www.openssl.org/news/secadv/20230731.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'OpenSSL: Excessive time spent checking DH q parameter value'
-            },
-            {
-              'cve':  'CVE-2023-5678',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L'
-                },
-                'redhat': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L'
-                }
-              },
-              'cwes': [
-                'CWE-606',
-                'CWE-754'
-              ],
-              'description':   "Issue summary: Generating excessively long X9.42 DH keys or checking\nexcessively long X9.42 DH keys or parameters may be very slow.\n\nImpact summary: Applications that use the functions DH_generate_key() to\ngenerate an X9.42 DH key may experience long delays.  Likewise, applications\nthat use DH_check_pub_key(), DH_check_pub_key_ex() or EVP_PKEY_public_check()\nto check an X9.42 DH key or X9.42 DH parameters may experience long delays.\nWhere the key or parameters that are being checked have been obtained from\nan untrusted source this may lead to a Denial of Service.\n\nWhile DH_check() performs all the necessary checks (as of CVE-2023-3817),\nDH_check_pub_key() doesn't make any of these checks, and is therefore\nvulnerable for excessively large P and Q parameters.\n\nLikewise, while DH_generate_key() performs a check for an excessively large\nP, it doesn't check for an excessively large Q.\n\nAn application that calls DH_generate_key() or DH_check_pub_key() and\nsupplies a key or parameters obtained from an untrusted source could be\nvulnerable to a Denial of Service attack.\n\nDH_generate_key() and DH_check_pub_key() are also called by a number of\nother OpenSSL functions.  An application calling any of those other\nfunctions may similarly be affected.  The other functions affected by this\nare DH_check_pub_key_ex(), EVP_PKEY_public_check(), and EVP_PKEY_generate().\n\nAlso vulnerable are the OpenSSL pkey command line application when using the\n\"-pubcheck\" option, as well as the OpenSSL genpkey command line application.\n\nThe OpenSSL SSL/TLS implementation is not affected by this issue.\n\nThe OpenSSL 3.0 and 3.1 FIPS providers are not affected by this issue.",
-              'diffID':        'sha256:ad543cd673bd9de2bac48599da992506dcc37a183179302ea934853aaa92cb84',
-              'fixedVersions': [
-                '1.1.1w-r1'
-              ],
-              'installedVersion': '1.1.1q-r0',
-              'packageName':      'libssl1.1',
-              'purl':             'pkg:apk/alpine/libssl1.1@1.1.1q-r0?arch=x86_64&distro=3.15.5',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2024/03/11/1',
-                'https://access.redhat.com/errata/RHSA-2024:2447',
-                'https://access.redhat.com/security/cve/CVE-2023-5678',
-                'https://bugzilla.redhat.com/2223016',
-                'https://bugzilla.redhat.com/2224962',
-                'https://bugzilla.redhat.com/2227852',
-                'https://bugzilla.redhat.com/2248616',
-                'https://bugzilla.redhat.com/2257571',
-                'https://bugzilla.redhat.com/2258502',
-                'https://bugzilla.redhat.com/2259944',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2224962',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2227852',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2248616',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2270358',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3446',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3817',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-5678',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-2408',
-                'https://errata.almalinux.org/9/ALSA-2024-2447.html',
-                'https://errata.rockylinux.org/RLSA-2023:7877',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=34efaef6c103d636ab507a0cc34dca4d3aecc055',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=710fee740904b6290fef0dd5536fbcedbc38ff0c',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=db925ae2e65d0d925adef429afc37f75bd1c2017',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=ddeb4b6c6d527e54ce9a99cba785c0f7776e54b6',
-                'https://linux.oracle.com/cve/CVE-2023-5678.html',
-                'https://linux.oracle.com/errata/ELSA-2024-2447.html',
-                'https://lists.debian.org/debian-lts-announce/2024/10/msg00033.html',
-                'https://lists.debian.org/debian-lts-announce/2024/11/msg00000.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-5678',
-                'https://security.netapp.com/advisory/ntap-20231130-0010/',
-                'https://ubuntu.com/security/notices/USN-6622-1',
-                'https://ubuntu.com/security/notices/USN-6632-1',
-                'https://ubuntu.com/security/notices/USN-6709-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-5678',
-                'https://www.openssl.org/news/secadv/20231106.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: Generating excessively long X9.42 DH keys or checking excessively long X9.42 DH keys or parameters may be very slow'
-            },
-            {
-              'cve':  'CVE-2022-37434',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '9.8',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-787',
-                'CWE-120'
-              ],
-              'description':   'zlib through 1.2.12 has a heap-based buffer over-read or buffer overflow in inflate in inflate.c via a large gzip header extra field. NOTE: only applications that call inflateGetHeader are affected. Some common applications bundle the affected zlib source code but may be unable to call inflateGetHeader (e.g., see the nodejs/node reference).',
-              'diffID':        'sha256:ad543cd673bd9de2bac48599da992506dcc37a183179302ea934853aaa92cb84',
-              'fixedVersions': [
-                '1.2.12-r2'
-              ],
-              'installedVersion': '1.2.12-r1',
-              'packageName':      'zlib',
-              'purl':             'pkg:apk/alpine/zlib@1.2.12-r1?arch=x86_64&distro=3.15.5',
-              'references':       [
-                'http://seclists.org/fulldisclosure/2022/Oct/37',
-                'http://seclists.org/fulldisclosure/2022/Oct/38',
-                'http://seclists.org/fulldisclosure/2022/Oct/41',
-                'http://seclists.org/fulldisclosure/2022/Oct/42',
-                'http://www.openwall.com/lists/oss-security/2022/08/05/2',
-                'http://www.openwall.com/lists/oss-security/2022/08/09/1',
-                'https://access.redhat.com/errata/RHSA-2022:8291',
-                'https://access.redhat.com/security/cve/CVE-2022-37434',
-                'https://bugzilla.redhat.com/2116639',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2053198',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2077431',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2081296',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2116639',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-37434',
-                'https://errata.almalinux.org/9/ALSA-2022-8291.html',
-                'https://errata.rockylinux.org/RLSA-2022:8291',
-                'https://github.com/curl/curl/issues/9271',
-                'https://github.com/ivd38/zlib_overflow',
-                'https://github.com/madler/zlib/blob/21767c654d31d2dccdde4330529775c6c5fd5389/zlib.h#L1062-L1063',
-                'https://github.com/madler/zlib/commit/1eb7682f845ac9e9bf9ae35bbfb3bad5dacbd91d',
-                'https://github.com/madler/zlib/commit/eff308af425b67093bab25f80f1ae950166bece1',
-                'https://github.com/nodejs/node/blob/75b68c6e4db515f76df73af476eccf382bbcb00a/deps/zlib/inflate.c#L762-L764',
-                'https://linux.oracle.com/cve/CVE-2022-37434.html',
-                'https://linux.oracle.com/errata/ELSA-2023-1095.html',
-                'https://lists.debian.org/debian-lts-announce/2022/09/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JWN4VE3JQR4O2SOUS5TXNLANRPMHWV4I/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NMBOJ77A7T7PQCARMDUK75TE6LLESZ3O/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PAVPQNCG3XRLCLNSQRM3KAN5ZFMVXVTY/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/X5U7OTKZSHY2I3ZFJSR2SHFHW72RKGDK/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YRQAI7H4M4RQZ2IWZUEEXECBE5D56BH2/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2022-37434',
-                'https://security.netapp.com/advisory/ntap-20220901-0005/',
-                'https://security.netapp.com/advisory/ntap-20230427-0007/',
-                'https://support.apple.com/kb/HT213488',
-                'https://support.apple.com/kb/HT213489',
-                'https://support.apple.com/kb/HT213490',
-                'https://support.apple.com/kb/HT213491',
-                'https://support.apple.com/kb/HT213493',
-                'https://support.apple.com/kb/HT213494',
-                'https://ubuntu.com/security/notices/USN-5570-1',
-                'https://ubuntu.com/security/notices/USN-5570-2',
-                'https://ubuntu.com/security/notices/USN-5573-1',
-                'https://ubuntu.com/security/notices/USN-6736-1',
-                'https://ubuntu.com/security/notices/USN-6736-2',
-                'https://www.cve.org/CVERecord?id=CVE-2022-37434',
-                'https://www.debian.org/security/2022/dsa-5218'
-              ],
-              'severity':   'CRITICAL',
-              'suppressed': false,
-              'title':      'zlib: heap-based buffer over-read and overflow in inflate() in inflate.c via a large gzip header extra field'
-            }
-          ]
-        }
-      ],
-      'summary': {
-        'critical':   1,
-        'high':       8,
-        'low':        0,
-        'medium':     12,
-        'suppressed': 0,
-        'unknown':    0
-      }
-    }
-  },
-  {
-    'id':    'default/25916e61565005415d491b6b738605255d9d791a03b4f1fce9f4e10373b83b41',
-    'type':  'storage.sbomscanner.kubewarden.io.vulnerabilityreport',
-    'links': {
-      'patch':  'https://localhost:8005/v1/storage.sbomscanner.kubewarden.io.vulnerabilityreports/default/25916e61565005415d491b6b738605255d9d791a03b4f1fce9f4e10373b83b41',
-      'remove': 'https://localhost:8005/v1/storage.sbomscanner.kubewarden.io.vulnerabilityreports/default/25916e61565005415d491b6b738605255d9d791a03b4f1fce9f4e10373b83b41',
-      'self':   'https://localhost:8005/v1/storage.sbomscanner.kubewarden.io.vulnerabilityreports/default/25916e61565005415d491b6b738605255d9d791a03b4f1fce9f4e10373b83b41',
-      'update': 'https://localhost:8005/v1/storage.sbomscanner.kubewarden.io.vulnerabilityreports/default/25916e61565005415d491b6b738605255d9d791a03b4f1fce9f4e10373b83b41',
-      'view':   'https://localhost:8005/apis/storage.sbomscanner.kubewarden.io/v1alpha1/namespaces/default/vulnerabilityreports/25916e61565005415d491b6b738605255d9d791a03b4f1fce9f4e10373b83b41'
-    },
-    'apiVersion':    'storage.sbomscanner.kubewarden.io/v1alpha1',
-    'imageMetadata': {
-      'digest':      'sha256:9bc8f9742a09f8c6be66e0b3b750248bffb70b9da1ea0e68f2e756b14e1564b9',
-      'platform':    'linux/s390x',
-      'registry':    'lsong-demo1',
-      'registryURI': 'registry-1.docker.io',
-      'repository':  'library/alpine',
-      'tag':         '3.19.2'
-    },
-    'kind':     'VulnerabilityReport',
-    'metadata': {
-      'creationTimestamp': '2026-01-14T18:52:06Z',
-      'fields':            [
-        '25916e61565005415d491b6b738605255d9d791a03b4f1fce9f4e10373b83b41',
-        'registry-1.docker.io/library/alpine:3.19.2',
-        'linux/s390x',
-        '22 (0 suppressed)'
-      ],
-      'labels': {
-        'app.kubernetes.io/managed-by':          'sbomscanner',
-        'app.kubernetes.io/part-of':             'sbomscanner',
-        'sbomscanner.kubewarden.io/scanjob-uid': '445c600a-c4b6-40b3-bd71-f2d2140a37d5'
-      },
-      'name':            '25916e61565005415d491b6b738605255d9d791a03b4f1fce9f4e10373b83b41',
-      'namespace':       'default',
-      'ownerReferences': [
-        {
-          'apiVersion':         'storage.sbomscanner.kubewarden.io/v1alpha1',
-          'blockOwnerDeletion': true,
-          'controller':         true,
-          'kind':               'SBOM',
-          'name':               '25916e61565005415d491b6b738605255d9d791a03b4f1fce9f4e10373b83b41',
-          'uid':                'b14f4950-4f97-4006-b847-b2f7834dd348'
-        }
-      ],
-      'relationships': [
-        {
-          'fromId':   'default/25916e61565005415d491b6b738605255d9d791a03b4f1fce9f4e10373b83b41',
-          'fromType': 'storage.sbomscanner.kubewarden.io.sbom',
-          'rel':      'owner',
-          'state':    'active',
-          'message':  'Resource is current'
-        }
-      ],
-      'resourceVersion': '1',
-      'state':           {
-        'error':         false,
-        'message':       'Resource is current',
-        'name':          'active',
-        'transitioning': false
-      },
-      'uid': 'a96dfd38-dfa5-4155-9e91-f168001141a2'
-    },
-    'report': {
-      'results': [
-        {
-          'class':           'os-pkgs',
-          'target':          '/var/run/worker/trivy.sbom.395162606.json (alpine 3.19.2)',
-          'type':            'alpine',
-          'vulnerabilities': [
-            {
-              'cve':  'CVE-2024-58251',
-              'cwes': [
-                'CWE-150'
-              ],
-              'description':   'In netstat in BusyBox through 1.37.0, local users can launch of network application with an argv[0] containing an ANSI terminal escape sequence, leading to a denial of service (terminal locked up) when netstat is used by a victim.',
-              'diffID':        'sha256:842fa689dd99c10d9cf2f377298e7f8d52135f6fe621c8c1fd9a6ea34b41133a',
-              'fixedVersions': [
-                '1.36.1-r21'
-              ],
-              'installedVersion': '1.36.1-r19',
-              'packageName':      'busybox',
-              'purl':             'pkg:apk/alpine/busybox@1.36.1-r19?arch=s390x&distro=3.19.2',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2025/04/23/6',
-                'https://bugs.busybox.net/show_bug.cgi?id=15922',
-                'https://www.busybox.net',
-                'https://www.busybox.net/downloads/',
-                'https://www.cve.org/CVERecord?id=CVE-2024-58251'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'In netstat in BusyBox through 1.37.0, local users can launch of networ ...'
-            },
-            {
-              'cve':  'CVE-2025-46394',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '3.3',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-451'
-              ],
-              'description':   'In tar in BusyBox through 1.37.0, a TAR archive can have filenames hidden from a listing through the use of terminal escape sequences.',
-              'diffID':        'sha256:842fa689dd99c10d9cf2f377298e7f8d52135f6fe621c8c1fd9a6ea34b41133a',
-              'fixedVersions': [
-                '1.36.1-r21'
-              ],
-              'installedVersion': '1.36.1-r19',
-              'packageName':      'busybox',
-              'purl':             'pkg:apk/alpine/busybox@1.36.1-r19?arch=s390x&distro=3.19.2',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2025/04/23/5',
-                'http://www.openwall.com/lists/oss-security/2025/04/24/3',
-                'https://bugs.busybox.net/show_bug.cgi?id=16018',
-                'https://lists.busybox.net/pipermail/busybox/2024-July/090806.html',
-                'https://lists.busybox.net/pipermail/busybox/2024-July/090814.html',
-                'https://www.busybox.net',
-                'https://www.busybox.net/downloads/',
-                'https://www.cve.org/CVERecord?id=CVE-2025-46394',
-                'https://www.openwall.com/lists/oss-security/2025/04/23/1'
-              ],
-              'severity':   'LOW',
-              'suppressed': false,
-              'title':      'In tar in BusyBox through 1.37.0, a TAR archive can have filenames hid ...'
-            },
-            {
-              'cve':  'CVE-2024-58251',
-              'cwes': [
-                'CWE-150'
-              ],
-              'description':   'In netstat in BusyBox through 1.37.0, local users can launch of network application with an argv[0] containing an ANSI terminal escape sequence, leading to a denial of service (terminal locked up) when netstat is used by a victim.',
-              'diffID':        'sha256:842fa689dd99c10d9cf2f377298e7f8d52135f6fe621c8c1fd9a6ea34b41133a',
-              'fixedVersions': [
-                '1.36.1-r21'
-              ],
-              'installedVersion': '1.36.1-r19',
-              'packageName':      'busybox-binsh',
-              'purl':             'pkg:apk/alpine/busybox-binsh@1.36.1-r19?arch=s390x&distro=3.19.2',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2025/04/23/6',
-                'https://bugs.busybox.net/show_bug.cgi?id=15922',
-                'https://www.busybox.net',
-                'https://www.busybox.net/downloads/',
-                'https://www.cve.org/CVERecord?id=CVE-2024-58251'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'In netstat in BusyBox through 1.37.0, local users can launch of networ ...'
-            },
-            {
-              'cve':  'CVE-2025-46394',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '3.3',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-451'
-              ],
-              'description':   'In tar in BusyBox through 1.37.0, a TAR archive can have filenames hidden from a listing through the use of terminal escape sequences.',
-              'diffID':        'sha256:842fa689dd99c10d9cf2f377298e7f8d52135f6fe621c8c1fd9a6ea34b41133a',
-              'fixedVersions': [
-                '1.36.1-r21'
-              ],
-              'installedVersion': '1.36.1-r19',
-              'packageName':      'busybox-binsh',
-              'purl':             'pkg:apk/alpine/busybox-binsh@1.36.1-r19?arch=s390x&distro=3.19.2',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2025/04/23/5',
-                'http://www.openwall.com/lists/oss-security/2025/04/24/3',
-                'https://bugs.busybox.net/show_bug.cgi?id=16018',
-                'https://lists.busybox.net/pipermail/busybox/2024-July/090806.html',
-                'https://lists.busybox.net/pipermail/busybox/2024-July/090814.html',
-                'https://www.busybox.net',
-                'https://www.busybox.net/downloads/',
-                'https://www.cve.org/CVERecord?id=CVE-2025-46394',
-                'https://www.openwall.com/lists/oss-security/2025/04/23/1'
-              ],
-              'severity':   'LOW',
-              'suppressed': false,
-              'title':      'In tar in BusyBox through 1.37.0, a TAR archive can have filenames hid ...'
-            },
-            {
-              'cve':  'CVE-2024-6119',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-843'
-              ],
-              'description':   "Issue summary: Applications performing certificate name checks (e.g., TLS\nclients checking server certificates) may attempt to read an invalid memory\naddress resulting in abnormal termination of the application process.\n\nImpact summary: Abnormal termination of an application can a cause a denial of\nservice.\n\nApplications performing certificate name checks (e.g., TLS clients checking\nserver certificates) may attempt to read an invalid memory address when\ncomparing the expected name with an `otherName` subject alternative name of an\nX.509 certificate. This may result in an exception that terminates the\napplication program.\n\nNote that basic certificate chain validation (signatures, dates, ...) is not\naffected, the denial of service can occur only when the application also\nspecifies an expected DNS name, Email address or IP address.\n\nTLS servers rarely solicit client certificates, and even when they do, they\ngenerally don't perform a name check against a reference identifier (expected\nidentity), but rather extract the presented identity after checking the\ncertificate chain.  So TLS servers are generally not affected and the severity\nof the issue is Moderate.\n\nThe FIPS modules in 3.3, 3.2, 3.1 and 3.0 are not affected by this issue.",
-              'diffID':        'sha256:842fa689dd99c10d9cf2f377298e7f8d52135f6fe621c8c1fd9a6ea34b41133a',
-              'fixedVersions': [
-                '3.1.7-r0'
-              ],
-              'installedVersion': '3.1.5-r0',
-              'packageName':      'libcrypto3',
-              'purl':             'pkg:apk/alpine/libcrypto3@3.1.5-r0?arch=s390x&distro=3.19.2',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2024/09/03/4',
-                'https://access.redhat.com/errata/RHSA-2024:8935',
-                'https://access.redhat.com/security/cve/CVE-2024-6119',
-                'https://bugzilla.redhat.com/2306158',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2306158',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-6119',
-                'https://errata.almalinux.org/9/ALSA-2024-8935.html',
-                'https://errata.rockylinux.org/RLSA-2024:6783',
-                'https://github.com/openssl/openssl/commit/05f360d9e849a1b277db628f1f13083a7f8dd04f',
-                'https://github.com/openssl/openssl/commit/06d1dc3fa96a2ba5a3e22735a033012aadc9f0d6',
-                'https://github.com/openssl/openssl/commit/621f3729831b05ee828a3203eddb621d014ff2b2',
-                'https://github.com/openssl/openssl/commit/7dfcee2cd2a63b2c64b9b4b0850be64cb695b0a0',
-                'https://github.com/openssl/openssl/security/advisories/GHSA-5qrj-vq78-58fj',
-                'https://linux.oracle.com/cve/CVE-2024-6119.html',
-                'https://linux.oracle.com/errata/ELSA-2024-8935.html',
-                'https://lists.freebsd.org/archives/freebsd-security/2024-September/000303.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2024-6119',
-                'https://openssl-library.org/news/secadv/20240903.txt',
-                'https://security.netapp.com/advisory/ntap-20240912-0001/',
-                'https://ubuntu.com/security/notices/USN-6986-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2024-6119'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: Possible denial of service in X.509 name checks'
-            },
-            {
-              'cve':  'CVE-2024-13176',
-              'cvss': {
-                'redhat': {
-                  'v3score':  '4.7',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-385'
-              ],
-              'description':   'Issue summary: A timing side-channel which could potentially allow recovering\nthe private key exists in the ECDSA signature computation.\n\nImpact summary: A timing side-channel in ECDSA signature computations\ncould allow recovering the private key by an attacker. However, measuring\nthe timing would require either local access to the signing application or\na very fast network connection with low latency.\n\nThere is a timing signal of around 300 nanoseconds when the top word of\nthe inverted ECDSA nonce value is zero. This can happen with significant\nprobability only for some of the supported elliptic curves. In particular\nthe NIST P-521 curve is affected. To be able to measure this leak, the attacker\nprocess must either be located in the same physical computer or must\nhave a very fast network connection with low latency. For that reason\nthe severity of this vulnerability is Low.\n\nThe FIPS modules in 3.4, 3.3, 3.2, 3.1 and 3.0 are affected by this issue.',
-              'diffID':        'sha256:842fa689dd99c10d9cf2f377298e7f8d52135f6fe621c8c1fd9a6ea34b41133a',
-              'fixedVersions': [
-                '3.1.8-r0'
-              ],
-              'installedVersion': '3.1.5-r0',
-              'packageName':      'libcrypto3',
-              'purl':             'pkg:apk/alpine/libcrypto3@3.1.5-r0?arch=s390x&distro=3.19.2',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2025/01/20/2',
-                'https://access.redhat.com/errata/RHSA-2025:16046',
-                'https://access.redhat.com/security/cve/CVE-2024-13176',
-                'https://bugzilla.redhat.com/2359885',
-                'https://bugzilla.redhat.com/2359888',
-                'https://bugzilla.redhat.com/2359892',
-                'https://bugzilla.redhat.com/2359894',
-                'https://bugzilla.redhat.com/2359895',
-                'https://bugzilla.redhat.com/2359899',
-                'https://bugzilla.redhat.com/2359900',
-                'https://bugzilla.redhat.com/2359902',
-                'https://bugzilla.redhat.com/2359903',
-                'https://bugzilla.redhat.com/2359911',
-                'https://bugzilla.redhat.com/2359918',
-                'https://bugzilla.redhat.com/2359920',
-                'https://bugzilla.redhat.com/2359924',
-                'https://bugzilla.redhat.com/2359928',
-                'https://bugzilla.redhat.com/2359930',
-                'https://bugzilla.redhat.com/2359932',
-                'https://bugzilla.redhat.com/2359934',
-                'https://bugzilla.redhat.com/2359938',
-                'https://bugzilla.redhat.com/2359940',
-                'https://bugzilla.redhat.com/2359943',
-                'https://bugzilla.redhat.com/2359944',
-                'https://bugzilla.redhat.com/2359945',
-                'https://bugzilla.redhat.com/2359947',
-                'https://bugzilla.redhat.com/2359950',
-                'https://bugzilla.redhat.com/2359963',
-                'https://bugzilla.redhat.com/2359964',
-                'https://bugzilla.redhat.com/2359972',
-                'https://bugzilla.redhat.com/2370920',
-                'https://bugzilla.redhat.com/2380264',
-                'https://bugzilla.redhat.com/2380273',
-                'https://bugzilla.redhat.com/2380274',
-                'https://bugzilla.redhat.com/2380278',
-                'https://bugzilla.redhat.com/2380280',
-                'https://bugzilla.redhat.com/2380283',
-                'https://bugzilla.redhat.com/2380284',
-                'https://bugzilla.redhat.com/2380290',
-                'https://bugzilla.redhat.com/2380291',
-                'https://bugzilla.redhat.com/2380295',
-                'https://bugzilla.redhat.com/2380298',
-                'https://bugzilla.redhat.com/2380306',
-                'https://bugzilla.redhat.com/2380308',
-                'https://bugzilla.redhat.com/2380309',
-                'https://bugzilla.redhat.com/2380310',
-                'https://bugzilla.redhat.com/2380312',
-                'https://bugzilla.redhat.com/2380313',
-                'https://bugzilla.redhat.com/2380320',
-                'https://bugzilla.redhat.com/2380321',
-                'https://bugzilla.redhat.com/2380322',
-                'https://bugzilla.redhat.com/2380326',
-                'https://bugzilla.redhat.com/2380327',
-                'https://bugzilla.redhat.com/2380334',
-                'https://bugzilla.redhat.com/2380335',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2338999',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359885',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359888',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359892',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359894',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359895',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359899',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359900',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359902',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359903',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359911',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359918',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359920',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359924',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359928',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359930',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359932',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359934',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359938',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359940',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359943',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359944',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359945',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359947',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359950',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359963',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359964',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359972',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2370920',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380264',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380273',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380274',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380278',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380280',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380283',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380284',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380290',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380291',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380295',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380298',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380306',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380308',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380309',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380310',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380312',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380313',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380320',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380321',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380322',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380326',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380327',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380334',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380335',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-13176',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21574',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21575',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21577',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21579',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21580',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21581',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21584',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21585',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21588',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30681',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30682',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30683',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30684',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30685',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30687',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30688',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30689',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30693',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30695',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30696',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30699',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30703',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30704',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30705',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30715',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30721',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30722',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50077',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50078',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50079',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50080',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50081',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50082',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50083',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50084',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50085',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50086',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50087',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50088',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50091',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50092',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50093',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50094',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50096',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50097',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50098',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50099',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50100',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50101',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50102',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50104',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-5399',
-                'https://errata.almalinux.org/9/ALSA-2025-16046.html',
-                'https://errata.rockylinux.org/RLSA-2025:15699',
-                'https://github.com/openssl/openssl/commit/07272b05b04836a762b4baa874958af51d513844',
-                'https://github.com/openssl/openssl/commit/2af62e74fb59bc469506bc37eb2990ea408d9467',
-                'https://github.com/openssl/openssl/commit/392dcb336405a0c94486aa6655057f59fd3a0902',
-                'https://github.com/openssl/openssl/commit/4b1cb94a734a7d4ec363ac0a215a25c181e11f65',
-                'https://github.com/openssl/openssl/commit/77c608f4c8857e63e98e66444e2e761c9627916f',
-                'https://github.openssl.org/openssl/extended-releases/commit/0d5fd1ab987f7571e2c955d8d8b638fc0fb54ded',
-                'https://github.openssl.org/openssl/extended-releases/commit/a2639000db19878d5d89586ae7b725080592ae86',
-                'https://linux.oracle.com/cve/CVE-2024-13176.html',
-                'https://linux.oracle.com/errata/ELSA-2025-16046.html',
-                'https://lists.debian.org/debian-lts-announce/2025/05/msg00028.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2024-13176',
-                'https://openssl-library.org/news/secadv/20250120.txt',
-                'https://security.netapp.com/advisory/ntap-20250124-0005/',
-                'https://security.netapp.com/advisory/ntap-20250418-0010/',
-                'https://security.netapp.com/advisory/ntap-20250502-0006/',
-                'https://ubuntu.com/security/notices/USN-7264-1',
-                'https://ubuntu.com/security/notices/USN-7278-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2024-13176',
-                'https://www.oracle.com/security-alerts/cpuapr2025.html#AppendixMSQL'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: Timing side-channel in ECDSA signature computation'
-            },
-            {
-              'cve':  'CVE-2024-4741',
-              'cvss': {
-                'redhat': {
-                  'v3score':  '5.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   'Issue summary: Calling the OpenSSL API function SSL_free_buffers may cause\nmemory to be accessed that was previously freed in some situations\n\nImpact summary: A use after free can have a range of potential consequences such\nas the corruption of valid data, crashes or execution of arbitrary code.\nHowever, only applications that directly call the SSL_free_buffers function are\naffected by this issue. Applications that do not call this function are not\nvulnerable. Our investigations indicate that this function is rarely used by\napplications.\n\nThe SSL_free_buffers function is used to free the internal OpenSSL buffer used\nwhen processing an incoming record from the network. The call is only expected\nto succeed if the buffer is not currently in use. However, two scenarios have\nbeen identified where the buffer is freed even when still in use.\n\nThe first scenario occurs where a record header has been received from the\nnetwork and processed by OpenSSL, but the full record body has not yet arrived.\nIn this case calling SSL_free_buffers will succeed even though a record has only\nbeen partially processed and the buffer is still in use.\n\nThe second scenario occurs where a full record containing application data has\nbeen received and processed by OpenSSL but the application has only read part of\nthis data. Again a call to SSL_free_buffers will succeed even though the buffer\nis still in use.\n\nWhile these scenarios could occur accidentally during normal operation a\nmalicious attacker could attempt to engineer a stituation where this occurs.\nWe are not aware of this issue being actively exploited.\n\nThe FIPS modules in 3.3, 3.2, 3.1 and 3.0 are not affected by this issue.',
-              'diffID':        'sha256:842fa689dd99c10d9cf2f377298e7f8d52135f6fe621c8c1fd9a6ea34b41133a',
-              'fixedVersions': [
-                '3.1.6-r0'
-              ],
-              'installedVersion': '3.1.5-r0',
-              'packageName':      'libcrypto3',
-              'purl':             'pkg:apk/alpine/libcrypto3@3.1.5-r0?arch=s390x&distro=3.19.2',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2024:9333',
-                'https://access.redhat.com/security/cve/CVE-2024-4741',
-                'https://bugzilla.redhat.com/2274020',
-                'https://bugzilla.redhat.com/2281029',
-                'https://bugzilla.redhat.com/2283757',
-                'https://bugzilla.redhat.com/2294581',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2274020',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2281029',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2283757',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2294581',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-2511',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-4603',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-4741',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-5535',
-                'https://errata.almalinux.org/9/ALSA-2024-9333.html',
-                'https://errata.rockylinux.org/RLSA-2024:9333',
-                'https://github.com/openssl/openssl/commit/704f725b96aa373ee45ecfb23f6abfe8be8d9177',
-                'https://github.com/openssl/openssl/commit/b3f0eb0a295f58f16ba43ba99dad70d4ee5c437d',
-                'https://github.com/openssl/openssl/commit/c88c3de51020c37e8706bf7a682a162593053aac',
-                'https://github.com/openssl/openssl/commit/e5093133c35ca82874ad83697af76f4b0f7e3bd8',
-                'https://github.openssl.org/openssl/extended-releases/commit/f7a045f3143fc6da2ee66bf52d8df04829590dd4',
-                'https://linux.oracle.com/cve/CVE-2024-4741.html',
-                'https://linux.oracle.com/errata/ELSA-2024-9333.html',
-                'https://lists.debian.org/debian-lts-announce/2024/10/msg00033.html',
-                'https://lists.debian.org/debian-lts-announce/2024/11/msg00000.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2024-4741',
-                'https://security.netapp.com/advisory/ntap-20240621-0004/',
-                'https://ubuntu.com/security/notices/USN-6937-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2024-4741',
-                'https://www.openssl.org/news/secadv/20240528.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: Use After Free with SSL_free_buffers'
-            },
-            {
-              'cve':  'CVE-2024-5535',
-              'cvss': {
-                'redhat': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-125'
-              ],
-              'description':   'Issue summary: Calling the OpenSSL API function SSL_select_next_proto with an\nempty supported client protocols buffer may cause a crash or memory contents to\nbe sent to the peer.\n\nImpact summary: A buffer overread can have a range of potential consequences\nsuch as unexpected application beahviour or a crash. In particular this issue\ncould result in up to 255 bytes of arbitrary private data from memory being sent\nto the peer leading to a loss of confidentiality. However, only applications\nthat directly call the SSL_select_next_proto function with a 0 length list of\nsupported client protocols are affected by this issue. This would normally never\nbe a valid scenario and is typically not under attacker control but may occur by\naccident in the case of a configuration or programming error in the calling\napplication.\n\nThe OpenSSL API function SSL_select_next_proto is typically used by TLS\napplications that support ALPN (Application Layer Protocol Negotiation) or NPN\n(Next Protocol Negotiation). NPN is older, was never standardised and\nis deprecated in favour of ALPN. We believe that ALPN is significantly more\nwidely deployed than NPN. The SSL_select_next_proto function accepts a list of\nprotocols from the server and a list of protocols from the client and returns\nthe first protocol that appears in the server list that also appears in the\nclient list. In the case of no overlap between the two lists it returns the\nfirst item in the client list. In either case it will signal whether an overlap\nbetween the two lists was found. In the case where SSL_select_next_proto is\ncalled with a zero length client list it fails to notice this condition and\nreturns the memory immediately following the client list pointer (and reports\nthat there was no overlap in the lists).\n\nThis function is typically called from a server side application callback for\nALPN or a client side application callback for NPN. In the case of ALPN the list\nof protocols supplied by the client is guaranteed by libssl to never be zero in\nlength. The list of server protocols comes from the application and should never\nnormally be expected to be of zero length. In this case if the\nSSL_select_next_proto function has been called as expected (with the list\nsupplied by the client passed in the client/client_len parameters), then the\napplication will not be vulnerable to this issue. If the application has\naccidentally been configured with a zero length server list, and has\naccidentally passed that zero length server list in the client/client_len\nparameters, and has additionally failed to correctly handle a "no overlap"\nresponse (which would normally result in a handshake failure in ALPN) then it\nwill be vulnerable to this problem.\n\nIn the case of NPN, the protocol permits the client to opportunistically select\na protocol when there is no overlap. OpenSSL returns the first client protocol\nin the no overlap case in support of this. The list of client protocols comes\nfrom the application and should never normally be expected to be of zero length.\nHowever if the SSL_select_next_proto function is accidentally called with a\nclient_len of 0 then an invalid memory pointer will be returned instead. If the\napplication uses this output as the opportunistic protocol then the loss of\nconfidentiality will occur.\n\nThis issue has been assessed as Low severity because applications are most\nlikely to be vulnerable if they are using NPN instead of ALPN - but NPN is not\nwidely used. It also requires an application configuration or programming error.\nFinally, this issue would not typically be under attacker control making active\nexploitation unlikely.\n\nThe FIPS modules in 3.3, 3.2, 3.1 and 3.0 are not affected by this issue.\n\nDue to the low severity of this issue we are not issuing new releases of\nOpenSSL at this time. The fix will be included in the next releases when they\nbecome available.',
-              'diffID':        'sha256:842fa689dd99c10d9cf2f377298e7f8d52135f6fe621c8c1fd9a6ea34b41133a',
-              'fixedVersions': [
-                '3.1.6-r0'
-              ],
-              'installedVersion': '3.1.5-r0',
-              'packageName':      'libcrypto3',
-              'purl':             'pkg:apk/alpine/libcrypto3@3.1.5-r0?arch=s390x&distro=3.19.2',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2024/06/27/1',
-                'http://www.openwall.com/lists/oss-security/2024/06/28/4',
-                'http://www.openwall.com/lists/oss-security/2024/08/15/1',
-                'https://access.redhat.com/errata/RHSA-2025:1671',
-                'https://access.redhat.com/security/cve/CVE-2024-5535',
-                'https://bugzilla.redhat.com/2294581',
-                'https://bugzilla.redhat.com/2294676',
-                'https://bugzilla.redhat.com/2301888',
-                'https://bugzilla.redhat.com/2318857',
-                'https://bugzilla.redhat.com/2318858',
-                'https://bugzilla.redhat.com/2318870',
-                'https://bugzilla.redhat.com/2318873',
-                'https://bugzilla.redhat.com/2318874',
-                'https://bugzilla.redhat.com/2318876',
-                'https://bugzilla.redhat.com/2318882',
-                'https://bugzilla.redhat.com/2318883',
-                'https://bugzilla.redhat.com/2318884',
-                'https://bugzilla.redhat.com/2318885',
-                'https://bugzilla.redhat.com/2318886',
-                'https://bugzilla.redhat.com/2318897',
-                'https://bugzilla.redhat.com/2318900',
-                'https://bugzilla.redhat.com/2318905',
-                'https://bugzilla.redhat.com/2318914',
-                'https://bugzilla.redhat.com/2318922',
-                'https://bugzilla.redhat.com/2318923',
-                'https://bugzilla.redhat.com/2318925',
-                'https://bugzilla.redhat.com/2318926',
-                'https://bugzilla.redhat.com/2318927',
-                'https://bugzilla.redhat.com/2331191',
-                'https://bugzilla.redhat.com/2339218',
-                'https://bugzilla.redhat.com/2339220',
-                'https://bugzilla.redhat.com/2339221',
-                'https://bugzilla.redhat.com/2339226',
-                'https://bugzilla.redhat.com/2339231',
-                'https://bugzilla.redhat.com/2339236',
-                'https://bugzilla.redhat.com/2339238',
-                'https://bugzilla.redhat.com/2339243',
-                'https://bugzilla.redhat.com/2339247',
-                'https://bugzilla.redhat.com/2339252',
-                'https://bugzilla.redhat.com/2339259',
-                'https://bugzilla.redhat.com/2339266',
-                'https://bugzilla.redhat.com/2339270',
-                'https://bugzilla.redhat.com/2339271',
-                'https://bugzilla.redhat.com/2339275',
-                'https://bugzilla.redhat.com/2339277',
-                'https://bugzilla.redhat.com/2339281',
-                'https://bugzilla.redhat.com/2339284',
-                'https://bugzilla.redhat.com/2339291',
-                'https://bugzilla.redhat.com/2339293',
-                'https://bugzilla.redhat.com/2339295',
-                'https://bugzilla.redhat.com/2339299',
-                'https://bugzilla.redhat.com/2339300',
-                'https://bugzilla.redhat.com/2339304',
-                'https://bugzilla.redhat.com/2339305',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2274020',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2281029',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2283757',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2294581',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-2511',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-4603',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-4741',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-5535',
-                'https://errata.almalinux.org/9/ALSA-2025-1671.html',
-                'https://errata.rockylinux.org/RLSA-2024:9333',
-                'https://github.com/openssl/openssl/commit/4ada436a1946cbb24db5ab4ca082b69c1bc10f37',
-                'https://github.com/openssl/openssl/commit/99fb785a5f85315b95288921a321a935ea29a51e',
-                'https://github.com/openssl/openssl/commit/cf6f91f6121f4db167405db2f0de410a456f260c',
-                'https://github.com/openssl/openssl/commit/e86ac436f0bd54d4517745483e2315650fae7b2c',
-                'https://github.openssl.org/openssl/extended-releases/commit/9947251413065a05189a63c9b7a6c1d4e224c21c',
-                'https://github.openssl.org/openssl/extended-releases/commit/b78ec0824da857223486660177d3b1f255c65d87',
-                'https://linux.oracle.com/cve/CVE-2024-5535.html',
-                'https://linux.oracle.com/errata/ELSA-2025-1673.html',
-                'https://lists.debian.org/debian-lts-announce/2024/10/msg00033.html',
-                'https://lists.debian.org/debian-lts-announce/2024/11/msg00000.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2024-5535',
-                'https://openssl.org/news/secadv/20240627.txt',
-                'https://security.netapp.com/advisory/ntap-20240712-0005/',
-                'https://security.netapp.com/advisory/ntap-20241025-0006/',
-                'https://security.netapp.com/advisory/ntap-20241025-0010/',
-                'https://ubuntu.com/security/notices/USN-6937-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2024-5535',
-                'https://www.openssl.org/news/secadv/20240627.txt',
-                'https://www.oracle.com/security-alerts/cpuoct2024.html#AppendixMSQL'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: SSL_select_next_proto buffer overread'
-            },
-            {
-              'cve':  'CVE-2025-9230',
-              'cvss': {
-                'redhat': {
-                  'v3score':  '5.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L'
-                }
-              },
-              'cwes': [
-                'CWE-125',
-                'CWE-787'
-              ],
-              'description':   'Issue summary: An application trying to decrypt CMS messages encrypted using\npassword based encryption can trigger an out-of-bounds read and write.\n\nImpact summary: This out-of-bounds read may trigger a crash which leads to\nDenial of Service for an application. The out-of-bounds write can cause\na memory corruption which can have various consequences including\na Denial of Service or Execution of attacker-supplied code.\n\nAlthough the consequences of a successful exploit of this vulnerability\ncould be severe, the probability that the attacker would be able to\nperform it is low. Besides, password based (PWRI) encryption support in CMS\nmessages is very rarely used. For that reason the issue was assessed as\nModerate severity according to our Security Policy.\n\nThe FIPS modules in 3.5, 3.4, 3.3, 3.2, 3.1 and 3.0 are not affected by this\nissue, as the CMS implementation is outside the OpenSSL FIPS module\nboundary.',
-              'diffID':        'sha256:842fa689dd99c10d9cf2f377298e7f8d52135f6fe621c8c1fd9a6ea34b41133a',
-              'fixedVersions': [
-                '3.1.8-r1'
-              ],
-              'installedVersion': '3.1.5-r0',
-              'packageName':      'libcrypto3',
-              'purl':             'pkg:apk/alpine/libcrypto3@3.1.5-r0?arch=s390x&distro=3.19.2',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2025/09/30/5',
-                'https://access.redhat.com/errata/RHSA-2025:21255',
-                'https://access.redhat.com/security/cve/CVE-2025-9230',
-                'https://bugzilla.redhat.com/2396054',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2396054',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-9230',
-                'https://errata.almalinux.org/9/ALSA-2025-21255.html',
-                'https://errata.rockylinux.org/RLSA-2025:21255',
-                'https://github.com/openssl/openssl/commit/5965ea5dd6960f36d8b7f74f8eac67a8eb8f2b45',
-                'https://github.com/openssl/openssl/commit/9e91358f365dee6c446dcdcdb01c04d2743fd280',
-                'https://github.com/openssl/openssl/commit/a79c4ce559c6a3a8fd4109e9f33c1185d5bf2def',
-                'https://github.com/openssl/openssl/commit/b5282d677551afda7d20e9c00e09561b547b2dfd',
-                'https://github.com/openssl/openssl/commit/bae259a211ada6315dc50900686daaaaaa55f482',
-                'https://github.openssl.org/openssl/extended-releases/commit/c2b96348bfa662f25f4fabf81958ae822063dae3',
-                'https://github.openssl.org/openssl/extended-releases/commit/dfbaf161d8dafc1132dd88cd48ad990ed9b4c8ba',
-                'https://linux.oracle.com/cve/CVE-2025-9230.html',
-                'https://linux.oracle.com/errata/ELSA-2026-0337.html',
-                'https://lists.debian.org/debian-lts-announce/2025/10/msg00001.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2025-9230',
-                'https://openssl-library.org/news/secadv/20250930.txt',
-                'https://ubuntu.com/security/notices/USN-7786-1',
-                'https://www.cve.org/CVERecord?id=CVE-2025-9230'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: Out-of-bounds read & write in RFC 3211 KEK Unwrap'
-            },
-            {
-              'cve':  'CVE-2024-9143',
-              'cvss': {
-                'redhat': {
-                  'v3score':  '3.7',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L'
-                }
-              },
-              'cwes': [
-                'CWE-125',
-                'CWE-787'
-              ],
-              'description':   "Issue summary: Use of the low-level GF(2^m) elliptic curve APIs with untrusted\nexplicit values for the field polynomial can lead to out-of-bounds memory reads\nor writes.\n\nImpact summary: Out of bound memory writes can lead to an application crash or\neven a possibility of a remote code execution, however, in all the protocols\ninvolving Elliptic Curve Cryptography that we're aware of, either only \"named\ncurves\" are supported, or, if explicit curve parameters are supported, they\nspecify an X9.62 encoding of binary (GF(2^m)) curves that can't represent\nproblematic input values. Thus the likelihood of existence of a vulnerable\napplication is low.\n\nIn particular, the X9.62 encoding is used for ECC keys in X.509 certificates,\nso problematic inputs cannot occur in the context of processing X.509\ncertificates.  Any problematic use-cases would have to be using an \"exotic\"\ncurve encoding.\n\nThe affected APIs include: EC_GROUP_new_curve_GF2m(), EC_GROUP_new_from_params(),\nand various supporting BN_GF2m_*() functions.\n\nApplications working with \"exotic\" explicit binary (GF(2^m)) curve parameters,\nthat make it possible to represent invalid field polynomials with a zero\nconstant term, via the above or similar APIs, may terminate abruptly as a\nresult of reading or writing outside of array bounds.  Remote code execution\ncannot easily be ruled out.\n\nThe FIPS modules in 3.3, 3.2, 3.1 and 3.0 are not affected by this issue.",
-              'diffID':        'sha256:842fa689dd99c10d9cf2f377298e7f8d52135f6fe621c8c1fd9a6ea34b41133a',
-              'fixedVersions': [
-                '3.1.7-r1'
-              ],
-              'installedVersion': '3.1.5-r0',
-              'packageName':      'libcrypto3',
-              'purl':             'pkg:apk/alpine/libcrypto3@3.1.5-r0?arch=s390x&distro=3.19.2',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2024/10/16/1',
-                'http://www.openwall.com/lists/oss-security/2024/10/23/1',
-                'http://www.openwall.com/lists/oss-security/2024/10/24/1',
-                'https://access.redhat.com/security/cve/CVE-2024-9143',
-                'https://github.com/openssl/openssl/commit/72ae83ad214d2eef262461365a1975707f862712',
-                'https://github.com/openssl/openssl/commit/bc7e04d7c8d509fb78fc0e285aa948fb0da04700',
-                'https://github.com/openssl/openssl/commit/c0d3e4d32d2805f49bec30547f225bc4d092e1f4',
-                'https://github.com/openssl/openssl/commit/fdf6723362ca51bd883295efe206cb5b1cfa5154',
-                'https://github.openssl.org/openssl/extended-releases/commit/8efc0cbaa8ebba8e116f7b81a876a4123594d86a',
-                'https://github.openssl.org/openssl/extended-releases/commit/9d576994cec2b7aa37a91740ea7e680810957e41',
-                'https://lists.debian.org/debian-lts-announce/2024/10/msg00033.html',
-                'https://lists.debian.org/debian-lts-announce/2024/11/msg00000.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2024-9143',
-                'https://openssl-library.org/news/secadv/20241016.txt',
-                'https://security.netapp.com/advisory/ntap-20241101-0001/',
-                'https://ubuntu.com/security/notices/USN-7264-1',
-                'https://ubuntu.com/security/notices/USN-7278-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2024-9143'
-              ],
-              'severity':   'LOW',
-              'suppressed': false,
-              'title':      'openssl: Low-level invalid GF(2^m) parameters lead to OOB memory access'
-            },
-            {
-              'cve':  'CVE-2025-9232',
-              'cvss': {
-                'redhat': {
-                  'v3score':  '3.1',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L'
-                }
-              },
-              'cwes': [
-                'CWE-125'
-              ],
-              'description':   "Issue summary: An application using the OpenSSL HTTP client API functions may\ntrigger an out-of-bounds read if the 'no_proxy' environment variable is set and\nthe host portion of the authority component of the HTTP URL is an IPv6 address.\n\nImpact summary: An out-of-bounds read can trigger a crash which leads to\nDenial of Service for an application.\n\nThe OpenSSL HTTP client API functions can be used directly by applications\nbut they are also used by the OCSP client functions and CMP (Certificate\nManagement Protocol) client implementation in OpenSSL. However the URLs used\nby these implementations are unlikely to be controlled by an attacker.\n\nIn this vulnerable code the out of bounds read can only trigger a crash.\nFurthermore the vulnerability requires an attacker-controlled URL to be\npassed from an application to the OpenSSL function and the user has to have\na 'no_proxy' environment variable set. For the aforementioned reasons the\nissue was assessed as Low severity.\n\nThe vulnerable code was introduced in the following patch releases:\n3.0.16, 3.1.8, 3.2.4, 3.3.3, 3.4.0 and 3.5.0.\n\nThe FIPS modules in 3.5, 3.4, 3.3, 3.2, 3.1 and 3.0 are not affected by this\nissue, as the HTTP client implementation is outside the OpenSSL FIPS module\nboundary.",
-              'diffID':        'sha256:842fa689dd99c10d9cf2f377298e7f8d52135f6fe621c8c1fd9a6ea34b41133a',
-              'fixedVersions': [
-                '3.1.8-r1'
-              ],
-              'installedVersion': '3.1.5-r0',
-              'packageName':      'libcrypto3',
-              'purl':             'pkg:apk/alpine/libcrypto3@3.1.5-r0?arch=s390x&distro=3.19.2',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2025/09/30/5',
-                'https://access.redhat.com/security/cve/CVE-2025-9232',
-                'https://github.com/openssl/openssl/commit/2b4ec20e47959170422922eaff25346d362dcb35',
-                'https://github.com/openssl/openssl/commit/654dc11d23468a74fc8ea4672b702dd3feb7be4b',
-                'https://github.com/openssl/openssl/commit/7cf21a30513c9e43c4bc3836c237cf086e194af3',
-                'https://github.com/openssl/openssl/commit/89e790ac431125a4849992858490bed6b225eadf',
-                'https://github.com/openssl/openssl/commit/bbf38c034cdabd0a13330abcc4855c866f53d2e0',
-                'https://nvd.nist.gov/vuln/detail/CVE-2025-9232',
-                'https://openssl-library.org/news/secadv/20250930.txt',
-                'https://ubuntu.com/security/notices/USN-7786-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2025-9232'
-              ],
-              'severity':   'LOW',
-              'suppressed': false,
-              'title':      'openssl: Out-of-bounds read in HTTP client no_proxy handling'
-            },
-            {
-              'cve':  'CVE-2024-6119',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-843'
-              ],
-              'description':   "Issue summary: Applications performing certificate name checks (e.g., TLS\nclients checking server certificates) may attempt to read an invalid memory\naddress resulting in abnormal termination of the application process.\n\nImpact summary: Abnormal termination of an application can a cause a denial of\nservice.\n\nApplications performing certificate name checks (e.g., TLS clients checking\nserver certificates) may attempt to read an invalid memory address when\ncomparing the expected name with an `otherName` subject alternative name of an\nX.509 certificate. This may result in an exception that terminates the\napplication program.\n\nNote that basic certificate chain validation (signatures, dates, ...) is not\naffected, the denial of service can occur only when the application also\nspecifies an expected DNS name, Email address or IP address.\n\nTLS servers rarely solicit client certificates, and even when they do, they\ngenerally don't perform a name check against a reference identifier (expected\nidentity), but rather extract the presented identity after checking the\ncertificate chain.  So TLS servers are generally not affected and the severity\nof the issue is Moderate.\n\nThe FIPS modules in 3.3, 3.2, 3.1 and 3.0 are not affected by this issue.",
-              'diffID':        'sha256:842fa689dd99c10d9cf2f377298e7f8d52135f6fe621c8c1fd9a6ea34b41133a',
-              'fixedVersions': [
-                '3.1.7-r0'
-              ],
-              'installedVersion': '3.1.5-r0',
-              'packageName':      'libssl3',
-              'purl':             'pkg:apk/alpine/libssl3@3.1.5-r0?arch=s390x&distro=3.19.2',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2024/09/03/4',
-                'https://access.redhat.com/errata/RHSA-2024:8935',
-                'https://access.redhat.com/security/cve/CVE-2024-6119',
-                'https://bugzilla.redhat.com/2306158',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2306158',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-6119',
-                'https://errata.almalinux.org/9/ALSA-2024-8935.html',
-                'https://errata.rockylinux.org/RLSA-2024:6783',
-                'https://github.com/openssl/openssl/commit/05f360d9e849a1b277db628f1f13083a7f8dd04f',
-                'https://github.com/openssl/openssl/commit/06d1dc3fa96a2ba5a3e22735a033012aadc9f0d6',
-                'https://github.com/openssl/openssl/commit/621f3729831b05ee828a3203eddb621d014ff2b2',
-                'https://github.com/openssl/openssl/commit/7dfcee2cd2a63b2c64b9b4b0850be64cb695b0a0',
-                'https://github.com/openssl/openssl/security/advisories/GHSA-5qrj-vq78-58fj',
-                'https://linux.oracle.com/cve/CVE-2024-6119.html',
-                'https://linux.oracle.com/errata/ELSA-2024-8935.html',
-                'https://lists.freebsd.org/archives/freebsd-security/2024-September/000303.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2024-6119',
-                'https://openssl-library.org/news/secadv/20240903.txt',
-                'https://security.netapp.com/advisory/ntap-20240912-0001/',
-                'https://ubuntu.com/security/notices/USN-6986-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2024-6119'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: Possible denial of service in X.509 name checks'
-            },
-            {
-              'cve':  'CVE-2024-13176',
-              'cvss': {
-                'redhat': {
-                  'v3score':  '4.7',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-385'
-              ],
-              'description':   'Issue summary: A timing side-channel which could potentially allow recovering\nthe private key exists in the ECDSA signature computation.\n\nImpact summary: A timing side-channel in ECDSA signature computations\ncould allow recovering the private key by an attacker. However, measuring\nthe timing would require either local access to the signing application or\na very fast network connection with low latency.\n\nThere is a timing signal of around 300 nanoseconds when the top word of\nthe inverted ECDSA nonce value is zero. This can happen with significant\nprobability only for some of the supported elliptic curves. In particular\nthe NIST P-521 curve is affected. To be able to measure this leak, the attacker\nprocess must either be located in the same physical computer or must\nhave a very fast network connection with low latency. For that reason\nthe severity of this vulnerability is Low.\n\nThe FIPS modules in 3.4, 3.3, 3.2, 3.1 and 3.0 are affected by this issue.',
-              'diffID':        'sha256:842fa689dd99c10d9cf2f377298e7f8d52135f6fe621c8c1fd9a6ea34b41133a',
-              'fixedVersions': [
-                '3.1.8-r0'
-              ],
-              'installedVersion': '3.1.5-r0',
-              'packageName':      'libssl3',
-              'purl':             'pkg:apk/alpine/libssl3@3.1.5-r0?arch=s390x&distro=3.19.2',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2025/01/20/2',
-                'https://access.redhat.com/errata/RHSA-2025:16046',
-                'https://access.redhat.com/security/cve/CVE-2024-13176',
-                'https://bugzilla.redhat.com/2359885',
-                'https://bugzilla.redhat.com/2359888',
-                'https://bugzilla.redhat.com/2359892',
-                'https://bugzilla.redhat.com/2359894',
-                'https://bugzilla.redhat.com/2359895',
-                'https://bugzilla.redhat.com/2359899',
-                'https://bugzilla.redhat.com/2359900',
-                'https://bugzilla.redhat.com/2359902',
-                'https://bugzilla.redhat.com/2359903',
-                'https://bugzilla.redhat.com/2359911',
-                'https://bugzilla.redhat.com/2359918',
-                'https://bugzilla.redhat.com/2359920',
-                'https://bugzilla.redhat.com/2359924',
-                'https://bugzilla.redhat.com/2359928',
-                'https://bugzilla.redhat.com/2359930',
-                'https://bugzilla.redhat.com/2359932',
-                'https://bugzilla.redhat.com/2359934',
-                'https://bugzilla.redhat.com/2359938',
-                'https://bugzilla.redhat.com/2359940',
-                'https://bugzilla.redhat.com/2359943',
-                'https://bugzilla.redhat.com/2359944',
-                'https://bugzilla.redhat.com/2359945',
-                'https://bugzilla.redhat.com/2359947',
-                'https://bugzilla.redhat.com/2359950',
-                'https://bugzilla.redhat.com/2359963',
-                'https://bugzilla.redhat.com/2359964',
-                'https://bugzilla.redhat.com/2359972',
-                'https://bugzilla.redhat.com/2370920',
-                'https://bugzilla.redhat.com/2380264',
-                'https://bugzilla.redhat.com/2380273',
-                'https://bugzilla.redhat.com/2380274',
-                'https://bugzilla.redhat.com/2380278',
-                'https://bugzilla.redhat.com/2380280',
-                'https://bugzilla.redhat.com/2380283',
-                'https://bugzilla.redhat.com/2380284',
-                'https://bugzilla.redhat.com/2380290',
-                'https://bugzilla.redhat.com/2380291',
-                'https://bugzilla.redhat.com/2380295',
-                'https://bugzilla.redhat.com/2380298',
-                'https://bugzilla.redhat.com/2380306',
-                'https://bugzilla.redhat.com/2380308',
-                'https://bugzilla.redhat.com/2380309',
-                'https://bugzilla.redhat.com/2380310',
-                'https://bugzilla.redhat.com/2380312',
-                'https://bugzilla.redhat.com/2380313',
-                'https://bugzilla.redhat.com/2380320',
-                'https://bugzilla.redhat.com/2380321',
-                'https://bugzilla.redhat.com/2380322',
-                'https://bugzilla.redhat.com/2380326',
-                'https://bugzilla.redhat.com/2380327',
-                'https://bugzilla.redhat.com/2380334',
-                'https://bugzilla.redhat.com/2380335',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2338999',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359885',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359888',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359892',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359894',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359895',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359899',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359900',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359902',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359903',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359911',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359918',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359920',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359924',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359928',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359930',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359932',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359934',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359938',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359940',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359943',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359944',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359945',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359947',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359950',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359963',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359964',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359972',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2370920',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380264',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380273',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380274',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380278',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380280',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380283',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380284',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380290',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380291',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380295',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380298',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380306',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380308',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380309',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380310',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380312',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380313',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380320',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380321',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380322',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380326',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380327',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380334',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380335',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-13176',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21574',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21575',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21577',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21579',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21580',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21581',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21584',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21585',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21588',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30681',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30682',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30683',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30684',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30685',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30687',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30688',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30689',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30693',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30695',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30696',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30699',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30703',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30704',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30705',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30715',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30721',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30722',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50077',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50078',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50079',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50080',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50081',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50082',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50083',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50084',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50085',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50086',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50087',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50088',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50091',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50092',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50093',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50094',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50096',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50097',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50098',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50099',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50100',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50101',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50102',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50104',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-5399',
-                'https://errata.almalinux.org/9/ALSA-2025-16046.html',
-                'https://errata.rockylinux.org/RLSA-2025:15699',
-                'https://github.com/openssl/openssl/commit/07272b05b04836a762b4baa874958af51d513844',
-                'https://github.com/openssl/openssl/commit/2af62e74fb59bc469506bc37eb2990ea408d9467',
-                'https://github.com/openssl/openssl/commit/392dcb336405a0c94486aa6655057f59fd3a0902',
-                'https://github.com/openssl/openssl/commit/4b1cb94a734a7d4ec363ac0a215a25c181e11f65',
-                'https://github.com/openssl/openssl/commit/77c608f4c8857e63e98e66444e2e761c9627916f',
-                'https://github.openssl.org/openssl/extended-releases/commit/0d5fd1ab987f7571e2c955d8d8b638fc0fb54ded',
-                'https://github.openssl.org/openssl/extended-releases/commit/a2639000db19878d5d89586ae7b725080592ae86',
-                'https://linux.oracle.com/cve/CVE-2024-13176.html',
-                'https://linux.oracle.com/errata/ELSA-2025-16046.html',
-                'https://lists.debian.org/debian-lts-announce/2025/05/msg00028.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2024-13176',
-                'https://openssl-library.org/news/secadv/20250120.txt',
-                'https://security.netapp.com/advisory/ntap-20250124-0005/',
-                'https://security.netapp.com/advisory/ntap-20250418-0010/',
-                'https://security.netapp.com/advisory/ntap-20250502-0006/',
-                'https://ubuntu.com/security/notices/USN-7264-1',
-                'https://ubuntu.com/security/notices/USN-7278-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2024-13176',
-                'https://www.oracle.com/security-alerts/cpuapr2025.html#AppendixMSQL'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: Timing side-channel in ECDSA signature computation'
-            },
-            {
-              'cve':  'CVE-2024-4741',
-              'cvss': {
-                'redhat': {
-                  'v3score':  '5.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   'Issue summary: Calling the OpenSSL API function SSL_free_buffers may cause\nmemory to be accessed that was previously freed in some situations\n\nImpact summary: A use after free can have a range of potential consequences such\nas the corruption of valid data, crashes or execution of arbitrary code.\nHowever, only applications that directly call the SSL_free_buffers function are\naffected by this issue. Applications that do not call this function are not\nvulnerable. Our investigations indicate that this function is rarely used by\napplications.\n\nThe SSL_free_buffers function is used to free the internal OpenSSL buffer used\nwhen processing an incoming record from the network. The call is only expected\nto succeed if the buffer is not currently in use. However, two scenarios have\nbeen identified where the buffer is freed even when still in use.\n\nThe first scenario occurs where a record header has been received from the\nnetwork and processed by OpenSSL, but the full record body has not yet arrived.\nIn this case calling SSL_free_buffers will succeed even though a record has only\nbeen partially processed and the buffer is still in use.\n\nThe second scenario occurs where a full record containing application data has\nbeen received and processed by OpenSSL but the application has only read part of\nthis data. Again a call to SSL_free_buffers will succeed even though the buffer\nis still in use.\n\nWhile these scenarios could occur accidentally during normal operation a\nmalicious attacker could attempt to engineer a stituation where this occurs.\nWe are not aware of this issue being actively exploited.\n\nThe FIPS modules in 3.3, 3.2, 3.1 and 3.0 are not affected by this issue.',
-              'diffID':        'sha256:842fa689dd99c10d9cf2f377298e7f8d52135f6fe621c8c1fd9a6ea34b41133a',
-              'fixedVersions': [
-                '3.1.6-r0'
-              ],
-              'installedVersion': '3.1.5-r0',
-              'packageName':      'libssl3',
-              'purl':             'pkg:apk/alpine/libssl3@3.1.5-r0?arch=s390x&distro=3.19.2',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2024:9333',
-                'https://access.redhat.com/security/cve/CVE-2024-4741',
-                'https://bugzilla.redhat.com/2274020',
-                'https://bugzilla.redhat.com/2281029',
-                'https://bugzilla.redhat.com/2283757',
-                'https://bugzilla.redhat.com/2294581',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2274020',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2281029',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2283757',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2294581',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-2511',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-4603',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-4741',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-5535',
-                'https://errata.almalinux.org/9/ALSA-2024-9333.html',
-                'https://errata.rockylinux.org/RLSA-2024:9333',
-                'https://github.com/openssl/openssl/commit/704f725b96aa373ee45ecfb23f6abfe8be8d9177',
-                'https://github.com/openssl/openssl/commit/b3f0eb0a295f58f16ba43ba99dad70d4ee5c437d',
-                'https://github.com/openssl/openssl/commit/c88c3de51020c37e8706bf7a682a162593053aac',
-                'https://github.com/openssl/openssl/commit/e5093133c35ca82874ad83697af76f4b0f7e3bd8',
-                'https://github.openssl.org/openssl/extended-releases/commit/f7a045f3143fc6da2ee66bf52d8df04829590dd4',
-                'https://linux.oracle.com/cve/CVE-2024-4741.html',
-                'https://linux.oracle.com/errata/ELSA-2024-9333.html',
-                'https://lists.debian.org/debian-lts-announce/2024/10/msg00033.html',
-                'https://lists.debian.org/debian-lts-announce/2024/11/msg00000.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2024-4741',
-                'https://security.netapp.com/advisory/ntap-20240621-0004/',
-                'https://ubuntu.com/security/notices/USN-6937-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2024-4741',
-                'https://www.openssl.org/news/secadv/20240528.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: Use After Free with SSL_free_buffers'
-            },
-            {
-              'cve':  'CVE-2024-5535',
-              'cvss': {
-                'redhat': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-125'
-              ],
-              'description':   'Issue summary: Calling the OpenSSL API function SSL_select_next_proto with an\nempty supported client protocols buffer may cause a crash or memory contents to\nbe sent to the peer.\n\nImpact summary: A buffer overread can have a range of potential consequences\nsuch as unexpected application beahviour or a crash. In particular this issue\ncould result in up to 255 bytes of arbitrary private data from memory being sent\nto the peer leading to a loss of confidentiality. However, only applications\nthat directly call the SSL_select_next_proto function with a 0 length list of\nsupported client protocols are affected by this issue. This would normally never\nbe a valid scenario and is typically not under attacker control but may occur by\naccident in the case of a configuration or programming error in the calling\napplication.\n\nThe OpenSSL API function SSL_select_next_proto is typically used by TLS\napplications that support ALPN (Application Layer Protocol Negotiation) or NPN\n(Next Protocol Negotiation). NPN is older, was never standardised and\nis deprecated in favour of ALPN. We believe that ALPN is significantly more\nwidely deployed than NPN. The SSL_select_next_proto function accepts a list of\nprotocols from the server and a list of protocols from the client and returns\nthe first protocol that appears in the server list that also appears in the\nclient list. In the case of no overlap between the two lists it returns the\nfirst item in the client list. In either case it will signal whether an overlap\nbetween the two lists was found. In the case where SSL_select_next_proto is\ncalled with a zero length client list it fails to notice this condition and\nreturns the memory immediately following the client list pointer (and reports\nthat there was no overlap in the lists).\n\nThis function is typically called from a server side application callback for\nALPN or a client side application callback for NPN. In the case of ALPN the list\nof protocols supplied by the client is guaranteed by libssl to never be zero in\nlength. The list of server protocols comes from the application and should never\nnormally be expected to be of zero length. In this case if the\nSSL_select_next_proto function has been called as expected (with the list\nsupplied by the client passed in the client/client_len parameters), then the\napplication will not be vulnerable to this issue. If the application has\naccidentally been configured with a zero length server list, and has\naccidentally passed that zero length server list in the client/client_len\nparameters, and has additionally failed to correctly handle a "no overlap"\nresponse (which would normally result in a handshake failure in ALPN) then it\nwill be vulnerable to this problem.\n\nIn the case of NPN, the protocol permits the client to opportunistically select\na protocol when there is no overlap. OpenSSL returns the first client protocol\nin the no overlap case in support of this. The list of client protocols comes\nfrom the application and should never normally be expected to be of zero length.\nHowever if the SSL_select_next_proto function is accidentally called with a\nclient_len of 0 then an invalid memory pointer will be returned instead. If the\napplication uses this output as the opportunistic protocol then the loss of\nconfidentiality will occur.\n\nThis issue has been assessed as Low severity because applications are most\nlikely to be vulnerable if they are using NPN instead of ALPN - but NPN is not\nwidely used. It also requires an application configuration or programming error.\nFinally, this issue would not typically be under attacker control making active\nexploitation unlikely.\n\nThe FIPS modules in 3.3, 3.2, 3.1 and 3.0 are not affected by this issue.\n\nDue to the low severity of this issue we are not issuing new releases of\nOpenSSL at this time. The fix will be included in the next releases when they\nbecome available.',
-              'diffID':        'sha256:842fa689dd99c10d9cf2f377298e7f8d52135f6fe621c8c1fd9a6ea34b41133a',
-              'fixedVersions': [
-                '3.1.6-r0'
-              ],
-              'installedVersion': '3.1.5-r0',
-              'packageName':      'libssl3',
-              'purl':             'pkg:apk/alpine/libssl3@3.1.5-r0?arch=s390x&distro=3.19.2',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2024/06/27/1',
-                'http://www.openwall.com/lists/oss-security/2024/06/28/4',
-                'http://www.openwall.com/lists/oss-security/2024/08/15/1',
-                'https://access.redhat.com/errata/RHSA-2025:1671',
-                'https://access.redhat.com/security/cve/CVE-2024-5535',
-                'https://bugzilla.redhat.com/2294581',
-                'https://bugzilla.redhat.com/2294676',
-                'https://bugzilla.redhat.com/2301888',
-                'https://bugzilla.redhat.com/2318857',
-                'https://bugzilla.redhat.com/2318858',
-                'https://bugzilla.redhat.com/2318870',
-                'https://bugzilla.redhat.com/2318873',
-                'https://bugzilla.redhat.com/2318874',
-                'https://bugzilla.redhat.com/2318876',
-                'https://bugzilla.redhat.com/2318882',
-                'https://bugzilla.redhat.com/2318883',
-                'https://bugzilla.redhat.com/2318884',
-                'https://bugzilla.redhat.com/2318885',
-                'https://bugzilla.redhat.com/2318886',
-                'https://bugzilla.redhat.com/2318897',
-                'https://bugzilla.redhat.com/2318900',
-                'https://bugzilla.redhat.com/2318905',
-                'https://bugzilla.redhat.com/2318914',
-                'https://bugzilla.redhat.com/2318922',
-                'https://bugzilla.redhat.com/2318923',
-                'https://bugzilla.redhat.com/2318925',
-                'https://bugzilla.redhat.com/2318926',
-                'https://bugzilla.redhat.com/2318927',
-                'https://bugzilla.redhat.com/2331191',
-                'https://bugzilla.redhat.com/2339218',
-                'https://bugzilla.redhat.com/2339220',
-                'https://bugzilla.redhat.com/2339221',
-                'https://bugzilla.redhat.com/2339226',
-                'https://bugzilla.redhat.com/2339231',
-                'https://bugzilla.redhat.com/2339236',
-                'https://bugzilla.redhat.com/2339238',
-                'https://bugzilla.redhat.com/2339243',
-                'https://bugzilla.redhat.com/2339247',
-                'https://bugzilla.redhat.com/2339252',
-                'https://bugzilla.redhat.com/2339259',
-                'https://bugzilla.redhat.com/2339266',
-                'https://bugzilla.redhat.com/2339270',
-                'https://bugzilla.redhat.com/2339271',
-                'https://bugzilla.redhat.com/2339275',
-                'https://bugzilla.redhat.com/2339277',
-                'https://bugzilla.redhat.com/2339281',
-                'https://bugzilla.redhat.com/2339284',
-                'https://bugzilla.redhat.com/2339291',
-                'https://bugzilla.redhat.com/2339293',
-                'https://bugzilla.redhat.com/2339295',
-                'https://bugzilla.redhat.com/2339299',
-                'https://bugzilla.redhat.com/2339300',
-                'https://bugzilla.redhat.com/2339304',
-                'https://bugzilla.redhat.com/2339305',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2274020',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2281029',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2283757',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2294581',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-2511',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-4603',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-4741',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-5535',
-                'https://errata.almalinux.org/9/ALSA-2025-1671.html',
-                'https://errata.rockylinux.org/RLSA-2024:9333',
-                'https://github.com/openssl/openssl/commit/4ada436a1946cbb24db5ab4ca082b69c1bc10f37',
-                'https://github.com/openssl/openssl/commit/99fb785a5f85315b95288921a321a935ea29a51e',
-                'https://github.com/openssl/openssl/commit/cf6f91f6121f4db167405db2f0de410a456f260c',
-                'https://github.com/openssl/openssl/commit/e86ac436f0bd54d4517745483e2315650fae7b2c',
-                'https://github.openssl.org/openssl/extended-releases/commit/9947251413065a05189a63c9b7a6c1d4e224c21c',
-                'https://github.openssl.org/openssl/extended-releases/commit/b78ec0824da857223486660177d3b1f255c65d87',
-                'https://linux.oracle.com/cve/CVE-2024-5535.html',
-                'https://linux.oracle.com/errata/ELSA-2025-1673.html',
-                'https://lists.debian.org/debian-lts-announce/2024/10/msg00033.html',
-                'https://lists.debian.org/debian-lts-announce/2024/11/msg00000.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2024-5535',
-                'https://openssl.org/news/secadv/20240627.txt',
-                'https://security.netapp.com/advisory/ntap-20240712-0005/',
-                'https://security.netapp.com/advisory/ntap-20241025-0006/',
-                'https://security.netapp.com/advisory/ntap-20241025-0010/',
-                'https://ubuntu.com/security/notices/USN-6937-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2024-5535',
-                'https://www.openssl.org/news/secadv/20240627.txt',
-                'https://www.oracle.com/security-alerts/cpuoct2024.html#AppendixMSQL'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: SSL_select_next_proto buffer overread'
-            },
-            {
-              'cve':  'CVE-2025-9230',
-              'cvss': {
-                'redhat': {
-                  'v3score':  '5.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L'
-                }
-              },
-              'cwes': [
-                'CWE-125',
-                'CWE-787'
-              ],
-              'description':   'Issue summary: An application trying to decrypt CMS messages encrypted using\npassword based encryption can trigger an out-of-bounds read and write.\n\nImpact summary: This out-of-bounds read may trigger a crash which leads to\nDenial of Service for an application. The out-of-bounds write can cause\na memory corruption which can have various consequences including\na Denial of Service or Execution of attacker-supplied code.\n\nAlthough the consequences of a successful exploit of this vulnerability\ncould be severe, the probability that the attacker would be able to\nperform it is low. Besides, password based (PWRI) encryption support in CMS\nmessages is very rarely used. For that reason the issue was assessed as\nModerate severity according to our Security Policy.\n\nThe FIPS modules in 3.5, 3.4, 3.3, 3.2, 3.1 and 3.0 are not affected by this\nissue, as the CMS implementation is outside the OpenSSL FIPS module\nboundary.',
-              'diffID':        'sha256:842fa689dd99c10d9cf2f377298e7f8d52135f6fe621c8c1fd9a6ea34b41133a',
-              'fixedVersions': [
-                '3.1.8-r1'
-              ],
-              'installedVersion': '3.1.5-r0',
-              'packageName':      'libssl3',
-              'purl':             'pkg:apk/alpine/libssl3@3.1.5-r0?arch=s390x&distro=3.19.2',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2025/09/30/5',
-                'https://access.redhat.com/errata/RHSA-2025:21255',
-                'https://access.redhat.com/security/cve/CVE-2025-9230',
-                'https://bugzilla.redhat.com/2396054',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2396054',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-9230',
-                'https://errata.almalinux.org/9/ALSA-2025-21255.html',
-                'https://errata.rockylinux.org/RLSA-2025:21255',
-                'https://github.com/openssl/openssl/commit/5965ea5dd6960f36d8b7f74f8eac67a8eb8f2b45',
-                'https://github.com/openssl/openssl/commit/9e91358f365dee6c446dcdcdb01c04d2743fd280',
-                'https://github.com/openssl/openssl/commit/a79c4ce559c6a3a8fd4109e9f33c1185d5bf2def',
-                'https://github.com/openssl/openssl/commit/b5282d677551afda7d20e9c00e09561b547b2dfd',
-                'https://github.com/openssl/openssl/commit/bae259a211ada6315dc50900686daaaaaa55f482',
-                'https://github.openssl.org/openssl/extended-releases/commit/c2b96348bfa662f25f4fabf81958ae822063dae3',
-                'https://github.openssl.org/openssl/extended-releases/commit/dfbaf161d8dafc1132dd88cd48ad990ed9b4c8ba',
-                'https://linux.oracle.com/cve/CVE-2025-9230.html',
-                'https://linux.oracle.com/errata/ELSA-2026-0337.html',
-                'https://lists.debian.org/debian-lts-announce/2025/10/msg00001.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2025-9230',
-                'https://openssl-library.org/news/secadv/20250930.txt',
-                'https://ubuntu.com/security/notices/USN-7786-1',
-                'https://www.cve.org/CVERecord?id=CVE-2025-9230'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: Out-of-bounds read & write in RFC 3211 KEK Unwrap'
-            },
-            {
-              'cve':  'CVE-2024-9143',
-              'cvss': {
-                'redhat': {
-                  'v3score':  '3.7',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L'
-                }
-              },
-              'cwes': [
-                'CWE-125',
-                'CWE-787'
-              ],
-              'description':   "Issue summary: Use of the low-level GF(2^m) elliptic curve APIs with untrusted\nexplicit values for the field polynomial can lead to out-of-bounds memory reads\nor writes.\n\nImpact summary: Out of bound memory writes can lead to an application crash or\neven a possibility of a remote code execution, however, in all the protocols\ninvolving Elliptic Curve Cryptography that we're aware of, either only \"named\ncurves\" are supported, or, if explicit curve parameters are supported, they\nspecify an X9.62 encoding of binary (GF(2^m)) curves that can't represent\nproblematic input values. Thus the likelihood of existence of a vulnerable\napplication is low.\n\nIn particular, the X9.62 encoding is used for ECC keys in X.509 certificates,\nso problematic inputs cannot occur in the context of processing X.509\ncertificates.  Any problematic use-cases would have to be using an \"exotic\"\ncurve encoding.\n\nThe affected APIs include: EC_GROUP_new_curve_GF2m(), EC_GROUP_new_from_params(),\nand various supporting BN_GF2m_*() functions.\n\nApplications working with \"exotic\" explicit binary (GF(2^m)) curve parameters,\nthat make it possible to represent invalid field polynomials with a zero\nconstant term, via the above or similar APIs, may terminate abruptly as a\nresult of reading or writing outside of array bounds.  Remote code execution\ncannot easily be ruled out.\n\nThe FIPS modules in 3.3, 3.2, 3.1 and 3.0 are not affected by this issue.",
-              'diffID':        'sha256:842fa689dd99c10d9cf2f377298e7f8d52135f6fe621c8c1fd9a6ea34b41133a',
-              'fixedVersions': [
-                '3.1.7-r1'
-              ],
-              'installedVersion': '3.1.5-r0',
-              'packageName':      'libssl3',
-              'purl':             'pkg:apk/alpine/libssl3@3.1.5-r0?arch=s390x&distro=3.19.2',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2024/10/16/1',
-                'http://www.openwall.com/lists/oss-security/2024/10/23/1',
-                'http://www.openwall.com/lists/oss-security/2024/10/24/1',
-                'https://access.redhat.com/security/cve/CVE-2024-9143',
-                'https://github.com/openssl/openssl/commit/72ae83ad214d2eef262461365a1975707f862712',
-                'https://github.com/openssl/openssl/commit/bc7e04d7c8d509fb78fc0e285aa948fb0da04700',
-                'https://github.com/openssl/openssl/commit/c0d3e4d32d2805f49bec30547f225bc4d092e1f4',
-                'https://github.com/openssl/openssl/commit/fdf6723362ca51bd883295efe206cb5b1cfa5154',
-                'https://github.openssl.org/openssl/extended-releases/commit/8efc0cbaa8ebba8e116f7b81a876a4123594d86a',
-                'https://github.openssl.org/openssl/extended-releases/commit/9d576994cec2b7aa37a91740ea7e680810957e41',
-                'https://lists.debian.org/debian-lts-announce/2024/10/msg00033.html',
-                'https://lists.debian.org/debian-lts-announce/2024/11/msg00000.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2024-9143',
-                'https://openssl-library.org/news/secadv/20241016.txt',
-                'https://security.netapp.com/advisory/ntap-20241101-0001/',
-                'https://ubuntu.com/security/notices/USN-7264-1',
-                'https://ubuntu.com/security/notices/USN-7278-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2024-9143'
-              ],
-              'severity':   'LOW',
-              'suppressed': false,
-              'title':      'openssl: Low-level invalid GF(2^m) parameters lead to OOB memory access'
-            },
-            {
-              'cve':  'CVE-2025-9232',
-              'cvss': {
-                'redhat': {
-                  'v3score':  '3.1',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L'
-                }
-              },
-              'cwes': [
-                'CWE-125'
-              ],
-              'description':   "Issue summary: An application using the OpenSSL HTTP client API functions may\ntrigger an out-of-bounds read if the 'no_proxy' environment variable is set and\nthe host portion of the authority component of the HTTP URL is an IPv6 address.\n\nImpact summary: An out-of-bounds read can trigger a crash which leads to\nDenial of Service for an application.\n\nThe OpenSSL HTTP client API functions can be used directly by applications\nbut they are also used by the OCSP client functions and CMP (Certificate\nManagement Protocol) client implementation in OpenSSL. However the URLs used\nby these implementations are unlikely to be controlled by an attacker.\n\nIn this vulnerable code the out of bounds read can only trigger a crash.\nFurthermore the vulnerability requires an attacker-controlled URL to be\npassed from an application to the OpenSSL function and the user has to have\na 'no_proxy' environment variable set. For the aforementioned reasons the\nissue was assessed as Low severity.\n\nThe vulnerable code was introduced in the following patch releases:\n3.0.16, 3.1.8, 3.2.4, 3.3.3, 3.4.0 and 3.5.0.\n\nThe FIPS modules in 3.5, 3.4, 3.3, 3.2, 3.1 and 3.0 are not affected by this\nissue, as the HTTP client implementation is outside the OpenSSL FIPS module\nboundary.",
-              'diffID':        'sha256:842fa689dd99c10d9cf2f377298e7f8d52135f6fe621c8c1fd9a6ea34b41133a',
-              'fixedVersions': [
-                '3.1.8-r1'
-              ],
-              'installedVersion': '3.1.5-r0',
-              'packageName':      'libssl3',
-              'purl':             'pkg:apk/alpine/libssl3@3.1.5-r0?arch=s390x&distro=3.19.2',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2025/09/30/5',
-                'https://access.redhat.com/security/cve/CVE-2025-9232',
-                'https://github.com/openssl/openssl/commit/2b4ec20e47959170422922eaff25346d362dcb35',
-                'https://github.com/openssl/openssl/commit/654dc11d23468a74fc8ea4672b702dd3feb7be4b',
-                'https://github.com/openssl/openssl/commit/7cf21a30513c9e43c4bc3836c237cf086e194af3',
-                'https://github.com/openssl/openssl/commit/89e790ac431125a4849992858490bed6b225eadf',
-                'https://github.com/openssl/openssl/commit/bbf38c034cdabd0a13330abcc4855c866f53d2e0',
-                'https://nvd.nist.gov/vuln/detail/CVE-2025-9232',
-                'https://openssl-library.org/news/secadv/20250930.txt',
-                'https://ubuntu.com/security/notices/USN-7786-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2025-9232'
-              ],
-              'severity':   'LOW',
-              'suppressed': false,
-              'title':      'openssl: Out-of-bounds read in HTTP client no_proxy handling'
-            },
-            {
-              'cve':  'CVE-2025-26519',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-787'
-              ],
-              'description':   'musl libc 0.9.13 through 1.2.5 before 1.2.6 has an out-of-bounds write vulnerability when an attacker can trigger iconv conversion of untrusted EUC-KR text to UTF-8.',
-              'diffID':        'sha256:842fa689dd99c10d9cf2f377298e7f8d52135f6fe621c8c1fd9a6ea34b41133a',
-              'fixedVersions': [
-                '1.2.4_git20230717-r5'
-              ],
-              'installedVersion': '1.2.4_git20230717-r4',
-              'packageName':      'musl',
-              'purl':             'pkg:apk/alpine/musl@1.2.4_git20230717-r4?arch=s390x&distro=3.19.2',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2025/02/13/2',
-                'http://www.openwall.com/lists/oss-security/2025/02/13/3',
-                'http://www.openwall.com/lists/oss-security/2025/02/13/4',
-                'http://www.openwall.com/lists/oss-security/2025/02/13/5',
-                'http://www.openwall.com/lists/oss-security/2025/02/14/5',
-                'http://www.openwall.com/lists/oss-security/2025/02/14/6',
-                'https://git.musl-libc.org/cgit/musl/commit/?id=c47ad25ea3b484e10326f933e927c0bc8cded3da',
-                'https://git.musl-libc.org/cgit/musl/commit/?id=e5adcd97b5196e29991b524237381a0202a60659',
-                'https://www.openwall.com/lists/oss-security/2025/02/13/2'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'musl libc 0.9.13 through 1.2.5 before 1.2.6 has an out-of-bounds write ...'
-            },
-            {
-              'cve':  'CVE-2025-26519',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-787'
-              ],
-              'description':   'musl libc 0.9.13 through 1.2.5 before 1.2.6 has an out-of-bounds write vulnerability when an attacker can trigger iconv conversion of untrusted EUC-KR text to UTF-8.',
-              'diffID':        'sha256:842fa689dd99c10d9cf2f377298e7f8d52135f6fe621c8c1fd9a6ea34b41133a',
-              'fixedVersions': [
-                '1.2.4_git20230717-r5'
-              ],
-              'installedVersion': '1.2.4_git20230717-r4',
-              'packageName':      'musl-utils',
-              'purl':             'pkg:apk/alpine/musl-utils@1.2.4_git20230717-r4?arch=s390x&distro=3.19.2',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2025/02/13/2',
-                'http://www.openwall.com/lists/oss-security/2025/02/13/3',
-                'http://www.openwall.com/lists/oss-security/2025/02/13/4',
-                'http://www.openwall.com/lists/oss-security/2025/02/13/5',
-                'http://www.openwall.com/lists/oss-security/2025/02/14/5',
-                'http://www.openwall.com/lists/oss-security/2025/02/14/6',
-                'https://git.musl-libc.org/cgit/musl/commit/?id=c47ad25ea3b484e10326f933e927c0bc8cded3da',
-                'https://git.musl-libc.org/cgit/musl/commit/?id=e5adcd97b5196e29991b524237381a0202a60659',
-                'https://www.openwall.com/lists/oss-security/2025/02/13/2'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'musl libc 0.9.13 through 1.2.5 before 1.2.6 has an out-of-bounds write ...'
-            },
-            {
-              'cve':  'CVE-2024-58251',
-              'cwes': [
-                'CWE-150'
-              ],
-              'description':   'In netstat in BusyBox through 1.37.0, local users can launch of network application with an argv[0] containing an ANSI terminal escape sequence, leading to a denial of service (terminal locked up) when netstat is used by a victim.',
-              'diffID':        'sha256:842fa689dd99c10d9cf2f377298e7f8d52135f6fe621c8c1fd9a6ea34b41133a',
-              'fixedVersions': [
-                '1.36.1-r21'
-              ],
-              'installedVersion': '1.36.1-r19',
-              'packageName':      'ssl_client',
-              'purl':             'pkg:apk/alpine/ssl_client@1.36.1-r19?arch=s390x&distro=3.19.2',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2025/04/23/6',
-                'https://bugs.busybox.net/show_bug.cgi?id=15922',
-                'https://www.busybox.net',
-                'https://www.busybox.net/downloads/',
-                'https://www.cve.org/CVERecord?id=CVE-2024-58251'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'In netstat in BusyBox through 1.37.0, local users can launch of networ ...'
-            },
-            {
-              'cve':  'CVE-2025-46394',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '3.3',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-451'
-              ],
-              'description':   'In tar in BusyBox through 1.37.0, a TAR archive can have filenames hidden from a listing through the use of terminal escape sequences.',
-              'diffID':        'sha256:842fa689dd99c10d9cf2f377298e7f8d52135f6fe621c8c1fd9a6ea34b41133a',
-              'fixedVersions': [
-                '1.36.1-r21'
-              ],
-              'installedVersion': '1.36.1-r19',
-              'packageName':      'ssl_client',
-              'purl':             'pkg:apk/alpine/ssl_client@1.36.1-r19?arch=s390x&distro=3.19.2',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2025/04/23/5',
-                'http://www.openwall.com/lists/oss-security/2025/04/24/3',
-                'https://bugs.busybox.net/show_bug.cgi?id=16018',
-                'https://lists.busybox.net/pipermail/busybox/2024-July/090806.html',
-                'https://lists.busybox.net/pipermail/busybox/2024-July/090814.html',
-                'https://www.busybox.net',
-                'https://www.busybox.net/downloads/',
-                'https://www.cve.org/CVERecord?id=CVE-2025-46394',
-                'https://www.openwall.com/lists/oss-security/2025/04/23/1'
-              ],
-              'severity':   'LOW',
-              'suppressed': false,
-              'title':      'In tar in BusyBox through 1.37.0, a TAR archive can have filenames hid ...'
-            }
-          ]
-        }
-      ],
-      'summary': {
-        'critical':   0,
-        'high':       4,
-        'low':        7,
-        'medium':     11,
-        'suppressed': 0,
-        'unknown':    0
-      }
-    }
-  },
-  {
-    'id':    'default/2673ce181bf4517bf24ed8cdf28e2df9e1fbafa59c3897a8b7199a28d4dac1ab',
-    'type':  'storage.sbomscanner.kubewarden.io.vulnerabilityreport',
-    'links': {
-      'patch':  'https://localhost:8005/v1/storage.sbomscanner.kubewarden.io.vulnerabilityreports/default/2673ce181bf4517bf24ed8cdf28e2df9e1fbafa59c3897a8b7199a28d4dac1ab',
-      'remove': 'https://localhost:8005/v1/storage.sbomscanner.kubewarden.io.vulnerabilityreports/default/2673ce181bf4517bf24ed8cdf28e2df9e1fbafa59c3897a8b7199a28d4dac1ab',
-      'self':   'https://localhost:8005/v1/storage.sbomscanner.kubewarden.io.vulnerabilityreports/default/2673ce181bf4517bf24ed8cdf28e2df9e1fbafa59c3897a8b7199a28d4dac1ab',
-      'update': 'https://localhost:8005/v1/storage.sbomscanner.kubewarden.io.vulnerabilityreports/default/2673ce181bf4517bf24ed8cdf28e2df9e1fbafa59c3897a8b7199a28d4dac1ab',
-      'view':   'https://localhost:8005/apis/storage.sbomscanner.kubewarden.io/v1alpha1/namespaces/default/vulnerabilityreports/2673ce181bf4517bf24ed8cdf28e2df9e1fbafa59c3897a8b7199a28d4dac1ab'
-    },
-    'apiVersion':    'storage.sbomscanner.kubewarden.io/v1alpha1',
-    'imageMetadata': {
-      'digest':      'sha256:55e1dc9739c6204f93366d00d75918b9e3e31137ebbbe8063d31828aaa73527c',
-      'platform':    'linux/amd64',
-      'registry':    'demo-02',
-      'registryURI': 'ghcr.io',
-      'repository':  'linuxcontainers/alpine',
-      'tag':         '3.14.5'
-    },
-    'kind':     'VulnerabilityReport',
-    'metadata': {
-      'creationTimestamp': '2026-01-09T22:46:15Z',
-      'fields':            [
-        '2673ce181bf4517bf24ed8cdf28e2df9e1fbafa59c3897a8b7199a28d4dac1ab',
-        'ghcr.io/linuxcontainers/alpine:3.14.5',
-        'linux/amd64',
-        '17 (0 suppressed)'
-      ],
-      'labels': {
-        'app.kubernetes.io/managed-by':          'sbomscanner',
-        'app.kubernetes.io/part-of':             'sbomscanner',
-        'sbomscanner.kubewarden.io/scanjob-uid': '42184d01-4b15-466f-98aa-e802d1b6b6b8'
-      },
-      'name':            '2673ce181bf4517bf24ed8cdf28e2df9e1fbafa59c3897a8b7199a28d4dac1ab',
-      'namespace':       'default',
-      'ownerReferences': [
-        {
-          'apiVersion':         'storage.sbomscanner.kubewarden.io/v1alpha1',
-          'blockOwnerDeletion': true,
-          'controller':         true,
-          'kind':               'SBOM',
-          'name':               '2673ce181bf4517bf24ed8cdf28e2df9e1fbafa59c3897a8b7199a28d4dac1ab',
-          'uid':                '3a9a5f6b-022d-49fb-9395-67df6b03bee0'
-        }
-      ],
-      'relationships': [
-        {
-          'fromId':   'default/2673ce181bf4517bf24ed8cdf28e2df9e1fbafa59c3897a8b7199a28d4dac1ab',
-          'fromType': 'storage.sbomscanner.kubewarden.io.sbom',
-          'rel':      'owner',
-          'state':    'active',
-          'message':  'Resource is current'
-        }
-      ],
-      'resourceVersion': '6',
-      'state':           {
-        'error':         false,
-        'message':       'Resource is current',
-        'name':          'active',
-        'transitioning': false
-      },
-      'uid': '932df67f-8c8d-4cab-bf45-39b69b49905d'
-    },
-    'report': {
-      'results': [
-        {
-          'class':           'os-pkgs',
-          'target':          '/var/run/worker/trivy.sbom.3662126445.json (alpine 3.14.5)',
-          'type':            'alpine',
-          'vulnerabilities': [
-            {
-              'cve':  'CVE-2022-28391',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '8.8',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-88'
-              ],
-              'description':   "BusyBox through 1.35.0 allows remote attackers to execute arbitrary code if netstat is used to print a DNS PTR record's value to a VT compatible terminal. Alternatively, the attacker could choose to change the terminal's colors.",
-              'diffID':        'sha256:736164617a669ddbb998475f66b3b602e1eae26c535317d212f8f224c161f00d',
-              'fixedVersions': [
-                '1.33.1-r7'
-              ],
-              'installedVersion': '1.33.1-r6',
-              'packageName':      'busybox',
-              'purl':             'pkg:apk/alpine/busybox@1.33.1-r6?arch=x86_64&distro=3.14.5',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2022-28391',
-                'https://git.alpinelinux.org/aports/plain/main/busybox/0001-libbb-sockaddr2str-ensure-only-printable-characters-.patch',
-                'https://git.alpinelinux.org/aports/plain/main/busybox/0002-nslookup-sanitize-all-printed-strings-with-printable.patch',
-                'https://gitlab.alpinelinux.org/alpine/aports/-/issues/13661',
-                'https://nvd.nist.gov/vuln/detail/CVE-2022-28391',
-                'https://www.cve.org/CVERecord?id=CVE-2022-28391'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: remote attackers may execute arbitrary code if netstat is used'
-            },
-            {
-              'cve':  'CVE-2022-4450',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'nvd': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-415'
-              ],
-              'description':   'The function PEM_read_bio_ex() reads a PEM file from a BIO and parses and\ndecodes the "name" (e.g. "CERTIFICATE"), any header data and the payload data.\nIf the function succeeds then the "name_out", "header" and "data" arguments are\npopulated with pointers to buffers containing the relevant decoded data. The\ncaller is responsible for freeing those buffers. It is possible to construct a\nPEM file that results in 0 bytes of payload data. In this case PEM_read_bio_ex()\nwill return a failure code but will populate the header argument with a pointer\nto a buffer that has already been freed. If the caller also frees this buffer\nthen a double free will occur. This will most likely lead to a crash. This\ncould be exploited by an attacker who has the ability to supply malicious PEM\nfiles for parsing to achieve a denial of service attack.\n\nThe functions PEM_read_bio() and PEM_read() are simple wrappers around\nPEM_read_bio_ex() and therefore these functions are also directly affected.\n\nThese functions are also called indirectly by a number of other OpenSSL\nfunctions including PEM_X509_INFO_read_bio_ex() and\nSSL_CTX_use_serverinfo_file() which are also vulnerable. Some OpenSSL internal\nuses of these functions are not vulnerable because the caller does not free the\nheader argument if PEM_read_bio_ex() returns a failure code. These locations\ninclude the PEM_read_bio_TYPE() functions as well as the decoders introduced in\nOpenSSL 3.0.\n\nThe OpenSSL asn1parse command line application is also impacted by this issue.',
-              'diffID':        'sha256:736164617a669ddbb998475f66b3b602e1eae26c535317d212f8f224c161f00d',
-              'fixedVersions': [
-                '1.1.1t-r0'
-              ],
-              'installedVersion': '1.1.1n-r0',
-              'packageName':      'libcrypto1.1',
-              'purl':             'pkg:apk/alpine/libcrypto1.1@1.1.1n-r0?arch=x86_64&distro=3.14.5',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2023:2165',
-                'https://access.redhat.com/security/cve/CVE-2022-4450',
-                'https://bugzilla.redhat.com/1960321',
-                'https://bugzilla.redhat.com/2164440',
-                'https://bugzilla.redhat.com/2164487',
-                'https://bugzilla.redhat.com/2164492',
-                'https://bugzilla.redhat.com/2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144000',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144003',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144006',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144008',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144010',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144012',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144015',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144017',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144019',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2145170',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2158412',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164440',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164487',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164488',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164492',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164497',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164499',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164500',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4203',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4304',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4450',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0215',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0216',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0217',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0286',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0401',
-                'https://errata.almalinux.org/9/ALSA-2023-2165.html',
-                'https://errata.rockylinux.org/RLSA-2023:0946',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=63bcf189be73a9cc1264059bed6f57974be74a83',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=bbcf509bd046b34cca19c766bbddc31683d0858b',
-                'https://linux.oracle.com/cve/CVE-2022-4450.html',
-                'https://linux.oracle.com/errata/ELSA-2023-32791.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2022-4450',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0003',
-                'https://rustsec.org/advisories/RUSTSEC-2023-0010.html',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://ubuntu.com/security/notices/USN-5844-1',
-                'https://ubuntu.com/security/notices/USN-6564-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2022-4450',
-                'https://www.openssl.org/news/secadv/20230207.txt'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: double free after calling PEM_read_bio_ex'
-            },
-            {
-              'cve':  'CVE-2023-0215',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'nvd': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   'The public API function BIO_new_NDEF is a helper function used for streaming\nASN.1 data via a BIO. It is primarily used internally to OpenSSL to support the\nSMIME, CMS and PKCS7 streaming capabilities, but may also be called directly by\nend user applications.\n\nThe function receives a BIO from the caller, prepends a new BIO_f_asn1 filter\nBIO onto the front of it to form a BIO chain, and then returns the new head of\nthe BIO chain to the caller. Under certain conditions, for example if a CMS\nrecipient public key is invalid, the new filter BIO is freed and the function\nreturns a NULL result indicating a failure. However, in this case, the BIO chain\nis not properly cleaned up and the BIO passed by the caller still retains\ninternal pointers to the previously freed filter BIO. If the caller then goes on\nto call BIO_pop() on the BIO then a use-after-free will occur. This will most\nlikely result in a crash.\n\n\n\nThis scenario occurs directly in the internal function B64_write_ASN1() which\nmay cause BIO_new_NDEF() to be called and will subsequently call BIO_pop() on\nthe BIO. This internal function is in turn called by the public API functions\nPEM_write_bio_ASN1_stream, PEM_write_bio_CMS_stream, PEM_write_bio_PKCS7_stream,\nSMIME_write_ASN1, SMIME_write_CMS and SMIME_write_PKCS7.\n\nOther public API functions that may be impacted by this include\ni2d_ASN1_bio_stream, BIO_new_CMS, BIO_new_PKCS7, i2d_CMS_bio_stream and\ni2d_PKCS7_bio_stream.\n\nThe OpenSSL cms and smime command line applications are similarly affected.',
-              'diffID':        'sha256:736164617a669ddbb998475f66b3b602e1eae26c535317d212f8f224c161f00d',
-              'fixedVersions': [
-                '1.1.1t-r0'
-              ],
-              'installedVersion': '1.1.1n-r0',
-              'packageName':      'libcrypto1.1',
-              'purl':             'pkg:apk/alpine/libcrypto1.1@1.1.1n-r0?arch=x86_64&distro=3.14.5',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2023:2165',
-                'https://access.redhat.com/security/cve/CVE-2023-0215',
-                'https://bugzilla.redhat.com/1960321',
-                'https://bugzilla.redhat.com/2164440',
-                'https://bugzilla.redhat.com/2164487',
-                'https://bugzilla.redhat.com/2164492',
-                'https://bugzilla.redhat.com/2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144000',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144003',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144006',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144008',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144010',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144012',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144015',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144017',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144019',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2145170',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2158412',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164440',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164487',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164488',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164492',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164497',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164499',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164500',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4203',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4304',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4450',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0215',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0216',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0217',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0286',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0401',
-                'https://errata.almalinux.org/9/ALSA-2023-2165.html',
-                'https://errata.rockylinux.org/RLSA-2023:0946',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=8818064ce3c3c0f1b740a5aaba2a987e75bfbafd',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=9816136fe31d92ace4037d5da5257f763aeeb4eb',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=c3829dd8825c654652201e16f8a0a0c46ee3f344',
-                'https://linux.oracle.com/cve/CVE-2023-0215.html',
-                'https://linux.oracle.com/errata/ELSA-2023-32791.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-0215',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0003',
-                'https://rustsec.org/advisories/RUSTSEC-2023-0009.html',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://security.netapp.com/advisory/ntap-20230427-0007',
-                'https://security.netapp.com/advisory/ntap-20230427-0007/',
-                'https://security.netapp.com/advisory/ntap-20230427-0009',
-                'https://security.netapp.com/advisory/ntap-20230427-0009/',
-                'https://security.netapp.com/advisory/ntap-20240621-0006',
-                'https://security.netapp.com/advisory/ntap-20240621-0006/',
-                'https://ubuntu.com/security/notices/USN-5844-1',
-                'https://ubuntu.com/security/notices/USN-5845-1',
-                'https://ubuntu.com/security/notices/USN-5845-2',
-                'https://ubuntu.com/security/notices/USN-6564-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-0215',
-                'https://www.openssl.org/news/secadv/20230207.txt'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: use-after-free following BIO_new_NDEF'
-            },
-            {
-              'cve':  'CVE-2023-0286',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '7.4',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H'
-                },
-                'nvd': {
-                  'v3score':  '7.4',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.4',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-843'
-              ],
-              'description':   'There is a type confusion vulnerability relating to X.400 address processing\ninside an X.509 GeneralName. X.400 addresses were parsed as an ASN1_STRING but\nthe public structure definition for GENERAL_NAME incorrectly specified the type\nof the x400Address field as ASN1_TYPE. This field is subsequently interpreted by\nthe OpenSSL function GENERAL_NAME_cmp as an ASN1_TYPE rather than an\nASN1_STRING.\n\nWhen CRL checking is enabled (i.e. the application sets the\nX509_V_FLAG_CRL_CHECK flag), this vulnerability may allow an attacker to pass\narbitrary pointers to a memcmp call, enabling them to read memory contents or\nenact a denial of service. In most cases, the attack requires the attacker to\nprovide both the certificate chain and CRL, neither of which need to have a\nvalid signature. If the attacker only controls one of these inputs, the other\ninput must already contain an X.400 address as a CRL distribution point, which\nis uncommon. As such, this vulnerability is most likely to only affect\napplications which have implemented their own functionality for retrieving CRLs\nover a network.',
-              'diffID':        'sha256:736164617a669ddbb998475f66b3b602e1eae26c535317d212f8f224c161f00d',
-              'fixedVersions': [
-                '1.1.1t-r0'
-              ],
-              'installedVersion': '1.1.1n-r0',
-              'packageName':      'libcrypto1.1',
-              'purl':             'pkg:apk/alpine/libcrypto1.1@1.1.1n-r0?arch=x86_64&distro=3.14.5',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2025:7937',
-                'https://access.redhat.com/security/cve/CVE-2023-0286',
-                'https://access.redhat.com/security/cve/cve-2023-0286',
-                'https://bugzilla.redhat.com/2164440',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144000',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144003',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144006',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144008',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144010',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144012',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144015',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144017',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144019',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2145170',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2158412',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164440',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164487',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164488',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164492',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164497',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164499',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164500',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4203',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4304',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4450',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0215',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0216',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0217',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0286',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0401',
-                'https://errata.almalinux.org/9/ALSA-2025-7937.html',
-                'https://errata.rockylinux.org/RLSA-2023:0946',
-                'https://ftp.openbsd.org/pub/OpenBSD/LibreSSL/libressl-3.6.2-relnotes.txt',
-                'https://ftp.openbsd.org/pub/OpenBSD/patches/7.2/common/018_x509.patch.sig',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=2c6c9d439b484e1ba9830d8454a34fa4f80fdfe9',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=2f7530077e0ef79d98718138716bc51ca0cad658',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=fd2af07dc083a350c959147097003a14a5e8ac4d',
-                'https://github.com/pyca/cryptography',
-                'https://github.com/pyca/cryptography/security/advisories/GHSA-x4qr-2fvf-3mr5',
-                'https://linux.oracle.com/cve/CVE-2023-0286.html',
-                'https://linux.oracle.com/errata/ELSA-2025-7937.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-0286',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0003',
-                'https://rustsec.org/advisories/RUSTSEC-2023-0006.html',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://ubuntu.com/security/notices/USN-5844-1',
-                'https://ubuntu.com/security/notices/USN-5845-1',
-                'https://ubuntu.com/security/notices/USN-5845-2',
-                'https://ubuntu.com/security/notices/USN-6564-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-0286',
-                'https://www.openssl.org/news/secadv/20230207.txt'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: X.400 address type confusion in X.509 GeneralName'
-            },
-            {
-              'cve':  'CVE-2023-0464',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-295'
-              ],
-              'description':   "A security vulnerability has been identified in all supported versions\n\nof OpenSSL related to the verification of X.509 certificate chains\nthat include policy constraints.  Attackers may be able to exploit this\nvulnerability by creating a malicious certificate chain that triggers\nexponential use of computational resources, leading to a denial-of-service\n(DoS) attack on affected systems.\n\nPolicy processing is disabled by default but can be enabled by passing\nthe `-policy' argument to the command line utilities or by calling the\n`X509_VERIFY_PARAM_set1_policies()' function.",
-              'diffID':        'sha256:736164617a669ddbb998475f66b3b602e1eae26c535317d212f8f224c161f00d',
-              'fixedVersions': [
-                '1.1.1t-r1'
-              ],
-              'installedVersion': '1.1.1n-r0',
-              'packageName':      'libcrypto1.1',
-              'purl':             'pkg:apk/alpine/libcrypto1.1@1.1.1n-r0?arch=x86_64&distro=3.14.5',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2023:3722',
-                'https://access.redhat.com/security/cve/CVE-2023-0464',
-                'https://bugzilla.redhat.com/2181082',
-                'https://bugzilla.redhat.com/2182561',
-                'https://bugzilla.redhat.com/2182565',
-                'https://bugzilla.redhat.com/2188461',
-                'https://bugzilla.redhat.com/2207947',
-                'https://errata.almalinux.org/9/ALSA-2023-3722.html',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=2017771e2db3e2b96f89bbe8766c3209f6a99545',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=2dcd4f1e3115f38cefa43e3efbe9b801c27e642e',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=879f7080d7e141f415c79eaa3a8ac4a3dad0348b',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=959c59c7a0164117e7f8366466a32bb1f8d77ff1',
-                'https://linux.oracle.com/cve/CVE-2023-0464.html',
-                'https://linux.oracle.com/errata/ELSA-2023-3722.html',
-                'https://lists.debian.org/debian-lts-announce/2023/06/msg00011.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-0464',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://security.netapp.com/advisory/ntap-20230406-0006/',
-                'https://security.netapp.com/advisory/ntap-20240621-0006/',
-                'https://ubuntu.com/security/notices/USN-6039-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.couchbase.com/alerts/',
-                'https://www.cve.org/CVERecord?id=CVE-2023-0464',
-                'https://www.debian.org/security/2023/dsa-5417',
-                'https://www.openssl.org/news/secadv/20230322.txt'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: Denial of service by excessive resource usage in verifying X509 policy constraints'
-            },
-            {
-              'cve':  'CVE-2022-2097',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N'
-                },
-                'nvd': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N'
-                },
-                'redhat': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-327'
-              ],
-              'description':   "AES OCB mode for 32-bit x86 platforms using the AES-NI assembly optimised implementation will not encrypt the entirety of the data under some circumstances. This could reveal sixteen bytes of data that was preexisting in the memory that wasn't written. In the special case of \"in place\" encryption, sixteen bytes of the plaintext would be revealed. Since OpenSSL does not support OCB based cipher suites for TLS and DTLS, they are both unaffected. Fixed in OpenSSL 3.0.5 (Affected 3.0.0-3.0.4). Fixed in OpenSSL 1.1.1q (Affected 1.1.1-1.1.1p).",
-              'diffID':        'sha256:736164617a669ddbb998475f66b3b602e1eae26c535317d212f8f224c161f00d',
-              'fixedVersions': [
-                '1.1.1q-r0'
-              ],
-              'installedVersion': '1.1.1n-r0',
-              'packageName':      'libcrypto1.1',
-              'purl':             'pkg:apk/alpine/libcrypto1.1@1.1.1n-r0?arch=x86_64&distro=3.14.5',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2022:6224',
-                'https://access.redhat.com/security/cve/CVE-2022-2097',
-                'https://bugzilla.redhat.com/2081494',
-                'https://bugzilla.redhat.com/2087911',
-                'https://bugzilla.redhat.com/2087913',
-                'https://bugzilla.redhat.com/2097310',
-                'https://bugzilla.redhat.com/2104905',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2081494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2097310',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2100554',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2104905',
-                'https://cert-portal.siemens.com/productcert/pdf/ssa-332410.pdf',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-1292',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-2068',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-2097',
-                'https://errata.almalinux.org/9/ALSA-2022-6224.html',
-                'https://errata.rockylinux.org/RLSA-2022:5818',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=919925673d6c9cfed3c1085497f5dfbbed5fc431',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=a98f339ddd7e8f487d6e0088d4a9a42324885a93',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=919925673d6c9cfed3c1085497f5dfbbed5fc431',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=a98f339ddd7e8f487d6e0088d4a9a42324885a93',
-                'https://github.com/alexcrichton/openssl-src-rs',
-                'https://linux.oracle.com/cve/CVE-2022-2097.html',
-                'https://linux.oracle.com/errata/ELSA-2022-9955.html',
-                'https://lists.debian.org/debian-lts-announce/2023/02/msg00019.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/R6CK57NBQFTPUMXAPJURCGXUYT76NQAK',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/R6CK57NBQFTPUMXAPJURCGXUYT76NQAK/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/V6567JERRHHJW2GNGJGKDRNHR7SNPZK7',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/V6567JERRHHJW2GNGJGKDRNHR7SNPZK7/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VCMNWKERPBKOEBNL7CLTTX3ZZCZLH7XA',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VCMNWKERPBKOEBNL7CLTTX3ZZCZLH7XA/',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/R6CK57NBQFTPUMXAPJURCGXUYT76NQAK',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/R6CK57NBQFTPUMXAPJURCGXUYT76NQAK/',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/V6567JERRHHJW2GNGJGKDRNHR7SNPZK7',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/V6567JERRHHJW2GNGJGKDRNHR7SNPZK7/',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/VCMNWKERPBKOEBNL7CLTTX3ZZCZLH7XA',
-                'https://nvd.nist.gov/vuln/detail/CVE-2022-2097',
-                'https://rustsec.org/advisories/RUSTSEC-2022-0032.html',
-                'https://security.gentoo.org/glsa/202210-02',
-                'https://security.netapp.com/advisory/ntap-20220715-0011',
-                'https://security.netapp.com/advisory/ntap-20220715-0011/',
-                'https://security.netapp.com/advisory/ntap-20230420-0008',
-                'https://security.netapp.com/advisory/ntap-20230420-0008/',
-                'https://security.netapp.com/advisory/ntap-20240621-0006',
-                'https://security.netapp.com/advisory/ntap-20240621-0006/',
-                'https://ubuntu.com/security/notices/USN-5502-1',
-                'https://ubuntu.com/security/notices/USN-6457-1',
-                'https://www.cve.org/CVERecord?id=CVE-2022-2097',
-                'https://www.debian.org/security/2023/dsa-5343',
-                'https://www.openssl.org/news/secadv/20220705.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: AES OCB fails to encrypt some bytes'
-            },
-            {
-              'cve':  'CVE-2022-4304',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N'
-                },
-                'nvd': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N'
-                },
-                'redhat': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-203'
-              ],
-              'description':   'A timing based side channel exists in the OpenSSL RSA Decryption implementation\nwhich could be sufficient to recover a plaintext across a network in a\nBleichenbacher style attack. To achieve a successful decryption an attacker\nwould have to be able to send a very large number of trial messages for\ndecryption. The vulnerability affects all RSA padding modes: PKCS#1 v1.5,\nRSA-OEAP and RSASVE.\n\nFor example, in a TLS connection, RSA is commonly used by a client to send an\nencrypted pre-master secret to the server. An attacker that had observed a\ngenuine connection between a client and a server could use this flaw to send\ntrial messages to the server and record the time taken to process them. After a\nsufficiently large number of messages the attacker could recover the pre-master\nsecret used for the original connection and thus be able to decrypt the\napplication data sent over that connection.',
-              'diffID':        'sha256:736164617a669ddbb998475f66b3b602e1eae26c535317d212f8f224c161f00d',
-              'fixedVersions': [
-                '1.1.1t-r0'
-              ],
-              'installedVersion': '1.1.1n-r0',
-              'packageName':      'libcrypto1.1',
-              'purl':             'pkg:apk/alpine/libcrypto1.1@1.1.1n-r0?arch=x86_64&distro=3.14.5',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2023:2165',
-                'https://access.redhat.com/security/cve/CVE-2022-4304',
-                'https://bugzilla.redhat.com/1960321',
-                'https://bugzilla.redhat.com/2164440',
-                'https://bugzilla.redhat.com/2164487',
-                'https://bugzilla.redhat.com/2164492',
-                'https://bugzilla.redhat.com/2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144000',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144003',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144006',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144008',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144010',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144012',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144015',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144017',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144019',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2145170',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2158412',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164440',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164487',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164488',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164492',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164497',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164499',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164500',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4203',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4304',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4450',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0215',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0216',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0217',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0286',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0401',
-                'https://errata.almalinux.org/9/ALSA-2023-2165.html',
-                'https://errata.rockylinux.org/RLSA-2023:0946',
-                'https://linux.oracle.com/cve/CVE-2022-4304.html',
-                'https://linux.oracle.com/errata/ELSA-2023-32791.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2022-4304',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0003',
-                'https://rustsec.org/advisories/RUSTSEC-2023-0007.html',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://ubuntu.com/security/notices/USN-5844-1',
-                'https://ubuntu.com/security/notices/USN-6564-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2022-4304',
-                'https://www.openssl.org/news/secadv/20230207.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: timing attack in RSA Decryption implementation'
-            },
-            {
-              'cve':  'CVE-2023-0465',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N'
-                },
-                'redhat': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-295'
-              ],
-              'description':   "Applications that use a non-default option when verifying certificates may be\nvulnerable to an attack from a malicious CA to circumvent certain checks.\n\nInvalid certificate policies in leaf certificates are silently ignored by\nOpenSSL and other certificate policy checks are skipped for that certificate.\nA malicious CA could use this to deliberately assert invalid certificate policies\nin order to circumvent policy checking on the certificate altogether.\n\nPolicy processing is disabled by default but can be enabled by passing\nthe `-policy' argument to the command line utilities or by calling the\n`X509_VERIFY_PARAM_set1_policies()' function.",
-              'diffID':        'sha256:736164617a669ddbb998475f66b3b602e1eae26c535317d212f8f224c161f00d',
-              'fixedVersions': [
-                '1.1.1t-r2'
-              ],
-              'installedVersion': '1.1.1n-r0',
-              'packageName':      'libcrypto1.1',
-              'purl':             'pkg:apk/alpine/libcrypto1.1@1.1.1n-r0?arch=x86_64&distro=3.14.5',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2023:3722',
-                'https://access.redhat.com/security/cve/CVE-2023-0465',
-                'https://bugzilla.redhat.com/2181082',
-                'https://bugzilla.redhat.com/2182561',
-                'https://bugzilla.redhat.com/2182565',
-                'https://bugzilla.redhat.com/2188461',
-                'https://bugzilla.redhat.com/2207947',
-                'https://errata.almalinux.org/9/ALSA-2023-3722.html',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=10325176f3d3e98c6e2b3bf5ab1e3b334de6947a',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=1dd43e0709fece299b15208f36cc7c76209ba0bb',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=b013765abfa80036dc779dd0e50602c57bb3bf95',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=facfb1ab745646e97a1920977ae4a9965ea61d5c',
-                'https://linux.oracle.com/cve/CVE-2023-0465.html',
-                'https://linux.oracle.com/errata/ELSA-2023-3722.html',
-                'https://lists.debian.org/debian-lts-announce/2023/06/msg00011.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-0465',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://security.netapp.com/advisory/ntap-20230414-0001/',
-                'https://ubuntu.com/security/notices/USN-6039-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-0465',
-                'https://www.debian.org/security/2023/dsa-5417',
-                'https://www.openssl.org/news/secadv/20230328.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: Invalid certificate policies in leaf certificates are silently ignored'
-            },
-            {
-              'cve':  'CVE-2022-4450',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'nvd': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-415'
-              ],
-              'description':   'The function PEM_read_bio_ex() reads a PEM file from a BIO and parses and\ndecodes the "name" (e.g. "CERTIFICATE"), any header data and the payload data.\nIf the function succeeds then the "name_out", "header" and "data" arguments are\npopulated with pointers to buffers containing the relevant decoded data. The\ncaller is responsible for freeing those buffers. It is possible to construct a\nPEM file that results in 0 bytes of payload data. In this case PEM_read_bio_ex()\nwill return a failure code but will populate the header argument with a pointer\nto a buffer that has already been freed. If the caller also frees this buffer\nthen a double free will occur. This will most likely lead to a crash. This\ncould be exploited by an attacker who has the ability to supply malicious PEM\nfiles for parsing to achieve a denial of service attack.\n\nThe functions PEM_read_bio() and PEM_read() are simple wrappers around\nPEM_read_bio_ex() and therefore these functions are also directly affected.\n\nThese functions are also called indirectly by a number of other OpenSSL\nfunctions including PEM_X509_INFO_read_bio_ex() and\nSSL_CTX_use_serverinfo_file() which are also vulnerable. Some OpenSSL internal\nuses of these functions are not vulnerable because the caller does not free the\nheader argument if PEM_read_bio_ex() returns a failure code. These locations\ninclude the PEM_read_bio_TYPE() functions as well as the decoders introduced in\nOpenSSL 3.0.\n\nThe OpenSSL asn1parse command line application is also impacted by this issue.',
-              'diffID':        'sha256:736164617a669ddbb998475f66b3b602e1eae26c535317d212f8f224c161f00d',
-              'fixedVersions': [
-                '1.1.1t-r0'
-              ],
-              'installedVersion': '1.1.1n-r0',
-              'packageName':      'libssl1.1',
-              'purl':             'pkg:apk/alpine/libssl1.1@1.1.1n-r0?arch=x86_64&distro=3.14.5',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2023:2165',
-                'https://access.redhat.com/security/cve/CVE-2022-4450',
-                'https://bugzilla.redhat.com/1960321',
-                'https://bugzilla.redhat.com/2164440',
-                'https://bugzilla.redhat.com/2164487',
-                'https://bugzilla.redhat.com/2164492',
-                'https://bugzilla.redhat.com/2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144000',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144003',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144006',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144008',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144010',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144012',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144015',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144017',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144019',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2145170',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2158412',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164440',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164487',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164488',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164492',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164497',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164499',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164500',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4203',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4304',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4450',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0215',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0216',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0217',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0286',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0401',
-                'https://errata.almalinux.org/9/ALSA-2023-2165.html',
-                'https://errata.rockylinux.org/RLSA-2023:0946',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=63bcf189be73a9cc1264059bed6f57974be74a83',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=bbcf509bd046b34cca19c766bbddc31683d0858b',
-                'https://linux.oracle.com/cve/CVE-2022-4450.html',
-                'https://linux.oracle.com/errata/ELSA-2023-32791.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2022-4450',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0003',
-                'https://rustsec.org/advisories/RUSTSEC-2023-0010.html',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://ubuntu.com/security/notices/USN-5844-1',
-                'https://ubuntu.com/security/notices/USN-6564-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2022-4450',
-                'https://www.openssl.org/news/secadv/20230207.txt'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: double free after calling PEM_read_bio_ex'
-            },
-            {
-              'cve':  'CVE-2023-0215',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'nvd': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   'The public API function BIO_new_NDEF is a helper function used for streaming\nASN.1 data via a BIO. It is primarily used internally to OpenSSL to support the\nSMIME, CMS and PKCS7 streaming capabilities, but may also be called directly by\nend user applications.\n\nThe function receives a BIO from the caller, prepends a new BIO_f_asn1 filter\nBIO onto the front of it to form a BIO chain, and then returns the new head of\nthe BIO chain to the caller. Under certain conditions, for example if a CMS\nrecipient public key is invalid, the new filter BIO is freed and the function\nreturns a NULL result indicating a failure. However, in this case, the BIO chain\nis not properly cleaned up and the BIO passed by the caller still retains\ninternal pointers to the previously freed filter BIO. If the caller then goes on\nto call BIO_pop() on the BIO then a use-after-free will occur. This will most\nlikely result in a crash.\n\n\n\nThis scenario occurs directly in the internal function B64_write_ASN1() which\nmay cause BIO_new_NDEF() to be called and will subsequently call BIO_pop() on\nthe BIO. This internal function is in turn called by the public API functions\nPEM_write_bio_ASN1_stream, PEM_write_bio_CMS_stream, PEM_write_bio_PKCS7_stream,\nSMIME_write_ASN1, SMIME_write_CMS and SMIME_write_PKCS7.\n\nOther public API functions that may be impacted by this include\ni2d_ASN1_bio_stream, BIO_new_CMS, BIO_new_PKCS7, i2d_CMS_bio_stream and\ni2d_PKCS7_bio_stream.\n\nThe OpenSSL cms and smime command line applications are similarly affected.',
-              'diffID':        'sha256:736164617a669ddbb998475f66b3b602e1eae26c535317d212f8f224c161f00d',
-              'fixedVersions': [
-                '1.1.1t-r0'
-              ],
-              'installedVersion': '1.1.1n-r0',
-              'packageName':      'libssl1.1',
-              'purl':             'pkg:apk/alpine/libssl1.1@1.1.1n-r0?arch=x86_64&distro=3.14.5',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2023:2165',
-                'https://access.redhat.com/security/cve/CVE-2023-0215',
-                'https://bugzilla.redhat.com/1960321',
-                'https://bugzilla.redhat.com/2164440',
-                'https://bugzilla.redhat.com/2164487',
-                'https://bugzilla.redhat.com/2164492',
-                'https://bugzilla.redhat.com/2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144000',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144003',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144006',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144008',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144010',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144012',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144015',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144017',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144019',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2145170',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2158412',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164440',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164487',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164488',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164492',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164497',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164499',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164500',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4203',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4304',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4450',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0215',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0216',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0217',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0286',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0401',
-                'https://errata.almalinux.org/9/ALSA-2023-2165.html',
-                'https://errata.rockylinux.org/RLSA-2023:0946',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=8818064ce3c3c0f1b740a5aaba2a987e75bfbafd',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=9816136fe31d92ace4037d5da5257f763aeeb4eb',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=c3829dd8825c654652201e16f8a0a0c46ee3f344',
-                'https://linux.oracle.com/cve/CVE-2023-0215.html',
-                'https://linux.oracle.com/errata/ELSA-2023-32791.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-0215',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0003',
-                'https://rustsec.org/advisories/RUSTSEC-2023-0009.html',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://security.netapp.com/advisory/ntap-20230427-0007',
-                'https://security.netapp.com/advisory/ntap-20230427-0007/',
-                'https://security.netapp.com/advisory/ntap-20230427-0009',
-                'https://security.netapp.com/advisory/ntap-20230427-0009/',
-                'https://security.netapp.com/advisory/ntap-20240621-0006',
-                'https://security.netapp.com/advisory/ntap-20240621-0006/',
-                'https://ubuntu.com/security/notices/USN-5844-1',
-                'https://ubuntu.com/security/notices/USN-5845-1',
-                'https://ubuntu.com/security/notices/USN-5845-2',
-                'https://ubuntu.com/security/notices/USN-6564-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-0215',
-                'https://www.openssl.org/news/secadv/20230207.txt'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: use-after-free following BIO_new_NDEF'
-            },
-            {
-              'cve':  'CVE-2023-0286',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '7.4',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H'
-                },
-                'nvd': {
-                  'v3score':  '7.4',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.4',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-843'
-              ],
-              'description':   'There is a type confusion vulnerability relating to X.400 address processing\ninside an X.509 GeneralName. X.400 addresses were parsed as an ASN1_STRING but\nthe public structure definition for GENERAL_NAME incorrectly specified the type\nof the x400Address field as ASN1_TYPE. This field is subsequently interpreted by\nthe OpenSSL function GENERAL_NAME_cmp as an ASN1_TYPE rather than an\nASN1_STRING.\n\nWhen CRL checking is enabled (i.e. the application sets the\nX509_V_FLAG_CRL_CHECK flag), this vulnerability may allow an attacker to pass\narbitrary pointers to a memcmp call, enabling them to read memory contents or\nenact a denial of service. In most cases, the attack requires the attacker to\nprovide both the certificate chain and CRL, neither of which need to have a\nvalid signature. If the attacker only controls one of these inputs, the other\ninput must already contain an X.400 address as a CRL distribution point, which\nis uncommon. As such, this vulnerability is most likely to only affect\napplications which have implemented their own functionality for retrieving CRLs\nover a network.',
-              'diffID':        'sha256:736164617a669ddbb998475f66b3b602e1eae26c535317d212f8f224c161f00d',
-              'fixedVersions': [
-                '1.1.1t-r0'
-              ],
-              'installedVersion': '1.1.1n-r0',
-              'packageName':      'libssl1.1',
-              'purl':             'pkg:apk/alpine/libssl1.1@1.1.1n-r0?arch=x86_64&distro=3.14.5',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2025:7937',
-                'https://access.redhat.com/security/cve/CVE-2023-0286',
-                'https://access.redhat.com/security/cve/cve-2023-0286',
-                'https://bugzilla.redhat.com/2164440',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144000',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144003',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144006',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144008',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144010',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144012',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144015',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144017',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144019',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2145170',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2158412',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164440',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164487',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164488',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164492',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164497',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164499',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164500',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4203',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4304',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4450',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0215',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0216',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0217',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0286',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0401',
-                'https://errata.almalinux.org/9/ALSA-2025-7937.html',
-                'https://errata.rockylinux.org/RLSA-2023:0946',
-                'https://ftp.openbsd.org/pub/OpenBSD/LibreSSL/libressl-3.6.2-relnotes.txt',
-                'https://ftp.openbsd.org/pub/OpenBSD/patches/7.2/common/018_x509.patch.sig',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=2c6c9d439b484e1ba9830d8454a34fa4f80fdfe9',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=2f7530077e0ef79d98718138716bc51ca0cad658',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=fd2af07dc083a350c959147097003a14a5e8ac4d',
-                'https://github.com/pyca/cryptography',
-                'https://github.com/pyca/cryptography/security/advisories/GHSA-x4qr-2fvf-3mr5',
-                'https://linux.oracle.com/cve/CVE-2023-0286.html',
-                'https://linux.oracle.com/errata/ELSA-2025-7937.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-0286',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0003',
-                'https://rustsec.org/advisories/RUSTSEC-2023-0006.html',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://ubuntu.com/security/notices/USN-5844-1',
-                'https://ubuntu.com/security/notices/USN-5845-1',
-                'https://ubuntu.com/security/notices/USN-5845-2',
-                'https://ubuntu.com/security/notices/USN-6564-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-0286',
-                'https://www.openssl.org/news/secadv/20230207.txt'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: X.400 address type confusion in X.509 GeneralName'
-            },
-            {
-              'cve':  'CVE-2023-0464',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-295'
-              ],
-              'description':   "A security vulnerability has been identified in all supported versions\n\nof OpenSSL related to the verification of X.509 certificate chains\nthat include policy constraints.  Attackers may be able to exploit this\nvulnerability by creating a malicious certificate chain that triggers\nexponential use of computational resources, leading to a denial-of-service\n(DoS) attack on affected systems.\n\nPolicy processing is disabled by default but can be enabled by passing\nthe `-policy' argument to the command line utilities or by calling the\n`X509_VERIFY_PARAM_set1_policies()' function.",
-              'diffID':        'sha256:736164617a669ddbb998475f66b3b602e1eae26c535317d212f8f224c161f00d',
-              'fixedVersions': [
-                '1.1.1t-r1'
-              ],
-              'installedVersion': '1.1.1n-r0',
-              'packageName':      'libssl1.1',
-              'purl':             'pkg:apk/alpine/libssl1.1@1.1.1n-r0?arch=x86_64&distro=3.14.5',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2023:3722',
-                'https://access.redhat.com/security/cve/CVE-2023-0464',
-                'https://bugzilla.redhat.com/2181082',
-                'https://bugzilla.redhat.com/2182561',
-                'https://bugzilla.redhat.com/2182565',
-                'https://bugzilla.redhat.com/2188461',
-                'https://bugzilla.redhat.com/2207947',
-                'https://errata.almalinux.org/9/ALSA-2023-3722.html',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=2017771e2db3e2b96f89bbe8766c3209f6a99545',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=2dcd4f1e3115f38cefa43e3efbe9b801c27e642e',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=879f7080d7e141f415c79eaa3a8ac4a3dad0348b',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=959c59c7a0164117e7f8366466a32bb1f8d77ff1',
-                'https://linux.oracle.com/cve/CVE-2023-0464.html',
-                'https://linux.oracle.com/errata/ELSA-2023-3722.html',
-                'https://lists.debian.org/debian-lts-announce/2023/06/msg00011.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-0464',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://security.netapp.com/advisory/ntap-20230406-0006/',
-                'https://security.netapp.com/advisory/ntap-20240621-0006/',
-                'https://ubuntu.com/security/notices/USN-6039-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.couchbase.com/alerts/',
-                'https://www.cve.org/CVERecord?id=CVE-2023-0464',
-                'https://www.debian.org/security/2023/dsa-5417',
-                'https://www.openssl.org/news/secadv/20230322.txt'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: Denial of service by excessive resource usage in verifying X509 policy constraints'
-            },
-            {
-              'cve':  'CVE-2022-2097',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N'
-                },
-                'nvd': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N'
-                },
-                'redhat': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-327'
-              ],
-              'description':   "AES OCB mode for 32-bit x86 platforms using the AES-NI assembly optimised implementation will not encrypt the entirety of the data under some circumstances. This could reveal sixteen bytes of data that was preexisting in the memory that wasn't written. In the special case of \"in place\" encryption, sixteen bytes of the plaintext would be revealed. Since OpenSSL does not support OCB based cipher suites for TLS and DTLS, they are both unaffected. Fixed in OpenSSL 3.0.5 (Affected 3.0.0-3.0.4). Fixed in OpenSSL 1.1.1q (Affected 1.1.1-1.1.1p).",
-              'diffID':        'sha256:736164617a669ddbb998475f66b3b602e1eae26c535317d212f8f224c161f00d',
-              'fixedVersions': [
-                '1.1.1q-r0'
-              ],
-              'installedVersion': '1.1.1n-r0',
-              'packageName':      'libssl1.1',
-              'purl':             'pkg:apk/alpine/libssl1.1@1.1.1n-r0?arch=x86_64&distro=3.14.5',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2022:6224',
-                'https://access.redhat.com/security/cve/CVE-2022-2097',
-                'https://bugzilla.redhat.com/2081494',
-                'https://bugzilla.redhat.com/2087911',
-                'https://bugzilla.redhat.com/2087913',
-                'https://bugzilla.redhat.com/2097310',
-                'https://bugzilla.redhat.com/2104905',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2081494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2097310',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2100554',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2104905',
-                'https://cert-portal.siemens.com/productcert/pdf/ssa-332410.pdf',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-1292',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-2068',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-2097',
-                'https://errata.almalinux.org/9/ALSA-2022-6224.html',
-                'https://errata.rockylinux.org/RLSA-2022:5818',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=919925673d6c9cfed3c1085497f5dfbbed5fc431',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=a98f339ddd7e8f487d6e0088d4a9a42324885a93',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=919925673d6c9cfed3c1085497f5dfbbed5fc431',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=a98f339ddd7e8f487d6e0088d4a9a42324885a93',
-                'https://github.com/alexcrichton/openssl-src-rs',
-                'https://linux.oracle.com/cve/CVE-2022-2097.html',
-                'https://linux.oracle.com/errata/ELSA-2022-9955.html',
-                'https://lists.debian.org/debian-lts-announce/2023/02/msg00019.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/R6CK57NBQFTPUMXAPJURCGXUYT76NQAK',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/R6CK57NBQFTPUMXAPJURCGXUYT76NQAK/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/V6567JERRHHJW2GNGJGKDRNHR7SNPZK7',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/V6567JERRHHJW2GNGJGKDRNHR7SNPZK7/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VCMNWKERPBKOEBNL7CLTTX3ZZCZLH7XA',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VCMNWKERPBKOEBNL7CLTTX3ZZCZLH7XA/',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/R6CK57NBQFTPUMXAPJURCGXUYT76NQAK',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/R6CK57NBQFTPUMXAPJURCGXUYT76NQAK/',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/V6567JERRHHJW2GNGJGKDRNHR7SNPZK7',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/V6567JERRHHJW2GNGJGKDRNHR7SNPZK7/',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/VCMNWKERPBKOEBNL7CLTTX3ZZCZLH7XA',
-                'https://nvd.nist.gov/vuln/detail/CVE-2022-2097',
-                'https://rustsec.org/advisories/RUSTSEC-2022-0032.html',
-                'https://security.gentoo.org/glsa/202210-02',
-                'https://security.netapp.com/advisory/ntap-20220715-0011',
-                'https://security.netapp.com/advisory/ntap-20220715-0011/',
-                'https://security.netapp.com/advisory/ntap-20230420-0008',
-                'https://security.netapp.com/advisory/ntap-20230420-0008/',
-                'https://security.netapp.com/advisory/ntap-20240621-0006',
-                'https://security.netapp.com/advisory/ntap-20240621-0006/',
-                'https://ubuntu.com/security/notices/USN-5502-1',
-                'https://ubuntu.com/security/notices/USN-6457-1',
-                'https://www.cve.org/CVERecord?id=CVE-2022-2097',
-                'https://www.debian.org/security/2023/dsa-5343',
-                'https://www.openssl.org/news/secadv/20220705.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: AES OCB fails to encrypt some bytes'
-            },
-            {
-              'cve':  'CVE-2022-4304',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N'
-                },
-                'nvd': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N'
-                },
-                'redhat': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-203'
-              ],
-              'description':   'A timing based side channel exists in the OpenSSL RSA Decryption implementation\nwhich could be sufficient to recover a plaintext across a network in a\nBleichenbacher style attack. To achieve a successful decryption an attacker\nwould have to be able to send a very large number of trial messages for\ndecryption. The vulnerability affects all RSA padding modes: PKCS#1 v1.5,\nRSA-OEAP and RSASVE.\n\nFor example, in a TLS connection, RSA is commonly used by a client to send an\nencrypted pre-master secret to the server. An attacker that had observed a\ngenuine connection between a client and a server could use this flaw to send\ntrial messages to the server and record the time taken to process them. After a\nsufficiently large number of messages the attacker could recover the pre-master\nsecret used for the original connection and thus be able to decrypt the\napplication data sent over that connection.',
-              'diffID':        'sha256:736164617a669ddbb998475f66b3b602e1eae26c535317d212f8f224c161f00d',
-              'fixedVersions': [
-                '1.1.1t-r0'
-              ],
-              'installedVersion': '1.1.1n-r0',
-              'packageName':      'libssl1.1',
-              'purl':             'pkg:apk/alpine/libssl1.1@1.1.1n-r0?arch=x86_64&distro=3.14.5',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2023:2165',
-                'https://access.redhat.com/security/cve/CVE-2022-4304',
-                'https://bugzilla.redhat.com/1960321',
-                'https://bugzilla.redhat.com/2164440',
-                'https://bugzilla.redhat.com/2164487',
-                'https://bugzilla.redhat.com/2164492',
-                'https://bugzilla.redhat.com/2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144000',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144003',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144006',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144008',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144010',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144012',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144015',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144017',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144019',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2145170',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2158412',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164440',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164487',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164488',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164492',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164497',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164499',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164500',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4203',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4304',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4450',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0215',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0216',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0217',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0286',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0401',
-                'https://errata.almalinux.org/9/ALSA-2023-2165.html',
-                'https://errata.rockylinux.org/RLSA-2023:0946',
-                'https://linux.oracle.com/cve/CVE-2022-4304.html',
-                'https://linux.oracle.com/errata/ELSA-2023-32791.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2022-4304',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0003',
-                'https://rustsec.org/advisories/RUSTSEC-2023-0007.html',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://ubuntu.com/security/notices/USN-5844-1',
-                'https://ubuntu.com/security/notices/USN-6564-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2022-4304',
-                'https://www.openssl.org/news/secadv/20230207.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: timing attack in RSA Decryption implementation'
-            },
-            {
-              'cve':  'CVE-2023-0465',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N'
-                },
-                'redhat': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-295'
-              ],
-              'description':   "Applications that use a non-default option when verifying certificates may be\nvulnerable to an attack from a malicious CA to circumvent certain checks.\n\nInvalid certificate policies in leaf certificates are silently ignored by\nOpenSSL and other certificate policy checks are skipped for that certificate.\nA malicious CA could use this to deliberately assert invalid certificate policies\nin order to circumvent policy checking on the certificate altogether.\n\nPolicy processing is disabled by default but can be enabled by passing\nthe `-policy' argument to the command line utilities or by calling the\n`X509_VERIFY_PARAM_set1_policies()' function.",
-              'diffID':        'sha256:736164617a669ddbb998475f66b3b602e1eae26c535317d212f8f224c161f00d',
-              'fixedVersions': [
-                '1.1.1t-r2'
-              ],
-              'installedVersion': '1.1.1n-r0',
-              'packageName':      'libssl1.1',
-              'purl':             'pkg:apk/alpine/libssl1.1@1.1.1n-r0?arch=x86_64&distro=3.14.5',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2023:3722',
-                'https://access.redhat.com/security/cve/CVE-2023-0465',
-                'https://bugzilla.redhat.com/2181082',
-                'https://bugzilla.redhat.com/2182561',
-                'https://bugzilla.redhat.com/2182565',
-                'https://bugzilla.redhat.com/2188461',
-                'https://bugzilla.redhat.com/2207947',
-                'https://errata.almalinux.org/9/ALSA-2023-3722.html',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=10325176f3d3e98c6e2b3bf5ab1e3b334de6947a',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=1dd43e0709fece299b15208f36cc7c76209ba0bb',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=b013765abfa80036dc779dd0e50602c57bb3bf95',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=facfb1ab745646e97a1920977ae4a9965ea61d5c',
-                'https://linux.oracle.com/cve/CVE-2023-0465.html',
-                'https://linux.oracle.com/errata/ELSA-2023-3722.html',
-                'https://lists.debian.org/debian-lts-announce/2023/06/msg00011.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-0465',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://security.netapp.com/advisory/ntap-20230414-0001/',
-                'https://ubuntu.com/security/notices/USN-6039-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-0465',
-                'https://www.debian.org/security/2023/dsa-5417',
-                'https://www.openssl.org/news/secadv/20230328.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: Invalid certificate policies in leaf certificates are silently ignored'
-            },
-            {
-              'cve':  'CVE-2022-28391',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '8.8',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-88'
-              ],
-              'description':   "BusyBox through 1.35.0 allows remote attackers to execute arbitrary code if netstat is used to print a DNS PTR record's value to a VT compatible terminal. Alternatively, the attacker could choose to change the terminal's colors.",
-              'diffID':        'sha256:736164617a669ddbb998475f66b3b602e1eae26c535317d212f8f224c161f00d',
-              'fixedVersions': [
-                '1.33.1-r7'
-              ],
-              'installedVersion': '1.33.1-r6',
-              'packageName':      'ssl_client',
-              'purl':             'pkg:apk/alpine/ssl_client@1.33.1-r6?arch=x86_64&distro=3.14.5',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2022-28391',
-                'https://git.alpinelinux.org/aports/plain/main/busybox/0001-libbb-sockaddr2str-ensure-only-printable-characters-.patch',
-                'https://git.alpinelinux.org/aports/plain/main/busybox/0002-nslookup-sanitize-all-printed-strings-with-printable.patch',
-                'https://gitlab.alpinelinux.org/alpine/aports/-/issues/13661',
-                'https://nvd.nist.gov/vuln/detail/CVE-2022-28391',
-                'https://www.cve.org/CVERecord?id=CVE-2022-28391'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: remote attackers may execute arbitrary code if netstat is used'
-            },
-            {
-              'cve':  'CVE-2022-37434',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '9.8',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-787',
-                'CWE-120'
-              ],
-              'description':   'zlib through 1.2.12 has a heap-based buffer over-read or buffer overflow in inflate in inflate.c via a large gzip header extra field. NOTE: only applications that call inflateGetHeader are affected. Some common applications bundle the affected zlib source code but may be unable to call inflateGetHeader (e.g., see the nodejs/node reference).',
-              'diffID':        'sha256:736164617a669ddbb998475f66b3b602e1eae26c535317d212f8f224c161f00d',
-              'fixedVersions': [
-                '1.2.12-r2'
-              ],
-              'installedVersion': '1.2.12-r0',
-              'packageName':      'zlib',
-              'purl':             'pkg:apk/alpine/zlib@1.2.12-r0?arch=x86_64&distro=3.14.5',
-              'references':       [
-                'http://seclists.org/fulldisclosure/2022/Oct/37',
-                'http://seclists.org/fulldisclosure/2022/Oct/38',
-                'http://seclists.org/fulldisclosure/2022/Oct/41',
-                'http://seclists.org/fulldisclosure/2022/Oct/42',
-                'http://www.openwall.com/lists/oss-security/2022/08/05/2',
-                'http://www.openwall.com/lists/oss-security/2022/08/09/1',
-                'https://access.redhat.com/errata/RHSA-2022:8291',
-                'https://access.redhat.com/security/cve/CVE-2022-37434',
-                'https://bugzilla.redhat.com/2116639',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2053198',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2077431',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2081296',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2116639',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-37434',
-                'https://errata.almalinux.org/9/ALSA-2022-8291.html',
-                'https://errata.rockylinux.org/RLSA-2022:8291',
-                'https://github.com/curl/curl/issues/9271',
-                'https://github.com/ivd38/zlib_overflow',
-                'https://github.com/madler/zlib/blob/21767c654d31d2dccdde4330529775c6c5fd5389/zlib.h#L1062-L1063',
-                'https://github.com/madler/zlib/commit/1eb7682f845ac9e9bf9ae35bbfb3bad5dacbd91d',
-                'https://github.com/madler/zlib/commit/eff308af425b67093bab25f80f1ae950166bece1',
-                'https://github.com/nodejs/node/blob/75b68c6e4db515f76df73af476eccf382bbcb00a/deps/zlib/inflate.c#L762-L764',
-                'https://linux.oracle.com/cve/CVE-2022-37434.html',
-                'https://linux.oracle.com/errata/ELSA-2023-1095.html',
-                'https://lists.debian.org/debian-lts-announce/2022/09/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JWN4VE3JQR4O2SOUS5TXNLANRPMHWV4I/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NMBOJ77A7T7PQCARMDUK75TE6LLESZ3O/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PAVPQNCG3XRLCLNSQRM3KAN5ZFMVXVTY/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/X5U7OTKZSHY2I3ZFJSR2SHFHW72RKGDK/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YRQAI7H4M4RQZ2IWZUEEXECBE5D56BH2/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2022-37434',
-                'https://security.netapp.com/advisory/ntap-20220901-0005/',
-                'https://security.netapp.com/advisory/ntap-20230427-0007/',
-                'https://support.apple.com/kb/HT213488',
-                'https://support.apple.com/kb/HT213489',
-                'https://support.apple.com/kb/HT213490',
-                'https://support.apple.com/kb/HT213491',
-                'https://support.apple.com/kb/HT213493',
-                'https://support.apple.com/kb/HT213494',
-                'https://ubuntu.com/security/notices/USN-5570-1',
-                'https://ubuntu.com/security/notices/USN-5570-2',
-                'https://ubuntu.com/security/notices/USN-5573-1',
-                'https://ubuntu.com/security/notices/USN-6736-1',
-                'https://ubuntu.com/security/notices/USN-6736-2',
-                'https://www.cve.org/CVERecord?id=CVE-2022-37434',
-                'https://www.debian.org/security/2022/dsa-5218'
-              ],
-              'severity':   'CRITICAL',
-              'suppressed': false,
-              'title':      'zlib: heap-based buffer over-read and overflow in inflate() in inflate.c via a large gzip header extra field'
-            }
-          ]
-        }
-      ],
-      'summary': {
-        'critical':   1,
-        'high':       10,
-        'low':        0,
-        'medium':     6,
-        'suppressed': 0,
-        'unknown':    0
-      }
-    }
-  },
-  {
-    'id':    'default/272781d7060d53cf8d7fd80ecf105bbaaca5c2975f0b0bb139350089226460a1',
-    'type':  'storage.sbomscanner.kubewarden.io.vulnerabilityreport',
-    'links': {
-      'patch':  'https://localhost:8005/v1/storage.sbomscanner.kubewarden.io.vulnerabilityreports/default/272781d7060d53cf8d7fd80ecf105bbaaca5c2975f0b0bb139350089226460a1',
-      'remove': 'https://localhost:8005/v1/storage.sbomscanner.kubewarden.io.vulnerabilityreports/default/272781d7060d53cf8d7fd80ecf105bbaaca5c2975f0b0bb139350089226460a1',
-      'self':   'https://localhost:8005/v1/storage.sbomscanner.kubewarden.io.vulnerabilityreports/default/272781d7060d53cf8d7fd80ecf105bbaaca5c2975f0b0bb139350089226460a1',
-      'update': 'https://localhost:8005/v1/storage.sbomscanner.kubewarden.io.vulnerabilityreports/default/272781d7060d53cf8d7fd80ecf105bbaaca5c2975f0b0bb139350089226460a1',
-      'view':   'https://localhost:8005/apis/storage.sbomscanner.kubewarden.io/v1alpha1/namespaces/default/vulnerabilityreports/272781d7060d53cf8d7fd80ecf105bbaaca5c2975f0b0bb139350089226460a1'
-    },
-    'apiVersion':    'storage.sbomscanner.kubewarden.io/v1alpha1',
-    'imageMetadata': {
-      'digest':      'sha256:343d5883d8019a73bcdb761b82d75124ecef7298534b19e1e581f173113b1755',
-      'platform':    'linux/arm/v6',
-      'registry':    'lsong-demo1',
-      'registryURI': 'registry-1.docker.io',
-      'repository':  'library/alpine',
-      'tag':         '3.6.5'
-    },
-    'kind':     'VulnerabilityReport',
-    'metadata': {
-      'creationTimestamp': '2026-01-14T18:51:44Z',
-      'fields':            [
-        '272781d7060d53cf8d7fd80ecf105bbaaca5c2975f0b0bb139350089226460a1',
-        'registry-1.docker.io/library/alpine:3.6.5',
-        'linux/arm/v6',
-        '0 (0 suppressed)'
-      ],
-      'labels': {
-        'app.kubernetes.io/managed-by':          'sbomscanner',
-        'app.kubernetes.io/part-of':             'sbomscanner',
-        'sbomscanner.kubewarden.io/scanjob-uid': '445c600a-c4b6-40b3-bd71-f2d2140a37d5'
-      },
-      'name':            '272781d7060d53cf8d7fd80ecf105bbaaca5c2975f0b0bb139350089226460a1',
-      'namespace':       'default',
-      'ownerReferences': [
-        {
-          'apiVersion':         'storage.sbomscanner.kubewarden.io/v1alpha1',
-          'blockOwnerDeletion': true,
-          'controller':         true,
-          'kind':               'SBOM',
-          'name':               '272781d7060d53cf8d7fd80ecf105bbaaca5c2975f0b0bb139350089226460a1',
-          'uid':                '6c15766c-1ed6-4abc-9b18-b1a634eea13f'
-        }
-      ],
-      'relationships': [
-        {
-          'fromId':   'default/272781d7060d53cf8d7fd80ecf105bbaaca5c2975f0b0bb139350089226460a1',
-          'fromType': 'storage.sbomscanner.kubewarden.io.sbom',
-          'rel':      'owner',
-          'state':    'active',
-          'message':  'Resource is current'
-        }
-      ],
-      'resourceVersion': '1',
-      'state':           {
-        'error':         false,
-        'message':       'Resource is current',
-        'name':          'active',
-        'transitioning': false
-      },
-      'uid': 'fd98ab3d-430f-4077-b0fa-709796c53923'
-    },
-    'report': {
-      'results': [
-        {
-          'class':           'os-pkgs',
-          'target':          '/var/run/worker/trivy.sbom.2692209241.json (alpine 3.6.5)',
-          'type':            'alpine',
-          'vulnerabilities': null
-        }
-      ],
-      'summary': {
-        'critical':   0,
-        'high':       0,
-        'low':        0,
-        'medium':     0,
-        'suppressed': 0,
-        'unknown':    0
-      }
-    }
-  },
-  {
-    'id':    'default/28a582adcd262e6977424820bb691000333cf91ca22dd1510417329cbd95d2d0',
-    'type':  'storage.sbomscanner.kubewarden.io.vulnerabilityreport',
-    'links': {
-      'patch':  'https://localhost:8005/v1/storage.sbomscanner.kubewarden.io.vulnerabilityreports/default/28a582adcd262e6977424820bb691000333cf91ca22dd1510417329cbd95d2d0',
-      'remove': 'https://localhost:8005/v1/storage.sbomscanner.kubewarden.io.vulnerabilityreports/default/28a582adcd262e6977424820bb691000333cf91ca22dd1510417329cbd95d2d0',
-      'self':   'https://localhost:8005/v1/storage.sbomscanner.kubewarden.io.vulnerabilityreports/default/28a582adcd262e6977424820bb691000333cf91ca22dd1510417329cbd95d2d0',
-      'update': 'https://localhost:8005/v1/storage.sbomscanner.kubewarden.io.vulnerabilityreports/default/28a582adcd262e6977424820bb691000333cf91ca22dd1510417329cbd95d2d0',
-      'view':   'https://localhost:8005/apis/storage.sbomscanner.kubewarden.io/v1alpha1/namespaces/default/vulnerabilityreports/28a582adcd262e6977424820bb691000333cf91ca22dd1510417329cbd95d2d0'
-    },
-    'apiVersion':    'storage.sbomscanner.kubewarden.io/v1alpha1',
-    'imageMetadata': {
-      'digest':      'sha256:09addbcf0db5a11803f29bddbdbfd31adce7e40d68750359f9a4eb4dcc54078f',
-      'platform':    'linux/ppc64le',
-      'registry':    'lsong-demo1',
-      'registryURI': 'registry-1.docker.io',
-      'repository':  'library/alpine',
-      'tag':         '3.15.4'
-    },
-    'kind':     'VulnerabilityReport',
-    'metadata': {
-      'creationTimestamp': '2026-01-14T18:52:05Z',
-      'fields':            [
-        '28a582adcd262e6977424820bb691000333cf91ca22dd1510417329cbd95d2d0',
-        'registry-1.docker.io/library/alpine:3.15.4',
-        'linux/ppc64le',
-        '23 (0 suppressed)'
-      ],
-      'labels': {
-        'app.kubernetes.io/managed-by':          'sbomscanner',
-        'app.kubernetes.io/part-of':             'sbomscanner',
-        'sbomscanner.kubewarden.io/scanjob-uid': '445c600a-c4b6-40b3-bd71-f2d2140a37d5'
-      },
-      'name':            '28a582adcd262e6977424820bb691000333cf91ca22dd1510417329cbd95d2d0',
-      'namespace':       'default',
-      'ownerReferences': [
-        {
-          'apiVersion':         'storage.sbomscanner.kubewarden.io/v1alpha1',
-          'blockOwnerDeletion': true,
-          'controller':         true,
-          'kind':               'SBOM',
-          'name':               '28a582adcd262e6977424820bb691000333cf91ca22dd1510417329cbd95d2d0',
-          'uid':                'c5b2fd7f-832e-4f02-a6ba-ac0ca470d861'
-        }
-      ],
-      'relationships': [
-        {
-          'fromId':   'default/28a582adcd262e6977424820bb691000333cf91ca22dd1510417329cbd95d2d0',
-          'fromType': 'storage.sbomscanner.kubewarden.io.sbom',
-          'rel':      'owner',
-          'state':    'active',
-          'message':  'Resource is current'
-        }
-      ],
-      'resourceVersion': '1',
-      'state':           {
-        'error':         false,
-        'message':       'Resource is current',
-        'name':          'active',
-        'transitioning': false
-      },
-      'uid': '340cfcae-7ad7-43e4-922d-6046dff04a98'
-    },
-    'report': {
-      'results': [
-        {
-          'class':           'os-pkgs',
-          'target':          '/var/run/worker/trivy.sbom.2048737747.json (alpine 3.15.4)',
-          'type':            'alpine',
-          'vulnerabilities': [
-            {
-              'cve':  'CVE-2022-4450',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'nvd': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-415'
-              ],
-              'description':   'The function PEM_read_bio_ex() reads a PEM file from a BIO and parses and\ndecodes the "name" (e.g. "CERTIFICATE"), any header data and the payload data.\nIf the function succeeds then the "name_out", "header" and "data" arguments are\npopulated with pointers to buffers containing the relevant decoded data. The\ncaller is responsible for freeing those buffers. It is possible to construct a\nPEM file that results in 0 bytes of payload data. In this case PEM_read_bio_ex()\nwill return a failure code but will populate the header argument with a pointer\nto a buffer that has already been freed. If the caller also frees this buffer\nthen a double free will occur. This will most likely lead to a crash. This\ncould be exploited by an attacker who has the ability to supply malicious PEM\nfiles for parsing to achieve a denial of service attack.\n\nThe functions PEM_read_bio() and PEM_read() are simple wrappers around\nPEM_read_bio_ex() and therefore these functions are also directly affected.\n\nThese functions are also called indirectly by a number of other OpenSSL\nfunctions including PEM_X509_INFO_read_bio_ex() and\nSSL_CTX_use_serverinfo_file() which are also vulnerable. Some OpenSSL internal\nuses of these functions are not vulnerable because the caller does not free the\nheader argument if PEM_read_bio_ex() returns a failure code. These locations\ninclude the PEM_read_bio_TYPE() functions as well as the decoders introduced in\nOpenSSL 3.0.\n\nThe OpenSSL asn1parse command line application is also impacted by this issue.',
-              'diffID':        'sha256:dc05fdc04e08f3f4776a1e45eade65ed6215d0caf91c516b2d5c4db432f3f4fa',
-              'fixedVersions': [
-                '1.1.1t-r0'
-              ],
-              'installedVersion': '1.1.1n-r0',
-              'packageName':      'libcrypto1.1',
-              'purl':             'pkg:apk/alpine/libcrypto1.1@1.1.1n-r0?arch=ppc64le&distro=3.15.4',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2023:2165',
-                'https://access.redhat.com/security/cve/CVE-2022-4450',
-                'https://bugzilla.redhat.com/1960321',
-                'https://bugzilla.redhat.com/2164440',
-                'https://bugzilla.redhat.com/2164487',
-                'https://bugzilla.redhat.com/2164492',
-                'https://bugzilla.redhat.com/2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144000',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144003',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144006',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144008',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144010',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144012',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144015',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144017',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144019',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2145170',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2158412',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164440',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164487',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164488',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164492',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164497',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164499',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164500',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4203',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4304',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4450',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0215',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0216',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0217',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0286',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0401',
-                'https://errata.almalinux.org/9/ALSA-2023-2165.html',
-                'https://errata.rockylinux.org/RLSA-2023:0946',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=63bcf189be73a9cc1264059bed6f57974be74a83',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=bbcf509bd046b34cca19c766bbddc31683d0858b',
-                'https://linux.oracle.com/cve/CVE-2022-4450.html',
-                'https://linux.oracle.com/errata/ELSA-2023-32791.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2022-4450',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0003',
-                'https://rustsec.org/advisories/RUSTSEC-2023-0010.html',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://ubuntu.com/security/notices/USN-5844-1',
-                'https://ubuntu.com/security/notices/USN-6564-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2022-4450',
-                'https://www.openssl.org/news/secadv/20230207.txt'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: double free after calling PEM_read_bio_ex'
-            },
-            {
-              'cve':  'CVE-2023-0215',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'nvd': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   'The public API function BIO_new_NDEF is a helper function used for streaming\nASN.1 data via a BIO. It is primarily used internally to OpenSSL to support the\nSMIME, CMS and PKCS7 streaming capabilities, but may also be called directly by\nend user applications.\n\nThe function receives a BIO from the caller, prepends a new BIO_f_asn1 filter\nBIO onto the front of it to form a BIO chain, and then returns the new head of\nthe BIO chain to the caller. Under certain conditions, for example if a CMS\nrecipient public key is invalid, the new filter BIO is freed and the function\nreturns a NULL result indicating a failure. However, in this case, the BIO chain\nis not properly cleaned up and the BIO passed by the caller still retains\ninternal pointers to the previously freed filter BIO. If the caller then goes on\nto call BIO_pop() on the BIO then a use-after-free will occur. This will most\nlikely result in a crash.\n\n\n\nThis scenario occurs directly in the internal function B64_write_ASN1() which\nmay cause BIO_new_NDEF() to be called and will subsequently call BIO_pop() on\nthe BIO. This internal function is in turn called by the public API functions\nPEM_write_bio_ASN1_stream, PEM_write_bio_CMS_stream, PEM_write_bio_PKCS7_stream,\nSMIME_write_ASN1, SMIME_write_CMS and SMIME_write_PKCS7.\n\nOther public API functions that may be impacted by this include\ni2d_ASN1_bio_stream, BIO_new_CMS, BIO_new_PKCS7, i2d_CMS_bio_stream and\ni2d_PKCS7_bio_stream.\n\nThe OpenSSL cms and smime command line applications are similarly affected.',
-              'diffID':        'sha256:dc05fdc04e08f3f4776a1e45eade65ed6215d0caf91c516b2d5c4db432f3f4fa',
-              'fixedVersions': [
-                '1.1.1t-r0'
-              ],
-              'installedVersion': '1.1.1n-r0',
-              'packageName':      'libcrypto1.1',
-              'purl':             'pkg:apk/alpine/libcrypto1.1@1.1.1n-r0?arch=ppc64le&distro=3.15.4',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2023:2165',
-                'https://access.redhat.com/security/cve/CVE-2023-0215',
-                'https://bugzilla.redhat.com/1960321',
-                'https://bugzilla.redhat.com/2164440',
-                'https://bugzilla.redhat.com/2164487',
-                'https://bugzilla.redhat.com/2164492',
-                'https://bugzilla.redhat.com/2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144000',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144003',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144006',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144008',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144010',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144012',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144015',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144017',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144019',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2145170',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2158412',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164440',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164487',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164488',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164492',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164497',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164499',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164500',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4203',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4304',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4450',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0215',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0216',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0217',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0286',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0401',
-                'https://errata.almalinux.org/9/ALSA-2023-2165.html',
-                'https://errata.rockylinux.org/RLSA-2023:0946',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=8818064ce3c3c0f1b740a5aaba2a987e75bfbafd',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=9816136fe31d92ace4037d5da5257f763aeeb4eb',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=c3829dd8825c654652201e16f8a0a0c46ee3f344',
-                'https://linux.oracle.com/cve/CVE-2023-0215.html',
-                'https://linux.oracle.com/errata/ELSA-2023-32791.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-0215',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0003',
-                'https://rustsec.org/advisories/RUSTSEC-2023-0009.html',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://security.netapp.com/advisory/ntap-20230427-0007',
-                'https://security.netapp.com/advisory/ntap-20230427-0007/',
-                'https://security.netapp.com/advisory/ntap-20230427-0009',
-                'https://security.netapp.com/advisory/ntap-20230427-0009/',
-                'https://security.netapp.com/advisory/ntap-20240621-0006',
-                'https://security.netapp.com/advisory/ntap-20240621-0006/',
-                'https://ubuntu.com/security/notices/USN-5844-1',
-                'https://ubuntu.com/security/notices/USN-5845-1',
-                'https://ubuntu.com/security/notices/USN-5845-2',
-                'https://ubuntu.com/security/notices/USN-6564-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-0215',
-                'https://www.openssl.org/news/secadv/20230207.txt'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: use-after-free following BIO_new_NDEF'
-            },
-            {
-              'cve':  'CVE-2023-0286',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '7.4',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H'
-                },
-                'nvd': {
-                  'v3score':  '7.4',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.4',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-843'
-              ],
-              'description':   'There is a type confusion vulnerability relating to X.400 address processing\ninside an X.509 GeneralName. X.400 addresses were parsed as an ASN1_STRING but\nthe public structure definition for GENERAL_NAME incorrectly specified the type\nof the x400Address field as ASN1_TYPE. This field is subsequently interpreted by\nthe OpenSSL function GENERAL_NAME_cmp as an ASN1_TYPE rather than an\nASN1_STRING.\n\nWhen CRL checking is enabled (i.e. the application sets the\nX509_V_FLAG_CRL_CHECK flag), this vulnerability may allow an attacker to pass\narbitrary pointers to a memcmp call, enabling them to read memory contents or\nenact a denial of service. In most cases, the attack requires the attacker to\nprovide both the certificate chain and CRL, neither of which need to have a\nvalid signature. If the attacker only controls one of these inputs, the other\ninput must already contain an X.400 address as a CRL distribution point, which\nis uncommon. As such, this vulnerability is most likely to only affect\napplications which have implemented their own functionality for retrieving CRLs\nover a network.',
-              'diffID':        'sha256:dc05fdc04e08f3f4776a1e45eade65ed6215d0caf91c516b2d5c4db432f3f4fa',
-              'fixedVersions': [
-                '1.1.1t-r0'
-              ],
-              'installedVersion': '1.1.1n-r0',
-              'packageName':      'libcrypto1.1',
-              'purl':             'pkg:apk/alpine/libcrypto1.1@1.1.1n-r0?arch=ppc64le&distro=3.15.4',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2025:7937',
-                'https://access.redhat.com/security/cve/CVE-2023-0286',
-                'https://access.redhat.com/security/cve/cve-2023-0286',
-                'https://bugzilla.redhat.com/2164440',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144000',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144003',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144006',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144008',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144010',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144012',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144015',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144017',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144019',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2145170',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2158412',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164440',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164487',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164488',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164492',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164497',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164499',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164500',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4203',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4304',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4450',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0215',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0216',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0217',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0286',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0401',
-                'https://errata.almalinux.org/9/ALSA-2025-7937.html',
-                'https://errata.rockylinux.org/RLSA-2023:0946',
-                'https://ftp.openbsd.org/pub/OpenBSD/LibreSSL/libressl-3.6.2-relnotes.txt',
-                'https://ftp.openbsd.org/pub/OpenBSD/patches/7.2/common/018_x509.patch.sig',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=2c6c9d439b484e1ba9830d8454a34fa4f80fdfe9',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=2f7530077e0ef79d98718138716bc51ca0cad658',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=fd2af07dc083a350c959147097003a14a5e8ac4d',
-                'https://github.com/pyca/cryptography',
-                'https://github.com/pyca/cryptography/security/advisories/GHSA-x4qr-2fvf-3mr5',
-                'https://linux.oracle.com/cve/CVE-2023-0286.html',
-                'https://linux.oracle.com/errata/ELSA-2025-7937.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-0286',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0003',
-                'https://rustsec.org/advisories/RUSTSEC-2023-0006.html',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://ubuntu.com/security/notices/USN-5844-1',
-                'https://ubuntu.com/security/notices/USN-5845-1',
-                'https://ubuntu.com/security/notices/USN-5845-2',
-                'https://ubuntu.com/security/notices/USN-6564-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-0286',
-                'https://www.openssl.org/news/secadv/20230207.txt'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: X.400 address type confusion in X.509 GeneralName'
-            },
-            {
-              'cve':  'CVE-2023-0464',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-295'
-              ],
-              'description':   "A security vulnerability has been identified in all supported versions\n\nof OpenSSL related to the verification of X.509 certificate chains\nthat include policy constraints.  Attackers may be able to exploit this\nvulnerability by creating a malicious certificate chain that triggers\nexponential use of computational resources, leading to a denial-of-service\n(DoS) attack on affected systems.\n\nPolicy processing is disabled by default but can be enabled by passing\nthe `-policy' argument to the command line utilities or by calling the\n`X509_VERIFY_PARAM_set1_policies()' function.",
-              'diffID':        'sha256:dc05fdc04e08f3f4776a1e45eade65ed6215d0caf91c516b2d5c4db432f3f4fa',
-              'fixedVersions': [
-                '1.1.1t-r2'
-              ],
-              'installedVersion': '1.1.1n-r0',
-              'packageName':      'libcrypto1.1',
-              'purl':             'pkg:apk/alpine/libcrypto1.1@1.1.1n-r0?arch=ppc64le&distro=3.15.4',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2023:3722',
-                'https://access.redhat.com/security/cve/CVE-2023-0464',
-                'https://bugzilla.redhat.com/2181082',
-                'https://bugzilla.redhat.com/2182561',
-                'https://bugzilla.redhat.com/2182565',
-                'https://bugzilla.redhat.com/2188461',
-                'https://bugzilla.redhat.com/2207947',
-                'https://errata.almalinux.org/9/ALSA-2023-3722.html',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=2017771e2db3e2b96f89bbe8766c3209f6a99545',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=2dcd4f1e3115f38cefa43e3efbe9b801c27e642e',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=879f7080d7e141f415c79eaa3a8ac4a3dad0348b',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=959c59c7a0164117e7f8366466a32bb1f8d77ff1',
-                'https://linux.oracle.com/cve/CVE-2023-0464.html',
-                'https://linux.oracle.com/errata/ELSA-2023-3722.html',
-                'https://lists.debian.org/debian-lts-announce/2023/06/msg00011.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-0464',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://security.netapp.com/advisory/ntap-20230406-0006/',
-                'https://security.netapp.com/advisory/ntap-20240621-0006/',
-                'https://ubuntu.com/security/notices/USN-6039-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.couchbase.com/alerts/',
-                'https://www.cve.org/CVERecord?id=CVE-2023-0464',
-                'https://www.debian.org/security/2023/dsa-5417',
-                'https://www.openssl.org/news/secadv/20230322.txt'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: Denial of service by excessive resource usage in verifying X509 policy constraints'
-            },
-            {
-              'cve':  'CVE-2022-2097',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N'
-                },
-                'nvd': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N'
-                },
-                'redhat': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-327'
-              ],
-              'description':   "AES OCB mode for 32-bit x86 platforms using the AES-NI assembly optimised implementation will not encrypt the entirety of the data under some circumstances. This could reveal sixteen bytes of data that was preexisting in the memory that wasn't written. In the special case of \"in place\" encryption, sixteen bytes of the plaintext would be revealed. Since OpenSSL does not support OCB based cipher suites for TLS and DTLS, they are both unaffected. Fixed in OpenSSL 3.0.5 (Affected 3.0.0-3.0.4). Fixed in OpenSSL 1.1.1q (Affected 1.1.1-1.1.1p).",
-              'diffID':        'sha256:dc05fdc04e08f3f4776a1e45eade65ed6215d0caf91c516b2d5c4db432f3f4fa',
-              'fixedVersions': [
-                '1.1.1q-r0'
-              ],
-              'installedVersion': '1.1.1n-r0',
-              'packageName':      'libcrypto1.1',
-              'purl':             'pkg:apk/alpine/libcrypto1.1@1.1.1n-r0?arch=ppc64le&distro=3.15.4',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2022:6224',
-                'https://access.redhat.com/security/cve/CVE-2022-2097',
-                'https://bugzilla.redhat.com/2081494',
-                'https://bugzilla.redhat.com/2087911',
-                'https://bugzilla.redhat.com/2087913',
-                'https://bugzilla.redhat.com/2097310',
-                'https://bugzilla.redhat.com/2104905',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2081494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2097310',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2100554',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2104905',
-                'https://cert-portal.siemens.com/productcert/pdf/ssa-332410.pdf',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-1292',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-2068',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-2097',
-                'https://errata.almalinux.org/9/ALSA-2022-6224.html',
-                'https://errata.rockylinux.org/RLSA-2022:5818',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=919925673d6c9cfed3c1085497f5dfbbed5fc431',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=a98f339ddd7e8f487d6e0088d4a9a42324885a93',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=919925673d6c9cfed3c1085497f5dfbbed5fc431',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=a98f339ddd7e8f487d6e0088d4a9a42324885a93',
-                'https://github.com/alexcrichton/openssl-src-rs',
-                'https://linux.oracle.com/cve/CVE-2022-2097.html',
-                'https://linux.oracle.com/errata/ELSA-2022-9955.html',
-                'https://lists.debian.org/debian-lts-announce/2023/02/msg00019.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/R6CK57NBQFTPUMXAPJURCGXUYT76NQAK',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/R6CK57NBQFTPUMXAPJURCGXUYT76NQAK/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/V6567JERRHHJW2GNGJGKDRNHR7SNPZK7',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/V6567JERRHHJW2GNGJGKDRNHR7SNPZK7/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VCMNWKERPBKOEBNL7CLTTX3ZZCZLH7XA',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VCMNWKERPBKOEBNL7CLTTX3ZZCZLH7XA/',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/R6CK57NBQFTPUMXAPJURCGXUYT76NQAK',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/R6CK57NBQFTPUMXAPJURCGXUYT76NQAK/',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/V6567JERRHHJW2GNGJGKDRNHR7SNPZK7',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/V6567JERRHHJW2GNGJGKDRNHR7SNPZK7/',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/VCMNWKERPBKOEBNL7CLTTX3ZZCZLH7XA',
-                'https://nvd.nist.gov/vuln/detail/CVE-2022-2097',
-                'https://rustsec.org/advisories/RUSTSEC-2022-0032.html',
-                'https://security.gentoo.org/glsa/202210-02',
-                'https://security.netapp.com/advisory/ntap-20220715-0011',
-                'https://security.netapp.com/advisory/ntap-20220715-0011/',
-                'https://security.netapp.com/advisory/ntap-20230420-0008',
-                'https://security.netapp.com/advisory/ntap-20230420-0008/',
-                'https://security.netapp.com/advisory/ntap-20240621-0006',
-                'https://security.netapp.com/advisory/ntap-20240621-0006/',
-                'https://ubuntu.com/security/notices/USN-5502-1',
-                'https://ubuntu.com/security/notices/USN-6457-1',
-                'https://www.cve.org/CVERecord?id=CVE-2022-2097',
-                'https://www.debian.org/security/2023/dsa-5343',
-                'https://www.openssl.org/news/secadv/20220705.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: AES OCB fails to encrypt some bytes'
-            },
-            {
-              'cve':  'CVE-2022-4304',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N'
-                },
-                'nvd': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N'
-                },
-                'redhat': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-203'
-              ],
-              'description':   'A timing based side channel exists in the OpenSSL RSA Decryption implementation\nwhich could be sufficient to recover a plaintext across a network in a\nBleichenbacher style attack. To achieve a successful decryption an attacker\nwould have to be able to send a very large number of trial messages for\ndecryption. The vulnerability affects all RSA padding modes: PKCS#1 v1.5,\nRSA-OEAP and RSASVE.\n\nFor example, in a TLS connection, RSA is commonly used by a client to send an\nencrypted pre-master secret to the server. An attacker that had observed a\ngenuine connection between a client and a server could use this flaw to send\ntrial messages to the server and record the time taken to process them. After a\nsufficiently large number of messages the attacker could recover the pre-master\nsecret used for the original connection and thus be able to decrypt the\napplication data sent over that connection.',
-              'diffID':        'sha256:dc05fdc04e08f3f4776a1e45eade65ed6215d0caf91c516b2d5c4db432f3f4fa',
-              'fixedVersions': [
-                '1.1.1t-r0'
-              ],
-              'installedVersion': '1.1.1n-r0',
-              'packageName':      'libcrypto1.1',
-              'purl':             'pkg:apk/alpine/libcrypto1.1@1.1.1n-r0?arch=ppc64le&distro=3.15.4',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2023:2165',
-                'https://access.redhat.com/security/cve/CVE-2022-4304',
-                'https://bugzilla.redhat.com/1960321',
-                'https://bugzilla.redhat.com/2164440',
-                'https://bugzilla.redhat.com/2164487',
-                'https://bugzilla.redhat.com/2164492',
-                'https://bugzilla.redhat.com/2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144000',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144003',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144006',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144008',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144010',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144012',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144015',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144017',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144019',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2145170',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2158412',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164440',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164487',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164488',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164492',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164497',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164499',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164500',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4203',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4304',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4450',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0215',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0216',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0217',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0286',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0401',
-                'https://errata.almalinux.org/9/ALSA-2023-2165.html',
-                'https://errata.rockylinux.org/RLSA-2023:0946',
-                'https://linux.oracle.com/cve/CVE-2022-4304.html',
-                'https://linux.oracle.com/errata/ELSA-2023-32791.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2022-4304',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0003',
-                'https://rustsec.org/advisories/RUSTSEC-2023-0007.html',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://ubuntu.com/security/notices/USN-5844-1',
-                'https://ubuntu.com/security/notices/USN-6564-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2022-4304',
-                'https://www.openssl.org/news/secadv/20230207.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: timing attack in RSA Decryption implementation'
-            },
-            {
-              'cve':  'CVE-2023-0465',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N'
-                },
-                'redhat': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-295'
-              ],
-              'description':   "Applications that use a non-default option when verifying certificates may be\nvulnerable to an attack from a malicious CA to circumvent certain checks.\n\nInvalid certificate policies in leaf certificates are silently ignored by\nOpenSSL and other certificate policy checks are skipped for that certificate.\nA malicious CA could use this to deliberately assert invalid certificate policies\nin order to circumvent policy checking on the certificate altogether.\n\nPolicy processing is disabled by default but can be enabled by passing\nthe `-policy' argument to the command line utilities or by calling the\n`X509_VERIFY_PARAM_set1_policies()' function.",
-              'diffID':        'sha256:dc05fdc04e08f3f4776a1e45eade65ed6215d0caf91c516b2d5c4db432f3f4fa',
-              'fixedVersions': [
-                '1.1.1t-r2'
-              ],
-              'installedVersion': '1.1.1n-r0',
-              'packageName':      'libcrypto1.1',
-              'purl':             'pkg:apk/alpine/libcrypto1.1@1.1.1n-r0?arch=ppc64le&distro=3.15.4',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2023:3722',
-                'https://access.redhat.com/security/cve/CVE-2023-0465',
-                'https://bugzilla.redhat.com/2181082',
-                'https://bugzilla.redhat.com/2182561',
-                'https://bugzilla.redhat.com/2182565',
-                'https://bugzilla.redhat.com/2188461',
-                'https://bugzilla.redhat.com/2207947',
-                'https://errata.almalinux.org/9/ALSA-2023-3722.html',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=10325176f3d3e98c6e2b3bf5ab1e3b334de6947a',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=1dd43e0709fece299b15208f36cc7c76209ba0bb',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=b013765abfa80036dc779dd0e50602c57bb3bf95',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=facfb1ab745646e97a1920977ae4a9965ea61d5c',
-                'https://linux.oracle.com/cve/CVE-2023-0465.html',
-                'https://linux.oracle.com/errata/ELSA-2023-3722.html',
-                'https://lists.debian.org/debian-lts-announce/2023/06/msg00011.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-0465',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://security.netapp.com/advisory/ntap-20230414-0001/',
-                'https://ubuntu.com/security/notices/USN-6039-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-0465',
-                'https://www.debian.org/security/2023/dsa-5417',
-                'https://www.openssl.org/news/secadv/20230328.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: Invalid certificate policies in leaf certificates are silently ignored'
-            },
-            {
-              'cve':  'CVE-2023-2650',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '6.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-770'
-              ],
-              'description':   "Issue summary: Processing some specially crafted ASN.1 object identifiers or\ndata containing them may be very slow.\n\nImpact summary: Applications that use OBJ_obj2txt() directly, or use any of\nthe OpenSSL subsystems OCSP, PKCS7/SMIME, CMS, CMP/CRMF or TS with no message\nsize limit may experience notable to very long delays when processing those\nmessages, which may lead to a Denial of Service.\n\nAn OBJECT IDENTIFIER is composed of a series of numbers - sub-identifiers -\nmost of which have no size limit.  OBJ_obj2txt() may be used to translate\nan ASN.1 OBJECT IDENTIFIER given in DER encoding form (using the OpenSSL\ntype ASN1_OBJECT) to its canonical numeric text form, which are the\nsub-identifiers of the OBJECT IDENTIFIER in decimal form, separated by\nperiods.\n\nWhen one of the sub-identifiers in the OBJECT IDENTIFIER is very large\n(these are sizes that are seen as absurdly large, taking up tens or hundreds\nof KiBs), the translation to a decimal number in text may take a very long\ntime.  The time complexity is O(n^2) with 'n' being the size of the\nsub-identifiers in bytes (*).\n\nWith OpenSSL 3.0, support to fetch cryptographic algorithms using names /\nidentifiers in string form was introduced.  This includes using OBJECT\nIDENTIFIERs in canonical numeric text form as identifiers for fetching\nalgorithms.\n\nSuch OBJECT IDENTIFIERs may be received through the ASN.1 structure\nAlgorithmIdentifier, which is commonly used in multiple protocols to specify\nwhat cryptographic algorithm should be used to sign or verify, encrypt or\ndecrypt, or digest passed data.\n\nApplications that call OBJ_obj2txt() directly with untrusted data are\naffected, with any version of OpenSSL.  If the use is for the mere purpose\nof display, the severity is considered low.\n\nIn OpenSSL 3.0 and newer, this affects the subsystems OCSP, PKCS7/SMIME,\nCMS, CMP/CRMF or TS.  It also impacts anything that processes X.509\ncertificates, including simple things like verifying its signature.\n\nThe impact on TLS is relatively low, because all versions of OpenSSL have a\n100KiB limit on the peer's certificate chain.  Additionally, this only\nimpacts clients, or servers that have explicitly enabled client\nauthentication.\n\nIn OpenSSL 1.1.1 and 1.0.2, this only affects displaying diverse objects,\nsuch as X.509 certificates.  This is assumed to not happen in such a way\nthat it would cause a Denial of Service, so these versions are considered\nnot affected by this issue in such a way that it would be cause for concern,\nand the severity is therefore considered low.",
-              'diffID':        'sha256:dc05fdc04e08f3f4776a1e45eade65ed6215d0caf91c516b2d5c4db432f3f4fa',
-              'fixedVersions': [
-                '1.1.1u-r0'
-              ],
-              'installedVersion': '1.1.1n-r0',
-              'packageName':      'libcrypto1.1',
-              'purl':             'pkg:apk/alpine/libcrypto1.1@1.1.1n-r0?arch=ppc64le&distro=3.15.4',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2023/05/30/1',
-                'https://access.redhat.com/errata/RHSA-2023:6330',
-                'https://access.redhat.com/security/cve/CVE-2023-2650',
-                'https://bugzilla.redhat.com/1858038',
-                'https://bugzilla.redhat.com/2207947',
-                'https://errata.almalinux.org/9/ALSA-2023-6330.html',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=423a2bc737a908ad0c77bda470b2b59dc879936b',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=853c5e56ee0b8650c73140816bb8b91d6163422c',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=9e209944b35cf82368071f160a744b6178f9b098',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=db779b0e10b047f2585615e0b8f2acdf21f8544a',
-                'https://linux.oracle.com/cve/CVE-2023-2650.html',
-                'https://linux.oracle.com/errata/ELSA-2023-6330.html',
-                'https://lists.debian.org/debian-lts-announce/2023/06/msg00011.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-2650',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0009',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://security.netapp.com/advisory/ntap-20230703-0001/',
-                'https://security.netapp.com/advisory/ntap-20231027-0009/',
-                'https://ubuntu.com/security/notices/USN-6119-1',
-                'https://ubuntu.com/security/notices/USN-6188-1',
-                'https://ubuntu.com/security/notices/USN-6672-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-2650',
-                'https://www.debian.org/security/2023/dsa-5417',
-                'https://www.openssl.org/news/secadv/20230530.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: Possible DoS translating ASN.1 object identifiers'
-            },
-            {
-              'cve':  'CVE-2023-3446',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L'
-                },
-                'redhat': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L'
-                }
-              },
-              'cwes': [
-                'CWE-606',
-                'CWE-1333'
-              ],
-              'description':   "Issue summary: Checking excessively long DH keys or parameters may be very slow.\n\nImpact summary: Applications that use the functions DH_check(), DH_check_ex()\nor EVP_PKEY_param_check() to check a DH key or DH parameters may experience long\ndelays. Where the key or parameters that are being checked have been obtained\nfrom an untrusted source this may lead to a Denial of Service.\n\nThe function DH_check() performs various checks on DH parameters. One of those\nchecks confirms that the modulus ('p' parameter) is not too large. Trying to use\na very large modulus is slow and OpenSSL will not normally use a modulus which\nis over 10,000 bits in length.\n\nHowever the DH_check() function checks numerous aspects of the key or parameters\nthat have been supplied. Some of those checks use the supplied modulus value\neven if it has already been found to be too large.\n\nAn application that calls DH_check() and supplies a key or parameters obtained\nfrom an untrusted source could be vulernable to a Denial of Service attack.\n\nThe function DH_check() is itself called by a number of other OpenSSL functions.\nAn application calling any of those other functions may similarly be affected.\nThe other functions affected by this are DH_check_ex() and\nEVP_PKEY_param_check().\n\nAlso vulnerable are the OpenSSL dhparam and pkeyparam command line applications\nwhen using the '-check' option.\n\nThe OpenSSL SSL/TLS implementation is not affected by this issue.\nThe OpenSSL 3.0 and 3.1 FIPS providers are not affected by this issue.",
-              'diffID':        'sha256:dc05fdc04e08f3f4776a1e45eade65ed6215d0caf91c516b2d5c4db432f3f4fa',
-              'fixedVersions': [
-                '1.1.1u-r2'
-              ],
-              'installedVersion': '1.1.1n-r0',
-              'packageName':      'libcrypto1.1',
-              'purl':             'pkg:apk/alpine/libcrypto1.1@1.1.1n-r0?arch=ppc64le&distro=3.15.4',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2023/07/19/4',
-                'http://www.openwall.com/lists/oss-security/2023/07/19/5',
-                'http://www.openwall.com/lists/oss-security/2023/07/19/6',
-                'http://www.openwall.com/lists/oss-security/2023/07/31/1',
-                'http://www.openwall.com/lists/oss-security/2024/05/16/1',
-                'https://access.redhat.com/errata/RHSA-2024:2447',
-                'https://access.redhat.com/security/cve/CVE-2023-3446',
-                'https://bugzilla.redhat.com/2223016',
-                'https://bugzilla.redhat.com/2224962',
-                'https://bugzilla.redhat.com/2227852',
-                'https://bugzilla.redhat.com/2248616',
-                'https://bugzilla.redhat.com/2257571',
-                'https://bugzilla.redhat.com/2258502',
-                'https://bugzilla.redhat.com/2259944',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2224962',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2257582',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2257583',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2258677',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2258688',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2258691',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2258694',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2258700',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-36763',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-36764',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3446',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45229',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45231',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45232',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45233',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45235',
-                'https://errata.almalinux.org/9/ALSA-2024-2447.html',
-                'https://errata.rockylinux.org/RLSA-2024:2264',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=1fa20cf2f506113c761777127a38bce5068740eb',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=8780a896543a654e757db1b9396383f9d8095528',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=9a0a4d3c1e7138915563c0df4fe6a3f9377b839c',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=fc9867c1e03c22ebf56943be205202e576aabf23',
-                'https://linux.oracle.com/cve/CVE-2023-3446.html',
-                'https://linux.oracle.com/errata/ELSA-2024-2447.html',
-                'https://lists.debian.org/debian-lts-announce/2023/08/msg00019.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-3446',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://security.netapp.com/advisory/ntap-20230803-0011/',
-                'https://ubuntu.com/security/notices/USN-6435-1',
-                'https://ubuntu.com/security/notices/USN-6435-2',
-                'https://ubuntu.com/security/notices/USN-6450-1',
-                'https://ubuntu.com/security/notices/USN-6709-1',
-                'https://ubuntu.com/security/notices/USN-7018-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-3446',
-                'https://www.openssl.org/news/secadv/20230719.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: Excessive time spent checking DH keys and parameters'
-            },
-            {
-              'cve':  'CVE-2023-3817',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L'
-                },
-                'redhat': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L'
-                }
-              },
-              'cwes': [
-                'CWE-606',
-                'CWE-834'
-              ],
-              'description':   'Issue summary: Checking excessively long DH keys or parameters may be very slow.\n\nImpact summary: Applications that use the functions DH_check(), DH_check_ex()\nor EVP_PKEY_param_check() to check a DH key or DH parameters may experience long\ndelays. Where the key or parameters that are being checked have been obtained\nfrom an untrusted source this may lead to a Denial of Service.\n\nThe function DH_check() performs various checks on DH parameters. After fixing\nCVE-2023-3446 it was discovered that a large q parameter value can also trigger\nan overly long computation during some of these checks. A correct q value,\nif present, cannot be larger than the modulus p parameter, thus it is\nunnecessary to perform these checks if q is larger than p.\n\nAn application that calls DH_check() and supplies a key or parameters obtained\nfrom an untrusted source could be vulnerable to a Denial of Service attack.\n\nThe function DH_check() is itself called by a number of other OpenSSL functions.\nAn application calling any of those other functions may similarly be affected.\nThe other functions affected by this are DH_check_ex() and\nEVP_PKEY_param_check().\n\nAlso vulnerable are the OpenSSL dhparam and pkeyparam command line applications\nwhen using the "-check" option.\n\nThe OpenSSL SSL/TLS implementation is not affected by this issue.\n\nThe OpenSSL 3.0 and 3.1 FIPS providers are not affected by this issue.',
-              'diffID':        'sha256:dc05fdc04e08f3f4776a1e45eade65ed6215d0caf91c516b2d5c4db432f3f4fa',
-              'fixedVersions': [
-                '1.1.1v-r0'
-              ],
-              'installedVersion': '1.1.1n-r0',
-              'packageName':      'libcrypto1.1',
-              'purl':             'pkg:apk/alpine/libcrypto1.1@1.1.1n-r0?arch=ppc64le&distro=3.15.4',
-              'references':       [
-                'http://seclists.org/fulldisclosure/2023/Jul/43',
-                'http://www.openwall.com/lists/oss-security/2023/07/31/1',
-                'http://www.openwall.com/lists/oss-security/2023/09/22/11',
-                'http://www.openwall.com/lists/oss-security/2023/09/22/9',
-                'http://www.openwall.com/lists/oss-security/2023/11/06/2',
-                'https://access.redhat.com/errata/RHSA-2024:2447',
-                'https://access.redhat.com/security/cve/CVE-2023-3817',
-                'https://bugzilla.redhat.com/2223016',
-                'https://bugzilla.redhat.com/2224962',
-                'https://bugzilla.redhat.com/2227852',
-                'https://bugzilla.redhat.com/2248616',
-                'https://bugzilla.redhat.com/2257571',
-                'https://bugzilla.redhat.com/2258502',
-                'https://bugzilla.redhat.com/2259944',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2224962',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2227852',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2248616',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2270358',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3446',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3817',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-5678',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-2408',
-                'https://errata.almalinux.org/9/ALSA-2024-2447.html',
-                'https://errata.rockylinux.org/RLSA-2023:7877',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=6a1eb62c29db6cb5eec707f9338aee00f44e26f5',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=869ad69aadd985c7b8ca6f4e5dd0eb274c9f3644',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=9002fd07327a91f35ba6c1307e71fa6fd4409b7f',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=91ddeba0f2269b017dc06c46c993a788974b1aa5',
-                'https://linux.oracle.com/cve/CVE-2023-3817.html',
-                'https://linux.oracle.com/errata/ELSA-2024-2447.html',
-                'https://lists.debian.org/debian-lts-announce/2023/08/msg00019.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-3817',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://security.netapp.com/advisory/ntap-20230818-0014/',
-                'https://security.netapp.com/advisory/ntap-20231027-0008/',
-                'https://security.netapp.com/advisory/ntap-20240621-0006/',
-                'https://ubuntu.com/security/notices/USN-6435-1',
-                'https://ubuntu.com/security/notices/USN-6435-2',
-                'https://ubuntu.com/security/notices/USN-6450-1',
-                'https://ubuntu.com/security/notices/USN-6709-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-3817',
-                'https://www.openssl.org/news/secadv/20230731.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'OpenSSL: Excessive time spent checking DH q parameter value'
-            },
-            {
-              'cve':  'CVE-2023-5678',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L'
-                },
-                'redhat': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L'
-                }
-              },
-              'cwes': [
-                'CWE-606',
-                'CWE-754'
-              ],
-              'description':   "Issue summary: Generating excessively long X9.42 DH keys or checking\nexcessively long X9.42 DH keys or parameters may be very slow.\n\nImpact summary: Applications that use the functions DH_generate_key() to\ngenerate an X9.42 DH key may experience long delays.  Likewise, applications\nthat use DH_check_pub_key(), DH_check_pub_key_ex() or EVP_PKEY_public_check()\nto check an X9.42 DH key or X9.42 DH parameters may experience long delays.\nWhere the key or parameters that are being checked have been obtained from\nan untrusted source this may lead to a Denial of Service.\n\nWhile DH_check() performs all the necessary checks (as of CVE-2023-3817),\nDH_check_pub_key() doesn't make any of these checks, and is therefore\nvulnerable for excessively large P and Q parameters.\n\nLikewise, while DH_generate_key() performs a check for an excessively large\nP, it doesn't check for an excessively large Q.\n\nAn application that calls DH_generate_key() or DH_check_pub_key() and\nsupplies a key or parameters obtained from an untrusted source could be\nvulnerable to a Denial of Service attack.\n\nDH_generate_key() and DH_check_pub_key() are also called by a number of\nother OpenSSL functions.  An application calling any of those other\nfunctions may similarly be affected.  The other functions affected by this\nare DH_check_pub_key_ex(), EVP_PKEY_public_check(), and EVP_PKEY_generate().\n\nAlso vulnerable are the OpenSSL pkey command line application when using the\n\"-pubcheck\" option, as well as the OpenSSL genpkey command line application.\n\nThe OpenSSL SSL/TLS implementation is not affected by this issue.\n\nThe OpenSSL 3.0 and 3.1 FIPS providers are not affected by this issue.",
-              'diffID':        'sha256:dc05fdc04e08f3f4776a1e45eade65ed6215d0caf91c516b2d5c4db432f3f4fa',
-              'fixedVersions': [
-                '1.1.1w-r1'
-              ],
-              'installedVersion': '1.1.1n-r0',
-              'packageName':      'libcrypto1.1',
-              'purl':             'pkg:apk/alpine/libcrypto1.1@1.1.1n-r0?arch=ppc64le&distro=3.15.4',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2024/03/11/1',
-                'https://access.redhat.com/errata/RHSA-2024:2447',
-                'https://access.redhat.com/security/cve/CVE-2023-5678',
-                'https://bugzilla.redhat.com/2223016',
-                'https://bugzilla.redhat.com/2224962',
-                'https://bugzilla.redhat.com/2227852',
-                'https://bugzilla.redhat.com/2248616',
-                'https://bugzilla.redhat.com/2257571',
-                'https://bugzilla.redhat.com/2258502',
-                'https://bugzilla.redhat.com/2259944',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2224962',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2227852',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2248616',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2270358',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3446',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3817',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-5678',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-2408',
-                'https://errata.almalinux.org/9/ALSA-2024-2447.html',
-                'https://errata.rockylinux.org/RLSA-2023:7877',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=34efaef6c103d636ab507a0cc34dca4d3aecc055',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=710fee740904b6290fef0dd5536fbcedbc38ff0c',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=db925ae2e65d0d925adef429afc37f75bd1c2017',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=ddeb4b6c6d527e54ce9a99cba785c0f7776e54b6',
-                'https://linux.oracle.com/cve/CVE-2023-5678.html',
-                'https://linux.oracle.com/errata/ELSA-2024-2447.html',
-                'https://lists.debian.org/debian-lts-announce/2024/10/msg00033.html',
-                'https://lists.debian.org/debian-lts-announce/2024/11/msg00000.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-5678',
-                'https://security.netapp.com/advisory/ntap-20231130-0010/',
-                'https://ubuntu.com/security/notices/USN-6622-1',
-                'https://ubuntu.com/security/notices/USN-6632-1',
-                'https://ubuntu.com/security/notices/USN-6709-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-5678',
-                'https://www.openssl.org/news/secadv/20231106.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: Generating excessively long X9.42 DH keys or checking excessively long X9.42 DH keys or parameters may be very slow'
-            },
-            {
-              'cve':  'CVE-2022-4450',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'nvd': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-415'
-              ],
-              'description':   'The function PEM_read_bio_ex() reads a PEM file from a BIO and parses and\ndecodes the "name" (e.g. "CERTIFICATE"), any header data and the payload data.\nIf the function succeeds then the "name_out", "header" and "data" arguments are\npopulated with pointers to buffers containing the relevant decoded data. The\ncaller is responsible for freeing those buffers. It is possible to construct a\nPEM file that results in 0 bytes of payload data. In this case PEM_read_bio_ex()\nwill return a failure code but will populate the header argument with a pointer\nto a buffer that has already been freed. If the caller also frees this buffer\nthen a double free will occur. This will most likely lead to a crash. This\ncould be exploited by an attacker who has the ability to supply malicious PEM\nfiles for parsing to achieve a denial of service attack.\n\nThe functions PEM_read_bio() and PEM_read() are simple wrappers around\nPEM_read_bio_ex() and therefore these functions are also directly affected.\n\nThese functions are also called indirectly by a number of other OpenSSL\nfunctions including PEM_X509_INFO_read_bio_ex() and\nSSL_CTX_use_serverinfo_file() which are also vulnerable. Some OpenSSL internal\nuses of these functions are not vulnerable because the caller does not free the\nheader argument if PEM_read_bio_ex() returns a failure code. These locations\ninclude the PEM_read_bio_TYPE() functions as well as the decoders introduced in\nOpenSSL 3.0.\n\nThe OpenSSL asn1parse command line application is also impacted by this issue.',
-              'diffID':        'sha256:dc05fdc04e08f3f4776a1e45eade65ed6215d0caf91c516b2d5c4db432f3f4fa',
-              'fixedVersions': [
-                '1.1.1t-r0'
-              ],
-              'installedVersion': '1.1.1n-r0',
-              'packageName':      'libssl1.1',
-              'purl':             'pkg:apk/alpine/libssl1.1@1.1.1n-r0?arch=ppc64le&distro=3.15.4',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2023:2165',
-                'https://access.redhat.com/security/cve/CVE-2022-4450',
-                'https://bugzilla.redhat.com/1960321',
-                'https://bugzilla.redhat.com/2164440',
-                'https://bugzilla.redhat.com/2164487',
-                'https://bugzilla.redhat.com/2164492',
-                'https://bugzilla.redhat.com/2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144000',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144003',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144006',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144008',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144010',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144012',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144015',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144017',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144019',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2145170',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2158412',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164440',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164487',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164488',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164492',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164497',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164499',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164500',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4203',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4304',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4450',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0215',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0216',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0217',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0286',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0401',
-                'https://errata.almalinux.org/9/ALSA-2023-2165.html',
-                'https://errata.rockylinux.org/RLSA-2023:0946',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=63bcf189be73a9cc1264059bed6f57974be74a83',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=bbcf509bd046b34cca19c766bbddc31683d0858b',
-                'https://linux.oracle.com/cve/CVE-2022-4450.html',
-                'https://linux.oracle.com/errata/ELSA-2023-32791.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2022-4450',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0003',
-                'https://rustsec.org/advisories/RUSTSEC-2023-0010.html',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://ubuntu.com/security/notices/USN-5844-1',
-                'https://ubuntu.com/security/notices/USN-6564-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2022-4450',
-                'https://www.openssl.org/news/secadv/20230207.txt'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: double free after calling PEM_read_bio_ex'
-            },
-            {
-              'cve':  'CVE-2023-0215',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'nvd': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   'The public API function BIO_new_NDEF is a helper function used for streaming\nASN.1 data via a BIO. It is primarily used internally to OpenSSL to support the\nSMIME, CMS and PKCS7 streaming capabilities, but may also be called directly by\nend user applications.\n\nThe function receives a BIO from the caller, prepends a new BIO_f_asn1 filter\nBIO onto the front of it to form a BIO chain, and then returns the new head of\nthe BIO chain to the caller. Under certain conditions, for example if a CMS\nrecipient public key is invalid, the new filter BIO is freed and the function\nreturns a NULL result indicating a failure. However, in this case, the BIO chain\nis not properly cleaned up and the BIO passed by the caller still retains\ninternal pointers to the previously freed filter BIO. If the caller then goes on\nto call BIO_pop() on the BIO then a use-after-free will occur. This will most\nlikely result in a crash.\n\n\n\nThis scenario occurs directly in the internal function B64_write_ASN1() which\nmay cause BIO_new_NDEF() to be called and will subsequently call BIO_pop() on\nthe BIO. This internal function is in turn called by the public API functions\nPEM_write_bio_ASN1_stream, PEM_write_bio_CMS_stream, PEM_write_bio_PKCS7_stream,\nSMIME_write_ASN1, SMIME_write_CMS and SMIME_write_PKCS7.\n\nOther public API functions that may be impacted by this include\ni2d_ASN1_bio_stream, BIO_new_CMS, BIO_new_PKCS7, i2d_CMS_bio_stream and\ni2d_PKCS7_bio_stream.\n\nThe OpenSSL cms and smime command line applications are similarly affected.',
-              'diffID':        'sha256:dc05fdc04e08f3f4776a1e45eade65ed6215d0caf91c516b2d5c4db432f3f4fa',
-              'fixedVersions': [
-                '1.1.1t-r0'
-              ],
-              'installedVersion': '1.1.1n-r0',
-              'packageName':      'libssl1.1',
-              'purl':             'pkg:apk/alpine/libssl1.1@1.1.1n-r0?arch=ppc64le&distro=3.15.4',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2023:2165',
-                'https://access.redhat.com/security/cve/CVE-2023-0215',
-                'https://bugzilla.redhat.com/1960321',
-                'https://bugzilla.redhat.com/2164440',
-                'https://bugzilla.redhat.com/2164487',
-                'https://bugzilla.redhat.com/2164492',
-                'https://bugzilla.redhat.com/2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144000',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144003',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144006',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144008',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144010',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144012',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144015',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144017',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144019',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2145170',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2158412',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164440',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164487',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164488',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164492',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164497',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164499',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164500',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4203',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4304',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4450',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0215',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0216',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0217',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0286',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0401',
-                'https://errata.almalinux.org/9/ALSA-2023-2165.html',
-                'https://errata.rockylinux.org/RLSA-2023:0946',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=8818064ce3c3c0f1b740a5aaba2a987e75bfbafd',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=9816136fe31d92ace4037d5da5257f763aeeb4eb',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=c3829dd8825c654652201e16f8a0a0c46ee3f344',
-                'https://linux.oracle.com/cve/CVE-2023-0215.html',
-                'https://linux.oracle.com/errata/ELSA-2023-32791.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-0215',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0003',
-                'https://rustsec.org/advisories/RUSTSEC-2023-0009.html',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://security.netapp.com/advisory/ntap-20230427-0007',
-                'https://security.netapp.com/advisory/ntap-20230427-0007/',
-                'https://security.netapp.com/advisory/ntap-20230427-0009',
-                'https://security.netapp.com/advisory/ntap-20230427-0009/',
-                'https://security.netapp.com/advisory/ntap-20240621-0006',
-                'https://security.netapp.com/advisory/ntap-20240621-0006/',
-                'https://ubuntu.com/security/notices/USN-5844-1',
-                'https://ubuntu.com/security/notices/USN-5845-1',
-                'https://ubuntu.com/security/notices/USN-5845-2',
-                'https://ubuntu.com/security/notices/USN-6564-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-0215',
-                'https://www.openssl.org/news/secadv/20230207.txt'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: use-after-free following BIO_new_NDEF'
-            },
-            {
-              'cve':  'CVE-2023-0286',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '7.4',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H'
-                },
-                'nvd': {
-                  'v3score':  '7.4',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.4',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-843'
-              ],
-              'description':   'There is a type confusion vulnerability relating to X.400 address processing\ninside an X.509 GeneralName. X.400 addresses were parsed as an ASN1_STRING but\nthe public structure definition for GENERAL_NAME incorrectly specified the type\nof the x400Address field as ASN1_TYPE. This field is subsequently interpreted by\nthe OpenSSL function GENERAL_NAME_cmp as an ASN1_TYPE rather than an\nASN1_STRING.\n\nWhen CRL checking is enabled (i.e. the application sets the\nX509_V_FLAG_CRL_CHECK flag), this vulnerability may allow an attacker to pass\narbitrary pointers to a memcmp call, enabling them to read memory contents or\nenact a denial of service. In most cases, the attack requires the attacker to\nprovide both the certificate chain and CRL, neither of which need to have a\nvalid signature. If the attacker only controls one of these inputs, the other\ninput must already contain an X.400 address as a CRL distribution point, which\nis uncommon. As such, this vulnerability is most likely to only affect\napplications which have implemented their own functionality for retrieving CRLs\nover a network.',
-              'diffID':        'sha256:dc05fdc04e08f3f4776a1e45eade65ed6215d0caf91c516b2d5c4db432f3f4fa',
-              'fixedVersions': [
-                '1.1.1t-r0'
-              ],
-              'installedVersion': '1.1.1n-r0',
-              'packageName':      'libssl1.1',
-              'purl':             'pkg:apk/alpine/libssl1.1@1.1.1n-r0?arch=ppc64le&distro=3.15.4',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2025:7937',
-                'https://access.redhat.com/security/cve/CVE-2023-0286',
-                'https://access.redhat.com/security/cve/cve-2023-0286',
-                'https://bugzilla.redhat.com/2164440',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144000',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144003',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144006',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144008',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144010',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144012',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144015',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144017',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144019',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2145170',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2158412',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164440',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164487',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164488',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164492',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164497',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164499',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164500',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4203',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4304',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4450',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0215',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0216',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0217',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0286',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0401',
-                'https://errata.almalinux.org/9/ALSA-2025-7937.html',
-                'https://errata.rockylinux.org/RLSA-2023:0946',
-                'https://ftp.openbsd.org/pub/OpenBSD/LibreSSL/libressl-3.6.2-relnotes.txt',
-                'https://ftp.openbsd.org/pub/OpenBSD/patches/7.2/common/018_x509.patch.sig',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=2c6c9d439b484e1ba9830d8454a34fa4f80fdfe9',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=2f7530077e0ef79d98718138716bc51ca0cad658',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=fd2af07dc083a350c959147097003a14a5e8ac4d',
-                'https://github.com/pyca/cryptography',
-                'https://github.com/pyca/cryptography/security/advisories/GHSA-x4qr-2fvf-3mr5',
-                'https://linux.oracle.com/cve/CVE-2023-0286.html',
-                'https://linux.oracle.com/errata/ELSA-2025-7937.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-0286',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0003',
-                'https://rustsec.org/advisories/RUSTSEC-2023-0006.html',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://ubuntu.com/security/notices/USN-5844-1',
-                'https://ubuntu.com/security/notices/USN-5845-1',
-                'https://ubuntu.com/security/notices/USN-5845-2',
-                'https://ubuntu.com/security/notices/USN-6564-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-0286',
-                'https://www.openssl.org/news/secadv/20230207.txt'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: X.400 address type confusion in X.509 GeneralName'
-            },
-            {
-              'cve':  'CVE-2023-0464',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-295'
-              ],
-              'description':   "A security vulnerability has been identified in all supported versions\n\nof OpenSSL related to the verification of X.509 certificate chains\nthat include policy constraints.  Attackers may be able to exploit this\nvulnerability by creating a malicious certificate chain that triggers\nexponential use of computational resources, leading to a denial-of-service\n(DoS) attack on affected systems.\n\nPolicy processing is disabled by default but can be enabled by passing\nthe `-policy' argument to the command line utilities or by calling the\n`X509_VERIFY_PARAM_set1_policies()' function.",
-              'diffID':        'sha256:dc05fdc04e08f3f4776a1e45eade65ed6215d0caf91c516b2d5c4db432f3f4fa',
-              'fixedVersions': [
-                '1.1.1t-r2'
-              ],
-              'installedVersion': '1.1.1n-r0',
-              'packageName':      'libssl1.1',
-              'purl':             'pkg:apk/alpine/libssl1.1@1.1.1n-r0?arch=ppc64le&distro=3.15.4',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2023:3722',
-                'https://access.redhat.com/security/cve/CVE-2023-0464',
-                'https://bugzilla.redhat.com/2181082',
-                'https://bugzilla.redhat.com/2182561',
-                'https://bugzilla.redhat.com/2182565',
-                'https://bugzilla.redhat.com/2188461',
-                'https://bugzilla.redhat.com/2207947',
-                'https://errata.almalinux.org/9/ALSA-2023-3722.html',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=2017771e2db3e2b96f89bbe8766c3209f6a99545',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=2dcd4f1e3115f38cefa43e3efbe9b801c27e642e',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=879f7080d7e141f415c79eaa3a8ac4a3dad0348b',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=959c59c7a0164117e7f8366466a32bb1f8d77ff1',
-                'https://linux.oracle.com/cve/CVE-2023-0464.html',
-                'https://linux.oracle.com/errata/ELSA-2023-3722.html',
-                'https://lists.debian.org/debian-lts-announce/2023/06/msg00011.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-0464',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://security.netapp.com/advisory/ntap-20230406-0006/',
-                'https://security.netapp.com/advisory/ntap-20240621-0006/',
-                'https://ubuntu.com/security/notices/USN-6039-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.couchbase.com/alerts/',
-                'https://www.cve.org/CVERecord?id=CVE-2023-0464',
-                'https://www.debian.org/security/2023/dsa-5417',
-                'https://www.openssl.org/news/secadv/20230322.txt'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: Denial of service by excessive resource usage in verifying X509 policy constraints'
-            },
-            {
-              'cve':  'CVE-2022-2097',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N'
-                },
-                'nvd': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N'
-                },
-                'redhat': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-327'
-              ],
-              'description':   "AES OCB mode for 32-bit x86 platforms using the AES-NI assembly optimised implementation will not encrypt the entirety of the data under some circumstances. This could reveal sixteen bytes of data that was preexisting in the memory that wasn't written. In the special case of \"in place\" encryption, sixteen bytes of the plaintext would be revealed. Since OpenSSL does not support OCB based cipher suites for TLS and DTLS, they are both unaffected. Fixed in OpenSSL 3.0.5 (Affected 3.0.0-3.0.4). Fixed in OpenSSL 1.1.1q (Affected 1.1.1-1.1.1p).",
-              'diffID':        'sha256:dc05fdc04e08f3f4776a1e45eade65ed6215d0caf91c516b2d5c4db432f3f4fa',
-              'fixedVersions': [
-                '1.1.1q-r0'
-              ],
-              'installedVersion': '1.1.1n-r0',
-              'packageName':      'libssl1.1',
-              'purl':             'pkg:apk/alpine/libssl1.1@1.1.1n-r0?arch=ppc64le&distro=3.15.4',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2022:6224',
-                'https://access.redhat.com/security/cve/CVE-2022-2097',
-                'https://bugzilla.redhat.com/2081494',
-                'https://bugzilla.redhat.com/2087911',
-                'https://bugzilla.redhat.com/2087913',
-                'https://bugzilla.redhat.com/2097310',
-                'https://bugzilla.redhat.com/2104905',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2081494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2097310',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2100554',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2104905',
-                'https://cert-portal.siemens.com/productcert/pdf/ssa-332410.pdf',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-1292',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-2068',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-2097',
-                'https://errata.almalinux.org/9/ALSA-2022-6224.html',
-                'https://errata.rockylinux.org/RLSA-2022:5818',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=919925673d6c9cfed3c1085497f5dfbbed5fc431',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=a98f339ddd7e8f487d6e0088d4a9a42324885a93',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=919925673d6c9cfed3c1085497f5dfbbed5fc431',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=a98f339ddd7e8f487d6e0088d4a9a42324885a93',
-                'https://github.com/alexcrichton/openssl-src-rs',
-                'https://linux.oracle.com/cve/CVE-2022-2097.html',
-                'https://linux.oracle.com/errata/ELSA-2022-9955.html',
-                'https://lists.debian.org/debian-lts-announce/2023/02/msg00019.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/R6CK57NBQFTPUMXAPJURCGXUYT76NQAK',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/R6CK57NBQFTPUMXAPJURCGXUYT76NQAK/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/V6567JERRHHJW2GNGJGKDRNHR7SNPZK7',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/V6567JERRHHJW2GNGJGKDRNHR7SNPZK7/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VCMNWKERPBKOEBNL7CLTTX3ZZCZLH7XA',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VCMNWKERPBKOEBNL7CLTTX3ZZCZLH7XA/',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/R6CK57NBQFTPUMXAPJURCGXUYT76NQAK',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/R6CK57NBQFTPUMXAPJURCGXUYT76NQAK/',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/V6567JERRHHJW2GNGJGKDRNHR7SNPZK7',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/V6567JERRHHJW2GNGJGKDRNHR7SNPZK7/',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/VCMNWKERPBKOEBNL7CLTTX3ZZCZLH7XA',
-                'https://nvd.nist.gov/vuln/detail/CVE-2022-2097',
-                'https://rustsec.org/advisories/RUSTSEC-2022-0032.html',
-                'https://security.gentoo.org/glsa/202210-02',
-                'https://security.netapp.com/advisory/ntap-20220715-0011',
-                'https://security.netapp.com/advisory/ntap-20220715-0011/',
-                'https://security.netapp.com/advisory/ntap-20230420-0008',
-                'https://security.netapp.com/advisory/ntap-20230420-0008/',
-                'https://security.netapp.com/advisory/ntap-20240621-0006',
-                'https://security.netapp.com/advisory/ntap-20240621-0006/',
-                'https://ubuntu.com/security/notices/USN-5502-1',
-                'https://ubuntu.com/security/notices/USN-6457-1',
-                'https://www.cve.org/CVERecord?id=CVE-2022-2097',
-                'https://www.debian.org/security/2023/dsa-5343',
-                'https://www.openssl.org/news/secadv/20220705.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: AES OCB fails to encrypt some bytes'
-            },
-            {
-              'cve':  'CVE-2022-4304',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N'
-                },
-                'nvd': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N'
-                },
-                'redhat': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-203'
-              ],
-              'description':   'A timing based side channel exists in the OpenSSL RSA Decryption implementation\nwhich could be sufficient to recover a plaintext across a network in a\nBleichenbacher style attack. To achieve a successful decryption an attacker\nwould have to be able to send a very large number of trial messages for\ndecryption. The vulnerability affects all RSA padding modes: PKCS#1 v1.5,\nRSA-OEAP and RSASVE.\n\nFor example, in a TLS connection, RSA is commonly used by a client to send an\nencrypted pre-master secret to the server. An attacker that had observed a\ngenuine connection between a client and a server could use this flaw to send\ntrial messages to the server and record the time taken to process them. After a\nsufficiently large number of messages the attacker could recover the pre-master\nsecret used for the original connection and thus be able to decrypt the\napplication data sent over that connection.',
-              'diffID':        'sha256:dc05fdc04e08f3f4776a1e45eade65ed6215d0caf91c516b2d5c4db432f3f4fa',
-              'fixedVersions': [
-                '1.1.1t-r0'
-              ],
-              'installedVersion': '1.1.1n-r0',
-              'packageName':      'libssl1.1',
-              'purl':             'pkg:apk/alpine/libssl1.1@1.1.1n-r0?arch=ppc64le&distro=3.15.4',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2023:2165',
-                'https://access.redhat.com/security/cve/CVE-2022-4304',
-                'https://bugzilla.redhat.com/1960321',
-                'https://bugzilla.redhat.com/2164440',
-                'https://bugzilla.redhat.com/2164487',
-                'https://bugzilla.redhat.com/2164492',
-                'https://bugzilla.redhat.com/2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144000',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144003',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144006',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144008',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144010',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144012',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144015',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144017',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144019',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2145170',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2158412',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164440',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164487',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164488',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164492',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164497',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164499',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164500',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4203',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4304',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4450',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0215',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0216',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0217',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0286',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0401',
-                'https://errata.almalinux.org/9/ALSA-2023-2165.html',
-                'https://errata.rockylinux.org/RLSA-2023:0946',
-                'https://linux.oracle.com/cve/CVE-2022-4304.html',
-                'https://linux.oracle.com/errata/ELSA-2023-32791.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2022-4304',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0003',
-                'https://rustsec.org/advisories/RUSTSEC-2023-0007.html',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://ubuntu.com/security/notices/USN-5844-1',
-                'https://ubuntu.com/security/notices/USN-6564-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2022-4304',
-                'https://www.openssl.org/news/secadv/20230207.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: timing attack in RSA Decryption implementation'
-            },
-            {
-              'cve':  'CVE-2023-0465',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N'
-                },
-                'redhat': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-295'
-              ],
-              'description':   "Applications that use a non-default option when verifying certificates may be\nvulnerable to an attack from a malicious CA to circumvent certain checks.\n\nInvalid certificate policies in leaf certificates are silently ignored by\nOpenSSL and other certificate policy checks are skipped for that certificate.\nA malicious CA could use this to deliberately assert invalid certificate policies\nin order to circumvent policy checking on the certificate altogether.\n\nPolicy processing is disabled by default but can be enabled by passing\nthe `-policy' argument to the command line utilities or by calling the\n`X509_VERIFY_PARAM_set1_policies()' function.",
-              'diffID':        'sha256:dc05fdc04e08f3f4776a1e45eade65ed6215d0caf91c516b2d5c4db432f3f4fa',
-              'fixedVersions': [
-                '1.1.1t-r2'
-              ],
-              'installedVersion': '1.1.1n-r0',
-              'packageName':      'libssl1.1',
-              'purl':             'pkg:apk/alpine/libssl1.1@1.1.1n-r0?arch=ppc64le&distro=3.15.4',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2023:3722',
-                'https://access.redhat.com/security/cve/CVE-2023-0465',
-                'https://bugzilla.redhat.com/2181082',
-                'https://bugzilla.redhat.com/2182561',
-                'https://bugzilla.redhat.com/2182565',
-                'https://bugzilla.redhat.com/2188461',
-                'https://bugzilla.redhat.com/2207947',
-                'https://errata.almalinux.org/9/ALSA-2023-3722.html',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=10325176f3d3e98c6e2b3bf5ab1e3b334de6947a',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=1dd43e0709fece299b15208f36cc7c76209ba0bb',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=b013765abfa80036dc779dd0e50602c57bb3bf95',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=facfb1ab745646e97a1920977ae4a9965ea61d5c',
-                'https://linux.oracle.com/cve/CVE-2023-0465.html',
-                'https://linux.oracle.com/errata/ELSA-2023-3722.html',
-                'https://lists.debian.org/debian-lts-announce/2023/06/msg00011.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-0465',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://security.netapp.com/advisory/ntap-20230414-0001/',
-                'https://ubuntu.com/security/notices/USN-6039-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-0465',
-                'https://www.debian.org/security/2023/dsa-5417',
-                'https://www.openssl.org/news/secadv/20230328.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: Invalid certificate policies in leaf certificates are silently ignored'
-            },
-            {
-              'cve':  'CVE-2023-2650',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '6.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-770'
-              ],
-              'description':   "Issue summary: Processing some specially crafted ASN.1 object identifiers or\ndata containing them may be very slow.\n\nImpact summary: Applications that use OBJ_obj2txt() directly, or use any of\nthe OpenSSL subsystems OCSP, PKCS7/SMIME, CMS, CMP/CRMF or TS with no message\nsize limit may experience notable to very long delays when processing those\nmessages, which may lead to a Denial of Service.\n\nAn OBJECT IDENTIFIER is composed of a series of numbers - sub-identifiers -\nmost of which have no size limit.  OBJ_obj2txt() may be used to translate\nan ASN.1 OBJECT IDENTIFIER given in DER encoding form (using the OpenSSL\ntype ASN1_OBJECT) to its canonical numeric text form, which are the\nsub-identifiers of the OBJECT IDENTIFIER in decimal form, separated by\nperiods.\n\nWhen one of the sub-identifiers in the OBJECT IDENTIFIER is very large\n(these are sizes that are seen as absurdly large, taking up tens or hundreds\nof KiBs), the translation to a decimal number in text may take a very long\ntime.  The time complexity is O(n^2) with 'n' being the size of the\nsub-identifiers in bytes (*).\n\nWith OpenSSL 3.0, support to fetch cryptographic algorithms using names /\nidentifiers in string form was introduced.  This includes using OBJECT\nIDENTIFIERs in canonical numeric text form as identifiers for fetching\nalgorithms.\n\nSuch OBJECT IDENTIFIERs may be received through the ASN.1 structure\nAlgorithmIdentifier, which is commonly used in multiple protocols to specify\nwhat cryptographic algorithm should be used to sign or verify, encrypt or\ndecrypt, or digest passed data.\n\nApplications that call OBJ_obj2txt() directly with untrusted data are\naffected, with any version of OpenSSL.  If the use is for the mere purpose\nof display, the severity is considered low.\n\nIn OpenSSL 3.0 and newer, this affects the subsystems OCSP, PKCS7/SMIME,\nCMS, CMP/CRMF or TS.  It also impacts anything that processes X.509\ncertificates, including simple things like verifying its signature.\n\nThe impact on TLS is relatively low, because all versions of OpenSSL have a\n100KiB limit on the peer's certificate chain.  Additionally, this only\nimpacts clients, or servers that have explicitly enabled client\nauthentication.\n\nIn OpenSSL 1.1.1 and 1.0.2, this only affects displaying diverse objects,\nsuch as X.509 certificates.  This is assumed to not happen in such a way\nthat it would cause a Denial of Service, so these versions are considered\nnot affected by this issue in such a way that it would be cause for concern,\nand the severity is therefore considered low.",
-              'diffID':        'sha256:dc05fdc04e08f3f4776a1e45eade65ed6215d0caf91c516b2d5c4db432f3f4fa',
-              'fixedVersions': [
-                '1.1.1u-r0'
-              ],
-              'installedVersion': '1.1.1n-r0',
-              'packageName':      'libssl1.1',
-              'purl':             'pkg:apk/alpine/libssl1.1@1.1.1n-r0?arch=ppc64le&distro=3.15.4',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2023/05/30/1',
-                'https://access.redhat.com/errata/RHSA-2023:6330',
-                'https://access.redhat.com/security/cve/CVE-2023-2650',
-                'https://bugzilla.redhat.com/1858038',
-                'https://bugzilla.redhat.com/2207947',
-                'https://errata.almalinux.org/9/ALSA-2023-6330.html',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=423a2bc737a908ad0c77bda470b2b59dc879936b',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=853c5e56ee0b8650c73140816bb8b91d6163422c',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=9e209944b35cf82368071f160a744b6178f9b098',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=db779b0e10b047f2585615e0b8f2acdf21f8544a',
-                'https://linux.oracle.com/cve/CVE-2023-2650.html',
-                'https://linux.oracle.com/errata/ELSA-2023-6330.html',
-                'https://lists.debian.org/debian-lts-announce/2023/06/msg00011.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-2650',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0009',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://security.netapp.com/advisory/ntap-20230703-0001/',
-                'https://security.netapp.com/advisory/ntap-20231027-0009/',
-                'https://ubuntu.com/security/notices/USN-6119-1',
-                'https://ubuntu.com/security/notices/USN-6188-1',
-                'https://ubuntu.com/security/notices/USN-6672-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-2650',
-                'https://www.debian.org/security/2023/dsa-5417',
-                'https://www.openssl.org/news/secadv/20230530.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: Possible DoS translating ASN.1 object identifiers'
-            },
-            {
-              'cve':  'CVE-2023-3446',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L'
-                },
-                'redhat': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L'
-                }
-              },
-              'cwes': [
-                'CWE-606',
-                'CWE-1333'
-              ],
-              'description':   "Issue summary: Checking excessively long DH keys or parameters may be very slow.\n\nImpact summary: Applications that use the functions DH_check(), DH_check_ex()\nor EVP_PKEY_param_check() to check a DH key or DH parameters may experience long\ndelays. Where the key or parameters that are being checked have been obtained\nfrom an untrusted source this may lead to a Denial of Service.\n\nThe function DH_check() performs various checks on DH parameters. One of those\nchecks confirms that the modulus ('p' parameter) is not too large. Trying to use\na very large modulus is slow and OpenSSL will not normally use a modulus which\nis over 10,000 bits in length.\n\nHowever the DH_check() function checks numerous aspects of the key or parameters\nthat have been supplied. Some of those checks use the supplied modulus value\neven if it has already been found to be too large.\n\nAn application that calls DH_check() and supplies a key or parameters obtained\nfrom an untrusted source could be vulernable to a Denial of Service attack.\n\nThe function DH_check() is itself called by a number of other OpenSSL functions.\nAn application calling any of those other functions may similarly be affected.\nThe other functions affected by this are DH_check_ex() and\nEVP_PKEY_param_check().\n\nAlso vulnerable are the OpenSSL dhparam and pkeyparam command line applications\nwhen using the '-check' option.\n\nThe OpenSSL SSL/TLS implementation is not affected by this issue.\nThe OpenSSL 3.0 and 3.1 FIPS providers are not affected by this issue.",
-              'diffID':        'sha256:dc05fdc04e08f3f4776a1e45eade65ed6215d0caf91c516b2d5c4db432f3f4fa',
-              'fixedVersions': [
-                '1.1.1u-r2'
-              ],
-              'installedVersion': '1.1.1n-r0',
-              'packageName':      'libssl1.1',
-              'purl':             'pkg:apk/alpine/libssl1.1@1.1.1n-r0?arch=ppc64le&distro=3.15.4',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2023/07/19/4',
-                'http://www.openwall.com/lists/oss-security/2023/07/19/5',
-                'http://www.openwall.com/lists/oss-security/2023/07/19/6',
-                'http://www.openwall.com/lists/oss-security/2023/07/31/1',
-                'http://www.openwall.com/lists/oss-security/2024/05/16/1',
-                'https://access.redhat.com/errata/RHSA-2024:2447',
-                'https://access.redhat.com/security/cve/CVE-2023-3446',
-                'https://bugzilla.redhat.com/2223016',
-                'https://bugzilla.redhat.com/2224962',
-                'https://bugzilla.redhat.com/2227852',
-                'https://bugzilla.redhat.com/2248616',
-                'https://bugzilla.redhat.com/2257571',
-                'https://bugzilla.redhat.com/2258502',
-                'https://bugzilla.redhat.com/2259944',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2224962',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2257582',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2257583',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2258677',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2258688',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2258691',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2258694',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2258700',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-36763',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-36764',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3446',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45229',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45231',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45232',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45233',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45235',
-                'https://errata.almalinux.org/9/ALSA-2024-2447.html',
-                'https://errata.rockylinux.org/RLSA-2024:2264',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=1fa20cf2f506113c761777127a38bce5068740eb',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=8780a896543a654e757db1b9396383f9d8095528',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=9a0a4d3c1e7138915563c0df4fe6a3f9377b839c',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=fc9867c1e03c22ebf56943be205202e576aabf23',
-                'https://linux.oracle.com/cve/CVE-2023-3446.html',
-                'https://linux.oracle.com/errata/ELSA-2024-2447.html',
-                'https://lists.debian.org/debian-lts-announce/2023/08/msg00019.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-3446',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://security.netapp.com/advisory/ntap-20230803-0011/',
-                'https://ubuntu.com/security/notices/USN-6435-1',
-                'https://ubuntu.com/security/notices/USN-6435-2',
-                'https://ubuntu.com/security/notices/USN-6450-1',
-                'https://ubuntu.com/security/notices/USN-6709-1',
-                'https://ubuntu.com/security/notices/USN-7018-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-3446',
-                'https://www.openssl.org/news/secadv/20230719.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: Excessive time spent checking DH keys and parameters'
-            },
-            {
-              'cve':  'CVE-2023-3817',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L'
-                },
-                'redhat': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L'
-                }
-              },
-              'cwes': [
-                'CWE-606',
-                'CWE-834'
-              ],
-              'description':   'Issue summary: Checking excessively long DH keys or parameters may be very slow.\n\nImpact summary: Applications that use the functions DH_check(), DH_check_ex()\nor EVP_PKEY_param_check() to check a DH key or DH parameters may experience long\ndelays. Where the key or parameters that are being checked have been obtained\nfrom an untrusted source this may lead to a Denial of Service.\n\nThe function DH_check() performs various checks on DH parameters. After fixing\nCVE-2023-3446 it was discovered that a large q parameter value can also trigger\nan overly long computation during some of these checks. A correct q value,\nif present, cannot be larger than the modulus p parameter, thus it is\nunnecessary to perform these checks if q is larger than p.\n\nAn application that calls DH_check() and supplies a key or parameters obtained\nfrom an untrusted source could be vulnerable to a Denial of Service attack.\n\nThe function DH_check() is itself called by a number of other OpenSSL functions.\nAn application calling any of those other functions may similarly be affected.\nThe other functions affected by this are DH_check_ex() and\nEVP_PKEY_param_check().\n\nAlso vulnerable are the OpenSSL dhparam and pkeyparam command line applications\nwhen using the "-check" option.\n\nThe OpenSSL SSL/TLS implementation is not affected by this issue.\n\nThe OpenSSL 3.0 and 3.1 FIPS providers are not affected by this issue.',
-              'diffID':        'sha256:dc05fdc04e08f3f4776a1e45eade65ed6215d0caf91c516b2d5c4db432f3f4fa',
-              'fixedVersions': [
-                '1.1.1v-r0'
-              ],
-              'installedVersion': '1.1.1n-r0',
-              'packageName':      'libssl1.1',
-              'purl':             'pkg:apk/alpine/libssl1.1@1.1.1n-r0?arch=ppc64le&distro=3.15.4',
-              'references':       [
-                'http://seclists.org/fulldisclosure/2023/Jul/43',
-                'http://www.openwall.com/lists/oss-security/2023/07/31/1',
-                'http://www.openwall.com/lists/oss-security/2023/09/22/11',
-                'http://www.openwall.com/lists/oss-security/2023/09/22/9',
-                'http://www.openwall.com/lists/oss-security/2023/11/06/2',
-                'https://access.redhat.com/errata/RHSA-2024:2447',
-                'https://access.redhat.com/security/cve/CVE-2023-3817',
-                'https://bugzilla.redhat.com/2223016',
-                'https://bugzilla.redhat.com/2224962',
-                'https://bugzilla.redhat.com/2227852',
-                'https://bugzilla.redhat.com/2248616',
-                'https://bugzilla.redhat.com/2257571',
-                'https://bugzilla.redhat.com/2258502',
-                'https://bugzilla.redhat.com/2259944',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2224962',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2227852',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2248616',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2270358',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3446',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3817',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-5678',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-2408',
-                'https://errata.almalinux.org/9/ALSA-2024-2447.html',
-                'https://errata.rockylinux.org/RLSA-2023:7877',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=6a1eb62c29db6cb5eec707f9338aee00f44e26f5',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=869ad69aadd985c7b8ca6f4e5dd0eb274c9f3644',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=9002fd07327a91f35ba6c1307e71fa6fd4409b7f',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=91ddeba0f2269b017dc06c46c993a788974b1aa5',
-                'https://linux.oracle.com/cve/CVE-2023-3817.html',
-                'https://linux.oracle.com/errata/ELSA-2024-2447.html',
-                'https://lists.debian.org/debian-lts-announce/2023/08/msg00019.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-3817',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://security.netapp.com/advisory/ntap-20230818-0014/',
-                'https://security.netapp.com/advisory/ntap-20231027-0008/',
-                'https://security.netapp.com/advisory/ntap-20240621-0006/',
-                'https://ubuntu.com/security/notices/USN-6435-1',
-                'https://ubuntu.com/security/notices/USN-6435-2',
-                'https://ubuntu.com/security/notices/USN-6450-1',
-                'https://ubuntu.com/security/notices/USN-6709-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-3817',
-                'https://www.openssl.org/news/secadv/20230731.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'OpenSSL: Excessive time spent checking DH q parameter value'
-            },
-            {
-              'cve':  'CVE-2023-5678',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L'
-                },
-                'redhat': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L'
-                }
-              },
-              'cwes': [
-                'CWE-606',
-                'CWE-754'
-              ],
-              'description':   "Issue summary: Generating excessively long X9.42 DH keys or checking\nexcessively long X9.42 DH keys or parameters may be very slow.\n\nImpact summary: Applications that use the functions DH_generate_key() to\ngenerate an X9.42 DH key may experience long delays.  Likewise, applications\nthat use DH_check_pub_key(), DH_check_pub_key_ex() or EVP_PKEY_public_check()\nto check an X9.42 DH key or X9.42 DH parameters may experience long delays.\nWhere the key or parameters that are being checked have been obtained from\nan untrusted source this may lead to a Denial of Service.\n\nWhile DH_check() performs all the necessary checks (as of CVE-2023-3817),\nDH_check_pub_key() doesn't make any of these checks, and is therefore\nvulnerable for excessively large P and Q parameters.\n\nLikewise, while DH_generate_key() performs a check for an excessively large\nP, it doesn't check for an excessively large Q.\n\nAn application that calls DH_generate_key() or DH_check_pub_key() and\nsupplies a key or parameters obtained from an untrusted source could be\nvulnerable to a Denial of Service attack.\n\nDH_generate_key() and DH_check_pub_key() are also called by a number of\nother OpenSSL functions.  An application calling any of those other\nfunctions may similarly be affected.  The other functions affected by this\nare DH_check_pub_key_ex(), EVP_PKEY_public_check(), and EVP_PKEY_generate().\n\nAlso vulnerable are the OpenSSL pkey command line application when using the\n\"-pubcheck\" option, as well as the OpenSSL genpkey command line application.\n\nThe OpenSSL SSL/TLS implementation is not affected by this issue.\n\nThe OpenSSL 3.0 and 3.1 FIPS providers are not affected by this issue.",
-              'diffID':        'sha256:dc05fdc04e08f3f4776a1e45eade65ed6215d0caf91c516b2d5c4db432f3f4fa',
-              'fixedVersions': [
-                '1.1.1w-r1'
-              ],
-              'installedVersion': '1.1.1n-r0',
-              'packageName':      'libssl1.1',
-              'purl':             'pkg:apk/alpine/libssl1.1@1.1.1n-r0?arch=ppc64le&distro=3.15.4',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2024/03/11/1',
-                'https://access.redhat.com/errata/RHSA-2024:2447',
-                'https://access.redhat.com/security/cve/CVE-2023-5678',
-                'https://bugzilla.redhat.com/2223016',
-                'https://bugzilla.redhat.com/2224962',
-                'https://bugzilla.redhat.com/2227852',
-                'https://bugzilla.redhat.com/2248616',
-                'https://bugzilla.redhat.com/2257571',
-                'https://bugzilla.redhat.com/2258502',
-                'https://bugzilla.redhat.com/2259944',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2224962',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2227852',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2248616',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2270358',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3446',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3817',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-5678',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-2408',
-                'https://errata.almalinux.org/9/ALSA-2024-2447.html',
-                'https://errata.rockylinux.org/RLSA-2023:7877',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=34efaef6c103d636ab507a0cc34dca4d3aecc055',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=710fee740904b6290fef0dd5536fbcedbc38ff0c',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=db925ae2e65d0d925adef429afc37f75bd1c2017',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=ddeb4b6c6d527e54ce9a99cba785c0f7776e54b6',
-                'https://linux.oracle.com/cve/CVE-2023-5678.html',
-                'https://linux.oracle.com/errata/ELSA-2024-2447.html',
-                'https://lists.debian.org/debian-lts-announce/2024/10/msg00033.html',
-                'https://lists.debian.org/debian-lts-announce/2024/11/msg00000.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-5678',
-                'https://security.netapp.com/advisory/ntap-20231130-0010/',
-                'https://ubuntu.com/security/notices/USN-6622-1',
-                'https://ubuntu.com/security/notices/USN-6632-1',
-                'https://ubuntu.com/security/notices/USN-6709-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-5678',
-                'https://www.openssl.org/news/secadv/20231106.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: Generating excessively long X9.42 DH keys or checking excessively long X9.42 DH keys or parameters may be very slow'
-            },
-            {
-              'cve':  'CVE-2022-37434',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '9.8',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-787',
-                'CWE-120'
-              ],
-              'description':   'zlib through 1.2.12 has a heap-based buffer over-read or buffer overflow in inflate in inflate.c via a large gzip header extra field. NOTE: only applications that call inflateGetHeader are affected. Some common applications bundle the affected zlib source code but may be unable to call inflateGetHeader (e.g., see the nodejs/node reference).',
-              'diffID':        'sha256:dc05fdc04e08f3f4776a1e45eade65ed6215d0caf91c516b2d5c4db432f3f4fa',
-              'fixedVersions': [
-                '1.2.12-r2'
-              ],
-              'installedVersion': '1.2.12-r0',
-              'packageName':      'zlib',
-              'purl':             'pkg:apk/alpine/zlib@1.2.12-r0?arch=ppc64le&distro=3.15.4',
-              'references':       [
-                'http://seclists.org/fulldisclosure/2022/Oct/37',
-                'http://seclists.org/fulldisclosure/2022/Oct/38',
-                'http://seclists.org/fulldisclosure/2022/Oct/41',
-                'http://seclists.org/fulldisclosure/2022/Oct/42',
-                'http://www.openwall.com/lists/oss-security/2022/08/05/2',
-                'http://www.openwall.com/lists/oss-security/2022/08/09/1',
-                'https://access.redhat.com/errata/RHSA-2022:8291',
-                'https://access.redhat.com/security/cve/CVE-2022-37434',
-                'https://bugzilla.redhat.com/2116639',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2053198',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2077431',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2081296',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2116639',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-37434',
-                'https://errata.almalinux.org/9/ALSA-2022-8291.html',
-                'https://errata.rockylinux.org/RLSA-2022:8291',
-                'https://github.com/curl/curl/issues/9271',
-                'https://github.com/ivd38/zlib_overflow',
-                'https://github.com/madler/zlib/blob/21767c654d31d2dccdde4330529775c6c5fd5389/zlib.h#L1062-L1063',
-                'https://github.com/madler/zlib/commit/1eb7682f845ac9e9bf9ae35bbfb3bad5dacbd91d',
-                'https://github.com/madler/zlib/commit/eff308af425b67093bab25f80f1ae950166bece1',
-                'https://github.com/nodejs/node/blob/75b68c6e4db515f76df73af476eccf382bbcb00a/deps/zlib/inflate.c#L762-L764',
-                'https://linux.oracle.com/cve/CVE-2022-37434.html',
-                'https://linux.oracle.com/errata/ELSA-2023-1095.html',
-                'https://lists.debian.org/debian-lts-announce/2022/09/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JWN4VE3JQR4O2SOUS5TXNLANRPMHWV4I/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NMBOJ77A7T7PQCARMDUK75TE6LLESZ3O/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PAVPQNCG3XRLCLNSQRM3KAN5ZFMVXVTY/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/X5U7OTKZSHY2I3ZFJSR2SHFHW72RKGDK/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YRQAI7H4M4RQZ2IWZUEEXECBE5D56BH2/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2022-37434',
-                'https://security.netapp.com/advisory/ntap-20220901-0005/',
-                'https://security.netapp.com/advisory/ntap-20230427-0007/',
-                'https://support.apple.com/kb/HT213488',
-                'https://support.apple.com/kb/HT213489',
-                'https://support.apple.com/kb/HT213490',
-                'https://support.apple.com/kb/HT213491',
-                'https://support.apple.com/kb/HT213493',
-                'https://support.apple.com/kb/HT213494',
-                'https://ubuntu.com/security/notices/USN-5570-1',
-                'https://ubuntu.com/security/notices/USN-5570-2',
-                'https://ubuntu.com/security/notices/USN-5573-1',
-                'https://ubuntu.com/security/notices/USN-6736-1',
-                'https://ubuntu.com/security/notices/USN-6736-2',
-                'https://www.cve.org/CVERecord?id=CVE-2022-37434',
-                'https://www.debian.org/security/2022/dsa-5218'
-              ],
-              'severity':   'CRITICAL',
-              'suppressed': false,
-              'title':      'zlib: heap-based buffer over-read and overflow in inflate() in inflate.c via a large gzip header extra field'
-            }
-          ]
-        }
-      ],
-      'summary': {
-        'critical':   1,
-        'high':       8,
-        'low':        0,
-        'medium':     14,
-        'suppressed': 0,
-        'unknown':    0
-      }
-    }
-  },
-  {
-    'id':    'default/29f76f12a6597f071ad3b90aded42483fc5825a0d882a35ccd01f000455bb636',
-    'type':  'storage.sbomscanner.kubewarden.io.vulnerabilityreport',
-    'links': {
-      'patch':  'https://localhost:8005/v1/storage.sbomscanner.kubewarden.io.vulnerabilityreports/default/29f76f12a6597f071ad3b90aded42483fc5825a0d882a35ccd01f000455bb636',
-      'remove': 'https://localhost:8005/v1/storage.sbomscanner.kubewarden.io.vulnerabilityreports/default/29f76f12a6597f071ad3b90aded42483fc5825a0d882a35ccd01f000455bb636',
-      'self':   'https://localhost:8005/v1/storage.sbomscanner.kubewarden.io.vulnerabilityreports/default/29f76f12a6597f071ad3b90aded42483fc5825a0d882a35ccd01f000455bb636',
-      'update': 'https://localhost:8005/v1/storage.sbomscanner.kubewarden.io.vulnerabilityreports/default/29f76f12a6597f071ad3b90aded42483fc5825a0d882a35ccd01f000455bb636',
-      'view':   'https://localhost:8005/apis/storage.sbomscanner.kubewarden.io/v1alpha1/namespaces/default/vulnerabilityreports/29f76f12a6597f071ad3b90aded42483fc5825a0d882a35ccd01f000455bb636'
-    },
-    'apiVersion':    'storage.sbomscanner.kubewarden.io/v1alpha1',
-    'imageMetadata': {
-      'digest':      'sha256:fb9ac82b4cc94c5a6c416a1c656b3ee84df9290ab4106c260eb959997e759e5e',
-      'platform':    'linux/arm/v7',
-      'registry':    'lsong-demo1',
-      'registryURI': 'registry-1.docker.io',
-      'repository':  'library/alpine',
-      'tag':         '3.14.1'
-    },
-    'kind':     'VulnerabilityReport',
-    'metadata': {
-      'creationTimestamp': '2026-01-14T18:52:04Z',
-      'fields':            [
-        '29f76f12a6597f071ad3b90aded42483fc5825a0d882a35ccd01f000455bb636',
-        'registry-1.docker.io/library/alpine:3.14.1',
-        'linux/arm/v7',
-        '47 (0 suppressed)'
-      ],
-      'labels': {
-        'app.kubernetes.io/managed-by':          'sbomscanner',
-        'app.kubernetes.io/part-of':             'sbomscanner',
-        'sbomscanner.kubewarden.io/scanjob-uid': '445c600a-c4b6-40b3-bd71-f2d2140a37d5'
-      },
-      'name':            '29f76f12a6597f071ad3b90aded42483fc5825a0d882a35ccd01f000455bb636',
-      'namespace':       'default',
-      'ownerReferences': [
-        {
-          'apiVersion':         'storage.sbomscanner.kubewarden.io/v1alpha1',
-          'blockOwnerDeletion': true,
-          'controller':         true,
-          'kind':               'SBOM',
-          'name':               '29f76f12a6597f071ad3b90aded42483fc5825a0d882a35ccd01f000455bb636',
-          'uid':                'dfa01a77-6035-406f-998b-b6496388571d'
-        }
-      ],
-      'relationships': [
-        {
-          'fromId':   'default/29f76f12a6597f071ad3b90aded42483fc5825a0d882a35ccd01f000455bb636',
-          'fromType': 'storage.sbomscanner.kubewarden.io.sbom',
-          'rel':      'owner',
-          'state':    'active',
-          'message':  'Resource is current'
-        }
-      ],
-      'resourceVersion': '1',
-      'state':           {
-        'error':         false,
-        'message':       'Resource is current',
-        'name':          'active',
-        'transitioning': false
-      },
-      'uid': '87b37df9-58cb-4076-83cc-57d84863e4be'
-    },
-    'report': {
-      'results': [
-        {
-          'class':           'os-pkgs',
-          'target':          '/var/run/worker/trivy.sbom.4273697699.json (alpine 3.14.1)',
-          'type':            'alpine',
-          'vulnerabilities': [
-            {
-              'cve':  'CVE-2021-42378',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the getvar_i function",
-              'diffID':        'sha256:680c6f24786b53640e37f56c4f3e5781fa1aeded0588efc878d655ba8414e013',
-              'fixedVersions': [
-                '1.33.1-r6'
-              ],
-              'installedVersion': '1.33.1-r3',
-              'packageName':      'busybox',
-              'purl':             'pkg:apk/alpine/busybox@1.33.1-r3?arch=armv7&distro=3.14.1',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42378',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42378',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42378'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the getvar_i()'
-            },
-            {
-              'cve':  'CVE-2021-42379',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the next_input_file function",
-              'diffID':        'sha256:680c6f24786b53640e37f56c4f3e5781fa1aeded0588efc878d655ba8414e013',
-              'fixedVersions': [
-                '1.33.1-r6'
-              ],
-              'installedVersion': '1.33.1-r3',
-              'packageName':      'busybox',
-              'purl':             'pkg:apk/alpine/busybox@1.33.1-r3?arch=armv7&distro=3.14.1',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42379',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42379',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42379'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the next_input_file()'
-            },
-            {
-              'cve':  'CVE-2021-42380',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the clrvar function",
-              'diffID':        'sha256:680c6f24786b53640e37f56c4f3e5781fa1aeded0588efc878d655ba8414e013',
-              'fixedVersions': [
-                '1.33.1-r6'
-              ],
-              'installedVersion': '1.33.1-r3',
-              'packageName':      'busybox',
-              'purl':             'pkg:apk/alpine/busybox@1.33.1-r3?arch=armv7&distro=3.14.1',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42380',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42380',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42380'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the clrvar()'
-            },
-            {
-              'cve':  'CVE-2021-42381',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the hash_init function",
-              'diffID':        'sha256:680c6f24786b53640e37f56c4f3e5781fa1aeded0588efc878d655ba8414e013',
-              'fixedVersions': [
-                '1.33.1-r6'
-              ],
-              'installedVersion': '1.33.1-r3',
-              'packageName':      'busybox',
-              'purl':             'pkg:apk/alpine/busybox@1.33.1-r3?arch=armv7&distro=3.14.1',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42381',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42381',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42381'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the hash_init()'
-            },
-            {
-              'cve':  'CVE-2021-42382',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the getvar_s function",
-              'diffID':        'sha256:680c6f24786b53640e37f56c4f3e5781fa1aeded0588efc878d655ba8414e013',
-              'fixedVersions': [
-                '1.33.1-r6'
-              ],
-              'installedVersion': '1.33.1-r3',
-              'packageName':      'busybox',
-              'purl':             'pkg:apk/alpine/busybox@1.33.1-r3?arch=armv7&distro=3.14.1',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42382',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42382',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42382'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the getvar_s()'
-            },
-            {
-              'cve':  'CVE-2021-42383',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the evaluate function",
-              'diffID':        'sha256:680c6f24786b53640e37f56c4f3e5781fa1aeded0588efc878d655ba8414e013',
-              'fixedVersions': [
-                '1.33.1-r6'
-              ],
-              'installedVersion': '1.33.1-r3',
-              'packageName':      'busybox',
-              'purl':             'pkg:apk/alpine/busybox@1.33.1-r3?arch=armv7&distro=3.14.1',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42383',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42383',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42383'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the evaluate()'
-            },
-            {
-              'cve':  'CVE-2021-42384',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the handle_special function",
-              'diffID':        'sha256:680c6f24786b53640e37f56c4f3e5781fa1aeded0588efc878d655ba8414e013',
-              'fixedVersions': [
-                '1.33.1-r6'
-              ],
-              'installedVersion': '1.33.1-r3',
-              'packageName':      'busybox',
-              'purl':             'pkg:apk/alpine/busybox@1.33.1-r3?arch=armv7&distro=3.14.1',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42384',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42384',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42384'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the handle_special()'
-            },
-            {
-              'cve':  'CVE-2021-42385',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the evaluate function",
-              'diffID':        'sha256:680c6f24786b53640e37f56c4f3e5781fa1aeded0588efc878d655ba8414e013',
-              'fixedVersions': [
-                '1.33.1-r6'
-              ],
-              'installedVersion': '1.33.1-r3',
-              'packageName':      'busybox',
-              'purl':             'pkg:apk/alpine/busybox@1.33.1-r3?arch=armv7&distro=3.14.1',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42385',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42385',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42385'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the evaluate()'
-            },
-            {
-              'cve':  'CVE-2021-42386',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the nvalloc function",
-              'diffID':        'sha256:680c6f24786b53640e37f56c4f3e5781fa1aeded0588efc878d655ba8414e013',
-              'fixedVersions': [
-                '1.33.1-r6'
-              ],
-              'installedVersion': '1.33.1-r3',
-              'packageName':      'busybox',
-              'purl':             'pkg:apk/alpine/busybox@1.33.1-r3?arch=armv7&distro=3.14.1',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42386',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42386',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42386'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the nvalloc()'
-            },
-            {
-              'cve':  'CVE-2022-28391',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '8.8',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-88'
-              ],
-              'description':   "BusyBox through 1.35.0 allows remote attackers to execute arbitrary code if netstat is used to print a DNS PTR record's value to a VT compatible terminal. Alternatively, the attacker could choose to change the terminal's colors.",
-              'diffID':        'sha256:680c6f24786b53640e37f56c4f3e5781fa1aeded0588efc878d655ba8414e013',
-              'fixedVersions': [
-                '1.33.1-r7'
-              ],
-              'installedVersion': '1.33.1-r3',
-              'packageName':      'busybox',
-              'purl':             'pkg:apk/alpine/busybox@1.33.1-r3?arch=armv7&distro=3.14.1',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2022-28391',
-                'https://git.alpinelinux.org/aports/plain/main/busybox/0001-libbb-sockaddr2str-ensure-only-printable-characters-.patch',
-                'https://git.alpinelinux.org/aports/plain/main/busybox/0002-nslookup-sanitize-all-printed-strings-with-printable.patch',
-                'https://gitlab.alpinelinux.org/alpine/aports/-/issues/13661',
-                'https://nvd.nist.gov/vuln/detail/CVE-2022-28391',
-                'https://www.cve.org/CVERecord?id=CVE-2022-28391'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: remote attackers may execute arbitrary code if netstat is used'
-            },
-            {
-              'cve':  'CVE-2021-42374',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '5.7',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-125'
-              ],
-              'description':   "An out-of-bounds heap read in Busybox's unlzma applet leads to information leak and denial of service when crafted LZMA-compressed input is decompressed. This can be triggered by any applet/format that",
-              'diffID':        'sha256:680c6f24786b53640e37f56c4f3e5781fa1aeded0588efc878d655ba8414e013',
-              'fixedVersions': [
-                '1.33.1-r4'
-              ],
-              'installedVersion': '1.33.1-r3',
-              'packageName':      'busybox',
-              'purl':             'pkg:apk/alpine/busybox@1.33.1-r3?arch=armv7&distro=3.14.1',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42374',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42374',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42374'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'busybox: out-of-bounds read in unlzma applet leads to information leak and denial of service when crafted LZMA-compressed input is decompressed'
-            },
-            {
-              'cve':  'CVE-2021-42375',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.5',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '4.1',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-159'
-              ],
-              'description':   "An incorrect handling of a special element in Busybox's ash applet leads to denial of service when processing a crafted shell command, due to the shell mistaking specific characters for reserved characters. This may be used for DoS under rare conditions of filtered command input.",
-              'diffID':        'sha256:680c6f24786b53640e37f56c4f3e5781fa1aeded0588efc878d655ba8414e013',
-              'fixedVersions': [
-                '1.33.1-r5'
-              ],
-              'installedVersion': '1.33.1-r3',
-              'packageName':      'busybox',
-              'purl':             'pkg:apk/alpine/busybox@1.33.1-r3?arch=armv7&distro=3.14.1',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42375',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42375',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42375'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'busybox: incorrect handling of a special element in ash applet leads to denial of service when processing a crafted shell command'
-            },
-            {
-              'cve':  'CVE-2021-3711',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '9.8',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'nvd': {
-                  'v3score':  '9.8',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '9.8',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-120'
-              ],
-              'description':   'In order to decrypt SM2 encrypted data an application is expected to call the API function EVP_PKEY_decrypt(). Typically an application will call this function twice. The first time, on entry, the "out" parameter can be NULL and, on exit, the "outlen" parameter is populated with the buffer size required to hold the decrypted plaintext. The application can then allocate a sufficiently sized buffer and call EVP_PKEY_decrypt() again, but this time passing a non-NULL value for the "out" parameter. A bug in the implementation of the SM2 decryption code means that the calculation of the buffer size required to hold the plaintext returned by the first call to EVP_PKEY_decrypt() can be smaller than the actual size required by the second call. This can lead to a buffer overflow when EVP_PKEY_decrypt() is called by the application a second time with a buffer that is too small. A malicious attacker who is able present SM2 content for decryption to an application could cause attacker chosen data to overflow the buffer by up to a maximum of 62 bytes altering the contents of other data held after the buffer, possibly changing application behaviour or causing the application to crash. The location of the buffer is application dependent but is typically heap allocated. Fixed in OpenSSL 1.1.1l (Affected 1.1.1-1.1.1k).',
-              'diffID':        'sha256:680c6f24786b53640e37f56c4f3e5781fa1aeded0588efc878d655ba8414e013',
-              'fixedVersions': [
-                '1.1.1l-r0'
-              ],
-              'installedVersion': '1.1.1k-r0',
-              'packageName':      'libcrypto1.1',
-              'purl':             'pkg:apk/alpine/libcrypto1.1@1.1.1k-r0?arch=armv7&distro=3.14.1',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2021/08/26/2',
-                'https://access.redhat.com/security/cve/CVE-2021-3711',
-                'https://cert-portal.siemens.com/productcert/pdf/ssa-389290.pdf',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=59f5e75f3bced8fc0e130d72a3f582cf7b480b46',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=59f5e75f3bced8fc0e130d72a3f582cf7b480b46',
-                'https://lists.apache.org/thread.html/r18995de860f0e63635f3008fd2a6aca82394249476d21691e7c59c9e%40%3Cdev.tomcat.apache.org%3E',
-                'https://lists.apache.org/thread.html/r18995de860f0e63635f3008fd2a6aca82394249476d21691e7c59c9e@%3Cdev.tomcat.apache.org%3E',
-                'https://lists.apache.org/thread.html/rad5d9f83f0d11fb3f8bb148d179b8a9ad7c6a17f18d70e5805a713d1%40%3Cdev.tomcat.apache.org%3E',
-                'https://lists.apache.org/thread.html/rad5d9f83f0d11fb3f8bb148d179b8a9ad7c6a17f18d70e5805a713d1@%3Cdev.tomcat.apache.org%3E',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-3711',
-                'https://rustsec.org/advisories/RUSTSEC-2021-0097.html',
-                'https://security.gentoo.org/glsa/202209-02',
-                'https://security.gentoo.org/glsa/202210-02',
-                'https://security.netapp.com/advisory/ntap-20210827-0010',
-                'https://security.netapp.com/advisory/ntap-20210827-0010/',
-                'https://security.netapp.com/advisory/ntap-20211022-0003',
-                'https://security.netapp.com/advisory/ntap-20211022-0003/',
-                'https://security.netapp.com/advisory/ntap-20240621-0006',
-                'https://security.netapp.com/advisory/ntap-20240621-0006/',
-                'https://ubuntu.com/security/notices/USN-5051-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-3711',
-                'https://www.debian.org/security/2021/dsa-4963',
-                'https://www.openssl.org/news/secadv/20210824.txt',
-                'https://www.oracle.com/security-alerts/cpuapr2022.html',
-                'https://www.oracle.com/security-alerts/cpujan2022.html',
-                'https://www.oracle.com/security-alerts/cpuoct2021.html',
-                'https://www.tenable.com/security/tns-2021-16',
-                'https://www.tenable.com/security/tns-2022-02'
-              ],
-              'severity':   'CRITICAL',
-              'suppressed': false,
-              'title':      'openssl: SM2 Decryption Buffer Overflow'
-            },
-            {
-              'cve':  'CVE-2021-3712',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '7.4',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H'
-                },
-                'nvd': {
-                  'v3score':  '7.4',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.4',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-125'
-              ],
-              'description':   "ASN.1 strings are represented internally within OpenSSL as an ASN1_STRING structure which contains a buffer holding the string data and a field holding the buffer length. This contrasts with normal C strings which are repesented as a buffer for the string data which is terminated with a NUL (0) byte. Although not a strict requirement, ASN.1 strings that are parsed using OpenSSL's own \"d2i\" functions (and other similar parsing functions) as well as any string whose value has been set with the ASN1_STRING_set() function will additionally NUL terminate the byte array in the ASN1_STRING structure. However, it is possible for applications to directly construct valid ASN1_STRING structures which do not NUL terminate the byte array by directly setting the \"data\" and \"length\" fields in the ASN1_STRING array. This can also happen by using the ASN1_STRING_set0() function. Numerous OpenSSL functions that print ASN.1 data have been found to assume that the ASN1_STRING byte array will be NUL terminated, even though this is not guaranteed for strings that have been directly constructed. Where an application requests an ASN.1 structure to be printed, and where that ASN.1 structure contains ASN1_STRINGs that have been directly constructed by the application without NUL terminating the \"data\" field, then a read buffer overrun can occur. The same thing can also occur during name constraints processing of certificates (for example if a certificate has been directly constructed by the application instead of loading it via the OpenSSL parsing functions, and the certificate contains non NUL terminated ASN1_STRING structures). It can also occur in the X509_get1_email(), X509_REQ_get1_email() and X509_get1_ocsp() functions. If a malicious actor can cause an application to directly construct an ASN1_STRING and then process it through one of the affected OpenSSL functions then this issue could be hit. This might result in a crash (causing a Denial of Service attack). It could also result in the disclosure of private memory contents (such as private keys, or sensitive plaintext). Fixed in OpenSSL 1.1.1l (Affected 1.1.1-1.1.1k). Fixed in OpenSSL 1.0.2za (Affected 1.0.2-1.0.2y).",
-              'diffID':        'sha256:680c6f24786b53640e37f56c4f3e5781fa1aeded0588efc878d655ba8414e013',
-              'fixedVersions': [
-                '1.1.1l-r0'
-              ],
-              'installedVersion': '1.1.1k-r0',
-              'packageName':      'libcrypto1.1',
-              'purl':             'pkg:apk/alpine/libcrypto1.1@1.1.1k-r0?arch=armv7&distro=3.14.1',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2021/08/26/2',
-                'https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2021-3712.json',
-                'https://access.redhat.com/security/cve/CVE-2021-3712',
-                'https://cert-portal.siemens.com/productcert/pdf/ssa-244969.pdf',
-                'https://cert-portal.siemens.com/productcert/pdf/ssa-389290.pdf',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=94d23fcff9b2a7a8368dfe52214d5c2569882c11',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=ccb0a11145ee72b042d10593a64eaf9e8a55ec12',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=94d23fcff9b2a7a8368dfe52214d5c2569882c11',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=ccb0a11145ee72b042d10593a64eaf9e8a55ec12',
-                'https://kc.mcafee.com/corporate/index?page=content&id=SB10366',
-                'https://linux.oracle.com/cve/CVE-2021-3712.html',
-                'https://linux.oracle.com/errata/ELSA-2022-9023.html',
-                'https://lists.apache.org/thread.html/r18995de860f0e63635f3008fd2a6aca82394249476d21691e7c59c9e%40%3Cdev.tomcat.apache.org%3E',
-                'https://lists.apache.org/thread.html/r18995de860f0e63635f3008fd2a6aca82394249476d21691e7c59c9e@%3Cdev.tomcat.apache.org%3E',
-                'https://lists.apache.org/thread.html/rad5d9f83f0d11fb3f8bb148d179b8a9ad7c6a17f18d70e5805a713d1%40%3Cdev.tomcat.apache.org%3E',
-                'https://lists.apache.org/thread.html/rad5d9f83f0d11fb3f8bb148d179b8a9ad7c6a17f18d70e5805a713d1@%3Cdev.tomcat.apache.org%3E',
-                'https://lists.debian.org/debian-lts-announce/2021/09/msg00014.html',
-                'https://lists.debian.org/debian-lts-announce/2021/09/msg00021.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-3712',
-                'https://rustsec.org/advisories/RUSTSEC-2021-0098.html',
-                'https://security.gentoo.org/glsa/202209-02',
-                'https://security.gentoo.org/glsa/202210-02',
-                'https://security.netapp.com/advisory/ntap-20210827-0010',
-                'https://security.netapp.com/advisory/ntap-20210827-0010/',
-                'https://security.netapp.com/advisory/ntap-20240621-0006',
-                'https://security.netapp.com/advisory/ntap-20240621-0006/',
-                'https://ubuntu.com/security/notices/USN-5051-1',
-                'https://ubuntu.com/security/notices/USN-5051-2',
-                'https://ubuntu.com/security/notices/USN-5051-3',
-                'https://ubuntu.com/security/notices/USN-5051-4 (regression only in trusty/esm)',
-                'https://ubuntu.com/security/notices/USN-5088-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-3712',
-                'https://www.debian.org/security/2021/dsa-4963',
-                'https://www.openssl.org/news/secadv/20210824.txt',
-                'https://www.oracle.com/security-alerts/cpuapr2022.html',
-                'https://www.oracle.com/security-alerts/cpujan2022.html',
-                'https://www.oracle.com/security-alerts/cpuoct2021.html',
-                'https://www.tenable.com/security/tns-2021-16',
-                'https://www.tenable.com/security/tns-2022-02'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: Read buffer overruns processing ASN.1 strings'
-            },
-            {
-              'cve':  'CVE-2022-0778',
-              'cvss': {
-                'bitnami': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'ghsa': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'nvd': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-835'
-              ],
-              'description':   'The BN_mod_sqrt() function, which computes a modular square root, contains a bug that can cause it to loop forever for non-prime moduli. Internally this function is used when parsing certificates that contain elliptic curve public keys in compressed form or explicit elliptic curve parameters with a base point encoded in compressed form. It is possible to trigger the infinite loop by crafting a certificate that has invalid explicit curve parameters. Since certificate parsing happens prior to verification of the certificate signature, any process that parses an externally supplied certificate may thus be subject to a denial of service attack. The infinite loop can also be reached when parsing crafted private keys as they can contain explicit elliptic curve parameters. Thus vulnerable situations include: - TLS clients consuming server certificates - TLS servers consuming client certificates - Hosting providers taking certificates or private keys from customers - Certificate authorities parsing certification requests from subscribers - Anything else which parses ASN.1 elliptic curve parameters Also any other applications that use the BN_mod_sqrt() where the attacker can control the parameter values are vulnerable to this DoS issue. In the OpenSSL 1.0.2 version the public key is not parsed during initial parsing of the certificate which makes it slightly harder to trigger the infinite loop. However any operation which requires the public key from the certificate will trigger the infinite loop. In particular the attacker can use a self-signed certificate to trigger the loop during verification of the certificate signature. This issue affects OpenSSL versions 1.0.2, 1.1.1 and 3.0. It was addressed in the releases of 1.1.1n and 3.0.2 on the 15th March 2022. Fixed in OpenSSL 3.0.2 (Affected 3.0.0,3.0.1). Fixed in OpenSSL 1.1.1n (Affected 1.1.1-1.1.1m). Fixed in OpenSSL 1.0.2zd (Affected 1.0.2-1.0.2zc).',
-              'diffID':        'sha256:680c6f24786b53640e37f56c4f3e5781fa1aeded0588efc878d655ba8414e013',
-              'fixedVersions': [
-                '1.1.1n-r0'
-              ],
-              'installedVersion': '1.1.1k-r0',
-              'packageName':      'libcrypto1.1',
-              'purl':             'pkg:apk/alpine/libcrypto1.1@1.1.1k-r0?arch=armv7&distro=3.14.1',
-              'references':       [
-                'http://packetstormsecurity.com/files/167344/OpenSSL-1.0.2-1.1.1-3.0-BN_mod_sqrt-Infinite-Loop.html',
-                'http://seclists.org/fulldisclosure/2022/May/33',
-                'http://seclists.org/fulldisclosure/2022/May/35',
-                'http://seclists.org/fulldisclosure/2022/May/38',
-                'https://access.redhat.com/errata/RHSA-2022:5326',
-                'https://access.redhat.com/security/cve/CVE-2022-0778',
-                'https://bugzilla.redhat.com/2062202',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2062202',
-                'https://cert-portal.siemens.com/productcert/pdf/ssa-712929.pdf',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-0778',
-                'https://errata.almalinux.org/8/ALSA-2022-5326.html',
-                'https://errata.rockylinux.org/RLSA-2022:4899',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=3118eb64934499d93db3230748a452351d1d9a65',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=380085481c64de749a6dd25cdf0bcf4360b30f83',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=a466912611aa6cbdf550cd10601390e587451246',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=3118eb64934499d93db3230748a452351d1d9a65',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=380085481c64de749a6dd25cdf0bcf4360b30f83',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=a466912611aa6cbdf550cd10601390e587451246',
-                'https://linux.oracle.com/cve/CVE-2022-0778.html',
-                'https://linux.oracle.com/errata/ELSA-2022-9272.html',
-                'https://lists.debian.org/debian-lts-announce/2022/03/msg00023.html',
-                'https://lists.debian.org/debian-lts-announce/2022/03/msg00024.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/323SNN6ZX7PRJJWP2BUAFLPUAE42XWLZ',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/323SNN6ZX7PRJJWP2BUAFLPUAE42XWLZ/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GDB3GQVJPXJE7X5C5JN6JAA4XUDWD6E6',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GDB3GQVJPXJE7X5C5JN6JAA4XUDWD6E6/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/W6K3PR542DXWLEFFMFIDMME4CWMHJRMG',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/W6K3PR542DXWLEFFMFIDMME4CWMHJRMG/',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/323SNN6ZX7PRJJWP2BUAFLPUAE42XWLZ',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/GDB3GQVJPXJE7X5C5JN6JAA4XUDWD6E6',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/W6K3PR542DXWLEFFMFIDMME4CWMHJRMG',
-                'https://nvd.nist.gov/vuln/detail/CVE-2022-0778',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2022-0002',
-                'https://rustsec.org/advisories/RUSTSEC-2022-0014.html',
-                'https://security.gentoo.org/glsa/202210-02',
-                'https://security.netapp.com/advisory/ntap-20220321-0002',
-                'https://security.netapp.com/advisory/ntap-20220321-0002/',
-                'https://security.netapp.com/advisory/ntap-20220429-0005',
-                'https://security.netapp.com/advisory/ntap-20220429-0005/',
-                'https://security.netapp.com/advisory/ntap-20240621-0006',
-                'https://security.netapp.com/advisory/ntap-20240621-0006/',
-                'https://support.apple.com/kb/HT213255',
-                'https://support.apple.com/kb/HT213256',
-                'https://support.apple.com/kb/HT213257',
-                'https://ubuntu.com/security/notices/USN-5328-1',
-                'https://ubuntu.com/security/notices/USN-5328-2',
-                'https://ubuntu.com/security/notices/USN-6457-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2022-0778',
-                'https://www.debian.org/security/2022/dsa-5103',
-                'https://www.openssl.org/news/secadv/20220315.txt',
-                'https://www.oracle.com/security-alerts/cpuapr2022.html',
-                'https://www.oracle.com/security-alerts/cpujul2022.html',
-                'https://www.tenable.com/security/tns-2022-06',
-                'https://www.tenable.com/security/tns-2022-07',
-                'https://www.tenable.com/security/tns-2022-08',
-                'https://www.tenable.com/security/tns-2022-09'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: Infinite loop in BN_mod_sqrt() reachable when parsing certificates'
-            },
-            {
-              'cve':  'CVE-2022-4450',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'nvd': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-415'
-              ],
-              'description':   'The function PEM_read_bio_ex() reads a PEM file from a BIO and parses and\ndecodes the "name" (e.g. "CERTIFICATE"), any header data and the payload data.\nIf the function succeeds then the "name_out", "header" and "data" arguments are\npopulated with pointers to buffers containing the relevant decoded data. The\ncaller is responsible for freeing those buffers. It is possible to construct a\nPEM file that results in 0 bytes of payload data. In this case PEM_read_bio_ex()\nwill return a failure code but will populate the header argument with a pointer\nto a buffer that has already been freed. If the caller also frees this buffer\nthen a double free will occur. This will most likely lead to a crash. This\ncould be exploited by an attacker who has the ability to supply malicious PEM\nfiles for parsing to achieve a denial of service attack.\n\nThe functions PEM_read_bio() and PEM_read() are simple wrappers around\nPEM_read_bio_ex() and therefore these functions are also directly affected.\n\nThese functions are also called indirectly by a number of other OpenSSL\nfunctions including PEM_X509_INFO_read_bio_ex() and\nSSL_CTX_use_serverinfo_file() which are also vulnerable. Some OpenSSL internal\nuses of these functions are not vulnerable because the caller does not free the\nheader argument if PEM_read_bio_ex() returns a failure code. These locations\ninclude the PEM_read_bio_TYPE() functions as well as the decoders introduced in\nOpenSSL 3.0.\n\nThe OpenSSL asn1parse command line application is also impacted by this issue.',
-              'diffID':        'sha256:680c6f24786b53640e37f56c4f3e5781fa1aeded0588efc878d655ba8414e013',
-              'fixedVersions': [
-                '1.1.1t-r0'
-              ],
-              'installedVersion': '1.1.1k-r0',
-              'packageName':      'libcrypto1.1',
-              'purl':             'pkg:apk/alpine/libcrypto1.1@1.1.1k-r0?arch=armv7&distro=3.14.1',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2023:2165',
-                'https://access.redhat.com/security/cve/CVE-2022-4450',
-                'https://bugzilla.redhat.com/1960321',
-                'https://bugzilla.redhat.com/2164440',
-                'https://bugzilla.redhat.com/2164487',
-                'https://bugzilla.redhat.com/2164492',
-                'https://bugzilla.redhat.com/2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144000',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144003',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144006',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144008',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144010',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144012',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144015',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144017',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144019',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2145170',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2158412',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164440',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164487',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164488',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164492',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164497',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164499',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164500',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4203',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4304',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4450',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0215',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0216',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0217',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0286',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0401',
-                'https://errata.almalinux.org/9/ALSA-2023-2165.html',
-                'https://errata.rockylinux.org/RLSA-2023:0946',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=63bcf189be73a9cc1264059bed6f57974be74a83',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=bbcf509bd046b34cca19c766bbddc31683d0858b',
-                'https://linux.oracle.com/cve/CVE-2022-4450.html',
-                'https://linux.oracle.com/errata/ELSA-2023-32791.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2022-4450',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0003',
-                'https://rustsec.org/advisories/RUSTSEC-2023-0010.html',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://ubuntu.com/security/notices/USN-5844-1',
-                'https://ubuntu.com/security/notices/USN-6564-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2022-4450',
-                'https://www.openssl.org/news/secadv/20230207.txt'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: double free after calling PEM_read_bio_ex'
-            },
-            {
-              'cve':  'CVE-2023-0215',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'nvd': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   'The public API function BIO_new_NDEF is a helper function used for streaming\nASN.1 data via a BIO. It is primarily used internally to OpenSSL to support the\nSMIME, CMS and PKCS7 streaming capabilities, but may also be called directly by\nend user applications.\n\nThe function receives a BIO from the caller, prepends a new BIO_f_asn1 filter\nBIO onto the front of it to form a BIO chain, and then returns the new head of\nthe BIO chain to the caller. Under certain conditions, for example if a CMS\nrecipient public key is invalid, the new filter BIO is freed and the function\nreturns a NULL result indicating a failure. However, in this case, the BIO chain\nis not properly cleaned up and the BIO passed by the caller still retains\ninternal pointers to the previously freed filter BIO. If the caller then goes on\nto call BIO_pop() on the BIO then a use-after-free will occur. This will most\nlikely result in a crash.\n\n\n\nThis scenario occurs directly in the internal function B64_write_ASN1() which\nmay cause BIO_new_NDEF() to be called and will subsequently call BIO_pop() on\nthe BIO. This internal function is in turn called by the public API functions\nPEM_write_bio_ASN1_stream, PEM_write_bio_CMS_stream, PEM_write_bio_PKCS7_stream,\nSMIME_write_ASN1, SMIME_write_CMS and SMIME_write_PKCS7.\n\nOther public API functions that may be impacted by this include\ni2d_ASN1_bio_stream, BIO_new_CMS, BIO_new_PKCS7, i2d_CMS_bio_stream and\ni2d_PKCS7_bio_stream.\n\nThe OpenSSL cms and smime command line applications are similarly affected.',
-              'diffID':        'sha256:680c6f24786b53640e37f56c4f3e5781fa1aeded0588efc878d655ba8414e013',
-              'fixedVersions': [
-                '1.1.1t-r0'
-              ],
-              'installedVersion': '1.1.1k-r0',
-              'packageName':      'libcrypto1.1',
-              'purl':             'pkg:apk/alpine/libcrypto1.1@1.1.1k-r0?arch=armv7&distro=3.14.1',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2023:2165',
-                'https://access.redhat.com/security/cve/CVE-2023-0215',
-                'https://bugzilla.redhat.com/1960321',
-                'https://bugzilla.redhat.com/2164440',
-                'https://bugzilla.redhat.com/2164487',
-                'https://bugzilla.redhat.com/2164492',
-                'https://bugzilla.redhat.com/2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144000',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144003',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144006',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144008',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144010',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144012',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144015',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144017',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144019',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2145170',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2158412',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164440',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164487',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164488',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164492',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164497',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164499',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164500',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4203',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4304',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4450',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0215',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0216',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0217',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0286',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0401',
-                'https://errata.almalinux.org/9/ALSA-2023-2165.html',
-                'https://errata.rockylinux.org/RLSA-2023:0946',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=8818064ce3c3c0f1b740a5aaba2a987e75bfbafd',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=9816136fe31d92ace4037d5da5257f763aeeb4eb',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=c3829dd8825c654652201e16f8a0a0c46ee3f344',
-                'https://linux.oracle.com/cve/CVE-2023-0215.html',
-                'https://linux.oracle.com/errata/ELSA-2023-32791.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-0215',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0003',
-                'https://rustsec.org/advisories/RUSTSEC-2023-0009.html',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://security.netapp.com/advisory/ntap-20230427-0007',
-                'https://security.netapp.com/advisory/ntap-20230427-0007/',
-                'https://security.netapp.com/advisory/ntap-20230427-0009',
-                'https://security.netapp.com/advisory/ntap-20230427-0009/',
-                'https://security.netapp.com/advisory/ntap-20240621-0006',
-                'https://security.netapp.com/advisory/ntap-20240621-0006/',
-                'https://ubuntu.com/security/notices/USN-5844-1',
-                'https://ubuntu.com/security/notices/USN-5845-1',
-                'https://ubuntu.com/security/notices/USN-5845-2',
-                'https://ubuntu.com/security/notices/USN-6564-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-0215',
-                'https://www.openssl.org/news/secadv/20230207.txt'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: use-after-free following BIO_new_NDEF'
-            },
-            {
-              'cve':  'CVE-2023-0286',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '7.4',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H'
-                },
-                'nvd': {
-                  'v3score':  '7.4',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.4',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-843'
-              ],
-              'description':   'There is a type confusion vulnerability relating to X.400 address processing\ninside an X.509 GeneralName. X.400 addresses were parsed as an ASN1_STRING but\nthe public structure definition for GENERAL_NAME incorrectly specified the type\nof the x400Address field as ASN1_TYPE. This field is subsequently interpreted by\nthe OpenSSL function GENERAL_NAME_cmp as an ASN1_TYPE rather than an\nASN1_STRING.\n\nWhen CRL checking is enabled (i.e. the application sets the\nX509_V_FLAG_CRL_CHECK flag), this vulnerability may allow an attacker to pass\narbitrary pointers to a memcmp call, enabling them to read memory contents or\nenact a denial of service. In most cases, the attack requires the attacker to\nprovide both the certificate chain and CRL, neither of which need to have a\nvalid signature. If the attacker only controls one of these inputs, the other\ninput must already contain an X.400 address as a CRL distribution point, which\nis uncommon. As such, this vulnerability is most likely to only affect\napplications which have implemented their own functionality for retrieving CRLs\nover a network.',
-              'diffID':        'sha256:680c6f24786b53640e37f56c4f3e5781fa1aeded0588efc878d655ba8414e013',
-              'fixedVersions': [
-                '1.1.1t-r0'
-              ],
-              'installedVersion': '1.1.1k-r0',
-              'packageName':      'libcrypto1.1',
-              'purl':             'pkg:apk/alpine/libcrypto1.1@1.1.1k-r0?arch=armv7&distro=3.14.1',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2025:7937',
-                'https://access.redhat.com/security/cve/CVE-2023-0286',
-                'https://access.redhat.com/security/cve/cve-2023-0286',
-                'https://bugzilla.redhat.com/2164440',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144000',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144003',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144006',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144008',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144010',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144012',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144015',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144017',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144019',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2145170',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2158412',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164440',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164487',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164488',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164492',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164497',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164499',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164500',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4203',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4304',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4450',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0215',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0216',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0217',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0286',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0401',
-                'https://errata.almalinux.org/9/ALSA-2025-7937.html',
-                'https://errata.rockylinux.org/RLSA-2023:0946',
-                'https://ftp.openbsd.org/pub/OpenBSD/LibreSSL/libressl-3.6.2-relnotes.txt',
-                'https://ftp.openbsd.org/pub/OpenBSD/patches/7.2/common/018_x509.patch.sig',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=2c6c9d439b484e1ba9830d8454a34fa4f80fdfe9',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=2f7530077e0ef79d98718138716bc51ca0cad658',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=fd2af07dc083a350c959147097003a14a5e8ac4d',
-                'https://github.com/pyca/cryptography',
-                'https://github.com/pyca/cryptography/security/advisories/GHSA-x4qr-2fvf-3mr5',
-                'https://linux.oracle.com/cve/CVE-2023-0286.html',
-                'https://linux.oracle.com/errata/ELSA-2025-7937.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-0286',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0003',
-                'https://rustsec.org/advisories/RUSTSEC-2023-0006.html',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://ubuntu.com/security/notices/USN-5844-1',
-                'https://ubuntu.com/security/notices/USN-5845-1',
-                'https://ubuntu.com/security/notices/USN-5845-2',
-                'https://ubuntu.com/security/notices/USN-6564-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-0286',
-                'https://www.openssl.org/news/secadv/20230207.txt'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: X.400 address type confusion in X.509 GeneralName'
-            },
-            {
-              'cve':  'CVE-2023-0464',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-295'
-              ],
-              'description':   "A security vulnerability has been identified in all supported versions\n\nof OpenSSL related to the verification of X.509 certificate chains\nthat include policy constraints.  Attackers may be able to exploit this\nvulnerability by creating a malicious certificate chain that triggers\nexponential use of computational resources, leading to a denial-of-service\n(DoS) attack on affected systems.\n\nPolicy processing is disabled by default but can be enabled by passing\nthe `-policy' argument to the command line utilities or by calling the\n`X509_VERIFY_PARAM_set1_policies()' function.",
-              'diffID':        'sha256:680c6f24786b53640e37f56c4f3e5781fa1aeded0588efc878d655ba8414e013',
-              'fixedVersions': [
-                '1.1.1t-r1'
-              ],
-              'installedVersion': '1.1.1k-r0',
-              'packageName':      'libcrypto1.1',
-              'purl':             'pkg:apk/alpine/libcrypto1.1@1.1.1k-r0?arch=armv7&distro=3.14.1',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2023:3722',
-                'https://access.redhat.com/security/cve/CVE-2023-0464',
-                'https://bugzilla.redhat.com/2181082',
-                'https://bugzilla.redhat.com/2182561',
-                'https://bugzilla.redhat.com/2182565',
-                'https://bugzilla.redhat.com/2188461',
-                'https://bugzilla.redhat.com/2207947',
-                'https://errata.almalinux.org/9/ALSA-2023-3722.html',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=2017771e2db3e2b96f89bbe8766c3209f6a99545',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=2dcd4f1e3115f38cefa43e3efbe9b801c27e642e',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=879f7080d7e141f415c79eaa3a8ac4a3dad0348b',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=959c59c7a0164117e7f8366466a32bb1f8d77ff1',
-                'https://linux.oracle.com/cve/CVE-2023-0464.html',
-                'https://linux.oracle.com/errata/ELSA-2023-3722.html',
-                'https://lists.debian.org/debian-lts-announce/2023/06/msg00011.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-0464',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://security.netapp.com/advisory/ntap-20230406-0006/',
-                'https://security.netapp.com/advisory/ntap-20240621-0006/',
-                'https://ubuntu.com/security/notices/USN-6039-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.couchbase.com/alerts/',
-                'https://www.cve.org/CVERecord?id=CVE-2023-0464',
-                'https://www.debian.org/security/2023/dsa-5417',
-                'https://www.openssl.org/news/secadv/20230322.txt'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: Denial of service by excessive resource usage in verifying X509 policy constraints'
-            },
-            {
-              'cve':  'CVE-2022-2097',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N'
-                },
-                'nvd': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N'
-                },
-                'redhat': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-327'
-              ],
-              'description':   "AES OCB mode for 32-bit x86 platforms using the AES-NI assembly optimised implementation will not encrypt the entirety of the data under some circumstances. This could reveal sixteen bytes of data that was preexisting in the memory that wasn't written. In the special case of \"in place\" encryption, sixteen bytes of the plaintext would be revealed. Since OpenSSL does not support OCB based cipher suites for TLS and DTLS, they are both unaffected. Fixed in OpenSSL 3.0.5 (Affected 3.0.0-3.0.4). Fixed in OpenSSL 1.1.1q (Affected 1.1.1-1.1.1p).",
-              'diffID':        'sha256:680c6f24786b53640e37f56c4f3e5781fa1aeded0588efc878d655ba8414e013',
-              'fixedVersions': [
-                '1.1.1q-r0'
-              ],
-              'installedVersion': '1.1.1k-r0',
-              'packageName':      'libcrypto1.1',
-              'purl':             'pkg:apk/alpine/libcrypto1.1@1.1.1k-r0?arch=armv7&distro=3.14.1',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2022:6224',
-                'https://access.redhat.com/security/cve/CVE-2022-2097',
-                'https://bugzilla.redhat.com/2081494',
-                'https://bugzilla.redhat.com/2087911',
-                'https://bugzilla.redhat.com/2087913',
-                'https://bugzilla.redhat.com/2097310',
-                'https://bugzilla.redhat.com/2104905',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2081494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2097310',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2100554',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2104905',
-                'https://cert-portal.siemens.com/productcert/pdf/ssa-332410.pdf',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-1292',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-2068',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-2097',
-                'https://errata.almalinux.org/9/ALSA-2022-6224.html',
-                'https://errata.rockylinux.org/RLSA-2022:5818',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=919925673d6c9cfed3c1085497f5dfbbed5fc431',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=a98f339ddd7e8f487d6e0088d4a9a42324885a93',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=919925673d6c9cfed3c1085497f5dfbbed5fc431',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=a98f339ddd7e8f487d6e0088d4a9a42324885a93',
-                'https://github.com/alexcrichton/openssl-src-rs',
-                'https://linux.oracle.com/cve/CVE-2022-2097.html',
-                'https://linux.oracle.com/errata/ELSA-2022-9955.html',
-                'https://lists.debian.org/debian-lts-announce/2023/02/msg00019.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/R6CK57NBQFTPUMXAPJURCGXUYT76NQAK',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/R6CK57NBQFTPUMXAPJURCGXUYT76NQAK/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/V6567JERRHHJW2GNGJGKDRNHR7SNPZK7',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/V6567JERRHHJW2GNGJGKDRNHR7SNPZK7/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VCMNWKERPBKOEBNL7CLTTX3ZZCZLH7XA',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VCMNWKERPBKOEBNL7CLTTX3ZZCZLH7XA/',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/R6CK57NBQFTPUMXAPJURCGXUYT76NQAK',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/R6CK57NBQFTPUMXAPJURCGXUYT76NQAK/',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/V6567JERRHHJW2GNGJGKDRNHR7SNPZK7',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/V6567JERRHHJW2GNGJGKDRNHR7SNPZK7/',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/VCMNWKERPBKOEBNL7CLTTX3ZZCZLH7XA',
-                'https://nvd.nist.gov/vuln/detail/CVE-2022-2097',
-                'https://rustsec.org/advisories/RUSTSEC-2022-0032.html',
-                'https://security.gentoo.org/glsa/202210-02',
-                'https://security.netapp.com/advisory/ntap-20220715-0011',
-                'https://security.netapp.com/advisory/ntap-20220715-0011/',
-                'https://security.netapp.com/advisory/ntap-20230420-0008',
-                'https://security.netapp.com/advisory/ntap-20230420-0008/',
-                'https://security.netapp.com/advisory/ntap-20240621-0006',
-                'https://security.netapp.com/advisory/ntap-20240621-0006/',
-                'https://ubuntu.com/security/notices/USN-5502-1',
-                'https://ubuntu.com/security/notices/USN-6457-1',
-                'https://www.cve.org/CVERecord?id=CVE-2022-2097',
-                'https://www.debian.org/security/2023/dsa-5343',
-                'https://www.openssl.org/news/secadv/20220705.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: AES OCB fails to encrypt some bytes'
-            },
-            {
-              'cve':  'CVE-2022-4304',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N'
-                },
-                'nvd': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N'
-                },
-                'redhat': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-203'
-              ],
-              'description':   'A timing based side channel exists in the OpenSSL RSA Decryption implementation\nwhich could be sufficient to recover a plaintext across a network in a\nBleichenbacher style attack. To achieve a successful decryption an attacker\nwould have to be able to send a very large number of trial messages for\ndecryption. The vulnerability affects all RSA padding modes: PKCS#1 v1.5,\nRSA-OEAP and RSASVE.\n\nFor example, in a TLS connection, RSA is commonly used by a client to send an\nencrypted pre-master secret to the server. An attacker that had observed a\ngenuine connection between a client and a server could use this flaw to send\ntrial messages to the server and record the time taken to process them. After a\nsufficiently large number of messages the attacker could recover the pre-master\nsecret used for the original connection and thus be able to decrypt the\napplication data sent over that connection.',
-              'diffID':        'sha256:680c6f24786b53640e37f56c4f3e5781fa1aeded0588efc878d655ba8414e013',
-              'fixedVersions': [
-                '1.1.1t-r0'
-              ],
-              'installedVersion': '1.1.1k-r0',
-              'packageName':      'libcrypto1.1',
-              'purl':             'pkg:apk/alpine/libcrypto1.1@1.1.1k-r0?arch=armv7&distro=3.14.1',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2023:2165',
-                'https://access.redhat.com/security/cve/CVE-2022-4304',
-                'https://bugzilla.redhat.com/1960321',
-                'https://bugzilla.redhat.com/2164440',
-                'https://bugzilla.redhat.com/2164487',
-                'https://bugzilla.redhat.com/2164492',
-                'https://bugzilla.redhat.com/2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144000',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144003',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144006',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144008',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144010',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144012',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144015',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144017',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144019',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2145170',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2158412',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164440',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164487',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164488',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164492',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164497',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164499',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164500',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4203',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4304',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4450',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0215',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0216',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0217',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0286',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0401',
-                'https://errata.almalinux.org/9/ALSA-2023-2165.html',
-                'https://errata.rockylinux.org/RLSA-2023:0946',
-                'https://linux.oracle.com/cve/CVE-2022-4304.html',
-                'https://linux.oracle.com/errata/ELSA-2023-32791.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2022-4304',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0003',
-                'https://rustsec.org/advisories/RUSTSEC-2023-0007.html',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://ubuntu.com/security/notices/USN-5844-1',
-                'https://ubuntu.com/security/notices/USN-6564-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2022-4304',
-                'https://www.openssl.org/news/secadv/20230207.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: timing attack in RSA Decryption implementation'
-            },
-            {
-              'cve':  'CVE-2023-0465',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N'
-                },
-                'redhat': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-295'
-              ],
-              'description':   "Applications that use a non-default option when verifying certificates may be\nvulnerable to an attack from a malicious CA to circumvent certain checks.\n\nInvalid certificate policies in leaf certificates are silently ignored by\nOpenSSL and other certificate policy checks are skipped for that certificate.\nA malicious CA could use this to deliberately assert invalid certificate policies\nin order to circumvent policy checking on the certificate altogether.\n\nPolicy processing is disabled by default but can be enabled by passing\nthe `-policy' argument to the command line utilities or by calling the\n`X509_VERIFY_PARAM_set1_policies()' function.",
-              'diffID':        'sha256:680c6f24786b53640e37f56c4f3e5781fa1aeded0588efc878d655ba8414e013',
-              'fixedVersions': [
-                '1.1.1t-r2'
-              ],
-              'installedVersion': '1.1.1k-r0',
-              'packageName':      'libcrypto1.1',
-              'purl':             'pkg:apk/alpine/libcrypto1.1@1.1.1k-r0?arch=armv7&distro=3.14.1',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2023:3722',
-                'https://access.redhat.com/security/cve/CVE-2023-0465',
-                'https://bugzilla.redhat.com/2181082',
-                'https://bugzilla.redhat.com/2182561',
-                'https://bugzilla.redhat.com/2182565',
-                'https://bugzilla.redhat.com/2188461',
-                'https://bugzilla.redhat.com/2207947',
-                'https://errata.almalinux.org/9/ALSA-2023-3722.html',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=10325176f3d3e98c6e2b3bf5ab1e3b334de6947a',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=1dd43e0709fece299b15208f36cc7c76209ba0bb',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=b013765abfa80036dc779dd0e50602c57bb3bf95',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=facfb1ab745646e97a1920977ae4a9965ea61d5c',
-                'https://linux.oracle.com/cve/CVE-2023-0465.html',
-                'https://linux.oracle.com/errata/ELSA-2023-3722.html',
-                'https://lists.debian.org/debian-lts-announce/2023/06/msg00011.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-0465',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://security.netapp.com/advisory/ntap-20230414-0001/',
-                'https://ubuntu.com/security/notices/USN-6039-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-0465',
-                'https://www.debian.org/security/2023/dsa-5417',
-                'https://www.openssl.org/news/secadv/20230328.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: Invalid certificate policies in leaf certificates are silently ignored'
-            },
-            {
-              'cve':  'CVE-2022-0778',
-              'cvss': {
-                'bitnami': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'ghsa': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'nvd': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-835'
-              ],
-              'description':   'The BN_mod_sqrt() function, which computes a modular square root, contains a bug that can cause it to loop forever for non-prime moduli. Internally this function is used when parsing certificates that contain elliptic curve public keys in compressed form or explicit elliptic curve parameters with a base point encoded in compressed form. It is possible to trigger the infinite loop by crafting a certificate that has invalid explicit curve parameters. Since certificate parsing happens prior to verification of the certificate signature, any process that parses an externally supplied certificate may thus be subject to a denial of service attack. The infinite loop can also be reached when parsing crafted private keys as they can contain explicit elliptic curve parameters. Thus vulnerable situations include: - TLS clients consuming server certificates - TLS servers consuming client certificates - Hosting providers taking certificates or private keys from customers - Certificate authorities parsing certification requests from subscribers - Anything else which parses ASN.1 elliptic curve parameters Also any other applications that use the BN_mod_sqrt() where the attacker can control the parameter values are vulnerable to this DoS issue. In the OpenSSL 1.0.2 version the public key is not parsed during initial parsing of the certificate which makes it slightly harder to trigger the infinite loop. However any operation which requires the public key from the certificate will trigger the infinite loop. In particular the attacker can use a self-signed certificate to trigger the loop during verification of the certificate signature. This issue affects OpenSSL versions 1.0.2, 1.1.1 and 3.0. It was addressed in the releases of 1.1.1n and 3.0.2 on the 15th March 2022. Fixed in OpenSSL 3.0.2 (Affected 3.0.0,3.0.1). Fixed in OpenSSL 1.1.1n (Affected 1.1.1-1.1.1m). Fixed in OpenSSL 1.0.2zd (Affected 1.0.2-1.0.2zc).',
-              'diffID':        'sha256:680c6f24786b53640e37f56c4f3e5781fa1aeded0588efc878d655ba8414e013',
-              'fixedVersions': [
-                '3.3.3p1-r3'
-              ],
-              'installedVersion': '3.3.3p1-r2',
-              'packageName':      'libretls',
-              'purl':             'pkg:apk/alpine/libretls@3.3.3p1-r2?arch=armv7&distro=3.14.1',
-              'references':       [
-                'http://packetstormsecurity.com/files/167344/OpenSSL-1.0.2-1.1.1-3.0-BN_mod_sqrt-Infinite-Loop.html',
-                'http://seclists.org/fulldisclosure/2022/May/33',
-                'http://seclists.org/fulldisclosure/2022/May/35',
-                'http://seclists.org/fulldisclosure/2022/May/38',
-                'https://access.redhat.com/errata/RHSA-2022:5326',
-                'https://access.redhat.com/security/cve/CVE-2022-0778',
-                'https://bugzilla.redhat.com/2062202',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2062202',
-                'https://cert-portal.siemens.com/productcert/pdf/ssa-712929.pdf',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-0778',
-                'https://errata.almalinux.org/8/ALSA-2022-5326.html',
-                'https://errata.rockylinux.org/RLSA-2022:4899',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=3118eb64934499d93db3230748a452351d1d9a65',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=380085481c64de749a6dd25cdf0bcf4360b30f83',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=a466912611aa6cbdf550cd10601390e587451246',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=3118eb64934499d93db3230748a452351d1d9a65',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=380085481c64de749a6dd25cdf0bcf4360b30f83',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=a466912611aa6cbdf550cd10601390e587451246',
-                'https://linux.oracle.com/cve/CVE-2022-0778.html',
-                'https://linux.oracle.com/errata/ELSA-2022-9272.html',
-                'https://lists.debian.org/debian-lts-announce/2022/03/msg00023.html',
-                'https://lists.debian.org/debian-lts-announce/2022/03/msg00024.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/323SNN6ZX7PRJJWP2BUAFLPUAE42XWLZ',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/323SNN6ZX7PRJJWP2BUAFLPUAE42XWLZ/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GDB3GQVJPXJE7X5C5JN6JAA4XUDWD6E6',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GDB3GQVJPXJE7X5C5JN6JAA4XUDWD6E6/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/W6K3PR542DXWLEFFMFIDMME4CWMHJRMG',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/W6K3PR542DXWLEFFMFIDMME4CWMHJRMG/',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/323SNN6ZX7PRJJWP2BUAFLPUAE42XWLZ',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/GDB3GQVJPXJE7X5C5JN6JAA4XUDWD6E6',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/W6K3PR542DXWLEFFMFIDMME4CWMHJRMG',
-                'https://nvd.nist.gov/vuln/detail/CVE-2022-0778',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2022-0002',
-                'https://rustsec.org/advisories/RUSTSEC-2022-0014.html',
-                'https://security.gentoo.org/glsa/202210-02',
-                'https://security.netapp.com/advisory/ntap-20220321-0002',
-                'https://security.netapp.com/advisory/ntap-20220321-0002/',
-                'https://security.netapp.com/advisory/ntap-20220429-0005',
-                'https://security.netapp.com/advisory/ntap-20220429-0005/',
-                'https://security.netapp.com/advisory/ntap-20240621-0006',
-                'https://security.netapp.com/advisory/ntap-20240621-0006/',
-                'https://support.apple.com/kb/HT213255',
-                'https://support.apple.com/kb/HT213256',
-                'https://support.apple.com/kb/HT213257',
-                'https://ubuntu.com/security/notices/USN-5328-1',
-                'https://ubuntu.com/security/notices/USN-5328-2',
-                'https://ubuntu.com/security/notices/USN-6457-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2022-0778',
-                'https://www.debian.org/security/2022/dsa-5103',
-                'https://www.openssl.org/news/secadv/20220315.txt',
-                'https://www.oracle.com/security-alerts/cpuapr2022.html',
-                'https://www.oracle.com/security-alerts/cpujul2022.html',
-                'https://www.tenable.com/security/tns-2022-06',
-                'https://www.tenable.com/security/tns-2022-07',
-                'https://www.tenable.com/security/tns-2022-08',
-                'https://www.tenable.com/security/tns-2022-09'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: Infinite loop in BN_mod_sqrt() reachable when parsing certificates'
-            },
-            {
-              'cve':  'CVE-2021-3711',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '9.8',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'nvd': {
-                  'v3score':  '9.8',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '9.8',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-120'
-              ],
-              'description':   'In order to decrypt SM2 encrypted data an application is expected to call the API function EVP_PKEY_decrypt(). Typically an application will call this function twice. The first time, on entry, the "out" parameter can be NULL and, on exit, the "outlen" parameter is populated with the buffer size required to hold the decrypted plaintext. The application can then allocate a sufficiently sized buffer and call EVP_PKEY_decrypt() again, but this time passing a non-NULL value for the "out" parameter. A bug in the implementation of the SM2 decryption code means that the calculation of the buffer size required to hold the plaintext returned by the first call to EVP_PKEY_decrypt() can be smaller than the actual size required by the second call. This can lead to a buffer overflow when EVP_PKEY_decrypt() is called by the application a second time with a buffer that is too small. A malicious attacker who is able present SM2 content for decryption to an application could cause attacker chosen data to overflow the buffer by up to a maximum of 62 bytes altering the contents of other data held after the buffer, possibly changing application behaviour or causing the application to crash. The location of the buffer is application dependent but is typically heap allocated. Fixed in OpenSSL 1.1.1l (Affected 1.1.1-1.1.1k).',
-              'diffID':        'sha256:680c6f24786b53640e37f56c4f3e5781fa1aeded0588efc878d655ba8414e013',
-              'fixedVersions': [
-                '1.1.1l-r0'
-              ],
-              'installedVersion': '1.1.1k-r0',
-              'packageName':      'libssl1.1',
-              'purl':             'pkg:apk/alpine/libssl1.1@1.1.1k-r0?arch=armv7&distro=3.14.1',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2021/08/26/2',
-                'https://access.redhat.com/security/cve/CVE-2021-3711',
-                'https://cert-portal.siemens.com/productcert/pdf/ssa-389290.pdf',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=59f5e75f3bced8fc0e130d72a3f582cf7b480b46',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=59f5e75f3bced8fc0e130d72a3f582cf7b480b46',
-                'https://lists.apache.org/thread.html/r18995de860f0e63635f3008fd2a6aca82394249476d21691e7c59c9e%40%3Cdev.tomcat.apache.org%3E',
-                'https://lists.apache.org/thread.html/r18995de860f0e63635f3008fd2a6aca82394249476d21691e7c59c9e@%3Cdev.tomcat.apache.org%3E',
-                'https://lists.apache.org/thread.html/rad5d9f83f0d11fb3f8bb148d179b8a9ad7c6a17f18d70e5805a713d1%40%3Cdev.tomcat.apache.org%3E',
-                'https://lists.apache.org/thread.html/rad5d9f83f0d11fb3f8bb148d179b8a9ad7c6a17f18d70e5805a713d1@%3Cdev.tomcat.apache.org%3E',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-3711',
-                'https://rustsec.org/advisories/RUSTSEC-2021-0097.html',
-                'https://security.gentoo.org/glsa/202209-02',
-                'https://security.gentoo.org/glsa/202210-02',
-                'https://security.netapp.com/advisory/ntap-20210827-0010',
-                'https://security.netapp.com/advisory/ntap-20210827-0010/',
-                'https://security.netapp.com/advisory/ntap-20211022-0003',
-                'https://security.netapp.com/advisory/ntap-20211022-0003/',
-                'https://security.netapp.com/advisory/ntap-20240621-0006',
-                'https://security.netapp.com/advisory/ntap-20240621-0006/',
-                'https://ubuntu.com/security/notices/USN-5051-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-3711',
-                'https://www.debian.org/security/2021/dsa-4963',
-                'https://www.openssl.org/news/secadv/20210824.txt',
-                'https://www.oracle.com/security-alerts/cpuapr2022.html',
-                'https://www.oracle.com/security-alerts/cpujan2022.html',
-                'https://www.oracle.com/security-alerts/cpuoct2021.html',
-                'https://www.tenable.com/security/tns-2021-16',
-                'https://www.tenable.com/security/tns-2022-02'
-              ],
-              'severity':   'CRITICAL',
-              'suppressed': false,
-              'title':      'openssl: SM2 Decryption Buffer Overflow'
-            },
-            {
-              'cve':  'CVE-2021-3712',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '7.4',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H'
-                },
-                'nvd': {
-                  'v3score':  '7.4',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.4',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-125'
-              ],
-              'description':   "ASN.1 strings are represented internally within OpenSSL as an ASN1_STRING structure which contains a buffer holding the string data and a field holding the buffer length. This contrasts with normal C strings which are repesented as a buffer for the string data which is terminated with a NUL (0) byte. Although not a strict requirement, ASN.1 strings that are parsed using OpenSSL's own \"d2i\" functions (and other similar parsing functions) as well as any string whose value has been set with the ASN1_STRING_set() function will additionally NUL terminate the byte array in the ASN1_STRING structure. However, it is possible for applications to directly construct valid ASN1_STRING structures which do not NUL terminate the byte array by directly setting the \"data\" and \"length\" fields in the ASN1_STRING array. This can also happen by using the ASN1_STRING_set0() function. Numerous OpenSSL functions that print ASN.1 data have been found to assume that the ASN1_STRING byte array will be NUL terminated, even though this is not guaranteed for strings that have been directly constructed. Where an application requests an ASN.1 structure to be printed, and where that ASN.1 structure contains ASN1_STRINGs that have been directly constructed by the application without NUL terminating the \"data\" field, then a read buffer overrun can occur. The same thing can also occur during name constraints processing of certificates (for example if a certificate has been directly constructed by the application instead of loading it via the OpenSSL parsing functions, and the certificate contains non NUL terminated ASN1_STRING structures). It can also occur in the X509_get1_email(), X509_REQ_get1_email() and X509_get1_ocsp() functions. If a malicious actor can cause an application to directly construct an ASN1_STRING and then process it through one of the affected OpenSSL functions then this issue could be hit. This might result in a crash (causing a Denial of Service attack). It could also result in the disclosure of private memory contents (such as private keys, or sensitive plaintext). Fixed in OpenSSL 1.1.1l (Affected 1.1.1-1.1.1k). Fixed in OpenSSL 1.0.2za (Affected 1.0.2-1.0.2y).",
-              'diffID':        'sha256:680c6f24786b53640e37f56c4f3e5781fa1aeded0588efc878d655ba8414e013',
-              'fixedVersions': [
-                '1.1.1l-r0'
-              ],
-              'installedVersion': '1.1.1k-r0',
-              'packageName':      'libssl1.1',
-              'purl':             'pkg:apk/alpine/libssl1.1@1.1.1k-r0?arch=armv7&distro=3.14.1',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2021/08/26/2',
-                'https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2021-3712.json',
-                'https://access.redhat.com/security/cve/CVE-2021-3712',
-                'https://cert-portal.siemens.com/productcert/pdf/ssa-244969.pdf',
-                'https://cert-portal.siemens.com/productcert/pdf/ssa-389290.pdf',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=94d23fcff9b2a7a8368dfe52214d5c2569882c11',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=ccb0a11145ee72b042d10593a64eaf9e8a55ec12',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=94d23fcff9b2a7a8368dfe52214d5c2569882c11',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=ccb0a11145ee72b042d10593a64eaf9e8a55ec12',
-                'https://kc.mcafee.com/corporate/index?page=content&id=SB10366',
-                'https://linux.oracle.com/cve/CVE-2021-3712.html',
-                'https://linux.oracle.com/errata/ELSA-2022-9023.html',
-                'https://lists.apache.org/thread.html/r18995de860f0e63635f3008fd2a6aca82394249476d21691e7c59c9e%40%3Cdev.tomcat.apache.org%3E',
-                'https://lists.apache.org/thread.html/r18995de860f0e63635f3008fd2a6aca82394249476d21691e7c59c9e@%3Cdev.tomcat.apache.org%3E',
-                'https://lists.apache.org/thread.html/rad5d9f83f0d11fb3f8bb148d179b8a9ad7c6a17f18d70e5805a713d1%40%3Cdev.tomcat.apache.org%3E',
-                'https://lists.apache.org/thread.html/rad5d9f83f0d11fb3f8bb148d179b8a9ad7c6a17f18d70e5805a713d1@%3Cdev.tomcat.apache.org%3E',
-                'https://lists.debian.org/debian-lts-announce/2021/09/msg00014.html',
-                'https://lists.debian.org/debian-lts-announce/2021/09/msg00021.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-3712',
-                'https://rustsec.org/advisories/RUSTSEC-2021-0098.html',
-                'https://security.gentoo.org/glsa/202209-02',
-                'https://security.gentoo.org/glsa/202210-02',
-                'https://security.netapp.com/advisory/ntap-20210827-0010',
-                'https://security.netapp.com/advisory/ntap-20210827-0010/',
-                'https://security.netapp.com/advisory/ntap-20240621-0006',
-                'https://security.netapp.com/advisory/ntap-20240621-0006/',
-                'https://ubuntu.com/security/notices/USN-5051-1',
-                'https://ubuntu.com/security/notices/USN-5051-2',
-                'https://ubuntu.com/security/notices/USN-5051-3',
-                'https://ubuntu.com/security/notices/USN-5051-4 (regression only in trusty/esm)',
-                'https://ubuntu.com/security/notices/USN-5088-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-3712',
-                'https://www.debian.org/security/2021/dsa-4963',
-                'https://www.openssl.org/news/secadv/20210824.txt',
-                'https://www.oracle.com/security-alerts/cpuapr2022.html',
-                'https://www.oracle.com/security-alerts/cpujan2022.html',
-                'https://www.oracle.com/security-alerts/cpuoct2021.html',
-                'https://www.tenable.com/security/tns-2021-16',
-                'https://www.tenable.com/security/tns-2022-02'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: Read buffer overruns processing ASN.1 strings'
-            },
-            {
-              'cve':  'CVE-2022-0778',
-              'cvss': {
-                'bitnami': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'ghsa': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'nvd': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-835'
-              ],
-              'description':   'The BN_mod_sqrt() function, which computes a modular square root, contains a bug that can cause it to loop forever for non-prime moduli. Internally this function is used when parsing certificates that contain elliptic curve public keys in compressed form or explicit elliptic curve parameters with a base point encoded in compressed form. It is possible to trigger the infinite loop by crafting a certificate that has invalid explicit curve parameters. Since certificate parsing happens prior to verification of the certificate signature, any process that parses an externally supplied certificate may thus be subject to a denial of service attack. The infinite loop can also be reached when parsing crafted private keys as they can contain explicit elliptic curve parameters. Thus vulnerable situations include: - TLS clients consuming server certificates - TLS servers consuming client certificates - Hosting providers taking certificates or private keys from customers - Certificate authorities parsing certification requests from subscribers - Anything else which parses ASN.1 elliptic curve parameters Also any other applications that use the BN_mod_sqrt() where the attacker can control the parameter values are vulnerable to this DoS issue. In the OpenSSL 1.0.2 version the public key is not parsed during initial parsing of the certificate which makes it slightly harder to trigger the infinite loop. However any operation which requires the public key from the certificate will trigger the infinite loop. In particular the attacker can use a self-signed certificate to trigger the loop during verification of the certificate signature. This issue affects OpenSSL versions 1.0.2, 1.1.1 and 3.0. It was addressed in the releases of 1.1.1n and 3.0.2 on the 15th March 2022. Fixed in OpenSSL 3.0.2 (Affected 3.0.0,3.0.1). Fixed in OpenSSL 1.1.1n (Affected 1.1.1-1.1.1m). Fixed in OpenSSL 1.0.2zd (Affected 1.0.2-1.0.2zc).',
-              'diffID':        'sha256:680c6f24786b53640e37f56c4f3e5781fa1aeded0588efc878d655ba8414e013',
-              'fixedVersions': [
-                '1.1.1n-r0'
-              ],
-              'installedVersion': '1.1.1k-r0',
-              'packageName':      'libssl1.1',
-              'purl':             'pkg:apk/alpine/libssl1.1@1.1.1k-r0?arch=armv7&distro=3.14.1',
-              'references':       [
-                'http://packetstormsecurity.com/files/167344/OpenSSL-1.0.2-1.1.1-3.0-BN_mod_sqrt-Infinite-Loop.html',
-                'http://seclists.org/fulldisclosure/2022/May/33',
-                'http://seclists.org/fulldisclosure/2022/May/35',
-                'http://seclists.org/fulldisclosure/2022/May/38',
-                'https://access.redhat.com/errata/RHSA-2022:5326',
-                'https://access.redhat.com/security/cve/CVE-2022-0778',
-                'https://bugzilla.redhat.com/2062202',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2062202',
-                'https://cert-portal.siemens.com/productcert/pdf/ssa-712929.pdf',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-0778',
-                'https://errata.almalinux.org/8/ALSA-2022-5326.html',
-                'https://errata.rockylinux.org/RLSA-2022:4899',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=3118eb64934499d93db3230748a452351d1d9a65',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=380085481c64de749a6dd25cdf0bcf4360b30f83',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=a466912611aa6cbdf550cd10601390e587451246',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=3118eb64934499d93db3230748a452351d1d9a65',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=380085481c64de749a6dd25cdf0bcf4360b30f83',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=a466912611aa6cbdf550cd10601390e587451246',
-                'https://linux.oracle.com/cve/CVE-2022-0778.html',
-                'https://linux.oracle.com/errata/ELSA-2022-9272.html',
-                'https://lists.debian.org/debian-lts-announce/2022/03/msg00023.html',
-                'https://lists.debian.org/debian-lts-announce/2022/03/msg00024.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/323SNN6ZX7PRJJWP2BUAFLPUAE42XWLZ',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/323SNN6ZX7PRJJWP2BUAFLPUAE42XWLZ/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GDB3GQVJPXJE7X5C5JN6JAA4XUDWD6E6',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GDB3GQVJPXJE7X5C5JN6JAA4XUDWD6E6/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/W6K3PR542DXWLEFFMFIDMME4CWMHJRMG',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/W6K3PR542DXWLEFFMFIDMME4CWMHJRMG/',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/323SNN6ZX7PRJJWP2BUAFLPUAE42XWLZ',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/GDB3GQVJPXJE7X5C5JN6JAA4XUDWD6E6',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/W6K3PR542DXWLEFFMFIDMME4CWMHJRMG',
-                'https://nvd.nist.gov/vuln/detail/CVE-2022-0778',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2022-0002',
-                'https://rustsec.org/advisories/RUSTSEC-2022-0014.html',
-                'https://security.gentoo.org/glsa/202210-02',
-                'https://security.netapp.com/advisory/ntap-20220321-0002',
-                'https://security.netapp.com/advisory/ntap-20220321-0002/',
-                'https://security.netapp.com/advisory/ntap-20220429-0005',
-                'https://security.netapp.com/advisory/ntap-20220429-0005/',
-                'https://security.netapp.com/advisory/ntap-20240621-0006',
-                'https://security.netapp.com/advisory/ntap-20240621-0006/',
-                'https://support.apple.com/kb/HT213255',
-                'https://support.apple.com/kb/HT213256',
-                'https://support.apple.com/kb/HT213257',
-                'https://ubuntu.com/security/notices/USN-5328-1',
-                'https://ubuntu.com/security/notices/USN-5328-2',
-                'https://ubuntu.com/security/notices/USN-6457-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2022-0778',
-                'https://www.debian.org/security/2022/dsa-5103',
-                'https://www.openssl.org/news/secadv/20220315.txt',
-                'https://www.oracle.com/security-alerts/cpuapr2022.html',
-                'https://www.oracle.com/security-alerts/cpujul2022.html',
-                'https://www.tenable.com/security/tns-2022-06',
-                'https://www.tenable.com/security/tns-2022-07',
-                'https://www.tenable.com/security/tns-2022-08',
-                'https://www.tenable.com/security/tns-2022-09'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: Infinite loop in BN_mod_sqrt() reachable when parsing certificates'
-            },
-            {
-              'cve':  'CVE-2022-4450',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'nvd': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-415'
-              ],
-              'description':   'The function PEM_read_bio_ex() reads a PEM file from a BIO and parses and\ndecodes the "name" (e.g. "CERTIFICATE"), any header data and the payload data.\nIf the function succeeds then the "name_out", "header" and "data" arguments are\npopulated with pointers to buffers containing the relevant decoded data. The\ncaller is responsible for freeing those buffers. It is possible to construct a\nPEM file that results in 0 bytes of payload data. In this case PEM_read_bio_ex()\nwill return a failure code but will populate the header argument with a pointer\nto a buffer that has already been freed. If the caller also frees this buffer\nthen a double free will occur. This will most likely lead to a crash. This\ncould be exploited by an attacker who has the ability to supply malicious PEM\nfiles for parsing to achieve a denial of service attack.\n\nThe functions PEM_read_bio() and PEM_read() are simple wrappers around\nPEM_read_bio_ex() and therefore these functions are also directly affected.\n\nThese functions are also called indirectly by a number of other OpenSSL\nfunctions including PEM_X509_INFO_read_bio_ex() and\nSSL_CTX_use_serverinfo_file() which are also vulnerable. Some OpenSSL internal\nuses of these functions are not vulnerable because the caller does not free the\nheader argument if PEM_read_bio_ex() returns a failure code. These locations\ninclude the PEM_read_bio_TYPE() functions as well as the decoders introduced in\nOpenSSL 3.0.\n\nThe OpenSSL asn1parse command line application is also impacted by this issue.',
-              'diffID':        'sha256:680c6f24786b53640e37f56c4f3e5781fa1aeded0588efc878d655ba8414e013',
-              'fixedVersions': [
-                '1.1.1t-r0'
-              ],
-              'installedVersion': '1.1.1k-r0',
-              'packageName':      'libssl1.1',
-              'purl':             'pkg:apk/alpine/libssl1.1@1.1.1k-r0?arch=armv7&distro=3.14.1',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2023:2165',
-                'https://access.redhat.com/security/cve/CVE-2022-4450',
-                'https://bugzilla.redhat.com/1960321',
-                'https://bugzilla.redhat.com/2164440',
-                'https://bugzilla.redhat.com/2164487',
-                'https://bugzilla.redhat.com/2164492',
-                'https://bugzilla.redhat.com/2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144000',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144003',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144006',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144008',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144010',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144012',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144015',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144017',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144019',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2145170',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2158412',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164440',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164487',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164488',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164492',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164497',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164499',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164500',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4203',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4304',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4450',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0215',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0216',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0217',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0286',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0401',
-                'https://errata.almalinux.org/9/ALSA-2023-2165.html',
-                'https://errata.rockylinux.org/RLSA-2023:0946',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=63bcf189be73a9cc1264059bed6f57974be74a83',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=bbcf509bd046b34cca19c766bbddc31683d0858b',
-                'https://linux.oracle.com/cve/CVE-2022-4450.html',
-                'https://linux.oracle.com/errata/ELSA-2023-32791.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2022-4450',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0003',
-                'https://rustsec.org/advisories/RUSTSEC-2023-0010.html',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://ubuntu.com/security/notices/USN-5844-1',
-                'https://ubuntu.com/security/notices/USN-6564-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2022-4450',
-                'https://www.openssl.org/news/secadv/20230207.txt'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: double free after calling PEM_read_bio_ex'
-            },
-            {
-              'cve':  'CVE-2023-0215',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'nvd': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   'The public API function BIO_new_NDEF is a helper function used for streaming\nASN.1 data via a BIO. It is primarily used internally to OpenSSL to support the\nSMIME, CMS and PKCS7 streaming capabilities, but may also be called directly by\nend user applications.\n\nThe function receives a BIO from the caller, prepends a new BIO_f_asn1 filter\nBIO onto the front of it to form a BIO chain, and then returns the new head of\nthe BIO chain to the caller. Under certain conditions, for example if a CMS\nrecipient public key is invalid, the new filter BIO is freed and the function\nreturns a NULL result indicating a failure. However, in this case, the BIO chain\nis not properly cleaned up and the BIO passed by the caller still retains\ninternal pointers to the previously freed filter BIO. If the caller then goes on\nto call BIO_pop() on the BIO then a use-after-free will occur. This will most\nlikely result in a crash.\n\n\n\nThis scenario occurs directly in the internal function B64_write_ASN1() which\nmay cause BIO_new_NDEF() to be called and will subsequently call BIO_pop() on\nthe BIO. This internal function is in turn called by the public API functions\nPEM_write_bio_ASN1_stream, PEM_write_bio_CMS_stream, PEM_write_bio_PKCS7_stream,\nSMIME_write_ASN1, SMIME_write_CMS and SMIME_write_PKCS7.\n\nOther public API functions that may be impacted by this include\ni2d_ASN1_bio_stream, BIO_new_CMS, BIO_new_PKCS7, i2d_CMS_bio_stream and\ni2d_PKCS7_bio_stream.\n\nThe OpenSSL cms and smime command line applications are similarly affected.',
-              'diffID':        'sha256:680c6f24786b53640e37f56c4f3e5781fa1aeded0588efc878d655ba8414e013',
-              'fixedVersions': [
-                '1.1.1t-r0'
-              ],
-              'installedVersion': '1.1.1k-r0',
-              'packageName':      'libssl1.1',
-              'purl':             'pkg:apk/alpine/libssl1.1@1.1.1k-r0?arch=armv7&distro=3.14.1',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2023:2165',
-                'https://access.redhat.com/security/cve/CVE-2023-0215',
-                'https://bugzilla.redhat.com/1960321',
-                'https://bugzilla.redhat.com/2164440',
-                'https://bugzilla.redhat.com/2164487',
-                'https://bugzilla.redhat.com/2164492',
-                'https://bugzilla.redhat.com/2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144000',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144003',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144006',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144008',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144010',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144012',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144015',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144017',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144019',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2145170',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2158412',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164440',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164487',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164488',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164492',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164497',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164499',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164500',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4203',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4304',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4450',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0215',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0216',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0217',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0286',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0401',
-                'https://errata.almalinux.org/9/ALSA-2023-2165.html',
-                'https://errata.rockylinux.org/RLSA-2023:0946',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=8818064ce3c3c0f1b740a5aaba2a987e75bfbafd',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=9816136fe31d92ace4037d5da5257f763aeeb4eb',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=c3829dd8825c654652201e16f8a0a0c46ee3f344',
-                'https://linux.oracle.com/cve/CVE-2023-0215.html',
-                'https://linux.oracle.com/errata/ELSA-2023-32791.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-0215',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0003',
-                'https://rustsec.org/advisories/RUSTSEC-2023-0009.html',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://security.netapp.com/advisory/ntap-20230427-0007',
-                'https://security.netapp.com/advisory/ntap-20230427-0007/',
-                'https://security.netapp.com/advisory/ntap-20230427-0009',
-                'https://security.netapp.com/advisory/ntap-20230427-0009/',
-                'https://security.netapp.com/advisory/ntap-20240621-0006',
-                'https://security.netapp.com/advisory/ntap-20240621-0006/',
-                'https://ubuntu.com/security/notices/USN-5844-1',
-                'https://ubuntu.com/security/notices/USN-5845-1',
-                'https://ubuntu.com/security/notices/USN-5845-2',
-                'https://ubuntu.com/security/notices/USN-6564-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-0215',
-                'https://www.openssl.org/news/secadv/20230207.txt'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: use-after-free following BIO_new_NDEF'
-            },
-            {
-              'cve':  'CVE-2023-0286',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '7.4',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H'
-                },
-                'nvd': {
-                  'v3score':  '7.4',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.4',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-843'
-              ],
-              'description':   'There is a type confusion vulnerability relating to X.400 address processing\ninside an X.509 GeneralName. X.400 addresses were parsed as an ASN1_STRING but\nthe public structure definition for GENERAL_NAME incorrectly specified the type\nof the x400Address field as ASN1_TYPE. This field is subsequently interpreted by\nthe OpenSSL function GENERAL_NAME_cmp as an ASN1_TYPE rather than an\nASN1_STRING.\n\nWhen CRL checking is enabled (i.e. the application sets the\nX509_V_FLAG_CRL_CHECK flag), this vulnerability may allow an attacker to pass\narbitrary pointers to a memcmp call, enabling them to read memory contents or\nenact a denial of service. In most cases, the attack requires the attacker to\nprovide both the certificate chain and CRL, neither of which need to have a\nvalid signature. If the attacker only controls one of these inputs, the other\ninput must already contain an X.400 address as a CRL distribution point, which\nis uncommon. As such, this vulnerability is most likely to only affect\napplications which have implemented their own functionality for retrieving CRLs\nover a network.',
-              'diffID':        'sha256:680c6f24786b53640e37f56c4f3e5781fa1aeded0588efc878d655ba8414e013',
-              'fixedVersions': [
-                '1.1.1t-r0'
-              ],
-              'installedVersion': '1.1.1k-r0',
-              'packageName':      'libssl1.1',
-              'purl':             'pkg:apk/alpine/libssl1.1@1.1.1k-r0?arch=armv7&distro=3.14.1',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2025:7937',
-                'https://access.redhat.com/security/cve/CVE-2023-0286',
-                'https://access.redhat.com/security/cve/cve-2023-0286',
-                'https://bugzilla.redhat.com/2164440',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144000',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144003',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144006',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144008',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144010',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144012',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144015',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144017',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144019',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2145170',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2158412',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164440',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164487',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164488',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164492',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164497',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164499',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164500',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4203',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4304',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4450',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0215',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0216',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0217',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0286',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0401',
-                'https://errata.almalinux.org/9/ALSA-2025-7937.html',
-                'https://errata.rockylinux.org/RLSA-2023:0946',
-                'https://ftp.openbsd.org/pub/OpenBSD/LibreSSL/libressl-3.6.2-relnotes.txt',
-                'https://ftp.openbsd.org/pub/OpenBSD/patches/7.2/common/018_x509.patch.sig',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=2c6c9d439b484e1ba9830d8454a34fa4f80fdfe9',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=2f7530077e0ef79d98718138716bc51ca0cad658',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=fd2af07dc083a350c959147097003a14a5e8ac4d',
-                'https://github.com/pyca/cryptography',
-                'https://github.com/pyca/cryptography/security/advisories/GHSA-x4qr-2fvf-3mr5',
-                'https://linux.oracle.com/cve/CVE-2023-0286.html',
-                'https://linux.oracle.com/errata/ELSA-2025-7937.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-0286',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0003',
-                'https://rustsec.org/advisories/RUSTSEC-2023-0006.html',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://ubuntu.com/security/notices/USN-5844-1',
-                'https://ubuntu.com/security/notices/USN-5845-1',
-                'https://ubuntu.com/security/notices/USN-5845-2',
-                'https://ubuntu.com/security/notices/USN-6564-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-0286',
-                'https://www.openssl.org/news/secadv/20230207.txt'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: X.400 address type confusion in X.509 GeneralName'
-            },
-            {
-              'cve':  'CVE-2023-0464',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-295'
-              ],
-              'description':   "A security vulnerability has been identified in all supported versions\n\nof OpenSSL related to the verification of X.509 certificate chains\nthat include policy constraints.  Attackers may be able to exploit this\nvulnerability by creating a malicious certificate chain that triggers\nexponential use of computational resources, leading to a denial-of-service\n(DoS) attack on affected systems.\n\nPolicy processing is disabled by default but can be enabled by passing\nthe `-policy' argument to the command line utilities or by calling the\n`X509_VERIFY_PARAM_set1_policies()' function.",
-              'diffID':        'sha256:680c6f24786b53640e37f56c4f3e5781fa1aeded0588efc878d655ba8414e013',
-              'fixedVersions': [
-                '1.1.1t-r1'
-              ],
-              'installedVersion': '1.1.1k-r0',
-              'packageName':      'libssl1.1',
-              'purl':             'pkg:apk/alpine/libssl1.1@1.1.1k-r0?arch=armv7&distro=3.14.1',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2023:3722',
-                'https://access.redhat.com/security/cve/CVE-2023-0464',
-                'https://bugzilla.redhat.com/2181082',
-                'https://bugzilla.redhat.com/2182561',
-                'https://bugzilla.redhat.com/2182565',
-                'https://bugzilla.redhat.com/2188461',
-                'https://bugzilla.redhat.com/2207947',
-                'https://errata.almalinux.org/9/ALSA-2023-3722.html',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=2017771e2db3e2b96f89bbe8766c3209f6a99545',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=2dcd4f1e3115f38cefa43e3efbe9b801c27e642e',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=879f7080d7e141f415c79eaa3a8ac4a3dad0348b',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=959c59c7a0164117e7f8366466a32bb1f8d77ff1',
-                'https://linux.oracle.com/cve/CVE-2023-0464.html',
-                'https://linux.oracle.com/errata/ELSA-2023-3722.html',
-                'https://lists.debian.org/debian-lts-announce/2023/06/msg00011.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-0464',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://security.netapp.com/advisory/ntap-20230406-0006/',
-                'https://security.netapp.com/advisory/ntap-20240621-0006/',
-                'https://ubuntu.com/security/notices/USN-6039-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.couchbase.com/alerts/',
-                'https://www.cve.org/CVERecord?id=CVE-2023-0464',
-                'https://www.debian.org/security/2023/dsa-5417',
-                'https://www.openssl.org/news/secadv/20230322.txt'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: Denial of service by excessive resource usage in verifying X509 policy constraints'
-            },
-            {
-              'cve':  'CVE-2022-2097',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N'
-                },
-                'nvd': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N'
-                },
-                'redhat': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-327'
-              ],
-              'description':   "AES OCB mode for 32-bit x86 platforms using the AES-NI assembly optimised implementation will not encrypt the entirety of the data under some circumstances. This could reveal sixteen bytes of data that was preexisting in the memory that wasn't written. In the special case of \"in place\" encryption, sixteen bytes of the plaintext would be revealed. Since OpenSSL does not support OCB based cipher suites for TLS and DTLS, they are both unaffected. Fixed in OpenSSL 3.0.5 (Affected 3.0.0-3.0.4). Fixed in OpenSSL 1.1.1q (Affected 1.1.1-1.1.1p).",
-              'diffID':        'sha256:680c6f24786b53640e37f56c4f3e5781fa1aeded0588efc878d655ba8414e013',
-              'fixedVersions': [
-                '1.1.1q-r0'
-              ],
-              'installedVersion': '1.1.1k-r0',
-              'packageName':      'libssl1.1',
-              'purl':             'pkg:apk/alpine/libssl1.1@1.1.1k-r0?arch=armv7&distro=3.14.1',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2022:6224',
-                'https://access.redhat.com/security/cve/CVE-2022-2097',
-                'https://bugzilla.redhat.com/2081494',
-                'https://bugzilla.redhat.com/2087911',
-                'https://bugzilla.redhat.com/2087913',
-                'https://bugzilla.redhat.com/2097310',
-                'https://bugzilla.redhat.com/2104905',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2081494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2097310',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2100554',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2104905',
-                'https://cert-portal.siemens.com/productcert/pdf/ssa-332410.pdf',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-1292',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-2068',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-2097',
-                'https://errata.almalinux.org/9/ALSA-2022-6224.html',
-                'https://errata.rockylinux.org/RLSA-2022:5818',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=919925673d6c9cfed3c1085497f5dfbbed5fc431',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=a98f339ddd7e8f487d6e0088d4a9a42324885a93',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=919925673d6c9cfed3c1085497f5dfbbed5fc431',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=a98f339ddd7e8f487d6e0088d4a9a42324885a93',
-                'https://github.com/alexcrichton/openssl-src-rs',
-                'https://linux.oracle.com/cve/CVE-2022-2097.html',
-                'https://linux.oracle.com/errata/ELSA-2022-9955.html',
-                'https://lists.debian.org/debian-lts-announce/2023/02/msg00019.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/R6CK57NBQFTPUMXAPJURCGXUYT76NQAK',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/R6CK57NBQFTPUMXAPJURCGXUYT76NQAK/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/V6567JERRHHJW2GNGJGKDRNHR7SNPZK7',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/V6567JERRHHJW2GNGJGKDRNHR7SNPZK7/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VCMNWKERPBKOEBNL7CLTTX3ZZCZLH7XA',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VCMNWKERPBKOEBNL7CLTTX3ZZCZLH7XA/',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/R6CK57NBQFTPUMXAPJURCGXUYT76NQAK',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/R6CK57NBQFTPUMXAPJURCGXUYT76NQAK/',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/V6567JERRHHJW2GNGJGKDRNHR7SNPZK7',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/V6567JERRHHJW2GNGJGKDRNHR7SNPZK7/',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/VCMNWKERPBKOEBNL7CLTTX3ZZCZLH7XA',
-                'https://nvd.nist.gov/vuln/detail/CVE-2022-2097',
-                'https://rustsec.org/advisories/RUSTSEC-2022-0032.html',
-                'https://security.gentoo.org/glsa/202210-02',
-                'https://security.netapp.com/advisory/ntap-20220715-0011',
-                'https://security.netapp.com/advisory/ntap-20220715-0011/',
-                'https://security.netapp.com/advisory/ntap-20230420-0008',
-                'https://security.netapp.com/advisory/ntap-20230420-0008/',
-                'https://security.netapp.com/advisory/ntap-20240621-0006',
-                'https://security.netapp.com/advisory/ntap-20240621-0006/',
-                'https://ubuntu.com/security/notices/USN-5502-1',
-                'https://ubuntu.com/security/notices/USN-6457-1',
-                'https://www.cve.org/CVERecord?id=CVE-2022-2097',
-                'https://www.debian.org/security/2023/dsa-5343',
-                'https://www.openssl.org/news/secadv/20220705.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: AES OCB fails to encrypt some bytes'
-            },
-            {
-              'cve':  'CVE-2022-4304',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N'
-                },
-                'nvd': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N'
-                },
-                'redhat': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-203'
-              ],
-              'description':   'A timing based side channel exists in the OpenSSL RSA Decryption implementation\nwhich could be sufficient to recover a plaintext across a network in a\nBleichenbacher style attack. To achieve a successful decryption an attacker\nwould have to be able to send a very large number of trial messages for\ndecryption. The vulnerability affects all RSA padding modes: PKCS#1 v1.5,\nRSA-OEAP and RSASVE.\n\nFor example, in a TLS connection, RSA is commonly used by a client to send an\nencrypted pre-master secret to the server. An attacker that had observed a\ngenuine connection between a client and a server could use this flaw to send\ntrial messages to the server and record the time taken to process them. After a\nsufficiently large number of messages the attacker could recover the pre-master\nsecret used for the original connection and thus be able to decrypt the\napplication data sent over that connection.',
-              'diffID':        'sha256:680c6f24786b53640e37f56c4f3e5781fa1aeded0588efc878d655ba8414e013',
-              'fixedVersions': [
-                '1.1.1t-r0'
-              ],
-              'installedVersion': '1.1.1k-r0',
-              'packageName':      'libssl1.1',
-              'purl':             'pkg:apk/alpine/libssl1.1@1.1.1k-r0?arch=armv7&distro=3.14.1',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2023:2165',
-                'https://access.redhat.com/security/cve/CVE-2022-4304',
-                'https://bugzilla.redhat.com/1960321',
-                'https://bugzilla.redhat.com/2164440',
-                'https://bugzilla.redhat.com/2164487',
-                'https://bugzilla.redhat.com/2164492',
-                'https://bugzilla.redhat.com/2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144000',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144003',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144006',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144008',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144010',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144012',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144015',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144017',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144019',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2145170',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2158412',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164440',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164487',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164488',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164492',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164497',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164499',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164500',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4203',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4304',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4450',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0215',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0216',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0217',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0286',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0401',
-                'https://errata.almalinux.org/9/ALSA-2023-2165.html',
-                'https://errata.rockylinux.org/RLSA-2023:0946',
-                'https://linux.oracle.com/cve/CVE-2022-4304.html',
-                'https://linux.oracle.com/errata/ELSA-2023-32791.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2022-4304',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0003',
-                'https://rustsec.org/advisories/RUSTSEC-2023-0007.html',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://ubuntu.com/security/notices/USN-5844-1',
-                'https://ubuntu.com/security/notices/USN-6564-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2022-4304',
-                'https://www.openssl.org/news/secadv/20230207.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: timing attack in RSA Decryption implementation'
-            },
-            {
-              'cve':  'CVE-2023-0465',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N'
-                },
-                'redhat': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-295'
-              ],
-              'description':   "Applications that use a non-default option when verifying certificates may be\nvulnerable to an attack from a malicious CA to circumvent certain checks.\n\nInvalid certificate policies in leaf certificates are silently ignored by\nOpenSSL and other certificate policy checks are skipped for that certificate.\nA malicious CA could use this to deliberately assert invalid certificate policies\nin order to circumvent policy checking on the certificate altogether.\n\nPolicy processing is disabled by default but can be enabled by passing\nthe `-policy' argument to the command line utilities or by calling the\n`X509_VERIFY_PARAM_set1_policies()' function.",
-              'diffID':        'sha256:680c6f24786b53640e37f56c4f3e5781fa1aeded0588efc878d655ba8414e013',
-              'fixedVersions': [
-                '1.1.1t-r2'
-              ],
-              'installedVersion': '1.1.1k-r0',
-              'packageName':      'libssl1.1',
-              'purl':             'pkg:apk/alpine/libssl1.1@1.1.1k-r0?arch=armv7&distro=3.14.1',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2023:3722',
-                'https://access.redhat.com/security/cve/CVE-2023-0465',
-                'https://bugzilla.redhat.com/2181082',
-                'https://bugzilla.redhat.com/2182561',
-                'https://bugzilla.redhat.com/2182565',
-                'https://bugzilla.redhat.com/2188461',
-                'https://bugzilla.redhat.com/2207947',
-                'https://errata.almalinux.org/9/ALSA-2023-3722.html',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=10325176f3d3e98c6e2b3bf5ab1e3b334de6947a',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=1dd43e0709fece299b15208f36cc7c76209ba0bb',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=b013765abfa80036dc779dd0e50602c57bb3bf95',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=facfb1ab745646e97a1920977ae4a9965ea61d5c',
-                'https://linux.oracle.com/cve/CVE-2023-0465.html',
-                'https://linux.oracle.com/errata/ELSA-2023-3722.html',
-                'https://lists.debian.org/debian-lts-announce/2023/06/msg00011.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-0465',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://security.netapp.com/advisory/ntap-20230414-0001/',
-                'https://ubuntu.com/security/notices/USN-6039-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-0465',
-                'https://www.debian.org/security/2023/dsa-5417',
-                'https://www.openssl.org/news/secadv/20230328.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: Invalid certificate policies in leaf certificates are silently ignored'
-            },
-            {
-              'cve':  'CVE-2021-42378',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the getvar_i function",
-              'diffID':        'sha256:680c6f24786b53640e37f56c4f3e5781fa1aeded0588efc878d655ba8414e013',
-              'fixedVersions': [
-                '1.33.1-r6'
-              ],
-              'installedVersion': '1.33.1-r3',
-              'packageName':      'ssl_client',
-              'purl':             'pkg:apk/alpine/ssl_client@1.33.1-r3?arch=armv7&distro=3.14.1',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42378',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42378',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42378'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the getvar_i()'
-            },
-            {
-              'cve':  'CVE-2021-42379',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the next_input_file function",
-              'diffID':        'sha256:680c6f24786b53640e37f56c4f3e5781fa1aeded0588efc878d655ba8414e013',
-              'fixedVersions': [
-                '1.33.1-r6'
-              ],
-              'installedVersion': '1.33.1-r3',
-              'packageName':      'ssl_client',
-              'purl':             'pkg:apk/alpine/ssl_client@1.33.1-r3?arch=armv7&distro=3.14.1',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42379',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42379',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42379'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the next_input_file()'
-            },
-            {
-              'cve':  'CVE-2021-42380',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the clrvar function",
-              'diffID':        'sha256:680c6f24786b53640e37f56c4f3e5781fa1aeded0588efc878d655ba8414e013',
-              'fixedVersions': [
-                '1.33.1-r6'
-              ],
-              'installedVersion': '1.33.1-r3',
-              'packageName':      'ssl_client',
-              'purl':             'pkg:apk/alpine/ssl_client@1.33.1-r3?arch=armv7&distro=3.14.1',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42380',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42380',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42380'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the clrvar()'
-            },
-            {
-              'cve':  'CVE-2021-42381',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the hash_init function",
-              'diffID':        'sha256:680c6f24786b53640e37f56c4f3e5781fa1aeded0588efc878d655ba8414e013',
-              'fixedVersions': [
-                '1.33.1-r6'
-              ],
-              'installedVersion': '1.33.1-r3',
-              'packageName':      'ssl_client',
-              'purl':             'pkg:apk/alpine/ssl_client@1.33.1-r3?arch=armv7&distro=3.14.1',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42381',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42381',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42381'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the hash_init()'
-            },
-            {
-              'cve':  'CVE-2021-42382',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the getvar_s function",
-              'diffID':        'sha256:680c6f24786b53640e37f56c4f3e5781fa1aeded0588efc878d655ba8414e013',
-              'fixedVersions': [
-                '1.33.1-r6'
-              ],
-              'installedVersion': '1.33.1-r3',
-              'packageName':      'ssl_client',
-              'purl':             'pkg:apk/alpine/ssl_client@1.33.1-r3?arch=armv7&distro=3.14.1',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42382',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42382',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42382'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the getvar_s()'
-            },
-            {
-              'cve':  'CVE-2021-42383',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the evaluate function",
-              'diffID':        'sha256:680c6f24786b53640e37f56c4f3e5781fa1aeded0588efc878d655ba8414e013',
-              'fixedVersions': [
-                '1.33.1-r6'
-              ],
-              'installedVersion': '1.33.1-r3',
-              'packageName':      'ssl_client',
-              'purl':             'pkg:apk/alpine/ssl_client@1.33.1-r3?arch=armv7&distro=3.14.1',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42383',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42383',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42383'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the evaluate()'
-            },
-            {
-              'cve':  'CVE-2021-42384',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the handle_special function",
-              'diffID':        'sha256:680c6f24786b53640e37f56c4f3e5781fa1aeded0588efc878d655ba8414e013',
-              'fixedVersions': [
-                '1.33.1-r6'
-              ],
-              'installedVersion': '1.33.1-r3',
-              'packageName':      'ssl_client',
-              'purl':             'pkg:apk/alpine/ssl_client@1.33.1-r3?arch=armv7&distro=3.14.1',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42384',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42384',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42384'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the handle_special()'
-            },
-            {
-              'cve':  'CVE-2021-42385',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the evaluate function",
-              'diffID':        'sha256:680c6f24786b53640e37f56c4f3e5781fa1aeded0588efc878d655ba8414e013',
-              'fixedVersions': [
-                '1.33.1-r6'
-              ],
-              'installedVersion': '1.33.1-r3',
-              'packageName':      'ssl_client',
-              'purl':             'pkg:apk/alpine/ssl_client@1.33.1-r3?arch=armv7&distro=3.14.1',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42385',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42385',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42385'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the evaluate()'
-            },
-            {
-              'cve':  'CVE-2021-42386',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the nvalloc function",
-              'diffID':        'sha256:680c6f24786b53640e37f56c4f3e5781fa1aeded0588efc878d655ba8414e013',
-              'fixedVersions': [
-                '1.33.1-r6'
-              ],
-              'installedVersion': '1.33.1-r3',
-              'packageName':      'ssl_client',
-              'purl':             'pkg:apk/alpine/ssl_client@1.33.1-r3?arch=armv7&distro=3.14.1',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42386',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42386',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42386'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the nvalloc()'
-            },
-            {
-              'cve':  'CVE-2022-28391',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '8.8',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-88'
-              ],
-              'description':   "BusyBox through 1.35.0 allows remote attackers to execute arbitrary code if netstat is used to print a DNS PTR record's value to a VT compatible terminal. Alternatively, the attacker could choose to change the terminal's colors.",
-              'diffID':        'sha256:680c6f24786b53640e37f56c4f3e5781fa1aeded0588efc878d655ba8414e013',
-              'fixedVersions': [
-                '1.33.1-r7'
-              ],
-              'installedVersion': '1.33.1-r3',
-              'packageName':      'ssl_client',
-              'purl':             'pkg:apk/alpine/ssl_client@1.33.1-r3?arch=armv7&distro=3.14.1',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2022-28391',
-                'https://git.alpinelinux.org/aports/plain/main/busybox/0001-libbb-sockaddr2str-ensure-only-printable-characters-.patch',
-                'https://git.alpinelinux.org/aports/plain/main/busybox/0002-nslookup-sanitize-all-printed-strings-with-printable.patch',
-                'https://gitlab.alpinelinux.org/alpine/aports/-/issues/13661',
-                'https://nvd.nist.gov/vuln/detail/CVE-2022-28391',
-                'https://www.cve.org/CVERecord?id=CVE-2022-28391'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: remote attackers may execute arbitrary code if netstat is used'
-            },
-            {
-              'cve':  'CVE-2021-42374',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '5.7',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-125'
-              ],
-              'description':   "An out-of-bounds heap read in Busybox's unlzma applet leads to information leak and denial of service when crafted LZMA-compressed input is decompressed. This can be triggered by any applet/format that",
-              'diffID':        'sha256:680c6f24786b53640e37f56c4f3e5781fa1aeded0588efc878d655ba8414e013',
-              'fixedVersions': [
-                '1.33.1-r4'
-              ],
-              'installedVersion': '1.33.1-r3',
-              'packageName':      'ssl_client',
-              'purl':             'pkg:apk/alpine/ssl_client@1.33.1-r3?arch=armv7&distro=3.14.1',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42374',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42374',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42374'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'busybox: out-of-bounds read in unlzma applet leads to information leak and denial of service when crafted LZMA-compressed input is decompressed'
-            },
-            {
-              'cve':  'CVE-2021-42375',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.5',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '4.1',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-159'
-              ],
-              'description':   "An incorrect handling of a special element in Busybox's ash applet leads to denial of service when processing a crafted shell command, due to the shell mistaking specific characters for reserved characters. This may be used for DoS under rare conditions of filtered command input.",
-              'diffID':        'sha256:680c6f24786b53640e37f56c4f3e5781fa1aeded0588efc878d655ba8414e013',
-              'fixedVersions': [
-                '1.33.1-r5'
-              ],
-              'installedVersion': '1.33.1-r3',
-              'packageName':      'ssl_client',
-              'purl':             'pkg:apk/alpine/ssl_client@1.33.1-r3?arch=armv7&distro=3.14.1',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42375',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42375',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42375'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'busybox: incorrect handling of a special element in ash applet leads to denial of service when processing a crafted shell command'
-            },
-            {
-              'cve':  'CVE-2022-37434',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '9.8',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-787',
-                'CWE-120'
-              ],
-              'description':   'zlib through 1.2.12 has a heap-based buffer over-read or buffer overflow in inflate in inflate.c via a large gzip header extra field. NOTE: only applications that call inflateGetHeader are affected. Some common applications bundle the affected zlib source code but may be unable to call inflateGetHeader (e.g., see the nodejs/node reference).',
-              'diffID':        'sha256:680c6f24786b53640e37f56c4f3e5781fa1aeded0588efc878d655ba8414e013',
-              'fixedVersions': [
-                '1.2.12-r2'
-              ],
-              'installedVersion': '1.2.11-r3',
-              'packageName':      'zlib',
-              'purl':             'pkg:apk/alpine/zlib@1.2.11-r3?arch=armv7&distro=3.14.1',
-              'references':       [
-                'http://seclists.org/fulldisclosure/2022/Oct/37',
-                'http://seclists.org/fulldisclosure/2022/Oct/38',
-                'http://seclists.org/fulldisclosure/2022/Oct/41',
-                'http://seclists.org/fulldisclosure/2022/Oct/42',
-                'http://www.openwall.com/lists/oss-security/2022/08/05/2',
-                'http://www.openwall.com/lists/oss-security/2022/08/09/1',
-                'https://access.redhat.com/errata/RHSA-2022:8291',
-                'https://access.redhat.com/security/cve/CVE-2022-37434',
-                'https://bugzilla.redhat.com/2116639',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2053198',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2077431',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2081296',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2116639',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-37434',
-                'https://errata.almalinux.org/9/ALSA-2022-8291.html',
-                'https://errata.rockylinux.org/RLSA-2022:8291',
-                'https://github.com/curl/curl/issues/9271',
-                'https://github.com/ivd38/zlib_overflow',
-                'https://github.com/madler/zlib/blob/21767c654d31d2dccdde4330529775c6c5fd5389/zlib.h#L1062-L1063',
-                'https://github.com/madler/zlib/commit/1eb7682f845ac9e9bf9ae35bbfb3bad5dacbd91d',
-                'https://github.com/madler/zlib/commit/eff308af425b67093bab25f80f1ae950166bece1',
-                'https://github.com/nodejs/node/blob/75b68c6e4db515f76df73af476eccf382bbcb00a/deps/zlib/inflate.c#L762-L764',
-                'https://linux.oracle.com/cve/CVE-2022-37434.html',
-                'https://linux.oracle.com/errata/ELSA-2023-1095.html',
-                'https://lists.debian.org/debian-lts-announce/2022/09/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JWN4VE3JQR4O2SOUS5TXNLANRPMHWV4I/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NMBOJ77A7T7PQCARMDUK75TE6LLESZ3O/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PAVPQNCG3XRLCLNSQRM3KAN5ZFMVXVTY/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/X5U7OTKZSHY2I3ZFJSR2SHFHW72RKGDK/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YRQAI7H4M4RQZ2IWZUEEXECBE5D56BH2/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2022-37434',
-                'https://security.netapp.com/advisory/ntap-20220901-0005/',
-                'https://security.netapp.com/advisory/ntap-20230427-0007/',
-                'https://support.apple.com/kb/HT213488',
-                'https://support.apple.com/kb/HT213489',
-                'https://support.apple.com/kb/HT213490',
-                'https://support.apple.com/kb/HT213491',
-                'https://support.apple.com/kb/HT213493',
-                'https://support.apple.com/kb/HT213494',
-                'https://ubuntu.com/security/notices/USN-5570-1',
-                'https://ubuntu.com/security/notices/USN-5570-2',
-                'https://ubuntu.com/security/notices/USN-5573-1',
-                'https://ubuntu.com/security/notices/USN-6736-1',
-                'https://ubuntu.com/security/notices/USN-6736-2',
-                'https://www.cve.org/CVERecord?id=CVE-2022-37434',
-                'https://www.debian.org/security/2022/dsa-5218'
-              ],
-              'severity':   'CRITICAL',
-              'suppressed': false,
-              'title':      'zlib: heap-based buffer over-read and overflow in inflate() in inflate.c via a large gzip header extra field'
-            },
-            {
-              'cve':  'CVE-2018-25032',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'nvd': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '8.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-787'
-              ],
-              'description':   'zlib before 1.2.12 allows memory corruption when deflating (i.e., when compressing) if the input has many distant matches.',
-              'diffID':        'sha256:680c6f24786b53640e37f56c4f3e5781fa1aeded0588efc878d655ba8414e013',
-              'fixedVersions': [
-                '1.2.12-r0'
-              ],
-              'installedVersion': '1.2.11-r3',
-              'packageName':      'zlib',
-              'purl':             'pkg:apk/alpine/zlib@1.2.11-r3?arch=armv7&distro=3.14.1',
-              'references':       [
-                'http://seclists.org/fulldisclosure/2022/May/33',
-                'http://seclists.org/fulldisclosure/2022/May/35',
-                'http://seclists.org/fulldisclosure/2022/May/38',
-                'http://www.openwall.com/lists/oss-security/2022/03/25/2',
-                'http://www.openwall.com/lists/oss-security/2022/03/26/1',
-                'https://access.redhat.com/errata/RHSA-2022:8420',
-                'https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-25032.json',
-                'https://access.redhat.com/security/cve/CVE-2018-25032',
-                'https://bugzilla.redhat.com/2067945',
-                'https://cert-portal.siemens.com/productcert/pdf/ssa-333517.pdf',
-                'https://errata.almalinux.org/9/ALSA-2022-8420.html',
-                'https://github.com/advisories/GHSA-jc36-42cf-vqwj',
-                'https://github.com/madler/zlib/commit/5c44459c3b28a9bd3283aaceab7c615f8020c531',
-                'https://github.com/madler/zlib/compare/v1.2.11...v1.2.12',
-                'https://github.com/madler/zlib/issues/605',
-                'https://github.com/rubysec/ruby-advisory-db/blob/master/gems/nokogiri/CVE-2018-25032.yml',
-                'https://github.com/sparklemotion/nokogiri/releases/tag/v1.13.4',
-                'https://github.com/sparklemotion/nokogiri/security/advisories/GHSA-v6gp-9mmm-c6p5',
-                'https://groups.google.com/g/ruby-security-ann/c/vX7qSjsvWis/m/TJWN4oOKBwAJ',
-                'https://linux.oracle.com/cve/CVE-2018-25032.html',
-                'https://linux.oracle.com/errata/ELSA-2022-9565.html',
-                'https://lists.debian.org/debian-lts-announce/2022/04/msg00000.html',
-                'https://lists.debian.org/debian-lts-announce/2022/05/msg00008.html',
-                'https://lists.debian.org/debian-lts-announce/2022/09/msg00023.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DCZFIJBJTZ7CL5QXBFKTQ22Q26VINRUF/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DF62MVMH3QUGMBDCB3DY2ERQ6EBHTADB/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JZZPTWRYQULAOL3AW7RZJNVZ2UONXCV4/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NS2D2GFPFGOJUL4WQ3DUAY7HF4VWQ77F/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VOKNP2L734AEL47NRYGVZIKEFOUBQY5Y/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/XOKFMSNQ5D5WGMALBNBXU3GE442V74WU/',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/DCZFIJBJTZ7CL5QXBFKTQ22Q26VINRUF',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/DCZFIJBJTZ7CL5QXBFKTQ22Q26VINRUF/',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/DF62MVMH3QUGMBDCB3DY2ERQ6EBHTADB',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/DF62MVMH3QUGMBDCB3DY2ERQ6EBHTADB/',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/JZZPTWRYQULAOL3AW7RZJNVZ2UONXCV4',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/JZZPTWRYQULAOL3AW7RZJNVZ2UONXCV4/',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/NS2D2GFPFGOJUL4WQ3DUAY7HF4VWQ77F',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/NS2D2GFPFGOJUL4WQ3DUAY7HF4VWQ77F/',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/VOKNP2L734AEL47NRYGVZIKEFOUBQY5Y',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/VOKNP2L734AEL47NRYGVZIKEFOUBQY5Y/',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/XOKFMSNQ5D5WGMALBNBXU3GE442V74WU',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/XOKFMSNQ5D5WGMALBNBXU3GE442V74WU/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2018-25032',
-                'https://security.gentoo.org/glsa/202210-42',
-                'https://security.netapp.com/advisory/ntap-20220526-0009',
-                'https://security.netapp.com/advisory/ntap-20220526-0009/',
-                'https://security.netapp.com/advisory/ntap-20220729-0004',
-                'https://security.netapp.com/advisory/ntap-20220729-0004/',
-                'https://support.apple.com/kb/HT213255',
-                'https://support.apple.com/kb/HT213256',
-                'https://support.apple.com/kb/HT213257',
-                'https://ubuntu.com/security/notices/USN-5355-1',
-                'https://ubuntu.com/security/notices/USN-5355-2',
-                'https://ubuntu.com/security/notices/USN-5359-1',
-                'https://ubuntu.com/security/notices/USN-5359-2',
-                'https://ubuntu.com/security/notices/USN-5739-1',
-                'https://ubuntu.com/security/notices/USN-6736-1',
-                'https://ubuntu.com/security/notices/USN-6736-2',
-                'https://www.cve.org/CVERecord?id=CVE-2018-25032',
-                'https://www.debian.org/security/2022/dsa-5111',
-                'https://www.openwall.com/lists/oss-security/2022/03/24/1',
-                'https://www.openwall.com/lists/oss-security/2022/03/28/1',
-                'https://www.openwall.com/lists/oss-security/2022/03/28/3',
-                'https://www.oracle.com/security-alerts/cpujul2022.html'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'zlib: A flaw found in zlib when compressing (not decompressing) certain inputs'
-            }
-          ]
-        }
-      ],
-      'summary': {
-        'critical':   3,
-        'high':       34,
-        'low':        0,
-        'medium':     10,
-        'suppressed': 0,
-        'unknown':    0
-      }
-    }
-  },
-  {
-    'id':    'default/2a7b6c92a5e541ce6a4d6427a0139cc0901cc5531dd68b214c228647b0e7eee7',
-    'type':  'storage.sbomscanner.kubewarden.io.vulnerabilityreport',
-    'links': {
-      'patch':  'https://localhost:8005/v1/storage.sbomscanner.kubewarden.io.vulnerabilityreports/default/2a7b6c92a5e541ce6a4d6427a0139cc0901cc5531dd68b214c228647b0e7eee7',
-      'remove': 'https://localhost:8005/v1/storage.sbomscanner.kubewarden.io.vulnerabilityreports/default/2a7b6c92a5e541ce6a4d6427a0139cc0901cc5531dd68b214c228647b0e7eee7',
-      'self':   'https://localhost:8005/v1/storage.sbomscanner.kubewarden.io.vulnerabilityreports/default/2a7b6c92a5e541ce6a4d6427a0139cc0901cc5531dd68b214c228647b0e7eee7',
-      'update': 'https://localhost:8005/v1/storage.sbomscanner.kubewarden.io.vulnerabilityreports/default/2a7b6c92a5e541ce6a4d6427a0139cc0901cc5531dd68b214c228647b0e7eee7',
-      'view':   'https://localhost:8005/apis/storage.sbomscanner.kubewarden.io/v1alpha1/namespaces/default/vulnerabilityreports/2a7b6c92a5e541ce6a4d6427a0139cc0901cc5531dd68b214c228647b0e7eee7'
-    },
-    'apiVersion':    'storage.sbomscanner.kubewarden.io/v1alpha1',
-    'imageMetadata': {
-      'digest':      'sha256:f3bec467166fd0e38f83ff32fb82447f5e89b5abd13264a04454c75e11f1cdc6',
-      'platform':    'linux/arm64/v8',
-      'registry':    'lsong-demo1',
-      'registryURI': 'registry-1.docker.io',
-      'repository':  'library/alpine',
-      'tag':         '3.15.4'
-    },
-    'kind':     'VulnerabilityReport',
-    'metadata': {
-      'creationTimestamp': '2026-01-14T18:52:05Z',
-      'fields':            [
-        '2a7b6c92a5e541ce6a4d6427a0139cc0901cc5531dd68b214c228647b0e7eee7',
-        'registry-1.docker.io/library/alpine:3.15.4',
-        'linux/arm64/v8',
-        '23 (0 suppressed)'
-      ],
-      'labels': {
-        'app.kubernetes.io/managed-by':          'sbomscanner',
-        'app.kubernetes.io/part-of':             'sbomscanner',
-        'sbomscanner.kubewarden.io/scanjob-uid': '445c600a-c4b6-40b3-bd71-f2d2140a37d5'
-      },
-      'name':            '2a7b6c92a5e541ce6a4d6427a0139cc0901cc5531dd68b214c228647b0e7eee7',
-      'namespace':       'default',
-      'ownerReferences': [
-        {
-          'apiVersion':         'storage.sbomscanner.kubewarden.io/v1alpha1',
-          'blockOwnerDeletion': true,
-          'controller':         true,
-          'kind':               'SBOM',
-          'name':               '2a7b6c92a5e541ce6a4d6427a0139cc0901cc5531dd68b214c228647b0e7eee7',
-          'uid':                'ef60608a-7f52-4cbe-aea9-efb23796fa9e'
-        }
-      ],
-      'relationships': [
-        {
-          'fromId':   'default/2a7b6c92a5e541ce6a4d6427a0139cc0901cc5531dd68b214c228647b0e7eee7',
-          'fromType': 'storage.sbomscanner.kubewarden.io.sbom',
-          'rel':      'owner',
-          'state':    'active',
-          'message':  'Resource is current'
-        }
-      ],
-      'resourceVersion': '1',
-      'state':           {
-        'error':         false,
-        'message':       'Resource is current',
-        'name':          'active',
-        'transitioning': false
-      },
-      'uid': 'a400003f-c645-427a-8bb4-1384df4bc23a'
-    },
-    'report': {
-      'results': [
-        {
-          'class':           'os-pkgs',
-          'target':          '/var/run/worker/trivy.sbom.2201198848.json (alpine 3.15.4)',
-          'type':            'alpine',
-          'vulnerabilities': [
-            {
-              'cve':  'CVE-2022-4450',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'nvd': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-415'
-              ],
-              'description':   'The function PEM_read_bio_ex() reads a PEM file from a BIO and parses and\ndecodes the "name" (e.g. "CERTIFICATE"), any header data and the payload data.\nIf the function succeeds then the "name_out", "header" and "data" arguments are\npopulated with pointers to buffers containing the relevant decoded data. The\ncaller is responsible for freeing those buffers. It is possible to construct a\nPEM file that results in 0 bytes of payload data. In this case PEM_read_bio_ex()\nwill return a failure code but will populate the header argument with a pointer\nto a buffer that has already been freed. If the caller also frees this buffer\nthen a double free will occur. This will most likely lead to a crash. This\ncould be exploited by an attacker who has the ability to supply malicious PEM\nfiles for parsing to achieve a denial of service attack.\n\nThe functions PEM_read_bio() and PEM_read() are simple wrappers around\nPEM_read_bio_ex() and therefore these functions are also directly affected.\n\nThese functions are also called indirectly by a number of other OpenSSL\nfunctions including PEM_X509_INFO_read_bio_ex() and\nSSL_CTX_use_serverinfo_file() which are also vulnerable. Some OpenSSL internal\nuses of these functions are not vulnerable because the caller does not free the\nheader argument if PEM_read_bio_ex() returns a failure code. These locations\ninclude the PEM_read_bio_TYPE() functions as well as the decoders introduced in\nOpenSSL 3.0.\n\nThe OpenSSL asn1parse command line application is also impacted by this issue.',
-              'diffID':        'sha256:4f4ce317c6bbf55719e49973d32d33ba456d7cb08693a6d6fb372690eacee23b',
-              'fixedVersions': [
-                '1.1.1t-r0'
-              ],
-              'installedVersion': '1.1.1n-r0',
-              'packageName':      'libcrypto1.1',
-              'purl':             'pkg:apk/alpine/libcrypto1.1@1.1.1n-r0?arch=aarch64&distro=3.15.4',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2023:2165',
-                'https://access.redhat.com/security/cve/CVE-2022-4450',
-                'https://bugzilla.redhat.com/1960321',
-                'https://bugzilla.redhat.com/2164440',
-                'https://bugzilla.redhat.com/2164487',
-                'https://bugzilla.redhat.com/2164492',
-                'https://bugzilla.redhat.com/2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144000',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144003',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144006',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144008',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144010',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144012',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144015',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144017',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144019',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2145170',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2158412',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164440',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164487',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164488',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164492',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164497',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164499',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164500',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4203',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4304',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4450',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0215',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0216',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0217',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0286',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0401',
-                'https://errata.almalinux.org/9/ALSA-2023-2165.html',
-                'https://errata.rockylinux.org/RLSA-2023:0946',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=63bcf189be73a9cc1264059bed6f57974be74a83',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=bbcf509bd046b34cca19c766bbddc31683d0858b',
-                'https://linux.oracle.com/cve/CVE-2022-4450.html',
-                'https://linux.oracle.com/errata/ELSA-2023-32791.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2022-4450',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0003',
-                'https://rustsec.org/advisories/RUSTSEC-2023-0010.html',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://ubuntu.com/security/notices/USN-5844-1',
-                'https://ubuntu.com/security/notices/USN-6564-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2022-4450',
-                'https://www.openssl.org/news/secadv/20230207.txt'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: double free after calling PEM_read_bio_ex'
-            },
-            {
-              'cve':  'CVE-2023-0215',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'nvd': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   'The public API function BIO_new_NDEF is a helper function used for streaming\nASN.1 data via a BIO. It is primarily used internally to OpenSSL to support the\nSMIME, CMS and PKCS7 streaming capabilities, but may also be called directly by\nend user applications.\n\nThe function receives a BIO from the caller, prepends a new BIO_f_asn1 filter\nBIO onto the front of it to form a BIO chain, and then returns the new head of\nthe BIO chain to the caller. Under certain conditions, for example if a CMS\nrecipient public key is invalid, the new filter BIO is freed and the function\nreturns a NULL result indicating a failure. However, in this case, the BIO chain\nis not properly cleaned up and the BIO passed by the caller still retains\ninternal pointers to the previously freed filter BIO. If the caller then goes on\nto call BIO_pop() on the BIO then a use-after-free will occur. This will most\nlikely result in a crash.\n\n\n\nThis scenario occurs directly in the internal function B64_write_ASN1() which\nmay cause BIO_new_NDEF() to be called and will subsequently call BIO_pop() on\nthe BIO. This internal function is in turn called by the public API functions\nPEM_write_bio_ASN1_stream, PEM_write_bio_CMS_stream, PEM_write_bio_PKCS7_stream,\nSMIME_write_ASN1, SMIME_write_CMS and SMIME_write_PKCS7.\n\nOther public API functions that may be impacted by this include\ni2d_ASN1_bio_stream, BIO_new_CMS, BIO_new_PKCS7, i2d_CMS_bio_stream and\ni2d_PKCS7_bio_stream.\n\nThe OpenSSL cms and smime command line applications are similarly affected.',
-              'diffID':        'sha256:4f4ce317c6bbf55719e49973d32d33ba456d7cb08693a6d6fb372690eacee23b',
-              'fixedVersions': [
-                '1.1.1t-r0'
-              ],
-              'installedVersion': '1.1.1n-r0',
-              'packageName':      'libcrypto1.1',
-              'purl':             'pkg:apk/alpine/libcrypto1.1@1.1.1n-r0?arch=aarch64&distro=3.15.4',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2023:2165',
-                'https://access.redhat.com/security/cve/CVE-2023-0215',
-                'https://bugzilla.redhat.com/1960321',
-                'https://bugzilla.redhat.com/2164440',
-                'https://bugzilla.redhat.com/2164487',
-                'https://bugzilla.redhat.com/2164492',
-                'https://bugzilla.redhat.com/2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144000',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144003',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144006',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144008',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144010',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144012',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144015',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144017',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144019',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2145170',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2158412',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164440',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164487',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164488',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164492',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164497',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164499',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164500',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4203',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4304',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4450',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0215',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0216',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0217',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0286',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0401',
-                'https://errata.almalinux.org/9/ALSA-2023-2165.html',
-                'https://errata.rockylinux.org/RLSA-2023:0946',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=8818064ce3c3c0f1b740a5aaba2a987e75bfbafd',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=9816136fe31d92ace4037d5da5257f763aeeb4eb',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=c3829dd8825c654652201e16f8a0a0c46ee3f344',
-                'https://linux.oracle.com/cve/CVE-2023-0215.html',
-                'https://linux.oracle.com/errata/ELSA-2023-32791.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-0215',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0003',
-                'https://rustsec.org/advisories/RUSTSEC-2023-0009.html',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://security.netapp.com/advisory/ntap-20230427-0007',
-                'https://security.netapp.com/advisory/ntap-20230427-0007/',
-                'https://security.netapp.com/advisory/ntap-20230427-0009',
-                'https://security.netapp.com/advisory/ntap-20230427-0009/',
-                'https://security.netapp.com/advisory/ntap-20240621-0006',
-                'https://security.netapp.com/advisory/ntap-20240621-0006/',
-                'https://ubuntu.com/security/notices/USN-5844-1',
-                'https://ubuntu.com/security/notices/USN-5845-1',
-                'https://ubuntu.com/security/notices/USN-5845-2',
-                'https://ubuntu.com/security/notices/USN-6564-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-0215',
-                'https://www.openssl.org/news/secadv/20230207.txt'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: use-after-free following BIO_new_NDEF'
-            },
-            {
-              'cve':  'CVE-2023-0286',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '7.4',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H'
-                },
-                'nvd': {
-                  'v3score':  '7.4',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.4',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-843'
-              ],
-              'description':   'There is a type confusion vulnerability relating to X.400 address processing\ninside an X.509 GeneralName. X.400 addresses were parsed as an ASN1_STRING but\nthe public structure definition for GENERAL_NAME incorrectly specified the type\nof the x400Address field as ASN1_TYPE. This field is subsequently interpreted by\nthe OpenSSL function GENERAL_NAME_cmp as an ASN1_TYPE rather than an\nASN1_STRING.\n\nWhen CRL checking is enabled (i.e. the application sets the\nX509_V_FLAG_CRL_CHECK flag), this vulnerability may allow an attacker to pass\narbitrary pointers to a memcmp call, enabling them to read memory contents or\nenact a denial of service. In most cases, the attack requires the attacker to\nprovide both the certificate chain and CRL, neither of which need to have a\nvalid signature. If the attacker only controls one of these inputs, the other\ninput must already contain an X.400 address as a CRL distribution point, which\nis uncommon. As such, this vulnerability is most likely to only affect\napplications which have implemented their own functionality for retrieving CRLs\nover a network.',
-              'diffID':        'sha256:4f4ce317c6bbf55719e49973d32d33ba456d7cb08693a6d6fb372690eacee23b',
-              'fixedVersions': [
-                '1.1.1t-r0'
-              ],
-              'installedVersion': '1.1.1n-r0',
-              'packageName':      'libcrypto1.1',
-              'purl':             'pkg:apk/alpine/libcrypto1.1@1.1.1n-r0?arch=aarch64&distro=3.15.4',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2025:7937',
-                'https://access.redhat.com/security/cve/CVE-2023-0286',
-                'https://access.redhat.com/security/cve/cve-2023-0286',
-                'https://bugzilla.redhat.com/2164440',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144000',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144003',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144006',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144008',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144010',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144012',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144015',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144017',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144019',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2145170',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2158412',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164440',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164487',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164488',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164492',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164497',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164499',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164500',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4203',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4304',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4450',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0215',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0216',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0217',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0286',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0401',
-                'https://errata.almalinux.org/9/ALSA-2025-7937.html',
-                'https://errata.rockylinux.org/RLSA-2023:0946',
-                'https://ftp.openbsd.org/pub/OpenBSD/LibreSSL/libressl-3.6.2-relnotes.txt',
-                'https://ftp.openbsd.org/pub/OpenBSD/patches/7.2/common/018_x509.patch.sig',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=2c6c9d439b484e1ba9830d8454a34fa4f80fdfe9',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=2f7530077e0ef79d98718138716bc51ca0cad658',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=fd2af07dc083a350c959147097003a14a5e8ac4d',
-                'https://github.com/pyca/cryptography',
-                'https://github.com/pyca/cryptography/security/advisories/GHSA-x4qr-2fvf-3mr5',
-                'https://linux.oracle.com/cve/CVE-2023-0286.html',
-                'https://linux.oracle.com/errata/ELSA-2025-7937.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-0286',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0003',
-                'https://rustsec.org/advisories/RUSTSEC-2023-0006.html',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://ubuntu.com/security/notices/USN-5844-1',
-                'https://ubuntu.com/security/notices/USN-5845-1',
-                'https://ubuntu.com/security/notices/USN-5845-2',
-                'https://ubuntu.com/security/notices/USN-6564-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-0286',
-                'https://www.openssl.org/news/secadv/20230207.txt'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: X.400 address type confusion in X.509 GeneralName'
-            },
-            {
-              'cve':  'CVE-2023-0464',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-295'
-              ],
-              'description':   "A security vulnerability has been identified in all supported versions\n\nof OpenSSL related to the verification of X.509 certificate chains\nthat include policy constraints.  Attackers may be able to exploit this\nvulnerability by creating a malicious certificate chain that triggers\nexponential use of computational resources, leading to a denial-of-service\n(DoS) attack on affected systems.\n\nPolicy processing is disabled by default but can be enabled by passing\nthe `-policy' argument to the command line utilities or by calling the\n`X509_VERIFY_PARAM_set1_policies()' function.",
-              'diffID':        'sha256:4f4ce317c6bbf55719e49973d32d33ba456d7cb08693a6d6fb372690eacee23b',
-              'fixedVersions': [
-                '1.1.1t-r2'
-              ],
-              'installedVersion': '1.1.1n-r0',
-              'packageName':      'libcrypto1.1',
-              'purl':             'pkg:apk/alpine/libcrypto1.1@1.1.1n-r0?arch=aarch64&distro=3.15.4',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2023:3722',
-                'https://access.redhat.com/security/cve/CVE-2023-0464',
-                'https://bugzilla.redhat.com/2181082',
-                'https://bugzilla.redhat.com/2182561',
-                'https://bugzilla.redhat.com/2182565',
-                'https://bugzilla.redhat.com/2188461',
-                'https://bugzilla.redhat.com/2207947',
-                'https://errata.almalinux.org/9/ALSA-2023-3722.html',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=2017771e2db3e2b96f89bbe8766c3209f6a99545',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=2dcd4f1e3115f38cefa43e3efbe9b801c27e642e',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=879f7080d7e141f415c79eaa3a8ac4a3dad0348b',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=959c59c7a0164117e7f8366466a32bb1f8d77ff1',
-                'https://linux.oracle.com/cve/CVE-2023-0464.html',
-                'https://linux.oracle.com/errata/ELSA-2023-3722.html',
-                'https://lists.debian.org/debian-lts-announce/2023/06/msg00011.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-0464',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://security.netapp.com/advisory/ntap-20230406-0006/',
-                'https://security.netapp.com/advisory/ntap-20240621-0006/',
-                'https://ubuntu.com/security/notices/USN-6039-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.couchbase.com/alerts/',
-                'https://www.cve.org/CVERecord?id=CVE-2023-0464',
-                'https://www.debian.org/security/2023/dsa-5417',
-                'https://www.openssl.org/news/secadv/20230322.txt'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: Denial of service by excessive resource usage in verifying X509 policy constraints'
-            },
-            {
-              'cve':  'CVE-2022-2097',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N'
-                },
-                'nvd': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N'
-                },
-                'redhat': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-327'
-              ],
-              'description':   "AES OCB mode for 32-bit x86 platforms using the AES-NI assembly optimised implementation will not encrypt the entirety of the data under some circumstances. This could reveal sixteen bytes of data that was preexisting in the memory that wasn't written. In the special case of \"in place\" encryption, sixteen bytes of the plaintext would be revealed. Since OpenSSL does not support OCB based cipher suites for TLS and DTLS, they are both unaffected. Fixed in OpenSSL 3.0.5 (Affected 3.0.0-3.0.4). Fixed in OpenSSL 1.1.1q (Affected 1.1.1-1.1.1p).",
-              'diffID':        'sha256:4f4ce317c6bbf55719e49973d32d33ba456d7cb08693a6d6fb372690eacee23b',
-              'fixedVersions': [
-                '1.1.1q-r0'
-              ],
-              'installedVersion': '1.1.1n-r0',
-              'packageName':      'libcrypto1.1',
-              'purl':             'pkg:apk/alpine/libcrypto1.1@1.1.1n-r0?arch=aarch64&distro=3.15.4',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2022:6224',
-                'https://access.redhat.com/security/cve/CVE-2022-2097',
-                'https://bugzilla.redhat.com/2081494',
-                'https://bugzilla.redhat.com/2087911',
-                'https://bugzilla.redhat.com/2087913',
-                'https://bugzilla.redhat.com/2097310',
-                'https://bugzilla.redhat.com/2104905',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2081494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2097310',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2100554',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2104905',
-                'https://cert-portal.siemens.com/productcert/pdf/ssa-332410.pdf',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-1292',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-2068',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-2097',
-                'https://errata.almalinux.org/9/ALSA-2022-6224.html',
-                'https://errata.rockylinux.org/RLSA-2022:5818',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=919925673d6c9cfed3c1085497f5dfbbed5fc431',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=a98f339ddd7e8f487d6e0088d4a9a42324885a93',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=919925673d6c9cfed3c1085497f5dfbbed5fc431',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=a98f339ddd7e8f487d6e0088d4a9a42324885a93',
-                'https://github.com/alexcrichton/openssl-src-rs',
-                'https://linux.oracle.com/cve/CVE-2022-2097.html',
-                'https://linux.oracle.com/errata/ELSA-2022-9955.html',
-                'https://lists.debian.org/debian-lts-announce/2023/02/msg00019.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/R6CK57NBQFTPUMXAPJURCGXUYT76NQAK',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/R6CK57NBQFTPUMXAPJURCGXUYT76NQAK/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/V6567JERRHHJW2GNGJGKDRNHR7SNPZK7',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/V6567JERRHHJW2GNGJGKDRNHR7SNPZK7/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VCMNWKERPBKOEBNL7CLTTX3ZZCZLH7XA',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VCMNWKERPBKOEBNL7CLTTX3ZZCZLH7XA/',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/R6CK57NBQFTPUMXAPJURCGXUYT76NQAK',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/R6CK57NBQFTPUMXAPJURCGXUYT76NQAK/',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/V6567JERRHHJW2GNGJGKDRNHR7SNPZK7',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/V6567JERRHHJW2GNGJGKDRNHR7SNPZK7/',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/VCMNWKERPBKOEBNL7CLTTX3ZZCZLH7XA',
-                'https://nvd.nist.gov/vuln/detail/CVE-2022-2097',
-                'https://rustsec.org/advisories/RUSTSEC-2022-0032.html',
-                'https://security.gentoo.org/glsa/202210-02',
-                'https://security.netapp.com/advisory/ntap-20220715-0011',
-                'https://security.netapp.com/advisory/ntap-20220715-0011/',
-                'https://security.netapp.com/advisory/ntap-20230420-0008',
-                'https://security.netapp.com/advisory/ntap-20230420-0008/',
-                'https://security.netapp.com/advisory/ntap-20240621-0006',
-                'https://security.netapp.com/advisory/ntap-20240621-0006/',
-                'https://ubuntu.com/security/notices/USN-5502-1',
-                'https://ubuntu.com/security/notices/USN-6457-1',
-                'https://www.cve.org/CVERecord?id=CVE-2022-2097',
-                'https://www.debian.org/security/2023/dsa-5343',
-                'https://www.openssl.org/news/secadv/20220705.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: AES OCB fails to encrypt some bytes'
-            },
-            {
-              'cve':  'CVE-2022-4304',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N'
-                },
-                'nvd': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N'
-                },
-                'redhat': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-203'
-              ],
-              'description':   'A timing based side channel exists in the OpenSSL RSA Decryption implementation\nwhich could be sufficient to recover a plaintext across a network in a\nBleichenbacher style attack. To achieve a successful decryption an attacker\nwould have to be able to send a very large number of trial messages for\ndecryption. The vulnerability affects all RSA padding modes: PKCS#1 v1.5,\nRSA-OEAP and RSASVE.\n\nFor example, in a TLS connection, RSA is commonly used by a client to send an\nencrypted pre-master secret to the server. An attacker that had observed a\ngenuine connection between a client and a server could use this flaw to send\ntrial messages to the server and record the time taken to process them. After a\nsufficiently large number of messages the attacker could recover the pre-master\nsecret used for the original connection and thus be able to decrypt the\napplication data sent over that connection.',
-              'diffID':        'sha256:4f4ce317c6bbf55719e49973d32d33ba456d7cb08693a6d6fb372690eacee23b',
-              'fixedVersions': [
-                '1.1.1t-r0'
-              ],
-              'installedVersion': '1.1.1n-r0',
-              'packageName':      'libcrypto1.1',
-              'purl':             'pkg:apk/alpine/libcrypto1.1@1.1.1n-r0?arch=aarch64&distro=3.15.4',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2023:2165',
-                'https://access.redhat.com/security/cve/CVE-2022-4304',
-                'https://bugzilla.redhat.com/1960321',
-                'https://bugzilla.redhat.com/2164440',
-                'https://bugzilla.redhat.com/2164487',
-                'https://bugzilla.redhat.com/2164492',
-                'https://bugzilla.redhat.com/2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144000',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144003',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144006',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144008',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144010',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144012',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144015',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144017',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144019',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2145170',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2158412',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164440',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164487',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164488',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164492',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164497',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164499',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164500',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4203',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4304',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4450',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0215',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0216',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0217',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0286',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0401',
-                'https://errata.almalinux.org/9/ALSA-2023-2165.html',
-                'https://errata.rockylinux.org/RLSA-2023:0946',
-                'https://linux.oracle.com/cve/CVE-2022-4304.html',
-                'https://linux.oracle.com/errata/ELSA-2023-32791.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2022-4304',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0003',
-                'https://rustsec.org/advisories/RUSTSEC-2023-0007.html',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://ubuntu.com/security/notices/USN-5844-1',
-                'https://ubuntu.com/security/notices/USN-6564-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2022-4304',
-                'https://www.openssl.org/news/secadv/20230207.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: timing attack in RSA Decryption implementation'
-            },
-            {
-              'cve':  'CVE-2023-0465',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N'
-                },
-                'redhat': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-295'
-              ],
-              'description':   "Applications that use a non-default option when verifying certificates may be\nvulnerable to an attack from a malicious CA to circumvent certain checks.\n\nInvalid certificate policies in leaf certificates are silently ignored by\nOpenSSL and other certificate policy checks are skipped for that certificate.\nA malicious CA could use this to deliberately assert invalid certificate policies\nin order to circumvent policy checking on the certificate altogether.\n\nPolicy processing is disabled by default but can be enabled by passing\nthe `-policy' argument to the command line utilities or by calling the\n`X509_VERIFY_PARAM_set1_policies()' function.",
-              'diffID':        'sha256:4f4ce317c6bbf55719e49973d32d33ba456d7cb08693a6d6fb372690eacee23b',
-              'fixedVersions': [
-                '1.1.1t-r2'
-              ],
-              'installedVersion': '1.1.1n-r0',
-              'packageName':      'libcrypto1.1',
-              'purl':             'pkg:apk/alpine/libcrypto1.1@1.1.1n-r0?arch=aarch64&distro=3.15.4',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2023:3722',
-                'https://access.redhat.com/security/cve/CVE-2023-0465',
-                'https://bugzilla.redhat.com/2181082',
-                'https://bugzilla.redhat.com/2182561',
-                'https://bugzilla.redhat.com/2182565',
-                'https://bugzilla.redhat.com/2188461',
-                'https://bugzilla.redhat.com/2207947',
-                'https://errata.almalinux.org/9/ALSA-2023-3722.html',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=10325176f3d3e98c6e2b3bf5ab1e3b334de6947a',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=1dd43e0709fece299b15208f36cc7c76209ba0bb',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=b013765abfa80036dc779dd0e50602c57bb3bf95',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=facfb1ab745646e97a1920977ae4a9965ea61d5c',
-                'https://linux.oracle.com/cve/CVE-2023-0465.html',
-                'https://linux.oracle.com/errata/ELSA-2023-3722.html',
-                'https://lists.debian.org/debian-lts-announce/2023/06/msg00011.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-0465',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://security.netapp.com/advisory/ntap-20230414-0001/',
-                'https://ubuntu.com/security/notices/USN-6039-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-0465',
-                'https://www.debian.org/security/2023/dsa-5417',
-                'https://www.openssl.org/news/secadv/20230328.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: Invalid certificate policies in leaf certificates are silently ignored'
-            },
-            {
-              'cve':  'CVE-2023-2650',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '6.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-770'
-              ],
-              'description':   "Issue summary: Processing some specially crafted ASN.1 object identifiers or\ndata containing them may be very slow.\n\nImpact summary: Applications that use OBJ_obj2txt() directly, or use any of\nthe OpenSSL subsystems OCSP, PKCS7/SMIME, CMS, CMP/CRMF or TS with no message\nsize limit may experience notable to very long delays when processing those\nmessages, which may lead to a Denial of Service.\n\nAn OBJECT IDENTIFIER is composed of a series of numbers - sub-identifiers -\nmost of which have no size limit.  OBJ_obj2txt() may be used to translate\nan ASN.1 OBJECT IDENTIFIER given in DER encoding form (using the OpenSSL\ntype ASN1_OBJECT) to its canonical numeric text form, which are the\nsub-identifiers of the OBJECT IDENTIFIER in decimal form, separated by\nperiods.\n\nWhen one of the sub-identifiers in the OBJECT IDENTIFIER is very large\n(these are sizes that are seen as absurdly large, taking up tens or hundreds\nof KiBs), the translation to a decimal number in text may take a very long\ntime.  The time complexity is O(n^2) with 'n' being the size of the\nsub-identifiers in bytes (*).\n\nWith OpenSSL 3.0, support to fetch cryptographic algorithms using names /\nidentifiers in string form was introduced.  This includes using OBJECT\nIDENTIFIERs in canonical numeric text form as identifiers for fetching\nalgorithms.\n\nSuch OBJECT IDENTIFIERs may be received through the ASN.1 structure\nAlgorithmIdentifier, which is commonly used in multiple protocols to specify\nwhat cryptographic algorithm should be used to sign or verify, encrypt or\ndecrypt, or digest passed data.\n\nApplications that call OBJ_obj2txt() directly with untrusted data are\naffected, with any version of OpenSSL.  If the use is for the mere purpose\nof display, the severity is considered low.\n\nIn OpenSSL 3.0 and newer, this affects the subsystems OCSP, PKCS7/SMIME,\nCMS, CMP/CRMF or TS.  It also impacts anything that processes X.509\ncertificates, including simple things like verifying its signature.\n\nThe impact on TLS is relatively low, because all versions of OpenSSL have a\n100KiB limit on the peer's certificate chain.  Additionally, this only\nimpacts clients, or servers that have explicitly enabled client\nauthentication.\n\nIn OpenSSL 1.1.1 and 1.0.2, this only affects displaying diverse objects,\nsuch as X.509 certificates.  This is assumed to not happen in such a way\nthat it would cause a Denial of Service, so these versions are considered\nnot affected by this issue in such a way that it would be cause for concern,\nand the severity is therefore considered low.",
-              'diffID':        'sha256:4f4ce317c6bbf55719e49973d32d33ba456d7cb08693a6d6fb372690eacee23b',
-              'fixedVersions': [
-                '1.1.1u-r0'
-              ],
-              'installedVersion': '1.1.1n-r0',
-              'packageName':      'libcrypto1.1',
-              'purl':             'pkg:apk/alpine/libcrypto1.1@1.1.1n-r0?arch=aarch64&distro=3.15.4',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2023/05/30/1',
-                'https://access.redhat.com/errata/RHSA-2023:6330',
-                'https://access.redhat.com/security/cve/CVE-2023-2650',
-                'https://bugzilla.redhat.com/1858038',
-                'https://bugzilla.redhat.com/2207947',
-                'https://errata.almalinux.org/9/ALSA-2023-6330.html',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=423a2bc737a908ad0c77bda470b2b59dc879936b',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=853c5e56ee0b8650c73140816bb8b91d6163422c',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=9e209944b35cf82368071f160a744b6178f9b098',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=db779b0e10b047f2585615e0b8f2acdf21f8544a',
-                'https://linux.oracle.com/cve/CVE-2023-2650.html',
-                'https://linux.oracle.com/errata/ELSA-2023-6330.html',
-                'https://lists.debian.org/debian-lts-announce/2023/06/msg00011.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-2650',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0009',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://security.netapp.com/advisory/ntap-20230703-0001/',
-                'https://security.netapp.com/advisory/ntap-20231027-0009/',
-                'https://ubuntu.com/security/notices/USN-6119-1',
-                'https://ubuntu.com/security/notices/USN-6188-1',
-                'https://ubuntu.com/security/notices/USN-6672-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-2650',
-                'https://www.debian.org/security/2023/dsa-5417',
-                'https://www.openssl.org/news/secadv/20230530.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: Possible DoS translating ASN.1 object identifiers'
-            },
-            {
-              'cve':  'CVE-2023-3446',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L'
-                },
-                'redhat': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L'
-                }
-              },
-              'cwes': [
-                'CWE-606',
-                'CWE-1333'
-              ],
-              'description':   "Issue summary: Checking excessively long DH keys or parameters may be very slow.\n\nImpact summary: Applications that use the functions DH_check(), DH_check_ex()\nor EVP_PKEY_param_check() to check a DH key or DH parameters may experience long\ndelays. Where the key or parameters that are being checked have been obtained\nfrom an untrusted source this may lead to a Denial of Service.\n\nThe function DH_check() performs various checks on DH parameters. One of those\nchecks confirms that the modulus ('p' parameter) is not too large. Trying to use\na very large modulus is slow and OpenSSL will not normally use a modulus which\nis over 10,000 bits in length.\n\nHowever the DH_check() function checks numerous aspects of the key or parameters\nthat have been supplied. Some of those checks use the supplied modulus value\neven if it has already been found to be too large.\n\nAn application that calls DH_check() and supplies a key or parameters obtained\nfrom an untrusted source could be vulernable to a Denial of Service attack.\n\nThe function DH_check() is itself called by a number of other OpenSSL functions.\nAn application calling any of those other functions may similarly be affected.\nThe other functions affected by this are DH_check_ex() and\nEVP_PKEY_param_check().\n\nAlso vulnerable are the OpenSSL dhparam and pkeyparam command line applications\nwhen using the '-check' option.\n\nThe OpenSSL SSL/TLS implementation is not affected by this issue.\nThe OpenSSL 3.0 and 3.1 FIPS providers are not affected by this issue.",
-              'diffID':        'sha256:4f4ce317c6bbf55719e49973d32d33ba456d7cb08693a6d6fb372690eacee23b',
-              'fixedVersions': [
-                '1.1.1u-r2'
-              ],
-              'installedVersion': '1.1.1n-r0',
-              'packageName':      'libcrypto1.1',
-              'purl':             'pkg:apk/alpine/libcrypto1.1@1.1.1n-r0?arch=aarch64&distro=3.15.4',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2023/07/19/4',
-                'http://www.openwall.com/lists/oss-security/2023/07/19/5',
-                'http://www.openwall.com/lists/oss-security/2023/07/19/6',
-                'http://www.openwall.com/lists/oss-security/2023/07/31/1',
-                'http://www.openwall.com/lists/oss-security/2024/05/16/1',
-                'https://access.redhat.com/errata/RHSA-2024:2447',
-                'https://access.redhat.com/security/cve/CVE-2023-3446',
-                'https://bugzilla.redhat.com/2223016',
-                'https://bugzilla.redhat.com/2224962',
-                'https://bugzilla.redhat.com/2227852',
-                'https://bugzilla.redhat.com/2248616',
-                'https://bugzilla.redhat.com/2257571',
-                'https://bugzilla.redhat.com/2258502',
-                'https://bugzilla.redhat.com/2259944',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2224962',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2257582',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2257583',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2258677',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2258688',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2258691',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2258694',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2258700',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-36763',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-36764',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3446',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45229',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45231',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45232',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45233',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45235',
-                'https://errata.almalinux.org/9/ALSA-2024-2447.html',
-                'https://errata.rockylinux.org/RLSA-2024:2264',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=1fa20cf2f506113c761777127a38bce5068740eb',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=8780a896543a654e757db1b9396383f9d8095528',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=9a0a4d3c1e7138915563c0df4fe6a3f9377b839c',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=fc9867c1e03c22ebf56943be205202e576aabf23',
-                'https://linux.oracle.com/cve/CVE-2023-3446.html',
-                'https://linux.oracle.com/errata/ELSA-2024-2447.html',
-                'https://lists.debian.org/debian-lts-announce/2023/08/msg00019.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-3446',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://security.netapp.com/advisory/ntap-20230803-0011/',
-                'https://ubuntu.com/security/notices/USN-6435-1',
-                'https://ubuntu.com/security/notices/USN-6435-2',
-                'https://ubuntu.com/security/notices/USN-6450-1',
-                'https://ubuntu.com/security/notices/USN-6709-1',
-                'https://ubuntu.com/security/notices/USN-7018-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-3446',
-                'https://www.openssl.org/news/secadv/20230719.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: Excessive time spent checking DH keys and parameters'
-            },
-            {
-              'cve':  'CVE-2023-3817',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L'
-                },
-                'redhat': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L'
-                }
-              },
-              'cwes': [
-                'CWE-606',
-                'CWE-834'
-              ],
-              'description':   'Issue summary: Checking excessively long DH keys or parameters may be very slow.\n\nImpact summary: Applications that use the functions DH_check(), DH_check_ex()\nor EVP_PKEY_param_check() to check a DH key or DH parameters may experience long\ndelays. Where the key or parameters that are being checked have been obtained\nfrom an untrusted source this may lead to a Denial of Service.\n\nThe function DH_check() performs various checks on DH parameters. After fixing\nCVE-2023-3446 it was discovered that a large q parameter value can also trigger\nan overly long computation during some of these checks. A correct q value,\nif present, cannot be larger than the modulus p parameter, thus it is\nunnecessary to perform these checks if q is larger than p.\n\nAn application that calls DH_check() and supplies a key or parameters obtained\nfrom an untrusted source could be vulnerable to a Denial of Service attack.\n\nThe function DH_check() is itself called by a number of other OpenSSL functions.\nAn application calling any of those other functions may similarly be affected.\nThe other functions affected by this are DH_check_ex() and\nEVP_PKEY_param_check().\n\nAlso vulnerable are the OpenSSL dhparam and pkeyparam command line applications\nwhen using the "-check" option.\n\nThe OpenSSL SSL/TLS implementation is not affected by this issue.\n\nThe OpenSSL 3.0 and 3.1 FIPS providers are not affected by this issue.',
-              'diffID':        'sha256:4f4ce317c6bbf55719e49973d32d33ba456d7cb08693a6d6fb372690eacee23b',
-              'fixedVersions': [
-                '1.1.1v-r0'
-              ],
-              'installedVersion': '1.1.1n-r0',
-              'packageName':      'libcrypto1.1',
-              'purl':             'pkg:apk/alpine/libcrypto1.1@1.1.1n-r0?arch=aarch64&distro=3.15.4',
-              'references':       [
-                'http://seclists.org/fulldisclosure/2023/Jul/43',
-                'http://www.openwall.com/lists/oss-security/2023/07/31/1',
-                'http://www.openwall.com/lists/oss-security/2023/09/22/11',
-                'http://www.openwall.com/lists/oss-security/2023/09/22/9',
-                'http://www.openwall.com/lists/oss-security/2023/11/06/2',
-                'https://access.redhat.com/errata/RHSA-2024:2447',
-                'https://access.redhat.com/security/cve/CVE-2023-3817',
-                'https://bugzilla.redhat.com/2223016',
-                'https://bugzilla.redhat.com/2224962',
-                'https://bugzilla.redhat.com/2227852',
-                'https://bugzilla.redhat.com/2248616',
-                'https://bugzilla.redhat.com/2257571',
-                'https://bugzilla.redhat.com/2258502',
-                'https://bugzilla.redhat.com/2259944',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2224962',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2227852',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2248616',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2270358',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3446',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3817',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-5678',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-2408',
-                'https://errata.almalinux.org/9/ALSA-2024-2447.html',
-                'https://errata.rockylinux.org/RLSA-2023:7877',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=6a1eb62c29db6cb5eec707f9338aee00f44e26f5',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=869ad69aadd985c7b8ca6f4e5dd0eb274c9f3644',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=9002fd07327a91f35ba6c1307e71fa6fd4409b7f',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=91ddeba0f2269b017dc06c46c993a788974b1aa5',
-                'https://linux.oracle.com/cve/CVE-2023-3817.html',
-                'https://linux.oracle.com/errata/ELSA-2024-2447.html',
-                'https://lists.debian.org/debian-lts-announce/2023/08/msg00019.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-3817',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://security.netapp.com/advisory/ntap-20230818-0014/',
-                'https://security.netapp.com/advisory/ntap-20231027-0008/',
-                'https://security.netapp.com/advisory/ntap-20240621-0006/',
-                'https://ubuntu.com/security/notices/USN-6435-1',
-                'https://ubuntu.com/security/notices/USN-6435-2',
-                'https://ubuntu.com/security/notices/USN-6450-1',
-                'https://ubuntu.com/security/notices/USN-6709-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-3817',
-                'https://www.openssl.org/news/secadv/20230731.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'OpenSSL: Excessive time spent checking DH q parameter value'
-            },
-            {
-              'cve':  'CVE-2023-5678',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L'
-                },
-                'redhat': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L'
-                }
-              },
-              'cwes': [
-                'CWE-606',
-                'CWE-754'
-              ],
-              'description':   "Issue summary: Generating excessively long X9.42 DH keys or checking\nexcessively long X9.42 DH keys or parameters may be very slow.\n\nImpact summary: Applications that use the functions DH_generate_key() to\ngenerate an X9.42 DH key may experience long delays.  Likewise, applications\nthat use DH_check_pub_key(), DH_check_pub_key_ex() or EVP_PKEY_public_check()\nto check an X9.42 DH key or X9.42 DH parameters may experience long delays.\nWhere the key or parameters that are being checked have been obtained from\nan untrusted source this may lead to a Denial of Service.\n\nWhile DH_check() performs all the necessary checks (as of CVE-2023-3817),\nDH_check_pub_key() doesn't make any of these checks, and is therefore\nvulnerable for excessively large P and Q parameters.\n\nLikewise, while DH_generate_key() performs a check for an excessively large\nP, it doesn't check for an excessively large Q.\n\nAn application that calls DH_generate_key() or DH_check_pub_key() and\nsupplies a key or parameters obtained from an untrusted source could be\nvulnerable to a Denial of Service attack.\n\nDH_generate_key() and DH_check_pub_key() are also called by a number of\nother OpenSSL functions.  An application calling any of those other\nfunctions may similarly be affected.  The other functions affected by this\nare DH_check_pub_key_ex(), EVP_PKEY_public_check(), and EVP_PKEY_generate().\n\nAlso vulnerable are the OpenSSL pkey command line application when using the\n\"-pubcheck\" option, as well as the OpenSSL genpkey command line application.\n\nThe OpenSSL SSL/TLS implementation is not affected by this issue.\n\nThe OpenSSL 3.0 and 3.1 FIPS providers are not affected by this issue.",
-              'diffID':        'sha256:4f4ce317c6bbf55719e49973d32d33ba456d7cb08693a6d6fb372690eacee23b',
-              'fixedVersions': [
-                '1.1.1w-r1'
-              ],
-              'installedVersion': '1.1.1n-r0',
-              'packageName':      'libcrypto1.1',
-              'purl':             'pkg:apk/alpine/libcrypto1.1@1.1.1n-r0?arch=aarch64&distro=3.15.4',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2024/03/11/1',
-                'https://access.redhat.com/errata/RHSA-2024:2447',
-                'https://access.redhat.com/security/cve/CVE-2023-5678',
-                'https://bugzilla.redhat.com/2223016',
-                'https://bugzilla.redhat.com/2224962',
-                'https://bugzilla.redhat.com/2227852',
-                'https://bugzilla.redhat.com/2248616',
-                'https://bugzilla.redhat.com/2257571',
-                'https://bugzilla.redhat.com/2258502',
-                'https://bugzilla.redhat.com/2259944',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2224962',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2227852',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2248616',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2270358',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3446',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3817',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-5678',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-2408',
-                'https://errata.almalinux.org/9/ALSA-2024-2447.html',
-                'https://errata.rockylinux.org/RLSA-2023:7877',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=34efaef6c103d636ab507a0cc34dca4d3aecc055',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=710fee740904b6290fef0dd5536fbcedbc38ff0c',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=db925ae2e65d0d925adef429afc37f75bd1c2017',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=ddeb4b6c6d527e54ce9a99cba785c0f7776e54b6',
-                'https://linux.oracle.com/cve/CVE-2023-5678.html',
-                'https://linux.oracle.com/errata/ELSA-2024-2447.html',
-                'https://lists.debian.org/debian-lts-announce/2024/10/msg00033.html',
-                'https://lists.debian.org/debian-lts-announce/2024/11/msg00000.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-5678',
-                'https://security.netapp.com/advisory/ntap-20231130-0010/',
-                'https://ubuntu.com/security/notices/USN-6622-1',
-                'https://ubuntu.com/security/notices/USN-6632-1',
-                'https://ubuntu.com/security/notices/USN-6709-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-5678',
-                'https://www.openssl.org/news/secadv/20231106.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: Generating excessively long X9.42 DH keys or checking excessively long X9.42 DH keys or parameters may be very slow'
-            },
-            {
-              'cve':  'CVE-2022-4450',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'nvd': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-415'
-              ],
-              'description':   'The function PEM_read_bio_ex() reads a PEM file from a BIO and parses and\ndecodes the "name" (e.g. "CERTIFICATE"), any header data and the payload data.\nIf the function succeeds then the "name_out", "header" and "data" arguments are\npopulated with pointers to buffers containing the relevant decoded data. The\ncaller is responsible for freeing those buffers. It is possible to construct a\nPEM file that results in 0 bytes of payload data. In this case PEM_read_bio_ex()\nwill return a failure code but will populate the header argument with a pointer\nto a buffer that has already been freed. If the caller also frees this buffer\nthen a double free will occur. This will most likely lead to a crash. This\ncould be exploited by an attacker who has the ability to supply malicious PEM\nfiles for parsing to achieve a denial of service attack.\n\nThe functions PEM_read_bio() and PEM_read() are simple wrappers around\nPEM_read_bio_ex() and therefore these functions are also directly affected.\n\nThese functions are also called indirectly by a number of other OpenSSL\nfunctions including PEM_X509_INFO_read_bio_ex() and\nSSL_CTX_use_serverinfo_file() which are also vulnerable. Some OpenSSL internal\nuses of these functions are not vulnerable because the caller does not free the\nheader argument if PEM_read_bio_ex() returns a failure code. These locations\ninclude the PEM_read_bio_TYPE() functions as well as the decoders introduced in\nOpenSSL 3.0.\n\nThe OpenSSL asn1parse command line application is also impacted by this issue.',
-              'diffID':        'sha256:4f4ce317c6bbf55719e49973d32d33ba456d7cb08693a6d6fb372690eacee23b',
-              'fixedVersions': [
-                '1.1.1t-r0'
-              ],
-              'installedVersion': '1.1.1n-r0',
-              'packageName':      'libssl1.1',
-              'purl':             'pkg:apk/alpine/libssl1.1@1.1.1n-r0?arch=aarch64&distro=3.15.4',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2023:2165',
-                'https://access.redhat.com/security/cve/CVE-2022-4450',
-                'https://bugzilla.redhat.com/1960321',
-                'https://bugzilla.redhat.com/2164440',
-                'https://bugzilla.redhat.com/2164487',
-                'https://bugzilla.redhat.com/2164492',
-                'https://bugzilla.redhat.com/2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144000',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144003',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144006',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144008',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144010',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144012',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144015',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144017',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144019',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2145170',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2158412',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164440',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164487',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164488',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164492',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164497',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164499',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164500',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4203',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4304',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4450',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0215',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0216',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0217',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0286',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0401',
-                'https://errata.almalinux.org/9/ALSA-2023-2165.html',
-                'https://errata.rockylinux.org/RLSA-2023:0946',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=63bcf189be73a9cc1264059bed6f57974be74a83',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=bbcf509bd046b34cca19c766bbddc31683d0858b',
-                'https://linux.oracle.com/cve/CVE-2022-4450.html',
-                'https://linux.oracle.com/errata/ELSA-2023-32791.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2022-4450',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0003',
-                'https://rustsec.org/advisories/RUSTSEC-2023-0010.html',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://ubuntu.com/security/notices/USN-5844-1',
-                'https://ubuntu.com/security/notices/USN-6564-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2022-4450',
-                'https://www.openssl.org/news/secadv/20230207.txt'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: double free after calling PEM_read_bio_ex'
-            },
-            {
-              'cve':  'CVE-2023-0215',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'nvd': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   'The public API function BIO_new_NDEF is a helper function used for streaming\nASN.1 data via a BIO. It is primarily used internally to OpenSSL to support the\nSMIME, CMS and PKCS7 streaming capabilities, but may also be called directly by\nend user applications.\n\nThe function receives a BIO from the caller, prepends a new BIO_f_asn1 filter\nBIO onto the front of it to form a BIO chain, and then returns the new head of\nthe BIO chain to the caller. Under certain conditions, for example if a CMS\nrecipient public key is invalid, the new filter BIO is freed and the function\nreturns a NULL result indicating a failure. However, in this case, the BIO chain\nis not properly cleaned up and the BIO passed by the caller still retains\ninternal pointers to the previously freed filter BIO. If the caller then goes on\nto call BIO_pop() on the BIO then a use-after-free will occur. This will most\nlikely result in a crash.\n\n\n\nThis scenario occurs directly in the internal function B64_write_ASN1() which\nmay cause BIO_new_NDEF() to be called and will subsequently call BIO_pop() on\nthe BIO. This internal function is in turn called by the public API functions\nPEM_write_bio_ASN1_stream, PEM_write_bio_CMS_stream, PEM_write_bio_PKCS7_stream,\nSMIME_write_ASN1, SMIME_write_CMS and SMIME_write_PKCS7.\n\nOther public API functions that may be impacted by this include\ni2d_ASN1_bio_stream, BIO_new_CMS, BIO_new_PKCS7, i2d_CMS_bio_stream and\ni2d_PKCS7_bio_stream.\n\nThe OpenSSL cms and smime command line applications are similarly affected.',
-              'diffID':        'sha256:4f4ce317c6bbf55719e49973d32d33ba456d7cb08693a6d6fb372690eacee23b',
-              'fixedVersions': [
-                '1.1.1t-r0'
-              ],
-              'installedVersion': '1.1.1n-r0',
-              'packageName':      'libssl1.1',
-              'purl':             'pkg:apk/alpine/libssl1.1@1.1.1n-r0?arch=aarch64&distro=3.15.4',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2023:2165',
-                'https://access.redhat.com/security/cve/CVE-2023-0215',
-                'https://bugzilla.redhat.com/1960321',
-                'https://bugzilla.redhat.com/2164440',
-                'https://bugzilla.redhat.com/2164487',
-                'https://bugzilla.redhat.com/2164492',
-                'https://bugzilla.redhat.com/2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144000',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144003',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144006',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144008',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144010',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144012',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144015',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144017',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144019',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2145170',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2158412',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164440',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164487',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164488',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164492',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164497',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164499',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164500',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4203',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4304',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4450',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0215',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0216',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0217',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0286',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0401',
-                'https://errata.almalinux.org/9/ALSA-2023-2165.html',
-                'https://errata.rockylinux.org/RLSA-2023:0946',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=8818064ce3c3c0f1b740a5aaba2a987e75bfbafd',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=9816136fe31d92ace4037d5da5257f763aeeb4eb',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=c3829dd8825c654652201e16f8a0a0c46ee3f344',
-                'https://linux.oracle.com/cve/CVE-2023-0215.html',
-                'https://linux.oracle.com/errata/ELSA-2023-32791.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-0215',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0003',
-                'https://rustsec.org/advisories/RUSTSEC-2023-0009.html',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://security.netapp.com/advisory/ntap-20230427-0007',
-                'https://security.netapp.com/advisory/ntap-20230427-0007/',
-                'https://security.netapp.com/advisory/ntap-20230427-0009',
-                'https://security.netapp.com/advisory/ntap-20230427-0009/',
-                'https://security.netapp.com/advisory/ntap-20240621-0006',
-                'https://security.netapp.com/advisory/ntap-20240621-0006/',
-                'https://ubuntu.com/security/notices/USN-5844-1',
-                'https://ubuntu.com/security/notices/USN-5845-1',
-                'https://ubuntu.com/security/notices/USN-5845-2',
-                'https://ubuntu.com/security/notices/USN-6564-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-0215',
-                'https://www.openssl.org/news/secadv/20230207.txt'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: use-after-free following BIO_new_NDEF'
-            },
-            {
-              'cve':  'CVE-2023-0286',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '7.4',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H'
-                },
-                'nvd': {
-                  'v3score':  '7.4',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.4',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-843'
-              ],
-              'description':   'There is a type confusion vulnerability relating to X.400 address processing\ninside an X.509 GeneralName. X.400 addresses were parsed as an ASN1_STRING but\nthe public structure definition for GENERAL_NAME incorrectly specified the type\nof the x400Address field as ASN1_TYPE. This field is subsequently interpreted by\nthe OpenSSL function GENERAL_NAME_cmp as an ASN1_TYPE rather than an\nASN1_STRING.\n\nWhen CRL checking is enabled (i.e. the application sets the\nX509_V_FLAG_CRL_CHECK flag), this vulnerability may allow an attacker to pass\narbitrary pointers to a memcmp call, enabling them to read memory contents or\nenact a denial of service. In most cases, the attack requires the attacker to\nprovide both the certificate chain and CRL, neither of which need to have a\nvalid signature. If the attacker only controls one of these inputs, the other\ninput must already contain an X.400 address as a CRL distribution point, which\nis uncommon. As such, this vulnerability is most likely to only affect\napplications which have implemented their own functionality for retrieving CRLs\nover a network.',
-              'diffID':        'sha256:4f4ce317c6bbf55719e49973d32d33ba456d7cb08693a6d6fb372690eacee23b',
-              'fixedVersions': [
-                '1.1.1t-r0'
-              ],
-              'installedVersion': '1.1.1n-r0',
-              'packageName':      'libssl1.1',
-              'purl':             'pkg:apk/alpine/libssl1.1@1.1.1n-r0?arch=aarch64&distro=3.15.4',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2025:7937',
-                'https://access.redhat.com/security/cve/CVE-2023-0286',
-                'https://access.redhat.com/security/cve/cve-2023-0286',
-                'https://bugzilla.redhat.com/2164440',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144000',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144003',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144006',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144008',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144010',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144012',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144015',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144017',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144019',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2145170',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2158412',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164440',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164487',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164488',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164492',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164497',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164499',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164500',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4203',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4304',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4450',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0215',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0216',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0217',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0286',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0401',
-                'https://errata.almalinux.org/9/ALSA-2025-7937.html',
-                'https://errata.rockylinux.org/RLSA-2023:0946',
-                'https://ftp.openbsd.org/pub/OpenBSD/LibreSSL/libressl-3.6.2-relnotes.txt',
-                'https://ftp.openbsd.org/pub/OpenBSD/patches/7.2/common/018_x509.patch.sig',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=2c6c9d439b484e1ba9830d8454a34fa4f80fdfe9',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=2f7530077e0ef79d98718138716bc51ca0cad658',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=fd2af07dc083a350c959147097003a14a5e8ac4d',
-                'https://github.com/pyca/cryptography',
-                'https://github.com/pyca/cryptography/security/advisories/GHSA-x4qr-2fvf-3mr5',
-                'https://linux.oracle.com/cve/CVE-2023-0286.html',
-                'https://linux.oracle.com/errata/ELSA-2025-7937.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-0286',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0003',
-                'https://rustsec.org/advisories/RUSTSEC-2023-0006.html',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://ubuntu.com/security/notices/USN-5844-1',
-                'https://ubuntu.com/security/notices/USN-5845-1',
-                'https://ubuntu.com/security/notices/USN-5845-2',
-                'https://ubuntu.com/security/notices/USN-6564-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-0286',
-                'https://www.openssl.org/news/secadv/20230207.txt'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: X.400 address type confusion in X.509 GeneralName'
-            },
-            {
-              'cve':  'CVE-2023-0464',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-295'
-              ],
-              'description':   "A security vulnerability has been identified in all supported versions\n\nof OpenSSL related to the verification of X.509 certificate chains\nthat include policy constraints.  Attackers may be able to exploit this\nvulnerability by creating a malicious certificate chain that triggers\nexponential use of computational resources, leading to a denial-of-service\n(DoS) attack on affected systems.\n\nPolicy processing is disabled by default but can be enabled by passing\nthe `-policy' argument to the command line utilities or by calling the\n`X509_VERIFY_PARAM_set1_policies()' function.",
-              'diffID':        'sha256:4f4ce317c6bbf55719e49973d32d33ba456d7cb08693a6d6fb372690eacee23b',
-              'fixedVersions': [
-                '1.1.1t-r2'
-              ],
-              'installedVersion': '1.1.1n-r0',
-              'packageName':      'libssl1.1',
-              'purl':             'pkg:apk/alpine/libssl1.1@1.1.1n-r0?arch=aarch64&distro=3.15.4',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2023:3722',
-                'https://access.redhat.com/security/cve/CVE-2023-0464',
-                'https://bugzilla.redhat.com/2181082',
-                'https://bugzilla.redhat.com/2182561',
-                'https://bugzilla.redhat.com/2182565',
-                'https://bugzilla.redhat.com/2188461',
-                'https://bugzilla.redhat.com/2207947',
-                'https://errata.almalinux.org/9/ALSA-2023-3722.html',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=2017771e2db3e2b96f89bbe8766c3209f6a99545',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=2dcd4f1e3115f38cefa43e3efbe9b801c27e642e',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=879f7080d7e141f415c79eaa3a8ac4a3dad0348b',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=959c59c7a0164117e7f8366466a32bb1f8d77ff1',
-                'https://linux.oracle.com/cve/CVE-2023-0464.html',
-                'https://linux.oracle.com/errata/ELSA-2023-3722.html',
-                'https://lists.debian.org/debian-lts-announce/2023/06/msg00011.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-0464',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://security.netapp.com/advisory/ntap-20230406-0006/',
-                'https://security.netapp.com/advisory/ntap-20240621-0006/',
-                'https://ubuntu.com/security/notices/USN-6039-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.couchbase.com/alerts/',
-                'https://www.cve.org/CVERecord?id=CVE-2023-0464',
-                'https://www.debian.org/security/2023/dsa-5417',
-                'https://www.openssl.org/news/secadv/20230322.txt'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: Denial of service by excessive resource usage in verifying X509 policy constraints'
-            },
-            {
-              'cve':  'CVE-2022-2097',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N'
-                },
-                'nvd': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N'
-                },
-                'redhat': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-327'
-              ],
-              'description':   "AES OCB mode for 32-bit x86 platforms using the AES-NI assembly optimised implementation will not encrypt the entirety of the data under some circumstances. This could reveal sixteen bytes of data that was preexisting in the memory that wasn't written. In the special case of \"in place\" encryption, sixteen bytes of the plaintext would be revealed. Since OpenSSL does not support OCB based cipher suites for TLS and DTLS, they are both unaffected. Fixed in OpenSSL 3.0.5 (Affected 3.0.0-3.0.4). Fixed in OpenSSL 1.1.1q (Affected 1.1.1-1.1.1p).",
-              'diffID':        'sha256:4f4ce317c6bbf55719e49973d32d33ba456d7cb08693a6d6fb372690eacee23b',
-              'fixedVersions': [
-                '1.1.1q-r0'
-              ],
-              'installedVersion': '1.1.1n-r0',
-              'packageName':      'libssl1.1',
-              'purl':             'pkg:apk/alpine/libssl1.1@1.1.1n-r0?arch=aarch64&distro=3.15.4',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2022:6224',
-                'https://access.redhat.com/security/cve/CVE-2022-2097',
-                'https://bugzilla.redhat.com/2081494',
-                'https://bugzilla.redhat.com/2087911',
-                'https://bugzilla.redhat.com/2087913',
-                'https://bugzilla.redhat.com/2097310',
-                'https://bugzilla.redhat.com/2104905',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2081494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2097310',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2100554',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2104905',
-                'https://cert-portal.siemens.com/productcert/pdf/ssa-332410.pdf',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-1292',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-2068',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-2097',
-                'https://errata.almalinux.org/9/ALSA-2022-6224.html',
-                'https://errata.rockylinux.org/RLSA-2022:5818',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=919925673d6c9cfed3c1085497f5dfbbed5fc431',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=a98f339ddd7e8f487d6e0088d4a9a42324885a93',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=919925673d6c9cfed3c1085497f5dfbbed5fc431',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=a98f339ddd7e8f487d6e0088d4a9a42324885a93',
-                'https://github.com/alexcrichton/openssl-src-rs',
-                'https://linux.oracle.com/cve/CVE-2022-2097.html',
-                'https://linux.oracle.com/errata/ELSA-2022-9955.html',
-                'https://lists.debian.org/debian-lts-announce/2023/02/msg00019.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/R6CK57NBQFTPUMXAPJURCGXUYT76NQAK',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/R6CK57NBQFTPUMXAPJURCGXUYT76NQAK/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/V6567JERRHHJW2GNGJGKDRNHR7SNPZK7',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/V6567JERRHHJW2GNGJGKDRNHR7SNPZK7/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VCMNWKERPBKOEBNL7CLTTX3ZZCZLH7XA',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VCMNWKERPBKOEBNL7CLTTX3ZZCZLH7XA/',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/R6CK57NBQFTPUMXAPJURCGXUYT76NQAK',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/R6CK57NBQFTPUMXAPJURCGXUYT76NQAK/',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/V6567JERRHHJW2GNGJGKDRNHR7SNPZK7',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/V6567JERRHHJW2GNGJGKDRNHR7SNPZK7/',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/VCMNWKERPBKOEBNL7CLTTX3ZZCZLH7XA',
-                'https://nvd.nist.gov/vuln/detail/CVE-2022-2097',
-                'https://rustsec.org/advisories/RUSTSEC-2022-0032.html',
-                'https://security.gentoo.org/glsa/202210-02',
-                'https://security.netapp.com/advisory/ntap-20220715-0011',
-                'https://security.netapp.com/advisory/ntap-20220715-0011/',
-                'https://security.netapp.com/advisory/ntap-20230420-0008',
-                'https://security.netapp.com/advisory/ntap-20230420-0008/',
-                'https://security.netapp.com/advisory/ntap-20240621-0006',
-                'https://security.netapp.com/advisory/ntap-20240621-0006/',
-                'https://ubuntu.com/security/notices/USN-5502-1',
-                'https://ubuntu.com/security/notices/USN-6457-1',
-                'https://www.cve.org/CVERecord?id=CVE-2022-2097',
-                'https://www.debian.org/security/2023/dsa-5343',
-                'https://www.openssl.org/news/secadv/20220705.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: AES OCB fails to encrypt some bytes'
-            },
-            {
-              'cve':  'CVE-2022-4304',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N'
-                },
-                'nvd': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N'
-                },
-                'redhat': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-203'
-              ],
-              'description':   'A timing based side channel exists in the OpenSSL RSA Decryption implementation\nwhich could be sufficient to recover a plaintext across a network in a\nBleichenbacher style attack. To achieve a successful decryption an attacker\nwould have to be able to send a very large number of trial messages for\ndecryption. The vulnerability affects all RSA padding modes: PKCS#1 v1.5,\nRSA-OEAP and RSASVE.\n\nFor example, in a TLS connection, RSA is commonly used by a client to send an\nencrypted pre-master secret to the server. An attacker that had observed a\ngenuine connection between a client and a server could use this flaw to send\ntrial messages to the server and record the time taken to process them. After a\nsufficiently large number of messages the attacker could recover the pre-master\nsecret used for the original connection and thus be able to decrypt the\napplication data sent over that connection.',
-              'diffID':        'sha256:4f4ce317c6bbf55719e49973d32d33ba456d7cb08693a6d6fb372690eacee23b',
-              'fixedVersions': [
-                '1.1.1t-r0'
-              ],
-              'installedVersion': '1.1.1n-r0',
-              'packageName':      'libssl1.1',
-              'purl':             'pkg:apk/alpine/libssl1.1@1.1.1n-r0?arch=aarch64&distro=3.15.4',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2023:2165',
-                'https://access.redhat.com/security/cve/CVE-2022-4304',
-                'https://bugzilla.redhat.com/1960321',
-                'https://bugzilla.redhat.com/2164440',
-                'https://bugzilla.redhat.com/2164487',
-                'https://bugzilla.redhat.com/2164492',
-                'https://bugzilla.redhat.com/2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144000',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144003',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144006',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144008',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144010',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144012',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144015',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144017',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144019',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2145170',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2158412',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164440',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164487',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164488',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164492',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164497',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164499',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164500',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4203',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4304',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4450',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0215',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0216',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0217',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0286',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0401',
-                'https://errata.almalinux.org/9/ALSA-2023-2165.html',
-                'https://errata.rockylinux.org/RLSA-2023:0946',
-                'https://linux.oracle.com/cve/CVE-2022-4304.html',
-                'https://linux.oracle.com/errata/ELSA-2023-32791.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2022-4304',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0003',
-                'https://rustsec.org/advisories/RUSTSEC-2023-0007.html',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://ubuntu.com/security/notices/USN-5844-1',
-                'https://ubuntu.com/security/notices/USN-6564-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2022-4304',
-                'https://www.openssl.org/news/secadv/20230207.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: timing attack in RSA Decryption implementation'
-            },
-            {
-              'cve':  'CVE-2023-0465',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N'
-                },
-                'redhat': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-295'
-              ],
-              'description':   "Applications that use a non-default option when verifying certificates may be\nvulnerable to an attack from a malicious CA to circumvent certain checks.\n\nInvalid certificate policies in leaf certificates are silently ignored by\nOpenSSL and other certificate policy checks are skipped for that certificate.\nA malicious CA could use this to deliberately assert invalid certificate policies\nin order to circumvent policy checking on the certificate altogether.\n\nPolicy processing is disabled by default but can be enabled by passing\nthe `-policy' argument to the command line utilities or by calling the\n`X509_VERIFY_PARAM_set1_policies()' function.",
-              'diffID':        'sha256:4f4ce317c6bbf55719e49973d32d33ba456d7cb08693a6d6fb372690eacee23b',
-              'fixedVersions': [
-                '1.1.1t-r2'
-              ],
-              'installedVersion': '1.1.1n-r0',
-              'packageName':      'libssl1.1',
-              'purl':             'pkg:apk/alpine/libssl1.1@1.1.1n-r0?arch=aarch64&distro=3.15.4',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2023:3722',
-                'https://access.redhat.com/security/cve/CVE-2023-0465',
-                'https://bugzilla.redhat.com/2181082',
-                'https://bugzilla.redhat.com/2182561',
-                'https://bugzilla.redhat.com/2182565',
-                'https://bugzilla.redhat.com/2188461',
-                'https://bugzilla.redhat.com/2207947',
-                'https://errata.almalinux.org/9/ALSA-2023-3722.html',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=10325176f3d3e98c6e2b3bf5ab1e3b334de6947a',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=1dd43e0709fece299b15208f36cc7c76209ba0bb',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=b013765abfa80036dc779dd0e50602c57bb3bf95',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=facfb1ab745646e97a1920977ae4a9965ea61d5c',
-                'https://linux.oracle.com/cve/CVE-2023-0465.html',
-                'https://linux.oracle.com/errata/ELSA-2023-3722.html',
-                'https://lists.debian.org/debian-lts-announce/2023/06/msg00011.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-0465',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://security.netapp.com/advisory/ntap-20230414-0001/',
-                'https://ubuntu.com/security/notices/USN-6039-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-0465',
-                'https://www.debian.org/security/2023/dsa-5417',
-                'https://www.openssl.org/news/secadv/20230328.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: Invalid certificate policies in leaf certificates are silently ignored'
-            },
-            {
-              'cve':  'CVE-2023-2650',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '6.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-770'
-              ],
-              'description':   "Issue summary: Processing some specially crafted ASN.1 object identifiers or\ndata containing them may be very slow.\n\nImpact summary: Applications that use OBJ_obj2txt() directly, or use any of\nthe OpenSSL subsystems OCSP, PKCS7/SMIME, CMS, CMP/CRMF or TS with no message\nsize limit may experience notable to very long delays when processing those\nmessages, which may lead to a Denial of Service.\n\nAn OBJECT IDENTIFIER is composed of a series of numbers - sub-identifiers -\nmost of which have no size limit.  OBJ_obj2txt() may be used to translate\nan ASN.1 OBJECT IDENTIFIER given in DER encoding form (using the OpenSSL\ntype ASN1_OBJECT) to its canonical numeric text form, which are the\nsub-identifiers of the OBJECT IDENTIFIER in decimal form, separated by\nperiods.\n\nWhen one of the sub-identifiers in the OBJECT IDENTIFIER is very large\n(these are sizes that are seen as absurdly large, taking up tens or hundreds\nof KiBs), the translation to a decimal number in text may take a very long\ntime.  The time complexity is O(n^2) with 'n' being the size of the\nsub-identifiers in bytes (*).\n\nWith OpenSSL 3.0, support to fetch cryptographic algorithms using names /\nidentifiers in string form was introduced.  This includes using OBJECT\nIDENTIFIERs in canonical numeric text form as identifiers for fetching\nalgorithms.\n\nSuch OBJECT IDENTIFIERs may be received through the ASN.1 structure\nAlgorithmIdentifier, which is commonly used in multiple protocols to specify\nwhat cryptographic algorithm should be used to sign or verify, encrypt or\ndecrypt, or digest passed data.\n\nApplications that call OBJ_obj2txt() directly with untrusted data are\naffected, with any version of OpenSSL.  If the use is for the mere purpose\nof display, the severity is considered low.\n\nIn OpenSSL 3.0 and newer, this affects the subsystems OCSP, PKCS7/SMIME,\nCMS, CMP/CRMF or TS.  It also impacts anything that processes X.509\ncertificates, including simple things like verifying its signature.\n\nThe impact on TLS is relatively low, because all versions of OpenSSL have a\n100KiB limit on the peer's certificate chain.  Additionally, this only\nimpacts clients, or servers that have explicitly enabled client\nauthentication.\n\nIn OpenSSL 1.1.1 and 1.0.2, this only affects displaying diverse objects,\nsuch as X.509 certificates.  This is assumed to not happen in such a way\nthat it would cause a Denial of Service, so these versions are considered\nnot affected by this issue in such a way that it would be cause for concern,\nand the severity is therefore considered low.",
-              'diffID':        'sha256:4f4ce317c6bbf55719e49973d32d33ba456d7cb08693a6d6fb372690eacee23b',
-              'fixedVersions': [
-                '1.1.1u-r0'
-              ],
-              'installedVersion': '1.1.1n-r0',
-              'packageName':      'libssl1.1',
-              'purl':             'pkg:apk/alpine/libssl1.1@1.1.1n-r0?arch=aarch64&distro=3.15.4',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2023/05/30/1',
-                'https://access.redhat.com/errata/RHSA-2023:6330',
-                'https://access.redhat.com/security/cve/CVE-2023-2650',
-                'https://bugzilla.redhat.com/1858038',
-                'https://bugzilla.redhat.com/2207947',
-                'https://errata.almalinux.org/9/ALSA-2023-6330.html',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=423a2bc737a908ad0c77bda470b2b59dc879936b',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=853c5e56ee0b8650c73140816bb8b91d6163422c',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=9e209944b35cf82368071f160a744b6178f9b098',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=db779b0e10b047f2585615e0b8f2acdf21f8544a',
-                'https://linux.oracle.com/cve/CVE-2023-2650.html',
-                'https://linux.oracle.com/errata/ELSA-2023-6330.html',
-                'https://lists.debian.org/debian-lts-announce/2023/06/msg00011.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-2650',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0009',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://security.netapp.com/advisory/ntap-20230703-0001/',
-                'https://security.netapp.com/advisory/ntap-20231027-0009/',
-                'https://ubuntu.com/security/notices/USN-6119-1',
-                'https://ubuntu.com/security/notices/USN-6188-1',
-                'https://ubuntu.com/security/notices/USN-6672-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-2650',
-                'https://www.debian.org/security/2023/dsa-5417',
-                'https://www.openssl.org/news/secadv/20230530.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: Possible DoS translating ASN.1 object identifiers'
-            },
-            {
-              'cve':  'CVE-2023-3446',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L'
-                },
-                'redhat': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L'
-                }
-              },
-              'cwes': [
-                'CWE-606',
-                'CWE-1333'
-              ],
-              'description':   "Issue summary: Checking excessively long DH keys or parameters may be very slow.\n\nImpact summary: Applications that use the functions DH_check(), DH_check_ex()\nor EVP_PKEY_param_check() to check a DH key or DH parameters may experience long\ndelays. Where the key or parameters that are being checked have been obtained\nfrom an untrusted source this may lead to a Denial of Service.\n\nThe function DH_check() performs various checks on DH parameters. One of those\nchecks confirms that the modulus ('p' parameter) is not too large. Trying to use\na very large modulus is slow and OpenSSL will not normally use a modulus which\nis over 10,000 bits in length.\n\nHowever the DH_check() function checks numerous aspects of the key or parameters\nthat have been supplied. Some of those checks use the supplied modulus value\neven if it has already been found to be too large.\n\nAn application that calls DH_check() and supplies a key or parameters obtained\nfrom an untrusted source could be vulernable to a Denial of Service attack.\n\nThe function DH_check() is itself called by a number of other OpenSSL functions.\nAn application calling any of those other functions may similarly be affected.\nThe other functions affected by this are DH_check_ex() and\nEVP_PKEY_param_check().\n\nAlso vulnerable are the OpenSSL dhparam and pkeyparam command line applications\nwhen using the '-check' option.\n\nThe OpenSSL SSL/TLS implementation is not affected by this issue.\nThe OpenSSL 3.0 and 3.1 FIPS providers are not affected by this issue.",
-              'diffID':        'sha256:4f4ce317c6bbf55719e49973d32d33ba456d7cb08693a6d6fb372690eacee23b',
-              'fixedVersions': [
-                '1.1.1u-r2'
-              ],
-              'installedVersion': '1.1.1n-r0',
-              'packageName':      'libssl1.1',
-              'purl':             'pkg:apk/alpine/libssl1.1@1.1.1n-r0?arch=aarch64&distro=3.15.4',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2023/07/19/4',
-                'http://www.openwall.com/lists/oss-security/2023/07/19/5',
-                'http://www.openwall.com/lists/oss-security/2023/07/19/6',
-                'http://www.openwall.com/lists/oss-security/2023/07/31/1',
-                'http://www.openwall.com/lists/oss-security/2024/05/16/1',
-                'https://access.redhat.com/errata/RHSA-2024:2447',
-                'https://access.redhat.com/security/cve/CVE-2023-3446',
-                'https://bugzilla.redhat.com/2223016',
-                'https://bugzilla.redhat.com/2224962',
-                'https://bugzilla.redhat.com/2227852',
-                'https://bugzilla.redhat.com/2248616',
-                'https://bugzilla.redhat.com/2257571',
-                'https://bugzilla.redhat.com/2258502',
-                'https://bugzilla.redhat.com/2259944',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2224962',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2257582',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2257583',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2258677',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2258688',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2258691',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2258694',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2258700',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-36763',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-36764',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3446',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45229',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45231',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45232',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45233',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45235',
-                'https://errata.almalinux.org/9/ALSA-2024-2447.html',
-                'https://errata.rockylinux.org/RLSA-2024:2264',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=1fa20cf2f506113c761777127a38bce5068740eb',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=8780a896543a654e757db1b9396383f9d8095528',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=9a0a4d3c1e7138915563c0df4fe6a3f9377b839c',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=fc9867c1e03c22ebf56943be205202e576aabf23',
-                'https://linux.oracle.com/cve/CVE-2023-3446.html',
-                'https://linux.oracle.com/errata/ELSA-2024-2447.html',
-                'https://lists.debian.org/debian-lts-announce/2023/08/msg00019.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-3446',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://security.netapp.com/advisory/ntap-20230803-0011/',
-                'https://ubuntu.com/security/notices/USN-6435-1',
-                'https://ubuntu.com/security/notices/USN-6435-2',
-                'https://ubuntu.com/security/notices/USN-6450-1',
-                'https://ubuntu.com/security/notices/USN-6709-1',
-                'https://ubuntu.com/security/notices/USN-7018-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-3446',
-                'https://www.openssl.org/news/secadv/20230719.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: Excessive time spent checking DH keys and parameters'
-            },
-            {
-              'cve':  'CVE-2023-3817',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L'
-                },
-                'redhat': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L'
-                }
-              },
-              'cwes': [
-                'CWE-606',
-                'CWE-834'
-              ],
-              'description':   'Issue summary: Checking excessively long DH keys or parameters may be very slow.\n\nImpact summary: Applications that use the functions DH_check(), DH_check_ex()\nor EVP_PKEY_param_check() to check a DH key or DH parameters may experience long\ndelays. Where the key or parameters that are being checked have been obtained\nfrom an untrusted source this may lead to a Denial of Service.\n\nThe function DH_check() performs various checks on DH parameters. After fixing\nCVE-2023-3446 it was discovered that a large q parameter value can also trigger\nan overly long computation during some of these checks. A correct q value,\nif present, cannot be larger than the modulus p parameter, thus it is\nunnecessary to perform these checks if q is larger than p.\n\nAn application that calls DH_check() and supplies a key or parameters obtained\nfrom an untrusted source could be vulnerable to a Denial of Service attack.\n\nThe function DH_check() is itself called by a number of other OpenSSL functions.\nAn application calling any of those other functions may similarly be affected.\nThe other functions affected by this are DH_check_ex() and\nEVP_PKEY_param_check().\n\nAlso vulnerable are the OpenSSL dhparam and pkeyparam command line applications\nwhen using the "-check" option.\n\nThe OpenSSL SSL/TLS implementation is not affected by this issue.\n\nThe OpenSSL 3.0 and 3.1 FIPS providers are not affected by this issue.',
-              'diffID':        'sha256:4f4ce317c6bbf55719e49973d32d33ba456d7cb08693a6d6fb372690eacee23b',
-              'fixedVersions': [
-                '1.1.1v-r0'
-              ],
-              'installedVersion': '1.1.1n-r0',
-              'packageName':      'libssl1.1',
-              'purl':             'pkg:apk/alpine/libssl1.1@1.1.1n-r0?arch=aarch64&distro=3.15.4',
-              'references':       [
-                'http://seclists.org/fulldisclosure/2023/Jul/43',
-                'http://www.openwall.com/lists/oss-security/2023/07/31/1',
-                'http://www.openwall.com/lists/oss-security/2023/09/22/11',
-                'http://www.openwall.com/lists/oss-security/2023/09/22/9',
-                'http://www.openwall.com/lists/oss-security/2023/11/06/2',
-                'https://access.redhat.com/errata/RHSA-2024:2447',
-                'https://access.redhat.com/security/cve/CVE-2023-3817',
-                'https://bugzilla.redhat.com/2223016',
-                'https://bugzilla.redhat.com/2224962',
-                'https://bugzilla.redhat.com/2227852',
-                'https://bugzilla.redhat.com/2248616',
-                'https://bugzilla.redhat.com/2257571',
-                'https://bugzilla.redhat.com/2258502',
-                'https://bugzilla.redhat.com/2259944',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2224962',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2227852',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2248616',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2270358',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3446',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3817',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-5678',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-2408',
-                'https://errata.almalinux.org/9/ALSA-2024-2447.html',
-                'https://errata.rockylinux.org/RLSA-2023:7877',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=6a1eb62c29db6cb5eec707f9338aee00f44e26f5',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=869ad69aadd985c7b8ca6f4e5dd0eb274c9f3644',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=9002fd07327a91f35ba6c1307e71fa6fd4409b7f',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=91ddeba0f2269b017dc06c46c993a788974b1aa5',
-                'https://linux.oracle.com/cve/CVE-2023-3817.html',
-                'https://linux.oracle.com/errata/ELSA-2024-2447.html',
-                'https://lists.debian.org/debian-lts-announce/2023/08/msg00019.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-3817',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://security.netapp.com/advisory/ntap-20230818-0014/',
-                'https://security.netapp.com/advisory/ntap-20231027-0008/',
-                'https://security.netapp.com/advisory/ntap-20240621-0006/',
-                'https://ubuntu.com/security/notices/USN-6435-1',
-                'https://ubuntu.com/security/notices/USN-6435-2',
-                'https://ubuntu.com/security/notices/USN-6450-1',
-                'https://ubuntu.com/security/notices/USN-6709-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-3817',
-                'https://www.openssl.org/news/secadv/20230731.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'OpenSSL: Excessive time spent checking DH q parameter value'
-            },
-            {
-              'cve':  'CVE-2023-5678',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L'
-                },
-                'redhat': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L'
-                }
-              },
-              'cwes': [
-                'CWE-606',
-                'CWE-754'
-              ],
-              'description':   "Issue summary: Generating excessively long X9.42 DH keys or checking\nexcessively long X9.42 DH keys or parameters may be very slow.\n\nImpact summary: Applications that use the functions DH_generate_key() to\ngenerate an X9.42 DH key may experience long delays.  Likewise, applications\nthat use DH_check_pub_key(), DH_check_pub_key_ex() or EVP_PKEY_public_check()\nto check an X9.42 DH key or X9.42 DH parameters may experience long delays.\nWhere the key or parameters that are being checked have been obtained from\nan untrusted source this may lead to a Denial of Service.\n\nWhile DH_check() performs all the necessary checks (as of CVE-2023-3817),\nDH_check_pub_key() doesn't make any of these checks, and is therefore\nvulnerable for excessively large P and Q parameters.\n\nLikewise, while DH_generate_key() performs a check for an excessively large\nP, it doesn't check for an excessively large Q.\n\nAn application that calls DH_generate_key() or DH_check_pub_key() and\nsupplies a key or parameters obtained from an untrusted source could be\nvulnerable to a Denial of Service attack.\n\nDH_generate_key() and DH_check_pub_key() are also called by a number of\nother OpenSSL functions.  An application calling any of those other\nfunctions may similarly be affected.  The other functions affected by this\nare DH_check_pub_key_ex(), EVP_PKEY_public_check(), and EVP_PKEY_generate().\n\nAlso vulnerable are the OpenSSL pkey command line application when using the\n\"-pubcheck\" option, as well as the OpenSSL genpkey command line application.\n\nThe OpenSSL SSL/TLS implementation is not affected by this issue.\n\nThe OpenSSL 3.0 and 3.1 FIPS providers are not affected by this issue.",
-              'diffID':        'sha256:4f4ce317c6bbf55719e49973d32d33ba456d7cb08693a6d6fb372690eacee23b',
-              'fixedVersions': [
-                '1.1.1w-r1'
-              ],
-              'installedVersion': '1.1.1n-r0',
-              'packageName':      'libssl1.1',
-              'purl':             'pkg:apk/alpine/libssl1.1@1.1.1n-r0?arch=aarch64&distro=3.15.4',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2024/03/11/1',
-                'https://access.redhat.com/errata/RHSA-2024:2447',
-                'https://access.redhat.com/security/cve/CVE-2023-5678',
-                'https://bugzilla.redhat.com/2223016',
-                'https://bugzilla.redhat.com/2224962',
-                'https://bugzilla.redhat.com/2227852',
-                'https://bugzilla.redhat.com/2248616',
-                'https://bugzilla.redhat.com/2257571',
-                'https://bugzilla.redhat.com/2258502',
-                'https://bugzilla.redhat.com/2259944',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2224962',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2227852',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2248616',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2270358',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3446',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3817',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-5678',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-2408',
-                'https://errata.almalinux.org/9/ALSA-2024-2447.html',
-                'https://errata.rockylinux.org/RLSA-2023:7877',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=34efaef6c103d636ab507a0cc34dca4d3aecc055',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=710fee740904b6290fef0dd5536fbcedbc38ff0c',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=db925ae2e65d0d925adef429afc37f75bd1c2017',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=ddeb4b6c6d527e54ce9a99cba785c0f7776e54b6',
-                'https://linux.oracle.com/cve/CVE-2023-5678.html',
-                'https://linux.oracle.com/errata/ELSA-2024-2447.html',
-                'https://lists.debian.org/debian-lts-announce/2024/10/msg00033.html',
-                'https://lists.debian.org/debian-lts-announce/2024/11/msg00000.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-5678',
-                'https://security.netapp.com/advisory/ntap-20231130-0010/',
-                'https://ubuntu.com/security/notices/USN-6622-1',
-                'https://ubuntu.com/security/notices/USN-6632-1',
-                'https://ubuntu.com/security/notices/USN-6709-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-5678',
-                'https://www.openssl.org/news/secadv/20231106.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: Generating excessively long X9.42 DH keys or checking excessively long X9.42 DH keys or parameters may be very slow'
-            },
-            {
-              'cve':  'CVE-2022-37434',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '9.8',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-787',
-                'CWE-120'
-              ],
-              'description':   'zlib through 1.2.12 has a heap-based buffer over-read or buffer overflow in inflate in inflate.c via a large gzip header extra field. NOTE: only applications that call inflateGetHeader are affected. Some common applications bundle the affected zlib source code but may be unable to call inflateGetHeader (e.g., see the nodejs/node reference).',
-              'diffID':        'sha256:4f4ce317c6bbf55719e49973d32d33ba456d7cb08693a6d6fb372690eacee23b',
-              'fixedVersions': [
-                '1.2.12-r2'
-              ],
-              'installedVersion': '1.2.12-r0',
-              'packageName':      'zlib',
-              'purl':             'pkg:apk/alpine/zlib@1.2.12-r0?arch=aarch64&distro=3.15.4',
-              'references':       [
-                'http://seclists.org/fulldisclosure/2022/Oct/37',
-                'http://seclists.org/fulldisclosure/2022/Oct/38',
-                'http://seclists.org/fulldisclosure/2022/Oct/41',
-                'http://seclists.org/fulldisclosure/2022/Oct/42',
-                'http://www.openwall.com/lists/oss-security/2022/08/05/2',
-                'http://www.openwall.com/lists/oss-security/2022/08/09/1',
-                'https://access.redhat.com/errata/RHSA-2022:8291',
-                'https://access.redhat.com/security/cve/CVE-2022-37434',
-                'https://bugzilla.redhat.com/2116639',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2053198',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2077431',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2081296',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2116639',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-37434',
-                'https://errata.almalinux.org/9/ALSA-2022-8291.html',
-                'https://errata.rockylinux.org/RLSA-2022:8291',
-                'https://github.com/curl/curl/issues/9271',
-                'https://github.com/ivd38/zlib_overflow',
-                'https://github.com/madler/zlib/blob/21767c654d31d2dccdde4330529775c6c5fd5389/zlib.h#L1062-L1063',
-                'https://github.com/madler/zlib/commit/1eb7682f845ac9e9bf9ae35bbfb3bad5dacbd91d',
-                'https://github.com/madler/zlib/commit/eff308af425b67093bab25f80f1ae950166bece1',
-                'https://github.com/nodejs/node/blob/75b68c6e4db515f76df73af476eccf382bbcb00a/deps/zlib/inflate.c#L762-L764',
-                'https://linux.oracle.com/cve/CVE-2022-37434.html',
-                'https://linux.oracle.com/errata/ELSA-2023-1095.html',
-                'https://lists.debian.org/debian-lts-announce/2022/09/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JWN4VE3JQR4O2SOUS5TXNLANRPMHWV4I/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NMBOJ77A7T7PQCARMDUK75TE6LLESZ3O/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PAVPQNCG3XRLCLNSQRM3KAN5ZFMVXVTY/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/X5U7OTKZSHY2I3ZFJSR2SHFHW72RKGDK/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YRQAI7H4M4RQZ2IWZUEEXECBE5D56BH2/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2022-37434',
-                'https://security.netapp.com/advisory/ntap-20220901-0005/',
-                'https://security.netapp.com/advisory/ntap-20230427-0007/',
-                'https://support.apple.com/kb/HT213488',
-                'https://support.apple.com/kb/HT213489',
-                'https://support.apple.com/kb/HT213490',
-                'https://support.apple.com/kb/HT213491',
-                'https://support.apple.com/kb/HT213493',
-                'https://support.apple.com/kb/HT213494',
-                'https://ubuntu.com/security/notices/USN-5570-1',
-                'https://ubuntu.com/security/notices/USN-5570-2',
-                'https://ubuntu.com/security/notices/USN-5573-1',
-                'https://ubuntu.com/security/notices/USN-6736-1',
-                'https://ubuntu.com/security/notices/USN-6736-2',
-                'https://www.cve.org/CVERecord?id=CVE-2022-37434',
-                'https://www.debian.org/security/2022/dsa-5218'
-              ],
-              'severity':   'CRITICAL',
-              'suppressed': false,
-              'title':      'zlib: heap-based buffer over-read and overflow in inflate() in inflate.c via a large gzip header extra field'
-            }
-          ]
-        }
-      ],
-      'summary': {
-        'critical':   1,
-        'high':       8,
-        'low':        0,
-        'medium':     14,
-        'suppressed': 0,
-        'unknown':    0
-      }
-    }
-  },
-  {
-    'id':    'default/2b6e856efea7d0b08d860475b0e9e05e7929e610583f38f1ba9175c0615856ed',
-    'type':  'storage.sbomscanner.kubewarden.io.vulnerabilityreport',
-    'links': {
-      'patch':  'https://localhost:8005/v1/storage.sbomscanner.kubewarden.io.vulnerabilityreports/default/2b6e856efea7d0b08d860475b0e9e05e7929e610583f38f1ba9175c0615856ed',
-      'remove': 'https://localhost:8005/v1/storage.sbomscanner.kubewarden.io.vulnerabilityreports/default/2b6e856efea7d0b08d860475b0e9e05e7929e610583f38f1ba9175c0615856ed',
-      'self':   'https://localhost:8005/v1/storage.sbomscanner.kubewarden.io.vulnerabilityreports/default/2b6e856efea7d0b08d860475b0e9e05e7929e610583f38f1ba9175c0615856ed',
-      'update': 'https://localhost:8005/v1/storage.sbomscanner.kubewarden.io.vulnerabilityreports/default/2b6e856efea7d0b08d860475b0e9e05e7929e610583f38f1ba9175c0615856ed',
-      'view':   'https://localhost:8005/apis/storage.sbomscanner.kubewarden.io/v1alpha1/namespaces/default/vulnerabilityreports/2b6e856efea7d0b08d860475b0e9e05e7929e610583f38f1ba9175c0615856ed'
-    },
-    'apiVersion':    'storage.sbomscanner.kubewarden.io/v1alpha1',
-    'imageMetadata': {
-      'digest':      'sha256:578b5aa9762dc76d03b6d6489c66821b7ccd1047abd51f37e6475786d0dba3ee',
-      'platform':    'linux/amd64',
-      'registry':    'demo-02',
-      'registryURI': 'ghcr.io',
-      'repository':  'linuxcontainers/alpine',
-      'tag':         '3.15.7'
-    },
-    'kind':     'VulnerabilityReport',
-    'metadata': {
-      'creationTimestamp': '2026-01-09T22:46:23Z',
-      'fields':            [
-        '2b6e856efea7d0b08d860475b0e9e05e7929e610583f38f1ba9175c0615856ed',
-        'ghcr.io/linuxcontainers/alpine:3.15.7',
-        'linux/amd64',
-        '12 (0 suppressed)'
-      ],
-      'labels': {
-        'app.kubernetes.io/managed-by':          'sbomscanner',
-        'app.kubernetes.io/part-of':             'sbomscanner',
-        'sbomscanner.kubewarden.io/scanjob-uid': '42184d01-4b15-466f-98aa-e802d1b6b6b8'
-      },
-      'name':            '2b6e856efea7d0b08d860475b0e9e05e7929e610583f38f1ba9175c0615856ed',
-      'namespace':       'default',
-      'ownerReferences': [
-        {
-          'apiVersion':         'storage.sbomscanner.kubewarden.io/v1alpha1',
-          'blockOwnerDeletion': true,
-          'controller':         true,
-          'kind':               'SBOM',
-          'name':               '2b6e856efea7d0b08d860475b0e9e05e7929e610583f38f1ba9175c0615856ed',
-          'uid':                '2eb46890-5815-48c0-a44c-afebc575baad'
-        }
-      ],
-      'relationships': [
-        {
-          'fromId':   'default/2b6e856efea7d0b08d860475b0e9e05e7929e610583f38f1ba9175c0615856ed',
-          'fromType': 'storage.sbomscanner.kubewarden.io.sbom',
-          'rel':      'owner',
-          'state':    'active',
-          'message':  'Resource is current'
-        }
-      ],
-      'resourceVersion': '6',
-      'state':           {
-        'error':         false,
-        'message':       'Resource is current',
-        'name':          'active',
-        'transitioning': false
-      },
-      'uid': 'cff045ff-be9f-4d60-b058-cda2a98897ad'
-    },
-    'report': {
-      'results': [
-        {
-          'class':           'os-pkgs',
-          'target':          '/var/run/worker/trivy.sbom.3588458318.json (alpine 3.15.7)',
-          'type':            'alpine',
-          'vulnerabilities': [
-            {
-              'cve':  'CVE-2023-0464',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-295'
-              ],
-              'description':   "A security vulnerability has been identified in all supported versions\n\nof OpenSSL related to the verification of X.509 certificate chains\nthat include policy constraints.  Attackers may be able to exploit this\nvulnerability by creating a malicious certificate chain that triggers\nexponential use of computational resources, leading to a denial-of-service\n(DoS) attack on affected systems.\n\nPolicy processing is disabled by default but can be enabled by passing\nthe `-policy' argument to the command line utilities or by calling the\n`X509_VERIFY_PARAM_set1_policies()' function.",
-              'diffID':        'sha256:4e64766527982cca5b986a8d061530bf5c32e111047733b59cb0c9742a89eda0',
-              'fixedVersions': [
-                '1.1.1t-r2'
-              ],
-              'installedVersion': '1.1.1t-r1',
-              'packageName':      'libcrypto1.1',
-              'purl':             'pkg:apk/alpine/libcrypto1.1@1.1.1t-r1?arch=x86_64&distro=3.15.7',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2023:3722',
-                'https://access.redhat.com/security/cve/CVE-2023-0464',
-                'https://bugzilla.redhat.com/2181082',
-                'https://bugzilla.redhat.com/2182561',
-                'https://bugzilla.redhat.com/2182565',
-                'https://bugzilla.redhat.com/2188461',
-                'https://bugzilla.redhat.com/2207947',
-                'https://errata.almalinux.org/9/ALSA-2023-3722.html',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=2017771e2db3e2b96f89bbe8766c3209f6a99545',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=2dcd4f1e3115f38cefa43e3efbe9b801c27e642e',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=879f7080d7e141f415c79eaa3a8ac4a3dad0348b',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=959c59c7a0164117e7f8366466a32bb1f8d77ff1',
-                'https://linux.oracle.com/cve/CVE-2023-0464.html',
-                'https://linux.oracle.com/errata/ELSA-2023-3722.html',
-                'https://lists.debian.org/debian-lts-announce/2023/06/msg00011.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-0464',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://security.netapp.com/advisory/ntap-20230406-0006/',
-                'https://security.netapp.com/advisory/ntap-20240621-0006/',
-                'https://ubuntu.com/security/notices/USN-6039-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.couchbase.com/alerts/',
-                'https://www.cve.org/CVERecord?id=CVE-2023-0464',
-                'https://www.debian.org/security/2023/dsa-5417',
-                'https://www.openssl.org/news/secadv/20230322.txt'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: Denial of service by excessive resource usage in verifying X509 policy constraints'
-            },
-            {
-              'cve':  'CVE-2023-0465',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N'
-                },
-                'redhat': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-295'
-              ],
-              'description':   "Applications that use a non-default option when verifying certificates may be\nvulnerable to an attack from a malicious CA to circumvent certain checks.\n\nInvalid certificate policies in leaf certificates are silently ignored by\nOpenSSL and other certificate policy checks are skipped for that certificate.\nA malicious CA could use this to deliberately assert invalid certificate policies\nin order to circumvent policy checking on the certificate altogether.\n\nPolicy processing is disabled by default but can be enabled by passing\nthe `-policy' argument to the command line utilities or by calling the\n`X509_VERIFY_PARAM_set1_policies()' function.",
-              'diffID':        'sha256:4e64766527982cca5b986a8d061530bf5c32e111047733b59cb0c9742a89eda0',
-              'fixedVersions': [
-                '1.1.1t-r2'
-              ],
-              'installedVersion': '1.1.1t-r1',
-              'packageName':      'libcrypto1.1',
-              'purl':             'pkg:apk/alpine/libcrypto1.1@1.1.1t-r1?arch=x86_64&distro=3.15.7',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2023:3722',
-                'https://access.redhat.com/security/cve/CVE-2023-0465',
-                'https://bugzilla.redhat.com/2181082',
-                'https://bugzilla.redhat.com/2182561',
-                'https://bugzilla.redhat.com/2182565',
-                'https://bugzilla.redhat.com/2188461',
-                'https://bugzilla.redhat.com/2207947',
-                'https://errata.almalinux.org/9/ALSA-2023-3722.html',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=10325176f3d3e98c6e2b3bf5ab1e3b334de6947a',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=1dd43e0709fece299b15208f36cc7c76209ba0bb',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=b013765abfa80036dc779dd0e50602c57bb3bf95',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=facfb1ab745646e97a1920977ae4a9965ea61d5c',
-                'https://linux.oracle.com/cve/CVE-2023-0465.html',
-                'https://linux.oracle.com/errata/ELSA-2023-3722.html',
-                'https://lists.debian.org/debian-lts-announce/2023/06/msg00011.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-0465',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://security.netapp.com/advisory/ntap-20230414-0001/',
-                'https://ubuntu.com/security/notices/USN-6039-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-0465',
-                'https://www.debian.org/security/2023/dsa-5417',
-                'https://www.openssl.org/news/secadv/20230328.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: Invalid certificate policies in leaf certificates are silently ignored'
-            },
-            {
-              'cve':  'CVE-2023-2650',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '6.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-770'
-              ],
-              'description':   "Issue summary: Processing some specially crafted ASN.1 object identifiers or\ndata containing them may be very slow.\n\nImpact summary: Applications that use OBJ_obj2txt() directly, or use any of\nthe OpenSSL subsystems OCSP, PKCS7/SMIME, CMS, CMP/CRMF or TS with no message\nsize limit may experience notable to very long delays when processing those\nmessages, which may lead to a Denial of Service.\n\nAn OBJECT IDENTIFIER is composed of a series of numbers - sub-identifiers -\nmost of which have no size limit.  OBJ_obj2txt() may be used to translate\nan ASN.1 OBJECT IDENTIFIER given in DER encoding form (using the OpenSSL\ntype ASN1_OBJECT) to its canonical numeric text form, which are the\nsub-identifiers of the OBJECT IDENTIFIER in decimal form, separated by\nperiods.\n\nWhen one of the sub-identifiers in the OBJECT IDENTIFIER is very large\n(these are sizes that are seen as absurdly large, taking up tens or hundreds\nof KiBs), the translation to a decimal number in text may take a very long\ntime.  The time complexity is O(n^2) with 'n' being the size of the\nsub-identifiers in bytes (*).\n\nWith OpenSSL 3.0, support to fetch cryptographic algorithms using names /\nidentifiers in string form was introduced.  This includes using OBJECT\nIDENTIFIERs in canonical numeric text form as identifiers for fetching\nalgorithms.\n\nSuch OBJECT IDENTIFIERs may be received through the ASN.1 structure\nAlgorithmIdentifier, which is commonly used in multiple protocols to specify\nwhat cryptographic algorithm should be used to sign or verify, encrypt or\ndecrypt, or digest passed data.\n\nApplications that call OBJ_obj2txt() directly with untrusted data are\naffected, with any version of OpenSSL.  If the use is for the mere purpose\nof display, the severity is considered low.\n\nIn OpenSSL 3.0 and newer, this affects the subsystems OCSP, PKCS7/SMIME,\nCMS, CMP/CRMF or TS.  It also impacts anything that processes X.509\ncertificates, including simple things like verifying its signature.\n\nThe impact on TLS is relatively low, because all versions of OpenSSL have a\n100KiB limit on the peer's certificate chain.  Additionally, this only\nimpacts clients, or servers that have explicitly enabled client\nauthentication.\n\nIn OpenSSL 1.1.1 and 1.0.2, this only affects displaying diverse objects,\nsuch as X.509 certificates.  This is assumed to not happen in such a way\nthat it would cause a Denial of Service, so these versions are considered\nnot affected by this issue in such a way that it would be cause for concern,\nand the severity is therefore considered low.",
-              'diffID':        'sha256:4e64766527982cca5b986a8d061530bf5c32e111047733b59cb0c9742a89eda0',
-              'fixedVersions': [
-                '1.1.1u-r0'
-              ],
-              'installedVersion': '1.1.1t-r1',
-              'packageName':      'libcrypto1.1',
-              'purl':             'pkg:apk/alpine/libcrypto1.1@1.1.1t-r1?arch=x86_64&distro=3.15.7',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2023/05/30/1',
-                'https://access.redhat.com/errata/RHSA-2023:6330',
-                'https://access.redhat.com/security/cve/CVE-2023-2650',
-                'https://bugzilla.redhat.com/1858038',
-                'https://bugzilla.redhat.com/2207947',
-                'https://errata.almalinux.org/9/ALSA-2023-6330.html',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=423a2bc737a908ad0c77bda470b2b59dc879936b',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=853c5e56ee0b8650c73140816bb8b91d6163422c',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=9e209944b35cf82368071f160a744b6178f9b098',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=db779b0e10b047f2585615e0b8f2acdf21f8544a',
-                'https://linux.oracle.com/cve/CVE-2023-2650.html',
-                'https://linux.oracle.com/errata/ELSA-2023-6330.html',
-                'https://lists.debian.org/debian-lts-announce/2023/06/msg00011.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-2650',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0009',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://security.netapp.com/advisory/ntap-20230703-0001/',
-                'https://security.netapp.com/advisory/ntap-20231027-0009/',
-                'https://ubuntu.com/security/notices/USN-6119-1',
-                'https://ubuntu.com/security/notices/USN-6188-1',
-                'https://ubuntu.com/security/notices/USN-6672-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-2650',
-                'https://www.debian.org/security/2023/dsa-5417',
-                'https://www.openssl.org/news/secadv/20230530.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: Possible DoS translating ASN.1 object identifiers'
-            },
-            {
-              'cve':  'CVE-2023-3446',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L'
-                },
-                'redhat': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L'
-                }
-              },
-              'cwes': [
-                'CWE-606',
-                'CWE-1333'
-              ],
-              'description':   "Issue summary: Checking excessively long DH keys or parameters may be very slow.\n\nImpact summary: Applications that use the functions DH_check(), DH_check_ex()\nor EVP_PKEY_param_check() to check a DH key or DH parameters may experience long\ndelays. Where the key or parameters that are being checked have been obtained\nfrom an untrusted source this may lead to a Denial of Service.\n\nThe function DH_check() performs various checks on DH parameters. One of those\nchecks confirms that the modulus ('p' parameter) is not too large. Trying to use\na very large modulus is slow and OpenSSL will not normally use a modulus which\nis over 10,000 bits in length.\n\nHowever the DH_check() function checks numerous aspects of the key or parameters\nthat have been supplied. Some of those checks use the supplied modulus value\neven if it has already been found to be too large.\n\nAn application that calls DH_check() and supplies a key or parameters obtained\nfrom an untrusted source could be vulernable to a Denial of Service attack.\n\nThe function DH_check() is itself called by a number of other OpenSSL functions.\nAn application calling any of those other functions may similarly be affected.\nThe other functions affected by this are DH_check_ex() and\nEVP_PKEY_param_check().\n\nAlso vulnerable are the OpenSSL dhparam and pkeyparam command line applications\nwhen using the '-check' option.\n\nThe OpenSSL SSL/TLS implementation is not affected by this issue.\nThe OpenSSL 3.0 and 3.1 FIPS providers are not affected by this issue.",
-              'diffID':        'sha256:4e64766527982cca5b986a8d061530bf5c32e111047733b59cb0c9742a89eda0',
-              'fixedVersions': [
-                '1.1.1u-r2'
-              ],
-              'installedVersion': '1.1.1t-r1',
-              'packageName':      'libcrypto1.1',
-              'purl':             'pkg:apk/alpine/libcrypto1.1@1.1.1t-r1?arch=x86_64&distro=3.15.7',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2023/07/19/4',
-                'http://www.openwall.com/lists/oss-security/2023/07/19/5',
-                'http://www.openwall.com/lists/oss-security/2023/07/19/6',
-                'http://www.openwall.com/lists/oss-security/2023/07/31/1',
-                'http://www.openwall.com/lists/oss-security/2024/05/16/1',
-                'https://access.redhat.com/errata/RHSA-2024:2447',
-                'https://access.redhat.com/security/cve/CVE-2023-3446',
-                'https://bugzilla.redhat.com/2223016',
-                'https://bugzilla.redhat.com/2224962',
-                'https://bugzilla.redhat.com/2227852',
-                'https://bugzilla.redhat.com/2248616',
-                'https://bugzilla.redhat.com/2257571',
-                'https://bugzilla.redhat.com/2258502',
-                'https://bugzilla.redhat.com/2259944',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2224962',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2257582',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2257583',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2258677',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2258688',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2258691',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2258694',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2258700',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-36763',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-36764',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3446',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45229',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45231',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45232',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45233',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45235',
-                'https://errata.almalinux.org/9/ALSA-2024-2447.html',
-                'https://errata.rockylinux.org/RLSA-2024:2264',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=1fa20cf2f506113c761777127a38bce5068740eb',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=8780a896543a654e757db1b9396383f9d8095528',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=9a0a4d3c1e7138915563c0df4fe6a3f9377b839c',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=fc9867c1e03c22ebf56943be205202e576aabf23',
-                'https://linux.oracle.com/cve/CVE-2023-3446.html',
-                'https://linux.oracle.com/errata/ELSA-2024-2447.html',
-                'https://lists.debian.org/debian-lts-announce/2023/08/msg00019.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-3446',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://security.netapp.com/advisory/ntap-20230803-0011/',
-                'https://ubuntu.com/security/notices/USN-6435-1',
-                'https://ubuntu.com/security/notices/USN-6435-2',
-                'https://ubuntu.com/security/notices/USN-6450-1',
-                'https://ubuntu.com/security/notices/USN-6709-1',
-                'https://ubuntu.com/security/notices/USN-7018-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-3446',
-                'https://www.openssl.org/news/secadv/20230719.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: Excessive time spent checking DH keys and parameters'
-            },
-            {
-              'cve':  'CVE-2023-3817',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L'
-                },
-                'redhat': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L'
-                }
-              },
-              'cwes': [
-                'CWE-606',
-                'CWE-834'
-              ],
-              'description':   'Issue summary: Checking excessively long DH keys or parameters may be very slow.\n\nImpact summary: Applications that use the functions DH_check(), DH_check_ex()\nor EVP_PKEY_param_check() to check a DH key or DH parameters may experience long\ndelays. Where the key or parameters that are being checked have been obtained\nfrom an untrusted source this may lead to a Denial of Service.\n\nThe function DH_check() performs various checks on DH parameters. After fixing\nCVE-2023-3446 it was discovered that a large q parameter value can also trigger\nan overly long computation during some of these checks. A correct q value,\nif present, cannot be larger than the modulus p parameter, thus it is\nunnecessary to perform these checks if q is larger than p.\n\nAn application that calls DH_check() and supplies a key or parameters obtained\nfrom an untrusted source could be vulnerable to a Denial of Service attack.\n\nThe function DH_check() is itself called by a number of other OpenSSL functions.\nAn application calling any of those other functions may similarly be affected.\nThe other functions affected by this are DH_check_ex() and\nEVP_PKEY_param_check().\n\nAlso vulnerable are the OpenSSL dhparam and pkeyparam command line applications\nwhen using the "-check" option.\n\nThe OpenSSL SSL/TLS implementation is not affected by this issue.\n\nThe OpenSSL 3.0 and 3.1 FIPS providers are not affected by this issue.',
-              'diffID':        'sha256:4e64766527982cca5b986a8d061530bf5c32e111047733b59cb0c9742a89eda0',
-              'fixedVersions': [
-                '1.1.1v-r0'
-              ],
-              'installedVersion': '1.1.1t-r1',
-              'packageName':      'libcrypto1.1',
-              'purl':             'pkg:apk/alpine/libcrypto1.1@1.1.1t-r1?arch=x86_64&distro=3.15.7',
-              'references':       [
-                'http://seclists.org/fulldisclosure/2023/Jul/43',
-                'http://www.openwall.com/lists/oss-security/2023/07/31/1',
-                'http://www.openwall.com/lists/oss-security/2023/09/22/11',
-                'http://www.openwall.com/lists/oss-security/2023/09/22/9',
-                'http://www.openwall.com/lists/oss-security/2023/11/06/2',
-                'https://access.redhat.com/errata/RHSA-2024:2447',
-                'https://access.redhat.com/security/cve/CVE-2023-3817',
-                'https://bugzilla.redhat.com/2223016',
-                'https://bugzilla.redhat.com/2224962',
-                'https://bugzilla.redhat.com/2227852',
-                'https://bugzilla.redhat.com/2248616',
-                'https://bugzilla.redhat.com/2257571',
-                'https://bugzilla.redhat.com/2258502',
-                'https://bugzilla.redhat.com/2259944',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2224962',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2227852',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2248616',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2270358',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3446',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3817',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-5678',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-2408',
-                'https://errata.almalinux.org/9/ALSA-2024-2447.html',
-                'https://errata.rockylinux.org/RLSA-2023:7877',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=6a1eb62c29db6cb5eec707f9338aee00f44e26f5',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=869ad69aadd985c7b8ca6f4e5dd0eb274c9f3644',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=9002fd07327a91f35ba6c1307e71fa6fd4409b7f',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=91ddeba0f2269b017dc06c46c993a788974b1aa5',
-                'https://linux.oracle.com/cve/CVE-2023-3817.html',
-                'https://linux.oracle.com/errata/ELSA-2024-2447.html',
-                'https://lists.debian.org/debian-lts-announce/2023/08/msg00019.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-3817',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://security.netapp.com/advisory/ntap-20230818-0014/',
-                'https://security.netapp.com/advisory/ntap-20231027-0008/',
-                'https://security.netapp.com/advisory/ntap-20240621-0006/',
-                'https://ubuntu.com/security/notices/USN-6435-1',
-                'https://ubuntu.com/security/notices/USN-6435-2',
-                'https://ubuntu.com/security/notices/USN-6450-1',
-                'https://ubuntu.com/security/notices/USN-6709-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-3817',
-                'https://www.openssl.org/news/secadv/20230731.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'OpenSSL: Excessive time spent checking DH q parameter value'
-            },
-            {
-              'cve':  'CVE-2023-5678',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L'
-                },
-                'redhat': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L'
-                }
-              },
-              'cwes': [
-                'CWE-606',
-                'CWE-754'
-              ],
-              'description':   "Issue summary: Generating excessively long X9.42 DH keys or checking\nexcessively long X9.42 DH keys or parameters may be very slow.\n\nImpact summary: Applications that use the functions DH_generate_key() to\ngenerate an X9.42 DH key may experience long delays.  Likewise, applications\nthat use DH_check_pub_key(), DH_check_pub_key_ex() or EVP_PKEY_public_check()\nto check an X9.42 DH key or X9.42 DH parameters may experience long delays.\nWhere the key or parameters that are being checked have been obtained from\nan untrusted source this may lead to a Denial of Service.\n\nWhile DH_check() performs all the necessary checks (as of CVE-2023-3817),\nDH_check_pub_key() doesn't make any of these checks, and is therefore\nvulnerable for excessively large P and Q parameters.\n\nLikewise, while DH_generate_key() performs a check for an excessively large\nP, it doesn't check for an excessively large Q.\n\nAn application that calls DH_generate_key() or DH_check_pub_key() and\nsupplies a key or parameters obtained from an untrusted source could be\nvulnerable to a Denial of Service attack.\n\nDH_generate_key() and DH_check_pub_key() are also called by a number of\nother OpenSSL functions.  An application calling any of those other\nfunctions may similarly be affected.  The other functions affected by this\nare DH_check_pub_key_ex(), EVP_PKEY_public_check(), and EVP_PKEY_generate().\n\nAlso vulnerable are the OpenSSL pkey command line application when using the\n\"-pubcheck\" option, as well as the OpenSSL genpkey command line application.\n\nThe OpenSSL SSL/TLS implementation is not affected by this issue.\n\nThe OpenSSL 3.0 and 3.1 FIPS providers are not affected by this issue.",
-              'diffID':        'sha256:4e64766527982cca5b986a8d061530bf5c32e111047733b59cb0c9742a89eda0',
-              'fixedVersions': [
-                '1.1.1w-r1'
-              ],
-              'installedVersion': '1.1.1t-r1',
-              'packageName':      'libcrypto1.1',
-              'purl':             'pkg:apk/alpine/libcrypto1.1@1.1.1t-r1?arch=x86_64&distro=3.15.7',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2024/03/11/1',
-                'https://access.redhat.com/errata/RHSA-2024:2447',
-                'https://access.redhat.com/security/cve/CVE-2023-5678',
-                'https://bugzilla.redhat.com/2223016',
-                'https://bugzilla.redhat.com/2224962',
-                'https://bugzilla.redhat.com/2227852',
-                'https://bugzilla.redhat.com/2248616',
-                'https://bugzilla.redhat.com/2257571',
-                'https://bugzilla.redhat.com/2258502',
-                'https://bugzilla.redhat.com/2259944',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2224962',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2227852',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2248616',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2270358',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3446',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3817',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-5678',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-2408',
-                'https://errata.almalinux.org/9/ALSA-2024-2447.html',
-                'https://errata.rockylinux.org/RLSA-2023:7877',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=34efaef6c103d636ab507a0cc34dca4d3aecc055',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=710fee740904b6290fef0dd5536fbcedbc38ff0c',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=db925ae2e65d0d925adef429afc37f75bd1c2017',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=ddeb4b6c6d527e54ce9a99cba785c0f7776e54b6',
-                'https://linux.oracle.com/cve/CVE-2023-5678.html',
-                'https://linux.oracle.com/errata/ELSA-2024-2447.html',
-                'https://lists.debian.org/debian-lts-announce/2024/10/msg00033.html',
-                'https://lists.debian.org/debian-lts-announce/2024/11/msg00000.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-5678',
-                'https://security.netapp.com/advisory/ntap-20231130-0010/',
-                'https://ubuntu.com/security/notices/USN-6622-1',
-                'https://ubuntu.com/security/notices/USN-6632-1',
-                'https://ubuntu.com/security/notices/USN-6709-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-5678',
-                'https://www.openssl.org/news/secadv/20231106.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: Generating excessively long X9.42 DH keys or checking excessively long X9.42 DH keys or parameters may be very slow'
-            },
-            {
-              'cve':  'CVE-2023-0464',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-295'
-              ],
-              'description':   "A security vulnerability has been identified in all supported versions\n\nof OpenSSL related to the verification of X.509 certificate chains\nthat include policy constraints.  Attackers may be able to exploit this\nvulnerability by creating a malicious certificate chain that triggers\nexponential use of computational resources, leading to a denial-of-service\n(DoS) attack on affected systems.\n\nPolicy processing is disabled by default but can be enabled by passing\nthe `-policy' argument to the command line utilities or by calling the\n`X509_VERIFY_PARAM_set1_policies()' function.",
-              'diffID':        'sha256:4e64766527982cca5b986a8d061530bf5c32e111047733b59cb0c9742a89eda0',
-              'fixedVersions': [
-                '1.1.1t-r2'
-              ],
-              'installedVersion': '1.1.1t-r1',
-              'packageName':      'libssl1.1',
-              'purl':             'pkg:apk/alpine/libssl1.1@1.1.1t-r1?arch=x86_64&distro=3.15.7',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2023:3722',
-                'https://access.redhat.com/security/cve/CVE-2023-0464',
-                'https://bugzilla.redhat.com/2181082',
-                'https://bugzilla.redhat.com/2182561',
-                'https://bugzilla.redhat.com/2182565',
-                'https://bugzilla.redhat.com/2188461',
-                'https://bugzilla.redhat.com/2207947',
-                'https://errata.almalinux.org/9/ALSA-2023-3722.html',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=2017771e2db3e2b96f89bbe8766c3209f6a99545',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=2dcd4f1e3115f38cefa43e3efbe9b801c27e642e',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=879f7080d7e141f415c79eaa3a8ac4a3dad0348b',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=959c59c7a0164117e7f8366466a32bb1f8d77ff1',
-                'https://linux.oracle.com/cve/CVE-2023-0464.html',
-                'https://linux.oracle.com/errata/ELSA-2023-3722.html',
-                'https://lists.debian.org/debian-lts-announce/2023/06/msg00011.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-0464',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://security.netapp.com/advisory/ntap-20230406-0006/',
-                'https://security.netapp.com/advisory/ntap-20240621-0006/',
-                'https://ubuntu.com/security/notices/USN-6039-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.couchbase.com/alerts/',
-                'https://www.cve.org/CVERecord?id=CVE-2023-0464',
-                'https://www.debian.org/security/2023/dsa-5417',
-                'https://www.openssl.org/news/secadv/20230322.txt'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: Denial of service by excessive resource usage in verifying X509 policy constraints'
-            },
-            {
-              'cve':  'CVE-2023-0465',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N'
-                },
-                'redhat': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-295'
-              ],
-              'description':   "Applications that use a non-default option when verifying certificates may be\nvulnerable to an attack from a malicious CA to circumvent certain checks.\n\nInvalid certificate policies in leaf certificates are silently ignored by\nOpenSSL and other certificate policy checks are skipped for that certificate.\nA malicious CA could use this to deliberately assert invalid certificate policies\nin order to circumvent policy checking on the certificate altogether.\n\nPolicy processing is disabled by default but can be enabled by passing\nthe `-policy' argument to the command line utilities or by calling the\n`X509_VERIFY_PARAM_set1_policies()' function.",
-              'diffID':        'sha256:4e64766527982cca5b986a8d061530bf5c32e111047733b59cb0c9742a89eda0',
-              'fixedVersions': [
-                '1.1.1t-r2'
-              ],
-              'installedVersion': '1.1.1t-r1',
-              'packageName':      'libssl1.1',
-              'purl':             'pkg:apk/alpine/libssl1.1@1.1.1t-r1?arch=x86_64&distro=3.15.7',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2023:3722',
-                'https://access.redhat.com/security/cve/CVE-2023-0465',
-                'https://bugzilla.redhat.com/2181082',
-                'https://bugzilla.redhat.com/2182561',
-                'https://bugzilla.redhat.com/2182565',
-                'https://bugzilla.redhat.com/2188461',
-                'https://bugzilla.redhat.com/2207947',
-                'https://errata.almalinux.org/9/ALSA-2023-3722.html',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=10325176f3d3e98c6e2b3bf5ab1e3b334de6947a',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=1dd43e0709fece299b15208f36cc7c76209ba0bb',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=b013765abfa80036dc779dd0e50602c57bb3bf95',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=facfb1ab745646e97a1920977ae4a9965ea61d5c',
-                'https://linux.oracle.com/cve/CVE-2023-0465.html',
-                'https://linux.oracle.com/errata/ELSA-2023-3722.html',
-                'https://lists.debian.org/debian-lts-announce/2023/06/msg00011.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-0465',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://security.netapp.com/advisory/ntap-20230414-0001/',
-                'https://ubuntu.com/security/notices/USN-6039-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-0465',
-                'https://www.debian.org/security/2023/dsa-5417',
-                'https://www.openssl.org/news/secadv/20230328.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: Invalid certificate policies in leaf certificates are silently ignored'
-            },
-            {
-              'cve':  'CVE-2023-2650',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '6.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-770'
-              ],
-              'description':   "Issue summary: Processing some specially crafted ASN.1 object identifiers or\ndata containing them may be very slow.\n\nImpact summary: Applications that use OBJ_obj2txt() directly, or use any of\nthe OpenSSL subsystems OCSP, PKCS7/SMIME, CMS, CMP/CRMF or TS with no message\nsize limit may experience notable to very long delays when processing those\nmessages, which may lead to a Denial of Service.\n\nAn OBJECT IDENTIFIER is composed of a series of numbers - sub-identifiers -\nmost of which have no size limit.  OBJ_obj2txt() may be used to translate\nan ASN.1 OBJECT IDENTIFIER given in DER encoding form (using the OpenSSL\ntype ASN1_OBJECT) to its canonical numeric text form, which are the\nsub-identifiers of the OBJECT IDENTIFIER in decimal form, separated by\nperiods.\n\nWhen one of the sub-identifiers in the OBJECT IDENTIFIER is very large\n(these are sizes that are seen as absurdly large, taking up tens or hundreds\nof KiBs), the translation to a decimal number in text may take a very long\ntime.  The time complexity is O(n^2) with 'n' being the size of the\nsub-identifiers in bytes (*).\n\nWith OpenSSL 3.0, support to fetch cryptographic algorithms using names /\nidentifiers in string form was introduced.  This includes using OBJECT\nIDENTIFIERs in canonical numeric text form as identifiers for fetching\nalgorithms.\n\nSuch OBJECT IDENTIFIERs may be received through the ASN.1 structure\nAlgorithmIdentifier, which is commonly used in multiple protocols to specify\nwhat cryptographic algorithm should be used to sign or verify, encrypt or\ndecrypt, or digest passed data.\n\nApplications that call OBJ_obj2txt() directly with untrusted data are\naffected, with any version of OpenSSL.  If the use is for the mere purpose\nof display, the severity is considered low.\n\nIn OpenSSL 3.0 and newer, this affects the subsystems OCSP, PKCS7/SMIME,\nCMS, CMP/CRMF or TS.  It also impacts anything that processes X.509\ncertificates, including simple things like verifying its signature.\n\nThe impact on TLS is relatively low, because all versions of OpenSSL have a\n100KiB limit on the peer's certificate chain.  Additionally, this only\nimpacts clients, or servers that have explicitly enabled client\nauthentication.\n\nIn OpenSSL 1.1.1 and 1.0.2, this only affects displaying diverse objects,\nsuch as X.509 certificates.  This is assumed to not happen in such a way\nthat it would cause a Denial of Service, so these versions are considered\nnot affected by this issue in such a way that it would be cause for concern,\nand the severity is therefore considered low.",
-              'diffID':        'sha256:4e64766527982cca5b986a8d061530bf5c32e111047733b59cb0c9742a89eda0',
-              'fixedVersions': [
-                '1.1.1u-r0'
-              ],
-              'installedVersion': '1.1.1t-r1',
-              'packageName':      'libssl1.1',
-              'purl':             'pkg:apk/alpine/libssl1.1@1.1.1t-r1?arch=x86_64&distro=3.15.7',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2023/05/30/1',
-                'https://access.redhat.com/errata/RHSA-2023:6330',
-                'https://access.redhat.com/security/cve/CVE-2023-2650',
-                'https://bugzilla.redhat.com/1858038',
-                'https://bugzilla.redhat.com/2207947',
-                'https://errata.almalinux.org/9/ALSA-2023-6330.html',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=423a2bc737a908ad0c77bda470b2b59dc879936b',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=853c5e56ee0b8650c73140816bb8b91d6163422c',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=9e209944b35cf82368071f160a744b6178f9b098',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=db779b0e10b047f2585615e0b8f2acdf21f8544a',
-                'https://linux.oracle.com/cve/CVE-2023-2650.html',
-                'https://linux.oracle.com/errata/ELSA-2023-6330.html',
-                'https://lists.debian.org/debian-lts-announce/2023/06/msg00011.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-2650',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0009',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://security.netapp.com/advisory/ntap-20230703-0001/',
-                'https://security.netapp.com/advisory/ntap-20231027-0009/',
-                'https://ubuntu.com/security/notices/USN-6119-1',
-                'https://ubuntu.com/security/notices/USN-6188-1',
-                'https://ubuntu.com/security/notices/USN-6672-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-2650',
-                'https://www.debian.org/security/2023/dsa-5417',
-                'https://www.openssl.org/news/secadv/20230530.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: Possible DoS translating ASN.1 object identifiers'
-            },
-            {
-              'cve':  'CVE-2023-3446',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L'
-                },
-                'redhat': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L'
-                }
-              },
-              'cwes': [
-                'CWE-606',
-                'CWE-1333'
-              ],
-              'description':   "Issue summary: Checking excessively long DH keys or parameters may be very slow.\n\nImpact summary: Applications that use the functions DH_check(), DH_check_ex()\nor EVP_PKEY_param_check() to check a DH key or DH parameters may experience long\ndelays. Where the key or parameters that are being checked have been obtained\nfrom an untrusted source this may lead to a Denial of Service.\n\nThe function DH_check() performs various checks on DH parameters. One of those\nchecks confirms that the modulus ('p' parameter) is not too large. Trying to use\na very large modulus is slow and OpenSSL will not normally use a modulus which\nis over 10,000 bits in length.\n\nHowever the DH_check() function checks numerous aspects of the key or parameters\nthat have been supplied. Some of those checks use the supplied modulus value\neven if it has already been found to be too large.\n\nAn application that calls DH_check() and supplies a key or parameters obtained\nfrom an untrusted source could be vulernable to a Denial of Service attack.\n\nThe function DH_check() is itself called by a number of other OpenSSL functions.\nAn application calling any of those other functions may similarly be affected.\nThe other functions affected by this are DH_check_ex() and\nEVP_PKEY_param_check().\n\nAlso vulnerable are the OpenSSL dhparam and pkeyparam command line applications\nwhen using the '-check' option.\n\nThe OpenSSL SSL/TLS implementation is not affected by this issue.\nThe OpenSSL 3.0 and 3.1 FIPS providers are not affected by this issue.",
-              'diffID':        'sha256:4e64766527982cca5b986a8d061530bf5c32e111047733b59cb0c9742a89eda0',
-              'fixedVersions': [
-                '1.1.1u-r2'
-              ],
-              'installedVersion': '1.1.1t-r1',
-              'packageName':      'libssl1.1',
-              'purl':             'pkg:apk/alpine/libssl1.1@1.1.1t-r1?arch=x86_64&distro=3.15.7',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2023/07/19/4',
-                'http://www.openwall.com/lists/oss-security/2023/07/19/5',
-                'http://www.openwall.com/lists/oss-security/2023/07/19/6',
-                'http://www.openwall.com/lists/oss-security/2023/07/31/1',
-                'http://www.openwall.com/lists/oss-security/2024/05/16/1',
-                'https://access.redhat.com/errata/RHSA-2024:2447',
-                'https://access.redhat.com/security/cve/CVE-2023-3446',
-                'https://bugzilla.redhat.com/2223016',
-                'https://bugzilla.redhat.com/2224962',
-                'https://bugzilla.redhat.com/2227852',
-                'https://bugzilla.redhat.com/2248616',
-                'https://bugzilla.redhat.com/2257571',
-                'https://bugzilla.redhat.com/2258502',
-                'https://bugzilla.redhat.com/2259944',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2224962',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2257582',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2257583',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2258677',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2258688',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2258691',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2258694',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2258700',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-36763',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-36764',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3446',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45229',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45231',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45232',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45233',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45235',
-                'https://errata.almalinux.org/9/ALSA-2024-2447.html',
-                'https://errata.rockylinux.org/RLSA-2024:2264',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=1fa20cf2f506113c761777127a38bce5068740eb',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=8780a896543a654e757db1b9396383f9d8095528',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=9a0a4d3c1e7138915563c0df4fe6a3f9377b839c',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=fc9867c1e03c22ebf56943be205202e576aabf23',
-                'https://linux.oracle.com/cve/CVE-2023-3446.html',
-                'https://linux.oracle.com/errata/ELSA-2024-2447.html',
-                'https://lists.debian.org/debian-lts-announce/2023/08/msg00019.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-3446',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://security.netapp.com/advisory/ntap-20230803-0011/',
-                'https://ubuntu.com/security/notices/USN-6435-1',
-                'https://ubuntu.com/security/notices/USN-6435-2',
-                'https://ubuntu.com/security/notices/USN-6450-1',
-                'https://ubuntu.com/security/notices/USN-6709-1',
-                'https://ubuntu.com/security/notices/USN-7018-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-3446',
-                'https://www.openssl.org/news/secadv/20230719.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: Excessive time spent checking DH keys and parameters'
-            },
-            {
-              'cve':  'CVE-2023-3817',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L'
-                },
-                'redhat': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L'
-                }
-              },
-              'cwes': [
-                'CWE-606',
-                'CWE-834'
-              ],
-              'description':   'Issue summary: Checking excessively long DH keys or parameters may be very slow.\n\nImpact summary: Applications that use the functions DH_check(), DH_check_ex()\nor EVP_PKEY_param_check() to check a DH key or DH parameters may experience long\ndelays. Where the key or parameters that are being checked have been obtained\nfrom an untrusted source this may lead to a Denial of Service.\n\nThe function DH_check() performs various checks on DH parameters. After fixing\nCVE-2023-3446 it was discovered that a large q parameter value can also trigger\nan overly long computation during some of these checks. A correct q value,\nif present, cannot be larger than the modulus p parameter, thus it is\nunnecessary to perform these checks if q is larger than p.\n\nAn application that calls DH_check() and supplies a key or parameters obtained\nfrom an untrusted source could be vulnerable to a Denial of Service attack.\n\nThe function DH_check() is itself called by a number of other OpenSSL functions.\nAn application calling any of those other functions may similarly be affected.\nThe other functions affected by this are DH_check_ex() and\nEVP_PKEY_param_check().\n\nAlso vulnerable are the OpenSSL dhparam and pkeyparam command line applications\nwhen using the "-check" option.\n\nThe OpenSSL SSL/TLS implementation is not affected by this issue.\n\nThe OpenSSL 3.0 and 3.1 FIPS providers are not affected by this issue.',
-              'diffID':        'sha256:4e64766527982cca5b986a8d061530bf5c32e111047733b59cb0c9742a89eda0',
-              'fixedVersions': [
-                '1.1.1v-r0'
-              ],
-              'installedVersion': '1.1.1t-r1',
-              'packageName':      'libssl1.1',
-              'purl':             'pkg:apk/alpine/libssl1.1@1.1.1t-r1?arch=x86_64&distro=3.15.7',
-              'references':       [
-                'http://seclists.org/fulldisclosure/2023/Jul/43',
-                'http://www.openwall.com/lists/oss-security/2023/07/31/1',
-                'http://www.openwall.com/lists/oss-security/2023/09/22/11',
-                'http://www.openwall.com/lists/oss-security/2023/09/22/9',
-                'http://www.openwall.com/lists/oss-security/2023/11/06/2',
-                'https://access.redhat.com/errata/RHSA-2024:2447',
-                'https://access.redhat.com/security/cve/CVE-2023-3817',
-                'https://bugzilla.redhat.com/2223016',
-                'https://bugzilla.redhat.com/2224962',
-                'https://bugzilla.redhat.com/2227852',
-                'https://bugzilla.redhat.com/2248616',
-                'https://bugzilla.redhat.com/2257571',
-                'https://bugzilla.redhat.com/2258502',
-                'https://bugzilla.redhat.com/2259944',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2224962',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2227852',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2248616',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2270358',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3446',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3817',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-5678',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-2408',
-                'https://errata.almalinux.org/9/ALSA-2024-2447.html',
-                'https://errata.rockylinux.org/RLSA-2023:7877',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=6a1eb62c29db6cb5eec707f9338aee00f44e26f5',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=869ad69aadd985c7b8ca6f4e5dd0eb274c9f3644',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=9002fd07327a91f35ba6c1307e71fa6fd4409b7f',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=91ddeba0f2269b017dc06c46c993a788974b1aa5',
-                'https://linux.oracle.com/cve/CVE-2023-3817.html',
-                'https://linux.oracle.com/errata/ELSA-2024-2447.html',
-                'https://lists.debian.org/debian-lts-announce/2023/08/msg00019.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-3817',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://security.netapp.com/advisory/ntap-20230818-0014/',
-                'https://security.netapp.com/advisory/ntap-20231027-0008/',
-                'https://security.netapp.com/advisory/ntap-20240621-0006/',
-                'https://ubuntu.com/security/notices/USN-6435-1',
-                'https://ubuntu.com/security/notices/USN-6435-2',
-                'https://ubuntu.com/security/notices/USN-6450-1',
-                'https://ubuntu.com/security/notices/USN-6709-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-3817',
-                'https://www.openssl.org/news/secadv/20230731.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'OpenSSL: Excessive time spent checking DH q parameter value'
-            },
-            {
-              'cve':  'CVE-2023-5678',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L'
-                },
-                'redhat': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L'
-                }
-              },
-              'cwes': [
-                'CWE-606',
-                'CWE-754'
-              ],
-              'description':   "Issue summary: Generating excessively long X9.42 DH keys or checking\nexcessively long X9.42 DH keys or parameters may be very slow.\n\nImpact summary: Applications that use the functions DH_generate_key() to\ngenerate an X9.42 DH key may experience long delays.  Likewise, applications\nthat use DH_check_pub_key(), DH_check_pub_key_ex() or EVP_PKEY_public_check()\nto check an X9.42 DH key or X9.42 DH parameters may experience long delays.\nWhere the key or parameters that are being checked have been obtained from\nan untrusted source this may lead to a Denial of Service.\n\nWhile DH_check() performs all the necessary checks (as of CVE-2023-3817),\nDH_check_pub_key() doesn't make any of these checks, and is therefore\nvulnerable for excessively large P and Q parameters.\n\nLikewise, while DH_generate_key() performs a check for an excessively large\nP, it doesn't check for an excessively large Q.\n\nAn application that calls DH_generate_key() or DH_check_pub_key() and\nsupplies a key or parameters obtained from an untrusted source could be\nvulnerable to a Denial of Service attack.\n\nDH_generate_key() and DH_check_pub_key() are also called by a number of\nother OpenSSL functions.  An application calling any of those other\nfunctions may similarly be affected.  The other functions affected by this\nare DH_check_pub_key_ex(), EVP_PKEY_public_check(), and EVP_PKEY_generate().\n\nAlso vulnerable are the OpenSSL pkey command line application when using the\n\"-pubcheck\" option, as well as the OpenSSL genpkey command line application.\n\nThe OpenSSL SSL/TLS implementation is not affected by this issue.\n\nThe OpenSSL 3.0 and 3.1 FIPS providers are not affected by this issue.",
-              'diffID':        'sha256:4e64766527982cca5b986a8d061530bf5c32e111047733b59cb0c9742a89eda0',
-              'fixedVersions': [
-                '1.1.1w-r1'
-              ],
-              'installedVersion': '1.1.1t-r1',
-              'packageName':      'libssl1.1',
-              'purl':             'pkg:apk/alpine/libssl1.1@1.1.1t-r1?arch=x86_64&distro=3.15.7',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2024/03/11/1',
-                'https://access.redhat.com/errata/RHSA-2024:2447',
-                'https://access.redhat.com/security/cve/CVE-2023-5678',
-                'https://bugzilla.redhat.com/2223016',
-                'https://bugzilla.redhat.com/2224962',
-                'https://bugzilla.redhat.com/2227852',
-                'https://bugzilla.redhat.com/2248616',
-                'https://bugzilla.redhat.com/2257571',
-                'https://bugzilla.redhat.com/2258502',
-                'https://bugzilla.redhat.com/2259944',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2224962',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2227852',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2248616',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2270358',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3446',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3817',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-5678',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-2408',
-                'https://errata.almalinux.org/9/ALSA-2024-2447.html',
-                'https://errata.rockylinux.org/RLSA-2023:7877',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=34efaef6c103d636ab507a0cc34dca4d3aecc055',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=710fee740904b6290fef0dd5536fbcedbc38ff0c',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=db925ae2e65d0d925adef429afc37f75bd1c2017',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=ddeb4b6c6d527e54ce9a99cba785c0f7776e54b6',
-                'https://linux.oracle.com/cve/CVE-2023-5678.html',
-                'https://linux.oracle.com/errata/ELSA-2024-2447.html',
-                'https://lists.debian.org/debian-lts-announce/2024/10/msg00033.html',
-                'https://lists.debian.org/debian-lts-announce/2024/11/msg00000.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-5678',
-                'https://security.netapp.com/advisory/ntap-20231130-0010/',
-                'https://ubuntu.com/security/notices/USN-6622-1',
-                'https://ubuntu.com/security/notices/USN-6632-1',
-                'https://ubuntu.com/security/notices/USN-6709-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-5678',
-                'https://www.openssl.org/news/secadv/20231106.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: Generating excessively long X9.42 DH keys or checking excessively long X9.42 DH keys or parameters may be very slow'
-            }
-          ]
-        }
-      ],
-      'summary': {
-        'critical':   0,
-        'high':       2,
-        'low':        0,
-        'medium':     10,
-        'suppressed': 0,
-        'unknown':    0
-      }
-    }
-  },
-  {
-    'id':    'default/2c41f90997af2e28102fcde622f8ba4472d52f2f2fed949d6f19706dc3b30240',
-    'type':  'storage.sbomscanner.kubewarden.io.vulnerabilityreport',
-    'links': {
-      'patch':  'https://localhost:8005/v1/storage.sbomscanner.kubewarden.io.vulnerabilityreports/default/2c41f90997af2e28102fcde622f8ba4472d52f2f2fed949d6f19706dc3b30240',
-      'remove': 'https://localhost:8005/v1/storage.sbomscanner.kubewarden.io.vulnerabilityreports/default/2c41f90997af2e28102fcde622f8ba4472d52f2f2fed949d6f19706dc3b30240',
-      'self':   'https://localhost:8005/v1/storage.sbomscanner.kubewarden.io.vulnerabilityreports/default/2c41f90997af2e28102fcde622f8ba4472d52f2f2fed949d6f19706dc3b30240',
-      'update': 'https://localhost:8005/v1/storage.sbomscanner.kubewarden.io.vulnerabilityreports/default/2c41f90997af2e28102fcde622f8ba4472d52f2f2fed949d6f19706dc3b30240',
-      'view':   'https://localhost:8005/apis/storage.sbomscanner.kubewarden.io/v1alpha1/namespaces/default/vulnerabilityreports/2c41f90997af2e28102fcde622f8ba4472d52f2f2fed949d6f19706dc3b30240'
-    },
-    'apiVersion':    'storage.sbomscanner.kubewarden.io/v1alpha1',
-    'imageMetadata': {
-      'digest':      'sha256:0a6a2a45b31cd5e28a366a035185eb75020ec28866957c2cb82422ff68fae065',
-      'platform':    'linux/s390x',
-      'registry':    'lsong-demo1',
-      'registryURI': 'registry-1.docker.io',
-      'repository':  'library/alpine',
-      'tag':         '3.15.4'
-    },
-    'kind':     'VulnerabilityReport',
-    'metadata': {
-      'creationTimestamp': '2026-01-14T18:51:21Z',
-      'fields':            [
-        '2c41f90997af2e28102fcde622f8ba4472d52f2f2fed949d6f19706dc3b30240',
-        'registry-1.docker.io/library/alpine:3.15.4',
-        'linux/s390x',
-        '23 (0 suppressed)'
-      ],
-      'labels': {
-        'app.kubernetes.io/managed-by':          'sbomscanner',
-        'app.kubernetes.io/part-of':             'sbomscanner',
-        'sbomscanner.kubewarden.io/scanjob-uid': '445c600a-c4b6-40b3-bd71-f2d2140a37d5'
-      },
-      'name':            '2c41f90997af2e28102fcde622f8ba4472d52f2f2fed949d6f19706dc3b30240',
-      'namespace':       'default',
-      'ownerReferences': [
-        {
-          'apiVersion':         'storage.sbomscanner.kubewarden.io/v1alpha1',
-          'blockOwnerDeletion': true,
-          'controller':         true,
-          'kind':               'SBOM',
-          'name':               '2c41f90997af2e28102fcde622f8ba4472d52f2f2fed949d6f19706dc3b30240',
-          'uid':                'e9055ea4-f75a-46f2-9fa1-8a3cbc9ff885'
-        }
-      ],
-      'relationships': [
-        {
-          'fromId':   'default/2c41f90997af2e28102fcde622f8ba4472d52f2f2fed949d6f19706dc3b30240',
-          'fromType': 'storage.sbomscanner.kubewarden.io.sbom',
-          'rel':      'owner',
-          'state':    'active',
-          'message':  'Resource is current'
-        }
-      ],
-      'resourceVersion': '1',
-      'state':           {
-        'error':         false,
-        'message':       'Resource is current',
-        'name':          'active',
-        'transitioning': false
-      },
-      'uid': '7bee279f-7c27-4e64-a32a-83798750a814'
-    },
-    'report': {
-      'results': [
-        {
-          'class':           'os-pkgs',
-          'target':          '/var/run/worker/trivy.sbom.2864947716.json (alpine 3.15.4)',
-          'type':            'alpine',
-          'vulnerabilities': [
-            {
-              'cve':  'CVE-2022-4450',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'nvd': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-415'
-              ],
-              'description':   'The function PEM_read_bio_ex() reads a PEM file from a BIO and parses and\ndecodes the "name" (e.g. "CERTIFICATE"), any header data and the payload data.\nIf the function succeeds then the "name_out", "header" and "data" arguments are\npopulated with pointers to buffers containing the relevant decoded data. The\ncaller is responsible for freeing those buffers. It is possible to construct a\nPEM file that results in 0 bytes of payload data. In this case PEM_read_bio_ex()\nwill return a failure code but will populate the header argument with a pointer\nto a buffer that has already been freed. If the caller also frees this buffer\nthen a double free will occur. This will most likely lead to a crash. This\ncould be exploited by an attacker who has the ability to supply malicious PEM\nfiles for parsing to achieve a denial of service attack.\n\nThe functions PEM_read_bio() and PEM_read() are simple wrappers around\nPEM_read_bio_ex() and therefore these functions are also directly affected.\n\nThese functions are also called indirectly by a number of other OpenSSL\nfunctions including PEM_X509_INFO_read_bio_ex() and\nSSL_CTX_use_serverinfo_file() which are also vulnerable. Some OpenSSL internal\nuses of these functions are not vulnerable because the caller does not free the\nheader argument if PEM_read_bio_ex() returns a failure code. These locations\ninclude the PEM_read_bio_TYPE() functions as well as the decoders introduced in\nOpenSSL 3.0.\n\nThe OpenSSL asn1parse command line application is also impacted by this issue.',
-              'diffID':        'sha256:ef842a515ae18ea3e9c7e3fd478d2eadde853c8b17b9b36805663b41ef119173',
-              'fixedVersions': [
-                '1.1.1t-r0'
-              ],
-              'installedVersion': '1.1.1n-r0',
-              'packageName':      'libcrypto1.1',
-              'purl':             'pkg:apk/alpine/libcrypto1.1@1.1.1n-r0?arch=s390x&distro=3.15.4',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2023:2165',
-                'https://access.redhat.com/security/cve/CVE-2022-4450',
-                'https://bugzilla.redhat.com/1960321',
-                'https://bugzilla.redhat.com/2164440',
-                'https://bugzilla.redhat.com/2164487',
-                'https://bugzilla.redhat.com/2164492',
-                'https://bugzilla.redhat.com/2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144000',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144003',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144006',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144008',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144010',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144012',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144015',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144017',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144019',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2145170',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2158412',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164440',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164487',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164488',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164492',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164497',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164499',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164500',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4203',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4304',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4450',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0215',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0216',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0217',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0286',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0401',
-                'https://errata.almalinux.org/9/ALSA-2023-2165.html',
-                'https://errata.rockylinux.org/RLSA-2023:0946',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=63bcf189be73a9cc1264059bed6f57974be74a83',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=bbcf509bd046b34cca19c766bbddc31683d0858b',
-                'https://linux.oracle.com/cve/CVE-2022-4450.html',
-                'https://linux.oracle.com/errata/ELSA-2023-32791.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2022-4450',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0003',
-                'https://rustsec.org/advisories/RUSTSEC-2023-0010.html',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://ubuntu.com/security/notices/USN-5844-1',
-                'https://ubuntu.com/security/notices/USN-6564-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2022-4450',
-                'https://www.openssl.org/news/secadv/20230207.txt'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: double free after calling PEM_read_bio_ex'
-            },
-            {
-              'cve':  'CVE-2023-0215',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'nvd': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   'The public API function BIO_new_NDEF is a helper function used for streaming\nASN.1 data via a BIO. It is primarily used internally to OpenSSL to support the\nSMIME, CMS and PKCS7 streaming capabilities, but may also be called directly by\nend user applications.\n\nThe function receives a BIO from the caller, prepends a new BIO_f_asn1 filter\nBIO onto the front of it to form a BIO chain, and then returns the new head of\nthe BIO chain to the caller. Under certain conditions, for example if a CMS\nrecipient public key is invalid, the new filter BIO is freed and the function\nreturns a NULL result indicating a failure. However, in this case, the BIO chain\nis not properly cleaned up and the BIO passed by the caller still retains\ninternal pointers to the previously freed filter BIO. If the caller then goes on\nto call BIO_pop() on the BIO then a use-after-free will occur. This will most\nlikely result in a crash.\n\n\n\nThis scenario occurs directly in the internal function B64_write_ASN1() which\nmay cause BIO_new_NDEF() to be called and will subsequently call BIO_pop() on\nthe BIO. This internal function is in turn called by the public API functions\nPEM_write_bio_ASN1_stream, PEM_write_bio_CMS_stream, PEM_write_bio_PKCS7_stream,\nSMIME_write_ASN1, SMIME_write_CMS and SMIME_write_PKCS7.\n\nOther public API functions that may be impacted by this include\ni2d_ASN1_bio_stream, BIO_new_CMS, BIO_new_PKCS7, i2d_CMS_bio_stream and\ni2d_PKCS7_bio_stream.\n\nThe OpenSSL cms and smime command line applications are similarly affected.',
-              'diffID':        'sha256:ef842a515ae18ea3e9c7e3fd478d2eadde853c8b17b9b36805663b41ef119173',
-              'fixedVersions': [
-                '1.1.1t-r0'
-              ],
-              'installedVersion': '1.1.1n-r0',
-              'packageName':      'libcrypto1.1',
-              'purl':             'pkg:apk/alpine/libcrypto1.1@1.1.1n-r0?arch=s390x&distro=3.15.4',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2023:2165',
-                'https://access.redhat.com/security/cve/CVE-2023-0215',
-                'https://bugzilla.redhat.com/1960321',
-                'https://bugzilla.redhat.com/2164440',
-                'https://bugzilla.redhat.com/2164487',
-                'https://bugzilla.redhat.com/2164492',
-                'https://bugzilla.redhat.com/2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144000',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144003',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144006',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144008',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144010',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144012',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144015',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144017',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144019',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2145170',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2158412',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164440',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164487',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164488',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164492',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164497',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164499',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164500',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4203',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4304',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4450',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0215',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0216',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0217',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0286',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0401',
-                'https://errata.almalinux.org/9/ALSA-2023-2165.html',
-                'https://errata.rockylinux.org/RLSA-2023:0946',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=8818064ce3c3c0f1b740a5aaba2a987e75bfbafd',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=9816136fe31d92ace4037d5da5257f763aeeb4eb',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=c3829dd8825c654652201e16f8a0a0c46ee3f344',
-                'https://linux.oracle.com/cve/CVE-2023-0215.html',
-                'https://linux.oracle.com/errata/ELSA-2023-32791.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-0215',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0003',
-                'https://rustsec.org/advisories/RUSTSEC-2023-0009.html',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://security.netapp.com/advisory/ntap-20230427-0007',
-                'https://security.netapp.com/advisory/ntap-20230427-0007/',
-                'https://security.netapp.com/advisory/ntap-20230427-0009',
-                'https://security.netapp.com/advisory/ntap-20230427-0009/',
-                'https://security.netapp.com/advisory/ntap-20240621-0006',
-                'https://security.netapp.com/advisory/ntap-20240621-0006/',
-                'https://ubuntu.com/security/notices/USN-5844-1',
-                'https://ubuntu.com/security/notices/USN-5845-1',
-                'https://ubuntu.com/security/notices/USN-5845-2',
-                'https://ubuntu.com/security/notices/USN-6564-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-0215',
-                'https://www.openssl.org/news/secadv/20230207.txt'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: use-after-free following BIO_new_NDEF'
-            },
-            {
-              'cve':  'CVE-2023-0286',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '7.4',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H'
-                },
-                'nvd': {
-                  'v3score':  '7.4',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.4',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-843'
-              ],
-              'description':   'There is a type confusion vulnerability relating to X.400 address processing\ninside an X.509 GeneralName. X.400 addresses were parsed as an ASN1_STRING but\nthe public structure definition for GENERAL_NAME incorrectly specified the type\nof the x400Address field as ASN1_TYPE. This field is subsequently interpreted by\nthe OpenSSL function GENERAL_NAME_cmp as an ASN1_TYPE rather than an\nASN1_STRING.\n\nWhen CRL checking is enabled (i.e. the application sets the\nX509_V_FLAG_CRL_CHECK flag), this vulnerability may allow an attacker to pass\narbitrary pointers to a memcmp call, enabling them to read memory contents or\nenact a denial of service. In most cases, the attack requires the attacker to\nprovide both the certificate chain and CRL, neither of which need to have a\nvalid signature. If the attacker only controls one of these inputs, the other\ninput must already contain an X.400 address as a CRL distribution point, which\nis uncommon. As such, this vulnerability is most likely to only affect\napplications which have implemented their own functionality for retrieving CRLs\nover a network.',
-              'diffID':        'sha256:ef842a515ae18ea3e9c7e3fd478d2eadde853c8b17b9b36805663b41ef119173',
-              'fixedVersions': [
-                '1.1.1t-r0'
-              ],
-              'installedVersion': '1.1.1n-r0',
-              'packageName':      'libcrypto1.1',
-              'purl':             'pkg:apk/alpine/libcrypto1.1@1.1.1n-r0?arch=s390x&distro=3.15.4',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2025:7937',
-                'https://access.redhat.com/security/cve/CVE-2023-0286',
-                'https://access.redhat.com/security/cve/cve-2023-0286',
-                'https://bugzilla.redhat.com/2164440',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144000',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144003',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144006',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144008',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144010',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144012',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144015',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144017',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144019',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2145170',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2158412',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164440',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164487',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164488',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164492',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164497',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164499',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164500',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4203',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4304',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4450',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0215',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0216',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0217',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0286',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0401',
-                'https://errata.almalinux.org/9/ALSA-2025-7937.html',
-                'https://errata.rockylinux.org/RLSA-2023:0946',
-                'https://ftp.openbsd.org/pub/OpenBSD/LibreSSL/libressl-3.6.2-relnotes.txt',
-                'https://ftp.openbsd.org/pub/OpenBSD/patches/7.2/common/018_x509.patch.sig',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=2c6c9d439b484e1ba9830d8454a34fa4f80fdfe9',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=2f7530077e0ef79d98718138716bc51ca0cad658',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=fd2af07dc083a350c959147097003a14a5e8ac4d',
-                'https://github.com/pyca/cryptography',
-                'https://github.com/pyca/cryptography/security/advisories/GHSA-x4qr-2fvf-3mr5',
-                'https://linux.oracle.com/cve/CVE-2023-0286.html',
-                'https://linux.oracle.com/errata/ELSA-2025-7937.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-0286',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0003',
-                'https://rustsec.org/advisories/RUSTSEC-2023-0006.html',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://ubuntu.com/security/notices/USN-5844-1',
-                'https://ubuntu.com/security/notices/USN-5845-1',
-                'https://ubuntu.com/security/notices/USN-5845-2',
-                'https://ubuntu.com/security/notices/USN-6564-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-0286',
-                'https://www.openssl.org/news/secadv/20230207.txt'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: X.400 address type confusion in X.509 GeneralName'
-            },
-            {
-              'cve':  'CVE-2023-0464',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-295'
-              ],
-              'description':   "A security vulnerability has been identified in all supported versions\n\nof OpenSSL related to the verification of X.509 certificate chains\nthat include policy constraints.  Attackers may be able to exploit this\nvulnerability by creating a malicious certificate chain that triggers\nexponential use of computational resources, leading to a denial-of-service\n(DoS) attack on affected systems.\n\nPolicy processing is disabled by default but can be enabled by passing\nthe `-policy' argument to the command line utilities or by calling the\n`X509_VERIFY_PARAM_set1_policies()' function.",
-              'diffID':        'sha256:ef842a515ae18ea3e9c7e3fd478d2eadde853c8b17b9b36805663b41ef119173',
-              'fixedVersions': [
-                '1.1.1t-r2'
-              ],
-              'installedVersion': '1.1.1n-r0',
-              'packageName':      'libcrypto1.1',
-              'purl':             'pkg:apk/alpine/libcrypto1.1@1.1.1n-r0?arch=s390x&distro=3.15.4',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2023:3722',
-                'https://access.redhat.com/security/cve/CVE-2023-0464',
-                'https://bugzilla.redhat.com/2181082',
-                'https://bugzilla.redhat.com/2182561',
-                'https://bugzilla.redhat.com/2182565',
-                'https://bugzilla.redhat.com/2188461',
-                'https://bugzilla.redhat.com/2207947',
-                'https://errata.almalinux.org/9/ALSA-2023-3722.html',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=2017771e2db3e2b96f89bbe8766c3209f6a99545',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=2dcd4f1e3115f38cefa43e3efbe9b801c27e642e',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=879f7080d7e141f415c79eaa3a8ac4a3dad0348b',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=959c59c7a0164117e7f8366466a32bb1f8d77ff1',
-                'https://linux.oracle.com/cve/CVE-2023-0464.html',
-                'https://linux.oracle.com/errata/ELSA-2023-3722.html',
-                'https://lists.debian.org/debian-lts-announce/2023/06/msg00011.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-0464',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://security.netapp.com/advisory/ntap-20230406-0006/',
-                'https://security.netapp.com/advisory/ntap-20240621-0006/',
-                'https://ubuntu.com/security/notices/USN-6039-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.couchbase.com/alerts/',
-                'https://www.cve.org/CVERecord?id=CVE-2023-0464',
-                'https://www.debian.org/security/2023/dsa-5417',
-                'https://www.openssl.org/news/secadv/20230322.txt'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: Denial of service by excessive resource usage in verifying X509 policy constraints'
-            },
-            {
-              'cve':  'CVE-2022-2097',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N'
-                },
-                'nvd': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N'
-                },
-                'redhat': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-327'
-              ],
-              'description':   "AES OCB mode for 32-bit x86 platforms using the AES-NI assembly optimised implementation will not encrypt the entirety of the data under some circumstances. This could reveal sixteen bytes of data that was preexisting in the memory that wasn't written. In the special case of \"in place\" encryption, sixteen bytes of the plaintext would be revealed. Since OpenSSL does not support OCB based cipher suites for TLS and DTLS, they are both unaffected. Fixed in OpenSSL 3.0.5 (Affected 3.0.0-3.0.4). Fixed in OpenSSL 1.1.1q (Affected 1.1.1-1.1.1p).",
-              'diffID':        'sha256:ef842a515ae18ea3e9c7e3fd478d2eadde853c8b17b9b36805663b41ef119173',
-              'fixedVersions': [
-                '1.1.1q-r0'
-              ],
-              'installedVersion': '1.1.1n-r0',
-              'packageName':      'libcrypto1.1',
-              'purl':             'pkg:apk/alpine/libcrypto1.1@1.1.1n-r0?arch=s390x&distro=3.15.4',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2022:6224',
-                'https://access.redhat.com/security/cve/CVE-2022-2097',
-                'https://bugzilla.redhat.com/2081494',
-                'https://bugzilla.redhat.com/2087911',
-                'https://bugzilla.redhat.com/2087913',
-                'https://bugzilla.redhat.com/2097310',
-                'https://bugzilla.redhat.com/2104905',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2081494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2097310',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2100554',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2104905',
-                'https://cert-portal.siemens.com/productcert/pdf/ssa-332410.pdf',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-1292',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-2068',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-2097',
-                'https://errata.almalinux.org/9/ALSA-2022-6224.html',
-                'https://errata.rockylinux.org/RLSA-2022:5818',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=919925673d6c9cfed3c1085497f5dfbbed5fc431',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=a98f339ddd7e8f487d6e0088d4a9a42324885a93',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=919925673d6c9cfed3c1085497f5dfbbed5fc431',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=a98f339ddd7e8f487d6e0088d4a9a42324885a93',
-                'https://github.com/alexcrichton/openssl-src-rs',
-                'https://linux.oracle.com/cve/CVE-2022-2097.html',
-                'https://linux.oracle.com/errata/ELSA-2022-9955.html',
-                'https://lists.debian.org/debian-lts-announce/2023/02/msg00019.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/R6CK57NBQFTPUMXAPJURCGXUYT76NQAK',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/R6CK57NBQFTPUMXAPJURCGXUYT76NQAK/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/V6567JERRHHJW2GNGJGKDRNHR7SNPZK7',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/V6567JERRHHJW2GNGJGKDRNHR7SNPZK7/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VCMNWKERPBKOEBNL7CLTTX3ZZCZLH7XA',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VCMNWKERPBKOEBNL7CLTTX3ZZCZLH7XA/',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/R6CK57NBQFTPUMXAPJURCGXUYT76NQAK',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/R6CK57NBQFTPUMXAPJURCGXUYT76NQAK/',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/V6567JERRHHJW2GNGJGKDRNHR7SNPZK7',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/V6567JERRHHJW2GNGJGKDRNHR7SNPZK7/',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/VCMNWKERPBKOEBNL7CLTTX3ZZCZLH7XA',
-                'https://nvd.nist.gov/vuln/detail/CVE-2022-2097',
-                'https://rustsec.org/advisories/RUSTSEC-2022-0032.html',
-                'https://security.gentoo.org/glsa/202210-02',
-                'https://security.netapp.com/advisory/ntap-20220715-0011',
-                'https://security.netapp.com/advisory/ntap-20220715-0011/',
-                'https://security.netapp.com/advisory/ntap-20230420-0008',
-                'https://security.netapp.com/advisory/ntap-20230420-0008/',
-                'https://security.netapp.com/advisory/ntap-20240621-0006',
-                'https://security.netapp.com/advisory/ntap-20240621-0006/',
-                'https://ubuntu.com/security/notices/USN-5502-1',
-                'https://ubuntu.com/security/notices/USN-6457-1',
-                'https://www.cve.org/CVERecord?id=CVE-2022-2097',
-                'https://www.debian.org/security/2023/dsa-5343',
-                'https://www.openssl.org/news/secadv/20220705.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: AES OCB fails to encrypt some bytes'
-            },
-            {
-              'cve':  'CVE-2022-4304',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N'
-                },
-                'nvd': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N'
-                },
-                'redhat': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-203'
-              ],
-              'description':   'A timing based side channel exists in the OpenSSL RSA Decryption implementation\nwhich could be sufficient to recover a plaintext across a network in a\nBleichenbacher style attack. To achieve a successful decryption an attacker\nwould have to be able to send a very large number of trial messages for\ndecryption. The vulnerability affects all RSA padding modes: PKCS#1 v1.5,\nRSA-OEAP and RSASVE.\n\nFor example, in a TLS connection, RSA is commonly used by a client to send an\nencrypted pre-master secret to the server. An attacker that had observed a\ngenuine connection between a client and a server could use this flaw to send\ntrial messages to the server and record the time taken to process them. After a\nsufficiently large number of messages the attacker could recover the pre-master\nsecret used for the original connection and thus be able to decrypt the\napplication data sent over that connection.',
-              'diffID':        'sha256:ef842a515ae18ea3e9c7e3fd478d2eadde853c8b17b9b36805663b41ef119173',
-              'fixedVersions': [
-                '1.1.1t-r0'
-              ],
-              'installedVersion': '1.1.1n-r0',
-              'packageName':      'libcrypto1.1',
-              'purl':             'pkg:apk/alpine/libcrypto1.1@1.1.1n-r0?arch=s390x&distro=3.15.4',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2023:2165',
-                'https://access.redhat.com/security/cve/CVE-2022-4304',
-                'https://bugzilla.redhat.com/1960321',
-                'https://bugzilla.redhat.com/2164440',
-                'https://bugzilla.redhat.com/2164487',
-                'https://bugzilla.redhat.com/2164492',
-                'https://bugzilla.redhat.com/2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144000',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144003',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144006',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144008',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144010',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144012',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144015',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144017',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144019',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2145170',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2158412',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164440',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164487',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164488',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164492',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164497',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164499',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164500',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4203',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4304',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4450',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0215',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0216',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0217',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0286',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0401',
-                'https://errata.almalinux.org/9/ALSA-2023-2165.html',
-                'https://errata.rockylinux.org/RLSA-2023:0946',
-                'https://linux.oracle.com/cve/CVE-2022-4304.html',
-                'https://linux.oracle.com/errata/ELSA-2023-32791.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2022-4304',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0003',
-                'https://rustsec.org/advisories/RUSTSEC-2023-0007.html',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://ubuntu.com/security/notices/USN-5844-1',
-                'https://ubuntu.com/security/notices/USN-6564-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2022-4304',
-                'https://www.openssl.org/news/secadv/20230207.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: timing attack in RSA Decryption implementation'
-            },
-            {
-              'cve':  'CVE-2023-0465',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N'
-                },
-                'redhat': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-295'
-              ],
-              'description':   "Applications that use a non-default option when verifying certificates may be\nvulnerable to an attack from a malicious CA to circumvent certain checks.\n\nInvalid certificate policies in leaf certificates are silently ignored by\nOpenSSL and other certificate policy checks are skipped for that certificate.\nA malicious CA could use this to deliberately assert invalid certificate policies\nin order to circumvent policy checking on the certificate altogether.\n\nPolicy processing is disabled by default but can be enabled by passing\nthe `-policy' argument to the command line utilities or by calling the\n`X509_VERIFY_PARAM_set1_policies()' function.",
-              'diffID':        'sha256:ef842a515ae18ea3e9c7e3fd478d2eadde853c8b17b9b36805663b41ef119173',
-              'fixedVersions': [
-                '1.1.1t-r2'
-              ],
-              'installedVersion': '1.1.1n-r0',
-              'packageName':      'libcrypto1.1',
-              'purl':             'pkg:apk/alpine/libcrypto1.1@1.1.1n-r0?arch=s390x&distro=3.15.4',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2023:3722',
-                'https://access.redhat.com/security/cve/CVE-2023-0465',
-                'https://bugzilla.redhat.com/2181082',
-                'https://bugzilla.redhat.com/2182561',
-                'https://bugzilla.redhat.com/2182565',
-                'https://bugzilla.redhat.com/2188461',
-                'https://bugzilla.redhat.com/2207947',
-                'https://errata.almalinux.org/9/ALSA-2023-3722.html',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=10325176f3d3e98c6e2b3bf5ab1e3b334de6947a',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=1dd43e0709fece299b15208f36cc7c76209ba0bb',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=b013765abfa80036dc779dd0e50602c57bb3bf95',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=facfb1ab745646e97a1920977ae4a9965ea61d5c',
-                'https://linux.oracle.com/cve/CVE-2023-0465.html',
-                'https://linux.oracle.com/errata/ELSA-2023-3722.html',
-                'https://lists.debian.org/debian-lts-announce/2023/06/msg00011.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-0465',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://security.netapp.com/advisory/ntap-20230414-0001/',
-                'https://ubuntu.com/security/notices/USN-6039-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-0465',
-                'https://www.debian.org/security/2023/dsa-5417',
-                'https://www.openssl.org/news/secadv/20230328.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: Invalid certificate policies in leaf certificates are silently ignored'
-            },
-            {
-              'cve':  'CVE-2023-2650',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '6.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-770'
-              ],
-              'description':   "Issue summary: Processing some specially crafted ASN.1 object identifiers or\ndata containing them may be very slow.\n\nImpact summary: Applications that use OBJ_obj2txt() directly, or use any of\nthe OpenSSL subsystems OCSP, PKCS7/SMIME, CMS, CMP/CRMF or TS with no message\nsize limit may experience notable to very long delays when processing those\nmessages, which may lead to a Denial of Service.\n\nAn OBJECT IDENTIFIER is composed of a series of numbers - sub-identifiers -\nmost of which have no size limit.  OBJ_obj2txt() may be used to translate\nan ASN.1 OBJECT IDENTIFIER given in DER encoding form (using the OpenSSL\ntype ASN1_OBJECT) to its canonical numeric text form, which are the\nsub-identifiers of the OBJECT IDENTIFIER in decimal form, separated by\nperiods.\n\nWhen one of the sub-identifiers in the OBJECT IDENTIFIER is very large\n(these are sizes that are seen as absurdly large, taking up tens or hundreds\nof KiBs), the translation to a decimal number in text may take a very long\ntime.  The time complexity is O(n^2) with 'n' being the size of the\nsub-identifiers in bytes (*).\n\nWith OpenSSL 3.0, support to fetch cryptographic algorithms using names /\nidentifiers in string form was introduced.  This includes using OBJECT\nIDENTIFIERs in canonical numeric text form as identifiers for fetching\nalgorithms.\n\nSuch OBJECT IDENTIFIERs may be received through the ASN.1 structure\nAlgorithmIdentifier, which is commonly used in multiple protocols to specify\nwhat cryptographic algorithm should be used to sign or verify, encrypt or\ndecrypt, or digest passed data.\n\nApplications that call OBJ_obj2txt() directly with untrusted data are\naffected, with any version of OpenSSL.  If the use is for the mere purpose\nof display, the severity is considered low.\n\nIn OpenSSL 3.0 and newer, this affects the subsystems OCSP, PKCS7/SMIME,\nCMS, CMP/CRMF or TS.  It also impacts anything that processes X.509\ncertificates, including simple things like verifying its signature.\n\nThe impact on TLS is relatively low, because all versions of OpenSSL have a\n100KiB limit on the peer's certificate chain.  Additionally, this only\nimpacts clients, or servers that have explicitly enabled client\nauthentication.\n\nIn OpenSSL 1.1.1 and 1.0.2, this only affects displaying diverse objects,\nsuch as X.509 certificates.  This is assumed to not happen in such a way\nthat it would cause a Denial of Service, so these versions are considered\nnot affected by this issue in such a way that it would be cause for concern,\nand the severity is therefore considered low.",
-              'diffID':        'sha256:ef842a515ae18ea3e9c7e3fd478d2eadde853c8b17b9b36805663b41ef119173',
-              'fixedVersions': [
-                '1.1.1u-r0'
-              ],
-              'installedVersion': '1.1.1n-r0',
-              'packageName':      'libcrypto1.1',
-              'purl':             'pkg:apk/alpine/libcrypto1.1@1.1.1n-r0?arch=s390x&distro=3.15.4',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2023/05/30/1',
-                'https://access.redhat.com/errata/RHSA-2023:6330',
-                'https://access.redhat.com/security/cve/CVE-2023-2650',
-                'https://bugzilla.redhat.com/1858038',
-                'https://bugzilla.redhat.com/2207947',
-                'https://errata.almalinux.org/9/ALSA-2023-6330.html',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=423a2bc737a908ad0c77bda470b2b59dc879936b',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=853c5e56ee0b8650c73140816bb8b91d6163422c',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=9e209944b35cf82368071f160a744b6178f9b098',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=db779b0e10b047f2585615e0b8f2acdf21f8544a',
-                'https://linux.oracle.com/cve/CVE-2023-2650.html',
-                'https://linux.oracle.com/errata/ELSA-2023-6330.html',
-                'https://lists.debian.org/debian-lts-announce/2023/06/msg00011.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-2650',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0009',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://security.netapp.com/advisory/ntap-20230703-0001/',
-                'https://security.netapp.com/advisory/ntap-20231027-0009/',
-                'https://ubuntu.com/security/notices/USN-6119-1',
-                'https://ubuntu.com/security/notices/USN-6188-1',
-                'https://ubuntu.com/security/notices/USN-6672-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-2650',
-                'https://www.debian.org/security/2023/dsa-5417',
-                'https://www.openssl.org/news/secadv/20230530.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: Possible DoS translating ASN.1 object identifiers'
-            },
-            {
-              'cve':  'CVE-2023-3446',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L'
-                },
-                'redhat': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L'
-                }
-              },
-              'cwes': [
-                'CWE-606',
-                'CWE-1333'
-              ],
-              'description':   "Issue summary: Checking excessively long DH keys or parameters may be very slow.\n\nImpact summary: Applications that use the functions DH_check(), DH_check_ex()\nor EVP_PKEY_param_check() to check a DH key or DH parameters may experience long\ndelays. Where the key or parameters that are being checked have been obtained\nfrom an untrusted source this may lead to a Denial of Service.\n\nThe function DH_check() performs various checks on DH parameters. One of those\nchecks confirms that the modulus ('p' parameter) is not too large. Trying to use\na very large modulus is slow and OpenSSL will not normally use a modulus which\nis over 10,000 bits in length.\n\nHowever the DH_check() function checks numerous aspects of the key or parameters\nthat have been supplied. Some of those checks use the supplied modulus value\neven if it has already been found to be too large.\n\nAn application that calls DH_check() and supplies a key or parameters obtained\nfrom an untrusted source could be vulernable to a Denial of Service attack.\n\nThe function DH_check() is itself called by a number of other OpenSSL functions.\nAn application calling any of those other functions may similarly be affected.\nThe other functions affected by this are DH_check_ex() and\nEVP_PKEY_param_check().\n\nAlso vulnerable are the OpenSSL dhparam and pkeyparam command line applications\nwhen using the '-check' option.\n\nThe OpenSSL SSL/TLS implementation is not affected by this issue.\nThe OpenSSL 3.0 and 3.1 FIPS providers are not affected by this issue.",
-              'diffID':        'sha256:ef842a515ae18ea3e9c7e3fd478d2eadde853c8b17b9b36805663b41ef119173',
-              'fixedVersions': [
-                '1.1.1u-r2'
-              ],
-              'installedVersion': '1.1.1n-r0',
-              'packageName':      'libcrypto1.1',
-              'purl':             'pkg:apk/alpine/libcrypto1.1@1.1.1n-r0?arch=s390x&distro=3.15.4',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2023/07/19/4',
-                'http://www.openwall.com/lists/oss-security/2023/07/19/5',
-                'http://www.openwall.com/lists/oss-security/2023/07/19/6',
-                'http://www.openwall.com/lists/oss-security/2023/07/31/1',
-                'http://www.openwall.com/lists/oss-security/2024/05/16/1',
-                'https://access.redhat.com/errata/RHSA-2024:2447',
-                'https://access.redhat.com/security/cve/CVE-2023-3446',
-                'https://bugzilla.redhat.com/2223016',
-                'https://bugzilla.redhat.com/2224962',
-                'https://bugzilla.redhat.com/2227852',
-                'https://bugzilla.redhat.com/2248616',
-                'https://bugzilla.redhat.com/2257571',
-                'https://bugzilla.redhat.com/2258502',
-                'https://bugzilla.redhat.com/2259944',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2224962',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2257582',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2257583',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2258677',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2258688',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2258691',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2258694',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2258700',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-36763',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-36764',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3446',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45229',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45231',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45232',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45233',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45235',
-                'https://errata.almalinux.org/9/ALSA-2024-2447.html',
-                'https://errata.rockylinux.org/RLSA-2024:2264',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=1fa20cf2f506113c761777127a38bce5068740eb',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=8780a896543a654e757db1b9396383f9d8095528',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=9a0a4d3c1e7138915563c0df4fe6a3f9377b839c',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=fc9867c1e03c22ebf56943be205202e576aabf23',
-                'https://linux.oracle.com/cve/CVE-2023-3446.html',
-                'https://linux.oracle.com/errata/ELSA-2024-2447.html',
-                'https://lists.debian.org/debian-lts-announce/2023/08/msg00019.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-3446',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://security.netapp.com/advisory/ntap-20230803-0011/',
-                'https://ubuntu.com/security/notices/USN-6435-1',
-                'https://ubuntu.com/security/notices/USN-6435-2',
-                'https://ubuntu.com/security/notices/USN-6450-1',
-                'https://ubuntu.com/security/notices/USN-6709-1',
-                'https://ubuntu.com/security/notices/USN-7018-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-3446',
-                'https://www.openssl.org/news/secadv/20230719.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: Excessive time spent checking DH keys and parameters'
-            },
-            {
-              'cve':  'CVE-2023-3817',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L'
-                },
-                'redhat': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L'
-                }
-              },
-              'cwes': [
-                'CWE-606',
-                'CWE-834'
-              ],
-              'description':   'Issue summary: Checking excessively long DH keys or parameters may be very slow.\n\nImpact summary: Applications that use the functions DH_check(), DH_check_ex()\nor EVP_PKEY_param_check() to check a DH key or DH parameters may experience long\ndelays. Where the key or parameters that are being checked have been obtained\nfrom an untrusted source this may lead to a Denial of Service.\n\nThe function DH_check() performs various checks on DH parameters. After fixing\nCVE-2023-3446 it was discovered that a large q parameter value can also trigger\nan overly long computation during some of these checks. A correct q value,\nif present, cannot be larger than the modulus p parameter, thus it is\nunnecessary to perform these checks if q is larger than p.\n\nAn application that calls DH_check() and supplies a key or parameters obtained\nfrom an untrusted source could be vulnerable to a Denial of Service attack.\n\nThe function DH_check() is itself called by a number of other OpenSSL functions.\nAn application calling any of those other functions may similarly be affected.\nThe other functions affected by this are DH_check_ex() and\nEVP_PKEY_param_check().\n\nAlso vulnerable are the OpenSSL dhparam and pkeyparam command line applications\nwhen using the "-check" option.\n\nThe OpenSSL SSL/TLS implementation is not affected by this issue.\n\nThe OpenSSL 3.0 and 3.1 FIPS providers are not affected by this issue.',
-              'diffID':        'sha256:ef842a515ae18ea3e9c7e3fd478d2eadde853c8b17b9b36805663b41ef119173',
-              'fixedVersions': [
-                '1.1.1v-r0'
-              ],
-              'installedVersion': '1.1.1n-r0',
-              'packageName':      'libcrypto1.1',
-              'purl':             'pkg:apk/alpine/libcrypto1.1@1.1.1n-r0?arch=s390x&distro=3.15.4',
-              'references':       [
-                'http://seclists.org/fulldisclosure/2023/Jul/43',
-                'http://www.openwall.com/lists/oss-security/2023/07/31/1',
-                'http://www.openwall.com/lists/oss-security/2023/09/22/11',
-                'http://www.openwall.com/lists/oss-security/2023/09/22/9',
-                'http://www.openwall.com/lists/oss-security/2023/11/06/2',
-                'https://access.redhat.com/errata/RHSA-2024:2447',
-                'https://access.redhat.com/security/cve/CVE-2023-3817',
-                'https://bugzilla.redhat.com/2223016',
-                'https://bugzilla.redhat.com/2224962',
-                'https://bugzilla.redhat.com/2227852',
-                'https://bugzilla.redhat.com/2248616',
-                'https://bugzilla.redhat.com/2257571',
-                'https://bugzilla.redhat.com/2258502',
-                'https://bugzilla.redhat.com/2259944',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2224962',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2227852',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2248616',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2270358',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3446',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3817',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-5678',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-2408',
-                'https://errata.almalinux.org/9/ALSA-2024-2447.html',
-                'https://errata.rockylinux.org/RLSA-2023:7877',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=6a1eb62c29db6cb5eec707f9338aee00f44e26f5',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=869ad69aadd985c7b8ca6f4e5dd0eb274c9f3644',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=9002fd07327a91f35ba6c1307e71fa6fd4409b7f',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=91ddeba0f2269b017dc06c46c993a788974b1aa5',
-                'https://linux.oracle.com/cve/CVE-2023-3817.html',
-                'https://linux.oracle.com/errata/ELSA-2024-2447.html',
-                'https://lists.debian.org/debian-lts-announce/2023/08/msg00019.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-3817',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://security.netapp.com/advisory/ntap-20230818-0014/',
-                'https://security.netapp.com/advisory/ntap-20231027-0008/',
-                'https://security.netapp.com/advisory/ntap-20240621-0006/',
-                'https://ubuntu.com/security/notices/USN-6435-1',
-                'https://ubuntu.com/security/notices/USN-6435-2',
-                'https://ubuntu.com/security/notices/USN-6450-1',
-                'https://ubuntu.com/security/notices/USN-6709-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-3817',
-                'https://www.openssl.org/news/secadv/20230731.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'OpenSSL: Excessive time spent checking DH q parameter value'
-            },
-            {
-              'cve':  'CVE-2023-5678',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L'
-                },
-                'redhat': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L'
-                }
-              },
-              'cwes': [
-                'CWE-606',
-                'CWE-754'
-              ],
-              'description':   "Issue summary: Generating excessively long X9.42 DH keys or checking\nexcessively long X9.42 DH keys or parameters may be very slow.\n\nImpact summary: Applications that use the functions DH_generate_key() to\ngenerate an X9.42 DH key may experience long delays.  Likewise, applications\nthat use DH_check_pub_key(), DH_check_pub_key_ex() or EVP_PKEY_public_check()\nto check an X9.42 DH key or X9.42 DH parameters may experience long delays.\nWhere the key or parameters that are being checked have been obtained from\nan untrusted source this may lead to a Denial of Service.\n\nWhile DH_check() performs all the necessary checks (as of CVE-2023-3817),\nDH_check_pub_key() doesn't make any of these checks, and is therefore\nvulnerable for excessively large P and Q parameters.\n\nLikewise, while DH_generate_key() performs a check for an excessively large\nP, it doesn't check for an excessively large Q.\n\nAn application that calls DH_generate_key() or DH_check_pub_key() and\nsupplies a key or parameters obtained from an untrusted source could be\nvulnerable to a Denial of Service attack.\n\nDH_generate_key() and DH_check_pub_key() are also called by a number of\nother OpenSSL functions.  An application calling any of those other\nfunctions may similarly be affected.  The other functions affected by this\nare DH_check_pub_key_ex(), EVP_PKEY_public_check(), and EVP_PKEY_generate().\n\nAlso vulnerable are the OpenSSL pkey command line application when using the\n\"-pubcheck\" option, as well as the OpenSSL genpkey command line application.\n\nThe OpenSSL SSL/TLS implementation is not affected by this issue.\n\nThe OpenSSL 3.0 and 3.1 FIPS providers are not affected by this issue.",
-              'diffID':        'sha256:ef842a515ae18ea3e9c7e3fd478d2eadde853c8b17b9b36805663b41ef119173',
-              'fixedVersions': [
-                '1.1.1w-r1'
-              ],
-              'installedVersion': '1.1.1n-r0',
-              'packageName':      'libcrypto1.1',
-              'purl':             'pkg:apk/alpine/libcrypto1.1@1.1.1n-r0?arch=s390x&distro=3.15.4',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2024/03/11/1',
-                'https://access.redhat.com/errata/RHSA-2024:2447',
-                'https://access.redhat.com/security/cve/CVE-2023-5678',
-                'https://bugzilla.redhat.com/2223016',
-                'https://bugzilla.redhat.com/2224962',
-                'https://bugzilla.redhat.com/2227852',
-                'https://bugzilla.redhat.com/2248616',
-                'https://bugzilla.redhat.com/2257571',
-                'https://bugzilla.redhat.com/2258502',
-                'https://bugzilla.redhat.com/2259944',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2224962',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2227852',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2248616',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2270358',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3446',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3817',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-5678',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-2408',
-                'https://errata.almalinux.org/9/ALSA-2024-2447.html',
-                'https://errata.rockylinux.org/RLSA-2023:7877',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=34efaef6c103d636ab507a0cc34dca4d3aecc055',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=710fee740904b6290fef0dd5536fbcedbc38ff0c',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=db925ae2e65d0d925adef429afc37f75bd1c2017',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=ddeb4b6c6d527e54ce9a99cba785c0f7776e54b6',
-                'https://linux.oracle.com/cve/CVE-2023-5678.html',
-                'https://linux.oracle.com/errata/ELSA-2024-2447.html',
-                'https://lists.debian.org/debian-lts-announce/2024/10/msg00033.html',
-                'https://lists.debian.org/debian-lts-announce/2024/11/msg00000.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-5678',
-                'https://security.netapp.com/advisory/ntap-20231130-0010/',
-                'https://ubuntu.com/security/notices/USN-6622-1',
-                'https://ubuntu.com/security/notices/USN-6632-1',
-                'https://ubuntu.com/security/notices/USN-6709-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-5678',
-                'https://www.openssl.org/news/secadv/20231106.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: Generating excessively long X9.42 DH keys or checking excessively long X9.42 DH keys or parameters may be very slow'
-            },
-            {
-              'cve':  'CVE-2022-4450',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'nvd': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-415'
-              ],
-              'description':   'The function PEM_read_bio_ex() reads a PEM file from a BIO and parses and\ndecodes the "name" (e.g. "CERTIFICATE"), any header data and the payload data.\nIf the function succeeds then the "name_out", "header" and "data" arguments are\npopulated with pointers to buffers containing the relevant decoded data. The\ncaller is responsible for freeing those buffers. It is possible to construct a\nPEM file that results in 0 bytes of payload data. In this case PEM_read_bio_ex()\nwill return a failure code but will populate the header argument with a pointer\nto a buffer that has already been freed. If the caller also frees this buffer\nthen a double free will occur. This will most likely lead to a crash. This\ncould be exploited by an attacker who has the ability to supply malicious PEM\nfiles for parsing to achieve a denial of service attack.\n\nThe functions PEM_read_bio() and PEM_read() are simple wrappers around\nPEM_read_bio_ex() and therefore these functions are also directly affected.\n\nThese functions are also called indirectly by a number of other OpenSSL\nfunctions including PEM_X509_INFO_read_bio_ex() and\nSSL_CTX_use_serverinfo_file() which are also vulnerable. Some OpenSSL internal\nuses of these functions are not vulnerable because the caller does not free the\nheader argument if PEM_read_bio_ex() returns a failure code. These locations\ninclude the PEM_read_bio_TYPE() functions as well as the decoders introduced in\nOpenSSL 3.0.\n\nThe OpenSSL asn1parse command line application is also impacted by this issue.',
-              'diffID':        'sha256:ef842a515ae18ea3e9c7e3fd478d2eadde853c8b17b9b36805663b41ef119173',
-              'fixedVersions': [
-                '1.1.1t-r0'
-              ],
-              'installedVersion': '1.1.1n-r0',
-              'packageName':      'libssl1.1',
-              'purl':             'pkg:apk/alpine/libssl1.1@1.1.1n-r0?arch=s390x&distro=3.15.4',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2023:2165',
-                'https://access.redhat.com/security/cve/CVE-2022-4450',
-                'https://bugzilla.redhat.com/1960321',
-                'https://bugzilla.redhat.com/2164440',
-                'https://bugzilla.redhat.com/2164487',
-                'https://bugzilla.redhat.com/2164492',
-                'https://bugzilla.redhat.com/2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144000',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144003',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144006',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144008',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144010',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144012',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144015',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144017',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144019',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2145170',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2158412',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164440',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164487',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164488',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164492',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164497',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164499',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164500',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4203',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4304',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4450',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0215',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0216',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0217',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0286',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0401',
-                'https://errata.almalinux.org/9/ALSA-2023-2165.html',
-                'https://errata.rockylinux.org/RLSA-2023:0946',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=63bcf189be73a9cc1264059bed6f57974be74a83',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=bbcf509bd046b34cca19c766bbddc31683d0858b',
-                'https://linux.oracle.com/cve/CVE-2022-4450.html',
-                'https://linux.oracle.com/errata/ELSA-2023-32791.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2022-4450',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0003',
-                'https://rustsec.org/advisories/RUSTSEC-2023-0010.html',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://ubuntu.com/security/notices/USN-5844-1',
-                'https://ubuntu.com/security/notices/USN-6564-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2022-4450',
-                'https://www.openssl.org/news/secadv/20230207.txt'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: double free after calling PEM_read_bio_ex'
-            },
-            {
-              'cve':  'CVE-2023-0215',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'nvd': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   'The public API function BIO_new_NDEF is a helper function used for streaming\nASN.1 data via a BIO. It is primarily used internally to OpenSSL to support the\nSMIME, CMS and PKCS7 streaming capabilities, but may also be called directly by\nend user applications.\n\nThe function receives a BIO from the caller, prepends a new BIO_f_asn1 filter\nBIO onto the front of it to form a BIO chain, and then returns the new head of\nthe BIO chain to the caller. Under certain conditions, for example if a CMS\nrecipient public key is invalid, the new filter BIO is freed and the function\nreturns a NULL result indicating a failure. However, in this case, the BIO chain\nis not properly cleaned up and the BIO passed by the caller still retains\ninternal pointers to the previously freed filter BIO. If the caller then goes on\nto call BIO_pop() on the BIO then a use-after-free will occur. This will most\nlikely result in a crash.\n\n\n\nThis scenario occurs directly in the internal function B64_write_ASN1() which\nmay cause BIO_new_NDEF() to be called and will subsequently call BIO_pop() on\nthe BIO. This internal function is in turn called by the public API functions\nPEM_write_bio_ASN1_stream, PEM_write_bio_CMS_stream, PEM_write_bio_PKCS7_stream,\nSMIME_write_ASN1, SMIME_write_CMS and SMIME_write_PKCS7.\n\nOther public API functions that may be impacted by this include\ni2d_ASN1_bio_stream, BIO_new_CMS, BIO_new_PKCS7, i2d_CMS_bio_stream and\ni2d_PKCS7_bio_stream.\n\nThe OpenSSL cms and smime command line applications are similarly affected.',
-              'diffID':        'sha256:ef842a515ae18ea3e9c7e3fd478d2eadde853c8b17b9b36805663b41ef119173',
-              'fixedVersions': [
-                '1.1.1t-r0'
-              ],
-              'installedVersion': '1.1.1n-r0',
-              'packageName':      'libssl1.1',
-              'purl':             'pkg:apk/alpine/libssl1.1@1.1.1n-r0?arch=s390x&distro=3.15.4',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2023:2165',
-                'https://access.redhat.com/security/cve/CVE-2023-0215',
-                'https://bugzilla.redhat.com/1960321',
-                'https://bugzilla.redhat.com/2164440',
-                'https://bugzilla.redhat.com/2164487',
-                'https://bugzilla.redhat.com/2164492',
-                'https://bugzilla.redhat.com/2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144000',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144003',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144006',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144008',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144010',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144012',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144015',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144017',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144019',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2145170',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2158412',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164440',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164487',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164488',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164492',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164497',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164499',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164500',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4203',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4304',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4450',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0215',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0216',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0217',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0286',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0401',
-                'https://errata.almalinux.org/9/ALSA-2023-2165.html',
-                'https://errata.rockylinux.org/RLSA-2023:0946',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=8818064ce3c3c0f1b740a5aaba2a987e75bfbafd',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=9816136fe31d92ace4037d5da5257f763aeeb4eb',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=c3829dd8825c654652201e16f8a0a0c46ee3f344',
-                'https://linux.oracle.com/cve/CVE-2023-0215.html',
-                'https://linux.oracle.com/errata/ELSA-2023-32791.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-0215',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0003',
-                'https://rustsec.org/advisories/RUSTSEC-2023-0009.html',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://security.netapp.com/advisory/ntap-20230427-0007',
-                'https://security.netapp.com/advisory/ntap-20230427-0007/',
-                'https://security.netapp.com/advisory/ntap-20230427-0009',
-                'https://security.netapp.com/advisory/ntap-20230427-0009/',
-                'https://security.netapp.com/advisory/ntap-20240621-0006',
-                'https://security.netapp.com/advisory/ntap-20240621-0006/',
-                'https://ubuntu.com/security/notices/USN-5844-1',
-                'https://ubuntu.com/security/notices/USN-5845-1',
-                'https://ubuntu.com/security/notices/USN-5845-2',
-                'https://ubuntu.com/security/notices/USN-6564-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-0215',
-                'https://www.openssl.org/news/secadv/20230207.txt'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: use-after-free following BIO_new_NDEF'
-            },
-            {
-              'cve':  'CVE-2023-0286',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '7.4',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H'
-                },
-                'nvd': {
-                  'v3score':  '7.4',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.4',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-843'
-              ],
-              'description':   'There is a type confusion vulnerability relating to X.400 address processing\ninside an X.509 GeneralName. X.400 addresses were parsed as an ASN1_STRING but\nthe public structure definition for GENERAL_NAME incorrectly specified the type\nof the x400Address field as ASN1_TYPE. This field is subsequently interpreted by\nthe OpenSSL function GENERAL_NAME_cmp as an ASN1_TYPE rather than an\nASN1_STRING.\n\nWhen CRL checking is enabled (i.e. the application sets the\nX509_V_FLAG_CRL_CHECK flag), this vulnerability may allow an attacker to pass\narbitrary pointers to a memcmp call, enabling them to read memory contents or\nenact a denial of service. In most cases, the attack requires the attacker to\nprovide both the certificate chain and CRL, neither of which need to have a\nvalid signature. If the attacker only controls one of these inputs, the other\ninput must already contain an X.400 address as a CRL distribution point, which\nis uncommon. As such, this vulnerability is most likely to only affect\napplications which have implemented their own functionality for retrieving CRLs\nover a network.',
-              'diffID':        'sha256:ef842a515ae18ea3e9c7e3fd478d2eadde853c8b17b9b36805663b41ef119173',
-              'fixedVersions': [
-                '1.1.1t-r0'
-              ],
-              'installedVersion': '1.1.1n-r0',
-              'packageName':      'libssl1.1',
-              'purl':             'pkg:apk/alpine/libssl1.1@1.1.1n-r0?arch=s390x&distro=3.15.4',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2025:7937',
-                'https://access.redhat.com/security/cve/CVE-2023-0286',
-                'https://access.redhat.com/security/cve/cve-2023-0286',
-                'https://bugzilla.redhat.com/2164440',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144000',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144003',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144006',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144008',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144010',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144012',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144015',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144017',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144019',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2145170',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2158412',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164440',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164487',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164488',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164492',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164497',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164499',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164500',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4203',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4304',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4450',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0215',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0216',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0217',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0286',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0401',
-                'https://errata.almalinux.org/9/ALSA-2025-7937.html',
-                'https://errata.rockylinux.org/RLSA-2023:0946',
-                'https://ftp.openbsd.org/pub/OpenBSD/LibreSSL/libressl-3.6.2-relnotes.txt',
-                'https://ftp.openbsd.org/pub/OpenBSD/patches/7.2/common/018_x509.patch.sig',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=2c6c9d439b484e1ba9830d8454a34fa4f80fdfe9',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=2f7530077e0ef79d98718138716bc51ca0cad658',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=fd2af07dc083a350c959147097003a14a5e8ac4d',
-                'https://github.com/pyca/cryptography',
-                'https://github.com/pyca/cryptography/security/advisories/GHSA-x4qr-2fvf-3mr5',
-                'https://linux.oracle.com/cve/CVE-2023-0286.html',
-                'https://linux.oracle.com/errata/ELSA-2025-7937.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-0286',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0003',
-                'https://rustsec.org/advisories/RUSTSEC-2023-0006.html',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://ubuntu.com/security/notices/USN-5844-1',
-                'https://ubuntu.com/security/notices/USN-5845-1',
-                'https://ubuntu.com/security/notices/USN-5845-2',
-                'https://ubuntu.com/security/notices/USN-6564-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-0286',
-                'https://www.openssl.org/news/secadv/20230207.txt'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: X.400 address type confusion in X.509 GeneralName'
-            },
-            {
-              'cve':  'CVE-2023-0464',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-295'
-              ],
-              'description':   "A security vulnerability has been identified in all supported versions\n\nof OpenSSL related to the verification of X.509 certificate chains\nthat include policy constraints.  Attackers may be able to exploit this\nvulnerability by creating a malicious certificate chain that triggers\nexponential use of computational resources, leading to a denial-of-service\n(DoS) attack on affected systems.\n\nPolicy processing is disabled by default but can be enabled by passing\nthe `-policy' argument to the command line utilities or by calling the\n`X509_VERIFY_PARAM_set1_policies()' function.",
-              'diffID':        'sha256:ef842a515ae18ea3e9c7e3fd478d2eadde853c8b17b9b36805663b41ef119173',
-              'fixedVersions': [
-                '1.1.1t-r2'
-              ],
-              'installedVersion': '1.1.1n-r0',
-              'packageName':      'libssl1.1',
-              'purl':             'pkg:apk/alpine/libssl1.1@1.1.1n-r0?arch=s390x&distro=3.15.4',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2023:3722',
-                'https://access.redhat.com/security/cve/CVE-2023-0464',
-                'https://bugzilla.redhat.com/2181082',
-                'https://bugzilla.redhat.com/2182561',
-                'https://bugzilla.redhat.com/2182565',
-                'https://bugzilla.redhat.com/2188461',
-                'https://bugzilla.redhat.com/2207947',
-                'https://errata.almalinux.org/9/ALSA-2023-3722.html',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=2017771e2db3e2b96f89bbe8766c3209f6a99545',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=2dcd4f1e3115f38cefa43e3efbe9b801c27e642e',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=879f7080d7e141f415c79eaa3a8ac4a3dad0348b',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=959c59c7a0164117e7f8366466a32bb1f8d77ff1',
-                'https://linux.oracle.com/cve/CVE-2023-0464.html',
-                'https://linux.oracle.com/errata/ELSA-2023-3722.html',
-                'https://lists.debian.org/debian-lts-announce/2023/06/msg00011.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-0464',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://security.netapp.com/advisory/ntap-20230406-0006/',
-                'https://security.netapp.com/advisory/ntap-20240621-0006/',
-                'https://ubuntu.com/security/notices/USN-6039-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.couchbase.com/alerts/',
-                'https://www.cve.org/CVERecord?id=CVE-2023-0464',
-                'https://www.debian.org/security/2023/dsa-5417',
-                'https://www.openssl.org/news/secadv/20230322.txt'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: Denial of service by excessive resource usage in verifying X509 policy constraints'
-            },
-            {
-              'cve':  'CVE-2022-2097',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N'
-                },
-                'nvd': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N'
-                },
-                'redhat': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-327'
-              ],
-              'description':   "AES OCB mode for 32-bit x86 platforms using the AES-NI assembly optimised implementation will not encrypt the entirety of the data under some circumstances. This could reveal sixteen bytes of data that was preexisting in the memory that wasn't written. In the special case of \"in place\" encryption, sixteen bytes of the plaintext would be revealed. Since OpenSSL does not support OCB based cipher suites for TLS and DTLS, they are both unaffected. Fixed in OpenSSL 3.0.5 (Affected 3.0.0-3.0.4). Fixed in OpenSSL 1.1.1q (Affected 1.1.1-1.1.1p).",
-              'diffID':        'sha256:ef842a515ae18ea3e9c7e3fd478d2eadde853c8b17b9b36805663b41ef119173',
-              'fixedVersions': [
-                '1.1.1q-r0'
-              ],
-              'installedVersion': '1.1.1n-r0',
-              'packageName':      'libssl1.1',
-              'purl':             'pkg:apk/alpine/libssl1.1@1.1.1n-r0?arch=s390x&distro=3.15.4',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2022:6224',
-                'https://access.redhat.com/security/cve/CVE-2022-2097',
-                'https://bugzilla.redhat.com/2081494',
-                'https://bugzilla.redhat.com/2087911',
-                'https://bugzilla.redhat.com/2087913',
-                'https://bugzilla.redhat.com/2097310',
-                'https://bugzilla.redhat.com/2104905',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2081494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2097310',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2100554',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2104905',
-                'https://cert-portal.siemens.com/productcert/pdf/ssa-332410.pdf',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-1292',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-2068',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-2097',
-                'https://errata.almalinux.org/9/ALSA-2022-6224.html',
-                'https://errata.rockylinux.org/RLSA-2022:5818',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=919925673d6c9cfed3c1085497f5dfbbed5fc431',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=a98f339ddd7e8f487d6e0088d4a9a42324885a93',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=919925673d6c9cfed3c1085497f5dfbbed5fc431',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=a98f339ddd7e8f487d6e0088d4a9a42324885a93',
-                'https://github.com/alexcrichton/openssl-src-rs',
-                'https://linux.oracle.com/cve/CVE-2022-2097.html',
-                'https://linux.oracle.com/errata/ELSA-2022-9955.html',
-                'https://lists.debian.org/debian-lts-announce/2023/02/msg00019.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/R6CK57NBQFTPUMXAPJURCGXUYT76NQAK',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/R6CK57NBQFTPUMXAPJURCGXUYT76NQAK/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/V6567JERRHHJW2GNGJGKDRNHR7SNPZK7',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/V6567JERRHHJW2GNGJGKDRNHR7SNPZK7/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VCMNWKERPBKOEBNL7CLTTX3ZZCZLH7XA',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VCMNWKERPBKOEBNL7CLTTX3ZZCZLH7XA/',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/R6CK57NBQFTPUMXAPJURCGXUYT76NQAK',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/R6CK57NBQFTPUMXAPJURCGXUYT76NQAK/',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/V6567JERRHHJW2GNGJGKDRNHR7SNPZK7',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/V6567JERRHHJW2GNGJGKDRNHR7SNPZK7/',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/VCMNWKERPBKOEBNL7CLTTX3ZZCZLH7XA',
-                'https://nvd.nist.gov/vuln/detail/CVE-2022-2097',
-                'https://rustsec.org/advisories/RUSTSEC-2022-0032.html',
-                'https://security.gentoo.org/glsa/202210-02',
-                'https://security.netapp.com/advisory/ntap-20220715-0011',
-                'https://security.netapp.com/advisory/ntap-20220715-0011/',
-                'https://security.netapp.com/advisory/ntap-20230420-0008',
-                'https://security.netapp.com/advisory/ntap-20230420-0008/',
-                'https://security.netapp.com/advisory/ntap-20240621-0006',
-                'https://security.netapp.com/advisory/ntap-20240621-0006/',
-                'https://ubuntu.com/security/notices/USN-5502-1',
-                'https://ubuntu.com/security/notices/USN-6457-1',
-                'https://www.cve.org/CVERecord?id=CVE-2022-2097',
-                'https://www.debian.org/security/2023/dsa-5343',
-                'https://www.openssl.org/news/secadv/20220705.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: AES OCB fails to encrypt some bytes'
-            },
-            {
-              'cve':  'CVE-2022-4304',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N'
-                },
-                'nvd': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N'
-                },
-                'redhat': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-203'
-              ],
-              'description':   'A timing based side channel exists in the OpenSSL RSA Decryption implementation\nwhich could be sufficient to recover a plaintext across a network in a\nBleichenbacher style attack. To achieve a successful decryption an attacker\nwould have to be able to send a very large number of trial messages for\ndecryption. The vulnerability affects all RSA padding modes: PKCS#1 v1.5,\nRSA-OEAP and RSASVE.\n\nFor example, in a TLS connection, RSA is commonly used by a client to send an\nencrypted pre-master secret to the server. An attacker that had observed a\ngenuine connection between a client and a server could use this flaw to send\ntrial messages to the server and record the time taken to process them. After a\nsufficiently large number of messages the attacker could recover the pre-master\nsecret used for the original connection and thus be able to decrypt the\napplication data sent over that connection.',
-              'diffID':        'sha256:ef842a515ae18ea3e9c7e3fd478d2eadde853c8b17b9b36805663b41ef119173',
-              'fixedVersions': [
-                '1.1.1t-r0'
-              ],
-              'installedVersion': '1.1.1n-r0',
-              'packageName':      'libssl1.1',
-              'purl':             'pkg:apk/alpine/libssl1.1@1.1.1n-r0?arch=s390x&distro=3.15.4',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2023:2165',
-                'https://access.redhat.com/security/cve/CVE-2022-4304',
-                'https://bugzilla.redhat.com/1960321',
-                'https://bugzilla.redhat.com/2164440',
-                'https://bugzilla.redhat.com/2164487',
-                'https://bugzilla.redhat.com/2164492',
-                'https://bugzilla.redhat.com/2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144000',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144003',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144006',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144008',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144010',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144012',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144015',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144017',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144019',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2145170',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2158412',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164440',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164487',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164488',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164492',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164497',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164499',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164500',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4203',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4304',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4450',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0215',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0216',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0217',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0286',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0401',
-                'https://errata.almalinux.org/9/ALSA-2023-2165.html',
-                'https://errata.rockylinux.org/RLSA-2023:0946',
-                'https://linux.oracle.com/cve/CVE-2022-4304.html',
-                'https://linux.oracle.com/errata/ELSA-2023-32791.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2022-4304',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0003',
-                'https://rustsec.org/advisories/RUSTSEC-2023-0007.html',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://ubuntu.com/security/notices/USN-5844-1',
-                'https://ubuntu.com/security/notices/USN-6564-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2022-4304',
-                'https://www.openssl.org/news/secadv/20230207.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: timing attack in RSA Decryption implementation'
-            },
-            {
-              'cve':  'CVE-2023-0465',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N'
-                },
-                'redhat': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-295'
-              ],
-              'description':   "Applications that use a non-default option when verifying certificates may be\nvulnerable to an attack from a malicious CA to circumvent certain checks.\n\nInvalid certificate policies in leaf certificates are silently ignored by\nOpenSSL and other certificate policy checks are skipped for that certificate.\nA malicious CA could use this to deliberately assert invalid certificate policies\nin order to circumvent policy checking on the certificate altogether.\n\nPolicy processing is disabled by default but can be enabled by passing\nthe `-policy' argument to the command line utilities or by calling the\n`X509_VERIFY_PARAM_set1_policies()' function.",
-              'diffID':        'sha256:ef842a515ae18ea3e9c7e3fd478d2eadde853c8b17b9b36805663b41ef119173',
-              'fixedVersions': [
-                '1.1.1t-r2'
-              ],
-              'installedVersion': '1.1.1n-r0',
-              'packageName':      'libssl1.1',
-              'purl':             'pkg:apk/alpine/libssl1.1@1.1.1n-r0?arch=s390x&distro=3.15.4',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2023:3722',
-                'https://access.redhat.com/security/cve/CVE-2023-0465',
-                'https://bugzilla.redhat.com/2181082',
-                'https://bugzilla.redhat.com/2182561',
-                'https://bugzilla.redhat.com/2182565',
-                'https://bugzilla.redhat.com/2188461',
-                'https://bugzilla.redhat.com/2207947',
-                'https://errata.almalinux.org/9/ALSA-2023-3722.html',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=10325176f3d3e98c6e2b3bf5ab1e3b334de6947a',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=1dd43e0709fece299b15208f36cc7c76209ba0bb',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=b013765abfa80036dc779dd0e50602c57bb3bf95',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=facfb1ab745646e97a1920977ae4a9965ea61d5c',
-                'https://linux.oracle.com/cve/CVE-2023-0465.html',
-                'https://linux.oracle.com/errata/ELSA-2023-3722.html',
-                'https://lists.debian.org/debian-lts-announce/2023/06/msg00011.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-0465',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://security.netapp.com/advisory/ntap-20230414-0001/',
-                'https://ubuntu.com/security/notices/USN-6039-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-0465',
-                'https://www.debian.org/security/2023/dsa-5417',
-                'https://www.openssl.org/news/secadv/20230328.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: Invalid certificate policies in leaf certificates are silently ignored'
-            },
-            {
-              'cve':  'CVE-2023-2650',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '6.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-770'
-              ],
-              'description':   "Issue summary: Processing some specially crafted ASN.1 object identifiers or\ndata containing them may be very slow.\n\nImpact summary: Applications that use OBJ_obj2txt() directly, or use any of\nthe OpenSSL subsystems OCSP, PKCS7/SMIME, CMS, CMP/CRMF or TS with no message\nsize limit may experience notable to very long delays when processing those\nmessages, which may lead to a Denial of Service.\n\nAn OBJECT IDENTIFIER is composed of a series of numbers - sub-identifiers -\nmost of which have no size limit.  OBJ_obj2txt() may be used to translate\nan ASN.1 OBJECT IDENTIFIER given in DER encoding form (using the OpenSSL\ntype ASN1_OBJECT) to its canonical numeric text form, which are the\nsub-identifiers of the OBJECT IDENTIFIER in decimal form, separated by\nperiods.\n\nWhen one of the sub-identifiers in the OBJECT IDENTIFIER is very large\n(these are sizes that are seen as absurdly large, taking up tens or hundreds\nof KiBs), the translation to a decimal number in text may take a very long\ntime.  The time complexity is O(n^2) with 'n' being the size of the\nsub-identifiers in bytes (*).\n\nWith OpenSSL 3.0, support to fetch cryptographic algorithms using names /\nidentifiers in string form was introduced.  This includes using OBJECT\nIDENTIFIERs in canonical numeric text form as identifiers for fetching\nalgorithms.\n\nSuch OBJECT IDENTIFIERs may be received through the ASN.1 structure\nAlgorithmIdentifier, which is commonly used in multiple protocols to specify\nwhat cryptographic algorithm should be used to sign or verify, encrypt or\ndecrypt, or digest passed data.\n\nApplications that call OBJ_obj2txt() directly with untrusted data are\naffected, with any version of OpenSSL.  If the use is for the mere purpose\nof display, the severity is considered low.\n\nIn OpenSSL 3.0 and newer, this affects the subsystems OCSP, PKCS7/SMIME,\nCMS, CMP/CRMF or TS.  It also impacts anything that processes X.509\ncertificates, including simple things like verifying its signature.\n\nThe impact on TLS is relatively low, because all versions of OpenSSL have a\n100KiB limit on the peer's certificate chain.  Additionally, this only\nimpacts clients, or servers that have explicitly enabled client\nauthentication.\n\nIn OpenSSL 1.1.1 and 1.0.2, this only affects displaying diverse objects,\nsuch as X.509 certificates.  This is assumed to not happen in such a way\nthat it would cause a Denial of Service, so these versions are considered\nnot affected by this issue in such a way that it would be cause for concern,\nand the severity is therefore considered low.",
-              'diffID':        'sha256:ef842a515ae18ea3e9c7e3fd478d2eadde853c8b17b9b36805663b41ef119173',
-              'fixedVersions': [
-                '1.1.1u-r0'
-              ],
-              'installedVersion': '1.1.1n-r0',
-              'packageName':      'libssl1.1',
-              'purl':             'pkg:apk/alpine/libssl1.1@1.1.1n-r0?arch=s390x&distro=3.15.4',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2023/05/30/1',
-                'https://access.redhat.com/errata/RHSA-2023:6330',
-                'https://access.redhat.com/security/cve/CVE-2023-2650',
-                'https://bugzilla.redhat.com/1858038',
-                'https://bugzilla.redhat.com/2207947',
-                'https://errata.almalinux.org/9/ALSA-2023-6330.html',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=423a2bc737a908ad0c77bda470b2b59dc879936b',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=853c5e56ee0b8650c73140816bb8b91d6163422c',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=9e209944b35cf82368071f160a744b6178f9b098',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=db779b0e10b047f2585615e0b8f2acdf21f8544a',
-                'https://linux.oracle.com/cve/CVE-2023-2650.html',
-                'https://linux.oracle.com/errata/ELSA-2023-6330.html',
-                'https://lists.debian.org/debian-lts-announce/2023/06/msg00011.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-2650',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0009',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://security.netapp.com/advisory/ntap-20230703-0001/',
-                'https://security.netapp.com/advisory/ntap-20231027-0009/',
-                'https://ubuntu.com/security/notices/USN-6119-1',
-                'https://ubuntu.com/security/notices/USN-6188-1',
-                'https://ubuntu.com/security/notices/USN-6672-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-2650',
-                'https://www.debian.org/security/2023/dsa-5417',
-                'https://www.openssl.org/news/secadv/20230530.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: Possible DoS translating ASN.1 object identifiers'
-            },
-            {
-              'cve':  'CVE-2023-3446',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L'
-                },
-                'redhat': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L'
-                }
-              },
-              'cwes': [
-                'CWE-606',
-                'CWE-1333'
-              ],
-              'description':   "Issue summary: Checking excessively long DH keys or parameters may be very slow.\n\nImpact summary: Applications that use the functions DH_check(), DH_check_ex()\nor EVP_PKEY_param_check() to check a DH key or DH parameters may experience long\ndelays. Where the key or parameters that are being checked have been obtained\nfrom an untrusted source this may lead to a Denial of Service.\n\nThe function DH_check() performs various checks on DH parameters. One of those\nchecks confirms that the modulus ('p' parameter) is not too large. Trying to use\na very large modulus is slow and OpenSSL will not normally use a modulus which\nis over 10,000 bits in length.\n\nHowever the DH_check() function checks numerous aspects of the key or parameters\nthat have been supplied. Some of those checks use the supplied modulus value\neven if it has already been found to be too large.\n\nAn application that calls DH_check() and supplies a key or parameters obtained\nfrom an untrusted source could be vulernable to a Denial of Service attack.\n\nThe function DH_check() is itself called by a number of other OpenSSL functions.\nAn application calling any of those other functions may similarly be affected.\nThe other functions affected by this are DH_check_ex() and\nEVP_PKEY_param_check().\n\nAlso vulnerable are the OpenSSL dhparam and pkeyparam command line applications\nwhen using the '-check' option.\n\nThe OpenSSL SSL/TLS implementation is not affected by this issue.\nThe OpenSSL 3.0 and 3.1 FIPS providers are not affected by this issue.",
-              'diffID':        'sha256:ef842a515ae18ea3e9c7e3fd478d2eadde853c8b17b9b36805663b41ef119173',
-              'fixedVersions': [
-                '1.1.1u-r2'
-              ],
-              'installedVersion': '1.1.1n-r0',
-              'packageName':      'libssl1.1',
-              'purl':             'pkg:apk/alpine/libssl1.1@1.1.1n-r0?arch=s390x&distro=3.15.4',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2023/07/19/4',
-                'http://www.openwall.com/lists/oss-security/2023/07/19/5',
-                'http://www.openwall.com/lists/oss-security/2023/07/19/6',
-                'http://www.openwall.com/lists/oss-security/2023/07/31/1',
-                'http://www.openwall.com/lists/oss-security/2024/05/16/1',
-                'https://access.redhat.com/errata/RHSA-2024:2447',
-                'https://access.redhat.com/security/cve/CVE-2023-3446',
-                'https://bugzilla.redhat.com/2223016',
-                'https://bugzilla.redhat.com/2224962',
-                'https://bugzilla.redhat.com/2227852',
-                'https://bugzilla.redhat.com/2248616',
-                'https://bugzilla.redhat.com/2257571',
-                'https://bugzilla.redhat.com/2258502',
-                'https://bugzilla.redhat.com/2259944',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2224962',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2257582',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2257583',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2258677',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2258688',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2258691',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2258694',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2258700',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-36763',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-36764',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3446',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45229',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45231',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45232',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45233',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45235',
-                'https://errata.almalinux.org/9/ALSA-2024-2447.html',
-                'https://errata.rockylinux.org/RLSA-2024:2264',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=1fa20cf2f506113c761777127a38bce5068740eb',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=8780a896543a654e757db1b9396383f9d8095528',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=9a0a4d3c1e7138915563c0df4fe6a3f9377b839c',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=fc9867c1e03c22ebf56943be205202e576aabf23',
-                'https://linux.oracle.com/cve/CVE-2023-3446.html',
-                'https://linux.oracle.com/errata/ELSA-2024-2447.html',
-                'https://lists.debian.org/debian-lts-announce/2023/08/msg00019.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-3446',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://security.netapp.com/advisory/ntap-20230803-0011/',
-                'https://ubuntu.com/security/notices/USN-6435-1',
-                'https://ubuntu.com/security/notices/USN-6435-2',
-                'https://ubuntu.com/security/notices/USN-6450-1',
-                'https://ubuntu.com/security/notices/USN-6709-1',
-                'https://ubuntu.com/security/notices/USN-7018-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-3446',
-                'https://www.openssl.org/news/secadv/20230719.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: Excessive time spent checking DH keys and parameters'
-            },
-            {
-              'cve':  'CVE-2023-3817',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L'
-                },
-                'redhat': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L'
-                }
-              },
-              'cwes': [
-                'CWE-606',
-                'CWE-834'
-              ],
-              'description':   'Issue summary: Checking excessively long DH keys or parameters may be very slow.\n\nImpact summary: Applications that use the functions DH_check(), DH_check_ex()\nor EVP_PKEY_param_check() to check a DH key or DH parameters may experience long\ndelays. Where the key or parameters that are being checked have been obtained\nfrom an untrusted source this may lead to a Denial of Service.\n\nThe function DH_check() performs various checks on DH parameters. After fixing\nCVE-2023-3446 it was discovered that a large q parameter value can also trigger\nan overly long computation during some of these checks. A correct q value,\nif present, cannot be larger than the modulus p parameter, thus it is\nunnecessary to perform these checks if q is larger than p.\n\nAn application that calls DH_check() and supplies a key or parameters obtained\nfrom an untrusted source could be vulnerable to a Denial of Service attack.\n\nThe function DH_check() is itself called by a number of other OpenSSL functions.\nAn application calling any of those other functions may similarly be affected.\nThe other functions affected by this are DH_check_ex() and\nEVP_PKEY_param_check().\n\nAlso vulnerable are the OpenSSL dhparam and pkeyparam command line applications\nwhen using the "-check" option.\n\nThe OpenSSL SSL/TLS implementation is not affected by this issue.\n\nThe OpenSSL 3.0 and 3.1 FIPS providers are not affected by this issue.',
-              'diffID':        'sha256:ef842a515ae18ea3e9c7e3fd478d2eadde853c8b17b9b36805663b41ef119173',
-              'fixedVersions': [
-                '1.1.1v-r0'
-              ],
-              'installedVersion': '1.1.1n-r0',
-              'packageName':      'libssl1.1',
-              'purl':             'pkg:apk/alpine/libssl1.1@1.1.1n-r0?arch=s390x&distro=3.15.4',
-              'references':       [
-                'http://seclists.org/fulldisclosure/2023/Jul/43',
-                'http://www.openwall.com/lists/oss-security/2023/07/31/1',
-                'http://www.openwall.com/lists/oss-security/2023/09/22/11',
-                'http://www.openwall.com/lists/oss-security/2023/09/22/9',
-                'http://www.openwall.com/lists/oss-security/2023/11/06/2',
-                'https://access.redhat.com/errata/RHSA-2024:2447',
-                'https://access.redhat.com/security/cve/CVE-2023-3817',
-                'https://bugzilla.redhat.com/2223016',
-                'https://bugzilla.redhat.com/2224962',
-                'https://bugzilla.redhat.com/2227852',
-                'https://bugzilla.redhat.com/2248616',
-                'https://bugzilla.redhat.com/2257571',
-                'https://bugzilla.redhat.com/2258502',
-                'https://bugzilla.redhat.com/2259944',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2224962',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2227852',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2248616',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2270358',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3446',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3817',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-5678',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-2408',
-                'https://errata.almalinux.org/9/ALSA-2024-2447.html',
-                'https://errata.rockylinux.org/RLSA-2023:7877',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=6a1eb62c29db6cb5eec707f9338aee00f44e26f5',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=869ad69aadd985c7b8ca6f4e5dd0eb274c9f3644',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=9002fd07327a91f35ba6c1307e71fa6fd4409b7f',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=91ddeba0f2269b017dc06c46c993a788974b1aa5',
-                'https://linux.oracle.com/cve/CVE-2023-3817.html',
-                'https://linux.oracle.com/errata/ELSA-2024-2447.html',
-                'https://lists.debian.org/debian-lts-announce/2023/08/msg00019.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-3817',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://security.netapp.com/advisory/ntap-20230818-0014/',
-                'https://security.netapp.com/advisory/ntap-20231027-0008/',
-                'https://security.netapp.com/advisory/ntap-20240621-0006/',
-                'https://ubuntu.com/security/notices/USN-6435-1',
-                'https://ubuntu.com/security/notices/USN-6435-2',
-                'https://ubuntu.com/security/notices/USN-6450-1',
-                'https://ubuntu.com/security/notices/USN-6709-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-3817',
-                'https://www.openssl.org/news/secadv/20230731.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'OpenSSL: Excessive time spent checking DH q parameter value'
-            },
-            {
-              'cve':  'CVE-2023-5678',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L'
-                },
-                'redhat': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L'
-                }
-              },
-              'cwes': [
-                'CWE-606',
-                'CWE-754'
-              ],
-              'description':   "Issue summary: Generating excessively long X9.42 DH keys or checking\nexcessively long X9.42 DH keys or parameters may be very slow.\n\nImpact summary: Applications that use the functions DH_generate_key() to\ngenerate an X9.42 DH key may experience long delays.  Likewise, applications\nthat use DH_check_pub_key(), DH_check_pub_key_ex() or EVP_PKEY_public_check()\nto check an X9.42 DH key or X9.42 DH parameters may experience long delays.\nWhere the key or parameters that are being checked have been obtained from\nan untrusted source this may lead to a Denial of Service.\n\nWhile DH_check() performs all the necessary checks (as of CVE-2023-3817),\nDH_check_pub_key() doesn't make any of these checks, and is therefore\nvulnerable for excessively large P and Q parameters.\n\nLikewise, while DH_generate_key() performs a check for an excessively large\nP, it doesn't check for an excessively large Q.\n\nAn application that calls DH_generate_key() or DH_check_pub_key() and\nsupplies a key or parameters obtained from an untrusted source could be\nvulnerable to a Denial of Service attack.\n\nDH_generate_key() and DH_check_pub_key() are also called by a number of\nother OpenSSL functions.  An application calling any of those other\nfunctions may similarly be affected.  The other functions affected by this\nare DH_check_pub_key_ex(), EVP_PKEY_public_check(), and EVP_PKEY_generate().\n\nAlso vulnerable are the OpenSSL pkey command line application when using the\n\"-pubcheck\" option, as well as the OpenSSL genpkey command line application.\n\nThe OpenSSL SSL/TLS implementation is not affected by this issue.\n\nThe OpenSSL 3.0 and 3.1 FIPS providers are not affected by this issue.",
-              'diffID':        'sha256:ef842a515ae18ea3e9c7e3fd478d2eadde853c8b17b9b36805663b41ef119173',
-              'fixedVersions': [
-                '1.1.1w-r1'
-              ],
-              'installedVersion': '1.1.1n-r0',
-              'packageName':      'libssl1.1',
-              'purl':             'pkg:apk/alpine/libssl1.1@1.1.1n-r0?arch=s390x&distro=3.15.4',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2024/03/11/1',
-                'https://access.redhat.com/errata/RHSA-2024:2447',
-                'https://access.redhat.com/security/cve/CVE-2023-5678',
-                'https://bugzilla.redhat.com/2223016',
-                'https://bugzilla.redhat.com/2224962',
-                'https://bugzilla.redhat.com/2227852',
-                'https://bugzilla.redhat.com/2248616',
-                'https://bugzilla.redhat.com/2257571',
-                'https://bugzilla.redhat.com/2258502',
-                'https://bugzilla.redhat.com/2259944',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2224962',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2227852',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2248616',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2270358',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3446',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3817',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-5678',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-2408',
-                'https://errata.almalinux.org/9/ALSA-2024-2447.html',
-                'https://errata.rockylinux.org/RLSA-2023:7877',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=34efaef6c103d636ab507a0cc34dca4d3aecc055',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=710fee740904b6290fef0dd5536fbcedbc38ff0c',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=db925ae2e65d0d925adef429afc37f75bd1c2017',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=ddeb4b6c6d527e54ce9a99cba785c0f7776e54b6',
-                'https://linux.oracle.com/cve/CVE-2023-5678.html',
-                'https://linux.oracle.com/errata/ELSA-2024-2447.html',
-                'https://lists.debian.org/debian-lts-announce/2024/10/msg00033.html',
-                'https://lists.debian.org/debian-lts-announce/2024/11/msg00000.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-5678',
-                'https://security.netapp.com/advisory/ntap-20231130-0010/',
-                'https://ubuntu.com/security/notices/USN-6622-1',
-                'https://ubuntu.com/security/notices/USN-6632-1',
-                'https://ubuntu.com/security/notices/USN-6709-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-5678',
-                'https://www.openssl.org/news/secadv/20231106.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: Generating excessively long X9.42 DH keys or checking excessively long X9.42 DH keys or parameters may be very slow'
-            },
-            {
-              'cve':  'CVE-2022-37434',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '9.8',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-787',
-                'CWE-120'
-              ],
-              'description':   'zlib through 1.2.12 has a heap-based buffer over-read or buffer overflow in inflate in inflate.c via a large gzip header extra field. NOTE: only applications that call inflateGetHeader are affected. Some common applications bundle the affected zlib source code but may be unable to call inflateGetHeader (e.g., see the nodejs/node reference).',
-              'diffID':        'sha256:ef842a515ae18ea3e9c7e3fd478d2eadde853c8b17b9b36805663b41ef119173',
-              'fixedVersions': [
-                '1.2.12-r2'
-              ],
-              'installedVersion': '1.2.12-r0',
-              'packageName':      'zlib',
-              'purl':             'pkg:apk/alpine/zlib@1.2.12-r0?arch=s390x&distro=3.15.4',
-              'references':       [
-                'http://seclists.org/fulldisclosure/2022/Oct/37',
-                'http://seclists.org/fulldisclosure/2022/Oct/38',
-                'http://seclists.org/fulldisclosure/2022/Oct/41',
-                'http://seclists.org/fulldisclosure/2022/Oct/42',
-                'http://www.openwall.com/lists/oss-security/2022/08/05/2',
-                'http://www.openwall.com/lists/oss-security/2022/08/09/1',
-                'https://access.redhat.com/errata/RHSA-2022:8291',
-                'https://access.redhat.com/security/cve/CVE-2022-37434',
-                'https://bugzilla.redhat.com/2116639',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2053198',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2077431',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2081296',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2116639',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-37434',
-                'https://errata.almalinux.org/9/ALSA-2022-8291.html',
-                'https://errata.rockylinux.org/RLSA-2022:8291',
-                'https://github.com/curl/curl/issues/9271',
-                'https://github.com/ivd38/zlib_overflow',
-                'https://github.com/madler/zlib/blob/21767c654d31d2dccdde4330529775c6c5fd5389/zlib.h#L1062-L1063',
-                'https://github.com/madler/zlib/commit/1eb7682f845ac9e9bf9ae35bbfb3bad5dacbd91d',
-                'https://github.com/madler/zlib/commit/eff308af425b67093bab25f80f1ae950166bece1',
-                'https://github.com/nodejs/node/blob/75b68c6e4db515f76df73af476eccf382bbcb00a/deps/zlib/inflate.c#L762-L764',
-                'https://linux.oracle.com/cve/CVE-2022-37434.html',
-                'https://linux.oracle.com/errata/ELSA-2023-1095.html',
-                'https://lists.debian.org/debian-lts-announce/2022/09/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JWN4VE3JQR4O2SOUS5TXNLANRPMHWV4I/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NMBOJ77A7T7PQCARMDUK75TE6LLESZ3O/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PAVPQNCG3XRLCLNSQRM3KAN5ZFMVXVTY/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/X5U7OTKZSHY2I3ZFJSR2SHFHW72RKGDK/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YRQAI7H4M4RQZ2IWZUEEXECBE5D56BH2/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2022-37434',
-                'https://security.netapp.com/advisory/ntap-20220901-0005/',
-                'https://security.netapp.com/advisory/ntap-20230427-0007/',
-                'https://support.apple.com/kb/HT213488',
-                'https://support.apple.com/kb/HT213489',
-                'https://support.apple.com/kb/HT213490',
-                'https://support.apple.com/kb/HT213491',
-                'https://support.apple.com/kb/HT213493',
-                'https://support.apple.com/kb/HT213494',
-                'https://ubuntu.com/security/notices/USN-5570-1',
-                'https://ubuntu.com/security/notices/USN-5570-2',
-                'https://ubuntu.com/security/notices/USN-5573-1',
-                'https://ubuntu.com/security/notices/USN-6736-1',
-                'https://ubuntu.com/security/notices/USN-6736-2',
-                'https://www.cve.org/CVERecord?id=CVE-2022-37434',
-                'https://www.debian.org/security/2022/dsa-5218'
-              ],
-              'severity':   'CRITICAL',
-              'suppressed': false,
-              'title':      'zlib: heap-based buffer over-read and overflow in inflate() in inflate.c via a large gzip header extra field'
-            }
-          ]
-        }
-      ],
-      'summary': {
-        'critical':   1,
-        'high':       8,
-        'low':        0,
-        'medium':     14,
-        'suppressed': 0,
-        'unknown':    0
-      }
-    }
-  },
-  {
-    'id':    'default/2f269949a2004621775541cd579122c59e007b2f96d1f2f3a78f7976e83b9007',
-    'type':  'storage.sbomscanner.kubewarden.io.vulnerabilityreport',
-    'links': {
-      'patch':  'https://localhost:8005/v1/storage.sbomscanner.kubewarden.io.vulnerabilityreports/default/2f269949a2004621775541cd579122c59e007b2f96d1f2f3a78f7976e83b9007',
-      'remove': 'https://localhost:8005/v1/storage.sbomscanner.kubewarden.io.vulnerabilityreports/default/2f269949a2004621775541cd579122c59e007b2f96d1f2f3a78f7976e83b9007',
-      'self':   'https://localhost:8005/v1/storage.sbomscanner.kubewarden.io.vulnerabilityreports/default/2f269949a2004621775541cd579122c59e007b2f96d1f2f3a78f7976e83b9007',
-      'update': 'https://localhost:8005/v1/storage.sbomscanner.kubewarden.io.vulnerabilityreports/default/2f269949a2004621775541cd579122c59e007b2f96d1f2f3a78f7976e83b9007',
-      'view':   'https://localhost:8005/apis/storage.sbomscanner.kubewarden.io/v1alpha1/namespaces/default/vulnerabilityreports/2f269949a2004621775541cd579122c59e007b2f96d1f2f3a78f7976e83b9007'
-    },
-    'apiVersion':    'storage.sbomscanner.kubewarden.io/v1alpha1',
-    'imageMetadata': {
-      'digest':      'sha256:d22cb65d578ea325347d7a6e5645998c3e7310f57504368df2a1a8f4337d1ed6',
-      'platform':    'linux/amd64',
-      'registry':    'demo-02',
-      'registryURI': 'ghcr.io',
-      'repository':  'linuxcontainers/alpine',
-      'tag':         '3'
-    },
-    'kind':     'VulnerabilityReport',
-    'metadata': {
-      'creationTimestamp': '2026-01-09T22:46:46Z',
-      'fields':            [
-        '2f269949a2004621775541cd579122c59e007b2f96d1f2f3a78f7976e83b9007',
-        'ghcr.io/linuxcontainers/alpine:3',
-        'linux/amd64',
-        '32 (0 suppressed)'
-      ],
-      'labels': {
-        'app.kubernetes.io/managed-by':          'sbomscanner',
-        'app.kubernetes.io/part-of':             'sbomscanner',
-        'sbomscanner.kubewarden.io/scanjob-uid': '42184d01-4b15-466f-98aa-e802d1b6b6b8'
-      },
-      'name':            '2f269949a2004621775541cd579122c59e007b2f96d1f2f3a78f7976e83b9007',
-      'namespace':       'default',
-      'ownerReferences': [
-        {
-          'apiVersion':         'storage.sbomscanner.kubewarden.io/v1alpha1',
-          'blockOwnerDeletion': true,
-          'controller':         true,
-          'kind':               'SBOM',
-          'name':               '2f269949a2004621775541cd579122c59e007b2f96d1f2f3a78f7976e83b9007',
-          'uid':                '6615e507-005c-4650-9983-15855aa14005'
-        }
-      ],
-      'relationships': [
-        {
-          'fromId':   'default/2f269949a2004621775541cd579122c59e007b2f96d1f2f3a78f7976e83b9007',
-          'fromType': 'storage.sbomscanner.kubewarden.io.sbom',
-          'rel':      'owner',
-          'state':    'active',
-          'message':  'Resource is current'
-        }
-      ],
-      'resourceVersion': '4',
-      'state':           {
-        'error':         false,
-        'message':       'Resource is current',
-        'name':          'active',
-        'transitioning': false
-      },
-      'uid': 'e60b7fc9-bccd-4e01-87db-aa3f6e5c6f21'
-    },
-    'report': {
-      'results': [
-        {
-          'class':           'os-pkgs',
-          'target':          '/var/run/worker/trivy.sbom.1652885280.json (alpine 3.20.6)',
-          'type':            'alpine',
-          'vulnerabilities': [
-            {
-              'cve':  'CVE-2024-58251',
-              'cwes': [
-                'CWE-150'
-              ],
-              'description':   'In netstat in BusyBox through 1.37.0, local users can launch of network application with an argv[0] containing an ANSI terminal escape sequence, leading to a denial of service (terminal locked up) when netstat is used by a victim.',
-              'diffID':        'sha256:994456c4fd7b2b87346a81961efb4ce945a39592d32e0762b38768bca7c7d085',
-              'fixedVersions': [
-                '1.36.1-r31'
-              ],
-              'installedVersion': '1.36.1-r29',
-              'packageName':      'busybox',
-              'purl':             'pkg:apk/alpine/busybox@1.36.1-r29?arch=x86_64&distro=3.20.6',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2025/04/23/6',
-                'https://bugs.busybox.net/show_bug.cgi?id=15922',
-                'https://www.busybox.net',
-                'https://www.busybox.net/downloads/',
-                'https://www.cve.org/CVERecord?id=CVE-2024-58251'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'In netstat in BusyBox through 1.37.0, local users can launch of networ ...'
-            },
-            {
-              'cve':  'CVE-2025-46394',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '3.3',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-451'
-              ],
-              'description':   'In tar in BusyBox through 1.37.0, a TAR archive can have filenames hidden from a listing through the use of terminal escape sequences.',
-              'diffID':        'sha256:994456c4fd7b2b87346a81961efb4ce945a39592d32e0762b38768bca7c7d085',
-              'fixedVersions': [
-                '1.36.1-r31'
-              ],
-              'installedVersion': '1.36.1-r29',
-              'packageName':      'busybox',
-              'purl':             'pkg:apk/alpine/busybox@1.36.1-r29?arch=x86_64&distro=3.20.6',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2025/04/23/5',
-                'http://www.openwall.com/lists/oss-security/2025/04/24/3',
-                'https://bugs.busybox.net/show_bug.cgi?id=16018',
-                'https://lists.busybox.net/pipermail/busybox/2024-July/090806.html',
-                'https://lists.busybox.net/pipermail/busybox/2024-July/090814.html',
-                'https://www.busybox.net',
-                'https://www.busybox.net/downloads/',
-                'https://www.cve.org/CVERecord?id=CVE-2025-46394',
-                'https://www.openwall.com/lists/oss-security/2025/04/23/1'
-              ],
-              'severity':   'LOW',
-              'suppressed': false,
-              'title':      'In tar in BusyBox through 1.37.0, a TAR archive can have filenames hid ...'
-            },
-            {
-              'cve':  'CVE-2024-58251',
-              'cwes': [
-                'CWE-150'
-              ],
-              'description':   'In netstat in BusyBox through 1.37.0, local users can launch of network application with an argv[0] containing an ANSI terminal escape sequence, leading to a denial of service (terminal locked up) when netstat is used by a victim.',
-              'diffID':        'sha256:994456c4fd7b2b87346a81961efb4ce945a39592d32e0762b38768bca7c7d085',
-              'fixedVersions': [
-                '1.36.1-r31'
-              ],
-              'installedVersion': '1.36.1-r29',
-              'packageName':      'busybox-binsh',
-              'purl':             'pkg:apk/alpine/busybox-binsh@1.36.1-r29?arch=x86_64&distro=3.20.6',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2025/04/23/6',
-                'https://bugs.busybox.net/show_bug.cgi?id=15922',
-                'https://www.busybox.net',
-                'https://www.busybox.net/downloads/',
-                'https://www.cve.org/CVERecord?id=CVE-2024-58251'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'In netstat in BusyBox through 1.37.0, local users can launch of networ ...'
-            },
-            {
-              'cve':  'CVE-2025-46394',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '3.3',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-451'
-              ],
-              'description':   'In tar in BusyBox through 1.37.0, a TAR archive can have filenames hidden from a listing through the use of terminal escape sequences.',
-              'diffID':        'sha256:994456c4fd7b2b87346a81961efb4ce945a39592d32e0762b38768bca7c7d085',
-              'fixedVersions': [
-                '1.36.1-r31'
-              ],
-              'installedVersion': '1.36.1-r29',
-              'packageName':      'busybox-binsh',
-              'purl':             'pkg:apk/alpine/busybox-binsh@1.36.1-r29?arch=x86_64&distro=3.20.6',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2025/04/23/5',
-                'http://www.openwall.com/lists/oss-security/2025/04/24/3',
-                'https://bugs.busybox.net/show_bug.cgi?id=16018',
-                'https://lists.busybox.net/pipermail/busybox/2024-July/090806.html',
-                'https://lists.busybox.net/pipermail/busybox/2024-July/090814.html',
-                'https://www.busybox.net',
-                'https://www.busybox.net/downloads/',
-                'https://www.cve.org/CVERecord?id=CVE-2025-46394',
-                'https://www.openwall.com/lists/oss-security/2025/04/23/1'
-              ],
-              'severity':   'LOW',
-              'suppressed': false,
-              'title':      'In tar in BusyBox through 1.37.0, a TAR archive can have filenames hid ...'
-            },
-            {
-              'cve':  'CVE-2025-15467',
-              'cvss': {
-                'redhat': {
-                  'v3score':  '9.8',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-787'
-              ],
-              'description':   'Issue summary: Parsing CMS AuthEnvelopedData message with maliciously\ncrafted AEAD parameters can trigger a stack buffer overflow.\n\nImpact summary: A stack buffer overflow may lead to a crash, causing Denial\nof Service, or potentially remote code execution.\n\nWhen parsing CMS AuthEnvelopedData structures that use AEAD ciphers such as\nAES-GCM, the IV (Initialization Vector) encoded in the ASN.1 parameters is\ncopied into a fixed-size stack buffer without verifying that its length fits\nthe destination. An attacker can supply a crafted CMS message with an\noversized IV, causing a stack-based out-of-bounds write before any\nauthentication or tag verification occurs.\n\nApplications and services that parse untrusted CMS or PKCS#7 content using\nAEAD ciphers (e.g., S/MIME AuthEnvelopedData with AES-GCM) are vulnerable.\nBecause the overflow occurs prior to authentication, no valid key material\nis required to trigger it. While exploitability to remote code execution\ndepends on platform and toolchain mitigations, the stack-based write\nprimitive represents a severe risk.\n\nThe FIPS modules in 3.6, 3.5, 3.4, 3.3 and 3.0 are not affected by this\nissue, as the CMS implementation is outside the OpenSSL FIPS module\nboundary.\n\nOpenSSL 3.6, 3.5, 3.4, 3.3 and 3.0 are vulnerable to this issue.\n\nOpenSSL 1.1.1 and 1.0.2 are not affected by this issue.',
-              'diffID':        'sha256:994456c4fd7b2b87346a81961efb4ce945a39592d32e0762b38768bca7c7d085',
-              'fixedVersions': [
-                '3.3.6-r0'
-              ],
-              'installedVersion': '3.3.3-r0',
-              'packageName':      'libcrypto3',
-              'purl':             'pkg:apk/alpine/libcrypto3@3.3.3-r0?arch=x86_64&distro=3.20.6',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2026/01/27/10',
-                'https://access.redhat.com/security/cve/CVE-2025-15467',
-                'https://github.com/openssl/openssl/commit/2c8f0e5fa9b6ee5508a0349e4572ddb74db5a703',
-                'https://github.com/openssl/openssl/commit/5f26d4202f5b89664c5c3f3c62086276026ba9a9',
-                'https://github.com/openssl/openssl/commit/6ced0fe6b10faa560e410e3ee8d6c82f06c65ea3',
-                'https://github.com/openssl/openssl/commit/ce39170276daec87f55c39dad1f629b56344429e',
-                'https://github.com/openssl/openssl/commit/d0071a0799f20cc8101730145349ed4487c268dc',
-                'https://nvd.nist.gov/vuln/detail/CVE-2025-15467',
-                'https://openssl-library.org/news/secadv/20260127.txt',
-                'https://ubuntu.com/security/notices/USN-7980-1',
-                'https://www.cve.org/CVERecord?id=CVE-2025-15467'
-              ],
-              'severity':   'CRITICAL',
-              'suppressed': false,
-              'title':      'openssl: OpenSSL: Remote code execution or Denial of Service via oversized Initialization Vector in CMS parsing'
-            },
-            {
-              'cve':  'CVE-2025-69419',
-              'cvss': {
-                'redhat': {
-                  'v3score':  '7.4',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-787'
-              ],
-              'description':   'Issue summary: Calling PKCS12_get_friendlyname() function on a maliciously\ncrafted PKCS#12 file with a BMPString (UTF-16BE) friendly name containing\nnon-ASCII BMP code point can trigger a one byte write before the allocated\nbuffer.\n\nImpact summary: The out-of-bounds write can cause a memory corruption\nwhich can have various consequences including a Denial of Service.\n\nThe OPENSSL_uni2utf8() function performs a two-pass conversion of a PKCS#12\nBMPString (UTF-16BE) to UTF-8. In the second pass, when emitting UTF-8 bytes,\nthe helper function bmp_to_utf8() incorrectly forwards the remaining UTF-16\nsource byte count as the destination buffer capacity to UTF8_putc(). For BMP\ncode points above U+07FF, UTF-8 requires three bytes, but the forwarded\ncapacity can be just two bytes. UTF8_putc() then returns -1, and this negative\nvalue is added to the output length without validation, causing the\nlength to become negative. The subsequent trailing NUL byte is then written\nat a negative offset, causing write outside of heap allocated buffer.\n\nThe vulnerability is reachable via the public PKCS12_get_friendlyname() API\nwhen parsing attacker-controlled PKCS#12 files. While PKCS12_parse() uses a\ndifferent code path that avoids this issue, PKCS12_get_friendlyname() directly\ninvokes the vulnerable function. Exploitation requires an attacker to provide\na malicious PKCS#12 file to be parsed by the application and the attacker\ncan just trigger a one zero byte write before the allocated buffer.\nFor that reason the issue was assessed as Low severity according to our\nSecurity Policy.\n\nThe FIPS modules in 3.6, 3.5, 3.4, 3.3 and 3.0 are not affected by this issue,\nas the PKCS#12 implementation is outside the OpenSSL FIPS module boundary.\n\nOpenSSL 3.6, 3.5, 3.4, 3.3, 3.0 and 1.1.1 are vulnerable to this issue.\n\nOpenSSL 1.0.2 is not affected by this issue.',
-              'diffID':        'sha256:994456c4fd7b2b87346a81961efb4ce945a39592d32e0762b38768bca7c7d085',
-              'fixedVersions': [
-                '3.3.6-r0'
-              ],
-              'installedVersion': '3.3.3-r0',
-              'packageName':      'libcrypto3',
-              'purl':             'pkg:apk/alpine/libcrypto3@3.3.3-r0?arch=x86_64&distro=3.20.6',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2025-69419',
-                'https://github.com/openssl/openssl/commit/41be0f216404f14457bbf3b9cc488dba60b49296',
-                'https://github.com/openssl/openssl/commit/7e9cac9832e4705b91987c2474ed06a37a93cecb',
-                'https://github.com/openssl/openssl/commit/a26a90d38edec3748566129d824e664b54bee2e2',
-                'https://github.com/openssl/openssl/commit/cda12de3bc0e333ea8d2c6fd15001dbdaf280015',
-                'https://github.com/openssl/openssl/commit/ff628933755075446bca8307e8417c14d164b535',
-                'https://nvd.nist.gov/vuln/detail/CVE-2025-69419',
-                'https://openssl-library.org/news/secadv/20260127.txt',
-                'https://ubuntu.com/security/notices/USN-7980-1',
-                'https://ubuntu.com/security/notices/USN-7980-2',
-                'https://www.cve.org/CVERecord?id=CVE-2025-69419'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: OpenSSL: Arbitrary code execution due to out-of-bounds write in PKCS#12 processing'
-            },
-            {
-              'cve':  'CVE-2025-15468',
-              'cvss': {
-                'redhat': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-476'
-              ],
-              'description':   'Issue summary: If an application using the SSL_CIPHER_find() function in\na QUIC protocol client or server receives an unknown cipher suite from\nthe peer, a NULL dereference occurs.\n\nImpact summary: A NULL pointer dereference leads to abnormal termination of\nthe running process causing Denial of Service.\n\nSome applications call SSL_CIPHER_find() from the client_hello_cb callback\non the cipher ID received from the peer. If this is done with an SSL object\nimplementing the QUIC protocol, NULL pointer dereference will happen if\nthe examined cipher ID is unknown or unsupported.\n\nAs it is not very common to call this function in applications using the QUIC \nprotocol and the worst outcome is Denial of Service, the issue was assessed\nas Low severity.\n\nThe vulnerable code was introduced in the 3.2 version with the addition\nof the QUIC protocol support.\n\nThe FIPS modules in 3.6, 3.5, 3.4 and 3.3 are not affected by this issue,\nas the QUIC implementation is outside the OpenSSL FIPS module boundary.\n\nOpenSSL 3.6, 3.5, 3.4 and 3.3 are vulnerable to this issue.\n\nOpenSSL 3.0, 1.1.1 and 1.0.2 are not affected by this issue.',
-              'diffID':        'sha256:994456c4fd7b2b87346a81961efb4ce945a39592d32e0762b38768bca7c7d085',
-              'fixedVersions': [
-                '3.3.6-r0'
-              ],
-              'installedVersion': '3.3.3-r0',
-              'packageName':      'libcrypto3',
-              'purl':             'pkg:apk/alpine/libcrypto3@3.3.3-r0?arch=x86_64&distro=3.20.6',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2025-15468',
-                'https://github.com/openssl/openssl/commit/1f08e54bad32843044fe8a675948d65e3b4ece65',
-                'https://github.com/openssl/openssl/commit/7c88376731c589ee5b36116c5a6e32d5ae5f7ae2',
-                'https://github.com/openssl/openssl/commit/b2539639400288a4580fe2d76247541b976bade4',
-                'https://github.com/openssl/openssl/commit/d75b309879631d45b972396ce4e5102559c64ac7',
-                'https://nvd.nist.gov/vuln/detail/CVE-2025-15468',
-                'https://openssl-library.org/news/secadv/20260127.txt',
-                'https://ubuntu.com/security/notices/USN-7980-1',
-                'https://www.cve.org/CVERecord?id=CVE-2025-15468'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: OpenSSL: Denial of Service via NULL pointer dereference in QUIC protocol handling'
-            },
-            {
-              'cve':  'CVE-2025-66199',
-              'cvss': {
-                'redhat': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-789'
-              ],
-              'description':   'Issue summary: A TLS 1.3 connection using certificate compression can be\nforced to allocate a large buffer before decompression without checking\nagainst the configured certificate size limit.\n\nImpact summary: An attacker can cause per-connection memory allocations of\nup to approximately 22 MiB and extra CPU work, potentially leading to\nservice degradation or resource exhaustion (Denial of Service).\n\nIn affected configurations, the peer-supplied uncompressed certificate\nlength from a CompressedCertificate message is used to grow a heap buffer\nprior to decompression. This length is not bounded by the max_cert_list\nsetting, which otherwise constrains certificate message sizes. An attacker\ncan exploit this to cause large per-connection allocations followed by\nhandshake failure. No memory corruption or information disclosure occurs.\n\nThis issue only affects builds where TLS 1.3 certificate compression is\ncompiled in (i.e., not OPENSSL_NO_COMP_ALG) and at least one compression\nalgorithm (brotli, zlib, or zstd) is available, and where the compression\nextension is negotiated. Both clients receiving a server CompressedCertificate\nand servers in mutual TLS scenarios receiving a client CompressedCertificate\nare affected. Servers that do not request client certificates are not\nvulnerable to client-initiated attacks.\n\nUsers can mitigate this issue by setting SSL_OP_NO_RX_CERTIFICATE_COMPRESSION\nto disable receiving compressed certificates.\n\nThe FIPS modules in 3.6, 3.5, 3.4 and 3.3 are not affected by this issue,\nas the TLS implementation is outside the OpenSSL FIPS module boundary.\n\nOpenSSL 3.6, 3.5, 3.4 and 3.3 are vulnerable to this issue.\n\nOpenSSL 3.0, 1.1.1 and 1.0.2 are not affected by this issue.',
-              'diffID':        'sha256:994456c4fd7b2b87346a81961efb4ce945a39592d32e0762b38768bca7c7d085',
-              'fixedVersions': [
-                '3.3.6-r0'
-              ],
-              'installedVersion': '3.3.3-r0',
-              'packageName':      'libcrypto3',
-              'purl':             'pkg:apk/alpine/libcrypto3@3.3.3-r0?arch=x86_64&distro=3.20.6',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2025-66199',
-                'https://github.com/openssl/openssl/commit/3ed1f75249932b155eef993a8e66a99cb98bfef4',
-                'https://github.com/openssl/openssl/commit/6184a4fb08ee6d7bca570d931a4e8bef40b64451',
-                'https://github.com/openssl/openssl/commit/895150b5e021d16b52fb32b97e1dd12f20448be5',
-                'https://github.com/openssl/openssl/commit/966a2478046c311ed7dae50c457d0db4cafbf7e4',
-                'https://nvd.nist.gov/vuln/detail/CVE-2025-66199',
-                'https://openssl-library.org/news/secadv/20260127.txt',
-                'https://ubuntu.com/security/notices/USN-7980-1',
-                'https://www.cve.org/CVERecord?id=CVE-2025-66199'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: OpenSSL: Denial of Service due to excessive memory allocation in TLS 1.3 certificate compression'
-            },
-            {
-              'cve':  'CVE-2025-68160',
-              'cvss': {
-                'redhat': {
-                  'v3score':  '4.7',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-787'
-              ],
-              'description':   'Issue summary: Writing large, newline-free data into a BIO chain using the\nline-buffering filter where the next BIO performs short writes can trigger\na heap-based out-of-bounds write.\n\nImpact summary: This out-of-bounds write can cause memory corruption which\ntypically results in a crash, leading to Denial of Service for an application.\n\nThe line-buffering BIO filter (BIO_f_linebuffer) is not used by default in\nTLS/SSL data paths. In OpenSSL command-line applications, it is typically\nonly pushed onto stdout/stderr on VMS systems. Third-party applications that\nexplicitly use this filter with a BIO chain that can short-write and that\nwrite large, newline-free data influenced by an attacker would be affected.\nHowever, the circumstances where this could happen are unlikely to be under\nattacker control, and BIO_f_linebuffer is unlikely to be handling non-curated\ndata controlled by an attacker. For that reason the issue was assessed as\nLow severity.\n\nThe FIPS modules in 3.6, 3.5, 3.4, 3.3 and 3.0 are not affected by this issue,\nas the BIO implementation is outside the OpenSSL FIPS module boundary.\n\nOpenSSL 3.6, 3.5, 3.4, 3.3, 3.0, 1.1.1 and 1.0.2 are vulnerable to this issue.',
-              'diffID':        'sha256:994456c4fd7b2b87346a81961efb4ce945a39592d32e0762b38768bca7c7d085',
-              'fixedVersions': [
-                '3.3.6-r0'
-              ],
-              'installedVersion': '3.3.3-r0',
-              'packageName':      'libcrypto3',
-              'purl':             'pkg:apk/alpine/libcrypto3@3.3.3-r0?arch=x86_64&distro=3.20.6',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2025-68160',
-                'https://github.com/openssl/openssl/commit/384011202af92605d926fafe4a0bcd6b65d162ad',
-                'https://github.com/openssl/openssl/commit/475c466ef2fbd8fc1df6fae1c3eed9c813fc8ff6',
-                'https://github.com/openssl/openssl/commit/4c96fbba618e1940f038012506ee9e21d32ee12c',
-                'https://github.com/openssl/openssl/commit/6845c3b6460a98b1ec4e463baa2ea1a63a32d7c0',
-                'https://github.com/openssl/openssl/commit/68a7cd2e2816c3a02f4d45a2ce43fc04fac97096',
-                'https://nvd.nist.gov/vuln/detail/CVE-2025-68160',
-                'https://openssl-library.org/news/secadv/20260127.txt',
-                'https://ubuntu.com/security/notices/USN-7980-1',
-                'https://ubuntu.com/security/notices/USN-7980-2',
-                'https://www.cve.org/CVERecord?id=CVE-2025-68160'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: OpenSSL: Denial of Service due to out-of-bounds write in BIO filter'
-            },
-            {
-              'cve':  'CVE-2025-69418',
-              'cvss': {
-                'redhat': {
-                  'v3score':  '4',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-325'
-              ],
-              'description':   'Issue summary: When using the low-level OCB API directly with AES-NI or<br>other hardware-accelerated code paths, inputs whose length is not a multiple<br>of 16 bytes can leave the final partial block unencrypted and unauthenticated.<br><br>Impact summary: The trailing 1-15 bytes of a message may be exposed in<br>cleartext on encryption and are not covered by the authentication tag,<br>allowing an attacker to read or tamper with those bytes without detection.<br><br>The low-level OCB encrypt and decrypt routines in the hardware-accelerated<br>stream path process full 16-byte blocks but do not advance the input/output<br>pointers. The subsequent tail-handling code then operates on the original<br>base pointers, effectively reprocessing the beginning of the buffer while<br>leaving the actual trailing bytes unprocessed. The authentication checksum<br>also excludes the true tail bytes.<br><br>However, typical OpenSSL consumers using EVP are not affected because the<br>higher-level EVP and provider OCB implementations split inputs so that full<br>blocks and trailing partial blocks are processed in separate calls, avoiding<br>the problematic code path. Additionally, TLS does not use OCB ciphersuites.<br>The vulnerability only affects applications that call the low-level<br>CRYPTO_ocb128_encrypt() or CRYPTO_ocb128_decrypt() functions directly with<br>non-block-aligned lengths in a single call on hardware-accelerated builds.<br>For these reasons the issue was assessed as Low severity.<br><br>The FIPS modules in 3.6, 3.5, 3.4, 3.3, 3.2, 3.1 and 3.0 are not affected<br>by this issue, as OCB mode is not a FIPS-approved algorithm.<br><br>OpenSSL 3.6, 3.5, 3.4, 3.3, 3.0 and 1.1.1 are vulnerable to this issue.<br><br>OpenSSL 1.0.2 is not affected by this issue.',
-              'diffID':        'sha256:994456c4fd7b2b87346a81961efb4ce945a39592d32e0762b38768bca7c7d085',
-              'fixedVersions': [
-                '3.3.6-r0'
-              ],
-              'installedVersion': '3.3.3-r0',
-              'packageName':      'libcrypto3',
-              'purl':             'pkg:apk/alpine/libcrypto3@3.3.3-r0?arch=x86_64&distro=3.20.6',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2025-69418',
-                'https://github.com/openssl/openssl/commit/372fc5c77529695b05b4f5b5187691a57ef5dffc',
-                'https://github.com/openssl/openssl/commit/4016975d4469cd6b94927c607f7c511385f928d8',
-                'https://github.com/openssl/openssl/commit/52d23c86a54adab5ee9f80e48b242b52c4cc2347',
-                'https://github.com/openssl/openssl/commit/a7589230356d908c0eca4b969ec4f62106f4f5ae',
-                'https://github.com/openssl/openssl/commit/ed40856d7d4ba6cb42779b6770666a65f19cb977',
-                'https://nvd.nist.gov/vuln/detail/CVE-2025-69418',
-                'https://openssl-library.org/news/secadv/20260127.txt',
-                'https://ubuntu.com/security/notices/USN-7980-1',
-                'https://ubuntu.com/security/notices/USN-7980-2',
-                'https://www.cve.org/CVERecord?id=CVE-2025-69418'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: OpenSSL: Information disclosure and data tampering via specific low-level OCB encryption/decryption calls'
-            },
-            {
-              'cve':  'CVE-2025-69420',
-              'cvss': {
-                'redhat': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-754'
-              ],
-              'description':   'Issue summary: A type confusion vulnerability exists in the TimeStamp Response\nverification code where an ASN1_TYPE union member is accessed without first\nvalidating the type, causing an invalid or NULL pointer dereference when\nprocessing a malformed TimeStamp Response file.\n\nImpact summary: An application calling TS_RESP_verify_response() with a\nmalformed TimeStamp Response can be caused to dereference an invalid or\nNULL pointer when reading, resulting in a Denial of Service.\n\nThe functions ossl_ess_get_signing_cert() and ossl_ess_get_signing_cert_v2()\naccess the signing cert attribute value without validating its type.\nWhen the type is not V_ASN1_SEQUENCE, this results in accessing invalid memory\nthrough the ASN1_TYPE union, causing a crash.\n\nExploiting this vulnerability requires an attacker to provide a malformed\nTimeStamp Response to an application that verifies timestamp responses. The\nTimeStamp protocol (RFC 3161) is not widely used and the impact of the\nexploit is just a Denial of Service. For these reasons the issue was\nassessed as Low severity.\n\nThe FIPS modules in 3.5, 3.4, 3.3 and 3.0 are not affected by this issue,\nas the TimeStamp Response implementation is outside the OpenSSL FIPS module\nboundary.\n\nOpenSSL 3.6, 3.5, 3.4, 3.3, 3.0 and 1.1.1 are vulnerable to this issue.\n\nOpenSSL 1.0.2 is not affected by this issue.',
-              'diffID':        'sha256:994456c4fd7b2b87346a81961efb4ce945a39592d32e0762b38768bca7c7d085',
-              'fixedVersions': [
-                '3.3.6-r0'
-              ],
-              'installedVersion': '3.3.3-r0',
-              'packageName':      'libcrypto3',
-              'purl':             'pkg:apk/alpine/libcrypto3@3.3.3-r0?arch=x86_64&distro=3.20.6',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2025-69420',
-                'https://github.com/openssl/openssl/commit/27c7012c91cc986a598d7540f3079dfde2416eb9',
-                'https://github.com/openssl/openssl/commit/4e254b48ad93cc092be3dd62d97015f33f73133a',
-                'https://github.com/openssl/openssl/commit/564fd9c73787f25693bf9e75faf7bf6bb1305d4e',
-                'https://github.com/openssl/openssl/commit/5eb0770ffcf11b785cf374ff3c19196245e54f1b',
-                'https://github.com/openssl/openssl/commit/a99349ebfc519999edc50620abe24d599b9eb085',
-                'https://nvd.nist.gov/vuln/detail/CVE-2025-69420',
-                'https://openssl-library.org/news/secadv/20260127.txt',
-                'https://ubuntu.com/security/notices/USN-7980-1',
-                'https://ubuntu.com/security/notices/USN-7980-2',
-                'https://www.cve.org/CVERecord?id=CVE-2025-69420'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: OpenSSL: Denial of Service via malformed TimeStamp Response'
-            },
-            {
-              'cve':  'CVE-2025-69421',
-              'cvss': {
-                'redhat': {
-                  'v3score':  '6.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-476'
-              ],
-              'description':   'Issue summary: Processing a malformed PKCS#12 file can trigger a NULL pointer\ndereference in the PKCS12_item_decrypt_d2i_ex() function.\n\nImpact summary: A NULL pointer dereference can trigger a crash which leads to\nDenial of Service for an application processing PKCS#12 files.\n\nThe PKCS12_item_decrypt_d2i_ex() function does not check whether the oct\nparameter is NULL before dereferencing it. When called from\nPKCS12_unpack_p7encdata() with a malformed PKCS#12 file, this parameter can\nbe NULL, causing a crash. The vulnerability is limited to Denial of Service\nand cannot be escalated to achieve code execution or memory disclosure.\n\nExploiting this issue requires an attacker to provide a malformed PKCS#12 file\nto an application that processes it. For that reason the issue was assessed as\nLow severity according to our Security Policy.\n\nThe FIPS modules in 3.6, 3.5, 3.4, 3.3 and 3.0 are not affected by this issue,\nas the PKCS#12 implementation is outside the OpenSSL FIPS module boundary.\n\nOpenSSL 3.6, 3.5, 3.4, 3.3, 3.0, 1.1.1 and 1.0.2 are vulnerable to this issue.',
-              'diffID':        'sha256:994456c4fd7b2b87346a81961efb4ce945a39592d32e0762b38768bca7c7d085',
-              'fixedVersions': [
-                '3.3.6-r0'
-              ],
-              'installedVersion': '3.3.3-r0',
-              'packageName':      'libcrypto3',
-              'purl':             'pkg:apk/alpine/libcrypto3@3.3.3-r0?arch=x86_64&distro=3.20.6',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2025-69421',
-                'https://github.com/openssl/openssl/commit/3524a29271f8191b8fd8a5257eb05173982a097b',
-                'https://github.com/openssl/openssl/commit/36ecb4960872a4ce04bf6f1e1f4e78d75ec0c0c7',
-                'https://github.com/openssl/openssl/commit/4bbc8d41a72c842ce4077a8a3eccd1109aaf74bd',
-                'https://github.com/openssl/openssl/commit/643986985cd1c21221f941129d76fe0c2785aeb3',
-                'https://github.com/openssl/openssl/commit/a2dbc539f0f9cc63832709fa5aa33ad9495eb19c',
-                'https://nvd.nist.gov/vuln/detail/CVE-2025-69421',
-                'https://openssl-library.org/news/secadv/20260127.txt',
-                'https://ubuntu.com/security/notices/USN-7980-1',
-                'https://ubuntu.com/security/notices/USN-7980-2',
-                'https://www.cve.org/CVERecord?id=CVE-2025-69421'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: OpenSSL: Denial of Service via malformed PKCS#12 file processing'
-            },
-            {
-              'cve':  'CVE-2025-9230',
-              'cvss': {
-                'redhat': {
-                  'v3score':  '5.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L'
-                }
-              },
-              'cwes': [
-                'CWE-125',
-                'CWE-787'
-              ],
-              'description':   'Issue summary: An application trying to decrypt CMS messages encrypted using\npassword based encryption can trigger an out-of-bounds read and write.\n\nImpact summary: This out-of-bounds read may trigger a crash which leads to\nDenial of Service for an application. The out-of-bounds write can cause\na memory corruption which can have various consequences including\na Denial of Service or Execution of attacker-supplied code.\n\nAlthough the consequences of a successful exploit of this vulnerability\ncould be severe, the probability that the attacker would be able to\nperform it is low. Besides, password based (PWRI) encryption support in CMS\nmessages is very rarely used. For that reason the issue was assessed as\nModerate severity according to our Security Policy.\n\nThe FIPS modules in 3.5, 3.4, 3.3, 3.2, 3.1 and 3.0 are not affected by this\nissue, as the CMS implementation is outside the OpenSSL FIPS module\nboundary.',
-              'diffID':        'sha256:994456c4fd7b2b87346a81961efb4ce945a39592d32e0762b38768bca7c7d085',
-              'fixedVersions': [
-                '3.3.5-r0'
-              ],
-              'installedVersion': '3.3.3-r0',
-              'packageName':      'libcrypto3',
-              'purl':             'pkg:apk/alpine/libcrypto3@3.3.3-r0?arch=x86_64&distro=3.20.6',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2025/09/30/5',
-                'https://access.redhat.com/errata/RHSA-2025:21255',
-                'https://access.redhat.com/security/cve/CVE-2025-9230',
-                'https://bugzilla.redhat.com/2396054',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2396054',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-9230',
-                'https://errata.almalinux.org/9/ALSA-2025-21255.html',
-                'https://errata.rockylinux.org/RLSA-2025:21255',
-                'https://github.com/openssl/openssl/commit/5965ea5dd6960f36d8b7f74f8eac67a8eb8f2b45',
-                'https://github.com/openssl/openssl/commit/9e91358f365dee6c446dcdcdb01c04d2743fd280',
-                'https://github.com/openssl/openssl/commit/a79c4ce559c6a3a8fd4109e9f33c1185d5bf2def',
-                'https://github.com/openssl/openssl/commit/b5282d677551afda7d20e9c00e09561b547b2dfd',
-                'https://github.com/openssl/openssl/commit/bae259a211ada6315dc50900686daaaaaa55f482',
-                'https://github.openssl.org/openssl/extended-releases/commit/c2b96348bfa662f25f4fabf81958ae822063dae3',
-                'https://github.openssl.org/openssl/extended-releases/commit/dfbaf161d8dafc1132dd88cd48ad990ed9b4c8ba',
-                'https://linux.oracle.com/cve/CVE-2025-9230.html',
-                'https://linux.oracle.com/errata/ELSA-2026-50008.html',
-                'https://lists.debian.org/debian-lts-announce/2025/10/msg00001.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2025-9230',
-                'https://openssl-library.org/news/secadv/20250930.txt',
-                'https://ubuntu.com/security/notices/USN-7786-1',
-                'https://www.cve.org/CVERecord?id=CVE-2025-9230'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: Out-of-bounds read & write in RFC 3211 KEK Unwrap'
-            },
-            {
-              'cve':  'CVE-2025-9231',
-              'cvss': {
-                'redhat': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-385'
-              ],
-              'description':   'Issue summary: A timing side-channel which could potentially allow remote\nrecovery of the private key exists in the SM2 algorithm implementation on 64 bit\nARM platforms.\n\nImpact summary: A timing side-channel in SM2 signature computations on 64 bit\nARM platforms could allow recovering the private key by an attacker..\n\nWhile remote key recovery over a network was not attempted by the reporter,\ntiming measurements revealed a timing signal which may allow such an attack.\n\nOpenSSL does not directly support certificates with SM2 keys in TLS, and so\nthis CVE is not relevant in most TLS contexts.  However, given that it is\npossible to add support for such certificates via a custom provider, coupled\nwith the fact that in such a custom provider context the private key may be\nrecoverable via remote timing measurements, we consider this to be a Moderate\nseverity issue.\n\nThe FIPS modules in 3.5, 3.4, 3.3, 3.2, 3.1 and 3.0 are not affected by this\nissue, as SM2 is not an approved algorithm.',
-              'diffID':        'sha256:994456c4fd7b2b87346a81961efb4ce945a39592d32e0762b38768bca7c7d085',
-              'fixedVersions': [
-                '3.3.5-r0'
-              ],
-              'installedVersion': '3.3.3-r0',
-              'packageName':      'libcrypto3',
-              'purl':             'pkg:apk/alpine/libcrypto3@3.3.3-r0?arch=x86_64&distro=3.20.6',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2025/09/30/5',
-                'https://access.redhat.com/security/cve/CVE-2025-9231',
-                'https://github.com/openssl/openssl/commit/567f64386e43683888212226824b6a179885a0fe',
-                'https://github.com/openssl/openssl/commit/cba616c26ac8e7b37de5e77762e505ba5ca51698',
-                'https://github.com/openssl/openssl/commit/eed5adc9f969d77c94f213767acbb41ff923b6f4',
-                'https://github.com/openssl/openssl/commit/fc47a2ec078912b3e914fab5734535e76c4820c2',
-                'https://nvd.nist.gov/vuln/detail/CVE-2025-9231',
-                'https://openssl-library.org/news/secadv/20250930.txt',
-                'https://ubuntu.com/security/notices/USN-7786-1',
-                'https://www.cve.org/CVERecord?id=CVE-2025-9231'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: Timing side-channel in SM2 algorithm on 64 bit ARM'
-            },
-            {
-              'cve':  'CVE-2026-22795',
-              'cvss': {
-                'redhat': {
-                  'v3score':  '5.5',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-754'
-              ],
-              'description':   'Issue summary: An invalid or NULL pointer dereference can happen in\nan application processing a malformed PKCS#12 file.\n\nImpact summary: An application processing a malformed PKCS#12 file can be\ncaused to dereference an invalid or NULL pointer on memory read, resulting\nin a Denial of Service.\n\nA type confusion vulnerability exists in PKCS#12 parsing code where\nan ASN1_TYPE union member is accessed without first validating the type,\ncausing an invalid pointer read.\n\nThe location is constrained to a 1-byte address space, meaning any\nattempted pointer manipulation can only target addresses between 0x00 and 0xFF.\nThis range corresponds to the zero page, which is unmapped on most modern\noperating systems and will reliably result in a crash, leading only to a\nDenial of Service. Exploiting this issue also requires a user or application\nto process a maliciously crafted PKCS#12 file. It is uncommon to accept\nuntrusted PKCS#12 files in applications as they are usually used to store\nprivate keys which are trusted by definition. For these reasons, the issue\nwas assessed as Low severity.\n\nThe FIPS modules in 3.5, 3.4, 3.3 and 3.0 are not affected by this issue,\nas the PKCS12 implementation is outside the OpenSSL FIPS module boundary.\n\nOpenSSL 3.6, 3.5, 3.4, 3.3, 3.0 and 1.1.1 are vulnerable to this issue.\n\nOpenSSL 1.0.2 is not affected by this issue.',
-              'diffID':        'sha256:994456c4fd7b2b87346a81961efb4ce945a39592d32e0762b38768bca7c7d085',
-              'fixedVersions': [
-                '3.3.6-r0'
-              ],
-              'installedVersion': '3.3.3-r0',
-              'packageName':      'libcrypto3',
-              'purl':             'pkg:apk/alpine/libcrypto3@3.3.3-r0?arch=x86_64&distro=3.20.6',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2026-22795',
-                'https://github.com/openssl/openssl/commit/2502e7b7d4c0cf4f972a881641fe09edc67aeec4',
-                'https://github.com/openssl/openssl/commit/572844beca95068394c916626a6d3a490f831a49',
-                'https://github.com/openssl/openssl/commit/7bbca05be55b129651d9df4bdb92becc45002c12',
-                'https://github.com/openssl/openssl/commit/eeee3cbd4d682095ed431052f00403004596373e',
-                'https://github.com/openssl/openssl/commit/ef2fb66ec571564d64d1c74a12e388a2a54d05d2',
-                'https://nvd.nist.gov/vuln/detail/CVE-2026-22795',
-                'https://openssl-library.org/news/secadv/20260127.txt',
-                'https://ubuntu.com/security/notices/USN-7980-1',
-                'https://ubuntu.com/security/notices/USN-7980-2',
-                'https://www.cve.org/CVERecord?id=CVE-2026-22795'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: OpenSSL: Denial of Service due to type confusion in PKCS#12 file processing'
-            },
-            {
-              'cve':  'CVE-2026-22796',
-              'cvss': {
-                'redhat': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-754'
-              ],
-              'description':   'Issue summary: A type confusion vulnerability exists in the signature\nverification of signed PKCS#7 data where an ASN1_TYPE union member is\naccessed without first validating the type, causing an invalid or NULL\npointer dereference when processing malformed PKCS#7 data.\n\nImpact summary: An application performing signature verification of PKCS#7\ndata or calling directly the PKCS7_digest_from_attributes() function can be\ncaused to dereference an invalid or NULL pointer when reading, resulting in\na Denial of Service.\n\nThe function PKCS7_digest_from_attributes() accesses the message digest attribute\nvalue without validating its type. When the type is not V_ASN1_OCTET_STRING,\nthis results in accessing invalid memory through the ASN1_TYPE union, causing\na crash.\n\nExploiting this vulnerability requires an attacker to provide a malformed\nsigned PKCS#7 to an application that verifies it. The impact of the\nexploit is just a Denial of Service, the PKCS7 API is legacy and applications\nshould be using the CMS API instead. For these reasons the issue was\nassessed as Low severity.\n\nThe FIPS modules in 3.5, 3.4, 3.3 and 3.0 are not affected by this issue,\nas the PKCS#7 parsing implementation is outside the OpenSSL FIPS module\nboundary.\n\nOpenSSL 3.6, 3.5, 3.4, 3.3, 3.0, 1.1.1 and 1.0.2 are vulnerable to this issue.',
-              'diffID':        'sha256:994456c4fd7b2b87346a81961efb4ce945a39592d32e0762b38768bca7c7d085',
-              'fixedVersions': [
-                '3.3.6-r0'
-              ],
-              'installedVersion': '3.3.3-r0',
-              'packageName':      'libcrypto3',
-              'purl':             'pkg:apk/alpine/libcrypto3@3.3.3-r0?arch=x86_64&distro=3.20.6',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2026-22796',
-                'https://github.com/openssl/openssl/commit/2502e7b7d4c0cf4f972a881641fe09edc67aeec4',
-                'https://github.com/openssl/openssl/commit/572844beca95068394c916626a6d3a490f831a49',
-                'https://github.com/openssl/openssl/commit/7bbca05be55b129651d9df4bdb92becc45002c12',
-                'https://github.com/openssl/openssl/commit/eeee3cbd4d682095ed431052f00403004596373e',
-                'https://github.com/openssl/openssl/commit/ef2fb66ec571564d64d1c74a12e388a2a54d05d2',
-                'https://nvd.nist.gov/vuln/detail/CVE-2026-22796',
-                'https://openssl-library.org/news/secadv/20260127.txt',
-                'https://ubuntu.com/security/notices/USN-7980-1',
-                'https://ubuntu.com/security/notices/USN-7980-2',
-                'https://www.cve.org/CVERecord?id=CVE-2026-22796'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: OpenSSL: Denial of Service via type confusion in PKCS#7 signature verification'
-            },
-            {
-              'cve':  'CVE-2025-9232',
-              'cvss': {
-                'redhat': {
-                  'v3score':  '3.1',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L'
-                }
-              },
-              'cwes': [
-                'CWE-125'
-              ],
-              'description':   "Issue summary: An application using the OpenSSL HTTP client API functions may\ntrigger an out-of-bounds read if the 'no_proxy' environment variable is set and\nthe host portion of the authority component of the HTTP URL is an IPv6 address.\n\nImpact summary: An out-of-bounds read can trigger a crash which leads to\nDenial of Service for an application.\n\nThe OpenSSL HTTP client API functions can be used directly by applications\nbut they are also used by the OCSP client functions and CMP (Certificate\nManagement Protocol) client implementation in OpenSSL. However the URLs used\nby these implementations are unlikely to be controlled by an attacker.\n\nIn this vulnerable code the out of bounds read can only trigger a crash.\nFurthermore the vulnerability requires an attacker-controlled URL to be\npassed from an application to the OpenSSL function and the user has to have\na 'no_proxy' environment variable set. For the aforementioned reasons the\nissue was assessed as Low severity.\n\nThe vulnerable code was introduced in the following patch releases:\n3.0.16, 3.1.8, 3.2.4, 3.3.3, 3.4.0 and 3.5.0.\n\nThe FIPS modules in 3.5, 3.4, 3.3, 3.2, 3.1 and 3.0 are not affected by this\nissue, as the HTTP client implementation is outside the OpenSSL FIPS module\nboundary.",
-              'diffID':        'sha256:994456c4fd7b2b87346a81961efb4ce945a39592d32e0762b38768bca7c7d085',
-              'fixedVersions': [
-                '3.3.5-r0'
-              ],
-              'installedVersion': '3.3.3-r0',
-              'packageName':      'libcrypto3',
-              'purl':             'pkg:apk/alpine/libcrypto3@3.3.3-r0?arch=x86_64&distro=3.20.6',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2025/09/30/5',
-                'https://access.redhat.com/security/cve/CVE-2025-9232',
-                'https://github.com/openssl/openssl/commit/2b4ec20e47959170422922eaff25346d362dcb35',
-                'https://github.com/openssl/openssl/commit/654dc11d23468a74fc8ea4672b702dd3feb7be4b',
-                'https://github.com/openssl/openssl/commit/7cf21a30513c9e43c4bc3836c237cf086e194af3',
-                'https://github.com/openssl/openssl/commit/89e790ac431125a4849992858490bed6b225eadf',
-                'https://github.com/openssl/openssl/commit/bbf38c034cdabd0a13330abcc4855c866f53d2e0',
-                'https://nvd.nist.gov/vuln/detail/CVE-2025-9232',
-                'https://openssl-library.org/news/secadv/20250930.txt',
-                'https://ubuntu.com/security/notices/USN-7786-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2025-9232'
-              ],
-              'severity':   'LOW',
-              'suppressed': false,
-              'title':      'openssl: Out-of-bounds read in HTTP client no_proxy handling'
-            },
-            {
-              'cve':  'CVE-2025-15467',
-              'cvss': {
-                'redhat': {
-                  'v3score':  '9.8',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-787'
-              ],
-              'description':   'Issue summary: Parsing CMS AuthEnvelopedData message with maliciously\ncrafted AEAD parameters can trigger a stack buffer overflow.\n\nImpact summary: A stack buffer overflow may lead to a crash, causing Denial\nof Service, or potentially remote code execution.\n\nWhen parsing CMS AuthEnvelopedData structures that use AEAD ciphers such as\nAES-GCM, the IV (Initialization Vector) encoded in the ASN.1 parameters is\ncopied into a fixed-size stack buffer without verifying that its length fits\nthe destination. An attacker can supply a crafted CMS message with an\noversized IV, causing a stack-based out-of-bounds write before any\nauthentication or tag verification occurs.\n\nApplications and services that parse untrusted CMS or PKCS#7 content using\nAEAD ciphers (e.g., S/MIME AuthEnvelopedData with AES-GCM) are vulnerable.\nBecause the overflow occurs prior to authentication, no valid key material\nis required to trigger it. While exploitability to remote code execution\ndepends on platform and toolchain mitigations, the stack-based write\nprimitive represents a severe risk.\n\nThe FIPS modules in 3.6, 3.5, 3.4, 3.3 and 3.0 are not affected by this\nissue, as the CMS implementation is outside the OpenSSL FIPS module\nboundary.\n\nOpenSSL 3.6, 3.5, 3.4, 3.3 and 3.0 are vulnerable to this issue.\n\nOpenSSL 1.1.1 and 1.0.2 are not affected by this issue.',
-              'diffID':        'sha256:994456c4fd7b2b87346a81961efb4ce945a39592d32e0762b38768bca7c7d085',
-              'fixedVersions': [
-                '3.3.6-r0'
-              ],
-              'installedVersion': '3.3.3-r0',
-              'packageName':      'libssl3',
-              'purl':             'pkg:apk/alpine/libssl3@3.3.3-r0?arch=x86_64&distro=3.20.6',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2026/01/27/10',
-                'https://access.redhat.com/security/cve/CVE-2025-15467',
-                'https://github.com/openssl/openssl/commit/2c8f0e5fa9b6ee5508a0349e4572ddb74db5a703',
-                'https://github.com/openssl/openssl/commit/5f26d4202f5b89664c5c3f3c62086276026ba9a9',
-                'https://github.com/openssl/openssl/commit/6ced0fe6b10faa560e410e3ee8d6c82f06c65ea3',
-                'https://github.com/openssl/openssl/commit/ce39170276daec87f55c39dad1f629b56344429e',
-                'https://github.com/openssl/openssl/commit/d0071a0799f20cc8101730145349ed4487c268dc',
-                'https://nvd.nist.gov/vuln/detail/CVE-2025-15467',
-                'https://openssl-library.org/news/secadv/20260127.txt',
-                'https://ubuntu.com/security/notices/USN-7980-1',
-                'https://www.cve.org/CVERecord?id=CVE-2025-15467'
-              ],
-              'severity':   'CRITICAL',
-              'suppressed': false,
-              'title':      'openssl: OpenSSL: Remote code execution or Denial of Service via oversized Initialization Vector in CMS parsing'
-            },
-            {
-              'cve':  'CVE-2025-69419',
-              'cvss': {
-                'redhat': {
-                  'v3score':  '7.4',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-787'
-              ],
-              'description':   'Issue summary: Calling PKCS12_get_friendlyname() function on a maliciously\ncrafted PKCS#12 file with a BMPString (UTF-16BE) friendly name containing\nnon-ASCII BMP code point can trigger a one byte write before the allocated\nbuffer.\n\nImpact summary: The out-of-bounds write can cause a memory corruption\nwhich can have various consequences including a Denial of Service.\n\nThe OPENSSL_uni2utf8() function performs a two-pass conversion of a PKCS#12\nBMPString (UTF-16BE) to UTF-8. In the second pass, when emitting UTF-8 bytes,\nthe helper function bmp_to_utf8() incorrectly forwards the remaining UTF-16\nsource byte count as the destination buffer capacity to UTF8_putc(). For BMP\ncode points above U+07FF, UTF-8 requires three bytes, but the forwarded\ncapacity can be just two bytes. UTF8_putc() then returns -1, and this negative\nvalue is added to the output length without validation, causing the\nlength to become negative. The subsequent trailing NUL byte is then written\nat a negative offset, causing write outside of heap allocated buffer.\n\nThe vulnerability is reachable via the public PKCS12_get_friendlyname() API\nwhen parsing attacker-controlled PKCS#12 files. While PKCS12_parse() uses a\ndifferent code path that avoids this issue, PKCS12_get_friendlyname() directly\ninvokes the vulnerable function. Exploitation requires an attacker to provide\na malicious PKCS#12 file to be parsed by the application and the attacker\ncan just trigger a one zero byte write before the allocated buffer.\nFor that reason the issue was assessed as Low severity according to our\nSecurity Policy.\n\nThe FIPS modules in 3.6, 3.5, 3.4, 3.3 and 3.0 are not affected by this issue,\nas the PKCS#12 implementation is outside the OpenSSL FIPS module boundary.\n\nOpenSSL 3.6, 3.5, 3.4, 3.3, 3.0 and 1.1.1 are vulnerable to this issue.\n\nOpenSSL 1.0.2 is not affected by this issue.',
-              'diffID':        'sha256:994456c4fd7b2b87346a81961efb4ce945a39592d32e0762b38768bca7c7d085',
-              'fixedVersions': [
-                '3.3.6-r0'
-              ],
-              'installedVersion': '3.3.3-r0',
-              'packageName':      'libssl3',
-              'purl':             'pkg:apk/alpine/libssl3@3.3.3-r0?arch=x86_64&distro=3.20.6',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2025-69419',
-                'https://github.com/openssl/openssl/commit/41be0f216404f14457bbf3b9cc488dba60b49296',
-                'https://github.com/openssl/openssl/commit/7e9cac9832e4705b91987c2474ed06a37a93cecb',
-                'https://github.com/openssl/openssl/commit/a26a90d38edec3748566129d824e664b54bee2e2',
-                'https://github.com/openssl/openssl/commit/cda12de3bc0e333ea8d2c6fd15001dbdaf280015',
-                'https://github.com/openssl/openssl/commit/ff628933755075446bca8307e8417c14d164b535',
-                'https://nvd.nist.gov/vuln/detail/CVE-2025-69419',
-                'https://openssl-library.org/news/secadv/20260127.txt',
-                'https://ubuntu.com/security/notices/USN-7980-1',
-                'https://ubuntu.com/security/notices/USN-7980-2',
-                'https://www.cve.org/CVERecord?id=CVE-2025-69419'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: OpenSSL: Arbitrary code execution due to out-of-bounds write in PKCS#12 processing'
-            },
-            {
-              'cve':  'CVE-2025-15468',
-              'cvss': {
-                'redhat': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-476'
-              ],
-              'description':   'Issue summary: If an application using the SSL_CIPHER_find() function in\na QUIC protocol client or server receives an unknown cipher suite from\nthe peer, a NULL dereference occurs.\n\nImpact summary: A NULL pointer dereference leads to abnormal termination of\nthe running process causing Denial of Service.\n\nSome applications call SSL_CIPHER_find() from the client_hello_cb callback\non the cipher ID received from the peer. If this is done with an SSL object\nimplementing the QUIC protocol, NULL pointer dereference will happen if\nthe examined cipher ID is unknown or unsupported.\n\nAs it is not very common to call this function in applications using the QUIC \nprotocol and the worst outcome is Denial of Service, the issue was assessed\nas Low severity.\n\nThe vulnerable code was introduced in the 3.2 version with the addition\nof the QUIC protocol support.\n\nThe FIPS modules in 3.6, 3.5, 3.4 and 3.3 are not affected by this issue,\nas the QUIC implementation is outside the OpenSSL FIPS module boundary.\n\nOpenSSL 3.6, 3.5, 3.4 and 3.3 are vulnerable to this issue.\n\nOpenSSL 3.0, 1.1.1 and 1.0.2 are not affected by this issue.',
-              'diffID':        'sha256:994456c4fd7b2b87346a81961efb4ce945a39592d32e0762b38768bca7c7d085',
-              'fixedVersions': [
-                '3.3.6-r0'
-              ],
-              'installedVersion': '3.3.3-r0',
-              'packageName':      'libssl3',
-              'purl':             'pkg:apk/alpine/libssl3@3.3.3-r0?arch=x86_64&distro=3.20.6',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2025-15468',
-                'https://github.com/openssl/openssl/commit/1f08e54bad32843044fe8a675948d65e3b4ece65',
-                'https://github.com/openssl/openssl/commit/7c88376731c589ee5b36116c5a6e32d5ae5f7ae2',
-                'https://github.com/openssl/openssl/commit/b2539639400288a4580fe2d76247541b976bade4',
-                'https://github.com/openssl/openssl/commit/d75b309879631d45b972396ce4e5102559c64ac7',
-                'https://nvd.nist.gov/vuln/detail/CVE-2025-15468',
-                'https://openssl-library.org/news/secadv/20260127.txt',
-                'https://ubuntu.com/security/notices/USN-7980-1',
-                'https://www.cve.org/CVERecord?id=CVE-2025-15468'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: OpenSSL: Denial of Service via NULL pointer dereference in QUIC protocol handling'
-            },
-            {
-              'cve':  'CVE-2025-66199',
-              'cvss': {
-                'redhat': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-789'
-              ],
-              'description':   'Issue summary: A TLS 1.3 connection using certificate compression can be\nforced to allocate a large buffer before decompression without checking\nagainst the configured certificate size limit.\n\nImpact summary: An attacker can cause per-connection memory allocations of\nup to approximately 22 MiB and extra CPU work, potentially leading to\nservice degradation or resource exhaustion (Denial of Service).\n\nIn affected configurations, the peer-supplied uncompressed certificate\nlength from a CompressedCertificate message is used to grow a heap buffer\nprior to decompression. This length is not bounded by the max_cert_list\nsetting, which otherwise constrains certificate message sizes. An attacker\ncan exploit this to cause large per-connection allocations followed by\nhandshake failure. No memory corruption or information disclosure occurs.\n\nThis issue only affects builds where TLS 1.3 certificate compression is\ncompiled in (i.e., not OPENSSL_NO_COMP_ALG) and at least one compression\nalgorithm (brotli, zlib, or zstd) is available, and where the compression\nextension is negotiated. Both clients receiving a server CompressedCertificate\nand servers in mutual TLS scenarios receiving a client CompressedCertificate\nare affected. Servers that do not request client certificates are not\nvulnerable to client-initiated attacks.\n\nUsers can mitigate this issue by setting SSL_OP_NO_RX_CERTIFICATE_COMPRESSION\nto disable receiving compressed certificates.\n\nThe FIPS modules in 3.6, 3.5, 3.4 and 3.3 are not affected by this issue,\nas the TLS implementation is outside the OpenSSL FIPS module boundary.\n\nOpenSSL 3.6, 3.5, 3.4 and 3.3 are vulnerable to this issue.\n\nOpenSSL 3.0, 1.1.1 and 1.0.2 are not affected by this issue.',
-              'diffID':        'sha256:994456c4fd7b2b87346a81961efb4ce945a39592d32e0762b38768bca7c7d085',
-              'fixedVersions': [
-                '3.3.6-r0'
-              ],
-              'installedVersion': '3.3.3-r0',
-              'packageName':      'libssl3',
-              'purl':             'pkg:apk/alpine/libssl3@3.3.3-r0?arch=x86_64&distro=3.20.6',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2025-66199',
-                'https://github.com/openssl/openssl/commit/3ed1f75249932b155eef993a8e66a99cb98bfef4',
-                'https://github.com/openssl/openssl/commit/6184a4fb08ee6d7bca570d931a4e8bef40b64451',
-                'https://github.com/openssl/openssl/commit/895150b5e021d16b52fb32b97e1dd12f20448be5',
-                'https://github.com/openssl/openssl/commit/966a2478046c311ed7dae50c457d0db4cafbf7e4',
-                'https://nvd.nist.gov/vuln/detail/CVE-2025-66199',
-                'https://openssl-library.org/news/secadv/20260127.txt',
-                'https://ubuntu.com/security/notices/USN-7980-1',
-                'https://www.cve.org/CVERecord?id=CVE-2025-66199'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: OpenSSL: Denial of Service due to excessive memory allocation in TLS 1.3 certificate compression'
-            },
-            {
-              'cve':  'CVE-2025-68160',
-              'cvss': {
-                'redhat': {
-                  'v3score':  '4.7',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-787'
-              ],
-              'description':   'Issue summary: Writing large, newline-free data into a BIO chain using the\nline-buffering filter where the next BIO performs short writes can trigger\na heap-based out-of-bounds write.\n\nImpact summary: This out-of-bounds write can cause memory corruption which\ntypically results in a crash, leading to Denial of Service for an application.\n\nThe line-buffering BIO filter (BIO_f_linebuffer) is not used by default in\nTLS/SSL data paths. In OpenSSL command-line applications, it is typically\nonly pushed onto stdout/stderr on VMS systems. Third-party applications that\nexplicitly use this filter with a BIO chain that can short-write and that\nwrite large, newline-free data influenced by an attacker would be affected.\nHowever, the circumstances where this could happen are unlikely to be under\nattacker control, and BIO_f_linebuffer is unlikely to be handling non-curated\ndata controlled by an attacker. For that reason the issue was assessed as\nLow severity.\n\nThe FIPS modules in 3.6, 3.5, 3.4, 3.3 and 3.0 are not affected by this issue,\nas the BIO implementation is outside the OpenSSL FIPS module boundary.\n\nOpenSSL 3.6, 3.5, 3.4, 3.3, 3.0, 1.1.1 and 1.0.2 are vulnerable to this issue.',
-              'diffID':        'sha256:994456c4fd7b2b87346a81961efb4ce945a39592d32e0762b38768bca7c7d085',
-              'fixedVersions': [
-                '3.3.6-r0'
-              ],
-              'installedVersion': '3.3.3-r0',
-              'packageName':      'libssl3',
-              'purl':             'pkg:apk/alpine/libssl3@3.3.3-r0?arch=x86_64&distro=3.20.6',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2025-68160',
-                'https://github.com/openssl/openssl/commit/384011202af92605d926fafe4a0bcd6b65d162ad',
-                'https://github.com/openssl/openssl/commit/475c466ef2fbd8fc1df6fae1c3eed9c813fc8ff6',
-                'https://github.com/openssl/openssl/commit/4c96fbba618e1940f038012506ee9e21d32ee12c',
-                'https://github.com/openssl/openssl/commit/6845c3b6460a98b1ec4e463baa2ea1a63a32d7c0',
-                'https://github.com/openssl/openssl/commit/68a7cd2e2816c3a02f4d45a2ce43fc04fac97096',
-                'https://nvd.nist.gov/vuln/detail/CVE-2025-68160',
-                'https://openssl-library.org/news/secadv/20260127.txt',
-                'https://ubuntu.com/security/notices/USN-7980-1',
-                'https://ubuntu.com/security/notices/USN-7980-2',
-                'https://www.cve.org/CVERecord?id=CVE-2025-68160'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: OpenSSL: Denial of Service due to out-of-bounds write in BIO filter'
-            },
-            {
-              'cve':  'CVE-2025-69418',
-              'cvss': {
-                'redhat': {
-                  'v3score':  '4',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-325'
-              ],
-              'description':   'Issue summary: When using the low-level OCB API directly with AES-NI or<br>other hardware-accelerated code paths, inputs whose length is not a multiple<br>of 16 bytes can leave the final partial block unencrypted and unauthenticated.<br><br>Impact summary: The trailing 1-15 bytes of a message may be exposed in<br>cleartext on encryption and are not covered by the authentication tag,<br>allowing an attacker to read or tamper with those bytes without detection.<br><br>The low-level OCB encrypt and decrypt routines in the hardware-accelerated<br>stream path process full 16-byte blocks but do not advance the input/output<br>pointers. The subsequent tail-handling code then operates on the original<br>base pointers, effectively reprocessing the beginning of the buffer while<br>leaving the actual trailing bytes unprocessed. The authentication checksum<br>also excludes the true tail bytes.<br><br>However, typical OpenSSL consumers using EVP are not affected because the<br>higher-level EVP and provider OCB implementations split inputs so that full<br>blocks and trailing partial blocks are processed in separate calls, avoiding<br>the problematic code path. Additionally, TLS does not use OCB ciphersuites.<br>The vulnerability only affects applications that call the low-level<br>CRYPTO_ocb128_encrypt() or CRYPTO_ocb128_decrypt() functions directly with<br>non-block-aligned lengths in a single call on hardware-accelerated builds.<br>For these reasons the issue was assessed as Low severity.<br><br>The FIPS modules in 3.6, 3.5, 3.4, 3.3, 3.2, 3.1 and 3.0 are not affected<br>by this issue, as OCB mode is not a FIPS-approved algorithm.<br><br>OpenSSL 3.6, 3.5, 3.4, 3.3, 3.0 and 1.1.1 are vulnerable to this issue.<br><br>OpenSSL 1.0.2 is not affected by this issue.',
-              'diffID':        'sha256:994456c4fd7b2b87346a81961efb4ce945a39592d32e0762b38768bca7c7d085',
-              'fixedVersions': [
-                '3.3.6-r0'
-              ],
-              'installedVersion': '3.3.3-r0',
-              'packageName':      'libssl3',
-              'purl':             'pkg:apk/alpine/libssl3@3.3.3-r0?arch=x86_64&distro=3.20.6',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2025-69418',
-                'https://github.com/openssl/openssl/commit/372fc5c77529695b05b4f5b5187691a57ef5dffc',
-                'https://github.com/openssl/openssl/commit/4016975d4469cd6b94927c607f7c511385f928d8',
-                'https://github.com/openssl/openssl/commit/52d23c86a54adab5ee9f80e48b242b52c4cc2347',
-                'https://github.com/openssl/openssl/commit/a7589230356d908c0eca4b969ec4f62106f4f5ae',
-                'https://github.com/openssl/openssl/commit/ed40856d7d4ba6cb42779b6770666a65f19cb977',
-                'https://nvd.nist.gov/vuln/detail/CVE-2025-69418',
-                'https://openssl-library.org/news/secadv/20260127.txt',
-                'https://ubuntu.com/security/notices/USN-7980-1',
-                'https://ubuntu.com/security/notices/USN-7980-2',
-                'https://www.cve.org/CVERecord?id=CVE-2025-69418'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: OpenSSL: Information disclosure and data tampering via specific low-level OCB encryption/decryption calls'
-            },
-            {
-              'cve':  'CVE-2025-69420',
-              'cvss': {
-                'redhat': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-754'
-              ],
-              'description':   'Issue summary: A type confusion vulnerability exists in the TimeStamp Response\nverification code where an ASN1_TYPE union member is accessed without first\nvalidating the type, causing an invalid or NULL pointer dereference when\nprocessing a malformed TimeStamp Response file.\n\nImpact summary: An application calling TS_RESP_verify_response() with a\nmalformed TimeStamp Response can be caused to dereference an invalid or\nNULL pointer when reading, resulting in a Denial of Service.\n\nThe functions ossl_ess_get_signing_cert() and ossl_ess_get_signing_cert_v2()\naccess the signing cert attribute value without validating its type.\nWhen the type is not V_ASN1_SEQUENCE, this results in accessing invalid memory\nthrough the ASN1_TYPE union, causing a crash.\n\nExploiting this vulnerability requires an attacker to provide a malformed\nTimeStamp Response to an application that verifies timestamp responses. The\nTimeStamp protocol (RFC 3161) is not widely used and the impact of the\nexploit is just a Denial of Service. For these reasons the issue was\nassessed as Low severity.\n\nThe FIPS modules in 3.5, 3.4, 3.3 and 3.0 are not affected by this issue,\nas the TimeStamp Response implementation is outside the OpenSSL FIPS module\nboundary.\n\nOpenSSL 3.6, 3.5, 3.4, 3.3, 3.0 and 1.1.1 are vulnerable to this issue.\n\nOpenSSL 1.0.2 is not affected by this issue.',
-              'diffID':        'sha256:994456c4fd7b2b87346a81961efb4ce945a39592d32e0762b38768bca7c7d085',
-              'fixedVersions': [
-                '3.3.6-r0'
-              ],
-              'installedVersion': '3.3.3-r0',
-              'packageName':      'libssl3',
-              'purl':             'pkg:apk/alpine/libssl3@3.3.3-r0?arch=x86_64&distro=3.20.6',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2025-69420',
-                'https://github.com/openssl/openssl/commit/27c7012c91cc986a598d7540f3079dfde2416eb9',
-                'https://github.com/openssl/openssl/commit/4e254b48ad93cc092be3dd62d97015f33f73133a',
-                'https://github.com/openssl/openssl/commit/564fd9c73787f25693bf9e75faf7bf6bb1305d4e',
-                'https://github.com/openssl/openssl/commit/5eb0770ffcf11b785cf374ff3c19196245e54f1b',
-                'https://github.com/openssl/openssl/commit/a99349ebfc519999edc50620abe24d599b9eb085',
-                'https://nvd.nist.gov/vuln/detail/CVE-2025-69420',
-                'https://openssl-library.org/news/secadv/20260127.txt',
-                'https://ubuntu.com/security/notices/USN-7980-1',
-                'https://ubuntu.com/security/notices/USN-7980-2',
-                'https://www.cve.org/CVERecord?id=CVE-2025-69420'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: OpenSSL: Denial of Service via malformed TimeStamp Response'
-            },
-            {
-              'cve':  'CVE-2025-69421',
-              'cvss': {
-                'redhat': {
-                  'v3score':  '6.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-476'
-              ],
-              'description':   'Issue summary: Processing a malformed PKCS#12 file can trigger a NULL pointer\ndereference in the PKCS12_item_decrypt_d2i_ex() function.\n\nImpact summary: A NULL pointer dereference can trigger a crash which leads to\nDenial of Service for an application processing PKCS#12 files.\n\nThe PKCS12_item_decrypt_d2i_ex() function does not check whether the oct\nparameter is NULL before dereferencing it. When called from\nPKCS12_unpack_p7encdata() with a malformed PKCS#12 file, this parameter can\nbe NULL, causing a crash. The vulnerability is limited to Denial of Service\nand cannot be escalated to achieve code execution or memory disclosure.\n\nExploiting this issue requires an attacker to provide a malformed PKCS#12 file\nto an application that processes it. For that reason the issue was assessed as\nLow severity according to our Security Policy.\n\nThe FIPS modules in 3.6, 3.5, 3.4, 3.3 and 3.0 are not affected by this issue,\nas the PKCS#12 implementation is outside the OpenSSL FIPS module boundary.\n\nOpenSSL 3.6, 3.5, 3.4, 3.3, 3.0, 1.1.1 and 1.0.2 are vulnerable to this issue.',
-              'diffID':        'sha256:994456c4fd7b2b87346a81961efb4ce945a39592d32e0762b38768bca7c7d085',
-              'fixedVersions': [
-                '3.3.6-r0'
-              ],
-              'installedVersion': '3.3.3-r0',
-              'packageName':      'libssl3',
-              'purl':             'pkg:apk/alpine/libssl3@3.3.3-r0?arch=x86_64&distro=3.20.6',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2025-69421',
-                'https://github.com/openssl/openssl/commit/3524a29271f8191b8fd8a5257eb05173982a097b',
-                'https://github.com/openssl/openssl/commit/36ecb4960872a4ce04bf6f1e1f4e78d75ec0c0c7',
-                'https://github.com/openssl/openssl/commit/4bbc8d41a72c842ce4077a8a3eccd1109aaf74bd',
-                'https://github.com/openssl/openssl/commit/643986985cd1c21221f941129d76fe0c2785aeb3',
-                'https://github.com/openssl/openssl/commit/a2dbc539f0f9cc63832709fa5aa33ad9495eb19c',
-                'https://nvd.nist.gov/vuln/detail/CVE-2025-69421',
-                'https://openssl-library.org/news/secadv/20260127.txt',
-                'https://ubuntu.com/security/notices/USN-7980-1',
-                'https://ubuntu.com/security/notices/USN-7980-2',
-                'https://www.cve.org/CVERecord?id=CVE-2025-69421'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: OpenSSL: Denial of Service via malformed PKCS#12 file processing'
-            },
-            {
-              'cve':  'CVE-2025-9230',
-              'cvss': {
-                'redhat': {
-                  'v3score':  '5.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L'
-                }
-              },
-              'cwes': [
-                'CWE-125',
-                'CWE-787'
-              ],
-              'description':   'Issue summary: An application trying to decrypt CMS messages encrypted using\npassword based encryption can trigger an out-of-bounds read and write.\n\nImpact summary: This out-of-bounds read may trigger a crash which leads to\nDenial of Service for an application. The out-of-bounds write can cause\na memory corruption which can have various consequences including\na Denial of Service or Execution of attacker-supplied code.\n\nAlthough the consequences of a successful exploit of this vulnerability\ncould be severe, the probability that the attacker would be able to\nperform it is low. Besides, password based (PWRI) encryption support in CMS\nmessages is very rarely used. For that reason the issue was assessed as\nModerate severity according to our Security Policy.\n\nThe FIPS modules in 3.5, 3.4, 3.3, 3.2, 3.1 and 3.0 are not affected by this\nissue, as the CMS implementation is outside the OpenSSL FIPS module\nboundary.',
-              'diffID':        'sha256:994456c4fd7b2b87346a81961efb4ce945a39592d32e0762b38768bca7c7d085',
-              'fixedVersions': [
-                '3.3.5-r0'
-              ],
-              'installedVersion': '3.3.3-r0',
-              'packageName':      'libssl3',
-              'purl':             'pkg:apk/alpine/libssl3@3.3.3-r0?arch=x86_64&distro=3.20.6',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2025/09/30/5',
-                'https://access.redhat.com/errata/RHSA-2025:21255',
-                'https://access.redhat.com/security/cve/CVE-2025-9230',
-                'https://bugzilla.redhat.com/2396054',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2396054',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-9230',
-                'https://errata.almalinux.org/9/ALSA-2025-21255.html',
-                'https://errata.rockylinux.org/RLSA-2025:21255',
-                'https://github.com/openssl/openssl/commit/5965ea5dd6960f36d8b7f74f8eac67a8eb8f2b45',
-                'https://github.com/openssl/openssl/commit/9e91358f365dee6c446dcdcdb01c04d2743fd280',
-                'https://github.com/openssl/openssl/commit/a79c4ce559c6a3a8fd4109e9f33c1185d5bf2def',
-                'https://github.com/openssl/openssl/commit/b5282d677551afda7d20e9c00e09561b547b2dfd',
-                'https://github.com/openssl/openssl/commit/bae259a211ada6315dc50900686daaaaaa55f482',
-                'https://github.openssl.org/openssl/extended-releases/commit/c2b96348bfa662f25f4fabf81958ae822063dae3',
-                'https://github.openssl.org/openssl/extended-releases/commit/dfbaf161d8dafc1132dd88cd48ad990ed9b4c8ba',
-                'https://linux.oracle.com/cve/CVE-2025-9230.html',
-                'https://linux.oracle.com/errata/ELSA-2026-50008.html',
-                'https://lists.debian.org/debian-lts-announce/2025/10/msg00001.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2025-9230',
-                'https://openssl-library.org/news/secadv/20250930.txt',
-                'https://ubuntu.com/security/notices/USN-7786-1',
-                'https://www.cve.org/CVERecord?id=CVE-2025-9230'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: Out-of-bounds read & write in RFC 3211 KEK Unwrap'
-            },
-            {
-              'cve':  'CVE-2025-9231',
-              'cvss': {
-                'redhat': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-385'
-              ],
-              'description':   'Issue summary: A timing side-channel which could potentially allow remote\nrecovery of the private key exists in the SM2 algorithm implementation on 64 bit\nARM platforms.\n\nImpact summary: A timing side-channel in SM2 signature computations on 64 bit\nARM platforms could allow recovering the private key by an attacker..\n\nWhile remote key recovery over a network was not attempted by the reporter,\ntiming measurements revealed a timing signal which may allow such an attack.\n\nOpenSSL does not directly support certificates with SM2 keys in TLS, and so\nthis CVE is not relevant in most TLS contexts.  However, given that it is\npossible to add support for such certificates via a custom provider, coupled\nwith the fact that in such a custom provider context the private key may be\nrecoverable via remote timing measurements, we consider this to be a Moderate\nseverity issue.\n\nThe FIPS modules in 3.5, 3.4, 3.3, 3.2, 3.1 and 3.0 are not affected by this\nissue, as SM2 is not an approved algorithm.',
-              'diffID':        'sha256:994456c4fd7b2b87346a81961efb4ce945a39592d32e0762b38768bca7c7d085',
-              'fixedVersions': [
-                '3.3.5-r0'
-              ],
-              'installedVersion': '3.3.3-r0',
-              'packageName':      'libssl3',
-              'purl':             'pkg:apk/alpine/libssl3@3.3.3-r0?arch=x86_64&distro=3.20.6',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2025/09/30/5',
-                'https://access.redhat.com/security/cve/CVE-2025-9231',
-                'https://github.com/openssl/openssl/commit/567f64386e43683888212226824b6a179885a0fe',
-                'https://github.com/openssl/openssl/commit/cba616c26ac8e7b37de5e77762e505ba5ca51698',
-                'https://github.com/openssl/openssl/commit/eed5adc9f969d77c94f213767acbb41ff923b6f4',
-                'https://github.com/openssl/openssl/commit/fc47a2ec078912b3e914fab5734535e76c4820c2',
-                'https://nvd.nist.gov/vuln/detail/CVE-2025-9231',
-                'https://openssl-library.org/news/secadv/20250930.txt',
-                'https://ubuntu.com/security/notices/USN-7786-1',
-                'https://www.cve.org/CVERecord?id=CVE-2025-9231'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: Timing side-channel in SM2 algorithm on 64 bit ARM'
-            },
-            {
-              'cve':  'CVE-2026-22795',
-              'cvss': {
-                'redhat': {
-                  'v3score':  '5.5',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-754'
-              ],
-              'description':   'Issue summary: An invalid or NULL pointer dereference can happen in\nan application processing a malformed PKCS#12 file.\n\nImpact summary: An application processing a malformed PKCS#12 file can be\ncaused to dereference an invalid or NULL pointer on memory read, resulting\nin a Denial of Service.\n\nA type confusion vulnerability exists in PKCS#12 parsing code where\nan ASN1_TYPE union member is accessed without first validating the type,\ncausing an invalid pointer read.\n\nThe location is constrained to a 1-byte address space, meaning any\nattempted pointer manipulation can only target addresses between 0x00 and 0xFF.\nThis range corresponds to the zero page, which is unmapped on most modern\noperating systems and will reliably result in a crash, leading only to a\nDenial of Service. Exploiting this issue also requires a user or application\nto process a maliciously crafted PKCS#12 file. It is uncommon to accept\nuntrusted PKCS#12 files in applications as they are usually used to store\nprivate keys which are trusted by definition. For these reasons, the issue\nwas assessed as Low severity.\n\nThe FIPS modules in 3.5, 3.4, 3.3 and 3.0 are not affected by this issue,\nas the PKCS12 implementation is outside the OpenSSL FIPS module boundary.\n\nOpenSSL 3.6, 3.5, 3.4, 3.3, 3.0 and 1.1.1 are vulnerable to this issue.\n\nOpenSSL 1.0.2 is not affected by this issue.',
-              'diffID':        'sha256:994456c4fd7b2b87346a81961efb4ce945a39592d32e0762b38768bca7c7d085',
-              'fixedVersions': [
-                '3.3.6-r0'
-              ],
-              'installedVersion': '3.3.3-r0',
-              'packageName':      'libssl3',
-              'purl':             'pkg:apk/alpine/libssl3@3.3.3-r0?arch=x86_64&distro=3.20.6',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2026-22795',
-                'https://github.com/openssl/openssl/commit/2502e7b7d4c0cf4f972a881641fe09edc67aeec4',
-                'https://github.com/openssl/openssl/commit/572844beca95068394c916626a6d3a490f831a49',
-                'https://github.com/openssl/openssl/commit/7bbca05be55b129651d9df4bdb92becc45002c12',
-                'https://github.com/openssl/openssl/commit/eeee3cbd4d682095ed431052f00403004596373e',
-                'https://github.com/openssl/openssl/commit/ef2fb66ec571564d64d1c74a12e388a2a54d05d2',
-                'https://nvd.nist.gov/vuln/detail/CVE-2026-22795',
-                'https://openssl-library.org/news/secadv/20260127.txt',
-                'https://ubuntu.com/security/notices/USN-7980-1',
-                'https://ubuntu.com/security/notices/USN-7980-2',
-                'https://www.cve.org/CVERecord?id=CVE-2026-22795'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: OpenSSL: Denial of Service due to type confusion in PKCS#12 file processing'
-            },
-            {
-              'cve':  'CVE-2026-22796',
-              'cvss': {
-                'redhat': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-754'
-              ],
-              'description':   'Issue summary: A type confusion vulnerability exists in the signature\nverification of signed PKCS#7 data where an ASN1_TYPE union member is\naccessed without first validating the type, causing an invalid or NULL\npointer dereference when processing malformed PKCS#7 data.\n\nImpact summary: An application performing signature verification of PKCS#7\ndata or calling directly the PKCS7_digest_from_attributes() function can be\ncaused to dereference an invalid or NULL pointer when reading, resulting in\na Denial of Service.\n\nThe function PKCS7_digest_from_attributes() accesses the message digest attribute\nvalue without validating its type. When the type is not V_ASN1_OCTET_STRING,\nthis results in accessing invalid memory through the ASN1_TYPE union, causing\na crash.\n\nExploiting this vulnerability requires an attacker to provide a malformed\nsigned PKCS#7 to an application that verifies it. The impact of the\nexploit is just a Denial of Service, the PKCS7 API is legacy and applications\nshould be using the CMS API instead. For these reasons the issue was\nassessed as Low severity.\n\nThe FIPS modules in 3.5, 3.4, 3.3 and 3.0 are not affected by this issue,\nas the PKCS#7 parsing implementation is outside the OpenSSL FIPS module\nboundary.\n\nOpenSSL 3.6, 3.5, 3.4, 3.3, 3.0, 1.1.1 and 1.0.2 are vulnerable to this issue.',
-              'diffID':        'sha256:994456c4fd7b2b87346a81961efb4ce945a39592d32e0762b38768bca7c7d085',
-              'fixedVersions': [
-                '3.3.6-r0'
-              ],
-              'installedVersion': '3.3.3-r0',
-              'packageName':      'libssl3',
-              'purl':             'pkg:apk/alpine/libssl3@3.3.3-r0?arch=x86_64&distro=3.20.6',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2026-22796',
-                'https://github.com/openssl/openssl/commit/2502e7b7d4c0cf4f972a881641fe09edc67aeec4',
-                'https://github.com/openssl/openssl/commit/572844beca95068394c916626a6d3a490f831a49',
-                'https://github.com/openssl/openssl/commit/7bbca05be55b129651d9df4bdb92becc45002c12',
-                'https://github.com/openssl/openssl/commit/eeee3cbd4d682095ed431052f00403004596373e',
-                'https://github.com/openssl/openssl/commit/ef2fb66ec571564d64d1c74a12e388a2a54d05d2',
-                'https://nvd.nist.gov/vuln/detail/CVE-2026-22796',
-                'https://openssl-library.org/news/secadv/20260127.txt',
-                'https://ubuntu.com/security/notices/USN-7980-1',
-                'https://ubuntu.com/security/notices/USN-7980-2',
-                'https://www.cve.org/CVERecord?id=CVE-2026-22796'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: OpenSSL: Denial of Service via type confusion in PKCS#7 signature verification'
-            },
-            {
-              'cve':  'CVE-2025-9232',
-              'cvss': {
-                'redhat': {
-                  'v3score':  '3.1',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L'
-                }
-              },
-              'cwes': [
-                'CWE-125'
-              ],
-              'description':   "Issue summary: An application using the OpenSSL HTTP client API functions may\ntrigger an out-of-bounds read if the 'no_proxy' environment variable is set and\nthe host portion of the authority component of the HTTP URL is an IPv6 address.\n\nImpact summary: An out-of-bounds read can trigger a crash which leads to\nDenial of Service for an application.\n\nThe OpenSSL HTTP client API functions can be used directly by applications\nbut they are also used by the OCSP client functions and CMP (Certificate\nManagement Protocol) client implementation in OpenSSL. However the URLs used\nby these implementations are unlikely to be controlled by an attacker.\n\nIn this vulnerable code the out of bounds read can only trigger a crash.\nFurthermore the vulnerability requires an attacker-controlled URL to be\npassed from an application to the OpenSSL function and the user has to have\na 'no_proxy' environment variable set. For the aforementioned reasons the\nissue was assessed as Low severity.\n\nThe vulnerable code was introduced in the following patch releases:\n3.0.16, 3.1.8, 3.2.4, 3.3.3, 3.4.0 and 3.5.0.\n\nThe FIPS modules in 3.5, 3.4, 3.3, 3.2, 3.1 and 3.0 are not affected by this\nissue, as the HTTP client implementation is outside the OpenSSL FIPS module\nboundary.",
-              'diffID':        'sha256:994456c4fd7b2b87346a81961efb4ce945a39592d32e0762b38768bca7c7d085',
-              'fixedVersions': [
-                '3.3.5-r0'
-              ],
-              'installedVersion': '3.3.3-r0',
-              'packageName':      'libssl3',
-              'purl':             'pkg:apk/alpine/libssl3@3.3.3-r0?arch=x86_64&distro=3.20.6',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2025/09/30/5',
-                'https://access.redhat.com/security/cve/CVE-2025-9232',
-                'https://github.com/openssl/openssl/commit/2b4ec20e47959170422922eaff25346d362dcb35',
-                'https://github.com/openssl/openssl/commit/654dc11d23468a74fc8ea4672b702dd3feb7be4b',
-                'https://github.com/openssl/openssl/commit/7cf21a30513c9e43c4bc3836c237cf086e194af3',
-                'https://github.com/openssl/openssl/commit/89e790ac431125a4849992858490bed6b225eadf',
-                'https://github.com/openssl/openssl/commit/bbf38c034cdabd0a13330abcc4855c866f53d2e0',
-                'https://nvd.nist.gov/vuln/detail/CVE-2025-9232',
-                'https://openssl-library.org/news/secadv/20250930.txt',
-                'https://ubuntu.com/security/notices/USN-7786-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2025-9232'
-              ],
-              'severity':   'LOW',
-              'suppressed': false,
-              'title':      'openssl: Out-of-bounds read in HTTP client no_proxy handling'
-            },
-            {
-              'cve':  'CVE-2024-58251',
-              'cwes': [
-                'CWE-150'
-              ],
-              'description':   'In netstat in BusyBox through 1.37.0, local users can launch of network application with an argv[0] containing an ANSI terminal escape sequence, leading to a denial of service (terminal locked up) when netstat is used by a victim.',
-              'diffID':        'sha256:994456c4fd7b2b87346a81961efb4ce945a39592d32e0762b38768bca7c7d085',
-              'fixedVersions': [
-                '1.36.1-r31'
-              ],
-              'installedVersion': '1.36.1-r29',
-              'packageName':      'ssl_client',
-              'purl':             'pkg:apk/alpine/ssl_client@1.36.1-r29?arch=x86_64&distro=3.20.6',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2025/04/23/6',
-                'https://bugs.busybox.net/show_bug.cgi?id=15922',
-                'https://www.busybox.net',
-                'https://www.busybox.net/downloads/',
-                'https://www.cve.org/CVERecord?id=CVE-2024-58251'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'In netstat in BusyBox through 1.37.0, local users can launch of networ ...'
-            },
-            {
-              'cve':  'CVE-2025-46394',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '3.3',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-451'
-              ],
-              'description':   'In tar in BusyBox through 1.37.0, a TAR archive can have filenames hidden from a listing through the use of terminal escape sequences.',
-              'diffID':        'sha256:994456c4fd7b2b87346a81961efb4ce945a39592d32e0762b38768bca7c7d085',
-              'fixedVersions': [
-                '1.36.1-r31'
-              ],
-              'installedVersion': '1.36.1-r29',
-              'packageName':      'ssl_client',
-              'purl':             'pkg:apk/alpine/ssl_client@1.36.1-r29?arch=x86_64&distro=3.20.6',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2025/04/23/5',
-                'http://www.openwall.com/lists/oss-security/2025/04/24/3',
-                'https://bugs.busybox.net/show_bug.cgi?id=16018',
-                'https://lists.busybox.net/pipermail/busybox/2024-July/090806.html',
-                'https://lists.busybox.net/pipermail/busybox/2024-July/090814.html',
-                'https://www.busybox.net',
-                'https://www.busybox.net/downloads/',
-                'https://www.cve.org/CVERecord?id=CVE-2025-46394',
-                'https://www.openwall.com/lists/oss-security/2025/04/23/1'
-              ],
-              'severity':   'LOW',
-              'suppressed': false,
-              'title':      'In tar in BusyBox through 1.37.0, a TAR archive can have filenames hid ...'
-            }
-          ]
-        }
-      ],
-      'summary': {
-        'critical':   2,
-        'high':       2,
-        'low':        5,
-        'medium':     23,
-        'suppressed': 0,
-        'unknown':    0
-      }
-    }
-  },
-  {
-    'id':    'default/34341ccfb6dd0b5140720f2cb95e2b4387b55bf44f053d8fbce89c24cf64e51c',
-    'type':  'storage.sbomscanner.kubewarden.io.vulnerabilityreport',
-    'links': {
-      'patch':  'https://localhost:8005/v1/storage.sbomscanner.kubewarden.io.vulnerabilityreports/default/34341ccfb6dd0b5140720f2cb95e2b4387b55bf44f053d8fbce89c24cf64e51c',
-      'remove': 'https://localhost:8005/v1/storage.sbomscanner.kubewarden.io.vulnerabilityreports/default/34341ccfb6dd0b5140720f2cb95e2b4387b55bf44f053d8fbce89c24cf64e51c',
-      'self':   'https://localhost:8005/v1/storage.sbomscanner.kubewarden.io.vulnerabilityreports/default/34341ccfb6dd0b5140720f2cb95e2b4387b55bf44f053d8fbce89c24cf64e51c',
-      'update': 'https://localhost:8005/v1/storage.sbomscanner.kubewarden.io.vulnerabilityreports/default/34341ccfb6dd0b5140720f2cb95e2b4387b55bf44f053d8fbce89c24cf64e51c',
-      'view':   'https://localhost:8005/apis/storage.sbomscanner.kubewarden.io/v1alpha1/namespaces/default/vulnerabilityreports/34341ccfb6dd0b5140720f2cb95e2b4387b55bf44f053d8fbce89c24cf64e51c'
-    },
-    'apiVersion':    'storage.sbomscanner.kubewarden.io/v1alpha1',
-    'imageMetadata': {
-      'digest':      'sha256:0280c1a478f8c9daf4d60b066e1eb76c94bf90beb5c67a0ce74c50a3f8b48a94',
-      'platform':    'linux/amd64',
-      'registry':    'demo-02',
-      'registryURI': 'ghcr.io',
-      'repository':  'linuxcontainers/alpine',
-      'tag':         '3.17.3'
-    },
-    'kind':     'VulnerabilityReport',
-    'metadata': {
-      'creationTimestamp': '2026-01-09T22:47:11Z',
-      'fields':            [
-        '34341ccfb6dd0b5140720f2cb95e2b4387b55bf44f053d8fbce89c24cf64e51c',
-        'ghcr.io/linuxcontainers/alpine:3.17.3',
-        'linux/amd64',
-        '44 (0 suppressed)'
-      ],
-      'labels': {
-        'app.kubernetes.io/managed-by':          'sbomscanner',
-        'app.kubernetes.io/part-of':             'sbomscanner',
-        'sbomscanner.kubewarden.io/scanjob-uid': '42184d01-4b15-466f-98aa-e802d1b6b6b8'
-      },
-      'name':            '34341ccfb6dd0b5140720f2cb95e2b4387b55bf44f053d8fbce89c24cf64e51c',
-      'namespace':       'default',
-      'ownerReferences': [
-        {
-          'apiVersion':         'storage.sbomscanner.kubewarden.io/v1alpha1',
-          'blockOwnerDeletion': true,
-          'controller':         true,
-          'kind':               'SBOM',
-          'name':               '34341ccfb6dd0b5140720f2cb95e2b4387b55bf44f053d8fbce89c24cf64e51c',
-          'uid':                '90fe5009-e25b-4802-bd4c-68ff0b2d9ed9'
-        }
-      ],
-      'relationships': [
-        {
-          'fromId':   'default/34341ccfb6dd0b5140720f2cb95e2b4387b55bf44f053d8fbce89c24cf64e51c',
-          'fromType': 'storage.sbomscanner.kubewarden.io.sbom',
-          'rel':      'owner',
-          'state':    'active',
-          'message':  'Resource is current'
-        }
-      ],
-      'resourceVersion': '4',
-      'state':           {
-        'error':         false,
-        'message':       'Resource is current',
-        'name':          'active',
-        'transitioning': false
-      },
-      'uid': '5d3fff08-f65e-4c46-8f16-3350f233ed25'
-    },
-    'report': {
-      'results': [
-        {
-          'class':           'os-pkgs',
-          'target':          '/var/run/worker/trivy.sbom.4042312252.json (alpine 3.17.3)',
-          'type':            'alpine',
-          'vulnerabilities': [
-            {
-              'cve':  'CVE-2023-42363',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.5',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.8',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   'A use-after-free vulnerability was discovered in xasprintf function in xfuncs_printf.c:344 in BusyBox v.1.36.1.',
-              'diffID':        'sha256:f1417ff83b319fbdae6dd9cd6d8c9c88002dcd75ecf6ec201c8c6894681cf2b5',
-              'fixedVersions': [
-                '1.35.0-r31'
-              ],
-              'installedVersion': '1.35.0-r29',
-              'packageName':      'busybox',
-              'purl':             'pkg:apk/alpine/busybox@1.35.0-r29?arch=x86_64&distro=3.17.3',
-              'references':       [
-                'http://lists.busybox.net/pipermail/busybox/2024-May/090760.html',
-                'https://access.redhat.com/security/cve/CVE-2023-42363',
-                'https://bugs.busybox.net/show_bug.cgi?id=15865',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-42363',
-                'https://ubuntu.com/security/notices/USN-6961-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-42363'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk'
-            },
-            {
-              'cve':  'CVE-2023-42364',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.5',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.8',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   'A use-after-free vulnerability in BusyBox v.1.36.1 allows attackers to cause a denial of service via a crafted awk pattern in the awk.c evaluate function.',
-              'diffID':        'sha256:f1417ff83b319fbdae6dd9cd6d8c9c88002dcd75ecf6ec201c8c6894681cf2b5',
-              'fixedVersions': [
-                '1.35.0-r31'
-              ],
-              'installedVersion': '1.35.0-r29',
-              'packageName':      'busybox',
-              'purl':             'pkg:apk/alpine/busybox@1.35.0-r29?arch=x86_64&distro=3.17.3',
-              'references':       [
-                'http://lists.busybox.net/pipermail/busybox/2024-May/090762.html',
-                'https://access.redhat.com/security/cve/CVE-2023-42364',
-                'https://bugs.busybox.net/show_bug.cgi?id=15868',
-                'https://gitlab.alpinelinux.org/alpine/aports/-/blob/master/main/busybox/CVE-2023-42364-CVE-2023-42365.patch',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-42364',
-                'https://ubuntu.com/security/notices/USN-6961-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-42364'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'busybox: use-after-free'
-            },
-            {
-              'cve':  'CVE-2023-42365',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.5',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.8',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   'A use-after-free vulnerability was discovered in BusyBox v.1.36.1 via a crafted awk pattern in the awk.c copyvar function.',
-              'diffID':        'sha256:f1417ff83b319fbdae6dd9cd6d8c9c88002dcd75ecf6ec201c8c6894681cf2b5',
-              'fixedVersions': [
-                '1.35.0-r31'
-              ],
-              'installedVersion': '1.35.0-r29',
-              'packageName':      'busybox',
-              'purl':             'pkg:apk/alpine/busybox@1.35.0-r29?arch=x86_64&distro=3.17.3',
-              'references':       [
-                'http://lists.busybox.net/pipermail/busybox/2024-May/090762.html',
-                'https://access.redhat.com/security/cve/CVE-2023-42365',
-                'https://bugs.busybox.net/show_bug.cgi?id=15871',
-                'https://gitlab.alpinelinux.org/alpine/aports/-/blob/master/main/busybox/CVE-2023-42364-CVE-2023-42365.patch',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-42365',
-                'https://ubuntu.com/security/notices/USN-6961-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-42365'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'busybox: use-after-free'
-            },
-            {
-              'cve':  'CVE-2023-42366',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.5',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.1',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-787'
-              ],
-              'description':   'A heap-buffer-overflow was discovered in BusyBox v.1.36.1 in the next_token function at awk.c:1159.',
-              'diffID':        'sha256:f1417ff83b319fbdae6dd9cd6d8c9c88002dcd75ecf6ec201c8c6894681cf2b5',
-              'fixedVersions': [
-                '1.35.0-r30'
-              ],
-              'installedVersion': '1.35.0-r29',
-              'packageName':      'busybox',
-              'purl':             'pkg:apk/alpine/busybox@1.35.0-r29?arch=x86_64&distro=3.17.3',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2023-42366',
-                'https://bugs.busybox.net/show_bug.cgi?id=15874',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-42366',
-                'https://security.netapp.com/advisory/ntap-20241206-0007/',
-                'https://www.cve.org/CVERecord?id=CVE-2023-42366'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'busybox: A heap-buffer-overflow'
-            },
-            {
-              'cve':  'CVE-2023-42363',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.5',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.8',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   'A use-after-free vulnerability was discovered in xasprintf function in xfuncs_printf.c:344 in BusyBox v.1.36.1.',
-              'diffID':        'sha256:f1417ff83b319fbdae6dd9cd6d8c9c88002dcd75ecf6ec201c8c6894681cf2b5',
-              'fixedVersions': [
-                '1.35.0-r31'
-              ],
-              'installedVersion': '1.35.0-r29',
-              'packageName':      'busybox-binsh',
-              'purl':             'pkg:apk/alpine/busybox-binsh@1.35.0-r29?arch=x86_64&distro=3.17.3',
-              'references':       [
-                'http://lists.busybox.net/pipermail/busybox/2024-May/090760.html',
-                'https://access.redhat.com/security/cve/CVE-2023-42363',
-                'https://bugs.busybox.net/show_bug.cgi?id=15865',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-42363',
-                'https://ubuntu.com/security/notices/USN-6961-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-42363'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk'
-            },
-            {
-              'cve':  'CVE-2023-42364',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.5',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.8',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   'A use-after-free vulnerability in BusyBox v.1.36.1 allows attackers to cause a denial of service via a crafted awk pattern in the awk.c evaluate function.',
-              'diffID':        'sha256:f1417ff83b319fbdae6dd9cd6d8c9c88002dcd75ecf6ec201c8c6894681cf2b5',
-              'fixedVersions': [
-                '1.35.0-r31'
-              ],
-              'installedVersion': '1.35.0-r29',
-              'packageName':      'busybox-binsh',
-              'purl':             'pkg:apk/alpine/busybox-binsh@1.35.0-r29?arch=x86_64&distro=3.17.3',
-              'references':       [
-                'http://lists.busybox.net/pipermail/busybox/2024-May/090762.html',
-                'https://access.redhat.com/security/cve/CVE-2023-42364',
-                'https://bugs.busybox.net/show_bug.cgi?id=15868',
-                'https://gitlab.alpinelinux.org/alpine/aports/-/blob/master/main/busybox/CVE-2023-42364-CVE-2023-42365.patch',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-42364',
-                'https://ubuntu.com/security/notices/USN-6961-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-42364'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'busybox: use-after-free'
-            },
-            {
-              'cve':  'CVE-2023-42365',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.5',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.8',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   'A use-after-free vulnerability was discovered in BusyBox v.1.36.1 via a crafted awk pattern in the awk.c copyvar function.',
-              'diffID':        'sha256:f1417ff83b319fbdae6dd9cd6d8c9c88002dcd75ecf6ec201c8c6894681cf2b5',
-              'fixedVersions': [
-                '1.35.0-r31'
-              ],
-              'installedVersion': '1.35.0-r29',
-              'packageName':      'busybox-binsh',
-              'purl':             'pkg:apk/alpine/busybox-binsh@1.35.0-r29?arch=x86_64&distro=3.17.3',
-              'references':       [
-                'http://lists.busybox.net/pipermail/busybox/2024-May/090762.html',
-                'https://access.redhat.com/security/cve/CVE-2023-42365',
-                'https://bugs.busybox.net/show_bug.cgi?id=15871',
-                'https://gitlab.alpinelinux.org/alpine/aports/-/blob/master/main/busybox/CVE-2023-42364-CVE-2023-42365.patch',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-42365',
-                'https://ubuntu.com/security/notices/USN-6961-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-42365'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'busybox: use-after-free'
-            },
-            {
-              'cve':  'CVE-2023-42366',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.5',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.1',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-787'
-              ],
-              'description':   'A heap-buffer-overflow was discovered in BusyBox v.1.36.1 in the next_token function at awk.c:1159.',
-              'diffID':        'sha256:f1417ff83b319fbdae6dd9cd6d8c9c88002dcd75ecf6ec201c8c6894681cf2b5',
-              'fixedVersions': [
-                '1.35.0-r30'
-              ],
-              'installedVersion': '1.35.0-r29',
-              'packageName':      'busybox-binsh',
-              'purl':             'pkg:apk/alpine/busybox-binsh@1.35.0-r29?arch=x86_64&distro=3.17.3',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2023-42366',
-                'https://bugs.busybox.net/show_bug.cgi?id=15874',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-42366',
-                'https://security.netapp.com/advisory/ntap-20241206-0007/',
-                'https://www.cve.org/CVERecord?id=CVE-2023-42366'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'busybox: A heap-buffer-overflow'
-            },
-            {
-              'cve':  'CVE-2023-5363',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N'
-                },
-                'redhat': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-684'
-              ],
-              'description':   "Issue summary: A bug has been identified in the processing of key and\ninitialisation vector (IV) lengths.  This can lead to potential truncation\nor overruns during the initialisation of some symmetric ciphers.\n\nImpact summary: A truncation in the IV can result in non-uniqueness,\nwhich could result in loss of confidentiality for some cipher modes.\n\nWhen calling EVP_EncryptInit_ex2(), EVP_DecryptInit_ex2() or\nEVP_CipherInit_ex2() the provided OSSL_PARAM array is processed after\nthe key and IV have been established.  Any alterations to the key length,\nvia the \"keylen\" parameter or the IV length, via the \"ivlen\" parameter,\nwithin the OSSL_PARAM array will not take effect as intended, potentially\ncausing truncation or overreading of these values.  The following ciphers\nand cipher modes are impacted: RC2, RC4, RC5, CCM, GCM and OCB.\n\nFor the CCM, GCM and OCB cipher modes, truncation of the IV can result in\nloss of confidentiality.  For example, when following NIST's SP 800-38D\nsection 8.2.1 guidance for constructing a deterministic IV for AES in\nGCM mode, truncation of the counter portion could lead to IV reuse.\n\nBoth truncations and overruns of the key and overruns of the IV will\nproduce incorrect results and could, in some cases, trigger a memory\nexception.  However, these issues are not currently assessed as security\ncritical.\n\nChanging the key and/or IV lengths is not considered to be a common operation\nand the vulnerable API was recently introduced. Furthermore it is likely that\napplication developers will have spotted this problem during testing since\ndecryption would fail unless both peers in the communication were similarly\nvulnerable. For these reasons we expect the probability of an application being\nvulnerable to this to be quite low. However if an application is vulnerable then\nthis issue is considered very serious. For these reasons we have assessed this\nissue as Moderate severity overall.\n\nThe OpenSSL SSL/TLS implementation is not affected by this issue.\n\nThe OpenSSL 3.0 and 3.1 FIPS providers are not affected by this because\nthe issue lies outside of the FIPS provider boundary.\n\nOpenSSL 3.1 and 3.0 are vulnerable to this issue.",
-              'diffID':        'sha256:05590cd53e0098af064bffc79d5b76acb8f14b8db4643871eb0a18325fad8005',
-              'fixedVersions': [
-                '3.0.12-r0'
-              ],
-              'installedVersion': '3.0.8-r4',
-              'packageName':      'libcrypto3',
-              'purl':             'pkg:apk/alpine/libcrypto3@3.0.8-r4?arch=x86_64&distro=3.17.3',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2023/10/24/1',
-                'https://access.redhat.com/errata/RHSA-2024:0310',
-                'https://access.redhat.com/security/cve/CVE-2023-5363',
-                'https://bugzilla.redhat.com/2243839',
-                'https://errata.almalinux.org/9/ALSA-2024-0310.html',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=0df40630850fb2740e6be6890bb905d3fc623b2d',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=5f69f5c65e483928c4b28ed16af6e5742929f1ee',
-                'https://linux.oracle.com/cve/CVE-2023-5363.html',
-                'https://linux.oracle.com/errata/ELSA-2024-12093.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-5363',
-                'https://security.netapp.com/advisory/ntap-20231027-0010/',
-                'https://security.netapp.com/advisory/ntap-20240201-0003/',
-                'https://security.netapp.com/advisory/ntap-20240201-0004/',
-                'https://security.netapp.com/advisory/ntap-20241108-0002/',
-                'https://ubuntu.com/security/notices/USN-6450-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-5363',
-                'https://www.debian.org/security/2023/dsa-5532',
-                'https://www.openssl.org/news/secadv/20231024.txt'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: Incorrect cipher key and IV length processing'
-            },
-            {
-              'cve':  'CVE-2024-6119',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-843'
-              ],
-              'description':   "Issue summary: Applications performing certificate name checks (e.g., TLS\nclients checking server certificates) may attempt to read an invalid memory\naddress resulting in abnormal termination of the application process.\n\nImpact summary: Abnormal termination of an application can a cause a denial of\nservice.\n\nApplications performing certificate name checks (e.g., TLS clients checking\nserver certificates) may attempt to read an invalid memory address when\ncomparing the expected name with an `otherName` subject alternative name of an\nX.509 certificate. This may result in an exception that terminates the\napplication program.\n\nNote that basic certificate chain validation (signatures, dates, ...) is not\naffected, the denial of service can occur only when the application also\nspecifies an expected DNS name, Email address or IP address.\n\nTLS servers rarely solicit client certificates, and even when they do, they\ngenerally don't perform a name check against a reference identifier (expected\nidentity), but rather extract the presented identity after checking the\ncertificate chain.  So TLS servers are generally not affected and the severity\nof the issue is Moderate.\n\nThe FIPS modules in 3.3, 3.2, 3.1 and 3.0 are not affected by this issue.",
-              'diffID':        'sha256:05590cd53e0098af064bffc79d5b76acb8f14b8db4643871eb0a18325fad8005',
-              'fixedVersions': [
-                '3.0.15-r0'
-              ],
-              'installedVersion': '3.0.8-r4',
-              'packageName':      'libcrypto3',
-              'purl':             'pkg:apk/alpine/libcrypto3@3.0.8-r4?arch=x86_64&distro=3.17.3',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2024/09/03/4',
-                'https://access.redhat.com/errata/RHSA-2024:8935',
-                'https://access.redhat.com/security/cve/CVE-2024-6119',
-                'https://bugzilla.redhat.com/2306158',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2306158',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-6119',
-                'https://errata.almalinux.org/9/ALSA-2024-8935.html',
-                'https://errata.rockylinux.org/RLSA-2024:6783',
-                'https://github.com/openssl/openssl/commit/05f360d9e849a1b277db628f1f13083a7f8dd04f',
-                'https://github.com/openssl/openssl/commit/06d1dc3fa96a2ba5a3e22735a033012aadc9f0d6',
-                'https://github.com/openssl/openssl/commit/621f3729831b05ee828a3203eddb621d014ff2b2',
-                'https://github.com/openssl/openssl/commit/7dfcee2cd2a63b2c64b9b4b0850be64cb695b0a0',
-                'https://github.com/openssl/openssl/security/advisories/GHSA-5qrj-vq78-58fj',
-                'https://linux.oracle.com/cve/CVE-2024-6119.html',
-                'https://linux.oracle.com/errata/ELSA-2024-8935.html',
-                'https://lists.freebsd.org/archives/freebsd-security/2024-September/000303.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2024-6119',
-                'https://openssl-library.org/news/secadv/20240903.txt',
-                'https://security.netapp.com/advisory/ntap-20240912-0001/',
-                'https://ubuntu.com/security/notices/USN-6986-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2024-6119'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: Possible denial of service in X.509 name checks'
-            },
-            {
-              'cve':  'CVE-2023-2650',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '6.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-770'
-              ],
-              'description':   "Issue summary: Processing some specially crafted ASN.1 object identifiers or\ndata containing them may be very slow.\n\nImpact summary: Applications that use OBJ_obj2txt() directly, or use any of\nthe OpenSSL subsystems OCSP, PKCS7/SMIME, CMS, CMP/CRMF or TS with no message\nsize limit may experience notable to very long delays when processing those\nmessages, which may lead to a Denial of Service.\n\nAn OBJECT IDENTIFIER is composed of a series of numbers - sub-identifiers -\nmost of which have no size limit.  OBJ_obj2txt() may be used to translate\nan ASN.1 OBJECT IDENTIFIER given in DER encoding form (using the OpenSSL\ntype ASN1_OBJECT) to its canonical numeric text form, which are the\nsub-identifiers of the OBJECT IDENTIFIER in decimal form, separated by\nperiods.\n\nWhen one of the sub-identifiers in the OBJECT IDENTIFIER is very large\n(these are sizes that are seen as absurdly large, taking up tens or hundreds\nof KiBs), the translation to a decimal number in text may take a very long\ntime.  The time complexity is O(n^2) with 'n' being the size of the\nsub-identifiers in bytes (*).\n\nWith OpenSSL 3.0, support to fetch cryptographic algorithms using names /\nidentifiers in string form was introduced.  This includes using OBJECT\nIDENTIFIERs in canonical numeric text form as identifiers for fetching\nalgorithms.\n\nSuch OBJECT IDENTIFIERs may be received through the ASN.1 structure\nAlgorithmIdentifier, which is commonly used in multiple protocols to specify\nwhat cryptographic algorithm should be used to sign or verify, encrypt or\ndecrypt, or digest passed data.\n\nApplications that call OBJ_obj2txt() directly with untrusted data are\naffected, with any version of OpenSSL.  If the use is for the mere purpose\nof display, the severity is considered low.\n\nIn OpenSSL 3.0 and newer, this affects the subsystems OCSP, PKCS7/SMIME,\nCMS, CMP/CRMF or TS.  It also impacts anything that processes X.509\ncertificates, including simple things like verifying its signature.\n\nThe impact on TLS is relatively low, because all versions of OpenSSL have a\n100KiB limit on the peer's certificate chain.  Additionally, this only\nimpacts clients, or servers that have explicitly enabled client\nauthentication.\n\nIn OpenSSL 1.1.1 and 1.0.2, this only affects displaying diverse objects,\nsuch as X.509 certificates.  This is assumed to not happen in such a way\nthat it would cause a Denial of Service, so these versions are considered\nnot affected by this issue in such a way that it would be cause for concern,\nand the severity is therefore considered low.",
-              'diffID':        'sha256:05590cd53e0098af064bffc79d5b76acb8f14b8db4643871eb0a18325fad8005',
-              'fixedVersions': [
-                '3.0.9-r0'
-              ],
-              'installedVersion': '3.0.8-r4',
-              'packageName':      'libcrypto3',
-              'purl':             'pkg:apk/alpine/libcrypto3@3.0.8-r4?arch=x86_64&distro=3.17.3',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2023/05/30/1',
-                'https://access.redhat.com/errata/RHSA-2023:6330',
-                'https://access.redhat.com/security/cve/CVE-2023-2650',
-                'https://bugzilla.redhat.com/1858038',
-                'https://bugzilla.redhat.com/2207947',
-                'https://errata.almalinux.org/9/ALSA-2023-6330.html',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=423a2bc737a908ad0c77bda470b2b59dc879936b',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=853c5e56ee0b8650c73140816bb8b91d6163422c',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=9e209944b35cf82368071f160a744b6178f9b098',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=db779b0e10b047f2585615e0b8f2acdf21f8544a',
-                'https://linux.oracle.com/cve/CVE-2023-2650.html',
-                'https://linux.oracle.com/errata/ELSA-2023-6330.html',
-                'https://lists.debian.org/debian-lts-announce/2023/06/msg00011.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-2650',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0009',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://security.netapp.com/advisory/ntap-20230703-0001/',
-                'https://security.netapp.com/advisory/ntap-20231027-0009/',
-                'https://ubuntu.com/security/notices/USN-6119-1',
-                'https://ubuntu.com/security/notices/USN-6188-1',
-                'https://ubuntu.com/security/notices/USN-6672-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-2650',
-                'https://www.debian.org/security/2023/dsa-5417',
-                'https://www.openssl.org/news/secadv/20230530.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: Possible DoS translating ASN.1 object identifiers'
-            },
-            {
-              'cve':  'CVE-2023-2975',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N'
-                },
-                'redhat': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-354',
-                'CWE-287'
-              ],
-              'description':   'Issue summary: The AES-SIV cipher implementation contains a bug that causes\nit to ignore empty associated data entries which are unauthenticated as\na consequence.\n\nImpact summary: Applications that use the AES-SIV algorithm and want to\nauthenticate empty data entries as associated data can be misled by removing,\nadding or reordering such empty entries as these are ignored by the OpenSSL\nimplementation. We are currently unaware of any such applications.\n\nThe AES-SIV algorithm allows for authentication of multiple associated\ndata entries along with the encryption. To authenticate empty data the\napplication has to call EVP_EncryptUpdate() (or EVP_CipherUpdate()) with\nNULL pointer as the output buffer and 0 as the input buffer length.\nThe AES-SIV implementation in OpenSSL just returns success for such a call\ninstead of performing the associated data authentication operation.\nThe empty data thus will not be authenticated.\n\nAs this issue does not affect non-empty associated data authentication and\nwe expect it to be rare for an application to use empty associated data\nentries this is qualified as Low severity issue.',
-              'diffID':        'sha256:05590cd53e0098af064bffc79d5b76acb8f14b8db4643871eb0a18325fad8005',
-              'fixedVersions': [
-                '3.0.9-r2'
-              ],
-              'installedVersion': '3.0.8-r4',
-              'packageName':      'libcrypto3',
-              'purl':             'pkg:apk/alpine/libcrypto3@3.0.8-r4?arch=x86_64&distro=3.17.3',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2023/07/15/1',
-                'http://www.openwall.com/lists/oss-security/2023/07/19/5',
-                'https://access.redhat.com/errata/RHSA-2024:2447',
-                'https://access.redhat.com/security/cve/CVE-2023-2975',
-                'https://bugzilla.redhat.com/2223016',
-                'https://bugzilla.redhat.com/2224962',
-                'https://bugzilla.redhat.com/2227852',
-                'https://bugzilla.redhat.com/2248616',
-                'https://bugzilla.redhat.com/2257571',
-                'https://bugzilla.redhat.com/2258502',
-                'https://bugzilla.redhat.com/2259944',
-                'https://errata.almalinux.org/9/ALSA-2024-2447.html',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=00e2f5eea29994d19293ec4e8c8775ba73678598',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=6a83f0c958811f07e0d11dfc6b5a6a98edfd5bdc',
-                'https://linux.oracle.com/cve/CVE-2023-2975.html',
-                'https://linux.oracle.com/errata/ELSA-2024-2447.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-2975',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://security.netapp.com/advisory/ntap-20230725-0004/',
-                'https://ubuntu.com/security/notices/USN-6450-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-2975',
-                'https://www.openssl.org/news/secadv/20230714.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: AES-SIV cipher implementation contains a bug that causes it to ignore empty associated data entries'
-            },
-            {
-              'cve':  'CVE-2023-3446',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L'
-                },
-                'redhat': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L'
-                }
-              },
-              'cwes': [
-                'CWE-606',
-                'CWE-1333'
-              ],
-              'description':   "Issue summary: Checking excessively long DH keys or parameters may be very slow.\n\nImpact summary: Applications that use the functions DH_check(), DH_check_ex()\nor EVP_PKEY_param_check() to check a DH key or DH parameters may experience long\ndelays. Where the key or parameters that are being checked have been obtained\nfrom an untrusted source this may lead to a Denial of Service.\n\nThe function DH_check() performs various checks on DH parameters. One of those\nchecks confirms that the modulus ('p' parameter) is not too large. Trying to use\na very large modulus is slow and OpenSSL will not normally use a modulus which\nis over 10,000 bits in length.\n\nHowever the DH_check() function checks numerous aspects of the key or parameters\nthat have been supplied. Some of those checks use the supplied modulus value\neven if it has already been found to be too large.\n\nAn application that calls DH_check() and supplies a key or parameters obtained\nfrom an untrusted source could be vulernable to a Denial of Service attack.\n\nThe function DH_check() is itself called by a number of other OpenSSL functions.\nAn application calling any of those other functions may similarly be affected.\nThe other functions affected by this are DH_check_ex() and\nEVP_PKEY_param_check().\n\nAlso vulnerable are the OpenSSL dhparam and pkeyparam command line applications\nwhen using the '-check' option.\n\nThe OpenSSL SSL/TLS implementation is not affected by this issue.\nThe OpenSSL 3.0 and 3.1 FIPS providers are not affected by this issue.",
-              'diffID':        'sha256:05590cd53e0098af064bffc79d5b76acb8f14b8db4643871eb0a18325fad8005',
-              'fixedVersions': [
-                '3.0.9-r3'
-              ],
-              'installedVersion': '3.0.8-r4',
-              'packageName':      'libcrypto3',
-              'purl':             'pkg:apk/alpine/libcrypto3@3.0.8-r4?arch=x86_64&distro=3.17.3',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2023/07/19/4',
-                'http://www.openwall.com/lists/oss-security/2023/07/19/5',
-                'http://www.openwall.com/lists/oss-security/2023/07/19/6',
-                'http://www.openwall.com/lists/oss-security/2023/07/31/1',
-                'http://www.openwall.com/lists/oss-security/2024/05/16/1',
-                'https://access.redhat.com/errata/RHSA-2024:2447',
-                'https://access.redhat.com/security/cve/CVE-2023-3446',
-                'https://bugzilla.redhat.com/2223016',
-                'https://bugzilla.redhat.com/2224962',
-                'https://bugzilla.redhat.com/2227852',
-                'https://bugzilla.redhat.com/2248616',
-                'https://bugzilla.redhat.com/2257571',
-                'https://bugzilla.redhat.com/2258502',
-                'https://bugzilla.redhat.com/2259944',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2224962',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2257582',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2257583',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2258677',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2258688',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2258691',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2258694',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2258700',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-36763',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-36764',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3446',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45229',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45231',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45232',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45233',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45235',
-                'https://errata.almalinux.org/9/ALSA-2024-2447.html',
-                'https://errata.rockylinux.org/RLSA-2024:2264',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=1fa20cf2f506113c761777127a38bce5068740eb',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=8780a896543a654e757db1b9396383f9d8095528',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=9a0a4d3c1e7138915563c0df4fe6a3f9377b839c',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=fc9867c1e03c22ebf56943be205202e576aabf23',
-                'https://linux.oracle.com/cve/CVE-2023-3446.html',
-                'https://linux.oracle.com/errata/ELSA-2024-2447.html',
-                'https://lists.debian.org/debian-lts-announce/2023/08/msg00019.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-3446',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://security.netapp.com/advisory/ntap-20230803-0011/',
-                'https://ubuntu.com/security/notices/USN-6435-1',
-                'https://ubuntu.com/security/notices/USN-6435-2',
-                'https://ubuntu.com/security/notices/USN-6450-1',
-                'https://ubuntu.com/security/notices/USN-6709-1',
-                'https://ubuntu.com/security/notices/USN-7018-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-3446',
-                'https://www.openssl.org/news/secadv/20230719.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: Excessive time spent checking DH keys and parameters'
-            },
-            {
-              'cve':  'CVE-2023-3817',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L'
-                },
-                'redhat': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L'
-                }
-              },
-              'cwes': [
-                'CWE-606',
-                'CWE-834'
-              ],
-              'description':   'Issue summary: Checking excessively long DH keys or parameters may be very slow.\n\nImpact summary: Applications that use the functions DH_check(), DH_check_ex()\nor EVP_PKEY_param_check() to check a DH key or DH parameters may experience long\ndelays. Where the key or parameters that are being checked have been obtained\nfrom an untrusted source this may lead to a Denial of Service.\n\nThe function DH_check() performs various checks on DH parameters. After fixing\nCVE-2023-3446 it was discovered that a large q parameter value can also trigger\nan overly long computation during some of these checks. A correct q value,\nif present, cannot be larger than the modulus p parameter, thus it is\nunnecessary to perform these checks if q is larger than p.\n\nAn application that calls DH_check() and supplies a key or parameters obtained\nfrom an untrusted source could be vulnerable to a Denial of Service attack.\n\nThe function DH_check() is itself called by a number of other OpenSSL functions.\nAn application calling any of those other functions may similarly be affected.\nThe other functions affected by this are DH_check_ex() and\nEVP_PKEY_param_check().\n\nAlso vulnerable are the OpenSSL dhparam and pkeyparam command line applications\nwhen using the "-check" option.\n\nThe OpenSSL SSL/TLS implementation is not affected by this issue.\n\nThe OpenSSL 3.0 and 3.1 FIPS providers are not affected by this issue.',
-              'diffID':        'sha256:05590cd53e0098af064bffc79d5b76acb8f14b8db4643871eb0a18325fad8005',
-              'fixedVersions': [
-                '3.0.10-r0'
-              ],
-              'installedVersion': '3.0.8-r4',
-              'packageName':      'libcrypto3',
-              'purl':             'pkg:apk/alpine/libcrypto3@3.0.8-r4?arch=x86_64&distro=3.17.3',
-              'references':       [
-                'http://seclists.org/fulldisclosure/2023/Jul/43',
-                'http://www.openwall.com/lists/oss-security/2023/07/31/1',
-                'http://www.openwall.com/lists/oss-security/2023/09/22/11',
-                'http://www.openwall.com/lists/oss-security/2023/09/22/9',
-                'http://www.openwall.com/lists/oss-security/2023/11/06/2',
-                'https://access.redhat.com/errata/RHSA-2024:2447',
-                'https://access.redhat.com/security/cve/CVE-2023-3817',
-                'https://bugzilla.redhat.com/2223016',
-                'https://bugzilla.redhat.com/2224962',
-                'https://bugzilla.redhat.com/2227852',
-                'https://bugzilla.redhat.com/2248616',
-                'https://bugzilla.redhat.com/2257571',
-                'https://bugzilla.redhat.com/2258502',
-                'https://bugzilla.redhat.com/2259944',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2224962',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2227852',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2248616',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2270358',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3446',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3817',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-5678',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-2408',
-                'https://errata.almalinux.org/9/ALSA-2024-2447.html',
-                'https://errata.rockylinux.org/RLSA-2023:7877',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=6a1eb62c29db6cb5eec707f9338aee00f44e26f5',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=869ad69aadd985c7b8ca6f4e5dd0eb274c9f3644',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=9002fd07327a91f35ba6c1307e71fa6fd4409b7f',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=91ddeba0f2269b017dc06c46c993a788974b1aa5',
-                'https://linux.oracle.com/cve/CVE-2023-3817.html',
-                'https://linux.oracle.com/errata/ELSA-2024-2447.html',
-                'https://lists.debian.org/debian-lts-announce/2023/08/msg00019.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-3817',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://security.netapp.com/advisory/ntap-20230818-0014/',
-                'https://security.netapp.com/advisory/ntap-20231027-0008/',
-                'https://security.netapp.com/advisory/ntap-20240621-0006/',
-                'https://ubuntu.com/security/notices/USN-6435-1',
-                'https://ubuntu.com/security/notices/USN-6435-2',
-                'https://ubuntu.com/security/notices/USN-6450-1',
-                'https://ubuntu.com/security/notices/USN-6709-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-3817',
-                'https://www.openssl.org/news/secadv/20230731.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'OpenSSL: Excessive time spent checking DH q parameter value'
-            },
-            {
-              'cve':  'CVE-2023-5678',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L'
-                },
-                'redhat': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L'
-                }
-              },
-              'cwes': [
-                'CWE-606',
-                'CWE-754'
-              ],
-              'description':   "Issue summary: Generating excessively long X9.42 DH keys or checking\nexcessively long X9.42 DH keys or parameters may be very slow.\n\nImpact summary: Applications that use the functions DH_generate_key() to\ngenerate an X9.42 DH key may experience long delays.  Likewise, applications\nthat use DH_check_pub_key(), DH_check_pub_key_ex() or EVP_PKEY_public_check()\nto check an X9.42 DH key or X9.42 DH parameters may experience long delays.\nWhere the key or parameters that are being checked have been obtained from\nan untrusted source this may lead to a Denial of Service.\n\nWhile DH_check() performs all the necessary checks (as of CVE-2023-3817),\nDH_check_pub_key() doesn't make any of these checks, and is therefore\nvulnerable for excessively large P and Q parameters.\n\nLikewise, while DH_generate_key() performs a check for an excessively large\nP, it doesn't check for an excessively large Q.\n\nAn application that calls DH_generate_key() or DH_check_pub_key() and\nsupplies a key or parameters obtained from an untrusted source could be\nvulnerable to a Denial of Service attack.\n\nDH_generate_key() and DH_check_pub_key() are also called by a number of\nother OpenSSL functions.  An application calling any of those other\nfunctions may similarly be affected.  The other functions affected by this\nare DH_check_pub_key_ex(), EVP_PKEY_public_check(), and EVP_PKEY_generate().\n\nAlso vulnerable are the OpenSSL pkey command line application when using the\n\"-pubcheck\" option, as well as the OpenSSL genpkey command line application.\n\nThe OpenSSL SSL/TLS implementation is not affected by this issue.\n\nThe OpenSSL 3.0 and 3.1 FIPS providers are not affected by this issue.",
-              'diffID':        'sha256:05590cd53e0098af064bffc79d5b76acb8f14b8db4643871eb0a18325fad8005',
-              'fixedVersions': [
-                '3.0.12-r1'
-              ],
-              'installedVersion': '3.0.8-r4',
-              'packageName':      'libcrypto3',
-              'purl':             'pkg:apk/alpine/libcrypto3@3.0.8-r4?arch=x86_64&distro=3.17.3',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2024/03/11/1',
-                'https://access.redhat.com/errata/RHSA-2024:2447',
-                'https://access.redhat.com/security/cve/CVE-2023-5678',
-                'https://bugzilla.redhat.com/2223016',
-                'https://bugzilla.redhat.com/2224962',
-                'https://bugzilla.redhat.com/2227852',
-                'https://bugzilla.redhat.com/2248616',
-                'https://bugzilla.redhat.com/2257571',
-                'https://bugzilla.redhat.com/2258502',
-                'https://bugzilla.redhat.com/2259944',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2224962',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2227852',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2248616',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2270358',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3446',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3817',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-5678',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-2408',
-                'https://errata.almalinux.org/9/ALSA-2024-2447.html',
-                'https://errata.rockylinux.org/RLSA-2023:7877',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=34efaef6c103d636ab507a0cc34dca4d3aecc055',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=710fee740904b6290fef0dd5536fbcedbc38ff0c',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=db925ae2e65d0d925adef429afc37f75bd1c2017',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=ddeb4b6c6d527e54ce9a99cba785c0f7776e54b6',
-                'https://linux.oracle.com/cve/CVE-2023-5678.html',
-                'https://linux.oracle.com/errata/ELSA-2024-2447.html',
-                'https://lists.debian.org/debian-lts-announce/2024/10/msg00033.html',
-                'https://lists.debian.org/debian-lts-announce/2024/11/msg00000.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-5678',
-                'https://security.netapp.com/advisory/ntap-20231130-0010/',
-                'https://ubuntu.com/security/notices/USN-6622-1',
-                'https://ubuntu.com/security/notices/USN-6632-1',
-                'https://ubuntu.com/security/notices/USN-6709-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-5678',
-                'https://www.openssl.org/news/secadv/20231106.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: Generating excessively long X9.42 DH keys or checking excessively long X9.42 DH keys or parameters may be very slow'
-            },
-            {
-              'cve':  'CVE-2023-6129',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '6.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-440',
-                'CWE-787'
-              ],
-              'description':   'Issue summary: The POLY1305 MAC (message authentication code) implementation\ncontains a bug that might corrupt the internal state of applications running\non PowerPC CPU based platforms if the CPU provides vector instructions.\n\nImpact summary: If an attacker can influence whether the POLY1305 MAC\nalgorithm is used, the application state might be corrupted with various\napplication dependent consequences.\n\nThe POLY1305 MAC (message authentication code) implementation in OpenSSL for\nPowerPC CPUs restores the contents of vector registers in a different order\nthan they are saved. Thus the contents of some of these vector registers\nare corrupted when returning to the caller. The vulnerable code is used only\non newer PowerPC processors supporting the PowerISA 2.07 instructions.\n\nThe consequences of this kind of internal application state corruption can\nbe various - from no consequences, if the calling application does not\ndepend on the contents of non-volatile XMM registers at all, to the worst\nconsequences, where the attacker could get complete control of the application\nprocess. However unless the compiler uses the vector registers for storing\npointers, the most likely consequence, if any, would be an incorrect result\nof some application dependent calculations or a crash leading to a denial of\nservice.\n\nThe POLY1305 MAC algorithm is most frequently used as part of the\nCHACHA20-POLY1305 AEAD (authenticated encryption with associated data)\nalgorithm. The most common usage of this AEAD cipher is with TLS protocol\nversions 1.2 and 1.3. If this cipher is enabled on the server a malicious\nclient can influence whether this AEAD cipher is used. This implies that\nTLS server applications using OpenSSL can be potentially impacted. However\nwe are currently not aware of any concrete application that would be affected\nby this issue therefore we consider this a Low severity security issue.',
-              'diffID':        'sha256:05590cd53e0098af064bffc79d5b76acb8f14b8db4643871eb0a18325fad8005',
-              'fixedVersions': [
-                '3.0.12-r2'
-              ],
-              'installedVersion': '3.0.8-r4',
-              'packageName':      'libcrypto3',
-              'purl':             'pkg:apk/alpine/libcrypto3@3.0.8-r4?arch=x86_64&distro=3.17.3',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2024/03/11/1',
-                'https://access.redhat.com/errata/RHSA-2024:9088',
-                'https://access.redhat.com/security/cve/CVE-2023-6129',
-                'https://bugzilla.redhat.com/2257571',
-                'https://bugzilla.redhat.com/2258502',
-                'https://bugzilla.redhat.com/2259944',
-                'https://bugzilla.redhat.com/2284243',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2257571',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2258502',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2259944',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2284243',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-6129',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-6237',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-0727',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-1298',
-                'https://errata.almalinux.org/9/ALSA-2024-9088.html',
-                'https://errata.rockylinux.org/RLSA-2024:9088',
-                'https://github.com/openssl/openssl/commit/050d26383d4e264966fb83428e72d5d48f402d35',
-                'https://github.com/openssl/openssl/commit/5b139f95c9a47a55a0c54100f3837b1eee942b04',
-                'https://github.com/openssl/openssl/commit/f3fc5808fe9ff74042d639839610d03b8fdcc015',
-                'https://linux.oracle.com/cve/CVE-2023-6129.html',
-                'https://linux.oracle.com/errata/ELSA-2024-9088.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-6129',
-                'https://security.netapp.com/advisory/ntap-20240216-0009/',
-                'https://security.netapp.com/advisory/ntap-20240426-0008/',
-                'https://security.netapp.com/advisory/ntap-20240426-0013/',
-                'https://security.netapp.com/advisory/ntap-20240503-0011/',
-                'https://ubuntu.com/security/notices/USN-6622-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-6129',
-                'https://www.openssl.org/news/secadv/20240109.txt',
-                'https://www.openwall.com/lists/oss-security/2024/01/09/1'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: POLY1305 MAC implementation corrupts vector registers on PowerPC'
-            },
-            {
-              'cve':  'CVE-2023-6237',
-              'cvss': {
-                'redhat': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-606'
-              ],
-              'description':   "Issue summary: Checking excessively long invalid RSA public keys may take\na long time.\n\nImpact summary: Applications that use the function EVP_PKEY_public_check()\nto check RSA public keys may experience long delays. Where the key that\nis being checked has been obtained from an untrusted source this may lead\nto a Denial of Service.\n\nWhen function EVP_PKEY_public_check() is called on RSA public keys,\na computation is done to confirm that the RSA modulus, n, is composite.\nFor valid RSA keys, n is a product of two or more large primes and this\ncomputation completes quickly. However, if n is an overly large prime,\nthen this computation would take a long time.\n\nAn application that calls EVP_PKEY_public_check() and supplies an RSA key\nobtained from an untrusted source could be vulnerable to a Denial of Service\nattack.\n\nThe function EVP_PKEY_public_check() is not called from other OpenSSL\nfunctions however it is called from the OpenSSL pkey command line\napplication. For that reason that application is also vulnerable if used\nwith the '-pubin' and '-check' options on untrusted data.\n\nThe OpenSSL SSL/TLS implementation is not affected by this issue.\n\nThe OpenSSL 3.0 and 3.1 FIPS providers are affected by this issue.",
-              'diffID':        'sha256:05590cd53e0098af064bffc79d5b76acb8f14b8db4643871eb0a18325fad8005',
-              'fixedVersions': [
-                '3.0.12-r3'
-              ],
-              'installedVersion': '3.0.8-r4',
-              'packageName':      'libcrypto3',
-              'purl':             'pkg:apk/alpine/libcrypto3@3.0.8-r4?arch=x86_64&distro=3.17.3',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2024/03/11/1',
-                'https://access.redhat.com/errata/RHSA-2024:9088',
-                'https://access.redhat.com/security/cve/CVE-2023-6237',
-                'https://bugzilla.redhat.com/2257571',
-                'https://bugzilla.redhat.com/2258502',
-                'https://bugzilla.redhat.com/2259944',
-                'https://bugzilla.redhat.com/2284243',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2257571',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2258502',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2259944',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2284243',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-6129',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-6237',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-0727',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-1298',
-                'https://errata.almalinux.org/9/ALSA-2024-9088.html',
-                'https://errata.rockylinux.org/RLSA-2024:9088',
-                'https://github.com/openssl/openssl/commit/0b0f7abfb37350794a4b8960fafc292cd5d1b84d',
-                'https://github.com/openssl/openssl/commit/18c02492138d1eb8b6548cb26e7b625fb2414a2a',
-                'https://github.com/openssl/openssl/commit/a830f551557d3d66a84bbb18a5b889c640c36294',
-                'https://linux.oracle.com/cve/CVE-2023-6237.html',
-                'https://linux.oracle.com/errata/ELSA-2024-9088.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-6237',
-                'https://security.netapp.com/advisory/ntap-20240531-0007/',
-                'https://ubuntu.com/security/notices/USN-6622-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-6237',
-                'https://www.openssl.org/news/secadv/20240115.txt',
-                'https://www.openwall.com/lists/oss-security/2024/01/15/2'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: Excessive time spent checking invalid RSA public keys'
-            },
-            {
-              'cve':  'CVE-2024-0727',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '5.5',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H'
-                },
-                'nvd': {
-                  'v3score':  '5.5',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '5.5',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-476'
-              ],
-              'description':   'Issue summary: Processing a maliciously formatted PKCS12 file may lead OpenSSL\nto crash leading to a potential Denial of Service attack\n\nImpact summary: Applications loading files in the PKCS12 format from untrusted\nsources might terminate abruptly.\n\nA file in PKCS12 format can contain certificates and keys and may come from an\nuntrusted source. The PKCS12 specification allows certain fields to be NULL, but\nOpenSSL does not correctly check for this case. This can lead to a NULL pointer\ndereference that results in OpenSSL crashing. If an application processes PKCS12\nfiles from an untrusted source using the OpenSSL APIs then that application will\nbe vulnerable to this issue.\n\nOpenSSL APIs that are vulnerable to this are: PKCS12_parse(),\nPKCS12_unpack_p7data(), PKCS12_unpack_p7encdata(), PKCS12_unpack_authsafes()\nand PKCS12_newpass().\n\nWe have also fixed a similar issue in SMIME_write_PKCS7(). However since this\nfunction is related to writing data we do not consider it security significant.\n\nThe FIPS modules in 3.2, 3.1 and 3.0 are not affected by this issue.',
-              'diffID':        'sha256:05590cd53e0098af064bffc79d5b76acb8f14b8db4643871eb0a18325fad8005',
-              'fixedVersions': [
-                '3.0.12-r4'
-              ],
-              'installedVersion': '3.0.8-r4',
-              'packageName':      'libcrypto3',
-              'purl':             'pkg:apk/alpine/libcrypto3@3.0.8-r4?arch=x86_64&distro=3.17.3',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2024/03/11/1',
-                'https://access.redhat.com/errata/RHSA-2024:9088',
-                'https://access.redhat.com/security/cve/CVE-2024-0727',
-                'https://bugzilla.redhat.com/2257571',
-                'https://bugzilla.redhat.com/2258502',
-                'https://bugzilla.redhat.com/2259944',
-                'https://bugzilla.redhat.com/2284243',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2257571',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2258502',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2259944',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2284243',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-6129',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-6237',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-0727',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-1298',
-                'https://errata.almalinux.org/9/ALSA-2024-9088.html',
-                'https://errata.rockylinux.org/RLSA-2024:9088',
-                'https://github.com/alexcrichton/openssl-src-rs/commit/add20f73b6b42be7451af2e1044d4e0e778992b2',
-                'https://github.com/github/advisory-database/pull/3472',
-                'https://github.com/openssl/openssl/commit/09df4395b5071217b76dc7d3d2e630eb8c5a79c2',
-                'https://github.com/openssl/openssl/commit/775acfdbd0c6af9ac855f34969cdab0c0c90844a',
-                'https://github.com/openssl/openssl/commit/d135eeab8a5dbf72b3da5240bab9ddb7678dbd2c',
-                'https://github.com/openssl/openssl/pull/23362',
-                'https://github.com/pyca/cryptography/commit/3519591d255d4506fbcd0d04037d45271903c64d',
-                'https://github.openssl.org/openssl/extended-releases/commit/03b3941d60c4bce58fab69a0c22377ab439bc0e8',
-                'https://github.openssl.org/openssl/extended-releases/commit/aebaa5883e31122b404e450732dc833dc9dee539',
-                'https://linux.oracle.com/cve/CVE-2024-0727.html',
-                'https://linux.oracle.com/errata/ELSA-2024-9088.html',
-                'https://lists.debian.org/debian-lts-announce/2024/10/msg00033.html',
-                'https://lists.debian.org/debian-lts-announce/2024/11/msg00000.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2024-0727',
-                'https://security.netapp.com/advisory/ntap-20240208-0006',
-                'https://security.netapp.com/advisory/ntap-20240208-0006/',
-                'https://ubuntu.com/security/notices/USN-6622-1',
-                'https://ubuntu.com/security/notices/USN-6632-1',
-                'https://ubuntu.com/security/notices/USN-6709-1',
-                'https://ubuntu.com/security/notices/USN-7018-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2024-0727',
-                'https://www.openssl.org/news/secadv/20240125.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: denial of service via null dereference'
-            },
-            {
-              'cve':  'CVE-2024-4603',
-              'cvss': {
-                'redhat': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L'
-                }
-              },
-              'cwes': [
-                'CWE-606',
-                'CWE-834'
-              ],
-              'description':   'Issue summary: Checking excessively long DSA keys or parameters may be very\nslow.\n\nImpact summary: Applications that use the functions EVP_PKEY_param_check()\nor EVP_PKEY_public_check() to check a DSA public key or DSA parameters may\nexperience long delays. Where the key or parameters that are being checked\nhave been obtained from an untrusted source this may lead to a Denial of\nService.\n\nThe functions EVP_PKEY_param_check() or EVP_PKEY_public_check() perform\nvarious checks on DSA parameters. Some of those computations take a long time\nif the modulus (`p` parameter) is too large.\n\nTrying to use a very large modulus is slow and OpenSSL will not allow using\npublic keys with a modulus which is over 10,000 bits in length for signature\nverification. However the key and parameter check functions do not limit\nthe modulus size when performing the checks.\n\nAn application that calls EVP_PKEY_param_check() or EVP_PKEY_public_check()\nand supplies a key or parameters obtained from an untrusted source could be\nvulnerable to a Denial of Service attack.\n\nThese functions are not called by OpenSSL itself on untrusted DSA keys so\nonly applications that directly call these functions may be vulnerable.\n\nAlso vulnerable are the OpenSSL pkey and pkeyparam command line applications\nwhen using the `-check` option.\n\nThe OpenSSL SSL/TLS implementation is not affected by this issue.\n\nThe OpenSSL 3.0 and 3.1 FIPS providers are affected by this issue.',
-              'diffID':        'sha256:05590cd53e0098af064bffc79d5b76acb8f14b8db4643871eb0a18325fad8005',
-              'fixedVersions': [
-                '3.0.13-r0'
-              ],
-              'installedVersion': '3.0.8-r4',
-              'packageName':      'libcrypto3',
-              'purl':             'pkg:apk/alpine/libcrypto3@3.0.8-r4?arch=x86_64&distro=3.17.3',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2024/05/16/2',
-                'https://access.redhat.com/errata/RHSA-2024:9333',
-                'https://access.redhat.com/security/cve/CVE-2024-4603',
-                'https://bugzilla.redhat.com/2274020',
-                'https://bugzilla.redhat.com/2281029',
-                'https://bugzilla.redhat.com/2283757',
-                'https://bugzilla.redhat.com/2294581',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2274020',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2281029',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2283757',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2294581',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-2511',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-4603',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-4741',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-5535',
-                'https://errata.almalinux.org/9/ALSA-2024-9333.html',
-                'https://errata.rockylinux.org/RLSA-2024:9333',
-                'https://github.com/openssl/openssl/commit/3559e868e58005d15c6013a0c1fd832e51c73397',
-                'https://github.com/openssl/openssl/commit/53ea06486d296b890d565fb971b2764fcd826e7e',
-                'https://github.com/openssl/openssl/commit/9c39b3858091c152f52513c066ff2c5a47969f0d',
-                'https://github.com/openssl/openssl/commit/da343d0605c826ef197aceedc67e8e04f065f740',
-                'https://linux.oracle.com/cve/CVE-2024-4603.html',
-                'https://linux.oracle.com/errata/ELSA-2024-9333.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2024-4603',
-                'https://security.netapp.com/advisory/ntap-20240621-0001/',
-                'https://ubuntu.com/security/notices/USN-6937-1',
-                'https://www.cve.org/CVERecord?id=CVE-2024-4603',
-                'https://www.openssl.org/news/secadv/20240516.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: Excessive time spent checking DSA keys and parameters'
-            },
-            {
-              'cve':  'CVE-2024-4741',
-              'cvss': {
-                'redhat': {
-                  'v3score':  '5.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   'Issue summary: Calling the OpenSSL API function SSL_free_buffers may cause\nmemory to be accessed that was previously freed in some situations\n\nImpact summary: A use after free can have a range of potential consequences such\nas the corruption of valid data, crashes or execution of arbitrary code.\nHowever, only applications that directly call the SSL_free_buffers function are\naffected by this issue. Applications that do not call this function are not\nvulnerable. Our investigations indicate that this function is rarely used by\napplications.\n\nThe SSL_free_buffers function is used to free the internal OpenSSL buffer used\nwhen processing an incoming record from the network. The call is only expected\nto succeed if the buffer is not currently in use. However, two scenarios have\nbeen identified where the buffer is freed even when still in use.\n\nThe first scenario occurs where a record header has been received from the\nnetwork and processed by OpenSSL, but the full record body has not yet arrived.\nIn this case calling SSL_free_buffers will succeed even though a record has only\nbeen partially processed and the buffer is still in use.\n\nThe second scenario occurs where a full record containing application data has\nbeen received and processed by OpenSSL but the application has only read part of\nthis data. Again a call to SSL_free_buffers will succeed even though the buffer\nis still in use.\n\nWhile these scenarios could occur accidentally during normal operation a\nmalicious attacker could attempt to engineer a stituation where this occurs.\nWe are not aware of this issue being actively exploited.\n\nThe FIPS modules in 3.3, 3.2, 3.1 and 3.0 are not affected by this issue.',
-              'diffID':        'sha256:05590cd53e0098af064bffc79d5b76acb8f14b8db4643871eb0a18325fad8005',
-              'fixedVersions': [
-                '3.0.14-r0'
-              ],
-              'installedVersion': '3.0.8-r4',
-              'packageName':      'libcrypto3',
-              'purl':             'pkg:apk/alpine/libcrypto3@3.0.8-r4?arch=x86_64&distro=3.17.3',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2024:9333',
-                'https://access.redhat.com/security/cve/CVE-2024-4741',
-                'https://bugzilla.redhat.com/2274020',
-                'https://bugzilla.redhat.com/2281029',
-                'https://bugzilla.redhat.com/2283757',
-                'https://bugzilla.redhat.com/2294581',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2274020',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2281029',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2283757',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2294581',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-2511',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-4603',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-4741',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-5535',
-                'https://errata.almalinux.org/9/ALSA-2024-9333.html',
-                'https://errata.rockylinux.org/RLSA-2024:9333',
-                'https://github.com/openssl/openssl/commit/704f725b96aa373ee45ecfb23f6abfe8be8d9177',
-                'https://github.com/openssl/openssl/commit/b3f0eb0a295f58f16ba43ba99dad70d4ee5c437d',
-                'https://github.com/openssl/openssl/commit/c88c3de51020c37e8706bf7a682a162593053aac',
-                'https://github.com/openssl/openssl/commit/e5093133c35ca82874ad83697af76f4b0f7e3bd8',
-                'https://github.openssl.org/openssl/extended-releases/commit/f7a045f3143fc6da2ee66bf52d8df04829590dd4',
-                'https://linux.oracle.com/cve/CVE-2024-4741.html',
-                'https://linux.oracle.com/errata/ELSA-2024-9333.html',
-                'https://lists.debian.org/debian-lts-announce/2024/10/msg00033.html',
-                'https://lists.debian.org/debian-lts-announce/2024/11/msg00000.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2024-4741',
-                'https://security.netapp.com/advisory/ntap-20240621-0004/',
-                'https://ubuntu.com/security/notices/USN-6937-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2024-4741',
-                'https://www.openssl.org/news/secadv/20240528.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: Use After Free with SSL_free_buffers'
-            },
-            {
-              'cve':  'CVE-2024-5535',
-              'cvss': {
-                'redhat': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-125'
-              ],
-              'description':   'Issue summary: Calling the OpenSSL API function SSL_select_next_proto with an\nempty supported client protocols buffer may cause a crash or memory contents to\nbe sent to the peer.\n\nImpact summary: A buffer overread can have a range of potential consequences\nsuch as unexpected application beahviour or a crash. In particular this issue\ncould result in up to 255 bytes of arbitrary private data from memory being sent\nto the peer leading to a loss of confidentiality. However, only applications\nthat directly call the SSL_select_next_proto function with a 0 length list of\nsupported client protocols are affected by this issue. This would normally never\nbe a valid scenario and is typically not under attacker control but may occur by\naccident in the case of a configuration or programming error in the calling\napplication.\n\nThe OpenSSL API function SSL_select_next_proto is typically used by TLS\napplications that support ALPN (Application Layer Protocol Negotiation) or NPN\n(Next Protocol Negotiation). NPN is older, was never standardised and\nis deprecated in favour of ALPN. We believe that ALPN is significantly more\nwidely deployed than NPN. The SSL_select_next_proto function accepts a list of\nprotocols from the server and a list of protocols from the client and returns\nthe first protocol that appears in the server list that also appears in the\nclient list. In the case of no overlap between the two lists it returns the\nfirst item in the client list. In either case it will signal whether an overlap\nbetween the two lists was found. In the case where SSL_select_next_proto is\ncalled with a zero length client list it fails to notice this condition and\nreturns the memory immediately following the client list pointer (and reports\nthat there was no overlap in the lists).\n\nThis function is typically called from a server side application callback for\nALPN or a client side application callback for NPN. In the case of ALPN the list\nof protocols supplied by the client is guaranteed by libssl to never be zero in\nlength. The list of server protocols comes from the application and should never\nnormally be expected to be of zero length. In this case if the\nSSL_select_next_proto function has been called as expected (with the list\nsupplied by the client passed in the client/client_len parameters), then the\napplication will not be vulnerable to this issue. If the application has\naccidentally been configured with a zero length server list, and has\naccidentally passed that zero length server list in the client/client_len\nparameters, and has additionally failed to correctly handle a "no overlap"\nresponse (which would normally result in a handshake failure in ALPN) then it\nwill be vulnerable to this problem.\n\nIn the case of NPN, the protocol permits the client to opportunistically select\na protocol when there is no overlap. OpenSSL returns the first client protocol\nin the no overlap case in support of this. The list of client protocols comes\nfrom the application and should never normally be expected to be of zero length.\nHowever if the SSL_select_next_proto function is accidentally called with a\nclient_len of 0 then an invalid memory pointer will be returned instead. If the\napplication uses this output as the opportunistic protocol then the loss of\nconfidentiality will occur.\n\nThis issue has been assessed as Low severity because applications are most\nlikely to be vulnerable if they are using NPN instead of ALPN - but NPN is not\nwidely used. It also requires an application configuration or programming error.\nFinally, this issue would not typically be under attacker control making active\nexploitation unlikely.\n\nThe FIPS modules in 3.3, 3.2, 3.1 and 3.0 are not affected by this issue.\n\nDue to the low severity of this issue we are not issuing new releases of\nOpenSSL at this time. The fix will be included in the next releases when they\nbecome available.',
-              'diffID':        'sha256:05590cd53e0098af064bffc79d5b76acb8f14b8db4643871eb0a18325fad8005',
-              'fixedVersions': [
-                '3.0.14-r0'
-              ],
-              'installedVersion': '3.0.8-r4',
-              'packageName':      'libcrypto3',
-              'purl':             'pkg:apk/alpine/libcrypto3@3.0.8-r4?arch=x86_64&distro=3.17.3',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2024/06/27/1',
-                'http://www.openwall.com/lists/oss-security/2024/06/28/4',
-                'http://www.openwall.com/lists/oss-security/2024/08/15/1',
-                'https://access.redhat.com/errata/RHSA-2025:1671',
-                'https://access.redhat.com/security/cve/CVE-2024-5535',
-                'https://bugzilla.redhat.com/2294581',
-                'https://bugzilla.redhat.com/2294676',
-                'https://bugzilla.redhat.com/2301888',
-                'https://bugzilla.redhat.com/2318857',
-                'https://bugzilla.redhat.com/2318858',
-                'https://bugzilla.redhat.com/2318870',
-                'https://bugzilla.redhat.com/2318873',
-                'https://bugzilla.redhat.com/2318874',
-                'https://bugzilla.redhat.com/2318876',
-                'https://bugzilla.redhat.com/2318882',
-                'https://bugzilla.redhat.com/2318883',
-                'https://bugzilla.redhat.com/2318884',
-                'https://bugzilla.redhat.com/2318885',
-                'https://bugzilla.redhat.com/2318886',
-                'https://bugzilla.redhat.com/2318897',
-                'https://bugzilla.redhat.com/2318900',
-                'https://bugzilla.redhat.com/2318905',
-                'https://bugzilla.redhat.com/2318914',
-                'https://bugzilla.redhat.com/2318922',
-                'https://bugzilla.redhat.com/2318923',
-                'https://bugzilla.redhat.com/2318925',
-                'https://bugzilla.redhat.com/2318926',
-                'https://bugzilla.redhat.com/2318927',
-                'https://bugzilla.redhat.com/2331191',
-                'https://bugzilla.redhat.com/2339218',
-                'https://bugzilla.redhat.com/2339220',
-                'https://bugzilla.redhat.com/2339221',
-                'https://bugzilla.redhat.com/2339226',
-                'https://bugzilla.redhat.com/2339231',
-                'https://bugzilla.redhat.com/2339236',
-                'https://bugzilla.redhat.com/2339238',
-                'https://bugzilla.redhat.com/2339243',
-                'https://bugzilla.redhat.com/2339247',
-                'https://bugzilla.redhat.com/2339252',
-                'https://bugzilla.redhat.com/2339259',
-                'https://bugzilla.redhat.com/2339266',
-                'https://bugzilla.redhat.com/2339270',
-                'https://bugzilla.redhat.com/2339271',
-                'https://bugzilla.redhat.com/2339275',
-                'https://bugzilla.redhat.com/2339277',
-                'https://bugzilla.redhat.com/2339281',
-                'https://bugzilla.redhat.com/2339284',
-                'https://bugzilla.redhat.com/2339291',
-                'https://bugzilla.redhat.com/2339293',
-                'https://bugzilla.redhat.com/2339295',
-                'https://bugzilla.redhat.com/2339299',
-                'https://bugzilla.redhat.com/2339300',
-                'https://bugzilla.redhat.com/2339304',
-                'https://bugzilla.redhat.com/2339305',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2274020',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2281029',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2283757',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2294581',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-2511',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-4603',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-4741',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-5535',
-                'https://errata.almalinux.org/9/ALSA-2025-1671.html',
-                'https://errata.rockylinux.org/RLSA-2024:9333',
-                'https://github.com/openssl/openssl/commit/4ada436a1946cbb24db5ab4ca082b69c1bc10f37',
-                'https://github.com/openssl/openssl/commit/99fb785a5f85315b95288921a321a935ea29a51e',
-                'https://github.com/openssl/openssl/commit/cf6f91f6121f4db167405db2f0de410a456f260c',
-                'https://github.com/openssl/openssl/commit/e86ac436f0bd54d4517745483e2315650fae7b2c',
-                'https://github.openssl.org/openssl/extended-releases/commit/9947251413065a05189a63c9b7a6c1d4e224c21c',
-                'https://github.openssl.org/openssl/extended-releases/commit/b78ec0824da857223486660177d3b1f255c65d87',
-                'https://linux.oracle.com/cve/CVE-2024-5535.html',
-                'https://linux.oracle.com/errata/ELSA-2025-1673.html',
-                'https://lists.debian.org/debian-lts-announce/2024/10/msg00033.html',
-                'https://lists.debian.org/debian-lts-announce/2024/11/msg00000.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2024-5535',
-                'https://openssl.org/news/secadv/20240627.txt',
-                'https://security.netapp.com/advisory/ntap-20240712-0005/',
-                'https://security.netapp.com/advisory/ntap-20241025-0006/',
-                'https://security.netapp.com/advisory/ntap-20241025-0010/',
-                'https://ubuntu.com/security/notices/USN-6937-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2024-5535',
-                'https://www.openssl.org/news/secadv/20240627.txt',
-                'https://www.oracle.com/security-alerts/cpuoct2024.html#AppendixMSQL'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: SSL_select_next_proto buffer overread'
-            },
-            {
-              'cve':  'CVE-2024-2511',
-              'cvss': {
-                'redhat': {
-                  'v3score':  '3.7',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L'
-                }
-              },
-              'cwes': [
-                'CWE-1325'
-              ],
-              'description':   'Issue summary: Some non-default TLS server configurations can cause unbounded\nmemory growth when processing TLSv1.3 sessions\n\nImpact summary: An attacker may exploit certain server configurations to trigger\nunbounded memory growth that would lead to a Denial of Service\n\nThis problem can occur in TLSv1.3 if the non-default SSL_OP_NO_TICKET option is\nbeing used (but not if early_data support is also configured and the default\nanti-replay protection is in use). In this case, under certain conditions, the\nsession cache can get into an incorrect state and it will fail to flush properly\nas it fills. The session cache will continue to grow in an unbounded manner. A\nmalicious client could deliberately create the scenario for this failure to\nforce a Denial of Service. It may also happen by accident in normal operation.\n\nThis issue only affects TLS servers supporting TLSv1.3. It does not affect TLS\nclients.\n\nThe FIPS modules in 3.2, 3.1 and 3.0 are not affected by this issue. OpenSSL\n1.0.2 is also not affected by this issue.',
-              'diffID':        'sha256:05590cd53e0098af064bffc79d5b76acb8f14b8db4643871eb0a18325fad8005',
-              'fixedVersions': [
-                '3.0.12-r5'
-              ],
-              'installedVersion': '3.0.8-r4',
-              'packageName':      'libcrypto3',
-              'purl':             'pkg:apk/alpine/libcrypto3@3.0.8-r4?arch=x86_64&distro=3.17.3',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2024/04/08/5',
-                'https://access.redhat.com/errata/RHSA-2024:9333',
-                'https://access.redhat.com/security/cve/CVE-2024-2511',
-                'https://bugzilla.redhat.com/2274020',
-                'https://bugzilla.redhat.com/2281029',
-                'https://bugzilla.redhat.com/2283757',
-                'https://bugzilla.redhat.com/2294581',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2274020',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2281029',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2283757',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2294581',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-2511',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-4603',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-4741',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-5535',
-                'https://errata.almalinux.org/9/ALSA-2024-9333.html',
-                'https://errata.rockylinux.org/RLSA-2024:9333',
-                'https://github.com/openssl/openssl/commit/7e4d731b1c07201ad9374c1cd9ac5263bdf35bce',
-                'https://github.com/openssl/openssl/commit/b52867a9f618bb955bed2a3ce3db4d4f97ed8e5d',
-                'https://github.com/openssl/openssl/commit/e9d7083e241670332e0443da0f0d4ffb52829f08',
-                'https://github.openssl.org/openssl/extended-releases/commit/5f8d25770ae6437db119dfc951e207271a326640',
-                'https://linux.oracle.com/cve/CVE-2024-2511.html',
-                'https://linux.oracle.com/errata/ELSA-2024-9333.html',
-                'https://lists.debian.org/debian-lts-announce/2024/10/msg00033.html',
-                'https://lists.debian.org/debian-lts-announce/2024/11/msg00000.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2024-2511',
-                'https://security.netapp.com/advisory/ntap-20240503-0013/',
-                'https://ubuntu.com/security/notices/USN-6937-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2024-2511',
-                'https://www.openssl.org/news/secadv/20240408.txt',
-                'https://www.openssl.org/news/vulnerabilities.html'
-              ],
-              'severity':   'LOW',
-              'suppressed': false,
-              'title':      'openssl: Unbounded memory growth with session handling in TLSv1.3'
-            },
-            {
-              'cve':  'CVE-2024-9143',
-              'cvss': {
-                'redhat': {
-                  'v3score':  '3.7',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L'
-                }
-              },
-              'cwes': [
-                'CWE-125',
-                'CWE-787'
-              ],
-              'description':   "Issue summary: Use of the low-level GF(2^m) elliptic curve APIs with untrusted\nexplicit values for the field polynomial can lead to out-of-bounds memory reads\nor writes.\n\nImpact summary: Out of bound memory writes can lead to an application crash or\neven a possibility of a remote code execution, however, in all the protocols\ninvolving Elliptic Curve Cryptography that we're aware of, either only \"named\ncurves\" are supported, or, if explicit curve parameters are supported, they\nspecify an X9.62 encoding of binary (GF(2^m)) curves that can't represent\nproblematic input values. Thus the likelihood of existence of a vulnerable\napplication is low.\n\nIn particular, the X9.62 encoding is used for ECC keys in X.509 certificates,\nso problematic inputs cannot occur in the context of processing X.509\ncertificates.  Any problematic use-cases would have to be using an \"exotic\"\ncurve encoding.\n\nThe affected APIs include: EC_GROUP_new_curve_GF2m(), EC_GROUP_new_from_params(),\nand various supporting BN_GF2m_*() functions.\n\nApplications working with \"exotic\" explicit binary (GF(2^m)) curve parameters,\nthat make it possible to represent invalid field polynomials with a zero\nconstant term, via the above or similar APIs, may terminate abruptly as a\nresult of reading or writing outside of array bounds.  Remote code execution\ncannot easily be ruled out.\n\nThe FIPS modules in 3.3, 3.2, 3.1 and 3.0 are not affected by this issue.",
-              'diffID':        'sha256:05590cd53e0098af064bffc79d5b76acb8f14b8db4643871eb0a18325fad8005',
-              'fixedVersions': [
-                '3.0.15-r1'
-              ],
-              'installedVersion': '3.0.8-r4',
-              'packageName':      'libcrypto3',
-              'purl':             'pkg:apk/alpine/libcrypto3@3.0.8-r4?arch=x86_64&distro=3.17.3',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2024/10/16/1',
-                'http://www.openwall.com/lists/oss-security/2024/10/23/1',
-                'http://www.openwall.com/lists/oss-security/2024/10/24/1',
-                'https://access.redhat.com/security/cve/CVE-2024-9143',
-                'https://github.com/openssl/openssl/commit/72ae83ad214d2eef262461365a1975707f862712',
-                'https://github.com/openssl/openssl/commit/bc7e04d7c8d509fb78fc0e285aa948fb0da04700',
-                'https://github.com/openssl/openssl/commit/c0d3e4d32d2805f49bec30547f225bc4d092e1f4',
-                'https://github.com/openssl/openssl/commit/fdf6723362ca51bd883295efe206cb5b1cfa5154',
-                'https://github.openssl.org/openssl/extended-releases/commit/8efc0cbaa8ebba8e116f7b81a876a4123594d86a',
-                'https://github.openssl.org/openssl/extended-releases/commit/9d576994cec2b7aa37a91740ea7e680810957e41',
-                'https://lists.debian.org/debian-lts-announce/2024/10/msg00033.html',
-                'https://lists.debian.org/debian-lts-announce/2024/11/msg00000.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2024-9143',
-                'https://openssl-library.org/news/secadv/20241016.txt',
-                'https://security.netapp.com/advisory/ntap-20241101-0001/',
-                'https://ubuntu.com/security/notices/USN-7264-1',
-                'https://ubuntu.com/security/notices/USN-7278-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2024-9143'
-              ],
-              'severity':   'LOW',
-              'suppressed': false,
-              'title':      'openssl: Low-level invalid GF(2^m) parameters lead to OOB memory access'
-            },
-            {
-              'cve':  'CVE-2023-5363',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N'
-                },
-                'redhat': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-684'
-              ],
-              'description':   "Issue summary: A bug has been identified in the processing of key and\ninitialisation vector (IV) lengths.  This can lead to potential truncation\nor overruns during the initialisation of some symmetric ciphers.\n\nImpact summary: A truncation in the IV can result in non-uniqueness,\nwhich could result in loss of confidentiality for some cipher modes.\n\nWhen calling EVP_EncryptInit_ex2(), EVP_DecryptInit_ex2() or\nEVP_CipherInit_ex2() the provided OSSL_PARAM array is processed after\nthe key and IV have been established.  Any alterations to the key length,\nvia the \"keylen\" parameter or the IV length, via the \"ivlen\" parameter,\nwithin the OSSL_PARAM array will not take effect as intended, potentially\ncausing truncation or overreading of these values.  The following ciphers\nand cipher modes are impacted: RC2, RC4, RC5, CCM, GCM and OCB.\n\nFor the CCM, GCM and OCB cipher modes, truncation of the IV can result in\nloss of confidentiality.  For example, when following NIST's SP 800-38D\nsection 8.2.1 guidance for constructing a deterministic IV for AES in\nGCM mode, truncation of the counter portion could lead to IV reuse.\n\nBoth truncations and overruns of the key and overruns of the IV will\nproduce incorrect results and could, in some cases, trigger a memory\nexception.  However, these issues are not currently assessed as security\ncritical.\n\nChanging the key and/or IV lengths is not considered to be a common operation\nand the vulnerable API was recently introduced. Furthermore it is likely that\napplication developers will have spotted this problem during testing since\ndecryption would fail unless both peers in the communication were similarly\nvulnerable. For these reasons we expect the probability of an application being\nvulnerable to this to be quite low. However if an application is vulnerable then\nthis issue is considered very serious. For these reasons we have assessed this\nissue as Moderate severity overall.\n\nThe OpenSSL SSL/TLS implementation is not affected by this issue.\n\nThe OpenSSL 3.0 and 3.1 FIPS providers are not affected by this because\nthe issue lies outside of the FIPS provider boundary.\n\nOpenSSL 3.1 and 3.0 are vulnerable to this issue.",
-              'diffID':        'sha256:05590cd53e0098af064bffc79d5b76acb8f14b8db4643871eb0a18325fad8005',
-              'fixedVersions': [
-                '3.0.12-r0'
-              ],
-              'installedVersion': '3.0.8-r4',
-              'packageName':      'libssl3',
-              'purl':             'pkg:apk/alpine/libssl3@3.0.8-r4?arch=x86_64&distro=3.17.3',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2023/10/24/1',
-                'https://access.redhat.com/errata/RHSA-2024:0310',
-                'https://access.redhat.com/security/cve/CVE-2023-5363',
-                'https://bugzilla.redhat.com/2243839',
-                'https://errata.almalinux.org/9/ALSA-2024-0310.html',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=0df40630850fb2740e6be6890bb905d3fc623b2d',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=5f69f5c65e483928c4b28ed16af6e5742929f1ee',
-                'https://linux.oracle.com/cve/CVE-2023-5363.html',
-                'https://linux.oracle.com/errata/ELSA-2024-12093.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-5363',
-                'https://security.netapp.com/advisory/ntap-20231027-0010/',
-                'https://security.netapp.com/advisory/ntap-20240201-0003/',
-                'https://security.netapp.com/advisory/ntap-20240201-0004/',
-                'https://security.netapp.com/advisory/ntap-20241108-0002/',
-                'https://ubuntu.com/security/notices/USN-6450-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-5363',
-                'https://www.debian.org/security/2023/dsa-5532',
-                'https://www.openssl.org/news/secadv/20231024.txt'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: Incorrect cipher key and IV length processing'
-            },
-            {
-              'cve':  'CVE-2024-6119',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-843'
-              ],
-              'description':   "Issue summary: Applications performing certificate name checks (e.g., TLS\nclients checking server certificates) may attempt to read an invalid memory\naddress resulting in abnormal termination of the application process.\n\nImpact summary: Abnormal termination of an application can a cause a denial of\nservice.\n\nApplications performing certificate name checks (e.g., TLS clients checking\nserver certificates) may attempt to read an invalid memory address when\ncomparing the expected name with an `otherName` subject alternative name of an\nX.509 certificate. This may result in an exception that terminates the\napplication program.\n\nNote that basic certificate chain validation (signatures, dates, ...) is not\naffected, the denial of service can occur only when the application also\nspecifies an expected DNS name, Email address or IP address.\n\nTLS servers rarely solicit client certificates, and even when they do, they\ngenerally don't perform a name check against a reference identifier (expected\nidentity), but rather extract the presented identity after checking the\ncertificate chain.  So TLS servers are generally not affected and the severity\nof the issue is Moderate.\n\nThe FIPS modules in 3.3, 3.2, 3.1 and 3.0 are not affected by this issue.",
-              'diffID':        'sha256:05590cd53e0098af064bffc79d5b76acb8f14b8db4643871eb0a18325fad8005',
-              'fixedVersions': [
-                '3.0.15-r0'
-              ],
-              'installedVersion': '3.0.8-r4',
-              'packageName':      'libssl3',
-              'purl':             'pkg:apk/alpine/libssl3@3.0.8-r4?arch=x86_64&distro=3.17.3',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2024/09/03/4',
-                'https://access.redhat.com/errata/RHSA-2024:8935',
-                'https://access.redhat.com/security/cve/CVE-2024-6119',
-                'https://bugzilla.redhat.com/2306158',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2306158',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-6119',
-                'https://errata.almalinux.org/9/ALSA-2024-8935.html',
-                'https://errata.rockylinux.org/RLSA-2024:6783',
-                'https://github.com/openssl/openssl/commit/05f360d9e849a1b277db628f1f13083a7f8dd04f',
-                'https://github.com/openssl/openssl/commit/06d1dc3fa96a2ba5a3e22735a033012aadc9f0d6',
-                'https://github.com/openssl/openssl/commit/621f3729831b05ee828a3203eddb621d014ff2b2',
-                'https://github.com/openssl/openssl/commit/7dfcee2cd2a63b2c64b9b4b0850be64cb695b0a0',
-                'https://github.com/openssl/openssl/security/advisories/GHSA-5qrj-vq78-58fj',
-                'https://linux.oracle.com/cve/CVE-2024-6119.html',
-                'https://linux.oracle.com/errata/ELSA-2024-8935.html',
-                'https://lists.freebsd.org/archives/freebsd-security/2024-September/000303.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2024-6119',
-                'https://openssl-library.org/news/secadv/20240903.txt',
-                'https://security.netapp.com/advisory/ntap-20240912-0001/',
-                'https://ubuntu.com/security/notices/USN-6986-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2024-6119'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: Possible denial of service in X.509 name checks'
-            },
-            {
-              'cve':  'CVE-2023-2650',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '6.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-770'
-              ],
-              'description':   "Issue summary: Processing some specially crafted ASN.1 object identifiers or\ndata containing them may be very slow.\n\nImpact summary: Applications that use OBJ_obj2txt() directly, or use any of\nthe OpenSSL subsystems OCSP, PKCS7/SMIME, CMS, CMP/CRMF or TS with no message\nsize limit may experience notable to very long delays when processing those\nmessages, which may lead to a Denial of Service.\n\nAn OBJECT IDENTIFIER is composed of a series of numbers - sub-identifiers -\nmost of which have no size limit.  OBJ_obj2txt() may be used to translate\nan ASN.1 OBJECT IDENTIFIER given in DER encoding form (using the OpenSSL\ntype ASN1_OBJECT) to its canonical numeric text form, which are the\nsub-identifiers of the OBJECT IDENTIFIER in decimal form, separated by\nperiods.\n\nWhen one of the sub-identifiers in the OBJECT IDENTIFIER is very large\n(these are sizes that are seen as absurdly large, taking up tens or hundreds\nof KiBs), the translation to a decimal number in text may take a very long\ntime.  The time complexity is O(n^2) with 'n' being the size of the\nsub-identifiers in bytes (*).\n\nWith OpenSSL 3.0, support to fetch cryptographic algorithms using names /\nidentifiers in string form was introduced.  This includes using OBJECT\nIDENTIFIERs in canonical numeric text form as identifiers for fetching\nalgorithms.\n\nSuch OBJECT IDENTIFIERs may be received through the ASN.1 structure\nAlgorithmIdentifier, which is commonly used in multiple protocols to specify\nwhat cryptographic algorithm should be used to sign or verify, encrypt or\ndecrypt, or digest passed data.\n\nApplications that call OBJ_obj2txt() directly with untrusted data are\naffected, with any version of OpenSSL.  If the use is for the mere purpose\nof display, the severity is considered low.\n\nIn OpenSSL 3.0 and newer, this affects the subsystems OCSP, PKCS7/SMIME,\nCMS, CMP/CRMF or TS.  It also impacts anything that processes X.509\ncertificates, including simple things like verifying its signature.\n\nThe impact on TLS is relatively low, because all versions of OpenSSL have a\n100KiB limit on the peer's certificate chain.  Additionally, this only\nimpacts clients, or servers that have explicitly enabled client\nauthentication.\n\nIn OpenSSL 1.1.1 and 1.0.2, this only affects displaying diverse objects,\nsuch as X.509 certificates.  This is assumed to not happen in such a way\nthat it would cause a Denial of Service, so these versions are considered\nnot affected by this issue in such a way that it would be cause for concern,\nand the severity is therefore considered low.",
-              'diffID':        'sha256:05590cd53e0098af064bffc79d5b76acb8f14b8db4643871eb0a18325fad8005',
-              'fixedVersions': [
-                '3.0.9-r0'
-              ],
-              'installedVersion': '3.0.8-r4',
-              'packageName':      'libssl3',
-              'purl':             'pkg:apk/alpine/libssl3@3.0.8-r4?arch=x86_64&distro=3.17.3',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2023/05/30/1',
-                'https://access.redhat.com/errata/RHSA-2023:6330',
-                'https://access.redhat.com/security/cve/CVE-2023-2650',
-                'https://bugzilla.redhat.com/1858038',
-                'https://bugzilla.redhat.com/2207947',
-                'https://errata.almalinux.org/9/ALSA-2023-6330.html',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=423a2bc737a908ad0c77bda470b2b59dc879936b',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=853c5e56ee0b8650c73140816bb8b91d6163422c',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=9e209944b35cf82368071f160a744b6178f9b098',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=db779b0e10b047f2585615e0b8f2acdf21f8544a',
-                'https://linux.oracle.com/cve/CVE-2023-2650.html',
-                'https://linux.oracle.com/errata/ELSA-2023-6330.html',
-                'https://lists.debian.org/debian-lts-announce/2023/06/msg00011.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-2650',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0009',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://security.netapp.com/advisory/ntap-20230703-0001/',
-                'https://security.netapp.com/advisory/ntap-20231027-0009/',
-                'https://ubuntu.com/security/notices/USN-6119-1',
-                'https://ubuntu.com/security/notices/USN-6188-1',
-                'https://ubuntu.com/security/notices/USN-6672-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-2650',
-                'https://www.debian.org/security/2023/dsa-5417',
-                'https://www.openssl.org/news/secadv/20230530.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: Possible DoS translating ASN.1 object identifiers'
-            },
-            {
-              'cve':  'CVE-2023-2975',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N'
-                },
-                'redhat': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-354',
-                'CWE-287'
-              ],
-              'description':   'Issue summary: The AES-SIV cipher implementation contains a bug that causes\nit to ignore empty associated data entries which are unauthenticated as\na consequence.\n\nImpact summary: Applications that use the AES-SIV algorithm and want to\nauthenticate empty data entries as associated data can be misled by removing,\nadding or reordering such empty entries as these are ignored by the OpenSSL\nimplementation. We are currently unaware of any such applications.\n\nThe AES-SIV algorithm allows for authentication of multiple associated\ndata entries along with the encryption. To authenticate empty data the\napplication has to call EVP_EncryptUpdate() (or EVP_CipherUpdate()) with\nNULL pointer as the output buffer and 0 as the input buffer length.\nThe AES-SIV implementation in OpenSSL just returns success for such a call\ninstead of performing the associated data authentication operation.\nThe empty data thus will not be authenticated.\n\nAs this issue does not affect non-empty associated data authentication and\nwe expect it to be rare for an application to use empty associated data\nentries this is qualified as Low severity issue.',
-              'diffID':        'sha256:05590cd53e0098af064bffc79d5b76acb8f14b8db4643871eb0a18325fad8005',
-              'fixedVersions': [
-                '3.0.9-r2'
-              ],
-              'installedVersion': '3.0.8-r4',
-              'packageName':      'libssl3',
-              'purl':             'pkg:apk/alpine/libssl3@3.0.8-r4?arch=x86_64&distro=3.17.3',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2023/07/15/1',
-                'http://www.openwall.com/lists/oss-security/2023/07/19/5',
-                'https://access.redhat.com/errata/RHSA-2024:2447',
-                'https://access.redhat.com/security/cve/CVE-2023-2975',
-                'https://bugzilla.redhat.com/2223016',
-                'https://bugzilla.redhat.com/2224962',
-                'https://bugzilla.redhat.com/2227852',
-                'https://bugzilla.redhat.com/2248616',
-                'https://bugzilla.redhat.com/2257571',
-                'https://bugzilla.redhat.com/2258502',
-                'https://bugzilla.redhat.com/2259944',
-                'https://errata.almalinux.org/9/ALSA-2024-2447.html',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=00e2f5eea29994d19293ec4e8c8775ba73678598',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=6a83f0c958811f07e0d11dfc6b5a6a98edfd5bdc',
-                'https://linux.oracle.com/cve/CVE-2023-2975.html',
-                'https://linux.oracle.com/errata/ELSA-2024-2447.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-2975',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://security.netapp.com/advisory/ntap-20230725-0004/',
-                'https://ubuntu.com/security/notices/USN-6450-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-2975',
-                'https://www.openssl.org/news/secadv/20230714.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: AES-SIV cipher implementation contains a bug that causes it to ignore empty associated data entries'
-            },
-            {
-              'cve':  'CVE-2023-3446',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L'
-                },
-                'redhat': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L'
-                }
-              },
-              'cwes': [
-                'CWE-606',
-                'CWE-1333'
-              ],
-              'description':   "Issue summary: Checking excessively long DH keys or parameters may be very slow.\n\nImpact summary: Applications that use the functions DH_check(), DH_check_ex()\nor EVP_PKEY_param_check() to check a DH key or DH parameters may experience long\ndelays. Where the key or parameters that are being checked have been obtained\nfrom an untrusted source this may lead to a Denial of Service.\n\nThe function DH_check() performs various checks on DH parameters. One of those\nchecks confirms that the modulus ('p' parameter) is not too large. Trying to use\na very large modulus is slow and OpenSSL will not normally use a modulus which\nis over 10,000 bits in length.\n\nHowever the DH_check() function checks numerous aspects of the key or parameters\nthat have been supplied. Some of those checks use the supplied modulus value\neven if it has already been found to be too large.\n\nAn application that calls DH_check() and supplies a key or parameters obtained\nfrom an untrusted source could be vulernable to a Denial of Service attack.\n\nThe function DH_check() is itself called by a number of other OpenSSL functions.\nAn application calling any of those other functions may similarly be affected.\nThe other functions affected by this are DH_check_ex() and\nEVP_PKEY_param_check().\n\nAlso vulnerable are the OpenSSL dhparam and pkeyparam command line applications\nwhen using the '-check' option.\n\nThe OpenSSL SSL/TLS implementation is not affected by this issue.\nThe OpenSSL 3.0 and 3.1 FIPS providers are not affected by this issue.",
-              'diffID':        'sha256:05590cd53e0098af064bffc79d5b76acb8f14b8db4643871eb0a18325fad8005',
-              'fixedVersions': [
-                '3.0.9-r3'
-              ],
-              'installedVersion': '3.0.8-r4',
-              'packageName':      'libssl3',
-              'purl':             'pkg:apk/alpine/libssl3@3.0.8-r4?arch=x86_64&distro=3.17.3',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2023/07/19/4',
-                'http://www.openwall.com/lists/oss-security/2023/07/19/5',
-                'http://www.openwall.com/lists/oss-security/2023/07/19/6',
-                'http://www.openwall.com/lists/oss-security/2023/07/31/1',
-                'http://www.openwall.com/lists/oss-security/2024/05/16/1',
-                'https://access.redhat.com/errata/RHSA-2024:2447',
-                'https://access.redhat.com/security/cve/CVE-2023-3446',
-                'https://bugzilla.redhat.com/2223016',
-                'https://bugzilla.redhat.com/2224962',
-                'https://bugzilla.redhat.com/2227852',
-                'https://bugzilla.redhat.com/2248616',
-                'https://bugzilla.redhat.com/2257571',
-                'https://bugzilla.redhat.com/2258502',
-                'https://bugzilla.redhat.com/2259944',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2224962',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2257582',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2257583',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2258677',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2258688',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2258691',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2258694',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2258700',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-36763',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-36764',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3446',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45229',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45231',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45232',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45233',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45235',
-                'https://errata.almalinux.org/9/ALSA-2024-2447.html',
-                'https://errata.rockylinux.org/RLSA-2024:2264',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=1fa20cf2f506113c761777127a38bce5068740eb',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=8780a896543a654e757db1b9396383f9d8095528',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=9a0a4d3c1e7138915563c0df4fe6a3f9377b839c',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=fc9867c1e03c22ebf56943be205202e576aabf23',
-                'https://linux.oracle.com/cve/CVE-2023-3446.html',
-                'https://linux.oracle.com/errata/ELSA-2024-2447.html',
-                'https://lists.debian.org/debian-lts-announce/2023/08/msg00019.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-3446',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://security.netapp.com/advisory/ntap-20230803-0011/',
-                'https://ubuntu.com/security/notices/USN-6435-1',
-                'https://ubuntu.com/security/notices/USN-6435-2',
-                'https://ubuntu.com/security/notices/USN-6450-1',
-                'https://ubuntu.com/security/notices/USN-6709-1',
-                'https://ubuntu.com/security/notices/USN-7018-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-3446',
-                'https://www.openssl.org/news/secadv/20230719.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: Excessive time spent checking DH keys and parameters'
-            },
-            {
-              'cve':  'CVE-2023-3817',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L'
-                },
-                'redhat': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L'
-                }
-              },
-              'cwes': [
-                'CWE-606',
-                'CWE-834'
-              ],
-              'description':   'Issue summary: Checking excessively long DH keys or parameters may be very slow.\n\nImpact summary: Applications that use the functions DH_check(), DH_check_ex()\nor EVP_PKEY_param_check() to check a DH key or DH parameters may experience long\ndelays. Where the key or parameters that are being checked have been obtained\nfrom an untrusted source this may lead to a Denial of Service.\n\nThe function DH_check() performs various checks on DH parameters. After fixing\nCVE-2023-3446 it was discovered that a large q parameter value can also trigger\nan overly long computation during some of these checks. A correct q value,\nif present, cannot be larger than the modulus p parameter, thus it is\nunnecessary to perform these checks if q is larger than p.\n\nAn application that calls DH_check() and supplies a key or parameters obtained\nfrom an untrusted source could be vulnerable to a Denial of Service attack.\n\nThe function DH_check() is itself called by a number of other OpenSSL functions.\nAn application calling any of those other functions may similarly be affected.\nThe other functions affected by this are DH_check_ex() and\nEVP_PKEY_param_check().\n\nAlso vulnerable are the OpenSSL dhparam and pkeyparam command line applications\nwhen using the "-check" option.\n\nThe OpenSSL SSL/TLS implementation is not affected by this issue.\n\nThe OpenSSL 3.0 and 3.1 FIPS providers are not affected by this issue.',
-              'diffID':        'sha256:05590cd53e0098af064bffc79d5b76acb8f14b8db4643871eb0a18325fad8005',
-              'fixedVersions': [
-                '3.0.10-r0'
-              ],
-              'installedVersion': '3.0.8-r4',
-              'packageName':      'libssl3',
-              'purl':             'pkg:apk/alpine/libssl3@3.0.8-r4?arch=x86_64&distro=3.17.3',
-              'references':       [
-                'http://seclists.org/fulldisclosure/2023/Jul/43',
-                'http://www.openwall.com/lists/oss-security/2023/07/31/1',
-                'http://www.openwall.com/lists/oss-security/2023/09/22/11',
-                'http://www.openwall.com/lists/oss-security/2023/09/22/9',
-                'http://www.openwall.com/lists/oss-security/2023/11/06/2',
-                'https://access.redhat.com/errata/RHSA-2024:2447',
-                'https://access.redhat.com/security/cve/CVE-2023-3817',
-                'https://bugzilla.redhat.com/2223016',
-                'https://bugzilla.redhat.com/2224962',
-                'https://bugzilla.redhat.com/2227852',
-                'https://bugzilla.redhat.com/2248616',
-                'https://bugzilla.redhat.com/2257571',
-                'https://bugzilla.redhat.com/2258502',
-                'https://bugzilla.redhat.com/2259944',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2224962',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2227852',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2248616',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2270358',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3446',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3817',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-5678',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-2408',
-                'https://errata.almalinux.org/9/ALSA-2024-2447.html',
-                'https://errata.rockylinux.org/RLSA-2023:7877',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=6a1eb62c29db6cb5eec707f9338aee00f44e26f5',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=869ad69aadd985c7b8ca6f4e5dd0eb274c9f3644',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=9002fd07327a91f35ba6c1307e71fa6fd4409b7f',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=91ddeba0f2269b017dc06c46c993a788974b1aa5',
-                'https://linux.oracle.com/cve/CVE-2023-3817.html',
-                'https://linux.oracle.com/errata/ELSA-2024-2447.html',
-                'https://lists.debian.org/debian-lts-announce/2023/08/msg00019.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-3817',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://security.netapp.com/advisory/ntap-20230818-0014/',
-                'https://security.netapp.com/advisory/ntap-20231027-0008/',
-                'https://security.netapp.com/advisory/ntap-20240621-0006/',
-                'https://ubuntu.com/security/notices/USN-6435-1',
-                'https://ubuntu.com/security/notices/USN-6435-2',
-                'https://ubuntu.com/security/notices/USN-6450-1',
-                'https://ubuntu.com/security/notices/USN-6709-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-3817',
-                'https://www.openssl.org/news/secadv/20230731.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'OpenSSL: Excessive time spent checking DH q parameter value'
-            },
-            {
-              'cve':  'CVE-2023-5678',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L'
-                },
-                'redhat': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L'
-                }
-              },
-              'cwes': [
-                'CWE-606',
-                'CWE-754'
-              ],
-              'description':   "Issue summary: Generating excessively long X9.42 DH keys or checking\nexcessively long X9.42 DH keys or parameters may be very slow.\n\nImpact summary: Applications that use the functions DH_generate_key() to\ngenerate an X9.42 DH key may experience long delays.  Likewise, applications\nthat use DH_check_pub_key(), DH_check_pub_key_ex() or EVP_PKEY_public_check()\nto check an X9.42 DH key or X9.42 DH parameters may experience long delays.\nWhere the key or parameters that are being checked have been obtained from\nan untrusted source this may lead to a Denial of Service.\n\nWhile DH_check() performs all the necessary checks (as of CVE-2023-3817),\nDH_check_pub_key() doesn't make any of these checks, and is therefore\nvulnerable for excessively large P and Q parameters.\n\nLikewise, while DH_generate_key() performs a check for an excessively large\nP, it doesn't check for an excessively large Q.\n\nAn application that calls DH_generate_key() or DH_check_pub_key() and\nsupplies a key or parameters obtained from an untrusted source could be\nvulnerable to a Denial of Service attack.\n\nDH_generate_key() and DH_check_pub_key() are also called by a number of\nother OpenSSL functions.  An application calling any of those other\nfunctions may similarly be affected.  The other functions affected by this\nare DH_check_pub_key_ex(), EVP_PKEY_public_check(), and EVP_PKEY_generate().\n\nAlso vulnerable are the OpenSSL pkey command line application when using the\n\"-pubcheck\" option, as well as the OpenSSL genpkey command line application.\n\nThe OpenSSL SSL/TLS implementation is not affected by this issue.\n\nThe OpenSSL 3.0 and 3.1 FIPS providers are not affected by this issue.",
-              'diffID':        'sha256:05590cd53e0098af064bffc79d5b76acb8f14b8db4643871eb0a18325fad8005',
-              'fixedVersions': [
-                '3.0.12-r1'
-              ],
-              'installedVersion': '3.0.8-r4',
-              'packageName':      'libssl3',
-              'purl':             'pkg:apk/alpine/libssl3@3.0.8-r4?arch=x86_64&distro=3.17.3',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2024/03/11/1',
-                'https://access.redhat.com/errata/RHSA-2024:2447',
-                'https://access.redhat.com/security/cve/CVE-2023-5678',
-                'https://bugzilla.redhat.com/2223016',
-                'https://bugzilla.redhat.com/2224962',
-                'https://bugzilla.redhat.com/2227852',
-                'https://bugzilla.redhat.com/2248616',
-                'https://bugzilla.redhat.com/2257571',
-                'https://bugzilla.redhat.com/2258502',
-                'https://bugzilla.redhat.com/2259944',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2224962',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2227852',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2248616',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2270358',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3446',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3817',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-5678',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-2408',
-                'https://errata.almalinux.org/9/ALSA-2024-2447.html',
-                'https://errata.rockylinux.org/RLSA-2023:7877',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=34efaef6c103d636ab507a0cc34dca4d3aecc055',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=710fee740904b6290fef0dd5536fbcedbc38ff0c',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=db925ae2e65d0d925adef429afc37f75bd1c2017',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=ddeb4b6c6d527e54ce9a99cba785c0f7776e54b6',
-                'https://linux.oracle.com/cve/CVE-2023-5678.html',
-                'https://linux.oracle.com/errata/ELSA-2024-2447.html',
-                'https://lists.debian.org/debian-lts-announce/2024/10/msg00033.html',
-                'https://lists.debian.org/debian-lts-announce/2024/11/msg00000.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-5678',
-                'https://security.netapp.com/advisory/ntap-20231130-0010/',
-                'https://ubuntu.com/security/notices/USN-6622-1',
-                'https://ubuntu.com/security/notices/USN-6632-1',
-                'https://ubuntu.com/security/notices/USN-6709-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-5678',
-                'https://www.openssl.org/news/secadv/20231106.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: Generating excessively long X9.42 DH keys or checking excessively long X9.42 DH keys or parameters may be very slow'
-            },
-            {
-              'cve':  'CVE-2023-6129',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '6.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-440',
-                'CWE-787'
-              ],
-              'description':   'Issue summary: The POLY1305 MAC (message authentication code) implementation\ncontains a bug that might corrupt the internal state of applications running\non PowerPC CPU based platforms if the CPU provides vector instructions.\n\nImpact summary: If an attacker can influence whether the POLY1305 MAC\nalgorithm is used, the application state might be corrupted with various\napplication dependent consequences.\n\nThe POLY1305 MAC (message authentication code) implementation in OpenSSL for\nPowerPC CPUs restores the contents of vector registers in a different order\nthan they are saved. Thus the contents of some of these vector registers\nare corrupted when returning to the caller. The vulnerable code is used only\non newer PowerPC processors supporting the PowerISA 2.07 instructions.\n\nThe consequences of this kind of internal application state corruption can\nbe various - from no consequences, if the calling application does not\ndepend on the contents of non-volatile XMM registers at all, to the worst\nconsequences, where the attacker could get complete control of the application\nprocess. However unless the compiler uses the vector registers for storing\npointers, the most likely consequence, if any, would be an incorrect result\nof some application dependent calculations or a crash leading to a denial of\nservice.\n\nThe POLY1305 MAC algorithm is most frequently used as part of the\nCHACHA20-POLY1305 AEAD (authenticated encryption with associated data)\nalgorithm. The most common usage of this AEAD cipher is with TLS protocol\nversions 1.2 and 1.3. If this cipher is enabled on the server a malicious\nclient can influence whether this AEAD cipher is used. This implies that\nTLS server applications using OpenSSL can be potentially impacted. However\nwe are currently not aware of any concrete application that would be affected\nby this issue therefore we consider this a Low severity security issue.',
-              'diffID':        'sha256:05590cd53e0098af064bffc79d5b76acb8f14b8db4643871eb0a18325fad8005',
-              'fixedVersions': [
-                '3.0.12-r2'
-              ],
-              'installedVersion': '3.0.8-r4',
-              'packageName':      'libssl3',
-              'purl':             'pkg:apk/alpine/libssl3@3.0.8-r4?arch=x86_64&distro=3.17.3',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2024/03/11/1',
-                'https://access.redhat.com/errata/RHSA-2024:9088',
-                'https://access.redhat.com/security/cve/CVE-2023-6129',
-                'https://bugzilla.redhat.com/2257571',
-                'https://bugzilla.redhat.com/2258502',
-                'https://bugzilla.redhat.com/2259944',
-                'https://bugzilla.redhat.com/2284243',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2257571',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2258502',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2259944',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2284243',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-6129',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-6237',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-0727',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-1298',
-                'https://errata.almalinux.org/9/ALSA-2024-9088.html',
-                'https://errata.rockylinux.org/RLSA-2024:9088',
-                'https://github.com/openssl/openssl/commit/050d26383d4e264966fb83428e72d5d48f402d35',
-                'https://github.com/openssl/openssl/commit/5b139f95c9a47a55a0c54100f3837b1eee942b04',
-                'https://github.com/openssl/openssl/commit/f3fc5808fe9ff74042d639839610d03b8fdcc015',
-                'https://linux.oracle.com/cve/CVE-2023-6129.html',
-                'https://linux.oracle.com/errata/ELSA-2024-9088.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-6129',
-                'https://security.netapp.com/advisory/ntap-20240216-0009/',
-                'https://security.netapp.com/advisory/ntap-20240426-0008/',
-                'https://security.netapp.com/advisory/ntap-20240426-0013/',
-                'https://security.netapp.com/advisory/ntap-20240503-0011/',
-                'https://ubuntu.com/security/notices/USN-6622-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-6129',
-                'https://www.openssl.org/news/secadv/20240109.txt',
-                'https://www.openwall.com/lists/oss-security/2024/01/09/1'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: POLY1305 MAC implementation corrupts vector registers on PowerPC'
-            },
-            {
-              'cve':  'CVE-2023-6237',
-              'cvss': {
-                'redhat': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-606'
-              ],
-              'description':   "Issue summary: Checking excessively long invalid RSA public keys may take\na long time.\n\nImpact summary: Applications that use the function EVP_PKEY_public_check()\nto check RSA public keys may experience long delays. Where the key that\nis being checked has been obtained from an untrusted source this may lead\nto a Denial of Service.\n\nWhen function EVP_PKEY_public_check() is called on RSA public keys,\na computation is done to confirm that the RSA modulus, n, is composite.\nFor valid RSA keys, n is a product of two or more large primes and this\ncomputation completes quickly. However, if n is an overly large prime,\nthen this computation would take a long time.\n\nAn application that calls EVP_PKEY_public_check() and supplies an RSA key\nobtained from an untrusted source could be vulnerable to a Denial of Service\nattack.\n\nThe function EVP_PKEY_public_check() is not called from other OpenSSL\nfunctions however it is called from the OpenSSL pkey command line\napplication. For that reason that application is also vulnerable if used\nwith the '-pubin' and '-check' options on untrusted data.\n\nThe OpenSSL SSL/TLS implementation is not affected by this issue.\n\nThe OpenSSL 3.0 and 3.1 FIPS providers are affected by this issue.",
-              'diffID':        'sha256:05590cd53e0098af064bffc79d5b76acb8f14b8db4643871eb0a18325fad8005',
-              'fixedVersions': [
-                '3.0.12-r3'
-              ],
-              'installedVersion': '3.0.8-r4',
-              'packageName':      'libssl3',
-              'purl':             'pkg:apk/alpine/libssl3@3.0.8-r4?arch=x86_64&distro=3.17.3',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2024/03/11/1',
-                'https://access.redhat.com/errata/RHSA-2024:9088',
-                'https://access.redhat.com/security/cve/CVE-2023-6237',
-                'https://bugzilla.redhat.com/2257571',
-                'https://bugzilla.redhat.com/2258502',
-                'https://bugzilla.redhat.com/2259944',
-                'https://bugzilla.redhat.com/2284243',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2257571',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2258502',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2259944',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2284243',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-6129',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-6237',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-0727',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-1298',
-                'https://errata.almalinux.org/9/ALSA-2024-9088.html',
-                'https://errata.rockylinux.org/RLSA-2024:9088',
-                'https://github.com/openssl/openssl/commit/0b0f7abfb37350794a4b8960fafc292cd5d1b84d',
-                'https://github.com/openssl/openssl/commit/18c02492138d1eb8b6548cb26e7b625fb2414a2a',
-                'https://github.com/openssl/openssl/commit/a830f551557d3d66a84bbb18a5b889c640c36294',
-                'https://linux.oracle.com/cve/CVE-2023-6237.html',
-                'https://linux.oracle.com/errata/ELSA-2024-9088.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-6237',
-                'https://security.netapp.com/advisory/ntap-20240531-0007/',
-                'https://ubuntu.com/security/notices/USN-6622-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-6237',
-                'https://www.openssl.org/news/secadv/20240115.txt',
-                'https://www.openwall.com/lists/oss-security/2024/01/15/2'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: Excessive time spent checking invalid RSA public keys'
-            },
-            {
-              'cve':  'CVE-2024-0727',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '5.5',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H'
-                },
-                'nvd': {
-                  'v3score':  '5.5',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '5.5',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-476'
-              ],
-              'description':   'Issue summary: Processing a maliciously formatted PKCS12 file may lead OpenSSL\nto crash leading to a potential Denial of Service attack\n\nImpact summary: Applications loading files in the PKCS12 format from untrusted\nsources might terminate abruptly.\n\nA file in PKCS12 format can contain certificates and keys and may come from an\nuntrusted source. The PKCS12 specification allows certain fields to be NULL, but\nOpenSSL does not correctly check for this case. This can lead to a NULL pointer\ndereference that results in OpenSSL crashing. If an application processes PKCS12\nfiles from an untrusted source using the OpenSSL APIs then that application will\nbe vulnerable to this issue.\n\nOpenSSL APIs that are vulnerable to this are: PKCS12_parse(),\nPKCS12_unpack_p7data(), PKCS12_unpack_p7encdata(), PKCS12_unpack_authsafes()\nand PKCS12_newpass().\n\nWe have also fixed a similar issue in SMIME_write_PKCS7(). However since this\nfunction is related to writing data we do not consider it security significant.\n\nThe FIPS modules in 3.2, 3.1 and 3.0 are not affected by this issue.',
-              'diffID':        'sha256:05590cd53e0098af064bffc79d5b76acb8f14b8db4643871eb0a18325fad8005',
-              'fixedVersions': [
-                '3.0.12-r4'
-              ],
-              'installedVersion': '3.0.8-r4',
-              'packageName':      'libssl3',
-              'purl':             'pkg:apk/alpine/libssl3@3.0.8-r4?arch=x86_64&distro=3.17.3',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2024/03/11/1',
-                'https://access.redhat.com/errata/RHSA-2024:9088',
-                'https://access.redhat.com/security/cve/CVE-2024-0727',
-                'https://bugzilla.redhat.com/2257571',
-                'https://bugzilla.redhat.com/2258502',
-                'https://bugzilla.redhat.com/2259944',
-                'https://bugzilla.redhat.com/2284243',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2257571',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2258502',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2259944',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2284243',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-6129',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-6237',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-0727',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-1298',
-                'https://errata.almalinux.org/9/ALSA-2024-9088.html',
-                'https://errata.rockylinux.org/RLSA-2024:9088',
-                'https://github.com/alexcrichton/openssl-src-rs/commit/add20f73b6b42be7451af2e1044d4e0e778992b2',
-                'https://github.com/github/advisory-database/pull/3472',
-                'https://github.com/openssl/openssl/commit/09df4395b5071217b76dc7d3d2e630eb8c5a79c2',
-                'https://github.com/openssl/openssl/commit/775acfdbd0c6af9ac855f34969cdab0c0c90844a',
-                'https://github.com/openssl/openssl/commit/d135eeab8a5dbf72b3da5240bab9ddb7678dbd2c',
-                'https://github.com/openssl/openssl/pull/23362',
-                'https://github.com/pyca/cryptography/commit/3519591d255d4506fbcd0d04037d45271903c64d',
-                'https://github.openssl.org/openssl/extended-releases/commit/03b3941d60c4bce58fab69a0c22377ab439bc0e8',
-                'https://github.openssl.org/openssl/extended-releases/commit/aebaa5883e31122b404e450732dc833dc9dee539',
-                'https://linux.oracle.com/cve/CVE-2024-0727.html',
-                'https://linux.oracle.com/errata/ELSA-2024-9088.html',
-                'https://lists.debian.org/debian-lts-announce/2024/10/msg00033.html',
-                'https://lists.debian.org/debian-lts-announce/2024/11/msg00000.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2024-0727',
-                'https://security.netapp.com/advisory/ntap-20240208-0006',
-                'https://security.netapp.com/advisory/ntap-20240208-0006/',
-                'https://ubuntu.com/security/notices/USN-6622-1',
-                'https://ubuntu.com/security/notices/USN-6632-1',
-                'https://ubuntu.com/security/notices/USN-6709-1',
-                'https://ubuntu.com/security/notices/USN-7018-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2024-0727',
-                'https://www.openssl.org/news/secadv/20240125.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: denial of service via null dereference'
-            },
-            {
-              'cve':  'CVE-2024-4603',
-              'cvss': {
-                'redhat': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L'
-                }
-              },
-              'cwes': [
-                'CWE-606',
-                'CWE-834'
-              ],
-              'description':   'Issue summary: Checking excessively long DSA keys or parameters may be very\nslow.\n\nImpact summary: Applications that use the functions EVP_PKEY_param_check()\nor EVP_PKEY_public_check() to check a DSA public key or DSA parameters may\nexperience long delays. Where the key or parameters that are being checked\nhave been obtained from an untrusted source this may lead to a Denial of\nService.\n\nThe functions EVP_PKEY_param_check() or EVP_PKEY_public_check() perform\nvarious checks on DSA parameters. Some of those computations take a long time\nif the modulus (`p` parameter) is too large.\n\nTrying to use a very large modulus is slow and OpenSSL will not allow using\npublic keys with a modulus which is over 10,000 bits in length for signature\nverification. However the key and parameter check functions do not limit\nthe modulus size when performing the checks.\n\nAn application that calls EVP_PKEY_param_check() or EVP_PKEY_public_check()\nand supplies a key or parameters obtained from an untrusted source could be\nvulnerable to a Denial of Service attack.\n\nThese functions are not called by OpenSSL itself on untrusted DSA keys so\nonly applications that directly call these functions may be vulnerable.\n\nAlso vulnerable are the OpenSSL pkey and pkeyparam command line applications\nwhen using the `-check` option.\n\nThe OpenSSL SSL/TLS implementation is not affected by this issue.\n\nThe OpenSSL 3.0 and 3.1 FIPS providers are affected by this issue.',
-              'diffID':        'sha256:05590cd53e0098af064bffc79d5b76acb8f14b8db4643871eb0a18325fad8005',
-              'fixedVersions': [
-                '3.0.13-r0'
-              ],
-              'installedVersion': '3.0.8-r4',
-              'packageName':      'libssl3',
-              'purl':             'pkg:apk/alpine/libssl3@3.0.8-r4?arch=x86_64&distro=3.17.3',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2024/05/16/2',
-                'https://access.redhat.com/errata/RHSA-2024:9333',
-                'https://access.redhat.com/security/cve/CVE-2024-4603',
-                'https://bugzilla.redhat.com/2274020',
-                'https://bugzilla.redhat.com/2281029',
-                'https://bugzilla.redhat.com/2283757',
-                'https://bugzilla.redhat.com/2294581',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2274020',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2281029',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2283757',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2294581',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-2511',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-4603',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-4741',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-5535',
-                'https://errata.almalinux.org/9/ALSA-2024-9333.html',
-                'https://errata.rockylinux.org/RLSA-2024:9333',
-                'https://github.com/openssl/openssl/commit/3559e868e58005d15c6013a0c1fd832e51c73397',
-                'https://github.com/openssl/openssl/commit/53ea06486d296b890d565fb971b2764fcd826e7e',
-                'https://github.com/openssl/openssl/commit/9c39b3858091c152f52513c066ff2c5a47969f0d',
-                'https://github.com/openssl/openssl/commit/da343d0605c826ef197aceedc67e8e04f065f740',
-                'https://linux.oracle.com/cve/CVE-2024-4603.html',
-                'https://linux.oracle.com/errata/ELSA-2024-9333.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2024-4603',
-                'https://security.netapp.com/advisory/ntap-20240621-0001/',
-                'https://ubuntu.com/security/notices/USN-6937-1',
-                'https://www.cve.org/CVERecord?id=CVE-2024-4603',
-                'https://www.openssl.org/news/secadv/20240516.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: Excessive time spent checking DSA keys and parameters'
-            },
-            {
-              'cve':  'CVE-2024-4741',
-              'cvss': {
-                'redhat': {
-                  'v3score':  '5.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   'Issue summary: Calling the OpenSSL API function SSL_free_buffers may cause\nmemory to be accessed that was previously freed in some situations\n\nImpact summary: A use after free can have a range of potential consequences such\nas the corruption of valid data, crashes or execution of arbitrary code.\nHowever, only applications that directly call the SSL_free_buffers function are\naffected by this issue. Applications that do not call this function are not\nvulnerable. Our investigations indicate that this function is rarely used by\napplications.\n\nThe SSL_free_buffers function is used to free the internal OpenSSL buffer used\nwhen processing an incoming record from the network. The call is only expected\nto succeed if the buffer is not currently in use. However, two scenarios have\nbeen identified where the buffer is freed even when still in use.\n\nThe first scenario occurs where a record header has been received from the\nnetwork and processed by OpenSSL, but the full record body has not yet arrived.\nIn this case calling SSL_free_buffers will succeed even though a record has only\nbeen partially processed and the buffer is still in use.\n\nThe second scenario occurs where a full record containing application data has\nbeen received and processed by OpenSSL but the application has only read part of\nthis data. Again a call to SSL_free_buffers will succeed even though the buffer\nis still in use.\n\nWhile these scenarios could occur accidentally during normal operation a\nmalicious attacker could attempt to engineer a stituation where this occurs.\nWe are not aware of this issue being actively exploited.\n\nThe FIPS modules in 3.3, 3.2, 3.1 and 3.0 are not affected by this issue.',
-              'diffID':        'sha256:05590cd53e0098af064bffc79d5b76acb8f14b8db4643871eb0a18325fad8005',
-              'fixedVersions': [
-                '3.0.14-r0'
-              ],
-              'installedVersion': '3.0.8-r4',
-              'packageName':      'libssl3',
-              'purl':             'pkg:apk/alpine/libssl3@3.0.8-r4?arch=x86_64&distro=3.17.3',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2024:9333',
-                'https://access.redhat.com/security/cve/CVE-2024-4741',
-                'https://bugzilla.redhat.com/2274020',
-                'https://bugzilla.redhat.com/2281029',
-                'https://bugzilla.redhat.com/2283757',
-                'https://bugzilla.redhat.com/2294581',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2274020',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2281029',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2283757',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2294581',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-2511',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-4603',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-4741',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-5535',
-                'https://errata.almalinux.org/9/ALSA-2024-9333.html',
-                'https://errata.rockylinux.org/RLSA-2024:9333',
-                'https://github.com/openssl/openssl/commit/704f725b96aa373ee45ecfb23f6abfe8be8d9177',
-                'https://github.com/openssl/openssl/commit/b3f0eb0a295f58f16ba43ba99dad70d4ee5c437d',
-                'https://github.com/openssl/openssl/commit/c88c3de51020c37e8706bf7a682a162593053aac',
-                'https://github.com/openssl/openssl/commit/e5093133c35ca82874ad83697af76f4b0f7e3bd8',
-                'https://github.openssl.org/openssl/extended-releases/commit/f7a045f3143fc6da2ee66bf52d8df04829590dd4',
-                'https://linux.oracle.com/cve/CVE-2024-4741.html',
-                'https://linux.oracle.com/errata/ELSA-2024-9333.html',
-                'https://lists.debian.org/debian-lts-announce/2024/10/msg00033.html',
-                'https://lists.debian.org/debian-lts-announce/2024/11/msg00000.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2024-4741',
-                'https://security.netapp.com/advisory/ntap-20240621-0004/',
-                'https://ubuntu.com/security/notices/USN-6937-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2024-4741',
-                'https://www.openssl.org/news/secadv/20240528.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: Use After Free with SSL_free_buffers'
-            },
-            {
-              'cve':  'CVE-2024-5535',
-              'cvss': {
-                'redhat': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-125'
-              ],
-              'description':   'Issue summary: Calling the OpenSSL API function SSL_select_next_proto with an\nempty supported client protocols buffer may cause a crash or memory contents to\nbe sent to the peer.\n\nImpact summary: A buffer overread can have a range of potential consequences\nsuch as unexpected application beahviour or a crash. In particular this issue\ncould result in up to 255 bytes of arbitrary private data from memory being sent\nto the peer leading to a loss of confidentiality. However, only applications\nthat directly call the SSL_select_next_proto function with a 0 length list of\nsupported client protocols are affected by this issue. This would normally never\nbe a valid scenario and is typically not under attacker control but may occur by\naccident in the case of a configuration or programming error in the calling\napplication.\n\nThe OpenSSL API function SSL_select_next_proto is typically used by TLS\napplications that support ALPN (Application Layer Protocol Negotiation) or NPN\n(Next Protocol Negotiation). NPN is older, was never standardised and\nis deprecated in favour of ALPN. We believe that ALPN is significantly more\nwidely deployed than NPN. The SSL_select_next_proto function accepts a list of\nprotocols from the server and a list of protocols from the client and returns\nthe first protocol that appears in the server list that also appears in the\nclient list. In the case of no overlap between the two lists it returns the\nfirst item in the client list. In either case it will signal whether an overlap\nbetween the two lists was found. In the case where SSL_select_next_proto is\ncalled with a zero length client list it fails to notice this condition and\nreturns the memory immediately following the client list pointer (and reports\nthat there was no overlap in the lists).\n\nThis function is typically called from a server side application callback for\nALPN or a client side application callback for NPN. In the case of ALPN the list\nof protocols supplied by the client is guaranteed by libssl to never be zero in\nlength. The list of server protocols comes from the application and should never\nnormally be expected to be of zero length. In this case if the\nSSL_select_next_proto function has been called as expected (with the list\nsupplied by the client passed in the client/client_len parameters), then the\napplication will not be vulnerable to this issue. If the application has\naccidentally been configured with a zero length server list, and has\naccidentally passed that zero length server list in the client/client_len\nparameters, and has additionally failed to correctly handle a "no overlap"\nresponse (which would normally result in a handshake failure in ALPN) then it\nwill be vulnerable to this problem.\n\nIn the case of NPN, the protocol permits the client to opportunistically select\na protocol when there is no overlap. OpenSSL returns the first client protocol\nin the no overlap case in support of this. The list of client protocols comes\nfrom the application and should never normally be expected to be of zero length.\nHowever if the SSL_select_next_proto function is accidentally called with a\nclient_len of 0 then an invalid memory pointer will be returned instead. If the\napplication uses this output as the opportunistic protocol then the loss of\nconfidentiality will occur.\n\nThis issue has been assessed as Low severity because applications are most\nlikely to be vulnerable if they are using NPN instead of ALPN - but NPN is not\nwidely used. It also requires an application configuration or programming error.\nFinally, this issue would not typically be under attacker control making active\nexploitation unlikely.\n\nThe FIPS modules in 3.3, 3.2, 3.1 and 3.0 are not affected by this issue.\n\nDue to the low severity of this issue we are not issuing new releases of\nOpenSSL at this time. The fix will be included in the next releases when they\nbecome available.',
-              'diffID':        'sha256:05590cd53e0098af064bffc79d5b76acb8f14b8db4643871eb0a18325fad8005',
-              'fixedVersions': [
-                '3.0.14-r0'
-              ],
-              'installedVersion': '3.0.8-r4',
-              'packageName':      'libssl3',
-              'purl':             'pkg:apk/alpine/libssl3@3.0.8-r4?arch=x86_64&distro=3.17.3',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2024/06/27/1',
-                'http://www.openwall.com/lists/oss-security/2024/06/28/4',
-                'http://www.openwall.com/lists/oss-security/2024/08/15/1',
-                'https://access.redhat.com/errata/RHSA-2025:1671',
-                'https://access.redhat.com/security/cve/CVE-2024-5535',
-                'https://bugzilla.redhat.com/2294581',
-                'https://bugzilla.redhat.com/2294676',
-                'https://bugzilla.redhat.com/2301888',
-                'https://bugzilla.redhat.com/2318857',
-                'https://bugzilla.redhat.com/2318858',
-                'https://bugzilla.redhat.com/2318870',
-                'https://bugzilla.redhat.com/2318873',
-                'https://bugzilla.redhat.com/2318874',
-                'https://bugzilla.redhat.com/2318876',
-                'https://bugzilla.redhat.com/2318882',
-                'https://bugzilla.redhat.com/2318883',
-                'https://bugzilla.redhat.com/2318884',
-                'https://bugzilla.redhat.com/2318885',
-                'https://bugzilla.redhat.com/2318886',
-                'https://bugzilla.redhat.com/2318897',
-                'https://bugzilla.redhat.com/2318900',
-                'https://bugzilla.redhat.com/2318905',
-                'https://bugzilla.redhat.com/2318914',
-                'https://bugzilla.redhat.com/2318922',
-                'https://bugzilla.redhat.com/2318923',
-                'https://bugzilla.redhat.com/2318925',
-                'https://bugzilla.redhat.com/2318926',
-                'https://bugzilla.redhat.com/2318927',
-                'https://bugzilla.redhat.com/2331191',
-                'https://bugzilla.redhat.com/2339218',
-                'https://bugzilla.redhat.com/2339220',
-                'https://bugzilla.redhat.com/2339221',
-                'https://bugzilla.redhat.com/2339226',
-                'https://bugzilla.redhat.com/2339231',
-                'https://bugzilla.redhat.com/2339236',
-                'https://bugzilla.redhat.com/2339238',
-                'https://bugzilla.redhat.com/2339243',
-                'https://bugzilla.redhat.com/2339247',
-                'https://bugzilla.redhat.com/2339252',
-                'https://bugzilla.redhat.com/2339259',
-                'https://bugzilla.redhat.com/2339266',
-                'https://bugzilla.redhat.com/2339270',
-                'https://bugzilla.redhat.com/2339271',
-                'https://bugzilla.redhat.com/2339275',
-                'https://bugzilla.redhat.com/2339277',
-                'https://bugzilla.redhat.com/2339281',
-                'https://bugzilla.redhat.com/2339284',
-                'https://bugzilla.redhat.com/2339291',
-                'https://bugzilla.redhat.com/2339293',
-                'https://bugzilla.redhat.com/2339295',
-                'https://bugzilla.redhat.com/2339299',
-                'https://bugzilla.redhat.com/2339300',
-                'https://bugzilla.redhat.com/2339304',
-                'https://bugzilla.redhat.com/2339305',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2274020',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2281029',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2283757',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2294581',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-2511',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-4603',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-4741',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-5535',
-                'https://errata.almalinux.org/9/ALSA-2025-1671.html',
-                'https://errata.rockylinux.org/RLSA-2024:9333',
-                'https://github.com/openssl/openssl/commit/4ada436a1946cbb24db5ab4ca082b69c1bc10f37',
-                'https://github.com/openssl/openssl/commit/99fb785a5f85315b95288921a321a935ea29a51e',
-                'https://github.com/openssl/openssl/commit/cf6f91f6121f4db167405db2f0de410a456f260c',
-                'https://github.com/openssl/openssl/commit/e86ac436f0bd54d4517745483e2315650fae7b2c',
-                'https://github.openssl.org/openssl/extended-releases/commit/9947251413065a05189a63c9b7a6c1d4e224c21c',
-                'https://github.openssl.org/openssl/extended-releases/commit/b78ec0824da857223486660177d3b1f255c65d87',
-                'https://linux.oracle.com/cve/CVE-2024-5535.html',
-                'https://linux.oracle.com/errata/ELSA-2025-1673.html',
-                'https://lists.debian.org/debian-lts-announce/2024/10/msg00033.html',
-                'https://lists.debian.org/debian-lts-announce/2024/11/msg00000.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2024-5535',
-                'https://openssl.org/news/secadv/20240627.txt',
-                'https://security.netapp.com/advisory/ntap-20240712-0005/',
-                'https://security.netapp.com/advisory/ntap-20241025-0006/',
-                'https://security.netapp.com/advisory/ntap-20241025-0010/',
-                'https://ubuntu.com/security/notices/USN-6937-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2024-5535',
-                'https://www.openssl.org/news/secadv/20240627.txt',
-                'https://www.oracle.com/security-alerts/cpuoct2024.html#AppendixMSQL'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: SSL_select_next_proto buffer overread'
-            },
-            {
-              'cve':  'CVE-2024-2511',
-              'cvss': {
-                'redhat': {
-                  'v3score':  '3.7',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L'
-                }
-              },
-              'cwes': [
-                'CWE-1325'
-              ],
-              'description':   'Issue summary: Some non-default TLS server configurations can cause unbounded\nmemory growth when processing TLSv1.3 sessions\n\nImpact summary: An attacker may exploit certain server configurations to trigger\nunbounded memory growth that would lead to a Denial of Service\n\nThis problem can occur in TLSv1.3 if the non-default SSL_OP_NO_TICKET option is\nbeing used (but not if early_data support is also configured and the default\nanti-replay protection is in use). In this case, under certain conditions, the\nsession cache can get into an incorrect state and it will fail to flush properly\nas it fills. The session cache will continue to grow in an unbounded manner. A\nmalicious client could deliberately create the scenario for this failure to\nforce a Denial of Service. It may also happen by accident in normal operation.\n\nThis issue only affects TLS servers supporting TLSv1.3. It does not affect TLS\nclients.\n\nThe FIPS modules in 3.2, 3.1 and 3.0 are not affected by this issue. OpenSSL\n1.0.2 is also not affected by this issue.',
-              'diffID':        'sha256:05590cd53e0098af064bffc79d5b76acb8f14b8db4643871eb0a18325fad8005',
-              'fixedVersions': [
-                '3.0.12-r5'
-              ],
-              'installedVersion': '3.0.8-r4',
-              'packageName':      'libssl3',
-              'purl':             'pkg:apk/alpine/libssl3@3.0.8-r4?arch=x86_64&distro=3.17.3',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2024/04/08/5',
-                'https://access.redhat.com/errata/RHSA-2024:9333',
-                'https://access.redhat.com/security/cve/CVE-2024-2511',
-                'https://bugzilla.redhat.com/2274020',
-                'https://bugzilla.redhat.com/2281029',
-                'https://bugzilla.redhat.com/2283757',
-                'https://bugzilla.redhat.com/2294581',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2274020',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2281029',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2283757',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2294581',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-2511',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-4603',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-4741',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-5535',
-                'https://errata.almalinux.org/9/ALSA-2024-9333.html',
-                'https://errata.rockylinux.org/RLSA-2024:9333',
-                'https://github.com/openssl/openssl/commit/7e4d731b1c07201ad9374c1cd9ac5263bdf35bce',
-                'https://github.com/openssl/openssl/commit/b52867a9f618bb955bed2a3ce3db4d4f97ed8e5d',
-                'https://github.com/openssl/openssl/commit/e9d7083e241670332e0443da0f0d4ffb52829f08',
-                'https://github.openssl.org/openssl/extended-releases/commit/5f8d25770ae6437db119dfc951e207271a326640',
-                'https://linux.oracle.com/cve/CVE-2024-2511.html',
-                'https://linux.oracle.com/errata/ELSA-2024-9333.html',
-                'https://lists.debian.org/debian-lts-announce/2024/10/msg00033.html',
-                'https://lists.debian.org/debian-lts-announce/2024/11/msg00000.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2024-2511',
-                'https://security.netapp.com/advisory/ntap-20240503-0013/',
-                'https://ubuntu.com/security/notices/USN-6937-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2024-2511',
-                'https://www.openssl.org/news/secadv/20240408.txt',
-                'https://www.openssl.org/news/vulnerabilities.html'
-              ],
-              'severity':   'LOW',
-              'suppressed': false,
-              'title':      'openssl: Unbounded memory growth with session handling in TLSv1.3'
-            },
-            {
-              'cve':  'CVE-2024-9143',
-              'cvss': {
-                'redhat': {
-                  'v3score':  '3.7',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L'
-                }
-              },
-              'cwes': [
-                'CWE-125',
-                'CWE-787'
-              ],
-              'description':   "Issue summary: Use of the low-level GF(2^m) elliptic curve APIs with untrusted\nexplicit values for the field polynomial can lead to out-of-bounds memory reads\nor writes.\n\nImpact summary: Out of bound memory writes can lead to an application crash or\neven a possibility of a remote code execution, however, in all the protocols\ninvolving Elliptic Curve Cryptography that we're aware of, either only \"named\ncurves\" are supported, or, if explicit curve parameters are supported, they\nspecify an X9.62 encoding of binary (GF(2^m)) curves that can't represent\nproblematic input values. Thus the likelihood of existence of a vulnerable\napplication is low.\n\nIn particular, the X9.62 encoding is used for ECC keys in X.509 certificates,\nso problematic inputs cannot occur in the context of processing X.509\ncertificates.  Any problematic use-cases would have to be using an \"exotic\"\ncurve encoding.\n\nThe affected APIs include: EC_GROUP_new_curve_GF2m(), EC_GROUP_new_from_params(),\nand various supporting BN_GF2m_*() functions.\n\nApplications working with \"exotic\" explicit binary (GF(2^m)) curve parameters,\nthat make it possible to represent invalid field polynomials with a zero\nconstant term, via the above or similar APIs, may terminate abruptly as a\nresult of reading or writing outside of array bounds.  Remote code execution\ncannot easily be ruled out.\n\nThe FIPS modules in 3.3, 3.2, 3.1 and 3.0 are not affected by this issue.",
-              'diffID':        'sha256:05590cd53e0098af064bffc79d5b76acb8f14b8db4643871eb0a18325fad8005',
-              'fixedVersions': [
-                '3.0.15-r1'
-              ],
-              'installedVersion': '3.0.8-r4',
-              'packageName':      'libssl3',
-              'purl':             'pkg:apk/alpine/libssl3@3.0.8-r4?arch=x86_64&distro=3.17.3',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2024/10/16/1',
-                'http://www.openwall.com/lists/oss-security/2024/10/23/1',
-                'http://www.openwall.com/lists/oss-security/2024/10/24/1',
-                'https://access.redhat.com/security/cve/CVE-2024-9143',
-                'https://github.com/openssl/openssl/commit/72ae83ad214d2eef262461365a1975707f862712',
-                'https://github.com/openssl/openssl/commit/bc7e04d7c8d509fb78fc0e285aa948fb0da04700',
-                'https://github.com/openssl/openssl/commit/c0d3e4d32d2805f49bec30547f225bc4d092e1f4',
-                'https://github.com/openssl/openssl/commit/fdf6723362ca51bd883295efe206cb5b1cfa5154',
-                'https://github.openssl.org/openssl/extended-releases/commit/8efc0cbaa8ebba8e116f7b81a876a4123594d86a',
-                'https://github.openssl.org/openssl/extended-releases/commit/9d576994cec2b7aa37a91740ea7e680810957e41',
-                'https://lists.debian.org/debian-lts-announce/2024/10/msg00033.html',
-                'https://lists.debian.org/debian-lts-announce/2024/11/msg00000.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2024-9143',
-                'https://openssl-library.org/news/secadv/20241016.txt',
-                'https://security.netapp.com/advisory/ntap-20241101-0001/',
-                'https://ubuntu.com/security/notices/USN-7264-1',
-                'https://ubuntu.com/security/notices/USN-7278-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2024-9143'
-              ],
-              'severity':   'LOW',
-              'suppressed': false,
-              'title':      'openssl: Low-level invalid GF(2^m) parameters lead to OOB memory access'
-            },
-            {
-              'cve':  'CVE-2025-26519',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-787'
-              ],
-              'description':   'musl libc 0.9.13 through 1.2.5 before 1.2.6 has an out-of-bounds write vulnerability when an attacker can trigger iconv conversion of untrusted EUC-KR text to UTF-8.',
-              'diffID':        'sha256:05590cd53e0098af064bffc79d5b76acb8f14b8db4643871eb0a18325fad8005',
-              'fixedVersions': [
-                '1.2.3-r6'
-              ],
-              'installedVersion': '1.2.3-r5',
-              'packageName':      'musl',
-              'purl':             'pkg:apk/alpine/musl@1.2.3-r5?arch=x86_64&distro=3.17.3',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2025/02/13/2',
-                'http://www.openwall.com/lists/oss-security/2025/02/13/3',
-                'http://www.openwall.com/lists/oss-security/2025/02/13/4',
-                'http://www.openwall.com/lists/oss-security/2025/02/13/5',
-                'http://www.openwall.com/lists/oss-security/2025/02/14/5',
-                'http://www.openwall.com/lists/oss-security/2025/02/14/6',
-                'https://git.musl-libc.org/cgit/musl/commit/?id=c47ad25ea3b484e10326f933e927c0bc8cded3da',
-                'https://git.musl-libc.org/cgit/musl/commit/?id=e5adcd97b5196e29991b524237381a0202a60659',
-                'https://www.openwall.com/lists/oss-security/2025/02/13/2'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'musl libc 0.9.13 through 1.2.5 before 1.2.6 has an out-of-bounds write ...'
-            },
-            {
-              'cve':  'CVE-2025-26519',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-787'
-              ],
-              'description':   'musl libc 0.9.13 through 1.2.5 before 1.2.6 has an out-of-bounds write vulnerability when an attacker can trigger iconv conversion of untrusted EUC-KR text to UTF-8.',
-              'diffID':        'sha256:05590cd53e0098af064bffc79d5b76acb8f14b8db4643871eb0a18325fad8005',
-              'fixedVersions': [
-                '1.2.3-r6'
-              ],
-              'installedVersion': '1.2.3-r5',
-              'packageName':      'musl-utils',
-              'purl':             'pkg:apk/alpine/musl-utils@1.2.3-r5?arch=x86_64&distro=3.17.3',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2025/02/13/2',
-                'http://www.openwall.com/lists/oss-security/2025/02/13/3',
-                'http://www.openwall.com/lists/oss-security/2025/02/13/4',
-                'http://www.openwall.com/lists/oss-security/2025/02/13/5',
-                'http://www.openwall.com/lists/oss-security/2025/02/14/5',
-                'http://www.openwall.com/lists/oss-security/2025/02/14/6',
-                'https://git.musl-libc.org/cgit/musl/commit/?id=c47ad25ea3b484e10326f933e927c0bc8cded3da',
-                'https://git.musl-libc.org/cgit/musl/commit/?id=e5adcd97b5196e29991b524237381a0202a60659',
-                'https://www.openwall.com/lists/oss-security/2025/02/13/2'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'musl libc 0.9.13 through 1.2.5 before 1.2.6 has an out-of-bounds write ...'
-            },
-            {
-              'cve':  'CVE-2023-42363',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.5',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.8',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   'A use-after-free vulnerability was discovered in xasprintf function in xfuncs_printf.c:344 in BusyBox v.1.36.1.',
-              'diffID':        'sha256:f1417ff83b319fbdae6dd9cd6d8c9c88002dcd75ecf6ec201c8c6894681cf2b5',
-              'fixedVersions': [
-                '1.35.0-r31'
-              ],
-              'installedVersion': '1.35.0-r29',
-              'packageName':      'ssl_client',
-              'purl':             'pkg:apk/alpine/ssl_client@1.35.0-r29?arch=x86_64&distro=3.17.3',
-              'references':       [
-                'http://lists.busybox.net/pipermail/busybox/2024-May/090760.html',
-                'https://access.redhat.com/security/cve/CVE-2023-42363',
-                'https://bugs.busybox.net/show_bug.cgi?id=15865',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-42363',
-                'https://ubuntu.com/security/notices/USN-6961-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-42363'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk'
-            },
-            {
-              'cve':  'CVE-2023-42364',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.5',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.8',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   'A use-after-free vulnerability in BusyBox v.1.36.1 allows attackers to cause a denial of service via a crafted awk pattern in the awk.c evaluate function.',
-              'diffID':        'sha256:f1417ff83b319fbdae6dd9cd6d8c9c88002dcd75ecf6ec201c8c6894681cf2b5',
-              'fixedVersions': [
-                '1.35.0-r31'
-              ],
-              'installedVersion': '1.35.0-r29',
-              'packageName':      'ssl_client',
-              'purl':             'pkg:apk/alpine/ssl_client@1.35.0-r29?arch=x86_64&distro=3.17.3',
-              'references':       [
-                'http://lists.busybox.net/pipermail/busybox/2024-May/090762.html',
-                'https://access.redhat.com/security/cve/CVE-2023-42364',
-                'https://bugs.busybox.net/show_bug.cgi?id=15868',
-                'https://gitlab.alpinelinux.org/alpine/aports/-/blob/master/main/busybox/CVE-2023-42364-CVE-2023-42365.patch',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-42364',
-                'https://ubuntu.com/security/notices/USN-6961-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-42364'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'busybox: use-after-free'
-            },
-            {
-              'cve':  'CVE-2023-42365',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.5',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.8',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   'A use-after-free vulnerability was discovered in BusyBox v.1.36.1 via a crafted awk pattern in the awk.c copyvar function.',
-              'diffID':        'sha256:f1417ff83b319fbdae6dd9cd6d8c9c88002dcd75ecf6ec201c8c6894681cf2b5',
-              'fixedVersions': [
-                '1.35.0-r31'
-              ],
-              'installedVersion': '1.35.0-r29',
-              'packageName':      'ssl_client',
-              'purl':             'pkg:apk/alpine/ssl_client@1.35.0-r29?arch=x86_64&distro=3.17.3',
-              'references':       [
-                'http://lists.busybox.net/pipermail/busybox/2024-May/090762.html',
-                'https://access.redhat.com/security/cve/CVE-2023-42365',
-                'https://bugs.busybox.net/show_bug.cgi?id=15871',
-                'https://gitlab.alpinelinux.org/alpine/aports/-/blob/master/main/busybox/CVE-2023-42364-CVE-2023-42365.patch',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-42365',
-                'https://ubuntu.com/security/notices/USN-6961-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-42365'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'busybox: use-after-free'
-            },
-            {
-              'cve':  'CVE-2023-42366',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.5',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.1',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-787'
-              ],
-              'description':   'A heap-buffer-overflow was discovered in BusyBox v.1.36.1 in the next_token function at awk.c:1159.',
-              'diffID':        'sha256:f1417ff83b319fbdae6dd9cd6d8c9c88002dcd75ecf6ec201c8c6894681cf2b5',
-              'fixedVersions': [
-                '1.35.0-r30'
-              ],
-              'installedVersion': '1.35.0-r29',
-              'packageName':      'ssl_client',
-              'purl':             'pkg:apk/alpine/ssl_client@1.35.0-r29?arch=x86_64&distro=3.17.3',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2023-42366',
-                'https://bugs.busybox.net/show_bug.cgi?id=15874',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-42366',
-                'https://security.netapp.com/advisory/ntap-20241206-0007/',
-                'https://www.cve.org/CVERecord?id=CVE-2023-42366'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'busybox: A heap-buffer-overflow'
-            }
-          ]
-        }
-      ],
-      'summary': {
-        'critical':   0,
-        'high':       6,
-        'low':        4,
-        'medium':     34,
-        'suppressed': 0,
-        'unknown':    0
-      }
-    }
-  },
-  {
-    'id':    'default/357b64c17da3cb976d394e5ad341dd7e7c75d17636ab8cf44e37b58f3b1a27a2',
-    'type':  'storage.sbomscanner.kubewarden.io.vulnerabilityreport',
-    'links': {
-      'patch':  'https://localhost:8005/v1/storage.sbomscanner.kubewarden.io.vulnerabilityreports/default/357b64c17da3cb976d394e5ad341dd7e7c75d17636ab8cf44e37b58f3b1a27a2',
-      'remove': 'https://localhost:8005/v1/storage.sbomscanner.kubewarden.io.vulnerabilityreports/default/357b64c17da3cb976d394e5ad341dd7e7c75d17636ab8cf44e37b58f3b1a27a2',
-      'self':   'https://localhost:8005/v1/storage.sbomscanner.kubewarden.io.vulnerabilityreports/default/357b64c17da3cb976d394e5ad341dd7e7c75d17636ab8cf44e37b58f3b1a27a2',
-      'update': 'https://localhost:8005/v1/storage.sbomscanner.kubewarden.io.vulnerabilityreports/default/357b64c17da3cb976d394e5ad341dd7e7c75d17636ab8cf44e37b58f3b1a27a2',
-      'view':   'https://localhost:8005/apis/storage.sbomscanner.kubewarden.io/v1alpha1/namespaces/default/vulnerabilityreports/357b64c17da3cb976d394e5ad341dd7e7c75d17636ab8cf44e37b58f3b1a27a2'
-    },
-    'apiVersion':    'storage.sbomscanner.kubewarden.io/v1alpha1',
-    'imageMetadata': {
-      'digest':      'sha256:2cf7f3fb0e13722e181d1cc0ef9d05cdd20e9311ecc2c130de6dcd5e63f37e17',
-      'platform':    'linux/s390x',
-      'registry':    'lsong-demo1',
-      'registryURI': 'registry-1.docker.io',
-      'repository':  'library/alpine',
-      'tag':         '3.20.5'
-    },
-    'kind':     'VulnerabilityReport',
-    'metadata': {
-      'creationTimestamp': '2026-01-14T18:51:40Z',
-      'fields':            [
-        '357b64c17da3cb976d394e5ad341dd7e7c75d17636ab8cf44e37b58f3b1a27a2',
-        'registry-1.docker.io/library/alpine:3.20.5',
-        'linux/s390x',
-        '18 (0 suppressed)'
-      ],
-      'labels': {
-        'app.kubernetes.io/managed-by':          'sbomscanner',
-        'app.kubernetes.io/part-of':             'sbomscanner',
-        'sbomscanner.kubewarden.io/scanjob-uid': '445c600a-c4b6-40b3-bd71-f2d2140a37d5'
-      },
-      'name':            '357b64c17da3cb976d394e5ad341dd7e7c75d17636ab8cf44e37b58f3b1a27a2',
-      'namespace':       'default',
-      'ownerReferences': [
-        {
-          'apiVersion':         'storage.sbomscanner.kubewarden.io/v1alpha1',
-          'blockOwnerDeletion': true,
-          'controller':         true,
-          'kind':               'SBOM',
-          'name':               '357b64c17da3cb976d394e5ad341dd7e7c75d17636ab8cf44e37b58f3b1a27a2',
-          'uid':                'e9efff1e-7803-4e94-a21b-5ddb83855ce5'
-        }
-      ],
-      'relationships': [
-        {
-          'fromId':   'default/357b64c17da3cb976d394e5ad341dd7e7c75d17636ab8cf44e37b58f3b1a27a2',
-          'fromType': 'storage.sbomscanner.kubewarden.io.sbom',
-          'rel':      'owner',
-          'state':    'active',
-          'message':  'Resource is current'
-        }
-      ],
-      'resourceVersion': '1',
-      'state':           {
-        'error':         false,
-        'message':       'Resource is current',
-        'name':          'active',
-        'transitioning': false
-      },
-      'uid': 'e480dfa9-2d5f-4e7d-a36d-4c84e0d9f984'
-    },
-    'report': {
-      'results': [
-        {
-          'class':           'os-pkgs',
-          'target':          '/var/run/worker/trivy.sbom.3788688471.json (alpine 3.20.5)',
-          'type':            'alpine',
-          'vulnerabilities': [
-            {
-              'cve':  'CVE-2024-58251',
-              'cwes': [
-                'CWE-150'
-              ],
-              'description':   'In netstat in BusyBox through 1.37.0, local users can launch of network application with an argv[0] containing an ANSI terminal escape sequence, leading to a denial of service (terminal locked up) when netstat is used by a victim.',
-              'diffID':        'sha256:c16773da82eb9ee95902632edb6d7c0eacdd4d7fbb0507a47e10fccd8b114aca',
-              'fixedVersions': [
-                '1.36.1-r31'
-              ],
-              'installedVersion': '1.36.1-r29',
-              'packageName':      'busybox',
-              'purl':             'pkg:apk/alpine/busybox@1.36.1-r29?arch=s390x&distro=3.20.5',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2025/04/23/6',
-                'https://bugs.busybox.net/show_bug.cgi?id=15922',
-                'https://www.busybox.net',
-                'https://www.busybox.net/downloads/',
-                'https://www.cve.org/CVERecord?id=CVE-2024-58251'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'In netstat in BusyBox through 1.37.0, local users can launch of networ ...'
-            },
-            {
-              'cve':  'CVE-2025-46394',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '3.3',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-451'
-              ],
-              'description':   'In tar in BusyBox through 1.37.0, a TAR archive can have filenames hidden from a listing through the use of terminal escape sequences.',
-              'diffID':        'sha256:c16773da82eb9ee95902632edb6d7c0eacdd4d7fbb0507a47e10fccd8b114aca',
-              'fixedVersions': [
-                '1.36.1-r31'
-              ],
-              'installedVersion': '1.36.1-r29',
-              'packageName':      'busybox',
-              'purl':             'pkg:apk/alpine/busybox@1.36.1-r29?arch=s390x&distro=3.20.5',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2025/04/23/5',
-                'http://www.openwall.com/lists/oss-security/2025/04/24/3',
-                'https://bugs.busybox.net/show_bug.cgi?id=16018',
-                'https://lists.busybox.net/pipermail/busybox/2024-July/090806.html',
-                'https://lists.busybox.net/pipermail/busybox/2024-July/090814.html',
-                'https://www.busybox.net',
-                'https://www.busybox.net/downloads/',
-                'https://www.cve.org/CVERecord?id=CVE-2025-46394',
-                'https://www.openwall.com/lists/oss-security/2025/04/23/1'
-              ],
-              'severity':   'LOW',
-              'suppressed': false,
-              'title':      'In tar in BusyBox through 1.37.0, a TAR archive can have filenames hid ...'
-            },
-            {
-              'cve':  'CVE-2024-58251',
-              'cwes': [
-                'CWE-150'
-              ],
-              'description':   'In netstat in BusyBox through 1.37.0, local users can launch of network application with an argv[0] containing an ANSI terminal escape sequence, leading to a denial of service (terminal locked up) when netstat is used by a victim.',
-              'diffID':        'sha256:c16773da82eb9ee95902632edb6d7c0eacdd4d7fbb0507a47e10fccd8b114aca',
-              'fixedVersions': [
-                '1.36.1-r31'
-              ],
-              'installedVersion': '1.36.1-r29',
-              'packageName':      'busybox-binsh',
-              'purl':             'pkg:apk/alpine/busybox-binsh@1.36.1-r29?arch=s390x&distro=3.20.5',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2025/04/23/6',
-                'https://bugs.busybox.net/show_bug.cgi?id=15922',
-                'https://www.busybox.net',
-                'https://www.busybox.net/downloads/',
-                'https://www.cve.org/CVERecord?id=CVE-2024-58251'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'In netstat in BusyBox through 1.37.0, local users can launch of networ ...'
-            },
-            {
-              'cve':  'CVE-2025-46394',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '3.3',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-451'
-              ],
-              'description':   'In tar in BusyBox through 1.37.0, a TAR archive can have filenames hidden from a listing through the use of terminal escape sequences.',
-              'diffID':        'sha256:c16773da82eb9ee95902632edb6d7c0eacdd4d7fbb0507a47e10fccd8b114aca',
-              'fixedVersions': [
-                '1.36.1-r31'
-              ],
-              'installedVersion': '1.36.1-r29',
-              'packageName':      'busybox-binsh',
-              'purl':             'pkg:apk/alpine/busybox-binsh@1.36.1-r29?arch=s390x&distro=3.20.5',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2025/04/23/5',
-                'http://www.openwall.com/lists/oss-security/2025/04/24/3',
-                'https://bugs.busybox.net/show_bug.cgi?id=16018',
-                'https://lists.busybox.net/pipermail/busybox/2024-July/090806.html',
-                'https://lists.busybox.net/pipermail/busybox/2024-July/090814.html',
-                'https://www.busybox.net',
-                'https://www.busybox.net/downloads/',
-                'https://www.cve.org/CVERecord?id=CVE-2025-46394',
-                'https://www.openwall.com/lists/oss-security/2025/04/23/1'
-              ],
-              'severity':   'LOW',
-              'suppressed': false,
-              'title':      'In tar in BusyBox through 1.37.0, a TAR archive can have filenames hid ...'
-            },
-            {
-              'cve':  'CVE-2024-12797',
-              'cvss': {
-                'redhat': {
-                  'v3score':  '7.4',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-392'
-              ],
-              'description':   "Issue summary: Clients using RFC7250 Raw Public Keys (RPKs) to authenticate a\nserver may fail to notice that the server was not authenticated, because\nhandshakes don't abort as expected when the SSL_VERIFY_PEER verification mode\nis set.\n\nImpact summary: TLS and DTLS connections using raw public keys may be\nvulnerable to man-in-middle attacks when server authentication failure is not\ndetected by clients.\n\nRPKs are disabled by default in both TLS clients and TLS servers.  The issue\nonly arises when TLS clients explicitly enable RPK use by the server, and the\nserver, likewise, enables sending of an RPK instead of an X.509 certificate\nchain.  The affected clients are those that then rely on the handshake to\nfail when the server's RPK fails to match one of the expected public keys,\nby setting the verification mode to SSL_VERIFY_PEER.\n\nClients that enable server-side raw public keys can still find out that raw\npublic key verification failed by calling SSL_get_verify_result(), and those\nthat do, and take appropriate action, are not affected.  This issue was\nintroduced in the initial implementation of RPK support in OpenSSL 3.2.\n\nThe FIPS modules in 3.4, 3.3, 3.2, 3.1 and 3.0 are not affected by this issue.",
-              'diffID':        'sha256:c16773da82eb9ee95902632edb6d7c0eacdd4d7fbb0507a47e10fccd8b114aca',
-              'fixedVersions': [
-                '3.3.3-r0'
-              ],
-              'installedVersion': '3.3.2-r1',
-              'packageName':      'libcrypto3',
-              'purl':             'pkg:apk/alpine/libcrypto3@3.3.2-r1?arch=s390x&distro=3.20.5',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2025/02/11/3',
-                'http://www.openwall.com/lists/oss-security/2025/02/11/4',
-                'https://access.redhat.com/errata/RHSA-2025:1330',
-                'https://access.redhat.com/security/cve/CVE-2024-12797',
-                'https://bugzilla.redhat.com/2342757',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2342757',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-12797',
-                'https://errata.almalinux.org/9/ALSA-2025-1330.html',
-                'https://errata.rockylinux.org/RLSA-2025:1330',
-                'https://github.com/openssl/openssl/commit/738d4f9fdeaad57660dcba50a619fafced3fd5e9',
-                'https://github.com/openssl/openssl/commit/798779d43494549b611233f92652f0da5328fbe7',
-                'https://github.com/openssl/openssl/commit/87ebd203feffcf92ad5889df92f90bb0ee10a699',
-                'https://github.com/pyca/cryptography',
-                'https://github.com/pyca/cryptography/security/advisories/GHSA-79v4-65xg-pq4g',
-                'https://linux.oracle.com/cve/CVE-2024-12797.html',
-                'https://linux.oracle.com/errata/ELSA-2025-1330.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2024-12797',
-                'https://openssl-library.org/news/secadv/20250211.txt',
-                'https://security.netapp.com/advisory/ntap-20250214-0001/',
-                'https://ubuntu.com/security/notices/USN-7264-1',
-                'https://www.cve.org/CVERecord?id=CVE-2024-12797'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      "openssl: RFC7250 handshakes with unauthenticated servers don't abort as expected"
-            },
-            {
-              'cve':  'CVE-2024-13176',
-              'cvss': {
-                'redhat': {
-                  'v3score':  '4.7',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-385'
-              ],
-              'description':   'Issue summary: A timing side-channel which could potentially allow recovering\nthe private key exists in the ECDSA signature computation.\n\nImpact summary: A timing side-channel in ECDSA signature computations\ncould allow recovering the private key by an attacker. However, measuring\nthe timing would require either local access to the signing application or\na very fast network connection with low latency.\n\nThere is a timing signal of around 300 nanoseconds when the top word of\nthe inverted ECDSA nonce value is zero. This can happen with significant\nprobability only for some of the supported elliptic curves. In particular\nthe NIST P-521 curve is affected. To be able to measure this leak, the attacker\nprocess must either be located in the same physical computer or must\nhave a very fast network connection with low latency. For that reason\nthe severity of this vulnerability is Low.\n\nThe FIPS modules in 3.4, 3.3, 3.2, 3.1 and 3.0 are affected by this issue.',
-              'diffID':        'sha256:c16773da82eb9ee95902632edb6d7c0eacdd4d7fbb0507a47e10fccd8b114aca',
-              'fixedVersions': [
-                '3.3.2-r2'
-              ],
-              'installedVersion': '3.3.2-r1',
-              'packageName':      'libcrypto3',
-              'purl':             'pkg:apk/alpine/libcrypto3@3.3.2-r1?arch=s390x&distro=3.20.5',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2025/01/20/2',
-                'https://access.redhat.com/errata/RHSA-2025:16046',
-                'https://access.redhat.com/security/cve/CVE-2024-13176',
-                'https://bugzilla.redhat.com/2359885',
-                'https://bugzilla.redhat.com/2359888',
-                'https://bugzilla.redhat.com/2359892',
-                'https://bugzilla.redhat.com/2359894',
-                'https://bugzilla.redhat.com/2359895',
-                'https://bugzilla.redhat.com/2359899',
-                'https://bugzilla.redhat.com/2359900',
-                'https://bugzilla.redhat.com/2359902',
-                'https://bugzilla.redhat.com/2359903',
-                'https://bugzilla.redhat.com/2359911',
-                'https://bugzilla.redhat.com/2359918',
-                'https://bugzilla.redhat.com/2359920',
-                'https://bugzilla.redhat.com/2359924',
-                'https://bugzilla.redhat.com/2359928',
-                'https://bugzilla.redhat.com/2359930',
-                'https://bugzilla.redhat.com/2359932',
-                'https://bugzilla.redhat.com/2359934',
-                'https://bugzilla.redhat.com/2359938',
-                'https://bugzilla.redhat.com/2359940',
-                'https://bugzilla.redhat.com/2359943',
-                'https://bugzilla.redhat.com/2359944',
-                'https://bugzilla.redhat.com/2359945',
-                'https://bugzilla.redhat.com/2359947',
-                'https://bugzilla.redhat.com/2359950',
-                'https://bugzilla.redhat.com/2359963',
-                'https://bugzilla.redhat.com/2359964',
-                'https://bugzilla.redhat.com/2359972',
-                'https://bugzilla.redhat.com/2370920',
-                'https://bugzilla.redhat.com/2380264',
-                'https://bugzilla.redhat.com/2380273',
-                'https://bugzilla.redhat.com/2380274',
-                'https://bugzilla.redhat.com/2380278',
-                'https://bugzilla.redhat.com/2380280',
-                'https://bugzilla.redhat.com/2380283',
-                'https://bugzilla.redhat.com/2380284',
-                'https://bugzilla.redhat.com/2380290',
-                'https://bugzilla.redhat.com/2380291',
-                'https://bugzilla.redhat.com/2380295',
-                'https://bugzilla.redhat.com/2380298',
-                'https://bugzilla.redhat.com/2380306',
-                'https://bugzilla.redhat.com/2380308',
-                'https://bugzilla.redhat.com/2380309',
-                'https://bugzilla.redhat.com/2380310',
-                'https://bugzilla.redhat.com/2380312',
-                'https://bugzilla.redhat.com/2380313',
-                'https://bugzilla.redhat.com/2380320',
-                'https://bugzilla.redhat.com/2380321',
-                'https://bugzilla.redhat.com/2380322',
-                'https://bugzilla.redhat.com/2380326',
-                'https://bugzilla.redhat.com/2380327',
-                'https://bugzilla.redhat.com/2380334',
-                'https://bugzilla.redhat.com/2380335',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2338999',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359885',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359888',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359892',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359894',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359895',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359899',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359900',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359902',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359903',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359911',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359918',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359920',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359924',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359928',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359930',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359932',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359934',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359938',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359940',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359943',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359944',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359945',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359947',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359950',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359963',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359964',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359972',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2370920',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380264',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380273',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380274',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380278',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380280',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380283',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380284',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380290',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380291',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380295',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380298',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380306',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380308',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380309',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380310',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380312',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380313',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380320',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380321',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380322',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380326',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380327',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380334',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380335',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-13176',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21574',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21575',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21577',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21579',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21580',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21581',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21584',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21585',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21588',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30681',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30682',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30683',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30684',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30685',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30687',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30688',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30689',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30693',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30695',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30696',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30699',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30703',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30704',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30705',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30715',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30721',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30722',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50077',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50078',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50079',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50080',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50081',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50082',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50083',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50084',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50085',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50086',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50087',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50088',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50091',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50092',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50093',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50094',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50096',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50097',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50098',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50099',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50100',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50101',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50102',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50104',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-5399',
-                'https://errata.almalinux.org/9/ALSA-2025-16046.html',
-                'https://errata.rockylinux.org/RLSA-2025:15699',
-                'https://github.com/openssl/openssl/commit/07272b05b04836a762b4baa874958af51d513844',
-                'https://github.com/openssl/openssl/commit/2af62e74fb59bc469506bc37eb2990ea408d9467',
-                'https://github.com/openssl/openssl/commit/392dcb336405a0c94486aa6655057f59fd3a0902',
-                'https://github.com/openssl/openssl/commit/4b1cb94a734a7d4ec363ac0a215a25c181e11f65',
-                'https://github.com/openssl/openssl/commit/77c608f4c8857e63e98e66444e2e761c9627916f',
-                'https://github.openssl.org/openssl/extended-releases/commit/0d5fd1ab987f7571e2c955d8d8b638fc0fb54ded',
-                'https://github.openssl.org/openssl/extended-releases/commit/a2639000db19878d5d89586ae7b725080592ae86',
-                'https://linux.oracle.com/cve/CVE-2024-13176.html',
-                'https://linux.oracle.com/errata/ELSA-2025-16046.html',
-                'https://lists.debian.org/debian-lts-announce/2025/05/msg00028.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2024-13176',
-                'https://openssl-library.org/news/secadv/20250120.txt',
-                'https://security.netapp.com/advisory/ntap-20250124-0005/',
-                'https://security.netapp.com/advisory/ntap-20250418-0010/',
-                'https://security.netapp.com/advisory/ntap-20250502-0006/',
-                'https://ubuntu.com/security/notices/USN-7264-1',
-                'https://ubuntu.com/security/notices/USN-7278-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2024-13176',
-                'https://www.oracle.com/security-alerts/cpuapr2025.html#AppendixMSQL'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: Timing side-channel in ECDSA signature computation'
-            },
-            {
-              'cve':  'CVE-2025-9230',
-              'cvss': {
-                'redhat': {
-                  'v3score':  '5.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L'
-                }
-              },
-              'cwes': [
-                'CWE-125',
-                'CWE-787'
-              ],
-              'description':   'Issue summary: An application trying to decrypt CMS messages encrypted using\npassword based encryption can trigger an out-of-bounds read and write.\n\nImpact summary: This out-of-bounds read may trigger a crash which leads to\nDenial of Service for an application. The out-of-bounds write can cause\na memory corruption which can have various consequences including\na Denial of Service or Execution of attacker-supplied code.\n\nAlthough the consequences of a successful exploit of this vulnerability\ncould be severe, the probability that the attacker would be able to\nperform it is low. Besides, password based (PWRI) encryption support in CMS\nmessages is very rarely used. For that reason the issue was assessed as\nModerate severity according to our Security Policy.\n\nThe FIPS modules in 3.5, 3.4, 3.3, 3.2, 3.1 and 3.0 are not affected by this\nissue, as the CMS implementation is outside the OpenSSL FIPS module\nboundary.',
-              'diffID':        'sha256:c16773da82eb9ee95902632edb6d7c0eacdd4d7fbb0507a47e10fccd8b114aca',
-              'fixedVersions': [
-                '3.3.5-r0'
-              ],
-              'installedVersion': '3.3.2-r1',
-              'packageName':      'libcrypto3',
-              'purl':             'pkg:apk/alpine/libcrypto3@3.3.2-r1?arch=s390x&distro=3.20.5',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2025/09/30/5',
-                'https://access.redhat.com/errata/RHSA-2025:21255',
-                'https://access.redhat.com/security/cve/CVE-2025-9230',
-                'https://bugzilla.redhat.com/2396054',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2396054',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-9230',
-                'https://errata.almalinux.org/9/ALSA-2025-21255.html',
-                'https://errata.rockylinux.org/RLSA-2025:21255',
-                'https://github.com/openssl/openssl/commit/5965ea5dd6960f36d8b7f74f8eac67a8eb8f2b45',
-                'https://github.com/openssl/openssl/commit/9e91358f365dee6c446dcdcdb01c04d2743fd280',
-                'https://github.com/openssl/openssl/commit/a79c4ce559c6a3a8fd4109e9f33c1185d5bf2def',
-                'https://github.com/openssl/openssl/commit/b5282d677551afda7d20e9c00e09561b547b2dfd',
-                'https://github.com/openssl/openssl/commit/bae259a211ada6315dc50900686daaaaaa55f482',
-                'https://github.openssl.org/openssl/extended-releases/commit/c2b96348bfa662f25f4fabf81958ae822063dae3',
-                'https://github.openssl.org/openssl/extended-releases/commit/dfbaf161d8dafc1132dd88cd48ad990ed9b4c8ba',
-                'https://linux.oracle.com/cve/CVE-2025-9230.html',
-                'https://linux.oracle.com/errata/ELSA-2026-0337.html',
-                'https://lists.debian.org/debian-lts-announce/2025/10/msg00001.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2025-9230',
-                'https://openssl-library.org/news/secadv/20250930.txt',
-                'https://ubuntu.com/security/notices/USN-7786-1',
-                'https://www.cve.org/CVERecord?id=CVE-2025-9230'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: Out-of-bounds read & write in RFC 3211 KEK Unwrap'
-            },
-            {
-              'cve':  'CVE-2025-9231',
-              'cvss': {
-                'redhat': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-385'
-              ],
-              'description':   'Issue summary: A timing side-channel which could potentially allow remote\nrecovery of the private key exists in the SM2 algorithm implementation on 64 bit\nARM platforms.\n\nImpact summary: A timing side-channel in SM2 signature computations on 64 bit\nARM platforms could allow recovering the private key by an attacker..\n\nWhile remote key recovery over a network was not attempted by the reporter,\ntiming measurements revealed a timing signal which may allow such an attack.\n\nOpenSSL does not directly support certificates with SM2 keys in TLS, and so\nthis CVE is not relevant in most TLS contexts.  However, given that it is\npossible to add support for such certificates via a custom provider, coupled\nwith the fact that in such a custom provider context the private key may be\nrecoverable via remote timing measurements, we consider this to be a Moderate\nseverity issue.\n\nThe FIPS modules in 3.5, 3.4, 3.3, 3.2, 3.1 and 3.0 are not affected by this\nissue, as SM2 is not an approved algorithm.',
-              'diffID':        'sha256:c16773da82eb9ee95902632edb6d7c0eacdd4d7fbb0507a47e10fccd8b114aca',
-              'fixedVersions': [
-                '3.3.5-r0'
-              ],
-              'installedVersion': '3.3.2-r1',
-              'packageName':      'libcrypto3',
-              'purl':             'pkg:apk/alpine/libcrypto3@3.3.2-r1?arch=s390x&distro=3.20.5',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2025/09/30/5',
-                'https://access.redhat.com/security/cve/CVE-2025-9231',
-                'https://github.com/openssl/openssl/commit/567f64386e43683888212226824b6a179885a0fe',
-                'https://github.com/openssl/openssl/commit/cba616c26ac8e7b37de5e77762e505ba5ca51698',
-                'https://github.com/openssl/openssl/commit/eed5adc9f969d77c94f213767acbb41ff923b6f4',
-                'https://github.com/openssl/openssl/commit/fc47a2ec078912b3e914fab5734535e76c4820c2',
-                'https://nvd.nist.gov/vuln/detail/CVE-2025-9231',
-                'https://openssl-library.org/news/secadv/20250930.txt',
-                'https://ubuntu.com/security/notices/USN-7786-1',
-                'https://www.cve.org/CVERecord?id=CVE-2025-9231'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: Timing side-channel in SM2 algorithm on 64 bit ARM'
-            },
-            {
-              'cve':  'CVE-2025-9232',
-              'cvss': {
-                'redhat': {
-                  'v3score':  '3.1',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L'
-                }
-              },
-              'cwes': [
-                'CWE-125'
-              ],
-              'description':   "Issue summary: An application using the OpenSSL HTTP client API functions may\ntrigger an out-of-bounds read if the 'no_proxy' environment variable is set and\nthe host portion of the authority component of the HTTP URL is an IPv6 address.\n\nImpact summary: An out-of-bounds read can trigger a crash which leads to\nDenial of Service for an application.\n\nThe OpenSSL HTTP client API functions can be used directly by applications\nbut they are also used by the OCSP client functions and CMP (Certificate\nManagement Protocol) client implementation in OpenSSL. However the URLs used\nby these implementations are unlikely to be controlled by an attacker.\n\nIn this vulnerable code the out of bounds read can only trigger a crash.\nFurthermore the vulnerability requires an attacker-controlled URL to be\npassed from an application to the OpenSSL function and the user has to have\na 'no_proxy' environment variable set. For the aforementioned reasons the\nissue was assessed as Low severity.\n\nThe vulnerable code was introduced in the following patch releases:\n3.0.16, 3.1.8, 3.2.4, 3.3.3, 3.4.0 and 3.5.0.\n\nThe FIPS modules in 3.5, 3.4, 3.3, 3.2, 3.1 and 3.0 are not affected by this\nissue, as the HTTP client implementation is outside the OpenSSL FIPS module\nboundary.",
-              'diffID':        'sha256:c16773da82eb9ee95902632edb6d7c0eacdd4d7fbb0507a47e10fccd8b114aca',
-              'fixedVersions': [
-                '3.3.5-r0'
-              ],
-              'installedVersion': '3.3.2-r1',
-              'packageName':      'libcrypto3',
-              'purl':             'pkg:apk/alpine/libcrypto3@3.3.2-r1?arch=s390x&distro=3.20.5',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2025/09/30/5',
-                'https://access.redhat.com/security/cve/CVE-2025-9232',
-                'https://github.com/openssl/openssl/commit/2b4ec20e47959170422922eaff25346d362dcb35',
-                'https://github.com/openssl/openssl/commit/654dc11d23468a74fc8ea4672b702dd3feb7be4b',
-                'https://github.com/openssl/openssl/commit/7cf21a30513c9e43c4bc3836c237cf086e194af3',
-                'https://github.com/openssl/openssl/commit/89e790ac431125a4849992858490bed6b225eadf',
-                'https://github.com/openssl/openssl/commit/bbf38c034cdabd0a13330abcc4855c866f53d2e0',
-                'https://nvd.nist.gov/vuln/detail/CVE-2025-9232',
-                'https://openssl-library.org/news/secadv/20250930.txt',
-                'https://ubuntu.com/security/notices/USN-7786-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2025-9232'
-              ],
-              'severity':   'LOW',
-              'suppressed': false,
-              'title':      'openssl: Out-of-bounds read in HTTP client no_proxy handling'
-            },
-            {
-              'cve':  'CVE-2024-12797',
-              'cvss': {
-                'redhat': {
-                  'v3score':  '7.4',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-392'
-              ],
-              'description':   "Issue summary: Clients using RFC7250 Raw Public Keys (RPKs) to authenticate a\nserver may fail to notice that the server was not authenticated, because\nhandshakes don't abort as expected when the SSL_VERIFY_PEER verification mode\nis set.\n\nImpact summary: TLS and DTLS connections using raw public keys may be\nvulnerable to man-in-middle attacks when server authentication failure is not\ndetected by clients.\n\nRPKs are disabled by default in both TLS clients and TLS servers.  The issue\nonly arises when TLS clients explicitly enable RPK use by the server, and the\nserver, likewise, enables sending of an RPK instead of an X.509 certificate\nchain.  The affected clients are those that then rely on the handshake to\nfail when the server's RPK fails to match one of the expected public keys,\nby setting the verification mode to SSL_VERIFY_PEER.\n\nClients that enable server-side raw public keys can still find out that raw\npublic key verification failed by calling SSL_get_verify_result(), and those\nthat do, and take appropriate action, are not affected.  This issue was\nintroduced in the initial implementation of RPK support in OpenSSL 3.2.\n\nThe FIPS modules in 3.4, 3.3, 3.2, 3.1 and 3.0 are not affected by this issue.",
-              'diffID':        'sha256:c16773da82eb9ee95902632edb6d7c0eacdd4d7fbb0507a47e10fccd8b114aca',
-              'fixedVersions': [
-                '3.3.3-r0'
-              ],
-              'installedVersion': '3.3.2-r1',
-              'packageName':      'libssl3',
-              'purl':             'pkg:apk/alpine/libssl3@3.3.2-r1?arch=s390x&distro=3.20.5',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2025/02/11/3',
-                'http://www.openwall.com/lists/oss-security/2025/02/11/4',
-                'https://access.redhat.com/errata/RHSA-2025:1330',
-                'https://access.redhat.com/security/cve/CVE-2024-12797',
-                'https://bugzilla.redhat.com/2342757',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2342757',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-12797',
-                'https://errata.almalinux.org/9/ALSA-2025-1330.html',
-                'https://errata.rockylinux.org/RLSA-2025:1330',
-                'https://github.com/openssl/openssl/commit/738d4f9fdeaad57660dcba50a619fafced3fd5e9',
-                'https://github.com/openssl/openssl/commit/798779d43494549b611233f92652f0da5328fbe7',
-                'https://github.com/openssl/openssl/commit/87ebd203feffcf92ad5889df92f90bb0ee10a699',
-                'https://github.com/pyca/cryptography',
-                'https://github.com/pyca/cryptography/security/advisories/GHSA-79v4-65xg-pq4g',
-                'https://linux.oracle.com/cve/CVE-2024-12797.html',
-                'https://linux.oracle.com/errata/ELSA-2025-1330.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2024-12797',
-                'https://openssl-library.org/news/secadv/20250211.txt',
-                'https://security.netapp.com/advisory/ntap-20250214-0001/',
-                'https://ubuntu.com/security/notices/USN-7264-1',
-                'https://www.cve.org/CVERecord?id=CVE-2024-12797'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      "openssl: RFC7250 handshakes with unauthenticated servers don't abort as expected"
-            },
-            {
-              'cve':  'CVE-2024-13176',
-              'cvss': {
-                'redhat': {
-                  'v3score':  '4.7',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-385'
-              ],
-              'description':   'Issue summary: A timing side-channel which could potentially allow recovering\nthe private key exists in the ECDSA signature computation.\n\nImpact summary: A timing side-channel in ECDSA signature computations\ncould allow recovering the private key by an attacker. However, measuring\nthe timing would require either local access to the signing application or\na very fast network connection with low latency.\n\nThere is a timing signal of around 300 nanoseconds when the top word of\nthe inverted ECDSA nonce value is zero. This can happen with significant\nprobability only for some of the supported elliptic curves. In particular\nthe NIST P-521 curve is affected. To be able to measure this leak, the attacker\nprocess must either be located in the same physical computer or must\nhave a very fast network connection with low latency. For that reason\nthe severity of this vulnerability is Low.\n\nThe FIPS modules in 3.4, 3.3, 3.2, 3.1 and 3.0 are affected by this issue.',
-              'diffID':        'sha256:c16773da82eb9ee95902632edb6d7c0eacdd4d7fbb0507a47e10fccd8b114aca',
-              'fixedVersions': [
-                '3.3.2-r2'
-              ],
-              'installedVersion': '3.3.2-r1',
-              'packageName':      'libssl3',
-              'purl':             'pkg:apk/alpine/libssl3@3.3.2-r1?arch=s390x&distro=3.20.5',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2025/01/20/2',
-                'https://access.redhat.com/errata/RHSA-2025:16046',
-                'https://access.redhat.com/security/cve/CVE-2024-13176',
-                'https://bugzilla.redhat.com/2359885',
-                'https://bugzilla.redhat.com/2359888',
-                'https://bugzilla.redhat.com/2359892',
-                'https://bugzilla.redhat.com/2359894',
-                'https://bugzilla.redhat.com/2359895',
-                'https://bugzilla.redhat.com/2359899',
-                'https://bugzilla.redhat.com/2359900',
-                'https://bugzilla.redhat.com/2359902',
-                'https://bugzilla.redhat.com/2359903',
-                'https://bugzilla.redhat.com/2359911',
-                'https://bugzilla.redhat.com/2359918',
-                'https://bugzilla.redhat.com/2359920',
-                'https://bugzilla.redhat.com/2359924',
-                'https://bugzilla.redhat.com/2359928',
-                'https://bugzilla.redhat.com/2359930',
-                'https://bugzilla.redhat.com/2359932',
-                'https://bugzilla.redhat.com/2359934',
-                'https://bugzilla.redhat.com/2359938',
-                'https://bugzilla.redhat.com/2359940',
-                'https://bugzilla.redhat.com/2359943',
-                'https://bugzilla.redhat.com/2359944',
-                'https://bugzilla.redhat.com/2359945',
-                'https://bugzilla.redhat.com/2359947',
-                'https://bugzilla.redhat.com/2359950',
-                'https://bugzilla.redhat.com/2359963',
-                'https://bugzilla.redhat.com/2359964',
-                'https://bugzilla.redhat.com/2359972',
-                'https://bugzilla.redhat.com/2370920',
-                'https://bugzilla.redhat.com/2380264',
-                'https://bugzilla.redhat.com/2380273',
-                'https://bugzilla.redhat.com/2380274',
-                'https://bugzilla.redhat.com/2380278',
-                'https://bugzilla.redhat.com/2380280',
-                'https://bugzilla.redhat.com/2380283',
-                'https://bugzilla.redhat.com/2380284',
-                'https://bugzilla.redhat.com/2380290',
-                'https://bugzilla.redhat.com/2380291',
-                'https://bugzilla.redhat.com/2380295',
-                'https://bugzilla.redhat.com/2380298',
-                'https://bugzilla.redhat.com/2380306',
-                'https://bugzilla.redhat.com/2380308',
-                'https://bugzilla.redhat.com/2380309',
-                'https://bugzilla.redhat.com/2380310',
-                'https://bugzilla.redhat.com/2380312',
-                'https://bugzilla.redhat.com/2380313',
-                'https://bugzilla.redhat.com/2380320',
-                'https://bugzilla.redhat.com/2380321',
-                'https://bugzilla.redhat.com/2380322',
-                'https://bugzilla.redhat.com/2380326',
-                'https://bugzilla.redhat.com/2380327',
-                'https://bugzilla.redhat.com/2380334',
-                'https://bugzilla.redhat.com/2380335',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2338999',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359885',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359888',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359892',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359894',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359895',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359899',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359900',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359902',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359903',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359911',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359918',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359920',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359924',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359928',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359930',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359932',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359934',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359938',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359940',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359943',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359944',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359945',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359947',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359950',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359963',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359964',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359972',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2370920',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380264',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380273',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380274',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380278',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380280',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380283',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380284',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380290',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380291',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380295',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380298',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380306',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380308',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380309',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380310',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380312',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380313',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380320',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380321',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380322',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380326',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380327',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380334',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380335',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-13176',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21574',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21575',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21577',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21579',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21580',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21581',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21584',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21585',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21588',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30681',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30682',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30683',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30684',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30685',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30687',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30688',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30689',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30693',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30695',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30696',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30699',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30703',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30704',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30705',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30715',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30721',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30722',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50077',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50078',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50079',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50080',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50081',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50082',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50083',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50084',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50085',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50086',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50087',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50088',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50091',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50092',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50093',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50094',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50096',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50097',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50098',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50099',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50100',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50101',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50102',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50104',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-5399',
-                'https://errata.almalinux.org/9/ALSA-2025-16046.html',
-                'https://errata.rockylinux.org/RLSA-2025:15699',
-                'https://github.com/openssl/openssl/commit/07272b05b04836a762b4baa874958af51d513844',
-                'https://github.com/openssl/openssl/commit/2af62e74fb59bc469506bc37eb2990ea408d9467',
-                'https://github.com/openssl/openssl/commit/392dcb336405a0c94486aa6655057f59fd3a0902',
-                'https://github.com/openssl/openssl/commit/4b1cb94a734a7d4ec363ac0a215a25c181e11f65',
-                'https://github.com/openssl/openssl/commit/77c608f4c8857e63e98e66444e2e761c9627916f',
-                'https://github.openssl.org/openssl/extended-releases/commit/0d5fd1ab987f7571e2c955d8d8b638fc0fb54ded',
-                'https://github.openssl.org/openssl/extended-releases/commit/a2639000db19878d5d89586ae7b725080592ae86',
-                'https://linux.oracle.com/cve/CVE-2024-13176.html',
-                'https://linux.oracle.com/errata/ELSA-2025-16046.html',
-                'https://lists.debian.org/debian-lts-announce/2025/05/msg00028.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2024-13176',
-                'https://openssl-library.org/news/secadv/20250120.txt',
-                'https://security.netapp.com/advisory/ntap-20250124-0005/',
-                'https://security.netapp.com/advisory/ntap-20250418-0010/',
-                'https://security.netapp.com/advisory/ntap-20250502-0006/',
-                'https://ubuntu.com/security/notices/USN-7264-1',
-                'https://ubuntu.com/security/notices/USN-7278-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2024-13176',
-                'https://www.oracle.com/security-alerts/cpuapr2025.html#AppendixMSQL'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: Timing side-channel in ECDSA signature computation'
-            },
-            {
-              'cve':  'CVE-2025-9230',
-              'cvss': {
-                'redhat': {
-                  'v3score':  '5.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L'
-                }
-              },
-              'cwes': [
-                'CWE-125',
-                'CWE-787'
-              ],
-              'description':   'Issue summary: An application trying to decrypt CMS messages encrypted using\npassword based encryption can trigger an out-of-bounds read and write.\n\nImpact summary: This out-of-bounds read may trigger a crash which leads to\nDenial of Service for an application. The out-of-bounds write can cause\na memory corruption which can have various consequences including\na Denial of Service or Execution of attacker-supplied code.\n\nAlthough the consequences of a successful exploit of this vulnerability\ncould be severe, the probability that the attacker would be able to\nperform it is low. Besides, password based (PWRI) encryption support in CMS\nmessages is very rarely used. For that reason the issue was assessed as\nModerate severity according to our Security Policy.\n\nThe FIPS modules in 3.5, 3.4, 3.3, 3.2, 3.1 and 3.0 are not affected by this\nissue, as the CMS implementation is outside the OpenSSL FIPS module\nboundary.',
-              'diffID':        'sha256:c16773da82eb9ee95902632edb6d7c0eacdd4d7fbb0507a47e10fccd8b114aca',
-              'fixedVersions': [
-                '3.3.5-r0'
-              ],
-              'installedVersion': '3.3.2-r1',
-              'packageName':      'libssl3',
-              'purl':             'pkg:apk/alpine/libssl3@3.3.2-r1?arch=s390x&distro=3.20.5',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2025/09/30/5',
-                'https://access.redhat.com/errata/RHSA-2025:21255',
-                'https://access.redhat.com/security/cve/CVE-2025-9230',
-                'https://bugzilla.redhat.com/2396054',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2396054',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-9230',
-                'https://errata.almalinux.org/9/ALSA-2025-21255.html',
-                'https://errata.rockylinux.org/RLSA-2025:21255',
-                'https://github.com/openssl/openssl/commit/5965ea5dd6960f36d8b7f74f8eac67a8eb8f2b45',
-                'https://github.com/openssl/openssl/commit/9e91358f365dee6c446dcdcdb01c04d2743fd280',
-                'https://github.com/openssl/openssl/commit/a79c4ce559c6a3a8fd4109e9f33c1185d5bf2def',
-                'https://github.com/openssl/openssl/commit/b5282d677551afda7d20e9c00e09561b547b2dfd',
-                'https://github.com/openssl/openssl/commit/bae259a211ada6315dc50900686daaaaaa55f482',
-                'https://github.openssl.org/openssl/extended-releases/commit/c2b96348bfa662f25f4fabf81958ae822063dae3',
-                'https://github.openssl.org/openssl/extended-releases/commit/dfbaf161d8dafc1132dd88cd48ad990ed9b4c8ba',
-                'https://linux.oracle.com/cve/CVE-2025-9230.html',
-                'https://linux.oracle.com/errata/ELSA-2026-0337.html',
-                'https://lists.debian.org/debian-lts-announce/2025/10/msg00001.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2025-9230',
-                'https://openssl-library.org/news/secadv/20250930.txt',
-                'https://ubuntu.com/security/notices/USN-7786-1',
-                'https://www.cve.org/CVERecord?id=CVE-2025-9230'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: Out-of-bounds read & write in RFC 3211 KEK Unwrap'
-            },
-            {
-              'cve':  'CVE-2025-9231',
-              'cvss': {
-                'redhat': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-385'
-              ],
-              'description':   'Issue summary: A timing side-channel which could potentially allow remote\nrecovery of the private key exists in the SM2 algorithm implementation on 64 bit\nARM platforms.\n\nImpact summary: A timing side-channel in SM2 signature computations on 64 bit\nARM platforms could allow recovering the private key by an attacker..\n\nWhile remote key recovery over a network was not attempted by the reporter,\ntiming measurements revealed a timing signal which may allow such an attack.\n\nOpenSSL does not directly support certificates with SM2 keys in TLS, and so\nthis CVE is not relevant in most TLS contexts.  However, given that it is\npossible to add support for such certificates via a custom provider, coupled\nwith the fact that in such a custom provider context the private key may be\nrecoverable via remote timing measurements, we consider this to be a Moderate\nseverity issue.\n\nThe FIPS modules in 3.5, 3.4, 3.3, 3.2, 3.1 and 3.0 are not affected by this\nissue, as SM2 is not an approved algorithm.',
-              'diffID':        'sha256:c16773da82eb9ee95902632edb6d7c0eacdd4d7fbb0507a47e10fccd8b114aca',
-              'fixedVersions': [
-                '3.3.5-r0'
-              ],
-              'installedVersion': '3.3.2-r1',
-              'packageName':      'libssl3',
-              'purl':             'pkg:apk/alpine/libssl3@3.3.2-r1?arch=s390x&distro=3.20.5',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2025/09/30/5',
-                'https://access.redhat.com/security/cve/CVE-2025-9231',
-                'https://github.com/openssl/openssl/commit/567f64386e43683888212226824b6a179885a0fe',
-                'https://github.com/openssl/openssl/commit/cba616c26ac8e7b37de5e77762e505ba5ca51698',
-                'https://github.com/openssl/openssl/commit/eed5adc9f969d77c94f213767acbb41ff923b6f4',
-                'https://github.com/openssl/openssl/commit/fc47a2ec078912b3e914fab5734535e76c4820c2',
-                'https://nvd.nist.gov/vuln/detail/CVE-2025-9231',
-                'https://openssl-library.org/news/secadv/20250930.txt',
-                'https://ubuntu.com/security/notices/USN-7786-1',
-                'https://www.cve.org/CVERecord?id=CVE-2025-9231'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: Timing side-channel in SM2 algorithm on 64 bit ARM'
-            },
-            {
-              'cve':  'CVE-2025-9232',
-              'cvss': {
-                'redhat': {
-                  'v3score':  '3.1',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L'
-                }
-              },
-              'cwes': [
-                'CWE-125'
-              ],
-              'description':   "Issue summary: An application using the OpenSSL HTTP client API functions may\ntrigger an out-of-bounds read if the 'no_proxy' environment variable is set and\nthe host portion of the authority component of the HTTP URL is an IPv6 address.\n\nImpact summary: An out-of-bounds read can trigger a crash which leads to\nDenial of Service for an application.\n\nThe OpenSSL HTTP client API functions can be used directly by applications\nbut they are also used by the OCSP client functions and CMP (Certificate\nManagement Protocol) client implementation in OpenSSL. However the URLs used\nby these implementations are unlikely to be controlled by an attacker.\n\nIn this vulnerable code the out of bounds read can only trigger a crash.\nFurthermore the vulnerability requires an attacker-controlled URL to be\npassed from an application to the OpenSSL function and the user has to have\na 'no_proxy' environment variable set. For the aforementioned reasons the\nissue was assessed as Low severity.\n\nThe vulnerable code was introduced in the following patch releases:\n3.0.16, 3.1.8, 3.2.4, 3.3.3, 3.4.0 and 3.5.0.\n\nThe FIPS modules in 3.5, 3.4, 3.3, 3.2, 3.1 and 3.0 are not affected by this\nissue, as the HTTP client implementation is outside the OpenSSL FIPS module\nboundary.",
-              'diffID':        'sha256:c16773da82eb9ee95902632edb6d7c0eacdd4d7fbb0507a47e10fccd8b114aca',
-              'fixedVersions': [
-                '3.3.5-r0'
-              ],
-              'installedVersion': '3.3.2-r1',
-              'packageName':      'libssl3',
-              'purl':             'pkg:apk/alpine/libssl3@3.3.2-r1?arch=s390x&distro=3.20.5',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2025/09/30/5',
-                'https://access.redhat.com/security/cve/CVE-2025-9232',
-                'https://github.com/openssl/openssl/commit/2b4ec20e47959170422922eaff25346d362dcb35',
-                'https://github.com/openssl/openssl/commit/654dc11d23468a74fc8ea4672b702dd3feb7be4b',
-                'https://github.com/openssl/openssl/commit/7cf21a30513c9e43c4bc3836c237cf086e194af3',
-                'https://github.com/openssl/openssl/commit/89e790ac431125a4849992858490bed6b225eadf',
-                'https://github.com/openssl/openssl/commit/bbf38c034cdabd0a13330abcc4855c866f53d2e0',
-                'https://nvd.nist.gov/vuln/detail/CVE-2025-9232',
-                'https://openssl-library.org/news/secadv/20250930.txt',
-                'https://ubuntu.com/security/notices/USN-7786-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2025-9232'
-              ],
-              'severity':   'LOW',
-              'suppressed': false,
-              'title':      'openssl: Out-of-bounds read in HTTP client no_proxy handling'
-            },
-            {
-              'cve':  'CVE-2025-26519',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-787'
-              ],
-              'description':   'musl libc 0.9.13 through 1.2.5 before 1.2.6 has an out-of-bounds write vulnerability when an attacker can trigger iconv conversion of untrusted EUC-KR text to UTF-8.',
-              'diffID':        'sha256:c16773da82eb9ee95902632edb6d7c0eacdd4d7fbb0507a47e10fccd8b114aca',
-              'fixedVersions': [
-                '1.2.5-r1'
-              ],
-              'installedVersion': '1.2.5-r0',
-              'packageName':      'musl',
-              'purl':             'pkg:apk/alpine/musl@1.2.5-r0?arch=s390x&distro=3.20.5',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2025/02/13/2',
-                'http://www.openwall.com/lists/oss-security/2025/02/13/3',
-                'http://www.openwall.com/lists/oss-security/2025/02/13/4',
-                'http://www.openwall.com/lists/oss-security/2025/02/13/5',
-                'http://www.openwall.com/lists/oss-security/2025/02/14/5',
-                'http://www.openwall.com/lists/oss-security/2025/02/14/6',
-                'https://git.musl-libc.org/cgit/musl/commit/?id=c47ad25ea3b484e10326f933e927c0bc8cded3da',
-                'https://git.musl-libc.org/cgit/musl/commit/?id=e5adcd97b5196e29991b524237381a0202a60659',
-                'https://www.openwall.com/lists/oss-security/2025/02/13/2'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'musl libc 0.9.13 through 1.2.5 before 1.2.6 has an out-of-bounds write ...'
-            },
-            {
-              'cve':  'CVE-2025-26519',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-787'
-              ],
-              'description':   'musl libc 0.9.13 through 1.2.5 before 1.2.6 has an out-of-bounds write vulnerability when an attacker can trigger iconv conversion of untrusted EUC-KR text to UTF-8.',
-              'diffID':        'sha256:c16773da82eb9ee95902632edb6d7c0eacdd4d7fbb0507a47e10fccd8b114aca',
-              'fixedVersions': [
-                '1.2.5-r1'
-              ],
-              'installedVersion': '1.2.5-r0',
-              'packageName':      'musl-utils',
-              'purl':             'pkg:apk/alpine/musl-utils@1.2.5-r0?arch=s390x&distro=3.20.5',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2025/02/13/2',
-                'http://www.openwall.com/lists/oss-security/2025/02/13/3',
-                'http://www.openwall.com/lists/oss-security/2025/02/13/4',
-                'http://www.openwall.com/lists/oss-security/2025/02/13/5',
-                'http://www.openwall.com/lists/oss-security/2025/02/14/5',
-                'http://www.openwall.com/lists/oss-security/2025/02/14/6',
-                'https://git.musl-libc.org/cgit/musl/commit/?id=c47ad25ea3b484e10326f933e927c0bc8cded3da',
-                'https://git.musl-libc.org/cgit/musl/commit/?id=e5adcd97b5196e29991b524237381a0202a60659',
-                'https://www.openwall.com/lists/oss-security/2025/02/13/2'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'musl libc 0.9.13 through 1.2.5 before 1.2.6 has an out-of-bounds write ...'
-            },
-            {
-              'cve':  'CVE-2024-58251',
-              'cwes': [
-                'CWE-150'
-              ],
-              'description':   'In netstat in BusyBox through 1.37.0, local users can launch of network application with an argv[0] containing an ANSI terminal escape sequence, leading to a denial of service (terminal locked up) when netstat is used by a victim.',
-              'diffID':        'sha256:c16773da82eb9ee95902632edb6d7c0eacdd4d7fbb0507a47e10fccd8b114aca',
-              'fixedVersions': [
-                '1.36.1-r31'
-              ],
-              'installedVersion': '1.36.1-r29',
-              'packageName':      'ssl_client',
-              'purl':             'pkg:apk/alpine/ssl_client@1.36.1-r29?arch=s390x&distro=3.20.5',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2025/04/23/6',
-                'https://bugs.busybox.net/show_bug.cgi?id=15922',
-                'https://www.busybox.net',
-                'https://www.busybox.net/downloads/',
-                'https://www.cve.org/CVERecord?id=CVE-2024-58251'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'In netstat in BusyBox through 1.37.0, local users can launch of networ ...'
-            },
-            {
-              'cve':  'CVE-2025-46394',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '3.3',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-451'
-              ],
-              'description':   'In tar in BusyBox through 1.37.0, a TAR archive can have filenames hidden from a listing through the use of terminal escape sequences.',
-              'diffID':        'sha256:c16773da82eb9ee95902632edb6d7c0eacdd4d7fbb0507a47e10fccd8b114aca',
-              'fixedVersions': [
-                '1.36.1-r31'
-              ],
-              'installedVersion': '1.36.1-r29',
-              'packageName':      'ssl_client',
-              'purl':             'pkg:apk/alpine/ssl_client@1.36.1-r29?arch=s390x&distro=3.20.5',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2025/04/23/5',
-                'http://www.openwall.com/lists/oss-security/2025/04/24/3',
-                'https://bugs.busybox.net/show_bug.cgi?id=16018',
-                'https://lists.busybox.net/pipermail/busybox/2024-July/090806.html',
-                'https://lists.busybox.net/pipermail/busybox/2024-July/090814.html',
-                'https://www.busybox.net',
-                'https://www.busybox.net/downloads/',
-                'https://www.cve.org/CVERecord?id=CVE-2025-46394',
-                'https://www.openwall.com/lists/oss-security/2025/04/23/1'
-              ],
-              'severity':   'LOW',
-              'suppressed': false,
-              'title':      'In tar in BusyBox through 1.37.0, a TAR archive can have filenames hid ...'
-            }
-          ]
-        }
-      ],
-      'summary': {
-        'critical':   0,
-        'high':       4,
-        'low':        5,
-        'medium':     9,
-        'suppressed': 0,
-        'unknown':    0
-      }
-    }
-  },
-  {
-    'id':    'default/35d348fcce51dc23c1e40f89108a62c21a1c0e2b4d2f91f4ae518738251d8991',
-    'type':  'storage.sbomscanner.kubewarden.io.vulnerabilityreport',
-    'links': {
-      'patch':  'https://localhost:8005/v1/storage.sbomscanner.kubewarden.io.vulnerabilityreports/default/35d348fcce51dc23c1e40f89108a62c21a1c0e2b4d2f91f4ae518738251d8991',
-      'remove': 'https://localhost:8005/v1/storage.sbomscanner.kubewarden.io.vulnerabilityreports/default/35d348fcce51dc23c1e40f89108a62c21a1c0e2b4d2f91f4ae518738251d8991',
-      'self':   'https://localhost:8005/v1/storage.sbomscanner.kubewarden.io.vulnerabilityreports/default/35d348fcce51dc23c1e40f89108a62c21a1c0e2b4d2f91f4ae518738251d8991',
-      'update': 'https://localhost:8005/v1/storage.sbomscanner.kubewarden.io.vulnerabilityreports/default/35d348fcce51dc23c1e40f89108a62c21a1c0e2b4d2f91f4ae518738251d8991',
-      'view':   'https://localhost:8005/apis/storage.sbomscanner.kubewarden.io/v1alpha1/namespaces/default/vulnerabilityreports/35d348fcce51dc23c1e40f89108a62c21a1c0e2b4d2f91f4ae518738251d8991'
-    },
-    'apiVersion':    'storage.sbomscanner.kubewarden.io/v1alpha1',
-    'imageMetadata': {
-      'digest':      'sha256:024cea07734079c8314b158b62d95aee704fad739f90cc9a591219a07df45241',
-      'platform':    'linux/ppc64le',
-      'registry':    'lsong-demo1',
-      'registryURI': 'registry-1.docker.io',
-      'repository':  'library/alpine',
-      'tag':         '3.11.12'
-    },
-    'kind':     'VulnerabilityReport',
-    'metadata': {
-      'creationTimestamp': '2026-01-14T18:51:16Z',
-      'fields':            [
-        '35d348fcce51dc23c1e40f89108a62c21a1c0e2b4d2f91f4ae518738251d8991',
-        'registry-1.docker.io/library/alpine:3.11.12',
-        'linux/ppc64le',
-        '21 (0 suppressed)'
-      ],
-      'labels': {
-        'app.kubernetes.io/managed-by':          'sbomscanner',
-        'app.kubernetes.io/part-of':             'sbomscanner',
-        'sbomscanner.kubewarden.io/scanjob-uid': '445c600a-c4b6-40b3-bd71-f2d2140a37d5'
-      },
-      'name':            '35d348fcce51dc23c1e40f89108a62c21a1c0e2b4d2f91f4ae518738251d8991',
-      'namespace':       'default',
-      'ownerReferences': [
-        {
-          'apiVersion':         'storage.sbomscanner.kubewarden.io/v1alpha1',
-          'blockOwnerDeletion': true,
-          'controller':         true,
-          'kind':               'SBOM',
-          'name':               '35d348fcce51dc23c1e40f89108a62c21a1c0e2b4d2f91f4ae518738251d8991',
-          'uid':                '92efd074-996e-423b-bb7f-f0260fe5dfe2'
-        }
-      ],
-      'relationships': [
-        {
-          'fromId':   'default/35d348fcce51dc23c1e40f89108a62c21a1c0e2b4d2f91f4ae518738251d8991',
-          'fromType': 'storage.sbomscanner.kubewarden.io.sbom',
-          'rel':      'owner',
-          'state':    'active',
-          'message':  'Resource is current'
-        }
-      ],
-      'resourceVersion': '1',
-      'state':           {
-        'error':         false,
-        'message':       'Resource is current',
-        'name':          'active',
-        'transitioning': false
-      },
-      'uid': '15965d0f-571a-476d-a502-8ff748fb1fa9'
-    },
-    'report': {
-      'results': [
-        {
-          'class':           'os-pkgs',
-          'target':          '/var/run/worker/trivy.sbom.2889863435.json (alpine 3.11.12)',
-          'type':            'alpine',
-          'vulnerabilities': [
-            {
-              'cve':  'CVE-2021-42378',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the getvar_i function",
-              'diffID':        'sha256:f80557a3ec8197dec916152934ec3c842fc265aeb27f199c37e2e51e52dcdeb1',
-              'fixedVersions': [
-                '1.31.1-r11'
-              ],
-              'installedVersion': '1.31.1-r10',
-              'packageName':      'busybox',
-              'purl':             'pkg:apk/alpine/busybox@1.31.1-r10?arch=ppc64le&distro=3.11.12',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42378',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42378',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42378'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the getvar_i()'
-            },
-            {
-              'cve':  'CVE-2021-42379',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the next_input_file function",
-              'diffID':        'sha256:f80557a3ec8197dec916152934ec3c842fc265aeb27f199c37e2e51e52dcdeb1',
-              'fixedVersions': [
-                '1.31.1-r11'
-              ],
-              'installedVersion': '1.31.1-r10',
-              'packageName':      'busybox',
-              'purl':             'pkg:apk/alpine/busybox@1.31.1-r10?arch=ppc64le&distro=3.11.12',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42379',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42379',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42379'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the next_input_file()'
-            },
-            {
-              'cve':  'CVE-2021-42380',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the clrvar function",
-              'diffID':        'sha256:f80557a3ec8197dec916152934ec3c842fc265aeb27f199c37e2e51e52dcdeb1',
-              'fixedVersions': [
-                '1.31.1-r11'
-              ],
-              'installedVersion': '1.31.1-r10',
-              'packageName':      'busybox',
-              'purl':             'pkg:apk/alpine/busybox@1.31.1-r10?arch=ppc64le&distro=3.11.12',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42380',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42380',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42380'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the clrvar()'
-            },
-            {
-              'cve':  'CVE-2021-42381',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the hash_init function",
-              'diffID':        'sha256:f80557a3ec8197dec916152934ec3c842fc265aeb27f199c37e2e51e52dcdeb1',
-              'fixedVersions': [
-                '1.31.1-r11'
-              ],
-              'installedVersion': '1.31.1-r10',
-              'packageName':      'busybox',
-              'purl':             'pkg:apk/alpine/busybox@1.31.1-r10?arch=ppc64le&distro=3.11.12',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42381',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42381',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42381'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the hash_init()'
-            },
-            {
-              'cve':  'CVE-2021-42382',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the getvar_s function",
-              'diffID':        'sha256:f80557a3ec8197dec916152934ec3c842fc265aeb27f199c37e2e51e52dcdeb1',
-              'fixedVersions': [
-                '1.31.1-r11'
-              ],
-              'installedVersion': '1.31.1-r10',
-              'packageName':      'busybox',
-              'purl':             'pkg:apk/alpine/busybox@1.31.1-r10?arch=ppc64le&distro=3.11.12',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42382',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42382',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42382'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the getvar_s()'
-            },
-            {
-              'cve':  'CVE-2021-42383',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the evaluate function",
-              'diffID':        'sha256:f80557a3ec8197dec916152934ec3c842fc265aeb27f199c37e2e51e52dcdeb1',
-              'fixedVersions': [
-                '1.31.1-r11'
-              ],
-              'installedVersion': '1.31.1-r10',
-              'packageName':      'busybox',
-              'purl':             'pkg:apk/alpine/busybox@1.31.1-r10?arch=ppc64le&distro=3.11.12',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42383',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42383',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42383'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the evaluate()'
-            },
-            {
-              'cve':  'CVE-2021-42384',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the handle_special function",
-              'diffID':        'sha256:f80557a3ec8197dec916152934ec3c842fc265aeb27f199c37e2e51e52dcdeb1',
-              'fixedVersions': [
-                '1.31.1-r11'
-              ],
-              'installedVersion': '1.31.1-r10',
-              'packageName':      'busybox',
-              'purl':             'pkg:apk/alpine/busybox@1.31.1-r10?arch=ppc64le&distro=3.11.12',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42384',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42384',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42384'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the handle_special()'
-            },
-            {
-              'cve':  'CVE-2021-42385',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the evaluate function",
-              'diffID':        'sha256:f80557a3ec8197dec916152934ec3c842fc265aeb27f199c37e2e51e52dcdeb1',
-              'fixedVersions': [
-                '1.31.1-r11'
-              ],
-              'installedVersion': '1.31.1-r10',
-              'packageName':      'busybox',
-              'purl':             'pkg:apk/alpine/busybox@1.31.1-r10?arch=ppc64le&distro=3.11.12',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42385',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42385',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42385'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the evaluate()'
-            },
-            {
-              'cve':  'CVE-2021-42386',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the nvalloc function",
-              'diffID':        'sha256:f80557a3ec8197dec916152934ec3c842fc265aeb27f199c37e2e51e52dcdeb1',
-              'fixedVersions': [
-                '1.31.1-r11'
-              ],
-              'installedVersion': '1.31.1-r10',
-              'packageName':      'busybox',
-              'purl':             'pkg:apk/alpine/busybox@1.31.1-r10?arch=ppc64le&distro=3.11.12',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42386',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42386',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42386'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the nvalloc()'
-            },
-            {
-              'cve':  'CVE-2021-42374',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '5.7',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-125'
-              ],
-              'description':   "An out-of-bounds heap read in Busybox's unlzma applet leads to information leak and denial of service when crafted LZMA-compressed input is decompressed. This can be triggered by any applet/format that",
-              'diffID':        'sha256:f80557a3ec8197dec916152934ec3c842fc265aeb27f199c37e2e51e52dcdeb1',
-              'fixedVersions': [
-                '1.31.1-r11'
-              ],
-              'installedVersion': '1.31.1-r10',
-              'packageName':      'busybox',
-              'purl':             'pkg:apk/alpine/busybox@1.31.1-r10?arch=ppc64le&distro=3.11.12',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42374',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42374',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42374'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'busybox: out-of-bounds read in unlzma applet leads to information leak and denial of service when crafted LZMA-compressed input is decompressed'
-            },
-            {
-              'cve':  'CVE-2021-42378',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the getvar_i function",
-              'diffID':        'sha256:f80557a3ec8197dec916152934ec3c842fc265aeb27f199c37e2e51e52dcdeb1',
-              'fixedVersions': [
-                '1.31.1-r11'
-              ],
-              'installedVersion': '1.31.1-r10',
-              'packageName':      'ssl_client',
-              'purl':             'pkg:apk/alpine/ssl_client@1.31.1-r10?arch=ppc64le&distro=3.11.12',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42378',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42378',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42378'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the getvar_i()'
-            },
-            {
-              'cve':  'CVE-2021-42379',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the next_input_file function",
-              'diffID':        'sha256:f80557a3ec8197dec916152934ec3c842fc265aeb27f199c37e2e51e52dcdeb1',
-              'fixedVersions': [
-                '1.31.1-r11'
-              ],
-              'installedVersion': '1.31.1-r10',
-              'packageName':      'ssl_client',
-              'purl':             'pkg:apk/alpine/ssl_client@1.31.1-r10?arch=ppc64le&distro=3.11.12',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42379',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42379',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42379'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the next_input_file()'
-            },
-            {
-              'cve':  'CVE-2021-42380',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the clrvar function",
-              'diffID':        'sha256:f80557a3ec8197dec916152934ec3c842fc265aeb27f199c37e2e51e52dcdeb1',
-              'fixedVersions': [
-                '1.31.1-r11'
-              ],
-              'installedVersion': '1.31.1-r10',
-              'packageName':      'ssl_client',
-              'purl':             'pkg:apk/alpine/ssl_client@1.31.1-r10?arch=ppc64le&distro=3.11.12',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42380',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42380',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42380'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the clrvar()'
-            },
-            {
-              'cve':  'CVE-2021-42381',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the hash_init function",
-              'diffID':        'sha256:f80557a3ec8197dec916152934ec3c842fc265aeb27f199c37e2e51e52dcdeb1',
-              'fixedVersions': [
-                '1.31.1-r11'
-              ],
-              'installedVersion': '1.31.1-r10',
-              'packageName':      'ssl_client',
-              'purl':             'pkg:apk/alpine/ssl_client@1.31.1-r10?arch=ppc64le&distro=3.11.12',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42381',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42381',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42381'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the hash_init()'
-            },
-            {
-              'cve':  'CVE-2021-42382',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the getvar_s function",
-              'diffID':        'sha256:f80557a3ec8197dec916152934ec3c842fc265aeb27f199c37e2e51e52dcdeb1',
-              'fixedVersions': [
-                '1.31.1-r11'
-              ],
-              'installedVersion': '1.31.1-r10',
-              'packageName':      'ssl_client',
-              'purl':             'pkg:apk/alpine/ssl_client@1.31.1-r10?arch=ppc64le&distro=3.11.12',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42382',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42382',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42382'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the getvar_s()'
-            },
-            {
-              'cve':  'CVE-2021-42383',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the evaluate function",
-              'diffID':        'sha256:f80557a3ec8197dec916152934ec3c842fc265aeb27f199c37e2e51e52dcdeb1',
-              'fixedVersions': [
-                '1.31.1-r11'
-              ],
-              'installedVersion': '1.31.1-r10',
-              'packageName':      'ssl_client',
-              'purl':             'pkg:apk/alpine/ssl_client@1.31.1-r10?arch=ppc64le&distro=3.11.12',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42383',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42383',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42383'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the evaluate()'
-            },
-            {
-              'cve':  'CVE-2021-42384',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the handle_special function",
-              'diffID':        'sha256:f80557a3ec8197dec916152934ec3c842fc265aeb27f199c37e2e51e52dcdeb1',
-              'fixedVersions': [
-                '1.31.1-r11'
-              ],
-              'installedVersion': '1.31.1-r10',
-              'packageName':      'ssl_client',
-              'purl':             'pkg:apk/alpine/ssl_client@1.31.1-r10?arch=ppc64le&distro=3.11.12',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42384',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42384',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42384'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the handle_special()'
-            },
-            {
-              'cve':  'CVE-2021-42385',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the evaluate function",
-              'diffID':        'sha256:f80557a3ec8197dec916152934ec3c842fc265aeb27f199c37e2e51e52dcdeb1',
-              'fixedVersions': [
-                '1.31.1-r11'
-              ],
-              'installedVersion': '1.31.1-r10',
-              'packageName':      'ssl_client',
-              'purl':             'pkg:apk/alpine/ssl_client@1.31.1-r10?arch=ppc64le&distro=3.11.12',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42385',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42385',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42385'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the evaluate()'
-            },
-            {
-              'cve':  'CVE-2021-42386',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the nvalloc function",
-              'diffID':        'sha256:f80557a3ec8197dec916152934ec3c842fc265aeb27f199c37e2e51e52dcdeb1',
-              'fixedVersions': [
-                '1.31.1-r11'
-              ],
-              'installedVersion': '1.31.1-r10',
-              'packageName':      'ssl_client',
-              'purl':             'pkg:apk/alpine/ssl_client@1.31.1-r10?arch=ppc64le&distro=3.11.12',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42386',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42386',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42386'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the nvalloc()'
-            },
-            {
-              'cve':  'CVE-2021-42374',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '5.7',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-125'
-              ],
-              'description':   "An out-of-bounds heap read in Busybox's unlzma applet leads to information leak and denial of service when crafted LZMA-compressed input is decompressed. This can be triggered by any applet/format that",
-              'diffID':        'sha256:f80557a3ec8197dec916152934ec3c842fc265aeb27f199c37e2e51e52dcdeb1',
-              'fixedVersions': [
-                '1.31.1-r11'
-              ],
-              'installedVersion': '1.31.1-r10',
-              'packageName':      'ssl_client',
-              'purl':             'pkg:apk/alpine/ssl_client@1.31.1-r10?arch=ppc64le&distro=3.11.12',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42374',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42374',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42374'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'busybox: out-of-bounds read in unlzma applet leads to information leak and denial of service when crafted LZMA-compressed input is decompressed'
-            },
-            {
-              'cve':  'CVE-2022-37434',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '9.8',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-787',
-                'CWE-120'
-              ],
-              'description':   'zlib through 1.2.12 has a heap-based buffer over-read or buffer overflow in inflate in inflate.c via a large gzip header extra field. NOTE: only applications that call inflateGetHeader are affected. Some common applications bundle the affected zlib source code but may be unable to call inflateGetHeader (e.g., see the nodejs/node reference).',
-              'diffID':        'sha256:f80557a3ec8197dec916152934ec3c842fc265aeb27f199c37e2e51e52dcdeb1',
-              'fixedVersions': [
-                '1.2.11-r4'
-              ],
-              'installedVersion': '1.2.11-r3',
-              'packageName':      'zlib',
-              'purl':             'pkg:apk/alpine/zlib@1.2.11-r3?arch=ppc64le&distro=3.11.12',
-              'references':       [
-                'http://seclists.org/fulldisclosure/2022/Oct/37',
-                'http://seclists.org/fulldisclosure/2022/Oct/38',
-                'http://seclists.org/fulldisclosure/2022/Oct/41',
-                'http://seclists.org/fulldisclosure/2022/Oct/42',
-                'http://www.openwall.com/lists/oss-security/2022/08/05/2',
-                'http://www.openwall.com/lists/oss-security/2022/08/09/1',
-                'https://access.redhat.com/errata/RHSA-2022:8291',
-                'https://access.redhat.com/security/cve/CVE-2022-37434',
-                'https://bugzilla.redhat.com/2116639',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2053198',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2077431',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2081296',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2116639',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-37434',
-                'https://errata.almalinux.org/9/ALSA-2022-8291.html',
-                'https://errata.rockylinux.org/RLSA-2022:8291',
-                'https://github.com/curl/curl/issues/9271',
-                'https://github.com/ivd38/zlib_overflow',
-                'https://github.com/madler/zlib/blob/21767c654d31d2dccdde4330529775c6c5fd5389/zlib.h#L1062-L1063',
-                'https://github.com/madler/zlib/commit/1eb7682f845ac9e9bf9ae35bbfb3bad5dacbd91d',
-                'https://github.com/madler/zlib/commit/eff308af425b67093bab25f80f1ae950166bece1',
-                'https://github.com/nodejs/node/blob/75b68c6e4db515f76df73af476eccf382bbcb00a/deps/zlib/inflate.c#L762-L764',
-                'https://linux.oracle.com/cve/CVE-2022-37434.html',
-                'https://linux.oracle.com/errata/ELSA-2023-1095.html',
-                'https://lists.debian.org/debian-lts-announce/2022/09/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JWN4VE3JQR4O2SOUS5TXNLANRPMHWV4I/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NMBOJ77A7T7PQCARMDUK75TE6LLESZ3O/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PAVPQNCG3XRLCLNSQRM3KAN5ZFMVXVTY/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/X5U7OTKZSHY2I3ZFJSR2SHFHW72RKGDK/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YRQAI7H4M4RQZ2IWZUEEXECBE5D56BH2/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2022-37434',
-                'https://security.netapp.com/advisory/ntap-20220901-0005/',
-                'https://security.netapp.com/advisory/ntap-20230427-0007/',
-                'https://support.apple.com/kb/HT213488',
-                'https://support.apple.com/kb/HT213489',
-                'https://support.apple.com/kb/HT213490',
-                'https://support.apple.com/kb/HT213491',
-                'https://support.apple.com/kb/HT213493',
-                'https://support.apple.com/kb/HT213494',
-                'https://ubuntu.com/security/notices/USN-5570-1',
-                'https://ubuntu.com/security/notices/USN-5570-2',
-                'https://ubuntu.com/security/notices/USN-5573-1',
-                'https://ubuntu.com/security/notices/USN-6736-1',
-                'https://ubuntu.com/security/notices/USN-6736-2',
-                'https://www.cve.org/CVERecord?id=CVE-2022-37434',
-                'https://www.debian.org/security/2022/dsa-5218'
-              ],
-              'severity':   'CRITICAL',
-              'suppressed': false,
-              'title':      'zlib: heap-based buffer over-read and overflow in inflate() in inflate.c via a large gzip header extra field'
-            }
-          ]
-        }
-      ],
-      'summary': {
-        'critical':   1,
-        'high':       18,
-        'low':        0,
-        'medium':     2,
-        'suppressed': 0,
-        'unknown':    0
-      }
-    }
-  },
-  {
-    'id':    'default/392869e7f357179907bb0e80b9464a295d9037e49581f1602bb62ab05a2a246e',
-    'type':  'storage.sbomscanner.kubewarden.io.vulnerabilityreport',
-    'links': {
-      'patch':  'https://localhost:8005/v1/storage.sbomscanner.kubewarden.io.vulnerabilityreports/default/392869e7f357179907bb0e80b9464a295d9037e49581f1602bb62ab05a2a246e',
-      'remove': 'https://localhost:8005/v1/storage.sbomscanner.kubewarden.io.vulnerabilityreports/default/392869e7f357179907bb0e80b9464a295d9037e49581f1602bb62ab05a2a246e',
-      'self':   'https://localhost:8005/v1/storage.sbomscanner.kubewarden.io.vulnerabilityreports/default/392869e7f357179907bb0e80b9464a295d9037e49581f1602bb62ab05a2a246e',
-      'update': 'https://localhost:8005/v1/storage.sbomscanner.kubewarden.io.vulnerabilityreports/default/392869e7f357179907bb0e80b9464a295d9037e49581f1602bb62ab05a2a246e',
-      'view':   'https://localhost:8005/apis/storage.sbomscanner.kubewarden.io/v1alpha1/namespaces/default/vulnerabilityreports/392869e7f357179907bb0e80b9464a295d9037e49581f1602bb62ab05a2a246e'
-    },
-    'apiVersion':    'storage.sbomscanner.kubewarden.io/v1alpha1',
-    'imageMetadata': {
-      'digest':      'sha256:bca31dcfba88843372ec4247783ca2c774fb62d45df9a6394572611b24fa4949',
-      'platform':    'linux/arm64/v8',
-      'registry':    'lsong-demo1',
-      'registryURI': 'registry-1.docker.io',
-      'repository':  'library/alpine',
-      'tag':         '3.6.5'
-    },
-    'kind':     'VulnerabilityReport',
-    'metadata': {
-      'creationTimestamp': '2026-01-14T18:51:48Z',
-      'fields':            [
-        '392869e7f357179907bb0e80b9464a295d9037e49581f1602bb62ab05a2a246e',
-        'registry-1.docker.io/library/alpine:3.6.5',
-        'linux/arm64/v8',
-        '0 (0 suppressed)'
-      ],
-      'labels': {
-        'app.kubernetes.io/managed-by':          'sbomscanner',
-        'app.kubernetes.io/part-of':             'sbomscanner',
-        'sbomscanner.kubewarden.io/scanjob-uid': '445c600a-c4b6-40b3-bd71-f2d2140a37d5'
-      },
-      'name':            '392869e7f357179907bb0e80b9464a295d9037e49581f1602bb62ab05a2a246e',
-      'namespace':       'default',
-      'ownerReferences': [
-        {
-          'apiVersion':         'storage.sbomscanner.kubewarden.io/v1alpha1',
-          'blockOwnerDeletion': true,
-          'controller':         true,
-          'kind':               'SBOM',
-          'name':               '392869e7f357179907bb0e80b9464a295d9037e49581f1602bb62ab05a2a246e',
-          'uid':                '3d7a6bd3-6a68-4baf-8fa0-0808333fc3f6'
-        }
-      ],
-      'relationships': [
-        {
-          'fromId':   'default/392869e7f357179907bb0e80b9464a295d9037e49581f1602bb62ab05a2a246e',
-          'fromType': 'storage.sbomscanner.kubewarden.io.sbom',
-          'rel':      'owner',
-          'state':    'active',
-          'message':  'Resource is current'
-        }
-      ],
-      'resourceVersion': '1',
-      'state':           {
-        'error':         false,
-        'message':       'Resource is current',
-        'name':          'active',
-        'transitioning': false
-      },
-      'uid': '29d16253-492e-4db6-8c11-5d2ea0a32de7'
-    },
-    'report': {
-      'results': [
-        {
-          'class':           'os-pkgs',
-          'target':          '/var/run/worker/trivy.sbom.388223185.json (alpine 3.6.5)',
-          'type':            'alpine',
-          'vulnerabilities': null
-        }
-      ],
-      'summary': {
-        'critical':   0,
-        'high':       0,
-        'low':        0,
-        'medium':     0,
-        'suppressed': 0,
-        'unknown':    0
-      }
-    }
-  },
-  {
-    'id':    'default/3ae56f59ac8192ef00fe603e21abf99d551abcb56756028da4bc4434e37636b5',
-    'type':  'storage.sbomscanner.kubewarden.io.vulnerabilityreport',
-    'links': {
-      'patch':  'https://localhost:8005/v1/storage.sbomscanner.kubewarden.io.vulnerabilityreports/default/3ae56f59ac8192ef00fe603e21abf99d551abcb56756028da4bc4434e37636b5',
-      'remove': 'https://localhost:8005/v1/storage.sbomscanner.kubewarden.io.vulnerabilityreports/default/3ae56f59ac8192ef00fe603e21abf99d551abcb56756028da4bc4434e37636b5',
-      'self':   'https://localhost:8005/v1/storage.sbomscanner.kubewarden.io.vulnerabilityreports/default/3ae56f59ac8192ef00fe603e21abf99d551abcb56756028da4bc4434e37636b5',
-      'update': 'https://localhost:8005/v1/storage.sbomscanner.kubewarden.io.vulnerabilityreports/default/3ae56f59ac8192ef00fe603e21abf99d551abcb56756028da4bc4434e37636b5',
-      'view':   'https://localhost:8005/apis/storage.sbomscanner.kubewarden.io/v1alpha1/namespaces/default/vulnerabilityreports/3ae56f59ac8192ef00fe603e21abf99d551abcb56756028da4bc4434e37636b5'
-    },
-    'apiVersion':    'storage.sbomscanner.kubewarden.io/v1alpha1',
-    'imageMetadata': {
-      'digest':      'sha256:074d3636ebda6dd446d0d00304c4454f468237fdacf08fb0eeac90bdbfa1bac7',
-      'platform':    'linux/amd64',
-      'registry':    'lsong-demo1',
-      'registryURI': 'registry-1.docker.io',
-      'repository':  'library/alpine',
-      'tag':         '3.12.3'
-    },
-    'kind':     'VulnerabilityReport',
-    'metadata': {
-      'creationTimestamp': '2026-01-14T18:51:17Z',
-      'fields':            [
-        '3ae56f59ac8192ef00fe603e21abf99d551abcb56756028da4bc4434e37636b5',
-        'registry-1.docker.io/library/alpine:3.12.3',
-        'linux/amd64',
-        '44 (0 suppressed)'
-      ],
-      'labels': {
-        'app.kubernetes.io/managed-by':          'sbomscanner',
-        'app.kubernetes.io/part-of':             'sbomscanner',
-        'sbomscanner.kubewarden.io/scanjob-uid': '445c600a-c4b6-40b3-bd71-f2d2140a37d5'
-      },
-      'name':            '3ae56f59ac8192ef00fe603e21abf99d551abcb56756028da4bc4434e37636b5',
-      'namespace':       'default',
-      'ownerReferences': [
-        {
-          'apiVersion':         'storage.sbomscanner.kubewarden.io/v1alpha1',
-          'blockOwnerDeletion': true,
-          'controller':         true,
-          'kind':               'SBOM',
-          'name':               '3ae56f59ac8192ef00fe603e21abf99d551abcb56756028da4bc4434e37636b5',
-          'uid':                'bc2b32ba-9cdd-4e44-af33-d756fd1bec44'
-        }
-      ],
-      'relationships': [
-        {
-          'fromId':   'default/3ae56f59ac8192ef00fe603e21abf99d551abcb56756028da4bc4434e37636b5',
-          'fromType': 'storage.sbomscanner.kubewarden.io.sbom',
-          'rel':      'owner',
-          'state':    'active',
-          'message':  'Resource is current'
-        }
-      ],
-      'resourceVersion': '1',
-      'state':           {
-        'error':         false,
-        'message':       'Resource is current',
-        'name':          'active',
-        'transitioning': false
-      },
-      'uid': '65b8855d-b83a-49e1-ba0b-dab4bdcf5252'
-    },
-    'report': {
-      'results': [
-        {
-          'class':           'os-pkgs',
-          'target':          '/var/run/worker/trivy.sbom.1005642491.json (alpine 3.12.3)',
-          'type':            'alpine',
-          'vulnerabilities': [
-            {
-              'cve':  'CVE-2021-36159',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '9.1',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '9.1',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-125'
-              ],
-              'description':   "libfetch before 2021-07-26, as used in apk-tools, xbps, and other products, mishandles numeric strings for the FTP and HTTP protocols. The FTP passive mode implementation allows an out-of-bounds read because strtol is used to parse the relevant numbers into address bytes. It does not check if the line ends prematurely. If it does, the for-loop condition checks for the '\\0' terminator one byte too late.",
-              'diffID':        'sha256:777b2c648970480f50f5b4d0af8f9a8ea798eea43dbcf40ce4a8c7118736bdcf',
-              'fixedVersions': [
-                '2.10.7-r0'
-              ],
-              'installedVersion': '2.10.5-r1',
-              'packageName':      'apk-tools',
-              'purl':             'pkg:apk/alpine/apk-tools@2.10.5-r1?arch=x86_64&distro=3.12.3',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-36159',
-                'https://github.com/freebsd/freebsd-src/commits/main/lib/libfetch',
-                'https://gitlab.alpinelinux.org/alpine/apk-tools/-/issues/10749',
-                'https://lists.apache.org/thread.html/r61db8e7dcb56dc000a5387a88f7a473bacec5ee01b9ff3f55308aacc%40%3Cdev.kafka.apache.org%3E',
-                'https://lists.apache.org/thread.html/r61db8e7dcb56dc000a5387a88f7a473bacec5ee01b9ff3f55308aacc%40%3Cusers.kafka.apache.org%3E',
-                'https://lists.apache.org/thread.html/rbf4ce74b0d1fa9810dec50ba3ace0caeea677af7c27a97111c06ccb7%40%3Cdev.kafka.apache.org%3E',
-                'https://lists.apache.org/thread.html/rbf4ce74b0d1fa9810dec50ba3ace0caeea677af7c27a97111c06ccb7%40%3Cusers.kafka.apache.org%3E',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-36159',
-                'https://www.cve.org/CVERecord?id=CVE-2021-36159'
-              ],
-              'severity':   'CRITICAL',
-              'suppressed': false,
-              'title':      'libfetch: an out of boundary read while libfetch uses strtol to parse the relevant numbers into address bytes leads to information leak or crash'
-            },
-            {
-              'cve':  'CVE-2021-30139',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-125'
-              ],
-              'description':   'In Alpine Linux apk-tools before 2.12.5, the tarball parser allows a buffer overflow and crash.',
-              'diffID':        'sha256:777b2c648970480f50f5b4d0af8f9a8ea798eea43dbcf40ce4a8c7118736bdcf',
-              'fixedVersions': [
-                '2.10.6-r0'
-              ],
-              'installedVersion': '2.10.5-r1',
-              'packageName':      'apk-tools',
-              'purl':             'pkg:apk/alpine/apk-tools@2.10.5-r1?arch=x86_64&distro=3.12.3',
-              'references':       [
-                'https://gitlab.alpinelinux.org/alpine/apk-tools/-/issues/10741',
-                'https://gitlab.alpinelinux.org/alpine/aports/-/issues/12606'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false
-            },
-            {
-              'cve':  'CVE-2021-28831',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-755'
-              ],
-              'description':   'decompress_gunzip.c in BusyBox through 1.32.1 mishandles the error bit on the huft_build result pointer, with a resultant invalid free or segmentation fault, via malformed gzip data.',
-              'diffID':        'sha256:777b2c648970480f50f5b4d0af8f9a8ea798eea43dbcf40ce4a8c7118736bdcf',
-              'fixedVersions': [
-                '1.31.1-r20'
-              ],
-              'installedVersion': '1.31.1-r19',
-              'packageName':      'busybox',
-              'purl':             'pkg:apk/alpine/busybox@1.31.1-r19?arch=x86_64&distro=3.12.3',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-28831',
-                'https://git.busybox.net/busybox/commit/?id=f25d254dfd4243698c31a4f3153d4ac72aa9e9bd',
-                'https://lists.debian.org/debian-lts-announce/2021/04/msg00001.html',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/3UDQGJRECXFS5EZVDH2OI45FMO436AC4/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/Z7ZIFKPRR32ZYA3WAA2NXFA3QHHOU6FJ/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZASBW7QRRLY5V2R44MQ4QQM4CZIDHM2U/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-28831',
-                'https://security.gentoo.org/glsa/202105-09',
-                'https://security.netapp.com/advisory/ntap-20250509-0005/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://ubuntu.com/security/notices/USN-5179-2',
-                'https://ubuntu.com/security/notices/USN-6335-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-28831'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: invalid free or segmentation fault via malformed gzip data'
-            },
-            {
-              'cve':  'CVE-2021-42378',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the getvar_i function",
-              'diffID':        'sha256:777b2c648970480f50f5b4d0af8f9a8ea798eea43dbcf40ce4a8c7118736bdcf',
-              'fixedVersions': [
-                '1.31.1-r21'
-              ],
-              'installedVersion': '1.31.1-r19',
-              'packageName':      'busybox',
-              'purl':             'pkg:apk/alpine/busybox@1.31.1-r19?arch=x86_64&distro=3.12.3',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42378',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42378',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42378'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the getvar_i()'
-            },
-            {
-              'cve':  'CVE-2021-42379',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the next_input_file function",
-              'diffID':        'sha256:777b2c648970480f50f5b4d0af8f9a8ea798eea43dbcf40ce4a8c7118736bdcf',
-              'fixedVersions': [
-                '1.31.1-r21'
-              ],
-              'installedVersion': '1.31.1-r19',
-              'packageName':      'busybox',
-              'purl':             'pkg:apk/alpine/busybox@1.31.1-r19?arch=x86_64&distro=3.12.3',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42379',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42379',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42379'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the next_input_file()'
-            },
-            {
-              'cve':  'CVE-2021-42380',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the clrvar function",
-              'diffID':        'sha256:777b2c648970480f50f5b4d0af8f9a8ea798eea43dbcf40ce4a8c7118736bdcf',
-              'fixedVersions': [
-                '1.31.1-r21'
-              ],
-              'installedVersion': '1.31.1-r19',
-              'packageName':      'busybox',
-              'purl':             'pkg:apk/alpine/busybox@1.31.1-r19?arch=x86_64&distro=3.12.3',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42380',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42380',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42380'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the clrvar()'
-            },
-            {
-              'cve':  'CVE-2021-42381',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the hash_init function",
-              'diffID':        'sha256:777b2c648970480f50f5b4d0af8f9a8ea798eea43dbcf40ce4a8c7118736bdcf',
-              'fixedVersions': [
-                '1.31.1-r21'
-              ],
-              'installedVersion': '1.31.1-r19',
-              'packageName':      'busybox',
-              'purl':             'pkg:apk/alpine/busybox@1.31.1-r19?arch=x86_64&distro=3.12.3',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42381',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42381',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42381'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the hash_init()'
-            },
-            {
-              'cve':  'CVE-2021-42382',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the getvar_s function",
-              'diffID':        'sha256:777b2c648970480f50f5b4d0af8f9a8ea798eea43dbcf40ce4a8c7118736bdcf',
-              'fixedVersions': [
-                '1.31.1-r21'
-              ],
-              'installedVersion': '1.31.1-r19',
-              'packageName':      'busybox',
-              'purl':             'pkg:apk/alpine/busybox@1.31.1-r19?arch=x86_64&distro=3.12.3',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42382',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42382',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42382'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the getvar_s()'
-            },
-            {
-              'cve':  'CVE-2021-42383',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the evaluate function",
-              'diffID':        'sha256:777b2c648970480f50f5b4d0af8f9a8ea798eea43dbcf40ce4a8c7118736bdcf',
-              'fixedVersions': [
-                '1.31.1-r21'
-              ],
-              'installedVersion': '1.31.1-r19',
-              'packageName':      'busybox',
-              'purl':             'pkg:apk/alpine/busybox@1.31.1-r19?arch=x86_64&distro=3.12.3',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42383',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42383',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42383'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the evaluate()'
-            },
-            {
-              'cve':  'CVE-2021-42384',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the handle_special function",
-              'diffID':        'sha256:777b2c648970480f50f5b4d0af8f9a8ea798eea43dbcf40ce4a8c7118736bdcf',
-              'fixedVersions': [
-                '1.31.1-r21'
-              ],
-              'installedVersion': '1.31.1-r19',
-              'packageName':      'busybox',
-              'purl':             'pkg:apk/alpine/busybox@1.31.1-r19?arch=x86_64&distro=3.12.3',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42384',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42384',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42384'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the handle_special()'
-            },
-            {
-              'cve':  'CVE-2021-42385',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the evaluate function",
-              'diffID':        'sha256:777b2c648970480f50f5b4d0af8f9a8ea798eea43dbcf40ce4a8c7118736bdcf',
-              'fixedVersions': [
-                '1.31.1-r21'
-              ],
-              'installedVersion': '1.31.1-r19',
-              'packageName':      'busybox',
-              'purl':             'pkg:apk/alpine/busybox@1.31.1-r19?arch=x86_64&distro=3.12.3',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42385',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42385',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42385'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the evaluate()'
-            },
-            {
-              'cve':  'CVE-2021-42386',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the nvalloc function",
-              'diffID':        'sha256:777b2c648970480f50f5b4d0af8f9a8ea798eea43dbcf40ce4a8c7118736bdcf',
-              'fixedVersions': [
-                '1.31.1-r21'
-              ],
-              'installedVersion': '1.31.1-r19',
-              'packageName':      'busybox',
-              'purl':             'pkg:apk/alpine/busybox@1.31.1-r19?arch=x86_64&distro=3.12.3',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42386',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42386',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42386'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the nvalloc()'
-            },
-            {
-              'cve':  'CVE-2022-28391',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '8.8',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-88'
-              ],
-              'description':   "BusyBox through 1.35.0 allows remote attackers to execute arbitrary code if netstat is used to print a DNS PTR record's value to a VT compatible terminal. Alternatively, the attacker could choose to change the terminal's colors.",
-              'diffID':        'sha256:777b2c648970480f50f5b4d0af8f9a8ea798eea43dbcf40ce4a8c7118736bdcf',
-              'fixedVersions': [
-                '1.31.1-r22'
-              ],
-              'installedVersion': '1.31.1-r19',
-              'packageName':      'busybox',
-              'purl':             'pkg:apk/alpine/busybox@1.31.1-r19?arch=x86_64&distro=3.12.3',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2022-28391',
-                'https://git.alpinelinux.org/aports/plain/main/busybox/0001-libbb-sockaddr2str-ensure-only-printable-characters-.patch',
-                'https://git.alpinelinux.org/aports/plain/main/busybox/0002-nslookup-sanitize-all-printed-strings-with-printable.patch',
-                'https://gitlab.alpinelinux.org/alpine/aports/-/issues/13661',
-                'https://nvd.nist.gov/vuln/detail/CVE-2022-28391',
-                'https://www.cve.org/CVERecord?id=CVE-2022-28391'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: remote attackers may execute arbitrary code if netstat is used'
-            },
-            {
-              'cve':  'CVE-2021-42374',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '5.7',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-125'
-              ],
-              'description':   "An out-of-bounds heap read in Busybox's unlzma applet leads to information leak and denial of service when crafted LZMA-compressed input is decompressed. This can be triggered by any applet/format that",
-              'diffID':        'sha256:777b2c648970480f50f5b4d0af8f9a8ea798eea43dbcf40ce4a8c7118736bdcf',
-              'fixedVersions': [
-                '1.31.1-r21'
-              ],
-              'installedVersion': '1.31.1-r19',
-              'packageName':      'busybox',
-              'purl':             'pkg:apk/alpine/busybox@1.31.1-r19?arch=x86_64&distro=3.12.3',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42374',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42374',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42374'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'busybox: out-of-bounds read in unlzma applet leads to information leak and denial of service when crafted LZMA-compressed input is decompressed'
-            },
-            {
-              'cve':  'CVE-2021-3711',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '9.8',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'nvd': {
-                  'v3score':  '9.8',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '9.8',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-120'
-              ],
-              'description':   'In order to decrypt SM2 encrypted data an application is expected to call the API function EVP_PKEY_decrypt(). Typically an application will call this function twice. The first time, on entry, the "out" parameter can be NULL and, on exit, the "outlen" parameter is populated with the buffer size required to hold the decrypted plaintext. The application can then allocate a sufficiently sized buffer and call EVP_PKEY_decrypt() again, but this time passing a non-NULL value for the "out" parameter. A bug in the implementation of the SM2 decryption code means that the calculation of the buffer size required to hold the plaintext returned by the first call to EVP_PKEY_decrypt() can be smaller than the actual size required by the second call. This can lead to a buffer overflow when EVP_PKEY_decrypt() is called by the application a second time with a buffer that is too small. A malicious attacker who is able present SM2 content for decryption to an application could cause attacker chosen data to overflow the buffer by up to a maximum of 62 bytes altering the contents of other data held after the buffer, possibly changing application behaviour or causing the application to crash. The location of the buffer is application dependent but is typically heap allocated. Fixed in OpenSSL 1.1.1l (Affected 1.1.1-1.1.1k).',
-              'diffID':        'sha256:777b2c648970480f50f5b4d0af8f9a8ea798eea43dbcf40ce4a8c7118736bdcf',
-              'fixedVersions': [
-                '1.1.1l-r0'
-              ],
-              'installedVersion': '1.1.1i-r0',
-              'packageName':      'libcrypto1.1',
-              'purl':             'pkg:apk/alpine/libcrypto1.1@1.1.1i-r0?arch=x86_64&distro=3.12.3',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2021/08/26/2',
-                'https://access.redhat.com/security/cve/CVE-2021-3711',
-                'https://cert-portal.siemens.com/productcert/pdf/ssa-389290.pdf',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=59f5e75f3bced8fc0e130d72a3f582cf7b480b46',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=59f5e75f3bced8fc0e130d72a3f582cf7b480b46',
-                'https://lists.apache.org/thread.html/r18995de860f0e63635f3008fd2a6aca82394249476d21691e7c59c9e%40%3Cdev.tomcat.apache.org%3E',
-                'https://lists.apache.org/thread.html/r18995de860f0e63635f3008fd2a6aca82394249476d21691e7c59c9e@%3Cdev.tomcat.apache.org%3E',
-                'https://lists.apache.org/thread.html/rad5d9f83f0d11fb3f8bb148d179b8a9ad7c6a17f18d70e5805a713d1%40%3Cdev.tomcat.apache.org%3E',
-                'https://lists.apache.org/thread.html/rad5d9f83f0d11fb3f8bb148d179b8a9ad7c6a17f18d70e5805a713d1@%3Cdev.tomcat.apache.org%3E',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-3711',
-                'https://rustsec.org/advisories/RUSTSEC-2021-0097.html',
-                'https://security.gentoo.org/glsa/202209-02',
-                'https://security.gentoo.org/glsa/202210-02',
-                'https://security.netapp.com/advisory/ntap-20210827-0010',
-                'https://security.netapp.com/advisory/ntap-20210827-0010/',
-                'https://security.netapp.com/advisory/ntap-20211022-0003',
-                'https://security.netapp.com/advisory/ntap-20211022-0003/',
-                'https://security.netapp.com/advisory/ntap-20240621-0006',
-                'https://security.netapp.com/advisory/ntap-20240621-0006/',
-                'https://ubuntu.com/security/notices/USN-5051-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-3711',
-                'https://www.debian.org/security/2021/dsa-4963',
-                'https://www.openssl.org/news/secadv/20210824.txt',
-                'https://www.oracle.com/security-alerts/cpuapr2022.html',
-                'https://www.oracle.com/security-alerts/cpujan2022.html',
-                'https://www.oracle.com/security-alerts/cpuoct2021.html',
-                'https://www.tenable.com/security/tns-2021-16',
-                'https://www.tenable.com/security/tns-2022-02'
-              ],
-              'severity':   'CRITICAL',
-              'suppressed': false,
-              'title':      'openssl: SM2 Decryption Buffer Overflow'
-            },
-            {
-              'cve':  'CVE-2021-23840',
-              'cvss': {
-                'bitnami': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'ghsa': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'nvd': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-190'
-              ],
-              'description':   'Calls to EVP_CipherUpdate, EVP_EncryptUpdate and EVP_DecryptUpdate may overflow the output length argument in some cases where the input length is close to the maximum permissable length for an integer on the platform. In such cases the return value from the function call will be 1 (indicating success), but the output length value will be negative. This could cause applications to behave incorrectly or crash. OpenSSL versions 1.1.1i and below are affected by this issue. Users of these versions should upgrade to OpenSSL 1.1.1j. OpenSSL versions 1.0.2x and below are affected by this issue. However OpenSSL 1.0.2 is out of support and no longer receiving public updates. Premium support customers of OpenSSL 1.0.2 should upgrade to 1.0.2y. Other users should upgrade to 1.1.1j. Fixed in OpenSSL 1.1.1j (Affected 1.1.1-1.1.1i). Fixed in OpenSSL 1.0.2y (Affected 1.0.2-1.0.2x).',
-              'diffID':        'sha256:777b2c648970480f50f5b4d0af8f9a8ea798eea43dbcf40ce4a8c7118736bdcf',
-              'fixedVersions': [
-                '1.1.1j-r0'
-              ],
-              'installedVersion': '1.1.1i-r0',
-              'packageName':      'libcrypto1.1',
-              'purl':             'pkg:apk/alpine/libcrypto1.1@1.1.1i-r0?arch=x86_64&distro=3.12.3',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-23840',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=1908036',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=1930310',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=1930324',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=1934534',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=1934600',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=1939637',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=1940085',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=1965362',
-                'https://cert-portal.siemens.com/productcert/pdf/ssa-389290.pdf',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-23840',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-23841',
-                'https://errata.rockylinux.org/RLSA-2021:4424',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=6a51b9e1d0cf0bf8515f7201b68fb0a3482b3dc1',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=9b1129239f3ebb1d1c98ce9ed41d5c9476c47cb2',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=6a51b9e1d0cf0bf8515f7201b68fb0a3482b3dc1',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=9b1129239f3ebb1d1c98ce9ed41d5c9476c47cb2',
-                'https://github.com/alexcrichton/openssl-src-rs',
-                'https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA44846',
-                'https://kc.mcafee.com/corporate/index?page=content&id=SB10366',
-                'https://linux.oracle.com/cve/CVE-2021-23840.html',
-                'https://linux.oracle.com/errata/ELSA-2021-9561.html',
-                'https://lists.apache.org/thread.html/r58af02e294bd07f487e2c64ffc0a29b837db5600e33b6e698b9d696b%40%3Cissues.bookkeeper.apache.org%3E',
-                'https://lists.apache.org/thread.html/r58af02e294bd07f487e2c64ffc0a29b837db5600e33b6e698b9d696b@%3Cissues.bookkeeper.apache.org%3E',
-                'https://lists.apache.org/thread.html/rf4c02775860db415b4955778a131c2795223f61cb8c6a450893651e4%40%3Cissues.bookkeeper.apache.org%3E',
-                'https://lists.apache.org/thread.html/rf4c02775860db415b4955778a131c2795223f61cb8c6a450893651e4@%3Cissues.bookkeeper.apache.org%3E',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-23840',
-                'https://rustsec.org/advisories/RUSTSEC-2021-0057.html',
-                'https://security.gentoo.org/glsa/202103-03',
-                'https://security.netapp.com/advisory/ntap-20210219-0009',
-                'https://security.netapp.com/advisory/ntap-20210219-0009/',
-                'https://security.netapp.com/advisory/ntap-20240621-0006/',
-                'https://ubuntu.com/security/notices/USN-4738-1',
-                'https://ubuntu.com/security/notices/USN-5088-1',
-                'https://ubuntu.com/security/notices/USN-7018-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-23840',
-                'https://www.debian.org/security/2021/dsa-4855',
-                'https://www.openssl.org/news/secadv/20210216.txt',
-                'https://www.oracle.com//security-alerts/cpujul2021.html',
-                'https://www.oracle.com/security-alerts/cpuApr2021.html',
-                'https://www.oracle.com/security-alerts/cpuapr2022.html',
-                'https://www.oracle.com/security-alerts/cpujan2022.html',
-                'https://www.oracle.com/security-alerts/cpuoct2021.html',
-                'https://www.tenable.com/security/tns-2021-03',
-                'https://www.tenable.com/security/tns-2021-09',
-                'https://www.tenable.com/security/tns-2021-10'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: integer overflow in CipherUpdate'
-            },
-            {
-              'cve':  'CVE-2021-3450',
-              'cvss': {
-                'bitnami': {
-                  'v3score':  '7.4',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N'
-                },
-                'ghsa': {
-                  'v3score':  '7.4',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N'
-                },
-                'nvd': {
-                  'v3score':  '7.4',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N'
-                },
-                'redhat': {
-                  'v3score':  '7.4',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-295'
-              ],
-              'description':   'The X509_V_FLAG_X509_STRICT flag enables additional security checks of the certificates present in a certificate chain. It is not set by default. Starting from OpenSSL version 1.1.1h a check to disallow certificates in the chain that have explicitly encoded elliptic curve parameters was added as an additional strict check. An error in the implementation of this check meant that the result of a previous check to confirm that certificates in the chain are valid CA certificates was overwritten. This effectively bypasses the check that non-CA certificates must not be able to issue other certificates. If a "purpose" has been configured then there is a subsequent opportunity for checks that the certificate is a valid CA. All of the named "purpose" values implemented in libcrypto perform this check. Therefore, where a purpose is set the certificate chain will still be rejected even when the strict flag has been used. A purpose is set by default in libssl client and server certificate verification routines, but it can be overridden or removed by an application. In order to be affected, an application must explicitly set the X509_V_FLAG_X509_STRICT verification flag and either not set a purpose for the certificate verification or, in the case of TLS client or server applications, override the default purpose. OpenSSL versions 1.1.1h and newer are affected by this issue. Users of these versions should upgrade to OpenSSL 1.1.1k. OpenSSL 1.0.2 is not impacted by this issue. Fixed in OpenSSL 1.1.1k (Affected 1.1.1h-1.1.1j).',
-              'diffID':        'sha256:777b2c648970480f50f5b4d0af8f9a8ea798eea43dbcf40ce4a8c7118736bdcf',
-              'fixedVersions': [
-                '1.1.1k-r0'
-              ],
-              'installedVersion': '1.1.1i-r0',
-              'packageName':      'libcrypto1.1',
-              'purl':             'pkg:apk/alpine/libcrypto1.1@1.1.1i-r0?arch=x86_64&distro=3.12.3',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2021/03/27/1',
-                'http://www.openwall.com/lists/oss-security/2021/03/27/2',
-                'http://www.openwall.com/lists/oss-security/2021/03/28/3',
-                'http://www.openwall.com/lists/oss-security/2021/03/28/4',
-                'https://access.redhat.com/security/cve/CVE-2021-3450',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=1941547',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=1941554',
-                'https://cert-portal.siemens.com/productcert/pdf/ssa-389290.pdf',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-3449',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-3450',
-                'https://errata.rockylinux.org/RLSA-2021:1024',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=2a40b7bc7b94dd7de897a74571e7024f0cf0d63b',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=2a40b7bc7b94dd7de897a74571e7024f0cf0d63b',
-                'https://github.com/alexcrichton/openssl-src-rs',
-                'https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA44845',
-                'https://kc.mcafee.com/corporate/index?page=content&id=SB10356',
-                'https://linux.oracle.com/cve/CVE-2021-3450.html',
-                'https://linux.oracle.com/errata/ELSA-2021-9151.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CCBFLLVQVILIVGZMBJL3IXZGKWQISYNP/',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/CCBFLLVQVILIVGZMBJL3IXZGKWQISYNP',
-                'https://mta.openssl.org/pipermail/openssl-announce/2021-March/000198.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-3450',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2021-0013',
-                'https://rustsec.org/advisories/RUSTSEC-2021-0056.html',
-                'https://security.FreeBSD.org/advisories/FreeBSD-SA-21:07.openssl.asc',
-                'https://security.gentoo.org/glsa/202103-03',
-                'https://security.netapp.com/advisory/ntap-20210326-0006',
-                'https://security.netapp.com/advisory/ntap-20210326-0006/',
-                'https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-openssl-2021-GHY28dJd',
-                'https://www.cve.org/CVERecord?id=CVE-2021-3450',
-                'https://www.openssl.org/news/secadv/20210325.txt',
-                'https://www.oracle.com//security-alerts/cpujul2021.html',
-                'https://www.oracle.com/security-alerts/cpuApr2021.html',
-                'https://www.oracle.com/security-alerts/cpuapr2022.html',
-                'https://www.oracle.com/security-alerts/cpujul2022.html',
-                'https://www.oracle.com/security-alerts/cpuoct2021.html',
-                'https://www.tenable.com/security/tns-2021-05',
-                'https://www.tenable.com/security/tns-2021-08',
-                'https://www.tenable.com/security/tns-2021-09'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: CA certificate check bypass with X509_V_FLAG_X509_STRICT'
-            },
-            {
-              'cve':  'CVE-2021-3712',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '7.4',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H'
-                },
-                'nvd': {
-                  'v3score':  '7.4',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.4',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-125'
-              ],
-              'description':   "ASN.1 strings are represented internally within OpenSSL as an ASN1_STRING structure which contains a buffer holding the string data and a field holding the buffer length. This contrasts with normal C strings which are repesented as a buffer for the string data which is terminated with a NUL (0) byte. Although not a strict requirement, ASN.1 strings that are parsed using OpenSSL's own \"d2i\" functions (and other similar parsing functions) as well as any string whose value has been set with the ASN1_STRING_set() function will additionally NUL terminate the byte array in the ASN1_STRING structure. However, it is possible for applications to directly construct valid ASN1_STRING structures which do not NUL terminate the byte array by directly setting the \"data\" and \"length\" fields in the ASN1_STRING array. This can also happen by using the ASN1_STRING_set0() function. Numerous OpenSSL functions that print ASN.1 data have been found to assume that the ASN1_STRING byte array will be NUL terminated, even though this is not guaranteed for strings that have been directly constructed. Where an application requests an ASN.1 structure to be printed, and where that ASN.1 structure contains ASN1_STRINGs that have been directly constructed by the application without NUL terminating the \"data\" field, then a read buffer overrun can occur. The same thing can also occur during name constraints processing of certificates (for example if a certificate has been directly constructed by the application instead of loading it via the OpenSSL parsing functions, and the certificate contains non NUL terminated ASN1_STRING structures). It can also occur in the X509_get1_email(), X509_REQ_get1_email() and X509_get1_ocsp() functions. If a malicious actor can cause an application to directly construct an ASN1_STRING and then process it through one of the affected OpenSSL functions then this issue could be hit. This might result in a crash (causing a Denial of Service attack). It could also result in the disclosure of private memory contents (such as private keys, or sensitive plaintext). Fixed in OpenSSL 1.1.1l (Affected 1.1.1-1.1.1k). Fixed in OpenSSL 1.0.2za (Affected 1.0.2-1.0.2y).",
-              'diffID':        'sha256:777b2c648970480f50f5b4d0af8f9a8ea798eea43dbcf40ce4a8c7118736bdcf',
-              'fixedVersions': [
-                '1.1.1l-r0'
-              ],
-              'installedVersion': '1.1.1i-r0',
-              'packageName':      'libcrypto1.1',
-              'purl':             'pkg:apk/alpine/libcrypto1.1@1.1.1i-r0?arch=x86_64&distro=3.12.3',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2021/08/26/2',
-                'https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2021-3712.json',
-                'https://access.redhat.com/security/cve/CVE-2021-3712',
-                'https://cert-portal.siemens.com/productcert/pdf/ssa-244969.pdf',
-                'https://cert-portal.siemens.com/productcert/pdf/ssa-389290.pdf',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=94d23fcff9b2a7a8368dfe52214d5c2569882c11',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=ccb0a11145ee72b042d10593a64eaf9e8a55ec12',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=94d23fcff9b2a7a8368dfe52214d5c2569882c11',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=ccb0a11145ee72b042d10593a64eaf9e8a55ec12',
-                'https://kc.mcafee.com/corporate/index?page=content&id=SB10366',
-                'https://linux.oracle.com/cve/CVE-2021-3712.html',
-                'https://linux.oracle.com/errata/ELSA-2022-9023.html',
-                'https://lists.apache.org/thread.html/r18995de860f0e63635f3008fd2a6aca82394249476d21691e7c59c9e%40%3Cdev.tomcat.apache.org%3E',
-                'https://lists.apache.org/thread.html/r18995de860f0e63635f3008fd2a6aca82394249476d21691e7c59c9e@%3Cdev.tomcat.apache.org%3E',
-                'https://lists.apache.org/thread.html/rad5d9f83f0d11fb3f8bb148d179b8a9ad7c6a17f18d70e5805a713d1%40%3Cdev.tomcat.apache.org%3E',
-                'https://lists.apache.org/thread.html/rad5d9f83f0d11fb3f8bb148d179b8a9ad7c6a17f18d70e5805a713d1@%3Cdev.tomcat.apache.org%3E',
-                'https://lists.debian.org/debian-lts-announce/2021/09/msg00014.html',
-                'https://lists.debian.org/debian-lts-announce/2021/09/msg00021.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-3712',
-                'https://rustsec.org/advisories/RUSTSEC-2021-0098.html',
-                'https://security.gentoo.org/glsa/202209-02',
-                'https://security.gentoo.org/glsa/202210-02',
-                'https://security.netapp.com/advisory/ntap-20210827-0010',
-                'https://security.netapp.com/advisory/ntap-20210827-0010/',
-                'https://security.netapp.com/advisory/ntap-20240621-0006',
-                'https://security.netapp.com/advisory/ntap-20240621-0006/',
-                'https://ubuntu.com/security/notices/USN-5051-1',
-                'https://ubuntu.com/security/notices/USN-5051-2',
-                'https://ubuntu.com/security/notices/USN-5051-3',
-                'https://ubuntu.com/security/notices/USN-5051-4 (regression only in trusty/esm)',
-                'https://ubuntu.com/security/notices/USN-5088-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-3712',
-                'https://www.debian.org/security/2021/dsa-4963',
-                'https://www.openssl.org/news/secadv/20210824.txt',
-                'https://www.oracle.com/security-alerts/cpuapr2022.html',
-                'https://www.oracle.com/security-alerts/cpujan2022.html',
-                'https://www.oracle.com/security-alerts/cpuoct2021.html',
-                'https://www.tenable.com/security/tns-2021-16',
-                'https://www.tenable.com/security/tns-2022-02'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: Read buffer overruns processing ASN.1 strings'
-            },
-            {
-              'cve':  'CVE-2022-0778',
-              'cvss': {
-                'bitnami': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'ghsa': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'nvd': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-835'
-              ],
-              'description':   'The BN_mod_sqrt() function, which computes a modular square root, contains a bug that can cause it to loop forever for non-prime moduli. Internally this function is used when parsing certificates that contain elliptic curve public keys in compressed form or explicit elliptic curve parameters with a base point encoded in compressed form. It is possible to trigger the infinite loop by crafting a certificate that has invalid explicit curve parameters. Since certificate parsing happens prior to verification of the certificate signature, any process that parses an externally supplied certificate may thus be subject to a denial of service attack. The infinite loop can also be reached when parsing crafted private keys as they can contain explicit elliptic curve parameters. Thus vulnerable situations include: - TLS clients consuming server certificates - TLS servers consuming client certificates - Hosting providers taking certificates or private keys from customers - Certificate authorities parsing certification requests from subscribers - Anything else which parses ASN.1 elliptic curve parameters Also any other applications that use the BN_mod_sqrt() where the attacker can control the parameter values are vulnerable to this DoS issue. In the OpenSSL 1.0.2 version the public key is not parsed during initial parsing of the certificate which makes it slightly harder to trigger the infinite loop. However any operation which requires the public key from the certificate will trigger the infinite loop. In particular the attacker can use a self-signed certificate to trigger the loop during verification of the certificate signature. This issue affects OpenSSL versions 1.0.2, 1.1.1 and 3.0. It was addressed in the releases of 1.1.1n and 3.0.2 on the 15th March 2022. Fixed in OpenSSL 3.0.2 (Affected 3.0.0,3.0.1). Fixed in OpenSSL 1.1.1n (Affected 1.1.1-1.1.1m). Fixed in OpenSSL 1.0.2zd (Affected 1.0.2-1.0.2zc).',
-              'diffID':        'sha256:777b2c648970480f50f5b4d0af8f9a8ea798eea43dbcf40ce4a8c7118736bdcf',
-              'fixedVersions': [
-                '1.1.1n-r0'
-              ],
-              'installedVersion': '1.1.1i-r0',
-              'packageName':      'libcrypto1.1',
-              'purl':             'pkg:apk/alpine/libcrypto1.1@1.1.1i-r0?arch=x86_64&distro=3.12.3',
-              'references':       [
-                'http://packetstormsecurity.com/files/167344/OpenSSL-1.0.2-1.1.1-3.0-BN_mod_sqrt-Infinite-Loop.html',
-                'http://seclists.org/fulldisclosure/2022/May/33',
-                'http://seclists.org/fulldisclosure/2022/May/35',
-                'http://seclists.org/fulldisclosure/2022/May/38',
-                'https://access.redhat.com/errata/RHSA-2022:5326',
-                'https://access.redhat.com/security/cve/CVE-2022-0778',
-                'https://bugzilla.redhat.com/2062202',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2062202',
-                'https://cert-portal.siemens.com/productcert/pdf/ssa-712929.pdf',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-0778',
-                'https://errata.almalinux.org/8/ALSA-2022-5326.html',
-                'https://errata.rockylinux.org/RLSA-2022:4899',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=3118eb64934499d93db3230748a452351d1d9a65',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=380085481c64de749a6dd25cdf0bcf4360b30f83',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=a466912611aa6cbdf550cd10601390e587451246',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=3118eb64934499d93db3230748a452351d1d9a65',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=380085481c64de749a6dd25cdf0bcf4360b30f83',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=a466912611aa6cbdf550cd10601390e587451246',
-                'https://linux.oracle.com/cve/CVE-2022-0778.html',
-                'https://linux.oracle.com/errata/ELSA-2022-9272.html',
-                'https://lists.debian.org/debian-lts-announce/2022/03/msg00023.html',
-                'https://lists.debian.org/debian-lts-announce/2022/03/msg00024.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/323SNN6ZX7PRJJWP2BUAFLPUAE42XWLZ',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/323SNN6ZX7PRJJWP2BUAFLPUAE42XWLZ/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GDB3GQVJPXJE7X5C5JN6JAA4XUDWD6E6',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GDB3GQVJPXJE7X5C5JN6JAA4XUDWD6E6/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/W6K3PR542DXWLEFFMFIDMME4CWMHJRMG',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/W6K3PR542DXWLEFFMFIDMME4CWMHJRMG/',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/323SNN6ZX7PRJJWP2BUAFLPUAE42XWLZ',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/GDB3GQVJPXJE7X5C5JN6JAA4XUDWD6E6',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/W6K3PR542DXWLEFFMFIDMME4CWMHJRMG',
-                'https://nvd.nist.gov/vuln/detail/CVE-2022-0778',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2022-0002',
-                'https://rustsec.org/advisories/RUSTSEC-2022-0014.html',
-                'https://security.gentoo.org/glsa/202210-02',
-                'https://security.netapp.com/advisory/ntap-20220321-0002',
-                'https://security.netapp.com/advisory/ntap-20220321-0002/',
-                'https://security.netapp.com/advisory/ntap-20220429-0005',
-                'https://security.netapp.com/advisory/ntap-20220429-0005/',
-                'https://security.netapp.com/advisory/ntap-20240621-0006',
-                'https://security.netapp.com/advisory/ntap-20240621-0006/',
-                'https://support.apple.com/kb/HT213255',
-                'https://support.apple.com/kb/HT213256',
-                'https://support.apple.com/kb/HT213257',
-                'https://ubuntu.com/security/notices/USN-5328-1',
-                'https://ubuntu.com/security/notices/USN-5328-2',
-                'https://ubuntu.com/security/notices/USN-6457-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2022-0778',
-                'https://www.debian.org/security/2022/dsa-5103',
-                'https://www.openssl.org/news/secadv/20220315.txt',
-                'https://www.oracle.com/security-alerts/cpuapr2022.html',
-                'https://www.oracle.com/security-alerts/cpujul2022.html',
-                'https://www.tenable.com/security/tns-2022-06',
-                'https://www.tenable.com/security/tns-2022-07',
-                'https://www.tenable.com/security/tns-2022-08',
-                'https://www.tenable.com/security/tns-2022-09'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: Infinite loop in BN_mod_sqrt() reachable when parsing certificates'
-            },
-            {
-              'cve':  'CVE-2021-23841',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'nvd': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-476'
-              ],
-              'description':   'The OpenSSL public API function X509_issuer_and_serial_hash() attempts to create a unique hash value based on the issuer and serial number data contained within an X509 certificate. However it fails to correctly handle any errors that may occur while parsing the issuer field (which might occur if the issuer field is maliciously constructed). This may subsequently result in a NULL pointer deref and a crash leading to a potential denial of service attack. The function X509_issuer_and_serial_hash() is never directly called by OpenSSL itself so applications are only vulnerable if they use this function directly and they use it on certificates that may have been obtained from untrusted sources. OpenSSL versions 1.1.1i and below are affected by this issue. Users of these versions should upgrade to OpenSSL 1.1.1j. OpenSSL versions 1.0.2x and below are affected by this issue. However OpenSSL 1.0.2 is out of support and no longer receiving public updates. Premium support customers of OpenSSL 1.0.2 should upgrade to 1.0.2y. Other users should upgrade to 1.1.1j. Fixed in OpenSSL 1.1.1j (Affected 1.1.1-1.1.1i). Fixed in OpenSSL 1.0.2y (Affected 1.0.2-1.0.2x).',
-              'diffID':        'sha256:777b2c648970480f50f5b4d0af8f9a8ea798eea43dbcf40ce4a8c7118736bdcf',
-              'fixedVersions': [
-                '1.1.1j-r0'
-              ],
-              'installedVersion': '1.1.1i-r0',
-              'packageName':      'libcrypto1.1',
-              'purl':             'pkg:apk/alpine/libcrypto1.1@1.1.1i-r0?arch=x86_64&distro=3.12.3',
-              'references':       [
-                'http://seclists.org/fulldisclosure/2021/May/67',
-                'http://seclists.org/fulldisclosure/2021/May/68',
-                'http://seclists.org/fulldisclosure/2021/May/70',
-                'https://access.redhat.com/security/cve/CVE-2021-23841',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=1908036',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=1930310',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=1930324',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=1934534',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=1934600',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=1939637',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=1940085',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=1965362',
-                'https://cert-portal.siemens.com/productcert/pdf/ssa-637483.pdf',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-23840',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-23841',
-                'https://errata.rockylinux.org/RLSA-2021:4424',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=122a19ab48091c657f7cb1fb3af9fc07bd557bbf',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=8252ee4d90f3f2004d3d0aeeed003ad49c9a7807',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=122a19ab48091c657f7cb1fb3af9fc07bd557bbf',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=6a51b9e1d0cf0bf8515f7201b68fb0a3482b3dc1',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=8252ee4d90f3f2004d3d0aeeed003ad49c9a7807',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=9b1129239f3ebb1d1c98ce9ed41d5c9476c47cb2',
-                'https://github.com/alexcrichton/openssl-src-rs',
-                'https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA44846',
-                'https://linux.oracle.com/cve/CVE-2021-23841.html',
-                'https://linux.oracle.com/errata/ELSA-2021-9561.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-23841',
-                'https://rustsec.org/advisories/RUSTSEC-2021-0058',
-                'https://rustsec.org/advisories/RUSTSEC-2021-0058.html',
-                'https://security.gentoo.org/glsa/202103-03',
-                'https://security.netapp.com/advisory/ntap-20210219-0009',
-                'https://security.netapp.com/advisory/ntap-20210219-0009/',
-                'https://security.netapp.com/advisory/ntap-20210513-0002',
-                'https://security.netapp.com/advisory/ntap-20210513-0002/',
-                'https://security.netapp.com/advisory/ntap-20240621-0006/',
-                'https://support.apple.com/kb/HT212528',
-                'https://support.apple.com/kb/HT212529',
-                'https://support.apple.com/kb/HT212534',
-                'https://ubuntu.com/security/notices/USN-4738-1',
-                'https://ubuntu.com/security/notices/USN-4745-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-23841',
-                'https://www.debian.org/security/2021/dsa-4855',
-                'https://www.openssl.org/news/secadv/20210216.txt',
-                'https://www.oracle.com//security-alerts/cpujul2021.html',
-                'https://www.oracle.com/security-alerts/cpuApr2021.html',
-                'https://www.oracle.com/security-alerts/cpuapr2022.html',
-                'https://www.oracle.com/security-alerts/cpuoct2021.html',
-                'https://www.tenable.com/security/tns-2021-03',
-                'https://www.tenable.com/security/tns-2021-09'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: NULL pointer dereference in X509_issuer_and_serial_hash()'
-            },
-            {
-              'cve':  'CVE-2021-3449',
-              'cvss': {
-                'bitnami': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'ghsa': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'nvd': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-476'
-              ],
-              'description':   'An OpenSSL TLS server may crash if sent a maliciously crafted renegotiation ClientHello message from a client. If a TLSv1.2 renegotiation ClientHello omits the signature_algorithms extension (where it was present in the initial ClientHello), but includes a signature_algorithms_cert extension then a NULL pointer dereference will result, leading to a crash and a denial of service attack. A server is only vulnerable if it has TLSv1.2 and renegotiation enabled (which is the default configuration). OpenSSL TLS clients are not impacted by this issue. All OpenSSL 1.1.1 versions are affected by this issue. Users of these versions should upgrade to OpenSSL 1.1.1k. OpenSSL 1.0.2 is not impacted by this issue. Fixed in OpenSSL 1.1.1k (Affected 1.1.1-1.1.1j).',
-              'diffID':        'sha256:777b2c648970480f50f5b4d0af8f9a8ea798eea43dbcf40ce4a8c7118736bdcf',
-              'fixedVersions': [
-                '1.1.1k-r0'
-              ],
-              'installedVersion': '1.1.1i-r0',
-              'packageName':      'libcrypto1.1',
-              'purl':             'pkg:apk/alpine/libcrypto1.1@1.1.1i-r0?arch=x86_64&distro=3.12.3',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2021/03/27/1',
-                'http://www.openwall.com/lists/oss-security/2021/03/27/2',
-                'http://www.openwall.com/lists/oss-security/2021/03/28/3',
-                'http://www.openwall.com/lists/oss-security/2021/03/28/4',
-                'https://access.redhat.com/security/cve/CVE-2021-3449',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=1941547',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=1941554',
-                'https://cert-portal.siemens.com/productcert/pdf/ssa-389290.pdf',
-                'https://cert-portal.siemens.com/productcert/pdf/ssa-772220.pdf',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-3449',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-3450',
-                'https://errata.rockylinux.org/RLSA-2021:1024',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=fb9fa6b51defd48157eeb207f52181f735d96148',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=fb9fa6b51defd48157eeb207f52181f735d96148',
-                'https://github.com/alexcrichton/openssl-src-rs',
-                'https://github.com/nodejs/node/pull/38083',
-                'https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA44845',
-                'https://kc.mcafee.com/corporate/index?page=content&id=SB10356',
-                'https://linux.oracle.com/cve/CVE-2021-3449.html',
-                'https://linux.oracle.com/errata/ELSA-2021-9151.html',
-                'https://lists.debian.org/debian-lts-announce/2021/08/msg00029.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CCBFLLVQVILIVGZMBJL3IXZGKWQISYNP/',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/CCBFLLVQVILIVGZMBJL3IXZGKWQISYNP',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-3449',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2021-0013',
-                'https://rustsec.org/advisories/RUSTSEC-2021-0055',
-                'https://rustsec.org/advisories/RUSTSEC-2021-0055.html',
-                'https://security.FreeBSD.org/advisories/FreeBSD-SA-21:07.openssl.asc',
-                'https://security.gentoo.org/glsa/202103-03',
-                'https://security.netapp.com/advisory/ntap-20210326-0006',
-                'https://security.netapp.com/advisory/ntap-20210326-0006/',
-                'https://security.netapp.com/advisory/ntap-20210513-0002',
-                'https://security.netapp.com/advisory/ntap-20210513-0002/',
-                'https://security.netapp.com/advisory/ntap-20240621-0006/',
-                'https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-openssl-2021-GHY28dJd',
-                'https://ubuntu.com/security/notices/USN-4891-1',
-                'https://ubuntu.com/security/notices/USN-5038-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-3449',
-                'https://www.debian.org/security/2021/dsa-4875',
-                'https://www.openssl.org/news/secadv/20210325.txt',
-                'https://www.oracle.com//security-alerts/cpujul2021.html',
-                'https://www.oracle.com/security-alerts/cpuApr2021.html',
-                'https://www.oracle.com/security-alerts/cpuapr2022.html',
-                'https://www.oracle.com/security-alerts/cpujul2022.html',
-                'https://www.oracle.com/security-alerts/cpuoct2021.html',
-                'https://www.tenable.com/security/tns-2021-05',
-                'https://www.tenable.com/security/tns-2021-06',
-                'https://www.tenable.com/security/tns-2021-09',
-                'https://www.tenable.com/security/tns-2021-10'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: NULL pointer dereference in signature_algorithms processing'
-            },
-            {
-              'cve':  'CVE-2021-23839',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '3.7',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N'
-                },
-                'redhat': {
-                  'v3score':  '3.7',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-327'
-              ],
-              'description':   'OpenSSL 1.0.2 supports SSLv2. If a client attempts to negotiate SSLv2 with a server that is configured to support both SSLv2 and more recent SSL and TLS versions then a check is made for a version rollback attack when unpadding an RSA signature. Clients that support SSL or TLS versions greater than SSLv2 are supposed to use a special form of padding. A server that supports greater than SSLv2 is supposed to reject connection attempts from a client where this special form of padding is present, because this indicates that a version rollback has occurred (i.e. both client and server support greater than SSLv2, and yet this is the version that is being requested). The implementation of this padding check inverted the logic so that the connection attempt is accepted if the padding is present, and rejected if it is absent. This means that such as server will accept a connection if a version rollback attack has occurred. Further the server will erroneously reject a connection if a normal SSLv2 connection attempt is made. Only OpenSSL 1.0.2 servers from version 1.0.2s to 1.0.2x are affected by this issue. In order to be vulnerable a 1.0.2 server must: 1) have configured SSLv2 support at compile time (this is off by default), 2) have configured SSLv2 support at runtime (this is off by default), 3) have configured SSLv2 ciphersuites (these are not in the default ciphersuite list) OpenSSL 1.1.1 does not have SSLv2 support and therefore is not vulnerable to this issue. The underlying error is in the implementation of the RSA_padding_check_SSLv23() function. This also affects the RSA_SSLV23_PADDING padding mode used by various other functions. Although 1.1.1 does not support SSLv2 the RSA_padding_check_SSLv23() function still exists, as does the RSA_SSLV23_PADDING padding mode. Applications that directly call that function or use that padding mode will encounter this issue. However since there is no support for the SSLv2 protocol in 1.1.1 this is considered a bug and not a security issue in that version. OpenSSL 1.0.2 is out of support and no longer receiving public updates. Premium support customers of OpenSSL 1.0.2 should upgrade to 1.0.2y. Other users should upgrade to 1.1.1j. Fixed in OpenSSL 1.0.2y (Affected 1.0.2s-1.0.2x).',
-              'diffID':        'sha256:777b2c648970480f50f5b4d0af8f9a8ea798eea43dbcf40ce4a8c7118736bdcf',
-              'fixedVersions': [
-                '1.1.1j-r0'
-              ],
-              'installedVersion': '1.1.1i-r0',
-              'packageName':      'libcrypto1.1',
-              'purl':             'pkg:apk/alpine/libcrypto1.1@1.1.1i-r0?arch=x86_64&distro=3.12.3',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-23839',
-                'https://cert-portal.siemens.com/productcert/pdf/ssa-637483.pdf',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=30919ab80a478f2d81f2e9acdcca3fa4740cd547',
-                'https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA44846',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-23839',
-                'https://security.netapp.com/advisory/ntap-20210219-0009/',
-                'https://security.netapp.com/advisory/ntap-20240621-0006/',
-                'https://www.cve.org/CVERecord?id=CVE-2021-23839',
-                'https://www.openssl.org/news/secadv/20210216.txt',
-                'https://www.oracle.com//security-alerts/cpujul2021.html',
-                'https://www.oracle.com/security-alerts/cpuApr2021.html',
-                'https://www.oracle.com/security-alerts/cpuapr2022.html',
-                'https://www.oracle.com/security-alerts/cpuoct2021.html'
-              ],
-              'severity':   'LOW',
-              'suppressed': false,
-              'title':      'openssl: incorrect SSLv2 rollback protection'
-            },
-            {
-              'cve':  'CVE-2021-3711',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '9.8',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'nvd': {
-                  'v3score':  '9.8',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '9.8',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-120'
-              ],
-              'description':   'In order to decrypt SM2 encrypted data an application is expected to call the API function EVP_PKEY_decrypt(). Typically an application will call this function twice. The first time, on entry, the "out" parameter can be NULL and, on exit, the "outlen" parameter is populated with the buffer size required to hold the decrypted plaintext. The application can then allocate a sufficiently sized buffer and call EVP_PKEY_decrypt() again, but this time passing a non-NULL value for the "out" parameter. A bug in the implementation of the SM2 decryption code means that the calculation of the buffer size required to hold the plaintext returned by the first call to EVP_PKEY_decrypt() can be smaller than the actual size required by the second call. This can lead to a buffer overflow when EVP_PKEY_decrypt() is called by the application a second time with a buffer that is too small. A malicious attacker who is able present SM2 content for decryption to an application could cause attacker chosen data to overflow the buffer by up to a maximum of 62 bytes altering the contents of other data held after the buffer, possibly changing application behaviour or causing the application to crash. The location of the buffer is application dependent but is typically heap allocated. Fixed in OpenSSL 1.1.1l (Affected 1.1.1-1.1.1k).',
-              'diffID':        'sha256:777b2c648970480f50f5b4d0af8f9a8ea798eea43dbcf40ce4a8c7118736bdcf',
-              'fixedVersions': [
-                '1.1.1l-r0'
-              ],
-              'installedVersion': '1.1.1i-r0',
-              'packageName':      'libssl1.1',
-              'purl':             'pkg:apk/alpine/libssl1.1@1.1.1i-r0?arch=x86_64&distro=3.12.3',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2021/08/26/2',
-                'https://access.redhat.com/security/cve/CVE-2021-3711',
-                'https://cert-portal.siemens.com/productcert/pdf/ssa-389290.pdf',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=59f5e75f3bced8fc0e130d72a3f582cf7b480b46',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=59f5e75f3bced8fc0e130d72a3f582cf7b480b46',
-                'https://lists.apache.org/thread.html/r18995de860f0e63635f3008fd2a6aca82394249476d21691e7c59c9e%40%3Cdev.tomcat.apache.org%3E',
-                'https://lists.apache.org/thread.html/r18995de860f0e63635f3008fd2a6aca82394249476d21691e7c59c9e@%3Cdev.tomcat.apache.org%3E',
-                'https://lists.apache.org/thread.html/rad5d9f83f0d11fb3f8bb148d179b8a9ad7c6a17f18d70e5805a713d1%40%3Cdev.tomcat.apache.org%3E',
-                'https://lists.apache.org/thread.html/rad5d9f83f0d11fb3f8bb148d179b8a9ad7c6a17f18d70e5805a713d1@%3Cdev.tomcat.apache.org%3E',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-3711',
-                'https://rustsec.org/advisories/RUSTSEC-2021-0097.html',
-                'https://security.gentoo.org/glsa/202209-02',
-                'https://security.gentoo.org/glsa/202210-02',
-                'https://security.netapp.com/advisory/ntap-20210827-0010',
-                'https://security.netapp.com/advisory/ntap-20210827-0010/',
-                'https://security.netapp.com/advisory/ntap-20211022-0003',
-                'https://security.netapp.com/advisory/ntap-20211022-0003/',
-                'https://security.netapp.com/advisory/ntap-20240621-0006',
-                'https://security.netapp.com/advisory/ntap-20240621-0006/',
-                'https://ubuntu.com/security/notices/USN-5051-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-3711',
-                'https://www.debian.org/security/2021/dsa-4963',
-                'https://www.openssl.org/news/secadv/20210824.txt',
-                'https://www.oracle.com/security-alerts/cpuapr2022.html',
-                'https://www.oracle.com/security-alerts/cpujan2022.html',
-                'https://www.oracle.com/security-alerts/cpuoct2021.html',
-                'https://www.tenable.com/security/tns-2021-16',
-                'https://www.tenable.com/security/tns-2022-02'
-              ],
-              'severity':   'CRITICAL',
-              'suppressed': false,
-              'title':      'openssl: SM2 Decryption Buffer Overflow'
-            },
-            {
-              'cve':  'CVE-2021-23840',
-              'cvss': {
-                'bitnami': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'ghsa': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'nvd': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-190'
-              ],
-              'description':   'Calls to EVP_CipherUpdate, EVP_EncryptUpdate and EVP_DecryptUpdate may overflow the output length argument in some cases where the input length is close to the maximum permissable length for an integer on the platform. In such cases the return value from the function call will be 1 (indicating success), but the output length value will be negative. This could cause applications to behave incorrectly or crash. OpenSSL versions 1.1.1i and below are affected by this issue. Users of these versions should upgrade to OpenSSL 1.1.1j. OpenSSL versions 1.0.2x and below are affected by this issue. However OpenSSL 1.0.2 is out of support and no longer receiving public updates. Premium support customers of OpenSSL 1.0.2 should upgrade to 1.0.2y. Other users should upgrade to 1.1.1j. Fixed in OpenSSL 1.1.1j (Affected 1.1.1-1.1.1i). Fixed in OpenSSL 1.0.2y (Affected 1.0.2-1.0.2x).',
-              'diffID':        'sha256:777b2c648970480f50f5b4d0af8f9a8ea798eea43dbcf40ce4a8c7118736bdcf',
-              'fixedVersions': [
-                '1.1.1j-r0'
-              ],
-              'installedVersion': '1.1.1i-r0',
-              'packageName':      'libssl1.1',
-              'purl':             'pkg:apk/alpine/libssl1.1@1.1.1i-r0?arch=x86_64&distro=3.12.3',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-23840',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=1908036',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=1930310',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=1930324',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=1934534',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=1934600',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=1939637',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=1940085',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=1965362',
-                'https://cert-portal.siemens.com/productcert/pdf/ssa-389290.pdf',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-23840',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-23841',
-                'https://errata.rockylinux.org/RLSA-2021:4424',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=6a51b9e1d0cf0bf8515f7201b68fb0a3482b3dc1',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=9b1129239f3ebb1d1c98ce9ed41d5c9476c47cb2',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=6a51b9e1d0cf0bf8515f7201b68fb0a3482b3dc1',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=9b1129239f3ebb1d1c98ce9ed41d5c9476c47cb2',
-                'https://github.com/alexcrichton/openssl-src-rs',
-                'https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA44846',
-                'https://kc.mcafee.com/corporate/index?page=content&id=SB10366',
-                'https://linux.oracle.com/cve/CVE-2021-23840.html',
-                'https://linux.oracle.com/errata/ELSA-2021-9561.html',
-                'https://lists.apache.org/thread.html/r58af02e294bd07f487e2c64ffc0a29b837db5600e33b6e698b9d696b%40%3Cissues.bookkeeper.apache.org%3E',
-                'https://lists.apache.org/thread.html/r58af02e294bd07f487e2c64ffc0a29b837db5600e33b6e698b9d696b@%3Cissues.bookkeeper.apache.org%3E',
-                'https://lists.apache.org/thread.html/rf4c02775860db415b4955778a131c2795223f61cb8c6a450893651e4%40%3Cissues.bookkeeper.apache.org%3E',
-                'https://lists.apache.org/thread.html/rf4c02775860db415b4955778a131c2795223f61cb8c6a450893651e4@%3Cissues.bookkeeper.apache.org%3E',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-23840',
-                'https://rustsec.org/advisories/RUSTSEC-2021-0057.html',
-                'https://security.gentoo.org/glsa/202103-03',
-                'https://security.netapp.com/advisory/ntap-20210219-0009',
-                'https://security.netapp.com/advisory/ntap-20210219-0009/',
-                'https://security.netapp.com/advisory/ntap-20240621-0006/',
-                'https://ubuntu.com/security/notices/USN-4738-1',
-                'https://ubuntu.com/security/notices/USN-5088-1',
-                'https://ubuntu.com/security/notices/USN-7018-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-23840',
-                'https://www.debian.org/security/2021/dsa-4855',
-                'https://www.openssl.org/news/secadv/20210216.txt',
-                'https://www.oracle.com//security-alerts/cpujul2021.html',
-                'https://www.oracle.com/security-alerts/cpuApr2021.html',
-                'https://www.oracle.com/security-alerts/cpuapr2022.html',
-                'https://www.oracle.com/security-alerts/cpujan2022.html',
-                'https://www.oracle.com/security-alerts/cpuoct2021.html',
-                'https://www.tenable.com/security/tns-2021-03',
-                'https://www.tenable.com/security/tns-2021-09',
-                'https://www.tenable.com/security/tns-2021-10'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: integer overflow in CipherUpdate'
-            },
-            {
-              'cve':  'CVE-2021-3450',
-              'cvss': {
-                'bitnami': {
-                  'v3score':  '7.4',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N'
-                },
-                'ghsa': {
-                  'v3score':  '7.4',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N'
-                },
-                'nvd': {
-                  'v3score':  '7.4',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N'
-                },
-                'redhat': {
-                  'v3score':  '7.4',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-295'
-              ],
-              'description':   'The X509_V_FLAG_X509_STRICT flag enables additional security checks of the certificates present in a certificate chain. It is not set by default. Starting from OpenSSL version 1.1.1h a check to disallow certificates in the chain that have explicitly encoded elliptic curve parameters was added as an additional strict check. An error in the implementation of this check meant that the result of a previous check to confirm that certificates in the chain are valid CA certificates was overwritten. This effectively bypasses the check that non-CA certificates must not be able to issue other certificates. If a "purpose" has been configured then there is a subsequent opportunity for checks that the certificate is a valid CA. All of the named "purpose" values implemented in libcrypto perform this check. Therefore, where a purpose is set the certificate chain will still be rejected even when the strict flag has been used. A purpose is set by default in libssl client and server certificate verification routines, but it can be overridden or removed by an application. In order to be affected, an application must explicitly set the X509_V_FLAG_X509_STRICT verification flag and either not set a purpose for the certificate verification or, in the case of TLS client or server applications, override the default purpose. OpenSSL versions 1.1.1h and newer are affected by this issue. Users of these versions should upgrade to OpenSSL 1.1.1k. OpenSSL 1.0.2 is not impacted by this issue. Fixed in OpenSSL 1.1.1k (Affected 1.1.1h-1.1.1j).',
-              'diffID':        'sha256:777b2c648970480f50f5b4d0af8f9a8ea798eea43dbcf40ce4a8c7118736bdcf',
-              'fixedVersions': [
-                '1.1.1k-r0'
-              ],
-              'installedVersion': '1.1.1i-r0',
-              'packageName':      'libssl1.1',
-              'purl':             'pkg:apk/alpine/libssl1.1@1.1.1i-r0?arch=x86_64&distro=3.12.3',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2021/03/27/1',
-                'http://www.openwall.com/lists/oss-security/2021/03/27/2',
-                'http://www.openwall.com/lists/oss-security/2021/03/28/3',
-                'http://www.openwall.com/lists/oss-security/2021/03/28/4',
-                'https://access.redhat.com/security/cve/CVE-2021-3450',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=1941547',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=1941554',
-                'https://cert-portal.siemens.com/productcert/pdf/ssa-389290.pdf',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-3449',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-3450',
-                'https://errata.rockylinux.org/RLSA-2021:1024',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=2a40b7bc7b94dd7de897a74571e7024f0cf0d63b',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=2a40b7bc7b94dd7de897a74571e7024f0cf0d63b',
-                'https://github.com/alexcrichton/openssl-src-rs',
-                'https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA44845',
-                'https://kc.mcafee.com/corporate/index?page=content&id=SB10356',
-                'https://linux.oracle.com/cve/CVE-2021-3450.html',
-                'https://linux.oracle.com/errata/ELSA-2021-9151.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CCBFLLVQVILIVGZMBJL3IXZGKWQISYNP/',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/CCBFLLVQVILIVGZMBJL3IXZGKWQISYNP',
-                'https://mta.openssl.org/pipermail/openssl-announce/2021-March/000198.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-3450',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2021-0013',
-                'https://rustsec.org/advisories/RUSTSEC-2021-0056.html',
-                'https://security.FreeBSD.org/advisories/FreeBSD-SA-21:07.openssl.asc',
-                'https://security.gentoo.org/glsa/202103-03',
-                'https://security.netapp.com/advisory/ntap-20210326-0006',
-                'https://security.netapp.com/advisory/ntap-20210326-0006/',
-                'https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-openssl-2021-GHY28dJd',
-                'https://www.cve.org/CVERecord?id=CVE-2021-3450',
-                'https://www.openssl.org/news/secadv/20210325.txt',
-                'https://www.oracle.com//security-alerts/cpujul2021.html',
-                'https://www.oracle.com/security-alerts/cpuApr2021.html',
-                'https://www.oracle.com/security-alerts/cpuapr2022.html',
-                'https://www.oracle.com/security-alerts/cpujul2022.html',
-                'https://www.oracle.com/security-alerts/cpuoct2021.html',
-                'https://www.tenable.com/security/tns-2021-05',
-                'https://www.tenable.com/security/tns-2021-08',
-                'https://www.tenable.com/security/tns-2021-09'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: CA certificate check bypass with X509_V_FLAG_X509_STRICT'
-            },
-            {
-              'cve':  'CVE-2021-3712',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '7.4',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H'
-                },
-                'nvd': {
-                  'v3score':  '7.4',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.4',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-125'
-              ],
-              'description':   "ASN.1 strings are represented internally within OpenSSL as an ASN1_STRING structure which contains a buffer holding the string data and a field holding the buffer length. This contrasts with normal C strings which are repesented as a buffer for the string data which is terminated with a NUL (0) byte. Although not a strict requirement, ASN.1 strings that are parsed using OpenSSL's own \"d2i\" functions (and other similar parsing functions) as well as any string whose value has been set with the ASN1_STRING_set() function will additionally NUL terminate the byte array in the ASN1_STRING structure. However, it is possible for applications to directly construct valid ASN1_STRING structures which do not NUL terminate the byte array by directly setting the \"data\" and \"length\" fields in the ASN1_STRING array. This can also happen by using the ASN1_STRING_set0() function. Numerous OpenSSL functions that print ASN.1 data have been found to assume that the ASN1_STRING byte array will be NUL terminated, even though this is not guaranteed for strings that have been directly constructed. Where an application requests an ASN.1 structure to be printed, and where that ASN.1 structure contains ASN1_STRINGs that have been directly constructed by the application without NUL terminating the \"data\" field, then a read buffer overrun can occur. The same thing can also occur during name constraints processing of certificates (for example if a certificate has been directly constructed by the application instead of loading it via the OpenSSL parsing functions, and the certificate contains non NUL terminated ASN1_STRING structures). It can also occur in the X509_get1_email(), X509_REQ_get1_email() and X509_get1_ocsp() functions. If a malicious actor can cause an application to directly construct an ASN1_STRING and then process it through one of the affected OpenSSL functions then this issue could be hit. This might result in a crash (causing a Denial of Service attack). It could also result in the disclosure of private memory contents (such as private keys, or sensitive plaintext). Fixed in OpenSSL 1.1.1l (Affected 1.1.1-1.1.1k). Fixed in OpenSSL 1.0.2za (Affected 1.0.2-1.0.2y).",
-              'diffID':        'sha256:777b2c648970480f50f5b4d0af8f9a8ea798eea43dbcf40ce4a8c7118736bdcf',
-              'fixedVersions': [
-                '1.1.1l-r0'
-              ],
-              'installedVersion': '1.1.1i-r0',
-              'packageName':      'libssl1.1',
-              'purl':             'pkg:apk/alpine/libssl1.1@1.1.1i-r0?arch=x86_64&distro=3.12.3',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2021/08/26/2',
-                'https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2021-3712.json',
-                'https://access.redhat.com/security/cve/CVE-2021-3712',
-                'https://cert-portal.siemens.com/productcert/pdf/ssa-244969.pdf',
-                'https://cert-portal.siemens.com/productcert/pdf/ssa-389290.pdf',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=94d23fcff9b2a7a8368dfe52214d5c2569882c11',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=ccb0a11145ee72b042d10593a64eaf9e8a55ec12',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=94d23fcff9b2a7a8368dfe52214d5c2569882c11',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=ccb0a11145ee72b042d10593a64eaf9e8a55ec12',
-                'https://kc.mcafee.com/corporate/index?page=content&id=SB10366',
-                'https://linux.oracle.com/cve/CVE-2021-3712.html',
-                'https://linux.oracle.com/errata/ELSA-2022-9023.html',
-                'https://lists.apache.org/thread.html/r18995de860f0e63635f3008fd2a6aca82394249476d21691e7c59c9e%40%3Cdev.tomcat.apache.org%3E',
-                'https://lists.apache.org/thread.html/r18995de860f0e63635f3008fd2a6aca82394249476d21691e7c59c9e@%3Cdev.tomcat.apache.org%3E',
-                'https://lists.apache.org/thread.html/rad5d9f83f0d11fb3f8bb148d179b8a9ad7c6a17f18d70e5805a713d1%40%3Cdev.tomcat.apache.org%3E',
-                'https://lists.apache.org/thread.html/rad5d9f83f0d11fb3f8bb148d179b8a9ad7c6a17f18d70e5805a713d1@%3Cdev.tomcat.apache.org%3E',
-                'https://lists.debian.org/debian-lts-announce/2021/09/msg00014.html',
-                'https://lists.debian.org/debian-lts-announce/2021/09/msg00021.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-3712',
-                'https://rustsec.org/advisories/RUSTSEC-2021-0098.html',
-                'https://security.gentoo.org/glsa/202209-02',
-                'https://security.gentoo.org/glsa/202210-02',
-                'https://security.netapp.com/advisory/ntap-20210827-0010',
-                'https://security.netapp.com/advisory/ntap-20210827-0010/',
-                'https://security.netapp.com/advisory/ntap-20240621-0006',
-                'https://security.netapp.com/advisory/ntap-20240621-0006/',
-                'https://ubuntu.com/security/notices/USN-5051-1',
-                'https://ubuntu.com/security/notices/USN-5051-2',
-                'https://ubuntu.com/security/notices/USN-5051-3',
-                'https://ubuntu.com/security/notices/USN-5051-4 (regression only in trusty/esm)',
-                'https://ubuntu.com/security/notices/USN-5088-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-3712',
-                'https://www.debian.org/security/2021/dsa-4963',
-                'https://www.openssl.org/news/secadv/20210824.txt',
-                'https://www.oracle.com/security-alerts/cpuapr2022.html',
-                'https://www.oracle.com/security-alerts/cpujan2022.html',
-                'https://www.oracle.com/security-alerts/cpuoct2021.html',
-                'https://www.tenable.com/security/tns-2021-16',
-                'https://www.tenable.com/security/tns-2022-02'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: Read buffer overruns processing ASN.1 strings'
-            },
-            {
-              'cve':  'CVE-2022-0778',
-              'cvss': {
-                'bitnami': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'ghsa': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'nvd': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-835'
-              ],
-              'description':   'The BN_mod_sqrt() function, which computes a modular square root, contains a bug that can cause it to loop forever for non-prime moduli. Internally this function is used when parsing certificates that contain elliptic curve public keys in compressed form or explicit elliptic curve parameters with a base point encoded in compressed form. It is possible to trigger the infinite loop by crafting a certificate that has invalid explicit curve parameters. Since certificate parsing happens prior to verification of the certificate signature, any process that parses an externally supplied certificate may thus be subject to a denial of service attack. The infinite loop can also be reached when parsing crafted private keys as they can contain explicit elliptic curve parameters. Thus vulnerable situations include: - TLS clients consuming server certificates - TLS servers consuming client certificates - Hosting providers taking certificates or private keys from customers - Certificate authorities parsing certification requests from subscribers - Anything else which parses ASN.1 elliptic curve parameters Also any other applications that use the BN_mod_sqrt() where the attacker can control the parameter values are vulnerable to this DoS issue. In the OpenSSL 1.0.2 version the public key is not parsed during initial parsing of the certificate which makes it slightly harder to trigger the infinite loop. However any operation which requires the public key from the certificate will trigger the infinite loop. In particular the attacker can use a self-signed certificate to trigger the loop during verification of the certificate signature. This issue affects OpenSSL versions 1.0.2, 1.1.1 and 3.0. It was addressed in the releases of 1.1.1n and 3.0.2 on the 15th March 2022. Fixed in OpenSSL 3.0.2 (Affected 3.0.0,3.0.1). Fixed in OpenSSL 1.1.1n (Affected 1.1.1-1.1.1m). Fixed in OpenSSL 1.0.2zd (Affected 1.0.2-1.0.2zc).',
-              'diffID':        'sha256:777b2c648970480f50f5b4d0af8f9a8ea798eea43dbcf40ce4a8c7118736bdcf',
-              'fixedVersions': [
-                '1.1.1n-r0'
-              ],
-              'installedVersion': '1.1.1i-r0',
-              'packageName':      'libssl1.1',
-              'purl':             'pkg:apk/alpine/libssl1.1@1.1.1i-r0?arch=x86_64&distro=3.12.3',
-              'references':       [
-                'http://packetstormsecurity.com/files/167344/OpenSSL-1.0.2-1.1.1-3.0-BN_mod_sqrt-Infinite-Loop.html',
-                'http://seclists.org/fulldisclosure/2022/May/33',
-                'http://seclists.org/fulldisclosure/2022/May/35',
-                'http://seclists.org/fulldisclosure/2022/May/38',
-                'https://access.redhat.com/errata/RHSA-2022:5326',
-                'https://access.redhat.com/security/cve/CVE-2022-0778',
-                'https://bugzilla.redhat.com/2062202',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2062202',
-                'https://cert-portal.siemens.com/productcert/pdf/ssa-712929.pdf',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-0778',
-                'https://errata.almalinux.org/8/ALSA-2022-5326.html',
-                'https://errata.rockylinux.org/RLSA-2022:4899',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=3118eb64934499d93db3230748a452351d1d9a65',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=380085481c64de749a6dd25cdf0bcf4360b30f83',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=a466912611aa6cbdf550cd10601390e587451246',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=3118eb64934499d93db3230748a452351d1d9a65',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=380085481c64de749a6dd25cdf0bcf4360b30f83',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=a466912611aa6cbdf550cd10601390e587451246',
-                'https://linux.oracle.com/cve/CVE-2022-0778.html',
-                'https://linux.oracle.com/errata/ELSA-2022-9272.html',
-                'https://lists.debian.org/debian-lts-announce/2022/03/msg00023.html',
-                'https://lists.debian.org/debian-lts-announce/2022/03/msg00024.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/323SNN6ZX7PRJJWP2BUAFLPUAE42XWLZ',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/323SNN6ZX7PRJJWP2BUAFLPUAE42XWLZ/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GDB3GQVJPXJE7X5C5JN6JAA4XUDWD6E6',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GDB3GQVJPXJE7X5C5JN6JAA4XUDWD6E6/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/W6K3PR542DXWLEFFMFIDMME4CWMHJRMG',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/W6K3PR542DXWLEFFMFIDMME4CWMHJRMG/',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/323SNN6ZX7PRJJWP2BUAFLPUAE42XWLZ',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/GDB3GQVJPXJE7X5C5JN6JAA4XUDWD6E6',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/W6K3PR542DXWLEFFMFIDMME4CWMHJRMG',
-                'https://nvd.nist.gov/vuln/detail/CVE-2022-0778',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2022-0002',
-                'https://rustsec.org/advisories/RUSTSEC-2022-0014.html',
-                'https://security.gentoo.org/glsa/202210-02',
-                'https://security.netapp.com/advisory/ntap-20220321-0002',
-                'https://security.netapp.com/advisory/ntap-20220321-0002/',
-                'https://security.netapp.com/advisory/ntap-20220429-0005',
-                'https://security.netapp.com/advisory/ntap-20220429-0005/',
-                'https://security.netapp.com/advisory/ntap-20240621-0006',
-                'https://security.netapp.com/advisory/ntap-20240621-0006/',
-                'https://support.apple.com/kb/HT213255',
-                'https://support.apple.com/kb/HT213256',
-                'https://support.apple.com/kb/HT213257',
-                'https://ubuntu.com/security/notices/USN-5328-1',
-                'https://ubuntu.com/security/notices/USN-5328-2',
-                'https://ubuntu.com/security/notices/USN-6457-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2022-0778',
-                'https://www.debian.org/security/2022/dsa-5103',
-                'https://www.openssl.org/news/secadv/20220315.txt',
-                'https://www.oracle.com/security-alerts/cpuapr2022.html',
-                'https://www.oracle.com/security-alerts/cpujul2022.html',
-                'https://www.tenable.com/security/tns-2022-06',
-                'https://www.tenable.com/security/tns-2022-07',
-                'https://www.tenable.com/security/tns-2022-08',
-                'https://www.tenable.com/security/tns-2022-09'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: Infinite loop in BN_mod_sqrt() reachable when parsing certificates'
-            },
-            {
-              'cve':  'CVE-2021-23841',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'nvd': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-476'
-              ],
-              'description':   'The OpenSSL public API function X509_issuer_and_serial_hash() attempts to create a unique hash value based on the issuer and serial number data contained within an X509 certificate. However it fails to correctly handle any errors that may occur while parsing the issuer field (which might occur if the issuer field is maliciously constructed). This may subsequently result in a NULL pointer deref and a crash leading to a potential denial of service attack. The function X509_issuer_and_serial_hash() is never directly called by OpenSSL itself so applications are only vulnerable if they use this function directly and they use it on certificates that may have been obtained from untrusted sources. OpenSSL versions 1.1.1i and below are affected by this issue. Users of these versions should upgrade to OpenSSL 1.1.1j. OpenSSL versions 1.0.2x and below are affected by this issue. However OpenSSL 1.0.2 is out of support and no longer receiving public updates. Premium support customers of OpenSSL 1.0.2 should upgrade to 1.0.2y. Other users should upgrade to 1.1.1j. Fixed in OpenSSL 1.1.1j (Affected 1.1.1-1.1.1i). Fixed in OpenSSL 1.0.2y (Affected 1.0.2-1.0.2x).',
-              'diffID':        'sha256:777b2c648970480f50f5b4d0af8f9a8ea798eea43dbcf40ce4a8c7118736bdcf',
-              'fixedVersions': [
-                '1.1.1j-r0'
-              ],
-              'installedVersion': '1.1.1i-r0',
-              'packageName':      'libssl1.1',
-              'purl':             'pkg:apk/alpine/libssl1.1@1.1.1i-r0?arch=x86_64&distro=3.12.3',
-              'references':       [
-                'http://seclists.org/fulldisclosure/2021/May/67',
-                'http://seclists.org/fulldisclosure/2021/May/68',
-                'http://seclists.org/fulldisclosure/2021/May/70',
-                'https://access.redhat.com/security/cve/CVE-2021-23841',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=1908036',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=1930310',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=1930324',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=1934534',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=1934600',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=1939637',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=1940085',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=1965362',
-                'https://cert-portal.siemens.com/productcert/pdf/ssa-637483.pdf',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-23840',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-23841',
-                'https://errata.rockylinux.org/RLSA-2021:4424',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=122a19ab48091c657f7cb1fb3af9fc07bd557bbf',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=8252ee4d90f3f2004d3d0aeeed003ad49c9a7807',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=122a19ab48091c657f7cb1fb3af9fc07bd557bbf',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=6a51b9e1d0cf0bf8515f7201b68fb0a3482b3dc1',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=8252ee4d90f3f2004d3d0aeeed003ad49c9a7807',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=9b1129239f3ebb1d1c98ce9ed41d5c9476c47cb2',
-                'https://github.com/alexcrichton/openssl-src-rs',
-                'https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA44846',
-                'https://linux.oracle.com/cve/CVE-2021-23841.html',
-                'https://linux.oracle.com/errata/ELSA-2021-9561.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-23841',
-                'https://rustsec.org/advisories/RUSTSEC-2021-0058',
-                'https://rustsec.org/advisories/RUSTSEC-2021-0058.html',
-                'https://security.gentoo.org/glsa/202103-03',
-                'https://security.netapp.com/advisory/ntap-20210219-0009',
-                'https://security.netapp.com/advisory/ntap-20210219-0009/',
-                'https://security.netapp.com/advisory/ntap-20210513-0002',
-                'https://security.netapp.com/advisory/ntap-20210513-0002/',
-                'https://security.netapp.com/advisory/ntap-20240621-0006/',
-                'https://support.apple.com/kb/HT212528',
-                'https://support.apple.com/kb/HT212529',
-                'https://support.apple.com/kb/HT212534',
-                'https://ubuntu.com/security/notices/USN-4738-1',
-                'https://ubuntu.com/security/notices/USN-4745-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-23841',
-                'https://www.debian.org/security/2021/dsa-4855',
-                'https://www.openssl.org/news/secadv/20210216.txt',
-                'https://www.oracle.com//security-alerts/cpujul2021.html',
-                'https://www.oracle.com/security-alerts/cpuApr2021.html',
-                'https://www.oracle.com/security-alerts/cpuapr2022.html',
-                'https://www.oracle.com/security-alerts/cpuoct2021.html',
-                'https://www.tenable.com/security/tns-2021-03',
-                'https://www.tenable.com/security/tns-2021-09'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: NULL pointer dereference in X509_issuer_and_serial_hash()'
-            },
-            {
-              'cve':  'CVE-2021-3449',
-              'cvss': {
-                'bitnami': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'ghsa': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'nvd': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-476'
-              ],
-              'description':   'An OpenSSL TLS server may crash if sent a maliciously crafted renegotiation ClientHello message from a client. If a TLSv1.2 renegotiation ClientHello omits the signature_algorithms extension (where it was present in the initial ClientHello), but includes a signature_algorithms_cert extension then a NULL pointer dereference will result, leading to a crash and a denial of service attack. A server is only vulnerable if it has TLSv1.2 and renegotiation enabled (which is the default configuration). OpenSSL TLS clients are not impacted by this issue. All OpenSSL 1.1.1 versions are affected by this issue. Users of these versions should upgrade to OpenSSL 1.1.1k. OpenSSL 1.0.2 is not impacted by this issue. Fixed in OpenSSL 1.1.1k (Affected 1.1.1-1.1.1j).',
-              'diffID':        'sha256:777b2c648970480f50f5b4d0af8f9a8ea798eea43dbcf40ce4a8c7118736bdcf',
-              'fixedVersions': [
-                '1.1.1k-r0'
-              ],
-              'installedVersion': '1.1.1i-r0',
-              'packageName':      'libssl1.1',
-              'purl':             'pkg:apk/alpine/libssl1.1@1.1.1i-r0?arch=x86_64&distro=3.12.3',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2021/03/27/1',
-                'http://www.openwall.com/lists/oss-security/2021/03/27/2',
-                'http://www.openwall.com/lists/oss-security/2021/03/28/3',
-                'http://www.openwall.com/lists/oss-security/2021/03/28/4',
-                'https://access.redhat.com/security/cve/CVE-2021-3449',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=1941547',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=1941554',
-                'https://cert-portal.siemens.com/productcert/pdf/ssa-389290.pdf',
-                'https://cert-portal.siemens.com/productcert/pdf/ssa-772220.pdf',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-3449',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-3450',
-                'https://errata.rockylinux.org/RLSA-2021:1024',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=fb9fa6b51defd48157eeb207f52181f735d96148',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=fb9fa6b51defd48157eeb207f52181f735d96148',
-                'https://github.com/alexcrichton/openssl-src-rs',
-                'https://github.com/nodejs/node/pull/38083',
-                'https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA44845',
-                'https://kc.mcafee.com/corporate/index?page=content&id=SB10356',
-                'https://linux.oracle.com/cve/CVE-2021-3449.html',
-                'https://linux.oracle.com/errata/ELSA-2021-9151.html',
-                'https://lists.debian.org/debian-lts-announce/2021/08/msg00029.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CCBFLLVQVILIVGZMBJL3IXZGKWQISYNP/',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/CCBFLLVQVILIVGZMBJL3IXZGKWQISYNP',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-3449',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2021-0013',
-                'https://rustsec.org/advisories/RUSTSEC-2021-0055',
-                'https://rustsec.org/advisories/RUSTSEC-2021-0055.html',
-                'https://security.FreeBSD.org/advisories/FreeBSD-SA-21:07.openssl.asc',
-                'https://security.gentoo.org/glsa/202103-03',
-                'https://security.netapp.com/advisory/ntap-20210326-0006',
-                'https://security.netapp.com/advisory/ntap-20210326-0006/',
-                'https://security.netapp.com/advisory/ntap-20210513-0002',
-                'https://security.netapp.com/advisory/ntap-20210513-0002/',
-                'https://security.netapp.com/advisory/ntap-20240621-0006/',
-                'https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-openssl-2021-GHY28dJd',
-                'https://ubuntu.com/security/notices/USN-4891-1',
-                'https://ubuntu.com/security/notices/USN-5038-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-3449',
-                'https://www.debian.org/security/2021/dsa-4875',
-                'https://www.openssl.org/news/secadv/20210325.txt',
-                'https://www.oracle.com//security-alerts/cpujul2021.html',
-                'https://www.oracle.com/security-alerts/cpuApr2021.html',
-                'https://www.oracle.com/security-alerts/cpuapr2022.html',
-                'https://www.oracle.com/security-alerts/cpujul2022.html',
-                'https://www.oracle.com/security-alerts/cpuoct2021.html',
-                'https://www.tenable.com/security/tns-2021-05',
-                'https://www.tenable.com/security/tns-2021-06',
-                'https://www.tenable.com/security/tns-2021-09',
-                'https://www.tenable.com/security/tns-2021-10'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: NULL pointer dereference in signature_algorithms processing'
-            },
-            {
-              'cve':  'CVE-2021-23839',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '3.7',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N'
-                },
-                'redhat': {
-                  'v3score':  '3.7',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-327'
-              ],
-              'description':   'OpenSSL 1.0.2 supports SSLv2. If a client attempts to negotiate SSLv2 with a server that is configured to support both SSLv2 and more recent SSL and TLS versions then a check is made for a version rollback attack when unpadding an RSA signature. Clients that support SSL or TLS versions greater than SSLv2 are supposed to use a special form of padding. A server that supports greater than SSLv2 is supposed to reject connection attempts from a client where this special form of padding is present, because this indicates that a version rollback has occurred (i.e. both client and server support greater than SSLv2, and yet this is the version that is being requested). The implementation of this padding check inverted the logic so that the connection attempt is accepted if the padding is present, and rejected if it is absent. This means that such as server will accept a connection if a version rollback attack has occurred. Further the server will erroneously reject a connection if a normal SSLv2 connection attempt is made. Only OpenSSL 1.0.2 servers from version 1.0.2s to 1.0.2x are affected by this issue. In order to be vulnerable a 1.0.2 server must: 1) have configured SSLv2 support at compile time (this is off by default), 2) have configured SSLv2 support at runtime (this is off by default), 3) have configured SSLv2 ciphersuites (these are not in the default ciphersuite list) OpenSSL 1.1.1 does not have SSLv2 support and therefore is not vulnerable to this issue. The underlying error is in the implementation of the RSA_padding_check_SSLv23() function. This also affects the RSA_SSLV23_PADDING padding mode used by various other functions. Although 1.1.1 does not support SSLv2 the RSA_padding_check_SSLv23() function still exists, as does the RSA_SSLV23_PADDING padding mode. Applications that directly call that function or use that padding mode will encounter this issue. However since there is no support for the SSLv2 protocol in 1.1.1 this is considered a bug and not a security issue in that version. OpenSSL 1.0.2 is out of support and no longer receiving public updates. Premium support customers of OpenSSL 1.0.2 should upgrade to 1.0.2y. Other users should upgrade to 1.1.1j. Fixed in OpenSSL 1.0.2y (Affected 1.0.2s-1.0.2x).',
-              'diffID':        'sha256:777b2c648970480f50f5b4d0af8f9a8ea798eea43dbcf40ce4a8c7118736bdcf',
-              'fixedVersions': [
-                '1.1.1j-r0'
-              ],
-              'installedVersion': '1.1.1i-r0',
-              'packageName':      'libssl1.1',
-              'purl':             'pkg:apk/alpine/libssl1.1@1.1.1i-r0?arch=x86_64&distro=3.12.3',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-23839',
-                'https://cert-portal.siemens.com/productcert/pdf/ssa-637483.pdf',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=30919ab80a478f2d81f2e9acdcca3fa4740cd547',
-                'https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA44846',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-23839',
-                'https://security.netapp.com/advisory/ntap-20210219-0009/',
-                'https://security.netapp.com/advisory/ntap-20240621-0006/',
-                'https://www.cve.org/CVERecord?id=CVE-2021-23839',
-                'https://www.openssl.org/news/secadv/20210216.txt',
-                'https://www.oracle.com//security-alerts/cpujul2021.html',
-                'https://www.oracle.com/security-alerts/cpuApr2021.html',
-                'https://www.oracle.com/security-alerts/cpuapr2022.html',
-                'https://www.oracle.com/security-alerts/cpuoct2021.html'
-              ],
-              'severity':   'LOW',
-              'suppressed': false,
-              'title':      'openssl: incorrect SSLv2 rollback protection'
-            },
-            {
-              'cve':  'CVE-2021-28831',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-755'
-              ],
-              'description':   'decompress_gunzip.c in BusyBox through 1.32.1 mishandles the error bit on the huft_build result pointer, with a resultant invalid free or segmentation fault, via malformed gzip data.',
-              'diffID':        'sha256:777b2c648970480f50f5b4d0af8f9a8ea798eea43dbcf40ce4a8c7118736bdcf',
-              'fixedVersions': [
-                '1.31.1-r20'
-              ],
-              'installedVersion': '1.31.1-r19',
-              'packageName':      'ssl_client',
-              'purl':             'pkg:apk/alpine/ssl_client@1.31.1-r19?arch=x86_64&distro=3.12.3',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-28831',
-                'https://git.busybox.net/busybox/commit/?id=f25d254dfd4243698c31a4f3153d4ac72aa9e9bd',
-                'https://lists.debian.org/debian-lts-announce/2021/04/msg00001.html',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/3UDQGJRECXFS5EZVDH2OI45FMO436AC4/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/Z7ZIFKPRR32ZYA3WAA2NXFA3QHHOU6FJ/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZASBW7QRRLY5V2R44MQ4QQM4CZIDHM2U/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-28831',
-                'https://security.gentoo.org/glsa/202105-09',
-                'https://security.netapp.com/advisory/ntap-20250509-0005/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://ubuntu.com/security/notices/USN-5179-2',
-                'https://ubuntu.com/security/notices/USN-6335-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-28831'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: invalid free or segmentation fault via malformed gzip data'
-            },
-            {
-              'cve':  'CVE-2021-42378',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the getvar_i function",
-              'diffID':        'sha256:777b2c648970480f50f5b4d0af8f9a8ea798eea43dbcf40ce4a8c7118736bdcf',
-              'fixedVersions': [
-                '1.31.1-r21'
-              ],
-              'installedVersion': '1.31.1-r19',
-              'packageName':      'ssl_client',
-              'purl':             'pkg:apk/alpine/ssl_client@1.31.1-r19?arch=x86_64&distro=3.12.3',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42378',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42378',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42378'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the getvar_i()'
-            },
-            {
-              'cve':  'CVE-2021-42379',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the next_input_file function",
-              'diffID':        'sha256:777b2c648970480f50f5b4d0af8f9a8ea798eea43dbcf40ce4a8c7118736bdcf',
-              'fixedVersions': [
-                '1.31.1-r21'
-              ],
-              'installedVersion': '1.31.1-r19',
-              'packageName':      'ssl_client',
-              'purl':             'pkg:apk/alpine/ssl_client@1.31.1-r19?arch=x86_64&distro=3.12.3',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42379',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42379',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42379'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the next_input_file()'
-            },
-            {
-              'cve':  'CVE-2021-42380',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the clrvar function",
-              'diffID':        'sha256:777b2c648970480f50f5b4d0af8f9a8ea798eea43dbcf40ce4a8c7118736bdcf',
-              'fixedVersions': [
-                '1.31.1-r21'
-              ],
-              'installedVersion': '1.31.1-r19',
-              'packageName':      'ssl_client',
-              'purl':             'pkg:apk/alpine/ssl_client@1.31.1-r19?arch=x86_64&distro=3.12.3',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42380',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42380',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42380'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the clrvar()'
-            },
-            {
-              'cve':  'CVE-2021-42381',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the hash_init function",
-              'diffID':        'sha256:777b2c648970480f50f5b4d0af8f9a8ea798eea43dbcf40ce4a8c7118736bdcf',
-              'fixedVersions': [
-                '1.31.1-r21'
-              ],
-              'installedVersion': '1.31.1-r19',
-              'packageName':      'ssl_client',
-              'purl':             'pkg:apk/alpine/ssl_client@1.31.1-r19?arch=x86_64&distro=3.12.3',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42381',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42381',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42381'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the hash_init()'
-            },
-            {
-              'cve':  'CVE-2021-42382',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the getvar_s function",
-              'diffID':        'sha256:777b2c648970480f50f5b4d0af8f9a8ea798eea43dbcf40ce4a8c7118736bdcf',
-              'fixedVersions': [
-                '1.31.1-r21'
-              ],
-              'installedVersion': '1.31.1-r19',
-              'packageName':      'ssl_client',
-              'purl':             'pkg:apk/alpine/ssl_client@1.31.1-r19?arch=x86_64&distro=3.12.3',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42382',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42382',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42382'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the getvar_s()'
-            },
-            {
-              'cve':  'CVE-2021-42383',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the evaluate function",
-              'diffID':        'sha256:777b2c648970480f50f5b4d0af8f9a8ea798eea43dbcf40ce4a8c7118736bdcf',
-              'fixedVersions': [
-                '1.31.1-r21'
-              ],
-              'installedVersion': '1.31.1-r19',
-              'packageName':      'ssl_client',
-              'purl':             'pkg:apk/alpine/ssl_client@1.31.1-r19?arch=x86_64&distro=3.12.3',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42383',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42383',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42383'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the evaluate()'
-            },
-            {
-              'cve':  'CVE-2021-42384',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the handle_special function",
-              'diffID':        'sha256:777b2c648970480f50f5b4d0af8f9a8ea798eea43dbcf40ce4a8c7118736bdcf',
-              'fixedVersions': [
-                '1.31.1-r21'
-              ],
-              'installedVersion': '1.31.1-r19',
-              'packageName':      'ssl_client',
-              'purl':             'pkg:apk/alpine/ssl_client@1.31.1-r19?arch=x86_64&distro=3.12.3',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42384',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42384',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42384'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the handle_special()'
-            },
-            {
-              'cve':  'CVE-2021-42385',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the evaluate function",
-              'diffID':        'sha256:777b2c648970480f50f5b4d0af8f9a8ea798eea43dbcf40ce4a8c7118736bdcf',
-              'fixedVersions': [
-                '1.31.1-r21'
-              ],
-              'installedVersion': '1.31.1-r19',
-              'packageName':      'ssl_client',
-              'purl':             'pkg:apk/alpine/ssl_client@1.31.1-r19?arch=x86_64&distro=3.12.3',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42385',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42385',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42385'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the evaluate()'
-            },
-            {
-              'cve':  'CVE-2021-42386',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the nvalloc function",
-              'diffID':        'sha256:777b2c648970480f50f5b4d0af8f9a8ea798eea43dbcf40ce4a8c7118736bdcf',
-              'fixedVersions': [
-                '1.31.1-r21'
-              ],
-              'installedVersion': '1.31.1-r19',
-              'packageName':      'ssl_client',
-              'purl':             'pkg:apk/alpine/ssl_client@1.31.1-r19?arch=x86_64&distro=3.12.3',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42386',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42386',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42386'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the nvalloc()'
-            },
-            {
-              'cve':  'CVE-2022-28391',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '8.8',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-88'
-              ],
-              'description':   "BusyBox through 1.35.0 allows remote attackers to execute arbitrary code if netstat is used to print a DNS PTR record's value to a VT compatible terminal. Alternatively, the attacker could choose to change the terminal's colors.",
-              'diffID':        'sha256:777b2c648970480f50f5b4d0af8f9a8ea798eea43dbcf40ce4a8c7118736bdcf',
-              'fixedVersions': [
-                '1.31.1-r22'
-              ],
-              'installedVersion': '1.31.1-r19',
-              'packageName':      'ssl_client',
-              'purl':             'pkg:apk/alpine/ssl_client@1.31.1-r19?arch=x86_64&distro=3.12.3',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2022-28391',
-                'https://git.alpinelinux.org/aports/plain/main/busybox/0001-libbb-sockaddr2str-ensure-only-printable-characters-.patch',
-                'https://git.alpinelinux.org/aports/plain/main/busybox/0002-nslookup-sanitize-all-printed-strings-with-printable.patch',
-                'https://gitlab.alpinelinux.org/alpine/aports/-/issues/13661',
-                'https://nvd.nist.gov/vuln/detail/CVE-2022-28391',
-                'https://www.cve.org/CVERecord?id=CVE-2022-28391'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: remote attackers may execute arbitrary code if netstat is used'
-            },
-            {
-              'cve':  'CVE-2021-42374',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '5.7',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-125'
-              ],
-              'description':   "An out-of-bounds heap read in Busybox's unlzma applet leads to information leak and denial of service when crafted LZMA-compressed input is decompressed. This can be triggered by any applet/format that",
-              'diffID':        'sha256:777b2c648970480f50f5b4d0af8f9a8ea798eea43dbcf40ce4a8c7118736bdcf',
-              'fixedVersions': [
-                '1.31.1-r21'
-              ],
-              'installedVersion': '1.31.1-r19',
-              'packageName':      'ssl_client',
-              'purl':             'pkg:apk/alpine/ssl_client@1.31.1-r19?arch=x86_64&distro=3.12.3',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42374',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42374',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42374'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'busybox: out-of-bounds read in unlzma applet leads to information leak and denial of service when crafted LZMA-compressed input is decompressed'
-            },
-            {
-              'cve':  'CVE-2022-37434',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '9.8',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-787',
-                'CWE-120'
-              ],
-              'description':   'zlib through 1.2.12 has a heap-based buffer over-read or buffer overflow in inflate in inflate.c via a large gzip header extra field. NOTE: only applications that call inflateGetHeader are affected. Some common applications bundle the affected zlib source code but may be unable to call inflateGetHeader (e.g., see the nodejs/node reference).',
-              'diffID':        'sha256:777b2c648970480f50f5b4d0af8f9a8ea798eea43dbcf40ce4a8c7118736bdcf',
-              'fixedVersions': [
-                '1.2.12-r2'
-              ],
-              'installedVersion': '1.2.11-r3',
-              'packageName':      'zlib',
-              'purl':             'pkg:apk/alpine/zlib@1.2.11-r3?arch=x86_64&distro=3.12.3',
-              'references':       [
-                'http://seclists.org/fulldisclosure/2022/Oct/37',
-                'http://seclists.org/fulldisclosure/2022/Oct/38',
-                'http://seclists.org/fulldisclosure/2022/Oct/41',
-                'http://seclists.org/fulldisclosure/2022/Oct/42',
-                'http://www.openwall.com/lists/oss-security/2022/08/05/2',
-                'http://www.openwall.com/lists/oss-security/2022/08/09/1',
-                'https://access.redhat.com/errata/RHSA-2022:8291',
-                'https://access.redhat.com/security/cve/CVE-2022-37434',
-                'https://bugzilla.redhat.com/2116639',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2053198',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2077431',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2081296',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2116639',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-37434',
-                'https://errata.almalinux.org/9/ALSA-2022-8291.html',
-                'https://errata.rockylinux.org/RLSA-2022:8291',
-                'https://github.com/curl/curl/issues/9271',
-                'https://github.com/ivd38/zlib_overflow',
-                'https://github.com/madler/zlib/blob/21767c654d31d2dccdde4330529775c6c5fd5389/zlib.h#L1062-L1063',
-                'https://github.com/madler/zlib/commit/1eb7682f845ac9e9bf9ae35bbfb3bad5dacbd91d',
-                'https://github.com/madler/zlib/commit/eff308af425b67093bab25f80f1ae950166bece1',
-                'https://github.com/nodejs/node/blob/75b68c6e4db515f76df73af476eccf382bbcb00a/deps/zlib/inflate.c#L762-L764',
-                'https://linux.oracle.com/cve/CVE-2022-37434.html',
-                'https://linux.oracle.com/errata/ELSA-2023-1095.html',
-                'https://lists.debian.org/debian-lts-announce/2022/09/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JWN4VE3JQR4O2SOUS5TXNLANRPMHWV4I/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NMBOJ77A7T7PQCARMDUK75TE6LLESZ3O/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PAVPQNCG3XRLCLNSQRM3KAN5ZFMVXVTY/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/X5U7OTKZSHY2I3ZFJSR2SHFHW72RKGDK/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YRQAI7H4M4RQZ2IWZUEEXECBE5D56BH2/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2022-37434',
-                'https://security.netapp.com/advisory/ntap-20220901-0005/',
-                'https://security.netapp.com/advisory/ntap-20230427-0007/',
-                'https://support.apple.com/kb/HT213488',
-                'https://support.apple.com/kb/HT213489',
-                'https://support.apple.com/kb/HT213490',
-                'https://support.apple.com/kb/HT213491',
-                'https://support.apple.com/kb/HT213493',
-                'https://support.apple.com/kb/HT213494',
-                'https://ubuntu.com/security/notices/USN-5570-1',
-                'https://ubuntu.com/security/notices/USN-5570-2',
-                'https://ubuntu.com/security/notices/USN-5573-1',
-                'https://ubuntu.com/security/notices/USN-6736-1',
-                'https://ubuntu.com/security/notices/USN-6736-2',
-                'https://www.cve.org/CVERecord?id=CVE-2022-37434',
-                'https://www.debian.org/security/2022/dsa-5218'
-              ],
-              'severity':   'CRITICAL',
-              'suppressed': false,
-              'title':      'zlib: heap-based buffer over-read and overflow in inflate() in inflate.c via a large gzip header extra field'
-            },
-            {
-              'cve':  'CVE-2018-25032',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'nvd': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '8.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-787'
-              ],
-              'description':   'zlib before 1.2.12 allows memory corruption when deflating (i.e., when compressing) if the input has many distant matches.',
-              'diffID':        'sha256:777b2c648970480f50f5b4d0af8f9a8ea798eea43dbcf40ce4a8c7118736bdcf',
-              'fixedVersions': [
-                '1.2.12-r0'
-              ],
-              'installedVersion': '1.2.11-r3',
-              'packageName':      'zlib',
-              'purl':             'pkg:apk/alpine/zlib@1.2.11-r3?arch=x86_64&distro=3.12.3',
-              'references':       [
-                'http://seclists.org/fulldisclosure/2022/May/33',
-                'http://seclists.org/fulldisclosure/2022/May/35',
-                'http://seclists.org/fulldisclosure/2022/May/38',
-                'http://www.openwall.com/lists/oss-security/2022/03/25/2',
-                'http://www.openwall.com/lists/oss-security/2022/03/26/1',
-                'https://access.redhat.com/errata/RHSA-2022:8420',
-                'https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-25032.json',
-                'https://access.redhat.com/security/cve/CVE-2018-25032',
-                'https://bugzilla.redhat.com/2067945',
-                'https://cert-portal.siemens.com/productcert/pdf/ssa-333517.pdf',
-                'https://errata.almalinux.org/9/ALSA-2022-8420.html',
-                'https://github.com/advisories/GHSA-jc36-42cf-vqwj',
-                'https://github.com/madler/zlib/commit/5c44459c3b28a9bd3283aaceab7c615f8020c531',
-                'https://github.com/madler/zlib/compare/v1.2.11...v1.2.12',
-                'https://github.com/madler/zlib/issues/605',
-                'https://github.com/rubysec/ruby-advisory-db/blob/master/gems/nokogiri/CVE-2018-25032.yml',
-                'https://github.com/sparklemotion/nokogiri/releases/tag/v1.13.4',
-                'https://github.com/sparklemotion/nokogiri/security/advisories/GHSA-v6gp-9mmm-c6p5',
-                'https://groups.google.com/g/ruby-security-ann/c/vX7qSjsvWis/m/TJWN4oOKBwAJ',
-                'https://linux.oracle.com/cve/CVE-2018-25032.html',
-                'https://linux.oracle.com/errata/ELSA-2022-9565.html',
-                'https://lists.debian.org/debian-lts-announce/2022/04/msg00000.html',
-                'https://lists.debian.org/debian-lts-announce/2022/05/msg00008.html',
-                'https://lists.debian.org/debian-lts-announce/2022/09/msg00023.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DCZFIJBJTZ7CL5QXBFKTQ22Q26VINRUF/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DF62MVMH3QUGMBDCB3DY2ERQ6EBHTADB/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JZZPTWRYQULAOL3AW7RZJNVZ2UONXCV4/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NS2D2GFPFGOJUL4WQ3DUAY7HF4VWQ77F/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VOKNP2L734AEL47NRYGVZIKEFOUBQY5Y/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/XOKFMSNQ5D5WGMALBNBXU3GE442V74WU/',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/DCZFIJBJTZ7CL5QXBFKTQ22Q26VINRUF',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/DCZFIJBJTZ7CL5QXBFKTQ22Q26VINRUF/',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/DF62MVMH3QUGMBDCB3DY2ERQ6EBHTADB',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/DF62MVMH3QUGMBDCB3DY2ERQ6EBHTADB/',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/JZZPTWRYQULAOL3AW7RZJNVZ2UONXCV4',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/JZZPTWRYQULAOL3AW7RZJNVZ2UONXCV4/',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/NS2D2GFPFGOJUL4WQ3DUAY7HF4VWQ77F',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/NS2D2GFPFGOJUL4WQ3DUAY7HF4VWQ77F/',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/VOKNP2L734AEL47NRYGVZIKEFOUBQY5Y',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/VOKNP2L734AEL47NRYGVZIKEFOUBQY5Y/',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/XOKFMSNQ5D5WGMALBNBXU3GE442V74WU',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/XOKFMSNQ5D5WGMALBNBXU3GE442V74WU/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2018-25032',
-                'https://security.gentoo.org/glsa/202210-42',
-                'https://security.netapp.com/advisory/ntap-20220526-0009',
-                'https://security.netapp.com/advisory/ntap-20220526-0009/',
-                'https://security.netapp.com/advisory/ntap-20220729-0004',
-                'https://security.netapp.com/advisory/ntap-20220729-0004/',
-                'https://support.apple.com/kb/HT213255',
-                'https://support.apple.com/kb/HT213256',
-                'https://support.apple.com/kb/HT213257',
-                'https://ubuntu.com/security/notices/USN-5355-1',
-                'https://ubuntu.com/security/notices/USN-5355-2',
-                'https://ubuntu.com/security/notices/USN-5359-1',
-                'https://ubuntu.com/security/notices/USN-5359-2',
-                'https://ubuntu.com/security/notices/USN-5739-1',
-                'https://ubuntu.com/security/notices/USN-6736-1',
-                'https://ubuntu.com/security/notices/USN-6736-2',
-                'https://www.cve.org/CVERecord?id=CVE-2018-25032',
-                'https://www.debian.org/security/2022/dsa-5111',
-                'https://www.openwall.com/lists/oss-security/2022/03/24/1',
-                'https://www.openwall.com/lists/oss-security/2022/03/28/1',
-                'https://www.openwall.com/lists/oss-security/2022/03/28/3',
-                'https://www.oracle.com/security-alerts/cpujul2022.html'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'zlib: A flaw found in zlib when compressing (not decompressing) certain inputs'
-            }
-          ]
-        }
-      ],
-      'summary': {
-        'critical':   4,
-        'high':       32,
-        'low':        2,
-        'medium':     6,
-        'suppressed': 0,
-        'unknown':    0
-      }
-    }
-  },
-  {
-    'id':    'default/3dcddf0a695fb1b6a662a7ac1dd31f9b7378d645aebdf8602ed01cb6c80a69a1',
-    'type':  'storage.sbomscanner.kubewarden.io.vulnerabilityreport',
-    'links': {
-      'patch':  'https://localhost:8005/v1/storage.sbomscanner.kubewarden.io.vulnerabilityreports/default/3dcddf0a695fb1b6a662a7ac1dd31f9b7378d645aebdf8602ed01cb6c80a69a1',
-      'remove': 'https://localhost:8005/v1/storage.sbomscanner.kubewarden.io.vulnerabilityreports/default/3dcddf0a695fb1b6a662a7ac1dd31f9b7378d645aebdf8602ed01cb6c80a69a1',
-      'self':   'https://localhost:8005/v1/storage.sbomscanner.kubewarden.io.vulnerabilityreports/default/3dcddf0a695fb1b6a662a7ac1dd31f9b7378d645aebdf8602ed01cb6c80a69a1',
-      'update': 'https://localhost:8005/v1/storage.sbomscanner.kubewarden.io.vulnerabilityreports/default/3dcddf0a695fb1b6a662a7ac1dd31f9b7378d645aebdf8602ed01cb6c80a69a1',
-      'view':   'https://localhost:8005/apis/storage.sbomscanner.kubewarden.io/v1alpha1/namespaces/default/vulnerabilityreports/3dcddf0a695fb1b6a662a7ac1dd31f9b7378d645aebdf8602ed01cb6c80a69a1'
-    },
-    'apiVersion':    'storage.sbomscanner.kubewarden.io/v1alpha1',
-    'imageMetadata': {
-      'digest':      'sha256:86d55ea0abdcc98ed0a3652510ff7fda8f36aefcd49aa067a9cc2c817d05f1d8',
-      'platform':    'linux/arm/v6',
-      'registry':    'lsong-demo1',
-      'registryURI': 'registry-1.docker.io',
-      'repository':  'library/alpine',
-      'tag':         '3.11.12'
-    },
-    'kind':     'VulnerabilityReport',
-    'metadata': {
-      'creationTimestamp': '2026-01-14T18:51:16Z',
-      'fields':            [
-        '3dcddf0a695fb1b6a662a7ac1dd31f9b7378d645aebdf8602ed01cb6c80a69a1',
-        'registry-1.docker.io/library/alpine:3.11.12',
-        'linux/arm/v6',
-        '21 (0 suppressed)'
-      ],
-      'labels': {
-        'app.kubernetes.io/managed-by':          'sbomscanner',
-        'app.kubernetes.io/part-of':             'sbomscanner',
-        'sbomscanner.kubewarden.io/scanjob-uid': '445c600a-c4b6-40b3-bd71-f2d2140a37d5'
-      },
-      'name':            '3dcddf0a695fb1b6a662a7ac1dd31f9b7378d645aebdf8602ed01cb6c80a69a1',
-      'namespace':       'default',
-      'ownerReferences': [
-        {
-          'apiVersion':         'storage.sbomscanner.kubewarden.io/v1alpha1',
-          'blockOwnerDeletion': true,
-          'controller':         true,
-          'kind':               'SBOM',
-          'name':               '3dcddf0a695fb1b6a662a7ac1dd31f9b7378d645aebdf8602ed01cb6c80a69a1',
-          'uid':                '2b2c58a9-cdd1-4805-9288-011f48fccfcc'
-        }
-      ],
-      'relationships': [
-        {
-          'fromId':   'default/3dcddf0a695fb1b6a662a7ac1dd31f9b7378d645aebdf8602ed01cb6c80a69a1',
-          'fromType': 'storage.sbomscanner.kubewarden.io.sbom',
-          'rel':      'owner',
-          'state':    'active',
-          'message':  'Resource is current'
-        }
-      ],
-      'resourceVersion': '1',
-      'state':           {
-        'error':         false,
-        'message':       'Resource is current',
-        'name':          'active',
-        'transitioning': false
-      },
-      'uid': 'fa555060-cd27-4419-ac1c-e89fcbb025a3'
-    },
-    'report': {
-      'results': [
-        {
-          'class':           'os-pkgs',
-          'target':          '/var/run/worker/trivy.sbom.1903532188.json (alpine 3.11.12)',
-          'type':            'alpine',
-          'vulnerabilities': [
-            {
-              'cve':  'CVE-2021-42378',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the getvar_i function",
-              'diffID':        'sha256:aa8c3172d7653ce92f6535f5960c1c21ef0df845461a1fce45cf96de866001ed',
-              'fixedVersions': [
-                '1.31.1-r11'
-              ],
-              'installedVersion': '1.31.1-r10',
-              'packageName':      'busybox',
-              'purl':             'pkg:apk/alpine/busybox@1.31.1-r10?arch=armhf&distro=3.11.12',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42378',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42378',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42378'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the getvar_i()'
-            },
-            {
-              'cve':  'CVE-2021-42379',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the next_input_file function",
-              'diffID':        'sha256:aa8c3172d7653ce92f6535f5960c1c21ef0df845461a1fce45cf96de866001ed',
-              'fixedVersions': [
-                '1.31.1-r11'
-              ],
-              'installedVersion': '1.31.1-r10',
-              'packageName':      'busybox',
-              'purl':             'pkg:apk/alpine/busybox@1.31.1-r10?arch=armhf&distro=3.11.12',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42379',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42379',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42379'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the next_input_file()'
-            },
-            {
-              'cve':  'CVE-2021-42380',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the clrvar function",
-              'diffID':        'sha256:aa8c3172d7653ce92f6535f5960c1c21ef0df845461a1fce45cf96de866001ed',
-              'fixedVersions': [
-                '1.31.1-r11'
-              ],
-              'installedVersion': '1.31.1-r10',
-              'packageName':      'busybox',
-              'purl':             'pkg:apk/alpine/busybox@1.31.1-r10?arch=armhf&distro=3.11.12',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42380',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42380',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42380'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the clrvar()'
-            },
-            {
-              'cve':  'CVE-2021-42381',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the hash_init function",
-              'diffID':        'sha256:aa8c3172d7653ce92f6535f5960c1c21ef0df845461a1fce45cf96de866001ed',
-              'fixedVersions': [
-                '1.31.1-r11'
-              ],
-              'installedVersion': '1.31.1-r10',
-              'packageName':      'busybox',
-              'purl':             'pkg:apk/alpine/busybox@1.31.1-r10?arch=armhf&distro=3.11.12',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42381',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42381',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42381'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the hash_init()'
-            },
-            {
-              'cve':  'CVE-2021-42382',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the getvar_s function",
-              'diffID':        'sha256:aa8c3172d7653ce92f6535f5960c1c21ef0df845461a1fce45cf96de866001ed',
-              'fixedVersions': [
-                '1.31.1-r11'
-              ],
-              'installedVersion': '1.31.1-r10',
-              'packageName':      'busybox',
-              'purl':             'pkg:apk/alpine/busybox@1.31.1-r10?arch=armhf&distro=3.11.12',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42382',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42382',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42382'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the getvar_s()'
-            },
-            {
-              'cve':  'CVE-2021-42383',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the evaluate function",
-              'diffID':        'sha256:aa8c3172d7653ce92f6535f5960c1c21ef0df845461a1fce45cf96de866001ed',
-              'fixedVersions': [
-                '1.31.1-r11'
-              ],
-              'installedVersion': '1.31.1-r10',
-              'packageName':      'busybox',
-              'purl':             'pkg:apk/alpine/busybox@1.31.1-r10?arch=armhf&distro=3.11.12',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42383',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42383',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42383'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the evaluate()'
-            },
-            {
-              'cve':  'CVE-2021-42384',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the handle_special function",
-              'diffID':        'sha256:aa8c3172d7653ce92f6535f5960c1c21ef0df845461a1fce45cf96de866001ed',
-              'fixedVersions': [
-                '1.31.1-r11'
-              ],
-              'installedVersion': '1.31.1-r10',
-              'packageName':      'busybox',
-              'purl':             'pkg:apk/alpine/busybox@1.31.1-r10?arch=armhf&distro=3.11.12',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42384',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42384',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42384'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the handle_special()'
-            },
-            {
-              'cve':  'CVE-2021-42385',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the evaluate function",
-              'diffID':        'sha256:aa8c3172d7653ce92f6535f5960c1c21ef0df845461a1fce45cf96de866001ed',
-              'fixedVersions': [
-                '1.31.1-r11'
-              ],
-              'installedVersion': '1.31.1-r10',
-              'packageName':      'busybox',
-              'purl':             'pkg:apk/alpine/busybox@1.31.1-r10?arch=armhf&distro=3.11.12',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42385',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42385',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42385'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the evaluate()'
-            },
-            {
-              'cve':  'CVE-2021-42386',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the nvalloc function",
-              'diffID':        'sha256:aa8c3172d7653ce92f6535f5960c1c21ef0df845461a1fce45cf96de866001ed',
-              'fixedVersions': [
-                '1.31.1-r11'
-              ],
-              'installedVersion': '1.31.1-r10',
-              'packageName':      'busybox',
-              'purl':             'pkg:apk/alpine/busybox@1.31.1-r10?arch=armhf&distro=3.11.12',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42386',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42386',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42386'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the nvalloc()'
-            },
-            {
-              'cve':  'CVE-2021-42374',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '5.7',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-125'
-              ],
-              'description':   "An out-of-bounds heap read in Busybox's unlzma applet leads to information leak and denial of service when crafted LZMA-compressed input is decompressed. This can be triggered by any applet/format that",
-              'diffID':        'sha256:aa8c3172d7653ce92f6535f5960c1c21ef0df845461a1fce45cf96de866001ed',
-              'fixedVersions': [
-                '1.31.1-r11'
-              ],
-              'installedVersion': '1.31.1-r10',
-              'packageName':      'busybox',
-              'purl':             'pkg:apk/alpine/busybox@1.31.1-r10?arch=armhf&distro=3.11.12',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42374',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42374',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42374'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'busybox: out-of-bounds read in unlzma applet leads to information leak and denial of service when crafted LZMA-compressed input is decompressed'
-            },
-            {
-              'cve':  'CVE-2021-42378',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the getvar_i function",
-              'diffID':        'sha256:aa8c3172d7653ce92f6535f5960c1c21ef0df845461a1fce45cf96de866001ed',
-              'fixedVersions': [
-                '1.31.1-r11'
-              ],
-              'installedVersion': '1.31.1-r10',
-              'packageName':      'ssl_client',
-              'purl':             'pkg:apk/alpine/ssl_client@1.31.1-r10?arch=armhf&distro=3.11.12',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42378',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42378',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42378'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the getvar_i()'
-            },
-            {
-              'cve':  'CVE-2021-42379',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the next_input_file function",
-              'diffID':        'sha256:aa8c3172d7653ce92f6535f5960c1c21ef0df845461a1fce45cf96de866001ed',
-              'fixedVersions': [
-                '1.31.1-r11'
-              ],
-              'installedVersion': '1.31.1-r10',
-              'packageName':      'ssl_client',
-              'purl':             'pkg:apk/alpine/ssl_client@1.31.1-r10?arch=armhf&distro=3.11.12',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42379',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42379',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42379'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the next_input_file()'
-            },
-            {
-              'cve':  'CVE-2021-42380',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the clrvar function",
-              'diffID':        'sha256:aa8c3172d7653ce92f6535f5960c1c21ef0df845461a1fce45cf96de866001ed',
-              'fixedVersions': [
-                '1.31.1-r11'
-              ],
-              'installedVersion': '1.31.1-r10',
-              'packageName':      'ssl_client',
-              'purl':             'pkg:apk/alpine/ssl_client@1.31.1-r10?arch=armhf&distro=3.11.12',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42380',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42380',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42380'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the clrvar()'
-            },
-            {
-              'cve':  'CVE-2021-42381',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the hash_init function",
-              'diffID':        'sha256:aa8c3172d7653ce92f6535f5960c1c21ef0df845461a1fce45cf96de866001ed',
-              'fixedVersions': [
-                '1.31.1-r11'
-              ],
-              'installedVersion': '1.31.1-r10',
-              'packageName':      'ssl_client',
-              'purl':             'pkg:apk/alpine/ssl_client@1.31.1-r10?arch=armhf&distro=3.11.12',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42381',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42381',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42381'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the hash_init()'
-            },
-            {
-              'cve':  'CVE-2021-42382',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the getvar_s function",
-              'diffID':        'sha256:aa8c3172d7653ce92f6535f5960c1c21ef0df845461a1fce45cf96de866001ed',
-              'fixedVersions': [
-                '1.31.1-r11'
-              ],
-              'installedVersion': '1.31.1-r10',
-              'packageName':      'ssl_client',
-              'purl':             'pkg:apk/alpine/ssl_client@1.31.1-r10?arch=armhf&distro=3.11.12',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42382',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42382',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42382'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the getvar_s()'
-            },
-            {
-              'cve':  'CVE-2021-42383',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the evaluate function",
-              'diffID':        'sha256:aa8c3172d7653ce92f6535f5960c1c21ef0df845461a1fce45cf96de866001ed',
-              'fixedVersions': [
-                '1.31.1-r11'
-              ],
-              'installedVersion': '1.31.1-r10',
-              'packageName':      'ssl_client',
-              'purl':             'pkg:apk/alpine/ssl_client@1.31.1-r10?arch=armhf&distro=3.11.12',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42383',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42383',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42383'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the evaluate()'
-            },
-            {
-              'cve':  'CVE-2021-42384',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the handle_special function",
-              'diffID':        'sha256:aa8c3172d7653ce92f6535f5960c1c21ef0df845461a1fce45cf96de866001ed',
-              'fixedVersions': [
-                '1.31.1-r11'
-              ],
-              'installedVersion': '1.31.1-r10',
-              'packageName':      'ssl_client',
-              'purl':             'pkg:apk/alpine/ssl_client@1.31.1-r10?arch=armhf&distro=3.11.12',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42384',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42384',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42384'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the handle_special()'
-            },
-            {
-              'cve':  'CVE-2021-42385',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the evaluate function",
-              'diffID':        'sha256:aa8c3172d7653ce92f6535f5960c1c21ef0df845461a1fce45cf96de866001ed',
-              'fixedVersions': [
-                '1.31.1-r11'
-              ],
-              'installedVersion': '1.31.1-r10',
-              'packageName':      'ssl_client',
-              'purl':             'pkg:apk/alpine/ssl_client@1.31.1-r10?arch=armhf&distro=3.11.12',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42385',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42385',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42385'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the evaluate()'
-            },
-            {
-              'cve':  'CVE-2021-42386',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the nvalloc function",
-              'diffID':        'sha256:aa8c3172d7653ce92f6535f5960c1c21ef0df845461a1fce45cf96de866001ed',
-              'fixedVersions': [
-                '1.31.1-r11'
-              ],
-              'installedVersion': '1.31.1-r10',
-              'packageName':      'ssl_client',
-              'purl':             'pkg:apk/alpine/ssl_client@1.31.1-r10?arch=armhf&distro=3.11.12',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42386',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42386',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42386'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the nvalloc()'
-            },
-            {
-              'cve':  'CVE-2021-42374',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '5.7',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-125'
-              ],
-              'description':   "An out-of-bounds heap read in Busybox's unlzma applet leads to information leak and denial of service when crafted LZMA-compressed input is decompressed. This can be triggered by any applet/format that",
-              'diffID':        'sha256:aa8c3172d7653ce92f6535f5960c1c21ef0df845461a1fce45cf96de866001ed',
-              'fixedVersions': [
-                '1.31.1-r11'
-              ],
-              'installedVersion': '1.31.1-r10',
-              'packageName':      'ssl_client',
-              'purl':             'pkg:apk/alpine/ssl_client@1.31.1-r10?arch=armhf&distro=3.11.12',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42374',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42374',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42374'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'busybox: out-of-bounds read in unlzma applet leads to information leak and denial of service when crafted LZMA-compressed input is decompressed'
-            },
-            {
-              'cve':  'CVE-2022-37434',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '9.8',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-787',
-                'CWE-120'
-              ],
-              'description':   'zlib through 1.2.12 has a heap-based buffer over-read or buffer overflow in inflate in inflate.c via a large gzip header extra field. NOTE: only applications that call inflateGetHeader are affected. Some common applications bundle the affected zlib source code but may be unable to call inflateGetHeader (e.g., see the nodejs/node reference).',
-              'diffID':        'sha256:aa8c3172d7653ce92f6535f5960c1c21ef0df845461a1fce45cf96de866001ed',
-              'fixedVersions': [
-                '1.2.11-r4'
-              ],
-              'installedVersion': '1.2.11-r3',
-              'packageName':      'zlib',
-              'purl':             'pkg:apk/alpine/zlib@1.2.11-r3?arch=armhf&distro=3.11.12',
-              'references':       [
-                'http://seclists.org/fulldisclosure/2022/Oct/37',
-                'http://seclists.org/fulldisclosure/2022/Oct/38',
-                'http://seclists.org/fulldisclosure/2022/Oct/41',
-                'http://seclists.org/fulldisclosure/2022/Oct/42',
-                'http://www.openwall.com/lists/oss-security/2022/08/05/2',
-                'http://www.openwall.com/lists/oss-security/2022/08/09/1',
-                'https://access.redhat.com/errata/RHSA-2022:8291',
-                'https://access.redhat.com/security/cve/CVE-2022-37434',
-                'https://bugzilla.redhat.com/2116639',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2053198',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2077431',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2081296',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2116639',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-37434',
-                'https://errata.almalinux.org/9/ALSA-2022-8291.html',
-                'https://errata.rockylinux.org/RLSA-2022:8291',
-                'https://github.com/curl/curl/issues/9271',
-                'https://github.com/ivd38/zlib_overflow',
-                'https://github.com/madler/zlib/blob/21767c654d31d2dccdde4330529775c6c5fd5389/zlib.h#L1062-L1063',
-                'https://github.com/madler/zlib/commit/1eb7682f845ac9e9bf9ae35bbfb3bad5dacbd91d',
-                'https://github.com/madler/zlib/commit/eff308af425b67093bab25f80f1ae950166bece1',
-                'https://github.com/nodejs/node/blob/75b68c6e4db515f76df73af476eccf382bbcb00a/deps/zlib/inflate.c#L762-L764',
-                'https://linux.oracle.com/cve/CVE-2022-37434.html',
-                'https://linux.oracle.com/errata/ELSA-2023-1095.html',
-                'https://lists.debian.org/debian-lts-announce/2022/09/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JWN4VE3JQR4O2SOUS5TXNLANRPMHWV4I/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NMBOJ77A7T7PQCARMDUK75TE6LLESZ3O/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PAVPQNCG3XRLCLNSQRM3KAN5ZFMVXVTY/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/X5U7OTKZSHY2I3ZFJSR2SHFHW72RKGDK/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YRQAI7H4M4RQZ2IWZUEEXECBE5D56BH2/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2022-37434',
-                'https://security.netapp.com/advisory/ntap-20220901-0005/',
-                'https://security.netapp.com/advisory/ntap-20230427-0007/',
-                'https://support.apple.com/kb/HT213488',
-                'https://support.apple.com/kb/HT213489',
-                'https://support.apple.com/kb/HT213490',
-                'https://support.apple.com/kb/HT213491',
-                'https://support.apple.com/kb/HT213493',
-                'https://support.apple.com/kb/HT213494',
-                'https://ubuntu.com/security/notices/USN-5570-1',
-                'https://ubuntu.com/security/notices/USN-5570-2',
-                'https://ubuntu.com/security/notices/USN-5573-1',
-                'https://ubuntu.com/security/notices/USN-6736-1',
-                'https://ubuntu.com/security/notices/USN-6736-2',
-                'https://www.cve.org/CVERecord?id=CVE-2022-37434',
-                'https://www.debian.org/security/2022/dsa-5218'
-              ],
-              'severity':   'CRITICAL',
-              'suppressed': false,
-              'title':      'zlib: heap-based buffer over-read and overflow in inflate() in inflate.c via a large gzip header extra field'
-            }
-          ]
-        }
-      ],
-      'summary': {
-        'critical':   1,
-        'high':       18,
-        'low':        0,
-        'medium':     2,
-        'suppressed': 0,
-        'unknown':    0
-      }
-    }
-  },
-  {
-    'id':    'default/3e9bc184e304d67e2eec06d635b4b3b2083471c5b6a936e2959ef3861337f4c4',
-    'type':  'storage.sbomscanner.kubewarden.io.vulnerabilityreport',
-    'links': {
-      'patch':  'https://localhost:8005/v1/storage.sbomscanner.kubewarden.io.vulnerabilityreports/default/3e9bc184e304d67e2eec06d635b4b3b2083471c5b6a936e2959ef3861337f4c4',
-      'remove': 'https://localhost:8005/v1/storage.sbomscanner.kubewarden.io.vulnerabilityreports/default/3e9bc184e304d67e2eec06d635b4b3b2083471c5b6a936e2959ef3861337f4c4',
-      'self':   'https://localhost:8005/v1/storage.sbomscanner.kubewarden.io.vulnerabilityreports/default/3e9bc184e304d67e2eec06d635b4b3b2083471c5b6a936e2959ef3861337f4c4',
-      'update': 'https://localhost:8005/v1/storage.sbomscanner.kubewarden.io.vulnerabilityreports/default/3e9bc184e304d67e2eec06d635b4b3b2083471c5b6a936e2959ef3861337f4c4',
-      'view':   'https://localhost:8005/apis/storage.sbomscanner.kubewarden.io/v1alpha1/namespaces/default/vulnerabilityreports/3e9bc184e304d67e2eec06d635b4b3b2083471c5b6a936e2959ef3861337f4c4'
-    },
-    'apiVersion':    'storage.sbomscanner.kubewarden.io/v1alpha1',
-    'imageMetadata': {
-      'digest':      'sha256:f7d2b5725685826823bc6b154c0de02832e5e6daf7dc25a00ab00f1158fabfc8',
-      'platform':    'linux/amd64',
-      'registry':    'lsong-demo1',
-      'registryURI': 'registry-1.docker.io',
-      'repository':  'library/alpine',
-      'tag':         '3.5'
-    },
-    'kind':     'VulnerabilityReport',
-    'metadata': {
-      'creationTimestamp': '2026-01-14T18:51:42Z',
-      'fields':            [
-        '3e9bc184e304d67e2eec06d635b4b3b2083471c5b6a936e2959ef3861337f4c4',
-        'registry-1.docker.io/library/alpine:3.5',
-        'linux/amd64',
-        '0 (0 suppressed)'
-      ],
-      'labels': {
-        'app.kubernetes.io/managed-by':          'sbomscanner',
-        'app.kubernetes.io/part-of':             'sbomscanner',
-        'sbomscanner.kubewarden.io/scanjob-uid': '445c600a-c4b6-40b3-bd71-f2d2140a37d5'
-      },
-      'name':            '3e9bc184e304d67e2eec06d635b4b3b2083471c5b6a936e2959ef3861337f4c4',
-      'namespace':       'default',
-      'ownerReferences': [
-        {
-          'apiVersion':         'storage.sbomscanner.kubewarden.io/v1alpha1',
-          'blockOwnerDeletion': true,
-          'controller':         true,
-          'kind':               'SBOM',
-          'name':               '3e9bc184e304d67e2eec06d635b4b3b2083471c5b6a936e2959ef3861337f4c4',
-          'uid':                '8fb7ca30-3c5b-4b11-8ee6-378d449d652b'
-        }
-      ],
-      'relationships': [
-        {
-          'fromId':   'default/3e9bc184e304d67e2eec06d635b4b3b2083471c5b6a936e2959ef3861337f4c4',
-          'fromType': 'storage.sbomscanner.kubewarden.io.sbom',
-          'rel':      'owner',
-          'state':    'active',
-          'message':  'Resource is current'
-        }
-      ],
-      'resourceVersion': '1',
-      'state':           {
-        'error':         false,
-        'message':       'Resource is current',
-        'name':          'active',
-        'transitioning': false
-      },
-      'uid': '9ed244ae-4f97-466a-b821-c27d70d9f05c'
-    },
-    'report': {
-      'results': [
-        {
-          'class':           'os-pkgs',
-          'target':          '/var/run/worker/trivy.sbom.1578945373.json (alpine 3.5.3)',
-          'type':            'alpine',
-          'vulnerabilities': null
-        }
-      ],
-      'summary': {
-        'critical':   0,
-        'high':       0,
-        'low':        0,
-        'medium':     0,
-        'suppressed': 0,
-        'unknown':    0
-      }
-    }
-  },
-  {
-    'id':    'default/3f1d0d2dbabc82e9e17727d62c6c68d01dfd4c027301781cdc71f8c5590b49ee',
-    'type':  'storage.sbomscanner.kubewarden.io.vulnerabilityreport',
-    'links': {
-      'patch':  'https://localhost:8005/v1/storage.sbomscanner.kubewarden.io.vulnerabilityreports/default/3f1d0d2dbabc82e9e17727d62c6c68d01dfd4c027301781cdc71f8c5590b49ee',
-      'remove': 'https://localhost:8005/v1/storage.sbomscanner.kubewarden.io.vulnerabilityreports/default/3f1d0d2dbabc82e9e17727d62c6c68d01dfd4c027301781cdc71f8c5590b49ee',
-      'self':   'https://localhost:8005/v1/storage.sbomscanner.kubewarden.io.vulnerabilityreports/default/3f1d0d2dbabc82e9e17727d62c6c68d01dfd4c027301781cdc71f8c5590b49ee',
-      'update': 'https://localhost:8005/v1/storage.sbomscanner.kubewarden.io.vulnerabilityreports/default/3f1d0d2dbabc82e9e17727d62c6c68d01dfd4c027301781cdc71f8c5590b49ee',
-      'view':   'https://localhost:8005/apis/storage.sbomscanner.kubewarden.io/v1alpha1/namespaces/default/vulnerabilityreports/3f1d0d2dbabc82e9e17727d62c6c68d01dfd4c027301781cdc71f8c5590b49ee'
-    },
-    'apiVersion':    'storage.sbomscanner.kubewarden.io/v1alpha1',
-    'imageMetadata': {
-      'digest':      'sha256:e841d0f0881ea22080e84088337646ada15871abbc3ce19b3219e8fc2cb0cc22',
-      'platform':    'linux/s390x',
-      'registry':    'lsong-demo1',
-      'registryURI': 'registry-1.docker.io',
-      'repository':  'library/alpine',
-      'tag':         '3.14.2'
-    },
-    'kind':     'VulnerabilityReport',
-    'metadata': {
-      'creationTimestamp': '2026-01-14T15:47:32Z',
-      'fields':            [
-        '3f1d0d2dbabc82e9e17727d62c6c68d01dfd4c027301781cdc71f8c5590b49ee',
-        'registry-1.docker.io/library/alpine:3.14.2',
-        'linux/s390x',
-        '43 (0 suppressed)'
-      ],
-      'labels': {
-        'app.kubernetes.io/managed-by':          'sbomscanner',
-        'app.kubernetes.io/part-of':             'sbomscanner',
-        'sbomscanner.kubewarden.io/scanjob-uid': '445c600a-c4b6-40b3-bd71-f2d2140a37d5'
-      },
-      'name':            '3f1d0d2dbabc82e9e17727d62c6c68d01dfd4c027301781cdc71f8c5590b49ee',
-      'namespace':       'default',
-      'ownerReferences': [
-        {
-          'apiVersion':         'storage.sbomscanner.kubewarden.io/v1alpha1',
-          'blockOwnerDeletion': true,
-          'controller':         true,
-          'kind':               'SBOM',
-          'name':               '3f1d0d2dbabc82e9e17727d62c6c68d01dfd4c027301781cdc71f8c5590b49ee',
-          'uid':                '9581c53d-c553-4aee-b9ad-f5bf9e57eee9'
-        }
-      ],
-      'relationships': [
-        {
-          'fromId':   'default/3f1d0d2dbabc82e9e17727d62c6c68d01dfd4c027301781cdc71f8c5590b49ee',
-          'fromType': 'storage.sbomscanner.kubewarden.io.sbom',
-          'rel':      'owner',
-          'state':    'active',
-          'message':  'Resource is current'
-        }
-      ],
-      'resourceVersion': '2',
-      'state':           {
-        'error':         false,
-        'message':       'Resource is current',
-        'name':          'active',
-        'transitioning': false
-      },
-      'uid': 'a0a1af66-d6d3-49c5-99b3-ea190ba71bf1'
-    },
-    'report': {
-      'results': [
-        {
-          'class':           'os-pkgs',
-          'target':          '/var/run/worker/trivy.sbom.1275691321.json (alpine 3.14.2)',
-          'type':            'alpine',
-          'vulnerabilities': [
-            {
-              'cve':  'CVE-2021-42378',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the getvar_i function",
-              'diffID':        'sha256:bd0500be1dbaabf306dd0c2c6f3f47c024a0fc8e61aff500d82000f6a4c543e7',
-              'fixedVersions': [
-                '1.33.1-r6'
-              ],
-              'installedVersion': '1.33.1-r3',
-              'packageName':      'busybox',
-              'purl':             'pkg:apk/alpine/busybox@1.33.1-r3?arch=s390x&distro=3.14.2',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42378',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42378',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42378'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the getvar_i()'
-            },
-            {
-              'cve':  'CVE-2021-42379',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the next_input_file function",
-              'diffID':        'sha256:bd0500be1dbaabf306dd0c2c6f3f47c024a0fc8e61aff500d82000f6a4c543e7',
-              'fixedVersions': [
-                '1.33.1-r6'
-              ],
-              'installedVersion': '1.33.1-r3',
-              'packageName':      'busybox',
-              'purl':             'pkg:apk/alpine/busybox@1.33.1-r3?arch=s390x&distro=3.14.2',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42379',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42379',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42379'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the next_input_file()'
-            },
-            {
-              'cve':  'CVE-2021-42380',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the clrvar function",
-              'diffID':        'sha256:bd0500be1dbaabf306dd0c2c6f3f47c024a0fc8e61aff500d82000f6a4c543e7',
-              'fixedVersions': [
-                '1.33.1-r6'
-              ],
-              'installedVersion': '1.33.1-r3',
-              'packageName':      'busybox',
-              'purl':             'pkg:apk/alpine/busybox@1.33.1-r3?arch=s390x&distro=3.14.2',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42380',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42380',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42380'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the clrvar()'
-            },
-            {
-              'cve':  'CVE-2021-42381',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the hash_init function",
-              'diffID':        'sha256:bd0500be1dbaabf306dd0c2c6f3f47c024a0fc8e61aff500d82000f6a4c543e7',
-              'fixedVersions': [
-                '1.33.1-r6'
-              ],
-              'installedVersion': '1.33.1-r3',
-              'packageName':      'busybox',
-              'purl':             'pkg:apk/alpine/busybox@1.33.1-r3?arch=s390x&distro=3.14.2',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42381',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42381',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42381'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the hash_init()'
-            },
-            {
-              'cve':  'CVE-2021-42382',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the getvar_s function",
-              'diffID':        'sha256:bd0500be1dbaabf306dd0c2c6f3f47c024a0fc8e61aff500d82000f6a4c543e7',
-              'fixedVersions': [
-                '1.33.1-r6'
-              ],
-              'installedVersion': '1.33.1-r3',
-              'packageName':      'busybox',
-              'purl':             'pkg:apk/alpine/busybox@1.33.1-r3?arch=s390x&distro=3.14.2',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42382',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42382',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42382'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the getvar_s()'
-            },
-            {
-              'cve':  'CVE-2021-42383',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the evaluate function",
-              'diffID':        'sha256:bd0500be1dbaabf306dd0c2c6f3f47c024a0fc8e61aff500d82000f6a4c543e7',
-              'fixedVersions': [
-                '1.33.1-r6'
-              ],
-              'installedVersion': '1.33.1-r3',
-              'packageName':      'busybox',
-              'purl':             'pkg:apk/alpine/busybox@1.33.1-r3?arch=s390x&distro=3.14.2',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42383',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42383',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42383'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the evaluate()'
-            },
-            {
-              'cve':  'CVE-2021-42384',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the handle_special function",
-              'diffID':        'sha256:bd0500be1dbaabf306dd0c2c6f3f47c024a0fc8e61aff500d82000f6a4c543e7',
-              'fixedVersions': [
-                '1.33.1-r6'
-              ],
-              'installedVersion': '1.33.1-r3',
-              'packageName':      'busybox',
-              'purl':             'pkg:apk/alpine/busybox@1.33.1-r3?arch=s390x&distro=3.14.2',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42384',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42384',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42384'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the handle_special()'
-            },
-            {
-              'cve':  'CVE-2021-42385',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the evaluate function",
-              'diffID':        'sha256:bd0500be1dbaabf306dd0c2c6f3f47c024a0fc8e61aff500d82000f6a4c543e7',
-              'fixedVersions': [
-                '1.33.1-r6'
-              ],
-              'installedVersion': '1.33.1-r3',
-              'packageName':      'busybox',
-              'purl':             'pkg:apk/alpine/busybox@1.33.1-r3?arch=s390x&distro=3.14.2',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42385',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42385',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42385'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the evaluate()'
-            },
-            {
-              'cve':  'CVE-2021-42386',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the nvalloc function",
-              'diffID':        'sha256:bd0500be1dbaabf306dd0c2c6f3f47c024a0fc8e61aff500d82000f6a4c543e7',
-              'fixedVersions': [
-                '1.33.1-r6'
-              ],
-              'installedVersion': '1.33.1-r3',
-              'packageName':      'busybox',
-              'purl':             'pkg:apk/alpine/busybox@1.33.1-r3?arch=s390x&distro=3.14.2',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42386',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42386',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42386'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the nvalloc()'
-            },
-            {
-              'cve':  'CVE-2022-28391',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '8.8',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-88'
-              ],
-              'description':   "BusyBox through 1.35.0 allows remote attackers to execute arbitrary code if netstat is used to print a DNS PTR record's value to a VT compatible terminal. Alternatively, the attacker could choose to change the terminal's colors.",
-              'diffID':        'sha256:bd0500be1dbaabf306dd0c2c6f3f47c024a0fc8e61aff500d82000f6a4c543e7',
-              'fixedVersions': [
-                '1.33.1-r7'
-              ],
-              'installedVersion': '1.33.1-r3',
-              'packageName':      'busybox',
-              'purl':             'pkg:apk/alpine/busybox@1.33.1-r3?arch=s390x&distro=3.14.2',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2022-28391',
-                'https://git.alpinelinux.org/aports/plain/main/busybox/0001-libbb-sockaddr2str-ensure-only-printable-characters-.patch',
-                'https://git.alpinelinux.org/aports/plain/main/busybox/0002-nslookup-sanitize-all-printed-strings-with-printable.patch',
-                'https://gitlab.alpinelinux.org/alpine/aports/-/issues/13661',
-                'https://nvd.nist.gov/vuln/detail/CVE-2022-28391',
-                'https://www.cve.org/CVERecord?id=CVE-2022-28391'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: remote attackers may execute arbitrary code if netstat is used'
-            },
-            {
-              'cve':  'CVE-2021-42374',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '5.7',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-125'
-              ],
-              'description':   "An out-of-bounds heap read in Busybox's unlzma applet leads to information leak and denial of service when crafted LZMA-compressed input is decompressed. This can be triggered by any applet/format that",
-              'diffID':        'sha256:bd0500be1dbaabf306dd0c2c6f3f47c024a0fc8e61aff500d82000f6a4c543e7',
-              'fixedVersions': [
-                '1.33.1-r4'
-              ],
-              'installedVersion': '1.33.1-r3',
-              'packageName':      'busybox',
-              'purl':             'pkg:apk/alpine/busybox@1.33.1-r3?arch=s390x&distro=3.14.2',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42374',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42374',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42374'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'busybox: out-of-bounds read in unlzma applet leads to information leak and denial of service when crafted LZMA-compressed input is decompressed'
-            },
-            {
-              'cve':  'CVE-2021-42375',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.5',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '4.1',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-159'
-              ],
-              'description':   "An incorrect handling of a special element in Busybox's ash applet leads to denial of service when processing a crafted shell command, due to the shell mistaking specific characters for reserved characters. This may be used for DoS under rare conditions of filtered command input.",
-              'diffID':        'sha256:bd0500be1dbaabf306dd0c2c6f3f47c024a0fc8e61aff500d82000f6a4c543e7',
-              'fixedVersions': [
-                '1.33.1-r5'
-              ],
-              'installedVersion': '1.33.1-r3',
-              'packageName':      'busybox',
-              'purl':             'pkg:apk/alpine/busybox@1.33.1-r3?arch=s390x&distro=3.14.2',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42375',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42375',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42375'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'busybox: incorrect handling of a special element in ash applet leads to denial of service when processing a crafted shell command'
-            },
-            {
-              'cve':  'CVE-2022-0778',
-              'cvss': {
-                'bitnami': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'ghsa': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'nvd': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-835'
-              ],
-              'description':   'The BN_mod_sqrt() function, which computes a modular square root, contains a bug that can cause it to loop forever for non-prime moduli. Internally this function is used when parsing certificates that contain elliptic curve public keys in compressed form or explicit elliptic curve parameters with a base point encoded in compressed form. It is possible to trigger the infinite loop by crafting a certificate that has invalid explicit curve parameters. Since certificate parsing happens prior to verification of the certificate signature, any process that parses an externally supplied certificate may thus be subject to a denial of service attack. The infinite loop can also be reached when parsing crafted private keys as they can contain explicit elliptic curve parameters. Thus vulnerable situations include: - TLS clients consuming server certificates - TLS servers consuming client certificates - Hosting providers taking certificates or private keys from customers - Certificate authorities parsing certification requests from subscribers - Anything else which parses ASN.1 elliptic curve parameters Also any other applications that use the BN_mod_sqrt() where the attacker can control the parameter values are vulnerable to this DoS issue. In the OpenSSL 1.0.2 version the public key is not parsed during initial parsing of the certificate which makes it slightly harder to trigger the infinite loop. However any operation which requires the public key from the certificate will trigger the infinite loop. In particular the attacker can use a self-signed certificate to trigger the loop during verification of the certificate signature. This issue affects OpenSSL versions 1.0.2, 1.1.1 and 3.0. It was addressed in the releases of 1.1.1n and 3.0.2 on the 15th March 2022. Fixed in OpenSSL 3.0.2 (Affected 3.0.0,3.0.1). Fixed in OpenSSL 1.1.1n (Affected 1.1.1-1.1.1m). Fixed in OpenSSL 1.0.2zd (Affected 1.0.2-1.0.2zc).',
-              'diffID':        'sha256:bd0500be1dbaabf306dd0c2c6f3f47c024a0fc8e61aff500d82000f6a4c543e7',
-              'fixedVersions': [
-                '1.1.1n-r0'
-              ],
-              'installedVersion': '1.1.1l-r0',
-              'packageName':      'libcrypto1.1',
-              'purl':             'pkg:apk/alpine/libcrypto1.1@1.1.1l-r0?arch=s390x&distro=3.14.2',
-              'references':       [
-                'http://packetstormsecurity.com/files/167344/OpenSSL-1.0.2-1.1.1-3.0-BN_mod_sqrt-Infinite-Loop.html',
-                'http://seclists.org/fulldisclosure/2022/May/33',
-                'http://seclists.org/fulldisclosure/2022/May/35',
-                'http://seclists.org/fulldisclosure/2022/May/38',
-                'https://access.redhat.com/errata/RHSA-2022:5326',
-                'https://access.redhat.com/security/cve/CVE-2022-0778',
-                'https://bugzilla.redhat.com/2062202',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2062202',
-                'https://cert-portal.siemens.com/productcert/pdf/ssa-712929.pdf',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-0778',
-                'https://errata.almalinux.org/8/ALSA-2022-5326.html',
-                'https://errata.rockylinux.org/RLSA-2022:4899',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=3118eb64934499d93db3230748a452351d1d9a65',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=380085481c64de749a6dd25cdf0bcf4360b30f83',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=a466912611aa6cbdf550cd10601390e587451246',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=3118eb64934499d93db3230748a452351d1d9a65',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=380085481c64de749a6dd25cdf0bcf4360b30f83',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=a466912611aa6cbdf550cd10601390e587451246',
-                'https://linux.oracle.com/cve/CVE-2022-0778.html',
-                'https://linux.oracle.com/errata/ELSA-2022-9272.html',
-                'https://lists.debian.org/debian-lts-announce/2022/03/msg00023.html',
-                'https://lists.debian.org/debian-lts-announce/2022/03/msg00024.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/323SNN6ZX7PRJJWP2BUAFLPUAE42XWLZ',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/323SNN6ZX7PRJJWP2BUAFLPUAE42XWLZ/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GDB3GQVJPXJE7X5C5JN6JAA4XUDWD6E6',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GDB3GQVJPXJE7X5C5JN6JAA4XUDWD6E6/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/W6K3PR542DXWLEFFMFIDMME4CWMHJRMG',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/W6K3PR542DXWLEFFMFIDMME4CWMHJRMG/',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/323SNN6ZX7PRJJWP2BUAFLPUAE42XWLZ',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/GDB3GQVJPXJE7X5C5JN6JAA4XUDWD6E6',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/W6K3PR542DXWLEFFMFIDMME4CWMHJRMG',
-                'https://nvd.nist.gov/vuln/detail/CVE-2022-0778',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2022-0002',
-                'https://rustsec.org/advisories/RUSTSEC-2022-0014.html',
-                'https://security.gentoo.org/glsa/202210-02',
-                'https://security.netapp.com/advisory/ntap-20220321-0002',
-                'https://security.netapp.com/advisory/ntap-20220321-0002/',
-                'https://security.netapp.com/advisory/ntap-20220429-0005',
-                'https://security.netapp.com/advisory/ntap-20220429-0005/',
-                'https://security.netapp.com/advisory/ntap-20240621-0006',
-                'https://security.netapp.com/advisory/ntap-20240621-0006/',
-                'https://support.apple.com/kb/HT213255',
-                'https://support.apple.com/kb/HT213256',
-                'https://support.apple.com/kb/HT213257',
-                'https://ubuntu.com/security/notices/USN-5328-1',
-                'https://ubuntu.com/security/notices/USN-5328-2',
-                'https://ubuntu.com/security/notices/USN-6457-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2022-0778',
-                'https://www.debian.org/security/2022/dsa-5103',
-                'https://www.openssl.org/news/secadv/20220315.txt',
-                'https://www.oracle.com/security-alerts/cpuapr2022.html',
-                'https://www.oracle.com/security-alerts/cpujul2022.html',
-                'https://www.tenable.com/security/tns-2022-06',
-                'https://www.tenable.com/security/tns-2022-07',
-                'https://www.tenable.com/security/tns-2022-08',
-                'https://www.tenable.com/security/tns-2022-09'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: Infinite loop in BN_mod_sqrt() reachable when parsing certificates'
-            },
-            {
-              'cve':  'CVE-2022-4450',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'nvd': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-415'
-              ],
-              'description':   'The function PEM_read_bio_ex() reads a PEM file from a BIO and parses and\ndecodes the "name" (e.g. "CERTIFICATE"), any header data and the payload data.\nIf the function succeeds then the "name_out", "header" and "data" arguments are\npopulated with pointers to buffers containing the relevant decoded data. The\ncaller is responsible for freeing those buffers. It is possible to construct a\nPEM file that results in 0 bytes of payload data. In this case PEM_read_bio_ex()\nwill return a failure code but will populate the header argument with a pointer\nto a buffer that has already been freed. If the caller also frees this buffer\nthen a double free will occur. This will most likely lead to a crash. This\ncould be exploited by an attacker who has the ability to supply malicious PEM\nfiles for parsing to achieve a denial of service attack.\n\nThe functions PEM_read_bio() and PEM_read() are simple wrappers around\nPEM_read_bio_ex() and therefore these functions are also directly affected.\n\nThese functions are also called indirectly by a number of other OpenSSL\nfunctions including PEM_X509_INFO_read_bio_ex() and\nSSL_CTX_use_serverinfo_file() which are also vulnerable. Some OpenSSL internal\nuses of these functions are not vulnerable because the caller does not free the\nheader argument if PEM_read_bio_ex() returns a failure code. These locations\ninclude the PEM_read_bio_TYPE() functions as well as the decoders introduced in\nOpenSSL 3.0.\n\nThe OpenSSL asn1parse command line application is also impacted by this issue.',
-              'diffID':        'sha256:bd0500be1dbaabf306dd0c2c6f3f47c024a0fc8e61aff500d82000f6a4c543e7',
-              'fixedVersions': [
-                '1.1.1t-r0'
-              ],
-              'installedVersion': '1.1.1l-r0',
-              'packageName':      'libcrypto1.1',
-              'purl':             'pkg:apk/alpine/libcrypto1.1@1.1.1l-r0?arch=s390x&distro=3.14.2',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2023:2165',
-                'https://access.redhat.com/security/cve/CVE-2022-4450',
-                'https://bugzilla.redhat.com/1960321',
-                'https://bugzilla.redhat.com/2164440',
-                'https://bugzilla.redhat.com/2164487',
-                'https://bugzilla.redhat.com/2164492',
-                'https://bugzilla.redhat.com/2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144000',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144003',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144006',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144008',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144010',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144012',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144015',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144017',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144019',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2145170',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2158412',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164440',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164487',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164488',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164492',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164497',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164499',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164500',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4203',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4304',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4450',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0215',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0216',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0217',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0286',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0401',
-                'https://errata.almalinux.org/9/ALSA-2023-2165.html',
-                'https://errata.rockylinux.org/RLSA-2023:0946',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=63bcf189be73a9cc1264059bed6f57974be74a83',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=bbcf509bd046b34cca19c766bbddc31683d0858b',
-                'https://linux.oracle.com/cve/CVE-2022-4450.html',
-                'https://linux.oracle.com/errata/ELSA-2023-32791.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2022-4450',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0003',
-                'https://rustsec.org/advisories/RUSTSEC-2023-0010.html',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://ubuntu.com/security/notices/USN-5844-1',
-                'https://ubuntu.com/security/notices/USN-6564-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2022-4450',
-                'https://www.openssl.org/news/secadv/20230207.txt'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: double free after calling PEM_read_bio_ex'
-            },
-            {
-              'cve':  'CVE-2023-0215',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'nvd': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   'The public API function BIO_new_NDEF is a helper function used for streaming\nASN.1 data via a BIO. It is primarily used internally to OpenSSL to support the\nSMIME, CMS and PKCS7 streaming capabilities, but may also be called directly by\nend user applications.\n\nThe function receives a BIO from the caller, prepends a new BIO_f_asn1 filter\nBIO onto the front of it to form a BIO chain, and then returns the new head of\nthe BIO chain to the caller. Under certain conditions, for example if a CMS\nrecipient public key is invalid, the new filter BIO is freed and the function\nreturns a NULL result indicating a failure. However, in this case, the BIO chain\nis not properly cleaned up and the BIO passed by the caller still retains\ninternal pointers to the previously freed filter BIO. If the caller then goes on\nto call BIO_pop() on the BIO then a use-after-free will occur. This will most\nlikely result in a crash.\n\n\n\nThis scenario occurs directly in the internal function B64_write_ASN1() which\nmay cause BIO_new_NDEF() to be called and will subsequently call BIO_pop() on\nthe BIO. This internal function is in turn called by the public API functions\nPEM_write_bio_ASN1_stream, PEM_write_bio_CMS_stream, PEM_write_bio_PKCS7_stream,\nSMIME_write_ASN1, SMIME_write_CMS and SMIME_write_PKCS7.\n\nOther public API functions that may be impacted by this include\ni2d_ASN1_bio_stream, BIO_new_CMS, BIO_new_PKCS7, i2d_CMS_bio_stream and\ni2d_PKCS7_bio_stream.\n\nThe OpenSSL cms and smime command line applications are similarly affected.',
-              'diffID':        'sha256:bd0500be1dbaabf306dd0c2c6f3f47c024a0fc8e61aff500d82000f6a4c543e7',
-              'fixedVersions': [
-                '1.1.1t-r0'
-              ],
-              'installedVersion': '1.1.1l-r0',
-              'packageName':      'libcrypto1.1',
-              'purl':             'pkg:apk/alpine/libcrypto1.1@1.1.1l-r0?arch=s390x&distro=3.14.2',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2023:2165',
-                'https://access.redhat.com/security/cve/CVE-2023-0215',
-                'https://bugzilla.redhat.com/1960321',
-                'https://bugzilla.redhat.com/2164440',
-                'https://bugzilla.redhat.com/2164487',
-                'https://bugzilla.redhat.com/2164492',
-                'https://bugzilla.redhat.com/2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144000',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144003',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144006',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144008',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144010',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144012',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144015',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144017',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144019',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2145170',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2158412',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164440',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164487',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164488',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164492',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164497',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164499',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164500',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4203',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4304',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4450',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0215',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0216',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0217',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0286',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0401',
-                'https://errata.almalinux.org/9/ALSA-2023-2165.html',
-                'https://errata.rockylinux.org/RLSA-2023:0946',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=8818064ce3c3c0f1b740a5aaba2a987e75bfbafd',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=9816136fe31d92ace4037d5da5257f763aeeb4eb',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=c3829dd8825c654652201e16f8a0a0c46ee3f344',
-                'https://linux.oracle.com/cve/CVE-2023-0215.html',
-                'https://linux.oracle.com/errata/ELSA-2023-32791.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-0215',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0003',
-                'https://rustsec.org/advisories/RUSTSEC-2023-0009.html',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://security.netapp.com/advisory/ntap-20230427-0007',
-                'https://security.netapp.com/advisory/ntap-20230427-0007/',
-                'https://security.netapp.com/advisory/ntap-20230427-0009',
-                'https://security.netapp.com/advisory/ntap-20230427-0009/',
-                'https://security.netapp.com/advisory/ntap-20240621-0006',
-                'https://security.netapp.com/advisory/ntap-20240621-0006/',
-                'https://ubuntu.com/security/notices/USN-5844-1',
-                'https://ubuntu.com/security/notices/USN-5845-1',
-                'https://ubuntu.com/security/notices/USN-5845-2',
-                'https://ubuntu.com/security/notices/USN-6564-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-0215',
-                'https://www.openssl.org/news/secadv/20230207.txt'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: use-after-free following BIO_new_NDEF'
-            },
-            {
-              'cve':  'CVE-2023-0286',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '7.4',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H'
-                },
-                'nvd': {
-                  'v3score':  '7.4',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.4',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-843'
-              ],
-              'description':   'There is a type confusion vulnerability relating to X.400 address processing\ninside an X.509 GeneralName. X.400 addresses were parsed as an ASN1_STRING but\nthe public structure definition for GENERAL_NAME incorrectly specified the type\nof the x400Address field as ASN1_TYPE. This field is subsequently interpreted by\nthe OpenSSL function GENERAL_NAME_cmp as an ASN1_TYPE rather than an\nASN1_STRING.\n\nWhen CRL checking is enabled (i.e. the application sets the\nX509_V_FLAG_CRL_CHECK flag), this vulnerability may allow an attacker to pass\narbitrary pointers to a memcmp call, enabling them to read memory contents or\nenact a denial of service. In most cases, the attack requires the attacker to\nprovide both the certificate chain and CRL, neither of which need to have a\nvalid signature. If the attacker only controls one of these inputs, the other\ninput must already contain an X.400 address as a CRL distribution point, which\nis uncommon. As such, this vulnerability is most likely to only affect\napplications which have implemented their own functionality for retrieving CRLs\nover a network.',
-              'diffID':        'sha256:bd0500be1dbaabf306dd0c2c6f3f47c024a0fc8e61aff500d82000f6a4c543e7',
-              'fixedVersions': [
-                '1.1.1t-r0'
-              ],
-              'installedVersion': '1.1.1l-r0',
-              'packageName':      'libcrypto1.1',
-              'purl':             'pkg:apk/alpine/libcrypto1.1@1.1.1l-r0?arch=s390x&distro=3.14.2',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2025:7937',
-                'https://access.redhat.com/security/cve/CVE-2023-0286',
-                'https://access.redhat.com/security/cve/cve-2023-0286',
-                'https://bugzilla.redhat.com/2164440',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144000',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144003',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144006',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144008',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144010',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144012',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144015',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144017',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144019',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2145170',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2158412',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164440',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164487',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164488',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164492',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164497',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164499',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164500',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4203',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4304',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4450',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0215',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0216',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0217',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0286',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0401',
-                'https://errata.almalinux.org/9/ALSA-2025-7937.html',
-                'https://errata.rockylinux.org/RLSA-2023:0946',
-                'https://ftp.openbsd.org/pub/OpenBSD/LibreSSL/libressl-3.6.2-relnotes.txt',
-                'https://ftp.openbsd.org/pub/OpenBSD/patches/7.2/common/018_x509.patch.sig',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=2c6c9d439b484e1ba9830d8454a34fa4f80fdfe9',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=2f7530077e0ef79d98718138716bc51ca0cad658',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=fd2af07dc083a350c959147097003a14a5e8ac4d',
-                'https://github.com/pyca/cryptography',
-                'https://github.com/pyca/cryptography/security/advisories/GHSA-x4qr-2fvf-3mr5',
-                'https://linux.oracle.com/cve/CVE-2023-0286.html',
-                'https://linux.oracle.com/errata/ELSA-2025-7937.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-0286',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0003',
-                'https://rustsec.org/advisories/RUSTSEC-2023-0006.html',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://ubuntu.com/security/notices/USN-5844-1',
-                'https://ubuntu.com/security/notices/USN-5845-1',
-                'https://ubuntu.com/security/notices/USN-5845-2',
-                'https://ubuntu.com/security/notices/USN-6564-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-0286',
-                'https://www.openssl.org/news/secadv/20230207.txt'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: X.400 address type confusion in X.509 GeneralName'
-            },
-            {
-              'cve':  'CVE-2023-0464',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-295'
-              ],
-              'description':   "A security vulnerability has been identified in all supported versions\n\nof OpenSSL related to the verification of X.509 certificate chains\nthat include policy constraints.  Attackers may be able to exploit this\nvulnerability by creating a malicious certificate chain that triggers\nexponential use of computational resources, leading to a denial-of-service\n(DoS) attack on affected systems.\n\nPolicy processing is disabled by default but can be enabled by passing\nthe `-policy' argument to the command line utilities or by calling the\n`X509_VERIFY_PARAM_set1_policies()' function.",
-              'diffID':        'sha256:bd0500be1dbaabf306dd0c2c6f3f47c024a0fc8e61aff500d82000f6a4c543e7',
-              'fixedVersions': [
-                '1.1.1t-r1'
-              ],
-              'installedVersion': '1.1.1l-r0',
-              'packageName':      'libcrypto1.1',
-              'purl':             'pkg:apk/alpine/libcrypto1.1@1.1.1l-r0?arch=s390x&distro=3.14.2',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2023:3722',
-                'https://access.redhat.com/security/cve/CVE-2023-0464',
-                'https://bugzilla.redhat.com/2181082',
-                'https://bugzilla.redhat.com/2182561',
-                'https://bugzilla.redhat.com/2182565',
-                'https://bugzilla.redhat.com/2188461',
-                'https://bugzilla.redhat.com/2207947',
-                'https://errata.almalinux.org/9/ALSA-2023-3722.html',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=2017771e2db3e2b96f89bbe8766c3209f6a99545',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=2dcd4f1e3115f38cefa43e3efbe9b801c27e642e',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=879f7080d7e141f415c79eaa3a8ac4a3dad0348b',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=959c59c7a0164117e7f8366466a32bb1f8d77ff1',
-                'https://linux.oracle.com/cve/CVE-2023-0464.html',
-                'https://linux.oracle.com/errata/ELSA-2023-3722.html',
-                'https://lists.debian.org/debian-lts-announce/2023/06/msg00011.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-0464',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://security.netapp.com/advisory/ntap-20230406-0006/',
-                'https://security.netapp.com/advisory/ntap-20240621-0006/',
-                'https://ubuntu.com/security/notices/USN-6039-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.couchbase.com/alerts/',
-                'https://www.cve.org/CVERecord?id=CVE-2023-0464',
-                'https://www.debian.org/security/2023/dsa-5417',
-                'https://www.openssl.org/news/secadv/20230322.txt'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: Denial of service by excessive resource usage in verifying X509 policy constraints'
-            },
-            {
-              'cve':  'CVE-2022-2097',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N'
-                },
-                'nvd': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N'
-                },
-                'redhat': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-327'
-              ],
-              'description':   "AES OCB mode for 32-bit x86 platforms using the AES-NI assembly optimised implementation will not encrypt the entirety of the data under some circumstances. This could reveal sixteen bytes of data that was preexisting in the memory that wasn't written. In the special case of \"in place\" encryption, sixteen bytes of the plaintext would be revealed. Since OpenSSL does not support OCB based cipher suites for TLS and DTLS, they are both unaffected. Fixed in OpenSSL 3.0.5 (Affected 3.0.0-3.0.4). Fixed in OpenSSL 1.1.1q (Affected 1.1.1-1.1.1p).",
-              'diffID':        'sha256:bd0500be1dbaabf306dd0c2c6f3f47c024a0fc8e61aff500d82000f6a4c543e7',
-              'fixedVersions': [
-                '1.1.1q-r0'
-              ],
-              'installedVersion': '1.1.1l-r0',
-              'packageName':      'libcrypto1.1',
-              'purl':             'pkg:apk/alpine/libcrypto1.1@1.1.1l-r0?arch=s390x&distro=3.14.2',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2022:6224',
-                'https://access.redhat.com/security/cve/CVE-2022-2097',
-                'https://bugzilla.redhat.com/2081494',
-                'https://bugzilla.redhat.com/2087911',
-                'https://bugzilla.redhat.com/2087913',
-                'https://bugzilla.redhat.com/2097310',
-                'https://bugzilla.redhat.com/2104905',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2081494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2097310',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2100554',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2104905',
-                'https://cert-portal.siemens.com/productcert/pdf/ssa-332410.pdf',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-1292',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-2068',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-2097',
-                'https://errata.almalinux.org/9/ALSA-2022-6224.html',
-                'https://errata.rockylinux.org/RLSA-2022:5818',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=919925673d6c9cfed3c1085497f5dfbbed5fc431',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=a98f339ddd7e8f487d6e0088d4a9a42324885a93',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=919925673d6c9cfed3c1085497f5dfbbed5fc431',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=a98f339ddd7e8f487d6e0088d4a9a42324885a93',
-                'https://github.com/alexcrichton/openssl-src-rs',
-                'https://linux.oracle.com/cve/CVE-2022-2097.html',
-                'https://linux.oracle.com/errata/ELSA-2022-9955.html',
-                'https://lists.debian.org/debian-lts-announce/2023/02/msg00019.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/R6CK57NBQFTPUMXAPJURCGXUYT76NQAK',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/R6CK57NBQFTPUMXAPJURCGXUYT76NQAK/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/V6567JERRHHJW2GNGJGKDRNHR7SNPZK7',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/V6567JERRHHJW2GNGJGKDRNHR7SNPZK7/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VCMNWKERPBKOEBNL7CLTTX3ZZCZLH7XA',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VCMNWKERPBKOEBNL7CLTTX3ZZCZLH7XA/',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/R6CK57NBQFTPUMXAPJURCGXUYT76NQAK',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/R6CK57NBQFTPUMXAPJURCGXUYT76NQAK/',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/V6567JERRHHJW2GNGJGKDRNHR7SNPZK7',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/V6567JERRHHJW2GNGJGKDRNHR7SNPZK7/',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/VCMNWKERPBKOEBNL7CLTTX3ZZCZLH7XA',
-                'https://nvd.nist.gov/vuln/detail/CVE-2022-2097',
-                'https://rustsec.org/advisories/RUSTSEC-2022-0032.html',
-                'https://security.gentoo.org/glsa/202210-02',
-                'https://security.netapp.com/advisory/ntap-20220715-0011',
-                'https://security.netapp.com/advisory/ntap-20220715-0011/',
-                'https://security.netapp.com/advisory/ntap-20230420-0008',
-                'https://security.netapp.com/advisory/ntap-20230420-0008/',
-                'https://security.netapp.com/advisory/ntap-20240621-0006',
-                'https://security.netapp.com/advisory/ntap-20240621-0006/',
-                'https://ubuntu.com/security/notices/USN-5502-1',
-                'https://ubuntu.com/security/notices/USN-6457-1',
-                'https://www.cve.org/CVERecord?id=CVE-2022-2097',
-                'https://www.debian.org/security/2023/dsa-5343',
-                'https://www.openssl.org/news/secadv/20220705.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: AES OCB fails to encrypt some bytes'
-            },
-            {
-              'cve':  'CVE-2022-4304',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N'
-                },
-                'nvd': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N'
-                },
-                'redhat': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-203'
-              ],
-              'description':   'A timing based side channel exists in the OpenSSL RSA Decryption implementation\nwhich could be sufficient to recover a plaintext across a network in a\nBleichenbacher style attack. To achieve a successful decryption an attacker\nwould have to be able to send a very large number of trial messages for\ndecryption. The vulnerability affects all RSA padding modes: PKCS#1 v1.5,\nRSA-OEAP and RSASVE.\n\nFor example, in a TLS connection, RSA is commonly used by a client to send an\nencrypted pre-master secret to the server. An attacker that had observed a\ngenuine connection between a client and a server could use this flaw to send\ntrial messages to the server and record the time taken to process them. After a\nsufficiently large number of messages the attacker could recover the pre-master\nsecret used for the original connection and thus be able to decrypt the\napplication data sent over that connection.',
-              'diffID':        'sha256:bd0500be1dbaabf306dd0c2c6f3f47c024a0fc8e61aff500d82000f6a4c543e7',
-              'fixedVersions': [
-                '1.1.1t-r0'
-              ],
-              'installedVersion': '1.1.1l-r0',
-              'packageName':      'libcrypto1.1',
-              'purl':             'pkg:apk/alpine/libcrypto1.1@1.1.1l-r0?arch=s390x&distro=3.14.2',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2023:2165',
-                'https://access.redhat.com/security/cve/CVE-2022-4304',
-                'https://bugzilla.redhat.com/1960321',
-                'https://bugzilla.redhat.com/2164440',
-                'https://bugzilla.redhat.com/2164487',
-                'https://bugzilla.redhat.com/2164492',
-                'https://bugzilla.redhat.com/2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144000',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144003',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144006',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144008',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144010',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144012',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144015',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144017',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144019',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2145170',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2158412',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164440',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164487',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164488',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164492',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164497',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164499',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164500',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4203',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4304',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4450',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0215',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0216',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0217',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0286',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0401',
-                'https://errata.almalinux.org/9/ALSA-2023-2165.html',
-                'https://errata.rockylinux.org/RLSA-2023:0946',
-                'https://linux.oracle.com/cve/CVE-2022-4304.html',
-                'https://linux.oracle.com/errata/ELSA-2023-32791.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2022-4304',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0003',
-                'https://rustsec.org/advisories/RUSTSEC-2023-0007.html',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://ubuntu.com/security/notices/USN-5844-1',
-                'https://ubuntu.com/security/notices/USN-6564-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2022-4304',
-                'https://www.openssl.org/news/secadv/20230207.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: timing attack in RSA Decryption implementation'
-            },
-            {
-              'cve':  'CVE-2023-0465',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N'
-                },
-                'redhat': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-295'
-              ],
-              'description':   "Applications that use a non-default option when verifying certificates may be\nvulnerable to an attack from a malicious CA to circumvent certain checks.\n\nInvalid certificate policies in leaf certificates are silently ignored by\nOpenSSL and other certificate policy checks are skipped for that certificate.\nA malicious CA could use this to deliberately assert invalid certificate policies\nin order to circumvent policy checking on the certificate altogether.\n\nPolicy processing is disabled by default but can be enabled by passing\nthe `-policy' argument to the command line utilities or by calling the\n`X509_VERIFY_PARAM_set1_policies()' function.",
-              'diffID':        'sha256:bd0500be1dbaabf306dd0c2c6f3f47c024a0fc8e61aff500d82000f6a4c543e7',
-              'fixedVersions': [
-                '1.1.1t-r2'
-              ],
-              'installedVersion': '1.1.1l-r0',
-              'packageName':      'libcrypto1.1',
-              'purl':             'pkg:apk/alpine/libcrypto1.1@1.1.1l-r0?arch=s390x&distro=3.14.2',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2023:3722',
-                'https://access.redhat.com/security/cve/CVE-2023-0465',
-                'https://bugzilla.redhat.com/2181082',
-                'https://bugzilla.redhat.com/2182561',
-                'https://bugzilla.redhat.com/2182565',
-                'https://bugzilla.redhat.com/2188461',
-                'https://bugzilla.redhat.com/2207947',
-                'https://errata.almalinux.org/9/ALSA-2023-3722.html',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=10325176f3d3e98c6e2b3bf5ab1e3b334de6947a',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=1dd43e0709fece299b15208f36cc7c76209ba0bb',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=b013765abfa80036dc779dd0e50602c57bb3bf95',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=facfb1ab745646e97a1920977ae4a9965ea61d5c',
-                'https://linux.oracle.com/cve/CVE-2023-0465.html',
-                'https://linux.oracle.com/errata/ELSA-2023-3722.html',
-                'https://lists.debian.org/debian-lts-announce/2023/06/msg00011.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-0465',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://security.netapp.com/advisory/ntap-20230414-0001/',
-                'https://ubuntu.com/security/notices/USN-6039-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-0465',
-                'https://www.debian.org/security/2023/dsa-5417',
-                'https://www.openssl.org/news/secadv/20230328.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: Invalid certificate policies in leaf certificates are silently ignored'
-            },
-            {
-              'cve':  'CVE-2022-0778',
-              'cvss': {
-                'bitnami': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'ghsa': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'nvd': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-835'
-              ],
-              'description':   'The BN_mod_sqrt() function, which computes a modular square root, contains a bug that can cause it to loop forever for non-prime moduli. Internally this function is used when parsing certificates that contain elliptic curve public keys in compressed form or explicit elliptic curve parameters with a base point encoded in compressed form. It is possible to trigger the infinite loop by crafting a certificate that has invalid explicit curve parameters. Since certificate parsing happens prior to verification of the certificate signature, any process that parses an externally supplied certificate may thus be subject to a denial of service attack. The infinite loop can also be reached when parsing crafted private keys as they can contain explicit elliptic curve parameters. Thus vulnerable situations include: - TLS clients consuming server certificates - TLS servers consuming client certificates - Hosting providers taking certificates or private keys from customers - Certificate authorities parsing certification requests from subscribers - Anything else which parses ASN.1 elliptic curve parameters Also any other applications that use the BN_mod_sqrt() where the attacker can control the parameter values are vulnerable to this DoS issue. In the OpenSSL 1.0.2 version the public key is not parsed during initial parsing of the certificate which makes it slightly harder to trigger the infinite loop. However any operation which requires the public key from the certificate will trigger the infinite loop. In particular the attacker can use a self-signed certificate to trigger the loop during verification of the certificate signature. This issue affects OpenSSL versions 1.0.2, 1.1.1 and 3.0. It was addressed in the releases of 1.1.1n and 3.0.2 on the 15th March 2022. Fixed in OpenSSL 3.0.2 (Affected 3.0.0,3.0.1). Fixed in OpenSSL 1.1.1n (Affected 1.1.1-1.1.1m). Fixed in OpenSSL 1.0.2zd (Affected 1.0.2-1.0.2zc).',
-              'diffID':        'sha256:bd0500be1dbaabf306dd0c2c6f3f47c024a0fc8e61aff500d82000f6a4c543e7',
-              'fixedVersions': [
-                '3.3.3p1-r3'
-              ],
-              'installedVersion': '3.3.3p1-r2',
-              'packageName':      'libretls',
-              'purl':             'pkg:apk/alpine/libretls@3.3.3p1-r2?arch=s390x&distro=3.14.2',
-              'references':       [
-                'http://packetstormsecurity.com/files/167344/OpenSSL-1.0.2-1.1.1-3.0-BN_mod_sqrt-Infinite-Loop.html',
-                'http://seclists.org/fulldisclosure/2022/May/33',
-                'http://seclists.org/fulldisclosure/2022/May/35',
-                'http://seclists.org/fulldisclosure/2022/May/38',
-                'https://access.redhat.com/errata/RHSA-2022:5326',
-                'https://access.redhat.com/security/cve/CVE-2022-0778',
-                'https://bugzilla.redhat.com/2062202',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2062202',
-                'https://cert-portal.siemens.com/productcert/pdf/ssa-712929.pdf',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-0778',
-                'https://errata.almalinux.org/8/ALSA-2022-5326.html',
-                'https://errata.rockylinux.org/RLSA-2022:4899',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=3118eb64934499d93db3230748a452351d1d9a65',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=380085481c64de749a6dd25cdf0bcf4360b30f83',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=a466912611aa6cbdf550cd10601390e587451246',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=3118eb64934499d93db3230748a452351d1d9a65',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=380085481c64de749a6dd25cdf0bcf4360b30f83',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=a466912611aa6cbdf550cd10601390e587451246',
-                'https://linux.oracle.com/cve/CVE-2022-0778.html',
-                'https://linux.oracle.com/errata/ELSA-2022-9272.html',
-                'https://lists.debian.org/debian-lts-announce/2022/03/msg00023.html',
-                'https://lists.debian.org/debian-lts-announce/2022/03/msg00024.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/323SNN6ZX7PRJJWP2BUAFLPUAE42XWLZ',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/323SNN6ZX7PRJJWP2BUAFLPUAE42XWLZ/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GDB3GQVJPXJE7X5C5JN6JAA4XUDWD6E6',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GDB3GQVJPXJE7X5C5JN6JAA4XUDWD6E6/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/W6K3PR542DXWLEFFMFIDMME4CWMHJRMG',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/W6K3PR542DXWLEFFMFIDMME4CWMHJRMG/',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/323SNN6ZX7PRJJWP2BUAFLPUAE42XWLZ',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/GDB3GQVJPXJE7X5C5JN6JAA4XUDWD6E6',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/W6K3PR542DXWLEFFMFIDMME4CWMHJRMG',
-                'https://nvd.nist.gov/vuln/detail/CVE-2022-0778',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2022-0002',
-                'https://rustsec.org/advisories/RUSTSEC-2022-0014.html',
-                'https://security.gentoo.org/glsa/202210-02',
-                'https://security.netapp.com/advisory/ntap-20220321-0002',
-                'https://security.netapp.com/advisory/ntap-20220321-0002/',
-                'https://security.netapp.com/advisory/ntap-20220429-0005',
-                'https://security.netapp.com/advisory/ntap-20220429-0005/',
-                'https://security.netapp.com/advisory/ntap-20240621-0006',
-                'https://security.netapp.com/advisory/ntap-20240621-0006/',
-                'https://support.apple.com/kb/HT213255',
-                'https://support.apple.com/kb/HT213256',
-                'https://support.apple.com/kb/HT213257',
-                'https://ubuntu.com/security/notices/USN-5328-1',
-                'https://ubuntu.com/security/notices/USN-5328-2',
-                'https://ubuntu.com/security/notices/USN-6457-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2022-0778',
-                'https://www.debian.org/security/2022/dsa-5103',
-                'https://www.openssl.org/news/secadv/20220315.txt',
-                'https://www.oracle.com/security-alerts/cpuapr2022.html',
-                'https://www.oracle.com/security-alerts/cpujul2022.html',
-                'https://www.tenable.com/security/tns-2022-06',
-                'https://www.tenable.com/security/tns-2022-07',
-                'https://www.tenable.com/security/tns-2022-08',
-                'https://www.tenable.com/security/tns-2022-09'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: Infinite loop in BN_mod_sqrt() reachable when parsing certificates'
-            },
-            {
-              'cve':  'CVE-2022-0778',
-              'cvss': {
-                'bitnami': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'ghsa': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'nvd': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-835'
-              ],
-              'description':   'The BN_mod_sqrt() function, which computes a modular square root, contains a bug that can cause it to loop forever for non-prime moduli. Internally this function is used when parsing certificates that contain elliptic curve public keys in compressed form or explicit elliptic curve parameters with a base point encoded in compressed form. It is possible to trigger the infinite loop by crafting a certificate that has invalid explicit curve parameters. Since certificate parsing happens prior to verification of the certificate signature, any process that parses an externally supplied certificate may thus be subject to a denial of service attack. The infinite loop can also be reached when parsing crafted private keys as they can contain explicit elliptic curve parameters. Thus vulnerable situations include: - TLS clients consuming server certificates - TLS servers consuming client certificates - Hosting providers taking certificates or private keys from customers - Certificate authorities parsing certification requests from subscribers - Anything else which parses ASN.1 elliptic curve parameters Also any other applications that use the BN_mod_sqrt() where the attacker can control the parameter values are vulnerable to this DoS issue. In the OpenSSL 1.0.2 version the public key is not parsed during initial parsing of the certificate which makes it slightly harder to trigger the infinite loop. However any operation which requires the public key from the certificate will trigger the infinite loop. In particular the attacker can use a self-signed certificate to trigger the loop during verification of the certificate signature. This issue affects OpenSSL versions 1.0.2, 1.1.1 and 3.0. It was addressed in the releases of 1.1.1n and 3.0.2 on the 15th March 2022. Fixed in OpenSSL 3.0.2 (Affected 3.0.0,3.0.1). Fixed in OpenSSL 1.1.1n (Affected 1.1.1-1.1.1m). Fixed in OpenSSL 1.0.2zd (Affected 1.0.2-1.0.2zc).',
-              'diffID':        'sha256:bd0500be1dbaabf306dd0c2c6f3f47c024a0fc8e61aff500d82000f6a4c543e7',
-              'fixedVersions': [
-                '1.1.1n-r0'
-              ],
-              'installedVersion': '1.1.1l-r0',
-              'packageName':      'libssl1.1',
-              'purl':             'pkg:apk/alpine/libssl1.1@1.1.1l-r0?arch=s390x&distro=3.14.2',
-              'references':       [
-                'http://packetstormsecurity.com/files/167344/OpenSSL-1.0.2-1.1.1-3.0-BN_mod_sqrt-Infinite-Loop.html',
-                'http://seclists.org/fulldisclosure/2022/May/33',
-                'http://seclists.org/fulldisclosure/2022/May/35',
-                'http://seclists.org/fulldisclosure/2022/May/38',
-                'https://access.redhat.com/errata/RHSA-2022:5326',
-                'https://access.redhat.com/security/cve/CVE-2022-0778',
-                'https://bugzilla.redhat.com/2062202',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2062202',
-                'https://cert-portal.siemens.com/productcert/pdf/ssa-712929.pdf',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-0778',
-                'https://errata.almalinux.org/8/ALSA-2022-5326.html',
-                'https://errata.rockylinux.org/RLSA-2022:4899',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=3118eb64934499d93db3230748a452351d1d9a65',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=380085481c64de749a6dd25cdf0bcf4360b30f83',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=a466912611aa6cbdf550cd10601390e587451246',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=3118eb64934499d93db3230748a452351d1d9a65',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=380085481c64de749a6dd25cdf0bcf4360b30f83',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=a466912611aa6cbdf550cd10601390e587451246',
-                'https://linux.oracle.com/cve/CVE-2022-0778.html',
-                'https://linux.oracle.com/errata/ELSA-2022-9272.html',
-                'https://lists.debian.org/debian-lts-announce/2022/03/msg00023.html',
-                'https://lists.debian.org/debian-lts-announce/2022/03/msg00024.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/323SNN6ZX7PRJJWP2BUAFLPUAE42XWLZ',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/323SNN6ZX7PRJJWP2BUAFLPUAE42XWLZ/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GDB3GQVJPXJE7X5C5JN6JAA4XUDWD6E6',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GDB3GQVJPXJE7X5C5JN6JAA4XUDWD6E6/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/W6K3PR542DXWLEFFMFIDMME4CWMHJRMG',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/W6K3PR542DXWLEFFMFIDMME4CWMHJRMG/',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/323SNN6ZX7PRJJWP2BUAFLPUAE42XWLZ',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/GDB3GQVJPXJE7X5C5JN6JAA4XUDWD6E6',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/W6K3PR542DXWLEFFMFIDMME4CWMHJRMG',
-                'https://nvd.nist.gov/vuln/detail/CVE-2022-0778',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2022-0002',
-                'https://rustsec.org/advisories/RUSTSEC-2022-0014.html',
-                'https://security.gentoo.org/glsa/202210-02',
-                'https://security.netapp.com/advisory/ntap-20220321-0002',
-                'https://security.netapp.com/advisory/ntap-20220321-0002/',
-                'https://security.netapp.com/advisory/ntap-20220429-0005',
-                'https://security.netapp.com/advisory/ntap-20220429-0005/',
-                'https://security.netapp.com/advisory/ntap-20240621-0006',
-                'https://security.netapp.com/advisory/ntap-20240621-0006/',
-                'https://support.apple.com/kb/HT213255',
-                'https://support.apple.com/kb/HT213256',
-                'https://support.apple.com/kb/HT213257',
-                'https://ubuntu.com/security/notices/USN-5328-1',
-                'https://ubuntu.com/security/notices/USN-5328-2',
-                'https://ubuntu.com/security/notices/USN-6457-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2022-0778',
-                'https://www.debian.org/security/2022/dsa-5103',
-                'https://www.openssl.org/news/secadv/20220315.txt',
-                'https://www.oracle.com/security-alerts/cpuapr2022.html',
-                'https://www.oracle.com/security-alerts/cpujul2022.html',
-                'https://www.tenable.com/security/tns-2022-06',
-                'https://www.tenable.com/security/tns-2022-07',
-                'https://www.tenable.com/security/tns-2022-08',
-                'https://www.tenable.com/security/tns-2022-09'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: Infinite loop in BN_mod_sqrt() reachable when parsing certificates'
-            },
-            {
-              'cve':  'CVE-2022-4450',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'nvd': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-415'
-              ],
-              'description':   'The function PEM_read_bio_ex() reads a PEM file from a BIO and parses and\ndecodes the "name" (e.g. "CERTIFICATE"), any header data and the payload data.\nIf the function succeeds then the "name_out", "header" and "data" arguments are\npopulated with pointers to buffers containing the relevant decoded data. The\ncaller is responsible for freeing those buffers. It is possible to construct a\nPEM file that results in 0 bytes of payload data. In this case PEM_read_bio_ex()\nwill return a failure code but will populate the header argument with a pointer\nto a buffer that has already been freed. If the caller also frees this buffer\nthen a double free will occur. This will most likely lead to a crash. This\ncould be exploited by an attacker who has the ability to supply malicious PEM\nfiles for parsing to achieve a denial of service attack.\n\nThe functions PEM_read_bio() and PEM_read() are simple wrappers around\nPEM_read_bio_ex() and therefore these functions are also directly affected.\n\nThese functions are also called indirectly by a number of other OpenSSL\nfunctions including PEM_X509_INFO_read_bio_ex() and\nSSL_CTX_use_serverinfo_file() which are also vulnerable. Some OpenSSL internal\nuses of these functions are not vulnerable because the caller does not free the\nheader argument if PEM_read_bio_ex() returns a failure code. These locations\ninclude the PEM_read_bio_TYPE() functions as well as the decoders introduced in\nOpenSSL 3.0.\n\nThe OpenSSL asn1parse command line application is also impacted by this issue.',
-              'diffID':        'sha256:bd0500be1dbaabf306dd0c2c6f3f47c024a0fc8e61aff500d82000f6a4c543e7',
-              'fixedVersions': [
-                '1.1.1t-r0'
-              ],
-              'installedVersion': '1.1.1l-r0',
-              'packageName':      'libssl1.1',
-              'purl':             'pkg:apk/alpine/libssl1.1@1.1.1l-r0?arch=s390x&distro=3.14.2',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2023:2165',
-                'https://access.redhat.com/security/cve/CVE-2022-4450',
-                'https://bugzilla.redhat.com/1960321',
-                'https://bugzilla.redhat.com/2164440',
-                'https://bugzilla.redhat.com/2164487',
-                'https://bugzilla.redhat.com/2164492',
-                'https://bugzilla.redhat.com/2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144000',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144003',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144006',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144008',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144010',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144012',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144015',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144017',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144019',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2145170',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2158412',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164440',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164487',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164488',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164492',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164497',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164499',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164500',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4203',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4304',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4450',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0215',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0216',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0217',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0286',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0401',
-                'https://errata.almalinux.org/9/ALSA-2023-2165.html',
-                'https://errata.rockylinux.org/RLSA-2023:0946',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=63bcf189be73a9cc1264059bed6f57974be74a83',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=bbcf509bd046b34cca19c766bbddc31683d0858b',
-                'https://linux.oracle.com/cve/CVE-2022-4450.html',
-                'https://linux.oracle.com/errata/ELSA-2023-32791.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2022-4450',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0003',
-                'https://rustsec.org/advisories/RUSTSEC-2023-0010.html',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://ubuntu.com/security/notices/USN-5844-1',
-                'https://ubuntu.com/security/notices/USN-6564-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2022-4450',
-                'https://www.openssl.org/news/secadv/20230207.txt'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: double free after calling PEM_read_bio_ex'
-            },
-            {
-              'cve':  'CVE-2023-0215',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'nvd': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   'The public API function BIO_new_NDEF is a helper function used for streaming\nASN.1 data via a BIO. It is primarily used internally to OpenSSL to support the\nSMIME, CMS and PKCS7 streaming capabilities, but may also be called directly by\nend user applications.\n\nThe function receives a BIO from the caller, prepends a new BIO_f_asn1 filter\nBIO onto the front of it to form a BIO chain, and then returns the new head of\nthe BIO chain to the caller. Under certain conditions, for example if a CMS\nrecipient public key is invalid, the new filter BIO is freed and the function\nreturns a NULL result indicating a failure. However, in this case, the BIO chain\nis not properly cleaned up and the BIO passed by the caller still retains\ninternal pointers to the previously freed filter BIO. If the caller then goes on\nto call BIO_pop() on the BIO then a use-after-free will occur. This will most\nlikely result in a crash.\n\n\n\nThis scenario occurs directly in the internal function B64_write_ASN1() which\nmay cause BIO_new_NDEF() to be called and will subsequently call BIO_pop() on\nthe BIO. This internal function is in turn called by the public API functions\nPEM_write_bio_ASN1_stream, PEM_write_bio_CMS_stream, PEM_write_bio_PKCS7_stream,\nSMIME_write_ASN1, SMIME_write_CMS and SMIME_write_PKCS7.\n\nOther public API functions that may be impacted by this include\ni2d_ASN1_bio_stream, BIO_new_CMS, BIO_new_PKCS7, i2d_CMS_bio_stream and\ni2d_PKCS7_bio_stream.\n\nThe OpenSSL cms and smime command line applications are similarly affected.',
-              'diffID':        'sha256:bd0500be1dbaabf306dd0c2c6f3f47c024a0fc8e61aff500d82000f6a4c543e7',
-              'fixedVersions': [
-                '1.1.1t-r0'
-              ],
-              'installedVersion': '1.1.1l-r0',
-              'packageName':      'libssl1.1',
-              'purl':             'pkg:apk/alpine/libssl1.1@1.1.1l-r0?arch=s390x&distro=3.14.2',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2023:2165',
-                'https://access.redhat.com/security/cve/CVE-2023-0215',
-                'https://bugzilla.redhat.com/1960321',
-                'https://bugzilla.redhat.com/2164440',
-                'https://bugzilla.redhat.com/2164487',
-                'https://bugzilla.redhat.com/2164492',
-                'https://bugzilla.redhat.com/2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144000',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144003',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144006',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144008',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144010',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144012',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144015',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144017',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144019',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2145170',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2158412',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164440',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164487',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164488',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164492',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164497',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164499',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164500',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4203',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4304',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4450',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0215',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0216',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0217',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0286',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0401',
-                'https://errata.almalinux.org/9/ALSA-2023-2165.html',
-                'https://errata.rockylinux.org/RLSA-2023:0946',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=8818064ce3c3c0f1b740a5aaba2a987e75bfbafd',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=9816136fe31d92ace4037d5da5257f763aeeb4eb',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=c3829dd8825c654652201e16f8a0a0c46ee3f344',
-                'https://linux.oracle.com/cve/CVE-2023-0215.html',
-                'https://linux.oracle.com/errata/ELSA-2023-32791.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-0215',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0003',
-                'https://rustsec.org/advisories/RUSTSEC-2023-0009.html',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://security.netapp.com/advisory/ntap-20230427-0007',
-                'https://security.netapp.com/advisory/ntap-20230427-0007/',
-                'https://security.netapp.com/advisory/ntap-20230427-0009',
-                'https://security.netapp.com/advisory/ntap-20230427-0009/',
-                'https://security.netapp.com/advisory/ntap-20240621-0006',
-                'https://security.netapp.com/advisory/ntap-20240621-0006/',
-                'https://ubuntu.com/security/notices/USN-5844-1',
-                'https://ubuntu.com/security/notices/USN-5845-1',
-                'https://ubuntu.com/security/notices/USN-5845-2',
-                'https://ubuntu.com/security/notices/USN-6564-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-0215',
-                'https://www.openssl.org/news/secadv/20230207.txt'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: use-after-free following BIO_new_NDEF'
-            },
-            {
-              'cve':  'CVE-2023-0286',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '7.4',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H'
-                },
-                'nvd': {
-                  'v3score':  '7.4',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.4',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-843'
-              ],
-              'description':   'There is a type confusion vulnerability relating to X.400 address processing\ninside an X.509 GeneralName. X.400 addresses were parsed as an ASN1_STRING but\nthe public structure definition for GENERAL_NAME incorrectly specified the type\nof the x400Address field as ASN1_TYPE. This field is subsequently interpreted by\nthe OpenSSL function GENERAL_NAME_cmp as an ASN1_TYPE rather than an\nASN1_STRING.\n\nWhen CRL checking is enabled (i.e. the application sets the\nX509_V_FLAG_CRL_CHECK flag), this vulnerability may allow an attacker to pass\narbitrary pointers to a memcmp call, enabling them to read memory contents or\nenact a denial of service. In most cases, the attack requires the attacker to\nprovide both the certificate chain and CRL, neither of which need to have a\nvalid signature. If the attacker only controls one of these inputs, the other\ninput must already contain an X.400 address as a CRL distribution point, which\nis uncommon. As such, this vulnerability is most likely to only affect\napplications which have implemented their own functionality for retrieving CRLs\nover a network.',
-              'diffID':        'sha256:bd0500be1dbaabf306dd0c2c6f3f47c024a0fc8e61aff500d82000f6a4c543e7',
-              'fixedVersions': [
-                '1.1.1t-r0'
-              ],
-              'installedVersion': '1.1.1l-r0',
-              'packageName':      'libssl1.1',
-              'purl':             'pkg:apk/alpine/libssl1.1@1.1.1l-r0?arch=s390x&distro=3.14.2',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2025:7937',
-                'https://access.redhat.com/security/cve/CVE-2023-0286',
-                'https://access.redhat.com/security/cve/cve-2023-0286',
-                'https://bugzilla.redhat.com/2164440',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144000',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144003',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144006',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144008',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144010',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144012',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144015',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144017',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144019',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2145170',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2158412',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164440',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164487',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164488',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164492',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164497',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164499',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164500',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4203',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4304',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4450',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0215',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0216',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0217',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0286',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0401',
-                'https://errata.almalinux.org/9/ALSA-2025-7937.html',
-                'https://errata.rockylinux.org/RLSA-2023:0946',
-                'https://ftp.openbsd.org/pub/OpenBSD/LibreSSL/libressl-3.6.2-relnotes.txt',
-                'https://ftp.openbsd.org/pub/OpenBSD/patches/7.2/common/018_x509.patch.sig',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=2c6c9d439b484e1ba9830d8454a34fa4f80fdfe9',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=2f7530077e0ef79d98718138716bc51ca0cad658',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=fd2af07dc083a350c959147097003a14a5e8ac4d',
-                'https://github.com/pyca/cryptography',
-                'https://github.com/pyca/cryptography/security/advisories/GHSA-x4qr-2fvf-3mr5',
-                'https://linux.oracle.com/cve/CVE-2023-0286.html',
-                'https://linux.oracle.com/errata/ELSA-2025-7937.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-0286',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0003',
-                'https://rustsec.org/advisories/RUSTSEC-2023-0006.html',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://ubuntu.com/security/notices/USN-5844-1',
-                'https://ubuntu.com/security/notices/USN-5845-1',
-                'https://ubuntu.com/security/notices/USN-5845-2',
-                'https://ubuntu.com/security/notices/USN-6564-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-0286',
-                'https://www.openssl.org/news/secadv/20230207.txt'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: X.400 address type confusion in X.509 GeneralName'
-            },
-            {
-              'cve':  'CVE-2023-0464',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-295'
-              ],
-              'description':   "A security vulnerability has been identified in all supported versions\n\nof OpenSSL related to the verification of X.509 certificate chains\nthat include policy constraints.  Attackers may be able to exploit this\nvulnerability by creating a malicious certificate chain that triggers\nexponential use of computational resources, leading to a denial-of-service\n(DoS) attack on affected systems.\n\nPolicy processing is disabled by default but can be enabled by passing\nthe `-policy' argument to the command line utilities or by calling the\n`X509_VERIFY_PARAM_set1_policies()' function.",
-              'diffID':        'sha256:bd0500be1dbaabf306dd0c2c6f3f47c024a0fc8e61aff500d82000f6a4c543e7',
-              'fixedVersions': [
-                '1.1.1t-r1'
-              ],
-              'installedVersion': '1.1.1l-r0',
-              'packageName':      'libssl1.1',
-              'purl':             'pkg:apk/alpine/libssl1.1@1.1.1l-r0?arch=s390x&distro=3.14.2',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2023:3722',
-                'https://access.redhat.com/security/cve/CVE-2023-0464',
-                'https://bugzilla.redhat.com/2181082',
-                'https://bugzilla.redhat.com/2182561',
-                'https://bugzilla.redhat.com/2182565',
-                'https://bugzilla.redhat.com/2188461',
-                'https://bugzilla.redhat.com/2207947',
-                'https://errata.almalinux.org/9/ALSA-2023-3722.html',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=2017771e2db3e2b96f89bbe8766c3209f6a99545',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=2dcd4f1e3115f38cefa43e3efbe9b801c27e642e',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=879f7080d7e141f415c79eaa3a8ac4a3dad0348b',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=959c59c7a0164117e7f8366466a32bb1f8d77ff1',
-                'https://linux.oracle.com/cve/CVE-2023-0464.html',
-                'https://linux.oracle.com/errata/ELSA-2023-3722.html',
-                'https://lists.debian.org/debian-lts-announce/2023/06/msg00011.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-0464',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://security.netapp.com/advisory/ntap-20230406-0006/',
-                'https://security.netapp.com/advisory/ntap-20240621-0006/',
-                'https://ubuntu.com/security/notices/USN-6039-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.couchbase.com/alerts/',
-                'https://www.cve.org/CVERecord?id=CVE-2023-0464',
-                'https://www.debian.org/security/2023/dsa-5417',
-                'https://www.openssl.org/news/secadv/20230322.txt'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: Denial of service by excessive resource usage in verifying X509 policy constraints'
-            },
-            {
-              'cve':  'CVE-2022-2097',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N'
-                },
-                'nvd': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N'
-                },
-                'redhat': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-327'
-              ],
-              'description':   "AES OCB mode for 32-bit x86 platforms using the AES-NI assembly optimised implementation will not encrypt the entirety of the data under some circumstances. This could reveal sixteen bytes of data that was preexisting in the memory that wasn't written. In the special case of \"in place\" encryption, sixteen bytes of the plaintext would be revealed. Since OpenSSL does not support OCB based cipher suites for TLS and DTLS, they are both unaffected. Fixed in OpenSSL 3.0.5 (Affected 3.0.0-3.0.4). Fixed in OpenSSL 1.1.1q (Affected 1.1.1-1.1.1p).",
-              'diffID':        'sha256:bd0500be1dbaabf306dd0c2c6f3f47c024a0fc8e61aff500d82000f6a4c543e7',
-              'fixedVersions': [
-                '1.1.1q-r0'
-              ],
-              'installedVersion': '1.1.1l-r0',
-              'packageName':      'libssl1.1',
-              'purl':             'pkg:apk/alpine/libssl1.1@1.1.1l-r0?arch=s390x&distro=3.14.2',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2022:6224',
-                'https://access.redhat.com/security/cve/CVE-2022-2097',
-                'https://bugzilla.redhat.com/2081494',
-                'https://bugzilla.redhat.com/2087911',
-                'https://bugzilla.redhat.com/2087913',
-                'https://bugzilla.redhat.com/2097310',
-                'https://bugzilla.redhat.com/2104905',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2081494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2097310',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2100554',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2104905',
-                'https://cert-portal.siemens.com/productcert/pdf/ssa-332410.pdf',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-1292',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-2068',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-2097',
-                'https://errata.almalinux.org/9/ALSA-2022-6224.html',
-                'https://errata.rockylinux.org/RLSA-2022:5818',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=919925673d6c9cfed3c1085497f5dfbbed5fc431',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=a98f339ddd7e8f487d6e0088d4a9a42324885a93',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=919925673d6c9cfed3c1085497f5dfbbed5fc431',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=a98f339ddd7e8f487d6e0088d4a9a42324885a93',
-                'https://github.com/alexcrichton/openssl-src-rs',
-                'https://linux.oracle.com/cve/CVE-2022-2097.html',
-                'https://linux.oracle.com/errata/ELSA-2022-9955.html',
-                'https://lists.debian.org/debian-lts-announce/2023/02/msg00019.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/R6CK57NBQFTPUMXAPJURCGXUYT76NQAK',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/R6CK57NBQFTPUMXAPJURCGXUYT76NQAK/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/V6567JERRHHJW2GNGJGKDRNHR7SNPZK7',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/V6567JERRHHJW2GNGJGKDRNHR7SNPZK7/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VCMNWKERPBKOEBNL7CLTTX3ZZCZLH7XA',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VCMNWKERPBKOEBNL7CLTTX3ZZCZLH7XA/',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/R6CK57NBQFTPUMXAPJURCGXUYT76NQAK',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/R6CK57NBQFTPUMXAPJURCGXUYT76NQAK/',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/V6567JERRHHJW2GNGJGKDRNHR7SNPZK7',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/V6567JERRHHJW2GNGJGKDRNHR7SNPZK7/',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/VCMNWKERPBKOEBNL7CLTTX3ZZCZLH7XA',
-                'https://nvd.nist.gov/vuln/detail/CVE-2022-2097',
-                'https://rustsec.org/advisories/RUSTSEC-2022-0032.html',
-                'https://security.gentoo.org/glsa/202210-02',
-                'https://security.netapp.com/advisory/ntap-20220715-0011',
-                'https://security.netapp.com/advisory/ntap-20220715-0011/',
-                'https://security.netapp.com/advisory/ntap-20230420-0008',
-                'https://security.netapp.com/advisory/ntap-20230420-0008/',
-                'https://security.netapp.com/advisory/ntap-20240621-0006',
-                'https://security.netapp.com/advisory/ntap-20240621-0006/',
-                'https://ubuntu.com/security/notices/USN-5502-1',
-                'https://ubuntu.com/security/notices/USN-6457-1',
-                'https://www.cve.org/CVERecord?id=CVE-2022-2097',
-                'https://www.debian.org/security/2023/dsa-5343',
-                'https://www.openssl.org/news/secadv/20220705.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: AES OCB fails to encrypt some bytes'
-            },
-            {
-              'cve':  'CVE-2022-4304',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N'
-                },
-                'nvd': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N'
-                },
-                'redhat': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-203'
-              ],
-              'description':   'A timing based side channel exists in the OpenSSL RSA Decryption implementation\nwhich could be sufficient to recover a plaintext across a network in a\nBleichenbacher style attack. To achieve a successful decryption an attacker\nwould have to be able to send a very large number of trial messages for\ndecryption. The vulnerability affects all RSA padding modes: PKCS#1 v1.5,\nRSA-OEAP and RSASVE.\n\nFor example, in a TLS connection, RSA is commonly used by a client to send an\nencrypted pre-master secret to the server. An attacker that had observed a\ngenuine connection between a client and a server could use this flaw to send\ntrial messages to the server and record the time taken to process them. After a\nsufficiently large number of messages the attacker could recover the pre-master\nsecret used for the original connection and thus be able to decrypt the\napplication data sent over that connection.',
-              'diffID':        'sha256:bd0500be1dbaabf306dd0c2c6f3f47c024a0fc8e61aff500d82000f6a4c543e7',
-              'fixedVersions': [
-                '1.1.1t-r0'
-              ],
-              'installedVersion': '1.1.1l-r0',
-              'packageName':      'libssl1.1',
-              'purl':             'pkg:apk/alpine/libssl1.1@1.1.1l-r0?arch=s390x&distro=3.14.2',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2023:2165',
-                'https://access.redhat.com/security/cve/CVE-2022-4304',
-                'https://bugzilla.redhat.com/1960321',
-                'https://bugzilla.redhat.com/2164440',
-                'https://bugzilla.redhat.com/2164487',
-                'https://bugzilla.redhat.com/2164492',
-                'https://bugzilla.redhat.com/2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144000',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144003',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144006',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144008',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144010',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144012',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144015',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144017',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144019',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2145170',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2158412',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164440',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164487',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164488',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164492',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164497',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164499',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164500',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4203',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4304',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4450',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0215',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0216',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0217',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0286',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0401',
-                'https://errata.almalinux.org/9/ALSA-2023-2165.html',
-                'https://errata.rockylinux.org/RLSA-2023:0946',
-                'https://linux.oracle.com/cve/CVE-2022-4304.html',
-                'https://linux.oracle.com/errata/ELSA-2023-32791.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2022-4304',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0003',
-                'https://rustsec.org/advisories/RUSTSEC-2023-0007.html',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://ubuntu.com/security/notices/USN-5844-1',
-                'https://ubuntu.com/security/notices/USN-6564-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2022-4304',
-                'https://www.openssl.org/news/secadv/20230207.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: timing attack in RSA Decryption implementation'
-            },
-            {
-              'cve':  'CVE-2023-0465',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N'
-                },
-                'redhat': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-295'
-              ],
-              'description':   "Applications that use a non-default option when verifying certificates may be\nvulnerable to an attack from a malicious CA to circumvent certain checks.\n\nInvalid certificate policies in leaf certificates are silently ignored by\nOpenSSL and other certificate policy checks are skipped for that certificate.\nA malicious CA could use this to deliberately assert invalid certificate policies\nin order to circumvent policy checking on the certificate altogether.\n\nPolicy processing is disabled by default but can be enabled by passing\nthe `-policy' argument to the command line utilities or by calling the\n`X509_VERIFY_PARAM_set1_policies()' function.",
-              'diffID':        'sha256:bd0500be1dbaabf306dd0c2c6f3f47c024a0fc8e61aff500d82000f6a4c543e7',
-              'fixedVersions': [
-                '1.1.1t-r2'
-              ],
-              'installedVersion': '1.1.1l-r0',
-              'packageName':      'libssl1.1',
-              'purl':             'pkg:apk/alpine/libssl1.1@1.1.1l-r0?arch=s390x&distro=3.14.2',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2023:3722',
-                'https://access.redhat.com/security/cve/CVE-2023-0465',
-                'https://bugzilla.redhat.com/2181082',
-                'https://bugzilla.redhat.com/2182561',
-                'https://bugzilla.redhat.com/2182565',
-                'https://bugzilla.redhat.com/2188461',
-                'https://bugzilla.redhat.com/2207947',
-                'https://errata.almalinux.org/9/ALSA-2023-3722.html',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=10325176f3d3e98c6e2b3bf5ab1e3b334de6947a',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=1dd43e0709fece299b15208f36cc7c76209ba0bb',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=b013765abfa80036dc779dd0e50602c57bb3bf95',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=facfb1ab745646e97a1920977ae4a9965ea61d5c',
-                'https://linux.oracle.com/cve/CVE-2023-0465.html',
-                'https://linux.oracle.com/errata/ELSA-2023-3722.html',
-                'https://lists.debian.org/debian-lts-announce/2023/06/msg00011.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-0465',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://security.netapp.com/advisory/ntap-20230414-0001/',
-                'https://ubuntu.com/security/notices/USN-6039-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-0465',
-                'https://www.debian.org/security/2023/dsa-5417',
-                'https://www.openssl.org/news/secadv/20230328.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: Invalid certificate policies in leaf certificates are silently ignored'
-            },
-            {
-              'cve':  'CVE-2021-42378',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the getvar_i function",
-              'diffID':        'sha256:bd0500be1dbaabf306dd0c2c6f3f47c024a0fc8e61aff500d82000f6a4c543e7',
-              'fixedVersions': [
-                '1.33.1-r6'
-              ],
-              'installedVersion': '1.33.1-r3',
-              'packageName':      'ssl_client',
-              'purl':             'pkg:apk/alpine/ssl_client@1.33.1-r3?arch=s390x&distro=3.14.2',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42378',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42378',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42378'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the getvar_i()'
-            },
-            {
-              'cve':  'CVE-2021-42379',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the next_input_file function",
-              'diffID':        'sha256:bd0500be1dbaabf306dd0c2c6f3f47c024a0fc8e61aff500d82000f6a4c543e7',
-              'fixedVersions': [
-                '1.33.1-r6'
-              ],
-              'installedVersion': '1.33.1-r3',
-              'packageName':      'ssl_client',
-              'purl':             'pkg:apk/alpine/ssl_client@1.33.1-r3?arch=s390x&distro=3.14.2',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42379',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42379',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42379'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the next_input_file()'
-            },
-            {
-              'cve':  'CVE-2021-42380',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the clrvar function",
-              'diffID':        'sha256:bd0500be1dbaabf306dd0c2c6f3f47c024a0fc8e61aff500d82000f6a4c543e7',
-              'fixedVersions': [
-                '1.33.1-r6'
-              ],
-              'installedVersion': '1.33.1-r3',
-              'packageName':      'ssl_client',
-              'purl':             'pkg:apk/alpine/ssl_client@1.33.1-r3?arch=s390x&distro=3.14.2',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42380',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42380',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42380'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the clrvar()'
-            },
-            {
-              'cve':  'CVE-2021-42381',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the hash_init function",
-              'diffID':        'sha256:bd0500be1dbaabf306dd0c2c6f3f47c024a0fc8e61aff500d82000f6a4c543e7',
-              'fixedVersions': [
-                '1.33.1-r6'
-              ],
-              'installedVersion': '1.33.1-r3',
-              'packageName':      'ssl_client',
-              'purl':             'pkg:apk/alpine/ssl_client@1.33.1-r3?arch=s390x&distro=3.14.2',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42381',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42381',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42381'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the hash_init()'
-            },
-            {
-              'cve':  'CVE-2021-42382',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the getvar_s function",
-              'diffID':        'sha256:bd0500be1dbaabf306dd0c2c6f3f47c024a0fc8e61aff500d82000f6a4c543e7',
-              'fixedVersions': [
-                '1.33.1-r6'
-              ],
-              'installedVersion': '1.33.1-r3',
-              'packageName':      'ssl_client',
-              'purl':             'pkg:apk/alpine/ssl_client@1.33.1-r3?arch=s390x&distro=3.14.2',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42382',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42382',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42382'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the getvar_s()'
-            },
-            {
-              'cve':  'CVE-2021-42383',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the evaluate function",
-              'diffID':        'sha256:bd0500be1dbaabf306dd0c2c6f3f47c024a0fc8e61aff500d82000f6a4c543e7',
-              'fixedVersions': [
-                '1.33.1-r6'
-              ],
-              'installedVersion': '1.33.1-r3',
-              'packageName':      'ssl_client',
-              'purl':             'pkg:apk/alpine/ssl_client@1.33.1-r3?arch=s390x&distro=3.14.2',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42383',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42383',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42383'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the evaluate()'
-            },
-            {
-              'cve':  'CVE-2021-42384',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the handle_special function",
-              'diffID':        'sha256:bd0500be1dbaabf306dd0c2c6f3f47c024a0fc8e61aff500d82000f6a4c543e7',
-              'fixedVersions': [
-                '1.33.1-r6'
-              ],
-              'installedVersion': '1.33.1-r3',
-              'packageName':      'ssl_client',
-              'purl':             'pkg:apk/alpine/ssl_client@1.33.1-r3?arch=s390x&distro=3.14.2',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42384',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42384',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42384'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the handle_special()'
-            },
-            {
-              'cve':  'CVE-2021-42385',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the evaluate function",
-              'diffID':        'sha256:bd0500be1dbaabf306dd0c2c6f3f47c024a0fc8e61aff500d82000f6a4c543e7',
-              'fixedVersions': [
-                '1.33.1-r6'
-              ],
-              'installedVersion': '1.33.1-r3',
-              'packageName':      'ssl_client',
-              'purl':             'pkg:apk/alpine/ssl_client@1.33.1-r3?arch=s390x&distro=3.14.2',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42385',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42385',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42385'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the evaluate()'
-            },
-            {
-              'cve':  'CVE-2021-42386',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the nvalloc function",
-              'diffID':        'sha256:bd0500be1dbaabf306dd0c2c6f3f47c024a0fc8e61aff500d82000f6a4c543e7',
-              'fixedVersions': [
-                '1.33.1-r6'
-              ],
-              'installedVersion': '1.33.1-r3',
-              'packageName':      'ssl_client',
-              'purl':             'pkg:apk/alpine/ssl_client@1.33.1-r3?arch=s390x&distro=3.14.2',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42386',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42386',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42386'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the nvalloc()'
-            },
-            {
-              'cve':  'CVE-2022-28391',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '8.8',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-88'
-              ],
-              'description':   "BusyBox through 1.35.0 allows remote attackers to execute arbitrary code if netstat is used to print a DNS PTR record's value to a VT compatible terminal. Alternatively, the attacker could choose to change the terminal's colors.",
-              'diffID':        'sha256:bd0500be1dbaabf306dd0c2c6f3f47c024a0fc8e61aff500d82000f6a4c543e7',
-              'fixedVersions': [
-                '1.33.1-r7'
-              ],
-              'installedVersion': '1.33.1-r3',
-              'packageName':      'ssl_client',
-              'purl':             'pkg:apk/alpine/ssl_client@1.33.1-r3?arch=s390x&distro=3.14.2',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2022-28391',
-                'https://git.alpinelinux.org/aports/plain/main/busybox/0001-libbb-sockaddr2str-ensure-only-printable-characters-.patch',
-                'https://git.alpinelinux.org/aports/plain/main/busybox/0002-nslookup-sanitize-all-printed-strings-with-printable.patch',
-                'https://gitlab.alpinelinux.org/alpine/aports/-/issues/13661',
-                'https://nvd.nist.gov/vuln/detail/CVE-2022-28391',
-                'https://www.cve.org/CVERecord?id=CVE-2022-28391'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: remote attackers may execute arbitrary code if netstat is used'
-            },
-            {
-              'cve':  'CVE-2021-42374',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '5.7',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-125'
-              ],
-              'description':   "An out-of-bounds heap read in Busybox's unlzma applet leads to information leak and denial of service when crafted LZMA-compressed input is decompressed. This can be triggered by any applet/format that",
-              'diffID':        'sha256:bd0500be1dbaabf306dd0c2c6f3f47c024a0fc8e61aff500d82000f6a4c543e7',
-              'fixedVersions': [
-                '1.33.1-r4'
-              ],
-              'installedVersion': '1.33.1-r3',
-              'packageName':      'ssl_client',
-              'purl':             'pkg:apk/alpine/ssl_client@1.33.1-r3?arch=s390x&distro=3.14.2',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42374',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42374',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42374'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'busybox: out-of-bounds read in unlzma applet leads to information leak and denial of service when crafted LZMA-compressed input is decompressed'
-            },
-            {
-              'cve':  'CVE-2021-42375',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.5',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '4.1',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-159'
-              ],
-              'description':   "An incorrect handling of a special element in Busybox's ash applet leads to denial of service when processing a crafted shell command, due to the shell mistaking specific characters for reserved characters. This may be used for DoS under rare conditions of filtered command input.",
-              'diffID':        'sha256:bd0500be1dbaabf306dd0c2c6f3f47c024a0fc8e61aff500d82000f6a4c543e7',
-              'fixedVersions': [
-                '1.33.1-r5'
-              ],
-              'installedVersion': '1.33.1-r3',
-              'packageName':      'ssl_client',
-              'purl':             'pkg:apk/alpine/ssl_client@1.33.1-r3?arch=s390x&distro=3.14.2',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42375',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42375',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42375'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'busybox: incorrect handling of a special element in ash applet leads to denial of service when processing a crafted shell command'
-            },
-            {
-              'cve':  'CVE-2022-37434',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '9.8',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-787',
-                'CWE-120'
-              ],
-              'description':   'zlib through 1.2.12 has a heap-based buffer over-read or buffer overflow in inflate in inflate.c via a large gzip header extra field. NOTE: only applications that call inflateGetHeader are affected. Some common applications bundle the affected zlib source code but may be unable to call inflateGetHeader (e.g., see the nodejs/node reference).',
-              'diffID':        'sha256:bd0500be1dbaabf306dd0c2c6f3f47c024a0fc8e61aff500d82000f6a4c543e7',
-              'fixedVersions': [
-                '1.2.12-r2'
-              ],
-              'installedVersion': '1.2.11-r3',
-              'packageName':      'zlib',
-              'purl':             'pkg:apk/alpine/zlib@1.2.11-r3?arch=s390x&distro=3.14.2',
-              'references':       [
-                'http://seclists.org/fulldisclosure/2022/Oct/37',
-                'http://seclists.org/fulldisclosure/2022/Oct/38',
-                'http://seclists.org/fulldisclosure/2022/Oct/41',
-                'http://seclists.org/fulldisclosure/2022/Oct/42',
-                'http://www.openwall.com/lists/oss-security/2022/08/05/2',
-                'http://www.openwall.com/lists/oss-security/2022/08/09/1',
-                'https://access.redhat.com/errata/RHSA-2022:8291',
-                'https://access.redhat.com/security/cve/CVE-2022-37434',
-                'https://bugzilla.redhat.com/2116639',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2053198',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2077431',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2081296',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2116639',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-37434',
-                'https://errata.almalinux.org/9/ALSA-2022-8291.html',
-                'https://errata.rockylinux.org/RLSA-2022:8291',
-                'https://github.com/curl/curl/issues/9271',
-                'https://github.com/ivd38/zlib_overflow',
-                'https://github.com/madler/zlib/blob/21767c654d31d2dccdde4330529775c6c5fd5389/zlib.h#L1062-L1063',
-                'https://github.com/madler/zlib/commit/1eb7682f845ac9e9bf9ae35bbfb3bad5dacbd91d',
-                'https://github.com/madler/zlib/commit/eff308af425b67093bab25f80f1ae950166bece1',
-                'https://github.com/nodejs/node/blob/75b68c6e4db515f76df73af476eccf382bbcb00a/deps/zlib/inflate.c#L762-L764',
-                'https://linux.oracle.com/cve/CVE-2022-37434.html',
-                'https://linux.oracle.com/errata/ELSA-2023-1095.html',
-                'https://lists.debian.org/debian-lts-announce/2022/09/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JWN4VE3JQR4O2SOUS5TXNLANRPMHWV4I/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NMBOJ77A7T7PQCARMDUK75TE6LLESZ3O/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PAVPQNCG3XRLCLNSQRM3KAN5ZFMVXVTY/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/X5U7OTKZSHY2I3ZFJSR2SHFHW72RKGDK/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YRQAI7H4M4RQZ2IWZUEEXECBE5D56BH2/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2022-37434',
-                'https://security.netapp.com/advisory/ntap-20220901-0005/',
-                'https://security.netapp.com/advisory/ntap-20230427-0007/',
-                'https://support.apple.com/kb/HT213488',
-                'https://support.apple.com/kb/HT213489',
-                'https://support.apple.com/kb/HT213490',
-                'https://support.apple.com/kb/HT213491',
-                'https://support.apple.com/kb/HT213493',
-                'https://support.apple.com/kb/HT213494',
-                'https://ubuntu.com/security/notices/USN-5570-1',
-                'https://ubuntu.com/security/notices/USN-5570-2',
-                'https://ubuntu.com/security/notices/USN-5573-1',
-                'https://ubuntu.com/security/notices/USN-6736-1',
-                'https://ubuntu.com/security/notices/USN-6736-2',
-                'https://www.cve.org/CVERecord?id=CVE-2022-37434',
-                'https://www.debian.org/security/2022/dsa-5218'
-              ],
-              'severity':   'CRITICAL',
-              'suppressed': false,
-              'title':      'zlib: heap-based buffer over-read and overflow in inflate() in inflate.c via a large gzip header extra field'
-            },
-            {
-              'cve':  'CVE-2018-25032',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'nvd': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '8.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-787'
-              ],
-              'description':   'zlib before 1.2.12 allows memory corruption when deflating (i.e., when compressing) if the input has many distant matches.',
-              'diffID':        'sha256:bd0500be1dbaabf306dd0c2c6f3f47c024a0fc8e61aff500d82000f6a4c543e7',
-              'fixedVersions': [
-                '1.2.12-r0'
-              ],
-              'installedVersion': '1.2.11-r3',
-              'packageName':      'zlib',
-              'purl':             'pkg:apk/alpine/zlib@1.2.11-r3?arch=s390x&distro=3.14.2',
-              'references':       [
-                'http://seclists.org/fulldisclosure/2022/May/33',
-                'http://seclists.org/fulldisclosure/2022/May/35',
-                'http://seclists.org/fulldisclosure/2022/May/38',
-                'http://www.openwall.com/lists/oss-security/2022/03/25/2',
-                'http://www.openwall.com/lists/oss-security/2022/03/26/1',
-                'https://access.redhat.com/errata/RHSA-2022:8420',
-                'https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-25032.json',
-                'https://access.redhat.com/security/cve/CVE-2018-25032',
-                'https://bugzilla.redhat.com/2067945',
-                'https://cert-portal.siemens.com/productcert/pdf/ssa-333517.pdf',
-                'https://errata.almalinux.org/9/ALSA-2022-8420.html',
-                'https://github.com/advisories/GHSA-jc36-42cf-vqwj',
-                'https://github.com/madler/zlib/commit/5c44459c3b28a9bd3283aaceab7c615f8020c531',
-                'https://github.com/madler/zlib/compare/v1.2.11...v1.2.12',
-                'https://github.com/madler/zlib/issues/605',
-                'https://github.com/rubysec/ruby-advisory-db/blob/master/gems/nokogiri/CVE-2018-25032.yml',
-                'https://github.com/sparklemotion/nokogiri/releases/tag/v1.13.4',
-                'https://github.com/sparklemotion/nokogiri/security/advisories/GHSA-v6gp-9mmm-c6p5',
-                'https://groups.google.com/g/ruby-security-ann/c/vX7qSjsvWis/m/TJWN4oOKBwAJ',
-                'https://linux.oracle.com/cve/CVE-2018-25032.html',
-                'https://linux.oracle.com/errata/ELSA-2022-9565.html',
-                'https://lists.debian.org/debian-lts-announce/2022/04/msg00000.html',
-                'https://lists.debian.org/debian-lts-announce/2022/05/msg00008.html',
-                'https://lists.debian.org/debian-lts-announce/2022/09/msg00023.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DCZFIJBJTZ7CL5QXBFKTQ22Q26VINRUF/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DF62MVMH3QUGMBDCB3DY2ERQ6EBHTADB/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JZZPTWRYQULAOL3AW7RZJNVZ2UONXCV4/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NS2D2GFPFGOJUL4WQ3DUAY7HF4VWQ77F/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VOKNP2L734AEL47NRYGVZIKEFOUBQY5Y/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/XOKFMSNQ5D5WGMALBNBXU3GE442V74WU/',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/DCZFIJBJTZ7CL5QXBFKTQ22Q26VINRUF',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/DCZFIJBJTZ7CL5QXBFKTQ22Q26VINRUF/',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/DF62MVMH3QUGMBDCB3DY2ERQ6EBHTADB',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/DF62MVMH3QUGMBDCB3DY2ERQ6EBHTADB/',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/JZZPTWRYQULAOL3AW7RZJNVZ2UONXCV4',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/JZZPTWRYQULAOL3AW7RZJNVZ2UONXCV4/',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/NS2D2GFPFGOJUL4WQ3DUAY7HF4VWQ77F',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/NS2D2GFPFGOJUL4WQ3DUAY7HF4VWQ77F/',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/VOKNP2L734AEL47NRYGVZIKEFOUBQY5Y',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/VOKNP2L734AEL47NRYGVZIKEFOUBQY5Y/',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/XOKFMSNQ5D5WGMALBNBXU3GE442V74WU',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/XOKFMSNQ5D5WGMALBNBXU3GE442V74WU/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2018-25032',
-                'https://security.gentoo.org/glsa/202210-42',
-                'https://security.netapp.com/advisory/ntap-20220526-0009',
-                'https://security.netapp.com/advisory/ntap-20220526-0009/',
-                'https://security.netapp.com/advisory/ntap-20220729-0004',
-                'https://security.netapp.com/advisory/ntap-20220729-0004/',
-                'https://support.apple.com/kb/HT213255',
-                'https://support.apple.com/kb/HT213256',
-                'https://support.apple.com/kb/HT213257',
-                'https://ubuntu.com/security/notices/USN-5355-1',
-                'https://ubuntu.com/security/notices/USN-5355-2',
-                'https://ubuntu.com/security/notices/USN-5359-1',
-                'https://ubuntu.com/security/notices/USN-5359-2',
-                'https://ubuntu.com/security/notices/USN-5739-1',
-                'https://ubuntu.com/security/notices/USN-6736-1',
-                'https://ubuntu.com/security/notices/USN-6736-2',
-                'https://www.cve.org/CVERecord?id=CVE-2018-25032',
-                'https://www.debian.org/security/2022/dsa-5111',
-                'https://www.openwall.com/lists/oss-security/2022/03/24/1',
-                'https://www.openwall.com/lists/oss-security/2022/03/28/1',
-                'https://www.openwall.com/lists/oss-security/2022/03/28/3',
-                'https://www.oracle.com/security-alerts/cpujul2022.html'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'zlib: A flaw found in zlib when compressing (not decompressing) certain inputs'
-            }
-          ]
-        }
-      ],
-      'summary': {
-        'critical':   1,
-        'high':       32,
-        'low':        0,
-        'medium':     10,
-        'suppressed': 0,
-        'unknown':    0
-      }
-    }
-  },
-  {
-    'id':    'default/4019d353b28362ff52cc2f82ce1077859e47ab9fe0db800c17c44f5ce17e0b66',
-    'type':  'storage.sbomscanner.kubewarden.io.vulnerabilityreport',
-    'links': {
-      'patch':  'https://localhost:8005/v1/storage.sbomscanner.kubewarden.io.vulnerabilityreports/default/4019d353b28362ff52cc2f82ce1077859e47ab9fe0db800c17c44f5ce17e0b66',
-      'remove': 'https://localhost:8005/v1/storage.sbomscanner.kubewarden.io.vulnerabilityreports/default/4019d353b28362ff52cc2f82ce1077859e47ab9fe0db800c17c44f5ce17e0b66',
-      'self':   'https://localhost:8005/v1/storage.sbomscanner.kubewarden.io.vulnerabilityreports/default/4019d353b28362ff52cc2f82ce1077859e47ab9fe0db800c17c44f5ce17e0b66',
-      'update': 'https://localhost:8005/v1/storage.sbomscanner.kubewarden.io.vulnerabilityreports/default/4019d353b28362ff52cc2f82ce1077859e47ab9fe0db800c17c44f5ce17e0b66',
-      'view':   'https://localhost:8005/apis/storage.sbomscanner.kubewarden.io/v1alpha1/namespaces/default/vulnerabilityreports/4019d353b28362ff52cc2f82ce1077859e47ab9fe0db800c17c44f5ce17e0b66'
-    },
-    'apiVersion':    'storage.sbomscanner.kubewarden.io/v1alpha1',
-    'imageMetadata': {
-      'digest':      'sha256:6dff84dbd39db7cb0fc928291e220b3cff846e59334fd66f27ace0bcfd471b75',
-      'platform':    'linux/ppc64le',
-      'registry':    'lsong-demo1',
-      'registryURI': 'registry-1.docker.io',
-      'repository':  'library/alpine',
-      'tag':         '3.10.3'
-    },
-    'kind':     'VulnerabilityReport',
-    'metadata': {
-      'creationTimestamp': '2026-01-14T18:51:31Z',
-      'fields':            [
-        '4019d353b28362ff52cc2f82ce1077859e47ab9fe0db800c17c44f5ce17e0b66',
-        'registry-1.docker.io/library/alpine:3.10.3',
-        'linux/ppc64le',
-        '22 (0 suppressed)'
-      ],
-      'labels': {
-        'app.kubernetes.io/managed-by':          'sbomscanner',
-        'app.kubernetes.io/part-of':             'sbomscanner',
-        'sbomscanner.kubewarden.io/scanjob-uid': '445c600a-c4b6-40b3-bd71-f2d2140a37d5'
-      },
-      'name':            '4019d353b28362ff52cc2f82ce1077859e47ab9fe0db800c17c44f5ce17e0b66',
-      'namespace':       'default',
-      'ownerReferences': [
-        {
-          'apiVersion':         'storage.sbomscanner.kubewarden.io/v1alpha1',
-          'blockOwnerDeletion': true,
-          'controller':         true,
-          'kind':               'SBOM',
-          'name':               '4019d353b28362ff52cc2f82ce1077859e47ab9fe0db800c17c44f5ce17e0b66',
-          'uid':                'a1ff84b8-d287-4dd0-8c31-77dbae4ec4cd'
-        }
-      ],
-      'relationships': [
-        {
-          'fromId':   'default/4019d353b28362ff52cc2f82ce1077859e47ab9fe0db800c17c44f5ce17e0b66',
-          'fromType': 'storage.sbomscanner.kubewarden.io.sbom',
-          'rel':      'owner',
-          'state':    'active',
-          'message':  'Resource is current'
-        }
-      ],
-      'resourceVersion': '1',
-      'state':           {
-        'error':         false,
-        'message':       'Resource is current',
-        'name':          'active',
-        'transitioning': false
-      },
-      'uid': '4d062272-3cd9-4c3a-a98c-395f4ff32341'
-    },
-    'report': {
-      'results': [
-        {
-          'class':           'os-pkgs',
-          'target':          '/var/run/worker/trivy.sbom.1315713575.json (alpine 3.10.3)',
-          'type':            'alpine',
-          'vulnerabilities': [
-            {
-              'cve':  'CVE-2021-36159',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '9.1',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '9.1',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-125'
-              ],
-              'description':   "libfetch before 2021-07-26, as used in apk-tools, xbps, and other products, mishandles numeric strings for the FTP and HTTP protocols. The FTP passive mode implementation allows an out-of-bounds read because strtol is used to parse the relevant numbers into address bytes. It does not check if the line ends prematurely. If it does, the for-loop condition checks for the '\\0' terminator one byte too late.",
-              'diffID':        'sha256:7a76a9f95c3d7aab219540888e7d850c1b86c316741490c533125b761e398553',
-              'fixedVersions': [
-                '2.10.7-r0'
-              ],
-              'installedVersion': '2.10.4-r2',
-              'packageName':      'apk-tools',
-              'purl':             'pkg:apk/alpine/apk-tools@2.10.4-r2?arch=ppc64le&distro=3.10.3',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-36159',
-                'https://github.com/freebsd/freebsd-src/commits/main/lib/libfetch',
-                'https://gitlab.alpinelinux.org/alpine/apk-tools/-/issues/10749',
-                'https://lists.apache.org/thread.html/r61db8e7dcb56dc000a5387a88f7a473bacec5ee01b9ff3f55308aacc%40%3Cdev.kafka.apache.org%3E',
-                'https://lists.apache.org/thread.html/r61db8e7dcb56dc000a5387a88f7a473bacec5ee01b9ff3f55308aacc%40%3Cusers.kafka.apache.org%3E',
-                'https://lists.apache.org/thread.html/rbf4ce74b0d1fa9810dec50ba3ace0caeea677af7c27a97111c06ccb7%40%3Cdev.kafka.apache.org%3E',
-                'https://lists.apache.org/thread.html/rbf4ce74b0d1fa9810dec50ba3ace0caeea677af7c27a97111c06ccb7%40%3Cusers.kafka.apache.org%3E',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-36159',
-                'https://www.cve.org/CVERecord?id=CVE-2021-36159'
-              ],
-              'severity':   'CRITICAL',
-              'suppressed': false,
-              'title':      'libfetch: an out of boundary read while libfetch uses strtol to parse the relevant numbers into address bytes leads to information leak or crash'
-            },
-            {
-              'cve':  'CVE-2021-30139',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-125'
-              ],
-              'description':   'In Alpine Linux apk-tools before 2.12.5, the tarball parser allows a buffer overflow and crash.',
-              'diffID':        'sha256:7a76a9f95c3d7aab219540888e7d850c1b86c316741490c533125b761e398553',
-              'fixedVersions': [
-                '2.10.6-r0'
-              ],
-              'installedVersion': '2.10.4-r2',
-              'packageName':      'apk-tools',
-              'purl':             'pkg:apk/alpine/apk-tools@2.10.4-r2?arch=ppc64le&distro=3.10.3',
-              'references':       [
-                'https://gitlab.alpinelinux.org/alpine/apk-tools/-/issues/10741',
-                'https://gitlab.alpinelinux.org/alpine/aports/-/issues/12606'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false
-            },
-            {
-              'cve':  'CVE-2021-28831',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-755'
-              ],
-              'description':   'decompress_gunzip.c in BusyBox through 1.32.1 mishandles the error bit on the huft_build result pointer, with a resultant invalid free or segmentation fault, via malformed gzip data.',
-              'diffID':        'sha256:7a76a9f95c3d7aab219540888e7d850c1b86c316741490c533125b761e398553',
-              'fixedVersions': [
-                '1.30.1-r5'
-              ],
-              'installedVersion': '1.30.1-r2',
-              'packageName':      'busybox',
-              'purl':             'pkg:apk/alpine/busybox@1.30.1-r2?arch=ppc64le&distro=3.10.3',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-28831',
-                'https://git.busybox.net/busybox/commit/?id=f25d254dfd4243698c31a4f3153d4ac72aa9e9bd',
-                'https://lists.debian.org/debian-lts-announce/2021/04/msg00001.html',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/3UDQGJRECXFS5EZVDH2OI45FMO436AC4/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/Z7ZIFKPRR32ZYA3WAA2NXFA3QHHOU6FJ/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZASBW7QRRLY5V2R44MQ4QQM4CZIDHM2U/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-28831',
-                'https://security.gentoo.org/glsa/202105-09',
-                'https://security.netapp.com/advisory/ntap-20250509-0005/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://ubuntu.com/security/notices/USN-5179-2',
-                'https://ubuntu.com/security/notices/USN-6335-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-28831'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: invalid free or segmentation fault via malformed gzip data'
-            },
-            {
-              'cve':  'CVE-2020-1967',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'nvd': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-476'
-              ],
-              'description':   'Server or client applications that call the SSL_check_chain() function during or after a TLS 1.3 handshake may crash due to a NULL pointer dereference as a result of incorrect handling of the "signature_algorithms_cert" TLS extension. The crash occurs if an invalid or unrecognised signature algorithm is received from the peer. This could be exploited by a malicious peer in a Denial of Service attack. OpenSSL version 1.1.1d, 1.1.1e, and 1.1.1f are affected by this issue. This issue did not affect OpenSSL versions prior to 1.1.1d. Fixed in OpenSSL 1.1.1g (Affected 1.1.1d-1.1.1f).',
-              'diffID':        'sha256:7a76a9f95c3d7aab219540888e7d850c1b86c316741490c533125b761e398553',
-              'fixedVersions': [
-                '1.1.1g-r0'
-              ],
-              'installedVersion': '1.1.1d-r0',
-              'packageName':      'libcrypto1.1',
-              'purl':             'pkg:apk/alpine/libcrypto1.1@1.1.1d-r0?arch=ppc64le&distro=3.10.3',
-              'references':       [
-                'http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00004.html',
-                'http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00011.html',
-                'http://packetstormsecurity.com/files/157527/OpenSSL-signature_algorithms_cert-Denial-Of-Service.html',
-                'http://seclists.org/fulldisclosure/2020/May/5',
-                'http://www.openwall.com/lists/oss-security/2020/04/22/2',
-                'https://access.redhat.com/security/cve/CVE-2020-1967',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=eb563247aef3e83dda7679c43f9649270462e5b1',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=eb563247aef3e83dda7679c43f9649270462e5b1',
-                'https://github.com/irsl/CVE-2020-1967',
-                'https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA44440',
-                'https://lists.apache.org/thread.html/r66ea9c436da150683432db5fbc8beb8ae01886c6459ac30c2cea7345%40%3Cdev.tomcat.apache.org%3E',
-                'https://lists.apache.org/thread.html/r66ea9c436da150683432db5fbc8beb8ae01886c6459ac30c2cea7345@%3Cdev.tomcat.apache.org%3E',
-                'https://lists.apache.org/thread.html/r94d6ac3f010a38fccf4f432b12180a13fa1cf303559bd805648c9064%40%3Cdev.tomcat.apache.org%3E',
-                'https://lists.apache.org/thread.html/r94d6ac3f010a38fccf4f432b12180a13fa1cf303559bd805648c9064@%3Cdev.tomcat.apache.org%3E',
-                'https://lists.apache.org/thread.html/r9a41e304992ce6aec6585a87842b4f2e692604f5c892c37e3b0587ee%40%3Cdev.tomcat.apache.org%3E',
-                'https://lists.apache.org/thread.html/r9a41e304992ce6aec6585a87842b4f2e692604f5c892c37e3b0587ee@%3Cdev.tomcat.apache.org%3E',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DDHOAATPWJCXRNFMJ2SASDBBNU5RJONY/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/EXDDAOWSAIEFQNBHWYE6PPYFV4QXGMCD/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/XVEP3LAK4JSPRXFO4QF4GG2IVXADV3SO/',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/DDHOAATPWJCXRNFMJ2SASDBBNU5RJONY',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/EXDDAOWSAIEFQNBHWYE6PPYFV4QXGMCD',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/XVEP3LAK4JSPRXFO4QF4GG2IVXADV3SO',
-                'https://nvd.nist.gov/vuln/detail/CVE-2020-1967',
-                'https://rustsec.org/advisories/RUSTSEC-2020-0015.html',
-                'https://security.FreeBSD.org/advisories/FreeBSD-SA-20:11.openssl.asc',
-                'https://security.gentoo.org/glsa/202004-10',
-                'https://security.netapp.com/advisory/ntap-20200424-0003',
-                'https://security.netapp.com/advisory/ntap-20200424-0003/',
-                'https://security.netapp.com/advisory/ntap-20200717-0004',
-                'https://security.netapp.com/advisory/ntap-20200717-0004/',
-                'https://www.cve.org/CVERecord?id=CVE-2020-1967',
-                'https://www.debian.org/security/2020/dsa-4661',
-                'https://www.openssl.org/news/secadv/20200421.txt',
-                'https://www.oracle.com//security-alerts/cpujul2021.html',
-                'https://www.oracle.com/security-alerts/cpuApr2021.html',
-                'https://www.oracle.com/security-alerts/cpujan2021.html',
-                'https://www.oracle.com/security-alerts/cpujul2020.html',
-                'https://www.oracle.com/security-alerts/cpuoct2020.html',
-                'https://www.oracle.com/security-alerts/cpuoct2021.html',
-                'https://www.synology.com/security/advisory/Synology_SA_20_05',
-                'https://www.synology.com/security/advisory/Synology_SA_20_05_OpenSSL',
-                'https://www.tenable.com/security/tns-2020-03',
-                'https://www.tenable.com/security/tns-2020-04',
-                'https://www.tenable.com/security/tns-2020-11',
-                'https://www.tenable.com/security/tns-2021-10'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: Segmentation fault in SSL_check_chain causes denial of service'
-            },
-            {
-              'cve':  'CVE-2021-23840',
-              'cvss': {
-                'bitnami': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'ghsa': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'nvd': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-190'
-              ],
-              'description':   'Calls to EVP_CipherUpdate, EVP_EncryptUpdate and EVP_DecryptUpdate may overflow the output length argument in some cases where the input length is close to the maximum permissable length for an integer on the platform. In such cases the return value from the function call will be 1 (indicating success), but the output length value will be negative. This could cause applications to behave incorrectly or crash. OpenSSL versions 1.1.1i and below are affected by this issue. Users of these versions should upgrade to OpenSSL 1.1.1j. OpenSSL versions 1.0.2x and below are affected by this issue. However OpenSSL 1.0.2 is out of support and no longer receiving public updates. Premium support customers of OpenSSL 1.0.2 should upgrade to 1.0.2y. Other users should upgrade to 1.1.1j. Fixed in OpenSSL 1.1.1j (Affected 1.1.1-1.1.1i). Fixed in OpenSSL 1.0.2y (Affected 1.0.2-1.0.2x).',
-              'diffID':        'sha256:7a76a9f95c3d7aab219540888e7d850c1b86c316741490c533125b761e398553',
-              'fixedVersions': [
-                '1.1.1j-r0'
-              ],
-              'installedVersion': '1.1.1d-r0',
-              'packageName':      'libcrypto1.1',
-              'purl':             'pkg:apk/alpine/libcrypto1.1@1.1.1d-r0?arch=ppc64le&distro=3.10.3',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-23840',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=1908036',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=1930310',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=1930324',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=1934534',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=1934600',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=1939637',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=1940085',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=1965362',
-                'https://cert-portal.siemens.com/productcert/pdf/ssa-389290.pdf',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-23840',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-23841',
-                'https://errata.rockylinux.org/RLSA-2021:4424',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=6a51b9e1d0cf0bf8515f7201b68fb0a3482b3dc1',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=9b1129239f3ebb1d1c98ce9ed41d5c9476c47cb2',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=6a51b9e1d0cf0bf8515f7201b68fb0a3482b3dc1',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=9b1129239f3ebb1d1c98ce9ed41d5c9476c47cb2',
-                'https://github.com/alexcrichton/openssl-src-rs',
-                'https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA44846',
-                'https://kc.mcafee.com/corporate/index?page=content&id=SB10366',
-                'https://linux.oracle.com/cve/CVE-2021-23840.html',
-                'https://linux.oracle.com/errata/ELSA-2021-9561.html',
-                'https://lists.apache.org/thread.html/r58af02e294bd07f487e2c64ffc0a29b837db5600e33b6e698b9d696b%40%3Cissues.bookkeeper.apache.org%3E',
-                'https://lists.apache.org/thread.html/r58af02e294bd07f487e2c64ffc0a29b837db5600e33b6e698b9d696b@%3Cissues.bookkeeper.apache.org%3E',
-                'https://lists.apache.org/thread.html/rf4c02775860db415b4955778a131c2795223f61cb8c6a450893651e4%40%3Cissues.bookkeeper.apache.org%3E',
-                'https://lists.apache.org/thread.html/rf4c02775860db415b4955778a131c2795223f61cb8c6a450893651e4@%3Cissues.bookkeeper.apache.org%3E',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-23840',
-                'https://rustsec.org/advisories/RUSTSEC-2021-0057.html',
-                'https://security.gentoo.org/glsa/202103-03',
-                'https://security.netapp.com/advisory/ntap-20210219-0009',
-                'https://security.netapp.com/advisory/ntap-20210219-0009/',
-                'https://security.netapp.com/advisory/ntap-20240621-0006/',
-                'https://ubuntu.com/security/notices/USN-4738-1',
-                'https://ubuntu.com/security/notices/USN-5088-1',
-                'https://ubuntu.com/security/notices/USN-7018-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-23840',
-                'https://www.debian.org/security/2021/dsa-4855',
-                'https://www.openssl.org/news/secadv/20210216.txt',
-                'https://www.oracle.com//security-alerts/cpujul2021.html',
-                'https://www.oracle.com/security-alerts/cpuApr2021.html',
-                'https://www.oracle.com/security-alerts/cpuapr2022.html',
-                'https://www.oracle.com/security-alerts/cpujan2022.html',
-                'https://www.oracle.com/security-alerts/cpuoct2021.html',
-                'https://www.tenable.com/security/tns-2021-03',
-                'https://www.tenable.com/security/tns-2021-09',
-                'https://www.tenable.com/security/tns-2021-10'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: integer overflow in CipherUpdate'
-            },
-            {
-              'cve':  'CVE-2021-3450',
-              'cvss': {
-                'bitnami': {
-                  'v3score':  '7.4',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N'
-                },
-                'ghsa': {
-                  'v3score':  '7.4',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N'
-                },
-                'nvd': {
-                  'v3score':  '7.4',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N'
-                },
-                'redhat': {
-                  'v3score':  '7.4',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-295'
-              ],
-              'description':   'The X509_V_FLAG_X509_STRICT flag enables additional security checks of the certificates present in a certificate chain. It is not set by default. Starting from OpenSSL version 1.1.1h a check to disallow certificates in the chain that have explicitly encoded elliptic curve parameters was added as an additional strict check. An error in the implementation of this check meant that the result of a previous check to confirm that certificates in the chain are valid CA certificates was overwritten. This effectively bypasses the check that non-CA certificates must not be able to issue other certificates. If a "purpose" has been configured then there is a subsequent opportunity for checks that the certificate is a valid CA. All of the named "purpose" values implemented in libcrypto perform this check. Therefore, where a purpose is set the certificate chain will still be rejected even when the strict flag has been used. A purpose is set by default in libssl client and server certificate verification routines, but it can be overridden or removed by an application. In order to be affected, an application must explicitly set the X509_V_FLAG_X509_STRICT verification flag and either not set a purpose for the certificate verification or, in the case of TLS client or server applications, override the default purpose. OpenSSL versions 1.1.1h and newer are affected by this issue. Users of these versions should upgrade to OpenSSL 1.1.1k. OpenSSL 1.0.2 is not impacted by this issue. Fixed in OpenSSL 1.1.1k (Affected 1.1.1h-1.1.1j).',
-              'diffID':        'sha256:7a76a9f95c3d7aab219540888e7d850c1b86c316741490c533125b761e398553',
-              'fixedVersions': [
-                '1.1.1k-r0'
-              ],
-              'installedVersion': '1.1.1d-r0',
-              'packageName':      'libcrypto1.1',
-              'purl':             'pkg:apk/alpine/libcrypto1.1@1.1.1d-r0?arch=ppc64le&distro=3.10.3',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2021/03/27/1',
-                'http://www.openwall.com/lists/oss-security/2021/03/27/2',
-                'http://www.openwall.com/lists/oss-security/2021/03/28/3',
-                'http://www.openwall.com/lists/oss-security/2021/03/28/4',
-                'https://access.redhat.com/security/cve/CVE-2021-3450',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=1941547',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=1941554',
-                'https://cert-portal.siemens.com/productcert/pdf/ssa-389290.pdf',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-3449',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-3450',
-                'https://errata.rockylinux.org/RLSA-2021:1024',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=2a40b7bc7b94dd7de897a74571e7024f0cf0d63b',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=2a40b7bc7b94dd7de897a74571e7024f0cf0d63b',
-                'https://github.com/alexcrichton/openssl-src-rs',
-                'https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA44845',
-                'https://kc.mcafee.com/corporate/index?page=content&id=SB10356',
-                'https://linux.oracle.com/cve/CVE-2021-3450.html',
-                'https://linux.oracle.com/errata/ELSA-2021-9151.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CCBFLLVQVILIVGZMBJL3IXZGKWQISYNP/',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/CCBFLLVQVILIVGZMBJL3IXZGKWQISYNP',
-                'https://mta.openssl.org/pipermail/openssl-announce/2021-March/000198.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-3450',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2021-0013',
-                'https://rustsec.org/advisories/RUSTSEC-2021-0056.html',
-                'https://security.FreeBSD.org/advisories/FreeBSD-SA-21:07.openssl.asc',
-                'https://security.gentoo.org/glsa/202103-03',
-                'https://security.netapp.com/advisory/ntap-20210326-0006',
-                'https://security.netapp.com/advisory/ntap-20210326-0006/',
-                'https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-openssl-2021-GHY28dJd',
-                'https://www.cve.org/CVERecord?id=CVE-2021-3450',
-                'https://www.openssl.org/news/secadv/20210325.txt',
-                'https://www.oracle.com//security-alerts/cpujul2021.html',
-                'https://www.oracle.com/security-alerts/cpuApr2021.html',
-                'https://www.oracle.com/security-alerts/cpuapr2022.html',
-                'https://www.oracle.com/security-alerts/cpujul2022.html',
-                'https://www.oracle.com/security-alerts/cpuoct2021.html',
-                'https://www.tenable.com/security/tns-2021-05',
-                'https://www.tenable.com/security/tns-2021-08',
-                'https://www.tenable.com/security/tns-2021-09'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: CA certificate check bypass with X509_V_FLAG_X509_STRICT'
-            },
-            {
-              'cve':  'CVE-2019-1551',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N'
-                },
-                'redhat': {
-                  'v3score':  '4.8',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-190'
-              ],
-              'description':   'There is an overflow bug in the x64_64 Montgomery squaring procedure used in exponentiation with 512-bit moduli. No EC algorithms are affected. Analysis suggests that attacks against 2-prime RSA1024, 3-prime RSA1536, and DSA1024 as a result of this defect would be very difficult to perform and are not believed likely. Attacks against DH512 are considered just feasible. However, for an attack the target would have to re-use the DH512 private key, which is not recommended anyway. Also applications directly using the low level API BN_mod_exp may be affected if they use BN_FLG_CONSTTIME. Fixed in OpenSSL 1.1.1e (Affected 1.1.1-1.1.1d). Fixed in OpenSSL 1.0.2u (Affected 1.0.2-1.0.2t).',
-              'diffID':        'sha256:7a76a9f95c3d7aab219540888e7d850c1b86c316741490c533125b761e398553',
-              'fixedVersions': [
-                '1.1.1d-r2'
-              ],
-              'installedVersion': '1.1.1d-r0',
-              'packageName':      'libcrypto1.1',
-              'purl':             'pkg:apk/alpine/libcrypto1.1@1.1.1d-r0?arch=ppc64le&distro=3.10.3',
-              'references':       [
-                'http://lists.opensuse.org/opensuse-security-announce/2020-01/msg00030.html',
-                'http://packetstormsecurity.com/files/155754/Slackware-Security-Advisory-openssl-Updates.html',
-                'https://access.redhat.com/security/cve/CVE-2019-1551',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=419102400a2811582a7a3d4a4e317d72e5ce0a8f',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=f1c5eea8a817075d31e43f5876993c6710238c98',
-                'https://github.com/openssl/openssl/pull/10575',
-                'https://linux.oracle.com/cve/CVE-2019-1551.html',
-                'https://linux.oracle.com/errata/ELSA-2020-4514.html',
-                'https://lists.debian.org/debian-lts-announce/2022/03/msg00023.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DDHOAATPWJCXRNFMJ2SASDBBNU5RJONY/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/EXDDAOWSAIEFQNBHWYE6PPYFV4QXGMCD/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/XVEP3LAK4JSPRXFO4QF4GG2IVXADV3SO/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2019-1551',
-                'https://seclists.org/bugtraq/2019/Dec/39',
-                'https://seclists.org/bugtraq/2019/Dec/46',
-                'https://security.gentoo.org/glsa/202004-10',
-                'https://security.netapp.com/advisory/ntap-20191210-0001/',
-                'https://ubuntu.com/security/notices/USN-4376-1',
-                'https://ubuntu.com/security/notices/USN-4504-1',
-                'https://usn.ubuntu.com/4376-1/',
-                'https://usn.ubuntu.com/4504-1/',
-                'https://www.cve.org/CVERecord?id=CVE-2019-1551',
-                'https://www.debian.org/security/2019/dsa-4594',
-                'https://www.debian.org/security/2021/dsa-4855',
-                'https://www.openssl.org/news/secadv/20191206.txt',
-                'https://www.oracle.com/security-alerts/cpuApr2021.html',
-                'https://www.oracle.com/security-alerts/cpujan2021.html',
-                'https://www.oracle.com/security-alerts/cpujul2020.html',
-                'https://www.tenable.com/security/tns-2019-09',
-                'https://www.tenable.com/security/tns-2020-03',
-                'https://www.tenable.com/security/tns-2020-11',
-                'https://www.tenable.com/security/tns-2021-10'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: Integer overflow in RSAZ modular exponentiation on x86_64'
-            },
-            {
-              'cve':  'CVE-2020-1971',
-              'cvss': {
-                'bitnami': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'nvd': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-476'
-              ],
-              'description':   "The X.509 GeneralName type is a generic type for representing different types of names. One of those name types is known as EDIPartyName. OpenSSL provides a function GENERAL_NAME_cmp which compares different instances of a GENERAL_NAME to see if they are equal or not. This function behaves incorrectly when both GENERAL_NAMEs contain an EDIPARTYNAME. A NULL pointer dereference and a crash may occur leading to a possible denial of service attack. OpenSSL itself uses the GENERAL_NAME_cmp function for two purposes: 1) Comparing CRL distribution point names between an available CRL and a CRL distribution point embedded in an X509 certificate 2) When verifying that a timestamp response token signer matches the timestamp authority name (exposed via the API functions TS_RESP_verify_response and TS_RESP_verify_token) If an attacker can control both items being compared then that attacker could trigger a crash. For example if the attacker can trick a client or server into checking a malicious certificate against a malicious CRL then this may occur. Note that some applications automatically download CRLs based on a URL embedded in a certificate. This checking happens prior to the signatures on the certificate and CRL being verified. OpenSSL's s_server, s_client and verify tools have support for the \"-crl_download\" option which implements automatic CRL downloading and this attack has been demonstrated to work against those tools. Note that an unrelated bug means that affected versions of OpenSSL cannot parse or construct correct encodings of EDIPARTYNAME. However it is possible to construct a malformed EDIPARTYNAME that OpenSSL's parser will accept and hence trigger this attack. All OpenSSL 1.1.1 and 1.0.2 versions are affected by this issue. Other OpenSSL releases are out of support and have not been checked. Fixed in OpenSSL 1.1.1i (Affected 1.1.1-1.1.1h). Fixed in OpenSSL 1.0.2x (Affected 1.0.2-1.0.2w).",
-              'diffID':        'sha256:7a76a9f95c3d7aab219540888e7d850c1b86c316741490c533125b761e398553',
-              'fixedVersions': [
-                '1.1.1i-r0'
-              ],
-              'installedVersion': '1.1.1d-r0',
-              'packageName':      'libcrypto1.1',
-              'purl':             'pkg:apk/alpine/libcrypto1.1@1.1.1d-r0?arch=ppc64le&distro=3.10.3',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2021/09/14/2',
-                'https://access.redhat.com/security/cve/CVE-2020-1971',
-                'https://cert-portal.siemens.com/productcert/pdf/ssa-389290.pdf',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=2154ab83e14ede338d2ede9bbe5cdfce5d5a6c9e',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=f960d81215ebf3f65e03d4d5d857fb9b666d6920',
-                'https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA44676',
-                'https://linux.oracle.com/cve/CVE-2020-1971.html',
-                'https://linux.oracle.com/errata/ELSA-2021-9150.html',
-                'https://lists.apache.org/thread.html/r63c6f2dd363d9b514d0a4bcf624580616a679898cc14c109a49b750c%40%3Cdev.tomcat.apache.org%3E',
-                'https://lists.apache.org/thread.html/rbb769f771711fb274e0a4acb1b5911c8aab544a6ac5e8c12d40c5143%40%3Ccommits.pulsar.apache.org%3E',
-                'https://lists.debian.org/debian-lts-announce/2020/12/msg00020.html',
-                'https://lists.debian.org/debian-lts-announce/2020/12/msg00021.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DGSI34Y5LQ5RYXN4M2I5ZQT65LFVDOUU/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PWPSSZNZOBJU2YR6Z4TGHXKYW3YP5QG7/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2020-1971',
-                'https://security.FreeBSD.org/advisories/FreeBSD-SA-20:33.openssl.asc',
-                'https://security.gentoo.org/glsa/202012-13',
-                'https://security.netapp.com/advisory/ntap-20201218-0005/',
-                'https://security.netapp.com/advisory/ntap-20210513-0002/',
-                'https://security.netapp.com/advisory/ntap-20240621-0006/',
-                'https://ubuntu.com/security/notices/USN-4662-1',
-                'https://ubuntu.com/security/notices/USN-4745-1',
-                'https://www.cve.org/CVERecord?id=CVE-2020-1971',
-                'https://www.debian.org/security/2020/dsa-4807',
-                'https://www.openssl.org/news/secadv/20201208.txt',
-                'https://www.oracle.com//security-alerts/cpujul2021.html',
-                'https://www.oracle.com/security-alerts/cpuApr2021.html',
-                'https://www.oracle.com/security-alerts/cpuapr2022.html',
-                'https://www.oracle.com/security-alerts/cpujan2021.html',
-                'https://www.oracle.com/security-alerts/cpuoct2021.html',
-                'https://www.tenable.com/security/tns-2020-11',
-                'https://www.tenable.com/security/tns-2021-09',
-                'https://www.tenable.com/security/tns-2021-10'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: EDIPARTYNAME NULL pointer de-reference'
-            },
-            {
-              'cve':  'CVE-2021-23841',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'nvd': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-476'
-              ],
-              'description':   'The OpenSSL public API function X509_issuer_and_serial_hash() attempts to create a unique hash value based on the issuer and serial number data contained within an X509 certificate. However it fails to correctly handle any errors that may occur while parsing the issuer field (which might occur if the issuer field is maliciously constructed). This may subsequently result in a NULL pointer deref and a crash leading to a potential denial of service attack. The function X509_issuer_and_serial_hash() is never directly called by OpenSSL itself so applications are only vulnerable if they use this function directly and they use it on certificates that may have been obtained from untrusted sources. OpenSSL versions 1.1.1i and below are affected by this issue. Users of these versions should upgrade to OpenSSL 1.1.1j. OpenSSL versions 1.0.2x and below are affected by this issue. However OpenSSL 1.0.2 is out of support and no longer receiving public updates. Premium support customers of OpenSSL 1.0.2 should upgrade to 1.0.2y. Other users should upgrade to 1.1.1j. Fixed in OpenSSL 1.1.1j (Affected 1.1.1-1.1.1i). Fixed in OpenSSL 1.0.2y (Affected 1.0.2-1.0.2x).',
-              'diffID':        'sha256:7a76a9f95c3d7aab219540888e7d850c1b86c316741490c533125b761e398553',
-              'fixedVersions': [
-                '1.1.1j-r0'
-              ],
-              'installedVersion': '1.1.1d-r0',
-              'packageName':      'libcrypto1.1',
-              'purl':             'pkg:apk/alpine/libcrypto1.1@1.1.1d-r0?arch=ppc64le&distro=3.10.3',
-              'references':       [
-                'http://seclists.org/fulldisclosure/2021/May/67',
-                'http://seclists.org/fulldisclosure/2021/May/68',
-                'http://seclists.org/fulldisclosure/2021/May/70',
-                'https://access.redhat.com/security/cve/CVE-2021-23841',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=1908036',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=1930310',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=1930324',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=1934534',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=1934600',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=1939637',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=1940085',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=1965362',
-                'https://cert-portal.siemens.com/productcert/pdf/ssa-637483.pdf',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-23840',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-23841',
-                'https://errata.rockylinux.org/RLSA-2021:4424',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=122a19ab48091c657f7cb1fb3af9fc07bd557bbf',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=8252ee4d90f3f2004d3d0aeeed003ad49c9a7807',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=122a19ab48091c657f7cb1fb3af9fc07bd557bbf',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=6a51b9e1d0cf0bf8515f7201b68fb0a3482b3dc1',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=8252ee4d90f3f2004d3d0aeeed003ad49c9a7807',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=9b1129239f3ebb1d1c98ce9ed41d5c9476c47cb2',
-                'https://github.com/alexcrichton/openssl-src-rs',
-                'https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA44846',
-                'https://linux.oracle.com/cve/CVE-2021-23841.html',
-                'https://linux.oracle.com/errata/ELSA-2021-9561.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-23841',
-                'https://rustsec.org/advisories/RUSTSEC-2021-0058',
-                'https://rustsec.org/advisories/RUSTSEC-2021-0058.html',
-                'https://security.gentoo.org/glsa/202103-03',
-                'https://security.netapp.com/advisory/ntap-20210219-0009',
-                'https://security.netapp.com/advisory/ntap-20210219-0009/',
-                'https://security.netapp.com/advisory/ntap-20210513-0002',
-                'https://security.netapp.com/advisory/ntap-20210513-0002/',
-                'https://security.netapp.com/advisory/ntap-20240621-0006/',
-                'https://support.apple.com/kb/HT212528',
-                'https://support.apple.com/kb/HT212529',
-                'https://support.apple.com/kb/HT212534',
-                'https://ubuntu.com/security/notices/USN-4738-1',
-                'https://ubuntu.com/security/notices/USN-4745-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-23841',
-                'https://www.debian.org/security/2021/dsa-4855',
-                'https://www.openssl.org/news/secadv/20210216.txt',
-                'https://www.oracle.com//security-alerts/cpujul2021.html',
-                'https://www.oracle.com/security-alerts/cpuApr2021.html',
-                'https://www.oracle.com/security-alerts/cpuapr2022.html',
-                'https://www.oracle.com/security-alerts/cpuoct2021.html',
-                'https://www.tenable.com/security/tns-2021-03',
-                'https://www.tenable.com/security/tns-2021-09'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: NULL pointer dereference in X509_issuer_and_serial_hash()'
-            },
-            {
-              'cve':  'CVE-2021-3449',
-              'cvss': {
-                'bitnami': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'ghsa': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'nvd': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-476'
-              ],
-              'description':   'An OpenSSL TLS server may crash if sent a maliciously crafted renegotiation ClientHello message from a client. If a TLSv1.2 renegotiation ClientHello omits the signature_algorithms extension (where it was present in the initial ClientHello), but includes a signature_algorithms_cert extension then a NULL pointer dereference will result, leading to a crash and a denial of service attack. A server is only vulnerable if it has TLSv1.2 and renegotiation enabled (which is the default configuration). OpenSSL TLS clients are not impacted by this issue. All OpenSSL 1.1.1 versions are affected by this issue. Users of these versions should upgrade to OpenSSL 1.1.1k. OpenSSL 1.0.2 is not impacted by this issue. Fixed in OpenSSL 1.1.1k (Affected 1.1.1-1.1.1j).',
-              'diffID':        'sha256:7a76a9f95c3d7aab219540888e7d850c1b86c316741490c533125b761e398553',
-              'fixedVersions': [
-                '1.1.1k-r0'
-              ],
-              'installedVersion': '1.1.1d-r0',
-              'packageName':      'libcrypto1.1',
-              'purl':             'pkg:apk/alpine/libcrypto1.1@1.1.1d-r0?arch=ppc64le&distro=3.10.3',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2021/03/27/1',
-                'http://www.openwall.com/lists/oss-security/2021/03/27/2',
-                'http://www.openwall.com/lists/oss-security/2021/03/28/3',
-                'http://www.openwall.com/lists/oss-security/2021/03/28/4',
-                'https://access.redhat.com/security/cve/CVE-2021-3449',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=1941547',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=1941554',
-                'https://cert-portal.siemens.com/productcert/pdf/ssa-389290.pdf',
-                'https://cert-portal.siemens.com/productcert/pdf/ssa-772220.pdf',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-3449',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-3450',
-                'https://errata.rockylinux.org/RLSA-2021:1024',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=fb9fa6b51defd48157eeb207f52181f735d96148',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=fb9fa6b51defd48157eeb207f52181f735d96148',
-                'https://github.com/alexcrichton/openssl-src-rs',
-                'https://github.com/nodejs/node/pull/38083',
-                'https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA44845',
-                'https://kc.mcafee.com/corporate/index?page=content&id=SB10356',
-                'https://linux.oracle.com/cve/CVE-2021-3449.html',
-                'https://linux.oracle.com/errata/ELSA-2021-9151.html',
-                'https://lists.debian.org/debian-lts-announce/2021/08/msg00029.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CCBFLLVQVILIVGZMBJL3IXZGKWQISYNP/',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/CCBFLLVQVILIVGZMBJL3IXZGKWQISYNP',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-3449',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2021-0013',
-                'https://rustsec.org/advisories/RUSTSEC-2021-0055',
-                'https://rustsec.org/advisories/RUSTSEC-2021-0055.html',
-                'https://security.FreeBSD.org/advisories/FreeBSD-SA-21:07.openssl.asc',
-                'https://security.gentoo.org/glsa/202103-03',
-                'https://security.netapp.com/advisory/ntap-20210326-0006',
-                'https://security.netapp.com/advisory/ntap-20210326-0006/',
-                'https://security.netapp.com/advisory/ntap-20210513-0002',
-                'https://security.netapp.com/advisory/ntap-20210513-0002/',
-                'https://security.netapp.com/advisory/ntap-20240621-0006/',
-                'https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-openssl-2021-GHY28dJd',
-                'https://ubuntu.com/security/notices/USN-4891-1',
-                'https://ubuntu.com/security/notices/USN-5038-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-3449',
-                'https://www.debian.org/security/2021/dsa-4875',
-                'https://www.openssl.org/news/secadv/20210325.txt',
-                'https://www.oracle.com//security-alerts/cpujul2021.html',
-                'https://www.oracle.com/security-alerts/cpuApr2021.html',
-                'https://www.oracle.com/security-alerts/cpuapr2022.html',
-                'https://www.oracle.com/security-alerts/cpujul2022.html',
-                'https://www.oracle.com/security-alerts/cpuoct2021.html',
-                'https://www.tenable.com/security/tns-2021-05',
-                'https://www.tenable.com/security/tns-2021-06',
-                'https://www.tenable.com/security/tns-2021-09',
-                'https://www.tenable.com/security/tns-2021-10'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: NULL pointer dereference in signature_algorithms processing'
-            },
-            {
-              'cve':  'CVE-2021-23839',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '3.7',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N'
-                },
-                'redhat': {
-                  'v3score':  '3.7',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-327'
-              ],
-              'description':   'OpenSSL 1.0.2 supports SSLv2. If a client attempts to negotiate SSLv2 with a server that is configured to support both SSLv2 and more recent SSL and TLS versions then a check is made for a version rollback attack when unpadding an RSA signature. Clients that support SSL or TLS versions greater than SSLv2 are supposed to use a special form of padding. A server that supports greater than SSLv2 is supposed to reject connection attempts from a client where this special form of padding is present, because this indicates that a version rollback has occurred (i.e. both client and server support greater than SSLv2, and yet this is the version that is being requested). The implementation of this padding check inverted the logic so that the connection attempt is accepted if the padding is present, and rejected if it is absent. This means that such as server will accept a connection if a version rollback attack has occurred. Further the server will erroneously reject a connection if a normal SSLv2 connection attempt is made. Only OpenSSL 1.0.2 servers from version 1.0.2s to 1.0.2x are affected by this issue. In order to be vulnerable a 1.0.2 server must: 1) have configured SSLv2 support at compile time (this is off by default), 2) have configured SSLv2 support at runtime (this is off by default), 3) have configured SSLv2 ciphersuites (these are not in the default ciphersuite list) OpenSSL 1.1.1 does not have SSLv2 support and therefore is not vulnerable to this issue. The underlying error is in the implementation of the RSA_padding_check_SSLv23() function. This also affects the RSA_SSLV23_PADDING padding mode used by various other functions. Although 1.1.1 does not support SSLv2 the RSA_padding_check_SSLv23() function still exists, as does the RSA_SSLV23_PADDING padding mode. Applications that directly call that function or use that padding mode will encounter this issue. However since there is no support for the SSLv2 protocol in 1.1.1 this is considered a bug and not a security issue in that version. OpenSSL 1.0.2 is out of support and no longer receiving public updates. Premium support customers of OpenSSL 1.0.2 should upgrade to 1.0.2y. Other users should upgrade to 1.1.1j. Fixed in OpenSSL 1.0.2y (Affected 1.0.2s-1.0.2x).',
-              'diffID':        'sha256:7a76a9f95c3d7aab219540888e7d850c1b86c316741490c533125b761e398553',
-              'fixedVersions': [
-                '1.1.1j-r0'
-              ],
-              'installedVersion': '1.1.1d-r0',
-              'packageName':      'libcrypto1.1',
-              'purl':             'pkg:apk/alpine/libcrypto1.1@1.1.1d-r0?arch=ppc64le&distro=3.10.3',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-23839',
-                'https://cert-portal.siemens.com/productcert/pdf/ssa-637483.pdf',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=30919ab80a478f2d81f2e9acdcca3fa4740cd547',
-                'https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA44846',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-23839',
-                'https://security.netapp.com/advisory/ntap-20210219-0009/',
-                'https://security.netapp.com/advisory/ntap-20240621-0006/',
-                'https://www.cve.org/CVERecord?id=CVE-2021-23839',
-                'https://www.openssl.org/news/secadv/20210216.txt',
-                'https://www.oracle.com//security-alerts/cpujul2021.html',
-                'https://www.oracle.com/security-alerts/cpuApr2021.html',
-                'https://www.oracle.com/security-alerts/cpuapr2022.html',
-                'https://www.oracle.com/security-alerts/cpuoct2021.html'
-              ],
-              'severity':   'LOW',
-              'suppressed': false,
-              'title':      'openssl: incorrect SSLv2 rollback protection'
-            },
-            {
-              'cve':  'CVE-2020-1967',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'nvd': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-476'
-              ],
-              'description':   'Server or client applications that call the SSL_check_chain() function during or after a TLS 1.3 handshake may crash due to a NULL pointer dereference as a result of incorrect handling of the "signature_algorithms_cert" TLS extension. The crash occurs if an invalid or unrecognised signature algorithm is received from the peer. This could be exploited by a malicious peer in a Denial of Service attack. OpenSSL version 1.1.1d, 1.1.1e, and 1.1.1f are affected by this issue. This issue did not affect OpenSSL versions prior to 1.1.1d. Fixed in OpenSSL 1.1.1g (Affected 1.1.1d-1.1.1f).',
-              'diffID':        'sha256:7a76a9f95c3d7aab219540888e7d850c1b86c316741490c533125b761e398553',
-              'fixedVersions': [
-                '1.1.1g-r0'
-              ],
-              'installedVersion': '1.1.1d-r0',
-              'packageName':      'libssl1.1',
-              'purl':             'pkg:apk/alpine/libssl1.1@1.1.1d-r0?arch=ppc64le&distro=3.10.3',
-              'references':       [
-                'http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00004.html',
-                'http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00011.html',
-                'http://packetstormsecurity.com/files/157527/OpenSSL-signature_algorithms_cert-Denial-Of-Service.html',
-                'http://seclists.org/fulldisclosure/2020/May/5',
-                'http://www.openwall.com/lists/oss-security/2020/04/22/2',
-                'https://access.redhat.com/security/cve/CVE-2020-1967',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=eb563247aef3e83dda7679c43f9649270462e5b1',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=eb563247aef3e83dda7679c43f9649270462e5b1',
-                'https://github.com/irsl/CVE-2020-1967',
-                'https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA44440',
-                'https://lists.apache.org/thread.html/r66ea9c436da150683432db5fbc8beb8ae01886c6459ac30c2cea7345%40%3Cdev.tomcat.apache.org%3E',
-                'https://lists.apache.org/thread.html/r66ea9c436da150683432db5fbc8beb8ae01886c6459ac30c2cea7345@%3Cdev.tomcat.apache.org%3E',
-                'https://lists.apache.org/thread.html/r94d6ac3f010a38fccf4f432b12180a13fa1cf303559bd805648c9064%40%3Cdev.tomcat.apache.org%3E',
-                'https://lists.apache.org/thread.html/r94d6ac3f010a38fccf4f432b12180a13fa1cf303559bd805648c9064@%3Cdev.tomcat.apache.org%3E',
-                'https://lists.apache.org/thread.html/r9a41e304992ce6aec6585a87842b4f2e692604f5c892c37e3b0587ee%40%3Cdev.tomcat.apache.org%3E',
-                'https://lists.apache.org/thread.html/r9a41e304992ce6aec6585a87842b4f2e692604f5c892c37e3b0587ee@%3Cdev.tomcat.apache.org%3E',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DDHOAATPWJCXRNFMJ2SASDBBNU5RJONY/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/EXDDAOWSAIEFQNBHWYE6PPYFV4QXGMCD/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/XVEP3LAK4JSPRXFO4QF4GG2IVXADV3SO/',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/DDHOAATPWJCXRNFMJ2SASDBBNU5RJONY',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/EXDDAOWSAIEFQNBHWYE6PPYFV4QXGMCD',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/XVEP3LAK4JSPRXFO4QF4GG2IVXADV3SO',
-                'https://nvd.nist.gov/vuln/detail/CVE-2020-1967',
-                'https://rustsec.org/advisories/RUSTSEC-2020-0015.html',
-                'https://security.FreeBSD.org/advisories/FreeBSD-SA-20:11.openssl.asc',
-                'https://security.gentoo.org/glsa/202004-10',
-                'https://security.netapp.com/advisory/ntap-20200424-0003',
-                'https://security.netapp.com/advisory/ntap-20200424-0003/',
-                'https://security.netapp.com/advisory/ntap-20200717-0004',
-                'https://security.netapp.com/advisory/ntap-20200717-0004/',
-                'https://www.cve.org/CVERecord?id=CVE-2020-1967',
-                'https://www.debian.org/security/2020/dsa-4661',
-                'https://www.openssl.org/news/secadv/20200421.txt',
-                'https://www.oracle.com//security-alerts/cpujul2021.html',
-                'https://www.oracle.com/security-alerts/cpuApr2021.html',
-                'https://www.oracle.com/security-alerts/cpujan2021.html',
-                'https://www.oracle.com/security-alerts/cpujul2020.html',
-                'https://www.oracle.com/security-alerts/cpuoct2020.html',
-                'https://www.oracle.com/security-alerts/cpuoct2021.html',
-                'https://www.synology.com/security/advisory/Synology_SA_20_05',
-                'https://www.synology.com/security/advisory/Synology_SA_20_05_OpenSSL',
-                'https://www.tenable.com/security/tns-2020-03',
-                'https://www.tenable.com/security/tns-2020-04',
-                'https://www.tenable.com/security/tns-2020-11',
-                'https://www.tenable.com/security/tns-2021-10'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: Segmentation fault in SSL_check_chain causes denial of service'
-            },
-            {
-              'cve':  'CVE-2021-23840',
-              'cvss': {
-                'bitnami': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'ghsa': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'nvd': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-190'
-              ],
-              'description':   'Calls to EVP_CipherUpdate, EVP_EncryptUpdate and EVP_DecryptUpdate may overflow the output length argument in some cases where the input length is close to the maximum permissable length for an integer on the platform. In such cases the return value from the function call will be 1 (indicating success), but the output length value will be negative. This could cause applications to behave incorrectly or crash. OpenSSL versions 1.1.1i and below are affected by this issue. Users of these versions should upgrade to OpenSSL 1.1.1j. OpenSSL versions 1.0.2x and below are affected by this issue. However OpenSSL 1.0.2 is out of support and no longer receiving public updates. Premium support customers of OpenSSL 1.0.2 should upgrade to 1.0.2y. Other users should upgrade to 1.1.1j. Fixed in OpenSSL 1.1.1j (Affected 1.1.1-1.1.1i). Fixed in OpenSSL 1.0.2y (Affected 1.0.2-1.0.2x).',
-              'diffID':        'sha256:7a76a9f95c3d7aab219540888e7d850c1b86c316741490c533125b761e398553',
-              'fixedVersions': [
-                '1.1.1j-r0'
-              ],
-              'installedVersion': '1.1.1d-r0',
-              'packageName':      'libssl1.1',
-              'purl':             'pkg:apk/alpine/libssl1.1@1.1.1d-r0?arch=ppc64le&distro=3.10.3',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-23840',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=1908036',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=1930310',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=1930324',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=1934534',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=1934600',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=1939637',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=1940085',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=1965362',
-                'https://cert-portal.siemens.com/productcert/pdf/ssa-389290.pdf',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-23840',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-23841',
-                'https://errata.rockylinux.org/RLSA-2021:4424',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=6a51b9e1d0cf0bf8515f7201b68fb0a3482b3dc1',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=9b1129239f3ebb1d1c98ce9ed41d5c9476c47cb2',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=6a51b9e1d0cf0bf8515f7201b68fb0a3482b3dc1',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=9b1129239f3ebb1d1c98ce9ed41d5c9476c47cb2',
-                'https://github.com/alexcrichton/openssl-src-rs',
-                'https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA44846',
-                'https://kc.mcafee.com/corporate/index?page=content&id=SB10366',
-                'https://linux.oracle.com/cve/CVE-2021-23840.html',
-                'https://linux.oracle.com/errata/ELSA-2021-9561.html',
-                'https://lists.apache.org/thread.html/r58af02e294bd07f487e2c64ffc0a29b837db5600e33b6e698b9d696b%40%3Cissues.bookkeeper.apache.org%3E',
-                'https://lists.apache.org/thread.html/r58af02e294bd07f487e2c64ffc0a29b837db5600e33b6e698b9d696b@%3Cissues.bookkeeper.apache.org%3E',
-                'https://lists.apache.org/thread.html/rf4c02775860db415b4955778a131c2795223f61cb8c6a450893651e4%40%3Cissues.bookkeeper.apache.org%3E',
-                'https://lists.apache.org/thread.html/rf4c02775860db415b4955778a131c2795223f61cb8c6a450893651e4@%3Cissues.bookkeeper.apache.org%3E',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-23840',
-                'https://rustsec.org/advisories/RUSTSEC-2021-0057.html',
-                'https://security.gentoo.org/glsa/202103-03',
-                'https://security.netapp.com/advisory/ntap-20210219-0009',
-                'https://security.netapp.com/advisory/ntap-20210219-0009/',
-                'https://security.netapp.com/advisory/ntap-20240621-0006/',
-                'https://ubuntu.com/security/notices/USN-4738-1',
-                'https://ubuntu.com/security/notices/USN-5088-1',
-                'https://ubuntu.com/security/notices/USN-7018-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-23840',
-                'https://www.debian.org/security/2021/dsa-4855',
-                'https://www.openssl.org/news/secadv/20210216.txt',
-                'https://www.oracle.com//security-alerts/cpujul2021.html',
-                'https://www.oracle.com/security-alerts/cpuApr2021.html',
-                'https://www.oracle.com/security-alerts/cpuapr2022.html',
-                'https://www.oracle.com/security-alerts/cpujan2022.html',
-                'https://www.oracle.com/security-alerts/cpuoct2021.html',
-                'https://www.tenable.com/security/tns-2021-03',
-                'https://www.tenable.com/security/tns-2021-09',
-                'https://www.tenable.com/security/tns-2021-10'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: integer overflow in CipherUpdate'
-            },
-            {
-              'cve':  'CVE-2021-3450',
-              'cvss': {
-                'bitnami': {
-                  'v3score':  '7.4',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N'
-                },
-                'ghsa': {
-                  'v3score':  '7.4',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N'
-                },
-                'nvd': {
-                  'v3score':  '7.4',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N'
-                },
-                'redhat': {
-                  'v3score':  '7.4',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-295'
-              ],
-              'description':   'The X509_V_FLAG_X509_STRICT flag enables additional security checks of the certificates present in a certificate chain. It is not set by default. Starting from OpenSSL version 1.1.1h a check to disallow certificates in the chain that have explicitly encoded elliptic curve parameters was added as an additional strict check. An error in the implementation of this check meant that the result of a previous check to confirm that certificates in the chain are valid CA certificates was overwritten. This effectively bypasses the check that non-CA certificates must not be able to issue other certificates. If a "purpose" has been configured then there is a subsequent opportunity for checks that the certificate is a valid CA. All of the named "purpose" values implemented in libcrypto perform this check. Therefore, where a purpose is set the certificate chain will still be rejected even when the strict flag has been used. A purpose is set by default in libssl client and server certificate verification routines, but it can be overridden or removed by an application. In order to be affected, an application must explicitly set the X509_V_FLAG_X509_STRICT verification flag and either not set a purpose for the certificate verification or, in the case of TLS client or server applications, override the default purpose. OpenSSL versions 1.1.1h and newer are affected by this issue. Users of these versions should upgrade to OpenSSL 1.1.1k. OpenSSL 1.0.2 is not impacted by this issue. Fixed in OpenSSL 1.1.1k (Affected 1.1.1h-1.1.1j).',
-              'diffID':        'sha256:7a76a9f95c3d7aab219540888e7d850c1b86c316741490c533125b761e398553',
-              'fixedVersions': [
-                '1.1.1k-r0'
-              ],
-              'installedVersion': '1.1.1d-r0',
-              'packageName':      'libssl1.1',
-              'purl':             'pkg:apk/alpine/libssl1.1@1.1.1d-r0?arch=ppc64le&distro=3.10.3',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2021/03/27/1',
-                'http://www.openwall.com/lists/oss-security/2021/03/27/2',
-                'http://www.openwall.com/lists/oss-security/2021/03/28/3',
-                'http://www.openwall.com/lists/oss-security/2021/03/28/4',
-                'https://access.redhat.com/security/cve/CVE-2021-3450',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=1941547',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=1941554',
-                'https://cert-portal.siemens.com/productcert/pdf/ssa-389290.pdf',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-3449',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-3450',
-                'https://errata.rockylinux.org/RLSA-2021:1024',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=2a40b7bc7b94dd7de897a74571e7024f0cf0d63b',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=2a40b7bc7b94dd7de897a74571e7024f0cf0d63b',
-                'https://github.com/alexcrichton/openssl-src-rs',
-                'https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA44845',
-                'https://kc.mcafee.com/corporate/index?page=content&id=SB10356',
-                'https://linux.oracle.com/cve/CVE-2021-3450.html',
-                'https://linux.oracle.com/errata/ELSA-2021-9151.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CCBFLLVQVILIVGZMBJL3IXZGKWQISYNP/',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/CCBFLLVQVILIVGZMBJL3IXZGKWQISYNP',
-                'https://mta.openssl.org/pipermail/openssl-announce/2021-March/000198.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-3450',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2021-0013',
-                'https://rustsec.org/advisories/RUSTSEC-2021-0056.html',
-                'https://security.FreeBSD.org/advisories/FreeBSD-SA-21:07.openssl.asc',
-                'https://security.gentoo.org/glsa/202103-03',
-                'https://security.netapp.com/advisory/ntap-20210326-0006',
-                'https://security.netapp.com/advisory/ntap-20210326-0006/',
-                'https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-openssl-2021-GHY28dJd',
-                'https://www.cve.org/CVERecord?id=CVE-2021-3450',
-                'https://www.openssl.org/news/secadv/20210325.txt',
-                'https://www.oracle.com//security-alerts/cpujul2021.html',
-                'https://www.oracle.com/security-alerts/cpuApr2021.html',
-                'https://www.oracle.com/security-alerts/cpuapr2022.html',
-                'https://www.oracle.com/security-alerts/cpujul2022.html',
-                'https://www.oracle.com/security-alerts/cpuoct2021.html',
-                'https://www.tenable.com/security/tns-2021-05',
-                'https://www.tenable.com/security/tns-2021-08',
-                'https://www.tenable.com/security/tns-2021-09'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: CA certificate check bypass with X509_V_FLAG_X509_STRICT'
-            },
-            {
-              'cve':  'CVE-2019-1551',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N'
-                },
-                'redhat': {
-                  'v3score':  '4.8',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-190'
-              ],
-              'description':   'There is an overflow bug in the x64_64 Montgomery squaring procedure used in exponentiation with 512-bit moduli. No EC algorithms are affected. Analysis suggests that attacks against 2-prime RSA1024, 3-prime RSA1536, and DSA1024 as a result of this defect would be very difficult to perform and are not believed likely. Attacks against DH512 are considered just feasible. However, for an attack the target would have to re-use the DH512 private key, which is not recommended anyway. Also applications directly using the low level API BN_mod_exp may be affected if they use BN_FLG_CONSTTIME. Fixed in OpenSSL 1.1.1e (Affected 1.1.1-1.1.1d). Fixed in OpenSSL 1.0.2u (Affected 1.0.2-1.0.2t).',
-              'diffID':        'sha256:7a76a9f95c3d7aab219540888e7d850c1b86c316741490c533125b761e398553',
-              'fixedVersions': [
-                '1.1.1d-r2'
-              ],
-              'installedVersion': '1.1.1d-r0',
-              'packageName':      'libssl1.1',
-              'purl':             'pkg:apk/alpine/libssl1.1@1.1.1d-r0?arch=ppc64le&distro=3.10.3',
-              'references':       [
-                'http://lists.opensuse.org/opensuse-security-announce/2020-01/msg00030.html',
-                'http://packetstormsecurity.com/files/155754/Slackware-Security-Advisory-openssl-Updates.html',
-                'https://access.redhat.com/security/cve/CVE-2019-1551',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=419102400a2811582a7a3d4a4e317d72e5ce0a8f',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=f1c5eea8a817075d31e43f5876993c6710238c98',
-                'https://github.com/openssl/openssl/pull/10575',
-                'https://linux.oracle.com/cve/CVE-2019-1551.html',
-                'https://linux.oracle.com/errata/ELSA-2020-4514.html',
-                'https://lists.debian.org/debian-lts-announce/2022/03/msg00023.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DDHOAATPWJCXRNFMJ2SASDBBNU5RJONY/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/EXDDAOWSAIEFQNBHWYE6PPYFV4QXGMCD/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/XVEP3LAK4JSPRXFO4QF4GG2IVXADV3SO/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2019-1551',
-                'https://seclists.org/bugtraq/2019/Dec/39',
-                'https://seclists.org/bugtraq/2019/Dec/46',
-                'https://security.gentoo.org/glsa/202004-10',
-                'https://security.netapp.com/advisory/ntap-20191210-0001/',
-                'https://ubuntu.com/security/notices/USN-4376-1',
-                'https://ubuntu.com/security/notices/USN-4504-1',
-                'https://usn.ubuntu.com/4376-1/',
-                'https://usn.ubuntu.com/4504-1/',
-                'https://www.cve.org/CVERecord?id=CVE-2019-1551',
-                'https://www.debian.org/security/2019/dsa-4594',
-                'https://www.debian.org/security/2021/dsa-4855',
-                'https://www.openssl.org/news/secadv/20191206.txt',
-                'https://www.oracle.com/security-alerts/cpuApr2021.html',
-                'https://www.oracle.com/security-alerts/cpujan2021.html',
-                'https://www.oracle.com/security-alerts/cpujul2020.html',
-                'https://www.tenable.com/security/tns-2019-09',
-                'https://www.tenable.com/security/tns-2020-03',
-                'https://www.tenable.com/security/tns-2020-11',
-                'https://www.tenable.com/security/tns-2021-10'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: Integer overflow in RSAZ modular exponentiation on x86_64'
-            },
-            {
-              'cve':  'CVE-2020-1971',
-              'cvss': {
-                'bitnami': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'nvd': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-476'
-              ],
-              'description':   "The X.509 GeneralName type is a generic type for representing different types of names. One of those name types is known as EDIPartyName. OpenSSL provides a function GENERAL_NAME_cmp which compares different instances of a GENERAL_NAME to see if they are equal or not. This function behaves incorrectly when both GENERAL_NAMEs contain an EDIPARTYNAME. A NULL pointer dereference and a crash may occur leading to a possible denial of service attack. OpenSSL itself uses the GENERAL_NAME_cmp function for two purposes: 1) Comparing CRL distribution point names between an available CRL and a CRL distribution point embedded in an X509 certificate 2) When verifying that a timestamp response token signer matches the timestamp authority name (exposed via the API functions TS_RESP_verify_response and TS_RESP_verify_token) If an attacker can control both items being compared then that attacker could trigger a crash. For example if the attacker can trick a client or server into checking a malicious certificate against a malicious CRL then this may occur. Note that some applications automatically download CRLs based on a URL embedded in a certificate. This checking happens prior to the signatures on the certificate and CRL being verified. OpenSSL's s_server, s_client and verify tools have support for the \"-crl_download\" option which implements automatic CRL downloading and this attack has been demonstrated to work against those tools. Note that an unrelated bug means that affected versions of OpenSSL cannot parse or construct correct encodings of EDIPARTYNAME. However it is possible to construct a malformed EDIPARTYNAME that OpenSSL's parser will accept and hence trigger this attack. All OpenSSL 1.1.1 and 1.0.2 versions are affected by this issue. Other OpenSSL releases are out of support and have not been checked. Fixed in OpenSSL 1.1.1i (Affected 1.1.1-1.1.1h). Fixed in OpenSSL 1.0.2x (Affected 1.0.2-1.0.2w).",
-              'diffID':        'sha256:7a76a9f95c3d7aab219540888e7d850c1b86c316741490c533125b761e398553',
-              'fixedVersions': [
-                '1.1.1i-r0'
-              ],
-              'installedVersion': '1.1.1d-r0',
-              'packageName':      'libssl1.1',
-              'purl':             'pkg:apk/alpine/libssl1.1@1.1.1d-r0?arch=ppc64le&distro=3.10.3',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2021/09/14/2',
-                'https://access.redhat.com/security/cve/CVE-2020-1971',
-                'https://cert-portal.siemens.com/productcert/pdf/ssa-389290.pdf',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=2154ab83e14ede338d2ede9bbe5cdfce5d5a6c9e',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=f960d81215ebf3f65e03d4d5d857fb9b666d6920',
-                'https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA44676',
-                'https://linux.oracle.com/cve/CVE-2020-1971.html',
-                'https://linux.oracle.com/errata/ELSA-2021-9150.html',
-                'https://lists.apache.org/thread.html/r63c6f2dd363d9b514d0a4bcf624580616a679898cc14c109a49b750c%40%3Cdev.tomcat.apache.org%3E',
-                'https://lists.apache.org/thread.html/rbb769f771711fb274e0a4acb1b5911c8aab544a6ac5e8c12d40c5143%40%3Ccommits.pulsar.apache.org%3E',
-                'https://lists.debian.org/debian-lts-announce/2020/12/msg00020.html',
-                'https://lists.debian.org/debian-lts-announce/2020/12/msg00021.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DGSI34Y5LQ5RYXN4M2I5ZQT65LFVDOUU/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PWPSSZNZOBJU2YR6Z4TGHXKYW3YP5QG7/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2020-1971',
-                'https://security.FreeBSD.org/advisories/FreeBSD-SA-20:33.openssl.asc',
-                'https://security.gentoo.org/glsa/202012-13',
-                'https://security.netapp.com/advisory/ntap-20201218-0005/',
-                'https://security.netapp.com/advisory/ntap-20210513-0002/',
-                'https://security.netapp.com/advisory/ntap-20240621-0006/',
-                'https://ubuntu.com/security/notices/USN-4662-1',
-                'https://ubuntu.com/security/notices/USN-4745-1',
-                'https://www.cve.org/CVERecord?id=CVE-2020-1971',
-                'https://www.debian.org/security/2020/dsa-4807',
-                'https://www.openssl.org/news/secadv/20201208.txt',
-                'https://www.oracle.com//security-alerts/cpujul2021.html',
-                'https://www.oracle.com/security-alerts/cpuApr2021.html',
-                'https://www.oracle.com/security-alerts/cpuapr2022.html',
-                'https://www.oracle.com/security-alerts/cpujan2021.html',
-                'https://www.oracle.com/security-alerts/cpuoct2021.html',
-                'https://www.tenable.com/security/tns-2020-11',
-                'https://www.tenable.com/security/tns-2021-09',
-                'https://www.tenable.com/security/tns-2021-10'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: EDIPARTYNAME NULL pointer de-reference'
-            },
-            {
-              'cve':  'CVE-2021-23841',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'nvd': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-476'
-              ],
-              'description':   'The OpenSSL public API function X509_issuer_and_serial_hash() attempts to create a unique hash value based on the issuer and serial number data contained within an X509 certificate. However it fails to correctly handle any errors that may occur while parsing the issuer field (which might occur if the issuer field is maliciously constructed). This may subsequently result in a NULL pointer deref and a crash leading to a potential denial of service attack. The function X509_issuer_and_serial_hash() is never directly called by OpenSSL itself so applications are only vulnerable if they use this function directly and they use it on certificates that may have been obtained from untrusted sources. OpenSSL versions 1.1.1i and below are affected by this issue. Users of these versions should upgrade to OpenSSL 1.1.1j. OpenSSL versions 1.0.2x and below are affected by this issue. However OpenSSL 1.0.2 is out of support and no longer receiving public updates. Premium support customers of OpenSSL 1.0.2 should upgrade to 1.0.2y. Other users should upgrade to 1.1.1j. Fixed in OpenSSL 1.1.1j (Affected 1.1.1-1.1.1i). Fixed in OpenSSL 1.0.2y (Affected 1.0.2-1.0.2x).',
-              'diffID':        'sha256:7a76a9f95c3d7aab219540888e7d850c1b86c316741490c533125b761e398553',
-              'fixedVersions': [
-                '1.1.1j-r0'
-              ],
-              'installedVersion': '1.1.1d-r0',
-              'packageName':      'libssl1.1',
-              'purl':             'pkg:apk/alpine/libssl1.1@1.1.1d-r0?arch=ppc64le&distro=3.10.3',
-              'references':       [
-                'http://seclists.org/fulldisclosure/2021/May/67',
-                'http://seclists.org/fulldisclosure/2021/May/68',
-                'http://seclists.org/fulldisclosure/2021/May/70',
-                'https://access.redhat.com/security/cve/CVE-2021-23841',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=1908036',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=1930310',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=1930324',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=1934534',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=1934600',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=1939637',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=1940085',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=1965362',
-                'https://cert-portal.siemens.com/productcert/pdf/ssa-637483.pdf',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-23840',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-23841',
-                'https://errata.rockylinux.org/RLSA-2021:4424',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=122a19ab48091c657f7cb1fb3af9fc07bd557bbf',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=8252ee4d90f3f2004d3d0aeeed003ad49c9a7807',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=122a19ab48091c657f7cb1fb3af9fc07bd557bbf',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=6a51b9e1d0cf0bf8515f7201b68fb0a3482b3dc1',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=8252ee4d90f3f2004d3d0aeeed003ad49c9a7807',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=9b1129239f3ebb1d1c98ce9ed41d5c9476c47cb2',
-                'https://github.com/alexcrichton/openssl-src-rs',
-                'https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA44846',
-                'https://linux.oracle.com/cve/CVE-2021-23841.html',
-                'https://linux.oracle.com/errata/ELSA-2021-9561.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-23841',
-                'https://rustsec.org/advisories/RUSTSEC-2021-0058',
-                'https://rustsec.org/advisories/RUSTSEC-2021-0058.html',
-                'https://security.gentoo.org/glsa/202103-03',
-                'https://security.netapp.com/advisory/ntap-20210219-0009',
-                'https://security.netapp.com/advisory/ntap-20210219-0009/',
-                'https://security.netapp.com/advisory/ntap-20210513-0002',
-                'https://security.netapp.com/advisory/ntap-20210513-0002/',
-                'https://security.netapp.com/advisory/ntap-20240621-0006/',
-                'https://support.apple.com/kb/HT212528',
-                'https://support.apple.com/kb/HT212529',
-                'https://support.apple.com/kb/HT212534',
-                'https://ubuntu.com/security/notices/USN-4738-1',
-                'https://ubuntu.com/security/notices/USN-4745-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-23841',
-                'https://www.debian.org/security/2021/dsa-4855',
-                'https://www.openssl.org/news/secadv/20210216.txt',
-                'https://www.oracle.com//security-alerts/cpujul2021.html',
-                'https://www.oracle.com/security-alerts/cpuApr2021.html',
-                'https://www.oracle.com/security-alerts/cpuapr2022.html',
-                'https://www.oracle.com/security-alerts/cpuoct2021.html',
-                'https://www.tenable.com/security/tns-2021-03',
-                'https://www.tenable.com/security/tns-2021-09'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: NULL pointer dereference in X509_issuer_and_serial_hash()'
-            },
-            {
-              'cve':  'CVE-2021-3449',
-              'cvss': {
-                'bitnami': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'ghsa': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'nvd': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-476'
-              ],
-              'description':   'An OpenSSL TLS server may crash if sent a maliciously crafted renegotiation ClientHello message from a client. If a TLSv1.2 renegotiation ClientHello omits the signature_algorithms extension (where it was present in the initial ClientHello), but includes a signature_algorithms_cert extension then a NULL pointer dereference will result, leading to a crash and a denial of service attack. A server is only vulnerable if it has TLSv1.2 and renegotiation enabled (which is the default configuration). OpenSSL TLS clients are not impacted by this issue. All OpenSSL 1.1.1 versions are affected by this issue. Users of these versions should upgrade to OpenSSL 1.1.1k. OpenSSL 1.0.2 is not impacted by this issue. Fixed in OpenSSL 1.1.1k (Affected 1.1.1-1.1.1j).',
-              'diffID':        'sha256:7a76a9f95c3d7aab219540888e7d850c1b86c316741490c533125b761e398553',
-              'fixedVersions': [
-                '1.1.1k-r0'
-              ],
-              'installedVersion': '1.1.1d-r0',
-              'packageName':      'libssl1.1',
-              'purl':             'pkg:apk/alpine/libssl1.1@1.1.1d-r0?arch=ppc64le&distro=3.10.3',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2021/03/27/1',
-                'http://www.openwall.com/lists/oss-security/2021/03/27/2',
-                'http://www.openwall.com/lists/oss-security/2021/03/28/3',
-                'http://www.openwall.com/lists/oss-security/2021/03/28/4',
-                'https://access.redhat.com/security/cve/CVE-2021-3449',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=1941547',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=1941554',
-                'https://cert-portal.siemens.com/productcert/pdf/ssa-389290.pdf',
-                'https://cert-portal.siemens.com/productcert/pdf/ssa-772220.pdf',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-3449',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-3450',
-                'https://errata.rockylinux.org/RLSA-2021:1024',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=fb9fa6b51defd48157eeb207f52181f735d96148',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=fb9fa6b51defd48157eeb207f52181f735d96148',
-                'https://github.com/alexcrichton/openssl-src-rs',
-                'https://github.com/nodejs/node/pull/38083',
-                'https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA44845',
-                'https://kc.mcafee.com/corporate/index?page=content&id=SB10356',
-                'https://linux.oracle.com/cve/CVE-2021-3449.html',
-                'https://linux.oracle.com/errata/ELSA-2021-9151.html',
-                'https://lists.debian.org/debian-lts-announce/2021/08/msg00029.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CCBFLLVQVILIVGZMBJL3IXZGKWQISYNP/',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/CCBFLLVQVILIVGZMBJL3IXZGKWQISYNP',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-3449',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2021-0013',
-                'https://rustsec.org/advisories/RUSTSEC-2021-0055',
-                'https://rustsec.org/advisories/RUSTSEC-2021-0055.html',
-                'https://security.FreeBSD.org/advisories/FreeBSD-SA-21:07.openssl.asc',
-                'https://security.gentoo.org/glsa/202103-03',
-                'https://security.netapp.com/advisory/ntap-20210326-0006',
-                'https://security.netapp.com/advisory/ntap-20210326-0006/',
-                'https://security.netapp.com/advisory/ntap-20210513-0002',
-                'https://security.netapp.com/advisory/ntap-20210513-0002/',
-                'https://security.netapp.com/advisory/ntap-20240621-0006/',
-                'https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-openssl-2021-GHY28dJd',
-                'https://ubuntu.com/security/notices/USN-4891-1',
-                'https://ubuntu.com/security/notices/USN-5038-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-3449',
-                'https://www.debian.org/security/2021/dsa-4875',
-                'https://www.openssl.org/news/secadv/20210325.txt',
-                'https://www.oracle.com//security-alerts/cpujul2021.html',
-                'https://www.oracle.com/security-alerts/cpuApr2021.html',
-                'https://www.oracle.com/security-alerts/cpuapr2022.html',
-                'https://www.oracle.com/security-alerts/cpujul2022.html',
-                'https://www.oracle.com/security-alerts/cpuoct2021.html',
-                'https://www.tenable.com/security/tns-2021-05',
-                'https://www.tenable.com/security/tns-2021-06',
-                'https://www.tenable.com/security/tns-2021-09',
-                'https://www.tenable.com/security/tns-2021-10'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: NULL pointer dereference in signature_algorithms processing'
-            },
-            {
-              'cve':  'CVE-2021-23839',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '3.7',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N'
-                },
-                'redhat': {
-                  'v3score':  '3.7',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-327'
-              ],
-              'description':   'OpenSSL 1.0.2 supports SSLv2. If a client attempts to negotiate SSLv2 with a server that is configured to support both SSLv2 and more recent SSL and TLS versions then a check is made for a version rollback attack when unpadding an RSA signature. Clients that support SSL or TLS versions greater than SSLv2 are supposed to use a special form of padding. A server that supports greater than SSLv2 is supposed to reject connection attempts from a client where this special form of padding is present, because this indicates that a version rollback has occurred (i.e. both client and server support greater than SSLv2, and yet this is the version that is being requested). The implementation of this padding check inverted the logic so that the connection attempt is accepted if the padding is present, and rejected if it is absent. This means that such as server will accept a connection if a version rollback attack has occurred. Further the server will erroneously reject a connection if a normal SSLv2 connection attempt is made. Only OpenSSL 1.0.2 servers from version 1.0.2s to 1.0.2x are affected by this issue. In order to be vulnerable a 1.0.2 server must: 1) have configured SSLv2 support at compile time (this is off by default), 2) have configured SSLv2 support at runtime (this is off by default), 3) have configured SSLv2 ciphersuites (these are not in the default ciphersuite list) OpenSSL 1.1.1 does not have SSLv2 support and therefore is not vulnerable to this issue. The underlying error is in the implementation of the RSA_padding_check_SSLv23() function. This also affects the RSA_SSLV23_PADDING padding mode used by various other functions. Although 1.1.1 does not support SSLv2 the RSA_padding_check_SSLv23() function still exists, as does the RSA_SSLV23_PADDING padding mode. Applications that directly call that function or use that padding mode will encounter this issue. However since there is no support for the SSLv2 protocol in 1.1.1 this is considered a bug and not a security issue in that version. OpenSSL 1.0.2 is out of support and no longer receiving public updates. Premium support customers of OpenSSL 1.0.2 should upgrade to 1.0.2y. Other users should upgrade to 1.1.1j. Fixed in OpenSSL 1.0.2y (Affected 1.0.2s-1.0.2x).',
-              'diffID':        'sha256:7a76a9f95c3d7aab219540888e7d850c1b86c316741490c533125b761e398553',
-              'fixedVersions': [
-                '1.1.1j-r0'
-              ],
-              'installedVersion': '1.1.1d-r0',
-              'packageName':      'libssl1.1',
-              'purl':             'pkg:apk/alpine/libssl1.1@1.1.1d-r0?arch=ppc64le&distro=3.10.3',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-23839',
-                'https://cert-portal.siemens.com/productcert/pdf/ssa-637483.pdf',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=30919ab80a478f2d81f2e9acdcca3fa4740cd547',
-                'https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA44846',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-23839',
-                'https://security.netapp.com/advisory/ntap-20210219-0009/',
-                'https://security.netapp.com/advisory/ntap-20240621-0006/',
-                'https://www.cve.org/CVERecord?id=CVE-2021-23839',
-                'https://www.openssl.org/news/secadv/20210216.txt',
-                'https://www.oracle.com//security-alerts/cpujul2021.html',
-                'https://www.oracle.com/security-alerts/cpuApr2021.html',
-                'https://www.oracle.com/security-alerts/cpuapr2022.html',
-                'https://www.oracle.com/security-alerts/cpuoct2021.html'
-              ],
-              'severity':   'LOW',
-              'suppressed': false,
-              'title':      'openssl: incorrect SSLv2 rollback protection'
-            },
-            {
-              'cve':  'CVE-2020-28928',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.5',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-787'
-              ],
-              'description':   'In musl libc through 1.2.1, wcsnrtombs mishandles particular combinations of destination buffer size and source character limit, as demonstrated by an invalid write access (buffer overflow).',
-              'diffID':        'sha256:7a76a9f95c3d7aab219540888e7d850c1b86c316741490c533125b761e398553',
-              'fixedVersions': [
-                '1.1.22-r4'
-              ],
-              'installedVersion': '1.1.22-r3',
-              'packageName':      'musl',
-              'purl':             'pkg:apk/alpine/musl@1.1.22-r3?arch=ppc64le&distro=3.10.3',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2020/11/20/4',
-                'https://lists.apache.org/thread.html/r2134abfe847bea7795f0e53756d10a47e6643f35ab8169df8b8a9eb1%40%3Cnotifications.apisix.apache.org%3E',
-                'https://lists.apache.org/thread.html/r90b60cf49348e515257b4950900c1bd3ab95a960cf2469d919c7264e%40%3Cnotifications.apisix.apache.org%3E',
-                'https://lists.apache.org/thread.html/ra63e8dc5137d952afc55dbbfa63be83304ecf842d1eab1ff3ebb29e2%40%3Cnotifications.apisix.apache.org%3E',
-                'https://lists.debian.org/debian-lts-announce/2020/11/msg00050.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LKQ3RVSMVZNZNO4D65W2CZZ4DMYFZN2Q/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UW27QVY7ERPTSGKS4KAWE5TU7EJWHKVQ/',
-                'https://musl.libc.org/releases.html',
-                'https://ubuntu.com/security/notices/USN-5990-1',
-                'https://www.cve.org/CVERecord?id=CVE-2020-28928',
-                'https://www.openwall.com/lists/oss-security/2020/11/20/4',
-                'https://www.oracle.com//security-alerts/cpujul2021.html',
-                'https://www.oracle.com/security-alerts/cpuoct2021.html'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'In musl libc through 1.2.1, wcsnrtombs mishandles particular combinati ...'
-            },
-            {
-              'cve':  'CVE-2020-28928',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.5',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-787'
-              ],
-              'description':   'In musl libc through 1.2.1, wcsnrtombs mishandles particular combinations of destination buffer size and source character limit, as demonstrated by an invalid write access (buffer overflow).',
-              'diffID':        'sha256:7a76a9f95c3d7aab219540888e7d850c1b86c316741490c533125b761e398553',
-              'fixedVersions': [
-                '1.1.22-r4'
-              ],
-              'installedVersion': '1.1.22-r3',
-              'packageName':      'musl-utils',
-              'purl':             'pkg:apk/alpine/musl-utils@1.1.22-r3?arch=ppc64le&distro=3.10.3',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2020/11/20/4',
-                'https://lists.apache.org/thread.html/r2134abfe847bea7795f0e53756d10a47e6643f35ab8169df8b8a9eb1%40%3Cnotifications.apisix.apache.org%3E',
-                'https://lists.apache.org/thread.html/r90b60cf49348e515257b4950900c1bd3ab95a960cf2469d919c7264e%40%3Cnotifications.apisix.apache.org%3E',
-                'https://lists.apache.org/thread.html/ra63e8dc5137d952afc55dbbfa63be83304ecf842d1eab1ff3ebb29e2%40%3Cnotifications.apisix.apache.org%3E',
-                'https://lists.debian.org/debian-lts-announce/2020/11/msg00050.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LKQ3RVSMVZNZNO4D65W2CZZ4DMYFZN2Q/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UW27QVY7ERPTSGKS4KAWE5TU7EJWHKVQ/',
-                'https://musl.libc.org/releases.html',
-                'https://ubuntu.com/security/notices/USN-5990-1',
-                'https://www.cve.org/CVERecord?id=CVE-2020-28928',
-                'https://www.openwall.com/lists/oss-security/2020/11/20/4',
-                'https://www.oracle.com//security-alerts/cpujul2021.html',
-                'https://www.oracle.com/security-alerts/cpuoct2021.html'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'In musl libc through 1.2.1, wcsnrtombs mishandles particular combinati ...'
-            },
-            {
-              'cve':  'CVE-2021-28831',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-755'
-              ],
-              'description':   'decompress_gunzip.c in BusyBox through 1.32.1 mishandles the error bit on the huft_build result pointer, with a resultant invalid free or segmentation fault, via malformed gzip data.',
-              'diffID':        'sha256:7a76a9f95c3d7aab219540888e7d850c1b86c316741490c533125b761e398553',
-              'fixedVersions': [
-                '1.30.1-r5'
-              ],
-              'installedVersion': '1.30.1-r2',
-              'packageName':      'ssl_client',
-              'purl':             'pkg:apk/alpine/ssl_client@1.30.1-r2?arch=ppc64le&distro=3.10.3',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-28831',
-                'https://git.busybox.net/busybox/commit/?id=f25d254dfd4243698c31a4f3153d4ac72aa9e9bd',
-                'https://lists.debian.org/debian-lts-announce/2021/04/msg00001.html',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/3UDQGJRECXFS5EZVDH2OI45FMO436AC4/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/Z7ZIFKPRR32ZYA3WAA2NXFA3QHHOU6FJ/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZASBW7QRRLY5V2R44MQ4QQM4CZIDHM2U/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-28831',
-                'https://security.gentoo.org/glsa/202105-09',
-                'https://security.netapp.com/advisory/ntap-20250509-0005/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://ubuntu.com/security/notices/USN-5179-2',
-                'https://ubuntu.com/security/notices/USN-6335-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-28831'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: invalid free or segmentation fault via malformed gzip data'
-            }
-          ]
-        }
-      ],
-      'summary': {
-        'critical':   1,
-        'high':       9,
-        'low':        2,
-        'medium':     10,
-        'suppressed': 0,
-        'unknown':    0
-      }
-    }
-  },
-  {
-    'id':    'default/436307a73bb247a940dcf6a1877d11793bbdac9582e5e0cbc5e81aa9c7fb1782',
-    'type':  'storage.sbomscanner.kubewarden.io.vulnerabilityreport',
-    'links': {
-      'patch':  'https://localhost:8005/v1/storage.sbomscanner.kubewarden.io.vulnerabilityreports/default/436307a73bb247a940dcf6a1877d11793bbdac9582e5e0cbc5e81aa9c7fb1782',
-      'remove': 'https://localhost:8005/v1/storage.sbomscanner.kubewarden.io.vulnerabilityreports/default/436307a73bb247a940dcf6a1877d11793bbdac9582e5e0cbc5e81aa9c7fb1782',
-      'self':   'https://localhost:8005/v1/storage.sbomscanner.kubewarden.io.vulnerabilityreports/default/436307a73bb247a940dcf6a1877d11793bbdac9582e5e0cbc5e81aa9c7fb1782',
-      'update': 'https://localhost:8005/v1/storage.sbomscanner.kubewarden.io.vulnerabilityreports/default/436307a73bb247a940dcf6a1877d11793bbdac9582e5e0cbc5e81aa9c7fb1782',
-      'view':   'https://localhost:8005/apis/storage.sbomscanner.kubewarden.io/v1alpha1/namespaces/default/vulnerabilityreports/436307a73bb247a940dcf6a1877d11793bbdac9582e5e0cbc5e81aa9c7fb1782'
-    },
-    '_id':           'default/436307a73bb247a940dcf6a1877d11793bbdac9582e5e0cbc5e81aa9c7fb1782',
-    'apiVersion':    'storage.sbomscanner.kubewarden.io/v1alpha1',
-    'imageMetadata': {
-      'digest':      'sha256:578b5aa9762dc76d03b6d6489c66821b7ccd1047abd51f37e6475786d0dba3ee',
-      'platform':    'linux/amd64',
-      'registry':    'demo-02',
-      'registryURI': 'ghcr.io',
-      'repository':  'linuxcontainers/alpine',
-      'tag':         '3.15'
-    },
-    'kind':     'VulnerabilityReport',
-    'metadata': {
-      'creationTimestamp': '2026-01-09T22:47:03Z',
-      'fields':            [
-        '436307a73bb247a940dcf6a1877d11793bbdac9582e5e0cbc5e81aa9c7fb1782',
-        'ghcr.io/linuxcontainers/alpine:3.15',
-        'linux/amd64',
-        '12 (0 suppressed)'
-      ],
-      'labels': {
-        'app.kubernetes.io/managed-by':          'sbomscanner',
-        'app.kubernetes.io/part-of':             'sbomscanner',
-        'sbomscanner.kubewarden.io/scanjob-uid': '42184d01-4b15-466f-98aa-e802d1b6b6b8'
-      },
-      'managedFields': [
-        {
-          'apiVersion': 'storage.sbomscanner.kubewarden.io/v1alpha1',
-          'fieldsType': 'FieldsV1',
-          'fieldsV1':   {
-            'f:imageMetadata': {
-              'f:digest':      {},
-              'f:platform':    {},
-              'f:registry':    {},
-              'f:registryURI': {},
-              'f:repository':  {},
-              'f:tag':         {}
-            },
-            'f:metadata': {
-              'f:labels': {
-                '.':                                       {},
-                'f:app.kubernetes.io/managed-by':          {},
-                'f:app.kubernetes.io/part-of':             {},
-                'f:sbomscanner.kubewarden.io/scanjob-uid': {}
-              },
-              'f:ownerReferences': {
-                '.':                                                {},
-                'k:{"uid":"569ad5c0-6d4d-430c-9051-91d1152bcc11"}': {}
-              }
-            },
-            'f:report': {
-              'f:results': {},
-              'f:summary': {
-                'f:high':   {},
-                'f:medium': {}
-              }
-            }
-          },
-          'manager':   'worker',
-          'operation': 'Update',
-          'time':      '2026-01-28T18:34:05Z'
-        }
-      ],
-      'name':            '436307a73bb247a940dcf6a1877d11793bbdac9582e5e0cbc5e81aa9c7fb1782',
-      'namespace':       'default',
-      'ownerReferences': [
-        {
-          'apiVersion':         'storage.sbomscanner.kubewarden.io/v1alpha1',
-          'blockOwnerDeletion': true,
-          'controller':         true,
-          'kind':               'SBOM',
-          'name':               '436307a73bb247a940dcf6a1877d11793bbdac9582e5e0cbc5e81aa9c7fb1782',
-          'uid':                '569ad5c0-6d4d-430c-9051-91d1152bcc11'
-        }
-      ],
-      'relationships': [
-        {
-          'fromId':   'default/436307a73bb247a940dcf6a1877d11793bbdac9582e5e0cbc5e81aa9c7fb1782',
-          'fromType': 'storage.sbomscanner.kubewarden.io.sbom',
-          'rel':      'owner',
-          'state':    'active',
-          'message':  'Resource is current'
-        }
-      ],
-      'resourceVersion': '5',
-      'state':           {
-        'error':         false,
-        'message':       'Resource is current',
-        'name':          'active',
-        'transitioning': false
-      },
-      'uid': '410c4bb6-a163-45ae-a9d3-6f9017a3b1ff'
-    },
-    'report': {
-      'results': [
-        {
-          'class':           'os-pkgs',
-          'target':          '/var/run/worker/trivy.sbom.1242320404.json (alpine 3.15.7)',
-          'type':            'alpine',
-          'vulnerabilities': [
-            {
-              'cve':  'CVE-2023-0464',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-295'
-              ],
-              'description':   "A security vulnerability has been identified in all supported versions\n\nof OpenSSL related to the verification of X.509 certificate chains\nthat include policy constraints.  Attackers may be able to exploit this\nvulnerability by creating a malicious certificate chain that triggers\nexponential use of computational resources, leading to a denial-of-service\n(DoS) attack on affected systems.\n\nPolicy processing is disabled by default but can be enabled by passing\nthe `-policy' argument to the command line utilities or by calling the\n`X509_VERIFY_PARAM_set1_policies()' function.",
-              'diffID':        'sha256:4e64766527982cca5b986a8d061530bf5c32e111047733b59cb0c9742a89eda0',
-              'fixedVersions': [
-                '1.1.1t-r2'
-              ],
-              'installedVersion': '1.1.1t-r1',
-              'packageName':      'libcrypto1.1',
-              'purl':             'pkg:apk/alpine/libcrypto1.1@1.1.1t-r1?arch=x86_64&distro=3.15.7',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2023:3722',
-                'https://access.redhat.com/security/cve/CVE-2023-0464',
-                'https://bugzilla.redhat.com/2181082',
-                'https://bugzilla.redhat.com/2182561',
-                'https://bugzilla.redhat.com/2182565',
-                'https://bugzilla.redhat.com/2188461',
-                'https://bugzilla.redhat.com/2207947',
-                'https://errata.almalinux.org/9/ALSA-2023-3722.html',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=2017771e2db3e2b96f89bbe8766c3209f6a99545',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=2dcd4f1e3115f38cefa43e3efbe9b801c27e642e',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=879f7080d7e141f415c79eaa3a8ac4a3dad0348b',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=959c59c7a0164117e7f8366466a32bb1f8d77ff1',
-                'https://linux.oracle.com/cve/CVE-2023-0464.html',
-                'https://linux.oracle.com/errata/ELSA-2023-3722.html',
-                'https://lists.debian.org/debian-lts-announce/2023/06/msg00011.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-0464',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://security.netapp.com/advisory/ntap-20230406-0006/',
-                'https://security.netapp.com/advisory/ntap-20240621-0006/',
-                'https://ubuntu.com/security/notices/USN-6039-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.couchbase.com/alerts/',
-                'https://www.cve.org/CVERecord?id=CVE-2023-0464',
-                'https://www.debian.org/security/2023/dsa-5417',
-                'https://www.openssl.org/news/secadv/20230322.txt'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: Denial of service by excessive resource usage in verifying X509 policy constraints'
-            },
-            {
-              'cve':  'CVE-2023-0465',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N'
-                },
-                'redhat': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-295'
-              ],
-              'description':   "Applications that use a non-default option when verifying certificates may be\nvulnerable to an attack from a malicious CA to circumvent certain checks.\n\nInvalid certificate policies in leaf certificates are silently ignored by\nOpenSSL and other certificate policy checks are skipped for that certificate.\nA malicious CA could use this to deliberately assert invalid certificate policies\nin order to circumvent policy checking on the certificate altogether.\n\nPolicy processing is disabled by default but can be enabled by passing\nthe `-policy' argument to the command line utilities or by calling the\n`X509_VERIFY_PARAM_set1_policies()' function.",
-              'diffID':        'sha256:4e64766527982cca5b986a8d061530bf5c32e111047733b59cb0c9742a89eda0',
-              'fixedVersions': [
-                '1.1.1t-r2'
-              ],
-              'installedVersion': '1.1.1t-r1',
-              'packageName':      'libcrypto1.1',
-              'purl':             'pkg:apk/alpine/libcrypto1.1@1.1.1t-r1?arch=x86_64&distro=3.15.7',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2023:3722',
-                'https://access.redhat.com/security/cve/CVE-2023-0465',
-                'https://bugzilla.redhat.com/2181082',
-                'https://bugzilla.redhat.com/2182561',
-                'https://bugzilla.redhat.com/2182565',
-                'https://bugzilla.redhat.com/2188461',
-                'https://bugzilla.redhat.com/2207947',
-                'https://errata.almalinux.org/9/ALSA-2023-3722.html',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=10325176f3d3e98c6e2b3bf5ab1e3b334de6947a',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=1dd43e0709fece299b15208f36cc7c76209ba0bb',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=b013765abfa80036dc779dd0e50602c57bb3bf95',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=facfb1ab745646e97a1920977ae4a9965ea61d5c',
-                'https://linux.oracle.com/cve/CVE-2023-0465.html',
-                'https://linux.oracle.com/errata/ELSA-2023-3722.html',
-                'https://lists.debian.org/debian-lts-announce/2023/06/msg00011.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-0465',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://security.netapp.com/advisory/ntap-20230414-0001/',
-                'https://ubuntu.com/security/notices/USN-6039-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-0465',
-                'https://www.debian.org/security/2023/dsa-5417',
-                'https://www.openssl.org/news/secadv/20230328.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: Invalid certificate policies in leaf certificates are silently ignored'
-            },
-            {
-              'cve':  'CVE-2023-2650',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '6.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-770'
-              ],
-              'description':   "Issue summary: Processing some specially crafted ASN.1 object identifiers or\ndata containing them may be very slow.\n\nImpact summary: Applications that use OBJ_obj2txt() directly, or use any of\nthe OpenSSL subsystems OCSP, PKCS7/SMIME, CMS, CMP/CRMF or TS with no message\nsize limit may experience notable to very long delays when processing those\nmessages, which may lead to a Denial of Service.\n\nAn OBJECT IDENTIFIER is composed of a series of numbers - sub-identifiers -\nmost of which have no size limit.  OBJ_obj2txt() may be used to translate\nan ASN.1 OBJECT IDENTIFIER given in DER encoding form (using the OpenSSL\ntype ASN1_OBJECT) to its canonical numeric text form, which are the\nsub-identifiers of the OBJECT IDENTIFIER in decimal form, separated by\nperiods.\n\nWhen one of the sub-identifiers in the OBJECT IDENTIFIER is very large\n(these are sizes that are seen as absurdly large, taking up tens or hundreds\nof KiBs), the translation to a decimal number in text may take a very long\ntime.  The time complexity is O(n^2) with 'n' being the size of the\nsub-identifiers in bytes (*).\n\nWith OpenSSL 3.0, support to fetch cryptographic algorithms using names /\nidentifiers in string form was introduced.  This includes using OBJECT\nIDENTIFIERs in canonical numeric text form as identifiers for fetching\nalgorithms.\n\nSuch OBJECT IDENTIFIERs may be received through the ASN.1 structure\nAlgorithmIdentifier, which is commonly used in multiple protocols to specify\nwhat cryptographic algorithm should be used to sign or verify, encrypt or\ndecrypt, or digest passed data.\n\nApplications that call OBJ_obj2txt() directly with untrusted data are\naffected, with any version of OpenSSL.  If the use is for the mere purpose\nof display, the severity is considered low.\n\nIn OpenSSL 3.0 and newer, this affects the subsystems OCSP, PKCS7/SMIME,\nCMS, CMP/CRMF or TS.  It also impacts anything that processes X.509\ncertificates, including simple things like verifying its signature.\n\nThe impact on TLS is relatively low, because all versions of OpenSSL have a\n100KiB limit on the peer's certificate chain.  Additionally, this only\nimpacts clients, or servers that have explicitly enabled client\nauthentication.\n\nIn OpenSSL 1.1.1 and 1.0.2, this only affects displaying diverse objects,\nsuch as X.509 certificates.  This is assumed to not happen in such a way\nthat it would cause a Denial of Service, so these versions are considered\nnot affected by this issue in such a way that it would be cause for concern,\nand the severity is therefore considered low.",
-              'diffID':        'sha256:4e64766527982cca5b986a8d061530bf5c32e111047733b59cb0c9742a89eda0',
-              'fixedVersions': [
-                '1.1.1u-r0'
-              ],
-              'installedVersion': '1.1.1t-r1',
-              'packageName':      'libcrypto1.1',
-              'purl':             'pkg:apk/alpine/libcrypto1.1@1.1.1t-r1?arch=x86_64&distro=3.15.7',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2023/05/30/1',
-                'https://access.redhat.com/errata/RHSA-2023:6330',
-                'https://access.redhat.com/security/cve/CVE-2023-2650',
-                'https://bugzilla.redhat.com/1858038',
-                'https://bugzilla.redhat.com/2207947',
-                'https://errata.almalinux.org/9/ALSA-2023-6330.html',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=423a2bc737a908ad0c77bda470b2b59dc879936b',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=853c5e56ee0b8650c73140816bb8b91d6163422c',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=9e209944b35cf82368071f160a744b6178f9b098',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=db779b0e10b047f2585615e0b8f2acdf21f8544a',
-                'https://linux.oracle.com/cve/CVE-2023-2650.html',
-                'https://linux.oracle.com/errata/ELSA-2023-6330.html',
-                'https://lists.debian.org/debian-lts-announce/2023/06/msg00011.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-2650',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0009',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://security.netapp.com/advisory/ntap-20230703-0001/',
-                'https://security.netapp.com/advisory/ntap-20231027-0009/',
-                'https://ubuntu.com/security/notices/USN-6119-1',
-                'https://ubuntu.com/security/notices/USN-6188-1',
-                'https://ubuntu.com/security/notices/USN-6672-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-2650',
-                'https://www.debian.org/security/2023/dsa-5417',
-                'https://www.openssl.org/news/secadv/20230530.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: Possible DoS translating ASN.1 object identifiers'
-            },
-            {
-              'cve':  'CVE-2023-3446',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L'
-                },
-                'redhat': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L'
-                }
-              },
-              'cwes': [
-                'CWE-606',
-                'CWE-1333'
-              ],
-              'description':   "Issue summary: Checking excessively long DH keys or parameters may be very slow.\n\nImpact summary: Applications that use the functions DH_check(), DH_check_ex()\nor EVP_PKEY_param_check() to check a DH key or DH parameters may experience long\ndelays. Where the key or parameters that are being checked have been obtained\nfrom an untrusted source this may lead to a Denial of Service.\n\nThe function DH_check() performs various checks on DH parameters. One of those\nchecks confirms that the modulus ('p' parameter) is not too large. Trying to use\na very large modulus is slow and OpenSSL will not normally use a modulus which\nis over 10,000 bits in length.\n\nHowever the DH_check() function checks numerous aspects of the key or parameters\nthat have been supplied. Some of those checks use the supplied modulus value\neven if it has already been found to be too large.\n\nAn application that calls DH_check() and supplies a key or parameters obtained\nfrom an untrusted source could be vulernable to a Denial of Service attack.\n\nThe function DH_check() is itself called by a number of other OpenSSL functions.\nAn application calling any of those other functions may similarly be affected.\nThe other functions affected by this are DH_check_ex() and\nEVP_PKEY_param_check().\n\nAlso vulnerable are the OpenSSL dhparam and pkeyparam command line applications\nwhen using the '-check' option.\n\nThe OpenSSL SSL/TLS implementation is not affected by this issue.\nThe OpenSSL 3.0 and 3.1 FIPS providers are not affected by this issue.",
-              'diffID':        'sha256:4e64766527982cca5b986a8d061530bf5c32e111047733b59cb0c9742a89eda0',
-              'fixedVersions': [
-                '1.1.1u-r2'
-              ],
-              'installedVersion': '1.1.1t-r1',
-              'packageName':      'libcrypto1.1',
-              'purl':             'pkg:apk/alpine/libcrypto1.1@1.1.1t-r1?arch=x86_64&distro=3.15.7',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2023/07/19/4',
-                'http://www.openwall.com/lists/oss-security/2023/07/19/5',
-                'http://www.openwall.com/lists/oss-security/2023/07/19/6',
-                'http://www.openwall.com/lists/oss-security/2023/07/31/1',
-                'http://www.openwall.com/lists/oss-security/2024/05/16/1',
-                'https://access.redhat.com/errata/RHSA-2024:2447',
-                'https://access.redhat.com/security/cve/CVE-2023-3446',
-                'https://bugzilla.redhat.com/2223016',
-                'https://bugzilla.redhat.com/2224962',
-                'https://bugzilla.redhat.com/2227852',
-                'https://bugzilla.redhat.com/2248616',
-                'https://bugzilla.redhat.com/2257571',
-                'https://bugzilla.redhat.com/2258502',
-                'https://bugzilla.redhat.com/2259944',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2224962',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2257582',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2257583',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2258677',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2258688',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2258691',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2258694',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2258700',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-36763',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-36764',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3446',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45229',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45231',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45232',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45233',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45235',
-                'https://errata.almalinux.org/9/ALSA-2024-2447.html',
-                'https://errata.rockylinux.org/RLSA-2024:2264',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=1fa20cf2f506113c761777127a38bce5068740eb',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=8780a896543a654e757db1b9396383f9d8095528',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=9a0a4d3c1e7138915563c0df4fe6a3f9377b839c',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=fc9867c1e03c22ebf56943be205202e576aabf23',
-                'https://linux.oracle.com/cve/CVE-2023-3446.html',
-                'https://linux.oracle.com/errata/ELSA-2024-2447.html',
-                'https://lists.debian.org/debian-lts-announce/2023/08/msg00019.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-3446',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://security.netapp.com/advisory/ntap-20230803-0011/',
-                'https://ubuntu.com/security/notices/USN-6435-1',
-                'https://ubuntu.com/security/notices/USN-6435-2',
-                'https://ubuntu.com/security/notices/USN-6450-1',
-                'https://ubuntu.com/security/notices/USN-6709-1',
-                'https://ubuntu.com/security/notices/USN-7018-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-3446',
-                'https://www.openssl.org/news/secadv/20230719.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: Excessive time spent checking DH keys and parameters'
-            },
-            {
-              'cve':  'CVE-2023-3817',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L'
-                },
-                'redhat': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L'
-                }
-              },
-              'cwes': [
-                'CWE-606',
-                'CWE-834'
-              ],
-              'description':   'Issue summary: Checking excessively long DH keys or parameters may be very slow.\n\nImpact summary: Applications that use the functions DH_check(), DH_check_ex()\nor EVP_PKEY_param_check() to check a DH key or DH parameters may experience long\ndelays. Where the key or parameters that are being checked have been obtained\nfrom an untrusted source this may lead to a Denial of Service.\n\nThe function DH_check() performs various checks on DH parameters. After fixing\nCVE-2023-3446 it was discovered that a large q parameter value can also trigger\nan overly long computation during some of these checks. A correct q value,\nif present, cannot be larger than the modulus p parameter, thus it is\nunnecessary to perform these checks if q is larger than p.\n\nAn application that calls DH_check() and supplies a key or parameters obtained\nfrom an untrusted source could be vulnerable to a Denial of Service attack.\n\nThe function DH_check() is itself called by a number of other OpenSSL functions.\nAn application calling any of those other functions may similarly be affected.\nThe other functions affected by this are DH_check_ex() and\nEVP_PKEY_param_check().\n\nAlso vulnerable are the OpenSSL dhparam and pkeyparam command line applications\nwhen using the "-check" option.\n\nThe OpenSSL SSL/TLS implementation is not affected by this issue.\n\nThe OpenSSL 3.0 and 3.1 FIPS providers are not affected by this issue.',
-              'diffID':        'sha256:4e64766527982cca5b986a8d061530bf5c32e111047733b59cb0c9742a89eda0',
-              'fixedVersions': [
-                '1.1.1v-r0'
-              ],
-              'installedVersion': '1.1.1t-r1',
-              'packageName':      'libcrypto1.1',
-              'purl':             'pkg:apk/alpine/libcrypto1.1@1.1.1t-r1?arch=x86_64&distro=3.15.7',
-              'references':       [
-                'http://seclists.org/fulldisclosure/2023/Jul/43',
-                'http://www.openwall.com/lists/oss-security/2023/07/31/1',
-                'http://www.openwall.com/lists/oss-security/2023/09/22/11',
-                'http://www.openwall.com/lists/oss-security/2023/09/22/9',
-                'http://www.openwall.com/lists/oss-security/2023/11/06/2',
-                'https://access.redhat.com/errata/RHSA-2024:2447',
-                'https://access.redhat.com/security/cve/CVE-2023-3817',
-                'https://bugzilla.redhat.com/2223016',
-                'https://bugzilla.redhat.com/2224962',
-                'https://bugzilla.redhat.com/2227852',
-                'https://bugzilla.redhat.com/2248616',
-                'https://bugzilla.redhat.com/2257571',
-                'https://bugzilla.redhat.com/2258502',
-                'https://bugzilla.redhat.com/2259944',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2224962',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2227852',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2248616',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2270358',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3446',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3817',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-5678',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-2408',
-                'https://errata.almalinux.org/9/ALSA-2024-2447.html',
-                'https://errata.rockylinux.org/RLSA-2023:7877',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=6a1eb62c29db6cb5eec707f9338aee00f44e26f5',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=869ad69aadd985c7b8ca6f4e5dd0eb274c9f3644',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=9002fd07327a91f35ba6c1307e71fa6fd4409b7f',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=91ddeba0f2269b017dc06c46c993a788974b1aa5',
-                'https://linux.oracle.com/cve/CVE-2023-3817.html',
-                'https://linux.oracle.com/errata/ELSA-2024-2447.html',
-                'https://lists.debian.org/debian-lts-announce/2023/08/msg00019.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-3817',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://security.netapp.com/advisory/ntap-20230818-0014/',
-                'https://security.netapp.com/advisory/ntap-20231027-0008/',
-                'https://security.netapp.com/advisory/ntap-20240621-0006/',
-                'https://ubuntu.com/security/notices/USN-6435-1',
-                'https://ubuntu.com/security/notices/USN-6435-2',
-                'https://ubuntu.com/security/notices/USN-6450-1',
-                'https://ubuntu.com/security/notices/USN-6709-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-3817',
-                'https://www.openssl.org/news/secadv/20230731.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'OpenSSL: Excessive time spent checking DH q parameter value'
-            },
-            {
-              'cve':  'CVE-2023-5678',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L'
-                },
-                'redhat': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L'
-                }
-              },
-              'cwes': [
-                'CWE-606',
-                'CWE-754'
-              ],
-              'description':   "Issue summary: Generating excessively long X9.42 DH keys or checking\nexcessively long X9.42 DH keys or parameters may be very slow.\n\nImpact summary: Applications that use the functions DH_generate_key() to\ngenerate an X9.42 DH key may experience long delays.  Likewise, applications\nthat use DH_check_pub_key(), DH_check_pub_key_ex() or EVP_PKEY_public_check()\nto check an X9.42 DH key or X9.42 DH parameters may experience long delays.\nWhere the key or parameters that are being checked have been obtained from\nan untrusted source this may lead to a Denial of Service.\n\nWhile DH_check() performs all the necessary checks (as of CVE-2023-3817),\nDH_check_pub_key() doesn't make any of these checks, and is therefore\nvulnerable for excessively large P and Q parameters.\n\nLikewise, while DH_generate_key() performs a check for an excessively large\nP, it doesn't check for an excessively large Q.\n\nAn application that calls DH_generate_key() or DH_check_pub_key() and\nsupplies a key or parameters obtained from an untrusted source could be\nvulnerable to a Denial of Service attack.\n\nDH_generate_key() and DH_check_pub_key() are also called by a number of\nother OpenSSL functions.  An application calling any of those other\nfunctions may similarly be affected.  The other functions affected by this\nare DH_check_pub_key_ex(), EVP_PKEY_public_check(), and EVP_PKEY_generate().\n\nAlso vulnerable are the OpenSSL pkey command line application when using the\n\"-pubcheck\" option, as well as the OpenSSL genpkey command line application.\n\nThe OpenSSL SSL/TLS implementation is not affected by this issue.\n\nThe OpenSSL 3.0 and 3.1 FIPS providers are not affected by this issue.",
-              'diffID':        'sha256:4e64766527982cca5b986a8d061530bf5c32e111047733b59cb0c9742a89eda0',
-              'fixedVersions': [
-                '1.1.1w-r1'
-              ],
-              'installedVersion': '1.1.1t-r1',
-              'packageName':      'libcrypto1.1',
-              'purl':             'pkg:apk/alpine/libcrypto1.1@1.1.1t-r1?arch=x86_64&distro=3.15.7',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2024/03/11/1',
-                'https://access.redhat.com/errata/RHSA-2024:2447',
-                'https://access.redhat.com/security/cve/CVE-2023-5678',
-                'https://bugzilla.redhat.com/2223016',
-                'https://bugzilla.redhat.com/2224962',
-                'https://bugzilla.redhat.com/2227852',
-                'https://bugzilla.redhat.com/2248616',
-                'https://bugzilla.redhat.com/2257571',
-                'https://bugzilla.redhat.com/2258502',
-                'https://bugzilla.redhat.com/2259944',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2224962',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2227852',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2248616',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2270358',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3446',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3817',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-5678',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-2408',
-                'https://errata.almalinux.org/9/ALSA-2024-2447.html',
-                'https://errata.rockylinux.org/RLSA-2023:7877',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=34efaef6c103d636ab507a0cc34dca4d3aecc055',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=710fee740904b6290fef0dd5536fbcedbc38ff0c',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=db925ae2e65d0d925adef429afc37f75bd1c2017',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=ddeb4b6c6d527e54ce9a99cba785c0f7776e54b6',
-                'https://linux.oracle.com/cve/CVE-2023-5678.html',
-                'https://linux.oracle.com/errata/ELSA-2024-2447.html',
-                'https://lists.debian.org/debian-lts-announce/2024/10/msg00033.html',
-                'https://lists.debian.org/debian-lts-announce/2024/11/msg00000.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-5678',
-                'https://security.netapp.com/advisory/ntap-20231130-0010/',
-                'https://ubuntu.com/security/notices/USN-6622-1',
-                'https://ubuntu.com/security/notices/USN-6632-1',
-                'https://ubuntu.com/security/notices/USN-6709-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-5678',
-                'https://www.openssl.org/news/secadv/20231106.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: Generating excessively long X9.42 DH keys or checking excessively long X9.42 DH keys or parameters may be very slow'
-            },
-            {
-              'cve':  'CVE-2023-0464',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-295'
-              ],
-              'description':   "A security vulnerability has been identified in all supported versions\n\nof OpenSSL related to the verification of X.509 certificate chains\nthat include policy constraints.  Attackers may be able to exploit this\nvulnerability by creating a malicious certificate chain that triggers\nexponential use of computational resources, leading to a denial-of-service\n(DoS) attack on affected systems.\n\nPolicy processing is disabled by default but can be enabled by passing\nthe `-policy' argument to the command line utilities or by calling the\n`X509_VERIFY_PARAM_set1_policies()' function.",
-              'diffID':        'sha256:4e64766527982cca5b986a8d061530bf5c32e111047733b59cb0c9742a89eda0',
-              'fixedVersions': [
-                '1.1.1t-r2'
-              ],
-              'installedVersion': '1.1.1t-r1',
-              'packageName':      'libssl1.1',
-              'purl':             'pkg:apk/alpine/libssl1.1@1.1.1t-r1?arch=x86_64&distro=3.15.7',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2023:3722',
-                'https://access.redhat.com/security/cve/CVE-2023-0464',
-                'https://bugzilla.redhat.com/2181082',
-                'https://bugzilla.redhat.com/2182561',
-                'https://bugzilla.redhat.com/2182565',
-                'https://bugzilla.redhat.com/2188461',
-                'https://bugzilla.redhat.com/2207947',
-                'https://errata.almalinux.org/9/ALSA-2023-3722.html',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=2017771e2db3e2b96f89bbe8766c3209f6a99545',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=2dcd4f1e3115f38cefa43e3efbe9b801c27e642e',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=879f7080d7e141f415c79eaa3a8ac4a3dad0348b',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=959c59c7a0164117e7f8366466a32bb1f8d77ff1',
-                'https://linux.oracle.com/cve/CVE-2023-0464.html',
-                'https://linux.oracle.com/errata/ELSA-2023-3722.html',
-                'https://lists.debian.org/debian-lts-announce/2023/06/msg00011.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-0464',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://security.netapp.com/advisory/ntap-20230406-0006/',
-                'https://security.netapp.com/advisory/ntap-20240621-0006/',
-                'https://ubuntu.com/security/notices/USN-6039-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.couchbase.com/alerts/',
-                'https://www.cve.org/CVERecord?id=CVE-2023-0464',
-                'https://www.debian.org/security/2023/dsa-5417',
-                'https://www.openssl.org/news/secadv/20230322.txt'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: Denial of service by excessive resource usage in verifying X509 policy constraints'
-            },
-            {
-              'cve':  'CVE-2023-0465',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N'
-                },
-                'redhat': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-295'
-              ],
-              'description':   "Applications that use a non-default option when verifying certificates may be\nvulnerable to an attack from a malicious CA to circumvent certain checks.\n\nInvalid certificate policies in leaf certificates are silently ignored by\nOpenSSL and other certificate policy checks are skipped for that certificate.\nA malicious CA could use this to deliberately assert invalid certificate policies\nin order to circumvent policy checking on the certificate altogether.\n\nPolicy processing is disabled by default but can be enabled by passing\nthe `-policy' argument to the command line utilities or by calling the\n`X509_VERIFY_PARAM_set1_policies()' function.",
-              'diffID':        'sha256:4e64766527982cca5b986a8d061530bf5c32e111047733b59cb0c9742a89eda0',
-              'fixedVersions': [
-                '1.1.1t-r2'
-              ],
-              'installedVersion': '1.1.1t-r1',
-              'packageName':      'libssl1.1',
-              'purl':             'pkg:apk/alpine/libssl1.1@1.1.1t-r1?arch=x86_64&distro=3.15.7',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2023:3722',
-                'https://access.redhat.com/security/cve/CVE-2023-0465',
-                'https://bugzilla.redhat.com/2181082',
-                'https://bugzilla.redhat.com/2182561',
-                'https://bugzilla.redhat.com/2182565',
-                'https://bugzilla.redhat.com/2188461',
-                'https://bugzilla.redhat.com/2207947',
-                'https://errata.almalinux.org/9/ALSA-2023-3722.html',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=10325176f3d3e98c6e2b3bf5ab1e3b334de6947a',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=1dd43e0709fece299b15208f36cc7c76209ba0bb',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=b013765abfa80036dc779dd0e50602c57bb3bf95',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=facfb1ab745646e97a1920977ae4a9965ea61d5c',
-                'https://linux.oracle.com/cve/CVE-2023-0465.html',
-                'https://linux.oracle.com/errata/ELSA-2023-3722.html',
-                'https://lists.debian.org/debian-lts-announce/2023/06/msg00011.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-0465',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://security.netapp.com/advisory/ntap-20230414-0001/',
-                'https://ubuntu.com/security/notices/USN-6039-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-0465',
-                'https://www.debian.org/security/2023/dsa-5417',
-                'https://www.openssl.org/news/secadv/20230328.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: Invalid certificate policies in leaf certificates are silently ignored'
-            },
-            {
-              'cve':  'CVE-2023-2650',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '6.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-770'
-              ],
-              'description':   "Issue summary: Processing some specially crafted ASN.1 object identifiers or\ndata containing them may be very slow.\n\nImpact summary: Applications that use OBJ_obj2txt() directly, or use any of\nthe OpenSSL subsystems OCSP, PKCS7/SMIME, CMS, CMP/CRMF or TS with no message\nsize limit may experience notable to very long delays when processing those\nmessages, which may lead to a Denial of Service.\n\nAn OBJECT IDENTIFIER is composed of a series of numbers - sub-identifiers -\nmost of which have no size limit.  OBJ_obj2txt() may be used to translate\nan ASN.1 OBJECT IDENTIFIER given in DER encoding form (using the OpenSSL\ntype ASN1_OBJECT) to its canonical numeric text form, which are the\nsub-identifiers of the OBJECT IDENTIFIER in decimal form, separated by\nperiods.\n\nWhen one of the sub-identifiers in the OBJECT IDENTIFIER is very large\n(these are sizes that are seen as absurdly large, taking up tens or hundreds\nof KiBs), the translation to a decimal number in text may take a very long\ntime.  The time complexity is O(n^2) with 'n' being the size of the\nsub-identifiers in bytes (*).\n\nWith OpenSSL 3.0, support to fetch cryptographic algorithms using names /\nidentifiers in string form was introduced.  This includes using OBJECT\nIDENTIFIERs in canonical numeric text form as identifiers for fetching\nalgorithms.\n\nSuch OBJECT IDENTIFIERs may be received through the ASN.1 structure\nAlgorithmIdentifier, which is commonly used in multiple protocols to specify\nwhat cryptographic algorithm should be used to sign or verify, encrypt or\ndecrypt, or digest passed data.\n\nApplications that call OBJ_obj2txt() directly with untrusted data are\naffected, with any version of OpenSSL.  If the use is for the mere purpose\nof display, the severity is considered low.\n\nIn OpenSSL 3.0 and newer, this affects the subsystems OCSP, PKCS7/SMIME,\nCMS, CMP/CRMF or TS.  It also impacts anything that processes X.509\ncertificates, including simple things like verifying its signature.\n\nThe impact on TLS is relatively low, because all versions of OpenSSL have a\n100KiB limit on the peer's certificate chain.  Additionally, this only\nimpacts clients, or servers that have explicitly enabled client\nauthentication.\n\nIn OpenSSL 1.1.1 and 1.0.2, this only affects displaying diverse objects,\nsuch as X.509 certificates.  This is assumed to not happen in such a way\nthat it would cause a Denial of Service, so these versions are considered\nnot affected by this issue in such a way that it would be cause for concern,\nand the severity is therefore considered low.",
-              'diffID':        'sha256:4e64766527982cca5b986a8d061530bf5c32e111047733b59cb0c9742a89eda0',
-              'fixedVersions': [
-                '1.1.1u-r0'
-              ],
-              'installedVersion': '1.1.1t-r1',
-              'packageName':      'libssl1.1',
-              'purl':             'pkg:apk/alpine/libssl1.1@1.1.1t-r1?arch=x86_64&distro=3.15.7',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2023/05/30/1',
-                'https://access.redhat.com/errata/RHSA-2023:6330',
-                'https://access.redhat.com/security/cve/CVE-2023-2650',
-                'https://bugzilla.redhat.com/1858038',
-                'https://bugzilla.redhat.com/2207947',
-                'https://errata.almalinux.org/9/ALSA-2023-6330.html',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=423a2bc737a908ad0c77bda470b2b59dc879936b',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=853c5e56ee0b8650c73140816bb8b91d6163422c',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=9e209944b35cf82368071f160a744b6178f9b098',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=db779b0e10b047f2585615e0b8f2acdf21f8544a',
-                'https://linux.oracle.com/cve/CVE-2023-2650.html',
-                'https://linux.oracle.com/errata/ELSA-2023-6330.html',
-                'https://lists.debian.org/debian-lts-announce/2023/06/msg00011.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-2650',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0009',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://security.netapp.com/advisory/ntap-20230703-0001/',
-                'https://security.netapp.com/advisory/ntap-20231027-0009/',
-                'https://ubuntu.com/security/notices/USN-6119-1',
-                'https://ubuntu.com/security/notices/USN-6188-1',
-                'https://ubuntu.com/security/notices/USN-6672-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-2650',
-                'https://www.debian.org/security/2023/dsa-5417',
-                'https://www.openssl.org/news/secadv/20230530.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: Possible DoS translating ASN.1 object identifiers'
-            },
-            {
-              'cve':  'CVE-2023-3446',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L'
-                },
-                'redhat': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L'
-                }
-              },
-              'cwes': [
-                'CWE-606',
-                'CWE-1333'
-              ],
-              'description':   "Issue summary: Checking excessively long DH keys or parameters may be very slow.\n\nImpact summary: Applications that use the functions DH_check(), DH_check_ex()\nor EVP_PKEY_param_check() to check a DH key or DH parameters may experience long\ndelays. Where the key or parameters that are being checked have been obtained\nfrom an untrusted source this may lead to a Denial of Service.\n\nThe function DH_check() performs various checks on DH parameters. One of those\nchecks confirms that the modulus ('p' parameter) is not too large. Trying to use\na very large modulus is slow and OpenSSL will not normally use a modulus which\nis over 10,000 bits in length.\n\nHowever the DH_check() function checks numerous aspects of the key or parameters\nthat have been supplied. Some of those checks use the supplied modulus value\neven if it has already been found to be too large.\n\nAn application that calls DH_check() and supplies a key or parameters obtained\nfrom an untrusted source could be vulernable to a Denial of Service attack.\n\nThe function DH_check() is itself called by a number of other OpenSSL functions.\nAn application calling any of those other functions may similarly be affected.\nThe other functions affected by this are DH_check_ex() and\nEVP_PKEY_param_check().\n\nAlso vulnerable are the OpenSSL dhparam and pkeyparam command line applications\nwhen using the '-check' option.\n\nThe OpenSSL SSL/TLS implementation is not affected by this issue.\nThe OpenSSL 3.0 and 3.1 FIPS providers are not affected by this issue.",
-              'diffID':        'sha256:4e64766527982cca5b986a8d061530bf5c32e111047733b59cb0c9742a89eda0',
-              'fixedVersions': [
-                '1.1.1u-r2'
-              ],
-              'installedVersion': '1.1.1t-r1',
-              'packageName':      'libssl1.1',
-              'purl':             'pkg:apk/alpine/libssl1.1@1.1.1t-r1?arch=x86_64&distro=3.15.7',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2023/07/19/4',
-                'http://www.openwall.com/lists/oss-security/2023/07/19/5',
-                'http://www.openwall.com/lists/oss-security/2023/07/19/6',
-                'http://www.openwall.com/lists/oss-security/2023/07/31/1',
-                'http://www.openwall.com/lists/oss-security/2024/05/16/1',
-                'https://access.redhat.com/errata/RHSA-2024:2447',
-                'https://access.redhat.com/security/cve/CVE-2023-3446',
-                'https://bugzilla.redhat.com/2223016',
-                'https://bugzilla.redhat.com/2224962',
-                'https://bugzilla.redhat.com/2227852',
-                'https://bugzilla.redhat.com/2248616',
-                'https://bugzilla.redhat.com/2257571',
-                'https://bugzilla.redhat.com/2258502',
-                'https://bugzilla.redhat.com/2259944',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2224962',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2257582',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2257583',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2258677',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2258688',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2258691',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2258694',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2258700',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-36763',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-36764',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3446',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45229',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45231',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45232',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45233',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45235',
-                'https://errata.almalinux.org/9/ALSA-2024-2447.html',
-                'https://errata.rockylinux.org/RLSA-2024:2264',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=1fa20cf2f506113c761777127a38bce5068740eb',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=8780a896543a654e757db1b9396383f9d8095528',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=9a0a4d3c1e7138915563c0df4fe6a3f9377b839c',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=fc9867c1e03c22ebf56943be205202e576aabf23',
-                'https://linux.oracle.com/cve/CVE-2023-3446.html',
-                'https://linux.oracle.com/errata/ELSA-2024-2447.html',
-                'https://lists.debian.org/debian-lts-announce/2023/08/msg00019.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-3446',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://security.netapp.com/advisory/ntap-20230803-0011/',
-                'https://ubuntu.com/security/notices/USN-6435-1',
-                'https://ubuntu.com/security/notices/USN-6435-2',
-                'https://ubuntu.com/security/notices/USN-6450-1',
-                'https://ubuntu.com/security/notices/USN-6709-1',
-                'https://ubuntu.com/security/notices/USN-7018-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-3446',
-                'https://www.openssl.org/news/secadv/20230719.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: Excessive time spent checking DH keys and parameters'
-            },
-            {
-              'cve':  'CVE-2023-3817',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L'
-                },
-                'redhat': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L'
-                }
-              },
-              'cwes': [
-                'CWE-606',
-                'CWE-834'
-              ],
-              'description':   'Issue summary: Checking excessively long DH keys or parameters may be very slow.\n\nImpact summary: Applications that use the functions DH_check(), DH_check_ex()\nor EVP_PKEY_param_check() to check a DH key or DH parameters may experience long\ndelays. Where the key or parameters that are being checked have been obtained\nfrom an untrusted source this may lead to a Denial of Service.\n\nThe function DH_check() performs various checks on DH parameters. After fixing\nCVE-2023-3446 it was discovered that a large q parameter value can also trigger\nan overly long computation during some of these checks. A correct q value,\nif present, cannot be larger than the modulus p parameter, thus it is\nunnecessary to perform these checks if q is larger than p.\n\nAn application that calls DH_check() and supplies a key or parameters obtained\nfrom an untrusted source could be vulnerable to a Denial of Service attack.\n\nThe function DH_check() is itself called by a number of other OpenSSL functions.\nAn application calling any of those other functions may similarly be affected.\nThe other functions affected by this are DH_check_ex() and\nEVP_PKEY_param_check().\n\nAlso vulnerable are the OpenSSL dhparam and pkeyparam command line applications\nwhen using the "-check" option.\n\nThe OpenSSL SSL/TLS implementation is not affected by this issue.\n\nThe OpenSSL 3.0 and 3.1 FIPS providers are not affected by this issue.',
-              'diffID':        'sha256:4e64766527982cca5b986a8d061530bf5c32e111047733b59cb0c9742a89eda0',
-              'fixedVersions': [
-                '1.1.1v-r0'
-              ],
-              'installedVersion': '1.1.1t-r1',
-              'packageName':      'libssl1.1',
-              'purl':             'pkg:apk/alpine/libssl1.1@1.1.1t-r1?arch=x86_64&distro=3.15.7',
-              'references':       [
-                'http://seclists.org/fulldisclosure/2023/Jul/43',
-                'http://www.openwall.com/lists/oss-security/2023/07/31/1',
-                'http://www.openwall.com/lists/oss-security/2023/09/22/11',
-                'http://www.openwall.com/lists/oss-security/2023/09/22/9',
-                'http://www.openwall.com/lists/oss-security/2023/11/06/2',
-                'https://access.redhat.com/errata/RHSA-2024:2447',
-                'https://access.redhat.com/security/cve/CVE-2023-3817',
-                'https://bugzilla.redhat.com/2223016',
-                'https://bugzilla.redhat.com/2224962',
-                'https://bugzilla.redhat.com/2227852',
-                'https://bugzilla.redhat.com/2248616',
-                'https://bugzilla.redhat.com/2257571',
-                'https://bugzilla.redhat.com/2258502',
-                'https://bugzilla.redhat.com/2259944',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2224962',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2227852',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2248616',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2270358',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3446',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3817',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-5678',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-2408',
-                'https://errata.almalinux.org/9/ALSA-2024-2447.html',
-                'https://errata.rockylinux.org/RLSA-2023:7877',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=6a1eb62c29db6cb5eec707f9338aee00f44e26f5',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=869ad69aadd985c7b8ca6f4e5dd0eb274c9f3644',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=9002fd07327a91f35ba6c1307e71fa6fd4409b7f',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=91ddeba0f2269b017dc06c46c993a788974b1aa5',
-                'https://linux.oracle.com/cve/CVE-2023-3817.html',
-                'https://linux.oracle.com/errata/ELSA-2024-2447.html',
-                'https://lists.debian.org/debian-lts-announce/2023/08/msg00019.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-3817',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://security.netapp.com/advisory/ntap-20230818-0014/',
-                'https://security.netapp.com/advisory/ntap-20231027-0008/',
-                'https://security.netapp.com/advisory/ntap-20240621-0006/',
-                'https://ubuntu.com/security/notices/USN-6435-1',
-                'https://ubuntu.com/security/notices/USN-6435-2',
-                'https://ubuntu.com/security/notices/USN-6450-1',
-                'https://ubuntu.com/security/notices/USN-6709-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-3817',
-                'https://www.openssl.org/news/secadv/20230731.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'OpenSSL: Excessive time spent checking DH q parameter value'
-            },
-            {
-              'cve':  'CVE-2023-5678',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L'
-                },
-                'redhat': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L'
-                }
-              },
-              'cwes': [
-                'CWE-606',
-                'CWE-754'
-              ],
-              'description':   "Issue summary: Generating excessively long X9.42 DH keys or checking\nexcessively long X9.42 DH keys or parameters may be very slow.\n\nImpact summary: Applications that use the functions DH_generate_key() to\ngenerate an X9.42 DH key may experience long delays.  Likewise, applications\nthat use DH_check_pub_key(), DH_check_pub_key_ex() or EVP_PKEY_public_check()\nto check an X9.42 DH key or X9.42 DH parameters may experience long delays.\nWhere the key or parameters that are being checked have been obtained from\nan untrusted source this may lead to a Denial of Service.\n\nWhile DH_check() performs all the necessary checks (as of CVE-2023-3817),\nDH_check_pub_key() doesn't make any of these checks, and is therefore\nvulnerable for excessively large P and Q parameters.\n\nLikewise, while DH_generate_key() performs a check for an excessively large\nP, it doesn't check for an excessively large Q.\n\nAn application that calls DH_generate_key() or DH_check_pub_key() and\nsupplies a key or parameters obtained from an untrusted source could be\nvulnerable to a Denial of Service attack.\n\nDH_generate_key() and DH_check_pub_key() are also called by a number of\nother OpenSSL functions.  An application calling any of those other\nfunctions may similarly be affected.  The other functions affected by this\nare DH_check_pub_key_ex(), EVP_PKEY_public_check(), and EVP_PKEY_generate().\n\nAlso vulnerable are the OpenSSL pkey command line application when using the\n\"-pubcheck\" option, as well as the OpenSSL genpkey command line application.\n\nThe OpenSSL SSL/TLS implementation is not affected by this issue.\n\nThe OpenSSL 3.0 and 3.1 FIPS providers are not affected by this issue.",
-              'diffID':        'sha256:4e64766527982cca5b986a8d061530bf5c32e111047733b59cb0c9742a89eda0',
-              'fixedVersions': [
-                '1.1.1w-r1'
-              ],
-              'installedVersion': '1.1.1t-r1',
-              'packageName':      'libssl1.1',
-              'purl':             'pkg:apk/alpine/libssl1.1@1.1.1t-r1?arch=x86_64&distro=3.15.7',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2024/03/11/1',
-                'https://access.redhat.com/errata/RHSA-2024:2447',
-                'https://access.redhat.com/security/cve/CVE-2023-5678',
-                'https://bugzilla.redhat.com/2223016',
-                'https://bugzilla.redhat.com/2224962',
-                'https://bugzilla.redhat.com/2227852',
-                'https://bugzilla.redhat.com/2248616',
-                'https://bugzilla.redhat.com/2257571',
-                'https://bugzilla.redhat.com/2258502',
-                'https://bugzilla.redhat.com/2259944',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2224962',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2227852',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2248616',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2270358',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3446',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3817',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-5678',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-2408',
-                'https://errata.almalinux.org/9/ALSA-2024-2447.html',
-                'https://errata.rockylinux.org/RLSA-2023:7877',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=34efaef6c103d636ab507a0cc34dca4d3aecc055',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=710fee740904b6290fef0dd5536fbcedbc38ff0c',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=db925ae2e65d0d925adef429afc37f75bd1c2017',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=ddeb4b6c6d527e54ce9a99cba785c0f7776e54b6',
-                'https://linux.oracle.com/cve/CVE-2023-5678.html',
-                'https://linux.oracle.com/errata/ELSA-2024-2447.html',
-                'https://lists.debian.org/debian-lts-announce/2024/10/msg00033.html',
-                'https://lists.debian.org/debian-lts-announce/2024/11/msg00000.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-5678',
-                'https://security.netapp.com/advisory/ntap-20231130-0010/',
-                'https://ubuntu.com/security/notices/USN-6622-1',
-                'https://ubuntu.com/security/notices/USN-6632-1',
-                'https://ubuntu.com/security/notices/USN-6709-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-5678',
-                'https://www.openssl.org/news/secadv/20231106.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: Generating excessively long X9.42 DH keys or checking excessively long X9.42 DH keys or parameters may be very slow'
-            }
-          ]
-        }
-      ],
-      'summary': {
-        'critical':   0,
-        'high':       2,
-        'low':        0,
-        'medium':     10,
-        'suppressed': 0,
-        'unknown':    0
-      }
-    }
-  },
-  {
-    'id':    'default/46f378cf956ce13dacb3285d2a15a4721bf642bb55562d1382ed5c6cedafccf9',
-    'type':  'storage.sbomscanner.kubewarden.io.vulnerabilityreport',
-    'links': {
-      'patch':  'https://localhost:8005/v1/storage.sbomscanner.kubewarden.io.vulnerabilityreports/default/46f378cf956ce13dacb3285d2a15a4721bf642bb55562d1382ed5c6cedafccf9',
-      'remove': 'https://localhost:8005/v1/storage.sbomscanner.kubewarden.io.vulnerabilityreports/default/46f378cf956ce13dacb3285d2a15a4721bf642bb55562d1382ed5c6cedafccf9',
-      'self':   'https://localhost:8005/v1/storage.sbomscanner.kubewarden.io.vulnerabilityreports/default/46f378cf956ce13dacb3285d2a15a4721bf642bb55562d1382ed5c6cedafccf9',
-      'update': 'https://localhost:8005/v1/storage.sbomscanner.kubewarden.io.vulnerabilityreports/default/46f378cf956ce13dacb3285d2a15a4721bf642bb55562d1382ed5c6cedafccf9',
-      'view':   'https://localhost:8005/apis/storage.sbomscanner.kubewarden.io/v1alpha1/namespaces/default/vulnerabilityreports/46f378cf956ce13dacb3285d2a15a4721bf642bb55562d1382ed5c6cedafccf9'
-    },
-    'apiVersion':    'storage.sbomscanner.kubewarden.io/v1alpha1',
-    'imageMetadata': {
-      'digest':      'sha256:1c34b3cb760a98c23361d919357b99fa497074576c898e7289425d45ef67b46a',
-      'platform':    'linux/arm/v7',
-      'registry':    'lsong-demo1',
-      'registryURI': 'registry-1.docker.io',
-      'repository':  'library/alpine',
-      'tag':         '3.17.1'
-    },
-    'kind':     'VulnerabilityReport',
-    'metadata': {
-      'creationTimestamp': '2026-01-14T18:51:34Z',
-      'fields':            [
-        '46f378cf956ce13dacb3285d2a15a4721bf642bb55562d1382ed5c6cedafccf9',
-        'registry-1.docker.io/library/alpine:3.17.1',
-        'linux/arm/v7',
-        '68 (0 suppressed)'
-      ],
-      'labels': {
-        'app.kubernetes.io/managed-by':          'sbomscanner',
-        'app.kubernetes.io/part-of':             'sbomscanner',
-        'sbomscanner.kubewarden.io/scanjob-uid': '445c600a-c4b6-40b3-bd71-f2d2140a37d5'
-      },
-      'name':            '46f378cf956ce13dacb3285d2a15a4721bf642bb55562d1382ed5c6cedafccf9',
-      'namespace':       'default',
-      'ownerReferences': [
-        {
-          'apiVersion':         'storage.sbomscanner.kubewarden.io/v1alpha1',
-          'blockOwnerDeletion': true,
-          'controller':         true,
-          'kind':               'SBOM',
-          'name':               '46f378cf956ce13dacb3285d2a15a4721bf642bb55562d1382ed5c6cedafccf9',
-          'uid':                'b4c8a03c-576d-4750-b0aa-7e53c7e6c431'
-        }
-      ],
-      'relationships': [
-        {
-          'fromId':   'default/46f378cf956ce13dacb3285d2a15a4721bf642bb55562d1382ed5c6cedafccf9',
-          'fromType': 'storage.sbomscanner.kubewarden.io.sbom',
-          'rel':      'owner',
-          'state':    'active',
-          'message':  'Resource is current'
-        }
-      ],
-      'resourceVersion': '1',
-      'state':           {
-        'error':         false,
-        'message':       'Resource is current',
-        'name':          'active',
-        'transitioning': false
-      },
-      'uid': '91d8e9b3-4eea-4bf3-86a4-e80b58edc7d6'
-    },
-    'report': {
-      'results': [
-        {
-          'class':           'os-pkgs',
-          'target':          '/var/run/worker/trivy.sbom.2972238807.json (alpine 3.17.1)',
-          'type':            'alpine',
-          'vulnerabilities': [
-            {
-              'cve':  'CVE-2023-42363',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.5',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.8',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   'A use-after-free vulnerability was discovered in xasprintf function in xfuncs_printf.c:344 in BusyBox v.1.36.1.',
-              'diffID':        'sha256:383269fd0d7d9a5f547ad63131df9c00938dbbb23170a498357bc9fb5cd0948a',
-              'fixedVersions': [
-                '1.35.0-r31'
-              ],
-              'installedVersion': '1.35.0-r29',
-              'packageName':      'busybox',
-              'purl':             'pkg:apk/alpine/busybox@1.35.0-r29?arch=armv7&distro=3.17.1',
-              'references':       [
-                'http://lists.busybox.net/pipermail/busybox/2024-May/090760.html',
-                'https://access.redhat.com/security/cve/CVE-2023-42363',
-                'https://bugs.busybox.net/show_bug.cgi?id=15865',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-42363',
-                'https://ubuntu.com/security/notices/USN-6961-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-42363'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk'
-            },
-            {
-              'cve':  'CVE-2023-42364',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.5',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.8',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   'A use-after-free vulnerability in BusyBox v.1.36.1 allows attackers to cause a denial of service via a crafted awk pattern in the awk.c evaluate function.',
-              'diffID':        'sha256:383269fd0d7d9a5f547ad63131df9c00938dbbb23170a498357bc9fb5cd0948a',
-              'fixedVersions': [
-                '1.35.0-r31'
-              ],
-              'installedVersion': '1.35.0-r29',
-              'packageName':      'busybox',
-              'purl':             'pkg:apk/alpine/busybox@1.35.0-r29?arch=armv7&distro=3.17.1',
-              'references':       [
-                'http://lists.busybox.net/pipermail/busybox/2024-May/090762.html',
-                'https://access.redhat.com/security/cve/CVE-2023-42364',
-                'https://bugs.busybox.net/show_bug.cgi?id=15868',
-                'https://gitlab.alpinelinux.org/alpine/aports/-/blob/master/main/busybox/CVE-2023-42364-CVE-2023-42365.patch',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-42364',
-                'https://ubuntu.com/security/notices/USN-6961-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-42364'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'busybox: use-after-free'
-            },
-            {
-              'cve':  'CVE-2023-42365',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.5',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.8',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   'A use-after-free vulnerability was discovered in BusyBox v.1.36.1 via a crafted awk pattern in the awk.c copyvar function.',
-              'diffID':        'sha256:383269fd0d7d9a5f547ad63131df9c00938dbbb23170a498357bc9fb5cd0948a',
-              'fixedVersions': [
-                '1.35.0-r31'
-              ],
-              'installedVersion': '1.35.0-r29',
-              'packageName':      'busybox',
-              'purl':             'pkg:apk/alpine/busybox@1.35.0-r29?arch=armv7&distro=3.17.1',
-              'references':       [
-                'http://lists.busybox.net/pipermail/busybox/2024-May/090762.html',
-                'https://access.redhat.com/security/cve/CVE-2023-42365',
-                'https://bugs.busybox.net/show_bug.cgi?id=15871',
-                'https://gitlab.alpinelinux.org/alpine/aports/-/blob/master/main/busybox/CVE-2023-42364-CVE-2023-42365.patch',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-42365',
-                'https://ubuntu.com/security/notices/USN-6961-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-42365'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'busybox: use-after-free'
-            },
-            {
-              'cve':  'CVE-2023-42366',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.5',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.1',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-787'
-              ],
-              'description':   'A heap-buffer-overflow was discovered in BusyBox v.1.36.1 in the next_token function at awk.c:1159.',
-              'diffID':        'sha256:383269fd0d7d9a5f547ad63131df9c00938dbbb23170a498357bc9fb5cd0948a',
-              'fixedVersions': [
-                '1.35.0-r30'
-              ],
-              'installedVersion': '1.35.0-r29',
-              'packageName':      'busybox',
-              'purl':             'pkg:apk/alpine/busybox@1.35.0-r29?arch=armv7&distro=3.17.1',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2023-42366',
-                'https://bugs.busybox.net/show_bug.cgi?id=15874',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-42366',
-                'https://security.netapp.com/advisory/ntap-20241206-0007/',
-                'https://www.cve.org/CVERecord?id=CVE-2023-42366'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'busybox: A heap-buffer-overflow'
-            },
-            {
-              'cve':  'CVE-2023-42363',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.5',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.8',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   'A use-after-free vulnerability was discovered in xasprintf function in xfuncs_printf.c:344 in BusyBox v.1.36.1.',
-              'diffID':        'sha256:383269fd0d7d9a5f547ad63131df9c00938dbbb23170a498357bc9fb5cd0948a',
-              'fixedVersions': [
-                '1.35.0-r31'
-              ],
-              'installedVersion': '1.35.0-r29',
-              'packageName':      'busybox-binsh',
-              'purl':             'pkg:apk/alpine/busybox-binsh@1.35.0-r29?arch=armv7&distro=3.17.1',
-              'references':       [
-                'http://lists.busybox.net/pipermail/busybox/2024-May/090760.html',
-                'https://access.redhat.com/security/cve/CVE-2023-42363',
-                'https://bugs.busybox.net/show_bug.cgi?id=15865',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-42363',
-                'https://ubuntu.com/security/notices/USN-6961-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-42363'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk'
-            },
-            {
-              'cve':  'CVE-2023-42364',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.5',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.8',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   'A use-after-free vulnerability in BusyBox v.1.36.1 allows attackers to cause a denial of service via a crafted awk pattern in the awk.c evaluate function.',
-              'diffID':        'sha256:383269fd0d7d9a5f547ad63131df9c00938dbbb23170a498357bc9fb5cd0948a',
-              'fixedVersions': [
-                '1.35.0-r31'
-              ],
-              'installedVersion': '1.35.0-r29',
-              'packageName':      'busybox-binsh',
-              'purl':             'pkg:apk/alpine/busybox-binsh@1.35.0-r29?arch=armv7&distro=3.17.1',
-              'references':       [
-                'http://lists.busybox.net/pipermail/busybox/2024-May/090762.html',
-                'https://access.redhat.com/security/cve/CVE-2023-42364',
-                'https://bugs.busybox.net/show_bug.cgi?id=15868',
-                'https://gitlab.alpinelinux.org/alpine/aports/-/blob/master/main/busybox/CVE-2023-42364-CVE-2023-42365.patch',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-42364',
-                'https://ubuntu.com/security/notices/USN-6961-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-42364'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'busybox: use-after-free'
-            },
-            {
-              'cve':  'CVE-2023-42365',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.5',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.8',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   'A use-after-free vulnerability was discovered in BusyBox v.1.36.1 via a crafted awk pattern in the awk.c copyvar function.',
-              'diffID':        'sha256:383269fd0d7d9a5f547ad63131df9c00938dbbb23170a498357bc9fb5cd0948a',
-              'fixedVersions': [
-                '1.35.0-r31'
-              ],
-              'installedVersion': '1.35.0-r29',
-              'packageName':      'busybox-binsh',
-              'purl':             'pkg:apk/alpine/busybox-binsh@1.35.0-r29?arch=armv7&distro=3.17.1',
-              'references':       [
-                'http://lists.busybox.net/pipermail/busybox/2024-May/090762.html',
-                'https://access.redhat.com/security/cve/CVE-2023-42365',
-                'https://bugs.busybox.net/show_bug.cgi?id=15871',
-                'https://gitlab.alpinelinux.org/alpine/aports/-/blob/master/main/busybox/CVE-2023-42364-CVE-2023-42365.patch',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-42365',
-                'https://ubuntu.com/security/notices/USN-6961-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-42365'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'busybox: use-after-free'
-            },
-            {
-              'cve':  'CVE-2023-42366',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.5',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.1',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-787'
-              ],
-              'description':   'A heap-buffer-overflow was discovered in BusyBox v.1.36.1 in the next_token function at awk.c:1159.',
-              'diffID':        'sha256:383269fd0d7d9a5f547ad63131df9c00938dbbb23170a498357bc9fb5cd0948a',
-              'fixedVersions': [
-                '1.35.0-r30'
-              ],
-              'installedVersion': '1.35.0-r29',
-              'packageName':      'busybox-binsh',
-              'purl':             'pkg:apk/alpine/busybox-binsh@1.35.0-r29?arch=armv7&distro=3.17.1',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2023-42366',
-                'https://bugs.busybox.net/show_bug.cgi?id=15874',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-42366',
-                'https://security.netapp.com/advisory/ntap-20241206-0007/',
-                'https://www.cve.org/CVERecord?id=CVE-2023-42366'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'busybox: A heap-buffer-overflow'
-            },
-            {
-              'cve':  'CVE-2022-4450',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'nvd': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-415'
-              ],
-              'description':   'The function PEM_read_bio_ex() reads a PEM file from a BIO and parses and\ndecodes the "name" (e.g. "CERTIFICATE"), any header data and the payload data.\nIf the function succeeds then the "name_out", "header" and "data" arguments are\npopulated with pointers to buffers containing the relevant decoded data. The\ncaller is responsible for freeing those buffers. It is possible to construct a\nPEM file that results in 0 bytes of payload data. In this case PEM_read_bio_ex()\nwill return a failure code but will populate the header argument with a pointer\nto a buffer that has already been freed. If the caller also frees this buffer\nthen a double free will occur. This will most likely lead to a crash. This\ncould be exploited by an attacker who has the ability to supply malicious PEM\nfiles for parsing to achieve a denial of service attack.\n\nThe functions PEM_read_bio() and PEM_read() are simple wrappers around\nPEM_read_bio_ex() and therefore these functions are also directly affected.\n\nThese functions are also called indirectly by a number of other OpenSSL\nfunctions including PEM_X509_INFO_read_bio_ex() and\nSSL_CTX_use_serverinfo_file() which are also vulnerable. Some OpenSSL internal\nuses of these functions are not vulnerable because the caller does not free the\nheader argument if PEM_read_bio_ex() returns a failure code. These locations\ninclude the PEM_read_bio_TYPE() functions as well as the decoders introduced in\nOpenSSL 3.0.\n\nThe OpenSSL asn1parse command line application is also impacted by this issue.',
-              'diffID':        'sha256:383269fd0d7d9a5f547ad63131df9c00938dbbb23170a498357bc9fb5cd0948a',
-              'fixedVersions': [
-                '3.0.8-r0'
-              ],
-              'installedVersion': '3.0.7-r2',
-              'packageName':      'libcrypto3',
-              'purl':             'pkg:apk/alpine/libcrypto3@3.0.7-r2?arch=armv7&distro=3.17.1',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2023:2165',
-                'https://access.redhat.com/security/cve/CVE-2022-4450',
-                'https://bugzilla.redhat.com/1960321',
-                'https://bugzilla.redhat.com/2164440',
-                'https://bugzilla.redhat.com/2164487',
-                'https://bugzilla.redhat.com/2164492',
-                'https://bugzilla.redhat.com/2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144000',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144003',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144006',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144008',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144010',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144012',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144015',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144017',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144019',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2145170',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2158412',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164440',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164487',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164488',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164492',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164497',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164499',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164500',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4203',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4304',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4450',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0215',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0216',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0217',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0286',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0401',
-                'https://errata.almalinux.org/9/ALSA-2023-2165.html',
-                'https://errata.rockylinux.org/RLSA-2023:0946',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=63bcf189be73a9cc1264059bed6f57974be74a83',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=bbcf509bd046b34cca19c766bbddc31683d0858b',
-                'https://linux.oracle.com/cve/CVE-2022-4450.html',
-                'https://linux.oracle.com/errata/ELSA-2023-32791.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2022-4450',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0003',
-                'https://rustsec.org/advisories/RUSTSEC-2023-0010.html',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://ubuntu.com/security/notices/USN-5844-1',
-                'https://ubuntu.com/security/notices/USN-6564-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2022-4450',
-                'https://www.openssl.org/news/secadv/20230207.txt'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: double free after calling PEM_read_bio_ex'
-            },
-            {
-              'cve':  'CVE-2023-0215',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'nvd': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   'The public API function BIO_new_NDEF is a helper function used for streaming\nASN.1 data via a BIO. It is primarily used internally to OpenSSL to support the\nSMIME, CMS and PKCS7 streaming capabilities, but may also be called directly by\nend user applications.\n\nThe function receives a BIO from the caller, prepends a new BIO_f_asn1 filter\nBIO onto the front of it to form a BIO chain, and then returns the new head of\nthe BIO chain to the caller. Under certain conditions, for example if a CMS\nrecipient public key is invalid, the new filter BIO is freed and the function\nreturns a NULL result indicating a failure. However, in this case, the BIO chain\nis not properly cleaned up and the BIO passed by the caller still retains\ninternal pointers to the previously freed filter BIO. If the caller then goes on\nto call BIO_pop() on the BIO then a use-after-free will occur. This will most\nlikely result in a crash.\n\n\n\nThis scenario occurs directly in the internal function B64_write_ASN1() which\nmay cause BIO_new_NDEF() to be called and will subsequently call BIO_pop() on\nthe BIO. This internal function is in turn called by the public API functions\nPEM_write_bio_ASN1_stream, PEM_write_bio_CMS_stream, PEM_write_bio_PKCS7_stream,\nSMIME_write_ASN1, SMIME_write_CMS and SMIME_write_PKCS7.\n\nOther public API functions that may be impacted by this include\ni2d_ASN1_bio_stream, BIO_new_CMS, BIO_new_PKCS7, i2d_CMS_bio_stream and\ni2d_PKCS7_bio_stream.\n\nThe OpenSSL cms and smime command line applications are similarly affected.',
-              'diffID':        'sha256:383269fd0d7d9a5f547ad63131df9c00938dbbb23170a498357bc9fb5cd0948a',
-              'fixedVersions': [
-                '3.0.8-r0'
-              ],
-              'installedVersion': '3.0.7-r2',
-              'packageName':      'libcrypto3',
-              'purl':             'pkg:apk/alpine/libcrypto3@3.0.7-r2?arch=armv7&distro=3.17.1',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2023:2165',
-                'https://access.redhat.com/security/cve/CVE-2023-0215',
-                'https://bugzilla.redhat.com/1960321',
-                'https://bugzilla.redhat.com/2164440',
-                'https://bugzilla.redhat.com/2164487',
-                'https://bugzilla.redhat.com/2164492',
-                'https://bugzilla.redhat.com/2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144000',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144003',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144006',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144008',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144010',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144012',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144015',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144017',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144019',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2145170',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2158412',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164440',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164487',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164488',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164492',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164497',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164499',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164500',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4203',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4304',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4450',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0215',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0216',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0217',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0286',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0401',
-                'https://errata.almalinux.org/9/ALSA-2023-2165.html',
-                'https://errata.rockylinux.org/RLSA-2023:0946',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=8818064ce3c3c0f1b740a5aaba2a987e75bfbafd',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=9816136fe31d92ace4037d5da5257f763aeeb4eb',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=c3829dd8825c654652201e16f8a0a0c46ee3f344',
-                'https://linux.oracle.com/cve/CVE-2023-0215.html',
-                'https://linux.oracle.com/errata/ELSA-2023-32791.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-0215',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0003',
-                'https://rustsec.org/advisories/RUSTSEC-2023-0009.html',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://security.netapp.com/advisory/ntap-20230427-0007',
-                'https://security.netapp.com/advisory/ntap-20230427-0007/',
-                'https://security.netapp.com/advisory/ntap-20230427-0009',
-                'https://security.netapp.com/advisory/ntap-20230427-0009/',
-                'https://security.netapp.com/advisory/ntap-20240621-0006',
-                'https://security.netapp.com/advisory/ntap-20240621-0006/',
-                'https://ubuntu.com/security/notices/USN-5844-1',
-                'https://ubuntu.com/security/notices/USN-5845-1',
-                'https://ubuntu.com/security/notices/USN-5845-2',
-                'https://ubuntu.com/security/notices/USN-6564-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-0215',
-                'https://www.openssl.org/news/secadv/20230207.txt'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: use-after-free following BIO_new_NDEF'
-            },
-            {
-              'cve':  'CVE-2023-0216',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'nvd': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-476'
-              ],
-              'description':   'An invalid pointer dereference on read can be triggered when an\napplication tries to load malformed PKCS7 data with the\nd2i_PKCS7(), d2i_PKCS7_bio() or d2i_PKCS7_fp() functions.\n\nThe result of the dereference is an application crash which could\nlead to a denial of service attack. The TLS implementation in OpenSSL\ndoes not call this function however third party applications might\ncall these functions on untrusted data.',
-              'diffID':        'sha256:383269fd0d7d9a5f547ad63131df9c00938dbbb23170a498357bc9fb5cd0948a',
-              'fixedVersions': [
-                '3.0.8-r0'
-              ],
-              'installedVersion': '3.0.7-r2',
-              'packageName':      'libcrypto3',
-              'purl':             'pkg:apk/alpine/libcrypto3@3.0.7-r2?arch=armv7&distro=3.17.1',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2023:0946',
-                'https://access.redhat.com/security/cve/CVE-2023-0216',
-                'https://bugzilla.redhat.com/2164440',
-                'https://bugzilla.redhat.com/2164487',
-                'https://bugzilla.redhat.com/2164488',
-                'https://bugzilla.redhat.com/2164492',
-                'https://bugzilla.redhat.com/2164494',
-                'https://bugzilla.redhat.com/2164497',
-                'https://bugzilla.redhat.com/2164499',
-                'https://bugzilla.redhat.com/2164500',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144000',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144003',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144006',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144008',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144010',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144012',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144015',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144017',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144019',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2145170',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2158412',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164440',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164487',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164488',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164492',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164497',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164499',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164500',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4203',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4304',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4450',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0215',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0216',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0217',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0286',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0401',
-                'https://errata.almalinux.org/9/ALSA-2023-0946.html',
-                'https://errata.rockylinux.org/RLSA-2023:0946',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=934a04f0e775309cadbef0aa6b9692e1b12a76c6',
-                'https://linux.oracle.com/cve/CVE-2023-0216.html',
-                'https://linux.oracle.com/errata/ELSA-2023-12152.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-0216',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0003',
-                'https://rustsec.org/advisories/RUSTSEC-2023-0011.html',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://ubuntu.com/security/notices/USN-5844-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-0216',
-                'https://www.openssl.org/news/secadv/20230207.txt'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: invalid pointer dereference in d2i_PKCS7 functions'
-            },
-            {
-              'cve':  'CVE-2023-0217',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'nvd': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-476'
-              ],
-              'description':   'An invalid pointer dereference on read can be triggered when an\napplication tries to check a malformed DSA public key by the\nEVP_PKEY_public_check() function. This will most likely lead\nto an application crash. This function can be called on public\nkeys supplied from untrusted sources which could allow an attacker\nto cause a denial of service attack.\n\nThe TLS implementation in OpenSSL does not call this function\nbut applications might call the function if there are additional\nsecurity requirements imposed by standards such as FIPS 140-3.',
-              'diffID':        'sha256:383269fd0d7d9a5f547ad63131df9c00938dbbb23170a498357bc9fb5cd0948a',
-              'fixedVersions': [
-                '3.0.8-r0'
-              ],
-              'installedVersion': '3.0.7-r2',
-              'packageName':      'libcrypto3',
-              'purl':             'pkg:apk/alpine/libcrypto3@3.0.7-r2?arch=armv7&distro=3.17.1',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2023:0946',
-                'https://access.redhat.com/security/cve/CVE-2023-0217',
-                'https://bugzilla.redhat.com/2164440',
-                'https://bugzilla.redhat.com/2164487',
-                'https://bugzilla.redhat.com/2164488',
-                'https://bugzilla.redhat.com/2164492',
-                'https://bugzilla.redhat.com/2164494',
-                'https://bugzilla.redhat.com/2164497',
-                'https://bugzilla.redhat.com/2164499',
-                'https://bugzilla.redhat.com/2164500',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144000',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144003',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144006',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144008',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144010',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144012',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144015',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144017',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144019',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2145170',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2158412',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164440',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164487',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164488',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164492',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164497',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164499',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164500',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4203',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4304',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4450',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0215',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0216',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0217',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0286',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0401',
-                'https://errata.almalinux.org/9/ALSA-2023-0946.html',
-                'https://errata.rockylinux.org/RLSA-2023:0946',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=23985bac83fd50c8e29431009302b5442f985096',
-                'https://linux.oracle.com/cve/CVE-2023-0217.html',
-                'https://linux.oracle.com/errata/ELSA-2023-12152.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-0217',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0003',
-                'https://rustsec.org/advisories/RUSTSEC-2023-0012.html',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://ubuntu.com/security/notices/USN-5844-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-0217',
-                'https://www.openssl.org/news/secadv/20230207.txt'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: NULL dereference validating DSA public key'
-            },
-            {
-              'cve':  'CVE-2023-0286',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '7.4',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H'
-                },
-                'nvd': {
-                  'v3score':  '7.4',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.4',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-843'
-              ],
-              'description':   'There is a type confusion vulnerability relating to X.400 address processing\ninside an X.509 GeneralName. X.400 addresses were parsed as an ASN1_STRING but\nthe public structure definition for GENERAL_NAME incorrectly specified the type\nof the x400Address field as ASN1_TYPE. This field is subsequently interpreted by\nthe OpenSSL function GENERAL_NAME_cmp as an ASN1_TYPE rather than an\nASN1_STRING.\n\nWhen CRL checking is enabled (i.e. the application sets the\nX509_V_FLAG_CRL_CHECK flag), this vulnerability may allow an attacker to pass\narbitrary pointers to a memcmp call, enabling them to read memory contents or\nenact a denial of service. In most cases, the attack requires the attacker to\nprovide both the certificate chain and CRL, neither of which need to have a\nvalid signature. If the attacker only controls one of these inputs, the other\ninput must already contain an X.400 address as a CRL distribution point, which\nis uncommon. As such, this vulnerability is most likely to only affect\napplications which have implemented their own functionality for retrieving CRLs\nover a network.',
-              'diffID':        'sha256:383269fd0d7d9a5f547ad63131df9c00938dbbb23170a498357bc9fb5cd0948a',
-              'fixedVersions': [
-                '3.0.8-r0'
-              ],
-              'installedVersion': '3.0.7-r2',
-              'packageName':      'libcrypto3',
-              'purl':             'pkg:apk/alpine/libcrypto3@3.0.7-r2?arch=armv7&distro=3.17.1',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2025:7937',
-                'https://access.redhat.com/security/cve/CVE-2023-0286',
-                'https://access.redhat.com/security/cve/cve-2023-0286',
-                'https://bugzilla.redhat.com/2164440',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144000',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144003',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144006',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144008',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144010',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144012',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144015',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144017',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144019',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2145170',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2158412',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164440',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164487',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164488',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164492',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164497',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164499',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164500',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4203',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4304',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4450',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0215',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0216',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0217',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0286',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0401',
-                'https://errata.almalinux.org/9/ALSA-2025-7937.html',
-                'https://errata.rockylinux.org/RLSA-2023:0946',
-                'https://ftp.openbsd.org/pub/OpenBSD/LibreSSL/libressl-3.6.2-relnotes.txt',
-                'https://ftp.openbsd.org/pub/OpenBSD/patches/7.2/common/018_x509.patch.sig',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=2c6c9d439b484e1ba9830d8454a34fa4f80fdfe9',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=2f7530077e0ef79d98718138716bc51ca0cad658',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=fd2af07dc083a350c959147097003a14a5e8ac4d',
-                'https://github.com/pyca/cryptography',
-                'https://github.com/pyca/cryptography/security/advisories/GHSA-x4qr-2fvf-3mr5',
-                'https://linux.oracle.com/cve/CVE-2023-0286.html',
-                'https://linux.oracle.com/errata/ELSA-2025-7937.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-0286',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0003',
-                'https://rustsec.org/advisories/RUSTSEC-2023-0006.html',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://ubuntu.com/security/notices/USN-5844-1',
-                'https://ubuntu.com/security/notices/USN-5845-1',
-                'https://ubuntu.com/security/notices/USN-5845-2',
-                'https://ubuntu.com/security/notices/USN-6564-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-0286',
-                'https://www.openssl.org/news/secadv/20230207.txt'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: X.400 address type confusion in X.509 GeneralName'
-            },
-            {
-              'cve':  'CVE-2023-0401',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'nvd': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-476'
-              ],
-              'description':   'A NULL pointer can be dereferenced when signatures are being\nverified on PKCS7 signed or signedAndEnveloped data. In case the hash\nalgorithm used for the signature is known to the OpenSSL library but\nthe implementation of the hash algorithm is not available the digest\ninitialization will fail. There is a missing check for the return\nvalue from the initialization function which later leads to invalid\nusage of the digest API most likely leading to a crash.\n\nThe unavailability of an algorithm can be caused by using FIPS\nenabled configuration of providers or more commonly by not loading\nthe legacy provider.\n\nPKCS7 data is processed by the SMIME library calls and also by the\ntime stamp (TS) library calls. The TLS implementation in OpenSSL does\nnot call these functions however third party applications would be\naffected if they call these functions to verify signatures on untrusted\ndata.',
-              'diffID':        'sha256:383269fd0d7d9a5f547ad63131df9c00938dbbb23170a498357bc9fb5cd0948a',
-              'fixedVersions': [
-                '3.0.8-r0'
-              ],
-              'installedVersion': '3.0.7-r2',
-              'packageName':      'libcrypto3',
-              'purl':             'pkg:apk/alpine/libcrypto3@3.0.7-r2?arch=armv7&distro=3.17.1',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2023:0946',
-                'https://access.redhat.com/security/cve/CVE-2023-0401',
-                'https://bugzilla.redhat.com/2164440',
-                'https://bugzilla.redhat.com/2164487',
-                'https://bugzilla.redhat.com/2164488',
-                'https://bugzilla.redhat.com/2164492',
-                'https://bugzilla.redhat.com/2164494',
-                'https://bugzilla.redhat.com/2164497',
-                'https://bugzilla.redhat.com/2164499',
-                'https://bugzilla.redhat.com/2164500',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144000',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144003',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144006',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144008',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144010',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144012',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144015',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144017',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144019',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2145170',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2158412',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164440',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164487',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164488',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164492',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164497',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164499',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164500',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4203',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4304',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4450',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0215',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0216',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0217',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0286',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0401',
-                'https://errata.almalinux.org/9/ALSA-2023-0946.html',
-                'https://errata.rockylinux.org/RLSA-2023:0946',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=d3b6dfd70db844c4499bec6ad6601623a565e674',
-                'https://github.com/alexcrichton/openssl-src-rs',
-                'https://linux.oracle.com/cve/CVE-2023-0401.html',
-                'https://linux.oracle.com/errata/ELSA-2023-12152.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-0401',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0003',
-                'https://rustsec.org/advisories/RUSTSEC-2023-0013.html',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://ubuntu.com/security/notices/USN-5844-1',
-                'https://ubuntu.com/security/notices/USN-6564-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-0401',
-                'https://www.openssl.org/news/secadv/20230207.txt'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: NULL dereference during PKCS7 data verification'
-            },
-            {
-              'cve':  'CVE-2023-0464',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-295'
-              ],
-              'description':   "A security vulnerability has been identified in all supported versions\n\nof OpenSSL related to the verification of X.509 certificate chains\nthat include policy constraints.  Attackers may be able to exploit this\nvulnerability by creating a malicious certificate chain that triggers\nexponential use of computational resources, leading to a denial-of-service\n(DoS) attack on affected systems.\n\nPolicy processing is disabled by default but can be enabled by passing\nthe `-policy' argument to the command line utilities or by calling the\n`X509_VERIFY_PARAM_set1_policies()' function.",
-              'diffID':        'sha256:383269fd0d7d9a5f547ad63131df9c00938dbbb23170a498357bc9fb5cd0948a',
-              'fixedVersions': [
-                '3.0.8-r1'
-              ],
-              'installedVersion': '3.0.7-r2',
-              'packageName':      'libcrypto3',
-              'purl':             'pkg:apk/alpine/libcrypto3@3.0.7-r2?arch=armv7&distro=3.17.1',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2023:3722',
-                'https://access.redhat.com/security/cve/CVE-2023-0464',
-                'https://bugzilla.redhat.com/2181082',
-                'https://bugzilla.redhat.com/2182561',
-                'https://bugzilla.redhat.com/2182565',
-                'https://bugzilla.redhat.com/2188461',
-                'https://bugzilla.redhat.com/2207947',
-                'https://errata.almalinux.org/9/ALSA-2023-3722.html',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=2017771e2db3e2b96f89bbe8766c3209f6a99545',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=2dcd4f1e3115f38cefa43e3efbe9b801c27e642e',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=879f7080d7e141f415c79eaa3a8ac4a3dad0348b',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=959c59c7a0164117e7f8366466a32bb1f8d77ff1',
-                'https://linux.oracle.com/cve/CVE-2023-0464.html',
-                'https://linux.oracle.com/errata/ELSA-2023-3722.html',
-                'https://lists.debian.org/debian-lts-announce/2023/06/msg00011.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-0464',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://security.netapp.com/advisory/ntap-20230406-0006/',
-                'https://security.netapp.com/advisory/ntap-20240621-0006/',
-                'https://ubuntu.com/security/notices/USN-6039-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.couchbase.com/alerts/',
-                'https://www.cve.org/CVERecord?id=CVE-2023-0464',
-                'https://www.debian.org/security/2023/dsa-5417',
-                'https://www.openssl.org/news/secadv/20230322.txt'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: Denial of service by excessive resource usage in verifying X509 policy constraints'
-            },
-            {
-              'cve':  'CVE-2023-5363',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N'
-                },
-                'redhat': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-684'
-              ],
-              'description':   "Issue summary: A bug has been identified in the processing of key and\ninitialisation vector (IV) lengths.  This can lead to potential truncation\nor overruns during the initialisation of some symmetric ciphers.\n\nImpact summary: A truncation in the IV can result in non-uniqueness,\nwhich could result in loss of confidentiality for some cipher modes.\n\nWhen calling EVP_EncryptInit_ex2(), EVP_DecryptInit_ex2() or\nEVP_CipherInit_ex2() the provided OSSL_PARAM array is processed after\nthe key and IV have been established.  Any alterations to the key length,\nvia the \"keylen\" parameter or the IV length, via the \"ivlen\" parameter,\nwithin the OSSL_PARAM array will not take effect as intended, potentially\ncausing truncation or overreading of these values.  The following ciphers\nand cipher modes are impacted: RC2, RC4, RC5, CCM, GCM and OCB.\n\nFor the CCM, GCM and OCB cipher modes, truncation of the IV can result in\nloss of confidentiality.  For example, when following NIST's SP 800-38D\nsection 8.2.1 guidance for constructing a deterministic IV for AES in\nGCM mode, truncation of the counter portion could lead to IV reuse.\n\nBoth truncations and overruns of the key and overruns of the IV will\nproduce incorrect results and could, in some cases, trigger a memory\nexception.  However, these issues are not currently assessed as security\ncritical.\n\nChanging the key and/or IV lengths is not considered to be a common operation\nand the vulnerable API was recently introduced. Furthermore it is likely that\napplication developers will have spotted this problem during testing since\ndecryption would fail unless both peers in the communication were similarly\nvulnerable. For these reasons we expect the probability of an application being\nvulnerable to this to be quite low. However if an application is vulnerable then\nthis issue is considered very serious. For these reasons we have assessed this\nissue as Moderate severity overall.\n\nThe OpenSSL SSL/TLS implementation is not affected by this issue.\n\nThe OpenSSL 3.0 and 3.1 FIPS providers are not affected by this because\nthe issue lies outside of the FIPS provider boundary.\n\nOpenSSL 3.1 and 3.0 are vulnerable to this issue.",
-              'diffID':        'sha256:383269fd0d7d9a5f547ad63131df9c00938dbbb23170a498357bc9fb5cd0948a',
-              'fixedVersions': [
-                '3.0.12-r0'
-              ],
-              'installedVersion': '3.0.7-r2',
-              'packageName':      'libcrypto3',
-              'purl':             'pkg:apk/alpine/libcrypto3@3.0.7-r2?arch=armv7&distro=3.17.1',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2023/10/24/1',
-                'https://access.redhat.com/errata/RHSA-2024:0310',
-                'https://access.redhat.com/security/cve/CVE-2023-5363',
-                'https://bugzilla.redhat.com/2243839',
-                'https://errata.almalinux.org/9/ALSA-2024-0310.html',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=0df40630850fb2740e6be6890bb905d3fc623b2d',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=5f69f5c65e483928c4b28ed16af6e5742929f1ee',
-                'https://linux.oracle.com/cve/CVE-2023-5363.html',
-                'https://linux.oracle.com/errata/ELSA-2024-12093.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-5363',
-                'https://security.netapp.com/advisory/ntap-20231027-0010/',
-                'https://security.netapp.com/advisory/ntap-20240201-0003/',
-                'https://security.netapp.com/advisory/ntap-20240201-0004/',
-                'https://security.netapp.com/advisory/ntap-20241108-0002/',
-                'https://ubuntu.com/security/notices/USN-6450-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-5363',
-                'https://www.debian.org/security/2023/dsa-5532',
-                'https://www.openssl.org/news/secadv/20231024.txt'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: Incorrect cipher key and IV length processing'
-            },
-            {
-              'cve':  'CVE-2024-6119',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-843'
-              ],
-              'description':   "Issue summary: Applications performing certificate name checks (e.g., TLS\nclients checking server certificates) may attempt to read an invalid memory\naddress resulting in abnormal termination of the application process.\n\nImpact summary: Abnormal termination of an application can a cause a denial of\nservice.\n\nApplications performing certificate name checks (e.g., TLS clients checking\nserver certificates) may attempt to read an invalid memory address when\ncomparing the expected name with an `otherName` subject alternative name of an\nX.509 certificate. This may result in an exception that terminates the\napplication program.\n\nNote that basic certificate chain validation (signatures, dates, ...) is not\naffected, the denial of service can occur only when the application also\nspecifies an expected DNS name, Email address or IP address.\n\nTLS servers rarely solicit client certificates, and even when they do, they\ngenerally don't perform a name check against a reference identifier (expected\nidentity), but rather extract the presented identity after checking the\ncertificate chain.  So TLS servers are generally not affected and the severity\nof the issue is Moderate.\n\nThe FIPS modules in 3.3, 3.2, 3.1 and 3.0 are not affected by this issue.",
-              'diffID':        'sha256:383269fd0d7d9a5f547ad63131df9c00938dbbb23170a498357bc9fb5cd0948a',
-              'fixedVersions': [
-                '3.0.15-r0'
-              ],
-              'installedVersion': '3.0.7-r2',
-              'packageName':      'libcrypto3',
-              'purl':             'pkg:apk/alpine/libcrypto3@3.0.7-r2?arch=armv7&distro=3.17.1',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2024/09/03/4',
-                'https://access.redhat.com/errata/RHSA-2024:8935',
-                'https://access.redhat.com/security/cve/CVE-2024-6119',
-                'https://bugzilla.redhat.com/2306158',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2306158',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-6119',
-                'https://errata.almalinux.org/9/ALSA-2024-8935.html',
-                'https://errata.rockylinux.org/RLSA-2024:6783',
-                'https://github.com/openssl/openssl/commit/05f360d9e849a1b277db628f1f13083a7f8dd04f',
-                'https://github.com/openssl/openssl/commit/06d1dc3fa96a2ba5a3e22735a033012aadc9f0d6',
-                'https://github.com/openssl/openssl/commit/621f3729831b05ee828a3203eddb621d014ff2b2',
-                'https://github.com/openssl/openssl/commit/7dfcee2cd2a63b2c64b9b4b0850be64cb695b0a0',
-                'https://github.com/openssl/openssl/security/advisories/GHSA-5qrj-vq78-58fj',
-                'https://linux.oracle.com/cve/CVE-2024-6119.html',
-                'https://linux.oracle.com/errata/ELSA-2024-8935.html',
-                'https://lists.freebsd.org/archives/freebsd-security/2024-September/000303.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2024-6119',
-                'https://openssl-library.org/news/secadv/20240903.txt',
-                'https://security.netapp.com/advisory/ntap-20240912-0001/',
-                'https://ubuntu.com/security/notices/USN-6986-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2024-6119'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: Possible denial of service in X.509 name checks'
-            },
-            {
-              'cve':  'CVE-2022-4203',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '9.1',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H'
-                },
-                'nvd': {
-                  'v3score':  '4.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '4.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-125'
-              ],
-              'description':   'A read buffer overrun can be triggered in X.509 certificate verification,\nspecifically in name constraint checking. Note that this occurs\nafter certificate chain signature verification and requires either a\nCA to have signed the malicious certificate or for the application to\ncontinue certificate verification despite failure to construct a path\nto a trusted issuer.\n\nThe read buffer overrun might result in a crash which could lead to\na denial of service attack. In theory it could also result in the disclosure\nof private memory contents (such as private keys, or sensitive plaintext)\nalthough we are not aware of any working exploit leading to memory\ncontents disclosure as of the time of release of this advisory.\n\nIn a TLS client, this can be triggered by connecting to a malicious\nserver. In a TLS server, this can be triggered if the server requests\nclient authentication and a malicious client connects.',
-              'diffID':        'sha256:383269fd0d7d9a5f547ad63131df9c00938dbbb23170a498357bc9fb5cd0948a',
-              'fixedVersions': [
-                '3.0.8-r0'
-              ],
-              'installedVersion': '3.0.7-r2',
-              'packageName':      'libcrypto3',
-              'purl':             'pkg:apk/alpine/libcrypto3@3.0.7-r2?arch=armv7&distro=3.17.1',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2023:0946',
-                'https://access.redhat.com/security/cve/CVE-2022-4203',
-                'https://bugzilla.redhat.com/2164440',
-                'https://bugzilla.redhat.com/2164487',
-                'https://bugzilla.redhat.com/2164488',
-                'https://bugzilla.redhat.com/2164492',
-                'https://bugzilla.redhat.com/2164494',
-                'https://bugzilla.redhat.com/2164497',
-                'https://bugzilla.redhat.com/2164499',
-                'https://bugzilla.redhat.com/2164500',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144000',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144003',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144006',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144008',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144010',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144012',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144015',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144017',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144019',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2145170',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2158412',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164440',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164487',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164488',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164492',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164497',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164499',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164500',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4203',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4304',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4450',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0215',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0216',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0217',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0286',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0401',
-                'https://errata.almalinux.org/9/ALSA-2023-0946.html',
-                'https://errata.rockylinux.org/RLSA-2023:0946',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=c927a3492698c254637da836762f9b1f86cffabc',
-                'https://linux.oracle.com/cve/CVE-2022-4203.html',
-                'https://linux.oracle.com/errata/ELSA-2023-12152.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2022-4203',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0003',
-                'https://rustsec.org/advisories/RUSTSEC-2023-0008.html',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://ubuntu.com/security/notices/USN-5844-1',
-                'https://www.cve.org/CVERecord?id=CVE-2022-4203',
-                'https://www.openssl.org/news/secadv/20230207.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: read buffer overflow in X.509 certificate verification'
-            },
-            {
-              'cve':  'CVE-2022-4304',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N'
-                },
-                'nvd': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N'
-                },
-                'redhat': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-203'
-              ],
-              'description':   'A timing based side channel exists in the OpenSSL RSA Decryption implementation\nwhich could be sufficient to recover a plaintext across a network in a\nBleichenbacher style attack. To achieve a successful decryption an attacker\nwould have to be able to send a very large number of trial messages for\ndecryption. The vulnerability affects all RSA padding modes: PKCS#1 v1.5,\nRSA-OEAP and RSASVE.\n\nFor example, in a TLS connection, RSA is commonly used by a client to send an\nencrypted pre-master secret to the server. An attacker that had observed a\ngenuine connection between a client and a server could use this flaw to send\ntrial messages to the server and record the time taken to process them. After a\nsufficiently large number of messages the attacker could recover the pre-master\nsecret used for the original connection and thus be able to decrypt the\napplication data sent over that connection.',
-              'diffID':        'sha256:383269fd0d7d9a5f547ad63131df9c00938dbbb23170a498357bc9fb5cd0948a',
-              'fixedVersions': [
-                '3.0.8-r0'
-              ],
-              'installedVersion': '3.0.7-r2',
-              'packageName':      'libcrypto3',
-              'purl':             'pkg:apk/alpine/libcrypto3@3.0.7-r2?arch=armv7&distro=3.17.1',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2023:2165',
-                'https://access.redhat.com/security/cve/CVE-2022-4304',
-                'https://bugzilla.redhat.com/1960321',
-                'https://bugzilla.redhat.com/2164440',
-                'https://bugzilla.redhat.com/2164487',
-                'https://bugzilla.redhat.com/2164492',
-                'https://bugzilla.redhat.com/2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144000',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144003',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144006',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144008',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144010',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144012',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144015',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144017',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144019',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2145170',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2158412',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164440',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164487',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164488',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164492',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164497',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164499',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164500',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4203',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4304',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4450',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0215',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0216',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0217',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0286',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0401',
-                'https://errata.almalinux.org/9/ALSA-2023-2165.html',
-                'https://errata.rockylinux.org/RLSA-2023:0946',
-                'https://linux.oracle.com/cve/CVE-2022-4304.html',
-                'https://linux.oracle.com/errata/ELSA-2023-32791.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2022-4304',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0003',
-                'https://rustsec.org/advisories/RUSTSEC-2023-0007.html',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://ubuntu.com/security/notices/USN-5844-1',
-                'https://ubuntu.com/security/notices/USN-6564-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2022-4304',
-                'https://www.openssl.org/news/secadv/20230207.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: timing attack in RSA Decryption implementation'
-            },
-            {
-              'cve':  'CVE-2023-0465',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N'
-                },
-                'redhat': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-295'
-              ],
-              'description':   "Applications that use a non-default option when verifying certificates may be\nvulnerable to an attack from a malicious CA to circumvent certain checks.\n\nInvalid certificate policies in leaf certificates are silently ignored by\nOpenSSL and other certificate policy checks are skipped for that certificate.\nA malicious CA could use this to deliberately assert invalid certificate policies\nin order to circumvent policy checking on the certificate altogether.\n\nPolicy processing is disabled by default but can be enabled by passing\nthe `-policy' argument to the command line utilities or by calling the\n`X509_VERIFY_PARAM_set1_policies()' function.",
-              'diffID':        'sha256:383269fd0d7d9a5f547ad63131df9c00938dbbb23170a498357bc9fb5cd0948a',
-              'fixedVersions': [
-                '3.0.8-r2'
-              ],
-              'installedVersion': '3.0.7-r2',
-              'packageName':      'libcrypto3',
-              'purl':             'pkg:apk/alpine/libcrypto3@3.0.7-r2?arch=armv7&distro=3.17.1',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2023:3722',
-                'https://access.redhat.com/security/cve/CVE-2023-0465',
-                'https://bugzilla.redhat.com/2181082',
-                'https://bugzilla.redhat.com/2182561',
-                'https://bugzilla.redhat.com/2182565',
-                'https://bugzilla.redhat.com/2188461',
-                'https://bugzilla.redhat.com/2207947',
-                'https://errata.almalinux.org/9/ALSA-2023-3722.html',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=10325176f3d3e98c6e2b3bf5ab1e3b334de6947a',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=1dd43e0709fece299b15208f36cc7c76209ba0bb',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=b013765abfa80036dc779dd0e50602c57bb3bf95',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=facfb1ab745646e97a1920977ae4a9965ea61d5c',
-                'https://linux.oracle.com/cve/CVE-2023-0465.html',
-                'https://linux.oracle.com/errata/ELSA-2023-3722.html',
-                'https://lists.debian.org/debian-lts-announce/2023/06/msg00011.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-0465',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://security.netapp.com/advisory/ntap-20230414-0001/',
-                'https://ubuntu.com/security/notices/USN-6039-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-0465',
-                'https://www.debian.org/security/2023/dsa-5417',
-                'https://www.openssl.org/news/secadv/20230328.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: Invalid certificate policies in leaf certificates are silently ignored'
-            },
-            {
-              'cve':  'CVE-2023-0466',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N'
-                },
-                'redhat': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-295'
-              ],
-              'description':   'The function X509_VERIFY_PARAM_add0_policy() is documented to\nimplicitly enable the certificate policy check when doing certificate\nverification. However the implementation of the function does not\nenable the check which allows certificates with invalid or incorrect\npolicies to pass the certificate verification.\n\nAs suddenly enabling the policy check could break existing deployments it was\ndecided to keep the existing behavior of the X509_VERIFY_PARAM_add0_policy()\nfunction.\n\nInstead the applications that require OpenSSL to perform certificate\npolicy check need to use X509_VERIFY_PARAM_set1_policies() or explicitly\nenable the policy check by calling X509_VERIFY_PARAM_set_flags() with\nthe X509_V_FLAG_POLICY_CHECK flag argument.\n\nCertificate policy checks are disabled by default in OpenSSL and are not\ncommonly used by applications.',
-              'diffID':        'sha256:383269fd0d7d9a5f547ad63131df9c00938dbbb23170a498357bc9fb5cd0948a',
-              'fixedVersions': [
-                '3.0.8-r3'
-              ],
-              'installedVersion': '3.0.7-r2',
-              'packageName':      'libcrypto3',
-              'purl':             'pkg:apk/alpine/libcrypto3@3.0.7-r2?arch=armv7&distro=3.17.1',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2023/09/28/4',
-                'https://access.redhat.com/errata/RHSA-2023:3722',
-                'https://access.redhat.com/security/cve/CVE-2023-0466',
-                'https://bugzilla.redhat.com/2181082',
-                'https://bugzilla.redhat.com/2182561',
-                'https://bugzilla.redhat.com/2182565',
-                'https://bugzilla.redhat.com/2188461',
-                'https://bugzilla.redhat.com/2207947',
-                'https://errata.almalinux.org/9/ALSA-2023-3722.html',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=0d16b7e99aafc0b4a6d729eec65a411a7e025f0a',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=51e8a84ce742db0f6c70510d0159dad8f7825908',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=73398dea26de9899fb4baa94098ad0a61f435c72',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=fc814a30fc4f0bc54fcea7d9a7462f5457aab061',
-                'https://linux.oracle.com/cve/CVE-2023-0466.html',
-                'https://linux.oracle.com/errata/ELSA-2023-3722.html',
-                'https://lists.debian.org/debian-lts-announce/2023/06/msg00011.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-0466',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://security.netapp.com/advisory/ntap-20230414-0001/',
-                'https://ubuntu.com/security/notices/USN-6039-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-0466',
-                'https://www.debian.org/security/2023/dsa-5417',
-                'https://www.openssl.org/news/secadv/20230328.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: Certificate policy check not enabled'
-            },
-            {
-              'cve':  'CVE-2023-1255',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '5.1',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-125'
-              ],
-              'description':   'Issue summary: The AES-XTS cipher decryption implementation for 64 bit ARM\nplatform contains a bug that could cause it to read past the input buffer,\nleading to a crash.\n\nImpact summary: Applications that use the AES-XTS algorithm on the 64 bit ARM\nplatform can crash in rare circumstances. The AES-XTS algorithm is usually\nused for disk encryption.\n\nThe AES-XTS cipher decryption implementation for 64 bit ARM platform will read\npast the end of the ciphertext buffer if the ciphertext size is 4 mod 5 in 16\nbyte blocks, e.g. 144 bytes or 1024 bytes. If the memory after the ciphertext\nbuffer is unmapped, this will trigger a crash which results in a denial of\nservice.\n\nIf an attacker can control the size and location of the ciphertext buffer\nbeing decrypted by an application using AES-XTS on 64 bit ARM, the\napplication is affected. This is fairly unlikely making this issue\na Low severity one.',
-              'diffID':        'sha256:383269fd0d7d9a5f547ad63131df9c00938dbbb23170a498357bc9fb5cd0948a',
-              'fixedVersions': [
-                '3.0.8-r4'
-              ],
-              'installedVersion': '3.0.7-r2',
-              'packageName':      'libcrypto3',
-              'purl':             'pkg:apk/alpine/libcrypto3@3.0.7-r2?arch=armv7&distro=3.17.1',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2023:3722',
-                'https://access.redhat.com/security/cve/CVE-2023-1255',
-                'https://bugzilla.redhat.com/2181082',
-                'https://bugzilla.redhat.com/2182561',
-                'https://bugzilla.redhat.com/2182565',
-                'https://bugzilla.redhat.com/2188461',
-                'https://bugzilla.redhat.com/2207947',
-                'https://errata.almalinux.org/9/ALSA-2023-3722.html',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=02ac9c9420275868472f33b01def01218742b8bb',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=bc2f61ad70971869b242fc1cb445b98bad50074a',
-                'https://linux.oracle.com/cve/CVE-2023-1255.html',
-                'https://linux.oracle.com/errata/ELSA-2023-3722.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-1255',
-                'https://security.netapp.com/advisory/ntap-20230908-0006/',
-                'https://ubuntu.com/security/notices/USN-6119-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-1255',
-                'https://www.openssl.org/news/secadv/20230419.txt',
-                'https://www.openssl.org/news/secadv/20230420.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: Input buffer over-read in AES-XTS implementation on 64 bit ARM'
-            },
-            {
-              'cve':  'CVE-2023-2650',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '6.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-770'
-              ],
-              'description':   "Issue summary: Processing some specially crafted ASN.1 object identifiers or\ndata containing them may be very slow.\n\nImpact summary: Applications that use OBJ_obj2txt() directly, or use any of\nthe OpenSSL subsystems OCSP, PKCS7/SMIME, CMS, CMP/CRMF or TS with no message\nsize limit may experience notable to very long delays when processing those\nmessages, which may lead to a Denial of Service.\n\nAn OBJECT IDENTIFIER is composed of a series of numbers - sub-identifiers -\nmost of which have no size limit.  OBJ_obj2txt() may be used to translate\nan ASN.1 OBJECT IDENTIFIER given in DER encoding form (using the OpenSSL\ntype ASN1_OBJECT) to its canonical numeric text form, which are the\nsub-identifiers of the OBJECT IDENTIFIER in decimal form, separated by\nperiods.\n\nWhen one of the sub-identifiers in the OBJECT IDENTIFIER is very large\n(these are sizes that are seen as absurdly large, taking up tens or hundreds\nof KiBs), the translation to a decimal number in text may take a very long\ntime.  The time complexity is O(n^2) with 'n' being the size of the\nsub-identifiers in bytes (*).\n\nWith OpenSSL 3.0, support to fetch cryptographic algorithms using names /\nidentifiers in string form was introduced.  This includes using OBJECT\nIDENTIFIERs in canonical numeric text form as identifiers for fetching\nalgorithms.\n\nSuch OBJECT IDENTIFIERs may be received through the ASN.1 structure\nAlgorithmIdentifier, which is commonly used in multiple protocols to specify\nwhat cryptographic algorithm should be used to sign or verify, encrypt or\ndecrypt, or digest passed data.\n\nApplications that call OBJ_obj2txt() directly with untrusted data are\naffected, with any version of OpenSSL.  If the use is for the mere purpose\nof display, the severity is considered low.\n\nIn OpenSSL 3.0 and newer, this affects the subsystems OCSP, PKCS7/SMIME,\nCMS, CMP/CRMF or TS.  It also impacts anything that processes X.509\ncertificates, including simple things like verifying its signature.\n\nThe impact on TLS is relatively low, because all versions of OpenSSL have a\n100KiB limit on the peer's certificate chain.  Additionally, this only\nimpacts clients, or servers that have explicitly enabled client\nauthentication.\n\nIn OpenSSL 1.1.1 and 1.0.2, this only affects displaying diverse objects,\nsuch as X.509 certificates.  This is assumed to not happen in such a way\nthat it would cause a Denial of Service, so these versions are considered\nnot affected by this issue in such a way that it would be cause for concern,\nand the severity is therefore considered low.",
-              'diffID':        'sha256:383269fd0d7d9a5f547ad63131df9c00938dbbb23170a498357bc9fb5cd0948a',
-              'fixedVersions': [
-                '3.0.9-r0'
-              ],
-              'installedVersion': '3.0.7-r2',
-              'packageName':      'libcrypto3',
-              'purl':             'pkg:apk/alpine/libcrypto3@3.0.7-r2?arch=armv7&distro=3.17.1',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2023/05/30/1',
-                'https://access.redhat.com/errata/RHSA-2023:6330',
-                'https://access.redhat.com/security/cve/CVE-2023-2650',
-                'https://bugzilla.redhat.com/1858038',
-                'https://bugzilla.redhat.com/2207947',
-                'https://errata.almalinux.org/9/ALSA-2023-6330.html',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=423a2bc737a908ad0c77bda470b2b59dc879936b',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=853c5e56ee0b8650c73140816bb8b91d6163422c',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=9e209944b35cf82368071f160a744b6178f9b098',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=db779b0e10b047f2585615e0b8f2acdf21f8544a',
-                'https://linux.oracle.com/cve/CVE-2023-2650.html',
-                'https://linux.oracle.com/errata/ELSA-2023-6330.html',
-                'https://lists.debian.org/debian-lts-announce/2023/06/msg00011.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-2650',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0009',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://security.netapp.com/advisory/ntap-20230703-0001/',
-                'https://security.netapp.com/advisory/ntap-20231027-0009/',
-                'https://ubuntu.com/security/notices/USN-6119-1',
-                'https://ubuntu.com/security/notices/USN-6188-1',
-                'https://ubuntu.com/security/notices/USN-6672-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-2650',
-                'https://www.debian.org/security/2023/dsa-5417',
-                'https://www.openssl.org/news/secadv/20230530.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: Possible DoS translating ASN.1 object identifiers'
-            },
-            {
-              'cve':  'CVE-2023-2975',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N'
-                },
-                'redhat': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-354',
-                'CWE-287'
-              ],
-              'description':   'Issue summary: The AES-SIV cipher implementation contains a bug that causes\nit to ignore empty associated data entries which are unauthenticated as\na consequence.\n\nImpact summary: Applications that use the AES-SIV algorithm and want to\nauthenticate empty data entries as associated data can be misled by removing,\nadding or reordering such empty entries as these are ignored by the OpenSSL\nimplementation. We are currently unaware of any such applications.\n\nThe AES-SIV algorithm allows for authentication of multiple associated\ndata entries along with the encryption. To authenticate empty data the\napplication has to call EVP_EncryptUpdate() (or EVP_CipherUpdate()) with\nNULL pointer as the output buffer and 0 as the input buffer length.\nThe AES-SIV implementation in OpenSSL just returns success for such a call\ninstead of performing the associated data authentication operation.\nThe empty data thus will not be authenticated.\n\nAs this issue does not affect non-empty associated data authentication and\nwe expect it to be rare for an application to use empty associated data\nentries this is qualified as Low severity issue.',
-              'diffID':        'sha256:383269fd0d7d9a5f547ad63131df9c00938dbbb23170a498357bc9fb5cd0948a',
-              'fixedVersions': [
-                '3.0.9-r2'
-              ],
-              'installedVersion': '3.0.7-r2',
-              'packageName':      'libcrypto3',
-              'purl':             'pkg:apk/alpine/libcrypto3@3.0.7-r2?arch=armv7&distro=3.17.1',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2023/07/15/1',
-                'http://www.openwall.com/lists/oss-security/2023/07/19/5',
-                'https://access.redhat.com/errata/RHSA-2024:2447',
-                'https://access.redhat.com/security/cve/CVE-2023-2975',
-                'https://bugzilla.redhat.com/2223016',
-                'https://bugzilla.redhat.com/2224962',
-                'https://bugzilla.redhat.com/2227852',
-                'https://bugzilla.redhat.com/2248616',
-                'https://bugzilla.redhat.com/2257571',
-                'https://bugzilla.redhat.com/2258502',
-                'https://bugzilla.redhat.com/2259944',
-                'https://errata.almalinux.org/9/ALSA-2024-2447.html',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=00e2f5eea29994d19293ec4e8c8775ba73678598',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=6a83f0c958811f07e0d11dfc6b5a6a98edfd5bdc',
-                'https://linux.oracle.com/cve/CVE-2023-2975.html',
-                'https://linux.oracle.com/errata/ELSA-2024-2447.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-2975',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://security.netapp.com/advisory/ntap-20230725-0004/',
-                'https://ubuntu.com/security/notices/USN-6450-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-2975',
-                'https://www.openssl.org/news/secadv/20230714.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: AES-SIV cipher implementation contains a bug that causes it to ignore empty associated data entries'
-            },
-            {
-              'cve':  'CVE-2023-3446',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L'
-                },
-                'redhat': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L'
-                }
-              },
-              'cwes': [
-                'CWE-606',
-                'CWE-1333'
-              ],
-              'description':   "Issue summary: Checking excessively long DH keys or parameters may be very slow.\n\nImpact summary: Applications that use the functions DH_check(), DH_check_ex()\nor EVP_PKEY_param_check() to check a DH key or DH parameters may experience long\ndelays. Where the key or parameters that are being checked have been obtained\nfrom an untrusted source this may lead to a Denial of Service.\n\nThe function DH_check() performs various checks on DH parameters. One of those\nchecks confirms that the modulus ('p' parameter) is not too large. Trying to use\na very large modulus is slow and OpenSSL will not normally use a modulus which\nis over 10,000 bits in length.\n\nHowever the DH_check() function checks numerous aspects of the key or parameters\nthat have been supplied. Some of those checks use the supplied modulus value\neven if it has already been found to be too large.\n\nAn application that calls DH_check() and supplies a key or parameters obtained\nfrom an untrusted source could be vulernable to a Denial of Service attack.\n\nThe function DH_check() is itself called by a number of other OpenSSL functions.\nAn application calling any of those other functions may similarly be affected.\nThe other functions affected by this are DH_check_ex() and\nEVP_PKEY_param_check().\n\nAlso vulnerable are the OpenSSL dhparam and pkeyparam command line applications\nwhen using the '-check' option.\n\nThe OpenSSL SSL/TLS implementation is not affected by this issue.\nThe OpenSSL 3.0 and 3.1 FIPS providers are not affected by this issue.",
-              'diffID':        'sha256:383269fd0d7d9a5f547ad63131df9c00938dbbb23170a498357bc9fb5cd0948a',
-              'fixedVersions': [
-                '3.0.9-r3'
-              ],
-              'installedVersion': '3.0.7-r2',
-              'packageName':      'libcrypto3',
-              'purl':             'pkg:apk/alpine/libcrypto3@3.0.7-r2?arch=armv7&distro=3.17.1',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2023/07/19/4',
-                'http://www.openwall.com/lists/oss-security/2023/07/19/5',
-                'http://www.openwall.com/lists/oss-security/2023/07/19/6',
-                'http://www.openwall.com/lists/oss-security/2023/07/31/1',
-                'http://www.openwall.com/lists/oss-security/2024/05/16/1',
-                'https://access.redhat.com/errata/RHSA-2024:2447',
-                'https://access.redhat.com/security/cve/CVE-2023-3446',
-                'https://bugzilla.redhat.com/2223016',
-                'https://bugzilla.redhat.com/2224962',
-                'https://bugzilla.redhat.com/2227852',
-                'https://bugzilla.redhat.com/2248616',
-                'https://bugzilla.redhat.com/2257571',
-                'https://bugzilla.redhat.com/2258502',
-                'https://bugzilla.redhat.com/2259944',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2224962',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2257582',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2257583',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2258677',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2258688',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2258691',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2258694',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2258700',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-36763',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-36764',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3446',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45229',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45231',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45232',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45233',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45235',
-                'https://errata.almalinux.org/9/ALSA-2024-2447.html',
-                'https://errata.rockylinux.org/RLSA-2024:2264',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=1fa20cf2f506113c761777127a38bce5068740eb',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=8780a896543a654e757db1b9396383f9d8095528',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=9a0a4d3c1e7138915563c0df4fe6a3f9377b839c',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=fc9867c1e03c22ebf56943be205202e576aabf23',
-                'https://linux.oracle.com/cve/CVE-2023-3446.html',
-                'https://linux.oracle.com/errata/ELSA-2024-2447.html',
-                'https://lists.debian.org/debian-lts-announce/2023/08/msg00019.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-3446',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://security.netapp.com/advisory/ntap-20230803-0011/',
-                'https://ubuntu.com/security/notices/USN-6435-1',
-                'https://ubuntu.com/security/notices/USN-6435-2',
-                'https://ubuntu.com/security/notices/USN-6450-1',
-                'https://ubuntu.com/security/notices/USN-6709-1',
-                'https://ubuntu.com/security/notices/USN-7018-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-3446',
-                'https://www.openssl.org/news/secadv/20230719.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: Excessive time spent checking DH keys and parameters'
-            },
-            {
-              'cve':  'CVE-2023-3817',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L'
-                },
-                'redhat': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L'
-                }
-              },
-              'cwes': [
-                'CWE-606',
-                'CWE-834'
-              ],
-              'description':   'Issue summary: Checking excessively long DH keys or parameters may be very slow.\n\nImpact summary: Applications that use the functions DH_check(), DH_check_ex()\nor EVP_PKEY_param_check() to check a DH key or DH parameters may experience long\ndelays. Where the key or parameters that are being checked have been obtained\nfrom an untrusted source this may lead to a Denial of Service.\n\nThe function DH_check() performs various checks on DH parameters. After fixing\nCVE-2023-3446 it was discovered that a large q parameter value can also trigger\nan overly long computation during some of these checks. A correct q value,\nif present, cannot be larger than the modulus p parameter, thus it is\nunnecessary to perform these checks if q is larger than p.\n\nAn application that calls DH_check() and supplies a key or parameters obtained\nfrom an untrusted source could be vulnerable to a Denial of Service attack.\n\nThe function DH_check() is itself called by a number of other OpenSSL functions.\nAn application calling any of those other functions may similarly be affected.\nThe other functions affected by this are DH_check_ex() and\nEVP_PKEY_param_check().\n\nAlso vulnerable are the OpenSSL dhparam and pkeyparam command line applications\nwhen using the "-check" option.\n\nThe OpenSSL SSL/TLS implementation is not affected by this issue.\n\nThe OpenSSL 3.0 and 3.1 FIPS providers are not affected by this issue.',
-              'diffID':        'sha256:383269fd0d7d9a5f547ad63131df9c00938dbbb23170a498357bc9fb5cd0948a',
-              'fixedVersions': [
-                '3.0.10-r0'
-              ],
-              'installedVersion': '3.0.7-r2',
-              'packageName':      'libcrypto3',
-              'purl':             'pkg:apk/alpine/libcrypto3@3.0.7-r2?arch=armv7&distro=3.17.1',
-              'references':       [
-                'http://seclists.org/fulldisclosure/2023/Jul/43',
-                'http://www.openwall.com/lists/oss-security/2023/07/31/1',
-                'http://www.openwall.com/lists/oss-security/2023/09/22/11',
-                'http://www.openwall.com/lists/oss-security/2023/09/22/9',
-                'http://www.openwall.com/lists/oss-security/2023/11/06/2',
-                'https://access.redhat.com/errata/RHSA-2024:2447',
-                'https://access.redhat.com/security/cve/CVE-2023-3817',
-                'https://bugzilla.redhat.com/2223016',
-                'https://bugzilla.redhat.com/2224962',
-                'https://bugzilla.redhat.com/2227852',
-                'https://bugzilla.redhat.com/2248616',
-                'https://bugzilla.redhat.com/2257571',
-                'https://bugzilla.redhat.com/2258502',
-                'https://bugzilla.redhat.com/2259944',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2224962',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2227852',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2248616',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2270358',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3446',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3817',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-5678',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-2408',
-                'https://errata.almalinux.org/9/ALSA-2024-2447.html',
-                'https://errata.rockylinux.org/RLSA-2023:7877',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=6a1eb62c29db6cb5eec707f9338aee00f44e26f5',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=869ad69aadd985c7b8ca6f4e5dd0eb274c9f3644',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=9002fd07327a91f35ba6c1307e71fa6fd4409b7f',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=91ddeba0f2269b017dc06c46c993a788974b1aa5',
-                'https://linux.oracle.com/cve/CVE-2023-3817.html',
-                'https://linux.oracle.com/errata/ELSA-2024-2447.html',
-                'https://lists.debian.org/debian-lts-announce/2023/08/msg00019.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-3817',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://security.netapp.com/advisory/ntap-20230818-0014/',
-                'https://security.netapp.com/advisory/ntap-20231027-0008/',
-                'https://security.netapp.com/advisory/ntap-20240621-0006/',
-                'https://ubuntu.com/security/notices/USN-6435-1',
-                'https://ubuntu.com/security/notices/USN-6435-2',
-                'https://ubuntu.com/security/notices/USN-6450-1',
-                'https://ubuntu.com/security/notices/USN-6709-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-3817',
-                'https://www.openssl.org/news/secadv/20230731.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'OpenSSL: Excessive time spent checking DH q parameter value'
-            },
-            {
-              'cve':  'CVE-2023-5678',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L'
-                },
-                'redhat': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L'
-                }
-              },
-              'cwes': [
-                'CWE-606',
-                'CWE-754'
-              ],
-              'description':   "Issue summary: Generating excessively long X9.42 DH keys or checking\nexcessively long X9.42 DH keys or parameters may be very slow.\n\nImpact summary: Applications that use the functions DH_generate_key() to\ngenerate an X9.42 DH key may experience long delays.  Likewise, applications\nthat use DH_check_pub_key(), DH_check_pub_key_ex() or EVP_PKEY_public_check()\nto check an X9.42 DH key or X9.42 DH parameters may experience long delays.\nWhere the key or parameters that are being checked have been obtained from\nan untrusted source this may lead to a Denial of Service.\n\nWhile DH_check() performs all the necessary checks (as of CVE-2023-3817),\nDH_check_pub_key() doesn't make any of these checks, and is therefore\nvulnerable for excessively large P and Q parameters.\n\nLikewise, while DH_generate_key() performs a check for an excessively large\nP, it doesn't check for an excessively large Q.\n\nAn application that calls DH_generate_key() or DH_check_pub_key() and\nsupplies a key or parameters obtained from an untrusted source could be\nvulnerable to a Denial of Service attack.\n\nDH_generate_key() and DH_check_pub_key() are also called by a number of\nother OpenSSL functions.  An application calling any of those other\nfunctions may similarly be affected.  The other functions affected by this\nare DH_check_pub_key_ex(), EVP_PKEY_public_check(), and EVP_PKEY_generate().\n\nAlso vulnerable are the OpenSSL pkey command line application when using the\n\"-pubcheck\" option, as well as the OpenSSL genpkey command line application.\n\nThe OpenSSL SSL/TLS implementation is not affected by this issue.\n\nThe OpenSSL 3.0 and 3.1 FIPS providers are not affected by this issue.",
-              'diffID':        'sha256:383269fd0d7d9a5f547ad63131df9c00938dbbb23170a498357bc9fb5cd0948a',
-              'fixedVersions': [
-                '3.0.12-r1'
-              ],
-              'installedVersion': '3.0.7-r2',
-              'packageName':      'libcrypto3',
-              'purl':             'pkg:apk/alpine/libcrypto3@3.0.7-r2?arch=armv7&distro=3.17.1',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2024/03/11/1',
-                'https://access.redhat.com/errata/RHSA-2024:2447',
-                'https://access.redhat.com/security/cve/CVE-2023-5678',
-                'https://bugzilla.redhat.com/2223016',
-                'https://bugzilla.redhat.com/2224962',
-                'https://bugzilla.redhat.com/2227852',
-                'https://bugzilla.redhat.com/2248616',
-                'https://bugzilla.redhat.com/2257571',
-                'https://bugzilla.redhat.com/2258502',
-                'https://bugzilla.redhat.com/2259944',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2224962',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2227852',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2248616',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2270358',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3446',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3817',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-5678',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-2408',
-                'https://errata.almalinux.org/9/ALSA-2024-2447.html',
-                'https://errata.rockylinux.org/RLSA-2023:7877',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=34efaef6c103d636ab507a0cc34dca4d3aecc055',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=710fee740904b6290fef0dd5536fbcedbc38ff0c',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=db925ae2e65d0d925adef429afc37f75bd1c2017',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=ddeb4b6c6d527e54ce9a99cba785c0f7776e54b6',
-                'https://linux.oracle.com/cve/CVE-2023-5678.html',
-                'https://linux.oracle.com/errata/ELSA-2024-2447.html',
-                'https://lists.debian.org/debian-lts-announce/2024/10/msg00033.html',
-                'https://lists.debian.org/debian-lts-announce/2024/11/msg00000.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-5678',
-                'https://security.netapp.com/advisory/ntap-20231130-0010/',
-                'https://ubuntu.com/security/notices/USN-6622-1',
-                'https://ubuntu.com/security/notices/USN-6632-1',
-                'https://ubuntu.com/security/notices/USN-6709-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-5678',
-                'https://www.openssl.org/news/secadv/20231106.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: Generating excessively long X9.42 DH keys or checking excessively long X9.42 DH keys or parameters may be very slow'
-            },
-            {
-              'cve':  'CVE-2023-6129',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '6.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-440',
-                'CWE-787'
-              ],
-              'description':   'Issue summary: The POLY1305 MAC (message authentication code) implementation\ncontains a bug that might corrupt the internal state of applications running\non PowerPC CPU based platforms if the CPU provides vector instructions.\n\nImpact summary: If an attacker can influence whether the POLY1305 MAC\nalgorithm is used, the application state might be corrupted with various\napplication dependent consequences.\n\nThe POLY1305 MAC (message authentication code) implementation in OpenSSL for\nPowerPC CPUs restores the contents of vector registers in a different order\nthan they are saved. Thus the contents of some of these vector registers\nare corrupted when returning to the caller. The vulnerable code is used only\non newer PowerPC processors supporting the PowerISA 2.07 instructions.\n\nThe consequences of this kind of internal application state corruption can\nbe various - from no consequences, if the calling application does not\ndepend on the contents of non-volatile XMM registers at all, to the worst\nconsequences, where the attacker could get complete control of the application\nprocess. However unless the compiler uses the vector registers for storing\npointers, the most likely consequence, if any, would be an incorrect result\nof some application dependent calculations or a crash leading to a denial of\nservice.\n\nThe POLY1305 MAC algorithm is most frequently used as part of the\nCHACHA20-POLY1305 AEAD (authenticated encryption with associated data)\nalgorithm. The most common usage of this AEAD cipher is with TLS protocol\nversions 1.2 and 1.3. If this cipher is enabled on the server a malicious\nclient can influence whether this AEAD cipher is used. This implies that\nTLS server applications using OpenSSL can be potentially impacted. However\nwe are currently not aware of any concrete application that would be affected\nby this issue therefore we consider this a Low severity security issue.',
-              'diffID':        'sha256:383269fd0d7d9a5f547ad63131df9c00938dbbb23170a498357bc9fb5cd0948a',
-              'fixedVersions': [
-                '3.0.12-r2'
-              ],
-              'installedVersion': '3.0.7-r2',
-              'packageName':      'libcrypto3',
-              'purl':             'pkg:apk/alpine/libcrypto3@3.0.7-r2?arch=armv7&distro=3.17.1',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2024/03/11/1',
-                'https://access.redhat.com/errata/RHSA-2024:9088',
-                'https://access.redhat.com/security/cve/CVE-2023-6129',
-                'https://bugzilla.redhat.com/2257571',
-                'https://bugzilla.redhat.com/2258502',
-                'https://bugzilla.redhat.com/2259944',
-                'https://bugzilla.redhat.com/2284243',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2257571',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2258502',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2259944',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2284243',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-6129',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-6237',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-0727',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-1298',
-                'https://errata.almalinux.org/9/ALSA-2024-9088.html',
-                'https://errata.rockylinux.org/RLSA-2024:9088',
-                'https://github.com/openssl/openssl/commit/050d26383d4e264966fb83428e72d5d48f402d35',
-                'https://github.com/openssl/openssl/commit/5b139f95c9a47a55a0c54100f3837b1eee942b04',
-                'https://github.com/openssl/openssl/commit/f3fc5808fe9ff74042d639839610d03b8fdcc015',
-                'https://linux.oracle.com/cve/CVE-2023-6129.html',
-                'https://linux.oracle.com/errata/ELSA-2024-9088.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-6129',
-                'https://security.netapp.com/advisory/ntap-20240216-0009/',
-                'https://security.netapp.com/advisory/ntap-20240426-0008/',
-                'https://security.netapp.com/advisory/ntap-20240426-0013/',
-                'https://security.netapp.com/advisory/ntap-20240503-0011/',
-                'https://ubuntu.com/security/notices/USN-6622-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-6129',
-                'https://www.openssl.org/news/secadv/20240109.txt',
-                'https://www.openwall.com/lists/oss-security/2024/01/09/1'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: POLY1305 MAC implementation corrupts vector registers on PowerPC'
-            },
-            {
-              'cve':  'CVE-2023-6237',
-              'cvss': {
-                'redhat': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-606'
-              ],
-              'description':   "Issue summary: Checking excessively long invalid RSA public keys may take\na long time.\n\nImpact summary: Applications that use the function EVP_PKEY_public_check()\nto check RSA public keys may experience long delays. Where the key that\nis being checked has been obtained from an untrusted source this may lead\nto a Denial of Service.\n\nWhen function EVP_PKEY_public_check() is called on RSA public keys,\na computation is done to confirm that the RSA modulus, n, is composite.\nFor valid RSA keys, n is a product of two or more large primes and this\ncomputation completes quickly. However, if n is an overly large prime,\nthen this computation would take a long time.\n\nAn application that calls EVP_PKEY_public_check() and supplies an RSA key\nobtained from an untrusted source could be vulnerable to a Denial of Service\nattack.\n\nThe function EVP_PKEY_public_check() is not called from other OpenSSL\nfunctions however it is called from the OpenSSL pkey command line\napplication. For that reason that application is also vulnerable if used\nwith the '-pubin' and '-check' options on untrusted data.\n\nThe OpenSSL SSL/TLS implementation is not affected by this issue.\n\nThe OpenSSL 3.0 and 3.1 FIPS providers are affected by this issue.",
-              'diffID':        'sha256:383269fd0d7d9a5f547ad63131df9c00938dbbb23170a498357bc9fb5cd0948a',
-              'fixedVersions': [
-                '3.0.12-r3'
-              ],
-              'installedVersion': '3.0.7-r2',
-              'packageName':      'libcrypto3',
-              'purl':             'pkg:apk/alpine/libcrypto3@3.0.7-r2?arch=armv7&distro=3.17.1',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2024/03/11/1',
-                'https://access.redhat.com/errata/RHSA-2024:9088',
-                'https://access.redhat.com/security/cve/CVE-2023-6237',
-                'https://bugzilla.redhat.com/2257571',
-                'https://bugzilla.redhat.com/2258502',
-                'https://bugzilla.redhat.com/2259944',
-                'https://bugzilla.redhat.com/2284243',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2257571',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2258502',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2259944',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2284243',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-6129',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-6237',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-0727',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-1298',
-                'https://errata.almalinux.org/9/ALSA-2024-9088.html',
-                'https://errata.rockylinux.org/RLSA-2024:9088',
-                'https://github.com/openssl/openssl/commit/0b0f7abfb37350794a4b8960fafc292cd5d1b84d',
-                'https://github.com/openssl/openssl/commit/18c02492138d1eb8b6548cb26e7b625fb2414a2a',
-                'https://github.com/openssl/openssl/commit/a830f551557d3d66a84bbb18a5b889c640c36294',
-                'https://linux.oracle.com/cve/CVE-2023-6237.html',
-                'https://linux.oracle.com/errata/ELSA-2024-9088.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-6237',
-                'https://security.netapp.com/advisory/ntap-20240531-0007/',
-                'https://ubuntu.com/security/notices/USN-6622-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-6237',
-                'https://www.openssl.org/news/secadv/20240115.txt',
-                'https://www.openwall.com/lists/oss-security/2024/01/15/2'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: Excessive time spent checking invalid RSA public keys'
-            },
-            {
-              'cve':  'CVE-2024-0727',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '5.5',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H'
-                },
-                'nvd': {
-                  'v3score':  '5.5',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '5.5',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-476'
-              ],
-              'description':   'Issue summary: Processing a maliciously formatted PKCS12 file may lead OpenSSL\nto crash leading to a potential Denial of Service attack\n\nImpact summary: Applications loading files in the PKCS12 format from untrusted\nsources might terminate abruptly.\n\nA file in PKCS12 format can contain certificates and keys and may come from an\nuntrusted source. The PKCS12 specification allows certain fields to be NULL, but\nOpenSSL does not correctly check for this case. This can lead to a NULL pointer\ndereference that results in OpenSSL crashing. If an application processes PKCS12\nfiles from an untrusted source using the OpenSSL APIs then that application will\nbe vulnerable to this issue.\n\nOpenSSL APIs that are vulnerable to this are: PKCS12_parse(),\nPKCS12_unpack_p7data(), PKCS12_unpack_p7encdata(), PKCS12_unpack_authsafes()\nand PKCS12_newpass().\n\nWe have also fixed a similar issue in SMIME_write_PKCS7(). However since this\nfunction is related to writing data we do not consider it security significant.\n\nThe FIPS modules in 3.2, 3.1 and 3.0 are not affected by this issue.',
-              'diffID':        'sha256:383269fd0d7d9a5f547ad63131df9c00938dbbb23170a498357bc9fb5cd0948a',
-              'fixedVersions': [
-                '3.0.12-r4'
-              ],
-              'installedVersion': '3.0.7-r2',
-              'packageName':      'libcrypto3',
-              'purl':             'pkg:apk/alpine/libcrypto3@3.0.7-r2?arch=armv7&distro=3.17.1',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2024/03/11/1',
-                'https://access.redhat.com/errata/RHSA-2024:9088',
-                'https://access.redhat.com/security/cve/CVE-2024-0727',
-                'https://bugzilla.redhat.com/2257571',
-                'https://bugzilla.redhat.com/2258502',
-                'https://bugzilla.redhat.com/2259944',
-                'https://bugzilla.redhat.com/2284243',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2257571',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2258502',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2259944',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2284243',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-6129',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-6237',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-0727',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-1298',
-                'https://errata.almalinux.org/9/ALSA-2024-9088.html',
-                'https://errata.rockylinux.org/RLSA-2024:9088',
-                'https://github.com/alexcrichton/openssl-src-rs/commit/add20f73b6b42be7451af2e1044d4e0e778992b2',
-                'https://github.com/github/advisory-database/pull/3472',
-                'https://github.com/openssl/openssl/commit/09df4395b5071217b76dc7d3d2e630eb8c5a79c2',
-                'https://github.com/openssl/openssl/commit/775acfdbd0c6af9ac855f34969cdab0c0c90844a',
-                'https://github.com/openssl/openssl/commit/d135eeab8a5dbf72b3da5240bab9ddb7678dbd2c',
-                'https://github.com/openssl/openssl/pull/23362',
-                'https://github.com/pyca/cryptography/commit/3519591d255d4506fbcd0d04037d45271903c64d',
-                'https://github.openssl.org/openssl/extended-releases/commit/03b3941d60c4bce58fab69a0c22377ab439bc0e8',
-                'https://github.openssl.org/openssl/extended-releases/commit/aebaa5883e31122b404e450732dc833dc9dee539',
-                'https://linux.oracle.com/cve/CVE-2024-0727.html',
-                'https://linux.oracle.com/errata/ELSA-2024-9088.html',
-                'https://lists.debian.org/debian-lts-announce/2024/10/msg00033.html',
-                'https://lists.debian.org/debian-lts-announce/2024/11/msg00000.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2024-0727',
-                'https://security.netapp.com/advisory/ntap-20240208-0006',
-                'https://security.netapp.com/advisory/ntap-20240208-0006/',
-                'https://ubuntu.com/security/notices/USN-6622-1',
-                'https://ubuntu.com/security/notices/USN-6632-1',
-                'https://ubuntu.com/security/notices/USN-6709-1',
-                'https://ubuntu.com/security/notices/USN-7018-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2024-0727',
-                'https://www.openssl.org/news/secadv/20240125.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: denial of service via null dereference'
-            },
-            {
-              'cve':  'CVE-2024-4603',
-              'cvss': {
-                'redhat': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L'
-                }
-              },
-              'cwes': [
-                'CWE-606',
-                'CWE-834'
-              ],
-              'description':   'Issue summary: Checking excessively long DSA keys or parameters may be very\nslow.\n\nImpact summary: Applications that use the functions EVP_PKEY_param_check()\nor EVP_PKEY_public_check() to check a DSA public key or DSA parameters may\nexperience long delays. Where the key or parameters that are being checked\nhave been obtained from an untrusted source this may lead to a Denial of\nService.\n\nThe functions EVP_PKEY_param_check() or EVP_PKEY_public_check() perform\nvarious checks on DSA parameters. Some of those computations take a long time\nif the modulus (`p` parameter) is too large.\n\nTrying to use a very large modulus is slow and OpenSSL will not allow using\npublic keys with a modulus which is over 10,000 bits in length for signature\nverification. However the key and parameter check functions do not limit\nthe modulus size when performing the checks.\n\nAn application that calls EVP_PKEY_param_check() or EVP_PKEY_public_check()\nand supplies a key or parameters obtained from an untrusted source could be\nvulnerable to a Denial of Service attack.\n\nThese functions are not called by OpenSSL itself on untrusted DSA keys so\nonly applications that directly call these functions may be vulnerable.\n\nAlso vulnerable are the OpenSSL pkey and pkeyparam command line applications\nwhen using the `-check` option.\n\nThe OpenSSL SSL/TLS implementation is not affected by this issue.\n\nThe OpenSSL 3.0 and 3.1 FIPS providers are affected by this issue.',
-              'diffID':        'sha256:383269fd0d7d9a5f547ad63131df9c00938dbbb23170a498357bc9fb5cd0948a',
-              'fixedVersions': [
-                '3.0.13-r0'
-              ],
-              'installedVersion': '3.0.7-r2',
-              'packageName':      'libcrypto3',
-              'purl':             'pkg:apk/alpine/libcrypto3@3.0.7-r2?arch=armv7&distro=3.17.1',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2024/05/16/2',
-                'https://access.redhat.com/errata/RHSA-2024:9333',
-                'https://access.redhat.com/security/cve/CVE-2024-4603',
-                'https://bugzilla.redhat.com/2274020',
-                'https://bugzilla.redhat.com/2281029',
-                'https://bugzilla.redhat.com/2283757',
-                'https://bugzilla.redhat.com/2294581',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2274020',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2281029',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2283757',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2294581',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-2511',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-4603',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-4741',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-5535',
-                'https://errata.almalinux.org/9/ALSA-2024-9333.html',
-                'https://errata.rockylinux.org/RLSA-2024:9333',
-                'https://github.com/openssl/openssl/commit/3559e868e58005d15c6013a0c1fd832e51c73397',
-                'https://github.com/openssl/openssl/commit/53ea06486d296b890d565fb971b2764fcd826e7e',
-                'https://github.com/openssl/openssl/commit/9c39b3858091c152f52513c066ff2c5a47969f0d',
-                'https://github.com/openssl/openssl/commit/da343d0605c826ef197aceedc67e8e04f065f740',
-                'https://linux.oracle.com/cve/CVE-2024-4603.html',
-                'https://linux.oracle.com/errata/ELSA-2024-9333.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2024-4603',
-                'https://security.netapp.com/advisory/ntap-20240621-0001/',
-                'https://ubuntu.com/security/notices/USN-6937-1',
-                'https://www.cve.org/CVERecord?id=CVE-2024-4603',
-                'https://www.openssl.org/news/secadv/20240516.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: Excessive time spent checking DSA keys and parameters'
-            },
-            {
-              'cve':  'CVE-2024-4741',
-              'cvss': {
-                'redhat': {
-                  'v3score':  '5.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   'Issue summary: Calling the OpenSSL API function SSL_free_buffers may cause\nmemory to be accessed that was previously freed in some situations\n\nImpact summary: A use after free can have a range of potential consequences such\nas the corruption of valid data, crashes or execution of arbitrary code.\nHowever, only applications that directly call the SSL_free_buffers function are\naffected by this issue. Applications that do not call this function are not\nvulnerable. Our investigations indicate that this function is rarely used by\napplications.\n\nThe SSL_free_buffers function is used to free the internal OpenSSL buffer used\nwhen processing an incoming record from the network. The call is only expected\nto succeed if the buffer is not currently in use. However, two scenarios have\nbeen identified where the buffer is freed even when still in use.\n\nThe first scenario occurs where a record header has been received from the\nnetwork and processed by OpenSSL, but the full record body has not yet arrived.\nIn this case calling SSL_free_buffers will succeed even though a record has only\nbeen partially processed and the buffer is still in use.\n\nThe second scenario occurs where a full record containing application data has\nbeen received and processed by OpenSSL but the application has only read part of\nthis data. Again a call to SSL_free_buffers will succeed even though the buffer\nis still in use.\n\nWhile these scenarios could occur accidentally during normal operation a\nmalicious attacker could attempt to engineer a stituation where this occurs.\nWe are not aware of this issue being actively exploited.\n\nThe FIPS modules in 3.3, 3.2, 3.1 and 3.0 are not affected by this issue.',
-              'diffID':        'sha256:383269fd0d7d9a5f547ad63131df9c00938dbbb23170a498357bc9fb5cd0948a',
-              'fixedVersions': [
-                '3.0.14-r0'
-              ],
-              'installedVersion': '3.0.7-r2',
-              'packageName':      'libcrypto3',
-              'purl':             'pkg:apk/alpine/libcrypto3@3.0.7-r2?arch=armv7&distro=3.17.1',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2024:9333',
-                'https://access.redhat.com/security/cve/CVE-2024-4741',
-                'https://bugzilla.redhat.com/2274020',
-                'https://bugzilla.redhat.com/2281029',
-                'https://bugzilla.redhat.com/2283757',
-                'https://bugzilla.redhat.com/2294581',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2274020',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2281029',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2283757',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2294581',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-2511',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-4603',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-4741',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-5535',
-                'https://errata.almalinux.org/9/ALSA-2024-9333.html',
-                'https://errata.rockylinux.org/RLSA-2024:9333',
-                'https://github.com/openssl/openssl/commit/704f725b96aa373ee45ecfb23f6abfe8be8d9177',
-                'https://github.com/openssl/openssl/commit/b3f0eb0a295f58f16ba43ba99dad70d4ee5c437d',
-                'https://github.com/openssl/openssl/commit/c88c3de51020c37e8706bf7a682a162593053aac',
-                'https://github.com/openssl/openssl/commit/e5093133c35ca82874ad83697af76f4b0f7e3bd8',
-                'https://github.openssl.org/openssl/extended-releases/commit/f7a045f3143fc6da2ee66bf52d8df04829590dd4',
-                'https://linux.oracle.com/cve/CVE-2024-4741.html',
-                'https://linux.oracle.com/errata/ELSA-2024-9333.html',
-                'https://lists.debian.org/debian-lts-announce/2024/10/msg00033.html',
-                'https://lists.debian.org/debian-lts-announce/2024/11/msg00000.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2024-4741',
-                'https://security.netapp.com/advisory/ntap-20240621-0004/',
-                'https://ubuntu.com/security/notices/USN-6937-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2024-4741',
-                'https://www.openssl.org/news/secadv/20240528.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: Use After Free with SSL_free_buffers'
-            },
-            {
-              'cve':  'CVE-2024-5535',
-              'cvss': {
-                'redhat': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-125'
-              ],
-              'description':   'Issue summary: Calling the OpenSSL API function SSL_select_next_proto with an\nempty supported client protocols buffer may cause a crash or memory contents to\nbe sent to the peer.\n\nImpact summary: A buffer overread can have a range of potential consequences\nsuch as unexpected application beahviour or a crash. In particular this issue\ncould result in up to 255 bytes of arbitrary private data from memory being sent\nto the peer leading to a loss of confidentiality. However, only applications\nthat directly call the SSL_select_next_proto function with a 0 length list of\nsupported client protocols are affected by this issue. This would normally never\nbe a valid scenario and is typically not under attacker control but may occur by\naccident in the case of a configuration or programming error in the calling\napplication.\n\nThe OpenSSL API function SSL_select_next_proto is typically used by TLS\napplications that support ALPN (Application Layer Protocol Negotiation) or NPN\n(Next Protocol Negotiation). NPN is older, was never standardised and\nis deprecated in favour of ALPN. We believe that ALPN is significantly more\nwidely deployed than NPN. The SSL_select_next_proto function accepts a list of\nprotocols from the server and a list of protocols from the client and returns\nthe first protocol that appears in the server list that also appears in the\nclient list. In the case of no overlap between the two lists it returns the\nfirst item in the client list. In either case it will signal whether an overlap\nbetween the two lists was found. In the case where SSL_select_next_proto is\ncalled with a zero length client list it fails to notice this condition and\nreturns the memory immediately following the client list pointer (and reports\nthat there was no overlap in the lists).\n\nThis function is typically called from a server side application callback for\nALPN or a client side application callback for NPN. In the case of ALPN the list\nof protocols supplied by the client is guaranteed by libssl to never be zero in\nlength. The list of server protocols comes from the application and should never\nnormally be expected to be of zero length. In this case if the\nSSL_select_next_proto function has been called as expected (with the list\nsupplied by the client passed in the client/client_len parameters), then the\napplication will not be vulnerable to this issue. If the application has\naccidentally been configured with a zero length server list, and has\naccidentally passed that zero length server list in the client/client_len\nparameters, and has additionally failed to correctly handle a "no overlap"\nresponse (which would normally result in a handshake failure in ALPN) then it\nwill be vulnerable to this problem.\n\nIn the case of NPN, the protocol permits the client to opportunistically select\na protocol when there is no overlap. OpenSSL returns the first client protocol\nin the no overlap case in support of this. The list of client protocols comes\nfrom the application and should never normally be expected to be of zero length.\nHowever if the SSL_select_next_proto function is accidentally called with a\nclient_len of 0 then an invalid memory pointer will be returned instead. If the\napplication uses this output as the opportunistic protocol then the loss of\nconfidentiality will occur.\n\nThis issue has been assessed as Low severity because applications are most\nlikely to be vulnerable if they are using NPN instead of ALPN - but NPN is not\nwidely used. It also requires an application configuration or programming error.\nFinally, this issue would not typically be under attacker control making active\nexploitation unlikely.\n\nThe FIPS modules in 3.3, 3.2, 3.1 and 3.0 are not affected by this issue.\n\nDue to the low severity of this issue we are not issuing new releases of\nOpenSSL at this time. The fix will be included in the next releases when they\nbecome available.',
-              'diffID':        'sha256:383269fd0d7d9a5f547ad63131df9c00938dbbb23170a498357bc9fb5cd0948a',
-              'fixedVersions': [
-                '3.0.14-r0'
-              ],
-              'installedVersion': '3.0.7-r2',
-              'packageName':      'libcrypto3',
-              'purl':             'pkg:apk/alpine/libcrypto3@3.0.7-r2?arch=armv7&distro=3.17.1',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2024/06/27/1',
-                'http://www.openwall.com/lists/oss-security/2024/06/28/4',
-                'http://www.openwall.com/lists/oss-security/2024/08/15/1',
-                'https://access.redhat.com/errata/RHSA-2025:1671',
-                'https://access.redhat.com/security/cve/CVE-2024-5535',
-                'https://bugzilla.redhat.com/2294581',
-                'https://bugzilla.redhat.com/2294676',
-                'https://bugzilla.redhat.com/2301888',
-                'https://bugzilla.redhat.com/2318857',
-                'https://bugzilla.redhat.com/2318858',
-                'https://bugzilla.redhat.com/2318870',
-                'https://bugzilla.redhat.com/2318873',
-                'https://bugzilla.redhat.com/2318874',
-                'https://bugzilla.redhat.com/2318876',
-                'https://bugzilla.redhat.com/2318882',
-                'https://bugzilla.redhat.com/2318883',
-                'https://bugzilla.redhat.com/2318884',
-                'https://bugzilla.redhat.com/2318885',
-                'https://bugzilla.redhat.com/2318886',
-                'https://bugzilla.redhat.com/2318897',
-                'https://bugzilla.redhat.com/2318900',
-                'https://bugzilla.redhat.com/2318905',
-                'https://bugzilla.redhat.com/2318914',
-                'https://bugzilla.redhat.com/2318922',
-                'https://bugzilla.redhat.com/2318923',
-                'https://bugzilla.redhat.com/2318925',
-                'https://bugzilla.redhat.com/2318926',
-                'https://bugzilla.redhat.com/2318927',
-                'https://bugzilla.redhat.com/2331191',
-                'https://bugzilla.redhat.com/2339218',
-                'https://bugzilla.redhat.com/2339220',
-                'https://bugzilla.redhat.com/2339221',
-                'https://bugzilla.redhat.com/2339226',
-                'https://bugzilla.redhat.com/2339231',
-                'https://bugzilla.redhat.com/2339236',
-                'https://bugzilla.redhat.com/2339238',
-                'https://bugzilla.redhat.com/2339243',
-                'https://bugzilla.redhat.com/2339247',
-                'https://bugzilla.redhat.com/2339252',
-                'https://bugzilla.redhat.com/2339259',
-                'https://bugzilla.redhat.com/2339266',
-                'https://bugzilla.redhat.com/2339270',
-                'https://bugzilla.redhat.com/2339271',
-                'https://bugzilla.redhat.com/2339275',
-                'https://bugzilla.redhat.com/2339277',
-                'https://bugzilla.redhat.com/2339281',
-                'https://bugzilla.redhat.com/2339284',
-                'https://bugzilla.redhat.com/2339291',
-                'https://bugzilla.redhat.com/2339293',
-                'https://bugzilla.redhat.com/2339295',
-                'https://bugzilla.redhat.com/2339299',
-                'https://bugzilla.redhat.com/2339300',
-                'https://bugzilla.redhat.com/2339304',
-                'https://bugzilla.redhat.com/2339305',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2274020',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2281029',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2283757',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2294581',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-2511',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-4603',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-4741',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-5535',
-                'https://errata.almalinux.org/9/ALSA-2025-1671.html',
-                'https://errata.rockylinux.org/RLSA-2024:9333',
-                'https://github.com/openssl/openssl/commit/4ada436a1946cbb24db5ab4ca082b69c1bc10f37',
-                'https://github.com/openssl/openssl/commit/99fb785a5f85315b95288921a321a935ea29a51e',
-                'https://github.com/openssl/openssl/commit/cf6f91f6121f4db167405db2f0de410a456f260c',
-                'https://github.com/openssl/openssl/commit/e86ac436f0bd54d4517745483e2315650fae7b2c',
-                'https://github.openssl.org/openssl/extended-releases/commit/9947251413065a05189a63c9b7a6c1d4e224c21c',
-                'https://github.openssl.org/openssl/extended-releases/commit/b78ec0824da857223486660177d3b1f255c65d87',
-                'https://linux.oracle.com/cve/CVE-2024-5535.html',
-                'https://linux.oracle.com/errata/ELSA-2025-1673.html',
-                'https://lists.debian.org/debian-lts-announce/2024/10/msg00033.html',
-                'https://lists.debian.org/debian-lts-announce/2024/11/msg00000.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2024-5535',
-                'https://openssl.org/news/secadv/20240627.txt',
-                'https://security.netapp.com/advisory/ntap-20240712-0005/',
-                'https://security.netapp.com/advisory/ntap-20241025-0006/',
-                'https://security.netapp.com/advisory/ntap-20241025-0010/',
-                'https://ubuntu.com/security/notices/USN-6937-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2024-5535',
-                'https://www.openssl.org/news/secadv/20240627.txt',
-                'https://www.oracle.com/security-alerts/cpuoct2024.html#AppendixMSQL'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: SSL_select_next_proto buffer overread'
-            },
-            {
-              'cve':  'CVE-2024-2511',
-              'cvss': {
-                'redhat': {
-                  'v3score':  '3.7',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L'
-                }
-              },
-              'cwes': [
-                'CWE-1325'
-              ],
-              'description':   'Issue summary: Some non-default TLS server configurations can cause unbounded\nmemory growth when processing TLSv1.3 sessions\n\nImpact summary: An attacker may exploit certain server configurations to trigger\nunbounded memory growth that would lead to a Denial of Service\n\nThis problem can occur in TLSv1.3 if the non-default SSL_OP_NO_TICKET option is\nbeing used (but not if early_data support is also configured and the default\nanti-replay protection is in use). In this case, under certain conditions, the\nsession cache can get into an incorrect state and it will fail to flush properly\nas it fills. The session cache will continue to grow in an unbounded manner. A\nmalicious client could deliberately create the scenario for this failure to\nforce a Denial of Service. It may also happen by accident in normal operation.\n\nThis issue only affects TLS servers supporting TLSv1.3. It does not affect TLS\nclients.\n\nThe FIPS modules in 3.2, 3.1 and 3.0 are not affected by this issue. OpenSSL\n1.0.2 is also not affected by this issue.',
-              'diffID':        'sha256:383269fd0d7d9a5f547ad63131df9c00938dbbb23170a498357bc9fb5cd0948a',
-              'fixedVersions': [
-                '3.0.12-r5'
-              ],
-              'installedVersion': '3.0.7-r2',
-              'packageName':      'libcrypto3',
-              'purl':             'pkg:apk/alpine/libcrypto3@3.0.7-r2?arch=armv7&distro=3.17.1',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2024/04/08/5',
-                'https://access.redhat.com/errata/RHSA-2024:9333',
-                'https://access.redhat.com/security/cve/CVE-2024-2511',
-                'https://bugzilla.redhat.com/2274020',
-                'https://bugzilla.redhat.com/2281029',
-                'https://bugzilla.redhat.com/2283757',
-                'https://bugzilla.redhat.com/2294581',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2274020',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2281029',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2283757',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2294581',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-2511',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-4603',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-4741',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-5535',
-                'https://errata.almalinux.org/9/ALSA-2024-9333.html',
-                'https://errata.rockylinux.org/RLSA-2024:9333',
-                'https://github.com/openssl/openssl/commit/7e4d731b1c07201ad9374c1cd9ac5263bdf35bce',
-                'https://github.com/openssl/openssl/commit/b52867a9f618bb955bed2a3ce3db4d4f97ed8e5d',
-                'https://github.com/openssl/openssl/commit/e9d7083e241670332e0443da0f0d4ffb52829f08',
-                'https://github.openssl.org/openssl/extended-releases/commit/5f8d25770ae6437db119dfc951e207271a326640',
-                'https://linux.oracle.com/cve/CVE-2024-2511.html',
-                'https://linux.oracle.com/errata/ELSA-2024-9333.html',
-                'https://lists.debian.org/debian-lts-announce/2024/10/msg00033.html',
-                'https://lists.debian.org/debian-lts-announce/2024/11/msg00000.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2024-2511',
-                'https://security.netapp.com/advisory/ntap-20240503-0013/',
-                'https://ubuntu.com/security/notices/USN-6937-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2024-2511',
-                'https://www.openssl.org/news/secadv/20240408.txt',
-                'https://www.openssl.org/news/vulnerabilities.html'
-              ],
-              'severity':   'LOW',
-              'suppressed': false,
-              'title':      'openssl: Unbounded memory growth with session handling in TLSv1.3'
-            },
-            {
-              'cve':  'CVE-2024-9143',
-              'cvss': {
-                'redhat': {
-                  'v3score':  '3.7',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L'
-                }
-              },
-              'cwes': [
-                'CWE-125',
-                'CWE-787'
-              ],
-              'description':   "Issue summary: Use of the low-level GF(2^m) elliptic curve APIs with untrusted\nexplicit values for the field polynomial can lead to out-of-bounds memory reads\nor writes.\n\nImpact summary: Out of bound memory writes can lead to an application crash or\neven a possibility of a remote code execution, however, in all the protocols\ninvolving Elliptic Curve Cryptography that we're aware of, either only \"named\ncurves\" are supported, or, if explicit curve parameters are supported, they\nspecify an X9.62 encoding of binary (GF(2^m)) curves that can't represent\nproblematic input values. Thus the likelihood of existence of a vulnerable\napplication is low.\n\nIn particular, the X9.62 encoding is used for ECC keys in X.509 certificates,\nso problematic inputs cannot occur in the context of processing X.509\ncertificates.  Any problematic use-cases would have to be using an \"exotic\"\ncurve encoding.\n\nThe affected APIs include: EC_GROUP_new_curve_GF2m(), EC_GROUP_new_from_params(),\nand various supporting BN_GF2m_*() functions.\n\nApplications working with \"exotic\" explicit binary (GF(2^m)) curve parameters,\nthat make it possible to represent invalid field polynomials with a zero\nconstant term, via the above or similar APIs, may terminate abruptly as a\nresult of reading or writing outside of array bounds.  Remote code execution\ncannot easily be ruled out.\n\nThe FIPS modules in 3.3, 3.2, 3.1 and 3.0 are not affected by this issue.",
-              'diffID':        'sha256:383269fd0d7d9a5f547ad63131df9c00938dbbb23170a498357bc9fb5cd0948a',
-              'fixedVersions': [
-                '3.0.15-r1'
-              ],
-              'installedVersion': '3.0.7-r2',
-              'packageName':      'libcrypto3',
-              'purl':             'pkg:apk/alpine/libcrypto3@3.0.7-r2?arch=armv7&distro=3.17.1',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2024/10/16/1',
-                'http://www.openwall.com/lists/oss-security/2024/10/23/1',
-                'http://www.openwall.com/lists/oss-security/2024/10/24/1',
-                'https://access.redhat.com/security/cve/CVE-2024-9143',
-                'https://github.com/openssl/openssl/commit/72ae83ad214d2eef262461365a1975707f862712',
-                'https://github.com/openssl/openssl/commit/bc7e04d7c8d509fb78fc0e285aa948fb0da04700',
-                'https://github.com/openssl/openssl/commit/c0d3e4d32d2805f49bec30547f225bc4d092e1f4',
-                'https://github.com/openssl/openssl/commit/fdf6723362ca51bd883295efe206cb5b1cfa5154',
-                'https://github.openssl.org/openssl/extended-releases/commit/8efc0cbaa8ebba8e116f7b81a876a4123594d86a',
-                'https://github.openssl.org/openssl/extended-releases/commit/9d576994cec2b7aa37a91740ea7e680810957e41',
-                'https://lists.debian.org/debian-lts-announce/2024/10/msg00033.html',
-                'https://lists.debian.org/debian-lts-announce/2024/11/msg00000.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2024-9143',
-                'https://openssl-library.org/news/secadv/20241016.txt',
-                'https://security.netapp.com/advisory/ntap-20241101-0001/',
-                'https://ubuntu.com/security/notices/USN-7264-1',
-                'https://ubuntu.com/security/notices/USN-7278-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2024-9143'
-              ],
-              'severity':   'LOW',
-              'suppressed': false,
-              'title':      'openssl: Low-level invalid GF(2^m) parameters lead to OOB memory access'
-            },
-            {
-              'cve':  'CVE-2022-4450',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'nvd': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-415'
-              ],
-              'description':   'The function PEM_read_bio_ex() reads a PEM file from a BIO and parses and\ndecodes the "name" (e.g. "CERTIFICATE"), any header data and the payload data.\nIf the function succeeds then the "name_out", "header" and "data" arguments are\npopulated with pointers to buffers containing the relevant decoded data. The\ncaller is responsible for freeing those buffers. It is possible to construct a\nPEM file that results in 0 bytes of payload data. In this case PEM_read_bio_ex()\nwill return a failure code but will populate the header argument with a pointer\nto a buffer that has already been freed. If the caller also frees this buffer\nthen a double free will occur. This will most likely lead to a crash. This\ncould be exploited by an attacker who has the ability to supply malicious PEM\nfiles for parsing to achieve a denial of service attack.\n\nThe functions PEM_read_bio() and PEM_read() are simple wrappers around\nPEM_read_bio_ex() and therefore these functions are also directly affected.\n\nThese functions are also called indirectly by a number of other OpenSSL\nfunctions including PEM_X509_INFO_read_bio_ex() and\nSSL_CTX_use_serverinfo_file() which are also vulnerable. Some OpenSSL internal\nuses of these functions are not vulnerable because the caller does not free the\nheader argument if PEM_read_bio_ex() returns a failure code. These locations\ninclude the PEM_read_bio_TYPE() functions as well as the decoders introduced in\nOpenSSL 3.0.\n\nThe OpenSSL asn1parse command line application is also impacted by this issue.',
-              'diffID':        'sha256:383269fd0d7d9a5f547ad63131df9c00938dbbb23170a498357bc9fb5cd0948a',
-              'fixedVersions': [
-                '3.0.8-r0'
-              ],
-              'installedVersion': '3.0.7-r2',
-              'packageName':      'libssl3',
-              'purl':             'pkg:apk/alpine/libssl3@3.0.7-r2?arch=armv7&distro=3.17.1',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2023:2165',
-                'https://access.redhat.com/security/cve/CVE-2022-4450',
-                'https://bugzilla.redhat.com/1960321',
-                'https://bugzilla.redhat.com/2164440',
-                'https://bugzilla.redhat.com/2164487',
-                'https://bugzilla.redhat.com/2164492',
-                'https://bugzilla.redhat.com/2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144000',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144003',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144006',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144008',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144010',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144012',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144015',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144017',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144019',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2145170',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2158412',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164440',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164487',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164488',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164492',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164497',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164499',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164500',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4203',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4304',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4450',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0215',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0216',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0217',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0286',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0401',
-                'https://errata.almalinux.org/9/ALSA-2023-2165.html',
-                'https://errata.rockylinux.org/RLSA-2023:0946',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=63bcf189be73a9cc1264059bed6f57974be74a83',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=bbcf509bd046b34cca19c766bbddc31683d0858b',
-                'https://linux.oracle.com/cve/CVE-2022-4450.html',
-                'https://linux.oracle.com/errata/ELSA-2023-32791.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2022-4450',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0003',
-                'https://rustsec.org/advisories/RUSTSEC-2023-0010.html',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://ubuntu.com/security/notices/USN-5844-1',
-                'https://ubuntu.com/security/notices/USN-6564-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2022-4450',
-                'https://www.openssl.org/news/secadv/20230207.txt'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: double free after calling PEM_read_bio_ex'
-            },
-            {
-              'cve':  'CVE-2023-0215',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'nvd': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   'The public API function BIO_new_NDEF is a helper function used for streaming\nASN.1 data via a BIO. It is primarily used internally to OpenSSL to support the\nSMIME, CMS and PKCS7 streaming capabilities, but may also be called directly by\nend user applications.\n\nThe function receives a BIO from the caller, prepends a new BIO_f_asn1 filter\nBIO onto the front of it to form a BIO chain, and then returns the new head of\nthe BIO chain to the caller. Under certain conditions, for example if a CMS\nrecipient public key is invalid, the new filter BIO is freed and the function\nreturns a NULL result indicating a failure. However, in this case, the BIO chain\nis not properly cleaned up and the BIO passed by the caller still retains\ninternal pointers to the previously freed filter BIO. If the caller then goes on\nto call BIO_pop() on the BIO then a use-after-free will occur. This will most\nlikely result in a crash.\n\n\n\nThis scenario occurs directly in the internal function B64_write_ASN1() which\nmay cause BIO_new_NDEF() to be called and will subsequently call BIO_pop() on\nthe BIO. This internal function is in turn called by the public API functions\nPEM_write_bio_ASN1_stream, PEM_write_bio_CMS_stream, PEM_write_bio_PKCS7_stream,\nSMIME_write_ASN1, SMIME_write_CMS and SMIME_write_PKCS7.\n\nOther public API functions that may be impacted by this include\ni2d_ASN1_bio_stream, BIO_new_CMS, BIO_new_PKCS7, i2d_CMS_bio_stream and\ni2d_PKCS7_bio_stream.\n\nThe OpenSSL cms and smime command line applications are similarly affected.',
-              'diffID':        'sha256:383269fd0d7d9a5f547ad63131df9c00938dbbb23170a498357bc9fb5cd0948a',
-              'fixedVersions': [
-                '3.0.8-r0'
-              ],
-              'installedVersion': '3.0.7-r2',
-              'packageName':      'libssl3',
-              'purl':             'pkg:apk/alpine/libssl3@3.0.7-r2?arch=armv7&distro=3.17.1',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2023:2165',
-                'https://access.redhat.com/security/cve/CVE-2023-0215',
-                'https://bugzilla.redhat.com/1960321',
-                'https://bugzilla.redhat.com/2164440',
-                'https://bugzilla.redhat.com/2164487',
-                'https://bugzilla.redhat.com/2164492',
-                'https://bugzilla.redhat.com/2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144000',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144003',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144006',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144008',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144010',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144012',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144015',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144017',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144019',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2145170',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2158412',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164440',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164487',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164488',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164492',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164497',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164499',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164500',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4203',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4304',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4450',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0215',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0216',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0217',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0286',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0401',
-                'https://errata.almalinux.org/9/ALSA-2023-2165.html',
-                'https://errata.rockylinux.org/RLSA-2023:0946',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=8818064ce3c3c0f1b740a5aaba2a987e75bfbafd',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=9816136fe31d92ace4037d5da5257f763aeeb4eb',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=c3829dd8825c654652201e16f8a0a0c46ee3f344',
-                'https://linux.oracle.com/cve/CVE-2023-0215.html',
-                'https://linux.oracle.com/errata/ELSA-2023-32791.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-0215',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0003',
-                'https://rustsec.org/advisories/RUSTSEC-2023-0009.html',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://security.netapp.com/advisory/ntap-20230427-0007',
-                'https://security.netapp.com/advisory/ntap-20230427-0007/',
-                'https://security.netapp.com/advisory/ntap-20230427-0009',
-                'https://security.netapp.com/advisory/ntap-20230427-0009/',
-                'https://security.netapp.com/advisory/ntap-20240621-0006',
-                'https://security.netapp.com/advisory/ntap-20240621-0006/',
-                'https://ubuntu.com/security/notices/USN-5844-1',
-                'https://ubuntu.com/security/notices/USN-5845-1',
-                'https://ubuntu.com/security/notices/USN-5845-2',
-                'https://ubuntu.com/security/notices/USN-6564-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-0215',
-                'https://www.openssl.org/news/secadv/20230207.txt'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: use-after-free following BIO_new_NDEF'
-            },
-            {
-              'cve':  'CVE-2023-0216',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'nvd': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-476'
-              ],
-              'description':   'An invalid pointer dereference on read can be triggered when an\napplication tries to load malformed PKCS7 data with the\nd2i_PKCS7(), d2i_PKCS7_bio() or d2i_PKCS7_fp() functions.\n\nThe result of the dereference is an application crash which could\nlead to a denial of service attack. The TLS implementation in OpenSSL\ndoes not call this function however third party applications might\ncall these functions on untrusted data.',
-              'diffID':        'sha256:383269fd0d7d9a5f547ad63131df9c00938dbbb23170a498357bc9fb5cd0948a',
-              'fixedVersions': [
-                '3.0.8-r0'
-              ],
-              'installedVersion': '3.0.7-r2',
-              'packageName':      'libssl3',
-              'purl':             'pkg:apk/alpine/libssl3@3.0.7-r2?arch=armv7&distro=3.17.1',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2023:0946',
-                'https://access.redhat.com/security/cve/CVE-2023-0216',
-                'https://bugzilla.redhat.com/2164440',
-                'https://bugzilla.redhat.com/2164487',
-                'https://bugzilla.redhat.com/2164488',
-                'https://bugzilla.redhat.com/2164492',
-                'https://bugzilla.redhat.com/2164494',
-                'https://bugzilla.redhat.com/2164497',
-                'https://bugzilla.redhat.com/2164499',
-                'https://bugzilla.redhat.com/2164500',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144000',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144003',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144006',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144008',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144010',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144012',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144015',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144017',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144019',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2145170',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2158412',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164440',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164487',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164488',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164492',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164497',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164499',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164500',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4203',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4304',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4450',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0215',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0216',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0217',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0286',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0401',
-                'https://errata.almalinux.org/9/ALSA-2023-0946.html',
-                'https://errata.rockylinux.org/RLSA-2023:0946',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=934a04f0e775309cadbef0aa6b9692e1b12a76c6',
-                'https://linux.oracle.com/cve/CVE-2023-0216.html',
-                'https://linux.oracle.com/errata/ELSA-2023-12152.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-0216',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0003',
-                'https://rustsec.org/advisories/RUSTSEC-2023-0011.html',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://ubuntu.com/security/notices/USN-5844-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-0216',
-                'https://www.openssl.org/news/secadv/20230207.txt'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: invalid pointer dereference in d2i_PKCS7 functions'
-            },
-            {
-              'cve':  'CVE-2023-0217',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'nvd': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-476'
-              ],
-              'description':   'An invalid pointer dereference on read can be triggered when an\napplication tries to check a malformed DSA public key by the\nEVP_PKEY_public_check() function. This will most likely lead\nto an application crash. This function can be called on public\nkeys supplied from untrusted sources which could allow an attacker\nto cause a denial of service attack.\n\nThe TLS implementation in OpenSSL does not call this function\nbut applications might call the function if there are additional\nsecurity requirements imposed by standards such as FIPS 140-3.',
-              'diffID':        'sha256:383269fd0d7d9a5f547ad63131df9c00938dbbb23170a498357bc9fb5cd0948a',
-              'fixedVersions': [
-                '3.0.8-r0'
-              ],
-              'installedVersion': '3.0.7-r2',
-              'packageName':      'libssl3',
-              'purl':             'pkg:apk/alpine/libssl3@3.0.7-r2?arch=armv7&distro=3.17.1',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2023:0946',
-                'https://access.redhat.com/security/cve/CVE-2023-0217',
-                'https://bugzilla.redhat.com/2164440',
-                'https://bugzilla.redhat.com/2164487',
-                'https://bugzilla.redhat.com/2164488',
-                'https://bugzilla.redhat.com/2164492',
-                'https://bugzilla.redhat.com/2164494',
-                'https://bugzilla.redhat.com/2164497',
-                'https://bugzilla.redhat.com/2164499',
-                'https://bugzilla.redhat.com/2164500',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144000',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144003',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144006',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144008',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144010',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144012',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144015',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144017',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144019',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2145170',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2158412',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164440',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164487',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164488',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164492',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164497',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164499',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164500',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4203',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4304',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4450',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0215',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0216',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0217',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0286',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0401',
-                'https://errata.almalinux.org/9/ALSA-2023-0946.html',
-                'https://errata.rockylinux.org/RLSA-2023:0946',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=23985bac83fd50c8e29431009302b5442f985096',
-                'https://linux.oracle.com/cve/CVE-2023-0217.html',
-                'https://linux.oracle.com/errata/ELSA-2023-12152.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-0217',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0003',
-                'https://rustsec.org/advisories/RUSTSEC-2023-0012.html',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://ubuntu.com/security/notices/USN-5844-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-0217',
-                'https://www.openssl.org/news/secadv/20230207.txt'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: NULL dereference validating DSA public key'
-            },
-            {
-              'cve':  'CVE-2023-0286',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '7.4',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H'
-                },
-                'nvd': {
-                  'v3score':  '7.4',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.4',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-843'
-              ],
-              'description':   'There is a type confusion vulnerability relating to X.400 address processing\ninside an X.509 GeneralName. X.400 addresses were parsed as an ASN1_STRING but\nthe public structure definition for GENERAL_NAME incorrectly specified the type\nof the x400Address field as ASN1_TYPE. This field is subsequently interpreted by\nthe OpenSSL function GENERAL_NAME_cmp as an ASN1_TYPE rather than an\nASN1_STRING.\n\nWhen CRL checking is enabled (i.e. the application sets the\nX509_V_FLAG_CRL_CHECK flag), this vulnerability may allow an attacker to pass\narbitrary pointers to a memcmp call, enabling them to read memory contents or\nenact a denial of service. In most cases, the attack requires the attacker to\nprovide both the certificate chain and CRL, neither of which need to have a\nvalid signature. If the attacker only controls one of these inputs, the other\ninput must already contain an X.400 address as a CRL distribution point, which\nis uncommon. As such, this vulnerability is most likely to only affect\napplications which have implemented their own functionality for retrieving CRLs\nover a network.',
-              'diffID':        'sha256:383269fd0d7d9a5f547ad63131df9c00938dbbb23170a498357bc9fb5cd0948a',
-              'fixedVersions': [
-                '3.0.8-r0'
-              ],
-              'installedVersion': '3.0.7-r2',
-              'packageName':      'libssl3',
-              'purl':             'pkg:apk/alpine/libssl3@3.0.7-r2?arch=armv7&distro=3.17.1',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2025:7937',
-                'https://access.redhat.com/security/cve/CVE-2023-0286',
-                'https://access.redhat.com/security/cve/cve-2023-0286',
-                'https://bugzilla.redhat.com/2164440',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144000',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144003',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144006',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144008',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144010',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144012',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144015',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144017',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144019',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2145170',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2158412',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164440',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164487',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164488',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164492',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164497',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164499',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164500',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4203',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4304',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4450',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0215',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0216',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0217',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0286',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0401',
-                'https://errata.almalinux.org/9/ALSA-2025-7937.html',
-                'https://errata.rockylinux.org/RLSA-2023:0946',
-                'https://ftp.openbsd.org/pub/OpenBSD/LibreSSL/libressl-3.6.2-relnotes.txt',
-                'https://ftp.openbsd.org/pub/OpenBSD/patches/7.2/common/018_x509.patch.sig',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=2c6c9d439b484e1ba9830d8454a34fa4f80fdfe9',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=2f7530077e0ef79d98718138716bc51ca0cad658',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=fd2af07dc083a350c959147097003a14a5e8ac4d',
-                'https://github.com/pyca/cryptography',
-                'https://github.com/pyca/cryptography/security/advisories/GHSA-x4qr-2fvf-3mr5',
-                'https://linux.oracle.com/cve/CVE-2023-0286.html',
-                'https://linux.oracle.com/errata/ELSA-2025-7937.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-0286',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0003',
-                'https://rustsec.org/advisories/RUSTSEC-2023-0006.html',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://ubuntu.com/security/notices/USN-5844-1',
-                'https://ubuntu.com/security/notices/USN-5845-1',
-                'https://ubuntu.com/security/notices/USN-5845-2',
-                'https://ubuntu.com/security/notices/USN-6564-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-0286',
-                'https://www.openssl.org/news/secadv/20230207.txt'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: X.400 address type confusion in X.509 GeneralName'
-            },
-            {
-              'cve':  'CVE-2023-0401',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'nvd': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-476'
-              ],
-              'description':   'A NULL pointer can be dereferenced when signatures are being\nverified on PKCS7 signed or signedAndEnveloped data. In case the hash\nalgorithm used for the signature is known to the OpenSSL library but\nthe implementation of the hash algorithm is not available the digest\ninitialization will fail. There is a missing check for the return\nvalue from the initialization function which later leads to invalid\nusage of the digest API most likely leading to a crash.\n\nThe unavailability of an algorithm can be caused by using FIPS\nenabled configuration of providers or more commonly by not loading\nthe legacy provider.\n\nPKCS7 data is processed by the SMIME library calls and also by the\ntime stamp (TS) library calls. The TLS implementation in OpenSSL does\nnot call these functions however third party applications would be\naffected if they call these functions to verify signatures on untrusted\ndata.',
-              'diffID':        'sha256:383269fd0d7d9a5f547ad63131df9c00938dbbb23170a498357bc9fb5cd0948a',
-              'fixedVersions': [
-                '3.0.8-r0'
-              ],
-              'installedVersion': '3.0.7-r2',
-              'packageName':      'libssl3',
-              'purl':             'pkg:apk/alpine/libssl3@3.0.7-r2?arch=armv7&distro=3.17.1',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2023:0946',
-                'https://access.redhat.com/security/cve/CVE-2023-0401',
-                'https://bugzilla.redhat.com/2164440',
-                'https://bugzilla.redhat.com/2164487',
-                'https://bugzilla.redhat.com/2164488',
-                'https://bugzilla.redhat.com/2164492',
-                'https://bugzilla.redhat.com/2164494',
-                'https://bugzilla.redhat.com/2164497',
-                'https://bugzilla.redhat.com/2164499',
-                'https://bugzilla.redhat.com/2164500',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144000',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144003',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144006',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144008',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144010',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144012',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144015',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144017',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144019',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2145170',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2158412',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164440',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164487',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164488',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164492',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164497',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164499',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164500',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4203',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4304',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4450',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0215',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0216',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0217',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0286',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0401',
-                'https://errata.almalinux.org/9/ALSA-2023-0946.html',
-                'https://errata.rockylinux.org/RLSA-2023:0946',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=d3b6dfd70db844c4499bec6ad6601623a565e674',
-                'https://github.com/alexcrichton/openssl-src-rs',
-                'https://linux.oracle.com/cve/CVE-2023-0401.html',
-                'https://linux.oracle.com/errata/ELSA-2023-12152.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-0401',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0003',
-                'https://rustsec.org/advisories/RUSTSEC-2023-0013.html',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://ubuntu.com/security/notices/USN-5844-1',
-                'https://ubuntu.com/security/notices/USN-6564-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-0401',
-                'https://www.openssl.org/news/secadv/20230207.txt'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: NULL dereference during PKCS7 data verification'
-            },
-            {
-              'cve':  'CVE-2023-0464',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-295'
-              ],
-              'description':   "A security vulnerability has been identified in all supported versions\n\nof OpenSSL related to the verification of X.509 certificate chains\nthat include policy constraints.  Attackers may be able to exploit this\nvulnerability by creating a malicious certificate chain that triggers\nexponential use of computational resources, leading to a denial-of-service\n(DoS) attack on affected systems.\n\nPolicy processing is disabled by default but can be enabled by passing\nthe `-policy' argument to the command line utilities or by calling the\n`X509_VERIFY_PARAM_set1_policies()' function.",
-              'diffID':        'sha256:383269fd0d7d9a5f547ad63131df9c00938dbbb23170a498357bc9fb5cd0948a',
-              'fixedVersions': [
-                '3.0.8-r1'
-              ],
-              'installedVersion': '3.0.7-r2',
-              'packageName':      'libssl3',
-              'purl':             'pkg:apk/alpine/libssl3@3.0.7-r2?arch=armv7&distro=3.17.1',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2023:3722',
-                'https://access.redhat.com/security/cve/CVE-2023-0464',
-                'https://bugzilla.redhat.com/2181082',
-                'https://bugzilla.redhat.com/2182561',
-                'https://bugzilla.redhat.com/2182565',
-                'https://bugzilla.redhat.com/2188461',
-                'https://bugzilla.redhat.com/2207947',
-                'https://errata.almalinux.org/9/ALSA-2023-3722.html',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=2017771e2db3e2b96f89bbe8766c3209f6a99545',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=2dcd4f1e3115f38cefa43e3efbe9b801c27e642e',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=879f7080d7e141f415c79eaa3a8ac4a3dad0348b',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=959c59c7a0164117e7f8366466a32bb1f8d77ff1',
-                'https://linux.oracle.com/cve/CVE-2023-0464.html',
-                'https://linux.oracle.com/errata/ELSA-2023-3722.html',
-                'https://lists.debian.org/debian-lts-announce/2023/06/msg00011.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-0464',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://security.netapp.com/advisory/ntap-20230406-0006/',
-                'https://security.netapp.com/advisory/ntap-20240621-0006/',
-                'https://ubuntu.com/security/notices/USN-6039-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.couchbase.com/alerts/',
-                'https://www.cve.org/CVERecord?id=CVE-2023-0464',
-                'https://www.debian.org/security/2023/dsa-5417',
-                'https://www.openssl.org/news/secadv/20230322.txt'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: Denial of service by excessive resource usage in verifying X509 policy constraints'
-            },
-            {
-              'cve':  'CVE-2023-5363',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N'
-                },
-                'redhat': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-684'
-              ],
-              'description':   "Issue summary: A bug has been identified in the processing of key and\ninitialisation vector (IV) lengths.  This can lead to potential truncation\nor overruns during the initialisation of some symmetric ciphers.\n\nImpact summary: A truncation in the IV can result in non-uniqueness,\nwhich could result in loss of confidentiality for some cipher modes.\n\nWhen calling EVP_EncryptInit_ex2(), EVP_DecryptInit_ex2() or\nEVP_CipherInit_ex2() the provided OSSL_PARAM array is processed after\nthe key and IV have been established.  Any alterations to the key length,\nvia the \"keylen\" parameter or the IV length, via the \"ivlen\" parameter,\nwithin the OSSL_PARAM array will not take effect as intended, potentially\ncausing truncation or overreading of these values.  The following ciphers\nand cipher modes are impacted: RC2, RC4, RC5, CCM, GCM and OCB.\n\nFor the CCM, GCM and OCB cipher modes, truncation of the IV can result in\nloss of confidentiality.  For example, when following NIST's SP 800-38D\nsection 8.2.1 guidance for constructing a deterministic IV for AES in\nGCM mode, truncation of the counter portion could lead to IV reuse.\n\nBoth truncations and overruns of the key and overruns of the IV will\nproduce incorrect results and could, in some cases, trigger a memory\nexception.  However, these issues are not currently assessed as security\ncritical.\n\nChanging the key and/or IV lengths is not considered to be a common operation\nand the vulnerable API was recently introduced. Furthermore it is likely that\napplication developers will have spotted this problem during testing since\ndecryption would fail unless both peers in the communication were similarly\nvulnerable. For these reasons we expect the probability of an application being\nvulnerable to this to be quite low. However if an application is vulnerable then\nthis issue is considered very serious. For these reasons we have assessed this\nissue as Moderate severity overall.\n\nThe OpenSSL SSL/TLS implementation is not affected by this issue.\n\nThe OpenSSL 3.0 and 3.1 FIPS providers are not affected by this because\nthe issue lies outside of the FIPS provider boundary.\n\nOpenSSL 3.1 and 3.0 are vulnerable to this issue.",
-              'diffID':        'sha256:383269fd0d7d9a5f547ad63131df9c00938dbbb23170a498357bc9fb5cd0948a',
-              'fixedVersions': [
-                '3.0.12-r0'
-              ],
-              'installedVersion': '3.0.7-r2',
-              'packageName':      'libssl3',
-              'purl':             'pkg:apk/alpine/libssl3@3.0.7-r2?arch=armv7&distro=3.17.1',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2023/10/24/1',
-                'https://access.redhat.com/errata/RHSA-2024:0310',
-                'https://access.redhat.com/security/cve/CVE-2023-5363',
-                'https://bugzilla.redhat.com/2243839',
-                'https://errata.almalinux.org/9/ALSA-2024-0310.html',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=0df40630850fb2740e6be6890bb905d3fc623b2d',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=5f69f5c65e483928c4b28ed16af6e5742929f1ee',
-                'https://linux.oracle.com/cve/CVE-2023-5363.html',
-                'https://linux.oracle.com/errata/ELSA-2024-12093.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-5363',
-                'https://security.netapp.com/advisory/ntap-20231027-0010/',
-                'https://security.netapp.com/advisory/ntap-20240201-0003/',
-                'https://security.netapp.com/advisory/ntap-20240201-0004/',
-                'https://security.netapp.com/advisory/ntap-20241108-0002/',
-                'https://ubuntu.com/security/notices/USN-6450-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-5363',
-                'https://www.debian.org/security/2023/dsa-5532',
-                'https://www.openssl.org/news/secadv/20231024.txt'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: Incorrect cipher key and IV length processing'
-            },
-            {
-              'cve':  'CVE-2024-6119',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-843'
-              ],
-              'description':   "Issue summary: Applications performing certificate name checks (e.g., TLS\nclients checking server certificates) may attempt to read an invalid memory\naddress resulting in abnormal termination of the application process.\n\nImpact summary: Abnormal termination of an application can a cause a denial of\nservice.\n\nApplications performing certificate name checks (e.g., TLS clients checking\nserver certificates) may attempt to read an invalid memory address when\ncomparing the expected name with an `otherName` subject alternative name of an\nX.509 certificate. This may result in an exception that terminates the\napplication program.\n\nNote that basic certificate chain validation (signatures, dates, ...) is not\naffected, the denial of service can occur only when the application also\nspecifies an expected DNS name, Email address or IP address.\n\nTLS servers rarely solicit client certificates, and even when they do, they\ngenerally don't perform a name check against a reference identifier (expected\nidentity), but rather extract the presented identity after checking the\ncertificate chain.  So TLS servers are generally not affected and the severity\nof the issue is Moderate.\n\nThe FIPS modules in 3.3, 3.2, 3.1 and 3.0 are not affected by this issue.",
-              'diffID':        'sha256:383269fd0d7d9a5f547ad63131df9c00938dbbb23170a498357bc9fb5cd0948a',
-              'fixedVersions': [
-                '3.0.15-r0'
-              ],
-              'installedVersion': '3.0.7-r2',
-              'packageName':      'libssl3',
-              'purl':             'pkg:apk/alpine/libssl3@3.0.7-r2?arch=armv7&distro=3.17.1',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2024/09/03/4',
-                'https://access.redhat.com/errata/RHSA-2024:8935',
-                'https://access.redhat.com/security/cve/CVE-2024-6119',
-                'https://bugzilla.redhat.com/2306158',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2306158',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-6119',
-                'https://errata.almalinux.org/9/ALSA-2024-8935.html',
-                'https://errata.rockylinux.org/RLSA-2024:6783',
-                'https://github.com/openssl/openssl/commit/05f360d9e849a1b277db628f1f13083a7f8dd04f',
-                'https://github.com/openssl/openssl/commit/06d1dc3fa96a2ba5a3e22735a033012aadc9f0d6',
-                'https://github.com/openssl/openssl/commit/621f3729831b05ee828a3203eddb621d014ff2b2',
-                'https://github.com/openssl/openssl/commit/7dfcee2cd2a63b2c64b9b4b0850be64cb695b0a0',
-                'https://github.com/openssl/openssl/security/advisories/GHSA-5qrj-vq78-58fj',
-                'https://linux.oracle.com/cve/CVE-2024-6119.html',
-                'https://linux.oracle.com/errata/ELSA-2024-8935.html',
-                'https://lists.freebsd.org/archives/freebsd-security/2024-September/000303.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2024-6119',
-                'https://openssl-library.org/news/secadv/20240903.txt',
-                'https://security.netapp.com/advisory/ntap-20240912-0001/',
-                'https://ubuntu.com/security/notices/USN-6986-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2024-6119'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: Possible denial of service in X.509 name checks'
-            },
-            {
-              'cve':  'CVE-2022-4203',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '9.1',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H'
-                },
-                'nvd': {
-                  'v3score':  '4.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '4.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-125'
-              ],
-              'description':   'A read buffer overrun can be triggered in X.509 certificate verification,\nspecifically in name constraint checking. Note that this occurs\nafter certificate chain signature verification and requires either a\nCA to have signed the malicious certificate or for the application to\ncontinue certificate verification despite failure to construct a path\nto a trusted issuer.\n\nThe read buffer overrun might result in a crash which could lead to\na denial of service attack. In theory it could also result in the disclosure\nof private memory contents (such as private keys, or sensitive plaintext)\nalthough we are not aware of any working exploit leading to memory\ncontents disclosure as of the time of release of this advisory.\n\nIn a TLS client, this can be triggered by connecting to a malicious\nserver. In a TLS server, this can be triggered if the server requests\nclient authentication and a malicious client connects.',
-              'diffID':        'sha256:383269fd0d7d9a5f547ad63131df9c00938dbbb23170a498357bc9fb5cd0948a',
-              'fixedVersions': [
-                '3.0.8-r0'
-              ],
-              'installedVersion': '3.0.7-r2',
-              'packageName':      'libssl3',
-              'purl':             'pkg:apk/alpine/libssl3@3.0.7-r2?arch=armv7&distro=3.17.1',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2023:0946',
-                'https://access.redhat.com/security/cve/CVE-2022-4203',
-                'https://bugzilla.redhat.com/2164440',
-                'https://bugzilla.redhat.com/2164487',
-                'https://bugzilla.redhat.com/2164488',
-                'https://bugzilla.redhat.com/2164492',
-                'https://bugzilla.redhat.com/2164494',
-                'https://bugzilla.redhat.com/2164497',
-                'https://bugzilla.redhat.com/2164499',
-                'https://bugzilla.redhat.com/2164500',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144000',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144003',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144006',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144008',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144010',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144012',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144015',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144017',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144019',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2145170',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2158412',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164440',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164487',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164488',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164492',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164497',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164499',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164500',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4203',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4304',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4450',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0215',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0216',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0217',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0286',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0401',
-                'https://errata.almalinux.org/9/ALSA-2023-0946.html',
-                'https://errata.rockylinux.org/RLSA-2023:0946',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=c927a3492698c254637da836762f9b1f86cffabc',
-                'https://linux.oracle.com/cve/CVE-2022-4203.html',
-                'https://linux.oracle.com/errata/ELSA-2023-12152.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2022-4203',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0003',
-                'https://rustsec.org/advisories/RUSTSEC-2023-0008.html',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://ubuntu.com/security/notices/USN-5844-1',
-                'https://www.cve.org/CVERecord?id=CVE-2022-4203',
-                'https://www.openssl.org/news/secadv/20230207.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: read buffer overflow in X.509 certificate verification'
-            },
-            {
-              'cve':  'CVE-2022-4304',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N'
-                },
-                'nvd': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N'
-                },
-                'redhat': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-203'
-              ],
-              'description':   'A timing based side channel exists in the OpenSSL RSA Decryption implementation\nwhich could be sufficient to recover a plaintext across a network in a\nBleichenbacher style attack. To achieve a successful decryption an attacker\nwould have to be able to send a very large number of trial messages for\ndecryption. The vulnerability affects all RSA padding modes: PKCS#1 v1.5,\nRSA-OEAP and RSASVE.\n\nFor example, in a TLS connection, RSA is commonly used by a client to send an\nencrypted pre-master secret to the server. An attacker that had observed a\ngenuine connection between a client and a server could use this flaw to send\ntrial messages to the server and record the time taken to process them. After a\nsufficiently large number of messages the attacker could recover the pre-master\nsecret used for the original connection and thus be able to decrypt the\napplication data sent over that connection.',
-              'diffID':        'sha256:383269fd0d7d9a5f547ad63131df9c00938dbbb23170a498357bc9fb5cd0948a',
-              'fixedVersions': [
-                '3.0.8-r0'
-              ],
-              'installedVersion': '3.0.7-r2',
-              'packageName':      'libssl3',
-              'purl':             'pkg:apk/alpine/libssl3@3.0.7-r2?arch=armv7&distro=3.17.1',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2023:2165',
-                'https://access.redhat.com/security/cve/CVE-2022-4304',
-                'https://bugzilla.redhat.com/1960321',
-                'https://bugzilla.redhat.com/2164440',
-                'https://bugzilla.redhat.com/2164487',
-                'https://bugzilla.redhat.com/2164492',
-                'https://bugzilla.redhat.com/2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144000',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144003',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144006',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144008',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144010',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144012',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144015',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144017',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144019',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2145170',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2158412',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164440',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164487',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164488',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164492',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164497',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164499',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164500',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4203',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4304',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4450',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0215',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0216',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0217',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0286',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0401',
-                'https://errata.almalinux.org/9/ALSA-2023-2165.html',
-                'https://errata.rockylinux.org/RLSA-2023:0946',
-                'https://linux.oracle.com/cve/CVE-2022-4304.html',
-                'https://linux.oracle.com/errata/ELSA-2023-32791.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2022-4304',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0003',
-                'https://rustsec.org/advisories/RUSTSEC-2023-0007.html',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://ubuntu.com/security/notices/USN-5844-1',
-                'https://ubuntu.com/security/notices/USN-6564-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2022-4304',
-                'https://www.openssl.org/news/secadv/20230207.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: timing attack in RSA Decryption implementation'
-            },
-            {
-              'cve':  'CVE-2023-0465',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N'
-                },
-                'redhat': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-295'
-              ],
-              'description':   "Applications that use a non-default option when verifying certificates may be\nvulnerable to an attack from a malicious CA to circumvent certain checks.\n\nInvalid certificate policies in leaf certificates are silently ignored by\nOpenSSL and other certificate policy checks are skipped for that certificate.\nA malicious CA could use this to deliberately assert invalid certificate policies\nin order to circumvent policy checking on the certificate altogether.\n\nPolicy processing is disabled by default but can be enabled by passing\nthe `-policy' argument to the command line utilities or by calling the\n`X509_VERIFY_PARAM_set1_policies()' function.",
-              'diffID':        'sha256:383269fd0d7d9a5f547ad63131df9c00938dbbb23170a498357bc9fb5cd0948a',
-              'fixedVersions': [
-                '3.0.8-r2'
-              ],
-              'installedVersion': '3.0.7-r2',
-              'packageName':      'libssl3',
-              'purl':             'pkg:apk/alpine/libssl3@3.0.7-r2?arch=armv7&distro=3.17.1',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2023:3722',
-                'https://access.redhat.com/security/cve/CVE-2023-0465',
-                'https://bugzilla.redhat.com/2181082',
-                'https://bugzilla.redhat.com/2182561',
-                'https://bugzilla.redhat.com/2182565',
-                'https://bugzilla.redhat.com/2188461',
-                'https://bugzilla.redhat.com/2207947',
-                'https://errata.almalinux.org/9/ALSA-2023-3722.html',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=10325176f3d3e98c6e2b3bf5ab1e3b334de6947a',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=1dd43e0709fece299b15208f36cc7c76209ba0bb',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=b013765abfa80036dc779dd0e50602c57bb3bf95',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=facfb1ab745646e97a1920977ae4a9965ea61d5c',
-                'https://linux.oracle.com/cve/CVE-2023-0465.html',
-                'https://linux.oracle.com/errata/ELSA-2023-3722.html',
-                'https://lists.debian.org/debian-lts-announce/2023/06/msg00011.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-0465',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://security.netapp.com/advisory/ntap-20230414-0001/',
-                'https://ubuntu.com/security/notices/USN-6039-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-0465',
-                'https://www.debian.org/security/2023/dsa-5417',
-                'https://www.openssl.org/news/secadv/20230328.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: Invalid certificate policies in leaf certificates are silently ignored'
-            },
-            {
-              'cve':  'CVE-2023-0466',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N'
-                },
-                'redhat': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-295'
-              ],
-              'description':   'The function X509_VERIFY_PARAM_add0_policy() is documented to\nimplicitly enable the certificate policy check when doing certificate\nverification. However the implementation of the function does not\nenable the check which allows certificates with invalid or incorrect\npolicies to pass the certificate verification.\n\nAs suddenly enabling the policy check could break existing deployments it was\ndecided to keep the existing behavior of the X509_VERIFY_PARAM_add0_policy()\nfunction.\n\nInstead the applications that require OpenSSL to perform certificate\npolicy check need to use X509_VERIFY_PARAM_set1_policies() or explicitly\nenable the policy check by calling X509_VERIFY_PARAM_set_flags() with\nthe X509_V_FLAG_POLICY_CHECK flag argument.\n\nCertificate policy checks are disabled by default in OpenSSL and are not\ncommonly used by applications.',
-              'diffID':        'sha256:383269fd0d7d9a5f547ad63131df9c00938dbbb23170a498357bc9fb5cd0948a',
-              'fixedVersions': [
-                '3.0.8-r3'
-              ],
-              'installedVersion': '3.0.7-r2',
-              'packageName':      'libssl3',
-              'purl':             'pkg:apk/alpine/libssl3@3.0.7-r2?arch=armv7&distro=3.17.1',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2023/09/28/4',
-                'https://access.redhat.com/errata/RHSA-2023:3722',
-                'https://access.redhat.com/security/cve/CVE-2023-0466',
-                'https://bugzilla.redhat.com/2181082',
-                'https://bugzilla.redhat.com/2182561',
-                'https://bugzilla.redhat.com/2182565',
-                'https://bugzilla.redhat.com/2188461',
-                'https://bugzilla.redhat.com/2207947',
-                'https://errata.almalinux.org/9/ALSA-2023-3722.html',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=0d16b7e99aafc0b4a6d729eec65a411a7e025f0a',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=51e8a84ce742db0f6c70510d0159dad8f7825908',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=73398dea26de9899fb4baa94098ad0a61f435c72',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=fc814a30fc4f0bc54fcea7d9a7462f5457aab061',
-                'https://linux.oracle.com/cve/CVE-2023-0466.html',
-                'https://linux.oracle.com/errata/ELSA-2023-3722.html',
-                'https://lists.debian.org/debian-lts-announce/2023/06/msg00011.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-0466',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://security.netapp.com/advisory/ntap-20230414-0001/',
-                'https://ubuntu.com/security/notices/USN-6039-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-0466',
-                'https://www.debian.org/security/2023/dsa-5417',
-                'https://www.openssl.org/news/secadv/20230328.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: Certificate policy check not enabled'
-            },
-            {
-              'cve':  'CVE-2023-1255',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '5.1',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-125'
-              ],
-              'description':   'Issue summary: The AES-XTS cipher decryption implementation for 64 bit ARM\nplatform contains a bug that could cause it to read past the input buffer,\nleading to a crash.\n\nImpact summary: Applications that use the AES-XTS algorithm on the 64 bit ARM\nplatform can crash in rare circumstances. The AES-XTS algorithm is usually\nused for disk encryption.\n\nThe AES-XTS cipher decryption implementation for 64 bit ARM platform will read\npast the end of the ciphertext buffer if the ciphertext size is 4 mod 5 in 16\nbyte blocks, e.g. 144 bytes or 1024 bytes. If the memory after the ciphertext\nbuffer is unmapped, this will trigger a crash which results in a denial of\nservice.\n\nIf an attacker can control the size and location of the ciphertext buffer\nbeing decrypted by an application using AES-XTS on 64 bit ARM, the\napplication is affected. This is fairly unlikely making this issue\na Low severity one.',
-              'diffID':        'sha256:383269fd0d7d9a5f547ad63131df9c00938dbbb23170a498357bc9fb5cd0948a',
-              'fixedVersions': [
-                '3.0.8-r4'
-              ],
-              'installedVersion': '3.0.7-r2',
-              'packageName':      'libssl3',
-              'purl':             'pkg:apk/alpine/libssl3@3.0.7-r2?arch=armv7&distro=3.17.1',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2023:3722',
-                'https://access.redhat.com/security/cve/CVE-2023-1255',
-                'https://bugzilla.redhat.com/2181082',
-                'https://bugzilla.redhat.com/2182561',
-                'https://bugzilla.redhat.com/2182565',
-                'https://bugzilla.redhat.com/2188461',
-                'https://bugzilla.redhat.com/2207947',
-                'https://errata.almalinux.org/9/ALSA-2023-3722.html',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=02ac9c9420275868472f33b01def01218742b8bb',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=bc2f61ad70971869b242fc1cb445b98bad50074a',
-                'https://linux.oracle.com/cve/CVE-2023-1255.html',
-                'https://linux.oracle.com/errata/ELSA-2023-3722.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-1255',
-                'https://security.netapp.com/advisory/ntap-20230908-0006/',
-                'https://ubuntu.com/security/notices/USN-6119-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-1255',
-                'https://www.openssl.org/news/secadv/20230419.txt',
-                'https://www.openssl.org/news/secadv/20230420.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: Input buffer over-read in AES-XTS implementation on 64 bit ARM'
-            },
-            {
-              'cve':  'CVE-2023-2650',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '6.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-770'
-              ],
-              'description':   "Issue summary: Processing some specially crafted ASN.1 object identifiers or\ndata containing them may be very slow.\n\nImpact summary: Applications that use OBJ_obj2txt() directly, or use any of\nthe OpenSSL subsystems OCSP, PKCS7/SMIME, CMS, CMP/CRMF or TS with no message\nsize limit may experience notable to very long delays when processing those\nmessages, which may lead to a Denial of Service.\n\nAn OBJECT IDENTIFIER is composed of a series of numbers - sub-identifiers -\nmost of which have no size limit.  OBJ_obj2txt() may be used to translate\nan ASN.1 OBJECT IDENTIFIER given in DER encoding form (using the OpenSSL\ntype ASN1_OBJECT) to its canonical numeric text form, which are the\nsub-identifiers of the OBJECT IDENTIFIER in decimal form, separated by\nperiods.\n\nWhen one of the sub-identifiers in the OBJECT IDENTIFIER is very large\n(these are sizes that are seen as absurdly large, taking up tens or hundreds\nof KiBs), the translation to a decimal number in text may take a very long\ntime.  The time complexity is O(n^2) with 'n' being the size of the\nsub-identifiers in bytes (*).\n\nWith OpenSSL 3.0, support to fetch cryptographic algorithms using names /\nidentifiers in string form was introduced.  This includes using OBJECT\nIDENTIFIERs in canonical numeric text form as identifiers for fetching\nalgorithms.\n\nSuch OBJECT IDENTIFIERs may be received through the ASN.1 structure\nAlgorithmIdentifier, which is commonly used in multiple protocols to specify\nwhat cryptographic algorithm should be used to sign or verify, encrypt or\ndecrypt, or digest passed data.\n\nApplications that call OBJ_obj2txt() directly with untrusted data are\naffected, with any version of OpenSSL.  If the use is for the mere purpose\nof display, the severity is considered low.\n\nIn OpenSSL 3.0 and newer, this affects the subsystems OCSP, PKCS7/SMIME,\nCMS, CMP/CRMF or TS.  It also impacts anything that processes X.509\ncertificates, including simple things like verifying its signature.\n\nThe impact on TLS is relatively low, because all versions of OpenSSL have a\n100KiB limit on the peer's certificate chain.  Additionally, this only\nimpacts clients, or servers that have explicitly enabled client\nauthentication.\n\nIn OpenSSL 1.1.1 and 1.0.2, this only affects displaying diverse objects,\nsuch as X.509 certificates.  This is assumed to not happen in such a way\nthat it would cause a Denial of Service, so these versions are considered\nnot affected by this issue in such a way that it would be cause for concern,\nand the severity is therefore considered low.",
-              'diffID':        'sha256:383269fd0d7d9a5f547ad63131df9c00938dbbb23170a498357bc9fb5cd0948a',
-              'fixedVersions': [
-                '3.0.9-r0'
-              ],
-              'installedVersion': '3.0.7-r2',
-              'packageName':      'libssl3',
-              'purl':             'pkg:apk/alpine/libssl3@3.0.7-r2?arch=armv7&distro=3.17.1',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2023/05/30/1',
-                'https://access.redhat.com/errata/RHSA-2023:6330',
-                'https://access.redhat.com/security/cve/CVE-2023-2650',
-                'https://bugzilla.redhat.com/1858038',
-                'https://bugzilla.redhat.com/2207947',
-                'https://errata.almalinux.org/9/ALSA-2023-6330.html',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=423a2bc737a908ad0c77bda470b2b59dc879936b',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=853c5e56ee0b8650c73140816bb8b91d6163422c',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=9e209944b35cf82368071f160a744b6178f9b098',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=db779b0e10b047f2585615e0b8f2acdf21f8544a',
-                'https://linux.oracle.com/cve/CVE-2023-2650.html',
-                'https://linux.oracle.com/errata/ELSA-2023-6330.html',
-                'https://lists.debian.org/debian-lts-announce/2023/06/msg00011.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-2650',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0009',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://security.netapp.com/advisory/ntap-20230703-0001/',
-                'https://security.netapp.com/advisory/ntap-20231027-0009/',
-                'https://ubuntu.com/security/notices/USN-6119-1',
-                'https://ubuntu.com/security/notices/USN-6188-1',
-                'https://ubuntu.com/security/notices/USN-6672-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-2650',
-                'https://www.debian.org/security/2023/dsa-5417',
-                'https://www.openssl.org/news/secadv/20230530.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: Possible DoS translating ASN.1 object identifiers'
-            },
-            {
-              'cve':  'CVE-2023-2975',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N'
-                },
-                'redhat': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-354',
-                'CWE-287'
-              ],
-              'description':   'Issue summary: The AES-SIV cipher implementation contains a bug that causes\nit to ignore empty associated data entries which are unauthenticated as\na consequence.\n\nImpact summary: Applications that use the AES-SIV algorithm and want to\nauthenticate empty data entries as associated data can be misled by removing,\nadding or reordering such empty entries as these are ignored by the OpenSSL\nimplementation. We are currently unaware of any such applications.\n\nThe AES-SIV algorithm allows for authentication of multiple associated\ndata entries along with the encryption. To authenticate empty data the\napplication has to call EVP_EncryptUpdate() (or EVP_CipherUpdate()) with\nNULL pointer as the output buffer and 0 as the input buffer length.\nThe AES-SIV implementation in OpenSSL just returns success for such a call\ninstead of performing the associated data authentication operation.\nThe empty data thus will not be authenticated.\n\nAs this issue does not affect non-empty associated data authentication and\nwe expect it to be rare for an application to use empty associated data\nentries this is qualified as Low severity issue.',
-              'diffID':        'sha256:383269fd0d7d9a5f547ad63131df9c00938dbbb23170a498357bc9fb5cd0948a',
-              'fixedVersions': [
-                '3.0.9-r2'
-              ],
-              'installedVersion': '3.0.7-r2',
-              'packageName':      'libssl3',
-              'purl':             'pkg:apk/alpine/libssl3@3.0.7-r2?arch=armv7&distro=3.17.1',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2023/07/15/1',
-                'http://www.openwall.com/lists/oss-security/2023/07/19/5',
-                'https://access.redhat.com/errata/RHSA-2024:2447',
-                'https://access.redhat.com/security/cve/CVE-2023-2975',
-                'https://bugzilla.redhat.com/2223016',
-                'https://bugzilla.redhat.com/2224962',
-                'https://bugzilla.redhat.com/2227852',
-                'https://bugzilla.redhat.com/2248616',
-                'https://bugzilla.redhat.com/2257571',
-                'https://bugzilla.redhat.com/2258502',
-                'https://bugzilla.redhat.com/2259944',
-                'https://errata.almalinux.org/9/ALSA-2024-2447.html',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=00e2f5eea29994d19293ec4e8c8775ba73678598',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=6a83f0c958811f07e0d11dfc6b5a6a98edfd5bdc',
-                'https://linux.oracle.com/cve/CVE-2023-2975.html',
-                'https://linux.oracle.com/errata/ELSA-2024-2447.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-2975',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://security.netapp.com/advisory/ntap-20230725-0004/',
-                'https://ubuntu.com/security/notices/USN-6450-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-2975',
-                'https://www.openssl.org/news/secadv/20230714.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: AES-SIV cipher implementation contains a bug that causes it to ignore empty associated data entries'
-            },
-            {
-              'cve':  'CVE-2023-3446',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L'
-                },
-                'redhat': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L'
-                }
-              },
-              'cwes': [
-                'CWE-606',
-                'CWE-1333'
-              ],
-              'description':   "Issue summary: Checking excessively long DH keys or parameters may be very slow.\n\nImpact summary: Applications that use the functions DH_check(), DH_check_ex()\nor EVP_PKEY_param_check() to check a DH key or DH parameters may experience long\ndelays. Where the key or parameters that are being checked have been obtained\nfrom an untrusted source this may lead to a Denial of Service.\n\nThe function DH_check() performs various checks on DH parameters. One of those\nchecks confirms that the modulus ('p' parameter) is not too large. Trying to use\na very large modulus is slow and OpenSSL will not normally use a modulus which\nis over 10,000 bits in length.\n\nHowever the DH_check() function checks numerous aspects of the key or parameters\nthat have been supplied. Some of those checks use the supplied modulus value\neven if it has already been found to be too large.\n\nAn application that calls DH_check() and supplies a key or parameters obtained\nfrom an untrusted source could be vulernable to a Denial of Service attack.\n\nThe function DH_check() is itself called by a number of other OpenSSL functions.\nAn application calling any of those other functions may similarly be affected.\nThe other functions affected by this are DH_check_ex() and\nEVP_PKEY_param_check().\n\nAlso vulnerable are the OpenSSL dhparam and pkeyparam command line applications\nwhen using the '-check' option.\n\nThe OpenSSL SSL/TLS implementation is not affected by this issue.\nThe OpenSSL 3.0 and 3.1 FIPS providers are not affected by this issue.",
-              'diffID':        'sha256:383269fd0d7d9a5f547ad63131df9c00938dbbb23170a498357bc9fb5cd0948a',
-              'fixedVersions': [
-                '3.0.9-r3'
-              ],
-              'installedVersion': '3.0.7-r2',
-              'packageName':      'libssl3',
-              'purl':             'pkg:apk/alpine/libssl3@3.0.7-r2?arch=armv7&distro=3.17.1',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2023/07/19/4',
-                'http://www.openwall.com/lists/oss-security/2023/07/19/5',
-                'http://www.openwall.com/lists/oss-security/2023/07/19/6',
-                'http://www.openwall.com/lists/oss-security/2023/07/31/1',
-                'http://www.openwall.com/lists/oss-security/2024/05/16/1',
-                'https://access.redhat.com/errata/RHSA-2024:2447',
-                'https://access.redhat.com/security/cve/CVE-2023-3446',
-                'https://bugzilla.redhat.com/2223016',
-                'https://bugzilla.redhat.com/2224962',
-                'https://bugzilla.redhat.com/2227852',
-                'https://bugzilla.redhat.com/2248616',
-                'https://bugzilla.redhat.com/2257571',
-                'https://bugzilla.redhat.com/2258502',
-                'https://bugzilla.redhat.com/2259944',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2224962',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2257582',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2257583',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2258677',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2258688',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2258691',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2258694',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2258700',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-36763',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-36764',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3446',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45229',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45231',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45232',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45233',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45235',
-                'https://errata.almalinux.org/9/ALSA-2024-2447.html',
-                'https://errata.rockylinux.org/RLSA-2024:2264',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=1fa20cf2f506113c761777127a38bce5068740eb',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=8780a896543a654e757db1b9396383f9d8095528',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=9a0a4d3c1e7138915563c0df4fe6a3f9377b839c',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=fc9867c1e03c22ebf56943be205202e576aabf23',
-                'https://linux.oracle.com/cve/CVE-2023-3446.html',
-                'https://linux.oracle.com/errata/ELSA-2024-2447.html',
-                'https://lists.debian.org/debian-lts-announce/2023/08/msg00019.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-3446',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://security.netapp.com/advisory/ntap-20230803-0011/',
-                'https://ubuntu.com/security/notices/USN-6435-1',
-                'https://ubuntu.com/security/notices/USN-6435-2',
-                'https://ubuntu.com/security/notices/USN-6450-1',
-                'https://ubuntu.com/security/notices/USN-6709-1',
-                'https://ubuntu.com/security/notices/USN-7018-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-3446',
-                'https://www.openssl.org/news/secadv/20230719.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: Excessive time spent checking DH keys and parameters'
-            },
-            {
-              'cve':  'CVE-2023-3817',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L'
-                },
-                'redhat': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L'
-                }
-              },
-              'cwes': [
-                'CWE-606',
-                'CWE-834'
-              ],
-              'description':   'Issue summary: Checking excessively long DH keys or parameters may be very slow.\n\nImpact summary: Applications that use the functions DH_check(), DH_check_ex()\nor EVP_PKEY_param_check() to check a DH key or DH parameters may experience long\ndelays. Where the key or parameters that are being checked have been obtained\nfrom an untrusted source this may lead to a Denial of Service.\n\nThe function DH_check() performs various checks on DH parameters. After fixing\nCVE-2023-3446 it was discovered that a large q parameter value can also trigger\nan overly long computation during some of these checks. A correct q value,\nif present, cannot be larger than the modulus p parameter, thus it is\nunnecessary to perform these checks if q is larger than p.\n\nAn application that calls DH_check() and supplies a key or parameters obtained\nfrom an untrusted source could be vulnerable to a Denial of Service attack.\n\nThe function DH_check() is itself called by a number of other OpenSSL functions.\nAn application calling any of those other functions may similarly be affected.\nThe other functions affected by this are DH_check_ex() and\nEVP_PKEY_param_check().\n\nAlso vulnerable are the OpenSSL dhparam and pkeyparam command line applications\nwhen using the "-check" option.\n\nThe OpenSSL SSL/TLS implementation is not affected by this issue.\n\nThe OpenSSL 3.0 and 3.1 FIPS providers are not affected by this issue.',
-              'diffID':        'sha256:383269fd0d7d9a5f547ad63131df9c00938dbbb23170a498357bc9fb5cd0948a',
-              'fixedVersions': [
-                '3.0.10-r0'
-              ],
-              'installedVersion': '3.0.7-r2',
-              'packageName':      'libssl3',
-              'purl':             'pkg:apk/alpine/libssl3@3.0.7-r2?arch=armv7&distro=3.17.1',
-              'references':       [
-                'http://seclists.org/fulldisclosure/2023/Jul/43',
-                'http://www.openwall.com/lists/oss-security/2023/07/31/1',
-                'http://www.openwall.com/lists/oss-security/2023/09/22/11',
-                'http://www.openwall.com/lists/oss-security/2023/09/22/9',
-                'http://www.openwall.com/lists/oss-security/2023/11/06/2',
-                'https://access.redhat.com/errata/RHSA-2024:2447',
-                'https://access.redhat.com/security/cve/CVE-2023-3817',
-                'https://bugzilla.redhat.com/2223016',
-                'https://bugzilla.redhat.com/2224962',
-                'https://bugzilla.redhat.com/2227852',
-                'https://bugzilla.redhat.com/2248616',
-                'https://bugzilla.redhat.com/2257571',
-                'https://bugzilla.redhat.com/2258502',
-                'https://bugzilla.redhat.com/2259944',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2224962',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2227852',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2248616',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2270358',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3446',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3817',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-5678',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-2408',
-                'https://errata.almalinux.org/9/ALSA-2024-2447.html',
-                'https://errata.rockylinux.org/RLSA-2023:7877',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=6a1eb62c29db6cb5eec707f9338aee00f44e26f5',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=869ad69aadd985c7b8ca6f4e5dd0eb274c9f3644',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=9002fd07327a91f35ba6c1307e71fa6fd4409b7f',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=91ddeba0f2269b017dc06c46c993a788974b1aa5',
-                'https://linux.oracle.com/cve/CVE-2023-3817.html',
-                'https://linux.oracle.com/errata/ELSA-2024-2447.html',
-                'https://lists.debian.org/debian-lts-announce/2023/08/msg00019.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-3817',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://security.netapp.com/advisory/ntap-20230818-0014/',
-                'https://security.netapp.com/advisory/ntap-20231027-0008/',
-                'https://security.netapp.com/advisory/ntap-20240621-0006/',
-                'https://ubuntu.com/security/notices/USN-6435-1',
-                'https://ubuntu.com/security/notices/USN-6435-2',
-                'https://ubuntu.com/security/notices/USN-6450-1',
-                'https://ubuntu.com/security/notices/USN-6709-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-3817',
-                'https://www.openssl.org/news/secadv/20230731.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'OpenSSL: Excessive time spent checking DH q parameter value'
-            },
-            {
-              'cve':  'CVE-2023-5678',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L'
-                },
-                'redhat': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L'
-                }
-              },
-              'cwes': [
-                'CWE-606',
-                'CWE-754'
-              ],
-              'description':   "Issue summary: Generating excessively long X9.42 DH keys or checking\nexcessively long X9.42 DH keys or parameters may be very slow.\n\nImpact summary: Applications that use the functions DH_generate_key() to\ngenerate an X9.42 DH key may experience long delays.  Likewise, applications\nthat use DH_check_pub_key(), DH_check_pub_key_ex() or EVP_PKEY_public_check()\nto check an X9.42 DH key or X9.42 DH parameters may experience long delays.\nWhere the key or parameters that are being checked have been obtained from\nan untrusted source this may lead to a Denial of Service.\n\nWhile DH_check() performs all the necessary checks (as of CVE-2023-3817),\nDH_check_pub_key() doesn't make any of these checks, and is therefore\nvulnerable for excessively large P and Q parameters.\n\nLikewise, while DH_generate_key() performs a check for an excessively large\nP, it doesn't check for an excessively large Q.\n\nAn application that calls DH_generate_key() or DH_check_pub_key() and\nsupplies a key or parameters obtained from an untrusted source could be\nvulnerable to a Denial of Service attack.\n\nDH_generate_key() and DH_check_pub_key() are also called by a number of\nother OpenSSL functions.  An application calling any of those other\nfunctions may similarly be affected.  The other functions affected by this\nare DH_check_pub_key_ex(), EVP_PKEY_public_check(), and EVP_PKEY_generate().\n\nAlso vulnerable are the OpenSSL pkey command line application when using the\n\"-pubcheck\" option, as well as the OpenSSL genpkey command line application.\n\nThe OpenSSL SSL/TLS implementation is not affected by this issue.\n\nThe OpenSSL 3.0 and 3.1 FIPS providers are not affected by this issue.",
-              'diffID':        'sha256:383269fd0d7d9a5f547ad63131df9c00938dbbb23170a498357bc9fb5cd0948a',
-              'fixedVersions': [
-                '3.0.12-r1'
-              ],
-              'installedVersion': '3.0.7-r2',
-              'packageName':      'libssl3',
-              'purl':             'pkg:apk/alpine/libssl3@3.0.7-r2?arch=armv7&distro=3.17.1',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2024/03/11/1',
-                'https://access.redhat.com/errata/RHSA-2024:2447',
-                'https://access.redhat.com/security/cve/CVE-2023-5678',
-                'https://bugzilla.redhat.com/2223016',
-                'https://bugzilla.redhat.com/2224962',
-                'https://bugzilla.redhat.com/2227852',
-                'https://bugzilla.redhat.com/2248616',
-                'https://bugzilla.redhat.com/2257571',
-                'https://bugzilla.redhat.com/2258502',
-                'https://bugzilla.redhat.com/2259944',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2224962',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2227852',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2248616',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2270358',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3446',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3817',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-5678',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-2408',
-                'https://errata.almalinux.org/9/ALSA-2024-2447.html',
-                'https://errata.rockylinux.org/RLSA-2023:7877',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=34efaef6c103d636ab507a0cc34dca4d3aecc055',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=710fee740904b6290fef0dd5536fbcedbc38ff0c',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=db925ae2e65d0d925adef429afc37f75bd1c2017',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=ddeb4b6c6d527e54ce9a99cba785c0f7776e54b6',
-                'https://linux.oracle.com/cve/CVE-2023-5678.html',
-                'https://linux.oracle.com/errata/ELSA-2024-2447.html',
-                'https://lists.debian.org/debian-lts-announce/2024/10/msg00033.html',
-                'https://lists.debian.org/debian-lts-announce/2024/11/msg00000.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-5678',
-                'https://security.netapp.com/advisory/ntap-20231130-0010/',
-                'https://ubuntu.com/security/notices/USN-6622-1',
-                'https://ubuntu.com/security/notices/USN-6632-1',
-                'https://ubuntu.com/security/notices/USN-6709-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-5678',
-                'https://www.openssl.org/news/secadv/20231106.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: Generating excessively long X9.42 DH keys or checking excessively long X9.42 DH keys or parameters may be very slow'
-            },
-            {
-              'cve':  'CVE-2023-6129',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '6.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-440',
-                'CWE-787'
-              ],
-              'description':   'Issue summary: The POLY1305 MAC (message authentication code) implementation\ncontains a bug that might corrupt the internal state of applications running\non PowerPC CPU based platforms if the CPU provides vector instructions.\n\nImpact summary: If an attacker can influence whether the POLY1305 MAC\nalgorithm is used, the application state might be corrupted with various\napplication dependent consequences.\n\nThe POLY1305 MAC (message authentication code) implementation in OpenSSL for\nPowerPC CPUs restores the contents of vector registers in a different order\nthan they are saved. Thus the contents of some of these vector registers\nare corrupted when returning to the caller. The vulnerable code is used only\non newer PowerPC processors supporting the PowerISA 2.07 instructions.\n\nThe consequences of this kind of internal application state corruption can\nbe various - from no consequences, if the calling application does not\ndepend on the contents of non-volatile XMM registers at all, to the worst\nconsequences, where the attacker could get complete control of the application\nprocess. However unless the compiler uses the vector registers for storing\npointers, the most likely consequence, if any, would be an incorrect result\nof some application dependent calculations or a crash leading to a denial of\nservice.\n\nThe POLY1305 MAC algorithm is most frequently used as part of the\nCHACHA20-POLY1305 AEAD (authenticated encryption with associated data)\nalgorithm. The most common usage of this AEAD cipher is with TLS protocol\nversions 1.2 and 1.3. If this cipher is enabled on the server a malicious\nclient can influence whether this AEAD cipher is used. This implies that\nTLS server applications using OpenSSL can be potentially impacted. However\nwe are currently not aware of any concrete application that would be affected\nby this issue therefore we consider this a Low severity security issue.',
-              'diffID':        'sha256:383269fd0d7d9a5f547ad63131df9c00938dbbb23170a498357bc9fb5cd0948a',
-              'fixedVersions': [
-                '3.0.12-r2'
-              ],
-              'installedVersion': '3.0.7-r2',
-              'packageName':      'libssl3',
-              'purl':             'pkg:apk/alpine/libssl3@3.0.7-r2?arch=armv7&distro=3.17.1',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2024/03/11/1',
-                'https://access.redhat.com/errata/RHSA-2024:9088',
-                'https://access.redhat.com/security/cve/CVE-2023-6129',
-                'https://bugzilla.redhat.com/2257571',
-                'https://bugzilla.redhat.com/2258502',
-                'https://bugzilla.redhat.com/2259944',
-                'https://bugzilla.redhat.com/2284243',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2257571',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2258502',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2259944',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2284243',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-6129',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-6237',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-0727',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-1298',
-                'https://errata.almalinux.org/9/ALSA-2024-9088.html',
-                'https://errata.rockylinux.org/RLSA-2024:9088',
-                'https://github.com/openssl/openssl/commit/050d26383d4e264966fb83428e72d5d48f402d35',
-                'https://github.com/openssl/openssl/commit/5b139f95c9a47a55a0c54100f3837b1eee942b04',
-                'https://github.com/openssl/openssl/commit/f3fc5808fe9ff74042d639839610d03b8fdcc015',
-                'https://linux.oracle.com/cve/CVE-2023-6129.html',
-                'https://linux.oracle.com/errata/ELSA-2024-9088.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-6129',
-                'https://security.netapp.com/advisory/ntap-20240216-0009/',
-                'https://security.netapp.com/advisory/ntap-20240426-0008/',
-                'https://security.netapp.com/advisory/ntap-20240426-0013/',
-                'https://security.netapp.com/advisory/ntap-20240503-0011/',
-                'https://ubuntu.com/security/notices/USN-6622-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-6129',
-                'https://www.openssl.org/news/secadv/20240109.txt',
-                'https://www.openwall.com/lists/oss-security/2024/01/09/1'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: POLY1305 MAC implementation corrupts vector registers on PowerPC'
-            },
-            {
-              'cve':  'CVE-2023-6237',
-              'cvss': {
-                'redhat': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-606'
-              ],
-              'description':   "Issue summary: Checking excessively long invalid RSA public keys may take\na long time.\n\nImpact summary: Applications that use the function EVP_PKEY_public_check()\nto check RSA public keys may experience long delays. Where the key that\nis being checked has been obtained from an untrusted source this may lead\nto a Denial of Service.\n\nWhen function EVP_PKEY_public_check() is called on RSA public keys,\na computation is done to confirm that the RSA modulus, n, is composite.\nFor valid RSA keys, n is a product of two or more large primes and this\ncomputation completes quickly. However, if n is an overly large prime,\nthen this computation would take a long time.\n\nAn application that calls EVP_PKEY_public_check() and supplies an RSA key\nobtained from an untrusted source could be vulnerable to a Denial of Service\nattack.\n\nThe function EVP_PKEY_public_check() is not called from other OpenSSL\nfunctions however it is called from the OpenSSL pkey command line\napplication. For that reason that application is also vulnerable if used\nwith the '-pubin' and '-check' options on untrusted data.\n\nThe OpenSSL SSL/TLS implementation is not affected by this issue.\n\nThe OpenSSL 3.0 and 3.1 FIPS providers are affected by this issue.",
-              'diffID':        'sha256:383269fd0d7d9a5f547ad63131df9c00938dbbb23170a498357bc9fb5cd0948a',
-              'fixedVersions': [
-                '3.0.12-r3'
-              ],
-              'installedVersion': '3.0.7-r2',
-              'packageName':      'libssl3',
-              'purl':             'pkg:apk/alpine/libssl3@3.0.7-r2?arch=armv7&distro=3.17.1',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2024/03/11/1',
-                'https://access.redhat.com/errata/RHSA-2024:9088',
-                'https://access.redhat.com/security/cve/CVE-2023-6237',
-                'https://bugzilla.redhat.com/2257571',
-                'https://bugzilla.redhat.com/2258502',
-                'https://bugzilla.redhat.com/2259944',
-                'https://bugzilla.redhat.com/2284243',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2257571',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2258502',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2259944',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2284243',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-6129',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-6237',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-0727',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-1298',
-                'https://errata.almalinux.org/9/ALSA-2024-9088.html',
-                'https://errata.rockylinux.org/RLSA-2024:9088',
-                'https://github.com/openssl/openssl/commit/0b0f7abfb37350794a4b8960fafc292cd5d1b84d',
-                'https://github.com/openssl/openssl/commit/18c02492138d1eb8b6548cb26e7b625fb2414a2a',
-                'https://github.com/openssl/openssl/commit/a830f551557d3d66a84bbb18a5b889c640c36294',
-                'https://linux.oracle.com/cve/CVE-2023-6237.html',
-                'https://linux.oracle.com/errata/ELSA-2024-9088.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-6237',
-                'https://security.netapp.com/advisory/ntap-20240531-0007/',
-                'https://ubuntu.com/security/notices/USN-6622-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-6237',
-                'https://www.openssl.org/news/secadv/20240115.txt',
-                'https://www.openwall.com/lists/oss-security/2024/01/15/2'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: Excessive time spent checking invalid RSA public keys'
-            },
-            {
-              'cve':  'CVE-2024-0727',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '5.5',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H'
-                },
-                'nvd': {
-                  'v3score':  '5.5',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '5.5',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-476'
-              ],
-              'description':   'Issue summary: Processing a maliciously formatted PKCS12 file may lead OpenSSL\nto crash leading to a potential Denial of Service attack\n\nImpact summary: Applications loading files in the PKCS12 format from untrusted\nsources might terminate abruptly.\n\nA file in PKCS12 format can contain certificates and keys and may come from an\nuntrusted source. The PKCS12 specification allows certain fields to be NULL, but\nOpenSSL does not correctly check for this case. This can lead to a NULL pointer\ndereference that results in OpenSSL crashing. If an application processes PKCS12\nfiles from an untrusted source using the OpenSSL APIs then that application will\nbe vulnerable to this issue.\n\nOpenSSL APIs that are vulnerable to this are: PKCS12_parse(),\nPKCS12_unpack_p7data(), PKCS12_unpack_p7encdata(), PKCS12_unpack_authsafes()\nand PKCS12_newpass().\n\nWe have also fixed a similar issue in SMIME_write_PKCS7(). However since this\nfunction is related to writing data we do not consider it security significant.\n\nThe FIPS modules in 3.2, 3.1 and 3.0 are not affected by this issue.',
-              'diffID':        'sha256:383269fd0d7d9a5f547ad63131df9c00938dbbb23170a498357bc9fb5cd0948a',
-              'fixedVersions': [
-                '3.0.12-r4'
-              ],
-              'installedVersion': '3.0.7-r2',
-              'packageName':      'libssl3',
-              'purl':             'pkg:apk/alpine/libssl3@3.0.7-r2?arch=armv7&distro=3.17.1',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2024/03/11/1',
-                'https://access.redhat.com/errata/RHSA-2024:9088',
-                'https://access.redhat.com/security/cve/CVE-2024-0727',
-                'https://bugzilla.redhat.com/2257571',
-                'https://bugzilla.redhat.com/2258502',
-                'https://bugzilla.redhat.com/2259944',
-                'https://bugzilla.redhat.com/2284243',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2257571',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2258502',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2259944',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2284243',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-6129',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-6237',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-0727',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-1298',
-                'https://errata.almalinux.org/9/ALSA-2024-9088.html',
-                'https://errata.rockylinux.org/RLSA-2024:9088',
-                'https://github.com/alexcrichton/openssl-src-rs/commit/add20f73b6b42be7451af2e1044d4e0e778992b2',
-                'https://github.com/github/advisory-database/pull/3472',
-                'https://github.com/openssl/openssl/commit/09df4395b5071217b76dc7d3d2e630eb8c5a79c2',
-                'https://github.com/openssl/openssl/commit/775acfdbd0c6af9ac855f34969cdab0c0c90844a',
-                'https://github.com/openssl/openssl/commit/d135eeab8a5dbf72b3da5240bab9ddb7678dbd2c',
-                'https://github.com/openssl/openssl/pull/23362',
-                'https://github.com/pyca/cryptography/commit/3519591d255d4506fbcd0d04037d45271903c64d',
-                'https://github.openssl.org/openssl/extended-releases/commit/03b3941d60c4bce58fab69a0c22377ab439bc0e8',
-                'https://github.openssl.org/openssl/extended-releases/commit/aebaa5883e31122b404e450732dc833dc9dee539',
-                'https://linux.oracle.com/cve/CVE-2024-0727.html',
-                'https://linux.oracle.com/errata/ELSA-2024-9088.html',
-                'https://lists.debian.org/debian-lts-announce/2024/10/msg00033.html',
-                'https://lists.debian.org/debian-lts-announce/2024/11/msg00000.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2024-0727',
-                'https://security.netapp.com/advisory/ntap-20240208-0006',
-                'https://security.netapp.com/advisory/ntap-20240208-0006/',
-                'https://ubuntu.com/security/notices/USN-6622-1',
-                'https://ubuntu.com/security/notices/USN-6632-1',
-                'https://ubuntu.com/security/notices/USN-6709-1',
-                'https://ubuntu.com/security/notices/USN-7018-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2024-0727',
-                'https://www.openssl.org/news/secadv/20240125.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: denial of service via null dereference'
-            },
-            {
-              'cve':  'CVE-2024-4603',
-              'cvss': {
-                'redhat': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L'
-                }
-              },
-              'cwes': [
-                'CWE-606',
-                'CWE-834'
-              ],
-              'description':   'Issue summary: Checking excessively long DSA keys or parameters may be very\nslow.\n\nImpact summary: Applications that use the functions EVP_PKEY_param_check()\nor EVP_PKEY_public_check() to check a DSA public key or DSA parameters may\nexperience long delays. Where the key or parameters that are being checked\nhave been obtained from an untrusted source this may lead to a Denial of\nService.\n\nThe functions EVP_PKEY_param_check() or EVP_PKEY_public_check() perform\nvarious checks on DSA parameters. Some of those computations take a long time\nif the modulus (`p` parameter) is too large.\n\nTrying to use a very large modulus is slow and OpenSSL will not allow using\npublic keys with a modulus which is over 10,000 bits in length for signature\nverification. However the key and parameter check functions do not limit\nthe modulus size when performing the checks.\n\nAn application that calls EVP_PKEY_param_check() or EVP_PKEY_public_check()\nand supplies a key or parameters obtained from an untrusted source could be\nvulnerable to a Denial of Service attack.\n\nThese functions are not called by OpenSSL itself on untrusted DSA keys so\nonly applications that directly call these functions may be vulnerable.\n\nAlso vulnerable are the OpenSSL pkey and pkeyparam command line applications\nwhen using the `-check` option.\n\nThe OpenSSL SSL/TLS implementation is not affected by this issue.\n\nThe OpenSSL 3.0 and 3.1 FIPS providers are affected by this issue.',
-              'diffID':        'sha256:383269fd0d7d9a5f547ad63131df9c00938dbbb23170a498357bc9fb5cd0948a',
-              'fixedVersions': [
-                '3.0.13-r0'
-              ],
-              'installedVersion': '3.0.7-r2',
-              'packageName':      'libssl3',
-              'purl':             'pkg:apk/alpine/libssl3@3.0.7-r2?arch=armv7&distro=3.17.1',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2024/05/16/2',
-                'https://access.redhat.com/errata/RHSA-2024:9333',
-                'https://access.redhat.com/security/cve/CVE-2024-4603',
-                'https://bugzilla.redhat.com/2274020',
-                'https://bugzilla.redhat.com/2281029',
-                'https://bugzilla.redhat.com/2283757',
-                'https://bugzilla.redhat.com/2294581',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2274020',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2281029',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2283757',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2294581',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-2511',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-4603',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-4741',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-5535',
-                'https://errata.almalinux.org/9/ALSA-2024-9333.html',
-                'https://errata.rockylinux.org/RLSA-2024:9333',
-                'https://github.com/openssl/openssl/commit/3559e868e58005d15c6013a0c1fd832e51c73397',
-                'https://github.com/openssl/openssl/commit/53ea06486d296b890d565fb971b2764fcd826e7e',
-                'https://github.com/openssl/openssl/commit/9c39b3858091c152f52513c066ff2c5a47969f0d',
-                'https://github.com/openssl/openssl/commit/da343d0605c826ef197aceedc67e8e04f065f740',
-                'https://linux.oracle.com/cve/CVE-2024-4603.html',
-                'https://linux.oracle.com/errata/ELSA-2024-9333.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2024-4603',
-                'https://security.netapp.com/advisory/ntap-20240621-0001/',
-                'https://ubuntu.com/security/notices/USN-6937-1',
-                'https://www.cve.org/CVERecord?id=CVE-2024-4603',
-                'https://www.openssl.org/news/secadv/20240516.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: Excessive time spent checking DSA keys and parameters'
-            },
-            {
-              'cve':  'CVE-2024-4741',
-              'cvss': {
-                'redhat': {
-                  'v3score':  '5.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   'Issue summary: Calling the OpenSSL API function SSL_free_buffers may cause\nmemory to be accessed that was previously freed in some situations\n\nImpact summary: A use after free can have a range of potential consequences such\nas the corruption of valid data, crashes or execution of arbitrary code.\nHowever, only applications that directly call the SSL_free_buffers function are\naffected by this issue. Applications that do not call this function are not\nvulnerable. Our investigations indicate that this function is rarely used by\napplications.\n\nThe SSL_free_buffers function is used to free the internal OpenSSL buffer used\nwhen processing an incoming record from the network. The call is only expected\nto succeed if the buffer is not currently in use. However, two scenarios have\nbeen identified where the buffer is freed even when still in use.\n\nThe first scenario occurs where a record header has been received from the\nnetwork and processed by OpenSSL, but the full record body has not yet arrived.\nIn this case calling SSL_free_buffers will succeed even though a record has only\nbeen partially processed and the buffer is still in use.\n\nThe second scenario occurs where a full record containing application data has\nbeen received and processed by OpenSSL but the application has only read part of\nthis data. Again a call to SSL_free_buffers will succeed even though the buffer\nis still in use.\n\nWhile these scenarios could occur accidentally during normal operation a\nmalicious attacker could attempt to engineer a stituation where this occurs.\nWe are not aware of this issue being actively exploited.\n\nThe FIPS modules in 3.3, 3.2, 3.1 and 3.0 are not affected by this issue.',
-              'diffID':        'sha256:383269fd0d7d9a5f547ad63131df9c00938dbbb23170a498357bc9fb5cd0948a',
-              'fixedVersions': [
-                '3.0.14-r0'
-              ],
-              'installedVersion': '3.0.7-r2',
-              'packageName':      'libssl3',
-              'purl':             'pkg:apk/alpine/libssl3@3.0.7-r2?arch=armv7&distro=3.17.1',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2024:9333',
-                'https://access.redhat.com/security/cve/CVE-2024-4741',
-                'https://bugzilla.redhat.com/2274020',
-                'https://bugzilla.redhat.com/2281029',
-                'https://bugzilla.redhat.com/2283757',
-                'https://bugzilla.redhat.com/2294581',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2274020',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2281029',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2283757',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2294581',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-2511',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-4603',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-4741',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-5535',
-                'https://errata.almalinux.org/9/ALSA-2024-9333.html',
-                'https://errata.rockylinux.org/RLSA-2024:9333',
-                'https://github.com/openssl/openssl/commit/704f725b96aa373ee45ecfb23f6abfe8be8d9177',
-                'https://github.com/openssl/openssl/commit/b3f0eb0a295f58f16ba43ba99dad70d4ee5c437d',
-                'https://github.com/openssl/openssl/commit/c88c3de51020c37e8706bf7a682a162593053aac',
-                'https://github.com/openssl/openssl/commit/e5093133c35ca82874ad83697af76f4b0f7e3bd8',
-                'https://github.openssl.org/openssl/extended-releases/commit/f7a045f3143fc6da2ee66bf52d8df04829590dd4',
-                'https://linux.oracle.com/cve/CVE-2024-4741.html',
-                'https://linux.oracle.com/errata/ELSA-2024-9333.html',
-                'https://lists.debian.org/debian-lts-announce/2024/10/msg00033.html',
-                'https://lists.debian.org/debian-lts-announce/2024/11/msg00000.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2024-4741',
-                'https://security.netapp.com/advisory/ntap-20240621-0004/',
-                'https://ubuntu.com/security/notices/USN-6937-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2024-4741',
-                'https://www.openssl.org/news/secadv/20240528.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: Use After Free with SSL_free_buffers'
-            },
-            {
-              'cve':  'CVE-2024-5535',
-              'cvss': {
-                'redhat': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-125'
-              ],
-              'description':   'Issue summary: Calling the OpenSSL API function SSL_select_next_proto with an\nempty supported client protocols buffer may cause a crash or memory contents to\nbe sent to the peer.\n\nImpact summary: A buffer overread can have a range of potential consequences\nsuch as unexpected application beahviour or a crash. In particular this issue\ncould result in up to 255 bytes of arbitrary private data from memory being sent\nto the peer leading to a loss of confidentiality. However, only applications\nthat directly call the SSL_select_next_proto function with a 0 length list of\nsupported client protocols are affected by this issue. This would normally never\nbe a valid scenario and is typically not under attacker control but may occur by\naccident in the case of a configuration or programming error in the calling\napplication.\n\nThe OpenSSL API function SSL_select_next_proto is typically used by TLS\napplications that support ALPN (Application Layer Protocol Negotiation) or NPN\n(Next Protocol Negotiation). NPN is older, was never standardised and\nis deprecated in favour of ALPN. We believe that ALPN is significantly more\nwidely deployed than NPN. The SSL_select_next_proto function accepts a list of\nprotocols from the server and a list of protocols from the client and returns\nthe first protocol that appears in the server list that also appears in the\nclient list. In the case of no overlap between the two lists it returns the\nfirst item in the client list. In either case it will signal whether an overlap\nbetween the two lists was found. In the case where SSL_select_next_proto is\ncalled with a zero length client list it fails to notice this condition and\nreturns the memory immediately following the client list pointer (and reports\nthat there was no overlap in the lists).\n\nThis function is typically called from a server side application callback for\nALPN or a client side application callback for NPN. In the case of ALPN the list\nof protocols supplied by the client is guaranteed by libssl to never be zero in\nlength. The list of server protocols comes from the application and should never\nnormally be expected to be of zero length. In this case if the\nSSL_select_next_proto function has been called as expected (with the list\nsupplied by the client passed in the client/client_len parameters), then the\napplication will not be vulnerable to this issue. If the application has\naccidentally been configured with a zero length server list, and has\naccidentally passed that zero length server list in the client/client_len\nparameters, and has additionally failed to correctly handle a "no overlap"\nresponse (which would normally result in a handshake failure in ALPN) then it\nwill be vulnerable to this problem.\n\nIn the case of NPN, the protocol permits the client to opportunistically select\na protocol when there is no overlap. OpenSSL returns the first client protocol\nin the no overlap case in support of this. The list of client protocols comes\nfrom the application and should never normally be expected to be of zero length.\nHowever if the SSL_select_next_proto function is accidentally called with a\nclient_len of 0 then an invalid memory pointer will be returned instead. If the\napplication uses this output as the opportunistic protocol then the loss of\nconfidentiality will occur.\n\nThis issue has been assessed as Low severity because applications are most\nlikely to be vulnerable if they are using NPN instead of ALPN - but NPN is not\nwidely used. It also requires an application configuration or programming error.\nFinally, this issue would not typically be under attacker control making active\nexploitation unlikely.\n\nThe FIPS modules in 3.3, 3.2, 3.1 and 3.0 are not affected by this issue.\n\nDue to the low severity of this issue we are not issuing new releases of\nOpenSSL at this time. The fix will be included in the next releases when they\nbecome available.',
-              'diffID':        'sha256:383269fd0d7d9a5f547ad63131df9c00938dbbb23170a498357bc9fb5cd0948a',
-              'fixedVersions': [
-                '3.0.14-r0'
-              ],
-              'installedVersion': '3.0.7-r2',
-              'packageName':      'libssl3',
-              'purl':             'pkg:apk/alpine/libssl3@3.0.7-r2?arch=armv7&distro=3.17.1',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2024/06/27/1',
-                'http://www.openwall.com/lists/oss-security/2024/06/28/4',
-                'http://www.openwall.com/lists/oss-security/2024/08/15/1',
-                'https://access.redhat.com/errata/RHSA-2025:1671',
-                'https://access.redhat.com/security/cve/CVE-2024-5535',
-                'https://bugzilla.redhat.com/2294581',
-                'https://bugzilla.redhat.com/2294676',
-                'https://bugzilla.redhat.com/2301888',
-                'https://bugzilla.redhat.com/2318857',
-                'https://bugzilla.redhat.com/2318858',
-                'https://bugzilla.redhat.com/2318870',
-                'https://bugzilla.redhat.com/2318873',
-                'https://bugzilla.redhat.com/2318874',
-                'https://bugzilla.redhat.com/2318876',
-                'https://bugzilla.redhat.com/2318882',
-                'https://bugzilla.redhat.com/2318883',
-                'https://bugzilla.redhat.com/2318884',
-                'https://bugzilla.redhat.com/2318885',
-                'https://bugzilla.redhat.com/2318886',
-                'https://bugzilla.redhat.com/2318897',
-                'https://bugzilla.redhat.com/2318900',
-                'https://bugzilla.redhat.com/2318905',
-                'https://bugzilla.redhat.com/2318914',
-                'https://bugzilla.redhat.com/2318922',
-                'https://bugzilla.redhat.com/2318923',
-                'https://bugzilla.redhat.com/2318925',
-                'https://bugzilla.redhat.com/2318926',
-                'https://bugzilla.redhat.com/2318927',
-                'https://bugzilla.redhat.com/2331191',
-                'https://bugzilla.redhat.com/2339218',
-                'https://bugzilla.redhat.com/2339220',
-                'https://bugzilla.redhat.com/2339221',
-                'https://bugzilla.redhat.com/2339226',
-                'https://bugzilla.redhat.com/2339231',
-                'https://bugzilla.redhat.com/2339236',
-                'https://bugzilla.redhat.com/2339238',
-                'https://bugzilla.redhat.com/2339243',
-                'https://bugzilla.redhat.com/2339247',
-                'https://bugzilla.redhat.com/2339252',
-                'https://bugzilla.redhat.com/2339259',
-                'https://bugzilla.redhat.com/2339266',
-                'https://bugzilla.redhat.com/2339270',
-                'https://bugzilla.redhat.com/2339271',
-                'https://bugzilla.redhat.com/2339275',
-                'https://bugzilla.redhat.com/2339277',
-                'https://bugzilla.redhat.com/2339281',
-                'https://bugzilla.redhat.com/2339284',
-                'https://bugzilla.redhat.com/2339291',
-                'https://bugzilla.redhat.com/2339293',
-                'https://bugzilla.redhat.com/2339295',
-                'https://bugzilla.redhat.com/2339299',
-                'https://bugzilla.redhat.com/2339300',
-                'https://bugzilla.redhat.com/2339304',
-                'https://bugzilla.redhat.com/2339305',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2274020',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2281029',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2283757',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2294581',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-2511',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-4603',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-4741',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-5535',
-                'https://errata.almalinux.org/9/ALSA-2025-1671.html',
-                'https://errata.rockylinux.org/RLSA-2024:9333',
-                'https://github.com/openssl/openssl/commit/4ada436a1946cbb24db5ab4ca082b69c1bc10f37',
-                'https://github.com/openssl/openssl/commit/99fb785a5f85315b95288921a321a935ea29a51e',
-                'https://github.com/openssl/openssl/commit/cf6f91f6121f4db167405db2f0de410a456f260c',
-                'https://github.com/openssl/openssl/commit/e86ac436f0bd54d4517745483e2315650fae7b2c',
-                'https://github.openssl.org/openssl/extended-releases/commit/9947251413065a05189a63c9b7a6c1d4e224c21c',
-                'https://github.openssl.org/openssl/extended-releases/commit/b78ec0824da857223486660177d3b1f255c65d87',
-                'https://linux.oracle.com/cve/CVE-2024-5535.html',
-                'https://linux.oracle.com/errata/ELSA-2025-1673.html',
-                'https://lists.debian.org/debian-lts-announce/2024/10/msg00033.html',
-                'https://lists.debian.org/debian-lts-announce/2024/11/msg00000.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2024-5535',
-                'https://openssl.org/news/secadv/20240627.txt',
-                'https://security.netapp.com/advisory/ntap-20240712-0005/',
-                'https://security.netapp.com/advisory/ntap-20241025-0006/',
-                'https://security.netapp.com/advisory/ntap-20241025-0010/',
-                'https://ubuntu.com/security/notices/USN-6937-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2024-5535',
-                'https://www.openssl.org/news/secadv/20240627.txt',
-                'https://www.oracle.com/security-alerts/cpuoct2024.html#AppendixMSQL'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: SSL_select_next_proto buffer overread'
-            },
-            {
-              'cve':  'CVE-2024-2511',
-              'cvss': {
-                'redhat': {
-                  'v3score':  '3.7',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L'
-                }
-              },
-              'cwes': [
-                'CWE-1325'
-              ],
-              'description':   'Issue summary: Some non-default TLS server configurations can cause unbounded\nmemory growth when processing TLSv1.3 sessions\n\nImpact summary: An attacker may exploit certain server configurations to trigger\nunbounded memory growth that would lead to a Denial of Service\n\nThis problem can occur in TLSv1.3 if the non-default SSL_OP_NO_TICKET option is\nbeing used (but not if early_data support is also configured and the default\nanti-replay protection is in use). In this case, under certain conditions, the\nsession cache can get into an incorrect state and it will fail to flush properly\nas it fills. The session cache will continue to grow in an unbounded manner. A\nmalicious client could deliberately create the scenario for this failure to\nforce a Denial of Service. It may also happen by accident in normal operation.\n\nThis issue only affects TLS servers supporting TLSv1.3. It does not affect TLS\nclients.\n\nThe FIPS modules in 3.2, 3.1 and 3.0 are not affected by this issue. OpenSSL\n1.0.2 is also not affected by this issue.',
-              'diffID':        'sha256:383269fd0d7d9a5f547ad63131df9c00938dbbb23170a498357bc9fb5cd0948a',
-              'fixedVersions': [
-                '3.0.12-r5'
-              ],
-              'installedVersion': '3.0.7-r2',
-              'packageName':      'libssl3',
-              'purl':             'pkg:apk/alpine/libssl3@3.0.7-r2?arch=armv7&distro=3.17.1',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2024/04/08/5',
-                'https://access.redhat.com/errata/RHSA-2024:9333',
-                'https://access.redhat.com/security/cve/CVE-2024-2511',
-                'https://bugzilla.redhat.com/2274020',
-                'https://bugzilla.redhat.com/2281029',
-                'https://bugzilla.redhat.com/2283757',
-                'https://bugzilla.redhat.com/2294581',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2274020',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2281029',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2283757',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2294581',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-2511',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-4603',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-4741',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-5535',
-                'https://errata.almalinux.org/9/ALSA-2024-9333.html',
-                'https://errata.rockylinux.org/RLSA-2024:9333',
-                'https://github.com/openssl/openssl/commit/7e4d731b1c07201ad9374c1cd9ac5263bdf35bce',
-                'https://github.com/openssl/openssl/commit/b52867a9f618bb955bed2a3ce3db4d4f97ed8e5d',
-                'https://github.com/openssl/openssl/commit/e9d7083e241670332e0443da0f0d4ffb52829f08',
-                'https://github.openssl.org/openssl/extended-releases/commit/5f8d25770ae6437db119dfc951e207271a326640',
-                'https://linux.oracle.com/cve/CVE-2024-2511.html',
-                'https://linux.oracle.com/errata/ELSA-2024-9333.html',
-                'https://lists.debian.org/debian-lts-announce/2024/10/msg00033.html',
-                'https://lists.debian.org/debian-lts-announce/2024/11/msg00000.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2024-2511',
-                'https://security.netapp.com/advisory/ntap-20240503-0013/',
-                'https://ubuntu.com/security/notices/USN-6937-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2024-2511',
-                'https://www.openssl.org/news/secadv/20240408.txt',
-                'https://www.openssl.org/news/vulnerabilities.html'
-              ],
-              'severity':   'LOW',
-              'suppressed': false,
-              'title':      'openssl: Unbounded memory growth with session handling in TLSv1.3'
-            },
-            {
-              'cve':  'CVE-2024-9143',
-              'cvss': {
-                'redhat': {
-                  'v3score':  '3.7',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L'
-                }
-              },
-              'cwes': [
-                'CWE-125',
-                'CWE-787'
-              ],
-              'description':   "Issue summary: Use of the low-level GF(2^m) elliptic curve APIs with untrusted\nexplicit values for the field polynomial can lead to out-of-bounds memory reads\nor writes.\n\nImpact summary: Out of bound memory writes can lead to an application crash or\neven a possibility of a remote code execution, however, in all the protocols\ninvolving Elliptic Curve Cryptography that we're aware of, either only \"named\ncurves\" are supported, or, if explicit curve parameters are supported, they\nspecify an X9.62 encoding of binary (GF(2^m)) curves that can't represent\nproblematic input values. Thus the likelihood of existence of a vulnerable\napplication is low.\n\nIn particular, the X9.62 encoding is used for ECC keys in X.509 certificates,\nso problematic inputs cannot occur in the context of processing X.509\ncertificates.  Any problematic use-cases would have to be using an \"exotic\"\ncurve encoding.\n\nThe affected APIs include: EC_GROUP_new_curve_GF2m(), EC_GROUP_new_from_params(),\nand various supporting BN_GF2m_*() functions.\n\nApplications working with \"exotic\" explicit binary (GF(2^m)) curve parameters,\nthat make it possible to represent invalid field polynomials with a zero\nconstant term, via the above or similar APIs, may terminate abruptly as a\nresult of reading or writing outside of array bounds.  Remote code execution\ncannot easily be ruled out.\n\nThe FIPS modules in 3.3, 3.2, 3.1 and 3.0 are not affected by this issue.",
-              'diffID':        'sha256:383269fd0d7d9a5f547ad63131df9c00938dbbb23170a498357bc9fb5cd0948a',
-              'fixedVersions': [
-                '3.0.15-r1'
-              ],
-              'installedVersion': '3.0.7-r2',
-              'packageName':      'libssl3',
-              'purl':             'pkg:apk/alpine/libssl3@3.0.7-r2?arch=armv7&distro=3.17.1',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2024/10/16/1',
-                'http://www.openwall.com/lists/oss-security/2024/10/23/1',
-                'http://www.openwall.com/lists/oss-security/2024/10/24/1',
-                'https://access.redhat.com/security/cve/CVE-2024-9143',
-                'https://github.com/openssl/openssl/commit/72ae83ad214d2eef262461365a1975707f862712',
-                'https://github.com/openssl/openssl/commit/bc7e04d7c8d509fb78fc0e285aa948fb0da04700',
-                'https://github.com/openssl/openssl/commit/c0d3e4d32d2805f49bec30547f225bc4d092e1f4',
-                'https://github.com/openssl/openssl/commit/fdf6723362ca51bd883295efe206cb5b1cfa5154',
-                'https://github.openssl.org/openssl/extended-releases/commit/8efc0cbaa8ebba8e116f7b81a876a4123594d86a',
-                'https://github.openssl.org/openssl/extended-releases/commit/9d576994cec2b7aa37a91740ea7e680810957e41',
-                'https://lists.debian.org/debian-lts-announce/2024/10/msg00033.html',
-                'https://lists.debian.org/debian-lts-announce/2024/11/msg00000.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2024-9143',
-                'https://openssl-library.org/news/secadv/20241016.txt',
-                'https://security.netapp.com/advisory/ntap-20241101-0001/',
-                'https://ubuntu.com/security/notices/USN-7264-1',
-                'https://ubuntu.com/security/notices/USN-7278-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2024-9143'
-              ],
-              'severity':   'LOW',
-              'suppressed': false,
-              'title':      'openssl: Low-level invalid GF(2^m) parameters lead to OOB memory access'
-            },
-            {
-              'cve':  'CVE-2025-26519',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-787'
-              ],
-              'description':   'musl libc 0.9.13 through 1.2.5 before 1.2.6 has an out-of-bounds write vulnerability when an attacker can trigger iconv conversion of untrusted EUC-KR text to UTF-8.',
-              'diffID':        'sha256:383269fd0d7d9a5f547ad63131df9c00938dbbb23170a498357bc9fb5cd0948a',
-              'fixedVersions': [
-                '1.2.3-r6'
-              ],
-              'installedVersion': '1.2.3-r4',
-              'packageName':      'musl',
-              'purl':             'pkg:apk/alpine/musl@1.2.3-r4?arch=armv7&distro=3.17.1',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2025/02/13/2',
-                'http://www.openwall.com/lists/oss-security/2025/02/13/3',
-                'http://www.openwall.com/lists/oss-security/2025/02/13/4',
-                'http://www.openwall.com/lists/oss-security/2025/02/13/5',
-                'http://www.openwall.com/lists/oss-security/2025/02/14/5',
-                'http://www.openwall.com/lists/oss-security/2025/02/14/6',
-                'https://git.musl-libc.org/cgit/musl/commit/?id=c47ad25ea3b484e10326f933e927c0bc8cded3da',
-                'https://git.musl-libc.org/cgit/musl/commit/?id=e5adcd97b5196e29991b524237381a0202a60659',
-                'https://www.openwall.com/lists/oss-security/2025/02/13/2'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'musl libc 0.9.13 through 1.2.5 before 1.2.6 has an out-of-bounds write ...'
-            },
-            {
-              'cve':  'CVE-2025-26519',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-787'
-              ],
-              'description':   'musl libc 0.9.13 through 1.2.5 before 1.2.6 has an out-of-bounds write vulnerability when an attacker can trigger iconv conversion of untrusted EUC-KR text to UTF-8.',
-              'diffID':        'sha256:383269fd0d7d9a5f547ad63131df9c00938dbbb23170a498357bc9fb5cd0948a',
-              'fixedVersions': [
-                '1.2.3-r6'
-              ],
-              'installedVersion': '1.2.3-r4',
-              'packageName':      'musl-utils',
-              'purl':             'pkg:apk/alpine/musl-utils@1.2.3-r4?arch=armv7&distro=3.17.1',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2025/02/13/2',
-                'http://www.openwall.com/lists/oss-security/2025/02/13/3',
-                'http://www.openwall.com/lists/oss-security/2025/02/13/4',
-                'http://www.openwall.com/lists/oss-security/2025/02/13/5',
-                'http://www.openwall.com/lists/oss-security/2025/02/14/5',
-                'http://www.openwall.com/lists/oss-security/2025/02/14/6',
-                'https://git.musl-libc.org/cgit/musl/commit/?id=c47ad25ea3b484e10326f933e927c0bc8cded3da',
-                'https://git.musl-libc.org/cgit/musl/commit/?id=e5adcd97b5196e29991b524237381a0202a60659',
-                'https://www.openwall.com/lists/oss-security/2025/02/13/2'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'musl libc 0.9.13 through 1.2.5 before 1.2.6 has an out-of-bounds write ...'
-            },
-            {
-              'cve':  'CVE-2023-42363',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.5',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.8',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   'A use-after-free vulnerability was discovered in xasprintf function in xfuncs_printf.c:344 in BusyBox v.1.36.1.',
-              'diffID':        'sha256:383269fd0d7d9a5f547ad63131df9c00938dbbb23170a498357bc9fb5cd0948a',
-              'fixedVersions': [
-                '1.35.0-r31'
-              ],
-              'installedVersion': '1.35.0-r29',
-              'packageName':      'ssl_client',
-              'purl':             'pkg:apk/alpine/ssl_client@1.35.0-r29?arch=armv7&distro=3.17.1',
-              'references':       [
-                'http://lists.busybox.net/pipermail/busybox/2024-May/090760.html',
-                'https://access.redhat.com/security/cve/CVE-2023-42363',
-                'https://bugs.busybox.net/show_bug.cgi?id=15865',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-42363',
-                'https://ubuntu.com/security/notices/USN-6961-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-42363'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk'
-            },
-            {
-              'cve':  'CVE-2023-42364',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.5',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.8',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   'A use-after-free vulnerability in BusyBox v.1.36.1 allows attackers to cause a denial of service via a crafted awk pattern in the awk.c evaluate function.',
-              'diffID':        'sha256:383269fd0d7d9a5f547ad63131df9c00938dbbb23170a498357bc9fb5cd0948a',
-              'fixedVersions': [
-                '1.35.0-r31'
-              ],
-              'installedVersion': '1.35.0-r29',
-              'packageName':      'ssl_client',
-              'purl':             'pkg:apk/alpine/ssl_client@1.35.0-r29?arch=armv7&distro=3.17.1',
-              'references':       [
-                'http://lists.busybox.net/pipermail/busybox/2024-May/090762.html',
-                'https://access.redhat.com/security/cve/CVE-2023-42364',
-                'https://bugs.busybox.net/show_bug.cgi?id=15868',
-                'https://gitlab.alpinelinux.org/alpine/aports/-/blob/master/main/busybox/CVE-2023-42364-CVE-2023-42365.patch',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-42364',
-                'https://ubuntu.com/security/notices/USN-6961-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-42364'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'busybox: use-after-free'
-            },
-            {
-              'cve':  'CVE-2023-42365',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.5',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.8',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   'A use-after-free vulnerability was discovered in BusyBox v.1.36.1 via a crafted awk pattern in the awk.c copyvar function.',
-              'diffID':        'sha256:383269fd0d7d9a5f547ad63131df9c00938dbbb23170a498357bc9fb5cd0948a',
-              'fixedVersions': [
-                '1.35.0-r31'
-              ],
-              'installedVersion': '1.35.0-r29',
-              'packageName':      'ssl_client',
-              'purl':             'pkg:apk/alpine/ssl_client@1.35.0-r29?arch=armv7&distro=3.17.1',
-              'references':       [
-                'http://lists.busybox.net/pipermail/busybox/2024-May/090762.html',
-                'https://access.redhat.com/security/cve/CVE-2023-42365',
-                'https://bugs.busybox.net/show_bug.cgi?id=15871',
-                'https://gitlab.alpinelinux.org/alpine/aports/-/blob/master/main/busybox/CVE-2023-42364-CVE-2023-42365.patch',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-42365',
-                'https://ubuntu.com/security/notices/USN-6961-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-42365'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'busybox: use-after-free'
-            },
-            {
-              'cve':  'CVE-2023-42366',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.5',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.1',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-787'
-              ],
-              'description':   'A heap-buffer-overflow was discovered in BusyBox v.1.36.1 in the next_token function at awk.c:1159.',
-              'diffID':        'sha256:383269fd0d7d9a5f547ad63131df9c00938dbbb23170a498357bc9fb5cd0948a',
-              'fixedVersions': [
-                '1.35.0-r30'
-              ],
-              'installedVersion': '1.35.0-r29',
-              'packageName':      'ssl_client',
-              'purl':             'pkg:apk/alpine/ssl_client@1.35.0-r29?arch=armv7&distro=3.17.1',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2023-42366',
-                'https://bugs.busybox.net/show_bug.cgi?id=15874',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-42366',
-                'https://security.netapp.com/advisory/ntap-20241206-0007/',
-                'https://www.cve.org/CVERecord?id=CVE-2023-42366'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'busybox: A heap-buffer-overflow'
-            }
-          ]
-        }
-      ],
-      'summary': {
-        'critical':   0,
-        'high':       20,
-        'low':        4,
-        'medium':     44,
-        'suppressed': 0,
-        'unknown':    0
-      }
-    }
-  },
-  {
-    'id':    'default/49b5fb6d5014f68a6221fc88a7342e0dd3da4872390689b04c78c64b5c8ec106',
-    'type':  'storage.sbomscanner.kubewarden.io.vulnerabilityreport',
-    'links': {
-      'patch':  'https://localhost:8005/v1/storage.sbomscanner.kubewarden.io.vulnerabilityreports/default/49b5fb6d5014f68a6221fc88a7342e0dd3da4872390689b04c78c64b5c8ec106',
-      'remove': 'https://localhost:8005/v1/storage.sbomscanner.kubewarden.io.vulnerabilityreports/default/49b5fb6d5014f68a6221fc88a7342e0dd3da4872390689b04c78c64b5c8ec106',
-      'self':   'https://localhost:8005/v1/storage.sbomscanner.kubewarden.io.vulnerabilityreports/default/49b5fb6d5014f68a6221fc88a7342e0dd3da4872390689b04c78c64b5c8ec106',
-      'update': 'https://localhost:8005/v1/storage.sbomscanner.kubewarden.io.vulnerabilityreports/default/49b5fb6d5014f68a6221fc88a7342e0dd3da4872390689b04c78c64b5c8ec106',
-      'view':   'https://localhost:8005/apis/storage.sbomscanner.kubewarden.io/v1alpha1/namespaces/default/vulnerabilityreports/49b5fb6d5014f68a6221fc88a7342e0dd3da4872390689b04c78c64b5c8ec106'
-    },
-    'apiVersion':    'storage.sbomscanner.kubewarden.io/v1alpha1',
-    'imageMetadata': {
-      'digest':      'sha256:b06a5cf61b2956088722c4f1b9a6f71dfe95f0b1fe285d44195452b8a1627de7',
-      'platform':    'linux/arm64/v8',
-      'registry':    'lsong-demo1',
-      'registryURI': 'registry-1.docker.io',
-      'repository':  'library/alpine',
-      'tag':         '3.14.2'
-    },
-    'kind':     'VulnerabilityReport',
-    'metadata': {
-      'creationTimestamp': '2026-01-14T15:47:32Z',
-      'fields':            [
-        '49b5fb6d5014f68a6221fc88a7342e0dd3da4872390689b04c78c64b5c8ec106',
-        'registry-1.docker.io/library/alpine:3.14.2',
-        'linux/arm64/v8',
-        '43 (0 suppressed)'
-      ],
-      'labels': {
-        'app.kubernetes.io/managed-by':          'sbomscanner',
-        'app.kubernetes.io/part-of':             'sbomscanner',
-        'sbomscanner.kubewarden.io/scanjob-uid': '445c600a-c4b6-40b3-bd71-f2d2140a37d5'
-      },
-      'name':            '49b5fb6d5014f68a6221fc88a7342e0dd3da4872390689b04c78c64b5c8ec106',
-      'namespace':       'default',
-      'ownerReferences': [
-        {
-          'apiVersion':         'storage.sbomscanner.kubewarden.io/v1alpha1',
-          'blockOwnerDeletion': true,
-          'controller':         true,
-          'kind':               'SBOM',
-          'name':               '49b5fb6d5014f68a6221fc88a7342e0dd3da4872390689b04c78c64b5c8ec106',
-          'uid':                '55d8f33d-7f4d-4588-b01a-d94474cf197d'
-        }
-      ],
-      'relationships': [
-        {
-          'fromId':   'default/49b5fb6d5014f68a6221fc88a7342e0dd3da4872390689b04c78c64b5c8ec106',
-          'fromType': 'storage.sbomscanner.kubewarden.io.sbom',
-          'rel':      'owner',
-          'state':    'active',
-          'message':  'Resource is current'
-        }
-      ],
-      'resourceVersion': '2',
-      'state':           {
-        'error':         false,
-        'message':       'Resource is current',
-        'name':          'active',
-        'transitioning': false
-      },
-      'uid': 'e13430b2-66ef-4b3c-a97c-f56cee35bbd9'
-    },
-    'report': {
-      'results': [
-        {
-          'class':           'os-pkgs',
-          'target':          '/var/run/worker/trivy.sbom.70480192.json (alpine 3.14.2)',
-          'type':            'alpine',
-          'vulnerabilities': [
-            {
-              'cve':  'CVE-2021-42378',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the getvar_i function",
-              'diffID':        'sha256:ee420dfed78aeb92dbd78bf0e97e3a3cad5ccfbb59fa5dac4e04639210cc7905',
-              'fixedVersions': [
-                '1.33.1-r6'
-              ],
-              'installedVersion': '1.33.1-r3',
-              'packageName':      'busybox',
-              'purl':             'pkg:apk/alpine/busybox@1.33.1-r3?arch=aarch64&distro=3.14.2',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42378',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42378',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42378'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the getvar_i()'
-            },
-            {
-              'cve':  'CVE-2021-42379',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the next_input_file function",
-              'diffID':        'sha256:ee420dfed78aeb92dbd78bf0e97e3a3cad5ccfbb59fa5dac4e04639210cc7905',
-              'fixedVersions': [
-                '1.33.1-r6'
-              ],
-              'installedVersion': '1.33.1-r3',
-              'packageName':      'busybox',
-              'purl':             'pkg:apk/alpine/busybox@1.33.1-r3?arch=aarch64&distro=3.14.2',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42379',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42379',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42379'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the next_input_file()'
-            },
-            {
-              'cve':  'CVE-2021-42380',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the clrvar function",
-              'diffID':        'sha256:ee420dfed78aeb92dbd78bf0e97e3a3cad5ccfbb59fa5dac4e04639210cc7905',
-              'fixedVersions': [
-                '1.33.1-r6'
-              ],
-              'installedVersion': '1.33.1-r3',
-              'packageName':      'busybox',
-              'purl':             'pkg:apk/alpine/busybox@1.33.1-r3?arch=aarch64&distro=3.14.2',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42380',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42380',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42380'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the clrvar()'
-            },
-            {
-              'cve':  'CVE-2021-42381',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the hash_init function",
-              'diffID':        'sha256:ee420dfed78aeb92dbd78bf0e97e3a3cad5ccfbb59fa5dac4e04639210cc7905',
-              'fixedVersions': [
-                '1.33.1-r6'
-              ],
-              'installedVersion': '1.33.1-r3',
-              'packageName':      'busybox',
-              'purl':             'pkg:apk/alpine/busybox@1.33.1-r3?arch=aarch64&distro=3.14.2',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42381',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42381',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42381'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the hash_init()'
-            },
-            {
-              'cve':  'CVE-2021-42382',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the getvar_s function",
-              'diffID':        'sha256:ee420dfed78aeb92dbd78bf0e97e3a3cad5ccfbb59fa5dac4e04639210cc7905',
-              'fixedVersions': [
-                '1.33.1-r6'
-              ],
-              'installedVersion': '1.33.1-r3',
-              'packageName':      'busybox',
-              'purl':             'pkg:apk/alpine/busybox@1.33.1-r3?arch=aarch64&distro=3.14.2',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42382',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42382',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42382'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the getvar_s()'
-            },
-            {
-              'cve':  'CVE-2021-42383',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the evaluate function",
-              'diffID':        'sha256:ee420dfed78aeb92dbd78bf0e97e3a3cad5ccfbb59fa5dac4e04639210cc7905',
-              'fixedVersions': [
-                '1.33.1-r6'
-              ],
-              'installedVersion': '1.33.1-r3',
-              'packageName':      'busybox',
-              'purl':             'pkg:apk/alpine/busybox@1.33.1-r3?arch=aarch64&distro=3.14.2',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42383',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42383',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42383'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the evaluate()'
-            },
-            {
-              'cve':  'CVE-2021-42384',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the handle_special function",
-              'diffID':        'sha256:ee420dfed78aeb92dbd78bf0e97e3a3cad5ccfbb59fa5dac4e04639210cc7905',
-              'fixedVersions': [
-                '1.33.1-r6'
-              ],
-              'installedVersion': '1.33.1-r3',
-              'packageName':      'busybox',
-              'purl':             'pkg:apk/alpine/busybox@1.33.1-r3?arch=aarch64&distro=3.14.2',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42384',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42384',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42384'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the handle_special()'
-            },
-            {
-              'cve':  'CVE-2021-42385',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the evaluate function",
-              'diffID':        'sha256:ee420dfed78aeb92dbd78bf0e97e3a3cad5ccfbb59fa5dac4e04639210cc7905',
-              'fixedVersions': [
-                '1.33.1-r6'
-              ],
-              'installedVersion': '1.33.1-r3',
-              'packageName':      'busybox',
-              'purl':             'pkg:apk/alpine/busybox@1.33.1-r3?arch=aarch64&distro=3.14.2',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42385',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42385',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42385'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the evaluate()'
-            },
-            {
-              'cve':  'CVE-2021-42386',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the nvalloc function",
-              'diffID':        'sha256:ee420dfed78aeb92dbd78bf0e97e3a3cad5ccfbb59fa5dac4e04639210cc7905',
-              'fixedVersions': [
-                '1.33.1-r6'
-              ],
-              'installedVersion': '1.33.1-r3',
-              'packageName':      'busybox',
-              'purl':             'pkg:apk/alpine/busybox@1.33.1-r3?arch=aarch64&distro=3.14.2',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42386',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42386',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42386'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the nvalloc()'
-            },
-            {
-              'cve':  'CVE-2022-28391',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '8.8',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-88'
-              ],
-              'description':   "BusyBox through 1.35.0 allows remote attackers to execute arbitrary code if netstat is used to print a DNS PTR record's value to a VT compatible terminal. Alternatively, the attacker could choose to change the terminal's colors.",
-              'diffID':        'sha256:ee420dfed78aeb92dbd78bf0e97e3a3cad5ccfbb59fa5dac4e04639210cc7905',
-              'fixedVersions': [
-                '1.33.1-r7'
-              ],
-              'installedVersion': '1.33.1-r3',
-              'packageName':      'busybox',
-              'purl':             'pkg:apk/alpine/busybox@1.33.1-r3?arch=aarch64&distro=3.14.2',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2022-28391',
-                'https://git.alpinelinux.org/aports/plain/main/busybox/0001-libbb-sockaddr2str-ensure-only-printable-characters-.patch',
-                'https://git.alpinelinux.org/aports/plain/main/busybox/0002-nslookup-sanitize-all-printed-strings-with-printable.patch',
-                'https://gitlab.alpinelinux.org/alpine/aports/-/issues/13661',
-                'https://nvd.nist.gov/vuln/detail/CVE-2022-28391',
-                'https://www.cve.org/CVERecord?id=CVE-2022-28391'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: remote attackers may execute arbitrary code if netstat is used'
-            },
-            {
-              'cve':  'CVE-2021-42374',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '5.7',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-125'
-              ],
-              'description':   "An out-of-bounds heap read in Busybox's unlzma applet leads to information leak and denial of service when crafted LZMA-compressed input is decompressed. This can be triggered by any applet/format that",
-              'diffID':        'sha256:ee420dfed78aeb92dbd78bf0e97e3a3cad5ccfbb59fa5dac4e04639210cc7905',
-              'fixedVersions': [
-                '1.33.1-r4'
-              ],
-              'installedVersion': '1.33.1-r3',
-              'packageName':      'busybox',
-              'purl':             'pkg:apk/alpine/busybox@1.33.1-r3?arch=aarch64&distro=3.14.2',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42374',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42374',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42374'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'busybox: out-of-bounds read in unlzma applet leads to information leak and denial of service when crafted LZMA-compressed input is decompressed'
-            },
-            {
-              'cve':  'CVE-2021-42375',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.5',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '4.1',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-159'
-              ],
-              'description':   "An incorrect handling of a special element in Busybox's ash applet leads to denial of service when processing a crafted shell command, due to the shell mistaking specific characters for reserved characters. This may be used for DoS under rare conditions of filtered command input.",
-              'diffID':        'sha256:ee420dfed78aeb92dbd78bf0e97e3a3cad5ccfbb59fa5dac4e04639210cc7905',
-              'fixedVersions': [
-                '1.33.1-r5'
-              ],
-              'installedVersion': '1.33.1-r3',
-              'packageName':      'busybox',
-              'purl':             'pkg:apk/alpine/busybox@1.33.1-r3?arch=aarch64&distro=3.14.2',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42375',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42375',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42375'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'busybox: incorrect handling of a special element in ash applet leads to denial of service when processing a crafted shell command'
-            },
-            {
-              'cve':  'CVE-2022-0778',
-              'cvss': {
-                'bitnami': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'ghsa': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'nvd': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-835'
-              ],
-              'description':   'The BN_mod_sqrt() function, which computes a modular square root, contains a bug that can cause it to loop forever for non-prime moduli. Internally this function is used when parsing certificates that contain elliptic curve public keys in compressed form or explicit elliptic curve parameters with a base point encoded in compressed form. It is possible to trigger the infinite loop by crafting a certificate that has invalid explicit curve parameters. Since certificate parsing happens prior to verification of the certificate signature, any process that parses an externally supplied certificate may thus be subject to a denial of service attack. The infinite loop can also be reached when parsing crafted private keys as they can contain explicit elliptic curve parameters. Thus vulnerable situations include: - TLS clients consuming server certificates - TLS servers consuming client certificates - Hosting providers taking certificates or private keys from customers - Certificate authorities parsing certification requests from subscribers - Anything else which parses ASN.1 elliptic curve parameters Also any other applications that use the BN_mod_sqrt() where the attacker can control the parameter values are vulnerable to this DoS issue. In the OpenSSL 1.0.2 version the public key is not parsed during initial parsing of the certificate which makes it slightly harder to trigger the infinite loop. However any operation which requires the public key from the certificate will trigger the infinite loop. In particular the attacker can use a self-signed certificate to trigger the loop during verification of the certificate signature. This issue affects OpenSSL versions 1.0.2, 1.1.1 and 3.0. It was addressed in the releases of 1.1.1n and 3.0.2 on the 15th March 2022. Fixed in OpenSSL 3.0.2 (Affected 3.0.0,3.0.1). Fixed in OpenSSL 1.1.1n (Affected 1.1.1-1.1.1m). Fixed in OpenSSL 1.0.2zd (Affected 1.0.2-1.0.2zc).',
-              'diffID':        'sha256:ee420dfed78aeb92dbd78bf0e97e3a3cad5ccfbb59fa5dac4e04639210cc7905',
-              'fixedVersions': [
-                '1.1.1n-r0'
-              ],
-              'installedVersion': '1.1.1l-r0',
-              'packageName':      'libcrypto1.1',
-              'purl':             'pkg:apk/alpine/libcrypto1.1@1.1.1l-r0?arch=aarch64&distro=3.14.2',
-              'references':       [
-                'http://packetstormsecurity.com/files/167344/OpenSSL-1.0.2-1.1.1-3.0-BN_mod_sqrt-Infinite-Loop.html',
-                'http://seclists.org/fulldisclosure/2022/May/33',
-                'http://seclists.org/fulldisclosure/2022/May/35',
-                'http://seclists.org/fulldisclosure/2022/May/38',
-                'https://access.redhat.com/errata/RHSA-2022:5326',
-                'https://access.redhat.com/security/cve/CVE-2022-0778',
-                'https://bugzilla.redhat.com/2062202',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2062202',
-                'https://cert-portal.siemens.com/productcert/pdf/ssa-712929.pdf',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-0778',
-                'https://errata.almalinux.org/8/ALSA-2022-5326.html',
-                'https://errata.rockylinux.org/RLSA-2022:4899',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=3118eb64934499d93db3230748a452351d1d9a65',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=380085481c64de749a6dd25cdf0bcf4360b30f83',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=a466912611aa6cbdf550cd10601390e587451246',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=3118eb64934499d93db3230748a452351d1d9a65',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=380085481c64de749a6dd25cdf0bcf4360b30f83',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=a466912611aa6cbdf550cd10601390e587451246',
-                'https://linux.oracle.com/cve/CVE-2022-0778.html',
-                'https://linux.oracle.com/errata/ELSA-2022-9272.html',
-                'https://lists.debian.org/debian-lts-announce/2022/03/msg00023.html',
-                'https://lists.debian.org/debian-lts-announce/2022/03/msg00024.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/323SNN6ZX7PRJJWP2BUAFLPUAE42XWLZ',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/323SNN6ZX7PRJJWP2BUAFLPUAE42XWLZ/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GDB3GQVJPXJE7X5C5JN6JAA4XUDWD6E6',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GDB3GQVJPXJE7X5C5JN6JAA4XUDWD6E6/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/W6K3PR542DXWLEFFMFIDMME4CWMHJRMG',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/W6K3PR542DXWLEFFMFIDMME4CWMHJRMG/',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/323SNN6ZX7PRJJWP2BUAFLPUAE42XWLZ',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/GDB3GQVJPXJE7X5C5JN6JAA4XUDWD6E6',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/W6K3PR542DXWLEFFMFIDMME4CWMHJRMG',
-                'https://nvd.nist.gov/vuln/detail/CVE-2022-0778',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2022-0002',
-                'https://rustsec.org/advisories/RUSTSEC-2022-0014.html',
-                'https://security.gentoo.org/glsa/202210-02',
-                'https://security.netapp.com/advisory/ntap-20220321-0002',
-                'https://security.netapp.com/advisory/ntap-20220321-0002/',
-                'https://security.netapp.com/advisory/ntap-20220429-0005',
-                'https://security.netapp.com/advisory/ntap-20220429-0005/',
-                'https://security.netapp.com/advisory/ntap-20240621-0006',
-                'https://security.netapp.com/advisory/ntap-20240621-0006/',
-                'https://support.apple.com/kb/HT213255',
-                'https://support.apple.com/kb/HT213256',
-                'https://support.apple.com/kb/HT213257',
-                'https://ubuntu.com/security/notices/USN-5328-1',
-                'https://ubuntu.com/security/notices/USN-5328-2',
-                'https://ubuntu.com/security/notices/USN-6457-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2022-0778',
-                'https://www.debian.org/security/2022/dsa-5103',
-                'https://www.openssl.org/news/secadv/20220315.txt',
-                'https://www.oracle.com/security-alerts/cpuapr2022.html',
-                'https://www.oracle.com/security-alerts/cpujul2022.html',
-                'https://www.tenable.com/security/tns-2022-06',
-                'https://www.tenable.com/security/tns-2022-07',
-                'https://www.tenable.com/security/tns-2022-08',
-                'https://www.tenable.com/security/tns-2022-09'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: Infinite loop in BN_mod_sqrt() reachable when parsing certificates'
-            },
-            {
-              'cve':  'CVE-2022-4450',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'nvd': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-415'
-              ],
-              'description':   'The function PEM_read_bio_ex() reads a PEM file from a BIO and parses and\ndecodes the "name" (e.g. "CERTIFICATE"), any header data and the payload data.\nIf the function succeeds then the "name_out", "header" and "data" arguments are\npopulated with pointers to buffers containing the relevant decoded data. The\ncaller is responsible for freeing those buffers. It is possible to construct a\nPEM file that results in 0 bytes of payload data. In this case PEM_read_bio_ex()\nwill return a failure code but will populate the header argument with a pointer\nto a buffer that has already been freed. If the caller also frees this buffer\nthen a double free will occur. This will most likely lead to a crash. This\ncould be exploited by an attacker who has the ability to supply malicious PEM\nfiles for parsing to achieve a denial of service attack.\n\nThe functions PEM_read_bio() and PEM_read() are simple wrappers around\nPEM_read_bio_ex() and therefore these functions are also directly affected.\n\nThese functions are also called indirectly by a number of other OpenSSL\nfunctions including PEM_X509_INFO_read_bio_ex() and\nSSL_CTX_use_serverinfo_file() which are also vulnerable. Some OpenSSL internal\nuses of these functions are not vulnerable because the caller does not free the\nheader argument if PEM_read_bio_ex() returns a failure code. These locations\ninclude the PEM_read_bio_TYPE() functions as well as the decoders introduced in\nOpenSSL 3.0.\n\nThe OpenSSL asn1parse command line application is also impacted by this issue.',
-              'diffID':        'sha256:ee420dfed78aeb92dbd78bf0e97e3a3cad5ccfbb59fa5dac4e04639210cc7905',
-              'fixedVersions': [
-                '1.1.1t-r0'
-              ],
-              'installedVersion': '1.1.1l-r0',
-              'packageName':      'libcrypto1.1',
-              'purl':             'pkg:apk/alpine/libcrypto1.1@1.1.1l-r0?arch=aarch64&distro=3.14.2',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2023:2165',
-                'https://access.redhat.com/security/cve/CVE-2022-4450',
-                'https://bugzilla.redhat.com/1960321',
-                'https://bugzilla.redhat.com/2164440',
-                'https://bugzilla.redhat.com/2164487',
-                'https://bugzilla.redhat.com/2164492',
-                'https://bugzilla.redhat.com/2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144000',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144003',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144006',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144008',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144010',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144012',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144015',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144017',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144019',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2145170',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2158412',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164440',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164487',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164488',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164492',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164497',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164499',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164500',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4203',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4304',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4450',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0215',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0216',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0217',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0286',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0401',
-                'https://errata.almalinux.org/9/ALSA-2023-2165.html',
-                'https://errata.rockylinux.org/RLSA-2023:0946',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=63bcf189be73a9cc1264059bed6f57974be74a83',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=bbcf509bd046b34cca19c766bbddc31683d0858b',
-                'https://linux.oracle.com/cve/CVE-2022-4450.html',
-                'https://linux.oracle.com/errata/ELSA-2023-32791.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2022-4450',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0003',
-                'https://rustsec.org/advisories/RUSTSEC-2023-0010.html',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://ubuntu.com/security/notices/USN-5844-1',
-                'https://ubuntu.com/security/notices/USN-6564-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2022-4450',
-                'https://www.openssl.org/news/secadv/20230207.txt'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: double free after calling PEM_read_bio_ex'
-            },
-            {
-              'cve':  'CVE-2023-0215',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'nvd': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   'The public API function BIO_new_NDEF is a helper function used for streaming\nASN.1 data via a BIO. It is primarily used internally to OpenSSL to support the\nSMIME, CMS and PKCS7 streaming capabilities, but may also be called directly by\nend user applications.\n\nThe function receives a BIO from the caller, prepends a new BIO_f_asn1 filter\nBIO onto the front of it to form a BIO chain, and then returns the new head of\nthe BIO chain to the caller. Under certain conditions, for example if a CMS\nrecipient public key is invalid, the new filter BIO is freed and the function\nreturns a NULL result indicating a failure. However, in this case, the BIO chain\nis not properly cleaned up and the BIO passed by the caller still retains\ninternal pointers to the previously freed filter BIO. If the caller then goes on\nto call BIO_pop() on the BIO then a use-after-free will occur. This will most\nlikely result in a crash.\n\n\n\nThis scenario occurs directly in the internal function B64_write_ASN1() which\nmay cause BIO_new_NDEF() to be called and will subsequently call BIO_pop() on\nthe BIO. This internal function is in turn called by the public API functions\nPEM_write_bio_ASN1_stream, PEM_write_bio_CMS_stream, PEM_write_bio_PKCS7_stream,\nSMIME_write_ASN1, SMIME_write_CMS and SMIME_write_PKCS7.\n\nOther public API functions that may be impacted by this include\ni2d_ASN1_bio_stream, BIO_new_CMS, BIO_new_PKCS7, i2d_CMS_bio_stream and\ni2d_PKCS7_bio_stream.\n\nThe OpenSSL cms and smime command line applications are similarly affected.',
-              'diffID':        'sha256:ee420dfed78aeb92dbd78bf0e97e3a3cad5ccfbb59fa5dac4e04639210cc7905',
-              'fixedVersions': [
-                '1.1.1t-r0'
-              ],
-              'installedVersion': '1.1.1l-r0',
-              'packageName':      'libcrypto1.1',
-              'purl':             'pkg:apk/alpine/libcrypto1.1@1.1.1l-r0?arch=aarch64&distro=3.14.2',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2023:2165',
-                'https://access.redhat.com/security/cve/CVE-2023-0215',
-                'https://bugzilla.redhat.com/1960321',
-                'https://bugzilla.redhat.com/2164440',
-                'https://bugzilla.redhat.com/2164487',
-                'https://bugzilla.redhat.com/2164492',
-                'https://bugzilla.redhat.com/2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144000',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144003',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144006',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144008',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144010',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144012',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144015',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144017',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144019',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2145170',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2158412',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164440',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164487',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164488',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164492',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164497',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164499',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164500',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4203',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4304',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4450',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0215',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0216',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0217',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0286',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0401',
-                'https://errata.almalinux.org/9/ALSA-2023-2165.html',
-                'https://errata.rockylinux.org/RLSA-2023:0946',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=8818064ce3c3c0f1b740a5aaba2a987e75bfbafd',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=9816136fe31d92ace4037d5da5257f763aeeb4eb',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=c3829dd8825c654652201e16f8a0a0c46ee3f344',
-                'https://linux.oracle.com/cve/CVE-2023-0215.html',
-                'https://linux.oracle.com/errata/ELSA-2023-32791.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-0215',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0003',
-                'https://rustsec.org/advisories/RUSTSEC-2023-0009.html',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://security.netapp.com/advisory/ntap-20230427-0007',
-                'https://security.netapp.com/advisory/ntap-20230427-0007/',
-                'https://security.netapp.com/advisory/ntap-20230427-0009',
-                'https://security.netapp.com/advisory/ntap-20230427-0009/',
-                'https://security.netapp.com/advisory/ntap-20240621-0006',
-                'https://security.netapp.com/advisory/ntap-20240621-0006/',
-                'https://ubuntu.com/security/notices/USN-5844-1',
-                'https://ubuntu.com/security/notices/USN-5845-1',
-                'https://ubuntu.com/security/notices/USN-5845-2',
-                'https://ubuntu.com/security/notices/USN-6564-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-0215',
-                'https://www.openssl.org/news/secadv/20230207.txt'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: use-after-free following BIO_new_NDEF'
-            },
-            {
-              'cve':  'CVE-2023-0286',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '7.4',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H'
-                },
-                'nvd': {
-                  'v3score':  '7.4',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.4',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-843'
-              ],
-              'description':   'There is a type confusion vulnerability relating to X.400 address processing\ninside an X.509 GeneralName. X.400 addresses were parsed as an ASN1_STRING but\nthe public structure definition for GENERAL_NAME incorrectly specified the type\nof the x400Address field as ASN1_TYPE. This field is subsequently interpreted by\nthe OpenSSL function GENERAL_NAME_cmp as an ASN1_TYPE rather than an\nASN1_STRING.\n\nWhen CRL checking is enabled (i.e. the application sets the\nX509_V_FLAG_CRL_CHECK flag), this vulnerability may allow an attacker to pass\narbitrary pointers to a memcmp call, enabling them to read memory contents or\nenact a denial of service. In most cases, the attack requires the attacker to\nprovide both the certificate chain and CRL, neither of which need to have a\nvalid signature. If the attacker only controls one of these inputs, the other\ninput must already contain an X.400 address as a CRL distribution point, which\nis uncommon. As such, this vulnerability is most likely to only affect\napplications which have implemented their own functionality for retrieving CRLs\nover a network.',
-              'diffID':        'sha256:ee420dfed78aeb92dbd78bf0e97e3a3cad5ccfbb59fa5dac4e04639210cc7905',
-              'fixedVersions': [
-                '1.1.1t-r0'
-              ],
-              'installedVersion': '1.1.1l-r0',
-              'packageName':      'libcrypto1.1',
-              'purl':             'pkg:apk/alpine/libcrypto1.1@1.1.1l-r0?arch=aarch64&distro=3.14.2',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2025:7937',
-                'https://access.redhat.com/security/cve/CVE-2023-0286',
-                'https://access.redhat.com/security/cve/cve-2023-0286',
-                'https://bugzilla.redhat.com/2164440',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144000',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144003',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144006',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144008',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144010',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144012',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144015',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144017',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144019',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2145170',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2158412',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164440',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164487',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164488',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164492',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164497',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164499',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164500',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4203',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4304',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4450',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0215',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0216',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0217',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0286',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0401',
-                'https://errata.almalinux.org/9/ALSA-2025-7937.html',
-                'https://errata.rockylinux.org/RLSA-2023:0946',
-                'https://ftp.openbsd.org/pub/OpenBSD/LibreSSL/libressl-3.6.2-relnotes.txt',
-                'https://ftp.openbsd.org/pub/OpenBSD/patches/7.2/common/018_x509.patch.sig',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=2c6c9d439b484e1ba9830d8454a34fa4f80fdfe9',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=2f7530077e0ef79d98718138716bc51ca0cad658',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=fd2af07dc083a350c959147097003a14a5e8ac4d',
-                'https://github.com/pyca/cryptography',
-                'https://github.com/pyca/cryptography/security/advisories/GHSA-x4qr-2fvf-3mr5',
-                'https://linux.oracle.com/cve/CVE-2023-0286.html',
-                'https://linux.oracle.com/errata/ELSA-2025-7937.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-0286',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0003',
-                'https://rustsec.org/advisories/RUSTSEC-2023-0006.html',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://ubuntu.com/security/notices/USN-5844-1',
-                'https://ubuntu.com/security/notices/USN-5845-1',
-                'https://ubuntu.com/security/notices/USN-5845-2',
-                'https://ubuntu.com/security/notices/USN-6564-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-0286',
-                'https://www.openssl.org/news/secadv/20230207.txt'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: X.400 address type confusion in X.509 GeneralName'
-            },
-            {
-              'cve':  'CVE-2023-0464',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-295'
-              ],
-              'description':   "A security vulnerability has been identified in all supported versions\n\nof OpenSSL related to the verification of X.509 certificate chains\nthat include policy constraints.  Attackers may be able to exploit this\nvulnerability by creating a malicious certificate chain that triggers\nexponential use of computational resources, leading to a denial-of-service\n(DoS) attack on affected systems.\n\nPolicy processing is disabled by default but can be enabled by passing\nthe `-policy' argument to the command line utilities or by calling the\n`X509_VERIFY_PARAM_set1_policies()' function.",
-              'diffID':        'sha256:ee420dfed78aeb92dbd78bf0e97e3a3cad5ccfbb59fa5dac4e04639210cc7905',
-              'fixedVersions': [
-                '1.1.1t-r1'
-              ],
-              'installedVersion': '1.1.1l-r0',
-              'packageName':      'libcrypto1.1',
-              'purl':             'pkg:apk/alpine/libcrypto1.1@1.1.1l-r0?arch=aarch64&distro=3.14.2',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2023:3722',
-                'https://access.redhat.com/security/cve/CVE-2023-0464',
-                'https://bugzilla.redhat.com/2181082',
-                'https://bugzilla.redhat.com/2182561',
-                'https://bugzilla.redhat.com/2182565',
-                'https://bugzilla.redhat.com/2188461',
-                'https://bugzilla.redhat.com/2207947',
-                'https://errata.almalinux.org/9/ALSA-2023-3722.html',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=2017771e2db3e2b96f89bbe8766c3209f6a99545',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=2dcd4f1e3115f38cefa43e3efbe9b801c27e642e',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=879f7080d7e141f415c79eaa3a8ac4a3dad0348b',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=959c59c7a0164117e7f8366466a32bb1f8d77ff1',
-                'https://linux.oracle.com/cve/CVE-2023-0464.html',
-                'https://linux.oracle.com/errata/ELSA-2023-3722.html',
-                'https://lists.debian.org/debian-lts-announce/2023/06/msg00011.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-0464',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://security.netapp.com/advisory/ntap-20230406-0006/',
-                'https://security.netapp.com/advisory/ntap-20240621-0006/',
-                'https://ubuntu.com/security/notices/USN-6039-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.couchbase.com/alerts/',
-                'https://www.cve.org/CVERecord?id=CVE-2023-0464',
-                'https://www.debian.org/security/2023/dsa-5417',
-                'https://www.openssl.org/news/secadv/20230322.txt'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: Denial of service by excessive resource usage in verifying X509 policy constraints'
-            },
-            {
-              'cve':  'CVE-2022-2097',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N'
-                },
-                'nvd': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N'
-                },
-                'redhat': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-327'
-              ],
-              'description':   "AES OCB mode for 32-bit x86 platforms using the AES-NI assembly optimised implementation will not encrypt the entirety of the data under some circumstances. This could reveal sixteen bytes of data that was preexisting in the memory that wasn't written. In the special case of \"in place\" encryption, sixteen bytes of the plaintext would be revealed. Since OpenSSL does not support OCB based cipher suites for TLS and DTLS, they are both unaffected. Fixed in OpenSSL 3.0.5 (Affected 3.0.0-3.0.4). Fixed in OpenSSL 1.1.1q (Affected 1.1.1-1.1.1p).",
-              'diffID':        'sha256:ee420dfed78aeb92dbd78bf0e97e3a3cad5ccfbb59fa5dac4e04639210cc7905',
-              'fixedVersions': [
-                '1.1.1q-r0'
-              ],
-              'installedVersion': '1.1.1l-r0',
-              'packageName':      'libcrypto1.1',
-              'purl':             'pkg:apk/alpine/libcrypto1.1@1.1.1l-r0?arch=aarch64&distro=3.14.2',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2022:6224',
-                'https://access.redhat.com/security/cve/CVE-2022-2097',
-                'https://bugzilla.redhat.com/2081494',
-                'https://bugzilla.redhat.com/2087911',
-                'https://bugzilla.redhat.com/2087913',
-                'https://bugzilla.redhat.com/2097310',
-                'https://bugzilla.redhat.com/2104905',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2081494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2097310',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2100554',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2104905',
-                'https://cert-portal.siemens.com/productcert/pdf/ssa-332410.pdf',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-1292',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-2068',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-2097',
-                'https://errata.almalinux.org/9/ALSA-2022-6224.html',
-                'https://errata.rockylinux.org/RLSA-2022:5818',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=919925673d6c9cfed3c1085497f5dfbbed5fc431',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=a98f339ddd7e8f487d6e0088d4a9a42324885a93',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=919925673d6c9cfed3c1085497f5dfbbed5fc431',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=a98f339ddd7e8f487d6e0088d4a9a42324885a93',
-                'https://github.com/alexcrichton/openssl-src-rs',
-                'https://linux.oracle.com/cve/CVE-2022-2097.html',
-                'https://linux.oracle.com/errata/ELSA-2022-9955.html',
-                'https://lists.debian.org/debian-lts-announce/2023/02/msg00019.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/R6CK57NBQFTPUMXAPJURCGXUYT76NQAK',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/R6CK57NBQFTPUMXAPJURCGXUYT76NQAK/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/V6567JERRHHJW2GNGJGKDRNHR7SNPZK7',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/V6567JERRHHJW2GNGJGKDRNHR7SNPZK7/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VCMNWKERPBKOEBNL7CLTTX3ZZCZLH7XA',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VCMNWKERPBKOEBNL7CLTTX3ZZCZLH7XA/',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/R6CK57NBQFTPUMXAPJURCGXUYT76NQAK',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/R6CK57NBQFTPUMXAPJURCGXUYT76NQAK/',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/V6567JERRHHJW2GNGJGKDRNHR7SNPZK7',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/V6567JERRHHJW2GNGJGKDRNHR7SNPZK7/',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/VCMNWKERPBKOEBNL7CLTTX3ZZCZLH7XA',
-                'https://nvd.nist.gov/vuln/detail/CVE-2022-2097',
-                'https://rustsec.org/advisories/RUSTSEC-2022-0032.html',
-                'https://security.gentoo.org/glsa/202210-02',
-                'https://security.netapp.com/advisory/ntap-20220715-0011',
-                'https://security.netapp.com/advisory/ntap-20220715-0011/',
-                'https://security.netapp.com/advisory/ntap-20230420-0008',
-                'https://security.netapp.com/advisory/ntap-20230420-0008/',
-                'https://security.netapp.com/advisory/ntap-20240621-0006',
-                'https://security.netapp.com/advisory/ntap-20240621-0006/',
-                'https://ubuntu.com/security/notices/USN-5502-1',
-                'https://ubuntu.com/security/notices/USN-6457-1',
-                'https://www.cve.org/CVERecord?id=CVE-2022-2097',
-                'https://www.debian.org/security/2023/dsa-5343',
-                'https://www.openssl.org/news/secadv/20220705.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: AES OCB fails to encrypt some bytes'
-            },
-            {
-              'cve':  'CVE-2022-4304',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N'
-                },
-                'nvd': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N'
-                },
-                'redhat': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-203'
-              ],
-              'description':   'A timing based side channel exists in the OpenSSL RSA Decryption implementation\nwhich could be sufficient to recover a plaintext across a network in a\nBleichenbacher style attack. To achieve a successful decryption an attacker\nwould have to be able to send a very large number of trial messages for\ndecryption. The vulnerability affects all RSA padding modes: PKCS#1 v1.5,\nRSA-OEAP and RSASVE.\n\nFor example, in a TLS connection, RSA is commonly used by a client to send an\nencrypted pre-master secret to the server. An attacker that had observed a\ngenuine connection between a client and a server could use this flaw to send\ntrial messages to the server and record the time taken to process them. After a\nsufficiently large number of messages the attacker could recover the pre-master\nsecret used for the original connection and thus be able to decrypt the\napplication data sent over that connection.',
-              'diffID':        'sha256:ee420dfed78aeb92dbd78bf0e97e3a3cad5ccfbb59fa5dac4e04639210cc7905',
-              'fixedVersions': [
-                '1.1.1t-r0'
-              ],
-              'installedVersion': '1.1.1l-r0',
-              'packageName':      'libcrypto1.1',
-              'purl':             'pkg:apk/alpine/libcrypto1.1@1.1.1l-r0?arch=aarch64&distro=3.14.2',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2023:2165',
-                'https://access.redhat.com/security/cve/CVE-2022-4304',
-                'https://bugzilla.redhat.com/1960321',
-                'https://bugzilla.redhat.com/2164440',
-                'https://bugzilla.redhat.com/2164487',
-                'https://bugzilla.redhat.com/2164492',
-                'https://bugzilla.redhat.com/2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144000',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144003',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144006',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144008',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144010',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144012',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144015',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144017',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144019',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2145170',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2158412',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164440',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164487',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164488',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164492',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164497',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164499',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164500',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4203',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4304',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4450',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0215',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0216',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0217',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0286',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0401',
-                'https://errata.almalinux.org/9/ALSA-2023-2165.html',
-                'https://errata.rockylinux.org/RLSA-2023:0946',
-                'https://linux.oracle.com/cve/CVE-2022-4304.html',
-                'https://linux.oracle.com/errata/ELSA-2023-32791.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2022-4304',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0003',
-                'https://rustsec.org/advisories/RUSTSEC-2023-0007.html',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://ubuntu.com/security/notices/USN-5844-1',
-                'https://ubuntu.com/security/notices/USN-6564-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2022-4304',
-                'https://www.openssl.org/news/secadv/20230207.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: timing attack in RSA Decryption implementation'
-            },
-            {
-              'cve':  'CVE-2023-0465',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N'
-                },
-                'redhat': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-295'
-              ],
-              'description':   "Applications that use a non-default option when verifying certificates may be\nvulnerable to an attack from a malicious CA to circumvent certain checks.\n\nInvalid certificate policies in leaf certificates are silently ignored by\nOpenSSL and other certificate policy checks are skipped for that certificate.\nA malicious CA could use this to deliberately assert invalid certificate policies\nin order to circumvent policy checking on the certificate altogether.\n\nPolicy processing is disabled by default but can be enabled by passing\nthe `-policy' argument to the command line utilities or by calling the\n`X509_VERIFY_PARAM_set1_policies()' function.",
-              'diffID':        'sha256:ee420dfed78aeb92dbd78bf0e97e3a3cad5ccfbb59fa5dac4e04639210cc7905',
-              'fixedVersions': [
-                '1.1.1t-r2'
-              ],
-              'installedVersion': '1.1.1l-r0',
-              'packageName':      'libcrypto1.1',
-              'purl':             'pkg:apk/alpine/libcrypto1.1@1.1.1l-r0?arch=aarch64&distro=3.14.2',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2023:3722',
-                'https://access.redhat.com/security/cve/CVE-2023-0465',
-                'https://bugzilla.redhat.com/2181082',
-                'https://bugzilla.redhat.com/2182561',
-                'https://bugzilla.redhat.com/2182565',
-                'https://bugzilla.redhat.com/2188461',
-                'https://bugzilla.redhat.com/2207947',
-                'https://errata.almalinux.org/9/ALSA-2023-3722.html',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=10325176f3d3e98c6e2b3bf5ab1e3b334de6947a',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=1dd43e0709fece299b15208f36cc7c76209ba0bb',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=b013765abfa80036dc779dd0e50602c57bb3bf95',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=facfb1ab745646e97a1920977ae4a9965ea61d5c',
-                'https://linux.oracle.com/cve/CVE-2023-0465.html',
-                'https://linux.oracle.com/errata/ELSA-2023-3722.html',
-                'https://lists.debian.org/debian-lts-announce/2023/06/msg00011.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-0465',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://security.netapp.com/advisory/ntap-20230414-0001/',
-                'https://ubuntu.com/security/notices/USN-6039-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-0465',
-                'https://www.debian.org/security/2023/dsa-5417',
-                'https://www.openssl.org/news/secadv/20230328.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: Invalid certificate policies in leaf certificates are silently ignored'
-            },
-            {
-              'cve':  'CVE-2022-0778',
-              'cvss': {
-                'bitnami': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'ghsa': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'nvd': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-835'
-              ],
-              'description':   'The BN_mod_sqrt() function, which computes a modular square root, contains a bug that can cause it to loop forever for non-prime moduli. Internally this function is used when parsing certificates that contain elliptic curve public keys in compressed form or explicit elliptic curve parameters with a base point encoded in compressed form. It is possible to trigger the infinite loop by crafting a certificate that has invalid explicit curve parameters. Since certificate parsing happens prior to verification of the certificate signature, any process that parses an externally supplied certificate may thus be subject to a denial of service attack. The infinite loop can also be reached when parsing crafted private keys as they can contain explicit elliptic curve parameters. Thus vulnerable situations include: - TLS clients consuming server certificates - TLS servers consuming client certificates - Hosting providers taking certificates or private keys from customers - Certificate authorities parsing certification requests from subscribers - Anything else which parses ASN.1 elliptic curve parameters Also any other applications that use the BN_mod_sqrt() where the attacker can control the parameter values are vulnerable to this DoS issue. In the OpenSSL 1.0.2 version the public key is not parsed during initial parsing of the certificate which makes it slightly harder to trigger the infinite loop. However any operation which requires the public key from the certificate will trigger the infinite loop. In particular the attacker can use a self-signed certificate to trigger the loop during verification of the certificate signature. This issue affects OpenSSL versions 1.0.2, 1.1.1 and 3.0. It was addressed in the releases of 1.1.1n and 3.0.2 on the 15th March 2022. Fixed in OpenSSL 3.0.2 (Affected 3.0.0,3.0.1). Fixed in OpenSSL 1.1.1n (Affected 1.1.1-1.1.1m). Fixed in OpenSSL 1.0.2zd (Affected 1.0.2-1.0.2zc).',
-              'diffID':        'sha256:ee420dfed78aeb92dbd78bf0e97e3a3cad5ccfbb59fa5dac4e04639210cc7905',
-              'fixedVersions': [
-                '3.3.3p1-r3'
-              ],
-              'installedVersion': '3.3.3p1-r2',
-              'packageName':      'libretls',
-              'purl':             'pkg:apk/alpine/libretls@3.3.3p1-r2?arch=aarch64&distro=3.14.2',
-              'references':       [
-                'http://packetstormsecurity.com/files/167344/OpenSSL-1.0.2-1.1.1-3.0-BN_mod_sqrt-Infinite-Loop.html',
-                'http://seclists.org/fulldisclosure/2022/May/33',
-                'http://seclists.org/fulldisclosure/2022/May/35',
-                'http://seclists.org/fulldisclosure/2022/May/38',
-                'https://access.redhat.com/errata/RHSA-2022:5326',
-                'https://access.redhat.com/security/cve/CVE-2022-0778',
-                'https://bugzilla.redhat.com/2062202',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2062202',
-                'https://cert-portal.siemens.com/productcert/pdf/ssa-712929.pdf',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-0778',
-                'https://errata.almalinux.org/8/ALSA-2022-5326.html',
-                'https://errata.rockylinux.org/RLSA-2022:4899',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=3118eb64934499d93db3230748a452351d1d9a65',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=380085481c64de749a6dd25cdf0bcf4360b30f83',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=a466912611aa6cbdf550cd10601390e587451246',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=3118eb64934499d93db3230748a452351d1d9a65',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=380085481c64de749a6dd25cdf0bcf4360b30f83',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=a466912611aa6cbdf550cd10601390e587451246',
-                'https://linux.oracle.com/cve/CVE-2022-0778.html',
-                'https://linux.oracle.com/errata/ELSA-2022-9272.html',
-                'https://lists.debian.org/debian-lts-announce/2022/03/msg00023.html',
-                'https://lists.debian.org/debian-lts-announce/2022/03/msg00024.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/323SNN6ZX7PRJJWP2BUAFLPUAE42XWLZ',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/323SNN6ZX7PRJJWP2BUAFLPUAE42XWLZ/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GDB3GQVJPXJE7X5C5JN6JAA4XUDWD6E6',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GDB3GQVJPXJE7X5C5JN6JAA4XUDWD6E6/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/W6K3PR542DXWLEFFMFIDMME4CWMHJRMG',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/W6K3PR542DXWLEFFMFIDMME4CWMHJRMG/',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/323SNN6ZX7PRJJWP2BUAFLPUAE42XWLZ',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/GDB3GQVJPXJE7X5C5JN6JAA4XUDWD6E6',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/W6K3PR542DXWLEFFMFIDMME4CWMHJRMG',
-                'https://nvd.nist.gov/vuln/detail/CVE-2022-0778',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2022-0002',
-                'https://rustsec.org/advisories/RUSTSEC-2022-0014.html',
-                'https://security.gentoo.org/glsa/202210-02',
-                'https://security.netapp.com/advisory/ntap-20220321-0002',
-                'https://security.netapp.com/advisory/ntap-20220321-0002/',
-                'https://security.netapp.com/advisory/ntap-20220429-0005',
-                'https://security.netapp.com/advisory/ntap-20220429-0005/',
-                'https://security.netapp.com/advisory/ntap-20240621-0006',
-                'https://security.netapp.com/advisory/ntap-20240621-0006/',
-                'https://support.apple.com/kb/HT213255',
-                'https://support.apple.com/kb/HT213256',
-                'https://support.apple.com/kb/HT213257',
-                'https://ubuntu.com/security/notices/USN-5328-1',
-                'https://ubuntu.com/security/notices/USN-5328-2',
-                'https://ubuntu.com/security/notices/USN-6457-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2022-0778',
-                'https://www.debian.org/security/2022/dsa-5103',
-                'https://www.openssl.org/news/secadv/20220315.txt',
-                'https://www.oracle.com/security-alerts/cpuapr2022.html',
-                'https://www.oracle.com/security-alerts/cpujul2022.html',
-                'https://www.tenable.com/security/tns-2022-06',
-                'https://www.tenable.com/security/tns-2022-07',
-                'https://www.tenable.com/security/tns-2022-08',
-                'https://www.tenable.com/security/tns-2022-09'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: Infinite loop in BN_mod_sqrt() reachable when parsing certificates'
-            },
-            {
-              'cve':  'CVE-2022-0778',
-              'cvss': {
-                'bitnami': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'ghsa': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'nvd': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-835'
-              ],
-              'description':   'The BN_mod_sqrt() function, which computes a modular square root, contains a bug that can cause it to loop forever for non-prime moduli. Internally this function is used when parsing certificates that contain elliptic curve public keys in compressed form or explicit elliptic curve parameters with a base point encoded in compressed form. It is possible to trigger the infinite loop by crafting a certificate that has invalid explicit curve parameters. Since certificate parsing happens prior to verification of the certificate signature, any process that parses an externally supplied certificate may thus be subject to a denial of service attack. The infinite loop can also be reached when parsing crafted private keys as they can contain explicit elliptic curve parameters. Thus vulnerable situations include: - TLS clients consuming server certificates - TLS servers consuming client certificates - Hosting providers taking certificates or private keys from customers - Certificate authorities parsing certification requests from subscribers - Anything else which parses ASN.1 elliptic curve parameters Also any other applications that use the BN_mod_sqrt() where the attacker can control the parameter values are vulnerable to this DoS issue. In the OpenSSL 1.0.2 version the public key is not parsed during initial parsing of the certificate which makes it slightly harder to trigger the infinite loop. However any operation which requires the public key from the certificate will trigger the infinite loop. In particular the attacker can use a self-signed certificate to trigger the loop during verification of the certificate signature. This issue affects OpenSSL versions 1.0.2, 1.1.1 and 3.0. It was addressed in the releases of 1.1.1n and 3.0.2 on the 15th March 2022. Fixed in OpenSSL 3.0.2 (Affected 3.0.0,3.0.1). Fixed in OpenSSL 1.1.1n (Affected 1.1.1-1.1.1m). Fixed in OpenSSL 1.0.2zd (Affected 1.0.2-1.0.2zc).',
-              'diffID':        'sha256:ee420dfed78aeb92dbd78bf0e97e3a3cad5ccfbb59fa5dac4e04639210cc7905',
-              'fixedVersions': [
-                '1.1.1n-r0'
-              ],
-              'installedVersion': '1.1.1l-r0',
-              'packageName':      'libssl1.1',
-              'purl':             'pkg:apk/alpine/libssl1.1@1.1.1l-r0?arch=aarch64&distro=3.14.2',
-              'references':       [
-                'http://packetstormsecurity.com/files/167344/OpenSSL-1.0.2-1.1.1-3.0-BN_mod_sqrt-Infinite-Loop.html',
-                'http://seclists.org/fulldisclosure/2022/May/33',
-                'http://seclists.org/fulldisclosure/2022/May/35',
-                'http://seclists.org/fulldisclosure/2022/May/38',
-                'https://access.redhat.com/errata/RHSA-2022:5326',
-                'https://access.redhat.com/security/cve/CVE-2022-0778',
-                'https://bugzilla.redhat.com/2062202',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2062202',
-                'https://cert-portal.siemens.com/productcert/pdf/ssa-712929.pdf',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-0778',
-                'https://errata.almalinux.org/8/ALSA-2022-5326.html',
-                'https://errata.rockylinux.org/RLSA-2022:4899',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=3118eb64934499d93db3230748a452351d1d9a65',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=380085481c64de749a6dd25cdf0bcf4360b30f83',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=a466912611aa6cbdf550cd10601390e587451246',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=3118eb64934499d93db3230748a452351d1d9a65',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=380085481c64de749a6dd25cdf0bcf4360b30f83',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=a466912611aa6cbdf550cd10601390e587451246',
-                'https://linux.oracle.com/cve/CVE-2022-0778.html',
-                'https://linux.oracle.com/errata/ELSA-2022-9272.html',
-                'https://lists.debian.org/debian-lts-announce/2022/03/msg00023.html',
-                'https://lists.debian.org/debian-lts-announce/2022/03/msg00024.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/323SNN6ZX7PRJJWP2BUAFLPUAE42XWLZ',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/323SNN6ZX7PRJJWP2BUAFLPUAE42XWLZ/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GDB3GQVJPXJE7X5C5JN6JAA4XUDWD6E6',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GDB3GQVJPXJE7X5C5JN6JAA4XUDWD6E6/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/W6K3PR542DXWLEFFMFIDMME4CWMHJRMG',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/W6K3PR542DXWLEFFMFIDMME4CWMHJRMG/',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/323SNN6ZX7PRJJWP2BUAFLPUAE42XWLZ',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/GDB3GQVJPXJE7X5C5JN6JAA4XUDWD6E6',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/W6K3PR542DXWLEFFMFIDMME4CWMHJRMG',
-                'https://nvd.nist.gov/vuln/detail/CVE-2022-0778',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2022-0002',
-                'https://rustsec.org/advisories/RUSTSEC-2022-0014.html',
-                'https://security.gentoo.org/glsa/202210-02',
-                'https://security.netapp.com/advisory/ntap-20220321-0002',
-                'https://security.netapp.com/advisory/ntap-20220321-0002/',
-                'https://security.netapp.com/advisory/ntap-20220429-0005',
-                'https://security.netapp.com/advisory/ntap-20220429-0005/',
-                'https://security.netapp.com/advisory/ntap-20240621-0006',
-                'https://security.netapp.com/advisory/ntap-20240621-0006/',
-                'https://support.apple.com/kb/HT213255',
-                'https://support.apple.com/kb/HT213256',
-                'https://support.apple.com/kb/HT213257',
-                'https://ubuntu.com/security/notices/USN-5328-1',
-                'https://ubuntu.com/security/notices/USN-5328-2',
-                'https://ubuntu.com/security/notices/USN-6457-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2022-0778',
-                'https://www.debian.org/security/2022/dsa-5103',
-                'https://www.openssl.org/news/secadv/20220315.txt',
-                'https://www.oracle.com/security-alerts/cpuapr2022.html',
-                'https://www.oracle.com/security-alerts/cpujul2022.html',
-                'https://www.tenable.com/security/tns-2022-06',
-                'https://www.tenable.com/security/tns-2022-07',
-                'https://www.tenable.com/security/tns-2022-08',
-                'https://www.tenable.com/security/tns-2022-09'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: Infinite loop in BN_mod_sqrt() reachable when parsing certificates'
-            },
-            {
-              'cve':  'CVE-2022-4450',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'nvd': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-415'
-              ],
-              'description':   'The function PEM_read_bio_ex() reads a PEM file from a BIO and parses and\ndecodes the "name" (e.g. "CERTIFICATE"), any header data and the payload data.\nIf the function succeeds then the "name_out", "header" and "data" arguments are\npopulated with pointers to buffers containing the relevant decoded data. The\ncaller is responsible for freeing those buffers. It is possible to construct a\nPEM file that results in 0 bytes of payload data. In this case PEM_read_bio_ex()\nwill return a failure code but will populate the header argument with a pointer\nto a buffer that has already been freed. If the caller also frees this buffer\nthen a double free will occur. This will most likely lead to a crash. This\ncould be exploited by an attacker who has the ability to supply malicious PEM\nfiles for parsing to achieve a denial of service attack.\n\nThe functions PEM_read_bio() and PEM_read() are simple wrappers around\nPEM_read_bio_ex() and therefore these functions are also directly affected.\n\nThese functions are also called indirectly by a number of other OpenSSL\nfunctions including PEM_X509_INFO_read_bio_ex() and\nSSL_CTX_use_serverinfo_file() which are also vulnerable. Some OpenSSL internal\nuses of these functions are not vulnerable because the caller does not free the\nheader argument if PEM_read_bio_ex() returns a failure code. These locations\ninclude the PEM_read_bio_TYPE() functions as well as the decoders introduced in\nOpenSSL 3.0.\n\nThe OpenSSL asn1parse command line application is also impacted by this issue.',
-              'diffID':        'sha256:ee420dfed78aeb92dbd78bf0e97e3a3cad5ccfbb59fa5dac4e04639210cc7905',
-              'fixedVersions': [
-                '1.1.1t-r0'
-              ],
-              'installedVersion': '1.1.1l-r0',
-              'packageName':      'libssl1.1',
-              'purl':             'pkg:apk/alpine/libssl1.1@1.1.1l-r0?arch=aarch64&distro=3.14.2',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2023:2165',
-                'https://access.redhat.com/security/cve/CVE-2022-4450',
-                'https://bugzilla.redhat.com/1960321',
-                'https://bugzilla.redhat.com/2164440',
-                'https://bugzilla.redhat.com/2164487',
-                'https://bugzilla.redhat.com/2164492',
-                'https://bugzilla.redhat.com/2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144000',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144003',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144006',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144008',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144010',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144012',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144015',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144017',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144019',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2145170',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2158412',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164440',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164487',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164488',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164492',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164497',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164499',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164500',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4203',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4304',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4450',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0215',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0216',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0217',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0286',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0401',
-                'https://errata.almalinux.org/9/ALSA-2023-2165.html',
-                'https://errata.rockylinux.org/RLSA-2023:0946',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=63bcf189be73a9cc1264059bed6f57974be74a83',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=bbcf509bd046b34cca19c766bbddc31683d0858b',
-                'https://linux.oracle.com/cve/CVE-2022-4450.html',
-                'https://linux.oracle.com/errata/ELSA-2023-32791.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2022-4450',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0003',
-                'https://rustsec.org/advisories/RUSTSEC-2023-0010.html',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://ubuntu.com/security/notices/USN-5844-1',
-                'https://ubuntu.com/security/notices/USN-6564-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2022-4450',
-                'https://www.openssl.org/news/secadv/20230207.txt'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: double free after calling PEM_read_bio_ex'
-            },
-            {
-              'cve':  'CVE-2023-0215',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'nvd': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   'The public API function BIO_new_NDEF is a helper function used for streaming\nASN.1 data via a BIO. It is primarily used internally to OpenSSL to support the\nSMIME, CMS and PKCS7 streaming capabilities, but may also be called directly by\nend user applications.\n\nThe function receives a BIO from the caller, prepends a new BIO_f_asn1 filter\nBIO onto the front of it to form a BIO chain, and then returns the new head of\nthe BIO chain to the caller. Under certain conditions, for example if a CMS\nrecipient public key is invalid, the new filter BIO is freed and the function\nreturns a NULL result indicating a failure. However, in this case, the BIO chain\nis not properly cleaned up and the BIO passed by the caller still retains\ninternal pointers to the previously freed filter BIO. If the caller then goes on\nto call BIO_pop() on the BIO then a use-after-free will occur. This will most\nlikely result in a crash.\n\n\n\nThis scenario occurs directly in the internal function B64_write_ASN1() which\nmay cause BIO_new_NDEF() to be called and will subsequently call BIO_pop() on\nthe BIO. This internal function is in turn called by the public API functions\nPEM_write_bio_ASN1_stream, PEM_write_bio_CMS_stream, PEM_write_bio_PKCS7_stream,\nSMIME_write_ASN1, SMIME_write_CMS and SMIME_write_PKCS7.\n\nOther public API functions that may be impacted by this include\ni2d_ASN1_bio_stream, BIO_new_CMS, BIO_new_PKCS7, i2d_CMS_bio_stream and\ni2d_PKCS7_bio_stream.\n\nThe OpenSSL cms and smime command line applications are similarly affected.',
-              'diffID':        'sha256:ee420dfed78aeb92dbd78bf0e97e3a3cad5ccfbb59fa5dac4e04639210cc7905',
-              'fixedVersions': [
-                '1.1.1t-r0'
-              ],
-              'installedVersion': '1.1.1l-r0',
-              'packageName':      'libssl1.1',
-              'purl':             'pkg:apk/alpine/libssl1.1@1.1.1l-r0?arch=aarch64&distro=3.14.2',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2023:2165',
-                'https://access.redhat.com/security/cve/CVE-2023-0215',
-                'https://bugzilla.redhat.com/1960321',
-                'https://bugzilla.redhat.com/2164440',
-                'https://bugzilla.redhat.com/2164487',
-                'https://bugzilla.redhat.com/2164492',
-                'https://bugzilla.redhat.com/2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144000',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144003',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144006',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144008',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144010',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144012',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144015',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144017',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144019',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2145170',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2158412',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164440',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164487',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164488',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164492',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164497',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164499',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164500',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4203',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4304',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4450',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0215',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0216',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0217',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0286',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0401',
-                'https://errata.almalinux.org/9/ALSA-2023-2165.html',
-                'https://errata.rockylinux.org/RLSA-2023:0946',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=8818064ce3c3c0f1b740a5aaba2a987e75bfbafd',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=9816136fe31d92ace4037d5da5257f763aeeb4eb',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=c3829dd8825c654652201e16f8a0a0c46ee3f344',
-                'https://linux.oracle.com/cve/CVE-2023-0215.html',
-                'https://linux.oracle.com/errata/ELSA-2023-32791.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-0215',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0003',
-                'https://rustsec.org/advisories/RUSTSEC-2023-0009.html',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://security.netapp.com/advisory/ntap-20230427-0007',
-                'https://security.netapp.com/advisory/ntap-20230427-0007/',
-                'https://security.netapp.com/advisory/ntap-20230427-0009',
-                'https://security.netapp.com/advisory/ntap-20230427-0009/',
-                'https://security.netapp.com/advisory/ntap-20240621-0006',
-                'https://security.netapp.com/advisory/ntap-20240621-0006/',
-                'https://ubuntu.com/security/notices/USN-5844-1',
-                'https://ubuntu.com/security/notices/USN-5845-1',
-                'https://ubuntu.com/security/notices/USN-5845-2',
-                'https://ubuntu.com/security/notices/USN-6564-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-0215',
-                'https://www.openssl.org/news/secadv/20230207.txt'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: use-after-free following BIO_new_NDEF'
-            },
-            {
-              'cve':  'CVE-2023-0286',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '7.4',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H'
-                },
-                'nvd': {
-                  'v3score':  '7.4',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.4',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-843'
-              ],
-              'description':   'There is a type confusion vulnerability relating to X.400 address processing\ninside an X.509 GeneralName. X.400 addresses were parsed as an ASN1_STRING but\nthe public structure definition for GENERAL_NAME incorrectly specified the type\nof the x400Address field as ASN1_TYPE. This field is subsequently interpreted by\nthe OpenSSL function GENERAL_NAME_cmp as an ASN1_TYPE rather than an\nASN1_STRING.\n\nWhen CRL checking is enabled (i.e. the application sets the\nX509_V_FLAG_CRL_CHECK flag), this vulnerability may allow an attacker to pass\narbitrary pointers to a memcmp call, enabling them to read memory contents or\nenact a denial of service. In most cases, the attack requires the attacker to\nprovide both the certificate chain and CRL, neither of which need to have a\nvalid signature. If the attacker only controls one of these inputs, the other\ninput must already contain an X.400 address as a CRL distribution point, which\nis uncommon. As such, this vulnerability is most likely to only affect\napplications which have implemented their own functionality for retrieving CRLs\nover a network.',
-              'diffID':        'sha256:ee420dfed78aeb92dbd78bf0e97e3a3cad5ccfbb59fa5dac4e04639210cc7905',
-              'fixedVersions': [
-                '1.1.1t-r0'
-              ],
-              'installedVersion': '1.1.1l-r0',
-              'packageName':      'libssl1.1',
-              'purl':             'pkg:apk/alpine/libssl1.1@1.1.1l-r0?arch=aarch64&distro=3.14.2',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2025:7937',
-                'https://access.redhat.com/security/cve/CVE-2023-0286',
-                'https://access.redhat.com/security/cve/cve-2023-0286',
-                'https://bugzilla.redhat.com/2164440',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144000',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144003',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144006',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144008',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144010',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144012',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144015',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144017',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144019',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2145170',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2158412',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164440',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164487',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164488',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164492',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164497',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164499',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164500',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4203',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4304',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4450',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0215',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0216',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0217',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0286',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0401',
-                'https://errata.almalinux.org/9/ALSA-2025-7937.html',
-                'https://errata.rockylinux.org/RLSA-2023:0946',
-                'https://ftp.openbsd.org/pub/OpenBSD/LibreSSL/libressl-3.6.2-relnotes.txt',
-                'https://ftp.openbsd.org/pub/OpenBSD/patches/7.2/common/018_x509.patch.sig',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=2c6c9d439b484e1ba9830d8454a34fa4f80fdfe9',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=2f7530077e0ef79d98718138716bc51ca0cad658',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=fd2af07dc083a350c959147097003a14a5e8ac4d',
-                'https://github.com/pyca/cryptography',
-                'https://github.com/pyca/cryptography/security/advisories/GHSA-x4qr-2fvf-3mr5',
-                'https://linux.oracle.com/cve/CVE-2023-0286.html',
-                'https://linux.oracle.com/errata/ELSA-2025-7937.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-0286',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0003',
-                'https://rustsec.org/advisories/RUSTSEC-2023-0006.html',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://ubuntu.com/security/notices/USN-5844-1',
-                'https://ubuntu.com/security/notices/USN-5845-1',
-                'https://ubuntu.com/security/notices/USN-5845-2',
-                'https://ubuntu.com/security/notices/USN-6564-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-0286',
-                'https://www.openssl.org/news/secadv/20230207.txt'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: X.400 address type confusion in X.509 GeneralName'
-            },
-            {
-              'cve':  'CVE-2023-0464',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-295'
-              ],
-              'description':   "A security vulnerability has been identified in all supported versions\n\nof OpenSSL related to the verification of X.509 certificate chains\nthat include policy constraints.  Attackers may be able to exploit this\nvulnerability by creating a malicious certificate chain that triggers\nexponential use of computational resources, leading to a denial-of-service\n(DoS) attack on affected systems.\n\nPolicy processing is disabled by default but can be enabled by passing\nthe `-policy' argument to the command line utilities or by calling the\n`X509_VERIFY_PARAM_set1_policies()' function.",
-              'diffID':        'sha256:ee420dfed78aeb92dbd78bf0e97e3a3cad5ccfbb59fa5dac4e04639210cc7905',
-              'fixedVersions': [
-                '1.1.1t-r1'
-              ],
-              'installedVersion': '1.1.1l-r0',
-              'packageName':      'libssl1.1',
-              'purl':             'pkg:apk/alpine/libssl1.1@1.1.1l-r0?arch=aarch64&distro=3.14.2',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2023:3722',
-                'https://access.redhat.com/security/cve/CVE-2023-0464',
-                'https://bugzilla.redhat.com/2181082',
-                'https://bugzilla.redhat.com/2182561',
-                'https://bugzilla.redhat.com/2182565',
-                'https://bugzilla.redhat.com/2188461',
-                'https://bugzilla.redhat.com/2207947',
-                'https://errata.almalinux.org/9/ALSA-2023-3722.html',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=2017771e2db3e2b96f89bbe8766c3209f6a99545',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=2dcd4f1e3115f38cefa43e3efbe9b801c27e642e',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=879f7080d7e141f415c79eaa3a8ac4a3dad0348b',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=959c59c7a0164117e7f8366466a32bb1f8d77ff1',
-                'https://linux.oracle.com/cve/CVE-2023-0464.html',
-                'https://linux.oracle.com/errata/ELSA-2023-3722.html',
-                'https://lists.debian.org/debian-lts-announce/2023/06/msg00011.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-0464',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://security.netapp.com/advisory/ntap-20230406-0006/',
-                'https://security.netapp.com/advisory/ntap-20240621-0006/',
-                'https://ubuntu.com/security/notices/USN-6039-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.couchbase.com/alerts/',
-                'https://www.cve.org/CVERecord?id=CVE-2023-0464',
-                'https://www.debian.org/security/2023/dsa-5417',
-                'https://www.openssl.org/news/secadv/20230322.txt'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: Denial of service by excessive resource usage in verifying X509 policy constraints'
-            },
-            {
-              'cve':  'CVE-2022-2097',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N'
-                },
-                'nvd': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N'
-                },
-                'redhat': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-327'
-              ],
-              'description':   "AES OCB mode for 32-bit x86 platforms using the AES-NI assembly optimised implementation will not encrypt the entirety of the data under some circumstances. This could reveal sixteen bytes of data that was preexisting in the memory that wasn't written. In the special case of \"in place\" encryption, sixteen bytes of the plaintext would be revealed. Since OpenSSL does not support OCB based cipher suites for TLS and DTLS, they are both unaffected. Fixed in OpenSSL 3.0.5 (Affected 3.0.0-3.0.4). Fixed in OpenSSL 1.1.1q (Affected 1.1.1-1.1.1p).",
-              'diffID':        'sha256:ee420dfed78aeb92dbd78bf0e97e3a3cad5ccfbb59fa5dac4e04639210cc7905',
-              'fixedVersions': [
-                '1.1.1q-r0'
-              ],
-              'installedVersion': '1.1.1l-r0',
-              'packageName':      'libssl1.1',
-              'purl':             'pkg:apk/alpine/libssl1.1@1.1.1l-r0?arch=aarch64&distro=3.14.2',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2022:6224',
-                'https://access.redhat.com/security/cve/CVE-2022-2097',
-                'https://bugzilla.redhat.com/2081494',
-                'https://bugzilla.redhat.com/2087911',
-                'https://bugzilla.redhat.com/2087913',
-                'https://bugzilla.redhat.com/2097310',
-                'https://bugzilla.redhat.com/2104905',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2081494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2097310',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2100554',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2104905',
-                'https://cert-portal.siemens.com/productcert/pdf/ssa-332410.pdf',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-1292',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-2068',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-2097',
-                'https://errata.almalinux.org/9/ALSA-2022-6224.html',
-                'https://errata.rockylinux.org/RLSA-2022:5818',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=919925673d6c9cfed3c1085497f5dfbbed5fc431',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=a98f339ddd7e8f487d6e0088d4a9a42324885a93',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=919925673d6c9cfed3c1085497f5dfbbed5fc431',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=a98f339ddd7e8f487d6e0088d4a9a42324885a93',
-                'https://github.com/alexcrichton/openssl-src-rs',
-                'https://linux.oracle.com/cve/CVE-2022-2097.html',
-                'https://linux.oracle.com/errata/ELSA-2022-9955.html',
-                'https://lists.debian.org/debian-lts-announce/2023/02/msg00019.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/R6CK57NBQFTPUMXAPJURCGXUYT76NQAK',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/R6CK57NBQFTPUMXAPJURCGXUYT76NQAK/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/V6567JERRHHJW2GNGJGKDRNHR7SNPZK7',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/V6567JERRHHJW2GNGJGKDRNHR7SNPZK7/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VCMNWKERPBKOEBNL7CLTTX3ZZCZLH7XA',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VCMNWKERPBKOEBNL7CLTTX3ZZCZLH7XA/',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/R6CK57NBQFTPUMXAPJURCGXUYT76NQAK',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/R6CK57NBQFTPUMXAPJURCGXUYT76NQAK/',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/V6567JERRHHJW2GNGJGKDRNHR7SNPZK7',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/V6567JERRHHJW2GNGJGKDRNHR7SNPZK7/',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/VCMNWKERPBKOEBNL7CLTTX3ZZCZLH7XA',
-                'https://nvd.nist.gov/vuln/detail/CVE-2022-2097',
-                'https://rustsec.org/advisories/RUSTSEC-2022-0032.html',
-                'https://security.gentoo.org/glsa/202210-02',
-                'https://security.netapp.com/advisory/ntap-20220715-0011',
-                'https://security.netapp.com/advisory/ntap-20220715-0011/',
-                'https://security.netapp.com/advisory/ntap-20230420-0008',
-                'https://security.netapp.com/advisory/ntap-20230420-0008/',
-                'https://security.netapp.com/advisory/ntap-20240621-0006',
-                'https://security.netapp.com/advisory/ntap-20240621-0006/',
-                'https://ubuntu.com/security/notices/USN-5502-1',
-                'https://ubuntu.com/security/notices/USN-6457-1',
-                'https://www.cve.org/CVERecord?id=CVE-2022-2097',
-                'https://www.debian.org/security/2023/dsa-5343',
-                'https://www.openssl.org/news/secadv/20220705.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: AES OCB fails to encrypt some bytes'
-            },
-            {
-              'cve':  'CVE-2022-4304',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N'
-                },
-                'nvd': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N'
-                },
-                'redhat': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-203'
-              ],
-              'description':   'A timing based side channel exists in the OpenSSL RSA Decryption implementation\nwhich could be sufficient to recover a plaintext across a network in a\nBleichenbacher style attack. To achieve a successful decryption an attacker\nwould have to be able to send a very large number of trial messages for\ndecryption. The vulnerability affects all RSA padding modes: PKCS#1 v1.5,\nRSA-OEAP and RSASVE.\n\nFor example, in a TLS connection, RSA is commonly used by a client to send an\nencrypted pre-master secret to the server. An attacker that had observed a\ngenuine connection between a client and a server could use this flaw to send\ntrial messages to the server and record the time taken to process them. After a\nsufficiently large number of messages the attacker could recover the pre-master\nsecret used for the original connection and thus be able to decrypt the\napplication data sent over that connection.',
-              'diffID':        'sha256:ee420dfed78aeb92dbd78bf0e97e3a3cad5ccfbb59fa5dac4e04639210cc7905',
-              'fixedVersions': [
-                '1.1.1t-r0'
-              ],
-              'installedVersion': '1.1.1l-r0',
-              'packageName':      'libssl1.1',
-              'purl':             'pkg:apk/alpine/libssl1.1@1.1.1l-r0?arch=aarch64&distro=3.14.2',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2023:2165',
-                'https://access.redhat.com/security/cve/CVE-2022-4304',
-                'https://bugzilla.redhat.com/1960321',
-                'https://bugzilla.redhat.com/2164440',
-                'https://bugzilla.redhat.com/2164487',
-                'https://bugzilla.redhat.com/2164492',
-                'https://bugzilla.redhat.com/2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144000',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144003',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144006',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144008',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144010',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144012',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144015',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144017',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144019',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2145170',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2158412',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164440',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164487',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164488',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164492',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164497',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164499',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164500',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4203',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4304',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4450',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0215',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0216',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0217',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0286',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0401',
-                'https://errata.almalinux.org/9/ALSA-2023-2165.html',
-                'https://errata.rockylinux.org/RLSA-2023:0946',
-                'https://linux.oracle.com/cve/CVE-2022-4304.html',
-                'https://linux.oracle.com/errata/ELSA-2023-32791.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2022-4304',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0003',
-                'https://rustsec.org/advisories/RUSTSEC-2023-0007.html',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://ubuntu.com/security/notices/USN-5844-1',
-                'https://ubuntu.com/security/notices/USN-6564-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2022-4304',
-                'https://www.openssl.org/news/secadv/20230207.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: timing attack in RSA Decryption implementation'
-            },
-            {
-              'cve':  'CVE-2023-0465',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N'
-                },
-                'redhat': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-295'
-              ],
-              'description':   "Applications that use a non-default option when verifying certificates may be\nvulnerable to an attack from a malicious CA to circumvent certain checks.\n\nInvalid certificate policies in leaf certificates are silently ignored by\nOpenSSL and other certificate policy checks are skipped for that certificate.\nA malicious CA could use this to deliberately assert invalid certificate policies\nin order to circumvent policy checking on the certificate altogether.\n\nPolicy processing is disabled by default but can be enabled by passing\nthe `-policy' argument to the command line utilities or by calling the\n`X509_VERIFY_PARAM_set1_policies()' function.",
-              'diffID':        'sha256:ee420dfed78aeb92dbd78bf0e97e3a3cad5ccfbb59fa5dac4e04639210cc7905',
-              'fixedVersions': [
-                '1.1.1t-r2'
-              ],
-              'installedVersion': '1.1.1l-r0',
-              'packageName':      'libssl1.1',
-              'purl':             'pkg:apk/alpine/libssl1.1@1.1.1l-r0?arch=aarch64&distro=3.14.2',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2023:3722',
-                'https://access.redhat.com/security/cve/CVE-2023-0465',
-                'https://bugzilla.redhat.com/2181082',
-                'https://bugzilla.redhat.com/2182561',
-                'https://bugzilla.redhat.com/2182565',
-                'https://bugzilla.redhat.com/2188461',
-                'https://bugzilla.redhat.com/2207947',
-                'https://errata.almalinux.org/9/ALSA-2023-3722.html',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=10325176f3d3e98c6e2b3bf5ab1e3b334de6947a',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=1dd43e0709fece299b15208f36cc7c76209ba0bb',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=b013765abfa80036dc779dd0e50602c57bb3bf95',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=facfb1ab745646e97a1920977ae4a9965ea61d5c',
-                'https://linux.oracle.com/cve/CVE-2023-0465.html',
-                'https://linux.oracle.com/errata/ELSA-2023-3722.html',
-                'https://lists.debian.org/debian-lts-announce/2023/06/msg00011.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-0465',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://security.netapp.com/advisory/ntap-20230414-0001/',
-                'https://ubuntu.com/security/notices/USN-6039-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-0465',
-                'https://www.debian.org/security/2023/dsa-5417',
-                'https://www.openssl.org/news/secadv/20230328.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: Invalid certificate policies in leaf certificates are silently ignored'
-            },
-            {
-              'cve':  'CVE-2021-42378',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the getvar_i function",
-              'diffID':        'sha256:ee420dfed78aeb92dbd78bf0e97e3a3cad5ccfbb59fa5dac4e04639210cc7905',
-              'fixedVersions': [
-                '1.33.1-r6'
-              ],
-              'installedVersion': '1.33.1-r3',
-              'packageName':      'ssl_client',
-              'purl':             'pkg:apk/alpine/ssl_client@1.33.1-r3?arch=aarch64&distro=3.14.2',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42378',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42378',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42378'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the getvar_i()'
-            },
-            {
-              'cve':  'CVE-2021-42379',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the next_input_file function",
-              'diffID':        'sha256:ee420dfed78aeb92dbd78bf0e97e3a3cad5ccfbb59fa5dac4e04639210cc7905',
-              'fixedVersions': [
-                '1.33.1-r6'
-              ],
-              'installedVersion': '1.33.1-r3',
-              'packageName':      'ssl_client',
-              'purl':             'pkg:apk/alpine/ssl_client@1.33.1-r3?arch=aarch64&distro=3.14.2',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42379',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42379',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42379'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the next_input_file()'
-            },
-            {
-              'cve':  'CVE-2021-42380',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the clrvar function",
-              'diffID':        'sha256:ee420dfed78aeb92dbd78bf0e97e3a3cad5ccfbb59fa5dac4e04639210cc7905',
-              'fixedVersions': [
-                '1.33.1-r6'
-              ],
-              'installedVersion': '1.33.1-r3',
-              'packageName':      'ssl_client',
-              'purl':             'pkg:apk/alpine/ssl_client@1.33.1-r3?arch=aarch64&distro=3.14.2',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42380',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42380',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42380'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the clrvar()'
-            },
-            {
-              'cve':  'CVE-2021-42381',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the hash_init function",
-              'diffID':        'sha256:ee420dfed78aeb92dbd78bf0e97e3a3cad5ccfbb59fa5dac4e04639210cc7905',
-              'fixedVersions': [
-                '1.33.1-r6'
-              ],
-              'installedVersion': '1.33.1-r3',
-              'packageName':      'ssl_client',
-              'purl':             'pkg:apk/alpine/ssl_client@1.33.1-r3?arch=aarch64&distro=3.14.2',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42381',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42381',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42381'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the hash_init()'
-            },
-            {
-              'cve':  'CVE-2021-42382',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the getvar_s function",
-              'diffID':        'sha256:ee420dfed78aeb92dbd78bf0e97e3a3cad5ccfbb59fa5dac4e04639210cc7905',
-              'fixedVersions': [
-                '1.33.1-r6'
-              ],
-              'installedVersion': '1.33.1-r3',
-              'packageName':      'ssl_client',
-              'purl':             'pkg:apk/alpine/ssl_client@1.33.1-r3?arch=aarch64&distro=3.14.2',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42382',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42382',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42382'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the getvar_s()'
-            },
-            {
-              'cve':  'CVE-2021-42383',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the evaluate function",
-              'diffID':        'sha256:ee420dfed78aeb92dbd78bf0e97e3a3cad5ccfbb59fa5dac4e04639210cc7905',
-              'fixedVersions': [
-                '1.33.1-r6'
-              ],
-              'installedVersion': '1.33.1-r3',
-              'packageName':      'ssl_client',
-              'purl':             'pkg:apk/alpine/ssl_client@1.33.1-r3?arch=aarch64&distro=3.14.2',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42383',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42383',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42383'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the evaluate()'
-            },
-            {
-              'cve':  'CVE-2021-42384',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the handle_special function",
-              'diffID':        'sha256:ee420dfed78aeb92dbd78bf0e97e3a3cad5ccfbb59fa5dac4e04639210cc7905',
-              'fixedVersions': [
-                '1.33.1-r6'
-              ],
-              'installedVersion': '1.33.1-r3',
-              'packageName':      'ssl_client',
-              'purl':             'pkg:apk/alpine/ssl_client@1.33.1-r3?arch=aarch64&distro=3.14.2',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42384',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42384',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42384'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the handle_special()'
-            },
-            {
-              'cve':  'CVE-2021-42385',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the evaluate function",
-              'diffID':        'sha256:ee420dfed78aeb92dbd78bf0e97e3a3cad5ccfbb59fa5dac4e04639210cc7905',
-              'fixedVersions': [
-                '1.33.1-r6'
-              ],
-              'installedVersion': '1.33.1-r3',
-              'packageName':      'ssl_client',
-              'purl':             'pkg:apk/alpine/ssl_client@1.33.1-r3?arch=aarch64&distro=3.14.2',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42385',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42385',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42385'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the evaluate()'
-            },
-            {
-              'cve':  'CVE-2021-42386',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the nvalloc function",
-              'diffID':        'sha256:ee420dfed78aeb92dbd78bf0e97e3a3cad5ccfbb59fa5dac4e04639210cc7905',
-              'fixedVersions': [
-                '1.33.1-r6'
-              ],
-              'installedVersion': '1.33.1-r3',
-              'packageName':      'ssl_client',
-              'purl':             'pkg:apk/alpine/ssl_client@1.33.1-r3?arch=aarch64&distro=3.14.2',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42386',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42386',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42386'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the nvalloc()'
-            },
-            {
-              'cve':  'CVE-2022-28391',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '8.8',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-88'
-              ],
-              'description':   "BusyBox through 1.35.0 allows remote attackers to execute arbitrary code if netstat is used to print a DNS PTR record's value to a VT compatible terminal. Alternatively, the attacker could choose to change the terminal's colors.",
-              'diffID':        'sha256:ee420dfed78aeb92dbd78bf0e97e3a3cad5ccfbb59fa5dac4e04639210cc7905',
-              'fixedVersions': [
-                '1.33.1-r7'
-              ],
-              'installedVersion': '1.33.1-r3',
-              'packageName':      'ssl_client',
-              'purl':             'pkg:apk/alpine/ssl_client@1.33.1-r3?arch=aarch64&distro=3.14.2',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2022-28391',
-                'https://git.alpinelinux.org/aports/plain/main/busybox/0001-libbb-sockaddr2str-ensure-only-printable-characters-.patch',
-                'https://git.alpinelinux.org/aports/plain/main/busybox/0002-nslookup-sanitize-all-printed-strings-with-printable.patch',
-                'https://gitlab.alpinelinux.org/alpine/aports/-/issues/13661',
-                'https://nvd.nist.gov/vuln/detail/CVE-2022-28391',
-                'https://www.cve.org/CVERecord?id=CVE-2022-28391'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: remote attackers may execute arbitrary code if netstat is used'
-            },
-            {
-              'cve':  'CVE-2021-42374',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '5.7',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-125'
-              ],
-              'description':   "An out-of-bounds heap read in Busybox's unlzma applet leads to information leak and denial of service when crafted LZMA-compressed input is decompressed. This can be triggered by any applet/format that",
-              'diffID':        'sha256:ee420dfed78aeb92dbd78bf0e97e3a3cad5ccfbb59fa5dac4e04639210cc7905',
-              'fixedVersions': [
-                '1.33.1-r4'
-              ],
-              'installedVersion': '1.33.1-r3',
-              'packageName':      'ssl_client',
-              'purl':             'pkg:apk/alpine/ssl_client@1.33.1-r3?arch=aarch64&distro=3.14.2',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42374',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42374',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42374'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'busybox: out-of-bounds read in unlzma applet leads to information leak and denial of service when crafted LZMA-compressed input is decompressed'
-            },
-            {
-              'cve':  'CVE-2021-42375',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.5',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '4.1',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-159'
-              ],
-              'description':   "An incorrect handling of a special element in Busybox's ash applet leads to denial of service when processing a crafted shell command, due to the shell mistaking specific characters for reserved characters. This may be used for DoS under rare conditions of filtered command input.",
-              'diffID':        'sha256:ee420dfed78aeb92dbd78bf0e97e3a3cad5ccfbb59fa5dac4e04639210cc7905',
-              'fixedVersions': [
-                '1.33.1-r5'
-              ],
-              'installedVersion': '1.33.1-r3',
-              'packageName':      'ssl_client',
-              'purl':             'pkg:apk/alpine/ssl_client@1.33.1-r3?arch=aarch64&distro=3.14.2',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42375',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42375',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42375'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'busybox: incorrect handling of a special element in ash applet leads to denial of service when processing a crafted shell command'
-            },
-            {
-              'cve':  'CVE-2022-37434',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '9.8',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-787',
-                'CWE-120'
-              ],
-              'description':   'zlib through 1.2.12 has a heap-based buffer over-read or buffer overflow in inflate in inflate.c via a large gzip header extra field. NOTE: only applications that call inflateGetHeader are affected. Some common applications bundle the affected zlib source code but may be unable to call inflateGetHeader (e.g., see the nodejs/node reference).',
-              'diffID':        'sha256:ee420dfed78aeb92dbd78bf0e97e3a3cad5ccfbb59fa5dac4e04639210cc7905',
-              'fixedVersions': [
-                '1.2.12-r2'
-              ],
-              'installedVersion': '1.2.11-r3',
-              'packageName':      'zlib',
-              'purl':             'pkg:apk/alpine/zlib@1.2.11-r3?arch=aarch64&distro=3.14.2',
-              'references':       [
-                'http://seclists.org/fulldisclosure/2022/Oct/37',
-                'http://seclists.org/fulldisclosure/2022/Oct/38',
-                'http://seclists.org/fulldisclosure/2022/Oct/41',
-                'http://seclists.org/fulldisclosure/2022/Oct/42',
-                'http://www.openwall.com/lists/oss-security/2022/08/05/2',
-                'http://www.openwall.com/lists/oss-security/2022/08/09/1',
-                'https://access.redhat.com/errata/RHSA-2022:8291',
-                'https://access.redhat.com/security/cve/CVE-2022-37434',
-                'https://bugzilla.redhat.com/2116639',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2053198',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2077431',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2081296',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2116639',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-37434',
-                'https://errata.almalinux.org/9/ALSA-2022-8291.html',
-                'https://errata.rockylinux.org/RLSA-2022:8291',
-                'https://github.com/curl/curl/issues/9271',
-                'https://github.com/ivd38/zlib_overflow',
-                'https://github.com/madler/zlib/blob/21767c654d31d2dccdde4330529775c6c5fd5389/zlib.h#L1062-L1063',
-                'https://github.com/madler/zlib/commit/1eb7682f845ac9e9bf9ae35bbfb3bad5dacbd91d',
-                'https://github.com/madler/zlib/commit/eff308af425b67093bab25f80f1ae950166bece1',
-                'https://github.com/nodejs/node/blob/75b68c6e4db515f76df73af476eccf382bbcb00a/deps/zlib/inflate.c#L762-L764',
-                'https://linux.oracle.com/cve/CVE-2022-37434.html',
-                'https://linux.oracle.com/errata/ELSA-2023-1095.html',
-                'https://lists.debian.org/debian-lts-announce/2022/09/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JWN4VE3JQR4O2SOUS5TXNLANRPMHWV4I/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NMBOJ77A7T7PQCARMDUK75TE6LLESZ3O/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PAVPQNCG3XRLCLNSQRM3KAN5ZFMVXVTY/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/X5U7OTKZSHY2I3ZFJSR2SHFHW72RKGDK/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YRQAI7H4M4RQZ2IWZUEEXECBE5D56BH2/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2022-37434',
-                'https://security.netapp.com/advisory/ntap-20220901-0005/',
-                'https://security.netapp.com/advisory/ntap-20230427-0007/',
-                'https://support.apple.com/kb/HT213488',
-                'https://support.apple.com/kb/HT213489',
-                'https://support.apple.com/kb/HT213490',
-                'https://support.apple.com/kb/HT213491',
-                'https://support.apple.com/kb/HT213493',
-                'https://support.apple.com/kb/HT213494',
-                'https://ubuntu.com/security/notices/USN-5570-1',
-                'https://ubuntu.com/security/notices/USN-5570-2',
-                'https://ubuntu.com/security/notices/USN-5573-1',
-                'https://ubuntu.com/security/notices/USN-6736-1',
-                'https://ubuntu.com/security/notices/USN-6736-2',
-                'https://www.cve.org/CVERecord?id=CVE-2022-37434',
-                'https://www.debian.org/security/2022/dsa-5218'
-              ],
-              'severity':   'CRITICAL',
-              'suppressed': false,
-              'title':      'zlib: heap-based buffer over-read and overflow in inflate() in inflate.c via a large gzip header extra field'
-            },
-            {
-              'cve':  'CVE-2018-25032',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'nvd': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '8.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-787'
-              ],
-              'description':   'zlib before 1.2.12 allows memory corruption when deflating (i.e., when compressing) if the input has many distant matches.',
-              'diffID':        'sha256:ee420dfed78aeb92dbd78bf0e97e3a3cad5ccfbb59fa5dac4e04639210cc7905',
-              'fixedVersions': [
-                '1.2.12-r0'
-              ],
-              'installedVersion': '1.2.11-r3',
-              'packageName':      'zlib',
-              'purl':             'pkg:apk/alpine/zlib@1.2.11-r3?arch=aarch64&distro=3.14.2',
-              'references':       [
-                'http://seclists.org/fulldisclosure/2022/May/33',
-                'http://seclists.org/fulldisclosure/2022/May/35',
-                'http://seclists.org/fulldisclosure/2022/May/38',
-                'http://www.openwall.com/lists/oss-security/2022/03/25/2',
-                'http://www.openwall.com/lists/oss-security/2022/03/26/1',
-                'https://access.redhat.com/errata/RHSA-2022:8420',
-                'https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-25032.json',
-                'https://access.redhat.com/security/cve/CVE-2018-25032',
-                'https://bugzilla.redhat.com/2067945',
-                'https://cert-portal.siemens.com/productcert/pdf/ssa-333517.pdf',
-                'https://errata.almalinux.org/9/ALSA-2022-8420.html',
-                'https://github.com/advisories/GHSA-jc36-42cf-vqwj',
-                'https://github.com/madler/zlib/commit/5c44459c3b28a9bd3283aaceab7c615f8020c531',
-                'https://github.com/madler/zlib/compare/v1.2.11...v1.2.12',
-                'https://github.com/madler/zlib/issues/605',
-                'https://github.com/rubysec/ruby-advisory-db/blob/master/gems/nokogiri/CVE-2018-25032.yml',
-                'https://github.com/sparklemotion/nokogiri/releases/tag/v1.13.4',
-                'https://github.com/sparklemotion/nokogiri/security/advisories/GHSA-v6gp-9mmm-c6p5',
-                'https://groups.google.com/g/ruby-security-ann/c/vX7qSjsvWis/m/TJWN4oOKBwAJ',
-                'https://linux.oracle.com/cve/CVE-2018-25032.html',
-                'https://linux.oracle.com/errata/ELSA-2022-9565.html',
-                'https://lists.debian.org/debian-lts-announce/2022/04/msg00000.html',
-                'https://lists.debian.org/debian-lts-announce/2022/05/msg00008.html',
-                'https://lists.debian.org/debian-lts-announce/2022/09/msg00023.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DCZFIJBJTZ7CL5QXBFKTQ22Q26VINRUF/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DF62MVMH3QUGMBDCB3DY2ERQ6EBHTADB/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JZZPTWRYQULAOL3AW7RZJNVZ2UONXCV4/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NS2D2GFPFGOJUL4WQ3DUAY7HF4VWQ77F/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VOKNP2L734AEL47NRYGVZIKEFOUBQY5Y/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/XOKFMSNQ5D5WGMALBNBXU3GE442V74WU/',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/DCZFIJBJTZ7CL5QXBFKTQ22Q26VINRUF',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/DCZFIJBJTZ7CL5QXBFKTQ22Q26VINRUF/',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/DF62MVMH3QUGMBDCB3DY2ERQ6EBHTADB',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/DF62MVMH3QUGMBDCB3DY2ERQ6EBHTADB/',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/JZZPTWRYQULAOL3AW7RZJNVZ2UONXCV4',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/JZZPTWRYQULAOL3AW7RZJNVZ2UONXCV4/',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/NS2D2GFPFGOJUL4WQ3DUAY7HF4VWQ77F',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/NS2D2GFPFGOJUL4WQ3DUAY7HF4VWQ77F/',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/VOKNP2L734AEL47NRYGVZIKEFOUBQY5Y',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/VOKNP2L734AEL47NRYGVZIKEFOUBQY5Y/',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/XOKFMSNQ5D5WGMALBNBXU3GE442V74WU',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/XOKFMSNQ5D5WGMALBNBXU3GE442V74WU/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2018-25032',
-                'https://security.gentoo.org/glsa/202210-42',
-                'https://security.netapp.com/advisory/ntap-20220526-0009',
-                'https://security.netapp.com/advisory/ntap-20220526-0009/',
-                'https://security.netapp.com/advisory/ntap-20220729-0004',
-                'https://security.netapp.com/advisory/ntap-20220729-0004/',
-                'https://support.apple.com/kb/HT213255',
-                'https://support.apple.com/kb/HT213256',
-                'https://support.apple.com/kb/HT213257',
-                'https://ubuntu.com/security/notices/USN-5355-1',
-                'https://ubuntu.com/security/notices/USN-5355-2',
-                'https://ubuntu.com/security/notices/USN-5359-1',
-                'https://ubuntu.com/security/notices/USN-5359-2',
-                'https://ubuntu.com/security/notices/USN-5739-1',
-                'https://ubuntu.com/security/notices/USN-6736-1',
-                'https://ubuntu.com/security/notices/USN-6736-2',
-                'https://www.cve.org/CVERecord?id=CVE-2018-25032',
-                'https://www.debian.org/security/2022/dsa-5111',
-                'https://www.openwall.com/lists/oss-security/2022/03/24/1',
-                'https://www.openwall.com/lists/oss-security/2022/03/28/1',
-                'https://www.openwall.com/lists/oss-security/2022/03/28/3',
-                'https://www.oracle.com/security-alerts/cpujul2022.html'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'zlib: A flaw found in zlib when compressing (not decompressing) certain inputs'
-            }
-          ]
-        }
-      ],
-      'summary': {
-        'critical':   1,
-        'high':       32,
-        'low':        0,
-        'medium':     10,
-        'suppressed': 0,
-        'unknown':    0
-      }
-    }
-  },
-  {
-    'id':    'default/4c0342747b3e05aaf3b8f8817472d6a64d1a8dc85c0a7e06f29f5eea45b5db3b',
-    'type':  'storage.sbomscanner.kubewarden.io.vulnerabilityreport',
-    'links': {
-      'patch':  'https://localhost:8005/v1/storage.sbomscanner.kubewarden.io.vulnerabilityreports/default/4c0342747b3e05aaf3b8f8817472d6a64d1a8dc85c0a7e06f29f5eea45b5db3b',
-      'remove': 'https://localhost:8005/v1/storage.sbomscanner.kubewarden.io.vulnerabilityreports/default/4c0342747b3e05aaf3b8f8817472d6a64d1a8dc85c0a7e06f29f5eea45b5db3b',
-      'self':   'https://localhost:8005/v1/storage.sbomscanner.kubewarden.io.vulnerabilityreports/default/4c0342747b3e05aaf3b8f8817472d6a64d1a8dc85c0a7e06f29f5eea45b5db3b',
-      'update': 'https://localhost:8005/v1/storage.sbomscanner.kubewarden.io.vulnerabilityreports/default/4c0342747b3e05aaf3b8f8817472d6a64d1a8dc85c0a7e06f29f5eea45b5db3b',
-      'view':   'https://localhost:8005/apis/storage.sbomscanner.kubewarden.io/v1alpha1/namespaces/default/vulnerabilityreports/4c0342747b3e05aaf3b8f8817472d6a64d1a8dc85c0a7e06f29f5eea45b5db3b'
-    },
-    'apiVersion':    'storage.sbomscanner.kubewarden.io/v1alpha1',
-    'imageMetadata': {
-      'digest':      'sha256:8621732cdb8c893dccfaacfa22741154123addd7c0e5465056bbe9b0cb4c7737',
-      'platform':    'linux/s390x',
-      'registry':    'lsong-demo1',
-      'registryURI': 'registry-1.docker.io',
-      'repository':  'library/alpine',
-      'tag':         '3.14.1'
-    },
-    'kind':     'VulnerabilityReport',
-    'metadata': {
-      'creationTimestamp': '2026-01-14T18:52:05Z',
-      'fields':            [
-        '4c0342747b3e05aaf3b8f8817472d6a64d1a8dc85c0a7e06f29f5eea45b5db3b',
-        'registry-1.docker.io/library/alpine:3.14.1',
-        'linux/s390x',
-        '47 (0 suppressed)'
-      ],
-      'labels': {
-        'app.kubernetes.io/managed-by':          'sbomscanner',
-        'app.kubernetes.io/part-of':             'sbomscanner',
-        'sbomscanner.kubewarden.io/scanjob-uid': '445c600a-c4b6-40b3-bd71-f2d2140a37d5'
-      },
-      'name':            '4c0342747b3e05aaf3b8f8817472d6a64d1a8dc85c0a7e06f29f5eea45b5db3b',
-      'namespace':       'default',
-      'ownerReferences': [
-        {
-          'apiVersion':         'storage.sbomscanner.kubewarden.io/v1alpha1',
-          'blockOwnerDeletion': true,
-          'controller':         true,
-          'kind':               'SBOM',
-          'name':               '4c0342747b3e05aaf3b8f8817472d6a64d1a8dc85c0a7e06f29f5eea45b5db3b',
-          'uid':                'e9ea3932-2b88-46a0-af1a-fd9bd75ce1cd'
-        }
-      ],
-      'relationships': [
-        {
-          'fromId':   'default/4c0342747b3e05aaf3b8f8817472d6a64d1a8dc85c0a7e06f29f5eea45b5db3b',
-          'fromType': 'storage.sbomscanner.kubewarden.io.sbom',
-          'rel':      'owner',
-          'state':    'active',
-          'message':  'Resource is current'
-        }
-      ],
-      'resourceVersion': '1',
-      'state':           {
-        'error':         false,
-        'message':       'Resource is current',
-        'name':          'active',
-        'transitioning': false
-      },
-      'uid': 'b49a8b9d-51c0-4e92-a298-5e5d2f6cc6e3'
-    },
-    'report': {
-      'results': [
-        {
-          'class':           'os-pkgs',
-          'target':          '/var/run/worker/trivy.sbom.2389026967.json (alpine 3.14.1)',
-          'type':            'alpine',
-          'vulnerabilities': [
-            {
-              'cve':  'CVE-2021-42378',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the getvar_i function",
-              'diffID':        'sha256:f02969ff78e11d7c2f356f125c527507739a3d24b970336f43f38eab7d632626',
-              'fixedVersions': [
-                '1.33.1-r6'
-              ],
-              'installedVersion': '1.33.1-r3',
-              'packageName':      'busybox',
-              'purl':             'pkg:apk/alpine/busybox@1.33.1-r3?arch=s390x&distro=3.14.1',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42378',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42378',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42378'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the getvar_i()'
-            },
-            {
-              'cve':  'CVE-2021-42379',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the next_input_file function",
-              'diffID':        'sha256:f02969ff78e11d7c2f356f125c527507739a3d24b970336f43f38eab7d632626',
-              'fixedVersions': [
-                '1.33.1-r6'
-              ],
-              'installedVersion': '1.33.1-r3',
-              'packageName':      'busybox',
-              'purl':             'pkg:apk/alpine/busybox@1.33.1-r3?arch=s390x&distro=3.14.1',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42379',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42379',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42379'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the next_input_file()'
-            },
-            {
-              'cve':  'CVE-2021-42380',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the clrvar function",
-              'diffID':        'sha256:f02969ff78e11d7c2f356f125c527507739a3d24b970336f43f38eab7d632626',
-              'fixedVersions': [
-                '1.33.1-r6'
-              ],
-              'installedVersion': '1.33.1-r3',
-              'packageName':      'busybox',
-              'purl':             'pkg:apk/alpine/busybox@1.33.1-r3?arch=s390x&distro=3.14.1',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42380',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42380',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42380'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the clrvar()'
-            },
-            {
-              'cve':  'CVE-2021-42381',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the hash_init function",
-              'diffID':        'sha256:f02969ff78e11d7c2f356f125c527507739a3d24b970336f43f38eab7d632626',
-              'fixedVersions': [
-                '1.33.1-r6'
-              ],
-              'installedVersion': '1.33.1-r3',
-              'packageName':      'busybox',
-              'purl':             'pkg:apk/alpine/busybox@1.33.1-r3?arch=s390x&distro=3.14.1',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42381',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42381',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42381'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the hash_init()'
-            },
-            {
-              'cve':  'CVE-2021-42382',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the getvar_s function",
-              'diffID':        'sha256:f02969ff78e11d7c2f356f125c527507739a3d24b970336f43f38eab7d632626',
-              'fixedVersions': [
-                '1.33.1-r6'
-              ],
-              'installedVersion': '1.33.1-r3',
-              'packageName':      'busybox',
-              'purl':             'pkg:apk/alpine/busybox@1.33.1-r3?arch=s390x&distro=3.14.1',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42382',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42382',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42382'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the getvar_s()'
-            },
-            {
-              'cve':  'CVE-2021-42383',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the evaluate function",
-              'diffID':        'sha256:f02969ff78e11d7c2f356f125c527507739a3d24b970336f43f38eab7d632626',
-              'fixedVersions': [
-                '1.33.1-r6'
-              ],
-              'installedVersion': '1.33.1-r3',
-              'packageName':      'busybox',
-              'purl':             'pkg:apk/alpine/busybox@1.33.1-r3?arch=s390x&distro=3.14.1',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42383',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42383',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42383'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the evaluate()'
-            },
-            {
-              'cve':  'CVE-2021-42384',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the handle_special function",
-              'diffID':        'sha256:f02969ff78e11d7c2f356f125c527507739a3d24b970336f43f38eab7d632626',
-              'fixedVersions': [
-                '1.33.1-r6'
-              ],
-              'installedVersion': '1.33.1-r3',
-              'packageName':      'busybox',
-              'purl':             'pkg:apk/alpine/busybox@1.33.1-r3?arch=s390x&distro=3.14.1',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42384',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42384',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42384'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the handle_special()'
-            },
-            {
-              'cve':  'CVE-2021-42385',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the evaluate function",
-              'diffID':        'sha256:f02969ff78e11d7c2f356f125c527507739a3d24b970336f43f38eab7d632626',
-              'fixedVersions': [
-                '1.33.1-r6'
-              ],
-              'installedVersion': '1.33.1-r3',
-              'packageName':      'busybox',
-              'purl':             'pkg:apk/alpine/busybox@1.33.1-r3?arch=s390x&distro=3.14.1',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42385',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42385',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42385'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the evaluate()'
-            },
-            {
-              'cve':  'CVE-2021-42386',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the nvalloc function",
-              'diffID':        'sha256:f02969ff78e11d7c2f356f125c527507739a3d24b970336f43f38eab7d632626',
-              'fixedVersions': [
-                '1.33.1-r6'
-              ],
-              'installedVersion': '1.33.1-r3',
-              'packageName':      'busybox',
-              'purl':             'pkg:apk/alpine/busybox@1.33.1-r3?arch=s390x&distro=3.14.1',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42386',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42386',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42386'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the nvalloc()'
-            },
-            {
-              'cve':  'CVE-2022-28391',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '8.8',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-88'
-              ],
-              'description':   "BusyBox through 1.35.0 allows remote attackers to execute arbitrary code if netstat is used to print a DNS PTR record's value to a VT compatible terminal. Alternatively, the attacker could choose to change the terminal's colors.",
-              'diffID':        'sha256:f02969ff78e11d7c2f356f125c527507739a3d24b970336f43f38eab7d632626',
-              'fixedVersions': [
-                '1.33.1-r7'
-              ],
-              'installedVersion': '1.33.1-r3',
-              'packageName':      'busybox',
-              'purl':             'pkg:apk/alpine/busybox@1.33.1-r3?arch=s390x&distro=3.14.1',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2022-28391',
-                'https://git.alpinelinux.org/aports/plain/main/busybox/0001-libbb-sockaddr2str-ensure-only-printable-characters-.patch',
-                'https://git.alpinelinux.org/aports/plain/main/busybox/0002-nslookup-sanitize-all-printed-strings-with-printable.patch',
-                'https://gitlab.alpinelinux.org/alpine/aports/-/issues/13661',
-                'https://nvd.nist.gov/vuln/detail/CVE-2022-28391',
-                'https://www.cve.org/CVERecord?id=CVE-2022-28391'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: remote attackers may execute arbitrary code if netstat is used'
-            },
-            {
-              'cve':  'CVE-2021-42374',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '5.7',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-125'
-              ],
-              'description':   "An out-of-bounds heap read in Busybox's unlzma applet leads to information leak and denial of service when crafted LZMA-compressed input is decompressed. This can be triggered by any applet/format that",
-              'diffID':        'sha256:f02969ff78e11d7c2f356f125c527507739a3d24b970336f43f38eab7d632626',
-              'fixedVersions': [
-                '1.33.1-r4'
-              ],
-              'installedVersion': '1.33.1-r3',
-              'packageName':      'busybox',
-              'purl':             'pkg:apk/alpine/busybox@1.33.1-r3?arch=s390x&distro=3.14.1',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42374',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42374',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42374'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'busybox: out-of-bounds read in unlzma applet leads to information leak and denial of service when crafted LZMA-compressed input is decompressed'
-            },
-            {
-              'cve':  'CVE-2021-42375',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.5',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '4.1',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-159'
-              ],
-              'description':   "An incorrect handling of a special element in Busybox's ash applet leads to denial of service when processing a crafted shell command, due to the shell mistaking specific characters for reserved characters. This may be used for DoS under rare conditions of filtered command input.",
-              'diffID':        'sha256:f02969ff78e11d7c2f356f125c527507739a3d24b970336f43f38eab7d632626',
-              'fixedVersions': [
-                '1.33.1-r5'
-              ],
-              'installedVersion': '1.33.1-r3',
-              'packageName':      'busybox',
-              'purl':             'pkg:apk/alpine/busybox@1.33.1-r3?arch=s390x&distro=3.14.1',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42375',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42375',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42375'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'busybox: incorrect handling of a special element in ash applet leads to denial of service when processing a crafted shell command'
-            },
-            {
-              'cve':  'CVE-2021-3711',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '9.8',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'nvd': {
-                  'v3score':  '9.8',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '9.8',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-120'
-              ],
-              'description':   'In order to decrypt SM2 encrypted data an application is expected to call the API function EVP_PKEY_decrypt(). Typically an application will call this function twice. The first time, on entry, the "out" parameter can be NULL and, on exit, the "outlen" parameter is populated with the buffer size required to hold the decrypted plaintext. The application can then allocate a sufficiently sized buffer and call EVP_PKEY_decrypt() again, but this time passing a non-NULL value for the "out" parameter. A bug in the implementation of the SM2 decryption code means that the calculation of the buffer size required to hold the plaintext returned by the first call to EVP_PKEY_decrypt() can be smaller than the actual size required by the second call. This can lead to a buffer overflow when EVP_PKEY_decrypt() is called by the application a second time with a buffer that is too small. A malicious attacker who is able present SM2 content for decryption to an application could cause attacker chosen data to overflow the buffer by up to a maximum of 62 bytes altering the contents of other data held after the buffer, possibly changing application behaviour or causing the application to crash. The location of the buffer is application dependent but is typically heap allocated. Fixed in OpenSSL 1.1.1l (Affected 1.1.1-1.1.1k).',
-              'diffID':        'sha256:f02969ff78e11d7c2f356f125c527507739a3d24b970336f43f38eab7d632626',
-              'fixedVersions': [
-                '1.1.1l-r0'
-              ],
-              'installedVersion': '1.1.1k-r0',
-              'packageName':      'libcrypto1.1',
-              'purl':             'pkg:apk/alpine/libcrypto1.1@1.1.1k-r0?arch=s390x&distro=3.14.1',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2021/08/26/2',
-                'https://access.redhat.com/security/cve/CVE-2021-3711',
-                'https://cert-portal.siemens.com/productcert/pdf/ssa-389290.pdf',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=59f5e75f3bced8fc0e130d72a3f582cf7b480b46',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=59f5e75f3bced8fc0e130d72a3f582cf7b480b46',
-                'https://lists.apache.org/thread.html/r18995de860f0e63635f3008fd2a6aca82394249476d21691e7c59c9e%40%3Cdev.tomcat.apache.org%3E',
-                'https://lists.apache.org/thread.html/r18995de860f0e63635f3008fd2a6aca82394249476d21691e7c59c9e@%3Cdev.tomcat.apache.org%3E',
-                'https://lists.apache.org/thread.html/rad5d9f83f0d11fb3f8bb148d179b8a9ad7c6a17f18d70e5805a713d1%40%3Cdev.tomcat.apache.org%3E',
-                'https://lists.apache.org/thread.html/rad5d9f83f0d11fb3f8bb148d179b8a9ad7c6a17f18d70e5805a713d1@%3Cdev.tomcat.apache.org%3E',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-3711',
-                'https://rustsec.org/advisories/RUSTSEC-2021-0097.html',
-                'https://security.gentoo.org/glsa/202209-02',
-                'https://security.gentoo.org/glsa/202210-02',
-                'https://security.netapp.com/advisory/ntap-20210827-0010',
-                'https://security.netapp.com/advisory/ntap-20210827-0010/',
-                'https://security.netapp.com/advisory/ntap-20211022-0003',
-                'https://security.netapp.com/advisory/ntap-20211022-0003/',
-                'https://security.netapp.com/advisory/ntap-20240621-0006',
-                'https://security.netapp.com/advisory/ntap-20240621-0006/',
-                'https://ubuntu.com/security/notices/USN-5051-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-3711',
-                'https://www.debian.org/security/2021/dsa-4963',
-                'https://www.openssl.org/news/secadv/20210824.txt',
-                'https://www.oracle.com/security-alerts/cpuapr2022.html',
-                'https://www.oracle.com/security-alerts/cpujan2022.html',
-                'https://www.oracle.com/security-alerts/cpuoct2021.html',
-                'https://www.tenable.com/security/tns-2021-16',
-                'https://www.tenable.com/security/tns-2022-02'
-              ],
-              'severity':   'CRITICAL',
-              'suppressed': false,
-              'title':      'openssl: SM2 Decryption Buffer Overflow'
-            },
-            {
-              'cve':  'CVE-2021-3712',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '7.4',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H'
-                },
-                'nvd': {
-                  'v3score':  '7.4',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.4',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-125'
-              ],
-              'description':   "ASN.1 strings are represented internally within OpenSSL as an ASN1_STRING structure which contains a buffer holding the string data and a field holding the buffer length. This contrasts with normal C strings which are repesented as a buffer for the string data which is terminated with a NUL (0) byte. Although not a strict requirement, ASN.1 strings that are parsed using OpenSSL's own \"d2i\" functions (and other similar parsing functions) as well as any string whose value has been set with the ASN1_STRING_set() function will additionally NUL terminate the byte array in the ASN1_STRING structure. However, it is possible for applications to directly construct valid ASN1_STRING structures which do not NUL terminate the byte array by directly setting the \"data\" and \"length\" fields in the ASN1_STRING array. This can also happen by using the ASN1_STRING_set0() function. Numerous OpenSSL functions that print ASN.1 data have been found to assume that the ASN1_STRING byte array will be NUL terminated, even though this is not guaranteed for strings that have been directly constructed. Where an application requests an ASN.1 structure to be printed, and where that ASN.1 structure contains ASN1_STRINGs that have been directly constructed by the application without NUL terminating the \"data\" field, then a read buffer overrun can occur. The same thing can also occur during name constraints processing of certificates (for example if a certificate has been directly constructed by the application instead of loading it via the OpenSSL parsing functions, and the certificate contains non NUL terminated ASN1_STRING structures). It can also occur in the X509_get1_email(), X509_REQ_get1_email() and X509_get1_ocsp() functions. If a malicious actor can cause an application to directly construct an ASN1_STRING and then process it through one of the affected OpenSSL functions then this issue could be hit. This might result in a crash (causing a Denial of Service attack). It could also result in the disclosure of private memory contents (such as private keys, or sensitive plaintext). Fixed in OpenSSL 1.1.1l (Affected 1.1.1-1.1.1k). Fixed in OpenSSL 1.0.2za (Affected 1.0.2-1.0.2y).",
-              'diffID':        'sha256:f02969ff78e11d7c2f356f125c527507739a3d24b970336f43f38eab7d632626',
-              'fixedVersions': [
-                '1.1.1l-r0'
-              ],
-              'installedVersion': '1.1.1k-r0',
-              'packageName':      'libcrypto1.1',
-              'purl':             'pkg:apk/alpine/libcrypto1.1@1.1.1k-r0?arch=s390x&distro=3.14.1',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2021/08/26/2',
-                'https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2021-3712.json',
-                'https://access.redhat.com/security/cve/CVE-2021-3712',
-                'https://cert-portal.siemens.com/productcert/pdf/ssa-244969.pdf',
-                'https://cert-portal.siemens.com/productcert/pdf/ssa-389290.pdf',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=94d23fcff9b2a7a8368dfe52214d5c2569882c11',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=ccb0a11145ee72b042d10593a64eaf9e8a55ec12',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=94d23fcff9b2a7a8368dfe52214d5c2569882c11',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=ccb0a11145ee72b042d10593a64eaf9e8a55ec12',
-                'https://kc.mcafee.com/corporate/index?page=content&id=SB10366',
-                'https://linux.oracle.com/cve/CVE-2021-3712.html',
-                'https://linux.oracle.com/errata/ELSA-2022-9023.html',
-                'https://lists.apache.org/thread.html/r18995de860f0e63635f3008fd2a6aca82394249476d21691e7c59c9e%40%3Cdev.tomcat.apache.org%3E',
-                'https://lists.apache.org/thread.html/r18995de860f0e63635f3008fd2a6aca82394249476d21691e7c59c9e@%3Cdev.tomcat.apache.org%3E',
-                'https://lists.apache.org/thread.html/rad5d9f83f0d11fb3f8bb148d179b8a9ad7c6a17f18d70e5805a713d1%40%3Cdev.tomcat.apache.org%3E',
-                'https://lists.apache.org/thread.html/rad5d9f83f0d11fb3f8bb148d179b8a9ad7c6a17f18d70e5805a713d1@%3Cdev.tomcat.apache.org%3E',
-                'https://lists.debian.org/debian-lts-announce/2021/09/msg00014.html',
-                'https://lists.debian.org/debian-lts-announce/2021/09/msg00021.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-3712',
-                'https://rustsec.org/advisories/RUSTSEC-2021-0098.html',
-                'https://security.gentoo.org/glsa/202209-02',
-                'https://security.gentoo.org/glsa/202210-02',
-                'https://security.netapp.com/advisory/ntap-20210827-0010',
-                'https://security.netapp.com/advisory/ntap-20210827-0010/',
-                'https://security.netapp.com/advisory/ntap-20240621-0006',
-                'https://security.netapp.com/advisory/ntap-20240621-0006/',
-                'https://ubuntu.com/security/notices/USN-5051-1',
-                'https://ubuntu.com/security/notices/USN-5051-2',
-                'https://ubuntu.com/security/notices/USN-5051-3',
-                'https://ubuntu.com/security/notices/USN-5051-4 (regression only in trusty/esm)',
-                'https://ubuntu.com/security/notices/USN-5088-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-3712',
-                'https://www.debian.org/security/2021/dsa-4963',
-                'https://www.openssl.org/news/secadv/20210824.txt',
-                'https://www.oracle.com/security-alerts/cpuapr2022.html',
-                'https://www.oracle.com/security-alerts/cpujan2022.html',
-                'https://www.oracle.com/security-alerts/cpuoct2021.html',
-                'https://www.tenable.com/security/tns-2021-16',
-                'https://www.tenable.com/security/tns-2022-02'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: Read buffer overruns processing ASN.1 strings'
-            },
-            {
-              'cve':  'CVE-2022-0778',
-              'cvss': {
-                'bitnami': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'ghsa': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'nvd': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-835'
-              ],
-              'description':   'The BN_mod_sqrt() function, which computes a modular square root, contains a bug that can cause it to loop forever for non-prime moduli. Internally this function is used when parsing certificates that contain elliptic curve public keys in compressed form or explicit elliptic curve parameters with a base point encoded in compressed form. It is possible to trigger the infinite loop by crafting a certificate that has invalid explicit curve parameters. Since certificate parsing happens prior to verification of the certificate signature, any process that parses an externally supplied certificate may thus be subject to a denial of service attack. The infinite loop can also be reached when parsing crafted private keys as they can contain explicit elliptic curve parameters. Thus vulnerable situations include: - TLS clients consuming server certificates - TLS servers consuming client certificates - Hosting providers taking certificates or private keys from customers - Certificate authorities parsing certification requests from subscribers - Anything else which parses ASN.1 elliptic curve parameters Also any other applications that use the BN_mod_sqrt() where the attacker can control the parameter values are vulnerable to this DoS issue. In the OpenSSL 1.0.2 version the public key is not parsed during initial parsing of the certificate which makes it slightly harder to trigger the infinite loop. However any operation which requires the public key from the certificate will trigger the infinite loop. In particular the attacker can use a self-signed certificate to trigger the loop during verification of the certificate signature. This issue affects OpenSSL versions 1.0.2, 1.1.1 and 3.0. It was addressed in the releases of 1.1.1n and 3.0.2 on the 15th March 2022. Fixed in OpenSSL 3.0.2 (Affected 3.0.0,3.0.1). Fixed in OpenSSL 1.1.1n (Affected 1.1.1-1.1.1m). Fixed in OpenSSL 1.0.2zd (Affected 1.0.2-1.0.2zc).',
-              'diffID':        'sha256:f02969ff78e11d7c2f356f125c527507739a3d24b970336f43f38eab7d632626',
-              'fixedVersions': [
-                '1.1.1n-r0'
-              ],
-              'installedVersion': '1.1.1k-r0',
-              'packageName':      'libcrypto1.1',
-              'purl':             'pkg:apk/alpine/libcrypto1.1@1.1.1k-r0?arch=s390x&distro=3.14.1',
-              'references':       [
-                'http://packetstormsecurity.com/files/167344/OpenSSL-1.0.2-1.1.1-3.0-BN_mod_sqrt-Infinite-Loop.html',
-                'http://seclists.org/fulldisclosure/2022/May/33',
-                'http://seclists.org/fulldisclosure/2022/May/35',
-                'http://seclists.org/fulldisclosure/2022/May/38',
-                'https://access.redhat.com/errata/RHSA-2022:5326',
-                'https://access.redhat.com/security/cve/CVE-2022-0778',
-                'https://bugzilla.redhat.com/2062202',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2062202',
-                'https://cert-portal.siemens.com/productcert/pdf/ssa-712929.pdf',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-0778',
-                'https://errata.almalinux.org/8/ALSA-2022-5326.html',
-                'https://errata.rockylinux.org/RLSA-2022:4899',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=3118eb64934499d93db3230748a452351d1d9a65',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=380085481c64de749a6dd25cdf0bcf4360b30f83',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=a466912611aa6cbdf550cd10601390e587451246',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=3118eb64934499d93db3230748a452351d1d9a65',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=380085481c64de749a6dd25cdf0bcf4360b30f83',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=a466912611aa6cbdf550cd10601390e587451246',
-                'https://linux.oracle.com/cve/CVE-2022-0778.html',
-                'https://linux.oracle.com/errata/ELSA-2022-9272.html',
-                'https://lists.debian.org/debian-lts-announce/2022/03/msg00023.html',
-                'https://lists.debian.org/debian-lts-announce/2022/03/msg00024.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/323SNN6ZX7PRJJWP2BUAFLPUAE42XWLZ',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/323SNN6ZX7PRJJWP2BUAFLPUAE42XWLZ/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GDB3GQVJPXJE7X5C5JN6JAA4XUDWD6E6',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GDB3GQVJPXJE7X5C5JN6JAA4XUDWD6E6/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/W6K3PR542DXWLEFFMFIDMME4CWMHJRMG',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/W6K3PR542DXWLEFFMFIDMME4CWMHJRMG/',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/323SNN6ZX7PRJJWP2BUAFLPUAE42XWLZ',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/GDB3GQVJPXJE7X5C5JN6JAA4XUDWD6E6',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/W6K3PR542DXWLEFFMFIDMME4CWMHJRMG',
-                'https://nvd.nist.gov/vuln/detail/CVE-2022-0778',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2022-0002',
-                'https://rustsec.org/advisories/RUSTSEC-2022-0014.html',
-                'https://security.gentoo.org/glsa/202210-02',
-                'https://security.netapp.com/advisory/ntap-20220321-0002',
-                'https://security.netapp.com/advisory/ntap-20220321-0002/',
-                'https://security.netapp.com/advisory/ntap-20220429-0005',
-                'https://security.netapp.com/advisory/ntap-20220429-0005/',
-                'https://security.netapp.com/advisory/ntap-20240621-0006',
-                'https://security.netapp.com/advisory/ntap-20240621-0006/',
-                'https://support.apple.com/kb/HT213255',
-                'https://support.apple.com/kb/HT213256',
-                'https://support.apple.com/kb/HT213257',
-                'https://ubuntu.com/security/notices/USN-5328-1',
-                'https://ubuntu.com/security/notices/USN-5328-2',
-                'https://ubuntu.com/security/notices/USN-6457-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2022-0778',
-                'https://www.debian.org/security/2022/dsa-5103',
-                'https://www.openssl.org/news/secadv/20220315.txt',
-                'https://www.oracle.com/security-alerts/cpuapr2022.html',
-                'https://www.oracle.com/security-alerts/cpujul2022.html',
-                'https://www.tenable.com/security/tns-2022-06',
-                'https://www.tenable.com/security/tns-2022-07',
-                'https://www.tenable.com/security/tns-2022-08',
-                'https://www.tenable.com/security/tns-2022-09'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: Infinite loop in BN_mod_sqrt() reachable when parsing certificates'
-            },
-            {
-              'cve':  'CVE-2022-4450',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'nvd': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-415'
-              ],
-              'description':   'The function PEM_read_bio_ex() reads a PEM file from a BIO and parses and\ndecodes the "name" (e.g. "CERTIFICATE"), any header data and the payload data.\nIf the function succeeds then the "name_out", "header" and "data" arguments are\npopulated with pointers to buffers containing the relevant decoded data. The\ncaller is responsible for freeing those buffers. It is possible to construct a\nPEM file that results in 0 bytes of payload data. In this case PEM_read_bio_ex()\nwill return a failure code but will populate the header argument with a pointer\nto a buffer that has already been freed. If the caller also frees this buffer\nthen a double free will occur. This will most likely lead to a crash. This\ncould be exploited by an attacker who has the ability to supply malicious PEM\nfiles for parsing to achieve a denial of service attack.\n\nThe functions PEM_read_bio() and PEM_read() are simple wrappers around\nPEM_read_bio_ex() and therefore these functions are also directly affected.\n\nThese functions are also called indirectly by a number of other OpenSSL\nfunctions including PEM_X509_INFO_read_bio_ex() and\nSSL_CTX_use_serverinfo_file() which are also vulnerable. Some OpenSSL internal\nuses of these functions are not vulnerable because the caller does not free the\nheader argument if PEM_read_bio_ex() returns a failure code. These locations\ninclude the PEM_read_bio_TYPE() functions as well as the decoders introduced in\nOpenSSL 3.0.\n\nThe OpenSSL asn1parse command line application is also impacted by this issue.',
-              'diffID':        'sha256:f02969ff78e11d7c2f356f125c527507739a3d24b970336f43f38eab7d632626',
-              'fixedVersions': [
-                '1.1.1t-r0'
-              ],
-              'installedVersion': '1.1.1k-r0',
-              'packageName':      'libcrypto1.1',
-              'purl':             'pkg:apk/alpine/libcrypto1.1@1.1.1k-r0?arch=s390x&distro=3.14.1',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2023:2165',
-                'https://access.redhat.com/security/cve/CVE-2022-4450',
-                'https://bugzilla.redhat.com/1960321',
-                'https://bugzilla.redhat.com/2164440',
-                'https://bugzilla.redhat.com/2164487',
-                'https://bugzilla.redhat.com/2164492',
-                'https://bugzilla.redhat.com/2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144000',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144003',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144006',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144008',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144010',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144012',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144015',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144017',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144019',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2145170',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2158412',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164440',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164487',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164488',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164492',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164497',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164499',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164500',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4203',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4304',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4450',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0215',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0216',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0217',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0286',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0401',
-                'https://errata.almalinux.org/9/ALSA-2023-2165.html',
-                'https://errata.rockylinux.org/RLSA-2023:0946',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=63bcf189be73a9cc1264059bed6f57974be74a83',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=bbcf509bd046b34cca19c766bbddc31683d0858b',
-                'https://linux.oracle.com/cve/CVE-2022-4450.html',
-                'https://linux.oracle.com/errata/ELSA-2023-32791.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2022-4450',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0003',
-                'https://rustsec.org/advisories/RUSTSEC-2023-0010.html',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://ubuntu.com/security/notices/USN-5844-1',
-                'https://ubuntu.com/security/notices/USN-6564-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2022-4450',
-                'https://www.openssl.org/news/secadv/20230207.txt'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: double free after calling PEM_read_bio_ex'
-            },
-            {
-              'cve':  'CVE-2023-0215',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'nvd': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   'The public API function BIO_new_NDEF is a helper function used for streaming\nASN.1 data via a BIO. It is primarily used internally to OpenSSL to support the\nSMIME, CMS and PKCS7 streaming capabilities, but may also be called directly by\nend user applications.\n\nThe function receives a BIO from the caller, prepends a new BIO_f_asn1 filter\nBIO onto the front of it to form a BIO chain, and then returns the new head of\nthe BIO chain to the caller. Under certain conditions, for example if a CMS\nrecipient public key is invalid, the new filter BIO is freed and the function\nreturns a NULL result indicating a failure. However, in this case, the BIO chain\nis not properly cleaned up and the BIO passed by the caller still retains\ninternal pointers to the previously freed filter BIO. If the caller then goes on\nto call BIO_pop() on the BIO then a use-after-free will occur. This will most\nlikely result in a crash.\n\n\n\nThis scenario occurs directly in the internal function B64_write_ASN1() which\nmay cause BIO_new_NDEF() to be called and will subsequently call BIO_pop() on\nthe BIO. This internal function is in turn called by the public API functions\nPEM_write_bio_ASN1_stream, PEM_write_bio_CMS_stream, PEM_write_bio_PKCS7_stream,\nSMIME_write_ASN1, SMIME_write_CMS and SMIME_write_PKCS7.\n\nOther public API functions that may be impacted by this include\ni2d_ASN1_bio_stream, BIO_new_CMS, BIO_new_PKCS7, i2d_CMS_bio_stream and\ni2d_PKCS7_bio_stream.\n\nThe OpenSSL cms and smime command line applications are similarly affected.',
-              'diffID':        'sha256:f02969ff78e11d7c2f356f125c527507739a3d24b970336f43f38eab7d632626',
-              'fixedVersions': [
-                '1.1.1t-r0'
-              ],
-              'installedVersion': '1.1.1k-r0',
-              'packageName':      'libcrypto1.1',
-              'purl':             'pkg:apk/alpine/libcrypto1.1@1.1.1k-r0?arch=s390x&distro=3.14.1',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2023:2165',
-                'https://access.redhat.com/security/cve/CVE-2023-0215',
-                'https://bugzilla.redhat.com/1960321',
-                'https://bugzilla.redhat.com/2164440',
-                'https://bugzilla.redhat.com/2164487',
-                'https://bugzilla.redhat.com/2164492',
-                'https://bugzilla.redhat.com/2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144000',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144003',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144006',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144008',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144010',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144012',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144015',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144017',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144019',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2145170',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2158412',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164440',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164487',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164488',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164492',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164497',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164499',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164500',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4203',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4304',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4450',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0215',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0216',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0217',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0286',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0401',
-                'https://errata.almalinux.org/9/ALSA-2023-2165.html',
-                'https://errata.rockylinux.org/RLSA-2023:0946',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=8818064ce3c3c0f1b740a5aaba2a987e75bfbafd',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=9816136fe31d92ace4037d5da5257f763aeeb4eb',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=c3829dd8825c654652201e16f8a0a0c46ee3f344',
-                'https://linux.oracle.com/cve/CVE-2023-0215.html',
-                'https://linux.oracle.com/errata/ELSA-2023-32791.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-0215',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0003',
-                'https://rustsec.org/advisories/RUSTSEC-2023-0009.html',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://security.netapp.com/advisory/ntap-20230427-0007',
-                'https://security.netapp.com/advisory/ntap-20230427-0007/',
-                'https://security.netapp.com/advisory/ntap-20230427-0009',
-                'https://security.netapp.com/advisory/ntap-20230427-0009/',
-                'https://security.netapp.com/advisory/ntap-20240621-0006',
-                'https://security.netapp.com/advisory/ntap-20240621-0006/',
-                'https://ubuntu.com/security/notices/USN-5844-1',
-                'https://ubuntu.com/security/notices/USN-5845-1',
-                'https://ubuntu.com/security/notices/USN-5845-2',
-                'https://ubuntu.com/security/notices/USN-6564-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-0215',
-                'https://www.openssl.org/news/secadv/20230207.txt'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: use-after-free following BIO_new_NDEF'
-            },
-            {
-              'cve':  'CVE-2023-0286',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '7.4',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H'
-                },
-                'nvd': {
-                  'v3score':  '7.4',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.4',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-843'
-              ],
-              'description':   'There is a type confusion vulnerability relating to X.400 address processing\ninside an X.509 GeneralName. X.400 addresses were parsed as an ASN1_STRING but\nthe public structure definition for GENERAL_NAME incorrectly specified the type\nof the x400Address field as ASN1_TYPE. This field is subsequently interpreted by\nthe OpenSSL function GENERAL_NAME_cmp as an ASN1_TYPE rather than an\nASN1_STRING.\n\nWhen CRL checking is enabled (i.e. the application sets the\nX509_V_FLAG_CRL_CHECK flag), this vulnerability may allow an attacker to pass\narbitrary pointers to a memcmp call, enabling them to read memory contents or\nenact a denial of service. In most cases, the attack requires the attacker to\nprovide both the certificate chain and CRL, neither of which need to have a\nvalid signature. If the attacker only controls one of these inputs, the other\ninput must already contain an X.400 address as a CRL distribution point, which\nis uncommon. As such, this vulnerability is most likely to only affect\napplications which have implemented their own functionality for retrieving CRLs\nover a network.',
-              'diffID':        'sha256:f02969ff78e11d7c2f356f125c527507739a3d24b970336f43f38eab7d632626',
-              'fixedVersions': [
-                '1.1.1t-r0'
-              ],
-              'installedVersion': '1.1.1k-r0',
-              'packageName':      'libcrypto1.1',
-              'purl':             'pkg:apk/alpine/libcrypto1.1@1.1.1k-r0?arch=s390x&distro=3.14.1',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2025:7937',
-                'https://access.redhat.com/security/cve/CVE-2023-0286',
-                'https://access.redhat.com/security/cve/cve-2023-0286',
-                'https://bugzilla.redhat.com/2164440',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144000',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144003',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144006',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144008',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144010',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144012',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144015',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144017',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144019',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2145170',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2158412',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164440',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164487',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164488',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164492',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164497',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164499',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164500',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4203',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4304',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4450',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0215',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0216',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0217',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0286',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0401',
-                'https://errata.almalinux.org/9/ALSA-2025-7937.html',
-                'https://errata.rockylinux.org/RLSA-2023:0946',
-                'https://ftp.openbsd.org/pub/OpenBSD/LibreSSL/libressl-3.6.2-relnotes.txt',
-                'https://ftp.openbsd.org/pub/OpenBSD/patches/7.2/common/018_x509.patch.sig',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=2c6c9d439b484e1ba9830d8454a34fa4f80fdfe9',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=2f7530077e0ef79d98718138716bc51ca0cad658',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=fd2af07dc083a350c959147097003a14a5e8ac4d',
-                'https://github.com/pyca/cryptography',
-                'https://github.com/pyca/cryptography/security/advisories/GHSA-x4qr-2fvf-3mr5',
-                'https://linux.oracle.com/cve/CVE-2023-0286.html',
-                'https://linux.oracle.com/errata/ELSA-2025-7937.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-0286',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0003',
-                'https://rustsec.org/advisories/RUSTSEC-2023-0006.html',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://ubuntu.com/security/notices/USN-5844-1',
-                'https://ubuntu.com/security/notices/USN-5845-1',
-                'https://ubuntu.com/security/notices/USN-5845-2',
-                'https://ubuntu.com/security/notices/USN-6564-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-0286',
-                'https://www.openssl.org/news/secadv/20230207.txt'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: X.400 address type confusion in X.509 GeneralName'
-            },
-            {
-              'cve':  'CVE-2023-0464',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-295'
-              ],
-              'description':   "A security vulnerability has been identified in all supported versions\n\nof OpenSSL related to the verification of X.509 certificate chains\nthat include policy constraints.  Attackers may be able to exploit this\nvulnerability by creating a malicious certificate chain that triggers\nexponential use of computational resources, leading to a denial-of-service\n(DoS) attack on affected systems.\n\nPolicy processing is disabled by default but can be enabled by passing\nthe `-policy' argument to the command line utilities or by calling the\n`X509_VERIFY_PARAM_set1_policies()' function.",
-              'diffID':        'sha256:f02969ff78e11d7c2f356f125c527507739a3d24b970336f43f38eab7d632626',
-              'fixedVersions': [
-                '1.1.1t-r1'
-              ],
-              'installedVersion': '1.1.1k-r0',
-              'packageName':      'libcrypto1.1',
-              'purl':             'pkg:apk/alpine/libcrypto1.1@1.1.1k-r0?arch=s390x&distro=3.14.1',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2023:3722',
-                'https://access.redhat.com/security/cve/CVE-2023-0464',
-                'https://bugzilla.redhat.com/2181082',
-                'https://bugzilla.redhat.com/2182561',
-                'https://bugzilla.redhat.com/2182565',
-                'https://bugzilla.redhat.com/2188461',
-                'https://bugzilla.redhat.com/2207947',
-                'https://errata.almalinux.org/9/ALSA-2023-3722.html',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=2017771e2db3e2b96f89bbe8766c3209f6a99545',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=2dcd4f1e3115f38cefa43e3efbe9b801c27e642e',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=879f7080d7e141f415c79eaa3a8ac4a3dad0348b',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=959c59c7a0164117e7f8366466a32bb1f8d77ff1',
-                'https://linux.oracle.com/cve/CVE-2023-0464.html',
-                'https://linux.oracle.com/errata/ELSA-2023-3722.html',
-                'https://lists.debian.org/debian-lts-announce/2023/06/msg00011.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-0464',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://security.netapp.com/advisory/ntap-20230406-0006/',
-                'https://security.netapp.com/advisory/ntap-20240621-0006/',
-                'https://ubuntu.com/security/notices/USN-6039-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.couchbase.com/alerts/',
-                'https://www.cve.org/CVERecord?id=CVE-2023-0464',
-                'https://www.debian.org/security/2023/dsa-5417',
-                'https://www.openssl.org/news/secadv/20230322.txt'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: Denial of service by excessive resource usage in verifying X509 policy constraints'
-            },
-            {
-              'cve':  'CVE-2022-2097',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N'
-                },
-                'nvd': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N'
-                },
-                'redhat': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-327'
-              ],
-              'description':   "AES OCB mode for 32-bit x86 platforms using the AES-NI assembly optimised implementation will not encrypt the entirety of the data under some circumstances. This could reveal sixteen bytes of data that was preexisting in the memory that wasn't written. In the special case of \"in place\" encryption, sixteen bytes of the plaintext would be revealed. Since OpenSSL does not support OCB based cipher suites for TLS and DTLS, they are both unaffected. Fixed in OpenSSL 3.0.5 (Affected 3.0.0-3.0.4). Fixed in OpenSSL 1.1.1q (Affected 1.1.1-1.1.1p).",
-              'diffID':        'sha256:f02969ff78e11d7c2f356f125c527507739a3d24b970336f43f38eab7d632626',
-              'fixedVersions': [
-                '1.1.1q-r0'
-              ],
-              'installedVersion': '1.1.1k-r0',
-              'packageName':      'libcrypto1.1',
-              'purl':             'pkg:apk/alpine/libcrypto1.1@1.1.1k-r0?arch=s390x&distro=3.14.1',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2022:6224',
-                'https://access.redhat.com/security/cve/CVE-2022-2097',
-                'https://bugzilla.redhat.com/2081494',
-                'https://bugzilla.redhat.com/2087911',
-                'https://bugzilla.redhat.com/2087913',
-                'https://bugzilla.redhat.com/2097310',
-                'https://bugzilla.redhat.com/2104905',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2081494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2097310',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2100554',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2104905',
-                'https://cert-portal.siemens.com/productcert/pdf/ssa-332410.pdf',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-1292',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-2068',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-2097',
-                'https://errata.almalinux.org/9/ALSA-2022-6224.html',
-                'https://errata.rockylinux.org/RLSA-2022:5818',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=919925673d6c9cfed3c1085497f5dfbbed5fc431',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=a98f339ddd7e8f487d6e0088d4a9a42324885a93',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=919925673d6c9cfed3c1085497f5dfbbed5fc431',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=a98f339ddd7e8f487d6e0088d4a9a42324885a93',
-                'https://github.com/alexcrichton/openssl-src-rs',
-                'https://linux.oracle.com/cve/CVE-2022-2097.html',
-                'https://linux.oracle.com/errata/ELSA-2022-9955.html',
-                'https://lists.debian.org/debian-lts-announce/2023/02/msg00019.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/R6CK57NBQFTPUMXAPJURCGXUYT76NQAK',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/R6CK57NBQFTPUMXAPJURCGXUYT76NQAK/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/V6567JERRHHJW2GNGJGKDRNHR7SNPZK7',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/V6567JERRHHJW2GNGJGKDRNHR7SNPZK7/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VCMNWKERPBKOEBNL7CLTTX3ZZCZLH7XA',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VCMNWKERPBKOEBNL7CLTTX3ZZCZLH7XA/',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/R6CK57NBQFTPUMXAPJURCGXUYT76NQAK',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/R6CK57NBQFTPUMXAPJURCGXUYT76NQAK/',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/V6567JERRHHJW2GNGJGKDRNHR7SNPZK7',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/V6567JERRHHJW2GNGJGKDRNHR7SNPZK7/',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/VCMNWKERPBKOEBNL7CLTTX3ZZCZLH7XA',
-                'https://nvd.nist.gov/vuln/detail/CVE-2022-2097',
-                'https://rustsec.org/advisories/RUSTSEC-2022-0032.html',
-                'https://security.gentoo.org/glsa/202210-02',
-                'https://security.netapp.com/advisory/ntap-20220715-0011',
-                'https://security.netapp.com/advisory/ntap-20220715-0011/',
-                'https://security.netapp.com/advisory/ntap-20230420-0008',
-                'https://security.netapp.com/advisory/ntap-20230420-0008/',
-                'https://security.netapp.com/advisory/ntap-20240621-0006',
-                'https://security.netapp.com/advisory/ntap-20240621-0006/',
-                'https://ubuntu.com/security/notices/USN-5502-1',
-                'https://ubuntu.com/security/notices/USN-6457-1',
-                'https://www.cve.org/CVERecord?id=CVE-2022-2097',
-                'https://www.debian.org/security/2023/dsa-5343',
-                'https://www.openssl.org/news/secadv/20220705.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: AES OCB fails to encrypt some bytes'
-            },
-            {
-              'cve':  'CVE-2022-4304',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N'
-                },
-                'nvd': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N'
-                },
-                'redhat': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-203'
-              ],
-              'description':   'A timing based side channel exists in the OpenSSL RSA Decryption implementation\nwhich could be sufficient to recover a plaintext across a network in a\nBleichenbacher style attack. To achieve a successful decryption an attacker\nwould have to be able to send a very large number of trial messages for\ndecryption. The vulnerability affects all RSA padding modes: PKCS#1 v1.5,\nRSA-OEAP and RSASVE.\n\nFor example, in a TLS connection, RSA is commonly used by a client to send an\nencrypted pre-master secret to the server. An attacker that had observed a\ngenuine connection between a client and a server could use this flaw to send\ntrial messages to the server and record the time taken to process them. After a\nsufficiently large number of messages the attacker could recover the pre-master\nsecret used for the original connection and thus be able to decrypt the\napplication data sent over that connection.',
-              'diffID':        'sha256:f02969ff78e11d7c2f356f125c527507739a3d24b970336f43f38eab7d632626',
-              'fixedVersions': [
-                '1.1.1t-r0'
-              ],
-              'installedVersion': '1.1.1k-r0',
-              'packageName':      'libcrypto1.1',
-              'purl':             'pkg:apk/alpine/libcrypto1.1@1.1.1k-r0?arch=s390x&distro=3.14.1',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2023:2165',
-                'https://access.redhat.com/security/cve/CVE-2022-4304',
-                'https://bugzilla.redhat.com/1960321',
-                'https://bugzilla.redhat.com/2164440',
-                'https://bugzilla.redhat.com/2164487',
-                'https://bugzilla.redhat.com/2164492',
-                'https://bugzilla.redhat.com/2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144000',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144003',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144006',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144008',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144010',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144012',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144015',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144017',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144019',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2145170',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2158412',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164440',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164487',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164488',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164492',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164497',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164499',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164500',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4203',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4304',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4450',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0215',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0216',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0217',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0286',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0401',
-                'https://errata.almalinux.org/9/ALSA-2023-2165.html',
-                'https://errata.rockylinux.org/RLSA-2023:0946',
-                'https://linux.oracle.com/cve/CVE-2022-4304.html',
-                'https://linux.oracle.com/errata/ELSA-2023-32791.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2022-4304',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0003',
-                'https://rustsec.org/advisories/RUSTSEC-2023-0007.html',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://ubuntu.com/security/notices/USN-5844-1',
-                'https://ubuntu.com/security/notices/USN-6564-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2022-4304',
-                'https://www.openssl.org/news/secadv/20230207.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: timing attack in RSA Decryption implementation'
-            },
-            {
-              'cve':  'CVE-2023-0465',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N'
-                },
-                'redhat': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-295'
-              ],
-              'description':   "Applications that use a non-default option when verifying certificates may be\nvulnerable to an attack from a malicious CA to circumvent certain checks.\n\nInvalid certificate policies in leaf certificates are silently ignored by\nOpenSSL and other certificate policy checks are skipped for that certificate.\nA malicious CA could use this to deliberately assert invalid certificate policies\nin order to circumvent policy checking on the certificate altogether.\n\nPolicy processing is disabled by default but can be enabled by passing\nthe `-policy' argument to the command line utilities or by calling the\n`X509_VERIFY_PARAM_set1_policies()' function.",
-              'diffID':        'sha256:f02969ff78e11d7c2f356f125c527507739a3d24b970336f43f38eab7d632626',
-              'fixedVersions': [
-                '1.1.1t-r2'
-              ],
-              'installedVersion': '1.1.1k-r0',
-              'packageName':      'libcrypto1.1',
-              'purl':             'pkg:apk/alpine/libcrypto1.1@1.1.1k-r0?arch=s390x&distro=3.14.1',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2023:3722',
-                'https://access.redhat.com/security/cve/CVE-2023-0465',
-                'https://bugzilla.redhat.com/2181082',
-                'https://bugzilla.redhat.com/2182561',
-                'https://bugzilla.redhat.com/2182565',
-                'https://bugzilla.redhat.com/2188461',
-                'https://bugzilla.redhat.com/2207947',
-                'https://errata.almalinux.org/9/ALSA-2023-3722.html',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=10325176f3d3e98c6e2b3bf5ab1e3b334de6947a',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=1dd43e0709fece299b15208f36cc7c76209ba0bb',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=b013765abfa80036dc779dd0e50602c57bb3bf95',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=facfb1ab745646e97a1920977ae4a9965ea61d5c',
-                'https://linux.oracle.com/cve/CVE-2023-0465.html',
-                'https://linux.oracle.com/errata/ELSA-2023-3722.html',
-                'https://lists.debian.org/debian-lts-announce/2023/06/msg00011.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-0465',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://security.netapp.com/advisory/ntap-20230414-0001/',
-                'https://ubuntu.com/security/notices/USN-6039-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-0465',
-                'https://www.debian.org/security/2023/dsa-5417',
-                'https://www.openssl.org/news/secadv/20230328.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: Invalid certificate policies in leaf certificates are silently ignored'
-            },
-            {
-              'cve':  'CVE-2022-0778',
-              'cvss': {
-                'bitnami': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'ghsa': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'nvd': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-835'
-              ],
-              'description':   'The BN_mod_sqrt() function, which computes a modular square root, contains a bug that can cause it to loop forever for non-prime moduli. Internally this function is used when parsing certificates that contain elliptic curve public keys in compressed form or explicit elliptic curve parameters with a base point encoded in compressed form. It is possible to trigger the infinite loop by crafting a certificate that has invalid explicit curve parameters. Since certificate parsing happens prior to verification of the certificate signature, any process that parses an externally supplied certificate may thus be subject to a denial of service attack. The infinite loop can also be reached when parsing crafted private keys as they can contain explicit elliptic curve parameters. Thus vulnerable situations include: - TLS clients consuming server certificates - TLS servers consuming client certificates - Hosting providers taking certificates or private keys from customers - Certificate authorities parsing certification requests from subscribers - Anything else which parses ASN.1 elliptic curve parameters Also any other applications that use the BN_mod_sqrt() where the attacker can control the parameter values are vulnerable to this DoS issue. In the OpenSSL 1.0.2 version the public key is not parsed during initial parsing of the certificate which makes it slightly harder to trigger the infinite loop. However any operation which requires the public key from the certificate will trigger the infinite loop. In particular the attacker can use a self-signed certificate to trigger the loop during verification of the certificate signature. This issue affects OpenSSL versions 1.0.2, 1.1.1 and 3.0. It was addressed in the releases of 1.1.1n and 3.0.2 on the 15th March 2022. Fixed in OpenSSL 3.0.2 (Affected 3.0.0,3.0.1). Fixed in OpenSSL 1.1.1n (Affected 1.1.1-1.1.1m). Fixed in OpenSSL 1.0.2zd (Affected 1.0.2-1.0.2zc).',
-              'diffID':        'sha256:f02969ff78e11d7c2f356f125c527507739a3d24b970336f43f38eab7d632626',
-              'fixedVersions': [
-                '3.3.3p1-r3'
-              ],
-              'installedVersion': '3.3.3p1-r2',
-              'packageName':      'libretls',
-              'purl':             'pkg:apk/alpine/libretls@3.3.3p1-r2?arch=s390x&distro=3.14.1',
-              'references':       [
-                'http://packetstormsecurity.com/files/167344/OpenSSL-1.0.2-1.1.1-3.0-BN_mod_sqrt-Infinite-Loop.html',
-                'http://seclists.org/fulldisclosure/2022/May/33',
-                'http://seclists.org/fulldisclosure/2022/May/35',
-                'http://seclists.org/fulldisclosure/2022/May/38',
-                'https://access.redhat.com/errata/RHSA-2022:5326',
-                'https://access.redhat.com/security/cve/CVE-2022-0778',
-                'https://bugzilla.redhat.com/2062202',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2062202',
-                'https://cert-portal.siemens.com/productcert/pdf/ssa-712929.pdf',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-0778',
-                'https://errata.almalinux.org/8/ALSA-2022-5326.html',
-                'https://errata.rockylinux.org/RLSA-2022:4899',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=3118eb64934499d93db3230748a452351d1d9a65',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=380085481c64de749a6dd25cdf0bcf4360b30f83',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=a466912611aa6cbdf550cd10601390e587451246',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=3118eb64934499d93db3230748a452351d1d9a65',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=380085481c64de749a6dd25cdf0bcf4360b30f83',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=a466912611aa6cbdf550cd10601390e587451246',
-                'https://linux.oracle.com/cve/CVE-2022-0778.html',
-                'https://linux.oracle.com/errata/ELSA-2022-9272.html',
-                'https://lists.debian.org/debian-lts-announce/2022/03/msg00023.html',
-                'https://lists.debian.org/debian-lts-announce/2022/03/msg00024.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/323SNN6ZX7PRJJWP2BUAFLPUAE42XWLZ',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/323SNN6ZX7PRJJWP2BUAFLPUAE42XWLZ/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GDB3GQVJPXJE7X5C5JN6JAA4XUDWD6E6',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GDB3GQVJPXJE7X5C5JN6JAA4XUDWD6E6/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/W6K3PR542DXWLEFFMFIDMME4CWMHJRMG',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/W6K3PR542DXWLEFFMFIDMME4CWMHJRMG/',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/323SNN6ZX7PRJJWP2BUAFLPUAE42XWLZ',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/GDB3GQVJPXJE7X5C5JN6JAA4XUDWD6E6',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/W6K3PR542DXWLEFFMFIDMME4CWMHJRMG',
-                'https://nvd.nist.gov/vuln/detail/CVE-2022-0778',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2022-0002',
-                'https://rustsec.org/advisories/RUSTSEC-2022-0014.html',
-                'https://security.gentoo.org/glsa/202210-02',
-                'https://security.netapp.com/advisory/ntap-20220321-0002',
-                'https://security.netapp.com/advisory/ntap-20220321-0002/',
-                'https://security.netapp.com/advisory/ntap-20220429-0005',
-                'https://security.netapp.com/advisory/ntap-20220429-0005/',
-                'https://security.netapp.com/advisory/ntap-20240621-0006',
-                'https://security.netapp.com/advisory/ntap-20240621-0006/',
-                'https://support.apple.com/kb/HT213255',
-                'https://support.apple.com/kb/HT213256',
-                'https://support.apple.com/kb/HT213257',
-                'https://ubuntu.com/security/notices/USN-5328-1',
-                'https://ubuntu.com/security/notices/USN-5328-2',
-                'https://ubuntu.com/security/notices/USN-6457-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2022-0778',
-                'https://www.debian.org/security/2022/dsa-5103',
-                'https://www.openssl.org/news/secadv/20220315.txt',
-                'https://www.oracle.com/security-alerts/cpuapr2022.html',
-                'https://www.oracle.com/security-alerts/cpujul2022.html',
-                'https://www.tenable.com/security/tns-2022-06',
-                'https://www.tenable.com/security/tns-2022-07',
-                'https://www.tenable.com/security/tns-2022-08',
-                'https://www.tenable.com/security/tns-2022-09'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: Infinite loop in BN_mod_sqrt() reachable when parsing certificates'
-            },
-            {
-              'cve':  'CVE-2021-3711',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '9.8',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'nvd': {
-                  'v3score':  '9.8',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '9.8',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-120'
-              ],
-              'description':   'In order to decrypt SM2 encrypted data an application is expected to call the API function EVP_PKEY_decrypt(). Typically an application will call this function twice. The first time, on entry, the "out" parameter can be NULL and, on exit, the "outlen" parameter is populated with the buffer size required to hold the decrypted plaintext. The application can then allocate a sufficiently sized buffer and call EVP_PKEY_decrypt() again, but this time passing a non-NULL value for the "out" parameter. A bug in the implementation of the SM2 decryption code means that the calculation of the buffer size required to hold the plaintext returned by the first call to EVP_PKEY_decrypt() can be smaller than the actual size required by the second call. This can lead to a buffer overflow when EVP_PKEY_decrypt() is called by the application a second time with a buffer that is too small. A malicious attacker who is able present SM2 content for decryption to an application could cause attacker chosen data to overflow the buffer by up to a maximum of 62 bytes altering the contents of other data held after the buffer, possibly changing application behaviour or causing the application to crash. The location of the buffer is application dependent but is typically heap allocated. Fixed in OpenSSL 1.1.1l (Affected 1.1.1-1.1.1k).',
-              'diffID':        'sha256:f02969ff78e11d7c2f356f125c527507739a3d24b970336f43f38eab7d632626',
-              'fixedVersions': [
-                '1.1.1l-r0'
-              ],
-              'installedVersion': '1.1.1k-r0',
-              'packageName':      'libssl1.1',
-              'purl':             'pkg:apk/alpine/libssl1.1@1.1.1k-r0?arch=s390x&distro=3.14.1',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2021/08/26/2',
-                'https://access.redhat.com/security/cve/CVE-2021-3711',
-                'https://cert-portal.siemens.com/productcert/pdf/ssa-389290.pdf',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=59f5e75f3bced8fc0e130d72a3f582cf7b480b46',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=59f5e75f3bced8fc0e130d72a3f582cf7b480b46',
-                'https://lists.apache.org/thread.html/r18995de860f0e63635f3008fd2a6aca82394249476d21691e7c59c9e%40%3Cdev.tomcat.apache.org%3E',
-                'https://lists.apache.org/thread.html/r18995de860f0e63635f3008fd2a6aca82394249476d21691e7c59c9e@%3Cdev.tomcat.apache.org%3E',
-                'https://lists.apache.org/thread.html/rad5d9f83f0d11fb3f8bb148d179b8a9ad7c6a17f18d70e5805a713d1%40%3Cdev.tomcat.apache.org%3E',
-                'https://lists.apache.org/thread.html/rad5d9f83f0d11fb3f8bb148d179b8a9ad7c6a17f18d70e5805a713d1@%3Cdev.tomcat.apache.org%3E',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-3711',
-                'https://rustsec.org/advisories/RUSTSEC-2021-0097.html',
-                'https://security.gentoo.org/glsa/202209-02',
-                'https://security.gentoo.org/glsa/202210-02',
-                'https://security.netapp.com/advisory/ntap-20210827-0010',
-                'https://security.netapp.com/advisory/ntap-20210827-0010/',
-                'https://security.netapp.com/advisory/ntap-20211022-0003',
-                'https://security.netapp.com/advisory/ntap-20211022-0003/',
-                'https://security.netapp.com/advisory/ntap-20240621-0006',
-                'https://security.netapp.com/advisory/ntap-20240621-0006/',
-                'https://ubuntu.com/security/notices/USN-5051-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-3711',
-                'https://www.debian.org/security/2021/dsa-4963',
-                'https://www.openssl.org/news/secadv/20210824.txt',
-                'https://www.oracle.com/security-alerts/cpuapr2022.html',
-                'https://www.oracle.com/security-alerts/cpujan2022.html',
-                'https://www.oracle.com/security-alerts/cpuoct2021.html',
-                'https://www.tenable.com/security/tns-2021-16',
-                'https://www.tenable.com/security/tns-2022-02'
-              ],
-              'severity':   'CRITICAL',
-              'suppressed': false,
-              'title':      'openssl: SM2 Decryption Buffer Overflow'
-            },
-            {
-              'cve':  'CVE-2021-3712',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '7.4',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H'
-                },
-                'nvd': {
-                  'v3score':  '7.4',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.4',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-125'
-              ],
-              'description':   "ASN.1 strings are represented internally within OpenSSL as an ASN1_STRING structure which contains a buffer holding the string data and a field holding the buffer length. This contrasts with normal C strings which are repesented as a buffer for the string data which is terminated with a NUL (0) byte. Although not a strict requirement, ASN.1 strings that are parsed using OpenSSL's own \"d2i\" functions (and other similar parsing functions) as well as any string whose value has been set with the ASN1_STRING_set() function will additionally NUL terminate the byte array in the ASN1_STRING structure. However, it is possible for applications to directly construct valid ASN1_STRING structures which do not NUL terminate the byte array by directly setting the \"data\" and \"length\" fields in the ASN1_STRING array. This can also happen by using the ASN1_STRING_set0() function. Numerous OpenSSL functions that print ASN.1 data have been found to assume that the ASN1_STRING byte array will be NUL terminated, even though this is not guaranteed for strings that have been directly constructed. Where an application requests an ASN.1 structure to be printed, and where that ASN.1 structure contains ASN1_STRINGs that have been directly constructed by the application without NUL terminating the \"data\" field, then a read buffer overrun can occur. The same thing can also occur during name constraints processing of certificates (for example if a certificate has been directly constructed by the application instead of loading it via the OpenSSL parsing functions, and the certificate contains non NUL terminated ASN1_STRING structures). It can also occur in the X509_get1_email(), X509_REQ_get1_email() and X509_get1_ocsp() functions. If a malicious actor can cause an application to directly construct an ASN1_STRING and then process it through one of the affected OpenSSL functions then this issue could be hit. This might result in a crash (causing a Denial of Service attack). It could also result in the disclosure of private memory contents (such as private keys, or sensitive plaintext). Fixed in OpenSSL 1.1.1l (Affected 1.1.1-1.1.1k). Fixed in OpenSSL 1.0.2za (Affected 1.0.2-1.0.2y).",
-              'diffID':        'sha256:f02969ff78e11d7c2f356f125c527507739a3d24b970336f43f38eab7d632626',
-              'fixedVersions': [
-                '1.1.1l-r0'
-              ],
-              'installedVersion': '1.1.1k-r0',
-              'packageName':      'libssl1.1',
-              'purl':             'pkg:apk/alpine/libssl1.1@1.1.1k-r0?arch=s390x&distro=3.14.1',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2021/08/26/2',
-                'https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2021-3712.json',
-                'https://access.redhat.com/security/cve/CVE-2021-3712',
-                'https://cert-portal.siemens.com/productcert/pdf/ssa-244969.pdf',
-                'https://cert-portal.siemens.com/productcert/pdf/ssa-389290.pdf',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=94d23fcff9b2a7a8368dfe52214d5c2569882c11',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=ccb0a11145ee72b042d10593a64eaf9e8a55ec12',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=94d23fcff9b2a7a8368dfe52214d5c2569882c11',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=ccb0a11145ee72b042d10593a64eaf9e8a55ec12',
-                'https://kc.mcafee.com/corporate/index?page=content&id=SB10366',
-                'https://linux.oracle.com/cve/CVE-2021-3712.html',
-                'https://linux.oracle.com/errata/ELSA-2022-9023.html',
-                'https://lists.apache.org/thread.html/r18995de860f0e63635f3008fd2a6aca82394249476d21691e7c59c9e%40%3Cdev.tomcat.apache.org%3E',
-                'https://lists.apache.org/thread.html/r18995de860f0e63635f3008fd2a6aca82394249476d21691e7c59c9e@%3Cdev.tomcat.apache.org%3E',
-                'https://lists.apache.org/thread.html/rad5d9f83f0d11fb3f8bb148d179b8a9ad7c6a17f18d70e5805a713d1%40%3Cdev.tomcat.apache.org%3E',
-                'https://lists.apache.org/thread.html/rad5d9f83f0d11fb3f8bb148d179b8a9ad7c6a17f18d70e5805a713d1@%3Cdev.tomcat.apache.org%3E',
-                'https://lists.debian.org/debian-lts-announce/2021/09/msg00014.html',
-                'https://lists.debian.org/debian-lts-announce/2021/09/msg00021.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-3712',
-                'https://rustsec.org/advisories/RUSTSEC-2021-0098.html',
-                'https://security.gentoo.org/glsa/202209-02',
-                'https://security.gentoo.org/glsa/202210-02',
-                'https://security.netapp.com/advisory/ntap-20210827-0010',
-                'https://security.netapp.com/advisory/ntap-20210827-0010/',
-                'https://security.netapp.com/advisory/ntap-20240621-0006',
-                'https://security.netapp.com/advisory/ntap-20240621-0006/',
-                'https://ubuntu.com/security/notices/USN-5051-1',
-                'https://ubuntu.com/security/notices/USN-5051-2',
-                'https://ubuntu.com/security/notices/USN-5051-3',
-                'https://ubuntu.com/security/notices/USN-5051-4 (regression only in trusty/esm)',
-                'https://ubuntu.com/security/notices/USN-5088-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-3712',
-                'https://www.debian.org/security/2021/dsa-4963',
-                'https://www.openssl.org/news/secadv/20210824.txt',
-                'https://www.oracle.com/security-alerts/cpuapr2022.html',
-                'https://www.oracle.com/security-alerts/cpujan2022.html',
-                'https://www.oracle.com/security-alerts/cpuoct2021.html',
-                'https://www.tenable.com/security/tns-2021-16',
-                'https://www.tenable.com/security/tns-2022-02'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: Read buffer overruns processing ASN.1 strings'
-            },
-            {
-              'cve':  'CVE-2022-0778',
-              'cvss': {
-                'bitnami': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'ghsa': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'nvd': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-835'
-              ],
-              'description':   'The BN_mod_sqrt() function, which computes a modular square root, contains a bug that can cause it to loop forever for non-prime moduli. Internally this function is used when parsing certificates that contain elliptic curve public keys in compressed form or explicit elliptic curve parameters with a base point encoded in compressed form. It is possible to trigger the infinite loop by crafting a certificate that has invalid explicit curve parameters. Since certificate parsing happens prior to verification of the certificate signature, any process that parses an externally supplied certificate may thus be subject to a denial of service attack. The infinite loop can also be reached when parsing crafted private keys as they can contain explicit elliptic curve parameters. Thus vulnerable situations include: - TLS clients consuming server certificates - TLS servers consuming client certificates - Hosting providers taking certificates or private keys from customers - Certificate authorities parsing certification requests from subscribers - Anything else which parses ASN.1 elliptic curve parameters Also any other applications that use the BN_mod_sqrt() where the attacker can control the parameter values are vulnerable to this DoS issue. In the OpenSSL 1.0.2 version the public key is not parsed during initial parsing of the certificate which makes it slightly harder to trigger the infinite loop. However any operation which requires the public key from the certificate will trigger the infinite loop. In particular the attacker can use a self-signed certificate to trigger the loop during verification of the certificate signature. This issue affects OpenSSL versions 1.0.2, 1.1.1 and 3.0. It was addressed in the releases of 1.1.1n and 3.0.2 on the 15th March 2022. Fixed in OpenSSL 3.0.2 (Affected 3.0.0,3.0.1). Fixed in OpenSSL 1.1.1n (Affected 1.1.1-1.1.1m). Fixed in OpenSSL 1.0.2zd (Affected 1.0.2-1.0.2zc).',
-              'diffID':        'sha256:f02969ff78e11d7c2f356f125c527507739a3d24b970336f43f38eab7d632626',
-              'fixedVersions': [
-                '1.1.1n-r0'
-              ],
-              'installedVersion': '1.1.1k-r0',
-              'packageName':      'libssl1.1',
-              'purl':             'pkg:apk/alpine/libssl1.1@1.1.1k-r0?arch=s390x&distro=3.14.1',
-              'references':       [
-                'http://packetstormsecurity.com/files/167344/OpenSSL-1.0.2-1.1.1-3.0-BN_mod_sqrt-Infinite-Loop.html',
-                'http://seclists.org/fulldisclosure/2022/May/33',
-                'http://seclists.org/fulldisclosure/2022/May/35',
-                'http://seclists.org/fulldisclosure/2022/May/38',
-                'https://access.redhat.com/errata/RHSA-2022:5326',
-                'https://access.redhat.com/security/cve/CVE-2022-0778',
-                'https://bugzilla.redhat.com/2062202',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2062202',
-                'https://cert-portal.siemens.com/productcert/pdf/ssa-712929.pdf',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-0778',
-                'https://errata.almalinux.org/8/ALSA-2022-5326.html',
-                'https://errata.rockylinux.org/RLSA-2022:4899',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=3118eb64934499d93db3230748a452351d1d9a65',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=380085481c64de749a6dd25cdf0bcf4360b30f83',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=a466912611aa6cbdf550cd10601390e587451246',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=3118eb64934499d93db3230748a452351d1d9a65',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=380085481c64de749a6dd25cdf0bcf4360b30f83',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=a466912611aa6cbdf550cd10601390e587451246',
-                'https://linux.oracle.com/cve/CVE-2022-0778.html',
-                'https://linux.oracle.com/errata/ELSA-2022-9272.html',
-                'https://lists.debian.org/debian-lts-announce/2022/03/msg00023.html',
-                'https://lists.debian.org/debian-lts-announce/2022/03/msg00024.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/323SNN6ZX7PRJJWP2BUAFLPUAE42XWLZ',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/323SNN6ZX7PRJJWP2BUAFLPUAE42XWLZ/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GDB3GQVJPXJE7X5C5JN6JAA4XUDWD6E6',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GDB3GQVJPXJE7X5C5JN6JAA4XUDWD6E6/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/W6K3PR542DXWLEFFMFIDMME4CWMHJRMG',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/W6K3PR542DXWLEFFMFIDMME4CWMHJRMG/',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/323SNN6ZX7PRJJWP2BUAFLPUAE42XWLZ',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/GDB3GQVJPXJE7X5C5JN6JAA4XUDWD6E6',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/W6K3PR542DXWLEFFMFIDMME4CWMHJRMG',
-                'https://nvd.nist.gov/vuln/detail/CVE-2022-0778',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2022-0002',
-                'https://rustsec.org/advisories/RUSTSEC-2022-0014.html',
-                'https://security.gentoo.org/glsa/202210-02',
-                'https://security.netapp.com/advisory/ntap-20220321-0002',
-                'https://security.netapp.com/advisory/ntap-20220321-0002/',
-                'https://security.netapp.com/advisory/ntap-20220429-0005',
-                'https://security.netapp.com/advisory/ntap-20220429-0005/',
-                'https://security.netapp.com/advisory/ntap-20240621-0006',
-                'https://security.netapp.com/advisory/ntap-20240621-0006/',
-                'https://support.apple.com/kb/HT213255',
-                'https://support.apple.com/kb/HT213256',
-                'https://support.apple.com/kb/HT213257',
-                'https://ubuntu.com/security/notices/USN-5328-1',
-                'https://ubuntu.com/security/notices/USN-5328-2',
-                'https://ubuntu.com/security/notices/USN-6457-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2022-0778',
-                'https://www.debian.org/security/2022/dsa-5103',
-                'https://www.openssl.org/news/secadv/20220315.txt',
-                'https://www.oracle.com/security-alerts/cpuapr2022.html',
-                'https://www.oracle.com/security-alerts/cpujul2022.html',
-                'https://www.tenable.com/security/tns-2022-06',
-                'https://www.tenable.com/security/tns-2022-07',
-                'https://www.tenable.com/security/tns-2022-08',
-                'https://www.tenable.com/security/tns-2022-09'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: Infinite loop in BN_mod_sqrt() reachable when parsing certificates'
-            },
-            {
-              'cve':  'CVE-2022-4450',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'nvd': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-415'
-              ],
-              'description':   'The function PEM_read_bio_ex() reads a PEM file from a BIO and parses and\ndecodes the "name" (e.g. "CERTIFICATE"), any header data and the payload data.\nIf the function succeeds then the "name_out", "header" and "data" arguments are\npopulated with pointers to buffers containing the relevant decoded data. The\ncaller is responsible for freeing those buffers. It is possible to construct a\nPEM file that results in 0 bytes of payload data. In this case PEM_read_bio_ex()\nwill return a failure code but will populate the header argument with a pointer\nto a buffer that has already been freed. If the caller also frees this buffer\nthen a double free will occur. This will most likely lead to a crash. This\ncould be exploited by an attacker who has the ability to supply malicious PEM\nfiles for parsing to achieve a denial of service attack.\n\nThe functions PEM_read_bio() and PEM_read() are simple wrappers around\nPEM_read_bio_ex() and therefore these functions are also directly affected.\n\nThese functions are also called indirectly by a number of other OpenSSL\nfunctions including PEM_X509_INFO_read_bio_ex() and\nSSL_CTX_use_serverinfo_file() which are also vulnerable. Some OpenSSL internal\nuses of these functions are not vulnerable because the caller does not free the\nheader argument if PEM_read_bio_ex() returns a failure code. These locations\ninclude the PEM_read_bio_TYPE() functions as well as the decoders introduced in\nOpenSSL 3.0.\n\nThe OpenSSL asn1parse command line application is also impacted by this issue.',
-              'diffID':        'sha256:f02969ff78e11d7c2f356f125c527507739a3d24b970336f43f38eab7d632626',
-              'fixedVersions': [
-                '1.1.1t-r0'
-              ],
-              'installedVersion': '1.1.1k-r0',
-              'packageName':      'libssl1.1',
-              'purl':             'pkg:apk/alpine/libssl1.1@1.1.1k-r0?arch=s390x&distro=3.14.1',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2023:2165',
-                'https://access.redhat.com/security/cve/CVE-2022-4450',
-                'https://bugzilla.redhat.com/1960321',
-                'https://bugzilla.redhat.com/2164440',
-                'https://bugzilla.redhat.com/2164487',
-                'https://bugzilla.redhat.com/2164492',
-                'https://bugzilla.redhat.com/2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144000',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144003',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144006',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144008',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144010',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144012',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144015',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144017',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144019',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2145170',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2158412',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164440',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164487',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164488',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164492',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164497',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164499',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164500',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4203',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4304',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4450',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0215',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0216',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0217',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0286',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0401',
-                'https://errata.almalinux.org/9/ALSA-2023-2165.html',
-                'https://errata.rockylinux.org/RLSA-2023:0946',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=63bcf189be73a9cc1264059bed6f57974be74a83',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=bbcf509bd046b34cca19c766bbddc31683d0858b',
-                'https://linux.oracle.com/cve/CVE-2022-4450.html',
-                'https://linux.oracle.com/errata/ELSA-2023-32791.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2022-4450',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0003',
-                'https://rustsec.org/advisories/RUSTSEC-2023-0010.html',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://ubuntu.com/security/notices/USN-5844-1',
-                'https://ubuntu.com/security/notices/USN-6564-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2022-4450',
-                'https://www.openssl.org/news/secadv/20230207.txt'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: double free after calling PEM_read_bio_ex'
-            },
-            {
-              'cve':  'CVE-2023-0215',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'nvd': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   'The public API function BIO_new_NDEF is a helper function used for streaming\nASN.1 data via a BIO. It is primarily used internally to OpenSSL to support the\nSMIME, CMS and PKCS7 streaming capabilities, but may also be called directly by\nend user applications.\n\nThe function receives a BIO from the caller, prepends a new BIO_f_asn1 filter\nBIO onto the front of it to form a BIO chain, and then returns the new head of\nthe BIO chain to the caller. Under certain conditions, for example if a CMS\nrecipient public key is invalid, the new filter BIO is freed and the function\nreturns a NULL result indicating a failure. However, in this case, the BIO chain\nis not properly cleaned up and the BIO passed by the caller still retains\ninternal pointers to the previously freed filter BIO. If the caller then goes on\nto call BIO_pop() on the BIO then a use-after-free will occur. This will most\nlikely result in a crash.\n\n\n\nThis scenario occurs directly in the internal function B64_write_ASN1() which\nmay cause BIO_new_NDEF() to be called and will subsequently call BIO_pop() on\nthe BIO. This internal function is in turn called by the public API functions\nPEM_write_bio_ASN1_stream, PEM_write_bio_CMS_stream, PEM_write_bio_PKCS7_stream,\nSMIME_write_ASN1, SMIME_write_CMS and SMIME_write_PKCS7.\n\nOther public API functions that may be impacted by this include\ni2d_ASN1_bio_stream, BIO_new_CMS, BIO_new_PKCS7, i2d_CMS_bio_stream and\ni2d_PKCS7_bio_stream.\n\nThe OpenSSL cms and smime command line applications are similarly affected.',
-              'diffID':        'sha256:f02969ff78e11d7c2f356f125c527507739a3d24b970336f43f38eab7d632626',
-              'fixedVersions': [
-                '1.1.1t-r0'
-              ],
-              'installedVersion': '1.1.1k-r0',
-              'packageName':      'libssl1.1',
-              'purl':             'pkg:apk/alpine/libssl1.1@1.1.1k-r0?arch=s390x&distro=3.14.1',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2023:2165',
-                'https://access.redhat.com/security/cve/CVE-2023-0215',
-                'https://bugzilla.redhat.com/1960321',
-                'https://bugzilla.redhat.com/2164440',
-                'https://bugzilla.redhat.com/2164487',
-                'https://bugzilla.redhat.com/2164492',
-                'https://bugzilla.redhat.com/2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144000',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144003',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144006',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144008',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144010',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144012',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144015',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144017',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144019',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2145170',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2158412',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164440',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164487',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164488',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164492',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164497',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164499',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164500',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4203',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4304',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4450',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0215',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0216',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0217',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0286',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0401',
-                'https://errata.almalinux.org/9/ALSA-2023-2165.html',
-                'https://errata.rockylinux.org/RLSA-2023:0946',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=8818064ce3c3c0f1b740a5aaba2a987e75bfbafd',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=9816136fe31d92ace4037d5da5257f763aeeb4eb',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=c3829dd8825c654652201e16f8a0a0c46ee3f344',
-                'https://linux.oracle.com/cve/CVE-2023-0215.html',
-                'https://linux.oracle.com/errata/ELSA-2023-32791.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-0215',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0003',
-                'https://rustsec.org/advisories/RUSTSEC-2023-0009.html',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://security.netapp.com/advisory/ntap-20230427-0007',
-                'https://security.netapp.com/advisory/ntap-20230427-0007/',
-                'https://security.netapp.com/advisory/ntap-20230427-0009',
-                'https://security.netapp.com/advisory/ntap-20230427-0009/',
-                'https://security.netapp.com/advisory/ntap-20240621-0006',
-                'https://security.netapp.com/advisory/ntap-20240621-0006/',
-                'https://ubuntu.com/security/notices/USN-5844-1',
-                'https://ubuntu.com/security/notices/USN-5845-1',
-                'https://ubuntu.com/security/notices/USN-5845-2',
-                'https://ubuntu.com/security/notices/USN-6564-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-0215',
-                'https://www.openssl.org/news/secadv/20230207.txt'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: use-after-free following BIO_new_NDEF'
-            },
-            {
-              'cve':  'CVE-2023-0286',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '7.4',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H'
-                },
-                'nvd': {
-                  'v3score':  '7.4',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.4',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-843'
-              ],
-              'description':   'There is a type confusion vulnerability relating to X.400 address processing\ninside an X.509 GeneralName. X.400 addresses were parsed as an ASN1_STRING but\nthe public structure definition for GENERAL_NAME incorrectly specified the type\nof the x400Address field as ASN1_TYPE. This field is subsequently interpreted by\nthe OpenSSL function GENERAL_NAME_cmp as an ASN1_TYPE rather than an\nASN1_STRING.\n\nWhen CRL checking is enabled (i.e. the application sets the\nX509_V_FLAG_CRL_CHECK flag), this vulnerability may allow an attacker to pass\narbitrary pointers to a memcmp call, enabling them to read memory contents or\nenact a denial of service. In most cases, the attack requires the attacker to\nprovide both the certificate chain and CRL, neither of which need to have a\nvalid signature. If the attacker only controls one of these inputs, the other\ninput must already contain an X.400 address as a CRL distribution point, which\nis uncommon. As such, this vulnerability is most likely to only affect\napplications which have implemented their own functionality for retrieving CRLs\nover a network.',
-              'diffID':        'sha256:f02969ff78e11d7c2f356f125c527507739a3d24b970336f43f38eab7d632626',
-              'fixedVersions': [
-                '1.1.1t-r0'
-              ],
-              'installedVersion': '1.1.1k-r0',
-              'packageName':      'libssl1.1',
-              'purl':             'pkg:apk/alpine/libssl1.1@1.1.1k-r0?arch=s390x&distro=3.14.1',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2025:7937',
-                'https://access.redhat.com/security/cve/CVE-2023-0286',
-                'https://access.redhat.com/security/cve/cve-2023-0286',
-                'https://bugzilla.redhat.com/2164440',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144000',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144003',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144006',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144008',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144010',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144012',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144015',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144017',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144019',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2145170',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2158412',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164440',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164487',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164488',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164492',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164497',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164499',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164500',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4203',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4304',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4450',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0215',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0216',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0217',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0286',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0401',
-                'https://errata.almalinux.org/9/ALSA-2025-7937.html',
-                'https://errata.rockylinux.org/RLSA-2023:0946',
-                'https://ftp.openbsd.org/pub/OpenBSD/LibreSSL/libressl-3.6.2-relnotes.txt',
-                'https://ftp.openbsd.org/pub/OpenBSD/patches/7.2/common/018_x509.patch.sig',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=2c6c9d439b484e1ba9830d8454a34fa4f80fdfe9',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=2f7530077e0ef79d98718138716bc51ca0cad658',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=fd2af07dc083a350c959147097003a14a5e8ac4d',
-                'https://github.com/pyca/cryptography',
-                'https://github.com/pyca/cryptography/security/advisories/GHSA-x4qr-2fvf-3mr5',
-                'https://linux.oracle.com/cve/CVE-2023-0286.html',
-                'https://linux.oracle.com/errata/ELSA-2025-7937.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-0286',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0003',
-                'https://rustsec.org/advisories/RUSTSEC-2023-0006.html',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://ubuntu.com/security/notices/USN-5844-1',
-                'https://ubuntu.com/security/notices/USN-5845-1',
-                'https://ubuntu.com/security/notices/USN-5845-2',
-                'https://ubuntu.com/security/notices/USN-6564-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-0286',
-                'https://www.openssl.org/news/secadv/20230207.txt'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: X.400 address type confusion in X.509 GeneralName'
-            },
-            {
-              'cve':  'CVE-2023-0464',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-295'
-              ],
-              'description':   "A security vulnerability has been identified in all supported versions\n\nof OpenSSL related to the verification of X.509 certificate chains\nthat include policy constraints.  Attackers may be able to exploit this\nvulnerability by creating a malicious certificate chain that triggers\nexponential use of computational resources, leading to a denial-of-service\n(DoS) attack on affected systems.\n\nPolicy processing is disabled by default but can be enabled by passing\nthe `-policy' argument to the command line utilities or by calling the\n`X509_VERIFY_PARAM_set1_policies()' function.",
-              'diffID':        'sha256:f02969ff78e11d7c2f356f125c527507739a3d24b970336f43f38eab7d632626',
-              'fixedVersions': [
-                '1.1.1t-r1'
-              ],
-              'installedVersion': '1.1.1k-r0',
-              'packageName':      'libssl1.1',
-              'purl':             'pkg:apk/alpine/libssl1.1@1.1.1k-r0?arch=s390x&distro=3.14.1',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2023:3722',
-                'https://access.redhat.com/security/cve/CVE-2023-0464',
-                'https://bugzilla.redhat.com/2181082',
-                'https://bugzilla.redhat.com/2182561',
-                'https://bugzilla.redhat.com/2182565',
-                'https://bugzilla.redhat.com/2188461',
-                'https://bugzilla.redhat.com/2207947',
-                'https://errata.almalinux.org/9/ALSA-2023-3722.html',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=2017771e2db3e2b96f89bbe8766c3209f6a99545',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=2dcd4f1e3115f38cefa43e3efbe9b801c27e642e',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=879f7080d7e141f415c79eaa3a8ac4a3dad0348b',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=959c59c7a0164117e7f8366466a32bb1f8d77ff1',
-                'https://linux.oracle.com/cve/CVE-2023-0464.html',
-                'https://linux.oracle.com/errata/ELSA-2023-3722.html',
-                'https://lists.debian.org/debian-lts-announce/2023/06/msg00011.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-0464',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://security.netapp.com/advisory/ntap-20230406-0006/',
-                'https://security.netapp.com/advisory/ntap-20240621-0006/',
-                'https://ubuntu.com/security/notices/USN-6039-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.couchbase.com/alerts/',
-                'https://www.cve.org/CVERecord?id=CVE-2023-0464',
-                'https://www.debian.org/security/2023/dsa-5417',
-                'https://www.openssl.org/news/secadv/20230322.txt'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: Denial of service by excessive resource usage in verifying X509 policy constraints'
-            },
-            {
-              'cve':  'CVE-2022-2097',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N'
-                },
-                'nvd': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N'
-                },
-                'redhat': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-327'
-              ],
-              'description':   "AES OCB mode for 32-bit x86 platforms using the AES-NI assembly optimised implementation will not encrypt the entirety of the data under some circumstances. This could reveal sixteen bytes of data that was preexisting in the memory that wasn't written. In the special case of \"in place\" encryption, sixteen bytes of the plaintext would be revealed. Since OpenSSL does not support OCB based cipher suites for TLS and DTLS, they are both unaffected. Fixed in OpenSSL 3.0.5 (Affected 3.0.0-3.0.4). Fixed in OpenSSL 1.1.1q (Affected 1.1.1-1.1.1p).",
-              'diffID':        'sha256:f02969ff78e11d7c2f356f125c527507739a3d24b970336f43f38eab7d632626',
-              'fixedVersions': [
-                '1.1.1q-r0'
-              ],
-              'installedVersion': '1.1.1k-r0',
-              'packageName':      'libssl1.1',
-              'purl':             'pkg:apk/alpine/libssl1.1@1.1.1k-r0?arch=s390x&distro=3.14.1',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2022:6224',
-                'https://access.redhat.com/security/cve/CVE-2022-2097',
-                'https://bugzilla.redhat.com/2081494',
-                'https://bugzilla.redhat.com/2087911',
-                'https://bugzilla.redhat.com/2087913',
-                'https://bugzilla.redhat.com/2097310',
-                'https://bugzilla.redhat.com/2104905',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2081494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2097310',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2100554',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2104905',
-                'https://cert-portal.siemens.com/productcert/pdf/ssa-332410.pdf',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-1292',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-2068',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-2097',
-                'https://errata.almalinux.org/9/ALSA-2022-6224.html',
-                'https://errata.rockylinux.org/RLSA-2022:5818',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=919925673d6c9cfed3c1085497f5dfbbed5fc431',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=a98f339ddd7e8f487d6e0088d4a9a42324885a93',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=919925673d6c9cfed3c1085497f5dfbbed5fc431',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=a98f339ddd7e8f487d6e0088d4a9a42324885a93',
-                'https://github.com/alexcrichton/openssl-src-rs',
-                'https://linux.oracle.com/cve/CVE-2022-2097.html',
-                'https://linux.oracle.com/errata/ELSA-2022-9955.html',
-                'https://lists.debian.org/debian-lts-announce/2023/02/msg00019.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/R6CK57NBQFTPUMXAPJURCGXUYT76NQAK',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/R6CK57NBQFTPUMXAPJURCGXUYT76NQAK/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/V6567JERRHHJW2GNGJGKDRNHR7SNPZK7',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/V6567JERRHHJW2GNGJGKDRNHR7SNPZK7/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VCMNWKERPBKOEBNL7CLTTX3ZZCZLH7XA',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VCMNWKERPBKOEBNL7CLTTX3ZZCZLH7XA/',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/R6CK57NBQFTPUMXAPJURCGXUYT76NQAK',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/R6CK57NBQFTPUMXAPJURCGXUYT76NQAK/',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/V6567JERRHHJW2GNGJGKDRNHR7SNPZK7',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/V6567JERRHHJW2GNGJGKDRNHR7SNPZK7/',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/VCMNWKERPBKOEBNL7CLTTX3ZZCZLH7XA',
-                'https://nvd.nist.gov/vuln/detail/CVE-2022-2097',
-                'https://rustsec.org/advisories/RUSTSEC-2022-0032.html',
-                'https://security.gentoo.org/glsa/202210-02',
-                'https://security.netapp.com/advisory/ntap-20220715-0011',
-                'https://security.netapp.com/advisory/ntap-20220715-0011/',
-                'https://security.netapp.com/advisory/ntap-20230420-0008',
-                'https://security.netapp.com/advisory/ntap-20230420-0008/',
-                'https://security.netapp.com/advisory/ntap-20240621-0006',
-                'https://security.netapp.com/advisory/ntap-20240621-0006/',
-                'https://ubuntu.com/security/notices/USN-5502-1',
-                'https://ubuntu.com/security/notices/USN-6457-1',
-                'https://www.cve.org/CVERecord?id=CVE-2022-2097',
-                'https://www.debian.org/security/2023/dsa-5343',
-                'https://www.openssl.org/news/secadv/20220705.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: AES OCB fails to encrypt some bytes'
-            },
-            {
-              'cve':  'CVE-2022-4304',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N'
-                },
-                'nvd': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N'
-                },
-                'redhat': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-203'
-              ],
-              'description':   'A timing based side channel exists in the OpenSSL RSA Decryption implementation\nwhich could be sufficient to recover a plaintext across a network in a\nBleichenbacher style attack. To achieve a successful decryption an attacker\nwould have to be able to send a very large number of trial messages for\ndecryption. The vulnerability affects all RSA padding modes: PKCS#1 v1.5,\nRSA-OEAP and RSASVE.\n\nFor example, in a TLS connection, RSA is commonly used by a client to send an\nencrypted pre-master secret to the server. An attacker that had observed a\ngenuine connection between a client and a server could use this flaw to send\ntrial messages to the server and record the time taken to process them. After a\nsufficiently large number of messages the attacker could recover the pre-master\nsecret used for the original connection and thus be able to decrypt the\napplication data sent over that connection.',
-              'diffID':        'sha256:f02969ff78e11d7c2f356f125c527507739a3d24b970336f43f38eab7d632626',
-              'fixedVersions': [
-                '1.1.1t-r0'
-              ],
-              'installedVersion': '1.1.1k-r0',
-              'packageName':      'libssl1.1',
-              'purl':             'pkg:apk/alpine/libssl1.1@1.1.1k-r0?arch=s390x&distro=3.14.1',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2023:2165',
-                'https://access.redhat.com/security/cve/CVE-2022-4304',
-                'https://bugzilla.redhat.com/1960321',
-                'https://bugzilla.redhat.com/2164440',
-                'https://bugzilla.redhat.com/2164487',
-                'https://bugzilla.redhat.com/2164492',
-                'https://bugzilla.redhat.com/2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144000',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144003',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144006',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144008',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144010',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144012',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144015',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144017',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144019',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2145170',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2158412',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164440',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164487',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164488',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164492',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164497',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164499',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164500',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4203',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4304',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4450',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0215',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0216',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0217',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0286',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0401',
-                'https://errata.almalinux.org/9/ALSA-2023-2165.html',
-                'https://errata.rockylinux.org/RLSA-2023:0946',
-                'https://linux.oracle.com/cve/CVE-2022-4304.html',
-                'https://linux.oracle.com/errata/ELSA-2023-32791.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2022-4304',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0003',
-                'https://rustsec.org/advisories/RUSTSEC-2023-0007.html',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://ubuntu.com/security/notices/USN-5844-1',
-                'https://ubuntu.com/security/notices/USN-6564-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2022-4304',
-                'https://www.openssl.org/news/secadv/20230207.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: timing attack in RSA Decryption implementation'
-            },
-            {
-              'cve':  'CVE-2023-0465',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N'
-                },
-                'redhat': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-295'
-              ],
-              'description':   "Applications that use a non-default option when verifying certificates may be\nvulnerable to an attack from a malicious CA to circumvent certain checks.\n\nInvalid certificate policies in leaf certificates are silently ignored by\nOpenSSL and other certificate policy checks are skipped for that certificate.\nA malicious CA could use this to deliberately assert invalid certificate policies\nin order to circumvent policy checking on the certificate altogether.\n\nPolicy processing is disabled by default but can be enabled by passing\nthe `-policy' argument to the command line utilities or by calling the\n`X509_VERIFY_PARAM_set1_policies()' function.",
-              'diffID':        'sha256:f02969ff78e11d7c2f356f125c527507739a3d24b970336f43f38eab7d632626',
-              'fixedVersions': [
-                '1.1.1t-r2'
-              ],
-              'installedVersion': '1.1.1k-r0',
-              'packageName':      'libssl1.1',
-              'purl':             'pkg:apk/alpine/libssl1.1@1.1.1k-r0?arch=s390x&distro=3.14.1',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2023:3722',
-                'https://access.redhat.com/security/cve/CVE-2023-0465',
-                'https://bugzilla.redhat.com/2181082',
-                'https://bugzilla.redhat.com/2182561',
-                'https://bugzilla.redhat.com/2182565',
-                'https://bugzilla.redhat.com/2188461',
-                'https://bugzilla.redhat.com/2207947',
-                'https://errata.almalinux.org/9/ALSA-2023-3722.html',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=10325176f3d3e98c6e2b3bf5ab1e3b334de6947a',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=1dd43e0709fece299b15208f36cc7c76209ba0bb',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=b013765abfa80036dc779dd0e50602c57bb3bf95',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=facfb1ab745646e97a1920977ae4a9965ea61d5c',
-                'https://linux.oracle.com/cve/CVE-2023-0465.html',
-                'https://linux.oracle.com/errata/ELSA-2023-3722.html',
-                'https://lists.debian.org/debian-lts-announce/2023/06/msg00011.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-0465',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://security.netapp.com/advisory/ntap-20230414-0001/',
-                'https://ubuntu.com/security/notices/USN-6039-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-0465',
-                'https://www.debian.org/security/2023/dsa-5417',
-                'https://www.openssl.org/news/secadv/20230328.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: Invalid certificate policies in leaf certificates are silently ignored'
-            },
-            {
-              'cve':  'CVE-2021-42378',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the getvar_i function",
-              'diffID':        'sha256:f02969ff78e11d7c2f356f125c527507739a3d24b970336f43f38eab7d632626',
-              'fixedVersions': [
-                '1.33.1-r6'
-              ],
-              'installedVersion': '1.33.1-r3',
-              'packageName':      'ssl_client',
-              'purl':             'pkg:apk/alpine/ssl_client@1.33.1-r3?arch=s390x&distro=3.14.1',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42378',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42378',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42378'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the getvar_i()'
-            },
-            {
-              'cve':  'CVE-2021-42379',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the next_input_file function",
-              'diffID':        'sha256:f02969ff78e11d7c2f356f125c527507739a3d24b970336f43f38eab7d632626',
-              'fixedVersions': [
-                '1.33.1-r6'
-              ],
-              'installedVersion': '1.33.1-r3',
-              'packageName':      'ssl_client',
-              'purl':             'pkg:apk/alpine/ssl_client@1.33.1-r3?arch=s390x&distro=3.14.1',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42379',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42379',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42379'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the next_input_file()'
-            },
-            {
-              'cve':  'CVE-2021-42380',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the clrvar function",
-              'diffID':        'sha256:f02969ff78e11d7c2f356f125c527507739a3d24b970336f43f38eab7d632626',
-              'fixedVersions': [
-                '1.33.1-r6'
-              ],
-              'installedVersion': '1.33.1-r3',
-              'packageName':      'ssl_client',
-              'purl':             'pkg:apk/alpine/ssl_client@1.33.1-r3?arch=s390x&distro=3.14.1',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42380',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42380',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42380'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the clrvar()'
-            },
-            {
-              'cve':  'CVE-2021-42381',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the hash_init function",
-              'diffID':        'sha256:f02969ff78e11d7c2f356f125c527507739a3d24b970336f43f38eab7d632626',
-              'fixedVersions': [
-                '1.33.1-r6'
-              ],
-              'installedVersion': '1.33.1-r3',
-              'packageName':      'ssl_client',
-              'purl':             'pkg:apk/alpine/ssl_client@1.33.1-r3?arch=s390x&distro=3.14.1',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42381',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42381',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42381'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the hash_init()'
-            },
-            {
-              'cve':  'CVE-2021-42382',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the getvar_s function",
-              'diffID':        'sha256:f02969ff78e11d7c2f356f125c527507739a3d24b970336f43f38eab7d632626',
-              'fixedVersions': [
-                '1.33.1-r6'
-              ],
-              'installedVersion': '1.33.1-r3',
-              'packageName':      'ssl_client',
-              'purl':             'pkg:apk/alpine/ssl_client@1.33.1-r3?arch=s390x&distro=3.14.1',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42382',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42382',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42382'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the getvar_s()'
-            },
-            {
-              'cve':  'CVE-2021-42383',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the evaluate function",
-              'diffID':        'sha256:f02969ff78e11d7c2f356f125c527507739a3d24b970336f43f38eab7d632626',
-              'fixedVersions': [
-                '1.33.1-r6'
-              ],
-              'installedVersion': '1.33.1-r3',
-              'packageName':      'ssl_client',
-              'purl':             'pkg:apk/alpine/ssl_client@1.33.1-r3?arch=s390x&distro=3.14.1',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42383',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42383',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42383'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the evaluate()'
-            },
-            {
-              'cve':  'CVE-2021-42384',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the handle_special function",
-              'diffID':        'sha256:f02969ff78e11d7c2f356f125c527507739a3d24b970336f43f38eab7d632626',
-              'fixedVersions': [
-                '1.33.1-r6'
-              ],
-              'installedVersion': '1.33.1-r3',
-              'packageName':      'ssl_client',
-              'purl':             'pkg:apk/alpine/ssl_client@1.33.1-r3?arch=s390x&distro=3.14.1',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42384',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42384',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42384'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the handle_special()'
-            },
-            {
-              'cve':  'CVE-2021-42385',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the evaluate function",
-              'diffID':        'sha256:f02969ff78e11d7c2f356f125c527507739a3d24b970336f43f38eab7d632626',
-              'fixedVersions': [
-                '1.33.1-r6'
-              ],
-              'installedVersion': '1.33.1-r3',
-              'packageName':      'ssl_client',
-              'purl':             'pkg:apk/alpine/ssl_client@1.33.1-r3?arch=s390x&distro=3.14.1',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42385',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42385',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42385'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the evaluate()'
-            },
-            {
-              'cve':  'CVE-2021-42386',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the nvalloc function",
-              'diffID':        'sha256:f02969ff78e11d7c2f356f125c527507739a3d24b970336f43f38eab7d632626',
-              'fixedVersions': [
-                '1.33.1-r6'
-              ],
-              'installedVersion': '1.33.1-r3',
-              'packageName':      'ssl_client',
-              'purl':             'pkg:apk/alpine/ssl_client@1.33.1-r3?arch=s390x&distro=3.14.1',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42386',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42386',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42386'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the nvalloc()'
-            },
-            {
-              'cve':  'CVE-2022-28391',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '8.8',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-88'
-              ],
-              'description':   "BusyBox through 1.35.0 allows remote attackers to execute arbitrary code if netstat is used to print a DNS PTR record's value to a VT compatible terminal. Alternatively, the attacker could choose to change the terminal's colors.",
-              'diffID':        'sha256:f02969ff78e11d7c2f356f125c527507739a3d24b970336f43f38eab7d632626',
-              'fixedVersions': [
-                '1.33.1-r7'
-              ],
-              'installedVersion': '1.33.1-r3',
-              'packageName':      'ssl_client',
-              'purl':             'pkg:apk/alpine/ssl_client@1.33.1-r3?arch=s390x&distro=3.14.1',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2022-28391',
-                'https://git.alpinelinux.org/aports/plain/main/busybox/0001-libbb-sockaddr2str-ensure-only-printable-characters-.patch',
-                'https://git.alpinelinux.org/aports/plain/main/busybox/0002-nslookup-sanitize-all-printed-strings-with-printable.patch',
-                'https://gitlab.alpinelinux.org/alpine/aports/-/issues/13661',
-                'https://nvd.nist.gov/vuln/detail/CVE-2022-28391',
-                'https://www.cve.org/CVERecord?id=CVE-2022-28391'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: remote attackers may execute arbitrary code if netstat is used'
-            },
-            {
-              'cve':  'CVE-2021-42374',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '5.7',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-125'
-              ],
-              'description':   "An out-of-bounds heap read in Busybox's unlzma applet leads to information leak and denial of service when crafted LZMA-compressed input is decompressed. This can be triggered by any applet/format that",
-              'diffID':        'sha256:f02969ff78e11d7c2f356f125c527507739a3d24b970336f43f38eab7d632626',
-              'fixedVersions': [
-                '1.33.1-r4'
-              ],
-              'installedVersion': '1.33.1-r3',
-              'packageName':      'ssl_client',
-              'purl':             'pkg:apk/alpine/ssl_client@1.33.1-r3?arch=s390x&distro=3.14.1',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42374',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42374',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42374'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'busybox: out-of-bounds read in unlzma applet leads to information leak and denial of service when crafted LZMA-compressed input is decompressed'
-            },
-            {
-              'cve':  'CVE-2021-42375',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.5',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '4.1',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-159'
-              ],
-              'description':   "An incorrect handling of a special element in Busybox's ash applet leads to denial of service when processing a crafted shell command, due to the shell mistaking specific characters for reserved characters. This may be used for DoS under rare conditions of filtered command input.",
-              'diffID':        'sha256:f02969ff78e11d7c2f356f125c527507739a3d24b970336f43f38eab7d632626',
-              'fixedVersions': [
-                '1.33.1-r5'
-              ],
-              'installedVersion': '1.33.1-r3',
-              'packageName':      'ssl_client',
-              'purl':             'pkg:apk/alpine/ssl_client@1.33.1-r3?arch=s390x&distro=3.14.1',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42375',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42375',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42375'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'busybox: incorrect handling of a special element in ash applet leads to denial of service when processing a crafted shell command'
-            },
-            {
-              'cve':  'CVE-2022-37434',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '9.8',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-787',
-                'CWE-120'
-              ],
-              'description':   'zlib through 1.2.12 has a heap-based buffer over-read or buffer overflow in inflate in inflate.c via a large gzip header extra field. NOTE: only applications that call inflateGetHeader are affected. Some common applications bundle the affected zlib source code but may be unable to call inflateGetHeader (e.g., see the nodejs/node reference).',
-              'diffID':        'sha256:f02969ff78e11d7c2f356f125c527507739a3d24b970336f43f38eab7d632626',
-              'fixedVersions': [
-                '1.2.12-r2'
-              ],
-              'installedVersion': '1.2.11-r3',
-              'packageName':      'zlib',
-              'purl':             'pkg:apk/alpine/zlib@1.2.11-r3?arch=s390x&distro=3.14.1',
-              'references':       [
-                'http://seclists.org/fulldisclosure/2022/Oct/37',
-                'http://seclists.org/fulldisclosure/2022/Oct/38',
-                'http://seclists.org/fulldisclosure/2022/Oct/41',
-                'http://seclists.org/fulldisclosure/2022/Oct/42',
-                'http://www.openwall.com/lists/oss-security/2022/08/05/2',
-                'http://www.openwall.com/lists/oss-security/2022/08/09/1',
-                'https://access.redhat.com/errata/RHSA-2022:8291',
-                'https://access.redhat.com/security/cve/CVE-2022-37434',
-                'https://bugzilla.redhat.com/2116639',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2053198',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2077431',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2081296',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2116639',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-37434',
-                'https://errata.almalinux.org/9/ALSA-2022-8291.html',
-                'https://errata.rockylinux.org/RLSA-2022:8291',
-                'https://github.com/curl/curl/issues/9271',
-                'https://github.com/ivd38/zlib_overflow',
-                'https://github.com/madler/zlib/blob/21767c654d31d2dccdde4330529775c6c5fd5389/zlib.h#L1062-L1063',
-                'https://github.com/madler/zlib/commit/1eb7682f845ac9e9bf9ae35bbfb3bad5dacbd91d',
-                'https://github.com/madler/zlib/commit/eff308af425b67093bab25f80f1ae950166bece1',
-                'https://github.com/nodejs/node/blob/75b68c6e4db515f76df73af476eccf382bbcb00a/deps/zlib/inflate.c#L762-L764',
-                'https://linux.oracle.com/cve/CVE-2022-37434.html',
-                'https://linux.oracle.com/errata/ELSA-2023-1095.html',
-                'https://lists.debian.org/debian-lts-announce/2022/09/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JWN4VE3JQR4O2SOUS5TXNLANRPMHWV4I/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NMBOJ77A7T7PQCARMDUK75TE6LLESZ3O/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PAVPQNCG3XRLCLNSQRM3KAN5ZFMVXVTY/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/X5U7OTKZSHY2I3ZFJSR2SHFHW72RKGDK/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YRQAI7H4M4RQZ2IWZUEEXECBE5D56BH2/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2022-37434',
-                'https://security.netapp.com/advisory/ntap-20220901-0005/',
-                'https://security.netapp.com/advisory/ntap-20230427-0007/',
-                'https://support.apple.com/kb/HT213488',
-                'https://support.apple.com/kb/HT213489',
-                'https://support.apple.com/kb/HT213490',
-                'https://support.apple.com/kb/HT213491',
-                'https://support.apple.com/kb/HT213493',
-                'https://support.apple.com/kb/HT213494',
-                'https://ubuntu.com/security/notices/USN-5570-1',
-                'https://ubuntu.com/security/notices/USN-5570-2',
-                'https://ubuntu.com/security/notices/USN-5573-1',
-                'https://ubuntu.com/security/notices/USN-6736-1',
-                'https://ubuntu.com/security/notices/USN-6736-2',
-                'https://www.cve.org/CVERecord?id=CVE-2022-37434',
-                'https://www.debian.org/security/2022/dsa-5218'
-              ],
-              'severity':   'CRITICAL',
-              'suppressed': false,
-              'title':      'zlib: heap-based buffer over-read and overflow in inflate() in inflate.c via a large gzip header extra field'
-            },
-            {
-              'cve':  'CVE-2018-25032',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'nvd': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '8.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-787'
-              ],
-              'description':   'zlib before 1.2.12 allows memory corruption when deflating (i.e., when compressing) if the input has many distant matches.',
-              'diffID':        'sha256:f02969ff78e11d7c2f356f125c527507739a3d24b970336f43f38eab7d632626',
-              'fixedVersions': [
-                '1.2.12-r0'
-              ],
-              'installedVersion': '1.2.11-r3',
-              'packageName':      'zlib',
-              'purl':             'pkg:apk/alpine/zlib@1.2.11-r3?arch=s390x&distro=3.14.1',
-              'references':       [
-                'http://seclists.org/fulldisclosure/2022/May/33',
-                'http://seclists.org/fulldisclosure/2022/May/35',
-                'http://seclists.org/fulldisclosure/2022/May/38',
-                'http://www.openwall.com/lists/oss-security/2022/03/25/2',
-                'http://www.openwall.com/lists/oss-security/2022/03/26/1',
-                'https://access.redhat.com/errata/RHSA-2022:8420',
-                'https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-25032.json',
-                'https://access.redhat.com/security/cve/CVE-2018-25032',
-                'https://bugzilla.redhat.com/2067945',
-                'https://cert-portal.siemens.com/productcert/pdf/ssa-333517.pdf',
-                'https://errata.almalinux.org/9/ALSA-2022-8420.html',
-                'https://github.com/advisories/GHSA-jc36-42cf-vqwj',
-                'https://github.com/madler/zlib/commit/5c44459c3b28a9bd3283aaceab7c615f8020c531',
-                'https://github.com/madler/zlib/compare/v1.2.11...v1.2.12',
-                'https://github.com/madler/zlib/issues/605',
-                'https://github.com/rubysec/ruby-advisory-db/blob/master/gems/nokogiri/CVE-2018-25032.yml',
-                'https://github.com/sparklemotion/nokogiri/releases/tag/v1.13.4',
-                'https://github.com/sparklemotion/nokogiri/security/advisories/GHSA-v6gp-9mmm-c6p5',
-                'https://groups.google.com/g/ruby-security-ann/c/vX7qSjsvWis/m/TJWN4oOKBwAJ',
-                'https://linux.oracle.com/cve/CVE-2018-25032.html',
-                'https://linux.oracle.com/errata/ELSA-2022-9565.html',
-                'https://lists.debian.org/debian-lts-announce/2022/04/msg00000.html',
-                'https://lists.debian.org/debian-lts-announce/2022/05/msg00008.html',
-                'https://lists.debian.org/debian-lts-announce/2022/09/msg00023.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DCZFIJBJTZ7CL5QXBFKTQ22Q26VINRUF/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DF62MVMH3QUGMBDCB3DY2ERQ6EBHTADB/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JZZPTWRYQULAOL3AW7RZJNVZ2UONXCV4/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NS2D2GFPFGOJUL4WQ3DUAY7HF4VWQ77F/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VOKNP2L734AEL47NRYGVZIKEFOUBQY5Y/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/XOKFMSNQ5D5WGMALBNBXU3GE442V74WU/',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/DCZFIJBJTZ7CL5QXBFKTQ22Q26VINRUF',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/DCZFIJBJTZ7CL5QXBFKTQ22Q26VINRUF/',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/DF62MVMH3QUGMBDCB3DY2ERQ6EBHTADB',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/DF62MVMH3QUGMBDCB3DY2ERQ6EBHTADB/',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/JZZPTWRYQULAOL3AW7RZJNVZ2UONXCV4',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/JZZPTWRYQULAOL3AW7RZJNVZ2UONXCV4/',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/NS2D2GFPFGOJUL4WQ3DUAY7HF4VWQ77F',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/NS2D2GFPFGOJUL4WQ3DUAY7HF4VWQ77F/',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/VOKNP2L734AEL47NRYGVZIKEFOUBQY5Y',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/VOKNP2L734AEL47NRYGVZIKEFOUBQY5Y/',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/XOKFMSNQ5D5WGMALBNBXU3GE442V74WU',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/XOKFMSNQ5D5WGMALBNBXU3GE442V74WU/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2018-25032',
-                'https://security.gentoo.org/glsa/202210-42',
-                'https://security.netapp.com/advisory/ntap-20220526-0009',
-                'https://security.netapp.com/advisory/ntap-20220526-0009/',
-                'https://security.netapp.com/advisory/ntap-20220729-0004',
-                'https://security.netapp.com/advisory/ntap-20220729-0004/',
-                'https://support.apple.com/kb/HT213255',
-                'https://support.apple.com/kb/HT213256',
-                'https://support.apple.com/kb/HT213257',
-                'https://ubuntu.com/security/notices/USN-5355-1',
-                'https://ubuntu.com/security/notices/USN-5355-2',
-                'https://ubuntu.com/security/notices/USN-5359-1',
-                'https://ubuntu.com/security/notices/USN-5359-2',
-                'https://ubuntu.com/security/notices/USN-5739-1',
-                'https://ubuntu.com/security/notices/USN-6736-1',
-                'https://ubuntu.com/security/notices/USN-6736-2',
-                'https://www.cve.org/CVERecord?id=CVE-2018-25032',
-                'https://www.debian.org/security/2022/dsa-5111',
-                'https://www.openwall.com/lists/oss-security/2022/03/24/1',
-                'https://www.openwall.com/lists/oss-security/2022/03/28/1',
-                'https://www.openwall.com/lists/oss-security/2022/03/28/3',
-                'https://www.oracle.com/security-alerts/cpujul2022.html'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'zlib: A flaw found in zlib when compressing (not decompressing) certain inputs'
-            }
-          ]
-        }
-      ],
-      'summary': {
-        'critical':   3,
-        'high':       34,
-        'low':        0,
-        'medium':     10,
-        'suppressed': 0,
-        'unknown':    0
-      }
-    }
-  },
-  {
-    'id':    'default/4ceb377e6eacb4d695c03a6cad5bfa913841630bbb5226fa9e8bab19bfa1b560',
-    'type':  'storage.sbomscanner.kubewarden.io.vulnerabilityreport',
-    'links': {
-      'patch':  'https://localhost:8005/v1/storage.sbomscanner.kubewarden.io.vulnerabilityreports/default/4ceb377e6eacb4d695c03a6cad5bfa913841630bbb5226fa9e8bab19bfa1b560',
-      'remove': 'https://localhost:8005/v1/storage.sbomscanner.kubewarden.io.vulnerabilityreports/default/4ceb377e6eacb4d695c03a6cad5bfa913841630bbb5226fa9e8bab19bfa1b560',
-      'self':   'https://localhost:8005/v1/storage.sbomscanner.kubewarden.io.vulnerabilityreports/default/4ceb377e6eacb4d695c03a6cad5bfa913841630bbb5226fa9e8bab19bfa1b560',
-      'update': 'https://localhost:8005/v1/storage.sbomscanner.kubewarden.io.vulnerabilityreports/default/4ceb377e6eacb4d695c03a6cad5bfa913841630bbb5226fa9e8bab19bfa1b560',
-      'view':   'https://localhost:8005/apis/storage.sbomscanner.kubewarden.io/v1alpha1/namespaces/default/vulnerabilityreports/4ceb377e6eacb4d695c03a6cad5bfa913841630bbb5226fa9e8bab19bfa1b560'
-    },
-    'apiVersion':    'storage.sbomscanner.kubewarden.io/v1alpha1',
-    'imageMetadata': {
-      'digest':      'sha256:03bef9cd1ac0ceb3fdfc228c19c3237e633fc3086e9e51f8347ae582ccf73bb1',
-      'platform':    'linux/amd64',
-      'registry':    'demo-02',
-      'registryURI': 'ghcr.io',
-      'repository':  'linuxcontainers/alpine',
-      'tag':         '3.16.2'
-    },
-    'kind':     'VulnerabilityReport',
-    'metadata': {
-      'creationTimestamp': '2026-01-09T22:46:18Z',
-      'fields':            [
-        '4ceb377e6eacb4d695c03a6cad5bfa913841630bbb5226fa9e8bab19bfa1b560',
-        'ghcr.io/linuxcontainers/alpine:3.16.2',
-        'linux/amd64',
-        '24 (0 suppressed)'
-      ],
-      'labels': {
-        'app.kubernetes.io/managed-by':          'sbomscanner',
-        'app.kubernetes.io/part-of':             'sbomscanner',
-        'sbomscanner.kubewarden.io/scanjob-uid': '42184d01-4b15-466f-98aa-e802d1b6b6b8'
-      },
-      'name':            '4ceb377e6eacb4d695c03a6cad5bfa913841630bbb5226fa9e8bab19bfa1b560',
-      'namespace':       'default',
-      'ownerReferences': [
-        {
-          'apiVersion':         'storage.sbomscanner.kubewarden.io/v1alpha1',
-          'blockOwnerDeletion': true,
-          'controller':         true,
-          'kind':               'SBOM',
-          'name':               '4ceb377e6eacb4d695c03a6cad5bfa913841630bbb5226fa9e8bab19bfa1b560',
-          'uid':                'be1a81a7-272d-4743-a5e1-d98f6303b503'
-        }
-      ],
-      'relationships': [
-        {
-          'fromId':   'default/4ceb377e6eacb4d695c03a6cad5bfa913841630bbb5226fa9e8bab19bfa1b560',
-          'fromType': 'storage.sbomscanner.kubewarden.io.sbom',
-          'rel':      'owner',
-          'state':    'active',
-          'message':  'Resource is current'
-        }
-      ],
-      'resourceVersion': '3',
-      'state':           {
-        'error':         false,
-        'message':       'Resource is current',
-        'name':          'active',
-        'transitioning': false
-      },
-      'uid': 'fb2ccd4c-7974-408b-8357-5f86521b7049'
-    },
-    'report': {
-      'results': [
-        {
-          'class':           'os-pkgs',
-          'target':          '/var/run/worker/trivy.sbom.2036553193.json (alpine 3.16.2)',
-          'type':            'alpine',
-          'vulnerabilities': [
-            {
-              'cve':  'CVE-2023-42366',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.5',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.1',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-787'
-              ],
-              'description':   'A heap-buffer-overflow was discovered in BusyBox v.1.36.1 in the next_token function at awk.c:1159.',
-              'diffID':        'sha256:994393dc58e7931862558d06e46aa2bb17487044f670f310dffe1d24e4d1eec7',
-              'fixedVersions': [
-                '1.35.0-r18'
-              ],
-              'installedVersion': '1.35.0-r17',
-              'packageName':      'busybox',
-              'purl':             'pkg:apk/alpine/busybox@1.35.0-r17?arch=x86_64&distro=3.16.2',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2023-42366',
-                'https://bugs.busybox.net/show_bug.cgi?id=15874',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-42366',
-                'https://security.netapp.com/advisory/ntap-20241206-0007/',
-                'https://www.cve.org/CVERecord?id=CVE-2023-42366'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'busybox: A heap-buffer-overflow'
-            },
-            {
-              'cve':  'CVE-2022-4450',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'nvd': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-415'
-              ],
-              'description':   'The function PEM_read_bio_ex() reads a PEM file from a BIO and parses and\ndecodes the "name" (e.g. "CERTIFICATE"), any header data and the payload data.\nIf the function succeeds then the "name_out", "header" and "data" arguments are\npopulated with pointers to buffers containing the relevant decoded data. The\ncaller is responsible for freeing those buffers. It is possible to construct a\nPEM file that results in 0 bytes of payload data. In this case PEM_read_bio_ex()\nwill return a failure code but will populate the header argument with a pointer\nto a buffer that has already been freed. If the caller also frees this buffer\nthen a double free will occur. This will most likely lead to a crash. This\ncould be exploited by an attacker who has the ability to supply malicious PEM\nfiles for parsing to achieve a denial of service attack.\n\nThe functions PEM_read_bio() and PEM_read() are simple wrappers around\nPEM_read_bio_ex() and therefore these functions are also directly affected.\n\nThese functions are also called indirectly by a number of other OpenSSL\nfunctions including PEM_X509_INFO_read_bio_ex() and\nSSL_CTX_use_serverinfo_file() which are also vulnerable. Some OpenSSL internal\nuses of these functions are not vulnerable because the caller does not free the\nheader argument if PEM_read_bio_ex() returns a failure code. These locations\ninclude the PEM_read_bio_TYPE() functions as well as the decoders introduced in\nOpenSSL 3.0.\n\nThe OpenSSL asn1parse command line application is also impacted by this issue.',
-              'diffID':        'sha256:994393dc58e7931862558d06e46aa2bb17487044f670f310dffe1d24e4d1eec7',
-              'fixedVersions': [
-                '1.1.1t-r0'
-              ],
-              'installedVersion': '1.1.1q-r0',
-              'packageName':      'libcrypto1.1',
-              'purl':             'pkg:apk/alpine/libcrypto1.1@1.1.1q-r0?arch=x86_64&distro=3.16.2',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2023:2165',
-                'https://access.redhat.com/security/cve/CVE-2022-4450',
-                'https://bugzilla.redhat.com/1960321',
-                'https://bugzilla.redhat.com/2164440',
-                'https://bugzilla.redhat.com/2164487',
-                'https://bugzilla.redhat.com/2164492',
-                'https://bugzilla.redhat.com/2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144000',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144003',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144006',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144008',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144010',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144012',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144015',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144017',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144019',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2145170',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2158412',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164440',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164487',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164488',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164492',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164497',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164499',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164500',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4203',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4304',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4450',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0215',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0216',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0217',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0286',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0401',
-                'https://errata.almalinux.org/9/ALSA-2023-2165.html',
-                'https://errata.rockylinux.org/RLSA-2023:0946',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=63bcf189be73a9cc1264059bed6f57974be74a83',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=bbcf509bd046b34cca19c766bbddc31683d0858b',
-                'https://linux.oracle.com/cve/CVE-2022-4450.html',
-                'https://linux.oracle.com/errata/ELSA-2023-32791.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2022-4450',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0003',
-                'https://rustsec.org/advisories/RUSTSEC-2023-0010.html',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://ubuntu.com/security/notices/USN-5844-1',
-                'https://ubuntu.com/security/notices/USN-6564-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2022-4450',
-                'https://www.openssl.org/news/secadv/20230207.txt'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: double free after calling PEM_read_bio_ex'
-            },
-            {
-              'cve':  'CVE-2023-0215',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'nvd': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   'The public API function BIO_new_NDEF is a helper function used for streaming\nASN.1 data via a BIO. It is primarily used internally to OpenSSL to support the\nSMIME, CMS and PKCS7 streaming capabilities, but may also be called directly by\nend user applications.\n\nThe function receives a BIO from the caller, prepends a new BIO_f_asn1 filter\nBIO onto the front of it to form a BIO chain, and then returns the new head of\nthe BIO chain to the caller. Under certain conditions, for example if a CMS\nrecipient public key is invalid, the new filter BIO is freed and the function\nreturns a NULL result indicating a failure. However, in this case, the BIO chain\nis not properly cleaned up and the BIO passed by the caller still retains\ninternal pointers to the previously freed filter BIO. If the caller then goes on\nto call BIO_pop() on the BIO then a use-after-free will occur. This will most\nlikely result in a crash.\n\n\n\nThis scenario occurs directly in the internal function B64_write_ASN1() which\nmay cause BIO_new_NDEF() to be called and will subsequently call BIO_pop() on\nthe BIO. This internal function is in turn called by the public API functions\nPEM_write_bio_ASN1_stream, PEM_write_bio_CMS_stream, PEM_write_bio_PKCS7_stream,\nSMIME_write_ASN1, SMIME_write_CMS and SMIME_write_PKCS7.\n\nOther public API functions that may be impacted by this include\ni2d_ASN1_bio_stream, BIO_new_CMS, BIO_new_PKCS7, i2d_CMS_bio_stream and\ni2d_PKCS7_bio_stream.\n\nThe OpenSSL cms and smime command line applications are similarly affected.',
-              'diffID':        'sha256:994393dc58e7931862558d06e46aa2bb17487044f670f310dffe1d24e4d1eec7',
-              'fixedVersions': [
-                '1.1.1t-r0'
-              ],
-              'installedVersion': '1.1.1q-r0',
-              'packageName':      'libcrypto1.1',
-              'purl':             'pkg:apk/alpine/libcrypto1.1@1.1.1q-r0?arch=x86_64&distro=3.16.2',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2023:2165',
-                'https://access.redhat.com/security/cve/CVE-2023-0215',
-                'https://bugzilla.redhat.com/1960321',
-                'https://bugzilla.redhat.com/2164440',
-                'https://bugzilla.redhat.com/2164487',
-                'https://bugzilla.redhat.com/2164492',
-                'https://bugzilla.redhat.com/2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144000',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144003',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144006',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144008',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144010',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144012',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144015',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144017',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144019',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2145170',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2158412',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164440',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164487',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164488',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164492',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164497',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164499',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164500',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4203',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4304',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4450',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0215',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0216',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0217',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0286',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0401',
-                'https://errata.almalinux.org/9/ALSA-2023-2165.html',
-                'https://errata.rockylinux.org/RLSA-2023:0946',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=8818064ce3c3c0f1b740a5aaba2a987e75bfbafd',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=9816136fe31d92ace4037d5da5257f763aeeb4eb',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=c3829dd8825c654652201e16f8a0a0c46ee3f344',
-                'https://linux.oracle.com/cve/CVE-2023-0215.html',
-                'https://linux.oracle.com/errata/ELSA-2023-32791.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-0215',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0003',
-                'https://rustsec.org/advisories/RUSTSEC-2023-0009.html',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://security.netapp.com/advisory/ntap-20230427-0007',
-                'https://security.netapp.com/advisory/ntap-20230427-0007/',
-                'https://security.netapp.com/advisory/ntap-20230427-0009',
-                'https://security.netapp.com/advisory/ntap-20230427-0009/',
-                'https://security.netapp.com/advisory/ntap-20240621-0006',
-                'https://security.netapp.com/advisory/ntap-20240621-0006/',
-                'https://ubuntu.com/security/notices/USN-5844-1',
-                'https://ubuntu.com/security/notices/USN-5845-1',
-                'https://ubuntu.com/security/notices/USN-5845-2',
-                'https://ubuntu.com/security/notices/USN-6564-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-0215',
-                'https://www.openssl.org/news/secadv/20230207.txt'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: use-after-free following BIO_new_NDEF'
-            },
-            {
-              'cve':  'CVE-2023-0286',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '7.4',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H'
-                },
-                'nvd': {
-                  'v3score':  '7.4',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.4',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-843'
-              ],
-              'description':   'There is a type confusion vulnerability relating to X.400 address processing\ninside an X.509 GeneralName. X.400 addresses were parsed as an ASN1_STRING but\nthe public structure definition for GENERAL_NAME incorrectly specified the type\nof the x400Address field as ASN1_TYPE. This field is subsequently interpreted by\nthe OpenSSL function GENERAL_NAME_cmp as an ASN1_TYPE rather than an\nASN1_STRING.\n\nWhen CRL checking is enabled (i.e. the application sets the\nX509_V_FLAG_CRL_CHECK flag), this vulnerability may allow an attacker to pass\narbitrary pointers to a memcmp call, enabling them to read memory contents or\nenact a denial of service. In most cases, the attack requires the attacker to\nprovide both the certificate chain and CRL, neither of which need to have a\nvalid signature. If the attacker only controls one of these inputs, the other\ninput must already contain an X.400 address as a CRL distribution point, which\nis uncommon. As such, this vulnerability is most likely to only affect\napplications which have implemented their own functionality for retrieving CRLs\nover a network.',
-              'diffID':        'sha256:994393dc58e7931862558d06e46aa2bb17487044f670f310dffe1d24e4d1eec7',
-              'fixedVersions': [
-                '1.1.1t-r0'
-              ],
-              'installedVersion': '1.1.1q-r0',
-              'packageName':      'libcrypto1.1',
-              'purl':             'pkg:apk/alpine/libcrypto1.1@1.1.1q-r0?arch=x86_64&distro=3.16.2',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2025:7937',
-                'https://access.redhat.com/security/cve/CVE-2023-0286',
-                'https://access.redhat.com/security/cve/cve-2023-0286',
-                'https://bugzilla.redhat.com/2164440',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144000',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144003',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144006',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144008',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144010',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144012',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144015',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144017',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144019',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2145170',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2158412',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164440',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164487',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164488',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164492',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164497',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164499',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164500',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4203',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4304',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4450',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0215',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0216',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0217',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0286',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0401',
-                'https://errata.almalinux.org/9/ALSA-2025-7937.html',
-                'https://errata.rockylinux.org/RLSA-2023:0946',
-                'https://ftp.openbsd.org/pub/OpenBSD/LibreSSL/libressl-3.6.2-relnotes.txt',
-                'https://ftp.openbsd.org/pub/OpenBSD/patches/7.2/common/018_x509.patch.sig',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=2c6c9d439b484e1ba9830d8454a34fa4f80fdfe9',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=2f7530077e0ef79d98718138716bc51ca0cad658',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=fd2af07dc083a350c959147097003a14a5e8ac4d',
-                'https://github.com/pyca/cryptography',
-                'https://github.com/pyca/cryptography/security/advisories/GHSA-x4qr-2fvf-3mr5',
-                'https://linux.oracle.com/cve/CVE-2023-0286.html',
-                'https://linux.oracle.com/errata/ELSA-2025-7937.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-0286',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0003',
-                'https://rustsec.org/advisories/RUSTSEC-2023-0006.html',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://ubuntu.com/security/notices/USN-5844-1',
-                'https://ubuntu.com/security/notices/USN-5845-1',
-                'https://ubuntu.com/security/notices/USN-5845-2',
-                'https://ubuntu.com/security/notices/USN-6564-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-0286',
-                'https://www.openssl.org/news/secadv/20230207.txt'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: X.400 address type confusion in X.509 GeneralName'
-            },
-            {
-              'cve':  'CVE-2023-0464',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-295'
-              ],
-              'description':   "A security vulnerability has been identified in all supported versions\n\nof OpenSSL related to the verification of X.509 certificate chains\nthat include policy constraints.  Attackers may be able to exploit this\nvulnerability by creating a malicious certificate chain that triggers\nexponential use of computational resources, leading to a denial-of-service\n(DoS) attack on affected systems.\n\nPolicy processing is disabled by default but can be enabled by passing\nthe `-policy' argument to the command line utilities or by calling the\n`X509_VERIFY_PARAM_set1_policies()' function.",
-              'diffID':        'sha256:994393dc58e7931862558d06e46aa2bb17487044f670f310dffe1d24e4d1eec7',
-              'fixedVersions': [
-                '1.1.1t-r1'
-              ],
-              'installedVersion': '1.1.1q-r0',
-              'packageName':      'libcrypto1.1',
-              'purl':             'pkg:apk/alpine/libcrypto1.1@1.1.1q-r0?arch=x86_64&distro=3.16.2',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2023:3722',
-                'https://access.redhat.com/security/cve/CVE-2023-0464',
-                'https://bugzilla.redhat.com/2181082',
-                'https://bugzilla.redhat.com/2182561',
-                'https://bugzilla.redhat.com/2182565',
-                'https://bugzilla.redhat.com/2188461',
-                'https://bugzilla.redhat.com/2207947',
-                'https://errata.almalinux.org/9/ALSA-2023-3722.html',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=2017771e2db3e2b96f89bbe8766c3209f6a99545',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=2dcd4f1e3115f38cefa43e3efbe9b801c27e642e',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=879f7080d7e141f415c79eaa3a8ac4a3dad0348b',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=959c59c7a0164117e7f8366466a32bb1f8d77ff1',
-                'https://linux.oracle.com/cve/CVE-2023-0464.html',
-                'https://linux.oracle.com/errata/ELSA-2023-3722.html',
-                'https://lists.debian.org/debian-lts-announce/2023/06/msg00011.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-0464',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://security.netapp.com/advisory/ntap-20230406-0006/',
-                'https://security.netapp.com/advisory/ntap-20240621-0006/',
-                'https://ubuntu.com/security/notices/USN-6039-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.couchbase.com/alerts/',
-                'https://www.cve.org/CVERecord?id=CVE-2023-0464',
-                'https://www.debian.org/security/2023/dsa-5417',
-                'https://www.openssl.org/news/secadv/20230322.txt'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: Denial of service by excessive resource usage in verifying X509 policy constraints'
-            },
-            {
-              'cve':  'CVE-2022-4304',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N'
-                },
-                'nvd': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N'
-                },
-                'redhat': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-203'
-              ],
-              'description':   'A timing based side channel exists in the OpenSSL RSA Decryption implementation\nwhich could be sufficient to recover a plaintext across a network in a\nBleichenbacher style attack. To achieve a successful decryption an attacker\nwould have to be able to send a very large number of trial messages for\ndecryption. The vulnerability affects all RSA padding modes: PKCS#1 v1.5,\nRSA-OEAP and RSASVE.\n\nFor example, in a TLS connection, RSA is commonly used by a client to send an\nencrypted pre-master secret to the server. An attacker that had observed a\ngenuine connection between a client and a server could use this flaw to send\ntrial messages to the server and record the time taken to process them. After a\nsufficiently large number of messages the attacker could recover the pre-master\nsecret used for the original connection and thus be able to decrypt the\napplication data sent over that connection.',
-              'diffID':        'sha256:994393dc58e7931862558d06e46aa2bb17487044f670f310dffe1d24e4d1eec7',
-              'fixedVersions': [
-                '1.1.1t-r0'
-              ],
-              'installedVersion': '1.1.1q-r0',
-              'packageName':      'libcrypto1.1',
-              'purl':             'pkg:apk/alpine/libcrypto1.1@1.1.1q-r0?arch=x86_64&distro=3.16.2',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2023:2165',
-                'https://access.redhat.com/security/cve/CVE-2022-4304',
-                'https://bugzilla.redhat.com/1960321',
-                'https://bugzilla.redhat.com/2164440',
-                'https://bugzilla.redhat.com/2164487',
-                'https://bugzilla.redhat.com/2164492',
-                'https://bugzilla.redhat.com/2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144000',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144003',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144006',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144008',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144010',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144012',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144015',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144017',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144019',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2145170',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2158412',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164440',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164487',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164488',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164492',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164497',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164499',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164500',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4203',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4304',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4450',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0215',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0216',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0217',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0286',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0401',
-                'https://errata.almalinux.org/9/ALSA-2023-2165.html',
-                'https://errata.rockylinux.org/RLSA-2023:0946',
-                'https://linux.oracle.com/cve/CVE-2022-4304.html',
-                'https://linux.oracle.com/errata/ELSA-2023-32791.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2022-4304',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0003',
-                'https://rustsec.org/advisories/RUSTSEC-2023-0007.html',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://ubuntu.com/security/notices/USN-5844-1',
-                'https://ubuntu.com/security/notices/USN-6564-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2022-4304',
-                'https://www.openssl.org/news/secadv/20230207.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: timing attack in RSA Decryption implementation'
-            },
-            {
-              'cve':  'CVE-2023-0465',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N'
-                },
-                'redhat': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-295'
-              ],
-              'description':   "Applications that use a non-default option when verifying certificates may be\nvulnerable to an attack from a malicious CA to circumvent certain checks.\n\nInvalid certificate policies in leaf certificates are silently ignored by\nOpenSSL and other certificate policy checks are skipped for that certificate.\nA malicious CA could use this to deliberately assert invalid certificate policies\nin order to circumvent policy checking on the certificate altogether.\n\nPolicy processing is disabled by default but can be enabled by passing\nthe `-policy' argument to the command line utilities or by calling the\n`X509_VERIFY_PARAM_set1_policies()' function.",
-              'diffID':        'sha256:994393dc58e7931862558d06e46aa2bb17487044f670f310dffe1d24e4d1eec7',
-              'fixedVersions': [
-                '1.1.1t-r2'
-              ],
-              'installedVersion': '1.1.1q-r0',
-              'packageName':      'libcrypto1.1',
-              'purl':             'pkg:apk/alpine/libcrypto1.1@1.1.1q-r0?arch=x86_64&distro=3.16.2',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2023:3722',
-                'https://access.redhat.com/security/cve/CVE-2023-0465',
-                'https://bugzilla.redhat.com/2181082',
-                'https://bugzilla.redhat.com/2182561',
-                'https://bugzilla.redhat.com/2182565',
-                'https://bugzilla.redhat.com/2188461',
-                'https://bugzilla.redhat.com/2207947',
-                'https://errata.almalinux.org/9/ALSA-2023-3722.html',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=10325176f3d3e98c6e2b3bf5ab1e3b334de6947a',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=1dd43e0709fece299b15208f36cc7c76209ba0bb',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=b013765abfa80036dc779dd0e50602c57bb3bf95',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=facfb1ab745646e97a1920977ae4a9965ea61d5c',
-                'https://linux.oracle.com/cve/CVE-2023-0465.html',
-                'https://linux.oracle.com/errata/ELSA-2023-3722.html',
-                'https://lists.debian.org/debian-lts-announce/2023/06/msg00011.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-0465',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://security.netapp.com/advisory/ntap-20230414-0001/',
-                'https://ubuntu.com/security/notices/USN-6039-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-0465',
-                'https://www.debian.org/security/2023/dsa-5417',
-                'https://www.openssl.org/news/secadv/20230328.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: Invalid certificate policies in leaf certificates are silently ignored'
-            },
-            {
-              'cve':  'CVE-2023-2650',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '6.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-770'
-              ],
-              'description':   "Issue summary: Processing some specially crafted ASN.1 object identifiers or\ndata containing them may be very slow.\n\nImpact summary: Applications that use OBJ_obj2txt() directly, or use any of\nthe OpenSSL subsystems OCSP, PKCS7/SMIME, CMS, CMP/CRMF or TS with no message\nsize limit may experience notable to very long delays when processing those\nmessages, which may lead to a Denial of Service.\n\nAn OBJECT IDENTIFIER is composed of a series of numbers - sub-identifiers -\nmost of which have no size limit.  OBJ_obj2txt() may be used to translate\nan ASN.1 OBJECT IDENTIFIER given in DER encoding form (using the OpenSSL\ntype ASN1_OBJECT) to its canonical numeric text form, which are the\nsub-identifiers of the OBJECT IDENTIFIER in decimal form, separated by\nperiods.\n\nWhen one of the sub-identifiers in the OBJECT IDENTIFIER is very large\n(these are sizes that are seen as absurdly large, taking up tens or hundreds\nof KiBs), the translation to a decimal number in text may take a very long\ntime.  The time complexity is O(n^2) with 'n' being the size of the\nsub-identifiers in bytes (*).\n\nWith OpenSSL 3.0, support to fetch cryptographic algorithms using names /\nidentifiers in string form was introduced.  This includes using OBJECT\nIDENTIFIERs in canonical numeric text form as identifiers for fetching\nalgorithms.\n\nSuch OBJECT IDENTIFIERs may be received through the ASN.1 structure\nAlgorithmIdentifier, which is commonly used in multiple protocols to specify\nwhat cryptographic algorithm should be used to sign or verify, encrypt or\ndecrypt, or digest passed data.\n\nApplications that call OBJ_obj2txt() directly with untrusted data are\naffected, with any version of OpenSSL.  If the use is for the mere purpose\nof display, the severity is considered low.\n\nIn OpenSSL 3.0 and newer, this affects the subsystems OCSP, PKCS7/SMIME,\nCMS, CMP/CRMF or TS.  It also impacts anything that processes X.509\ncertificates, including simple things like verifying its signature.\n\nThe impact on TLS is relatively low, because all versions of OpenSSL have a\n100KiB limit on the peer's certificate chain.  Additionally, this only\nimpacts clients, or servers that have explicitly enabled client\nauthentication.\n\nIn OpenSSL 1.1.1 and 1.0.2, this only affects displaying diverse objects,\nsuch as X.509 certificates.  This is assumed to not happen in such a way\nthat it would cause a Denial of Service, so these versions are considered\nnot affected by this issue in such a way that it would be cause for concern,\nand the severity is therefore considered low.",
-              'diffID':        'sha256:994393dc58e7931862558d06e46aa2bb17487044f670f310dffe1d24e4d1eec7',
-              'fixedVersions': [
-                '1.1.1u-r0'
-              ],
-              'installedVersion': '1.1.1q-r0',
-              'packageName':      'libcrypto1.1',
-              'purl':             'pkg:apk/alpine/libcrypto1.1@1.1.1q-r0?arch=x86_64&distro=3.16.2',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2023/05/30/1',
-                'https://access.redhat.com/errata/RHSA-2023:6330',
-                'https://access.redhat.com/security/cve/CVE-2023-2650',
-                'https://bugzilla.redhat.com/1858038',
-                'https://bugzilla.redhat.com/2207947',
-                'https://errata.almalinux.org/9/ALSA-2023-6330.html',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=423a2bc737a908ad0c77bda470b2b59dc879936b',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=853c5e56ee0b8650c73140816bb8b91d6163422c',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=9e209944b35cf82368071f160a744b6178f9b098',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=db779b0e10b047f2585615e0b8f2acdf21f8544a',
-                'https://linux.oracle.com/cve/CVE-2023-2650.html',
-                'https://linux.oracle.com/errata/ELSA-2023-6330.html',
-                'https://lists.debian.org/debian-lts-announce/2023/06/msg00011.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-2650',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0009',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://security.netapp.com/advisory/ntap-20230703-0001/',
-                'https://security.netapp.com/advisory/ntap-20231027-0009/',
-                'https://ubuntu.com/security/notices/USN-6119-1',
-                'https://ubuntu.com/security/notices/USN-6188-1',
-                'https://ubuntu.com/security/notices/USN-6672-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-2650',
-                'https://www.debian.org/security/2023/dsa-5417',
-                'https://www.openssl.org/news/secadv/20230530.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: Possible DoS translating ASN.1 object identifiers'
-            },
-            {
-              'cve':  'CVE-2023-3446',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L'
-                },
-                'redhat': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L'
-                }
-              },
-              'cwes': [
-                'CWE-606',
-                'CWE-1333'
-              ],
-              'description':   "Issue summary: Checking excessively long DH keys or parameters may be very slow.\n\nImpact summary: Applications that use the functions DH_check(), DH_check_ex()\nor EVP_PKEY_param_check() to check a DH key or DH parameters may experience long\ndelays. Where the key or parameters that are being checked have been obtained\nfrom an untrusted source this may lead to a Denial of Service.\n\nThe function DH_check() performs various checks on DH parameters. One of those\nchecks confirms that the modulus ('p' parameter) is not too large. Trying to use\na very large modulus is slow and OpenSSL will not normally use a modulus which\nis over 10,000 bits in length.\n\nHowever the DH_check() function checks numerous aspects of the key or parameters\nthat have been supplied. Some of those checks use the supplied modulus value\neven if it has already been found to be too large.\n\nAn application that calls DH_check() and supplies a key or parameters obtained\nfrom an untrusted source could be vulernable to a Denial of Service attack.\n\nThe function DH_check() is itself called by a number of other OpenSSL functions.\nAn application calling any of those other functions may similarly be affected.\nThe other functions affected by this are DH_check_ex() and\nEVP_PKEY_param_check().\n\nAlso vulnerable are the OpenSSL dhparam and pkeyparam command line applications\nwhen using the '-check' option.\n\nThe OpenSSL SSL/TLS implementation is not affected by this issue.\nThe OpenSSL 3.0 and 3.1 FIPS providers are not affected by this issue.",
-              'diffID':        'sha256:994393dc58e7931862558d06e46aa2bb17487044f670f310dffe1d24e4d1eec7',
-              'fixedVersions': [
-                '1.1.1u-r2'
-              ],
-              'installedVersion': '1.1.1q-r0',
-              'packageName':      'libcrypto1.1',
-              'purl':             'pkg:apk/alpine/libcrypto1.1@1.1.1q-r0?arch=x86_64&distro=3.16.2',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2023/07/19/4',
-                'http://www.openwall.com/lists/oss-security/2023/07/19/5',
-                'http://www.openwall.com/lists/oss-security/2023/07/19/6',
-                'http://www.openwall.com/lists/oss-security/2023/07/31/1',
-                'http://www.openwall.com/lists/oss-security/2024/05/16/1',
-                'https://access.redhat.com/errata/RHSA-2024:2447',
-                'https://access.redhat.com/security/cve/CVE-2023-3446',
-                'https://bugzilla.redhat.com/2223016',
-                'https://bugzilla.redhat.com/2224962',
-                'https://bugzilla.redhat.com/2227852',
-                'https://bugzilla.redhat.com/2248616',
-                'https://bugzilla.redhat.com/2257571',
-                'https://bugzilla.redhat.com/2258502',
-                'https://bugzilla.redhat.com/2259944',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2224962',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2257582',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2257583',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2258677',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2258688',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2258691',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2258694',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2258700',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-36763',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-36764',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3446',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45229',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45231',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45232',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45233',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45235',
-                'https://errata.almalinux.org/9/ALSA-2024-2447.html',
-                'https://errata.rockylinux.org/RLSA-2024:2264',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=1fa20cf2f506113c761777127a38bce5068740eb',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=8780a896543a654e757db1b9396383f9d8095528',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=9a0a4d3c1e7138915563c0df4fe6a3f9377b839c',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=fc9867c1e03c22ebf56943be205202e576aabf23',
-                'https://linux.oracle.com/cve/CVE-2023-3446.html',
-                'https://linux.oracle.com/errata/ELSA-2024-2447.html',
-                'https://lists.debian.org/debian-lts-announce/2023/08/msg00019.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-3446',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://security.netapp.com/advisory/ntap-20230803-0011/',
-                'https://ubuntu.com/security/notices/USN-6435-1',
-                'https://ubuntu.com/security/notices/USN-6435-2',
-                'https://ubuntu.com/security/notices/USN-6450-1',
-                'https://ubuntu.com/security/notices/USN-6709-1',
-                'https://ubuntu.com/security/notices/USN-7018-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-3446',
-                'https://www.openssl.org/news/secadv/20230719.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: Excessive time spent checking DH keys and parameters'
-            },
-            {
-              'cve':  'CVE-2023-3817',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L'
-                },
-                'redhat': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L'
-                }
-              },
-              'cwes': [
-                'CWE-606',
-                'CWE-834'
-              ],
-              'description':   'Issue summary: Checking excessively long DH keys or parameters may be very slow.\n\nImpact summary: Applications that use the functions DH_check(), DH_check_ex()\nor EVP_PKEY_param_check() to check a DH key or DH parameters may experience long\ndelays. Where the key or parameters that are being checked have been obtained\nfrom an untrusted source this may lead to a Denial of Service.\n\nThe function DH_check() performs various checks on DH parameters. After fixing\nCVE-2023-3446 it was discovered that a large q parameter value can also trigger\nan overly long computation during some of these checks. A correct q value,\nif present, cannot be larger than the modulus p parameter, thus it is\nunnecessary to perform these checks if q is larger than p.\n\nAn application that calls DH_check() and supplies a key or parameters obtained\nfrom an untrusted source could be vulnerable to a Denial of Service attack.\n\nThe function DH_check() is itself called by a number of other OpenSSL functions.\nAn application calling any of those other functions may similarly be affected.\nThe other functions affected by this are DH_check_ex() and\nEVP_PKEY_param_check().\n\nAlso vulnerable are the OpenSSL dhparam and pkeyparam command line applications\nwhen using the "-check" option.\n\nThe OpenSSL SSL/TLS implementation is not affected by this issue.\n\nThe OpenSSL 3.0 and 3.1 FIPS providers are not affected by this issue.',
-              'diffID':        'sha256:994393dc58e7931862558d06e46aa2bb17487044f670f310dffe1d24e4d1eec7',
-              'fixedVersions': [
-                '1.1.1v-r0'
-              ],
-              'installedVersion': '1.1.1q-r0',
-              'packageName':      'libcrypto1.1',
-              'purl':             'pkg:apk/alpine/libcrypto1.1@1.1.1q-r0?arch=x86_64&distro=3.16.2',
-              'references':       [
-                'http://seclists.org/fulldisclosure/2023/Jul/43',
-                'http://www.openwall.com/lists/oss-security/2023/07/31/1',
-                'http://www.openwall.com/lists/oss-security/2023/09/22/11',
-                'http://www.openwall.com/lists/oss-security/2023/09/22/9',
-                'http://www.openwall.com/lists/oss-security/2023/11/06/2',
-                'https://access.redhat.com/errata/RHSA-2024:2447',
-                'https://access.redhat.com/security/cve/CVE-2023-3817',
-                'https://bugzilla.redhat.com/2223016',
-                'https://bugzilla.redhat.com/2224962',
-                'https://bugzilla.redhat.com/2227852',
-                'https://bugzilla.redhat.com/2248616',
-                'https://bugzilla.redhat.com/2257571',
-                'https://bugzilla.redhat.com/2258502',
-                'https://bugzilla.redhat.com/2259944',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2224962',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2227852',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2248616',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2270358',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3446',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3817',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-5678',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-2408',
-                'https://errata.almalinux.org/9/ALSA-2024-2447.html',
-                'https://errata.rockylinux.org/RLSA-2023:7877',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=6a1eb62c29db6cb5eec707f9338aee00f44e26f5',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=869ad69aadd985c7b8ca6f4e5dd0eb274c9f3644',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=9002fd07327a91f35ba6c1307e71fa6fd4409b7f',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=91ddeba0f2269b017dc06c46c993a788974b1aa5',
-                'https://linux.oracle.com/cve/CVE-2023-3817.html',
-                'https://linux.oracle.com/errata/ELSA-2024-2447.html',
-                'https://lists.debian.org/debian-lts-announce/2023/08/msg00019.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-3817',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://security.netapp.com/advisory/ntap-20230818-0014/',
-                'https://security.netapp.com/advisory/ntap-20231027-0008/',
-                'https://security.netapp.com/advisory/ntap-20240621-0006/',
-                'https://ubuntu.com/security/notices/USN-6435-1',
-                'https://ubuntu.com/security/notices/USN-6435-2',
-                'https://ubuntu.com/security/notices/USN-6450-1',
-                'https://ubuntu.com/security/notices/USN-6709-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-3817',
-                'https://www.openssl.org/news/secadv/20230731.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'OpenSSL: Excessive time spent checking DH q parameter value'
-            },
-            {
-              'cve':  'CVE-2023-5678',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L'
-                },
-                'redhat': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L'
-                }
-              },
-              'cwes': [
-                'CWE-606',
-                'CWE-754'
-              ],
-              'description':   "Issue summary: Generating excessively long X9.42 DH keys or checking\nexcessively long X9.42 DH keys or parameters may be very slow.\n\nImpact summary: Applications that use the functions DH_generate_key() to\ngenerate an X9.42 DH key may experience long delays.  Likewise, applications\nthat use DH_check_pub_key(), DH_check_pub_key_ex() or EVP_PKEY_public_check()\nto check an X9.42 DH key or X9.42 DH parameters may experience long delays.\nWhere the key or parameters that are being checked have been obtained from\nan untrusted source this may lead to a Denial of Service.\n\nWhile DH_check() performs all the necessary checks (as of CVE-2023-3817),\nDH_check_pub_key() doesn't make any of these checks, and is therefore\nvulnerable for excessively large P and Q parameters.\n\nLikewise, while DH_generate_key() performs a check for an excessively large\nP, it doesn't check for an excessively large Q.\n\nAn application that calls DH_generate_key() or DH_check_pub_key() and\nsupplies a key or parameters obtained from an untrusted source could be\nvulnerable to a Denial of Service attack.\n\nDH_generate_key() and DH_check_pub_key() are also called by a number of\nother OpenSSL functions.  An application calling any of those other\nfunctions may similarly be affected.  The other functions affected by this\nare DH_check_pub_key_ex(), EVP_PKEY_public_check(), and EVP_PKEY_generate().\n\nAlso vulnerable are the OpenSSL pkey command line application when using the\n\"-pubcheck\" option, as well as the OpenSSL genpkey command line application.\n\nThe OpenSSL SSL/TLS implementation is not affected by this issue.\n\nThe OpenSSL 3.0 and 3.1 FIPS providers are not affected by this issue.",
-              'diffID':        'sha256:994393dc58e7931862558d06e46aa2bb17487044f670f310dffe1d24e4d1eec7',
-              'fixedVersions': [
-                '1.1.1w-r1'
-              ],
-              'installedVersion': '1.1.1q-r0',
-              'packageName':      'libcrypto1.1',
-              'purl':             'pkg:apk/alpine/libcrypto1.1@1.1.1q-r0?arch=x86_64&distro=3.16.2',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2024/03/11/1',
-                'https://access.redhat.com/errata/RHSA-2024:2447',
-                'https://access.redhat.com/security/cve/CVE-2023-5678',
-                'https://bugzilla.redhat.com/2223016',
-                'https://bugzilla.redhat.com/2224962',
-                'https://bugzilla.redhat.com/2227852',
-                'https://bugzilla.redhat.com/2248616',
-                'https://bugzilla.redhat.com/2257571',
-                'https://bugzilla.redhat.com/2258502',
-                'https://bugzilla.redhat.com/2259944',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2224962',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2227852',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2248616',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2270358',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3446',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3817',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-5678',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-2408',
-                'https://errata.almalinux.org/9/ALSA-2024-2447.html',
-                'https://errata.rockylinux.org/RLSA-2023:7877',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=34efaef6c103d636ab507a0cc34dca4d3aecc055',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=710fee740904b6290fef0dd5536fbcedbc38ff0c',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=db925ae2e65d0d925adef429afc37f75bd1c2017',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=ddeb4b6c6d527e54ce9a99cba785c0f7776e54b6',
-                'https://linux.oracle.com/cve/CVE-2023-5678.html',
-                'https://linux.oracle.com/errata/ELSA-2024-2447.html',
-                'https://lists.debian.org/debian-lts-announce/2024/10/msg00033.html',
-                'https://lists.debian.org/debian-lts-announce/2024/11/msg00000.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-5678',
-                'https://security.netapp.com/advisory/ntap-20231130-0010/',
-                'https://ubuntu.com/security/notices/USN-6622-1',
-                'https://ubuntu.com/security/notices/USN-6632-1',
-                'https://ubuntu.com/security/notices/USN-6709-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-5678',
-                'https://www.openssl.org/news/secadv/20231106.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: Generating excessively long X9.42 DH keys or checking excessively long X9.42 DH keys or parameters may be very slow'
-            },
-            {
-              'cve':  'CVE-2022-4450',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'nvd': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-415'
-              ],
-              'description':   'The function PEM_read_bio_ex() reads a PEM file from a BIO and parses and\ndecodes the "name" (e.g. "CERTIFICATE"), any header data and the payload data.\nIf the function succeeds then the "name_out", "header" and "data" arguments are\npopulated with pointers to buffers containing the relevant decoded data. The\ncaller is responsible for freeing those buffers. It is possible to construct a\nPEM file that results in 0 bytes of payload data. In this case PEM_read_bio_ex()\nwill return a failure code but will populate the header argument with a pointer\nto a buffer that has already been freed. If the caller also frees this buffer\nthen a double free will occur. This will most likely lead to a crash. This\ncould be exploited by an attacker who has the ability to supply malicious PEM\nfiles for parsing to achieve a denial of service attack.\n\nThe functions PEM_read_bio() and PEM_read() are simple wrappers around\nPEM_read_bio_ex() and therefore these functions are also directly affected.\n\nThese functions are also called indirectly by a number of other OpenSSL\nfunctions including PEM_X509_INFO_read_bio_ex() and\nSSL_CTX_use_serverinfo_file() which are also vulnerable. Some OpenSSL internal\nuses of these functions are not vulnerable because the caller does not free the\nheader argument if PEM_read_bio_ex() returns a failure code. These locations\ninclude the PEM_read_bio_TYPE() functions as well as the decoders introduced in\nOpenSSL 3.0.\n\nThe OpenSSL asn1parse command line application is also impacted by this issue.',
-              'diffID':        'sha256:994393dc58e7931862558d06e46aa2bb17487044f670f310dffe1d24e4d1eec7',
-              'fixedVersions': [
-                '1.1.1t-r0'
-              ],
-              'installedVersion': '1.1.1q-r0',
-              'packageName':      'libssl1.1',
-              'purl':             'pkg:apk/alpine/libssl1.1@1.1.1q-r0?arch=x86_64&distro=3.16.2',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2023:2165',
-                'https://access.redhat.com/security/cve/CVE-2022-4450',
-                'https://bugzilla.redhat.com/1960321',
-                'https://bugzilla.redhat.com/2164440',
-                'https://bugzilla.redhat.com/2164487',
-                'https://bugzilla.redhat.com/2164492',
-                'https://bugzilla.redhat.com/2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144000',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144003',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144006',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144008',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144010',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144012',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144015',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144017',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144019',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2145170',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2158412',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164440',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164487',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164488',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164492',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164497',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164499',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164500',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4203',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4304',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4450',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0215',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0216',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0217',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0286',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0401',
-                'https://errata.almalinux.org/9/ALSA-2023-2165.html',
-                'https://errata.rockylinux.org/RLSA-2023:0946',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=63bcf189be73a9cc1264059bed6f57974be74a83',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=bbcf509bd046b34cca19c766bbddc31683d0858b',
-                'https://linux.oracle.com/cve/CVE-2022-4450.html',
-                'https://linux.oracle.com/errata/ELSA-2023-32791.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2022-4450',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0003',
-                'https://rustsec.org/advisories/RUSTSEC-2023-0010.html',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://ubuntu.com/security/notices/USN-5844-1',
-                'https://ubuntu.com/security/notices/USN-6564-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2022-4450',
-                'https://www.openssl.org/news/secadv/20230207.txt'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: double free after calling PEM_read_bio_ex'
-            },
-            {
-              'cve':  'CVE-2023-0215',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'nvd': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   'The public API function BIO_new_NDEF is a helper function used for streaming\nASN.1 data via a BIO. It is primarily used internally to OpenSSL to support the\nSMIME, CMS and PKCS7 streaming capabilities, but may also be called directly by\nend user applications.\n\nThe function receives a BIO from the caller, prepends a new BIO_f_asn1 filter\nBIO onto the front of it to form a BIO chain, and then returns the new head of\nthe BIO chain to the caller. Under certain conditions, for example if a CMS\nrecipient public key is invalid, the new filter BIO is freed and the function\nreturns a NULL result indicating a failure. However, in this case, the BIO chain\nis not properly cleaned up and the BIO passed by the caller still retains\ninternal pointers to the previously freed filter BIO. If the caller then goes on\nto call BIO_pop() on the BIO then a use-after-free will occur. This will most\nlikely result in a crash.\n\n\n\nThis scenario occurs directly in the internal function B64_write_ASN1() which\nmay cause BIO_new_NDEF() to be called and will subsequently call BIO_pop() on\nthe BIO. This internal function is in turn called by the public API functions\nPEM_write_bio_ASN1_stream, PEM_write_bio_CMS_stream, PEM_write_bio_PKCS7_stream,\nSMIME_write_ASN1, SMIME_write_CMS and SMIME_write_PKCS7.\n\nOther public API functions that may be impacted by this include\ni2d_ASN1_bio_stream, BIO_new_CMS, BIO_new_PKCS7, i2d_CMS_bio_stream and\ni2d_PKCS7_bio_stream.\n\nThe OpenSSL cms and smime command line applications are similarly affected.',
-              'diffID':        'sha256:994393dc58e7931862558d06e46aa2bb17487044f670f310dffe1d24e4d1eec7',
-              'fixedVersions': [
-                '1.1.1t-r0'
-              ],
-              'installedVersion': '1.1.1q-r0',
-              'packageName':      'libssl1.1',
-              'purl':             'pkg:apk/alpine/libssl1.1@1.1.1q-r0?arch=x86_64&distro=3.16.2',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2023:2165',
-                'https://access.redhat.com/security/cve/CVE-2023-0215',
-                'https://bugzilla.redhat.com/1960321',
-                'https://bugzilla.redhat.com/2164440',
-                'https://bugzilla.redhat.com/2164487',
-                'https://bugzilla.redhat.com/2164492',
-                'https://bugzilla.redhat.com/2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144000',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144003',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144006',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144008',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144010',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144012',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144015',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144017',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144019',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2145170',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2158412',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164440',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164487',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164488',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164492',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164497',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164499',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164500',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4203',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4304',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4450',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0215',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0216',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0217',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0286',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0401',
-                'https://errata.almalinux.org/9/ALSA-2023-2165.html',
-                'https://errata.rockylinux.org/RLSA-2023:0946',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=8818064ce3c3c0f1b740a5aaba2a987e75bfbafd',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=9816136fe31d92ace4037d5da5257f763aeeb4eb',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=c3829dd8825c654652201e16f8a0a0c46ee3f344',
-                'https://linux.oracle.com/cve/CVE-2023-0215.html',
-                'https://linux.oracle.com/errata/ELSA-2023-32791.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-0215',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0003',
-                'https://rustsec.org/advisories/RUSTSEC-2023-0009.html',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://security.netapp.com/advisory/ntap-20230427-0007',
-                'https://security.netapp.com/advisory/ntap-20230427-0007/',
-                'https://security.netapp.com/advisory/ntap-20230427-0009',
-                'https://security.netapp.com/advisory/ntap-20230427-0009/',
-                'https://security.netapp.com/advisory/ntap-20240621-0006',
-                'https://security.netapp.com/advisory/ntap-20240621-0006/',
-                'https://ubuntu.com/security/notices/USN-5844-1',
-                'https://ubuntu.com/security/notices/USN-5845-1',
-                'https://ubuntu.com/security/notices/USN-5845-2',
-                'https://ubuntu.com/security/notices/USN-6564-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-0215',
-                'https://www.openssl.org/news/secadv/20230207.txt'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: use-after-free following BIO_new_NDEF'
-            },
-            {
-              'cve':  'CVE-2023-0286',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '7.4',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H'
-                },
-                'nvd': {
-                  'v3score':  '7.4',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.4',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-843'
-              ],
-              'description':   'There is a type confusion vulnerability relating to X.400 address processing\ninside an X.509 GeneralName. X.400 addresses were parsed as an ASN1_STRING but\nthe public structure definition for GENERAL_NAME incorrectly specified the type\nof the x400Address field as ASN1_TYPE. This field is subsequently interpreted by\nthe OpenSSL function GENERAL_NAME_cmp as an ASN1_TYPE rather than an\nASN1_STRING.\n\nWhen CRL checking is enabled (i.e. the application sets the\nX509_V_FLAG_CRL_CHECK flag), this vulnerability may allow an attacker to pass\narbitrary pointers to a memcmp call, enabling them to read memory contents or\nenact a denial of service. In most cases, the attack requires the attacker to\nprovide both the certificate chain and CRL, neither of which need to have a\nvalid signature. If the attacker only controls one of these inputs, the other\ninput must already contain an X.400 address as a CRL distribution point, which\nis uncommon. As such, this vulnerability is most likely to only affect\napplications which have implemented their own functionality for retrieving CRLs\nover a network.',
-              'diffID':        'sha256:994393dc58e7931862558d06e46aa2bb17487044f670f310dffe1d24e4d1eec7',
-              'fixedVersions': [
-                '1.1.1t-r0'
-              ],
-              'installedVersion': '1.1.1q-r0',
-              'packageName':      'libssl1.1',
-              'purl':             'pkg:apk/alpine/libssl1.1@1.1.1q-r0?arch=x86_64&distro=3.16.2',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2025:7937',
-                'https://access.redhat.com/security/cve/CVE-2023-0286',
-                'https://access.redhat.com/security/cve/cve-2023-0286',
-                'https://bugzilla.redhat.com/2164440',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144000',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144003',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144006',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144008',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144010',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144012',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144015',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144017',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144019',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2145170',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2158412',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164440',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164487',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164488',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164492',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164497',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164499',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164500',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4203',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4304',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4450',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0215',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0216',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0217',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0286',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0401',
-                'https://errata.almalinux.org/9/ALSA-2025-7937.html',
-                'https://errata.rockylinux.org/RLSA-2023:0946',
-                'https://ftp.openbsd.org/pub/OpenBSD/LibreSSL/libressl-3.6.2-relnotes.txt',
-                'https://ftp.openbsd.org/pub/OpenBSD/patches/7.2/common/018_x509.patch.sig',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=2c6c9d439b484e1ba9830d8454a34fa4f80fdfe9',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=2f7530077e0ef79d98718138716bc51ca0cad658',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=fd2af07dc083a350c959147097003a14a5e8ac4d',
-                'https://github.com/pyca/cryptography',
-                'https://github.com/pyca/cryptography/security/advisories/GHSA-x4qr-2fvf-3mr5',
-                'https://linux.oracle.com/cve/CVE-2023-0286.html',
-                'https://linux.oracle.com/errata/ELSA-2025-7937.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-0286',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0003',
-                'https://rustsec.org/advisories/RUSTSEC-2023-0006.html',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://ubuntu.com/security/notices/USN-5844-1',
-                'https://ubuntu.com/security/notices/USN-5845-1',
-                'https://ubuntu.com/security/notices/USN-5845-2',
-                'https://ubuntu.com/security/notices/USN-6564-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-0286',
-                'https://www.openssl.org/news/secadv/20230207.txt'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: X.400 address type confusion in X.509 GeneralName'
-            },
-            {
-              'cve':  'CVE-2023-0464',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-295'
-              ],
-              'description':   "A security vulnerability has been identified in all supported versions\n\nof OpenSSL related to the verification of X.509 certificate chains\nthat include policy constraints.  Attackers may be able to exploit this\nvulnerability by creating a malicious certificate chain that triggers\nexponential use of computational resources, leading to a denial-of-service\n(DoS) attack on affected systems.\n\nPolicy processing is disabled by default but can be enabled by passing\nthe `-policy' argument to the command line utilities or by calling the\n`X509_VERIFY_PARAM_set1_policies()' function.",
-              'diffID':        'sha256:994393dc58e7931862558d06e46aa2bb17487044f670f310dffe1d24e4d1eec7',
-              'fixedVersions': [
-                '1.1.1t-r1'
-              ],
-              'installedVersion': '1.1.1q-r0',
-              'packageName':      'libssl1.1',
-              'purl':             'pkg:apk/alpine/libssl1.1@1.1.1q-r0?arch=x86_64&distro=3.16.2',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2023:3722',
-                'https://access.redhat.com/security/cve/CVE-2023-0464',
-                'https://bugzilla.redhat.com/2181082',
-                'https://bugzilla.redhat.com/2182561',
-                'https://bugzilla.redhat.com/2182565',
-                'https://bugzilla.redhat.com/2188461',
-                'https://bugzilla.redhat.com/2207947',
-                'https://errata.almalinux.org/9/ALSA-2023-3722.html',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=2017771e2db3e2b96f89bbe8766c3209f6a99545',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=2dcd4f1e3115f38cefa43e3efbe9b801c27e642e',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=879f7080d7e141f415c79eaa3a8ac4a3dad0348b',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=959c59c7a0164117e7f8366466a32bb1f8d77ff1',
-                'https://linux.oracle.com/cve/CVE-2023-0464.html',
-                'https://linux.oracle.com/errata/ELSA-2023-3722.html',
-                'https://lists.debian.org/debian-lts-announce/2023/06/msg00011.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-0464',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://security.netapp.com/advisory/ntap-20230406-0006/',
-                'https://security.netapp.com/advisory/ntap-20240621-0006/',
-                'https://ubuntu.com/security/notices/USN-6039-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.couchbase.com/alerts/',
-                'https://www.cve.org/CVERecord?id=CVE-2023-0464',
-                'https://www.debian.org/security/2023/dsa-5417',
-                'https://www.openssl.org/news/secadv/20230322.txt'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: Denial of service by excessive resource usage in verifying X509 policy constraints'
-            },
-            {
-              'cve':  'CVE-2022-4304',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N'
-                },
-                'nvd': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N'
-                },
-                'redhat': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-203'
-              ],
-              'description':   'A timing based side channel exists in the OpenSSL RSA Decryption implementation\nwhich could be sufficient to recover a plaintext across a network in a\nBleichenbacher style attack. To achieve a successful decryption an attacker\nwould have to be able to send a very large number of trial messages for\ndecryption. The vulnerability affects all RSA padding modes: PKCS#1 v1.5,\nRSA-OEAP and RSASVE.\n\nFor example, in a TLS connection, RSA is commonly used by a client to send an\nencrypted pre-master secret to the server. An attacker that had observed a\ngenuine connection between a client and a server could use this flaw to send\ntrial messages to the server and record the time taken to process them. After a\nsufficiently large number of messages the attacker could recover the pre-master\nsecret used for the original connection and thus be able to decrypt the\napplication data sent over that connection.',
-              'diffID':        'sha256:994393dc58e7931862558d06e46aa2bb17487044f670f310dffe1d24e4d1eec7',
-              'fixedVersions': [
-                '1.1.1t-r0'
-              ],
-              'installedVersion': '1.1.1q-r0',
-              'packageName':      'libssl1.1',
-              'purl':             'pkg:apk/alpine/libssl1.1@1.1.1q-r0?arch=x86_64&distro=3.16.2',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2023:2165',
-                'https://access.redhat.com/security/cve/CVE-2022-4304',
-                'https://bugzilla.redhat.com/1960321',
-                'https://bugzilla.redhat.com/2164440',
-                'https://bugzilla.redhat.com/2164487',
-                'https://bugzilla.redhat.com/2164492',
-                'https://bugzilla.redhat.com/2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144000',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144003',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144006',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144008',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144010',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144012',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144015',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144017',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144019',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2145170',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2158412',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164440',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164487',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164488',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164492',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164497',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164499',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164500',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4203',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4304',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4450',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0215',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0216',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0217',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0286',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0401',
-                'https://errata.almalinux.org/9/ALSA-2023-2165.html',
-                'https://errata.rockylinux.org/RLSA-2023:0946',
-                'https://linux.oracle.com/cve/CVE-2022-4304.html',
-                'https://linux.oracle.com/errata/ELSA-2023-32791.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2022-4304',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0003',
-                'https://rustsec.org/advisories/RUSTSEC-2023-0007.html',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://ubuntu.com/security/notices/USN-5844-1',
-                'https://ubuntu.com/security/notices/USN-6564-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2022-4304',
-                'https://www.openssl.org/news/secadv/20230207.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: timing attack in RSA Decryption implementation'
-            },
-            {
-              'cve':  'CVE-2023-0465',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N'
-                },
-                'redhat': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-295'
-              ],
-              'description':   "Applications that use a non-default option when verifying certificates may be\nvulnerable to an attack from a malicious CA to circumvent certain checks.\n\nInvalid certificate policies in leaf certificates are silently ignored by\nOpenSSL and other certificate policy checks are skipped for that certificate.\nA malicious CA could use this to deliberately assert invalid certificate policies\nin order to circumvent policy checking on the certificate altogether.\n\nPolicy processing is disabled by default but can be enabled by passing\nthe `-policy' argument to the command line utilities or by calling the\n`X509_VERIFY_PARAM_set1_policies()' function.",
-              'diffID':        'sha256:994393dc58e7931862558d06e46aa2bb17487044f670f310dffe1d24e4d1eec7',
-              'fixedVersions': [
-                '1.1.1t-r2'
-              ],
-              'installedVersion': '1.1.1q-r0',
-              'packageName':      'libssl1.1',
-              'purl':             'pkg:apk/alpine/libssl1.1@1.1.1q-r0?arch=x86_64&distro=3.16.2',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2023:3722',
-                'https://access.redhat.com/security/cve/CVE-2023-0465',
-                'https://bugzilla.redhat.com/2181082',
-                'https://bugzilla.redhat.com/2182561',
-                'https://bugzilla.redhat.com/2182565',
-                'https://bugzilla.redhat.com/2188461',
-                'https://bugzilla.redhat.com/2207947',
-                'https://errata.almalinux.org/9/ALSA-2023-3722.html',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=10325176f3d3e98c6e2b3bf5ab1e3b334de6947a',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=1dd43e0709fece299b15208f36cc7c76209ba0bb',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=b013765abfa80036dc779dd0e50602c57bb3bf95',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=facfb1ab745646e97a1920977ae4a9965ea61d5c',
-                'https://linux.oracle.com/cve/CVE-2023-0465.html',
-                'https://linux.oracle.com/errata/ELSA-2023-3722.html',
-                'https://lists.debian.org/debian-lts-announce/2023/06/msg00011.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-0465',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://security.netapp.com/advisory/ntap-20230414-0001/',
-                'https://ubuntu.com/security/notices/USN-6039-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-0465',
-                'https://www.debian.org/security/2023/dsa-5417',
-                'https://www.openssl.org/news/secadv/20230328.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: Invalid certificate policies in leaf certificates are silently ignored'
-            },
-            {
-              'cve':  'CVE-2023-2650',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '6.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-770'
-              ],
-              'description':   "Issue summary: Processing some specially crafted ASN.1 object identifiers or\ndata containing them may be very slow.\n\nImpact summary: Applications that use OBJ_obj2txt() directly, or use any of\nthe OpenSSL subsystems OCSP, PKCS7/SMIME, CMS, CMP/CRMF or TS with no message\nsize limit may experience notable to very long delays when processing those\nmessages, which may lead to a Denial of Service.\n\nAn OBJECT IDENTIFIER is composed of a series of numbers - sub-identifiers -\nmost of which have no size limit.  OBJ_obj2txt() may be used to translate\nan ASN.1 OBJECT IDENTIFIER given in DER encoding form (using the OpenSSL\ntype ASN1_OBJECT) to its canonical numeric text form, which are the\nsub-identifiers of the OBJECT IDENTIFIER in decimal form, separated by\nperiods.\n\nWhen one of the sub-identifiers in the OBJECT IDENTIFIER is very large\n(these are sizes that are seen as absurdly large, taking up tens or hundreds\nof KiBs), the translation to a decimal number in text may take a very long\ntime.  The time complexity is O(n^2) with 'n' being the size of the\nsub-identifiers in bytes (*).\n\nWith OpenSSL 3.0, support to fetch cryptographic algorithms using names /\nidentifiers in string form was introduced.  This includes using OBJECT\nIDENTIFIERs in canonical numeric text form as identifiers for fetching\nalgorithms.\n\nSuch OBJECT IDENTIFIERs may be received through the ASN.1 structure\nAlgorithmIdentifier, which is commonly used in multiple protocols to specify\nwhat cryptographic algorithm should be used to sign or verify, encrypt or\ndecrypt, or digest passed data.\n\nApplications that call OBJ_obj2txt() directly with untrusted data are\naffected, with any version of OpenSSL.  If the use is for the mere purpose\nof display, the severity is considered low.\n\nIn OpenSSL 3.0 and newer, this affects the subsystems OCSP, PKCS7/SMIME,\nCMS, CMP/CRMF or TS.  It also impacts anything that processes X.509\ncertificates, including simple things like verifying its signature.\n\nThe impact on TLS is relatively low, because all versions of OpenSSL have a\n100KiB limit on the peer's certificate chain.  Additionally, this only\nimpacts clients, or servers that have explicitly enabled client\nauthentication.\n\nIn OpenSSL 1.1.1 and 1.0.2, this only affects displaying diverse objects,\nsuch as X.509 certificates.  This is assumed to not happen in such a way\nthat it would cause a Denial of Service, so these versions are considered\nnot affected by this issue in such a way that it would be cause for concern,\nand the severity is therefore considered low.",
-              'diffID':        'sha256:994393dc58e7931862558d06e46aa2bb17487044f670f310dffe1d24e4d1eec7',
-              'fixedVersions': [
-                '1.1.1u-r0'
-              ],
-              'installedVersion': '1.1.1q-r0',
-              'packageName':      'libssl1.1',
-              'purl':             'pkg:apk/alpine/libssl1.1@1.1.1q-r0?arch=x86_64&distro=3.16.2',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2023/05/30/1',
-                'https://access.redhat.com/errata/RHSA-2023:6330',
-                'https://access.redhat.com/security/cve/CVE-2023-2650',
-                'https://bugzilla.redhat.com/1858038',
-                'https://bugzilla.redhat.com/2207947',
-                'https://errata.almalinux.org/9/ALSA-2023-6330.html',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=423a2bc737a908ad0c77bda470b2b59dc879936b',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=853c5e56ee0b8650c73140816bb8b91d6163422c',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=9e209944b35cf82368071f160a744b6178f9b098',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=db779b0e10b047f2585615e0b8f2acdf21f8544a',
-                'https://linux.oracle.com/cve/CVE-2023-2650.html',
-                'https://linux.oracle.com/errata/ELSA-2023-6330.html',
-                'https://lists.debian.org/debian-lts-announce/2023/06/msg00011.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-2650',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0009',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://security.netapp.com/advisory/ntap-20230703-0001/',
-                'https://security.netapp.com/advisory/ntap-20231027-0009/',
-                'https://ubuntu.com/security/notices/USN-6119-1',
-                'https://ubuntu.com/security/notices/USN-6188-1',
-                'https://ubuntu.com/security/notices/USN-6672-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-2650',
-                'https://www.debian.org/security/2023/dsa-5417',
-                'https://www.openssl.org/news/secadv/20230530.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: Possible DoS translating ASN.1 object identifiers'
-            },
-            {
-              'cve':  'CVE-2023-3446',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L'
-                },
-                'redhat': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L'
-                }
-              },
-              'cwes': [
-                'CWE-606',
-                'CWE-1333'
-              ],
-              'description':   "Issue summary: Checking excessively long DH keys or parameters may be very slow.\n\nImpact summary: Applications that use the functions DH_check(), DH_check_ex()\nor EVP_PKEY_param_check() to check a DH key or DH parameters may experience long\ndelays. Where the key or parameters that are being checked have been obtained\nfrom an untrusted source this may lead to a Denial of Service.\n\nThe function DH_check() performs various checks on DH parameters. One of those\nchecks confirms that the modulus ('p' parameter) is not too large. Trying to use\na very large modulus is slow and OpenSSL will not normally use a modulus which\nis over 10,000 bits in length.\n\nHowever the DH_check() function checks numerous aspects of the key or parameters\nthat have been supplied. Some of those checks use the supplied modulus value\neven if it has already been found to be too large.\n\nAn application that calls DH_check() and supplies a key or parameters obtained\nfrom an untrusted source could be vulernable to a Denial of Service attack.\n\nThe function DH_check() is itself called by a number of other OpenSSL functions.\nAn application calling any of those other functions may similarly be affected.\nThe other functions affected by this are DH_check_ex() and\nEVP_PKEY_param_check().\n\nAlso vulnerable are the OpenSSL dhparam and pkeyparam command line applications\nwhen using the '-check' option.\n\nThe OpenSSL SSL/TLS implementation is not affected by this issue.\nThe OpenSSL 3.0 and 3.1 FIPS providers are not affected by this issue.",
-              'diffID':        'sha256:994393dc58e7931862558d06e46aa2bb17487044f670f310dffe1d24e4d1eec7',
-              'fixedVersions': [
-                '1.1.1u-r2'
-              ],
-              'installedVersion': '1.1.1q-r0',
-              'packageName':      'libssl1.1',
-              'purl':             'pkg:apk/alpine/libssl1.1@1.1.1q-r0?arch=x86_64&distro=3.16.2',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2023/07/19/4',
-                'http://www.openwall.com/lists/oss-security/2023/07/19/5',
-                'http://www.openwall.com/lists/oss-security/2023/07/19/6',
-                'http://www.openwall.com/lists/oss-security/2023/07/31/1',
-                'http://www.openwall.com/lists/oss-security/2024/05/16/1',
-                'https://access.redhat.com/errata/RHSA-2024:2447',
-                'https://access.redhat.com/security/cve/CVE-2023-3446',
-                'https://bugzilla.redhat.com/2223016',
-                'https://bugzilla.redhat.com/2224962',
-                'https://bugzilla.redhat.com/2227852',
-                'https://bugzilla.redhat.com/2248616',
-                'https://bugzilla.redhat.com/2257571',
-                'https://bugzilla.redhat.com/2258502',
-                'https://bugzilla.redhat.com/2259944',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2224962',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2257582',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2257583',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2258677',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2258688',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2258691',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2258694',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2258700',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-36763',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-36764',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3446',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45229',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45231',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45232',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45233',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45235',
-                'https://errata.almalinux.org/9/ALSA-2024-2447.html',
-                'https://errata.rockylinux.org/RLSA-2024:2264',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=1fa20cf2f506113c761777127a38bce5068740eb',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=8780a896543a654e757db1b9396383f9d8095528',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=9a0a4d3c1e7138915563c0df4fe6a3f9377b839c',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=fc9867c1e03c22ebf56943be205202e576aabf23',
-                'https://linux.oracle.com/cve/CVE-2023-3446.html',
-                'https://linux.oracle.com/errata/ELSA-2024-2447.html',
-                'https://lists.debian.org/debian-lts-announce/2023/08/msg00019.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-3446',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://security.netapp.com/advisory/ntap-20230803-0011/',
-                'https://ubuntu.com/security/notices/USN-6435-1',
-                'https://ubuntu.com/security/notices/USN-6435-2',
-                'https://ubuntu.com/security/notices/USN-6450-1',
-                'https://ubuntu.com/security/notices/USN-6709-1',
-                'https://ubuntu.com/security/notices/USN-7018-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-3446',
-                'https://www.openssl.org/news/secadv/20230719.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: Excessive time spent checking DH keys and parameters'
-            },
-            {
-              'cve':  'CVE-2023-3817',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L'
-                },
-                'redhat': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L'
-                }
-              },
-              'cwes': [
-                'CWE-606',
-                'CWE-834'
-              ],
-              'description':   'Issue summary: Checking excessively long DH keys or parameters may be very slow.\n\nImpact summary: Applications that use the functions DH_check(), DH_check_ex()\nor EVP_PKEY_param_check() to check a DH key or DH parameters may experience long\ndelays. Where the key or parameters that are being checked have been obtained\nfrom an untrusted source this may lead to a Denial of Service.\n\nThe function DH_check() performs various checks on DH parameters. After fixing\nCVE-2023-3446 it was discovered that a large q parameter value can also trigger\nan overly long computation during some of these checks. A correct q value,\nif present, cannot be larger than the modulus p parameter, thus it is\nunnecessary to perform these checks if q is larger than p.\n\nAn application that calls DH_check() and supplies a key or parameters obtained\nfrom an untrusted source could be vulnerable to a Denial of Service attack.\n\nThe function DH_check() is itself called by a number of other OpenSSL functions.\nAn application calling any of those other functions may similarly be affected.\nThe other functions affected by this are DH_check_ex() and\nEVP_PKEY_param_check().\n\nAlso vulnerable are the OpenSSL dhparam and pkeyparam command line applications\nwhen using the "-check" option.\n\nThe OpenSSL SSL/TLS implementation is not affected by this issue.\n\nThe OpenSSL 3.0 and 3.1 FIPS providers are not affected by this issue.',
-              'diffID':        'sha256:994393dc58e7931862558d06e46aa2bb17487044f670f310dffe1d24e4d1eec7',
-              'fixedVersions': [
-                '1.1.1v-r0'
-              ],
-              'installedVersion': '1.1.1q-r0',
-              'packageName':      'libssl1.1',
-              'purl':             'pkg:apk/alpine/libssl1.1@1.1.1q-r0?arch=x86_64&distro=3.16.2',
-              'references':       [
-                'http://seclists.org/fulldisclosure/2023/Jul/43',
-                'http://www.openwall.com/lists/oss-security/2023/07/31/1',
-                'http://www.openwall.com/lists/oss-security/2023/09/22/11',
-                'http://www.openwall.com/lists/oss-security/2023/09/22/9',
-                'http://www.openwall.com/lists/oss-security/2023/11/06/2',
-                'https://access.redhat.com/errata/RHSA-2024:2447',
-                'https://access.redhat.com/security/cve/CVE-2023-3817',
-                'https://bugzilla.redhat.com/2223016',
-                'https://bugzilla.redhat.com/2224962',
-                'https://bugzilla.redhat.com/2227852',
-                'https://bugzilla.redhat.com/2248616',
-                'https://bugzilla.redhat.com/2257571',
-                'https://bugzilla.redhat.com/2258502',
-                'https://bugzilla.redhat.com/2259944',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2224962',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2227852',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2248616',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2270358',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3446',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3817',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-5678',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-2408',
-                'https://errata.almalinux.org/9/ALSA-2024-2447.html',
-                'https://errata.rockylinux.org/RLSA-2023:7877',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=6a1eb62c29db6cb5eec707f9338aee00f44e26f5',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=869ad69aadd985c7b8ca6f4e5dd0eb274c9f3644',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=9002fd07327a91f35ba6c1307e71fa6fd4409b7f',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=91ddeba0f2269b017dc06c46c993a788974b1aa5',
-                'https://linux.oracle.com/cve/CVE-2023-3817.html',
-                'https://linux.oracle.com/errata/ELSA-2024-2447.html',
-                'https://lists.debian.org/debian-lts-announce/2023/08/msg00019.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-3817',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://security.netapp.com/advisory/ntap-20230818-0014/',
-                'https://security.netapp.com/advisory/ntap-20231027-0008/',
-                'https://security.netapp.com/advisory/ntap-20240621-0006/',
-                'https://ubuntu.com/security/notices/USN-6435-1',
-                'https://ubuntu.com/security/notices/USN-6435-2',
-                'https://ubuntu.com/security/notices/USN-6450-1',
-                'https://ubuntu.com/security/notices/USN-6709-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-3817',
-                'https://www.openssl.org/news/secadv/20230731.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'OpenSSL: Excessive time spent checking DH q parameter value'
-            },
-            {
-              'cve':  'CVE-2023-5678',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L'
-                },
-                'redhat': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L'
-                }
-              },
-              'cwes': [
-                'CWE-606',
-                'CWE-754'
-              ],
-              'description':   "Issue summary: Generating excessively long X9.42 DH keys or checking\nexcessively long X9.42 DH keys or parameters may be very slow.\n\nImpact summary: Applications that use the functions DH_generate_key() to\ngenerate an X9.42 DH key may experience long delays.  Likewise, applications\nthat use DH_check_pub_key(), DH_check_pub_key_ex() or EVP_PKEY_public_check()\nto check an X9.42 DH key or X9.42 DH parameters may experience long delays.\nWhere the key or parameters that are being checked have been obtained from\nan untrusted source this may lead to a Denial of Service.\n\nWhile DH_check() performs all the necessary checks (as of CVE-2023-3817),\nDH_check_pub_key() doesn't make any of these checks, and is therefore\nvulnerable for excessively large P and Q parameters.\n\nLikewise, while DH_generate_key() performs a check for an excessively large\nP, it doesn't check for an excessively large Q.\n\nAn application that calls DH_generate_key() or DH_check_pub_key() and\nsupplies a key or parameters obtained from an untrusted source could be\nvulnerable to a Denial of Service attack.\n\nDH_generate_key() and DH_check_pub_key() are also called by a number of\nother OpenSSL functions.  An application calling any of those other\nfunctions may similarly be affected.  The other functions affected by this\nare DH_check_pub_key_ex(), EVP_PKEY_public_check(), and EVP_PKEY_generate().\n\nAlso vulnerable are the OpenSSL pkey command line application when using the\n\"-pubcheck\" option, as well as the OpenSSL genpkey command line application.\n\nThe OpenSSL SSL/TLS implementation is not affected by this issue.\n\nThe OpenSSL 3.0 and 3.1 FIPS providers are not affected by this issue.",
-              'diffID':        'sha256:994393dc58e7931862558d06e46aa2bb17487044f670f310dffe1d24e4d1eec7',
-              'fixedVersions': [
-                '1.1.1w-r1'
-              ],
-              'installedVersion': '1.1.1q-r0',
-              'packageName':      'libssl1.1',
-              'purl':             'pkg:apk/alpine/libssl1.1@1.1.1q-r0?arch=x86_64&distro=3.16.2',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2024/03/11/1',
-                'https://access.redhat.com/errata/RHSA-2024:2447',
-                'https://access.redhat.com/security/cve/CVE-2023-5678',
-                'https://bugzilla.redhat.com/2223016',
-                'https://bugzilla.redhat.com/2224962',
-                'https://bugzilla.redhat.com/2227852',
-                'https://bugzilla.redhat.com/2248616',
-                'https://bugzilla.redhat.com/2257571',
-                'https://bugzilla.redhat.com/2258502',
-                'https://bugzilla.redhat.com/2259944',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2224962',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2227852',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2248616',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2270358',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3446',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3817',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-5678',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-2408',
-                'https://errata.almalinux.org/9/ALSA-2024-2447.html',
-                'https://errata.rockylinux.org/RLSA-2023:7877',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=34efaef6c103d636ab507a0cc34dca4d3aecc055',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=710fee740904b6290fef0dd5536fbcedbc38ff0c',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=db925ae2e65d0d925adef429afc37f75bd1c2017',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=ddeb4b6c6d527e54ce9a99cba785c0f7776e54b6',
-                'https://linux.oracle.com/cve/CVE-2023-5678.html',
-                'https://linux.oracle.com/errata/ELSA-2024-2447.html',
-                'https://lists.debian.org/debian-lts-announce/2024/10/msg00033.html',
-                'https://lists.debian.org/debian-lts-announce/2024/11/msg00000.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-5678',
-                'https://security.netapp.com/advisory/ntap-20231130-0010/',
-                'https://ubuntu.com/security/notices/USN-6622-1',
-                'https://ubuntu.com/security/notices/USN-6632-1',
-                'https://ubuntu.com/security/notices/USN-6709-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-5678',
-                'https://www.openssl.org/news/secadv/20231106.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: Generating excessively long X9.42 DH keys or checking excessively long X9.42 DH keys or parameters may be very slow'
-            },
-            {
-              'cve':  'CVE-2025-26519',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-787'
-              ],
-              'description':   'musl libc 0.9.13 through 1.2.5 before 1.2.6 has an out-of-bounds write vulnerability when an attacker can trigger iconv conversion of untrusted EUC-KR text to UTF-8.',
-              'diffID':        'sha256:994393dc58e7931862558d06e46aa2bb17487044f670f310dffe1d24e4d1eec7',
-              'fixedVersions': [
-                '1.2.3-r4'
-              ],
-              'installedVersion': '1.2.3-r0',
-              'packageName':      'musl',
-              'purl':             'pkg:apk/alpine/musl@1.2.3-r0?arch=x86_64&distro=3.16.2',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2025/02/13/2',
-                'http://www.openwall.com/lists/oss-security/2025/02/13/3',
-                'http://www.openwall.com/lists/oss-security/2025/02/13/4',
-                'http://www.openwall.com/lists/oss-security/2025/02/13/5',
-                'http://www.openwall.com/lists/oss-security/2025/02/14/5',
-                'http://www.openwall.com/lists/oss-security/2025/02/14/6',
-                'https://git.musl-libc.org/cgit/musl/commit/?id=c47ad25ea3b484e10326f933e927c0bc8cded3da',
-                'https://git.musl-libc.org/cgit/musl/commit/?id=e5adcd97b5196e29991b524237381a0202a60659',
-                'https://www.openwall.com/lists/oss-security/2025/02/13/2'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'musl libc 0.9.13 through 1.2.5 before 1.2.6 has an out-of-bounds write ...'
-            },
-            {
-              'cve':  'CVE-2025-26519',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-787'
-              ],
-              'description':   'musl libc 0.9.13 through 1.2.5 before 1.2.6 has an out-of-bounds write vulnerability when an attacker can trigger iconv conversion of untrusted EUC-KR text to UTF-8.',
-              'diffID':        'sha256:994393dc58e7931862558d06e46aa2bb17487044f670f310dffe1d24e4d1eec7',
-              'fixedVersions': [
-                '1.2.3-r4'
-              ],
-              'installedVersion': '1.2.3-r0',
-              'packageName':      'musl-utils',
-              'purl':             'pkg:apk/alpine/musl-utils@1.2.3-r0?arch=x86_64&distro=3.16.2',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2025/02/13/2',
-                'http://www.openwall.com/lists/oss-security/2025/02/13/3',
-                'http://www.openwall.com/lists/oss-security/2025/02/13/4',
-                'http://www.openwall.com/lists/oss-security/2025/02/13/5',
-                'http://www.openwall.com/lists/oss-security/2025/02/14/5',
-                'http://www.openwall.com/lists/oss-security/2025/02/14/6',
-                'https://git.musl-libc.org/cgit/musl/commit/?id=c47ad25ea3b484e10326f933e927c0bc8cded3da',
-                'https://git.musl-libc.org/cgit/musl/commit/?id=e5adcd97b5196e29991b524237381a0202a60659',
-                'https://www.openwall.com/lists/oss-security/2025/02/13/2'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'musl libc 0.9.13 through 1.2.5 before 1.2.6 has an out-of-bounds write ...'
-            },
-            {
-              'cve':  'CVE-2023-42366',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.5',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.1',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-787'
-              ],
-              'description':   'A heap-buffer-overflow was discovered in BusyBox v.1.36.1 in the next_token function at awk.c:1159.',
-              'diffID':        'sha256:994393dc58e7931862558d06e46aa2bb17487044f670f310dffe1d24e4d1eec7',
-              'fixedVersions': [
-                '1.35.0-r18'
-              ],
-              'installedVersion': '1.35.0-r17',
-              'packageName':      'ssl_client',
-              'purl':             'pkg:apk/alpine/ssl_client@1.35.0-r17?arch=x86_64&distro=3.16.2',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2023-42366',
-                'https://bugs.busybox.net/show_bug.cgi?id=15874',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-42366',
-                'https://security.netapp.com/advisory/ntap-20241206-0007/',
-                'https://www.cve.org/CVERecord?id=CVE-2023-42366'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'busybox: A heap-buffer-overflow'
-            }
-          ]
-        }
-      ],
-      'summary': {
-        'critical':   0,
-        'high':       10,
-        'low':        0,
-        'medium':     14,
-        'suppressed': 0,
-        'unknown':    0
-      }
-    }
-  },
-  {
-    'id':    'default/4d11ed4427d12423f5f99a6a9c8c9d2df3cd7fbec0a554a157ed77eee06f10a4',
-    'type':  'storage.sbomscanner.kubewarden.io.vulnerabilityreport',
-    'links': {
-      'patch':  'https://localhost:8005/v1/storage.sbomscanner.kubewarden.io.vulnerabilityreports/default/4d11ed4427d12423f5f99a6a9c8c9d2df3cd7fbec0a554a157ed77eee06f10a4',
-      'remove': 'https://localhost:8005/v1/storage.sbomscanner.kubewarden.io.vulnerabilityreports/default/4d11ed4427d12423f5f99a6a9c8c9d2df3cd7fbec0a554a157ed77eee06f10a4',
-      'self':   'https://localhost:8005/v1/storage.sbomscanner.kubewarden.io.vulnerabilityreports/default/4d11ed4427d12423f5f99a6a9c8c9d2df3cd7fbec0a554a157ed77eee06f10a4',
-      'update': 'https://localhost:8005/v1/storage.sbomscanner.kubewarden.io.vulnerabilityreports/default/4d11ed4427d12423f5f99a6a9c8c9d2df3cd7fbec0a554a157ed77eee06f10a4',
-      'view':   'https://localhost:8005/apis/storage.sbomscanner.kubewarden.io/v1alpha1/namespaces/default/vulnerabilityreports/4d11ed4427d12423f5f99a6a9c8c9d2df3cd7fbec0a554a157ed77eee06f10a4'
-    },
-    'apiVersion':    'storage.sbomscanner.kubewarden.io/v1alpha1',
-    'imageMetadata': {
-      'digest':      'sha256:a777c9c66ba177ccfea23f2a216ff6721e78a662cd17019488c417135299cd89',
-      'platform':    'linux/amd64',
-      'registry':    'lsong-demo1',
-      'registryURI': 'registry-1.docker.io',
-      'repository':  'library/alpine',
-      'tag':         '3.15.4'
-    },
-    'kind':     'VulnerabilityReport',
-    'metadata': {
-      'creationTimestamp': '2026-01-14T18:51:18Z',
-      'fields':            [
-        '4d11ed4427d12423f5f99a6a9c8c9d2df3cd7fbec0a554a157ed77eee06f10a4',
-        'registry-1.docker.io/library/alpine:3.15.4',
-        'linux/amd64',
-        '23 (0 suppressed)'
-      ],
-      'labels': {
-        'app.kubernetes.io/managed-by':          'sbomscanner',
-        'app.kubernetes.io/part-of':             'sbomscanner',
-        'sbomscanner.kubewarden.io/scanjob-uid': '445c600a-c4b6-40b3-bd71-f2d2140a37d5'
-      },
-      'name':            '4d11ed4427d12423f5f99a6a9c8c9d2df3cd7fbec0a554a157ed77eee06f10a4',
-      'namespace':       'default',
-      'ownerReferences': [
-        {
-          'apiVersion':         'storage.sbomscanner.kubewarden.io/v1alpha1',
-          'blockOwnerDeletion': true,
-          'controller':         true,
-          'kind':               'SBOM',
-          'name':               '4d11ed4427d12423f5f99a6a9c8c9d2df3cd7fbec0a554a157ed77eee06f10a4',
-          'uid':                'b6754e3d-6420-4c15-b9a9-9004254d52e8'
-        }
-      ],
-      'relationships': [
-        {
-          'fromId':   'default/4d11ed4427d12423f5f99a6a9c8c9d2df3cd7fbec0a554a157ed77eee06f10a4',
-          'fromType': 'storage.sbomscanner.kubewarden.io.sbom',
-          'rel':      'owner',
-          'state':    'active',
-          'message':  'Resource is current'
-        }
-      ],
-      'resourceVersion': '1',
-      'state':           {
-        'error':         false,
-        'message':       'Resource is current',
-        'name':          'active',
-        'transitioning': false
-      },
-      'uid': 'ec2efdc8-180f-4aab-b8cc-74e55b3ea445'
-    },
-    'report': {
-      'results': [
-        {
-          'class':           'os-pkgs',
-          'target':          '/var/run/worker/trivy.sbom.3067489821.json (alpine 3.15.4)',
-          'type':            'alpine',
-          'vulnerabilities': [
-            {
-              'cve':  'CVE-2022-4450',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'nvd': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-415'
-              ],
-              'description':   'The function PEM_read_bio_ex() reads a PEM file from a BIO and parses and\ndecodes the "name" (e.g. "CERTIFICATE"), any header data and the payload data.\nIf the function succeeds then the "name_out", "header" and "data" arguments are\npopulated with pointers to buffers containing the relevant decoded data. The\ncaller is responsible for freeing those buffers. It is possible to construct a\nPEM file that results in 0 bytes of payload data. In this case PEM_read_bio_ex()\nwill return a failure code but will populate the header argument with a pointer\nto a buffer that has already been freed. If the caller also frees this buffer\nthen a double free will occur. This will most likely lead to a crash. This\ncould be exploited by an attacker who has the ability to supply malicious PEM\nfiles for parsing to achieve a denial of service attack.\n\nThe functions PEM_read_bio() and PEM_read() are simple wrappers around\nPEM_read_bio_ex() and therefore these functions are also directly affected.\n\nThese functions are also called indirectly by a number of other OpenSSL\nfunctions including PEM_X509_INFO_read_bio_ex() and\nSSL_CTX_use_serverinfo_file() which are also vulnerable. Some OpenSSL internal\nuses of these functions are not vulnerable because the caller does not free the\nheader argument if PEM_read_bio_ex() returns a failure code. These locations\ninclude the PEM_read_bio_TYPE() functions as well as the decoders introduced in\nOpenSSL 3.0.\n\nThe OpenSSL asn1parse command line application is also impacted by this issue.',
-              'diffID':        'sha256:4fc242d58285699eca05db3cc7c7122a2b8e014d9481f323bd9277baacfa0628',
-              'fixedVersions': [
-                '1.1.1t-r0'
-              ],
-              'installedVersion': '1.1.1n-r0',
-              'packageName':      'libcrypto1.1',
-              'purl':             'pkg:apk/alpine/libcrypto1.1@1.1.1n-r0?arch=x86_64&distro=3.15.4',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2023:2165',
-                'https://access.redhat.com/security/cve/CVE-2022-4450',
-                'https://bugzilla.redhat.com/1960321',
-                'https://bugzilla.redhat.com/2164440',
-                'https://bugzilla.redhat.com/2164487',
-                'https://bugzilla.redhat.com/2164492',
-                'https://bugzilla.redhat.com/2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144000',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144003',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144006',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144008',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144010',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144012',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144015',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144017',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144019',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2145170',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2158412',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164440',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164487',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164488',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164492',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164497',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164499',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164500',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4203',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4304',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4450',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0215',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0216',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0217',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0286',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0401',
-                'https://errata.almalinux.org/9/ALSA-2023-2165.html',
-                'https://errata.rockylinux.org/RLSA-2023:0946',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=63bcf189be73a9cc1264059bed6f57974be74a83',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=bbcf509bd046b34cca19c766bbddc31683d0858b',
-                'https://linux.oracle.com/cve/CVE-2022-4450.html',
-                'https://linux.oracle.com/errata/ELSA-2023-32791.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2022-4450',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0003',
-                'https://rustsec.org/advisories/RUSTSEC-2023-0010.html',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://ubuntu.com/security/notices/USN-5844-1',
-                'https://ubuntu.com/security/notices/USN-6564-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2022-4450',
-                'https://www.openssl.org/news/secadv/20230207.txt'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: double free after calling PEM_read_bio_ex'
-            },
-            {
-              'cve':  'CVE-2023-0215',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'nvd': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   'The public API function BIO_new_NDEF is a helper function used for streaming\nASN.1 data via a BIO. It is primarily used internally to OpenSSL to support the\nSMIME, CMS and PKCS7 streaming capabilities, but may also be called directly by\nend user applications.\n\nThe function receives a BIO from the caller, prepends a new BIO_f_asn1 filter\nBIO onto the front of it to form a BIO chain, and then returns the new head of\nthe BIO chain to the caller. Under certain conditions, for example if a CMS\nrecipient public key is invalid, the new filter BIO is freed and the function\nreturns a NULL result indicating a failure. However, in this case, the BIO chain\nis not properly cleaned up and the BIO passed by the caller still retains\ninternal pointers to the previously freed filter BIO. If the caller then goes on\nto call BIO_pop() on the BIO then a use-after-free will occur. This will most\nlikely result in a crash.\n\n\n\nThis scenario occurs directly in the internal function B64_write_ASN1() which\nmay cause BIO_new_NDEF() to be called and will subsequently call BIO_pop() on\nthe BIO. This internal function is in turn called by the public API functions\nPEM_write_bio_ASN1_stream, PEM_write_bio_CMS_stream, PEM_write_bio_PKCS7_stream,\nSMIME_write_ASN1, SMIME_write_CMS and SMIME_write_PKCS7.\n\nOther public API functions that may be impacted by this include\ni2d_ASN1_bio_stream, BIO_new_CMS, BIO_new_PKCS7, i2d_CMS_bio_stream and\ni2d_PKCS7_bio_stream.\n\nThe OpenSSL cms and smime command line applications are similarly affected.',
-              'diffID':        'sha256:4fc242d58285699eca05db3cc7c7122a2b8e014d9481f323bd9277baacfa0628',
-              'fixedVersions': [
-                '1.1.1t-r0'
-              ],
-              'installedVersion': '1.1.1n-r0',
-              'packageName':      'libcrypto1.1',
-              'purl':             'pkg:apk/alpine/libcrypto1.1@1.1.1n-r0?arch=x86_64&distro=3.15.4',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2023:2165',
-                'https://access.redhat.com/security/cve/CVE-2023-0215',
-                'https://bugzilla.redhat.com/1960321',
-                'https://bugzilla.redhat.com/2164440',
-                'https://bugzilla.redhat.com/2164487',
-                'https://bugzilla.redhat.com/2164492',
-                'https://bugzilla.redhat.com/2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144000',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144003',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144006',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144008',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144010',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144012',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144015',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144017',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144019',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2145170',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2158412',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164440',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164487',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164488',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164492',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164497',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164499',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164500',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4203',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4304',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4450',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0215',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0216',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0217',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0286',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0401',
-                'https://errata.almalinux.org/9/ALSA-2023-2165.html',
-                'https://errata.rockylinux.org/RLSA-2023:0946',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=8818064ce3c3c0f1b740a5aaba2a987e75bfbafd',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=9816136fe31d92ace4037d5da5257f763aeeb4eb',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=c3829dd8825c654652201e16f8a0a0c46ee3f344',
-                'https://linux.oracle.com/cve/CVE-2023-0215.html',
-                'https://linux.oracle.com/errata/ELSA-2023-32791.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-0215',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0003',
-                'https://rustsec.org/advisories/RUSTSEC-2023-0009.html',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://security.netapp.com/advisory/ntap-20230427-0007',
-                'https://security.netapp.com/advisory/ntap-20230427-0007/',
-                'https://security.netapp.com/advisory/ntap-20230427-0009',
-                'https://security.netapp.com/advisory/ntap-20230427-0009/',
-                'https://security.netapp.com/advisory/ntap-20240621-0006',
-                'https://security.netapp.com/advisory/ntap-20240621-0006/',
-                'https://ubuntu.com/security/notices/USN-5844-1',
-                'https://ubuntu.com/security/notices/USN-5845-1',
-                'https://ubuntu.com/security/notices/USN-5845-2',
-                'https://ubuntu.com/security/notices/USN-6564-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-0215',
-                'https://www.openssl.org/news/secadv/20230207.txt'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: use-after-free following BIO_new_NDEF'
-            },
-            {
-              'cve':  'CVE-2023-0286',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '7.4',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H'
-                },
-                'nvd': {
-                  'v3score':  '7.4',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.4',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-843'
-              ],
-              'description':   'There is a type confusion vulnerability relating to X.400 address processing\ninside an X.509 GeneralName. X.400 addresses were parsed as an ASN1_STRING but\nthe public structure definition for GENERAL_NAME incorrectly specified the type\nof the x400Address field as ASN1_TYPE. This field is subsequently interpreted by\nthe OpenSSL function GENERAL_NAME_cmp as an ASN1_TYPE rather than an\nASN1_STRING.\n\nWhen CRL checking is enabled (i.e. the application sets the\nX509_V_FLAG_CRL_CHECK flag), this vulnerability may allow an attacker to pass\narbitrary pointers to a memcmp call, enabling them to read memory contents or\nenact a denial of service. In most cases, the attack requires the attacker to\nprovide both the certificate chain and CRL, neither of which need to have a\nvalid signature. If the attacker only controls one of these inputs, the other\ninput must already contain an X.400 address as a CRL distribution point, which\nis uncommon. As such, this vulnerability is most likely to only affect\napplications which have implemented their own functionality for retrieving CRLs\nover a network.',
-              'diffID':        'sha256:4fc242d58285699eca05db3cc7c7122a2b8e014d9481f323bd9277baacfa0628',
-              'fixedVersions': [
-                '1.1.1t-r0'
-              ],
-              'installedVersion': '1.1.1n-r0',
-              'packageName':      'libcrypto1.1',
-              'purl':             'pkg:apk/alpine/libcrypto1.1@1.1.1n-r0?arch=x86_64&distro=3.15.4',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2025:7937',
-                'https://access.redhat.com/security/cve/CVE-2023-0286',
-                'https://access.redhat.com/security/cve/cve-2023-0286',
-                'https://bugzilla.redhat.com/2164440',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144000',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144003',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144006',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144008',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144010',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144012',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144015',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144017',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144019',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2145170',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2158412',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164440',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164487',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164488',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164492',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164497',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164499',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164500',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4203',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4304',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4450',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0215',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0216',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0217',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0286',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0401',
-                'https://errata.almalinux.org/9/ALSA-2025-7937.html',
-                'https://errata.rockylinux.org/RLSA-2023:0946',
-                'https://ftp.openbsd.org/pub/OpenBSD/LibreSSL/libressl-3.6.2-relnotes.txt',
-                'https://ftp.openbsd.org/pub/OpenBSD/patches/7.2/common/018_x509.patch.sig',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=2c6c9d439b484e1ba9830d8454a34fa4f80fdfe9',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=2f7530077e0ef79d98718138716bc51ca0cad658',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=fd2af07dc083a350c959147097003a14a5e8ac4d',
-                'https://github.com/pyca/cryptography',
-                'https://github.com/pyca/cryptography/security/advisories/GHSA-x4qr-2fvf-3mr5',
-                'https://linux.oracle.com/cve/CVE-2023-0286.html',
-                'https://linux.oracle.com/errata/ELSA-2025-7937.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-0286',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0003',
-                'https://rustsec.org/advisories/RUSTSEC-2023-0006.html',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://ubuntu.com/security/notices/USN-5844-1',
-                'https://ubuntu.com/security/notices/USN-5845-1',
-                'https://ubuntu.com/security/notices/USN-5845-2',
-                'https://ubuntu.com/security/notices/USN-6564-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-0286',
-                'https://www.openssl.org/news/secadv/20230207.txt'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: X.400 address type confusion in X.509 GeneralName'
-            },
-            {
-              'cve':  'CVE-2023-0464',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-295'
-              ],
-              'description':   "A security vulnerability has been identified in all supported versions\n\nof OpenSSL related to the verification of X.509 certificate chains\nthat include policy constraints.  Attackers may be able to exploit this\nvulnerability by creating a malicious certificate chain that triggers\nexponential use of computational resources, leading to a denial-of-service\n(DoS) attack on affected systems.\n\nPolicy processing is disabled by default but can be enabled by passing\nthe `-policy' argument to the command line utilities or by calling the\n`X509_VERIFY_PARAM_set1_policies()' function.",
-              'diffID':        'sha256:4fc242d58285699eca05db3cc7c7122a2b8e014d9481f323bd9277baacfa0628',
-              'fixedVersions': [
-                '1.1.1t-r2'
-              ],
-              'installedVersion': '1.1.1n-r0',
-              'packageName':      'libcrypto1.1',
-              'purl':             'pkg:apk/alpine/libcrypto1.1@1.1.1n-r0?arch=x86_64&distro=3.15.4',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2023:3722',
-                'https://access.redhat.com/security/cve/CVE-2023-0464',
-                'https://bugzilla.redhat.com/2181082',
-                'https://bugzilla.redhat.com/2182561',
-                'https://bugzilla.redhat.com/2182565',
-                'https://bugzilla.redhat.com/2188461',
-                'https://bugzilla.redhat.com/2207947',
-                'https://errata.almalinux.org/9/ALSA-2023-3722.html',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=2017771e2db3e2b96f89bbe8766c3209f6a99545',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=2dcd4f1e3115f38cefa43e3efbe9b801c27e642e',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=879f7080d7e141f415c79eaa3a8ac4a3dad0348b',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=959c59c7a0164117e7f8366466a32bb1f8d77ff1',
-                'https://linux.oracle.com/cve/CVE-2023-0464.html',
-                'https://linux.oracle.com/errata/ELSA-2023-3722.html',
-                'https://lists.debian.org/debian-lts-announce/2023/06/msg00011.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-0464',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://security.netapp.com/advisory/ntap-20230406-0006/',
-                'https://security.netapp.com/advisory/ntap-20240621-0006/',
-                'https://ubuntu.com/security/notices/USN-6039-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.couchbase.com/alerts/',
-                'https://www.cve.org/CVERecord?id=CVE-2023-0464',
-                'https://www.debian.org/security/2023/dsa-5417',
-                'https://www.openssl.org/news/secadv/20230322.txt'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: Denial of service by excessive resource usage in verifying X509 policy constraints'
-            },
-            {
-              'cve':  'CVE-2022-2097',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N'
-                },
-                'nvd': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N'
-                },
-                'redhat': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-327'
-              ],
-              'description':   "AES OCB mode for 32-bit x86 platforms using the AES-NI assembly optimised implementation will not encrypt the entirety of the data under some circumstances. This could reveal sixteen bytes of data that was preexisting in the memory that wasn't written. In the special case of \"in place\" encryption, sixteen bytes of the plaintext would be revealed. Since OpenSSL does not support OCB based cipher suites for TLS and DTLS, they are both unaffected. Fixed in OpenSSL 3.0.5 (Affected 3.0.0-3.0.4). Fixed in OpenSSL 1.1.1q (Affected 1.1.1-1.1.1p).",
-              'diffID':        'sha256:4fc242d58285699eca05db3cc7c7122a2b8e014d9481f323bd9277baacfa0628',
-              'fixedVersions': [
-                '1.1.1q-r0'
-              ],
-              'installedVersion': '1.1.1n-r0',
-              'packageName':      'libcrypto1.1',
-              'purl':             'pkg:apk/alpine/libcrypto1.1@1.1.1n-r0?arch=x86_64&distro=3.15.4',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2022:6224',
-                'https://access.redhat.com/security/cve/CVE-2022-2097',
-                'https://bugzilla.redhat.com/2081494',
-                'https://bugzilla.redhat.com/2087911',
-                'https://bugzilla.redhat.com/2087913',
-                'https://bugzilla.redhat.com/2097310',
-                'https://bugzilla.redhat.com/2104905',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2081494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2097310',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2100554',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2104905',
-                'https://cert-portal.siemens.com/productcert/pdf/ssa-332410.pdf',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-1292',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-2068',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-2097',
-                'https://errata.almalinux.org/9/ALSA-2022-6224.html',
-                'https://errata.rockylinux.org/RLSA-2022:5818',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=919925673d6c9cfed3c1085497f5dfbbed5fc431',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=a98f339ddd7e8f487d6e0088d4a9a42324885a93',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=919925673d6c9cfed3c1085497f5dfbbed5fc431',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=a98f339ddd7e8f487d6e0088d4a9a42324885a93',
-                'https://github.com/alexcrichton/openssl-src-rs',
-                'https://linux.oracle.com/cve/CVE-2022-2097.html',
-                'https://linux.oracle.com/errata/ELSA-2022-9955.html',
-                'https://lists.debian.org/debian-lts-announce/2023/02/msg00019.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/R6CK57NBQFTPUMXAPJURCGXUYT76NQAK',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/R6CK57NBQFTPUMXAPJURCGXUYT76NQAK/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/V6567JERRHHJW2GNGJGKDRNHR7SNPZK7',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/V6567JERRHHJW2GNGJGKDRNHR7SNPZK7/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VCMNWKERPBKOEBNL7CLTTX3ZZCZLH7XA',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VCMNWKERPBKOEBNL7CLTTX3ZZCZLH7XA/',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/R6CK57NBQFTPUMXAPJURCGXUYT76NQAK',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/R6CK57NBQFTPUMXAPJURCGXUYT76NQAK/',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/V6567JERRHHJW2GNGJGKDRNHR7SNPZK7',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/V6567JERRHHJW2GNGJGKDRNHR7SNPZK7/',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/VCMNWKERPBKOEBNL7CLTTX3ZZCZLH7XA',
-                'https://nvd.nist.gov/vuln/detail/CVE-2022-2097',
-                'https://rustsec.org/advisories/RUSTSEC-2022-0032.html',
-                'https://security.gentoo.org/glsa/202210-02',
-                'https://security.netapp.com/advisory/ntap-20220715-0011',
-                'https://security.netapp.com/advisory/ntap-20220715-0011/',
-                'https://security.netapp.com/advisory/ntap-20230420-0008',
-                'https://security.netapp.com/advisory/ntap-20230420-0008/',
-                'https://security.netapp.com/advisory/ntap-20240621-0006',
-                'https://security.netapp.com/advisory/ntap-20240621-0006/',
-                'https://ubuntu.com/security/notices/USN-5502-1',
-                'https://ubuntu.com/security/notices/USN-6457-1',
-                'https://www.cve.org/CVERecord?id=CVE-2022-2097',
-                'https://www.debian.org/security/2023/dsa-5343',
-                'https://www.openssl.org/news/secadv/20220705.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: AES OCB fails to encrypt some bytes'
-            },
-            {
-              'cve':  'CVE-2022-4304',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N'
-                },
-                'nvd': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N'
-                },
-                'redhat': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-203'
-              ],
-              'description':   'A timing based side channel exists in the OpenSSL RSA Decryption implementation\nwhich could be sufficient to recover a plaintext across a network in a\nBleichenbacher style attack. To achieve a successful decryption an attacker\nwould have to be able to send a very large number of trial messages for\ndecryption. The vulnerability affects all RSA padding modes: PKCS#1 v1.5,\nRSA-OEAP and RSASVE.\n\nFor example, in a TLS connection, RSA is commonly used by a client to send an\nencrypted pre-master secret to the server. An attacker that had observed a\ngenuine connection between a client and a server could use this flaw to send\ntrial messages to the server and record the time taken to process them. After a\nsufficiently large number of messages the attacker could recover the pre-master\nsecret used for the original connection and thus be able to decrypt the\napplication data sent over that connection.',
-              'diffID':        'sha256:4fc242d58285699eca05db3cc7c7122a2b8e014d9481f323bd9277baacfa0628',
-              'fixedVersions': [
-                '1.1.1t-r0'
-              ],
-              'installedVersion': '1.1.1n-r0',
-              'packageName':      'libcrypto1.1',
-              'purl':             'pkg:apk/alpine/libcrypto1.1@1.1.1n-r0?arch=x86_64&distro=3.15.4',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2023:2165',
-                'https://access.redhat.com/security/cve/CVE-2022-4304',
-                'https://bugzilla.redhat.com/1960321',
-                'https://bugzilla.redhat.com/2164440',
-                'https://bugzilla.redhat.com/2164487',
-                'https://bugzilla.redhat.com/2164492',
-                'https://bugzilla.redhat.com/2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144000',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144003',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144006',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144008',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144010',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144012',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144015',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144017',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144019',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2145170',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2158412',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164440',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164487',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164488',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164492',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164497',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164499',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164500',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4203',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4304',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4450',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0215',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0216',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0217',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0286',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0401',
-                'https://errata.almalinux.org/9/ALSA-2023-2165.html',
-                'https://errata.rockylinux.org/RLSA-2023:0946',
-                'https://linux.oracle.com/cve/CVE-2022-4304.html',
-                'https://linux.oracle.com/errata/ELSA-2023-32791.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2022-4304',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0003',
-                'https://rustsec.org/advisories/RUSTSEC-2023-0007.html',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://ubuntu.com/security/notices/USN-5844-1',
-                'https://ubuntu.com/security/notices/USN-6564-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2022-4304',
-                'https://www.openssl.org/news/secadv/20230207.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: timing attack in RSA Decryption implementation'
-            },
-            {
-              'cve':  'CVE-2023-0465',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N'
-                },
-                'redhat': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-295'
-              ],
-              'description':   "Applications that use a non-default option when verifying certificates may be\nvulnerable to an attack from a malicious CA to circumvent certain checks.\n\nInvalid certificate policies in leaf certificates are silently ignored by\nOpenSSL and other certificate policy checks are skipped for that certificate.\nA malicious CA could use this to deliberately assert invalid certificate policies\nin order to circumvent policy checking on the certificate altogether.\n\nPolicy processing is disabled by default but can be enabled by passing\nthe `-policy' argument to the command line utilities or by calling the\n`X509_VERIFY_PARAM_set1_policies()' function.",
-              'diffID':        'sha256:4fc242d58285699eca05db3cc7c7122a2b8e014d9481f323bd9277baacfa0628',
-              'fixedVersions': [
-                '1.1.1t-r2'
-              ],
-              'installedVersion': '1.1.1n-r0',
-              'packageName':      'libcrypto1.1',
-              'purl':             'pkg:apk/alpine/libcrypto1.1@1.1.1n-r0?arch=x86_64&distro=3.15.4',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2023:3722',
-                'https://access.redhat.com/security/cve/CVE-2023-0465',
-                'https://bugzilla.redhat.com/2181082',
-                'https://bugzilla.redhat.com/2182561',
-                'https://bugzilla.redhat.com/2182565',
-                'https://bugzilla.redhat.com/2188461',
-                'https://bugzilla.redhat.com/2207947',
-                'https://errata.almalinux.org/9/ALSA-2023-3722.html',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=10325176f3d3e98c6e2b3bf5ab1e3b334de6947a',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=1dd43e0709fece299b15208f36cc7c76209ba0bb',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=b013765abfa80036dc779dd0e50602c57bb3bf95',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=facfb1ab745646e97a1920977ae4a9965ea61d5c',
-                'https://linux.oracle.com/cve/CVE-2023-0465.html',
-                'https://linux.oracle.com/errata/ELSA-2023-3722.html',
-                'https://lists.debian.org/debian-lts-announce/2023/06/msg00011.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-0465',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://security.netapp.com/advisory/ntap-20230414-0001/',
-                'https://ubuntu.com/security/notices/USN-6039-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-0465',
-                'https://www.debian.org/security/2023/dsa-5417',
-                'https://www.openssl.org/news/secadv/20230328.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: Invalid certificate policies in leaf certificates are silently ignored'
-            },
-            {
-              'cve':  'CVE-2023-2650',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '6.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-770'
-              ],
-              'description':   "Issue summary: Processing some specially crafted ASN.1 object identifiers or\ndata containing them may be very slow.\n\nImpact summary: Applications that use OBJ_obj2txt() directly, or use any of\nthe OpenSSL subsystems OCSP, PKCS7/SMIME, CMS, CMP/CRMF or TS with no message\nsize limit may experience notable to very long delays when processing those\nmessages, which may lead to a Denial of Service.\n\nAn OBJECT IDENTIFIER is composed of a series of numbers - sub-identifiers -\nmost of which have no size limit.  OBJ_obj2txt() may be used to translate\nan ASN.1 OBJECT IDENTIFIER given in DER encoding form (using the OpenSSL\ntype ASN1_OBJECT) to its canonical numeric text form, which are the\nsub-identifiers of the OBJECT IDENTIFIER in decimal form, separated by\nperiods.\n\nWhen one of the sub-identifiers in the OBJECT IDENTIFIER is very large\n(these are sizes that are seen as absurdly large, taking up tens or hundreds\nof KiBs), the translation to a decimal number in text may take a very long\ntime.  The time complexity is O(n^2) with 'n' being the size of the\nsub-identifiers in bytes (*).\n\nWith OpenSSL 3.0, support to fetch cryptographic algorithms using names /\nidentifiers in string form was introduced.  This includes using OBJECT\nIDENTIFIERs in canonical numeric text form as identifiers for fetching\nalgorithms.\n\nSuch OBJECT IDENTIFIERs may be received through the ASN.1 structure\nAlgorithmIdentifier, which is commonly used in multiple protocols to specify\nwhat cryptographic algorithm should be used to sign or verify, encrypt or\ndecrypt, or digest passed data.\n\nApplications that call OBJ_obj2txt() directly with untrusted data are\naffected, with any version of OpenSSL.  If the use is for the mere purpose\nof display, the severity is considered low.\n\nIn OpenSSL 3.0 and newer, this affects the subsystems OCSP, PKCS7/SMIME,\nCMS, CMP/CRMF or TS.  It also impacts anything that processes X.509\ncertificates, including simple things like verifying its signature.\n\nThe impact on TLS is relatively low, because all versions of OpenSSL have a\n100KiB limit on the peer's certificate chain.  Additionally, this only\nimpacts clients, or servers that have explicitly enabled client\nauthentication.\n\nIn OpenSSL 1.1.1 and 1.0.2, this only affects displaying diverse objects,\nsuch as X.509 certificates.  This is assumed to not happen in such a way\nthat it would cause a Denial of Service, so these versions are considered\nnot affected by this issue in such a way that it would be cause for concern,\nand the severity is therefore considered low.",
-              'diffID':        'sha256:4fc242d58285699eca05db3cc7c7122a2b8e014d9481f323bd9277baacfa0628',
-              'fixedVersions': [
-                '1.1.1u-r0'
-              ],
-              'installedVersion': '1.1.1n-r0',
-              'packageName':      'libcrypto1.1',
-              'purl':             'pkg:apk/alpine/libcrypto1.1@1.1.1n-r0?arch=x86_64&distro=3.15.4',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2023/05/30/1',
-                'https://access.redhat.com/errata/RHSA-2023:6330',
-                'https://access.redhat.com/security/cve/CVE-2023-2650',
-                'https://bugzilla.redhat.com/1858038',
-                'https://bugzilla.redhat.com/2207947',
-                'https://errata.almalinux.org/9/ALSA-2023-6330.html',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=423a2bc737a908ad0c77bda470b2b59dc879936b',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=853c5e56ee0b8650c73140816bb8b91d6163422c',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=9e209944b35cf82368071f160a744b6178f9b098',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=db779b0e10b047f2585615e0b8f2acdf21f8544a',
-                'https://linux.oracle.com/cve/CVE-2023-2650.html',
-                'https://linux.oracle.com/errata/ELSA-2023-6330.html',
-                'https://lists.debian.org/debian-lts-announce/2023/06/msg00011.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-2650',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0009',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://security.netapp.com/advisory/ntap-20230703-0001/',
-                'https://security.netapp.com/advisory/ntap-20231027-0009/',
-                'https://ubuntu.com/security/notices/USN-6119-1',
-                'https://ubuntu.com/security/notices/USN-6188-1',
-                'https://ubuntu.com/security/notices/USN-6672-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-2650',
-                'https://www.debian.org/security/2023/dsa-5417',
-                'https://www.openssl.org/news/secadv/20230530.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: Possible DoS translating ASN.1 object identifiers'
-            },
-            {
-              'cve':  'CVE-2023-3446',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L'
-                },
-                'redhat': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L'
-                }
-              },
-              'cwes': [
-                'CWE-606',
-                'CWE-1333'
-              ],
-              'description':   "Issue summary: Checking excessively long DH keys or parameters may be very slow.\n\nImpact summary: Applications that use the functions DH_check(), DH_check_ex()\nor EVP_PKEY_param_check() to check a DH key or DH parameters may experience long\ndelays. Where the key or parameters that are being checked have been obtained\nfrom an untrusted source this may lead to a Denial of Service.\n\nThe function DH_check() performs various checks on DH parameters. One of those\nchecks confirms that the modulus ('p' parameter) is not too large. Trying to use\na very large modulus is slow and OpenSSL will not normally use a modulus which\nis over 10,000 bits in length.\n\nHowever the DH_check() function checks numerous aspects of the key or parameters\nthat have been supplied. Some of those checks use the supplied modulus value\neven if it has already been found to be too large.\n\nAn application that calls DH_check() and supplies a key or parameters obtained\nfrom an untrusted source could be vulernable to a Denial of Service attack.\n\nThe function DH_check() is itself called by a number of other OpenSSL functions.\nAn application calling any of those other functions may similarly be affected.\nThe other functions affected by this are DH_check_ex() and\nEVP_PKEY_param_check().\n\nAlso vulnerable are the OpenSSL dhparam and pkeyparam command line applications\nwhen using the '-check' option.\n\nThe OpenSSL SSL/TLS implementation is not affected by this issue.\nThe OpenSSL 3.0 and 3.1 FIPS providers are not affected by this issue.",
-              'diffID':        'sha256:4fc242d58285699eca05db3cc7c7122a2b8e014d9481f323bd9277baacfa0628',
-              'fixedVersions': [
-                '1.1.1u-r2'
-              ],
-              'installedVersion': '1.1.1n-r0',
-              'packageName':      'libcrypto1.1',
-              'purl':             'pkg:apk/alpine/libcrypto1.1@1.1.1n-r0?arch=x86_64&distro=3.15.4',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2023/07/19/4',
-                'http://www.openwall.com/lists/oss-security/2023/07/19/5',
-                'http://www.openwall.com/lists/oss-security/2023/07/19/6',
-                'http://www.openwall.com/lists/oss-security/2023/07/31/1',
-                'http://www.openwall.com/lists/oss-security/2024/05/16/1',
-                'https://access.redhat.com/errata/RHSA-2024:2447',
-                'https://access.redhat.com/security/cve/CVE-2023-3446',
-                'https://bugzilla.redhat.com/2223016',
-                'https://bugzilla.redhat.com/2224962',
-                'https://bugzilla.redhat.com/2227852',
-                'https://bugzilla.redhat.com/2248616',
-                'https://bugzilla.redhat.com/2257571',
-                'https://bugzilla.redhat.com/2258502',
-                'https://bugzilla.redhat.com/2259944',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2224962',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2257582',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2257583',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2258677',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2258688',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2258691',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2258694',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2258700',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-36763',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-36764',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3446',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45229',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45231',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45232',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45233',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45235',
-                'https://errata.almalinux.org/9/ALSA-2024-2447.html',
-                'https://errata.rockylinux.org/RLSA-2024:2264',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=1fa20cf2f506113c761777127a38bce5068740eb',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=8780a896543a654e757db1b9396383f9d8095528',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=9a0a4d3c1e7138915563c0df4fe6a3f9377b839c',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=fc9867c1e03c22ebf56943be205202e576aabf23',
-                'https://linux.oracle.com/cve/CVE-2023-3446.html',
-                'https://linux.oracle.com/errata/ELSA-2024-2447.html',
-                'https://lists.debian.org/debian-lts-announce/2023/08/msg00019.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-3446',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://security.netapp.com/advisory/ntap-20230803-0011/',
-                'https://ubuntu.com/security/notices/USN-6435-1',
-                'https://ubuntu.com/security/notices/USN-6435-2',
-                'https://ubuntu.com/security/notices/USN-6450-1',
-                'https://ubuntu.com/security/notices/USN-6709-1',
-                'https://ubuntu.com/security/notices/USN-7018-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-3446',
-                'https://www.openssl.org/news/secadv/20230719.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: Excessive time spent checking DH keys and parameters'
-            },
-            {
-              'cve':  'CVE-2023-3817',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L'
-                },
-                'redhat': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L'
-                }
-              },
-              'cwes': [
-                'CWE-606',
-                'CWE-834'
-              ],
-              'description':   'Issue summary: Checking excessively long DH keys or parameters may be very slow.\n\nImpact summary: Applications that use the functions DH_check(), DH_check_ex()\nor EVP_PKEY_param_check() to check a DH key or DH parameters may experience long\ndelays. Where the key or parameters that are being checked have been obtained\nfrom an untrusted source this may lead to a Denial of Service.\n\nThe function DH_check() performs various checks on DH parameters. After fixing\nCVE-2023-3446 it was discovered that a large q parameter value can also trigger\nan overly long computation during some of these checks. A correct q value,\nif present, cannot be larger than the modulus p parameter, thus it is\nunnecessary to perform these checks if q is larger than p.\n\nAn application that calls DH_check() and supplies a key or parameters obtained\nfrom an untrusted source could be vulnerable to a Denial of Service attack.\n\nThe function DH_check() is itself called by a number of other OpenSSL functions.\nAn application calling any of those other functions may similarly be affected.\nThe other functions affected by this are DH_check_ex() and\nEVP_PKEY_param_check().\n\nAlso vulnerable are the OpenSSL dhparam and pkeyparam command line applications\nwhen using the "-check" option.\n\nThe OpenSSL SSL/TLS implementation is not affected by this issue.\n\nThe OpenSSL 3.0 and 3.1 FIPS providers are not affected by this issue.',
-              'diffID':        'sha256:4fc242d58285699eca05db3cc7c7122a2b8e014d9481f323bd9277baacfa0628',
-              'fixedVersions': [
-                '1.1.1v-r0'
-              ],
-              'installedVersion': '1.1.1n-r0',
-              'packageName':      'libcrypto1.1',
-              'purl':             'pkg:apk/alpine/libcrypto1.1@1.1.1n-r0?arch=x86_64&distro=3.15.4',
-              'references':       [
-                'http://seclists.org/fulldisclosure/2023/Jul/43',
-                'http://www.openwall.com/lists/oss-security/2023/07/31/1',
-                'http://www.openwall.com/lists/oss-security/2023/09/22/11',
-                'http://www.openwall.com/lists/oss-security/2023/09/22/9',
-                'http://www.openwall.com/lists/oss-security/2023/11/06/2',
-                'https://access.redhat.com/errata/RHSA-2024:2447',
-                'https://access.redhat.com/security/cve/CVE-2023-3817',
-                'https://bugzilla.redhat.com/2223016',
-                'https://bugzilla.redhat.com/2224962',
-                'https://bugzilla.redhat.com/2227852',
-                'https://bugzilla.redhat.com/2248616',
-                'https://bugzilla.redhat.com/2257571',
-                'https://bugzilla.redhat.com/2258502',
-                'https://bugzilla.redhat.com/2259944',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2224962',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2227852',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2248616',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2270358',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3446',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3817',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-5678',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-2408',
-                'https://errata.almalinux.org/9/ALSA-2024-2447.html',
-                'https://errata.rockylinux.org/RLSA-2023:7877',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=6a1eb62c29db6cb5eec707f9338aee00f44e26f5',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=869ad69aadd985c7b8ca6f4e5dd0eb274c9f3644',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=9002fd07327a91f35ba6c1307e71fa6fd4409b7f',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=91ddeba0f2269b017dc06c46c993a788974b1aa5',
-                'https://linux.oracle.com/cve/CVE-2023-3817.html',
-                'https://linux.oracle.com/errata/ELSA-2024-2447.html',
-                'https://lists.debian.org/debian-lts-announce/2023/08/msg00019.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-3817',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://security.netapp.com/advisory/ntap-20230818-0014/',
-                'https://security.netapp.com/advisory/ntap-20231027-0008/',
-                'https://security.netapp.com/advisory/ntap-20240621-0006/',
-                'https://ubuntu.com/security/notices/USN-6435-1',
-                'https://ubuntu.com/security/notices/USN-6435-2',
-                'https://ubuntu.com/security/notices/USN-6450-1',
-                'https://ubuntu.com/security/notices/USN-6709-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-3817',
-                'https://www.openssl.org/news/secadv/20230731.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'OpenSSL: Excessive time spent checking DH q parameter value'
-            },
-            {
-              'cve':  'CVE-2023-5678',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L'
-                },
-                'redhat': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L'
-                }
-              },
-              'cwes': [
-                'CWE-606',
-                'CWE-754'
-              ],
-              'description':   "Issue summary: Generating excessively long X9.42 DH keys or checking\nexcessively long X9.42 DH keys or parameters may be very slow.\n\nImpact summary: Applications that use the functions DH_generate_key() to\ngenerate an X9.42 DH key may experience long delays.  Likewise, applications\nthat use DH_check_pub_key(), DH_check_pub_key_ex() or EVP_PKEY_public_check()\nto check an X9.42 DH key or X9.42 DH parameters may experience long delays.\nWhere the key or parameters that are being checked have been obtained from\nan untrusted source this may lead to a Denial of Service.\n\nWhile DH_check() performs all the necessary checks (as of CVE-2023-3817),\nDH_check_pub_key() doesn't make any of these checks, and is therefore\nvulnerable for excessively large P and Q parameters.\n\nLikewise, while DH_generate_key() performs a check for an excessively large\nP, it doesn't check for an excessively large Q.\n\nAn application that calls DH_generate_key() or DH_check_pub_key() and\nsupplies a key or parameters obtained from an untrusted source could be\nvulnerable to a Denial of Service attack.\n\nDH_generate_key() and DH_check_pub_key() are also called by a number of\nother OpenSSL functions.  An application calling any of those other\nfunctions may similarly be affected.  The other functions affected by this\nare DH_check_pub_key_ex(), EVP_PKEY_public_check(), and EVP_PKEY_generate().\n\nAlso vulnerable are the OpenSSL pkey command line application when using the\n\"-pubcheck\" option, as well as the OpenSSL genpkey command line application.\n\nThe OpenSSL SSL/TLS implementation is not affected by this issue.\n\nThe OpenSSL 3.0 and 3.1 FIPS providers are not affected by this issue.",
-              'diffID':        'sha256:4fc242d58285699eca05db3cc7c7122a2b8e014d9481f323bd9277baacfa0628',
-              'fixedVersions': [
-                '1.1.1w-r1'
-              ],
-              'installedVersion': '1.1.1n-r0',
-              'packageName':      'libcrypto1.1',
-              'purl':             'pkg:apk/alpine/libcrypto1.1@1.1.1n-r0?arch=x86_64&distro=3.15.4',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2024/03/11/1',
-                'https://access.redhat.com/errata/RHSA-2024:2447',
-                'https://access.redhat.com/security/cve/CVE-2023-5678',
-                'https://bugzilla.redhat.com/2223016',
-                'https://bugzilla.redhat.com/2224962',
-                'https://bugzilla.redhat.com/2227852',
-                'https://bugzilla.redhat.com/2248616',
-                'https://bugzilla.redhat.com/2257571',
-                'https://bugzilla.redhat.com/2258502',
-                'https://bugzilla.redhat.com/2259944',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2224962',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2227852',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2248616',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2270358',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3446',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3817',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-5678',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-2408',
-                'https://errata.almalinux.org/9/ALSA-2024-2447.html',
-                'https://errata.rockylinux.org/RLSA-2023:7877',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=34efaef6c103d636ab507a0cc34dca4d3aecc055',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=710fee740904b6290fef0dd5536fbcedbc38ff0c',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=db925ae2e65d0d925adef429afc37f75bd1c2017',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=ddeb4b6c6d527e54ce9a99cba785c0f7776e54b6',
-                'https://linux.oracle.com/cve/CVE-2023-5678.html',
-                'https://linux.oracle.com/errata/ELSA-2024-2447.html',
-                'https://lists.debian.org/debian-lts-announce/2024/10/msg00033.html',
-                'https://lists.debian.org/debian-lts-announce/2024/11/msg00000.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-5678',
-                'https://security.netapp.com/advisory/ntap-20231130-0010/',
-                'https://ubuntu.com/security/notices/USN-6622-1',
-                'https://ubuntu.com/security/notices/USN-6632-1',
-                'https://ubuntu.com/security/notices/USN-6709-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-5678',
-                'https://www.openssl.org/news/secadv/20231106.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: Generating excessively long X9.42 DH keys or checking excessively long X9.42 DH keys or parameters may be very slow'
-            },
-            {
-              'cve':  'CVE-2022-4450',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'nvd': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-415'
-              ],
-              'description':   'The function PEM_read_bio_ex() reads a PEM file from a BIO and parses and\ndecodes the "name" (e.g. "CERTIFICATE"), any header data and the payload data.\nIf the function succeeds then the "name_out", "header" and "data" arguments are\npopulated with pointers to buffers containing the relevant decoded data. The\ncaller is responsible for freeing those buffers. It is possible to construct a\nPEM file that results in 0 bytes of payload data. In this case PEM_read_bio_ex()\nwill return a failure code but will populate the header argument with a pointer\nto a buffer that has already been freed. If the caller also frees this buffer\nthen a double free will occur. This will most likely lead to a crash. This\ncould be exploited by an attacker who has the ability to supply malicious PEM\nfiles for parsing to achieve a denial of service attack.\n\nThe functions PEM_read_bio() and PEM_read() are simple wrappers around\nPEM_read_bio_ex() and therefore these functions are also directly affected.\n\nThese functions are also called indirectly by a number of other OpenSSL\nfunctions including PEM_X509_INFO_read_bio_ex() and\nSSL_CTX_use_serverinfo_file() which are also vulnerable. Some OpenSSL internal\nuses of these functions are not vulnerable because the caller does not free the\nheader argument if PEM_read_bio_ex() returns a failure code. These locations\ninclude the PEM_read_bio_TYPE() functions as well as the decoders introduced in\nOpenSSL 3.0.\n\nThe OpenSSL asn1parse command line application is also impacted by this issue.',
-              'diffID':        'sha256:4fc242d58285699eca05db3cc7c7122a2b8e014d9481f323bd9277baacfa0628',
-              'fixedVersions': [
-                '1.1.1t-r0'
-              ],
-              'installedVersion': '1.1.1n-r0',
-              'packageName':      'libssl1.1',
-              'purl':             'pkg:apk/alpine/libssl1.1@1.1.1n-r0?arch=x86_64&distro=3.15.4',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2023:2165',
-                'https://access.redhat.com/security/cve/CVE-2022-4450',
-                'https://bugzilla.redhat.com/1960321',
-                'https://bugzilla.redhat.com/2164440',
-                'https://bugzilla.redhat.com/2164487',
-                'https://bugzilla.redhat.com/2164492',
-                'https://bugzilla.redhat.com/2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144000',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144003',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144006',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144008',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144010',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144012',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144015',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144017',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144019',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2145170',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2158412',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164440',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164487',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164488',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164492',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164497',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164499',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164500',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4203',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4304',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4450',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0215',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0216',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0217',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0286',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0401',
-                'https://errata.almalinux.org/9/ALSA-2023-2165.html',
-                'https://errata.rockylinux.org/RLSA-2023:0946',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=63bcf189be73a9cc1264059bed6f57974be74a83',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=bbcf509bd046b34cca19c766bbddc31683d0858b',
-                'https://linux.oracle.com/cve/CVE-2022-4450.html',
-                'https://linux.oracle.com/errata/ELSA-2023-32791.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2022-4450',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0003',
-                'https://rustsec.org/advisories/RUSTSEC-2023-0010.html',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://ubuntu.com/security/notices/USN-5844-1',
-                'https://ubuntu.com/security/notices/USN-6564-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2022-4450',
-                'https://www.openssl.org/news/secadv/20230207.txt'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: double free after calling PEM_read_bio_ex'
-            },
-            {
-              'cve':  'CVE-2023-0215',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'nvd': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   'The public API function BIO_new_NDEF is a helper function used for streaming\nASN.1 data via a BIO. It is primarily used internally to OpenSSL to support the\nSMIME, CMS and PKCS7 streaming capabilities, but may also be called directly by\nend user applications.\n\nThe function receives a BIO from the caller, prepends a new BIO_f_asn1 filter\nBIO onto the front of it to form a BIO chain, and then returns the new head of\nthe BIO chain to the caller. Under certain conditions, for example if a CMS\nrecipient public key is invalid, the new filter BIO is freed and the function\nreturns a NULL result indicating a failure. However, in this case, the BIO chain\nis not properly cleaned up and the BIO passed by the caller still retains\ninternal pointers to the previously freed filter BIO. If the caller then goes on\nto call BIO_pop() on the BIO then a use-after-free will occur. This will most\nlikely result in a crash.\n\n\n\nThis scenario occurs directly in the internal function B64_write_ASN1() which\nmay cause BIO_new_NDEF() to be called and will subsequently call BIO_pop() on\nthe BIO. This internal function is in turn called by the public API functions\nPEM_write_bio_ASN1_stream, PEM_write_bio_CMS_stream, PEM_write_bio_PKCS7_stream,\nSMIME_write_ASN1, SMIME_write_CMS and SMIME_write_PKCS7.\n\nOther public API functions that may be impacted by this include\ni2d_ASN1_bio_stream, BIO_new_CMS, BIO_new_PKCS7, i2d_CMS_bio_stream and\ni2d_PKCS7_bio_stream.\n\nThe OpenSSL cms and smime command line applications are similarly affected.',
-              'diffID':        'sha256:4fc242d58285699eca05db3cc7c7122a2b8e014d9481f323bd9277baacfa0628',
-              'fixedVersions': [
-                '1.1.1t-r0'
-              ],
-              'installedVersion': '1.1.1n-r0',
-              'packageName':      'libssl1.1',
-              'purl':             'pkg:apk/alpine/libssl1.1@1.1.1n-r0?arch=x86_64&distro=3.15.4',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2023:2165',
-                'https://access.redhat.com/security/cve/CVE-2023-0215',
-                'https://bugzilla.redhat.com/1960321',
-                'https://bugzilla.redhat.com/2164440',
-                'https://bugzilla.redhat.com/2164487',
-                'https://bugzilla.redhat.com/2164492',
-                'https://bugzilla.redhat.com/2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144000',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144003',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144006',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144008',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144010',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144012',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144015',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144017',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144019',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2145170',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2158412',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164440',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164487',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164488',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164492',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164497',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164499',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164500',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4203',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4304',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4450',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0215',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0216',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0217',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0286',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0401',
-                'https://errata.almalinux.org/9/ALSA-2023-2165.html',
-                'https://errata.rockylinux.org/RLSA-2023:0946',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=8818064ce3c3c0f1b740a5aaba2a987e75bfbafd',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=9816136fe31d92ace4037d5da5257f763aeeb4eb',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=c3829dd8825c654652201e16f8a0a0c46ee3f344',
-                'https://linux.oracle.com/cve/CVE-2023-0215.html',
-                'https://linux.oracle.com/errata/ELSA-2023-32791.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-0215',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0003',
-                'https://rustsec.org/advisories/RUSTSEC-2023-0009.html',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://security.netapp.com/advisory/ntap-20230427-0007',
-                'https://security.netapp.com/advisory/ntap-20230427-0007/',
-                'https://security.netapp.com/advisory/ntap-20230427-0009',
-                'https://security.netapp.com/advisory/ntap-20230427-0009/',
-                'https://security.netapp.com/advisory/ntap-20240621-0006',
-                'https://security.netapp.com/advisory/ntap-20240621-0006/',
-                'https://ubuntu.com/security/notices/USN-5844-1',
-                'https://ubuntu.com/security/notices/USN-5845-1',
-                'https://ubuntu.com/security/notices/USN-5845-2',
-                'https://ubuntu.com/security/notices/USN-6564-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-0215',
-                'https://www.openssl.org/news/secadv/20230207.txt'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: use-after-free following BIO_new_NDEF'
-            },
-            {
-              'cve':  'CVE-2023-0286',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '7.4',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H'
-                },
-                'nvd': {
-                  'v3score':  '7.4',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.4',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-843'
-              ],
-              'description':   'There is a type confusion vulnerability relating to X.400 address processing\ninside an X.509 GeneralName. X.400 addresses were parsed as an ASN1_STRING but\nthe public structure definition for GENERAL_NAME incorrectly specified the type\nof the x400Address field as ASN1_TYPE. This field is subsequently interpreted by\nthe OpenSSL function GENERAL_NAME_cmp as an ASN1_TYPE rather than an\nASN1_STRING.\n\nWhen CRL checking is enabled (i.e. the application sets the\nX509_V_FLAG_CRL_CHECK flag), this vulnerability may allow an attacker to pass\narbitrary pointers to a memcmp call, enabling them to read memory contents or\nenact a denial of service. In most cases, the attack requires the attacker to\nprovide both the certificate chain and CRL, neither of which need to have a\nvalid signature. If the attacker only controls one of these inputs, the other\ninput must already contain an X.400 address as a CRL distribution point, which\nis uncommon. As such, this vulnerability is most likely to only affect\napplications which have implemented their own functionality for retrieving CRLs\nover a network.',
-              'diffID':        'sha256:4fc242d58285699eca05db3cc7c7122a2b8e014d9481f323bd9277baacfa0628',
-              'fixedVersions': [
-                '1.1.1t-r0'
-              ],
-              'installedVersion': '1.1.1n-r0',
-              'packageName':      'libssl1.1',
-              'purl':             'pkg:apk/alpine/libssl1.1@1.1.1n-r0?arch=x86_64&distro=3.15.4',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2025:7937',
-                'https://access.redhat.com/security/cve/CVE-2023-0286',
-                'https://access.redhat.com/security/cve/cve-2023-0286',
-                'https://bugzilla.redhat.com/2164440',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144000',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144003',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144006',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144008',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144010',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144012',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144015',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144017',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144019',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2145170',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2158412',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164440',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164487',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164488',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164492',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164497',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164499',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164500',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4203',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4304',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4450',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0215',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0216',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0217',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0286',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0401',
-                'https://errata.almalinux.org/9/ALSA-2025-7937.html',
-                'https://errata.rockylinux.org/RLSA-2023:0946',
-                'https://ftp.openbsd.org/pub/OpenBSD/LibreSSL/libressl-3.6.2-relnotes.txt',
-                'https://ftp.openbsd.org/pub/OpenBSD/patches/7.2/common/018_x509.patch.sig',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=2c6c9d439b484e1ba9830d8454a34fa4f80fdfe9',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=2f7530077e0ef79d98718138716bc51ca0cad658',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=fd2af07dc083a350c959147097003a14a5e8ac4d',
-                'https://github.com/pyca/cryptography',
-                'https://github.com/pyca/cryptography/security/advisories/GHSA-x4qr-2fvf-3mr5',
-                'https://linux.oracle.com/cve/CVE-2023-0286.html',
-                'https://linux.oracle.com/errata/ELSA-2025-7937.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-0286',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0003',
-                'https://rustsec.org/advisories/RUSTSEC-2023-0006.html',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://ubuntu.com/security/notices/USN-5844-1',
-                'https://ubuntu.com/security/notices/USN-5845-1',
-                'https://ubuntu.com/security/notices/USN-5845-2',
-                'https://ubuntu.com/security/notices/USN-6564-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-0286',
-                'https://www.openssl.org/news/secadv/20230207.txt'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: X.400 address type confusion in X.509 GeneralName'
-            },
-            {
-              'cve':  'CVE-2023-0464',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-295'
-              ],
-              'description':   "A security vulnerability has been identified in all supported versions\n\nof OpenSSL related to the verification of X.509 certificate chains\nthat include policy constraints.  Attackers may be able to exploit this\nvulnerability by creating a malicious certificate chain that triggers\nexponential use of computational resources, leading to a denial-of-service\n(DoS) attack on affected systems.\n\nPolicy processing is disabled by default but can be enabled by passing\nthe `-policy' argument to the command line utilities or by calling the\n`X509_VERIFY_PARAM_set1_policies()' function.",
-              'diffID':        'sha256:4fc242d58285699eca05db3cc7c7122a2b8e014d9481f323bd9277baacfa0628',
-              'fixedVersions': [
-                '1.1.1t-r2'
-              ],
-              'installedVersion': '1.1.1n-r0',
-              'packageName':      'libssl1.1',
-              'purl':             'pkg:apk/alpine/libssl1.1@1.1.1n-r0?arch=x86_64&distro=3.15.4',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2023:3722',
-                'https://access.redhat.com/security/cve/CVE-2023-0464',
-                'https://bugzilla.redhat.com/2181082',
-                'https://bugzilla.redhat.com/2182561',
-                'https://bugzilla.redhat.com/2182565',
-                'https://bugzilla.redhat.com/2188461',
-                'https://bugzilla.redhat.com/2207947',
-                'https://errata.almalinux.org/9/ALSA-2023-3722.html',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=2017771e2db3e2b96f89bbe8766c3209f6a99545',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=2dcd4f1e3115f38cefa43e3efbe9b801c27e642e',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=879f7080d7e141f415c79eaa3a8ac4a3dad0348b',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=959c59c7a0164117e7f8366466a32bb1f8d77ff1',
-                'https://linux.oracle.com/cve/CVE-2023-0464.html',
-                'https://linux.oracle.com/errata/ELSA-2023-3722.html',
-                'https://lists.debian.org/debian-lts-announce/2023/06/msg00011.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-0464',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://security.netapp.com/advisory/ntap-20230406-0006/',
-                'https://security.netapp.com/advisory/ntap-20240621-0006/',
-                'https://ubuntu.com/security/notices/USN-6039-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.couchbase.com/alerts/',
-                'https://www.cve.org/CVERecord?id=CVE-2023-0464',
-                'https://www.debian.org/security/2023/dsa-5417',
-                'https://www.openssl.org/news/secadv/20230322.txt'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: Denial of service by excessive resource usage in verifying X509 policy constraints'
-            },
-            {
-              'cve':  'CVE-2022-2097',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N'
-                },
-                'nvd': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N'
-                },
-                'redhat': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-327'
-              ],
-              'description':   "AES OCB mode for 32-bit x86 platforms using the AES-NI assembly optimised implementation will not encrypt the entirety of the data under some circumstances. This could reveal sixteen bytes of data that was preexisting in the memory that wasn't written. In the special case of \"in place\" encryption, sixteen bytes of the plaintext would be revealed. Since OpenSSL does not support OCB based cipher suites for TLS and DTLS, they are both unaffected. Fixed in OpenSSL 3.0.5 (Affected 3.0.0-3.0.4). Fixed in OpenSSL 1.1.1q (Affected 1.1.1-1.1.1p).",
-              'diffID':        'sha256:4fc242d58285699eca05db3cc7c7122a2b8e014d9481f323bd9277baacfa0628',
-              'fixedVersions': [
-                '1.1.1q-r0'
-              ],
-              'installedVersion': '1.1.1n-r0',
-              'packageName':      'libssl1.1',
-              'purl':             'pkg:apk/alpine/libssl1.1@1.1.1n-r0?arch=x86_64&distro=3.15.4',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2022:6224',
-                'https://access.redhat.com/security/cve/CVE-2022-2097',
-                'https://bugzilla.redhat.com/2081494',
-                'https://bugzilla.redhat.com/2087911',
-                'https://bugzilla.redhat.com/2087913',
-                'https://bugzilla.redhat.com/2097310',
-                'https://bugzilla.redhat.com/2104905',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2081494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2097310',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2100554',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2104905',
-                'https://cert-portal.siemens.com/productcert/pdf/ssa-332410.pdf',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-1292',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-2068',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-2097',
-                'https://errata.almalinux.org/9/ALSA-2022-6224.html',
-                'https://errata.rockylinux.org/RLSA-2022:5818',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=919925673d6c9cfed3c1085497f5dfbbed5fc431',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=a98f339ddd7e8f487d6e0088d4a9a42324885a93',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=919925673d6c9cfed3c1085497f5dfbbed5fc431',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=a98f339ddd7e8f487d6e0088d4a9a42324885a93',
-                'https://github.com/alexcrichton/openssl-src-rs',
-                'https://linux.oracle.com/cve/CVE-2022-2097.html',
-                'https://linux.oracle.com/errata/ELSA-2022-9955.html',
-                'https://lists.debian.org/debian-lts-announce/2023/02/msg00019.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/R6CK57NBQFTPUMXAPJURCGXUYT76NQAK',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/R6CK57NBQFTPUMXAPJURCGXUYT76NQAK/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/V6567JERRHHJW2GNGJGKDRNHR7SNPZK7',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/V6567JERRHHJW2GNGJGKDRNHR7SNPZK7/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VCMNWKERPBKOEBNL7CLTTX3ZZCZLH7XA',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VCMNWKERPBKOEBNL7CLTTX3ZZCZLH7XA/',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/R6CK57NBQFTPUMXAPJURCGXUYT76NQAK',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/R6CK57NBQFTPUMXAPJURCGXUYT76NQAK/',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/V6567JERRHHJW2GNGJGKDRNHR7SNPZK7',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/V6567JERRHHJW2GNGJGKDRNHR7SNPZK7/',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/VCMNWKERPBKOEBNL7CLTTX3ZZCZLH7XA',
-                'https://nvd.nist.gov/vuln/detail/CVE-2022-2097',
-                'https://rustsec.org/advisories/RUSTSEC-2022-0032.html',
-                'https://security.gentoo.org/glsa/202210-02',
-                'https://security.netapp.com/advisory/ntap-20220715-0011',
-                'https://security.netapp.com/advisory/ntap-20220715-0011/',
-                'https://security.netapp.com/advisory/ntap-20230420-0008',
-                'https://security.netapp.com/advisory/ntap-20230420-0008/',
-                'https://security.netapp.com/advisory/ntap-20240621-0006',
-                'https://security.netapp.com/advisory/ntap-20240621-0006/',
-                'https://ubuntu.com/security/notices/USN-5502-1',
-                'https://ubuntu.com/security/notices/USN-6457-1',
-                'https://www.cve.org/CVERecord?id=CVE-2022-2097',
-                'https://www.debian.org/security/2023/dsa-5343',
-                'https://www.openssl.org/news/secadv/20220705.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: AES OCB fails to encrypt some bytes'
-            },
-            {
-              'cve':  'CVE-2022-4304',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N'
-                },
-                'nvd': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N'
-                },
-                'redhat': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-203'
-              ],
-              'description':   'A timing based side channel exists in the OpenSSL RSA Decryption implementation\nwhich could be sufficient to recover a plaintext across a network in a\nBleichenbacher style attack. To achieve a successful decryption an attacker\nwould have to be able to send a very large number of trial messages for\ndecryption. The vulnerability affects all RSA padding modes: PKCS#1 v1.5,\nRSA-OEAP and RSASVE.\n\nFor example, in a TLS connection, RSA is commonly used by a client to send an\nencrypted pre-master secret to the server. An attacker that had observed a\ngenuine connection between a client and a server could use this flaw to send\ntrial messages to the server and record the time taken to process them. After a\nsufficiently large number of messages the attacker could recover the pre-master\nsecret used for the original connection and thus be able to decrypt the\napplication data sent over that connection.',
-              'diffID':        'sha256:4fc242d58285699eca05db3cc7c7122a2b8e014d9481f323bd9277baacfa0628',
-              'fixedVersions': [
-                '1.1.1t-r0'
-              ],
-              'installedVersion': '1.1.1n-r0',
-              'packageName':      'libssl1.1',
-              'purl':             'pkg:apk/alpine/libssl1.1@1.1.1n-r0?arch=x86_64&distro=3.15.4',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2023:2165',
-                'https://access.redhat.com/security/cve/CVE-2022-4304',
-                'https://bugzilla.redhat.com/1960321',
-                'https://bugzilla.redhat.com/2164440',
-                'https://bugzilla.redhat.com/2164487',
-                'https://bugzilla.redhat.com/2164492',
-                'https://bugzilla.redhat.com/2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144000',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144003',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144006',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144008',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144010',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144012',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144015',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144017',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144019',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2145170',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2158412',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164440',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164487',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164488',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164492',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164497',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164499',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164500',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4203',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4304',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4450',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0215',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0216',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0217',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0286',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0401',
-                'https://errata.almalinux.org/9/ALSA-2023-2165.html',
-                'https://errata.rockylinux.org/RLSA-2023:0946',
-                'https://linux.oracle.com/cve/CVE-2022-4304.html',
-                'https://linux.oracle.com/errata/ELSA-2023-32791.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2022-4304',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0003',
-                'https://rustsec.org/advisories/RUSTSEC-2023-0007.html',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://ubuntu.com/security/notices/USN-5844-1',
-                'https://ubuntu.com/security/notices/USN-6564-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2022-4304',
-                'https://www.openssl.org/news/secadv/20230207.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: timing attack in RSA Decryption implementation'
-            },
-            {
-              'cve':  'CVE-2023-0465',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N'
-                },
-                'redhat': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-295'
-              ],
-              'description':   "Applications that use a non-default option when verifying certificates may be\nvulnerable to an attack from a malicious CA to circumvent certain checks.\n\nInvalid certificate policies in leaf certificates are silently ignored by\nOpenSSL and other certificate policy checks are skipped for that certificate.\nA malicious CA could use this to deliberately assert invalid certificate policies\nin order to circumvent policy checking on the certificate altogether.\n\nPolicy processing is disabled by default but can be enabled by passing\nthe `-policy' argument to the command line utilities or by calling the\n`X509_VERIFY_PARAM_set1_policies()' function.",
-              'diffID':        'sha256:4fc242d58285699eca05db3cc7c7122a2b8e014d9481f323bd9277baacfa0628',
-              'fixedVersions': [
-                '1.1.1t-r2'
-              ],
-              'installedVersion': '1.1.1n-r0',
-              'packageName':      'libssl1.1',
-              'purl':             'pkg:apk/alpine/libssl1.1@1.1.1n-r0?arch=x86_64&distro=3.15.4',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2023:3722',
-                'https://access.redhat.com/security/cve/CVE-2023-0465',
-                'https://bugzilla.redhat.com/2181082',
-                'https://bugzilla.redhat.com/2182561',
-                'https://bugzilla.redhat.com/2182565',
-                'https://bugzilla.redhat.com/2188461',
-                'https://bugzilla.redhat.com/2207947',
-                'https://errata.almalinux.org/9/ALSA-2023-3722.html',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=10325176f3d3e98c6e2b3bf5ab1e3b334de6947a',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=1dd43e0709fece299b15208f36cc7c76209ba0bb',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=b013765abfa80036dc779dd0e50602c57bb3bf95',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=facfb1ab745646e97a1920977ae4a9965ea61d5c',
-                'https://linux.oracle.com/cve/CVE-2023-0465.html',
-                'https://linux.oracle.com/errata/ELSA-2023-3722.html',
-                'https://lists.debian.org/debian-lts-announce/2023/06/msg00011.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-0465',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://security.netapp.com/advisory/ntap-20230414-0001/',
-                'https://ubuntu.com/security/notices/USN-6039-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-0465',
-                'https://www.debian.org/security/2023/dsa-5417',
-                'https://www.openssl.org/news/secadv/20230328.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: Invalid certificate policies in leaf certificates are silently ignored'
-            },
-            {
-              'cve':  'CVE-2023-2650',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '6.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-770'
-              ],
-              'description':   "Issue summary: Processing some specially crafted ASN.1 object identifiers or\ndata containing them may be very slow.\n\nImpact summary: Applications that use OBJ_obj2txt() directly, or use any of\nthe OpenSSL subsystems OCSP, PKCS7/SMIME, CMS, CMP/CRMF or TS with no message\nsize limit may experience notable to very long delays when processing those\nmessages, which may lead to a Denial of Service.\n\nAn OBJECT IDENTIFIER is composed of a series of numbers - sub-identifiers -\nmost of which have no size limit.  OBJ_obj2txt() may be used to translate\nan ASN.1 OBJECT IDENTIFIER given in DER encoding form (using the OpenSSL\ntype ASN1_OBJECT) to its canonical numeric text form, which are the\nsub-identifiers of the OBJECT IDENTIFIER in decimal form, separated by\nperiods.\n\nWhen one of the sub-identifiers in the OBJECT IDENTIFIER is very large\n(these are sizes that are seen as absurdly large, taking up tens or hundreds\nof KiBs), the translation to a decimal number in text may take a very long\ntime.  The time complexity is O(n^2) with 'n' being the size of the\nsub-identifiers in bytes (*).\n\nWith OpenSSL 3.0, support to fetch cryptographic algorithms using names /\nidentifiers in string form was introduced.  This includes using OBJECT\nIDENTIFIERs in canonical numeric text form as identifiers for fetching\nalgorithms.\n\nSuch OBJECT IDENTIFIERs may be received through the ASN.1 structure\nAlgorithmIdentifier, which is commonly used in multiple protocols to specify\nwhat cryptographic algorithm should be used to sign or verify, encrypt or\ndecrypt, or digest passed data.\n\nApplications that call OBJ_obj2txt() directly with untrusted data are\naffected, with any version of OpenSSL.  If the use is for the mere purpose\nof display, the severity is considered low.\n\nIn OpenSSL 3.0 and newer, this affects the subsystems OCSP, PKCS7/SMIME,\nCMS, CMP/CRMF or TS.  It also impacts anything that processes X.509\ncertificates, including simple things like verifying its signature.\n\nThe impact on TLS is relatively low, because all versions of OpenSSL have a\n100KiB limit on the peer's certificate chain.  Additionally, this only\nimpacts clients, or servers that have explicitly enabled client\nauthentication.\n\nIn OpenSSL 1.1.1 and 1.0.2, this only affects displaying diverse objects,\nsuch as X.509 certificates.  This is assumed to not happen in such a way\nthat it would cause a Denial of Service, so these versions are considered\nnot affected by this issue in such a way that it would be cause for concern,\nand the severity is therefore considered low.",
-              'diffID':        'sha256:4fc242d58285699eca05db3cc7c7122a2b8e014d9481f323bd9277baacfa0628',
-              'fixedVersions': [
-                '1.1.1u-r0'
-              ],
-              'installedVersion': '1.1.1n-r0',
-              'packageName':      'libssl1.1',
-              'purl':             'pkg:apk/alpine/libssl1.1@1.1.1n-r0?arch=x86_64&distro=3.15.4',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2023/05/30/1',
-                'https://access.redhat.com/errata/RHSA-2023:6330',
-                'https://access.redhat.com/security/cve/CVE-2023-2650',
-                'https://bugzilla.redhat.com/1858038',
-                'https://bugzilla.redhat.com/2207947',
-                'https://errata.almalinux.org/9/ALSA-2023-6330.html',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=423a2bc737a908ad0c77bda470b2b59dc879936b',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=853c5e56ee0b8650c73140816bb8b91d6163422c',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=9e209944b35cf82368071f160a744b6178f9b098',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=db779b0e10b047f2585615e0b8f2acdf21f8544a',
-                'https://linux.oracle.com/cve/CVE-2023-2650.html',
-                'https://linux.oracle.com/errata/ELSA-2023-6330.html',
-                'https://lists.debian.org/debian-lts-announce/2023/06/msg00011.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-2650',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0009',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://security.netapp.com/advisory/ntap-20230703-0001/',
-                'https://security.netapp.com/advisory/ntap-20231027-0009/',
-                'https://ubuntu.com/security/notices/USN-6119-1',
-                'https://ubuntu.com/security/notices/USN-6188-1',
-                'https://ubuntu.com/security/notices/USN-6672-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-2650',
-                'https://www.debian.org/security/2023/dsa-5417',
-                'https://www.openssl.org/news/secadv/20230530.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: Possible DoS translating ASN.1 object identifiers'
-            },
-            {
-              'cve':  'CVE-2023-3446',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L'
-                },
-                'redhat': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L'
-                }
-              },
-              'cwes': [
-                'CWE-606',
-                'CWE-1333'
-              ],
-              'description':   "Issue summary: Checking excessively long DH keys or parameters may be very slow.\n\nImpact summary: Applications that use the functions DH_check(), DH_check_ex()\nor EVP_PKEY_param_check() to check a DH key or DH parameters may experience long\ndelays. Where the key or parameters that are being checked have been obtained\nfrom an untrusted source this may lead to a Denial of Service.\n\nThe function DH_check() performs various checks on DH parameters. One of those\nchecks confirms that the modulus ('p' parameter) is not too large. Trying to use\na very large modulus is slow and OpenSSL will not normally use a modulus which\nis over 10,000 bits in length.\n\nHowever the DH_check() function checks numerous aspects of the key or parameters\nthat have been supplied. Some of those checks use the supplied modulus value\neven if it has already been found to be too large.\n\nAn application that calls DH_check() and supplies a key or parameters obtained\nfrom an untrusted source could be vulernable to a Denial of Service attack.\n\nThe function DH_check() is itself called by a number of other OpenSSL functions.\nAn application calling any of those other functions may similarly be affected.\nThe other functions affected by this are DH_check_ex() and\nEVP_PKEY_param_check().\n\nAlso vulnerable are the OpenSSL dhparam and pkeyparam command line applications\nwhen using the '-check' option.\n\nThe OpenSSL SSL/TLS implementation is not affected by this issue.\nThe OpenSSL 3.0 and 3.1 FIPS providers are not affected by this issue.",
-              'diffID':        'sha256:4fc242d58285699eca05db3cc7c7122a2b8e014d9481f323bd9277baacfa0628',
-              'fixedVersions': [
-                '1.1.1u-r2'
-              ],
-              'installedVersion': '1.1.1n-r0',
-              'packageName':      'libssl1.1',
-              'purl':             'pkg:apk/alpine/libssl1.1@1.1.1n-r0?arch=x86_64&distro=3.15.4',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2023/07/19/4',
-                'http://www.openwall.com/lists/oss-security/2023/07/19/5',
-                'http://www.openwall.com/lists/oss-security/2023/07/19/6',
-                'http://www.openwall.com/lists/oss-security/2023/07/31/1',
-                'http://www.openwall.com/lists/oss-security/2024/05/16/1',
-                'https://access.redhat.com/errata/RHSA-2024:2447',
-                'https://access.redhat.com/security/cve/CVE-2023-3446',
-                'https://bugzilla.redhat.com/2223016',
-                'https://bugzilla.redhat.com/2224962',
-                'https://bugzilla.redhat.com/2227852',
-                'https://bugzilla.redhat.com/2248616',
-                'https://bugzilla.redhat.com/2257571',
-                'https://bugzilla.redhat.com/2258502',
-                'https://bugzilla.redhat.com/2259944',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2224962',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2257582',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2257583',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2258677',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2258688',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2258691',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2258694',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2258700',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-36763',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-36764',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3446',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45229',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45231',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45232',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45233',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45235',
-                'https://errata.almalinux.org/9/ALSA-2024-2447.html',
-                'https://errata.rockylinux.org/RLSA-2024:2264',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=1fa20cf2f506113c761777127a38bce5068740eb',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=8780a896543a654e757db1b9396383f9d8095528',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=9a0a4d3c1e7138915563c0df4fe6a3f9377b839c',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=fc9867c1e03c22ebf56943be205202e576aabf23',
-                'https://linux.oracle.com/cve/CVE-2023-3446.html',
-                'https://linux.oracle.com/errata/ELSA-2024-2447.html',
-                'https://lists.debian.org/debian-lts-announce/2023/08/msg00019.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-3446',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://security.netapp.com/advisory/ntap-20230803-0011/',
-                'https://ubuntu.com/security/notices/USN-6435-1',
-                'https://ubuntu.com/security/notices/USN-6435-2',
-                'https://ubuntu.com/security/notices/USN-6450-1',
-                'https://ubuntu.com/security/notices/USN-6709-1',
-                'https://ubuntu.com/security/notices/USN-7018-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-3446',
-                'https://www.openssl.org/news/secadv/20230719.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: Excessive time spent checking DH keys and parameters'
-            },
-            {
-              'cve':  'CVE-2023-3817',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L'
-                },
-                'redhat': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L'
-                }
-              },
-              'cwes': [
-                'CWE-606',
-                'CWE-834'
-              ],
-              'description':   'Issue summary: Checking excessively long DH keys or parameters may be very slow.\n\nImpact summary: Applications that use the functions DH_check(), DH_check_ex()\nor EVP_PKEY_param_check() to check a DH key or DH parameters may experience long\ndelays. Where the key or parameters that are being checked have been obtained\nfrom an untrusted source this may lead to a Denial of Service.\n\nThe function DH_check() performs various checks on DH parameters. After fixing\nCVE-2023-3446 it was discovered that a large q parameter value can also trigger\nan overly long computation during some of these checks. A correct q value,\nif present, cannot be larger than the modulus p parameter, thus it is\nunnecessary to perform these checks if q is larger than p.\n\nAn application that calls DH_check() and supplies a key or parameters obtained\nfrom an untrusted source could be vulnerable to a Denial of Service attack.\n\nThe function DH_check() is itself called by a number of other OpenSSL functions.\nAn application calling any of those other functions may similarly be affected.\nThe other functions affected by this are DH_check_ex() and\nEVP_PKEY_param_check().\n\nAlso vulnerable are the OpenSSL dhparam and pkeyparam command line applications\nwhen using the "-check" option.\n\nThe OpenSSL SSL/TLS implementation is not affected by this issue.\n\nThe OpenSSL 3.0 and 3.1 FIPS providers are not affected by this issue.',
-              'diffID':        'sha256:4fc242d58285699eca05db3cc7c7122a2b8e014d9481f323bd9277baacfa0628',
-              'fixedVersions': [
-                '1.1.1v-r0'
-              ],
-              'installedVersion': '1.1.1n-r0',
-              'packageName':      'libssl1.1',
-              'purl':             'pkg:apk/alpine/libssl1.1@1.1.1n-r0?arch=x86_64&distro=3.15.4',
-              'references':       [
-                'http://seclists.org/fulldisclosure/2023/Jul/43',
-                'http://www.openwall.com/lists/oss-security/2023/07/31/1',
-                'http://www.openwall.com/lists/oss-security/2023/09/22/11',
-                'http://www.openwall.com/lists/oss-security/2023/09/22/9',
-                'http://www.openwall.com/lists/oss-security/2023/11/06/2',
-                'https://access.redhat.com/errata/RHSA-2024:2447',
-                'https://access.redhat.com/security/cve/CVE-2023-3817',
-                'https://bugzilla.redhat.com/2223016',
-                'https://bugzilla.redhat.com/2224962',
-                'https://bugzilla.redhat.com/2227852',
-                'https://bugzilla.redhat.com/2248616',
-                'https://bugzilla.redhat.com/2257571',
-                'https://bugzilla.redhat.com/2258502',
-                'https://bugzilla.redhat.com/2259944',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2224962',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2227852',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2248616',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2270358',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3446',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3817',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-5678',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-2408',
-                'https://errata.almalinux.org/9/ALSA-2024-2447.html',
-                'https://errata.rockylinux.org/RLSA-2023:7877',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=6a1eb62c29db6cb5eec707f9338aee00f44e26f5',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=869ad69aadd985c7b8ca6f4e5dd0eb274c9f3644',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=9002fd07327a91f35ba6c1307e71fa6fd4409b7f',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=91ddeba0f2269b017dc06c46c993a788974b1aa5',
-                'https://linux.oracle.com/cve/CVE-2023-3817.html',
-                'https://linux.oracle.com/errata/ELSA-2024-2447.html',
-                'https://lists.debian.org/debian-lts-announce/2023/08/msg00019.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-3817',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://security.netapp.com/advisory/ntap-20230818-0014/',
-                'https://security.netapp.com/advisory/ntap-20231027-0008/',
-                'https://security.netapp.com/advisory/ntap-20240621-0006/',
-                'https://ubuntu.com/security/notices/USN-6435-1',
-                'https://ubuntu.com/security/notices/USN-6435-2',
-                'https://ubuntu.com/security/notices/USN-6450-1',
-                'https://ubuntu.com/security/notices/USN-6709-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-3817',
-                'https://www.openssl.org/news/secadv/20230731.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'OpenSSL: Excessive time spent checking DH q parameter value'
-            },
-            {
-              'cve':  'CVE-2023-5678',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L'
-                },
-                'redhat': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L'
-                }
-              },
-              'cwes': [
-                'CWE-606',
-                'CWE-754'
-              ],
-              'description':   "Issue summary: Generating excessively long X9.42 DH keys or checking\nexcessively long X9.42 DH keys or parameters may be very slow.\n\nImpact summary: Applications that use the functions DH_generate_key() to\ngenerate an X9.42 DH key may experience long delays.  Likewise, applications\nthat use DH_check_pub_key(), DH_check_pub_key_ex() or EVP_PKEY_public_check()\nto check an X9.42 DH key or X9.42 DH parameters may experience long delays.\nWhere the key or parameters that are being checked have been obtained from\nan untrusted source this may lead to a Denial of Service.\n\nWhile DH_check() performs all the necessary checks (as of CVE-2023-3817),\nDH_check_pub_key() doesn't make any of these checks, and is therefore\nvulnerable for excessively large P and Q parameters.\n\nLikewise, while DH_generate_key() performs a check for an excessively large\nP, it doesn't check for an excessively large Q.\n\nAn application that calls DH_generate_key() or DH_check_pub_key() and\nsupplies a key or parameters obtained from an untrusted source could be\nvulnerable to a Denial of Service attack.\n\nDH_generate_key() and DH_check_pub_key() are also called by a number of\nother OpenSSL functions.  An application calling any of those other\nfunctions may similarly be affected.  The other functions affected by this\nare DH_check_pub_key_ex(), EVP_PKEY_public_check(), and EVP_PKEY_generate().\n\nAlso vulnerable are the OpenSSL pkey command line application when using the\n\"-pubcheck\" option, as well as the OpenSSL genpkey command line application.\n\nThe OpenSSL SSL/TLS implementation is not affected by this issue.\n\nThe OpenSSL 3.0 and 3.1 FIPS providers are not affected by this issue.",
-              'diffID':        'sha256:4fc242d58285699eca05db3cc7c7122a2b8e014d9481f323bd9277baacfa0628',
-              'fixedVersions': [
-                '1.1.1w-r1'
-              ],
-              'installedVersion': '1.1.1n-r0',
-              'packageName':      'libssl1.1',
-              'purl':             'pkg:apk/alpine/libssl1.1@1.1.1n-r0?arch=x86_64&distro=3.15.4',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2024/03/11/1',
-                'https://access.redhat.com/errata/RHSA-2024:2447',
-                'https://access.redhat.com/security/cve/CVE-2023-5678',
-                'https://bugzilla.redhat.com/2223016',
-                'https://bugzilla.redhat.com/2224962',
-                'https://bugzilla.redhat.com/2227852',
-                'https://bugzilla.redhat.com/2248616',
-                'https://bugzilla.redhat.com/2257571',
-                'https://bugzilla.redhat.com/2258502',
-                'https://bugzilla.redhat.com/2259944',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2224962',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2227852',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2248616',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2270358',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3446',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3817',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-5678',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-2408',
-                'https://errata.almalinux.org/9/ALSA-2024-2447.html',
-                'https://errata.rockylinux.org/RLSA-2023:7877',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=34efaef6c103d636ab507a0cc34dca4d3aecc055',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=710fee740904b6290fef0dd5536fbcedbc38ff0c',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=db925ae2e65d0d925adef429afc37f75bd1c2017',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=ddeb4b6c6d527e54ce9a99cba785c0f7776e54b6',
-                'https://linux.oracle.com/cve/CVE-2023-5678.html',
-                'https://linux.oracle.com/errata/ELSA-2024-2447.html',
-                'https://lists.debian.org/debian-lts-announce/2024/10/msg00033.html',
-                'https://lists.debian.org/debian-lts-announce/2024/11/msg00000.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-5678',
-                'https://security.netapp.com/advisory/ntap-20231130-0010/',
-                'https://ubuntu.com/security/notices/USN-6622-1',
-                'https://ubuntu.com/security/notices/USN-6632-1',
-                'https://ubuntu.com/security/notices/USN-6709-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-5678',
-                'https://www.openssl.org/news/secadv/20231106.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: Generating excessively long X9.42 DH keys or checking excessively long X9.42 DH keys or parameters may be very slow'
-            },
-            {
-              'cve':  'CVE-2022-37434',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '9.8',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-787',
-                'CWE-120'
-              ],
-              'description':   'zlib through 1.2.12 has a heap-based buffer over-read or buffer overflow in inflate in inflate.c via a large gzip header extra field. NOTE: only applications that call inflateGetHeader are affected. Some common applications bundle the affected zlib source code but may be unable to call inflateGetHeader (e.g., see the nodejs/node reference).',
-              'diffID':        'sha256:4fc242d58285699eca05db3cc7c7122a2b8e014d9481f323bd9277baacfa0628',
-              'fixedVersions': [
-                '1.2.12-r2'
-              ],
-              'installedVersion': '1.2.12-r0',
-              'packageName':      'zlib',
-              'purl':             'pkg:apk/alpine/zlib@1.2.12-r0?arch=x86_64&distro=3.15.4',
-              'references':       [
-                'http://seclists.org/fulldisclosure/2022/Oct/37',
-                'http://seclists.org/fulldisclosure/2022/Oct/38',
-                'http://seclists.org/fulldisclosure/2022/Oct/41',
-                'http://seclists.org/fulldisclosure/2022/Oct/42',
-                'http://www.openwall.com/lists/oss-security/2022/08/05/2',
-                'http://www.openwall.com/lists/oss-security/2022/08/09/1',
-                'https://access.redhat.com/errata/RHSA-2022:8291',
-                'https://access.redhat.com/security/cve/CVE-2022-37434',
-                'https://bugzilla.redhat.com/2116639',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2053198',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2077431',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2081296',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2116639',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-37434',
-                'https://errata.almalinux.org/9/ALSA-2022-8291.html',
-                'https://errata.rockylinux.org/RLSA-2022:8291',
-                'https://github.com/curl/curl/issues/9271',
-                'https://github.com/ivd38/zlib_overflow',
-                'https://github.com/madler/zlib/blob/21767c654d31d2dccdde4330529775c6c5fd5389/zlib.h#L1062-L1063',
-                'https://github.com/madler/zlib/commit/1eb7682f845ac9e9bf9ae35bbfb3bad5dacbd91d',
-                'https://github.com/madler/zlib/commit/eff308af425b67093bab25f80f1ae950166bece1',
-                'https://github.com/nodejs/node/blob/75b68c6e4db515f76df73af476eccf382bbcb00a/deps/zlib/inflate.c#L762-L764',
-                'https://linux.oracle.com/cve/CVE-2022-37434.html',
-                'https://linux.oracle.com/errata/ELSA-2023-1095.html',
-                'https://lists.debian.org/debian-lts-announce/2022/09/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JWN4VE3JQR4O2SOUS5TXNLANRPMHWV4I/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NMBOJ77A7T7PQCARMDUK75TE6LLESZ3O/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PAVPQNCG3XRLCLNSQRM3KAN5ZFMVXVTY/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/X5U7OTKZSHY2I3ZFJSR2SHFHW72RKGDK/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YRQAI7H4M4RQZ2IWZUEEXECBE5D56BH2/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2022-37434',
-                'https://security.netapp.com/advisory/ntap-20220901-0005/',
-                'https://security.netapp.com/advisory/ntap-20230427-0007/',
-                'https://support.apple.com/kb/HT213488',
-                'https://support.apple.com/kb/HT213489',
-                'https://support.apple.com/kb/HT213490',
-                'https://support.apple.com/kb/HT213491',
-                'https://support.apple.com/kb/HT213493',
-                'https://support.apple.com/kb/HT213494',
-                'https://ubuntu.com/security/notices/USN-5570-1',
-                'https://ubuntu.com/security/notices/USN-5570-2',
-                'https://ubuntu.com/security/notices/USN-5573-1',
-                'https://ubuntu.com/security/notices/USN-6736-1',
-                'https://ubuntu.com/security/notices/USN-6736-2',
-                'https://www.cve.org/CVERecord?id=CVE-2022-37434',
-                'https://www.debian.org/security/2022/dsa-5218'
-              ],
-              'severity':   'CRITICAL',
-              'suppressed': false,
-              'title':      'zlib: heap-based buffer over-read and overflow in inflate() in inflate.c via a large gzip header extra field'
-            }
-          ]
-        }
-      ],
-      'summary': {
-        'critical':   1,
-        'high':       8,
-        'low':        0,
-        'medium':     14,
-        'suppressed': 0,
-        'unknown':    0
-      }
-    }
-  },
-  {
-    'id':    'default/4d547c5ac4ba6fead13bfbaaa4892f7be1019dfe14100a140cbe898ab708867a',
-    'type':  'storage.sbomscanner.kubewarden.io.vulnerabilityreport',
-    'links': {
-      'patch':  'https://localhost:8005/v1/storage.sbomscanner.kubewarden.io.vulnerabilityreports/default/4d547c5ac4ba6fead13bfbaaa4892f7be1019dfe14100a140cbe898ab708867a',
-      'remove': 'https://localhost:8005/v1/storage.sbomscanner.kubewarden.io.vulnerabilityreports/default/4d547c5ac4ba6fead13bfbaaa4892f7be1019dfe14100a140cbe898ab708867a',
-      'self':   'https://localhost:8005/v1/storage.sbomscanner.kubewarden.io.vulnerabilityreports/default/4d547c5ac4ba6fead13bfbaaa4892f7be1019dfe14100a140cbe898ab708867a',
-      'update': 'https://localhost:8005/v1/storage.sbomscanner.kubewarden.io.vulnerabilityreports/default/4d547c5ac4ba6fead13bfbaaa4892f7be1019dfe14100a140cbe898ab708867a',
-      'view':   'https://localhost:8005/apis/storage.sbomscanner.kubewarden.io/v1alpha1/namespaces/default/vulnerabilityreports/4d547c5ac4ba6fead13bfbaaa4892f7be1019dfe14100a140cbe898ab708867a'
-    },
-    'apiVersion':    'storage.sbomscanner.kubewarden.io/v1alpha1',
-    'imageMetadata': {
-      'digest':      'sha256:18c29393a090ba5cde8a5f00926e9e419f47cfcfd206cc3f7f590e91b19adfe9',
-      'platform':    'linux/arm/v6',
-      'registry':    'lsong-demo1',
-      'registryURI': 'registry-1.docker.io',
-      'repository':  'library/alpine',
-      'tag':         '3.14.2'
-    },
-    'kind':     'VulnerabilityReport',
-    'metadata': {
-      'creationTimestamp': '2026-01-14T15:47:31Z',
-      'fields':            [
-        '4d547c5ac4ba6fead13bfbaaa4892f7be1019dfe14100a140cbe898ab708867a',
-        'registry-1.docker.io/library/alpine:3.14.2',
-        'linux/arm/v6',
-        '43 (0 suppressed)'
-      ],
-      'labels': {
-        'app.kubernetes.io/managed-by':          'sbomscanner',
-        'app.kubernetes.io/part-of':             'sbomscanner',
-        'sbomscanner.kubewarden.io/scanjob-uid': '445c600a-c4b6-40b3-bd71-f2d2140a37d5'
-      },
-      'name':            '4d547c5ac4ba6fead13bfbaaa4892f7be1019dfe14100a140cbe898ab708867a',
-      'namespace':       'default',
-      'ownerReferences': [
-        {
-          'apiVersion':         'storage.sbomscanner.kubewarden.io/v1alpha1',
-          'blockOwnerDeletion': true,
-          'controller':         true,
-          'kind':               'SBOM',
-          'name':               '4d547c5ac4ba6fead13bfbaaa4892f7be1019dfe14100a140cbe898ab708867a',
-          'uid':                '1c890f2b-870f-4df9-ae6a-4709dab35727'
-        }
-      ],
-      'relationships': [
-        {
-          'fromId':   'default/4d547c5ac4ba6fead13bfbaaa4892f7be1019dfe14100a140cbe898ab708867a',
-          'fromType': 'storage.sbomscanner.kubewarden.io.sbom',
-          'rel':      'owner',
-          'state':    'active',
-          'message':  'Resource is current'
-        }
-      ],
-      'resourceVersion': '2',
-      'state':           {
-        'error':         false,
-        'message':       'Resource is current',
-        'name':          'active',
-        'transitioning': false
-      },
-      'uid': 'bcb5ba29-da85-40ca-9cf7-2579b02014e2'
-    },
-    'report': {
-      'results': [
-        {
-          'class':           'os-pkgs',
-          'target':          '/var/run/worker/trivy.sbom.3153107380.json (alpine 3.14.2)',
-          'type':            'alpine',
-          'vulnerabilities': [
-            {
-              'cve':  'CVE-2021-42378',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the getvar_i function",
-              'diffID':        'sha256:ae8b256995f2365db83229ef1f84a4df71a9874c3f8702fb8baa431fc9718bff',
-              'fixedVersions': [
-                '1.33.1-r6'
-              ],
-              'installedVersion': '1.33.1-r3',
-              'packageName':      'busybox',
-              'purl':             'pkg:apk/alpine/busybox@1.33.1-r3?arch=armhf&distro=3.14.2',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42378',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42378',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42378'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the getvar_i()'
-            },
-            {
-              'cve':  'CVE-2021-42379',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the next_input_file function",
-              'diffID':        'sha256:ae8b256995f2365db83229ef1f84a4df71a9874c3f8702fb8baa431fc9718bff',
-              'fixedVersions': [
-                '1.33.1-r6'
-              ],
-              'installedVersion': '1.33.1-r3',
-              'packageName':      'busybox',
-              'purl':             'pkg:apk/alpine/busybox@1.33.1-r3?arch=armhf&distro=3.14.2',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42379',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42379',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42379'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the next_input_file()'
-            },
-            {
-              'cve':  'CVE-2021-42380',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the clrvar function",
-              'diffID':        'sha256:ae8b256995f2365db83229ef1f84a4df71a9874c3f8702fb8baa431fc9718bff',
-              'fixedVersions': [
-                '1.33.1-r6'
-              ],
-              'installedVersion': '1.33.1-r3',
-              'packageName':      'busybox',
-              'purl':             'pkg:apk/alpine/busybox@1.33.1-r3?arch=armhf&distro=3.14.2',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42380',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42380',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42380'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the clrvar()'
-            },
-            {
-              'cve':  'CVE-2021-42381',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the hash_init function",
-              'diffID':        'sha256:ae8b256995f2365db83229ef1f84a4df71a9874c3f8702fb8baa431fc9718bff',
-              'fixedVersions': [
-                '1.33.1-r6'
-              ],
-              'installedVersion': '1.33.1-r3',
-              'packageName':      'busybox',
-              'purl':             'pkg:apk/alpine/busybox@1.33.1-r3?arch=armhf&distro=3.14.2',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42381',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42381',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42381'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the hash_init()'
-            },
-            {
-              'cve':  'CVE-2021-42382',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the getvar_s function",
-              'diffID':        'sha256:ae8b256995f2365db83229ef1f84a4df71a9874c3f8702fb8baa431fc9718bff',
-              'fixedVersions': [
-                '1.33.1-r6'
-              ],
-              'installedVersion': '1.33.1-r3',
-              'packageName':      'busybox',
-              'purl':             'pkg:apk/alpine/busybox@1.33.1-r3?arch=armhf&distro=3.14.2',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42382',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42382',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42382'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the getvar_s()'
-            },
-            {
-              'cve':  'CVE-2021-42383',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the evaluate function",
-              'diffID':        'sha256:ae8b256995f2365db83229ef1f84a4df71a9874c3f8702fb8baa431fc9718bff',
-              'fixedVersions': [
-                '1.33.1-r6'
-              ],
-              'installedVersion': '1.33.1-r3',
-              'packageName':      'busybox',
-              'purl':             'pkg:apk/alpine/busybox@1.33.1-r3?arch=armhf&distro=3.14.2',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42383',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42383',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42383'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the evaluate()'
-            },
-            {
-              'cve':  'CVE-2021-42384',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the handle_special function",
-              'diffID':        'sha256:ae8b256995f2365db83229ef1f84a4df71a9874c3f8702fb8baa431fc9718bff',
-              'fixedVersions': [
-                '1.33.1-r6'
-              ],
-              'installedVersion': '1.33.1-r3',
-              'packageName':      'busybox',
-              'purl':             'pkg:apk/alpine/busybox@1.33.1-r3?arch=armhf&distro=3.14.2',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42384',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42384',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42384'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the handle_special()'
-            },
-            {
-              'cve':  'CVE-2021-42385',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the evaluate function",
-              'diffID':        'sha256:ae8b256995f2365db83229ef1f84a4df71a9874c3f8702fb8baa431fc9718bff',
-              'fixedVersions': [
-                '1.33.1-r6'
-              ],
-              'installedVersion': '1.33.1-r3',
-              'packageName':      'busybox',
-              'purl':             'pkg:apk/alpine/busybox@1.33.1-r3?arch=armhf&distro=3.14.2',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42385',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42385',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42385'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the evaluate()'
-            },
-            {
-              'cve':  'CVE-2021-42386',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the nvalloc function",
-              'diffID':        'sha256:ae8b256995f2365db83229ef1f84a4df71a9874c3f8702fb8baa431fc9718bff',
-              'fixedVersions': [
-                '1.33.1-r6'
-              ],
-              'installedVersion': '1.33.1-r3',
-              'packageName':      'busybox',
-              'purl':             'pkg:apk/alpine/busybox@1.33.1-r3?arch=armhf&distro=3.14.2',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42386',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42386',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42386'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the nvalloc()'
-            },
-            {
-              'cve':  'CVE-2022-28391',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '8.8',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-88'
-              ],
-              'description':   "BusyBox through 1.35.0 allows remote attackers to execute arbitrary code if netstat is used to print a DNS PTR record's value to a VT compatible terminal. Alternatively, the attacker could choose to change the terminal's colors.",
-              'diffID':        'sha256:ae8b256995f2365db83229ef1f84a4df71a9874c3f8702fb8baa431fc9718bff',
-              'fixedVersions': [
-                '1.33.1-r7'
-              ],
-              'installedVersion': '1.33.1-r3',
-              'packageName':      'busybox',
-              'purl':             'pkg:apk/alpine/busybox@1.33.1-r3?arch=armhf&distro=3.14.2',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2022-28391',
-                'https://git.alpinelinux.org/aports/plain/main/busybox/0001-libbb-sockaddr2str-ensure-only-printable-characters-.patch',
-                'https://git.alpinelinux.org/aports/plain/main/busybox/0002-nslookup-sanitize-all-printed-strings-with-printable.patch',
-                'https://gitlab.alpinelinux.org/alpine/aports/-/issues/13661',
-                'https://nvd.nist.gov/vuln/detail/CVE-2022-28391',
-                'https://www.cve.org/CVERecord?id=CVE-2022-28391'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: remote attackers may execute arbitrary code if netstat is used'
-            },
-            {
-              'cve':  'CVE-2021-42374',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '5.7',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-125'
-              ],
-              'description':   "An out-of-bounds heap read in Busybox's unlzma applet leads to information leak and denial of service when crafted LZMA-compressed input is decompressed. This can be triggered by any applet/format that",
-              'diffID':        'sha256:ae8b256995f2365db83229ef1f84a4df71a9874c3f8702fb8baa431fc9718bff',
-              'fixedVersions': [
-                '1.33.1-r4'
-              ],
-              'installedVersion': '1.33.1-r3',
-              'packageName':      'busybox',
-              'purl':             'pkg:apk/alpine/busybox@1.33.1-r3?arch=armhf&distro=3.14.2',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42374',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42374',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42374'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'busybox: out-of-bounds read in unlzma applet leads to information leak and denial of service when crafted LZMA-compressed input is decompressed'
-            },
-            {
-              'cve':  'CVE-2021-42375',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.5',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '4.1',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-159'
-              ],
-              'description':   "An incorrect handling of a special element in Busybox's ash applet leads to denial of service when processing a crafted shell command, due to the shell mistaking specific characters for reserved characters. This may be used for DoS under rare conditions of filtered command input.",
-              'diffID':        'sha256:ae8b256995f2365db83229ef1f84a4df71a9874c3f8702fb8baa431fc9718bff',
-              'fixedVersions': [
-                '1.33.1-r5'
-              ],
-              'installedVersion': '1.33.1-r3',
-              'packageName':      'busybox',
-              'purl':             'pkg:apk/alpine/busybox@1.33.1-r3?arch=armhf&distro=3.14.2',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42375',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42375',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42375'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'busybox: incorrect handling of a special element in ash applet leads to denial of service when processing a crafted shell command'
-            },
-            {
-              'cve':  'CVE-2022-0778',
-              'cvss': {
-                'bitnami': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'ghsa': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'nvd': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-835'
-              ],
-              'description':   'The BN_mod_sqrt() function, which computes a modular square root, contains a bug that can cause it to loop forever for non-prime moduli. Internally this function is used when parsing certificates that contain elliptic curve public keys in compressed form or explicit elliptic curve parameters with a base point encoded in compressed form. It is possible to trigger the infinite loop by crafting a certificate that has invalid explicit curve parameters. Since certificate parsing happens prior to verification of the certificate signature, any process that parses an externally supplied certificate may thus be subject to a denial of service attack. The infinite loop can also be reached when parsing crafted private keys as they can contain explicit elliptic curve parameters. Thus vulnerable situations include: - TLS clients consuming server certificates - TLS servers consuming client certificates - Hosting providers taking certificates or private keys from customers - Certificate authorities parsing certification requests from subscribers - Anything else which parses ASN.1 elliptic curve parameters Also any other applications that use the BN_mod_sqrt() where the attacker can control the parameter values are vulnerable to this DoS issue. In the OpenSSL 1.0.2 version the public key is not parsed during initial parsing of the certificate which makes it slightly harder to trigger the infinite loop. However any operation which requires the public key from the certificate will trigger the infinite loop. In particular the attacker can use a self-signed certificate to trigger the loop during verification of the certificate signature. This issue affects OpenSSL versions 1.0.2, 1.1.1 and 3.0. It was addressed in the releases of 1.1.1n and 3.0.2 on the 15th March 2022. Fixed in OpenSSL 3.0.2 (Affected 3.0.0,3.0.1). Fixed in OpenSSL 1.1.1n (Affected 1.1.1-1.1.1m). Fixed in OpenSSL 1.0.2zd (Affected 1.0.2-1.0.2zc).',
-              'diffID':        'sha256:ae8b256995f2365db83229ef1f84a4df71a9874c3f8702fb8baa431fc9718bff',
-              'fixedVersions': [
-                '1.1.1n-r0'
-              ],
-              'installedVersion': '1.1.1l-r0',
-              'packageName':      'libcrypto1.1',
-              'purl':             'pkg:apk/alpine/libcrypto1.1@1.1.1l-r0?arch=armhf&distro=3.14.2',
-              'references':       [
-                'http://packetstormsecurity.com/files/167344/OpenSSL-1.0.2-1.1.1-3.0-BN_mod_sqrt-Infinite-Loop.html',
-                'http://seclists.org/fulldisclosure/2022/May/33',
-                'http://seclists.org/fulldisclosure/2022/May/35',
-                'http://seclists.org/fulldisclosure/2022/May/38',
-                'https://access.redhat.com/errata/RHSA-2022:5326',
-                'https://access.redhat.com/security/cve/CVE-2022-0778',
-                'https://bugzilla.redhat.com/2062202',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2062202',
-                'https://cert-portal.siemens.com/productcert/pdf/ssa-712929.pdf',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-0778',
-                'https://errata.almalinux.org/8/ALSA-2022-5326.html',
-                'https://errata.rockylinux.org/RLSA-2022:4899',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=3118eb64934499d93db3230748a452351d1d9a65',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=380085481c64de749a6dd25cdf0bcf4360b30f83',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=a466912611aa6cbdf550cd10601390e587451246',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=3118eb64934499d93db3230748a452351d1d9a65',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=380085481c64de749a6dd25cdf0bcf4360b30f83',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=a466912611aa6cbdf550cd10601390e587451246',
-                'https://linux.oracle.com/cve/CVE-2022-0778.html',
-                'https://linux.oracle.com/errata/ELSA-2022-9272.html',
-                'https://lists.debian.org/debian-lts-announce/2022/03/msg00023.html',
-                'https://lists.debian.org/debian-lts-announce/2022/03/msg00024.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/323SNN6ZX7PRJJWP2BUAFLPUAE42XWLZ',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/323SNN6ZX7PRJJWP2BUAFLPUAE42XWLZ/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GDB3GQVJPXJE7X5C5JN6JAA4XUDWD6E6',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GDB3GQVJPXJE7X5C5JN6JAA4XUDWD6E6/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/W6K3PR542DXWLEFFMFIDMME4CWMHJRMG',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/W6K3PR542DXWLEFFMFIDMME4CWMHJRMG/',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/323SNN6ZX7PRJJWP2BUAFLPUAE42XWLZ',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/GDB3GQVJPXJE7X5C5JN6JAA4XUDWD6E6',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/W6K3PR542DXWLEFFMFIDMME4CWMHJRMG',
-                'https://nvd.nist.gov/vuln/detail/CVE-2022-0778',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2022-0002',
-                'https://rustsec.org/advisories/RUSTSEC-2022-0014.html',
-                'https://security.gentoo.org/glsa/202210-02',
-                'https://security.netapp.com/advisory/ntap-20220321-0002',
-                'https://security.netapp.com/advisory/ntap-20220321-0002/',
-                'https://security.netapp.com/advisory/ntap-20220429-0005',
-                'https://security.netapp.com/advisory/ntap-20220429-0005/',
-                'https://security.netapp.com/advisory/ntap-20240621-0006',
-                'https://security.netapp.com/advisory/ntap-20240621-0006/',
-                'https://support.apple.com/kb/HT213255',
-                'https://support.apple.com/kb/HT213256',
-                'https://support.apple.com/kb/HT213257',
-                'https://ubuntu.com/security/notices/USN-5328-1',
-                'https://ubuntu.com/security/notices/USN-5328-2',
-                'https://ubuntu.com/security/notices/USN-6457-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2022-0778',
-                'https://www.debian.org/security/2022/dsa-5103',
-                'https://www.openssl.org/news/secadv/20220315.txt',
-                'https://www.oracle.com/security-alerts/cpuapr2022.html',
-                'https://www.oracle.com/security-alerts/cpujul2022.html',
-                'https://www.tenable.com/security/tns-2022-06',
-                'https://www.tenable.com/security/tns-2022-07',
-                'https://www.tenable.com/security/tns-2022-08',
-                'https://www.tenable.com/security/tns-2022-09'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: Infinite loop in BN_mod_sqrt() reachable when parsing certificates'
-            },
-            {
-              'cve':  'CVE-2022-4450',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'nvd': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-415'
-              ],
-              'description':   'The function PEM_read_bio_ex() reads a PEM file from a BIO and parses and\ndecodes the "name" (e.g. "CERTIFICATE"), any header data and the payload data.\nIf the function succeeds then the "name_out", "header" and "data" arguments are\npopulated with pointers to buffers containing the relevant decoded data. The\ncaller is responsible for freeing those buffers. It is possible to construct a\nPEM file that results in 0 bytes of payload data. In this case PEM_read_bio_ex()\nwill return a failure code but will populate the header argument with a pointer\nto a buffer that has already been freed. If the caller also frees this buffer\nthen a double free will occur. This will most likely lead to a crash. This\ncould be exploited by an attacker who has the ability to supply malicious PEM\nfiles for parsing to achieve a denial of service attack.\n\nThe functions PEM_read_bio() and PEM_read() are simple wrappers around\nPEM_read_bio_ex() and therefore these functions are also directly affected.\n\nThese functions are also called indirectly by a number of other OpenSSL\nfunctions including PEM_X509_INFO_read_bio_ex() and\nSSL_CTX_use_serverinfo_file() which are also vulnerable. Some OpenSSL internal\nuses of these functions are not vulnerable because the caller does not free the\nheader argument if PEM_read_bio_ex() returns a failure code. These locations\ninclude the PEM_read_bio_TYPE() functions as well as the decoders introduced in\nOpenSSL 3.0.\n\nThe OpenSSL asn1parse command line application is also impacted by this issue.',
-              'diffID':        'sha256:ae8b256995f2365db83229ef1f84a4df71a9874c3f8702fb8baa431fc9718bff',
-              'fixedVersions': [
-                '1.1.1t-r0'
-              ],
-              'installedVersion': '1.1.1l-r0',
-              'packageName':      'libcrypto1.1',
-              'purl':             'pkg:apk/alpine/libcrypto1.1@1.1.1l-r0?arch=armhf&distro=3.14.2',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2023:2165',
-                'https://access.redhat.com/security/cve/CVE-2022-4450',
-                'https://bugzilla.redhat.com/1960321',
-                'https://bugzilla.redhat.com/2164440',
-                'https://bugzilla.redhat.com/2164487',
-                'https://bugzilla.redhat.com/2164492',
-                'https://bugzilla.redhat.com/2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144000',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144003',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144006',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144008',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144010',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144012',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144015',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144017',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144019',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2145170',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2158412',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164440',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164487',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164488',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164492',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164497',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164499',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164500',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4203',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4304',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4450',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0215',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0216',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0217',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0286',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0401',
-                'https://errata.almalinux.org/9/ALSA-2023-2165.html',
-                'https://errata.rockylinux.org/RLSA-2023:0946',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=63bcf189be73a9cc1264059bed6f57974be74a83',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=bbcf509bd046b34cca19c766bbddc31683d0858b',
-                'https://linux.oracle.com/cve/CVE-2022-4450.html',
-                'https://linux.oracle.com/errata/ELSA-2023-32791.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2022-4450',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0003',
-                'https://rustsec.org/advisories/RUSTSEC-2023-0010.html',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://ubuntu.com/security/notices/USN-5844-1',
-                'https://ubuntu.com/security/notices/USN-6564-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2022-4450',
-                'https://www.openssl.org/news/secadv/20230207.txt'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: double free after calling PEM_read_bio_ex'
-            },
-            {
-              'cve':  'CVE-2023-0215',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'nvd': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   'The public API function BIO_new_NDEF is a helper function used for streaming\nASN.1 data via a BIO. It is primarily used internally to OpenSSL to support the\nSMIME, CMS and PKCS7 streaming capabilities, but may also be called directly by\nend user applications.\n\nThe function receives a BIO from the caller, prepends a new BIO_f_asn1 filter\nBIO onto the front of it to form a BIO chain, and then returns the new head of\nthe BIO chain to the caller. Under certain conditions, for example if a CMS\nrecipient public key is invalid, the new filter BIO is freed and the function\nreturns a NULL result indicating a failure. However, in this case, the BIO chain\nis not properly cleaned up and the BIO passed by the caller still retains\ninternal pointers to the previously freed filter BIO. If the caller then goes on\nto call BIO_pop() on the BIO then a use-after-free will occur. This will most\nlikely result in a crash.\n\n\n\nThis scenario occurs directly in the internal function B64_write_ASN1() which\nmay cause BIO_new_NDEF() to be called and will subsequently call BIO_pop() on\nthe BIO. This internal function is in turn called by the public API functions\nPEM_write_bio_ASN1_stream, PEM_write_bio_CMS_stream, PEM_write_bio_PKCS7_stream,\nSMIME_write_ASN1, SMIME_write_CMS and SMIME_write_PKCS7.\n\nOther public API functions that may be impacted by this include\ni2d_ASN1_bio_stream, BIO_new_CMS, BIO_new_PKCS7, i2d_CMS_bio_stream and\ni2d_PKCS7_bio_stream.\n\nThe OpenSSL cms and smime command line applications are similarly affected.',
-              'diffID':        'sha256:ae8b256995f2365db83229ef1f84a4df71a9874c3f8702fb8baa431fc9718bff',
-              'fixedVersions': [
-                '1.1.1t-r0'
-              ],
-              'installedVersion': '1.1.1l-r0',
-              'packageName':      'libcrypto1.1',
-              'purl':             'pkg:apk/alpine/libcrypto1.1@1.1.1l-r0?arch=armhf&distro=3.14.2',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2023:2165',
-                'https://access.redhat.com/security/cve/CVE-2023-0215',
-                'https://bugzilla.redhat.com/1960321',
-                'https://bugzilla.redhat.com/2164440',
-                'https://bugzilla.redhat.com/2164487',
-                'https://bugzilla.redhat.com/2164492',
-                'https://bugzilla.redhat.com/2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144000',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144003',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144006',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144008',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144010',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144012',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144015',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144017',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144019',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2145170',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2158412',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164440',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164487',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164488',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164492',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164497',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164499',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164500',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4203',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4304',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4450',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0215',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0216',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0217',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0286',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0401',
-                'https://errata.almalinux.org/9/ALSA-2023-2165.html',
-                'https://errata.rockylinux.org/RLSA-2023:0946',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=8818064ce3c3c0f1b740a5aaba2a987e75bfbafd',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=9816136fe31d92ace4037d5da5257f763aeeb4eb',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=c3829dd8825c654652201e16f8a0a0c46ee3f344',
-                'https://linux.oracle.com/cve/CVE-2023-0215.html',
-                'https://linux.oracle.com/errata/ELSA-2023-32791.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-0215',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0003',
-                'https://rustsec.org/advisories/RUSTSEC-2023-0009.html',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://security.netapp.com/advisory/ntap-20230427-0007',
-                'https://security.netapp.com/advisory/ntap-20230427-0007/',
-                'https://security.netapp.com/advisory/ntap-20230427-0009',
-                'https://security.netapp.com/advisory/ntap-20230427-0009/',
-                'https://security.netapp.com/advisory/ntap-20240621-0006',
-                'https://security.netapp.com/advisory/ntap-20240621-0006/',
-                'https://ubuntu.com/security/notices/USN-5844-1',
-                'https://ubuntu.com/security/notices/USN-5845-1',
-                'https://ubuntu.com/security/notices/USN-5845-2',
-                'https://ubuntu.com/security/notices/USN-6564-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-0215',
-                'https://www.openssl.org/news/secadv/20230207.txt'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: use-after-free following BIO_new_NDEF'
-            },
-            {
-              'cve':  'CVE-2023-0286',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '7.4',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H'
-                },
-                'nvd': {
-                  'v3score':  '7.4',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.4',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-843'
-              ],
-              'description':   'There is a type confusion vulnerability relating to X.400 address processing\ninside an X.509 GeneralName. X.400 addresses were parsed as an ASN1_STRING but\nthe public structure definition for GENERAL_NAME incorrectly specified the type\nof the x400Address field as ASN1_TYPE. This field is subsequently interpreted by\nthe OpenSSL function GENERAL_NAME_cmp as an ASN1_TYPE rather than an\nASN1_STRING.\n\nWhen CRL checking is enabled (i.e. the application sets the\nX509_V_FLAG_CRL_CHECK flag), this vulnerability may allow an attacker to pass\narbitrary pointers to a memcmp call, enabling them to read memory contents or\nenact a denial of service. In most cases, the attack requires the attacker to\nprovide both the certificate chain and CRL, neither of which need to have a\nvalid signature. If the attacker only controls one of these inputs, the other\ninput must already contain an X.400 address as a CRL distribution point, which\nis uncommon. As such, this vulnerability is most likely to only affect\napplications which have implemented their own functionality for retrieving CRLs\nover a network.',
-              'diffID':        'sha256:ae8b256995f2365db83229ef1f84a4df71a9874c3f8702fb8baa431fc9718bff',
-              'fixedVersions': [
-                '1.1.1t-r0'
-              ],
-              'installedVersion': '1.1.1l-r0',
-              'packageName':      'libcrypto1.1',
-              'purl':             'pkg:apk/alpine/libcrypto1.1@1.1.1l-r0?arch=armhf&distro=3.14.2',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2025:7937',
-                'https://access.redhat.com/security/cve/CVE-2023-0286',
-                'https://access.redhat.com/security/cve/cve-2023-0286',
-                'https://bugzilla.redhat.com/2164440',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144000',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144003',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144006',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144008',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144010',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144012',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144015',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144017',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144019',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2145170',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2158412',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164440',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164487',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164488',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164492',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164497',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164499',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164500',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4203',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4304',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4450',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0215',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0216',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0217',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0286',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0401',
-                'https://errata.almalinux.org/9/ALSA-2025-7937.html',
-                'https://errata.rockylinux.org/RLSA-2023:0946',
-                'https://ftp.openbsd.org/pub/OpenBSD/LibreSSL/libressl-3.6.2-relnotes.txt',
-                'https://ftp.openbsd.org/pub/OpenBSD/patches/7.2/common/018_x509.patch.sig',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=2c6c9d439b484e1ba9830d8454a34fa4f80fdfe9',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=2f7530077e0ef79d98718138716bc51ca0cad658',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=fd2af07dc083a350c959147097003a14a5e8ac4d',
-                'https://github.com/pyca/cryptography',
-                'https://github.com/pyca/cryptography/security/advisories/GHSA-x4qr-2fvf-3mr5',
-                'https://linux.oracle.com/cve/CVE-2023-0286.html',
-                'https://linux.oracle.com/errata/ELSA-2025-7937.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-0286',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0003',
-                'https://rustsec.org/advisories/RUSTSEC-2023-0006.html',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://ubuntu.com/security/notices/USN-5844-1',
-                'https://ubuntu.com/security/notices/USN-5845-1',
-                'https://ubuntu.com/security/notices/USN-5845-2',
-                'https://ubuntu.com/security/notices/USN-6564-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-0286',
-                'https://www.openssl.org/news/secadv/20230207.txt'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: X.400 address type confusion in X.509 GeneralName'
-            },
-            {
-              'cve':  'CVE-2023-0464',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-295'
-              ],
-              'description':   "A security vulnerability has been identified in all supported versions\n\nof OpenSSL related to the verification of X.509 certificate chains\nthat include policy constraints.  Attackers may be able to exploit this\nvulnerability by creating a malicious certificate chain that triggers\nexponential use of computational resources, leading to a denial-of-service\n(DoS) attack on affected systems.\n\nPolicy processing is disabled by default but can be enabled by passing\nthe `-policy' argument to the command line utilities or by calling the\n`X509_VERIFY_PARAM_set1_policies()' function.",
-              'diffID':        'sha256:ae8b256995f2365db83229ef1f84a4df71a9874c3f8702fb8baa431fc9718bff',
-              'fixedVersions': [
-                '1.1.1t-r1'
-              ],
-              'installedVersion': '1.1.1l-r0',
-              'packageName':      'libcrypto1.1',
-              'purl':             'pkg:apk/alpine/libcrypto1.1@1.1.1l-r0?arch=armhf&distro=3.14.2',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2023:3722',
-                'https://access.redhat.com/security/cve/CVE-2023-0464',
-                'https://bugzilla.redhat.com/2181082',
-                'https://bugzilla.redhat.com/2182561',
-                'https://bugzilla.redhat.com/2182565',
-                'https://bugzilla.redhat.com/2188461',
-                'https://bugzilla.redhat.com/2207947',
-                'https://errata.almalinux.org/9/ALSA-2023-3722.html',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=2017771e2db3e2b96f89bbe8766c3209f6a99545',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=2dcd4f1e3115f38cefa43e3efbe9b801c27e642e',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=879f7080d7e141f415c79eaa3a8ac4a3dad0348b',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=959c59c7a0164117e7f8366466a32bb1f8d77ff1',
-                'https://linux.oracle.com/cve/CVE-2023-0464.html',
-                'https://linux.oracle.com/errata/ELSA-2023-3722.html',
-                'https://lists.debian.org/debian-lts-announce/2023/06/msg00011.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-0464',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://security.netapp.com/advisory/ntap-20230406-0006/',
-                'https://security.netapp.com/advisory/ntap-20240621-0006/',
-                'https://ubuntu.com/security/notices/USN-6039-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.couchbase.com/alerts/',
-                'https://www.cve.org/CVERecord?id=CVE-2023-0464',
-                'https://www.debian.org/security/2023/dsa-5417',
-                'https://www.openssl.org/news/secadv/20230322.txt'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: Denial of service by excessive resource usage in verifying X509 policy constraints'
-            },
-            {
-              'cve':  'CVE-2022-2097',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N'
-                },
-                'nvd': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N'
-                },
-                'redhat': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-327'
-              ],
-              'description':   "AES OCB mode for 32-bit x86 platforms using the AES-NI assembly optimised implementation will not encrypt the entirety of the data under some circumstances. This could reveal sixteen bytes of data that was preexisting in the memory that wasn't written. In the special case of \"in place\" encryption, sixteen bytes of the plaintext would be revealed. Since OpenSSL does not support OCB based cipher suites for TLS and DTLS, they are both unaffected. Fixed in OpenSSL 3.0.5 (Affected 3.0.0-3.0.4). Fixed in OpenSSL 1.1.1q (Affected 1.1.1-1.1.1p).",
-              'diffID':        'sha256:ae8b256995f2365db83229ef1f84a4df71a9874c3f8702fb8baa431fc9718bff',
-              'fixedVersions': [
-                '1.1.1q-r0'
-              ],
-              'installedVersion': '1.1.1l-r0',
-              'packageName':      'libcrypto1.1',
-              'purl':             'pkg:apk/alpine/libcrypto1.1@1.1.1l-r0?arch=armhf&distro=3.14.2',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2022:6224',
-                'https://access.redhat.com/security/cve/CVE-2022-2097',
-                'https://bugzilla.redhat.com/2081494',
-                'https://bugzilla.redhat.com/2087911',
-                'https://bugzilla.redhat.com/2087913',
-                'https://bugzilla.redhat.com/2097310',
-                'https://bugzilla.redhat.com/2104905',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2081494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2097310',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2100554',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2104905',
-                'https://cert-portal.siemens.com/productcert/pdf/ssa-332410.pdf',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-1292',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-2068',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-2097',
-                'https://errata.almalinux.org/9/ALSA-2022-6224.html',
-                'https://errata.rockylinux.org/RLSA-2022:5818',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=919925673d6c9cfed3c1085497f5dfbbed5fc431',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=a98f339ddd7e8f487d6e0088d4a9a42324885a93',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=919925673d6c9cfed3c1085497f5dfbbed5fc431',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=a98f339ddd7e8f487d6e0088d4a9a42324885a93',
-                'https://github.com/alexcrichton/openssl-src-rs',
-                'https://linux.oracle.com/cve/CVE-2022-2097.html',
-                'https://linux.oracle.com/errata/ELSA-2022-9955.html',
-                'https://lists.debian.org/debian-lts-announce/2023/02/msg00019.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/R6CK57NBQFTPUMXAPJURCGXUYT76NQAK',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/R6CK57NBQFTPUMXAPJURCGXUYT76NQAK/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/V6567JERRHHJW2GNGJGKDRNHR7SNPZK7',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/V6567JERRHHJW2GNGJGKDRNHR7SNPZK7/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VCMNWKERPBKOEBNL7CLTTX3ZZCZLH7XA',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VCMNWKERPBKOEBNL7CLTTX3ZZCZLH7XA/',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/R6CK57NBQFTPUMXAPJURCGXUYT76NQAK',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/R6CK57NBQFTPUMXAPJURCGXUYT76NQAK/',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/V6567JERRHHJW2GNGJGKDRNHR7SNPZK7',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/V6567JERRHHJW2GNGJGKDRNHR7SNPZK7/',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/VCMNWKERPBKOEBNL7CLTTX3ZZCZLH7XA',
-                'https://nvd.nist.gov/vuln/detail/CVE-2022-2097',
-                'https://rustsec.org/advisories/RUSTSEC-2022-0032.html',
-                'https://security.gentoo.org/glsa/202210-02',
-                'https://security.netapp.com/advisory/ntap-20220715-0011',
-                'https://security.netapp.com/advisory/ntap-20220715-0011/',
-                'https://security.netapp.com/advisory/ntap-20230420-0008',
-                'https://security.netapp.com/advisory/ntap-20230420-0008/',
-                'https://security.netapp.com/advisory/ntap-20240621-0006',
-                'https://security.netapp.com/advisory/ntap-20240621-0006/',
-                'https://ubuntu.com/security/notices/USN-5502-1',
-                'https://ubuntu.com/security/notices/USN-6457-1',
-                'https://www.cve.org/CVERecord?id=CVE-2022-2097',
-                'https://www.debian.org/security/2023/dsa-5343',
-                'https://www.openssl.org/news/secadv/20220705.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: AES OCB fails to encrypt some bytes'
-            },
-            {
-              'cve':  'CVE-2022-4304',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N'
-                },
-                'nvd': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N'
-                },
-                'redhat': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-203'
-              ],
-              'description':   'A timing based side channel exists in the OpenSSL RSA Decryption implementation\nwhich could be sufficient to recover a plaintext across a network in a\nBleichenbacher style attack. To achieve a successful decryption an attacker\nwould have to be able to send a very large number of trial messages for\ndecryption. The vulnerability affects all RSA padding modes: PKCS#1 v1.5,\nRSA-OEAP and RSASVE.\n\nFor example, in a TLS connection, RSA is commonly used by a client to send an\nencrypted pre-master secret to the server. An attacker that had observed a\ngenuine connection between a client and a server could use this flaw to send\ntrial messages to the server and record the time taken to process them. After a\nsufficiently large number of messages the attacker could recover the pre-master\nsecret used for the original connection and thus be able to decrypt the\napplication data sent over that connection.',
-              'diffID':        'sha256:ae8b256995f2365db83229ef1f84a4df71a9874c3f8702fb8baa431fc9718bff',
-              'fixedVersions': [
-                '1.1.1t-r0'
-              ],
-              'installedVersion': '1.1.1l-r0',
-              'packageName':      'libcrypto1.1',
-              'purl':             'pkg:apk/alpine/libcrypto1.1@1.1.1l-r0?arch=armhf&distro=3.14.2',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2023:2165',
-                'https://access.redhat.com/security/cve/CVE-2022-4304',
-                'https://bugzilla.redhat.com/1960321',
-                'https://bugzilla.redhat.com/2164440',
-                'https://bugzilla.redhat.com/2164487',
-                'https://bugzilla.redhat.com/2164492',
-                'https://bugzilla.redhat.com/2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144000',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144003',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144006',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144008',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144010',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144012',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144015',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144017',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144019',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2145170',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2158412',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164440',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164487',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164488',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164492',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164497',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164499',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164500',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4203',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4304',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4450',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0215',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0216',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0217',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0286',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0401',
-                'https://errata.almalinux.org/9/ALSA-2023-2165.html',
-                'https://errata.rockylinux.org/RLSA-2023:0946',
-                'https://linux.oracle.com/cve/CVE-2022-4304.html',
-                'https://linux.oracle.com/errata/ELSA-2023-32791.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2022-4304',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0003',
-                'https://rustsec.org/advisories/RUSTSEC-2023-0007.html',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://ubuntu.com/security/notices/USN-5844-1',
-                'https://ubuntu.com/security/notices/USN-6564-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2022-4304',
-                'https://www.openssl.org/news/secadv/20230207.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: timing attack in RSA Decryption implementation'
-            },
-            {
-              'cve':  'CVE-2023-0465',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N'
-                },
-                'redhat': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-295'
-              ],
-              'description':   "Applications that use a non-default option when verifying certificates may be\nvulnerable to an attack from a malicious CA to circumvent certain checks.\n\nInvalid certificate policies in leaf certificates are silently ignored by\nOpenSSL and other certificate policy checks are skipped for that certificate.\nA malicious CA could use this to deliberately assert invalid certificate policies\nin order to circumvent policy checking on the certificate altogether.\n\nPolicy processing is disabled by default but can be enabled by passing\nthe `-policy' argument to the command line utilities or by calling the\n`X509_VERIFY_PARAM_set1_policies()' function.",
-              'diffID':        'sha256:ae8b256995f2365db83229ef1f84a4df71a9874c3f8702fb8baa431fc9718bff',
-              'fixedVersions': [
-                '1.1.1t-r2'
-              ],
-              'installedVersion': '1.1.1l-r0',
-              'packageName':      'libcrypto1.1',
-              'purl':             'pkg:apk/alpine/libcrypto1.1@1.1.1l-r0?arch=armhf&distro=3.14.2',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2023:3722',
-                'https://access.redhat.com/security/cve/CVE-2023-0465',
-                'https://bugzilla.redhat.com/2181082',
-                'https://bugzilla.redhat.com/2182561',
-                'https://bugzilla.redhat.com/2182565',
-                'https://bugzilla.redhat.com/2188461',
-                'https://bugzilla.redhat.com/2207947',
-                'https://errata.almalinux.org/9/ALSA-2023-3722.html',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=10325176f3d3e98c6e2b3bf5ab1e3b334de6947a',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=1dd43e0709fece299b15208f36cc7c76209ba0bb',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=b013765abfa80036dc779dd0e50602c57bb3bf95',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=facfb1ab745646e97a1920977ae4a9965ea61d5c',
-                'https://linux.oracle.com/cve/CVE-2023-0465.html',
-                'https://linux.oracle.com/errata/ELSA-2023-3722.html',
-                'https://lists.debian.org/debian-lts-announce/2023/06/msg00011.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-0465',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://security.netapp.com/advisory/ntap-20230414-0001/',
-                'https://ubuntu.com/security/notices/USN-6039-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-0465',
-                'https://www.debian.org/security/2023/dsa-5417',
-                'https://www.openssl.org/news/secadv/20230328.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: Invalid certificate policies in leaf certificates are silently ignored'
-            },
-            {
-              'cve':  'CVE-2022-0778',
-              'cvss': {
-                'bitnami': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'ghsa': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'nvd': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-835'
-              ],
-              'description':   'The BN_mod_sqrt() function, which computes a modular square root, contains a bug that can cause it to loop forever for non-prime moduli. Internally this function is used when parsing certificates that contain elliptic curve public keys in compressed form or explicit elliptic curve parameters with a base point encoded in compressed form. It is possible to trigger the infinite loop by crafting a certificate that has invalid explicit curve parameters. Since certificate parsing happens prior to verification of the certificate signature, any process that parses an externally supplied certificate may thus be subject to a denial of service attack. The infinite loop can also be reached when parsing crafted private keys as they can contain explicit elliptic curve parameters. Thus vulnerable situations include: - TLS clients consuming server certificates - TLS servers consuming client certificates - Hosting providers taking certificates or private keys from customers - Certificate authorities parsing certification requests from subscribers - Anything else which parses ASN.1 elliptic curve parameters Also any other applications that use the BN_mod_sqrt() where the attacker can control the parameter values are vulnerable to this DoS issue. In the OpenSSL 1.0.2 version the public key is not parsed during initial parsing of the certificate which makes it slightly harder to trigger the infinite loop. However any operation which requires the public key from the certificate will trigger the infinite loop. In particular the attacker can use a self-signed certificate to trigger the loop during verification of the certificate signature. This issue affects OpenSSL versions 1.0.2, 1.1.1 and 3.0. It was addressed in the releases of 1.1.1n and 3.0.2 on the 15th March 2022. Fixed in OpenSSL 3.0.2 (Affected 3.0.0,3.0.1). Fixed in OpenSSL 1.1.1n (Affected 1.1.1-1.1.1m). Fixed in OpenSSL 1.0.2zd (Affected 1.0.2-1.0.2zc).',
-              'diffID':        'sha256:ae8b256995f2365db83229ef1f84a4df71a9874c3f8702fb8baa431fc9718bff',
-              'fixedVersions': [
-                '3.3.3p1-r3'
-              ],
-              'installedVersion': '3.3.3p1-r2',
-              'packageName':      'libretls',
-              'purl':             'pkg:apk/alpine/libretls@3.3.3p1-r2?arch=armhf&distro=3.14.2',
-              'references':       [
-                'http://packetstormsecurity.com/files/167344/OpenSSL-1.0.2-1.1.1-3.0-BN_mod_sqrt-Infinite-Loop.html',
-                'http://seclists.org/fulldisclosure/2022/May/33',
-                'http://seclists.org/fulldisclosure/2022/May/35',
-                'http://seclists.org/fulldisclosure/2022/May/38',
-                'https://access.redhat.com/errata/RHSA-2022:5326',
-                'https://access.redhat.com/security/cve/CVE-2022-0778',
-                'https://bugzilla.redhat.com/2062202',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2062202',
-                'https://cert-portal.siemens.com/productcert/pdf/ssa-712929.pdf',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-0778',
-                'https://errata.almalinux.org/8/ALSA-2022-5326.html',
-                'https://errata.rockylinux.org/RLSA-2022:4899',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=3118eb64934499d93db3230748a452351d1d9a65',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=380085481c64de749a6dd25cdf0bcf4360b30f83',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=a466912611aa6cbdf550cd10601390e587451246',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=3118eb64934499d93db3230748a452351d1d9a65',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=380085481c64de749a6dd25cdf0bcf4360b30f83',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=a466912611aa6cbdf550cd10601390e587451246',
-                'https://linux.oracle.com/cve/CVE-2022-0778.html',
-                'https://linux.oracle.com/errata/ELSA-2022-9272.html',
-                'https://lists.debian.org/debian-lts-announce/2022/03/msg00023.html',
-                'https://lists.debian.org/debian-lts-announce/2022/03/msg00024.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/323SNN6ZX7PRJJWP2BUAFLPUAE42XWLZ',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/323SNN6ZX7PRJJWP2BUAFLPUAE42XWLZ/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GDB3GQVJPXJE7X5C5JN6JAA4XUDWD6E6',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GDB3GQVJPXJE7X5C5JN6JAA4XUDWD6E6/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/W6K3PR542DXWLEFFMFIDMME4CWMHJRMG',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/W6K3PR542DXWLEFFMFIDMME4CWMHJRMG/',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/323SNN6ZX7PRJJWP2BUAFLPUAE42XWLZ',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/GDB3GQVJPXJE7X5C5JN6JAA4XUDWD6E6',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/W6K3PR542DXWLEFFMFIDMME4CWMHJRMG',
-                'https://nvd.nist.gov/vuln/detail/CVE-2022-0778',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2022-0002',
-                'https://rustsec.org/advisories/RUSTSEC-2022-0014.html',
-                'https://security.gentoo.org/glsa/202210-02',
-                'https://security.netapp.com/advisory/ntap-20220321-0002',
-                'https://security.netapp.com/advisory/ntap-20220321-0002/',
-                'https://security.netapp.com/advisory/ntap-20220429-0005',
-                'https://security.netapp.com/advisory/ntap-20220429-0005/',
-                'https://security.netapp.com/advisory/ntap-20240621-0006',
-                'https://security.netapp.com/advisory/ntap-20240621-0006/',
-                'https://support.apple.com/kb/HT213255',
-                'https://support.apple.com/kb/HT213256',
-                'https://support.apple.com/kb/HT213257',
-                'https://ubuntu.com/security/notices/USN-5328-1',
-                'https://ubuntu.com/security/notices/USN-5328-2',
-                'https://ubuntu.com/security/notices/USN-6457-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2022-0778',
-                'https://www.debian.org/security/2022/dsa-5103',
-                'https://www.openssl.org/news/secadv/20220315.txt',
-                'https://www.oracle.com/security-alerts/cpuapr2022.html',
-                'https://www.oracle.com/security-alerts/cpujul2022.html',
-                'https://www.tenable.com/security/tns-2022-06',
-                'https://www.tenable.com/security/tns-2022-07',
-                'https://www.tenable.com/security/tns-2022-08',
-                'https://www.tenable.com/security/tns-2022-09'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: Infinite loop in BN_mod_sqrt() reachable when parsing certificates'
-            },
-            {
-              'cve':  'CVE-2022-0778',
-              'cvss': {
-                'bitnami': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'ghsa': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'nvd': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-835'
-              ],
-              'description':   'The BN_mod_sqrt() function, which computes a modular square root, contains a bug that can cause it to loop forever for non-prime moduli. Internally this function is used when parsing certificates that contain elliptic curve public keys in compressed form or explicit elliptic curve parameters with a base point encoded in compressed form. It is possible to trigger the infinite loop by crafting a certificate that has invalid explicit curve parameters. Since certificate parsing happens prior to verification of the certificate signature, any process that parses an externally supplied certificate may thus be subject to a denial of service attack. The infinite loop can also be reached when parsing crafted private keys as they can contain explicit elliptic curve parameters. Thus vulnerable situations include: - TLS clients consuming server certificates - TLS servers consuming client certificates - Hosting providers taking certificates or private keys from customers - Certificate authorities parsing certification requests from subscribers - Anything else which parses ASN.1 elliptic curve parameters Also any other applications that use the BN_mod_sqrt() where the attacker can control the parameter values are vulnerable to this DoS issue. In the OpenSSL 1.0.2 version the public key is not parsed during initial parsing of the certificate which makes it slightly harder to trigger the infinite loop. However any operation which requires the public key from the certificate will trigger the infinite loop. In particular the attacker can use a self-signed certificate to trigger the loop during verification of the certificate signature. This issue affects OpenSSL versions 1.0.2, 1.1.1 and 3.0. It was addressed in the releases of 1.1.1n and 3.0.2 on the 15th March 2022. Fixed in OpenSSL 3.0.2 (Affected 3.0.0,3.0.1). Fixed in OpenSSL 1.1.1n (Affected 1.1.1-1.1.1m). Fixed in OpenSSL 1.0.2zd (Affected 1.0.2-1.0.2zc).',
-              'diffID':        'sha256:ae8b256995f2365db83229ef1f84a4df71a9874c3f8702fb8baa431fc9718bff',
-              'fixedVersions': [
-                '1.1.1n-r0'
-              ],
-              'installedVersion': '1.1.1l-r0',
-              'packageName':      'libssl1.1',
-              'purl':             'pkg:apk/alpine/libssl1.1@1.1.1l-r0?arch=armhf&distro=3.14.2',
-              'references':       [
-                'http://packetstormsecurity.com/files/167344/OpenSSL-1.0.2-1.1.1-3.0-BN_mod_sqrt-Infinite-Loop.html',
-                'http://seclists.org/fulldisclosure/2022/May/33',
-                'http://seclists.org/fulldisclosure/2022/May/35',
-                'http://seclists.org/fulldisclosure/2022/May/38',
-                'https://access.redhat.com/errata/RHSA-2022:5326',
-                'https://access.redhat.com/security/cve/CVE-2022-0778',
-                'https://bugzilla.redhat.com/2062202',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2062202',
-                'https://cert-portal.siemens.com/productcert/pdf/ssa-712929.pdf',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-0778',
-                'https://errata.almalinux.org/8/ALSA-2022-5326.html',
-                'https://errata.rockylinux.org/RLSA-2022:4899',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=3118eb64934499d93db3230748a452351d1d9a65',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=380085481c64de749a6dd25cdf0bcf4360b30f83',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=a466912611aa6cbdf550cd10601390e587451246',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=3118eb64934499d93db3230748a452351d1d9a65',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=380085481c64de749a6dd25cdf0bcf4360b30f83',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=a466912611aa6cbdf550cd10601390e587451246',
-                'https://linux.oracle.com/cve/CVE-2022-0778.html',
-                'https://linux.oracle.com/errata/ELSA-2022-9272.html',
-                'https://lists.debian.org/debian-lts-announce/2022/03/msg00023.html',
-                'https://lists.debian.org/debian-lts-announce/2022/03/msg00024.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/323SNN6ZX7PRJJWP2BUAFLPUAE42XWLZ',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/323SNN6ZX7PRJJWP2BUAFLPUAE42XWLZ/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GDB3GQVJPXJE7X5C5JN6JAA4XUDWD6E6',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GDB3GQVJPXJE7X5C5JN6JAA4XUDWD6E6/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/W6K3PR542DXWLEFFMFIDMME4CWMHJRMG',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/W6K3PR542DXWLEFFMFIDMME4CWMHJRMG/',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/323SNN6ZX7PRJJWP2BUAFLPUAE42XWLZ',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/GDB3GQVJPXJE7X5C5JN6JAA4XUDWD6E6',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/W6K3PR542DXWLEFFMFIDMME4CWMHJRMG',
-                'https://nvd.nist.gov/vuln/detail/CVE-2022-0778',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2022-0002',
-                'https://rustsec.org/advisories/RUSTSEC-2022-0014.html',
-                'https://security.gentoo.org/glsa/202210-02',
-                'https://security.netapp.com/advisory/ntap-20220321-0002',
-                'https://security.netapp.com/advisory/ntap-20220321-0002/',
-                'https://security.netapp.com/advisory/ntap-20220429-0005',
-                'https://security.netapp.com/advisory/ntap-20220429-0005/',
-                'https://security.netapp.com/advisory/ntap-20240621-0006',
-                'https://security.netapp.com/advisory/ntap-20240621-0006/',
-                'https://support.apple.com/kb/HT213255',
-                'https://support.apple.com/kb/HT213256',
-                'https://support.apple.com/kb/HT213257',
-                'https://ubuntu.com/security/notices/USN-5328-1',
-                'https://ubuntu.com/security/notices/USN-5328-2',
-                'https://ubuntu.com/security/notices/USN-6457-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2022-0778',
-                'https://www.debian.org/security/2022/dsa-5103',
-                'https://www.openssl.org/news/secadv/20220315.txt',
-                'https://www.oracle.com/security-alerts/cpuapr2022.html',
-                'https://www.oracle.com/security-alerts/cpujul2022.html',
-                'https://www.tenable.com/security/tns-2022-06',
-                'https://www.tenable.com/security/tns-2022-07',
-                'https://www.tenable.com/security/tns-2022-08',
-                'https://www.tenable.com/security/tns-2022-09'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: Infinite loop in BN_mod_sqrt() reachable when parsing certificates'
-            },
-            {
-              'cve':  'CVE-2022-4450',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'nvd': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-415'
-              ],
-              'description':   'The function PEM_read_bio_ex() reads a PEM file from a BIO and parses and\ndecodes the "name" (e.g. "CERTIFICATE"), any header data and the payload data.\nIf the function succeeds then the "name_out", "header" and "data" arguments are\npopulated with pointers to buffers containing the relevant decoded data. The\ncaller is responsible for freeing those buffers. It is possible to construct a\nPEM file that results in 0 bytes of payload data. In this case PEM_read_bio_ex()\nwill return a failure code but will populate the header argument with a pointer\nto a buffer that has already been freed. If the caller also frees this buffer\nthen a double free will occur. This will most likely lead to a crash. This\ncould be exploited by an attacker who has the ability to supply malicious PEM\nfiles for parsing to achieve a denial of service attack.\n\nThe functions PEM_read_bio() and PEM_read() are simple wrappers around\nPEM_read_bio_ex() and therefore these functions are also directly affected.\n\nThese functions are also called indirectly by a number of other OpenSSL\nfunctions including PEM_X509_INFO_read_bio_ex() and\nSSL_CTX_use_serverinfo_file() which are also vulnerable. Some OpenSSL internal\nuses of these functions are not vulnerable because the caller does not free the\nheader argument if PEM_read_bio_ex() returns a failure code. These locations\ninclude the PEM_read_bio_TYPE() functions as well as the decoders introduced in\nOpenSSL 3.0.\n\nThe OpenSSL asn1parse command line application is also impacted by this issue.',
-              'diffID':        'sha256:ae8b256995f2365db83229ef1f84a4df71a9874c3f8702fb8baa431fc9718bff',
-              'fixedVersions': [
-                '1.1.1t-r0'
-              ],
-              'installedVersion': '1.1.1l-r0',
-              'packageName':      'libssl1.1',
-              'purl':             'pkg:apk/alpine/libssl1.1@1.1.1l-r0?arch=armhf&distro=3.14.2',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2023:2165',
-                'https://access.redhat.com/security/cve/CVE-2022-4450',
-                'https://bugzilla.redhat.com/1960321',
-                'https://bugzilla.redhat.com/2164440',
-                'https://bugzilla.redhat.com/2164487',
-                'https://bugzilla.redhat.com/2164492',
-                'https://bugzilla.redhat.com/2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144000',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144003',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144006',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144008',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144010',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144012',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144015',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144017',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144019',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2145170',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2158412',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164440',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164487',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164488',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164492',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164497',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164499',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164500',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4203',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4304',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4450',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0215',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0216',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0217',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0286',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0401',
-                'https://errata.almalinux.org/9/ALSA-2023-2165.html',
-                'https://errata.rockylinux.org/RLSA-2023:0946',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=63bcf189be73a9cc1264059bed6f57974be74a83',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=bbcf509bd046b34cca19c766bbddc31683d0858b',
-                'https://linux.oracle.com/cve/CVE-2022-4450.html',
-                'https://linux.oracle.com/errata/ELSA-2023-32791.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2022-4450',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0003',
-                'https://rustsec.org/advisories/RUSTSEC-2023-0010.html',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://ubuntu.com/security/notices/USN-5844-1',
-                'https://ubuntu.com/security/notices/USN-6564-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2022-4450',
-                'https://www.openssl.org/news/secadv/20230207.txt'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: double free after calling PEM_read_bio_ex'
-            },
-            {
-              'cve':  'CVE-2023-0215',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'nvd': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   'The public API function BIO_new_NDEF is a helper function used for streaming\nASN.1 data via a BIO. It is primarily used internally to OpenSSL to support the\nSMIME, CMS and PKCS7 streaming capabilities, but may also be called directly by\nend user applications.\n\nThe function receives a BIO from the caller, prepends a new BIO_f_asn1 filter\nBIO onto the front of it to form a BIO chain, and then returns the new head of\nthe BIO chain to the caller. Under certain conditions, for example if a CMS\nrecipient public key is invalid, the new filter BIO is freed and the function\nreturns a NULL result indicating a failure. However, in this case, the BIO chain\nis not properly cleaned up and the BIO passed by the caller still retains\ninternal pointers to the previously freed filter BIO. If the caller then goes on\nto call BIO_pop() on the BIO then a use-after-free will occur. This will most\nlikely result in a crash.\n\n\n\nThis scenario occurs directly in the internal function B64_write_ASN1() which\nmay cause BIO_new_NDEF() to be called and will subsequently call BIO_pop() on\nthe BIO. This internal function is in turn called by the public API functions\nPEM_write_bio_ASN1_stream, PEM_write_bio_CMS_stream, PEM_write_bio_PKCS7_stream,\nSMIME_write_ASN1, SMIME_write_CMS and SMIME_write_PKCS7.\n\nOther public API functions that may be impacted by this include\ni2d_ASN1_bio_stream, BIO_new_CMS, BIO_new_PKCS7, i2d_CMS_bio_stream and\ni2d_PKCS7_bio_stream.\n\nThe OpenSSL cms and smime command line applications are similarly affected.',
-              'diffID':        'sha256:ae8b256995f2365db83229ef1f84a4df71a9874c3f8702fb8baa431fc9718bff',
-              'fixedVersions': [
-                '1.1.1t-r0'
-              ],
-              'installedVersion': '1.1.1l-r0',
-              'packageName':      'libssl1.1',
-              'purl':             'pkg:apk/alpine/libssl1.1@1.1.1l-r0?arch=armhf&distro=3.14.2',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2023:2165',
-                'https://access.redhat.com/security/cve/CVE-2023-0215',
-                'https://bugzilla.redhat.com/1960321',
-                'https://bugzilla.redhat.com/2164440',
-                'https://bugzilla.redhat.com/2164487',
-                'https://bugzilla.redhat.com/2164492',
-                'https://bugzilla.redhat.com/2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144000',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144003',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144006',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144008',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144010',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144012',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144015',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144017',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144019',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2145170',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2158412',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164440',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164487',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164488',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164492',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164497',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164499',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164500',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4203',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4304',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4450',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0215',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0216',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0217',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0286',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0401',
-                'https://errata.almalinux.org/9/ALSA-2023-2165.html',
-                'https://errata.rockylinux.org/RLSA-2023:0946',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=8818064ce3c3c0f1b740a5aaba2a987e75bfbafd',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=9816136fe31d92ace4037d5da5257f763aeeb4eb',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=c3829dd8825c654652201e16f8a0a0c46ee3f344',
-                'https://linux.oracle.com/cve/CVE-2023-0215.html',
-                'https://linux.oracle.com/errata/ELSA-2023-32791.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-0215',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0003',
-                'https://rustsec.org/advisories/RUSTSEC-2023-0009.html',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://security.netapp.com/advisory/ntap-20230427-0007',
-                'https://security.netapp.com/advisory/ntap-20230427-0007/',
-                'https://security.netapp.com/advisory/ntap-20230427-0009',
-                'https://security.netapp.com/advisory/ntap-20230427-0009/',
-                'https://security.netapp.com/advisory/ntap-20240621-0006',
-                'https://security.netapp.com/advisory/ntap-20240621-0006/',
-                'https://ubuntu.com/security/notices/USN-5844-1',
-                'https://ubuntu.com/security/notices/USN-5845-1',
-                'https://ubuntu.com/security/notices/USN-5845-2',
-                'https://ubuntu.com/security/notices/USN-6564-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-0215',
-                'https://www.openssl.org/news/secadv/20230207.txt'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: use-after-free following BIO_new_NDEF'
-            },
-            {
-              'cve':  'CVE-2023-0286',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '7.4',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H'
-                },
-                'nvd': {
-                  'v3score':  '7.4',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.4',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-843'
-              ],
-              'description':   'There is a type confusion vulnerability relating to X.400 address processing\ninside an X.509 GeneralName. X.400 addresses were parsed as an ASN1_STRING but\nthe public structure definition for GENERAL_NAME incorrectly specified the type\nof the x400Address field as ASN1_TYPE. This field is subsequently interpreted by\nthe OpenSSL function GENERAL_NAME_cmp as an ASN1_TYPE rather than an\nASN1_STRING.\n\nWhen CRL checking is enabled (i.e. the application sets the\nX509_V_FLAG_CRL_CHECK flag), this vulnerability may allow an attacker to pass\narbitrary pointers to a memcmp call, enabling them to read memory contents or\nenact a denial of service. In most cases, the attack requires the attacker to\nprovide both the certificate chain and CRL, neither of which need to have a\nvalid signature. If the attacker only controls one of these inputs, the other\ninput must already contain an X.400 address as a CRL distribution point, which\nis uncommon. As such, this vulnerability is most likely to only affect\napplications which have implemented their own functionality for retrieving CRLs\nover a network.',
-              'diffID':        'sha256:ae8b256995f2365db83229ef1f84a4df71a9874c3f8702fb8baa431fc9718bff',
-              'fixedVersions': [
-                '1.1.1t-r0'
-              ],
-              'installedVersion': '1.1.1l-r0',
-              'packageName':      'libssl1.1',
-              'purl':             'pkg:apk/alpine/libssl1.1@1.1.1l-r0?arch=armhf&distro=3.14.2',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2025:7937',
-                'https://access.redhat.com/security/cve/CVE-2023-0286',
-                'https://access.redhat.com/security/cve/cve-2023-0286',
-                'https://bugzilla.redhat.com/2164440',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144000',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144003',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144006',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144008',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144010',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144012',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144015',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144017',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144019',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2145170',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2158412',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164440',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164487',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164488',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164492',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164497',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164499',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164500',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4203',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4304',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4450',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0215',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0216',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0217',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0286',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0401',
-                'https://errata.almalinux.org/9/ALSA-2025-7937.html',
-                'https://errata.rockylinux.org/RLSA-2023:0946',
-                'https://ftp.openbsd.org/pub/OpenBSD/LibreSSL/libressl-3.6.2-relnotes.txt',
-                'https://ftp.openbsd.org/pub/OpenBSD/patches/7.2/common/018_x509.patch.sig',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=2c6c9d439b484e1ba9830d8454a34fa4f80fdfe9',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=2f7530077e0ef79d98718138716bc51ca0cad658',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=fd2af07dc083a350c959147097003a14a5e8ac4d',
-                'https://github.com/pyca/cryptography',
-                'https://github.com/pyca/cryptography/security/advisories/GHSA-x4qr-2fvf-3mr5',
-                'https://linux.oracle.com/cve/CVE-2023-0286.html',
-                'https://linux.oracle.com/errata/ELSA-2025-7937.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-0286',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0003',
-                'https://rustsec.org/advisories/RUSTSEC-2023-0006.html',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://ubuntu.com/security/notices/USN-5844-1',
-                'https://ubuntu.com/security/notices/USN-5845-1',
-                'https://ubuntu.com/security/notices/USN-5845-2',
-                'https://ubuntu.com/security/notices/USN-6564-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-0286',
-                'https://www.openssl.org/news/secadv/20230207.txt'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: X.400 address type confusion in X.509 GeneralName'
-            },
-            {
-              'cve':  'CVE-2023-0464',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-295'
-              ],
-              'description':   "A security vulnerability has been identified in all supported versions\n\nof OpenSSL related to the verification of X.509 certificate chains\nthat include policy constraints.  Attackers may be able to exploit this\nvulnerability by creating a malicious certificate chain that triggers\nexponential use of computational resources, leading to a denial-of-service\n(DoS) attack on affected systems.\n\nPolicy processing is disabled by default but can be enabled by passing\nthe `-policy' argument to the command line utilities or by calling the\n`X509_VERIFY_PARAM_set1_policies()' function.",
-              'diffID':        'sha256:ae8b256995f2365db83229ef1f84a4df71a9874c3f8702fb8baa431fc9718bff',
-              'fixedVersions': [
-                '1.1.1t-r1'
-              ],
-              'installedVersion': '1.1.1l-r0',
-              'packageName':      'libssl1.1',
-              'purl':             'pkg:apk/alpine/libssl1.1@1.1.1l-r0?arch=armhf&distro=3.14.2',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2023:3722',
-                'https://access.redhat.com/security/cve/CVE-2023-0464',
-                'https://bugzilla.redhat.com/2181082',
-                'https://bugzilla.redhat.com/2182561',
-                'https://bugzilla.redhat.com/2182565',
-                'https://bugzilla.redhat.com/2188461',
-                'https://bugzilla.redhat.com/2207947',
-                'https://errata.almalinux.org/9/ALSA-2023-3722.html',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=2017771e2db3e2b96f89bbe8766c3209f6a99545',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=2dcd4f1e3115f38cefa43e3efbe9b801c27e642e',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=879f7080d7e141f415c79eaa3a8ac4a3dad0348b',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=959c59c7a0164117e7f8366466a32bb1f8d77ff1',
-                'https://linux.oracle.com/cve/CVE-2023-0464.html',
-                'https://linux.oracle.com/errata/ELSA-2023-3722.html',
-                'https://lists.debian.org/debian-lts-announce/2023/06/msg00011.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-0464',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://security.netapp.com/advisory/ntap-20230406-0006/',
-                'https://security.netapp.com/advisory/ntap-20240621-0006/',
-                'https://ubuntu.com/security/notices/USN-6039-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.couchbase.com/alerts/',
-                'https://www.cve.org/CVERecord?id=CVE-2023-0464',
-                'https://www.debian.org/security/2023/dsa-5417',
-                'https://www.openssl.org/news/secadv/20230322.txt'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: Denial of service by excessive resource usage in verifying X509 policy constraints'
-            },
-            {
-              'cve':  'CVE-2022-2097',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N'
-                },
-                'nvd': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N'
-                },
-                'redhat': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-327'
-              ],
-              'description':   "AES OCB mode for 32-bit x86 platforms using the AES-NI assembly optimised implementation will not encrypt the entirety of the data under some circumstances. This could reveal sixteen bytes of data that was preexisting in the memory that wasn't written. In the special case of \"in place\" encryption, sixteen bytes of the plaintext would be revealed. Since OpenSSL does not support OCB based cipher suites for TLS and DTLS, they are both unaffected. Fixed in OpenSSL 3.0.5 (Affected 3.0.0-3.0.4). Fixed in OpenSSL 1.1.1q (Affected 1.1.1-1.1.1p).",
-              'diffID':        'sha256:ae8b256995f2365db83229ef1f84a4df71a9874c3f8702fb8baa431fc9718bff',
-              'fixedVersions': [
-                '1.1.1q-r0'
-              ],
-              'installedVersion': '1.1.1l-r0',
-              'packageName':      'libssl1.1',
-              'purl':             'pkg:apk/alpine/libssl1.1@1.1.1l-r0?arch=armhf&distro=3.14.2',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2022:6224',
-                'https://access.redhat.com/security/cve/CVE-2022-2097',
-                'https://bugzilla.redhat.com/2081494',
-                'https://bugzilla.redhat.com/2087911',
-                'https://bugzilla.redhat.com/2087913',
-                'https://bugzilla.redhat.com/2097310',
-                'https://bugzilla.redhat.com/2104905',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2081494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2097310',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2100554',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2104905',
-                'https://cert-portal.siemens.com/productcert/pdf/ssa-332410.pdf',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-1292',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-2068',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-2097',
-                'https://errata.almalinux.org/9/ALSA-2022-6224.html',
-                'https://errata.rockylinux.org/RLSA-2022:5818',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=919925673d6c9cfed3c1085497f5dfbbed5fc431',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=a98f339ddd7e8f487d6e0088d4a9a42324885a93',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=919925673d6c9cfed3c1085497f5dfbbed5fc431',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=a98f339ddd7e8f487d6e0088d4a9a42324885a93',
-                'https://github.com/alexcrichton/openssl-src-rs',
-                'https://linux.oracle.com/cve/CVE-2022-2097.html',
-                'https://linux.oracle.com/errata/ELSA-2022-9955.html',
-                'https://lists.debian.org/debian-lts-announce/2023/02/msg00019.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/R6CK57NBQFTPUMXAPJURCGXUYT76NQAK',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/R6CK57NBQFTPUMXAPJURCGXUYT76NQAK/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/V6567JERRHHJW2GNGJGKDRNHR7SNPZK7',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/V6567JERRHHJW2GNGJGKDRNHR7SNPZK7/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VCMNWKERPBKOEBNL7CLTTX3ZZCZLH7XA',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VCMNWKERPBKOEBNL7CLTTX3ZZCZLH7XA/',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/R6CK57NBQFTPUMXAPJURCGXUYT76NQAK',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/R6CK57NBQFTPUMXAPJURCGXUYT76NQAK/',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/V6567JERRHHJW2GNGJGKDRNHR7SNPZK7',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/V6567JERRHHJW2GNGJGKDRNHR7SNPZK7/',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/VCMNWKERPBKOEBNL7CLTTX3ZZCZLH7XA',
-                'https://nvd.nist.gov/vuln/detail/CVE-2022-2097',
-                'https://rustsec.org/advisories/RUSTSEC-2022-0032.html',
-                'https://security.gentoo.org/glsa/202210-02',
-                'https://security.netapp.com/advisory/ntap-20220715-0011',
-                'https://security.netapp.com/advisory/ntap-20220715-0011/',
-                'https://security.netapp.com/advisory/ntap-20230420-0008',
-                'https://security.netapp.com/advisory/ntap-20230420-0008/',
-                'https://security.netapp.com/advisory/ntap-20240621-0006',
-                'https://security.netapp.com/advisory/ntap-20240621-0006/',
-                'https://ubuntu.com/security/notices/USN-5502-1',
-                'https://ubuntu.com/security/notices/USN-6457-1',
-                'https://www.cve.org/CVERecord?id=CVE-2022-2097',
-                'https://www.debian.org/security/2023/dsa-5343',
-                'https://www.openssl.org/news/secadv/20220705.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: AES OCB fails to encrypt some bytes'
-            },
-            {
-              'cve':  'CVE-2022-4304',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N'
-                },
-                'nvd': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N'
-                },
-                'redhat': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-203'
-              ],
-              'description':   'A timing based side channel exists in the OpenSSL RSA Decryption implementation\nwhich could be sufficient to recover a plaintext across a network in a\nBleichenbacher style attack. To achieve a successful decryption an attacker\nwould have to be able to send a very large number of trial messages for\ndecryption. The vulnerability affects all RSA padding modes: PKCS#1 v1.5,\nRSA-OEAP and RSASVE.\n\nFor example, in a TLS connection, RSA is commonly used by a client to send an\nencrypted pre-master secret to the server. An attacker that had observed a\ngenuine connection between a client and a server could use this flaw to send\ntrial messages to the server and record the time taken to process them. After a\nsufficiently large number of messages the attacker could recover the pre-master\nsecret used for the original connection and thus be able to decrypt the\napplication data sent over that connection.',
-              'diffID':        'sha256:ae8b256995f2365db83229ef1f84a4df71a9874c3f8702fb8baa431fc9718bff',
-              'fixedVersions': [
-                '1.1.1t-r0'
-              ],
-              'installedVersion': '1.1.1l-r0',
-              'packageName':      'libssl1.1',
-              'purl':             'pkg:apk/alpine/libssl1.1@1.1.1l-r0?arch=armhf&distro=3.14.2',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2023:2165',
-                'https://access.redhat.com/security/cve/CVE-2022-4304',
-                'https://bugzilla.redhat.com/1960321',
-                'https://bugzilla.redhat.com/2164440',
-                'https://bugzilla.redhat.com/2164487',
-                'https://bugzilla.redhat.com/2164492',
-                'https://bugzilla.redhat.com/2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144000',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144003',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144006',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144008',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144010',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144012',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144015',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144017',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144019',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2145170',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2158412',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164440',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164487',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164488',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164492',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164497',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164499',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164500',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4203',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4304',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4450',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0215',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0216',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0217',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0286',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0401',
-                'https://errata.almalinux.org/9/ALSA-2023-2165.html',
-                'https://errata.rockylinux.org/RLSA-2023:0946',
-                'https://linux.oracle.com/cve/CVE-2022-4304.html',
-                'https://linux.oracle.com/errata/ELSA-2023-32791.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2022-4304',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0003',
-                'https://rustsec.org/advisories/RUSTSEC-2023-0007.html',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://ubuntu.com/security/notices/USN-5844-1',
-                'https://ubuntu.com/security/notices/USN-6564-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2022-4304',
-                'https://www.openssl.org/news/secadv/20230207.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: timing attack in RSA Decryption implementation'
-            },
-            {
-              'cve':  'CVE-2023-0465',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N'
-                },
-                'redhat': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-295'
-              ],
-              'description':   "Applications that use a non-default option when verifying certificates may be\nvulnerable to an attack from a malicious CA to circumvent certain checks.\n\nInvalid certificate policies in leaf certificates are silently ignored by\nOpenSSL and other certificate policy checks are skipped for that certificate.\nA malicious CA could use this to deliberately assert invalid certificate policies\nin order to circumvent policy checking on the certificate altogether.\n\nPolicy processing is disabled by default but can be enabled by passing\nthe `-policy' argument to the command line utilities or by calling the\n`X509_VERIFY_PARAM_set1_policies()' function.",
-              'diffID':        'sha256:ae8b256995f2365db83229ef1f84a4df71a9874c3f8702fb8baa431fc9718bff',
-              'fixedVersions': [
-                '1.1.1t-r2'
-              ],
-              'installedVersion': '1.1.1l-r0',
-              'packageName':      'libssl1.1',
-              'purl':             'pkg:apk/alpine/libssl1.1@1.1.1l-r0?arch=armhf&distro=3.14.2',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2023:3722',
-                'https://access.redhat.com/security/cve/CVE-2023-0465',
-                'https://bugzilla.redhat.com/2181082',
-                'https://bugzilla.redhat.com/2182561',
-                'https://bugzilla.redhat.com/2182565',
-                'https://bugzilla.redhat.com/2188461',
-                'https://bugzilla.redhat.com/2207947',
-                'https://errata.almalinux.org/9/ALSA-2023-3722.html',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=10325176f3d3e98c6e2b3bf5ab1e3b334de6947a',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=1dd43e0709fece299b15208f36cc7c76209ba0bb',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=b013765abfa80036dc779dd0e50602c57bb3bf95',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=facfb1ab745646e97a1920977ae4a9965ea61d5c',
-                'https://linux.oracle.com/cve/CVE-2023-0465.html',
-                'https://linux.oracle.com/errata/ELSA-2023-3722.html',
-                'https://lists.debian.org/debian-lts-announce/2023/06/msg00011.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-0465',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://security.netapp.com/advisory/ntap-20230414-0001/',
-                'https://ubuntu.com/security/notices/USN-6039-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-0465',
-                'https://www.debian.org/security/2023/dsa-5417',
-                'https://www.openssl.org/news/secadv/20230328.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: Invalid certificate policies in leaf certificates are silently ignored'
-            },
-            {
-              'cve':  'CVE-2021-42378',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the getvar_i function",
-              'diffID':        'sha256:ae8b256995f2365db83229ef1f84a4df71a9874c3f8702fb8baa431fc9718bff',
-              'fixedVersions': [
-                '1.33.1-r6'
-              ],
-              'installedVersion': '1.33.1-r3',
-              'packageName':      'ssl_client',
-              'purl':             'pkg:apk/alpine/ssl_client@1.33.1-r3?arch=armhf&distro=3.14.2',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42378',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42378',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42378'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the getvar_i()'
-            },
-            {
-              'cve':  'CVE-2021-42379',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the next_input_file function",
-              'diffID':        'sha256:ae8b256995f2365db83229ef1f84a4df71a9874c3f8702fb8baa431fc9718bff',
-              'fixedVersions': [
-                '1.33.1-r6'
-              ],
-              'installedVersion': '1.33.1-r3',
-              'packageName':      'ssl_client',
-              'purl':             'pkg:apk/alpine/ssl_client@1.33.1-r3?arch=armhf&distro=3.14.2',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42379',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42379',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42379'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the next_input_file()'
-            },
-            {
-              'cve':  'CVE-2021-42380',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the clrvar function",
-              'diffID':        'sha256:ae8b256995f2365db83229ef1f84a4df71a9874c3f8702fb8baa431fc9718bff',
-              'fixedVersions': [
-                '1.33.1-r6'
-              ],
-              'installedVersion': '1.33.1-r3',
-              'packageName':      'ssl_client',
-              'purl':             'pkg:apk/alpine/ssl_client@1.33.1-r3?arch=armhf&distro=3.14.2',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42380',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42380',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42380'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the clrvar()'
-            },
-            {
-              'cve':  'CVE-2021-42381',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the hash_init function",
-              'diffID':        'sha256:ae8b256995f2365db83229ef1f84a4df71a9874c3f8702fb8baa431fc9718bff',
-              'fixedVersions': [
-                '1.33.1-r6'
-              ],
-              'installedVersion': '1.33.1-r3',
-              'packageName':      'ssl_client',
-              'purl':             'pkg:apk/alpine/ssl_client@1.33.1-r3?arch=armhf&distro=3.14.2',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42381',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42381',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42381'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the hash_init()'
-            },
-            {
-              'cve':  'CVE-2021-42382',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the getvar_s function",
-              'diffID':        'sha256:ae8b256995f2365db83229ef1f84a4df71a9874c3f8702fb8baa431fc9718bff',
-              'fixedVersions': [
-                '1.33.1-r6'
-              ],
-              'installedVersion': '1.33.1-r3',
-              'packageName':      'ssl_client',
-              'purl':             'pkg:apk/alpine/ssl_client@1.33.1-r3?arch=armhf&distro=3.14.2',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42382',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42382',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42382'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the getvar_s()'
-            },
-            {
-              'cve':  'CVE-2021-42383',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the evaluate function",
-              'diffID':        'sha256:ae8b256995f2365db83229ef1f84a4df71a9874c3f8702fb8baa431fc9718bff',
-              'fixedVersions': [
-                '1.33.1-r6'
-              ],
-              'installedVersion': '1.33.1-r3',
-              'packageName':      'ssl_client',
-              'purl':             'pkg:apk/alpine/ssl_client@1.33.1-r3?arch=armhf&distro=3.14.2',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42383',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42383',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42383'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the evaluate()'
-            },
-            {
-              'cve':  'CVE-2021-42384',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the handle_special function",
-              'diffID':        'sha256:ae8b256995f2365db83229ef1f84a4df71a9874c3f8702fb8baa431fc9718bff',
-              'fixedVersions': [
-                '1.33.1-r6'
-              ],
-              'installedVersion': '1.33.1-r3',
-              'packageName':      'ssl_client',
-              'purl':             'pkg:apk/alpine/ssl_client@1.33.1-r3?arch=armhf&distro=3.14.2',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42384',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42384',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42384'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the handle_special()'
-            },
-            {
-              'cve':  'CVE-2021-42385',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the evaluate function",
-              'diffID':        'sha256:ae8b256995f2365db83229ef1f84a4df71a9874c3f8702fb8baa431fc9718bff',
-              'fixedVersions': [
-                '1.33.1-r6'
-              ],
-              'installedVersion': '1.33.1-r3',
-              'packageName':      'ssl_client',
-              'purl':             'pkg:apk/alpine/ssl_client@1.33.1-r3?arch=armhf&distro=3.14.2',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42385',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42385',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42385'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the evaluate()'
-            },
-            {
-              'cve':  'CVE-2021-42386',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the nvalloc function",
-              'diffID':        'sha256:ae8b256995f2365db83229ef1f84a4df71a9874c3f8702fb8baa431fc9718bff',
-              'fixedVersions': [
-                '1.33.1-r6'
-              ],
-              'installedVersion': '1.33.1-r3',
-              'packageName':      'ssl_client',
-              'purl':             'pkg:apk/alpine/ssl_client@1.33.1-r3?arch=armhf&distro=3.14.2',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42386',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42386',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42386'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the nvalloc()'
-            },
-            {
-              'cve':  'CVE-2022-28391',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '8.8',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-88'
-              ],
-              'description':   "BusyBox through 1.35.0 allows remote attackers to execute arbitrary code if netstat is used to print a DNS PTR record's value to a VT compatible terminal. Alternatively, the attacker could choose to change the terminal's colors.",
-              'diffID':        'sha256:ae8b256995f2365db83229ef1f84a4df71a9874c3f8702fb8baa431fc9718bff',
-              'fixedVersions': [
-                '1.33.1-r7'
-              ],
-              'installedVersion': '1.33.1-r3',
-              'packageName':      'ssl_client',
-              'purl':             'pkg:apk/alpine/ssl_client@1.33.1-r3?arch=armhf&distro=3.14.2',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2022-28391',
-                'https://git.alpinelinux.org/aports/plain/main/busybox/0001-libbb-sockaddr2str-ensure-only-printable-characters-.patch',
-                'https://git.alpinelinux.org/aports/plain/main/busybox/0002-nslookup-sanitize-all-printed-strings-with-printable.patch',
-                'https://gitlab.alpinelinux.org/alpine/aports/-/issues/13661',
-                'https://nvd.nist.gov/vuln/detail/CVE-2022-28391',
-                'https://www.cve.org/CVERecord?id=CVE-2022-28391'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: remote attackers may execute arbitrary code if netstat is used'
-            },
-            {
-              'cve':  'CVE-2021-42374',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '5.7',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-125'
-              ],
-              'description':   "An out-of-bounds heap read in Busybox's unlzma applet leads to information leak and denial of service when crafted LZMA-compressed input is decompressed. This can be triggered by any applet/format that",
-              'diffID':        'sha256:ae8b256995f2365db83229ef1f84a4df71a9874c3f8702fb8baa431fc9718bff',
-              'fixedVersions': [
-                '1.33.1-r4'
-              ],
-              'installedVersion': '1.33.1-r3',
-              'packageName':      'ssl_client',
-              'purl':             'pkg:apk/alpine/ssl_client@1.33.1-r3?arch=armhf&distro=3.14.2',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42374',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42374',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42374'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'busybox: out-of-bounds read in unlzma applet leads to information leak and denial of service when crafted LZMA-compressed input is decompressed'
-            },
-            {
-              'cve':  'CVE-2021-42375',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.5',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '4.1',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-159'
-              ],
-              'description':   "An incorrect handling of a special element in Busybox's ash applet leads to denial of service when processing a crafted shell command, due to the shell mistaking specific characters for reserved characters. This may be used for DoS under rare conditions of filtered command input.",
-              'diffID':        'sha256:ae8b256995f2365db83229ef1f84a4df71a9874c3f8702fb8baa431fc9718bff',
-              'fixedVersions': [
-                '1.33.1-r5'
-              ],
-              'installedVersion': '1.33.1-r3',
-              'packageName':      'ssl_client',
-              'purl':             'pkg:apk/alpine/ssl_client@1.33.1-r3?arch=armhf&distro=3.14.2',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42375',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42375',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42375'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'busybox: incorrect handling of a special element in ash applet leads to denial of service when processing a crafted shell command'
-            },
-            {
-              'cve':  'CVE-2022-37434',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '9.8',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-787',
-                'CWE-120'
-              ],
-              'description':   'zlib through 1.2.12 has a heap-based buffer over-read or buffer overflow in inflate in inflate.c via a large gzip header extra field. NOTE: only applications that call inflateGetHeader are affected. Some common applications bundle the affected zlib source code but may be unable to call inflateGetHeader (e.g., see the nodejs/node reference).',
-              'diffID':        'sha256:ae8b256995f2365db83229ef1f84a4df71a9874c3f8702fb8baa431fc9718bff',
-              'fixedVersions': [
-                '1.2.12-r2'
-              ],
-              'installedVersion': '1.2.11-r3',
-              'packageName':      'zlib',
-              'purl':             'pkg:apk/alpine/zlib@1.2.11-r3?arch=armhf&distro=3.14.2',
-              'references':       [
-                'http://seclists.org/fulldisclosure/2022/Oct/37',
-                'http://seclists.org/fulldisclosure/2022/Oct/38',
-                'http://seclists.org/fulldisclosure/2022/Oct/41',
-                'http://seclists.org/fulldisclosure/2022/Oct/42',
-                'http://www.openwall.com/lists/oss-security/2022/08/05/2',
-                'http://www.openwall.com/lists/oss-security/2022/08/09/1',
-                'https://access.redhat.com/errata/RHSA-2022:8291',
-                'https://access.redhat.com/security/cve/CVE-2022-37434',
-                'https://bugzilla.redhat.com/2116639',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2053198',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2077431',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2081296',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2116639',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-37434',
-                'https://errata.almalinux.org/9/ALSA-2022-8291.html',
-                'https://errata.rockylinux.org/RLSA-2022:8291',
-                'https://github.com/curl/curl/issues/9271',
-                'https://github.com/ivd38/zlib_overflow',
-                'https://github.com/madler/zlib/blob/21767c654d31d2dccdde4330529775c6c5fd5389/zlib.h#L1062-L1063',
-                'https://github.com/madler/zlib/commit/1eb7682f845ac9e9bf9ae35bbfb3bad5dacbd91d',
-                'https://github.com/madler/zlib/commit/eff308af425b67093bab25f80f1ae950166bece1',
-                'https://github.com/nodejs/node/blob/75b68c6e4db515f76df73af476eccf382bbcb00a/deps/zlib/inflate.c#L762-L764',
-                'https://linux.oracle.com/cve/CVE-2022-37434.html',
-                'https://linux.oracle.com/errata/ELSA-2023-1095.html',
-                'https://lists.debian.org/debian-lts-announce/2022/09/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JWN4VE3JQR4O2SOUS5TXNLANRPMHWV4I/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NMBOJ77A7T7PQCARMDUK75TE6LLESZ3O/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PAVPQNCG3XRLCLNSQRM3KAN5ZFMVXVTY/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/X5U7OTKZSHY2I3ZFJSR2SHFHW72RKGDK/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YRQAI7H4M4RQZ2IWZUEEXECBE5D56BH2/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2022-37434',
-                'https://security.netapp.com/advisory/ntap-20220901-0005/',
-                'https://security.netapp.com/advisory/ntap-20230427-0007/',
-                'https://support.apple.com/kb/HT213488',
-                'https://support.apple.com/kb/HT213489',
-                'https://support.apple.com/kb/HT213490',
-                'https://support.apple.com/kb/HT213491',
-                'https://support.apple.com/kb/HT213493',
-                'https://support.apple.com/kb/HT213494',
-                'https://ubuntu.com/security/notices/USN-5570-1',
-                'https://ubuntu.com/security/notices/USN-5570-2',
-                'https://ubuntu.com/security/notices/USN-5573-1',
-                'https://ubuntu.com/security/notices/USN-6736-1',
-                'https://ubuntu.com/security/notices/USN-6736-2',
-                'https://www.cve.org/CVERecord?id=CVE-2022-37434',
-                'https://www.debian.org/security/2022/dsa-5218'
-              ],
-              'severity':   'CRITICAL',
-              'suppressed': false,
-              'title':      'zlib: heap-based buffer over-read and overflow in inflate() in inflate.c via a large gzip header extra field'
-            },
-            {
-              'cve':  'CVE-2018-25032',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'nvd': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '8.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-787'
-              ],
-              'description':   'zlib before 1.2.12 allows memory corruption when deflating (i.e., when compressing) if the input has many distant matches.',
-              'diffID':        'sha256:ae8b256995f2365db83229ef1f84a4df71a9874c3f8702fb8baa431fc9718bff',
-              'fixedVersions': [
-                '1.2.12-r0'
-              ],
-              'installedVersion': '1.2.11-r3',
-              'packageName':      'zlib',
-              'purl':             'pkg:apk/alpine/zlib@1.2.11-r3?arch=armhf&distro=3.14.2',
-              'references':       [
-                'http://seclists.org/fulldisclosure/2022/May/33',
-                'http://seclists.org/fulldisclosure/2022/May/35',
-                'http://seclists.org/fulldisclosure/2022/May/38',
-                'http://www.openwall.com/lists/oss-security/2022/03/25/2',
-                'http://www.openwall.com/lists/oss-security/2022/03/26/1',
-                'https://access.redhat.com/errata/RHSA-2022:8420',
-                'https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-25032.json',
-                'https://access.redhat.com/security/cve/CVE-2018-25032',
-                'https://bugzilla.redhat.com/2067945',
-                'https://cert-portal.siemens.com/productcert/pdf/ssa-333517.pdf',
-                'https://errata.almalinux.org/9/ALSA-2022-8420.html',
-                'https://github.com/advisories/GHSA-jc36-42cf-vqwj',
-                'https://github.com/madler/zlib/commit/5c44459c3b28a9bd3283aaceab7c615f8020c531',
-                'https://github.com/madler/zlib/compare/v1.2.11...v1.2.12',
-                'https://github.com/madler/zlib/issues/605',
-                'https://github.com/rubysec/ruby-advisory-db/blob/master/gems/nokogiri/CVE-2018-25032.yml',
-                'https://github.com/sparklemotion/nokogiri/releases/tag/v1.13.4',
-                'https://github.com/sparklemotion/nokogiri/security/advisories/GHSA-v6gp-9mmm-c6p5',
-                'https://groups.google.com/g/ruby-security-ann/c/vX7qSjsvWis/m/TJWN4oOKBwAJ',
-                'https://linux.oracle.com/cve/CVE-2018-25032.html',
-                'https://linux.oracle.com/errata/ELSA-2022-9565.html',
-                'https://lists.debian.org/debian-lts-announce/2022/04/msg00000.html',
-                'https://lists.debian.org/debian-lts-announce/2022/05/msg00008.html',
-                'https://lists.debian.org/debian-lts-announce/2022/09/msg00023.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DCZFIJBJTZ7CL5QXBFKTQ22Q26VINRUF/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DF62MVMH3QUGMBDCB3DY2ERQ6EBHTADB/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JZZPTWRYQULAOL3AW7RZJNVZ2UONXCV4/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NS2D2GFPFGOJUL4WQ3DUAY7HF4VWQ77F/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VOKNP2L734AEL47NRYGVZIKEFOUBQY5Y/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/XOKFMSNQ5D5WGMALBNBXU3GE442V74WU/',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/DCZFIJBJTZ7CL5QXBFKTQ22Q26VINRUF',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/DCZFIJBJTZ7CL5QXBFKTQ22Q26VINRUF/',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/DF62MVMH3QUGMBDCB3DY2ERQ6EBHTADB',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/DF62MVMH3QUGMBDCB3DY2ERQ6EBHTADB/',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/JZZPTWRYQULAOL3AW7RZJNVZ2UONXCV4',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/JZZPTWRYQULAOL3AW7RZJNVZ2UONXCV4/',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/NS2D2GFPFGOJUL4WQ3DUAY7HF4VWQ77F',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/NS2D2GFPFGOJUL4WQ3DUAY7HF4VWQ77F/',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/VOKNP2L734AEL47NRYGVZIKEFOUBQY5Y',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/VOKNP2L734AEL47NRYGVZIKEFOUBQY5Y/',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/XOKFMSNQ5D5WGMALBNBXU3GE442V74WU',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/XOKFMSNQ5D5WGMALBNBXU3GE442V74WU/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2018-25032',
-                'https://security.gentoo.org/glsa/202210-42',
-                'https://security.netapp.com/advisory/ntap-20220526-0009',
-                'https://security.netapp.com/advisory/ntap-20220526-0009/',
-                'https://security.netapp.com/advisory/ntap-20220729-0004',
-                'https://security.netapp.com/advisory/ntap-20220729-0004/',
-                'https://support.apple.com/kb/HT213255',
-                'https://support.apple.com/kb/HT213256',
-                'https://support.apple.com/kb/HT213257',
-                'https://ubuntu.com/security/notices/USN-5355-1',
-                'https://ubuntu.com/security/notices/USN-5355-2',
-                'https://ubuntu.com/security/notices/USN-5359-1',
-                'https://ubuntu.com/security/notices/USN-5359-2',
-                'https://ubuntu.com/security/notices/USN-5739-1',
-                'https://ubuntu.com/security/notices/USN-6736-1',
-                'https://ubuntu.com/security/notices/USN-6736-2',
-                'https://www.cve.org/CVERecord?id=CVE-2018-25032',
-                'https://www.debian.org/security/2022/dsa-5111',
-                'https://www.openwall.com/lists/oss-security/2022/03/24/1',
-                'https://www.openwall.com/lists/oss-security/2022/03/28/1',
-                'https://www.openwall.com/lists/oss-security/2022/03/28/3',
-                'https://www.oracle.com/security-alerts/cpujul2022.html'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'zlib: A flaw found in zlib when compressing (not decompressing) certain inputs'
-            }
-          ]
-        }
-      ],
-      'summary': {
-        'critical':   1,
-        'high':       32,
-        'low':        0,
-        'medium':     10,
-        'suppressed': 0,
-        'unknown':    0
-      }
-    }
-  },
-  {
-    'id':    'default/4d58827a3b779abca47c78c94c2264022a3290f3cce5de85a7a053a1209c1ad7',
-    'type':  'storage.sbomscanner.kubewarden.io.vulnerabilityreport',
-    'links': {
-      'patch':  'https://localhost:8005/v1/storage.sbomscanner.kubewarden.io.vulnerabilityreports/default/4d58827a3b779abca47c78c94c2264022a3290f3cce5de85a7a053a1209c1ad7',
-      'remove': 'https://localhost:8005/v1/storage.sbomscanner.kubewarden.io.vulnerabilityreports/default/4d58827a3b779abca47c78c94c2264022a3290f3cce5de85a7a053a1209c1ad7',
-      'self':   'https://localhost:8005/v1/storage.sbomscanner.kubewarden.io.vulnerabilityreports/default/4d58827a3b779abca47c78c94c2264022a3290f3cce5de85a7a053a1209c1ad7',
-      'update': 'https://localhost:8005/v1/storage.sbomscanner.kubewarden.io.vulnerabilityreports/default/4d58827a3b779abca47c78c94c2264022a3290f3cce5de85a7a053a1209c1ad7',
-      'view':   'https://localhost:8005/apis/storage.sbomscanner.kubewarden.io/v1alpha1/namespaces/default/vulnerabilityreports/4d58827a3b779abca47c78c94c2264022a3290f3cce5de85a7a053a1209c1ad7'
-    },
-    'apiVersion':    'storage.sbomscanner.kubewarden.io/v1alpha1',
-    'imageMetadata': {
-      'digest':      'sha256:cbbabaca3bd3b2617ffff036d987a82bcfe923fd4bf985f338c12e74af1bd081',
-      'platform':    'linux/386',
-      'registry':    'lsong-demo1',
-      'registryURI': 'registry-1.docker.io',
-      'repository':  'library/alpine',
-      'tag':         '3.20.5'
-    },
-    'kind':     'VulnerabilityReport',
-    'metadata': {
-      'creationTimestamp': '2026-01-14T18:51:35Z',
-      'fields':            [
-        '4d58827a3b779abca47c78c94c2264022a3290f3cce5de85a7a053a1209c1ad7',
-        'registry-1.docker.io/library/alpine:3.20.5',
-        'linux/386',
-        '18 (0 suppressed)'
-      ],
-      'labels': {
-        'app.kubernetes.io/managed-by':          'sbomscanner',
-        'app.kubernetes.io/part-of':             'sbomscanner',
-        'sbomscanner.kubewarden.io/scanjob-uid': '445c600a-c4b6-40b3-bd71-f2d2140a37d5'
-      },
-      'name':            '4d58827a3b779abca47c78c94c2264022a3290f3cce5de85a7a053a1209c1ad7',
-      'namespace':       'default',
-      'ownerReferences': [
-        {
-          'apiVersion':         'storage.sbomscanner.kubewarden.io/v1alpha1',
-          'blockOwnerDeletion': true,
-          'controller':         true,
-          'kind':               'SBOM',
-          'name':               '4d58827a3b779abca47c78c94c2264022a3290f3cce5de85a7a053a1209c1ad7',
-          'uid':                'b361edcc-de46-4420-97d4-8039f5c4f28d'
-        }
-      ],
-      'relationships': [
-        {
-          'fromId':   'default/4d58827a3b779abca47c78c94c2264022a3290f3cce5de85a7a053a1209c1ad7',
-          'fromType': 'storage.sbomscanner.kubewarden.io.sbom',
-          'rel':      'owner',
-          'state':    'active',
-          'message':  'Resource is current'
-        }
-      ],
-      'resourceVersion': '1',
-      'state':           {
-        'error':         false,
-        'message':       'Resource is current',
-        'name':          'active',
-        'transitioning': false
-      },
-      'uid': 'f40345bc-b40c-4c92-920f-2371d33029cd'
-    },
-    'report': {
-      'results': [
-        {
-          'class':           'os-pkgs',
-          'target':          '/var/run/worker/trivy.sbom.455495768.json (alpine 3.20.5)',
-          'type':            'alpine',
-          'vulnerabilities': [
-            {
-              'cve':  'CVE-2024-58251',
-              'cwes': [
-                'CWE-150'
-              ],
-              'description':   'In netstat in BusyBox through 1.37.0, local users can launch of network application with an argv[0] containing an ANSI terminal escape sequence, leading to a denial of service (terminal locked up) when netstat is used by a victim.',
-              'diffID':        'sha256:cbd679fb2f5a3c370e355b07e8d87a035b2e3e2fec0f8ad7db275c5e212e8631',
-              'fixedVersions': [
-                '1.36.1-r31'
-              ],
-              'installedVersion': '1.36.1-r29',
-              'packageName':      'busybox',
-              'purl':             'pkg:apk/alpine/busybox@1.36.1-r29?arch=x86&distro=3.20.5',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2025/04/23/6',
-                'https://bugs.busybox.net/show_bug.cgi?id=15922',
-                'https://www.busybox.net',
-                'https://www.busybox.net/downloads/',
-                'https://www.cve.org/CVERecord?id=CVE-2024-58251'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'In netstat in BusyBox through 1.37.0, local users can launch of networ ...'
-            },
-            {
-              'cve':  'CVE-2025-46394',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '3.3',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-451'
-              ],
-              'description':   'In tar in BusyBox through 1.37.0, a TAR archive can have filenames hidden from a listing through the use of terminal escape sequences.',
-              'diffID':        'sha256:cbd679fb2f5a3c370e355b07e8d87a035b2e3e2fec0f8ad7db275c5e212e8631',
-              'fixedVersions': [
-                '1.36.1-r31'
-              ],
-              'installedVersion': '1.36.1-r29',
-              'packageName':      'busybox',
-              'purl':             'pkg:apk/alpine/busybox@1.36.1-r29?arch=x86&distro=3.20.5',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2025/04/23/5',
-                'http://www.openwall.com/lists/oss-security/2025/04/24/3',
-                'https://bugs.busybox.net/show_bug.cgi?id=16018',
-                'https://lists.busybox.net/pipermail/busybox/2024-July/090806.html',
-                'https://lists.busybox.net/pipermail/busybox/2024-July/090814.html',
-                'https://www.busybox.net',
-                'https://www.busybox.net/downloads/',
-                'https://www.cve.org/CVERecord?id=CVE-2025-46394',
-                'https://www.openwall.com/lists/oss-security/2025/04/23/1'
-              ],
-              'severity':   'LOW',
-              'suppressed': false,
-              'title':      'In tar in BusyBox through 1.37.0, a TAR archive can have filenames hid ...'
-            },
-            {
-              'cve':  'CVE-2024-58251',
-              'cwes': [
-                'CWE-150'
-              ],
-              'description':   'In netstat in BusyBox through 1.37.0, local users can launch of network application with an argv[0] containing an ANSI terminal escape sequence, leading to a denial of service (terminal locked up) when netstat is used by a victim.',
-              'diffID':        'sha256:cbd679fb2f5a3c370e355b07e8d87a035b2e3e2fec0f8ad7db275c5e212e8631',
-              'fixedVersions': [
-                '1.36.1-r31'
-              ],
-              'installedVersion': '1.36.1-r29',
-              'packageName':      'busybox-binsh',
-              'purl':             'pkg:apk/alpine/busybox-binsh@1.36.1-r29?arch=x86&distro=3.20.5',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2025/04/23/6',
-                'https://bugs.busybox.net/show_bug.cgi?id=15922',
-                'https://www.busybox.net',
-                'https://www.busybox.net/downloads/',
-                'https://www.cve.org/CVERecord?id=CVE-2024-58251'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'In netstat in BusyBox through 1.37.0, local users can launch of networ ...'
-            },
-            {
-              'cve':  'CVE-2025-46394',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '3.3',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-451'
-              ],
-              'description':   'In tar in BusyBox through 1.37.0, a TAR archive can have filenames hidden from a listing through the use of terminal escape sequences.',
-              'diffID':        'sha256:cbd679fb2f5a3c370e355b07e8d87a035b2e3e2fec0f8ad7db275c5e212e8631',
-              'fixedVersions': [
-                '1.36.1-r31'
-              ],
-              'installedVersion': '1.36.1-r29',
-              'packageName':      'busybox-binsh',
-              'purl':             'pkg:apk/alpine/busybox-binsh@1.36.1-r29?arch=x86&distro=3.20.5',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2025/04/23/5',
-                'http://www.openwall.com/lists/oss-security/2025/04/24/3',
-                'https://bugs.busybox.net/show_bug.cgi?id=16018',
-                'https://lists.busybox.net/pipermail/busybox/2024-July/090806.html',
-                'https://lists.busybox.net/pipermail/busybox/2024-July/090814.html',
-                'https://www.busybox.net',
-                'https://www.busybox.net/downloads/',
-                'https://www.cve.org/CVERecord?id=CVE-2025-46394',
-                'https://www.openwall.com/lists/oss-security/2025/04/23/1'
-              ],
-              'severity':   'LOW',
-              'suppressed': false,
-              'title':      'In tar in BusyBox through 1.37.0, a TAR archive can have filenames hid ...'
-            },
-            {
-              'cve':  'CVE-2024-12797',
-              'cvss': {
-                'redhat': {
-                  'v3score':  '7.4',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-392'
-              ],
-              'description':   "Issue summary: Clients using RFC7250 Raw Public Keys (RPKs) to authenticate a\nserver may fail to notice that the server was not authenticated, because\nhandshakes don't abort as expected when the SSL_VERIFY_PEER verification mode\nis set.\n\nImpact summary: TLS and DTLS connections using raw public keys may be\nvulnerable to man-in-middle attacks when server authentication failure is not\ndetected by clients.\n\nRPKs are disabled by default in both TLS clients and TLS servers.  The issue\nonly arises when TLS clients explicitly enable RPK use by the server, and the\nserver, likewise, enables sending of an RPK instead of an X.509 certificate\nchain.  The affected clients are those that then rely on the handshake to\nfail when the server's RPK fails to match one of the expected public keys,\nby setting the verification mode to SSL_VERIFY_PEER.\n\nClients that enable server-side raw public keys can still find out that raw\npublic key verification failed by calling SSL_get_verify_result(), and those\nthat do, and take appropriate action, are not affected.  This issue was\nintroduced in the initial implementation of RPK support in OpenSSL 3.2.\n\nThe FIPS modules in 3.4, 3.3, 3.2, 3.1 and 3.0 are not affected by this issue.",
-              'diffID':        'sha256:cbd679fb2f5a3c370e355b07e8d87a035b2e3e2fec0f8ad7db275c5e212e8631',
-              'fixedVersions': [
-                '3.3.3-r0'
-              ],
-              'installedVersion': '3.3.2-r1',
-              'packageName':      'libcrypto3',
-              'purl':             'pkg:apk/alpine/libcrypto3@3.3.2-r1?arch=x86&distro=3.20.5',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2025/02/11/3',
-                'http://www.openwall.com/lists/oss-security/2025/02/11/4',
-                'https://access.redhat.com/errata/RHSA-2025:1330',
-                'https://access.redhat.com/security/cve/CVE-2024-12797',
-                'https://bugzilla.redhat.com/2342757',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2342757',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-12797',
-                'https://errata.almalinux.org/9/ALSA-2025-1330.html',
-                'https://errata.rockylinux.org/RLSA-2025:1330',
-                'https://github.com/openssl/openssl/commit/738d4f9fdeaad57660dcba50a619fafced3fd5e9',
-                'https://github.com/openssl/openssl/commit/798779d43494549b611233f92652f0da5328fbe7',
-                'https://github.com/openssl/openssl/commit/87ebd203feffcf92ad5889df92f90bb0ee10a699',
-                'https://github.com/pyca/cryptography',
-                'https://github.com/pyca/cryptography/security/advisories/GHSA-79v4-65xg-pq4g',
-                'https://linux.oracle.com/cve/CVE-2024-12797.html',
-                'https://linux.oracle.com/errata/ELSA-2025-1330.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2024-12797',
-                'https://openssl-library.org/news/secadv/20250211.txt',
-                'https://security.netapp.com/advisory/ntap-20250214-0001/',
-                'https://ubuntu.com/security/notices/USN-7264-1',
-                'https://www.cve.org/CVERecord?id=CVE-2024-12797'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      "openssl: RFC7250 handshakes with unauthenticated servers don't abort as expected"
-            },
-            {
-              'cve':  'CVE-2024-13176',
-              'cvss': {
-                'redhat': {
-                  'v3score':  '4.7',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-385'
-              ],
-              'description':   'Issue summary: A timing side-channel which could potentially allow recovering\nthe private key exists in the ECDSA signature computation.\n\nImpact summary: A timing side-channel in ECDSA signature computations\ncould allow recovering the private key by an attacker. However, measuring\nthe timing would require either local access to the signing application or\na very fast network connection with low latency.\n\nThere is a timing signal of around 300 nanoseconds when the top word of\nthe inverted ECDSA nonce value is zero. This can happen with significant\nprobability only for some of the supported elliptic curves. In particular\nthe NIST P-521 curve is affected. To be able to measure this leak, the attacker\nprocess must either be located in the same physical computer or must\nhave a very fast network connection with low latency. For that reason\nthe severity of this vulnerability is Low.\n\nThe FIPS modules in 3.4, 3.3, 3.2, 3.1 and 3.0 are affected by this issue.',
-              'diffID':        'sha256:cbd679fb2f5a3c370e355b07e8d87a035b2e3e2fec0f8ad7db275c5e212e8631',
-              'fixedVersions': [
-                '3.3.2-r2'
-              ],
-              'installedVersion': '3.3.2-r1',
-              'packageName':      'libcrypto3',
-              'purl':             'pkg:apk/alpine/libcrypto3@3.3.2-r1?arch=x86&distro=3.20.5',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2025/01/20/2',
-                'https://access.redhat.com/errata/RHSA-2025:16046',
-                'https://access.redhat.com/security/cve/CVE-2024-13176',
-                'https://bugzilla.redhat.com/2359885',
-                'https://bugzilla.redhat.com/2359888',
-                'https://bugzilla.redhat.com/2359892',
-                'https://bugzilla.redhat.com/2359894',
-                'https://bugzilla.redhat.com/2359895',
-                'https://bugzilla.redhat.com/2359899',
-                'https://bugzilla.redhat.com/2359900',
-                'https://bugzilla.redhat.com/2359902',
-                'https://bugzilla.redhat.com/2359903',
-                'https://bugzilla.redhat.com/2359911',
-                'https://bugzilla.redhat.com/2359918',
-                'https://bugzilla.redhat.com/2359920',
-                'https://bugzilla.redhat.com/2359924',
-                'https://bugzilla.redhat.com/2359928',
-                'https://bugzilla.redhat.com/2359930',
-                'https://bugzilla.redhat.com/2359932',
-                'https://bugzilla.redhat.com/2359934',
-                'https://bugzilla.redhat.com/2359938',
-                'https://bugzilla.redhat.com/2359940',
-                'https://bugzilla.redhat.com/2359943',
-                'https://bugzilla.redhat.com/2359944',
-                'https://bugzilla.redhat.com/2359945',
-                'https://bugzilla.redhat.com/2359947',
-                'https://bugzilla.redhat.com/2359950',
-                'https://bugzilla.redhat.com/2359963',
-                'https://bugzilla.redhat.com/2359964',
-                'https://bugzilla.redhat.com/2359972',
-                'https://bugzilla.redhat.com/2370920',
-                'https://bugzilla.redhat.com/2380264',
-                'https://bugzilla.redhat.com/2380273',
-                'https://bugzilla.redhat.com/2380274',
-                'https://bugzilla.redhat.com/2380278',
-                'https://bugzilla.redhat.com/2380280',
-                'https://bugzilla.redhat.com/2380283',
-                'https://bugzilla.redhat.com/2380284',
-                'https://bugzilla.redhat.com/2380290',
-                'https://bugzilla.redhat.com/2380291',
-                'https://bugzilla.redhat.com/2380295',
-                'https://bugzilla.redhat.com/2380298',
-                'https://bugzilla.redhat.com/2380306',
-                'https://bugzilla.redhat.com/2380308',
-                'https://bugzilla.redhat.com/2380309',
-                'https://bugzilla.redhat.com/2380310',
-                'https://bugzilla.redhat.com/2380312',
-                'https://bugzilla.redhat.com/2380313',
-                'https://bugzilla.redhat.com/2380320',
-                'https://bugzilla.redhat.com/2380321',
-                'https://bugzilla.redhat.com/2380322',
-                'https://bugzilla.redhat.com/2380326',
-                'https://bugzilla.redhat.com/2380327',
-                'https://bugzilla.redhat.com/2380334',
-                'https://bugzilla.redhat.com/2380335',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2338999',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359885',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359888',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359892',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359894',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359895',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359899',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359900',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359902',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359903',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359911',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359918',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359920',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359924',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359928',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359930',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359932',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359934',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359938',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359940',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359943',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359944',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359945',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359947',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359950',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359963',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359964',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359972',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2370920',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380264',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380273',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380274',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380278',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380280',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380283',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380284',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380290',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380291',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380295',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380298',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380306',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380308',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380309',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380310',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380312',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380313',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380320',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380321',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380322',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380326',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380327',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380334',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380335',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-13176',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21574',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21575',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21577',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21579',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21580',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21581',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21584',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21585',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21588',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30681',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30682',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30683',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30684',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30685',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30687',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30688',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30689',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30693',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30695',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30696',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30699',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30703',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30704',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30705',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30715',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30721',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30722',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50077',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50078',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50079',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50080',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50081',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50082',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50083',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50084',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50085',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50086',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50087',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50088',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50091',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50092',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50093',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50094',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50096',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50097',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50098',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50099',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50100',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50101',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50102',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50104',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-5399',
-                'https://errata.almalinux.org/9/ALSA-2025-16046.html',
-                'https://errata.rockylinux.org/RLSA-2025:15699',
-                'https://github.com/openssl/openssl/commit/07272b05b04836a762b4baa874958af51d513844',
-                'https://github.com/openssl/openssl/commit/2af62e74fb59bc469506bc37eb2990ea408d9467',
-                'https://github.com/openssl/openssl/commit/392dcb336405a0c94486aa6655057f59fd3a0902',
-                'https://github.com/openssl/openssl/commit/4b1cb94a734a7d4ec363ac0a215a25c181e11f65',
-                'https://github.com/openssl/openssl/commit/77c608f4c8857e63e98e66444e2e761c9627916f',
-                'https://github.openssl.org/openssl/extended-releases/commit/0d5fd1ab987f7571e2c955d8d8b638fc0fb54ded',
-                'https://github.openssl.org/openssl/extended-releases/commit/a2639000db19878d5d89586ae7b725080592ae86',
-                'https://linux.oracle.com/cve/CVE-2024-13176.html',
-                'https://linux.oracle.com/errata/ELSA-2025-16046.html',
-                'https://lists.debian.org/debian-lts-announce/2025/05/msg00028.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2024-13176',
-                'https://openssl-library.org/news/secadv/20250120.txt',
-                'https://security.netapp.com/advisory/ntap-20250124-0005/',
-                'https://security.netapp.com/advisory/ntap-20250418-0010/',
-                'https://security.netapp.com/advisory/ntap-20250502-0006/',
-                'https://ubuntu.com/security/notices/USN-7264-1',
-                'https://ubuntu.com/security/notices/USN-7278-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2024-13176',
-                'https://www.oracle.com/security-alerts/cpuapr2025.html#AppendixMSQL'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: Timing side-channel in ECDSA signature computation'
-            },
-            {
-              'cve':  'CVE-2025-9230',
-              'cvss': {
-                'redhat': {
-                  'v3score':  '5.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L'
-                }
-              },
-              'cwes': [
-                'CWE-125',
-                'CWE-787'
-              ],
-              'description':   'Issue summary: An application trying to decrypt CMS messages encrypted using\npassword based encryption can trigger an out-of-bounds read and write.\n\nImpact summary: This out-of-bounds read may trigger a crash which leads to\nDenial of Service for an application. The out-of-bounds write can cause\na memory corruption which can have various consequences including\na Denial of Service or Execution of attacker-supplied code.\n\nAlthough the consequences of a successful exploit of this vulnerability\ncould be severe, the probability that the attacker would be able to\nperform it is low. Besides, password based (PWRI) encryption support in CMS\nmessages is very rarely used. For that reason the issue was assessed as\nModerate severity according to our Security Policy.\n\nThe FIPS modules in 3.5, 3.4, 3.3, 3.2, 3.1 and 3.0 are not affected by this\nissue, as the CMS implementation is outside the OpenSSL FIPS module\nboundary.',
-              'diffID':        'sha256:cbd679fb2f5a3c370e355b07e8d87a035b2e3e2fec0f8ad7db275c5e212e8631',
-              'fixedVersions': [
-                '3.3.5-r0'
-              ],
-              'installedVersion': '3.3.2-r1',
-              'packageName':      'libcrypto3',
-              'purl':             'pkg:apk/alpine/libcrypto3@3.3.2-r1?arch=x86&distro=3.20.5',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2025/09/30/5',
-                'https://access.redhat.com/errata/RHSA-2025:21255',
-                'https://access.redhat.com/security/cve/CVE-2025-9230',
-                'https://bugzilla.redhat.com/2396054',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2396054',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-9230',
-                'https://errata.almalinux.org/9/ALSA-2025-21255.html',
-                'https://errata.rockylinux.org/RLSA-2025:21255',
-                'https://github.com/openssl/openssl/commit/5965ea5dd6960f36d8b7f74f8eac67a8eb8f2b45',
-                'https://github.com/openssl/openssl/commit/9e91358f365dee6c446dcdcdb01c04d2743fd280',
-                'https://github.com/openssl/openssl/commit/a79c4ce559c6a3a8fd4109e9f33c1185d5bf2def',
-                'https://github.com/openssl/openssl/commit/b5282d677551afda7d20e9c00e09561b547b2dfd',
-                'https://github.com/openssl/openssl/commit/bae259a211ada6315dc50900686daaaaaa55f482',
-                'https://github.openssl.org/openssl/extended-releases/commit/c2b96348bfa662f25f4fabf81958ae822063dae3',
-                'https://github.openssl.org/openssl/extended-releases/commit/dfbaf161d8dafc1132dd88cd48ad990ed9b4c8ba',
-                'https://linux.oracle.com/cve/CVE-2025-9230.html',
-                'https://linux.oracle.com/errata/ELSA-2026-0337.html',
-                'https://lists.debian.org/debian-lts-announce/2025/10/msg00001.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2025-9230',
-                'https://openssl-library.org/news/secadv/20250930.txt',
-                'https://ubuntu.com/security/notices/USN-7786-1',
-                'https://www.cve.org/CVERecord?id=CVE-2025-9230'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: Out-of-bounds read & write in RFC 3211 KEK Unwrap'
-            },
-            {
-              'cve':  'CVE-2025-9231',
-              'cvss': {
-                'redhat': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-385'
-              ],
-              'description':   'Issue summary: A timing side-channel which could potentially allow remote\nrecovery of the private key exists in the SM2 algorithm implementation on 64 bit\nARM platforms.\n\nImpact summary: A timing side-channel in SM2 signature computations on 64 bit\nARM platforms could allow recovering the private key by an attacker..\n\nWhile remote key recovery over a network was not attempted by the reporter,\ntiming measurements revealed a timing signal which may allow such an attack.\n\nOpenSSL does not directly support certificates with SM2 keys in TLS, and so\nthis CVE is not relevant in most TLS contexts.  However, given that it is\npossible to add support for such certificates via a custom provider, coupled\nwith the fact that in such a custom provider context the private key may be\nrecoverable via remote timing measurements, we consider this to be a Moderate\nseverity issue.\n\nThe FIPS modules in 3.5, 3.4, 3.3, 3.2, 3.1 and 3.0 are not affected by this\nissue, as SM2 is not an approved algorithm.',
-              'diffID':        'sha256:cbd679fb2f5a3c370e355b07e8d87a035b2e3e2fec0f8ad7db275c5e212e8631',
-              'fixedVersions': [
-                '3.3.5-r0'
-              ],
-              'installedVersion': '3.3.2-r1',
-              'packageName':      'libcrypto3',
-              'purl':             'pkg:apk/alpine/libcrypto3@3.3.2-r1?arch=x86&distro=3.20.5',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2025/09/30/5',
-                'https://access.redhat.com/security/cve/CVE-2025-9231',
-                'https://github.com/openssl/openssl/commit/567f64386e43683888212226824b6a179885a0fe',
-                'https://github.com/openssl/openssl/commit/cba616c26ac8e7b37de5e77762e505ba5ca51698',
-                'https://github.com/openssl/openssl/commit/eed5adc9f969d77c94f213767acbb41ff923b6f4',
-                'https://github.com/openssl/openssl/commit/fc47a2ec078912b3e914fab5734535e76c4820c2',
-                'https://nvd.nist.gov/vuln/detail/CVE-2025-9231',
-                'https://openssl-library.org/news/secadv/20250930.txt',
-                'https://ubuntu.com/security/notices/USN-7786-1',
-                'https://www.cve.org/CVERecord?id=CVE-2025-9231'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: Timing side-channel in SM2 algorithm on 64 bit ARM'
-            },
-            {
-              'cve':  'CVE-2025-9232',
-              'cvss': {
-                'redhat': {
-                  'v3score':  '3.1',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L'
-                }
-              },
-              'cwes': [
-                'CWE-125'
-              ],
-              'description':   "Issue summary: An application using the OpenSSL HTTP client API functions may\ntrigger an out-of-bounds read if the 'no_proxy' environment variable is set and\nthe host portion of the authority component of the HTTP URL is an IPv6 address.\n\nImpact summary: An out-of-bounds read can trigger a crash which leads to\nDenial of Service for an application.\n\nThe OpenSSL HTTP client API functions can be used directly by applications\nbut they are also used by the OCSP client functions and CMP (Certificate\nManagement Protocol) client implementation in OpenSSL. However the URLs used\nby these implementations are unlikely to be controlled by an attacker.\n\nIn this vulnerable code the out of bounds read can only trigger a crash.\nFurthermore the vulnerability requires an attacker-controlled URL to be\npassed from an application to the OpenSSL function and the user has to have\na 'no_proxy' environment variable set. For the aforementioned reasons the\nissue was assessed as Low severity.\n\nThe vulnerable code was introduced in the following patch releases:\n3.0.16, 3.1.8, 3.2.4, 3.3.3, 3.4.0 and 3.5.0.\n\nThe FIPS modules in 3.5, 3.4, 3.3, 3.2, 3.1 and 3.0 are not affected by this\nissue, as the HTTP client implementation is outside the OpenSSL FIPS module\nboundary.",
-              'diffID':        'sha256:cbd679fb2f5a3c370e355b07e8d87a035b2e3e2fec0f8ad7db275c5e212e8631',
-              'fixedVersions': [
-                '3.3.5-r0'
-              ],
-              'installedVersion': '3.3.2-r1',
-              'packageName':      'libcrypto3',
-              'purl':             'pkg:apk/alpine/libcrypto3@3.3.2-r1?arch=x86&distro=3.20.5',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2025/09/30/5',
-                'https://access.redhat.com/security/cve/CVE-2025-9232',
-                'https://github.com/openssl/openssl/commit/2b4ec20e47959170422922eaff25346d362dcb35',
-                'https://github.com/openssl/openssl/commit/654dc11d23468a74fc8ea4672b702dd3feb7be4b',
-                'https://github.com/openssl/openssl/commit/7cf21a30513c9e43c4bc3836c237cf086e194af3',
-                'https://github.com/openssl/openssl/commit/89e790ac431125a4849992858490bed6b225eadf',
-                'https://github.com/openssl/openssl/commit/bbf38c034cdabd0a13330abcc4855c866f53d2e0',
-                'https://nvd.nist.gov/vuln/detail/CVE-2025-9232',
-                'https://openssl-library.org/news/secadv/20250930.txt',
-                'https://ubuntu.com/security/notices/USN-7786-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2025-9232'
-              ],
-              'severity':   'LOW',
-              'suppressed': false,
-              'title':      'openssl: Out-of-bounds read in HTTP client no_proxy handling'
-            },
-            {
-              'cve':  'CVE-2024-12797',
-              'cvss': {
-                'redhat': {
-                  'v3score':  '7.4',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-392'
-              ],
-              'description':   "Issue summary: Clients using RFC7250 Raw Public Keys (RPKs) to authenticate a\nserver may fail to notice that the server was not authenticated, because\nhandshakes don't abort as expected when the SSL_VERIFY_PEER verification mode\nis set.\n\nImpact summary: TLS and DTLS connections using raw public keys may be\nvulnerable to man-in-middle attacks when server authentication failure is not\ndetected by clients.\n\nRPKs are disabled by default in both TLS clients and TLS servers.  The issue\nonly arises when TLS clients explicitly enable RPK use by the server, and the\nserver, likewise, enables sending of an RPK instead of an X.509 certificate\nchain.  The affected clients are those that then rely on the handshake to\nfail when the server's RPK fails to match one of the expected public keys,\nby setting the verification mode to SSL_VERIFY_PEER.\n\nClients that enable server-side raw public keys can still find out that raw\npublic key verification failed by calling SSL_get_verify_result(), and those\nthat do, and take appropriate action, are not affected.  This issue was\nintroduced in the initial implementation of RPK support in OpenSSL 3.2.\n\nThe FIPS modules in 3.4, 3.3, 3.2, 3.1 and 3.0 are not affected by this issue.",
-              'diffID':        'sha256:cbd679fb2f5a3c370e355b07e8d87a035b2e3e2fec0f8ad7db275c5e212e8631',
-              'fixedVersions': [
-                '3.3.3-r0'
-              ],
-              'installedVersion': '3.3.2-r1',
-              'packageName':      'libssl3',
-              'purl':             'pkg:apk/alpine/libssl3@3.3.2-r1?arch=x86&distro=3.20.5',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2025/02/11/3',
-                'http://www.openwall.com/lists/oss-security/2025/02/11/4',
-                'https://access.redhat.com/errata/RHSA-2025:1330',
-                'https://access.redhat.com/security/cve/CVE-2024-12797',
-                'https://bugzilla.redhat.com/2342757',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2342757',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-12797',
-                'https://errata.almalinux.org/9/ALSA-2025-1330.html',
-                'https://errata.rockylinux.org/RLSA-2025:1330',
-                'https://github.com/openssl/openssl/commit/738d4f9fdeaad57660dcba50a619fafced3fd5e9',
-                'https://github.com/openssl/openssl/commit/798779d43494549b611233f92652f0da5328fbe7',
-                'https://github.com/openssl/openssl/commit/87ebd203feffcf92ad5889df92f90bb0ee10a699',
-                'https://github.com/pyca/cryptography',
-                'https://github.com/pyca/cryptography/security/advisories/GHSA-79v4-65xg-pq4g',
-                'https://linux.oracle.com/cve/CVE-2024-12797.html',
-                'https://linux.oracle.com/errata/ELSA-2025-1330.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2024-12797',
-                'https://openssl-library.org/news/secadv/20250211.txt',
-                'https://security.netapp.com/advisory/ntap-20250214-0001/',
-                'https://ubuntu.com/security/notices/USN-7264-1',
-                'https://www.cve.org/CVERecord?id=CVE-2024-12797'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      "openssl: RFC7250 handshakes with unauthenticated servers don't abort as expected"
-            },
-            {
-              'cve':  'CVE-2024-13176',
-              'cvss': {
-                'redhat': {
-                  'v3score':  '4.7',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-385'
-              ],
-              'description':   'Issue summary: A timing side-channel which could potentially allow recovering\nthe private key exists in the ECDSA signature computation.\n\nImpact summary: A timing side-channel in ECDSA signature computations\ncould allow recovering the private key by an attacker. However, measuring\nthe timing would require either local access to the signing application or\na very fast network connection with low latency.\n\nThere is a timing signal of around 300 nanoseconds when the top word of\nthe inverted ECDSA nonce value is zero. This can happen with significant\nprobability only for some of the supported elliptic curves. In particular\nthe NIST P-521 curve is affected. To be able to measure this leak, the attacker\nprocess must either be located in the same physical computer or must\nhave a very fast network connection with low latency. For that reason\nthe severity of this vulnerability is Low.\n\nThe FIPS modules in 3.4, 3.3, 3.2, 3.1 and 3.0 are affected by this issue.',
-              'diffID':        'sha256:cbd679fb2f5a3c370e355b07e8d87a035b2e3e2fec0f8ad7db275c5e212e8631',
-              'fixedVersions': [
-                '3.3.2-r2'
-              ],
-              'installedVersion': '3.3.2-r1',
-              'packageName':      'libssl3',
-              'purl':             'pkg:apk/alpine/libssl3@3.3.2-r1?arch=x86&distro=3.20.5',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2025/01/20/2',
-                'https://access.redhat.com/errata/RHSA-2025:16046',
-                'https://access.redhat.com/security/cve/CVE-2024-13176',
-                'https://bugzilla.redhat.com/2359885',
-                'https://bugzilla.redhat.com/2359888',
-                'https://bugzilla.redhat.com/2359892',
-                'https://bugzilla.redhat.com/2359894',
-                'https://bugzilla.redhat.com/2359895',
-                'https://bugzilla.redhat.com/2359899',
-                'https://bugzilla.redhat.com/2359900',
-                'https://bugzilla.redhat.com/2359902',
-                'https://bugzilla.redhat.com/2359903',
-                'https://bugzilla.redhat.com/2359911',
-                'https://bugzilla.redhat.com/2359918',
-                'https://bugzilla.redhat.com/2359920',
-                'https://bugzilla.redhat.com/2359924',
-                'https://bugzilla.redhat.com/2359928',
-                'https://bugzilla.redhat.com/2359930',
-                'https://bugzilla.redhat.com/2359932',
-                'https://bugzilla.redhat.com/2359934',
-                'https://bugzilla.redhat.com/2359938',
-                'https://bugzilla.redhat.com/2359940',
-                'https://bugzilla.redhat.com/2359943',
-                'https://bugzilla.redhat.com/2359944',
-                'https://bugzilla.redhat.com/2359945',
-                'https://bugzilla.redhat.com/2359947',
-                'https://bugzilla.redhat.com/2359950',
-                'https://bugzilla.redhat.com/2359963',
-                'https://bugzilla.redhat.com/2359964',
-                'https://bugzilla.redhat.com/2359972',
-                'https://bugzilla.redhat.com/2370920',
-                'https://bugzilla.redhat.com/2380264',
-                'https://bugzilla.redhat.com/2380273',
-                'https://bugzilla.redhat.com/2380274',
-                'https://bugzilla.redhat.com/2380278',
-                'https://bugzilla.redhat.com/2380280',
-                'https://bugzilla.redhat.com/2380283',
-                'https://bugzilla.redhat.com/2380284',
-                'https://bugzilla.redhat.com/2380290',
-                'https://bugzilla.redhat.com/2380291',
-                'https://bugzilla.redhat.com/2380295',
-                'https://bugzilla.redhat.com/2380298',
-                'https://bugzilla.redhat.com/2380306',
-                'https://bugzilla.redhat.com/2380308',
-                'https://bugzilla.redhat.com/2380309',
-                'https://bugzilla.redhat.com/2380310',
-                'https://bugzilla.redhat.com/2380312',
-                'https://bugzilla.redhat.com/2380313',
-                'https://bugzilla.redhat.com/2380320',
-                'https://bugzilla.redhat.com/2380321',
-                'https://bugzilla.redhat.com/2380322',
-                'https://bugzilla.redhat.com/2380326',
-                'https://bugzilla.redhat.com/2380327',
-                'https://bugzilla.redhat.com/2380334',
-                'https://bugzilla.redhat.com/2380335',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2338999',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359885',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359888',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359892',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359894',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359895',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359899',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359900',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359902',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359903',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359911',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359918',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359920',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359924',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359928',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359930',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359932',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359934',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359938',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359940',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359943',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359944',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359945',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359947',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359950',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359963',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359964',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359972',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2370920',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380264',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380273',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380274',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380278',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380280',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380283',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380284',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380290',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380291',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380295',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380298',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380306',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380308',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380309',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380310',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380312',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380313',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380320',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380321',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380322',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380326',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380327',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380334',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380335',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-13176',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21574',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21575',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21577',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21579',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21580',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21581',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21584',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21585',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21588',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30681',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30682',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30683',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30684',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30685',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30687',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30688',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30689',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30693',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30695',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30696',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30699',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30703',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30704',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30705',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30715',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30721',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30722',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50077',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50078',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50079',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50080',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50081',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50082',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50083',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50084',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50085',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50086',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50087',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50088',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50091',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50092',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50093',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50094',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50096',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50097',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50098',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50099',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50100',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50101',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50102',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50104',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-5399',
-                'https://errata.almalinux.org/9/ALSA-2025-16046.html',
-                'https://errata.rockylinux.org/RLSA-2025:15699',
-                'https://github.com/openssl/openssl/commit/07272b05b04836a762b4baa874958af51d513844',
-                'https://github.com/openssl/openssl/commit/2af62e74fb59bc469506bc37eb2990ea408d9467',
-                'https://github.com/openssl/openssl/commit/392dcb336405a0c94486aa6655057f59fd3a0902',
-                'https://github.com/openssl/openssl/commit/4b1cb94a734a7d4ec363ac0a215a25c181e11f65',
-                'https://github.com/openssl/openssl/commit/77c608f4c8857e63e98e66444e2e761c9627916f',
-                'https://github.openssl.org/openssl/extended-releases/commit/0d5fd1ab987f7571e2c955d8d8b638fc0fb54ded',
-                'https://github.openssl.org/openssl/extended-releases/commit/a2639000db19878d5d89586ae7b725080592ae86',
-                'https://linux.oracle.com/cve/CVE-2024-13176.html',
-                'https://linux.oracle.com/errata/ELSA-2025-16046.html',
-                'https://lists.debian.org/debian-lts-announce/2025/05/msg00028.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2024-13176',
-                'https://openssl-library.org/news/secadv/20250120.txt',
-                'https://security.netapp.com/advisory/ntap-20250124-0005/',
-                'https://security.netapp.com/advisory/ntap-20250418-0010/',
-                'https://security.netapp.com/advisory/ntap-20250502-0006/',
-                'https://ubuntu.com/security/notices/USN-7264-1',
-                'https://ubuntu.com/security/notices/USN-7278-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2024-13176',
-                'https://www.oracle.com/security-alerts/cpuapr2025.html#AppendixMSQL'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: Timing side-channel in ECDSA signature computation'
-            },
-            {
-              'cve':  'CVE-2025-9230',
-              'cvss': {
-                'redhat': {
-                  'v3score':  '5.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L'
-                }
-              },
-              'cwes': [
-                'CWE-125',
-                'CWE-787'
-              ],
-              'description':   'Issue summary: An application trying to decrypt CMS messages encrypted using\npassword based encryption can trigger an out-of-bounds read and write.\n\nImpact summary: This out-of-bounds read may trigger a crash which leads to\nDenial of Service for an application. The out-of-bounds write can cause\na memory corruption which can have various consequences including\na Denial of Service or Execution of attacker-supplied code.\n\nAlthough the consequences of a successful exploit of this vulnerability\ncould be severe, the probability that the attacker would be able to\nperform it is low. Besides, password based (PWRI) encryption support in CMS\nmessages is very rarely used. For that reason the issue was assessed as\nModerate severity according to our Security Policy.\n\nThe FIPS modules in 3.5, 3.4, 3.3, 3.2, 3.1 and 3.0 are not affected by this\nissue, as the CMS implementation is outside the OpenSSL FIPS module\nboundary.',
-              'diffID':        'sha256:cbd679fb2f5a3c370e355b07e8d87a035b2e3e2fec0f8ad7db275c5e212e8631',
-              'fixedVersions': [
-                '3.3.5-r0'
-              ],
-              'installedVersion': '3.3.2-r1',
-              'packageName':      'libssl3',
-              'purl':             'pkg:apk/alpine/libssl3@3.3.2-r1?arch=x86&distro=3.20.5',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2025/09/30/5',
-                'https://access.redhat.com/errata/RHSA-2025:21255',
-                'https://access.redhat.com/security/cve/CVE-2025-9230',
-                'https://bugzilla.redhat.com/2396054',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2396054',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-9230',
-                'https://errata.almalinux.org/9/ALSA-2025-21255.html',
-                'https://errata.rockylinux.org/RLSA-2025:21255',
-                'https://github.com/openssl/openssl/commit/5965ea5dd6960f36d8b7f74f8eac67a8eb8f2b45',
-                'https://github.com/openssl/openssl/commit/9e91358f365dee6c446dcdcdb01c04d2743fd280',
-                'https://github.com/openssl/openssl/commit/a79c4ce559c6a3a8fd4109e9f33c1185d5bf2def',
-                'https://github.com/openssl/openssl/commit/b5282d677551afda7d20e9c00e09561b547b2dfd',
-                'https://github.com/openssl/openssl/commit/bae259a211ada6315dc50900686daaaaaa55f482',
-                'https://github.openssl.org/openssl/extended-releases/commit/c2b96348bfa662f25f4fabf81958ae822063dae3',
-                'https://github.openssl.org/openssl/extended-releases/commit/dfbaf161d8dafc1132dd88cd48ad990ed9b4c8ba',
-                'https://linux.oracle.com/cve/CVE-2025-9230.html',
-                'https://linux.oracle.com/errata/ELSA-2026-0337.html',
-                'https://lists.debian.org/debian-lts-announce/2025/10/msg00001.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2025-9230',
-                'https://openssl-library.org/news/secadv/20250930.txt',
-                'https://ubuntu.com/security/notices/USN-7786-1',
-                'https://www.cve.org/CVERecord?id=CVE-2025-9230'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: Out-of-bounds read & write in RFC 3211 KEK Unwrap'
-            },
-            {
-              'cve':  'CVE-2025-9231',
-              'cvss': {
-                'redhat': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-385'
-              ],
-              'description':   'Issue summary: A timing side-channel which could potentially allow remote\nrecovery of the private key exists in the SM2 algorithm implementation on 64 bit\nARM platforms.\n\nImpact summary: A timing side-channel in SM2 signature computations on 64 bit\nARM platforms could allow recovering the private key by an attacker..\n\nWhile remote key recovery over a network was not attempted by the reporter,\ntiming measurements revealed a timing signal which may allow such an attack.\n\nOpenSSL does not directly support certificates with SM2 keys in TLS, and so\nthis CVE is not relevant in most TLS contexts.  However, given that it is\npossible to add support for such certificates via a custom provider, coupled\nwith the fact that in such a custom provider context the private key may be\nrecoverable via remote timing measurements, we consider this to be a Moderate\nseverity issue.\n\nThe FIPS modules in 3.5, 3.4, 3.3, 3.2, 3.1 and 3.0 are not affected by this\nissue, as SM2 is not an approved algorithm.',
-              'diffID':        'sha256:cbd679fb2f5a3c370e355b07e8d87a035b2e3e2fec0f8ad7db275c5e212e8631',
-              'fixedVersions': [
-                '3.3.5-r0'
-              ],
-              'installedVersion': '3.3.2-r1',
-              'packageName':      'libssl3',
-              'purl':             'pkg:apk/alpine/libssl3@3.3.2-r1?arch=x86&distro=3.20.5',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2025/09/30/5',
-                'https://access.redhat.com/security/cve/CVE-2025-9231',
-                'https://github.com/openssl/openssl/commit/567f64386e43683888212226824b6a179885a0fe',
-                'https://github.com/openssl/openssl/commit/cba616c26ac8e7b37de5e77762e505ba5ca51698',
-                'https://github.com/openssl/openssl/commit/eed5adc9f969d77c94f213767acbb41ff923b6f4',
-                'https://github.com/openssl/openssl/commit/fc47a2ec078912b3e914fab5734535e76c4820c2',
-                'https://nvd.nist.gov/vuln/detail/CVE-2025-9231',
-                'https://openssl-library.org/news/secadv/20250930.txt',
-                'https://ubuntu.com/security/notices/USN-7786-1',
-                'https://www.cve.org/CVERecord?id=CVE-2025-9231'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: Timing side-channel in SM2 algorithm on 64 bit ARM'
-            },
-            {
-              'cve':  'CVE-2025-9232',
-              'cvss': {
-                'redhat': {
-                  'v3score':  '3.1',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L'
-                }
-              },
-              'cwes': [
-                'CWE-125'
-              ],
-              'description':   "Issue summary: An application using the OpenSSL HTTP client API functions may\ntrigger an out-of-bounds read if the 'no_proxy' environment variable is set and\nthe host portion of the authority component of the HTTP URL is an IPv6 address.\n\nImpact summary: An out-of-bounds read can trigger a crash which leads to\nDenial of Service for an application.\n\nThe OpenSSL HTTP client API functions can be used directly by applications\nbut they are also used by the OCSP client functions and CMP (Certificate\nManagement Protocol) client implementation in OpenSSL. However the URLs used\nby these implementations are unlikely to be controlled by an attacker.\n\nIn this vulnerable code the out of bounds read can only trigger a crash.\nFurthermore the vulnerability requires an attacker-controlled URL to be\npassed from an application to the OpenSSL function and the user has to have\na 'no_proxy' environment variable set. For the aforementioned reasons the\nissue was assessed as Low severity.\n\nThe vulnerable code was introduced in the following patch releases:\n3.0.16, 3.1.8, 3.2.4, 3.3.3, 3.4.0 and 3.5.0.\n\nThe FIPS modules in 3.5, 3.4, 3.3, 3.2, 3.1 and 3.0 are not affected by this\nissue, as the HTTP client implementation is outside the OpenSSL FIPS module\nboundary.",
-              'diffID':        'sha256:cbd679fb2f5a3c370e355b07e8d87a035b2e3e2fec0f8ad7db275c5e212e8631',
-              'fixedVersions': [
-                '3.3.5-r0'
-              ],
-              'installedVersion': '3.3.2-r1',
-              'packageName':      'libssl3',
-              'purl':             'pkg:apk/alpine/libssl3@3.3.2-r1?arch=x86&distro=3.20.5',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2025/09/30/5',
-                'https://access.redhat.com/security/cve/CVE-2025-9232',
-                'https://github.com/openssl/openssl/commit/2b4ec20e47959170422922eaff25346d362dcb35',
-                'https://github.com/openssl/openssl/commit/654dc11d23468a74fc8ea4672b702dd3feb7be4b',
-                'https://github.com/openssl/openssl/commit/7cf21a30513c9e43c4bc3836c237cf086e194af3',
-                'https://github.com/openssl/openssl/commit/89e790ac431125a4849992858490bed6b225eadf',
-                'https://github.com/openssl/openssl/commit/bbf38c034cdabd0a13330abcc4855c866f53d2e0',
-                'https://nvd.nist.gov/vuln/detail/CVE-2025-9232',
-                'https://openssl-library.org/news/secadv/20250930.txt',
-                'https://ubuntu.com/security/notices/USN-7786-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2025-9232'
-              ],
-              'severity':   'LOW',
-              'suppressed': false,
-              'title':      'openssl: Out-of-bounds read in HTTP client no_proxy handling'
-            },
-            {
-              'cve':  'CVE-2025-26519',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-787'
-              ],
-              'description':   'musl libc 0.9.13 through 1.2.5 before 1.2.6 has an out-of-bounds write vulnerability when an attacker can trigger iconv conversion of untrusted EUC-KR text to UTF-8.',
-              'diffID':        'sha256:cbd679fb2f5a3c370e355b07e8d87a035b2e3e2fec0f8ad7db275c5e212e8631',
-              'fixedVersions': [
-                '1.2.5-r1'
-              ],
-              'installedVersion': '1.2.5-r0',
-              'packageName':      'musl',
-              'purl':             'pkg:apk/alpine/musl@1.2.5-r0?arch=x86&distro=3.20.5',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2025/02/13/2',
-                'http://www.openwall.com/lists/oss-security/2025/02/13/3',
-                'http://www.openwall.com/lists/oss-security/2025/02/13/4',
-                'http://www.openwall.com/lists/oss-security/2025/02/13/5',
-                'http://www.openwall.com/lists/oss-security/2025/02/14/5',
-                'http://www.openwall.com/lists/oss-security/2025/02/14/6',
-                'https://git.musl-libc.org/cgit/musl/commit/?id=c47ad25ea3b484e10326f933e927c0bc8cded3da',
-                'https://git.musl-libc.org/cgit/musl/commit/?id=e5adcd97b5196e29991b524237381a0202a60659',
-                'https://www.openwall.com/lists/oss-security/2025/02/13/2'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'musl libc 0.9.13 through 1.2.5 before 1.2.6 has an out-of-bounds write ...'
-            },
-            {
-              'cve':  'CVE-2025-26519',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-787'
-              ],
-              'description':   'musl libc 0.9.13 through 1.2.5 before 1.2.6 has an out-of-bounds write vulnerability when an attacker can trigger iconv conversion of untrusted EUC-KR text to UTF-8.',
-              'diffID':        'sha256:cbd679fb2f5a3c370e355b07e8d87a035b2e3e2fec0f8ad7db275c5e212e8631',
-              'fixedVersions': [
-                '1.2.5-r1'
-              ],
-              'installedVersion': '1.2.5-r0',
-              'packageName':      'musl-utils',
-              'purl':             'pkg:apk/alpine/musl-utils@1.2.5-r0?arch=x86&distro=3.20.5',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2025/02/13/2',
-                'http://www.openwall.com/lists/oss-security/2025/02/13/3',
-                'http://www.openwall.com/lists/oss-security/2025/02/13/4',
-                'http://www.openwall.com/lists/oss-security/2025/02/13/5',
-                'http://www.openwall.com/lists/oss-security/2025/02/14/5',
-                'http://www.openwall.com/lists/oss-security/2025/02/14/6',
-                'https://git.musl-libc.org/cgit/musl/commit/?id=c47ad25ea3b484e10326f933e927c0bc8cded3da',
-                'https://git.musl-libc.org/cgit/musl/commit/?id=e5adcd97b5196e29991b524237381a0202a60659',
-                'https://www.openwall.com/lists/oss-security/2025/02/13/2'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'musl libc 0.9.13 through 1.2.5 before 1.2.6 has an out-of-bounds write ...'
-            },
-            {
-              'cve':  'CVE-2024-58251',
-              'cwes': [
-                'CWE-150'
-              ],
-              'description':   'In netstat in BusyBox through 1.37.0, local users can launch of network application with an argv[0] containing an ANSI terminal escape sequence, leading to a denial of service (terminal locked up) when netstat is used by a victim.',
-              'diffID':        'sha256:cbd679fb2f5a3c370e355b07e8d87a035b2e3e2fec0f8ad7db275c5e212e8631',
-              'fixedVersions': [
-                '1.36.1-r31'
-              ],
-              'installedVersion': '1.36.1-r29',
-              'packageName':      'ssl_client',
-              'purl':             'pkg:apk/alpine/ssl_client@1.36.1-r29?arch=x86&distro=3.20.5',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2025/04/23/6',
-                'https://bugs.busybox.net/show_bug.cgi?id=15922',
-                'https://www.busybox.net',
-                'https://www.busybox.net/downloads/',
-                'https://www.cve.org/CVERecord?id=CVE-2024-58251'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'In netstat in BusyBox through 1.37.0, local users can launch of networ ...'
-            },
-            {
-              'cve':  'CVE-2025-46394',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '3.3',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-451'
-              ],
-              'description':   'In tar in BusyBox through 1.37.0, a TAR archive can have filenames hidden from a listing through the use of terminal escape sequences.',
-              'diffID':        'sha256:cbd679fb2f5a3c370e355b07e8d87a035b2e3e2fec0f8ad7db275c5e212e8631',
-              'fixedVersions': [
-                '1.36.1-r31'
-              ],
-              'installedVersion': '1.36.1-r29',
-              'packageName':      'ssl_client',
-              'purl':             'pkg:apk/alpine/ssl_client@1.36.1-r29?arch=x86&distro=3.20.5',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2025/04/23/5',
-                'http://www.openwall.com/lists/oss-security/2025/04/24/3',
-                'https://bugs.busybox.net/show_bug.cgi?id=16018',
-                'https://lists.busybox.net/pipermail/busybox/2024-July/090806.html',
-                'https://lists.busybox.net/pipermail/busybox/2024-July/090814.html',
-                'https://www.busybox.net',
-                'https://www.busybox.net/downloads/',
-                'https://www.cve.org/CVERecord?id=CVE-2025-46394',
-                'https://www.openwall.com/lists/oss-security/2025/04/23/1'
-              ],
-              'severity':   'LOW',
-              'suppressed': false,
-              'title':      'In tar in BusyBox through 1.37.0, a TAR archive can have filenames hid ...'
-            }
-          ]
-        }
-      ],
-      'summary': {
-        'critical':   0,
-        'high':       4,
-        'low':        5,
-        'medium':     9,
-        'suppressed': 0,
-        'unknown':    0
-      }
-    }
-  },
-  {
-    'id':    'default/4db7741584aaa33eb7b282fc7e173829cd0986d7a731b510362e1d410d101a30',
-    'type':  'storage.sbomscanner.kubewarden.io.vulnerabilityreport',
-    'links': {
-      'patch':  'https://localhost:8005/v1/storage.sbomscanner.kubewarden.io.vulnerabilityreports/default/4db7741584aaa33eb7b282fc7e173829cd0986d7a731b510362e1d410d101a30',
-      'remove': 'https://localhost:8005/v1/storage.sbomscanner.kubewarden.io.vulnerabilityreports/default/4db7741584aaa33eb7b282fc7e173829cd0986d7a731b510362e1d410d101a30',
-      'self':   'https://localhost:8005/v1/storage.sbomscanner.kubewarden.io.vulnerabilityreports/default/4db7741584aaa33eb7b282fc7e173829cd0986d7a731b510362e1d410d101a30',
-      'update': 'https://localhost:8005/v1/storage.sbomscanner.kubewarden.io.vulnerabilityreports/default/4db7741584aaa33eb7b282fc7e173829cd0986d7a731b510362e1d410d101a30',
-      'view':   'https://localhost:8005/apis/storage.sbomscanner.kubewarden.io/v1alpha1/namespaces/default/vulnerabilityreports/4db7741584aaa33eb7b282fc7e173829cd0986d7a731b510362e1d410d101a30'
-    },
-    'apiVersion':    'storage.sbomscanner.kubewarden.io/v1alpha1',
-    'imageMetadata': {
-      'digest':      'sha256:f8bf2ce4b4bcd0e65f4880ddec62b1c214be2a3b7ef0f143a5c280474e8e1ba4',
-      'platform':    'linux/amd64',
-      'registry':    'demo-02',
-      'registryURI': 'ghcr.io',
-      'repository':  'linuxcontainers/alpine',
-      'tag':         '3.13'
-    },
-    'kind':     'VulnerabilityReport',
-    'metadata': {
-      'creationTimestamp': '2026-01-09T22:46:24Z',
-      'fields':            [
-        '4db7741584aaa33eb7b282fc7e173829cd0986d7a731b510362e1d410d101a30',
-        'ghcr.io/linuxcontainers/alpine:3.13',
-        'linux/amd64',
-        '0 (0 suppressed)'
-      ],
-      'labels': {
-        'app.kubernetes.io/managed-by':          'sbomscanner',
-        'app.kubernetes.io/part-of':             'sbomscanner',
-        'sbomscanner.kubewarden.io/scanjob-uid': '42184d01-4b15-466f-98aa-e802d1b6b6b8'
-      },
-      'name':            '4db7741584aaa33eb7b282fc7e173829cd0986d7a731b510362e1d410d101a30',
-      'namespace':       'default',
-      'ownerReferences': [
-        {
-          'apiVersion':         'storage.sbomscanner.kubewarden.io/v1alpha1',
-          'blockOwnerDeletion': true,
-          'controller':         true,
-          'kind':               'SBOM',
-          'name':               '4db7741584aaa33eb7b282fc7e173829cd0986d7a731b510362e1d410d101a30',
-          'uid':                '6e9a1bc2-85f2-4b86-8f0e-bedee88df672'
-        }
-      ],
-      'relationships': [
-        {
-          'fromId':   'default/4db7741584aaa33eb7b282fc7e173829cd0986d7a731b510362e1d410d101a30',
-          'fromType': 'storage.sbomscanner.kubewarden.io.sbom',
-          'rel':      'owner',
-          'state':    'active',
-          'message':  'Resource is current'
-        }
-      ],
-      'resourceVersion': '3',
-      'state':           {
-        'error':         false,
-        'message':       'Resource is current',
-        'name':          'active',
-        'transitioning': false
-      },
-      'uid': 'fa9ed8e3-6718-4842-ae8d-39e7d49a0d83'
-    },
-    'report': {
-      'results': [
-        {
-          'class':           'os-pkgs',
-          'target':          '/var/run/worker/trivy.sbom.770883960.json (alpine 3.13.12)',
-          'type':            'alpine',
-          'vulnerabilities': null
-        }
-      ],
-      'summary': {
-        'critical':   0,
-        'high':       0,
-        'low':        0,
-        'medium':     0,
-        'suppressed': 0,
-        'unknown':    0
-      }
-    }
-  },
-  {
-    'id':    'default/4f75481c6afac18419619f8e1a825132885cccb57cdaa7941362adf7ada88022',
-    'type':  'storage.sbomscanner.kubewarden.io.vulnerabilityreport',
-    'links': {
-      'patch':  'https://localhost:8005/v1/storage.sbomscanner.kubewarden.io.vulnerabilityreports/default/4f75481c6afac18419619f8e1a825132885cccb57cdaa7941362adf7ada88022',
-      'remove': 'https://localhost:8005/v1/storage.sbomscanner.kubewarden.io.vulnerabilityreports/default/4f75481c6afac18419619f8e1a825132885cccb57cdaa7941362adf7ada88022',
-      'self':   'https://localhost:8005/v1/storage.sbomscanner.kubewarden.io.vulnerabilityreports/default/4f75481c6afac18419619f8e1a825132885cccb57cdaa7941362adf7ada88022',
-      'update': 'https://localhost:8005/v1/storage.sbomscanner.kubewarden.io.vulnerabilityreports/default/4f75481c6afac18419619f8e1a825132885cccb57cdaa7941362adf7ada88022',
-      'view':   'https://localhost:8005/apis/storage.sbomscanner.kubewarden.io/v1alpha1/namespaces/default/vulnerabilityreports/4f75481c6afac18419619f8e1a825132885cccb57cdaa7941362adf7ada88022'
-    },
-    'apiVersion':    'storage.sbomscanner.kubewarden.io/v1alpha1',
-    'imageMetadata': {
-      'digest':      'sha256:d22cb65d578ea325347d7a6e5645998c3e7310f57504368df2a1a8f4337d1ed6',
-      'platform':    'linux/amd64',
-      'registry':    'demo-02',
-      'registryURI': 'ghcr.io',
-      'repository':  'linuxcontainers/alpine',
-      'tag':         '3.20'
-    },
-    'kind':     'VulnerabilityReport',
-    'metadata': {
-      'creationTimestamp': '2026-01-09T22:46:03Z',
-      'fields':            [
-        '4f75481c6afac18419619f8e1a825132885cccb57cdaa7941362adf7ada88022',
-        'ghcr.io/linuxcontainers/alpine:3.20',
-        'linux/amd64',
-        '32 (0 suppressed)'
-      ],
-      'labels': {
-        'app.kubernetes.io/managed-by':          'sbomscanner',
-        'app.kubernetes.io/part-of':             'sbomscanner',
-        'sbomscanner.kubewarden.io/scanjob-uid': '42184d01-4b15-466f-98aa-e802d1b6b6b8'
-      },
-      'name':            '4f75481c6afac18419619f8e1a825132885cccb57cdaa7941362adf7ada88022',
-      'namespace':       'default',
-      'ownerReferences': [
-        {
-          'apiVersion':         'storage.sbomscanner.kubewarden.io/v1alpha1',
-          'blockOwnerDeletion': true,
-          'controller':         true,
-          'kind':               'SBOM',
-          'name':               '4f75481c6afac18419619f8e1a825132885cccb57cdaa7941362adf7ada88022',
-          'uid':                '7e374bff-22b4-4446-99d2-06e86c8ac6f8'
-        }
-      ],
-      'relationships': [
-        {
-          'fromId':   'default/4f75481c6afac18419619f8e1a825132885cccb57cdaa7941362adf7ada88022',
-          'fromType': 'storage.sbomscanner.kubewarden.io.sbom',
-          'rel':      'owner',
-          'state':    'active',
-          'message':  'Resource is current'
-        }
-      ],
-      'resourceVersion': '7',
-      'state':           {
-        'error':         false,
-        'message':       'Resource is current',
-        'name':          'active',
-        'transitioning': false
-      },
-      'uid': '25618de7-f28a-4c7c-ab0f-56f69f50d48e'
-    },
-    'report': {
-      'results': [
-        {
-          'class':           'os-pkgs',
-          'target':          '/var/run/worker/trivy.sbom.1223488224.json (alpine 3.20.6)',
-          'type':            'alpine',
-          'vulnerabilities': [
-            {
-              'cve':  'CVE-2024-58251',
-              'cwes': [
-                'CWE-150'
-              ],
-              'description':   'In netstat in BusyBox through 1.37.0, local users can launch of network application with an argv[0] containing an ANSI terminal escape sequence, leading to a denial of service (terminal locked up) when netstat is used by a victim.',
-              'diffID':        'sha256:994456c4fd7b2b87346a81961efb4ce945a39592d32e0762b38768bca7c7d085',
-              'fixedVersions': [
-                '1.36.1-r31'
-              ],
-              'installedVersion': '1.36.1-r29',
-              'packageName':      'busybox',
-              'purl':             'pkg:apk/alpine/busybox@1.36.1-r29?arch=x86_64&distro=3.20.6',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2025/04/23/6',
-                'https://bugs.busybox.net/show_bug.cgi?id=15922',
-                'https://www.busybox.net',
-                'https://www.busybox.net/downloads/',
-                'https://www.cve.org/CVERecord?id=CVE-2024-58251'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'In netstat in BusyBox through 1.37.0, local users can launch of networ ...'
-            },
-            {
-              'cve':  'CVE-2025-46394',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '3.3',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-451'
-              ],
-              'description':   'In tar in BusyBox through 1.37.0, a TAR archive can have filenames hidden from a listing through the use of terminal escape sequences.',
-              'diffID':        'sha256:994456c4fd7b2b87346a81961efb4ce945a39592d32e0762b38768bca7c7d085',
-              'fixedVersions': [
-                '1.36.1-r31'
-              ],
-              'installedVersion': '1.36.1-r29',
-              'packageName':      'busybox',
-              'purl':             'pkg:apk/alpine/busybox@1.36.1-r29?arch=x86_64&distro=3.20.6',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2025/04/23/5',
-                'http://www.openwall.com/lists/oss-security/2025/04/24/3',
-                'https://bugs.busybox.net/show_bug.cgi?id=16018',
-                'https://lists.busybox.net/pipermail/busybox/2024-July/090806.html',
-                'https://lists.busybox.net/pipermail/busybox/2024-July/090814.html',
-                'https://www.busybox.net',
-                'https://www.busybox.net/downloads/',
-                'https://www.cve.org/CVERecord?id=CVE-2025-46394',
-                'https://www.openwall.com/lists/oss-security/2025/04/23/1'
-              ],
-              'severity':   'LOW',
-              'suppressed': false,
-              'title':      'In tar in BusyBox through 1.37.0, a TAR archive can have filenames hid ...'
-            },
-            {
-              'cve':  'CVE-2024-58251',
-              'cwes': [
-                'CWE-150'
-              ],
-              'description':   'In netstat in BusyBox through 1.37.0, local users can launch of network application with an argv[0] containing an ANSI terminal escape sequence, leading to a denial of service (terminal locked up) when netstat is used by a victim.',
-              'diffID':        'sha256:994456c4fd7b2b87346a81961efb4ce945a39592d32e0762b38768bca7c7d085',
-              'fixedVersions': [
-                '1.36.1-r31'
-              ],
-              'installedVersion': '1.36.1-r29',
-              'packageName':      'busybox-binsh',
-              'purl':             'pkg:apk/alpine/busybox-binsh@1.36.1-r29?arch=x86_64&distro=3.20.6',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2025/04/23/6',
-                'https://bugs.busybox.net/show_bug.cgi?id=15922',
-                'https://www.busybox.net',
-                'https://www.busybox.net/downloads/',
-                'https://www.cve.org/CVERecord?id=CVE-2024-58251'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'In netstat in BusyBox through 1.37.0, local users can launch of networ ...'
-            },
-            {
-              'cve':  'CVE-2025-46394',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '3.3',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-451'
-              ],
-              'description':   'In tar in BusyBox through 1.37.0, a TAR archive can have filenames hidden from a listing through the use of terminal escape sequences.',
-              'diffID':        'sha256:994456c4fd7b2b87346a81961efb4ce945a39592d32e0762b38768bca7c7d085',
-              'fixedVersions': [
-                '1.36.1-r31'
-              ],
-              'installedVersion': '1.36.1-r29',
-              'packageName':      'busybox-binsh',
-              'purl':             'pkg:apk/alpine/busybox-binsh@1.36.1-r29?arch=x86_64&distro=3.20.6',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2025/04/23/5',
-                'http://www.openwall.com/lists/oss-security/2025/04/24/3',
-                'https://bugs.busybox.net/show_bug.cgi?id=16018',
-                'https://lists.busybox.net/pipermail/busybox/2024-July/090806.html',
-                'https://lists.busybox.net/pipermail/busybox/2024-July/090814.html',
-                'https://www.busybox.net',
-                'https://www.busybox.net/downloads/',
-                'https://www.cve.org/CVERecord?id=CVE-2025-46394',
-                'https://www.openwall.com/lists/oss-security/2025/04/23/1'
-              ],
-              'severity':   'LOW',
-              'suppressed': false,
-              'title':      'In tar in BusyBox through 1.37.0, a TAR archive can have filenames hid ...'
-            },
-            {
-              'cve':  'CVE-2025-15467',
-              'cvss': {
-                'redhat': {
-                  'v3score':  '9.8',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-787'
-              ],
-              'description':   'Issue summary: Parsing CMS AuthEnvelopedData message with maliciously\ncrafted AEAD parameters can trigger a stack buffer overflow.\n\nImpact summary: A stack buffer overflow may lead to a crash, causing Denial\nof Service, or potentially remote code execution.\n\nWhen parsing CMS AuthEnvelopedData structures that use AEAD ciphers such as\nAES-GCM, the IV (Initialization Vector) encoded in the ASN.1 parameters is\ncopied into a fixed-size stack buffer without verifying that its length fits\nthe destination. An attacker can supply a crafted CMS message with an\noversized IV, causing a stack-based out-of-bounds write before any\nauthentication or tag verification occurs.\n\nApplications and services that parse untrusted CMS or PKCS#7 content using\nAEAD ciphers (e.g., S/MIME AuthEnvelopedData with AES-GCM) are vulnerable.\nBecause the overflow occurs prior to authentication, no valid key material\nis required to trigger it. While exploitability to remote code execution\ndepends on platform and toolchain mitigations, the stack-based write\nprimitive represents a severe risk.\n\nThe FIPS modules in 3.6, 3.5, 3.4, 3.3 and 3.0 are not affected by this\nissue, as the CMS implementation is outside the OpenSSL FIPS module\nboundary.\n\nOpenSSL 3.6, 3.5, 3.4, 3.3 and 3.0 are vulnerable to this issue.\n\nOpenSSL 1.1.1 and 1.0.2 are not affected by this issue.',
-              'diffID':        'sha256:994456c4fd7b2b87346a81961efb4ce945a39592d32e0762b38768bca7c7d085',
-              'fixedVersions': [
-                '3.3.6-r0'
-              ],
-              'installedVersion': '3.3.3-r0',
-              'packageName':      'libcrypto3',
-              'purl':             'pkg:apk/alpine/libcrypto3@3.3.3-r0?arch=x86_64&distro=3.20.6',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2026/01/27/10',
-                'https://access.redhat.com/security/cve/CVE-2025-15467',
-                'https://github.com/openssl/openssl/commit/2c8f0e5fa9b6ee5508a0349e4572ddb74db5a703',
-                'https://github.com/openssl/openssl/commit/5f26d4202f5b89664c5c3f3c62086276026ba9a9',
-                'https://github.com/openssl/openssl/commit/6ced0fe6b10faa560e410e3ee8d6c82f06c65ea3',
-                'https://github.com/openssl/openssl/commit/ce39170276daec87f55c39dad1f629b56344429e',
-                'https://github.com/openssl/openssl/commit/d0071a0799f20cc8101730145349ed4487c268dc',
-                'https://nvd.nist.gov/vuln/detail/CVE-2025-15467',
-                'https://openssl-library.org/news/secadv/20260127.txt',
-                'https://ubuntu.com/security/notices/USN-7980-1',
-                'https://www.cve.org/CVERecord?id=CVE-2025-15467'
-              ],
-              'severity':   'CRITICAL',
-              'suppressed': false,
-              'title':      'openssl: OpenSSL: Remote code execution or Denial of Service via oversized Initialization Vector in CMS parsing'
-            },
-            {
-              'cve':  'CVE-2025-69419',
-              'cvss': {
-                'redhat': {
-                  'v3score':  '7.4',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-787'
-              ],
-              'description':   'Issue summary: Calling PKCS12_get_friendlyname() function on a maliciously\ncrafted PKCS#12 file with a BMPString (UTF-16BE) friendly name containing\nnon-ASCII BMP code point can trigger a one byte write before the allocated\nbuffer.\n\nImpact summary: The out-of-bounds write can cause a memory corruption\nwhich can have various consequences including a Denial of Service.\n\nThe OPENSSL_uni2utf8() function performs a two-pass conversion of a PKCS#12\nBMPString (UTF-16BE) to UTF-8. In the second pass, when emitting UTF-8 bytes,\nthe helper function bmp_to_utf8() incorrectly forwards the remaining UTF-16\nsource byte count as the destination buffer capacity to UTF8_putc(). For BMP\ncode points above U+07FF, UTF-8 requires three bytes, but the forwarded\ncapacity can be just two bytes. UTF8_putc() then returns -1, and this negative\nvalue is added to the output length without validation, causing the\nlength to become negative. The subsequent trailing NUL byte is then written\nat a negative offset, causing write outside of heap allocated buffer.\n\nThe vulnerability is reachable via the public PKCS12_get_friendlyname() API\nwhen parsing attacker-controlled PKCS#12 files. While PKCS12_parse() uses a\ndifferent code path that avoids this issue, PKCS12_get_friendlyname() directly\ninvokes the vulnerable function. Exploitation requires an attacker to provide\na malicious PKCS#12 file to be parsed by the application and the attacker\ncan just trigger a one zero byte write before the allocated buffer.\nFor that reason the issue was assessed as Low severity according to our\nSecurity Policy.\n\nThe FIPS modules in 3.6, 3.5, 3.4, 3.3 and 3.0 are not affected by this issue,\nas the PKCS#12 implementation is outside the OpenSSL FIPS module boundary.\n\nOpenSSL 3.6, 3.5, 3.4, 3.3, 3.0 and 1.1.1 are vulnerable to this issue.\n\nOpenSSL 1.0.2 is not affected by this issue.',
-              'diffID':        'sha256:994456c4fd7b2b87346a81961efb4ce945a39592d32e0762b38768bca7c7d085',
-              'fixedVersions': [
-                '3.3.6-r0'
-              ],
-              'installedVersion': '3.3.3-r0',
-              'packageName':      'libcrypto3',
-              'purl':             'pkg:apk/alpine/libcrypto3@3.3.3-r0?arch=x86_64&distro=3.20.6',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2025-69419',
-                'https://github.com/openssl/openssl/commit/41be0f216404f14457bbf3b9cc488dba60b49296',
-                'https://github.com/openssl/openssl/commit/7e9cac9832e4705b91987c2474ed06a37a93cecb',
-                'https://github.com/openssl/openssl/commit/a26a90d38edec3748566129d824e664b54bee2e2',
-                'https://github.com/openssl/openssl/commit/cda12de3bc0e333ea8d2c6fd15001dbdaf280015',
-                'https://github.com/openssl/openssl/commit/ff628933755075446bca8307e8417c14d164b535',
-                'https://nvd.nist.gov/vuln/detail/CVE-2025-69419',
-                'https://openssl-library.org/news/secadv/20260127.txt',
-                'https://ubuntu.com/security/notices/USN-7980-1',
-                'https://ubuntu.com/security/notices/USN-7980-2',
-                'https://www.cve.org/CVERecord?id=CVE-2025-69419'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: OpenSSL: Arbitrary code execution due to out-of-bounds write in PKCS#12 processing'
-            },
-            {
-              'cve':  'CVE-2025-15468',
-              'cvss': {
-                'redhat': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-476'
-              ],
-              'description':   'Issue summary: If an application using the SSL_CIPHER_find() function in\na QUIC protocol client or server receives an unknown cipher suite from\nthe peer, a NULL dereference occurs.\n\nImpact summary: A NULL pointer dereference leads to abnormal termination of\nthe running process causing Denial of Service.\n\nSome applications call SSL_CIPHER_find() from the client_hello_cb callback\non the cipher ID received from the peer. If this is done with an SSL object\nimplementing the QUIC protocol, NULL pointer dereference will happen if\nthe examined cipher ID is unknown or unsupported.\n\nAs it is not very common to call this function in applications using the QUIC \nprotocol and the worst outcome is Denial of Service, the issue was assessed\nas Low severity.\n\nThe vulnerable code was introduced in the 3.2 version with the addition\nof the QUIC protocol support.\n\nThe FIPS modules in 3.6, 3.5, 3.4 and 3.3 are not affected by this issue,\nas the QUIC implementation is outside the OpenSSL FIPS module boundary.\n\nOpenSSL 3.6, 3.5, 3.4 and 3.3 are vulnerable to this issue.\n\nOpenSSL 3.0, 1.1.1 and 1.0.2 are not affected by this issue.',
-              'diffID':        'sha256:994456c4fd7b2b87346a81961efb4ce945a39592d32e0762b38768bca7c7d085',
-              'fixedVersions': [
-                '3.3.6-r0'
-              ],
-              'installedVersion': '3.3.3-r0',
-              'packageName':      'libcrypto3',
-              'purl':             'pkg:apk/alpine/libcrypto3@3.3.3-r0?arch=x86_64&distro=3.20.6',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2025-15468',
-                'https://github.com/openssl/openssl/commit/1f08e54bad32843044fe8a675948d65e3b4ece65',
-                'https://github.com/openssl/openssl/commit/7c88376731c589ee5b36116c5a6e32d5ae5f7ae2',
-                'https://github.com/openssl/openssl/commit/b2539639400288a4580fe2d76247541b976bade4',
-                'https://github.com/openssl/openssl/commit/d75b309879631d45b972396ce4e5102559c64ac7',
-                'https://nvd.nist.gov/vuln/detail/CVE-2025-15468',
-                'https://openssl-library.org/news/secadv/20260127.txt',
-                'https://ubuntu.com/security/notices/USN-7980-1',
-                'https://www.cve.org/CVERecord?id=CVE-2025-15468'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: OpenSSL: Denial of Service via NULL pointer dereference in QUIC protocol handling'
-            },
-            {
-              'cve':  'CVE-2025-66199',
-              'cvss': {
-                'redhat': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-789'
-              ],
-              'description':   'Issue summary: A TLS 1.3 connection using certificate compression can be\nforced to allocate a large buffer before decompression without checking\nagainst the configured certificate size limit.\n\nImpact summary: An attacker can cause per-connection memory allocations of\nup to approximately 22 MiB and extra CPU work, potentially leading to\nservice degradation or resource exhaustion (Denial of Service).\n\nIn affected configurations, the peer-supplied uncompressed certificate\nlength from a CompressedCertificate message is used to grow a heap buffer\nprior to decompression. This length is not bounded by the max_cert_list\nsetting, which otherwise constrains certificate message sizes. An attacker\ncan exploit this to cause large per-connection allocations followed by\nhandshake failure. No memory corruption or information disclosure occurs.\n\nThis issue only affects builds where TLS 1.3 certificate compression is\ncompiled in (i.e., not OPENSSL_NO_COMP_ALG) and at least one compression\nalgorithm (brotli, zlib, or zstd) is available, and where the compression\nextension is negotiated. Both clients receiving a server CompressedCertificate\nand servers in mutual TLS scenarios receiving a client CompressedCertificate\nare affected. Servers that do not request client certificates are not\nvulnerable to client-initiated attacks.\n\nUsers can mitigate this issue by setting SSL_OP_NO_RX_CERTIFICATE_COMPRESSION\nto disable receiving compressed certificates.\n\nThe FIPS modules in 3.6, 3.5, 3.4 and 3.3 are not affected by this issue,\nas the TLS implementation is outside the OpenSSL FIPS module boundary.\n\nOpenSSL 3.6, 3.5, 3.4 and 3.3 are vulnerable to this issue.\n\nOpenSSL 3.0, 1.1.1 and 1.0.2 are not affected by this issue.',
-              'diffID':        'sha256:994456c4fd7b2b87346a81961efb4ce945a39592d32e0762b38768bca7c7d085',
-              'fixedVersions': [
-                '3.3.6-r0'
-              ],
-              'installedVersion': '3.3.3-r0',
-              'packageName':      'libcrypto3',
-              'purl':             'pkg:apk/alpine/libcrypto3@3.3.3-r0?arch=x86_64&distro=3.20.6',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2025-66199',
-                'https://github.com/openssl/openssl/commit/3ed1f75249932b155eef993a8e66a99cb98bfef4',
-                'https://github.com/openssl/openssl/commit/6184a4fb08ee6d7bca570d931a4e8bef40b64451',
-                'https://github.com/openssl/openssl/commit/895150b5e021d16b52fb32b97e1dd12f20448be5',
-                'https://github.com/openssl/openssl/commit/966a2478046c311ed7dae50c457d0db4cafbf7e4',
-                'https://nvd.nist.gov/vuln/detail/CVE-2025-66199',
-                'https://openssl-library.org/news/secadv/20260127.txt',
-                'https://ubuntu.com/security/notices/USN-7980-1',
-                'https://www.cve.org/CVERecord?id=CVE-2025-66199'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: OpenSSL: Denial of Service due to excessive memory allocation in TLS 1.3 certificate compression'
-            },
-            {
-              'cve':  'CVE-2025-68160',
-              'cvss': {
-                'redhat': {
-                  'v3score':  '4.7',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-787'
-              ],
-              'description':   'Issue summary: Writing large, newline-free data into a BIO chain using the\nline-buffering filter where the next BIO performs short writes can trigger\na heap-based out-of-bounds write.\n\nImpact summary: This out-of-bounds write can cause memory corruption which\ntypically results in a crash, leading to Denial of Service for an application.\n\nThe line-buffering BIO filter (BIO_f_linebuffer) is not used by default in\nTLS/SSL data paths. In OpenSSL command-line applications, it is typically\nonly pushed onto stdout/stderr on VMS systems. Third-party applications that\nexplicitly use this filter with a BIO chain that can short-write and that\nwrite large, newline-free data influenced by an attacker would be affected.\nHowever, the circumstances where this could happen are unlikely to be under\nattacker control, and BIO_f_linebuffer is unlikely to be handling non-curated\ndata controlled by an attacker. For that reason the issue was assessed as\nLow severity.\n\nThe FIPS modules in 3.6, 3.5, 3.4, 3.3 and 3.0 are not affected by this issue,\nas the BIO implementation is outside the OpenSSL FIPS module boundary.\n\nOpenSSL 3.6, 3.5, 3.4, 3.3, 3.0, 1.1.1 and 1.0.2 are vulnerable to this issue.',
-              'diffID':        'sha256:994456c4fd7b2b87346a81961efb4ce945a39592d32e0762b38768bca7c7d085',
-              'fixedVersions': [
-                '3.3.6-r0'
-              ],
-              'installedVersion': '3.3.3-r0',
-              'packageName':      'libcrypto3',
-              'purl':             'pkg:apk/alpine/libcrypto3@3.3.3-r0?arch=x86_64&distro=3.20.6',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2025-68160',
-                'https://github.com/openssl/openssl/commit/384011202af92605d926fafe4a0bcd6b65d162ad',
-                'https://github.com/openssl/openssl/commit/475c466ef2fbd8fc1df6fae1c3eed9c813fc8ff6',
-                'https://github.com/openssl/openssl/commit/4c96fbba618e1940f038012506ee9e21d32ee12c',
-                'https://github.com/openssl/openssl/commit/6845c3b6460a98b1ec4e463baa2ea1a63a32d7c0',
-                'https://github.com/openssl/openssl/commit/68a7cd2e2816c3a02f4d45a2ce43fc04fac97096',
-                'https://nvd.nist.gov/vuln/detail/CVE-2025-68160',
-                'https://openssl-library.org/news/secadv/20260127.txt',
-                'https://ubuntu.com/security/notices/USN-7980-1',
-                'https://ubuntu.com/security/notices/USN-7980-2',
-                'https://www.cve.org/CVERecord?id=CVE-2025-68160'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: OpenSSL: Denial of Service due to out-of-bounds write in BIO filter'
-            },
-            {
-              'cve':  'CVE-2025-69418',
-              'cvss': {
-                'redhat': {
-                  'v3score':  '4',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-325'
-              ],
-              'description':   'Issue summary: When using the low-level OCB API directly with AES-NI or<br>other hardware-accelerated code paths, inputs whose length is not a multiple<br>of 16 bytes can leave the final partial block unencrypted and unauthenticated.<br><br>Impact summary: The trailing 1-15 bytes of a message may be exposed in<br>cleartext on encryption and are not covered by the authentication tag,<br>allowing an attacker to read or tamper with those bytes without detection.<br><br>The low-level OCB encrypt and decrypt routines in the hardware-accelerated<br>stream path process full 16-byte blocks but do not advance the input/output<br>pointers. The subsequent tail-handling code then operates on the original<br>base pointers, effectively reprocessing the beginning of the buffer while<br>leaving the actual trailing bytes unprocessed. The authentication checksum<br>also excludes the true tail bytes.<br><br>However, typical OpenSSL consumers using EVP are not affected because the<br>higher-level EVP and provider OCB implementations split inputs so that full<br>blocks and trailing partial blocks are processed in separate calls, avoiding<br>the problematic code path. Additionally, TLS does not use OCB ciphersuites.<br>The vulnerability only affects applications that call the low-level<br>CRYPTO_ocb128_encrypt() or CRYPTO_ocb128_decrypt() functions directly with<br>non-block-aligned lengths in a single call on hardware-accelerated builds.<br>For these reasons the issue was assessed as Low severity.<br><br>The FIPS modules in 3.6, 3.5, 3.4, 3.3, 3.2, 3.1 and 3.0 are not affected<br>by this issue, as OCB mode is not a FIPS-approved algorithm.<br><br>OpenSSL 3.6, 3.5, 3.4, 3.3, 3.0 and 1.1.1 are vulnerable to this issue.<br><br>OpenSSL 1.0.2 is not affected by this issue.',
-              'diffID':        'sha256:994456c4fd7b2b87346a81961efb4ce945a39592d32e0762b38768bca7c7d085',
-              'fixedVersions': [
-                '3.3.6-r0'
-              ],
-              'installedVersion': '3.3.3-r0',
-              'packageName':      'libcrypto3',
-              'purl':             'pkg:apk/alpine/libcrypto3@3.3.3-r0?arch=x86_64&distro=3.20.6',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2025-69418',
-                'https://github.com/openssl/openssl/commit/372fc5c77529695b05b4f5b5187691a57ef5dffc',
-                'https://github.com/openssl/openssl/commit/4016975d4469cd6b94927c607f7c511385f928d8',
-                'https://github.com/openssl/openssl/commit/52d23c86a54adab5ee9f80e48b242b52c4cc2347',
-                'https://github.com/openssl/openssl/commit/a7589230356d908c0eca4b969ec4f62106f4f5ae',
-                'https://github.com/openssl/openssl/commit/ed40856d7d4ba6cb42779b6770666a65f19cb977',
-                'https://nvd.nist.gov/vuln/detail/CVE-2025-69418',
-                'https://openssl-library.org/news/secadv/20260127.txt',
-                'https://ubuntu.com/security/notices/USN-7980-1',
-                'https://ubuntu.com/security/notices/USN-7980-2',
-                'https://www.cve.org/CVERecord?id=CVE-2025-69418'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: OpenSSL: Information disclosure and data tampering via specific low-level OCB encryption/decryption calls'
-            },
-            {
-              'cve':  'CVE-2025-69420',
-              'cvss': {
-                'redhat': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-754'
-              ],
-              'description':   'Issue summary: A type confusion vulnerability exists in the TimeStamp Response\nverification code where an ASN1_TYPE union member is accessed without first\nvalidating the type, causing an invalid or NULL pointer dereference when\nprocessing a malformed TimeStamp Response file.\n\nImpact summary: An application calling TS_RESP_verify_response() with a\nmalformed TimeStamp Response can be caused to dereference an invalid or\nNULL pointer when reading, resulting in a Denial of Service.\n\nThe functions ossl_ess_get_signing_cert() and ossl_ess_get_signing_cert_v2()\naccess the signing cert attribute value without validating its type.\nWhen the type is not V_ASN1_SEQUENCE, this results in accessing invalid memory\nthrough the ASN1_TYPE union, causing a crash.\n\nExploiting this vulnerability requires an attacker to provide a malformed\nTimeStamp Response to an application that verifies timestamp responses. The\nTimeStamp protocol (RFC 3161) is not widely used and the impact of the\nexploit is just a Denial of Service. For these reasons the issue was\nassessed as Low severity.\n\nThe FIPS modules in 3.5, 3.4, 3.3 and 3.0 are not affected by this issue,\nas the TimeStamp Response implementation is outside the OpenSSL FIPS module\nboundary.\n\nOpenSSL 3.6, 3.5, 3.4, 3.3, 3.0 and 1.1.1 are vulnerable to this issue.\n\nOpenSSL 1.0.2 is not affected by this issue.',
-              'diffID':        'sha256:994456c4fd7b2b87346a81961efb4ce945a39592d32e0762b38768bca7c7d085',
-              'fixedVersions': [
-                '3.3.6-r0'
-              ],
-              'installedVersion': '3.3.3-r0',
-              'packageName':      'libcrypto3',
-              'purl':             'pkg:apk/alpine/libcrypto3@3.3.3-r0?arch=x86_64&distro=3.20.6',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2025-69420',
-                'https://github.com/openssl/openssl/commit/27c7012c91cc986a598d7540f3079dfde2416eb9',
-                'https://github.com/openssl/openssl/commit/4e254b48ad93cc092be3dd62d97015f33f73133a',
-                'https://github.com/openssl/openssl/commit/564fd9c73787f25693bf9e75faf7bf6bb1305d4e',
-                'https://github.com/openssl/openssl/commit/5eb0770ffcf11b785cf374ff3c19196245e54f1b',
-                'https://github.com/openssl/openssl/commit/a99349ebfc519999edc50620abe24d599b9eb085',
-                'https://nvd.nist.gov/vuln/detail/CVE-2025-69420',
-                'https://openssl-library.org/news/secadv/20260127.txt',
-                'https://ubuntu.com/security/notices/USN-7980-1',
-                'https://ubuntu.com/security/notices/USN-7980-2',
-                'https://www.cve.org/CVERecord?id=CVE-2025-69420'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: OpenSSL: Denial of Service via malformed TimeStamp Response'
-            },
-            {
-              'cve':  'CVE-2025-69421',
-              'cvss': {
-                'redhat': {
-                  'v3score':  '6.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-476'
-              ],
-              'description':   'Issue summary: Processing a malformed PKCS#12 file can trigger a NULL pointer\ndereference in the PKCS12_item_decrypt_d2i_ex() function.\n\nImpact summary: A NULL pointer dereference can trigger a crash which leads to\nDenial of Service for an application processing PKCS#12 files.\n\nThe PKCS12_item_decrypt_d2i_ex() function does not check whether the oct\nparameter is NULL before dereferencing it. When called from\nPKCS12_unpack_p7encdata() with a malformed PKCS#12 file, this parameter can\nbe NULL, causing a crash. The vulnerability is limited to Denial of Service\nand cannot be escalated to achieve code execution or memory disclosure.\n\nExploiting this issue requires an attacker to provide a malformed PKCS#12 file\nto an application that processes it. For that reason the issue was assessed as\nLow severity according to our Security Policy.\n\nThe FIPS modules in 3.6, 3.5, 3.4, 3.3 and 3.0 are not affected by this issue,\nas the PKCS#12 implementation is outside the OpenSSL FIPS module boundary.\n\nOpenSSL 3.6, 3.5, 3.4, 3.3, 3.0, 1.1.1 and 1.0.2 are vulnerable to this issue.',
-              'diffID':        'sha256:994456c4fd7b2b87346a81961efb4ce945a39592d32e0762b38768bca7c7d085',
-              'fixedVersions': [
-                '3.3.6-r0'
-              ],
-              'installedVersion': '3.3.3-r0',
-              'packageName':      'libcrypto3',
-              'purl':             'pkg:apk/alpine/libcrypto3@3.3.3-r0?arch=x86_64&distro=3.20.6',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2025-69421',
-                'https://github.com/openssl/openssl/commit/3524a29271f8191b8fd8a5257eb05173982a097b',
-                'https://github.com/openssl/openssl/commit/36ecb4960872a4ce04bf6f1e1f4e78d75ec0c0c7',
-                'https://github.com/openssl/openssl/commit/4bbc8d41a72c842ce4077a8a3eccd1109aaf74bd',
-                'https://github.com/openssl/openssl/commit/643986985cd1c21221f941129d76fe0c2785aeb3',
-                'https://github.com/openssl/openssl/commit/a2dbc539f0f9cc63832709fa5aa33ad9495eb19c',
-                'https://nvd.nist.gov/vuln/detail/CVE-2025-69421',
-                'https://openssl-library.org/news/secadv/20260127.txt',
-                'https://ubuntu.com/security/notices/USN-7980-1',
-                'https://ubuntu.com/security/notices/USN-7980-2',
-                'https://www.cve.org/CVERecord?id=CVE-2025-69421'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: OpenSSL: Denial of Service via malformed PKCS#12 file processing'
-            },
-            {
-              'cve':  'CVE-2025-9230',
-              'cvss': {
-                'redhat': {
-                  'v3score':  '5.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L'
-                }
-              },
-              'cwes': [
-                'CWE-125',
-                'CWE-787'
-              ],
-              'description':   'Issue summary: An application trying to decrypt CMS messages encrypted using\npassword based encryption can trigger an out-of-bounds read and write.\n\nImpact summary: This out-of-bounds read may trigger a crash which leads to\nDenial of Service for an application. The out-of-bounds write can cause\na memory corruption which can have various consequences including\na Denial of Service or Execution of attacker-supplied code.\n\nAlthough the consequences of a successful exploit of this vulnerability\ncould be severe, the probability that the attacker would be able to\nperform it is low. Besides, password based (PWRI) encryption support in CMS\nmessages is very rarely used. For that reason the issue was assessed as\nModerate severity according to our Security Policy.\n\nThe FIPS modules in 3.5, 3.4, 3.3, 3.2, 3.1 and 3.0 are not affected by this\nissue, as the CMS implementation is outside the OpenSSL FIPS module\nboundary.',
-              'diffID':        'sha256:994456c4fd7b2b87346a81961efb4ce945a39592d32e0762b38768bca7c7d085',
-              'fixedVersions': [
-                '3.3.5-r0'
-              ],
-              'installedVersion': '3.3.3-r0',
-              'packageName':      'libcrypto3',
-              'purl':             'pkg:apk/alpine/libcrypto3@3.3.3-r0?arch=x86_64&distro=3.20.6',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2025/09/30/5',
-                'https://access.redhat.com/errata/RHSA-2025:21255',
-                'https://access.redhat.com/security/cve/CVE-2025-9230',
-                'https://bugzilla.redhat.com/2396054',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2396054',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-9230',
-                'https://errata.almalinux.org/9/ALSA-2025-21255.html',
-                'https://errata.rockylinux.org/RLSA-2025:21255',
-                'https://github.com/openssl/openssl/commit/5965ea5dd6960f36d8b7f74f8eac67a8eb8f2b45',
-                'https://github.com/openssl/openssl/commit/9e91358f365dee6c446dcdcdb01c04d2743fd280',
-                'https://github.com/openssl/openssl/commit/a79c4ce559c6a3a8fd4109e9f33c1185d5bf2def',
-                'https://github.com/openssl/openssl/commit/b5282d677551afda7d20e9c00e09561b547b2dfd',
-                'https://github.com/openssl/openssl/commit/bae259a211ada6315dc50900686daaaaaa55f482',
-                'https://github.openssl.org/openssl/extended-releases/commit/c2b96348bfa662f25f4fabf81958ae822063dae3',
-                'https://github.openssl.org/openssl/extended-releases/commit/dfbaf161d8dafc1132dd88cd48ad990ed9b4c8ba',
-                'https://linux.oracle.com/cve/CVE-2025-9230.html',
-                'https://linux.oracle.com/errata/ELSA-2026-50008.html',
-                'https://lists.debian.org/debian-lts-announce/2025/10/msg00001.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2025-9230',
-                'https://openssl-library.org/news/secadv/20250930.txt',
-                'https://ubuntu.com/security/notices/USN-7786-1',
-                'https://www.cve.org/CVERecord?id=CVE-2025-9230'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: Out-of-bounds read & write in RFC 3211 KEK Unwrap'
-            },
-            {
-              'cve':  'CVE-2025-9231',
-              'cvss': {
-                'redhat': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-385'
-              ],
-              'description':   'Issue summary: A timing side-channel which could potentially allow remote\nrecovery of the private key exists in the SM2 algorithm implementation on 64 bit\nARM platforms.\n\nImpact summary: A timing side-channel in SM2 signature computations on 64 bit\nARM platforms could allow recovering the private key by an attacker..\n\nWhile remote key recovery over a network was not attempted by the reporter,\ntiming measurements revealed a timing signal which may allow such an attack.\n\nOpenSSL does not directly support certificates with SM2 keys in TLS, and so\nthis CVE is not relevant in most TLS contexts.  However, given that it is\npossible to add support for such certificates via a custom provider, coupled\nwith the fact that in such a custom provider context the private key may be\nrecoverable via remote timing measurements, we consider this to be a Moderate\nseverity issue.\n\nThe FIPS modules in 3.5, 3.4, 3.3, 3.2, 3.1 and 3.0 are not affected by this\nissue, as SM2 is not an approved algorithm.',
-              'diffID':        'sha256:994456c4fd7b2b87346a81961efb4ce945a39592d32e0762b38768bca7c7d085',
-              'fixedVersions': [
-                '3.3.5-r0'
-              ],
-              'installedVersion': '3.3.3-r0',
-              'packageName':      'libcrypto3',
-              'purl':             'pkg:apk/alpine/libcrypto3@3.3.3-r0?arch=x86_64&distro=3.20.6',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2025/09/30/5',
-                'https://access.redhat.com/security/cve/CVE-2025-9231',
-                'https://github.com/openssl/openssl/commit/567f64386e43683888212226824b6a179885a0fe',
-                'https://github.com/openssl/openssl/commit/cba616c26ac8e7b37de5e77762e505ba5ca51698',
-                'https://github.com/openssl/openssl/commit/eed5adc9f969d77c94f213767acbb41ff923b6f4',
-                'https://github.com/openssl/openssl/commit/fc47a2ec078912b3e914fab5734535e76c4820c2',
-                'https://nvd.nist.gov/vuln/detail/CVE-2025-9231',
-                'https://openssl-library.org/news/secadv/20250930.txt',
-                'https://ubuntu.com/security/notices/USN-7786-1',
-                'https://www.cve.org/CVERecord?id=CVE-2025-9231'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: Timing side-channel in SM2 algorithm on 64 bit ARM'
-            },
-            {
-              'cve':  'CVE-2026-22795',
-              'cvss': {
-                'redhat': {
-                  'v3score':  '5.5',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-754'
-              ],
-              'description':   'Issue summary: An invalid or NULL pointer dereference can happen in\nan application processing a malformed PKCS#12 file.\n\nImpact summary: An application processing a malformed PKCS#12 file can be\ncaused to dereference an invalid or NULL pointer on memory read, resulting\nin a Denial of Service.\n\nA type confusion vulnerability exists in PKCS#12 parsing code where\nan ASN1_TYPE union member is accessed without first validating the type,\ncausing an invalid pointer read.\n\nThe location is constrained to a 1-byte address space, meaning any\nattempted pointer manipulation can only target addresses between 0x00 and 0xFF.\nThis range corresponds to the zero page, which is unmapped on most modern\noperating systems and will reliably result in a crash, leading only to a\nDenial of Service. Exploiting this issue also requires a user or application\nto process a maliciously crafted PKCS#12 file. It is uncommon to accept\nuntrusted PKCS#12 files in applications as they are usually used to store\nprivate keys which are trusted by definition. For these reasons, the issue\nwas assessed as Low severity.\n\nThe FIPS modules in 3.5, 3.4, 3.3 and 3.0 are not affected by this issue,\nas the PKCS12 implementation is outside the OpenSSL FIPS module boundary.\n\nOpenSSL 3.6, 3.5, 3.4, 3.3, 3.0 and 1.1.1 are vulnerable to this issue.\n\nOpenSSL 1.0.2 is not affected by this issue.',
-              'diffID':        'sha256:994456c4fd7b2b87346a81961efb4ce945a39592d32e0762b38768bca7c7d085',
-              'fixedVersions': [
-                '3.3.6-r0'
-              ],
-              'installedVersion': '3.3.3-r0',
-              'packageName':      'libcrypto3',
-              'purl':             'pkg:apk/alpine/libcrypto3@3.3.3-r0?arch=x86_64&distro=3.20.6',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2026-22795',
-                'https://github.com/openssl/openssl/commit/2502e7b7d4c0cf4f972a881641fe09edc67aeec4',
-                'https://github.com/openssl/openssl/commit/572844beca95068394c916626a6d3a490f831a49',
-                'https://github.com/openssl/openssl/commit/7bbca05be55b129651d9df4bdb92becc45002c12',
-                'https://github.com/openssl/openssl/commit/eeee3cbd4d682095ed431052f00403004596373e',
-                'https://github.com/openssl/openssl/commit/ef2fb66ec571564d64d1c74a12e388a2a54d05d2',
-                'https://nvd.nist.gov/vuln/detail/CVE-2026-22795',
-                'https://openssl-library.org/news/secadv/20260127.txt',
-                'https://ubuntu.com/security/notices/USN-7980-1',
-                'https://ubuntu.com/security/notices/USN-7980-2',
-                'https://www.cve.org/CVERecord?id=CVE-2026-22795'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: OpenSSL: Denial of Service due to type confusion in PKCS#12 file processing'
-            },
-            {
-              'cve':  'CVE-2026-22796',
-              'cvss': {
-                'redhat': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-754'
-              ],
-              'description':   'Issue summary: A type confusion vulnerability exists in the signature\nverification of signed PKCS#7 data where an ASN1_TYPE union member is\naccessed without first validating the type, causing an invalid or NULL\npointer dereference when processing malformed PKCS#7 data.\n\nImpact summary: An application performing signature verification of PKCS#7\ndata or calling directly the PKCS7_digest_from_attributes() function can be\ncaused to dereference an invalid or NULL pointer when reading, resulting in\na Denial of Service.\n\nThe function PKCS7_digest_from_attributes() accesses the message digest attribute\nvalue without validating its type. When the type is not V_ASN1_OCTET_STRING,\nthis results in accessing invalid memory through the ASN1_TYPE union, causing\na crash.\n\nExploiting this vulnerability requires an attacker to provide a malformed\nsigned PKCS#7 to an application that verifies it. The impact of the\nexploit is just a Denial of Service, the PKCS7 API is legacy and applications\nshould be using the CMS API instead. For these reasons the issue was\nassessed as Low severity.\n\nThe FIPS modules in 3.5, 3.4, 3.3 and 3.0 are not affected by this issue,\nas the PKCS#7 parsing implementation is outside the OpenSSL FIPS module\nboundary.\n\nOpenSSL 3.6, 3.5, 3.4, 3.3, 3.0, 1.1.1 and 1.0.2 are vulnerable to this issue.',
-              'diffID':        'sha256:994456c4fd7b2b87346a81961efb4ce945a39592d32e0762b38768bca7c7d085',
-              'fixedVersions': [
-                '3.3.6-r0'
-              ],
-              'installedVersion': '3.3.3-r0',
-              'packageName':      'libcrypto3',
-              'purl':             'pkg:apk/alpine/libcrypto3@3.3.3-r0?arch=x86_64&distro=3.20.6',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2026-22796',
-                'https://github.com/openssl/openssl/commit/2502e7b7d4c0cf4f972a881641fe09edc67aeec4',
-                'https://github.com/openssl/openssl/commit/572844beca95068394c916626a6d3a490f831a49',
-                'https://github.com/openssl/openssl/commit/7bbca05be55b129651d9df4bdb92becc45002c12',
-                'https://github.com/openssl/openssl/commit/eeee3cbd4d682095ed431052f00403004596373e',
-                'https://github.com/openssl/openssl/commit/ef2fb66ec571564d64d1c74a12e388a2a54d05d2',
-                'https://nvd.nist.gov/vuln/detail/CVE-2026-22796',
-                'https://openssl-library.org/news/secadv/20260127.txt',
-                'https://ubuntu.com/security/notices/USN-7980-1',
-                'https://ubuntu.com/security/notices/USN-7980-2',
-                'https://www.cve.org/CVERecord?id=CVE-2026-22796'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: OpenSSL: Denial of Service via type confusion in PKCS#7 signature verification'
-            },
-            {
-              'cve':  'CVE-2025-9232',
-              'cvss': {
-                'redhat': {
-                  'v3score':  '3.1',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L'
-                }
-              },
-              'cwes': [
-                'CWE-125'
-              ],
-              'description':   "Issue summary: An application using the OpenSSL HTTP client API functions may\ntrigger an out-of-bounds read if the 'no_proxy' environment variable is set and\nthe host portion of the authority component of the HTTP URL is an IPv6 address.\n\nImpact summary: An out-of-bounds read can trigger a crash which leads to\nDenial of Service for an application.\n\nThe OpenSSL HTTP client API functions can be used directly by applications\nbut they are also used by the OCSP client functions and CMP (Certificate\nManagement Protocol) client implementation in OpenSSL. However the URLs used\nby these implementations are unlikely to be controlled by an attacker.\n\nIn this vulnerable code the out of bounds read can only trigger a crash.\nFurthermore the vulnerability requires an attacker-controlled URL to be\npassed from an application to the OpenSSL function and the user has to have\na 'no_proxy' environment variable set. For the aforementioned reasons the\nissue was assessed as Low severity.\n\nThe vulnerable code was introduced in the following patch releases:\n3.0.16, 3.1.8, 3.2.4, 3.3.3, 3.4.0 and 3.5.0.\n\nThe FIPS modules in 3.5, 3.4, 3.3, 3.2, 3.1 and 3.0 are not affected by this\nissue, as the HTTP client implementation is outside the OpenSSL FIPS module\nboundary.",
-              'diffID':        'sha256:994456c4fd7b2b87346a81961efb4ce945a39592d32e0762b38768bca7c7d085',
-              'fixedVersions': [
-                '3.3.5-r0'
-              ],
-              'installedVersion': '3.3.3-r0',
-              'packageName':      'libcrypto3',
-              'purl':             'pkg:apk/alpine/libcrypto3@3.3.3-r0?arch=x86_64&distro=3.20.6',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2025/09/30/5',
-                'https://access.redhat.com/security/cve/CVE-2025-9232',
-                'https://github.com/openssl/openssl/commit/2b4ec20e47959170422922eaff25346d362dcb35',
-                'https://github.com/openssl/openssl/commit/654dc11d23468a74fc8ea4672b702dd3feb7be4b',
-                'https://github.com/openssl/openssl/commit/7cf21a30513c9e43c4bc3836c237cf086e194af3',
-                'https://github.com/openssl/openssl/commit/89e790ac431125a4849992858490bed6b225eadf',
-                'https://github.com/openssl/openssl/commit/bbf38c034cdabd0a13330abcc4855c866f53d2e0',
-                'https://nvd.nist.gov/vuln/detail/CVE-2025-9232',
-                'https://openssl-library.org/news/secadv/20250930.txt',
-                'https://ubuntu.com/security/notices/USN-7786-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2025-9232'
-              ],
-              'severity':   'LOW',
-              'suppressed': false,
-              'title':      'openssl: Out-of-bounds read in HTTP client no_proxy handling'
-            },
-            {
-              'cve':  'CVE-2025-15467',
-              'cvss': {
-                'redhat': {
-                  'v3score':  '9.8',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-787'
-              ],
-              'description':   'Issue summary: Parsing CMS AuthEnvelopedData message with maliciously\ncrafted AEAD parameters can trigger a stack buffer overflow.\n\nImpact summary: A stack buffer overflow may lead to a crash, causing Denial\nof Service, or potentially remote code execution.\n\nWhen parsing CMS AuthEnvelopedData structures that use AEAD ciphers such as\nAES-GCM, the IV (Initialization Vector) encoded in the ASN.1 parameters is\ncopied into a fixed-size stack buffer without verifying that its length fits\nthe destination. An attacker can supply a crafted CMS message with an\noversized IV, causing a stack-based out-of-bounds write before any\nauthentication or tag verification occurs.\n\nApplications and services that parse untrusted CMS or PKCS#7 content using\nAEAD ciphers (e.g., S/MIME AuthEnvelopedData with AES-GCM) are vulnerable.\nBecause the overflow occurs prior to authentication, no valid key material\nis required to trigger it. While exploitability to remote code execution\ndepends on platform and toolchain mitigations, the stack-based write\nprimitive represents a severe risk.\n\nThe FIPS modules in 3.6, 3.5, 3.4, 3.3 and 3.0 are not affected by this\nissue, as the CMS implementation is outside the OpenSSL FIPS module\nboundary.\n\nOpenSSL 3.6, 3.5, 3.4, 3.3 and 3.0 are vulnerable to this issue.\n\nOpenSSL 1.1.1 and 1.0.2 are not affected by this issue.',
-              'diffID':        'sha256:994456c4fd7b2b87346a81961efb4ce945a39592d32e0762b38768bca7c7d085',
-              'fixedVersions': [
-                '3.3.6-r0'
-              ],
-              'installedVersion': '3.3.3-r0',
-              'packageName':      'libssl3',
-              'purl':             'pkg:apk/alpine/libssl3@3.3.3-r0?arch=x86_64&distro=3.20.6',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2026/01/27/10',
-                'https://access.redhat.com/security/cve/CVE-2025-15467',
-                'https://github.com/openssl/openssl/commit/2c8f0e5fa9b6ee5508a0349e4572ddb74db5a703',
-                'https://github.com/openssl/openssl/commit/5f26d4202f5b89664c5c3f3c62086276026ba9a9',
-                'https://github.com/openssl/openssl/commit/6ced0fe6b10faa560e410e3ee8d6c82f06c65ea3',
-                'https://github.com/openssl/openssl/commit/ce39170276daec87f55c39dad1f629b56344429e',
-                'https://github.com/openssl/openssl/commit/d0071a0799f20cc8101730145349ed4487c268dc',
-                'https://nvd.nist.gov/vuln/detail/CVE-2025-15467',
-                'https://openssl-library.org/news/secadv/20260127.txt',
-                'https://ubuntu.com/security/notices/USN-7980-1',
-                'https://www.cve.org/CVERecord?id=CVE-2025-15467'
-              ],
-              'severity':   'CRITICAL',
-              'suppressed': false,
-              'title':      'openssl: OpenSSL: Remote code execution or Denial of Service via oversized Initialization Vector in CMS parsing'
-            },
-            {
-              'cve':  'CVE-2025-69419',
-              'cvss': {
-                'redhat': {
-                  'v3score':  '7.4',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-787'
-              ],
-              'description':   'Issue summary: Calling PKCS12_get_friendlyname() function on a maliciously\ncrafted PKCS#12 file with a BMPString (UTF-16BE) friendly name containing\nnon-ASCII BMP code point can trigger a one byte write before the allocated\nbuffer.\n\nImpact summary: The out-of-bounds write can cause a memory corruption\nwhich can have various consequences including a Denial of Service.\n\nThe OPENSSL_uni2utf8() function performs a two-pass conversion of a PKCS#12\nBMPString (UTF-16BE) to UTF-8. In the second pass, when emitting UTF-8 bytes,\nthe helper function bmp_to_utf8() incorrectly forwards the remaining UTF-16\nsource byte count as the destination buffer capacity to UTF8_putc(). For BMP\ncode points above U+07FF, UTF-8 requires three bytes, but the forwarded\ncapacity can be just two bytes. UTF8_putc() then returns -1, and this negative\nvalue is added to the output length without validation, causing the\nlength to become negative. The subsequent trailing NUL byte is then written\nat a negative offset, causing write outside of heap allocated buffer.\n\nThe vulnerability is reachable via the public PKCS12_get_friendlyname() API\nwhen parsing attacker-controlled PKCS#12 files. While PKCS12_parse() uses a\ndifferent code path that avoids this issue, PKCS12_get_friendlyname() directly\ninvokes the vulnerable function. Exploitation requires an attacker to provide\na malicious PKCS#12 file to be parsed by the application and the attacker\ncan just trigger a one zero byte write before the allocated buffer.\nFor that reason the issue was assessed as Low severity according to our\nSecurity Policy.\n\nThe FIPS modules in 3.6, 3.5, 3.4, 3.3 and 3.0 are not affected by this issue,\nas the PKCS#12 implementation is outside the OpenSSL FIPS module boundary.\n\nOpenSSL 3.6, 3.5, 3.4, 3.3, 3.0 and 1.1.1 are vulnerable to this issue.\n\nOpenSSL 1.0.2 is not affected by this issue.',
-              'diffID':        'sha256:994456c4fd7b2b87346a81961efb4ce945a39592d32e0762b38768bca7c7d085',
-              'fixedVersions': [
-                '3.3.6-r0'
-              ],
-              'installedVersion': '3.3.3-r0',
-              'packageName':      'libssl3',
-              'purl':             'pkg:apk/alpine/libssl3@3.3.3-r0?arch=x86_64&distro=3.20.6',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2025-69419',
-                'https://github.com/openssl/openssl/commit/41be0f216404f14457bbf3b9cc488dba60b49296',
-                'https://github.com/openssl/openssl/commit/7e9cac9832e4705b91987c2474ed06a37a93cecb',
-                'https://github.com/openssl/openssl/commit/a26a90d38edec3748566129d824e664b54bee2e2',
-                'https://github.com/openssl/openssl/commit/cda12de3bc0e333ea8d2c6fd15001dbdaf280015',
-                'https://github.com/openssl/openssl/commit/ff628933755075446bca8307e8417c14d164b535',
-                'https://nvd.nist.gov/vuln/detail/CVE-2025-69419',
-                'https://openssl-library.org/news/secadv/20260127.txt',
-                'https://ubuntu.com/security/notices/USN-7980-1',
-                'https://ubuntu.com/security/notices/USN-7980-2',
-                'https://www.cve.org/CVERecord?id=CVE-2025-69419'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: OpenSSL: Arbitrary code execution due to out-of-bounds write in PKCS#12 processing'
-            },
-            {
-              'cve':  'CVE-2025-15468',
-              'cvss': {
-                'redhat': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-476'
-              ],
-              'description':   'Issue summary: If an application using the SSL_CIPHER_find() function in\na QUIC protocol client or server receives an unknown cipher suite from\nthe peer, a NULL dereference occurs.\n\nImpact summary: A NULL pointer dereference leads to abnormal termination of\nthe running process causing Denial of Service.\n\nSome applications call SSL_CIPHER_find() from the client_hello_cb callback\non the cipher ID received from the peer. If this is done with an SSL object\nimplementing the QUIC protocol, NULL pointer dereference will happen if\nthe examined cipher ID is unknown or unsupported.\n\nAs it is not very common to call this function in applications using the QUIC \nprotocol and the worst outcome is Denial of Service, the issue was assessed\nas Low severity.\n\nThe vulnerable code was introduced in the 3.2 version with the addition\nof the QUIC protocol support.\n\nThe FIPS modules in 3.6, 3.5, 3.4 and 3.3 are not affected by this issue,\nas the QUIC implementation is outside the OpenSSL FIPS module boundary.\n\nOpenSSL 3.6, 3.5, 3.4 and 3.3 are vulnerable to this issue.\n\nOpenSSL 3.0, 1.1.1 and 1.0.2 are not affected by this issue.',
-              'diffID':        'sha256:994456c4fd7b2b87346a81961efb4ce945a39592d32e0762b38768bca7c7d085',
-              'fixedVersions': [
-                '3.3.6-r0'
-              ],
-              'installedVersion': '3.3.3-r0',
-              'packageName':      'libssl3',
-              'purl':             'pkg:apk/alpine/libssl3@3.3.3-r0?arch=x86_64&distro=3.20.6',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2025-15468',
-                'https://github.com/openssl/openssl/commit/1f08e54bad32843044fe8a675948d65e3b4ece65',
-                'https://github.com/openssl/openssl/commit/7c88376731c589ee5b36116c5a6e32d5ae5f7ae2',
-                'https://github.com/openssl/openssl/commit/b2539639400288a4580fe2d76247541b976bade4',
-                'https://github.com/openssl/openssl/commit/d75b309879631d45b972396ce4e5102559c64ac7',
-                'https://nvd.nist.gov/vuln/detail/CVE-2025-15468',
-                'https://openssl-library.org/news/secadv/20260127.txt',
-                'https://ubuntu.com/security/notices/USN-7980-1',
-                'https://www.cve.org/CVERecord?id=CVE-2025-15468'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: OpenSSL: Denial of Service via NULL pointer dereference in QUIC protocol handling'
-            },
-            {
-              'cve':  'CVE-2025-66199',
-              'cvss': {
-                'redhat': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-789'
-              ],
-              'description':   'Issue summary: A TLS 1.3 connection using certificate compression can be\nforced to allocate a large buffer before decompression without checking\nagainst the configured certificate size limit.\n\nImpact summary: An attacker can cause per-connection memory allocations of\nup to approximately 22 MiB and extra CPU work, potentially leading to\nservice degradation or resource exhaustion (Denial of Service).\n\nIn affected configurations, the peer-supplied uncompressed certificate\nlength from a CompressedCertificate message is used to grow a heap buffer\nprior to decompression. This length is not bounded by the max_cert_list\nsetting, which otherwise constrains certificate message sizes. An attacker\ncan exploit this to cause large per-connection allocations followed by\nhandshake failure. No memory corruption or information disclosure occurs.\n\nThis issue only affects builds where TLS 1.3 certificate compression is\ncompiled in (i.e., not OPENSSL_NO_COMP_ALG) and at least one compression\nalgorithm (brotli, zlib, or zstd) is available, and where the compression\nextension is negotiated. Both clients receiving a server CompressedCertificate\nand servers in mutual TLS scenarios receiving a client CompressedCertificate\nare affected. Servers that do not request client certificates are not\nvulnerable to client-initiated attacks.\n\nUsers can mitigate this issue by setting SSL_OP_NO_RX_CERTIFICATE_COMPRESSION\nto disable receiving compressed certificates.\n\nThe FIPS modules in 3.6, 3.5, 3.4 and 3.3 are not affected by this issue,\nas the TLS implementation is outside the OpenSSL FIPS module boundary.\n\nOpenSSL 3.6, 3.5, 3.4 and 3.3 are vulnerable to this issue.\n\nOpenSSL 3.0, 1.1.1 and 1.0.2 are not affected by this issue.',
-              'diffID':        'sha256:994456c4fd7b2b87346a81961efb4ce945a39592d32e0762b38768bca7c7d085',
-              'fixedVersions': [
-                '3.3.6-r0'
-              ],
-              'installedVersion': '3.3.3-r0',
-              'packageName':      'libssl3',
-              'purl':             'pkg:apk/alpine/libssl3@3.3.3-r0?arch=x86_64&distro=3.20.6',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2025-66199',
-                'https://github.com/openssl/openssl/commit/3ed1f75249932b155eef993a8e66a99cb98bfef4',
-                'https://github.com/openssl/openssl/commit/6184a4fb08ee6d7bca570d931a4e8bef40b64451',
-                'https://github.com/openssl/openssl/commit/895150b5e021d16b52fb32b97e1dd12f20448be5',
-                'https://github.com/openssl/openssl/commit/966a2478046c311ed7dae50c457d0db4cafbf7e4',
-                'https://nvd.nist.gov/vuln/detail/CVE-2025-66199',
-                'https://openssl-library.org/news/secadv/20260127.txt',
-                'https://ubuntu.com/security/notices/USN-7980-1',
-                'https://www.cve.org/CVERecord?id=CVE-2025-66199'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: OpenSSL: Denial of Service due to excessive memory allocation in TLS 1.3 certificate compression'
-            },
-            {
-              'cve':  'CVE-2025-68160',
-              'cvss': {
-                'redhat': {
-                  'v3score':  '4.7',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-787'
-              ],
-              'description':   'Issue summary: Writing large, newline-free data into a BIO chain using the\nline-buffering filter where the next BIO performs short writes can trigger\na heap-based out-of-bounds write.\n\nImpact summary: This out-of-bounds write can cause memory corruption which\ntypically results in a crash, leading to Denial of Service for an application.\n\nThe line-buffering BIO filter (BIO_f_linebuffer) is not used by default in\nTLS/SSL data paths. In OpenSSL command-line applications, it is typically\nonly pushed onto stdout/stderr on VMS systems. Third-party applications that\nexplicitly use this filter with a BIO chain that can short-write and that\nwrite large, newline-free data influenced by an attacker would be affected.\nHowever, the circumstances where this could happen are unlikely to be under\nattacker control, and BIO_f_linebuffer is unlikely to be handling non-curated\ndata controlled by an attacker. For that reason the issue was assessed as\nLow severity.\n\nThe FIPS modules in 3.6, 3.5, 3.4, 3.3 and 3.0 are not affected by this issue,\nas the BIO implementation is outside the OpenSSL FIPS module boundary.\n\nOpenSSL 3.6, 3.5, 3.4, 3.3, 3.0, 1.1.1 and 1.0.2 are vulnerable to this issue.',
-              'diffID':        'sha256:994456c4fd7b2b87346a81961efb4ce945a39592d32e0762b38768bca7c7d085',
-              'fixedVersions': [
-                '3.3.6-r0'
-              ],
-              'installedVersion': '3.3.3-r0',
-              'packageName':      'libssl3',
-              'purl':             'pkg:apk/alpine/libssl3@3.3.3-r0?arch=x86_64&distro=3.20.6',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2025-68160',
-                'https://github.com/openssl/openssl/commit/384011202af92605d926fafe4a0bcd6b65d162ad',
-                'https://github.com/openssl/openssl/commit/475c466ef2fbd8fc1df6fae1c3eed9c813fc8ff6',
-                'https://github.com/openssl/openssl/commit/4c96fbba618e1940f038012506ee9e21d32ee12c',
-                'https://github.com/openssl/openssl/commit/6845c3b6460a98b1ec4e463baa2ea1a63a32d7c0',
-                'https://github.com/openssl/openssl/commit/68a7cd2e2816c3a02f4d45a2ce43fc04fac97096',
-                'https://nvd.nist.gov/vuln/detail/CVE-2025-68160',
-                'https://openssl-library.org/news/secadv/20260127.txt',
-                'https://ubuntu.com/security/notices/USN-7980-1',
-                'https://ubuntu.com/security/notices/USN-7980-2',
-                'https://www.cve.org/CVERecord?id=CVE-2025-68160'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: OpenSSL: Denial of Service due to out-of-bounds write in BIO filter'
-            },
-            {
-              'cve':  'CVE-2025-69418',
-              'cvss': {
-                'redhat': {
-                  'v3score':  '4',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-325'
-              ],
-              'description':   'Issue summary: When using the low-level OCB API directly with AES-NI or<br>other hardware-accelerated code paths, inputs whose length is not a multiple<br>of 16 bytes can leave the final partial block unencrypted and unauthenticated.<br><br>Impact summary: The trailing 1-15 bytes of a message may be exposed in<br>cleartext on encryption and are not covered by the authentication tag,<br>allowing an attacker to read or tamper with those bytes without detection.<br><br>The low-level OCB encrypt and decrypt routines in the hardware-accelerated<br>stream path process full 16-byte blocks but do not advance the input/output<br>pointers. The subsequent tail-handling code then operates on the original<br>base pointers, effectively reprocessing the beginning of the buffer while<br>leaving the actual trailing bytes unprocessed. The authentication checksum<br>also excludes the true tail bytes.<br><br>However, typical OpenSSL consumers using EVP are not affected because the<br>higher-level EVP and provider OCB implementations split inputs so that full<br>blocks and trailing partial blocks are processed in separate calls, avoiding<br>the problematic code path. Additionally, TLS does not use OCB ciphersuites.<br>The vulnerability only affects applications that call the low-level<br>CRYPTO_ocb128_encrypt() or CRYPTO_ocb128_decrypt() functions directly with<br>non-block-aligned lengths in a single call on hardware-accelerated builds.<br>For these reasons the issue was assessed as Low severity.<br><br>The FIPS modules in 3.6, 3.5, 3.4, 3.3, 3.2, 3.1 and 3.0 are not affected<br>by this issue, as OCB mode is not a FIPS-approved algorithm.<br><br>OpenSSL 3.6, 3.5, 3.4, 3.3, 3.0 and 1.1.1 are vulnerable to this issue.<br><br>OpenSSL 1.0.2 is not affected by this issue.',
-              'diffID':        'sha256:994456c4fd7b2b87346a81961efb4ce945a39592d32e0762b38768bca7c7d085',
-              'fixedVersions': [
-                '3.3.6-r0'
-              ],
-              'installedVersion': '3.3.3-r0',
-              'packageName':      'libssl3',
-              'purl':             'pkg:apk/alpine/libssl3@3.3.3-r0?arch=x86_64&distro=3.20.6',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2025-69418',
-                'https://github.com/openssl/openssl/commit/372fc5c77529695b05b4f5b5187691a57ef5dffc',
-                'https://github.com/openssl/openssl/commit/4016975d4469cd6b94927c607f7c511385f928d8',
-                'https://github.com/openssl/openssl/commit/52d23c86a54adab5ee9f80e48b242b52c4cc2347',
-                'https://github.com/openssl/openssl/commit/a7589230356d908c0eca4b969ec4f62106f4f5ae',
-                'https://github.com/openssl/openssl/commit/ed40856d7d4ba6cb42779b6770666a65f19cb977',
-                'https://nvd.nist.gov/vuln/detail/CVE-2025-69418',
-                'https://openssl-library.org/news/secadv/20260127.txt',
-                'https://ubuntu.com/security/notices/USN-7980-1',
-                'https://ubuntu.com/security/notices/USN-7980-2',
-                'https://www.cve.org/CVERecord?id=CVE-2025-69418'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: OpenSSL: Information disclosure and data tampering via specific low-level OCB encryption/decryption calls'
-            },
-            {
-              'cve':  'CVE-2025-69420',
-              'cvss': {
-                'redhat': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-754'
-              ],
-              'description':   'Issue summary: A type confusion vulnerability exists in the TimeStamp Response\nverification code where an ASN1_TYPE union member is accessed without first\nvalidating the type, causing an invalid or NULL pointer dereference when\nprocessing a malformed TimeStamp Response file.\n\nImpact summary: An application calling TS_RESP_verify_response() with a\nmalformed TimeStamp Response can be caused to dereference an invalid or\nNULL pointer when reading, resulting in a Denial of Service.\n\nThe functions ossl_ess_get_signing_cert() and ossl_ess_get_signing_cert_v2()\naccess the signing cert attribute value without validating its type.\nWhen the type is not V_ASN1_SEQUENCE, this results in accessing invalid memory\nthrough the ASN1_TYPE union, causing a crash.\n\nExploiting this vulnerability requires an attacker to provide a malformed\nTimeStamp Response to an application that verifies timestamp responses. The\nTimeStamp protocol (RFC 3161) is not widely used and the impact of the\nexploit is just a Denial of Service. For these reasons the issue was\nassessed as Low severity.\n\nThe FIPS modules in 3.5, 3.4, 3.3 and 3.0 are not affected by this issue,\nas the TimeStamp Response implementation is outside the OpenSSL FIPS module\nboundary.\n\nOpenSSL 3.6, 3.5, 3.4, 3.3, 3.0 and 1.1.1 are vulnerable to this issue.\n\nOpenSSL 1.0.2 is not affected by this issue.',
-              'diffID':        'sha256:994456c4fd7b2b87346a81961efb4ce945a39592d32e0762b38768bca7c7d085',
-              'fixedVersions': [
-                '3.3.6-r0'
-              ],
-              'installedVersion': '3.3.3-r0',
-              'packageName':      'libssl3',
-              'purl':             'pkg:apk/alpine/libssl3@3.3.3-r0?arch=x86_64&distro=3.20.6',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2025-69420',
-                'https://github.com/openssl/openssl/commit/27c7012c91cc986a598d7540f3079dfde2416eb9',
-                'https://github.com/openssl/openssl/commit/4e254b48ad93cc092be3dd62d97015f33f73133a',
-                'https://github.com/openssl/openssl/commit/564fd9c73787f25693bf9e75faf7bf6bb1305d4e',
-                'https://github.com/openssl/openssl/commit/5eb0770ffcf11b785cf374ff3c19196245e54f1b',
-                'https://github.com/openssl/openssl/commit/a99349ebfc519999edc50620abe24d599b9eb085',
-                'https://nvd.nist.gov/vuln/detail/CVE-2025-69420',
-                'https://openssl-library.org/news/secadv/20260127.txt',
-                'https://ubuntu.com/security/notices/USN-7980-1',
-                'https://ubuntu.com/security/notices/USN-7980-2',
-                'https://www.cve.org/CVERecord?id=CVE-2025-69420'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: OpenSSL: Denial of Service via malformed TimeStamp Response'
-            },
-            {
-              'cve':  'CVE-2025-69421',
-              'cvss': {
-                'redhat': {
-                  'v3score':  '6.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-476'
-              ],
-              'description':   'Issue summary: Processing a malformed PKCS#12 file can trigger a NULL pointer\ndereference in the PKCS12_item_decrypt_d2i_ex() function.\n\nImpact summary: A NULL pointer dereference can trigger a crash which leads to\nDenial of Service for an application processing PKCS#12 files.\n\nThe PKCS12_item_decrypt_d2i_ex() function does not check whether the oct\nparameter is NULL before dereferencing it. When called from\nPKCS12_unpack_p7encdata() with a malformed PKCS#12 file, this parameter can\nbe NULL, causing a crash. The vulnerability is limited to Denial of Service\nand cannot be escalated to achieve code execution or memory disclosure.\n\nExploiting this issue requires an attacker to provide a malformed PKCS#12 file\nto an application that processes it. For that reason the issue was assessed as\nLow severity according to our Security Policy.\n\nThe FIPS modules in 3.6, 3.5, 3.4, 3.3 and 3.0 are not affected by this issue,\nas the PKCS#12 implementation is outside the OpenSSL FIPS module boundary.\n\nOpenSSL 3.6, 3.5, 3.4, 3.3, 3.0, 1.1.1 and 1.0.2 are vulnerable to this issue.',
-              'diffID':        'sha256:994456c4fd7b2b87346a81961efb4ce945a39592d32e0762b38768bca7c7d085',
-              'fixedVersions': [
-                '3.3.6-r0'
-              ],
-              'installedVersion': '3.3.3-r0',
-              'packageName':      'libssl3',
-              'purl':             'pkg:apk/alpine/libssl3@3.3.3-r0?arch=x86_64&distro=3.20.6',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2025-69421',
-                'https://github.com/openssl/openssl/commit/3524a29271f8191b8fd8a5257eb05173982a097b',
-                'https://github.com/openssl/openssl/commit/36ecb4960872a4ce04bf6f1e1f4e78d75ec0c0c7',
-                'https://github.com/openssl/openssl/commit/4bbc8d41a72c842ce4077a8a3eccd1109aaf74bd',
-                'https://github.com/openssl/openssl/commit/643986985cd1c21221f941129d76fe0c2785aeb3',
-                'https://github.com/openssl/openssl/commit/a2dbc539f0f9cc63832709fa5aa33ad9495eb19c',
-                'https://nvd.nist.gov/vuln/detail/CVE-2025-69421',
-                'https://openssl-library.org/news/secadv/20260127.txt',
-                'https://ubuntu.com/security/notices/USN-7980-1',
-                'https://ubuntu.com/security/notices/USN-7980-2',
-                'https://www.cve.org/CVERecord?id=CVE-2025-69421'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: OpenSSL: Denial of Service via malformed PKCS#12 file processing'
-            },
-            {
-              'cve':  'CVE-2025-9230',
-              'cvss': {
-                'redhat': {
-                  'v3score':  '5.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L'
-                }
-              },
-              'cwes': [
-                'CWE-125',
-                'CWE-787'
-              ],
-              'description':   'Issue summary: An application trying to decrypt CMS messages encrypted using\npassword based encryption can trigger an out-of-bounds read and write.\n\nImpact summary: This out-of-bounds read may trigger a crash which leads to\nDenial of Service for an application. The out-of-bounds write can cause\na memory corruption which can have various consequences including\na Denial of Service or Execution of attacker-supplied code.\n\nAlthough the consequences of a successful exploit of this vulnerability\ncould be severe, the probability that the attacker would be able to\nperform it is low. Besides, password based (PWRI) encryption support in CMS\nmessages is very rarely used. For that reason the issue was assessed as\nModerate severity according to our Security Policy.\n\nThe FIPS modules in 3.5, 3.4, 3.3, 3.2, 3.1 and 3.0 are not affected by this\nissue, as the CMS implementation is outside the OpenSSL FIPS module\nboundary.',
-              'diffID':        'sha256:994456c4fd7b2b87346a81961efb4ce945a39592d32e0762b38768bca7c7d085',
-              'fixedVersions': [
-                '3.3.5-r0'
-              ],
-              'installedVersion': '3.3.3-r0',
-              'packageName':      'libssl3',
-              'purl':             'pkg:apk/alpine/libssl3@3.3.3-r0?arch=x86_64&distro=3.20.6',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2025/09/30/5',
-                'https://access.redhat.com/errata/RHSA-2025:21255',
-                'https://access.redhat.com/security/cve/CVE-2025-9230',
-                'https://bugzilla.redhat.com/2396054',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2396054',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-9230',
-                'https://errata.almalinux.org/9/ALSA-2025-21255.html',
-                'https://errata.rockylinux.org/RLSA-2025:21255',
-                'https://github.com/openssl/openssl/commit/5965ea5dd6960f36d8b7f74f8eac67a8eb8f2b45',
-                'https://github.com/openssl/openssl/commit/9e91358f365dee6c446dcdcdb01c04d2743fd280',
-                'https://github.com/openssl/openssl/commit/a79c4ce559c6a3a8fd4109e9f33c1185d5bf2def',
-                'https://github.com/openssl/openssl/commit/b5282d677551afda7d20e9c00e09561b547b2dfd',
-                'https://github.com/openssl/openssl/commit/bae259a211ada6315dc50900686daaaaaa55f482',
-                'https://github.openssl.org/openssl/extended-releases/commit/c2b96348bfa662f25f4fabf81958ae822063dae3',
-                'https://github.openssl.org/openssl/extended-releases/commit/dfbaf161d8dafc1132dd88cd48ad990ed9b4c8ba',
-                'https://linux.oracle.com/cve/CVE-2025-9230.html',
-                'https://linux.oracle.com/errata/ELSA-2026-50008.html',
-                'https://lists.debian.org/debian-lts-announce/2025/10/msg00001.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2025-9230',
-                'https://openssl-library.org/news/secadv/20250930.txt',
-                'https://ubuntu.com/security/notices/USN-7786-1',
-                'https://www.cve.org/CVERecord?id=CVE-2025-9230'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: Out-of-bounds read & write in RFC 3211 KEK Unwrap'
-            },
-            {
-              'cve':  'CVE-2025-9231',
-              'cvss': {
-                'redhat': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-385'
-              ],
-              'description':   'Issue summary: A timing side-channel which could potentially allow remote\nrecovery of the private key exists in the SM2 algorithm implementation on 64 bit\nARM platforms.\n\nImpact summary: A timing side-channel in SM2 signature computations on 64 bit\nARM platforms could allow recovering the private key by an attacker..\n\nWhile remote key recovery over a network was not attempted by the reporter,\ntiming measurements revealed a timing signal which may allow such an attack.\n\nOpenSSL does not directly support certificates with SM2 keys in TLS, and so\nthis CVE is not relevant in most TLS contexts.  However, given that it is\npossible to add support for such certificates via a custom provider, coupled\nwith the fact that in such a custom provider context the private key may be\nrecoverable via remote timing measurements, we consider this to be a Moderate\nseverity issue.\n\nThe FIPS modules in 3.5, 3.4, 3.3, 3.2, 3.1 and 3.0 are not affected by this\nissue, as SM2 is not an approved algorithm.',
-              'diffID':        'sha256:994456c4fd7b2b87346a81961efb4ce945a39592d32e0762b38768bca7c7d085',
-              'fixedVersions': [
-                '3.3.5-r0'
-              ],
-              'installedVersion': '3.3.3-r0',
-              'packageName':      'libssl3',
-              'purl':             'pkg:apk/alpine/libssl3@3.3.3-r0?arch=x86_64&distro=3.20.6',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2025/09/30/5',
-                'https://access.redhat.com/security/cve/CVE-2025-9231',
-                'https://github.com/openssl/openssl/commit/567f64386e43683888212226824b6a179885a0fe',
-                'https://github.com/openssl/openssl/commit/cba616c26ac8e7b37de5e77762e505ba5ca51698',
-                'https://github.com/openssl/openssl/commit/eed5adc9f969d77c94f213767acbb41ff923b6f4',
-                'https://github.com/openssl/openssl/commit/fc47a2ec078912b3e914fab5734535e76c4820c2',
-                'https://nvd.nist.gov/vuln/detail/CVE-2025-9231',
-                'https://openssl-library.org/news/secadv/20250930.txt',
-                'https://ubuntu.com/security/notices/USN-7786-1',
-                'https://www.cve.org/CVERecord?id=CVE-2025-9231'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: Timing side-channel in SM2 algorithm on 64 bit ARM'
-            },
-            {
-              'cve':  'CVE-2026-22795',
-              'cvss': {
-                'redhat': {
-                  'v3score':  '5.5',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-754'
-              ],
-              'description':   'Issue summary: An invalid or NULL pointer dereference can happen in\nan application processing a malformed PKCS#12 file.\n\nImpact summary: An application processing a malformed PKCS#12 file can be\ncaused to dereference an invalid or NULL pointer on memory read, resulting\nin a Denial of Service.\n\nA type confusion vulnerability exists in PKCS#12 parsing code where\nan ASN1_TYPE union member is accessed without first validating the type,\ncausing an invalid pointer read.\n\nThe location is constrained to a 1-byte address space, meaning any\nattempted pointer manipulation can only target addresses between 0x00 and 0xFF.\nThis range corresponds to the zero page, which is unmapped on most modern\noperating systems and will reliably result in a crash, leading only to a\nDenial of Service. Exploiting this issue also requires a user or application\nto process a maliciously crafted PKCS#12 file. It is uncommon to accept\nuntrusted PKCS#12 files in applications as they are usually used to store\nprivate keys which are trusted by definition. For these reasons, the issue\nwas assessed as Low severity.\n\nThe FIPS modules in 3.5, 3.4, 3.3 and 3.0 are not affected by this issue,\nas the PKCS12 implementation is outside the OpenSSL FIPS module boundary.\n\nOpenSSL 3.6, 3.5, 3.4, 3.3, 3.0 and 1.1.1 are vulnerable to this issue.\n\nOpenSSL 1.0.2 is not affected by this issue.',
-              'diffID':        'sha256:994456c4fd7b2b87346a81961efb4ce945a39592d32e0762b38768bca7c7d085',
-              'fixedVersions': [
-                '3.3.6-r0'
-              ],
-              'installedVersion': '3.3.3-r0',
-              'packageName':      'libssl3',
-              'purl':             'pkg:apk/alpine/libssl3@3.3.3-r0?arch=x86_64&distro=3.20.6',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2026-22795',
-                'https://github.com/openssl/openssl/commit/2502e7b7d4c0cf4f972a881641fe09edc67aeec4',
-                'https://github.com/openssl/openssl/commit/572844beca95068394c916626a6d3a490f831a49',
-                'https://github.com/openssl/openssl/commit/7bbca05be55b129651d9df4bdb92becc45002c12',
-                'https://github.com/openssl/openssl/commit/eeee3cbd4d682095ed431052f00403004596373e',
-                'https://github.com/openssl/openssl/commit/ef2fb66ec571564d64d1c74a12e388a2a54d05d2',
-                'https://nvd.nist.gov/vuln/detail/CVE-2026-22795',
-                'https://openssl-library.org/news/secadv/20260127.txt',
-                'https://ubuntu.com/security/notices/USN-7980-1',
-                'https://ubuntu.com/security/notices/USN-7980-2',
-                'https://www.cve.org/CVERecord?id=CVE-2026-22795'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: OpenSSL: Denial of Service due to type confusion in PKCS#12 file processing'
-            },
-            {
-              'cve':  'CVE-2026-22796',
-              'cvss': {
-                'redhat': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-754'
-              ],
-              'description':   'Issue summary: A type confusion vulnerability exists in the signature\nverification of signed PKCS#7 data where an ASN1_TYPE union member is\naccessed without first validating the type, causing an invalid or NULL\npointer dereference when processing malformed PKCS#7 data.\n\nImpact summary: An application performing signature verification of PKCS#7\ndata or calling directly the PKCS7_digest_from_attributes() function can be\ncaused to dereference an invalid or NULL pointer when reading, resulting in\na Denial of Service.\n\nThe function PKCS7_digest_from_attributes() accesses the message digest attribute\nvalue without validating its type. When the type is not V_ASN1_OCTET_STRING,\nthis results in accessing invalid memory through the ASN1_TYPE union, causing\na crash.\n\nExploiting this vulnerability requires an attacker to provide a malformed\nsigned PKCS#7 to an application that verifies it. The impact of the\nexploit is just a Denial of Service, the PKCS7 API is legacy and applications\nshould be using the CMS API instead. For these reasons the issue was\nassessed as Low severity.\n\nThe FIPS modules in 3.5, 3.4, 3.3 and 3.0 are not affected by this issue,\nas the PKCS#7 parsing implementation is outside the OpenSSL FIPS module\nboundary.\n\nOpenSSL 3.6, 3.5, 3.4, 3.3, 3.0, 1.1.1 and 1.0.2 are vulnerable to this issue.',
-              'diffID':        'sha256:994456c4fd7b2b87346a81961efb4ce945a39592d32e0762b38768bca7c7d085',
-              'fixedVersions': [
-                '3.3.6-r0'
-              ],
-              'installedVersion': '3.3.3-r0',
-              'packageName':      'libssl3',
-              'purl':             'pkg:apk/alpine/libssl3@3.3.3-r0?arch=x86_64&distro=3.20.6',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2026-22796',
-                'https://github.com/openssl/openssl/commit/2502e7b7d4c0cf4f972a881641fe09edc67aeec4',
-                'https://github.com/openssl/openssl/commit/572844beca95068394c916626a6d3a490f831a49',
-                'https://github.com/openssl/openssl/commit/7bbca05be55b129651d9df4bdb92becc45002c12',
-                'https://github.com/openssl/openssl/commit/eeee3cbd4d682095ed431052f00403004596373e',
-                'https://github.com/openssl/openssl/commit/ef2fb66ec571564d64d1c74a12e388a2a54d05d2',
-                'https://nvd.nist.gov/vuln/detail/CVE-2026-22796',
-                'https://openssl-library.org/news/secadv/20260127.txt',
-                'https://ubuntu.com/security/notices/USN-7980-1',
-                'https://ubuntu.com/security/notices/USN-7980-2',
-                'https://www.cve.org/CVERecord?id=CVE-2026-22796'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: OpenSSL: Denial of Service via type confusion in PKCS#7 signature verification'
-            },
-            {
-              'cve':  'CVE-2025-9232',
-              'cvss': {
-                'redhat': {
-                  'v3score':  '3.1',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L'
-                }
-              },
-              'cwes': [
-                'CWE-125'
-              ],
-              'description':   "Issue summary: An application using the OpenSSL HTTP client API functions may\ntrigger an out-of-bounds read if the 'no_proxy' environment variable is set and\nthe host portion of the authority component of the HTTP URL is an IPv6 address.\n\nImpact summary: An out-of-bounds read can trigger a crash which leads to\nDenial of Service for an application.\n\nThe OpenSSL HTTP client API functions can be used directly by applications\nbut they are also used by the OCSP client functions and CMP (Certificate\nManagement Protocol) client implementation in OpenSSL. However the URLs used\nby these implementations are unlikely to be controlled by an attacker.\n\nIn this vulnerable code the out of bounds read can only trigger a crash.\nFurthermore the vulnerability requires an attacker-controlled URL to be\npassed from an application to the OpenSSL function and the user has to have\na 'no_proxy' environment variable set. For the aforementioned reasons the\nissue was assessed as Low severity.\n\nThe vulnerable code was introduced in the following patch releases:\n3.0.16, 3.1.8, 3.2.4, 3.3.3, 3.4.0 and 3.5.0.\n\nThe FIPS modules in 3.5, 3.4, 3.3, 3.2, 3.1 and 3.0 are not affected by this\nissue, as the HTTP client implementation is outside the OpenSSL FIPS module\nboundary.",
-              'diffID':        'sha256:994456c4fd7b2b87346a81961efb4ce945a39592d32e0762b38768bca7c7d085',
-              'fixedVersions': [
-                '3.3.5-r0'
-              ],
-              'installedVersion': '3.3.3-r0',
-              'packageName':      'libssl3',
-              'purl':             'pkg:apk/alpine/libssl3@3.3.3-r0?arch=x86_64&distro=3.20.6',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2025/09/30/5',
-                'https://access.redhat.com/security/cve/CVE-2025-9232',
-                'https://github.com/openssl/openssl/commit/2b4ec20e47959170422922eaff25346d362dcb35',
-                'https://github.com/openssl/openssl/commit/654dc11d23468a74fc8ea4672b702dd3feb7be4b',
-                'https://github.com/openssl/openssl/commit/7cf21a30513c9e43c4bc3836c237cf086e194af3',
-                'https://github.com/openssl/openssl/commit/89e790ac431125a4849992858490bed6b225eadf',
-                'https://github.com/openssl/openssl/commit/bbf38c034cdabd0a13330abcc4855c866f53d2e0',
-                'https://nvd.nist.gov/vuln/detail/CVE-2025-9232',
-                'https://openssl-library.org/news/secadv/20250930.txt',
-                'https://ubuntu.com/security/notices/USN-7786-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2025-9232'
-              ],
-              'severity':   'LOW',
-              'suppressed': false,
-              'title':      'openssl: Out-of-bounds read in HTTP client no_proxy handling'
-            },
-            {
-              'cve':  'CVE-2024-58251',
-              'cwes': [
-                'CWE-150'
-              ],
-              'description':   'In netstat in BusyBox through 1.37.0, local users can launch of network application with an argv[0] containing an ANSI terminal escape sequence, leading to a denial of service (terminal locked up) when netstat is used by a victim.',
-              'diffID':        'sha256:994456c4fd7b2b87346a81961efb4ce945a39592d32e0762b38768bca7c7d085',
-              'fixedVersions': [
-                '1.36.1-r31'
-              ],
-              'installedVersion': '1.36.1-r29',
-              'packageName':      'ssl_client',
-              'purl':             'pkg:apk/alpine/ssl_client@1.36.1-r29?arch=x86_64&distro=3.20.6',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2025/04/23/6',
-                'https://bugs.busybox.net/show_bug.cgi?id=15922',
-                'https://www.busybox.net',
-                'https://www.busybox.net/downloads/',
-                'https://www.cve.org/CVERecord?id=CVE-2024-58251'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'In netstat in BusyBox through 1.37.0, local users can launch of networ ...'
-            },
-            {
-              'cve':  'CVE-2025-46394',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '3.3',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-451'
-              ],
-              'description':   'In tar in BusyBox through 1.37.0, a TAR archive can have filenames hidden from a listing through the use of terminal escape sequences.',
-              'diffID':        'sha256:994456c4fd7b2b87346a81961efb4ce945a39592d32e0762b38768bca7c7d085',
-              'fixedVersions': [
-                '1.36.1-r31'
-              ],
-              'installedVersion': '1.36.1-r29',
-              'packageName':      'ssl_client',
-              'purl':             'pkg:apk/alpine/ssl_client@1.36.1-r29?arch=x86_64&distro=3.20.6',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2025/04/23/5',
-                'http://www.openwall.com/lists/oss-security/2025/04/24/3',
-                'https://bugs.busybox.net/show_bug.cgi?id=16018',
-                'https://lists.busybox.net/pipermail/busybox/2024-July/090806.html',
-                'https://lists.busybox.net/pipermail/busybox/2024-July/090814.html',
-                'https://www.busybox.net',
-                'https://www.busybox.net/downloads/',
-                'https://www.cve.org/CVERecord?id=CVE-2025-46394',
-                'https://www.openwall.com/lists/oss-security/2025/04/23/1'
-              ],
-              'severity':   'LOW',
-              'suppressed': false,
-              'title':      'In tar in BusyBox through 1.37.0, a TAR archive can have filenames hid ...'
-            }
-          ]
-        }
-      ],
-      'summary': {
-        'critical':   2,
-        'high':       2,
-        'low':        5,
-        'medium':     23,
-        'suppressed': 0,
-        'unknown':    0
-      }
-    }
-  },
-  {
-    'id':    'default/51af314d95ed2c5de878a8d70dfd94e663b14d9fd2489e08c53ed6496856c023',
-    'type':  'storage.sbomscanner.kubewarden.io.vulnerabilityreport',
-    'links': {
-      'patch':  'https://localhost:8005/v1/storage.sbomscanner.kubewarden.io.vulnerabilityreports/default/51af314d95ed2c5de878a8d70dfd94e663b14d9fd2489e08c53ed6496856c023',
-      'remove': 'https://localhost:8005/v1/storage.sbomscanner.kubewarden.io.vulnerabilityreports/default/51af314d95ed2c5de878a8d70dfd94e663b14d9fd2489e08c53ed6496856c023',
-      'self':   'https://localhost:8005/v1/storage.sbomscanner.kubewarden.io.vulnerabilityreports/default/51af314d95ed2c5de878a8d70dfd94e663b14d9fd2489e08c53ed6496856c023',
-      'update': 'https://localhost:8005/v1/storage.sbomscanner.kubewarden.io.vulnerabilityreports/default/51af314d95ed2c5de878a8d70dfd94e663b14d9fd2489e08c53ed6496856c023',
-      'view':   'https://localhost:8005/apis/storage.sbomscanner.kubewarden.io/v1alpha1/namespaces/default/vulnerabilityreports/51af314d95ed2c5de878a8d70dfd94e663b14d9fd2489e08c53ed6496856c023'
-    },
-    'apiVersion':    'storage.sbomscanner.kubewarden.io/v1alpha1',
-    'imageMetadata': {
-      'digest':      'sha256:44fcc97281af3a82dc84db7a4c15848e271afd3f3103eb284066d7f6393dcfb1',
-      'platform':    'linux/amd64',
-      'registry':    'demo-02',
-      'registryURI': 'ghcr.io',
-      'repository':  'linuxcontainers/alpine',
-      'tag':         '3.15.6'
-    },
-    'kind':     'VulnerabilityReport',
-    'metadata': {
-      'creationTimestamp': '2026-01-09T22:46:01Z',
-      'fields':            [
-        '51af314d95ed2c5de878a8d70dfd94e663b14d9fd2489e08c53ed6496856c023',
-        'ghcr.io/linuxcontainers/alpine:3.15.6',
-        'linux/amd64',
-        '20 (0 suppressed)'
-      ],
-      'labels': {
-        'app.kubernetes.io/managed-by':          'sbomscanner',
-        'app.kubernetes.io/part-of':             'sbomscanner',
-        'sbomscanner.kubewarden.io/scanjob-uid': '42184d01-4b15-466f-98aa-e802d1b6b6b8'
-      },
-      'name':            '51af314d95ed2c5de878a8d70dfd94e663b14d9fd2489e08c53ed6496856c023',
-      'namespace':       'default',
-      'ownerReferences': [
-        {
-          'apiVersion':         'storage.sbomscanner.kubewarden.io/v1alpha1',
-          'blockOwnerDeletion': true,
-          'controller':         true,
-          'kind':               'SBOM',
-          'name':               '51af314d95ed2c5de878a8d70dfd94e663b14d9fd2489e08c53ed6496856c023',
-          'uid':                'bb01dc7e-8dbe-49ca-a0a5-67053e5abf5b'
-        }
-      ],
-      'relationships': [
-        {
-          'fromId':   'default/51af314d95ed2c5de878a8d70dfd94e663b14d9fd2489e08c53ed6496856c023',
-          'fromType': 'storage.sbomscanner.kubewarden.io.sbom',
-          'rel':      'owner',
-          'state':    'active',
-          'message':  'Resource is current'
-        }
-      ],
-      'resourceVersion': '6',
-      'state':           {
-        'error':         false,
-        'message':       'Resource is current',
-        'name':          'active',
-        'transitioning': false
-      },
-      'uid': 'bd659a68-a9ba-4cd7-a055-96ac34e4fb2b'
-    },
-    'report': {
-      'results': [
-        {
-          'class':           'os-pkgs',
-          'target':          '/var/run/worker/trivy.sbom.1673305756.json (alpine 3.15.6)',
-          'type':            'alpine',
-          'vulnerabilities': [
-            {
-              'cve':  'CVE-2022-4450',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'nvd': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-415'
-              ],
-              'description':   'The function PEM_read_bio_ex() reads a PEM file from a BIO and parses and\ndecodes the "name" (e.g. "CERTIFICATE"), any header data and the payload data.\nIf the function succeeds then the "name_out", "header" and "data" arguments are\npopulated with pointers to buffers containing the relevant decoded data. The\ncaller is responsible for freeing those buffers. It is possible to construct a\nPEM file that results in 0 bytes of payload data. In this case PEM_read_bio_ex()\nwill return a failure code but will populate the header argument with a pointer\nto a buffer that has already been freed. If the caller also frees this buffer\nthen a double free will occur. This will most likely lead to a crash. This\ncould be exploited by an attacker who has the ability to supply malicious PEM\nfiles for parsing to achieve a denial of service attack.\n\nThe functions PEM_read_bio() and PEM_read() are simple wrappers around\nPEM_read_bio_ex() and therefore these functions are also directly affected.\n\nThese functions are also called indirectly by a number of other OpenSSL\nfunctions including PEM_X509_INFO_read_bio_ex() and\nSSL_CTX_use_serverinfo_file() which are also vulnerable. Some OpenSSL internal\nuses of these functions are not vulnerable because the caller does not free the\nheader argument if PEM_read_bio_ex() returns a failure code. These locations\ninclude the PEM_read_bio_TYPE() functions as well as the decoders introduced in\nOpenSSL 3.0.\n\nThe OpenSSL asn1parse command line application is also impacted by this issue.',
-              'diffID':        'sha256:34d5ebaa5410d2ab4154bbd7c3c99c385ec509eb9c1d03d5486aff01bbd618c5',
-              'fixedVersions': [
-                '1.1.1t-r0'
-              ],
-              'installedVersion': '1.1.1q-r0',
-              'packageName':      'libcrypto1.1',
-              'purl':             'pkg:apk/alpine/libcrypto1.1@1.1.1q-r0?arch=x86_64&distro=3.15.6',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2023:2165',
-                'https://access.redhat.com/security/cve/CVE-2022-4450',
-                'https://bugzilla.redhat.com/1960321',
-                'https://bugzilla.redhat.com/2164440',
-                'https://bugzilla.redhat.com/2164487',
-                'https://bugzilla.redhat.com/2164492',
-                'https://bugzilla.redhat.com/2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144000',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144003',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144006',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144008',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144010',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144012',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144015',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144017',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144019',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2145170',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2158412',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164440',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164487',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164488',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164492',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164497',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164499',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164500',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4203',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4304',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4450',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0215',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0216',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0217',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0286',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0401',
-                'https://errata.almalinux.org/9/ALSA-2023-2165.html',
-                'https://errata.rockylinux.org/RLSA-2023:0946',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=63bcf189be73a9cc1264059bed6f57974be74a83',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=bbcf509bd046b34cca19c766bbddc31683d0858b',
-                'https://linux.oracle.com/cve/CVE-2022-4450.html',
-                'https://linux.oracle.com/errata/ELSA-2023-32791.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2022-4450',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0003',
-                'https://rustsec.org/advisories/RUSTSEC-2023-0010.html',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://ubuntu.com/security/notices/USN-5844-1',
-                'https://ubuntu.com/security/notices/USN-6564-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2022-4450',
-                'https://www.openssl.org/news/secadv/20230207.txt'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: double free after calling PEM_read_bio_ex'
-            },
-            {
-              'cve':  'CVE-2023-0215',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'nvd': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   'The public API function BIO_new_NDEF is a helper function used for streaming\nASN.1 data via a BIO. It is primarily used internally to OpenSSL to support the\nSMIME, CMS and PKCS7 streaming capabilities, but may also be called directly by\nend user applications.\n\nThe function receives a BIO from the caller, prepends a new BIO_f_asn1 filter\nBIO onto the front of it to form a BIO chain, and then returns the new head of\nthe BIO chain to the caller. Under certain conditions, for example if a CMS\nrecipient public key is invalid, the new filter BIO is freed and the function\nreturns a NULL result indicating a failure. However, in this case, the BIO chain\nis not properly cleaned up and the BIO passed by the caller still retains\ninternal pointers to the previously freed filter BIO. If the caller then goes on\nto call BIO_pop() on the BIO then a use-after-free will occur. This will most\nlikely result in a crash.\n\n\n\nThis scenario occurs directly in the internal function B64_write_ASN1() which\nmay cause BIO_new_NDEF() to be called and will subsequently call BIO_pop() on\nthe BIO. This internal function is in turn called by the public API functions\nPEM_write_bio_ASN1_stream, PEM_write_bio_CMS_stream, PEM_write_bio_PKCS7_stream,\nSMIME_write_ASN1, SMIME_write_CMS and SMIME_write_PKCS7.\n\nOther public API functions that may be impacted by this include\ni2d_ASN1_bio_stream, BIO_new_CMS, BIO_new_PKCS7, i2d_CMS_bio_stream and\ni2d_PKCS7_bio_stream.\n\nThe OpenSSL cms and smime command line applications are similarly affected.',
-              'diffID':        'sha256:34d5ebaa5410d2ab4154bbd7c3c99c385ec509eb9c1d03d5486aff01bbd618c5',
-              'fixedVersions': [
-                '1.1.1t-r0'
-              ],
-              'installedVersion': '1.1.1q-r0',
-              'packageName':      'libcrypto1.1',
-              'purl':             'pkg:apk/alpine/libcrypto1.1@1.1.1q-r0?arch=x86_64&distro=3.15.6',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2023:2165',
-                'https://access.redhat.com/security/cve/CVE-2023-0215',
-                'https://bugzilla.redhat.com/1960321',
-                'https://bugzilla.redhat.com/2164440',
-                'https://bugzilla.redhat.com/2164487',
-                'https://bugzilla.redhat.com/2164492',
-                'https://bugzilla.redhat.com/2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144000',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144003',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144006',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144008',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144010',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144012',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144015',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144017',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144019',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2145170',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2158412',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164440',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164487',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164488',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164492',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164497',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164499',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164500',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4203',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4304',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4450',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0215',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0216',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0217',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0286',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0401',
-                'https://errata.almalinux.org/9/ALSA-2023-2165.html',
-                'https://errata.rockylinux.org/RLSA-2023:0946',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=8818064ce3c3c0f1b740a5aaba2a987e75bfbafd',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=9816136fe31d92ace4037d5da5257f763aeeb4eb',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=c3829dd8825c654652201e16f8a0a0c46ee3f344',
-                'https://linux.oracle.com/cve/CVE-2023-0215.html',
-                'https://linux.oracle.com/errata/ELSA-2023-32791.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-0215',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0003',
-                'https://rustsec.org/advisories/RUSTSEC-2023-0009.html',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://security.netapp.com/advisory/ntap-20230427-0007',
-                'https://security.netapp.com/advisory/ntap-20230427-0007/',
-                'https://security.netapp.com/advisory/ntap-20230427-0009',
-                'https://security.netapp.com/advisory/ntap-20230427-0009/',
-                'https://security.netapp.com/advisory/ntap-20240621-0006',
-                'https://security.netapp.com/advisory/ntap-20240621-0006/',
-                'https://ubuntu.com/security/notices/USN-5844-1',
-                'https://ubuntu.com/security/notices/USN-5845-1',
-                'https://ubuntu.com/security/notices/USN-5845-2',
-                'https://ubuntu.com/security/notices/USN-6564-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-0215',
-                'https://www.openssl.org/news/secadv/20230207.txt'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: use-after-free following BIO_new_NDEF'
-            },
-            {
-              'cve':  'CVE-2023-0286',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '7.4',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H'
-                },
-                'nvd': {
-                  'v3score':  '7.4',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.4',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-843'
-              ],
-              'description':   'There is a type confusion vulnerability relating to X.400 address processing\ninside an X.509 GeneralName. X.400 addresses were parsed as an ASN1_STRING but\nthe public structure definition for GENERAL_NAME incorrectly specified the type\nof the x400Address field as ASN1_TYPE. This field is subsequently interpreted by\nthe OpenSSL function GENERAL_NAME_cmp as an ASN1_TYPE rather than an\nASN1_STRING.\n\nWhen CRL checking is enabled (i.e. the application sets the\nX509_V_FLAG_CRL_CHECK flag), this vulnerability may allow an attacker to pass\narbitrary pointers to a memcmp call, enabling them to read memory contents or\nenact a denial of service. In most cases, the attack requires the attacker to\nprovide both the certificate chain and CRL, neither of which need to have a\nvalid signature. If the attacker only controls one of these inputs, the other\ninput must already contain an X.400 address as a CRL distribution point, which\nis uncommon. As such, this vulnerability is most likely to only affect\napplications which have implemented their own functionality for retrieving CRLs\nover a network.',
-              'diffID':        'sha256:34d5ebaa5410d2ab4154bbd7c3c99c385ec509eb9c1d03d5486aff01bbd618c5',
-              'fixedVersions': [
-                '1.1.1t-r0'
-              ],
-              'installedVersion': '1.1.1q-r0',
-              'packageName':      'libcrypto1.1',
-              'purl':             'pkg:apk/alpine/libcrypto1.1@1.1.1q-r0?arch=x86_64&distro=3.15.6',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2025:7937',
-                'https://access.redhat.com/security/cve/CVE-2023-0286',
-                'https://access.redhat.com/security/cve/cve-2023-0286',
-                'https://bugzilla.redhat.com/2164440',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144000',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144003',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144006',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144008',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144010',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144012',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144015',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144017',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144019',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2145170',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2158412',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164440',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164487',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164488',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164492',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164497',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164499',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164500',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4203',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4304',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4450',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0215',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0216',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0217',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0286',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0401',
-                'https://errata.almalinux.org/9/ALSA-2025-7937.html',
-                'https://errata.rockylinux.org/RLSA-2023:0946',
-                'https://ftp.openbsd.org/pub/OpenBSD/LibreSSL/libressl-3.6.2-relnotes.txt',
-                'https://ftp.openbsd.org/pub/OpenBSD/patches/7.2/common/018_x509.patch.sig',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=2c6c9d439b484e1ba9830d8454a34fa4f80fdfe9',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=2f7530077e0ef79d98718138716bc51ca0cad658',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=fd2af07dc083a350c959147097003a14a5e8ac4d',
-                'https://github.com/pyca/cryptography',
-                'https://github.com/pyca/cryptography/security/advisories/GHSA-x4qr-2fvf-3mr5',
-                'https://linux.oracle.com/cve/CVE-2023-0286.html',
-                'https://linux.oracle.com/errata/ELSA-2025-7937.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-0286',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0003',
-                'https://rustsec.org/advisories/RUSTSEC-2023-0006.html',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://ubuntu.com/security/notices/USN-5844-1',
-                'https://ubuntu.com/security/notices/USN-5845-1',
-                'https://ubuntu.com/security/notices/USN-5845-2',
-                'https://ubuntu.com/security/notices/USN-6564-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-0286',
-                'https://www.openssl.org/news/secadv/20230207.txt'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: X.400 address type confusion in X.509 GeneralName'
-            },
-            {
-              'cve':  'CVE-2023-0464',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-295'
-              ],
-              'description':   "A security vulnerability has been identified in all supported versions\n\nof OpenSSL related to the verification of X.509 certificate chains\nthat include policy constraints.  Attackers may be able to exploit this\nvulnerability by creating a malicious certificate chain that triggers\nexponential use of computational resources, leading to a denial-of-service\n(DoS) attack on affected systems.\n\nPolicy processing is disabled by default but can be enabled by passing\nthe `-policy' argument to the command line utilities or by calling the\n`X509_VERIFY_PARAM_set1_policies()' function.",
-              'diffID':        'sha256:34d5ebaa5410d2ab4154bbd7c3c99c385ec509eb9c1d03d5486aff01bbd618c5',
-              'fixedVersions': [
-                '1.1.1t-r2'
-              ],
-              'installedVersion': '1.1.1q-r0',
-              'packageName':      'libcrypto1.1',
-              'purl':             'pkg:apk/alpine/libcrypto1.1@1.1.1q-r0?arch=x86_64&distro=3.15.6',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2023:3722',
-                'https://access.redhat.com/security/cve/CVE-2023-0464',
-                'https://bugzilla.redhat.com/2181082',
-                'https://bugzilla.redhat.com/2182561',
-                'https://bugzilla.redhat.com/2182565',
-                'https://bugzilla.redhat.com/2188461',
-                'https://bugzilla.redhat.com/2207947',
-                'https://errata.almalinux.org/9/ALSA-2023-3722.html',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=2017771e2db3e2b96f89bbe8766c3209f6a99545',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=2dcd4f1e3115f38cefa43e3efbe9b801c27e642e',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=879f7080d7e141f415c79eaa3a8ac4a3dad0348b',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=959c59c7a0164117e7f8366466a32bb1f8d77ff1',
-                'https://linux.oracle.com/cve/CVE-2023-0464.html',
-                'https://linux.oracle.com/errata/ELSA-2023-3722.html',
-                'https://lists.debian.org/debian-lts-announce/2023/06/msg00011.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-0464',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://security.netapp.com/advisory/ntap-20230406-0006/',
-                'https://security.netapp.com/advisory/ntap-20240621-0006/',
-                'https://ubuntu.com/security/notices/USN-6039-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.couchbase.com/alerts/',
-                'https://www.cve.org/CVERecord?id=CVE-2023-0464',
-                'https://www.debian.org/security/2023/dsa-5417',
-                'https://www.openssl.org/news/secadv/20230322.txt'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: Denial of service by excessive resource usage in verifying X509 policy constraints'
-            },
-            {
-              'cve':  'CVE-2022-4304',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N'
-                },
-                'nvd': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N'
-                },
-                'redhat': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-203'
-              ],
-              'description':   'A timing based side channel exists in the OpenSSL RSA Decryption implementation\nwhich could be sufficient to recover a plaintext across a network in a\nBleichenbacher style attack. To achieve a successful decryption an attacker\nwould have to be able to send a very large number of trial messages for\ndecryption. The vulnerability affects all RSA padding modes: PKCS#1 v1.5,\nRSA-OEAP and RSASVE.\n\nFor example, in a TLS connection, RSA is commonly used by a client to send an\nencrypted pre-master secret to the server. An attacker that had observed a\ngenuine connection between a client and a server could use this flaw to send\ntrial messages to the server and record the time taken to process them. After a\nsufficiently large number of messages the attacker could recover the pre-master\nsecret used for the original connection and thus be able to decrypt the\napplication data sent over that connection.',
-              'diffID':        'sha256:34d5ebaa5410d2ab4154bbd7c3c99c385ec509eb9c1d03d5486aff01bbd618c5',
-              'fixedVersions': [
-                '1.1.1t-r0'
-              ],
-              'installedVersion': '1.1.1q-r0',
-              'packageName':      'libcrypto1.1',
-              'purl':             'pkg:apk/alpine/libcrypto1.1@1.1.1q-r0?arch=x86_64&distro=3.15.6',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2023:2165',
-                'https://access.redhat.com/security/cve/CVE-2022-4304',
-                'https://bugzilla.redhat.com/1960321',
-                'https://bugzilla.redhat.com/2164440',
-                'https://bugzilla.redhat.com/2164487',
-                'https://bugzilla.redhat.com/2164492',
-                'https://bugzilla.redhat.com/2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144000',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144003',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144006',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144008',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144010',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144012',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144015',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144017',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144019',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2145170',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2158412',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164440',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164487',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164488',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164492',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164497',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164499',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164500',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4203',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4304',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4450',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0215',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0216',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0217',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0286',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0401',
-                'https://errata.almalinux.org/9/ALSA-2023-2165.html',
-                'https://errata.rockylinux.org/RLSA-2023:0946',
-                'https://linux.oracle.com/cve/CVE-2022-4304.html',
-                'https://linux.oracle.com/errata/ELSA-2023-32791.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2022-4304',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0003',
-                'https://rustsec.org/advisories/RUSTSEC-2023-0007.html',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://ubuntu.com/security/notices/USN-5844-1',
-                'https://ubuntu.com/security/notices/USN-6564-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2022-4304',
-                'https://www.openssl.org/news/secadv/20230207.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: timing attack in RSA Decryption implementation'
-            },
-            {
-              'cve':  'CVE-2023-0465',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N'
-                },
-                'redhat': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-295'
-              ],
-              'description':   "Applications that use a non-default option when verifying certificates may be\nvulnerable to an attack from a malicious CA to circumvent certain checks.\n\nInvalid certificate policies in leaf certificates are silently ignored by\nOpenSSL and other certificate policy checks are skipped for that certificate.\nA malicious CA could use this to deliberately assert invalid certificate policies\nin order to circumvent policy checking on the certificate altogether.\n\nPolicy processing is disabled by default but can be enabled by passing\nthe `-policy' argument to the command line utilities or by calling the\n`X509_VERIFY_PARAM_set1_policies()' function.",
-              'diffID':        'sha256:34d5ebaa5410d2ab4154bbd7c3c99c385ec509eb9c1d03d5486aff01bbd618c5',
-              'fixedVersions': [
-                '1.1.1t-r2'
-              ],
-              'installedVersion': '1.1.1q-r0',
-              'packageName':      'libcrypto1.1',
-              'purl':             'pkg:apk/alpine/libcrypto1.1@1.1.1q-r0?arch=x86_64&distro=3.15.6',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2023:3722',
-                'https://access.redhat.com/security/cve/CVE-2023-0465',
-                'https://bugzilla.redhat.com/2181082',
-                'https://bugzilla.redhat.com/2182561',
-                'https://bugzilla.redhat.com/2182565',
-                'https://bugzilla.redhat.com/2188461',
-                'https://bugzilla.redhat.com/2207947',
-                'https://errata.almalinux.org/9/ALSA-2023-3722.html',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=10325176f3d3e98c6e2b3bf5ab1e3b334de6947a',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=1dd43e0709fece299b15208f36cc7c76209ba0bb',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=b013765abfa80036dc779dd0e50602c57bb3bf95',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=facfb1ab745646e97a1920977ae4a9965ea61d5c',
-                'https://linux.oracle.com/cve/CVE-2023-0465.html',
-                'https://linux.oracle.com/errata/ELSA-2023-3722.html',
-                'https://lists.debian.org/debian-lts-announce/2023/06/msg00011.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-0465',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://security.netapp.com/advisory/ntap-20230414-0001/',
-                'https://ubuntu.com/security/notices/USN-6039-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-0465',
-                'https://www.debian.org/security/2023/dsa-5417',
-                'https://www.openssl.org/news/secadv/20230328.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: Invalid certificate policies in leaf certificates are silently ignored'
-            },
-            {
-              'cve':  'CVE-2023-2650',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '6.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-770'
-              ],
-              'description':   "Issue summary: Processing some specially crafted ASN.1 object identifiers or\ndata containing them may be very slow.\n\nImpact summary: Applications that use OBJ_obj2txt() directly, or use any of\nthe OpenSSL subsystems OCSP, PKCS7/SMIME, CMS, CMP/CRMF or TS with no message\nsize limit may experience notable to very long delays when processing those\nmessages, which may lead to a Denial of Service.\n\nAn OBJECT IDENTIFIER is composed of a series of numbers - sub-identifiers -\nmost of which have no size limit.  OBJ_obj2txt() may be used to translate\nan ASN.1 OBJECT IDENTIFIER given in DER encoding form (using the OpenSSL\ntype ASN1_OBJECT) to its canonical numeric text form, which are the\nsub-identifiers of the OBJECT IDENTIFIER in decimal form, separated by\nperiods.\n\nWhen one of the sub-identifiers in the OBJECT IDENTIFIER is very large\n(these are sizes that are seen as absurdly large, taking up tens or hundreds\nof KiBs), the translation to a decimal number in text may take a very long\ntime.  The time complexity is O(n^2) with 'n' being the size of the\nsub-identifiers in bytes (*).\n\nWith OpenSSL 3.0, support to fetch cryptographic algorithms using names /\nidentifiers in string form was introduced.  This includes using OBJECT\nIDENTIFIERs in canonical numeric text form as identifiers for fetching\nalgorithms.\n\nSuch OBJECT IDENTIFIERs may be received through the ASN.1 structure\nAlgorithmIdentifier, which is commonly used in multiple protocols to specify\nwhat cryptographic algorithm should be used to sign or verify, encrypt or\ndecrypt, or digest passed data.\n\nApplications that call OBJ_obj2txt() directly with untrusted data are\naffected, with any version of OpenSSL.  If the use is for the mere purpose\nof display, the severity is considered low.\n\nIn OpenSSL 3.0 and newer, this affects the subsystems OCSP, PKCS7/SMIME,\nCMS, CMP/CRMF or TS.  It also impacts anything that processes X.509\ncertificates, including simple things like verifying its signature.\n\nThe impact on TLS is relatively low, because all versions of OpenSSL have a\n100KiB limit on the peer's certificate chain.  Additionally, this only\nimpacts clients, or servers that have explicitly enabled client\nauthentication.\n\nIn OpenSSL 1.1.1 and 1.0.2, this only affects displaying diverse objects,\nsuch as X.509 certificates.  This is assumed to not happen in such a way\nthat it would cause a Denial of Service, so these versions are considered\nnot affected by this issue in such a way that it would be cause for concern,\nand the severity is therefore considered low.",
-              'diffID':        'sha256:34d5ebaa5410d2ab4154bbd7c3c99c385ec509eb9c1d03d5486aff01bbd618c5',
-              'fixedVersions': [
-                '1.1.1u-r0'
-              ],
-              'installedVersion': '1.1.1q-r0',
-              'packageName':      'libcrypto1.1',
-              'purl':             'pkg:apk/alpine/libcrypto1.1@1.1.1q-r0?arch=x86_64&distro=3.15.6',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2023/05/30/1',
-                'https://access.redhat.com/errata/RHSA-2023:6330',
-                'https://access.redhat.com/security/cve/CVE-2023-2650',
-                'https://bugzilla.redhat.com/1858038',
-                'https://bugzilla.redhat.com/2207947',
-                'https://errata.almalinux.org/9/ALSA-2023-6330.html',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=423a2bc737a908ad0c77bda470b2b59dc879936b',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=853c5e56ee0b8650c73140816bb8b91d6163422c',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=9e209944b35cf82368071f160a744b6178f9b098',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=db779b0e10b047f2585615e0b8f2acdf21f8544a',
-                'https://linux.oracle.com/cve/CVE-2023-2650.html',
-                'https://linux.oracle.com/errata/ELSA-2023-6330.html',
-                'https://lists.debian.org/debian-lts-announce/2023/06/msg00011.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-2650',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0009',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://security.netapp.com/advisory/ntap-20230703-0001/',
-                'https://security.netapp.com/advisory/ntap-20231027-0009/',
-                'https://ubuntu.com/security/notices/USN-6119-1',
-                'https://ubuntu.com/security/notices/USN-6188-1',
-                'https://ubuntu.com/security/notices/USN-6672-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-2650',
-                'https://www.debian.org/security/2023/dsa-5417',
-                'https://www.openssl.org/news/secadv/20230530.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: Possible DoS translating ASN.1 object identifiers'
-            },
-            {
-              'cve':  'CVE-2023-3446',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L'
-                },
-                'redhat': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L'
-                }
-              },
-              'cwes': [
-                'CWE-606',
-                'CWE-1333'
-              ],
-              'description':   "Issue summary: Checking excessively long DH keys or parameters may be very slow.\n\nImpact summary: Applications that use the functions DH_check(), DH_check_ex()\nor EVP_PKEY_param_check() to check a DH key or DH parameters may experience long\ndelays. Where the key or parameters that are being checked have been obtained\nfrom an untrusted source this may lead to a Denial of Service.\n\nThe function DH_check() performs various checks on DH parameters. One of those\nchecks confirms that the modulus ('p' parameter) is not too large. Trying to use\na very large modulus is slow and OpenSSL will not normally use a modulus which\nis over 10,000 bits in length.\n\nHowever the DH_check() function checks numerous aspects of the key or parameters\nthat have been supplied. Some of those checks use the supplied modulus value\neven if it has already been found to be too large.\n\nAn application that calls DH_check() and supplies a key or parameters obtained\nfrom an untrusted source could be vulernable to a Denial of Service attack.\n\nThe function DH_check() is itself called by a number of other OpenSSL functions.\nAn application calling any of those other functions may similarly be affected.\nThe other functions affected by this are DH_check_ex() and\nEVP_PKEY_param_check().\n\nAlso vulnerable are the OpenSSL dhparam and pkeyparam command line applications\nwhen using the '-check' option.\n\nThe OpenSSL SSL/TLS implementation is not affected by this issue.\nThe OpenSSL 3.0 and 3.1 FIPS providers are not affected by this issue.",
-              'diffID':        'sha256:34d5ebaa5410d2ab4154bbd7c3c99c385ec509eb9c1d03d5486aff01bbd618c5',
-              'fixedVersions': [
-                '1.1.1u-r2'
-              ],
-              'installedVersion': '1.1.1q-r0',
-              'packageName':      'libcrypto1.1',
-              'purl':             'pkg:apk/alpine/libcrypto1.1@1.1.1q-r0?arch=x86_64&distro=3.15.6',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2023/07/19/4',
-                'http://www.openwall.com/lists/oss-security/2023/07/19/5',
-                'http://www.openwall.com/lists/oss-security/2023/07/19/6',
-                'http://www.openwall.com/lists/oss-security/2023/07/31/1',
-                'http://www.openwall.com/lists/oss-security/2024/05/16/1',
-                'https://access.redhat.com/errata/RHSA-2024:2447',
-                'https://access.redhat.com/security/cve/CVE-2023-3446',
-                'https://bugzilla.redhat.com/2223016',
-                'https://bugzilla.redhat.com/2224962',
-                'https://bugzilla.redhat.com/2227852',
-                'https://bugzilla.redhat.com/2248616',
-                'https://bugzilla.redhat.com/2257571',
-                'https://bugzilla.redhat.com/2258502',
-                'https://bugzilla.redhat.com/2259944',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2224962',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2257582',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2257583',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2258677',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2258688',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2258691',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2258694',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2258700',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-36763',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-36764',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3446',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45229',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45231',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45232',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45233',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45235',
-                'https://errata.almalinux.org/9/ALSA-2024-2447.html',
-                'https://errata.rockylinux.org/RLSA-2024:2264',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=1fa20cf2f506113c761777127a38bce5068740eb',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=8780a896543a654e757db1b9396383f9d8095528',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=9a0a4d3c1e7138915563c0df4fe6a3f9377b839c',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=fc9867c1e03c22ebf56943be205202e576aabf23',
-                'https://linux.oracle.com/cve/CVE-2023-3446.html',
-                'https://linux.oracle.com/errata/ELSA-2024-2447.html',
-                'https://lists.debian.org/debian-lts-announce/2023/08/msg00019.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-3446',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://security.netapp.com/advisory/ntap-20230803-0011/',
-                'https://ubuntu.com/security/notices/USN-6435-1',
-                'https://ubuntu.com/security/notices/USN-6435-2',
-                'https://ubuntu.com/security/notices/USN-6450-1',
-                'https://ubuntu.com/security/notices/USN-6709-1',
-                'https://ubuntu.com/security/notices/USN-7018-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-3446',
-                'https://www.openssl.org/news/secadv/20230719.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: Excessive time spent checking DH keys and parameters'
-            },
-            {
-              'cve':  'CVE-2023-3817',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L'
-                },
-                'redhat': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L'
-                }
-              },
-              'cwes': [
-                'CWE-606',
-                'CWE-834'
-              ],
-              'description':   'Issue summary: Checking excessively long DH keys or parameters may be very slow.\n\nImpact summary: Applications that use the functions DH_check(), DH_check_ex()\nor EVP_PKEY_param_check() to check a DH key or DH parameters may experience long\ndelays. Where the key or parameters that are being checked have been obtained\nfrom an untrusted source this may lead to a Denial of Service.\n\nThe function DH_check() performs various checks on DH parameters. After fixing\nCVE-2023-3446 it was discovered that a large q parameter value can also trigger\nan overly long computation during some of these checks. A correct q value,\nif present, cannot be larger than the modulus p parameter, thus it is\nunnecessary to perform these checks if q is larger than p.\n\nAn application that calls DH_check() and supplies a key or parameters obtained\nfrom an untrusted source could be vulnerable to a Denial of Service attack.\n\nThe function DH_check() is itself called by a number of other OpenSSL functions.\nAn application calling any of those other functions may similarly be affected.\nThe other functions affected by this are DH_check_ex() and\nEVP_PKEY_param_check().\n\nAlso vulnerable are the OpenSSL dhparam and pkeyparam command line applications\nwhen using the "-check" option.\n\nThe OpenSSL SSL/TLS implementation is not affected by this issue.\n\nThe OpenSSL 3.0 and 3.1 FIPS providers are not affected by this issue.',
-              'diffID':        'sha256:34d5ebaa5410d2ab4154bbd7c3c99c385ec509eb9c1d03d5486aff01bbd618c5',
-              'fixedVersions': [
-                '1.1.1v-r0'
-              ],
-              'installedVersion': '1.1.1q-r0',
-              'packageName':      'libcrypto1.1',
-              'purl':             'pkg:apk/alpine/libcrypto1.1@1.1.1q-r0?arch=x86_64&distro=3.15.6',
-              'references':       [
-                'http://seclists.org/fulldisclosure/2023/Jul/43',
-                'http://www.openwall.com/lists/oss-security/2023/07/31/1',
-                'http://www.openwall.com/lists/oss-security/2023/09/22/11',
-                'http://www.openwall.com/lists/oss-security/2023/09/22/9',
-                'http://www.openwall.com/lists/oss-security/2023/11/06/2',
-                'https://access.redhat.com/errata/RHSA-2024:2447',
-                'https://access.redhat.com/security/cve/CVE-2023-3817',
-                'https://bugzilla.redhat.com/2223016',
-                'https://bugzilla.redhat.com/2224962',
-                'https://bugzilla.redhat.com/2227852',
-                'https://bugzilla.redhat.com/2248616',
-                'https://bugzilla.redhat.com/2257571',
-                'https://bugzilla.redhat.com/2258502',
-                'https://bugzilla.redhat.com/2259944',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2224962',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2227852',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2248616',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2270358',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3446',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3817',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-5678',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-2408',
-                'https://errata.almalinux.org/9/ALSA-2024-2447.html',
-                'https://errata.rockylinux.org/RLSA-2023:7877',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=6a1eb62c29db6cb5eec707f9338aee00f44e26f5',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=869ad69aadd985c7b8ca6f4e5dd0eb274c9f3644',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=9002fd07327a91f35ba6c1307e71fa6fd4409b7f',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=91ddeba0f2269b017dc06c46c993a788974b1aa5',
-                'https://linux.oracle.com/cve/CVE-2023-3817.html',
-                'https://linux.oracle.com/errata/ELSA-2024-2447.html',
-                'https://lists.debian.org/debian-lts-announce/2023/08/msg00019.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-3817',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://security.netapp.com/advisory/ntap-20230818-0014/',
-                'https://security.netapp.com/advisory/ntap-20231027-0008/',
-                'https://security.netapp.com/advisory/ntap-20240621-0006/',
-                'https://ubuntu.com/security/notices/USN-6435-1',
-                'https://ubuntu.com/security/notices/USN-6435-2',
-                'https://ubuntu.com/security/notices/USN-6450-1',
-                'https://ubuntu.com/security/notices/USN-6709-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-3817',
-                'https://www.openssl.org/news/secadv/20230731.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'OpenSSL: Excessive time spent checking DH q parameter value'
-            },
-            {
-              'cve':  'CVE-2023-5678',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L'
-                },
-                'redhat': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L'
-                }
-              },
-              'cwes': [
-                'CWE-606',
-                'CWE-754'
-              ],
-              'description':   "Issue summary: Generating excessively long X9.42 DH keys or checking\nexcessively long X9.42 DH keys or parameters may be very slow.\n\nImpact summary: Applications that use the functions DH_generate_key() to\ngenerate an X9.42 DH key may experience long delays.  Likewise, applications\nthat use DH_check_pub_key(), DH_check_pub_key_ex() or EVP_PKEY_public_check()\nto check an X9.42 DH key or X9.42 DH parameters may experience long delays.\nWhere the key or parameters that are being checked have been obtained from\nan untrusted source this may lead to a Denial of Service.\n\nWhile DH_check() performs all the necessary checks (as of CVE-2023-3817),\nDH_check_pub_key() doesn't make any of these checks, and is therefore\nvulnerable for excessively large P and Q parameters.\n\nLikewise, while DH_generate_key() performs a check for an excessively large\nP, it doesn't check for an excessively large Q.\n\nAn application that calls DH_generate_key() or DH_check_pub_key() and\nsupplies a key or parameters obtained from an untrusted source could be\nvulnerable to a Denial of Service attack.\n\nDH_generate_key() and DH_check_pub_key() are also called by a number of\nother OpenSSL functions.  An application calling any of those other\nfunctions may similarly be affected.  The other functions affected by this\nare DH_check_pub_key_ex(), EVP_PKEY_public_check(), and EVP_PKEY_generate().\n\nAlso vulnerable are the OpenSSL pkey command line application when using the\n\"-pubcheck\" option, as well as the OpenSSL genpkey command line application.\n\nThe OpenSSL SSL/TLS implementation is not affected by this issue.\n\nThe OpenSSL 3.0 and 3.1 FIPS providers are not affected by this issue.",
-              'diffID':        'sha256:34d5ebaa5410d2ab4154bbd7c3c99c385ec509eb9c1d03d5486aff01bbd618c5',
-              'fixedVersions': [
-                '1.1.1w-r1'
-              ],
-              'installedVersion': '1.1.1q-r0',
-              'packageName':      'libcrypto1.1',
-              'purl':             'pkg:apk/alpine/libcrypto1.1@1.1.1q-r0?arch=x86_64&distro=3.15.6',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2024/03/11/1',
-                'https://access.redhat.com/errata/RHSA-2024:2447',
-                'https://access.redhat.com/security/cve/CVE-2023-5678',
-                'https://bugzilla.redhat.com/2223016',
-                'https://bugzilla.redhat.com/2224962',
-                'https://bugzilla.redhat.com/2227852',
-                'https://bugzilla.redhat.com/2248616',
-                'https://bugzilla.redhat.com/2257571',
-                'https://bugzilla.redhat.com/2258502',
-                'https://bugzilla.redhat.com/2259944',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2224962',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2227852',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2248616',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2270358',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3446',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3817',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-5678',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-2408',
-                'https://errata.almalinux.org/9/ALSA-2024-2447.html',
-                'https://errata.rockylinux.org/RLSA-2023:7877',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=34efaef6c103d636ab507a0cc34dca4d3aecc055',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=710fee740904b6290fef0dd5536fbcedbc38ff0c',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=db925ae2e65d0d925adef429afc37f75bd1c2017',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=ddeb4b6c6d527e54ce9a99cba785c0f7776e54b6',
-                'https://linux.oracle.com/cve/CVE-2023-5678.html',
-                'https://linux.oracle.com/errata/ELSA-2024-2447.html',
-                'https://lists.debian.org/debian-lts-announce/2024/10/msg00033.html',
-                'https://lists.debian.org/debian-lts-announce/2024/11/msg00000.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-5678',
-                'https://security.netapp.com/advisory/ntap-20231130-0010/',
-                'https://ubuntu.com/security/notices/USN-6622-1',
-                'https://ubuntu.com/security/notices/USN-6632-1',
-                'https://ubuntu.com/security/notices/USN-6709-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-5678',
-                'https://www.openssl.org/news/secadv/20231106.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: Generating excessively long X9.42 DH keys or checking excessively long X9.42 DH keys or parameters may be very slow'
-            },
-            {
-              'cve':  'CVE-2022-4450',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'nvd': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-415'
-              ],
-              'description':   'The function PEM_read_bio_ex() reads a PEM file from a BIO and parses and\ndecodes the "name" (e.g. "CERTIFICATE"), any header data and the payload data.\nIf the function succeeds then the "name_out", "header" and "data" arguments are\npopulated with pointers to buffers containing the relevant decoded data. The\ncaller is responsible for freeing those buffers. It is possible to construct a\nPEM file that results in 0 bytes of payload data. In this case PEM_read_bio_ex()\nwill return a failure code but will populate the header argument with a pointer\nto a buffer that has already been freed. If the caller also frees this buffer\nthen a double free will occur. This will most likely lead to a crash. This\ncould be exploited by an attacker who has the ability to supply malicious PEM\nfiles for parsing to achieve a denial of service attack.\n\nThe functions PEM_read_bio() and PEM_read() are simple wrappers around\nPEM_read_bio_ex() and therefore these functions are also directly affected.\n\nThese functions are also called indirectly by a number of other OpenSSL\nfunctions including PEM_X509_INFO_read_bio_ex() and\nSSL_CTX_use_serverinfo_file() which are also vulnerable. Some OpenSSL internal\nuses of these functions are not vulnerable because the caller does not free the\nheader argument if PEM_read_bio_ex() returns a failure code. These locations\ninclude the PEM_read_bio_TYPE() functions as well as the decoders introduced in\nOpenSSL 3.0.\n\nThe OpenSSL asn1parse command line application is also impacted by this issue.',
-              'diffID':        'sha256:34d5ebaa5410d2ab4154bbd7c3c99c385ec509eb9c1d03d5486aff01bbd618c5',
-              'fixedVersions': [
-                '1.1.1t-r0'
-              ],
-              'installedVersion': '1.1.1q-r0',
-              'packageName':      'libssl1.1',
-              'purl':             'pkg:apk/alpine/libssl1.1@1.1.1q-r0?arch=x86_64&distro=3.15.6',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2023:2165',
-                'https://access.redhat.com/security/cve/CVE-2022-4450',
-                'https://bugzilla.redhat.com/1960321',
-                'https://bugzilla.redhat.com/2164440',
-                'https://bugzilla.redhat.com/2164487',
-                'https://bugzilla.redhat.com/2164492',
-                'https://bugzilla.redhat.com/2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144000',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144003',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144006',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144008',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144010',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144012',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144015',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144017',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144019',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2145170',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2158412',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164440',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164487',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164488',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164492',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164497',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164499',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164500',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4203',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4304',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4450',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0215',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0216',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0217',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0286',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0401',
-                'https://errata.almalinux.org/9/ALSA-2023-2165.html',
-                'https://errata.rockylinux.org/RLSA-2023:0946',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=63bcf189be73a9cc1264059bed6f57974be74a83',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=bbcf509bd046b34cca19c766bbddc31683d0858b',
-                'https://linux.oracle.com/cve/CVE-2022-4450.html',
-                'https://linux.oracle.com/errata/ELSA-2023-32791.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2022-4450',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0003',
-                'https://rustsec.org/advisories/RUSTSEC-2023-0010.html',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://ubuntu.com/security/notices/USN-5844-1',
-                'https://ubuntu.com/security/notices/USN-6564-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2022-4450',
-                'https://www.openssl.org/news/secadv/20230207.txt'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: double free after calling PEM_read_bio_ex'
-            },
-            {
-              'cve':  'CVE-2023-0215',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'nvd': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   'The public API function BIO_new_NDEF is a helper function used for streaming\nASN.1 data via a BIO. It is primarily used internally to OpenSSL to support the\nSMIME, CMS and PKCS7 streaming capabilities, but may also be called directly by\nend user applications.\n\nThe function receives a BIO from the caller, prepends a new BIO_f_asn1 filter\nBIO onto the front of it to form a BIO chain, and then returns the new head of\nthe BIO chain to the caller. Under certain conditions, for example if a CMS\nrecipient public key is invalid, the new filter BIO is freed and the function\nreturns a NULL result indicating a failure. However, in this case, the BIO chain\nis not properly cleaned up and the BIO passed by the caller still retains\ninternal pointers to the previously freed filter BIO. If the caller then goes on\nto call BIO_pop() on the BIO then a use-after-free will occur. This will most\nlikely result in a crash.\n\n\n\nThis scenario occurs directly in the internal function B64_write_ASN1() which\nmay cause BIO_new_NDEF() to be called and will subsequently call BIO_pop() on\nthe BIO. This internal function is in turn called by the public API functions\nPEM_write_bio_ASN1_stream, PEM_write_bio_CMS_stream, PEM_write_bio_PKCS7_stream,\nSMIME_write_ASN1, SMIME_write_CMS and SMIME_write_PKCS7.\n\nOther public API functions that may be impacted by this include\ni2d_ASN1_bio_stream, BIO_new_CMS, BIO_new_PKCS7, i2d_CMS_bio_stream and\ni2d_PKCS7_bio_stream.\n\nThe OpenSSL cms and smime command line applications are similarly affected.',
-              'diffID':        'sha256:34d5ebaa5410d2ab4154bbd7c3c99c385ec509eb9c1d03d5486aff01bbd618c5',
-              'fixedVersions': [
-                '1.1.1t-r0'
-              ],
-              'installedVersion': '1.1.1q-r0',
-              'packageName':      'libssl1.1',
-              'purl':             'pkg:apk/alpine/libssl1.1@1.1.1q-r0?arch=x86_64&distro=3.15.6',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2023:2165',
-                'https://access.redhat.com/security/cve/CVE-2023-0215',
-                'https://bugzilla.redhat.com/1960321',
-                'https://bugzilla.redhat.com/2164440',
-                'https://bugzilla.redhat.com/2164487',
-                'https://bugzilla.redhat.com/2164492',
-                'https://bugzilla.redhat.com/2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144000',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144003',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144006',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144008',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144010',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144012',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144015',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144017',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144019',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2145170',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2158412',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164440',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164487',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164488',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164492',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164497',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164499',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164500',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4203',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4304',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4450',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0215',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0216',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0217',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0286',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0401',
-                'https://errata.almalinux.org/9/ALSA-2023-2165.html',
-                'https://errata.rockylinux.org/RLSA-2023:0946',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=8818064ce3c3c0f1b740a5aaba2a987e75bfbafd',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=9816136fe31d92ace4037d5da5257f763aeeb4eb',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=c3829dd8825c654652201e16f8a0a0c46ee3f344',
-                'https://linux.oracle.com/cve/CVE-2023-0215.html',
-                'https://linux.oracle.com/errata/ELSA-2023-32791.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-0215',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0003',
-                'https://rustsec.org/advisories/RUSTSEC-2023-0009.html',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://security.netapp.com/advisory/ntap-20230427-0007',
-                'https://security.netapp.com/advisory/ntap-20230427-0007/',
-                'https://security.netapp.com/advisory/ntap-20230427-0009',
-                'https://security.netapp.com/advisory/ntap-20230427-0009/',
-                'https://security.netapp.com/advisory/ntap-20240621-0006',
-                'https://security.netapp.com/advisory/ntap-20240621-0006/',
-                'https://ubuntu.com/security/notices/USN-5844-1',
-                'https://ubuntu.com/security/notices/USN-5845-1',
-                'https://ubuntu.com/security/notices/USN-5845-2',
-                'https://ubuntu.com/security/notices/USN-6564-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-0215',
-                'https://www.openssl.org/news/secadv/20230207.txt'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: use-after-free following BIO_new_NDEF'
-            },
-            {
-              'cve':  'CVE-2023-0286',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '7.4',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H'
-                },
-                'nvd': {
-                  'v3score':  '7.4',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.4',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-843'
-              ],
-              'description':   'There is a type confusion vulnerability relating to X.400 address processing\ninside an X.509 GeneralName. X.400 addresses were parsed as an ASN1_STRING but\nthe public structure definition for GENERAL_NAME incorrectly specified the type\nof the x400Address field as ASN1_TYPE. This field is subsequently interpreted by\nthe OpenSSL function GENERAL_NAME_cmp as an ASN1_TYPE rather than an\nASN1_STRING.\n\nWhen CRL checking is enabled (i.e. the application sets the\nX509_V_FLAG_CRL_CHECK flag), this vulnerability may allow an attacker to pass\narbitrary pointers to a memcmp call, enabling them to read memory contents or\nenact a denial of service. In most cases, the attack requires the attacker to\nprovide both the certificate chain and CRL, neither of which need to have a\nvalid signature. If the attacker only controls one of these inputs, the other\ninput must already contain an X.400 address as a CRL distribution point, which\nis uncommon. As such, this vulnerability is most likely to only affect\napplications which have implemented their own functionality for retrieving CRLs\nover a network.',
-              'diffID':        'sha256:34d5ebaa5410d2ab4154bbd7c3c99c385ec509eb9c1d03d5486aff01bbd618c5',
-              'fixedVersions': [
-                '1.1.1t-r0'
-              ],
-              'installedVersion': '1.1.1q-r0',
-              'packageName':      'libssl1.1',
-              'purl':             'pkg:apk/alpine/libssl1.1@1.1.1q-r0?arch=x86_64&distro=3.15.6',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2025:7937',
-                'https://access.redhat.com/security/cve/CVE-2023-0286',
-                'https://access.redhat.com/security/cve/cve-2023-0286',
-                'https://bugzilla.redhat.com/2164440',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144000',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144003',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144006',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144008',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144010',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144012',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144015',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144017',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144019',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2145170',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2158412',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164440',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164487',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164488',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164492',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164497',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164499',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164500',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4203',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4304',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4450',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0215',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0216',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0217',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0286',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0401',
-                'https://errata.almalinux.org/9/ALSA-2025-7937.html',
-                'https://errata.rockylinux.org/RLSA-2023:0946',
-                'https://ftp.openbsd.org/pub/OpenBSD/LibreSSL/libressl-3.6.2-relnotes.txt',
-                'https://ftp.openbsd.org/pub/OpenBSD/patches/7.2/common/018_x509.patch.sig',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=2c6c9d439b484e1ba9830d8454a34fa4f80fdfe9',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=2f7530077e0ef79d98718138716bc51ca0cad658',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=fd2af07dc083a350c959147097003a14a5e8ac4d',
-                'https://github.com/pyca/cryptography',
-                'https://github.com/pyca/cryptography/security/advisories/GHSA-x4qr-2fvf-3mr5',
-                'https://linux.oracle.com/cve/CVE-2023-0286.html',
-                'https://linux.oracle.com/errata/ELSA-2025-7937.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-0286',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0003',
-                'https://rustsec.org/advisories/RUSTSEC-2023-0006.html',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://ubuntu.com/security/notices/USN-5844-1',
-                'https://ubuntu.com/security/notices/USN-5845-1',
-                'https://ubuntu.com/security/notices/USN-5845-2',
-                'https://ubuntu.com/security/notices/USN-6564-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-0286',
-                'https://www.openssl.org/news/secadv/20230207.txt'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: X.400 address type confusion in X.509 GeneralName'
-            },
-            {
-              'cve':  'CVE-2023-0464',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-295'
-              ],
-              'description':   "A security vulnerability has been identified in all supported versions\n\nof OpenSSL related to the verification of X.509 certificate chains\nthat include policy constraints.  Attackers may be able to exploit this\nvulnerability by creating a malicious certificate chain that triggers\nexponential use of computational resources, leading to a denial-of-service\n(DoS) attack on affected systems.\n\nPolicy processing is disabled by default but can be enabled by passing\nthe `-policy' argument to the command line utilities or by calling the\n`X509_VERIFY_PARAM_set1_policies()' function.",
-              'diffID':        'sha256:34d5ebaa5410d2ab4154bbd7c3c99c385ec509eb9c1d03d5486aff01bbd618c5',
-              'fixedVersions': [
-                '1.1.1t-r2'
-              ],
-              'installedVersion': '1.1.1q-r0',
-              'packageName':      'libssl1.1',
-              'purl':             'pkg:apk/alpine/libssl1.1@1.1.1q-r0?arch=x86_64&distro=3.15.6',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2023:3722',
-                'https://access.redhat.com/security/cve/CVE-2023-0464',
-                'https://bugzilla.redhat.com/2181082',
-                'https://bugzilla.redhat.com/2182561',
-                'https://bugzilla.redhat.com/2182565',
-                'https://bugzilla.redhat.com/2188461',
-                'https://bugzilla.redhat.com/2207947',
-                'https://errata.almalinux.org/9/ALSA-2023-3722.html',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=2017771e2db3e2b96f89bbe8766c3209f6a99545',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=2dcd4f1e3115f38cefa43e3efbe9b801c27e642e',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=879f7080d7e141f415c79eaa3a8ac4a3dad0348b',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=959c59c7a0164117e7f8366466a32bb1f8d77ff1',
-                'https://linux.oracle.com/cve/CVE-2023-0464.html',
-                'https://linux.oracle.com/errata/ELSA-2023-3722.html',
-                'https://lists.debian.org/debian-lts-announce/2023/06/msg00011.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-0464',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://security.netapp.com/advisory/ntap-20230406-0006/',
-                'https://security.netapp.com/advisory/ntap-20240621-0006/',
-                'https://ubuntu.com/security/notices/USN-6039-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.couchbase.com/alerts/',
-                'https://www.cve.org/CVERecord?id=CVE-2023-0464',
-                'https://www.debian.org/security/2023/dsa-5417',
-                'https://www.openssl.org/news/secadv/20230322.txt'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: Denial of service by excessive resource usage in verifying X509 policy constraints'
-            },
-            {
-              'cve':  'CVE-2022-4304',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N'
-                },
-                'nvd': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N'
-                },
-                'redhat': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-203'
-              ],
-              'description':   'A timing based side channel exists in the OpenSSL RSA Decryption implementation\nwhich could be sufficient to recover a plaintext across a network in a\nBleichenbacher style attack. To achieve a successful decryption an attacker\nwould have to be able to send a very large number of trial messages for\ndecryption. The vulnerability affects all RSA padding modes: PKCS#1 v1.5,\nRSA-OEAP and RSASVE.\n\nFor example, in a TLS connection, RSA is commonly used by a client to send an\nencrypted pre-master secret to the server. An attacker that had observed a\ngenuine connection between a client and a server could use this flaw to send\ntrial messages to the server and record the time taken to process them. After a\nsufficiently large number of messages the attacker could recover the pre-master\nsecret used for the original connection and thus be able to decrypt the\napplication data sent over that connection.',
-              'diffID':        'sha256:34d5ebaa5410d2ab4154bbd7c3c99c385ec509eb9c1d03d5486aff01bbd618c5',
-              'fixedVersions': [
-                '1.1.1t-r0'
-              ],
-              'installedVersion': '1.1.1q-r0',
-              'packageName':      'libssl1.1',
-              'purl':             'pkg:apk/alpine/libssl1.1@1.1.1q-r0?arch=x86_64&distro=3.15.6',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2023:2165',
-                'https://access.redhat.com/security/cve/CVE-2022-4304',
-                'https://bugzilla.redhat.com/1960321',
-                'https://bugzilla.redhat.com/2164440',
-                'https://bugzilla.redhat.com/2164487',
-                'https://bugzilla.redhat.com/2164492',
-                'https://bugzilla.redhat.com/2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144000',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144003',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144006',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144008',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144010',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144012',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144015',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144017',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144019',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2145170',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2158412',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164440',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164487',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164488',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164492',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164497',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164499',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164500',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4203',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4304',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4450',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0215',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0216',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0217',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0286',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0401',
-                'https://errata.almalinux.org/9/ALSA-2023-2165.html',
-                'https://errata.rockylinux.org/RLSA-2023:0946',
-                'https://linux.oracle.com/cve/CVE-2022-4304.html',
-                'https://linux.oracle.com/errata/ELSA-2023-32791.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2022-4304',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0003',
-                'https://rustsec.org/advisories/RUSTSEC-2023-0007.html',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://ubuntu.com/security/notices/USN-5844-1',
-                'https://ubuntu.com/security/notices/USN-6564-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2022-4304',
-                'https://www.openssl.org/news/secadv/20230207.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: timing attack in RSA Decryption implementation'
-            },
-            {
-              'cve':  'CVE-2023-0465',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N'
-                },
-                'redhat': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-295'
-              ],
-              'description':   "Applications that use a non-default option when verifying certificates may be\nvulnerable to an attack from a malicious CA to circumvent certain checks.\n\nInvalid certificate policies in leaf certificates are silently ignored by\nOpenSSL and other certificate policy checks are skipped for that certificate.\nA malicious CA could use this to deliberately assert invalid certificate policies\nin order to circumvent policy checking on the certificate altogether.\n\nPolicy processing is disabled by default but can be enabled by passing\nthe `-policy' argument to the command line utilities or by calling the\n`X509_VERIFY_PARAM_set1_policies()' function.",
-              'diffID':        'sha256:34d5ebaa5410d2ab4154bbd7c3c99c385ec509eb9c1d03d5486aff01bbd618c5',
-              'fixedVersions': [
-                '1.1.1t-r2'
-              ],
-              'installedVersion': '1.1.1q-r0',
-              'packageName':      'libssl1.1',
-              'purl':             'pkg:apk/alpine/libssl1.1@1.1.1q-r0?arch=x86_64&distro=3.15.6',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2023:3722',
-                'https://access.redhat.com/security/cve/CVE-2023-0465',
-                'https://bugzilla.redhat.com/2181082',
-                'https://bugzilla.redhat.com/2182561',
-                'https://bugzilla.redhat.com/2182565',
-                'https://bugzilla.redhat.com/2188461',
-                'https://bugzilla.redhat.com/2207947',
-                'https://errata.almalinux.org/9/ALSA-2023-3722.html',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=10325176f3d3e98c6e2b3bf5ab1e3b334de6947a',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=1dd43e0709fece299b15208f36cc7c76209ba0bb',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=b013765abfa80036dc779dd0e50602c57bb3bf95',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=facfb1ab745646e97a1920977ae4a9965ea61d5c',
-                'https://linux.oracle.com/cve/CVE-2023-0465.html',
-                'https://linux.oracle.com/errata/ELSA-2023-3722.html',
-                'https://lists.debian.org/debian-lts-announce/2023/06/msg00011.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-0465',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://security.netapp.com/advisory/ntap-20230414-0001/',
-                'https://ubuntu.com/security/notices/USN-6039-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-0465',
-                'https://www.debian.org/security/2023/dsa-5417',
-                'https://www.openssl.org/news/secadv/20230328.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: Invalid certificate policies in leaf certificates are silently ignored'
-            },
-            {
-              'cve':  'CVE-2023-2650',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '6.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-770'
-              ],
-              'description':   "Issue summary: Processing some specially crafted ASN.1 object identifiers or\ndata containing them may be very slow.\n\nImpact summary: Applications that use OBJ_obj2txt() directly, or use any of\nthe OpenSSL subsystems OCSP, PKCS7/SMIME, CMS, CMP/CRMF or TS with no message\nsize limit may experience notable to very long delays when processing those\nmessages, which may lead to a Denial of Service.\n\nAn OBJECT IDENTIFIER is composed of a series of numbers - sub-identifiers -\nmost of which have no size limit.  OBJ_obj2txt() may be used to translate\nan ASN.1 OBJECT IDENTIFIER given in DER encoding form (using the OpenSSL\ntype ASN1_OBJECT) to its canonical numeric text form, which are the\nsub-identifiers of the OBJECT IDENTIFIER in decimal form, separated by\nperiods.\n\nWhen one of the sub-identifiers in the OBJECT IDENTIFIER is very large\n(these are sizes that are seen as absurdly large, taking up tens or hundreds\nof KiBs), the translation to a decimal number in text may take a very long\ntime.  The time complexity is O(n^2) with 'n' being the size of the\nsub-identifiers in bytes (*).\n\nWith OpenSSL 3.0, support to fetch cryptographic algorithms using names /\nidentifiers in string form was introduced.  This includes using OBJECT\nIDENTIFIERs in canonical numeric text form as identifiers for fetching\nalgorithms.\n\nSuch OBJECT IDENTIFIERs may be received through the ASN.1 structure\nAlgorithmIdentifier, which is commonly used in multiple protocols to specify\nwhat cryptographic algorithm should be used to sign or verify, encrypt or\ndecrypt, or digest passed data.\n\nApplications that call OBJ_obj2txt() directly with untrusted data are\naffected, with any version of OpenSSL.  If the use is for the mere purpose\nof display, the severity is considered low.\n\nIn OpenSSL 3.0 and newer, this affects the subsystems OCSP, PKCS7/SMIME,\nCMS, CMP/CRMF or TS.  It also impacts anything that processes X.509\ncertificates, including simple things like verifying its signature.\n\nThe impact on TLS is relatively low, because all versions of OpenSSL have a\n100KiB limit on the peer's certificate chain.  Additionally, this only\nimpacts clients, or servers that have explicitly enabled client\nauthentication.\n\nIn OpenSSL 1.1.1 and 1.0.2, this only affects displaying diverse objects,\nsuch as X.509 certificates.  This is assumed to not happen in such a way\nthat it would cause a Denial of Service, so these versions are considered\nnot affected by this issue in such a way that it would be cause for concern,\nand the severity is therefore considered low.",
-              'diffID':        'sha256:34d5ebaa5410d2ab4154bbd7c3c99c385ec509eb9c1d03d5486aff01bbd618c5',
-              'fixedVersions': [
-                '1.1.1u-r0'
-              ],
-              'installedVersion': '1.1.1q-r0',
-              'packageName':      'libssl1.1',
-              'purl':             'pkg:apk/alpine/libssl1.1@1.1.1q-r0?arch=x86_64&distro=3.15.6',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2023/05/30/1',
-                'https://access.redhat.com/errata/RHSA-2023:6330',
-                'https://access.redhat.com/security/cve/CVE-2023-2650',
-                'https://bugzilla.redhat.com/1858038',
-                'https://bugzilla.redhat.com/2207947',
-                'https://errata.almalinux.org/9/ALSA-2023-6330.html',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=423a2bc737a908ad0c77bda470b2b59dc879936b',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=853c5e56ee0b8650c73140816bb8b91d6163422c',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=9e209944b35cf82368071f160a744b6178f9b098',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=db779b0e10b047f2585615e0b8f2acdf21f8544a',
-                'https://linux.oracle.com/cve/CVE-2023-2650.html',
-                'https://linux.oracle.com/errata/ELSA-2023-6330.html',
-                'https://lists.debian.org/debian-lts-announce/2023/06/msg00011.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-2650',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0009',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://security.netapp.com/advisory/ntap-20230703-0001/',
-                'https://security.netapp.com/advisory/ntap-20231027-0009/',
-                'https://ubuntu.com/security/notices/USN-6119-1',
-                'https://ubuntu.com/security/notices/USN-6188-1',
-                'https://ubuntu.com/security/notices/USN-6672-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-2650',
-                'https://www.debian.org/security/2023/dsa-5417',
-                'https://www.openssl.org/news/secadv/20230530.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: Possible DoS translating ASN.1 object identifiers'
-            },
-            {
-              'cve':  'CVE-2023-3446',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L'
-                },
-                'redhat': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L'
-                }
-              },
-              'cwes': [
-                'CWE-606',
-                'CWE-1333'
-              ],
-              'description':   "Issue summary: Checking excessively long DH keys or parameters may be very slow.\n\nImpact summary: Applications that use the functions DH_check(), DH_check_ex()\nor EVP_PKEY_param_check() to check a DH key or DH parameters may experience long\ndelays. Where the key or parameters that are being checked have been obtained\nfrom an untrusted source this may lead to a Denial of Service.\n\nThe function DH_check() performs various checks on DH parameters. One of those\nchecks confirms that the modulus ('p' parameter) is not too large. Trying to use\na very large modulus is slow and OpenSSL will not normally use a modulus which\nis over 10,000 bits in length.\n\nHowever the DH_check() function checks numerous aspects of the key or parameters\nthat have been supplied. Some of those checks use the supplied modulus value\neven if it has already been found to be too large.\n\nAn application that calls DH_check() and supplies a key or parameters obtained\nfrom an untrusted source could be vulernable to a Denial of Service attack.\n\nThe function DH_check() is itself called by a number of other OpenSSL functions.\nAn application calling any of those other functions may similarly be affected.\nThe other functions affected by this are DH_check_ex() and\nEVP_PKEY_param_check().\n\nAlso vulnerable are the OpenSSL dhparam and pkeyparam command line applications\nwhen using the '-check' option.\n\nThe OpenSSL SSL/TLS implementation is not affected by this issue.\nThe OpenSSL 3.0 and 3.1 FIPS providers are not affected by this issue.",
-              'diffID':        'sha256:34d5ebaa5410d2ab4154bbd7c3c99c385ec509eb9c1d03d5486aff01bbd618c5',
-              'fixedVersions': [
-                '1.1.1u-r2'
-              ],
-              'installedVersion': '1.1.1q-r0',
-              'packageName':      'libssl1.1',
-              'purl':             'pkg:apk/alpine/libssl1.1@1.1.1q-r0?arch=x86_64&distro=3.15.6',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2023/07/19/4',
-                'http://www.openwall.com/lists/oss-security/2023/07/19/5',
-                'http://www.openwall.com/lists/oss-security/2023/07/19/6',
-                'http://www.openwall.com/lists/oss-security/2023/07/31/1',
-                'http://www.openwall.com/lists/oss-security/2024/05/16/1',
-                'https://access.redhat.com/errata/RHSA-2024:2447',
-                'https://access.redhat.com/security/cve/CVE-2023-3446',
-                'https://bugzilla.redhat.com/2223016',
-                'https://bugzilla.redhat.com/2224962',
-                'https://bugzilla.redhat.com/2227852',
-                'https://bugzilla.redhat.com/2248616',
-                'https://bugzilla.redhat.com/2257571',
-                'https://bugzilla.redhat.com/2258502',
-                'https://bugzilla.redhat.com/2259944',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2224962',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2257582',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2257583',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2258677',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2258688',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2258691',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2258694',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2258700',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-36763',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-36764',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3446',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45229',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45231',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45232',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45233',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45235',
-                'https://errata.almalinux.org/9/ALSA-2024-2447.html',
-                'https://errata.rockylinux.org/RLSA-2024:2264',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=1fa20cf2f506113c761777127a38bce5068740eb',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=8780a896543a654e757db1b9396383f9d8095528',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=9a0a4d3c1e7138915563c0df4fe6a3f9377b839c',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=fc9867c1e03c22ebf56943be205202e576aabf23',
-                'https://linux.oracle.com/cve/CVE-2023-3446.html',
-                'https://linux.oracle.com/errata/ELSA-2024-2447.html',
-                'https://lists.debian.org/debian-lts-announce/2023/08/msg00019.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-3446',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://security.netapp.com/advisory/ntap-20230803-0011/',
-                'https://ubuntu.com/security/notices/USN-6435-1',
-                'https://ubuntu.com/security/notices/USN-6435-2',
-                'https://ubuntu.com/security/notices/USN-6450-1',
-                'https://ubuntu.com/security/notices/USN-6709-1',
-                'https://ubuntu.com/security/notices/USN-7018-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-3446',
-                'https://www.openssl.org/news/secadv/20230719.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: Excessive time spent checking DH keys and parameters'
-            },
-            {
-              'cve':  'CVE-2023-3817',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L'
-                },
-                'redhat': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L'
-                }
-              },
-              'cwes': [
-                'CWE-606',
-                'CWE-834'
-              ],
-              'description':   'Issue summary: Checking excessively long DH keys or parameters may be very slow.\n\nImpact summary: Applications that use the functions DH_check(), DH_check_ex()\nor EVP_PKEY_param_check() to check a DH key or DH parameters may experience long\ndelays. Where the key or parameters that are being checked have been obtained\nfrom an untrusted source this may lead to a Denial of Service.\n\nThe function DH_check() performs various checks on DH parameters. After fixing\nCVE-2023-3446 it was discovered that a large q parameter value can also trigger\nan overly long computation during some of these checks. A correct q value,\nif present, cannot be larger than the modulus p parameter, thus it is\nunnecessary to perform these checks if q is larger than p.\n\nAn application that calls DH_check() and supplies a key or parameters obtained\nfrom an untrusted source could be vulnerable to a Denial of Service attack.\n\nThe function DH_check() is itself called by a number of other OpenSSL functions.\nAn application calling any of those other functions may similarly be affected.\nThe other functions affected by this are DH_check_ex() and\nEVP_PKEY_param_check().\n\nAlso vulnerable are the OpenSSL dhparam and pkeyparam command line applications\nwhen using the "-check" option.\n\nThe OpenSSL SSL/TLS implementation is not affected by this issue.\n\nThe OpenSSL 3.0 and 3.1 FIPS providers are not affected by this issue.',
-              'diffID':        'sha256:34d5ebaa5410d2ab4154bbd7c3c99c385ec509eb9c1d03d5486aff01bbd618c5',
-              'fixedVersions': [
-                '1.1.1v-r0'
-              ],
-              'installedVersion': '1.1.1q-r0',
-              'packageName':      'libssl1.1',
-              'purl':             'pkg:apk/alpine/libssl1.1@1.1.1q-r0?arch=x86_64&distro=3.15.6',
-              'references':       [
-                'http://seclists.org/fulldisclosure/2023/Jul/43',
-                'http://www.openwall.com/lists/oss-security/2023/07/31/1',
-                'http://www.openwall.com/lists/oss-security/2023/09/22/11',
-                'http://www.openwall.com/lists/oss-security/2023/09/22/9',
-                'http://www.openwall.com/lists/oss-security/2023/11/06/2',
-                'https://access.redhat.com/errata/RHSA-2024:2447',
-                'https://access.redhat.com/security/cve/CVE-2023-3817',
-                'https://bugzilla.redhat.com/2223016',
-                'https://bugzilla.redhat.com/2224962',
-                'https://bugzilla.redhat.com/2227852',
-                'https://bugzilla.redhat.com/2248616',
-                'https://bugzilla.redhat.com/2257571',
-                'https://bugzilla.redhat.com/2258502',
-                'https://bugzilla.redhat.com/2259944',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2224962',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2227852',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2248616',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2270358',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3446',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3817',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-5678',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-2408',
-                'https://errata.almalinux.org/9/ALSA-2024-2447.html',
-                'https://errata.rockylinux.org/RLSA-2023:7877',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=6a1eb62c29db6cb5eec707f9338aee00f44e26f5',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=869ad69aadd985c7b8ca6f4e5dd0eb274c9f3644',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=9002fd07327a91f35ba6c1307e71fa6fd4409b7f',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=91ddeba0f2269b017dc06c46c993a788974b1aa5',
-                'https://linux.oracle.com/cve/CVE-2023-3817.html',
-                'https://linux.oracle.com/errata/ELSA-2024-2447.html',
-                'https://lists.debian.org/debian-lts-announce/2023/08/msg00019.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-3817',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://security.netapp.com/advisory/ntap-20230818-0014/',
-                'https://security.netapp.com/advisory/ntap-20231027-0008/',
-                'https://security.netapp.com/advisory/ntap-20240621-0006/',
-                'https://ubuntu.com/security/notices/USN-6435-1',
-                'https://ubuntu.com/security/notices/USN-6435-2',
-                'https://ubuntu.com/security/notices/USN-6450-1',
-                'https://ubuntu.com/security/notices/USN-6709-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-3817',
-                'https://www.openssl.org/news/secadv/20230731.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'OpenSSL: Excessive time spent checking DH q parameter value'
-            },
-            {
-              'cve':  'CVE-2023-5678',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L'
-                },
-                'redhat': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L'
-                }
-              },
-              'cwes': [
-                'CWE-606',
-                'CWE-754'
-              ],
-              'description':   "Issue summary: Generating excessively long X9.42 DH keys or checking\nexcessively long X9.42 DH keys or parameters may be very slow.\n\nImpact summary: Applications that use the functions DH_generate_key() to\ngenerate an X9.42 DH key may experience long delays.  Likewise, applications\nthat use DH_check_pub_key(), DH_check_pub_key_ex() or EVP_PKEY_public_check()\nto check an X9.42 DH key or X9.42 DH parameters may experience long delays.\nWhere the key or parameters that are being checked have been obtained from\nan untrusted source this may lead to a Denial of Service.\n\nWhile DH_check() performs all the necessary checks (as of CVE-2023-3817),\nDH_check_pub_key() doesn't make any of these checks, and is therefore\nvulnerable for excessively large P and Q parameters.\n\nLikewise, while DH_generate_key() performs a check for an excessively large\nP, it doesn't check for an excessively large Q.\n\nAn application that calls DH_generate_key() or DH_check_pub_key() and\nsupplies a key or parameters obtained from an untrusted source could be\nvulnerable to a Denial of Service attack.\n\nDH_generate_key() and DH_check_pub_key() are also called by a number of\nother OpenSSL functions.  An application calling any of those other\nfunctions may similarly be affected.  The other functions affected by this\nare DH_check_pub_key_ex(), EVP_PKEY_public_check(), and EVP_PKEY_generate().\n\nAlso vulnerable are the OpenSSL pkey command line application when using the\n\"-pubcheck\" option, as well as the OpenSSL genpkey command line application.\n\nThe OpenSSL SSL/TLS implementation is not affected by this issue.\n\nThe OpenSSL 3.0 and 3.1 FIPS providers are not affected by this issue.",
-              'diffID':        'sha256:34d5ebaa5410d2ab4154bbd7c3c99c385ec509eb9c1d03d5486aff01bbd618c5',
-              'fixedVersions': [
-                '1.1.1w-r1'
-              ],
-              'installedVersion': '1.1.1q-r0',
-              'packageName':      'libssl1.1',
-              'purl':             'pkg:apk/alpine/libssl1.1@1.1.1q-r0?arch=x86_64&distro=3.15.6',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2024/03/11/1',
-                'https://access.redhat.com/errata/RHSA-2024:2447',
-                'https://access.redhat.com/security/cve/CVE-2023-5678',
-                'https://bugzilla.redhat.com/2223016',
-                'https://bugzilla.redhat.com/2224962',
-                'https://bugzilla.redhat.com/2227852',
-                'https://bugzilla.redhat.com/2248616',
-                'https://bugzilla.redhat.com/2257571',
-                'https://bugzilla.redhat.com/2258502',
-                'https://bugzilla.redhat.com/2259944',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2224962',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2227852',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2248616',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2270358',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3446',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3817',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-5678',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-2408',
-                'https://errata.almalinux.org/9/ALSA-2024-2447.html',
-                'https://errata.rockylinux.org/RLSA-2023:7877',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=34efaef6c103d636ab507a0cc34dca4d3aecc055',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=710fee740904b6290fef0dd5536fbcedbc38ff0c',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=db925ae2e65d0d925adef429afc37f75bd1c2017',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=ddeb4b6c6d527e54ce9a99cba785c0f7776e54b6',
-                'https://linux.oracle.com/cve/CVE-2023-5678.html',
-                'https://linux.oracle.com/errata/ELSA-2024-2447.html',
-                'https://lists.debian.org/debian-lts-announce/2024/10/msg00033.html',
-                'https://lists.debian.org/debian-lts-announce/2024/11/msg00000.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-5678',
-                'https://security.netapp.com/advisory/ntap-20231130-0010/',
-                'https://ubuntu.com/security/notices/USN-6622-1',
-                'https://ubuntu.com/security/notices/USN-6632-1',
-                'https://ubuntu.com/security/notices/USN-6709-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-5678',
-                'https://www.openssl.org/news/secadv/20231106.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: Generating excessively long X9.42 DH keys or checking excessively long X9.42 DH keys or parameters may be very slow'
-            }
-          ]
-        }
-      ],
-      'summary': {
-        'critical':   0,
-        'high':       8,
-        'low':        0,
-        'medium':     12,
-        'suppressed': 0,
-        'unknown':    0
-      }
-    }
-  },
-  {
-    'id':    'default/51fb164cb0a10f7348e09e428ea1906dd937e67e9ce229dad80d603a0062cb69',
-    'type':  'storage.sbomscanner.kubewarden.io.vulnerabilityreport',
-    'links': {
-      'patch':  'https://localhost:8005/v1/storage.sbomscanner.kubewarden.io.vulnerabilityreports/default/51fb164cb0a10f7348e09e428ea1906dd937e67e9ce229dad80d603a0062cb69',
-      'remove': 'https://localhost:8005/v1/storage.sbomscanner.kubewarden.io.vulnerabilityreports/default/51fb164cb0a10f7348e09e428ea1906dd937e67e9ce229dad80d603a0062cb69',
-      'self':   'https://localhost:8005/v1/storage.sbomscanner.kubewarden.io.vulnerabilityreports/default/51fb164cb0a10f7348e09e428ea1906dd937e67e9ce229dad80d603a0062cb69',
-      'update': 'https://localhost:8005/v1/storage.sbomscanner.kubewarden.io.vulnerabilityreports/default/51fb164cb0a10f7348e09e428ea1906dd937e67e9ce229dad80d603a0062cb69',
-      'view':   'https://localhost:8005/apis/storage.sbomscanner.kubewarden.io/v1alpha1/namespaces/default/vulnerabilityreports/51fb164cb0a10f7348e09e428ea1906dd937e67e9ce229dad80d603a0062cb69'
-    },
-    'apiVersion':    'storage.sbomscanner.kubewarden.io/v1alpha1',
-    'imageMetadata': {
-      'digest':      'sha256:23fb1c8c9333984d164c7c4ed6d0d4ac7ae149ae0d255a6771d711b0031586c5',
-      'platform':    'linux/amd64',
-      'registry':    'demo-02',
-      'registryURI': 'ghcr.io',
-      'repository':  'linuxcontainers/alpine',
-      'tag':         'main'
-    },
-    'kind':     'VulnerabilityReport',
-    'metadata': {
-      'creationTimestamp': '2026-01-09T22:46:25Z',
-      'fields':            [
-        '51fb164cb0a10f7348e09e428ea1906dd937e67e9ce229dad80d603a0062cb69',
-        'ghcr.io/linuxcontainers/alpine:main',
-        'linux/amd64',
-        '26 (0 suppressed)'
-      ],
-      'labels': {
-        'app.kubernetes.io/managed-by':          'sbomscanner',
-        'app.kubernetes.io/part-of':             'sbomscanner',
-        'sbomscanner.kubewarden.io/scanjob-uid': '42184d01-4b15-466f-98aa-e802d1b6b6b8'
-      },
-      'name':            '51fb164cb0a10f7348e09e428ea1906dd937e67e9ce229dad80d603a0062cb69',
-      'namespace':       'default',
-      'ownerReferences': [
-        {
-          'apiVersion':         'storage.sbomscanner.kubewarden.io/v1alpha1',
-          'blockOwnerDeletion': true,
-          'controller':         true,
-          'kind':               'SBOM',
-          'name':               '51fb164cb0a10f7348e09e428ea1906dd937e67e9ce229dad80d603a0062cb69',
-          'uid':                'a815543b-c91d-4685-a452-756e96aa60e5'
-        }
-      ],
-      'relationships': [
-        {
-          'fromId':   'default/51fb164cb0a10f7348e09e428ea1906dd937e67e9ce229dad80d603a0062cb69',
-          'fromType': 'storage.sbomscanner.kubewarden.io.sbom',
-          'rel':      'owner',
-          'state':    'active',
-          'message':  'Resource is current'
-        }
-      ],
-      'resourceVersion': '7',
-      'state':           {
-        'error':         false,
-        'message':       'Resource is current',
-        'name':          'active',
-        'transitioning': false
-      },
-      'uid': '4e701270-2d99-4138-8d1f-9a3a71a53e3c'
-    },
-    'report': {
-      'results': [
-        {
-          'class':           'os-pkgs',
-          'target':          '/var/run/worker/trivy.sbom.2045412162.json (alpine 3.15.1)',
-          'type':            'alpine',
-          'vulnerabilities': [
-            {
-              'cve':  'CVE-2022-28391',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '8.8',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-88'
-              ],
-              'description':   "BusyBox through 1.35.0 allows remote attackers to execute arbitrary code if netstat is used to print a DNS PTR record's value to a VT compatible terminal. Alternatively, the attacker could choose to change the terminal's colors.",
-              'diffID':        'sha256:5e03d8cae8773cb694fff1d55da34a40d23c2349087ed15ce68476395d33753c',
-              'fixedVersions': [
-                '1.34.1-r5'
-              ],
-              'installedVersion': '1.34.1-r4',
-              'packageName':      'busybox',
-              'purl':             'pkg:apk/alpine/busybox@1.34.1-r4?arch=x86_64&distro=3.15.1',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2022-28391',
-                'https://git.alpinelinux.org/aports/plain/main/busybox/0001-libbb-sockaddr2str-ensure-only-printable-characters-.patch',
-                'https://git.alpinelinux.org/aports/plain/main/busybox/0002-nslookup-sanitize-all-printed-strings-with-printable.patch',
-                'https://gitlab.alpinelinux.org/alpine/aports/-/issues/13661',
-                'https://nvd.nist.gov/vuln/detail/CVE-2022-28391',
-                'https://www.cve.org/CVERecord?id=CVE-2022-28391'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: remote attackers may execute arbitrary code if netstat is used'
-            },
-            {
-              'cve':  'CVE-2022-4450',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'nvd': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-415'
-              ],
-              'description':   'The function PEM_read_bio_ex() reads a PEM file from a BIO and parses and\ndecodes the "name" (e.g. "CERTIFICATE"), any header data and the payload data.\nIf the function succeeds then the "name_out", "header" and "data" arguments are\npopulated with pointers to buffers containing the relevant decoded data. The\ncaller is responsible for freeing those buffers. It is possible to construct a\nPEM file that results in 0 bytes of payload data. In this case PEM_read_bio_ex()\nwill return a failure code but will populate the header argument with a pointer\nto a buffer that has already been freed. If the caller also frees this buffer\nthen a double free will occur. This will most likely lead to a crash. This\ncould be exploited by an attacker who has the ability to supply malicious PEM\nfiles for parsing to achieve a denial of service attack.\n\nThe functions PEM_read_bio() and PEM_read() are simple wrappers around\nPEM_read_bio_ex() and therefore these functions are also directly affected.\n\nThese functions are also called indirectly by a number of other OpenSSL\nfunctions including PEM_X509_INFO_read_bio_ex() and\nSSL_CTX_use_serverinfo_file() which are also vulnerable. Some OpenSSL internal\nuses of these functions are not vulnerable because the caller does not free the\nheader argument if PEM_read_bio_ex() returns a failure code. These locations\ninclude the PEM_read_bio_TYPE() functions as well as the decoders introduced in\nOpenSSL 3.0.\n\nThe OpenSSL asn1parse command line application is also impacted by this issue.',
-              'diffID':        'sha256:5e03d8cae8773cb694fff1d55da34a40d23c2349087ed15ce68476395d33753c',
-              'fixedVersions': [
-                '1.1.1t-r0'
-              ],
-              'installedVersion': '1.1.1n-r0',
-              'packageName':      'libcrypto1.1',
-              'purl':             'pkg:apk/alpine/libcrypto1.1@1.1.1n-r0?arch=x86_64&distro=3.15.1',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2023:2165',
-                'https://access.redhat.com/security/cve/CVE-2022-4450',
-                'https://bugzilla.redhat.com/1960321',
-                'https://bugzilla.redhat.com/2164440',
-                'https://bugzilla.redhat.com/2164487',
-                'https://bugzilla.redhat.com/2164492',
-                'https://bugzilla.redhat.com/2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144000',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144003',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144006',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144008',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144010',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144012',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144015',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144017',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144019',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2145170',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2158412',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164440',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164487',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164488',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164492',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164497',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164499',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164500',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4203',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4304',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4450',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0215',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0216',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0217',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0286',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0401',
-                'https://errata.almalinux.org/9/ALSA-2023-2165.html',
-                'https://errata.rockylinux.org/RLSA-2023:0946',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=63bcf189be73a9cc1264059bed6f57974be74a83',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=bbcf509bd046b34cca19c766bbddc31683d0858b',
-                'https://linux.oracle.com/cve/CVE-2022-4450.html',
-                'https://linux.oracle.com/errata/ELSA-2023-32791.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2022-4450',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0003',
-                'https://rustsec.org/advisories/RUSTSEC-2023-0010.html',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://ubuntu.com/security/notices/USN-5844-1',
-                'https://ubuntu.com/security/notices/USN-6564-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2022-4450',
-                'https://www.openssl.org/news/secadv/20230207.txt'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: double free after calling PEM_read_bio_ex'
-            },
-            {
-              'cve':  'CVE-2023-0215',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'nvd': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   'The public API function BIO_new_NDEF is a helper function used for streaming\nASN.1 data via a BIO. It is primarily used internally to OpenSSL to support the\nSMIME, CMS and PKCS7 streaming capabilities, but may also be called directly by\nend user applications.\n\nThe function receives a BIO from the caller, prepends a new BIO_f_asn1 filter\nBIO onto the front of it to form a BIO chain, and then returns the new head of\nthe BIO chain to the caller. Under certain conditions, for example if a CMS\nrecipient public key is invalid, the new filter BIO is freed and the function\nreturns a NULL result indicating a failure. However, in this case, the BIO chain\nis not properly cleaned up and the BIO passed by the caller still retains\ninternal pointers to the previously freed filter BIO. If the caller then goes on\nto call BIO_pop() on the BIO then a use-after-free will occur. This will most\nlikely result in a crash.\n\n\n\nThis scenario occurs directly in the internal function B64_write_ASN1() which\nmay cause BIO_new_NDEF() to be called and will subsequently call BIO_pop() on\nthe BIO. This internal function is in turn called by the public API functions\nPEM_write_bio_ASN1_stream, PEM_write_bio_CMS_stream, PEM_write_bio_PKCS7_stream,\nSMIME_write_ASN1, SMIME_write_CMS and SMIME_write_PKCS7.\n\nOther public API functions that may be impacted by this include\ni2d_ASN1_bio_stream, BIO_new_CMS, BIO_new_PKCS7, i2d_CMS_bio_stream and\ni2d_PKCS7_bio_stream.\n\nThe OpenSSL cms and smime command line applications are similarly affected.',
-              'diffID':        'sha256:5e03d8cae8773cb694fff1d55da34a40d23c2349087ed15ce68476395d33753c',
-              'fixedVersions': [
-                '1.1.1t-r0'
-              ],
-              'installedVersion': '1.1.1n-r0',
-              'packageName':      'libcrypto1.1',
-              'purl':             'pkg:apk/alpine/libcrypto1.1@1.1.1n-r0?arch=x86_64&distro=3.15.1',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2023:2165',
-                'https://access.redhat.com/security/cve/CVE-2023-0215',
-                'https://bugzilla.redhat.com/1960321',
-                'https://bugzilla.redhat.com/2164440',
-                'https://bugzilla.redhat.com/2164487',
-                'https://bugzilla.redhat.com/2164492',
-                'https://bugzilla.redhat.com/2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144000',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144003',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144006',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144008',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144010',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144012',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144015',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144017',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144019',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2145170',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2158412',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164440',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164487',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164488',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164492',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164497',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164499',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164500',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4203',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4304',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4450',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0215',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0216',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0217',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0286',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0401',
-                'https://errata.almalinux.org/9/ALSA-2023-2165.html',
-                'https://errata.rockylinux.org/RLSA-2023:0946',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=8818064ce3c3c0f1b740a5aaba2a987e75bfbafd',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=9816136fe31d92ace4037d5da5257f763aeeb4eb',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=c3829dd8825c654652201e16f8a0a0c46ee3f344',
-                'https://linux.oracle.com/cve/CVE-2023-0215.html',
-                'https://linux.oracle.com/errata/ELSA-2023-32791.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-0215',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0003',
-                'https://rustsec.org/advisories/RUSTSEC-2023-0009.html',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://security.netapp.com/advisory/ntap-20230427-0007',
-                'https://security.netapp.com/advisory/ntap-20230427-0007/',
-                'https://security.netapp.com/advisory/ntap-20230427-0009',
-                'https://security.netapp.com/advisory/ntap-20230427-0009/',
-                'https://security.netapp.com/advisory/ntap-20240621-0006',
-                'https://security.netapp.com/advisory/ntap-20240621-0006/',
-                'https://ubuntu.com/security/notices/USN-5844-1',
-                'https://ubuntu.com/security/notices/USN-5845-1',
-                'https://ubuntu.com/security/notices/USN-5845-2',
-                'https://ubuntu.com/security/notices/USN-6564-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-0215',
-                'https://www.openssl.org/news/secadv/20230207.txt'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: use-after-free following BIO_new_NDEF'
-            },
-            {
-              'cve':  'CVE-2023-0286',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '7.4',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H'
-                },
-                'nvd': {
-                  'v3score':  '7.4',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.4',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-843'
-              ],
-              'description':   'There is a type confusion vulnerability relating to X.400 address processing\ninside an X.509 GeneralName. X.400 addresses were parsed as an ASN1_STRING but\nthe public structure definition for GENERAL_NAME incorrectly specified the type\nof the x400Address field as ASN1_TYPE. This field is subsequently interpreted by\nthe OpenSSL function GENERAL_NAME_cmp as an ASN1_TYPE rather than an\nASN1_STRING.\n\nWhen CRL checking is enabled (i.e. the application sets the\nX509_V_FLAG_CRL_CHECK flag), this vulnerability may allow an attacker to pass\narbitrary pointers to a memcmp call, enabling them to read memory contents or\nenact a denial of service. In most cases, the attack requires the attacker to\nprovide both the certificate chain and CRL, neither of which need to have a\nvalid signature. If the attacker only controls one of these inputs, the other\ninput must already contain an X.400 address as a CRL distribution point, which\nis uncommon. As such, this vulnerability is most likely to only affect\napplications which have implemented their own functionality for retrieving CRLs\nover a network.',
-              'diffID':        'sha256:5e03d8cae8773cb694fff1d55da34a40d23c2349087ed15ce68476395d33753c',
-              'fixedVersions': [
-                '1.1.1t-r0'
-              ],
-              'installedVersion': '1.1.1n-r0',
-              'packageName':      'libcrypto1.1',
-              'purl':             'pkg:apk/alpine/libcrypto1.1@1.1.1n-r0?arch=x86_64&distro=3.15.1',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2025:7937',
-                'https://access.redhat.com/security/cve/CVE-2023-0286',
-                'https://access.redhat.com/security/cve/cve-2023-0286',
-                'https://bugzilla.redhat.com/2164440',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144000',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144003',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144006',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144008',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144010',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144012',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144015',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144017',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144019',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2145170',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2158412',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164440',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164487',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164488',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164492',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164497',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164499',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164500',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4203',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4304',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4450',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0215',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0216',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0217',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0286',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0401',
-                'https://errata.almalinux.org/9/ALSA-2025-7937.html',
-                'https://errata.rockylinux.org/RLSA-2023:0946',
-                'https://ftp.openbsd.org/pub/OpenBSD/LibreSSL/libressl-3.6.2-relnotes.txt',
-                'https://ftp.openbsd.org/pub/OpenBSD/patches/7.2/common/018_x509.patch.sig',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=2c6c9d439b484e1ba9830d8454a34fa4f80fdfe9',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=2f7530077e0ef79d98718138716bc51ca0cad658',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=fd2af07dc083a350c959147097003a14a5e8ac4d',
-                'https://github.com/pyca/cryptography',
-                'https://github.com/pyca/cryptography/security/advisories/GHSA-x4qr-2fvf-3mr5',
-                'https://linux.oracle.com/cve/CVE-2023-0286.html',
-                'https://linux.oracle.com/errata/ELSA-2025-7937.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-0286',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0003',
-                'https://rustsec.org/advisories/RUSTSEC-2023-0006.html',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://ubuntu.com/security/notices/USN-5844-1',
-                'https://ubuntu.com/security/notices/USN-5845-1',
-                'https://ubuntu.com/security/notices/USN-5845-2',
-                'https://ubuntu.com/security/notices/USN-6564-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-0286',
-                'https://www.openssl.org/news/secadv/20230207.txt'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: X.400 address type confusion in X.509 GeneralName'
-            },
-            {
-              'cve':  'CVE-2023-0464',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-295'
-              ],
-              'description':   "A security vulnerability has been identified in all supported versions\n\nof OpenSSL related to the verification of X.509 certificate chains\nthat include policy constraints.  Attackers may be able to exploit this\nvulnerability by creating a malicious certificate chain that triggers\nexponential use of computational resources, leading to a denial-of-service\n(DoS) attack on affected systems.\n\nPolicy processing is disabled by default but can be enabled by passing\nthe `-policy' argument to the command line utilities or by calling the\n`X509_VERIFY_PARAM_set1_policies()' function.",
-              'diffID':        'sha256:5e03d8cae8773cb694fff1d55da34a40d23c2349087ed15ce68476395d33753c',
-              'fixedVersions': [
-                '1.1.1t-r2'
-              ],
-              'installedVersion': '1.1.1n-r0',
-              'packageName':      'libcrypto1.1',
-              'purl':             'pkg:apk/alpine/libcrypto1.1@1.1.1n-r0?arch=x86_64&distro=3.15.1',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2023:3722',
-                'https://access.redhat.com/security/cve/CVE-2023-0464',
-                'https://bugzilla.redhat.com/2181082',
-                'https://bugzilla.redhat.com/2182561',
-                'https://bugzilla.redhat.com/2182565',
-                'https://bugzilla.redhat.com/2188461',
-                'https://bugzilla.redhat.com/2207947',
-                'https://errata.almalinux.org/9/ALSA-2023-3722.html',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=2017771e2db3e2b96f89bbe8766c3209f6a99545',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=2dcd4f1e3115f38cefa43e3efbe9b801c27e642e',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=879f7080d7e141f415c79eaa3a8ac4a3dad0348b',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=959c59c7a0164117e7f8366466a32bb1f8d77ff1',
-                'https://linux.oracle.com/cve/CVE-2023-0464.html',
-                'https://linux.oracle.com/errata/ELSA-2023-3722.html',
-                'https://lists.debian.org/debian-lts-announce/2023/06/msg00011.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-0464',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://security.netapp.com/advisory/ntap-20230406-0006/',
-                'https://security.netapp.com/advisory/ntap-20240621-0006/',
-                'https://ubuntu.com/security/notices/USN-6039-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.couchbase.com/alerts/',
-                'https://www.cve.org/CVERecord?id=CVE-2023-0464',
-                'https://www.debian.org/security/2023/dsa-5417',
-                'https://www.openssl.org/news/secadv/20230322.txt'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: Denial of service by excessive resource usage in verifying X509 policy constraints'
-            },
-            {
-              'cve':  'CVE-2022-2097',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N'
-                },
-                'nvd': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N'
-                },
-                'redhat': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-327'
-              ],
-              'description':   "AES OCB mode for 32-bit x86 platforms using the AES-NI assembly optimised implementation will not encrypt the entirety of the data under some circumstances. This could reveal sixteen bytes of data that was preexisting in the memory that wasn't written. In the special case of \"in place\" encryption, sixteen bytes of the plaintext would be revealed. Since OpenSSL does not support OCB based cipher suites for TLS and DTLS, they are both unaffected. Fixed in OpenSSL 3.0.5 (Affected 3.0.0-3.0.4). Fixed in OpenSSL 1.1.1q (Affected 1.1.1-1.1.1p).",
-              'diffID':        'sha256:5e03d8cae8773cb694fff1d55da34a40d23c2349087ed15ce68476395d33753c',
-              'fixedVersions': [
-                '1.1.1q-r0'
-              ],
-              'installedVersion': '1.1.1n-r0',
-              'packageName':      'libcrypto1.1',
-              'purl':             'pkg:apk/alpine/libcrypto1.1@1.1.1n-r0?arch=x86_64&distro=3.15.1',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2022:6224',
-                'https://access.redhat.com/security/cve/CVE-2022-2097',
-                'https://bugzilla.redhat.com/2081494',
-                'https://bugzilla.redhat.com/2087911',
-                'https://bugzilla.redhat.com/2087913',
-                'https://bugzilla.redhat.com/2097310',
-                'https://bugzilla.redhat.com/2104905',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2081494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2097310',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2100554',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2104905',
-                'https://cert-portal.siemens.com/productcert/pdf/ssa-332410.pdf',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-1292',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-2068',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-2097',
-                'https://errata.almalinux.org/9/ALSA-2022-6224.html',
-                'https://errata.rockylinux.org/RLSA-2022:5818',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=919925673d6c9cfed3c1085497f5dfbbed5fc431',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=a98f339ddd7e8f487d6e0088d4a9a42324885a93',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=919925673d6c9cfed3c1085497f5dfbbed5fc431',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=a98f339ddd7e8f487d6e0088d4a9a42324885a93',
-                'https://github.com/alexcrichton/openssl-src-rs',
-                'https://linux.oracle.com/cve/CVE-2022-2097.html',
-                'https://linux.oracle.com/errata/ELSA-2022-9955.html',
-                'https://lists.debian.org/debian-lts-announce/2023/02/msg00019.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/R6CK57NBQFTPUMXAPJURCGXUYT76NQAK',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/R6CK57NBQFTPUMXAPJURCGXUYT76NQAK/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/V6567JERRHHJW2GNGJGKDRNHR7SNPZK7',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/V6567JERRHHJW2GNGJGKDRNHR7SNPZK7/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VCMNWKERPBKOEBNL7CLTTX3ZZCZLH7XA',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VCMNWKERPBKOEBNL7CLTTX3ZZCZLH7XA/',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/R6CK57NBQFTPUMXAPJURCGXUYT76NQAK',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/R6CK57NBQFTPUMXAPJURCGXUYT76NQAK/',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/V6567JERRHHJW2GNGJGKDRNHR7SNPZK7',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/V6567JERRHHJW2GNGJGKDRNHR7SNPZK7/',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/VCMNWKERPBKOEBNL7CLTTX3ZZCZLH7XA',
-                'https://nvd.nist.gov/vuln/detail/CVE-2022-2097',
-                'https://rustsec.org/advisories/RUSTSEC-2022-0032.html',
-                'https://security.gentoo.org/glsa/202210-02',
-                'https://security.netapp.com/advisory/ntap-20220715-0011',
-                'https://security.netapp.com/advisory/ntap-20220715-0011/',
-                'https://security.netapp.com/advisory/ntap-20230420-0008',
-                'https://security.netapp.com/advisory/ntap-20230420-0008/',
-                'https://security.netapp.com/advisory/ntap-20240621-0006',
-                'https://security.netapp.com/advisory/ntap-20240621-0006/',
-                'https://ubuntu.com/security/notices/USN-5502-1',
-                'https://ubuntu.com/security/notices/USN-6457-1',
-                'https://www.cve.org/CVERecord?id=CVE-2022-2097',
-                'https://www.debian.org/security/2023/dsa-5343',
-                'https://www.openssl.org/news/secadv/20220705.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: AES OCB fails to encrypt some bytes'
-            },
-            {
-              'cve':  'CVE-2022-4304',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N'
-                },
-                'nvd': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N'
-                },
-                'redhat': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-203'
-              ],
-              'description':   'A timing based side channel exists in the OpenSSL RSA Decryption implementation\nwhich could be sufficient to recover a plaintext across a network in a\nBleichenbacher style attack. To achieve a successful decryption an attacker\nwould have to be able to send a very large number of trial messages for\ndecryption. The vulnerability affects all RSA padding modes: PKCS#1 v1.5,\nRSA-OEAP and RSASVE.\n\nFor example, in a TLS connection, RSA is commonly used by a client to send an\nencrypted pre-master secret to the server. An attacker that had observed a\ngenuine connection between a client and a server could use this flaw to send\ntrial messages to the server and record the time taken to process them. After a\nsufficiently large number of messages the attacker could recover the pre-master\nsecret used for the original connection and thus be able to decrypt the\napplication data sent over that connection.',
-              'diffID':        'sha256:5e03d8cae8773cb694fff1d55da34a40d23c2349087ed15ce68476395d33753c',
-              'fixedVersions': [
-                '1.1.1t-r0'
-              ],
-              'installedVersion': '1.1.1n-r0',
-              'packageName':      'libcrypto1.1',
-              'purl':             'pkg:apk/alpine/libcrypto1.1@1.1.1n-r0?arch=x86_64&distro=3.15.1',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2023:2165',
-                'https://access.redhat.com/security/cve/CVE-2022-4304',
-                'https://bugzilla.redhat.com/1960321',
-                'https://bugzilla.redhat.com/2164440',
-                'https://bugzilla.redhat.com/2164487',
-                'https://bugzilla.redhat.com/2164492',
-                'https://bugzilla.redhat.com/2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144000',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144003',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144006',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144008',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144010',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144012',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144015',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144017',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144019',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2145170',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2158412',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164440',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164487',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164488',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164492',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164497',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164499',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164500',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4203',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4304',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4450',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0215',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0216',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0217',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0286',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0401',
-                'https://errata.almalinux.org/9/ALSA-2023-2165.html',
-                'https://errata.rockylinux.org/RLSA-2023:0946',
-                'https://linux.oracle.com/cve/CVE-2022-4304.html',
-                'https://linux.oracle.com/errata/ELSA-2023-32791.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2022-4304',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0003',
-                'https://rustsec.org/advisories/RUSTSEC-2023-0007.html',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://ubuntu.com/security/notices/USN-5844-1',
-                'https://ubuntu.com/security/notices/USN-6564-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2022-4304',
-                'https://www.openssl.org/news/secadv/20230207.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: timing attack in RSA Decryption implementation'
-            },
-            {
-              'cve':  'CVE-2023-0465',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N'
-                },
-                'redhat': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-295'
-              ],
-              'description':   "Applications that use a non-default option when verifying certificates may be\nvulnerable to an attack from a malicious CA to circumvent certain checks.\n\nInvalid certificate policies in leaf certificates are silently ignored by\nOpenSSL and other certificate policy checks are skipped for that certificate.\nA malicious CA could use this to deliberately assert invalid certificate policies\nin order to circumvent policy checking on the certificate altogether.\n\nPolicy processing is disabled by default but can be enabled by passing\nthe `-policy' argument to the command line utilities or by calling the\n`X509_VERIFY_PARAM_set1_policies()' function.",
-              'diffID':        'sha256:5e03d8cae8773cb694fff1d55da34a40d23c2349087ed15ce68476395d33753c',
-              'fixedVersions': [
-                '1.1.1t-r2'
-              ],
-              'installedVersion': '1.1.1n-r0',
-              'packageName':      'libcrypto1.1',
-              'purl':             'pkg:apk/alpine/libcrypto1.1@1.1.1n-r0?arch=x86_64&distro=3.15.1',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2023:3722',
-                'https://access.redhat.com/security/cve/CVE-2023-0465',
-                'https://bugzilla.redhat.com/2181082',
-                'https://bugzilla.redhat.com/2182561',
-                'https://bugzilla.redhat.com/2182565',
-                'https://bugzilla.redhat.com/2188461',
-                'https://bugzilla.redhat.com/2207947',
-                'https://errata.almalinux.org/9/ALSA-2023-3722.html',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=10325176f3d3e98c6e2b3bf5ab1e3b334de6947a',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=1dd43e0709fece299b15208f36cc7c76209ba0bb',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=b013765abfa80036dc779dd0e50602c57bb3bf95',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=facfb1ab745646e97a1920977ae4a9965ea61d5c',
-                'https://linux.oracle.com/cve/CVE-2023-0465.html',
-                'https://linux.oracle.com/errata/ELSA-2023-3722.html',
-                'https://lists.debian.org/debian-lts-announce/2023/06/msg00011.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-0465',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://security.netapp.com/advisory/ntap-20230414-0001/',
-                'https://ubuntu.com/security/notices/USN-6039-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-0465',
-                'https://www.debian.org/security/2023/dsa-5417',
-                'https://www.openssl.org/news/secadv/20230328.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: Invalid certificate policies in leaf certificates are silently ignored'
-            },
-            {
-              'cve':  'CVE-2023-2650',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '6.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-770'
-              ],
-              'description':   "Issue summary: Processing some specially crafted ASN.1 object identifiers or\ndata containing them may be very slow.\n\nImpact summary: Applications that use OBJ_obj2txt() directly, or use any of\nthe OpenSSL subsystems OCSP, PKCS7/SMIME, CMS, CMP/CRMF or TS with no message\nsize limit may experience notable to very long delays when processing those\nmessages, which may lead to a Denial of Service.\n\nAn OBJECT IDENTIFIER is composed of a series of numbers - sub-identifiers -\nmost of which have no size limit.  OBJ_obj2txt() may be used to translate\nan ASN.1 OBJECT IDENTIFIER given in DER encoding form (using the OpenSSL\ntype ASN1_OBJECT) to its canonical numeric text form, which are the\nsub-identifiers of the OBJECT IDENTIFIER in decimal form, separated by\nperiods.\n\nWhen one of the sub-identifiers in the OBJECT IDENTIFIER is very large\n(these are sizes that are seen as absurdly large, taking up tens or hundreds\nof KiBs), the translation to a decimal number in text may take a very long\ntime.  The time complexity is O(n^2) with 'n' being the size of the\nsub-identifiers in bytes (*).\n\nWith OpenSSL 3.0, support to fetch cryptographic algorithms using names /\nidentifiers in string form was introduced.  This includes using OBJECT\nIDENTIFIERs in canonical numeric text form as identifiers for fetching\nalgorithms.\n\nSuch OBJECT IDENTIFIERs may be received through the ASN.1 structure\nAlgorithmIdentifier, which is commonly used in multiple protocols to specify\nwhat cryptographic algorithm should be used to sign or verify, encrypt or\ndecrypt, or digest passed data.\n\nApplications that call OBJ_obj2txt() directly with untrusted data are\naffected, with any version of OpenSSL.  If the use is for the mere purpose\nof display, the severity is considered low.\n\nIn OpenSSL 3.0 and newer, this affects the subsystems OCSP, PKCS7/SMIME,\nCMS, CMP/CRMF or TS.  It also impacts anything that processes X.509\ncertificates, including simple things like verifying its signature.\n\nThe impact on TLS is relatively low, because all versions of OpenSSL have a\n100KiB limit on the peer's certificate chain.  Additionally, this only\nimpacts clients, or servers that have explicitly enabled client\nauthentication.\n\nIn OpenSSL 1.1.1 and 1.0.2, this only affects displaying diverse objects,\nsuch as X.509 certificates.  This is assumed to not happen in such a way\nthat it would cause a Denial of Service, so these versions are considered\nnot affected by this issue in such a way that it would be cause for concern,\nand the severity is therefore considered low.",
-              'diffID':        'sha256:5e03d8cae8773cb694fff1d55da34a40d23c2349087ed15ce68476395d33753c',
-              'fixedVersions': [
-                '1.1.1u-r0'
-              ],
-              'installedVersion': '1.1.1n-r0',
-              'packageName':      'libcrypto1.1',
-              'purl':             'pkg:apk/alpine/libcrypto1.1@1.1.1n-r0?arch=x86_64&distro=3.15.1',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2023/05/30/1',
-                'https://access.redhat.com/errata/RHSA-2023:6330',
-                'https://access.redhat.com/security/cve/CVE-2023-2650',
-                'https://bugzilla.redhat.com/1858038',
-                'https://bugzilla.redhat.com/2207947',
-                'https://errata.almalinux.org/9/ALSA-2023-6330.html',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=423a2bc737a908ad0c77bda470b2b59dc879936b',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=853c5e56ee0b8650c73140816bb8b91d6163422c',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=9e209944b35cf82368071f160a744b6178f9b098',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=db779b0e10b047f2585615e0b8f2acdf21f8544a',
-                'https://linux.oracle.com/cve/CVE-2023-2650.html',
-                'https://linux.oracle.com/errata/ELSA-2023-6330.html',
-                'https://lists.debian.org/debian-lts-announce/2023/06/msg00011.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-2650',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0009',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://security.netapp.com/advisory/ntap-20230703-0001/',
-                'https://security.netapp.com/advisory/ntap-20231027-0009/',
-                'https://ubuntu.com/security/notices/USN-6119-1',
-                'https://ubuntu.com/security/notices/USN-6188-1',
-                'https://ubuntu.com/security/notices/USN-6672-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-2650',
-                'https://www.debian.org/security/2023/dsa-5417',
-                'https://www.openssl.org/news/secadv/20230530.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: Possible DoS translating ASN.1 object identifiers'
-            },
-            {
-              'cve':  'CVE-2023-3446',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L'
-                },
-                'redhat': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L'
-                }
-              },
-              'cwes': [
-                'CWE-606',
-                'CWE-1333'
-              ],
-              'description':   "Issue summary: Checking excessively long DH keys or parameters may be very slow.\n\nImpact summary: Applications that use the functions DH_check(), DH_check_ex()\nor EVP_PKEY_param_check() to check a DH key or DH parameters may experience long\ndelays. Where the key or parameters that are being checked have been obtained\nfrom an untrusted source this may lead to a Denial of Service.\n\nThe function DH_check() performs various checks on DH parameters. One of those\nchecks confirms that the modulus ('p' parameter) is not too large. Trying to use\na very large modulus is slow and OpenSSL will not normally use a modulus which\nis over 10,000 bits in length.\n\nHowever the DH_check() function checks numerous aspects of the key or parameters\nthat have been supplied. Some of those checks use the supplied modulus value\neven if it has already been found to be too large.\n\nAn application that calls DH_check() and supplies a key or parameters obtained\nfrom an untrusted source could be vulernable to a Denial of Service attack.\n\nThe function DH_check() is itself called by a number of other OpenSSL functions.\nAn application calling any of those other functions may similarly be affected.\nThe other functions affected by this are DH_check_ex() and\nEVP_PKEY_param_check().\n\nAlso vulnerable are the OpenSSL dhparam and pkeyparam command line applications\nwhen using the '-check' option.\n\nThe OpenSSL SSL/TLS implementation is not affected by this issue.\nThe OpenSSL 3.0 and 3.1 FIPS providers are not affected by this issue.",
-              'diffID':        'sha256:5e03d8cae8773cb694fff1d55da34a40d23c2349087ed15ce68476395d33753c',
-              'fixedVersions': [
-                '1.1.1u-r2'
-              ],
-              'installedVersion': '1.1.1n-r0',
-              'packageName':      'libcrypto1.1',
-              'purl':             'pkg:apk/alpine/libcrypto1.1@1.1.1n-r0?arch=x86_64&distro=3.15.1',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2023/07/19/4',
-                'http://www.openwall.com/lists/oss-security/2023/07/19/5',
-                'http://www.openwall.com/lists/oss-security/2023/07/19/6',
-                'http://www.openwall.com/lists/oss-security/2023/07/31/1',
-                'http://www.openwall.com/lists/oss-security/2024/05/16/1',
-                'https://access.redhat.com/errata/RHSA-2024:2447',
-                'https://access.redhat.com/security/cve/CVE-2023-3446',
-                'https://bugzilla.redhat.com/2223016',
-                'https://bugzilla.redhat.com/2224962',
-                'https://bugzilla.redhat.com/2227852',
-                'https://bugzilla.redhat.com/2248616',
-                'https://bugzilla.redhat.com/2257571',
-                'https://bugzilla.redhat.com/2258502',
-                'https://bugzilla.redhat.com/2259944',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2224962',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2257582',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2257583',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2258677',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2258688',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2258691',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2258694',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2258700',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-36763',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-36764',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3446',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45229',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45231',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45232',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45233',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45235',
-                'https://errata.almalinux.org/9/ALSA-2024-2447.html',
-                'https://errata.rockylinux.org/RLSA-2024:2264',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=1fa20cf2f506113c761777127a38bce5068740eb',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=8780a896543a654e757db1b9396383f9d8095528',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=9a0a4d3c1e7138915563c0df4fe6a3f9377b839c',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=fc9867c1e03c22ebf56943be205202e576aabf23',
-                'https://linux.oracle.com/cve/CVE-2023-3446.html',
-                'https://linux.oracle.com/errata/ELSA-2024-2447.html',
-                'https://lists.debian.org/debian-lts-announce/2023/08/msg00019.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-3446',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://security.netapp.com/advisory/ntap-20230803-0011/',
-                'https://ubuntu.com/security/notices/USN-6435-1',
-                'https://ubuntu.com/security/notices/USN-6435-2',
-                'https://ubuntu.com/security/notices/USN-6450-1',
-                'https://ubuntu.com/security/notices/USN-6709-1',
-                'https://ubuntu.com/security/notices/USN-7018-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-3446',
-                'https://www.openssl.org/news/secadv/20230719.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: Excessive time spent checking DH keys and parameters'
-            },
-            {
-              'cve':  'CVE-2023-3817',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L'
-                },
-                'redhat': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L'
-                }
-              },
-              'cwes': [
-                'CWE-606',
-                'CWE-834'
-              ],
-              'description':   'Issue summary: Checking excessively long DH keys or parameters may be very slow.\n\nImpact summary: Applications that use the functions DH_check(), DH_check_ex()\nor EVP_PKEY_param_check() to check a DH key or DH parameters may experience long\ndelays. Where the key or parameters that are being checked have been obtained\nfrom an untrusted source this may lead to a Denial of Service.\n\nThe function DH_check() performs various checks on DH parameters. After fixing\nCVE-2023-3446 it was discovered that a large q parameter value can also trigger\nan overly long computation during some of these checks. A correct q value,\nif present, cannot be larger than the modulus p parameter, thus it is\nunnecessary to perform these checks if q is larger than p.\n\nAn application that calls DH_check() and supplies a key or parameters obtained\nfrom an untrusted source could be vulnerable to a Denial of Service attack.\n\nThe function DH_check() is itself called by a number of other OpenSSL functions.\nAn application calling any of those other functions may similarly be affected.\nThe other functions affected by this are DH_check_ex() and\nEVP_PKEY_param_check().\n\nAlso vulnerable are the OpenSSL dhparam and pkeyparam command line applications\nwhen using the "-check" option.\n\nThe OpenSSL SSL/TLS implementation is not affected by this issue.\n\nThe OpenSSL 3.0 and 3.1 FIPS providers are not affected by this issue.',
-              'diffID':        'sha256:5e03d8cae8773cb694fff1d55da34a40d23c2349087ed15ce68476395d33753c',
-              'fixedVersions': [
-                '1.1.1v-r0'
-              ],
-              'installedVersion': '1.1.1n-r0',
-              'packageName':      'libcrypto1.1',
-              'purl':             'pkg:apk/alpine/libcrypto1.1@1.1.1n-r0?arch=x86_64&distro=3.15.1',
-              'references':       [
-                'http://seclists.org/fulldisclosure/2023/Jul/43',
-                'http://www.openwall.com/lists/oss-security/2023/07/31/1',
-                'http://www.openwall.com/lists/oss-security/2023/09/22/11',
-                'http://www.openwall.com/lists/oss-security/2023/09/22/9',
-                'http://www.openwall.com/lists/oss-security/2023/11/06/2',
-                'https://access.redhat.com/errata/RHSA-2024:2447',
-                'https://access.redhat.com/security/cve/CVE-2023-3817',
-                'https://bugzilla.redhat.com/2223016',
-                'https://bugzilla.redhat.com/2224962',
-                'https://bugzilla.redhat.com/2227852',
-                'https://bugzilla.redhat.com/2248616',
-                'https://bugzilla.redhat.com/2257571',
-                'https://bugzilla.redhat.com/2258502',
-                'https://bugzilla.redhat.com/2259944',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2224962',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2227852',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2248616',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2270358',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3446',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3817',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-5678',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-2408',
-                'https://errata.almalinux.org/9/ALSA-2024-2447.html',
-                'https://errata.rockylinux.org/RLSA-2023:7877',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=6a1eb62c29db6cb5eec707f9338aee00f44e26f5',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=869ad69aadd985c7b8ca6f4e5dd0eb274c9f3644',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=9002fd07327a91f35ba6c1307e71fa6fd4409b7f',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=91ddeba0f2269b017dc06c46c993a788974b1aa5',
-                'https://linux.oracle.com/cve/CVE-2023-3817.html',
-                'https://linux.oracle.com/errata/ELSA-2024-2447.html',
-                'https://lists.debian.org/debian-lts-announce/2023/08/msg00019.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-3817',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://security.netapp.com/advisory/ntap-20230818-0014/',
-                'https://security.netapp.com/advisory/ntap-20231027-0008/',
-                'https://security.netapp.com/advisory/ntap-20240621-0006/',
-                'https://ubuntu.com/security/notices/USN-6435-1',
-                'https://ubuntu.com/security/notices/USN-6435-2',
-                'https://ubuntu.com/security/notices/USN-6450-1',
-                'https://ubuntu.com/security/notices/USN-6709-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-3817',
-                'https://www.openssl.org/news/secadv/20230731.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'OpenSSL: Excessive time spent checking DH q parameter value'
-            },
-            {
-              'cve':  'CVE-2023-5678',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L'
-                },
-                'redhat': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L'
-                }
-              },
-              'cwes': [
-                'CWE-606',
-                'CWE-754'
-              ],
-              'description':   "Issue summary: Generating excessively long X9.42 DH keys or checking\nexcessively long X9.42 DH keys or parameters may be very slow.\n\nImpact summary: Applications that use the functions DH_generate_key() to\ngenerate an X9.42 DH key may experience long delays.  Likewise, applications\nthat use DH_check_pub_key(), DH_check_pub_key_ex() or EVP_PKEY_public_check()\nto check an X9.42 DH key or X9.42 DH parameters may experience long delays.\nWhere the key or parameters that are being checked have been obtained from\nan untrusted source this may lead to a Denial of Service.\n\nWhile DH_check() performs all the necessary checks (as of CVE-2023-3817),\nDH_check_pub_key() doesn't make any of these checks, and is therefore\nvulnerable for excessively large P and Q parameters.\n\nLikewise, while DH_generate_key() performs a check for an excessively large\nP, it doesn't check for an excessively large Q.\n\nAn application that calls DH_generate_key() or DH_check_pub_key() and\nsupplies a key or parameters obtained from an untrusted source could be\nvulnerable to a Denial of Service attack.\n\nDH_generate_key() and DH_check_pub_key() are also called by a number of\nother OpenSSL functions.  An application calling any of those other\nfunctions may similarly be affected.  The other functions affected by this\nare DH_check_pub_key_ex(), EVP_PKEY_public_check(), and EVP_PKEY_generate().\n\nAlso vulnerable are the OpenSSL pkey command line application when using the\n\"-pubcheck\" option, as well as the OpenSSL genpkey command line application.\n\nThe OpenSSL SSL/TLS implementation is not affected by this issue.\n\nThe OpenSSL 3.0 and 3.1 FIPS providers are not affected by this issue.",
-              'diffID':        'sha256:5e03d8cae8773cb694fff1d55da34a40d23c2349087ed15ce68476395d33753c',
-              'fixedVersions': [
-                '1.1.1w-r1'
-              ],
-              'installedVersion': '1.1.1n-r0',
-              'packageName':      'libcrypto1.1',
-              'purl':             'pkg:apk/alpine/libcrypto1.1@1.1.1n-r0?arch=x86_64&distro=3.15.1',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2024/03/11/1',
-                'https://access.redhat.com/errata/RHSA-2024:2447',
-                'https://access.redhat.com/security/cve/CVE-2023-5678',
-                'https://bugzilla.redhat.com/2223016',
-                'https://bugzilla.redhat.com/2224962',
-                'https://bugzilla.redhat.com/2227852',
-                'https://bugzilla.redhat.com/2248616',
-                'https://bugzilla.redhat.com/2257571',
-                'https://bugzilla.redhat.com/2258502',
-                'https://bugzilla.redhat.com/2259944',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2224962',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2227852',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2248616',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2270358',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3446',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3817',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-5678',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-2408',
-                'https://errata.almalinux.org/9/ALSA-2024-2447.html',
-                'https://errata.rockylinux.org/RLSA-2023:7877',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=34efaef6c103d636ab507a0cc34dca4d3aecc055',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=710fee740904b6290fef0dd5536fbcedbc38ff0c',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=db925ae2e65d0d925adef429afc37f75bd1c2017',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=ddeb4b6c6d527e54ce9a99cba785c0f7776e54b6',
-                'https://linux.oracle.com/cve/CVE-2023-5678.html',
-                'https://linux.oracle.com/errata/ELSA-2024-2447.html',
-                'https://lists.debian.org/debian-lts-announce/2024/10/msg00033.html',
-                'https://lists.debian.org/debian-lts-announce/2024/11/msg00000.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-5678',
-                'https://security.netapp.com/advisory/ntap-20231130-0010/',
-                'https://ubuntu.com/security/notices/USN-6622-1',
-                'https://ubuntu.com/security/notices/USN-6632-1',
-                'https://ubuntu.com/security/notices/USN-6709-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-5678',
-                'https://www.openssl.org/news/secadv/20231106.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: Generating excessively long X9.42 DH keys or checking excessively long X9.42 DH keys or parameters may be very slow'
-            },
-            {
-              'cve':  'CVE-2022-4450',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'nvd': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-415'
-              ],
-              'description':   'The function PEM_read_bio_ex() reads a PEM file from a BIO and parses and\ndecodes the "name" (e.g. "CERTIFICATE"), any header data and the payload data.\nIf the function succeeds then the "name_out", "header" and "data" arguments are\npopulated with pointers to buffers containing the relevant decoded data. The\ncaller is responsible for freeing those buffers. It is possible to construct a\nPEM file that results in 0 bytes of payload data. In this case PEM_read_bio_ex()\nwill return a failure code but will populate the header argument with a pointer\nto a buffer that has already been freed. If the caller also frees this buffer\nthen a double free will occur. This will most likely lead to a crash. This\ncould be exploited by an attacker who has the ability to supply malicious PEM\nfiles for parsing to achieve a denial of service attack.\n\nThe functions PEM_read_bio() and PEM_read() are simple wrappers around\nPEM_read_bio_ex() and therefore these functions are also directly affected.\n\nThese functions are also called indirectly by a number of other OpenSSL\nfunctions including PEM_X509_INFO_read_bio_ex() and\nSSL_CTX_use_serverinfo_file() which are also vulnerable. Some OpenSSL internal\nuses of these functions are not vulnerable because the caller does not free the\nheader argument if PEM_read_bio_ex() returns a failure code. These locations\ninclude the PEM_read_bio_TYPE() functions as well as the decoders introduced in\nOpenSSL 3.0.\n\nThe OpenSSL asn1parse command line application is also impacted by this issue.',
-              'diffID':        'sha256:5e03d8cae8773cb694fff1d55da34a40d23c2349087ed15ce68476395d33753c',
-              'fixedVersions': [
-                '1.1.1t-r0'
-              ],
-              'installedVersion': '1.1.1n-r0',
-              'packageName':      'libssl1.1',
-              'purl':             'pkg:apk/alpine/libssl1.1@1.1.1n-r0?arch=x86_64&distro=3.15.1',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2023:2165',
-                'https://access.redhat.com/security/cve/CVE-2022-4450',
-                'https://bugzilla.redhat.com/1960321',
-                'https://bugzilla.redhat.com/2164440',
-                'https://bugzilla.redhat.com/2164487',
-                'https://bugzilla.redhat.com/2164492',
-                'https://bugzilla.redhat.com/2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144000',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144003',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144006',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144008',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144010',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144012',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144015',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144017',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144019',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2145170',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2158412',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164440',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164487',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164488',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164492',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164497',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164499',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164500',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4203',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4304',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4450',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0215',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0216',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0217',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0286',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0401',
-                'https://errata.almalinux.org/9/ALSA-2023-2165.html',
-                'https://errata.rockylinux.org/RLSA-2023:0946',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=63bcf189be73a9cc1264059bed6f57974be74a83',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=bbcf509bd046b34cca19c766bbddc31683d0858b',
-                'https://linux.oracle.com/cve/CVE-2022-4450.html',
-                'https://linux.oracle.com/errata/ELSA-2023-32791.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2022-4450',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0003',
-                'https://rustsec.org/advisories/RUSTSEC-2023-0010.html',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://ubuntu.com/security/notices/USN-5844-1',
-                'https://ubuntu.com/security/notices/USN-6564-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2022-4450',
-                'https://www.openssl.org/news/secadv/20230207.txt'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: double free after calling PEM_read_bio_ex'
-            },
-            {
-              'cve':  'CVE-2023-0215',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'nvd': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   'The public API function BIO_new_NDEF is a helper function used for streaming\nASN.1 data via a BIO. It is primarily used internally to OpenSSL to support the\nSMIME, CMS and PKCS7 streaming capabilities, but may also be called directly by\nend user applications.\n\nThe function receives a BIO from the caller, prepends a new BIO_f_asn1 filter\nBIO onto the front of it to form a BIO chain, and then returns the new head of\nthe BIO chain to the caller. Under certain conditions, for example if a CMS\nrecipient public key is invalid, the new filter BIO is freed and the function\nreturns a NULL result indicating a failure. However, in this case, the BIO chain\nis not properly cleaned up and the BIO passed by the caller still retains\ninternal pointers to the previously freed filter BIO. If the caller then goes on\nto call BIO_pop() on the BIO then a use-after-free will occur. This will most\nlikely result in a crash.\n\n\n\nThis scenario occurs directly in the internal function B64_write_ASN1() which\nmay cause BIO_new_NDEF() to be called and will subsequently call BIO_pop() on\nthe BIO. This internal function is in turn called by the public API functions\nPEM_write_bio_ASN1_stream, PEM_write_bio_CMS_stream, PEM_write_bio_PKCS7_stream,\nSMIME_write_ASN1, SMIME_write_CMS and SMIME_write_PKCS7.\n\nOther public API functions that may be impacted by this include\ni2d_ASN1_bio_stream, BIO_new_CMS, BIO_new_PKCS7, i2d_CMS_bio_stream and\ni2d_PKCS7_bio_stream.\n\nThe OpenSSL cms and smime command line applications are similarly affected.',
-              'diffID':        'sha256:5e03d8cae8773cb694fff1d55da34a40d23c2349087ed15ce68476395d33753c',
-              'fixedVersions': [
-                '1.1.1t-r0'
-              ],
-              'installedVersion': '1.1.1n-r0',
-              'packageName':      'libssl1.1',
-              'purl':             'pkg:apk/alpine/libssl1.1@1.1.1n-r0?arch=x86_64&distro=3.15.1',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2023:2165',
-                'https://access.redhat.com/security/cve/CVE-2023-0215',
-                'https://bugzilla.redhat.com/1960321',
-                'https://bugzilla.redhat.com/2164440',
-                'https://bugzilla.redhat.com/2164487',
-                'https://bugzilla.redhat.com/2164492',
-                'https://bugzilla.redhat.com/2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144000',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144003',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144006',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144008',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144010',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144012',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144015',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144017',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144019',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2145170',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2158412',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164440',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164487',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164488',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164492',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164497',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164499',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164500',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4203',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4304',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4450',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0215',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0216',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0217',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0286',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0401',
-                'https://errata.almalinux.org/9/ALSA-2023-2165.html',
-                'https://errata.rockylinux.org/RLSA-2023:0946',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=8818064ce3c3c0f1b740a5aaba2a987e75bfbafd',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=9816136fe31d92ace4037d5da5257f763aeeb4eb',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=c3829dd8825c654652201e16f8a0a0c46ee3f344',
-                'https://linux.oracle.com/cve/CVE-2023-0215.html',
-                'https://linux.oracle.com/errata/ELSA-2023-32791.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-0215',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0003',
-                'https://rustsec.org/advisories/RUSTSEC-2023-0009.html',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://security.netapp.com/advisory/ntap-20230427-0007',
-                'https://security.netapp.com/advisory/ntap-20230427-0007/',
-                'https://security.netapp.com/advisory/ntap-20230427-0009',
-                'https://security.netapp.com/advisory/ntap-20230427-0009/',
-                'https://security.netapp.com/advisory/ntap-20240621-0006',
-                'https://security.netapp.com/advisory/ntap-20240621-0006/',
-                'https://ubuntu.com/security/notices/USN-5844-1',
-                'https://ubuntu.com/security/notices/USN-5845-1',
-                'https://ubuntu.com/security/notices/USN-5845-2',
-                'https://ubuntu.com/security/notices/USN-6564-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-0215',
-                'https://www.openssl.org/news/secadv/20230207.txt'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: use-after-free following BIO_new_NDEF'
-            },
-            {
-              'cve':  'CVE-2023-0286',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '7.4',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H'
-                },
-                'nvd': {
-                  'v3score':  '7.4',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.4',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-843'
-              ],
-              'description':   'There is a type confusion vulnerability relating to X.400 address processing\ninside an X.509 GeneralName. X.400 addresses were parsed as an ASN1_STRING but\nthe public structure definition for GENERAL_NAME incorrectly specified the type\nof the x400Address field as ASN1_TYPE. This field is subsequently interpreted by\nthe OpenSSL function GENERAL_NAME_cmp as an ASN1_TYPE rather than an\nASN1_STRING.\n\nWhen CRL checking is enabled (i.e. the application sets the\nX509_V_FLAG_CRL_CHECK flag), this vulnerability may allow an attacker to pass\narbitrary pointers to a memcmp call, enabling them to read memory contents or\nenact a denial of service. In most cases, the attack requires the attacker to\nprovide both the certificate chain and CRL, neither of which need to have a\nvalid signature. If the attacker only controls one of these inputs, the other\ninput must already contain an X.400 address as a CRL distribution point, which\nis uncommon. As such, this vulnerability is most likely to only affect\napplications which have implemented their own functionality for retrieving CRLs\nover a network.',
-              'diffID':        'sha256:5e03d8cae8773cb694fff1d55da34a40d23c2349087ed15ce68476395d33753c',
-              'fixedVersions': [
-                '1.1.1t-r0'
-              ],
-              'installedVersion': '1.1.1n-r0',
-              'packageName':      'libssl1.1',
-              'purl':             'pkg:apk/alpine/libssl1.1@1.1.1n-r0?arch=x86_64&distro=3.15.1',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2025:7937',
-                'https://access.redhat.com/security/cve/CVE-2023-0286',
-                'https://access.redhat.com/security/cve/cve-2023-0286',
-                'https://bugzilla.redhat.com/2164440',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144000',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144003',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144006',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144008',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144010',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144012',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144015',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144017',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144019',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2145170',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2158412',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164440',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164487',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164488',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164492',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164497',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164499',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164500',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4203',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4304',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4450',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0215',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0216',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0217',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0286',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0401',
-                'https://errata.almalinux.org/9/ALSA-2025-7937.html',
-                'https://errata.rockylinux.org/RLSA-2023:0946',
-                'https://ftp.openbsd.org/pub/OpenBSD/LibreSSL/libressl-3.6.2-relnotes.txt',
-                'https://ftp.openbsd.org/pub/OpenBSD/patches/7.2/common/018_x509.patch.sig',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=2c6c9d439b484e1ba9830d8454a34fa4f80fdfe9',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=2f7530077e0ef79d98718138716bc51ca0cad658',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=fd2af07dc083a350c959147097003a14a5e8ac4d',
-                'https://github.com/pyca/cryptography',
-                'https://github.com/pyca/cryptography/security/advisories/GHSA-x4qr-2fvf-3mr5',
-                'https://linux.oracle.com/cve/CVE-2023-0286.html',
-                'https://linux.oracle.com/errata/ELSA-2025-7937.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-0286',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0003',
-                'https://rustsec.org/advisories/RUSTSEC-2023-0006.html',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://ubuntu.com/security/notices/USN-5844-1',
-                'https://ubuntu.com/security/notices/USN-5845-1',
-                'https://ubuntu.com/security/notices/USN-5845-2',
-                'https://ubuntu.com/security/notices/USN-6564-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-0286',
-                'https://www.openssl.org/news/secadv/20230207.txt'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: X.400 address type confusion in X.509 GeneralName'
-            },
-            {
-              'cve':  'CVE-2023-0464',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-295'
-              ],
-              'description':   "A security vulnerability has been identified in all supported versions\n\nof OpenSSL related to the verification of X.509 certificate chains\nthat include policy constraints.  Attackers may be able to exploit this\nvulnerability by creating a malicious certificate chain that triggers\nexponential use of computational resources, leading to a denial-of-service\n(DoS) attack on affected systems.\n\nPolicy processing is disabled by default but can be enabled by passing\nthe `-policy' argument to the command line utilities or by calling the\n`X509_VERIFY_PARAM_set1_policies()' function.",
-              'diffID':        'sha256:5e03d8cae8773cb694fff1d55da34a40d23c2349087ed15ce68476395d33753c',
-              'fixedVersions': [
-                '1.1.1t-r2'
-              ],
-              'installedVersion': '1.1.1n-r0',
-              'packageName':      'libssl1.1',
-              'purl':             'pkg:apk/alpine/libssl1.1@1.1.1n-r0?arch=x86_64&distro=3.15.1',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2023:3722',
-                'https://access.redhat.com/security/cve/CVE-2023-0464',
-                'https://bugzilla.redhat.com/2181082',
-                'https://bugzilla.redhat.com/2182561',
-                'https://bugzilla.redhat.com/2182565',
-                'https://bugzilla.redhat.com/2188461',
-                'https://bugzilla.redhat.com/2207947',
-                'https://errata.almalinux.org/9/ALSA-2023-3722.html',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=2017771e2db3e2b96f89bbe8766c3209f6a99545',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=2dcd4f1e3115f38cefa43e3efbe9b801c27e642e',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=879f7080d7e141f415c79eaa3a8ac4a3dad0348b',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=959c59c7a0164117e7f8366466a32bb1f8d77ff1',
-                'https://linux.oracle.com/cve/CVE-2023-0464.html',
-                'https://linux.oracle.com/errata/ELSA-2023-3722.html',
-                'https://lists.debian.org/debian-lts-announce/2023/06/msg00011.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-0464',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://security.netapp.com/advisory/ntap-20230406-0006/',
-                'https://security.netapp.com/advisory/ntap-20240621-0006/',
-                'https://ubuntu.com/security/notices/USN-6039-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.couchbase.com/alerts/',
-                'https://www.cve.org/CVERecord?id=CVE-2023-0464',
-                'https://www.debian.org/security/2023/dsa-5417',
-                'https://www.openssl.org/news/secadv/20230322.txt'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: Denial of service by excessive resource usage in verifying X509 policy constraints'
-            },
-            {
-              'cve':  'CVE-2022-2097',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N'
-                },
-                'nvd': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N'
-                },
-                'redhat': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-327'
-              ],
-              'description':   "AES OCB mode for 32-bit x86 platforms using the AES-NI assembly optimised implementation will not encrypt the entirety of the data under some circumstances. This could reveal sixteen bytes of data that was preexisting in the memory that wasn't written. In the special case of \"in place\" encryption, sixteen bytes of the plaintext would be revealed. Since OpenSSL does not support OCB based cipher suites for TLS and DTLS, they are both unaffected. Fixed in OpenSSL 3.0.5 (Affected 3.0.0-3.0.4). Fixed in OpenSSL 1.1.1q (Affected 1.1.1-1.1.1p).",
-              'diffID':        'sha256:5e03d8cae8773cb694fff1d55da34a40d23c2349087ed15ce68476395d33753c',
-              'fixedVersions': [
-                '1.1.1q-r0'
-              ],
-              'installedVersion': '1.1.1n-r0',
-              'packageName':      'libssl1.1',
-              'purl':             'pkg:apk/alpine/libssl1.1@1.1.1n-r0?arch=x86_64&distro=3.15.1',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2022:6224',
-                'https://access.redhat.com/security/cve/CVE-2022-2097',
-                'https://bugzilla.redhat.com/2081494',
-                'https://bugzilla.redhat.com/2087911',
-                'https://bugzilla.redhat.com/2087913',
-                'https://bugzilla.redhat.com/2097310',
-                'https://bugzilla.redhat.com/2104905',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2081494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2097310',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2100554',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2104905',
-                'https://cert-portal.siemens.com/productcert/pdf/ssa-332410.pdf',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-1292',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-2068',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-2097',
-                'https://errata.almalinux.org/9/ALSA-2022-6224.html',
-                'https://errata.rockylinux.org/RLSA-2022:5818',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=919925673d6c9cfed3c1085497f5dfbbed5fc431',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=a98f339ddd7e8f487d6e0088d4a9a42324885a93',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=919925673d6c9cfed3c1085497f5dfbbed5fc431',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=a98f339ddd7e8f487d6e0088d4a9a42324885a93',
-                'https://github.com/alexcrichton/openssl-src-rs',
-                'https://linux.oracle.com/cve/CVE-2022-2097.html',
-                'https://linux.oracle.com/errata/ELSA-2022-9955.html',
-                'https://lists.debian.org/debian-lts-announce/2023/02/msg00019.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/R6CK57NBQFTPUMXAPJURCGXUYT76NQAK',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/R6CK57NBQFTPUMXAPJURCGXUYT76NQAK/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/V6567JERRHHJW2GNGJGKDRNHR7SNPZK7',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/V6567JERRHHJW2GNGJGKDRNHR7SNPZK7/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VCMNWKERPBKOEBNL7CLTTX3ZZCZLH7XA',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VCMNWKERPBKOEBNL7CLTTX3ZZCZLH7XA/',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/R6CK57NBQFTPUMXAPJURCGXUYT76NQAK',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/R6CK57NBQFTPUMXAPJURCGXUYT76NQAK/',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/V6567JERRHHJW2GNGJGKDRNHR7SNPZK7',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/V6567JERRHHJW2GNGJGKDRNHR7SNPZK7/',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/VCMNWKERPBKOEBNL7CLTTX3ZZCZLH7XA',
-                'https://nvd.nist.gov/vuln/detail/CVE-2022-2097',
-                'https://rustsec.org/advisories/RUSTSEC-2022-0032.html',
-                'https://security.gentoo.org/glsa/202210-02',
-                'https://security.netapp.com/advisory/ntap-20220715-0011',
-                'https://security.netapp.com/advisory/ntap-20220715-0011/',
-                'https://security.netapp.com/advisory/ntap-20230420-0008',
-                'https://security.netapp.com/advisory/ntap-20230420-0008/',
-                'https://security.netapp.com/advisory/ntap-20240621-0006',
-                'https://security.netapp.com/advisory/ntap-20240621-0006/',
-                'https://ubuntu.com/security/notices/USN-5502-1',
-                'https://ubuntu.com/security/notices/USN-6457-1',
-                'https://www.cve.org/CVERecord?id=CVE-2022-2097',
-                'https://www.debian.org/security/2023/dsa-5343',
-                'https://www.openssl.org/news/secadv/20220705.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: AES OCB fails to encrypt some bytes'
-            },
-            {
-              'cve':  'CVE-2022-4304',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N'
-                },
-                'nvd': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N'
-                },
-                'redhat': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-203'
-              ],
-              'description':   'A timing based side channel exists in the OpenSSL RSA Decryption implementation\nwhich could be sufficient to recover a plaintext across a network in a\nBleichenbacher style attack. To achieve a successful decryption an attacker\nwould have to be able to send a very large number of trial messages for\ndecryption. The vulnerability affects all RSA padding modes: PKCS#1 v1.5,\nRSA-OEAP and RSASVE.\n\nFor example, in a TLS connection, RSA is commonly used by a client to send an\nencrypted pre-master secret to the server. An attacker that had observed a\ngenuine connection between a client and a server could use this flaw to send\ntrial messages to the server and record the time taken to process them. After a\nsufficiently large number of messages the attacker could recover the pre-master\nsecret used for the original connection and thus be able to decrypt the\napplication data sent over that connection.',
-              'diffID':        'sha256:5e03d8cae8773cb694fff1d55da34a40d23c2349087ed15ce68476395d33753c',
-              'fixedVersions': [
-                '1.1.1t-r0'
-              ],
-              'installedVersion': '1.1.1n-r0',
-              'packageName':      'libssl1.1',
-              'purl':             'pkg:apk/alpine/libssl1.1@1.1.1n-r0?arch=x86_64&distro=3.15.1',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2023:2165',
-                'https://access.redhat.com/security/cve/CVE-2022-4304',
-                'https://bugzilla.redhat.com/1960321',
-                'https://bugzilla.redhat.com/2164440',
-                'https://bugzilla.redhat.com/2164487',
-                'https://bugzilla.redhat.com/2164492',
-                'https://bugzilla.redhat.com/2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144000',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144003',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144006',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144008',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144010',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144012',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144015',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144017',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144019',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2145170',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2158412',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164440',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164487',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164488',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164492',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164497',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164499',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164500',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4203',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4304',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4450',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0215',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0216',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0217',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0286',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0401',
-                'https://errata.almalinux.org/9/ALSA-2023-2165.html',
-                'https://errata.rockylinux.org/RLSA-2023:0946',
-                'https://linux.oracle.com/cve/CVE-2022-4304.html',
-                'https://linux.oracle.com/errata/ELSA-2023-32791.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2022-4304',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0003',
-                'https://rustsec.org/advisories/RUSTSEC-2023-0007.html',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://ubuntu.com/security/notices/USN-5844-1',
-                'https://ubuntu.com/security/notices/USN-6564-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2022-4304',
-                'https://www.openssl.org/news/secadv/20230207.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: timing attack in RSA Decryption implementation'
-            },
-            {
-              'cve':  'CVE-2023-0465',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N'
-                },
-                'redhat': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-295'
-              ],
-              'description':   "Applications that use a non-default option when verifying certificates may be\nvulnerable to an attack from a malicious CA to circumvent certain checks.\n\nInvalid certificate policies in leaf certificates are silently ignored by\nOpenSSL and other certificate policy checks are skipped for that certificate.\nA malicious CA could use this to deliberately assert invalid certificate policies\nin order to circumvent policy checking on the certificate altogether.\n\nPolicy processing is disabled by default but can be enabled by passing\nthe `-policy' argument to the command line utilities or by calling the\n`X509_VERIFY_PARAM_set1_policies()' function.",
-              'diffID':        'sha256:5e03d8cae8773cb694fff1d55da34a40d23c2349087ed15ce68476395d33753c',
-              'fixedVersions': [
-                '1.1.1t-r2'
-              ],
-              'installedVersion': '1.1.1n-r0',
-              'packageName':      'libssl1.1',
-              'purl':             'pkg:apk/alpine/libssl1.1@1.1.1n-r0?arch=x86_64&distro=3.15.1',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2023:3722',
-                'https://access.redhat.com/security/cve/CVE-2023-0465',
-                'https://bugzilla.redhat.com/2181082',
-                'https://bugzilla.redhat.com/2182561',
-                'https://bugzilla.redhat.com/2182565',
-                'https://bugzilla.redhat.com/2188461',
-                'https://bugzilla.redhat.com/2207947',
-                'https://errata.almalinux.org/9/ALSA-2023-3722.html',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=10325176f3d3e98c6e2b3bf5ab1e3b334de6947a',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=1dd43e0709fece299b15208f36cc7c76209ba0bb',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=b013765abfa80036dc779dd0e50602c57bb3bf95',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=facfb1ab745646e97a1920977ae4a9965ea61d5c',
-                'https://linux.oracle.com/cve/CVE-2023-0465.html',
-                'https://linux.oracle.com/errata/ELSA-2023-3722.html',
-                'https://lists.debian.org/debian-lts-announce/2023/06/msg00011.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-0465',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://security.netapp.com/advisory/ntap-20230414-0001/',
-                'https://ubuntu.com/security/notices/USN-6039-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-0465',
-                'https://www.debian.org/security/2023/dsa-5417',
-                'https://www.openssl.org/news/secadv/20230328.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: Invalid certificate policies in leaf certificates are silently ignored'
-            },
-            {
-              'cve':  'CVE-2023-2650',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '6.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-770'
-              ],
-              'description':   "Issue summary: Processing some specially crafted ASN.1 object identifiers or\ndata containing them may be very slow.\n\nImpact summary: Applications that use OBJ_obj2txt() directly, or use any of\nthe OpenSSL subsystems OCSP, PKCS7/SMIME, CMS, CMP/CRMF or TS with no message\nsize limit may experience notable to very long delays when processing those\nmessages, which may lead to a Denial of Service.\n\nAn OBJECT IDENTIFIER is composed of a series of numbers - sub-identifiers -\nmost of which have no size limit.  OBJ_obj2txt() may be used to translate\nan ASN.1 OBJECT IDENTIFIER given in DER encoding form (using the OpenSSL\ntype ASN1_OBJECT) to its canonical numeric text form, which are the\nsub-identifiers of the OBJECT IDENTIFIER in decimal form, separated by\nperiods.\n\nWhen one of the sub-identifiers in the OBJECT IDENTIFIER is very large\n(these are sizes that are seen as absurdly large, taking up tens or hundreds\nof KiBs), the translation to a decimal number in text may take a very long\ntime.  The time complexity is O(n^2) with 'n' being the size of the\nsub-identifiers in bytes (*).\n\nWith OpenSSL 3.0, support to fetch cryptographic algorithms using names /\nidentifiers in string form was introduced.  This includes using OBJECT\nIDENTIFIERs in canonical numeric text form as identifiers for fetching\nalgorithms.\n\nSuch OBJECT IDENTIFIERs may be received through the ASN.1 structure\nAlgorithmIdentifier, which is commonly used in multiple protocols to specify\nwhat cryptographic algorithm should be used to sign or verify, encrypt or\ndecrypt, or digest passed data.\n\nApplications that call OBJ_obj2txt() directly with untrusted data are\naffected, with any version of OpenSSL.  If the use is for the mere purpose\nof display, the severity is considered low.\n\nIn OpenSSL 3.0 and newer, this affects the subsystems OCSP, PKCS7/SMIME,\nCMS, CMP/CRMF or TS.  It also impacts anything that processes X.509\ncertificates, including simple things like verifying its signature.\n\nThe impact on TLS is relatively low, because all versions of OpenSSL have a\n100KiB limit on the peer's certificate chain.  Additionally, this only\nimpacts clients, or servers that have explicitly enabled client\nauthentication.\n\nIn OpenSSL 1.1.1 and 1.0.2, this only affects displaying diverse objects,\nsuch as X.509 certificates.  This is assumed to not happen in such a way\nthat it would cause a Denial of Service, so these versions are considered\nnot affected by this issue in such a way that it would be cause for concern,\nand the severity is therefore considered low.",
-              'diffID':        'sha256:5e03d8cae8773cb694fff1d55da34a40d23c2349087ed15ce68476395d33753c',
-              'fixedVersions': [
-                '1.1.1u-r0'
-              ],
-              'installedVersion': '1.1.1n-r0',
-              'packageName':      'libssl1.1',
-              'purl':             'pkg:apk/alpine/libssl1.1@1.1.1n-r0?arch=x86_64&distro=3.15.1',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2023/05/30/1',
-                'https://access.redhat.com/errata/RHSA-2023:6330',
-                'https://access.redhat.com/security/cve/CVE-2023-2650',
-                'https://bugzilla.redhat.com/1858038',
-                'https://bugzilla.redhat.com/2207947',
-                'https://errata.almalinux.org/9/ALSA-2023-6330.html',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=423a2bc737a908ad0c77bda470b2b59dc879936b',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=853c5e56ee0b8650c73140816bb8b91d6163422c',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=9e209944b35cf82368071f160a744b6178f9b098',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=db779b0e10b047f2585615e0b8f2acdf21f8544a',
-                'https://linux.oracle.com/cve/CVE-2023-2650.html',
-                'https://linux.oracle.com/errata/ELSA-2023-6330.html',
-                'https://lists.debian.org/debian-lts-announce/2023/06/msg00011.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-2650',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0009',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://security.netapp.com/advisory/ntap-20230703-0001/',
-                'https://security.netapp.com/advisory/ntap-20231027-0009/',
-                'https://ubuntu.com/security/notices/USN-6119-1',
-                'https://ubuntu.com/security/notices/USN-6188-1',
-                'https://ubuntu.com/security/notices/USN-6672-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-2650',
-                'https://www.debian.org/security/2023/dsa-5417',
-                'https://www.openssl.org/news/secadv/20230530.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: Possible DoS translating ASN.1 object identifiers'
-            },
-            {
-              'cve':  'CVE-2023-3446',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L'
-                },
-                'redhat': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L'
-                }
-              },
-              'cwes': [
-                'CWE-606',
-                'CWE-1333'
-              ],
-              'description':   "Issue summary: Checking excessively long DH keys or parameters may be very slow.\n\nImpact summary: Applications that use the functions DH_check(), DH_check_ex()\nor EVP_PKEY_param_check() to check a DH key or DH parameters may experience long\ndelays. Where the key or parameters that are being checked have been obtained\nfrom an untrusted source this may lead to a Denial of Service.\n\nThe function DH_check() performs various checks on DH parameters. One of those\nchecks confirms that the modulus ('p' parameter) is not too large. Trying to use\na very large modulus is slow and OpenSSL will not normally use a modulus which\nis over 10,000 bits in length.\n\nHowever the DH_check() function checks numerous aspects of the key or parameters\nthat have been supplied. Some of those checks use the supplied modulus value\neven if it has already been found to be too large.\n\nAn application that calls DH_check() and supplies a key or parameters obtained\nfrom an untrusted source could be vulernable to a Denial of Service attack.\n\nThe function DH_check() is itself called by a number of other OpenSSL functions.\nAn application calling any of those other functions may similarly be affected.\nThe other functions affected by this are DH_check_ex() and\nEVP_PKEY_param_check().\n\nAlso vulnerable are the OpenSSL dhparam and pkeyparam command line applications\nwhen using the '-check' option.\n\nThe OpenSSL SSL/TLS implementation is not affected by this issue.\nThe OpenSSL 3.0 and 3.1 FIPS providers are not affected by this issue.",
-              'diffID':        'sha256:5e03d8cae8773cb694fff1d55da34a40d23c2349087ed15ce68476395d33753c',
-              'fixedVersions': [
-                '1.1.1u-r2'
-              ],
-              'installedVersion': '1.1.1n-r0',
-              'packageName':      'libssl1.1',
-              'purl':             'pkg:apk/alpine/libssl1.1@1.1.1n-r0?arch=x86_64&distro=3.15.1',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2023/07/19/4',
-                'http://www.openwall.com/lists/oss-security/2023/07/19/5',
-                'http://www.openwall.com/lists/oss-security/2023/07/19/6',
-                'http://www.openwall.com/lists/oss-security/2023/07/31/1',
-                'http://www.openwall.com/lists/oss-security/2024/05/16/1',
-                'https://access.redhat.com/errata/RHSA-2024:2447',
-                'https://access.redhat.com/security/cve/CVE-2023-3446',
-                'https://bugzilla.redhat.com/2223016',
-                'https://bugzilla.redhat.com/2224962',
-                'https://bugzilla.redhat.com/2227852',
-                'https://bugzilla.redhat.com/2248616',
-                'https://bugzilla.redhat.com/2257571',
-                'https://bugzilla.redhat.com/2258502',
-                'https://bugzilla.redhat.com/2259944',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2224962',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2257582',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2257583',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2258677',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2258688',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2258691',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2258694',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2258700',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-36763',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-36764',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3446',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45229',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45231',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45232',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45233',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45235',
-                'https://errata.almalinux.org/9/ALSA-2024-2447.html',
-                'https://errata.rockylinux.org/RLSA-2024:2264',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=1fa20cf2f506113c761777127a38bce5068740eb',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=8780a896543a654e757db1b9396383f9d8095528',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=9a0a4d3c1e7138915563c0df4fe6a3f9377b839c',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=fc9867c1e03c22ebf56943be205202e576aabf23',
-                'https://linux.oracle.com/cve/CVE-2023-3446.html',
-                'https://linux.oracle.com/errata/ELSA-2024-2447.html',
-                'https://lists.debian.org/debian-lts-announce/2023/08/msg00019.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-3446',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://security.netapp.com/advisory/ntap-20230803-0011/',
-                'https://ubuntu.com/security/notices/USN-6435-1',
-                'https://ubuntu.com/security/notices/USN-6435-2',
-                'https://ubuntu.com/security/notices/USN-6450-1',
-                'https://ubuntu.com/security/notices/USN-6709-1',
-                'https://ubuntu.com/security/notices/USN-7018-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-3446',
-                'https://www.openssl.org/news/secadv/20230719.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: Excessive time spent checking DH keys and parameters'
-            },
-            {
-              'cve':  'CVE-2023-3817',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L'
-                },
-                'redhat': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L'
-                }
-              },
-              'cwes': [
-                'CWE-606',
-                'CWE-834'
-              ],
-              'description':   'Issue summary: Checking excessively long DH keys or parameters may be very slow.\n\nImpact summary: Applications that use the functions DH_check(), DH_check_ex()\nor EVP_PKEY_param_check() to check a DH key or DH parameters may experience long\ndelays. Where the key or parameters that are being checked have been obtained\nfrom an untrusted source this may lead to a Denial of Service.\n\nThe function DH_check() performs various checks on DH parameters. After fixing\nCVE-2023-3446 it was discovered that a large q parameter value can also trigger\nan overly long computation during some of these checks. A correct q value,\nif present, cannot be larger than the modulus p parameter, thus it is\nunnecessary to perform these checks if q is larger than p.\n\nAn application that calls DH_check() and supplies a key or parameters obtained\nfrom an untrusted source could be vulnerable to a Denial of Service attack.\n\nThe function DH_check() is itself called by a number of other OpenSSL functions.\nAn application calling any of those other functions may similarly be affected.\nThe other functions affected by this are DH_check_ex() and\nEVP_PKEY_param_check().\n\nAlso vulnerable are the OpenSSL dhparam and pkeyparam command line applications\nwhen using the "-check" option.\n\nThe OpenSSL SSL/TLS implementation is not affected by this issue.\n\nThe OpenSSL 3.0 and 3.1 FIPS providers are not affected by this issue.',
-              'diffID':        'sha256:5e03d8cae8773cb694fff1d55da34a40d23c2349087ed15ce68476395d33753c',
-              'fixedVersions': [
-                '1.1.1v-r0'
-              ],
-              'installedVersion': '1.1.1n-r0',
-              'packageName':      'libssl1.1',
-              'purl':             'pkg:apk/alpine/libssl1.1@1.1.1n-r0?arch=x86_64&distro=3.15.1',
-              'references':       [
-                'http://seclists.org/fulldisclosure/2023/Jul/43',
-                'http://www.openwall.com/lists/oss-security/2023/07/31/1',
-                'http://www.openwall.com/lists/oss-security/2023/09/22/11',
-                'http://www.openwall.com/lists/oss-security/2023/09/22/9',
-                'http://www.openwall.com/lists/oss-security/2023/11/06/2',
-                'https://access.redhat.com/errata/RHSA-2024:2447',
-                'https://access.redhat.com/security/cve/CVE-2023-3817',
-                'https://bugzilla.redhat.com/2223016',
-                'https://bugzilla.redhat.com/2224962',
-                'https://bugzilla.redhat.com/2227852',
-                'https://bugzilla.redhat.com/2248616',
-                'https://bugzilla.redhat.com/2257571',
-                'https://bugzilla.redhat.com/2258502',
-                'https://bugzilla.redhat.com/2259944',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2224962',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2227852',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2248616',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2270358',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3446',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3817',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-5678',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-2408',
-                'https://errata.almalinux.org/9/ALSA-2024-2447.html',
-                'https://errata.rockylinux.org/RLSA-2023:7877',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=6a1eb62c29db6cb5eec707f9338aee00f44e26f5',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=869ad69aadd985c7b8ca6f4e5dd0eb274c9f3644',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=9002fd07327a91f35ba6c1307e71fa6fd4409b7f',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=91ddeba0f2269b017dc06c46c993a788974b1aa5',
-                'https://linux.oracle.com/cve/CVE-2023-3817.html',
-                'https://linux.oracle.com/errata/ELSA-2024-2447.html',
-                'https://lists.debian.org/debian-lts-announce/2023/08/msg00019.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-3817',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://security.netapp.com/advisory/ntap-20230818-0014/',
-                'https://security.netapp.com/advisory/ntap-20231027-0008/',
-                'https://security.netapp.com/advisory/ntap-20240621-0006/',
-                'https://ubuntu.com/security/notices/USN-6435-1',
-                'https://ubuntu.com/security/notices/USN-6435-2',
-                'https://ubuntu.com/security/notices/USN-6450-1',
-                'https://ubuntu.com/security/notices/USN-6709-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-3817',
-                'https://www.openssl.org/news/secadv/20230731.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'OpenSSL: Excessive time spent checking DH q parameter value'
-            },
-            {
-              'cve':  'CVE-2023-5678',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L'
-                },
-                'redhat': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L'
-                }
-              },
-              'cwes': [
-                'CWE-606',
-                'CWE-754'
-              ],
-              'description':   "Issue summary: Generating excessively long X9.42 DH keys or checking\nexcessively long X9.42 DH keys or parameters may be very slow.\n\nImpact summary: Applications that use the functions DH_generate_key() to\ngenerate an X9.42 DH key may experience long delays.  Likewise, applications\nthat use DH_check_pub_key(), DH_check_pub_key_ex() or EVP_PKEY_public_check()\nto check an X9.42 DH key or X9.42 DH parameters may experience long delays.\nWhere the key or parameters that are being checked have been obtained from\nan untrusted source this may lead to a Denial of Service.\n\nWhile DH_check() performs all the necessary checks (as of CVE-2023-3817),\nDH_check_pub_key() doesn't make any of these checks, and is therefore\nvulnerable for excessively large P and Q parameters.\n\nLikewise, while DH_generate_key() performs a check for an excessively large\nP, it doesn't check for an excessively large Q.\n\nAn application that calls DH_generate_key() or DH_check_pub_key() and\nsupplies a key or parameters obtained from an untrusted source could be\nvulnerable to a Denial of Service attack.\n\nDH_generate_key() and DH_check_pub_key() are also called by a number of\nother OpenSSL functions.  An application calling any of those other\nfunctions may similarly be affected.  The other functions affected by this\nare DH_check_pub_key_ex(), EVP_PKEY_public_check(), and EVP_PKEY_generate().\n\nAlso vulnerable are the OpenSSL pkey command line application when using the\n\"-pubcheck\" option, as well as the OpenSSL genpkey command line application.\n\nThe OpenSSL SSL/TLS implementation is not affected by this issue.\n\nThe OpenSSL 3.0 and 3.1 FIPS providers are not affected by this issue.",
-              'diffID':        'sha256:5e03d8cae8773cb694fff1d55da34a40d23c2349087ed15ce68476395d33753c',
-              'fixedVersions': [
-                '1.1.1w-r1'
-              ],
-              'installedVersion': '1.1.1n-r0',
-              'packageName':      'libssl1.1',
-              'purl':             'pkg:apk/alpine/libssl1.1@1.1.1n-r0?arch=x86_64&distro=3.15.1',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2024/03/11/1',
-                'https://access.redhat.com/errata/RHSA-2024:2447',
-                'https://access.redhat.com/security/cve/CVE-2023-5678',
-                'https://bugzilla.redhat.com/2223016',
-                'https://bugzilla.redhat.com/2224962',
-                'https://bugzilla.redhat.com/2227852',
-                'https://bugzilla.redhat.com/2248616',
-                'https://bugzilla.redhat.com/2257571',
-                'https://bugzilla.redhat.com/2258502',
-                'https://bugzilla.redhat.com/2259944',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2224962',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2227852',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2248616',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2270358',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3446',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3817',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-5678',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-2408',
-                'https://errata.almalinux.org/9/ALSA-2024-2447.html',
-                'https://errata.rockylinux.org/RLSA-2023:7877',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=34efaef6c103d636ab507a0cc34dca4d3aecc055',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=710fee740904b6290fef0dd5536fbcedbc38ff0c',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=db925ae2e65d0d925adef429afc37f75bd1c2017',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=ddeb4b6c6d527e54ce9a99cba785c0f7776e54b6',
-                'https://linux.oracle.com/cve/CVE-2023-5678.html',
-                'https://linux.oracle.com/errata/ELSA-2024-2447.html',
-                'https://lists.debian.org/debian-lts-announce/2024/10/msg00033.html',
-                'https://lists.debian.org/debian-lts-announce/2024/11/msg00000.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-5678',
-                'https://security.netapp.com/advisory/ntap-20231130-0010/',
-                'https://ubuntu.com/security/notices/USN-6622-1',
-                'https://ubuntu.com/security/notices/USN-6632-1',
-                'https://ubuntu.com/security/notices/USN-6709-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-5678',
-                'https://www.openssl.org/news/secadv/20231106.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: Generating excessively long X9.42 DH keys or checking excessively long X9.42 DH keys or parameters may be very slow'
-            },
-            {
-              'cve':  'CVE-2022-28391',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '8.8',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-88'
-              ],
-              'description':   "BusyBox through 1.35.0 allows remote attackers to execute arbitrary code if netstat is used to print a DNS PTR record's value to a VT compatible terminal. Alternatively, the attacker could choose to change the terminal's colors.",
-              'diffID':        'sha256:5e03d8cae8773cb694fff1d55da34a40d23c2349087ed15ce68476395d33753c',
-              'fixedVersions': [
-                '1.34.1-r5'
-              ],
-              'installedVersion': '1.34.1-r4',
-              'packageName':      'ssl_client',
-              'purl':             'pkg:apk/alpine/ssl_client@1.34.1-r4?arch=x86_64&distro=3.15.1',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2022-28391',
-                'https://git.alpinelinux.org/aports/plain/main/busybox/0001-libbb-sockaddr2str-ensure-only-printable-characters-.patch',
-                'https://git.alpinelinux.org/aports/plain/main/busybox/0002-nslookup-sanitize-all-printed-strings-with-printable.patch',
-                'https://gitlab.alpinelinux.org/alpine/aports/-/issues/13661',
-                'https://nvd.nist.gov/vuln/detail/CVE-2022-28391',
-                'https://www.cve.org/CVERecord?id=CVE-2022-28391'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: remote attackers may execute arbitrary code if netstat is used'
-            },
-            {
-              'cve':  'CVE-2022-37434',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '9.8',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-787',
-                'CWE-120'
-              ],
-              'description':   'zlib through 1.2.12 has a heap-based buffer over-read or buffer overflow in inflate in inflate.c via a large gzip header extra field. NOTE: only applications that call inflateGetHeader are affected. Some common applications bundle the affected zlib source code but may be unable to call inflateGetHeader (e.g., see the nodejs/node reference).',
-              'diffID':        'sha256:5e03d8cae8773cb694fff1d55da34a40d23c2349087ed15ce68476395d33753c',
-              'fixedVersions': [
-                '1.2.12-r2'
-              ],
-              'installedVersion': '1.2.11-r3',
-              'packageName':      'zlib',
-              'purl':             'pkg:apk/alpine/zlib@1.2.11-r3?arch=x86_64&distro=3.15.1',
-              'references':       [
-                'http://seclists.org/fulldisclosure/2022/Oct/37',
-                'http://seclists.org/fulldisclosure/2022/Oct/38',
-                'http://seclists.org/fulldisclosure/2022/Oct/41',
-                'http://seclists.org/fulldisclosure/2022/Oct/42',
-                'http://www.openwall.com/lists/oss-security/2022/08/05/2',
-                'http://www.openwall.com/lists/oss-security/2022/08/09/1',
-                'https://access.redhat.com/errata/RHSA-2022:8291',
-                'https://access.redhat.com/security/cve/CVE-2022-37434',
-                'https://bugzilla.redhat.com/2116639',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2053198',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2077431',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2081296',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2116639',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-37434',
-                'https://errata.almalinux.org/9/ALSA-2022-8291.html',
-                'https://errata.rockylinux.org/RLSA-2022:8291',
-                'https://github.com/curl/curl/issues/9271',
-                'https://github.com/ivd38/zlib_overflow',
-                'https://github.com/madler/zlib/blob/21767c654d31d2dccdde4330529775c6c5fd5389/zlib.h#L1062-L1063',
-                'https://github.com/madler/zlib/commit/1eb7682f845ac9e9bf9ae35bbfb3bad5dacbd91d',
-                'https://github.com/madler/zlib/commit/eff308af425b67093bab25f80f1ae950166bece1',
-                'https://github.com/nodejs/node/blob/75b68c6e4db515f76df73af476eccf382bbcb00a/deps/zlib/inflate.c#L762-L764',
-                'https://linux.oracle.com/cve/CVE-2022-37434.html',
-                'https://linux.oracle.com/errata/ELSA-2023-1095.html',
-                'https://lists.debian.org/debian-lts-announce/2022/09/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JWN4VE3JQR4O2SOUS5TXNLANRPMHWV4I/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NMBOJ77A7T7PQCARMDUK75TE6LLESZ3O/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PAVPQNCG3XRLCLNSQRM3KAN5ZFMVXVTY/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/X5U7OTKZSHY2I3ZFJSR2SHFHW72RKGDK/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YRQAI7H4M4RQZ2IWZUEEXECBE5D56BH2/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2022-37434',
-                'https://security.netapp.com/advisory/ntap-20220901-0005/',
-                'https://security.netapp.com/advisory/ntap-20230427-0007/',
-                'https://support.apple.com/kb/HT213488',
-                'https://support.apple.com/kb/HT213489',
-                'https://support.apple.com/kb/HT213490',
-                'https://support.apple.com/kb/HT213491',
-                'https://support.apple.com/kb/HT213493',
-                'https://support.apple.com/kb/HT213494',
-                'https://ubuntu.com/security/notices/USN-5570-1',
-                'https://ubuntu.com/security/notices/USN-5570-2',
-                'https://ubuntu.com/security/notices/USN-5573-1',
-                'https://ubuntu.com/security/notices/USN-6736-1',
-                'https://ubuntu.com/security/notices/USN-6736-2',
-                'https://www.cve.org/CVERecord?id=CVE-2022-37434',
-                'https://www.debian.org/security/2022/dsa-5218'
-              ],
-              'severity':   'CRITICAL',
-              'suppressed': false,
-              'title':      'zlib: heap-based buffer over-read and overflow in inflate() in inflate.c via a large gzip header extra field'
-            },
-            {
-              'cve':  'CVE-2018-25032',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'nvd': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '8.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-787'
-              ],
-              'description':   'zlib before 1.2.12 allows memory corruption when deflating (i.e., when compressing) if the input has many distant matches.',
-              'diffID':        'sha256:5e03d8cae8773cb694fff1d55da34a40d23c2349087ed15ce68476395d33753c',
-              'fixedVersions': [
-                '1.2.12-r0'
-              ],
-              'installedVersion': '1.2.11-r3',
-              'packageName':      'zlib',
-              'purl':             'pkg:apk/alpine/zlib@1.2.11-r3?arch=x86_64&distro=3.15.1',
-              'references':       [
-                'http://seclists.org/fulldisclosure/2022/May/33',
-                'http://seclists.org/fulldisclosure/2022/May/35',
-                'http://seclists.org/fulldisclosure/2022/May/38',
-                'http://www.openwall.com/lists/oss-security/2022/03/25/2',
-                'http://www.openwall.com/lists/oss-security/2022/03/26/1',
-                'https://access.redhat.com/errata/RHSA-2022:8420',
-                'https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-25032.json',
-                'https://access.redhat.com/security/cve/CVE-2018-25032',
-                'https://bugzilla.redhat.com/2067945',
-                'https://cert-portal.siemens.com/productcert/pdf/ssa-333517.pdf',
-                'https://errata.almalinux.org/9/ALSA-2022-8420.html',
-                'https://github.com/advisories/GHSA-jc36-42cf-vqwj',
-                'https://github.com/madler/zlib/commit/5c44459c3b28a9bd3283aaceab7c615f8020c531',
-                'https://github.com/madler/zlib/compare/v1.2.11...v1.2.12',
-                'https://github.com/madler/zlib/issues/605',
-                'https://github.com/rubysec/ruby-advisory-db/blob/master/gems/nokogiri/CVE-2018-25032.yml',
-                'https://github.com/sparklemotion/nokogiri/releases/tag/v1.13.4',
-                'https://github.com/sparklemotion/nokogiri/security/advisories/GHSA-v6gp-9mmm-c6p5',
-                'https://groups.google.com/g/ruby-security-ann/c/vX7qSjsvWis/m/TJWN4oOKBwAJ',
-                'https://linux.oracle.com/cve/CVE-2018-25032.html',
-                'https://linux.oracle.com/errata/ELSA-2022-9565.html',
-                'https://lists.debian.org/debian-lts-announce/2022/04/msg00000.html',
-                'https://lists.debian.org/debian-lts-announce/2022/05/msg00008.html',
-                'https://lists.debian.org/debian-lts-announce/2022/09/msg00023.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DCZFIJBJTZ7CL5QXBFKTQ22Q26VINRUF/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DF62MVMH3QUGMBDCB3DY2ERQ6EBHTADB/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JZZPTWRYQULAOL3AW7RZJNVZ2UONXCV4/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NS2D2GFPFGOJUL4WQ3DUAY7HF4VWQ77F/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VOKNP2L734AEL47NRYGVZIKEFOUBQY5Y/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/XOKFMSNQ5D5WGMALBNBXU3GE442V74WU/',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/DCZFIJBJTZ7CL5QXBFKTQ22Q26VINRUF',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/DCZFIJBJTZ7CL5QXBFKTQ22Q26VINRUF/',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/DF62MVMH3QUGMBDCB3DY2ERQ6EBHTADB',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/DF62MVMH3QUGMBDCB3DY2ERQ6EBHTADB/',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/JZZPTWRYQULAOL3AW7RZJNVZ2UONXCV4',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/JZZPTWRYQULAOL3AW7RZJNVZ2UONXCV4/',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/NS2D2GFPFGOJUL4WQ3DUAY7HF4VWQ77F',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/NS2D2GFPFGOJUL4WQ3DUAY7HF4VWQ77F/',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/VOKNP2L734AEL47NRYGVZIKEFOUBQY5Y',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/VOKNP2L734AEL47NRYGVZIKEFOUBQY5Y/',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/XOKFMSNQ5D5WGMALBNBXU3GE442V74WU',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/XOKFMSNQ5D5WGMALBNBXU3GE442V74WU/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2018-25032',
-                'https://security.gentoo.org/glsa/202210-42',
-                'https://security.netapp.com/advisory/ntap-20220526-0009',
-                'https://security.netapp.com/advisory/ntap-20220526-0009/',
-                'https://security.netapp.com/advisory/ntap-20220729-0004',
-                'https://security.netapp.com/advisory/ntap-20220729-0004/',
-                'https://support.apple.com/kb/HT213255',
-                'https://support.apple.com/kb/HT213256',
-                'https://support.apple.com/kb/HT213257',
-                'https://ubuntu.com/security/notices/USN-5355-1',
-                'https://ubuntu.com/security/notices/USN-5355-2',
-                'https://ubuntu.com/security/notices/USN-5359-1',
-                'https://ubuntu.com/security/notices/USN-5359-2',
-                'https://ubuntu.com/security/notices/USN-5739-1',
-                'https://ubuntu.com/security/notices/USN-6736-1',
-                'https://ubuntu.com/security/notices/USN-6736-2',
-                'https://www.cve.org/CVERecord?id=CVE-2018-25032',
-                'https://www.debian.org/security/2022/dsa-5111',
-                'https://www.openwall.com/lists/oss-security/2022/03/24/1',
-                'https://www.openwall.com/lists/oss-security/2022/03/28/1',
-                'https://www.openwall.com/lists/oss-security/2022/03/28/3',
-                'https://www.oracle.com/security-alerts/cpujul2022.html'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'zlib: A flaw found in zlib when compressing (not decompressing) certain inputs'
-            }
-          ]
-        }
-      ],
-      'summary': {
-        'critical':   1,
-        'high':       11,
-        'low':        0,
-        'medium':     14,
-        'suppressed': 0,
-        'unknown':    0
-      }
-    }
-  },
-  {
-    'id':    'default/55da7ec91b63d23ca3f4aefbc489af030621e53f20274a13156533fad80a2733',
-    'type':  'storage.sbomscanner.kubewarden.io.vulnerabilityreport',
-    'links': {
-      'patch':  'https://localhost:8005/v1/storage.sbomscanner.kubewarden.io.vulnerabilityreports/default/55da7ec91b63d23ca3f4aefbc489af030621e53f20274a13156533fad80a2733',
-      'remove': 'https://localhost:8005/v1/storage.sbomscanner.kubewarden.io.vulnerabilityreports/default/55da7ec91b63d23ca3f4aefbc489af030621e53f20274a13156533fad80a2733',
-      'self':   'https://localhost:8005/v1/storage.sbomscanner.kubewarden.io.vulnerabilityreports/default/55da7ec91b63d23ca3f4aefbc489af030621e53f20274a13156533fad80a2733',
-      'update': 'https://localhost:8005/v1/storage.sbomscanner.kubewarden.io.vulnerabilityreports/default/55da7ec91b63d23ca3f4aefbc489af030621e53f20274a13156533fad80a2733',
-      'view':   'https://localhost:8005/apis/storage.sbomscanner.kubewarden.io/v1alpha1/namespaces/default/vulnerabilityreports/55da7ec91b63d23ca3f4aefbc489af030621e53f20274a13156533fad80a2733'
-    },
-    '_id':           'default/55da7ec91b63d23ca3f4aefbc489af030621e53f20274a13156533fad80a2733',
-    'apiVersion':    'storage.sbomscanner.kubewarden.io/v1alpha1',
-    'imageMetadata': {
-      'digest':      'sha256:0ec6ba49adccc9188d4ea4df64bf54e4ca68f2f2e4a96aeffa968e0a4dc707e8',
-      'platform':    'linux/amd64',
-      'registry':    'demo-02',
-      'registryURI': 'ghcr.io',
-      'repository':  'linuxcontainers/alpine',
-      'tag':         '3.16.3'
-    },
-    'kind':     'VulnerabilityReport',
-    'metadata': {
-      'creationTimestamp': '2026-01-09T22:47:14Z',
-      'fields':            [
-        '55da7ec91b63d23ca3f4aefbc489af030621e53f20274a13156533fad80a2733',
-        'ghcr.io/linuxcontainers/alpine:3.16.3',
-        'linux/amd64',
-        '24 (0 suppressed)'
-      ],
-      'labels': {
-        'app.kubernetes.io/managed-by':          'sbomscanner',
-        'app.kubernetes.io/part-of':             'sbomscanner',
-        'sbomscanner.kubewarden.io/scanjob-uid': '42184d01-4b15-466f-98aa-e802d1b6b6b8'
-      },
-      'managedFields': [
-        {
-          'apiVersion': 'storage.sbomscanner.kubewarden.io/v1alpha1',
-          'fieldsType': 'FieldsV1',
-          'fieldsV1':   {
-            'f:imageMetadata': {
-              'f:digest':      {},
-              'f:platform':    {},
-              'f:registry':    {},
-              'f:registryURI': {},
-              'f:repository':  {},
-              'f:tag':         {}
-            },
-            'f:metadata': {
-              'f:labels': {
-                '.':                                       {},
-                'f:app.kubernetes.io/managed-by':          {},
-                'f:app.kubernetes.io/part-of':             {},
-                'f:sbomscanner.kubewarden.io/scanjob-uid': {}
-              },
-              'f:ownerReferences': {
-                '.':                                                {},
-                'k:{"uid":"fe31f001-00b6-43c1-9961-df110132852d"}': {}
-              }
-            },
-            'f:report': {
-              'f:results': {},
-              'f:summary': {
-                'f:high':   {},
-                'f:medium': {}
-              }
-            }
-          },
-          'manager':   'worker',
-          'operation': 'Update',
-          'time':      '2026-01-28T18:34:02Z'
-        }
-      ],
-      'name':            '55da7ec91b63d23ca3f4aefbc489af030621e53f20274a13156533fad80a2733',
-      'namespace':       'default',
-      'ownerReferences': [
-        {
-          'apiVersion':         'storage.sbomscanner.kubewarden.io/v1alpha1',
-          'blockOwnerDeletion': true,
-          'controller':         true,
-          'kind':               'SBOM',
-          'name':               '55da7ec91b63d23ca3f4aefbc489af030621e53f20274a13156533fad80a2733',
-          'uid':                'fe31f001-00b6-43c1-9961-df110132852d'
-        }
-      ],
-      'relationships': [
-        {
-          'fromId':   'default/55da7ec91b63d23ca3f4aefbc489af030621e53f20274a13156533fad80a2733',
-          'fromType': 'storage.sbomscanner.kubewarden.io.sbom',
-          'rel':      'owner',
-          'state':    'active',
-          'message':  'Resource is current'
-        }
-      ],
-      'resourceVersion': '6',
-      'state':           {
-        'error':         false,
-        'message':       'Resource is current',
-        'name':          'active',
-        'transitioning': false
-      },
-      'uid': '9749b008-dd42-4c05-8c23-211a6d975cbf'
-    },
-    'report': {
-      'results': [
-        {
-          'class':           'os-pkgs',
-          'target':          '/var/run/worker/trivy.sbom.1343518857.json (alpine 3.16.3)',
-          'type':            'alpine',
-          'vulnerabilities': [
-            {
-              'cve':  'CVE-2023-42366',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.5',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.1',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-787'
-              ],
-              'description':   'A heap-buffer-overflow was discovered in BusyBox v.1.36.1 in the next_token function at awk.c:1159.',
-              'diffID':        'sha256:e5e13b0c77cbb769548077189c3da2f0a764ceca06af49d8d558e759f5c232bd',
-              'fixedVersions': [
-                '1.35.0-r18'
-              ],
-              'installedVersion': '1.35.0-r17',
-              'packageName':      'busybox',
-              'purl':             'pkg:apk/alpine/busybox@1.35.0-r17?arch=x86_64&distro=3.16.3',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2023-42366',
-                'https://bugs.busybox.net/show_bug.cgi?id=15874',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-42366',
-                'https://security.netapp.com/advisory/ntap-20241206-0007/',
-                'https://www.cve.org/CVERecord?id=CVE-2023-42366'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'busybox: A heap-buffer-overflow'
-            },
-            {
-              'cve':  'CVE-2022-4450',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'nvd': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-415'
-              ],
-              'description':   'The function PEM_read_bio_ex() reads a PEM file from a BIO and parses and\ndecodes the "name" (e.g. "CERTIFICATE"), any header data and the payload data.\nIf the function succeeds then the "name_out", "header" and "data" arguments are\npopulated with pointers to buffers containing the relevant decoded data. The\ncaller is responsible for freeing those buffers. It is possible to construct a\nPEM file that results in 0 bytes of payload data. In this case PEM_read_bio_ex()\nwill return a failure code but will populate the header argument with a pointer\nto a buffer that has already been freed. If the caller also frees this buffer\nthen a double free will occur. This will most likely lead to a crash. This\ncould be exploited by an attacker who has the ability to supply malicious PEM\nfiles for parsing to achieve a denial of service attack.\n\nThe functions PEM_read_bio() and PEM_read() are simple wrappers around\nPEM_read_bio_ex() and therefore these functions are also directly affected.\n\nThese functions are also called indirectly by a number of other OpenSSL\nfunctions including PEM_X509_INFO_read_bio_ex() and\nSSL_CTX_use_serverinfo_file() which are also vulnerable. Some OpenSSL internal\nuses of these functions are not vulnerable because the caller does not free the\nheader argument if PEM_read_bio_ex() returns a failure code. These locations\ninclude the PEM_read_bio_TYPE() functions as well as the decoders introduced in\nOpenSSL 3.0.\n\nThe OpenSSL asn1parse command line application is also impacted by this issue.',
-              'diffID':        'sha256:e5e13b0c77cbb769548077189c3da2f0a764ceca06af49d8d558e759f5c232bd',
-              'fixedVersions': [
-                '1.1.1t-r0'
-              ],
-              'installedVersion': '1.1.1s-r0',
-              'packageName':      'libcrypto1.1',
-              'purl':             'pkg:apk/alpine/libcrypto1.1@1.1.1s-r0?arch=x86_64&distro=3.16.3',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2023:2165',
-                'https://access.redhat.com/security/cve/CVE-2022-4450',
-                'https://bugzilla.redhat.com/1960321',
-                'https://bugzilla.redhat.com/2164440',
-                'https://bugzilla.redhat.com/2164487',
-                'https://bugzilla.redhat.com/2164492',
-                'https://bugzilla.redhat.com/2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144000',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144003',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144006',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144008',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144010',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144012',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144015',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144017',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144019',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2145170',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2158412',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164440',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164487',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164488',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164492',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164497',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164499',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164500',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4203',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4304',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4450',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0215',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0216',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0217',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0286',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0401',
-                'https://errata.almalinux.org/9/ALSA-2023-2165.html',
-                'https://errata.rockylinux.org/RLSA-2023:0946',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=63bcf189be73a9cc1264059bed6f57974be74a83',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=bbcf509bd046b34cca19c766bbddc31683d0858b',
-                'https://linux.oracle.com/cve/CVE-2022-4450.html',
-                'https://linux.oracle.com/errata/ELSA-2023-32791.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2022-4450',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0003',
-                'https://rustsec.org/advisories/RUSTSEC-2023-0010.html',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://ubuntu.com/security/notices/USN-5844-1',
-                'https://ubuntu.com/security/notices/USN-6564-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2022-4450',
-                'https://www.openssl.org/news/secadv/20230207.txt'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: double free after calling PEM_read_bio_ex'
-            },
-            {
-              'cve':  'CVE-2023-0215',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'nvd': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   'The public API function BIO_new_NDEF is a helper function used for streaming\nASN.1 data via a BIO. It is primarily used internally to OpenSSL to support the\nSMIME, CMS and PKCS7 streaming capabilities, but may also be called directly by\nend user applications.\n\nThe function receives a BIO from the caller, prepends a new BIO_f_asn1 filter\nBIO onto the front of it to form a BIO chain, and then returns the new head of\nthe BIO chain to the caller. Under certain conditions, for example if a CMS\nrecipient public key is invalid, the new filter BIO is freed and the function\nreturns a NULL result indicating a failure. However, in this case, the BIO chain\nis not properly cleaned up and the BIO passed by the caller still retains\ninternal pointers to the previously freed filter BIO. If the caller then goes on\nto call BIO_pop() on the BIO then a use-after-free will occur. This will most\nlikely result in a crash.\n\n\n\nThis scenario occurs directly in the internal function B64_write_ASN1() which\nmay cause BIO_new_NDEF() to be called and will subsequently call BIO_pop() on\nthe BIO. This internal function is in turn called by the public API functions\nPEM_write_bio_ASN1_stream, PEM_write_bio_CMS_stream, PEM_write_bio_PKCS7_stream,\nSMIME_write_ASN1, SMIME_write_CMS and SMIME_write_PKCS7.\n\nOther public API functions that may be impacted by this include\ni2d_ASN1_bio_stream, BIO_new_CMS, BIO_new_PKCS7, i2d_CMS_bio_stream and\ni2d_PKCS7_bio_stream.\n\nThe OpenSSL cms and smime command line applications are similarly affected.',
-              'diffID':        'sha256:e5e13b0c77cbb769548077189c3da2f0a764ceca06af49d8d558e759f5c232bd',
-              'fixedVersions': [
-                '1.1.1t-r0'
-              ],
-              'installedVersion': '1.1.1s-r0',
-              'packageName':      'libcrypto1.1',
-              'purl':             'pkg:apk/alpine/libcrypto1.1@1.1.1s-r0?arch=x86_64&distro=3.16.3',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2023:2165',
-                'https://access.redhat.com/security/cve/CVE-2023-0215',
-                'https://bugzilla.redhat.com/1960321',
-                'https://bugzilla.redhat.com/2164440',
-                'https://bugzilla.redhat.com/2164487',
-                'https://bugzilla.redhat.com/2164492',
-                'https://bugzilla.redhat.com/2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144000',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144003',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144006',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144008',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144010',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144012',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144015',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144017',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144019',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2145170',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2158412',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164440',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164487',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164488',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164492',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164497',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164499',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164500',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4203',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4304',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4450',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0215',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0216',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0217',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0286',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0401',
-                'https://errata.almalinux.org/9/ALSA-2023-2165.html',
-                'https://errata.rockylinux.org/RLSA-2023:0946',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=8818064ce3c3c0f1b740a5aaba2a987e75bfbafd',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=9816136fe31d92ace4037d5da5257f763aeeb4eb',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=c3829dd8825c654652201e16f8a0a0c46ee3f344',
-                'https://linux.oracle.com/cve/CVE-2023-0215.html',
-                'https://linux.oracle.com/errata/ELSA-2023-32791.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-0215',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0003',
-                'https://rustsec.org/advisories/RUSTSEC-2023-0009.html',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://security.netapp.com/advisory/ntap-20230427-0007',
-                'https://security.netapp.com/advisory/ntap-20230427-0007/',
-                'https://security.netapp.com/advisory/ntap-20230427-0009',
-                'https://security.netapp.com/advisory/ntap-20230427-0009/',
-                'https://security.netapp.com/advisory/ntap-20240621-0006',
-                'https://security.netapp.com/advisory/ntap-20240621-0006/',
-                'https://ubuntu.com/security/notices/USN-5844-1',
-                'https://ubuntu.com/security/notices/USN-5845-1',
-                'https://ubuntu.com/security/notices/USN-5845-2',
-                'https://ubuntu.com/security/notices/USN-6564-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-0215',
-                'https://www.openssl.org/news/secadv/20230207.txt'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: use-after-free following BIO_new_NDEF'
-            },
-            {
-              'cve':  'CVE-2023-0286',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '7.4',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H'
-                },
-                'nvd': {
-                  'v3score':  '7.4',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.4',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-843'
-              ],
-              'description':   'There is a type confusion vulnerability relating to X.400 address processing\ninside an X.509 GeneralName. X.400 addresses were parsed as an ASN1_STRING but\nthe public structure definition for GENERAL_NAME incorrectly specified the type\nof the x400Address field as ASN1_TYPE. This field is subsequently interpreted by\nthe OpenSSL function GENERAL_NAME_cmp as an ASN1_TYPE rather than an\nASN1_STRING.\n\nWhen CRL checking is enabled (i.e. the application sets the\nX509_V_FLAG_CRL_CHECK flag), this vulnerability may allow an attacker to pass\narbitrary pointers to a memcmp call, enabling them to read memory contents or\nenact a denial of service. In most cases, the attack requires the attacker to\nprovide both the certificate chain and CRL, neither of which need to have a\nvalid signature. If the attacker only controls one of these inputs, the other\ninput must already contain an X.400 address as a CRL distribution point, which\nis uncommon. As such, this vulnerability is most likely to only affect\napplications which have implemented their own functionality for retrieving CRLs\nover a network.',
-              'diffID':        'sha256:e5e13b0c77cbb769548077189c3da2f0a764ceca06af49d8d558e759f5c232bd',
-              'fixedVersions': [
-                '1.1.1t-r0'
-              ],
-              'installedVersion': '1.1.1s-r0',
-              'packageName':      'libcrypto1.1',
-              'purl':             'pkg:apk/alpine/libcrypto1.1@1.1.1s-r0?arch=x86_64&distro=3.16.3',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2025:7937',
-                'https://access.redhat.com/security/cve/CVE-2023-0286',
-                'https://access.redhat.com/security/cve/cve-2023-0286',
-                'https://bugzilla.redhat.com/2164440',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144000',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144003',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144006',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144008',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144010',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144012',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144015',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144017',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144019',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2145170',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2158412',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164440',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164487',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164488',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164492',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164497',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164499',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164500',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4203',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4304',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4450',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0215',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0216',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0217',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0286',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0401',
-                'https://errata.almalinux.org/9/ALSA-2025-7937.html',
-                'https://errata.rockylinux.org/RLSA-2023:0946',
-                'https://ftp.openbsd.org/pub/OpenBSD/LibreSSL/libressl-3.6.2-relnotes.txt',
-                'https://ftp.openbsd.org/pub/OpenBSD/patches/7.2/common/018_x509.patch.sig',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=2c6c9d439b484e1ba9830d8454a34fa4f80fdfe9',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=2f7530077e0ef79d98718138716bc51ca0cad658',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=fd2af07dc083a350c959147097003a14a5e8ac4d',
-                'https://github.com/pyca/cryptography',
-                'https://github.com/pyca/cryptography/security/advisories/GHSA-x4qr-2fvf-3mr5',
-                'https://linux.oracle.com/cve/CVE-2023-0286.html',
-                'https://linux.oracle.com/errata/ELSA-2025-7937.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-0286',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0003',
-                'https://rustsec.org/advisories/RUSTSEC-2023-0006.html',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://ubuntu.com/security/notices/USN-5844-1',
-                'https://ubuntu.com/security/notices/USN-5845-1',
-                'https://ubuntu.com/security/notices/USN-5845-2',
-                'https://ubuntu.com/security/notices/USN-6564-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-0286',
-                'https://www.openssl.org/news/secadv/20230207.txt'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: X.400 address type confusion in X.509 GeneralName'
-            },
-            {
-              'cve':  'CVE-2023-0464',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-295'
-              ],
-              'description':   "A security vulnerability has been identified in all supported versions\n\nof OpenSSL related to the verification of X.509 certificate chains\nthat include policy constraints.  Attackers may be able to exploit this\nvulnerability by creating a malicious certificate chain that triggers\nexponential use of computational resources, leading to a denial-of-service\n(DoS) attack on affected systems.\n\nPolicy processing is disabled by default but can be enabled by passing\nthe `-policy' argument to the command line utilities or by calling the\n`X509_VERIFY_PARAM_set1_policies()' function.",
-              'diffID':        'sha256:e5e13b0c77cbb769548077189c3da2f0a764ceca06af49d8d558e759f5c232bd',
-              'fixedVersions': [
-                '1.1.1t-r1'
-              ],
-              'installedVersion': '1.1.1s-r0',
-              'packageName':      'libcrypto1.1',
-              'purl':             'pkg:apk/alpine/libcrypto1.1@1.1.1s-r0?arch=x86_64&distro=3.16.3',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2023:3722',
-                'https://access.redhat.com/security/cve/CVE-2023-0464',
-                'https://bugzilla.redhat.com/2181082',
-                'https://bugzilla.redhat.com/2182561',
-                'https://bugzilla.redhat.com/2182565',
-                'https://bugzilla.redhat.com/2188461',
-                'https://bugzilla.redhat.com/2207947',
-                'https://errata.almalinux.org/9/ALSA-2023-3722.html',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=2017771e2db3e2b96f89bbe8766c3209f6a99545',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=2dcd4f1e3115f38cefa43e3efbe9b801c27e642e',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=879f7080d7e141f415c79eaa3a8ac4a3dad0348b',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=959c59c7a0164117e7f8366466a32bb1f8d77ff1',
-                'https://linux.oracle.com/cve/CVE-2023-0464.html',
-                'https://linux.oracle.com/errata/ELSA-2023-3722.html',
-                'https://lists.debian.org/debian-lts-announce/2023/06/msg00011.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-0464',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://security.netapp.com/advisory/ntap-20230406-0006/',
-                'https://security.netapp.com/advisory/ntap-20240621-0006/',
-                'https://ubuntu.com/security/notices/USN-6039-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.couchbase.com/alerts/',
-                'https://www.cve.org/CVERecord?id=CVE-2023-0464',
-                'https://www.debian.org/security/2023/dsa-5417',
-                'https://www.openssl.org/news/secadv/20230322.txt'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: Denial of service by excessive resource usage in verifying X509 policy constraints'
-            },
-            {
-              'cve':  'CVE-2022-4304',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N'
-                },
-                'nvd': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N'
-                },
-                'redhat': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-203'
-              ],
-              'description':   'A timing based side channel exists in the OpenSSL RSA Decryption implementation\nwhich could be sufficient to recover a plaintext across a network in a\nBleichenbacher style attack. To achieve a successful decryption an attacker\nwould have to be able to send a very large number of trial messages for\ndecryption. The vulnerability affects all RSA padding modes: PKCS#1 v1.5,\nRSA-OEAP and RSASVE.\n\nFor example, in a TLS connection, RSA is commonly used by a client to send an\nencrypted pre-master secret to the server. An attacker that had observed a\ngenuine connection between a client and a server could use this flaw to send\ntrial messages to the server and record the time taken to process them. After a\nsufficiently large number of messages the attacker could recover the pre-master\nsecret used for the original connection and thus be able to decrypt the\napplication data sent over that connection.',
-              'diffID':        'sha256:e5e13b0c77cbb769548077189c3da2f0a764ceca06af49d8d558e759f5c232bd',
-              'fixedVersions': [
-                '1.1.1t-r0'
-              ],
-              'installedVersion': '1.1.1s-r0',
-              'packageName':      'libcrypto1.1',
-              'purl':             'pkg:apk/alpine/libcrypto1.1@1.1.1s-r0?arch=x86_64&distro=3.16.3',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2023:2165',
-                'https://access.redhat.com/security/cve/CVE-2022-4304',
-                'https://bugzilla.redhat.com/1960321',
-                'https://bugzilla.redhat.com/2164440',
-                'https://bugzilla.redhat.com/2164487',
-                'https://bugzilla.redhat.com/2164492',
-                'https://bugzilla.redhat.com/2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144000',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144003',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144006',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144008',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144010',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144012',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144015',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144017',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144019',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2145170',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2158412',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164440',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164487',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164488',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164492',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164497',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164499',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164500',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4203',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4304',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4450',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0215',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0216',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0217',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0286',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0401',
-                'https://errata.almalinux.org/9/ALSA-2023-2165.html',
-                'https://errata.rockylinux.org/RLSA-2023:0946',
-                'https://linux.oracle.com/cve/CVE-2022-4304.html',
-                'https://linux.oracle.com/errata/ELSA-2023-32791.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2022-4304',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0003',
-                'https://rustsec.org/advisories/RUSTSEC-2023-0007.html',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://ubuntu.com/security/notices/USN-5844-1',
-                'https://ubuntu.com/security/notices/USN-6564-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2022-4304',
-                'https://www.openssl.org/news/secadv/20230207.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: timing attack in RSA Decryption implementation'
-            },
-            {
-              'cve':  'CVE-2023-0465',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N'
-                },
-                'redhat': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-295'
-              ],
-              'description':   "Applications that use a non-default option when verifying certificates may be\nvulnerable to an attack from a malicious CA to circumvent certain checks.\n\nInvalid certificate policies in leaf certificates are silently ignored by\nOpenSSL and other certificate policy checks are skipped for that certificate.\nA malicious CA could use this to deliberately assert invalid certificate policies\nin order to circumvent policy checking on the certificate altogether.\n\nPolicy processing is disabled by default but can be enabled by passing\nthe `-policy' argument to the command line utilities or by calling the\n`X509_VERIFY_PARAM_set1_policies()' function.",
-              'diffID':        'sha256:e5e13b0c77cbb769548077189c3da2f0a764ceca06af49d8d558e759f5c232bd',
-              'fixedVersions': [
-                '1.1.1t-r2'
-              ],
-              'installedVersion': '1.1.1s-r0',
-              'packageName':      'libcrypto1.1',
-              'purl':             'pkg:apk/alpine/libcrypto1.1@1.1.1s-r0?arch=x86_64&distro=3.16.3',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2023:3722',
-                'https://access.redhat.com/security/cve/CVE-2023-0465',
-                'https://bugzilla.redhat.com/2181082',
-                'https://bugzilla.redhat.com/2182561',
-                'https://bugzilla.redhat.com/2182565',
-                'https://bugzilla.redhat.com/2188461',
-                'https://bugzilla.redhat.com/2207947',
-                'https://errata.almalinux.org/9/ALSA-2023-3722.html',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=10325176f3d3e98c6e2b3bf5ab1e3b334de6947a',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=1dd43e0709fece299b15208f36cc7c76209ba0bb',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=b013765abfa80036dc779dd0e50602c57bb3bf95',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=facfb1ab745646e97a1920977ae4a9965ea61d5c',
-                'https://linux.oracle.com/cve/CVE-2023-0465.html',
-                'https://linux.oracle.com/errata/ELSA-2023-3722.html',
-                'https://lists.debian.org/debian-lts-announce/2023/06/msg00011.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-0465',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://security.netapp.com/advisory/ntap-20230414-0001/',
-                'https://ubuntu.com/security/notices/USN-6039-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-0465',
-                'https://www.debian.org/security/2023/dsa-5417',
-                'https://www.openssl.org/news/secadv/20230328.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: Invalid certificate policies in leaf certificates are silently ignored'
-            },
-            {
-              'cve':  'CVE-2023-2650',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '6.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-770'
-              ],
-              'description':   "Issue summary: Processing some specially crafted ASN.1 object identifiers or\ndata containing them may be very slow.\n\nImpact summary: Applications that use OBJ_obj2txt() directly, or use any of\nthe OpenSSL subsystems OCSP, PKCS7/SMIME, CMS, CMP/CRMF or TS with no message\nsize limit may experience notable to very long delays when processing those\nmessages, which may lead to a Denial of Service.\n\nAn OBJECT IDENTIFIER is composed of a series of numbers - sub-identifiers -\nmost of which have no size limit.  OBJ_obj2txt() may be used to translate\nan ASN.1 OBJECT IDENTIFIER given in DER encoding form (using the OpenSSL\ntype ASN1_OBJECT) to its canonical numeric text form, which are the\nsub-identifiers of the OBJECT IDENTIFIER in decimal form, separated by\nperiods.\n\nWhen one of the sub-identifiers in the OBJECT IDENTIFIER is very large\n(these are sizes that are seen as absurdly large, taking up tens or hundreds\nof KiBs), the translation to a decimal number in text may take a very long\ntime.  The time complexity is O(n^2) with 'n' being the size of the\nsub-identifiers in bytes (*).\n\nWith OpenSSL 3.0, support to fetch cryptographic algorithms using names /\nidentifiers in string form was introduced.  This includes using OBJECT\nIDENTIFIERs in canonical numeric text form as identifiers for fetching\nalgorithms.\n\nSuch OBJECT IDENTIFIERs may be received through the ASN.1 structure\nAlgorithmIdentifier, which is commonly used in multiple protocols to specify\nwhat cryptographic algorithm should be used to sign or verify, encrypt or\ndecrypt, or digest passed data.\n\nApplications that call OBJ_obj2txt() directly with untrusted data are\naffected, with any version of OpenSSL.  If the use is for the mere purpose\nof display, the severity is considered low.\n\nIn OpenSSL 3.0 and newer, this affects the subsystems OCSP, PKCS7/SMIME,\nCMS, CMP/CRMF or TS.  It also impacts anything that processes X.509\ncertificates, including simple things like verifying its signature.\n\nThe impact on TLS is relatively low, because all versions of OpenSSL have a\n100KiB limit on the peer's certificate chain.  Additionally, this only\nimpacts clients, or servers that have explicitly enabled client\nauthentication.\n\nIn OpenSSL 1.1.1 and 1.0.2, this only affects displaying diverse objects,\nsuch as X.509 certificates.  This is assumed to not happen in such a way\nthat it would cause a Denial of Service, so these versions are considered\nnot affected by this issue in such a way that it would be cause for concern,\nand the severity is therefore considered low.",
-              'diffID':        'sha256:e5e13b0c77cbb769548077189c3da2f0a764ceca06af49d8d558e759f5c232bd',
-              'fixedVersions': [
-                '1.1.1u-r0'
-              ],
-              'installedVersion': '1.1.1s-r0',
-              'packageName':      'libcrypto1.1',
-              'purl':             'pkg:apk/alpine/libcrypto1.1@1.1.1s-r0?arch=x86_64&distro=3.16.3',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2023/05/30/1',
-                'https://access.redhat.com/errata/RHSA-2023:6330',
-                'https://access.redhat.com/security/cve/CVE-2023-2650',
-                'https://bugzilla.redhat.com/1858038',
-                'https://bugzilla.redhat.com/2207947',
-                'https://errata.almalinux.org/9/ALSA-2023-6330.html',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=423a2bc737a908ad0c77bda470b2b59dc879936b',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=853c5e56ee0b8650c73140816bb8b91d6163422c',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=9e209944b35cf82368071f160a744b6178f9b098',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=db779b0e10b047f2585615e0b8f2acdf21f8544a',
-                'https://linux.oracle.com/cve/CVE-2023-2650.html',
-                'https://linux.oracle.com/errata/ELSA-2023-6330.html',
-                'https://lists.debian.org/debian-lts-announce/2023/06/msg00011.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-2650',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0009',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://security.netapp.com/advisory/ntap-20230703-0001/',
-                'https://security.netapp.com/advisory/ntap-20231027-0009/',
-                'https://ubuntu.com/security/notices/USN-6119-1',
-                'https://ubuntu.com/security/notices/USN-6188-1',
-                'https://ubuntu.com/security/notices/USN-6672-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-2650',
-                'https://www.debian.org/security/2023/dsa-5417',
-                'https://www.openssl.org/news/secadv/20230530.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: Possible DoS translating ASN.1 object identifiers'
-            },
-            {
-              'cve':  'CVE-2023-3446',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L'
-                },
-                'redhat': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L'
-                }
-              },
-              'cwes': [
-                'CWE-606',
-                'CWE-1333'
-              ],
-              'description':   "Issue summary: Checking excessively long DH keys or parameters may be very slow.\n\nImpact summary: Applications that use the functions DH_check(), DH_check_ex()\nor EVP_PKEY_param_check() to check a DH key or DH parameters may experience long\ndelays. Where the key or parameters that are being checked have been obtained\nfrom an untrusted source this may lead to a Denial of Service.\n\nThe function DH_check() performs various checks on DH parameters. One of those\nchecks confirms that the modulus ('p' parameter) is not too large. Trying to use\na very large modulus is slow and OpenSSL will not normally use a modulus which\nis over 10,000 bits in length.\n\nHowever the DH_check() function checks numerous aspects of the key or parameters\nthat have been supplied. Some of those checks use the supplied modulus value\neven if it has already been found to be too large.\n\nAn application that calls DH_check() and supplies a key or parameters obtained\nfrom an untrusted source could be vulernable to a Denial of Service attack.\n\nThe function DH_check() is itself called by a number of other OpenSSL functions.\nAn application calling any of those other functions may similarly be affected.\nThe other functions affected by this are DH_check_ex() and\nEVP_PKEY_param_check().\n\nAlso vulnerable are the OpenSSL dhparam and pkeyparam command line applications\nwhen using the '-check' option.\n\nThe OpenSSL SSL/TLS implementation is not affected by this issue.\nThe OpenSSL 3.0 and 3.1 FIPS providers are not affected by this issue.",
-              'diffID':        'sha256:e5e13b0c77cbb769548077189c3da2f0a764ceca06af49d8d558e759f5c232bd',
-              'fixedVersions': [
-                '1.1.1u-r2'
-              ],
-              'installedVersion': '1.1.1s-r0',
-              'packageName':      'libcrypto1.1',
-              'purl':             'pkg:apk/alpine/libcrypto1.1@1.1.1s-r0?arch=x86_64&distro=3.16.3',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2023/07/19/4',
-                'http://www.openwall.com/lists/oss-security/2023/07/19/5',
-                'http://www.openwall.com/lists/oss-security/2023/07/19/6',
-                'http://www.openwall.com/lists/oss-security/2023/07/31/1',
-                'http://www.openwall.com/lists/oss-security/2024/05/16/1',
-                'https://access.redhat.com/errata/RHSA-2024:2447',
-                'https://access.redhat.com/security/cve/CVE-2023-3446',
-                'https://bugzilla.redhat.com/2223016',
-                'https://bugzilla.redhat.com/2224962',
-                'https://bugzilla.redhat.com/2227852',
-                'https://bugzilla.redhat.com/2248616',
-                'https://bugzilla.redhat.com/2257571',
-                'https://bugzilla.redhat.com/2258502',
-                'https://bugzilla.redhat.com/2259944',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2224962',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2257582',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2257583',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2258677',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2258688',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2258691',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2258694',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2258700',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-36763',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-36764',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3446',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45229',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45231',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45232',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45233',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45235',
-                'https://errata.almalinux.org/9/ALSA-2024-2447.html',
-                'https://errata.rockylinux.org/RLSA-2024:2264',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=1fa20cf2f506113c761777127a38bce5068740eb',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=8780a896543a654e757db1b9396383f9d8095528',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=9a0a4d3c1e7138915563c0df4fe6a3f9377b839c',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=fc9867c1e03c22ebf56943be205202e576aabf23',
-                'https://linux.oracle.com/cve/CVE-2023-3446.html',
-                'https://linux.oracle.com/errata/ELSA-2024-2447.html',
-                'https://lists.debian.org/debian-lts-announce/2023/08/msg00019.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-3446',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://security.netapp.com/advisory/ntap-20230803-0011/',
-                'https://ubuntu.com/security/notices/USN-6435-1',
-                'https://ubuntu.com/security/notices/USN-6435-2',
-                'https://ubuntu.com/security/notices/USN-6450-1',
-                'https://ubuntu.com/security/notices/USN-6709-1',
-                'https://ubuntu.com/security/notices/USN-7018-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-3446',
-                'https://www.openssl.org/news/secadv/20230719.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: Excessive time spent checking DH keys and parameters'
-            },
-            {
-              'cve':  'CVE-2023-3817',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L'
-                },
-                'redhat': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L'
-                }
-              },
-              'cwes': [
-                'CWE-606',
-                'CWE-834'
-              ],
-              'description':   'Issue summary: Checking excessively long DH keys or parameters may be very slow.\n\nImpact summary: Applications that use the functions DH_check(), DH_check_ex()\nor EVP_PKEY_param_check() to check a DH key or DH parameters may experience long\ndelays. Where the key or parameters that are being checked have been obtained\nfrom an untrusted source this may lead to a Denial of Service.\n\nThe function DH_check() performs various checks on DH parameters. After fixing\nCVE-2023-3446 it was discovered that a large q parameter value can also trigger\nan overly long computation during some of these checks. A correct q value,\nif present, cannot be larger than the modulus p parameter, thus it is\nunnecessary to perform these checks if q is larger than p.\n\nAn application that calls DH_check() and supplies a key or parameters obtained\nfrom an untrusted source could be vulnerable to a Denial of Service attack.\n\nThe function DH_check() is itself called by a number of other OpenSSL functions.\nAn application calling any of those other functions may similarly be affected.\nThe other functions affected by this are DH_check_ex() and\nEVP_PKEY_param_check().\n\nAlso vulnerable are the OpenSSL dhparam and pkeyparam command line applications\nwhen using the "-check" option.\n\nThe OpenSSL SSL/TLS implementation is not affected by this issue.\n\nThe OpenSSL 3.0 and 3.1 FIPS providers are not affected by this issue.',
-              'diffID':        'sha256:e5e13b0c77cbb769548077189c3da2f0a764ceca06af49d8d558e759f5c232bd',
-              'fixedVersions': [
-                '1.1.1v-r0'
-              ],
-              'installedVersion': '1.1.1s-r0',
-              'packageName':      'libcrypto1.1',
-              'purl':             'pkg:apk/alpine/libcrypto1.1@1.1.1s-r0?arch=x86_64&distro=3.16.3',
-              'references':       [
-                'http://seclists.org/fulldisclosure/2023/Jul/43',
-                'http://www.openwall.com/lists/oss-security/2023/07/31/1',
-                'http://www.openwall.com/lists/oss-security/2023/09/22/11',
-                'http://www.openwall.com/lists/oss-security/2023/09/22/9',
-                'http://www.openwall.com/lists/oss-security/2023/11/06/2',
-                'https://access.redhat.com/errata/RHSA-2024:2447',
-                'https://access.redhat.com/security/cve/CVE-2023-3817',
-                'https://bugzilla.redhat.com/2223016',
-                'https://bugzilla.redhat.com/2224962',
-                'https://bugzilla.redhat.com/2227852',
-                'https://bugzilla.redhat.com/2248616',
-                'https://bugzilla.redhat.com/2257571',
-                'https://bugzilla.redhat.com/2258502',
-                'https://bugzilla.redhat.com/2259944',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2224962',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2227852',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2248616',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2270358',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3446',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3817',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-5678',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-2408',
-                'https://errata.almalinux.org/9/ALSA-2024-2447.html',
-                'https://errata.rockylinux.org/RLSA-2023:7877',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=6a1eb62c29db6cb5eec707f9338aee00f44e26f5',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=869ad69aadd985c7b8ca6f4e5dd0eb274c9f3644',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=9002fd07327a91f35ba6c1307e71fa6fd4409b7f',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=91ddeba0f2269b017dc06c46c993a788974b1aa5',
-                'https://linux.oracle.com/cve/CVE-2023-3817.html',
-                'https://linux.oracle.com/errata/ELSA-2024-2447.html',
-                'https://lists.debian.org/debian-lts-announce/2023/08/msg00019.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-3817',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://security.netapp.com/advisory/ntap-20230818-0014/',
-                'https://security.netapp.com/advisory/ntap-20231027-0008/',
-                'https://security.netapp.com/advisory/ntap-20240621-0006/',
-                'https://ubuntu.com/security/notices/USN-6435-1',
-                'https://ubuntu.com/security/notices/USN-6435-2',
-                'https://ubuntu.com/security/notices/USN-6450-1',
-                'https://ubuntu.com/security/notices/USN-6709-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-3817',
-                'https://www.openssl.org/news/secadv/20230731.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'OpenSSL: Excessive time spent checking DH q parameter value'
-            },
-            {
-              'cve':  'CVE-2023-5678',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L'
-                },
-                'redhat': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L'
-                }
-              },
-              'cwes': [
-                'CWE-606',
-                'CWE-754'
-              ],
-              'description':   "Issue summary: Generating excessively long X9.42 DH keys or checking\nexcessively long X9.42 DH keys or parameters may be very slow.\n\nImpact summary: Applications that use the functions DH_generate_key() to\ngenerate an X9.42 DH key may experience long delays.  Likewise, applications\nthat use DH_check_pub_key(), DH_check_pub_key_ex() or EVP_PKEY_public_check()\nto check an X9.42 DH key or X9.42 DH parameters may experience long delays.\nWhere the key or parameters that are being checked have been obtained from\nan untrusted source this may lead to a Denial of Service.\n\nWhile DH_check() performs all the necessary checks (as of CVE-2023-3817),\nDH_check_pub_key() doesn't make any of these checks, and is therefore\nvulnerable for excessively large P and Q parameters.\n\nLikewise, while DH_generate_key() performs a check for an excessively large\nP, it doesn't check for an excessively large Q.\n\nAn application that calls DH_generate_key() or DH_check_pub_key() and\nsupplies a key or parameters obtained from an untrusted source could be\nvulnerable to a Denial of Service attack.\n\nDH_generate_key() and DH_check_pub_key() are also called by a number of\nother OpenSSL functions.  An application calling any of those other\nfunctions may similarly be affected.  The other functions affected by this\nare DH_check_pub_key_ex(), EVP_PKEY_public_check(), and EVP_PKEY_generate().\n\nAlso vulnerable are the OpenSSL pkey command line application when using the\n\"-pubcheck\" option, as well as the OpenSSL genpkey command line application.\n\nThe OpenSSL SSL/TLS implementation is not affected by this issue.\n\nThe OpenSSL 3.0 and 3.1 FIPS providers are not affected by this issue.",
-              'diffID':        'sha256:e5e13b0c77cbb769548077189c3da2f0a764ceca06af49d8d558e759f5c232bd',
-              'fixedVersions': [
-                '1.1.1w-r1'
-              ],
-              'installedVersion': '1.1.1s-r0',
-              'packageName':      'libcrypto1.1',
-              'purl':             'pkg:apk/alpine/libcrypto1.1@1.1.1s-r0?arch=x86_64&distro=3.16.3',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2024/03/11/1',
-                'https://access.redhat.com/errata/RHSA-2024:2447',
-                'https://access.redhat.com/security/cve/CVE-2023-5678',
-                'https://bugzilla.redhat.com/2223016',
-                'https://bugzilla.redhat.com/2224962',
-                'https://bugzilla.redhat.com/2227852',
-                'https://bugzilla.redhat.com/2248616',
-                'https://bugzilla.redhat.com/2257571',
-                'https://bugzilla.redhat.com/2258502',
-                'https://bugzilla.redhat.com/2259944',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2224962',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2227852',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2248616',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2270358',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3446',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3817',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-5678',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-2408',
-                'https://errata.almalinux.org/9/ALSA-2024-2447.html',
-                'https://errata.rockylinux.org/RLSA-2023:7877',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=34efaef6c103d636ab507a0cc34dca4d3aecc055',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=710fee740904b6290fef0dd5536fbcedbc38ff0c',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=db925ae2e65d0d925adef429afc37f75bd1c2017',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=ddeb4b6c6d527e54ce9a99cba785c0f7776e54b6',
-                'https://linux.oracle.com/cve/CVE-2023-5678.html',
-                'https://linux.oracle.com/errata/ELSA-2024-2447.html',
-                'https://lists.debian.org/debian-lts-announce/2024/10/msg00033.html',
-                'https://lists.debian.org/debian-lts-announce/2024/11/msg00000.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-5678',
-                'https://security.netapp.com/advisory/ntap-20231130-0010/',
-                'https://ubuntu.com/security/notices/USN-6622-1',
-                'https://ubuntu.com/security/notices/USN-6632-1',
-                'https://ubuntu.com/security/notices/USN-6709-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-5678',
-                'https://www.openssl.org/news/secadv/20231106.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: Generating excessively long X9.42 DH keys or checking excessively long X9.42 DH keys or parameters may be very slow'
-            },
-            {
-              'cve':  'CVE-2022-4450',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'nvd': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-415'
-              ],
-              'description':   'The function PEM_read_bio_ex() reads a PEM file from a BIO and parses and\ndecodes the "name" (e.g. "CERTIFICATE"), any header data and the payload data.\nIf the function succeeds then the "name_out", "header" and "data" arguments are\npopulated with pointers to buffers containing the relevant decoded data. The\ncaller is responsible for freeing those buffers. It is possible to construct a\nPEM file that results in 0 bytes of payload data. In this case PEM_read_bio_ex()\nwill return a failure code but will populate the header argument with a pointer\nto a buffer that has already been freed. If the caller also frees this buffer\nthen a double free will occur. This will most likely lead to a crash. This\ncould be exploited by an attacker who has the ability to supply malicious PEM\nfiles for parsing to achieve a denial of service attack.\n\nThe functions PEM_read_bio() and PEM_read() are simple wrappers around\nPEM_read_bio_ex() and therefore these functions are also directly affected.\n\nThese functions are also called indirectly by a number of other OpenSSL\nfunctions including PEM_X509_INFO_read_bio_ex() and\nSSL_CTX_use_serverinfo_file() which are also vulnerable. Some OpenSSL internal\nuses of these functions are not vulnerable because the caller does not free the\nheader argument if PEM_read_bio_ex() returns a failure code. These locations\ninclude the PEM_read_bio_TYPE() functions as well as the decoders introduced in\nOpenSSL 3.0.\n\nThe OpenSSL asn1parse command line application is also impacted by this issue.',
-              'diffID':        'sha256:e5e13b0c77cbb769548077189c3da2f0a764ceca06af49d8d558e759f5c232bd',
-              'fixedVersions': [
-                '1.1.1t-r0'
-              ],
-              'installedVersion': '1.1.1s-r0',
-              'packageName':      'libssl1.1',
-              'purl':             'pkg:apk/alpine/libssl1.1@1.1.1s-r0?arch=x86_64&distro=3.16.3',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2023:2165',
-                'https://access.redhat.com/security/cve/CVE-2022-4450',
-                'https://bugzilla.redhat.com/1960321',
-                'https://bugzilla.redhat.com/2164440',
-                'https://bugzilla.redhat.com/2164487',
-                'https://bugzilla.redhat.com/2164492',
-                'https://bugzilla.redhat.com/2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144000',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144003',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144006',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144008',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144010',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144012',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144015',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144017',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144019',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2145170',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2158412',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164440',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164487',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164488',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164492',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164497',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164499',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164500',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4203',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4304',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4450',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0215',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0216',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0217',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0286',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0401',
-                'https://errata.almalinux.org/9/ALSA-2023-2165.html',
-                'https://errata.rockylinux.org/RLSA-2023:0946',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=63bcf189be73a9cc1264059bed6f57974be74a83',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=bbcf509bd046b34cca19c766bbddc31683d0858b',
-                'https://linux.oracle.com/cve/CVE-2022-4450.html',
-                'https://linux.oracle.com/errata/ELSA-2023-32791.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2022-4450',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0003',
-                'https://rustsec.org/advisories/RUSTSEC-2023-0010.html',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://ubuntu.com/security/notices/USN-5844-1',
-                'https://ubuntu.com/security/notices/USN-6564-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2022-4450',
-                'https://www.openssl.org/news/secadv/20230207.txt'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: double free after calling PEM_read_bio_ex'
-            },
-            {
-              'cve':  'CVE-2023-0215',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'nvd': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   'The public API function BIO_new_NDEF is a helper function used for streaming\nASN.1 data via a BIO. It is primarily used internally to OpenSSL to support the\nSMIME, CMS and PKCS7 streaming capabilities, but may also be called directly by\nend user applications.\n\nThe function receives a BIO from the caller, prepends a new BIO_f_asn1 filter\nBIO onto the front of it to form a BIO chain, and then returns the new head of\nthe BIO chain to the caller. Under certain conditions, for example if a CMS\nrecipient public key is invalid, the new filter BIO is freed and the function\nreturns a NULL result indicating a failure. However, in this case, the BIO chain\nis not properly cleaned up and the BIO passed by the caller still retains\ninternal pointers to the previously freed filter BIO. If the caller then goes on\nto call BIO_pop() on the BIO then a use-after-free will occur. This will most\nlikely result in a crash.\n\n\n\nThis scenario occurs directly in the internal function B64_write_ASN1() which\nmay cause BIO_new_NDEF() to be called and will subsequently call BIO_pop() on\nthe BIO. This internal function is in turn called by the public API functions\nPEM_write_bio_ASN1_stream, PEM_write_bio_CMS_stream, PEM_write_bio_PKCS7_stream,\nSMIME_write_ASN1, SMIME_write_CMS and SMIME_write_PKCS7.\n\nOther public API functions that may be impacted by this include\ni2d_ASN1_bio_stream, BIO_new_CMS, BIO_new_PKCS7, i2d_CMS_bio_stream and\ni2d_PKCS7_bio_stream.\n\nThe OpenSSL cms and smime command line applications are similarly affected.',
-              'diffID':        'sha256:e5e13b0c77cbb769548077189c3da2f0a764ceca06af49d8d558e759f5c232bd',
-              'fixedVersions': [
-                '1.1.1t-r0'
-              ],
-              'installedVersion': '1.1.1s-r0',
-              'packageName':      'libssl1.1',
-              'purl':             'pkg:apk/alpine/libssl1.1@1.1.1s-r0?arch=x86_64&distro=3.16.3',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2023:2165',
-                'https://access.redhat.com/security/cve/CVE-2023-0215',
-                'https://bugzilla.redhat.com/1960321',
-                'https://bugzilla.redhat.com/2164440',
-                'https://bugzilla.redhat.com/2164487',
-                'https://bugzilla.redhat.com/2164492',
-                'https://bugzilla.redhat.com/2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144000',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144003',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144006',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144008',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144010',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144012',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144015',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144017',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144019',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2145170',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2158412',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164440',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164487',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164488',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164492',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164497',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164499',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164500',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4203',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4304',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4450',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0215',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0216',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0217',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0286',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0401',
-                'https://errata.almalinux.org/9/ALSA-2023-2165.html',
-                'https://errata.rockylinux.org/RLSA-2023:0946',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=8818064ce3c3c0f1b740a5aaba2a987e75bfbafd',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=9816136fe31d92ace4037d5da5257f763aeeb4eb',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=c3829dd8825c654652201e16f8a0a0c46ee3f344',
-                'https://linux.oracle.com/cve/CVE-2023-0215.html',
-                'https://linux.oracle.com/errata/ELSA-2023-32791.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-0215',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0003',
-                'https://rustsec.org/advisories/RUSTSEC-2023-0009.html',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://security.netapp.com/advisory/ntap-20230427-0007',
-                'https://security.netapp.com/advisory/ntap-20230427-0007/',
-                'https://security.netapp.com/advisory/ntap-20230427-0009',
-                'https://security.netapp.com/advisory/ntap-20230427-0009/',
-                'https://security.netapp.com/advisory/ntap-20240621-0006',
-                'https://security.netapp.com/advisory/ntap-20240621-0006/',
-                'https://ubuntu.com/security/notices/USN-5844-1',
-                'https://ubuntu.com/security/notices/USN-5845-1',
-                'https://ubuntu.com/security/notices/USN-5845-2',
-                'https://ubuntu.com/security/notices/USN-6564-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-0215',
-                'https://www.openssl.org/news/secadv/20230207.txt'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: use-after-free following BIO_new_NDEF'
-            },
-            {
-              'cve':  'CVE-2023-0286',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '7.4',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H'
-                },
-                'nvd': {
-                  'v3score':  '7.4',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.4',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-843'
-              ],
-              'description':   'There is a type confusion vulnerability relating to X.400 address processing\ninside an X.509 GeneralName. X.400 addresses were parsed as an ASN1_STRING but\nthe public structure definition for GENERAL_NAME incorrectly specified the type\nof the x400Address field as ASN1_TYPE. This field is subsequently interpreted by\nthe OpenSSL function GENERAL_NAME_cmp as an ASN1_TYPE rather than an\nASN1_STRING.\n\nWhen CRL checking is enabled (i.e. the application sets the\nX509_V_FLAG_CRL_CHECK flag), this vulnerability may allow an attacker to pass\narbitrary pointers to a memcmp call, enabling them to read memory contents or\nenact a denial of service. In most cases, the attack requires the attacker to\nprovide both the certificate chain and CRL, neither of which need to have a\nvalid signature. If the attacker only controls one of these inputs, the other\ninput must already contain an X.400 address as a CRL distribution point, which\nis uncommon. As such, this vulnerability is most likely to only affect\napplications which have implemented their own functionality for retrieving CRLs\nover a network.',
-              'diffID':        'sha256:e5e13b0c77cbb769548077189c3da2f0a764ceca06af49d8d558e759f5c232bd',
-              'fixedVersions': [
-                '1.1.1t-r0'
-              ],
-              'installedVersion': '1.1.1s-r0',
-              'packageName':      'libssl1.1',
-              'purl':             'pkg:apk/alpine/libssl1.1@1.1.1s-r0?arch=x86_64&distro=3.16.3',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2025:7937',
-                'https://access.redhat.com/security/cve/CVE-2023-0286',
-                'https://access.redhat.com/security/cve/cve-2023-0286',
-                'https://bugzilla.redhat.com/2164440',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144000',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144003',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144006',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144008',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144010',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144012',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144015',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144017',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144019',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2145170',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2158412',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164440',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164487',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164488',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164492',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164497',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164499',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164500',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4203',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4304',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4450',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0215',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0216',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0217',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0286',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0401',
-                'https://errata.almalinux.org/9/ALSA-2025-7937.html',
-                'https://errata.rockylinux.org/RLSA-2023:0946',
-                'https://ftp.openbsd.org/pub/OpenBSD/LibreSSL/libressl-3.6.2-relnotes.txt',
-                'https://ftp.openbsd.org/pub/OpenBSD/patches/7.2/common/018_x509.patch.sig',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=2c6c9d439b484e1ba9830d8454a34fa4f80fdfe9',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=2f7530077e0ef79d98718138716bc51ca0cad658',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=fd2af07dc083a350c959147097003a14a5e8ac4d',
-                'https://github.com/pyca/cryptography',
-                'https://github.com/pyca/cryptography/security/advisories/GHSA-x4qr-2fvf-3mr5',
-                'https://linux.oracle.com/cve/CVE-2023-0286.html',
-                'https://linux.oracle.com/errata/ELSA-2025-7937.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-0286',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0003',
-                'https://rustsec.org/advisories/RUSTSEC-2023-0006.html',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://ubuntu.com/security/notices/USN-5844-1',
-                'https://ubuntu.com/security/notices/USN-5845-1',
-                'https://ubuntu.com/security/notices/USN-5845-2',
-                'https://ubuntu.com/security/notices/USN-6564-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-0286',
-                'https://www.openssl.org/news/secadv/20230207.txt'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: X.400 address type confusion in X.509 GeneralName'
-            },
-            {
-              'cve':  'CVE-2023-0464',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-295'
-              ],
-              'description':   "A security vulnerability has been identified in all supported versions\n\nof OpenSSL related to the verification of X.509 certificate chains\nthat include policy constraints.  Attackers may be able to exploit this\nvulnerability by creating a malicious certificate chain that triggers\nexponential use of computational resources, leading to a denial-of-service\n(DoS) attack on affected systems.\n\nPolicy processing is disabled by default but can be enabled by passing\nthe `-policy' argument to the command line utilities or by calling the\n`X509_VERIFY_PARAM_set1_policies()' function.",
-              'diffID':        'sha256:e5e13b0c77cbb769548077189c3da2f0a764ceca06af49d8d558e759f5c232bd',
-              'fixedVersions': [
-                '1.1.1t-r1'
-              ],
-              'installedVersion': '1.1.1s-r0',
-              'packageName':      'libssl1.1',
-              'purl':             'pkg:apk/alpine/libssl1.1@1.1.1s-r0?arch=x86_64&distro=3.16.3',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2023:3722',
-                'https://access.redhat.com/security/cve/CVE-2023-0464',
-                'https://bugzilla.redhat.com/2181082',
-                'https://bugzilla.redhat.com/2182561',
-                'https://bugzilla.redhat.com/2182565',
-                'https://bugzilla.redhat.com/2188461',
-                'https://bugzilla.redhat.com/2207947',
-                'https://errata.almalinux.org/9/ALSA-2023-3722.html',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=2017771e2db3e2b96f89bbe8766c3209f6a99545',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=2dcd4f1e3115f38cefa43e3efbe9b801c27e642e',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=879f7080d7e141f415c79eaa3a8ac4a3dad0348b',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=959c59c7a0164117e7f8366466a32bb1f8d77ff1',
-                'https://linux.oracle.com/cve/CVE-2023-0464.html',
-                'https://linux.oracle.com/errata/ELSA-2023-3722.html',
-                'https://lists.debian.org/debian-lts-announce/2023/06/msg00011.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-0464',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://security.netapp.com/advisory/ntap-20230406-0006/',
-                'https://security.netapp.com/advisory/ntap-20240621-0006/',
-                'https://ubuntu.com/security/notices/USN-6039-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.couchbase.com/alerts/',
-                'https://www.cve.org/CVERecord?id=CVE-2023-0464',
-                'https://www.debian.org/security/2023/dsa-5417',
-                'https://www.openssl.org/news/secadv/20230322.txt'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: Denial of service by excessive resource usage in verifying X509 policy constraints'
-            },
-            {
-              'cve':  'CVE-2022-4304',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N'
-                },
-                'nvd': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N'
-                },
-                'redhat': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-203'
-              ],
-              'description':   'A timing based side channel exists in the OpenSSL RSA Decryption implementation\nwhich could be sufficient to recover a plaintext across a network in a\nBleichenbacher style attack. To achieve a successful decryption an attacker\nwould have to be able to send a very large number of trial messages for\ndecryption. The vulnerability affects all RSA padding modes: PKCS#1 v1.5,\nRSA-OEAP and RSASVE.\n\nFor example, in a TLS connection, RSA is commonly used by a client to send an\nencrypted pre-master secret to the server. An attacker that had observed a\ngenuine connection between a client and a server could use this flaw to send\ntrial messages to the server and record the time taken to process them. After a\nsufficiently large number of messages the attacker could recover the pre-master\nsecret used for the original connection and thus be able to decrypt the\napplication data sent over that connection.',
-              'diffID':        'sha256:e5e13b0c77cbb769548077189c3da2f0a764ceca06af49d8d558e759f5c232bd',
-              'fixedVersions': [
-                '1.1.1t-r0'
-              ],
-              'installedVersion': '1.1.1s-r0',
-              'packageName':      'libssl1.1',
-              'purl':             'pkg:apk/alpine/libssl1.1@1.1.1s-r0?arch=x86_64&distro=3.16.3',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2023:2165',
-                'https://access.redhat.com/security/cve/CVE-2022-4304',
-                'https://bugzilla.redhat.com/1960321',
-                'https://bugzilla.redhat.com/2164440',
-                'https://bugzilla.redhat.com/2164487',
-                'https://bugzilla.redhat.com/2164492',
-                'https://bugzilla.redhat.com/2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144000',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144003',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144006',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144008',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144010',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144012',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144015',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144017',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144019',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2145170',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2158412',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164440',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164487',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164488',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164492',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164497',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164499',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164500',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4203',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4304',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4450',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0215',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0216',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0217',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0286',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0401',
-                'https://errata.almalinux.org/9/ALSA-2023-2165.html',
-                'https://errata.rockylinux.org/RLSA-2023:0946',
-                'https://linux.oracle.com/cve/CVE-2022-4304.html',
-                'https://linux.oracle.com/errata/ELSA-2023-32791.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2022-4304',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0003',
-                'https://rustsec.org/advisories/RUSTSEC-2023-0007.html',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://ubuntu.com/security/notices/USN-5844-1',
-                'https://ubuntu.com/security/notices/USN-6564-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2022-4304',
-                'https://www.openssl.org/news/secadv/20230207.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: timing attack in RSA Decryption implementation'
-            },
-            {
-              'cve':  'CVE-2023-0465',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N'
-                },
-                'redhat': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-295'
-              ],
-              'description':   "Applications that use a non-default option when verifying certificates may be\nvulnerable to an attack from a malicious CA to circumvent certain checks.\n\nInvalid certificate policies in leaf certificates are silently ignored by\nOpenSSL and other certificate policy checks are skipped for that certificate.\nA malicious CA could use this to deliberately assert invalid certificate policies\nin order to circumvent policy checking on the certificate altogether.\n\nPolicy processing is disabled by default but can be enabled by passing\nthe `-policy' argument to the command line utilities or by calling the\n`X509_VERIFY_PARAM_set1_policies()' function.",
-              'diffID':        'sha256:e5e13b0c77cbb769548077189c3da2f0a764ceca06af49d8d558e759f5c232bd',
-              'fixedVersions': [
-                '1.1.1t-r2'
-              ],
-              'installedVersion': '1.1.1s-r0',
-              'packageName':      'libssl1.1',
-              'purl':             'pkg:apk/alpine/libssl1.1@1.1.1s-r0?arch=x86_64&distro=3.16.3',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2023:3722',
-                'https://access.redhat.com/security/cve/CVE-2023-0465',
-                'https://bugzilla.redhat.com/2181082',
-                'https://bugzilla.redhat.com/2182561',
-                'https://bugzilla.redhat.com/2182565',
-                'https://bugzilla.redhat.com/2188461',
-                'https://bugzilla.redhat.com/2207947',
-                'https://errata.almalinux.org/9/ALSA-2023-3722.html',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=10325176f3d3e98c6e2b3bf5ab1e3b334de6947a',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=1dd43e0709fece299b15208f36cc7c76209ba0bb',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=b013765abfa80036dc779dd0e50602c57bb3bf95',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=facfb1ab745646e97a1920977ae4a9965ea61d5c',
-                'https://linux.oracle.com/cve/CVE-2023-0465.html',
-                'https://linux.oracle.com/errata/ELSA-2023-3722.html',
-                'https://lists.debian.org/debian-lts-announce/2023/06/msg00011.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-0465',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://security.netapp.com/advisory/ntap-20230414-0001/',
-                'https://ubuntu.com/security/notices/USN-6039-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-0465',
-                'https://www.debian.org/security/2023/dsa-5417',
-                'https://www.openssl.org/news/secadv/20230328.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: Invalid certificate policies in leaf certificates are silently ignored'
-            },
-            {
-              'cve':  'CVE-2023-2650',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '6.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-770'
-              ],
-              'description':   "Issue summary: Processing some specially crafted ASN.1 object identifiers or\ndata containing them may be very slow.\n\nImpact summary: Applications that use OBJ_obj2txt() directly, or use any of\nthe OpenSSL subsystems OCSP, PKCS7/SMIME, CMS, CMP/CRMF or TS with no message\nsize limit may experience notable to very long delays when processing those\nmessages, which may lead to a Denial of Service.\n\nAn OBJECT IDENTIFIER is composed of a series of numbers - sub-identifiers -\nmost of which have no size limit.  OBJ_obj2txt() may be used to translate\nan ASN.1 OBJECT IDENTIFIER given in DER encoding form (using the OpenSSL\ntype ASN1_OBJECT) to its canonical numeric text form, which are the\nsub-identifiers of the OBJECT IDENTIFIER in decimal form, separated by\nperiods.\n\nWhen one of the sub-identifiers in the OBJECT IDENTIFIER is very large\n(these are sizes that are seen as absurdly large, taking up tens or hundreds\nof KiBs), the translation to a decimal number in text may take a very long\ntime.  The time complexity is O(n^2) with 'n' being the size of the\nsub-identifiers in bytes (*).\n\nWith OpenSSL 3.0, support to fetch cryptographic algorithms using names /\nidentifiers in string form was introduced.  This includes using OBJECT\nIDENTIFIERs in canonical numeric text form as identifiers for fetching\nalgorithms.\n\nSuch OBJECT IDENTIFIERs may be received through the ASN.1 structure\nAlgorithmIdentifier, which is commonly used in multiple protocols to specify\nwhat cryptographic algorithm should be used to sign or verify, encrypt or\ndecrypt, or digest passed data.\n\nApplications that call OBJ_obj2txt() directly with untrusted data are\naffected, with any version of OpenSSL.  If the use is for the mere purpose\nof display, the severity is considered low.\n\nIn OpenSSL 3.0 and newer, this affects the subsystems OCSP, PKCS7/SMIME,\nCMS, CMP/CRMF or TS.  It also impacts anything that processes X.509\ncertificates, including simple things like verifying its signature.\n\nThe impact on TLS is relatively low, because all versions of OpenSSL have a\n100KiB limit on the peer's certificate chain.  Additionally, this only\nimpacts clients, or servers that have explicitly enabled client\nauthentication.\n\nIn OpenSSL 1.1.1 and 1.0.2, this only affects displaying diverse objects,\nsuch as X.509 certificates.  This is assumed to not happen in such a way\nthat it would cause a Denial of Service, so these versions are considered\nnot affected by this issue in such a way that it would be cause for concern,\nand the severity is therefore considered low.",
-              'diffID':        'sha256:e5e13b0c77cbb769548077189c3da2f0a764ceca06af49d8d558e759f5c232bd',
-              'fixedVersions': [
-                '1.1.1u-r0'
-              ],
-              'installedVersion': '1.1.1s-r0',
-              'packageName':      'libssl1.1',
-              'purl':             'pkg:apk/alpine/libssl1.1@1.1.1s-r0?arch=x86_64&distro=3.16.3',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2023/05/30/1',
-                'https://access.redhat.com/errata/RHSA-2023:6330',
-                'https://access.redhat.com/security/cve/CVE-2023-2650',
-                'https://bugzilla.redhat.com/1858038',
-                'https://bugzilla.redhat.com/2207947',
-                'https://errata.almalinux.org/9/ALSA-2023-6330.html',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=423a2bc737a908ad0c77bda470b2b59dc879936b',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=853c5e56ee0b8650c73140816bb8b91d6163422c',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=9e209944b35cf82368071f160a744b6178f9b098',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=db779b0e10b047f2585615e0b8f2acdf21f8544a',
-                'https://linux.oracle.com/cve/CVE-2023-2650.html',
-                'https://linux.oracle.com/errata/ELSA-2023-6330.html',
-                'https://lists.debian.org/debian-lts-announce/2023/06/msg00011.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-2650',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0009',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://security.netapp.com/advisory/ntap-20230703-0001/',
-                'https://security.netapp.com/advisory/ntap-20231027-0009/',
-                'https://ubuntu.com/security/notices/USN-6119-1',
-                'https://ubuntu.com/security/notices/USN-6188-1',
-                'https://ubuntu.com/security/notices/USN-6672-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-2650',
-                'https://www.debian.org/security/2023/dsa-5417',
-                'https://www.openssl.org/news/secadv/20230530.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: Possible DoS translating ASN.1 object identifiers'
-            },
-            {
-              'cve':  'CVE-2023-3446',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L'
-                },
-                'redhat': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L'
-                }
-              },
-              'cwes': [
-                'CWE-606',
-                'CWE-1333'
-              ],
-              'description':   "Issue summary: Checking excessively long DH keys or parameters may be very slow.\n\nImpact summary: Applications that use the functions DH_check(), DH_check_ex()\nor EVP_PKEY_param_check() to check a DH key or DH parameters may experience long\ndelays. Where the key or parameters that are being checked have been obtained\nfrom an untrusted source this may lead to a Denial of Service.\n\nThe function DH_check() performs various checks on DH parameters. One of those\nchecks confirms that the modulus ('p' parameter) is not too large. Trying to use\na very large modulus is slow and OpenSSL will not normally use a modulus which\nis over 10,000 bits in length.\n\nHowever the DH_check() function checks numerous aspects of the key or parameters\nthat have been supplied. Some of those checks use the supplied modulus value\neven if it has already been found to be too large.\n\nAn application that calls DH_check() and supplies a key or parameters obtained\nfrom an untrusted source could be vulernable to a Denial of Service attack.\n\nThe function DH_check() is itself called by a number of other OpenSSL functions.\nAn application calling any of those other functions may similarly be affected.\nThe other functions affected by this are DH_check_ex() and\nEVP_PKEY_param_check().\n\nAlso vulnerable are the OpenSSL dhparam and pkeyparam command line applications\nwhen using the '-check' option.\n\nThe OpenSSL SSL/TLS implementation is not affected by this issue.\nThe OpenSSL 3.0 and 3.1 FIPS providers are not affected by this issue.",
-              'diffID':        'sha256:e5e13b0c77cbb769548077189c3da2f0a764ceca06af49d8d558e759f5c232bd',
-              'fixedVersions': [
-                '1.1.1u-r2'
-              ],
-              'installedVersion': '1.1.1s-r0',
-              'packageName':      'libssl1.1',
-              'purl':             'pkg:apk/alpine/libssl1.1@1.1.1s-r0?arch=x86_64&distro=3.16.3',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2023/07/19/4',
-                'http://www.openwall.com/lists/oss-security/2023/07/19/5',
-                'http://www.openwall.com/lists/oss-security/2023/07/19/6',
-                'http://www.openwall.com/lists/oss-security/2023/07/31/1',
-                'http://www.openwall.com/lists/oss-security/2024/05/16/1',
-                'https://access.redhat.com/errata/RHSA-2024:2447',
-                'https://access.redhat.com/security/cve/CVE-2023-3446',
-                'https://bugzilla.redhat.com/2223016',
-                'https://bugzilla.redhat.com/2224962',
-                'https://bugzilla.redhat.com/2227852',
-                'https://bugzilla.redhat.com/2248616',
-                'https://bugzilla.redhat.com/2257571',
-                'https://bugzilla.redhat.com/2258502',
-                'https://bugzilla.redhat.com/2259944',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2224962',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2257582',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2257583',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2258677',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2258688',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2258691',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2258694',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2258700',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-36763',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-36764',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3446',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45229',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45231',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45232',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45233',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45235',
-                'https://errata.almalinux.org/9/ALSA-2024-2447.html',
-                'https://errata.rockylinux.org/RLSA-2024:2264',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=1fa20cf2f506113c761777127a38bce5068740eb',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=8780a896543a654e757db1b9396383f9d8095528',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=9a0a4d3c1e7138915563c0df4fe6a3f9377b839c',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=fc9867c1e03c22ebf56943be205202e576aabf23',
-                'https://linux.oracle.com/cve/CVE-2023-3446.html',
-                'https://linux.oracle.com/errata/ELSA-2024-2447.html',
-                'https://lists.debian.org/debian-lts-announce/2023/08/msg00019.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-3446',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://security.netapp.com/advisory/ntap-20230803-0011/',
-                'https://ubuntu.com/security/notices/USN-6435-1',
-                'https://ubuntu.com/security/notices/USN-6435-2',
-                'https://ubuntu.com/security/notices/USN-6450-1',
-                'https://ubuntu.com/security/notices/USN-6709-1',
-                'https://ubuntu.com/security/notices/USN-7018-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-3446',
-                'https://www.openssl.org/news/secadv/20230719.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: Excessive time spent checking DH keys and parameters'
-            },
-            {
-              'cve':  'CVE-2023-3817',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L'
-                },
-                'redhat': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L'
-                }
-              },
-              'cwes': [
-                'CWE-606',
-                'CWE-834'
-              ],
-              'description':   'Issue summary: Checking excessively long DH keys or parameters may be very slow.\n\nImpact summary: Applications that use the functions DH_check(), DH_check_ex()\nor EVP_PKEY_param_check() to check a DH key or DH parameters may experience long\ndelays. Where the key or parameters that are being checked have been obtained\nfrom an untrusted source this may lead to a Denial of Service.\n\nThe function DH_check() performs various checks on DH parameters. After fixing\nCVE-2023-3446 it was discovered that a large q parameter value can also trigger\nan overly long computation during some of these checks. A correct q value,\nif present, cannot be larger than the modulus p parameter, thus it is\nunnecessary to perform these checks if q is larger than p.\n\nAn application that calls DH_check() and supplies a key or parameters obtained\nfrom an untrusted source could be vulnerable to a Denial of Service attack.\n\nThe function DH_check() is itself called by a number of other OpenSSL functions.\nAn application calling any of those other functions may similarly be affected.\nThe other functions affected by this are DH_check_ex() and\nEVP_PKEY_param_check().\n\nAlso vulnerable are the OpenSSL dhparam and pkeyparam command line applications\nwhen using the "-check" option.\n\nThe OpenSSL SSL/TLS implementation is not affected by this issue.\n\nThe OpenSSL 3.0 and 3.1 FIPS providers are not affected by this issue.',
-              'diffID':        'sha256:e5e13b0c77cbb769548077189c3da2f0a764ceca06af49d8d558e759f5c232bd',
-              'fixedVersions': [
-                '1.1.1v-r0'
-              ],
-              'installedVersion': '1.1.1s-r0',
-              'packageName':      'libssl1.1',
-              'purl':             'pkg:apk/alpine/libssl1.1@1.1.1s-r0?arch=x86_64&distro=3.16.3',
-              'references':       [
-                'http://seclists.org/fulldisclosure/2023/Jul/43',
-                'http://www.openwall.com/lists/oss-security/2023/07/31/1',
-                'http://www.openwall.com/lists/oss-security/2023/09/22/11',
-                'http://www.openwall.com/lists/oss-security/2023/09/22/9',
-                'http://www.openwall.com/lists/oss-security/2023/11/06/2',
-                'https://access.redhat.com/errata/RHSA-2024:2447',
-                'https://access.redhat.com/security/cve/CVE-2023-3817',
-                'https://bugzilla.redhat.com/2223016',
-                'https://bugzilla.redhat.com/2224962',
-                'https://bugzilla.redhat.com/2227852',
-                'https://bugzilla.redhat.com/2248616',
-                'https://bugzilla.redhat.com/2257571',
-                'https://bugzilla.redhat.com/2258502',
-                'https://bugzilla.redhat.com/2259944',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2224962',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2227852',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2248616',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2270358',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3446',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3817',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-5678',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-2408',
-                'https://errata.almalinux.org/9/ALSA-2024-2447.html',
-                'https://errata.rockylinux.org/RLSA-2023:7877',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=6a1eb62c29db6cb5eec707f9338aee00f44e26f5',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=869ad69aadd985c7b8ca6f4e5dd0eb274c9f3644',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=9002fd07327a91f35ba6c1307e71fa6fd4409b7f',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=91ddeba0f2269b017dc06c46c993a788974b1aa5',
-                'https://linux.oracle.com/cve/CVE-2023-3817.html',
-                'https://linux.oracle.com/errata/ELSA-2024-2447.html',
-                'https://lists.debian.org/debian-lts-announce/2023/08/msg00019.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-3817',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://security.netapp.com/advisory/ntap-20230818-0014/',
-                'https://security.netapp.com/advisory/ntap-20231027-0008/',
-                'https://security.netapp.com/advisory/ntap-20240621-0006/',
-                'https://ubuntu.com/security/notices/USN-6435-1',
-                'https://ubuntu.com/security/notices/USN-6435-2',
-                'https://ubuntu.com/security/notices/USN-6450-1',
-                'https://ubuntu.com/security/notices/USN-6709-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-3817',
-                'https://www.openssl.org/news/secadv/20230731.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'OpenSSL: Excessive time spent checking DH q parameter value'
-            },
-            {
-              'cve':  'CVE-2023-5678',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L'
-                },
-                'redhat': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L'
-                }
-              },
-              'cwes': [
-                'CWE-606',
-                'CWE-754'
-              ],
-              'description':   "Issue summary: Generating excessively long X9.42 DH keys or checking\nexcessively long X9.42 DH keys or parameters may be very slow.\n\nImpact summary: Applications that use the functions DH_generate_key() to\ngenerate an X9.42 DH key may experience long delays.  Likewise, applications\nthat use DH_check_pub_key(), DH_check_pub_key_ex() or EVP_PKEY_public_check()\nto check an X9.42 DH key or X9.42 DH parameters may experience long delays.\nWhere the key or parameters that are being checked have been obtained from\nan untrusted source this may lead to a Denial of Service.\n\nWhile DH_check() performs all the necessary checks (as of CVE-2023-3817),\nDH_check_pub_key() doesn't make any of these checks, and is therefore\nvulnerable for excessively large P and Q parameters.\n\nLikewise, while DH_generate_key() performs a check for an excessively large\nP, it doesn't check for an excessively large Q.\n\nAn application that calls DH_generate_key() or DH_check_pub_key() and\nsupplies a key or parameters obtained from an untrusted source could be\nvulnerable to a Denial of Service attack.\n\nDH_generate_key() and DH_check_pub_key() are also called by a number of\nother OpenSSL functions.  An application calling any of those other\nfunctions may similarly be affected.  The other functions affected by this\nare DH_check_pub_key_ex(), EVP_PKEY_public_check(), and EVP_PKEY_generate().\n\nAlso vulnerable are the OpenSSL pkey command line application when using the\n\"-pubcheck\" option, as well as the OpenSSL genpkey command line application.\n\nThe OpenSSL SSL/TLS implementation is not affected by this issue.\n\nThe OpenSSL 3.0 and 3.1 FIPS providers are not affected by this issue.",
-              'diffID':        'sha256:e5e13b0c77cbb769548077189c3da2f0a764ceca06af49d8d558e759f5c232bd',
-              'fixedVersions': [
-                '1.1.1w-r1'
-              ],
-              'installedVersion': '1.1.1s-r0',
-              'packageName':      'libssl1.1',
-              'purl':             'pkg:apk/alpine/libssl1.1@1.1.1s-r0?arch=x86_64&distro=3.16.3',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2024/03/11/1',
-                'https://access.redhat.com/errata/RHSA-2024:2447',
-                'https://access.redhat.com/security/cve/CVE-2023-5678',
-                'https://bugzilla.redhat.com/2223016',
-                'https://bugzilla.redhat.com/2224962',
-                'https://bugzilla.redhat.com/2227852',
-                'https://bugzilla.redhat.com/2248616',
-                'https://bugzilla.redhat.com/2257571',
-                'https://bugzilla.redhat.com/2258502',
-                'https://bugzilla.redhat.com/2259944',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2224962',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2227852',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2248616',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2270358',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3446',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3817',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-5678',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-2408',
-                'https://errata.almalinux.org/9/ALSA-2024-2447.html',
-                'https://errata.rockylinux.org/RLSA-2023:7877',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=34efaef6c103d636ab507a0cc34dca4d3aecc055',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=710fee740904b6290fef0dd5536fbcedbc38ff0c',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=db925ae2e65d0d925adef429afc37f75bd1c2017',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=ddeb4b6c6d527e54ce9a99cba785c0f7776e54b6',
-                'https://linux.oracle.com/cve/CVE-2023-5678.html',
-                'https://linux.oracle.com/errata/ELSA-2024-2447.html',
-                'https://lists.debian.org/debian-lts-announce/2024/10/msg00033.html',
-                'https://lists.debian.org/debian-lts-announce/2024/11/msg00000.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-5678',
-                'https://security.netapp.com/advisory/ntap-20231130-0010/',
-                'https://ubuntu.com/security/notices/USN-6622-1',
-                'https://ubuntu.com/security/notices/USN-6632-1',
-                'https://ubuntu.com/security/notices/USN-6709-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-5678',
-                'https://www.openssl.org/news/secadv/20231106.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: Generating excessively long X9.42 DH keys or checking excessively long X9.42 DH keys or parameters may be very slow'
-            },
-            {
-              'cve':  'CVE-2025-26519',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-787'
-              ],
-              'description':   'musl libc 0.9.13 through 1.2.5 before 1.2.6 has an out-of-bounds write vulnerability when an attacker can trigger iconv conversion of untrusted EUC-KR text to UTF-8.',
-              'diffID':        'sha256:433ffab6c0b7214f219a0d0b513cebf06a5c498225b01015740db1ab713848eb',
-              'fixedVersions': [
-                '1.2.3-r4'
-              ],
-              'installedVersion': '1.2.3-r2',
-              'packageName':      'musl',
-              'purl':             'pkg:apk/alpine/musl@1.2.3-r2?arch=x86_64&distro=3.16.3',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2025/02/13/2',
-                'http://www.openwall.com/lists/oss-security/2025/02/13/3',
-                'http://www.openwall.com/lists/oss-security/2025/02/13/4',
-                'http://www.openwall.com/lists/oss-security/2025/02/13/5',
-                'http://www.openwall.com/lists/oss-security/2025/02/14/5',
-                'http://www.openwall.com/lists/oss-security/2025/02/14/6',
-                'https://git.musl-libc.org/cgit/musl/commit/?id=c47ad25ea3b484e10326f933e927c0bc8cded3da',
-                'https://git.musl-libc.org/cgit/musl/commit/?id=e5adcd97b5196e29991b524237381a0202a60659',
-                'https://www.openwall.com/lists/oss-security/2025/02/13/2'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'musl libc 0.9.13 through 1.2.5 before 1.2.6 has an out-of-bounds write ...'
-            },
-            {
-              'cve':  'CVE-2025-26519',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-787'
-              ],
-              'description':   'musl libc 0.9.13 through 1.2.5 before 1.2.6 has an out-of-bounds write vulnerability when an attacker can trigger iconv conversion of untrusted EUC-KR text to UTF-8.',
-              'diffID':        'sha256:433ffab6c0b7214f219a0d0b513cebf06a5c498225b01015740db1ab713848eb',
-              'fixedVersions': [
-                '1.2.3-r4'
-              ],
-              'installedVersion': '1.2.3-r2',
-              'packageName':      'musl-utils',
-              'purl':             'pkg:apk/alpine/musl-utils@1.2.3-r2?arch=x86_64&distro=3.16.3',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2025/02/13/2',
-                'http://www.openwall.com/lists/oss-security/2025/02/13/3',
-                'http://www.openwall.com/lists/oss-security/2025/02/13/4',
-                'http://www.openwall.com/lists/oss-security/2025/02/13/5',
-                'http://www.openwall.com/lists/oss-security/2025/02/14/5',
-                'http://www.openwall.com/lists/oss-security/2025/02/14/6',
-                'https://git.musl-libc.org/cgit/musl/commit/?id=c47ad25ea3b484e10326f933e927c0bc8cded3da',
-                'https://git.musl-libc.org/cgit/musl/commit/?id=e5adcd97b5196e29991b524237381a0202a60659',
-                'https://www.openwall.com/lists/oss-security/2025/02/13/2'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'musl libc 0.9.13 through 1.2.5 before 1.2.6 has an out-of-bounds write ...'
-            },
-            {
-              'cve':  'CVE-2023-42366',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.5',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.1',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-787'
-              ],
-              'description':   'A heap-buffer-overflow was discovered in BusyBox v.1.36.1 in the next_token function at awk.c:1159.',
-              'diffID':        'sha256:e5e13b0c77cbb769548077189c3da2f0a764ceca06af49d8d558e759f5c232bd',
-              'fixedVersions': [
-                '1.35.0-r18'
-              ],
-              'installedVersion': '1.35.0-r17',
-              'packageName':      'ssl_client',
-              'purl':             'pkg:apk/alpine/ssl_client@1.35.0-r17?arch=x86_64&distro=3.16.3',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2023-42366',
-                'https://bugs.busybox.net/show_bug.cgi?id=15874',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-42366',
-                'https://security.netapp.com/advisory/ntap-20241206-0007/',
-                'https://www.cve.org/CVERecord?id=CVE-2023-42366'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'busybox: A heap-buffer-overflow'
-            }
-          ]
-        }
-      ],
-      'summary': {
-        'critical':   0,
-        'high':       10,
-        'low':        0,
-        'medium':     14,
-        'suppressed': 0,
-        'unknown':    0
-      }
-    }
-  },
-  {
-    'id':    'default/561c8ba8249708aef2b8db55aaa71a182b2fd3c4d1f2fe0be72f9eb78c3ffb51',
-    'type':  'storage.sbomscanner.kubewarden.io.vulnerabilityreport',
-    'links': {
-      'patch':  'https://localhost:8005/v1/storage.sbomscanner.kubewarden.io.vulnerabilityreports/default/561c8ba8249708aef2b8db55aaa71a182b2fd3c4d1f2fe0be72f9eb78c3ffb51',
-      'remove': 'https://localhost:8005/v1/storage.sbomscanner.kubewarden.io.vulnerabilityreports/default/561c8ba8249708aef2b8db55aaa71a182b2fd3c4d1f2fe0be72f9eb78c3ffb51',
-      'self':   'https://localhost:8005/v1/storage.sbomscanner.kubewarden.io.vulnerabilityreports/default/561c8ba8249708aef2b8db55aaa71a182b2fd3c4d1f2fe0be72f9eb78c3ffb51',
-      'update': 'https://localhost:8005/v1/storage.sbomscanner.kubewarden.io.vulnerabilityreports/default/561c8ba8249708aef2b8db55aaa71a182b2fd3c4d1f2fe0be72f9eb78c3ffb51',
-      'view':   'https://localhost:8005/apis/storage.sbomscanner.kubewarden.io/v1alpha1/namespaces/default/vulnerabilityreports/561c8ba8249708aef2b8db55aaa71a182b2fd3c4d1f2fe0be72f9eb78c3ffb51'
-    },
-    'apiVersion':    'storage.sbomscanner.kubewarden.io/v1alpha1',
-    'imageMetadata': {
-      'digest':      'sha256:88ca6e719536e0079b6d248f335cd6d33e41ba67db94f460d1a9f5f90ef40cd1',
-      'platform':    'linux/ppc64le',
-      'registry':    'lsong-demo1',
-      'registryURI': 'registry-1.docker.io',
-      'repository':  'library/alpine',
-      'tag':         '3.19.2'
-    },
-    'kind':     'VulnerabilityReport',
-    'metadata': {
-      'creationTimestamp': '2026-01-14T18:52:06Z',
-      'fields':            [
-        '561c8ba8249708aef2b8db55aaa71a182b2fd3c4d1f2fe0be72f9eb78c3ffb51',
-        'registry-1.docker.io/library/alpine:3.19.2',
-        'linux/ppc64le',
-        '22 (0 suppressed)'
-      ],
-      'labels': {
-        'app.kubernetes.io/managed-by':          'sbomscanner',
-        'app.kubernetes.io/part-of':             'sbomscanner',
-        'sbomscanner.kubewarden.io/scanjob-uid': '445c600a-c4b6-40b3-bd71-f2d2140a37d5'
-      },
-      'name':            '561c8ba8249708aef2b8db55aaa71a182b2fd3c4d1f2fe0be72f9eb78c3ffb51',
-      'namespace':       'default',
-      'ownerReferences': [
-        {
-          'apiVersion':         'storage.sbomscanner.kubewarden.io/v1alpha1',
-          'blockOwnerDeletion': true,
-          'controller':         true,
-          'kind':               'SBOM',
-          'name':               '561c8ba8249708aef2b8db55aaa71a182b2fd3c4d1f2fe0be72f9eb78c3ffb51',
-          'uid':                '988a19f3-dc97-436a-bf96-24d85b7c8653'
-        }
-      ],
-      'relationships': [
-        {
-          'fromId':   'default/561c8ba8249708aef2b8db55aaa71a182b2fd3c4d1f2fe0be72f9eb78c3ffb51',
-          'fromType': 'storage.sbomscanner.kubewarden.io.sbom',
-          'rel':      'owner',
-          'state':    'active',
-          'message':  'Resource is current'
-        }
-      ],
-      'resourceVersion': '1',
-      'state':           {
-        'error':         false,
-        'message':       'Resource is current',
-        'name':          'active',
-        'transitioning': false
-      },
-      'uid': 'a643b703-6af6-447b-8f03-31c974559b82'
-    },
-    'report': {
-      'results': [
-        {
-          'class':           'os-pkgs',
-          'target':          '/var/run/worker/trivy.sbom.2807291984.json (alpine 3.19.2)',
-          'type':            'alpine',
-          'vulnerabilities': [
-            {
-              'cve':  'CVE-2024-58251',
-              'cwes': [
-                'CWE-150'
-              ],
-              'description':   'In netstat in BusyBox through 1.37.0, local users can launch of network application with an argv[0] containing an ANSI terminal escape sequence, leading to a denial of service (terminal locked up) when netstat is used by a victim.',
-              'diffID':        'sha256:58256dbcb6283795ba0b2b89d5c0912985820bf7d51622305327a0c18f513bad',
-              'fixedVersions': [
-                '1.36.1-r21'
-              ],
-              'installedVersion': '1.36.1-r19',
-              'packageName':      'busybox',
-              'purl':             'pkg:apk/alpine/busybox@1.36.1-r19?arch=ppc64le&distro=3.19.2',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2025/04/23/6',
-                'https://bugs.busybox.net/show_bug.cgi?id=15922',
-                'https://www.busybox.net',
-                'https://www.busybox.net/downloads/',
-                'https://www.cve.org/CVERecord?id=CVE-2024-58251'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'In netstat in BusyBox through 1.37.0, local users can launch of networ ...'
-            },
-            {
-              'cve':  'CVE-2025-46394',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '3.3',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-451'
-              ],
-              'description':   'In tar in BusyBox through 1.37.0, a TAR archive can have filenames hidden from a listing through the use of terminal escape sequences.',
-              'diffID':        'sha256:58256dbcb6283795ba0b2b89d5c0912985820bf7d51622305327a0c18f513bad',
-              'fixedVersions': [
-                '1.36.1-r21'
-              ],
-              'installedVersion': '1.36.1-r19',
-              'packageName':      'busybox',
-              'purl':             'pkg:apk/alpine/busybox@1.36.1-r19?arch=ppc64le&distro=3.19.2',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2025/04/23/5',
-                'http://www.openwall.com/lists/oss-security/2025/04/24/3',
-                'https://bugs.busybox.net/show_bug.cgi?id=16018',
-                'https://lists.busybox.net/pipermail/busybox/2024-July/090806.html',
-                'https://lists.busybox.net/pipermail/busybox/2024-July/090814.html',
-                'https://www.busybox.net',
-                'https://www.busybox.net/downloads/',
-                'https://www.cve.org/CVERecord?id=CVE-2025-46394',
-                'https://www.openwall.com/lists/oss-security/2025/04/23/1'
-              ],
-              'severity':   'LOW',
-              'suppressed': false,
-              'title':      'In tar in BusyBox through 1.37.0, a TAR archive can have filenames hid ...'
-            },
-            {
-              'cve':  'CVE-2024-58251',
-              'cwes': [
-                'CWE-150'
-              ],
-              'description':   'In netstat in BusyBox through 1.37.0, local users can launch of network application with an argv[0] containing an ANSI terminal escape sequence, leading to a denial of service (terminal locked up) when netstat is used by a victim.',
-              'diffID':        'sha256:58256dbcb6283795ba0b2b89d5c0912985820bf7d51622305327a0c18f513bad',
-              'fixedVersions': [
-                '1.36.1-r21'
-              ],
-              'installedVersion': '1.36.1-r19',
-              'packageName':      'busybox-binsh',
-              'purl':             'pkg:apk/alpine/busybox-binsh@1.36.1-r19?arch=ppc64le&distro=3.19.2',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2025/04/23/6',
-                'https://bugs.busybox.net/show_bug.cgi?id=15922',
-                'https://www.busybox.net',
-                'https://www.busybox.net/downloads/',
-                'https://www.cve.org/CVERecord?id=CVE-2024-58251'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'In netstat in BusyBox through 1.37.0, local users can launch of networ ...'
-            },
-            {
-              'cve':  'CVE-2025-46394',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '3.3',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-451'
-              ],
-              'description':   'In tar in BusyBox through 1.37.0, a TAR archive can have filenames hidden from a listing through the use of terminal escape sequences.',
-              'diffID':        'sha256:58256dbcb6283795ba0b2b89d5c0912985820bf7d51622305327a0c18f513bad',
-              'fixedVersions': [
-                '1.36.1-r21'
-              ],
-              'installedVersion': '1.36.1-r19',
-              'packageName':      'busybox-binsh',
-              'purl':             'pkg:apk/alpine/busybox-binsh@1.36.1-r19?arch=ppc64le&distro=3.19.2',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2025/04/23/5',
-                'http://www.openwall.com/lists/oss-security/2025/04/24/3',
-                'https://bugs.busybox.net/show_bug.cgi?id=16018',
-                'https://lists.busybox.net/pipermail/busybox/2024-July/090806.html',
-                'https://lists.busybox.net/pipermail/busybox/2024-July/090814.html',
-                'https://www.busybox.net',
-                'https://www.busybox.net/downloads/',
-                'https://www.cve.org/CVERecord?id=CVE-2025-46394',
-                'https://www.openwall.com/lists/oss-security/2025/04/23/1'
-              ],
-              'severity':   'LOW',
-              'suppressed': false,
-              'title':      'In tar in BusyBox through 1.37.0, a TAR archive can have filenames hid ...'
-            },
-            {
-              'cve':  'CVE-2024-6119',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-843'
-              ],
-              'description':   "Issue summary: Applications performing certificate name checks (e.g., TLS\nclients checking server certificates) may attempt to read an invalid memory\naddress resulting in abnormal termination of the application process.\n\nImpact summary: Abnormal termination of an application can a cause a denial of\nservice.\n\nApplications performing certificate name checks (e.g., TLS clients checking\nserver certificates) may attempt to read an invalid memory address when\ncomparing the expected name with an `otherName` subject alternative name of an\nX.509 certificate. This may result in an exception that terminates the\napplication program.\n\nNote that basic certificate chain validation (signatures, dates, ...) is not\naffected, the denial of service can occur only when the application also\nspecifies an expected DNS name, Email address or IP address.\n\nTLS servers rarely solicit client certificates, and even when they do, they\ngenerally don't perform a name check against a reference identifier (expected\nidentity), but rather extract the presented identity after checking the\ncertificate chain.  So TLS servers are generally not affected and the severity\nof the issue is Moderate.\n\nThe FIPS modules in 3.3, 3.2, 3.1 and 3.0 are not affected by this issue.",
-              'diffID':        'sha256:58256dbcb6283795ba0b2b89d5c0912985820bf7d51622305327a0c18f513bad',
-              'fixedVersions': [
-                '3.1.7-r0'
-              ],
-              'installedVersion': '3.1.5-r0',
-              'packageName':      'libcrypto3',
-              'purl':             'pkg:apk/alpine/libcrypto3@3.1.5-r0?arch=ppc64le&distro=3.19.2',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2024/09/03/4',
-                'https://access.redhat.com/errata/RHSA-2024:8935',
-                'https://access.redhat.com/security/cve/CVE-2024-6119',
-                'https://bugzilla.redhat.com/2306158',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2306158',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-6119',
-                'https://errata.almalinux.org/9/ALSA-2024-8935.html',
-                'https://errata.rockylinux.org/RLSA-2024:6783',
-                'https://github.com/openssl/openssl/commit/05f360d9e849a1b277db628f1f13083a7f8dd04f',
-                'https://github.com/openssl/openssl/commit/06d1dc3fa96a2ba5a3e22735a033012aadc9f0d6',
-                'https://github.com/openssl/openssl/commit/621f3729831b05ee828a3203eddb621d014ff2b2',
-                'https://github.com/openssl/openssl/commit/7dfcee2cd2a63b2c64b9b4b0850be64cb695b0a0',
-                'https://github.com/openssl/openssl/security/advisories/GHSA-5qrj-vq78-58fj',
-                'https://linux.oracle.com/cve/CVE-2024-6119.html',
-                'https://linux.oracle.com/errata/ELSA-2024-8935.html',
-                'https://lists.freebsd.org/archives/freebsd-security/2024-September/000303.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2024-6119',
-                'https://openssl-library.org/news/secadv/20240903.txt',
-                'https://security.netapp.com/advisory/ntap-20240912-0001/',
-                'https://ubuntu.com/security/notices/USN-6986-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2024-6119'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: Possible denial of service in X.509 name checks'
-            },
-            {
-              'cve':  'CVE-2024-13176',
-              'cvss': {
-                'redhat': {
-                  'v3score':  '4.7',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-385'
-              ],
-              'description':   'Issue summary: A timing side-channel which could potentially allow recovering\nthe private key exists in the ECDSA signature computation.\n\nImpact summary: A timing side-channel in ECDSA signature computations\ncould allow recovering the private key by an attacker. However, measuring\nthe timing would require either local access to the signing application or\na very fast network connection with low latency.\n\nThere is a timing signal of around 300 nanoseconds when the top word of\nthe inverted ECDSA nonce value is zero. This can happen with significant\nprobability only for some of the supported elliptic curves. In particular\nthe NIST P-521 curve is affected. To be able to measure this leak, the attacker\nprocess must either be located in the same physical computer or must\nhave a very fast network connection with low latency. For that reason\nthe severity of this vulnerability is Low.\n\nThe FIPS modules in 3.4, 3.3, 3.2, 3.1 and 3.0 are affected by this issue.',
-              'diffID':        'sha256:58256dbcb6283795ba0b2b89d5c0912985820bf7d51622305327a0c18f513bad',
-              'fixedVersions': [
-                '3.1.8-r0'
-              ],
-              'installedVersion': '3.1.5-r0',
-              'packageName':      'libcrypto3',
-              'purl':             'pkg:apk/alpine/libcrypto3@3.1.5-r0?arch=ppc64le&distro=3.19.2',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2025/01/20/2',
-                'https://access.redhat.com/errata/RHSA-2025:16046',
-                'https://access.redhat.com/security/cve/CVE-2024-13176',
-                'https://bugzilla.redhat.com/2359885',
-                'https://bugzilla.redhat.com/2359888',
-                'https://bugzilla.redhat.com/2359892',
-                'https://bugzilla.redhat.com/2359894',
-                'https://bugzilla.redhat.com/2359895',
-                'https://bugzilla.redhat.com/2359899',
-                'https://bugzilla.redhat.com/2359900',
-                'https://bugzilla.redhat.com/2359902',
-                'https://bugzilla.redhat.com/2359903',
-                'https://bugzilla.redhat.com/2359911',
-                'https://bugzilla.redhat.com/2359918',
-                'https://bugzilla.redhat.com/2359920',
-                'https://bugzilla.redhat.com/2359924',
-                'https://bugzilla.redhat.com/2359928',
-                'https://bugzilla.redhat.com/2359930',
-                'https://bugzilla.redhat.com/2359932',
-                'https://bugzilla.redhat.com/2359934',
-                'https://bugzilla.redhat.com/2359938',
-                'https://bugzilla.redhat.com/2359940',
-                'https://bugzilla.redhat.com/2359943',
-                'https://bugzilla.redhat.com/2359944',
-                'https://bugzilla.redhat.com/2359945',
-                'https://bugzilla.redhat.com/2359947',
-                'https://bugzilla.redhat.com/2359950',
-                'https://bugzilla.redhat.com/2359963',
-                'https://bugzilla.redhat.com/2359964',
-                'https://bugzilla.redhat.com/2359972',
-                'https://bugzilla.redhat.com/2370920',
-                'https://bugzilla.redhat.com/2380264',
-                'https://bugzilla.redhat.com/2380273',
-                'https://bugzilla.redhat.com/2380274',
-                'https://bugzilla.redhat.com/2380278',
-                'https://bugzilla.redhat.com/2380280',
-                'https://bugzilla.redhat.com/2380283',
-                'https://bugzilla.redhat.com/2380284',
-                'https://bugzilla.redhat.com/2380290',
-                'https://bugzilla.redhat.com/2380291',
-                'https://bugzilla.redhat.com/2380295',
-                'https://bugzilla.redhat.com/2380298',
-                'https://bugzilla.redhat.com/2380306',
-                'https://bugzilla.redhat.com/2380308',
-                'https://bugzilla.redhat.com/2380309',
-                'https://bugzilla.redhat.com/2380310',
-                'https://bugzilla.redhat.com/2380312',
-                'https://bugzilla.redhat.com/2380313',
-                'https://bugzilla.redhat.com/2380320',
-                'https://bugzilla.redhat.com/2380321',
-                'https://bugzilla.redhat.com/2380322',
-                'https://bugzilla.redhat.com/2380326',
-                'https://bugzilla.redhat.com/2380327',
-                'https://bugzilla.redhat.com/2380334',
-                'https://bugzilla.redhat.com/2380335',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2338999',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359885',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359888',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359892',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359894',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359895',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359899',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359900',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359902',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359903',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359911',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359918',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359920',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359924',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359928',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359930',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359932',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359934',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359938',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359940',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359943',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359944',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359945',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359947',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359950',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359963',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359964',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359972',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2370920',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380264',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380273',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380274',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380278',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380280',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380283',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380284',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380290',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380291',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380295',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380298',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380306',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380308',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380309',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380310',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380312',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380313',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380320',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380321',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380322',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380326',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380327',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380334',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380335',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-13176',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21574',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21575',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21577',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21579',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21580',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21581',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21584',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21585',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21588',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30681',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30682',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30683',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30684',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30685',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30687',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30688',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30689',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30693',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30695',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30696',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30699',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30703',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30704',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30705',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30715',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30721',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30722',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50077',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50078',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50079',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50080',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50081',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50082',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50083',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50084',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50085',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50086',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50087',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50088',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50091',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50092',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50093',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50094',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50096',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50097',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50098',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50099',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50100',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50101',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50102',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50104',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-5399',
-                'https://errata.almalinux.org/9/ALSA-2025-16046.html',
-                'https://errata.rockylinux.org/RLSA-2025:15699',
-                'https://github.com/openssl/openssl/commit/07272b05b04836a762b4baa874958af51d513844',
-                'https://github.com/openssl/openssl/commit/2af62e74fb59bc469506bc37eb2990ea408d9467',
-                'https://github.com/openssl/openssl/commit/392dcb336405a0c94486aa6655057f59fd3a0902',
-                'https://github.com/openssl/openssl/commit/4b1cb94a734a7d4ec363ac0a215a25c181e11f65',
-                'https://github.com/openssl/openssl/commit/77c608f4c8857e63e98e66444e2e761c9627916f',
-                'https://github.openssl.org/openssl/extended-releases/commit/0d5fd1ab987f7571e2c955d8d8b638fc0fb54ded',
-                'https://github.openssl.org/openssl/extended-releases/commit/a2639000db19878d5d89586ae7b725080592ae86',
-                'https://linux.oracle.com/cve/CVE-2024-13176.html',
-                'https://linux.oracle.com/errata/ELSA-2025-16046.html',
-                'https://lists.debian.org/debian-lts-announce/2025/05/msg00028.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2024-13176',
-                'https://openssl-library.org/news/secadv/20250120.txt',
-                'https://security.netapp.com/advisory/ntap-20250124-0005/',
-                'https://security.netapp.com/advisory/ntap-20250418-0010/',
-                'https://security.netapp.com/advisory/ntap-20250502-0006/',
-                'https://ubuntu.com/security/notices/USN-7264-1',
-                'https://ubuntu.com/security/notices/USN-7278-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2024-13176',
-                'https://www.oracle.com/security-alerts/cpuapr2025.html#AppendixMSQL'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: Timing side-channel in ECDSA signature computation'
-            },
-            {
-              'cve':  'CVE-2024-4741',
-              'cvss': {
-                'redhat': {
-                  'v3score':  '5.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   'Issue summary: Calling the OpenSSL API function SSL_free_buffers may cause\nmemory to be accessed that was previously freed in some situations\n\nImpact summary: A use after free can have a range of potential consequences such\nas the corruption of valid data, crashes or execution of arbitrary code.\nHowever, only applications that directly call the SSL_free_buffers function are\naffected by this issue. Applications that do not call this function are not\nvulnerable. Our investigations indicate that this function is rarely used by\napplications.\n\nThe SSL_free_buffers function is used to free the internal OpenSSL buffer used\nwhen processing an incoming record from the network. The call is only expected\nto succeed if the buffer is not currently in use. However, two scenarios have\nbeen identified where the buffer is freed even when still in use.\n\nThe first scenario occurs where a record header has been received from the\nnetwork and processed by OpenSSL, but the full record body has not yet arrived.\nIn this case calling SSL_free_buffers will succeed even though a record has only\nbeen partially processed and the buffer is still in use.\n\nThe second scenario occurs where a full record containing application data has\nbeen received and processed by OpenSSL but the application has only read part of\nthis data. Again a call to SSL_free_buffers will succeed even though the buffer\nis still in use.\n\nWhile these scenarios could occur accidentally during normal operation a\nmalicious attacker could attempt to engineer a stituation where this occurs.\nWe are not aware of this issue being actively exploited.\n\nThe FIPS modules in 3.3, 3.2, 3.1 and 3.0 are not affected by this issue.',
-              'diffID':        'sha256:58256dbcb6283795ba0b2b89d5c0912985820bf7d51622305327a0c18f513bad',
-              'fixedVersions': [
-                '3.1.6-r0'
-              ],
-              'installedVersion': '3.1.5-r0',
-              'packageName':      'libcrypto3',
-              'purl':             'pkg:apk/alpine/libcrypto3@3.1.5-r0?arch=ppc64le&distro=3.19.2',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2024:9333',
-                'https://access.redhat.com/security/cve/CVE-2024-4741',
-                'https://bugzilla.redhat.com/2274020',
-                'https://bugzilla.redhat.com/2281029',
-                'https://bugzilla.redhat.com/2283757',
-                'https://bugzilla.redhat.com/2294581',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2274020',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2281029',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2283757',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2294581',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-2511',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-4603',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-4741',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-5535',
-                'https://errata.almalinux.org/9/ALSA-2024-9333.html',
-                'https://errata.rockylinux.org/RLSA-2024:9333',
-                'https://github.com/openssl/openssl/commit/704f725b96aa373ee45ecfb23f6abfe8be8d9177',
-                'https://github.com/openssl/openssl/commit/b3f0eb0a295f58f16ba43ba99dad70d4ee5c437d',
-                'https://github.com/openssl/openssl/commit/c88c3de51020c37e8706bf7a682a162593053aac',
-                'https://github.com/openssl/openssl/commit/e5093133c35ca82874ad83697af76f4b0f7e3bd8',
-                'https://github.openssl.org/openssl/extended-releases/commit/f7a045f3143fc6da2ee66bf52d8df04829590dd4',
-                'https://linux.oracle.com/cve/CVE-2024-4741.html',
-                'https://linux.oracle.com/errata/ELSA-2024-9333.html',
-                'https://lists.debian.org/debian-lts-announce/2024/10/msg00033.html',
-                'https://lists.debian.org/debian-lts-announce/2024/11/msg00000.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2024-4741',
-                'https://security.netapp.com/advisory/ntap-20240621-0004/',
-                'https://ubuntu.com/security/notices/USN-6937-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2024-4741',
-                'https://www.openssl.org/news/secadv/20240528.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: Use After Free with SSL_free_buffers'
-            },
-            {
-              'cve':  'CVE-2024-5535',
-              'cvss': {
-                'redhat': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-125'
-              ],
-              'description':   'Issue summary: Calling the OpenSSL API function SSL_select_next_proto with an\nempty supported client protocols buffer may cause a crash or memory contents to\nbe sent to the peer.\n\nImpact summary: A buffer overread can have a range of potential consequences\nsuch as unexpected application beahviour or a crash. In particular this issue\ncould result in up to 255 bytes of arbitrary private data from memory being sent\nto the peer leading to a loss of confidentiality. However, only applications\nthat directly call the SSL_select_next_proto function with a 0 length list of\nsupported client protocols are affected by this issue. This would normally never\nbe a valid scenario and is typically not under attacker control but may occur by\naccident in the case of a configuration or programming error in the calling\napplication.\n\nThe OpenSSL API function SSL_select_next_proto is typically used by TLS\napplications that support ALPN (Application Layer Protocol Negotiation) or NPN\n(Next Protocol Negotiation). NPN is older, was never standardised and\nis deprecated in favour of ALPN. We believe that ALPN is significantly more\nwidely deployed than NPN. The SSL_select_next_proto function accepts a list of\nprotocols from the server and a list of protocols from the client and returns\nthe first protocol that appears in the server list that also appears in the\nclient list. In the case of no overlap between the two lists it returns the\nfirst item in the client list. In either case it will signal whether an overlap\nbetween the two lists was found. In the case where SSL_select_next_proto is\ncalled with a zero length client list it fails to notice this condition and\nreturns the memory immediately following the client list pointer (and reports\nthat there was no overlap in the lists).\n\nThis function is typically called from a server side application callback for\nALPN or a client side application callback for NPN. In the case of ALPN the list\nof protocols supplied by the client is guaranteed by libssl to never be zero in\nlength. The list of server protocols comes from the application and should never\nnormally be expected to be of zero length. In this case if the\nSSL_select_next_proto function has been called as expected (with the list\nsupplied by the client passed in the client/client_len parameters), then the\napplication will not be vulnerable to this issue. If the application has\naccidentally been configured with a zero length server list, and has\naccidentally passed that zero length server list in the client/client_len\nparameters, and has additionally failed to correctly handle a "no overlap"\nresponse (which would normally result in a handshake failure in ALPN) then it\nwill be vulnerable to this problem.\n\nIn the case of NPN, the protocol permits the client to opportunistically select\na protocol when there is no overlap. OpenSSL returns the first client protocol\nin the no overlap case in support of this. The list of client protocols comes\nfrom the application and should never normally be expected to be of zero length.\nHowever if the SSL_select_next_proto function is accidentally called with a\nclient_len of 0 then an invalid memory pointer will be returned instead. If the\napplication uses this output as the opportunistic protocol then the loss of\nconfidentiality will occur.\n\nThis issue has been assessed as Low severity because applications are most\nlikely to be vulnerable if they are using NPN instead of ALPN - but NPN is not\nwidely used. It also requires an application configuration or programming error.\nFinally, this issue would not typically be under attacker control making active\nexploitation unlikely.\n\nThe FIPS modules in 3.3, 3.2, 3.1 and 3.0 are not affected by this issue.\n\nDue to the low severity of this issue we are not issuing new releases of\nOpenSSL at this time. The fix will be included in the next releases when they\nbecome available.',
-              'diffID':        'sha256:58256dbcb6283795ba0b2b89d5c0912985820bf7d51622305327a0c18f513bad',
-              'fixedVersions': [
-                '3.1.6-r0'
-              ],
-              'installedVersion': '3.1.5-r0',
-              'packageName':      'libcrypto3',
-              'purl':             'pkg:apk/alpine/libcrypto3@3.1.5-r0?arch=ppc64le&distro=3.19.2',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2024/06/27/1',
-                'http://www.openwall.com/lists/oss-security/2024/06/28/4',
-                'http://www.openwall.com/lists/oss-security/2024/08/15/1',
-                'https://access.redhat.com/errata/RHSA-2025:1671',
-                'https://access.redhat.com/security/cve/CVE-2024-5535',
-                'https://bugzilla.redhat.com/2294581',
-                'https://bugzilla.redhat.com/2294676',
-                'https://bugzilla.redhat.com/2301888',
-                'https://bugzilla.redhat.com/2318857',
-                'https://bugzilla.redhat.com/2318858',
-                'https://bugzilla.redhat.com/2318870',
-                'https://bugzilla.redhat.com/2318873',
-                'https://bugzilla.redhat.com/2318874',
-                'https://bugzilla.redhat.com/2318876',
-                'https://bugzilla.redhat.com/2318882',
-                'https://bugzilla.redhat.com/2318883',
-                'https://bugzilla.redhat.com/2318884',
-                'https://bugzilla.redhat.com/2318885',
-                'https://bugzilla.redhat.com/2318886',
-                'https://bugzilla.redhat.com/2318897',
-                'https://bugzilla.redhat.com/2318900',
-                'https://bugzilla.redhat.com/2318905',
-                'https://bugzilla.redhat.com/2318914',
-                'https://bugzilla.redhat.com/2318922',
-                'https://bugzilla.redhat.com/2318923',
-                'https://bugzilla.redhat.com/2318925',
-                'https://bugzilla.redhat.com/2318926',
-                'https://bugzilla.redhat.com/2318927',
-                'https://bugzilla.redhat.com/2331191',
-                'https://bugzilla.redhat.com/2339218',
-                'https://bugzilla.redhat.com/2339220',
-                'https://bugzilla.redhat.com/2339221',
-                'https://bugzilla.redhat.com/2339226',
-                'https://bugzilla.redhat.com/2339231',
-                'https://bugzilla.redhat.com/2339236',
-                'https://bugzilla.redhat.com/2339238',
-                'https://bugzilla.redhat.com/2339243',
-                'https://bugzilla.redhat.com/2339247',
-                'https://bugzilla.redhat.com/2339252',
-                'https://bugzilla.redhat.com/2339259',
-                'https://bugzilla.redhat.com/2339266',
-                'https://bugzilla.redhat.com/2339270',
-                'https://bugzilla.redhat.com/2339271',
-                'https://bugzilla.redhat.com/2339275',
-                'https://bugzilla.redhat.com/2339277',
-                'https://bugzilla.redhat.com/2339281',
-                'https://bugzilla.redhat.com/2339284',
-                'https://bugzilla.redhat.com/2339291',
-                'https://bugzilla.redhat.com/2339293',
-                'https://bugzilla.redhat.com/2339295',
-                'https://bugzilla.redhat.com/2339299',
-                'https://bugzilla.redhat.com/2339300',
-                'https://bugzilla.redhat.com/2339304',
-                'https://bugzilla.redhat.com/2339305',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2274020',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2281029',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2283757',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2294581',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-2511',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-4603',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-4741',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-5535',
-                'https://errata.almalinux.org/9/ALSA-2025-1671.html',
-                'https://errata.rockylinux.org/RLSA-2024:9333',
-                'https://github.com/openssl/openssl/commit/4ada436a1946cbb24db5ab4ca082b69c1bc10f37',
-                'https://github.com/openssl/openssl/commit/99fb785a5f85315b95288921a321a935ea29a51e',
-                'https://github.com/openssl/openssl/commit/cf6f91f6121f4db167405db2f0de410a456f260c',
-                'https://github.com/openssl/openssl/commit/e86ac436f0bd54d4517745483e2315650fae7b2c',
-                'https://github.openssl.org/openssl/extended-releases/commit/9947251413065a05189a63c9b7a6c1d4e224c21c',
-                'https://github.openssl.org/openssl/extended-releases/commit/b78ec0824da857223486660177d3b1f255c65d87',
-                'https://linux.oracle.com/cve/CVE-2024-5535.html',
-                'https://linux.oracle.com/errata/ELSA-2025-1673.html',
-                'https://lists.debian.org/debian-lts-announce/2024/10/msg00033.html',
-                'https://lists.debian.org/debian-lts-announce/2024/11/msg00000.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2024-5535',
-                'https://openssl.org/news/secadv/20240627.txt',
-                'https://security.netapp.com/advisory/ntap-20240712-0005/',
-                'https://security.netapp.com/advisory/ntap-20241025-0006/',
-                'https://security.netapp.com/advisory/ntap-20241025-0010/',
-                'https://ubuntu.com/security/notices/USN-6937-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2024-5535',
-                'https://www.openssl.org/news/secadv/20240627.txt',
-                'https://www.oracle.com/security-alerts/cpuoct2024.html#AppendixMSQL'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: SSL_select_next_proto buffer overread'
-            },
-            {
-              'cve':  'CVE-2025-9230',
-              'cvss': {
-                'redhat': {
-                  'v3score':  '5.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L'
-                }
-              },
-              'cwes': [
-                'CWE-125',
-                'CWE-787'
-              ],
-              'description':   'Issue summary: An application trying to decrypt CMS messages encrypted using\npassword based encryption can trigger an out-of-bounds read and write.\n\nImpact summary: This out-of-bounds read may trigger a crash which leads to\nDenial of Service for an application. The out-of-bounds write can cause\na memory corruption which can have various consequences including\na Denial of Service or Execution of attacker-supplied code.\n\nAlthough the consequences of a successful exploit of this vulnerability\ncould be severe, the probability that the attacker would be able to\nperform it is low. Besides, password based (PWRI) encryption support in CMS\nmessages is very rarely used. For that reason the issue was assessed as\nModerate severity according to our Security Policy.\n\nThe FIPS modules in 3.5, 3.4, 3.3, 3.2, 3.1 and 3.0 are not affected by this\nissue, as the CMS implementation is outside the OpenSSL FIPS module\nboundary.',
-              'diffID':        'sha256:58256dbcb6283795ba0b2b89d5c0912985820bf7d51622305327a0c18f513bad',
-              'fixedVersions': [
-                '3.1.8-r1'
-              ],
-              'installedVersion': '3.1.5-r0',
-              'packageName':      'libcrypto3',
-              'purl':             'pkg:apk/alpine/libcrypto3@3.1.5-r0?arch=ppc64le&distro=3.19.2',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2025/09/30/5',
-                'https://access.redhat.com/errata/RHSA-2025:21255',
-                'https://access.redhat.com/security/cve/CVE-2025-9230',
-                'https://bugzilla.redhat.com/2396054',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2396054',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-9230',
-                'https://errata.almalinux.org/9/ALSA-2025-21255.html',
-                'https://errata.rockylinux.org/RLSA-2025:21255',
-                'https://github.com/openssl/openssl/commit/5965ea5dd6960f36d8b7f74f8eac67a8eb8f2b45',
-                'https://github.com/openssl/openssl/commit/9e91358f365dee6c446dcdcdb01c04d2743fd280',
-                'https://github.com/openssl/openssl/commit/a79c4ce559c6a3a8fd4109e9f33c1185d5bf2def',
-                'https://github.com/openssl/openssl/commit/b5282d677551afda7d20e9c00e09561b547b2dfd',
-                'https://github.com/openssl/openssl/commit/bae259a211ada6315dc50900686daaaaaa55f482',
-                'https://github.openssl.org/openssl/extended-releases/commit/c2b96348bfa662f25f4fabf81958ae822063dae3',
-                'https://github.openssl.org/openssl/extended-releases/commit/dfbaf161d8dafc1132dd88cd48ad990ed9b4c8ba',
-                'https://linux.oracle.com/cve/CVE-2025-9230.html',
-                'https://linux.oracle.com/errata/ELSA-2026-0337.html',
-                'https://lists.debian.org/debian-lts-announce/2025/10/msg00001.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2025-9230',
-                'https://openssl-library.org/news/secadv/20250930.txt',
-                'https://ubuntu.com/security/notices/USN-7786-1',
-                'https://www.cve.org/CVERecord?id=CVE-2025-9230'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: Out-of-bounds read & write in RFC 3211 KEK Unwrap'
-            },
-            {
-              'cve':  'CVE-2024-9143',
-              'cvss': {
-                'redhat': {
-                  'v3score':  '3.7',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L'
-                }
-              },
-              'cwes': [
-                'CWE-125',
-                'CWE-787'
-              ],
-              'description':   "Issue summary: Use of the low-level GF(2^m) elliptic curve APIs with untrusted\nexplicit values for the field polynomial can lead to out-of-bounds memory reads\nor writes.\n\nImpact summary: Out of bound memory writes can lead to an application crash or\neven a possibility of a remote code execution, however, in all the protocols\ninvolving Elliptic Curve Cryptography that we're aware of, either only \"named\ncurves\" are supported, or, if explicit curve parameters are supported, they\nspecify an X9.62 encoding of binary (GF(2^m)) curves that can't represent\nproblematic input values. Thus the likelihood of existence of a vulnerable\napplication is low.\n\nIn particular, the X9.62 encoding is used for ECC keys in X.509 certificates,\nso problematic inputs cannot occur in the context of processing X.509\ncertificates.  Any problematic use-cases would have to be using an \"exotic\"\ncurve encoding.\n\nThe affected APIs include: EC_GROUP_new_curve_GF2m(), EC_GROUP_new_from_params(),\nand various supporting BN_GF2m_*() functions.\n\nApplications working with \"exotic\" explicit binary (GF(2^m)) curve parameters,\nthat make it possible to represent invalid field polynomials with a zero\nconstant term, via the above or similar APIs, may terminate abruptly as a\nresult of reading or writing outside of array bounds.  Remote code execution\ncannot easily be ruled out.\n\nThe FIPS modules in 3.3, 3.2, 3.1 and 3.0 are not affected by this issue.",
-              'diffID':        'sha256:58256dbcb6283795ba0b2b89d5c0912985820bf7d51622305327a0c18f513bad',
-              'fixedVersions': [
-                '3.1.7-r1'
-              ],
-              'installedVersion': '3.1.5-r0',
-              'packageName':      'libcrypto3',
-              'purl':             'pkg:apk/alpine/libcrypto3@3.1.5-r0?arch=ppc64le&distro=3.19.2',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2024/10/16/1',
-                'http://www.openwall.com/lists/oss-security/2024/10/23/1',
-                'http://www.openwall.com/lists/oss-security/2024/10/24/1',
-                'https://access.redhat.com/security/cve/CVE-2024-9143',
-                'https://github.com/openssl/openssl/commit/72ae83ad214d2eef262461365a1975707f862712',
-                'https://github.com/openssl/openssl/commit/bc7e04d7c8d509fb78fc0e285aa948fb0da04700',
-                'https://github.com/openssl/openssl/commit/c0d3e4d32d2805f49bec30547f225bc4d092e1f4',
-                'https://github.com/openssl/openssl/commit/fdf6723362ca51bd883295efe206cb5b1cfa5154',
-                'https://github.openssl.org/openssl/extended-releases/commit/8efc0cbaa8ebba8e116f7b81a876a4123594d86a',
-                'https://github.openssl.org/openssl/extended-releases/commit/9d576994cec2b7aa37a91740ea7e680810957e41',
-                'https://lists.debian.org/debian-lts-announce/2024/10/msg00033.html',
-                'https://lists.debian.org/debian-lts-announce/2024/11/msg00000.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2024-9143',
-                'https://openssl-library.org/news/secadv/20241016.txt',
-                'https://security.netapp.com/advisory/ntap-20241101-0001/',
-                'https://ubuntu.com/security/notices/USN-7264-1',
-                'https://ubuntu.com/security/notices/USN-7278-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2024-9143'
-              ],
-              'severity':   'LOW',
-              'suppressed': false,
-              'title':      'openssl: Low-level invalid GF(2^m) parameters lead to OOB memory access'
-            },
-            {
-              'cve':  'CVE-2025-9232',
-              'cvss': {
-                'redhat': {
-                  'v3score':  '3.1',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L'
-                }
-              },
-              'cwes': [
-                'CWE-125'
-              ],
-              'description':   "Issue summary: An application using the OpenSSL HTTP client API functions may\ntrigger an out-of-bounds read if the 'no_proxy' environment variable is set and\nthe host portion of the authority component of the HTTP URL is an IPv6 address.\n\nImpact summary: An out-of-bounds read can trigger a crash which leads to\nDenial of Service for an application.\n\nThe OpenSSL HTTP client API functions can be used directly by applications\nbut they are also used by the OCSP client functions and CMP (Certificate\nManagement Protocol) client implementation in OpenSSL. However the URLs used\nby these implementations are unlikely to be controlled by an attacker.\n\nIn this vulnerable code the out of bounds read can only trigger a crash.\nFurthermore the vulnerability requires an attacker-controlled URL to be\npassed from an application to the OpenSSL function and the user has to have\na 'no_proxy' environment variable set. For the aforementioned reasons the\nissue was assessed as Low severity.\n\nThe vulnerable code was introduced in the following patch releases:\n3.0.16, 3.1.8, 3.2.4, 3.3.3, 3.4.0 and 3.5.0.\n\nThe FIPS modules in 3.5, 3.4, 3.3, 3.2, 3.1 and 3.0 are not affected by this\nissue, as the HTTP client implementation is outside the OpenSSL FIPS module\nboundary.",
-              'diffID':        'sha256:58256dbcb6283795ba0b2b89d5c0912985820bf7d51622305327a0c18f513bad',
-              'fixedVersions': [
-                '3.1.8-r1'
-              ],
-              'installedVersion': '3.1.5-r0',
-              'packageName':      'libcrypto3',
-              'purl':             'pkg:apk/alpine/libcrypto3@3.1.5-r0?arch=ppc64le&distro=3.19.2',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2025/09/30/5',
-                'https://access.redhat.com/security/cve/CVE-2025-9232',
-                'https://github.com/openssl/openssl/commit/2b4ec20e47959170422922eaff25346d362dcb35',
-                'https://github.com/openssl/openssl/commit/654dc11d23468a74fc8ea4672b702dd3feb7be4b',
-                'https://github.com/openssl/openssl/commit/7cf21a30513c9e43c4bc3836c237cf086e194af3',
-                'https://github.com/openssl/openssl/commit/89e790ac431125a4849992858490bed6b225eadf',
-                'https://github.com/openssl/openssl/commit/bbf38c034cdabd0a13330abcc4855c866f53d2e0',
-                'https://nvd.nist.gov/vuln/detail/CVE-2025-9232',
-                'https://openssl-library.org/news/secadv/20250930.txt',
-                'https://ubuntu.com/security/notices/USN-7786-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2025-9232'
-              ],
-              'severity':   'LOW',
-              'suppressed': false,
-              'title':      'openssl: Out-of-bounds read in HTTP client no_proxy handling'
-            },
-            {
-              'cve':  'CVE-2024-6119',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-843'
-              ],
-              'description':   "Issue summary: Applications performing certificate name checks (e.g., TLS\nclients checking server certificates) may attempt to read an invalid memory\naddress resulting in abnormal termination of the application process.\n\nImpact summary: Abnormal termination of an application can a cause a denial of\nservice.\n\nApplications performing certificate name checks (e.g., TLS clients checking\nserver certificates) may attempt to read an invalid memory address when\ncomparing the expected name with an `otherName` subject alternative name of an\nX.509 certificate. This may result in an exception that terminates the\napplication program.\n\nNote that basic certificate chain validation (signatures, dates, ...) is not\naffected, the denial of service can occur only when the application also\nspecifies an expected DNS name, Email address or IP address.\n\nTLS servers rarely solicit client certificates, and even when they do, they\ngenerally don't perform a name check against a reference identifier (expected\nidentity), but rather extract the presented identity after checking the\ncertificate chain.  So TLS servers are generally not affected and the severity\nof the issue is Moderate.\n\nThe FIPS modules in 3.3, 3.2, 3.1 and 3.0 are not affected by this issue.",
-              'diffID':        'sha256:58256dbcb6283795ba0b2b89d5c0912985820bf7d51622305327a0c18f513bad',
-              'fixedVersions': [
-                '3.1.7-r0'
-              ],
-              'installedVersion': '3.1.5-r0',
-              'packageName':      'libssl3',
-              'purl':             'pkg:apk/alpine/libssl3@3.1.5-r0?arch=ppc64le&distro=3.19.2',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2024/09/03/4',
-                'https://access.redhat.com/errata/RHSA-2024:8935',
-                'https://access.redhat.com/security/cve/CVE-2024-6119',
-                'https://bugzilla.redhat.com/2306158',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2306158',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-6119',
-                'https://errata.almalinux.org/9/ALSA-2024-8935.html',
-                'https://errata.rockylinux.org/RLSA-2024:6783',
-                'https://github.com/openssl/openssl/commit/05f360d9e849a1b277db628f1f13083a7f8dd04f',
-                'https://github.com/openssl/openssl/commit/06d1dc3fa96a2ba5a3e22735a033012aadc9f0d6',
-                'https://github.com/openssl/openssl/commit/621f3729831b05ee828a3203eddb621d014ff2b2',
-                'https://github.com/openssl/openssl/commit/7dfcee2cd2a63b2c64b9b4b0850be64cb695b0a0',
-                'https://github.com/openssl/openssl/security/advisories/GHSA-5qrj-vq78-58fj',
-                'https://linux.oracle.com/cve/CVE-2024-6119.html',
-                'https://linux.oracle.com/errata/ELSA-2024-8935.html',
-                'https://lists.freebsd.org/archives/freebsd-security/2024-September/000303.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2024-6119',
-                'https://openssl-library.org/news/secadv/20240903.txt',
-                'https://security.netapp.com/advisory/ntap-20240912-0001/',
-                'https://ubuntu.com/security/notices/USN-6986-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2024-6119'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: Possible denial of service in X.509 name checks'
-            },
-            {
-              'cve':  'CVE-2024-13176',
-              'cvss': {
-                'redhat': {
-                  'v3score':  '4.7',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-385'
-              ],
-              'description':   'Issue summary: A timing side-channel which could potentially allow recovering\nthe private key exists in the ECDSA signature computation.\n\nImpact summary: A timing side-channel in ECDSA signature computations\ncould allow recovering the private key by an attacker. However, measuring\nthe timing would require either local access to the signing application or\na very fast network connection with low latency.\n\nThere is a timing signal of around 300 nanoseconds when the top word of\nthe inverted ECDSA nonce value is zero. This can happen with significant\nprobability only for some of the supported elliptic curves. In particular\nthe NIST P-521 curve is affected. To be able to measure this leak, the attacker\nprocess must either be located in the same physical computer or must\nhave a very fast network connection with low latency. For that reason\nthe severity of this vulnerability is Low.\n\nThe FIPS modules in 3.4, 3.3, 3.2, 3.1 and 3.0 are affected by this issue.',
-              'diffID':        'sha256:58256dbcb6283795ba0b2b89d5c0912985820bf7d51622305327a0c18f513bad',
-              'fixedVersions': [
-                '3.1.8-r0'
-              ],
-              'installedVersion': '3.1.5-r0',
-              'packageName':      'libssl3',
-              'purl':             'pkg:apk/alpine/libssl3@3.1.5-r0?arch=ppc64le&distro=3.19.2',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2025/01/20/2',
-                'https://access.redhat.com/errata/RHSA-2025:16046',
-                'https://access.redhat.com/security/cve/CVE-2024-13176',
-                'https://bugzilla.redhat.com/2359885',
-                'https://bugzilla.redhat.com/2359888',
-                'https://bugzilla.redhat.com/2359892',
-                'https://bugzilla.redhat.com/2359894',
-                'https://bugzilla.redhat.com/2359895',
-                'https://bugzilla.redhat.com/2359899',
-                'https://bugzilla.redhat.com/2359900',
-                'https://bugzilla.redhat.com/2359902',
-                'https://bugzilla.redhat.com/2359903',
-                'https://bugzilla.redhat.com/2359911',
-                'https://bugzilla.redhat.com/2359918',
-                'https://bugzilla.redhat.com/2359920',
-                'https://bugzilla.redhat.com/2359924',
-                'https://bugzilla.redhat.com/2359928',
-                'https://bugzilla.redhat.com/2359930',
-                'https://bugzilla.redhat.com/2359932',
-                'https://bugzilla.redhat.com/2359934',
-                'https://bugzilla.redhat.com/2359938',
-                'https://bugzilla.redhat.com/2359940',
-                'https://bugzilla.redhat.com/2359943',
-                'https://bugzilla.redhat.com/2359944',
-                'https://bugzilla.redhat.com/2359945',
-                'https://bugzilla.redhat.com/2359947',
-                'https://bugzilla.redhat.com/2359950',
-                'https://bugzilla.redhat.com/2359963',
-                'https://bugzilla.redhat.com/2359964',
-                'https://bugzilla.redhat.com/2359972',
-                'https://bugzilla.redhat.com/2370920',
-                'https://bugzilla.redhat.com/2380264',
-                'https://bugzilla.redhat.com/2380273',
-                'https://bugzilla.redhat.com/2380274',
-                'https://bugzilla.redhat.com/2380278',
-                'https://bugzilla.redhat.com/2380280',
-                'https://bugzilla.redhat.com/2380283',
-                'https://bugzilla.redhat.com/2380284',
-                'https://bugzilla.redhat.com/2380290',
-                'https://bugzilla.redhat.com/2380291',
-                'https://bugzilla.redhat.com/2380295',
-                'https://bugzilla.redhat.com/2380298',
-                'https://bugzilla.redhat.com/2380306',
-                'https://bugzilla.redhat.com/2380308',
-                'https://bugzilla.redhat.com/2380309',
-                'https://bugzilla.redhat.com/2380310',
-                'https://bugzilla.redhat.com/2380312',
-                'https://bugzilla.redhat.com/2380313',
-                'https://bugzilla.redhat.com/2380320',
-                'https://bugzilla.redhat.com/2380321',
-                'https://bugzilla.redhat.com/2380322',
-                'https://bugzilla.redhat.com/2380326',
-                'https://bugzilla.redhat.com/2380327',
-                'https://bugzilla.redhat.com/2380334',
-                'https://bugzilla.redhat.com/2380335',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2338999',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359885',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359888',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359892',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359894',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359895',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359899',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359900',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359902',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359903',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359911',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359918',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359920',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359924',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359928',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359930',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359932',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359934',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359938',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359940',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359943',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359944',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359945',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359947',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359950',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359963',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359964',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359972',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2370920',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380264',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380273',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380274',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380278',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380280',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380283',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380284',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380290',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380291',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380295',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380298',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380306',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380308',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380309',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380310',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380312',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380313',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380320',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380321',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380322',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380326',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380327',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380334',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380335',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-13176',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21574',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21575',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21577',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21579',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21580',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21581',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21584',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21585',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21588',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30681',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30682',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30683',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30684',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30685',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30687',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30688',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30689',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30693',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30695',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30696',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30699',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30703',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30704',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30705',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30715',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30721',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30722',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50077',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50078',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50079',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50080',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50081',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50082',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50083',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50084',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50085',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50086',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50087',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50088',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50091',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50092',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50093',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50094',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50096',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50097',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50098',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50099',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50100',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50101',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50102',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50104',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-5399',
-                'https://errata.almalinux.org/9/ALSA-2025-16046.html',
-                'https://errata.rockylinux.org/RLSA-2025:15699',
-                'https://github.com/openssl/openssl/commit/07272b05b04836a762b4baa874958af51d513844',
-                'https://github.com/openssl/openssl/commit/2af62e74fb59bc469506bc37eb2990ea408d9467',
-                'https://github.com/openssl/openssl/commit/392dcb336405a0c94486aa6655057f59fd3a0902',
-                'https://github.com/openssl/openssl/commit/4b1cb94a734a7d4ec363ac0a215a25c181e11f65',
-                'https://github.com/openssl/openssl/commit/77c608f4c8857e63e98e66444e2e761c9627916f',
-                'https://github.openssl.org/openssl/extended-releases/commit/0d5fd1ab987f7571e2c955d8d8b638fc0fb54ded',
-                'https://github.openssl.org/openssl/extended-releases/commit/a2639000db19878d5d89586ae7b725080592ae86',
-                'https://linux.oracle.com/cve/CVE-2024-13176.html',
-                'https://linux.oracle.com/errata/ELSA-2025-16046.html',
-                'https://lists.debian.org/debian-lts-announce/2025/05/msg00028.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2024-13176',
-                'https://openssl-library.org/news/secadv/20250120.txt',
-                'https://security.netapp.com/advisory/ntap-20250124-0005/',
-                'https://security.netapp.com/advisory/ntap-20250418-0010/',
-                'https://security.netapp.com/advisory/ntap-20250502-0006/',
-                'https://ubuntu.com/security/notices/USN-7264-1',
-                'https://ubuntu.com/security/notices/USN-7278-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2024-13176',
-                'https://www.oracle.com/security-alerts/cpuapr2025.html#AppendixMSQL'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: Timing side-channel in ECDSA signature computation'
-            },
-            {
-              'cve':  'CVE-2024-4741',
-              'cvss': {
-                'redhat': {
-                  'v3score':  '5.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   'Issue summary: Calling the OpenSSL API function SSL_free_buffers may cause\nmemory to be accessed that was previously freed in some situations\n\nImpact summary: A use after free can have a range of potential consequences such\nas the corruption of valid data, crashes or execution of arbitrary code.\nHowever, only applications that directly call the SSL_free_buffers function are\naffected by this issue. Applications that do not call this function are not\nvulnerable. Our investigations indicate that this function is rarely used by\napplications.\n\nThe SSL_free_buffers function is used to free the internal OpenSSL buffer used\nwhen processing an incoming record from the network. The call is only expected\nto succeed if the buffer is not currently in use. However, two scenarios have\nbeen identified where the buffer is freed even when still in use.\n\nThe first scenario occurs where a record header has been received from the\nnetwork and processed by OpenSSL, but the full record body has not yet arrived.\nIn this case calling SSL_free_buffers will succeed even though a record has only\nbeen partially processed and the buffer is still in use.\n\nThe second scenario occurs where a full record containing application data has\nbeen received and processed by OpenSSL but the application has only read part of\nthis data. Again a call to SSL_free_buffers will succeed even though the buffer\nis still in use.\n\nWhile these scenarios could occur accidentally during normal operation a\nmalicious attacker could attempt to engineer a stituation where this occurs.\nWe are not aware of this issue being actively exploited.\n\nThe FIPS modules in 3.3, 3.2, 3.1 and 3.0 are not affected by this issue.',
-              'diffID':        'sha256:58256dbcb6283795ba0b2b89d5c0912985820bf7d51622305327a0c18f513bad',
-              'fixedVersions': [
-                '3.1.6-r0'
-              ],
-              'installedVersion': '3.1.5-r0',
-              'packageName':      'libssl3',
-              'purl':             'pkg:apk/alpine/libssl3@3.1.5-r0?arch=ppc64le&distro=3.19.2',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2024:9333',
-                'https://access.redhat.com/security/cve/CVE-2024-4741',
-                'https://bugzilla.redhat.com/2274020',
-                'https://bugzilla.redhat.com/2281029',
-                'https://bugzilla.redhat.com/2283757',
-                'https://bugzilla.redhat.com/2294581',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2274020',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2281029',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2283757',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2294581',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-2511',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-4603',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-4741',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-5535',
-                'https://errata.almalinux.org/9/ALSA-2024-9333.html',
-                'https://errata.rockylinux.org/RLSA-2024:9333',
-                'https://github.com/openssl/openssl/commit/704f725b96aa373ee45ecfb23f6abfe8be8d9177',
-                'https://github.com/openssl/openssl/commit/b3f0eb0a295f58f16ba43ba99dad70d4ee5c437d',
-                'https://github.com/openssl/openssl/commit/c88c3de51020c37e8706bf7a682a162593053aac',
-                'https://github.com/openssl/openssl/commit/e5093133c35ca82874ad83697af76f4b0f7e3bd8',
-                'https://github.openssl.org/openssl/extended-releases/commit/f7a045f3143fc6da2ee66bf52d8df04829590dd4',
-                'https://linux.oracle.com/cve/CVE-2024-4741.html',
-                'https://linux.oracle.com/errata/ELSA-2024-9333.html',
-                'https://lists.debian.org/debian-lts-announce/2024/10/msg00033.html',
-                'https://lists.debian.org/debian-lts-announce/2024/11/msg00000.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2024-4741',
-                'https://security.netapp.com/advisory/ntap-20240621-0004/',
-                'https://ubuntu.com/security/notices/USN-6937-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2024-4741',
-                'https://www.openssl.org/news/secadv/20240528.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: Use After Free with SSL_free_buffers'
-            },
-            {
-              'cve':  'CVE-2024-5535',
-              'cvss': {
-                'redhat': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-125'
-              ],
-              'description':   'Issue summary: Calling the OpenSSL API function SSL_select_next_proto with an\nempty supported client protocols buffer may cause a crash or memory contents to\nbe sent to the peer.\n\nImpact summary: A buffer overread can have a range of potential consequences\nsuch as unexpected application beahviour or a crash. In particular this issue\ncould result in up to 255 bytes of arbitrary private data from memory being sent\nto the peer leading to a loss of confidentiality. However, only applications\nthat directly call the SSL_select_next_proto function with a 0 length list of\nsupported client protocols are affected by this issue. This would normally never\nbe a valid scenario and is typically not under attacker control but may occur by\naccident in the case of a configuration or programming error in the calling\napplication.\n\nThe OpenSSL API function SSL_select_next_proto is typically used by TLS\napplications that support ALPN (Application Layer Protocol Negotiation) or NPN\n(Next Protocol Negotiation). NPN is older, was never standardised and\nis deprecated in favour of ALPN. We believe that ALPN is significantly more\nwidely deployed than NPN. The SSL_select_next_proto function accepts a list of\nprotocols from the server and a list of protocols from the client and returns\nthe first protocol that appears in the server list that also appears in the\nclient list. In the case of no overlap between the two lists it returns the\nfirst item in the client list. In either case it will signal whether an overlap\nbetween the two lists was found. In the case where SSL_select_next_proto is\ncalled with a zero length client list it fails to notice this condition and\nreturns the memory immediately following the client list pointer (and reports\nthat there was no overlap in the lists).\n\nThis function is typically called from a server side application callback for\nALPN or a client side application callback for NPN. In the case of ALPN the list\nof protocols supplied by the client is guaranteed by libssl to never be zero in\nlength. The list of server protocols comes from the application and should never\nnormally be expected to be of zero length. In this case if the\nSSL_select_next_proto function has been called as expected (with the list\nsupplied by the client passed in the client/client_len parameters), then the\napplication will not be vulnerable to this issue. If the application has\naccidentally been configured with a zero length server list, and has\naccidentally passed that zero length server list in the client/client_len\nparameters, and has additionally failed to correctly handle a "no overlap"\nresponse (which would normally result in a handshake failure in ALPN) then it\nwill be vulnerable to this problem.\n\nIn the case of NPN, the protocol permits the client to opportunistically select\na protocol when there is no overlap. OpenSSL returns the first client protocol\nin the no overlap case in support of this. The list of client protocols comes\nfrom the application and should never normally be expected to be of zero length.\nHowever if the SSL_select_next_proto function is accidentally called with a\nclient_len of 0 then an invalid memory pointer will be returned instead. If the\napplication uses this output as the opportunistic protocol then the loss of\nconfidentiality will occur.\n\nThis issue has been assessed as Low severity because applications are most\nlikely to be vulnerable if they are using NPN instead of ALPN - but NPN is not\nwidely used. It also requires an application configuration or programming error.\nFinally, this issue would not typically be under attacker control making active\nexploitation unlikely.\n\nThe FIPS modules in 3.3, 3.2, 3.1 and 3.0 are not affected by this issue.\n\nDue to the low severity of this issue we are not issuing new releases of\nOpenSSL at this time. The fix will be included in the next releases when they\nbecome available.',
-              'diffID':        'sha256:58256dbcb6283795ba0b2b89d5c0912985820bf7d51622305327a0c18f513bad',
-              'fixedVersions': [
-                '3.1.6-r0'
-              ],
-              'installedVersion': '3.1.5-r0',
-              'packageName':      'libssl3',
-              'purl':             'pkg:apk/alpine/libssl3@3.1.5-r0?arch=ppc64le&distro=3.19.2',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2024/06/27/1',
-                'http://www.openwall.com/lists/oss-security/2024/06/28/4',
-                'http://www.openwall.com/lists/oss-security/2024/08/15/1',
-                'https://access.redhat.com/errata/RHSA-2025:1671',
-                'https://access.redhat.com/security/cve/CVE-2024-5535',
-                'https://bugzilla.redhat.com/2294581',
-                'https://bugzilla.redhat.com/2294676',
-                'https://bugzilla.redhat.com/2301888',
-                'https://bugzilla.redhat.com/2318857',
-                'https://bugzilla.redhat.com/2318858',
-                'https://bugzilla.redhat.com/2318870',
-                'https://bugzilla.redhat.com/2318873',
-                'https://bugzilla.redhat.com/2318874',
-                'https://bugzilla.redhat.com/2318876',
-                'https://bugzilla.redhat.com/2318882',
-                'https://bugzilla.redhat.com/2318883',
-                'https://bugzilla.redhat.com/2318884',
-                'https://bugzilla.redhat.com/2318885',
-                'https://bugzilla.redhat.com/2318886',
-                'https://bugzilla.redhat.com/2318897',
-                'https://bugzilla.redhat.com/2318900',
-                'https://bugzilla.redhat.com/2318905',
-                'https://bugzilla.redhat.com/2318914',
-                'https://bugzilla.redhat.com/2318922',
-                'https://bugzilla.redhat.com/2318923',
-                'https://bugzilla.redhat.com/2318925',
-                'https://bugzilla.redhat.com/2318926',
-                'https://bugzilla.redhat.com/2318927',
-                'https://bugzilla.redhat.com/2331191',
-                'https://bugzilla.redhat.com/2339218',
-                'https://bugzilla.redhat.com/2339220',
-                'https://bugzilla.redhat.com/2339221',
-                'https://bugzilla.redhat.com/2339226',
-                'https://bugzilla.redhat.com/2339231',
-                'https://bugzilla.redhat.com/2339236',
-                'https://bugzilla.redhat.com/2339238',
-                'https://bugzilla.redhat.com/2339243',
-                'https://bugzilla.redhat.com/2339247',
-                'https://bugzilla.redhat.com/2339252',
-                'https://bugzilla.redhat.com/2339259',
-                'https://bugzilla.redhat.com/2339266',
-                'https://bugzilla.redhat.com/2339270',
-                'https://bugzilla.redhat.com/2339271',
-                'https://bugzilla.redhat.com/2339275',
-                'https://bugzilla.redhat.com/2339277',
-                'https://bugzilla.redhat.com/2339281',
-                'https://bugzilla.redhat.com/2339284',
-                'https://bugzilla.redhat.com/2339291',
-                'https://bugzilla.redhat.com/2339293',
-                'https://bugzilla.redhat.com/2339295',
-                'https://bugzilla.redhat.com/2339299',
-                'https://bugzilla.redhat.com/2339300',
-                'https://bugzilla.redhat.com/2339304',
-                'https://bugzilla.redhat.com/2339305',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2274020',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2281029',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2283757',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2294581',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-2511',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-4603',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-4741',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-5535',
-                'https://errata.almalinux.org/9/ALSA-2025-1671.html',
-                'https://errata.rockylinux.org/RLSA-2024:9333',
-                'https://github.com/openssl/openssl/commit/4ada436a1946cbb24db5ab4ca082b69c1bc10f37',
-                'https://github.com/openssl/openssl/commit/99fb785a5f85315b95288921a321a935ea29a51e',
-                'https://github.com/openssl/openssl/commit/cf6f91f6121f4db167405db2f0de410a456f260c',
-                'https://github.com/openssl/openssl/commit/e86ac436f0bd54d4517745483e2315650fae7b2c',
-                'https://github.openssl.org/openssl/extended-releases/commit/9947251413065a05189a63c9b7a6c1d4e224c21c',
-                'https://github.openssl.org/openssl/extended-releases/commit/b78ec0824da857223486660177d3b1f255c65d87',
-                'https://linux.oracle.com/cve/CVE-2024-5535.html',
-                'https://linux.oracle.com/errata/ELSA-2025-1673.html',
-                'https://lists.debian.org/debian-lts-announce/2024/10/msg00033.html',
-                'https://lists.debian.org/debian-lts-announce/2024/11/msg00000.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2024-5535',
-                'https://openssl.org/news/secadv/20240627.txt',
-                'https://security.netapp.com/advisory/ntap-20240712-0005/',
-                'https://security.netapp.com/advisory/ntap-20241025-0006/',
-                'https://security.netapp.com/advisory/ntap-20241025-0010/',
-                'https://ubuntu.com/security/notices/USN-6937-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2024-5535',
-                'https://www.openssl.org/news/secadv/20240627.txt',
-                'https://www.oracle.com/security-alerts/cpuoct2024.html#AppendixMSQL'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: SSL_select_next_proto buffer overread'
-            },
-            {
-              'cve':  'CVE-2025-9230',
-              'cvss': {
-                'redhat': {
-                  'v3score':  '5.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L'
-                }
-              },
-              'cwes': [
-                'CWE-125',
-                'CWE-787'
-              ],
-              'description':   'Issue summary: An application trying to decrypt CMS messages encrypted using\npassword based encryption can trigger an out-of-bounds read and write.\n\nImpact summary: This out-of-bounds read may trigger a crash which leads to\nDenial of Service for an application. The out-of-bounds write can cause\na memory corruption which can have various consequences including\na Denial of Service or Execution of attacker-supplied code.\n\nAlthough the consequences of a successful exploit of this vulnerability\ncould be severe, the probability that the attacker would be able to\nperform it is low. Besides, password based (PWRI) encryption support in CMS\nmessages is very rarely used. For that reason the issue was assessed as\nModerate severity according to our Security Policy.\n\nThe FIPS modules in 3.5, 3.4, 3.3, 3.2, 3.1 and 3.0 are not affected by this\nissue, as the CMS implementation is outside the OpenSSL FIPS module\nboundary.',
-              'diffID':        'sha256:58256dbcb6283795ba0b2b89d5c0912985820bf7d51622305327a0c18f513bad',
-              'fixedVersions': [
-                '3.1.8-r1'
-              ],
-              'installedVersion': '3.1.5-r0',
-              'packageName':      'libssl3',
-              'purl':             'pkg:apk/alpine/libssl3@3.1.5-r0?arch=ppc64le&distro=3.19.2',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2025/09/30/5',
-                'https://access.redhat.com/errata/RHSA-2025:21255',
-                'https://access.redhat.com/security/cve/CVE-2025-9230',
-                'https://bugzilla.redhat.com/2396054',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2396054',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-9230',
-                'https://errata.almalinux.org/9/ALSA-2025-21255.html',
-                'https://errata.rockylinux.org/RLSA-2025:21255',
-                'https://github.com/openssl/openssl/commit/5965ea5dd6960f36d8b7f74f8eac67a8eb8f2b45',
-                'https://github.com/openssl/openssl/commit/9e91358f365dee6c446dcdcdb01c04d2743fd280',
-                'https://github.com/openssl/openssl/commit/a79c4ce559c6a3a8fd4109e9f33c1185d5bf2def',
-                'https://github.com/openssl/openssl/commit/b5282d677551afda7d20e9c00e09561b547b2dfd',
-                'https://github.com/openssl/openssl/commit/bae259a211ada6315dc50900686daaaaaa55f482',
-                'https://github.openssl.org/openssl/extended-releases/commit/c2b96348bfa662f25f4fabf81958ae822063dae3',
-                'https://github.openssl.org/openssl/extended-releases/commit/dfbaf161d8dafc1132dd88cd48ad990ed9b4c8ba',
-                'https://linux.oracle.com/cve/CVE-2025-9230.html',
-                'https://linux.oracle.com/errata/ELSA-2026-0337.html',
-                'https://lists.debian.org/debian-lts-announce/2025/10/msg00001.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2025-9230',
-                'https://openssl-library.org/news/secadv/20250930.txt',
-                'https://ubuntu.com/security/notices/USN-7786-1',
-                'https://www.cve.org/CVERecord?id=CVE-2025-9230'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: Out-of-bounds read & write in RFC 3211 KEK Unwrap'
-            },
-            {
-              'cve':  'CVE-2024-9143',
-              'cvss': {
-                'redhat': {
-                  'v3score':  '3.7',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L'
-                }
-              },
-              'cwes': [
-                'CWE-125',
-                'CWE-787'
-              ],
-              'description':   "Issue summary: Use of the low-level GF(2^m) elliptic curve APIs with untrusted\nexplicit values for the field polynomial can lead to out-of-bounds memory reads\nor writes.\n\nImpact summary: Out of bound memory writes can lead to an application crash or\neven a possibility of a remote code execution, however, in all the protocols\ninvolving Elliptic Curve Cryptography that we're aware of, either only \"named\ncurves\" are supported, or, if explicit curve parameters are supported, they\nspecify an X9.62 encoding of binary (GF(2^m)) curves that can't represent\nproblematic input values. Thus the likelihood of existence of a vulnerable\napplication is low.\n\nIn particular, the X9.62 encoding is used for ECC keys in X.509 certificates,\nso problematic inputs cannot occur in the context of processing X.509\ncertificates.  Any problematic use-cases would have to be using an \"exotic\"\ncurve encoding.\n\nThe affected APIs include: EC_GROUP_new_curve_GF2m(), EC_GROUP_new_from_params(),\nand various supporting BN_GF2m_*() functions.\n\nApplications working with \"exotic\" explicit binary (GF(2^m)) curve parameters,\nthat make it possible to represent invalid field polynomials with a zero\nconstant term, via the above or similar APIs, may terminate abruptly as a\nresult of reading or writing outside of array bounds.  Remote code execution\ncannot easily be ruled out.\n\nThe FIPS modules in 3.3, 3.2, 3.1 and 3.0 are not affected by this issue.",
-              'diffID':        'sha256:58256dbcb6283795ba0b2b89d5c0912985820bf7d51622305327a0c18f513bad',
-              'fixedVersions': [
-                '3.1.7-r1'
-              ],
-              'installedVersion': '3.1.5-r0',
-              'packageName':      'libssl3',
-              'purl':             'pkg:apk/alpine/libssl3@3.1.5-r0?arch=ppc64le&distro=3.19.2',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2024/10/16/1',
-                'http://www.openwall.com/lists/oss-security/2024/10/23/1',
-                'http://www.openwall.com/lists/oss-security/2024/10/24/1',
-                'https://access.redhat.com/security/cve/CVE-2024-9143',
-                'https://github.com/openssl/openssl/commit/72ae83ad214d2eef262461365a1975707f862712',
-                'https://github.com/openssl/openssl/commit/bc7e04d7c8d509fb78fc0e285aa948fb0da04700',
-                'https://github.com/openssl/openssl/commit/c0d3e4d32d2805f49bec30547f225bc4d092e1f4',
-                'https://github.com/openssl/openssl/commit/fdf6723362ca51bd883295efe206cb5b1cfa5154',
-                'https://github.openssl.org/openssl/extended-releases/commit/8efc0cbaa8ebba8e116f7b81a876a4123594d86a',
-                'https://github.openssl.org/openssl/extended-releases/commit/9d576994cec2b7aa37a91740ea7e680810957e41',
-                'https://lists.debian.org/debian-lts-announce/2024/10/msg00033.html',
-                'https://lists.debian.org/debian-lts-announce/2024/11/msg00000.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2024-9143',
-                'https://openssl-library.org/news/secadv/20241016.txt',
-                'https://security.netapp.com/advisory/ntap-20241101-0001/',
-                'https://ubuntu.com/security/notices/USN-7264-1',
-                'https://ubuntu.com/security/notices/USN-7278-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2024-9143'
-              ],
-              'severity':   'LOW',
-              'suppressed': false,
-              'title':      'openssl: Low-level invalid GF(2^m) parameters lead to OOB memory access'
-            },
-            {
-              'cve':  'CVE-2025-9232',
-              'cvss': {
-                'redhat': {
-                  'v3score':  '3.1',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L'
-                }
-              },
-              'cwes': [
-                'CWE-125'
-              ],
-              'description':   "Issue summary: An application using the OpenSSL HTTP client API functions may\ntrigger an out-of-bounds read if the 'no_proxy' environment variable is set and\nthe host portion of the authority component of the HTTP URL is an IPv6 address.\n\nImpact summary: An out-of-bounds read can trigger a crash which leads to\nDenial of Service for an application.\n\nThe OpenSSL HTTP client API functions can be used directly by applications\nbut they are also used by the OCSP client functions and CMP (Certificate\nManagement Protocol) client implementation in OpenSSL. However the URLs used\nby these implementations are unlikely to be controlled by an attacker.\n\nIn this vulnerable code the out of bounds read can only trigger a crash.\nFurthermore the vulnerability requires an attacker-controlled URL to be\npassed from an application to the OpenSSL function and the user has to have\na 'no_proxy' environment variable set. For the aforementioned reasons the\nissue was assessed as Low severity.\n\nThe vulnerable code was introduced in the following patch releases:\n3.0.16, 3.1.8, 3.2.4, 3.3.3, 3.4.0 and 3.5.0.\n\nThe FIPS modules in 3.5, 3.4, 3.3, 3.2, 3.1 and 3.0 are not affected by this\nissue, as the HTTP client implementation is outside the OpenSSL FIPS module\nboundary.",
-              'diffID':        'sha256:58256dbcb6283795ba0b2b89d5c0912985820bf7d51622305327a0c18f513bad',
-              'fixedVersions': [
-                '3.1.8-r1'
-              ],
-              'installedVersion': '3.1.5-r0',
-              'packageName':      'libssl3',
-              'purl':             'pkg:apk/alpine/libssl3@3.1.5-r0?arch=ppc64le&distro=3.19.2',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2025/09/30/5',
-                'https://access.redhat.com/security/cve/CVE-2025-9232',
-                'https://github.com/openssl/openssl/commit/2b4ec20e47959170422922eaff25346d362dcb35',
-                'https://github.com/openssl/openssl/commit/654dc11d23468a74fc8ea4672b702dd3feb7be4b',
-                'https://github.com/openssl/openssl/commit/7cf21a30513c9e43c4bc3836c237cf086e194af3',
-                'https://github.com/openssl/openssl/commit/89e790ac431125a4849992858490bed6b225eadf',
-                'https://github.com/openssl/openssl/commit/bbf38c034cdabd0a13330abcc4855c866f53d2e0',
-                'https://nvd.nist.gov/vuln/detail/CVE-2025-9232',
-                'https://openssl-library.org/news/secadv/20250930.txt',
-                'https://ubuntu.com/security/notices/USN-7786-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2025-9232'
-              ],
-              'severity':   'LOW',
-              'suppressed': false,
-              'title':      'openssl: Out-of-bounds read in HTTP client no_proxy handling'
-            },
-            {
-              'cve':  'CVE-2025-26519',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-787'
-              ],
-              'description':   'musl libc 0.9.13 through 1.2.5 before 1.2.6 has an out-of-bounds write vulnerability when an attacker can trigger iconv conversion of untrusted EUC-KR text to UTF-8.',
-              'diffID':        'sha256:58256dbcb6283795ba0b2b89d5c0912985820bf7d51622305327a0c18f513bad',
-              'fixedVersions': [
-                '1.2.4_git20230717-r5'
-              ],
-              'installedVersion': '1.2.4_git20230717-r4',
-              'packageName':      'musl',
-              'purl':             'pkg:apk/alpine/musl@1.2.4_git20230717-r4?arch=ppc64le&distro=3.19.2',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2025/02/13/2',
-                'http://www.openwall.com/lists/oss-security/2025/02/13/3',
-                'http://www.openwall.com/lists/oss-security/2025/02/13/4',
-                'http://www.openwall.com/lists/oss-security/2025/02/13/5',
-                'http://www.openwall.com/lists/oss-security/2025/02/14/5',
-                'http://www.openwall.com/lists/oss-security/2025/02/14/6',
-                'https://git.musl-libc.org/cgit/musl/commit/?id=c47ad25ea3b484e10326f933e927c0bc8cded3da',
-                'https://git.musl-libc.org/cgit/musl/commit/?id=e5adcd97b5196e29991b524237381a0202a60659',
-                'https://www.openwall.com/lists/oss-security/2025/02/13/2'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'musl libc 0.9.13 through 1.2.5 before 1.2.6 has an out-of-bounds write ...'
-            },
-            {
-              'cve':  'CVE-2025-26519',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-787'
-              ],
-              'description':   'musl libc 0.9.13 through 1.2.5 before 1.2.6 has an out-of-bounds write vulnerability when an attacker can trigger iconv conversion of untrusted EUC-KR text to UTF-8.',
-              'diffID':        'sha256:58256dbcb6283795ba0b2b89d5c0912985820bf7d51622305327a0c18f513bad',
-              'fixedVersions': [
-                '1.2.4_git20230717-r5'
-              ],
-              'installedVersion': '1.2.4_git20230717-r4',
-              'packageName':      'musl-utils',
-              'purl':             'pkg:apk/alpine/musl-utils@1.2.4_git20230717-r4?arch=ppc64le&distro=3.19.2',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2025/02/13/2',
-                'http://www.openwall.com/lists/oss-security/2025/02/13/3',
-                'http://www.openwall.com/lists/oss-security/2025/02/13/4',
-                'http://www.openwall.com/lists/oss-security/2025/02/13/5',
-                'http://www.openwall.com/lists/oss-security/2025/02/14/5',
-                'http://www.openwall.com/lists/oss-security/2025/02/14/6',
-                'https://git.musl-libc.org/cgit/musl/commit/?id=c47ad25ea3b484e10326f933e927c0bc8cded3da',
-                'https://git.musl-libc.org/cgit/musl/commit/?id=e5adcd97b5196e29991b524237381a0202a60659',
-                'https://www.openwall.com/lists/oss-security/2025/02/13/2'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'musl libc 0.9.13 through 1.2.5 before 1.2.6 has an out-of-bounds write ...'
-            },
-            {
-              'cve':  'CVE-2024-58251',
-              'cwes': [
-                'CWE-150'
-              ],
-              'description':   'In netstat in BusyBox through 1.37.0, local users can launch of network application with an argv[0] containing an ANSI terminal escape sequence, leading to a denial of service (terminal locked up) when netstat is used by a victim.',
-              'diffID':        'sha256:58256dbcb6283795ba0b2b89d5c0912985820bf7d51622305327a0c18f513bad',
-              'fixedVersions': [
-                '1.36.1-r21'
-              ],
-              'installedVersion': '1.36.1-r19',
-              'packageName':      'ssl_client',
-              'purl':             'pkg:apk/alpine/ssl_client@1.36.1-r19?arch=ppc64le&distro=3.19.2',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2025/04/23/6',
-                'https://bugs.busybox.net/show_bug.cgi?id=15922',
-                'https://www.busybox.net',
-                'https://www.busybox.net/downloads/',
-                'https://www.cve.org/CVERecord?id=CVE-2024-58251'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'In netstat in BusyBox through 1.37.0, local users can launch of networ ...'
-            },
-            {
-              'cve':  'CVE-2025-46394',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '3.3',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-451'
-              ],
-              'description':   'In tar in BusyBox through 1.37.0, a TAR archive can have filenames hidden from a listing through the use of terminal escape sequences.',
-              'diffID':        'sha256:58256dbcb6283795ba0b2b89d5c0912985820bf7d51622305327a0c18f513bad',
-              'fixedVersions': [
-                '1.36.1-r21'
-              ],
-              'installedVersion': '1.36.1-r19',
-              'packageName':      'ssl_client',
-              'purl':             'pkg:apk/alpine/ssl_client@1.36.1-r19?arch=ppc64le&distro=3.19.2',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2025/04/23/5',
-                'http://www.openwall.com/lists/oss-security/2025/04/24/3',
-                'https://bugs.busybox.net/show_bug.cgi?id=16018',
-                'https://lists.busybox.net/pipermail/busybox/2024-July/090806.html',
-                'https://lists.busybox.net/pipermail/busybox/2024-July/090814.html',
-                'https://www.busybox.net',
-                'https://www.busybox.net/downloads/',
-                'https://www.cve.org/CVERecord?id=CVE-2025-46394',
-                'https://www.openwall.com/lists/oss-security/2025/04/23/1'
-              ],
-              'severity':   'LOW',
-              'suppressed': false,
-              'title':      'In tar in BusyBox through 1.37.0, a TAR archive can have filenames hid ...'
-            }
-          ]
-        }
-      ],
-      'summary': {
-        'critical':   0,
-        'high':       4,
-        'low':        7,
-        'medium':     11,
-        'suppressed': 0,
-        'unknown':    0
-      }
-    }
-  },
-  {
-    'id':    'default/57c76bdc96759608f3772a247ec7003511bc840d3f2071e6a62d0d21145b0452',
-    'type':  'storage.sbomscanner.kubewarden.io.vulnerabilityreport',
-    'links': {
-      'patch':  'https://localhost:8005/v1/storage.sbomscanner.kubewarden.io.vulnerabilityreports/default/57c76bdc96759608f3772a247ec7003511bc840d3f2071e6a62d0d21145b0452',
-      'remove': 'https://localhost:8005/v1/storage.sbomscanner.kubewarden.io.vulnerabilityreports/default/57c76bdc96759608f3772a247ec7003511bc840d3f2071e6a62d0d21145b0452',
-      'self':   'https://localhost:8005/v1/storage.sbomscanner.kubewarden.io.vulnerabilityreports/default/57c76bdc96759608f3772a247ec7003511bc840d3f2071e6a62d0d21145b0452',
-      'update': 'https://localhost:8005/v1/storage.sbomscanner.kubewarden.io.vulnerabilityreports/default/57c76bdc96759608f3772a247ec7003511bc840d3f2071e6a62d0d21145b0452',
-      'view':   'https://localhost:8005/apis/storage.sbomscanner.kubewarden.io/v1alpha1/namespaces/default/vulnerabilityreports/57c76bdc96759608f3772a247ec7003511bc840d3f2071e6a62d0d21145b0452'
-    },
-    'apiVersion':    'storage.sbomscanner.kubewarden.io/v1alpha1',
-    'imageMetadata': {
-      'digest':      'sha256:fe0dcdd1f78341a54b6d08d0f45d91ae93eb212667d970ad15213a3168c410ee',
-      'platform':    'linux/s390x',
-      'registry':    'lsong-demo1',
-      'registryURI': 'registry-1.docker.io',
-      'repository':  'library/alpine',
-      'tag':         '3.21.3'
-    },
-    'kind':     'VulnerabilityReport',
-    'metadata': {
-      'creationTimestamp': '2026-01-14T18:51:46Z',
-      'fields':            [
-        '57c76bdc96759608f3772a247ec7003511bc840d3f2071e6a62d0d21145b0452',
-        'registry-1.docker.io/library/alpine:3.21.3',
-        'linux/s390x',
-        '12 (0 suppressed)'
-      ],
-      'labels': {
-        'app.kubernetes.io/managed-by':          'sbomscanner',
-        'app.kubernetes.io/part-of':             'sbomscanner',
-        'sbomscanner.kubewarden.io/scanjob-uid': '445c600a-c4b6-40b3-bd71-f2d2140a37d5'
-      },
-      'name':            '57c76bdc96759608f3772a247ec7003511bc840d3f2071e6a62d0d21145b0452',
-      'namespace':       'default',
-      'ownerReferences': [
-        {
-          'apiVersion':         'storage.sbomscanner.kubewarden.io/v1alpha1',
-          'blockOwnerDeletion': true,
-          'controller':         true,
-          'kind':               'SBOM',
-          'name':               '57c76bdc96759608f3772a247ec7003511bc840d3f2071e6a62d0d21145b0452',
-          'uid':                'e368e4f3-7d5f-4884-9828-a6f5b2916fbb'
-        }
-      ],
-      'relationships': [
-        {
-          'fromId':   'default/57c76bdc96759608f3772a247ec7003511bc840d3f2071e6a62d0d21145b0452',
-          'fromType': 'storage.sbomscanner.kubewarden.io.sbom',
-          'rel':      'owner',
-          'state':    'active',
-          'message':  'Resource is current'
-        }
-      ],
-      'resourceVersion': '1',
-      'state':           {
-        'error':         false,
-        'message':       'Resource is current',
-        'name':          'active',
-        'transitioning': false
-      },
-      'uid': 'e6896b56-abe2-4b66-ba46-72ca531e0fa8'
-    },
-    'report': {
-      'results': [
-        {
-          'class':           'os-pkgs',
-          'target':          '/var/run/worker/trivy.sbom.3969457330.json (alpine 3.21.3)',
-          'type':            'alpine',
-          'vulnerabilities': [
-            {
-              'cve':  'CVE-2024-58251',
-              'cwes': [
-                'CWE-150'
-              ],
-              'description':   'In netstat in BusyBox through 1.37.0, local users can launch of network application with an argv[0] containing an ANSI terminal escape sequence, leading to a denial of service (terminal locked up) when netstat is used by a victim.',
-              'diffID':        'sha256:85abc792f076270ee62047e0a4f7d76fab07baf127fdd5bd6b29c95398e2c827',
-              'fixedVersions': [
-                '1.37.0-r14'
-              ],
-              'installedVersion': '1.37.0-r12',
-              'packageName':      'busybox',
-              'purl':             'pkg:apk/alpine/busybox@1.37.0-r12?arch=s390x&distro=3.21.3',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2025/04/23/6',
-                'https://bugs.busybox.net/show_bug.cgi?id=15922',
-                'https://www.busybox.net',
-                'https://www.busybox.net/downloads/',
-                'https://www.cve.org/CVERecord?id=CVE-2024-58251'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'In netstat in BusyBox through 1.37.0, local users can launch of networ ...'
-            },
-            {
-              'cve':  'CVE-2025-46394',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '3.3',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-451'
-              ],
-              'description':   'In tar in BusyBox through 1.37.0, a TAR archive can have filenames hidden from a listing through the use of terminal escape sequences.',
-              'diffID':        'sha256:85abc792f076270ee62047e0a4f7d76fab07baf127fdd5bd6b29c95398e2c827',
-              'fixedVersions': [
-                '1.37.0-r14'
-              ],
-              'installedVersion': '1.37.0-r12',
-              'packageName':      'busybox',
-              'purl':             'pkg:apk/alpine/busybox@1.37.0-r12?arch=s390x&distro=3.21.3',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2025/04/23/5',
-                'http://www.openwall.com/lists/oss-security/2025/04/24/3',
-                'https://bugs.busybox.net/show_bug.cgi?id=16018',
-                'https://lists.busybox.net/pipermail/busybox/2024-July/090806.html',
-                'https://lists.busybox.net/pipermail/busybox/2024-July/090814.html',
-                'https://www.busybox.net',
-                'https://www.busybox.net/downloads/',
-                'https://www.cve.org/CVERecord?id=CVE-2025-46394',
-                'https://www.openwall.com/lists/oss-security/2025/04/23/1'
-              ],
-              'severity':   'LOW',
-              'suppressed': false,
-              'title':      'In tar in BusyBox through 1.37.0, a TAR archive can have filenames hid ...'
-            },
-            {
-              'cve':  'CVE-2024-58251',
-              'cwes': [
-                'CWE-150'
-              ],
-              'description':   'In netstat in BusyBox through 1.37.0, local users can launch of network application with an argv[0] containing an ANSI terminal escape sequence, leading to a denial of service (terminal locked up) when netstat is used by a victim.',
-              'diffID':        'sha256:85abc792f076270ee62047e0a4f7d76fab07baf127fdd5bd6b29c95398e2c827',
-              'fixedVersions': [
-                '1.37.0-r14'
-              ],
-              'installedVersion': '1.37.0-r12',
-              'packageName':      'busybox-binsh',
-              'purl':             'pkg:apk/alpine/busybox-binsh@1.37.0-r12?arch=s390x&distro=3.21.3',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2025/04/23/6',
-                'https://bugs.busybox.net/show_bug.cgi?id=15922',
-                'https://www.busybox.net',
-                'https://www.busybox.net/downloads/',
-                'https://www.cve.org/CVERecord?id=CVE-2024-58251'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'In netstat in BusyBox through 1.37.0, local users can launch of networ ...'
-            },
-            {
-              'cve':  'CVE-2025-46394',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '3.3',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-451'
-              ],
-              'description':   'In tar in BusyBox through 1.37.0, a TAR archive can have filenames hidden from a listing through the use of terminal escape sequences.',
-              'diffID':        'sha256:85abc792f076270ee62047e0a4f7d76fab07baf127fdd5bd6b29c95398e2c827',
-              'fixedVersions': [
-                '1.37.0-r14'
-              ],
-              'installedVersion': '1.37.0-r12',
-              'packageName':      'busybox-binsh',
-              'purl':             'pkg:apk/alpine/busybox-binsh@1.37.0-r12?arch=s390x&distro=3.21.3',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2025/04/23/5',
-                'http://www.openwall.com/lists/oss-security/2025/04/24/3',
-                'https://bugs.busybox.net/show_bug.cgi?id=16018',
-                'https://lists.busybox.net/pipermail/busybox/2024-July/090806.html',
-                'https://lists.busybox.net/pipermail/busybox/2024-July/090814.html',
-                'https://www.busybox.net',
-                'https://www.busybox.net/downloads/',
-                'https://www.cve.org/CVERecord?id=CVE-2025-46394',
-                'https://www.openwall.com/lists/oss-security/2025/04/23/1'
-              ],
-              'severity':   'LOW',
-              'suppressed': false,
-              'title':      'In tar in BusyBox through 1.37.0, a TAR archive can have filenames hid ...'
-            },
-            {
-              'cve':  'CVE-2025-9230',
-              'cvss': {
-                'redhat': {
-                  'v3score':  '5.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L'
-                }
-              },
-              'cwes': [
-                'CWE-125',
-                'CWE-787'
-              ],
-              'description':   'Issue summary: An application trying to decrypt CMS messages encrypted using\npassword based encryption can trigger an out-of-bounds read and write.\n\nImpact summary: This out-of-bounds read may trigger a crash which leads to\nDenial of Service for an application. The out-of-bounds write can cause\na memory corruption which can have various consequences including\na Denial of Service or Execution of attacker-supplied code.\n\nAlthough the consequences of a successful exploit of this vulnerability\ncould be severe, the probability that the attacker would be able to\nperform it is low. Besides, password based (PWRI) encryption support in CMS\nmessages is very rarely used. For that reason the issue was assessed as\nModerate severity according to our Security Policy.\n\nThe FIPS modules in 3.5, 3.4, 3.3, 3.2, 3.1 and 3.0 are not affected by this\nissue, as the CMS implementation is outside the OpenSSL FIPS module\nboundary.',
-              'diffID':        'sha256:85abc792f076270ee62047e0a4f7d76fab07baf127fdd5bd6b29c95398e2c827',
-              'fixedVersions': [
-                '3.3.5-r0'
-              ],
-              'installedVersion': '3.3.3-r0',
-              'packageName':      'libcrypto3',
-              'purl':             'pkg:apk/alpine/libcrypto3@3.3.3-r0?arch=s390x&distro=3.21.3',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2025/09/30/5',
-                'https://access.redhat.com/errata/RHSA-2025:21255',
-                'https://access.redhat.com/security/cve/CVE-2025-9230',
-                'https://bugzilla.redhat.com/2396054',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2396054',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-9230',
-                'https://errata.almalinux.org/9/ALSA-2025-21255.html',
-                'https://errata.rockylinux.org/RLSA-2025:21255',
-                'https://github.com/openssl/openssl/commit/5965ea5dd6960f36d8b7f74f8eac67a8eb8f2b45',
-                'https://github.com/openssl/openssl/commit/9e91358f365dee6c446dcdcdb01c04d2743fd280',
-                'https://github.com/openssl/openssl/commit/a79c4ce559c6a3a8fd4109e9f33c1185d5bf2def',
-                'https://github.com/openssl/openssl/commit/b5282d677551afda7d20e9c00e09561b547b2dfd',
-                'https://github.com/openssl/openssl/commit/bae259a211ada6315dc50900686daaaaaa55f482',
-                'https://github.openssl.org/openssl/extended-releases/commit/c2b96348bfa662f25f4fabf81958ae822063dae3',
-                'https://github.openssl.org/openssl/extended-releases/commit/dfbaf161d8dafc1132dd88cd48ad990ed9b4c8ba',
-                'https://linux.oracle.com/cve/CVE-2025-9230.html',
-                'https://linux.oracle.com/errata/ELSA-2026-0337.html',
-                'https://lists.debian.org/debian-lts-announce/2025/10/msg00001.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2025-9230',
-                'https://openssl-library.org/news/secadv/20250930.txt',
-                'https://ubuntu.com/security/notices/USN-7786-1',
-                'https://www.cve.org/CVERecord?id=CVE-2025-9230'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: Out-of-bounds read & write in RFC 3211 KEK Unwrap'
-            },
-            {
-              'cve':  'CVE-2025-9231',
-              'cvss': {
-                'redhat': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-385'
-              ],
-              'description':   'Issue summary: A timing side-channel which could potentially allow remote\nrecovery of the private key exists in the SM2 algorithm implementation on 64 bit\nARM platforms.\n\nImpact summary: A timing side-channel in SM2 signature computations on 64 bit\nARM platforms could allow recovering the private key by an attacker..\n\nWhile remote key recovery over a network was not attempted by the reporter,\ntiming measurements revealed a timing signal which may allow such an attack.\n\nOpenSSL does not directly support certificates with SM2 keys in TLS, and so\nthis CVE is not relevant in most TLS contexts.  However, given that it is\npossible to add support for such certificates via a custom provider, coupled\nwith the fact that in such a custom provider context the private key may be\nrecoverable via remote timing measurements, we consider this to be a Moderate\nseverity issue.\n\nThe FIPS modules in 3.5, 3.4, 3.3, 3.2, 3.1 and 3.0 are not affected by this\nissue, as SM2 is not an approved algorithm.',
-              'diffID':        'sha256:85abc792f076270ee62047e0a4f7d76fab07baf127fdd5bd6b29c95398e2c827',
-              'fixedVersions': [
-                '3.3.5-r0'
-              ],
-              'installedVersion': '3.3.3-r0',
-              'packageName':      'libcrypto3',
-              'purl':             'pkg:apk/alpine/libcrypto3@3.3.3-r0?arch=s390x&distro=3.21.3',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2025/09/30/5',
-                'https://access.redhat.com/security/cve/CVE-2025-9231',
-                'https://github.com/openssl/openssl/commit/567f64386e43683888212226824b6a179885a0fe',
-                'https://github.com/openssl/openssl/commit/cba616c26ac8e7b37de5e77762e505ba5ca51698',
-                'https://github.com/openssl/openssl/commit/eed5adc9f969d77c94f213767acbb41ff923b6f4',
-                'https://github.com/openssl/openssl/commit/fc47a2ec078912b3e914fab5734535e76c4820c2',
-                'https://nvd.nist.gov/vuln/detail/CVE-2025-9231',
-                'https://openssl-library.org/news/secadv/20250930.txt',
-                'https://ubuntu.com/security/notices/USN-7786-1',
-                'https://www.cve.org/CVERecord?id=CVE-2025-9231'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: Timing side-channel in SM2 algorithm on 64 bit ARM'
-            },
-            {
-              'cve':  'CVE-2025-9232',
-              'cvss': {
-                'redhat': {
-                  'v3score':  '3.1',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L'
-                }
-              },
-              'cwes': [
-                'CWE-125'
-              ],
-              'description':   "Issue summary: An application using the OpenSSL HTTP client API functions may\ntrigger an out-of-bounds read if the 'no_proxy' environment variable is set and\nthe host portion of the authority component of the HTTP URL is an IPv6 address.\n\nImpact summary: An out-of-bounds read can trigger a crash which leads to\nDenial of Service for an application.\n\nThe OpenSSL HTTP client API functions can be used directly by applications\nbut they are also used by the OCSP client functions and CMP (Certificate\nManagement Protocol) client implementation in OpenSSL. However the URLs used\nby these implementations are unlikely to be controlled by an attacker.\n\nIn this vulnerable code the out of bounds read can only trigger a crash.\nFurthermore the vulnerability requires an attacker-controlled URL to be\npassed from an application to the OpenSSL function and the user has to have\na 'no_proxy' environment variable set. For the aforementioned reasons the\nissue was assessed as Low severity.\n\nThe vulnerable code was introduced in the following patch releases:\n3.0.16, 3.1.8, 3.2.4, 3.3.3, 3.4.0 and 3.5.0.\n\nThe FIPS modules in 3.5, 3.4, 3.3, 3.2, 3.1 and 3.0 are not affected by this\nissue, as the HTTP client implementation is outside the OpenSSL FIPS module\nboundary.",
-              'diffID':        'sha256:85abc792f076270ee62047e0a4f7d76fab07baf127fdd5bd6b29c95398e2c827',
-              'fixedVersions': [
-                '3.3.5-r0'
-              ],
-              'installedVersion': '3.3.3-r0',
-              'packageName':      'libcrypto3',
-              'purl':             'pkg:apk/alpine/libcrypto3@3.3.3-r0?arch=s390x&distro=3.21.3',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2025/09/30/5',
-                'https://access.redhat.com/security/cve/CVE-2025-9232',
-                'https://github.com/openssl/openssl/commit/2b4ec20e47959170422922eaff25346d362dcb35',
-                'https://github.com/openssl/openssl/commit/654dc11d23468a74fc8ea4672b702dd3feb7be4b',
-                'https://github.com/openssl/openssl/commit/7cf21a30513c9e43c4bc3836c237cf086e194af3',
-                'https://github.com/openssl/openssl/commit/89e790ac431125a4849992858490bed6b225eadf',
-                'https://github.com/openssl/openssl/commit/bbf38c034cdabd0a13330abcc4855c866f53d2e0',
-                'https://nvd.nist.gov/vuln/detail/CVE-2025-9232',
-                'https://openssl-library.org/news/secadv/20250930.txt',
-                'https://ubuntu.com/security/notices/USN-7786-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2025-9232'
-              ],
-              'severity':   'LOW',
-              'suppressed': false,
-              'title':      'openssl: Out-of-bounds read in HTTP client no_proxy handling'
-            },
-            {
-              'cve':  'CVE-2025-9230',
-              'cvss': {
-                'redhat': {
-                  'v3score':  '5.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L'
-                }
-              },
-              'cwes': [
-                'CWE-125',
-                'CWE-787'
-              ],
-              'description':   'Issue summary: An application trying to decrypt CMS messages encrypted using\npassword based encryption can trigger an out-of-bounds read and write.\n\nImpact summary: This out-of-bounds read may trigger a crash which leads to\nDenial of Service for an application. The out-of-bounds write can cause\na memory corruption which can have various consequences including\na Denial of Service or Execution of attacker-supplied code.\n\nAlthough the consequences of a successful exploit of this vulnerability\ncould be severe, the probability that the attacker would be able to\nperform it is low. Besides, password based (PWRI) encryption support in CMS\nmessages is very rarely used. For that reason the issue was assessed as\nModerate severity according to our Security Policy.\n\nThe FIPS modules in 3.5, 3.4, 3.3, 3.2, 3.1 and 3.0 are not affected by this\nissue, as the CMS implementation is outside the OpenSSL FIPS module\nboundary.',
-              'diffID':        'sha256:85abc792f076270ee62047e0a4f7d76fab07baf127fdd5bd6b29c95398e2c827',
-              'fixedVersions': [
-                '3.3.5-r0'
-              ],
-              'installedVersion': '3.3.3-r0',
-              'packageName':      'libssl3',
-              'purl':             'pkg:apk/alpine/libssl3@3.3.3-r0?arch=s390x&distro=3.21.3',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2025/09/30/5',
-                'https://access.redhat.com/errata/RHSA-2025:21255',
-                'https://access.redhat.com/security/cve/CVE-2025-9230',
-                'https://bugzilla.redhat.com/2396054',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2396054',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-9230',
-                'https://errata.almalinux.org/9/ALSA-2025-21255.html',
-                'https://errata.rockylinux.org/RLSA-2025:21255',
-                'https://github.com/openssl/openssl/commit/5965ea5dd6960f36d8b7f74f8eac67a8eb8f2b45',
-                'https://github.com/openssl/openssl/commit/9e91358f365dee6c446dcdcdb01c04d2743fd280',
-                'https://github.com/openssl/openssl/commit/a79c4ce559c6a3a8fd4109e9f33c1185d5bf2def',
-                'https://github.com/openssl/openssl/commit/b5282d677551afda7d20e9c00e09561b547b2dfd',
-                'https://github.com/openssl/openssl/commit/bae259a211ada6315dc50900686daaaaaa55f482',
-                'https://github.openssl.org/openssl/extended-releases/commit/c2b96348bfa662f25f4fabf81958ae822063dae3',
-                'https://github.openssl.org/openssl/extended-releases/commit/dfbaf161d8dafc1132dd88cd48ad990ed9b4c8ba',
-                'https://linux.oracle.com/cve/CVE-2025-9230.html',
-                'https://linux.oracle.com/errata/ELSA-2026-0337.html',
-                'https://lists.debian.org/debian-lts-announce/2025/10/msg00001.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2025-9230',
-                'https://openssl-library.org/news/secadv/20250930.txt',
-                'https://ubuntu.com/security/notices/USN-7786-1',
-                'https://www.cve.org/CVERecord?id=CVE-2025-9230'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: Out-of-bounds read & write in RFC 3211 KEK Unwrap'
-            },
-            {
-              'cve':  'CVE-2025-9231',
-              'cvss': {
-                'redhat': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-385'
-              ],
-              'description':   'Issue summary: A timing side-channel which could potentially allow remote\nrecovery of the private key exists in the SM2 algorithm implementation on 64 bit\nARM platforms.\n\nImpact summary: A timing side-channel in SM2 signature computations on 64 bit\nARM platforms could allow recovering the private key by an attacker..\n\nWhile remote key recovery over a network was not attempted by the reporter,\ntiming measurements revealed a timing signal which may allow such an attack.\n\nOpenSSL does not directly support certificates with SM2 keys in TLS, and so\nthis CVE is not relevant in most TLS contexts.  However, given that it is\npossible to add support for such certificates via a custom provider, coupled\nwith the fact that in such a custom provider context the private key may be\nrecoverable via remote timing measurements, we consider this to be a Moderate\nseverity issue.\n\nThe FIPS modules in 3.5, 3.4, 3.3, 3.2, 3.1 and 3.0 are not affected by this\nissue, as SM2 is not an approved algorithm.',
-              'diffID':        'sha256:85abc792f076270ee62047e0a4f7d76fab07baf127fdd5bd6b29c95398e2c827',
-              'fixedVersions': [
-                '3.3.5-r0'
-              ],
-              'installedVersion': '3.3.3-r0',
-              'packageName':      'libssl3',
-              'purl':             'pkg:apk/alpine/libssl3@3.3.3-r0?arch=s390x&distro=3.21.3',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2025/09/30/5',
-                'https://access.redhat.com/security/cve/CVE-2025-9231',
-                'https://github.com/openssl/openssl/commit/567f64386e43683888212226824b6a179885a0fe',
-                'https://github.com/openssl/openssl/commit/cba616c26ac8e7b37de5e77762e505ba5ca51698',
-                'https://github.com/openssl/openssl/commit/eed5adc9f969d77c94f213767acbb41ff923b6f4',
-                'https://github.com/openssl/openssl/commit/fc47a2ec078912b3e914fab5734535e76c4820c2',
-                'https://nvd.nist.gov/vuln/detail/CVE-2025-9231',
-                'https://openssl-library.org/news/secadv/20250930.txt',
-                'https://ubuntu.com/security/notices/USN-7786-1',
-                'https://www.cve.org/CVERecord?id=CVE-2025-9231'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: Timing side-channel in SM2 algorithm on 64 bit ARM'
-            },
-            {
-              'cve':  'CVE-2025-9232',
-              'cvss': {
-                'redhat': {
-                  'v3score':  '3.1',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L'
-                }
-              },
-              'cwes': [
-                'CWE-125'
-              ],
-              'description':   "Issue summary: An application using the OpenSSL HTTP client API functions may\ntrigger an out-of-bounds read if the 'no_proxy' environment variable is set and\nthe host portion of the authority component of the HTTP URL is an IPv6 address.\n\nImpact summary: An out-of-bounds read can trigger a crash which leads to\nDenial of Service for an application.\n\nThe OpenSSL HTTP client API functions can be used directly by applications\nbut they are also used by the OCSP client functions and CMP (Certificate\nManagement Protocol) client implementation in OpenSSL. However the URLs used\nby these implementations are unlikely to be controlled by an attacker.\n\nIn this vulnerable code the out of bounds read can only trigger a crash.\nFurthermore the vulnerability requires an attacker-controlled URL to be\npassed from an application to the OpenSSL function and the user has to have\na 'no_proxy' environment variable set. For the aforementioned reasons the\nissue was assessed as Low severity.\n\nThe vulnerable code was introduced in the following patch releases:\n3.0.16, 3.1.8, 3.2.4, 3.3.3, 3.4.0 and 3.5.0.\n\nThe FIPS modules in 3.5, 3.4, 3.3, 3.2, 3.1 and 3.0 are not affected by this\nissue, as the HTTP client implementation is outside the OpenSSL FIPS module\nboundary.",
-              'diffID':        'sha256:85abc792f076270ee62047e0a4f7d76fab07baf127fdd5bd6b29c95398e2c827',
-              'fixedVersions': [
-                '3.3.5-r0'
-              ],
-              'installedVersion': '3.3.3-r0',
-              'packageName':      'libssl3',
-              'purl':             'pkg:apk/alpine/libssl3@3.3.3-r0?arch=s390x&distro=3.21.3',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2025/09/30/5',
-                'https://access.redhat.com/security/cve/CVE-2025-9232',
-                'https://github.com/openssl/openssl/commit/2b4ec20e47959170422922eaff25346d362dcb35',
-                'https://github.com/openssl/openssl/commit/654dc11d23468a74fc8ea4672b702dd3feb7be4b',
-                'https://github.com/openssl/openssl/commit/7cf21a30513c9e43c4bc3836c237cf086e194af3',
-                'https://github.com/openssl/openssl/commit/89e790ac431125a4849992858490bed6b225eadf',
-                'https://github.com/openssl/openssl/commit/bbf38c034cdabd0a13330abcc4855c866f53d2e0',
-                'https://nvd.nist.gov/vuln/detail/CVE-2025-9232',
-                'https://openssl-library.org/news/secadv/20250930.txt',
-                'https://ubuntu.com/security/notices/USN-7786-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2025-9232'
-              ],
-              'severity':   'LOW',
-              'suppressed': false,
-              'title':      'openssl: Out-of-bounds read in HTTP client no_proxy handling'
-            },
-            {
-              'cve':  'CVE-2024-58251',
-              'cwes': [
-                'CWE-150'
-              ],
-              'description':   'In netstat in BusyBox through 1.37.0, local users can launch of network application with an argv[0] containing an ANSI terminal escape sequence, leading to a denial of service (terminal locked up) when netstat is used by a victim.',
-              'diffID':        'sha256:85abc792f076270ee62047e0a4f7d76fab07baf127fdd5bd6b29c95398e2c827',
-              'fixedVersions': [
-                '1.37.0-r14'
-              ],
-              'installedVersion': '1.37.0-r12',
-              'packageName':      'ssl_client',
-              'purl':             'pkg:apk/alpine/ssl_client@1.37.0-r12?arch=s390x&distro=3.21.3',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2025/04/23/6',
-                'https://bugs.busybox.net/show_bug.cgi?id=15922',
-                'https://www.busybox.net',
-                'https://www.busybox.net/downloads/',
-                'https://www.cve.org/CVERecord?id=CVE-2024-58251'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'In netstat in BusyBox through 1.37.0, local users can launch of networ ...'
-            },
-            {
-              'cve':  'CVE-2025-46394',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '3.3',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-451'
-              ],
-              'description':   'In tar in BusyBox through 1.37.0, a TAR archive can have filenames hidden from a listing through the use of terminal escape sequences.',
-              'diffID':        'sha256:85abc792f076270ee62047e0a4f7d76fab07baf127fdd5bd6b29c95398e2c827',
-              'fixedVersions': [
-                '1.37.0-r14'
-              ],
-              'installedVersion': '1.37.0-r12',
-              'packageName':      'ssl_client',
-              'purl':             'pkg:apk/alpine/ssl_client@1.37.0-r12?arch=s390x&distro=3.21.3',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2025/04/23/5',
-                'http://www.openwall.com/lists/oss-security/2025/04/24/3',
-                'https://bugs.busybox.net/show_bug.cgi?id=16018',
-                'https://lists.busybox.net/pipermail/busybox/2024-July/090806.html',
-                'https://lists.busybox.net/pipermail/busybox/2024-July/090814.html',
-                'https://www.busybox.net',
-                'https://www.busybox.net/downloads/',
-                'https://www.cve.org/CVERecord?id=CVE-2025-46394',
-                'https://www.openwall.com/lists/oss-security/2025/04/23/1'
-              ],
-              'severity':   'LOW',
-              'suppressed': false,
-              'title':      'In tar in BusyBox through 1.37.0, a TAR archive can have filenames hid ...'
-            }
-          ]
-        }
-      ],
-      'summary': {
-        'critical':   0,
-        'high':       0,
-        'low':        5,
-        'medium':     7,
-        'suppressed': 0,
-        'unknown':    0
-      }
-    }
-  },
-  {
-    'id':    'default/58d159a2db7c0aca3d6f6568626af4918675b0531aedf1b2f34c5158ec74d9a6',
-    'type':  'storage.sbomscanner.kubewarden.io.vulnerabilityreport',
-    'links': {
-      'patch':  'https://localhost:8005/v1/storage.sbomscanner.kubewarden.io.vulnerabilityreports/default/58d159a2db7c0aca3d6f6568626af4918675b0531aedf1b2f34c5158ec74d9a6',
-      'remove': 'https://localhost:8005/v1/storage.sbomscanner.kubewarden.io.vulnerabilityreports/default/58d159a2db7c0aca3d6f6568626af4918675b0531aedf1b2f34c5158ec74d9a6',
-      'self':   'https://localhost:8005/v1/storage.sbomscanner.kubewarden.io.vulnerabilityreports/default/58d159a2db7c0aca3d6f6568626af4918675b0531aedf1b2f34c5158ec74d9a6',
-      'update': 'https://localhost:8005/v1/storage.sbomscanner.kubewarden.io.vulnerabilityreports/default/58d159a2db7c0aca3d6f6568626af4918675b0531aedf1b2f34c5158ec74d9a6',
-      'view':   'https://localhost:8005/apis/storage.sbomscanner.kubewarden.io/v1alpha1/namespaces/default/vulnerabilityreports/58d159a2db7c0aca3d6f6568626af4918675b0531aedf1b2f34c5158ec74d9a6'
-    },
-    'apiVersion':    'storage.sbomscanner.kubewarden.io/v1alpha1',
-    'imageMetadata': {
-      'digest':      'sha256:01a4cdaebc9c6af607753cc538c507d0867897cdf9a1caa70bbab2eb1506c964',
-      'platform':    'linux/arm/v6',
-      'registry':    'lsong-demo1',
-      'registryURI': 'registry-1.docker.io',
-      'repository':  'library/alpine',
-      'tag':         '3.17.1'
-    },
-    'kind':     'VulnerabilityReport',
-    'metadata': {
-      'creationTimestamp': '2026-01-14T18:51:30Z',
-      'fields':            [
-        '58d159a2db7c0aca3d6f6568626af4918675b0531aedf1b2f34c5158ec74d9a6',
-        'registry-1.docker.io/library/alpine:3.17.1',
-        'linux/arm/v6',
-        '68 (0 suppressed)'
-      ],
-      'labels': {
-        'app.kubernetes.io/managed-by':          'sbomscanner',
-        'app.kubernetes.io/part-of':             'sbomscanner',
-        'sbomscanner.kubewarden.io/scanjob-uid': '445c600a-c4b6-40b3-bd71-f2d2140a37d5'
-      },
-      'name':            '58d159a2db7c0aca3d6f6568626af4918675b0531aedf1b2f34c5158ec74d9a6',
-      'namespace':       'default',
-      'ownerReferences': [
-        {
-          'apiVersion':         'storage.sbomscanner.kubewarden.io/v1alpha1',
-          'blockOwnerDeletion': true,
-          'controller':         true,
-          'kind':               'SBOM',
-          'name':               '58d159a2db7c0aca3d6f6568626af4918675b0531aedf1b2f34c5158ec74d9a6',
-          'uid':                'c54c49d7-4543-4a12-81af-02103354c2dd'
-        }
-      ],
-      'relationships': [
-        {
-          'fromId':   'default/58d159a2db7c0aca3d6f6568626af4918675b0531aedf1b2f34c5158ec74d9a6',
-          'fromType': 'storage.sbomscanner.kubewarden.io.sbom',
-          'rel':      'owner',
-          'state':    'active',
-          'message':  'Resource is current'
-        }
-      ],
-      'resourceVersion': '1',
-      'state':           {
-        'error':         false,
-        'message':       'Resource is current',
-        'name':          'active',
-        'transitioning': false
-      },
-      'uid': '8d1e3f24-5b91-489f-a2ce-6b9d45cd19cc'
-    },
-    'report': {
-      'results': [
-        {
-          'class':           'os-pkgs',
-          'target':          '/var/run/worker/trivy.sbom.1692835868.json (alpine 3.17.1)',
-          'type':            'alpine',
-          'vulnerabilities': [
-            {
-              'cve':  'CVE-2023-42363',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.5',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.8',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   'A use-after-free vulnerability was discovered in xasprintf function in xfuncs_printf.c:344 in BusyBox v.1.36.1.',
-              'diffID':        'sha256:86ddd1858dda5de0cc1e3cc31a93fddc627a28136b08db8cda7460de39f657a3',
-              'fixedVersions': [
-                '1.35.0-r31'
-              ],
-              'installedVersion': '1.35.0-r29',
-              'packageName':      'busybox',
-              'purl':             'pkg:apk/alpine/busybox@1.35.0-r29?arch=armhf&distro=3.17.1',
-              'references':       [
-                'http://lists.busybox.net/pipermail/busybox/2024-May/090760.html',
-                'https://access.redhat.com/security/cve/CVE-2023-42363',
-                'https://bugs.busybox.net/show_bug.cgi?id=15865',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-42363',
-                'https://ubuntu.com/security/notices/USN-6961-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-42363'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk'
-            },
-            {
-              'cve':  'CVE-2023-42364',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.5',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.8',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   'A use-after-free vulnerability in BusyBox v.1.36.1 allows attackers to cause a denial of service via a crafted awk pattern in the awk.c evaluate function.',
-              'diffID':        'sha256:86ddd1858dda5de0cc1e3cc31a93fddc627a28136b08db8cda7460de39f657a3',
-              'fixedVersions': [
-                '1.35.0-r31'
-              ],
-              'installedVersion': '1.35.0-r29',
-              'packageName':      'busybox',
-              'purl':             'pkg:apk/alpine/busybox@1.35.0-r29?arch=armhf&distro=3.17.1',
-              'references':       [
-                'http://lists.busybox.net/pipermail/busybox/2024-May/090762.html',
-                'https://access.redhat.com/security/cve/CVE-2023-42364',
-                'https://bugs.busybox.net/show_bug.cgi?id=15868',
-                'https://gitlab.alpinelinux.org/alpine/aports/-/blob/master/main/busybox/CVE-2023-42364-CVE-2023-42365.patch',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-42364',
-                'https://ubuntu.com/security/notices/USN-6961-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-42364'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'busybox: use-after-free'
-            },
-            {
-              'cve':  'CVE-2023-42365',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.5',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.8',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   'A use-after-free vulnerability was discovered in BusyBox v.1.36.1 via a crafted awk pattern in the awk.c copyvar function.',
-              'diffID':        'sha256:86ddd1858dda5de0cc1e3cc31a93fddc627a28136b08db8cda7460de39f657a3',
-              'fixedVersions': [
-                '1.35.0-r31'
-              ],
-              'installedVersion': '1.35.0-r29',
-              'packageName':      'busybox',
-              'purl':             'pkg:apk/alpine/busybox@1.35.0-r29?arch=armhf&distro=3.17.1',
-              'references':       [
-                'http://lists.busybox.net/pipermail/busybox/2024-May/090762.html',
-                'https://access.redhat.com/security/cve/CVE-2023-42365',
-                'https://bugs.busybox.net/show_bug.cgi?id=15871',
-                'https://gitlab.alpinelinux.org/alpine/aports/-/blob/master/main/busybox/CVE-2023-42364-CVE-2023-42365.patch',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-42365',
-                'https://ubuntu.com/security/notices/USN-6961-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-42365'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'busybox: use-after-free'
-            },
-            {
-              'cve':  'CVE-2023-42366',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.5',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.1',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-787'
-              ],
-              'description':   'A heap-buffer-overflow was discovered in BusyBox v.1.36.1 in the next_token function at awk.c:1159.',
-              'diffID':        'sha256:86ddd1858dda5de0cc1e3cc31a93fddc627a28136b08db8cda7460de39f657a3',
-              'fixedVersions': [
-                '1.35.0-r30'
-              ],
-              'installedVersion': '1.35.0-r29',
-              'packageName':      'busybox',
-              'purl':             'pkg:apk/alpine/busybox@1.35.0-r29?arch=armhf&distro=3.17.1',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2023-42366',
-                'https://bugs.busybox.net/show_bug.cgi?id=15874',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-42366',
-                'https://security.netapp.com/advisory/ntap-20241206-0007/',
-                'https://www.cve.org/CVERecord?id=CVE-2023-42366'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'busybox: A heap-buffer-overflow'
-            },
-            {
-              'cve':  'CVE-2023-42363',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.5',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.8',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   'A use-after-free vulnerability was discovered in xasprintf function in xfuncs_printf.c:344 in BusyBox v.1.36.1.',
-              'diffID':        'sha256:86ddd1858dda5de0cc1e3cc31a93fddc627a28136b08db8cda7460de39f657a3',
-              'fixedVersions': [
-                '1.35.0-r31'
-              ],
-              'installedVersion': '1.35.0-r29',
-              'packageName':      'busybox-binsh',
-              'purl':             'pkg:apk/alpine/busybox-binsh@1.35.0-r29?arch=armhf&distro=3.17.1',
-              'references':       [
-                'http://lists.busybox.net/pipermail/busybox/2024-May/090760.html',
-                'https://access.redhat.com/security/cve/CVE-2023-42363',
-                'https://bugs.busybox.net/show_bug.cgi?id=15865',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-42363',
-                'https://ubuntu.com/security/notices/USN-6961-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-42363'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk'
-            },
-            {
-              'cve':  'CVE-2023-42364',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.5',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.8',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   'A use-after-free vulnerability in BusyBox v.1.36.1 allows attackers to cause a denial of service via a crafted awk pattern in the awk.c evaluate function.',
-              'diffID':        'sha256:86ddd1858dda5de0cc1e3cc31a93fddc627a28136b08db8cda7460de39f657a3',
-              'fixedVersions': [
-                '1.35.0-r31'
-              ],
-              'installedVersion': '1.35.0-r29',
-              'packageName':      'busybox-binsh',
-              'purl':             'pkg:apk/alpine/busybox-binsh@1.35.0-r29?arch=armhf&distro=3.17.1',
-              'references':       [
-                'http://lists.busybox.net/pipermail/busybox/2024-May/090762.html',
-                'https://access.redhat.com/security/cve/CVE-2023-42364',
-                'https://bugs.busybox.net/show_bug.cgi?id=15868',
-                'https://gitlab.alpinelinux.org/alpine/aports/-/blob/master/main/busybox/CVE-2023-42364-CVE-2023-42365.patch',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-42364',
-                'https://ubuntu.com/security/notices/USN-6961-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-42364'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'busybox: use-after-free'
-            },
-            {
-              'cve':  'CVE-2023-42365',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.5',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.8',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   'A use-after-free vulnerability was discovered in BusyBox v.1.36.1 via a crafted awk pattern in the awk.c copyvar function.',
-              'diffID':        'sha256:86ddd1858dda5de0cc1e3cc31a93fddc627a28136b08db8cda7460de39f657a3',
-              'fixedVersions': [
-                '1.35.0-r31'
-              ],
-              'installedVersion': '1.35.0-r29',
-              'packageName':      'busybox-binsh',
-              'purl':             'pkg:apk/alpine/busybox-binsh@1.35.0-r29?arch=armhf&distro=3.17.1',
-              'references':       [
-                'http://lists.busybox.net/pipermail/busybox/2024-May/090762.html',
-                'https://access.redhat.com/security/cve/CVE-2023-42365',
-                'https://bugs.busybox.net/show_bug.cgi?id=15871',
-                'https://gitlab.alpinelinux.org/alpine/aports/-/blob/master/main/busybox/CVE-2023-42364-CVE-2023-42365.patch',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-42365',
-                'https://ubuntu.com/security/notices/USN-6961-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-42365'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'busybox: use-after-free'
-            },
-            {
-              'cve':  'CVE-2023-42366',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.5',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.1',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-787'
-              ],
-              'description':   'A heap-buffer-overflow was discovered in BusyBox v.1.36.1 in the next_token function at awk.c:1159.',
-              'diffID':        'sha256:86ddd1858dda5de0cc1e3cc31a93fddc627a28136b08db8cda7460de39f657a3',
-              'fixedVersions': [
-                '1.35.0-r30'
-              ],
-              'installedVersion': '1.35.0-r29',
-              'packageName':      'busybox-binsh',
-              'purl':             'pkg:apk/alpine/busybox-binsh@1.35.0-r29?arch=armhf&distro=3.17.1',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2023-42366',
-                'https://bugs.busybox.net/show_bug.cgi?id=15874',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-42366',
-                'https://security.netapp.com/advisory/ntap-20241206-0007/',
-                'https://www.cve.org/CVERecord?id=CVE-2023-42366'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'busybox: A heap-buffer-overflow'
-            },
-            {
-              'cve':  'CVE-2022-4450',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'nvd': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-415'
-              ],
-              'description':   'The function PEM_read_bio_ex() reads a PEM file from a BIO and parses and\ndecodes the "name" (e.g. "CERTIFICATE"), any header data and the payload data.\nIf the function succeeds then the "name_out", "header" and "data" arguments are\npopulated with pointers to buffers containing the relevant decoded data. The\ncaller is responsible for freeing those buffers. It is possible to construct a\nPEM file that results in 0 bytes of payload data. In this case PEM_read_bio_ex()\nwill return a failure code but will populate the header argument with a pointer\nto a buffer that has already been freed. If the caller also frees this buffer\nthen a double free will occur. This will most likely lead to a crash. This\ncould be exploited by an attacker who has the ability to supply malicious PEM\nfiles for parsing to achieve a denial of service attack.\n\nThe functions PEM_read_bio() and PEM_read() are simple wrappers around\nPEM_read_bio_ex() and therefore these functions are also directly affected.\n\nThese functions are also called indirectly by a number of other OpenSSL\nfunctions including PEM_X509_INFO_read_bio_ex() and\nSSL_CTX_use_serverinfo_file() which are also vulnerable. Some OpenSSL internal\nuses of these functions are not vulnerable because the caller does not free the\nheader argument if PEM_read_bio_ex() returns a failure code. These locations\ninclude the PEM_read_bio_TYPE() functions as well as the decoders introduced in\nOpenSSL 3.0.\n\nThe OpenSSL asn1parse command line application is also impacted by this issue.',
-              'diffID':        'sha256:86ddd1858dda5de0cc1e3cc31a93fddc627a28136b08db8cda7460de39f657a3',
-              'fixedVersions': [
-                '3.0.8-r0'
-              ],
-              'installedVersion': '3.0.7-r2',
-              'packageName':      'libcrypto3',
-              'purl':             'pkg:apk/alpine/libcrypto3@3.0.7-r2?arch=armhf&distro=3.17.1',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2023:2165',
-                'https://access.redhat.com/security/cve/CVE-2022-4450',
-                'https://bugzilla.redhat.com/1960321',
-                'https://bugzilla.redhat.com/2164440',
-                'https://bugzilla.redhat.com/2164487',
-                'https://bugzilla.redhat.com/2164492',
-                'https://bugzilla.redhat.com/2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144000',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144003',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144006',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144008',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144010',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144012',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144015',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144017',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144019',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2145170',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2158412',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164440',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164487',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164488',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164492',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164497',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164499',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164500',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4203',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4304',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4450',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0215',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0216',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0217',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0286',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0401',
-                'https://errata.almalinux.org/9/ALSA-2023-2165.html',
-                'https://errata.rockylinux.org/RLSA-2023:0946',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=63bcf189be73a9cc1264059bed6f57974be74a83',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=bbcf509bd046b34cca19c766bbddc31683d0858b',
-                'https://linux.oracle.com/cve/CVE-2022-4450.html',
-                'https://linux.oracle.com/errata/ELSA-2023-32791.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2022-4450',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0003',
-                'https://rustsec.org/advisories/RUSTSEC-2023-0010.html',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://ubuntu.com/security/notices/USN-5844-1',
-                'https://ubuntu.com/security/notices/USN-6564-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2022-4450',
-                'https://www.openssl.org/news/secadv/20230207.txt'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: double free after calling PEM_read_bio_ex'
-            },
-            {
-              'cve':  'CVE-2023-0215',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'nvd': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   'The public API function BIO_new_NDEF is a helper function used for streaming\nASN.1 data via a BIO. It is primarily used internally to OpenSSL to support the\nSMIME, CMS and PKCS7 streaming capabilities, but may also be called directly by\nend user applications.\n\nThe function receives a BIO from the caller, prepends a new BIO_f_asn1 filter\nBIO onto the front of it to form a BIO chain, and then returns the new head of\nthe BIO chain to the caller. Under certain conditions, for example if a CMS\nrecipient public key is invalid, the new filter BIO is freed and the function\nreturns a NULL result indicating a failure. However, in this case, the BIO chain\nis not properly cleaned up and the BIO passed by the caller still retains\ninternal pointers to the previously freed filter BIO. If the caller then goes on\nto call BIO_pop() on the BIO then a use-after-free will occur. This will most\nlikely result in a crash.\n\n\n\nThis scenario occurs directly in the internal function B64_write_ASN1() which\nmay cause BIO_new_NDEF() to be called and will subsequently call BIO_pop() on\nthe BIO. This internal function is in turn called by the public API functions\nPEM_write_bio_ASN1_stream, PEM_write_bio_CMS_stream, PEM_write_bio_PKCS7_stream,\nSMIME_write_ASN1, SMIME_write_CMS and SMIME_write_PKCS7.\n\nOther public API functions that may be impacted by this include\ni2d_ASN1_bio_stream, BIO_new_CMS, BIO_new_PKCS7, i2d_CMS_bio_stream and\ni2d_PKCS7_bio_stream.\n\nThe OpenSSL cms and smime command line applications are similarly affected.',
-              'diffID':        'sha256:86ddd1858dda5de0cc1e3cc31a93fddc627a28136b08db8cda7460de39f657a3',
-              'fixedVersions': [
-                '3.0.8-r0'
-              ],
-              'installedVersion': '3.0.7-r2',
-              'packageName':      'libcrypto3',
-              'purl':             'pkg:apk/alpine/libcrypto3@3.0.7-r2?arch=armhf&distro=3.17.1',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2023:2165',
-                'https://access.redhat.com/security/cve/CVE-2023-0215',
-                'https://bugzilla.redhat.com/1960321',
-                'https://bugzilla.redhat.com/2164440',
-                'https://bugzilla.redhat.com/2164487',
-                'https://bugzilla.redhat.com/2164492',
-                'https://bugzilla.redhat.com/2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144000',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144003',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144006',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144008',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144010',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144012',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144015',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144017',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144019',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2145170',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2158412',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164440',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164487',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164488',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164492',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164497',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164499',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164500',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4203',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4304',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4450',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0215',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0216',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0217',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0286',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0401',
-                'https://errata.almalinux.org/9/ALSA-2023-2165.html',
-                'https://errata.rockylinux.org/RLSA-2023:0946',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=8818064ce3c3c0f1b740a5aaba2a987e75bfbafd',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=9816136fe31d92ace4037d5da5257f763aeeb4eb',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=c3829dd8825c654652201e16f8a0a0c46ee3f344',
-                'https://linux.oracle.com/cve/CVE-2023-0215.html',
-                'https://linux.oracle.com/errata/ELSA-2023-32791.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-0215',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0003',
-                'https://rustsec.org/advisories/RUSTSEC-2023-0009.html',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://security.netapp.com/advisory/ntap-20230427-0007',
-                'https://security.netapp.com/advisory/ntap-20230427-0007/',
-                'https://security.netapp.com/advisory/ntap-20230427-0009',
-                'https://security.netapp.com/advisory/ntap-20230427-0009/',
-                'https://security.netapp.com/advisory/ntap-20240621-0006',
-                'https://security.netapp.com/advisory/ntap-20240621-0006/',
-                'https://ubuntu.com/security/notices/USN-5844-1',
-                'https://ubuntu.com/security/notices/USN-5845-1',
-                'https://ubuntu.com/security/notices/USN-5845-2',
-                'https://ubuntu.com/security/notices/USN-6564-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-0215',
-                'https://www.openssl.org/news/secadv/20230207.txt'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: use-after-free following BIO_new_NDEF'
-            },
-            {
-              'cve':  'CVE-2023-0216',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'nvd': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-476'
-              ],
-              'description':   'An invalid pointer dereference on read can be triggered when an\napplication tries to load malformed PKCS7 data with the\nd2i_PKCS7(), d2i_PKCS7_bio() or d2i_PKCS7_fp() functions.\n\nThe result of the dereference is an application crash which could\nlead to a denial of service attack. The TLS implementation in OpenSSL\ndoes not call this function however third party applications might\ncall these functions on untrusted data.',
-              'diffID':        'sha256:86ddd1858dda5de0cc1e3cc31a93fddc627a28136b08db8cda7460de39f657a3',
-              'fixedVersions': [
-                '3.0.8-r0'
-              ],
-              'installedVersion': '3.0.7-r2',
-              'packageName':      'libcrypto3',
-              'purl':             'pkg:apk/alpine/libcrypto3@3.0.7-r2?arch=armhf&distro=3.17.1',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2023:0946',
-                'https://access.redhat.com/security/cve/CVE-2023-0216',
-                'https://bugzilla.redhat.com/2164440',
-                'https://bugzilla.redhat.com/2164487',
-                'https://bugzilla.redhat.com/2164488',
-                'https://bugzilla.redhat.com/2164492',
-                'https://bugzilla.redhat.com/2164494',
-                'https://bugzilla.redhat.com/2164497',
-                'https://bugzilla.redhat.com/2164499',
-                'https://bugzilla.redhat.com/2164500',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144000',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144003',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144006',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144008',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144010',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144012',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144015',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144017',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144019',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2145170',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2158412',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164440',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164487',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164488',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164492',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164497',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164499',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164500',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4203',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4304',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4450',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0215',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0216',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0217',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0286',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0401',
-                'https://errata.almalinux.org/9/ALSA-2023-0946.html',
-                'https://errata.rockylinux.org/RLSA-2023:0946',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=934a04f0e775309cadbef0aa6b9692e1b12a76c6',
-                'https://linux.oracle.com/cve/CVE-2023-0216.html',
-                'https://linux.oracle.com/errata/ELSA-2023-12152.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-0216',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0003',
-                'https://rustsec.org/advisories/RUSTSEC-2023-0011.html',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://ubuntu.com/security/notices/USN-5844-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-0216',
-                'https://www.openssl.org/news/secadv/20230207.txt'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: invalid pointer dereference in d2i_PKCS7 functions'
-            },
-            {
-              'cve':  'CVE-2023-0217',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'nvd': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-476'
-              ],
-              'description':   'An invalid pointer dereference on read can be triggered when an\napplication tries to check a malformed DSA public key by the\nEVP_PKEY_public_check() function. This will most likely lead\nto an application crash. This function can be called on public\nkeys supplied from untrusted sources which could allow an attacker\nto cause a denial of service attack.\n\nThe TLS implementation in OpenSSL does not call this function\nbut applications might call the function if there are additional\nsecurity requirements imposed by standards such as FIPS 140-3.',
-              'diffID':        'sha256:86ddd1858dda5de0cc1e3cc31a93fddc627a28136b08db8cda7460de39f657a3',
-              'fixedVersions': [
-                '3.0.8-r0'
-              ],
-              'installedVersion': '3.0.7-r2',
-              'packageName':      'libcrypto3',
-              'purl':             'pkg:apk/alpine/libcrypto3@3.0.7-r2?arch=armhf&distro=3.17.1',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2023:0946',
-                'https://access.redhat.com/security/cve/CVE-2023-0217',
-                'https://bugzilla.redhat.com/2164440',
-                'https://bugzilla.redhat.com/2164487',
-                'https://bugzilla.redhat.com/2164488',
-                'https://bugzilla.redhat.com/2164492',
-                'https://bugzilla.redhat.com/2164494',
-                'https://bugzilla.redhat.com/2164497',
-                'https://bugzilla.redhat.com/2164499',
-                'https://bugzilla.redhat.com/2164500',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144000',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144003',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144006',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144008',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144010',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144012',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144015',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144017',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144019',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2145170',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2158412',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164440',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164487',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164488',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164492',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164497',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164499',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164500',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4203',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4304',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4450',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0215',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0216',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0217',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0286',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0401',
-                'https://errata.almalinux.org/9/ALSA-2023-0946.html',
-                'https://errata.rockylinux.org/RLSA-2023:0946',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=23985bac83fd50c8e29431009302b5442f985096',
-                'https://linux.oracle.com/cve/CVE-2023-0217.html',
-                'https://linux.oracle.com/errata/ELSA-2023-12152.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-0217',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0003',
-                'https://rustsec.org/advisories/RUSTSEC-2023-0012.html',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://ubuntu.com/security/notices/USN-5844-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-0217',
-                'https://www.openssl.org/news/secadv/20230207.txt'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: NULL dereference validating DSA public key'
-            },
-            {
-              'cve':  'CVE-2023-0286',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '7.4',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H'
-                },
-                'nvd': {
-                  'v3score':  '7.4',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.4',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-843'
-              ],
-              'description':   'There is a type confusion vulnerability relating to X.400 address processing\ninside an X.509 GeneralName. X.400 addresses were parsed as an ASN1_STRING but\nthe public structure definition for GENERAL_NAME incorrectly specified the type\nof the x400Address field as ASN1_TYPE. This field is subsequently interpreted by\nthe OpenSSL function GENERAL_NAME_cmp as an ASN1_TYPE rather than an\nASN1_STRING.\n\nWhen CRL checking is enabled (i.e. the application sets the\nX509_V_FLAG_CRL_CHECK flag), this vulnerability may allow an attacker to pass\narbitrary pointers to a memcmp call, enabling them to read memory contents or\nenact a denial of service. In most cases, the attack requires the attacker to\nprovide both the certificate chain and CRL, neither of which need to have a\nvalid signature. If the attacker only controls one of these inputs, the other\ninput must already contain an X.400 address as a CRL distribution point, which\nis uncommon. As such, this vulnerability is most likely to only affect\napplications which have implemented their own functionality for retrieving CRLs\nover a network.',
-              'diffID':        'sha256:86ddd1858dda5de0cc1e3cc31a93fddc627a28136b08db8cda7460de39f657a3',
-              'fixedVersions': [
-                '3.0.8-r0'
-              ],
-              'installedVersion': '3.0.7-r2',
-              'packageName':      'libcrypto3',
-              'purl':             'pkg:apk/alpine/libcrypto3@3.0.7-r2?arch=armhf&distro=3.17.1',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2025:7937',
-                'https://access.redhat.com/security/cve/CVE-2023-0286',
-                'https://access.redhat.com/security/cve/cve-2023-0286',
-                'https://bugzilla.redhat.com/2164440',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144000',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144003',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144006',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144008',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144010',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144012',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144015',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144017',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144019',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2145170',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2158412',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164440',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164487',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164488',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164492',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164497',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164499',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164500',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4203',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4304',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4450',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0215',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0216',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0217',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0286',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0401',
-                'https://errata.almalinux.org/9/ALSA-2025-7937.html',
-                'https://errata.rockylinux.org/RLSA-2023:0946',
-                'https://ftp.openbsd.org/pub/OpenBSD/LibreSSL/libressl-3.6.2-relnotes.txt',
-                'https://ftp.openbsd.org/pub/OpenBSD/patches/7.2/common/018_x509.patch.sig',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=2c6c9d439b484e1ba9830d8454a34fa4f80fdfe9',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=2f7530077e0ef79d98718138716bc51ca0cad658',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=fd2af07dc083a350c959147097003a14a5e8ac4d',
-                'https://github.com/pyca/cryptography',
-                'https://github.com/pyca/cryptography/security/advisories/GHSA-x4qr-2fvf-3mr5',
-                'https://linux.oracle.com/cve/CVE-2023-0286.html',
-                'https://linux.oracle.com/errata/ELSA-2025-7937.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-0286',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0003',
-                'https://rustsec.org/advisories/RUSTSEC-2023-0006.html',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://ubuntu.com/security/notices/USN-5844-1',
-                'https://ubuntu.com/security/notices/USN-5845-1',
-                'https://ubuntu.com/security/notices/USN-5845-2',
-                'https://ubuntu.com/security/notices/USN-6564-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-0286',
-                'https://www.openssl.org/news/secadv/20230207.txt'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: X.400 address type confusion in X.509 GeneralName'
-            },
-            {
-              'cve':  'CVE-2023-0401',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'nvd': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-476'
-              ],
-              'description':   'A NULL pointer can be dereferenced when signatures are being\nverified on PKCS7 signed or signedAndEnveloped data. In case the hash\nalgorithm used for the signature is known to the OpenSSL library but\nthe implementation of the hash algorithm is not available the digest\ninitialization will fail. There is a missing check for the return\nvalue from the initialization function which later leads to invalid\nusage of the digest API most likely leading to a crash.\n\nThe unavailability of an algorithm can be caused by using FIPS\nenabled configuration of providers or more commonly by not loading\nthe legacy provider.\n\nPKCS7 data is processed by the SMIME library calls and also by the\ntime stamp (TS) library calls. The TLS implementation in OpenSSL does\nnot call these functions however third party applications would be\naffected if they call these functions to verify signatures on untrusted\ndata.',
-              'diffID':        'sha256:86ddd1858dda5de0cc1e3cc31a93fddc627a28136b08db8cda7460de39f657a3',
-              'fixedVersions': [
-                '3.0.8-r0'
-              ],
-              'installedVersion': '3.0.7-r2',
-              'packageName':      'libcrypto3',
-              'purl':             'pkg:apk/alpine/libcrypto3@3.0.7-r2?arch=armhf&distro=3.17.1',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2023:0946',
-                'https://access.redhat.com/security/cve/CVE-2023-0401',
-                'https://bugzilla.redhat.com/2164440',
-                'https://bugzilla.redhat.com/2164487',
-                'https://bugzilla.redhat.com/2164488',
-                'https://bugzilla.redhat.com/2164492',
-                'https://bugzilla.redhat.com/2164494',
-                'https://bugzilla.redhat.com/2164497',
-                'https://bugzilla.redhat.com/2164499',
-                'https://bugzilla.redhat.com/2164500',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144000',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144003',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144006',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144008',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144010',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144012',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144015',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144017',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144019',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2145170',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2158412',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164440',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164487',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164488',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164492',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164497',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164499',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164500',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4203',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4304',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4450',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0215',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0216',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0217',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0286',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0401',
-                'https://errata.almalinux.org/9/ALSA-2023-0946.html',
-                'https://errata.rockylinux.org/RLSA-2023:0946',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=d3b6dfd70db844c4499bec6ad6601623a565e674',
-                'https://github.com/alexcrichton/openssl-src-rs',
-                'https://linux.oracle.com/cve/CVE-2023-0401.html',
-                'https://linux.oracle.com/errata/ELSA-2023-12152.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-0401',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0003',
-                'https://rustsec.org/advisories/RUSTSEC-2023-0013.html',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://ubuntu.com/security/notices/USN-5844-1',
-                'https://ubuntu.com/security/notices/USN-6564-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-0401',
-                'https://www.openssl.org/news/secadv/20230207.txt'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: NULL dereference during PKCS7 data verification'
-            },
-            {
-              'cve':  'CVE-2023-0464',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-295'
-              ],
-              'description':   "A security vulnerability has been identified in all supported versions\n\nof OpenSSL related to the verification of X.509 certificate chains\nthat include policy constraints.  Attackers may be able to exploit this\nvulnerability by creating a malicious certificate chain that triggers\nexponential use of computational resources, leading to a denial-of-service\n(DoS) attack on affected systems.\n\nPolicy processing is disabled by default but can be enabled by passing\nthe `-policy' argument to the command line utilities or by calling the\n`X509_VERIFY_PARAM_set1_policies()' function.",
-              'diffID':        'sha256:86ddd1858dda5de0cc1e3cc31a93fddc627a28136b08db8cda7460de39f657a3',
-              'fixedVersions': [
-                '3.0.8-r1'
-              ],
-              'installedVersion': '3.0.7-r2',
-              'packageName':      'libcrypto3',
-              'purl':             'pkg:apk/alpine/libcrypto3@3.0.7-r2?arch=armhf&distro=3.17.1',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2023:3722',
-                'https://access.redhat.com/security/cve/CVE-2023-0464',
-                'https://bugzilla.redhat.com/2181082',
-                'https://bugzilla.redhat.com/2182561',
-                'https://bugzilla.redhat.com/2182565',
-                'https://bugzilla.redhat.com/2188461',
-                'https://bugzilla.redhat.com/2207947',
-                'https://errata.almalinux.org/9/ALSA-2023-3722.html',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=2017771e2db3e2b96f89bbe8766c3209f6a99545',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=2dcd4f1e3115f38cefa43e3efbe9b801c27e642e',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=879f7080d7e141f415c79eaa3a8ac4a3dad0348b',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=959c59c7a0164117e7f8366466a32bb1f8d77ff1',
-                'https://linux.oracle.com/cve/CVE-2023-0464.html',
-                'https://linux.oracle.com/errata/ELSA-2023-3722.html',
-                'https://lists.debian.org/debian-lts-announce/2023/06/msg00011.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-0464',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://security.netapp.com/advisory/ntap-20230406-0006/',
-                'https://security.netapp.com/advisory/ntap-20240621-0006/',
-                'https://ubuntu.com/security/notices/USN-6039-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.couchbase.com/alerts/',
-                'https://www.cve.org/CVERecord?id=CVE-2023-0464',
-                'https://www.debian.org/security/2023/dsa-5417',
-                'https://www.openssl.org/news/secadv/20230322.txt'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: Denial of service by excessive resource usage in verifying X509 policy constraints'
-            },
-            {
-              'cve':  'CVE-2023-5363',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N'
-                },
-                'redhat': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-684'
-              ],
-              'description':   "Issue summary: A bug has been identified in the processing of key and\ninitialisation vector (IV) lengths.  This can lead to potential truncation\nor overruns during the initialisation of some symmetric ciphers.\n\nImpact summary: A truncation in the IV can result in non-uniqueness,\nwhich could result in loss of confidentiality for some cipher modes.\n\nWhen calling EVP_EncryptInit_ex2(), EVP_DecryptInit_ex2() or\nEVP_CipherInit_ex2() the provided OSSL_PARAM array is processed after\nthe key and IV have been established.  Any alterations to the key length,\nvia the \"keylen\" parameter or the IV length, via the \"ivlen\" parameter,\nwithin the OSSL_PARAM array will not take effect as intended, potentially\ncausing truncation or overreading of these values.  The following ciphers\nand cipher modes are impacted: RC2, RC4, RC5, CCM, GCM and OCB.\n\nFor the CCM, GCM and OCB cipher modes, truncation of the IV can result in\nloss of confidentiality.  For example, when following NIST's SP 800-38D\nsection 8.2.1 guidance for constructing a deterministic IV for AES in\nGCM mode, truncation of the counter portion could lead to IV reuse.\n\nBoth truncations and overruns of the key and overruns of the IV will\nproduce incorrect results and could, in some cases, trigger a memory\nexception.  However, these issues are not currently assessed as security\ncritical.\n\nChanging the key and/or IV lengths is not considered to be a common operation\nand the vulnerable API was recently introduced. Furthermore it is likely that\napplication developers will have spotted this problem during testing since\ndecryption would fail unless both peers in the communication were similarly\nvulnerable. For these reasons we expect the probability of an application being\nvulnerable to this to be quite low. However if an application is vulnerable then\nthis issue is considered very serious. For these reasons we have assessed this\nissue as Moderate severity overall.\n\nThe OpenSSL SSL/TLS implementation is not affected by this issue.\n\nThe OpenSSL 3.0 and 3.1 FIPS providers are not affected by this because\nthe issue lies outside of the FIPS provider boundary.\n\nOpenSSL 3.1 and 3.0 are vulnerable to this issue.",
-              'diffID':        'sha256:86ddd1858dda5de0cc1e3cc31a93fddc627a28136b08db8cda7460de39f657a3',
-              'fixedVersions': [
-                '3.0.12-r0'
-              ],
-              'installedVersion': '3.0.7-r2',
-              'packageName':      'libcrypto3',
-              'purl':             'pkg:apk/alpine/libcrypto3@3.0.7-r2?arch=armhf&distro=3.17.1',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2023/10/24/1',
-                'https://access.redhat.com/errata/RHSA-2024:0310',
-                'https://access.redhat.com/security/cve/CVE-2023-5363',
-                'https://bugzilla.redhat.com/2243839',
-                'https://errata.almalinux.org/9/ALSA-2024-0310.html',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=0df40630850fb2740e6be6890bb905d3fc623b2d',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=5f69f5c65e483928c4b28ed16af6e5742929f1ee',
-                'https://linux.oracle.com/cve/CVE-2023-5363.html',
-                'https://linux.oracle.com/errata/ELSA-2024-12093.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-5363',
-                'https://security.netapp.com/advisory/ntap-20231027-0010/',
-                'https://security.netapp.com/advisory/ntap-20240201-0003/',
-                'https://security.netapp.com/advisory/ntap-20240201-0004/',
-                'https://security.netapp.com/advisory/ntap-20241108-0002/',
-                'https://ubuntu.com/security/notices/USN-6450-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-5363',
-                'https://www.debian.org/security/2023/dsa-5532',
-                'https://www.openssl.org/news/secadv/20231024.txt'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: Incorrect cipher key and IV length processing'
-            },
-            {
-              'cve':  'CVE-2024-6119',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-843'
-              ],
-              'description':   "Issue summary: Applications performing certificate name checks (e.g., TLS\nclients checking server certificates) may attempt to read an invalid memory\naddress resulting in abnormal termination of the application process.\n\nImpact summary: Abnormal termination of an application can a cause a denial of\nservice.\n\nApplications performing certificate name checks (e.g., TLS clients checking\nserver certificates) may attempt to read an invalid memory address when\ncomparing the expected name with an `otherName` subject alternative name of an\nX.509 certificate. This may result in an exception that terminates the\napplication program.\n\nNote that basic certificate chain validation (signatures, dates, ...) is not\naffected, the denial of service can occur only when the application also\nspecifies an expected DNS name, Email address or IP address.\n\nTLS servers rarely solicit client certificates, and even when they do, they\ngenerally don't perform a name check against a reference identifier (expected\nidentity), but rather extract the presented identity after checking the\ncertificate chain.  So TLS servers are generally not affected and the severity\nof the issue is Moderate.\n\nThe FIPS modules in 3.3, 3.2, 3.1 and 3.0 are not affected by this issue.",
-              'diffID':        'sha256:86ddd1858dda5de0cc1e3cc31a93fddc627a28136b08db8cda7460de39f657a3',
-              'fixedVersions': [
-                '3.0.15-r0'
-              ],
-              'installedVersion': '3.0.7-r2',
-              'packageName':      'libcrypto3',
-              'purl':             'pkg:apk/alpine/libcrypto3@3.0.7-r2?arch=armhf&distro=3.17.1',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2024/09/03/4',
-                'https://access.redhat.com/errata/RHSA-2024:8935',
-                'https://access.redhat.com/security/cve/CVE-2024-6119',
-                'https://bugzilla.redhat.com/2306158',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2306158',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-6119',
-                'https://errata.almalinux.org/9/ALSA-2024-8935.html',
-                'https://errata.rockylinux.org/RLSA-2024:6783',
-                'https://github.com/openssl/openssl/commit/05f360d9e849a1b277db628f1f13083a7f8dd04f',
-                'https://github.com/openssl/openssl/commit/06d1dc3fa96a2ba5a3e22735a033012aadc9f0d6',
-                'https://github.com/openssl/openssl/commit/621f3729831b05ee828a3203eddb621d014ff2b2',
-                'https://github.com/openssl/openssl/commit/7dfcee2cd2a63b2c64b9b4b0850be64cb695b0a0',
-                'https://github.com/openssl/openssl/security/advisories/GHSA-5qrj-vq78-58fj',
-                'https://linux.oracle.com/cve/CVE-2024-6119.html',
-                'https://linux.oracle.com/errata/ELSA-2024-8935.html',
-                'https://lists.freebsd.org/archives/freebsd-security/2024-September/000303.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2024-6119',
-                'https://openssl-library.org/news/secadv/20240903.txt',
-                'https://security.netapp.com/advisory/ntap-20240912-0001/',
-                'https://ubuntu.com/security/notices/USN-6986-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2024-6119'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: Possible denial of service in X.509 name checks'
-            },
-            {
-              'cve':  'CVE-2022-4203',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '9.1',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H'
-                },
-                'nvd': {
-                  'v3score':  '4.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '4.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-125'
-              ],
-              'description':   'A read buffer overrun can be triggered in X.509 certificate verification,\nspecifically in name constraint checking. Note that this occurs\nafter certificate chain signature verification and requires either a\nCA to have signed the malicious certificate or for the application to\ncontinue certificate verification despite failure to construct a path\nto a trusted issuer.\n\nThe read buffer overrun might result in a crash which could lead to\na denial of service attack. In theory it could also result in the disclosure\nof private memory contents (such as private keys, or sensitive plaintext)\nalthough we are not aware of any working exploit leading to memory\ncontents disclosure as of the time of release of this advisory.\n\nIn a TLS client, this can be triggered by connecting to a malicious\nserver. In a TLS server, this can be triggered if the server requests\nclient authentication and a malicious client connects.',
-              'diffID':        'sha256:86ddd1858dda5de0cc1e3cc31a93fddc627a28136b08db8cda7460de39f657a3',
-              'fixedVersions': [
-                '3.0.8-r0'
-              ],
-              'installedVersion': '3.0.7-r2',
-              'packageName':      'libcrypto3',
-              'purl':             'pkg:apk/alpine/libcrypto3@3.0.7-r2?arch=armhf&distro=3.17.1',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2023:0946',
-                'https://access.redhat.com/security/cve/CVE-2022-4203',
-                'https://bugzilla.redhat.com/2164440',
-                'https://bugzilla.redhat.com/2164487',
-                'https://bugzilla.redhat.com/2164488',
-                'https://bugzilla.redhat.com/2164492',
-                'https://bugzilla.redhat.com/2164494',
-                'https://bugzilla.redhat.com/2164497',
-                'https://bugzilla.redhat.com/2164499',
-                'https://bugzilla.redhat.com/2164500',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144000',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144003',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144006',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144008',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144010',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144012',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144015',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144017',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144019',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2145170',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2158412',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164440',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164487',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164488',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164492',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164497',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164499',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164500',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4203',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4304',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4450',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0215',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0216',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0217',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0286',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0401',
-                'https://errata.almalinux.org/9/ALSA-2023-0946.html',
-                'https://errata.rockylinux.org/RLSA-2023:0946',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=c927a3492698c254637da836762f9b1f86cffabc',
-                'https://linux.oracle.com/cve/CVE-2022-4203.html',
-                'https://linux.oracle.com/errata/ELSA-2023-12152.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2022-4203',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0003',
-                'https://rustsec.org/advisories/RUSTSEC-2023-0008.html',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://ubuntu.com/security/notices/USN-5844-1',
-                'https://www.cve.org/CVERecord?id=CVE-2022-4203',
-                'https://www.openssl.org/news/secadv/20230207.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: read buffer overflow in X.509 certificate verification'
-            },
-            {
-              'cve':  'CVE-2022-4304',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N'
-                },
-                'nvd': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N'
-                },
-                'redhat': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-203'
-              ],
-              'description':   'A timing based side channel exists in the OpenSSL RSA Decryption implementation\nwhich could be sufficient to recover a plaintext across a network in a\nBleichenbacher style attack. To achieve a successful decryption an attacker\nwould have to be able to send a very large number of trial messages for\ndecryption. The vulnerability affects all RSA padding modes: PKCS#1 v1.5,\nRSA-OEAP and RSASVE.\n\nFor example, in a TLS connection, RSA is commonly used by a client to send an\nencrypted pre-master secret to the server. An attacker that had observed a\ngenuine connection between a client and a server could use this flaw to send\ntrial messages to the server and record the time taken to process them. After a\nsufficiently large number of messages the attacker could recover the pre-master\nsecret used for the original connection and thus be able to decrypt the\napplication data sent over that connection.',
-              'diffID':        'sha256:86ddd1858dda5de0cc1e3cc31a93fddc627a28136b08db8cda7460de39f657a3',
-              'fixedVersions': [
-                '3.0.8-r0'
-              ],
-              'installedVersion': '3.0.7-r2',
-              'packageName':      'libcrypto3',
-              'purl':             'pkg:apk/alpine/libcrypto3@3.0.7-r2?arch=armhf&distro=3.17.1',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2023:2165',
-                'https://access.redhat.com/security/cve/CVE-2022-4304',
-                'https://bugzilla.redhat.com/1960321',
-                'https://bugzilla.redhat.com/2164440',
-                'https://bugzilla.redhat.com/2164487',
-                'https://bugzilla.redhat.com/2164492',
-                'https://bugzilla.redhat.com/2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144000',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144003',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144006',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144008',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144010',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144012',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144015',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144017',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144019',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2145170',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2158412',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164440',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164487',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164488',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164492',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164497',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164499',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164500',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4203',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4304',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4450',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0215',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0216',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0217',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0286',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0401',
-                'https://errata.almalinux.org/9/ALSA-2023-2165.html',
-                'https://errata.rockylinux.org/RLSA-2023:0946',
-                'https://linux.oracle.com/cve/CVE-2022-4304.html',
-                'https://linux.oracle.com/errata/ELSA-2023-32791.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2022-4304',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0003',
-                'https://rustsec.org/advisories/RUSTSEC-2023-0007.html',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://ubuntu.com/security/notices/USN-5844-1',
-                'https://ubuntu.com/security/notices/USN-6564-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2022-4304',
-                'https://www.openssl.org/news/secadv/20230207.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: timing attack in RSA Decryption implementation'
-            },
-            {
-              'cve':  'CVE-2023-0465',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N'
-                },
-                'redhat': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-295'
-              ],
-              'description':   "Applications that use a non-default option when verifying certificates may be\nvulnerable to an attack from a malicious CA to circumvent certain checks.\n\nInvalid certificate policies in leaf certificates are silently ignored by\nOpenSSL and other certificate policy checks are skipped for that certificate.\nA malicious CA could use this to deliberately assert invalid certificate policies\nin order to circumvent policy checking on the certificate altogether.\n\nPolicy processing is disabled by default but can be enabled by passing\nthe `-policy' argument to the command line utilities or by calling the\n`X509_VERIFY_PARAM_set1_policies()' function.",
-              'diffID':        'sha256:86ddd1858dda5de0cc1e3cc31a93fddc627a28136b08db8cda7460de39f657a3',
-              'fixedVersions': [
-                '3.0.8-r2'
-              ],
-              'installedVersion': '3.0.7-r2',
-              'packageName':      'libcrypto3',
-              'purl':             'pkg:apk/alpine/libcrypto3@3.0.7-r2?arch=armhf&distro=3.17.1',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2023:3722',
-                'https://access.redhat.com/security/cve/CVE-2023-0465',
-                'https://bugzilla.redhat.com/2181082',
-                'https://bugzilla.redhat.com/2182561',
-                'https://bugzilla.redhat.com/2182565',
-                'https://bugzilla.redhat.com/2188461',
-                'https://bugzilla.redhat.com/2207947',
-                'https://errata.almalinux.org/9/ALSA-2023-3722.html',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=10325176f3d3e98c6e2b3bf5ab1e3b334de6947a',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=1dd43e0709fece299b15208f36cc7c76209ba0bb',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=b013765abfa80036dc779dd0e50602c57bb3bf95',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=facfb1ab745646e97a1920977ae4a9965ea61d5c',
-                'https://linux.oracle.com/cve/CVE-2023-0465.html',
-                'https://linux.oracle.com/errata/ELSA-2023-3722.html',
-                'https://lists.debian.org/debian-lts-announce/2023/06/msg00011.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-0465',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://security.netapp.com/advisory/ntap-20230414-0001/',
-                'https://ubuntu.com/security/notices/USN-6039-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-0465',
-                'https://www.debian.org/security/2023/dsa-5417',
-                'https://www.openssl.org/news/secadv/20230328.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: Invalid certificate policies in leaf certificates are silently ignored'
-            },
-            {
-              'cve':  'CVE-2023-0466',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N'
-                },
-                'redhat': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-295'
-              ],
-              'description':   'The function X509_VERIFY_PARAM_add0_policy() is documented to\nimplicitly enable the certificate policy check when doing certificate\nverification. However the implementation of the function does not\nenable the check which allows certificates with invalid or incorrect\npolicies to pass the certificate verification.\n\nAs suddenly enabling the policy check could break existing deployments it was\ndecided to keep the existing behavior of the X509_VERIFY_PARAM_add0_policy()\nfunction.\n\nInstead the applications that require OpenSSL to perform certificate\npolicy check need to use X509_VERIFY_PARAM_set1_policies() or explicitly\nenable the policy check by calling X509_VERIFY_PARAM_set_flags() with\nthe X509_V_FLAG_POLICY_CHECK flag argument.\n\nCertificate policy checks are disabled by default in OpenSSL and are not\ncommonly used by applications.',
-              'diffID':        'sha256:86ddd1858dda5de0cc1e3cc31a93fddc627a28136b08db8cda7460de39f657a3',
-              'fixedVersions': [
-                '3.0.8-r3'
-              ],
-              'installedVersion': '3.0.7-r2',
-              'packageName':      'libcrypto3',
-              'purl':             'pkg:apk/alpine/libcrypto3@3.0.7-r2?arch=armhf&distro=3.17.1',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2023/09/28/4',
-                'https://access.redhat.com/errata/RHSA-2023:3722',
-                'https://access.redhat.com/security/cve/CVE-2023-0466',
-                'https://bugzilla.redhat.com/2181082',
-                'https://bugzilla.redhat.com/2182561',
-                'https://bugzilla.redhat.com/2182565',
-                'https://bugzilla.redhat.com/2188461',
-                'https://bugzilla.redhat.com/2207947',
-                'https://errata.almalinux.org/9/ALSA-2023-3722.html',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=0d16b7e99aafc0b4a6d729eec65a411a7e025f0a',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=51e8a84ce742db0f6c70510d0159dad8f7825908',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=73398dea26de9899fb4baa94098ad0a61f435c72',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=fc814a30fc4f0bc54fcea7d9a7462f5457aab061',
-                'https://linux.oracle.com/cve/CVE-2023-0466.html',
-                'https://linux.oracle.com/errata/ELSA-2023-3722.html',
-                'https://lists.debian.org/debian-lts-announce/2023/06/msg00011.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-0466',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://security.netapp.com/advisory/ntap-20230414-0001/',
-                'https://ubuntu.com/security/notices/USN-6039-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-0466',
-                'https://www.debian.org/security/2023/dsa-5417',
-                'https://www.openssl.org/news/secadv/20230328.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: Certificate policy check not enabled'
-            },
-            {
-              'cve':  'CVE-2023-1255',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '5.1',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-125'
-              ],
-              'description':   'Issue summary: The AES-XTS cipher decryption implementation for 64 bit ARM\nplatform contains a bug that could cause it to read past the input buffer,\nleading to a crash.\n\nImpact summary: Applications that use the AES-XTS algorithm on the 64 bit ARM\nplatform can crash in rare circumstances. The AES-XTS algorithm is usually\nused for disk encryption.\n\nThe AES-XTS cipher decryption implementation for 64 bit ARM platform will read\npast the end of the ciphertext buffer if the ciphertext size is 4 mod 5 in 16\nbyte blocks, e.g. 144 bytes or 1024 bytes. If the memory after the ciphertext\nbuffer is unmapped, this will trigger a crash which results in a denial of\nservice.\n\nIf an attacker can control the size and location of the ciphertext buffer\nbeing decrypted by an application using AES-XTS on 64 bit ARM, the\napplication is affected. This is fairly unlikely making this issue\na Low severity one.',
-              'diffID':        'sha256:86ddd1858dda5de0cc1e3cc31a93fddc627a28136b08db8cda7460de39f657a3',
-              'fixedVersions': [
-                '3.0.8-r4'
-              ],
-              'installedVersion': '3.0.7-r2',
-              'packageName':      'libcrypto3',
-              'purl':             'pkg:apk/alpine/libcrypto3@3.0.7-r2?arch=armhf&distro=3.17.1',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2023:3722',
-                'https://access.redhat.com/security/cve/CVE-2023-1255',
-                'https://bugzilla.redhat.com/2181082',
-                'https://bugzilla.redhat.com/2182561',
-                'https://bugzilla.redhat.com/2182565',
-                'https://bugzilla.redhat.com/2188461',
-                'https://bugzilla.redhat.com/2207947',
-                'https://errata.almalinux.org/9/ALSA-2023-3722.html',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=02ac9c9420275868472f33b01def01218742b8bb',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=bc2f61ad70971869b242fc1cb445b98bad50074a',
-                'https://linux.oracle.com/cve/CVE-2023-1255.html',
-                'https://linux.oracle.com/errata/ELSA-2023-3722.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-1255',
-                'https://security.netapp.com/advisory/ntap-20230908-0006/',
-                'https://ubuntu.com/security/notices/USN-6119-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-1255',
-                'https://www.openssl.org/news/secadv/20230419.txt',
-                'https://www.openssl.org/news/secadv/20230420.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: Input buffer over-read in AES-XTS implementation on 64 bit ARM'
-            },
-            {
-              'cve':  'CVE-2023-2650',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '6.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-770'
-              ],
-              'description':   "Issue summary: Processing some specially crafted ASN.1 object identifiers or\ndata containing them may be very slow.\n\nImpact summary: Applications that use OBJ_obj2txt() directly, or use any of\nthe OpenSSL subsystems OCSP, PKCS7/SMIME, CMS, CMP/CRMF or TS with no message\nsize limit may experience notable to very long delays when processing those\nmessages, which may lead to a Denial of Service.\n\nAn OBJECT IDENTIFIER is composed of a series of numbers - sub-identifiers -\nmost of which have no size limit.  OBJ_obj2txt() may be used to translate\nan ASN.1 OBJECT IDENTIFIER given in DER encoding form (using the OpenSSL\ntype ASN1_OBJECT) to its canonical numeric text form, which are the\nsub-identifiers of the OBJECT IDENTIFIER in decimal form, separated by\nperiods.\n\nWhen one of the sub-identifiers in the OBJECT IDENTIFIER is very large\n(these are sizes that are seen as absurdly large, taking up tens or hundreds\nof KiBs), the translation to a decimal number in text may take a very long\ntime.  The time complexity is O(n^2) with 'n' being the size of the\nsub-identifiers in bytes (*).\n\nWith OpenSSL 3.0, support to fetch cryptographic algorithms using names /\nidentifiers in string form was introduced.  This includes using OBJECT\nIDENTIFIERs in canonical numeric text form as identifiers for fetching\nalgorithms.\n\nSuch OBJECT IDENTIFIERs may be received through the ASN.1 structure\nAlgorithmIdentifier, which is commonly used in multiple protocols to specify\nwhat cryptographic algorithm should be used to sign or verify, encrypt or\ndecrypt, or digest passed data.\n\nApplications that call OBJ_obj2txt() directly with untrusted data are\naffected, with any version of OpenSSL.  If the use is for the mere purpose\nof display, the severity is considered low.\n\nIn OpenSSL 3.0 and newer, this affects the subsystems OCSP, PKCS7/SMIME,\nCMS, CMP/CRMF or TS.  It also impacts anything that processes X.509\ncertificates, including simple things like verifying its signature.\n\nThe impact on TLS is relatively low, because all versions of OpenSSL have a\n100KiB limit on the peer's certificate chain.  Additionally, this only\nimpacts clients, or servers that have explicitly enabled client\nauthentication.\n\nIn OpenSSL 1.1.1 and 1.0.2, this only affects displaying diverse objects,\nsuch as X.509 certificates.  This is assumed to not happen in such a way\nthat it would cause a Denial of Service, so these versions are considered\nnot affected by this issue in such a way that it would be cause for concern,\nand the severity is therefore considered low.",
-              'diffID':        'sha256:86ddd1858dda5de0cc1e3cc31a93fddc627a28136b08db8cda7460de39f657a3',
-              'fixedVersions': [
-                '3.0.9-r0'
-              ],
-              'installedVersion': '3.0.7-r2',
-              'packageName':      'libcrypto3',
-              'purl':             'pkg:apk/alpine/libcrypto3@3.0.7-r2?arch=armhf&distro=3.17.1',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2023/05/30/1',
-                'https://access.redhat.com/errata/RHSA-2023:6330',
-                'https://access.redhat.com/security/cve/CVE-2023-2650',
-                'https://bugzilla.redhat.com/1858038',
-                'https://bugzilla.redhat.com/2207947',
-                'https://errata.almalinux.org/9/ALSA-2023-6330.html',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=423a2bc737a908ad0c77bda470b2b59dc879936b',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=853c5e56ee0b8650c73140816bb8b91d6163422c',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=9e209944b35cf82368071f160a744b6178f9b098',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=db779b0e10b047f2585615e0b8f2acdf21f8544a',
-                'https://linux.oracle.com/cve/CVE-2023-2650.html',
-                'https://linux.oracle.com/errata/ELSA-2023-6330.html',
-                'https://lists.debian.org/debian-lts-announce/2023/06/msg00011.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-2650',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0009',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://security.netapp.com/advisory/ntap-20230703-0001/',
-                'https://security.netapp.com/advisory/ntap-20231027-0009/',
-                'https://ubuntu.com/security/notices/USN-6119-1',
-                'https://ubuntu.com/security/notices/USN-6188-1',
-                'https://ubuntu.com/security/notices/USN-6672-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-2650',
-                'https://www.debian.org/security/2023/dsa-5417',
-                'https://www.openssl.org/news/secadv/20230530.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: Possible DoS translating ASN.1 object identifiers'
-            },
-            {
-              'cve':  'CVE-2023-2975',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N'
-                },
-                'redhat': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-354',
-                'CWE-287'
-              ],
-              'description':   'Issue summary: The AES-SIV cipher implementation contains a bug that causes\nit to ignore empty associated data entries which are unauthenticated as\na consequence.\n\nImpact summary: Applications that use the AES-SIV algorithm and want to\nauthenticate empty data entries as associated data can be misled by removing,\nadding or reordering such empty entries as these are ignored by the OpenSSL\nimplementation. We are currently unaware of any such applications.\n\nThe AES-SIV algorithm allows for authentication of multiple associated\ndata entries along with the encryption. To authenticate empty data the\napplication has to call EVP_EncryptUpdate() (or EVP_CipherUpdate()) with\nNULL pointer as the output buffer and 0 as the input buffer length.\nThe AES-SIV implementation in OpenSSL just returns success for such a call\ninstead of performing the associated data authentication operation.\nThe empty data thus will not be authenticated.\n\nAs this issue does not affect non-empty associated data authentication and\nwe expect it to be rare for an application to use empty associated data\nentries this is qualified as Low severity issue.',
-              'diffID':        'sha256:86ddd1858dda5de0cc1e3cc31a93fddc627a28136b08db8cda7460de39f657a3',
-              'fixedVersions': [
-                '3.0.9-r2'
-              ],
-              'installedVersion': '3.0.7-r2',
-              'packageName':      'libcrypto3',
-              'purl':             'pkg:apk/alpine/libcrypto3@3.0.7-r2?arch=armhf&distro=3.17.1',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2023/07/15/1',
-                'http://www.openwall.com/lists/oss-security/2023/07/19/5',
-                'https://access.redhat.com/errata/RHSA-2024:2447',
-                'https://access.redhat.com/security/cve/CVE-2023-2975',
-                'https://bugzilla.redhat.com/2223016',
-                'https://bugzilla.redhat.com/2224962',
-                'https://bugzilla.redhat.com/2227852',
-                'https://bugzilla.redhat.com/2248616',
-                'https://bugzilla.redhat.com/2257571',
-                'https://bugzilla.redhat.com/2258502',
-                'https://bugzilla.redhat.com/2259944',
-                'https://errata.almalinux.org/9/ALSA-2024-2447.html',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=00e2f5eea29994d19293ec4e8c8775ba73678598',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=6a83f0c958811f07e0d11dfc6b5a6a98edfd5bdc',
-                'https://linux.oracle.com/cve/CVE-2023-2975.html',
-                'https://linux.oracle.com/errata/ELSA-2024-2447.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-2975',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://security.netapp.com/advisory/ntap-20230725-0004/',
-                'https://ubuntu.com/security/notices/USN-6450-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-2975',
-                'https://www.openssl.org/news/secadv/20230714.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: AES-SIV cipher implementation contains a bug that causes it to ignore empty associated data entries'
-            },
-            {
-              'cve':  'CVE-2023-3446',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L'
-                },
-                'redhat': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L'
-                }
-              },
-              'cwes': [
-                'CWE-606',
-                'CWE-1333'
-              ],
-              'description':   "Issue summary: Checking excessively long DH keys or parameters may be very slow.\n\nImpact summary: Applications that use the functions DH_check(), DH_check_ex()\nor EVP_PKEY_param_check() to check a DH key or DH parameters may experience long\ndelays. Where the key or parameters that are being checked have been obtained\nfrom an untrusted source this may lead to a Denial of Service.\n\nThe function DH_check() performs various checks on DH parameters. One of those\nchecks confirms that the modulus ('p' parameter) is not too large. Trying to use\na very large modulus is slow and OpenSSL will not normally use a modulus which\nis over 10,000 bits in length.\n\nHowever the DH_check() function checks numerous aspects of the key or parameters\nthat have been supplied. Some of those checks use the supplied modulus value\neven if it has already been found to be too large.\n\nAn application that calls DH_check() and supplies a key or parameters obtained\nfrom an untrusted source could be vulernable to a Denial of Service attack.\n\nThe function DH_check() is itself called by a number of other OpenSSL functions.\nAn application calling any of those other functions may similarly be affected.\nThe other functions affected by this are DH_check_ex() and\nEVP_PKEY_param_check().\n\nAlso vulnerable are the OpenSSL dhparam and pkeyparam command line applications\nwhen using the '-check' option.\n\nThe OpenSSL SSL/TLS implementation is not affected by this issue.\nThe OpenSSL 3.0 and 3.1 FIPS providers are not affected by this issue.",
-              'diffID':        'sha256:86ddd1858dda5de0cc1e3cc31a93fddc627a28136b08db8cda7460de39f657a3',
-              'fixedVersions': [
-                '3.0.9-r3'
-              ],
-              'installedVersion': '3.0.7-r2',
-              'packageName':      'libcrypto3',
-              'purl':             'pkg:apk/alpine/libcrypto3@3.0.7-r2?arch=armhf&distro=3.17.1',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2023/07/19/4',
-                'http://www.openwall.com/lists/oss-security/2023/07/19/5',
-                'http://www.openwall.com/lists/oss-security/2023/07/19/6',
-                'http://www.openwall.com/lists/oss-security/2023/07/31/1',
-                'http://www.openwall.com/lists/oss-security/2024/05/16/1',
-                'https://access.redhat.com/errata/RHSA-2024:2447',
-                'https://access.redhat.com/security/cve/CVE-2023-3446',
-                'https://bugzilla.redhat.com/2223016',
-                'https://bugzilla.redhat.com/2224962',
-                'https://bugzilla.redhat.com/2227852',
-                'https://bugzilla.redhat.com/2248616',
-                'https://bugzilla.redhat.com/2257571',
-                'https://bugzilla.redhat.com/2258502',
-                'https://bugzilla.redhat.com/2259944',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2224962',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2257582',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2257583',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2258677',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2258688',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2258691',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2258694',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2258700',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-36763',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-36764',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3446',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45229',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45231',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45232',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45233',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45235',
-                'https://errata.almalinux.org/9/ALSA-2024-2447.html',
-                'https://errata.rockylinux.org/RLSA-2024:2264',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=1fa20cf2f506113c761777127a38bce5068740eb',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=8780a896543a654e757db1b9396383f9d8095528',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=9a0a4d3c1e7138915563c0df4fe6a3f9377b839c',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=fc9867c1e03c22ebf56943be205202e576aabf23',
-                'https://linux.oracle.com/cve/CVE-2023-3446.html',
-                'https://linux.oracle.com/errata/ELSA-2024-2447.html',
-                'https://lists.debian.org/debian-lts-announce/2023/08/msg00019.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-3446',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://security.netapp.com/advisory/ntap-20230803-0011/',
-                'https://ubuntu.com/security/notices/USN-6435-1',
-                'https://ubuntu.com/security/notices/USN-6435-2',
-                'https://ubuntu.com/security/notices/USN-6450-1',
-                'https://ubuntu.com/security/notices/USN-6709-1',
-                'https://ubuntu.com/security/notices/USN-7018-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-3446',
-                'https://www.openssl.org/news/secadv/20230719.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: Excessive time spent checking DH keys and parameters'
-            },
-            {
-              'cve':  'CVE-2023-3817',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L'
-                },
-                'redhat': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L'
-                }
-              },
-              'cwes': [
-                'CWE-606',
-                'CWE-834'
-              ],
-              'description':   'Issue summary: Checking excessively long DH keys or parameters may be very slow.\n\nImpact summary: Applications that use the functions DH_check(), DH_check_ex()\nor EVP_PKEY_param_check() to check a DH key or DH parameters may experience long\ndelays. Where the key or parameters that are being checked have been obtained\nfrom an untrusted source this may lead to a Denial of Service.\n\nThe function DH_check() performs various checks on DH parameters. After fixing\nCVE-2023-3446 it was discovered that a large q parameter value can also trigger\nan overly long computation during some of these checks. A correct q value,\nif present, cannot be larger than the modulus p parameter, thus it is\nunnecessary to perform these checks if q is larger than p.\n\nAn application that calls DH_check() and supplies a key or parameters obtained\nfrom an untrusted source could be vulnerable to a Denial of Service attack.\n\nThe function DH_check() is itself called by a number of other OpenSSL functions.\nAn application calling any of those other functions may similarly be affected.\nThe other functions affected by this are DH_check_ex() and\nEVP_PKEY_param_check().\n\nAlso vulnerable are the OpenSSL dhparam and pkeyparam command line applications\nwhen using the "-check" option.\n\nThe OpenSSL SSL/TLS implementation is not affected by this issue.\n\nThe OpenSSL 3.0 and 3.1 FIPS providers are not affected by this issue.',
-              'diffID':        'sha256:86ddd1858dda5de0cc1e3cc31a93fddc627a28136b08db8cda7460de39f657a3',
-              'fixedVersions': [
-                '3.0.10-r0'
-              ],
-              'installedVersion': '3.0.7-r2',
-              'packageName':      'libcrypto3',
-              'purl':             'pkg:apk/alpine/libcrypto3@3.0.7-r2?arch=armhf&distro=3.17.1',
-              'references':       [
-                'http://seclists.org/fulldisclosure/2023/Jul/43',
-                'http://www.openwall.com/lists/oss-security/2023/07/31/1',
-                'http://www.openwall.com/lists/oss-security/2023/09/22/11',
-                'http://www.openwall.com/lists/oss-security/2023/09/22/9',
-                'http://www.openwall.com/lists/oss-security/2023/11/06/2',
-                'https://access.redhat.com/errata/RHSA-2024:2447',
-                'https://access.redhat.com/security/cve/CVE-2023-3817',
-                'https://bugzilla.redhat.com/2223016',
-                'https://bugzilla.redhat.com/2224962',
-                'https://bugzilla.redhat.com/2227852',
-                'https://bugzilla.redhat.com/2248616',
-                'https://bugzilla.redhat.com/2257571',
-                'https://bugzilla.redhat.com/2258502',
-                'https://bugzilla.redhat.com/2259944',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2224962',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2227852',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2248616',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2270358',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3446',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3817',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-5678',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-2408',
-                'https://errata.almalinux.org/9/ALSA-2024-2447.html',
-                'https://errata.rockylinux.org/RLSA-2023:7877',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=6a1eb62c29db6cb5eec707f9338aee00f44e26f5',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=869ad69aadd985c7b8ca6f4e5dd0eb274c9f3644',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=9002fd07327a91f35ba6c1307e71fa6fd4409b7f',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=91ddeba0f2269b017dc06c46c993a788974b1aa5',
-                'https://linux.oracle.com/cve/CVE-2023-3817.html',
-                'https://linux.oracle.com/errata/ELSA-2024-2447.html',
-                'https://lists.debian.org/debian-lts-announce/2023/08/msg00019.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-3817',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://security.netapp.com/advisory/ntap-20230818-0014/',
-                'https://security.netapp.com/advisory/ntap-20231027-0008/',
-                'https://security.netapp.com/advisory/ntap-20240621-0006/',
-                'https://ubuntu.com/security/notices/USN-6435-1',
-                'https://ubuntu.com/security/notices/USN-6435-2',
-                'https://ubuntu.com/security/notices/USN-6450-1',
-                'https://ubuntu.com/security/notices/USN-6709-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-3817',
-                'https://www.openssl.org/news/secadv/20230731.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'OpenSSL: Excessive time spent checking DH q parameter value'
-            },
-            {
-              'cve':  'CVE-2023-5678',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L'
-                },
-                'redhat': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L'
-                }
-              },
-              'cwes': [
-                'CWE-606',
-                'CWE-754'
-              ],
-              'description':   "Issue summary: Generating excessively long X9.42 DH keys or checking\nexcessively long X9.42 DH keys or parameters may be very slow.\n\nImpact summary: Applications that use the functions DH_generate_key() to\ngenerate an X9.42 DH key may experience long delays.  Likewise, applications\nthat use DH_check_pub_key(), DH_check_pub_key_ex() or EVP_PKEY_public_check()\nto check an X9.42 DH key or X9.42 DH parameters may experience long delays.\nWhere the key or parameters that are being checked have been obtained from\nan untrusted source this may lead to a Denial of Service.\n\nWhile DH_check() performs all the necessary checks (as of CVE-2023-3817),\nDH_check_pub_key() doesn't make any of these checks, and is therefore\nvulnerable for excessively large P and Q parameters.\n\nLikewise, while DH_generate_key() performs a check for an excessively large\nP, it doesn't check for an excessively large Q.\n\nAn application that calls DH_generate_key() or DH_check_pub_key() and\nsupplies a key or parameters obtained from an untrusted source could be\nvulnerable to a Denial of Service attack.\n\nDH_generate_key() and DH_check_pub_key() are also called by a number of\nother OpenSSL functions.  An application calling any of those other\nfunctions may similarly be affected.  The other functions affected by this\nare DH_check_pub_key_ex(), EVP_PKEY_public_check(), and EVP_PKEY_generate().\n\nAlso vulnerable are the OpenSSL pkey command line application when using the\n\"-pubcheck\" option, as well as the OpenSSL genpkey command line application.\n\nThe OpenSSL SSL/TLS implementation is not affected by this issue.\n\nThe OpenSSL 3.0 and 3.1 FIPS providers are not affected by this issue.",
-              'diffID':        'sha256:86ddd1858dda5de0cc1e3cc31a93fddc627a28136b08db8cda7460de39f657a3',
-              'fixedVersions': [
-                '3.0.12-r1'
-              ],
-              'installedVersion': '3.0.7-r2',
-              'packageName':      'libcrypto3',
-              'purl':             'pkg:apk/alpine/libcrypto3@3.0.7-r2?arch=armhf&distro=3.17.1',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2024/03/11/1',
-                'https://access.redhat.com/errata/RHSA-2024:2447',
-                'https://access.redhat.com/security/cve/CVE-2023-5678',
-                'https://bugzilla.redhat.com/2223016',
-                'https://bugzilla.redhat.com/2224962',
-                'https://bugzilla.redhat.com/2227852',
-                'https://bugzilla.redhat.com/2248616',
-                'https://bugzilla.redhat.com/2257571',
-                'https://bugzilla.redhat.com/2258502',
-                'https://bugzilla.redhat.com/2259944',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2224962',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2227852',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2248616',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2270358',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3446',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3817',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-5678',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-2408',
-                'https://errata.almalinux.org/9/ALSA-2024-2447.html',
-                'https://errata.rockylinux.org/RLSA-2023:7877',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=34efaef6c103d636ab507a0cc34dca4d3aecc055',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=710fee740904b6290fef0dd5536fbcedbc38ff0c',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=db925ae2e65d0d925adef429afc37f75bd1c2017',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=ddeb4b6c6d527e54ce9a99cba785c0f7776e54b6',
-                'https://linux.oracle.com/cve/CVE-2023-5678.html',
-                'https://linux.oracle.com/errata/ELSA-2024-2447.html',
-                'https://lists.debian.org/debian-lts-announce/2024/10/msg00033.html',
-                'https://lists.debian.org/debian-lts-announce/2024/11/msg00000.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-5678',
-                'https://security.netapp.com/advisory/ntap-20231130-0010/',
-                'https://ubuntu.com/security/notices/USN-6622-1',
-                'https://ubuntu.com/security/notices/USN-6632-1',
-                'https://ubuntu.com/security/notices/USN-6709-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-5678',
-                'https://www.openssl.org/news/secadv/20231106.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: Generating excessively long X9.42 DH keys or checking excessively long X9.42 DH keys or parameters may be very slow'
-            },
-            {
-              'cve':  'CVE-2023-6129',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '6.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-440',
-                'CWE-787'
-              ],
-              'description':   'Issue summary: The POLY1305 MAC (message authentication code) implementation\ncontains a bug that might corrupt the internal state of applications running\non PowerPC CPU based platforms if the CPU provides vector instructions.\n\nImpact summary: If an attacker can influence whether the POLY1305 MAC\nalgorithm is used, the application state might be corrupted with various\napplication dependent consequences.\n\nThe POLY1305 MAC (message authentication code) implementation in OpenSSL for\nPowerPC CPUs restores the contents of vector registers in a different order\nthan they are saved. Thus the contents of some of these vector registers\nare corrupted when returning to the caller. The vulnerable code is used only\non newer PowerPC processors supporting the PowerISA 2.07 instructions.\n\nThe consequences of this kind of internal application state corruption can\nbe various - from no consequences, if the calling application does not\ndepend on the contents of non-volatile XMM registers at all, to the worst\nconsequences, where the attacker could get complete control of the application\nprocess. However unless the compiler uses the vector registers for storing\npointers, the most likely consequence, if any, would be an incorrect result\nof some application dependent calculations or a crash leading to a denial of\nservice.\n\nThe POLY1305 MAC algorithm is most frequently used as part of the\nCHACHA20-POLY1305 AEAD (authenticated encryption with associated data)\nalgorithm. The most common usage of this AEAD cipher is with TLS protocol\nversions 1.2 and 1.3. If this cipher is enabled on the server a malicious\nclient can influence whether this AEAD cipher is used. This implies that\nTLS server applications using OpenSSL can be potentially impacted. However\nwe are currently not aware of any concrete application that would be affected\nby this issue therefore we consider this a Low severity security issue.',
-              'diffID':        'sha256:86ddd1858dda5de0cc1e3cc31a93fddc627a28136b08db8cda7460de39f657a3',
-              'fixedVersions': [
-                '3.0.12-r2'
-              ],
-              'installedVersion': '3.0.7-r2',
-              'packageName':      'libcrypto3',
-              'purl':             'pkg:apk/alpine/libcrypto3@3.0.7-r2?arch=armhf&distro=3.17.1',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2024/03/11/1',
-                'https://access.redhat.com/errata/RHSA-2024:9088',
-                'https://access.redhat.com/security/cve/CVE-2023-6129',
-                'https://bugzilla.redhat.com/2257571',
-                'https://bugzilla.redhat.com/2258502',
-                'https://bugzilla.redhat.com/2259944',
-                'https://bugzilla.redhat.com/2284243',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2257571',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2258502',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2259944',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2284243',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-6129',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-6237',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-0727',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-1298',
-                'https://errata.almalinux.org/9/ALSA-2024-9088.html',
-                'https://errata.rockylinux.org/RLSA-2024:9088',
-                'https://github.com/openssl/openssl/commit/050d26383d4e264966fb83428e72d5d48f402d35',
-                'https://github.com/openssl/openssl/commit/5b139f95c9a47a55a0c54100f3837b1eee942b04',
-                'https://github.com/openssl/openssl/commit/f3fc5808fe9ff74042d639839610d03b8fdcc015',
-                'https://linux.oracle.com/cve/CVE-2023-6129.html',
-                'https://linux.oracle.com/errata/ELSA-2024-9088.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-6129',
-                'https://security.netapp.com/advisory/ntap-20240216-0009/',
-                'https://security.netapp.com/advisory/ntap-20240426-0008/',
-                'https://security.netapp.com/advisory/ntap-20240426-0013/',
-                'https://security.netapp.com/advisory/ntap-20240503-0011/',
-                'https://ubuntu.com/security/notices/USN-6622-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-6129',
-                'https://www.openssl.org/news/secadv/20240109.txt',
-                'https://www.openwall.com/lists/oss-security/2024/01/09/1'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: POLY1305 MAC implementation corrupts vector registers on PowerPC'
-            },
-            {
-              'cve':  'CVE-2023-6237',
-              'cvss': {
-                'redhat': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-606'
-              ],
-              'description':   "Issue summary: Checking excessively long invalid RSA public keys may take\na long time.\n\nImpact summary: Applications that use the function EVP_PKEY_public_check()\nto check RSA public keys may experience long delays. Where the key that\nis being checked has been obtained from an untrusted source this may lead\nto a Denial of Service.\n\nWhen function EVP_PKEY_public_check() is called on RSA public keys,\na computation is done to confirm that the RSA modulus, n, is composite.\nFor valid RSA keys, n is a product of two or more large primes and this\ncomputation completes quickly. However, if n is an overly large prime,\nthen this computation would take a long time.\n\nAn application that calls EVP_PKEY_public_check() and supplies an RSA key\nobtained from an untrusted source could be vulnerable to a Denial of Service\nattack.\n\nThe function EVP_PKEY_public_check() is not called from other OpenSSL\nfunctions however it is called from the OpenSSL pkey command line\napplication. For that reason that application is also vulnerable if used\nwith the '-pubin' and '-check' options on untrusted data.\n\nThe OpenSSL SSL/TLS implementation is not affected by this issue.\n\nThe OpenSSL 3.0 and 3.1 FIPS providers are affected by this issue.",
-              'diffID':        'sha256:86ddd1858dda5de0cc1e3cc31a93fddc627a28136b08db8cda7460de39f657a3',
-              'fixedVersions': [
-                '3.0.12-r3'
-              ],
-              'installedVersion': '3.0.7-r2',
-              'packageName':      'libcrypto3',
-              'purl':             'pkg:apk/alpine/libcrypto3@3.0.7-r2?arch=armhf&distro=3.17.1',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2024/03/11/1',
-                'https://access.redhat.com/errata/RHSA-2024:9088',
-                'https://access.redhat.com/security/cve/CVE-2023-6237',
-                'https://bugzilla.redhat.com/2257571',
-                'https://bugzilla.redhat.com/2258502',
-                'https://bugzilla.redhat.com/2259944',
-                'https://bugzilla.redhat.com/2284243',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2257571',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2258502',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2259944',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2284243',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-6129',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-6237',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-0727',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-1298',
-                'https://errata.almalinux.org/9/ALSA-2024-9088.html',
-                'https://errata.rockylinux.org/RLSA-2024:9088',
-                'https://github.com/openssl/openssl/commit/0b0f7abfb37350794a4b8960fafc292cd5d1b84d',
-                'https://github.com/openssl/openssl/commit/18c02492138d1eb8b6548cb26e7b625fb2414a2a',
-                'https://github.com/openssl/openssl/commit/a830f551557d3d66a84bbb18a5b889c640c36294',
-                'https://linux.oracle.com/cve/CVE-2023-6237.html',
-                'https://linux.oracle.com/errata/ELSA-2024-9088.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-6237',
-                'https://security.netapp.com/advisory/ntap-20240531-0007/',
-                'https://ubuntu.com/security/notices/USN-6622-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-6237',
-                'https://www.openssl.org/news/secadv/20240115.txt',
-                'https://www.openwall.com/lists/oss-security/2024/01/15/2'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: Excessive time spent checking invalid RSA public keys'
-            },
-            {
-              'cve':  'CVE-2024-0727',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '5.5',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H'
-                },
-                'nvd': {
-                  'v3score':  '5.5',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '5.5',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-476'
-              ],
-              'description':   'Issue summary: Processing a maliciously formatted PKCS12 file may lead OpenSSL\nto crash leading to a potential Denial of Service attack\n\nImpact summary: Applications loading files in the PKCS12 format from untrusted\nsources might terminate abruptly.\n\nA file in PKCS12 format can contain certificates and keys and may come from an\nuntrusted source. The PKCS12 specification allows certain fields to be NULL, but\nOpenSSL does not correctly check for this case. This can lead to a NULL pointer\ndereference that results in OpenSSL crashing. If an application processes PKCS12\nfiles from an untrusted source using the OpenSSL APIs then that application will\nbe vulnerable to this issue.\n\nOpenSSL APIs that are vulnerable to this are: PKCS12_parse(),\nPKCS12_unpack_p7data(), PKCS12_unpack_p7encdata(), PKCS12_unpack_authsafes()\nand PKCS12_newpass().\n\nWe have also fixed a similar issue in SMIME_write_PKCS7(). However since this\nfunction is related to writing data we do not consider it security significant.\n\nThe FIPS modules in 3.2, 3.1 and 3.0 are not affected by this issue.',
-              'diffID':        'sha256:86ddd1858dda5de0cc1e3cc31a93fddc627a28136b08db8cda7460de39f657a3',
-              'fixedVersions': [
-                '3.0.12-r4'
-              ],
-              'installedVersion': '3.0.7-r2',
-              'packageName':      'libcrypto3',
-              'purl':             'pkg:apk/alpine/libcrypto3@3.0.7-r2?arch=armhf&distro=3.17.1',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2024/03/11/1',
-                'https://access.redhat.com/errata/RHSA-2024:9088',
-                'https://access.redhat.com/security/cve/CVE-2024-0727',
-                'https://bugzilla.redhat.com/2257571',
-                'https://bugzilla.redhat.com/2258502',
-                'https://bugzilla.redhat.com/2259944',
-                'https://bugzilla.redhat.com/2284243',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2257571',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2258502',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2259944',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2284243',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-6129',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-6237',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-0727',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-1298',
-                'https://errata.almalinux.org/9/ALSA-2024-9088.html',
-                'https://errata.rockylinux.org/RLSA-2024:9088',
-                'https://github.com/alexcrichton/openssl-src-rs/commit/add20f73b6b42be7451af2e1044d4e0e778992b2',
-                'https://github.com/github/advisory-database/pull/3472',
-                'https://github.com/openssl/openssl/commit/09df4395b5071217b76dc7d3d2e630eb8c5a79c2',
-                'https://github.com/openssl/openssl/commit/775acfdbd0c6af9ac855f34969cdab0c0c90844a',
-                'https://github.com/openssl/openssl/commit/d135eeab8a5dbf72b3da5240bab9ddb7678dbd2c',
-                'https://github.com/openssl/openssl/pull/23362',
-                'https://github.com/pyca/cryptography/commit/3519591d255d4506fbcd0d04037d45271903c64d',
-                'https://github.openssl.org/openssl/extended-releases/commit/03b3941d60c4bce58fab69a0c22377ab439bc0e8',
-                'https://github.openssl.org/openssl/extended-releases/commit/aebaa5883e31122b404e450732dc833dc9dee539',
-                'https://linux.oracle.com/cve/CVE-2024-0727.html',
-                'https://linux.oracle.com/errata/ELSA-2024-9088.html',
-                'https://lists.debian.org/debian-lts-announce/2024/10/msg00033.html',
-                'https://lists.debian.org/debian-lts-announce/2024/11/msg00000.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2024-0727',
-                'https://security.netapp.com/advisory/ntap-20240208-0006',
-                'https://security.netapp.com/advisory/ntap-20240208-0006/',
-                'https://ubuntu.com/security/notices/USN-6622-1',
-                'https://ubuntu.com/security/notices/USN-6632-1',
-                'https://ubuntu.com/security/notices/USN-6709-1',
-                'https://ubuntu.com/security/notices/USN-7018-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2024-0727',
-                'https://www.openssl.org/news/secadv/20240125.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: denial of service via null dereference'
-            },
-            {
-              'cve':  'CVE-2024-4603',
-              'cvss': {
-                'redhat': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L'
-                }
-              },
-              'cwes': [
-                'CWE-606',
-                'CWE-834'
-              ],
-              'description':   'Issue summary: Checking excessively long DSA keys or parameters may be very\nslow.\n\nImpact summary: Applications that use the functions EVP_PKEY_param_check()\nor EVP_PKEY_public_check() to check a DSA public key or DSA parameters may\nexperience long delays. Where the key or parameters that are being checked\nhave been obtained from an untrusted source this may lead to a Denial of\nService.\n\nThe functions EVP_PKEY_param_check() or EVP_PKEY_public_check() perform\nvarious checks on DSA parameters. Some of those computations take a long time\nif the modulus (`p` parameter) is too large.\n\nTrying to use a very large modulus is slow and OpenSSL will not allow using\npublic keys with a modulus which is over 10,000 bits in length for signature\nverification. However the key and parameter check functions do not limit\nthe modulus size when performing the checks.\n\nAn application that calls EVP_PKEY_param_check() or EVP_PKEY_public_check()\nand supplies a key or parameters obtained from an untrusted source could be\nvulnerable to a Denial of Service attack.\n\nThese functions are not called by OpenSSL itself on untrusted DSA keys so\nonly applications that directly call these functions may be vulnerable.\n\nAlso vulnerable are the OpenSSL pkey and pkeyparam command line applications\nwhen using the `-check` option.\n\nThe OpenSSL SSL/TLS implementation is not affected by this issue.\n\nThe OpenSSL 3.0 and 3.1 FIPS providers are affected by this issue.',
-              'diffID':        'sha256:86ddd1858dda5de0cc1e3cc31a93fddc627a28136b08db8cda7460de39f657a3',
-              'fixedVersions': [
-                '3.0.13-r0'
-              ],
-              'installedVersion': '3.0.7-r2',
-              'packageName':      'libcrypto3',
-              'purl':             'pkg:apk/alpine/libcrypto3@3.0.7-r2?arch=armhf&distro=3.17.1',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2024/05/16/2',
-                'https://access.redhat.com/errata/RHSA-2024:9333',
-                'https://access.redhat.com/security/cve/CVE-2024-4603',
-                'https://bugzilla.redhat.com/2274020',
-                'https://bugzilla.redhat.com/2281029',
-                'https://bugzilla.redhat.com/2283757',
-                'https://bugzilla.redhat.com/2294581',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2274020',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2281029',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2283757',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2294581',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-2511',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-4603',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-4741',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-5535',
-                'https://errata.almalinux.org/9/ALSA-2024-9333.html',
-                'https://errata.rockylinux.org/RLSA-2024:9333',
-                'https://github.com/openssl/openssl/commit/3559e868e58005d15c6013a0c1fd832e51c73397',
-                'https://github.com/openssl/openssl/commit/53ea06486d296b890d565fb971b2764fcd826e7e',
-                'https://github.com/openssl/openssl/commit/9c39b3858091c152f52513c066ff2c5a47969f0d',
-                'https://github.com/openssl/openssl/commit/da343d0605c826ef197aceedc67e8e04f065f740',
-                'https://linux.oracle.com/cve/CVE-2024-4603.html',
-                'https://linux.oracle.com/errata/ELSA-2024-9333.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2024-4603',
-                'https://security.netapp.com/advisory/ntap-20240621-0001/',
-                'https://ubuntu.com/security/notices/USN-6937-1',
-                'https://www.cve.org/CVERecord?id=CVE-2024-4603',
-                'https://www.openssl.org/news/secadv/20240516.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: Excessive time spent checking DSA keys and parameters'
-            },
-            {
-              'cve':  'CVE-2024-4741',
-              'cvss': {
-                'redhat': {
-                  'v3score':  '5.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   'Issue summary: Calling the OpenSSL API function SSL_free_buffers may cause\nmemory to be accessed that was previously freed in some situations\n\nImpact summary: A use after free can have a range of potential consequences such\nas the corruption of valid data, crashes or execution of arbitrary code.\nHowever, only applications that directly call the SSL_free_buffers function are\naffected by this issue. Applications that do not call this function are not\nvulnerable. Our investigations indicate that this function is rarely used by\napplications.\n\nThe SSL_free_buffers function is used to free the internal OpenSSL buffer used\nwhen processing an incoming record from the network. The call is only expected\nto succeed if the buffer is not currently in use. However, two scenarios have\nbeen identified where the buffer is freed even when still in use.\n\nThe first scenario occurs where a record header has been received from the\nnetwork and processed by OpenSSL, but the full record body has not yet arrived.\nIn this case calling SSL_free_buffers will succeed even though a record has only\nbeen partially processed and the buffer is still in use.\n\nThe second scenario occurs where a full record containing application data has\nbeen received and processed by OpenSSL but the application has only read part of\nthis data. Again a call to SSL_free_buffers will succeed even though the buffer\nis still in use.\n\nWhile these scenarios could occur accidentally during normal operation a\nmalicious attacker could attempt to engineer a stituation where this occurs.\nWe are not aware of this issue being actively exploited.\n\nThe FIPS modules in 3.3, 3.2, 3.1 and 3.0 are not affected by this issue.',
-              'diffID':        'sha256:86ddd1858dda5de0cc1e3cc31a93fddc627a28136b08db8cda7460de39f657a3',
-              'fixedVersions': [
-                '3.0.14-r0'
-              ],
-              'installedVersion': '3.0.7-r2',
-              'packageName':      'libcrypto3',
-              'purl':             'pkg:apk/alpine/libcrypto3@3.0.7-r2?arch=armhf&distro=3.17.1',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2024:9333',
-                'https://access.redhat.com/security/cve/CVE-2024-4741',
-                'https://bugzilla.redhat.com/2274020',
-                'https://bugzilla.redhat.com/2281029',
-                'https://bugzilla.redhat.com/2283757',
-                'https://bugzilla.redhat.com/2294581',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2274020',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2281029',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2283757',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2294581',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-2511',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-4603',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-4741',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-5535',
-                'https://errata.almalinux.org/9/ALSA-2024-9333.html',
-                'https://errata.rockylinux.org/RLSA-2024:9333',
-                'https://github.com/openssl/openssl/commit/704f725b96aa373ee45ecfb23f6abfe8be8d9177',
-                'https://github.com/openssl/openssl/commit/b3f0eb0a295f58f16ba43ba99dad70d4ee5c437d',
-                'https://github.com/openssl/openssl/commit/c88c3de51020c37e8706bf7a682a162593053aac',
-                'https://github.com/openssl/openssl/commit/e5093133c35ca82874ad83697af76f4b0f7e3bd8',
-                'https://github.openssl.org/openssl/extended-releases/commit/f7a045f3143fc6da2ee66bf52d8df04829590dd4',
-                'https://linux.oracle.com/cve/CVE-2024-4741.html',
-                'https://linux.oracle.com/errata/ELSA-2024-9333.html',
-                'https://lists.debian.org/debian-lts-announce/2024/10/msg00033.html',
-                'https://lists.debian.org/debian-lts-announce/2024/11/msg00000.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2024-4741',
-                'https://security.netapp.com/advisory/ntap-20240621-0004/',
-                'https://ubuntu.com/security/notices/USN-6937-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2024-4741',
-                'https://www.openssl.org/news/secadv/20240528.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: Use After Free with SSL_free_buffers'
-            },
-            {
-              'cve':  'CVE-2024-5535',
-              'cvss': {
-                'redhat': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-125'
-              ],
-              'description':   'Issue summary: Calling the OpenSSL API function SSL_select_next_proto with an\nempty supported client protocols buffer may cause a crash or memory contents to\nbe sent to the peer.\n\nImpact summary: A buffer overread can have a range of potential consequences\nsuch as unexpected application beahviour or a crash. In particular this issue\ncould result in up to 255 bytes of arbitrary private data from memory being sent\nto the peer leading to a loss of confidentiality. However, only applications\nthat directly call the SSL_select_next_proto function with a 0 length list of\nsupported client protocols are affected by this issue. This would normally never\nbe a valid scenario and is typically not under attacker control but may occur by\naccident in the case of a configuration or programming error in the calling\napplication.\n\nThe OpenSSL API function SSL_select_next_proto is typically used by TLS\napplications that support ALPN (Application Layer Protocol Negotiation) or NPN\n(Next Protocol Negotiation). NPN is older, was never standardised and\nis deprecated in favour of ALPN. We believe that ALPN is significantly more\nwidely deployed than NPN. The SSL_select_next_proto function accepts a list of\nprotocols from the server and a list of protocols from the client and returns\nthe first protocol that appears in the server list that also appears in the\nclient list. In the case of no overlap between the two lists it returns the\nfirst item in the client list. In either case it will signal whether an overlap\nbetween the two lists was found. In the case where SSL_select_next_proto is\ncalled with a zero length client list it fails to notice this condition and\nreturns the memory immediately following the client list pointer (and reports\nthat there was no overlap in the lists).\n\nThis function is typically called from a server side application callback for\nALPN or a client side application callback for NPN. In the case of ALPN the list\nof protocols supplied by the client is guaranteed by libssl to never be zero in\nlength. The list of server protocols comes from the application and should never\nnormally be expected to be of zero length. In this case if the\nSSL_select_next_proto function has been called as expected (with the list\nsupplied by the client passed in the client/client_len parameters), then the\napplication will not be vulnerable to this issue. If the application has\naccidentally been configured with a zero length server list, and has\naccidentally passed that zero length server list in the client/client_len\nparameters, and has additionally failed to correctly handle a "no overlap"\nresponse (which would normally result in a handshake failure in ALPN) then it\nwill be vulnerable to this problem.\n\nIn the case of NPN, the protocol permits the client to opportunistically select\na protocol when there is no overlap. OpenSSL returns the first client protocol\nin the no overlap case in support of this. The list of client protocols comes\nfrom the application and should never normally be expected to be of zero length.\nHowever if the SSL_select_next_proto function is accidentally called with a\nclient_len of 0 then an invalid memory pointer will be returned instead. If the\napplication uses this output as the opportunistic protocol then the loss of\nconfidentiality will occur.\n\nThis issue has been assessed as Low severity because applications are most\nlikely to be vulnerable if they are using NPN instead of ALPN - but NPN is not\nwidely used. It also requires an application configuration or programming error.\nFinally, this issue would not typically be under attacker control making active\nexploitation unlikely.\n\nThe FIPS modules in 3.3, 3.2, 3.1 and 3.0 are not affected by this issue.\n\nDue to the low severity of this issue we are not issuing new releases of\nOpenSSL at this time. The fix will be included in the next releases when they\nbecome available.',
-              'diffID':        'sha256:86ddd1858dda5de0cc1e3cc31a93fddc627a28136b08db8cda7460de39f657a3',
-              'fixedVersions': [
-                '3.0.14-r0'
-              ],
-              'installedVersion': '3.0.7-r2',
-              'packageName':      'libcrypto3',
-              'purl':             'pkg:apk/alpine/libcrypto3@3.0.7-r2?arch=armhf&distro=3.17.1',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2024/06/27/1',
-                'http://www.openwall.com/lists/oss-security/2024/06/28/4',
-                'http://www.openwall.com/lists/oss-security/2024/08/15/1',
-                'https://access.redhat.com/errata/RHSA-2025:1671',
-                'https://access.redhat.com/security/cve/CVE-2024-5535',
-                'https://bugzilla.redhat.com/2294581',
-                'https://bugzilla.redhat.com/2294676',
-                'https://bugzilla.redhat.com/2301888',
-                'https://bugzilla.redhat.com/2318857',
-                'https://bugzilla.redhat.com/2318858',
-                'https://bugzilla.redhat.com/2318870',
-                'https://bugzilla.redhat.com/2318873',
-                'https://bugzilla.redhat.com/2318874',
-                'https://bugzilla.redhat.com/2318876',
-                'https://bugzilla.redhat.com/2318882',
-                'https://bugzilla.redhat.com/2318883',
-                'https://bugzilla.redhat.com/2318884',
-                'https://bugzilla.redhat.com/2318885',
-                'https://bugzilla.redhat.com/2318886',
-                'https://bugzilla.redhat.com/2318897',
-                'https://bugzilla.redhat.com/2318900',
-                'https://bugzilla.redhat.com/2318905',
-                'https://bugzilla.redhat.com/2318914',
-                'https://bugzilla.redhat.com/2318922',
-                'https://bugzilla.redhat.com/2318923',
-                'https://bugzilla.redhat.com/2318925',
-                'https://bugzilla.redhat.com/2318926',
-                'https://bugzilla.redhat.com/2318927',
-                'https://bugzilla.redhat.com/2331191',
-                'https://bugzilla.redhat.com/2339218',
-                'https://bugzilla.redhat.com/2339220',
-                'https://bugzilla.redhat.com/2339221',
-                'https://bugzilla.redhat.com/2339226',
-                'https://bugzilla.redhat.com/2339231',
-                'https://bugzilla.redhat.com/2339236',
-                'https://bugzilla.redhat.com/2339238',
-                'https://bugzilla.redhat.com/2339243',
-                'https://bugzilla.redhat.com/2339247',
-                'https://bugzilla.redhat.com/2339252',
-                'https://bugzilla.redhat.com/2339259',
-                'https://bugzilla.redhat.com/2339266',
-                'https://bugzilla.redhat.com/2339270',
-                'https://bugzilla.redhat.com/2339271',
-                'https://bugzilla.redhat.com/2339275',
-                'https://bugzilla.redhat.com/2339277',
-                'https://bugzilla.redhat.com/2339281',
-                'https://bugzilla.redhat.com/2339284',
-                'https://bugzilla.redhat.com/2339291',
-                'https://bugzilla.redhat.com/2339293',
-                'https://bugzilla.redhat.com/2339295',
-                'https://bugzilla.redhat.com/2339299',
-                'https://bugzilla.redhat.com/2339300',
-                'https://bugzilla.redhat.com/2339304',
-                'https://bugzilla.redhat.com/2339305',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2274020',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2281029',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2283757',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2294581',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-2511',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-4603',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-4741',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-5535',
-                'https://errata.almalinux.org/9/ALSA-2025-1671.html',
-                'https://errata.rockylinux.org/RLSA-2024:9333',
-                'https://github.com/openssl/openssl/commit/4ada436a1946cbb24db5ab4ca082b69c1bc10f37',
-                'https://github.com/openssl/openssl/commit/99fb785a5f85315b95288921a321a935ea29a51e',
-                'https://github.com/openssl/openssl/commit/cf6f91f6121f4db167405db2f0de410a456f260c',
-                'https://github.com/openssl/openssl/commit/e86ac436f0bd54d4517745483e2315650fae7b2c',
-                'https://github.openssl.org/openssl/extended-releases/commit/9947251413065a05189a63c9b7a6c1d4e224c21c',
-                'https://github.openssl.org/openssl/extended-releases/commit/b78ec0824da857223486660177d3b1f255c65d87',
-                'https://linux.oracle.com/cve/CVE-2024-5535.html',
-                'https://linux.oracle.com/errata/ELSA-2025-1673.html',
-                'https://lists.debian.org/debian-lts-announce/2024/10/msg00033.html',
-                'https://lists.debian.org/debian-lts-announce/2024/11/msg00000.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2024-5535',
-                'https://openssl.org/news/secadv/20240627.txt',
-                'https://security.netapp.com/advisory/ntap-20240712-0005/',
-                'https://security.netapp.com/advisory/ntap-20241025-0006/',
-                'https://security.netapp.com/advisory/ntap-20241025-0010/',
-                'https://ubuntu.com/security/notices/USN-6937-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2024-5535',
-                'https://www.openssl.org/news/secadv/20240627.txt',
-                'https://www.oracle.com/security-alerts/cpuoct2024.html#AppendixMSQL'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: SSL_select_next_proto buffer overread'
-            },
-            {
-              'cve':  'CVE-2024-2511',
-              'cvss': {
-                'redhat': {
-                  'v3score':  '3.7',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L'
-                }
-              },
-              'cwes': [
-                'CWE-1325'
-              ],
-              'description':   'Issue summary: Some non-default TLS server configurations can cause unbounded\nmemory growth when processing TLSv1.3 sessions\n\nImpact summary: An attacker may exploit certain server configurations to trigger\nunbounded memory growth that would lead to a Denial of Service\n\nThis problem can occur in TLSv1.3 if the non-default SSL_OP_NO_TICKET option is\nbeing used (but not if early_data support is also configured and the default\nanti-replay protection is in use). In this case, under certain conditions, the\nsession cache can get into an incorrect state and it will fail to flush properly\nas it fills. The session cache will continue to grow in an unbounded manner. A\nmalicious client could deliberately create the scenario for this failure to\nforce a Denial of Service. It may also happen by accident in normal operation.\n\nThis issue only affects TLS servers supporting TLSv1.3. It does not affect TLS\nclients.\n\nThe FIPS modules in 3.2, 3.1 and 3.0 are not affected by this issue. OpenSSL\n1.0.2 is also not affected by this issue.',
-              'diffID':        'sha256:86ddd1858dda5de0cc1e3cc31a93fddc627a28136b08db8cda7460de39f657a3',
-              'fixedVersions': [
-                '3.0.12-r5'
-              ],
-              'installedVersion': '3.0.7-r2',
-              'packageName':      'libcrypto3',
-              'purl':             'pkg:apk/alpine/libcrypto3@3.0.7-r2?arch=armhf&distro=3.17.1',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2024/04/08/5',
-                'https://access.redhat.com/errata/RHSA-2024:9333',
-                'https://access.redhat.com/security/cve/CVE-2024-2511',
-                'https://bugzilla.redhat.com/2274020',
-                'https://bugzilla.redhat.com/2281029',
-                'https://bugzilla.redhat.com/2283757',
-                'https://bugzilla.redhat.com/2294581',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2274020',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2281029',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2283757',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2294581',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-2511',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-4603',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-4741',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-5535',
-                'https://errata.almalinux.org/9/ALSA-2024-9333.html',
-                'https://errata.rockylinux.org/RLSA-2024:9333',
-                'https://github.com/openssl/openssl/commit/7e4d731b1c07201ad9374c1cd9ac5263bdf35bce',
-                'https://github.com/openssl/openssl/commit/b52867a9f618bb955bed2a3ce3db4d4f97ed8e5d',
-                'https://github.com/openssl/openssl/commit/e9d7083e241670332e0443da0f0d4ffb52829f08',
-                'https://github.openssl.org/openssl/extended-releases/commit/5f8d25770ae6437db119dfc951e207271a326640',
-                'https://linux.oracle.com/cve/CVE-2024-2511.html',
-                'https://linux.oracle.com/errata/ELSA-2024-9333.html',
-                'https://lists.debian.org/debian-lts-announce/2024/10/msg00033.html',
-                'https://lists.debian.org/debian-lts-announce/2024/11/msg00000.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2024-2511',
-                'https://security.netapp.com/advisory/ntap-20240503-0013/',
-                'https://ubuntu.com/security/notices/USN-6937-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2024-2511',
-                'https://www.openssl.org/news/secadv/20240408.txt',
-                'https://www.openssl.org/news/vulnerabilities.html'
-              ],
-              'severity':   'LOW',
-              'suppressed': false,
-              'title':      'openssl: Unbounded memory growth with session handling in TLSv1.3'
-            },
-            {
-              'cve':  'CVE-2024-9143',
-              'cvss': {
-                'redhat': {
-                  'v3score':  '3.7',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L'
-                }
-              },
-              'cwes': [
-                'CWE-125',
-                'CWE-787'
-              ],
-              'description':   "Issue summary: Use of the low-level GF(2^m) elliptic curve APIs with untrusted\nexplicit values for the field polynomial can lead to out-of-bounds memory reads\nor writes.\n\nImpact summary: Out of bound memory writes can lead to an application crash or\neven a possibility of a remote code execution, however, in all the protocols\ninvolving Elliptic Curve Cryptography that we're aware of, either only \"named\ncurves\" are supported, or, if explicit curve parameters are supported, they\nspecify an X9.62 encoding of binary (GF(2^m)) curves that can't represent\nproblematic input values. Thus the likelihood of existence of a vulnerable\napplication is low.\n\nIn particular, the X9.62 encoding is used for ECC keys in X.509 certificates,\nso problematic inputs cannot occur in the context of processing X.509\ncertificates.  Any problematic use-cases would have to be using an \"exotic\"\ncurve encoding.\n\nThe affected APIs include: EC_GROUP_new_curve_GF2m(), EC_GROUP_new_from_params(),\nand various supporting BN_GF2m_*() functions.\n\nApplications working with \"exotic\" explicit binary (GF(2^m)) curve parameters,\nthat make it possible to represent invalid field polynomials with a zero\nconstant term, via the above or similar APIs, may terminate abruptly as a\nresult of reading or writing outside of array bounds.  Remote code execution\ncannot easily be ruled out.\n\nThe FIPS modules in 3.3, 3.2, 3.1 and 3.0 are not affected by this issue.",
-              'diffID':        'sha256:86ddd1858dda5de0cc1e3cc31a93fddc627a28136b08db8cda7460de39f657a3',
-              'fixedVersions': [
-                '3.0.15-r1'
-              ],
-              'installedVersion': '3.0.7-r2',
-              'packageName':      'libcrypto3',
-              'purl':             'pkg:apk/alpine/libcrypto3@3.0.7-r2?arch=armhf&distro=3.17.1',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2024/10/16/1',
-                'http://www.openwall.com/lists/oss-security/2024/10/23/1',
-                'http://www.openwall.com/lists/oss-security/2024/10/24/1',
-                'https://access.redhat.com/security/cve/CVE-2024-9143',
-                'https://github.com/openssl/openssl/commit/72ae83ad214d2eef262461365a1975707f862712',
-                'https://github.com/openssl/openssl/commit/bc7e04d7c8d509fb78fc0e285aa948fb0da04700',
-                'https://github.com/openssl/openssl/commit/c0d3e4d32d2805f49bec30547f225bc4d092e1f4',
-                'https://github.com/openssl/openssl/commit/fdf6723362ca51bd883295efe206cb5b1cfa5154',
-                'https://github.openssl.org/openssl/extended-releases/commit/8efc0cbaa8ebba8e116f7b81a876a4123594d86a',
-                'https://github.openssl.org/openssl/extended-releases/commit/9d576994cec2b7aa37a91740ea7e680810957e41',
-                'https://lists.debian.org/debian-lts-announce/2024/10/msg00033.html',
-                'https://lists.debian.org/debian-lts-announce/2024/11/msg00000.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2024-9143',
-                'https://openssl-library.org/news/secadv/20241016.txt',
-                'https://security.netapp.com/advisory/ntap-20241101-0001/',
-                'https://ubuntu.com/security/notices/USN-7264-1',
-                'https://ubuntu.com/security/notices/USN-7278-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2024-9143'
-              ],
-              'severity':   'LOW',
-              'suppressed': false,
-              'title':      'openssl: Low-level invalid GF(2^m) parameters lead to OOB memory access'
-            },
-            {
-              'cve':  'CVE-2022-4450',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'nvd': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-415'
-              ],
-              'description':   'The function PEM_read_bio_ex() reads a PEM file from a BIO and parses and\ndecodes the "name" (e.g. "CERTIFICATE"), any header data and the payload data.\nIf the function succeeds then the "name_out", "header" and "data" arguments are\npopulated with pointers to buffers containing the relevant decoded data. The\ncaller is responsible for freeing those buffers. It is possible to construct a\nPEM file that results in 0 bytes of payload data. In this case PEM_read_bio_ex()\nwill return a failure code but will populate the header argument with a pointer\nto a buffer that has already been freed. If the caller also frees this buffer\nthen a double free will occur. This will most likely lead to a crash. This\ncould be exploited by an attacker who has the ability to supply malicious PEM\nfiles for parsing to achieve a denial of service attack.\n\nThe functions PEM_read_bio() and PEM_read() are simple wrappers around\nPEM_read_bio_ex() and therefore these functions are also directly affected.\n\nThese functions are also called indirectly by a number of other OpenSSL\nfunctions including PEM_X509_INFO_read_bio_ex() and\nSSL_CTX_use_serverinfo_file() which are also vulnerable. Some OpenSSL internal\nuses of these functions are not vulnerable because the caller does not free the\nheader argument if PEM_read_bio_ex() returns a failure code. These locations\ninclude the PEM_read_bio_TYPE() functions as well as the decoders introduced in\nOpenSSL 3.0.\n\nThe OpenSSL asn1parse command line application is also impacted by this issue.',
-              'diffID':        'sha256:86ddd1858dda5de0cc1e3cc31a93fddc627a28136b08db8cda7460de39f657a3',
-              'fixedVersions': [
-                '3.0.8-r0'
-              ],
-              'installedVersion': '3.0.7-r2',
-              'packageName':      'libssl3',
-              'purl':             'pkg:apk/alpine/libssl3@3.0.7-r2?arch=armhf&distro=3.17.1',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2023:2165',
-                'https://access.redhat.com/security/cve/CVE-2022-4450',
-                'https://bugzilla.redhat.com/1960321',
-                'https://bugzilla.redhat.com/2164440',
-                'https://bugzilla.redhat.com/2164487',
-                'https://bugzilla.redhat.com/2164492',
-                'https://bugzilla.redhat.com/2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144000',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144003',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144006',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144008',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144010',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144012',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144015',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144017',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144019',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2145170',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2158412',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164440',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164487',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164488',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164492',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164497',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164499',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164500',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4203',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4304',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4450',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0215',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0216',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0217',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0286',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0401',
-                'https://errata.almalinux.org/9/ALSA-2023-2165.html',
-                'https://errata.rockylinux.org/RLSA-2023:0946',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=63bcf189be73a9cc1264059bed6f57974be74a83',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=bbcf509bd046b34cca19c766bbddc31683d0858b',
-                'https://linux.oracle.com/cve/CVE-2022-4450.html',
-                'https://linux.oracle.com/errata/ELSA-2023-32791.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2022-4450',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0003',
-                'https://rustsec.org/advisories/RUSTSEC-2023-0010.html',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://ubuntu.com/security/notices/USN-5844-1',
-                'https://ubuntu.com/security/notices/USN-6564-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2022-4450',
-                'https://www.openssl.org/news/secadv/20230207.txt'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: double free after calling PEM_read_bio_ex'
-            },
-            {
-              'cve':  'CVE-2023-0215',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'nvd': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   'The public API function BIO_new_NDEF is a helper function used for streaming\nASN.1 data via a BIO. It is primarily used internally to OpenSSL to support the\nSMIME, CMS and PKCS7 streaming capabilities, but may also be called directly by\nend user applications.\n\nThe function receives a BIO from the caller, prepends a new BIO_f_asn1 filter\nBIO onto the front of it to form a BIO chain, and then returns the new head of\nthe BIO chain to the caller. Under certain conditions, for example if a CMS\nrecipient public key is invalid, the new filter BIO is freed and the function\nreturns a NULL result indicating a failure. However, in this case, the BIO chain\nis not properly cleaned up and the BIO passed by the caller still retains\ninternal pointers to the previously freed filter BIO. If the caller then goes on\nto call BIO_pop() on the BIO then a use-after-free will occur. This will most\nlikely result in a crash.\n\n\n\nThis scenario occurs directly in the internal function B64_write_ASN1() which\nmay cause BIO_new_NDEF() to be called and will subsequently call BIO_pop() on\nthe BIO. This internal function is in turn called by the public API functions\nPEM_write_bio_ASN1_stream, PEM_write_bio_CMS_stream, PEM_write_bio_PKCS7_stream,\nSMIME_write_ASN1, SMIME_write_CMS and SMIME_write_PKCS7.\n\nOther public API functions that may be impacted by this include\ni2d_ASN1_bio_stream, BIO_new_CMS, BIO_new_PKCS7, i2d_CMS_bio_stream and\ni2d_PKCS7_bio_stream.\n\nThe OpenSSL cms and smime command line applications are similarly affected.',
-              'diffID':        'sha256:86ddd1858dda5de0cc1e3cc31a93fddc627a28136b08db8cda7460de39f657a3',
-              'fixedVersions': [
-                '3.0.8-r0'
-              ],
-              'installedVersion': '3.0.7-r2',
-              'packageName':      'libssl3',
-              'purl':             'pkg:apk/alpine/libssl3@3.0.7-r2?arch=armhf&distro=3.17.1',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2023:2165',
-                'https://access.redhat.com/security/cve/CVE-2023-0215',
-                'https://bugzilla.redhat.com/1960321',
-                'https://bugzilla.redhat.com/2164440',
-                'https://bugzilla.redhat.com/2164487',
-                'https://bugzilla.redhat.com/2164492',
-                'https://bugzilla.redhat.com/2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144000',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144003',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144006',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144008',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144010',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144012',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144015',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144017',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144019',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2145170',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2158412',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164440',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164487',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164488',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164492',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164497',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164499',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164500',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4203',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4304',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4450',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0215',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0216',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0217',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0286',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0401',
-                'https://errata.almalinux.org/9/ALSA-2023-2165.html',
-                'https://errata.rockylinux.org/RLSA-2023:0946',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=8818064ce3c3c0f1b740a5aaba2a987e75bfbafd',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=9816136fe31d92ace4037d5da5257f763aeeb4eb',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=c3829dd8825c654652201e16f8a0a0c46ee3f344',
-                'https://linux.oracle.com/cve/CVE-2023-0215.html',
-                'https://linux.oracle.com/errata/ELSA-2023-32791.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-0215',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0003',
-                'https://rustsec.org/advisories/RUSTSEC-2023-0009.html',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://security.netapp.com/advisory/ntap-20230427-0007',
-                'https://security.netapp.com/advisory/ntap-20230427-0007/',
-                'https://security.netapp.com/advisory/ntap-20230427-0009',
-                'https://security.netapp.com/advisory/ntap-20230427-0009/',
-                'https://security.netapp.com/advisory/ntap-20240621-0006',
-                'https://security.netapp.com/advisory/ntap-20240621-0006/',
-                'https://ubuntu.com/security/notices/USN-5844-1',
-                'https://ubuntu.com/security/notices/USN-5845-1',
-                'https://ubuntu.com/security/notices/USN-5845-2',
-                'https://ubuntu.com/security/notices/USN-6564-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-0215',
-                'https://www.openssl.org/news/secadv/20230207.txt'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: use-after-free following BIO_new_NDEF'
-            },
-            {
-              'cve':  'CVE-2023-0216',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'nvd': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-476'
-              ],
-              'description':   'An invalid pointer dereference on read can be triggered when an\napplication tries to load malformed PKCS7 data with the\nd2i_PKCS7(), d2i_PKCS7_bio() or d2i_PKCS7_fp() functions.\n\nThe result of the dereference is an application crash which could\nlead to a denial of service attack. The TLS implementation in OpenSSL\ndoes not call this function however third party applications might\ncall these functions on untrusted data.',
-              'diffID':        'sha256:86ddd1858dda5de0cc1e3cc31a93fddc627a28136b08db8cda7460de39f657a3',
-              'fixedVersions': [
-                '3.0.8-r0'
-              ],
-              'installedVersion': '3.0.7-r2',
-              'packageName':      'libssl3',
-              'purl':             'pkg:apk/alpine/libssl3@3.0.7-r2?arch=armhf&distro=3.17.1',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2023:0946',
-                'https://access.redhat.com/security/cve/CVE-2023-0216',
-                'https://bugzilla.redhat.com/2164440',
-                'https://bugzilla.redhat.com/2164487',
-                'https://bugzilla.redhat.com/2164488',
-                'https://bugzilla.redhat.com/2164492',
-                'https://bugzilla.redhat.com/2164494',
-                'https://bugzilla.redhat.com/2164497',
-                'https://bugzilla.redhat.com/2164499',
-                'https://bugzilla.redhat.com/2164500',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144000',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144003',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144006',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144008',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144010',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144012',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144015',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144017',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144019',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2145170',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2158412',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164440',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164487',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164488',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164492',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164497',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164499',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164500',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4203',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4304',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4450',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0215',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0216',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0217',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0286',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0401',
-                'https://errata.almalinux.org/9/ALSA-2023-0946.html',
-                'https://errata.rockylinux.org/RLSA-2023:0946',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=934a04f0e775309cadbef0aa6b9692e1b12a76c6',
-                'https://linux.oracle.com/cve/CVE-2023-0216.html',
-                'https://linux.oracle.com/errata/ELSA-2023-12152.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-0216',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0003',
-                'https://rustsec.org/advisories/RUSTSEC-2023-0011.html',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://ubuntu.com/security/notices/USN-5844-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-0216',
-                'https://www.openssl.org/news/secadv/20230207.txt'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: invalid pointer dereference in d2i_PKCS7 functions'
-            },
-            {
-              'cve':  'CVE-2023-0217',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'nvd': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-476'
-              ],
-              'description':   'An invalid pointer dereference on read can be triggered when an\napplication tries to check a malformed DSA public key by the\nEVP_PKEY_public_check() function. This will most likely lead\nto an application crash. This function can be called on public\nkeys supplied from untrusted sources which could allow an attacker\nto cause a denial of service attack.\n\nThe TLS implementation in OpenSSL does not call this function\nbut applications might call the function if there are additional\nsecurity requirements imposed by standards such as FIPS 140-3.',
-              'diffID':        'sha256:86ddd1858dda5de0cc1e3cc31a93fddc627a28136b08db8cda7460de39f657a3',
-              'fixedVersions': [
-                '3.0.8-r0'
-              ],
-              'installedVersion': '3.0.7-r2',
-              'packageName':      'libssl3',
-              'purl':             'pkg:apk/alpine/libssl3@3.0.7-r2?arch=armhf&distro=3.17.1',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2023:0946',
-                'https://access.redhat.com/security/cve/CVE-2023-0217',
-                'https://bugzilla.redhat.com/2164440',
-                'https://bugzilla.redhat.com/2164487',
-                'https://bugzilla.redhat.com/2164488',
-                'https://bugzilla.redhat.com/2164492',
-                'https://bugzilla.redhat.com/2164494',
-                'https://bugzilla.redhat.com/2164497',
-                'https://bugzilla.redhat.com/2164499',
-                'https://bugzilla.redhat.com/2164500',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144000',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144003',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144006',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144008',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144010',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144012',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144015',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144017',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144019',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2145170',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2158412',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164440',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164487',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164488',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164492',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164497',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164499',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164500',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4203',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4304',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4450',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0215',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0216',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0217',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0286',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0401',
-                'https://errata.almalinux.org/9/ALSA-2023-0946.html',
-                'https://errata.rockylinux.org/RLSA-2023:0946',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=23985bac83fd50c8e29431009302b5442f985096',
-                'https://linux.oracle.com/cve/CVE-2023-0217.html',
-                'https://linux.oracle.com/errata/ELSA-2023-12152.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-0217',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0003',
-                'https://rustsec.org/advisories/RUSTSEC-2023-0012.html',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://ubuntu.com/security/notices/USN-5844-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-0217',
-                'https://www.openssl.org/news/secadv/20230207.txt'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: NULL dereference validating DSA public key'
-            },
-            {
-              'cve':  'CVE-2023-0286',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '7.4',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H'
-                },
-                'nvd': {
-                  'v3score':  '7.4',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.4',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-843'
-              ],
-              'description':   'There is a type confusion vulnerability relating to X.400 address processing\ninside an X.509 GeneralName. X.400 addresses were parsed as an ASN1_STRING but\nthe public structure definition for GENERAL_NAME incorrectly specified the type\nof the x400Address field as ASN1_TYPE. This field is subsequently interpreted by\nthe OpenSSL function GENERAL_NAME_cmp as an ASN1_TYPE rather than an\nASN1_STRING.\n\nWhen CRL checking is enabled (i.e. the application sets the\nX509_V_FLAG_CRL_CHECK flag), this vulnerability may allow an attacker to pass\narbitrary pointers to a memcmp call, enabling them to read memory contents or\nenact a denial of service. In most cases, the attack requires the attacker to\nprovide both the certificate chain and CRL, neither of which need to have a\nvalid signature. If the attacker only controls one of these inputs, the other\ninput must already contain an X.400 address as a CRL distribution point, which\nis uncommon. As such, this vulnerability is most likely to only affect\napplications which have implemented their own functionality for retrieving CRLs\nover a network.',
-              'diffID':        'sha256:86ddd1858dda5de0cc1e3cc31a93fddc627a28136b08db8cda7460de39f657a3',
-              'fixedVersions': [
-                '3.0.8-r0'
-              ],
-              'installedVersion': '3.0.7-r2',
-              'packageName':      'libssl3',
-              'purl':             'pkg:apk/alpine/libssl3@3.0.7-r2?arch=armhf&distro=3.17.1',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2025:7937',
-                'https://access.redhat.com/security/cve/CVE-2023-0286',
-                'https://access.redhat.com/security/cve/cve-2023-0286',
-                'https://bugzilla.redhat.com/2164440',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144000',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144003',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144006',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144008',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144010',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144012',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144015',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144017',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144019',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2145170',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2158412',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164440',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164487',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164488',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164492',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164497',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164499',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164500',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4203',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4304',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4450',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0215',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0216',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0217',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0286',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0401',
-                'https://errata.almalinux.org/9/ALSA-2025-7937.html',
-                'https://errata.rockylinux.org/RLSA-2023:0946',
-                'https://ftp.openbsd.org/pub/OpenBSD/LibreSSL/libressl-3.6.2-relnotes.txt',
-                'https://ftp.openbsd.org/pub/OpenBSD/patches/7.2/common/018_x509.patch.sig',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=2c6c9d439b484e1ba9830d8454a34fa4f80fdfe9',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=2f7530077e0ef79d98718138716bc51ca0cad658',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=fd2af07dc083a350c959147097003a14a5e8ac4d',
-                'https://github.com/pyca/cryptography',
-                'https://github.com/pyca/cryptography/security/advisories/GHSA-x4qr-2fvf-3mr5',
-                'https://linux.oracle.com/cve/CVE-2023-0286.html',
-                'https://linux.oracle.com/errata/ELSA-2025-7937.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-0286',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0003',
-                'https://rustsec.org/advisories/RUSTSEC-2023-0006.html',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://ubuntu.com/security/notices/USN-5844-1',
-                'https://ubuntu.com/security/notices/USN-5845-1',
-                'https://ubuntu.com/security/notices/USN-5845-2',
-                'https://ubuntu.com/security/notices/USN-6564-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-0286',
-                'https://www.openssl.org/news/secadv/20230207.txt'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: X.400 address type confusion in X.509 GeneralName'
-            },
-            {
-              'cve':  'CVE-2023-0401',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'nvd': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-476'
-              ],
-              'description':   'A NULL pointer can be dereferenced when signatures are being\nverified on PKCS7 signed or signedAndEnveloped data. In case the hash\nalgorithm used for the signature is known to the OpenSSL library but\nthe implementation of the hash algorithm is not available the digest\ninitialization will fail. There is a missing check for the return\nvalue from the initialization function which later leads to invalid\nusage of the digest API most likely leading to a crash.\n\nThe unavailability of an algorithm can be caused by using FIPS\nenabled configuration of providers or more commonly by not loading\nthe legacy provider.\n\nPKCS7 data is processed by the SMIME library calls and also by the\ntime stamp (TS) library calls. The TLS implementation in OpenSSL does\nnot call these functions however third party applications would be\naffected if they call these functions to verify signatures on untrusted\ndata.',
-              'diffID':        'sha256:86ddd1858dda5de0cc1e3cc31a93fddc627a28136b08db8cda7460de39f657a3',
-              'fixedVersions': [
-                '3.0.8-r0'
-              ],
-              'installedVersion': '3.0.7-r2',
-              'packageName':      'libssl3',
-              'purl':             'pkg:apk/alpine/libssl3@3.0.7-r2?arch=armhf&distro=3.17.1',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2023:0946',
-                'https://access.redhat.com/security/cve/CVE-2023-0401',
-                'https://bugzilla.redhat.com/2164440',
-                'https://bugzilla.redhat.com/2164487',
-                'https://bugzilla.redhat.com/2164488',
-                'https://bugzilla.redhat.com/2164492',
-                'https://bugzilla.redhat.com/2164494',
-                'https://bugzilla.redhat.com/2164497',
-                'https://bugzilla.redhat.com/2164499',
-                'https://bugzilla.redhat.com/2164500',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144000',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144003',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144006',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144008',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144010',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144012',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144015',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144017',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144019',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2145170',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2158412',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164440',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164487',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164488',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164492',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164497',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164499',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164500',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4203',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4304',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4450',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0215',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0216',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0217',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0286',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0401',
-                'https://errata.almalinux.org/9/ALSA-2023-0946.html',
-                'https://errata.rockylinux.org/RLSA-2023:0946',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=d3b6dfd70db844c4499bec6ad6601623a565e674',
-                'https://github.com/alexcrichton/openssl-src-rs',
-                'https://linux.oracle.com/cve/CVE-2023-0401.html',
-                'https://linux.oracle.com/errata/ELSA-2023-12152.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-0401',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0003',
-                'https://rustsec.org/advisories/RUSTSEC-2023-0013.html',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://ubuntu.com/security/notices/USN-5844-1',
-                'https://ubuntu.com/security/notices/USN-6564-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-0401',
-                'https://www.openssl.org/news/secadv/20230207.txt'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: NULL dereference during PKCS7 data verification'
-            },
-            {
-              'cve':  'CVE-2023-0464',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-295'
-              ],
-              'description':   "A security vulnerability has been identified in all supported versions\n\nof OpenSSL related to the verification of X.509 certificate chains\nthat include policy constraints.  Attackers may be able to exploit this\nvulnerability by creating a malicious certificate chain that triggers\nexponential use of computational resources, leading to a denial-of-service\n(DoS) attack on affected systems.\n\nPolicy processing is disabled by default but can be enabled by passing\nthe `-policy' argument to the command line utilities or by calling the\n`X509_VERIFY_PARAM_set1_policies()' function.",
-              'diffID':        'sha256:86ddd1858dda5de0cc1e3cc31a93fddc627a28136b08db8cda7460de39f657a3',
-              'fixedVersions': [
-                '3.0.8-r1'
-              ],
-              'installedVersion': '3.0.7-r2',
-              'packageName':      'libssl3',
-              'purl':             'pkg:apk/alpine/libssl3@3.0.7-r2?arch=armhf&distro=3.17.1',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2023:3722',
-                'https://access.redhat.com/security/cve/CVE-2023-0464',
-                'https://bugzilla.redhat.com/2181082',
-                'https://bugzilla.redhat.com/2182561',
-                'https://bugzilla.redhat.com/2182565',
-                'https://bugzilla.redhat.com/2188461',
-                'https://bugzilla.redhat.com/2207947',
-                'https://errata.almalinux.org/9/ALSA-2023-3722.html',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=2017771e2db3e2b96f89bbe8766c3209f6a99545',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=2dcd4f1e3115f38cefa43e3efbe9b801c27e642e',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=879f7080d7e141f415c79eaa3a8ac4a3dad0348b',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=959c59c7a0164117e7f8366466a32bb1f8d77ff1',
-                'https://linux.oracle.com/cve/CVE-2023-0464.html',
-                'https://linux.oracle.com/errata/ELSA-2023-3722.html',
-                'https://lists.debian.org/debian-lts-announce/2023/06/msg00011.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-0464',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://security.netapp.com/advisory/ntap-20230406-0006/',
-                'https://security.netapp.com/advisory/ntap-20240621-0006/',
-                'https://ubuntu.com/security/notices/USN-6039-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.couchbase.com/alerts/',
-                'https://www.cve.org/CVERecord?id=CVE-2023-0464',
-                'https://www.debian.org/security/2023/dsa-5417',
-                'https://www.openssl.org/news/secadv/20230322.txt'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: Denial of service by excessive resource usage in verifying X509 policy constraints'
-            },
-            {
-              'cve':  'CVE-2023-5363',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N'
-                },
-                'redhat': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-684'
-              ],
-              'description':   "Issue summary: A bug has been identified in the processing of key and\ninitialisation vector (IV) lengths.  This can lead to potential truncation\nor overruns during the initialisation of some symmetric ciphers.\n\nImpact summary: A truncation in the IV can result in non-uniqueness,\nwhich could result in loss of confidentiality for some cipher modes.\n\nWhen calling EVP_EncryptInit_ex2(), EVP_DecryptInit_ex2() or\nEVP_CipherInit_ex2() the provided OSSL_PARAM array is processed after\nthe key and IV have been established.  Any alterations to the key length,\nvia the \"keylen\" parameter or the IV length, via the \"ivlen\" parameter,\nwithin the OSSL_PARAM array will not take effect as intended, potentially\ncausing truncation or overreading of these values.  The following ciphers\nand cipher modes are impacted: RC2, RC4, RC5, CCM, GCM and OCB.\n\nFor the CCM, GCM and OCB cipher modes, truncation of the IV can result in\nloss of confidentiality.  For example, when following NIST's SP 800-38D\nsection 8.2.1 guidance for constructing a deterministic IV for AES in\nGCM mode, truncation of the counter portion could lead to IV reuse.\n\nBoth truncations and overruns of the key and overruns of the IV will\nproduce incorrect results and could, in some cases, trigger a memory\nexception.  However, these issues are not currently assessed as security\ncritical.\n\nChanging the key and/or IV lengths is not considered to be a common operation\nand the vulnerable API was recently introduced. Furthermore it is likely that\napplication developers will have spotted this problem during testing since\ndecryption would fail unless both peers in the communication were similarly\nvulnerable. For these reasons we expect the probability of an application being\nvulnerable to this to be quite low. However if an application is vulnerable then\nthis issue is considered very serious. For these reasons we have assessed this\nissue as Moderate severity overall.\n\nThe OpenSSL SSL/TLS implementation is not affected by this issue.\n\nThe OpenSSL 3.0 and 3.1 FIPS providers are not affected by this because\nthe issue lies outside of the FIPS provider boundary.\n\nOpenSSL 3.1 and 3.0 are vulnerable to this issue.",
-              'diffID':        'sha256:86ddd1858dda5de0cc1e3cc31a93fddc627a28136b08db8cda7460de39f657a3',
-              'fixedVersions': [
-                '3.0.12-r0'
-              ],
-              'installedVersion': '3.0.7-r2',
-              'packageName':      'libssl3',
-              'purl':             'pkg:apk/alpine/libssl3@3.0.7-r2?arch=armhf&distro=3.17.1',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2023/10/24/1',
-                'https://access.redhat.com/errata/RHSA-2024:0310',
-                'https://access.redhat.com/security/cve/CVE-2023-5363',
-                'https://bugzilla.redhat.com/2243839',
-                'https://errata.almalinux.org/9/ALSA-2024-0310.html',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=0df40630850fb2740e6be6890bb905d3fc623b2d',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=5f69f5c65e483928c4b28ed16af6e5742929f1ee',
-                'https://linux.oracle.com/cve/CVE-2023-5363.html',
-                'https://linux.oracle.com/errata/ELSA-2024-12093.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-5363',
-                'https://security.netapp.com/advisory/ntap-20231027-0010/',
-                'https://security.netapp.com/advisory/ntap-20240201-0003/',
-                'https://security.netapp.com/advisory/ntap-20240201-0004/',
-                'https://security.netapp.com/advisory/ntap-20241108-0002/',
-                'https://ubuntu.com/security/notices/USN-6450-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-5363',
-                'https://www.debian.org/security/2023/dsa-5532',
-                'https://www.openssl.org/news/secadv/20231024.txt'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: Incorrect cipher key and IV length processing'
-            },
-            {
-              'cve':  'CVE-2024-6119',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-843'
-              ],
-              'description':   "Issue summary: Applications performing certificate name checks (e.g., TLS\nclients checking server certificates) may attempt to read an invalid memory\naddress resulting in abnormal termination of the application process.\n\nImpact summary: Abnormal termination of an application can a cause a denial of\nservice.\n\nApplications performing certificate name checks (e.g., TLS clients checking\nserver certificates) may attempt to read an invalid memory address when\ncomparing the expected name with an `otherName` subject alternative name of an\nX.509 certificate. This may result in an exception that terminates the\napplication program.\n\nNote that basic certificate chain validation (signatures, dates, ...) is not\naffected, the denial of service can occur only when the application also\nspecifies an expected DNS name, Email address or IP address.\n\nTLS servers rarely solicit client certificates, and even when they do, they\ngenerally don't perform a name check against a reference identifier (expected\nidentity), but rather extract the presented identity after checking the\ncertificate chain.  So TLS servers are generally not affected and the severity\nof the issue is Moderate.\n\nThe FIPS modules in 3.3, 3.2, 3.1 and 3.0 are not affected by this issue.",
-              'diffID':        'sha256:86ddd1858dda5de0cc1e3cc31a93fddc627a28136b08db8cda7460de39f657a3',
-              'fixedVersions': [
-                '3.0.15-r0'
-              ],
-              'installedVersion': '3.0.7-r2',
-              'packageName':      'libssl3',
-              'purl':             'pkg:apk/alpine/libssl3@3.0.7-r2?arch=armhf&distro=3.17.1',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2024/09/03/4',
-                'https://access.redhat.com/errata/RHSA-2024:8935',
-                'https://access.redhat.com/security/cve/CVE-2024-6119',
-                'https://bugzilla.redhat.com/2306158',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2306158',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-6119',
-                'https://errata.almalinux.org/9/ALSA-2024-8935.html',
-                'https://errata.rockylinux.org/RLSA-2024:6783',
-                'https://github.com/openssl/openssl/commit/05f360d9e849a1b277db628f1f13083a7f8dd04f',
-                'https://github.com/openssl/openssl/commit/06d1dc3fa96a2ba5a3e22735a033012aadc9f0d6',
-                'https://github.com/openssl/openssl/commit/621f3729831b05ee828a3203eddb621d014ff2b2',
-                'https://github.com/openssl/openssl/commit/7dfcee2cd2a63b2c64b9b4b0850be64cb695b0a0',
-                'https://github.com/openssl/openssl/security/advisories/GHSA-5qrj-vq78-58fj',
-                'https://linux.oracle.com/cve/CVE-2024-6119.html',
-                'https://linux.oracle.com/errata/ELSA-2024-8935.html',
-                'https://lists.freebsd.org/archives/freebsd-security/2024-September/000303.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2024-6119',
-                'https://openssl-library.org/news/secadv/20240903.txt',
-                'https://security.netapp.com/advisory/ntap-20240912-0001/',
-                'https://ubuntu.com/security/notices/USN-6986-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2024-6119'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: Possible denial of service in X.509 name checks'
-            },
-            {
-              'cve':  'CVE-2022-4203',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '9.1',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H'
-                },
-                'nvd': {
-                  'v3score':  '4.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '4.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-125'
-              ],
-              'description':   'A read buffer overrun can be triggered in X.509 certificate verification,\nspecifically in name constraint checking. Note that this occurs\nafter certificate chain signature verification and requires either a\nCA to have signed the malicious certificate or for the application to\ncontinue certificate verification despite failure to construct a path\nto a trusted issuer.\n\nThe read buffer overrun might result in a crash which could lead to\na denial of service attack. In theory it could also result in the disclosure\nof private memory contents (such as private keys, or sensitive plaintext)\nalthough we are not aware of any working exploit leading to memory\ncontents disclosure as of the time of release of this advisory.\n\nIn a TLS client, this can be triggered by connecting to a malicious\nserver. In a TLS server, this can be triggered if the server requests\nclient authentication and a malicious client connects.',
-              'diffID':        'sha256:86ddd1858dda5de0cc1e3cc31a93fddc627a28136b08db8cda7460de39f657a3',
-              'fixedVersions': [
-                '3.0.8-r0'
-              ],
-              'installedVersion': '3.0.7-r2',
-              'packageName':      'libssl3',
-              'purl':             'pkg:apk/alpine/libssl3@3.0.7-r2?arch=armhf&distro=3.17.1',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2023:0946',
-                'https://access.redhat.com/security/cve/CVE-2022-4203',
-                'https://bugzilla.redhat.com/2164440',
-                'https://bugzilla.redhat.com/2164487',
-                'https://bugzilla.redhat.com/2164488',
-                'https://bugzilla.redhat.com/2164492',
-                'https://bugzilla.redhat.com/2164494',
-                'https://bugzilla.redhat.com/2164497',
-                'https://bugzilla.redhat.com/2164499',
-                'https://bugzilla.redhat.com/2164500',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144000',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144003',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144006',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144008',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144010',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144012',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144015',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144017',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144019',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2145170',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2158412',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164440',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164487',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164488',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164492',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164497',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164499',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164500',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4203',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4304',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4450',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0215',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0216',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0217',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0286',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0401',
-                'https://errata.almalinux.org/9/ALSA-2023-0946.html',
-                'https://errata.rockylinux.org/RLSA-2023:0946',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=c927a3492698c254637da836762f9b1f86cffabc',
-                'https://linux.oracle.com/cve/CVE-2022-4203.html',
-                'https://linux.oracle.com/errata/ELSA-2023-12152.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2022-4203',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0003',
-                'https://rustsec.org/advisories/RUSTSEC-2023-0008.html',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://ubuntu.com/security/notices/USN-5844-1',
-                'https://www.cve.org/CVERecord?id=CVE-2022-4203',
-                'https://www.openssl.org/news/secadv/20230207.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: read buffer overflow in X.509 certificate verification'
-            },
-            {
-              'cve':  'CVE-2022-4304',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N'
-                },
-                'nvd': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N'
-                },
-                'redhat': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-203'
-              ],
-              'description':   'A timing based side channel exists in the OpenSSL RSA Decryption implementation\nwhich could be sufficient to recover a plaintext across a network in a\nBleichenbacher style attack. To achieve a successful decryption an attacker\nwould have to be able to send a very large number of trial messages for\ndecryption. The vulnerability affects all RSA padding modes: PKCS#1 v1.5,\nRSA-OEAP and RSASVE.\n\nFor example, in a TLS connection, RSA is commonly used by a client to send an\nencrypted pre-master secret to the server. An attacker that had observed a\ngenuine connection between a client and a server could use this flaw to send\ntrial messages to the server and record the time taken to process them. After a\nsufficiently large number of messages the attacker could recover the pre-master\nsecret used for the original connection and thus be able to decrypt the\napplication data sent over that connection.',
-              'diffID':        'sha256:86ddd1858dda5de0cc1e3cc31a93fddc627a28136b08db8cda7460de39f657a3',
-              'fixedVersions': [
-                '3.0.8-r0'
-              ],
-              'installedVersion': '3.0.7-r2',
-              'packageName':      'libssl3',
-              'purl':             'pkg:apk/alpine/libssl3@3.0.7-r2?arch=armhf&distro=3.17.1',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2023:2165',
-                'https://access.redhat.com/security/cve/CVE-2022-4304',
-                'https://bugzilla.redhat.com/1960321',
-                'https://bugzilla.redhat.com/2164440',
-                'https://bugzilla.redhat.com/2164487',
-                'https://bugzilla.redhat.com/2164492',
-                'https://bugzilla.redhat.com/2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144000',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144003',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144006',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144008',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144010',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144012',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144015',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144017',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144019',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2145170',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2158412',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164440',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164487',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164488',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164492',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164497',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164499',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164500',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4203',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4304',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4450',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0215',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0216',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0217',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0286',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0401',
-                'https://errata.almalinux.org/9/ALSA-2023-2165.html',
-                'https://errata.rockylinux.org/RLSA-2023:0946',
-                'https://linux.oracle.com/cve/CVE-2022-4304.html',
-                'https://linux.oracle.com/errata/ELSA-2023-32791.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2022-4304',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0003',
-                'https://rustsec.org/advisories/RUSTSEC-2023-0007.html',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://ubuntu.com/security/notices/USN-5844-1',
-                'https://ubuntu.com/security/notices/USN-6564-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2022-4304',
-                'https://www.openssl.org/news/secadv/20230207.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: timing attack in RSA Decryption implementation'
-            },
-            {
-              'cve':  'CVE-2023-0465',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N'
-                },
-                'redhat': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-295'
-              ],
-              'description':   "Applications that use a non-default option when verifying certificates may be\nvulnerable to an attack from a malicious CA to circumvent certain checks.\n\nInvalid certificate policies in leaf certificates are silently ignored by\nOpenSSL and other certificate policy checks are skipped for that certificate.\nA malicious CA could use this to deliberately assert invalid certificate policies\nin order to circumvent policy checking on the certificate altogether.\n\nPolicy processing is disabled by default but can be enabled by passing\nthe `-policy' argument to the command line utilities or by calling the\n`X509_VERIFY_PARAM_set1_policies()' function.",
-              'diffID':        'sha256:86ddd1858dda5de0cc1e3cc31a93fddc627a28136b08db8cda7460de39f657a3',
-              'fixedVersions': [
-                '3.0.8-r2'
-              ],
-              'installedVersion': '3.0.7-r2',
-              'packageName':      'libssl3',
-              'purl':             'pkg:apk/alpine/libssl3@3.0.7-r2?arch=armhf&distro=3.17.1',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2023:3722',
-                'https://access.redhat.com/security/cve/CVE-2023-0465',
-                'https://bugzilla.redhat.com/2181082',
-                'https://bugzilla.redhat.com/2182561',
-                'https://bugzilla.redhat.com/2182565',
-                'https://bugzilla.redhat.com/2188461',
-                'https://bugzilla.redhat.com/2207947',
-                'https://errata.almalinux.org/9/ALSA-2023-3722.html',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=10325176f3d3e98c6e2b3bf5ab1e3b334de6947a',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=1dd43e0709fece299b15208f36cc7c76209ba0bb',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=b013765abfa80036dc779dd0e50602c57bb3bf95',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=facfb1ab745646e97a1920977ae4a9965ea61d5c',
-                'https://linux.oracle.com/cve/CVE-2023-0465.html',
-                'https://linux.oracle.com/errata/ELSA-2023-3722.html',
-                'https://lists.debian.org/debian-lts-announce/2023/06/msg00011.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-0465',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://security.netapp.com/advisory/ntap-20230414-0001/',
-                'https://ubuntu.com/security/notices/USN-6039-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-0465',
-                'https://www.debian.org/security/2023/dsa-5417',
-                'https://www.openssl.org/news/secadv/20230328.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: Invalid certificate policies in leaf certificates are silently ignored'
-            },
-            {
-              'cve':  'CVE-2023-0466',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N'
-                },
-                'redhat': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-295'
-              ],
-              'description':   'The function X509_VERIFY_PARAM_add0_policy() is documented to\nimplicitly enable the certificate policy check when doing certificate\nverification. However the implementation of the function does not\nenable the check which allows certificates with invalid or incorrect\npolicies to pass the certificate verification.\n\nAs suddenly enabling the policy check could break existing deployments it was\ndecided to keep the existing behavior of the X509_VERIFY_PARAM_add0_policy()\nfunction.\n\nInstead the applications that require OpenSSL to perform certificate\npolicy check need to use X509_VERIFY_PARAM_set1_policies() or explicitly\nenable the policy check by calling X509_VERIFY_PARAM_set_flags() with\nthe X509_V_FLAG_POLICY_CHECK flag argument.\n\nCertificate policy checks are disabled by default in OpenSSL and are not\ncommonly used by applications.',
-              'diffID':        'sha256:86ddd1858dda5de0cc1e3cc31a93fddc627a28136b08db8cda7460de39f657a3',
-              'fixedVersions': [
-                '3.0.8-r3'
-              ],
-              'installedVersion': '3.0.7-r2',
-              'packageName':      'libssl3',
-              'purl':             'pkg:apk/alpine/libssl3@3.0.7-r2?arch=armhf&distro=3.17.1',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2023/09/28/4',
-                'https://access.redhat.com/errata/RHSA-2023:3722',
-                'https://access.redhat.com/security/cve/CVE-2023-0466',
-                'https://bugzilla.redhat.com/2181082',
-                'https://bugzilla.redhat.com/2182561',
-                'https://bugzilla.redhat.com/2182565',
-                'https://bugzilla.redhat.com/2188461',
-                'https://bugzilla.redhat.com/2207947',
-                'https://errata.almalinux.org/9/ALSA-2023-3722.html',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=0d16b7e99aafc0b4a6d729eec65a411a7e025f0a',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=51e8a84ce742db0f6c70510d0159dad8f7825908',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=73398dea26de9899fb4baa94098ad0a61f435c72',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=fc814a30fc4f0bc54fcea7d9a7462f5457aab061',
-                'https://linux.oracle.com/cve/CVE-2023-0466.html',
-                'https://linux.oracle.com/errata/ELSA-2023-3722.html',
-                'https://lists.debian.org/debian-lts-announce/2023/06/msg00011.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-0466',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://security.netapp.com/advisory/ntap-20230414-0001/',
-                'https://ubuntu.com/security/notices/USN-6039-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-0466',
-                'https://www.debian.org/security/2023/dsa-5417',
-                'https://www.openssl.org/news/secadv/20230328.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: Certificate policy check not enabled'
-            },
-            {
-              'cve':  'CVE-2023-1255',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '5.1',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-125'
-              ],
-              'description':   'Issue summary: The AES-XTS cipher decryption implementation for 64 bit ARM\nplatform contains a bug that could cause it to read past the input buffer,\nleading to a crash.\n\nImpact summary: Applications that use the AES-XTS algorithm on the 64 bit ARM\nplatform can crash in rare circumstances. The AES-XTS algorithm is usually\nused for disk encryption.\n\nThe AES-XTS cipher decryption implementation for 64 bit ARM platform will read\npast the end of the ciphertext buffer if the ciphertext size is 4 mod 5 in 16\nbyte blocks, e.g. 144 bytes or 1024 bytes. If the memory after the ciphertext\nbuffer is unmapped, this will trigger a crash which results in a denial of\nservice.\n\nIf an attacker can control the size and location of the ciphertext buffer\nbeing decrypted by an application using AES-XTS on 64 bit ARM, the\napplication is affected. This is fairly unlikely making this issue\na Low severity one.',
-              'diffID':        'sha256:86ddd1858dda5de0cc1e3cc31a93fddc627a28136b08db8cda7460de39f657a3',
-              'fixedVersions': [
-                '3.0.8-r4'
-              ],
-              'installedVersion': '3.0.7-r2',
-              'packageName':      'libssl3',
-              'purl':             'pkg:apk/alpine/libssl3@3.0.7-r2?arch=armhf&distro=3.17.1',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2023:3722',
-                'https://access.redhat.com/security/cve/CVE-2023-1255',
-                'https://bugzilla.redhat.com/2181082',
-                'https://bugzilla.redhat.com/2182561',
-                'https://bugzilla.redhat.com/2182565',
-                'https://bugzilla.redhat.com/2188461',
-                'https://bugzilla.redhat.com/2207947',
-                'https://errata.almalinux.org/9/ALSA-2023-3722.html',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=02ac9c9420275868472f33b01def01218742b8bb',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=bc2f61ad70971869b242fc1cb445b98bad50074a',
-                'https://linux.oracle.com/cve/CVE-2023-1255.html',
-                'https://linux.oracle.com/errata/ELSA-2023-3722.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-1255',
-                'https://security.netapp.com/advisory/ntap-20230908-0006/',
-                'https://ubuntu.com/security/notices/USN-6119-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-1255',
-                'https://www.openssl.org/news/secadv/20230419.txt',
-                'https://www.openssl.org/news/secadv/20230420.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: Input buffer over-read in AES-XTS implementation on 64 bit ARM'
-            },
-            {
-              'cve':  'CVE-2023-2650',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '6.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-770'
-              ],
-              'description':   "Issue summary: Processing some specially crafted ASN.1 object identifiers or\ndata containing them may be very slow.\n\nImpact summary: Applications that use OBJ_obj2txt() directly, or use any of\nthe OpenSSL subsystems OCSP, PKCS7/SMIME, CMS, CMP/CRMF or TS with no message\nsize limit may experience notable to very long delays when processing those\nmessages, which may lead to a Denial of Service.\n\nAn OBJECT IDENTIFIER is composed of a series of numbers - sub-identifiers -\nmost of which have no size limit.  OBJ_obj2txt() may be used to translate\nan ASN.1 OBJECT IDENTIFIER given in DER encoding form (using the OpenSSL\ntype ASN1_OBJECT) to its canonical numeric text form, which are the\nsub-identifiers of the OBJECT IDENTIFIER in decimal form, separated by\nperiods.\n\nWhen one of the sub-identifiers in the OBJECT IDENTIFIER is very large\n(these are sizes that are seen as absurdly large, taking up tens or hundreds\nof KiBs), the translation to a decimal number in text may take a very long\ntime.  The time complexity is O(n^2) with 'n' being the size of the\nsub-identifiers in bytes (*).\n\nWith OpenSSL 3.0, support to fetch cryptographic algorithms using names /\nidentifiers in string form was introduced.  This includes using OBJECT\nIDENTIFIERs in canonical numeric text form as identifiers for fetching\nalgorithms.\n\nSuch OBJECT IDENTIFIERs may be received through the ASN.1 structure\nAlgorithmIdentifier, which is commonly used in multiple protocols to specify\nwhat cryptographic algorithm should be used to sign or verify, encrypt or\ndecrypt, or digest passed data.\n\nApplications that call OBJ_obj2txt() directly with untrusted data are\naffected, with any version of OpenSSL.  If the use is for the mere purpose\nof display, the severity is considered low.\n\nIn OpenSSL 3.0 and newer, this affects the subsystems OCSP, PKCS7/SMIME,\nCMS, CMP/CRMF or TS.  It also impacts anything that processes X.509\ncertificates, including simple things like verifying its signature.\n\nThe impact on TLS is relatively low, because all versions of OpenSSL have a\n100KiB limit on the peer's certificate chain.  Additionally, this only\nimpacts clients, or servers that have explicitly enabled client\nauthentication.\n\nIn OpenSSL 1.1.1 and 1.0.2, this only affects displaying diverse objects,\nsuch as X.509 certificates.  This is assumed to not happen in such a way\nthat it would cause a Denial of Service, so these versions are considered\nnot affected by this issue in such a way that it would be cause for concern,\nand the severity is therefore considered low.",
-              'diffID':        'sha256:86ddd1858dda5de0cc1e3cc31a93fddc627a28136b08db8cda7460de39f657a3',
-              'fixedVersions': [
-                '3.0.9-r0'
-              ],
-              'installedVersion': '3.0.7-r2',
-              'packageName':      'libssl3',
-              'purl':             'pkg:apk/alpine/libssl3@3.0.7-r2?arch=armhf&distro=3.17.1',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2023/05/30/1',
-                'https://access.redhat.com/errata/RHSA-2023:6330',
-                'https://access.redhat.com/security/cve/CVE-2023-2650',
-                'https://bugzilla.redhat.com/1858038',
-                'https://bugzilla.redhat.com/2207947',
-                'https://errata.almalinux.org/9/ALSA-2023-6330.html',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=423a2bc737a908ad0c77bda470b2b59dc879936b',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=853c5e56ee0b8650c73140816bb8b91d6163422c',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=9e209944b35cf82368071f160a744b6178f9b098',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=db779b0e10b047f2585615e0b8f2acdf21f8544a',
-                'https://linux.oracle.com/cve/CVE-2023-2650.html',
-                'https://linux.oracle.com/errata/ELSA-2023-6330.html',
-                'https://lists.debian.org/debian-lts-announce/2023/06/msg00011.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-2650',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0009',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://security.netapp.com/advisory/ntap-20230703-0001/',
-                'https://security.netapp.com/advisory/ntap-20231027-0009/',
-                'https://ubuntu.com/security/notices/USN-6119-1',
-                'https://ubuntu.com/security/notices/USN-6188-1',
-                'https://ubuntu.com/security/notices/USN-6672-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-2650',
-                'https://www.debian.org/security/2023/dsa-5417',
-                'https://www.openssl.org/news/secadv/20230530.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: Possible DoS translating ASN.1 object identifiers'
-            },
-            {
-              'cve':  'CVE-2023-2975',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N'
-                },
-                'redhat': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-354',
-                'CWE-287'
-              ],
-              'description':   'Issue summary: The AES-SIV cipher implementation contains a bug that causes\nit to ignore empty associated data entries which are unauthenticated as\na consequence.\n\nImpact summary: Applications that use the AES-SIV algorithm and want to\nauthenticate empty data entries as associated data can be misled by removing,\nadding or reordering such empty entries as these are ignored by the OpenSSL\nimplementation. We are currently unaware of any such applications.\n\nThe AES-SIV algorithm allows for authentication of multiple associated\ndata entries along with the encryption. To authenticate empty data the\napplication has to call EVP_EncryptUpdate() (or EVP_CipherUpdate()) with\nNULL pointer as the output buffer and 0 as the input buffer length.\nThe AES-SIV implementation in OpenSSL just returns success for such a call\ninstead of performing the associated data authentication operation.\nThe empty data thus will not be authenticated.\n\nAs this issue does not affect non-empty associated data authentication and\nwe expect it to be rare for an application to use empty associated data\nentries this is qualified as Low severity issue.',
-              'diffID':        'sha256:86ddd1858dda5de0cc1e3cc31a93fddc627a28136b08db8cda7460de39f657a3',
-              'fixedVersions': [
-                '3.0.9-r2'
-              ],
-              'installedVersion': '3.0.7-r2',
-              'packageName':      'libssl3',
-              'purl':             'pkg:apk/alpine/libssl3@3.0.7-r2?arch=armhf&distro=3.17.1',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2023/07/15/1',
-                'http://www.openwall.com/lists/oss-security/2023/07/19/5',
-                'https://access.redhat.com/errata/RHSA-2024:2447',
-                'https://access.redhat.com/security/cve/CVE-2023-2975',
-                'https://bugzilla.redhat.com/2223016',
-                'https://bugzilla.redhat.com/2224962',
-                'https://bugzilla.redhat.com/2227852',
-                'https://bugzilla.redhat.com/2248616',
-                'https://bugzilla.redhat.com/2257571',
-                'https://bugzilla.redhat.com/2258502',
-                'https://bugzilla.redhat.com/2259944',
-                'https://errata.almalinux.org/9/ALSA-2024-2447.html',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=00e2f5eea29994d19293ec4e8c8775ba73678598',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=6a83f0c958811f07e0d11dfc6b5a6a98edfd5bdc',
-                'https://linux.oracle.com/cve/CVE-2023-2975.html',
-                'https://linux.oracle.com/errata/ELSA-2024-2447.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-2975',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://security.netapp.com/advisory/ntap-20230725-0004/',
-                'https://ubuntu.com/security/notices/USN-6450-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-2975',
-                'https://www.openssl.org/news/secadv/20230714.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: AES-SIV cipher implementation contains a bug that causes it to ignore empty associated data entries'
-            },
-            {
-              'cve':  'CVE-2023-3446',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L'
-                },
-                'redhat': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L'
-                }
-              },
-              'cwes': [
-                'CWE-606',
-                'CWE-1333'
-              ],
-              'description':   "Issue summary: Checking excessively long DH keys or parameters may be very slow.\n\nImpact summary: Applications that use the functions DH_check(), DH_check_ex()\nor EVP_PKEY_param_check() to check a DH key or DH parameters may experience long\ndelays. Where the key or parameters that are being checked have been obtained\nfrom an untrusted source this may lead to a Denial of Service.\n\nThe function DH_check() performs various checks on DH parameters. One of those\nchecks confirms that the modulus ('p' parameter) is not too large. Trying to use\na very large modulus is slow and OpenSSL will not normally use a modulus which\nis over 10,000 bits in length.\n\nHowever the DH_check() function checks numerous aspects of the key or parameters\nthat have been supplied. Some of those checks use the supplied modulus value\neven if it has already been found to be too large.\n\nAn application that calls DH_check() and supplies a key or parameters obtained\nfrom an untrusted source could be vulernable to a Denial of Service attack.\n\nThe function DH_check() is itself called by a number of other OpenSSL functions.\nAn application calling any of those other functions may similarly be affected.\nThe other functions affected by this are DH_check_ex() and\nEVP_PKEY_param_check().\n\nAlso vulnerable are the OpenSSL dhparam and pkeyparam command line applications\nwhen using the '-check' option.\n\nThe OpenSSL SSL/TLS implementation is not affected by this issue.\nThe OpenSSL 3.0 and 3.1 FIPS providers are not affected by this issue.",
-              'diffID':        'sha256:86ddd1858dda5de0cc1e3cc31a93fddc627a28136b08db8cda7460de39f657a3',
-              'fixedVersions': [
-                '3.0.9-r3'
-              ],
-              'installedVersion': '3.0.7-r2',
-              'packageName':      'libssl3',
-              'purl':             'pkg:apk/alpine/libssl3@3.0.7-r2?arch=armhf&distro=3.17.1',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2023/07/19/4',
-                'http://www.openwall.com/lists/oss-security/2023/07/19/5',
-                'http://www.openwall.com/lists/oss-security/2023/07/19/6',
-                'http://www.openwall.com/lists/oss-security/2023/07/31/1',
-                'http://www.openwall.com/lists/oss-security/2024/05/16/1',
-                'https://access.redhat.com/errata/RHSA-2024:2447',
-                'https://access.redhat.com/security/cve/CVE-2023-3446',
-                'https://bugzilla.redhat.com/2223016',
-                'https://bugzilla.redhat.com/2224962',
-                'https://bugzilla.redhat.com/2227852',
-                'https://bugzilla.redhat.com/2248616',
-                'https://bugzilla.redhat.com/2257571',
-                'https://bugzilla.redhat.com/2258502',
-                'https://bugzilla.redhat.com/2259944',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2224962',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2257582',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2257583',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2258677',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2258688',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2258691',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2258694',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2258700',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-36763',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-36764',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3446',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45229',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45231',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45232',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45233',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45235',
-                'https://errata.almalinux.org/9/ALSA-2024-2447.html',
-                'https://errata.rockylinux.org/RLSA-2024:2264',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=1fa20cf2f506113c761777127a38bce5068740eb',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=8780a896543a654e757db1b9396383f9d8095528',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=9a0a4d3c1e7138915563c0df4fe6a3f9377b839c',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=fc9867c1e03c22ebf56943be205202e576aabf23',
-                'https://linux.oracle.com/cve/CVE-2023-3446.html',
-                'https://linux.oracle.com/errata/ELSA-2024-2447.html',
-                'https://lists.debian.org/debian-lts-announce/2023/08/msg00019.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-3446',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://security.netapp.com/advisory/ntap-20230803-0011/',
-                'https://ubuntu.com/security/notices/USN-6435-1',
-                'https://ubuntu.com/security/notices/USN-6435-2',
-                'https://ubuntu.com/security/notices/USN-6450-1',
-                'https://ubuntu.com/security/notices/USN-6709-1',
-                'https://ubuntu.com/security/notices/USN-7018-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-3446',
-                'https://www.openssl.org/news/secadv/20230719.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: Excessive time spent checking DH keys and parameters'
-            },
-            {
-              'cve':  'CVE-2023-3817',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L'
-                },
-                'redhat': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L'
-                }
-              },
-              'cwes': [
-                'CWE-606',
-                'CWE-834'
-              ],
-              'description':   'Issue summary: Checking excessively long DH keys or parameters may be very slow.\n\nImpact summary: Applications that use the functions DH_check(), DH_check_ex()\nor EVP_PKEY_param_check() to check a DH key or DH parameters may experience long\ndelays. Where the key or parameters that are being checked have been obtained\nfrom an untrusted source this may lead to a Denial of Service.\n\nThe function DH_check() performs various checks on DH parameters. After fixing\nCVE-2023-3446 it was discovered that a large q parameter value can also trigger\nan overly long computation during some of these checks. A correct q value,\nif present, cannot be larger than the modulus p parameter, thus it is\nunnecessary to perform these checks if q is larger than p.\n\nAn application that calls DH_check() and supplies a key or parameters obtained\nfrom an untrusted source could be vulnerable to a Denial of Service attack.\n\nThe function DH_check() is itself called by a number of other OpenSSL functions.\nAn application calling any of those other functions may similarly be affected.\nThe other functions affected by this are DH_check_ex() and\nEVP_PKEY_param_check().\n\nAlso vulnerable are the OpenSSL dhparam and pkeyparam command line applications\nwhen using the "-check" option.\n\nThe OpenSSL SSL/TLS implementation is not affected by this issue.\n\nThe OpenSSL 3.0 and 3.1 FIPS providers are not affected by this issue.',
-              'diffID':        'sha256:86ddd1858dda5de0cc1e3cc31a93fddc627a28136b08db8cda7460de39f657a3',
-              'fixedVersions': [
-                '3.0.10-r0'
-              ],
-              'installedVersion': '3.0.7-r2',
-              'packageName':      'libssl3',
-              'purl':             'pkg:apk/alpine/libssl3@3.0.7-r2?arch=armhf&distro=3.17.1',
-              'references':       [
-                'http://seclists.org/fulldisclosure/2023/Jul/43',
-                'http://www.openwall.com/lists/oss-security/2023/07/31/1',
-                'http://www.openwall.com/lists/oss-security/2023/09/22/11',
-                'http://www.openwall.com/lists/oss-security/2023/09/22/9',
-                'http://www.openwall.com/lists/oss-security/2023/11/06/2',
-                'https://access.redhat.com/errata/RHSA-2024:2447',
-                'https://access.redhat.com/security/cve/CVE-2023-3817',
-                'https://bugzilla.redhat.com/2223016',
-                'https://bugzilla.redhat.com/2224962',
-                'https://bugzilla.redhat.com/2227852',
-                'https://bugzilla.redhat.com/2248616',
-                'https://bugzilla.redhat.com/2257571',
-                'https://bugzilla.redhat.com/2258502',
-                'https://bugzilla.redhat.com/2259944',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2224962',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2227852',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2248616',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2270358',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3446',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3817',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-5678',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-2408',
-                'https://errata.almalinux.org/9/ALSA-2024-2447.html',
-                'https://errata.rockylinux.org/RLSA-2023:7877',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=6a1eb62c29db6cb5eec707f9338aee00f44e26f5',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=869ad69aadd985c7b8ca6f4e5dd0eb274c9f3644',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=9002fd07327a91f35ba6c1307e71fa6fd4409b7f',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=91ddeba0f2269b017dc06c46c993a788974b1aa5',
-                'https://linux.oracle.com/cve/CVE-2023-3817.html',
-                'https://linux.oracle.com/errata/ELSA-2024-2447.html',
-                'https://lists.debian.org/debian-lts-announce/2023/08/msg00019.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-3817',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://security.netapp.com/advisory/ntap-20230818-0014/',
-                'https://security.netapp.com/advisory/ntap-20231027-0008/',
-                'https://security.netapp.com/advisory/ntap-20240621-0006/',
-                'https://ubuntu.com/security/notices/USN-6435-1',
-                'https://ubuntu.com/security/notices/USN-6435-2',
-                'https://ubuntu.com/security/notices/USN-6450-1',
-                'https://ubuntu.com/security/notices/USN-6709-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-3817',
-                'https://www.openssl.org/news/secadv/20230731.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'OpenSSL: Excessive time spent checking DH q parameter value'
-            },
-            {
-              'cve':  'CVE-2023-5678',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L'
-                },
-                'redhat': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L'
-                }
-              },
-              'cwes': [
-                'CWE-606',
-                'CWE-754'
-              ],
-              'description':   "Issue summary: Generating excessively long X9.42 DH keys or checking\nexcessively long X9.42 DH keys or parameters may be very slow.\n\nImpact summary: Applications that use the functions DH_generate_key() to\ngenerate an X9.42 DH key may experience long delays.  Likewise, applications\nthat use DH_check_pub_key(), DH_check_pub_key_ex() or EVP_PKEY_public_check()\nto check an X9.42 DH key or X9.42 DH parameters may experience long delays.\nWhere the key or parameters that are being checked have been obtained from\nan untrusted source this may lead to a Denial of Service.\n\nWhile DH_check() performs all the necessary checks (as of CVE-2023-3817),\nDH_check_pub_key() doesn't make any of these checks, and is therefore\nvulnerable for excessively large P and Q parameters.\n\nLikewise, while DH_generate_key() performs a check for an excessively large\nP, it doesn't check for an excessively large Q.\n\nAn application that calls DH_generate_key() or DH_check_pub_key() and\nsupplies a key or parameters obtained from an untrusted source could be\nvulnerable to a Denial of Service attack.\n\nDH_generate_key() and DH_check_pub_key() are also called by a number of\nother OpenSSL functions.  An application calling any of those other\nfunctions may similarly be affected.  The other functions affected by this\nare DH_check_pub_key_ex(), EVP_PKEY_public_check(), and EVP_PKEY_generate().\n\nAlso vulnerable are the OpenSSL pkey command line application when using the\n\"-pubcheck\" option, as well as the OpenSSL genpkey command line application.\n\nThe OpenSSL SSL/TLS implementation is not affected by this issue.\n\nThe OpenSSL 3.0 and 3.1 FIPS providers are not affected by this issue.",
-              'diffID':        'sha256:86ddd1858dda5de0cc1e3cc31a93fddc627a28136b08db8cda7460de39f657a3',
-              'fixedVersions': [
-                '3.0.12-r1'
-              ],
-              'installedVersion': '3.0.7-r2',
-              'packageName':      'libssl3',
-              'purl':             'pkg:apk/alpine/libssl3@3.0.7-r2?arch=armhf&distro=3.17.1',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2024/03/11/1',
-                'https://access.redhat.com/errata/RHSA-2024:2447',
-                'https://access.redhat.com/security/cve/CVE-2023-5678',
-                'https://bugzilla.redhat.com/2223016',
-                'https://bugzilla.redhat.com/2224962',
-                'https://bugzilla.redhat.com/2227852',
-                'https://bugzilla.redhat.com/2248616',
-                'https://bugzilla.redhat.com/2257571',
-                'https://bugzilla.redhat.com/2258502',
-                'https://bugzilla.redhat.com/2259944',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2224962',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2227852',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2248616',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2270358',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3446',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3817',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-5678',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-2408',
-                'https://errata.almalinux.org/9/ALSA-2024-2447.html',
-                'https://errata.rockylinux.org/RLSA-2023:7877',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=34efaef6c103d636ab507a0cc34dca4d3aecc055',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=710fee740904b6290fef0dd5536fbcedbc38ff0c',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=db925ae2e65d0d925adef429afc37f75bd1c2017',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=ddeb4b6c6d527e54ce9a99cba785c0f7776e54b6',
-                'https://linux.oracle.com/cve/CVE-2023-5678.html',
-                'https://linux.oracle.com/errata/ELSA-2024-2447.html',
-                'https://lists.debian.org/debian-lts-announce/2024/10/msg00033.html',
-                'https://lists.debian.org/debian-lts-announce/2024/11/msg00000.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-5678',
-                'https://security.netapp.com/advisory/ntap-20231130-0010/',
-                'https://ubuntu.com/security/notices/USN-6622-1',
-                'https://ubuntu.com/security/notices/USN-6632-1',
-                'https://ubuntu.com/security/notices/USN-6709-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-5678',
-                'https://www.openssl.org/news/secadv/20231106.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: Generating excessively long X9.42 DH keys or checking excessively long X9.42 DH keys or parameters may be very slow'
-            },
-            {
-              'cve':  'CVE-2023-6129',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '6.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-440',
-                'CWE-787'
-              ],
-              'description':   'Issue summary: The POLY1305 MAC (message authentication code) implementation\ncontains a bug that might corrupt the internal state of applications running\non PowerPC CPU based platforms if the CPU provides vector instructions.\n\nImpact summary: If an attacker can influence whether the POLY1305 MAC\nalgorithm is used, the application state might be corrupted with various\napplication dependent consequences.\n\nThe POLY1305 MAC (message authentication code) implementation in OpenSSL for\nPowerPC CPUs restores the contents of vector registers in a different order\nthan they are saved. Thus the contents of some of these vector registers\nare corrupted when returning to the caller. The vulnerable code is used only\non newer PowerPC processors supporting the PowerISA 2.07 instructions.\n\nThe consequences of this kind of internal application state corruption can\nbe various - from no consequences, if the calling application does not\ndepend on the contents of non-volatile XMM registers at all, to the worst\nconsequences, where the attacker could get complete control of the application\nprocess. However unless the compiler uses the vector registers for storing\npointers, the most likely consequence, if any, would be an incorrect result\nof some application dependent calculations or a crash leading to a denial of\nservice.\n\nThe POLY1305 MAC algorithm is most frequently used as part of the\nCHACHA20-POLY1305 AEAD (authenticated encryption with associated data)\nalgorithm. The most common usage of this AEAD cipher is with TLS protocol\nversions 1.2 and 1.3. If this cipher is enabled on the server a malicious\nclient can influence whether this AEAD cipher is used. This implies that\nTLS server applications using OpenSSL can be potentially impacted. However\nwe are currently not aware of any concrete application that would be affected\nby this issue therefore we consider this a Low severity security issue.',
-              'diffID':        'sha256:86ddd1858dda5de0cc1e3cc31a93fddc627a28136b08db8cda7460de39f657a3',
-              'fixedVersions': [
-                '3.0.12-r2'
-              ],
-              'installedVersion': '3.0.7-r2',
-              'packageName':      'libssl3',
-              'purl':             'pkg:apk/alpine/libssl3@3.0.7-r2?arch=armhf&distro=3.17.1',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2024/03/11/1',
-                'https://access.redhat.com/errata/RHSA-2024:9088',
-                'https://access.redhat.com/security/cve/CVE-2023-6129',
-                'https://bugzilla.redhat.com/2257571',
-                'https://bugzilla.redhat.com/2258502',
-                'https://bugzilla.redhat.com/2259944',
-                'https://bugzilla.redhat.com/2284243',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2257571',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2258502',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2259944',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2284243',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-6129',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-6237',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-0727',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-1298',
-                'https://errata.almalinux.org/9/ALSA-2024-9088.html',
-                'https://errata.rockylinux.org/RLSA-2024:9088',
-                'https://github.com/openssl/openssl/commit/050d26383d4e264966fb83428e72d5d48f402d35',
-                'https://github.com/openssl/openssl/commit/5b139f95c9a47a55a0c54100f3837b1eee942b04',
-                'https://github.com/openssl/openssl/commit/f3fc5808fe9ff74042d639839610d03b8fdcc015',
-                'https://linux.oracle.com/cve/CVE-2023-6129.html',
-                'https://linux.oracle.com/errata/ELSA-2024-9088.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-6129',
-                'https://security.netapp.com/advisory/ntap-20240216-0009/',
-                'https://security.netapp.com/advisory/ntap-20240426-0008/',
-                'https://security.netapp.com/advisory/ntap-20240426-0013/',
-                'https://security.netapp.com/advisory/ntap-20240503-0011/',
-                'https://ubuntu.com/security/notices/USN-6622-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-6129',
-                'https://www.openssl.org/news/secadv/20240109.txt',
-                'https://www.openwall.com/lists/oss-security/2024/01/09/1'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: POLY1305 MAC implementation corrupts vector registers on PowerPC'
-            },
-            {
-              'cve':  'CVE-2023-6237',
-              'cvss': {
-                'redhat': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-606'
-              ],
-              'description':   "Issue summary: Checking excessively long invalid RSA public keys may take\na long time.\n\nImpact summary: Applications that use the function EVP_PKEY_public_check()\nto check RSA public keys may experience long delays. Where the key that\nis being checked has been obtained from an untrusted source this may lead\nto a Denial of Service.\n\nWhen function EVP_PKEY_public_check() is called on RSA public keys,\na computation is done to confirm that the RSA modulus, n, is composite.\nFor valid RSA keys, n is a product of two or more large primes and this\ncomputation completes quickly. However, if n is an overly large prime,\nthen this computation would take a long time.\n\nAn application that calls EVP_PKEY_public_check() and supplies an RSA key\nobtained from an untrusted source could be vulnerable to a Denial of Service\nattack.\n\nThe function EVP_PKEY_public_check() is not called from other OpenSSL\nfunctions however it is called from the OpenSSL pkey command line\napplication. For that reason that application is also vulnerable if used\nwith the '-pubin' and '-check' options on untrusted data.\n\nThe OpenSSL SSL/TLS implementation is not affected by this issue.\n\nThe OpenSSL 3.0 and 3.1 FIPS providers are affected by this issue.",
-              'diffID':        'sha256:86ddd1858dda5de0cc1e3cc31a93fddc627a28136b08db8cda7460de39f657a3',
-              'fixedVersions': [
-                '3.0.12-r3'
-              ],
-              'installedVersion': '3.0.7-r2',
-              'packageName':      'libssl3',
-              'purl':             'pkg:apk/alpine/libssl3@3.0.7-r2?arch=armhf&distro=3.17.1',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2024/03/11/1',
-                'https://access.redhat.com/errata/RHSA-2024:9088',
-                'https://access.redhat.com/security/cve/CVE-2023-6237',
-                'https://bugzilla.redhat.com/2257571',
-                'https://bugzilla.redhat.com/2258502',
-                'https://bugzilla.redhat.com/2259944',
-                'https://bugzilla.redhat.com/2284243',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2257571',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2258502',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2259944',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2284243',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-6129',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-6237',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-0727',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-1298',
-                'https://errata.almalinux.org/9/ALSA-2024-9088.html',
-                'https://errata.rockylinux.org/RLSA-2024:9088',
-                'https://github.com/openssl/openssl/commit/0b0f7abfb37350794a4b8960fafc292cd5d1b84d',
-                'https://github.com/openssl/openssl/commit/18c02492138d1eb8b6548cb26e7b625fb2414a2a',
-                'https://github.com/openssl/openssl/commit/a830f551557d3d66a84bbb18a5b889c640c36294',
-                'https://linux.oracle.com/cve/CVE-2023-6237.html',
-                'https://linux.oracle.com/errata/ELSA-2024-9088.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-6237',
-                'https://security.netapp.com/advisory/ntap-20240531-0007/',
-                'https://ubuntu.com/security/notices/USN-6622-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-6237',
-                'https://www.openssl.org/news/secadv/20240115.txt',
-                'https://www.openwall.com/lists/oss-security/2024/01/15/2'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: Excessive time spent checking invalid RSA public keys'
-            },
-            {
-              'cve':  'CVE-2024-0727',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '5.5',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H'
-                },
-                'nvd': {
-                  'v3score':  '5.5',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '5.5',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-476'
-              ],
-              'description':   'Issue summary: Processing a maliciously formatted PKCS12 file may lead OpenSSL\nto crash leading to a potential Denial of Service attack\n\nImpact summary: Applications loading files in the PKCS12 format from untrusted\nsources might terminate abruptly.\n\nA file in PKCS12 format can contain certificates and keys and may come from an\nuntrusted source. The PKCS12 specification allows certain fields to be NULL, but\nOpenSSL does not correctly check for this case. This can lead to a NULL pointer\ndereference that results in OpenSSL crashing. If an application processes PKCS12\nfiles from an untrusted source using the OpenSSL APIs then that application will\nbe vulnerable to this issue.\n\nOpenSSL APIs that are vulnerable to this are: PKCS12_parse(),\nPKCS12_unpack_p7data(), PKCS12_unpack_p7encdata(), PKCS12_unpack_authsafes()\nand PKCS12_newpass().\n\nWe have also fixed a similar issue in SMIME_write_PKCS7(). However since this\nfunction is related to writing data we do not consider it security significant.\n\nThe FIPS modules in 3.2, 3.1 and 3.0 are not affected by this issue.',
-              'diffID':        'sha256:86ddd1858dda5de0cc1e3cc31a93fddc627a28136b08db8cda7460de39f657a3',
-              'fixedVersions': [
-                '3.0.12-r4'
-              ],
-              'installedVersion': '3.0.7-r2',
-              'packageName':      'libssl3',
-              'purl':             'pkg:apk/alpine/libssl3@3.0.7-r2?arch=armhf&distro=3.17.1',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2024/03/11/1',
-                'https://access.redhat.com/errata/RHSA-2024:9088',
-                'https://access.redhat.com/security/cve/CVE-2024-0727',
-                'https://bugzilla.redhat.com/2257571',
-                'https://bugzilla.redhat.com/2258502',
-                'https://bugzilla.redhat.com/2259944',
-                'https://bugzilla.redhat.com/2284243',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2257571',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2258502',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2259944',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2284243',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-6129',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-6237',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-0727',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-1298',
-                'https://errata.almalinux.org/9/ALSA-2024-9088.html',
-                'https://errata.rockylinux.org/RLSA-2024:9088',
-                'https://github.com/alexcrichton/openssl-src-rs/commit/add20f73b6b42be7451af2e1044d4e0e778992b2',
-                'https://github.com/github/advisory-database/pull/3472',
-                'https://github.com/openssl/openssl/commit/09df4395b5071217b76dc7d3d2e630eb8c5a79c2',
-                'https://github.com/openssl/openssl/commit/775acfdbd0c6af9ac855f34969cdab0c0c90844a',
-                'https://github.com/openssl/openssl/commit/d135eeab8a5dbf72b3da5240bab9ddb7678dbd2c',
-                'https://github.com/openssl/openssl/pull/23362',
-                'https://github.com/pyca/cryptography/commit/3519591d255d4506fbcd0d04037d45271903c64d',
-                'https://github.openssl.org/openssl/extended-releases/commit/03b3941d60c4bce58fab69a0c22377ab439bc0e8',
-                'https://github.openssl.org/openssl/extended-releases/commit/aebaa5883e31122b404e450732dc833dc9dee539',
-                'https://linux.oracle.com/cve/CVE-2024-0727.html',
-                'https://linux.oracle.com/errata/ELSA-2024-9088.html',
-                'https://lists.debian.org/debian-lts-announce/2024/10/msg00033.html',
-                'https://lists.debian.org/debian-lts-announce/2024/11/msg00000.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2024-0727',
-                'https://security.netapp.com/advisory/ntap-20240208-0006',
-                'https://security.netapp.com/advisory/ntap-20240208-0006/',
-                'https://ubuntu.com/security/notices/USN-6622-1',
-                'https://ubuntu.com/security/notices/USN-6632-1',
-                'https://ubuntu.com/security/notices/USN-6709-1',
-                'https://ubuntu.com/security/notices/USN-7018-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2024-0727',
-                'https://www.openssl.org/news/secadv/20240125.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: denial of service via null dereference'
-            },
-            {
-              'cve':  'CVE-2024-4603',
-              'cvss': {
-                'redhat': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L'
-                }
-              },
-              'cwes': [
-                'CWE-606',
-                'CWE-834'
-              ],
-              'description':   'Issue summary: Checking excessively long DSA keys or parameters may be very\nslow.\n\nImpact summary: Applications that use the functions EVP_PKEY_param_check()\nor EVP_PKEY_public_check() to check a DSA public key or DSA parameters may\nexperience long delays. Where the key or parameters that are being checked\nhave been obtained from an untrusted source this may lead to a Denial of\nService.\n\nThe functions EVP_PKEY_param_check() or EVP_PKEY_public_check() perform\nvarious checks on DSA parameters. Some of those computations take a long time\nif the modulus (`p` parameter) is too large.\n\nTrying to use a very large modulus is slow and OpenSSL will not allow using\npublic keys with a modulus which is over 10,000 bits in length for signature\nverification. However the key and parameter check functions do not limit\nthe modulus size when performing the checks.\n\nAn application that calls EVP_PKEY_param_check() or EVP_PKEY_public_check()\nand supplies a key or parameters obtained from an untrusted source could be\nvulnerable to a Denial of Service attack.\n\nThese functions are not called by OpenSSL itself on untrusted DSA keys so\nonly applications that directly call these functions may be vulnerable.\n\nAlso vulnerable are the OpenSSL pkey and pkeyparam command line applications\nwhen using the `-check` option.\n\nThe OpenSSL SSL/TLS implementation is not affected by this issue.\n\nThe OpenSSL 3.0 and 3.1 FIPS providers are affected by this issue.',
-              'diffID':        'sha256:86ddd1858dda5de0cc1e3cc31a93fddc627a28136b08db8cda7460de39f657a3',
-              'fixedVersions': [
-                '3.0.13-r0'
-              ],
-              'installedVersion': '3.0.7-r2',
-              'packageName':      'libssl3',
-              'purl':             'pkg:apk/alpine/libssl3@3.0.7-r2?arch=armhf&distro=3.17.1',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2024/05/16/2',
-                'https://access.redhat.com/errata/RHSA-2024:9333',
-                'https://access.redhat.com/security/cve/CVE-2024-4603',
-                'https://bugzilla.redhat.com/2274020',
-                'https://bugzilla.redhat.com/2281029',
-                'https://bugzilla.redhat.com/2283757',
-                'https://bugzilla.redhat.com/2294581',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2274020',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2281029',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2283757',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2294581',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-2511',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-4603',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-4741',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-5535',
-                'https://errata.almalinux.org/9/ALSA-2024-9333.html',
-                'https://errata.rockylinux.org/RLSA-2024:9333',
-                'https://github.com/openssl/openssl/commit/3559e868e58005d15c6013a0c1fd832e51c73397',
-                'https://github.com/openssl/openssl/commit/53ea06486d296b890d565fb971b2764fcd826e7e',
-                'https://github.com/openssl/openssl/commit/9c39b3858091c152f52513c066ff2c5a47969f0d',
-                'https://github.com/openssl/openssl/commit/da343d0605c826ef197aceedc67e8e04f065f740',
-                'https://linux.oracle.com/cve/CVE-2024-4603.html',
-                'https://linux.oracle.com/errata/ELSA-2024-9333.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2024-4603',
-                'https://security.netapp.com/advisory/ntap-20240621-0001/',
-                'https://ubuntu.com/security/notices/USN-6937-1',
-                'https://www.cve.org/CVERecord?id=CVE-2024-4603',
-                'https://www.openssl.org/news/secadv/20240516.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: Excessive time spent checking DSA keys and parameters'
-            },
-            {
-              'cve':  'CVE-2024-4741',
-              'cvss': {
-                'redhat': {
-                  'v3score':  '5.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   'Issue summary: Calling the OpenSSL API function SSL_free_buffers may cause\nmemory to be accessed that was previously freed in some situations\n\nImpact summary: A use after free can have a range of potential consequences such\nas the corruption of valid data, crashes or execution of arbitrary code.\nHowever, only applications that directly call the SSL_free_buffers function are\naffected by this issue. Applications that do not call this function are not\nvulnerable. Our investigations indicate that this function is rarely used by\napplications.\n\nThe SSL_free_buffers function is used to free the internal OpenSSL buffer used\nwhen processing an incoming record from the network. The call is only expected\nto succeed if the buffer is not currently in use. However, two scenarios have\nbeen identified where the buffer is freed even when still in use.\n\nThe first scenario occurs where a record header has been received from the\nnetwork and processed by OpenSSL, but the full record body has not yet arrived.\nIn this case calling SSL_free_buffers will succeed even though a record has only\nbeen partially processed and the buffer is still in use.\n\nThe second scenario occurs where a full record containing application data has\nbeen received and processed by OpenSSL but the application has only read part of\nthis data. Again a call to SSL_free_buffers will succeed even though the buffer\nis still in use.\n\nWhile these scenarios could occur accidentally during normal operation a\nmalicious attacker could attempt to engineer a stituation where this occurs.\nWe are not aware of this issue being actively exploited.\n\nThe FIPS modules in 3.3, 3.2, 3.1 and 3.0 are not affected by this issue.',
-              'diffID':        'sha256:86ddd1858dda5de0cc1e3cc31a93fddc627a28136b08db8cda7460de39f657a3',
-              'fixedVersions': [
-                '3.0.14-r0'
-              ],
-              'installedVersion': '3.0.7-r2',
-              'packageName':      'libssl3',
-              'purl':             'pkg:apk/alpine/libssl3@3.0.7-r2?arch=armhf&distro=3.17.1',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2024:9333',
-                'https://access.redhat.com/security/cve/CVE-2024-4741',
-                'https://bugzilla.redhat.com/2274020',
-                'https://bugzilla.redhat.com/2281029',
-                'https://bugzilla.redhat.com/2283757',
-                'https://bugzilla.redhat.com/2294581',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2274020',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2281029',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2283757',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2294581',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-2511',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-4603',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-4741',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-5535',
-                'https://errata.almalinux.org/9/ALSA-2024-9333.html',
-                'https://errata.rockylinux.org/RLSA-2024:9333',
-                'https://github.com/openssl/openssl/commit/704f725b96aa373ee45ecfb23f6abfe8be8d9177',
-                'https://github.com/openssl/openssl/commit/b3f0eb0a295f58f16ba43ba99dad70d4ee5c437d',
-                'https://github.com/openssl/openssl/commit/c88c3de51020c37e8706bf7a682a162593053aac',
-                'https://github.com/openssl/openssl/commit/e5093133c35ca82874ad83697af76f4b0f7e3bd8',
-                'https://github.openssl.org/openssl/extended-releases/commit/f7a045f3143fc6da2ee66bf52d8df04829590dd4',
-                'https://linux.oracle.com/cve/CVE-2024-4741.html',
-                'https://linux.oracle.com/errata/ELSA-2024-9333.html',
-                'https://lists.debian.org/debian-lts-announce/2024/10/msg00033.html',
-                'https://lists.debian.org/debian-lts-announce/2024/11/msg00000.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2024-4741',
-                'https://security.netapp.com/advisory/ntap-20240621-0004/',
-                'https://ubuntu.com/security/notices/USN-6937-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2024-4741',
-                'https://www.openssl.org/news/secadv/20240528.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: Use After Free with SSL_free_buffers'
-            },
-            {
-              'cve':  'CVE-2024-5535',
-              'cvss': {
-                'redhat': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-125'
-              ],
-              'description':   'Issue summary: Calling the OpenSSL API function SSL_select_next_proto with an\nempty supported client protocols buffer may cause a crash or memory contents to\nbe sent to the peer.\n\nImpact summary: A buffer overread can have a range of potential consequences\nsuch as unexpected application beahviour or a crash. In particular this issue\ncould result in up to 255 bytes of arbitrary private data from memory being sent\nto the peer leading to a loss of confidentiality. However, only applications\nthat directly call the SSL_select_next_proto function with a 0 length list of\nsupported client protocols are affected by this issue. This would normally never\nbe a valid scenario and is typically not under attacker control but may occur by\naccident in the case of a configuration or programming error in the calling\napplication.\n\nThe OpenSSL API function SSL_select_next_proto is typically used by TLS\napplications that support ALPN (Application Layer Protocol Negotiation) or NPN\n(Next Protocol Negotiation). NPN is older, was never standardised and\nis deprecated in favour of ALPN. We believe that ALPN is significantly more\nwidely deployed than NPN. The SSL_select_next_proto function accepts a list of\nprotocols from the server and a list of protocols from the client and returns\nthe first protocol that appears in the server list that also appears in the\nclient list. In the case of no overlap between the two lists it returns the\nfirst item in the client list. In either case it will signal whether an overlap\nbetween the two lists was found. In the case where SSL_select_next_proto is\ncalled with a zero length client list it fails to notice this condition and\nreturns the memory immediately following the client list pointer (and reports\nthat there was no overlap in the lists).\n\nThis function is typically called from a server side application callback for\nALPN or a client side application callback for NPN. In the case of ALPN the list\nof protocols supplied by the client is guaranteed by libssl to never be zero in\nlength. The list of server protocols comes from the application and should never\nnormally be expected to be of zero length. In this case if the\nSSL_select_next_proto function has been called as expected (with the list\nsupplied by the client passed in the client/client_len parameters), then the\napplication will not be vulnerable to this issue. If the application has\naccidentally been configured with a zero length server list, and has\naccidentally passed that zero length server list in the client/client_len\nparameters, and has additionally failed to correctly handle a "no overlap"\nresponse (which would normally result in a handshake failure in ALPN) then it\nwill be vulnerable to this problem.\n\nIn the case of NPN, the protocol permits the client to opportunistically select\na protocol when there is no overlap. OpenSSL returns the first client protocol\nin the no overlap case in support of this. The list of client protocols comes\nfrom the application and should never normally be expected to be of zero length.\nHowever if the SSL_select_next_proto function is accidentally called with a\nclient_len of 0 then an invalid memory pointer will be returned instead. If the\napplication uses this output as the opportunistic protocol then the loss of\nconfidentiality will occur.\n\nThis issue has been assessed as Low severity because applications are most\nlikely to be vulnerable if they are using NPN instead of ALPN - but NPN is not\nwidely used. It also requires an application configuration or programming error.\nFinally, this issue would not typically be under attacker control making active\nexploitation unlikely.\n\nThe FIPS modules in 3.3, 3.2, 3.1 and 3.0 are not affected by this issue.\n\nDue to the low severity of this issue we are not issuing new releases of\nOpenSSL at this time. The fix will be included in the next releases when they\nbecome available.',
-              'diffID':        'sha256:86ddd1858dda5de0cc1e3cc31a93fddc627a28136b08db8cda7460de39f657a3',
-              'fixedVersions': [
-                '3.0.14-r0'
-              ],
-              'installedVersion': '3.0.7-r2',
-              'packageName':      'libssl3',
-              'purl':             'pkg:apk/alpine/libssl3@3.0.7-r2?arch=armhf&distro=3.17.1',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2024/06/27/1',
-                'http://www.openwall.com/lists/oss-security/2024/06/28/4',
-                'http://www.openwall.com/lists/oss-security/2024/08/15/1',
-                'https://access.redhat.com/errata/RHSA-2025:1671',
-                'https://access.redhat.com/security/cve/CVE-2024-5535',
-                'https://bugzilla.redhat.com/2294581',
-                'https://bugzilla.redhat.com/2294676',
-                'https://bugzilla.redhat.com/2301888',
-                'https://bugzilla.redhat.com/2318857',
-                'https://bugzilla.redhat.com/2318858',
-                'https://bugzilla.redhat.com/2318870',
-                'https://bugzilla.redhat.com/2318873',
-                'https://bugzilla.redhat.com/2318874',
-                'https://bugzilla.redhat.com/2318876',
-                'https://bugzilla.redhat.com/2318882',
-                'https://bugzilla.redhat.com/2318883',
-                'https://bugzilla.redhat.com/2318884',
-                'https://bugzilla.redhat.com/2318885',
-                'https://bugzilla.redhat.com/2318886',
-                'https://bugzilla.redhat.com/2318897',
-                'https://bugzilla.redhat.com/2318900',
-                'https://bugzilla.redhat.com/2318905',
-                'https://bugzilla.redhat.com/2318914',
-                'https://bugzilla.redhat.com/2318922',
-                'https://bugzilla.redhat.com/2318923',
-                'https://bugzilla.redhat.com/2318925',
-                'https://bugzilla.redhat.com/2318926',
-                'https://bugzilla.redhat.com/2318927',
-                'https://bugzilla.redhat.com/2331191',
-                'https://bugzilla.redhat.com/2339218',
-                'https://bugzilla.redhat.com/2339220',
-                'https://bugzilla.redhat.com/2339221',
-                'https://bugzilla.redhat.com/2339226',
-                'https://bugzilla.redhat.com/2339231',
-                'https://bugzilla.redhat.com/2339236',
-                'https://bugzilla.redhat.com/2339238',
-                'https://bugzilla.redhat.com/2339243',
-                'https://bugzilla.redhat.com/2339247',
-                'https://bugzilla.redhat.com/2339252',
-                'https://bugzilla.redhat.com/2339259',
-                'https://bugzilla.redhat.com/2339266',
-                'https://bugzilla.redhat.com/2339270',
-                'https://bugzilla.redhat.com/2339271',
-                'https://bugzilla.redhat.com/2339275',
-                'https://bugzilla.redhat.com/2339277',
-                'https://bugzilla.redhat.com/2339281',
-                'https://bugzilla.redhat.com/2339284',
-                'https://bugzilla.redhat.com/2339291',
-                'https://bugzilla.redhat.com/2339293',
-                'https://bugzilla.redhat.com/2339295',
-                'https://bugzilla.redhat.com/2339299',
-                'https://bugzilla.redhat.com/2339300',
-                'https://bugzilla.redhat.com/2339304',
-                'https://bugzilla.redhat.com/2339305',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2274020',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2281029',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2283757',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2294581',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-2511',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-4603',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-4741',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-5535',
-                'https://errata.almalinux.org/9/ALSA-2025-1671.html',
-                'https://errata.rockylinux.org/RLSA-2024:9333',
-                'https://github.com/openssl/openssl/commit/4ada436a1946cbb24db5ab4ca082b69c1bc10f37',
-                'https://github.com/openssl/openssl/commit/99fb785a5f85315b95288921a321a935ea29a51e',
-                'https://github.com/openssl/openssl/commit/cf6f91f6121f4db167405db2f0de410a456f260c',
-                'https://github.com/openssl/openssl/commit/e86ac436f0bd54d4517745483e2315650fae7b2c',
-                'https://github.openssl.org/openssl/extended-releases/commit/9947251413065a05189a63c9b7a6c1d4e224c21c',
-                'https://github.openssl.org/openssl/extended-releases/commit/b78ec0824da857223486660177d3b1f255c65d87',
-                'https://linux.oracle.com/cve/CVE-2024-5535.html',
-                'https://linux.oracle.com/errata/ELSA-2025-1673.html',
-                'https://lists.debian.org/debian-lts-announce/2024/10/msg00033.html',
-                'https://lists.debian.org/debian-lts-announce/2024/11/msg00000.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2024-5535',
-                'https://openssl.org/news/secadv/20240627.txt',
-                'https://security.netapp.com/advisory/ntap-20240712-0005/',
-                'https://security.netapp.com/advisory/ntap-20241025-0006/',
-                'https://security.netapp.com/advisory/ntap-20241025-0010/',
-                'https://ubuntu.com/security/notices/USN-6937-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2024-5535',
-                'https://www.openssl.org/news/secadv/20240627.txt',
-                'https://www.oracle.com/security-alerts/cpuoct2024.html#AppendixMSQL'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: SSL_select_next_proto buffer overread'
-            },
-            {
-              'cve':  'CVE-2024-2511',
-              'cvss': {
-                'redhat': {
-                  'v3score':  '3.7',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L'
-                }
-              },
-              'cwes': [
-                'CWE-1325'
-              ],
-              'description':   'Issue summary: Some non-default TLS server configurations can cause unbounded\nmemory growth when processing TLSv1.3 sessions\n\nImpact summary: An attacker may exploit certain server configurations to trigger\nunbounded memory growth that would lead to a Denial of Service\n\nThis problem can occur in TLSv1.3 if the non-default SSL_OP_NO_TICKET option is\nbeing used (but not if early_data support is also configured and the default\nanti-replay protection is in use). In this case, under certain conditions, the\nsession cache can get into an incorrect state and it will fail to flush properly\nas it fills. The session cache will continue to grow in an unbounded manner. A\nmalicious client could deliberately create the scenario for this failure to\nforce a Denial of Service. It may also happen by accident in normal operation.\n\nThis issue only affects TLS servers supporting TLSv1.3. It does not affect TLS\nclients.\n\nThe FIPS modules in 3.2, 3.1 and 3.0 are not affected by this issue. OpenSSL\n1.0.2 is also not affected by this issue.',
-              'diffID':        'sha256:86ddd1858dda5de0cc1e3cc31a93fddc627a28136b08db8cda7460de39f657a3',
-              'fixedVersions': [
-                '3.0.12-r5'
-              ],
-              'installedVersion': '3.0.7-r2',
-              'packageName':      'libssl3',
-              'purl':             'pkg:apk/alpine/libssl3@3.0.7-r2?arch=armhf&distro=3.17.1',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2024/04/08/5',
-                'https://access.redhat.com/errata/RHSA-2024:9333',
-                'https://access.redhat.com/security/cve/CVE-2024-2511',
-                'https://bugzilla.redhat.com/2274020',
-                'https://bugzilla.redhat.com/2281029',
-                'https://bugzilla.redhat.com/2283757',
-                'https://bugzilla.redhat.com/2294581',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2274020',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2281029',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2283757',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2294581',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-2511',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-4603',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-4741',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-5535',
-                'https://errata.almalinux.org/9/ALSA-2024-9333.html',
-                'https://errata.rockylinux.org/RLSA-2024:9333',
-                'https://github.com/openssl/openssl/commit/7e4d731b1c07201ad9374c1cd9ac5263bdf35bce',
-                'https://github.com/openssl/openssl/commit/b52867a9f618bb955bed2a3ce3db4d4f97ed8e5d',
-                'https://github.com/openssl/openssl/commit/e9d7083e241670332e0443da0f0d4ffb52829f08',
-                'https://github.openssl.org/openssl/extended-releases/commit/5f8d25770ae6437db119dfc951e207271a326640',
-                'https://linux.oracle.com/cve/CVE-2024-2511.html',
-                'https://linux.oracle.com/errata/ELSA-2024-9333.html',
-                'https://lists.debian.org/debian-lts-announce/2024/10/msg00033.html',
-                'https://lists.debian.org/debian-lts-announce/2024/11/msg00000.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2024-2511',
-                'https://security.netapp.com/advisory/ntap-20240503-0013/',
-                'https://ubuntu.com/security/notices/USN-6937-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2024-2511',
-                'https://www.openssl.org/news/secadv/20240408.txt',
-                'https://www.openssl.org/news/vulnerabilities.html'
-              ],
-              'severity':   'LOW',
-              'suppressed': false,
-              'title':      'openssl: Unbounded memory growth with session handling in TLSv1.3'
-            },
-            {
-              'cve':  'CVE-2024-9143',
-              'cvss': {
-                'redhat': {
-                  'v3score':  '3.7',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L'
-                }
-              },
-              'cwes': [
-                'CWE-125',
-                'CWE-787'
-              ],
-              'description':   "Issue summary: Use of the low-level GF(2^m) elliptic curve APIs with untrusted\nexplicit values for the field polynomial can lead to out-of-bounds memory reads\nor writes.\n\nImpact summary: Out of bound memory writes can lead to an application crash or\neven a possibility of a remote code execution, however, in all the protocols\ninvolving Elliptic Curve Cryptography that we're aware of, either only \"named\ncurves\" are supported, or, if explicit curve parameters are supported, they\nspecify an X9.62 encoding of binary (GF(2^m)) curves that can't represent\nproblematic input values. Thus the likelihood of existence of a vulnerable\napplication is low.\n\nIn particular, the X9.62 encoding is used for ECC keys in X.509 certificates,\nso problematic inputs cannot occur in the context of processing X.509\ncertificates.  Any problematic use-cases would have to be using an \"exotic\"\ncurve encoding.\n\nThe affected APIs include: EC_GROUP_new_curve_GF2m(), EC_GROUP_new_from_params(),\nand various supporting BN_GF2m_*() functions.\n\nApplications working with \"exotic\" explicit binary (GF(2^m)) curve parameters,\nthat make it possible to represent invalid field polynomials with a zero\nconstant term, via the above or similar APIs, may terminate abruptly as a\nresult of reading or writing outside of array bounds.  Remote code execution\ncannot easily be ruled out.\n\nThe FIPS modules in 3.3, 3.2, 3.1 and 3.0 are not affected by this issue.",
-              'diffID':        'sha256:86ddd1858dda5de0cc1e3cc31a93fddc627a28136b08db8cda7460de39f657a3',
-              'fixedVersions': [
-                '3.0.15-r1'
-              ],
-              'installedVersion': '3.0.7-r2',
-              'packageName':      'libssl3',
-              'purl':             'pkg:apk/alpine/libssl3@3.0.7-r2?arch=armhf&distro=3.17.1',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2024/10/16/1',
-                'http://www.openwall.com/lists/oss-security/2024/10/23/1',
-                'http://www.openwall.com/lists/oss-security/2024/10/24/1',
-                'https://access.redhat.com/security/cve/CVE-2024-9143',
-                'https://github.com/openssl/openssl/commit/72ae83ad214d2eef262461365a1975707f862712',
-                'https://github.com/openssl/openssl/commit/bc7e04d7c8d509fb78fc0e285aa948fb0da04700',
-                'https://github.com/openssl/openssl/commit/c0d3e4d32d2805f49bec30547f225bc4d092e1f4',
-                'https://github.com/openssl/openssl/commit/fdf6723362ca51bd883295efe206cb5b1cfa5154',
-                'https://github.openssl.org/openssl/extended-releases/commit/8efc0cbaa8ebba8e116f7b81a876a4123594d86a',
-                'https://github.openssl.org/openssl/extended-releases/commit/9d576994cec2b7aa37a91740ea7e680810957e41',
-                'https://lists.debian.org/debian-lts-announce/2024/10/msg00033.html',
-                'https://lists.debian.org/debian-lts-announce/2024/11/msg00000.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2024-9143',
-                'https://openssl-library.org/news/secadv/20241016.txt',
-                'https://security.netapp.com/advisory/ntap-20241101-0001/',
-                'https://ubuntu.com/security/notices/USN-7264-1',
-                'https://ubuntu.com/security/notices/USN-7278-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2024-9143'
-              ],
-              'severity':   'LOW',
-              'suppressed': false,
-              'title':      'openssl: Low-level invalid GF(2^m) parameters lead to OOB memory access'
-            },
-            {
-              'cve':  'CVE-2025-26519',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-787'
-              ],
-              'description':   'musl libc 0.9.13 through 1.2.5 before 1.2.6 has an out-of-bounds write vulnerability when an attacker can trigger iconv conversion of untrusted EUC-KR text to UTF-8.',
-              'diffID':        'sha256:86ddd1858dda5de0cc1e3cc31a93fddc627a28136b08db8cda7460de39f657a3',
-              'fixedVersions': [
-                '1.2.3-r6'
-              ],
-              'installedVersion': '1.2.3-r4',
-              'packageName':      'musl',
-              'purl':             'pkg:apk/alpine/musl@1.2.3-r4?arch=armhf&distro=3.17.1',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2025/02/13/2',
-                'http://www.openwall.com/lists/oss-security/2025/02/13/3',
-                'http://www.openwall.com/lists/oss-security/2025/02/13/4',
-                'http://www.openwall.com/lists/oss-security/2025/02/13/5',
-                'http://www.openwall.com/lists/oss-security/2025/02/14/5',
-                'http://www.openwall.com/lists/oss-security/2025/02/14/6',
-                'https://git.musl-libc.org/cgit/musl/commit/?id=c47ad25ea3b484e10326f933e927c0bc8cded3da',
-                'https://git.musl-libc.org/cgit/musl/commit/?id=e5adcd97b5196e29991b524237381a0202a60659',
-                'https://www.openwall.com/lists/oss-security/2025/02/13/2'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'musl libc 0.9.13 through 1.2.5 before 1.2.6 has an out-of-bounds write ...'
-            },
-            {
-              'cve':  'CVE-2025-26519',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-787'
-              ],
-              'description':   'musl libc 0.9.13 through 1.2.5 before 1.2.6 has an out-of-bounds write vulnerability when an attacker can trigger iconv conversion of untrusted EUC-KR text to UTF-8.',
-              'diffID':        'sha256:86ddd1858dda5de0cc1e3cc31a93fddc627a28136b08db8cda7460de39f657a3',
-              'fixedVersions': [
-                '1.2.3-r6'
-              ],
-              'installedVersion': '1.2.3-r4',
-              'packageName':      'musl-utils',
-              'purl':             'pkg:apk/alpine/musl-utils@1.2.3-r4?arch=armhf&distro=3.17.1',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2025/02/13/2',
-                'http://www.openwall.com/lists/oss-security/2025/02/13/3',
-                'http://www.openwall.com/lists/oss-security/2025/02/13/4',
-                'http://www.openwall.com/lists/oss-security/2025/02/13/5',
-                'http://www.openwall.com/lists/oss-security/2025/02/14/5',
-                'http://www.openwall.com/lists/oss-security/2025/02/14/6',
-                'https://git.musl-libc.org/cgit/musl/commit/?id=c47ad25ea3b484e10326f933e927c0bc8cded3da',
-                'https://git.musl-libc.org/cgit/musl/commit/?id=e5adcd97b5196e29991b524237381a0202a60659',
-                'https://www.openwall.com/lists/oss-security/2025/02/13/2'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'musl libc 0.9.13 through 1.2.5 before 1.2.6 has an out-of-bounds write ...'
-            },
-            {
-              'cve':  'CVE-2023-42363',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.5',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.8',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   'A use-after-free vulnerability was discovered in xasprintf function in xfuncs_printf.c:344 in BusyBox v.1.36.1.',
-              'diffID':        'sha256:86ddd1858dda5de0cc1e3cc31a93fddc627a28136b08db8cda7460de39f657a3',
-              'fixedVersions': [
-                '1.35.0-r31'
-              ],
-              'installedVersion': '1.35.0-r29',
-              'packageName':      'ssl_client',
-              'purl':             'pkg:apk/alpine/ssl_client@1.35.0-r29?arch=armhf&distro=3.17.1',
-              'references':       [
-                'http://lists.busybox.net/pipermail/busybox/2024-May/090760.html',
-                'https://access.redhat.com/security/cve/CVE-2023-42363',
-                'https://bugs.busybox.net/show_bug.cgi?id=15865',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-42363',
-                'https://ubuntu.com/security/notices/USN-6961-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-42363'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk'
-            },
-            {
-              'cve':  'CVE-2023-42364',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.5',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.8',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   'A use-after-free vulnerability in BusyBox v.1.36.1 allows attackers to cause a denial of service via a crafted awk pattern in the awk.c evaluate function.',
-              'diffID':        'sha256:86ddd1858dda5de0cc1e3cc31a93fddc627a28136b08db8cda7460de39f657a3',
-              'fixedVersions': [
-                '1.35.0-r31'
-              ],
-              'installedVersion': '1.35.0-r29',
-              'packageName':      'ssl_client',
-              'purl':             'pkg:apk/alpine/ssl_client@1.35.0-r29?arch=armhf&distro=3.17.1',
-              'references':       [
-                'http://lists.busybox.net/pipermail/busybox/2024-May/090762.html',
-                'https://access.redhat.com/security/cve/CVE-2023-42364',
-                'https://bugs.busybox.net/show_bug.cgi?id=15868',
-                'https://gitlab.alpinelinux.org/alpine/aports/-/blob/master/main/busybox/CVE-2023-42364-CVE-2023-42365.patch',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-42364',
-                'https://ubuntu.com/security/notices/USN-6961-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-42364'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'busybox: use-after-free'
-            },
-            {
-              'cve':  'CVE-2023-42365',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.5',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.8',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   'A use-after-free vulnerability was discovered in BusyBox v.1.36.1 via a crafted awk pattern in the awk.c copyvar function.',
-              'diffID':        'sha256:86ddd1858dda5de0cc1e3cc31a93fddc627a28136b08db8cda7460de39f657a3',
-              'fixedVersions': [
-                '1.35.0-r31'
-              ],
-              'installedVersion': '1.35.0-r29',
-              'packageName':      'ssl_client',
-              'purl':             'pkg:apk/alpine/ssl_client@1.35.0-r29?arch=armhf&distro=3.17.1',
-              'references':       [
-                'http://lists.busybox.net/pipermail/busybox/2024-May/090762.html',
-                'https://access.redhat.com/security/cve/CVE-2023-42365',
-                'https://bugs.busybox.net/show_bug.cgi?id=15871',
-                'https://gitlab.alpinelinux.org/alpine/aports/-/blob/master/main/busybox/CVE-2023-42364-CVE-2023-42365.patch',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-42365',
-                'https://ubuntu.com/security/notices/USN-6961-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-42365'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'busybox: use-after-free'
-            },
-            {
-              'cve':  'CVE-2023-42366',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.5',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.1',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-787'
-              ],
-              'description':   'A heap-buffer-overflow was discovered in BusyBox v.1.36.1 in the next_token function at awk.c:1159.',
-              'diffID':        'sha256:86ddd1858dda5de0cc1e3cc31a93fddc627a28136b08db8cda7460de39f657a3',
-              'fixedVersions': [
-                '1.35.0-r30'
-              ],
-              'installedVersion': '1.35.0-r29',
-              'packageName':      'ssl_client',
-              'purl':             'pkg:apk/alpine/ssl_client@1.35.0-r29?arch=armhf&distro=3.17.1',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2023-42366',
-                'https://bugs.busybox.net/show_bug.cgi?id=15874',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-42366',
-                'https://security.netapp.com/advisory/ntap-20241206-0007/',
-                'https://www.cve.org/CVERecord?id=CVE-2023-42366'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'busybox: A heap-buffer-overflow'
-            }
-          ]
-        }
-      ],
-      'summary': {
-        'critical':   0,
-        'high':       20,
-        'low':        4,
-        'medium':     44,
-        'suppressed': 0,
-        'unknown':    0
-      }
-    }
-  },
-  {
-    'id':    'default/5aaf15d60b23e9ff493f069f869a708ef6e0e310def0bf5c2d45b41ce0288c04',
-    'type':  'storage.sbomscanner.kubewarden.io.vulnerabilityreport',
-    'links': {
-      'patch':  'https://localhost:8005/v1/storage.sbomscanner.kubewarden.io.vulnerabilityreports/default/5aaf15d60b23e9ff493f069f869a708ef6e0e310def0bf5c2d45b41ce0288c04',
-      'remove': 'https://localhost:8005/v1/storage.sbomscanner.kubewarden.io.vulnerabilityreports/default/5aaf15d60b23e9ff493f069f869a708ef6e0e310def0bf5c2d45b41ce0288c04',
-      'self':   'https://localhost:8005/v1/storage.sbomscanner.kubewarden.io.vulnerabilityreports/default/5aaf15d60b23e9ff493f069f869a708ef6e0e310def0bf5c2d45b41ce0288c04',
-      'update': 'https://localhost:8005/v1/storage.sbomscanner.kubewarden.io.vulnerabilityreports/default/5aaf15d60b23e9ff493f069f869a708ef6e0e310def0bf5c2d45b41ce0288c04',
-      'view':   'https://localhost:8005/apis/storage.sbomscanner.kubewarden.io/v1alpha1/namespaces/default/vulnerabilityreports/5aaf15d60b23e9ff493f069f869a708ef6e0e310def0bf5c2d45b41ce0288c04'
-    },
-    'apiVersion':    'storage.sbomscanner.kubewarden.io/v1alpha1',
-    'imageMetadata': {
-      'digest':      'sha256:2c938e2d4c76142f33467f9157c24cb63849e11e0d7540ae70e99ab69f6fbd44',
-      'platform':    'linux/amd64',
-      'registry':    'demo-02',
-      'registryURI': 'ghcr.io',
-      'repository':  'linuxcontainers/alpine',
-      'tag':         '3.18'
-    },
-    'kind':     'VulnerabilityReport',
-    'metadata': {
-      'creationTimestamp': '2026-01-09T22:46:57Z',
-      'fields':            [
-        '5aaf15d60b23e9ff493f069f869a708ef6e0e310def0bf5c2d45b41ce0288c04',
-        'ghcr.io/linuxcontainers/alpine:3.18',
-        'linux/amd64',
-        '40 (0 suppressed)'
-      ],
-      'labels': {
-        'app.kubernetes.io/managed-by':          'sbomscanner',
-        'app.kubernetes.io/part-of':             'sbomscanner',
-        'sbomscanner.kubewarden.io/scanjob-uid': '42184d01-4b15-466f-98aa-e802d1b6b6b8'
-      },
-      'name':            '5aaf15d60b23e9ff493f069f869a708ef6e0e310def0bf5c2d45b41ce0288c04',
-      'namespace':       'default',
-      'ownerReferences': [
-        {
-          'apiVersion':         'storage.sbomscanner.kubewarden.io/v1alpha1',
-          'blockOwnerDeletion': true,
-          'controller':         true,
-          'kind':               'SBOM',
-          'name':               '5aaf15d60b23e9ff493f069f869a708ef6e0e310def0bf5c2d45b41ce0288c04',
-          'uid':                '5c7d65c3-69ad-4e3f-a438-7257e66d7c26'
-        }
-      ],
-      'relationships': [
-        {
-          'fromId':   'default/5aaf15d60b23e9ff493f069f869a708ef6e0e310def0bf5c2d45b41ce0288c04',
-          'fromType': 'storage.sbomscanner.kubewarden.io.sbom',
-          'rel':      'owner',
-          'state':    'active',
-          'message':  'Resource is current'
-        }
-      ],
-      'resourceVersion': '5',
-      'state':           {
-        'error':         false,
-        'message':       'Resource is current',
-        'name':          'active',
-        'transitioning': false
-      },
-      'uid': 'ecc49bd7-712b-4fff-a973-85ae47b157c2'
-    },
-    'report': {
-      'results': [
-        {
-          'class':           'os-pkgs',
-          'target':          '/var/run/worker/trivy.sbom.483135076.json (alpine 3.18.0)',
-          'type':            'alpine',
-          'vulnerabilities': [
-            {
-              'cve':  'CVE-2023-42363',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.5',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.8',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   'A use-after-free vulnerability was discovered in xasprintf function in xfuncs_printf.c:344 in BusyBox v.1.36.1.',
-              'diffID':        'sha256:10d47f76a792d77a3508f82b3ed8d1c8e9701d2aa1ece5e74cacd89b30e35b3f',
-              'fixedVersions': [
-                '1.36.1-r7'
-              ],
-              'installedVersion': '1.36.1-r1',
-              'packageName':      'busybox',
-              'purl':             'pkg:apk/alpine/busybox@1.36.1-r1?arch=x86_64&distro=3.18.0',
-              'references':       [
-                'http://lists.busybox.net/pipermail/busybox/2024-May/090760.html',
-                'https://access.redhat.com/security/cve/CVE-2023-42363',
-                'https://bugs.busybox.net/show_bug.cgi?id=15865',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-42363',
-                'https://ubuntu.com/security/notices/USN-6961-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-42363'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk'
-            },
-            {
-              'cve':  'CVE-2023-42364',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.5',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.8',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   'A use-after-free vulnerability in BusyBox v.1.36.1 allows attackers to cause a denial of service via a crafted awk pattern in the awk.c evaluate function.',
-              'diffID':        'sha256:10d47f76a792d77a3508f82b3ed8d1c8e9701d2aa1ece5e74cacd89b30e35b3f',
-              'fixedVersions': [
-                '1.36.1-r7'
-              ],
-              'installedVersion': '1.36.1-r1',
-              'packageName':      'busybox',
-              'purl':             'pkg:apk/alpine/busybox@1.36.1-r1?arch=x86_64&distro=3.18.0',
-              'references':       [
-                'http://lists.busybox.net/pipermail/busybox/2024-May/090762.html',
-                'https://access.redhat.com/security/cve/CVE-2023-42364',
-                'https://bugs.busybox.net/show_bug.cgi?id=15868',
-                'https://gitlab.alpinelinux.org/alpine/aports/-/blob/master/main/busybox/CVE-2023-42364-CVE-2023-42365.patch',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-42364',
-                'https://ubuntu.com/security/notices/USN-6961-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-42364'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'busybox: use-after-free'
-            },
-            {
-              'cve':  'CVE-2023-42365',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.5',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.8',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   'A use-after-free vulnerability was discovered in BusyBox v.1.36.1 via a crafted awk pattern in the awk.c copyvar function.',
-              'diffID':        'sha256:10d47f76a792d77a3508f82b3ed8d1c8e9701d2aa1ece5e74cacd89b30e35b3f',
-              'fixedVersions': [
-                '1.36.1-r7'
-              ],
-              'installedVersion': '1.36.1-r1',
-              'packageName':      'busybox',
-              'purl':             'pkg:apk/alpine/busybox@1.36.1-r1?arch=x86_64&distro=3.18.0',
-              'references':       [
-                'http://lists.busybox.net/pipermail/busybox/2024-May/090762.html',
-                'https://access.redhat.com/security/cve/CVE-2023-42365',
-                'https://bugs.busybox.net/show_bug.cgi?id=15871',
-                'https://gitlab.alpinelinux.org/alpine/aports/-/blob/master/main/busybox/CVE-2023-42364-CVE-2023-42365.patch',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-42365',
-                'https://ubuntu.com/security/notices/USN-6961-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-42365'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'busybox: use-after-free'
-            },
-            {
-              'cve':  'CVE-2023-42366',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.5',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.1',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-787'
-              ],
-              'description':   'A heap-buffer-overflow was discovered in BusyBox v.1.36.1 in the next_token function at awk.c:1159.',
-              'diffID':        'sha256:10d47f76a792d77a3508f82b3ed8d1c8e9701d2aa1ece5e74cacd89b30e35b3f',
-              'fixedVersions': [
-                '1.36.1-r6'
-              ],
-              'installedVersion': '1.36.1-r1',
-              'packageName':      'busybox',
-              'purl':             'pkg:apk/alpine/busybox@1.36.1-r1?arch=x86_64&distro=3.18.0',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2023-42366',
-                'https://bugs.busybox.net/show_bug.cgi?id=15874',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-42366',
-                'https://security.netapp.com/advisory/ntap-20241206-0007/',
-                'https://www.cve.org/CVERecord?id=CVE-2023-42366'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'busybox: A heap-buffer-overflow'
-            },
-            {
-              'cve':  'CVE-2023-42363',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.5',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.8',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   'A use-after-free vulnerability was discovered in xasprintf function in xfuncs_printf.c:344 in BusyBox v.1.36.1.',
-              'diffID':        'sha256:10d47f76a792d77a3508f82b3ed8d1c8e9701d2aa1ece5e74cacd89b30e35b3f',
-              'fixedVersions': [
-                '1.36.1-r7'
-              ],
-              'installedVersion': '1.36.1-r1',
-              'packageName':      'busybox-binsh',
-              'purl':             'pkg:apk/alpine/busybox-binsh@1.36.1-r1?arch=x86_64&distro=3.18.0',
-              'references':       [
-                'http://lists.busybox.net/pipermail/busybox/2024-May/090760.html',
-                'https://access.redhat.com/security/cve/CVE-2023-42363',
-                'https://bugs.busybox.net/show_bug.cgi?id=15865',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-42363',
-                'https://ubuntu.com/security/notices/USN-6961-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-42363'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk'
-            },
-            {
-              'cve':  'CVE-2023-42364',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.5',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.8',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   'A use-after-free vulnerability in BusyBox v.1.36.1 allows attackers to cause a denial of service via a crafted awk pattern in the awk.c evaluate function.',
-              'diffID':        'sha256:10d47f76a792d77a3508f82b3ed8d1c8e9701d2aa1ece5e74cacd89b30e35b3f',
-              'fixedVersions': [
-                '1.36.1-r7'
-              ],
-              'installedVersion': '1.36.1-r1',
-              'packageName':      'busybox-binsh',
-              'purl':             'pkg:apk/alpine/busybox-binsh@1.36.1-r1?arch=x86_64&distro=3.18.0',
-              'references':       [
-                'http://lists.busybox.net/pipermail/busybox/2024-May/090762.html',
-                'https://access.redhat.com/security/cve/CVE-2023-42364',
-                'https://bugs.busybox.net/show_bug.cgi?id=15868',
-                'https://gitlab.alpinelinux.org/alpine/aports/-/blob/master/main/busybox/CVE-2023-42364-CVE-2023-42365.patch',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-42364',
-                'https://ubuntu.com/security/notices/USN-6961-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-42364'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'busybox: use-after-free'
-            },
-            {
-              'cve':  'CVE-2023-42365',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.5',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.8',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   'A use-after-free vulnerability was discovered in BusyBox v.1.36.1 via a crafted awk pattern in the awk.c copyvar function.',
-              'diffID':        'sha256:10d47f76a792d77a3508f82b3ed8d1c8e9701d2aa1ece5e74cacd89b30e35b3f',
-              'fixedVersions': [
-                '1.36.1-r7'
-              ],
-              'installedVersion': '1.36.1-r1',
-              'packageName':      'busybox-binsh',
-              'purl':             'pkg:apk/alpine/busybox-binsh@1.36.1-r1?arch=x86_64&distro=3.18.0',
-              'references':       [
-                'http://lists.busybox.net/pipermail/busybox/2024-May/090762.html',
-                'https://access.redhat.com/security/cve/CVE-2023-42365',
-                'https://bugs.busybox.net/show_bug.cgi?id=15871',
-                'https://gitlab.alpinelinux.org/alpine/aports/-/blob/master/main/busybox/CVE-2023-42364-CVE-2023-42365.patch',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-42365',
-                'https://ubuntu.com/security/notices/USN-6961-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-42365'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'busybox: use-after-free'
-            },
-            {
-              'cve':  'CVE-2023-42366',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.5',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.1',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-787'
-              ],
-              'description':   'A heap-buffer-overflow was discovered in BusyBox v.1.36.1 in the next_token function at awk.c:1159.',
-              'diffID':        'sha256:10d47f76a792d77a3508f82b3ed8d1c8e9701d2aa1ece5e74cacd89b30e35b3f',
-              'fixedVersions': [
-                '1.36.1-r6'
-              ],
-              'installedVersion': '1.36.1-r1',
-              'packageName':      'busybox-binsh',
-              'purl':             'pkg:apk/alpine/busybox-binsh@1.36.1-r1?arch=x86_64&distro=3.18.0',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2023-42366',
-                'https://bugs.busybox.net/show_bug.cgi?id=15874',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-42366',
-                'https://security.netapp.com/advisory/ntap-20241206-0007/',
-                'https://www.cve.org/CVERecord?id=CVE-2023-42366'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'busybox: A heap-buffer-overflow'
-            },
-            {
-              'cve':  'CVE-2023-5363',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N'
-                },
-                'redhat': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-684'
-              ],
-              'description':   "Issue summary: A bug has been identified in the processing of key and\ninitialisation vector (IV) lengths.  This can lead to potential truncation\nor overruns during the initialisation of some symmetric ciphers.\n\nImpact summary: A truncation in the IV can result in non-uniqueness,\nwhich could result in loss of confidentiality for some cipher modes.\n\nWhen calling EVP_EncryptInit_ex2(), EVP_DecryptInit_ex2() or\nEVP_CipherInit_ex2() the provided OSSL_PARAM array is processed after\nthe key and IV have been established.  Any alterations to the key length,\nvia the \"keylen\" parameter or the IV length, via the \"ivlen\" parameter,\nwithin the OSSL_PARAM array will not take effect as intended, potentially\ncausing truncation or overreading of these values.  The following ciphers\nand cipher modes are impacted: RC2, RC4, RC5, CCM, GCM and OCB.\n\nFor the CCM, GCM and OCB cipher modes, truncation of the IV can result in\nloss of confidentiality.  For example, when following NIST's SP 800-38D\nsection 8.2.1 guidance for constructing a deterministic IV for AES in\nGCM mode, truncation of the counter portion could lead to IV reuse.\n\nBoth truncations and overruns of the key and overruns of the IV will\nproduce incorrect results and could, in some cases, trigger a memory\nexception.  However, these issues are not currently assessed as security\ncritical.\n\nChanging the key and/or IV lengths is not considered to be a common operation\nand the vulnerable API was recently introduced. Furthermore it is likely that\napplication developers will have spotted this problem during testing since\ndecryption would fail unless both peers in the communication were similarly\nvulnerable. For these reasons we expect the probability of an application being\nvulnerable to this to be quite low. However if an application is vulnerable then\nthis issue is considered very serious. For these reasons we have assessed this\nissue as Moderate severity overall.\n\nThe OpenSSL SSL/TLS implementation is not affected by this issue.\n\nThe OpenSSL 3.0 and 3.1 FIPS providers are not affected by this because\nthe issue lies outside of the FIPS provider boundary.\n\nOpenSSL 3.1 and 3.0 are vulnerable to this issue.",
-              'diffID':        'sha256:10d47f76a792d77a3508f82b3ed8d1c8e9701d2aa1ece5e74cacd89b30e35b3f',
-              'fixedVersions': [
-                '3.1.4-r0'
-              ],
-              'installedVersion': '3.1.1-r3',
-              'packageName':      'libcrypto3',
-              'purl':             'pkg:apk/alpine/libcrypto3@3.1.1-r3?arch=x86_64&distro=3.18.0',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2023/10/24/1',
-                'https://access.redhat.com/errata/RHSA-2024:0310',
-                'https://access.redhat.com/security/cve/CVE-2023-5363',
-                'https://bugzilla.redhat.com/2243839',
-                'https://errata.almalinux.org/9/ALSA-2024-0310.html',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=0df40630850fb2740e6be6890bb905d3fc623b2d',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=5f69f5c65e483928c4b28ed16af6e5742929f1ee',
-                'https://linux.oracle.com/cve/CVE-2023-5363.html',
-                'https://linux.oracle.com/errata/ELSA-2024-12093.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-5363',
-                'https://security.netapp.com/advisory/ntap-20231027-0010/',
-                'https://security.netapp.com/advisory/ntap-20240201-0003/',
-                'https://security.netapp.com/advisory/ntap-20240201-0004/',
-                'https://security.netapp.com/advisory/ntap-20241108-0002/',
-                'https://ubuntu.com/security/notices/USN-6450-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-5363',
-                'https://www.debian.org/security/2023/dsa-5532',
-                'https://www.openssl.org/news/secadv/20231024.txt'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: Incorrect cipher key and IV length processing'
-            },
-            {
-              'cve':  'CVE-2024-6119',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-843'
-              ],
-              'description':   "Issue summary: Applications performing certificate name checks (e.g., TLS\nclients checking server certificates) may attempt to read an invalid memory\naddress resulting in abnormal termination of the application process.\n\nImpact summary: Abnormal termination of an application can a cause a denial of\nservice.\n\nApplications performing certificate name checks (e.g., TLS clients checking\nserver certificates) may attempt to read an invalid memory address when\ncomparing the expected name with an `otherName` subject alternative name of an\nX.509 certificate. This may result in an exception that terminates the\napplication program.\n\nNote that basic certificate chain validation (signatures, dates, ...) is not\naffected, the denial of service can occur only when the application also\nspecifies an expected DNS name, Email address or IP address.\n\nTLS servers rarely solicit client certificates, and even when they do, they\ngenerally don't perform a name check against a reference identifier (expected\nidentity), but rather extract the presented identity after checking the\ncertificate chain.  So TLS servers are generally not affected and the severity\nof the issue is Moderate.\n\nThe FIPS modules in 3.3, 3.2, 3.1 and 3.0 are not affected by this issue.",
-              'diffID':        'sha256:10d47f76a792d77a3508f82b3ed8d1c8e9701d2aa1ece5e74cacd89b30e35b3f',
-              'fixedVersions': [
-                '3.1.7-r0'
-              ],
-              'installedVersion': '3.1.1-r3',
-              'packageName':      'libcrypto3',
-              'purl':             'pkg:apk/alpine/libcrypto3@3.1.1-r3?arch=x86_64&distro=3.18.0',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2024/09/03/4',
-                'https://access.redhat.com/errata/RHSA-2024:8935',
-                'https://access.redhat.com/security/cve/CVE-2024-6119',
-                'https://bugzilla.redhat.com/2306158',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2306158',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-6119',
-                'https://errata.almalinux.org/9/ALSA-2024-8935.html',
-                'https://errata.rockylinux.org/RLSA-2024:6783',
-                'https://github.com/openssl/openssl/commit/05f360d9e849a1b277db628f1f13083a7f8dd04f',
-                'https://github.com/openssl/openssl/commit/06d1dc3fa96a2ba5a3e22735a033012aadc9f0d6',
-                'https://github.com/openssl/openssl/commit/621f3729831b05ee828a3203eddb621d014ff2b2',
-                'https://github.com/openssl/openssl/commit/7dfcee2cd2a63b2c64b9b4b0850be64cb695b0a0',
-                'https://github.com/openssl/openssl/security/advisories/GHSA-5qrj-vq78-58fj',
-                'https://linux.oracle.com/cve/CVE-2024-6119.html',
-                'https://linux.oracle.com/errata/ELSA-2024-8935.html',
-                'https://lists.freebsd.org/archives/freebsd-security/2024-September/000303.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2024-6119',
-                'https://openssl-library.org/news/secadv/20240903.txt',
-                'https://security.netapp.com/advisory/ntap-20240912-0001/',
-                'https://ubuntu.com/security/notices/USN-6986-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2024-6119'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: Possible denial of service in X.509 name checks'
-            },
-            {
-              'cve':  'CVE-2023-3817',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L'
-                },
-                'redhat': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L'
-                }
-              },
-              'cwes': [
-                'CWE-606',
-                'CWE-834'
-              ],
-              'description':   'Issue summary: Checking excessively long DH keys or parameters may be very slow.\n\nImpact summary: Applications that use the functions DH_check(), DH_check_ex()\nor EVP_PKEY_param_check() to check a DH key or DH parameters may experience long\ndelays. Where the key or parameters that are being checked have been obtained\nfrom an untrusted source this may lead to a Denial of Service.\n\nThe function DH_check() performs various checks on DH parameters. After fixing\nCVE-2023-3446 it was discovered that a large q parameter value can also trigger\nan overly long computation during some of these checks. A correct q value,\nif present, cannot be larger than the modulus p parameter, thus it is\nunnecessary to perform these checks if q is larger than p.\n\nAn application that calls DH_check() and supplies a key or parameters obtained\nfrom an untrusted source could be vulnerable to a Denial of Service attack.\n\nThe function DH_check() is itself called by a number of other OpenSSL functions.\nAn application calling any of those other functions may similarly be affected.\nThe other functions affected by this are DH_check_ex() and\nEVP_PKEY_param_check().\n\nAlso vulnerable are the OpenSSL dhparam and pkeyparam command line applications\nwhen using the "-check" option.\n\nThe OpenSSL SSL/TLS implementation is not affected by this issue.\n\nThe OpenSSL 3.0 and 3.1 FIPS providers are not affected by this issue.',
-              'diffID':        'sha256:10d47f76a792d77a3508f82b3ed8d1c8e9701d2aa1ece5e74cacd89b30e35b3f',
-              'fixedVersions': [
-                '3.1.2-r0'
-              ],
-              'installedVersion': '3.1.1-r3',
-              'packageName':      'libcrypto3',
-              'purl':             'pkg:apk/alpine/libcrypto3@3.1.1-r3?arch=x86_64&distro=3.18.0',
-              'references':       [
-                'http://seclists.org/fulldisclosure/2023/Jul/43',
-                'http://www.openwall.com/lists/oss-security/2023/07/31/1',
-                'http://www.openwall.com/lists/oss-security/2023/09/22/11',
-                'http://www.openwall.com/lists/oss-security/2023/09/22/9',
-                'http://www.openwall.com/lists/oss-security/2023/11/06/2',
-                'https://access.redhat.com/errata/RHSA-2024:2447',
-                'https://access.redhat.com/security/cve/CVE-2023-3817',
-                'https://bugzilla.redhat.com/2223016',
-                'https://bugzilla.redhat.com/2224962',
-                'https://bugzilla.redhat.com/2227852',
-                'https://bugzilla.redhat.com/2248616',
-                'https://bugzilla.redhat.com/2257571',
-                'https://bugzilla.redhat.com/2258502',
-                'https://bugzilla.redhat.com/2259944',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2224962',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2227852',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2248616',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2270358',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3446',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3817',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-5678',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-2408',
-                'https://errata.almalinux.org/9/ALSA-2024-2447.html',
-                'https://errata.rockylinux.org/RLSA-2023:7877',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=6a1eb62c29db6cb5eec707f9338aee00f44e26f5',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=869ad69aadd985c7b8ca6f4e5dd0eb274c9f3644',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=9002fd07327a91f35ba6c1307e71fa6fd4409b7f',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=91ddeba0f2269b017dc06c46c993a788974b1aa5',
-                'https://linux.oracle.com/cve/CVE-2023-3817.html',
-                'https://linux.oracle.com/errata/ELSA-2024-2447.html',
-                'https://lists.debian.org/debian-lts-announce/2023/08/msg00019.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-3817',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://security.netapp.com/advisory/ntap-20230818-0014/',
-                'https://security.netapp.com/advisory/ntap-20231027-0008/',
-                'https://security.netapp.com/advisory/ntap-20240621-0006/',
-                'https://ubuntu.com/security/notices/USN-6435-1',
-                'https://ubuntu.com/security/notices/USN-6435-2',
-                'https://ubuntu.com/security/notices/USN-6450-1',
-                'https://ubuntu.com/security/notices/USN-6709-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-3817',
-                'https://www.openssl.org/news/secadv/20230731.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'OpenSSL: Excessive time spent checking DH q parameter value'
-            },
-            {
-              'cve':  'CVE-2023-5678',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L'
-                },
-                'redhat': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L'
-                }
-              },
-              'cwes': [
-                'CWE-606',
-                'CWE-754'
-              ],
-              'description':   "Issue summary: Generating excessively long X9.42 DH keys or checking\nexcessively long X9.42 DH keys or parameters may be very slow.\n\nImpact summary: Applications that use the functions DH_generate_key() to\ngenerate an X9.42 DH key may experience long delays.  Likewise, applications\nthat use DH_check_pub_key(), DH_check_pub_key_ex() or EVP_PKEY_public_check()\nto check an X9.42 DH key or X9.42 DH parameters may experience long delays.\nWhere the key or parameters that are being checked have been obtained from\nan untrusted source this may lead to a Denial of Service.\n\nWhile DH_check() performs all the necessary checks (as of CVE-2023-3817),\nDH_check_pub_key() doesn't make any of these checks, and is therefore\nvulnerable for excessively large P and Q parameters.\n\nLikewise, while DH_generate_key() performs a check for an excessively large\nP, it doesn't check for an excessively large Q.\n\nAn application that calls DH_generate_key() or DH_check_pub_key() and\nsupplies a key or parameters obtained from an untrusted source could be\nvulnerable to a Denial of Service attack.\n\nDH_generate_key() and DH_check_pub_key() are also called by a number of\nother OpenSSL functions.  An application calling any of those other\nfunctions may similarly be affected.  The other functions affected by this\nare DH_check_pub_key_ex(), EVP_PKEY_public_check(), and EVP_PKEY_generate().\n\nAlso vulnerable are the OpenSSL pkey command line application when using the\n\"-pubcheck\" option, as well as the OpenSSL genpkey command line application.\n\nThe OpenSSL SSL/TLS implementation is not affected by this issue.\n\nThe OpenSSL 3.0 and 3.1 FIPS providers are not affected by this issue.",
-              'diffID':        'sha256:10d47f76a792d77a3508f82b3ed8d1c8e9701d2aa1ece5e74cacd89b30e35b3f',
-              'fixedVersions': [
-                '3.1.4-r1'
-              ],
-              'installedVersion': '3.1.1-r3',
-              'packageName':      'libcrypto3',
-              'purl':             'pkg:apk/alpine/libcrypto3@3.1.1-r3?arch=x86_64&distro=3.18.0',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2024/03/11/1',
-                'https://access.redhat.com/errata/RHSA-2024:2447',
-                'https://access.redhat.com/security/cve/CVE-2023-5678',
-                'https://bugzilla.redhat.com/2223016',
-                'https://bugzilla.redhat.com/2224962',
-                'https://bugzilla.redhat.com/2227852',
-                'https://bugzilla.redhat.com/2248616',
-                'https://bugzilla.redhat.com/2257571',
-                'https://bugzilla.redhat.com/2258502',
-                'https://bugzilla.redhat.com/2259944',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2224962',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2227852',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2248616',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2270358',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3446',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3817',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-5678',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-2408',
-                'https://errata.almalinux.org/9/ALSA-2024-2447.html',
-                'https://errata.rockylinux.org/RLSA-2023:7877',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=34efaef6c103d636ab507a0cc34dca4d3aecc055',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=710fee740904b6290fef0dd5536fbcedbc38ff0c',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=db925ae2e65d0d925adef429afc37f75bd1c2017',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=ddeb4b6c6d527e54ce9a99cba785c0f7776e54b6',
-                'https://linux.oracle.com/cve/CVE-2023-5678.html',
-                'https://linux.oracle.com/errata/ELSA-2024-2447.html',
-                'https://lists.debian.org/debian-lts-announce/2024/10/msg00033.html',
-                'https://lists.debian.org/debian-lts-announce/2024/11/msg00000.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-5678',
-                'https://security.netapp.com/advisory/ntap-20231130-0010/',
-                'https://ubuntu.com/security/notices/USN-6622-1',
-                'https://ubuntu.com/security/notices/USN-6632-1',
-                'https://ubuntu.com/security/notices/USN-6709-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-5678',
-                'https://www.openssl.org/news/secadv/20231106.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: Generating excessively long X9.42 DH keys or checking excessively long X9.42 DH keys or parameters may be very slow'
-            },
-            {
-              'cve':  'CVE-2023-6129',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '6.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-440',
-                'CWE-787'
-              ],
-              'description':   'Issue summary: The POLY1305 MAC (message authentication code) implementation\ncontains a bug that might corrupt the internal state of applications running\non PowerPC CPU based platforms if the CPU provides vector instructions.\n\nImpact summary: If an attacker can influence whether the POLY1305 MAC\nalgorithm is used, the application state might be corrupted with various\napplication dependent consequences.\n\nThe POLY1305 MAC (message authentication code) implementation in OpenSSL for\nPowerPC CPUs restores the contents of vector registers in a different order\nthan they are saved. Thus the contents of some of these vector registers\nare corrupted when returning to the caller. The vulnerable code is used only\non newer PowerPC processors supporting the PowerISA 2.07 instructions.\n\nThe consequences of this kind of internal application state corruption can\nbe various - from no consequences, if the calling application does not\ndepend on the contents of non-volatile XMM registers at all, to the worst\nconsequences, where the attacker could get complete control of the application\nprocess. However unless the compiler uses the vector registers for storing\npointers, the most likely consequence, if any, would be an incorrect result\nof some application dependent calculations or a crash leading to a denial of\nservice.\n\nThe POLY1305 MAC algorithm is most frequently used as part of the\nCHACHA20-POLY1305 AEAD (authenticated encryption with associated data)\nalgorithm. The most common usage of this AEAD cipher is with TLS protocol\nversions 1.2 and 1.3. If this cipher is enabled on the server a malicious\nclient can influence whether this AEAD cipher is used. This implies that\nTLS server applications using OpenSSL can be potentially impacted. However\nwe are currently not aware of any concrete application that would be affected\nby this issue therefore we consider this a Low severity security issue.',
-              'diffID':        'sha256:10d47f76a792d77a3508f82b3ed8d1c8e9701d2aa1ece5e74cacd89b30e35b3f',
-              'fixedVersions': [
-                '3.1.4-r3'
-              ],
-              'installedVersion': '3.1.1-r3',
-              'packageName':      'libcrypto3',
-              'purl':             'pkg:apk/alpine/libcrypto3@3.1.1-r3?arch=x86_64&distro=3.18.0',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2024/03/11/1',
-                'https://access.redhat.com/errata/RHSA-2024:9088',
-                'https://access.redhat.com/security/cve/CVE-2023-6129',
-                'https://bugzilla.redhat.com/2257571',
-                'https://bugzilla.redhat.com/2258502',
-                'https://bugzilla.redhat.com/2259944',
-                'https://bugzilla.redhat.com/2284243',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2257571',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2258502',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2259944',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2284243',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-6129',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-6237',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-0727',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-1298',
-                'https://errata.almalinux.org/9/ALSA-2024-9088.html',
-                'https://errata.rockylinux.org/RLSA-2024:9088',
-                'https://github.com/openssl/openssl/commit/050d26383d4e264966fb83428e72d5d48f402d35',
-                'https://github.com/openssl/openssl/commit/5b139f95c9a47a55a0c54100f3837b1eee942b04',
-                'https://github.com/openssl/openssl/commit/f3fc5808fe9ff74042d639839610d03b8fdcc015',
-                'https://linux.oracle.com/cve/CVE-2023-6129.html',
-                'https://linux.oracle.com/errata/ELSA-2024-9088.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-6129',
-                'https://security.netapp.com/advisory/ntap-20240216-0009/',
-                'https://security.netapp.com/advisory/ntap-20240426-0008/',
-                'https://security.netapp.com/advisory/ntap-20240426-0013/',
-                'https://security.netapp.com/advisory/ntap-20240503-0011/',
-                'https://ubuntu.com/security/notices/USN-6622-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-6129',
-                'https://www.openssl.org/news/secadv/20240109.txt',
-                'https://www.openwall.com/lists/oss-security/2024/01/09/1'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: POLY1305 MAC implementation corrupts vector registers on PowerPC'
-            },
-            {
-              'cve':  'CVE-2023-6237',
-              'cvss': {
-                'redhat': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-606'
-              ],
-              'description':   "Issue summary: Checking excessively long invalid RSA public keys may take\na long time.\n\nImpact summary: Applications that use the function EVP_PKEY_public_check()\nto check RSA public keys may experience long delays. Where the key that\nis being checked has been obtained from an untrusted source this may lead\nto a Denial of Service.\n\nWhen function EVP_PKEY_public_check() is called on RSA public keys,\na computation is done to confirm that the RSA modulus, n, is composite.\nFor valid RSA keys, n is a product of two or more large primes and this\ncomputation completes quickly. However, if n is an overly large prime,\nthen this computation would take a long time.\n\nAn application that calls EVP_PKEY_public_check() and supplies an RSA key\nobtained from an untrusted source could be vulnerable to a Denial of Service\nattack.\n\nThe function EVP_PKEY_public_check() is not called from other OpenSSL\nfunctions however it is called from the OpenSSL pkey command line\napplication. For that reason that application is also vulnerable if used\nwith the '-pubin' and '-check' options on untrusted data.\n\nThe OpenSSL SSL/TLS implementation is not affected by this issue.\n\nThe OpenSSL 3.0 and 3.1 FIPS providers are affected by this issue.",
-              'diffID':        'sha256:10d47f76a792d77a3508f82b3ed8d1c8e9701d2aa1ece5e74cacd89b30e35b3f',
-              'fixedVersions': [
-                '3.1.4-r4'
-              ],
-              'installedVersion': '3.1.1-r3',
-              'packageName':      'libcrypto3',
-              'purl':             'pkg:apk/alpine/libcrypto3@3.1.1-r3?arch=x86_64&distro=3.18.0',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2024/03/11/1',
-                'https://access.redhat.com/errata/RHSA-2024:9088',
-                'https://access.redhat.com/security/cve/CVE-2023-6237',
-                'https://bugzilla.redhat.com/2257571',
-                'https://bugzilla.redhat.com/2258502',
-                'https://bugzilla.redhat.com/2259944',
-                'https://bugzilla.redhat.com/2284243',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2257571',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2258502',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2259944',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2284243',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-6129',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-6237',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-0727',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-1298',
-                'https://errata.almalinux.org/9/ALSA-2024-9088.html',
-                'https://errata.rockylinux.org/RLSA-2024:9088',
-                'https://github.com/openssl/openssl/commit/0b0f7abfb37350794a4b8960fafc292cd5d1b84d',
-                'https://github.com/openssl/openssl/commit/18c02492138d1eb8b6548cb26e7b625fb2414a2a',
-                'https://github.com/openssl/openssl/commit/a830f551557d3d66a84bbb18a5b889c640c36294',
-                'https://linux.oracle.com/cve/CVE-2023-6237.html',
-                'https://linux.oracle.com/errata/ELSA-2024-9088.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-6237',
-                'https://security.netapp.com/advisory/ntap-20240531-0007/',
-                'https://ubuntu.com/security/notices/USN-6622-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-6237',
-                'https://www.openssl.org/news/secadv/20240115.txt',
-                'https://www.openwall.com/lists/oss-security/2024/01/15/2'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: Excessive time spent checking invalid RSA public keys'
-            },
-            {
-              'cve':  'CVE-2024-0727',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '5.5',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H'
-                },
-                'nvd': {
-                  'v3score':  '5.5',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '5.5',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-476'
-              ],
-              'description':   'Issue summary: Processing a maliciously formatted PKCS12 file may lead OpenSSL\nto crash leading to a potential Denial of Service attack\n\nImpact summary: Applications loading files in the PKCS12 format from untrusted\nsources might terminate abruptly.\n\nA file in PKCS12 format can contain certificates and keys and may come from an\nuntrusted source. The PKCS12 specification allows certain fields to be NULL, but\nOpenSSL does not correctly check for this case. This can lead to a NULL pointer\ndereference that results in OpenSSL crashing. If an application processes PKCS12\nfiles from an untrusted source using the OpenSSL APIs then that application will\nbe vulnerable to this issue.\n\nOpenSSL APIs that are vulnerable to this are: PKCS12_parse(),\nPKCS12_unpack_p7data(), PKCS12_unpack_p7encdata(), PKCS12_unpack_authsafes()\nand PKCS12_newpass().\n\nWe have also fixed a similar issue in SMIME_write_PKCS7(). However since this\nfunction is related to writing data we do not consider it security significant.\n\nThe FIPS modules in 3.2, 3.1 and 3.0 are not affected by this issue.',
-              'diffID':        'sha256:10d47f76a792d77a3508f82b3ed8d1c8e9701d2aa1ece5e74cacd89b30e35b3f',
-              'fixedVersions': [
-                '3.1.4-r5'
-              ],
-              'installedVersion': '3.1.1-r3',
-              'packageName':      'libcrypto3',
-              'purl':             'pkg:apk/alpine/libcrypto3@3.1.1-r3?arch=x86_64&distro=3.18.0',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2024/03/11/1',
-                'https://access.redhat.com/errata/RHSA-2024:9088',
-                'https://access.redhat.com/security/cve/CVE-2024-0727',
-                'https://bugzilla.redhat.com/2257571',
-                'https://bugzilla.redhat.com/2258502',
-                'https://bugzilla.redhat.com/2259944',
-                'https://bugzilla.redhat.com/2284243',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2257571',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2258502',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2259944',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2284243',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-6129',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-6237',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-0727',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-1298',
-                'https://errata.almalinux.org/9/ALSA-2024-9088.html',
-                'https://errata.rockylinux.org/RLSA-2024:9088',
-                'https://github.com/alexcrichton/openssl-src-rs/commit/add20f73b6b42be7451af2e1044d4e0e778992b2',
-                'https://github.com/github/advisory-database/pull/3472',
-                'https://github.com/openssl/openssl/commit/09df4395b5071217b76dc7d3d2e630eb8c5a79c2',
-                'https://github.com/openssl/openssl/commit/775acfdbd0c6af9ac855f34969cdab0c0c90844a',
-                'https://github.com/openssl/openssl/commit/d135eeab8a5dbf72b3da5240bab9ddb7678dbd2c',
-                'https://github.com/openssl/openssl/pull/23362',
-                'https://github.com/pyca/cryptography/commit/3519591d255d4506fbcd0d04037d45271903c64d',
-                'https://github.openssl.org/openssl/extended-releases/commit/03b3941d60c4bce58fab69a0c22377ab439bc0e8',
-                'https://github.openssl.org/openssl/extended-releases/commit/aebaa5883e31122b404e450732dc833dc9dee539',
-                'https://linux.oracle.com/cve/CVE-2024-0727.html',
-                'https://linux.oracle.com/errata/ELSA-2024-9088.html',
-                'https://lists.debian.org/debian-lts-announce/2024/10/msg00033.html',
-                'https://lists.debian.org/debian-lts-announce/2024/11/msg00000.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2024-0727',
-                'https://security.netapp.com/advisory/ntap-20240208-0006',
-                'https://security.netapp.com/advisory/ntap-20240208-0006/',
-                'https://ubuntu.com/security/notices/USN-6622-1',
-                'https://ubuntu.com/security/notices/USN-6632-1',
-                'https://ubuntu.com/security/notices/USN-6709-1',
-                'https://ubuntu.com/security/notices/USN-7018-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2024-0727',
-                'https://www.openssl.org/news/secadv/20240125.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: denial of service via null dereference'
-            },
-            {
-              'cve':  'CVE-2024-13176',
-              'cvss': {
-                'redhat': {
-                  'v3score':  '4.7',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-385'
-              ],
-              'description':   'Issue summary: A timing side-channel which could potentially allow recovering\nthe private key exists in the ECDSA signature computation.\n\nImpact summary: A timing side-channel in ECDSA signature computations\ncould allow recovering the private key by an attacker. However, measuring\nthe timing would require either local access to the signing application or\na very fast network connection with low latency.\n\nThere is a timing signal of around 300 nanoseconds when the top word of\nthe inverted ECDSA nonce value is zero. This can happen with significant\nprobability only for some of the supported elliptic curves. In particular\nthe NIST P-521 curve is affected. To be able to measure this leak, the attacker\nprocess must either be located in the same physical computer or must\nhave a very fast network connection with low latency. For that reason\nthe severity of this vulnerability is Low.\n\nThe FIPS modules in 3.4, 3.3, 3.2, 3.1 and 3.0 are affected by this issue.',
-              'diffID':        'sha256:10d47f76a792d77a3508f82b3ed8d1c8e9701d2aa1ece5e74cacd89b30e35b3f',
-              'fixedVersions': [
-                '3.1.8-r0'
-              ],
-              'installedVersion': '3.1.1-r3',
-              'packageName':      'libcrypto3',
-              'purl':             'pkg:apk/alpine/libcrypto3@3.1.1-r3?arch=x86_64&distro=3.18.0',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2025/01/20/2',
-                'https://access.redhat.com/errata/RHSA-2025:16046',
-                'https://access.redhat.com/security/cve/CVE-2024-13176',
-                'https://bugzilla.redhat.com/2359885',
-                'https://bugzilla.redhat.com/2359888',
-                'https://bugzilla.redhat.com/2359892',
-                'https://bugzilla.redhat.com/2359894',
-                'https://bugzilla.redhat.com/2359895',
-                'https://bugzilla.redhat.com/2359899',
-                'https://bugzilla.redhat.com/2359900',
-                'https://bugzilla.redhat.com/2359902',
-                'https://bugzilla.redhat.com/2359903',
-                'https://bugzilla.redhat.com/2359911',
-                'https://bugzilla.redhat.com/2359918',
-                'https://bugzilla.redhat.com/2359920',
-                'https://bugzilla.redhat.com/2359924',
-                'https://bugzilla.redhat.com/2359928',
-                'https://bugzilla.redhat.com/2359930',
-                'https://bugzilla.redhat.com/2359932',
-                'https://bugzilla.redhat.com/2359934',
-                'https://bugzilla.redhat.com/2359938',
-                'https://bugzilla.redhat.com/2359940',
-                'https://bugzilla.redhat.com/2359943',
-                'https://bugzilla.redhat.com/2359944',
-                'https://bugzilla.redhat.com/2359945',
-                'https://bugzilla.redhat.com/2359947',
-                'https://bugzilla.redhat.com/2359950',
-                'https://bugzilla.redhat.com/2359963',
-                'https://bugzilla.redhat.com/2359964',
-                'https://bugzilla.redhat.com/2359972',
-                'https://bugzilla.redhat.com/2370920',
-                'https://bugzilla.redhat.com/2380264',
-                'https://bugzilla.redhat.com/2380273',
-                'https://bugzilla.redhat.com/2380274',
-                'https://bugzilla.redhat.com/2380278',
-                'https://bugzilla.redhat.com/2380280',
-                'https://bugzilla.redhat.com/2380283',
-                'https://bugzilla.redhat.com/2380284',
-                'https://bugzilla.redhat.com/2380290',
-                'https://bugzilla.redhat.com/2380291',
-                'https://bugzilla.redhat.com/2380295',
-                'https://bugzilla.redhat.com/2380298',
-                'https://bugzilla.redhat.com/2380306',
-                'https://bugzilla.redhat.com/2380308',
-                'https://bugzilla.redhat.com/2380309',
-                'https://bugzilla.redhat.com/2380310',
-                'https://bugzilla.redhat.com/2380312',
-                'https://bugzilla.redhat.com/2380313',
-                'https://bugzilla.redhat.com/2380320',
-                'https://bugzilla.redhat.com/2380321',
-                'https://bugzilla.redhat.com/2380322',
-                'https://bugzilla.redhat.com/2380326',
-                'https://bugzilla.redhat.com/2380327',
-                'https://bugzilla.redhat.com/2380334',
-                'https://bugzilla.redhat.com/2380335',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2338999',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359885',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359888',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359892',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359894',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359895',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359899',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359900',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359902',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359903',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359911',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359918',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359920',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359924',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359928',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359930',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359932',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359934',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359938',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359940',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359943',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359944',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359945',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359947',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359950',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359963',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359964',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359972',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2370920',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380264',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380273',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380274',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380278',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380280',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380283',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380284',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380290',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380291',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380295',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380298',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380306',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380308',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380309',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380310',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380312',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380313',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380320',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380321',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380322',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380326',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380327',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380334',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380335',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-13176',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21574',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21575',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21577',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21579',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21580',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21581',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21584',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21585',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21588',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30681',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30682',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30683',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30684',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30685',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30687',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30688',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30689',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30693',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30695',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30696',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30699',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30703',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30704',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30705',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30715',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30721',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30722',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50077',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50078',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50079',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50080',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50081',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50082',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50083',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50084',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50085',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50086',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50087',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50088',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50091',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50092',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50093',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50094',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50096',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50097',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50098',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50099',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50100',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50101',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50102',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50104',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-5399',
-                'https://errata.almalinux.org/9/ALSA-2025-16046.html',
-                'https://errata.rockylinux.org/RLSA-2025:15699',
-                'https://github.com/openssl/openssl/commit/07272b05b04836a762b4baa874958af51d513844',
-                'https://github.com/openssl/openssl/commit/2af62e74fb59bc469506bc37eb2990ea408d9467',
-                'https://github.com/openssl/openssl/commit/392dcb336405a0c94486aa6655057f59fd3a0902',
-                'https://github.com/openssl/openssl/commit/4b1cb94a734a7d4ec363ac0a215a25c181e11f65',
-                'https://github.com/openssl/openssl/commit/77c608f4c8857e63e98e66444e2e761c9627916f',
-                'https://github.openssl.org/openssl/extended-releases/commit/0d5fd1ab987f7571e2c955d8d8b638fc0fb54ded',
-                'https://github.openssl.org/openssl/extended-releases/commit/a2639000db19878d5d89586ae7b725080592ae86',
-                'https://linux.oracle.com/cve/CVE-2024-13176.html',
-                'https://linux.oracle.com/errata/ELSA-2025-16046.html',
-                'https://lists.debian.org/debian-lts-announce/2025/05/msg00028.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2024-13176',
-                'https://openssl-library.org/news/secadv/20250120.txt',
-                'https://security.netapp.com/advisory/ntap-20250124-0005/',
-                'https://security.netapp.com/advisory/ntap-20250418-0010/',
-                'https://security.netapp.com/advisory/ntap-20250502-0006/',
-                'https://ubuntu.com/security/notices/USN-7264-1',
-                'https://ubuntu.com/security/notices/USN-7278-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2024-13176',
-                'https://www.oracle.com/security-alerts/cpuapr2025.html#AppendixMSQL'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: Timing side-channel in ECDSA signature computation'
-            },
-            {
-              'cve':  'CVE-2024-4603',
-              'cvss': {
-                'redhat': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L'
-                }
-              },
-              'cwes': [
-                'CWE-606',
-                'CWE-834'
-              ],
-              'description':   'Issue summary: Checking excessively long DSA keys or parameters may be very\nslow.\n\nImpact summary: Applications that use the functions EVP_PKEY_param_check()\nor EVP_PKEY_public_check() to check a DSA public key or DSA parameters may\nexperience long delays. Where the key or parameters that are being checked\nhave been obtained from an untrusted source this may lead to a Denial of\nService.\n\nThe functions EVP_PKEY_param_check() or EVP_PKEY_public_check() perform\nvarious checks on DSA parameters. Some of those computations take a long time\nif the modulus (`p` parameter) is too large.\n\nTrying to use a very large modulus is slow and OpenSSL will not allow using\npublic keys with a modulus which is over 10,000 bits in length for signature\nverification. However the key and parameter check functions do not limit\nthe modulus size when performing the checks.\n\nAn application that calls EVP_PKEY_param_check() or EVP_PKEY_public_check()\nand supplies a key or parameters obtained from an untrusted source could be\nvulnerable to a Denial of Service attack.\n\nThese functions are not called by OpenSSL itself on untrusted DSA keys so\nonly applications that directly call these functions may be vulnerable.\n\nAlso vulnerable are the OpenSSL pkey and pkeyparam command line applications\nwhen using the `-check` option.\n\nThe OpenSSL SSL/TLS implementation is not affected by this issue.\n\nThe OpenSSL 3.0 and 3.1 FIPS providers are affected by this issue.',
-              'diffID':        'sha256:10d47f76a792d77a3508f82b3ed8d1c8e9701d2aa1ece5e74cacd89b30e35b3f',
-              'fixedVersions': [
-                '3.1.5-r0'
-              ],
-              'installedVersion': '3.1.1-r3',
-              'packageName':      'libcrypto3',
-              'purl':             'pkg:apk/alpine/libcrypto3@3.1.1-r3?arch=x86_64&distro=3.18.0',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2024/05/16/2',
-                'https://access.redhat.com/errata/RHSA-2024:9333',
-                'https://access.redhat.com/security/cve/CVE-2024-4603',
-                'https://bugzilla.redhat.com/2274020',
-                'https://bugzilla.redhat.com/2281029',
-                'https://bugzilla.redhat.com/2283757',
-                'https://bugzilla.redhat.com/2294581',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2274020',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2281029',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2283757',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2294581',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-2511',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-4603',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-4741',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-5535',
-                'https://errata.almalinux.org/9/ALSA-2024-9333.html',
-                'https://errata.rockylinux.org/RLSA-2024:9333',
-                'https://github.com/openssl/openssl/commit/3559e868e58005d15c6013a0c1fd832e51c73397',
-                'https://github.com/openssl/openssl/commit/53ea06486d296b890d565fb971b2764fcd826e7e',
-                'https://github.com/openssl/openssl/commit/9c39b3858091c152f52513c066ff2c5a47969f0d',
-                'https://github.com/openssl/openssl/commit/da343d0605c826ef197aceedc67e8e04f065f740',
-                'https://linux.oracle.com/cve/CVE-2024-4603.html',
-                'https://linux.oracle.com/errata/ELSA-2024-9333.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2024-4603',
-                'https://security.netapp.com/advisory/ntap-20240621-0001/',
-                'https://ubuntu.com/security/notices/USN-6937-1',
-                'https://www.cve.org/CVERecord?id=CVE-2024-4603',
-                'https://www.openssl.org/news/secadv/20240516.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: Excessive time spent checking DSA keys and parameters'
-            },
-            {
-              'cve':  'CVE-2024-4741',
-              'cvss': {
-                'redhat': {
-                  'v3score':  '5.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   'Issue summary: Calling the OpenSSL API function SSL_free_buffers may cause\nmemory to be accessed that was previously freed in some situations\n\nImpact summary: A use after free can have a range of potential consequences such\nas the corruption of valid data, crashes or execution of arbitrary code.\nHowever, only applications that directly call the SSL_free_buffers function are\naffected by this issue. Applications that do not call this function are not\nvulnerable. Our investigations indicate that this function is rarely used by\napplications.\n\nThe SSL_free_buffers function is used to free the internal OpenSSL buffer used\nwhen processing an incoming record from the network. The call is only expected\nto succeed if the buffer is not currently in use. However, two scenarios have\nbeen identified where the buffer is freed even when still in use.\n\nThe first scenario occurs where a record header has been received from the\nnetwork and processed by OpenSSL, but the full record body has not yet arrived.\nIn this case calling SSL_free_buffers will succeed even though a record has only\nbeen partially processed and the buffer is still in use.\n\nThe second scenario occurs where a full record containing application data has\nbeen received and processed by OpenSSL but the application has only read part of\nthis data. Again a call to SSL_free_buffers will succeed even though the buffer\nis still in use.\n\nWhile these scenarios could occur accidentally during normal operation a\nmalicious attacker could attempt to engineer a stituation where this occurs.\nWe are not aware of this issue being actively exploited.\n\nThe FIPS modules in 3.3, 3.2, 3.1 and 3.0 are not affected by this issue.',
-              'diffID':        'sha256:10d47f76a792d77a3508f82b3ed8d1c8e9701d2aa1ece5e74cacd89b30e35b3f',
-              'fixedVersions': [
-                '3.1.6-r0'
-              ],
-              'installedVersion': '3.1.1-r3',
-              'packageName':      'libcrypto3',
-              'purl':             'pkg:apk/alpine/libcrypto3@3.1.1-r3?arch=x86_64&distro=3.18.0',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2024:9333',
-                'https://access.redhat.com/security/cve/CVE-2024-4741',
-                'https://bugzilla.redhat.com/2274020',
-                'https://bugzilla.redhat.com/2281029',
-                'https://bugzilla.redhat.com/2283757',
-                'https://bugzilla.redhat.com/2294581',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2274020',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2281029',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2283757',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2294581',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-2511',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-4603',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-4741',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-5535',
-                'https://errata.almalinux.org/9/ALSA-2024-9333.html',
-                'https://errata.rockylinux.org/RLSA-2024:9333',
-                'https://github.com/openssl/openssl/commit/704f725b96aa373ee45ecfb23f6abfe8be8d9177',
-                'https://github.com/openssl/openssl/commit/b3f0eb0a295f58f16ba43ba99dad70d4ee5c437d',
-                'https://github.com/openssl/openssl/commit/c88c3de51020c37e8706bf7a682a162593053aac',
-                'https://github.com/openssl/openssl/commit/e5093133c35ca82874ad83697af76f4b0f7e3bd8',
-                'https://github.openssl.org/openssl/extended-releases/commit/f7a045f3143fc6da2ee66bf52d8df04829590dd4',
-                'https://linux.oracle.com/cve/CVE-2024-4741.html',
-                'https://linux.oracle.com/errata/ELSA-2024-9333.html',
-                'https://lists.debian.org/debian-lts-announce/2024/10/msg00033.html',
-                'https://lists.debian.org/debian-lts-announce/2024/11/msg00000.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2024-4741',
-                'https://security.netapp.com/advisory/ntap-20240621-0004/',
-                'https://ubuntu.com/security/notices/USN-6937-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2024-4741',
-                'https://www.openssl.org/news/secadv/20240528.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: Use After Free with SSL_free_buffers'
-            },
-            {
-              'cve':  'CVE-2024-5535',
-              'cvss': {
-                'redhat': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-125'
-              ],
-              'description':   'Issue summary: Calling the OpenSSL API function SSL_select_next_proto with an\nempty supported client protocols buffer may cause a crash or memory contents to\nbe sent to the peer.\n\nImpact summary: A buffer overread can have a range of potential consequences\nsuch as unexpected application beahviour or a crash. In particular this issue\ncould result in up to 255 bytes of arbitrary private data from memory being sent\nto the peer leading to a loss of confidentiality. However, only applications\nthat directly call the SSL_select_next_proto function with a 0 length list of\nsupported client protocols are affected by this issue. This would normally never\nbe a valid scenario and is typically not under attacker control but may occur by\naccident in the case of a configuration or programming error in the calling\napplication.\n\nThe OpenSSL API function SSL_select_next_proto is typically used by TLS\napplications that support ALPN (Application Layer Protocol Negotiation) or NPN\n(Next Protocol Negotiation). NPN is older, was never standardised and\nis deprecated in favour of ALPN. We believe that ALPN is significantly more\nwidely deployed than NPN. The SSL_select_next_proto function accepts a list of\nprotocols from the server and a list of protocols from the client and returns\nthe first protocol that appears in the server list that also appears in the\nclient list. In the case of no overlap between the two lists it returns the\nfirst item in the client list. In either case it will signal whether an overlap\nbetween the two lists was found. In the case where SSL_select_next_proto is\ncalled with a zero length client list it fails to notice this condition and\nreturns the memory immediately following the client list pointer (and reports\nthat there was no overlap in the lists).\n\nThis function is typically called from a server side application callback for\nALPN or a client side application callback for NPN. In the case of ALPN the list\nof protocols supplied by the client is guaranteed by libssl to never be zero in\nlength. The list of server protocols comes from the application and should never\nnormally be expected to be of zero length. In this case if the\nSSL_select_next_proto function has been called as expected (with the list\nsupplied by the client passed in the client/client_len parameters), then the\napplication will not be vulnerable to this issue. If the application has\naccidentally been configured with a zero length server list, and has\naccidentally passed that zero length server list in the client/client_len\nparameters, and has additionally failed to correctly handle a "no overlap"\nresponse (which would normally result in a handshake failure in ALPN) then it\nwill be vulnerable to this problem.\n\nIn the case of NPN, the protocol permits the client to opportunistically select\na protocol when there is no overlap. OpenSSL returns the first client protocol\nin the no overlap case in support of this. The list of client protocols comes\nfrom the application and should never normally be expected to be of zero length.\nHowever if the SSL_select_next_proto function is accidentally called with a\nclient_len of 0 then an invalid memory pointer will be returned instead. If the\napplication uses this output as the opportunistic protocol then the loss of\nconfidentiality will occur.\n\nThis issue has been assessed as Low severity because applications are most\nlikely to be vulnerable if they are using NPN instead of ALPN - but NPN is not\nwidely used. It also requires an application configuration or programming error.\nFinally, this issue would not typically be under attacker control making active\nexploitation unlikely.\n\nThe FIPS modules in 3.3, 3.2, 3.1 and 3.0 are not affected by this issue.\n\nDue to the low severity of this issue we are not issuing new releases of\nOpenSSL at this time. The fix will be included in the next releases when they\nbecome available.',
-              'diffID':        'sha256:10d47f76a792d77a3508f82b3ed8d1c8e9701d2aa1ece5e74cacd89b30e35b3f',
-              'fixedVersions': [
-                '3.1.6-r0'
-              ],
-              'installedVersion': '3.1.1-r3',
-              'packageName':      'libcrypto3',
-              'purl':             'pkg:apk/alpine/libcrypto3@3.1.1-r3?arch=x86_64&distro=3.18.0',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2024/06/27/1',
-                'http://www.openwall.com/lists/oss-security/2024/06/28/4',
-                'http://www.openwall.com/lists/oss-security/2024/08/15/1',
-                'https://access.redhat.com/errata/RHSA-2025:1671',
-                'https://access.redhat.com/security/cve/CVE-2024-5535',
-                'https://bugzilla.redhat.com/2294581',
-                'https://bugzilla.redhat.com/2294676',
-                'https://bugzilla.redhat.com/2301888',
-                'https://bugzilla.redhat.com/2318857',
-                'https://bugzilla.redhat.com/2318858',
-                'https://bugzilla.redhat.com/2318870',
-                'https://bugzilla.redhat.com/2318873',
-                'https://bugzilla.redhat.com/2318874',
-                'https://bugzilla.redhat.com/2318876',
-                'https://bugzilla.redhat.com/2318882',
-                'https://bugzilla.redhat.com/2318883',
-                'https://bugzilla.redhat.com/2318884',
-                'https://bugzilla.redhat.com/2318885',
-                'https://bugzilla.redhat.com/2318886',
-                'https://bugzilla.redhat.com/2318897',
-                'https://bugzilla.redhat.com/2318900',
-                'https://bugzilla.redhat.com/2318905',
-                'https://bugzilla.redhat.com/2318914',
-                'https://bugzilla.redhat.com/2318922',
-                'https://bugzilla.redhat.com/2318923',
-                'https://bugzilla.redhat.com/2318925',
-                'https://bugzilla.redhat.com/2318926',
-                'https://bugzilla.redhat.com/2318927',
-                'https://bugzilla.redhat.com/2331191',
-                'https://bugzilla.redhat.com/2339218',
-                'https://bugzilla.redhat.com/2339220',
-                'https://bugzilla.redhat.com/2339221',
-                'https://bugzilla.redhat.com/2339226',
-                'https://bugzilla.redhat.com/2339231',
-                'https://bugzilla.redhat.com/2339236',
-                'https://bugzilla.redhat.com/2339238',
-                'https://bugzilla.redhat.com/2339243',
-                'https://bugzilla.redhat.com/2339247',
-                'https://bugzilla.redhat.com/2339252',
-                'https://bugzilla.redhat.com/2339259',
-                'https://bugzilla.redhat.com/2339266',
-                'https://bugzilla.redhat.com/2339270',
-                'https://bugzilla.redhat.com/2339271',
-                'https://bugzilla.redhat.com/2339275',
-                'https://bugzilla.redhat.com/2339277',
-                'https://bugzilla.redhat.com/2339281',
-                'https://bugzilla.redhat.com/2339284',
-                'https://bugzilla.redhat.com/2339291',
-                'https://bugzilla.redhat.com/2339293',
-                'https://bugzilla.redhat.com/2339295',
-                'https://bugzilla.redhat.com/2339299',
-                'https://bugzilla.redhat.com/2339300',
-                'https://bugzilla.redhat.com/2339304',
-                'https://bugzilla.redhat.com/2339305',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2274020',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2281029',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2283757',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2294581',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-2511',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-4603',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-4741',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-5535',
-                'https://errata.almalinux.org/9/ALSA-2025-1671.html',
-                'https://errata.rockylinux.org/RLSA-2024:9333',
-                'https://github.com/openssl/openssl/commit/4ada436a1946cbb24db5ab4ca082b69c1bc10f37',
-                'https://github.com/openssl/openssl/commit/99fb785a5f85315b95288921a321a935ea29a51e',
-                'https://github.com/openssl/openssl/commit/cf6f91f6121f4db167405db2f0de410a456f260c',
-                'https://github.com/openssl/openssl/commit/e86ac436f0bd54d4517745483e2315650fae7b2c',
-                'https://github.openssl.org/openssl/extended-releases/commit/9947251413065a05189a63c9b7a6c1d4e224c21c',
-                'https://github.openssl.org/openssl/extended-releases/commit/b78ec0824da857223486660177d3b1f255c65d87',
-                'https://linux.oracle.com/cve/CVE-2024-5535.html',
-                'https://linux.oracle.com/errata/ELSA-2025-1673.html',
-                'https://lists.debian.org/debian-lts-announce/2024/10/msg00033.html',
-                'https://lists.debian.org/debian-lts-announce/2024/11/msg00000.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2024-5535',
-                'https://openssl.org/news/secadv/20240627.txt',
-                'https://security.netapp.com/advisory/ntap-20240712-0005/',
-                'https://security.netapp.com/advisory/ntap-20241025-0006/',
-                'https://security.netapp.com/advisory/ntap-20241025-0010/',
-                'https://ubuntu.com/security/notices/USN-6937-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2024-5535',
-                'https://www.openssl.org/news/secadv/20240627.txt',
-                'https://www.oracle.com/security-alerts/cpuoct2024.html#AppendixMSQL'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: SSL_select_next_proto buffer overread'
-            },
-            {
-              'cve':  'CVE-2024-2511',
-              'cvss': {
-                'redhat': {
-                  'v3score':  '3.7',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L'
-                }
-              },
-              'cwes': [
-                'CWE-1325'
-              ],
-              'description':   'Issue summary: Some non-default TLS server configurations can cause unbounded\nmemory growth when processing TLSv1.3 sessions\n\nImpact summary: An attacker may exploit certain server configurations to trigger\nunbounded memory growth that would lead to a Denial of Service\n\nThis problem can occur in TLSv1.3 if the non-default SSL_OP_NO_TICKET option is\nbeing used (but not if early_data support is also configured and the default\nanti-replay protection is in use). In this case, under certain conditions, the\nsession cache can get into an incorrect state and it will fail to flush properly\nas it fills. The session cache will continue to grow in an unbounded manner. A\nmalicious client could deliberately create the scenario for this failure to\nforce a Denial of Service. It may also happen by accident in normal operation.\n\nThis issue only affects TLS servers supporting TLSv1.3. It does not affect TLS\nclients.\n\nThe FIPS modules in 3.2, 3.1 and 3.0 are not affected by this issue. OpenSSL\n1.0.2 is also not affected by this issue.',
-              'diffID':        'sha256:10d47f76a792d77a3508f82b3ed8d1c8e9701d2aa1ece5e74cacd89b30e35b3f',
-              'fixedVersions': [
-                '3.1.4-r6'
-              ],
-              'installedVersion': '3.1.1-r3',
-              'packageName':      'libcrypto3',
-              'purl':             'pkg:apk/alpine/libcrypto3@3.1.1-r3?arch=x86_64&distro=3.18.0',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2024/04/08/5',
-                'https://access.redhat.com/errata/RHSA-2024:9333',
-                'https://access.redhat.com/security/cve/CVE-2024-2511',
-                'https://bugzilla.redhat.com/2274020',
-                'https://bugzilla.redhat.com/2281029',
-                'https://bugzilla.redhat.com/2283757',
-                'https://bugzilla.redhat.com/2294581',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2274020',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2281029',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2283757',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2294581',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-2511',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-4603',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-4741',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-5535',
-                'https://errata.almalinux.org/9/ALSA-2024-9333.html',
-                'https://errata.rockylinux.org/RLSA-2024:9333',
-                'https://github.com/openssl/openssl/commit/7e4d731b1c07201ad9374c1cd9ac5263bdf35bce',
-                'https://github.com/openssl/openssl/commit/b52867a9f618bb955bed2a3ce3db4d4f97ed8e5d',
-                'https://github.com/openssl/openssl/commit/e9d7083e241670332e0443da0f0d4ffb52829f08',
-                'https://github.openssl.org/openssl/extended-releases/commit/5f8d25770ae6437db119dfc951e207271a326640',
-                'https://linux.oracle.com/cve/CVE-2024-2511.html',
-                'https://linux.oracle.com/errata/ELSA-2024-9333.html',
-                'https://lists.debian.org/debian-lts-announce/2024/10/msg00033.html',
-                'https://lists.debian.org/debian-lts-announce/2024/11/msg00000.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2024-2511',
-                'https://security.netapp.com/advisory/ntap-20240503-0013/',
-                'https://ubuntu.com/security/notices/USN-6937-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2024-2511',
-                'https://www.openssl.org/news/secadv/20240408.txt',
-                'https://www.openssl.org/news/vulnerabilities.html'
-              ],
-              'severity':   'LOW',
-              'suppressed': false,
-              'title':      'openssl: Unbounded memory growth with session handling in TLSv1.3'
-            },
-            {
-              'cve':  'CVE-2024-9143',
-              'cvss': {
-                'redhat': {
-                  'v3score':  '3.7',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L'
-                }
-              },
-              'cwes': [
-                'CWE-125',
-                'CWE-787'
-              ],
-              'description':   "Issue summary: Use of the low-level GF(2^m) elliptic curve APIs with untrusted\nexplicit values for the field polynomial can lead to out-of-bounds memory reads\nor writes.\n\nImpact summary: Out of bound memory writes can lead to an application crash or\neven a possibility of a remote code execution, however, in all the protocols\ninvolving Elliptic Curve Cryptography that we're aware of, either only \"named\ncurves\" are supported, or, if explicit curve parameters are supported, they\nspecify an X9.62 encoding of binary (GF(2^m)) curves that can't represent\nproblematic input values. Thus the likelihood of existence of a vulnerable\napplication is low.\n\nIn particular, the X9.62 encoding is used for ECC keys in X.509 certificates,\nso problematic inputs cannot occur in the context of processing X.509\ncertificates.  Any problematic use-cases would have to be using an \"exotic\"\ncurve encoding.\n\nThe affected APIs include: EC_GROUP_new_curve_GF2m(), EC_GROUP_new_from_params(),\nand various supporting BN_GF2m_*() functions.\n\nApplications working with \"exotic\" explicit binary (GF(2^m)) curve parameters,\nthat make it possible to represent invalid field polynomials with a zero\nconstant term, via the above or similar APIs, may terminate abruptly as a\nresult of reading or writing outside of array bounds.  Remote code execution\ncannot easily be ruled out.\n\nThe FIPS modules in 3.3, 3.2, 3.1 and 3.0 are not affected by this issue.",
-              'diffID':        'sha256:10d47f76a792d77a3508f82b3ed8d1c8e9701d2aa1ece5e74cacd89b30e35b3f',
-              'fixedVersions': [
-                '3.1.7-r1'
-              ],
-              'installedVersion': '3.1.1-r3',
-              'packageName':      'libcrypto3',
-              'purl':             'pkg:apk/alpine/libcrypto3@3.1.1-r3?arch=x86_64&distro=3.18.0',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2024/10/16/1',
-                'http://www.openwall.com/lists/oss-security/2024/10/23/1',
-                'http://www.openwall.com/lists/oss-security/2024/10/24/1',
-                'https://access.redhat.com/security/cve/CVE-2024-9143',
-                'https://github.com/openssl/openssl/commit/72ae83ad214d2eef262461365a1975707f862712',
-                'https://github.com/openssl/openssl/commit/bc7e04d7c8d509fb78fc0e285aa948fb0da04700',
-                'https://github.com/openssl/openssl/commit/c0d3e4d32d2805f49bec30547f225bc4d092e1f4',
-                'https://github.com/openssl/openssl/commit/fdf6723362ca51bd883295efe206cb5b1cfa5154',
-                'https://github.openssl.org/openssl/extended-releases/commit/8efc0cbaa8ebba8e116f7b81a876a4123594d86a',
-                'https://github.openssl.org/openssl/extended-releases/commit/9d576994cec2b7aa37a91740ea7e680810957e41',
-                'https://lists.debian.org/debian-lts-announce/2024/10/msg00033.html',
-                'https://lists.debian.org/debian-lts-announce/2024/11/msg00000.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2024-9143',
-                'https://openssl-library.org/news/secadv/20241016.txt',
-                'https://security.netapp.com/advisory/ntap-20241101-0001/',
-                'https://ubuntu.com/security/notices/USN-7264-1',
-                'https://ubuntu.com/security/notices/USN-7278-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2024-9143'
-              ],
-              'severity':   'LOW',
-              'suppressed': false,
-              'title':      'openssl: Low-level invalid GF(2^m) parameters lead to OOB memory access'
-            },
-            {
-              'cve':  'CVE-2023-5363',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N'
-                },
-                'redhat': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-684'
-              ],
-              'description':   "Issue summary: A bug has been identified in the processing of key and\ninitialisation vector (IV) lengths.  This can lead to potential truncation\nor overruns during the initialisation of some symmetric ciphers.\n\nImpact summary: A truncation in the IV can result in non-uniqueness,\nwhich could result in loss of confidentiality for some cipher modes.\n\nWhen calling EVP_EncryptInit_ex2(), EVP_DecryptInit_ex2() or\nEVP_CipherInit_ex2() the provided OSSL_PARAM array is processed after\nthe key and IV have been established.  Any alterations to the key length,\nvia the \"keylen\" parameter or the IV length, via the \"ivlen\" parameter,\nwithin the OSSL_PARAM array will not take effect as intended, potentially\ncausing truncation or overreading of these values.  The following ciphers\nand cipher modes are impacted: RC2, RC4, RC5, CCM, GCM and OCB.\n\nFor the CCM, GCM and OCB cipher modes, truncation of the IV can result in\nloss of confidentiality.  For example, when following NIST's SP 800-38D\nsection 8.2.1 guidance for constructing a deterministic IV for AES in\nGCM mode, truncation of the counter portion could lead to IV reuse.\n\nBoth truncations and overruns of the key and overruns of the IV will\nproduce incorrect results and could, in some cases, trigger a memory\nexception.  However, these issues are not currently assessed as security\ncritical.\n\nChanging the key and/or IV lengths is not considered to be a common operation\nand the vulnerable API was recently introduced. Furthermore it is likely that\napplication developers will have spotted this problem during testing since\ndecryption would fail unless both peers in the communication were similarly\nvulnerable. For these reasons we expect the probability of an application being\nvulnerable to this to be quite low. However if an application is vulnerable then\nthis issue is considered very serious. For these reasons we have assessed this\nissue as Moderate severity overall.\n\nThe OpenSSL SSL/TLS implementation is not affected by this issue.\n\nThe OpenSSL 3.0 and 3.1 FIPS providers are not affected by this because\nthe issue lies outside of the FIPS provider boundary.\n\nOpenSSL 3.1 and 3.0 are vulnerable to this issue.",
-              'diffID':        'sha256:10d47f76a792d77a3508f82b3ed8d1c8e9701d2aa1ece5e74cacd89b30e35b3f',
-              'fixedVersions': [
-                '3.1.4-r0'
-              ],
-              'installedVersion': '3.1.1-r3',
-              'packageName':      'libssl3',
-              'purl':             'pkg:apk/alpine/libssl3@3.1.1-r3?arch=x86_64&distro=3.18.0',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2023/10/24/1',
-                'https://access.redhat.com/errata/RHSA-2024:0310',
-                'https://access.redhat.com/security/cve/CVE-2023-5363',
-                'https://bugzilla.redhat.com/2243839',
-                'https://errata.almalinux.org/9/ALSA-2024-0310.html',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=0df40630850fb2740e6be6890bb905d3fc623b2d',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=5f69f5c65e483928c4b28ed16af6e5742929f1ee',
-                'https://linux.oracle.com/cve/CVE-2023-5363.html',
-                'https://linux.oracle.com/errata/ELSA-2024-12093.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-5363',
-                'https://security.netapp.com/advisory/ntap-20231027-0010/',
-                'https://security.netapp.com/advisory/ntap-20240201-0003/',
-                'https://security.netapp.com/advisory/ntap-20240201-0004/',
-                'https://security.netapp.com/advisory/ntap-20241108-0002/',
-                'https://ubuntu.com/security/notices/USN-6450-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-5363',
-                'https://www.debian.org/security/2023/dsa-5532',
-                'https://www.openssl.org/news/secadv/20231024.txt'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: Incorrect cipher key and IV length processing'
-            },
-            {
-              'cve':  'CVE-2024-6119',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-843'
-              ],
-              'description':   "Issue summary: Applications performing certificate name checks (e.g., TLS\nclients checking server certificates) may attempt to read an invalid memory\naddress resulting in abnormal termination of the application process.\n\nImpact summary: Abnormal termination of an application can a cause a denial of\nservice.\n\nApplications performing certificate name checks (e.g., TLS clients checking\nserver certificates) may attempt to read an invalid memory address when\ncomparing the expected name with an `otherName` subject alternative name of an\nX.509 certificate. This may result in an exception that terminates the\napplication program.\n\nNote that basic certificate chain validation (signatures, dates, ...) is not\naffected, the denial of service can occur only when the application also\nspecifies an expected DNS name, Email address or IP address.\n\nTLS servers rarely solicit client certificates, and even when they do, they\ngenerally don't perform a name check against a reference identifier (expected\nidentity), but rather extract the presented identity after checking the\ncertificate chain.  So TLS servers are generally not affected and the severity\nof the issue is Moderate.\n\nThe FIPS modules in 3.3, 3.2, 3.1 and 3.0 are not affected by this issue.",
-              'diffID':        'sha256:10d47f76a792d77a3508f82b3ed8d1c8e9701d2aa1ece5e74cacd89b30e35b3f',
-              'fixedVersions': [
-                '3.1.7-r0'
-              ],
-              'installedVersion': '3.1.1-r3',
-              'packageName':      'libssl3',
-              'purl':             'pkg:apk/alpine/libssl3@3.1.1-r3?arch=x86_64&distro=3.18.0',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2024/09/03/4',
-                'https://access.redhat.com/errata/RHSA-2024:8935',
-                'https://access.redhat.com/security/cve/CVE-2024-6119',
-                'https://bugzilla.redhat.com/2306158',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2306158',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-6119',
-                'https://errata.almalinux.org/9/ALSA-2024-8935.html',
-                'https://errata.rockylinux.org/RLSA-2024:6783',
-                'https://github.com/openssl/openssl/commit/05f360d9e849a1b277db628f1f13083a7f8dd04f',
-                'https://github.com/openssl/openssl/commit/06d1dc3fa96a2ba5a3e22735a033012aadc9f0d6',
-                'https://github.com/openssl/openssl/commit/621f3729831b05ee828a3203eddb621d014ff2b2',
-                'https://github.com/openssl/openssl/commit/7dfcee2cd2a63b2c64b9b4b0850be64cb695b0a0',
-                'https://github.com/openssl/openssl/security/advisories/GHSA-5qrj-vq78-58fj',
-                'https://linux.oracle.com/cve/CVE-2024-6119.html',
-                'https://linux.oracle.com/errata/ELSA-2024-8935.html',
-                'https://lists.freebsd.org/archives/freebsd-security/2024-September/000303.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2024-6119',
-                'https://openssl-library.org/news/secadv/20240903.txt',
-                'https://security.netapp.com/advisory/ntap-20240912-0001/',
-                'https://ubuntu.com/security/notices/USN-6986-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2024-6119'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: Possible denial of service in X.509 name checks'
-            },
-            {
-              'cve':  'CVE-2023-3817',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L'
-                },
-                'redhat': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L'
-                }
-              },
-              'cwes': [
-                'CWE-606',
-                'CWE-834'
-              ],
-              'description':   'Issue summary: Checking excessively long DH keys or parameters may be very slow.\n\nImpact summary: Applications that use the functions DH_check(), DH_check_ex()\nor EVP_PKEY_param_check() to check a DH key or DH parameters may experience long\ndelays. Where the key or parameters that are being checked have been obtained\nfrom an untrusted source this may lead to a Denial of Service.\n\nThe function DH_check() performs various checks on DH parameters. After fixing\nCVE-2023-3446 it was discovered that a large q parameter value can also trigger\nan overly long computation during some of these checks. A correct q value,\nif present, cannot be larger than the modulus p parameter, thus it is\nunnecessary to perform these checks if q is larger than p.\n\nAn application that calls DH_check() and supplies a key or parameters obtained\nfrom an untrusted source could be vulnerable to a Denial of Service attack.\n\nThe function DH_check() is itself called by a number of other OpenSSL functions.\nAn application calling any of those other functions may similarly be affected.\nThe other functions affected by this are DH_check_ex() and\nEVP_PKEY_param_check().\n\nAlso vulnerable are the OpenSSL dhparam and pkeyparam command line applications\nwhen using the "-check" option.\n\nThe OpenSSL SSL/TLS implementation is not affected by this issue.\n\nThe OpenSSL 3.0 and 3.1 FIPS providers are not affected by this issue.',
-              'diffID':        'sha256:10d47f76a792d77a3508f82b3ed8d1c8e9701d2aa1ece5e74cacd89b30e35b3f',
-              'fixedVersions': [
-                '3.1.2-r0'
-              ],
-              'installedVersion': '3.1.1-r3',
-              'packageName':      'libssl3',
-              'purl':             'pkg:apk/alpine/libssl3@3.1.1-r3?arch=x86_64&distro=3.18.0',
-              'references':       [
-                'http://seclists.org/fulldisclosure/2023/Jul/43',
-                'http://www.openwall.com/lists/oss-security/2023/07/31/1',
-                'http://www.openwall.com/lists/oss-security/2023/09/22/11',
-                'http://www.openwall.com/lists/oss-security/2023/09/22/9',
-                'http://www.openwall.com/lists/oss-security/2023/11/06/2',
-                'https://access.redhat.com/errata/RHSA-2024:2447',
-                'https://access.redhat.com/security/cve/CVE-2023-3817',
-                'https://bugzilla.redhat.com/2223016',
-                'https://bugzilla.redhat.com/2224962',
-                'https://bugzilla.redhat.com/2227852',
-                'https://bugzilla.redhat.com/2248616',
-                'https://bugzilla.redhat.com/2257571',
-                'https://bugzilla.redhat.com/2258502',
-                'https://bugzilla.redhat.com/2259944',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2224962',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2227852',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2248616',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2270358',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3446',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3817',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-5678',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-2408',
-                'https://errata.almalinux.org/9/ALSA-2024-2447.html',
-                'https://errata.rockylinux.org/RLSA-2023:7877',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=6a1eb62c29db6cb5eec707f9338aee00f44e26f5',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=869ad69aadd985c7b8ca6f4e5dd0eb274c9f3644',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=9002fd07327a91f35ba6c1307e71fa6fd4409b7f',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=91ddeba0f2269b017dc06c46c993a788974b1aa5',
-                'https://linux.oracle.com/cve/CVE-2023-3817.html',
-                'https://linux.oracle.com/errata/ELSA-2024-2447.html',
-                'https://lists.debian.org/debian-lts-announce/2023/08/msg00019.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-3817',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://security.netapp.com/advisory/ntap-20230818-0014/',
-                'https://security.netapp.com/advisory/ntap-20231027-0008/',
-                'https://security.netapp.com/advisory/ntap-20240621-0006/',
-                'https://ubuntu.com/security/notices/USN-6435-1',
-                'https://ubuntu.com/security/notices/USN-6435-2',
-                'https://ubuntu.com/security/notices/USN-6450-1',
-                'https://ubuntu.com/security/notices/USN-6709-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-3817',
-                'https://www.openssl.org/news/secadv/20230731.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'OpenSSL: Excessive time spent checking DH q parameter value'
-            },
-            {
-              'cve':  'CVE-2023-5678',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L'
-                },
-                'redhat': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L'
-                }
-              },
-              'cwes': [
-                'CWE-606',
-                'CWE-754'
-              ],
-              'description':   "Issue summary: Generating excessively long X9.42 DH keys or checking\nexcessively long X9.42 DH keys or parameters may be very slow.\n\nImpact summary: Applications that use the functions DH_generate_key() to\ngenerate an X9.42 DH key may experience long delays.  Likewise, applications\nthat use DH_check_pub_key(), DH_check_pub_key_ex() or EVP_PKEY_public_check()\nto check an X9.42 DH key or X9.42 DH parameters may experience long delays.\nWhere the key or parameters that are being checked have been obtained from\nan untrusted source this may lead to a Denial of Service.\n\nWhile DH_check() performs all the necessary checks (as of CVE-2023-3817),\nDH_check_pub_key() doesn't make any of these checks, and is therefore\nvulnerable for excessively large P and Q parameters.\n\nLikewise, while DH_generate_key() performs a check for an excessively large\nP, it doesn't check for an excessively large Q.\n\nAn application that calls DH_generate_key() or DH_check_pub_key() and\nsupplies a key or parameters obtained from an untrusted source could be\nvulnerable to a Denial of Service attack.\n\nDH_generate_key() and DH_check_pub_key() are also called by a number of\nother OpenSSL functions.  An application calling any of those other\nfunctions may similarly be affected.  The other functions affected by this\nare DH_check_pub_key_ex(), EVP_PKEY_public_check(), and EVP_PKEY_generate().\n\nAlso vulnerable are the OpenSSL pkey command line application when using the\n\"-pubcheck\" option, as well as the OpenSSL genpkey command line application.\n\nThe OpenSSL SSL/TLS implementation is not affected by this issue.\n\nThe OpenSSL 3.0 and 3.1 FIPS providers are not affected by this issue.",
-              'diffID':        'sha256:10d47f76a792d77a3508f82b3ed8d1c8e9701d2aa1ece5e74cacd89b30e35b3f',
-              'fixedVersions': [
-                '3.1.4-r1'
-              ],
-              'installedVersion': '3.1.1-r3',
-              'packageName':      'libssl3',
-              'purl':             'pkg:apk/alpine/libssl3@3.1.1-r3?arch=x86_64&distro=3.18.0',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2024/03/11/1',
-                'https://access.redhat.com/errata/RHSA-2024:2447',
-                'https://access.redhat.com/security/cve/CVE-2023-5678',
-                'https://bugzilla.redhat.com/2223016',
-                'https://bugzilla.redhat.com/2224962',
-                'https://bugzilla.redhat.com/2227852',
-                'https://bugzilla.redhat.com/2248616',
-                'https://bugzilla.redhat.com/2257571',
-                'https://bugzilla.redhat.com/2258502',
-                'https://bugzilla.redhat.com/2259944',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2224962',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2227852',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2248616',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2270358',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3446',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3817',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-5678',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-2408',
-                'https://errata.almalinux.org/9/ALSA-2024-2447.html',
-                'https://errata.rockylinux.org/RLSA-2023:7877',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=34efaef6c103d636ab507a0cc34dca4d3aecc055',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=710fee740904b6290fef0dd5536fbcedbc38ff0c',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=db925ae2e65d0d925adef429afc37f75bd1c2017',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=ddeb4b6c6d527e54ce9a99cba785c0f7776e54b6',
-                'https://linux.oracle.com/cve/CVE-2023-5678.html',
-                'https://linux.oracle.com/errata/ELSA-2024-2447.html',
-                'https://lists.debian.org/debian-lts-announce/2024/10/msg00033.html',
-                'https://lists.debian.org/debian-lts-announce/2024/11/msg00000.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-5678',
-                'https://security.netapp.com/advisory/ntap-20231130-0010/',
-                'https://ubuntu.com/security/notices/USN-6622-1',
-                'https://ubuntu.com/security/notices/USN-6632-1',
-                'https://ubuntu.com/security/notices/USN-6709-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-5678',
-                'https://www.openssl.org/news/secadv/20231106.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: Generating excessively long X9.42 DH keys or checking excessively long X9.42 DH keys or parameters may be very slow'
-            },
-            {
-              'cve':  'CVE-2023-6129',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '6.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-440',
-                'CWE-787'
-              ],
-              'description':   'Issue summary: The POLY1305 MAC (message authentication code) implementation\ncontains a bug that might corrupt the internal state of applications running\non PowerPC CPU based platforms if the CPU provides vector instructions.\n\nImpact summary: If an attacker can influence whether the POLY1305 MAC\nalgorithm is used, the application state might be corrupted with various\napplication dependent consequences.\n\nThe POLY1305 MAC (message authentication code) implementation in OpenSSL for\nPowerPC CPUs restores the contents of vector registers in a different order\nthan they are saved. Thus the contents of some of these vector registers\nare corrupted when returning to the caller. The vulnerable code is used only\non newer PowerPC processors supporting the PowerISA 2.07 instructions.\n\nThe consequences of this kind of internal application state corruption can\nbe various - from no consequences, if the calling application does not\ndepend on the contents of non-volatile XMM registers at all, to the worst\nconsequences, where the attacker could get complete control of the application\nprocess. However unless the compiler uses the vector registers for storing\npointers, the most likely consequence, if any, would be an incorrect result\nof some application dependent calculations or a crash leading to a denial of\nservice.\n\nThe POLY1305 MAC algorithm is most frequently used as part of the\nCHACHA20-POLY1305 AEAD (authenticated encryption with associated data)\nalgorithm. The most common usage of this AEAD cipher is with TLS protocol\nversions 1.2 and 1.3. If this cipher is enabled on the server a malicious\nclient can influence whether this AEAD cipher is used. This implies that\nTLS server applications using OpenSSL can be potentially impacted. However\nwe are currently not aware of any concrete application that would be affected\nby this issue therefore we consider this a Low severity security issue.',
-              'diffID':        'sha256:10d47f76a792d77a3508f82b3ed8d1c8e9701d2aa1ece5e74cacd89b30e35b3f',
-              'fixedVersions': [
-                '3.1.4-r3'
-              ],
-              'installedVersion': '3.1.1-r3',
-              'packageName':      'libssl3',
-              'purl':             'pkg:apk/alpine/libssl3@3.1.1-r3?arch=x86_64&distro=3.18.0',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2024/03/11/1',
-                'https://access.redhat.com/errata/RHSA-2024:9088',
-                'https://access.redhat.com/security/cve/CVE-2023-6129',
-                'https://bugzilla.redhat.com/2257571',
-                'https://bugzilla.redhat.com/2258502',
-                'https://bugzilla.redhat.com/2259944',
-                'https://bugzilla.redhat.com/2284243',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2257571',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2258502',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2259944',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2284243',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-6129',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-6237',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-0727',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-1298',
-                'https://errata.almalinux.org/9/ALSA-2024-9088.html',
-                'https://errata.rockylinux.org/RLSA-2024:9088',
-                'https://github.com/openssl/openssl/commit/050d26383d4e264966fb83428e72d5d48f402d35',
-                'https://github.com/openssl/openssl/commit/5b139f95c9a47a55a0c54100f3837b1eee942b04',
-                'https://github.com/openssl/openssl/commit/f3fc5808fe9ff74042d639839610d03b8fdcc015',
-                'https://linux.oracle.com/cve/CVE-2023-6129.html',
-                'https://linux.oracle.com/errata/ELSA-2024-9088.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-6129',
-                'https://security.netapp.com/advisory/ntap-20240216-0009/',
-                'https://security.netapp.com/advisory/ntap-20240426-0008/',
-                'https://security.netapp.com/advisory/ntap-20240426-0013/',
-                'https://security.netapp.com/advisory/ntap-20240503-0011/',
-                'https://ubuntu.com/security/notices/USN-6622-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-6129',
-                'https://www.openssl.org/news/secadv/20240109.txt',
-                'https://www.openwall.com/lists/oss-security/2024/01/09/1'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: POLY1305 MAC implementation corrupts vector registers on PowerPC'
-            },
-            {
-              'cve':  'CVE-2023-6237',
-              'cvss': {
-                'redhat': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-606'
-              ],
-              'description':   "Issue summary: Checking excessively long invalid RSA public keys may take\na long time.\n\nImpact summary: Applications that use the function EVP_PKEY_public_check()\nto check RSA public keys may experience long delays. Where the key that\nis being checked has been obtained from an untrusted source this may lead\nto a Denial of Service.\n\nWhen function EVP_PKEY_public_check() is called on RSA public keys,\na computation is done to confirm that the RSA modulus, n, is composite.\nFor valid RSA keys, n is a product of two or more large primes and this\ncomputation completes quickly. However, if n is an overly large prime,\nthen this computation would take a long time.\n\nAn application that calls EVP_PKEY_public_check() and supplies an RSA key\nobtained from an untrusted source could be vulnerable to a Denial of Service\nattack.\n\nThe function EVP_PKEY_public_check() is not called from other OpenSSL\nfunctions however it is called from the OpenSSL pkey command line\napplication. For that reason that application is also vulnerable if used\nwith the '-pubin' and '-check' options on untrusted data.\n\nThe OpenSSL SSL/TLS implementation is not affected by this issue.\n\nThe OpenSSL 3.0 and 3.1 FIPS providers are affected by this issue.",
-              'diffID':        'sha256:10d47f76a792d77a3508f82b3ed8d1c8e9701d2aa1ece5e74cacd89b30e35b3f',
-              'fixedVersions': [
-                '3.1.4-r4'
-              ],
-              'installedVersion': '3.1.1-r3',
-              'packageName':      'libssl3',
-              'purl':             'pkg:apk/alpine/libssl3@3.1.1-r3?arch=x86_64&distro=3.18.0',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2024/03/11/1',
-                'https://access.redhat.com/errata/RHSA-2024:9088',
-                'https://access.redhat.com/security/cve/CVE-2023-6237',
-                'https://bugzilla.redhat.com/2257571',
-                'https://bugzilla.redhat.com/2258502',
-                'https://bugzilla.redhat.com/2259944',
-                'https://bugzilla.redhat.com/2284243',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2257571',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2258502',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2259944',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2284243',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-6129',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-6237',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-0727',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-1298',
-                'https://errata.almalinux.org/9/ALSA-2024-9088.html',
-                'https://errata.rockylinux.org/RLSA-2024:9088',
-                'https://github.com/openssl/openssl/commit/0b0f7abfb37350794a4b8960fafc292cd5d1b84d',
-                'https://github.com/openssl/openssl/commit/18c02492138d1eb8b6548cb26e7b625fb2414a2a',
-                'https://github.com/openssl/openssl/commit/a830f551557d3d66a84bbb18a5b889c640c36294',
-                'https://linux.oracle.com/cve/CVE-2023-6237.html',
-                'https://linux.oracle.com/errata/ELSA-2024-9088.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-6237',
-                'https://security.netapp.com/advisory/ntap-20240531-0007/',
-                'https://ubuntu.com/security/notices/USN-6622-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-6237',
-                'https://www.openssl.org/news/secadv/20240115.txt',
-                'https://www.openwall.com/lists/oss-security/2024/01/15/2'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: Excessive time spent checking invalid RSA public keys'
-            },
-            {
-              'cve':  'CVE-2024-0727',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '5.5',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H'
-                },
-                'nvd': {
-                  'v3score':  '5.5',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '5.5',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-476'
-              ],
-              'description':   'Issue summary: Processing a maliciously formatted PKCS12 file may lead OpenSSL\nto crash leading to a potential Denial of Service attack\n\nImpact summary: Applications loading files in the PKCS12 format from untrusted\nsources might terminate abruptly.\n\nA file in PKCS12 format can contain certificates and keys and may come from an\nuntrusted source. The PKCS12 specification allows certain fields to be NULL, but\nOpenSSL does not correctly check for this case. This can lead to a NULL pointer\ndereference that results in OpenSSL crashing. If an application processes PKCS12\nfiles from an untrusted source using the OpenSSL APIs then that application will\nbe vulnerable to this issue.\n\nOpenSSL APIs that are vulnerable to this are: PKCS12_parse(),\nPKCS12_unpack_p7data(), PKCS12_unpack_p7encdata(), PKCS12_unpack_authsafes()\nand PKCS12_newpass().\n\nWe have also fixed a similar issue in SMIME_write_PKCS7(). However since this\nfunction is related to writing data we do not consider it security significant.\n\nThe FIPS modules in 3.2, 3.1 and 3.0 are not affected by this issue.',
-              'diffID':        'sha256:10d47f76a792d77a3508f82b3ed8d1c8e9701d2aa1ece5e74cacd89b30e35b3f',
-              'fixedVersions': [
-                '3.1.4-r5'
-              ],
-              'installedVersion': '3.1.1-r3',
-              'packageName':      'libssl3',
-              'purl':             'pkg:apk/alpine/libssl3@3.1.1-r3?arch=x86_64&distro=3.18.0',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2024/03/11/1',
-                'https://access.redhat.com/errata/RHSA-2024:9088',
-                'https://access.redhat.com/security/cve/CVE-2024-0727',
-                'https://bugzilla.redhat.com/2257571',
-                'https://bugzilla.redhat.com/2258502',
-                'https://bugzilla.redhat.com/2259944',
-                'https://bugzilla.redhat.com/2284243',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2257571',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2258502',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2259944',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2284243',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-6129',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-6237',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-0727',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-1298',
-                'https://errata.almalinux.org/9/ALSA-2024-9088.html',
-                'https://errata.rockylinux.org/RLSA-2024:9088',
-                'https://github.com/alexcrichton/openssl-src-rs/commit/add20f73b6b42be7451af2e1044d4e0e778992b2',
-                'https://github.com/github/advisory-database/pull/3472',
-                'https://github.com/openssl/openssl/commit/09df4395b5071217b76dc7d3d2e630eb8c5a79c2',
-                'https://github.com/openssl/openssl/commit/775acfdbd0c6af9ac855f34969cdab0c0c90844a',
-                'https://github.com/openssl/openssl/commit/d135eeab8a5dbf72b3da5240bab9ddb7678dbd2c',
-                'https://github.com/openssl/openssl/pull/23362',
-                'https://github.com/pyca/cryptography/commit/3519591d255d4506fbcd0d04037d45271903c64d',
-                'https://github.openssl.org/openssl/extended-releases/commit/03b3941d60c4bce58fab69a0c22377ab439bc0e8',
-                'https://github.openssl.org/openssl/extended-releases/commit/aebaa5883e31122b404e450732dc833dc9dee539',
-                'https://linux.oracle.com/cve/CVE-2024-0727.html',
-                'https://linux.oracle.com/errata/ELSA-2024-9088.html',
-                'https://lists.debian.org/debian-lts-announce/2024/10/msg00033.html',
-                'https://lists.debian.org/debian-lts-announce/2024/11/msg00000.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2024-0727',
-                'https://security.netapp.com/advisory/ntap-20240208-0006',
-                'https://security.netapp.com/advisory/ntap-20240208-0006/',
-                'https://ubuntu.com/security/notices/USN-6622-1',
-                'https://ubuntu.com/security/notices/USN-6632-1',
-                'https://ubuntu.com/security/notices/USN-6709-1',
-                'https://ubuntu.com/security/notices/USN-7018-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2024-0727',
-                'https://www.openssl.org/news/secadv/20240125.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: denial of service via null dereference'
-            },
-            {
-              'cve':  'CVE-2024-13176',
-              'cvss': {
-                'redhat': {
-                  'v3score':  '4.7',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-385'
-              ],
-              'description':   'Issue summary: A timing side-channel which could potentially allow recovering\nthe private key exists in the ECDSA signature computation.\n\nImpact summary: A timing side-channel in ECDSA signature computations\ncould allow recovering the private key by an attacker. However, measuring\nthe timing would require either local access to the signing application or\na very fast network connection with low latency.\n\nThere is a timing signal of around 300 nanoseconds when the top word of\nthe inverted ECDSA nonce value is zero. This can happen with significant\nprobability only for some of the supported elliptic curves. In particular\nthe NIST P-521 curve is affected. To be able to measure this leak, the attacker\nprocess must either be located in the same physical computer or must\nhave a very fast network connection with low latency. For that reason\nthe severity of this vulnerability is Low.\n\nThe FIPS modules in 3.4, 3.3, 3.2, 3.1 and 3.0 are affected by this issue.',
-              'diffID':        'sha256:10d47f76a792d77a3508f82b3ed8d1c8e9701d2aa1ece5e74cacd89b30e35b3f',
-              'fixedVersions': [
-                '3.1.8-r0'
-              ],
-              'installedVersion': '3.1.1-r3',
-              'packageName':      'libssl3',
-              'purl':             'pkg:apk/alpine/libssl3@3.1.1-r3?arch=x86_64&distro=3.18.0',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2025/01/20/2',
-                'https://access.redhat.com/errata/RHSA-2025:16046',
-                'https://access.redhat.com/security/cve/CVE-2024-13176',
-                'https://bugzilla.redhat.com/2359885',
-                'https://bugzilla.redhat.com/2359888',
-                'https://bugzilla.redhat.com/2359892',
-                'https://bugzilla.redhat.com/2359894',
-                'https://bugzilla.redhat.com/2359895',
-                'https://bugzilla.redhat.com/2359899',
-                'https://bugzilla.redhat.com/2359900',
-                'https://bugzilla.redhat.com/2359902',
-                'https://bugzilla.redhat.com/2359903',
-                'https://bugzilla.redhat.com/2359911',
-                'https://bugzilla.redhat.com/2359918',
-                'https://bugzilla.redhat.com/2359920',
-                'https://bugzilla.redhat.com/2359924',
-                'https://bugzilla.redhat.com/2359928',
-                'https://bugzilla.redhat.com/2359930',
-                'https://bugzilla.redhat.com/2359932',
-                'https://bugzilla.redhat.com/2359934',
-                'https://bugzilla.redhat.com/2359938',
-                'https://bugzilla.redhat.com/2359940',
-                'https://bugzilla.redhat.com/2359943',
-                'https://bugzilla.redhat.com/2359944',
-                'https://bugzilla.redhat.com/2359945',
-                'https://bugzilla.redhat.com/2359947',
-                'https://bugzilla.redhat.com/2359950',
-                'https://bugzilla.redhat.com/2359963',
-                'https://bugzilla.redhat.com/2359964',
-                'https://bugzilla.redhat.com/2359972',
-                'https://bugzilla.redhat.com/2370920',
-                'https://bugzilla.redhat.com/2380264',
-                'https://bugzilla.redhat.com/2380273',
-                'https://bugzilla.redhat.com/2380274',
-                'https://bugzilla.redhat.com/2380278',
-                'https://bugzilla.redhat.com/2380280',
-                'https://bugzilla.redhat.com/2380283',
-                'https://bugzilla.redhat.com/2380284',
-                'https://bugzilla.redhat.com/2380290',
-                'https://bugzilla.redhat.com/2380291',
-                'https://bugzilla.redhat.com/2380295',
-                'https://bugzilla.redhat.com/2380298',
-                'https://bugzilla.redhat.com/2380306',
-                'https://bugzilla.redhat.com/2380308',
-                'https://bugzilla.redhat.com/2380309',
-                'https://bugzilla.redhat.com/2380310',
-                'https://bugzilla.redhat.com/2380312',
-                'https://bugzilla.redhat.com/2380313',
-                'https://bugzilla.redhat.com/2380320',
-                'https://bugzilla.redhat.com/2380321',
-                'https://bugzilla.redhat.com/2380322',
-                'https://bugzilla.redhat.com/2380326',
-                'https://bugzilla.redhat.com/2380327',
-                'https://bugzilla.redhat.com/2380334',
-                'https://bugzilla.redhat.com/2380335',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2338999',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359885',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359888',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359892',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359894',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359895',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359899',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359900',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359902',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359903',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359911',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359918',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359920',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359924',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359928',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359930',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359932',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359934',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359938',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359940',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359943',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359944',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359945',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359947',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359950',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359963',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359964',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359972',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2370920',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380264',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380273',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380274',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380278',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380280',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380283',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380284',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380290',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380291',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380295',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380298',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380306',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380308',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380309',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380310',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380312',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380313',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380320',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380321',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380322',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380326',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380327',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380334',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380335',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-13176',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21574',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21575',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21577',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21579',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21580',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21581',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21584',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21585',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21588',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30681',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30682',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30683',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30684',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30685',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30687',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30688',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30689',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30693',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30695',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30696',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30699',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30703',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30704',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30705',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30715',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30721',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30722',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50077',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50078',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50079',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50080',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50081',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50082',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50083',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50084',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50085',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50086',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50087',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50088',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50091',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50092',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50093',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50094',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50096',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50097',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50098',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50099',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50100',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50101',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50102',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50104',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-5399',
-                'https://errata.almalinux.org/9/ALSA-2025-16046.html',
-                'https://errata.rockylinux.org/RLSA-2025:15699',
-                'https://github.com/openssl/openssl/commit/07272b05b04836a762b4baa874958af51d513844',
-                'https://github.com/openssl/openssl/commit/2af62e74fb59bc469506bc37eb2990ea408d9467',
-                'https://github.com/openssl/openssl/commit/392dcb336405a0c94486aa6655057f59fd3a0902',
-                'https://github.com/openssl/openssl/commit/4b1cb94a734a7d4ec363ac0a215a25c181e11f65',
-                'https://github.com/openssl/openssl/commit/77c608f4c8857e63e98e66444e2e761c9627916f',
-                'https://github.openssl.org/openssl/extended-releases/commit/0d5fd1ab987f7571e2c955d8d8b638fc0fb54ded',
-                'https://github.openssl.org/openssl/extended-releases/commit/a2639000db19878d5d89586ae7b725080592ae86',
-                'https://linux.oracle.com/cve/CVE-2024-13176.html',
-                'https://linux.oracle.com/errata/ELSA-2025-16046.html',
-                'https://lists.debian.org/debian-lts-announce/2025/05/msg00028.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2024-13176',
-                'https://openssl-library.org/news/secadv/20250120.txt',
-                'https://security.netapp.com/advisory/ntap-20250124-0005/',
-                'https://security.netapp.com/advisory/ntap-20250418-0010/',
-                'https://security.netapp.com/advisory/ntap-20250502-0006/',
-                'https://ubuntu.com/security/notices/USN-7264-1',
-                'https://ubuntu.com/security/notices/USN-7278-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2024-13176',
-                'https://www.oracle.com/security-alerts/cpuapr2025.html#AppendixMSQL'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: Timing side-channel in ECDSA signature computation'
-            },
-            {
-              'cve':  'CVE-2024-4603',
-              'cvss': {
-                'redhat': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L'
-                }
-              },
-              'cwes': [
-                'CWE-606',
-                'CWE-834'
-              ],
-              'description':   'Issue summary: Checking excessively long DSA keys or parameters may be very\nslow.\n\nImpact summary: Applications that use the functions EVP_PKEY_param_check()\nor EVP_PKEY_public_check() to check a DSA public key or DSA parameters may\nexperience long delays. Where the key or parameters that are being checked\nhave been obtained from an untrusted source this may lead to a Denial of\nService.\n\nThe functions EVP_PKEY_param_check() or EVP_PKEY_public_check() perform\nvarious checks on DSA parameters. Some of those computations take a long time\nif the modulus (`p` parameter) is too large.\n\nTrying to use a very large modulus is slow and OpenSSL will not allow using\npublic keys with a modulus which is over 10,000 bits in length for signature\nverification. However the key and parameter check functions do not limit\nthe modulus size when performing the checks.\n\nAn application that calls EVP_PKEY_param_check() or EVP_PKEY_public_check()\nand supplies a key or parameters obtained from an untrusted source could be\nvulnerable to a Denial of Service attack.\n\nThese functions are not called by OpenSSL itself on untrusted DSA keys so\nonly applications that directly call these functions may be vulnerable.\n\nAlso vulnerable are the OpenSSL pkey and pkeyparam command line applications\nwhen using the `-check` option.\n\nThe OpenSSL SSL/TLS implementation is not affected by this issue.\n\nThe OpenSSL 3.0 and 3.1 FIPS providers are affected by this issue.',
-              'diffID':        'sha256:10d47f76a792d77a3508f82b3ed8d1c8e9701d2aa1ece5e74cacd89b30e35b3f',
-              'fixedVersions': [
-                '3.1.5-r0'
-              ],
-              'installedVersion': '3.1.1-r3',
-              'packageName':      'libssl3',
-              'purl':             'pkg:apk/alpine/libssl3@3.1.1-r3?arch=x86_64&distro=3.18.0',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2024/05/16/2',
-                'https://access.redhat.com/errata/RHSA-2024:9333',
-                'https://access.redhat.com/security/cve/CVE-2024-4603',
-                'https://bugzilla.redhat.com/2274020',
-                'https://bugzilla.redhat.com/2281029',
-                'https://bugzilla.redhat.com/2283757',
-                'https://bugzilla.redhat.com/2294581',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2274020',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2281029',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2283757',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2294581',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-2511',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-4603',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-4741',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-5535',
-                'https://errata.almalinux.org/9/ALSA-2024-9333.html',
-                'https://errata.rockylinux.org/RLSA-2024:9333',
-                'https://github.com/openssl/openssl/commit/3559e868e58005d15c6013a0c1fd832e51c73397',
-                'https://github.com/openssl/openssl/commit/53ea06486d296b890d565fb971b2764fcd826e7e',
-                'https://github.com/openssl/openssl/commit/9c39b3858091c152f52513c066ff2c5a47969f0d',
-                'https://github.com/openssl/openssl/commit/da343d0605c826ef197aceedc67e8e04f065f740',
-                'https://linux.oracle.com/cve/CVE-2024-4603.html',
-                'https://linux.oracle.com/errata/ELSA-2024-9333.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2024-4603',
-                'https://security.netapp.com/advisory/ntap-20240621-0001/',
-                'https://ubuntu.com/security/notices/USN-6937-1',
-                'https://www.cve.org/CVERecord?id=CVE-2024-4603',
-                'https://www.openssl.org/news/secadv/20240516.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: Excessive time spent checking DSA keys and parameters'
-            },
-            {
-              'cve':  'CVE-2024-4741',
-              'cvss': {
-                'redhat': {
-                  'v3score':  '5.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   'Issue summary: Calling the OpenSSL API function SSL_free_buffers may cause\nmemory to be accessed that was previously freed in some situations\n\nImpact summary: A use after free can have a range of potential consequences such\nas the corruption of valid data, crashes or execution of arbitrary code.\nHowever, only applications that directly call the SSL_free_buffers function are\naffected by this issue. Applications that do not call this function are not\nvulnerable. Our investigations indicate that this function is rarely used by\napplications.\n\nThe SSL_free_buffers function is used to free the internal OpenSSL buffer used\nwhen processing an incoming record from the network. The call is only expected\nto succeed if the buffer is not currently in use. However, two scenarios have\nbeen identified where the buffer is freed even when still in use.\n\nThe first scenario occurs where a record header has been received from the\nnetwork and processed by OpenSSL, but the full record body has not yet arrived.\nIn this case calling SSL_free_buffers will succeed even though a record has only\nbeen partially processed and the buffer is still in use.\n\nThe second scenario occurs where a full record containing application data has\nbeen received and processed by OpenSSL but the application has only read part of\nthis data. Again a call to SSL_free_buffers will succeed even though the buffer\nis still in use.\n\nWhile these scenarios could occur accidentally during normal operation a\nmalicious attacker could attempt to engineer a stituation where this occurs.\nWe are not aware of this issue being actively exploited.\n\nThe FIPS modules in 3.3, 3.2, 3.1 and 3.0 are not affected by this issue.',
-              'diffID':        'sha256:10d47f76a792d77a3508f82b3ed8d1c8e9701d2aa1ece5e74cacd89b30e35b3f',
-              'fixedVersions': [
-                '3.1.6-r0'
-              ],
-              'installedVersion': '3.1.1-r3',
-              'packageName':      'libssl3',
-              'purl':             'pkg:apk/alpine/libssl3@3.1.1-r3?arch=x86_64&distro=3.18.0',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2024:9333',
-                'https://access.redhat.com/security/cve/CVE-2024-4741',
-                'https://bugzilla.redhat.com/2274020',
-                'https://bugzilla.redhat.com/2281029',
-                'https://bugzilla.redhat.com/2283757',
-                'https://bugzilla.redhat.com/2294581',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2274020',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2281029',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2283757',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2294581',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-2511',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-4603',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-4741',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-5535',
-                'https://errata.almalinux.org/9/ALSA-2024-9333.html',
-                'https://errata.rockylinux.org/RLSA-2024:9333',
-                'https://github.com/openssl/openssl/commit/704f725b96aa373ee45ecfb23f6abfe8be8d9177',
-                'https://github.com/openssl/openssl/commit/b3f0eb0a295f58f16ba43ba99dad70d4ee5c437d',
-                'https://github.com/openssl/openssl/commit/c88c3de51020c37e8706bf7a682a162593053aac',
-                'https://github.com/openssl/openssl/commit/e5093133c35ca82874ad83697af76f4b0f7e3bd8',
-                'https://github.openssl.org/openssl/extended-releases/commit/f7a045f3143fc6da2ee66bf52d8df04829590dd4',
-                'https://linux.oracle.com/cve/CVE-2024-4741.html',
-                'https://linux.oracle.com/errata/ELSA-2024-9333.html',
-                'https://lists.debian.org/debian-lts-announce/2024/10/msg00033.html',
-                'https://lists.debian.org/debian-lts-announce/2024/11/msg00000.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2024-4741',
-                'https://security.netapp.com/advisory/ntap-20240621-0004/',
-                'https://ubuntu.com/security/notices/USN-6937-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2024-4741',
-                'https://www.openssl.org/news/secadv/20240528.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: Use After Free with SSL_free_buffers'
-            },
-            {
-              'cve':  'CVE-2024-5535',
-              'cvss': {
-                'redhat': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-125'
-              ],
-              'description':   'Issue summary: Calling the OpenSSL API function SSL_select_next_proto with an\nempty supported client protocols buffer may cause a crash or memory contents to\nbe sent to the peer.\n\nImpact summary: A buffer overread can have a range of potential consequences\nsuch as unexpected application beahviour or a crash. In particular this issue\ncould result in up to 255 bytes of arbitrary private data from memory being sent\nto the peer leading to a loss of confidentiality. However, only applications\nthat directly call the SSL_select_next_proto function with a 0 length list of\nsupported client protocols are affected by this issue. This would normally never\nbe a valid scenario and is typically not under attacker control but may occur by\naccident in the case of a configuration or programming error in the calling\napplication.\n\nThe OpenSSL API function SSL_select_next_proto is typically used by TLS\napplications that support ALPN (Application Layer Protocol Negotiation) or NPN\n(Next Protocol Negotiation). NPN is older, was never standardised and\nis deprecated in favour of ALPN. We believe that ALPN is significantly more\nwidely deployed than NPN. The SSL_select_next_proto function accepts a list of\nprotocols from the server and a list of protocols from the client and returns\nthe first protocol that appears in the server list that also appears in the\nclient list. In the case of no overlap between the two lists it returns the\nfirst item in the client list. In either case it will signal whether an overlap\nbetween the two lists was found. In the case where SSL_select_next_proto is\ncalled with a zero length client list it fails to notice this condition and\nreturns the memory immediately following the client list pointer (and reports\nthat there was no overlap in the lists).\n\nThis function is typically called from a server side application callback for\nALPN or a client side application callback for NPN. In the case of ALPN the list\nof protocols supplied by the client is guaranteed by libssl to never be zero in\nlength. The list of server protocols comes from the application and should never\nnormally be expected to be of zero length. In this case if the\nSSL_select_next_proto function has been called as expected (with the list\nsupplied by the client passed in the client/client_len parameters), then the\napplication will not be vulnerable to this issue. If the application has\naccidentally been configured with a zero length server list, and has\naccidentally passed that zero length server list in the client/client_len\nparameters, and has additionally failed to correctly handle a "no overlap"\nresponse (which would normally result in a handshake failure in ALPN) then it\nwill be vulnerable to this problem.\n\nIn the case of NPN, the protocol permits the client to opportunistically select\na protocol when there is no overlap. OpenSSL returns the first client protocol\nin the no overlap case in support of this. The list of client protocols comes\nfrom the application and should never normally be expected to be of zero length.\nHowever if the SSL_select_next_proto function is accidentally called with a\nclient_len of 0 then an invalid memory pointer will be returned instead. If the\napplication uses this output as the opportunistic protocol then the loss of\nconfidentiality will occur.\n\nThis issue has been assessed as Low severity because applications are most\nlikely to be vulnerable if they are using NPN instead of ALPN - but NPN is not\nwidely used. It also requires an application configuration or programming error.\nFinally, this issue would not typically be under attacker control making active\nexploitation unlikely.\n\nThe FIPS modules in 3.3, 3.2, 3.1 and 3.0 are not affected by this issue.\n\nDue to the low severity of this issue we are not issuing new releases of\nOpenSSL at this time. The fix will be included in the next releases when they\nbecome available.',
-              'diffID':        'sha256:10d47f76a792d77a3508f82b3ed8d1c8e9701d2aa1ece5e74cacd89b30e35b3f',
-              'fixedVersions': [
-                '3.1.6-r0'
-              ],
-              'installedVersion': '3.1.1-r3',
-              'packageName':      'libssl3',
-              'purl':             'pkg:apk/alpine/libssl3@3.1.1-r3?arch=x86_64&distro=3.18.0',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2024/06/27/1',
-                'http://www.openwall.com/lists/oss-security/2024/06/28/4',
-                'http://www.openwall.com/lists/oss-security/2024/08/15/1',
-                'https://access.redhat.com/errata/RHSA-2025:1671',
-                'https://access.redhat.com/security/cve/CVE-2024-5535',
-                'https://bugzilla.redhat.com/2294581',
-                'https://bugzilla.redhat.com/2294676',
-                'https://bugzilla.redhat.com/2301888',
-                'https://bugzilla.redhat.com/2318857',
-                'https://bugzilla.redhat.com/2318858',
-                'https://bugzilla.redhat.com/2318870',
-                'https://bugzilla.redhat.com/2318873',
-                'https://bugzilla.redhat.com/2318874',
-                'https://bugzilla.redhat.com/2318876',
-                'https://bugzilla.redhat.com/2318882',
-                'https://bugzilla.redhat.com/2318883',
-                'https://bugzilla.redhat.com/2318884',
-                'https://bugzilla.redhat.com/2318885',
-                'https://bugzilla.redhat.com/2318886',
-                'https://bugzilla.redhat.com/2318897',
-                'https://bugzilla.redhat.com/2318900',
-                'https://bugzilla.redhat.com/2318905',
-                'https://bugzilla.redhat.com/2318914',
-                'https://bugzilla.redhat.com/2318922',
-                'https://bugzilla.redhat.com/2318923',
-                'https://bugzilla.redhat.com/2318925',
-                'https://bugzilla.redhat.com/2318926',
-                'https://bugzilla.redhat.com/2318927',
-                'https://bugzilla.redhat.com/2331191',
-                'https://bugzilla.redhat.com/2339218',
-                'https://bugzilla.redhat.com/2339220',
-                'https://bugzilla.redhat.com/2339221',
-                'https://bugzilla.redhat.com/2339226',
-                'https://bugzilla.redhat.com/2339231',
-                'https://bugzilla.redhat.com/2339236',
-                'https://bugzilla.redhat.com/2339238',
-                'https://bugzilla.redhat.com/2339243',
-                'https://bugzilla.redhat.com/2339247',
-                'https://bugzilla.redhat.com/2339252',
-                'https://bugzilla.redhat.com/2339259',
-                'https://bugzilla.redhat.com/2339266',
-                'https://bugzilla.redhat.com/2339270',
-                'https://bugzilla.redhat.com/2339271',
-                'https://bugzilla.redhat.com/2339275',
-                'https://bugzilla.redhat.com/2339277',
-                'https://bugzilla.redhat.com/2339281',
-                'https://bugzilla.redhat.com/2339284',
-                'https://bugzilla.redhat.com/2339291',
-                'https://bugzilla.redhat.com/2339293',
-                'https://bugzilla.redhat.com/2339295',
-                'https://bugzilla.redhat.com/2339299',
-                'https://bugzilla.redhat.com/2339300',
-                'https://bugzilla.redhat.com/2339304',
-                'https://bugzilla.redhat.com/2339305',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2274020',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2281029',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2283757',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2294581',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-2511',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-4603',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-4741',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-5535',
-                'https://errata.almalinux.org/9/ALSA-2025-1671.html',
-                'https://errata.rockylinux.org/RLSA-2024:9333',
-                'https://github.com/openssl/openssl/commit/4ada436a1946cbb24db5ab4ca082b69c1bc10f37',
-                'https://github.com/openssl/openssl/commit/99fb785a5f85315b95288921a321a935ea29a51e',
-                'https://github.com/openssl/openssl/commit/cf6f91f6121f4db167405db2f0de410a456f260c',
-                'https://github.com/openssl/openssl/commit/e86ac436f0bd54d4517745483e2315650fae7b2c',
-                'https://github.openssl.org/openssl/extended-releases/commit/9947251413065a05189a63c9b7a6c1d4e224c21c',
-                'https://github.openssl.org/openssl/extended-releases/commit/b78ec0824da857223486660177d3b1f255c65d87',
-                'https://linux.oracle.com/cve/CVE-2024-5535.html',
-                'https://linux.oracle.com/errata/ELSA-2025-1673.html',
-                'https://lists.debian.org/debian-lts-announce/2024/10/msg00033.html',
-                'https://lists.debian.org/debian-lts-announce/2024/11/msg00000.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2024-5535',
-                'https://openssl.org/news/secadv/20240627.txt',
-                'https://security.netapp.com/advisory/ntap-20240712-0005/',
-                'https://security.netapp.com/advisory/ntap-20241025-0006/',
-                'https://security.netapp.com/advisory/ntap-20241025-0010/',
-                'https://ubuntu.com/security/notices/USN-6937-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2024-5535',
-                'https://www.openssl.org/news/secadv/20240627.txt',
-                'https://www.oracle.com/security-alerts/cpuoct2024.html#AppendixMSQL'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: SSL_select_next_proto buffer overread'
-            },
-            {
-              'cve':  'CVE-2024-2511',
-              'cvss': {
-                'redhat': {
-                  'v3score':  '3.7',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L'
-                }
-              },
-              'cwes': [
-                'CWE-1325'
-              ],
-              'description':   'Issue summary: Some non-default TLS server configurations can cause unbounded\nmemory growth when processing TLSv1.3 sessions\n\nImpact summary: An attacker may exploit certain server configurations to trigger\nunbounded memory growth that would lead to a Denial of Service\n\nThis problem can occur in TLSv1.3 if the non-default SSL_OP_NO_TICKET option is\nbeing used (but not if early_data support is also configured and the default\nanti-replay protection is in use). In this case, under certain conditions, the\nsession cache can get into an incorrect state and it will fail to flush properly\nas it fills. The session cache will continue to grow in an unbounded manner. A\nmalicious client could deliberately create the scenario for this failure to\nforce a Denial of Service. It may also happen by accident in normal operation.\n\nThis issue only affects TLS servers supporting TLSv1.3. It does not affect TLS\nclients.\n\nThe FIPS modules in 3.2, 3.1 and 3.0 are not affected by this issue. OpenSSL\n1.0.2 is also not affected by this issue.',
-              'diffID':        'sha256:10d47f76a792d77a3508f82b3ed8d1c8e9701d2aa1ece5e74cacd89b30e35b3f',
-              'fixedVersions': [
-                '3.1.4-r6'
-              ],
-              'installedVersion': '3.1.1-r3',
-              'packageName':      'libssl3',
-              'purl':             'pkg:apk/alpine/libssl3@3.1.1-r3?arch=x86_64&distro=3.18.0',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2024/04/08/5',
-                'https://access.redhat.com/errata/RHSA-2024:9333',
-                'https://access.redhat.com/security/cve/CVE-2024-2511',
-                'https://bugzilla.redhat.com/2274020',
-                'https://bugzilla.redhat.com/2281029',
-                'https://bugzilla.redhat.com/2283757',
-                'https://bugzilla.redhat.com/2294581',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2274020',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2281029',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2283757',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2294581',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-2511',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-4603',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-4741',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-5535',
-                'https://errata.almalinux.org/9/ALSA-2024-9333.html',
-                'https://errata.rockylinux.org/RLSA-2024:9333',
-                'https://github.com/openssl/openssl/commit/7e4d731b1c07201ad9374c1cd9ac5263bdf35bce',
-                'https://github.com/openssl/openssl/commit/b52867a9f618bb955bed2a3ce3db4d4f97ed8e5d',
-                'https://github.com/openssl/openssl/commit/e9d7083e241670332e0443da0f0d4ffb52829f08',
-                'https://github.openssl.org/openssl/extended-releases/commit/5f8d25770ae6437db119dfc951e207271a326640',
-                'https://linux.oracle.com/cve/CVE-2024-2511.html',
-                'https://linux.oracle.com/errata/ELSA-2024-9333.html',
-                'https://lists.debian.org/debian-lts-announce/2024/10/msg00033.html',
-                'https://lists.debian.org/debian-lts-announce/2024/11/msg00000.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2024-2511',
-                'https://security.netapp.com/advisory/ntap-20240503-0013/',
-                'https://ubuntu.com/security/notices/USN-6937-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2024-2511',
-                'https://www.openssl.org/news/secadv/20240408.txt',
-                'https://www.openssl.org/news/vulnerabilities.html'
-              ],
-              'severity':   'LOW',
-              'suppressed': false,
-              'title':      'openssl: Unbounded memory growth with session handling in TLSv1.3'
-            },
-            {
-              'cve':  'CVE-2024-9143',
-              'cvss': {
-                'redhat': {
-                  'v3score':  '3.7',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L'
-                }
-              },
-              'cwes': [
-                'CWE-125',
-                'CWE-787'
-              ],
-              'description':   "Issue summary: Use of the low-level GF(2^m) elliptic curve APIs with untrusted\nexplicit values for the field polynomial can lead to out-of-bounds memory reads\nor writes.\n\nImpact summary: Out of bound memory writes can lead to an application crash or\neven a possibility of a remote code execution, however, in all the protocols\ninvolving Elliptic Curve Cryptography that we're aware of, either only \"named\ncurves\" are supported, or, if explicit curve parameters are supported, they\nspecify an X9.62 encoding of binary (GF(2^m)) curves that can't represent\nproblematic input values. Thus the likelihood of existence of a vulnerable\napplication is low.\n\nIn particular, the X9.62 encoding is used for ECC keys in X.509 certificates,\nso problematic inputs cannot occur in the context of processing X.509\ncertificates.  Any problematic use-cases would have to be using an \"exotic\"\ncurve encoding.\n\nThe affected APIs include: EC_GROUP_new_curve_GF2m(), EC_GROUP_new_from_params(),\nand various supporting BN_GF2m_*() functions.\n\nApplications working with \"exotic\" explicit binary (GF(2^m)) curve parameters,\nthat make it possible to represent invalid field polynomials with a zero\nconstant term, via the above or similar APIs, may terminate abruptly as a\nresult of reading or writing outside of array bounds.  Remote code execution\ncannot easily be ruled out.\n\nThe FIPS modules in 3.3, 3.2, 3.1 and 3.0 are not affected by this issue.",
-              'diffID':        'sha256:10d47f76a792d77a3508f82b3ed8d1c8e9701d2aa1ece5e74cacd89b30e35b3f',
-              'fixedVersions': [
-                '3.1.7-r1'
-              ],
-              'installedVersion': '3.1.1-r3',
-              'packageName':      'libssl3',
-              'purl':             'pkg:apk/alpine/libssl3@3.1.1-r3?arch=x86_64&distro=3.18.0',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2024/10/16/1',
-                'http://www.openwall.com/lists/oss-security/2024/10/23/1',
-                'http://www.openwall.com/lists/oss-security/2024/10/24/1',
-                'https://access.redhat.com/security/cve/CVE-2024-9143',
-                'https://github.com/openssl/openssl/commit/72ae83ad214d2eef262461365a1975707f862712',
-                'https://github.com/openssl/openssl/commit/bc7e04d7c8d509fb78fc0e285aa948fb0da04700',
-                'https://github.com/openssl/openssl/commit/c0d3e4d32d2805f49bec30547f225bc4d092e1f4',
-                'https://github.com/openssl/openssl/commit/fdf6723362ca51bd883295efe206cb5b1cfa5154',
-                'https://github.openssl.org/openssl/extended-releases/commit/8efc0cbaa8ebba8e116f7b81a876a4123594d86a',
-                'https://github.openssl.org/openssl/extended-releases/commit/9d576994cec2b7aa37a91740ea7e680810957e41',
-                'https://lists.debian.org/debian-lts-announce/2024/10/msg00033.html',
-                'https://lists.debian.org/debian-lts-announce/2024/11/msg00000.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2024-9143',
-                'https://openssl-library.org/news/secadv/20241016.txt',
-                'https://security.netapp.com/advisory/ntap-20241101-0001/',
-                'https://ubuntu.com/security/notices/USN-7264-1',
-                'https://ubuntu.com/security/notices/USN-7278-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2024-9143'
-              ],
-              'severity':   'LOW',
-              'suppressed': false,
-              'title':      'openssl: Low-level invalid GF(2^m) parameters lead to OOB memory access'
-            },
-            {
-              'cve':  'CVE-2025-26519',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-787'
-              ],
-              'description':   'musl libc 0.9.13 through 1.2.5 before 1.2.6 has an out-of-bounds write vulnerability when an attacker can trigger iconv conversion of untrusted EUC-KR text to UTF-8.',
-              'diffID':        'sha256:bb01bd7e32b58b6694c8c3622c230171f1cec24001a82068a8d30d338f420d6c',
-              'fixedVersions': [
-                '1.2.4-r3'
-              ],
-              'installedVersion': '1.2.4-r0',
-              'packageName':      'musl',
-              'purl':             'pkg:apk/alpine/musl@1.2.4-r0?arch=x86_64&distro=3.18.0',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2025/02/13/2',
-                'http://www.openwall.com/lists/oss-security/2025/02/13/3',
-                'http://www.openwall.com/lists/oss-security/2025/02/13/4',
-                'http://www.openwall.com/lists/oss-security/2025/02/13/5',
-                'http://www.openwall.com/lists/oss-security/2025/02/14/5',
-                'http://www.openwall.com/lists/oss-security/2025/02/14/6',
-                'https://git.musl-libc.org/cgit/musl/commit/?id=c47ad25ea3b484e10326f933e927c0bc8cded3da',
-                'https://git.musl-libc.org/cgit/musl/commit/?id=e5adcd97b5196e29991b524237381a0202a60659',
-                'https://www.openwall.com/lists/oss-security/2025/02/13/2'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'musl libc 0.9.13 through 1.2.5 before 1.2.6 has an out-of-bounds write ...'
-            },
-            {
-              'cve':  'CVE-2025-26519',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-787'
-              ],
-              'description':   'musl libc 0.9.13 through 1.2.5 before 1.2.6 has an out-of-bounds write vulnerability when an attacker can trigger iconv conversion of untrusted EUC-KR text to UTF-8.',
-              'diffID':        'sha256:bb01bd7e32b58b6694c8c3622c230171f1cec24001a82068a8d30d338f420d6c',
-              'fixedVersions': [
-                '1.2.4-r3'
-              ],
-              'installedVersion': '1.2.4-r0',
-              'packageName':      'musl-utils',
-              'purl':             'pkg:apk/alpine/musl-utils@1.2.4-r0?arch=x86_64&distro=3.18.0',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2025/02/13/2',
-                'http://www.openwall.com/lists/oss-security/2025/02/13/3',
-                'http://www.openwall.com/lists/oss-security/2025/02/13/4',
-                'http://www.openwall.com/lists/oss-security/2025/02/13/5',
-                'http://www.openwall.com/lists/oss-security/2025/02/14/5',
-                'http://www.openwall.com/lists/oss-security/2025/02/14/6',
-                'https://git.musl-libc.org/cgit/musl/commit/?id=c47ad25ea3b484e10326f933e927c0bc8cded3da',
-                'https://git.musl-libc.org/cgit/musl/commit/?id=e5adcd97b5196e29991b524237381a0202a60659',
-                'https://www.openwall.com/lists/oss-security/2025/02/13/2'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'musl libc 0.9.13 through 1.2.5 before 1.2.6 has an out-of-bounds write ...'
-            },
-            {
-              'cve':  'CVE-2023-42363',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.5',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.8',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   'A use-after-free vulnerability was discovered in xasprintf function in xfuncs_printf.c:344 in BusyBox v.1.36.1.',
-              'diffID':        'sha256:10d47f76a792d77a3508f82b3ed8d1c8e9701d2aa1ece5e74cacd89b30e35b3f',
-              'fixedVersions': [
-                '1.36.1-r7'
-              ],
-              'installedVersion': '1.36.1-r1',
-              'packageName':      'ssl_client',
-              'purl':             'pkg:apk/alpine/ssl_client@1.36.1-r1?arch=x86_64&distro=3.18.0',
-              'references':       [
-                'http://lists.busybox.net/pipermail/busybox/2024-May/090760.html',
-                'https://access.redhat.com/security/cve/CVE-2023-42363',
-                'https://bugs.busybox.net/show_bug.cgi?id=15865',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-42363',
-                'https://ubuntu.com/security/notices/USN-6961-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-42363'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk'
-            },
-            {
-              'cve':  'CVE-2023-42364',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.5',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.8',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   'A use-after-free vulnerability in BusyBox v.1.36.1 allows attackers to cause a denial of service via a crafted awk pattern in the awk.c evaluate function.',
-              'diffID':        'sha256:10d47f76a792d77a3508f82b3ed8d1c8e9701d2aa1ece5e74cacd89b30e35b3f',
-              'fixedVersions': [
-                '1.36.1-r7'
-              ],
-              'installedVersion': '1.36.1-r1',
-              'packageName':      'ssl_client',
-              'purl':             'pkg:apk/alpine/ssl_client@1.36.1-r1?arch=x86_64&distro=3.18.0',
-              'references':       [
-                'http://lists.busybox.net/pipermail/busybox/2024-May/090762.html',
-                'https://access.redhat.com/security/cve/CVE-2023-42364',
-                'https://bugs.busybox.net/show_bug.cgi?id=15868',
-                'https://gitlab.alpinelinux.org/alpine/aports/-/blob/master/main/busybox/CVE-2023-42364-CVE-2023-42365.patch',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-42364',
-                'https://ubuntu.com/security/notices/USN-6961-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-42364'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'busybox: use-after-free'
-            },
-            {
-              'cve':  'CVE-2023-42365',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.5',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.8',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   'A use-after-free vulnerability was discovered in BusyBox v.1.36.1 via a crafted awk pattern in the awk.c copyvar function.',
-              'diffID':        'sha256:10d47f76a792d77a3508f82b3ed8d1c8e9701d2aa1ece5e74cacd89b30e35b3f',
-              'fixedVersions': [
-                '1.36.1-r7'
-              ],
-              'installedVersion': '1.36.1-r1',
-              'packageName':      'ssl_client',
-              'purl':             'pkg:apk/alpine/ssl_client@1.36.1-r1?arch=x86_64&distro=3.18.0',
-              'references':       [
-                'http://lists.busybox.net/pipermail/busybox/2024-May/090762.html',
-                'https://access.redhat.com/security/cve/CVE-2023-42365',
-                'https://bugs.busybox.net/show_bug.cgi?id=15871',
-                'https://gitlab.alpinelinux.org/alpine/aports/-/blob/master/main/busybox/CVE-2023-42364-CVE-2023-42365.patch',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-42365',
-                'https://ubuntu.com/security/notices/USN-6961-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-42365'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'busybox: use-after-free'
-            },
-            {
-              'cve':  'CVE-2023-42366',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.5',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.1',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-787'
-              ],
-              'description':   'A heap-buffer-overflow was discovered in BusyBox v.1.36.1 in the next_token function at awk.c:1159.',
-              'diffID':        'sha256:10d47f76a792d77a3508f82b3ed8d1c8e9701d2aa1ece5e74cacd89b30e35b3f',
-              'fixedVersions': [
-                '1.36.1-r6'
-              ],
-              'installedVersion': '1.36.1-r1',
-              'packageName':      'ssl_client',
-              'purl':             'pkg:apk/alpine/ssl_client@1.36.1-r1?arch=x86_64&distro=3.18.0',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2023-42366',
-                'https://bugs.busybox.net/show_bug.cgi?id=15874',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-42366',
-                'https://security.netapp.com/advisory/ntap-20241206-0007/',
-                'https://www.cve.org/CVERecord?id=CVE-2023-42366'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'busybox: A heap-buffer-overflow'
-            }
-          ]
-        }
-      ],
-      'summary': {
-        'critical':   0,
-        'high':       6,
-        'low':        4,
-        'medium':     30,
-        'suppressed': 0,
-        'unknown':    0
-      }
-    }
-  },
-  {
-    'id':    'default/5bd807a9eace2b96a765f5b824bb6cf6d5a8eb2e9fe73cd0497b50437b16a7b1',
-    'type':  'storage.sbomscanner.kubewarden.io.vulnerabilityreport',
-    'links': {
-      'patch':  'https://localhost:8005/v1/storage.sbomscanner.kubewarden.io.vulnerabilityreports/default/5bd807a9eace2b96a765f5b824bb6cf6d5a8eb2e9fe73cd0497b50437b16a7b1',
-      'remove': 'https://localhost:8005/v1/storage.sbomscanner.kubewarden.io.vulnerabilityreports/default/5bd807a9eace2b96a765f5b824bb6cf6d5a8eb2e9fe73cd0497b50437b16a7b1',
-      'self':   'https://localhost:8005/v1/storage.sbomscanner.kubewarden.io.vulnerabilityreports/default/5bd807a9eace2b96a765f5b824bb6cf6d5a8eb2e9fe73cd0497b50437b16a7b1',
-      'update': 'https://localhost:8005/v1/storage.sbomscanner.kubewarden.io.vulnerabilityreports/default/5bd807a9eace2b96a765f5b824bb6cf6d5a8eb2e9fe73cd0497b50437b16a7b1',
-      'view':   'https://localhost:8005/apis/storage.sbomscanner.kubewarden.io/v1alpha1/namespaces/default/vulnerabilityreports/5bd807a9eace2b96a765f5b824bb6cf6d5a8eb2e9fe73cd0497b50437b16a7b1'
-    },
-    'apiVersion':    'storage.sbomscanner.kubewarden.io/v1alpha1',
-    'imageMetadata': {
-      'digest':      'sha256:84b52c534d1441eceb3c269c105386e21fa90c40d61f75762b0f4020e4410187',
-      'platform':    'linux/amd64',
-      'registry':    'demo-02',
-      'registryURI': 'ghcr.io',
-      'repository':  'linuxcontainers/alpine',
-      'tag':         '3.16'
-    },
-    'kind':     'VulnerabilityReport',
-    'metadata': {
-      'creationTimestamp': '2026-01-09T22:45:59Z',
-      'fields':            [
-        '5bd807a9eace2b96a765f5b824bb6cf6d5a8eb2e9fe73cd0497b50437b16a7b1',
-        'ghcr.io/linuxcontainers/alpine:3.16',
-        'linux/amd64',
-        '16 (0 suppressed)'
-      ],
-      'labels': {
-        'app.kubernetes.io/managed-by':          'sbomscanner',
-        'app.kubernetes.io/part-of':             'sbomscanner',
-        'sbomscanner.kubewarden.io/scanjob-uid': '42184d01-4b15-466f-98aa-e802d1b6b6b8'
-      },
-      'name':            '5bd807a9eace2b96a765f5b824bb6cf6d5a8eb2e9fe73cd0497b50437b16a7b1',
-      'namespace':       'default',
-      'ownerReferences': [
-        {
-          'apiVersion':         'storage.sbomscanner.kubewarden.io/v1alpha1',
-          'blockOwnerDeletion': true,
-          'controller':         true,
-          'kind':               'SBOM',
-          'name':               '5bd807a9eace2b96a765f5b824bb6cf6d5a8eb2e9fe73cd0497b50437b16a7b1',
-          'uid':                '52a9a428-7803-4dc6-a2fe-f326bf47872b'
-        }
-      ],
-      'relationships': [
-        {
-          'fromId':   'default/5bd807a9eace2b96a765f5b824bb6cf6d5a8eb2e9fe73cd0497b50437b16a7b1',
-          'fromType': 'storage.sbomscanner.kubewarden.io.sbom',
-          'rel':      'owner',
-          'state':    'active',
-          'message':  'Resource is current'
-        }
-      ],
-      'resourceVersion': '4',
-      'state':           {
-        'error':         false,
-        'message':       'Resource is current',
-        'name':          'active',
-        'transitioning': false
-      },
-      'uid': 'bd679114-d5d6-484b-9eeb-8c8cbe65cac5'
-    },
-    'report': {
-      'results': [
-        {
-          'class':           'os-pkgs',
-          'target':          '/var/run/worker/trivy.sbom.2521981789.json (alpine 3.16.4)',
-          'type':            'alpine',
-          'vulnerabilities': [
-            {
-              'cve':  'CVE-2023-42366',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.5',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.1',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-787'
-              ],
-              'description':   'A heap-buffer-overflow was discovered in BusyBox v.1.36.1 in the next_token function at awk.c:1159.',
-              'diffID':        'sha256:aa5968d388b8652cd305e0e037751228967839d83d0cafbde5debf0b092e7c42',
-              'fixedVersions': [
-                '1.35.0-r18'
-              ],
-              'installedVersion': '1.35.0-r17',
-              'packageName':      'busybox',
-              'purl':             'pkg:apk/alpine/busybox@1.35.0-r17?arch=x86_64&distro=3.16.4',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2023-42366',
-                'https://bugs.busybox.net/show_bug.cgi?id=15874',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-42366',
-                'https://security.netapp.com/advisory/ntap-20241206-0007/',
-                'https://www.cve.org/CVERecord?id=CVE-2023-42366'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'busybox: A heap-buffer-overflow'
-            },
-            {
-              'cve':  'CVE-2023-0464',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-295'
-              ],
-              'description':   "A security vulnerability has been identified in all supported versions\n\nof OpenSSL related to the verification of X.509 certificate chains\nthat include policy constraints.  Attackers may be able to exploit this\nvulnerability by creating a malicious certificate chain that triggers\nexponential use of computational resources, leading to a denial-of-service\n(DoS) attack on affected systems.\n\nPolicy processing is disabled by default but can be enabled by passing\nthe `-policy' argument to the command line utilities or by calling the\n`X509_VERIFY_PARAM_set1_policies()' function.",
-              'diffID':        'sha256:aa5968d388b8652cd305e0e037751228967839d83d0cafbde5debf0b092e7c42',
-              'fixedVersions': [
-                '1.1.1t-r1'
-              ],
-              'installedVersion': '1.1.1t-r0',
-              'packageName':      'libcrypto1.1',
-              'purl':             'pkg:apk/alpine/libcrypto1.1@1.1.1t-r0?arch=x86_64&distro=3.16.4',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2023:3722',
-                'https://access.redhat.com/security/cve/CVE-2023-0464',
-                'https://bugzilla.redhat.com/2181082',
-                'https://bugzilla.redhat.com/2182561',
-                'https://bugzilla.redhat.com/2182565',
-                'https://bugzilla.redhat.com/2188461',
-                'https://bugzilla.redhat.com/2207947',
-                'https://errata.almalinux.org/9/ALSA-2023-3722.html',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=2017771e2db3e2b96f89bbe8766c3209f6a99545',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=2dcd4f1e3115f38cefa43e3efbe9b801c27e642e',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=879f7080d7e141f415c79eaa3a8ac4a3dad0348b',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=959c59c7a0164117e7f8366466a32bb1f8d77ff1',
-                'https://linux.oracle.com/cve/CVE-2023-0464.html',
-                'https://linux.oracle.com/errata/ELSA-2023-3722.html',
-                'https://lists.debian.org/debian-lts-announce/2023/06/msg00011.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-0464',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://security.netapp.com/advisory/ntap-20230406-0006/',
-                'https://security.netapp.com/advisory/ntap-20240621-0006/',
-                'https://ubuntu.com/security/notices/USN-6039-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.couchbase.com/alerts/',
-                'https://www.cve.org/CVERecord?id=CVE-2023-0464',
-                'https://www.debian.org/security/2023/dsa-5417',
-                'https://www.openssl.org/news/secadv/20230322.txt'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: Denial of service by excessive resource usage in verifying X509 policy constraints'
-            },
-            {
-              'cve':  'CVE-2023-0465',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N'
-                },
-                'redhat': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-295'
-              ],
-              'description':   "Applications that use a non-default option when verifying certificates may be\nvulnerable to an attack from a malicious CA to circumvent certain checks.\n\nInvalid certificate policies in leaf certificates are silently ignored by\nOpenSSL and other certificate policy checks are skipped for that certificate.\nA malicious CA could use this to deliberately assert invalid certificate policies\nin order to circumvent policy checking on the certificate altogether.\n\nPolicy processing is disabled by default but can be enabled by passing\nthe `-policy' argument to the command line utilities or by calling the\n`X509_VERIFY_PARAM_set1_policies()' function.",
-              'diffID':        'sha256:aa5968d388b8652cd305e0e037751228967839d83d0cafbde5debf0b092e7c42',
-              'fixedVersions': [
-                '1.1.1t-r2'
-              ],
-              'installedVersion': '1.1.1t-r0',
-              'packageName':      'libcrypto1.1',
-              'purl':             'pkg:apk/alpine/libcrypto1.1@1.1.1t-r0?arch=x86_64&distro=3.16.4',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2023:3722',
-                'https://access.redhat.com/security/cve/CVE-2023-0465',
-                'https://bugzilla.redhat.com/2181082',
-                'https://bugzilla.redhat.com/2182561',
-                'https://bugzilla.redhat.com/2182565',
-                'https://bugzilla.redhat.com/2188461',
-                'https://bugzilla.redhat.com/2207947',
-                'https://errata.almalinux.org/9/ALSA-2023-3722.html',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=10325176f3d3e98c6e2b3bf5ab1e3b334de6947a',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=1dd43e0709fece299b15208f36cc7c76209ba0bb',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=b013765abfa80036dc779dd0e50602c57bb3bf95',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=facfb1ab745646e97a1920977ae4a9965ea61d5c',
-                'https://linux.oracle.com/cve/CVE-2023-0465.html',
-                'https://linux.oracle.com/errata/ELSA-2023-3722.html',
-                'https://lists.debian.org/debian-lts-announce/2023/06/msg00011.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-0465',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://security.netapp.com/advisory/ntap-20230414-0001/',
-                'https://ubuntu.com/security/notices/USN-6039-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-0465',
-                'https://www.debian.org/security/2023/dsa-5417',
-                'https://www.openssl.org/news/secadv/20230328.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: Invalid certificate policies in leaf certificates are silently ignored'
-            },
-            {
-              'cve':  'CVE-2023-2650',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '6.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-770'
-              ],
-              'description':   "Issue summary: Processing some specially crafted ASN.1 object identifiers or\ndata containing them may be very slow.\n\nImpact summary: Applications that use OBJ_obj2txt() directly, or use any of\nthe OpenSSL subsystems OCSP, PKCS7/SMIME, CMS, CMP/CRMF or TS with no message\nsize limit may experience notable to very long delays when processing those\nmessages, which may lead to a Denial of Service.\n\nAn OBJECT IDENTIFIER is composed of a series of numbers - sub-identifiers -\nmost of which have no size limit.  OBJ_obj2txt() may be used to translate\nan ASN.1 OBJECT IDENTIFIER given in DER encoding form (using the OpenSSL\ntype ASN1_OBJECT) to its canonical numeric text form, which are the\nsub-identifiers of the OBJECT IDENTIFIER in decimal form, separated by\nperiods.\n\nWhen one of the sub-identifiers in the OBJECT IDENTIFIER is very large\n(these are sizes that are seen as absurdly large, taking up tens or hundreds\nof KiBs), the translation to a decimal number in text may take a very long\ntime.  The time complexity is O(n^2) with 'n' being the size of the\nsub-identifiers in bytes (*).\n\nWith OpenSSL 3.0, support to fetch cryptographic algorithms using names /\nidentifiers in string form was introduced.  This includes using OBJECT\nIDENTIFIERs in canonical numeric text form as identifiers for fetching\nalgorithms.\n\nSuch OBJECT IDENTIFIERs may be received through the ASN.1 structure\nAlgorithmIdentifier, which is commonly used in multiple protocols to specify\nwhat cryptographic algorithm should be used to sign or verify, encrypt or\ndecrypt, or digest passed data.\n\nApplications that call OBJ_obj2txt() directly with untrusted data are\naffected, with any version of OpenSSL.  If the use is for the mere purpose\nof display, the severity is considered low.\n\nIn OpenSSL 3.0 and newer, this affects the subsystems OCSP, PKCS7/SMIME,\nCMS, CMP/CRMF or TS.  It also impacts anything that processes X.509\ncertificates, including simple things like verifying its signature.\n\nThe impact on TLS is relatively low, because all versions of OpenSSL have a\n100KiB limit on the peer's certificate chain.  Additionally, this only\nimpacts clients, or servers that have explicitly enabled client\nauthentication.\n\nIn OpenSSL 1.1.1 and 1.0.2, this only affects displaying diverse objects,\nsuch as X.509 certificates.  This is assumed to not happen in such a way\nthat it would cause a Denial of Service, so these versions are considered\nnot affected by this issue in such a way that it would be cause for concern,\nand the severity is therefore considered low.",
-              'diffID':        'sha256:aa5968d388b8652cd305e0e037751228967839d83d0cafbde5debf0b092e7c42',
-              'fixedVersions': [
-                '1.1.1u-r0'
-              ],
-              'installedVersion': '1.1.1t-r0',
-              'packageName':      'libcrypto1.1',
-              'purl':             'pkg:apk/alpine/libcrypto1.1@1.1.1t-r0?arch=x86_64&distro=3.16.4',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2023/05/30/1',
-                'https://access.redhat.com/errata/RHSA-2023:6330',
-                'https://access.redhat.com/security/cve/CVE-2023-2650',
-                'https://bugzilla.redhat.com/1858038',
-                'https://bugzilla.redhat.com/2207947',
-                'https://errata.almalinux.org/9/ALSA-2023-6330.html',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=423a2bc737a908ad0c77bda470b2b59dc879936b',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=853c5e56ee0b8650c73140816bb8b91d6163422c',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=9e209944b35cf82368071f160a744b6178f9b098',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=db779b0e10b047f2585615e0b8f2acdf21f8544a',
-                'https://linux.oracle.com/cve/CVE-2023-2650.html',
-                'https://linux.oracle.com/errata/ELSA-2023-6330.html',
-                'https://lists.debian.org/debian-lts-announce/2023/06/msg00011.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-2650',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0009',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://security.netapp.com/advisory/ntap-20230703-0001/',
-                'https://security.netapp.com/advisory/ntap-20231027-0009/',
-                'https://ubuntu.com/security/notices/USN-6119-1',
-                'https://ubuntu.com/security/notices/USN-6188-1',
-                'https://ubuntu.com/security/notices/USN-6672-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-2650',
-                'https://www.debian.org/security/2023/dsa-5417',
-                'https://www.openssl.org/news/secadv/20230530.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: Possible DoS translating ASN.1 object identifiers'
-            },
-            {
-              'cve':  'CVE-2023-3446',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L'
-                },
-                'redhat': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L'
-                }
-              },
-              'cwes': [
-                'CWE-606',
-                'CWE-1333'
-              ],
-              'description':   "Issue summary: Checking excessively long DH keys or parameters may be very slow.\n\nImpact summary: Applications that use the functions DH_check(), DH_check_ex()\nor EVP_PKEY_param_check() to check a DH key or DH parameters may experience long\ndelays. Where the key or parameters that are being checked have been obtained\nfrom an untrusted source this may lead to a Denial of Service.\n\nThe function DH_check() performs various checks on DH parameters. One of those\nchecks confirms that the modulus ('p' parameter) is not too large. Trying to use\na very large modulus is slow and OpenSSL will not normally use a modulus which\nis over 10,000 bits in length.\n\nHowever the DH_check() function checks numerous aspects of the key or parameters\nthat have been supplied. Some of those checks use the supplied modulus value\neven if it has already been found to be too large.\n\nAn application that calls DH_check() and supplies a key or parameters obtained\nfrom an untrusted source could be vulernable to a Denial of Service attack.\n\nThe function DH_check() is itself called by a number of other OpenSSL functions.\nAn application calling any of those other functions may similarly be affected.\nThe other functions affected by this are DH_check_ex() and\nEVP_PKEY_param_check().\n\nAlso vulnerable are the OpenSSL dhparam and pkeyparam command line applications\nwhen using the '-check' option.\n\nThe OpenSSL SSL/TLS implementation is not affected by this issue.\nThe OpenSSL 3.0 and 3.1 FIPS providers are not affected by this issue.",
-              'diffID':        'sha256:aa5968d388b8652cd305e0e037751228967839d83d0cafbde5debf0b092e7c42',
-              'fixedVersions': [
-                '1.1.1u-r2'
-              ],
-              'installedVersion': '1.1.1t-r0',
-              'packageName':      'libcrypto1.1',
-              'purl':             'pkg:apk/alpine/libcrypto1.1@1.1.1t-r0?arch=x86_64&distro=3.16.4',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2023/07/19/4',
-                'http://www.openwall.com/lists/oss-security/2023/07/19/5',
-                'http://www.openwall.com/lists/oss-security/2023/07/19/6',
-                'http://www.openwall.com/lists/oss-security/2023/07/31/1',
-                'http://www.openwall.com/lists/oss-security/2024/05/16/1',
-                'https://access.redhat.com/errata/RHSA-2024:2447',
-                'https://access.redhat.com/security/cve/CVE-2023-3446',
-                'https://bugzilla.redhat.com/2223016',
-                'https://bugzilla.redhat.com/2224962',
-                'https://bugzilla.redhat.com/2227852',
-                'https://bugzilla.redhat.com/2248616',
-                'https://bugzilla.redhat.com/2257571',
-                'https://bugzilla.redhat.com/2258502',
-                'https://bugzilla.redhat.com/2259944',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2224962',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2257582',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2257583',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2258677',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2258688',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2258691',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2258694',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2258700',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-36763',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-36764',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3446',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45229',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45231',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45232',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45233',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45235',
-                'https://errata.almalinux.org/9/ALSA-2024-2447.html',
-                'https://errata.rockylinux.org/RLSA-2024:2264',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=1fa20cf2f506113c761777127a38bce5068740eb',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=8780a896543a654e757db1b9396383f9d8095528',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=9a0a4d3c1e7138915563c0df4fe6a3f9377b839c',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=fc9867c1e03c22ebf56943be205202e576aabf23',
-                'https://linux.oracle.com/cve/CVE-2023-3446.html',
-                'https://linux.oracle.com/errata/ELSA-2024-2447.html',
-                'https://lists.debian.org/debian-lts-announce/2023/08/msg00019.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-3446',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://security.netapp.com/advisory/ntap-20230803-0011/',
-                'https://ubuntu.com/security/notices/USN-6435-1',
-                'https://ubuntu.com/security/notices/USN-6435-2',
-                'https://ubuntu.com/security/notices/USN-6450-1',
-                'https://ubuntu.com/security/notices/USN-6709-1',
-                'https://ubuntu.com/security/notices/USN-7018-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-3446',
-                'https://www.openssl.org/news/secadv/20230719.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: Excessive time spent checking DH keys and parameters'
-            },
-            {
-              'cve':  'CVE-2023-3817',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L'
-                },
-                'redhat': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L'
-                }
-              },
-              'cwes': [
-                'CWE-606',
-                'CWE-834'
-              ],
-              'description':   'Issue summary: Checking excessively long DH keys or parameters may be very slow.\n\nImpact summary: Applications that use the functions DH_check(), DH_check_ex()\nor EVP_PKEY_param_check() to check a DH key or DH parameters may experience long\ndelays. Where the key or parameters that are being checked have been obtained\nfrom an untrusted source this may lead to a Denial of Service.\n\nThe function DH_check() performs various checks on DH parameters. After fixing\nCVE-2023-3446 it was discovered that a large q parameter value can also trigger\nan overly long computation during some of these checks. A correct q value,\nif present, cannot be larger than the modulus p parameter, thus it is\nunnecessary to perform these checks if q is larger than p.\n\nAn application that calls DH_check() and supplies a key or parameters obtained\nfrom an untrusted source could be vulnerable to a Denial of Service attack.\n\nThe function DH_check() is itself called by a number of other OpenSSL functions.\nAn application calling any of those other functions may similarly be affected.\nThe other functions affected by this are DH_check_ex() and\nEVP_PKEY_param_check().\n\nAlso vulnerable are the OpenSSL dhparam and pkeyparam command line applications\nwhen using the "-check" option.\n\nThe OpenSSL SSL/TLS implementation is not affected by this issue.\n\nThe OpenSSL 3.0 and 3.1 FIPS providers are not affected by this issue.',
-              'diffID':        'sha256:aa5968d388b8652cd305e0e037751228967839d83d0cafbde5debf0b092e7c42',
-              'fixedVersions': [
-                '1.1.1v-r0'
-              ],
-              'installedVersion': '1.1.1t-r0',
-              'packageName':      'libcrypto1.1',
-              'purl':             'pkg:apk/alpine/libcrypto1.1@1.1.1t-r0?arch=x86_64&distro=3.16.4',
-              'references':       [
-                'http://seclists.org/fulldisclosure/2023/Jul/43',
-                'http://www.openwall.com/lists/oss-security/2023/07/31/1',
-                'http://www.openwall.com/lists/oss-security/2023/09/22/11',
-                'http://www.openwall.com/lists/oss-security/2023/09/22/9',
-                'http://www.openwall.com/lists/oss-security/2023/11/06/2',
-                'https://access.redhat.com/errata/RHSA-2024:2447',
-                'https://access.redhat.com/security/cve/CVE-2023-3817',
-                'https://bugzilla.redhat.com/2223016',
-                'https://bugzilla.redhat.com/2224962',
-                'https://bugzilla.redhat.com/2227852',
-                'https://bugzilla.redhat.com/2248616',
-                'https://bugzilla.redhat.com/2257571',
-                'https://bugzilla.redhat.com/2258502',
-                'https://bugzilla.redhat.com/2259944',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2224962',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2227852',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2248616',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2270358',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3446',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3817',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-5678',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-2408',
-                'https://errata.almalinux.org/9/ALSA-2024-2447.html',
-                'https://errata.rockylinux.org/RLSA-2023:7877',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=6a1eb62c29db6cb5eec707f9338aee00f44e26f5',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=869ad69aadd985c7b8ca6f4e5dd0eb274c9f3644',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=9002fd07327a91f35ba6c1307e71fa6fd4409b7f',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=91ddeba0f2269b017dc06c46c993a788974b1aa5',
-                'https://linux.oracle.com/cve/CVE-2023-3817.html',
-                'https://linux.oracle.com/errata/ELSA-2024-2447.html',
-                'https://lists.debian.org/debian-lts-announce/2023/08/msg00019.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-3817',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://security.netapp.com/advisory/ntap-20230818-0014/',
-                'https://security.netapp.com/advisory/ntap-20231027-0008/',
-                'https://security.netapp.com/advisory/ntap-20240621-0006/',
-                'https://ubuntu.com/security/notices/USN-6435-1',
-                'https://ubuntu.com/security/notices/USN-6435-2',
-                'https://ubuntu.com/security/notices/USN-6450-1',
-                'https://ubuntu.com/security/notices/USN-6709-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-3817',
-                'https://www.openssl.org/news/secadv/20230731.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'OpenSSL: Excessive time spent checking DH q parameter value'
-            },
-            {
-              'cve':  'CVE-2023-5678',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L'
-                },
-                'redhat': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L'
-                }
-              },
-              'cwes': [
-                'CWE-606',
-                'CWE-754'
-              ],
-              'description':   "Issue summary: Generating excessively long X9.42 DH keys or checking\nexcessively long X9.42 DH keys or parameters may be very slow.\n\nImpact summary: Applications that use the functions DH_generate_key() to\ngenerate an X9.42 DH key may experience long delays.  Likewise, applications\nthat use DH_check_pub_key(), DH_check_pub_key_ex() or EVP_PKEY_public_check()\nto check an X9.42 DH key or X9.42 DH parameters may experience long delays.\nWhere the key or parameters that are being checked have been obtained from\nan untrusted source this may lead to a Denial of Service.\n\nWhile DH_check() performs all the necessary checks (as of CVE-2023-3817),\nDH_check_pub_key() doesn't make any of these checks, and is therefore\nvulnerable for excessively large P and Q parameters.\n\nLikewise, while DH_generate_key() performs a check for an excessively large\nP, it doesn't check for an excessively large Q.\n\nAn application that calls DH_generate_key() or DH_check_pub_key() and\nsupplies a key or parameters obtained from an untrusted source could be\nvulnerable to a Denial of Service attack.\n\nDH_generate_key() and DH_check_pub_key() are also called by a number of\nother OpenSSL functions.  An application calling any of those other\nfunctions may similarly be affected.  The other functions affected by this\nare DH_check_pub_key_ex(), EVP_PKEY_public_check(), and EVP_PKEY_generate().\n\nAlso vulnerable are the OpenSSL pkey command line application when using the\n\"-pubcheck\" option, as well as the OpenSSL genpkey command line application.\n\nThe OpenSSL SSL/TLS implementation is not affected by this issue.\n\nThe OpenSSL 3.0 and 3.1 FIPS providers are not affected by this issue.",
-              'diffID':        'sha256:aa5968d388b8652cd305e0e037751228967839d83d0cafbde5debf0b092e7c42',
-              'fixedVersions': [
-                '1.1.1w-r1'
-              ],
-              'installedVersion': '1.1.1t-r0',
-              'packageName':      'libcrypto1.1',
-              'purl':             'pkg:apk/alpine/libcrypto1.1@1.1.1t-r0?arch=x86_64&distro=3.16.4',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2024/03/11/1',
-                'https://access.redhat.com/errata/RHSA-2024:2447',
-                'https://access.redhat.com/security/cve/CVE-2023-5678',
-                'https://bugzilla.redhat.com/2223016',
-                'https://bugzilla.redhat.com/2224962',
-                'https://bugzilla.redhat.com/2227852',
-                'https://bugzilla.redhat.com/2248616',
-                'https://bugzilla.redhat.com/2257571',
-                'https://bugzilla.redhat.com/2258502',
-                'https://bugzilla.redhat.com/2259944',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2224962',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2227852',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2248616',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2270358',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3446',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3817',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-5678',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-2408',
-                'https://errata.almalinux.org/9/ALSA-2024-2447.html',
-                'https://errata.rockylinux.org/RLSA-2023:7877',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=34efaef6c103d636ab507a0cc34dca4d3aecc055',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=710fee740904b6290fef0dd5536fbcedbc38ff0c',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=db925ae2e65d0d925adef429afc37f75bd1c2017',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=ddeb4b6c6d527e54ce9a99cba785c0f7776e54b6',
-                'https://linux.oracle.com/cve/CVE-2023-5678.html',
-                'https://linux.oracle.com/errata/ELSA-2024-2447.html',
-                'https://lists.debian.org/debian-lts-announce/2024/10/msg00033.html',
-                'https://lists.debian.org/debian-lts-announce/2024/11/msg00000.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-5678',
-                'https://security.netapp.com/advisory/ntap-20231130-0010/',
-                'https://ubuntu.com/security/notices/USN-6622-1',
-                'https://ubuntu.com/security/notices/USN-6632-1',
-                'https://ubuntu.com/security/notices/USN-6709-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-5678',
-                'https://www.openssl.org/news/secadv/20231106.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: Generating excessively long X9.42 DH keys or checking excessively long X9.42 DH keys or parameters may be very slow'
-            },
-            {
-              'cve':  'CVE-2023-0464',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-295'
-              ],
-              'description':   "A security vulnerability has been identified in all supported versions\n\nof OpenSSL related to the verification of X.509 certificate chains\nthat include policy constraints.  Attackers may be able to exploit this\nvulnerability by creating a malicious certificate chain that triggers\nexponential use of computational resources, leading to a denial-of-service\n(DoS) attack on affected systems.\n\nPolicy processing is disabled by default but can be enabled by passing\nthe `-policy' argument to the command line utilities or by calling the\n`X509_VERIFY_PARAM_set1_policies()' function.",
-              'diffID':        'sha256:aa5968d388b8652cd305e0e037751228967839d83d0cafbde5debf0b092e7c42',
-              'fixedVersions': [
-                '1.1.1t-r1'
-              ],
-              'installedVersion': '1.1.1t-r0',
-              'packageName':      'libssl1.1',
-              'purl':             'pkg:apk/alpine/libssl1.1@1.1.1t-r0?arch=x86_64&distro=3.16.4',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2023:3722',
-                'https://access.redhat.com/security/cve/CVE-2023-0464',
-                'https://bugzilla.redhat.com/2181082',
-                'https://bugzilla.redhat.com/2182561',
-                'https://bugzilla.redhat.com/2182565',
-                'https://bugzilla.redhat.com/2188461',
-                'https://bugzilla.redhat.com/2207947',
-                'https://errata.almalinux.org/9/ALSA-2023-3722.html',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=2017771e2db3e2b96f89bbe8766c3209f6a99545',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=2dcd4f1e3115f38cefa43e3efbe9b801c27e642e',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=879f7080d7e141f415c79eaa3a8ac4a3dad0348b',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=959c59c7a0164117e7f8366466a32bb1f8d77ff1',
-                'https://linux.oracle.com/cve/CVE-2023-0464.html',
-                'https://linux.oracle.com/errata/ELSA-2023-3722.html',
-                'https://lists.debian.org/debian-lts-announce/2023/06/msg00011.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-0464',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://security.netapp.com/advisory/ntap-20230406-0006/',
-                'https://security.netapp.com/advisory/ntap-20240621-0006/',
-                'https://ubuntu.com/security/notices/USN-6039-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.couchbase.com/alerts/',
-                'https://www.cve.org/CVERecord?id=CVE-2023-0464',
-                'https://www.debian.org/security/2023/dsa-5417',
-                'https://www.openssl.org/news/secadv/20230322.txt'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: Denial of service by excessive resource usage in verifying X509 policy constraints'
-            },
-            {
-              'cve':  'CVE-2023-0465',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N'
-                },
-                'redhat': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-295'
-              ],
-              'description':   "Applications that use a non-default option when verifying certificates may be\nvulnerable to an attack from a malicious CA to circumvent certain checks.\n\nInvalid certificate policies in leaf certificates are silently ignored by\nOpenSSL and other certificate policy checks are skipped for that certificate.\nA malicious CA could use this to deliberately assert invalid certificate policies\nin order to circumvent policy checking on the certificate altogether.\n\nPolicy processing is disabled by default but can be enabled by passing\nthe `-policy' argument to the command line utilities or by calling the\n`X509_VERIFY_PARAM_set1_policies()' function.",
-              'diffID':        'sha256:aa5968d388b8652cd305e0e037751228967839d83d0cafbde5debf0b092e7c42',
-              'fixedVersions': [
-                '1.1.1t-r2'
-              ],
-              'installedVersion': '1.1.1t-r0',
-              'packageName':      'libssl1.1',
-              'purl':             'pkg:apk/alpine/libssl1.1@1.1.1t-r0?arch=x86_64&distro=3.16.4',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2023:3722',
-                'https://access.redhat.com/security/cve/CVE-2023-0465',
-                'https://bugzilla.redhat.com/2181082',
-                'https://bugzilla.redhat.com/2182561',
-                'https://bugzilla.redhat.com/2182565',
-                'https://bugzilla.redhat.com/2188461',
-                'https://bugzilla.redhat.com/2207947',
-                'https://errata.almalinux.org/9/ALSA-2023-3722.html',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=10325176f3d3e98c6e2b3bf5ab1e3b334de6947a',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=1dd43e0709fece299b15208f36cc7c76209ba0bb',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=b013765abfa80036dc779dd0e50602c57bb3bf95',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=facfb1ab745646e97a1920977ae4a9965ea61d5c',
-                'https://linux.oracle.com/cve/CVE-2023-0465.html',
-                'https://linux.oracle.com/errata/ELSA-2023-3722.html',
-                'https://lists.debian.org/debian-lts-announce/2023/06/msg00011.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-0465',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://security.netapp.com/advisory/ntap-20230414-0001/',
-                'https://ubuntu.com/security/notices/USN-6039-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-0465',
-                'https://www.debian.org/security/2023/dsa-5417',
-                'https://www.openssl.org/news/secadv/20230328.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: Invalid certificate policies in leaf certificates are silently ignored'
-            },
-            {
-              'cve':  'CVE-2023-2650',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '6.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-770'
-              ],
-              'description':   "Issue summary: Processing some specially crafted ASN.1 object identifiers or\ndata containing them may be very slow.\n\nImpact summary: Applications that use OBJ_obj2txt() directly, or use any of\nthe OpenSSL subsystems OCSP, PKCS7/SMIME, CMS, CMP/CRMF or TS with no message\nsize limit may experience notable to very long delays when processing those\nmessages, which may lead to a Denial of Service.\n\nAn OBJECT IDENTIFIER is composed of a series of numbers - sub-identifiers -\nmost of which have no size limit.  OBJ_obj2txt() may be used to translate\nan ASN.1 OBJECT IDENTIFIER given in DER encoding form (using the OpenSSL\ntype ASN1_OBJECT) to its canonical numeric text form, which are the\nsub-identifiers of the OBJECT IDENTIFIER in decimal form, separated by\nperiods.\n\nWhen one of the sub-identifiers in the OBJECT IDENTIFIER is very large\n(these are sizes that are seen as absurdly large, taking up tens or hundreds\nof KiBs), the translation to a decimal number in text may take a very long\ntime.  The time complexity is O(n^2) with 'n' being the size of the\nsub-identifiers in bytes (*).\n\nWith OpenSSL 3.0, support to fetch cryptographic algorithms using names /\nidentifiers in string form was introduced.  This includes using OBJECT\nIDENTIFIERs in canonical numeric text form as identifiers for fetching\nalgorithms.\n\nSuch OBJECT IDENTIFIERs may be received through the ASN.1 structure\nAlgorithmIdentifier, which is commonly used in multiple protocols to specify\nwhat cryptographic algorithm should be used to sign or verify, encrypt or\ndecrypt, or digest passed data.\n\nApplications that call OBJ_obj2txt() directly with untrusted data are\naffected, with any version of OpenSSL.  If the use is for the mere purpose\nof display, the severity is considered low.\n\nIn OpenSSL 3.0 and newer, this affects the subsystems OCSP, PKCS7/SMIME,\nCMS, CMP/CRMF or TS.  It also impacts anything that processes X.509\ncertificates, including simple things like verifying its signature.\n\nThe impact on TLS is relatively low, because all versions of OpenSSL have a\n100KiB limit on the peer's certificate chain.  Additionally, this only\nimpacts clients, or servers that have explicitly enabled client\nauthentication.\n\nIn OpenSSL 1.1.1 and 1.0.2, this only affects displaying diverse objects,\nsuch as X.509 certificates.  This is assumed to not happen in such a way\nthat it would cause a Denial of Service, so these versions are considered\nnot affected by this issue in such a way that it would be cause for concern,\nand the severity is therefore considered low.",
-              'diffID':        'sha256:aa5968d388b8652cd305e0e037751228967839d83d0cafbde5debf0b092e7c42',
-              'fixedVersions': [
-                '1.1.1u-r0'
-              ],
-              'installedVersion': '1.1.1t-r0',
-              'packageName':      'libssl1.1',
-              'purl':             'pkg:apk/alpine/libssl1.1@1.1.1t-r0?arch=x86_64&distro=3.16.4',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2023/05/30/1',
-                'https://access.redhat.com/errata/RHSA-2023:6330',
-                'https://access.redhat.com/security/cve/CVE-2023-2650',
-                'https://bugzilla.redhat.com/1858038',
-                'https://bugzilla.redhat.com/2207947',
-                'https://errata.almalinux.org/9/ALSA-2023-6330.html',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=423a2bc737a908ad0c77bda470b2b59dc879936b',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=853c5e56ee0b8650c73140816bb8b91d6163422c',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=9e209944b35cf82368071f160a744b6178f9b098',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=db779b0e10b047f2585615e0b8f2acdf21f8544a',
-                'https://linux.oracle.com/cve/CVE-2023-2650.html',
-                'https://linux.oracle.com/errata/ELSA-2023-6330.html',
-                'https://lists.debian.org/debian-lts-announce/2023/06/msg00011.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-2650',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0009',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://security.netapp.com/advisory/ntap-20230703-0001/',
-                'https://security.netapp.com/advisory/ntap-20231027-0009/',
-                'https://ubuntu.com/security/notices/USN-6119-1',
-                'https://ubuntu.com/security/notices/USN-6188-1',
-                'https://ubuntu.com/security/notices/USN-6672-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-2650',
-                'https://www.debian.org/security/2023/dsa-5417',
-                'https://www.openssl.org/news/secadv/20230530.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: Possible DoS translating ASN.1 object identifiers'
-            },
-            {
-              'cve':  'CVE-2023-3446',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L'
-                },
-                'redhat': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L'
-                }
-              },
-              'cwes': [
-                'CWE-606',
-                'CWE-1333'
-              ],
-              'description':   "Issue summary: Checking excessively long DH keys or parameters may be very slow.\n\nImpact summary: Applications that use the functions DH_check(), DH_check_ex()\nor EVP_PKEY_param_check() to check a DH key or DH parameters may experience long\ndelays. Where the key or parameters that are being checked have been obtained\nfrom an untrusted source this may lead to a Denial of Service.\n\nThe function DH_check() performs various checks on DH parameters. One of those\nchecks confirms that the modulus ('p' parameter) is not too large. Trying to use\na very large modulus is slow and OpenSSL will not normally use a modulus which\nis over 10,000 bits in length.\n\nHowever the DH_check() function checks numerous aspects of the key or parameters\nthat have been supplied. Some of those checks use the supplied modulus value\neven if it has already been found to be too large.\n\nAn application that calls DH_check() and supplies a key or parameters obtained\nfrom an untrusted source could be vulernable to a Denial of Service attack.\n\nThe function DH_check() is itself called by a number of other OpenSSL functions.\nAn application calling any of those other functions may similarly be affected.\nThe other functions affected by this are DH_check_ex() and\nEVP_PKEY_param_check().\n\nAlso vulnerable are the OpenSSL dhparam and pkeyparam command line applications\nwhen using the '-check' option.\n\nThe OpenSSL SSL/TLS implementation is not affected by this issue.\nThe OpenSSL 3.0 and 3.1 FIPS providers are not affected by this issue.",
-              'diffID':        'sha256:aa5968d388b8652cd305e0e037751228967839d83d0cafbde5debf0b092e7c42',
-              'fixedVersions': [
-                '1.1.1u-r2'
-              ],
-              'installedVersion': '1.1.1t-r0',
-              'packageName':      'libssl1.1',
-              'purl':             'pkg:apk/alpine/libssl1.1@1.1.1t-r0?arch=x86_64&distro=3.16.4',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2023/07/19/4',
-                'http://www.openwall.com/lists/oss-security/2023/07/19/5',
-                'http://www.openwall.com/lists/oss-security/2023/07/19/6',
-                'http://www.openwall.com/lists/oss-security/2023/07/31/1',
-                'http://www.openwall.com/lists/oss-security/2024/05/16/1',
-                'https://access.redhat.com/errata/RHSA-2024:2447',
-                'https://access.redhat.com/security/cve/CVE-2023-3446',
-                'https://bugzilla.redhat.com/2223016',
-                'https://bugzilla.redhat.com/2224962',
-                'https://bugzilla.redhat.com/2227852',
-                'https://bugzilla.redhat.com/2248616',
-                'https://bugzilla.redhat.com/2257571',
-                'https://bugzilla.redhat.com/2258502',
-                'https://bugzilla.redhat.com/2259944',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2224962',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2257582',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2257583',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2258677',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2258688',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2258691',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2258694',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2258700',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-36763',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-36764',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3446',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45229',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45231',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45232',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45233',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45235',
-                'https://errata.almalinux.org/9/ALSA-2024-2447.html',
-                'https://errata.rockylinux.org/RLSA-2024:2264',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=1fa20cf2f506113c761777127a38bce5068740eb',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=8780a896543a654e757db1b9396383f9d8095528',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=9a0a4d3c1e7138915563c0df4fe6a3f9377b839c',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=fc9867c1e03c22ebf56943be205202e576aabf23',
-                'https://linux.oracle.com/cve/CVE-2023-3446.html',
-                'https://linux.oracle.com/errata/ELSA-2024-2447.html',
-                'https://lists.debian.org/debian-lts-announce/2023/08/msg00019.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-3446',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://security.netapp.com/advisory/ntap-20230803-0011/',
-                'https://ubuntu.com/security/notices/USN-6435-1',
-                'https://ubuntu.com/security/notices/USN-6435-2',
-                'https://ubuntu.com/security/notices/USN-6450-1',
-                'https://ubuntu.com/security/notices/USN-6709-1',
-                'https://ubuntu.com/security/notices/USN-7018-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-3446',
-                'https://www.openssl.org/news/secadv/20230719.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: Excessive time spent checking DH keys and parameters'
-            },
-            {
-              'cve':  'CVE-2023-3817',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L'
-                },
-                'redhat': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L'
-                }
-              },
-              'cwes': [
-                'CWE-606',
-                'CWE-834'
-              ],
-              'description':   'Issue summary: Checking excessively long DH keys or parameters may be very slow.\n\nImpact summary: Applications that use the functions DH_check(), DH_check_ex()\nor EVP_PKEY_param_check() to check a DH key or DH parameters may experience long\ndelays. Where the key or parameters that are being checked have been obtained\nfrom an untrusted source this may lead to a Denial of Service.\n\nThe function DH_check() performs various checks on DH parameters. After fixing\nCVE-2023-3446 it was discovered that a large q parameter value can also trigger\nan overly long computation during some of these checks. A correct q value,\nif present, cannot be larger than the modulus p parameter, thus it is\nunnecessary to perform these checks if q is larger than p.\n\nAn application that calls DH_check() and supplies a key or parameters obtained\nfrom an untrusted source could be vulnerable to a Denial of Service attack.\n\nThe function DH_check() is itself called by a number of other OpenSSL functions.\nAn application calling any of those other functions may similarly be affected.\nThe other functions affected by this are DH_check_ex() and\nEVP_PKEY_param_check().\n\nAlso vulnerable are the OpenSSL dhparam and pkeyparam command line applications\nwhen using the "-check" option.\n\nThe OpenSSL SSL/TLS implementation is not affected by this issue.\n\nThe OpenSSL 3.0 and 3.1 FIPS providers are not affected by this issue.',
-              'diffID':        'sha256:aa5968d388b8652cd305e0e037751228967839d83d0cafbde5debf0b092e7c42',
-              'fixedVersions': [
-                '1.1.1v-r0'
-              ],
-              'installedVersion': '1.1.1t-r0',
-              'packageName':      'libssl1.1',
-              'purl':             'pkg:apk/alpine/libssl1.1@1.1.1t-r0?arch=x86_64&distro=3.16.4',
-              'references':       [
-                'http://seclists.org/fulldisclosure/2023/Jul/43',
-                'http://www.openwall.com/lists/oss-security/2023/07/31/1',
-                'http://www.openwall.com/lists/oss-security/2023/09/22/11',
-                'http://www.openwall.com/lists/oss-security/2023/09/22/9',
-                'http://www.openwall.com/lists/oss-security/2023/11/06/2',
-                'https://access.redhat.com/errata/RHSA-2024:2447',
-                'https://access.redhat.com/security/cve/CVE-2023-3817',
-                'https://bugzilla.redhat.com/2223016',
-                'https://bugzilla.redhat.com/2224962',
-                'https://bugzilla.redhat.com/2227852',
-                'https://bugzilla.redhat.com/2248616',
-                'https://bugzilla.redhat.com/2257571',
-                'https://bugzilla.redhat.com/2258502',
-                'https://bugzilla.redhat.com/2259944',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2224962',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2227852',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2248616',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2270358',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3446',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3817',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-5678',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-2408',
-                'https://errata.almalinux.org/9/ALSA-2024-2447.html',
-                'https://errata.rockylinux.org/RLSA-2023:7877',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=6a1eb62c29db6cb5eec707f9338aee00f44e26f5',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=869ad69aadd985c7b8ca6f4e5dd0eb274c9f3644',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=9002fd07327a91f35ba6c1307e71fa6fd4409b7f',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=91ddeba0f2269b017dc06c46c993a788974b1aa5',
-                'https://linux.oracle.com/cve/CVE-2023-3817.html',
-                'https://linux.oracle.com/errata/ELSA-2024-2447.html',
-                'https://lists.debian.org/debian-lts-announce/2023/08/msg00019.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-3817',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://security.netapp.com/advisory/ntap-20230818-0014/',
-                'https://security.netapp.com/advisory/ntap-20231027-0008/',
-                'https://security.netapp.com/advisory/ntap-20240621-0006/',
-                'https://ubuntu.com/security/notices/USN-6435-1',
-                'https://ubuntu.com/security/notices/USN-6435-2',
-                'https://ubuntu.com/security/notices/USN-6450-1',
-                'https://ubuntu.com/security/notices/USN-6709-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-3817',
-                'https://www.openssl.org/news/secadv/20230731.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'OpenSSL: Excessive time spent checking DH q parameter value'
-            },
-            {
-              'cve':  'CVE-2023-5678',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L'
-                },
-                'redhat': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L'
-                }
-              },
-              'cwes': [
-                'CWE-606',
-                'CWE-754'
-              ],
-              'description':   "Issue summary: Generating excessively long X9.42 DH keys or checking\nexcessively long X9.42 DH keys or parameters may be very slow.\n\nImpact summary: Applications that use the functions DH_generate_key() to\ngenerate an X9.42 DH key may experience long delays.  Likewise, applications\nthat use DH_check_pub_key(), DH_check_pub_key_ex() or EVP_PKEY_public_check()\nto check an X9.42 DH key or X9.42 DH parameters may experience long delays.\nWhere the key or parameters that are being checked have been obtained from\nan untrusted source this may lead to a Denial of Service.\n\nWhile DH_check() performs all the necessary checks (as of CVE-2023-3817),\nDH_check_pub_key() doesn't make any of these checks, and is therefore\nvulnerable for excessively large P and Q parameters.\n\nLikewise, while DH_generate_key() performs a check for an excessively large\nP, it doesn't check for an excessively large Q.\n\nAn application that calls DH_generate_key() or DH_check_pub_key() and\nsupplies a key or parameters obtained from an untrusted source could be\nvulnerable to a Denial of Service attack.\n\nDH_generate_key() and DH_check_pub_key() are also called by a number of\nother OpenSSL functions.  An application calling any of those other\nfunctions may similarly be affected.  The other functions affected by this\nare DH_check_pub_key_ex(), EVP_PKEY_public_check(), and EVP_PKEY_generate().\n\nAlso vulnerable are the OpenSSL pkey command line application when using the\n\"-pubcheck\" option, as well as the OpenSSL genpkey command line application.\n\nThe OpenSSL SSL/TLS implementation is not affected by this issue.\n\nThe OpenSSL 3.0 and 3.1 FIPS providers are not affected by this issue.",
-              'diffID':        'sha256:aa5968d388b8652cd305e0e037751228967839d83d0cafbde5debf0b092e7c42',
-              'fixedVersions': [
-                '1.1.1w-r1'
-              ],
-              'installedVersion': '1.1.1t-r0',
-              'packageName':      'libssl1.1',
-              'purl':             'pkg:apk/alpine/libssl1.1@1.1.1t-r0?arch=x86_64&distro=3.16.4',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2024/03/11/1',
-                'https://access.redhat.com/errata/RHSA-2024:2447',
-                'https://access.redhat.com/security/cve/CVE-2023-5678',
-                'https://bugzilla.redhat.com/2223016',
-                'https://bugzilla.redhat.com/2224962',
-                'https://bugzilla.redhat.com/2227852',
-                'https://bugzilla.redhat.com/2248616',
-                'https://bugzilla.redhat.com/2257571',
-                'https://bugzilla.redhat.com/2258502',
-                'https://bugzilla.redhat.com/2259944',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2224962',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2227852',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2248616',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2270358',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3446',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3817',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-5678',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-2408',
-                'https://errata.almalinux.org/9/ALSA-2024-2447.html',
-                'https://errata.rockylinux.org/RLSA-2023:7877',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=34efaef6c103d636ab507a0cc34dca4d3aecc055',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=710fee740904b6290fef0dd5536fbcedbc38ff0c',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=db925ae2e65d0d925adef429afc37f75bd1c2017',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=ddeb4b6c6d527e54ce9a99cba785c0f7776e54b6',
-                'https://linux.oracle.com/cve/CVE-2023-5678.html',
-                'https://linux.oracle.com/errata/ELSA-2024-2447.html',
-                'https://lists.debian.org/debian-lts-announce/2024/10/msg00033.html',
-                'https://lists.debian.org/debian-lts-announce/2024/11/msg00000.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-5678',
-                'https://security.netapp.com/advisory/ntap-20231130-0010/',
-                'https://ubuntu.com/security/notices/USN-6622-1',
-                'https://ubuntu.com/security/notices/USN-6632-1',
-                'https://ubuntu.com/security/notices/USN-6709-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-5678',
-                'https://www.openssl.org/news/secadv/20231106.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: Generating excessively long X9.42 DH keys or checking excessively long X9.42 DH keys or parameters may be very slow'
-            },
-            {
-              'cve':  'CVE-2025-26519',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-787'
-              ],
-              'description':   'musl libc 0.9.13 through 1.2.5 before 1.2.6 has an out-of-bounds write vulnerability when an attacker can trigger iconv conversion of untrusted EUC-KR text to UTF-8.',
-              'diffID':        'sha256:aa5968d388b8652cd305e0e037751228967839d83d0cafbde5debf0b092e7c42',
-              'fixedVersions': [
-                '1.2.3-r4'
-              ],
-              'installedVersion': '1.2.3-r2',
-              'packageName':      'musl',
-              'purl':             'pkg:apk/alpine/musl@1.2.3-r2?arch=x86_64&distro=3.16.4',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2025/02/13/2',
-                'http://www.openwall.com/lists/oss-security/2025/02/13/3',
-                'http://www.openwall.com/lists/oss-security/2025/02/13/4',
-                'http://www.openwall.com/lists/oss-security/2025/02/13/5',
-                'http://www.openwall.com/lists/oss-security/2025/02/14/5',
-                'http://www.openwall.com/lists/oss-security/2025/02/14/6',
-                'https://git.musl-libc.org/cgit/musl/commit/?id=c47ad25ea3b484e10326f933e927c0bc8cded3da',
-                'https://git.musl-libc.org/cgit/musl/commit/?id=e5adcd97b5196e29991b524237381a0202a60659',
-                'https://www.openwall.com/lists/oss-security/2025/02/13/2'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'musl libc 0.9.13 through 1.2.5 before 1.2.6 has an out-of-bounds write ...'
-            },
-            {
-              'cve':  'CVE-2025-26519',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-787'
-              ],
-              'description':   'musl libc 0.9.13 through 1.2.5 before 1.2.6 has an out-of-bounds write vulnerability when an attacker can trigger iconv conversion of untrusted EUC-KR text to UTF-8.',
-              'diffID':        'sha256:aa5968d388b8652cd305e0e037751228967839d83d0cafbde5debf0b092e7c42',
-              'fixedVersions': [
-                '1.2.3-r4'
-              ],
-              'installedVersion': '1.2.3-r2',
-              'packageName':      'musl-utils',
-              'purl':             'pkg:apk/alpine/musl-utils@1.2.3-r2?arch=x86_64&distro=3.16.4',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2025/02/13/2',
-                'http://www.openwall.com/lists/oss-security/2025/02/13/3',
-                'http://www.openwall.com/lists/oss-security/2025/02/13/4',
-                'http://www.openwall.com/lists/oss-security/2025/02/13/5',
-                'http://www.openwall.com/lists/oss-security/2025/02/14/5',
-                'http://www.openwall.com/lists/oss-security/2025/02/14/6',
-                'https://git.musl-libc.org/cgit/musl/commit/?id=c47ad25ea3b484e10326f933e927c0bc8cded3da',
-                'https://git.musl-libc.org/cgit/musl/commit/?id=e5adcd97b5196e29991b524237381a0202a60659',
-                'https://www.openwall.com/lists/oss-security/2025/02/13/2'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'musl libc 0.9.13 through 1.2.5 before 1.2.6 has an out-of-bounds write ...'
-            },
-            {
-              'cve':  'CVE-2023-42366',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.5',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.1',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-787'
-              ],
-              'description':   'A heap-buffer-overflow was discovered in BusyBox v.1.36.1 in the next_token function at awk.c:1159.',
-              'diffID':        'sha256:aa5968d388b8652cd305e0e037751228967839d83d0cafbde5debf0b092e7c42',
-              'fixedVersions': [
-                '1.35.0-r18'
-              ],
-              'installedVersion': '1.35.0-r17',
-              'packageName':      'ssl_client',
-              'purl':             'pkg:apk/alpine/ssl_client@1.35.0-r17?arch=x86_64&distro=3.16.4',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2023-42366',
-                'https://bugs.busybox.net/show_bug.cgi?id=15874',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-42366',
-                'https://security.netapp.com/advisory/ntap-20241206-0007/',
-                'https://www.cve.org/CVERecord?id=CVE-2023-42366'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'busybox: A heap-buffer-overflow'
-            }
-          ]
-        }
-      ],
-      'summary': {
-        'critical':   0,
-        'high':       4,
-        'low':        0,
-        'medium':     12,
-        'suppressed': 0,
-        'unknown':    0
-      }
-    }
-  },
-  {
-    'id':    'default/5d445b3db466385b53134a3d8df067cd8b2b9d45a3ec9aaf00527e36b7035522',
-    'type':  'storage.sbomscanner.kubewarden.io.vulnerabilityreport',
-    'links': {
-      'patch':  'https://localhost:8005/v1/storage.sbomscanner.kubewarden.io.vulnerabilityreports/default/5d445b3db466385b53134a3d8df067cd8b2b9d45a3ec9aaf00527e36b7035522',
-      'remove': 'https://localhost:8005/v1/storage.sbomscanner.kubewarden.io.vulnerabilityreports/default/5d445b3db466385b53134a3d8df067cd8b2b9d45a3ec9aaf00527e36b7035522',
-      'self':   'https://localhost:8005/v1/storage.sbomscanner.kubewarden.io.vulnerabilityreports/default/5d445b3db466385b53134a3d8df067cd8b2b9d45a3ec9aaf00527e36b7035522',
-      'update': 'https://localhost:8005/v1/storage.sbomscanner.kubewarden.io.vulnerabilityreports/default/5d445b3db466385b53134a3d8df067cd8b2b9d45a3ec9aaf00527e36b7035522',
-      'view':   'https://localhost:8005/apis/storage.sbomscanner.kubewarden.io/v1alpha1/namespaces/default/vulnerabilityreports/5d445b3db466385b53134a3d8df067cd8b2b9d45a3ec9aaf00527e36b7035522'
-    },
-    'apiVersion':    'storage.sbomscanner.kubewarden.io/v1alpha1',
-    'imageMetadata': {
-      'digest':      'sha256:d51ff169f082efe0e83ea08108744db1f00a762da93f507ee20c5ae670c89f04',
-      'platform':    'linux/amd64',
-      'registry':    'demo-02',
-      'registryURI': 'ghcr.io',
-      'repository':  'linuxcontainers/alpine',
-      'tag':         '3.15.1'
-    },
-    'kind':     'VulnerabilityReport',
-    'metadata': {
-      'creationTimestamp': '2026-01-09T22:46:59Z',
-      'fields':            [
-        '5d445b3db466385b53134a3d8df067cd8b2b9d45a3ec9aaf00527e36b7035522',
-        'ghcr.io/linuxcontainers/alpine:3.15.1',
-        'linux/amd64',
-        '26 (0 suppressed)'
-      ],
-      'labels': {
-        'app.kubernetes.io/managed-by':          'sbomscanner',
-        'app.kubernetes.io/part-of':             'sbomscanner',
-        'sbomscanner.kubewarden.io/scanjob-uid': '42184d01-4b15-466f-98aa-e802d1b6b6b8'
-      },
-      'name':            '5d445b3db466385b53134a3d8df067cd8b2b9d45a3ec9aaf00527e36b7035522',
-      'namespace':       'default',
-      'ownerReferences': [
-        {
-          'apiVersion':         'storage.sbomscanner.kubewarden.io/v1alpha1',
-          'blockOwnerDeletion': true,
-          'controller':         true,
-          'kind':               'SBOM',
-          'name':               '5d445b3db466385b53134a3d8df067cd8b2b9d45a3ec9aaf00527e36b7035522',
-          'uid':                '2dc3912d-4a68-49c6-9174-d7f9d7382097'
-        }
-      ],
-      'relationships': [
-        {
-          'fromId':   'default/5d445b3db466385b53134a3d8df067cd8b2b9d45a3ec9aaf00527e36b7035522',
-          'fromType': 'storage.sbomscanner.kubewarden.io.sbom',
-          'rel':      'owner',
-          'state':    'active',
-          'message':  'Resource is current'
-        }
-      ],
-      'resourceVersion': '6',
-      'state':           {
-        'error':         false,
-        'message':       'Resource is current',
-        'name':          'active',
-        'transitioning': false
-      },
-      'uid': '0c15c4a0-3a20-4412-80fe-908879cbda39'
-    },
-    'report': {
-      'results': [
-        {
-          'class':           'os-pkgs',
-          'target':          '/var/run/worker/trivy.sbom.16254401.json (alpine 3.15.1)',
-          'type':            'alpine',
-          'vulnerabilities': [
-            {
-              'cve':  'CVE-2022-28391',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '8.8',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-88'
-              ],
-              'description':   "BusyBox through 1.35.0 allows remote attackers to execute arbitrary code if netstat is used to print a DNS PTR record's value to a VT compatible terminal. Alternatively, the attacker could choose to change the terminal's colors.",
-              'diffID':        'sha256:5e03d8cae8773cb694fff1d55da34a40d23c2349087ed15ce68476395d33753c',
-              'fixedVersions': [
-                '1.34.1-r5'
-              ],
-              'installedVersion': '1.34.1-r4',
-              'packageName':      'busybox',
-              'purl':             'pkg:apk/alpine/busybox@1.34.1-r4?arch=x86_64&distro=3.15.1',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2022-28391',
-                'https://git.alpinelinux.org/aports/plain/main/busybox/0001-libbb-sockaddr2str-ensure-only-printable-characters-.patch',
-                'https://git.alpinelinux.org/aports/plain/main/busybox/0002-nslookup-sanitize-all-printed-strings-with-printable.patch',
-                'https://gitlab.alpinelinux.org/alpine/aports/-/issues/13661',
-                'https://nvd.nist.gov/vuln/detail/CVE-2022-28391',
-                'https://www.cve.org/CVERecord?id=CVE-2022-28391'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: remote attackers may execute arbitrary code if netstat is used'
-            },
-            {
-              'cve':  'CVE-2022-4450',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'nvd': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-415'
-              ],
-              'description':   'The function PEM_read_bio_ex() reads a PEM file from a BIO and parses and\ndecodes the "name" (e.g. "CERTIFICATE"), any header data and the payload data.\nIf the function succeeds then the "name_out", "header" and "data" arguments are\npopulated with pointers to buffers containing the relevant decoded data. The\ncaller is responsible for freeing those buffers. It is possible to construct a\nPEM file that results in 0 bytes of payload data. In this case PEM_read_bio_ex()\nwill return a failure code but will populate the header argument with a pointer\nto a buffer that has already been freed. If the caller also frees this buffer\nthen a double free will occur. This will most likely lead to a crash. This\ncould be exploited by an attacker who has the ability to supply malicious PEM\nfiles for parsing to achieve a denial of service attack.\n\nThe functions PEM_read_bio() and PEM_read() are simple wrappers around\nPEM_read_bio_ex() and therefore these functions are also directly affected.\n\nThese functions are also called indirectly by a number of other OpenSSL\nfunctions including PEM_X509_INFO_read_bio_ex() and\nSSL_CTX_use_serverinfo_file() which are also vulnerable. Some OpenSSL internal\nuses of these functions are not vulnerable because the caller does not free the\nheader argument if PEM_read_bio_ex() returns a failure code. These locations\ninclude the PEM_read_bio_TYPE() functions as well as the decoders introduced in\nOpenSSL 3.0.\n\nThe OpenSSL asn1parse command line application is also impacted by this issue.',
-              'diffID':        'sha256:5e03d8cae8773cb694fff1d55da34a40d23c2349087ed15ce68476395d33753c',
-              'fixedVersions': [
-                '1.1.1t-r0'
-              ],
-              'installedVersion': '1.1.1n-r0',
-              'packageName':      'libcrypto1.1',
-              'purl':             'pkg:apk/alpine/libcrypto1.1@1.1.1n-r0?arch=x86_64&distro=3.15.1',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2023:2165',
-                'https://access.redhat.com/security/cve/CVE-2022-4450',
-                'https://bugzilla.redhat.com/1960321',
-                'https://bugzilla.redhat.com/2164440',
-                'https://bugzilla.redhat.com/2164487',
-                'https://bugzilla.redhat.com/2164492',
-                'https://bugzilla.redhat.com/2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144000',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144003',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144006',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144008',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144010',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144012',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144015',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144017',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144019',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2145170',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2158412',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164440',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164487',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164488',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164492',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164497',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164499',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164500',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4203',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4304',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4450',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0215',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0216',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0217',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0286',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0401',
-                'https://errata.almalinux.org/9/ALSA-2023-2165.html',
-                'https://errata.rockylinux.org/RLSA-2023:0946',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=63bcf189be73a9cc1264059bed6f57974be74a83',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=bbcf509bd046b34cca19c766bbddc31683d0858b',
-                'https://linux.oracle.com/cve/CVE-2022-4450.html',
-                'https://linux.oracle.com/errata/ELSA-2023-32791.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2022-4450',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0003',
-                'https://rustsec.org/advisories/RUSTSEC-2023-0010.html',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://ubuntu.com/security/notices/USN-5844-1',
-                'https://ubuntu.com/security/notices/USN-6564-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2022-4450',
-                'https://www.openssl.org/news/secadv/20230207.txt'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: double free after calling PEM_read_bio_ex'
-            },
-            {
-              'cve':  'CVE-2023-0215',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'nvd': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   'The public API function BIO_new_NDEF is a helper function used for streaming\nASN.1 data via a BIO. It is primarily used internally to OpenSSL to support the\nSMIME, CMS and PKCS7 streaming capabilities, but may also be called directly by\nend user applications.\n\nThe function receives a BIO from the caller, prepends a new BIO_f_asn1 filter\nBIO onto the front of it to form a BIO chain, and then returns the new head of\nthe BIO chain to the caller. Under certain conditions, for example if a CMS\nrecipient public key is invalid, the new filter BIO is freed and the function\nreturns a NULL result indicating a failure. However, in this case, the BIO chain\nis not properly cleaned up and the BIO passed by the caller still retains\ninternal pointers to the previously freed filter BIO. If the caller then goes on\nto call BIO_pop() on the BIO then a use-after-free will occur. This will most\nlikely result in a crash.\n\n\n\nThis scenario occurs directly in the internal function B64_write_ASN1() which\nmay cause BIO_new_NDEF() to be called and will subsequently call BIO_pop() on\nthe BIO. This internal function is in turn called by the public API functions\nPEM_write_bio_ASN1_stream, PEM_write_bio_CMS_stream, PEM_write_bio_PKCS7_stream,\nSMIME_write_ASN1, SMIME_write_CMS and SMIME_write_PKCS7.\n\nOther public API functions that may be impacted by this include\ni2d_ASN1_bio_stream, BIO_new_CMS, BIO_new_PKCS7, i2d_CMS_bio_stream and\ni2d_PKCS7_bio_stream.\n\nThe OpenSSL cms and smime command line applications are similarly affected.',
-              'diffID':        'sha256:5e03d8cae8773cb694fff1d55da34a40d23c2349087ed15ce68476395d33753c',
-              'fixedVersions': [
-                '1.1.1t-r0'
-              ],
-              'installedVersion': '1.1.1n-r0',
-              'packageName':      'libcrypto1.1',
-              'purl':             'pkg:apk/alpine/libcrypto1.1@1.1.1n-r0?arch=x86_64&distro=3.15.1',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2023:2165',
-                'https://access.redhat.com/security/cve/CVE-2023-0215',
-                'https://bugzilla.redhat.com/1960321',
-                'https://bugzilla.redhat.com/2164440',
-                'https://bugzilla.redhat.com/2164487',
-                'https://bugzilla.redhat.com/2164492',
-                'https://bugzilla.redhat.com/2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144000',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144003',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144006',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144008',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144010',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144012',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144015',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144017',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144019',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2145170',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2158412',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164440',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164487',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164488',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164492',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164497',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164499',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164500',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4203',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4304',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4450',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0215',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0216',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0217',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0286',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0401',
-                'https://errata.almalinux.org/9/ALSA-2023-2165.html',
-                'https://errata.rockylinux.org/RLSA-2023:0946',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=8818064ce3c3c0f1b740a5aaba2a987e75bfbafd',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=9816136fe31d92ace4037d5da5257f763aeeb4eb',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=c3829dd8825c654652201e16f8a0a0c46ee3f344',
-                'https://linux.oracle.com/cve/CVE-2023-0215.html',
-                'https://linux.oracle.com/errata/ELSA-2023-32791.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-0215',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0003',
-                'https://rustsec.org/advisories/RUSTSEC-2023-0009.html',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://security.netapp.com/advisory/ntap-20230427-0007',
-                'https://security.netapp.com/advisory/ntap-20230427-0007/',
-                'https://security.netapp.com/advisory/ntap-20230427-0009',
-                'https://security.netapp.com/advisory/ntap-20230427-0009/',
-                'https://security.netapp.com/advisory/ntap-20240621-0006',
-                'https://security.netapp.com/advisory/ntap-20240621-0006/',
-                'https://ubuntu.com/security/notices/USN-5844-1',
-                'https://ubuntu.com/security/notices/USN-5845-1',
-                'https://ubuntu.com/security/notices/USN-5845-2',
-                'https://ubuntu.com/security/notices/USN-6564-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-0215',
-                'https://www.openssl.org/news/secadv/20230207.txt'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: use-after-free following BIO_new_NDEF'
-            },
-            {
-              'cve':  'CVE-2023-0286',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '7.4',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H'
-                },
-                'nvd': {
-                  'v3score':  '7.4',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.4',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-843'
-              ],
-              'description':   'There is a type confusion vulnerability relating to X.400 address processing\ninside an X.509 GeneralName. X.400 addresses were parsed as an ASN1_STRING but\nthe public structure definition for GENERAL_NAME incorrectly specified the type\nof the x400Address field as ASN1_TYPE. This field is subsequently interpreted by\nthe OpenSSL function GENERAL_NAME_cmp as an ASN1_TYPE rather than an\nASN1_STRING.\n\nWhen CRL checking is enabled (i.e. the application sets the\nX509_V_FLAG_CRL_CHECK flag), this vulnerability may allow an attacker to pass\narbitrary pointers to a memcmp call, enabling them to read memory contents or\nenact a denial of service. In most cases, the attack requires the attacker to\nprovide both the certificate chain and CRL, neither of which need to have a\nvalid signature. If the attacker only controls one of these inputs, the other\ninput must already contain an X.400 address as a CRL distribution point, which\nis uncommon. As such, this vulnerability is most likely to only affect\napplications which have implemented their own functionality for retrieving CRLs\nover a network.',
-              'diffID':        'sha256:5e03d8cae8773cb694fff1d55da34a40d23c2349087ed15ce68476395d33753c',
-              'fixedVersions': [
-                '1.1.1t-r0'
-              ],
-              'installedVersion': '1.1.1n-r0',
-              'packageName':      'libcrypto1.1',
-              'purl':             'pkg:apk/alpine/libcrypto1.1@1.1.1n-r0?arch=x86_64&distro=3.15.1',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2025:7937',
-                'https://access.redhat.com/security/cve/CVE-2023-0286',
-                'https://access.redhat.com/security/cve/cve-2023-0286',
-                'https://bugzilla.redhat.com/2164440',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144000',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144003',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144006',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144008',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144010',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144012',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144015',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144017',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144019',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2145170',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2158412',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164440',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164487',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164488',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164492',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164497',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164499',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164500',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4203',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4304',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4450',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0215',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0216',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0217',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0286',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0401',
-                'https://errata.almalinux.org/9/ALSA-2025-7937.html',
-                'https://errata.rockylinux.org/RLSA-2023:0946',
-                'https://ftp.openbsd.org/pub/OpenBSD/LibreSSL/libressl-3.6.2-relnotes.txt',
-                'https://ftp.openbsd.org/pub/OpenBSD/patches/7.2/common/018_x509.patch.sig',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=2c6c9d439b484e1ba9830d8454a34fa4f80fdfe9',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=2f7530077e0ef79d98718138716bc51ca0cad658',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=fd2af07dc083a350c959147097003a14a5e8ac4d',
-                'https://github.com/pyca/cryptography',
-                'https://github.com/pyca/cryptography/security/advisories/GHSA-x4qr-2fvf-3mr5',
-                'https://linux.oracle.com/cve/CVE-2023-0286.html',
-                'https://linux.oracle.com/errata/ELSA-2025-7937.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-0286',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0003',
-                'https://rustsec.org/advisories/RUSTSEC-2023-0006.html',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://ubuntu.com/security/notices/USN-5844-1',
-                'https://ubuntu.com/security/notices/USN-5845-1',
-                'https://ubuntu.com/security/notices/USN-5845-2',
-                'https://ubuntu.com/security/notices/USN-6564-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-0286',
-                'https://www.openssl.org/news/secadv/20230207.txt'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: X.400 address type confusion in X.509 GeneralName'
-            },
-            {
-              'cve':  'CVE-2023-0464',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-295'
-              ],
-              'description':   "A security vulnerability has been identified in all supported versions\n\nof OpenSSL related to the verification of X.509 certificate chains\nthat include policy constraints.  Attackers may be able to exploit this\nvulnerability by creating a malicious certificate chain that triggers\nexponential use of computational resources, leading to a denial-of-service\n(DoS) attack on affected systems.\n\nPolicy processing is disabled by default but can be enabled by passing\nthe `-policy' argument to the command line utilities or by calling the\n`X509_VERIFY_PARAM_set1_policies()' function.",
-              'diffID':        'sha256:5e03d8cae8773cb694fff1d55da34a40d23c2349087ed15ce68476395d33753c',
-              'fixedVersions': [
-                '1.1.1t-r2'
-              ],
-              'installedVersion': '1.1.1n-r0',
-              'packageName':      'libcrypto1.1',
-              'purl':             'pkg:apk/alpine/libcrypto1.1@1.1.1n-r0?arch=x86_64&distro=3.15.1',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2023:3722',
-                'https://access.redhat.com/security/cve/CVE-2023-0464',
-                'https://bugzilla.redhat.com/2181082',
-                'https://bugzilla.redhat.com/2182561',
-                'https://bugzilla.redhat.com/2182565',
-                'https://bugzilla.redhat.com/2188461',
-                'https://bugzilla.redhat.com/2207947',
-                'https://errata.almalinux.org/9/ALSA-2023-3722.html',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=2017771e2db3e2b96f89bbe8766c3209f6a99545',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=2dcd4f1e3115f38cefa43e3efbe9b801c27e642e',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=879f7080d7e141f415c79eaa3a8ac4a3dad0348b',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=959c59c7a0164117e7f8366466a32bb1f8d77ff1',
-                'https://linux.oracle.com/cve/CVE-2023-0464.html',
-                'https://linux.oracle.com/errata/ELSA-2023-3722.html',
-                'https://lists.debian.org/debian-lts-announce/2023/06/msg00011.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-0464',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://security.netapp.com/advisory/ntap-20230406-0006/',
-                'https://security.netapp.com/advisory/ntap-20240621-0006/',
-                'https://ubuntu.com/security/notices/USN-6039-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.couchbase.com/alerts/',
-                'https://www.cve.org/CVERecord?id=CVE-2023-0464',
-                'https://www.debian.org/security/2023/dsa-5417',
-                'https://www.openssl.org/news/secadv/20230322.txt'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: Denial of service by excessive resource usage in verifying X509 policy constraints'
-            },
-            {
-              'cve':  'CVE-2022-2097',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N'
-                },
-                'nvd': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N'
-                },
-                'redhat': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-327'
-              ],
-              'description':   "AES OCB mode for 32-bit x86 platforms using the AES-NI assembly optimised implementation will not encrypt the entirety of the data under some circumstances. This could reveal sixteen bytes of data that was preexisting in the memory that wasn't written. In the special case of \"in place\" encryption, sixteen bytes of the plaintext would be revealed. Since OpenSSL does not support OCB based cipher suites for TLS and DTLS, they are both unaffected. Fixed in OpenSSL 3.0.5 (Affected 3.0.0-3.0.4). Fixed in OpenSSL 1.1.1q (Affected 1.1.1-1.1.1p).",
-              'diffID':        'sha256:5e03d8cae8773cb694fff1d55da34a40d23c2349087ed15ce68476395d33753c',
-              'fixedVersions': [
-                '1.1.1q-r0'
-              ],
-              'installedVersion': '1.1.1n-r0',
-              'packageName':      'libcrypto1.1',
-              'purl':             'pkg:apk/alpine/libcrypto1.1@1.1.1n-r0?arch=x86_64&distro=3.15.1',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2022:6224',
-                'https://access.redhat.com/security/cve/CVE-2022-2097',
-                'https://bugzilla.redhat.com/2081494',
-                'https://bugzilla.redhat.com/2087911',
-                'https://bugzilla.redhat.com/2087913',
-                'https://bugzilla.redhat.com/2097310',
-                'https://bugzilla.redhat.com/2104905',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2081494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2097310',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2100554',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2104905',
-                'https://cert-portal.siemens.com/productcert/pdf/ssa-332410.pdf',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-1292',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-2068',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-2097',
-                'https://errata.almalinux.org/9/ALSA-2022-6224.html',
-                'https://errata.rockylinux.org/RLSA-2022:5818',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=919925673d6c9cfed3c1085497f5dfbbed5fc431',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=a98f339ddd7e8f487d6e0088d4a9a42324885a93',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=919925673d6c9cfed3c1085497f5dfbbed5fc431',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=a98f339ddd7e8f487d6e0088d4a9a42324885a93',
-                'https://github.com/alexcrichton/openssl-src-rs',
-                'https://linux.oracle.com/cve/CVE-2022-2097.html',
-                'https://linux.oracle.com/errata/ELSA-2022-9955.html',
-                'https://lists.debian.org/debian-lts-announce/2023/02/msg00019.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/R6CK57NBQFTPUMXAPJURCGXUYT76NQAK',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/R6CK57NBQFTPUMXAPJURCGXUYT76NQAK/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/V6567JERRHHJW2GNGJGKDRNHR7SNPZK7',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/V6567JERRHHJW2GNGJGKDRNHR7SNPZK7/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VCMNWKERPBKOEBNL7CLTTX3ZZCZLH7XA',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VCMNWKERPBKOEBNL7CLTTX3ZZCZLH7XA/',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/R6CK57NBQFTPUMXAPJURCGXUYT76NQAK',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/R6CK57NBQFTPUMXAPJURCGXUYT76NQAK/',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/V6567JERRHHJW2GNGJGKDRNHR7SNPZK7',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/V6567JERRHHJW2GNGJGKDRNHR7SNPZK7/',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/VCMNWKERPBKOEBNL7CLTTX3ZZCZLH7XA',
-                'https://nvd.nist.gov/vuln/detail/CVE-2022-2097',
-                'https://rustsec.org/advisories/RUSTSEC-2022-0032.html',
-                'https://security.gentoo.org/glsa/202210-02',
-                'https://security.netapp.com/advisory/ntap-20220715-0011',
-                'https://security.netapp.com/advisory/ntap-20220715-0011/',
-                'https://security.netapp.com/advisory/ntap-20230420-0008',
-                'https://security.netapp.com/advisory/ntap-20230420-0008/',
-                'https://security.netapp.com/advisory/ntap-20240621-0006',
-                'https://security.netapp.com/advisory/ntap-20240621-0006/',
-                'https://ubuntu.com/security/notices/USN-5502-1',
-                'https://ubuntu.com/security/notices/USN-6457-1',
-                'https://www.cve.org/CVERecord?id=CVE-2022-2097',
-                'https://www.debian.org/security/2023/dsa-5343',
-                'https://www.openssl.org/news/secadv/20220705.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: AES OCB fails to encrypt some bytes'
-            },
-            {
-              'cve':  'CVE-2022-4304',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N'
-                },
-                'nvd': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N'
-                },
-                'redhat': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-203'
-              ],
-              'description':   'A timing based side channel exists in the OpenSSL RSA Decryption implementation\nwhich could be sufficient to recover a plaintext across a network in a\nBleichenbacher style attack. To achieve a successful decryption an attacker\nwould have to be able to send a very large number of trial messages for\ndecryption. The vulnerability affects all RSA padding modes: PKCS#1 v1.5,\nRSA-OEAP and RSASVE.\n\nFor example, in a TLS connection, RSA is commonly used by a client to send an\nencrypted pre-master secret to the server. An attacker that had observed a\ngenuine connection between a client and a server could use this flaw to send\ntrial messages to the server and record the time taken to process them. After a\nsufficiently large number of messages the attacker could recover the pre-master\nsecret used for the original connection and thus be able to decrypt the\napplication data sent over that connection.',
-              'diffID':        'sha256:5e03d8cae8773cb694fff1d55da34a40d23c2349087ed15ce68476395d33753c',
-              'fixedVersions': [
-                '1.1.1t-r0'
-              ],
-              'installedVersion': '1.1.1n-r0',
-              'packageName':      'libcrypto1.1',
-              'purl':             'pkg:apk/alpine/libcrypto1.1@1.1.1n-r0?arch=x86_64&distro=3.15.1',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2023:2165',
-                'https://access.redhat.com/security/cve/CVE-2022-4304',
-                'https://bugzilla.redhat.com/1960321',
-                'https://bugzilla.redhat.com/2164440',
-                'https://bugzilla.redhat.com/2164487',
-                'https://bugzilla.redhat.com/2164492',
-                'https://bugzilla.redhat.com/2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144000',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144003',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144006',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144008',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144010',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144012',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144015',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144017',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144019',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2145170',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2158412',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164440',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164487',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164488',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164492',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164497',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164499',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164500',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4203',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4304',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4450',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0215',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0216',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0217',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0286',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0401',
-                'https://errata.almalinux.org/9/ALSA-2023-2165.html',
-                'https://errata.rockylinux.org/RLSA-2023:0946',
-                'https://linux.oracle.com/cve/CVE-2022-4304.html',
-                'https://linux.oracle.com/errata/ELSA-2023-32791.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2022-4304',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0003',
-                'https://rustsec.org/advisories/RUSTSEC-2023-0007.html',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://ubuntu.com/security/notices/USN-5844-1',
-                'https://ubuntu.com/security/notices/USN-6564-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2022-4304',
-                'https://www.openssl.org/news/secadv/20230207.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: timing attack in RSA Decryption implementation'
-            },
-            {
-              'cve':  'CVE-2023-0465',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N'
-                },
-                'redhat': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-295'
-              ],
-              'description':   "Applications that use a non-default option when verifying certificates may be\nvulnerable to an attack from a malicious CA to circumvent certain checks.\n\nInvalid certificate policies in leaf certificates are silently ignored by\nOpenSSL and other certificate policy checks are skipped for that certificate.\nA malicious CA could use this to deliberately assert invalid certificate policies\nin order to circumvent policy checking on the certificate altogether.\n\nPolicy processing is disabled by default but can be enabled by passing\nthe `-policy' argument to the command line utilities or by calling the\n`X509_VERIFY_PARAM_set1_policies()' function.",
-              'diffID':        'sha256:5e03d8cae8773cb694fff1d55da34a40d23c2349087ed15ce68476395d33753c',
-              'fixedVersions': [
-                '1.1.1t-r2'
-              ],
-              'installedVersion': '1.1.1n-r0',
-              'packageName':      'libcrypto1.1',
-              'purl':             'pkg:apk/alpine/libcrypto1.1@1.1.1n-r0?arch=x86_64&distro=3.15.1',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2023:3722',
-                'https://access.redhat.com/security/cve/CVE-2023-0465',
-                'https://bugzilla.redhat.com/2181082',
-                'https://bugzilla.redhat.com/2182561',
-                'https://bugzilla.redhat.com/2182565',
-                'https://bugzilla.redhat.com/2188461',
-                'https://bugzilla.redhat.com/2207947',
-                'https://errata.almalinux.org/9/ALSA-2023-3722.html',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=10325176f3d3e98c6e2b3bf5ab1e3b334de6947a',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=1dd43e0709fece299b15208f36cc7c76209ba0bb',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=b013765abfa80036dc779dd0e50602c57bb3bf95',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=facfb1ab745646e97a1920977ae4a9965ea61d5c',
-                'https://linux.oracle.com/cve/CVE-2023-0465.html',
-                'https://linux.oracle.com/errata/ELSA-2023-3722.html',
-                'https://lists.debian.org/debian-lts-announce/2023/06/msg00011.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-0465',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://security.netapp.com/advisory/ntap-20230414-0001/',
-                'https://ubuntu.com/security/notices/USN-6039-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-0465',
-                'https://www.debian.org/security/2023/dsa-5417',
-                'https://www.openssl.org/news/secadv/20230328.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: Invalid certificate policies in leaf certificates are silently ignored'
-            },
-            {
-              'cve':  'CVE-2023-2650',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '6.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-770'
-              ],
-              'description':   "Issue summary: Processing some specially crafted ASN.1 object identifiers or\ndata containing them may be very slow.\n\nImpact summary: Applications that use OBJ_obj2txt() directly, or use any of\nthe OpenSSL subsystems OCSP, PKCS7/SMIME, CMS, CMP/CRMF or TS with no message\nsize limit may experience notable to very long delays when processing those\nmessages, which may lead to a Denial of Service.\n\nAn OBJECT IDENTIFIER is composed of a series of numbers - sub-identifiers -\nmost of which have no size limit.  OBJ_obj2txt() may be used to translate\nan ASN.1 OBJECT IDENTIFIER given in DER encoding form (using the OpenSSL\ntype ASN1_OBJECT) to its canonical numeric text form, which are the\nsub-identifiers of the OBJECT IDENTIFIER in decimal form, separated by\nperiods.\n\nWhen one of the sub-identifiers in the OBJECT IDENTIFIER is very large\n(these are sizes that are seen as absurdly large, taking up tens or hundreds\nof KiBs), the translation to a decimal number in text may take a very long\ntime.  The time complexity is O(n^2) with 'n' being the size of the\nsub-identifiers in bytes (*).\n\nWith OpenSSL 3.0, support to fetch cryptographic algorithms using names /\nidentifiers in string form was introduced.  This includes using OBJECT\nIDENTIFIERs in canonical numeric text form as identifiers for fetching\nalgorithms.\n\nSuch OBJECT IDENTIFIERs may be received through the ASN.1 structure\nAlgorithmIdentifier, which is commonly used in multiple protocols to specify\nwhat cryptographic algorithm should be used to sign or verify, encrypt or\ndecrypt, or digest passed data.\n\nApplications that call OBJ_obj2txt() directly with untrusted data are\naffected, with any version of OpenSSL.  If the use is for the mere purpose\nof display, the severity is considered low.\n\nIn OpenSSL 3.0 and newer, this affects the subsystems OCSP, PKCS7/SMIME,\nCMS, CMP/CRMF or TS.  It also impacts anything that processes X.509\ncertificates, including simple things like verifying its signature.\n\nThe impact on TLS is relatively low, because all versions of OpenSSL have a\n100KiB limit on the peer's certificate chain.  Additionally, this only\nimpacts clients, or servers that have explicitly enabled client\nauthentication.\n\nIn OpenSSL 1.1.1 and 1.0.2, this only affects displaying diverse objects,\nsuch as X.509 certificates.  This is assumed to not happen in such a way\nthat it would cause a Denial of Service, so these versions are considered\nnot affected by this issue in such a way that it would be cause for concern,\nand the severity is therefore considered low.",
-              'diffID':        'sha256:5e03d8cae8773cb694fff1d55da34a40d23c2349087ed15ce68476395d33753c',
-              'fixedVersions': [
-                '1.1.1u-r0'
-              ],
-              'installedVersion': '1.1.1n-r0',
-              'packageName':      'libcrypto1.1',
-              'purl':             'pkg:apk/alpine/libcrypto1.1@1.1.1n-r0?arch=x86_64&distro=3.15.1',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2023/05/30/1',
-                'https://access.redhat.com/errata/RHSA-2023:6330',
-                'https://access.redhat.com/security/cve/CVE-2023-2650',
-                'https://bugzilla.redhat.com/1858038',
-                'https://bugzilla.redhat.com/2207947',
-                'https://errata.almalinux.org/9/ALSA-2023-6330.html',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=423a2bc737a908ad0c77bda470b2b59dc879936b',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=853c5e56ee0b8650c73140816bb8b91d6163422c',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=9e209944b35cf82368071f160a744b6178f9b098',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=db779b0e10b047f2585615e0b8f2acdf21f8544a',
-                'https://linux.oracle.com/cve/CVE-2023-2650.html',
-                'https://linux.oracle.com/errata/ELSA-2023-6330.html',
-                'https://lists.debian.org/debian-lts-announce/2023/06/msg00011.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-2650',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0009',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://security.netapp.com/advisory/ntap-20230703-0001/',
-                'https://security.netapp.com/advisory/ntap-20231027-0009/',
-                'https://ubuntu.com/security/notices/USN-6119-1',
-                'https://ubuntu.com/security/notices/USN-6188-1',
-                'https://ubuntu.com/security/notices/USN-6672-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-2650',
-                'https://www.debian.org/security/2023/dsa-5417',
-                'https://www.openssl.org/news/secadv/20230530.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: Possible DoS translating ASN.1 object identifiers'
-            },
-            {
-              'cve':  'CVE-2023-3446',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L'
-                },
-                'redhat': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L'
-                }
-              },
-              'cwes': [
-                'CWE-606',
-                'CWE-1333'
-              ],
-              'description':   "Issue summary: Checking excessively long DH keys or parameters may be very slow.\n\nImpact summary: Applications that use the functions DH_check(), DH_check_ex()\nor EVP_PKEY_param_check() to check a DH key or DH parameters may experience long\ndelays. Where the key or parameters that are being checked have been obtained\nfrom an untrusted source this may lead to a Denial of Service.\n\nThe function DH_check() performs various checks on DH parameters. One of those\nchecks confirms that the modulus ('p' parameter) is not too large. Trying to use\na very large modulus is slow and OpenSSL will not normally use a modulus which\nis over 10,000 bits in length.\n\nHowever the DH_check() function checks numerous aspects of the key or parameters\nthat have been supplied. Some of those checks use the supplied modulus value\neven if it has already been found to be too large.\n\nAn application that calls DH_check() and supplies a key or parameters obtained\nfrom an untrusted source could be vulernable to a Denial of Service attack.\n\nThe function DH_check() is itself called by a number of other OpenSSL functions.\nAn application calling any of those other functions may similarly be affected.\nThe other functions affected by this are DH_check_ex() and\nEVP_PKEY_param_check().\n\nAlso vulnerable are the OpenSSL dhparam and pkeyparam command line applications\nwhen using the '-check' option.\n\nThe OpenSSL SSL/TLS implementation is not affected by this issue.\nThe OpenSSL 3.0 and 3.1 FIPS providers are not affected by this issue.",
-              'diffID':        'sha256:5e03d8cae8773cb694fff1d55da34a40d23c2349087ed15ce68476395d33753c',
-              'fixedVersions': [
-                '1.1.1u-r2'
-              ],
-              'installedVersion': '1.1.1n-r0',
-              'packageName':      'libcrypto1.1',
-              'purl':             'pkg:apk/alpine/libcrypto1.1@1.1.1n-r0?arch=x86_64&distro=3.15.1',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2023/07/19/4',
-                'http://www.openwall.com/lists/oss-security/2023/07/19/5',
-                'http://www.openwall.com/lists/oss-security/2023/07/19/6',
-                'http://www.openwall.com/lists/oss-security/2023/07/31/1',
-                'http://www.openwall.com/lists/oss-security/2024/05/16/1',
-                'https://access.redhat.com/errata/RHSA-2024:2447',
-                'https://access.redhat.com/security/cve/CVE-2023-3446',
-                'https://bugzilla.redhat.com/2223016',
-                'https://bugzilla.redhat.com/2224962',
-                'https://bugzilla.redhat.com/2227852',
-                'https://bugzilla.redhat.com/2248616',
-                'https://bugzilla.redhat.com/2257571',
-                'https://bugzilla.redhat.com/2258502',
-                'https://bugzilla.redhat.com/2259944',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2224962',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2257582',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2257583',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2258677',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2258688',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2258691',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2258694',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2258700',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-36763',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-36764',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3446',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45229',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45231',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45232',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45233',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45235',
-                'https://errata.almalinux.org/9/ALSA-2024-2447.html',
-                'https://errata.rockylinux.org/RLSA-2024:2264',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=1fa20cf2f506113c761777127a38bce5068740eb',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=8780a896543a654e757db1b9396383f9d8095528',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=9a0a4d3c1e7138915563c0df4fe6a3f9377b839c',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=fc9867c1e03c22ebf56943be205202e576aabf23',
-                'https://linux.oracle.com/cve/CVE-2023-3446.html',
-                'https://linux.oracle.com/errata/ELSA-2024-2447.html',
-                'https://lists.debian.org/debian-lts-announce/2023/08/msg00019.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-3446',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://security.netapp.com/advisory/ntap-20230803-0011/',
-                'https://ubuntu.com/security/notices/USN-6435-1',
-                'https://ubuntu.com/security/notices/USN-6435-2',
-                'https://ubuntu.com/security/notices/USN-6450-1',
-                'https://ubuntu.com/security/notices/USN-6709-1',
-                'https://ubuntu.com/security/notices/USN-7018-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-3446',
-                'https://www.openssl.org/news/secadv/20230719.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: Excessive time spent checking DH keys and parameters'
-            },
-            {
-              'cve':  'CVE-2023-3817',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L'
-                },
-                'redhat': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L'
-                }
-              },
-              'cwes': [
-                'CWE-606',
-                'CWE-834'
-              ],
-              'description':   'Issue summary: Checking excessively long DH keys or parameters may be very slow.\n\nImpact summary: Applications that use the functions DH_check(), DH_check_ex()\nor EVP_PKEY_param_check() to check a DH key or DH parameters may experience long\ndelays. Where the key or parameters that are being checked have been obtained\nfrom an untrusted source this may lead to a Denial of Service.\n\nThe function DH_check() performs various checks on DH parameters. After fixing\nCVE-2023-3446 it was discovered that a large q parameter value can also trigger\nan overly long computation during some of these checks. A correct q value,\nif present, cannot be larger than the modulus p parameter, thus it is\nunnecessary to perform these checks if q is larger than p.\n\nAn application that calls DH_check() and supplies a key or parameters obtained\nfrom an untrusted source could be vulnerable to a Denial of Service attack.\n\nThe function DH_check() is itself called by a number of other OpenSSL functions.\nAn application calling any of those other functions may similarly be affected.\nThe other functions affected by this are DH_check_ex() and\nEVP_PKEY_param_check().\n\nAlso vulnerable are the OpenSSL dhparam and pkeyparam command line applications\nwhen using the "-check" option.\n\nThe OpenSSL SSL/TLS implementation is not affected by this issue.\n\nThe OpenSSL 3.0 and 3.1 FIPS providers are not affected by this issue.',
-              'diffID':        'sha256:5e03d8cae8773cb694fff1d55da34a40d23c2349087ed15ce68476395d33753c',
-              'fixedVersions': [
-                '1.1.1v-r0'
-              ],
-              'installedVersion': '1.1.1n-r0',
-              'packageName':      'libcrypto1.1',
-              'purl':             'pkg:apk/alpine/libcrypto1.1@1.1.1n-r0?arch=x86_64&distro=3.15.1',
-              'references':       [
-                'http://seclists.org/fulldisclosure/2023/Jul/43',
-                'http://www.openwall.com/lists/oss-security/2023/07/31/1',
-                'http://www.openwall.com/lists/oss-security/2023/09/22/11',
-                'http://www.openwall.com/lists/oss-security/2023/09/22/9',
-                'http://www.openwall.com/lists/oss-security/2023/11/06/2',
-                'https://access.redhat.com/errata/RHSA-2024:2447',
-                'https://access.redhat.com/security/cve/CVE-2023-3817',
-                'https://bugzilla.redhat.com/2223016',
-                'https://bugzilla.redhat.com/2224962',
-                'https://bugzilla.redhat.com/2227852',
-                'https://bugzilla.redhat.com/2248616',
-                'https://bugzilla.redhat.com/2257571',
-                'https://bugzilla.redhat.com/2258502',
-                'https://bugzilla.redhat.com/2259944',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2224962',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2227852',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2248616',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2270358',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3446',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3817',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-5678',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-2408',
-                'https://errata.almalinux.org/9/ALSA-2024-2447.html',
-                'https://errata.rockylinux.org/RLSA-2023:7877',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=6a1eb62c29db6cb5eec707f9338aee00f44e26f5',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=869ad69aadd985c7b8ca6f4e5dd0eb274c9f3644',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=9002fd07327a91f35ba6c1307e71fa6fd4409b7f',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=91ddeba0f2269b017dc06c46c993a788974b1aa5',
-                'https://linux.oracle.com/cve/CVE-2023-3817.html',
-                'https://linux.oracle.com/errata/ELSA-2024-2447.html',
-                'https://lists.debian.org/debian-lts-announce/2023/08/msg00019.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-3817',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://security.netapp.com/advisory/ntap-20230818-0014/',
-                'https://security.netapp.com/advisory/ntap-20231027-0008/',
-                'https://security.netapp.com/advisory/ntap-20240621-0006/',
-                'https://ubuntu.com/security/notices/USN-6435-1',
-                'https://ubuntu.com/security/notices/USN-6435-2',
-                'https://ubuntu.com/security/notices/USN-6450-1',
-                'https://ubuntu.com/security/notices/USN-6709-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-3817',
-                'https://www.openssl.org/news/secadv/20230731.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'OpenSSL: Excessive time spent checking DH q parameter value'
-            },
-            {
-              'cve':  'CVE-2023-5678',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L'
-                },
-                'redhat': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L'
-                }
-              },
-              'cwes': [
-                'CWE-606',
-                'CWE-754'
-              ],
-              'description':   "Issue summary: Generating excessively long X9.42 DH keys or checking\nexcessively long X9.42 DH keys or parameters may be very slow.\n\nImpact summary: Applications that use the functions DH_generate_key() to\ngenerate an X9.42 DH key may experience long delays.  Likewise, applications\nthat use DH_check_pub_key(), DH_check_pub_key_ex() or EVP_PKEY_public_check()\nto check an X9.42 DH key or X9.42 DH parameters may experience long delays.\nWhere the key or parameters that are being checked have been obtained from\nan untrusted source this may lead to a Denial of Service.\n\nWhile DH_check() performs all the necessary checks (as of CVE-2023-3817),\nDH_check_pub_key() doesn't make any of these checks, and is therefore\nvulnerable for excessively large P and Q parameters.\n\nLikewise, while DH_generate_key() performs a check for an excessively large\nP, it doesn't check for an excessively large Q.\n\nAn application that calls DH_generate_key() or DH_check_pub_key() and\nsupplies a key or parameters obtained from an untrusted source could be\nvulnerable to a Denial of Service attack.\n\nDH_generate_key() and DH_check_pub_key() are also called by a number of\nother OpenSSL functions.  An application calling any of those other\nfunctions may similarly be affected.  The other functions affected by this\nare DH_check_pub_key_ex(), EVP_PKEY_public_check(), and EVP_PKEY_generate().\n\nAlso vulnerable are the OpenSSL pkey command line application when using the\n\"-pubcheck\" option, as well as the OpenSSL genpkey command line application.\n\nThe OpenSSL SSL/TLS implementation is not affected by this issue.\n\nThe OpenSSL 3.0 and 3.1 FIPS providers are not affected by this issue.",
-              'diffID':        'sha256:5e03d8cae8773cb694fff1d55da34a40d23c2349087ed15ce68476395d33753c',
-              'fixedVersions': [
-                '1.1.1w-r1'
-              ],
-              'installedVersion': '1.1.1n-r0',
-              'packageName':      'libcrypto1.1',
-              'purl':             'pkg:apk/alpine/libcrypto1.1@1.1.1n-r0?arch=x86_64&distro=3.15.1',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2024/03/11/1',
-                'https://access.redhat.com/errata/RHSA-2024:2447',
-                'https://access.redhat.com/security/cve/CVE-2023-5678',
-                'https://bugzilla.redhat.com/2223016',
-                'https://bugzilla.redhat.com/2224962',
-                'https://bugzilla.redhat.com/2227852',
-                'https://bugzilla.redhat.com/2248616',
-                'https://bugzilla.redhat.com/2257571',
-                'https://bugzilla.redhat.com/2258502',
-                'https://bugzilla.redhat.com/2259944',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2224962',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2227852',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2248616',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2270358',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3446',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3817',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-5678',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-2408',
-                'https://errata.almalinux.org/9/ALSA-2024-2447.html',
-                'https://errata.rockylinux.org/RLSA-2023:7877',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=34efaef6c103d636ab507a0cc34dca4d3aecc055',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=710fee740904b6290fef0dd5536fbcedbc38ff0c',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=db925ae2e65d0d925adef429afc37f75bd1c2017',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=ddeb4b6c6d527e54ce9a99cba785c0f7776e54b6',
-                'https://linux.oracle.com/cve/CVE-2023-5678.html',
-                'https://linux.oracle.com/errata/ELSA-2024-2447.html',
-                'https://lists.debian.org/debian-lts-announce/2024/10/msg00033.html',
-                'https://lists.debian.org/debian-lts-announce/2024/11/msg00000.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-5678',
-                'https://security.netapp.com/advisory/ntap-20231130-0010/',
-                'https://ubuntu.com/security/notices/USN-6622-1',
-                'https://ubuntu.com/security/notices/USN-6632-1',
-                'https://ubuntu.com/security/notices/USN-6709-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-5678',
-                'https://www.openssl.org/news/secadv/20231106.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: Generating excessively long X9.42 DH keys or checking excessively long X9.42 DH keys or parameters may be very slow'
-            },
-            {
-              'cve':  'CVE-2022-4450',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'nvd': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-415'
-              ],
-              'description':   'The function PEM_read_bio_ex() reads a PEM file from a BIO and parses and\ndecodes the "name" (e.g. "CERTIFICATE"), any header data and the payload data.\nIf the function succeeds then the "name_out", "header" and "data" arguments are\npopulated with pointers to buffers containing the relevant decoded data. The\ncaller is responsible for freeing those buffers. It is possible to construct a\nPEM file that results in 0 bytes of payload data. In this case PEM_read_bio_ex()\nwill return a failure code but will populate the header argument with a pointer\nto a buffer that has already been freed. If the caller also frees this buffer\nthen a double free will occur. This will most likely lead to a crash. This\ncould be exploited by an attacker who has the ability to supply malicious PEM\nfiles for parsing to achieve a denial of service attack.\n\nThe functions PEM_read_bio() and PEM_read() are simple wrappers around\nPEM_read_bio_ex() and therefore these functions are also directly affected.\n\nThese functions are also called indirectly by a number of other OpenSSL\nfunctions including PEM_X509_INFO_read_bio_ex() and\nSSL_CTX_use_serverinfo_file() which are also vulnerable. Some OpenSSL internal\nuses of these functions are not vulnerable because the caller does not free the\nheader argument if PEM_read_bio_ex() returns a failure code. These locations\ninclude the PEM_read_bio_TYPE() functions as well as the decoders introduced in\nOpenSSL 3.0.\n\nThe OpenSSL asn1parse command line application is also impacted by this issue.',
-              'diffID':        'sha256:5e03d8cae8773cb694fff1d55da34a40d23c2349087ed15ce68476395d33753c',
-              'fixedVersions': [
-                '1.1.1t-r0'
-              ],
-              'installedVersion': '1.1.1n-r0',
-              'packageName':      'libssl1.1',
-              'purl':             'pkg:apk/alpine/libssl1.1@1.1.1n-r0?arch=x86_64&distro=3.15.1',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2023:2165',
-                'https://access.redhat.com/security/cve/CVE-2022-4450',
-                'https://bugzilla.redhat.com/1960321',
-                'https://bugzilla.redhat.com/2164440',
-                'https://bugzilla.redhat.com/2164487',
-                'https://bugzilla.redhat.com/2164492',
-                'https://bugzilla.redhat.com/2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144000',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144003',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144006',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144008',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144010',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144012',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144015',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144017',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144019',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2145170',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2158412',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164440',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164487',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164488',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164492',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164497',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164499',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164500',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4203',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4304',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4450',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0215',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0216',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0217',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0286',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0401',
-                'https://errata.almalinux.org/9/ALSA-2023-2165.html',
-                'https://errata.rockylinux.org/RLSA-2023:0946',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=63bcf189be73a9cc1264059bed6f57974be74a83',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=bbcf509bd046b34cca19c766bbddc31683d0858b',
-                'https://linux.oracle.com/cve/CVE-2022-4450.html',
-                'https://linux.oracle.com/errata/ELSA-2023-32791.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2022-4450',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0003',
-                'https://rustsec.org/advisories/RUSTSEC-2023-0010.html',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://ubuntu.com/security/notices/USN-5844-1',
-                'https://ubuntu.com/security/notices/USN-6564-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2022-4450',
-                'https://www.openssl.org/news/secadv/20230207.txt'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: double free after calling PEM_read_bio_ex'
-            },
-            {
-              'cve':  'CVE-2023-0215',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'nvd': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   'The public API function BIO_new_NDEF is a helper function used for streaming\nASN.1 data via a BIO. It is primarily used internally to OpenSSL to support the\nSMIME, CMS and PKCS7 streaming capabilities, but may also be called directly by\nend user applications.\n\nThe function receives a BIO from the caller, prepends a new BIO_f_asn1 filter\nBIO onto the front of it to form a BIO chain, and then returns the new head of\nthe BIO chain to the caller. Under certain conditions, for example if a CMS\nrecipient public key is invalid, the new filter BIO is freed and the function\nreturns a NULL result indicating a failure. However, in this case, the BIO chain\nis not properly cleaned up and the BIO passed by the caller still retains\ninternal pointers to the previously freed filter BIO. If the caller then goes on\nto call BIO_pop() on the BIO then a use-after-free will occur. This will most\nlikely result in a crash.\n\n\n\nThis scenario occurs directly in the internal function B64_write_ASN1() which\nmay cause BIO_new_NDEF() to be called and will subsequently call BIO_pop() on\nthe BIO. This internal function is in turn called by the public API functions\nPEM_write_bio_ASN1_stream, PEM_write_bio_CMS_stream, PEM_write_bio_PKCS7_stream,\nSMIME_write_ASN1, SMIME_write_CMS and SMIME_write_PKCS7.\n\nOther public API functions that may be impacted by this include\ni2d_ASN1_bio_stream, BIO_new_CMS, BIO_new_PKCS7, i2d_CMS_bio_stream and\ni2d_PKCS7_bio_stream.\n\nThe OpenSSL cms and smime command line applications are similarly affected.',
-              'diffID':        'sha256:5e03d8cae8773cb694fff1d55da34a40d23c2349087ed15ce68476395d33753c',
-              'fixedVersions': [
-                '1.1.1t-r0'
-              ],
-              'installedVersion': '1.1.1n-r0',
-              'packageName':      'libssl1.1',
-              'purl':             'pkg:apk/alpine/libssl1.1@1.1.1n-r0?arch=x86_64&distro=3.15.1',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2023:2165',
-                'https://access.redhat.com/security/cve/CVE-2023-0215',
-                'https://bugzilla.redhat.com/1960321',
-                'https://bugzilla.redhat.com/2164440',
-                'https://bugzilla.redhat.com/2164487',
-                'https://bugzilla.redhat.com/2164492',
-                'https://bugzilla.redhat.com/2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144000',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144003',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144006',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144008',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144010',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144012',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144015',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144017',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144019',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2145170',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2158412',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164440',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164487',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164488',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164492',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164497',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164499',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164500',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4203',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4304',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4450',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0215',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0216',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0217',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0286',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0401',
-                'https://errata.almalinux.org/9/ALSA-2023-2165.html',
-                'https://errata.rockylinux.org/RLSA-2023:0946',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=8818064ce3c3c0f1b740a5aaba2a987e75bfbafd',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=9816136fe31d92ace4037d5da5257f763aeeb4eb',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=c3829dd8825c654652201e16f8a0a0c46ee3f344',
-                'https://linux.oracle.com/cve/CVE-2023-0215.html',
-                'https://linux.oracle.com/errata/ELSA-2023-32791.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-0215',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0003',
-                'https://rustsec.org/advisories/RUSTSEC-2023-0009.html',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://security.netapp.com/advisory/ntap-20230427-0007',
-                'https://security.netapp.com/advisory/ntap-20230427-0007/',
-                'https://security.netapp.com/advisory/ntap-20230427-0009',
-                'https://security.netapp.com/advisory/ntap-20230427-0009/',
-                'https://security.netapp.com/advisory/ntap-20240621-0006',
-                'https://security.netapp.com/advisory/ntap-20240621-0006/',
-                'https://ubuntu.com/security/notices/USN-5844-1',
-                'https://ubuntu.com/security/notices/USN-5845-1',
-                'https://ubuntu.com/security/notices/USN-5845-2',
-                'https://ubuntu.com/security/notices/USN-6564-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-0215',
-                'https://www.openssl.org/news/secadv/20230207.txt'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: use-after-free following BIO_new_NDEF'
-            },
-            {
-              'cve':  'CVE-2023-0286',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '7.4',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H'
-                },
-                'nvd': {
-                  'v3score':  '7.4',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.4',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-843'
-              ],
-              'description':   'There is a type confusion vulnerability relating to X.400 address processing\ninside an X.509 GeneralName. X.400 addresses were parsed as an ASN1_STRING but\nthe public structure definition for GENERAL_NAME incorrectly specified the type\nof the x400Address field as ASN1_TYPE. This field is subsequently interpreted by\nthe OpenSSL function GENERAL_NAME_cmp as an ASN1_TYPE rather than an\nASN1_STRING.\n\nWhen CRL checking is enabled (i.e. the application sets the\nX509_V_FLAG_CRL_CHECK flag), this vulnerability may allow an attacker to pass\narbitrary pointers to a memcmp call, enabling them to read memory contents or\nenact a denial of service. In most cases, the attack requires the attacker to\nprovide both the certificate chain and CRL, neither of which need to have a\nvalid signature. If the attacker only controls one of these inputs, the other\ninput must already contain an X.400 address as a CRL distribution point, which\nis uncommon. As such, this vulnerability is most likely to only affect\napplications which have implemented their own functionality for retrieving CRLs\nover a network.',
-              'diffID':        'sha256:5e03d8cae8773cb694fff1d55da34a40d23c2349087ed15ce68476395d33753c',
-              'fixedVersions': [
-                '1.1.1t-r0'
-              ],
-              'installedVersion': '1.1.1n-r0',
-              'packageName':      'libssl1.1',
-              'purl':             'pkg:apk/alpine/libssl1.1@1.1.1n-r0?arch=x86_64&distro=3.15.1',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2025:7937',
-                'https://access.redhat.com/security/cve/CVE-2023-0286',
-                'https://access.redhat.com/security/cve/cve-2023-0286',
-                'https://bugzilla.redhat.com/2164440',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144000',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144003',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144006',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144008',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144010',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144012',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144015',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144017',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144019',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2145170',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2158412',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164440',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164487',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164488',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164492',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164497',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164499',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164500',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4203',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4304',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4450',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0215',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0216',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0217',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0286',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0401',
-                'https://errata.almalinux.org/9/ALSA-2025-7937.html',
-                'https://errata.rockylinux.org/RLSA-2023:0946',
-                'https://ftp.openbsd.org/pub/OpenBSD/LibreSSL/libressl-3.6.2-relnotes.txt',
-                'https://ftp.openbsd.org/pub/OpenBSD/patches/7.2/common/018_x509.patch.sig',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=2c6c9d439b484e1ba9830d8454a34fa4f80fdfe9',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=2f7530077e0ef79d98718138716bc51ca0cad658',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=fd2af07dc083a350c959147097003a14a5e8ac4d',
-                'https://github.com/pyca/cryptography',
-                'https://github.com/pyca/cryptography/security/advisories/GHSA-x4qr-2fvf-3mr5',
-                'https://linux.oracle.com/cve/CVE-2023-0286.html',
-                'https://linux.oracle.com/errata/ELSA-2025-7937.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-0286',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0003',
-                'https://rustsec.org/advisories/RUSTSEC-2023-0006.html',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://ubuntu.com/security/notices/USN-5844-1',
-                'https://ubuntu.com/security/notices/USN-5845-1',
-                'https://ubuntu.com/security/notices/USN-5845-2',
-                'https://ubuntu.com/security/notices/USN-6564-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-0286',
-                'https://www.openssl.org/news/secadv/20230207.txt'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: X.400 address type confusion in X.509 GeneralName'
-            },
-            {
-              'cve':  'CVE-2023-0464',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-295'
-              ],
-              'description':   "A security vulnerability has been identified in all supported versions\n\nof OpenSSL related to the verification of X.509 certificate chains\nthat include policy constraints.  Attackers may be able to exploit this\nvulnerability by creating a malicious certificate chain that triggers\nexponential use of computational resources, leading to a denial-of-service\n(DoS) attack on affected systems.\n\nPolicy processing is disabled by default but can be enabled by passing\nthe `-policy' argument to the command line utilities or by calling the\n`X509_VERIFY_PARAM_set1_policies()' function.",
-              'diffID':        'sha256:5e03d8cae8773cb694fff1d55da34a40d23c2349087ed15ce68476395d33753c',
-              'fixedVersions': [
-                '1.1.1t-r2'
-              ],
-              'installedVersion': '1.1.1n-r0',
-              'packageName':      'libssl1.1',
-              'purl':             'pkg:apk/alpine/libssl1.1@1.1.1n-r0?arch=x86_64&distro=3.15.1',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2023:3722',
-                'https://access.redhat.com/security/cve/CVE-2023-0464',
-                'https://bugzilla.redhat.com/2181082',
-                'https://bugzilla.redhat.com/2182561',
-                'https://bugzilla.redhat.com/2182565',
-                'https://bugzilla.redhat.com/2188461',
-                'https://bugzilla.redhat.com/2207947',
-                'https://errata.almalinux.org/9/ALSA-2023-3722.html',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=2017771e2db3e2b96f89bbe8766c3209f6a99545',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=2dcd4f1e3115f38cefa43e3efbe9b801c27e642e',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=879f7080d7e141f415c79eaa3a8ac4a3dad0348b',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=959c59c7a0164117e7f8366466a32bb1f8d77ff1',
-                'https://linux.oracle.com/cve/CVE-2023-0464.html',
-                'https://linux.oracle.com/errata/ELSA-2023-3722.html',
-                'https://lists.debian.org/debian-lts-announce/2023/06/msg00011.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-0464',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://security.netapp.com/advisory/ntap-20230406-0006/',
-                'https://security.netapp.com/advisory/ntap-20240621-0006/',
-                'https://ubuntu.com/security/notices/USN-6039-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.couchbase.com/alerts/',
-                'https://www.cve.org/CVERecord?id=CVE-2023-0464',
-                'https://www.debian.org/security/2023/dsa-5417',
-                'https://www.openssl.org/news/secadv/20230322.txt'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: Denial of service by excessive resource usage in verifying X509 policy constraints'
-            },
-            {
-              'cve':  'CVE-2022-2097',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N'
-                },
-                'nvd': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N'
-                },
-                'redhat': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-327'
-              ],
-              'description':   "AES OCB mode for 32-bit x86 platforms using the AES-NI assembly optimised implementation will not encrypt the entirety of the data under some circumstances. This could reveal sixteen bytes of data that was preexisting in the memory that wasn't written. In the special case of \"in place\" encryption, sixteen bytes of the plaintext would be revealed. Since OpenSSL does not support OCB based cipher suites for TLS and DTLS, they are both unaffected. Fixed in OpenSSL 3.0.5 (Affected 3.0.0-3.0.4). Fixed in OpenSSL 1.1.1q (Affected 1.1.1-1.1.1p).",
-              'diffID':        'sha256:5e03d8cae8773cb694fff1d55da34a40d23c2349087ed15ce68476395d33753c',
-              'fixedVersions': [
-                '1.1.1q-r0'
-              ],
-              'installedVersion': '1.1.1n-r0',
-              'packageName':      'libssl1.1',
-              'purl':             'pkg:apk/alpine/libssl1.1@1.1.1n-r0?arch=x86_64&distro=3.15.1',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2022:6224',
-                'https://access.redhat.com/security/cve/CVE-2022-2097',
-                'https://bugzilla.redhat.com/2081494',
-                'https://bugzilla.redhat.com/2087911',
-                'https://bugzilla.redhat.com/2087913',
-                'https://bugzilla.redhat.com/2097310',
-                'https://bugzilla.redhat.com/2104905',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2081494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2097310',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2100554',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2104905',
-                'https://cert-portal.siemens.com/productcert/pdf/ssa-332410.pdf',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-1292',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-2068',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-2097',
-                'https://errata.almalinux.org/9/ALSA-2022-6224.html',
-                'https://errata.rockylinux.org/RLSA-2022:5818',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=919925673d6c9cfed3c1085497f5dfbbed5fc431',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=a98f339ddd7e8f487d6e0088d4a9a42324885a93',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=919925673d6c9cfed3c1085497f5dfbbed5fc431',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=a98f339ddd7e8f487d6e0088d4a9a42324885a93',
-                'https://github.com/alexcrichton/openssl-src-rs',
-                'https://linux.oracle.com/cve/CVE-2022-2097.html',
-                'https://linux.oracle.com/errata/ELSA-2022-9955.html',
-                'https://lists.debian.org/debian-lts-announce/2023/02/msg00019.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/R6CK57NBQFTPUMXAPJURCGXUYT76NQAK',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/R6CK57NBQFTPUMXAPJURCGXUYT76NQAK/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/V6567JERRHHJW2GNGJGKDRNHR7SNPZK7',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/V6567JERRHHJW2GNGJGKDRNHR7SNPZK7/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VCMNWKERPBKOEBNL7CLTTX3ZZCZLH7XA',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VCMNWKERPBKOEBNL7CLTTX3ZZCZLH7XA/',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/R6CK57NBQFTPUMXAPJURCGXUYT76NQAK',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/R6CK57NBQFTPUMXAPJURCGXUYT76NQAK/',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/V6567JERRHHJW2GNGJGKDRNHR7SNPZK7',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/V6567JERRHHJW2GNGJGKDRNHR7SNPZK7/',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/VCMNWKERPBKOEBNL7CLTTX3ZZCZLH7XA',
-                'https://nvd.nist.gov/vuln/detail/CVE-2022-2097',
-                'https://rustsec.org/advisories/RUSTSEC-2022-0032.html',
-                'https://security.gentoo.org/glsa/202210-02',
-                'https://security.netapp.com/advisory/ntap-20220715-0011',
-                'https://security.netapp.com/advisory/ntap-20220715-0011/',
-                'https://security.netapp.com/advisory/ntap-20230420-0008',
-                'https://security.netapp.com/advisory/ntap-20230420-0008/',
-                'https://security.netapp.com/advisory/ntap-20240621-0006',
-                'https://security.netapp.com/advisory/ntap-20240621-0006/',
-                'https://ubuntu.com/security/notices/USN-5502-1',
-                'https://ubuntu.com/security/notices/USN-6457-1',
-                'https://www.cve.org/CVERecord?id=CVE-2022-2097',
-                'https://www.debian.org/security/2023/dsa-5343',
-                'https://www.openssl.org/news/secadv/20220705.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: AES OCB fails to encrypt some bytes'
-            },
-            {
-              'cve':  'CVE-2022-4304',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N'
-                },
-                'nvd': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N'
-                },
-                'redhat': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-203'
-              ],
-              'description':   'A timing based side channel exists in the OpenSSL RSA Decryption implementation\nwhich could be sufficient to recover a plaintext across a network in a\nBleichenbacher style attack. To achieve a successful decryption an attacker\nwould have to be able to send a very large number of trial messages for\ndecryption. The vulnerability affects all RSA padding modes: PKCS#1 v1.5,\nRSA-OEAP and RSASVE.\n\nFor example, in a TLS connection, RSA is commonly used by a client to send an\nencrypted pre-master secret to the server. An attacker that had observed a\ngenuine connection between a client and a server could use this flaw to send\ntrial messages to the server and record the time taken to process them. After a\nsufficiently large number of messages the attacker could recover the pre-master\nsecret used for the original connection and thus be able to decrypt the\napplication data sent over that connection.',
-              'diffID':        'sha256:5e03d8cae8773cb694fff1d55da34a40d23c2349087ed15ce68476395d33753c',
-              'fixedVersions': [
-                '1.1.1t-r0'
-              ],
-              'installedVersion': '1.1.1n-r0',
-              'packageName':      'libssl1.1',
-              'purl':             'pkg:apk/alpine/libssl1.1@1.1.1n-r0?arch=x86_64&distro=3.15.1',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2023:2165',
-                'https://access.redhat.com/security/cve/CVE-2022-4304',
-                'https://bugzilla.redhat.com/1960321',
-                'https://bugzilla.redhat.com/2164440',
-                'https://bugzilla.redhat.com/2164487',
-                'https://bugzilla.redhat.com/2164492',
-                'https://bugzilla.redhat.com/2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144000',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144003',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144006',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144008',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144010',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144012',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144015',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144017',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144019',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2145170',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2158412',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164440',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164487',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164488',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164492',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164497',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164499',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164500',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4203',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4304',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4450',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0215',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0216',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0217',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0286',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0401',
-                'https://errata.almalinux.org/9/ALSA-2023-2165.html',
-                'https://errata.rockylinux.org/RLSA-2023:0946',
-                'https://linux.oracle.com/cve/CVE-2022-4304.html',
-                'https://linux.oracle.com/errata/ELSA-2023-32791.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2022-4304',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0003',
-                'https://rustsec.org/advisories/RUSTSEC-2023-0007.html',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://ubuntu.com/security/notices/USN-5844-1',
-                'https://ubuntu.com/security/notices/USN-6564-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2022-4304',
-                'https://www.openssl.org/news/secadv/20230207.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: timing attack in RSA Decryption implementation'
-            },
-            {
-              'cve':  'CVE-2023-0465',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N'
-                },
-                'redhat': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-295'
-              ],
-              'description':   "Applications that use a non-default option when verifying certificates may be\nvulnerable to an attack from a malicious CA to circumvent certain checks.\n\nInvalid certificate policies in leaf certificates are silently ignored by\nOpenSSL and other certificate policy checks are skipped for that certificate.\nA malicious CA could use this to deliberately assert invalid certificate policies\nin order to circumvent policy checking on the certificate altogether.\n\nPolicy processing is disabled by default but can be enabled by passing\nthe `-policy' argument to the command line utilities or by calling the\n`X509_VERIFY_PARAM_set1_policies()' function.",
-              'diffID':        'sha256:5e03d8cae8773cb694fff1d55da34a40d23c2349087ed15ce68476395d33753c',
-              'fixedVersions': [
-                '1.1.1t-r2'
-              ],
-              'installedVersion': '1.1.1n-r0',
-              'packageName':      'libssl1.1',
-              'purl':             'pkg:apk/alpine/libssl1.1@1.1.1n-r0?arch=x86_64&distro=3.15.1',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2023:3722',
-                'https://access.redhat.com/security/cve/CVE-2023-0465',
-                'https://bugzilla.redhat.com/2181082',
-                'https://bugzilla.redhat.com/2182561',
-                'https://bugzilla.redhat.com/2182565',
-                'https://bugzilla.redhat.com/2188461',
-                'https://bugzilla.redhat.com/2207947',
-                'https://errata.almalinux.org/9/ALSA-2023-3722.html',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=10325176f3d3e98c6e2b3bf5ab1e3b334de6947a',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=1dd43e0709fece299b15208f36cc7c76209ba0bb',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=b013765abfa80036dc779dd0e50602c57bb3bf95',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=facfb1ab745646e97a1920977ae4a9965ea61d5c',
-                'https://linux.oracle.com/cve/CVE-2023-0465.html',
-                'https://linux.oracle.com/errata/ELSA-2023-3722.html',
-                'https://lists.debian.org/debian-lts-announce/2023/06/msg00011.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-0465',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://security.netapp.com/advisory/ntap-20230414-0001/',
-                'https://ubuntu.com/security/notices/USN-6039-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-0465',
-                'https://www.debian.org/security/2023/dsa-5417',
-                'https://www.openssl.org/news/secadv/20230328.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: Invalid certificate policies in leaf certificates are silently ignored'
-            },
-            {
-              'cve':  'CVE-2023-2650',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '6.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-770'
-              ],
-              'description':   "Issue summary: Processing some specially crafted ASN.1 object identifiers or\ndata containing them may be very slow.\n\nImpact summary: Applications that use OBJ_obj2txt() directly, or use any of\nthe OpenSSL subsystems OCSP, PKCS7/SMIME, CMS, CMP/CRMF or TS with no message\nsize limit may experience notable to very long delays when processing those\nmessages, which may lead to a Denial of Service.\n\nAn OBJECT IDENTIFIER is composed of a series of numbers - sub-identifiers -\nmost of which have no size limit.  OBJ_obj2txt() may be used to translate\nan ASN.1 OBJECT IDENTIFIER given in DER encoding form (using the OpenSSL\ntype ASN1_OBJECT) to its canonical numeric text form, which are the\nsub-identifiers of the OBJECT IDENTIFIER in decimal form, separated by\nperiods.\n\nWhen one of the sub-identifiers in the OBJECT IDENTIFIER is very large\n(these are sizes that are seen as absurdly large, taking up tens or hundreds\nof KiBs), the translation to a decimal number in text may take a very long\ntime.  The time complexity is O(n^2) with 'n' being the size of the\nsub-identifiers in bytes (*).\n\nWith OpenSSL 3.0, support to fetch cryptographic algorithms using names /\nidentifiers in string form was introduced.  This includes using OBJECT\nIDENTIFIERs in canonical numeric text form as identifiers for fetching\nalgorithms.\n\nSuch OBJECT IDENTIFIERs may be received through the ASN.1 structure\nAlgorithmIdentifier, which is commonly used in multiple protocols to specify\nwhat cryptographic algorithm should be used to sign or verify, encrypt or\ndecrypt, or digest passed data.\n\nApplications that call OBJ_obj2txt() directly with untrusted data are\naffected, with any version of OpenSSL.  If the use is for the mere purpose\nof display, the severity is considered low.\n\nIn OpenSSL 3.0 and newer, this affects the subsystems OCSP, PKCS7/SMIME,\nCMS, CMP/CRMF or TS.  It also impacts anything that processes X.509\ncertificates, including simple things like verifying its signature.\n\nThe impact on TLS is relatively low, because all versions of OpenSSL have a\n100KiB limit on the peer's certificate chain.  Additionally, this only\nimpacts clients, or servers that have explicitly enabled client\nauthentication.\n\nIn OpenSSL 1.1.1 and 1.0.2, this only affects displaying diverse objects,\nsuch as X.509 certificates.  This is assumed to not happen in such a way\nthat it would cause a Denial of Service, so these versions are considered\nnot affected by this issue in such a way that it would be cause for concern,\nand the severity is therefore considered low.",
-              'diffID':        'sha256:5e03d8cae8773cb694fff1d55da34a40d23c2349087ed15ce68476395d33753c',
-              'fixedVersions': [
-                '1.1.1u-r0'
-              ],
-              'installedVersion': '1.1.1n-r0',
-              'packageName':      'libssl1.1',
-              'purl':             'pkg:apk/alpine/libssl1.1@1.1.1n-r0?arch=x86_64&distro=3.15.1',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2023/05/30/1',
-                'https://access.redhat.com/errata/RHSA-2023:6330',
-                'https://access.redhat.com/security/cve/CVE-2023-2650',
-                'https://bugzilla.redhat.com/1858038',
-                'https://bugzilla.redhat.com/2207947',
-                'https://errata.almalinux.org/9/ALSA-2023-6330.html',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=423a2bc737a908ad0c77bda470b2b59dc879936b',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=853c5e56ee0b8650c73140816bb8b91d6163422c',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=9e209944b35cf82368071f160a744b6178f9b098',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=db779b0e10b047f2585615e0b8f2acdf21f8544a',
-                'https://linux.oracle.com/cve/CVE-2023-2650.html',
-                'https://linux.oracle.com/errata/ELSA-2023-6330.html',
-                'https://lists.debian.org/debian-lts-announce/2023/06/msg00011.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-2650',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0009',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://security.netapp.com/advisory/ntap-20230703-0001/',
-                'https://security.netapp.com/advisory/ntap-20231027-0009/',
-                'https://ubuntu.com/security/notices/USN-6119-1',
-                'https://ubuntu.com/security/notices/USN-6188-1',
-                'https://ubuntu.com/security/notices/USN-6672-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-2650',
-                'https://www.debian.org/security/2023/dsa-5417',
-                'https://www.openssl.org/news/secadv/20230530.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: Possible DoS translating ASN.1 object identifiers'
-            },
-            {
-              'cve':  'CVE-2023-3446',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L'
-                },
-                'redhat': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L'
-                }
-              },
-              'cwes': [
-                'CWE-606',
-                'CWE-1333'
-              ],
-              'description':   "Issue summary: Checking excessively long DH keys or parameters may be very slow.\n\nImpact summary: Applications that use the functions DH_check(), DH_check_ex()\nor EVP_PKEY_param_check() to check a DH key or DH parameters may experience long\ndelays. Where the key or parameters that are being checked have been obtained\nfrom an untrusted source this may lead to a Denial of Service.\n\nThe function DH_check() performs various checks on DH parameters. One of those\nchecks confirms that the modulus ('p' parameter) is not too large. Trying to use\na very large modulus is slow and OpenSSL will not normally use a modulus which\nis over 10,000 bits in length.\n\nHowever the DH_check() function checks numerous aspects of the key or parameters\nthat have been supplied. Some of those checks use the supplied modulus value\neven if it has already been found to be too large.\n\nAn application that calls DH_check() and supplies a key or parameters obtained\nfrom an untrusted source could be vulernable to a Denial of Service attack.\n\nThe function DH_check() is itself called by a number of other OpenSSL functions.\nAn application calling any of those other functions may similarly be affected.\nThe other functions affected by this are DH_check_ex() and\nEVP_PKEY_param_check().\n\nAlso vulnerable are the OpenSSL dhparam and pkeyparam command line applications\nwhen using the '-check' option.\n\nThe OpenSSL SSL/TLS implementation is not affected by this issue.\nThe OpenSSL 3.0 and 3.1 FIPS providers are not affected by this issue.",
-              'diffID':        'sha256:5e03d8cae8773cb694fff1d55da34a40d23c2349087ed15ce68476395d33753c',
-              'fixedVersions': [
-                '1.1.1u-r2'
-              ],
-              'installedVersion': '1.1.1n-r0',
-              'packageName':      'libssl1.1',
-              'purl':             'pkg:apk/alpine/libssl1.1@1.1.1n-r0?arch=x86_64&distro=3.15.1',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2023/07/19/4',
-                'http://www.openwall.com/lists/oss-security/2023/07/19/5',
-                'http://www.openwall.com/lists/oss-security/2023/07/19/6',
-                'http://www.openwall.com/lists/oss-security/2023/07/31/1',
-                'http://www.openwall.com/lists/oss-security/2024/05/16/1',
-                'https://access.redhat.com/errata/RHSA-2024:2447',
-                'https://access.redhat.com/security/cve/CVE-2023-3446',
-                'https://bugzilla.redhat.com/2223016',
-                'https://bugzilla.redhat.com/2224962',
-                'https://bugzilla.redhat.com/2227852',
-                'https://bugzilla.redhat.com/2248616',
-                'https://bugzilla.redhat.com/2257571',
-                'https://bugzilla.redhat.com/2258502',
-                'https://bugzilla.redhat.com/2259944',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2224962',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2257582',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2257583',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2258677',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2258688',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2258691',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2258694',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2258700',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-36763',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-36764',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3446',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45229',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45231',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45232',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45233',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45235',
-                'https://errata.almalinux.org/9/ALSA-2024-2447.html',
-                'https://errata.rockylinux.org/RLSA-2024:2264',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=1fa20cf2f506113c761777127a38bce5068740eb',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=8780a896543a654e757db1b9396383f9d8095528',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=9a0a4d3c1e7138915563c0df4fe6a3f9377b839c',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=fc9867c1e03c22ebf56943be205202e576aabf23',
-                'https://linux.oracle.com/cve/CVE-2023-3446.html',
-                'https://linux.oracle.com/errata/ELSA-2024-2447.html',
-                'https://lists.debian.org/debian-lts-announce/2023/08/msg00019.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-3446',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://security.netapp.com/advisory/ntap-20230803-0011/',
-                'https://ubuntu.com/security/notices/USN-6435-1',
-                'https://ubuntu.com/security/notices/USN-6435-2',
-                'https://ubuntu.com/security/notices/USN-6450-1',
-                'https://ubuntu.com/security/notices/USN-6709-1',
-                'https://ubuntu.com/security/notices/USN-7018-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-3446',
-                'https://www.openssl.org/news/secadv/20230719.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: Excessive time spent checking DH keys and parameters'
-            },
-            {
-              'cve':  'CVE-2023-3817',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L'
-                },
-                'redhat': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L'
-                }
-              },
-              'cwes': [
-                'CWE-606',
-                'CWE-834'
-              ],
-              'description':   'Issue summary: Checking excessively long DH keys or parameters may be very slow.\n\nImpact summary: Applications that use the functions DH_check(), DH_check_ex()\nor EVP_PKEY_param_check() to check a DH key or DH parameters may experience long\ndelays. Where the key or parameters that are being checked have been obtained\nfrom an untrusted source this may lead to a Denial of Service.\n\nThe function DH_check() performs various checks on DH parameters. After fixing\nCVE-2023-3446 it was discovered that a large q parameter value can also trigger\nan overly long computation during some of these checks. A correct q value,\nif present, cannot be larger than the modulus p parameter, thus it is\nunnecessary to perform these checks if q is larger than p.\n\nAn application that calls DH_check() and supplies a key or parameters obtained\nfrom an untrusted source could be vulnerable to a Denial of Service attack.\n\nThe function DH_check() is itself called by a number of other OpenSSL functions.\nAn application calling any of those other functions may similarly be affected.\nThe other functions affected by this are DH_check_ex() and\nEVP_PKEY_param_check().\n\nAlso vulnerable are the OpenSSL dhparam and pkeyparam command line applications\nwhen using the "-check" option.\n\nThe OpenSSL SSL/TLS implementation is not affected by this issue.\n\nThe OpenSSL 3.0 and 3.1 FIPS providers are not affected by this issue.',
-              'diffID':        'sha256:5e03d8cae8773cb694fff1d55da34a40d23c2349087ed15ce68476395d33753c',
-              'fixedVersions': [
-                '1.1.1v-r0'
-              ],
-              'installedVersion': '1.1.1n-r0',
-              'packageName':      'libssl1.1',
-              'purl':             'pkg:apk/alpine/libssl1.1@1.1.1n-r0?arch=x86_64&distro=3.15.1',
-              'references':       [
-                'http://seclists.org/fulldisclosure/2023/Jul/43',
-                'http://www.openwall.com/lists/oss-security/2023/07/31/1',
-                'http://www.openwall.com/lists/oss-security/2023/09/22/11',
-                'http://www.openwall.com/lists/oss-security/2023/09/22/9',
-                'http://www.openwall.com/lists/oss-security/2023/11/06/2',
-                'https://access.redhat.com/errata/RHSA-2024:2447',
-                'https://access.redhat.com/security/cve/CVE-2023-3817',
-                'https://bugzilla.redhat.com/2223016',
-                'https://bugzilla.redhat.com/2224962',
-                'https://bugzilla.redhat.com/2227852',
-                'https://bugzilla.redhat.com/2248616',
-                'https://bugzilla.redhat.com/2257571',
-                'https://bugzilla.redhat.com/2258502',
-                'https://bugzilla.redhat.com/2259944',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2224962',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2227852',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2248616',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2270358',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3446',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3817',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-5678',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-2408',
-                'https://errata.almalinux.org/9/ALSA-2024-2447.html',
-                'https://errata.rockylinux.org/RLSA-2023:7877',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=6a1eb62c29db6cb5eec707f9338aee00f44e26f5',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=869ad69aadd985c7b8ca6f4e5dd0eb274c9f3644',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=9002fd07327a91f35ba6c1307e71fa6fd4409b7f',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=91ddeba0f2269b017dc06c46c993a788974b1aa5',
-                'https://linux.oracle.com/cve/CVE-2023-3817.html',
-                'https://linux.oracle.com/errata/ELSA-2024-2447.html',
-                'https://lists.debian.org/debian-lts-announce/2023/08/msg00019.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-3817',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://security.netapp.com/advisory/ntap-20230818-0014/',
-                'https://security.netapp.com/advisory/ntap-20231027-0008/',
-                'https://security.netapp.com/advisory/ntap-20240621-0006/',
-                'https://ubuntu.com/security/notices/USN-6435-1',
-                'https://ubuntu.com/security/notices/USN-6435-2',
-                'https://ubuntu.com/security/notices/USN-6450-1',
-                'https://ubuntu.com/security/notices/USN-6709-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-3817',
-                'https://www.openssl.org/news/secadv/20230731.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'OpenSSL: Excessive time spent checking DH q parameter value'
-            },
-            {
-              'cve':  'CVE-2023-5678',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L'
-                },
-                'redhat': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L'
-                }
-              },
-              'cwes': [
-                'CWE-606',
-                'CWE-754'
-              ],
-              'description':   "Issue summary: Generating excessively long X9.42 DH keys or checking\nexcessively long X9.42 DH keys or parameters may be very slow.\n\nImpact summary: Applications that use the functions DH_generate_key() to\ngenerate an X9.42 DH key may experience long delays.  Likewise, applications\nthat use DH_check_pub_key(), DH_check_pub_key_ex() or EVP_PKEY_public_check()\nto check an X9.42 DH key or X9.42 DH parameters may experience long delays.\nWhere the key or parameters that are being checked have been obtained from\nan untrusted source this may lead to a Denial of Service.\n\nWhile DH_check() performs all the necessary checks (as of CVE-2023-3817),\nDH_check_pub_key() doesn't make any of these checks, and is therefore\nvulnerable for excessively large P and Q parameters.\n\nLikewise, while DH_generate_key() performs a check for an excessively large\nP, it doesn't check for an excessively large Q.\n\nAn application that calls DH_generate_key() or DH_check_pub_key() and\nsupplies a key or parameters obtained from an untrusted source could be\nvulnerable to a Denial of Service attack.\n\nDH_generate_key() and DH_check_pub_key() are also called by a number of\nother OpenSSL functions.  An application calling any of those other\nfunctions may similarly be affected.  The other functions affected by this\nare DH_check_pub_key_ex(), EVP_PKEY_public_check(), and EVP_PKEY_generate().\n\nAlso vulnerable are the OpenSSL pkey command line application when using the\n\"-pubcheck\" option, as well as the OpenSSL genpkey command line application.\n\nThe OpenSSL SSL/TLS implementation is not affected by this issue.\n\nThe OpenSSL 3.0 and 3.1 FIPS providers are not affected by this issue.",
-              'diffID':        'sha256:5e03d8cae8773cb694fff1d55da34a40d23c2349087ed15ce68476395d33753c',
-              'fixedVersions': [
-                '1.1.1w-r1'
-              ],
-              'installedVersion': '1.1.1n-r0',
-              'packageName':      'libssl1.1',
-              'purl':             'pkg:apk/alpine/libssl1.1@1.1.1n-r0?arch=x86_64&distro=3.15.1',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2024/03/11/1',
-                'https://access.redhat.com/errata/RHSA-2024:2447',
-                'https://access.redhat.com/security/cve/CVE-2023-5678',
-                'https://bugzilla.redhat.com/2223016',
-                'https://bugzilla.redhat.com/2224962',
-                'https://bugzilla.redhat.com/2227852',
-                'https://bugzilla.redhat.com/2248616',
-                'https://bugzilla.redhat.com/2257571',
-                'https://bugzilla.redhat.com/2258502',
-                'https://bugzilla.redhat.com/2259944',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2224962',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2227852',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2248616',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2270358',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3446',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3817',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-5678',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-2408',
-                'https://errata.almalinux.org/9/ALSA-2024-2447.html',
-                'https://errata.rockylinux.org/RLSA-2023:7877',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=34efaef6c103d636ab507a0cc34dca4d3aecc055',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=710fee740904b6290fef0dd5536fbcedbc38ff0c',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=db925ae2e65d0d925adef429afc37f75bd1c2017',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=ddeb4b6c6d527e54ce9a99cba785c0f7776e54b6',
-                'https://linux.oracle.com/cve/CVE-2023-5678.html',
-                'https://linux.oracle.com/errata/ELSA-2024-2447.html',
-                'https://lists.debian.org/debian-lts-announce/2024/10/msg00033.html',
-                'https://lists.debian.org/debian-lts-announce/2024/11/msg00000.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-5678',
-                'https://security.netapp.com/advisory/ntap-20231130-0010/',
-                'https://ubuntu.com/security/notices/USN-6622-1',
-                'https://ubuntu.com/security/notices/USN-6632-1',
-                'https://ubuntu.com/security/notices/USN-6709-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-5678',
-                'https://www.openssl.org/news/secadv/20231106.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: Generating excessively long X9.42 DH keys or checking excessively long X9.42 DH keys or parameters may be very slow'
-            },
-            {
-              'cve':  'CVE-2022-28391',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '8.8',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-88'
-              ],
-              'description':   "BusyBox through 1.35.0 allows remote attackers to execute arbitrary code if netstat is used to print a DNS PTR record's value to a VT compatible terminal. Alternatively, the attacker could choose to change the terminal's colors.",
-              'diffID':        'sha256:5e03d8cae8773cb694fff1d55da34a40d23c2349087ed15ce68476395d33753c',
-              'fixedVersions': [
-                '1.34.1-r5'
-              ],
-              'installedVersion': '1.34.1-r4',
-              'packageName':      'ssl_client',
-              'purl':             'pkg:apk/alpine/ssl_client@1.34.1-r4?arch=x86_64&distro=3.15.1',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2022-28391',
-                'https://git.alpinelinux.org/aports/plain/main/busybox/0001-libbb-sockaddr2str-ensure-only-printable-characters-.patch',
-                'https://git.alpinelinux.org/aports/plain/main/busybox/0002-nslookup-sanitize-all-printed-strings-with-printable.patch',
-                'https://gitlab.alpinelinux.org/alpine/aports/-/issues/13661',
-                'https://nvd.nist.gov/vuln/detail/CVE-2022-28391',
-                'https://www.cve.org/CVERecord?id=CVE-2022-28391'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: remote attackers may execute arbitrary code if netstat is used'
-            },
-            {
-              'cve':  'CVE-2022-37434',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '9.8',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-787',
-                'CWE-120'
-              ],
-              'description':   'zlib through 1.2.12 has a heap-based buffer over-read or buffer overflow in inflate in inflate.c via a large gzip header extra field. NOTE: only applications that call inflateGetHeader are affected. Some common applications bundle the affected zlib source code but may be unable to call inflateGetHeader (e.g., see the nodejs/node reference).',
-              'diffID':        'sha256:5e03d8cae8773cb694fff1d55da34a40d23c2349087ed15ce68476395d33753c',
-              'fixedVersions': [
-                '1.2.12-r2'
-              ],
-              'installedVersion': '1.2.11-r3',
-              'packageName':      'zlib',
-              'purl':             'pkg:apk/alpine/zlib@1.2.11-r3?arch=x86_64&distro=3.15.1',
-              'references':       [
-                'http://seclists.org/fulldisclosure/2022/Oct/37',
-                'http://seclists.org/fulldisclosure/2022/Oct/38',
-                'http://seclists.org/fulldisclosure/2022/Oct/41',
-                'http://seclists.org/fulldisclosure/2022/Oct/42',
-                'http://www.openwall.com/lists/oss-security/2022/08/05/2',
-                'http://www.openwall.com/lists/oss-security/2022/08/09/1',
-                'https://access.redhat.com/errata/RHSA-2022:8291',
-                'https://access.redhat.com/security/cve/CVE-2022-37434',
-                'https://bugzilla.redhat.com/2116639',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2053198',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2077431',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2081296',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2116639',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-37434',
-                'https://errata.almalinux.org/9/ALSA-2022-8291.html',
-                'https://errata.rockylinux.org/RLSA-2022:8291',
-                'https://github.com/curl/curl/issues/9271',
-                'https://github.com/ivd38/zlib_overflow',
-                'https://github.com/madler/zlib/blob/21767c654d31d2dccdde4330529775c6c5fd5389/zlib.h#L1062-L1063',
-                'https://github.com/madler/zlib/commit/1eb7682f845ac9e9bf9ae35bbfb3bad5dacbd91d',
-                'https://github.com/madler/zlib/commit/eff308af425b67093bab25f80f1ae950166bece1',
-                'https://github.com/nodejs/node/blob/75b68c6e4db515f76df73af476eccf382bbcb00a/deps/zlib/inflate.c#L762-L764',
-                'https://linux.oracle.com/cve/CVE-2022-37434.html',
-                'https://linux.oracle.com/errata/ELSA-2023-1095.html',
-                'https://lists.debian.org/debian-lts-announce/2022/09/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JWN4VE3JQR4O2SOUS5TXNLANRPMHWV4I/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NMBOJ77A7T7PQCARMDUK75TE6LLESZ3O/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PAVPQNCG3XRLCLNSQRM3KAN5ZFMVXVTY/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/X5U7OTKZSHY2I3ZFJSR2SHFHW72RKGDK/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YRQAI7H4M4RQZ2IWZUEEXECBE5D56BH2/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2022-37434',
-                'https://security.netapp.com/advisory/ntap-20220901-0005/',
-                'https://security.netapp.com/advisory/ntap-20230427-0007/',
-                'https://support.apple.com/kb/HT213488',
-                'https://support.apple.com/kb/HT213489',
-                'https://support.apple.com/kb/HT213490',
-                'https://support.apple.com/kb/HT213491',
-                'https://support.apple.com/kb/HT213493',
-                'https://support.apple.com/kb/HT213494',
-                'https://ubuntu.com/security/notices/USN-5570-1',
-                'https://ubuntu.com/security/notices/USN-5570-2',
-                'https://ubuntu.com/security/notices/USN-5573-1',
-                'https://ubuntu.com/security/notices/USN-6736-1',
-                'https://ubuntu.com/security/notices/USN-6736-2',
-                'https://www.cve.org/CVERecord?id=CVE-2022-37434',
-                'https://www.debian.org/security/2022/dsa-5218'
-              ],
-              'severity':   'CRITICAL',
-              'suppressed': false,
-              'title':      'zlib: heap-based buffer over-read and overflow in inflate() in inflate.c via a large gzip header extra field'
-            },
-            {
-              'cve':  'CVE-2018-25032',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'nvd': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '8.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-787'
-              ],
-              'description':   'zlib before 1.2.12 allows memory corruption when deflating (i.e., when compressing) if the input has many distant matches.',
-              'diffID':        'sha256:5e03d8cae8773cb694fff1d55da34a40d23c2349087ed15ce68476395d33753c',
-              'fixedVersions': [
-                '1.2.12-r0'
-              ],
-              'installedVersion': '1.2.11-r3',
-              'packageName':      'zlib',
-              'purl':             'pkg:apk/alpine/zlib@1.2.11-r3?arch=x86_64&distro=3.15.1',
-              'references':       [
-                'http://seclists.org/fulldisclosure/2022/May/33',
-                'http://seclists.org/fulldisclosure/2022/May/35',
-                'http://seclists.org/fulldisclosure/2022/May/38',
-                'http://www.openwall.com/lists/oss-security/2022/03/25/2',
-                'http://www.openwall.com/lists/oss-security/2022/03/26/1',
-                'https://access.redhat.com/errata/RHSA-2022:8420',
-                'https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-25032.json',
-                'https://access.redhat.com/security/cve/CVE-2018-25032',
-                'https://bugzilla.redhat.com/2067945',
-                'https://cert-portal.siemens.com/productcert/pdf/ssa-333517.pdf',
-                'https://errata.almalinux.org/9/ALSA-2022-8420.html',
-                'https://github.com/advisories/GHSA-jc36-42cf-vqwj',
-                'https://github.com/madler/zlib/commit/5c44459c3b28a9bd3283aaceab7c615f8020c531',
-                'https://github.com/madler/zlib/compare/v1.2.11...v1.2.12',
-                'https://github.com/madler/zlib/issues/605',
-                'https://github.com/rubysec/ruby-advisory-db/blob/master/gems/nokogiri/CVE-2018-25032.yml',
-                'https://github.com/sparklemotion/nokogiri/releases/tag/v1.13.4',
-                'https://github.com/sparklemotion/nokogiri/security/advisories/GHSA-v6gp-9mmm-c6p5',
-                'https://groups.google.com/g/ruby-security-ann/c/vX7qSjsvWis/m/TJWN4oOKBwAJ',
-                'https://linux.oracle.com/cve/CVE-2018-25032.html',
-                'https://linux.oracle.com/errata/ELSA-2022-9565.html',
-                'https://lists.debian.org/debian-lts-announce/2022/04/msg00000.html',
-                'https://lists.debian.org/debian-lts-announce/2022/05/msg00008.html',
-                'https://lists.debian.org/debian-lts-announce/2022/09/msg00023.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DCZFIJBJTZ7CL5QXBFKTQ22Q26VINRUF/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DF62MVMH3QUGMBDCB3DY2ERQ6EBHTADB/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JZZPTWRYQULAOL3AW7RZJNVZ2UONXCV4/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NS2D2GFPFGOJUL4WQ3DUAY7HF4VWQ77F/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VOKNP2L734AEL47NRYGVZIKEFOUBQY5Y/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/XOKFMSNQ5D5WGMALBNBXU3GE442V74WU/',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/DCZFIJBJTZ7CL5QXBFKTQ22Q26VINRUF',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/DCZFIJBJTZ7CL5QXBFKTQ22Q26VINRUF/',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/DF62MVMH3QUGMBDCB3DY2ERQ6EBHTADB',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/DF62MVMH3QUGMBDCB3DY2ERQ6EBHTADB/',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/JZZPTWRYQULAOL3AW7RZJNVZ2UONXCV4',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/JZZPTWRYQULAOL3AW7RZJNVZ2UONXCV4/',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/NS2D2GFPFGOJUL4WQ3DUAY7HF4VWQ77F',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/NS2D2GFPFGOJUL4WQ3DUAY7HF4VWQ77F/',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/VOKNP2L734AEL47NRYGVZIKEFOUBQY5Y',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/VOKNP2L734AEL47NRYGVZIKEFOUBQY5Y/',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/XOKFMSNQ5D5WGMALBNBXU3GE442V74WU',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/XOKFMSNQ5D5WGMALBNBXU3GE442V74WU/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2018-25032',
-                'https://security.gentoo.org/glsa/202210-42',
-                'https://security.netapp.com/advisory/ntap-20220526-0009',
-                'https://security.netapp.com/advisory/ntap-20220526-0009/',
-                'https://security.netapp.com/advisory/ntap-20220729-0004',
-                'https://security.netapp.com/advisory/ntap-20220729-0004/',
-                'https://support.apple.com/kb/HT213255',
-                'https://support.apple.com/kb/HT213256',
-                'https://support.apple.com/kb/HT213257',
-                'https://ubuntu.com/security/notices/USN-5355-1',
-                'https://ubuntu.com/security/notices/USN-5355-2',
-                'https://ubuntu.com/security/notices/USN-5359-1',
-                'https://ubuntu.com/security/notices/USN-5359-2',
-                'https://ubuntu.com/security/notices/USN-5739-1',
-                'https://ubuntu.com/security/notices/USN-6736-1',
-                'https://ubuntu.com/security/notices/USN-6736-2',
-                'https://www.cve.org/CVERecord?id=CVE-2018-25032',
-                'https://www.debian.org/security/2022/dsa-5111',
-                'https://www.openwall.com/lists/oss-security/2022/03/24/1',
-                'https://www.openwall.com/lists/oss-security/2022/03/28/1',
-                'https://www.openwall.com/lists/oss-security/2022/03/28/3',
-                'https://www.oracle.com/security-alerts/cpujul2022.html'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'zlib: A flaw found in zlib when compressing (not decompressing) certain inputs'
-            }
-          ]
-        }
-      ],
-      'summary': {
-        'critical':   1,
-        'high':       11,
-        'low':        0,
-        'medium':     14,
-        'suppressed': 0,
-        'unknown':    0
-      }
-    }
-  },
-  {
-    'id':    'default/5f72489ae3e2c5714187201135a8a4a99f3d07307f2e518949048532191ef598',
-    'type':  'storage.sbomscanner.kubewarden.io.vulnerabilityreport',
-    'links': {
-      'patch':  'https://localhost:8005/v1/storage.sbomscanner.kubewarden.io.vulnerabilityreports/default/5f72489ae3e2c5714187201135a8a4a99f3d07307f2e518949048532191ef598',
-      'remove': 'https://localhost:8005/v1/storage.sbomscanner.kubewarden.io.vulnerabilityreports/default/5f72489ae3e2c5714187201135a8a4a99f3d07307f2e518949048532191ef598',
-      'self':   'https://localhost:8005/v1/storage.sbomscanner.kubewarden.io.vulnerabilityreports/default/5f72489ae3e2c5714187201135a8a4a99f3d07307f2e518949048532191ef598',
-      'update': 'https://localhost:8005/v1/storage.sbomscanner.kubewarden.io.vulnerabilityreports/default/5f72489ae3e2c5714187201135a8a4a99f3d07307f2e518949048532191ef598',
-      'view':   'https://localhost:8005/apis/storage.sbomscanner.kubewarden.io/v1alpha1/namespaces/default/vulnerabilityreports/5f72489ae3e2c5714187201135a8a4a99f3d07307f2e518949048532191ef598'
-    },
-    'apiVersion':    'storage.sbomscanner.kubewarden.io/v1alpha1',
-    'imageMetadata': {
-      'digest':      'sha256:1d2cfbb29672ce268a77b3b9eca532a96356f4843044d22a9677231e1333e271',
-      'platform':    'linux/arm/v6',
-      'registry':    'lsong-demo1',
-      'registryURI': 'registry-1.docker.io',
-      'repository':  'library/alpine',
-      'tag':         '3.14.1'
-    },
-    'kind':     'VulnerabilityReport',
-    'metadata': {
-      'creationTimestamp': '2026-01-14T18:51:18Z',
-      'fields':            [
-        '5f72489ae3e2c5714187201135a8a4a99f3d07307f2e518949048532191ef598',
-        'registry-1.docker.io/library/alpine:3.14.1',
-        'linux/arm/v6',
-        '47 (0 suppressed)'
-      ],
-      'labels': {
-        'app.kubernetes.io/managed-by':          'sbomscanner',
-        'app.kubernetes.io/part-of':             'sbomscanner',
-        'sbomscanner.kubewarden.io/scanjob-uid': '445c600a-c4b6-40b3-bd71-f2d2140a37d5'
-      },
-      'name':            '5f72489ae3e2c5714187201135a8a4a99f3d07307f2e518949048532191ef598',
-      'namespace':       'default',
-      'ownerReferences': [
-        {
-          'apiVersion':         'storage.sbomscanner.kubewarden.io/v1alpha1',
-          'blockOwnerDeletion': true,
-          'controller':         true,
-          'kind':               'SBOM',
-          'name':               '5f72489ae3e2c5714187201135a8a4a99f3d07307f2e518949048532191ef598',
-          'uid':                'a734fdbc-b3bb-45b8-95fb-7efa322d5e35'
-        }
-      ],
-      'relationships': [
-        {
-          'fromId':   'default/5f72489ae3e2c5714187201135a8a4a99f3d07307f2e518949048532191ef598',
-          'fromType': 'storage.sbomscanner.kubewarden.io.sbom',
-          'rel':      'owner',
-          'state':    'active',
-          'message':  'Resource is current'
-        }
-      ],
-      'resourceVersion': '1',
-      'state':           {
-        'error':         false,
-        'message':       'Resource is current',
-        'name':          'active',
-        'transitioning': false
-      },
-      'uid': '8596bccb-3c2a-437a-b1a1-77093ae39eb1'
-    },
-    'report': {
-      'results': [
-        {
-          'class':           'os-pkgs',
-          'target':          '/var/run/worker/trivy.sbom.1636435345.json (alpine 3.14.1)',
-          'type':            'alpine',
-          'vulnerabilities': [
-            {
-              'cve':  'CVE-2021-42378',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the getvar_i function",
-              'diffID':        'sha256:653214eafbfdfbb9f95018b7cfa8c568d757aaafa7d77419b235f082fd19f291',
-              'fixedVersions': [
-                '1.33.1-r6'
-              ],
-              'installedVersion': '1.33.1-r3',
-              'packageName':      'busybox',
-              'purl':             'pkg:apk/alpine/busybox@1.33.1-r3?arch=armhf&distro=3.14.1',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42378',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42378',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42378'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the getvar_i()'
-            },
-            {
-              'cve':  'CVE-2021-42379',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the next_input_file function",
-              'diffID':        'sha256:653214eafbfdfbb9f95018b7cfa8c568d757aaafa7d77419b235f082fd19f291',
-              'fixedVersions': [
-                '1.33.1-r6'
-              ],
-              'installedVersion': '1.33.1-r3',
-              'packageName':      'busybox',
-              'purl':             'pkg:apk/alpine/busybox@1.33.1-r3?arch=armhf&distro=3.14.1',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42379',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42379',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42379'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the next_input_file()'
-            },
-            {
-              'cve':  'CVE-2021-42380',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the clrvar function",
-              'diffID':        'sha256:653214eafbfdfbb9f95018b7cfa8c568d757aaafa7d77419b235f082fd19f291',
-              'fixedVersions': [
-                '1.33.1-r6'
-              ],
-              'installedVersion': '1.33.1-r3',
-              'packageName':      'busybox',
-              'purl':             'pkg:apk/alpine/busybox@1.33.1-r3?arch=armhf&distro=3.14.1',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42380',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42380',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42380'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the clrvar()'
-            },
-            {
-              'cve':  'CVE-2021-42381',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the hash_init function",
-              'diffID':        'sha256:653214eafbfdfbb9f95018b7cfa8c568d757aaafa7d77419b235f082fd19f291',
-              'fixedVersions': [
-                '1.33.1-r6'
-              ],
-              'installedVersion': '1.33.1-r3',
-              'packageName':      'busybox',
-              'purl':             'pkg:apk/alpine/busybox@1.33.1-r3?arch=armhf&distro=3.14.1',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42381',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42381',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42381'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the hash_init()'
-            },
-            {
-              'cve':  'CVE-2021-42382',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the getvar_s function",
-              'diffID':        'sha256:653214eafbfdfbb9f95018b7cfa8c568d757aaafa7d77419b235f082fd19f291',
-              'fixedVersions': [
-                '1.33.1-r6'
-              ],
-              'installedVersion': '1.33.1-r3',
-              'packageName':      'busybox',
-              'purl':             'pkg:apk/alpine/busybox@1.33.1-r3?arch=armhf&distro=3.14.1',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42382',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42382',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42382'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the getvar_s()'
-            },
-            {
-              'cve':  'CVE-2021-42383',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the evaluate function",
-              'diffID':        'sha256:653214eafbfdfbb9f95018b7cfa8c568d757aaafa7d77419b235f082fd19f291',
-              'fixedVersions': [
-                '1.33.1-r6'
-              ],
-              'installedVersion': '1.33.1-r3',
-              'packageName':      'busybox',
-              'purl':             'pkg:apk/alpine/busybox@1.33.1-r3?arch=armhf&distro=3.14.1',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42383',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42383',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42383'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the evaluate()'
-            },
-            {
-              'cve':  'CVE-2021-42384',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the handle_special function",
-              'diffID':        'sha256:653214eafbfdfbb9f95018b7cfa8c568d757aaafa7d77419b235f082fd19f291',
-              'fixedVersions': [
-                '1.33.1-r6'
-              ],
-              'installedVersion': '1.33.1-r3',
-              'packageName':      'busybox',
-              'purl':             'pkg:apk/alpine/busybox@1.33.1-r3?arch=armhf&distro=3.14.1',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42384',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42384',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42384'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the handle_special()'
-            },
-            {
-              'cve':  'CVE-2021-42385',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the evaluate function",
-              'diffID':        'sha256:653214eafbfdfbb9f95018b7cfa8c568d757aaafa7d77419b235f082fd19f291',
-              'fixedVersions': [
-                '1.33.1-r6'
-              ],
-              'installedVersion': '1.33.1-r3',
-              'packageName':      'busybox',
-              'purl':             'pkg:apk/alpine/busybox@1.33.1-r3?arch=armhf&distro=3.14.1',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42385',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42385',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42385'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the evaluate()'
-            },
-            {
-              'cve':  'CVE-2021-42386',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the nvalloc function",
-              'diffID':        'sha256:653214eafbfdfbb9f95018b7cfa8c568d757aaafa7d77419b235f082fd19f291',
-              'fixedVersions': [
-                '1.33.1-r6'
-              ],
-              'installedVersion': '1.33.1-r3',
-              'packageName':      'busybox',
-              'purl':             'pkg:apk/alpine/busybox@1.33.1-r3?arch=armhf&distro=3.14.1',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42386',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42386',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42386'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the nvalloc()'
-            },
-            {
-              'cve':  'CVE-2022-28391',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '8.8',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-88'
-              ],
-              'description':   "BusyBox through 1.35.0 allows remote attackers to execute arbitrary code if netstat is used to print a DNS PTR record's value to a VT compatible terminal. Alternatively, the attacker could choose to change the terminal's colors.",
-              'diffID':        'sha256:653214eafbfdfbb9f95018b7cfa8c568d757aaafa7d77419b235f082fd19f291',
-              'fixedVersions': [
-                '1.33.1-r7'
-              ],
-              'installedVersion': '1.33.1-r3',
-              'packageName':      'busybox',
-              'purl':             'pkg:apk/alpine/busybox@1.33.1-r3?arch=armhf&distro=3.14.1',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2022-28391',
-                'https://git.alpinelinux.org/aports/plain/main/busybox/0001-libbb-sockaddr2str-ensure-only-printable-characters-.patch',
-                'https://git.alpinelinux.org/aports/plain/main/busybox/0002-nslookup-sanitize-all-printed-strings-with-printable.patch',
-                'https://gitlab.alpinelinux.org/alpine/aports/-/issues/13661',
-                'https://nvd.nist.gov/vuln/detail/CVE-2022-28391',
-                'https://www.cve.org/CVERecord?id=CVE-2022-28391'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: remote attackers may execute arbitrary code if netstat is used'
-            },
-            {
-              'cve':  'CVE-2021-42374',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '5.7',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-125'
-              ],
-              'description':   "An out-of-bounds heap read in Busybox's unlzma applet leads to information leak and denial of service when crafted LZMA-compressed input is decompressed. This can be triggered by any applet/format that",
-              'diffID':        'sha256:653214eafbfdfbb9f95018b7cfa8c568d757aaafa7d77419b235f082fd19f291',
-              'fixedVersions': [
-                '1.33.1-r4'
-              ],
-              'installedVersion': '1.33.1-r3',
-              'packageName':      'busybox',
-              'purl':             'pkg:apk/alpine/busybox@1.33.1-r3?arch=armhf&distro=3.14.1',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42374',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42374',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42374'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'busybox: out-of-bounds read in unlzma applet leads to information leak and denial of service when crafted LZMA-compressed input is decompressed'
-            },
-            {
-              'cve':  'CVE-2021-42375',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.5',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '4.1',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-159'
-              ],
-              'description':   "An incorrect handling of a special element in Busybox's ash applet leads to denial of service when processing a crafted shell command, due to the shell mistaking specific characters for reserved characters. This may be used for DoS under rare conditions of filtered command input.",
-              'diffID':        'sha256:653214eafbfdfbb9f95018b7cfa8c568d757aaafa7d77419b235f082fd19f291',
-              'fixedVersions': [
-                '1.33.1-r5'
-              ],
-              'installedVersion': '1.33.1-r3',
-              'packageName':      'busybox',
-              'purl':             'pkg:apk/alpine/busybox@1.33.1-r3?arch=armhf&distro=3.14.1',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42375',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42375',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42375'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'busybox: incorrect handling of a special element in ash applet leads to denial of service when processing a crafted shell command'
-            },
-            {
-              'cve':  'CVE-2021-3711',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '9.8',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'nvd': {
-                  'v3score':  '9.8',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '9.8',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-120'
-              ],
-              'description':   'In order to decrypt SM2 encrypted data an application is expected to call the API function EVP_PKEY_decrypt(). Typically an application will call this function twice. The first time, on entry, the "out" parameter can be NULL and, on exit, the "outlen" parameter is populated with the buffer size required to hold the decrypted plaintext. The application can then allocate a sufficiently sized buffer and call EVP_PKEY_decrypt() again, but this time passing a non-NULL value for the "out" parameter. A bug in the implementation of the SM2 decryption code means that the calculation of the buffer size required to hold the plaintext returned by the first call to EVP_PKEY_decrypt() can be smaller than the actual size required by the second call. This can lead to a buffer overflow when EVP_PKEY_decrypt() is called by the application a second time with a buffer that is too small. A malicious attacker who is able present SM2 content for decryption to an application could cause attacker chosen data to overflow the buffer by up to a maximum of 62 bytes altering the contents of other data held after the buffer, possibly changing application behaviour or causing the application to crash. The location of the buffer is application dependent but is typically heap allocated. Fixed in OpenSSL 1.1.1l (Affected 1.1.1-1.1.1k).',
-              'diffID':        'sha256:653214eafbfdfbb9f95018b7cfa8c568d757aaafa7d77419b235f082fd19f291',
-              'fixedVersions': [
-                '1.1.1l-r0'
-              ],
-              'installedVersion': '1.1.1k-r0',
-              'packageName':      'libcrypto1.1',
-              'purl':             'pkg:apk/alpine/libcrypto1.1@1.1.1k-r0?arch=armhf&distro=3.14.1',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2021/08/26/2',
-                'https://access.redhat.com/security/cve/CVE-2021-3711',
-                'https://cert-portal.siemens.com/productcert/pdf/ssa-389290.pdf',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=59f5e75f3bced8fc0e130d72a3f582cf7b480b46',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=59f5e75f3bced8fc0e130d72a3f582cf7b480b46',
-                'https://lists.apache.org/thread.html/r18995de860f0e63635f3008fd2a6aca82394249476d21691e7c59c9e%40%3Cdev.tomcat.apache.org%3E',
-                'https://lists.apache.org/thread.html/r18995de860f0e63635f3008fd2a6aca82394249476d21691e7c59c9e@%3Cdev.tomcat.apache.org%3E',
-                'https://lists.apache.org/thread.html/rad5d9f83f0d11fb3f8bb148d179b8a9ad7c6a17f18d70e5805a713d1%40%3Cdev.tomcat.apache.org%3E',
-                'https://lists.apache.org/thread.html/rad5d9f83f0d11fb3f8bb148d179b8a9ad7c6a17f18d70e5805a713d1@%3Cdev.tomcat.apache.org%3E',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-3711',
-                'https://rustsec.org/advisories/RUSTSEC-2021-0097.html',
-                'https://security.gentoo.org/glsa/202209-02',
-                'https://security.gentoo.org/glsa/202210-02',
-                'https://security.netapp.com/advisory/ntap-20210827-0010',
-                'https://security.netapp.com/advisory/ntap-20210827-0010/',
-                'https://security.netapp.com/advisory/ntap-20211022-0003',
-                'https://security.netapp.com/advisory/ntap-20211022-0003/',
-                'https://security.netapp.com/advisory/ntap-20240621-0006',
-                'https://security.netapp.com/advisory/ntap-20240621-0006/',
-                'https://ubuntu.com/security/notices/USN-5051-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-3711',
-                'https://www.debian.org/security/2021/dsa-4963',
-                'https://www.openssl.org/news/secadv/20210824.txt',
-                'https://www.oracle.com/security-alerts/cpuapr2022.html',
-                'https://www.oracle.com/security-alerts/cpujan2022.html',
-                'https://www.oracle.com/security-alerts/cpuoct2021.html',
-                'https://www.tenable.com/security/tns-2021-16',
-                'https://www.tenable.com/security/tns-2022-02'
-              ],
-              'severity':   'CRITICAL',
-              'suppressed': false,
-              'title':      'openssl: SM2 Decryption Buffer Overflow'
-            },
-            {
-              'cve':  'CVE-2021-3712',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '7.4',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H'
-                },
-                'nvd': {
-                  'v3score':  '7.4',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.4',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-125'
-              ],
-              'description':   "ASN.1 strings are represented internally within OpenSSL as an ASN1_STRING structure which contains a buffer holding the string data and a field holding the buffer length. This contrasts with normal C strings which are repesented as a buffer for the string data which is terminated with a NUL (0) byte. Although not a strict requirement, ASN.1 strings that are parsed using OpenSSL's own \"d2i\" functions (and other similar parsing functions) as well as any string whose value has been set with the ASN1_STRING_set() function will additionally NUL terminate the byte array in the ASN1_STRING structure. However, it is possible for applications to directly construct valid ASN1_STRING structures which do not NUL terminate the byte array by directly setting the \"data\" and \"length\" fields in the ASN1_STRING array. This can also happen by using the ASN1_STRING_set0() function. Numerous OpenSSL functions that print ASN.1 data have been found to assume that the ASN1_STRING byte array will be NUL terminated, even though this is not guaranteed for strings that have been directly constructed. Where an application requests an ASN.1 structure to be printed, and where that ASN.1 structure contains ASN1_STRINGs that have been directly constructed by the application without NUL terminating the \"data\" field, then a read buffer overrun can occur. The same thing can also occur during name constraints processing of certificates (for example if a certificate has been directly constructed by the application instead of loading it via the OpenSSL parsing functions, and the certificate contains non NUL terminated ASN1_STRING structures). It can also occur in the X509_get1_email(), X509_REQ_get1_email() and X509_get1_ocsp() functions. If a malicious actor can cause an application to directly construct an ASN1_STRING and then process it through one of the affected OpenSSL functions then this issue could be hit. This might result in a crash (causing a Denial of Service attack). It could also result in the disclosure of private memory contents (such as private keys, or sensitive plaintext). Fixed in OpenSSL 1.1.1l (Affected 1.1.1-1.1.1k). Fixed in OpenSSL 1.0.2za (Affected 1.0.2-1.0.2y).",
-              'diffID':        'sha256:653214eafbfdfbb9f95018b7cfa8c568d757aaafa7d77419b235f082fd19f291',
-              'fixedVersions': [
-                '1.1.1l-r0'
-              ],
-              'installedVersion': '1.1.1k-r0',
-              'packageName':      'libcrypto1.1',
-              'purl':             'pkg:apk/alpine/libcrypto1.1@1.1.1k-r0?arch=armhf&distro=3.14.1',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2021/08/26/2',
-                'https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2021-3712.json',
-                'https://access.redhat.com/security/cve/CVE-2021-3712',
-                'https://cert-portal.siemens.com/productcert/pdf/ssa-244969.pdf',
-                'https://cert-portal.siemens.com/productcert/pdf/ssa-389290.pdf',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=94d23fcff9b2a7a8368dfe52214d5c2569882c11',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=ccb0a11145ee72b042d10593a64eaf9e8a55ec12',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=94d23fcff9b2a7a8368dfe52214d5c2569882c11',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=ccb0a11145ee72b042d10593a64eaf9e8a55ec12',
-                'https://kc.mcafee.com/corporate/index?page=content&id=SB10366',
-                'https://linux.oracle.com/cve/CVE-2021-3712.html',
-                'https://linux.oracle.com/errata/ELSA-2022-9023.html',
-                'https://lists.apache.org/thread.html/r18995de860f0e63635f3008fd2a6aca82394249476d21691e7c59c9e%40%3Cdev.tomcat.apache.org%3E',
-                'https://lists.apache.org/thread.html/r18995de860f0e63635f3008fd2a6aca82394249476d21691e7c59c9e@%3Cdev.tomcat.apache.org%3E',
-                'https://lists.apache.org/thread.html/rad5d9f83f0d11fb3f8bb148d179b8a9ad7c6a17f18d70e5805a713d1%40%3Cdev.tomcat.apache.org%3E',
-                'https://lists.apache.org/thread.html/rad5d9f83f0d11fb3f8bb148d179b8a9ad7c6a17f18d70e5805a713d1@%3Cdev.tomcat.apache.org%3E',
-                'https://lists.debian.org/debian-lts-announce/2021/09/msg00014.html',
-                'https://lists.debian.org/debian-lts-announce/2021/09/msg00021.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-3712',
-                'https://rustsec.org/advisories/RUSTSEC-2021-0098.html',
-                'https://security.gentoo.org/glsa/202209-02',
-                'https://security.gentoo.org/glsa/202210-02',
-                'https://security.netapp.com/advisory/ntap-20210827-0010',
-                'https://security.netapp.com/advisory/ntap-20210827-0010/',
-                'https://security.netapp.com/advisory/ntap-20240621-0006',
-                'https://security.netapp.com/advisory/ntap-20240621-0006/',
-                'https://ubuntu.com/security/notices/USN-5051-1',
-                'https://ubuntu.com/security/notices/USN-5051-2',
-                'https://ubuntu.com/security/notices/USN-5051-3',
-                'https://ubuntu.com/security/notices/USN-5051-4 (regression only in trusty/esm)',
-                'https://ubuntu.com/security/notices/USN-5088-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-3712',
-                'https://www.debian.org/security/2021/dsa-4963',
-                'https://www.openssl.org/news/secadv/20210824.txt',
-                'https://www.oracle.com/security-alerts/cpuapr2022.html',
-                'https://www.oracle.com/security-alerts/cpujan2022.html',
-                'https://www.oracle.com/security-alerts/cpuoct2021.html',
-                'https://www.tenable.com/security/tns-2021-16',
-                'https://www.tenable.com/security/tns-2022-02'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: Read buffer overruns processing ASN.1 strings'
-            },
-            {
-              'cve':  'CVE-2022-0778',
-              'cvss': {
-                'bitnami': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'ghsa': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'nvd': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-835'
-              ],
-              'description':   'The BN_mod_sqrt() function, which computes a modular square root, contains a bug that can cause it to loop forever for non-prime moduli. Internally this function is used when parsing certificates that contain elliptic curve public keys in compressed form or explicit elliptic curve parameters with a base point encoded in compressed form. It is possible to trigger the infinite loop by crafting a certificate that has invalid explicit curve parameters. Since certificate parsing happens prior to verification of the certificate signature, any process that parses an externally supplied certificate may thus be subject to a denial of service attack. The infinite loop can also be reached when parsing crafted private keys as they can contain explicit elliptic curve parameters. Thus vulnerable situations include: - TLS clients consuming server certificates - TLS servers consuming client certificates - Hosting providers taking certificates or private keys from customers - Certificate authorities parsing certification requests from subscribers - Anything else which parses ASN.1 elliptic curve parameters Also any other applications that use the BN_mod_sqrt() where the attacker can control the parameter values are vulnerable to this DoS issue. In the OpenSSL 1.0.2 version the public key is not parsed during initial parsing of the certificate which makes it slightly harder to trigger the infinite loop. However any operation which requires the public key from the certificate will trigger the infinite loop. In particular the attacker can use a self-signed certificate to trigger the loop during verification of the certificate signature. This issue affects OpenSSL versions 1.0.2, 1.1.1 and 3.0. It was addressed in the releases of 1.1.1n and 3.0.2 on the 15th March 2022. Fixed in OpenSSL 3.0.2 (Affected 3.0.0,3.0.1). Fixed in OpenSSL 1.1.1n (Affected 1.1.1-1.1.1m). Fixed in OpenSSL 1.0.2zd (Affected 1.0.2-1.0.2zc).',
-              'diffID':        'sha256:653214eafbfdfbb9f95018b7cfa8c568d757aaafa7d77419b235f082fd19f291',
-              'fixedVersions': [
-                '1.1.1n-r0'
-              ],
-              'installedVersion': '1.1.1k-r0',
-              'packageName':      'libcrypto1.1',
-              'purl':             'pkg:apk/alpine/libcrypto1.1@1.1.1k-r0?arch=armhf&distro=3.14.1',
-              'references':       [
-                'http://packetstormsecurity.com/files/167344/OpenSSL-1.0.2-1.1.1-3.0-BN_mod_sqrt-Infinite-Loop.html',
-                'http://seclists.org/fulldisclosure/2022/May/33',
-                'http://seclists.org/fulldisclosure/2022/May/35',
-                'http://seclists.org/fulldisclosure/2022/May/38',
-                'https://access.redhat.com/errata/RHSA-2022:5326',
-                'https://access.redhat.com/security/cve/CVE-2022-0778',
-                'https://bugzilla.redhat.com/2062202',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2062202',
-                'https://cert-portal.siemens.com/productcert/pdf/ssa-712929.pdf',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-0778',
-                'https://errata.almalinux.org/8/ALSA-2022-5326.html',
-                'https://errata.rockylinux.org/RLSA-2022:4899',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=3118eb64934499d93db3230748a452351d1d9a65',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=380085481c64de749a6dd25cdf0bcf4360b30f83',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=a466912611aa6cbdf550cd10601390e587451246',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=3118eb64934499d93db3230748a452351d1d9a65',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=380085481c64de749a6dd25cdf0bcf4360b30f83',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=a466912611aa6cbdf550cd10601390e587451246',
-                'https://linux.oracle.com/cve/CVE-2022-0778.html',
-                'https://linux.oracle.com/errata/ELSA-2022-9272.html',
-                'https://lists.debian.org/debian-lts-announce/2022/03/msg00023.html',
-                'https://lists.debian.org/debian-lts-announce/2022/03/msg00024.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/323SNN6ZX7PRJJWP2BUAFLPUAE42XWLZ',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/323SNN6ZX7PRJJWP2BUAFLPUAE42XWLZ/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GDB3GQVJPXJE7X5C5JN6JAA4XUDWD6E6',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GDB3GQVJPXJE7X5C5JN6JAA4XUDWD6E6/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/W6K3PR542DXWLEFFMFIDMME4CWMHJRMG',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/W6K3PR542DXWLEFFMFIDMME4CWMHJRMG/',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/323SNN6ZX7PRJJWP2BUAFLPUAE42XWLZ',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/GDB3GQVJPXJE7X5C5JN6JAA4XUDWD6E6',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/W6K3PR542DXWLEFFMFIDMME4CWMHJRMG',
-                'https://nvd.nist.gov/vuln/detail/CVE-2022-0778',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2022-0002',
-                'https://rustsec.org/advisories/RUSTSEC-2022-0014.html',
-                'https://security.gentoo.org/glsa/202210-02',
-                'https://security.netapp.com/advisory/ntap-20220321-0002',
-                'https://security.netapp.com/advisory/ntap-20220321-0002/',
-                'https://security.netapp.com/advisory/ntap-20220429-0005',
-                'https://security.netapp.com/advisory/ntap-20220429-0005/',
-                'https://security.netapp.com/advisory/ntap-20240621-0006',
-                'https://security.netapp.com/advisory/ntap-20240621-0006/',
-                'https://support.apple.com/kb/HT213255',
-                'https://support.apple.com/kb/HT213256',
-                'https://support.apple.com/kb/HT213257',
-                'https://ubuntu.com/security/notices/USN-5328-1',
-                'https://ubuntu.com/security/notices/USN-5328-2',
-                'https://ubuntu.com/security/notices/USN-6457-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2022-0778',
-                'https://www.debian.org/security/2022/dsa-5103',
-                'https://www.openssl.org/news/secadv/20220315.txt',
-                'https://www.oracle.com/security-alerts/cpuapr2022.html',
-                'https://www.oracle.com/security-alerts/cpujul2022.html',
-                'https://www.tenable.com/security/tns-2022-06',
-                'https://www.tenable.com/security/tns-2022-07',
-                'https://www.tenable.com/security/tns-2022-08',
-                'https://www.tenable.com/security/tns-2022-09'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: Infinite loop in BN_mod_sqrt() reachable when parsing certificates'
-            },
-            {
-              'cve':  'CVE-2022-4450',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'nvd': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-415'
-              ],
-              'description':   'The function PEM_read_bio_ex() reads a PEM file from a BIO and parses and\ndecodes the "name" (e.g. "CERTIFICATE"), any header data and the payload data.\nIf the function succeeds then the "name_out", "header" and "data" arguments are\npopulated with pointers to buffers containing the relevant decoded data. The\ncaller is responsible for freeing those buffers. It is possible to construct a\nPEM file that results in 0 bytes of payload data. In this case PEM_read_bio_ex()\nwill return a failure code but will populate the header argument with a pointer\nto a buffer that has already been freed. If the caller also frees this buffer\nthen a double free will occur. This will most likely lead to a crash. This\ncould be exploited by an attacker who has the ability to supply malicious PEM\nfiles for parsing to achieve a denial of service attack.\n\nThe functions PEM_read_bio() and PEM_read() are simple wrappers around\nPEM_read_bio_ex() and therefore these functions are also directly affected.\n\nThese functions are also called indirectly by a number of other OpenSSL\nfunctions including PEM_X509_INFO_read_bio_ex() and\nSSL_CTX_use_serverinfo_file() which are also vulnerable. Some OpenSSL internal\nuses of these functions are not vulnerable because the caller does not free the\nheader argument if PEM_read_bio_ex() returns a failure code. These locations\ninclude the PEM_read_bio_TYPE() functions as well as the decoders introduced in\nOpenSSL 3.0.\n\nThe OpenSSL asn1parse command line application is also impacted by this issue.',
-              'diffID':        'sha256:653214eafbfdfbb9f95018b7cfa8c568d757aaafa7d77419b235f082fd19f291',
-              'fixedVersions': [
-                '1.1.1t-r0'
-              ],
-              'installedVersion': '1.1.1k-r0',
-              'packageName':      'libcrypto1.1',
-              'purl':             'pkg:apk/alpine/libcrypto1.1@1.1.1k-r0?arch=armhf&distro=3.14.1',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2023:2165',
-                'https://access.redhat.com/security/cve/CVE-2022-4450',
-                'https://bugzilla.redhat.com/1960321',
-                'https://bugzilla.redhat.com/2164440',
-                'https://bugzilla.redhat.com/2164487',
-                'https://bugzilla.redhat.com/2164492',
-                'https://bugzilla.redhat.com/2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144000',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144003',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144006',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144008',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144010',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144012',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144015',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144017',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144019',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2145170',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2158412',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164440',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164487',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164488',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164492',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164497',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164499',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164500',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4203',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4304',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4450',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0215',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0216',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0217',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0286',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0401',
-                'https://errata.almalinux.org/9/ALSA-2023-2165.html',
-                'https://errata.rockylinux.org/RLSA-2023:0946',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=63bcf189be73a9cc1264059bed6f57974be74a83',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=bbcf509bd046b34cca19c766bbddc31683d0858b',
-                'https://linux.oracle.com/cve/CVE-2022-4450.html',
-                'https://linux.oracle.com/errata/ELSA-2023-32791.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2022-4450',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0003',
-                'https://rustsec.org/advisories/RUSTSEC-2023-0010.html',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://ubuntu.com/security/notices/USN-5844-1',
-                'https://ubuntu.com/security/notices/USN-6564-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2022-4450',
-                'https://www.openssl.org/news/secadv/20230207.txt'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: double free after calling PEM_read_bio_ex'
-            },
-            {
-              'cve':  'CVE-2023-0215',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'nvd': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   'The public API function BIO_new_NDEF is a helper function used for streaming\nASN.1 data via a BIO. It is primarily used internally to OpenSSL to support the\nSMIME, CMS and PKCS7 streaming capabilities, but may also be called directly by\nend user applications.\n\nThe function receives a BIO from the caller, prepends a new BIO_f_asn1 filter\nBIO onto the front of it to form a BIO chain, and then returns the new head of\nthe BIO chain to the caller. Under certain conditions, for example if a CMS\nrecipient public key is invalid, the new filter BIO is freed and the function\nreturns a NULL result indicating a failure. However, in this case, the BIO chain\nis not properly cleaned up and the BIO passed by the caller still retains\ninternal pointers to the previously freed filter BIO. If the caller then goes on\nto call BIO_pop() on the BIO then a use-after-free will occur. This will most\nlikely result in a crash.\n\n\n\nThis scenario occurs directly in the internal function B64_write_ASN1() which\nmay cause BIO_new_NDEF() to be called and will subsequently call BIO_pop() on\nthe BIO. This internal function is in turn called by the public API functions\nPEM_write_bio_ASN1_stream, PEM_write_bio_CMS_stream, PEM_write_bio_PKCS7_stream,\nSMIME_write_ASN1, SMIME_write_CMS and SMIME_write_PKCS7.\n\nOther public API functions that may be impacted by this include\ni2d_ASN1_bio_stream, BIO_new_CMS, BIO_new_PKCS7, i2d_CMS_bio_stream and\ni2d_PKCS7_bio_stream.\n\nThe OpenSSL cms and smime command line applications are similarly affected.',
-              'diffID':        'sha256:653214eafbfdfbb9f95018b7cfa8c568d757aaafa7d77419b235f082fd19f291',
-              'fixedVersions': [
-                '1.1.1t-r0'
-              ],
-              'installedVersion': '1.1.1k-r0',
-              'packageName':      'libcrypto1.1',
-              'purl':             'pkg:apk/alpine/libcrypto1.1@1.1.1k-r0?arch=armhf&distro=3.14.1',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2023:2165',
-                'https://access.redhat.com/security/cve/CVE-2023-0215',
-                'https://bugzilla.redhat.com/1960321',
-                'https://bugzilla.redhat.com/2164440',
-                'https://bugzilla.redhat.com/2164487',
-                'https://bugzilla.redhat.com/2164492',
-                'https://bugzilla.redhat.com/2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144000',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144003',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144006',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144008',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144010',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144012',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144015',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144017',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144019',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2145170',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2158412',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164440',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164487',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164488',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164492',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164497',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164499',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164500',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4203',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4304',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4450',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0215',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0216',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0217',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0286',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0401',
-                'https://errata.almalinux.org/9/ALSA-2023-2165.html',
-                'https://errata.rockylinux.org/RLSA-2023:0946',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=8818064ce3c3c0f1b740a5aaba2a987e75bfbafd',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=9816136fe31d92ace4037d5da5257f763aeeb4eb',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=c3829dd8825c654652201e16f8a0a0c46ee3f344',
-                'https://linux.oracle.com/cve/CVE-2023-0215.html',
-                'https://linux.oracle.com/errata/ELSA-2023-32791.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-0215',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0003',
-                'https://rustsec.org/advisories/RUSTSEC-2023-0009.html',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://security.netapp.com/advisory/ntap-20230427-0007',
-                'https://security.netapp.com/advisory/ntap-20230427-0007/',
-                'https://security.netapp.com/advisory/ntap-20230427-0009',
-                'https://security.netapp.com/advisory/ntap-20230427-0009/',
-                'https://security.netapp.com/advisory/ntap-20240621-0006',
-                'https://security.netapp.com/advisory/ntap-20240621-0006/',
-                'https://ubuntu.com/security/notices/USN-5844-1',
-                'https://ubuntu.com/security/notices/USN-5845-1',
-                'https://ubuntu.com/security/notices/USN-5845-2',
-                'https://ubuntu.com/security/notices/USN-6564-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-0215',
-                'https://www.openssl.org/news/secadv/20230207.txt'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: use-after-free following BIO_new_NDEF'
-            },
-            {
-              'cve':  'CVE-2023-0286',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '7.4',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H'
-                },
-                'nvd': {
-                  'v3score':  '7.4',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.4',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-843'
-              ],
-              'description':   'There is a type confusion vulnerability relating to X.400 address processing\ninside an X.509 GeneralName. X.400 addresses were parsed as an ASN1_STRING but\nthe public structure definition for GENERAL_NAME incorrectly specified the type\nof the x400Address field as ASN1_TYPE. This field is subsequently interpreted by\nthe OpenSSL function GENERAL_NAME_cmp as an ASN1_TYPE rather than an\nASN1_STRING.\n\nWhen CRL checking is enabled (i.e. the application sets the\nX509_V_FLAG_CRL_CHECK flag), this vulnerability may allow an attacker to pass\narbitrary pointers to a memcmp call, enabling them to read memory contents or\nenact a denial of service. In most cases, the attack requires the attacker to\nprovide both the certificate chain and CRL, neither of which need to have a\nvalid signature. If the attacker only controls one of these inputs, the other\ninput must already contain an X.400 address as a CRL distribution point, which\nis uncommon. As such, this vulnerability is most likely to only affect\napplications which have implemented their own functionality for retrieving CRLs\nover a network.',
-              'diffID':        'sha256:653214eafbfdfbb9f95018b7cfa8c568d757aaafa7d77419b235f082fd19f291',
-              'fixedVersions': [
-                '1.1.1t-r0'
-              ],
-              'installedVersion': '1.1.1k-r0',
-              'packageName':      'libcrypto1.1',
-              'purl':             'pkg:apk/alpine/libcrypto1.1@1.1.1k-r0?arch=armhf&distro=3.14.1',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2025:7937',
-                'https://access.redhat.com/security/cve/CVE-2023-0286',
-                'https://access.redhat.com/security/cve/cve-2023-0286',
-                'https://bugzilla.redhat.com/2164440',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144000',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144003',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144006',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144008',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144010',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144012',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144015',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144017',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144019',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2145170',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2158412',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164440',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164487',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164488',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164492',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164497',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164499',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164500',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4203',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4304',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4450',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0215',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0216',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0217',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0286',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0401',
-                'https://errata.almalinux.org/9/ALSA-2025-7937.html',
-                'https://errata.rockylinux.org/RLSA-2023:0946',
-                'https://ftp.openbsd.org/pub/OpenBSD/LibreSSL/libressl-3.6.2-relnotes.txt',
-                'https://ftp.openbsd.org/pub/OpenBSD/patches/7.2/common/018_x509.patch.sig',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=2c6c9d439b484e1ba9830d8454a34fa4f80fdfe9',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=2f7530077e0ef79d98718138716bc51ca0cad658',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=fd2af07dc083a350c959147097003a14a5e8ac4d',
-                'https://github.com/pyca/cryptography',
-                'https://github.com/pyca/cryptography/security/advisories/GHSA-x4qr-2fvf-3mr5',
-                'https://linux.oracle.com/cve/CVE-2023-0286.html',
-                'https://linux.oracle.com/errata/ELSA-2025-7937.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-0286',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0003',
-                'https://rustsec.org/advisories/RUSTSEC-2023-0006.html',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://ubuntu.com/security/notices/USN-5844-1',
-                'https://ubuntu.com/security/notices/USN-5845-1',
-                'https://ubuntu.com/security/notices/USN-5845-2',
-                'https://ubuntu.com/security/notices/USN-6564-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-0286',
-                'https://www.openssl.org/news/secadv/20230207.txt'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: X.400 address type confusion in X.509 GeneralName'
-            },
-            {
-              'cve':  'CVE-2023-0464',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-295'
-              ],
-              'description':   "A security vulnerability has been identified in all supported versions\n\nof OpenSSL related to the verification of X.509 certificate chains\nthat include policy constraints.  Attackers may be able to exploit this\nvulnerability by creating a malicious certificate chain that triggers\nexponential use of computational resources, leading to a denial-of-service\n(DoS) attack on affected systems.\n\nPolicy processing is disabled by default but can be enabled by passing\nthe `-policy' argument to the command line utilities or by calling the\n`X509_VERIFY_PARAM_set1_policies()' function.",
-              'diffID':        'sha256:653214eafbfdfbb9f95018b7cfa8c568d757aaafa7d77419b235f082fd19f291',
-              'fixedVersions': [
-                '1.1.1t-r1'
-              ],
-              'installedVersion': '1.1.1k-r0',
-              'packageName':      'libcrypto1.1',
-              'purl':             'pkg:apk/alpine/libcrypto1.1@1.1.1k-r0?arch=armhf&distro=3.14.1',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2023:3722',
-                'https://access.redhat.com/security/cve/CVE-2023-0464',
-                'https://bugzilla.redhat.com/2181082',
-                'https://bugzilla.redhat.com/2182561',
-                'https://bugzilla.redhat.com/2182565',
-                'https://bugzilla.redhat.com/2188461',
-                'https://bugzilla.redhat.com/2207947',
-                'https://errata.almalinux.org/9/ALSA-2023-3722.html',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=2017771e2db3e2b96f89bbe8766c3209f6a99545',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=2dcd4f1e3115f38cefa43e3efbe9b801c27e642e',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=879f7080d7e141f415c79eaa3a8ac4a3dad0348b',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=959c59c7a0164117e7f8366466a32bb1f8d77ff1',
-                'https://linux.oracle.com/cve/CVE-2023-0464.html',
-                'https://linux.oracle.com/errata/ELSA-2023-3722.html',
-                'https://lists.debian.org/debian-lts-announce/2023/06/msg00011.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-0464',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://security.netapp.com/advisory/ntap-20230406-0006/',
-                'https://security.netapp.com/advisory/ntap-20240621-0006/',
-                'https://ubuntu.com/security/notices/USN-6039-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.couchbase.com/alerts/',
-                'https://www.cve.org/CVERecord?id=CVE-2023-0464',
-                'https://www.debian.org/security/2023/dsa-5417',
-                'https://www.openssl.org/news/secadv/20230322.txt'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: Denial of service by excessive resource usage in verifying X509 policy constraints'
-            },
-            {
-              'cve':  'CVE-2022-2097',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N'
-                },
-                'nvd': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N'
-                },
-                'redhat': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-327'
-              ],
-              'description':   "AES OCB mode for 32-bit x86 platforms using the AES-NI assembly optimised implementation will not encrypt the entirety of the data under some circumstances. This could reveal sixteen bytes of data that was preexisting in the memory that wasn't written. In the special case of \"in place\" encryption, sixteen bytes of the plaintext would be revealed. Since OpenSSL does not support OCB based cipher suites for TLS and DTLS, they are both unaffected. Fixed in OpenSSL 3.0.5 (Affected 3.0.0-3.0.4). Fixed in OpenSSL 1.1.1q (Affected 1.1.1-1.1.1p).",
-              'diffID':        'sha256:653214eafbfdfbb9f95018b7cfa8c568d757aaafa7d77419b235f082fd19f291',
-              'fixedVersions': [
-                '1.1.1q-r0'
-              ],
-              'installedVersion': '1.1.1k-r0',
-              'packageName':      'libcrypto1.1',
-              'purl':             'pkg:apk/alpine/libcrypto1.1@1.1.1k-r0?arch=armhf&distro=3.14.1',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2022:6224',
-                'https://access.redhat.com/security/cve/CVE-2022-2097',
-                'https://bugzilla.redhat.com/2081494',
-                'https://bugzilla.redhat.com/2087911',
-                'https://bugzilla.redhat.com/2087913',
-                'https://bugzilla.redhat.com/2097310',
-                'https://bugzilla.redhat.com/2104905',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2081494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2097310',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2100554',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2104905',
-                'https://cert-portal.siemens.com/productcert/pdf/ssa-332410.pdf',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-1292',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-2068',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-2097',
-                'https://errata.almalinux.org/9/ALSA-2022-6224.html',
-                'https://errata.rockylinux.org/RLSA-2022:5818',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=919925673d6c9cfed3c1085497f5dfbbed5fc431',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=a98f339ddd7e8f487d6e0088d4a9a42324885a93',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=919925673d6c9cfed3c1085497f5dfbbed5fc431',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=a98f339ddd7e8f487d6e0088d4a9a42324885a93',
-                'https://github.com/alexcrichton/openssl-src-rs',
-                'https://linux.oracle.com/cve/CVE-2022-2097.html',
-                'https://linux.oracle.com/errata/ELSA-2022-9955.html',
-                'https://lists.debian.org/debian-lts-announce/2023/02/msg00019.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/R6CK57NBQFTPUMXAPJURCGXUYT76NQAK',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/R6CK57NBQFTPUMXAPJURCGXUYT76NQAK/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/V6567JERRHHJW2GNGJGKDRNHR7SNPZK7',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/V6567JERRHHJW2GNGJGKDRNHR7SNPZK7/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VCMNWKERPBKOEBNL7CLTTX3ZZCZLH7XA',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VCMNWKERPBKOEBNL7CLTTX3ZZCZLH7XA/',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/R6CK57NBQFTPUMXAPJURCGXUYT76NQAK',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/R6CK57NBQFTPUMXAPJURCGXUYT76NQAK/',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/V6567JERRHHJW2GNGJGKDRNHR7SNPZK7',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/V6567JERRHHJW2GNGJGKDRNHR7SNPZK7/',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/VCMNWKERPBKOEBNL7CLTTX3ZZCZLH7XA',
-                'https://nvd.nist.gov/vuln/detail/CVE-2022-2097',
-                'https://rustsec.org/advisories/RUSTSEC-2022-0032.html',
-                'https://security.gentoo.org/glsa/202210-02',
-                'https://security.netapp.com/advisory/ntap-20220715-0011',
-                'https://security.netapp.com/advisory/ntap-20220715-0011/',
-                'https://security.netapp.com/advisory/ntap-20230420-0008',
-                'https://security.netapp.com/advisory/ntap-20230420-0008/',
-                'https://security.netapp.com/advisory/ntap-20240621-0006',
-                'https://security.netapp.com/advisory/ntap-20240621-0006/',
-                'https://ubuntu.com/security/notices/USN-5502-1',
-                'https://ubuntu.com/security/notices/USN-6457-1',
-                'https://www.cve.org/CVERecord?id=CVE-2022-2097',
-                'https://www.debian.org/security/2023/dsa-5343',
-                'https://www.openssl.org/news/secadv/20220705.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: AES OCB fails to encrypt some bytes'
-            },
-            {
-              'cve':  'CVE-2022-4304',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N'
-                },
-                'nvd': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N'
-                },
-                'redhat': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-203'
-              ],
-              'description':   'A timing based side channel exists in the OpenSSL RSA Decryption implementation\nwhich could be sufficient to recover a plaintext across a network in a\nBleichenbacher style attack. To achieve a successful decryption an attacker\nwould have to be able to send a very large number of trial messages for\ndecryption. The vulnerability affects all RSA padding modes: PKCS#1 v1.5,\nRSA-OEAP and RSASVE.\n\nFor example, in a TLS connection, RSA is commonly used by a client to send an\nencrypted pre-master secret to the server. An attacker that had observed a\ngenuine connection between a client and a server could use this flaw to send\ntrial messages to the server and record the time taken to process them. After a\nsufficiently large number of messages the attacker could recover the pre-master\nsecret used for the original connection and thus be able to decrypt the\napplication data sent over that connection.',
-              'diffID':        'sha256:653214eafbfdfbb9f95018b7cfa8c568d757aaafa7d77419b235f082fd19f291',
-              'fixedVersions': [
-                '1.1.1t-r0'
-              ],
-              'installedVersion': '1.1.1k-r0',
-              'packageName':      'libcrypto1.1',
-              'purl':             'pkg:apk/alpine/libcrypto1.1@1.1.1k-r0?arch=armhf&distro=3.14.1',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2023:2165',
-                'https://access.redhat.com/security/cve/CVE-2022-4304',
-                'https://bugzilla.redhat.com/1960321',
-                'https://bugzilla.redhat.com/2164440',
-                'https://bugzilla.redhat.com/2164487',
-                'https://bugzilla.redhat.com/2164492',
-                'https://bugzilla.redhat.com/2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144000',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144003',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144006',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144008',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144010',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144012',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144015',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144017',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144019',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2145170',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2158412',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164440',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164487',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164488',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164492',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164497',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164499',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164500',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4203',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4304',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4450',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0215',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0216',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0217',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0286',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0401',
-                'https://errata.almalinux.org/9/ALSA-2023-2165.html',
-                'https://errata.rockylinux.org/RLSA-2023:0946',
-                'https://linux.oracle.com/cve/CVE-2022-4304.html',
-                'https://linux.oracle.com/errata/ELSA-2023-32791.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2022-4304',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0003',
-                'https://rustsec.org/advisories/RUSTSEC-2023-0007.html',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://ubuntu.com/security/notices/USN-5844-1',
-                'https://ubuntu.com/security/notices/USN-6564-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2022-4304',
-                'https://www.openssl.org/news/secadv/20230207.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: timing attack in RSA Decryption implementation'
-            },
-            {
-              'cve':  'CVE-2023-0465',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N'
-                },
-                'redhat': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-295'
-              ],
-              'description':   "Applications that use a non-default option when verifying certificates may be\nvulnerable to an attack from a malicious CA to circumvent certain checks.\n\nInvalid certificate policies in leaf certificates are silently ignored by\nOpenSSL and other certificate policy checks are skipped for that certificate.\nA malicious CA could use this to deliberately assert invalid certificate policies\nin order to circumvent policy checking on the certificate altogether.\n\nPolicy processing is disabled by default but can be enabled by passing\nthe `-policy' argument to the command line utilities or by calling the\n`X509_VERIFY_PARAM_set1_policies()' function.",
-              'diffID':        'sha256:653214eafbfdfbb9f95018b7cfa8c568d757aaafa7d77419b235f082fd19f291',
-              'fixedVersions': [
-                '1.1.1t-r2'
-              ],
-              'installedVersion': '1.1.1k-r0',
-              'packageName':      'libcrypto1.1',
-              'purl':             'pkg:apk/alpine/libcrypto1.1@1.1.1k-r0?arch=armhf&distro=3.14.1',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2023:3722',
-                'https://access.redhat.com/security/cve/CVE-2023-0465',
-                'https://bugzilla.redhat.com/2181082',
-                'https://bugzilla.redhat.com/2182561',
-                'https://bugzilla.redhat.com/2182565',
-                'https://bugzilla.redhat.com/2188461',
-                'https://bugzilla.redhat.com/2207947',
-                'https://errata.almalinux.org/9/ALSA-2023-3722.html',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=10325176f3d3e98c6e2b3bf5ab1e3b334de6947a',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=1dd43e0709fece299b15208f36cc7c76209ba0bb',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=b013765abfa80036dc779dd0e50602c57bb3bf95',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=facfb1ab745646e97a1920977ae4a9965ea61d5c',
-                'https://linux.oracle.com/cve/CVE-2023-0465.html',
-                'https://linux.oracle.com/errata/ELSA-2023-3722.html',
-                'https://lists.debian.org/debian-lts-announce/2023/06/msg00011.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-0465',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://security.netapp.com/advisory/ntap-20230414-0001/',
-                'https://ubuntu.com/security/notices/USN-6039-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-0465',
-                'https://www.debian.org/security/2023/dsa-5417',
-                'https://www.openssl.org/news/secadv/20230328.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: Invalid certificate policies in leaf certificates are silently ignored'
-            },
-            {
-              'cve':  'CVE-2022-0778',
-              'cvss': {
-                'bitnami': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'ghsa': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'nvd': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-835'
-              ],
-              'description':   'The BN_mod_sqrt() function, which computes a modular square root, contains a bug that can cause it to loop forever for non-prime moduli. Internally this function is used when parsing certificates that contain elliptic curve public keys in compressed form or explicit elliptic curve parameters with a base point encoded in compressed form. It is possible to trigger the infinite loop by crafting a certificate that has invalid explicit curve parameters. Since certificate parsing happens prior to verification of the certificate signature, any process that parses an externally supplied certificate may thus be subject to a denial of service attack. The infinite loop can also be reached when parsing crafted private keys as they can contain explicit elliptic curve parameters. Thus vulnerable situations include: - TLS clients consuming server certificates - TLS servers consuming client certificates - Hosting providers taking certificates or private keys from customers - Certificate authorities parsing certification requests from subscribers - Anything else which parses ASN.1 elliptic curve parameters Also any other applications that use the BN_mod_sqrt() where the attacker can control the parameter values are vulnerable to this DoS issue. In the OpenSSL 1.0.2 version the public key is not parsed during initial parsing of the certificate which makes it slightly harder to trigger the infinite loop. However any operation which requires the public key from the certificate will trigger the infinite loop. In particular the attacker can use a self-signed certificate to trigger the loop during verification of the certificate signature. This issue affects OpenSSL versions 1.0.2, 1.1.1 and 3.0. It was addressed in the releases of 1.1.1n and 3.0.2 on the 15th March 2022. Fixed in OpenSSL 3.0.2 (Affected 3.0.0,3.0.1). Fixed in OpenSSL 1.1.1n (Affected 1.1.1-1.1.1m). Fixed in OpenSSL 1.0.2zd (Affected 1.0.2-1.0.2zc).',
-              'diffID':        'sha256:653214eafbfdfbb9f95018b7cfa8c568d757aaafa7d77419b235f082fd19f291',
-              'fixedVersions': [
-                '3.3.3p1-r3'
-              ],
-              'installedVersion': '3.3.3p1-r2',
-              'packageName':      'libretls',
-              'purl':             'pkg:apk/alpine/libretls@3.3.3p1-r2?arch=armhf&distro=3.14.1',
-              'references':       [
-                'http://packetstormsecurity.com/files/167344/OpenSSL-1.0.2-1.1.1-3.0-BN_mod_sqrt-Infinite-Loop.html',
-                'http://seclists.org/fulldisclosure/2022/May/33',
-                'http://seclists.org/fulldisclosure/2022/May/35',
-                'http://seclists.org/fulldisclosure/2022/May/38',
-                'https://access.redhat.com/errata/RHSA-2022:5326',
-                'https://access.redhat.com/security/cve/CVE-2022-0778',
-                'https://bugzilla.redhat.com/2062202',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2062202',
-                'https://cert-portal.siemens.com/productcert/pdf/ssa-712929.pdf',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-0778',
-                'https://errata.almalinux.org/8/ALSA-2022-5326.html',
-                'https://errata.rockylinux.org/RLSA-2022:4899',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=3118eb64934499d93db3230748a452351d1d9a65',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=380085481c64de749a6dd25cdf0bcf4360b30f83',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=a466912611aa6cbdf550cd10601390e587451246',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=3118eb64934499d93db3230748a452351d1d9a65',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=380085481c64de749a6dd25cdf0bcf4360b30f83',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=a466912611aa6cbdf550cd10601390e587451246',
-                'https://linux.oracle.com/cve/CVE-2022-0778.html',
-                'https://linux.oracle.com/errata/ELSA-2022-9272.html',
-                'https://lists.debian.org/debian-lts-announce/2022/03/msg00023.html',
-                'https://lists.debian.org/debian-lts-announce/2022/03/msg00024.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/323SNN6ZX7PRJJWP2BUAFLPUAE42XWLZ',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/323SNN6ZX7PRJJWP2BUAFLPUAE42XWLZ/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GDB3GQVJPXJE7X5C5JN6JAA4XUDWD6E6',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GDB3GQVJPXJE7X5C5JN6JAA4XUDWD6E6/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/W6K3PR542DXWLEFFMFIDMME4CWMHJRMG',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/W6K3PR542DXWLEFFMFIDMME4CWMHJRMG/',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/323SNN6ZX7PRJJWP2BUAFLPUAE42XWLZ',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/GDB3GQVJPXJE7X5C5JN6JAA4XUDWD6E6',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/W6K3PR542DXWLEFFMFIDMME4CWMHJRMG',
-                'https://nvd.nist.gov/vuln/detail/CVE-2022-0778',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2022-0002',
-                'https://rustsec.org/advisories/RUSTSEC-2022-0014.html',
-                'https://security.gentoo.org/glsa/202210-02',
-                'https://security.netapp.com/advisory/ntap-20220321-0002',
-                'https://security.netapp.com/advisory/ntap-20220321-0002/',
-                'https://security.netapp.com/advisory/ntap-20220429-0005',
-                'https://security.netapp.com/advisory/ntap-20220429-0005/',
-                'https://security.netapp.com/advisory/ntap-20240621-0006',
-                'https://security.netapp.com/advisory/ntap-20240621-0006/',
-                'https://support.apple.com/kb/HT213255',
-                'https://support.apple.com/kb/HT213256',
-                'https://support.apple.com/kb/HT213257',
-                'https://ubuntu.com/security/notices/USN-5328-1',
-                'https://ubuntu.com/security/notices/USN-5328-2',
-                'https://ubuntu.com/security/notices/USN-6457-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2022-0778',
-                'https://www.debian.org/security/2022/dsa-5103',
-                'https://www.openssl.org/news/secadv/20220315.txt',
-                'https://www.oracle.com/security-alerts/cpuapr2022.html',
-                'https://www.oracle.com/security-alerts/cpujul2022.html',
-                'https://www.tenable.com/security/tns-2022-06',
-                'https://www.tenable.com/security/tns-2022-07',
-                'https://www.tenable.com/security/tns-2022-08',
-                'https://www.tenable.com/security/tns-2022-09'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: Infinite loop in BN_mod_sqrt() reachable when parsing certificates'
-            },
-            {
-              'cve':  'CVE-2021-3711',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '9.8',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'nvd': {
-                  'v3score':  '9.8',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '9.8',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-120'
-              ],
-              'description':   'In order to decrypt SM2 encrypted data an application is expected to call the API function EVP_PKEY_decrypt(). Typically an application will call this function twice. The first time, on entry, the "out" parameter can be NULL and, on exit, the "outlen" parameter is populated with the buffer size required to hold the decrypted plaintext. The application can then allocate a sufficiently sized buffer and call EVP_PKEY_decrypt() again, but this time passing a non-NULL value for the "out" parameter. A bug in the implementation of the SM2 decryption code means that the calculation of the buffer size required to hold the plaintext returned by the first call to EVP_PKEY_decrypt() can be smaller than the actual size required by the second call. This can lead to a buffer overflow when EVP_PKEY_decrypt() is called by the application a second time with a buffer that is too small. A malicious attacker who is able present SM2 content for decryption to an application could cause attacker chosen data to overflow the buffer by up to a maximum of 62 bytes altering the contents of other data held after the buffer, possibly changing application behaviour or causing the application to crash. The location of the buffer is application dependent but is typically heap allocated. Fixed in OpenSSL 1.1.1l (Affected 1.1.1-1.1.1k).',
-              'diffID':        'sha256:653214eafbfdfbb9f95018b7cfa8c568d757aaafa7d77419b235f082fd19f291',
-              'fixedVersions': [
-                '1.1.1l-r0'
-              ],
-              'installedVersion': '1.1.1k-r0',
-              'packageName':      'libssl1.1',
-              'purl':             'pkg:apk/alpine/libssl1.1@1.1.1k-r0?arch=armhf&distro=3.14.1',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2021/08/26/2',
-                'https://access.redhat.com/security/cve/CVE-2021-3711',
-                'https://cert-portal.siemens.com/productcert/pdf/ssa-389290.pdf',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=59f5e75f3bced8fc0e130d72a3f582cf7b480b46',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=59f5e75f3bced8fc0e130d72a3f582cf7b480b46',
-                'https://lists.apache.org/thread.html/r18995de860f0e63635f3008fd2a6aca82394249476d21691e7c59c9e%40%3Cdev.tomcat.apache.org%3E',
-                'https://lists.apache.org/thread.html/r18995de860f0e63635f3008fd2a6aca82394249476d21691e7c59c9e@%3Cdev.tomcat.apache.org%3E',
-                'https://lists.apache.org/thread.html/rad5d9f83f0d11fb3f8bb148d179b8a9ad7c6a17f18d70e5805a713d1%40%3Cdev.tomcat.apache.org%3E',
-                'https://lists.apache.org/thread.html/rad5d9f83f0d11fb3f8bb148d179b8a9ad7c6a17f18d70e5805a713d1@%3Cdev.tomcat.apache.org%3E',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-3711',
-                'https://rustsec.org/advisories/RUSTSEC-2021-0097.html',
-                'https://security.gentoo.org/glsa/202209-02',
-                'https://security.gentoo.org/glsa/202210-02',
-                'https://security.netapp.com/advisory/ntap-20210827-0010',
-                'https://security.netapp.com/advisory/ntap-20210827-0010/',
-                'https://security.netapp.com/advisory/ntap-20211022-0003',
-                'https://security.netapp.com/advisory/ntap-20211022-0003/',
-                'https://security.netapp.com/advisory/ntap-20240621-0006',
-                'https://security.netapp.com/advisory/ntap-20240621-0006/',
-                'https://ubuntu.com/security/notices/USN-5051-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-3711',
-                'https://www.debian.org/security/2021/dsa-4963',
-                'https://www.openssl.org/news/secadv/20210824.txt',
-                'https://www.oracle.com/security-alerts/cpuapr2022.html',
-                'https://www.oracle.com/security-alerts/cpujan2022.html',
-                'https://www.oracle.com/security-alerts/cpuoct2021.html',
-                'https://www.tenable.com/security/tns-2021-16',
-                'https://www.tenable.com/security/tns-2022-02'
-              ],
-              'severity':   'CRITICAL',
-              'suppressed': false,
-              'title':      'openssl: SM2 Decryption Buffer Overflow'
-            },
-            {
-              'cve':  'CVE-2021-3712',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '7.4',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H'
-                },
-                'nvd': {
-                  'v3score':  '7.4',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.4',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-125'
-              ],
-              'description':   "ASN.1 strings are represented internally within OpenSSL as an ASN1_STRING structure which contains a buffer holding the string data and a field holding the buffer length. This contrasts with normal C strings which are repesented as a buffer for the string data which is terminated with a NUL (0) byte. Although not a strict requirement, ASN.1 strings that are parsed using OpenSSL's own \"d2i\" functions (and other similar parsing functions) as well as any string whose value has been set with the ASN1_STRING_set() function will additionally NUL terminate the byte array in the ASN1_STRING structure. However, it is possible for applications to directly construct valid ASN1_STRING structures which do not NUL terminate the byte array by directly setting the \"data\" and \"length\" fields in the ASN1_STRING array. This can also happen by using the ASN1_STRING_set0() function. Numerous OpenSSL functions that print ASN.1 data have been found to assume that the ASN1_STRING byte array will be NUL terminated, even though this is not guaranteed for strings that have been directly constructed. Where an application requests an ASN.1 structure to be printed, and where that ASN.1 structure contains ASN1_STRINGs that have been directly constructed by the application without NUL terminating the \"data\" field, then a read buffer overrun can occur. The same thing can also occur during name constraints processing of certificates (for example if a certificate has been directly constructed by the application instead of loading it via the OpenSSL parsing functions, and the certificate contains non NUL terminated ASN1_STRING structures). It can also occur in the X509_get1_email(), X509_REQ_get1_email() and X509_get1_ocsp() functions. If a malicious actor can cause an application to directly construct an ASN1_STRING and then process it through one of the affected OpenSSL functions then this issue could be hit. This might result in a crash (causing a Denial of Service attack). It could also result in the disclosure of private memory contents (such as private keys, or sensitive plaintext). Fixed in OpenSSL 1.1.1l (Affected 1.1.1-1.1.1k). Fixed in OpenSSL 1.0.2za (Affected 1.0.2-1.0.2y).",
-              'diffID':        'sha256:653214eafbfdfbb9f95018b7cfa8c568d757aaafa7d77419b235f082fd19f291',
-              'fixedVersions': [
-                '1.1.1l-r0'
-              ],
-              'installedVersion': '1.1.1k-r0',
-              'packageName':      'libssl1.1',
-              'purl':             'pkg:apk/alpine/libssl1.1@1.1.1k-r0?arch=armhf&distro=3.14.1',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2021/08/26/2',
-                'https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2021-3712.json',
-                'https://access.redhat.com/security/cve/CVE-2021-3712',
-                'https://cert-portal.siemens.com/productcert/pdf/ssa-244969.pdf',
-                'https://cert-portal.siemens.com/productcert/pdf/ssa-389290.pdf',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=94d23fcff9b2a7a8368dfe52214d5c2569882c11',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=ccb0a11145ee72b042d10593a64eaf9e8a55ec12',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=94d23fcff9b2a7a8368dfe52214d5c2569882c11',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=ccb0a11145ee72b042d10593a64eaf9e8a55ec12',
-                'https://kc.mcafee.com/corporate/index?page=content&id=SB10366',
-                'https://linux.oracle.com/cve/CVE-2021-3712.html',
-                'https://linux.oracle.com/errata/ELSA-2022-9023.html',
-                'https://lists.apache.org/thread.html/r18995de860f0e63635f3008fd2a6aca82394249476d21691e7c59c9e%40%3Cdev.tomcat.apache.org%3E',
-                'https://lists.apache.org/thread.html/r18995de860f0e63635f3008fd2a6aca82394249476d21691e7c59c9e@%3Cdev.tomcat.apache.org%3E',
-                'https://lists.apache.org/thread.html/rad5d9f83f0d11fb3f8bb148d179b8a9ad7c6a17f18d70e5805a713d1%40%3Cdev.tomcat.apache.org%3E',
-                'https://lists.apache.org/thread.html/rad5d9f83f0d11fb3f8bb148d179b8a9ad7c6a17f18d70e5805a713d1@%3Cdev.tomcat.apache.org%3E',
-                'https://lists.debian.org/debian-lts-announce/2021/09/msg00014.html',
-                'https://lists.debian.org/debian-lts-announce/2021/09/msg00021.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-3712',
-                'https://rustsec.org/advisories/RUSTSEC-2021-0098.html',
-                'https://security.gentoo.org/glsa/202209-02',
-                'https://security.gentoo.org/glsa/202210-02',
-                'https://security.netapp.com/advisory/ntap-20210827-0010',
-                'https://security.netapp.com/advisory/ntap-20210827-0010/',
-                'https://security.netapp.com/advisory/ntap-20240621-0006',
-                'https://security.netapp.com/advisory/ntap-20240621-0006/',
-                'https://ubuntu.com/security/notices/USN-5051-1',
-                'https://ubuntu.com/security/notices/USN-5051-2',
-                'https://ubuntu.com/security/notices/USN-5051-3',
-                'https://ubuntu.com/security/notices/USN-5051-4 (regression only in trusty/esm)',
-                'https://ubuntu.com/security/notices/USN-5088-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-3712',
-                'https://www.debian.org/security/2021/dsa-4963',
-                'https://www.openssl.org/news/secadv/20210824.txt',
-                'https://www.oracle.com/security-alerts/cpuapr2022.html',
-                'https://www.oracle.com/security-alerts/cpujan2022.html',
-                'https://www.oracle.com/security-alerts/cpuoct2021.html',
-                'https://www.tenable.com/security/tns-2021-16',
-                'https://www.tenable.com/security/tns-2022-02'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: Read buffer overruns processing ASN.1 strings'
-            },
-            {
-              'cve':  'CVE-2022-0778',
-              'cvss': {
-                'bitnami': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'ghsa': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'nvd': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-835'
-              ],
-              'description':   'The BN_mod_sqrt() function, which computes a modular square root, contains a bug that can cause it to loop forever for non-prime moduli. Internally this function is used when parsing certificates that contain elliptic curve public keys in compressed form or explicit elliptic curve parameters with a base point encoded in compressed form. It is possible to trigger the infinite loop by crafting a certificate that has invalid explicit curve parameters. Since certificate parsing happens prior to verification of the certificate signature, any process that parses an externally supplied certificate may thus be subject to a denial of service attack. The infinite loop can also be reached when parsing crafted private keys as they can contain explicit elliptic curve parameters. Thus vulnerable situations include: - TLS clients consuming server certificates - TLS servers consuming client certificates - Hosting providers taking certificates or private keys from customers - Certificate authorities parsing certification requests from subscribers - Anything else which parses ASN.1 elliptic curve parameters Also any other applications that use the BN_mod_sqrt() where the attacker can control the parameter values are vulnerable to this DoS issue. In the OpenSSL 1.0.2 version the public key is not parsed during initial parsing of the certificate which makes it slightly harder to trigger the infinite loop. However any operation which requires the public key from the certificate will trigger the infinite loop. In particular the attacker can use a self-signed certificate to trigger the loop during verification of the certificate signature. This issue affects OpenSSL versions 1.0.2, 1.1.1 and 3.0. It was addressed in the releases of 1.1.1n and 3.0.2 on the 15th March 2022. Fixed in OpenSSL 3.0.2 (Affected 3.0.0,3.0.1). Fixed in OpenSSL 1.1.1n (Affected 1.1.1-1.1.1m). Fixed in OpenSSL 1.0.2zd (Affected 1.0.2-1.0.2zc).',
-              'diffID':        'sha256:653214eafbfdfbb9f95018b7cfa8c568d757aaafa7d77419b235f082fd19f291',
-              'fixedVersions': [
-                '1.1.1n-r0'
-              ],
-              'installedVersion': '1.1.1k-r0',
-              'packageName':      'libssl1.1',
-              'purl':             'pkg:apk/alpine/libssl1.1@1.1.1k-r0?arch=armhf&distro=3.14.1',
-              'references':       [
-                'http://packetstormsecurity.com/files/167344/OpenSSL-1.0.2-1.1.1-3.0-BN_mod_sqrt-Infinite-Loop.html',
-                'http://seclists.org/fulldisclosure/2022/May/33',
-                'http://seclists.org/fulldisclosure/2022/May/35',
-                'http://seclists.org/fulldisclosure/2022/May/38',
-                'https://access.redhat.com/errata/RHSA-2022:5326',
-                'https://access.redhat.com/security/cve/CVE-2022-0778',
-                'https://bugzilla.redhat.com/2062202',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2062202',
-                'https://cert-portal.siemens.com/productcert/pdf/ssa-712929.pdf',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-0778',
-                'https://errata.almalinux.org/8/ALSA-2022-5326.html',
-                'https://errata.rockylinux.org/RLSA-2022:4899',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=3118eb64934499d93db3230748a452351d1d9a65',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=380085481c64de749a6dd25cdf0bcf4360b30f83',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=a466912611aa6cbdf550cd10601390e587451246',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=3118eb64934499d93db3230748a452351d1d9a65',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=380085481c64de749a6dd25cdf0bcf4360b30f83',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=a466912611aa6cbdf550cd10601390e587451246',
-                'https://linux.oracle.com/cve/CVE-2022-0778.html',
-                'https://linux.oracle.com/errata/ELSA-2022-9272.html',
-                'https://lists.debian.org/debian-lts-announce/2022/03/msg00023.html',
-                'https://lists.debian.org/debian-lts-announce/2022/03/msg00024.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/323SNN6ZX7PRJJWP2BUAFLPUAE42XWLZ',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/323SNN6ZX7PRJJWP2BUAFLPUAE42XWLZ/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GDB3GQVJPXJE7X5C5JN6JAA4XUDWD6E6',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GDB3GQVJPXJE7X5C5JN6JAA4XUDWD6E6/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/W6K3PR542DXWLEFFMFIDMME4CWMHJRMG',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/W6K3PR542DXWLEFFMFIDMME4CWMHJRMG/',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/323SNN6ZX7PRJJWP2BUAFLPUAE42XWLZ',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/GDB3GQVJPXJE7X5C5JN6JAA4XUDWD6E6',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/W6K3PR542DXWLEFFMFIDMME4CWMHJRMG',
-                'https://nvd.nist.gov/vuln/detail/CVE-2022-0778',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2022-0002',
-                'https://rustsec.org/advisories/RUSTSEC-2022-0014.html',
-                'https://security.gentoo.org/glsa/202210-02',
-                'https://security.netapp.com/advisory/ntap-20220321-0002',
-                'https://security.netapp.com/advisory/ntap-20220321-0002/',
-                'https://security.netapp.com/advisory/ntap-20220429-0005',
-                'https://security.netapp.com/advisory/ntap-20220429-0005/',
-                'https://security.netapp.com/advisory/ntap-20240621-0006',
-                'https://security.netapp.com/advisory/ntap-20240621-0006/',
-                'https://support.apple.com/kb/HT213255',
-                'https://support.apple.com/kb/HT213256',
-                'https://support.apple.com/kb/HT213257',
-                'https://ubuntu.com/security/notices/USN-5328-1',
-                'https://ubuntu.com/security/notices/USN-5328-2',
-                'https://ubuntu.com/security/notices/USN-6457-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2022-0778',
-                'https://www.debian.org/security/2022/dsa-5103',
-                'https://www.openssl.org/news/secadv/20220315.txt',
-                'https://www.oracle.com/security-alerts/cpuapr2022.html',
-                'https://www.oracle.com/security-alerts/cpujul2022.html',
-                'https://www.tenable.com/security/tns-2022-06',
-                'https://www.tenable.com/security/tns-2022-07',
-                'https://www.tenable.com/security/tns-2022-08',
-                'https://www.tenable.com/security/tns-2022-09'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: Infinite loop in BN_mod_sqrt() reachable when parsing certificates'
-            },
-            {
-              'cve':  'CVE-2022-4450',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'nvd': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-415'
-              ],
-              'description':   'The function PEM_read_bio_ex() reads a PEM file from a BIO and parses and\ndecodes the "name" (e.g. "CERTIFICATE"), any header data and the payload data.\nIf the function succeeds then the "name_out", "header" and "data" arguments are\npopulated with pointers to buffers containing the relevant decoded data. The\ncaller is responsible for freeing those buffers. It is possible to construct a\nPEM file that results in 0 bytes of payload data. In this case PEM_read_bio_ex()\nwill return a failure code but will populate the header argument with a pointer\nto a buffer that has already been freed. If the caller also frees this buffer\nthen a double free will occur. This will most likely lead to a crash. This\ncould be exploited by an attacker who has the ability to supply malicious PEM\nfiles for parsing to achieve a denial of service attack.\n\nThe functions PEM_read_bio() and PEM_read() are simple wrappers around\nPEM_read_bio_ex() and therefore these functions are also directly affected.\n\nThese functions are also called indirectly by a number of other OpenSSL\nfunctions including PEM_X509_INFO_read_bio_ex() and\nSSL_CTX_use_serverinfo_file() which are also vulnerable. Some OpenSSL internal\nuses of these functions are not vulnerable because the caller does not free the\nheader argument if PEM_read_bio_ex() returns a failure code. These locations\ninclude the PEM_read_bio_TYPE() functions as well as the decoders introduced in\nOpenSSL 3.0.\n\nThe OpenSSL asn1parse command line application is also impacted by this issue.',
-              'diffID':        'sha256:653214eafbfdfbb9f95018b7cfa8c568d757aaafa7d77419b235f082fd19f291',
-              'fixedVersions': [
-                '1.1.1t-r0'
-              ],
-              'installedVersion': '1.1.1k-r0',
-              'packageName':      'libssl1.1',
-              'purl':             'pkg:apk/alpine/libssl1.1@1.1.1k-r0?arch=armhf&distro=3.14.1',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2023:2165',
-                'https://access.redhat.com/security/cve/CVE-2022-4450',
-                'https://bugzilla.redhat.com/1960321',
-                'https://bugzilla.redhat.com/2164440',
-                'https://bugzilla.redhat.com/2164487',
-                'https://bugzilla.redhat.com/2164492',
-                'https://bugzilla.redhat.com/2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144000',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144003',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144006',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144008',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144010',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144012',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144015',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144017',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144019',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2145170',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2158412',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164440',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164487',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164488',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164492',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164497',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164499',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164500',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4203',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4304',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4450',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0215',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0216',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0217',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0286',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0401',
-                'https://errata.almalinux.org/9/ALSA-2023-2165.html',
-                'https://errata.rockylinux.org/RLSA-2023:0946',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=63bcf189be73a9cc1264059bed6f57974be74a83',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=bbcf509bd046b34cca19c766bbddc31683d0858b',
-                'https://linux.oracle.com/cve/CVE-2022-4450.html',
-                'https://linux.oracle.com/errata/ELSA-2023-32791.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2022-4450',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0003',
-                'https://rustsec.org/advisories/RUSTSEC-2023-0010.html',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://ubuntu.com/security/notices/USN-5844-1',
-                'https://ubuntu.com/security/notices/USN-6564-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2022-4450',
-                'https://www.openssl.org/news/secadv/20230207.txt'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: double free after calling PEM_read_bio_ex'
-            },
-            {
-              'cve':  'CVE-2023-0215',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'nvd': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   'The public API function BIO_new_NDEF is a helper function used for streaming\nASN.1 data via a BIO. It is primarily used internally to OpenSSL to support the\nSMIME, CMS and PKCS7 streaming capabilities, but may also be called directly by\nend user applications.\n\nThe function receives a BIO from the caller, prepends a new BIO_f_asn1 filter\nBIO onto the front of it to form a BIO chain, and then returns the new head of\nthe BIO chain to the caller. Under certain conditions, for example if a CMS\nrecipient public key is invalid, the new filter BIO is freed and the function\nreturns a NULL result indicating a failure. However, in this case, the BIO chain\nis not properly cleaned up and the BIO passed by the caller still retains\ninternal pointers to the previously freed filter BIO. If the caller then goes on\nto call BIO_pop() on the BIO then a use-after-free will occur. This will most\nlikely result in a crash.\n\n\n\nThis scenario occurs directly in the internal function B64_write_ASN1() which\nmay cause BIO_new_NDEF() to be called and will subsequently call BIO_pop() on\nthe BIO. This internal function is in turn called by the public API functions\nPEM_write_bio_ASN1_stream, PEM_write_bio_CMS_stream, PEM_write_bio_PKCS7_stream,\nSMIME_write_ASN1, SMIME_write_CMS and SMIME_write_PKCS7.\n\nOther public API functions that may be impacted by this include\ni2d_ASN1_bio_stream, BIO_new_CMS, BIO_new_PKCS7, i2d_CMS_bio_stream and\ni2d_PKCS7_bio_stream.\n\nThe OpenSSL cms and smime command line applications are similarly affected.',
-              'diffID':        'sha256:653214eafbfdfbb9f95018b7cfa8c568d757aaafa7d77419b235f082fd19f291',
-              'fixedVersions': [
-                '1.1.1t-r0'
-              ],
-              'installedVersion': '1.1.1k-r0',
-              'packageName':      'libssl1.1',
-              'purl':             'pkg:apk/alpine/libssl1.1@1.1.1k-r0?arch=armhf&distro=3.14.1',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2023:2165',
-                'https://access.redhat.com/security/cve/CVE-2023-0215',
-                'https://bugzilla.redhat.com/1960321',
-                'https://bugzilla.redhat.com/2164440',
-                'https://bugzilla.redhat.com/2164487',
-                'https://bugzilla.redhat.com/2164492',
-                'https://bugzilla.redhat.com/2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144000',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144003',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144006',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144008',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144010',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144012',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144015',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144017',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144019',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2145170',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2158412',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164440',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164487',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164488',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164492',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164497',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164499',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164500',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4203',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4304',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4450',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0215',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0216',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0217',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0286',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0401',
-                'https://errata.almalinux.org/9/ALSA-2023-2165.html',
-                'https://errata.rockylinux.org/RLSA-2023:0946',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=8818064ce3c3c0f1b740a5aaba2a987e75bfbafd',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=9816136fe31d92ace4037d5da5257f763aeeb4eb',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=c3829dd8825c654652201e16f8a0a0c46ee3f344',
-                'https://linux.oracle.com/cve/CVE-2023-0215.html',
-                'https://linux.oracle.com/errata/ELSA-2023-32791.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-0215',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0003',
-                'https://rustsec.org/advisories/RUSTSEC-2023-0009.html',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://security.netapp.com/advisory/ntap-20230427-0007',
-                'https://security.netapp.com/advisory/ntap-20230427-0007/',
-                'https://security.netapp.com/advisory/ntap-20230427-0009',
-                'https://security.netapp.com/advisory/ntap-20230427-0009/',
-                'https://security.netapp.com/advisory/ntap-20240621-0006',
-                'https://security.netapp.com/advisory/ntap-20240621-0006/',
-                'https://ubuntu.com/security/notices/USN-5844-1',
-                'https://ubuntu.com/security/notices/USN-5845-1',
-                'https://ubuntu.com/security/notices/USN-5845-2',
-                'https://ubuntu.com/security/notices/USN-6564-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-0215',
-                'https://www.openssl.org/news/secadv/20230207.txt'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: use-after-free following BIO_new_NDEF'
-            },
-            {
-              'cve':  'CVE-2023-0286',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '7.4',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H'
-                },
-                'nvd': {
-                  'v3score':  '7.4',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.4',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-843'
-              ],
-              'description':   'There is a type confusion vulnerability relating to X.400 address processing\ninside an X.509 GeneralName. X.400 addresses were parsed as an ASN1_STRING but\nthe public structure definition for GENERAL_NAME incorrectly specified the type\nof the x400Address field as ASN1_TYPE. This field is subsequently interpreted by\nthe OpenSSL function GENERAL_NAME_cmp as an ASN1_TYPE rather than an\nASN1_STRING.\n\nWhen CRL checking is enabled (i.e. the application sets the\nX509_V_FLAG_CRL_CHECK flag), this vulnerability may allow an attacker to pass\narbitrary pointers to a memcmp call, enabling them to read memory contents or\nenact a denial of service. In most cases, the attack requires the attacker to\nprovide both the certificate chain and CRL, neither of which need to have a\nvalid signature. If the attacker only controls one of these inputs, the other\ninput must already contain an X.400 address as a CRL distribution point, which\nis uncommon. As such, this vulnerability is most likely to only affect\napplications which have implemented their own functionality for retrieving CRLs\nover a network.',
-              'diffID':        'sha256:653214eafbfdfbb9f95018b7cfa8c568d757aaafa7d77419b235f082fd19f291',
-              'fixedVersions': [
-                '1.1.1t-r0'
-              ],
-              'installedVersion': '1.1.1k-r0',
-              'packageName':      'libssl1.1',
-              'purl':             'pkg:apk/alpine/libssl1.1@1.1.1k-r0?arch=armhf&distro=3.14.1',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2025:7937',
-                'https://access.redhat.com/security/cve/CVE-2023-0286',
-                'https://access.redhat.com/security/cve/cve-2023-0286',
-                'https://bugzilla.redhat.com/2164440',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144000',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144003',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144006',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144008',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144010',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144012',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144015',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144017',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144019',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2145170',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2158412',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164440',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164487',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164488',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164492',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164497',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164499',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164500',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4203',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4304',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4450',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0215',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0216',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0217',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0286',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0401',
-                'https://errata.almalinux.org/9/ALSA-2025-7937.html',
-                'https://errata.rockylinux.org/RLSA-2023:0946',
-                'https://ftp.openbsd.org/pub/OpenBSD/LibreSSL/libressl-3.6.2-relnotes.txt',
-                'https://ftp.openbsd.org/pub/OpenBSD/patches/7.2/common/018_x509.patch.sig',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=2c6c9d439b484e1ba9830d8454a34fa4f80fdfe9',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=2f7530077e0ef79d98718138716bc51ca0cad658',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=fd2af07dc083a350c959147097003a14a5e8ac4d',
-                'https://github.com/pyca/cryptography',
-                'https://github.com/pyca/cryptography/security/advisories/GHSA-x4qr-2fvf-3mr5',
-                'https://linux.oracle.com/cve/CVE-2023-0286.html',
-                'https://linux.oracle.com/errata/ELSA-2025-7937.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-0286',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0003',
-                'https://rustsec.org/advisories/RUSTSEC-2023-0006.html',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://ubuntu.com/security/notices/USN-5844-1',
-                'https://ubuntu.com/security/notices/USN-5845-1',
-                'https://ubuntu.com/security/notices/USN-5845-2',
-                'https://ubuntu.com/security/notices/USN-6564-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-0286',
-                'https://www.openssl.org/news/secadv/20230207.txt'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: X.400 address type confusion in X.509 GeneralName'
-            },
-            {
-              'cve':  'CVE-2023-0464',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-295'
-              ],
-              'description':   "A security vulnerability has been identified in all supported versions\n\nof OpenSSL related to the verification of X.509 certificate chains\nthat include policy constraints.  Attackers may be able to exploit this\nvulnerability by creating a malicious certificate chain that triggers\nexponential use of computational resources, leading to a denial-of-service\n(DoS) attack on affected systems.\n\nPolicy processing is disabled by default but can be enabled by passing\nthe `-policy' argument to the command line utilities or by calling the\n`X509_VERIFY_PARAM_set1_policies()' function.",
-              'diffID':        'sha256:653214eafbfdfbb9f95018b7cfa8c568d757aaafa7d77419b235f082fd19f291',
-              'fixedVersions': [
-                '1.1.1t-r1'
-              ],
-              'installedVersion': '1.1.1k-r0',
-              'packageName':      'libssl1.1',
-              'purl':             'pkg:apk/alpine/libssl1.1@1.1.1k-r0?arch=armhf&distro=3.14.1',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2023:3722',
-                'https://access.redhat.com/security/cve/CVE-2023-0464',
-                'https://bugzilla.redhat.com/2181082',
-                'https://bugzilla.redhat.com/2182561',
-                'https://bugzilla.redhat.com/2182565',
-                'https://bugzilla.redhat.com/2188461',
-                'https://bugzilla.redhat.com/2207947',
-                'https://errata.almalinux.org/9/ALSA-2023-3722.html',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=2017771e2db3e2b96f89bbe8766c3209f6a99545',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=2dcd4f1e3115f38cefa43e3efbe9b801c27e642e',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=879f7080d7e141f415c79eaa3a8ac4a3dad0348b',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=959c59c7a0164117e7f8366466a32bb1f8d77ff1',
-                'https://linux.oracle.com/cve/CVE-2023-0464.html',
-                'https://linux.oracle.com/errata/ELSA-2023-3722.html',
-                'https://lists.debian.org/debian-lts-announce/2023/06/msg00011.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-0464',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://security.netapp.com/advisory/ntap-20230406-0006/',
-                'https://security.netapp.com/advisory/ntap-20240621-0006/',
-                'https://ubuntu.com/security/notices/USN-6039-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.couchbase.com/alerts/',
-                'https://www.cve.org/CVERecord?id=CVE-2023-0464',
-                'https://www.debian.org/security/2023/dsa-5417',
-                'https://www.openssl.org/news/secadv/20230322.txt'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: Denial of service by excessive resource usage in verifying X509 policy constraints'
-            },
-            {
-              'cve':  'CVE-2022-2097',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N'
-                },
-                'nvd': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N'
-                },
-                'redhat': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-327'
-              ],
-              'description':   "AES OCB mode for 32-bit x86 platforms using the AES-NI assembly optimised implementation will not encrypt the entirety of the data under some circumstances. This could reveal sixteen bytes of data that was preexisting in the memory that wasn't written. In the special case of \"in place\" encryption, sixteen bytes of the plaintext would be revealed. Since OpenSSL does not support OCB based cipher suites for TLS and DTLS, they are both unaffected. Fixed in OpenSSL 3.0.5 (Affected 3.0.0-3.0.4). Fixed in OpenSSL 1.1.1q (Affected 1.1.1-1.1.1p).",
-              'diffID':        'sha256:653214eafbfdfbb9f95018b7cfa8c568d757aaafa7d77419b235f082fd19f291',
-              'fixedVersions': [
-                '1.1.1q-r0'
-              ],
-              'installedVersion': '1.1.1k-r0',
-              'packageName':      'libssl1.1',
-              'purl':             'pkg:apk/alpine/libssl1.1@1.1.1k-r0?arch=armhf&distro=3.14.1',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2022:6224',
-                'https://access.redhat.com/security/cve/CVE-2022-2097',
-                'https://bugzilla.redhat.com/2081494',
-                'https://bugzilla.redhat.com/2087911',
-                'https://bugzilla.redhat.com/2087913',
-                'https://bugzilla.redhat.com/2097310',
-                'https://bugzilla.redhat.com/2104905',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2081494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2097310',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2100554',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2104905',
-                'https://cert-portal.siemens.com/productcert/pdf/ssa-332410.pdf',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-1292',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-2068',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-2097',
-                'https://errata.almalinux.org/9/ALSA-2022-6224.html',
-                'https://errata.rockylinux.org/RLSA-2022:5818',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=919925673d6c9cfed3c1085497f5dfbbed5fc431',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=a98f339ddd7e8f487d6e0088d4a9a42324885a93',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=919925673d6c9cfed3c1085497f5dfbbed5fc431',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=a98f339ddd7e8f487d6e0088d4a9a42324885a93',
-                'https://github.com/alexcrichton/openssl-src-rs',
-                'https://linux.oracle.com/cve/CVE-2022-2097.html',
-                'https://linux.oracle.com/errata/ELSA-2022-9955.html',
-                'https://lists.debian.org/debian-lts-announce/2023/02/msg00019.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/R6CK57NBQFTPUMXAPJURCGXUYT76NQAK',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/R6CK57NBQFTPUMXAPJURCGXUYT76NQAK/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/V6567JERRHHJW2GNGJGKDRNHR7SNPZK7',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/V6567JERRHHJW2GNGJGKDRNHR7SNPZK7/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VCMNWKERPBKOEBNL7CLTTX3ZZCZLH7XA',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VCMNWKERPBKOEBNL7CLTTX3ZZCZLH7XA/',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/R6CK57NBQFTPUMXAPJURCGXUYT76NQAK',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/R6CK57NBQFTPUMXAPJURCGXUYT76NQAK/',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/V6567JERRHHJW2GNGJGKDRNHR7SNPZK7',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/V6567JERRHHJW2GNGJGKDRNHR7SNPZK7/',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/VCMNWKERPBKOEBNL7CLTTX3ZZCZLH7XA',
-                'https://nvd.nist.gov/vuln/detail/CVE-2022-2097',
-                'https://rustsec.org/advisories/RUSTSEC-2022-0032.html',
-                'https://security.gentoo.org/glsa/202210-02',
-                'https://security.netapp.com/advisory/ntap-20220715-0011',
-                'https://security.netapp.com/advisory/ntap-20220715-0011/',
-                'https://security.netapp.com/advisory/ntap-20230420-0008',
-                'https://security.netapp.com/advisory/ntap-20230420-0008/',
-                'https://security.netapp.com/advisory/ntap-20240621-0006',
-                'https://security.netapp.com/advisory/ntap-20240621-0006/',
-                'https://ubuntu.com/security/notices/USN-5502-1',
-                'https://ubuntu.com/security/notices/USN-6457-1',
-                'https://www.cve.org/CVERecord?id=CVE-2022-2097',
-                'https://www.debian.org/security/2023/dsa-5343',
-                'https://www.openssl.org/news/secadv/20220705.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: AES OCB fails to encrypt some bytes'
-            },
-            {
-              'cve':  'CVE-2022-4304',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N'
-                },
-                'nvd': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N'
-                },
-                'redhat': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-203'
-              ],
-              'description':   'A timing based side channel exists in the OpenSSL RSA Decryption implementation\nwhich could be sufficient to recover a plaintext across a network in a\nBleichenbacher style attack. To achieve a successful decryption an attacker\nwould have to be able to send a very large number of trial messages for\ndecryption. The vulnerability affects all RSA padding modes: PKCS#1 v1.5,\nRSA-OEAP and RSASVE.\n\nFor example, in a TLS connection, RSA is commonly used by a client to send an\nencrypted pre-master secret to the server. An attacker that had observed a\ngenuine connection between a client and a server could use this flaw to send\ntrial messages to the server and record the time taken to process them. After a\nsufficiently large number of messages the attacker could recover the pre-master\nsecret used for the original connection and thus be able to decrypt the\napplication data sent over that connection.',
-              'diffID':        'sha256:653214eafbfdfbb9f95018b7cfa8c568d757aaafa7d77419b235f082fd19f291',
-              'fixedVersions': [
-                '1.1.1t-r0'
-              ],
-              'installedVersion': '1.1.1k-r0',
-              'packageName':      'libssl1.1',
-              'purl':             'pkg:apk/alpine/libssl1.1@1.1.1k-r0?arch=armhf&distro=3.14.1',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2023:2165',
-                'https://access.redhat.com/security/cve/CVE-2022-4304',
-                'https://bugzilla.redhat.com/1960321',
-                'https://bugzilla.redhat.com/2164440',
-                'https://bugzilla.redhat.com/2164487',
-                'https://bugzilla.redhat.com/2164492',
-                'https://bugzilla.redhat.com/2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144000',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144003',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144006',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144008',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144010',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144012',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144015',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144017',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144019',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2145170',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2158412',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164440',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164487',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164488',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164492',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164497',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164499',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164500',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4203',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4304',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4450',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0215',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0216',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0217',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0286',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0401',
-                'https://errata.almalinux.org/9/ALSA-2023-2165.html',
-                'https://errata.rockylinux.org/RLSA-2023:0946',
-                'https://linux.oracle.com/cve/CVE-2022-4304.html',
-                'https://linux.oracle.com/errata/ELSA-2023-32791.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2022-4304',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0003',
-                'https://rustsec.org/advisories/RUSTSEC-2023-0007.html',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://ubuntu.com/security/notices/USN-5844-1',
-                'https://ubuntu.com/security/notices/USN-6564-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2022-4304',
-                'https://www.openssl.org/news/secadv/20230207.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: timing attack in RSA Decryption implementation'
-            },
-            {
-              'cve':  'CVE-2023-0465',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N'
-                },
-                'redhat': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-295'
-              ],
-              'description':   "Applications that use a non-default option when verifying certificates may be\nvulnerable to an attack from a malicious CA to circumvent certain checks.\n\nInvalid certificate policies in leaf certificates are silently ignored by\nOpenSSL and other certificate policy checks are skipped for that certificate.\nA malicious CA could use this to deliberately assert invalid certificate policies\nin order to circumvent policy checking on the certificate altogether.\n\nPolicy processing is disabled by default but can be enabled by passing\nthe `-policy' argument to the command line utilities or by calling the\n`X509_VERIFY_PARAM_set1_policies()' function.",
-              'diffID':        'sha256:653214eafbfdfbb9f95018b7cfa8c568d757aaafa7d77419b235f082fd19f291',
-              'fixedVersions': [
-                '1.1.1t-r2'
-              ],
-              'installedVersion': '1.1.1k-r0',
-              'packageName':      'libssl1.1',
-              'purl':             'pkg:apk/alpine/libssl1.1@1.1.1k-r0?arch=armhf&distro=3.14.1',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2023:3722',
-                'https://access.redhat.com/security/cve/CVE-2023-0465',
-                'https://bugzilla.redhat.com/2181082',
-                'https://bugzilla.redhat.com/2182561',
-                'https://bugzilla.redhat.com/2182565',
-                'https://bugzilla.redhat.com/2188461',
-                'https://bugzilla.redhat.com/2207947',
-                'https://errata.almalinux.org/9/ALSA-2023-3722.html',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=10325176f3d3e98c6e2b3bf5ab1e3b334de6947a',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=1dd43e0709fece299b15208f36cc7c76209ba0bb',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=b013765abfa80036dc779dd0e50602c57bb3bf95',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=facfb1ab745646e97a1920977ae4a9965ea61d5c',
-                'https://linux.oracle.com/cve/CVE-2023-0465.html',
-                'https://linux.oracle.com/errata/ELSA-2023-3722.html',
-                'https://lists.debian.org/debian-lts-announce/2023/06/msg00011.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-0465',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://security.netapp.com/advisory/ntap-20230414-0001/',
-                'https://ubuntu.com/security/notices/USN-6039-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-0465',
-                'https://www.debian.org/security/2023/dsa-5417',
-                'https://www.openssl.org/news/secadv/20230328.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: Invalid certificate policies in leaf certificates are silently ignored'
-            },
-            {
-              'cve':  'CVE-2021-42378',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the getvar_i function",
-              'diffID':        'sha256:653214eafbfdfbb9f95018b7cfa8c568d757aaafa7d77419b235f082fd19f291',
-              'fixedVersions': [
-                '1.33.1-r6'
-              ],
-              'installedVersion': '1.33.1-r3',
-              'packageName':      'ssl_client',
-              'purl':             'pkg:apk/alpine/ssl_client@1.33.1-r3?arch=armhf&distro=3.14.1',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42378',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42378',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42378'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the getvar_i()'
-            },
-            {
-              'cve':  'CVE-2021-42379',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the next_input_file function",
-              'diffID':        'sha256:653214eafbfdfbb9f95018b7cfa8c568d757aaafa7d77419b235f082fd19f291',
-              'fixedVersions': [
-                '1.33.1-r6'
-              ],
-              'installedVersion': '1.33.1-r3',
-              'packageName':      'ssl_client',
-              'purl':             'pkg:apk/alpine/ssl_client@1.33.1-r3?arch=armhf&distro=3.14.1',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42379',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42379',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42379'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the next_input_file()'
-            },
-            {
-              'cve':  'CVE-2021-42380',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the clrvar function",
-              'diffID':        'sha256:653214eafbfdfbb9f95018b7cfa8c568d757aaafa7d77419b235f082fd19f291',
-              'fixedVersions': [
-                '1.33.1-r6'
-              ],
-              'installedVersion': '1.33.1-r3',
-              'packageName':      'ssl_client',
-              'purl':             'pkg:apk/alpine/ssl_client@1.33.1-r3?arch=armhf&distro=3.14.1',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42380',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42380',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42380'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the clrvar()'
-            },
-            {
-              'cve':  'CVE-2021-42381',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the hash_init function",
-              'diffID':        'sha256:653214eafbfdfbb9f95018b7cfa8c568d757aaafa7d77419b235f082fd19f291',
-              'fixedVersions': [
-                '1.33.1-r6'
-              ],
-              'installedVersion': '1.33.1-r3',
-              'packageName':      'ssl_client',
-              'purl':             'pkg:apk/alpine/ssl_client@1.33.1-r3?arch=armhf&distro=3.14.1',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42381',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42381',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42381'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the hash_init()'
-            },
-            {
-              'cve':  'CVE-2021-42382',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the getvar_s function",
-              'diffID':        'sha256:653214eafbfdfbb9f95018b7cfa8c568d757aaafa7d77419b235f082fd19f291',
-              'fixedVersions': [
-                '1.33.1-r6'
-              ],
-              'installedVersion': '1.33.1-r3',
-              'packageName':      'ssl_client',
-              'purl':             'pkg:apk/alpine/ssl_client@1.33.1-r3?arch=armhf&distro=3.14.1',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42382',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42382',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42382'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the getvar_s()'
-            },
-            {
-              'cve':  'CVE-2021-42383',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the evaluate function",
-              'diffID':        'sha256:653214eafbfdfbb9f95018b7cfa8c568d757aaafa7d77419b235f082fd19f291',
-              'fixedVersions': [
-                '1.33.1-r6'
-              ],
-              'installedVersion': '1.33.1-r3',
-              'packageName':      'ssl_client',
-              'purl':             'pkg:apk/alpine/ssl_client@1.33.1-r3?arch=armhf&distro=3.14.1',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42383',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42383',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42383'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the evaluate()'
-            },
-            {
-              'cve':  'CVE-2021-42384',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the handle_special function",
-              'diffID':        'sha256:653214eafbfdfbb9f95018b7cfa8c568d757aaafa7d77419b235f082fd19f291',
-              'fixedVersions': [
-                '1.33.1-r6'
-              ],
-              'installedVersion': '1.33.1-r3',
-              'packageName':      'ssl_client',
-              'purl':             'pkg:apk/alpine/ssl_client@1.33.1-r3?arch=armhf&distro=3.14.1',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42384',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42384',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42384'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the handle_special()'
-            },
-            {
-              'cve':  'CVE-2021-42385',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the evaluate function",
-              'diffID':        'sha256:653214eafbfdfbb9f95018b7cfa8c568d757aaafa7d77419b235f082fd19f291',
-              'fixedVersions': [
-                '1.33.1-r6'
-              ],
-              'installedVersion': '1.33.1-r3',
-              'packageName':      'ssl_client',
-              'purl':             'pkg:apk/alpine/ssl_client@1.33.1-r3?arch=armhf&distro=3.14.1',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42385',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42385',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42385'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the evaluate()'
-            },
-            {
-              'cve':  'CVE-2021-42386',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the nvalloc function",
-              'diffID':        'sha256:653214eafbfdfbb9f95018b7cfa8c568d757aaafa7d77419b235f082fd19f291',
-              'fixedVersions': [
-                '1.33.1-r6'
-              ],
-              'installedVersion': '1.33.1-r3',
-              'packageName':      'ssl_client',
-              'purl':             'pkg:apk/alpine/ssl_client@1.33.1-r3?arch=armhf&distro=3.14.1',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42386',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42386',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42386'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the nvalloc()'
-            },
-            {
-              'cve':  'CVE-2022-28391',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '8.8',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-88'
-              ],
-              'description':   "BusyBox through 1.35.0 allows remote attackers to execute arbitrary code if netstat is used to print a DNS PTR record's value to a VT compatible terminal. Alternatively, the attacker could choose to change the terminal's colors.",
-              'diffID':        'sha256:653214eafbfdfbb9f95018b7cfa8c568d757aaafa7d77419b235f082fd19f291',
-              'fixedVersions': [
-                '1.33.1-r7'
-              ],
-              'installedVersion': '1.33.1-r3',
-              'packageName':      'ssl_client',
-              'purl':             'pkg:apk/alpine/ssl_client@1.33.1-r3?arch=armhf&distro=3.14.1',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2022-28391',
-                'https://git.alpinelinux.org/aports/plain/main/busybox/0001-libbb-sockaddr2str-ensure-only-printable-characters-.patch',
-                'https://git.alpinelinux.org/aports/plain/main/busybox/0002-nslookup-sanitize-all-printed-strings-with-printable.patch',
-                'https://gitlab.alpinelinux.org/alpine/aports/-/issues/13661',
-                'https://nvd.nist.gov/vuln/detail/CVE-2022-28391',
-                'https://www.cve.org/CVERecord?id=CVE-2022-28391'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: remote attackers may execute arbitrary code if netstat is used'
-            },
-            {
-              'cve':  'CVE-2021-42374',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '5.7',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-125'
-              ],
-              'description':   "An out-of-bounds heap read in Busybox's unlzma applet leads to information leak and denial of service when crafted LZMA-compressed input is decompressed. This can be triggered by any applet/format that",
-              'diffID':        'sha256:653214eafbfdfbb9f95018b7cfa8c568d757aaafa7d77419b235f082fd19f291',
-              'fixedVersions': [
-                '1.33.1-r4'
-              ],
-              'installedVersion': '1.33.1-r3',
-              'packageName':      'ssl_client',
-              'purl':             'pkg:apk/alpine/ssl_client@1.33.1-r3?arch=armhf&distro=3.14.1',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42374',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42374',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42374'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'busybox: out-of-bounds read in unlzma applet leads to information leak and denial of service when crafted LZMA-compressed input is decompressed'
-            },
-            {
-              'cve':  'CVE-2021-42375',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.5',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '4.1',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-159'
-              ],
-              'description':   "An incorrect handling of a special element in Busybox's ash applet leads to denial of service when processing a crafted shell command, due to the shell mistaking specific characters for reserved characters. This may be used for DoS under rare conditions of filtered command input.",
-              'diffID':        'sha256:653214eafbfdfbb9f95018b7cfa8c568d757aaafa7d77419b235f082fd19f291',
-              'fixedVersions': [
-                '1.33.1-r5'
-              ],
-              'installedVersion': '1.33.1-r3',
-              'packageName':      'ssl_client',
-              'purl':             'pkg:apk/alpine/ssl_client@1.33.1-r3?arch=armhf&distro=3.14.1',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42375',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42375',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42375'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'busybox: incorrect handling of a special element in ash applet leads to denial of service when processing a crafted shell command'
-            },
-            {
-              'cve':  'CVE-2022-37434',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '9.8',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-787',
-                'CWE-120'
-              ],
-              'description':   'zlib through 1.2.12 has a heap-based buffer over-read or buffer overflow in inflate in inflate.c via a large gzip header extra field. NOTE: only applications that call inflateGetHeader are affected. Some common applications bundle the affected zlib source code but may be unable to call inflateGetHeader (e.g., see the nodejs/node reference).',
-              'diffID':        'sha256:653214eafbfdfbb9f95018b7cfa8c568d757aaafa7d77419b235f082fd19f291',
-              'fixedVersions': [
-                '1.2.12-r2'
-              ],
-              'installedVersion': '1.2.11-r3',
-              'packageName':      'zlib',
-              'purl':             'pkg:apk/alpine/zlib@1.2.11-r3?arch=armhf&distro=3.14.1',
-              'references':       [
-                'http://seclists.org/fulldisclosure/2022/Oct/37',
-                'http://seclists.org/fulldisclosure/2022/Oct/38',
-                'http://seclists.org/fulldisclosure/2022/Oct/41',
-                'http://seclists.org/fulldisclosure/2022/Oct/42',
-                'http://www.openwall.com/lists/oss-security/2022/08/05/2',
-                'http://www.openwall.com/lists/oss-security/2022/08/09/1',
-                'https://access.redhat.com/errata/RHSA-2022:8291',
-                'https://access.redhat.com/security/cve/CVE-2022-37434',
-                'https://bugzilla.redhat.com/2116639',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2053198',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2077431',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2081296',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2116639',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-37434',
-                'https://errata.almalinux.org/9/ALSA-2022-8291.html',
-                'https://errata.rockylinux.org/RLSA-2022:8291',
-                'https://github.com/curl/curl/issues/9271',
-                'https://github.com/ivd38/zlib_overflow',
-                'https://github.com/madler/zlib/blob/21767c654d31d2dccdde4330529775c6c5fd5389/zlib.h#L1062-L1063',
-                'https://github.com/madler/zlib/commit/1eb7682f845ac9e9bf9ae35bbfb3bad5dacbd91d',
-                'https://github.com/madler/zlib/commit/eff308af425b67093bab25f80f1ae950166bece1',
-                'https://github.com/nodejs/node/blob/75b68c6e4db515f76df73af476eccf382bbcb00a/deps/zlib/inflate.c#L762-L764',
-                'https://linux.oracle.com/cve/CVE-2022-37434.html',
-                'https://linux.oracle.com/errata/ELSA-2023-1095.html',
-                'https://lists.debian.org/debian-lts-announce/2022/09/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JWN4VE3JQR4O2SOUS5TXNLANRPMHWV4I/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NMBOJ77A7T7PQCARMDUK75TE6LLESZ3O/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PAVPQNCG3XRLCLNSQRM3KAN5ZFMVXVTY/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/X5U7OTKZSHY2I3ZFJSR2SHFHW72RKGDK/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YRQAI7H4M4RQZ2IWZUEEXECBE5D56BH2/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2022-37434',
-                'https://security.netapp.com/advisory/ntap-20220901-0005/',
-                'https://security.netapp.com/advisory/ntap-20230427-0007/',
-                'https://support.apple.com/kb/HT213488',
-                'https://support.apple.com/kb/HT213489',
-                'https://support.apple.com/kb/HT213490',
-                'https://support.apple.com/kb/HT213491',
-                'https://support.apple.com/kb/HT213493',
-                'https://support.apple.com/kb/HT213494',
-                'https://ubuntu.com/security/notices/USN-5570-1',
-                'https://ubuntu.com/security/notices/USN-5570-2',
-                'https://ubuntu.com/security/notices/USN-5573-1',
-                'https://ubuntu.com/security/notices/USN-6736-1',
-                'https://ubuntu.com/security/notices/USN-6736-2',
-                'https://www.cve.org/CVERecord?id=CVE-2022-37434',
-                'https://www.debian.org/security/2022/dsa-5218'
-              ],
-              'severity':   'CRITICAL',
-              'suppressed': false,
-              'title':      'zlib: heap-based buffer over-read and overflow in inflate() in inflate.c via a large gzip header extra field'
-            },
-            {
-              'cve':  'CVE-2018-25032',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'nvd': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '8.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-787'
-              ],
-              'description':   'zlib before 1.2.12 allows memory corruption when deflating (i.e., when compressing) if the input has many distant matches.',
-              'diffID':        'sha256:653214eafbfdfbb9f95018b7cfa8c568d757aaafa7d77419b235f082fd19f291',
-              'fixedVersions': [
-                '1.2.12-r0'
-              ],
-              'installedVersion': '1.2.11-r3',
-              'packageName':      'zlib',
-              'purl':             'pkg:apk/alpine/zlib@1.2.11-r3?arch=armhf&distro=3.14.1',
-              'references':       [
-                'http://seclists.org/fulldisclosure/2022/May/33',
-                'http://seclists.org/fulldisclosure/2022/May/35',
-                'http://seclists.org/fulldisclosure/2022/May/38',
-                'http://www.openwall.com/lists/oss-security/2022/03/25/2',
-                'http://www.openwall.com/lists/oss-security/2022/03/26/1',
-                'https://access.redhat.com/errata/RHSA-2022:8420',
-                'https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-25032.json',
-                'https://access.redhat.com/security/cve/CVE-2018-25032',
-                'https://bugzilla.redhat.com/2067945',
-                'https://cert-portal.siemens.com/productcert/pdf/ssa-333517.pdf',
-                'https://errata.almalinux.org/9/ALSA-2022-8420.html',
-                'https://github.com/advisories/GHSA-jc36-42cf-vqwj',
-                'https://github.com/madler/zlib/commit/5c44459c3b28a9bd3283aaceab7c615f8020c531',
-                'https://github.com/madler/zlib/compare/v1.2.11...v1.2.12',
-                'https://github.com/madler/zlib/issues/605',
-                'https://github.com/rubysec/ruby-advisory-db/blob/master/gems/nokogiri/CVE-2018-25032.yml',
-                'https://github.com/sparklemotion/nokogiri/releases/tag/v1.13.4',
-                'https://github.com/sparklemotion/nokogiri/security/advisories/GHSA-v6gp-9mmm-c6p5',
-                'https://groups.google.com/g/ruby-security-ann/c/vX7qSjsvWis/m/TJWN4oOKBwAJ',
-                'https://linux.oracle.com/cve/CVE-2018-25032.html',
-                'https://linux.oracle.com/errata/ELSA-2022-9565.html',
-                'https://lists.debian.org/debian-lts-announce/2022/04/msg00000.html',
-                'https://lists.debian.org/debian-lts-announce/2022/05/msg00008.html',
-                'https://lists.debian.org/debian-lts-announce/2022/09/msg00023.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DCZFIJBJTZ7CL5QXBFKTQ22Q26VINRUF/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DF62MVMH3QUGMBDCB3DY2ERQ6EBHTADB/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JZZPTWRYQULAOL3AW7RZJNVZ2UONXCV4/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NS2D2GFPFGOJUL4WQ3DUAY7HF4VWQ77F/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VOKNP2L734AEL47NRYGVZIKEFOUBQY5Y/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/XOKFMSNQ5D5WGMALBNBXU3GE442V74WU/',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/DCZFIJBJTZ7CL5QXBFKTQ22Q26VINRUF',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/DCZFIJBJTZ7CL5QXBFKTQ22Q26VINRUF/',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/DF62MVMH3QUGMBDCB3DY2ERQ6EBHTADB',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/DF62MVMH3QUGMBDCB3DY2ERQ6EBHTADB/',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/JZZPTWRYQULAOL3AW7RZJNVZ2UONXCV4',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/JZZPTWRYQULAOL3AW7RZJNVZ2UONXCV4/',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/NS2D2GFPFGOJUL4WQ3DUAY7HF4VWQ77F',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/NS2D2GFPFGOJUL4WQ3DUAY7HF4VWQ77F/',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/VOKNP2L734AEL47NRYGVZIKEFOUBQY5Y',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/VOKNP2L734AEL47NRYGVZIKEFOUBQY5Y/',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/XOKFMSNQ5D5WGMALBNBXU3GE442V74WU',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/XOKFMSNQ5D5WGMALBNBXU3GE442V74WU/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2018-25032',
-                'https://security.gentoo.org/glsa/202210-42',
-                'https://security.netapp.com/advisory/ntap-20220526-0009',
-                'https://security.netapp.com/advisory/ntap-20220526-0009/',
-                'https://security.netapp.com/advisory/ntap-20220729-0004',
-                'https://security.netapp.com/advisory/ntap-20220729-0004/',
-                'https://support.apple.com/kb/HT213255',
-                'https://support.apple.com/kb/HT213256',
-                'https://support.apple.com/kb/HT213257',
-                'https://ubuntu.com/security/notices/USN-5355-1',
-                'https://ubuntu.com/security/notices/USN-5355-2',
-                'https://ubuntu.com/security/notices/USN-5359-1',
-                'https://ubuntu.com/security/notices/USN-5359-2',
-                'https://ubuntu.com/security/notices/USN-5739-1',
-                'https://ubuntu.com/security/notices/USN-6736-1',
-                'https://ubuntu.com/security/notices/USN-6736-2',
-                'https://www.cve.org/CVERecord?id=CVE-2018-25032',
-                'https://www.debian.org/security/2022/dsa-5111',
-                'https://www.openwall.com/lists/oss-security/2022/03/24/1',
-                'https://www.openwall.com/lists/oss-security/2022/03/28/1',
-                'https://www.openwall.com/lists/oss-security/2022/03/28/3',
-                'https://www.oracle.com/security-alerts/cpujul2022.html'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'zlib: A flaw found in zlib when compressing (not decompressing) certain inputs'
-            }
-          ]
-        }
-      ],
-      'summary': {
-        'critical':   3,
-        'high':       34,
-        'low':        0,
-        'medium':     10,
-        'suppressed': 0,
-        'unknown':    0
-      }
-    }
-  },
-  {
-    'id':    'default/63e5543a384b12d65da56e2bf623ed1e71526bbd896f0b676e01852797a5122f',
-    'type':  'storage.sbomscanner.kubewarden.io.vulnerabilityreport',
-    'links': {
-      'patch':  'https://localhost:8005/v1/storage.sbomscanner.kubewarden.io.vulnerabilityreports/default/63e5543a384b12d65da56e2bf623ed1e71526bbd896f0b676e01852797a5122f',
-      'remove': 'https://localhost:8005/v1/storage.sbomscanner.kubewarden.io.vulnerabilityreports/default/63e5543a384b12d65da56e2bf623ed1e71526bbd896f0b676e01852797a5122f',
-      'self':   'https://localhost:8005/v1/storage.sbomscanner.kubewarden.io.vulnerabilityreports/default/63e5543a384b12d65da56e2bf623ed1e71526bbd896f0b676e01852797a5122f',
-      'update': 'https://localhost:8005/v1/storage.sbomscanner.kubewarden.io.vulnerabilityreports/default/63e5543a384b12d65da56e2bf623ed1e71526bbd896f0b676e01852797a5122f',
-      'view':   'https://localhost:8005/apis/storage.sbomscanner.kubewarden.io/v1alpha1/namespaces/default/vulnerabilityreports/63e5543a384b12d65da56e2bf623ed1e71526bbd896f0b676e01852797a5122f'
-    },
-    'apiVersion':    'storage.sbomscanner.kubewarden.io/v1alpha1',
-    'imageMetadata': {
-      'digest':      'sha256:4d9a80b2d1c942e604a5b50d0375d1ddfaedbd0db38d56e8b3a0595461781db9',
-      'platform':    'linux/amd64',
-      'registry':    'demo-02',
-      'registryURI': 'ghcr.io',
-      'repository':  'linuxcontainers/alpine',
-      'tag':         '3.15.4'
-    },
-    'kind':     'VulnerabilityReport',
-    'metadata': {
-      'creationTimestamp': '2026-01-09T22:46:46Z',
-      'fields':            [
-        '63e5543a384b12d65da56e2bf623ed1e71526bbd896f0b676e01852797a5122f',
-        'ghcr.io/linuxcontainers/alpine:3.15.4',
-        'linux/amd64',
-        '23 (0 suppressed)'
-      ],
-      'labels': {
-        'app.kubernetes.io/managed-by':          'sbomscanner',
-        'app.kubernetes.io/part-of':             'sbomscanner',
-        'sbomscanner.kubewarden.io/scanjob-uid': '42184d01-4b15-466f-98aa-e802d1b6b6b8'
-      },
-      'name':            '63e5543a384b12d65da56e2bf623ed1e71526bbd896f0b676e01852797a5122f',
-      'namespace':       'default',
-      'ownerReferences': [
-        {
-          'apiVersion':         'storage.sbomscanner.kubewarden.io/v1alpha1',
-          'blockOwnerDeletion': true,
-          'controller':         true,
-          'kind':               'SBOM',
-          'name':               '63e5543a384b12d65da56e2bf623ed1e71526bbd896f0b676e01852797a5122f',
-          'uid':                'b9c1a21d-0a1b-44ee-9dfb-293ac182d48e'
-        }
-      ],
-      'relationships': [
-        {
-          'fromId':   'default/63e5543a384b12d65da56e2bf623ed1e71526bbd896f0b676e01852797a5122f',
-          'fromType': 'storage.sbomscanner.kubewarden.io.sbom',
-          'rel':      'owner',
-          'state':    'active',
-          'message':  'Resource is current'
-        }
-      ],
-      'resourceVersion': '6',
-      'state':           {
-        'error':         false,
-        'message':       'Resource is current',
-        'name':          'active',
-        'transitioning': false
-      },
-      'uid': '5d1233bf-0aa3-4591-8202-da1f5c519586'
-    },
-    'report': {
-      'results': [
-        {
-          'class':           'os-pkgs',
-          'target':          '/var/run/worker/trivy.sbom.2983456435.json (alpine 3.15.4)',
-          'type':            'alpine',
-          'vulnerabilities': [
-            {
-              'cve':  'CVE-2022-4450',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'nvd': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-415'
-              ],
-              'description':   'The function PEM_read_bio_ex() reads a PEM file from a BIO and parses and\ndecodes the "name" (e.g. "CERTIFICATE"), any header data and the payload data.\nIf the function succeeds then the "name_out", "header" and "data" arguments are\npopulated with pointers to buffers containing the relevant decoded data. The\ncaller is responsible for freeing those buffers. It is possible to construct a\nPEM file that results in 0 bytes of payload data. In this case PEM_read_bio_ex()\nwill return a failure code but will populate the header argument with a pointer\nto a buffer that has already been freed. If the caller also frees this buffer\nthen a double free will occur. This will most likely lead to a crash. This\ncould be exploited by an attacker who has the ability to supply malicious PEM\nfiles for parsing to achieve a denial of service attack.\n\nThe functions PEM_read_bio() and PEM_read() are simple wrappers around\nPEM_read_bio_ex() and therefore these functions are also directly affected.\n\nThese functions are also called indirectly by a number of other OpenSSL\nfunctions including PEM_X509_INFO_read_bio_ex() and\nSSL_CTX_use_serverinfo_file() which are also vulnerable. Some OpenSSL internal\nuses of these functions are not vulnerable because the caller does not free the\nheader argument if PEM_read_bio_ex() returns a failure code. These locations\ninclude the PEM_read_bio_TYPE() functions as well as the decoders introduced in\nOpenSSL 3.0.\n\nThe OpenSSL asn1parse command line application is also impacted by this issue.',
-              'diffID':        'sha256:56cf0b2037124bb42ac647fb7074d2b0484c23020a94841a502cda70e1e81248',
-              'fixedVersions': [
-                '1.1.1t-r0'
-              ],
-              'installedVersion': '1.1.1o-r0',
-              'packageName':      'libcrypto1.1',
-              'purl':             'pkg:apk/alpine/libcrypto1.1@1.1.1o-r0?arch=x86_64&distro=3.15.4',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2023:2165',
-                'https://access.redhat.com/security/cve/CVE-2022-4450',
-                'https://bugzilla.redhat.com/1960321',
-                'https://bugzilla.redhat.com/2164440',
-                'https://bugzilla.redhat.com/2164487',
-                'https://bugzilla.redhat.com/2164492',
-                'https://bugzilla.redhat.com/2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144000',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144003',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144006',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144008',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144010',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144012',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144015',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144017',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144019',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2145170',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2158412',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164440',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164487',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164488',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164492',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164497',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164499',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164500',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4203',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4304',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4450',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0215',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0216',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0217',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0286',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0401',
-                'https://errata.almalinux.org/9/ALSA-2023-2165.html',
-                'https://errata.rockylinux.org/RLSA-2023:0946',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=63bcf189be73a9cc1264059bed6f57974be74a83',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=bbcf509bd046b34cca19c766bbddc31683d0858b',
-                'https://linux.oracle.com/cve/CVE-2022-4450.html',
-                'https://linux.oracle.com/errata/ELSA-2023-32791.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2022-4450',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0003',
-                'https://rustsec.org/advisories/RUSTSEC-2023-0010.html',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://ubuntu.com/security/notices/USN-5844-1',
-                'https://ubuntu.com/security/notices/USN-6564-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2022-4450',
-                'https://www.openssl.org/news/secadv/20230207.txt'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: double free after calling PEM_read_bio_ex'
-            },
-            {
-              'cve':  'CVE-2023-0215',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'nvd': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   'The public API function BIO_new_NDEF is a helper function used for streaming\nASN.1 data via a BIO. It is primarily used internally to OpenSSL to support the\nSMIME, CMS and PKCS7 streaming capabilities, but may also be called directly by\nend user applications.\n\nThe function receives a BIO from the caller, prepends a new BIO_f_asn1 filter\nBIO onto the front of it to form a BIO chain, and then returns the new head of\nthe BIO chain to the caller. Under certain conditions, for example if a CMS\nrecipient public key is invalid, the new filter BIO is freed and the function\nreturns a NULL result indicating a failure. However, in this case, the BIO chain\nis not properly cleaned up and the BIO passed by the caller still retains\ninternal pointers to the previously freed filter BIO. If the caller then goes on\nto call BIO_pop() on the BIO then a use-after-free will occur. This will most\nlikely result in a crash.\n\n\n\nThis scenario occurs directly in the internal function B64_write_ASN1() which\nmay cause BIO_new_NDEF() to be called and will subsequently call BIO_pop() on\nthe BIO. This internal function is in turn called by the public API functions\nPEM_write_bio_ASN1_stream, PEM_write_bio_CMS_stream, PEM_write_bio_PKCS7_stream,\nSMIME_write_ASN1, SMIME_write_CMS and SMIME_write_PKCS7.\n\nOther public API functions that may be impacted by this include\ni2d_ASN1_bio_stream, BIO_new_CMS, BIO_new_PKCS7, i2d_CMS_bio_stream and\ni2d_PKCS7_bio_stream.\n\nThe OpenSSL cms and smime command line applications are similarly affected.',
-              'diffID':        'sha256:56cf0b2037124bb42ac647fb7074d2b0484c23020a94841a502cda70e1e81248',
-              'fixedVersions': [
-                '1.1.1t-r0'
-              ],
-              'installedVersion': '1.1.1o-r0',
-              'packageName':      'libcrypto1.1',
-              'purl':             'pkg:apk/alpine/libcrypto1.1@1.1.1o-r0?arch=x86_64&distro=3.15.4',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2023:2165',
-                'https://access.redhat.com/security/cve/CVE-2023-0215',
-                'https://bugzilla.redhat.com/1960321',
-                'https://bugzilla.redhat.com/2164440',
-                'https://bugzilla.redhat.com/2164487',
-                'https://bugzilla.redhat.com/2164492',
-                'https://bugzilla.redhat.com/2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144000',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144003',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144006',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144008',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144010',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144012',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144015',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144017',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144019',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2145170',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2158412',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164440',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164487',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164488',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164492',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164497',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164499',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164500',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4203',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4304',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4450',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0215',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0216',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0217',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0286',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0401',
-                'https://errata.almalinux.org/9/ALSA-2023-2165.html',
-                'https://errata.rockylinux.org/RLSA-2023:0946',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=8818064ce3c3c0f1b740a5aaba2a987e75bfbafd',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=9816136fe31d92ace4037d5da5257f763aeeb4eb',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=c3829dd8825c654652201e16f8a0a0c46ee3f344',
-                'https://linux.oracle.com/cve/CVE-2023-0215.html',
-                'https://linux.oracle.com/errata/ELSA-2023-32791.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-0215',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0003',
-                'https://rustsec.org/advisories/RUSTSEC-2023-0009.html',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://security.netapp.com/advisory/ntap-20230427-0007',
-                'https://security.netapp.com/advisory/ntap-20230427-0007/',
-                'https://security.netapp.com/advisory/ntap-20230427-0009',
-                'https://security.netapp.com/advisory/ntap-20230427-0009/',
-                'https://security.netapp.com/advisory/ntap-20240621-0006',
-                'https://security.netapp.com/advisory/ntap-20240621-0006/',
-                'https://ubuntu.com/security/notices/USN-5844-1',
-                'https://ubuntu.com/security/notices/USN-5845-1',
-                'https://ubuntu.com/security/notices/USN-5845-2',
-                'https://ubuntu.com/security/notices/USN-6564-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-0215',
-                'https://www.openssl.org/news/secadv/20230207.txt'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: use-after-free following BIO_new_NDEF'
-            },
-            {
-              'cve':  'CVE-2023-0286',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '7.4',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H'
-                },
-                'nvd': {
-                  'v3score':  '7.4',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.4',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-843'
-              ],
-              'description':   'There is a type confusion vulnerability relating to X.400 address processing\ninside an X.509 GeneralName. X.400 addresses were parsed as an ASN1_STRING but\nthe public structure definition for GENERAL_NAME incorrectly specified the type\nof the x400Address field as ASN1_TYPE. This field is subsequently interpreted by\nthe OpenSSL function GENERAL_NAME_cmp as an ASN1_TYPE rather than an\nASN1_STRING.\n\nWhen CRL checking is enabled (i.e. the application sets the\nX509_V_FLAG_CRL_CHECK flag), this vulnerability may allow an attacker to pass\narbitrary pointers to a memcmp call, enabling them to read memory contents or\nenact a denial of service. In most cases, the attack requires the attacker to\nprovide both the certificate chain and CRL, neither of which need to have a\nvalid signature. If the attacker only controls one of these inputs, the other\ninput must already contain an X.400 address as a CRL distribution point, which\nis uncommon. As such, this vulnerability is most likely to only affect\napplications which have implemented their own functionality for retrieving CRLs\nover a network.',
-              'diffID':        'sha256:56cf0b2037124bb42ac647fb7074d2b0484c23020a94841a502cda70e1e81248',
-              'fixedVersions': [
-                '1.1.1t-r0'
-              ],
-              'installedVersion': '1.1.1o-r0',
-              'packageName':      'libcrypto1.1',
-              'purl':             'pkg:apk/alpine/libcrypto1.1@1.1.1o-r0?arch=x86_64&distro=3.15.4',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2025:7937',
-                'https://access.redhat.com/security/cve/CVE-2023-0286',
-                'https://access.redhat.com/security/cve/cve-2023-0286',
-                'https://bugzilla.redhat.com/2164440',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144000',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144003',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144006',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144008',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144010',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144012',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144015',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144017',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144019',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2145170',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2158412',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164440',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164487',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164488',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164492',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164497',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164499',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164500',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4203',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4304',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4450',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0215',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0216',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0217',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0286',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0401',
-                'https://errata.almalinux.org/9/ALSA-2025-7937.html',
-                'https://errata.rockylinux.org/RLSA-2023:0946',
-                'https://ftp.openbsd.org/pub/OpenBSD/LibreSSL/libressl-3.6.2-relnotes.txt',
-                'https://ftp.openbsd.org/pub/OpenBSD/patches/7.2/common/018_x509.patch.sig',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=2c6c9d439b484e1ba9830d8454a34fa4f80fdfe9',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=2f7530077e0ef79d98718138716bc51ca0cad658',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=fd2af07dc083a350c959147097003a14a5e8ac4d',
-                'https://github.com/pyca/cryptography',
-                'https://github.com/pyca/cryptography/security/advisories/GHSA-x4qr-2fvf-3mr5',
-                'https://linux.oracle.com/cve/CVE-2023-0286.html',
-                'https://linux.oracle.com/errata/ELSA-2025-7937.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-0286',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0003',
-                'https://rustsec.org/advisories/RUSTSEC-2023-0006.html',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://ubuntu.com/security/notices/USN-5844-1',
-                'https://ubuntu.com/security/notices/USN-5845-1',
-                'https://ubuntu.com/security/notices/USN-5845-2',
-                'https://ubuntu.com/security/notices/USN-6564-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-0286',
-                'https://www.openssl.org/news/secadv/20230207.txt'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: X.400 address type confusion in X.509 GeneralName'
-            },
-            {
-              'cve':  'CVE-2023-0464',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-295'
-              ],
-              'description':   "A security vulnerability has been identified in all supported versions\n\nof OpenSSL related to the verification of X.509 certificate chains\nthat include policy constraints.  Attackers may be able to exploit this\nvulnerability by creating a malicious certificate chain that triggers\nexponential use of computational resources, leading to a denial-of-service\n(DoS) attack on affected systems.\n\nPolicy processing is disabled by default but can be enabled by passing\nthe `-policy' argument to the command line utilities or by calling the\n`X509_VERIFY_PARAM_set1_policies()' function.",
-              'diffID':        'sha256:56cf0b2037124bb42ac647fb7074d2b0484c23020a94841a502cda70e1e81248',
-              'fixedVersions': [
-                '1.1.1t-r2'
-              ],
-              'installedVersion': '1.1.1o-r0',
-              'packageName':      'libcrypto1.1',
-              'purl':             'pkg:apk/alpine/libcrypto1.1@1.1.1o-r0?arch=x86_64&distro=3.15.4',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2023:3722',
-                'https://access.redhat.com/security/cve/CVE-2023-0464',
-                'https://bugzilla.redhat.com/2181082',
-                'https://bugzilla.redhat.com/2182561',
-                'https://bugzilla.redhat.com/2182565',
-                'https://bugzilla.redhat.com/2188461',
-                'https://bugzilla.redhat.com/2207947',
-                'https://errata.almalinux.org/9/ALSA-2023-3722.html',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=2017771e2db3e2b96f89bbe8766c3209f6a99545',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=2dcd4f1e3115f38cefa43e3efbe9b801c27e642e',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=879f7080d7e141f415c79eaa3a8ac4a3dad0348b',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=959c59c7a0164117e7f8366466a32bb1f8d77ff1',
-                'https://linux.oracle.com/cve/CVE-2023-0464.html',
-                'https://linux.oracle.com/errata/ELSA-2023-3722.html',
-                'https://lists.debian.org/debian-lts-announce/2023/06/msg00011.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-0464',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://security.netapp.com/advisory/ntap-20230406-0006/',
-                'https://security.netapp.com/advisory/ntap-20240621-0006/',
-                'https://ubuntu.com/security/notices/USN-6039-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.couchbase.com/alerts/',
-                'https://www.cve.org/CVERecord?id=CVE-2023-0464',
-                'https://www.debian.org/security/2023/dsa-5417',
-                'https://www.openssl.org/news/secadv/20230322.txt'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: Denial of service by excessive resource usage in verifying X509 policy constraints'
-            },
-            {
-              'cve':  'CVE-2022-2097',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N'
-                },
-                'nvd': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N'
-                },
-                'redhat': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-327'
-              ],
-              'description':   "AES OCB mode for 32-bit x86 platforms using the AES-NI assembly optimised implementation will not encrypt the entirety of the data under some circumstances. This could reveal sixteen bytes of data that was preexisting in the memory that wasn't written. In the special case of \"in place\" encryption, sixteen bytes of the plaintext would be revealed. Since OpenSSL does not support OCB based cipher suites for TLS and DTLS, they are both unaffected. Fixed in OpenSSL 3.0.5 (Affected 3.0.0-3.0.4). Fixed in OpenSSL 1.1.1q (Affected 1.1.1-1.1.1p).",
-              'diffID':        'sha256:56cf0b2037124bb42ac647fb7074d2b0484c23020a94841a502cda70e1e81248',
-              'fixedVersions': [
-                '1.1.1q-r0'
-              ],
-              'installedVersion': '1.1.1o-r0',
-              'packageName':      'libcrypto1.1',
-              'purl':             'pkg:apk/alpine/libcrypto1.1@1.1.1o-r0?arch=x86_64&distro=3.15.4',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2022:6224',
-                'https://access.redhat.com/security/cve/CVE-2022-2097',
-                'https://bugzilla.redhat.com/2081494',
-                'https://bugzilla.redhat.com/2087911',
-                'https://bugzilla.redhat.com/2087913',
-                'https://bugzilla.redhat.com/2097310',
-                'https://bugzilla.redhat.com/2104905',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2081494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2097310',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2100554',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2104905',
-                'https://cert-portal.siemens.com/productcert/pdf/ssa-332410.pdf',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-1292',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-2068',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-2097',
-                'https://errata.almalinux.org/9/ALSA-2022-6224.html',
-                'https://errata.rockylinux.org/RLSA-2022:5818',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=919925673d6c9cfed3c1085497f5dfbbed5fc431',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=a98f339ddd7e8f487d6e0088d4a9a42324885a93',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=919925673d6c9cfed3c1085497f5dfbbed5fc431',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=a98f339ddd7e8f487d6e0088d4a9a42324885a93',
-                'https://github.com/alexcrichton/openssl-src-rs',
-                'https://linux.oracle.com/cve/CVE-2022-2097.html',
-                'https://linux.oracle.com/errata/ELSA-2022-9955.html',
-                'https://lists.debian.org/debian-lts-announce/2023/02/msg00019.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/R6CK57NBQFTPUMXAPJURCGXUYT76NQAK',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/R6CK57NBQFTPUMXAPJURCGXUYT76NQAK/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/V6567JERRHHJW2GNGJGKDRNHR7SNPZK7',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/V6567JERRHHJW2GNGJGKDRNHR7SNPZK7/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VCMNWKERPBKOEBNL7CLTTX3ZZCZLH7XA',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VCMNWKERPBKOEBNL7CLTTX3ZZCZLH7XA/',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/R6CK57NBQFTPUMXAPJURCGXUYT76NQAK',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/R6CK57NBQFTPUMXAPJURCGXUYT76NQAK/',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/V6567JERRHHJW2GNGJGKDRNHR7SNPZK7',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/V6567JERRHHJW2GNGJGKDRNHR7SNPZK7/',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/VCMNWKERPBKOEBNL7CLTTX3ZZCZLH7XA',
-                'https://nvd.nist.gov/vuln/detail/CVE-2022-2097',
-                'https://rustsec.org/advisories/RUSTSEC-2022-0032.html',
-                'https://security.gentoo.org/glsa/202210-02',
-                'https://security.netapp.com/advisory/ntap-20220715-0011',
-                'https://security.netapp.com/advisory/ntap-20220715-0011/',
-                'https://security.netapp.com/advisory/ntap-20230420-0008',
-                'https://security.netapp.com/advisory/ntap-20230420-0008/',
-                'https://security.netapp.com/advisory/ntap-20240621-0006',
-                'https://security.netapp.com/advisory/ntap-20240621-0006/',
-                'https://ubuntu.com/security/notices/USN-5502-1',
-                'https://ubuntu.com/security/notices/USN-6457-1',
-                'https://www.cve.org/CVERecord?id=CVE-2022-2097',
-                'https://www.debian.org/security/2023/dsa-5343',
-                'https://www.openssl.org/news/secadv/20220705.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: AES OCB fails to encrypt some bytes'
-            },
-            {
-              'cve':  'CVE-2022-4304',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N'
-                },
-                'nvd': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N'
-                },
-                'redhat': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-203'
-              ],
-              'description':   'A timing based side channel exists in the OpenSSL RSA Decryption implementation\nwhich could be sufficient to recover a plaintext across a network in a\nBleichenbacher style attack. To achieve a successful decryption an attacker\nwould have to be able to send a very large number of trial messages for\ndecryption. The vulnerability affects all RSA padding modes: PKCS#1 v1.5,\nRSA-OEAP and RSASVE.\n\nFor example, in a TLS connection, RSA is commonly used by a client to send an\nencrypted pre-master secret to the server. An attacker that had observed a\ngenuine connection between a client and a server could use this flaw to send\ntrial messages to the server and record the time taken to process them. After a\nsufficiently large number of messages the attacker could recover the pre-master\nsecret used for the original connection and thus be able to decrypt the\napplication data sent over that connection.',
-              'diffID':        'sha256:56cf0b2037124bb42ac647fb7074d2b0484c23020a94841a502cda70e1e81248',
-              'fixedVersions': [
-                '1.1.1t-r0'
-              ],
-              'installedVersion': '1.1.1o-r0',
-              'packageName':      'libcrypto1.1',
-              'purl':             'pkg:apk/alpine/libcrypto1.1@1.1.1o-r0?arch=x86_64&distro=3.15.4',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2023:2165',
-                'https://access.redhat.com/security/cve/CVE-2022-4304',
-                'https://bugzilla.redhat.com/1960321',
-                'https://bugzilla.redhat.com/2164440',
-                'https://bugzilla.redhat.com/2164487',
-                'https://bugzilla.redhat.com/2164492',
-                'https://bugzilla.redhat.com/2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144000',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144003',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144006',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144008',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144010',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144012',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144015',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144017',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144019',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2145170',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2158412',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164440',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164487',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164488',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164492',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164497',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164499',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164500',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4203',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4304',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4450',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0215',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0216',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0217',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0286',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0401',
-                'https://errata.almalinux.org/9/ALSA-2023-2165.html',
-                'https://errata.rockylinux.org/RLSA-2023:0946',
-                'https://linux.oracle.com/cve/CVE-2022-4304.html',
-                'https://linux.oracle.com/errata/ELSA-2023-32791.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2022-4304',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0003',
-                'https://rustsec.org/advisories/RUSTSEC-2023-0007.html',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://ubuntu.com/security/notices/USN-5844-1',
-                'https://ubuntu.com/security/notices/USN-6564-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2022-4304',
-                'https://www.openssl.org/news/secadv/20230207.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: timing attack in RSA Decryption implementation'
-            },
-            {
-              'cve':  'CVE-2023-0465',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N'
-                },
-                'redhat': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-295'
-              ],
-              'description':   "Applications that use a non-default option when verifying certificates may be\nvulnerable to an attack from a malicious CA to circumvent certain checks.\n\nInvalid certificate policies in leaf certificates are silently ignored by\nOpenSSL and other certificate policy checks are skipped for that certificate.\nA malicious CA could use this to deliberately assert invalid certificate policies\nin order to circumvent policy checking on the certificate altogether.\n\nPolicy processing is disabled by default but can be enabled by passing\nthe `-policy' argument to the command line utilities or by calling the\n`X509_VERIFY_PARAM_set1_policies()' function.",
-              'diffID':        'sha256:56cf0b2037124bb42ac647fb7074d2b0484c23020a94841a502cda70e1e81248',
-              'fixedVersions': [
-                '1.1.1t-r2'
-              ],
-              'installedVersion': '1.1.1o-r0',
-              'packageName':      'libcrypto1.1',
-              'purl':             'pkg:apk/alpine/libcrypto1.1@1.1.1o-r0?arch=x86_64&distro=3.15.4',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2023:3722',
-                'https://access.redhat.com/security/cve/CVE-2023-0465',
-                'https://bugzilla.redhat.com/2181082',
-                'https://bugzilla.redhat.com/2182561',
-                'https://bugzilla.redhat.com/2182565',
-                'https://bugzilla.redhat.com/2188461',
-                'https://bugzilla.redhat.com/2207947',
-                'https://errata.almalinux.org/9/ALSA-2023-3722.html',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=10325176f3d3e98c6e2b3bf5ab1e3b334de6947a',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=1dd43e0709fece299b15208f36cc7c76209ba0bb',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=b013765abfa80036dc779dd0e50602c57bb3bf95',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=facfb1ab745646e97a1920977ae4a9965ea61d5c',
-                'https://linux.oracle.com/cve/CVE-2023-0465.html',
-                'https://linux.oracle.com/errata/ELSA-2023-3722.html',
-                'https://lists.debian.org/debian-lts-announce/2023/06/msg00011.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-0465',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://security.netapp.com/advisory/ntap-20230414-0001/',
-                'https://ubuntu.com/security/notices/USN-6039-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-0465',
-                'https://www.debian.org/security/2023/dsa-5417',
-                'https://www.openssl.org/news/secadv/20230328.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: Invalid certificate policies in leaf certificates are silently ignored'
-            },
-            {
-              'cve':  'CVE-2023-2650',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '6.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-770'
-              ],
-              'description':   "Issue summary: Processing some specially crafted ASN.1 object identifiers or\ndata containing them may be very slow.\n\nImpact summary: Applications that use OBJ_obj2txt() directly, or use any of\nthe OpenSSL subsystems OCSP, PKCS7/SMIME, CMS, CMP/CRMF or TS with no message\nsize limit may experience notable to very long delays when processing those\nmessages, which may lead to a Denial of Service.\n\nAn OBJECT IDENTIFIER is composed of a series of numbers - sub-identifiers -\nmost of which have no size limit.  OBJ_obj2txt() may be used to translate\nan ASN.1 OBJECT IDENTIFIER given in DER encoding form (using the OpenSSL\ntype ASN1_OBJECT) to its canonical numeric text form, which are the\nsub-identifiers of the OBJECT IDENTIFIER in decimal form, separated by\nperiods.\n\nWhen one of the sub-identifiers in the OBJECT IDENTIFIER is very large\n(these are sizes that are seen as absurdly large, taking up tens or hundreds\nof KiBs), the translation to a decimal number in text may take a very long\ntime.  The time complexity is O(n^2) with 'n' being the size of the\nsub-identifiers in bytes (*).\n\nWith OpenSSL 3.0, support to fetch cryptographic algorithms using names /\nidentifiers in string form was introduced.  This includes using OBJECT\nIDENTIFIERs in canonical numeric text form as identifiers for fetching\nalgorithms.\n\nSuch OBJECT IDENTIFIERs may be received through the ASN.1 structure\nAlgorithmIdentifier, which is commonly used in multiple protocols to specify\nwhat cryptographic algorithm should be used to sign or verify, encrypt or\ndecrypt, or digest passed data.\n\nApplications that call OBJ_obj2txt() directly with untrusted data are\naffected, with any version of OpenSSL.  If the use is for the mere purpose\nof display, the severity is considered low.\n\nIn OpenSSL 3.0 and newer, this affects the subsystems OCSP, PKCS7/SMIME,\nCMS, CMP/CRMF or TS.  It also impacts anything that processes X.509\ncertificates, including simple things like verifying its signature.\n\nThe impact on TLS is relatively low, because all versions of OpenSSL have a\n100KiB limit on the peer's certificate chain.  Additionally, this only\nimpacts clients, or servers that have explicitly enabled client\nauthentication.\n\nIn OpenSSL 1.1.1 and 1.0.2, this only affects displaying diverse objects,\nsuch as X.509 certificates.  This is assumed to not happen in such a way\nthat it would cause a Denial of Service, so these versions are considered\nnot affected by this issue in such a way that it would be cause for concern,\nand the severity is therefore considered low.",
-              'diffID':        'sha256:56cf0b2037124bb42ac647fb7074d2b0484c23020a94841a502cda70e1e81248',
-              'fixedVersions': [
-                '1.1.1u-r0'
-              ],
-              'installedVersion': '1.1.1o-r0',
-              'packageName':      'libcrypto1.1',
-              'purl':             'pkg:apk/alpine/libcrypto1.1@1.1.1o-r0?arch=x86_64&distro=3.15.4',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2023/05/30/1',
-                'https://access.redhat.com/errata/RHSA-2023:6330',
-                'https://access.redhat.com/security/cve/CVE-2023-2650',
-                'https://bugzilla.redhat.com/1858038',
-                'https://bugzilla.redhat.com/2207947',
-                'https://errata.almalinux.org/9/ALSA-2023-6330.html',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=423a2bc737a908ad0c77bda470b2b59dc879936b',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=853c5e56ee0b8650c73140816bb8b91d6163422c',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=9e209944b35cf82368071f160a744b6178f9b098',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=db779b0e10b047f2585615e0b8f2acdf21f8544a',
-                'https://linux.oracle.com/cve/CVE-2023-2650.html',
-                'https://linux.oracle.com/errata/ELSA-2023-6330.html',
-                'https://lists.debian.org/debian-lts-announce/2023/06/msg00011.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-2650',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0009',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://security.netapp.com/advisory/ntap-20230703-0001/',
-                'https://security.netapp.com/advisory/ntap-20231027-0009/',
-                'https://ubuntu.com/security/notices/USN-6119-1',
-                'https://ubuntu.com/security/notices/USN-6188-1',
-                'https://ubuntu.com/security/notices/USN-6672-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-2650',
-                'https://www.debian.org/security/2023/dsa-5417',
-                'https://www.openssl.org/news/secadv/20230530.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: Possible DoS translating ASN.1 object identifiers'
-            },
-            {
-              'cve':  'CVE-2023-3446',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L'
-                },
-                'redhat': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L'
-                }
-              },
-              'cwes': [
-                'CWE-606',
-                'CWE-1333'
-              ],
-              'description':   "Issue summary: Checking excessively long DH keys or parameters may be very slow.\n\nImpact summary: Applications that use the functions DH_check(), DH_check_ex()\nor EVP_PKEY_param_check() to check a DH key or DH parameters may experience long\ndelays. Where the key or parameters that are being checked have been obtained\nfrom an untrusted source this may lead to a Denial of Service.\n\nThe function DH_check() performs various checks on DH parameters. One of those\nchecks confirms that the modulus ('p' parameter) is not too large. Trying to use\na very large modulus is slow and OpenSSL will not normally use a modulus which\nis over 10,000 bits in length.\n\nHowever the DH_check() function checks numerous aspects of the key or parameters\nthat have been supplied. Some of those checks use the supplied modulus value\neven if it has already been found to be too large.\n\nAn application that calls DH_check() and supplies a key or parameters obtained\nfrom an untrusted source could be vulernable to a Denial of Service attack.\n\nThe function DH_check() is itself called by a number of other OpenSSL functions.\nAn application calling any of those other functions may similarly be affected.\nThe other functions affected by this are DH_check_ex() and\nEVP_PKEY_param_check().\n\nAlso vulnerable are the OpenSSL dhparam and pkeyparam command line applications\nwhen using the '-check' option.\n\nThe OpenSSL SSL/TLS implementation is not affected by this issue.\nThe OpenSSL 3.0 and 3.1 FIPS providers are not affected by this issue.",
-              'diffID':        'sha256:56cf0b2037124bb42ac647fb7074d2b0484c23020a94841a502cda70e1e81248',
-              'fixedVersions': [
-                '1.1.1u-r2'
-              ],
-              'installedVersion': '1.1.1o-r0',
-              'packageName':      'libcrypto1.1',
-              'purl':             'pkg:apk/alpine/libcrypto1.1@1.1.1o-r0?arch=x86_64&distro=3.15.4',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2023/07/19/4',
-                'http://www.openwall.com/lists/oss-security/2023/07/19/5',
-                'http://www.openwall.com/lists/oss-security/2023/07/19/6',
-                'http://www.openwall.com/lists/oss-security/2023/07/31/1',
-                'http://www.openwall.com/lists/oss-security/2024/05/16/1',
-                'https://access.redhat.com/errata/RHSA-2024:2447',
-                'https://access.redhat.com/security/cve/CVE-2023-3446',
-                'https://bugzilla.redhat.com/2223016',
-                'https://bugzilla.redhat.com/2224962',
-                'https://bugzilla.redhat.com/2227852',
-                'https://bugzilla.redhat.com/2248616',
-                'https://bugzilla.redhat.com/2257571',
-                'https://bugzilla.redhat.com/2258502',
-                'https://bugzilla.redhat.com/2259944',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2224962',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2257582',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2257583',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2258677',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2258688',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2258691',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2258694',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2258700',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-36763',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-36764',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3446',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45229',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45231',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45232',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45233',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45235',
-                'https://errata.almalinux.org/9/ALSA-2024-2447.html',
-                'https://errata.rockylinux.org/RLSA-2024:2264',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=1fa20cf2f506113c761777127a38bce5068740eb',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=8780a896543a654e757db1b9396383f9d8095528',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=9a0a4d3c1e7138915563c0df4fe6a3f9377b839c',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=fc9867c1e03c22ebf56943be205202e576aabf23',
-                'https://linux.oracle.com/cve/CVE-2023-3446.html',
-                'https://linux.oracle.com/errata/ELSA-2024-2447.html',
-                'https://lists.debian.org/debian-lts-announce/2023/08/msg00019.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-3446',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://security.netapp.com/advisory/ntap-20230803-0011/',
-                'https://ubuntu.com/security/notices/USN-6435-1',
-                'https://ubuntu.com/security/notices/USN-6435-2',
-                'https://ubuntu.com/security/notices/USN-6450-1',
-                'https://ubuntu.com/security/notices/USN-6709-1',
-                'https://ubuntu.com/security/notices/USN-7018-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-3446',
-                'https://www.openssl.org/news/secadv/20230719.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: Excessive time spent checking DH keys and parameters'
-            },
-            {
-              'cve':  'CVE-2023-3817',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L'
-                },
-                'redhat': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L'
-                }
-              },
-              'cwes': [
-                'CWE-606',
-                'CWE-834'
-              ],
-              'description':   'Issue summary: Checking excessively long DH keys or parameters may be very slow.\n\nImpact summary: Applications that use the functions DH_check(), DH_check_ex()\nor EVP_PKEY_param_check() to check a DH key or DH parameters may experience long\ndelays. Where the key or parameters that are being checked have been obtained\nfrom an untrusted source this may lead to a Denial of Service.\n\nThe function DH_check() performs various checks on DH parameters. After fixing\nCVE-2023-3446 it was discovered that a large q parameter value can also trigger\nan overly long computation during some of these checks. A correct q value,\nif present, cannot be larger than the modulus p parameter, thus it is\nunnecessary to perform these checks if q is larger than p.\n\nAn application that calls DH_check() and supplies a key or parameters obtained\nfrom an untrusted source could be vulnerable to a Denial of Service attack.\n\nThe function DH_check() is itself called by a number of other OpenSSL functions.\nAn application calling any of those other functions may similarly be affected.\nThe other functions affected by this are DH_check_ex() and\nEVP_PKEY_param_check().\n\nAlso vulnerable are the OpenSSL dhparam and pkeyparam command line applications\nwhen using the "-check" option.\n\nThe OpenSSL SSL/TLS implementation is not affected by this issue.\n\nThe OpenSSL 3.0 and 3.1 FIPS providers are not affected by this issue.',
-              'diffID':        'sha256:56cf0b2037124bb42ac647fb7074d2b0484c23020a94841a502cda70e1e81248',
-              'fixedVersions': [
-                '1.1.1v-r0'
-              ],
-              'installedVersion': '1.1.1o-r0',
-              'packageName':      'libcrypto1.1',
-              'purl':             'pkg:apk/alpine/libcrypto1.1@1.1.1o-r0?arch=x86_64&distro=3.15.4',
-              'references':       [
-                'http://seclists.org/fulldisclosure/2023/Jul/43',
-                'http://www.openwall.com/lists/oss-security/2023/07/31/1',
-                'http://www.openwall.com/lists/oss-security/2023/09/22/11',
-                'http://www.openwall.com/lists/oss-security/2023/09/22/9',
-                'http://www.openwall.com/lists/oss-security/2023/11/06/2',
-                'https://access.redhat.com/errata/RHSA-2024:2447',
-                'https://access.redhat.com/security/cve/CVE-2023-3817',
-                'https://bugzilla.redhat.com/2223016',
-                'https://bugzilla.redhat.com/2224962',
-                'https://bugzilla.redhat.com/2227852',
-                'https://bugzilla.redhat.com/2248616',
-                'https://bugzilla.redhat.com/2257571',
-                'https://bugzilla.redhat.com/2258502',
-                'https://bugzilla.redhat.com/2259944',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2224962',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2227852',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2248616',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2270358',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3446',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3817',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-5678',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-2408',
-                'https://errata.almalinux.org/9/ALSA-2024-2447.html',
-                'https://errata.rockylinux.org/RLSA-2023:7877',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=6a1eb62c29db6cb5eec707f9338aee00f44e26f5',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=869ad69aadd985c7b8ca6f4e5dd0eb274c9f3644',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=9002fd07327a91f35ba6c1307e71fa6fd4409b7f',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=91ddeba0f2269b017dc06c46c993a788974b1aa5',
-                'https://linux.oracle.com/cve/CVE-2023-3817.html',
-                'https://linux.oracle.com/errata/ELSA-2024-2447.html',
-                'https://lists.debian.org/debian-lts-announce/2023/08/msg00019.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-3817',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://security.netapp.com/advisory/ntap-20230818-0014/',
-                'https://security.netapp.com/advisory/ntap-20231027-0008/',
-                'https://security.netapp.com/advisory/ntap-20240621-0006/',
-                'https://ubuntu.com/security/notices/USN-6435-1',
-                'https://ubuntu.com/security/notices/USN-6435-2',
-                'https://ubuntu.com/security/notices/USN-6450-1',
-                'https://ubuntu.com/security/notices/USN-6709-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-3817',
-                'https://www.openssl.org/news/secadv/20230731.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'OpenSSL: Excessive time spent checking DH q parameter value'
-            },
-            {
-              'cve':  'CVE-2023-5678',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L'
-                },
-                'redhat': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L'
-                }
-              },
-              'cwes': [
-                'CWE-606',
-                'CWE-754'
-              ],
-              'description':   "Issue summary: Generating excessively long X9.42 DH keys or checking\nexcessively long X9.42 DH keys or parameters may be very slow.\n\nImpact summary: Applications that use the functions DH_generate_key() to\ngenerate an X9.42 DH key may experience long delays.  Likewise, applications\nthat use DH_check_pub_key(), DH_check_pub_key_ex() or EVP_PKEY_public_check()\nto check an X9.42 DH key or X9.42 DH parameters may experience long delays.\nWhere the key or parameters that are being checked have been obtained from\nan untrusted source this may lead to a Denial of Service.\n\nWhile DH_check() performs all the necessary checks (as of CVE-2023-3817),\nDH_check_pub_key() doesn't make any of these checks, and is therefore\nvulnerable for excessively large P and Q parameters.\n\nLikewise, while DH_generate_key() performs a check for an excessively large\nP, it doesn't check for an excessively large Q.\n\nAn application that calls DH_generate_key() or DH_check_pub_key() and\nsupplies a key or parameters obtained from an untrusted source could be\nvulnerable to a Denial of Service attack.\n\nDH_generate_key() and DH_check_pub_key() are also called by a number of\nother OpenSSL functions.  An application calling any of those other\nfunctions may similarly be affected.  The other functions affected by this\nare DH_check_pub_key_ex(), EVP_PKEY_public_check(), and EVP_PKEY_generate().\n\nAlso vulnerable are the OpenSSL pkey command line application when using the\n\"-pubcheck\" option, as well as the OpenSSL genpkey command line application.\n\nThe OpenSSL SSL/TLS implementation is not affected by this issue.\n\nThe OpenSSL 3.0 and 3.1 FIPS providers are not affected by this issue.",
-              'diffID':        'sha256:56cf0b2037124bb42ac647fb7074d2b0484c23020a94841a502cda70e1e81248',
-              'fixedVersions': [
-                '1.1.1w-r1'
-              ],
-              'installedVersion': '1.1.1o-r0',
-              'packageName':      'libcrypto1.1',
-              'purl':             'pkg:apk/alpine/libcrypto1.1@1.1.1o-r0?arch=x86_64&distro=3.15.4',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2024/03/11/1',
-                'https://access.redhat.com/errata/RHSA-2024:2447',
-                'https://access.redhat.com/security/cve/CVE-2023-5678',
-                'https://bugzilla.redhat.com/2223016',
-                'https://bugzilla.redhat.com/2224962',
-                'https://bugzilla.redhat.com/2227852',
-                'https://bugzilla.redhat.com/2248616',
-                'https://bugzilla.redhat.com/2257571',
-                'https://bugzilla.redhat.com/2258502',
-                'https://bugzilla.redhat.com/2259944',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2224962',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2227852',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2248616',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2270358',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3446',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3817',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-5678',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-2408',
-                'https://errata.almalinux.org/9/ALSA-2024-2447.html',
-                'https://errata.rockylinux.org/RLSA-2023:7877',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=34efaef6c103d636ab507a0cc34dca4d3aecc055',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=710fee740904b6290fef0dd5536fbcedbc38ff0c',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=db925ae2e65d0d925adef429afc37f75bd1c2017',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=ddeb4b6c6d527e54ce9a99cba785c0f7776e54b6',
-                'https://linux.oracle.com/cve/CVE-2023-5678.html',
-                'https://linux.oracle.com/errata/ELSA-2024-2447.html',
-                'https://lists.debian.org/debian-lts-announce/2024/10/msg00033.html',
-                'https://lists.debian.org/debian-lts-announce/2024/11/msg00000.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-5678',
-                'https://security.netapp.com/advisory/ntap-20231130-0010/',
-                'https://ubuntu.com/security/notices/USN-6622-1',
-                'https://ubuntu.com/security/notices/USN-6632-1',
-                'https://ubuntu.com/security/notices/USN-6709-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-5678',
-                'https://www.openssl.org/news/secadv/20231106.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: Generating excessively long X9.42 DH keys or checking excessively long X9.42 DH keys or parameters may be very slow'
-            },
-            {
-              'cve':  'CVE-2022-4450',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'nvd': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-415'
-              ],
-              'description':   'The function PEM_read_bio_ex() reads a PEM file from a BIO and parses and\ndecodes the "name" (e.g. "CERTIFICATE"), any header data and the payload data.\nIf the function succeeds then the "name_out", "header" and "data" arguments are\npopulated with pointers to buffers containing the relevant decoded data. The\ncaller is responsible for freeing those buffers. It is possible to construct a\nPEM file that results in 0 bytes of payload data. In this case PEM_read_bio_ex()\nwill return a failure code but will populate the header argument with a pointer\nto a buffer that has already been freed. If the caller also frees this buffer\nthen a double free will occur. This will most likely lead to a crash. This\ncould be exploited by an attacker who has the ability to supply malicious PEM\nfiles for parsing to achieve a denial of service attack.\n\nThe functions PEM_read_bio() and PEM_read() are simple wrappers around\nPEM_read_bio_ex() and therefore these functions are also directly affected.\n\nThese functions are also called indirectly by a number of other OpenSSL\nfunctions including PEM_X509_INFO_read_bio_ex() and\nSSL_CTX_use_serverinfo_file() which are also vulnerable. Some OpenSSL internal\nuses of these functions are not vulnerable because the caller does not free the\nheader argument if PEM_read_bio_ex() returns a failure code. These locations\ninclude the PEM_read_bio_TYPE() functions as well as the decoders introduced in\nOpenSSL 3.0.\n\nThe OpenSSL asn1parse command line application is also impacted by this issue.',
-              'diffID':        'sha256:56cf0b2037124bb42ac647fb7074d2b0484c23020a94841a502cda70e1e81248',
-              'fixedVersions': [
-                '1.1.1t-r0'
-              ],
-              'installedVersion': '1.1.1o-r0',
-              'packageName':      'libssl1.1',
-              'purl':             'pkg:apk/alpine/libssl1.1@1.1.1o-r0?arch=x86_64&distro=3.15.4',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2023:2165',
-                'https://access.redhat.com/security/cve/CVE-2022-4450',
-                'https://bugzilla.redhat.com/1960321',
-                'https://bugzilla.redhat.com/2164440',
-                'https://bugzilla.redhat.com/2164487',
-                'https://bugzilla.redhat.com/2164492',
-                'https://bugzilla.redhat.com/2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144000',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144003',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144006',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144008',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144010',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144012',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144015',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144017',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144019',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2145170',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2158412',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164440',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164487',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164488',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164492',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164497',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164499',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164500',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4203',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4304',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4450',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0215',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0216',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0217',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0286',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0401',
-                'https://errata.almalinux.org/9/ALSA-2023-2165.html',
-                'https://errata.rockylinux.org/RLSA-2023:0946',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=63bcf189be73a9cc1264059bed6f57974be74a83',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=bbcf509bd046b34cca19c766bbddc31683d0858b',
-                'https://linux.oracle.com/cve/CVE-2022-4450.html',
-                'https://linux.oracle.com/errata/ELSA-2023-32791.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2022-4450',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0003',
-                'https://rustsec.org/advisories/RUSTSEC-2023-0010.html',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://ubuntu.com/security/notices/USN-5844-1',
-                'https://ubuntu.com/security/notices/USN-6564-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2022-4450',
-                'https://www.openssl.org/news/secadv/20230207.txt'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: double free after calling PEM_read_bio_ex'
-            },
-            {
-              'cve':  'CVE-2023-0215',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'nvd': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   'The public API function BIO_new_NDEF is a helper function used for streaming\nASN.1 data via a BIO. It is primarily used internally to OpenSSL to support the\nSMIME, CMS and PKCS7 streaming capabilities, but may also be called directly by\nend user applications.\n\nThe function receives a BIO from the caller, prepends a new BIO_f_asn1 filter\nBIO onto the front of it to form a BIO chain, and then returns the new head of\nthe BIO chain to the caller. Under certain conditions, for example if a CMS\nrecipient public key is invalid, the new filter BIO is freed and the function\nreturns a NULL result indicating a failure. However, in this case, the BIO chain\nis not properly cleaned up and the BIO passed by the caller still retains\ninternal pointers to the previously freed filter BIO. If the caller then goes on\nto call BIO_pop() on the BIO then a use-after-free will occur. This will most\nlikely result in a crash.\n\n\n\nThis scenario occurs directly in the internal function B64_write_ASN1() which\nmay cause BIO_new_NDEF() to be called and will subsequently call BIO_pop() on\nthe BIO. This internal function is in turn called by the public API functions\nPEM_write_bio_ASN1_stream, PEM_write_bio_CMS_stream, PEM_write_bio_PKCS7_stream,\nSMIME_write_ASN1, SMIME_write_CMS and SMIME_write_PKCS7.\n\nOther public API functions that may be impacted by this include\ni2d_ASN1_bio_stream, BIO_new_CMS, BIO_new_PKCS7, i2d_CMS_bio_stream and\ni2d_PKCS7_bio_stream.\n\nThe OpenSSL cms and smime command line applications are similarly affected.',
-              'diffID':        'sha256:56cf0b2037124bb42ac647fb7074d2b0484c23020a94841a502cda70e1e81248',
-              'fixedVersions': [
-                '1.1.1t-r0'
-              ],
-              'installedVersion': '1.1.1o-r0',
-              'packageName':      'libssl1.1',
-              'purl':             'pkg:apk/alpine/libssl1.1@1.1.1o-r0?arch=x86_64&distro=3.15.4',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2023:2165',
-                'https://access.redhat.com/security/cve/CVE-2023-0215',
-                'https://bugzilla.redhat.com/1960321',
-                'https://bugzilla.redhat.com/2164440',
-                'https://bugzilla.redhat.com/2164487',
-                'https://bugzilla.redhat.com/2164492',
-                'https://bugzilla.redhat.com/2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144000',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144003',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144006',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144008',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144010',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144012',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144015',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144017',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144019',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2145170',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2158412',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164440',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164487',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164488',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164492',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164497',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164499',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164500',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4203',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4304',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4450',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0215',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0216',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0217',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0286',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0401',
-                'https://errata.almalinux.org/9/ALSA-2023-2165.html',
-                'https://errata.rockylinux.org/RLSA-2023:0946',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=8818064ce3c3c0f1b740a5aaba2a987e75bfbafd',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=9816136fe31d92ace4037d5da5257f763aeeb4eb',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=c3829dd8825c654652201e16f8a0a0c46ee3f344',
-                'https://linux.oracle.com/cve/CVE-2023-0215.html',
-                'https://linux.oracle.com/errata/ELSA-2023-32791.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-0215',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0003',
-                'https://rustsec.org/advisories/RUSTSEC-2023-0009.html',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://security.netapp.com/advisory/ntap-20230427-0007',
-                'https://security.netapp.com/advisory/ntap-20230427-0007/',
-                'https://security.netapp.com/advisory/ntap-20230427-0009',
-                'https://security.netapp.com/advisory/ntap-20230427-0009/',
-                'https://security.netapp.com/advisory/ntap-20240621-0006',
-                'https://security.netapp.com/advisory/ntap-20240621-0006/',
-                'https://ubuntu.com/security/notices/USN-5844-1',
-                'https://ubuntu.com/security/notices/USN-5845-1',
-                'https://ubuntu.com/security/notices/USN-5845-2',
-                'https://ubuntu.com/security/notices/USN-6564-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-0215',
-                'https://www.openssl.org/news/secadv/20230207.txt'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: use-after-free following BIO_new_NDEF'
-            },
-            {
-              'cve':  'CVE-2023-0286',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '7.4',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H'
-                },
-                'nvd': {
-                  'v3score':  '7.4',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.4',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-843'
-              ],
-              'description':   'There is a type confusion vulnerability relating to X.400 address processing\ninside an X.509 GeneralName. X.400 addresses were parsed as an ASN1_STRING but\nthe public structure definition for GENERAL_NAME incorrectly specified the type\nof the x400Address field as ASN1_TYPE. This field is subsequently interpreted by\nthe OpenSSL function GENERAL_NAME_cmp as an ASN1_TYPE rather than an\nASN1_STRING.\n\nWhen CRL checking is enabled (i.e. the application sets the\nX509_V_FLAG_CRL_CHECK flag), this vulnerability may allow an attacker to pass\narbitrary pointers to a memcmp call, enabling them to read memory contents or\nenact a denial of service. In most cases, the attack requires the attacker to\nprovide both the certificate chain and CRL, neither of which need to have a\nvalid signature. If the attacker only controls one of these inputs, the other\ninput must already contain an X.400 address as a CRL distribution point, which\nis uncommon. As such, this vulnerability is most likely to only affect\napplications which have implemented their own functionality for retrieving CRLs\nover a network.',
-              'diffID':        'sha256:56cf0b2037124bb42ac647fb7074d2b0484c23020a94841a502cda70e1e81248',
-              'fixedVersions': [
-                '1.1.1t-r0'
-              ],
-              'installedVersion': '1.1.1o-r0',
-              'packageName':      'libssl1.1',
-              'purl':             'pkg:apk/alpine/libssl1.1@1.1.1o-r0?arch=x86_64&distro=3.15.4',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2025:7937',
-                'https://access.redhat.com/security/cve/CVE-2023-0286',
-                'https://access.redhat.com/security/cve/cve-2023-0286',
-                'https://bugzilla.redhat.com/2164440',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144000',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144003',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144006',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144008',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144010',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144012',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144015',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144017',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144019',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2145170',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2158412',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164440',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164487',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164488',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164492',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164497',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164499',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164500',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4203',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4304',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4450',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0215',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0216',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0217',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0286',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0401',
-                'https://errata.almalinux.org/9/ALSA-2025-7937.html',
-                'https://errata.rockylinux.org/RLSA-2023:0946',
-                'https://ftp.openbsd.org/pub/OpenBSD/LibreSSL/libressl-3.6.2-relnotes.txt',
-                'https://ftp.openbsd.org/pub/OpenBSD/patches/7.2/common/018_x509.patch.sig',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=2c6c9d439b484e1ba9830d8454a34fa4f80fdfe9',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=2f7530077e0ef79d98718138716bc51ca0cad658',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=fd2af07dc083a350c959147097003a14a5e8ac4d',
-                'https://github.com/pyca/cryptography',
-                'https://github.com/pyca/cryptography/security/advisories/GHSA-x4qr-2fvf-3mr5',
-                'https://linux.oracle.com/cve/CVE-2023-0286.html',
-                'https://linux.oracle.com/errata/ELSA-2025-7937.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-0286',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0003',
-                'https://rustsec.org/advisories/RUSTSEC-2023-0006.html',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://ubuntu.com/security/notices/USN-5844-1',
-                'https://ubuntu.com/security/notices/USN-5845-1',
-                'https://ubuntu.com/security/notices/USN-5845-2',
-                'https://ubuntu.com/security/notices/USN-6564-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-0286',
-                'https://www.openssl.org/news/secadv/20230207.txt'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: X.400 address type confusion in X.509 GeneralName'
-            },
-            {
-              'cve':  'CVE-2023-0464',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-295'
-              ],
-              'description':   "A security vulnerability has been identified in all supported versions\n\nof OpenSSL related to the verification of X.509 certificate chains\nthat include policy constraints.  Attackers may be able to exploit this\nvulnerability by creating a malicious certificate chain that triggers\nexponential use of computational resources, leading to a denial-of-service\n(DoS) attack on affected systems.\n\nPolicy processing is disabled by default but can be enabled by passing\nthe `-policy' argument to the command line utilities or by calling the\n`X509_VERIFY_PARAM_set1_policies()' function.",
-              'diffID':        'sha256:56cf0b2037124bb42ac647fb7074d2b0484c23020a94841a502cda70e1e81248',
-              'fixedVersions': [
-                '1.1.1t-r2'
-              ],
-              'installedVersion': '1.1.1o-r0',
-              'packageName':      'libssl1.1',
-              'purl':             'pkg:apk/alpine/libssl1.1@1.1.1o-r0?arch=x86_64&distro=3.15.4',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2023:3722',
-                'https://access.redhat.com/security/cve/CVE-2023-0464',
-                'https://bugzilla.redhat.com/2181082',
-                'https://bugzilla.redhat.com/2182561',
-                'https://bugzilla.redhat.com/2182565',
-                'https://bugzilla.redhat.com/2188461',
-                'https://bugzilla.redhat.com/2207947',
-                'https://errata.almalinux.org/9/ALSA-2023-3722.html',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=2017771e2db3e2b96f89bbe8766c3209f6a99545',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=2dcd4f1e3115f38cefa43e3efbe9b801c27e642e',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=879f7080d7e141f415c79eaa3a8ac4a3dad0348b',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=959c59c7a0164117e7f8366466a32bb1f8d77ff1',
-                'https://linux.oracle.com/cve/CVE-2023-0464.html',
-                'https://linux.oracle.com/errata/ELSA-2023-3722.html',
-                'https://lists.debian.org/debian-lts-announce/2023/06/msg00011.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-0464',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://security.netapp.com/advisory/ntap-20230406-0006/',
-                'https://security.netapp.com/advisory/ntap-20240621-0006/',
-                'https://ubuntu.com/security/notices/USN-6039-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.couchbase.com/alerts/',
-                'https://www.cve.org/CVERecord?id=CVE-2023-0464',
-                'https://www.debian.org/security/2023/dsa-5417',
-                'https://www.openssl.org/news/secadv/20230322.txt'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: Denial of service by excessive resource usage in verifying X509 policy constraints'
-            },
-            {
-              'cve':  'CVE-2022-2097',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N'
-                },
-                'nvd': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N'
-                },
-                'redhat': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-327'
-              ],
-              'description':   "AES OCB mode for 32-bit x86 platforms using the AES-NI assembly optimised implementation will not encrypt the entirety of the data under some circumstances. This could reveal sixteen bytes of data that was preexisting in the memory that wasn't written. In the special case of \"in place\" encryption, sixteen bytes of the plaintext would be revealed. Since OpenSSL does not support OCB based cipher suites for TLS and DTLS, they are both unaffected. Fixed in OpenSSL 3.0.5 (Affected 3.0.0-3.0.4). Fixed in OpenSSL 1.1.1q (Affected 1.1.1-1.1.1p).",
-              'diffID':        'sha256:56cf0b2037124bb42ac647fb7074d2b0484c23020a94841a502cda70e1e81248',
-              'fixedVersions': [
-                '1.1.1q-r0'
-              ],
-              'installedVersion': '1.1.1o-r0',
-              'packageName':      'libssl1.1',
-              'purl':             'pkg:apk/alpine/libssl1.1@1.1.1o-r0?arch=x86_64&distro=3.15.4',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2022:6224',
-                'https://access.redhat.com/security/cve/CVE-2022-2097',
-                'https://bugzilla.redhat.com/2081494',
-                'https://bugzilla.redhat.com/2087911',
-                'https://bugzilla.redhat.com/2087913',
-                'https://bugzilla.redhat.com/2097310',
-                'https://bugzilla.redhat.com/2104905',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2081494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2097310',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2100554',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2104905',
-                'https://cert-portal.siemens.com/productcert/pdf/ssa-332410.pdf',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-1292',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-2068',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-2097',
-                'https://errata.almalinux.org/9/ALSA-2022-6224.html',
-                'https://errata.rockylinux.org/RLSA-2022:5818',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=919925673d6c9cfed3c1085497f5dfbbed5fc431',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=a98f339ddd7e8f487d6e0088d4a9a42324885a93',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=919925673d6c9cfed3c1085497f5dfbbed5fc431',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=a98f339ddd7e8f487d6e0088d4a9a42324885a93',
-                'https://github.com/alexcrichton/openssl-src-rs',
-                'https://linux.oracle.com/cve/CVE-2022-2097.html',
-                'https://linux.oracle.com/errata/ELSA-2022-9955.html',
-                'https://lists.debian.org/debian-lts-announce/2023/02/msg00019.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/R6CK57NBQFTPUMXAPJURCGXUYT76NQAK',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/R6CK57NBQFTPUMXAPJURCGXUYT76NQAK/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/V6567JERRHHJW2GNGJGKDRNHR7SNPZK7',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/V6567JERRHHJW2GNGJGKDRNHR7SNPZK7/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VCMNWKERPBKOEBNL7CLTTX3ZZCZLH7XA',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VCMNWKERPBKOEBNL7CLTTX3ZZCZLH7XA/',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/R6CK57NBQFTPUMXAPJURCGXUYT76NQAK',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/R6CK57NBQFTPUMXAPJURCGXUYT76NQAK/',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/V6567JERRHHJW2GNGJGKDRNHR7SNPZK7',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/V6567JERRHHJW2GNGJGKDRNHR7SNPZK7/',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/VCMNWKERPBKOEBNL7CLTTX3ZZCZLH7XA',
-                'https://nvd.nist.gov/vuln/detail/CVE-2022-2097',
-                'https://rustsec.org/advisories/RUSTSEC-2022-0032.html',
-                'https://security.gentoo.org/glsa/202210-02',
-                'https://security.netapp.com/advisory/ntap-20220715-0011',
-                'https://security.netapp.com/advisory/ntap-20220715-0011/',
-                'https://security.netapp.com/advisory/ntap-20230420-0008',
-                'https://security.netapp.com/advisory/ntap-20230420-0008/',
-                'https://security.netapp.com/advisory/ntap-20240621-0006',
-                'https://security.netapp.com/advisory/ntap-20240621-0006/',
-                'https://ubuntu.com/security/notices/USN-5502-1',
-                'https://ubuntu.com/security/notices/USN-6457-1',
-                'https://www.cve.org/CVERecord?id=CVE-2022-2097',
-                'https://www.debian.org/security/2023/dsa-5343',
-                'https://www.openssl.org/news/secadv/20220705.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: AES OCB fails to encrypt some bytes'
-            },
-            {
-              'cve':  'CVE-2022-4304',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N'
-                },
-                'nvd': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N'
-                },
-                'redhat': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-203'
-              ],
-              'description':   'A timing based side channel exists in the OpenSSL RSA Decryption implementation\nwhich could be sufficient to recover a plaintext across a network in a\nBleichenbacher style attack. To achieve a successful decryption an attacker\nwould have to be able to send a very large number of trial messages for\ndecryption. The vulnerability affects all RSA padding modes: PKCS#1 v1.5,\nRSA-OEAP and RSASVE.\n\nFor example, in a TLS connection, RSA is commonly used by a client to send an\nencrypted pre-master secret to the server. An attacker that had observed a\ngenuine connection between a client and a server could use this flaw to send\ntrial messages to the server and record the time taken to process them. After a\nsufficiently large number of messages the attacker could recover the pre-master\nsecret used for the original connection and thus be able to decrypt the\napplication data sent over that connection.',
-              'diffID':        'sha256:56cf0b2037124bb42ac647fb7074d2b0484c23020a94841a502cda70e1e81248',
-              'fixedVersions': [
-                '1.1.1t-r0'
-              ],
-              'installedVersion': '1.1.1o-r0',
-              'packageName':      'libssl1.1',
-              'purl':             'pkg:apk/alpine/libssl1.1@1.1.1o-r0?arch=x86_64&distro=3.15.4',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2023:2165',
-                'https://access.redhat.com/security/cve/CVE-2022-4304',
-                'https://bugzilla.redhat.com/1960321',
-                'https://bugzilla.redhat.com/2164440',
-                'https://bugzilla.redhat.com/2164487',
-                'https://bugzilla.redhat.com/2164492',
-                'https://bugzilla.redhat.com/2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144000',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144003',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144006',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144008',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144010',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144012',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144015',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144017',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144019',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2145170',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2158412',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164440',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164487',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164488',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164492',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164497',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164499',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164500',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4203',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4304',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4450',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0215',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0216',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0217',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0286',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0401',
-                'https://errata.almalinux.org/9/ALSA-2023-2165.html',
-                'https://errata.rockylinux.org/RLSA-2023:0946',
-                'https://linux.oracle.com/cve/CVE-2022-4304.html',
-                'https://linux.oracle.com/errata/ELSA-2023-32791.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2022-4304',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0003',
-                'https://rustsec.org/advisories/RUSTSEC-2023-0007.html',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://ubuntu.com/security/notices/USN-5844-1',
-                'https://ubuntu.com/security/notices/USN-6564-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2022-4304',
-                'https://www.openssl.org/news/secadv/20230207.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: timing attack in RSA Decryption implementation'
-            },
-            {
-              'cve':  'CVE-2023-0465',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N'
-                },
-                'redhat': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-295'
-              ],
-              'description':   "Applications that use a non-default option when verifying certificates may be\nvulnerable to an attack from a malicious CA to circumvent certain checks.\n\nInvalid certificate policies in leaf certificates are silently ignored by\nOpenSSL and other certificate policy checks are skipped for that certificate.\nA malicious CA could use this to deliberately assert invalid certificate policies\nin order to circumvent policy checking on the certificate altogether.\n\nPolicy processing is disabled by default but can be enabled by passing\nthe `-policy' argument to the command line utilities or by calling the\n`X509_VERIFY_PARAM_set1_policies()' function.",
-              'diffID':        'sha256:56cf0b2037124bb42ac647fb7074d2b0484c23020a94841a502cda70e1e81248',
-              'fixedVersions': [
-                '1.1.1t-r2'
-              ],
-              'installedVersion': '1.1.1o-r0',
-              'packageName':      'libssl1.1',
-              'purl':             'pkg:apk/alpine/libssl1.1@1.1.1o-r0?arch=x86_64&distro=3.15.4',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2023:3722',
-                'https://access.redhat.com/security/cve/CVE-2023-0465',
-                'https://bugzilla.redhat.com/2181082',
-                'https://bugzilla.redhat.com/2182561',
-                'https://bugzilla.redhat.com/2182565',
-                'https://bugzilla.redhat.com/2188461',
-                'https://bugzilla.redhat.com/2207947',
-                'https://errata.almalinux.org/9/ALSA-2023-3722.html',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=10325176f3d3e98c6e2b3bf5ab1e3b334de6947a',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=1dd43e0709fece299b15208f36cc7c76209ba0bb',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=b013765abfa80036dc779dd0e50602c57bb3bf95',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=facfb1ab745646e97a1920977ae4a9965ea61d5c',
-                'https://linux.oracle.com/cve/CVE-2023-0465.html',
-                'https://linux.oracle.com/errata/ELSA-2023-3722.html',
-                'https://lists.debian.org/debian-lts-announce/2023/06/msg00011.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-0465',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://security.netapp.com/advisory/ntap-20230414-0001/',
-                'https://ubuntu.com/security/notices/USN-6039-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-0465',
-                'https://www.debian.org/security/2023/dsa-5417',
-                'https://www.openssl.org/news/secadv/20230328.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: Invalid certificate policies in leaf certificates are silently ignored'
-            },
-            {
-              'cve':  'CVE-2023-2650',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '6.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-770'
-              ],
-              'description':   "Issue summary: Processing some specially crafted ASN.1 object identifiers or\ndata containing them may be very slow.\n\nImpact summary: Applications that use OBJ_obj2txt() directly, or use any of\nthe OpenSSL subsystems OCSP, PKCS7/SMIME, CMS, CMP/CRMF or TS with no message\nsize limit may experience notable to very long delays when processing those\nmessages, which may lead to a Denial of Service.\n\nAn OBJECT IDENTIFIER is composed of a series of numbers - sub-identifiers -\nmost of which have no size limit.  OBJ_obj2txt() may be used to translate\nan ASN.1 OBJECT IDENTIFIER given in DER encoding form (using the OpenSSL\ntype ASN1_OBJECT) to its canonical numeric text form, which are the\nsub-identifiers of the OBJECT IDENTIFIER in decimal form, separated by\nperiods.\n\nWhen one of the sub-identifiers in the OBJECT IDENTIFIER is very large\n(these are sizes that are seen as absurdly large, taking up tens or hundreds\nof KiBs), the translation to a decimal number in text may take a very long\ntime.  The time complexity is O(n^2) with 'n' being the size of the\nsub-identifiers in bytes (*).\n\nWith OpenSSL 3.0, support to fetch cryptographic algorithms using names /\nidentifiers in string form was introduced.  This includes using OBJECT\nIDENTIFIERs in canonical numeric text form as identifiers for fetching\nalgorithms.\n\nSuch OBJECT IDENTIFIERs may be received through the ASN.1 structure\nAlgorithmIdentifier, which is commonly used in multiple protocols to specify\nwhat cryptographic algorithm should be used to sign or verify, encrypt or\ndecrypt, or digest passed data.\n\nApplications that call OBJ_obj2txt() directly with untrusted data are\naffected, with any version of OpenSSL.  If the use is for the mere purpose\nof display, the severity is considered low.\n\nIn OpenSSL 3.0 and newer, this affects the subsystems OCSP, PKCS7/SMIME,\nCMS, CMP/CRMF or TS.  It also impacts anything that processes X.509\ncertificates, including simple things like verifying its signature.\n\nThe impact on TLS is relatively low, because all versions of OpenSSL have a\n100KiB limit on the peer's certificate chain.  Additionally, this only\nimpacts clients, or servers that have explicitly enabled client\nauthentication.\n\nIn OpenSSL 1.1.1 and 1.0.2, this only affects displaying diverse objects,\nsuch as X.509 certificates.  This is assumed to not happen in such a way\nthat it would cause a Denial of Service, so these versions are considered\nnot affected by this issue in such a way that it would be cause for concern,\nand the severity is therefore considered low.",
-              'diffID':        'sha256:56cf0b2037124bb42ac647fb7074d2b0484c23020a94841a502cda70e1e81248',
-              'fixedVersions': [
-                '1.1.1u-r0'
-              ],
-              'installedVersion': '1.1.1o-r0',
-              'packageName':      'libssl1.1',
-              'purl':             'pkg:apk/alpine/libssl1.1@1.1.1o-r0?arch=x86_64&distro=3.15.4',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2023/05/30/1',
-                'https://access.redhat.com/errata/RHSA-2023:6330',
-                'https://access.redhat.com/security/cve/CVE-2023-2650',
-                'https://bugzilla.redhat.com/1858038',
-                'https://bugzilla.redhat.com/2207947',
-                'https://errata.almalinux.org/9/ALSA-2023-6330.html',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=423a2bc737a908ad0c77bda470b2b59dc879936b',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=853c5e56ee0b8650c73140816bb8b91d6163422c',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=9e209944b35cf82368071f160a744b6178f9b098',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=db779b0e10b047f2585615e0b8f2acdf21f8544a',
-                'https://linux.oracle.com/cve/CVE-2023-2650.html',
-                'https://linux.oracle.com/errata/ELSA-2023-6330.html',
-                'https://lists.debian.org/debian-lts-announce/2023/06/msg00011.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-2650',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0009',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://security.netapp.com/advisory/ntap-20230703-0001/',
-                'https://security.netapp.com/advisory/ntap-20231027-0009/',
-                'https://ubuntu.com/security/notices/USN-6119-1',
-                'https://ubuntu.com/security/notices/USN-6188-1',
-                'https://ubuntu.com/security/notices/USN-6672-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-2650',
-                'https://www.debian.org/security/2023/dsa-5417',
-                'https://www.openssl.org/news/secadv/20230530.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: Possible DoS translating ASN.1 object identifiers'
-            },
-            {
-              'cve':  'CVE-2023-3446',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L'
-                },
-                'redhat': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L'
-                }
-              },
-              'cwes': [
-                'CWE-606',
-                'CWE-1333'
-              ],
-              'description':   "Issue summary: Checking excessively long DH keys or parameters may be very slow.\n\nImpact summary: Applications that use the functions DH_check(), DH_check_ex()\nor EVP_PKEY_param_check() to check a DH key or DH parameters may experience long\ndelays. Where the key or parameters that are being checked have been obtained\nfrom an untrusted source this may lead to a Denial of Service.\n\nThe function DH_check() performs various checks on DH parameters. One of those\nchecks confirms that the modulus ('p' parameter) is not too large. Trying to use\na very large modulus is slow and OpenSSL will not normally use a modulus which\nis over 10,000 bits in length.\n\nHowever the DH_check() function checks numerous aspects of the key or parameters\nthat have been supplied. Some of those checks use the supplied modulus value\neven if it has already been found to be too large.\n\nAn application that calls DH_check() and supplies a key or parameters obtained\nfrom an untrusted source could be vulernable to a Denial of Service attack.\n\nThe function DH_check() is itself called by a number of other OpenSSL functions.\nAn application calling any of those other functions may similarly be affected.\nThe other functions affected by this are DH_check_ex() and\nEVP_PKEY_param_check().\n\nAlso vulnerable are the OpenSSL dhparam and pkeyparam command line applications\nwhen using the '-check' option.\n\nThe OpenSSL SSL/TLS implementation is not affected by this issue.\nThe OpenSSL 3.0 and 3.1 FIPS providers are not affected by this issue.",
-              'diffID':        'sha256:56cf0b2037124bb42ac647fb7074d2b0484c23020a94841a502cda70e1e81248',
-              'fixedVersions': [
-                '1.1.1u-r2'
-              ],
-              'installedVersion': '1.1.1o-r0',
-              'packageName':      'libssl1.1',
-              'purl':             'pkg:apk/alpine/libssl1.1@1.1.1o-r0?arch=x86_64&distro=3.15.4',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2023/07/19/4',
-                'http://www.openwall.com/lists/oss-security/2023/07/19/5',
-                'http://www.openwall.com/lists/oss-security/2023/07/19/6',
-                'http://www.openwall.com/lists/oss-security/2023/07/31/1',
-                'http://www.openwall.com/lists/oss-security/2024/05/16/1',
-                'https://access.redhat.com/errata/RHSA-2024:2447',
-                'https://access.redhat.com/security/cve/CVE-2023-3446',
-                'https://bugzilla.redhat.com/2223016',
-                'https://bugzilla.redhat.com/2224962',
-                'https://bugzilla.redhat.com/2227852',
-                'https://bugzilla.redhat.com/2248616',
-                'https://bugzilla.redhat.com/2257571',
-                'https://bugzilla.redhat.com/2258502',
-                'https://bugzilla.redhat.com/2259944',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2224962',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2257582',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2257583',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2258677',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2258688',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2258691',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2258694',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2258700',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-36763',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-36764',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3446',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45229',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45231',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45232',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45233',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45235',
-                'https://errata.almalinux.org/9/ALSA-2024-2447.html',
-                'https://errata.rockylinux.org/RLSA-2024:2264',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=1fa20cf2f506113c761777127a38bce5068740eb',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=8780a896543a654e757db1b9396383f9d8095528',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=9a0a4d3c1e7138915563c0df4fe6a3f9377b839c',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=fc9867c1e03c22ebf56943be205202e576aabf23',
-                'https://linux.oracle.com/cve/CVE-2023-3446.html',
-                'https://linux.oracle.com/errata/ELSA-2024-2447.html',
-                'https://lists.debian.org/debian-lts-announce/2023/08/msg00019.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-3446',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://security.netapp.com/advisory/ntap-20230803-0011/',
-                'https://ubuntu.com/security/notices/USN-6435-1',
-                'https://ubuntu.com/security/notices/USN-6435-2',
-                'https://ubuntu.com/security/notices/USN-6450-1',
-                'https://ubuntu.com/security/notices/USN-6709-1',
-                'https://ubuntu.com/security/notices/USN-7018-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-3446',
-                'https://www.openssl.org/news/secadv/20230719.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: Excessive time spent checking DH keys and parameters'
-            },
-            {
-              'cve':  'CVE-2023-3817',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L'
-                },
-                'redhat': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L'
-                }
-              },
-              'cwes': [
-                'CWE-606',
-                'CWE-834'
-              ],
-              'description':   'Issue summary: Checking excessively long DH keys or parameters may be very slow.\n\nImpact summary: Applications that use the functions DH_check(), DH_check_ex()\nor EVP_PKEY_param_check() to check a DH key or DH parameters may experience long\ndelays. Where the key or parameters that are being checked have been obtained\nfrom an untrusted source this may lead to a Denial of Service.\n\nThe function DH_check() performs various checks on DH parameters. After fixing\nCVE-2023-3446 it was discovered that a large q parameter value can also trigger\nan overly long computation during some of these checks. A correct q value,\nif present, cannot be larger than the modulus p parameter, thus it is\nunnecessary to perform these checks if q is larger than p.\n\nAn application that calls DH_check() and supplies a key or parameters obtained\nfrom an untrusted source could be vulnerable to a Denial of Service attack.\n\nThe function DH_check() is itself called by a number of other OpenSSL functions.\nAn application calling any of those other functions may similarly be affected.\nThe other functions affected by this are DH_check_ex() and\nEVP_PKEY_param_check().\n\nAlso vulnerable are the OpenSSL dhparam and pkeyparam command line applications\nwhen using the "-check" option.\n\nThe OpenSSL SSL/TLS implementation is not affected by this issue.\n\nThe OpenSSL 3.0 and 3.1 FIPS providers are not affected by this issue.',
-              'diffID':        'sha256:56cf0b2037124bb42ac647fb7074d2b0484c23020a94841a502cda70e1e81248',
-              'fixedVersions': [
-                '1.1.1v-r0'
-              ],
-              'installedVersion': '1.1.1o-r0',
-              'packageName':      'libssl1.1',
-              'purl':             'pkg:apk/alpine/libssl1.1@1.1.1o-r0?arch=x86_64&distro=3.15.4',
-              'references':       [
-                'http://seclists.org/fulldisclosure/2023/Jul/43',
-                'http://www.openwall.com/lists/oss-security/2023/07/31/1',
-                'http://www.openwall.com/lists/oss-security/2023/09/22/11',
-                'http://www.openwall.com/lists/oss-security/2023/09/22/9',
-                'http://www.openwall.com/lists/oss-security/2023/11/06/2',
-                'https://access.redhat.com/errata/RHSA-2024:2447',
-                'https://access.redhat.com/security/cve/CVE-2023-3817',
-                'https://bugzilla.redhat.com/2223016',
-                'https://bugzilla.redhat.com/2224962',
-                'https://bugzilla.redhat.com/2227852',
-                'https://bugzilla.redhat.com/2248616',
-                'https://bugzilla.redhat.com/2257571',
-                'https://bugzilla.redhat.com/2258502',
-                'https://bugzilla.redhat.com/2259944',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2224962',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2227852',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2248616',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2270358',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3446',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3817',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-5678',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-2408',
-                'https://errata.almalinux.org/9/ALSA-2024-2447.html',
-                'https://errata.rockylinux.org/RLSA-2023:7877',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=6a1eb62c29db6cb5eec707f9338aee00f44e26f5',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=869ad69aadd985c7b8ca6f4e5dd0eb274c9f3644',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=9002fd07327a91f35ba6c1307e71fa6fd4409b7f',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=91ddeba0f2269b017dc06c46c993a788974b1aa5',
-                'https://linux.oracle.com/cve/CVE-2023-3817.html',
-                'https://linux.oracle.com/errata/ELSA-2024-2447.html',
-                'https://lists.debian.org/debian-lts-announce/2023/08/msg00019.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-3817',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://security.netapp.com/advisory/ntap-20230818-0014/',
-                'https://security.netapp.com/advisory/ntap-20231027-0008/',
-                'https://security.netapp.com/advisory/ntap-20240621-0006/',
-                'https://ubuntu.com/security/notices/USN-6435-1',
-                'https://ubuntu.com/security/notices/USN-6435-2',
-                'https://ubuntu.com/security/notices/USN-6450-1',
-                'https://ubuntu.com/security/notices/USN-6709-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-3817',
-                'https://www.openssl.org/news/secadv/20230731.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'OpenSSL: Excessive time spent checking DH q parameter value'
-            },
-            {
-              'cve':  'CVE-2023-5678',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L'
-                },
-                'redhat': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L'
-                }
-              },
-              'cwes': [
-                'CWE-606',
-                'CWE-754'
-              ],
-              'description':   "Issue summary: Generating excessively long X9.42 DH keys or checking\nexcessively long X9.42 DH keys or parameters may be very slow.\n\nImpact summary: Applications that use the functions DH_generate_key() to\ngenerate an X9.42 DH key may experience long delays.  Likewise, applications\nthat use DH_check_pub_key(), DH_check_pub_key_ex() or EVP_PKEY_public_check()\nto check an X9.42 DH key or X9.42 DH parameters may experience long delays.\nWhere the key or parameters that are being checked have been obtained from\nan untrusted source this may lead to a Denial of Service.\n\nWhile DH_check() performs all the necessary checks (as of CVE-2023-3817),\nDH_check_pub_key() doesn't make any of these checks, and is therefore\nvulnerable for excessively large P and Q parameters.\n\nLikewise, while DH_generate_key() performs a check for an excessively large\nP, it doesn't check for an excessively large Q.\n\nAn application that calls DH_generate_key() or DH_check_pub_key() and\nsupplies a key or parameters obtained from an untrusted source could be\nvulnerable to a Denial of Service attack.\n\nDH_generate_key() and DH_check_pub_key() are also called by a number of\nother OpenSSL functions.  An application calling any of those other\nfunctions may similarly be affected.  The other functions affected by this\nare DH_check_pub_key_ex(), EVP_PKEY_public_check(), and EVP_PKEY_generate().\n\nAlso vulnerable are the OpenSSL pkey command line application when using the\n\"-pubcheck\" option, as well as the OpenSSL genpkey command line application.\n\nThe OpenSSL SSL/TLS implementation is not affected by this issue.\n\nThe OpenSSL 3.0 and 3.1 FIPS providers are not affected by this issue.",
-              'diffID':        'sha256:56cf0b2037124bb42ac647fb7074d2b0484c23020a94841a502cda70e1e81248',
-              'fixedVersions': [
-                '1.1.1w-r1'
-              ],
-              'installedVersion': '1.1.1o-r0',
-              'packageName':      'libssl1.1',
-              'purl':             'pkg:apk/alpine/libssl1.1@1.1.1o-r0?arch=x86_64&distro=3.15.4',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2024/03/11/1',
-                'https://access.redhat.com/errata/RHSA-2024:2447',
-                'https://access.redhat.com/security/cve/CVE-2023-5678',
-                'https://bugzilla.redhat.com/2223016',
-                'https://bugzilla.redhat.com/2224962',
-                'https://bugzilla.redhat.com/2227852',
-                'https://bugzilla.redhat.com/2248616',
-                'https://bugzilla.redhat.com/2257571',
-                'https://bugzilla.redhat.com/2258502',
-                'https://bugzilla.redhat.com/2259944',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2224962',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2227852',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2248616',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2270358',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3446',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3817',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-5678',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-2408',
-                'https://errata.almalinux.org/9/ALSA-2024-2447.html',
-                'https://errata.rockylinux.org/RLSA-2023:7877',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=34efaef6c103d636ab507a0cc34dca4d3aecc055',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=710fee740904b6290fef0dd5536fbcedbc38ff0c',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=db925ae2e65d0d925adef429afc37f75bd1c2017',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=ddeb4b6c6d527e54ce9a99cba785c0f7776e54b6',
-                'https://linux.oracle.com/cve/CVE-2023-5678.html',
-                'https://linux.oracle.com/errata/ELSA-2024-2447.html',
-                'https://lists.debian.org/debian-lts-announce/2024/10/msg00033.html',
-                'https://lists.debian.org/debian-lts-announce/2024/11/msg00000.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-5678',
-                'https://security.netapp.com/advisory/ntap-20231130-0010/',
-                'https://ubuntu.com/security/notices/USN-6622-1',
-                'https://ubuntu.com/security/notices/USN-6632-1',
-                'https://ubuntu.com/security/notices/USN-6709-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-5678',
-                'https://www.openssl.org/news/secadv/20231106.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: Generating excessively long X9.42 DH keys or checking excessively long X9.42 DH keys or parameters may be very slow'
-            },
-            {
-              'cve':  'CVE-2022-37434',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '9.8',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-787',
-                'CWE-120'
-              ],
-              'description':   'zlib through 1.2.12 has a heap-based buffer over-read or buffer overflow in inflate in inflate.c via a large gzip header extra field. NOTE: only applications that call inflateGetHeader are affected. Some common applications bundle the affected zlib source code but may be unable to call inflateGetHeader (e.g., see the nodejs/node reference).',
-              'diffID':        'sha256:56cf0b2037124bb42ac647fb7074d2b0484c23020a94841a502cda70e1e81248',
-              'fixedVersions': [
-                '1.2.12-r2'
-              ],
-              'installedVersion': '1.2.12-r1',
-              'packageName':      'zlib',
-              'purl':             'pkg:apk/alpine/zlib@1.2.12-r1?arch=x86_64&distro=3.15.4',
-              'references':       [
-                'http://seclists.org/fulldisclosure/2022/Oct/37',
-                'http://seclists.org/fulldisclosure/2022/Oct/38',
-                'http://seclists.org/fulldisclosure/2022/Oct/41',
-                'http://seclists.org/fulldisclosure/2022/Oct/42',
-                'http://www.openwall.com/lists/oss-security/2022/08/05/2',
-                'http://www.openwall.com/lists/oss-security/2022/08/09/1',
-                'https://access.redhat.com/errata/RHSA-2022:8291',
-                'https://access.redhat.com/security/cve/CVE-2022-37434',
-                'https://bugzilla.redhat.com/2116639',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2053198',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2077431',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2081296',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2116639',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-37434',
-                'https://errata.almalinux.org/9/ALSA-2022-8291.html',
-                'https://errata.rockylinux.org/RLSA-2022:8291',
-                'https://github.com/curl/curl/issues/9271',
-                'https://github.com/ivd38/zlib_overflow',
-                'https://github.com/madler/zlib/blob/21767c654d31d2dccdde4330529775c6c5fd5389/zlib.h#L1062-L1063',
-                'https://github.com/madler/zlib/commit/1eb7682f845ac9e9bf9ae35bbfb3bad5dacbd91d',
-                'https://github.com/madler/zlib/commit/eff308af425b67093bab25f80f1ae950166bece1',
-                'https://github.com/nodejs/node/blob/75b68c6e4db515f76df73af476eccf382bbcb00a/deps/zlib/inflate.c#L762-L764',
-                'https://linux.oracle.com/cve/CVE-2022-37434.html',
-                'https://linux.oracle.com/errata/ELSA-2023-1095.html',
-                'https://lists.debian.org/debian-lts-announce/2022/09/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JWN4VE3JQR4O2SOUS5TXNLANRPMHWV4I/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NMBOJ77A7T7PQCARMDUK75TE6LLESZ3O/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PAVPQNCG3XRLCLNSQRM3KAN5ZFMVXVTY/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/X5U7OTKZSHY2I3ZFJSR2SHFHW72RKGDK/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YRQAI7H4M4RQZ2IWZUEEXECBE5D56BH2/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2022-37434',
-                'https://security.netapp.com/advisory/ntap-20220901-0005/',
-                'https://security.netapp.com/advisory/ntap-20230427-0007/',
-                'https://support.apple.com/kb/HT213488',
-                'https://support.apple.com/kb/HT213489',
-                'https://support.apple.com/kb/HT213490',
-                'https://support.apple.com/kb/HT213491',
-                'https://support.apple.com/kb/HT213493',
-                'https://support.apple.com/kb/HT213494',
-                'https://ubuntu.com/security/notices/USN-5570-1',
-                'https://ubuntu.com/security/notices/USN-5570-2',
-                'https://ubuntu.com/security/notices/USN-5573-1',
-                'https://ubuntu.com/security/notices/USN-6736-1',
-                'https://ubuntu.com/security/notices/USN-6736-2',
-                'https://www.cve.org/CVERecord?id=CVE-2022-37434',
-                'https://www.debian.org/security/2022/dsa-5218'
-              ],
-              'severity':   'CRITICAL',
-              'suppressed': false,
-              'title':      'zlib: heap-based buffer over-read and overflow in inflate() in inflate.c via a large gzip header extra field'
-            }
-          ]
-        }
-      ],
-      'summary': {
-        'critical':   1,
-        'high':       8,
-        'low':        0,
-        'medium':     14,
-        'suppressed': 0,
-        'unknown':    0
-      }
-    }
-  },
-  {
-    'id':    'default/641775c4122c880a00503f5304c43d72edd47deebb6f91351951cda712c06afb',
-    'type':  'storage.sbomscanner.kubewarden.io.vulnerabilityreport',
-    'links': {
-      'patch':  'https://localhost:8005/v1/storage.sbomscanner.kubewarden.io.vulnerabilityreports/default/641775c4122c880a00503f5304c43d72edd47deebb6f91351951cda712c06afb',
-      'remove': 'https://localhost:8005/v1/storage.sbomscanner.kubewarden.io.vulnerabilityreports/default/641775c4122c880a00503f5304c43d72edd47deebb6f91351951cda712c06afb',
-      'self':   'https://localhost:8005/v1/storage.sbomscanner.kubewarden.io.vulnerabilityreports/default/641775c4122c880a00503f5304c43d72edd47deebb6f91351951cda712c06afb',
-      'update': 'https://localhost:8005/v1/storage.sbomscanner.kubewarden.io.vulnerabilityreports/default/641775c4122c880a00503f5304c43d72edd47deebb6f91351951cda712c06afb',
-      'view':   'https://localhost:8005/apis/storage.sbomscanner.kubewarden.io/v1alpha1/namespaces/default/vulnerabilityreports/641775c4122c880a00503f5304c43d72edd47deebb6f91351951cda712c06afb'
-    },
-    'apiVersion':    'storage.sbomscanner.kubewarden.io/v1alpha1',
-    'imageMetadata': {
-      'digest':      'sha256:2436f2b3b7d2537f4c5b622d7a820f00aaea1b6bd14c898142472947d5f02abe',
-      'platform':    'linux/386',
-      'registry':    'lsong-demo1',
-      'registryURI': 'registry-1.docker.io',
-      'repository':  'library/alpine',
-      'tag':         '3.21.3'
-    },
-    'kind':     'VulnerabilityReport',
-    'metadata': {
-      'creationTimestamp': '2026-01-14T18:51:40Z',
-      'fields':            [
-        '641775c4122c880a00503f5304c43d72edd47deebb6f91351951cda712c06afb',
-        'registry-1.docker.io/library/alpine:3.21.3',
-        'linux/386',
-        '12 (0 suppressed)'
-      ],
-      'labels': {
-        'app.kubernetes.io/managed-by':          'sbomscanner',
-        'app.kubernetes.io/part-of':             'sbomscanner',
-        'sbomscanner.kubewarden.io/scanjob-uid': '445c600a-c4b6-40b3-bd71-f2d2140a37d5'
-      },
-      'name':            '641775c4122c880a00503f5304c43d72edd47deebb6f91351951cda712c06afb',
-      'namespace':       'default',
-      'ownerReferences': [
-        {
-          'apiVersion':         'storage.sbomscanner.kubewarden.io/v1alpha1',
-          'blockOwnerDeletion': true,
-          'controller':         true,
-          'kind':               'SBOM',
-          'name':               '641775c4122c880a00503f5304c43d72edd47deebb6f91351951cda712c06afb',
-          'uid':                '9fbc3eda-2302-4e83-a9b9-3e8c6ff40a57'
-        }
-      ],
-      'relationships': [
-        {
-          'fromId':   'default/641775c4122c880a00503f5304c43d72edd47deebb6f91351951cda712c06afb',
-          'fromType': 'storage.sbomscanner.kubewarden.io.sbom',
-          'rel':      'owner',
-          'state':    'active',
-          'message':  'Resource is current'
-        }
-      ],
-      'resourceVersion': '1',
-      'state':           {
-        'error':         false,
-        'message':       'Resource is current',
-        'name':          'active',
-        'transitioning': false
-      },
-      'uid': 'ae7a5430-23a4-4931-aaaa-ca5ce6821abe'
-    },
-    'report': {
-      'results': [
-        {
-          'class':           'os-pkgs',
-          'target':          '/var/run/worker/trivy.sbom.1861635985.json (alpine 3.21.3)',
-          'type':            'alpine',
-          'vulnerabilities': [
-            {
-              'cve':  'CVE-2024-58251',
-              'cwes': [
-                'CWE-150'
-              ],
-              'description':   'In netstat in BusyBox through 1.37.0, local users can launch of network application with an argv[0] containing an ANSI terminal escape sequence, leading to a denial of service (terminal locked up) when netstat is used by a victim.',
-              'diffID':        'sha256:ef51dabe17eb47d1dab0ed9b3918da01ca30a862359411c99da4bd814513d07f',
-              'fixedVersions': [
-                '1.37.0-r14'
-              ],
-              'installedVersion': '1.37.0-r12',
-              'packageName':      'busybox',
-              'purl':             'pkg:apk/alpine/busybox@1.37.0-r12?arch=x86&distro=3.21.3',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2025/04/23/6',
-                'https://bugs.busybox.net/show_bug.cgi?id=15922',
-                'https://www.busybox.net',
-                'https://www.busybox.net/downloads/',
-                'https://www.cve.org/CVERecord?id=CVE-2024-58251'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'In netstat in BusyBox through 1.37.0, local users can launch of networ ...'
-            },
-            {
-              'cve':  'CVE-2025-46394',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '3.3',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-451'
-              ],
-              'description':   'In tar in BusyBox through 1.37.0, a TAR archive can have filenames hidden from a listing through the use of terminal escape sequences.',
-              'diffID':        'sha256:ef51dabe17eb47d1dab0ed9b3918da01ca30a862359411c99da4bd814513d07f',
-              'fixedVersions': [
-                '1.37.0-r14'
-              ],
-              'installedVersion': '1.37.0-r12',
-              'packageName':      'busybox',
-              'purl':             'pkg:apk/alpine/busybox@1.37.0-r12?arch=x86&distro=3.21.3',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2025/04/23/5',
-                'http://www.openwall.com/lists/oss-security/2025/04/24/3',
-                'https://bugs.busybox.net/show_bug.cgi?id=16018',
-                'https://lists.busybox.net/pipermail/busybox/2024-July/090806.html',
-                'https://lists.busybox.net/pipermail/busybox/2024-July/090814.html',
-                'https://www.busybox.net',
-                'https://www.busybox.net/downloads/',
-                'https://www.cve.org/CVERecord?id=CVE-2025-46394',
-                'https://www.openwall.com/lists/oss-security/2025/04/23/1'
-              ],
-              'severity':   'LOW',
-              'suppressed': false,
-              'title':      'In tar in BusyBox through 1.37.0, a TAR archive can have filenames hid ...'
-            },
-            {
-              'cve':  'CVE-2024-58251',
-              'cwes': [
-                'CWE-150'
-              ],
-              'description':   'In netstat in BusyBox through 1.37.0, local users can launch of network application with an argv[0] containing an ANSI terminal escape sequence, leading to a denial of service (terminal locked up) when netstat is used by a victim.',
-              'diffID':        'sha256:ef51dabe17eb47d1dab0ed9b3918da01ca30a862359411c99da4bd814513d07f',
-              'fixedVersions': [
-                '1.37.0-r14'
-              ],
-              'installedVersion': '1.37.0-r12',
-              'packageName':      'busybox-binsh',
-              'purl':             'pkg:apk/alpine/busybox-binsh@1.37.0-r12?arch=x86&distro=3.21.3',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2025/04/23/6',
-                'https://bugs.busybox.net/show_bug.cgi?id=15922',
-                'https://www.busybox.net',
-                'https://www.busybox.net/downloads/',
-                'https://www.cve.org/CVERecord?id=CVE-2024-58251'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'In netstat in BusyBox through 1.37.0, local users can launch of networ ...'
-            },
-            {
-              'cve':  'CVE-2025-46394',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '3.3',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-451'
-              ],
-              'description':   'In tar in BusyBox through 1.37.0, a TAR archive can have filenames hidden from a listing through the use of terminal escape sequences.',
-              'diffID':        'sha256:ef51dabe17eb47d1dab0ed9b3918da01ca30a862359411c99da4bd814513d07f',
-              'fixedVersions': [
-                '1.37.0-r14'
-              ],
-              'installedVersion': '1.37.0-r12',
-              'packageName':      'busybox-binsh',
-              'purl':             'pkg:apk/alpine/busybox-binsh@1.37.0-r12?arch=x86&distro=3.21.3',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2025/04/23/5',
-                'http://www.openwall.com/lists/oss-security/2025/04/24/3',
-                'https://bugs.busybox.net/show_bug.cgi?id=16018',
-                'https://lists.busybox.net/pipermail/busybox/2024-July/090806.html',
-                'https://lists.busybox.net/pipermail/busybox/2024-July/090814.html',
-                'https://www.busybox.net',
-                'https://www.busybox.net/downloads/',
-                'https://www.cve.org/CVERecord?id=CVE-2025-46394',
-                'https://www.openwall.com/lists/oss-security/2025/04/23/1'
-              ],
-              'severity':   'LOW',
-              'suppressed': false,
-              'title':      'In tar in BusyBox through 1.37.0, a TAR archive can have filenames hid ...'
-            },
-            {
-              'cve':  'CVE-2025-9230',
-              'cvss': {
-                'redhat': {
-                  'v3score':  '5.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L'
-                }
-              },
-              'cwes': [
-                'CWE-125',
-                'CWE-787'
-              ],
-              'description':   'Issue summary: An application trying to decrypt CMS messages encrypted using\npassword based encryption can trigger an out-of-bounds read and write.\n\nImpact summary: This out-of-bounds read may trigger a crash which leads to\nDenial of Service for an application. The out-of-bounds write can cause\na memory corruption which can have various consequences including\na Denial of Service or Execution of attacker-supplied code.\n\nAlthough the consequences of a successful exploit of this vulnerability\ncould be severe, the probability that the attacker would be able to\nperform it is low. Besides, password based (PWRI) encryption support in CMS\nmessages is very rarely used. For that reason the issue was assessed as\nModerate severity according to our Security Policy.\n\nThe FIPS modules in 3.5, 3.4, 3.3, 3.2, 3.1 and 3.0 are not affected by this\nissue, as the CMS implementation is outside the OpenSSL FIPS module\nboundary.',
-              'diffID':        'sha256:ef51dabe17eb47d1dab0ed9b3918da01ca30a862359411c99da4bd814513d07f',
-              'fixedVersions': [
-                '3.3.5-r0'
-              ],
-              'installedVersion': '3.3.3-r0',
-              'packageName':      'libcrypto3',
-              'purl':             'pkg:apk/alpine/libcrypto3@3.3.3-r0?arch=x86&distro=3.21.3',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2025/09/30/5',
-                'https://access.redhat.com/errata/RHSA-2025:21255',
-                'https://access.redhat.com/security/cve/CVE-2025-9230',
-                'https://bugzilla.redhat.com/2396054',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2396054',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-9230',
-                'https://errata.almalinux.org/9/ALSA-2025-21255.html',
-                'https://errata.rockylinux.org/RLSA-2025:21255',
-                'https://github.com/openssl/openssl/commit/5965ea5dd6960f36d8b7f74f8eac67a8eb8f2b45',
-                'https://github.com/openssl/openssl/commit/9e91358f365dee6c446dcdcdb01c04d2743fd280',
-                'https://github.com/openssl/openssl/commit/a79c4ce559c6a3a8fd4109e9f33c1185d5bf2def',
-                'https://github.com/openssl/openssl/commit/b5282d677551afda7d20e9c00e09561b547b2dfd',
-                'https://github.com/openssl/openssl/commit/bae259a211ada6315dc50900686daaaaaa55f482',
-                'https://github.openssl.org/openssl/extended-releases/commit/c2b96348bfa662f25f4fabf81958ae822063dae3',
-                'https://github.openssl.org/openssl/extended-releases/commit/dfbaf161d8dafc1132dd88cd48ad990ed9b4c8ba',
-                'https://linux.oracle.com/cve/CVE-2025-9230.html',
-                'https://linux.oracle.com/errata/ELSA-2026-0337.html',
-                'https://lists.debian.org/debian-lts-announce/2025/10/msg00001.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2025-9230',
-                'https://openssl-library.org/news/secadv/20250930.txt',
-                'https://ubuntu.com/security/notices/USN-7786-1',
-                'https://www.cve.org/CVERecord?id=CVE-2025-9230'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: Out-of-bounds read & write in RFC 3211 KEK Unwrap'
-            },
-            {
-              'cve':  'CVE-2025-9231',
-              'cvss': {
-                'redhat': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-385'
-              ],
-              'description':   'Issue summary: A timing side-channel which could potentially allow remote\nrecovery of the private key exists in the SM2 algorithm implementation on 64 bit\nARM platforms.\n\nImpact summary: A timing side-channel in SM2 signature computations on 64 bit\nARM platforms could allow recovering the private key by an attacker..\n\nWhile remote key recovery over a network was not attempted by the reporter,\ntiming measurements revealed a timing signal which may allow such an attack.\n\nOpenSSL does not directly support certificates with SM2 keys in TLS, and so\nthis CVE is not relevant in most TLS contexts.  However, given that it is\npossible to add support for such certificates via a custom provider, coupled\nwith the fact that in such a custom provider context the private key may be\nrecoverable via remote timing measurements, we consider this to be a Moderate\nseverity issue.\n\nThe FIPS modules in 3.5, 3.4, 3.3, 3.2, 3.1 and 3.0 are not affected by this\nissue, as SM2 is not an approved algorithm.',
-              'diffID':        'sha256:ef51dabe17eb47d1dab0ed9b3918da01ca30a862359411c99da4bd814513d07f',
-              'fixedVersions': [
-                '3.3.5-r0'
-              ],
-              'installedVersion': '3.3.3-r0',
-              'packageName':      'libcrypto3',
-              'purl':             'pkg:apk/alpine/libcrypto3@3.3.3-r0?arch=x86&distro=3.21.3',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2025/09/30/5',
-                'https://access.redhat.com/security/cve/CVE-2025-9231',
-                'https://github.com/openssl/openssl/commit/567f64386e43683888212226824b6a179885a0fe',
-                'https://github.com/openssl/openssl/commit/cba616c26ac8e7b37de5e77762e505ba5ca51698',
-                'https://github.com/openssl/openssl/commit/eed5adc9f969d77c94f213767acbb41ff923b6f4',
-                'https://github.com/openssl/openssl/commit/fc47a2ec078912b3e914fab5734535e76c4820c2',
-                'https://nvd.nist.gov/vuln/detail/CVE-2025-9231',
-                'https://openssl-library.org/news/secadv/20250930.txt',
-                'https://ubuntu.com/security/notices/USN-7786-1',
-                'https://www.cve.org/CVERecord?id=CVE-2025-9231'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: Timing side-channel in SM2 algorithm on 64 bit ARM'
-            },
-            {
-              'cve':  'CVE-2025-9232',
-              'cvss': {
-                'redhat': {
-                  'v3score':  '3.1',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L'
-                }
-              },
-              'cwes': [
-                'CWE-125'
-              ],
-              'description':   "Issue summary: An application using the OpenSSL HTTP client API functions may\ntrigger an out-of-bounds read if the 'no_proxy' environment variable is set and\nthe host portion of the authority component of the HTTP URL is an IPv6 address.\n\nImpact summary: An out-of-bounds read can trigger a crash which leads to\nDenial of Service for an application.\n\nThe OpenSSL HTTP client API functions can be used directly by applications\nbut they are also used by the OCSP client functions and CMP (Certificate\nManagement Protocol) client implementation in OpenSSL. However the URLs used\nby these implementations are unlikely to be controlled by an attacker.\n\nIn this vulnerable code the out of bounds read can only trigger a crash.\nFurthermore the vulnerability requires an attacker-controlled URL to be\npassed from an application to the OpenSSL function and the user has to have\na 'no_proxy' environment variable set. For the aforementioned reasons the\nissue was assessed as Low severity.\n\nThe vulnerable code was introduced in the following patch releases:\n3.0.16, 3.1.8, 3.2.4, 3.3.3, 3.4.0 and 3.5.0.\n\nThe FIPS modules in 3.5, 3.4, 3.3, 3.2, 3.1 and 3.0 are not affected by this\nissue, as the HTTP client implementation is outside the OpenSSL FIPS module\nboundary.",
-              'diffID':        'sha256:ef51dabe17eb47d1dab0ed9b3918da01ca30a862359411c99da4bd814513d07f',
-              'fixedVersions': [
-                '3.3.5-r0'
-              ],
-              'installedVersion': '3.3.3-r0',
-              'packageName':      'libcrypto3',
-              'purl':             'pkg:apk/alpine/libcrypto3@3.3.3-r0?arch=x86&distro=3.21.3',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2025/09/30/5',
-                'https://access.redhat.com/security/cve/CVE-2025-9232',
-                'https://github.com/openssl/openssl/commit/2b4ec20e47959170422922eaff25346d362dcb35',
-                'https://github.com/openssl/openssl/commit/654dc11d23468a74fc8ea4672b702dd3feb7be4b',
-                'https://github.com/openssl/openssl/commit/7cf21a30513c9e43c4bc3836c237cf086e194af3',
-                'https://github.com/openssl/openssl/commit/89e790ac431125a4849992858490bed6b225eadf',
-                'https://github.com/openssl/openssl/commit/bbf38c034cdabd0a13330abcc4855c866f53d2e0',
-                'https://nvd.nist.gov/vuln/detail/CVE-2025-9232',
-                'https://openssl-library.org/news/secadv/20250930.txt',
-                'https://ubuntu.com/security/notices/USN-7786-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2025-9232'
-              ],
-              'severity':   'LOW',
-              'suppressed': false,
-              'title':      'openssl: Out-of-bounds read in HTTP client no_proxy handling'
-            },
-            {
-              'cve':  'CVE-2025-9230',
-              'cvss': {
-                'redhat': {
-                  'v3score':  '5.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L'
-                }
-              },
-              'cwes': [
-                'CWE-125',
-                'CWE-787'
-              ],
-              'description':   'Issue summary: An application trying to decrypt CMS messages encrypted using\npassword based encryption can trigger an out-of-bounds read and write.\n\nImpact summary: This out-of-bounds read may trigger a crash which leads to\nDenial of Service for an application. The out-of-bounds write can cause\na memory corruption which can have various consequences including\na Denial of Service or Execution of attacker-supplied code.\n\nAlthough the consequences of a successful exploit of this vulnerability\ncould be severe, the probability that the attacker would be able to\nperform it is low. Besides, password based (PWRI) encryption support in CMS\nmessages is very rarely used. For that reason the issue was assessed as\nModerate severity according to our Security Policy.\n\nThe FIPS modules in 3.5, 3.4, 3.3, 3.2, 3.1 and 3.0 are not affected by this\nissue, as the CMS implementation is outside the OpenSSL FIPS module\nboundary.',
-              'diffID':        'sha256:ef51dabe17eb47d1dab0ed9b3918da01ca30a862359411c99da4bd814513d07f',
-              'fixedVersions': [
-                '3.3.5-r0'
-              ],
-              'installedVersion': '3.3.3-r0',
-              'packageName':      'libssl3',
-              'purl':             'pkg:apk/alpine/libssl3@3.3.3-r0?arch=x86&distro=3.21.3',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2025/09/30/5',
-                'https://access.redhat.com/errata/RHSA-2025:21255',
-                'https://access.redhat.com/security/cve/CVE-2025-9230',
-                'https://bugzilla.redhat.com/2396054',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2396054',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-9230',
-                'https://errata.almalinux.org/9/ALSA-2025-21255.html',
-                'https://errata.rockylinux.org/RLSA-2025:21255',
-                'https://github.com/openssl/openssl/commit/5965ea5dd6960f36d8b7f74f8eac67a8eb8f2b45',
-                'https://github.com/openssl/openssl/commit/9e91358f365dee6c446dcdcdb01c04d2743fd280',
-                'https://github.com/openssl/openssl/commit/a79c4ce559c6a3a8fd4109e9f33c1185d5bf2def',
-                'https://github.com/openssl/openssl/commit/b5282d677551afda7d20e9c00e09561b547b2dfd',
-                'https://github.com/openssl/openssl/commit/bae259a211ada6315dc50900686daaaaaa55f482',
-                'https://github.openssl.org/openssl/extended-releases/commit/c2b96348bfa662f25f4fabf81958ae822063dae3',
-                'https://github.openssl.org/openssl/extended-releases/commit/dfbaf161d8dafc1132dd88cd48ad990ed9b4c8ba',
-                'https://linux.oracle.com/cve/CVE-2025-9230.html',
-                'https://linux.oracle.com/errata/ELSA-2026-0337.html',
-                'https://lists.debian.org/debian-lts-announce/2025/10/msg00001.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2025-9230',
-                'https://openssl-library.org/news/secadv/20250930.txt',
-                'https://ubuntu.com/security/notices/USN-7786-1',
-                'https://www.cve.org/CVERecord?id=CVE-2025-9230'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: Out-of-bounds read & write in RFC 3211 KEK Unwrap'
-            },
-            {
-              'cve':  'CVE-2025-9231',
-              'cvss': {
-                'redhat': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-385'
-              ],
-              'description':   'Issue summary: A timing side-channel which could potentially allow remote\nrecovery of the private key exists in the SM2 algorithm implementation on 64 bit\nARM platforms.\n\nImpact summary: A timing side-channel in SM2 signature computations on 64 bit\nARM platforms could allow recovering the private key by an attacker..\n\nWhile remote key recovery over a network was not attempted by the reporter,\ntiming measurements revealed a timing signal which may allow such an attack.\n\nOpenSSL does not directly support certificates with SM2 keys in TLS, and so\nthis CVE is not relevant in most TLS contexts.  However, given that it is\npossible to add support for such certificates via a custom provider, coupled\nwith the fact that in such a custom provider context the private key may be\nrecoverable via remote timing measurements, we consider this to be a Moderate\nseverity issue.\n\nThe FIPS modules in 3.5, 3.4, 3.3, 3.2, 3.1 and 3.0 are not affected by this\nissue, as SM2 is not an approved algorithm.',
-              'diffID':        'sha256:ef51dabe17eb47d1dab0ed9b3918da01ca30a862359411c99da4bd814513d07f',
-              'fixedVersions': [
-                '3.3.5-r0'
-              ],
-              'installedVersion': '3.3.3-r0',
-              'packageName':      'libssl3',
-              'purl':             'pkg:apk/alpine/libssl3@3.3.3-r0?arch=x86&distro=3.21.3',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2025/09/30/5',
-                'https://access.redhat.com/security/cve/CVE-2025-9231',
-                'https://github.com/openssl/openssl/commit/567f64386e43683888212226824b6a179885a0fe',
-                'https://github.com/openssl/openssl/commit/cba616c26ac8e7b37de5e77762e505ba5ca51698',
-                'https://github.com/openssl/openssl/commit/eed5adc9f969d77c94f213767acbb41ff923b6f4',
-                'https://github.com/openssl/openssl/commit/fc47a2ec078912b3e914fab5734535e76c4820c2',
-                'https://nvd.nist.gov/vuln/detail/CVE-2025-9231',
-                'https://openssl-library.org/news/secadv/20250930.txt',
-                'https://ubuntu.com/security/notices/USN-7786-1',
-                'https://www.cve.org/CVERecord?id=CVE-2025-9231'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: Timing side-channel in SM2 algorithm on 64 bit ARM'
-            },
-            {
-              'cve':  'CVE-2025-9232',
-              'cvss': {
-                'redhat': {
-                  'v3score':  '3.1',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L'
-                }
-              },
-              'cwes': [
-                'CWE-125'
-              ],
-              'description':   "Issue summary: An application using the OpenSSL HTTP client API functions may\ntrigger an out-of-bounds read if the 'no_proxy' environment variable is set and\nthe host portion of the authority component of the HTTP URL is an IPv6 address.\n\nImpact summary: An out-of-bounds read can trigger a crash which leads to\nDenial of Service for an application.\n\nThe OpenSSL HTTP client API functions can be used directly by applications\nbut they are also used by the OCSP client functions and CMP (Certificate\nManagement Protocol) client implementation in OpenSSL. However the URLs used\nby these implementations are unlikely to be controlled by an attacker.\n\nIn this vulnerable code the out of bounds read can only trigger a crash.\nFurthermore the vulnerability requires an attacker-controlled URL to be\npassed from an application to the OpenSSL function and the user has to have\na 'no_proxy' environment variable set. For the aforementioned reasons the\nissue was assessed as Low severity.\n\nThe vulnerable code was introduced in the following patch releases:\n3.0.16, 3.1.8, 3.2.4, 3.3.3, 3.4.0 and 3.5.0.\n\nThe FIPS modules in 3.5, 3.4, 3.3, 3.2, 3.1 and 3.0 are not affected by this\nissue, as the HTTP client implementation is outside the OpenSSL FIPS module\nboundary.",
-              'diffID':        'sha256:ef51dabe17eb47d1dab0ed9b3918da01ca30a862359411c99da4bd814513d07f',
-              'fixedVersions': [
-                '3.3.5-r0'
-              ],
-              'installedVersion': '3.3.3-r0',
-              'packageName':      'libssl3',
-              'purl':             'pkg:apk/alpine/libssl3@3.3.3-r0?arch=x86&distro=3.21.3',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2025/09/30/5',
-                'https://access.redhat.com/security/cve/CVE-2025-9232',
-                'https://github.com/openssl/openssl/commit/2b4ec20e47959170422922eaff25346d362dcb35',
-                'https://github.com/openssl/openssl/commit/654dc11d23468a74fc8ea4672b702dd3feb7be4b',
-                'https://github.com/openssl/openssl/commit/7cf21a30513c9e43c4bc3836c237cf086e194af3',
-                'https://github.com/openssl/openssl/commit/89e790ac431125a4849992858490bed6b225eadf',
-                'https://github.com/openssl/openssl/commit/bbf38c034cdabd0a13330abcc4855c866f53d2e0',
-                'https://nvd.nist.gov/vuln/detail/CVE-2025-9232',
-                'https://openssl-library.org/news/secadv/20250930.txt',
-                'https://ubuntu.com/security/notices/USN-7786-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2025-9232'
-              ],
-              'severity':   'LOW',
-              'suppressed': false,
-              'title':      'openssl: Out-of-bounds read in HTTP client no_proxy handling'
-            },
-            {
-              'cve':  'CVE-2024-58251',
-              'cwes': [
-                'CWE-150'
-              ],
-              'description':   'In netstat in BusyBox through 1.37.0, local users can launch of network application with an argv[0] containing an ANSI terminal escape sequence, leading to a denial of service (terminal locked up) when netstat is used by a victim.',
-              'diffID':        'sha256:ef51dabe17eb47d1dab0ed9b3918da01ca30a862359411c99da4bd814513d07f',
-              'fixedVersions': [
-                '1.37.0-r14'
-              ],
-              'installedVersion': '1.37.0-r12',
-              'packageName':      'ssl_client',
-              'purl':             'pkg:apk/alpine/ssl_client@1.37.0-r12?arch=x86&distro=3.21.3',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2025/04/23/6',
-                'https://bugs.busybox.net/show_bug.cgi?id=15922',
-                'https://www.busybox.net',
-                'https://www.busybox.net/downloads/',
-                'https://www.cve.org/CVERecord?id=CVE-2024-58251'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'In netstat in BusyBox through 1.37.0, local users can launch of networ ...'
-            },
-            {
-              'cve':  'CVE-2025-46394',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '3.3',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-451'
-              ],
-              'description':   'In tar in BusyBox through 1.37.0, a TAR archive can have filenames hidden from a listing through the use of terminal escape sequences.',
-              'diffID':        'sha256:ef51dabe17eb47d1dab0ed9b3918da01ca30a862359411c99da4bd814513d07f',
-              'fixedVersions': [
-                '1.37.0-r14'
-              ],
-              'installedVersion': '1.37.0-r12',
-              'packageName':      'ssl_client',
-              'purl':             'pkg:apk/alpine/ssl_client@1.37.0-r12?arch=x86&distro=3.21.3',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2025/04/23/5',
-                'http://www.openwall.com/lists/oss-security/2025/04/24/3',
-                'https://bugs.busybox.net/show_bug.cgi?id=16018',
-                'https://lists.busybox.net/pipermail/busybox/2024-July/090806.html',
-                'https://lists.busybox.net/pipermail/busybox/2024-July/090814.html',
-                'https://www.busybox.net',
-                'https://www.busybox.net/downloads/',
-                'https://www.cve.org/CVERecord?id=CVE-2025-46394',
-                'https://www.openwall.com/lists/oss-security/2025/04/23/1'
-              ],
-              'severity':   'LOW',
-              'suppressed': false,
-              'title':      'In tar in BusyBox through 1.37.0, a TAR archive can have filenames hid ...'
-            }
-          ]
-        }
-      ],
-      'summary': {
-        'critical':   0,
-        'high':       0,
-        'low':        5,
-        'medium':     7,
-        'suppressed': 0,
-        'unknown':    0
-      }
-    }
-  },
-  {
-    'id':    'default/64fcc7e3669546d9ec3478c549b71a0960cbcc5019d5e6af74961f8c13e026dd',
-    'type':  'storage.sbomscanner.kubewarden.io.vulnerabilityreport',
-    'links': {
-      'patch':  'https://localhost:8005/v1/storage.sbomscanner.kubewarden.io.vulnerabilityreports/default/64fcc7e3669546d9ec3478c549b71a0960cbcc5019d5e6af74961f8c13e026dd',
-      'remove': 'https://localhost:8005/v1/storage.sbomscanner.kubewarden.io.vulnerabilityreports/default/64fcc7e3669546d9ec3478c549b71a0960cbcc5019d5e6af74961f8c13e026dd',
-      'self':   'https://localhost:8005/v1/storage.sbomscanner.kubewarden.io.vulnerabilityreports/default/64fcc7e3669546d9ec3478c549b71a0960cbcc5019d5e6af74961f8c13e026dd',
-      'update': 'https://localhost:8005/v1/storage.sbomscanner.kubewarden.io.vulnerabilityreports/default/64fcc7e3669546d9ec3478c549b71a0960cbcc5019d5e6af74961f8c13e026dd',
-      'view':   'https://localhost:8005/apis/storage.sbomscanner.kubewarden.io/v1alpha1/namespaces/default/vulnerabilityreports/64fcc7e3669546d9ec3478c549b71a0960cbcc5019d5e6af74961f8c13e026dd'
-    },
-    'apiVersion':    'storage.sbomscanner.kubewarden.io/v1alpha1',
-    'imageMetadata': {
-      'digest':      'sha256:36c3a913e62f77a82582eb7ce30d255f805c3d1e11d58e1f805e14d33c2bc5a5',
-      'platform':    'linux/amd64',
-      'registry':    'lsong-demo1',
-      'registryURI': 'registry-1.docker.io',
-      'repository':  'library/alpine',
-      'tag':         '3.6.5'
-    },
-    'kind':     'VulnerabilityReport',
-    'metadata': {
-      'creationTimestamp': '2026-01-14T18:51:47Z',
-      'fields':            [
-        '64fcc7e3669546d9ec3478c549b71a0960cbcc5019d5e6af74961f8c13e026dd',
-        'registry-1.docker.io/library/alpine:3.6.5',
-        'linux/amd64',
-        '0 (0 suppressed)'
-      ],
-      'labels': {
-        'app.kubernetes.io/managed-by':          'sbomscanner',
-        'app.kubernetes.io/part-of':             'sbomscanner',
-        'sbomscanner.kubewarden.io/scanjob-uid': '445c600a-c4b6-40b3-bd71-f2d2140a37d5'
-      },
-      'name':            '64fcc7e3669546d9ec3478c549b71a0960cbcc5019d5e6af74961f8c13e026dd',
-      'namespace':       'default',
-      'ownerReferences': [
-        {
-          'apiVersion':         'storage.sbomscanner.kubewarden.io/v1alpha1',
-          'blockOwnerDeletion': true,
-          'controller':         true,
-          'kind':               'SBOM',
-          'name':               '64fcc7e3669546d9ec3478c549b71a0960cbcc5019d5e6af74961f8c13e026dd',
-          'uid':                '29017be1-f7a7-4803-980e-387a4b4f7249'
-        }
-      ],
-      'relationships': [
-        {
-          'fromId':   'default/64fcc7e3669546d9ec3478c549b71a0960cbcc5019d5e6af74961f8c13e026dd',
-          'fromType': 'storage.sbomscanner.kubewarden.io.sbom',
-          'rel':      'owner',
-          'state':    'active',
-          'message':  'Resource is current'
-        }
-      ],
-      'resourceVersion': '1',
-      'state':           {
-        'error':         false,
-        'message':       'Resource is current',
-        'name':          'active',
-        'transitioning': false
-      },
-      'uid': 'aa3a6ea7-2882-490c-a2da-8773eb1bee37'
-    },
-    'report': {
-      'results': [
-        {
-          'class':           'os-pkgs',
-          'target':          '/var/run/worker/trivy.sbom.1626231200.json (alpine 3.6.5)',
-          'type':            'alpine',
-          'vulnerabilities': null
-        }
-      ],
-      'summary': {
-        'critical':   0,
-        'high':       0,
-        'low':        0,
-        'medium':     0,
-        'suppressed': 0,
-        'unknown':    0
-      }
-    }
-  },
-  {
-    'id':    'default/65fd4ff66550ebf1056428e0bb683a25b7807177cfb8fd7f322e6d3379cd3811',
-    'type':  'storage.sbomscanner.kubewarden.io.vulnerabilityreport',
-    'links': {
-      'patch':  'https://localhost:8005/v1/storage.sbomscanner.kubewarden.io.vulnerabilityreports/default/65fd4ff66550ebf1056428e0bb683a25b7807177cfb8fd7f322e6d3379cd3811',
-      'remove': 'https://localhost:8005/v1/storage.sbomscanner.kubewarden.io.vulnerabilityreports/default/65fd4ff66550ebf1056428e0bb683a25b7807177cfb8fd7f322e6d3379cd3811',
-      'self':   'https://localhost:8005/v1/storage.sbomscanner.kubewarden.io.vulnerabilityreports/default/65fd4ff66550ebf1056428e0bb683a25b7807177cfb8fd7f322e6d3379cd3811',
-      'update': 'https://localhost:8005/v1/storage.sbomscanner.kubewarden.io.vulnerabilityreports/default/65fd4ff66550ebf1056428e0bb683a25b7807177cfb8fd7f322e6d3379cd3811',
-      'view':   'https://localhost:8005/apis/storage.sbomscanner.kubewarden.io/v1alpha1/namespaces/default/vulnerabilityreports/65fd4ff66550ebf1056428e0bb683a25b7807177cfb8fd7f322e6d3379cd3811'
-    },
-    'apiVersion':    'storage.sbomscanner.kubewarden.io/v1alpha1',
-    'imageMetadata': {
-      'digest':      'sha256:8a6f8667a8eb87453662f3799ea3768b4c3653a66486ee7c1dd1bed0dfe8c5e7',
-      'platform':    'linux/386',
-      'registry':    'lsong-demo1',
-      'registryURI': 'registry-1.docker.io',
-      'repository':  'library/alpine',
-      'tag':         '3.11.12'
-    },
-    'kind':     'VulnerabilityReport',
-    'metadata': {
-      'creationTimestamp': '2026-01-14T18:52:03Z',
-      'fields':            [
-        '65fd4ff66550ebf1056428e0bb683a25b7807177cfb8fd7f322e6d3379cd3811',
-        'registry-1.docker.io/library/alpine:3.11.12',
-        'linux/386',
-        '21 (0 suppressed)'
-      ],
-      'labels': {
-        'app.kubernetes.io/managed-by':          'sbomscanner',
-        'app.kubernetes.io/part-of':             'sbomscanner',
-        'sbomscanner.kubewarden.io/scanjob-uid': '445c600a-c4b6-40b3-bd71-f2d2140a37d5'
-      },
-      'name':            '65fd4ff66550ebf1056428e0bb683a25b7807177cfb8fd7f322e6d3379cd3811',
-      'namespace':       'default',
-      'ownerReferences': [
-        {
-          'apiVersion':         'storage.sbomscanner.kubewarden.io/v1alpha1',
-          'blockOwnerDeletion': true,
-          'controller':         true,
-          'kind':               'SBOM',
-          'name':               '65fd4ff66550ebf1056428e0bb683a25b7807177cfb8fd7f322e6d3379cd3811',
-          'uid':                'eb0d23c7-0206-44af-b83d-424e0ba8673f'
-        }
-      ],
-      'relationships': [
-        {
-          'fromId':   'default/65fd4ff66550ebf1056428e0bb683a25b7807177cfb8fd7f322e6d3379cd3811',
-          'fromType': 'storage.sbomscanner.kubewarden.io.sbom',
-          'rel':      'owner',
-          'state':    'active',
-          'message':  'Resource is current'
-        }
-      ],
-      'resourceVersion': '1',
-      'state':           {
-        'error':         false,
-        'message':       'Resource is current',
-        'name':          'active',
-        'transitioning': false
-      },
-      'uid': '125cde6e-b93b-4b63-937d-24cf49aac299'
-    },
-    'report': {
-      'results': [
-        {
-          'class':           'os-pkgs',
-          'target':          '/var/run/worker/trivy.sbom.1215309127.json (alpine 3.11.12)',
-          'type':            'alpine',
-          'vulnerabilities': [
-            {
-              'cve':  'CVE-2021-42378',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the getvar_i function",
-              'diffID':        'sha256:5448e233e7c51599ea0429115b210dee15e967d8c38fbea550ede8e559a707d8',
-              'fixedVersions': [
-                '1.31.1-r11'
-              ],
-              'installedVersion': '1.31.1-r10',
-              'packageName':      'busybox',
-              'purl':             'pkg:apk/alpine/busybox@1.31.1-r10?arch=x86&distro=3.11.12',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42378',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42378',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42378'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the getvar_i()'
-            },
-            {
-              'cve':  'CVE-2021-42379',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the next_input_file function",
-              'diffID':        'sha256:5448e233e7c51599ea0429115b210dee15e967d8c38fbea550ede8e559a707d8',
-              'fixedVersions': [
-                '1.31.1-r11'
-              ],
-              'installedVersion': '1.31.1-r10',
-              'packageName':      'busybox',
-              'purl':             'pkg:apk/alpine/busybox@1.31.1-r10?arch=x86&distro=3.11.12',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42379',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42379',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42379'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the next_input_file()'
-            },
-            {
-              'cve':  'CVE-2021-42380',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the clrvar function",
-              'diffID':        'sha256:5448e233e7c51599ea0429115b210dee15e967d8c38fbea550ede8e559a707d8',
-              'fixedVersions': [
-                '1.31.1-r11'
-              ],
-              'installedVersion': '1.31.1-r10',
-              'packageName':      'busybox',
-              'purl':             'pkg:apk/alpine/busybox@1.31.1-r10?arch=x86&distro=3.11.12',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42380',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42380',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42380'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the clrvar()'
-            },
-            {
-              'cve':  'CVE-2021-42381',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the hash_init function",
-              'diffID':        'sha256:5448e233e7c51599ea0429115b210dee15e967d8c38fbea550ede8e559a707d8',
-              'fixedVersions': [
-                '1.31.1-r11'
-              ],
-              'installedVersion': '1.31.1-r10',
-              'packageName':      'busybox',
-              'purl':             'pkg:apk/alpine/busybox@1.31.1-r10?arch=x86&distro=3.11.12',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42381',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42381',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42381'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the hash_init()'
-            },
-            {
-              'cve':  'CVE-2021-42382',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the getvar_s function",
-              'diffID':        'sha256:5448e233e7c51599ea0429115b210dee15e967d8c38fbea550ede8e559a707d8',
-              'fixedVersions': [
-                '1.31.1-r11'
-              ],
-              'installedVersion': '1.31.1-r10',
-              'packageName':      'busybox',
-              'purl':             'pkg:apk/alpine/busybox@1.31.1-r10?arch=x86&distro=3.11.12',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42382',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42382',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42382'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the getvar_s()'
-            },
-            {
-              'cve':  'CVE-2021-42383',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the evaluate function",
-              'diffID':        'sha256:5448e233e7c51599ea0429115b210dee15e967d8c38fbea550ede8e559a707d8',
-              'fixedVersions': [
-                '1.31.1-r11'
-              ],
-              'installedVersion': '1.31.1-r10',
-              'packageName':      'busybox',
-              'purl':             'pkg:apk/alpine/busybox@1.31.1-r10?arch=x86&distro=3.11.12',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42383',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42383',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42383'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the evaluate()'
-            },
-            {
-              'cve':  'CVE-2021-42384',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the handle_special function",
-              'diffID':        'sha256:5448e233e7c51599ea0429115b210dee15e967d8c38fbea550ede8e559a707d8',
-              'fixedVersions': [
-                '1.31.1-r11'
-              ],
-              'installedVersion': '1.31.1-r10',
-              'packageName':      'busybox',
-              'purl':             'pkg:apk/alpine/busybox@1.31.1-r10?arch=x86&distro=3.11.12',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42384',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42384',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42384'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the handle_special()'
-            },
-            {
-              'cve':  'CVE-2021-42385',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the evaluate function",
-              'diffID':        'sha256:5448e233e7c51599ea0429115b210dee15e967d8c38fbea550ede8e559a707d8',
-              'fixedVersions': [
-                '1.31.1-r11'
-              ],
-              'installedVersion': '1.31.1-r10',
-              'packageName':      'busybox',
-              'purl':             'pkg:apk/alpine/busybox@1.31.1-r10?arch=x86&distro=3.11.12',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42385',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42385',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42385'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the evaluate()'
-            },
-            {
-              'cve':  'CVE-2021-42386',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the nvalloc function",
-              'diffID':        'sha256:5448e233e7c51599ea0429115b210dee15e967d8c38fbea550ede8e559a707d8',
-              'fixedVersions': [
-                '1.31.1-r11'
-              ],
-              'installedVersion': '1.31.1-r10',
-              'packageName':      'busybox',
-              'purl':             'pkg:apk/alpine/busybox@1.31.1-r10?arch=x86&distro=3.11.12',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42386',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42386',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42386'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the nvalloc()'
-            },
-            {
-              'cve':  'CVE-2021-42374',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '5.7',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-125'
-              ],
-              'description':   "An out-of-bounds heap read in Busybox's unlzma applet leads to information leak and denial of service when crafted LZMA-compressed input is decompressed. This can be triggered by any applet/format that",
-              'diffID':        'sha256:5448e233e7c51599ea0429115b210dee15e967d8c38fbea550ede8e559a707d8',
-              'fixedVersions': [
-                '1.31.1-r11'
-              ],
-              'installedVersion': '1.31.1-r10',
-              'packageName':      'busybox',
-              'purl':             'pkg:apk/alpine/busybox@1.31.1-r10?arch=x86&distro=3.11.12',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42374',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42374',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42374'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'busybox: out-of-bounds read in unlzma applet leads to information leak and denial of service when crafted LZMA-compressed input is decompressed'
-            },
-            {
-              'cve':  'CVE-2021-42378',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the getvar_i function",
-              'diffID':        'sha256:5448e233e7c51599ea0429115b210dee15e967d8c38fbea550ede8e559a707d8',
-              'fixedVersions': [
-                '1.31.1-r11'
-              ],
-              'installedVersion': '1.31.1-r10',
-              'packageName':      'ssl_client',
-              'purl':             'pkg:apk/alpine/ssl_client@1.31.1-r10?arch=x86&distro=3.11.12',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42378',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42378',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42378'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the getvar_i()'
-            },
-            {
-              'cve':  'CVE-2021-42379',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the next_input_file function",
-              'diffID':        'sha256:5448e233e7c51599ea0429115b210dee15e967d8c38fbea550ede8e559a707d8',
-              'fixedVersions': [
-                '1.31.1-r11'
-              ],
-              'installedVersion': '1.31.1-r10',
-              'packageName':      'ssl_client',
-              'purl':             'pkg:apk/alpine/ssl_client@1.31.1-r10?arch=x86&distro=3.11.12',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42379',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42379',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42379'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the next_input_file()'
-            },
-            {
-              'cve':  'CVE-2021-42380',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the clrvar function",
-              'diffID':        'sha256:5448e233e7c51599ea0429115b210dee15e967d8c38fbea550ede8e559a707d8',
-              'fixedVersions': [
-                '1.31.1-r11'
-              ],
-              'installedVersion': '1.31.1-r10',
-              'packageName':      'ssl_client',
-              'purl':             'pkg:apk/alpine/ssl_client@1.31.1-r10?arch=x86&distro=3.11.12',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42380',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42380',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42380'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the clrvar()'
-            },
-            {
-              'cve':  'CVE-2021-42381',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the hash_init function",
-              'diffID':        'sha256:5448e233e7c51599ea0429115b210dee15e967d8c38fbea550ede8e559a707d8',
-              'fixedVersions': [
-                '1.31.1-r11'
-              ],
-              'installedVersion': '1.31.1-r10',
-              'packageName':      'ssl_client',
-              'purl':             'pkg:apk/alpine/ssl_client@1.31.1-r10?arch=x86&distro=3.11.12',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42381',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42381',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42381'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the hash_init()'
-            },
-            {
-              'cve':  'CVE-2021-42382',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the getvar_s function",
-              'diffID':        'sha256:5448e233e7c51599ea0429115b210dee15e967d8c38fbea550ede8e559a707d8',
-              'fixedVersions': [
-                '1.31.1-r11'
-              ],
-              'installedVersion': '1.31.1-r10',
-              'packageName':      'ssl_client',
-              'purl':             'pkg:apk/alpine/ssl_client@1.31.1-r10?arch=x86&distro=3.11.12',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42382',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42382',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42382'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the getvar_s()'
-            },
-            {
-              'cve':  'CVE-2021-42383',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the evaluate function",
-              'diffID':        'sha256:5448e233e7c51599ea0429115b210dee15e967d8c38fbea550ede8e559a707d8',
-              'fixedVersions': [
-                '1.31.1-r11'
-              ],
-              'installedVersion': '1.31.1-r10',
-              'packageName':      'ssl_client',
-              'purl':             'pkg:apk/alpine/ssl_client@1.31.1-r10?arch=x86&distro=3.11.12',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42383',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42383',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42383'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the evaluate()'
-            },
-            {
-              'cve':  'CVE-2021-42384',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the handle_special function",
-              'diffID':        'sha256:5448e233e7c51599ea0429115b210dee15e967d8c38fbea550ede8e559a707d8',
-              'fixedVersions': [
-                '1.31.1-r11'
-              ],
-              'installedVersion': '1.31.1-r10',
-              'packageName':      'ssl_client',
-              'purl':             'pkg:apk/alpine/ssl_client@1.31.1-r10?arch=x86&distro=3.11.12',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42384',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42384',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42384'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the handle_special()'
-            },
-            {
-              'cve':  'CVE-2021-42385',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the evaluate function",
-              'diffID':        'sha256:5448e233e7c51599ea0429115b210dee15e967d8c38fbea550ede8e559a707d8',
-              'fixedVersions': [
-                '1.31.1-r11'
-              ],
-              'installedVersion': '1.31.1-r10',
-              'packageName':      'ssl_client',
-              'purl':             'pkg:apk/alpine/ssl_client@1.31.1-r10?arch=x86&distro=3.11.12',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42385',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42385',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42385'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the evaluate()'
-            },
-            {
-              'cve':  'CVE-2021-42386',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the nvalloc function",
-              'diffID':        'sha256:5448e233e7c51599ea0429115b210dee15e967d8c38fbea550ede8e559a707d8',
-              'fixedVersions': [
-                '1.31.1-r11'
-              ],
-              'installedVersion': '1.31.1-r10',
-              'packageName':      'ssl_client',
-              'purl':             'pkg:apk/alpine/ssl_client@1.31.1-r10?arch=x86&distro=3.11.12',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42386',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42386',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42386'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the nvalloc()'
-            },
-            {
-              'cve':  'CVE-2021-42374',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '5.7',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-125'
-              ],
-              'description':   "An out-of-bounds heap read in Busybox's unlzma applet leads to information leak and denial of service when crafted LZMA-compressed input is decompressed. This can be triggered by any applet/format that",
-              'diffID':        'sha256:5448e233e7c51599ea0429115b210dee15e967d8c38fbea550ede8e559a707d8',
-              'fixedVersions': [
-                '1.31.1-r11'
-              ],
-              'installedVersion': '1.31.1-r10',
-              'packageName':      'ssl_client',
-              'purl':             'pkg:apk/alpine/ssl_client@1.31.1-r10?arch=x86&distro=3.11.12',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42374',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42374',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42374'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'busybox: out-of-bounds read in unlzma applet leads to information leak and denial of service when crafted LZMA-compressed input is decompressed'
-            },
-            {
-              'cve':  'CVE-2022-37434',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '9.8',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-787',
-                'CWE-120'
-              ],
-              'description':   'zlib through 1.2.12 has a heap-based buffer over-read or buffer overflow in inflate in inflate.c via a large gzip header extra field. NOTE: only applications that call inflateGetHeader are affected. Some common applications bundle the affected zlib source code but may be unable to call inflateGetHeader (e.g., see the nodejs/node reference).',
-              'diffID':        'sha256:5448e233e7c51599ea0429115b210dee15e967d8c38fbea550ede8e559a707d8',
-              'fixedVersions': [
-                '1.2.11-r4'
-              ],
-              'installedVersion': '1.2.11-r3',
-              'packageName':      'zlib',
-              'purl':             'pkg:apk/alpine/zlib@1.2.11-r3?arch=x86&distro=3.11.12',
-              'references':       [
-                'http://seclists.org/fulldisclosure/2022/Oct/37',
-                'http://seclists.org/fulldisclosure/2022/Oct/38',
-                'http://seclists.org/fulldisclosure/2022/Oct/41',
-                'http://seclists.org/fulldisclosure/2022/Oct/42',
-                'http://www.openwall.com/lists/oss-security/2022/08/05/2',
-                'http://www.openwall.com/lists/oss-security/2022/08/09/1',
-                'https://access.redhat.com/errata/RHSA-2022:8291',
-                'https://access.redhat.com/security/cve/CVE-2022-37434',
-                'https://bugzilla.redhat.com/2116639',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2053198',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2077431',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2081296',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2116639',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-37434',
-                'https://errata.almalinux.org/9/ALSA-2022-8291.html',
-                'https://errata.rockylinux.org/RLSA-2022:8291',
-                'https://github.com/curl/curl/issues/9271',
-                'https://github.com/ivd38/zlib_overflow',
-                'https://github.com/madler/zlib/blob/21767c654d31d2dccdde4330529775c6c5fd5389/zlib.h#L1062-L1063',
-                'https://github.com/madler/zlib/commit/1eb7682f845ac9e9bf9ae35bbfb3bad5dacbd91d',
-                'https://github.com/madler/zlib/commit/eff308af425b67093bab25f80f1ae950166bece1',
-                'https://github.com/nodejs/node/blob/75b68c6e4db515f76df73af476eccf382bbcb00a/deps/zlib/inflate.c#L762-L764',
-                'https://linux.oracle.com/cve/CVE-2022-37434.html',
-                'https://linux.oracle.com/errata/ELSA-2023-1095.html',
-                'https://lists.debian.org/debian-lts-announce/2022/09/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JWN4VE3JQR4O2SOUS5TXNLANRPMHWV4I/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NMBOJ77A7T7PQCARMDUK75TE6LLESZ3O/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PAVPQNCG3XRLCLNSQRM3KAN5ZFMVXVTY/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/X5U7OTKZSHY2I3ZFJSR2SHFHW72RKGDK/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YRQAI7H4M4RQZ2IWZUEEXECBE5D56BH2/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2022-37434',
-                'https://security.netapp.com/advisory/ntap-20220901-0005/',
-                'https://security.netapp.com/advisory/ntap-20230427-0007/',
-                'https://support.apple.com/kb/HT213488',
-                'https://support.apple.com/kb/HT213489',
-                'https://support.apple.com/kb/HT213490',
-                'https://support.apple.com/kb/HT213491',
-                'https://support.apple.com/kb/HT213493',
-                'https://support.apple.com/kb/HT213494',
-                'https://ubuntu.com/security/notices/USN-5570-1',
-                'https://ubuntu.com/security/notices/USN-5570-2',
-                'https://ubuntu.com/security/notices/USN-5573-1',
-                'https://ubuntu.com/security/notices/USN-6736-1',
-                'https://ubuntu.com/security/notices/USN-6736-2',
-                'https://www.cve.org/CVERecord?id=CVE-2022-37434',
-                'https://www.debian.org/security/2022/dsa-5218'
-              ],
-              'severity':   'CRITICAL',
-              'suppressed': false,
-              'title':      'zlib: heap-based buffer over-read and overflow in inflate() in inflate.c via a large gzip header extra field'
-            }
-          ]
-        }
-      ],
-      'summary': {
-        'critical':   1,
-        'high':       18,
-        'low':        0,
-        'medium':     2,
-        'suppressed': 0,
-        'unknown':    0
-      }
-    }
-  },
-  {
-    'id':    'default/66f3935293c129cc8875bb103ee61f585c6e7518cbcfe8a4af9943d7e5eac676',
-    'type':  'storage.sbomscanner.kubewarden.io.vulnerabilityreport',
-    'links': {
-      'patch':  'https://localhost:8005/v1/storage.sbomscanner.kubewarden.io.vulnerabilityreports/default/66f3935293c129cc8875bb103ee61f585c6e7518cbcfe8a4af9943d7e5eac676',
-      'remove': 'https://localhost:8005/v1/storage.sbomscanner.kubewarden.io.vulnerabilityreports/default/66f3935293c129cc8875bb103ee61f585c6e7518cbcfe8a4af9943d7e5eac676',
-      'self':   'https://localhost:8005/v1/storage.sbomscanner.kubewarden.io.vulnerabilityreports/default/66f3935293c129cc8875bb103ee61f585c6e7518cbcfe8a4af9943d7e5eac676',
-      'update': 'https://localhost:8005/v1/storage.sbomscanner.kubewarden.io.vulnerabilityreports/default/66f3935293c129cc8875bb103ee61f585c6e7518cbcfe8a4af9943d7e5eac676',
-      'view':   'https://localhost:8005/apis/storage.sbomscanner.kubewarden.io/v1alpha1/namespaces/default/vulnerabilityreports/66f3935293c129cc8875bb103ee61f585c6e7518cbcfe8a4af9943d7e5eac676'
-    },
-    'apiVersion':    'storage.sbomscanner.kubewarden.io/v1alpha1',
-    'imageMetadata': {
-      'digest':      'sha256:26d831226fb27d3b76c7daae0eea90c44a80c53b2cdd94a9a04724cdf3db186d',
-      'platform':    'linux/amd64',
-      'registry':    'demo-02',
-      'registryURI': 'ghcr.io',
-      'repository':  'linuxcontainers/alpine',
-      'tag':         '3.14.8'
-    },
-    'kind':     'VulnerabilityReport',
-    'metadata': {
-      'creationTimestamp': '2026-01-09T22:47:00Z',
-      'fields':            [
-        '66f3935293c129cc8875bb103ee61f585c6e7518cbcfe8a4af9943d7e5eac676',
-        'ghcr.io/linuxcontainers/alpine:3.14.8',
-        'linux/amd64',
-        '12 (0 suppressed)'
-      ],
-      'labels': {
-        'app.kubernetes.io/managed-by':          'sbomscanner',
-        'app.kubernetes.io/part-of':             'sbomscanner',
-        'sbomscanner.kubewarden.io/scanjob-uid': '42184d01-4b15-466f-98aa-e802d1b6b6b8'
-      },
-      'name':            '66f3935293c129cc8875bb103ee61f585c6e7518cbcfe8a4af9943d7e5eac676',
-      'namespace':       'default',
-      'ownerReferences': [
-        {
-          'apiVersion':         'storage.sbomscanner.kubewarden.io/v1alpha1',
-          'blockOwnerDeletion': true,
-          'controller':         true,
-          'kind':               'SBOM',
-          'name':               '66f3935293c129cc8875bb103ee61f585c6e7518cbcfe8a4af9943d7e5eac676',
-          'uid':                '779e3b9f-0738-4826-af1b-db0191faeca2'
-        }
-      ],
-      'relationships': [
-        {
-          'fromId':   'default/66f3935293c129cc8875bb103ee61f585c6e7518cbcfe8a4af9943d7e5eac676',
-          'fromType': 'storage.sbomscanner.kubewarden.io.sbom',
-          'rel':      'owner',
-          'state':    'active',
-          'message':  'Resource is current'
-        }
-      ],
-      'resourceVersion': '3',
-      'state':           {
-        'error':         false,
-        'message':       'Resource is current',
-        'name':          'active',
-        'transitioning': false
-      },
-      'uid': '00a47b07-7574-419c-b6c7-86ad462f40f3'
-    },
-    'report': {
-      'results': [
-        {
-          'class':           'os-pkgs',
-          'target':          '/var/run/worker/trivy.sbom.4156941678.json (alpine 3.14.8)',
-          'type':            'alpine',
-          'vulnerabilities': [
-            {
-              'cve':  'CVE-2022-4450',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'nvd': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-415'
-              ],
-              'description':   'The function PEM_read_bio_ex() reads a PEM file from a BIO and parses and\ndecodes the "name" (e.g. "CERTIFICATE"), any header data and the payload data.\nIf the function succeeds then the "name_out", "header" and "data" arguments are\npopulated with pointers to buffers containing the relevant decoded data. The\ncaller is responsible for freeing those buffers. It is possible to construct a\nPEM file that results in 0 bytes of payload data. In this case PEM_read_bio_ex()\nwill return a failure code but will populate the header argument with a pointer\nto a buffer that has already been freed. If the caller also frees this buffer\nthen a double free will occur. This will most likely lead to a crash. This\ncould be exploited by an attacker who has the ability to supply malicious PEM\nfiles for parsing to achieve a denial of service attack.\n\nThe functions PEM_read_bio() and PEM_read() are simple wrappers around\nPEM_read_bio_ex() and therefore these functions are also directly affected.\n\nThese functions are also called indirectly by a number of other OpenSSL\nfunctions including PEM_X509_INFO_read_bio_ex() and\nSSL_CTX_use_serverinfo_file() which are also vulnerable. Some OpenSSL internal\nuses of these functions are not vulnerable because the caller does not free the\nheader argument if PEM_read_bio_ex() returns a failure code. These locations\ninclude the PEM_read_bio_TYPE() functions as well as the decoders introduced in\nOpenSSL 3.0.\n\nThe OpenSSL asn1parse command line application is also impacted by this issue.',
-              'diffID':        'sha256:63493a9ab2d41e319e25dd7474e184d875e28cb267f7e6856ca91dccdd90ee28',
-              'fixedVersions': [
-                '1.1.1t-r0'
-              ],
-              'installedVersion': '1.1.1q-r0',
-              'packageName':      'libcrypto1.1',
-              'purl':             'pkg:apk/alpine/libcrypto1.1@1.1.1q-r0?arch=x86_64&distro=3.14.8',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2023:2165',
-                'https://access.redhat.com/security/cve/CVE-2022-4450',
-                'https://bugzilla.redhat.com/1960321',
-                'https://bugzilla.redhat.com/2164440',
-                'https://bugzilla.redhat.com/2164487',
-                'https://bugzilla.redhat.com/2164492',
-                'https://bugzilla.redhat.com/2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144000',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144003',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144006',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144008',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144010',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144012',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144015',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144017',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144019',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2145170',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2158412',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164440',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164487',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164488',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164492',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164497',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164499',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164500',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4203',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4304',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4450',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0215',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0216',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0217',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0286',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0401',
-                'https://errata.almalinux.org/9/ALSA-2023-2165.html',
-                'https://errata.rockylinux.org/RLSA-2023:0946',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=63bcf189be73a9cc1264059bed6f57974be74a83',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=bbcf509bd046b34cca19c766bbddc31683d0858b',
-                'https://linux.oracle.com/cve/CVE-2022-4450.html',
-                'https://linux.oracle.com/errata/ELSA-2023-32791.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2022-4450',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0003',
-                'https://rustsec.org/advisories/RUSTSEC-2023-0010.html',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://ubuntu.com/security/notices/USN-5844-1',
-                'https://ubuntu.com/security/notices/USN-6564-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2022-4450',
-                'https://www.openssl.org/news/secadv/20230207.txt'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: double free after calling PEM_read_bio_ex'
-            },
-            {
-              'cve':  'CVE-2023-0215',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'nvd': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   'The public API function BIO_new_NDEF is a helper function used for streaming\nASN.1 data via a BIO. It is primarily used internally to OpenSSL to support the\nSMIME, CMS and PKCS7 streaming capabilities, but may also be called directly by\nend user applications.\n\nThe function receives a BIO from the caller, prepends a new BIO_f_asn1 filter\nBIO onto the front of it to form a BIO chain, and then returns the new head of\nthe BIO chain to the caller. Under certain conditions, for example if a CMS\nrecipient public key is invalid, the new filter BIO is freed and the function\nreturns a NULL result indicating a failure. However, in this case, the BIO chain\nis not properly cleaned up and the BIO passed by the caller still retains\ninternal pointers to the previously freed filter BIO. If the caller then goes on\nto call BIO_pop() on the BIO then a use-after-free will occur. This will most\nlikely result in a crash.\n\n\n\nThis scenario occurs directly in the internal function B64_write_ASN1() which\nmay cause BIO_new_NDEF() to be called and will subsequently call BIO_pop() on\nthe BIO. This internal function is in turn called by the public API functions\nPEM_write_bio_ASN1_stream, PEM_write_bio_CMS_stream, PEM_write_bio_PKCS7_stream,\nSMIME_write_ASN1, SMIME_write_CMS and SMIME_write_PKCS7.\n\nOther public API functions that may be impacted by this include\ni2d_ASN1_bio_stream, BIO_new_CMS, BIO_new_PKCS7, i2d_CMS_bio_stream and\ni2d_PKCS7_bio_stream.\n\nThe OpenSSL cms and smime command line applications are similarly affected.',
-              'diffID':        'sha256:63493a9ab2d41e319e25dd7474e184d875e28cb267f7e6856ca91dccdd90ee28',
-              'fixedVersions': [
-                '1.1.1t-r0'
-              ],
-              'installedVersion': '1.1.1q-r0',
-              'packageName':      'libcrypto1.1',
-              'purl':             'pkg:apk/alpine/libcrypto1.1@1.1.1q-r0?arch=x86_64&distro=3.14.8',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2023:2165',
-                'https://access.redhat.com/security/cve/CVE-2023-0215',
-                'https://bugzilla.redhat.com/1960321',
-                'https://bugzilla.redhat.com/2164440',
-                'https://bugzilla.redhat.com/2164487',
-                'https://bugzilla.redhat.com/2164492',
-                'https://bugzilla.redhat.com/2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144000',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144003',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144006',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144008',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144010',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144012',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144015',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144017',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144019',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2145170',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2158412',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164440',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164487',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164488',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164492',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164497',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164499',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164500',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4203',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4304',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4450',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0215',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0216',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0217',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0286',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0401',
-                'https://errata.almalinux.org/9/ALSA-2023-2165.html',
-                'https://errata.rockylinux.org/RLSA-2023:0946',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=8818064ce3c3c0f1b740a5aaba2a987e75bfbafd',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=9816136fe31d92ace4037d5da5257f763aeeb4eb',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=c3829dd8825c654652201e16f8a0a0c46ee3f344',
-                'https://linux.oracle.com/cve/CVE-2023-0215.html',
-                'https://linux.oracle.com/errata/ELSA-2023-32791.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-0215',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0003',
-                'https://rustsec.org/advisories/RUSTSEC-2023-0009.html',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://security.netapp.com/advisory/ntap-20230427-0007',
-                'https://security.netapp.com/advisory/ntap-20230427-0007/',
-                'https://security.netapp.com/advisory/ntap-20230427-0009',
-                'https://security.netapp.com/advisory/ntap-20230427-0009/',
-                'https://security.netapp.com/advisory/ntap-20240621-0006',
-                'https://security.netapp.com/advisory/ntap-20240621-0006/',
-                'https://ubuntu.com/security/notices/USN-5844-1',
-                'https://ubuntu.com/security/notices/USN-5845-1',
-                'https://ubuntu.com/security/notices/USN-5845-2',
-                'https://ubuntu.com/security/notices/USN-6564-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-0215',
-                'https://www.openssl.org/news/secadv/20230207.txt'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: use-after-free following BIO_new_NDEF'
-            },
-            {
-              'cve':  'CVE-2023-0286',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '7.4',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H'
-                },
-                'nvd': {
-                  'v3score':  '7.4',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.4',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-843'
-              ],
-              'description':   'There is a type confusion vulnerability relating to X.400 address processing\ninside an X.509 GeneralName. X.400 addresses were parsed as an ASN1_STRING but\nthe public structure definition for GENERAL_NAME incorrectly specified the type\nof the x400Address field as ASN1_TYPE. This field is subsequently interpreted by\nthe OpenSSL function GENERAL_NAME_cmp as an ASN1_TYPE rather than an\nASN1_STRING.\n\nWhen CRL checking is enabled (i.e. the application sets the\nX509_V_FLAG_CRL_CHECK flag), this vulnerability may allow an attacker to pass\narbitrary pointers to a memcmp call, enabling them to read memory contents or\nenact a denial of service. In most cases, the attack requires the attacker to\nprovide both the certificate chain and CRL, neither of which need to have a\nvalid signature. If the attacker only controls one of these inputs, the other\ninput must already contain an X.400 address as a CRL distribution point, which\nis uncommon. As such, this vulnerability is most likely to only affect\napplications which have implemented their own functionality for retrieving CRLs\nover a network.',
-              'diffID':        'sha256:63493a9ab2d41e319e25dd7474e184d875e28cb267f7e6856ca91dccdd90ee28',
-              'fixedVersions': [
-                '1.1.1t-r0'
-              ],
-              'installedVersion': '1.1.1q-r0',
-              'packageName':      'libcrypto1.1',
-              'purl':             'pkg:apk/alpine/libcrypto1.1@1.1.1q-r0?arch=x86_64&distro=3.14.8',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2025:7937',
-                'https://access.redhat.com/security/cve/CVE-2023-0286',
-                'https://access.redhat.com/security/cve/cve-2023-0286',
-                'https://bugzilla.redhat.com/2164440',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144000',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144003',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144006',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144008',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144010',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144012',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144015',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144017',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144019',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2145170',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2158412',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164440',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164487',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164488',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164492',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164497',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164499',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164500',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4203',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4304',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4450',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0215',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0216',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0217',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0286',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0401',
-                'https://errata.almalinux.org/9/ALSA-2025-7937.html',
-                'https://errata.rockylinux.org/RLSA-2023:0946',
-                'https://ftp.openbsd.org/pub/OpenBSD/LibreSSL/libressl-3.6.2-relnotes.txt',
-                'https://ftp.openbsd.org/pub/OpenBSD/patches/7.2/common/018_x509.patch.sig',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=2c6c9d439b484e1ba9830d8454a34fa4f80fdfe9',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=2f7530077e0ef79d98718138716bc51ca0cad658',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=fd2af07dc083a350c959147097003a14a5e8ac4d',
-                'https://github.com/pyca/cryptography',
-                'https://github.com/pyca/cryptography/security/advisories/GHSA-x4qr-2fvf-3mr5',
-                'https://linux.oracle.com/cve/CVE-2023-0286.html',
-                'https://linux.oracle.com/errata/ELSA-2025-7937.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-0286',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0003',
-                'https://rustsec.org/advisories/RUSTSEC-2023-0006.html',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://ubuntu.com/security/notices/USN-5844-1',
-                'https://ubuntu.com/security/notices/USN-5845-1',
-                'https://ubuntu.com/security/notices/USN-5845-2',
-                'https://ubuntu.com/security/notices/USN-6564-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-0286',
-                'https://www.openssl.org/news/secadv/20230207.txt'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: X.400 address type confusion in X.509 GeneralName'
-            },
-            {
-              'cve':  'CVE-2023-0464',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-295'
-              ],
-              'description':   "A security vulnerability has been identified in all supported versions\n\nof OpenSSL related to the verification of X.509 certificate chains\nthat include policy constraints.  Attackers may be able to exploit this\nvulnerability by creating a malicious certificate chain that triggers\nexponential use of computational resources, leading to a denial-of-service\n(DoS) attack on affected systems.\n\nPolicy processing is disabled by default but can be enabled by passing\nthe `-policy' argument to the command line utilities or by calling the\n`X509_VERIFY_PARAM_set1_policies()' function.",
-              'diffID':        'sha256:63493a9ab2d41e319e25dd7474e184d875e28cb267f7e6856ca91dccdd90ee28',
-              'fixedVersions': [
-                '1.1.1t-r1'
-              ],
-              'installedVersion': '1.1.1q-r0',
-              'packageName':      'libcrypto1.1',
-              'purl':             'pkg:apk/alpine/libcrypto1.1@1.1.1q-r0?arch=x86_64&distro=3.14.8',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2023:3722',
-                'https://access.redhat.com/security/cve/CVE-2023-0464',
-                'https://bugzilla.redhat.com/2181082',
-                'https://bugzilla.redhat.com/2182561',
-                'https://bugzilla.redhat.com/2182565',
-                'https://bugzilla.redhat.com/2188461',
-                'https://bugzilla.redhat.com/2207947',
-                'https://errata.almalinux.org/9/ALSA-2023-3722.html',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=2017771e2db3e2b96f89bbe8766c3209f6a99545',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=2dcd4f1e3115f38cefa43e3efbe9b801c27e642e',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=879f7080d7e141f415c79eaa3a8ac4a3dad0348b',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=959c59c7a0164117e7f8366466a32bb1f8d77ff1',
-                'https://linux.oracle.com/cve/CVE-2023-0464.html',
-                'https://linux.oracle.com/errata/ELSA-2023-3722.html',
-                'https://lists.debian.org/debian-lts-announce/2023/06/msg00011.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-0464',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://security.netapp.com/advisory/ntap-20230406-0006/',
-                'https://security.netapp.com/advisory/ntap-20240621-0006/',
-                'https://ubuntu.com/security/notices/USN-6039-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.couchbase.com/alerts/',
-                'https://www.cve.org/CVERecord?id=CVE-2023-0464',
-                'https://www.debian.org/security/2023/dsa-5417',
-                'https://www.openssl.org/news/secadv/20230322.txt'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: Denial of service by excessive resource usage in verifying X509 policy constraints'
-            },
-            {
-              'cve':  'CVE-2022-4304',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N'
-                },
-                'nvd': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N'
-                },
-                'redhat': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-203'
-              ],
-              'description':   'A timing based side channel exists in the OpenSSL RSA Decryption implementation\nwhich could be sufficient to recover a plaintext across a network in a\nBleichenbacher style attack. To achieve a successful decryption an attacker\nwould have to be able to send a very large number of trial messages for\ndecryption. The vulnerability affects all RSA padding modes: PKCS#1 v1.5,\nRSA-OEAP and RSASVE.\n\nFor example, in a TLS connection, RSA is commonly used by a client to send an\nencrypted pre-master secret to the server. An attacker that had observed a\ngenuine connection between a client and a server could use this flaw to send\ntrial messages to the server and record the time taken to process them. After a\nsufficiently large number of messages the attacker could recover the pre-master\nsecret used for the original connection and thus be able to decrypt the\napplication data sent over that connection.',
-              'diffID':        'sha256:63493a9ab2d41e319e25dd7474e184d875e28cb267f7e6856ca91dccdd90ee28',
-              'fixedVersions': [
-                '1.1.1t-r0'
-              ],
-              'installedVersion': '1.1.1q-r0',
-              'packageName':      'libcrypto1.1',
-              'purl':             'pkg:apk/alpine/libcrypto1.1@1.1.1q-r0?arch=x86_64&distro=3.14.8',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2023:2165',
-                'https://access.redhat.com/security/cve/CVE-2022-4304',
-                'https://bugzilla.redhat.com/1960321',
-                'https://bugzilla.redhat.com/2164440',
-                'https://bugzilla.redhat.com/2164487',
-                'https://bugzilla.redhat.com/2164492',
-                'https://bugzilla.redhat.com/2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144000',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144003',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144006',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144008',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144010',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144012',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144015',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144017',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144019',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2145170',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2158412',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164440',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164487',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164488',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164492',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164497',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164499',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164500',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4203',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4304',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4450',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0215',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0216',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0217',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0286',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0401',
-                'https://errata.almalinux.org/9/ALSA-2023-2165.html',
-                'https://errata.rockylinux.org/RLSA-2023:0946',
-                'https://linux.oracle.com/cve/CVE-2022-4304.html',
-                'https://linux.oracle.com/errata/ELSA-2023-32791.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2022-4304',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0003',
-                'https://rustsec.org/advisories/RUSTSEC-2023-0007.html',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://ubuntu.com/security/notices/USN-5844-1',
-                'https://ubuntu.com/security/notices/USN-6564-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2022-4304',
-                'https://www.openssl.org/news/secadv/20230207.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: timing attack in RSA Decryption implementation'
-            },
-            {
-              'cve':  'CVE-2023-0465',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N'
-                },
-                'redhat': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-295'
-              ],
-              'description':   "Applications that use a non-default option when verifying certificates may be\nvulnerable to an attack from a malicious CA to circumvent certain checks.\n\nInvalid certificate policies in leaf certificates are silently ignored by\nOpenSSL and other certificate policy checks are skipped for that certificate.\nA malicious CA could use this to deliberately assert invalid certificate policies\nin order to circumvent policy checking on the certificate altogether.\n\nPolicy processing is disabled by default but can be enabled by passing\nthe `-policy' argument to the command line utilities or by calling the\n`X509_VERIFY_PARAM_set1_policies()' function.",
-              'diffID':        'sha256:63493a9ab2d41e319e25dd7474e184d875e28cb267f7e6856ca91dccdd90ee28',
-              'fixedVersions': [
-                '1.1.1t-r2'
-              ],
-              'installedVersion': '1.1.1q-r0',
-              'packageName':      'libcrypto1.1',
-              'purl':             'pkg:apk/alpine/libcrypto1.1@1.1.1q-r0?arch=x86_64&distro=3.14.8',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2023:3722',
-                'https://access.redhat.com/security/cve/CVE-2023-0465',
-                'https://bugzilla.redhat.com/2181082',
-                'https://bugzilla.redhat.com/2182561',
-                'https://bugzilla.redhat.com/2182565',
-                'https://bugzilla.redhat.com/2188461',
-                'https://bugzilla.redhat.com/2207947',
-                'https://errata.almalinux.org/9/ALSA-2023-3722.html',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=10325176f3d3e98c6e2b3bf5ab1e3b334de6947a',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=1dd43e0709fece299b15208f36cc7c76209ba0bb',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=b013765abfa80036dc779dd0e50602c57bb3bf95',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=facfb1ab745646e97a1920977ae4a9965ea61d5c',
-                'https://linux.oracle.com/cve/CVE-2023-0465.html',
-                'https://linux.oracle.com/errata/ELSA-2023-3722.html',
-                'https://lists.debian.org/debian-lts-announce/2023/06/msg00011.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-0465',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://security.netapp.com/advisory/ntap-20230414-0001/',
-                'https://ubuntu.com/security/notices/USN-6039-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-0465',
-                'https://www.debian.org/security/2023/dsa-5417',
-                'https://www.openssl.org/news/secadv/20230328.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: Invalid certificate policies in leaf certificates are silently ignored'
-            },
-            {
-              'cve':  'CVE-2022-4450',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'nvd': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-415'
-              ],
-              'description':   'The function PEM_read_bio_ex() reads a PEM file from a BIO and parses and\ndecodes the "name" (e.g. "CERTIFICATE"), any header data and the payload data.\nIf the function succeeds then the "name_out", "header" and "data" arguments are\npopulated with pointers to buffers containing the relevant decoded data. The\ncaller is responsible for freeing those buffers. It is possible to construct a\nPEM file that results in 0 bytes of payload data. In this case PEM_read_bio_ex()\nwill return a failure code but will populate the header argument with a pointer\nto a buffer that has already been freed. If the caller also frees this buffer\nthen a double free will occur. This will most likely lead to a crash. This\ncould be exploited by an attacker who has the ability to supply malicious PEM\nfiles for parsing to achieve a denial of service attack.\n\nThe functions PEM_read_bio() and PEM_read() are simple wrappers around\nPEM_read_bio_ex() and therefore these functions are also directly affected.\n\nThese functions are also called indirectly by a number of other OpenSSL\nfunctions including PEM_X509_INFO_read_bio_ex() and\nSSL_CTX_use_serverinfo_file() which are also vulnerable. Some OpenSSL internal\nuses of these functions are not vulnerable because the caller does not free the\nheader argument if PEM_read_bio_ex() returns a failure code. These locations\ninclude the PEM_read_bio_TYPE() functions as well as the decoders introduced in\nOpenSSL 3.0.\n\nThe OpenSSL asn1parse command line application is also impacted by this issue.',
-              'diffID':        'sha256:63493a9ab2d41e319e25dd7474e184d875e28cb267f7e6856ca91dccdd90ee28',
-              'fixedVersions': [
-                '1.1.1t-r0'
-              ],
-              'installedVersion': '1.1.1q-r0',
-              'packageName':      'libssl1.1',
-              'purl':             'pkg:apk/alpine/libssl1.1@1.1.1q-r0?arch=x86_64&distro=3.14.8',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2023:2165',
-                'https://access.redhat.com/security/cve/CVE-2022-4450',
-                'https://bugzilla.redhat.com/1960321',
-                'https://bugzilla.redhat.com/2164440',
-                'https://bugzilla.redhat.com/2164487',
-                'https://bugzilla.redhat.com/2164492',
-                'https://bugzilla.redhat.com/2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144000',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144003',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144006',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144008',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144010',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144012',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144015',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144017',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144019',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2145170',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2158412',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164440',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164487',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164488',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164492',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164497',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164499',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164500',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4203',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4304',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4450',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0215',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0216',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0217',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0286',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0401',
-                'https://errata.almalinux.org/9/ALSA-2023-2165.html',
-                'https://errata.rockylinux.org/RLSA-2023:0946',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=63bcf189be73a9cc1264059bed6f57974be74a83',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=bbcf509bd046b34cca19c766bbddc31683d0858b',
-                'https://linux.oracle.com/cve/CVE-2022-4450.html',
-                'https://linux.oracle.com/errata/ELSA-2023-32791.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2022-4450',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0003',
-                'https://rustsec.org/advisories/RUSTSEC-2023-0010.html',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://ubuntu.com/security/notices/USN-5844-1',
-                'https://ubuntu.com/security/notices/USN-6564-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2022-4450',
-                'https://www.openssl.org/news/secadv/20230207.txt'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: double free after calling PEM_read_bio_ex'
-            },
-            {
-              'cve':  'CVE-2023-0215',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'nvd': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   'The public API function BIO_new_NDEF is a helper function used for streaming\nASN.1 data via a BIO. It is primarily used internally to OpenSSL to support the\nSMIME, CMS and PKCS7 streaming capabilities, but may also be called directly by\nend user applications.\n\nThe function receives a BIO from the caller, prepends a new BIO_f_asn1 filter\nBIO onto the front of it to form a BIO chain, and then returns the new head of\nthe BIO chain to the caller. Under certain conditions, for example if a CMS\nrecipient public key is invalid, the new filter BIO is freed and the function\nreturns a NULL result indicating a failure. However, in this case, the BIO chain\nis not properly cleaned up and the BIO passed by the caller still retains\ninternal pointers to the previously freed filter BIO. If the caller then goes on\nto call BIO_pop() on the BIO then a use-after-free will occur. This will most\nlikely result in a crash.\n\n\n\nThis scenario occurs directly in the internal function B64_write_ASN1() which\nmay cause BIO_new_NDEF() to be called and will subsequently call BIO_pop() on\nthe BIO. This internal function is in turn called by the public API functions\nPEM_write_bio_ASN1_stream, PEM_write_bio_CMS_stream, PEM_write_bio_PKCS7_stream,\nSMIME_write_ASN1, SMIME_write_CMS and SMIME_write_PKCS7.\n\nOther public API functions that may be impacted by this include\ni2d_ASN1_bio_stream, BIO_new_CMS, BIO_new_PKCS7, i2d_CMS_bio_stream and\ni2d_PKCS7_bio_stream.\n\nThe OpenSSL cms and smime command line applications are similarly affected.',
-              'diffID':        'sha256:63493a9ab2d41e319e25dd7474e184d875e28cb267f7e6856ca91dccdd90ee28',
-              'fixedVersions': [
-                '1.1.1t-r0'
-              ],
-              'installedVersion': '1.1.1q-r0',
-              'packageName':      'libssl1.1',
-              'purl':             'pkg:apk/alpine/libssl1.1@1.1.1q-r0?arch=x86_64&distro=3.14.8',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2023:2165',
-                'https://access.redhat.com/security/cve/CVE-2023-0215',
-                'https://bugzilla.redhat.com/1960321',
-                'https://bugzilla.redhat.com/2164440',
-                'https://bugzilla.redhat.com/2164487',
-                'https://bugzilla.redhat.com/2164492',
-                'https://bugzilla.redhat.com/2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144000',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144003',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144006',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144008',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144010',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144012',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144015',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144017',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144019',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2145170',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2158412',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164440',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164487',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164488',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164492',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164497',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164499',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164500',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4203',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4304',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4450',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0215',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0216',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0217',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0286',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0401',
-                'https://errata.almalinux.org/9/ALSA-2023-2165.html',
-                'https://errata.rockylinux.org/RLSA-2023:0946',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=8818064ce3c3c0f1b740a5aaba2a987e75bfbafd',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=9816136fe31d92ace4037d5da5257f763aeeb4eb',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=c3829dd8825c654652201e16f8a0a0c46ee3f344',
-                'https://linux.oracle.com/cve/CVE-2023-0215.html',
-                'https://linux.oracle.com/errata/ELSA-2023-32791.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-0215',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0003',
-                'https://rustsec.org/advisories/RUSTSEC-2023-0009.html',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://security.netapp.com/advisory/ntap-20230427-0007',
-                'https://security.netapp.com/advisory/ntap-20230427-0007/',
-                'https://security.netapp.com/advisory/ntap-20230427-0009',
-                'https://security.netapp.com/advisory/ntap-20230427-0009/',
-                'https://security.netapp.com/advisory/ntap-20240621-0006',
-                'https://security.netapp.com/advisory/ntap-20240621-0006/',
-                'https://ubuntu.com/security/notices/USN-5844-1',
-                'https://ubuntu.com/security/notices/USN-5845-1',
-                'https://ubuntu.com/security/notices/USN-5845-2',
-                'https://ubuntu.com/security/notices/USN-6564-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-0215',
-                'https://www.openssl.org/news/secadv/20230207.txt'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: use-after-free following BIO_new_NDEF'
-            },
-            {
-              'cve':  'CVE-2023-0286',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '7.4',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H'
-                },
-                'nvd': {
-                  'v3score':  '7.4',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.4',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-843'
-              ],
-              'description':   'There is a type confusion vulnerability relating to X.400 address processing\ninside an X.509 GeneralName. X.400 addresses were parsed as an ASN1_STRING but\nthe public structure definition for GENERAL_NAME incorrectly specified the type\nof the x400Address field as ASN1_TYPE. This field is subsequently interpreted by\nthe OpenSSL function GENERAL_NAME_cmp as an ASN1_TYPE rather than an\nASN1_STRING.\n\nWhen CRL checking is enabled (i.e. the application sets the\nX509_V_FLAG_CRL_CHECK flag), this vulnerability may allow an attacker to pass\narbitrary pointers to a memcmp call, enabling them to read memory contents or\nenact a denial of service. In most cases, the attack requires the attacker to\nprovide both the certificate chain and CRL, neither of which need to have a\nvalid signature. If the attacker only controls one of these inputs, the other\ninput must already contain an X.400 address as a CRL distribution point, which\nis uncommon. As such, this vulnerability is most likely to only affect\napplications which have implemented their own functionality for retrieving CRLs\nover a network.',
-              'diffID':        'sha256:63493a9ab2d41e319e25dd7474e184d875e28cb267f7e6856ca91dccdd90ee28',
-              'fixedVersions': [
-                '1.1.1t-r0'
-              ],
-              'installedVersion': '1.1.1q-r0',
-              'packageName':      'libssl1.1',
-              'purl':             'pkg:apk/alpine/libssl1.1@1.1.1q-r0?arch=x86_64&distro=3.14.8',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2025:7937',
-                'https://access.redhat.com/security/cve/CVE-2023-0286',
-                'https://access.redhat.com/security/cve/cve-2023-0286',
-                'https://bugzilla.redhat.com/2164440',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144000',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144003',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144006',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144008',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144010',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144012',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144015',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144017',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144019',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2145170',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2158412',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164440',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164487',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164488',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164492',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164497',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164499',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164500',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4203',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4304',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4450',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0215',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0216',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0217',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0286',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0401',
-                'https://errata.almalinux.org/9/ALSA-2025-7937.html',
-                'https://errata.rockylinux.org/RLSA-2023:0946',
-                'https://ftp.openbsd.org/pub/OpenBSD/LibreSSL/libressl-3.6.2-relnotes.txt',
-                'https://ftp.openbsd.org/pub/OpenBSD/patches/7.2/common/018_x509.patch.sig',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=2c6c9d439b484e1ba9830d8454a34fa4f80fdfe9',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=2f7530077e0ef79d98718138716bc51ca0cad658',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=fd2af07dc083a350c959147097003a14a5e8ac4d',
-                'https://github.com/pyca/cryptography',
-                'https://github.com/pyca/cryptography/security/advisories/GHSA-x4qr-2fvf-3mr5',
-                'https://linux.oracle.com/cve/CVE-2023-0286.html',
-                'https://linux.oracle.com/errata/ELSA-2025-7937.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-0286',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0003',
-                'https://rustsec.org/advisories/RUSTSEC-2023-0006.html',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://ubuntu.com/security/notices/USN-5844-1',
-                'https://ubuntu.com/security/notices/USN-5845-1',
-                'https://ubuntu.com/security/notices/USN-5845-2',
-                'https://ubuntu.com/security/notices/USN-6564-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-0286',
-                'https://www.openssl.org/news/secadv/20230207.txt'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: X.400 address type confusion in X.509 GeneralName'
-            },
-            {
-              'cve':  'CVE-2023-0464',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-295'
-              ],
-              'description':   "A security vulnerability has been identified in all supported versions\n\nof OpenSSL related to the verification of X.509 certificate chains\nthat include policy constraints.  Attackers may be able to exploit this\nvulnerability by creating a malicious certificate chain that triggers\nexponential use of computational resources, leading to a denial-of-service\n(DoS) attack on affected systems.\n\nPolicy processing is disabled by default but can be enabled by passing\nthe `-policy' argument to the command line utilities or by calling the\n`X509_VERIFY_PARAM_set1_policies()' function.",
-              'diffID':        'sha256:63493a9ab2d41e319e25dd7474e184d875e28cb267f7e6856ca91dccdd90ee28',
-              'fixedVersions': [
-                '1.1.1t-r1'
-              ],
-              'installedVersion': '1.1.1q-r0',
-              'packageName':      'libssl1.1',
-              'purl':             'pkg:apk/alpine/libssl1.1@1.1.1q-r0?arch=x86_64&distro=3.14.8',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2023:3722',
-                'https://access.redhat.com/security/cve/CVE-2023-0464',
-                'https://bugzilla.redhat.com/2181082',
-                'https://bugzilla.redhat.com/2182561',
-                'https://bugzilla.redhat.com/2182565',
-                'https://bugzilla.redhat.com/2188461',
-                'https://bugzilla.redhat.com/2207947',
-                'https://errata.almalinux.org/9/ALSA-2023-3722.html',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=2017771e2db3e2b96f89bbe8766c3209f6a99545',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=2dcd4f1e3115f38cefa43e3efbe9b801c27e642e',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=879f7080d7e141f415c79eaa3a8ac4a3dad0348b',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=959c59c7a0164117e7f8366466a32bb1f8d77ff1',
-                'https://linux.oracle.com/cve/CVE-2023-0464.html',
-                'https://linux.oracle.com/errata/ELSA-2023-3722.html',
-                'https://lists.debian.org/debian-lts-announce/2023/06/msg00011.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-0464',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://security.netapp.com/advisory/ntap-20230406-0006/',
-                'https://security.netapp.com/advisory/ntap-20240621-0006/',
-                'https://ubuntu.com/security/notices/USN-6039-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.couchbase.com/alerts/',
-                'https://www.cve.org/CVERecord?id=CVE-2023-0464',
-                'https://www.debian.org/security/2023/dsa-5417',
-                'https://www.openssl.org/news/secadv/20230322.txt'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: Denial of service by excessive resource usage in verifying X509 policy constraints'
-            },
-            {
-              'cve':  'CVE-2022-4304',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N'
-                },
-                'nvd': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N'
-                },
-                'redhat': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-203'
-              ],
-              'description':   'A timing based side channel exists in the OpenSSL RSA Decryption implementation\nwhich could be sufficient to recover a plaintext across a network in a\nBleichenbacher style attack. To achieve a successful decryption an attacker\nwould have to be able to send a very large number of trial messages for\ndecryption. The vulnerability affects all RSA padding modes: PKCS#1 v1.5,\nRSA-OEAP and RSASVE.\n\nFor example, in a TLS connection, RSA is commonly used by a client to send an\nencrypted pre-master secret to the server. An attacker that had observed a\ngenuine connection between a client and a server could use this flaw to send\ntrial messages to the server and record the time taken to process them. After a\nsufficiently large number of messages the attacker could recover the pre-master\nsecret used for the original connection and thus be able to decrypt the\napplication data sent over that connection.',
-              'diffID':        'sha256:63493a9ab2d41e319e25dd7474e184d875e28cb267f7e6856ca91dccdd90ee28',
-              'fixedVersions': [
-                '1.1.1t-r0'
-              ],
-              'installedVersion': '1.1.1q-r0',
-              'packageName':      'libssl1.1',
-              'purl':             'pkg:apk/alpine/libssl1.1@1.1.1q-r0?arch=x86_64&distro=3.14.8',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2023:2165',
-                'https://access.redhat.com/security/cve/CVE-2022-4304',
-                'https://bugzilla.redhat.com/1960321',
-                'https://bugzilla.redhat.com/2164440',
-                'https://bugzilla.redhat.com/2164487',
-                'https://bugzilla.redhat.com/2164492',
-                'https://bugzilla.redhat.com/2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144000',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144003',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144006',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144008',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144010',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144012',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144015',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144017',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144019',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2145170',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2158412',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164440',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164487',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164488',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164492',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164497',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164499',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164500',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4203',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4304',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4450',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0215',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0216',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0217',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0286',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0401',
-                'https://errata.almalinux.org/9/ALSA-2023-2165.html',
-                'https://errata.rockylinux.org/RLSA-2023:0946',
-                'https://linux.oracle.com/cve/CVE-2022-4304.html',
-                'https://linux.oracle.com/errata/ELSA-2023-32791.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2022-4304',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0003',
-                'https://rustsec.org/advisories/RUSTSEC-2023-0007.html',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://ubuntu.com/security/notices/USN-5844-1',
-                'https://ubuntu.com/security/notices/USN-6564-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2022-4304',
-                'https://www.openssl.org/news/secadv/20230207.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: timing attack in RSA Decryption implementation'
-            },
-            {
-              'cve':  'CVE-2023-0465',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N'
-                },
-                'redhat': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-295'
-              ],
-              'description':   "Applications that use a non-default option when verifying certificates may be\nvulnerable to an attack from a malicious CA to circumvent certain checks.\n\nInvalid certificate policies in leaf certificates are silently ignored by\nOpenSSL and other certificate policy checks are skipped for that certificate.\nA malicious CA could use this to deliberately assert invalid certificate policies\nin order to circumvent policy checking on the certificate altogether.\n\nPolicy processing is disabled by default but can be enabled by passing\nthe `-policy' argument to the command line utilities or by calling the\n`X509_VERIFY_PARAM_set1_policies()' function.",
-              'diffID':        'sha256:63493a9ab2d41e319e25dd7474e184d875e28cb267f7e6856ca91dccdd90ee28',
-              'fixedVersions': [
-                '1.1.1t-r2'
-              ],
-              'installedVersion': '1.1.1q-r0',
-              'packageName':      'libssl1.1',
-              'purl':             'pkg:apk/alpine/libssl1.1@1.1.1q-r0?arch=x86_64&distro=3.14.8',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2023:3722',
-                'https://access.redhat.com/security/cve/CVE-2023-0465',
-                'https://bugzilla.redhat.com/2181082',
-                'https://bugzilla.redhat.com/2182561',
-                'https://bugzilla.redhat.com/2182565',
-                'https://bugzilla.redhat.com/2188461',
-                'https://bugzilla.redhat.com/2207947',
-                'https://errata.almalinux.org/9/ALSA-2023-3722.html',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=10325176f3d3e98c6e2b3bf5ab1e3b334de6947a',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=1dd43e0709fece299b15208f36cc7c76209ba0bb',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=b013765abfa80036dc779dd0e50602c57bb3bf95',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=facfb1ab745646e97a1920977ae4a9965ea61d5c',
-                'https://linux.oracle.com/cve/CVE-2023-0465.html',
-                'https://linux.oracle.com/errata/ELSA-2023-3722.html',
-                'https://lists.debian.org/debian-lts-announce/2023/06/msg00011.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-0465',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://security.netapp.com/advisory/ntap-20230414-0001/',
-                'https://ubuntu.com/security/notices/USN-6039-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-0465',
-                'https://www.debian.org/security/2023/dsa-5417',
-                'https://www.openssl.org/news/secadv/20230328.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: Invalid certificate policies in leaf certificates are silently ignored'
-            }
-          ]
-        }
-      ],
-      'summary': {
-        'critical':   0,
-        'high':       8,
-        'low':        0,
-        'medium':     4,
-        'suppressed': 0,
-        'unknown':    0
-      }
-    }
-  },
-  {
-    'id':    'default/6765b1ec4a0961beff0fbd06b81ee6df412e9259b94910edb4c2bbee05c9cfc0',
-    'type':  'storage.sbomscanner.kubewarden.io.vulnerabilityreport',
-    'links': {
-      'patch':  'https://localhost:8005/v1/storage.sbomscanner.kubewarden.io.vulnerabilityreports/default/6765b1ec4a0961beff0fbd06b81ee6df412e9259b94910edb4c2bbee05c9cfc0',
-      'remove': 'https://localhost:8005/v1/storage.sbomscanner.kubewarden.io.vulnerabilityreports/default/6765b1ec4a0961beff0fbd06b81ee6df412e9259b94910edb4c2bbee05c9cfc0',
-      'self':   'https://localhost:8005/v1/storage.sbomscanner.kubewarden.io.vulnerabilityreports/default/6765b1ec4a0961beff0fbd06b81ee6df412e9259b94910edb4c2bbee05c9cfc0',
-      'update': 'https://localhost:8005/v1/storage.sbomscanner.kubewarden.io.vulnerabilityreports/default/6765b1ec4a0961beff0fbd06b81ee6df412e9259b94910edb4c2bbee05c9cfc0',
-      'view':   'https://localhost:8005/apis/storage.sbomscanner.kubewarden.io/v1alpha1/namespaces/default/vulnerabilityreports/6765b1ec4a0961beff0fbd06b81ee6df412e9259b94910edb4c2bbee05c9cfc0'
-    },
-    'apiVersion':    'storage.sbomscanner.kubewarden.io/v1alpha1',
-    'imageMetadata': {
-      'digest':      'sha256:549694ea68340c26d1d85c00039aa11ad835be279bfd475ff4284b705f92c24e',
-      'platform':    'linux/arm64/v8',
-      'registry':    'lsong-demo1',
-      'registryURI': 'registry-1.docker.io',
-      'repository':  'library/alpine',
-      'tag':         '3.12.3'
-    },
-    'kind':     'VulnerabilityReport',
-    'metadata': {
-      'creationTimestamp': '2026-01-14T18:52:04Z',
-      'fields':            [
-        '6765b1ec4a0961beff0fbd06b81ee6df412e9259b94910edb4c2bbee05c9cfc0',
-        'registry-1.docker.io/library/alpine:3.12.3',
-        'linux/arm64/v8',
-        '44 (0 suppressed)'
-      ],
-      'labels': {
-        'app.kubernetes.io/managed-by':          'sbomscanner',
-        'app.kubernetes.io/part-of':             'sbomscanner',
-        'sbomscanner.kubewarden.io/scanjob-uid': '445c600a-c4b6-40b3-bd71-f2d2140a37d5'
-      },
-      'name':            '6765b1ec4a0961beff0fbd06b81ee6df412e9259b94910edb4c2bbee05c9cfc0',
-      'namespace':       'default',
-      'ownerReferences': [
-        {
-          'apiVersion':         'storage.sbomscanner.kubewarden.io/v1alpha1',
-          'blockOwnerDeletion': true,
-          'controller':         true,
-          'kind':               'SBOM',
-          'name':               '6765b1ec4a0961beff0fbd06b81ee6df412e9259b94910edb4c2bbee05c9cfc0',
-          'uid':                '53656ab4-daf4-48d7-a1b1-19c52d0ce21e'
-        }
-      ],
-      'relationships': [
-        {
-          'fromId':   'default/6765b1ec4a0961beff0fbd06b81ee6df412e9259b94910edb4c2bbee05c9cfc0',
-          'fromType': 'storage.sbomscanner.kubewarden.io.sbom',
-          'rel':      'owner',
-          'state':    'active',
-          'message':  'Resource is current'
-        }
-      ],
-      'resourceVersion': '1',
-      'state':           {
-        'error':         false,
-        'message':       'Resource is current',
-        'name':          'active',
-        'transitioning': false
-      },
-      'uid': '0ca7b2c2-2869-4e88-bd15-1ee1028d1a0f'
-    },
-    'report': {
-      'results': [
-        {
-          'class':           'os-pkgs',
-          'target':          '/var/run/worker/trivy.sbom.1801537650.json (alpine 3.12.3)',
-          'type':            'alpine',
-          'vulnerabilities': [
-            {
-              'cve':  'CVE-2021-36159',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '9.1',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '9.1',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-125'
-              ],
-              'description':   "libfetch before 2021-07-26, as used in apk-tools, xbps, and other products, mishandles numeric strings for the FTP and HTTP protocols. The FTP passive mode implementation allows an out-of-bounds read because strtol is used to parse the relevant numbers into address bytes. It does not check if the line ends prematurely. If it does, the for-loop condition checks for the '\\0' terminator one byte too late.",
-              'diffID':        'sha256:379067d0cb5309d203a84fb900c950812df2089dedb822239d389ac45a20efe9',
-              'fixedVersions': [
-                '2.10.7-r0'
-              ],
-              'installedVersion': '2.10.5-r1',
-              'packageName':      'apk-tools',
-              'purl':             'pkg:apk/alpine/apk-tools@2.10.5-r1?arch=aarch64&distro=3.12.3',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-36159',
-                'https://github.com/freebsd/freebsd-src/commits/main/lib/libfetch',
-                'https://gitlab.alpinelinux.org/alpine/apk-tools/-/issues/10749',
-                'https://lists.apache.org/thread.html/r61db8e7dcb56dc000a5387a88f7a473bacec5ee01b9ff3f55308aacc%40%3Cdev.kafka.apache.org%3E',
-                'https://lists.apache.org/thread.html/r61db8e7dcb56dc000a5387a88f7a473bacec5ee01b9ff3f55308aacc%40%3Cusers.kafka.apache.org%3E',
-                'https://lists.apache.org/thread.html/rbf4ce74b0d1fa9810dec50ba3ace0caeea677af7c27a97111c06ccb7%40%3Cdev.kafka.apache.org%3E',
-                'https://lists.apache.org/thread.html/rbf4ce74b0d1fa9810dec50ba3ace0caeea677af7c27a97111c06ccb7%40%3Cusers.kafka.apache.org%3E',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-36159',
-                'https://www.cve.org/CVERecord?id=CVE-2021-36159'
-              ],
-              'severity':   'CRITICAL',
-              'suppressed': false,
-              'title':      'libfetch: an out of boundary read while libfetch uses strtol to parse the relevant numbers into address bytes leads to information leak or crash'
-            },
-            {
-              'cve':  'CVE-2021-30139',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-125'
-              ],
-              'description':   'In Alpine Linux apk-tools before 2.12.5, the tarball parser allows a buffer overflow and crash.',
-              'diffID':        'sha256:379067d0cb5309d203a84fb900c950812df2089dedb822239d389ac45a20efe9',
-              'fixedVersions': [
-                '2.10.6-r0'
-              ],
-              'installedVersion': '2.10.5-r1',
-              'packageName':      'apk-tools',
-              'purl':             'pkg:apk/alpine/apk-tools@2.10.5-r1?arch=aarch64&distro=3.12.3',
-              'references':       [
-                'https://gitlab.alpinelinux.org/alpine/apk-tools/-/issues/10741',
-                'https://gitlab.alpinelinux.org/alpine/aports/-/issues/12606'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false
-            },
-            {
-              'cve':  'CVE-2021-28831',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-755'
-              ],
-              'description':   'decompress_gunzip.c in BusyBox through 1.32.1 mishandles the error bit on the huft_build result pointer, with a resultant invalid free or segmentation fault, via malformed gzip data.',
-              'diffID':        'sha256:379067d0cb5309d203a84fb900c950812df2089dedb822239d389ac45a20efe9',
-              'fixedVersions': [
-                '1.31.1-r20'
-              ],
-              'installedVersion': '1.31.1-r19',
-              'packageName':      'busybox',
-              'purl':             'pkg:apk/alpine/busybox@1.31.1-r19?arch=aarch64&distro=3.12.3',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-28831',
-                'https://git.busybox.net/busybox/commit/?id=f25d254dfd4243698c31a4f3153d4ac72aa9e9bd',
-                'https://lists.debian.org/debian-lts-announce/2021/04/msg00001.html',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/3UDQGJRECXFS5EZVDH2OI45FMO436AC4/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/Z7ZIFKPRR32ZYA3WAA2NXFA3QHHOU6FJ/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZASBW7QRRLY5V2R44MQ4QQM4CZIDHM2U/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-28831',
-                'https://security.gentoo.org/glsa/202105-09',
-                'https://security.netapp.com/advisory/ntap-20250509-0005/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://ubuntu.com/security/notices/USN-5179-2',
-                'https://ubuntu.com/security/notices/USN-6335-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-28831'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: invalid free or segmentation fault via malformed gzip data'
-            },
-            {
-              'cve':  'CVE-2021-42378',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the getvar_i function",
-              'diffID':        'sha256:379067d0cb5309d203a84fb900c950812df2089dedb822239d389ac45a20efe9',
-              'fixedVersions': [
-                '1.31.1-r21'
-              ],
-              'installedVersion': '1.31.1-r19',
-              'packageName':      'busybox',
-              'purl':             'pkg:apk/alpine/busybox@1.31.1-r19?arch=aarch64&distro=3.12.3',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42378',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42378',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42378'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the getvar_i()'
-            },
-            {
-              'cve':  'CVE-2021-42379',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the next_input_file function",
-              'diffID':        'sha256:379067d0cb5309d203a84fb900c950812df2089dedb822239d389ac45a20efe9',
-              'fixedVersions': [
-                '1.31.1-r21'
-              ],
-              'installedVersion': '1.31.1-r19',
-              'packageName':      'busybox',
-              'purl':             'pkg:apk/alpine/busybox@1.31.1-r19?arch=aarch64&distro=3.12.3',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42379',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42379',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42379'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the next_input_file()'
-            },
-            {
-              'cve':  'CVE-2021-42380',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the clrvar function",
-              'diffID':        'sha256:379067d0cb5309d203a84fb900c950812df2089dedb822239d389ac45a20efe9',
-              'fixedVersions': [
-                '1.31.1-r21'
-              ],
-              'installedVersion': '1.31.1-r19',
-              'packageName':      'busybox',
-              'purl':             'pkg:apk/alpine/busybox@1.31.1-r19?arch=aarch64&distro=3.12.3',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42380',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42380',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42380'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the clrvar()'
-            },
-            {
-              'cve':  'CVE-2021-42381',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the hash_init function",
-              'diffID':        'sha256:379067d0cb5309d203a84fb900c950812df2089dedb822239d389ac45a20efe9',
-              'fixedVersions': [
-                '1.31.1-r21'
-              ],
-              'installedVersion': '1.31.1-r19',
-              'packageName':      'busybox',
-              'purl':             'pkg:apk/alpine/busybox@1.31.1-r19?arch=aarch64&distro=3.12.3',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42381',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42381',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42381'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the hash_init()'
-            },
-            {
-              'cve':  'CVE-2021-42382',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the getvar_s function",
-              'diffID':        'sha256:379067d0cb5309d203a84fb900c950812df2089dedb822239d389ac45a20efe9',
-              'fixedVersions': [
-                '1.31.1-r21'
-              ],
-              'installedVersion': '1.31.1-r19',
-              'packageName':      'busybox',
-              'purl':             'pkg:apk/alpine/busybox@1.31.1-r19?arch=aarch64&distro=3.12.3',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42382',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42382',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42382'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the getvar_s()'
-            },
-            {
-              'cve':  'CVE-2021-42383',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the evaluate function",
-              'diffID':        'sha256:379067d0cb5309d203a84fb900c950812df2089dedb822239d389ac45a20efe9',
-              'fixedVersions': [
-                '1.31.1-r21'
-              ],
-              'installedVersion': '1.31.1-r19',
-              'packageName':      'busybox',
-              'purl':             'pkg:apk/alpine/busybox@1.31.1-r19?arch=aarch64&distro=3.12.3',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42383',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42383',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42383'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the evaluate()'
-            },
-            {
-              'cve':  'CVE-2021-42384',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the handle_special function",
-              'diffID':        'sha256:379067d0cb5309d203a84fb900c950812df2089dedb822239d389ac45a20efe9',
-              'fixedVersions': [
-                '1.31.1-r21'
-              ],
-              'installedVersion': '1.31.1-r19',
-              'packageName':      'busybox',
-              'purl':             'pkg:apk/alpine/busybox@1.31.1-r19?arch=aarch64&distro=3.12.3',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42384',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42384',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42384'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the handle_special()'
-            },
-            {
-              'cve':  'CVE-2021-42385',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the evaluate function",
-              'diffID':        'sha256:379067d0cb5309d203a84fb900c950812df2089dedb822239d389ac45a20efe9',
-              'fixedVersions': [
-                '1.31.1-r21'
-              ],
-              'installedVersion': '1.31.1-r19',
-              'packageName':      'busybox',
-              'purl':             'pkg:apk/alpine/busybox@1.31.1-r19?arch=aarch64&distro=3.12.3',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42385',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42385',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42385'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the evaluate()'
-            },
-            {
-              'cve':  'CVE-2021-42386',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the nvalloc function",
-              'diffID':        'sha256:379067d0cb5309d203a84fb900c950812df2089dedb822239d389ac45a20efe9',
-              'fixedVersions': [
-                '1.31.1-r21'
-              ],
-              'installedVersion': '1.31.1-r19',
-              'packageName':      'busybox',
-              'purl':             'pkg:apk/alpine/busybox@1.31.1-r19?arch=aarch64&distro=3.12.3',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42386',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42386',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42386'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the nvalloc()'
-            },
-            {
-              'cve':  'CVE-2022-28391',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '8.8',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-88'
-              ],
-              'description':   "BusyBox through 1.35.0 allows remote attackers to execute arbitrary code if netstat is used to print a DNS PTR record's value to a VT compatible terminal. Alternatively, the attacker could choose to change the terminal's colors.",
-              'diffID':        'sha256:379067d0cb5309d203a84fb900c950812df2089dedb822239d389ac45a20efe9',
-              'fixedVersions': [
-                '1.31.1-r22'
-              ],
-              'installedVersion': '1.31.1-r19',
-              'packageName':      'busybox',
-              'purl':             'pkg:apk/alpine/busybox@1.31.1-r19?arch=aarch64&distro=3.12.3',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2022-28391',
-                'https://git.alpinelinux.org/aports/plain/main/busybox/0001-libbb-sockaddr2str-ensure-only-printable-characters-.patch',
-                'https://git.alpinelinux.org/aports/plain/main/busybox/0002-nslookup-sanitize-all-printed-strings-with-printable.patch',
-                'https://gitlab.alpinelinux.org/alpine/aports/-/issues/13661',
-                'https://nvd.nist.gov/vuln/detail/CVE-2022-28391',
-                'https://www.cve.org/CVERecord?id=CVE-2022-28391'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: remote attackers may execute arbitrary code if netstat is used'
-            },
-            {
-              'cve':  'CVE-2021-42374',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '5.7',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-125'
-              ],
-              'description':   "An out-of-bounds heap read in Busybox's unlzma applet leads to information leak and denial of service when crafted LZMA-compressed input is decompressed. This can be triggered by any applet/format that",
-              'diffID':        'sha256:379067d0cb5309d203a84fb900c950812df2089dedb822239d389ac45a20efe9',
-              'fixedVersions': [
-                '1.31.1-r21'
-              ],
-              'installedVersion': '1.31.1-r19',
-              'packageName':      'busybox',
-              'purl':             'pkg:apk/alpine/busybox@1.31.1-r19?arch=aarch64&distro=3.12.3',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42374',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42374',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42374'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'busybox: out-of-bounds read in unlzma applet leads to information leak and denial of service when crafted LZMA-compressed input is decompressed'
-            },
-            {
-              'cve':  'CVE-2021-3711',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '9.8',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'nvd': {
-                  'v3score':  '9.8',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '9.8',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-120'
-              ],
-              'description':   'In order to decrypt SM2 encrypted data an application is expected to call the API function EVP_PKEY_decrypt(). Typically an application will call this function twice. The first time, on entry, the "out" parameter can be NULL and, on exit, the "outlen" parameter is populated with the buffer size required to hold the decrypted plaintext. The application can then allocate a sufficiently sized buffer and call EVP_PKEY_decrypt() again, but this time passing a non-NULL value for the "out" parameter. A bug in the implementation of the SM2 decryption code means that the calculation of the buffer size required to hold the plaintext returned by the first call to EVP_PKEY_decrypt() can be smaller than the actual size required by the second call. This can lead to a buffer overflow when EVP_PKEY_decrypt() is called by the application a second time with a buffer that is too small. A malicious attacker who is able present SM2 content for decryption to an application could cause attacker chosen data to overflow the buffer by up to a maximum of 62 bytes altering the contents of other data held after the buffer, possibly changing application behaviour or causing the application to crash. The location of the buffer is application dependent but is typically heap allocated. Fixed in OpenSSL 1.1.1l (Affected 1.1.1-1.1.1k).',
-              'diffID':        'sha256:379067d0cb5309d203a84fb900c950812df2089dedb822239d389ac45a20efe9',
-              'fixedVersions': [
-                '1.1.1l-r0'
-              ],
-              'installedVersion': '1.1.1i-r0',
-              'packageName':      'libcrypto1.1',
-              'purl':             'pkg:apk/alpine/libcrypto1.1@1.1.1i-r0?arch=aarch64&distro=3.12.3',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2021/08/26/2',
-                'https://access.redhat.com/security/cve/CVE-2021-3711',
-                'https://cert-portal.siemens.com/productcert/pdf/ssa-389290.pdf',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=59f5e75f3bced8fc0e130d72a3f582cf7b480b46',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=59f5e75f3bced8fc0e130d72a3f582cf7b480b46',
-                'https://lists.apache.org/thread.html/r18995de860f0e63635f3008fd2a6aca82394249476d21691e7c59c9e%40%3Cdev.tomcat.apache.org%3E',
-                'https://lists.apache.org/thread.html/r18995de860f0e63635f3008fd2a6aca82394249476d21691e7c59c9e@%3Cdev.tomcat.apache.org%3E',
-                'https://lists.apache.org/thread.html/rad5d9f83f0d11fb3f8bb148d179b8a9ad7c6a17f18d70e5805a713d1%40%3Cdev.tomcat.apache.org%3E',
-                'https://lists.apache.org/thread.html/rad5d9f83f0d11fb3f8bb148d179b8a9ad7c6a17f18d70e5805a713d1@%3Cdev.tomcat.apache.org%3E',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-3711',
-                'https://rustsec.org/advisories/RUSTSEC-2021-0097.html',
-                'https://security.gentoo.org/glsa/202209-02',
-                'https://security.gentoo.org/glsa/202210-02',
-                'https://security.netapp.com/advisory/ntap-20210827-0010',
-                'https://security.netapp.com/advisory/ntap-20210827-0010/',
-                'https://security.netapp.com/advisory/ntap-20211022-0003',
-                'https://security.netapp.com/advisory/ntap-20211022-0003/',
-                'https://security.netapp.com/advisory/ntap-20240621-0006',
-                'https://security.netapp.com/advisory/ntap-20240621-0006/',
-                'https://ubuntu.com/security/notices/USN-5051-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-3711',
-                'https://www.debian.org/security/2021/dsa-4963',
-                'https://www.openssl.org/news/secadv/20210824.txt',
-                'https://www.oracle.com/security-alerts/cpuapr2022.html',
-                'https://www.oracle.com/security-alerts/cpujan2022.html',
-                'https://www.oracle.com/security-alerts/cpuoct2021.html',
-                'https://www.tenable.com/security/tns-2021-16',
-                'https://www.tenable.com/security/tns-2022-02'
-              ],
-              'severity':   'CRITICAL',
-              'suppressed': false,
-              'title':      'openssl: SM2 Decryption Buffer Overflow'
-            },
-            {
-              'cve':  'CVE-2021-23840',
-              'cvss': {
-                'bitnami': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'ghsa': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'nvd': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-190'
-              ],
-              'description':   'Calls to EVP_CipherUpdate, EVP_EncryptUpdate and EVP_DecryptUpdate may overflow the output length argument in some cases where the input length is close to the maximum permissable length for an integer on the platform. In such cases the return value from the function call will be 1 (indicating success), but the output length value will be negative. This could cause applications to behave incorrectly or crash. OpenSSL versions 1.1.1i and below are affected by this issue. Users of these versions should upgrade to OpenSSL 1.1.1j. OpenSSL versions 1.0.2x and below are affected by this issue. However OpenSSL 1.0.2 is out of support and no longer receiving public updates. Premium support customers of OpenSSL 1.0.2 should upgrade to 1.0.2y. Other users should upgrade to 1.1.1j. Fixed in OpenSSL 1.1.1j (Affected 1.1.1-1.1.1i). Fixed in OpenSSL 1.0.2y (Affected 1.0.2-1.0.2x).',
-              'diffID':        'sha256:379067d0cb5309d203a84fb900c950812df2089dedb822239d389ac45a20efe9',
-              'fixedVersions': [
-                '1.1.1j-r0'
-              ],
-              'installedVersion': '1.1.1i-r0',
-              'packageName':      'libcrypto1.1',
-              'purl':             'pkg:apk/alpine/libcrypto1.1@1.1.1i-r0?arch=aarch64&distro=3.12.3',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-23840',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=1908036',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=1930310',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=1930324',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=1934534',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=1934600',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=1939637',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=1940085',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=1965362',
-                'https://cert-portal.siemens.com/productcert/pdf/ssa-389290.pdf',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-23840',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-23841',
-                'https://errata.rockylinux.org/RLSA-2021:4424',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=6a51b9e1d0cf0bf8515f7201b68fb0a3482b3dc1',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=9b1129239f3ebb1d1c98ce9ed41d5c9476c47cb2',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=6a51b9e1d0cf0bf8515f7201b68fb0a3482b3dc1',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=9b1129239f3ebb1d1c98ce9ed41d5c9476c47cb2',
-                'https://github.com/alexcrichton/openssl-src-rs',
-                'https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA44846',
-                'https://kc.mcafee.com/corporate/index?page=content&id=SB10366',
-                'https://linux.oracle.com/cve/CVE-2021-23840.html',
-                'https://linux.oracle.com/errata/ELSA-2021-9561.html',
-                'https://lists.apache.org/thread.html/r58af02e294bd07f487e2c64ffc0a29b837db5600e33b6e698b9d696b%40%3Cissues.bookkeeper.apache.org%3E',
-                'https://lists.apache.org/thread.html/r58af02e294bd07f487e2c64ffc0a29b837db5600e33b6e698b9d696b@%3Cissues.bookkeeper.apache.org%3E',
-                'https://lists.apache.org/thread.html/rf4c02775860db415b4955778a131c2795223f61cb8c6a450893651e4%40%3Cissues.bookkeeper.apache.org%3E',
-                'https://lists.apache.org/thread.html/rf4c02775860db415b4955778a131c2795223f61cb8c6a450893651e4@%3Cissues.bookkeeper.apache.org%3E',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-23840',
-                'https://rustsec.org/advisories/RUSTSEC-2021-0057.html',
-                'https://security.gentoo.org/glsa/202103-03',
-                'https://security.netapp.com/advisory/ntap-20210219-0009',
-                'https://security.netapp.com/advisory/ntap-20210219-0009/',
-                'https://security.netapp.com/advisory/ntap-20240621-0006/',
-                'https://ubuntu.com/security/notices/USN-4738-1',
-                'https://ubuntu.com/security/notices/USN-5088-1',
-                'https://ubuntu.com/security/notices/USN-7018-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-23840',
-                'https://www.debian.org/security/2021/dsa-4855',
-                'https://www.openssl.org/news/secadv/20210216.txt',
-                'https://www.oracle.com//security-alerts/cpujul2021.html',
-                'https://www.oracle.com/security-alerts/cpuApr2021.html',
-                'https://www.oracle.com/security-alerts/cpuapr2022.html',
-                'https://www.oracle.com/security-alerts/cpujan2022.html',
-                'https://www.oracle.com/security-alerts/cpuoct2021.html',
-                'https://www.tenable.com/security/tns-2021-03',
-                'https://www.tenable.com/security/tns-2021-09',
-                'https://www.tenable.com/security/tns-2021-10'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: integer overflow in CipherUpdate'
-            },
-            {
-              'cve':  'CVE-2021-3450',
-              'cvss': {
-                'bitnami': {
-                  'v3score':  '7.4',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N'
-                },
-                'ghsa': {
-                  'v3score':  '7.4',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N'
-                },
-                'nvd': {
-                  'v3score':  '7.4',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N'
-                },
-                'redhat': {
-                  'v3score':  '7.4',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-295'
-              ],
-              'description':   'The X509_V_FLAG_X509_STRICT flag enables additional security checks of the certificates present in a certificate chain. It is not set by default. Starting from OpenSSL version 1.1.1h a check to disallow certificates in the chain that have explicitly encoded elliptic curve parameters was added as an additional strict check. An error in the implementation of this check meant that the result of a previous check to confirm that certificates in the chain are valid CA certificates was overwritten. This effectively bypasses the check that non-CA certificates must not be able to issue other certificates. If a "purpose" has been configured then there is a subsequent opportunity for checks that the certificate is a valid CA. All of the named "purpose" values implemented in libcrypto perform this check. Therefore, where a purpose is set the certificate chain will still be rejected even when the strict flag has been used. A purpose is set by default in libssl client and server certificate verification routines, but it can be overridden or removed by an application. In order to be affected, an application must explicitly set the X509_V_FLAG_X509_STRICT verification flag and either not set a purpose for the certificate verification or, in the case of TLS client or server applications, override the default purpose. OpenSSL versions 1.1.1h and newer are affected by this issue. Users of these versions should upgrade to OpenSSL 1.1.1k. OpenSSL 1.0.2 is not impacted by this issue. Fixed in OpenSSL 1.1.1k (Affected 1.1.1h-1.1.1j).',
-              'diffID':        'sha256:379067d0cb5309d203a84fb900c950812df2089dedb822239d389ac45a20efe9',
-              'fixedVersions': [
-                '1.1.1k-r0'
-              ],
-              'installedVersion': '1.1.1i-r0',
-              'packageName':      'libcrypto1.1',
-              'purl':             'pkg:apk/alpine/libcrypto1.1@1.1.1i-r0?arch=aarch64&distro=3.12.3',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2021/03/27/1',
-                'http://www.openwall.com/lists/oss-security/2021/03/27/2',
-                'http://www.openwall.com/lists/oss-security/2021/03/28/3',
-                'http://www.openwall.com/lists/oss-security/2021/03/28/4',
-                'https://access.redhat.com/security/cve/CVE-2021-3450',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=1941547',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=1941554',
-                'https://cert-portal.siemens.com/productcert/pdf/ssa-389290.pdf',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-3449',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-3450',
-                'https://errata.rockylinux.org/RLSA-2021:1024',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=2a40b7bc7b94dd7de897a74571e7024f0cf0d63b',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=2a40b7bc7b94dd7de897a74571e7024f0cf0d63b',
-                'https://github.com/alexcrichton/openssl-src-rs',
-                'https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA44845',
-                'https://kc.mcafee.com/corporate/index?page=content&id=SB10356',
-                'https://linux.oracle.com/cve/CVE-2021-3450.html',
-                'https://linux.oracle.com/errata/ELSA-2021-9151.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CCBFLLVQVILIVGZMBJL3IXZGKWQISYNP/',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/CCBFLLVQVILIVGZMBJL3IXZGKWQISYNP',
-                'https://mta.openssl.org/pipermail/openssl-announce/2021-March/000198.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-3450',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2021-0013',
-                'https://rustsec.org/advisories/RUSTSEC-2021-0056.html',
-                'https://security.FreeBSD.org/advisories/FreeBSD-SA-21:07.openssl.asc',
-                'https://security.gentoo.org/glsa/202103-03',
-                'https://security.netapp.com/advisory/ntap-20210326-0006',
-                'https://security.netapp.com/advisory/ntap-20210326-0006/',
-                'https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-openssl-2021-GHY28dJd',
-                'https://www.cve.org/CVERecord?id=CVE-2021-3450',
-                'https://www.openssl.org/news/secadv/20210325.txt',
-                'https://www.oracle.com//security-alerts/cpujul2021.html',
-                'https://www.oracle.com/security-alerts/cpuApr2021.html',
-                'https://www.oracle.com/security-alerts/cpuapr2022.html',
-                'https://www.oracle.com/security-alerts/cpujul2022.html',
-                'https://www.oracle.com/security-alerts/cpuoct2021.html',
-                'https://www.tenable.com/security/tns-2021-05',
-                'https://www.tenable.com/security/tns-2021-08',
-                'https://www.tenable.com/security/tns-2021-09'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: CA certificate check bypass with X509_V_FLAG_X509_STRICT'
-            },
-            {
-              'cve':  'CVE-2021-3712',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '7.4',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H'
-                },
-                'nvd': {
-                  'v3score':  '7.4',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.4',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-125'
-              ],
-              'description':   "ASN.1 strings are represented internally within OpenSSL as an ASN1_STRING structure which contains a buffer holding the string data and a field holding the buffer length. This contrasts with normal C strings which are repesented as a buffer for the string data which is terminated with a NUL (0) byte. Although not a strict requirement, ASN.1 strings that are parsed using OpenSSL's own \"d2i\" functions (and other similar parsing functions) as well as any string whose value has been set with the ASN1_STRING_set() function will additionally NUL terminate the byte array in the ASN1_STRING structure. However, it is possible for applications to directly construct valid ASN1_STRING structures which do not NUL terminate the byte array by directly setting the \"data\" and \"length\" fields in the ASN1_STRING array. This can also happen by using the ASN1_STRING_set0() function. Numerous OpenSSL functions that print ASN.1 data have been found to assume that the ASN1_STRING byte array will be NUL terminated, even though this is not guaranteed for strings that have been directly constructed. Where an application requests an ASN.1 structure to be printed, and where that ASN.1 structure contains ASN1_STRINGs that have been directly constructed by the application without NUL terminating the \"data\" field, then a read buffer overrun can occur. The same thing can also occur during name constraints processing of certificates (for example if a certificate has been directly constructed by the application instead of loading it via the OpenSSL parsing functions, and the certificate contains non NUL terminated ASN1_STRING structures). It can also occur in the X509_get1_email(), X509_REQ_get1_email() and X509_get1_ocsp() functions. If a malicious actor can cause an application to directly construct an ASN1_STRING and then process it through one of the affected OpenSSL functions then this issue could be hit. This might result in a crash (causing a Denial of Service attack). It could also result in the disclosure of private memory contents (such as private keys, or sensitive plaintext). Fixed in OpenSSL 1.1.1l (Affected 1.1.1-1.1.1k). Fixed in OpenSSL 1.0.2za (Affected 1.0.2-1.0.2y).",
-              'diffID':        'sha256:379067d0cb5309d203a84fb900c950812df2089dedb822239d389ac45a20efe9',
-              'fixedVersions': [
-                '1.1.1l-r0'
-              ],
-              'installedVersion': '1.1.1i-r0',
-              'packageName':      'libcrypto1.1',
-              'purl':             'pkg:apk/alpine/libcrypto1.1@1.1.1i-r0?arch=aarch64&distro=3.12.3',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2021/08/26/2',
-                'https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2021-3712.json',
-                'https://access.redhat.com/security/cve/CVE-2021-3712',
-                'https://cert-portal.siemens.com/productcert/pdf/ssa-244969.pdf',
-                'https://cert-portal.siemens.com/productcert/pdf/ssa-389290.pdf',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=94d23fcff9b2a7a8368dfe52214d5c2569882c11',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=ccb0a11145ee72b042d10593a64eaf9e8a55ec12',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=94d23fcff9b2a7a8368dfe52214d5c2569882c11',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=ccb0a11145ee72b042d10593a64eaf9e8a55ec12',
-                'https://kc.mcafee.com/corporate/index?page=content&id=SB10366',
-                'https://linux.oracle.com/cve/CVE-2021-3712.html',
-                'https://linux.oracle.com/errata/ELSA-2022-9023.html',
-                'https://lists.apache.org/thread.html/r18995de860f0e63635f3008fd2a6aca82394249476d21691e7c59c9e%40%3Cdev.tomcat.apache.org%3E',
-                'https://lists.apache.org/thread.html/r18995de860f0e63635f3008fd2a6aca82394249476d21691e7c59c9e@%3Cdev.tomcat.apache.org%3E',
-                'https://lists.apache.org/thread.html/rad5d9f83f0d11fb3f8bb148d179b8a9ad7c6a17f18d70e5805a713d1%40%3Cdev.tomcat.apache.org%3E',
-                'https://lists.apache.org/thread.html/rad5d9f83f0d11fb3f8bb148d179b8a9ad7c6a17f18d70e5805a713d1@%3Cdev.tomcat.apache.org%3E',
-                'https://lists.debian.org/debian-lts-announce/2021/09/msg00014.html',
-                'https://lists.debian.org/debian-lts-announce/2021/09/msg00021.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-3712',
-                'https://rustsec.org/advisories/RUSTSEC-2021-0098.html',
-                'https://security.gentoo.org/glsa/202209-02',
-                'https://security.gentoo.org/glsa/202210-02',
-                'https://security.netapp.com/advisory/ntap-20210827-0010',
-                'https://security.netapp.com/advisory/ntap-20210827-0010/',
-                'https://security.netapp.com/advisory/ntap-20240621-0006',
-                'https://security.netapp.com/advisory/ntap-20240621-0006/',
-                'https://ubuntu.com/security/notices/USN-5051-1',
-                'https://ubuntu.com/security/notices/USN-5051-2',
-                'https://ubuntu.com/security/notices/USN-5051-3',
-                'https://ubuntu.com/security/notices/USN-5051-4 (regression only in trusty/esm)',
-                'https://ubuntu.com/security/notices/USN-5088-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-3712',
-                'https://www.debian.org/security/2021/dsa-4963',
-                'https://www.openssl.org/news/secadv/20210824.txt',
-                'https://www.oracle.com/security-alerts/cpuapr2022.html',
-                'https://www.oracle.com/security-alerts/cpujan2022.html',
-                'https://www.oracle.com/security-alerts/cpuoct2021.html',
-                'https://www.tenable.com/security/tns-2021-16',
-                'https://www.tenable.com/security/tns-2022-02'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: Read buffer overruns processing ASN.1 strings'
-            },
-            {
-              'cve':  'CVE-2022-0778',
-              'cvss': {
-                'bitnami': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'ghsa': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'nvd': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-835'
-              ],
-              'description':   'The BN_mod_sqrt() function, which computes a modular square root, contains a bug that can cause it to loop forever for non-prime moduli. Internally this function is used when parsing certificates that contain elliptic curve public keys in compressed form or explicit elliptic curve parameters with a base point encoded in compressed form. It is possible to trigger the infinite loop by crafting a certificate that has invalid explicit curve parameters. Since certificate parsing happens prior to verification of the certificate signature, any process that parses an externally supplied certificate may thus be subject to a denial of service attack. The infinite loop can also be reached when parsing crafted private keys as they can contain explicit elliptic curve parameters. Thus vulnerable situations include: - TLS clients consuming server certificates - TLS servers consuming client certificates - Hosting providers taking certificates or private keys from customers - Certificate authorities parsing certification requests from subscribers - Anything else which parses ASN.1 elliptic curve parameters Also any other applications that use the BN_mod_sqrt() where the attacker can control the parameter values are vulnerable to this DoS issue. In the OpenSSL 1.0.2 version the public key is not parsed during initial parsing of the certificate which makes it slightly harder to trigger the infinite loop. However any operation which requires the public key from the certificate will trigger the infinite loop. In particular the attacker can use a self-signed certificate to trigger the loop during verification of the certificate signature. This issue affects OpenSSL versions 1.0.2, 1.1.1 and 3.0. It was addressed in the releases of 1.1.1n and 3.0.2 on the 15th March 2022. Fixed in OpenSSL 3.0.2 (Affected 3.0.0,3.0.1). Fixed in OpenSSL 1.1.1n (Affected 1.1.1-1.1.1m). Fixed in OpenSSL 1.0.2zd (Affected 1.0.2-1.0.2zc).',
-              'diffID':        'sha256:379067d0cb5309d203a84fb900c950812df2089dedb822239d389ac45a20efe9',
-              'fixedVersions': [
-                '1.1.1n-r0'
-              ],
-              'installedVersion': '1.1.1i-r0',
-              'packageName':      'libcrypto1.1',
-              'purl':             'pkg:apk/alpine/libcrypto1.1@1.1.1i-r0?arch=aarch64&distro=3.12.3',
-              'references':       [
-                'http://packetstormsecurity.com/files/167344/OpenSSL-1.0.2-1.1.1-3.0-BN_mod_sqrt-Infinite-Loop.html',
-                'http://seclists.org/fulldisclosure/2022/May/33',
-                'http://seclists.org/fulldisclosure/2022/May/35',
-                'http://seclists.org/fulldisclosure/2022/May/38',
-                'https://access.redhat.com/errata/RHSA-2022:5326',
-                'https://access.redhat.com/security/cve/CVE-2022-0778',
-                'https://bugzilla.redhat.com/2062202',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2062202',
-                'https://cert-portal.siemens.com/productcert/pdf/ssa-712929.pdf',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-0778',
-                'https://errata.almalinux.org/8/ALSA-2022-5326.html',
-                'https://errata.rockylinux.org/RLSA-2022:4899',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=3118eb64934499d93db3230748a452351d1d9a65',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=380085481c64de749a6dd25cdf0bcf4360b30f83',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=a466912611aa6cbdf550cd10601390e587451246',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=3118eb64934499d93db3230748a452351d1d9a65',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=380085481c64de749a6dd25cdf0bcf4360b30f83',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=a466912611aa6cbdf550cd10601390e587451246',
-                'https://linux.oracle.com/cve/CVE-2022-0778.html',
-                'https://linux.oracle.com/errata/ELSA-2022-9272.html',
-                'https://lists.debian.org/debian-lts-announce/2022/03/msg00023.html',
-                'https://lists.debian.org/debian-lts-announce/2022/03/msg00024.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/323SNN6ZX7PRJJWP2BUAFLPUAE42XWLZ',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/323SNN6ZX7PRJJWP2BUAFLPUAE42XWLZ/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GDB3GQVJPXJE7X5C5JN6JAA4XUDWD6E6',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GDB3GQVJPXJE7X5C5JN6JAA4XUDWD6E6/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/W6K3PR542DXWLEFFMFIDMME4CWMHJRMG',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/W6K3PR542DXWLEFFMFIDMME4CWMHJRMG/',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/323SNN6ZX7PRJJWP2BUAFLPUAE42XWLZ',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/GDB3GQVJPXJE7X5C5JN6JAA4XUDWD6E6',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/W6K3PR542DXWLEFFMFIDMME4CWMHJRMG',
-                'https://nvd.nist.gov/vuln/detail/CVE-2022-0778',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2022-0002',
-                'https://rustsec.org/advisories/RUSTSEC-2022-0014.html',
-                'https://security.gentoo.org/glsa/202210-02',
-                'https://security.netapp.com/advisory/ntap-20220321-0002',
-                'https://security.netapp.com/advisory/ntap-20220321-0002/',
-                'https://security.netapp.com/advisory/ntap-20220429-0005',
-                'https://security.netapp.com/advisory/ntap-20220429-0005/',
-                'https://security.netapp.com/advisory/ntap-20240621-0006',
-                'https://security.netapp.com/advisory/ntap-20240621-0006/',
-                'https://support.apple.com/kb/HT213255',
-                'https://support.apple.com/kb/HT213256',
-                'https://support.apple.com/kb/HT213257',
-                'https://ubuntu.com/security/notices/USN-5328-1',
-                'https://ubuntu.com/security/notices/USN-5328-2',
-                'https://ubuntu.com/security/notices/USN-6457-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2022-0778',
-                'https://www.debian.org/security/2022/dsa-5103',
-                'https://www.openssl.org/news/secadv/20220315.txt',
-                'https://www.oracle.com/security-alerts/cpuapr2022.html',
-                'https://www.oracle.com/security-alerts/cpujul2022.html',
-                'https://www.tenable.com/security/tns-2022-06',
-                'https://www.tenable.com/security/tns-2022-07',
-                'https://www.tenable.com/security/tns-2022-08',
-                'https://www.tenable.com/security/tns-2022-09'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: Infinite loop in BN_mod_sqrt() reachable when parsing certificates'
-            },
-            {
-              'cve':  'CVE-2021-23841',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'nvd': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-476'
-              ],
-              'description':   'The OpenSSL public API function X509_issuer_and_serial_hash() attempts to create a unique hash value based on the issuer and serial number data contained within an X509 certificate. However it fails to correctly handle any errors that may occur while parsing the issuer field (which might occur if the issuer field is maliciously constructed). This may subsequently result in a NULL pointer deref and a crash leading to a potential denial of service attack. The function X509_issuer_and_serial_hash() is never directly called by OpenSSL itself so applications are only vulnerable if they use this function directly and they use it on certificates that may have been obtained from untrusted sources. OpenSSL versions 1.1.1i and below are affected by this issue. Users of these versions should upgrade to OpenSSL 1.1.1j. OpenSSL versions 1.0.2x and below are affected by this issue. However OpenSSL 1.0.2 is out of support and no longer receiving public updates. Premium support customers of OpenSSL 1.0.2 should upgrade to 1.0.2y. Other users should upgrade to 1.1.1j. Fixed in OpenSSL 1.1.1j (Affected 1.1.1-1.1.1i). Fixed in OpenSSL 1.0.2y (Affected 1.0.2-1.0.2x).',
-              'diffID':        'sha256:379067d0cb5309d203a84fb900c950812df2089dedb822239d389ac45a20efe9',
-              'fixedVersions': [
-                '1.1.1j-r0'
-              ],
-              'installedVersion': '1.1.1i-r0',
-              'packageName':      'libcrypto1.1',
-              'purl':             'pkg:apk/alpine/libcrypto1.1@1.1.1i-r0?arch=aarch64&distro=3.12.3',
-              'references':       [
-                'http://seclists.org/fulldisclosure/2021/May/67',
-                'http://seclists.org/fulldisclosure/2021/May/68',
-                'http://seclists.org/fulldisclosure/2021/May/70',
-                'https://access.redhat.com/security/cve/CVE-2021-23841',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=1908036',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=1930310',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=1930324',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=1934534',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=1934600',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=1939637',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=1940085',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=1965362',
-                'https://cert-portal.siemens.com/productcert/pdf/ssa-637483.pdf',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-23840',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-23841',
-                'https://errata.rockylinux.org/RLSA-2021:4424',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=122a19ab48091c657f7cb1fb3af9fc07bd557bbf',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=8252ee4d90f3f2004d3d0aeeed003ad49c9a7807',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=122a19ab48091c657f7cb1fb3af9fc07bd557bbf',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=6a51b9e1d0cf0bf8515f7201b68fb0a3482b3dc1',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=8252ee4d90f3f2004d3d0aeeed003ad49c9a7807',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=9b1129239f3ebb1d1c98ce9ed41d5c9476c47cb2',
-                'https://github.com/alexcrichton/openssl-src-rs',
-                'https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA44846',
-                'https://linux.oracle.com/cve/CVE-2021-23841.html',
-                'https://linux.oracle.com/errata/ELSA-2021-9561.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-23841',
-                'https://rustsec.org/advisories/RUSTSEC-2021-0058',
-                'https://rustsec.org/advisories/RUSTSEC-2021-0058.html',
-                'https://security.gentoo.org/glsa/202103-03',
-                'https://security.netapp.com/advisory/ntap-20210219-0009',
-                'https://security.netapp.com/advisory/ntap-20210219-0009/',
-                'https://security.netapp.com/advisory/ntap-20210513-0002',
-                'https://security.netapp.com/advisory/ntap-20210513-0002/',
-                'https://security.netapp.com/advisory/ntap-20240621-0006/',
-                'https://support.apple.com/kb/HT212528',
-                'https://support.apple.com/kb/HT212529',
-                'https://support.apple.com/kb/HT212534',
-                'https://ubuntu.com/security/notices/USN-4738-1',
-                'https://ubuntu.com/security/notices/USN-4745-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-23841',
-                'https://www.debian.org/security/2021/dsa-4855',
-                'https://www.openssl.org/news/secadv/20210216.txt',
-                'https://www.oracle.com//security-alerts/cpujul2021.html',
-                'https://www.oracle.com/security-alerts/cpuApr2021.html',
-                'https://www.oracle.com/security-alerts/cpuapr2022.html',
-                'https://www.oracle.com/security-alerts/cpuoct2021.html',
-                'https://www.tenable.com/security/tns-2021-03',
-                'https://www.tenable.com/security/tns-2021-09'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: NULL pointer dereference in X509_issuer_and_serial_hash()'
-            },
-            {
-              'cve':  'CVE-2021-3449',
-              'cvss': {
-                'bitnami': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'ghsa': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'nvd': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-476'
-              ],
-              'description':   'An OpenSSL TLS server may crash if sent a maliciously crafted renegotiation ClientHello message from a client. If a TLSv1.2 renegotiation ClientHello omits the signature_algorithms extension (where it was present in the initial ClientHello), but includes a signature_algorithms_cert extension then a NULL pointer dereference will result, leading to a crash and a denial of service attack. A server is only vulnerable if it has TLSv1.2 and renegotiation enabled (which is the default configuration). OpenSSL TLS clients are not impacted by this issue. All OpenSSL 1.1.1 versions are affected by this issue. Users of these versions should upgrade to OpenSSL 1.1.1k. OpenSSL 1.0.2 is not impacted by this issue. Fixed in OpenSSL 1.1.1k (Affected 1.1.1-1.1.1j).',
-              'diffID':        'sha256:379067d0cb5309d203a84fb900c950812df2089dedb822239d389ac45a20efe9',
-              'fixedVersions': [
-                '1.1.1k-r0'
-              ],
-              'installedVersion': '1.1.1i-r0',
-              'packageName':      'libcrypto1.1',
-              'purl':             'pkg:apk/alpine/libcrypto1.1@1.1.1i-r0?arch=aarch64&distro=3.12.3',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2021/03/27/1',
-                'http://www.openwall.com/lists/oss-security/2021/03/27/2',
-                'http://www.openwall.com/lists/oss-security/2021/03/28/3',
-                'http://www.openwall.com/lists/oss-security/2021/03/28/4',
-                'https://access.redhat.com/security/cve/CVE-2021-3449',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=1941547',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=1941554',
-                'https://cert-portal.siemens.com/productcert/pdf/ssa-389290.pdf',
-                'https://cert-portal.siemens.com/productcert/pdf/ssa-772220.pdf',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-3449',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-3450',
-                'https://errata.rockylinux.org/RLSA-2021:1024',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=fb9fa6b51defd48157eeb207f52181f735d96148',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=fb9fa6b51defd48157eeb207f52181f735d96148',
-                'https://github.com/alexcrichton/openssl-src-rs',
-                'https://github.com/nodejs/node/pull/38083',
-                'https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA44845',
-                'https://kc.mcafee.com/corporate/index?page=content&id=SB10356',
-                'https://linux.oracle.com/cve/CVE-2021-3449.html',
-                'https://linux.oracle.com/errata/ELSA-2021-9151.html',
-                'https://lists.debian.org/debian-lts-announce/2021/08/msg00029.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CCBFLLVQVILIVGZMBJL3IXZGKWQISYNP/',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/CCBFLLVQVILIVGZMBJL3IXZGKWQISYNP',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-3449',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2021-0013',
-                'https://rustsec.org/advisories/RUSTSEC-2021-0055',
-                'https://rustsec.org/advisories/RUSTSEC-2021-0055.html',
-                'https://security.FreeBSD.org/advisories/FreeBSD-SA-21:07.openssl.asc',
-                'https://security.gentoo.org/glsa/202103-03',
-                'https://security.netapp.com/advisory/ntap-20210326-0006',
-                'https://security.netapp.com/advisory/ntap-20210326-0006/',
-                'https://security.netapp.com/advisory/ntap-20210513-0002',
-                'https://security.netapp.com/advisory/ntap-20210513-0002/',
-                'https://security.netapp.com/advisory/ntap-20240621-0006/',
-                'https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-openssl-2021-GHY28dJd',
-                'https://ubuntu.com/security/notices/USN-4891-1',
-                'https://ubuntu.com/security/notices/USN-5038-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-3449',
-                'https://www.debian.org/security/2021/dsa-4875',
-                'https://www.openssl.org/news/secadv/20210325.txt',
-                'https://www.oracle.com//security-alerts/cpujul2021.html',
-                'https://www.oracle.com/security-alerts/cpuApr2021.html',
-                'https://www.oracle.com/security-alerts/cpuapr2022.html',
-                'https://www.oracle.com/security-alerts/cpujul2022.html',
-                'https://www.oracle.com/security-alerts/cpuoct2021.html',
-                'https://www.tenable.com/security/tns-2021-05',
-                'https://www.tenable.com/security/tns-2021-06',
-                'https://www.tenable.com/security/tns-2021-09',
-                'https://www.tenable.com/security/tns-2021-10'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: NULL pointer dereference in signature_algorithms processing'
-            },
-            {
-              'cve':  'CVE-2021-23839',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '3.7',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N'
-                },
-                'redhat': {
-                  'v3score':  '3.7',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-327'
-              ],
-              'description':   'OpenSSL 1.0.2 supports SSLv2. If a client attempts to negotiate SSLv2 with a server that is configured to support both SSLv2 and more recent SSL and TLS versions then a check is made for a version rollback attack when unpadding an RSA signature. Clients that support SSL or TLS versions greater than SSLv2 are supposed to use a special form of padding. A server that supports greater than SSLv2 is supposed to reject connection attempts from a client where this special form of padding is present, because this indicates that a version rollback has occurred (i.e. both client and server support greater than SSLv2, and yet this is the version that is being requested). The implementation of this padding check inverted the logic so that the connection attempt is accepted if the padding is present, and rejected if it is absent. This means that such as server will accept a connection if a version rollback attack has occurred. Further the server will erroneously reject a connection if a normal SSLv2 connection attempt is made. Only OpenSSL 1.0.2 servers from version 1.0.2s to 1.0.2x are affected by this issue. In order to be vulnerable a 1.0.2 server must: 1) have configured SSLv2 support at compile time (this is off by default), 2) have configured SSLv2 support at runtime (this is off by default), 3) have configured SSLv2 ciphersuites (these are not in the default ciphersuite list) OpenSSL 1.1.1 does not have SSLv2 support and therefore is not vulnerable to this issue. The underlying error is in the implementation of the RSA_padding_check_SSLv23() function. This also affects the RSA_SSLV23_PADDING padding mode used by various other functions. Although 1.1.1 does not support SSLv2 the RSA_padding_check_SSLv23() function still exists, as does the RSA_SSLV23_PADDING padding mode. Applications that directly call that function or use that padding mode will encounter this issue. However since there is no support for the SSLv2 protocol in 1.1.1 this is considered a bug and not a security issue in that version. OpenSSL 1.0.2 is out of support and no longer receiving public updates. Premium support customers of OpenSSL 1.0.2 should upgrade to 1.0.2y. Other users should upgrade to 1.1.1j. Fixed in OpenSSL 1.0.2y (Affected 1.0.2s-1.0.2x).',
-              'diffID':        'sha256:379067d0cb5309d203a84fb900c950812df2089dedb822239d389ac45a20efe9',
-              'fixedVersions': [
-                '1.1.1j-r0'
-              ],
-              'installedVersion': '1.1.1i-r0',
-              'packageName':      'libcrypto1.1',
-              'purl':             'pkg:apk/alpine/libcrypto1.1@1.1.1i-r0?arch=aarch64&distro=3.12.3',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-23839',
-                'https://cert-portal.siemens.com/productcert/pdf/ssa-637483.pdf',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=30919ab80a478f2d81f2e9acdcca3fa4740cd547',
-                'https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA44846',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-23839',
-                'https://security.netapp.com/advisory/ntap-20210219-0009/',
-                'https://security.netapp.com/advisory/ntap-20240621-0006/',
-                'https://www.cve.org/CVERecord?id=CVE-2021-23839',
-                'https://www.openssl.org/news/secadv/20210216.txt',
-                'https://www.oracle.com//security-alerts/cpujul2021.html',
-                'https://www.oracle.com/security-alerts/cpuApr2021.html',
-                'https://www.oracle.com/security-alerts/cpuapr2022.html',
-                'https://www.oracle.com/security-alerts/cpuoct2021.html'
-              ],
-              'severity':   'LOW',
-              'suppressed': false,
-              'title':      'openssl: incorrect SSLv2 rollback protection'
-            },
-            {
-              'cve':  'CVE-2021-3711',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '9.8',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'nvd': {
-                  'v3score':  '9.8',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '9.8',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-120'
-              ],
-              'description':   'In order to decrypt SM2 encrypted data an application is expected to call the API function EVP_PKEY_decrypt(). Typically an application will call this function twice. The first time, on entry, the "out" parameter can be NULL and, on exit, the "outlen" parameter is populated with the buffer size required to hold the decrypted plaintext. The application can then allocate a sufficiently sized buffer and call EVP_PKEY_decrypt() again, but this time passing a non-NULL value for the "out" parameter. A bug in the implementation of the SM2 decryption code means that the calculation of the buffer size required to hold the plaintext returned by the first call to EVP_PKEY_decrypt() can be smaller than the actual size required by the second call. This can lead to a buffer overflow when EVP_PKEY_decrypt() is called by the application a second time with a buffer that is too small. A malicious attacker who is able present SM2 content for decryption to an application could cause attacker chosen data to overflow the buffer by up to a maximum of 62 bytes altering the contents of other data held after the buffer, possibly changing application behaviour or causing the application to crash. The location of the buffer is application dependent but is typically heap allocated. Fixed in OpenSSL 1.1.1l (Affected 1.1.1-1.1.1k).',
-              'diffID':        'sha256:379067d0cb5309d203a84fb900c950812df2089dedb822239d389ac45a20efe9',
-              'fixedVersions': [
-                '1.1.1l-r0'
-              ],
-              'installedVersion': '1.1.1i-r0',
-              'packageName':      'libssl1.1',
-              'purl':             'pkg:apk/alpine/libssl1.1@1.1.1i-r0?arch=aarch64&distro=3.12.3',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2021/08/26/2',
-                'https://access.redhat.com/security/cve/CVE-2021-3711',
-                'https://cert-portal.siemens.com/productcert/pdf/ssa-389290.pdf',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=59f5e75f3bced8fc0e130d72a3f582cf7b480b46',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=59f5e75f3bced8fc0e130d72a3f582cf7b480b46',
-                'https://lists.apache.org/thread.html/r18995de860f0e63635f3008fd2a6aca82394249476d21691e7c59c9e%40%3Cdev.tomcat.apache.org%3E',
-                'https://lists.apache.org/thread.html/r18995de860f0e63635f3008fd2a6aca82394249476d21691e7c59c9e@%3Cdev.tomcat.apache.org%3E',
-                'https://lists.apache.org/thread.html/rad5d9f83f0d11fb3f8bb148d179b8a9ad7c6a17f18d70e5805a713d1%40%3Cdev.tomcat.apache.org%3E',
-                'https://lists.apache.org/thread.html/rad5d9f83f0d11fb3f8bb148d179b8a9ad7c6a17f18d70e5805a713d1@%3Cdev.tomcat.apache.org%3E',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-3711',
-                'https://rustsec.org/advisories/RUSTSEC-2021-0097.html',
-                'https://security.gentoo.org/glsa/202209-02',
-                'https://security.gentoo.org/glsa/202210-02',
-                'https://security.netapp.com/advisory/ntap-20210827-0010',
-                'https://security.netapp.com/advisory/ntap-20210827-0010/',
-                'https://security.netapp.com/advisory/ntap-20211022-0003',
-                'https://security.netapp.com/advisory/ntap-20211022-0003/',
-                'https://security.netapp.com/advisory/ntap-20240621-0006',
-                'https://security.netapp.com/advisory/ntap-20240621-0006/',
-                'https://ubuntu.com/security/notices/USN-5051-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-3711',
-                'https://www.debian.org/security/2021/dsa-4963',
-                'https://www.openssl.org/news/secadv/20210824.txt',
-                'https://www.oracle.com/security-alerts/cpuapr2022.html',
-                'https://www.oracle.com/security-alerts/cpujan2022.html',
-                'https://www.oracle.com/security-alerts/cpuoct2021.html',
-                'https://www.tenable.com/security/tns-2021-16',
-                'https://www.tenable.com/security/tns-2022-02'
-              ],
-              'severity':   'CRITICAL',
-              'suppressed': false,
-              'title':      'openssl: SM2 Decryption Buffer Overflow'
-            },
-            {
-              'cve':  'CVE-2021-23840',
-              'cvss': {
-                'bitnami': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'ghsa': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'nvd': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-190'
-              ],
-              'description':   'Calls to EVP_CipherUpdate, EVP_EncryptUpdate and EVP_DecryptUpdate may overflow the output length argument in some cases where the input length is close to the maximum permissable length for an integer on the platform. In such cases the return value from the function call will be 1 (indicating success), but the output length value will be negative. This could cause applications to behave incorrectly or crash. OpenSSL versions 1.1.1i and below are affected by this issue. Users of these versions should upgrade to OpenSSL 1.1.1j. OpenSSL versions 1.0.2x and below are affected by this issue. However OpenSSL 1.0.2 is out of support and no longer receiving public updates. Premium support customers of OpenSSL 1.0.2 should upgrade to 1.0.2y. Other users should upgrade to 1.1.1j. Fixed in OpenSSL 1.1.1j (Affected 1.1.1-1.1.1i). Fixed in OpenSSL 1.0.2y (Affected 1.0.2-1.0.2x).',
-              'diffID':        'sha256:379067d0cb5309d203a84fb900c950812df2089dedb822239d389ac45a20efe9',
-              'fixedVersions': [
-                '1.1.1j-r0'
-              ],
-              'installedVersion': '1.1.1i-r0',
-              'packageName':      'libssl1.1',
-              'purl':             'pkg:apk/alpine/libssl1.1@1.1.1i-r0?arch=aarch64&distro=3.12.3',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-23840',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=1908036',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=1930310',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=1930324',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=1934534',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=1934600',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=1939637',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=1940085',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=1965362',
-                'https://cert-portal.siemens.com/productcert/pdf/ssa-389290.pdf',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-23840',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-23841',
-                'https://errata.rockylinux.org/RLSA-2021:4424',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=6a51b9e1d0cf0bf8515f7201b68fb0a3482b3dc1',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=9b1129239f3ebb1d1c98ce9ed41d5c9476c47cb2',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=6a51b9e1d0cf0bf8515f7201b68fb0a3482b3dc1',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=9b1129239f3ebb1d1c98ce9ed41d5c9476c47cb2',
-                'https://github.com/alexcrichton/openssl-src-rs',
-                'https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA44846',
-                'https://kc.mcafee.com/corporate/index?page=content&id=SB10366',
-                'https://linux.oracle.com/cve/CVE-2021-23840.html',
-                'https://linux.oracle.com/errata/ELSA-2021-9561.html',
-                'https://lists.apache.org/thread.html/r58af02e294bd07f487e2c64ffc0a29b837db5600e33b6e698b9d696b%40%3Cissues.bookkeeper.apache.org%3E',
-                'https://lists.apache.org/thread.html/r58af02e294bd07f487e2c64ffc0a29b837db5600e33b6e698b9d696b@%3Cissues.bookkeeper.apache.org%3E',
-                'https://lists.apache.org/thread.html/rf4c02775860db415b4955778a131c2795223f61cb8c6a450893651e4%40%3Cissues.bookkeeper.apache.org%3E',
-                'https://lists.apache.org/thread.html/rf4c02775860db415b4955778a131c2795223f61cb8c6a450893651e4@%3Cissues.bookkeeper.apache.org%3E',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-23840',
-                'https://rustsec.org/advisories/RUSTSEC-2021-0057.html',
-                'https://security.gentoo.org/glsa/202103-03',
-                'https://security.netapp.com/advisory/ntap-20210219-0009',
-                'https://security.netapp.com/advisory/ntap-20210219-0009/',
-                'https://security.netapp.com/advisory/ntap-20240621-0006/',
-                'https://ubuntu.com/security/notices/USN-4738-1',
-                'https://ubuntu.com/security/notices/USN-5088-1',
-                'https://ubuntu.com/security/notices/USN-7018-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-23840',
-                'https://www.debian.org/security/2021/dsa-4855',
-                'https://www.openssl.org/news/secadv/20210216.txt',
-                'https://www.oracle.com//security-alerts/cpujul2021.html',
-                'https://www.oracle.com/security-alerts/cpuApr2021.html',
-                'https://www.oracle.com/security-alerts/cpuapr2022.html',
-                'https://www.oracle.com/security-alerts/cpujan2022.html',
-                'https://www.oracle.com/security-alerts/cpuoct2021.html',
-                'https://www.tenable.com/security/tns-2021-03',
-                'https://www.tenable.com/security/tns-2021-09',
-                'https://www.tenable.com/security/tns-2021-10'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: integer overflow in CipherUpdate'
-            },
-            {
-              'cve':  'CVE-2021-3450',
-              'cvss': {
-                'bitnami': {
-                  'v3score':  '7.4',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N'
-                },
-                'ghsa': {
-                  'v3score':  '7.4',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N'
-                },
-                'nvd': {
-                  'v3score':  '7.4',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N'
-                },
-                'redhat': {
-                  'v3score':  '7.4',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-295'
-              ],
-              'description':   'The X509_V_FLAG_X509_STRICT flag enables additional security checks of the certificates present in a certificate chain. It is not set by default. Starting from OpenSSL version 1.1.1h a check to disallow certificates in the chain that have explicitly encoded elliptic curve parameters was added as an additional strict check. An error in the implementation of this check meant that the result of a previous check to confirm that certificates in the chain are valid CA certificates was overwritten. This effectively bypasses the check that non-CA certificates must not be able to issue other certificates. If a "purpose" has been configured then there is a subsequent opportunity for checks that the certificate is a valid CA. All of the named "purpose" values implemented in libcrypto perform this check. Therefore, where a purpose is set the certificate chain will still be rejected even when the strict flag has been used. A purpose is set by default in libssl client and server certificate verification routines, but it can be overridden or removed by an application. In order to be affected, an application must explicitly set the X509_V_FLAG_X509_STRICT verification flag and either not set a purpose for the certificate verification or, in the case of TLS client or server applications, override the default purpose. OpenSSL versions 1.1.1h and newer are affected by this issue. Users of these versions should upgrade to OpenSSL 1.1.1k. OpenSSL 1.0.2 is not impacted by this issue. Fixed in OpenSSL 1.1.1k (Affected 1.1.1h-1.1.1j).',
-              'diffID':        'sha256:379067d0cb5309d203a84fb900c950812df2089dedb822239d389ac45a20efe9',
-              'fixedVersions': [
-                '1.1.1k-r0'
-              ],
-              'installedVersion': '1.1.1i-r0',
-              'packageName':      'libssl1.1',
-              'purl':             'pkg:apk/alpine/libssl1.1@1.1.1i-r0?arch=aarch64&distro=3.12.3',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2021/03/27/1',
-                'http://www.openwall.com/lists/oss-security/2021/03/27/2',
-                'http://www.openwall.com/lists/oss-security/2021/03/28/3',
-                'http://www.openwall.com/lists/oss-security/2021/03/28/4',
-                'https://access.redhat.com/security/cve/CVE-2021-3450',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=1941547',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=1941554',
-                'https://cert-portal.siemens.com/productcert/pdf/ssa-389290.pdf',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-3449',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-3450',
-                'https://errata.rockylinux.org/RLSA-2021:1024',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=2a40b7bc7b94dd7de897a74571e7024f0cf0d63b',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=2a40b7bc7b94dd7de897a74571e7024f0cf0d63b',
-                'https://github.com/alexcrichton/openssl-src-rs',
-                'https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA44845',
-                'https://kc.mcafee.com/corporate/index?page=content&id=SB10356',
-                'https://linux.oracle.com/cve/CVE-2021-3450.html',
-                'https://linux.oracle.com/errata/ELSA-2021-9151.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CCBFLLVQVILIVGZMBJL3IXZGKWQISYNP/',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/CCBFLLVQVILIVGZMBJL3IXZGKWQISYNP',
-                'https://mta.openssl.org/pipermail/openssl-announce/2021-March/000198.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-3450',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2021-0013',
-                'https://rustsec.org/advisories/RUSTSEC-2021-0056.html',
-                'https://security.FreeBSD.org/advisories/FreeBSD-SA-21:07.openssl.asc',
-                'https://security.gentoo.org/glsa/202103-03',
-                'https://security.netapp.com/advisory/ntap-20210326-0006',
-                'https://security.netapp.com/advisory/ntap-20210326-0006/',
-                'https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-openssl-2021-GHY28dJd',
-                'https://www.cve.org/CVERecord?id=CVE-2021-3450',
-                'https://www.openssl.org/news/secadv/20210325.txt',
-                'https://www.oracle.com//security-alerts/cpujul2021.html',
-                'https://www.oracle.com/security-alerts/cpuApr2021.html',
-                'https://www.oracle.com/security-alerts/cpuapr2022.html',
-                'https://www.oracle.com/security-alerts/cpujul2022.html',
-                'https://www.oracle.com/security-alerts/cpuoct2021.html',
-                'https://www.tenable.com/security/tns-2021-05',
-                'https://www.tenable.com/security/tns-2021-08',
-                'https://www.tenable.com/security/tns-2021-09'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: CA certificate check bypass with X509_V_FLAG_X509_STRICT'
-            },
-            {
-              'cve':  'CVE-2021-3712',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '7.4',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H'
-                },
-                'nvd': {
-                  'v3score':  '7.4',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.4',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-125'
-              ],
-              'description':   "ASN.1 strings are represented internally within OpenSSL as an ASN1_STRING structure which contains a buffer holding the string data and a field holding the buffer length. This contrasts with normal C strings which are repesented as a buffer for the string data which is terminated with a NUL (0) byte. Although not a strict requirement, ASN.1 strings that are parsed using OpenSSL's own \"d2i\" functions (and other similar parsing functions) as well as any string whose value has been set with the ASN1_STRING_set() function will additionally NUL terminate the byte array in the ASN1_STRING structure. However, it is possible for applications to directly construct valid ASN1_STRING structures which do not NUL terminate the byte array by directly setting the \"data\" and \"length\" fields in the ASN1_STRING array. This can also happen by using the ASN1_STRING_set0() function. Numerous OpenSSL functions that print ASN.1 data have been found to assume that the ASN1_STRING byte array will be NUL terminated, even though this is not guaranteed for strings that have been directly constructed. Where an application requests an ASN.1 structure to be printed, and where that ASN.1 structure contains ASN1_STRINGs that have been directly constructed by the application without NUL terminating the \"data\" field, then a read buffer overrun can occur. The same thing can also occur during name constraints processing of certificates (for example if a certificate has been directly constructed by the application instead of loading it via the OpenSSL parsing functions, and the certificate contains non NUL terminated ASN1_STRING structures). It can also occur in the X509_get1_email(), X509_REQ_get1_email() and X509_get1_ocsp() functions. If a malicious actor can cause an application to directly construct an ASN1_STRING and then process it through one of the affected OpenSSL functions then this issue could be hit. This might result in a crash (causing a Denial of Service attack). It could also result in the disclosure of private memory contents (such as private keys, or sensitive plaintext). Fixed in OpenSSL 1.1.1l (Affected 1.1.1-1.1.1k). Fixed in OpenSSL 1.0.2za (Affected 1.0.2-1.0.2y).",
-              'diffID':        'sha256:379067d0cb5309d203a84fb900c950812df2089dedb822239d389ac45a20efe9',
-              'fixedVersions': [
-                '1.1.1l-r0'
-              ],
-              'installedVersion': '1.1.1i-r0',
-              'packageName':      'libssl1.1',
-              'purl':             'pkg:apk/alpine/libssl1.1@1.1.1i-r0?arch=aarch64&distro=3.12.3',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2021/08/26/2',
-                'https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2021-3712.json',
-                'https://access.redhat.com/security/cve/CVE-2021-3712',
-                'https://cert-portal.siemens.com/productcert/pdf/ssa-244969.pdf',
-                'https://cert-portal.siemens.com/productcert/pdf/ssa-389290.pdf',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=94d23fcff9b2a7a8368dfe52214d5c2569882c11',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=ccb0a11145ee72b042d10593a64eaf9e8a55ec12',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=94d23fcff9b2a7a8368dfe52214d5c2569882c11',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=ccb0a11145ee72b042d10593a64eaf9e8a55ec12',
-                'https://kc.mcafee.com/corporate/index?page=content&id=SB10366',
-                'https://linux.oracle.com/cve/CVE-2021-3712.html',
-                'https://linux.oracle.com/errata/ELSA-2022-9023.html',
-                'https://lists.apache.org/thread.html/r18995de860f0e63635f3008fd2a6aca82394249476d21691e7c59c9e%40%3Cdev.tomcat.apache.org%3E',
-                'https://lists.apache.org/thread.html/r18995de860f0e63635f3008fd2a6aca82394249476d21691e7c59c9e@%3Cdev.tomcat.apache.org%3E',
-                'https://lists.apache.org/thread.html/rad5d9f83f0d11fb3f8bb148d179b8a9ad7c6a17f18d70e5805a713d1%40%3Cdev.tomcat.apache.org%3E',
-                'https://lists.apache.org/thread.html/rad5d9f83f0d11fb3f8bb148d179b8a9ad7c6a17f18d70e5805a713d1@%3Cdev.tomcat.apache.org%3E',
-                'https://lists.debian.org/debian-lts-announce/2021/09/msg00014.html',
-                'https://lists.debian.org/debian-lts-announce/2021/09/msg00021.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-3712',
-                'https://rustsec.org/advisories/RUSTSEC-2021-0098.html',
-                'https://security.gentoo.org/glsa/202209-02',
-                'https://security.gentoo.org/glsa/202210-02',
-                'https://security.netapp.com/advisory/ntap-20210827-0010',
-                'https://security.netapp.com/advisory/ntap-20210827-0010/',
-                'https://security.netapp.com/advisory/ntap-20240621-0006',
-                'https://security.netapp.com/advisory/ntap-20240621-0006/',
-                'https://ubuntu.com/security/notices/USN-5051-1',
-                'https://ubuntu.com/security/notices/USN-5051-2',
-                'https://ubuntu.com/security/notices/USN-5051-3',
-                'https://ubuntu.com/security/notices/USN-5051-4 (regression only in trusty/esm)',
-                'https://ubuntu.com/security/notices/USN-5088-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-3712',
-                'https://www.debian.org/security/2021/dsa-4963',
-                'https://www.openssl.org/news/secadv/20210824.txt',
-                'https://www.oracle.com/security-alerts/cpuapr2022.html',
-                'https://www.oracle.com/security-alerts/cpujan2022.html',
-                'https://www.oracle.com/security-alerts/cpuoct2021.html',
-                'https://www.tenable.com/security/tns-2021-16',
-                'https://www.tenable.com/security/tns-2022-02'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: Read buffer overruns processing ASN.1 strings'
-            },
-            {
-              'cve':  'CVE-2022-0778',
-              'cvss': {
-                'bitnami': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'ghsa': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'nvd': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-835'
-              ],
-              'description':   'The BN_mod_sqrt() function, which computes a modular square root, contains a bug that can cause it to loop forever for non-prime moduli. Internally this function is used when parsing certificates that contain elliptic curve public keys in compressed form or explicit elliptic curve parameters with a base point encoded in compressed form. It is possible to trigger the infinite loop by crafting a certificate that has invalid explicit curve parameters. Since certificate parsing happens prior to verification of the certificate signature, any process that parses an externally supplied certificate may thus be subject to a denial of service attack. The infinite loop can also be reached when parsing crafted private keys as they can contain explicit elliptic curve parameters. Thus vulnerable situations include: - TLS clients consuming server certificates - TLS servers consuming client certificates - Hosting providers taking certificates or private keys from customers - Certificate authorities parsing certification requests from subscribers - Anything else which parses ASN.1 elliptic curve parameters Also any other applications that use the BN_mod_sqrt() where the attacker can control the parameter values are vulnerable to this DoS issue. In the OpenSSL 1.0.2 version the public key is not parsed during initial parsing of the certificate which makes it slightly harder to trigger the infinite loop. However any operation which requires the public key from the certificate will trigger the infinite loop. In particular the attacker can use a self-signed certificate to trigger the loop during verification of the certificate signature. This issue affects OpenSSL versions 1.0.2, 1.1.1 and 3.0. It was addressed in the releases of 1.1.1n and 3.0.2 on the 15th March 2022. Fixed in OpenSSL 3.0.2 (Affected 3.0.0,3.0.1). Fixed in OpenSSL 1.1.1n (Affected 1.1.1-1.1.1m). Fixed in OpenSSL 1.0.2zd (Affected 1.0.2-1.0.2zc).',
-              'diffID':        'sha256:379067d0cb5309d203a84fb900c950812df2089dedb822239d389ac45a20efe9',
-              'fixedVersions': [
-                '1.1.1n-r0'
-              ],
-              'installedVersion': '1.1.1i-r0',
-              'packageName':      'libssl1.1',
-              'purl':             'pkg:apk/alpine/libssl1.1@1.1.1i-r0?arch=aarch64&distro=3.12.3',
-              'references':       [
-                'http://packetstormsecurity.com/files/167344/OpenSSL-1.0.2-1.1.1-3.0-BN_mod_sqrt-Infinite-Loop.html',
-                'http://seclists.org/fulldisclosure/2022/May/33',
-                'http://seclists.org/fulldisclosure/2022/May/35',
-                'http://seclists.org/fulldisclosure/2022/May/38',
-                'https://access.redhat.com/errata/RHSA-2022:5326',
-                'https://access.redhat.com/security/cve/CVE-2022-0778',
-                'https://bugzilla.redhat.com/2062202',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2062202',
-                'https://cert-portal.siemens.com/productcert/pdf/ssa-712929.pdf',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-0778',
-                'https://errata.almalinux.org/8/ALSA-2022-5326.html',
-                'https://errata.rockylinux.org/RLSA-2022:4899',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=3118eb64934499d93db3230748a452351d1d9a65',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=380085481c64de749a6dd25cdf0bcf4360b30f83',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=a466912611aa6cbdf550cd10601390e587451246',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=3118eb64934499d93db3230748a452351d1d9a65',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=380085481c64de749a6dd25cdf0bcf4360b30f83',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=a466912611aa6cbdf550cd10601390e587451246',
-                'https://linux.oracle.com/cve/CVE-2022-0778.html',
-                'https://linux.oracle.com/errata/ELSA-2022-9272.html',
-                'https://lists.debian.org/debian-lts-announce/2022/03/msg00023.html',
-                'https://lists.debian.org/debian-lts-announce/2022/03/msg00024.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/323SNN6ZX7PRJJWP2BUAFLPUAE42XWLZ',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/323SNN6ZX7PRJJWP2BUAFLPUAE42XWLZ/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GDB3GQVJPXJE7X5C5JN6JAA4XUDWD6E6',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GDB3GQVJPXJE7X5C5JN6JAA4XUDWD6E6/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/W6K3PR542DXWLEFFMFIDMME4CWMHJRMG',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/W6K3PR542DXWLEFFMFIDMME4CWMHJRMG/',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/323SNN6ZX7PRJJWP2BUAFLPUAE42XWLZ',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/GDB3GQVJPXJE7X5C5JN6JAA4XUDWD6E6',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/W6K3PR542DXWLEFFMFIDMME4CWMHJRMG',
-                'https://nvd.nist.gov/vuln/detail/CVE-2022-0778',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2022-0002',
-                'https://rustsec.org/advisories/RUSTSEC-2022-0014.html',
-                'https://security.gentoo.org/glsa/202210-02',
-                'https://security.netapp.com/advisory/ntap-20220321-0002',
-                'https://security.netapp.com/advisory/ntap-20220321-0002/',
-                'https://security.netapp.com/advisory/ntap-20220429-0005',
-                'https://security.netapp.com/advisory/ntap-20220429-0005/',
-                'https://security.netapp.com/advisory/ntap-20240621-0006',
-                'https://security.netapp.com/advisory/ntap-20240621-0006/',
-                'https://support.apple.com/kb/HT213255',
-                'https://support.apple.com/kb/HT213256',
-                'https://support.apple.com/kb/HT213257',
-                'https://ubuntu.com/security/notices/USN-5328-1',
-                'https://ubuntu.com/security/notices/USN-5328-2',
-                'https://ubuntu.com/security/notices/USN-6457-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2022-0778',
-                'https://www.debian.org/security/2022/dsa-5103',
-                'https://www.openssl.org/news/secadv/20220315.txt',
-                'https://www.oracle.com/security-alerts/cpuapr2022.html',
-                'https://www.oracle.com/security-alerts/cpujul2022.html',
-                'https://www.tenable.com/security/tns-2022-06',
-                'https://www.tenable.com/security/tns-2022-07',
-                'https://www.tenable.com/security/tns-2022-08',
-                'https://www.tenable.com/security/tns-2022-09'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: Infinite loop in BN_mod_sqrt() reachable when parsing certificates'
-            },
-            {
-              'cve':  'CVE-2021-23841',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'nvd': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-476'
-              ],
-              'description':   'The OpenSSL public API function X509_issuer_and_serial_hash() attempts to create a unique hash value based on the issuer and serial number data contained within an X509 certificate. However it fails to correctly handle any errors that may occur while parsing the issuer field (which might occur if the issuer field is maliciously constructed). This may subsequently result in a NULL pointer deref and a crash leading to a potential denial of service attack. The function X509_issuer_and_serial_hash() is never directly called by OpenSSL itself so applications are only vulnerable if they use this function directly and they use it on certificates that may have been obtained from untrusted sources. OpenSSL versions 1.1.1i and below are affected by this issue. Users of these versions should upgrade to OpenSSL 1.1.1j. OpenSSL versions 1.0.2x and below are affected by this issue. However OpenSSL 1.0.2 is out of support and no longer receiving public updates. Premium support customers of OpenSSL 1.0.2 should upgrade to 1.0.2y. Other users should upgrade to 1.1.1j. Fixed in OpenSSL 1.1.1j (Affected 1.1.1-1.1.1i). Fixed in OpenSSL 1.0.2y (Affected 1.0.2-1.0.2x).',
-              'diffID':        'sha256:379067d0cb5309d203a84fb900c950812df2089dedb822239d389ac45a20efe9',
-              'fixedVersions': [
-                '1.1.1j-r0'
-              ],
-              'installedVersion': '1.1.1i-r0',
-              'packageName':      'libssl1.1',
-              'purl':             'pkg:apk/alpine/libssl1.1@1.1.1i-r0?arch=aarch64&distro=3.12.3',
-              'references':       [
-                'http://seclists.org/fulldisclosure/2021/May/67',
-                'http://seclists.org/fulldisclosure/2021/May/68',
-                'http://seclists.org/fulldisclosure/2021/May/70',
-                'https://access.redhat.com/security/cve/CVE-2021-23841',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=1908036',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=1930310',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=1930324',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=1934534',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=1934600',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=1939637',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=1940085',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=1965362',
-                'https://cert-portal.siemens.com/productcert/pdf/ssa-637483.pdf',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-23840',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-23841',
-                'https://errata.rockylinux.org/RLSA-2021:4424',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=122a19ab48091c657f7cb1fb3af9fc07bd557bbf',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=8252ee4d90f3f2004d3d0aeeed003ad49c9a7807',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=122a19ab48091c657f7cb1fb3af9fc07bd557bbf',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=6a51b9e1d0cf0bf8515f7201b68fb0a3482b3dc1',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=8252ee4d90f3f2004d3d0aeeed003ad49c9a7807',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=9b1129239f3ebb1d1c98ce9ed41d5c9476c47cb2',
-                'https://github.com/alexcrichton/openssl-src-rs',
-                'https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA44846',
-                'https://linux.oracle.com/cve/CVE-2021-23841.html',
-                'https://linux.oracle.com/errata/ELSA-2021-9561.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-23841',
-                'https://rustsec.org/advisories/RUSTSEC-2021-0058',
-                'https://rustsec.org/advisories/RUSTSEC-2021-0058.html',
-                'https://security.gentoo.org/glsa/202103-03',
-                'https://security.netapp.com/advisory/ntap-20210219-0009',
-                'https://security.netapp.com/advisory/ntap-20210219-0009/',
-                'https://security.netapp.com/advisory/ntap-20210513-0002',
-                'https://security.netapp.com/advisory/ntap-20210513-0002/',
-                'https://security.netapp.com/advisory/ntap-20240621-0006/',
-                'https://support.apple.com/kb/HT212528',
-                'https://support.apple.com/kb/HT212529',
-                'https://support.apple.com/kb/HT212534',
-                'https://ubuntu.com/security/notices/USN-4738-1',
-                'https://ubuntu.com/security/notices/USN-4745-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-23841',
-                'https://www.debian.org/security/2021/dsa-4855',
-                'https://www.openssl.org/news/secadv/20210216.txt',
-                'https://www.oracle.com//security-alerts/cpujul2021.html',
-                'https://www.oracle.com/security-alerts/cpuApr2021.html',
-                'https://www.oracle.com/security-alerts/cpuapr2022.html',
-                'https://www.oracle.com/security-alerts/cpuoct2021.html',
-                'https://www.tenable.com/security/tns-2021-03',
-                'https://www.tenable.com/security/tns-2021-09'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: NULL pointer dereference in X509_issuer_and_serial_hash()'
-            },
-            {
-              'cve':  'CVE-2021-3449',
-              'cvss': {
-                'bitnami': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'ghsa': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'nvd': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-476'
-              ],
-              'description':   'An OpenSSL TLS server may crash if sent a maliciously crafted renegotiation ClientHello message from a client. If a TLSv1.2 renegotiation ClientHello omits the signature_algorithms extension (where it was present in the initial ClientHello), but includes a signature_algorithms_cert extension then a NULL pointer dereference will result, leading to a crash and a denial of service attack. A server is only vulnerable if it has TLSv1.2 and renegotiation enabled (which is the default configuration). OpenSSL TLS clients are not impacted by this issue. All OpenSSL 1.1.1 versions are affected by this issue. Users of these versions should upgrade to OpenSSL 1.1.1k. OpenSSL 1.0.2 is not impacted by this issue. Fixed in OpenSSL 1.1.1k (Affected 1.1.1-1.1.1j).',
-              'diffID':        'sha256:379067d0cb5309d203a84fb900c950812df2089dedb822239d389ac45a20efe9',
-              'fixedVersions': [
-                '1.1.1k-r0'
-              ],
-              'installedVersion': '1.1.1i-r0',
-              'packageName':      'libssl1.1',
-              'purl':             'pkg:apk/alpine/libssl1.1@1.1.1i-r0?arch=aarch64&distro=3.12.3',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2021/03/27/1',
-                'http://www.openwall.com/lists/oss-security/2021/03/27/2',
-                'http://www.openwall.com/lists/oss-security/2021/03/28/3',
-                'http://www.openwall.com/lists/oss-security/2021/03/28/4',
-                'https://access.redhat.com/security/cve/CVE-2021-3449',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=1941547',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=1941554',
-                'https://cert-portal.siemens.com/productcert/pdf/ssa-389290.pdf',
-                'https://cert-portal.siemens.com/productcert/pdf/ssa-772220.pdf',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-3449',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-3450',
-                'https://errata.rockylinux.org/RLSA-2021:1024',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=fb9fa6b51defd48157eeb207f52181f735d96148',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=fb9fa6b51defd48157eeb207f52181f735d96148',
-                'https://github.com/alexcrichton/openssl-src-rs',
-                'https://github.com/nodejs/node/pull/38083',
-                'https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA44845',
-                'https://kc.mcafee.com/corporate/index?page=content&id=SB10356',
-                'https://linux.oracle.com/cve/CVE-2021-3449.html',
-                'https://linux.oracle.com/errata/ELSA-2021-9151.html',
-                'https://lists.debian.org/debian-lts-announce/2021/08/msg00029.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CCBFLLVQVILIVGZMBJL3IXZGKWQISYNP/',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/CCBFLLVQVILIVGZMBJL3IXZGKWQISYNP',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-3449',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2021-0013',
-                'https://rustsec.org/advisories/RUSTSEC-2021-0055',
-                'https://rustsec.org/advisories/RUSTSEC-2021-0055.html',
-                'https://security.FreeBSD.org/advisories/FreeBSD-SA-21:07.openssl.asc',
-                'https://security.gentoo.org/glsa/202103-03',
-                'https://security.netapp.com/advisory/ntap-20210326-0006',
-                'https://security.netapp.com/advisory/ntap-20210326-0006/',
-                'https://security.netapp.com/advisory/ntap-20210513-0002',
-                'https://security.netapp.com/advisory/ntap-20210513-0002/',
-                'https://security.netapp.com/advisory/ntap-20240621-0006/',
-                'https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-openssl-2021-GHY28dJd',
-                'https://ubuntu.com/security/notices/USN-4891-1',
-                'https://ubuntu.com/security/notices/USN-5038-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-3449',
-                'https://www.debian.org/security/2021/dsa-4875',
-                'https://www.openssl.org/news/secadv/20210325.txt',
-                'https://www.oracle.com//security-alerts/cpujul2021.html',
-                'https://www.oracle.com/security-alerts/cpuApr2021.html',
-                'https://www.oracle.com/security-alerts/cpuapr2022.html',
-                'https://www.oracle.com/security-alerts/cpujul2022.html',
-                'https://www.oracle.com/security-alerts/cpuoct2021.html',
-                'https://www.tenable.com/security/tns-2021-05',
-                'https://www.tenable.com/security/tns-2021-06',
-                'https://www.tenable.com/security/tns-2021-09',
-                'https://www.tenable.com/security/tns-2021-10'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: NULL pointer dereference in signature_algorithms processing'
-            },
-            {
-              'cve':  'CVE-2021-23839',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '3.7',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N'
-                },
-                'redhat': {
-                  'v3score':  '3.7',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-327'
-              ],
-              'description':   'OpenSSL 1.0.2 supports SSLv2. If a client attempts to negotiate SSLv2 with a server that is configured to support both SSLv2 and more recent SSL and TLS versions then a check is made for a version rollback attack when unpadding an RSA signature. Clients that support SSL or TLS versions greater than SSLv2 are supposed to use a special form of padding. A server that supports greater than SSLv2 is supposed to reject connection attempts from a client where this special form of padding is present, because this indicates that a version rollback has occurred (i.e. both client and server support greater than SSLv2, and yet this is the version that is being requested). The implementation of this padding check inverted the logic so that the connection attempt is accepted if the padding is present, and rejected if it is absent. This means that such as server will accept a connection if a version rollback attack has occurred. Further the server will erroneously reject a connection if a normal SSLv2 connection attempt is made. Only OpenSSL 1.0.2 servers from version 1.0.2s to 1.0.2x are affected by this issue. In order to be vulnerable a 1.0.2 server must: 1) have configured SSLv2 support at compile time (this is off by default), 2) have configured SSLv2 support at runtime (this is off by default), 3) have configured SSLv2 ciphersuites (these are not in the default ciphersuite list) OpenSSL 1.1.1 does not have SSLv2 support and therefore is not vulnerable to this issue. The underlying error is in the implementation of the RSA_padding_check_SSLv23() function. This also affects the RSA_SSLV23_PADDING padding mode used by various other functions. Although 1.1.1 does not support SSLv2 the RSA_padding_check_SSLv23() function still exists, as does the RSA_SSLV23_PADDING padding mode. Applications that directly call that function or use that padding mode will encounter this issue. However since there is no support for the SSLv2 protocol in 1.1.1 this is considered a bug and not a security issue in that version. OpenSSL 1.0.2 is out of support and no longer receiving public updates. Premium support customers of OpenSSL 1.0.2 should upgrade to 1.0.2y. Other users should upgrade to 1.1.1j. Fixed in OpenSSL 1.0.2y (Affected 1.0.2s-1.0.2x).',
-              'diffID':        'sha256:379067d0cb5309d203a84fb900c950812df2089dedb822239d389ac45a20efe9',
-              'fixedVersions': [
-                '1.1.1j-r0'
-              ],
-              'installedVersion': '1.1.1i-r0',
-              'packageName':      'libssl1.1',
-              'purl':             'pkg:apk/alpine/libssl1.1@1.1.1i-r0?arch=aarch64&distro=3.12.3',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-23839',
-                'https://cert-portal.siemens.com/productcert/pdf/ssa-637483.pdf',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=30919ab80a478f2d81f2e9acdcca3fa4740cd547',
-                'https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA44846',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-23839',
-                'https://security.netapp.com/advisory/ntap-20210219-0009/',
-                'https://security.netapp.com/advisory/ntap-20240621-0006/',
-                'https://www.cve.org/CVERecord?id=CVE-2021-23839',
-                'https://www.openssl.org/news/secadv/20210216.txt',
-                'https://www.oracle.com//security-alerts/cpujul2021.html',
-                'https://www.oracle.com/security-alerts/cpuApr2021.html',
-                'https://www.oracle.com/security-alerts/cpuapr2022.html',
-                'https://www.oracle.com/security-alerts/cpuoct2021.html'
-              ],
-              'severity':   'LOW',
-              'suppressed': false,
-              'title':      'openssl: incorrect SSLv2 rollback protection'
-            },
-            {
-              'cve':  'CVE-2021-28831',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-755'
-              ],
-              'description':   'decompress_gunzip.c in BusyBox through 1.32.1 mishandles the error bit on the huft_build result pointer, with a resultant invalid free or segmentation fault, via malformed gzip data.',
-              'diffID':        'sha256:379067d0cb5309d203a84fb900c950812df2089dedb822239d389ac45a20efe9',
-              'fixedVersions': [
-                '1.31.1-r20'
-              ],
-              'installedVersion': '1.31.1-r19',
-              'packageName':      'ssl_client',
-              'purl':             'pkg:apk/alpine/ssl_client@1.31.1-r19?arch=aarch64&distro=3.12.3',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-28831',
-                'https://git.busybox.net/busybox/commit/?id=f25d254dfd4243698c31a4f3153d4ac72aa9e9bd',
-                'https://lists.debian.org/debian-lts-announce/2021/04/msg00001.html',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/3UDQGJRECXFS5EZVDH2OI45FMO436AC4/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/Z7ZIFKPRR32ZYA3WAA2NXFA3QHHOU6FJ/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZASBW7QRRLY5V2R44MQ4QQM4CZIDHM2U/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-28831',
-                'https://security.gentoo.org/glsa/202105-09',
-                'https://security.netapp.com/advisory/ntap-20250509-0005/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://ubuntu.com/security/notices/USN-5179-2',
-                'https://ubuntu.com/security/notices/USN-6335-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-28831'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: invalid free or segmentation fault via malformed gzip data'
-            },
-            {
-              'cve':  'CVE-2021-42378',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the getvar_i function",
-              'diffID':        'sha256:379067d0cb5309d203a84fb900c950812df2089dedb822239d389ac45a20efe9',
-              'fixedVersions': [
-                '1.31.1-r21'
-              ],
-              'installedVersion': '1.31.1-r19',
-              'packageName':      'ssl_client',
-              'purl':             'pkg:apk/alpine/ssl_client@1.31.1-r19?arch=aarch64&distro=3.12.3',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42378',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42378',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42378'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the getvar_i()'
-            },
-            {
-              'cve':  'CVE-2021-42379',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the next_input_file function",
-              'diffID':        'sha256:379067d0cb5309d203a84fb900c950812df2089dedb822239d389ac45a20efe9',
-              'fixedVersions': [
-                '1.31.1-r21'
-              ],
-              'installedVersion': '1.31.1-r19',
-              'packageName':      'ssl_client',
-              'purl':             'pkg:apk/alpine/ssl_client@1.31.1-r19?arch=aarch64&distro=3.12.3',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42379',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42379',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42379'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the next_input_file()'
-            },
-            {
-              'cve':  'CVE-2021-42380',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the clrvar function",
-              'diffID':        'sha256:379067d0cb5309d203a84fb900c950812df2089dedb822239d389ac45a20efe9',
-              'fixedVersions': [
-                '1.31.1-r21'
-              ],
-              'installedVersion': '1.31.1-r19',
-              'packageName':      'ssl_client',
-              'purl':             'pkg:apk/alpine/ssl_client@1.31.1-r19?arch=aarch64&distro=3.12.3',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42380',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42380',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42380'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the clrvar()'
-            },
-            {
-              'cve':  'CVE-2021-42381',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the hash_init function",
-              'diffID':        'sha256:379067d0cb5309d203a84fb900c950812df2089dedb822239d389ac45a20efe9',
-              'fixedVersions': [
-                '1.31.1-r21'
-              ],
-              'installedVersion': '1.31.1-r19',
-              'packageName':      'ssl_client',
-              'purl':             'pkg:apk/alpine/ssl_client@1.31.1-r19?arch=aarch64&distro=3.12.3',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42381',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42381',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42381'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the hash_init()'
-            },
-            {
-              'cve':  'CVE-2021-42382',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the getvar_s function",
-              'diffID':        'sha256:379067d0cb5309d203a84fb900c950812df2089dedb822239d389ac45a20efe9',
-              'fixedVersions': [
-                '1.31.1-r21'
-              ],
-              'installedVersion': '1.31.1-r19',
-              'packageName':      'ssl_client',
-              'purl':             'pkg:apk/alpine/ssl_client@1.31.1-r19?arch=aarch64&distro=3.12.3',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42382',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42382',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42382'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the getvar_s()'
-            },
-            {
-              'cve':  'CVE-2021-42383',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the evaluate function",
-              'diffID':        'sha256:379067d0cb5309d203a84fb900c950812df2089dedb822239d389ac45a20efe9',
-              'fixedVersions': [
-                '1.31.1-r21'
-              ],
-              'installedVersion': '1.31.1-r19',
-              'packageName':      'ssl_client',
-              'purl':             'pkg:apk/alpine/ssl_client@1.31.1-r19?arch=aarch64&distro=3.12.3',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42383',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42383',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42383'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the evaluate()'
-            },
-            {
-              'cve':  'CVE-2021-42384',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the handle_special function",
-              'diffID':        'sha256:379067d0cb5309d203a84fb900c950812df2089dedb822239d389ac45a20efe9',
-              'fixedVersions': [
-                '1.31.1-r21'
-              ],
-              'installedVersion': '1.31.1-r19',
-              'packageName':      'ssl_client',
-              'purl':             'pkg:apk/alpine/ssl_client@1.31.1-r19?arch=aarch64&distro=3.12.3',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42384',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42384',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42384'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the handle_special()'
-            },
-            {
-              'cve':  'CVE-2021-42385',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the evaluate function",
-              'diffID':        'sha256:379067d0cb5309d203a84fb900c950812df2089dedb822239d389ac45a20efe9',
-              'fixedVersions': [
-                '1.31.1-r21'
-              ],
-              'installedVersion': '1.31.1-r19',
-              'packageName':      'ssl_client',
-              'purl':             'pkg:apk/alpine/ssl_client@1.31.1-r19?arch=aarch64&distro=3.12.3',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42385',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42385',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42385'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the evaluate()'
-            },
-            {
-              'cve':  'CVE-2021-42386',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the nvalloc function",
-              'diffID':        'sha256:379067d0cb5309d203a84fb900c950812df2089dedb822239d389ac45a20efe9',
-              'fixedVersions': [
-                '1.31.1-r21'
-              ],
-              'installedVersion': '1.31.1-r19',
-              'packageName':      'ssl_client',
-              'purl':             'pkg:apk/alpine/ssl_client@1.31.1-r19?arch=aarch64&distro=3.12.3',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42386',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42386',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42386'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the nvalloc()'
-            },
-            {
-              'cve':  'CVE-2022-28391',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '8.8',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-88'
-              ],
-              'description':   "BusyBox through 1.35.0 allows remote attackers to execute arbitrary code if netstat is used to print a DNS PTR record's value to a VT compatible terminal. Alternatively, the attacker could choose to change the terminal's colors.",
-              'diffID':        'sha256:379067d0cb5309d203a84fb900c950812df2089dedb822239d389ac45a20efe9',
-              'fixedVersions': [
-                '1.31.1-r22'
-              ],
-              'installedVersion': '1.31.1-r19',
-              'packageName':      'ssl_client',
-              'purl':             'pkg:apk/alpine/ssl_client@1.31.1-r19?arch=aarch64&distro=3.12.3',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2022-28391',
-                'https://git.alpinelinux.org/aports/plain/main/busybox/0001-libbb-sockaddr2str-ensure-only-printable-characters-.patch',
-                'https://git.alpinelinux.org/aports/plain/main/busybox/0002-nslookup-sanitize-all-printed-strings-with-printable.patch',
-                'https://gitlab.alpinelinux.org/alpine/aports/-/issues/13661',
-                'https://nvd.nist.gov/vuln/detail/CVE-2022-28391',
-                'https://www.cve.org/CVERecord?id=CVE-2022-28391'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: remote attackers may execute arbitrary code if netstat is used'
-            },
-            {
-              'cve':  'CVE-2021-42374',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '5.7',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-125'
-              ],
-              'description':   "An out-of-bounds heap read in Busybox's unlzma applet leads to information leak and denial of service when crafted LZMA-compressed input is decompressed. This can be triggered by any applet/format that",
-              'diffID':        'sha256:379067d0cb5309d203a84fb900c950812df2089dedb822239d389ac45a20efe9',
-              'fixedVersions': [
-                '1.31.1-r21'
-              ],
-              'installedVersion': '1.31.1-r19',
-              'packageName':      'ssl_client',
-              'purl':             'pkg:apk/alpine/ssl_client@1.31.1-r19?arch=aarch64&distro=3.12.3',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42374',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42374',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42374'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'busybox: out-of-bounds read in unlzma applet leads to information leak and denial of service when crafted LZMA-compressed input is decompressed'
-            },
-            {
-              'cve':  'CVE-2022-37434',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '9.8',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-787',
-                'CWE-120'
-              ],
-              'description':   'zlib through 1.2.12 has a heap-based buffer over-read or buffer overflow in inflate in inflate.c via a large gzip header extra field. NOTE: only applications that call inflateGetHeader are affected. Some common applications bundle the affected zlib source code but may be unable to call inflateGetHeader (e.g., see the nodejs/node reference).',
-              'diffID':        'sha256:379067d0cb5309d203a84fb900c950812df2089dedb822239d389ac45a20efe9',
-              'fixedVersions': [
-                '1.2.12-r2'
-              ],
-              'installedVersion': '1.2.11-r3',
-              'packageName':      'zlib',
-              'purl':             'pkg:apk/alpine/zlib@1.2.11-r3?arch=aarch64&distro=3.12.3',
-              'references':       [
-                'http://seclists.org/fulldisclosure/2022/Oct/37',
-                'http://seclists.org/fulldisclosure/2022/Oct/38',
-                'http://seclists.org/fulldisclosure/2022/Oct/41',
-                'http://seclists.org/fulldisclosure/2022/Oct/42',
-                'http://www.openwall.com/lists/oss-security/2022/08/05/2',
-                'http://www.openwall.com/lists/oss-security/2022/08/09/1',
-                'https://access.redhat.com/errata/RHSA-2022:8291',
-                'https://access.redhat.com/security/cve/CVE-2022-37434',
-                'https://bugzilla.redhat.com/2116639',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2053198',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2077431',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2081296',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2116639',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-37434',
-                'https://errata.almalinux.org/9/ALSA-2022-8291.html',
-                'https://errata.rockylinux.org/RLSA-2022:8291',
-                'https://github.com/curl/curl/issues/9271',
-                'https://github.com/ivd38/zlib_overflow',
-                'https://github.com/madler/zlib/blob/21767c654d31d2dccdde4330529775c6c5fd5389/zlib.h#L1062-L1063',
-                'https://github.com/madler/zlib/commit/1eb7682f845ac9e9bf9ae35bbfb3bad5dacbd91d',
-                'https://github.com/madler/zlib/commit/eff308af425b67093bab25f80f1ae950166bece1',
-                'https://github.com/nodejs/node/blob/75b68c6e4db515f76df73af476eccf382bbcb00a/deps/zlib/inflate.c#L762-L764',
-                'https://linux.oracle.com/cve/CVE-2022-37434.html',
-                'https://linux.oracle.com/errata/ELSA-2023-1095.html',
-                'https://lists.debian.org/debian-lts-announce/2022/09/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JWN4VE3JQR4O2SOUS5TXNLANRPMHWV4I/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NMBOJ77A7T7PQCARMDUK75TE6LLESZ3O/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PAVPQNCG3XRLCLNSQRM3KAN5ZFMVXVTY/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/X5U7OTKZSHY2I3ZFJSR2SHFHW72RKGDK/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YRQAI7H4M4RQZ2IWZUEEXECBE5D56BH2/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2022-37434',
-                'https://security.netapp.com/advisory/ntap-20220901-0005/',
-                'https://security.netapp.com/advisory/ntap-20230427-0007/',
-                'https://support.apple.com/kb/HT213488',
-                'https://support.apple.com/kb/HT213489',
-                'https://support.apple.com/kb/HT213490',
-                'https://support.apple.com/kb/HT213491',
-                'https://support.apple.com/kb/HT213493',
-                'https://support.apple.com/kb/HT213494',
-                'https://ubuntu.com/security/notices/USN-5570-1',
-                'https://ubuntu.com/security/notices/USN-5570-2',
-                'https://ubuntu.com/security/notices/USN-5573-1',
-                'https://ubuntu.com/security/notices/USN-6736-1',
-                'https://ubuntu.com/security/notices/USN-6736-2',
-                'https://www.cve.org/CVERecord?id=CVE-2022-37434',
-                'https://www.debian.org/security/2022/dsa-5218'
-              ],
-              'severity':   'CRITICAL',
-              'suppressed': false,
-              'title':      'zlib: heap-based buffer over-read and overflow in inflate() in inflate.c via a large gzip header extra field'
-            },
-            {
-              'cve':  'CVE-2018-25032',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'nvd': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '8.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-787'
-              ],
-              'description':   'zlib before 1.2.12 allows memory corruption when deflating (i.e., when compressing) if the input has many distant matches.',
-              'diffID':        'sha256:379067d0cb5309d203a84fb900c950812df2089dedb822239d389ac45a20efe9',
-              'fixedVersions': [
-                '1.2.12-r0'
-              ],
-              'installedVersion': '1.2.11-r3',
-              'packageName':      'zlib',
-              'purl':             'pkg:apk/alpine/zlib@1.2.11-r3?arch=aarch64&distro=3.12.3',
-              'references':       [
-                'http://seclists.org/fulldisclosure/2022/May/33',
-                'http://seclists.org/fulldisclosure/2022/May/35',
-                'http://seclists.org/fulldisclosure/2022/May/38',
-                'http://www.openwall.com/lists/oss-security/2022/03/25/2',
-                'http://www.openwall.com/lists/oss-security/2022/03/26/1',
-                'https://access.redhat.com/errata/RHSA-2022:8420',
-                'https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-25032.json',
-                'https://access.redhat.com/security/cve/CVE-2018-25032',
-                'https://bugzilla.redhat.com/2067945',
-                'https://cert-portal.siemens.com/productcert/pdf/ssa-333517.pdf',
-                'https://errata.almalinux.org/9/ALSA-2022-8420.html',
-                'https://github.com/advisories/GHSA-jc36-42cf-vqwj',
-                'https://github.com/madler/zlib/commit/5c44459c3b28a9bd3283aaceab7c615f8020c531',
-                'https://github.com/madler/zlib/compare/v1.2.11...v1.2.12',
-                'https://github.com/madler/zlib/issues/605',
-                'https://github.com/rubysec/ruby-advisory-db/blob/master/gems/nokogiri/CVE-2018-25032.yml',
-                'https://github.com/sparklemotion/nokogiri/releases/tag/v1.13.4',
-                'https://github.com/sparklemotion/nokogiri/security/advisories/GHSA-v6gp-9mmm-c6p5',
-                'https://groups.google.com/g/ruby-security-ann/c/vX7qSjsvWis/m/TJWN4oOKBwAJ',
-                'https://linux.oracle.com/cve/CVE-2018-25032.html',
-                'https://linux.oracle.com/errata/ELSA-2022-9565.html',
-                'https://lists.debian.org/debian-lts-announce/2022/04/msg00000.html',
-                'https://lists.debian.org/debian-lts-announce/2022/05/msg00008.html',
-                'https://lists.debian.org/debian-lts-announce/2022/09/msg00023.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DCZFIJBJTZ7CL5QXBFKTQ22Q26VINRUF/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DF62MVMH3QUGMBDCB3DY2ERQ6EBHTADB/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JZZPTWRYQULAOL3AW7RZJNVZ2UONXCV4/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NS2D2GFPFGOJUL4WQ3DUAY7HF4VWQ77F/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VOKNP2L734AEL47NRYGVZIKEFOUBQY5Y/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/XOKFMSNQ5D5WGMALBNBXU3GE442V74WU/',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/DCZFIJBJTZ7CL5QXBFKTQ22Q26VINRUF',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/DCZFIJBJTZ7CL5QXBFKTQ22Q26VINRUF/',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/DF62MVMH3QUGMBDCB3DY2ERQ6EBHTADB',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/DF62MVMH3QUGMBDCB3DY2ERQ6EBHTADB/',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/JZZPTWRYQULAOL3AW7RZJNVZ2UONXCV4',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/JZZPTWRYQULAOL3AW7RZJNVZ2UONXCV4/',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/NS2D2GFPFGOJUL4WQ3DUAY7HF4VWQ77F',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/NS2D2GFPFGOJUL4WQ3DUAY7HF4VWQ77F/',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/VOKNP2L734AEL47NRYGVZIKEFOUBQY5Y',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/VOKNP2L734AEL47NRYGVZIKEFOUBQY5Y/',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/XOKFMSNQ5D5WGMALBNBXU3GE442V74WU',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/XOKFMSNQ5D5WGMALBNBXU3GE442V74WU/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2018-25032',
-                'https://security.gentoo.org/glsa/202210-42',
-                'https://security.netapp.com/advisory/ntap-20220526-0009',
-                'https://security.netapp.com/advisory/ntap-20220526-0009/',
-                'https://security.netapp.com/advisory/ntap-20220729-0004',
-                'https://security.netapp.com/advisory/ntap-20220729-0004/',
-                'https://support.apple.com/kb/HT213255',
-                'https://support.apple.com/kb/HT213256',
-                'https://support.apple.com/kb/HT213257',
-                'https://ubuntu.com/security/notices/USN-5355-1',
-                'https://ubuntu.com/security/notices/USN-5355-2',
-                'https://ubuntu.com/security/notices/USN-5359-1',
-                'https://ubuntu.com/security/notices/USN-5359-2',
-                'https://ubuntu.com/security/notices/USN-5739-1',
-                'https://ubuntu.com/security/notices/USN-6736-1',
-                'https://ubuntu.com/security/notices/USN-6736-2',
-                'https://www.cve.org/CVERecord?id=CVE-2018-25032',
-                'https://www.debian.org/security/2022/dsa-5111',
-                'https://www.openwall.com/lists/oss-security/2022/03/24/1',
-                'https://www.openwall.com/lists/oss-security/2022/03/28/1',
-                'https://www.openwall.com/lists/oss-security/2022/03/28/3',
-                'https://www.oracle.com/security-alerts/cpujul2022.html'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'zlib: A flaw found in zlib when compressing (not decompressing) certain inputs'
-            }
-          ]
-        }
-      ],
-      'summary': {
-        'critical':   4,
-        'high':       32,
-        'low':        2,
-        'medium':     6,
-        'suppressed': 0,
-        'unknown':    0
-      }
-    }
-  },
-  {
-    'id':    'default/7026318997be73a03cf8ba47165ff85425d1c995a437f76be91ab0269eb9a1dd',
-    'type':  'storage.sbomscanner.kubewarden.io.vulnerabilityreport',
-    'links': {
-      'patch':  'https://localhost:8005/v1/storage.sbomscanner.kubewarden.io.vulnerabilityreports/default/7026318997be73a03cf8ba47165ff85425d1c995a437f76be91ab0269eb9a1dd',
-      'remove': 'https://localhost:8005/v1/storage.sbomscanner.kubewarden.io.vulnerabilityreports/default/7026318997be73a03cf8ba47165ff85425d1c995a437f76be91ab0269eb9a1dd',
-      'self':   'https://localhost:8005/v1/storage.sbomscanner.kubewarden.io.vulnerabilityreports/default/7026318997be73a03cf8ba47165ff85425d1c995a437f76be91ab0269eb9a1dd',
-      'update': 'https://localhost:8005/v1/storage.sbomscanner.kubewarden.io.vulnerabilityreports/default/7026318997be73a03cf8ba47165ff85425d1c995a437f76be91ab0269eb9a1dd',
-      'view':   'https://localhost:8005/apis/storage.sbomscanner.kubewarden.io/v1alpha1/namespaces/default/vulnerabilityreports/7026318997be73a03cf8ba47165ff85425d1c995a437f76be91ab0269eb9a1dd'
-    },
-    'apiVersion':    'storage.sbomscanner.kubewarden.io/v1alpha1',
-    'imageMetadata': {
-      'digest':      'sha256:9e005b7ce3806b4f3623e16b3f8d9b78fb9dacaa71f6d26129c9c3d405671436',
-      'platform':    'linux/arm/v6',
-      'registry':    'lsong-demo1',
-      'registryURI': 'registry-1.docker.io',
-      'repository':  'library/alpine',
-      'tag':         '3.19.2'
-    },
-    'kind':     'VulnerabilityReport',
-    'metadata': {
-      'creationTimestamp': '2026-01-14T18:52:06Z',
-      'fields':            [
-        '7026318997be73a03cf8ba47165ff85425d1c995a437f76be91ab0269eb9a1dd',
-        'registry-1.docker.io/library/alpine:3.19.2',
-        'linux/arm/v6',
-        '22 (0 suppressed)'
-      ],
-      'labels': {
-        'app.kubernetes.io/managed-by':          'sbomscanner',
-        'app.kubernetes.io/part-of':             'sbomscanner',
-        'sbomscanner.kubewarden.io/scanjob-uid': '445c600a-c4b6-40b3-bd71-f2d2140a37d5'
-      },
-      'name':            '7026318997be73a03cf8ba47165ff85425d1c995a437f76be91ab0269eb9a1dd',
-      'namespace':       'default',
-      'ownerReferences': [
-        {
-          'apiVersion':         'storage.sbomscanner.kubewarden.io/v1alpha1',
-          'blockOwnerDeletion': true,
-          'controller':         true,
-          'kind':               'SBOM',
-          'name':               '7026318997be73a03cf8ba47165ff85425d1c995a437f76be91ab0269eb9a1dd',
-          'uid':                '29e3cbd0-6cbe-4b63-917c-26485b52c4a5'
-        }
-      ],
-      'relationships': [
-        {
-          'fromId':   'default/7026318997be73a03cf8ba47165ff85425d1c995a437f76be91ab0269eb9a1dd',
-          'fromType': 'storage.sbomscanner.kubewarden.io.sbom',
-          'rel':      'owner',
-          'state':    'active',
-          'message':  'Resource is current'
-        }
-      ],
-      'resourceVersion': '1',
-      'state':           {
-        'error':         false,
-        'message':       'Resource is current',
-        'name':          'active',
-        'transitioning': false
-      },
-      'uid': '6ea0b892-817c-4a11-80e0-8d9792f78097'
-    },
-    'report': {
-      'results': [
-        {
-          'class':           'os-pkgs',
-          'target':          '/var/run/worker/trivy.sbom.3924648303.json (alpine 3.19.2)',
-          'type':            'alpine',
-          'vulnerabilities': [
-            {
-              'cve':  'CVE-2024-58251',
-              'cwes': [
-                'CWE-150'
-              ],
-              'description':   'In netstat in BusyBox through 1.37.0, local users can launch of network application with an argv[0] containing an ANSI terminal escape sequence, leading to a denial of service (terminal locked up) when netstat is used by a victim.',
-              'diffID':        'sha256:aeeb7c12a7530d057bb98eded67710752531c8c2edf76a0a49887254e8a72722',
-              'fixedVersions': [
-                '1.36.1-r21'
-              ],
-              'installedVersion': '1.36.1-r19',
-              'packageName':      'busybox',
-              'purl':             'pkg:apk/alpine/busybox@1.36.1-r19?arch=armhf&distro=3.19.2',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2025/04/23/6',
-                'https://bugs.busybox.net/show_bug.cgi?id=15922',
-                'https://www.busybox.net',
-                'https://www.busybox.net/downloads/',
-                'https://www.cve.org/CVERecord?id=CVE-2024-58251'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'In netstat in BusyBox through 1.37.0, local users can launch of networ ...'
-            },
-            {
-              'cve':  'CVE-2025-46394',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '3.3',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-451'
-              ],
-              'description':   'In tar in BusyBox through 1.37.0, a TAR archive can have filenames hidden from a listing through the use of terminal escape sequences.',
-              'diffID':        'sha256:aeeb7c12a7530d057bb98eded67710752531c8c2edf76a0a49887254e8a72722',
-              'fixedVersions': [
-                '1.36.1-r21'
-              ],
-              'installedVersion': '1.36.1-r19',
-              'packageName':      'busybox',
-              'purl':             'pkg:apk/alpine/busybox@1.36.1-r19?arch=armhf&distro=3.19.2',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2025/04/23/5',
-                'http://www.openwall.com/lists/oss-security/2025/04/24/3',
-                'https://bugs.busybox.net/show_bug.cgi?id=16018',
-                'https://lists.busybox.net/pipermail/busybox/2024-July/090806.html',
-                'https://lists.busybox.net/pipermail/busybox/2024-July/090814.html',
-                'https://www.busybox.net',
-                'https://www.busybox.net/downloads/',
-                'https://www.cve.org/CVERecord?id=CVE-2025-46394',
-                'https://www.openwall.com/lists/oss-security/2025/04/23/1'
-              ],
-              'severity':   'LOW',
-              'suppressed': false,
-              'title':      'In tar in BusyBox through 1.37.0, a TAR archive can have filenames hid ...'
-            },
-            {
-              'cve':  'CVE-2024-58251',
-              'cwes': [
-                'CWE-150'
-              ],
-              'description':   'In netstat in BusyBox through 1.37.0, local users can launch of network application with an argv[0] containing an ANSI terminal escape sequence, leading to a denial of service (terminal locked up) when netstat is used by a victim.',
-              'diffID':        'sha256:aeeb7c12a7530d057bb98eded67710752531c8c2edf76a0a49887254e8a72722',
-              'fixedVersions': [
-                '1.36.1-r21'
-              ],
-              'installedVersion': '1.36.1-r19',
-              'packageName':      'busybox-binsh',
-              'purl':             'pkg:apk/alpine/busybox-binsh@1.36.1-r19?arch=armhf&distro=3.19.2',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2025/04/23/6',
-                'https://bugs.busybox.net/show_bug.cgi?id=15922',
-                'https://www.busybox.net',
-                'https://www.busybox.net/downloads/',
-                'https://www.cve.org/CVERecord?id=CVE-2024-58251'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'In netstat in BusyBox through 1.37.0, local users can launch of networ ...'
-            },
-            {
-              'cve':  'CVE-2025-46394',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '3.3',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-451'
-              ],
-              'description':   'In tar in BusyBox through 1.37.0, a TAR archive can have filenames hidden from a listing through the use of terminal escape sequences.',
-              'diffID':        'sha256:aeeb7c12a7530d057bb98eded67710752531c8c2edf76a0a49887254e8a72722',
-              'fixedVersions': [
-                '1.36.1-r21'
-              ],
-              'installedVersion': '1.36.1-r19',
-              'packageName':      'busybox-binsh',
-              'purl':             'pkg:apk/alpine/busybox-binsh@1.36.1-r19?arch=armhf&distro=3.19.2',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2025/04/23/5',
-                'http://www.openwall.com/lists/oss-security/2025/04/24/3',
-                'https://bugs.busybox.net/show_bug.cgi?id=16018',
-                'https://lists.busybox.net/pipermail/busybox/2024-July/090806.html',
-                'https://lists.busybox.net/pipermail/busybox/2024-July/090814.html',
-                'https://www.busybox.net',
-                'https://www.busybox.net/downloads/',
-                'https://www.cve.org/CVERecord?id=CVE-2025-46394',
-                'https://www.openwall.com/lists/oss-security/2025/04/23/1'
-              ],
-              'severity':   'LOW',
-              'suppressed': false,
-              'title':      'In tar in BusyBox through 1.37.0, a TAR archive can have filenames hid ...'
-            },
-            {
-              'cve':  'CVE-2024-6119',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-843'
-              ],
-              'description':   "Issue summary: Applications performing certificate name checks (e.g., TLS\nclients checking server certificates) may attempt to read an invalid memory\naddress resulting in abnormal termination of the application process.\n\nImpact summary: Abnormal termination of an application can a cause a denial of\nservice.\n\nApplications performing certificate name checks (e.g., TLS clients checking\nserver certificates) may attempt to read an invalid memory address when\ncomparing the expected name with an `otherName` subject alternative name of an\nX.509 certificate. This may result in an exception that terminates the\napplication program.\n\nNote that basic certificate chain validation (signatures, dates, ...) is not\naffected, the denial of service can occur only when the application also\nspecifies an expected DNS name, Email address or IP address.\n\nTLS servers rarely solicit client certificates, and even when they do, they\ngenerally don't perform a name check against a reference identifier (expected\nidentity), but rather extract the presented identity after checking the\ncertificate chain.  So TLS servers are generally not affected and the severity\nof the issue is Moderate.\n\nThe FIPS modules in 3.3, 3.2, 3.1 and 3.0 are not affected by this issue.",
-              'diffID':        'sha256:aeeb7c12a7530d057bb98eded67710752531c8c2edf76a0a49887254e8a72722',
-              'fixedVersions': [
-                '3.1.7-r0'
-              ],
-              'installedVersion': '3.1.5-r0',
-              'packageName':      'libcrypto3',
-              'purl':             'pkg:apk/alpine/libcrypto3@3.1.5-r0?arch=armhf&distro=3.19.2',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2024/09/03/4',
-                'https://access.redhat.com/errata/RHSA-2024:8935',
-                'https://access.redhat.com/security/cve/CVE-2024-6119',
-                'https://bugzilla.redhat.com/2306158',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2306158',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-6119',
-                'https://errata.almalinux.org/9/ALSA-2024-8935.html',
-                'https://errata.rockylinux.org/RLSA-2024:6783',
-                'https://github.com/openssl/openssl/commit/05f360d9e849a1b277db628f1f13083a7f8dd04f',
-                'https://github.com/openssl/openssl/commit/06d1dc3fa96a2ba5a3e22735a033012aadc9f0d6',
-                'https://github.com/openssl/openssl/commit/621f3729831b05ee828a3203eddb621d014ff2b2',
-                'https://github.com/openssl/openssl/commit/7dfcee2cd2a63b2c64b9b4b0850be64cb695b0a0',
-                'https://github.com/openssl/openssl/security/advisories/GHSA-5qrj-vq78-58fj',
-                'https://linux.oracle.com/cve/CVE-2024-6119.html',
-                'https://linux.oracle.com/errata/ELSA-2024-8935.html',
-                'https://lists.freebsd.org/archives/freebsd-security/2024-September/000303.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2024-6119',
-                'https://openssl-library.org/news/secadv/20240903.txt',
-                'https://security.netapp.com/advisory/ntap-20240912-0001/',
-                'https://ubuntu.com/security/notices/USN-6986-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2024-6119'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: Possible denial of service in X.509 name checks'
-            },
-            {
-              'cve':  'CVE-2024-13176',
-              'cvss': {
-                'redhat': {
-                  'v3score':  '4.7',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-385'
-              ],
-              'description':   'Issue summary: A timing side-channel which could potentially allow recovering\nthe private key exists in the ECDSA signature computation.\n\nImpact summary: A timing side-channel in ECDSA signature computations\ncould allow recovering the private key by an attacker. However, measuring\nthe timing would require either local access to the signing application or\na very fast network connection with low latency.\n\nThere is a timing signal of around 300 nanoseconds when the top word of\nthe inverted ECDSA nonce value is zero. This can happen with significant\nprobability only for some of the supported elliptic curves. In particular\nthe NIST P-521 curve is affected. To be able to measure this leak, the attacker\nprocess must either be located in the same physical computer or must\nhave a very fast network connection with low latency. For that reason\nthe severity of this vulnerability is Low.\n\nThe FIPS modules in 3.4, 3.3, 3.2, 3.1 and 3.0 are affected by this issue.',
-              'diffID':        'sha256:aeeb7c12a7530d057bb98eded67710752531c8c2edf76a0a49887254e8a72722',
-              'fixedVersions': [
-                '3.1.8-r0'
-              ],
-              'installedVersion': '3.1.5-r0',
-              'packageName':      'libcrypto3',
-              'purl':             'pkg:apk/alpine/libcrypto3@3.1.5-r0?arch=armhf&distro=3.19.2',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2025/01/20/2',
-                'https://access.redhat.com/errata/RHSA-2025:16046',
-                'https://access.redhat.com/security/cve/CVE-2024-13176',
-                'https://bugzilla.redhat.com/2359885',
-                'https://bugzilla.redhat.com/2359888',
-                'https://bugzilla.redhat.com/2359892',
-                'https://bugzilla.redhat.com/2359894',
-                'https://bugzilla.redhat.com/2359895',
-                'https://bugzilla.redhat.com/2359899',
-                'https://bugzilla.redhat.com/2359900',
-                'https://bugzilla.redhat.com/2359902',
-                'https://bugzilla.redhat.com/2359903',
-                'https://bugzilla.redhat.com/2359911',
-                'https://bugzilla.redhat.com/2359918',
-                'https://bugzilla.redhat.com/2359920',
-                'https://bugzilla.redhat.com/2359924',
-                'https://bugzilla.redhat.com/2359928',
-                'https://bugzilla.redhat.com/2359930',
-                'https://bugzilla.redhat.com/2359932',
-                'https://bugzilla.redhat.com/2359934',
-                'https://bugzilla.redhat.com/2359938',
-                'https://bugzilla.redhat.com/2359940',
-                'https://bugzilla.redhat.com/2359943',
-                'https://bugzilla.redhat.com/2359944',
-                'https://bugzilla.redhat.com/2359945',
-                'https://bugzilla.redhat.com/2359947',
-                'https://bugzilla.redhat.com/2359950',
-                'https://bugzilla.redhat.com/2359963',
-                'https://bugzilla.redhat.com/2359964',
-                'https://bugzilla.redhat.com/2359972',
-                'https://bugzilla.redhat.com/2370920',
-                'https://bugzilla.redhat.com/2380264',
-                'https://bugzilla.redhat.com/2380273',
-                'https://bugzilla.redhat.com/2380274',
-                'https://bugzilla.redhat.com/2380278',
-                'https://bugzilla.redhat.com/2380280',
-                'https://bugzilla.redhat.com/2380283',
-                'https://bugzilla.redhat.com/2380284',
-                'https://bugzilla.redhat.com/2380290',
-                'https://bugzilla.redhat.com/2380291',
-                'https://bugzilla.redhat.com/2380295',
-                'https://bugzilla.redhat.com/2380298',
-                'https://bugzilla.redhat.com/2380306',
-                'https://bugzilla.redhat.com/2380308',
-                'https://bugzilla.redhat.com/2380309',
-                'https://bugzilla.redhat.com/2380310',
-                'https://bugzilla.redhat.com/2380312',
-                'https://bugzilla.redhat.com/2380313',
-                'https://bugzilla.redhat.com/2380320',
-                'https://bugzilla.redhat.com/2380321',
-                'https://bugzilla.redhat.com/2380322',
-                'https://bugzilla.redhat.com/2380326',
-                'https://bugzilla.redhat.com/2380327',
-                'https://bugzilla.redhat.com/2380334',
-                'https://bugzilla.redhat.com/2380335',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2338999',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359885',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359888',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359892',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359894',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359895',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359899',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359900',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359902',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359903',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359911',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359918',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359920',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359924',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359928',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359930',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359932',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359934',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359938',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359940',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359943',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359944',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359945',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359947',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359950',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359963',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359964',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359972',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2370920',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380264',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380273',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380274',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380278',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380280',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380283',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380284',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380290',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380291',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380295',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380298',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380306',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380308',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380309',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380310',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380312',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380313',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380320',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380321',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380322',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380326',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380327',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380334',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380335',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-13176',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21574',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21575',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21577',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21579',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21580',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21581',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21584',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21585',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21588',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30681',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30682',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30683',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30684',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30685',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30687',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30688',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30689',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30693',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30695',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30696',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30699',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30703',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30704',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30705',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30715',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30721',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30722',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50077',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50078',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50079',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50080',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50081',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50082',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50083',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50084',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50085',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50086',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50087',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50088',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50091',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50092',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50093',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50094',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50096',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50097',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50098',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50099',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50100',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50101',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50102',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50104',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-5399',
-                'https://errata.almalinux.org/9/ALSA-2025-16046.html',
-                'https://errata.rockylinux.org/RLSA-2025:15699',
-                'https://github.com/openssl/openssl/commit/07272b05b04836a762b4baa874958af51d513844',
-                'https://github.com/openssl/openssl/commit/2af62e74fb59bc469506bc37eb2990ea408d9467',
-                'https://github.com/openssl/openssl/commit/392dcb336405a0c94486aa6655057f59fd3a0902',
-                'https://github.com/openssl/openssl/commit/4b1cb94a734a7d4ec363ac0a215a25c181e11f65',
-                'https://github.com/openssl/openssl/commit/77c608f4c8857e63e98e66444e2e761c9627916f',
-                'https://github.openssl.org/openssl/extended-releases/commit/0d5fd1ab987f7571e2c955d8d8b638fc0fb54ded',
-                'https://github.openssl.org/openssl/extended-releases/commit/a2639000db19878d5d89586ae7b725080592ae86',
-                'https://linux.oracle.com/cve/CVE-2024-13176.html',
-                'https://linux.oracle.com/errata/ELSA-2025-16046.html',
-                'https://lists.debian.org/debian-lts-announce/2025/05/msg00028.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2024-13176',
-                'https://openssl-library.org/news/secadv/20250120.txt',
-                'https://security.netapp.com/advisory/ntap-20250124-0005/',
-                'https://security.netapp.com/advisory/ntap-20250418-0010/',
-                'https://security.netapp.com/advisory/ntap-20250502-0006/',
-                'https://ubuntu.com/security/notices/USN-7264-1',
-                'https://ubuntu.com/security/notices/USN-7278-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2024-13176',
-                'https://www.oracle.com/security-alerts/cpuapr2025.html#AppendixMSQL'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: Timing side-channel in ECDSA signature computation'
-            },
-            {
-              'cve':  'CVE-2024-4741',
-              'cvss': {
-                'redhat': {
-                  'v3score':  '5.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   'Issue summary: Calling the OpenSSL API function SSL_free_buffers may cause\nmemory to be accessed that was previously freed in some situations\n\nImpact summary: A use after free can have a range of potential consequences such\nas the corruption of valid data, crashes or execution of arbitrary code.\nHowever, only applications that directly call the SSL_free_buffers function are\naffected by this issue. Applications that do not call this function are not\nvulnerable. Our investigations indicate that this function is rarely used by\napplications.\n\nThe SSL_free_buffers function is used to free the internal OpenSSL buffer used\nwhen processing an incoming record from the network. The call is only expected\nto succeed if the buffer is not currently in use. However, two scenarios have\nbeen identified where the buffer is freed even when still in use.\n\nThe first scenario occurs where a record header has been received from the\nnetwork and processed by OpenSSL, but the full record body has not yet arrived.\nIn this case calling SSL_free_buffers will succeed even though a record has only\nbeen partially processed and the buffer is still in use.\n\nThe second scenario occurs where a full record containing application data has\nbeen received and processed by OpenSSL but the application has only read part of\nthis data. Again a call to SSL_free_buffers will succeed even though the buffer\nis still in use.\n\nWhile these scenarios could occur accidentally during normal operation a\nmalicious attacker could attempt to engineer a stituation where this occurs.\nWe are not aware of this issue being actively exploited.\n\nThe FIPS modules in 3.3, 3.2, 3.1 and 3.0 are not affected by this issue.',
-              'diffID':        'sha256:aeeb7c12a7530d057bb98eded67710752531c8c2edf76a0a49887254e8a72722',
-              'fixedVersions': [
-                '3.1.6-r0'
-              ],
-              'installedVersion': '3.1.5-r0',
-              'packageName':      'libcrypto3',
-              'purl':             'pkg:apk/alpine/libcrypto3@3.1.5-r0?arch=armhf&distro=3.19.2',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2024:9333',
-                'https://access.redhat.com/security/cve/CVE-2024-4741',
-                'https://bugzilla.redhat.com/2274020',
-                'https://bugzilla.redhat.com/2281029',
-                'https://bugzilla.redhat.com/2283757',
-                'https://bugzilla.redhat.com/2294581',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2274020',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2281029',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2283757',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2294581',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-2511',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-4603',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-4741',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-5535',
-                'https://errata.almalinux.org/9/ALSA-2024-9333.html',
-                'https://errata.rockylinux.org/RLSA-2024:9333',
-                'https://github.com/openssl/openssl/commit/704f725b96aa373ee45ecfb23f6abfe8be8d9177',
-                'https://github.com/openssl/openssl/commit/b3f0eb0a295f58f16ba43ba99dad70d4ee5c437d',
-                'https://github.com/openssl/openssl/commit/c88c3de51020c37e8706bf7a682a162593053aac',
-                'https://github.com/openssl/openssl/commit/e5093133c35ca82874ad83697af76f4b0f7e3bd8',
-                'https://github.openssl.org/openssl/extended-releases/commit/f7a045f3143fc6da2ee66bf52d8df04829590dd4',
-                'https://linux.oracle.com/cve/CVE-2024-4741.html',
-                'https://linux.oracle.com/errata/ELSA-2024-9333.html',
-                'https://lists.debian.org/debian-lts-announce/2024/10/msg00033.html',
-                'https://lists.debian.org/debian-lts-announce/2024/11/msg00000.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2024-4741',
-                'https://security.netapp.com/advisory/ntap-20240621-0004/',
-                'https://ubuntu.com/security/notices/USN-6937-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2024-4741',
-                'https://www.openssl.org/news/secadv/20240528.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: Use After Free with SSL_free_buffers'
-            },
-            {
-              'cve':  'CVE-2024-5535',
-              'cvss': {
-                'redhat': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-125'
-              ],
-              'description':   'Issue summary: Calling the OpenSSL API function SSL_select_next_proto with an\nempty supported client protocols buffer may cause a crash or memory contents to\nbe sent to the peer.\n\nImpact summary: A buffer overread can have a range of potential consequences\nsuch as unexpected application beahviour or a crash. In particular this issue\ncould result in up to 255 bytes of arbitrary private data from memory being sent\nto the peer leading to a loss of confidentiality. However, only applications\nthat directly call the SSL_select_next_proto function with a 0 length list of\nsupported client protocols are affected by this issue. This would normally never\nbe a valid scenario and is typically not under attacker control but may occur by\naccident in the case of a configuration or programming error in the calling\napplication.\n\nThe OpenSSL API function SSL_select_next_proto is typically used by TLS\napplications that support ALPN (Application Layer Protocol Negotiation) or NPN\n(Next Protocol Negotiation). NPN is older, was never standardised and\nis deprecated in favour of ALPN. We believe that ALPN is significantly more\nwidely deployed than NPN. The SSL_select_next_proto function accepts a list of\nprotocols from the server and a list of protocols from the client and returns\nthe first protocol that appears in the server list that also appears in the\nclient list. In the case of no overlap between the two lists it returns the\nfirst item in the client list. In either case it will signal whether an overlap\nbetween the two lists was found. In the case where SSL_select_next_proto is\ncalled with a zero length client list it fails to notice this condition and\nreturns the memory immediately following the client list pointer (and reports\nthat there was no overlap in the lists).\n\nThis function is typically called from a server side application callback for\nALPN or a client side application callback for NPN. In the case of ALPN the list\nof protocols supplied by the client is guaranteed by libssl to never be zero in\nlength. The list of server protocols comes from the application and should never\nnormally be expected to be of zero length. In this case if the\nSSL_select_next_proto function has been called as expected (with the list\nsupplied by the client passed in the client/client_len parameters), then the\napplication will not be vulnerable to this issue. If the application has\naccidentally been configured with a zero length server list, and has\naccidentally passed that zero length server list in the client/client_len\nparameters, and has additionally failed to correctly handle a "no overlap"\nresponse (which would normally result in a handshake failure in ALPN) then it\nwill be vulnerable to this problem.\n\nIn the case of NPN, the protocol permits the client to opportunistically select\na protocol when there is no overlap. OpenSSL returns the first client protocol\nin the no overlap case in support of this. The list of client protocols comes\nfrom the application and should never normally be expected to be of zero length.\nHowever if the SSL_select_next_proto function is accidentally called with a\nclient_len of 0 then an invalid memory pointer will be returned instead. If the\napplication uses this output as the opportunistic protocol then the loss of\nconfidentiality will occur.\n\nThis issue has been assessed as Low severity because applications are most\nlikely to be vulnerable if they are using NPN instead of ALPN - but NPN is not\nwidely used. It also requires an application configuration or programming error.\nFinally, this issue would not typically be under attacker control making active\nexploitation unlikely.\n\nThe FIPS modules in 3.3, 3.2, 3.1 and 3.0 are not affected by this issue.\n\nDue to the low severity of this issue we are not issuing new releases of\nOpenSSL at this time. The fix will be included in the next releases when they\nbecome available.',
-              'diffID':        'sha256:aeeb7c12a7530d057bb98eded67710752531c8c2edf76a0a49887254e8a72722',
-              'fixedVersions': [
-                '3.1.6-r0'
-              ],
-              'installedVersion': '3.1.5-r0',
-              'packageName':      'libcrypto3',
-              'purl':             'pkg:apk/alpine/libcrypto3@3.1.5-r0?arch=armhf&distro=3.19.2',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2024/06/27/1',
-                'http://www.openwall.com/lists/oss-security/2024/06/28/4',
-                'http://www.openwall.com/lists/oss-security/2024/08/15/1',
-                'https://access.redhat.com/errata/RHSA-2025:1671',
-                'https://access.redhat.com/security/cve/CVE-2024-5535',
-                'https://bugzilla.redhat.com/2294581',
-                'https://bugzilla.redhat.com/2294676',
-                'https://bugzilla.redhat.com/2301888',
-                'https://bugzilla.redhat.com/2318857',
-                'https://bugzilla.redhat.com/2318858',
-                'https://bugzilla.redhat.com/2318870',
-                'https://bugzilla.redhat.com/2318873',
-                'https://bugzilla.redhat.com/2318874',
-                'https://bugzilla.redhat.com/2318876',
-                'https://bugzilla.redhat.com/2318882',
-                'https://bugzilla.redhat.com/2318883',
-                'https://bugzilla.redhat.com/2318884',
-                'https://bugzilla.redhat.com/2318885',
-                'https://bugzilla.redhat.com/2318886',
-                'https://bugzilla.redhat.com/2318897',
-                'https://bugzilla.redhat.com/2318900',
-                'https://bugzilla.redhat.com/2318905',
-                'https://bugzilla.redhat.com/2318914',
-                'https://bugzilla.redhat.com/2318922',
-                'https://bugzilla.redhat.com/2318923',
-                'https://bugzilla.redhat.com/2318925',
-                'https://bugzilla.redhat.com/2318926',
-                'https://bugzilla.redhat.com/2318927',
-                'https://bugzilla.redhat.com/2331191',
-                'https://bugzilla.redhat.com/2339218',
-                'https://bugzilla.redhat.com/2339220',
-                'https://bugzilla.redhat.com/2339221',
-                'https://bugzilla.redhat.com/2339226',
-                'https://bugzilla.redhat.com/2339231',
-                'https://bugzilla.redhat.com/2339236',
-                'https://bugzilla.redhat.com/2339238',
-                'https://bugzilla.redhat.com/2339243',
-                'https://bugzilla.redhat.com/2339247',
-                'https://bugzilla.redhat.com/2339252',
-                'https://bugzilla.redhat.com/2339259',
-                'https://bugzilla.redhat.com/2339266',
-                'https://bugzilla.redhat.com/2339270',
-                'https://bugzilla.redhat.com/2339271',
-                'https://bugzilla.redhat.com/2339275',
-                'https://bugzilla.redhat.com/2339277',
-                'https://bugzilla.redhat.com/2339281',
-                'https://bugzilla.redhat.com/2339284',
-                'https://bugzilla.redhat.com/2339291',
-                'https://bugzilla.redhat.com/2339293',
-                'https://bugzilla.redhat.com/2339295',
-                'https://bugzilla.redhat.com/2339299',
-                'https://bugzilla.redhat.com/2339300',
-                'https://bugzilla.redhat.com/2339304',
-                'https://bugzilla.redhat.com/2339305',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2274020',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2281029',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2283757',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2294581',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-2511',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-4603',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-4741',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-5535',
-                'https://errata.almalinux.org/9/ALSA-2025-1671.html',
-                'https://errata.rockylinux.org/RLSA-2024:9333',
-                'https://github.com/openssl/openssl/commit/4ada436a1946cbb24db5ab4ca082b69c1bc10f37',
-                'https://github.com/openssl/openssl/commit/99fb785a5f85315b95288921a321a935ea29a51e',
-                'https://github.com/openssl/openssl/commit/cf6f91f6121f4db167405db2f0de410a456f260c',
-                'https://github.com/openssl/openssl/commit/e86ac436f0bd54d4517745483e2315650fae7b2c',
-                'https://github.openssl.org/openssl/extended-releases/commit/9947251413065a05189a63c9b7a6c1d4e224c21c',
-                'https://github.openssl.org/openssl/extended-releases/commit/b78ec0824da857223486660177d3b1f255c65d87',
-                'https://linux.oracle.com/cve/CVE-2024-5535.html',
-                'https://linux.oracle.com/errata/ELSA-2025-1673.html',
-                'https://lists.debian.org/debian-lts-announce/2024/10/msg00033.html',
-                'https://lists.debian.org/debian-lts-announce/2024/11/msg00000.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2024-5535',
-                'https://openssl.org/news/secadv/20240627.txt',
-                'https://security.netapp.com/advisory/ntap-20240712-0005/',
-                'https://security.netapp.com/advisory/ntap-20241025-0006/',
-                'https://security.netapp.com/advisory/ntap-20241025-0010/',
-                'https://ubuntu.com/security/notices/USN-6937-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2024-5535',
-                'https://www.openssl.org/news/secadv/20240627.txt',
-                'https://www.oracle.com/security-alerts/cpuoct2024.html#AppendixMSQL'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: SSL_select_next_proto buffer overread'
-            },
-            {
-              'cve':  'CVE-2025-9230',
-              'cvss': {
-                'redhat': {
-                  'v3score':  '5.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L'
-                }
-              },
-              'cwes': [
-                'CWE-125',
-                'CWE-787'
-              ],
-              'description':   'Issue summary: An application trying to decrypt CMS messages encrypted using\npassword based encryption can trigger an out-of-bounds read and write.\n\nImpact summary: This out-of-bounds read may trigger a crash which leads to\nDenial of Service for an application. The out-of-bounds write can cause\na memory corruption which can have various consequences including\na Denial of Service or Execution of attacker-supplied code.\n\nAlthough the consequences of a successful exploit of this vulnerability\ncould be severe, the probability that the attacker would be able to\nperform it is low. Besides, password based (PWRI) encryption support in CMS\nmessages is very rarely used. For that reason the issue was assessed as\nModerate severity according to our Security Policy.\n\nThe FIPS modules in 3.5, 3.4, 3.3, 3.2, 3.1 and 3.0 are not affected by this\nissue, as the CMS implementation is outside the OpenSSL FIPS module\nboundary.',
-              'diffID':        'sha256:aeeb7c12a7530d057bb98eded67710752531c8c2edf76a0a49887254e8a72722',
-              'fixedVersions': [
-                '3.1.8-r1'
-              ],
-              'installedVersion': '3.1.5-r0',
-              'packageName':      'libcrypto3',
-              'purl':             'pkg:apk/alpine/libcrypto3@3.1.5-r0?arch=armhf&distro=3.19.2',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2025/09/30/5',
-                'https://access.redhat.com/errata/RHSA-2025:21255',
-                'https://access.redhat.com/security/cve/CVE-2025-9230',
-                'https://bugzilla.redhat.com/2396054',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2396054',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-9230',
-                'https://errata.almalinux.org/9/ALSA-2025-21255.html',
-                'https://errata.rockylinux.org/RLSA-2025:21255',
-                'https://github.com/openssl/openssl/commit/5965ea5dd6960f36d8b7f74f8eac67a8eb8f2b45',
-                'https://github.com/openssl/openssl/commit/9e91358f365dee6c446dcdcdb01c04d2743fd280',
-                'https://github.com/openssl/openssl/commit/a79c4ce559c6a3a8fd4109e9f33c1185d5bf2def',
-                'https://github.com/openssl/openssl/commit/b5282d677551afda7d20e9c00e09561b547b2dfd',
-                'https://github.com/openssl/openssl/commit/bae259a211ada6315dc50900686daaaaaa55f482',
-                'https://github.openssl.org/openssl/extended-releases/commit/c2b96348bfa662f25f4fabf81958ae822063dae3',
-                'https://github.openssl.org/openssl/extended-releases/commit/dfbaf161d8dafc1132dd88cd48ad990ed9b4c8ba',
-                'https://linux.oracle.com/cve/CVE-2025-9230.html',
-                'https://linux.oracle.com/errata/ELSA-2026-0337.html',
-                'https://lists.debian.org/debian-lts-announce/2025/10/msg00001.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2025-9230',
-                'https://openssl-library.org/news/secadv/20250930.txt',
-                'https://ubuntu.com/security/notices/USN-7786-1',
-                'https://www.cve.org/CVERecord?id=CVE-2025-9230'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: Out-of-bounds read & write in RFC 3211 KEK Unwrap'
-            },
-            {
-              'cve':  'CVE-2024-9143',
-              'cvss': {
-                'redhat': {
-                  'v3score':  '3.7',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L'
-                }
-              },
-              'cwes': [
-                'CWE-125',
-                'CWE-787'
-              ],
-              'description':   "Issue summary: Use of the low-level GF(2^m) elliptic curve APIs with untrusted\nexplicit values for the field polynomial can lead to out-of-bounds memory reads\nor writes.\n\nImpact summary: Out of bound memory writes can lead to an application crash or\neven a possibility of a remote code execution, however, in all the protocols\ninvolving Elliptic Curve Cryptography that we're aware of, either only \"named\ncurves\" are supported, or, if explicit curve parameters are supported, they\nspecify an X9.62 encoding of binary (GF(2^m)) curves that can't represent\nproblematic input values. Thus the likelihood of existence of a vulnerable\napplication is low.\n\nIn particular, the X9.62 encoding is used for ECC keys in X.509 certificates,\nso problematic inputs cannot occur in the context of processing X.509\ncertificates.  Any problematic use-cases would have to be using an \"exotic\"\ncurve encoding.\n\nThe affected APIs include: EC_GROUP_new_curve_GF2m(), EC_GROUP_new_from_params(),\nand various supporting BN_GF2m_*() functions.\n\nApplications working with \"exotic\" explicit binary (GF(2^m)) curve parameters,\nthat make it possible to represent invalid field polynomials with a zero\nconstant term, via the above or similar APIs, may terminate abruptly as a\nresult of reading or writing outside of array bounds.  Remote code execution\ncannot easily be ruled out.\n\nThe FIPS modules in 3.3, 3.2, 3.1 and 3.0 are not affected by this issue.",
-              'diffID':        'sha256:aeeb7c12a7530d057bb98eded67710752531c8c2edf76a0a49887254e8a72722',
-              'fixedVersions': [
-                '3.1.7-r1'
-              ],
-              'installedVersion': '3.1.5-r0',
-              'packageName':      'libcrypto3',
-              'purl':             'pkg:apk/alpine/libcrypto3@3.1.5-r0?arch=armhf&distro=3.19.2',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2024/10/16/1',
-                'http://www.openwall.com/lists/oss-security/2024/10/23/1',
-                'http://www.openwall.com/lists/oss-security/2024/10/24/1',
-                'https://access.redhat.com/security/cve/CVE-2024-9143',
-                'https://github.com/openssl/openssl/commit/72ae83ad214d2eef262461365a1975707f862712',
-                'https://github.com/openssl/openssl/commit/bc7e04d7c8d509fb78fc0e285aa948fb0da04700',
-                'https://github.com/openssl/openssl/commit/c0d3e4d32d2805f49bec30547f225bc4d092e1f4',
-                'https://github.com/openssl/openssl/commit/fdf6723362ca51bd883295efe206cb5b1cfa5154',
-                'https://github.openssl.org/openssl/extended-releases/commit/8efc0cbaa8ebba8e116f7b81a876a4123594d86a',
-                'https://github.openssl.org/openssl/extended-releases/commit/9d576994cec2b7aa37a91740ea7e680810957e41',
-                'https://lists.debian.org/debian-lts-announce/2024/10/msg00033.html',
-                'https://lists.debian.org/debian-lts-announce/2024/11/msg00000.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2024-9143',
-                'https://openssl-library.org/news/secadv/20241016.txt',
-                'https://security.netapp.com/advisory/ntap-20241101-0001/',
-                'https://ubuntu.com/security/notices/USN-7264-1',
-                'https://ubuntu.com/security/notices/USN-7278-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2024-9143'
-              ],
-              'severity':   'LOW',
-              'suppressed': false,
-              'title':      'openssl: Low-level invalid GF(2^m) parameters lead to OOB memory access'
-            },
-            {
-              'cve':  'CVE-2025-9232',
-              'cvss': {
-                'redhat': {
-                  'v3score':  '3.1',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L'
-                }
-              },
-              'cwes': [
-                'CWE-125'
-              ],
-              'description':   "Issue summary: An application using the OpenSSL HTTP client API functions may\ntrigger an out-of-bounds read if the 'no_proxy' environment variable is set and\nthe host portion of the authority component of the HTTP URL is an IPv6 address.\n\nImpact summary: An out-of-bounds read can trigger a crash which leads to\nDenial of Service for an application.\n\nThe OpenSSL HTTP client API functions can be used directly by applications\nbut they are also used by the OCSP client functions and CMP (Certificate\nManagement Protocol) client implementation in OpenSSL. However the URLs used\nby these implementations are unlikely to be controlled by an attacker.\n\nIn this vulnerable code the out of bounds read can only trigger a crash.\nFurthermore the vulnerability requires an attacker-controlled URL to be\npassed from an application to the OpenSSL function and the user has to have\na 'no_proxy' environment variable set. For the aforementioned reasons the\nissue was assessed as Low severity.\n\nThe vulnerable code was introduced in the following patch releases:\n3.0.16, 3.1.8, 3.2.4, 3.3.3, 3.4.0 and 3.5.0.\n\nThe FIPS modules in 3.5, 3.4, 3.3, 3.2, 3.1 and 3.0 are not affected by this\nissue, as the HTTP client implementation is outside the OpenSSL FIPS module\nboundary.",
-              'diffID':        'sha256:aeeb7c12a7530d057bb98eded67710752531c8c2edf76a0a49887254e8a72722',
-              'fixedVersions': [
-                '3.1.8-r1'
-              ],
-              'installedVersion': '3.1.5-r0',
-              'packageName':      'libcrypto3',
-              'purl':             'pkg:apk/alpine/libcrypto3@3.1.5-r0?arch=armhf&distro=3.19.2',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2025/09/30/5',
-                'https://access.redhat.com/security/cve/CVE-2025-9232',
-                'https://github.com/openssl/openssl/commit/2b4ec20e47959170422922eaff25346d362dcb35',
-                'https://github.com/openssl/openssl/commit/654dc11d23468a74fc8ea4672b702dd3feb7be4b',
-                'https://github.com/openssl/openssl/commit/7cf21a30513c9e43c4bc3836c237cf086e194af3',
-                'https://github.com/openssl/openssl/commit/89e790ac431125a4849992858490bed6b225eadf',
-                'https://github.com/openssl/openssl/commit/bbf38c034cdabd0a13330abcc4855c866f53d2e0',
-                'https://nvd.nist.gov/vuln/detail/CVE-2025-9232',
-                'https://openssl-library.org/news/secadv/20250930.txt',
-                'https://ubuntu.com/security/notices/USN-7786-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2025-9232'
-              ],
-              'severity':   'LOW',
-              'suppressed': false,
-              'title':      'openssl: Out-of-bounds read in HTTP client no_proxy handling'
-            },
-            {
-              'cve':  'CVE-2024-6119',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-843'
-              ],
-              'description':   "Issue summary: Applications performing certificate name checks (e.g., TLS\nclients checking server certificates) may attempt to read an invalid memory\naddress resulting in abnormal termination of the application process.\n\nImpact summary: Abnormal termination of an application can a cause a denial of\nservice.\n\nApplications performing certificate name checks (e.g., TLS clients checking\nserver certificates) may attempt to read an invalid memory address when\ncomparing the expected name with an `otherName` subject alternative name of an\nX.509 certificate. This may result in an exception that terminates the\napplication program.\n\nNote that basic certificate chain validation (signatures, dates, ...) is not\naffected, the denial of service can occur only when the application also\nspecifies an expected DNS name, Email address or IP address.\n\nTLS servers rarely solicit client certificates, and even when they do, they\ngenerally don't perform a name check against a reference identifier (expected\nidentity), but rather extract the presented identity after checking the\ncertificate chain.  So TLS servers are generally not affected and the severity\nof the issue is Moderate.\n\nThe FIPS modules in 3.3, 3.2, 3.1 and 3.0 are not affected by this issue.",
-              'diffID':        'sha256:aeeb7c12a7530d057bb98eded67710752531c8c2edf76a0a49887254e8a72722',
-              'fixedVersions': [
-                '3.1.7-r0'
-              ],
-              'installedVersion': '3.1.5-r0',
-              'packageName':      'libssl3',
-              'purl':             'pkg:apk/alpine/libssl3@3.1.5-r0?arch=armhf&distro=3.19.2',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2024/09/03/4',
-                'https://access.redhat.com/errata/RHSA-2024:8935',
-                'https://access.redhat.com/security/cve/CVE-2024-6119',
-                'https://bugzilla.redhat.com/2306158',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2306158',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-6119',
-                'https://errata.almalinux.org/9/ALSA-2024-8935.html',
-                'https://errata.rockylinux.org/RLSA-2024:6783',
-                'https://github.com/openssl/openssl/commit/05f360d9e849a1b277db628f1f13083a7f8dd04f',
-                'https://github.com/openssl/openssl/commit/06d1dc3fa96a2ba5a3e22735a033012aadc9f0d6',
-                'https://github.com/openssl/openssl/commit/621f3729831b05ee828a3203eddb621d014ff2b2',
-                'https://github.com/openssl/openssl/commit/7dfcee2cd2a63b2c64b9b4b0850be64cb695b0a0',
-                'https://github.com/openssl/openssl/security/advisories/GHSA-5qrj-vq78-58fj',
-                'https://linux.oracle.com/cve/CVE-2024-6119.html',
-                'https://linux.oracle.com/errata/ELSA-2024-8935.html',
-                'https://lists.freebsd.org/archives/freebsd-security/2024-September/000303.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2024-6119',
-                'https://openssl-library.org/news/secadv/20240903.txt',
-                'https://security.netapp.com/advisory/ntap-20240912-0001/',
-                'https://ubuntu.com/security/notices/USN-6986-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2024-6119'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: Possible denial of service in X.509 name checks'
-            },
-            {
-              'cve':  'CVE-2024-13176',
-              'cvss': {
-                'redhat': {
-                  'v3score':  '4.7',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-385'
-              ],
-              'description':   'Issue summary: A timing side-channel which could potentially allow recovering\nthe private key exists in the ECDSA signature computation.\n\nImpact summary: A timing side-channel in ECDSA signature computations\ncould allow recovering the private key by an attacker. However, measuring\nthe timing would require either local access to the signing application or\na very fast network connection with low latency.\n\nThere is a timing signal of around 300 nanoseconds when the top word of\nthe inverted ECDSA nonce value is zero. This can happen with significant\nprobability only for some of the supported elliptic curves. In particular\nthe NIST P-521 curve is affected. To be able to measure this leak, the attacker\nprocess must either be located in the same physical computer or must\nhave a very fast network connection with low latency. For that reason\nthe severity of this vulnerability is Low.\n\nThe FIPS modules in 3.4, 3.3, 3.2, 3.1 and 3.0 are affected by this issue.',
-              'diffID':        'sha256:aeeb7c12a7530d057bb98eded67710752531c8c2edf76a0a49887254e8a72722',
-              'fixedVersions': [
-                '3.1.8-r0'
-              ],
-              'installedVersion': '3.1.5-r0',
-              'packageName':      'libssl3',
-              'purl':             'pkg:apk/alpine/libssl3@3.1.5-r0?arch=armhf&distro=3.19.2',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2025/01/20/2',
-                'https://access.redhat.com/errata/RHSA-2025:16046',
-                'https://access.redhat.com/security/cve/CVE-2024-13176',
-                'https://bugzilla.redhat.com/2359885',
-                'https://bugzilla.redhat.com/2359888',
-                'https://bugzilla.redhat.com/2359892',
-                'https://bugzilla.redhat.com/2359894',
-                'https://bugzilla.redhat.com/2359895',
-                'https://bugzilla.redhat.com/2359899',
-                'https://bugzilla.redhat.com/2359900',
-                'https://bugzilla.redhat.com/2359902',
-                'https://bugzilla.redhat.com/2359903',
-                'https://bugzilla.redhat.com/2359911',
-                'https://bugzilla.redhat.com/2359918',
-                'https://bugzilla.redhat.com/2359920',
-                'https://bugzilla.redhat.com/2359924',
-                'https://bugzilla.redhat.com/2359928',
-                'https://bugzilla.redhat.com/2359930',
-                'https://bugzilla.redhat.com/2359932',
-                'https://bugzilla.redhat.com/2359934',
-                'https://bugzilla.redhat.com/2359938',
-                'https://bugzilla.redhat.com/2359940',
-                'https://bugzilla.redhat.com/2359943',
-                'https://bugzilla.redhat.com/2359944',
-                'https://bugzilla.redhat.com/2359945',
-                'https://bugzilla.redhat.com/2359947',
-                'https://bugzilla.redhat.com/2359950',
-                'https://bugzilla.redhat.com/2359963',
-                'https://bugzilla.redhat.com/2359964',
-                'https://bugzilla.redhat.com/2359972',
-                'https://bugzilla.redhat.com/2370920',
-                'https://bugzilla.redhat.com/2380264',
-                'https://bugzilla.redhat.com/2380273',
-                'https://bugzilla.redhat.com/2380274',
-                'https://bugzilla.redhat.com/2380278',
-                'https://bugzilla.redhat.com/2380280',
-                'https://bugzilla.redhat.com/2380283',
-                'https://bugzilla.redhat.com/2380284',
-                'https://bugzilla.redhat.com/2380290',
-                'https://bugzilla.redhat.com/2380291',
-                'https://bugzilla.redhat.com/2380295',
-                'https://bugzilla.redhat.com/2380298',
-                'https://bugzilla.redhat.com/2380306',
-                'https://bugzilla.redhat.com/2380308',
-                'https://bugzilla.redhat.com/2380309',
-                'https://bugzilla.redhat.com/2380310',
-                'https://bugzilla.redhat.com/2380312',
-                'https://bugzilla.redhat.com/2380313',
-                'https://bugzilla.redhat.com/2380320',
-                'https://bugzilla.redhat.com/2380321',
-                'https://bugzilla.redhat.com/2380322',
-                'https://bugzilla.redhat.com/2380326',
-                'https://bugzilla.redhat.com/2380327',
-                'https://bugzilla.redhat.com/2380334',
-                'https://bugzilla.redhat.com/2380335',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2338999',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359885',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359888',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359892',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359894',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359895',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359899',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359900',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359902',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359903',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359911',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359918',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359920',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359924',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359928',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359930',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359932',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359934',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359938',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359940',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359943',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359944',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359945',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359947',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359950',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359963',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359964',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359972',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2370920',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380264',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380273',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380274',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380278',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380280',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380283',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380284',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380290',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380291',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380295',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380298',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380306',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380308',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380309',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380310',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380312',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380313',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380320',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380321',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380322',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380326',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380327',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380334',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380335',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-13176',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21574',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21575',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21577',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21579',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21580',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21581',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21584',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21585',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21588',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30681',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30682',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30683',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30684',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30685',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30687',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30688',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30689',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30693',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30695',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30696',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30699',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30703',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30704',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30705',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30715',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30721',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30722',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50077',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50078',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50079',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50080',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50081',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50082',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50083',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50084',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50085',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50086',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50087',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50088',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50091',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50092',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50093',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50094',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50096',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50097',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50098',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50099',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50100',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50101',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50102',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50104',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-5399',
-                'https://errata.almalinux.org/9/ALSA-2025-16046.html',
-                'https://errata.rockylinux.org/RLSA-2025:15699',
-                'https://github.com/openssl/openssl/commit/07272b05b04836a762b4baa874958af51d513844',
-                'https://github.com/openssl/openssl/commit/2af62e74fb59bc469506bc37eb2990ea408d9467',
-                'https://github.com/openssl/openssl/commit/392dcb336405a0c94486aa6655057f59fd3a0902',
-                'https://github.com/openssl/openssl/commit/4b1cb94a734a7d4ec363ac0a215a25c181e11f65',
-                'https://github.com/openssl/openssl/commit/77c608f4c8857e63e98e66444e2e761c9627916f',
-                'https://github.openssl.org/openssl/extended-releases/commit/0d5fd1ab987f7571e2c955d8d8b638fc0fb54ded',
-                'https://github.openssl.org/openssl/extended-releases/commit/a2639000db19878d5d89586ae7b725080592ae86',
-                'https://linux.oracle.com/cve/CVE-2024-13176.html',
-                'https://linux.oracle.com/errata/ELSA-2025-16046.html',
-                'https://lists.debian.org/debian-lts-announce/2025/05/msg00028.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2024-13176',
-                'https://openssl-library.org/news/secadv/20250120.txt',
-                'https://security.netapp.com/advisory/ntap-20250124-0005/',
-                'https://security.netapp.com/advisory/ntap-20250418-0010/',
-                'https://security.netapp.com/advisory/ntap-20250502-0006/',
-                'https://ubuntu.com/security/notices/USN-7264-1',
-                'https://ubuntu.com/security/notices/USN-7278-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2024-13176',
-                'https://www.oracle.com/security-alerts/cpuapr2025.html#AppendixMSQL'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: Timing side-channel in ECDSA signature computation'
-            },
-            {
-              'cve':  'CVE-2024-4741',
-              'cvss': {
-                'redhat': {
-                  'v3score':  '5.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   'Issue summary: Calling the OpenSSL API function SSL_free_buffers may cause\nmemory to be accessed that was previously freed in some situations\n\nImpact summary: A use after free can have a range of potential consequences such\nas the corruption of valid data, crashes or execution of arbitrary code.\nHowever, only applications that directly call the SSL_free_buffers function are\naffected by this issue. Applications that do not call this function are not\nvulnerable. Our investigations indicate that this function is rarely used by\napplications.\n\nThe SSL_free_buffers function is used to free the internal OpenSSL buffer used\nwhen processing an incoming record from the network. The call is only expected\nto succeed if the buffer is not currently in use. However, two scenarios have\nbeen identified where the buffer is freed even when still in use.\n\nThe first scenario occurs where a record header has been received from the\nnetwork and processed by OpenSSL, but the full record body has not yet arrived.\nIn this case calling SSL_free_buffers will succeed even though a record has only\nbeen partially processed and the buffer is still in use.\n\nThe second scenario occurs where a full record containing application data has\nbeen received and processed by OpenSSL but the application has only read part of\nthis data. Again a call to SSL_free_buffers will succeed even though the buffer\nis still in use.\n\nWhile these scenarios could occur accidentally during normal operation a\nmalicious attacker could attempt to engineer a stituation where this occurs.\nWe are not aware of this issue being actively exploited.\n\nThe FIPS modules in 3.3, 3.2, 3.1 and 3.0 are not affected by this issue.',
-              'diffID':        'sha256:aeeb7c12a7530d057bb98eded67710752531c8c2edf76a0a49887254e8a72722',
-              'fixedVersions': [
-                '3.1.6-r0'
-              ],
-              'installedVersion': '3.1.5-r0',
-              'packageName':      'libssl3',
-              'purl':             'pkg:apk/alpine/libssl3@3.1.5-r0?arch=armhf&distro=3.19.2',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2024:9333',
-                'https://access.redhat.com/security/cve/CVE-2024-4741',
-                'https://bugzilla.redhat.com/2274020',
-                'https://bugzilla.redhat.com/2281029',
-                'https://bugzilla.redhat.com/2283757',
-                'https://bugzilla.redhat.com/2294581',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2274020',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2281029',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2283757',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2294581',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-2511',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-4603',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-4741',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-5535',
-                'https://errata.almalinux.org/9/ALSA-2024-9333.html',
-                'https://errata.rockylinux.org/RLSA-2024:9333',
-                'https://github.com/openssl/openssl/commit/704f725b96aa373ee45ecfb23f6abfe8be8d9177',
-                'https://github.com/openssl/openssl/commit/b3f0eb0a295f58f16ba43ba99dad70d4ee5c437d',
-                'https://github.com/openssl/openssl/commit/c88c3de51020c37e8706bf7a682a162593053aac',
-                'https://github.com/openssl/openssl/commit/e5093133c35ca82874ad83697af76f4b0f7e3bd8',
-                'https://github.openssl.org/openssl/extended-releases/commit/f7a045f3143fc6da2ee66bf52d8df04829590dd4',
-                'https://linux.oracle.com/cve/CVE-2024-4741.html',
-                'https://linux.oracle.com/errata/ELSA-2024-9333.html',
-                'https://lists.debian.org/debian-lts-announce/2024/10/msg00033.html',
-                'https://lists.debian.org/debian-lts-announce/2024/11/msg00000.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2024-4741',
-                'https://security.netapp.com/advisory/ntap-20240621-0004/',
-                'https://ubuntu.com/security/notices/USN-6937-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2024-4741',
-                'https://www.openssl.org/news/secadv/20240528.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: Use After Free with SSL_free_buffers'
-            },
-            {
-              'cve':  'CVE-2024-5535',
-              'cvss': {
-                'redhat': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-125'
-              ],
-              'description':   'Issue summary: Calling the OpenSSL API function SSL_select_next_proto with an\nempty supported client protocols buffer may cause a crash or memory contents to\nbe sent to the peer.\n\nImpact summary: A buffer overread can have a range of potential consequences\nsuch as unexpected application beahviour or a crash. In particular this issue\ncould result in up to 255 bytes of arbitrary private data from memory being sent\nto the peer leading to a loss of confidentiality. However, only applications\nthat directly call the SSL_select_next_proto function with a 0 length list of\nsupported client protocols are affected by this issue. This would normally never\nbe a valid scenario and is typically not under attacker control but may occur by\naccident in the case of a configuration or programming error in the calling\napplication.\n\nThe OpenSSL API function SSL_select_next_proto is typically used by TLS\napplications that support ALPN (Application Layer Protocol Negotiation) or NPN\n(Next Protocol Negotiation). NPN is older, was never standardised and\nis deprecated in favour of ALPN. We believe that ALPN is significantly more\nwidely deployed than NPN. The SSL_select_next_proto function accepts a list of\nprotocols from the server and a list of protocols from the client and returns\nthe first protocol that appears in the server list that also appears in the\nclient list. In the case of no overlap between the two lists it returns the\nfirst item in the client list. In either case it will signal whether an overlap\nbetween the two lists was found. In the case where SSL_select_next_proto is\ncalled with a zero length client list it fails to notice this condition and\nreturns the memory immediately following the client list pointer (and reports\nthat there was no overlap in the lists).\n\nThis function is typically called from a server side application callback for\nALPN or a client side application callback for NPN. In the case of ALPN the list\nof protocols supplied by the client is guaranteed by libssl to never be zero in\nlength. The list of server protocols comes from the application and should never\nnormally be expected to be of zero length. In this case if the\nSSL_select_next_proto function has been called as expected (with the list\nsupplied by the client passed in the client/client_len parameters), then the\napplication will not be vulnerable to this issue. If the application has\naccidentally been configured with a zero length server list, and has\naccidentally passed that zero length server list in the client/client_len\nparameters, and has additionally failed to correctly handle a "no overlap"\nresponse (which would normally result in a handshake failure in ALPN) then it\nwill be vulnerable to this problem.\n\nIn the case of NPN, the protocol permits the client to opportunistically select\na protocol when there is no overlap. OpenSSL returns the first client protocol\nin the no overlap case in support of this. The list of client protocols comes\nfrom the application and should never normally be expected to be of zero length.\nHowever if the SSL_select_next_proto function is accidentally called with a\nclient_len of 0 then an invalid memory pointer will be returned instead. If the\napplication uses this output as the opportunistic protocol then the loss of\nconfidentiality will occur.\n\nThis issue has been assessed as Low severity because applications are most\nlikely to be vulnerable if they are using NPN instead of ALPN - but NPN is not\nwidely used. It also requires an application configuration or programming error.\nFinally, this issue would not typically be under attacker control making active\nexploitation unlikely.\n\nThe FIPS modules in 3.3, 3.2, 3.1 and 3.0 are not affected by this issue.\n\nDue to the low severity of this issue we are not issuing new releases of\nOpenSSL at this time. The fix will be included in the next releases when they\nbecome available.',
-              'diffID':        'sha256:aeeb7c12a7530d057bb98eded67710752531c8c2edf76a0a49887254e8a72722',
-              'fixedVersions': [
-                '3.1.6-r0'
-              ],
-              'installedVersion': '3.1.5-r0',
-              'packageName':      'libssl3',
-              'purl':             'pkg:apk/alpine/libssl3@3.1.5-r0?arch=armhf&distro=3.19.2',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2024/06/27/1',
-                'http://www.openwall.com/lists/oss-security/2024/06/28/4',
-                'http://www.openwall.com/lists/oss-security/2024/08/15/1',
-                'https://access.redhat.com/errata/RHSA-2025:1671',
-                'https://access.redhat.com/security/cve/CVE-2024-5535',
-                'https://bugzilla.redhat.com/2294581',
-                'https://bugzilla.redhat.com/2294676',
-                'https://bugzilla.redhat.com/2301888',
-                'https://bugzilla.redhat.com/2318857',
-                'https://bugzilla.redhat.com/2318858',
-                'https://bugzilla.redhat.com/2318870',
-                'https://bugzilla.redhat.com/2318873',
-                'https://bugzilla.redhat.com/2318874',
-                'https://bugzilla.redhat.com/2318876',
-                'https://bugzilla.redhat.com/2318882',
-                'https://bugzilla.redhat.com/2318883',
-                'https://bugzilla.redhat.com/2318884',
-                'https://bugzilla.redhat.com/2318885',
-                'https://bugzilla.redhat.com/2318886',
-                'https://bugzilla.redhat.com/2318897',
-                'https://bugzilla.redhat.com/2318900',
-                'https://bugzilla.redhat.com/2318905',
-                'https://bugzilla.redhat.com/2318914',
-                'https://bugzilla.redhat.com/2318922',
-                'https://bugzilla.redhat.com/2318923',
-                'https://bugzilla.redhat.com/2318925',
-                'https://bugzilla.redhat.com/2318926',
-                'https://bugzilla.redhat.com/2318927',
-                'https://bugzilla.redhat.com/2331191',
-                'https://bugzilla.redhat.com/2339218',
-                'https://bugzilla.redhat.com/2339220',
-                'https://bugzilla.redhat.com/2339221',
-                'https://bugzilla.redhat.com/2339226',
-                'https://bugzilla.redhat.com/2339231',
-                'https://bugzilla.redhat.com/2339236',
-                'https://bugzilla.redhat.com/2339238',
-                'https://bugzilla.redhat.com/2339243',
-                'https://bugzilla.redhat.com/2339247',
-                'https://bugzilla.redhat.com/2339252',
-                'https://bugzilla.redhat.com/2339259',
-                'https://bugzilla.redhat.com/2339266',
-                'https://bugzilla.redhat.com/2339270',
-                'https://bugzilla.redhat.com/2339271',
-                'https://bugzilla.redhat.com/2339275',
-                'https://bugzilla.redhat.com/2339277',
-                'https://bugzilla.redhat.com/2339281',
-                'https://bugzilla.redhat.com/2339284',
-                'https://bugzilla.redhat.com/2339291',
-                'https://bugzilla.redhat.com/2339293',
-                'https://bugzilla.redhat.com/2339295',
-                'https://bugzilla.redhat.com/2339299',
-                'https://bugzilla.redhat.com/2339300',
-                'https://bugzilla.redhat.com/2339304',
-                'https://bugzilla.redhat.com/2339305',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2274020',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2281029',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2283757',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2294581',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-2511',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-4603',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-4741',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-5535',
-                'https://errata.almalinux.org/9/ALSA-2025-1671.html',
-                'https://errata.rockylinux.org/RLSA-2024:9333',
-                'https://github.com/openssl/openssl/commit/4ada436a1946cbb24db5ab4ca082b69c1bc10f37',
-                'https://github.com/openssl/openssl/commit/99fb785a5f85315b95288921a321a935ea29a51e',
-                'https://github.com/openssl/openssl/commit/cf6f91f6121f4db167405db2f0de410a456f260c',
-                'https://github.com/openssl/openssl/commit/e86ac436f0bd54d4517745483e2315650fae7b2c',
-                'https://github.openssl.org/openssl/extended-releases/commit/9947251413065a05189a63c9b7a6c1d4e224c21c',
-                'https://github.openssl.org/openssl/extended-releases/commit/b78ec0824da857223486660177d3b1f255c65d87',
-                'https://linux.oracle.com/cve/CVE-2024-5535.html',
-                'https://linux.oracle.com/errata/ELSA-2025-1673.html',
-                'https://lists.debian.org/debian-lts-announce/2024/10/msg00033.html',
-                'https://lists.debian.org/debian-lts-announce/2024/11/msg00000.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2024-5535',
-                'https://openssl.org/news/secadv/20240627.txt',
-                'https://security.netapp.com/advisory/ntap-20240712-0005/',
-                'https://security.netapp.com/advisory/ntap-20241025-0006/',
-                'https://security.netapp.com/advisory/ntap-20241025-0010/',
-                'https://ubuntu.com/security/notices/USN-6937-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2024-5535',
-                'https://www.openssl.org/news/secadv/20240627.txt',
-                'https://www.oracle.com/security-alerts/cpuoct2024.html#AppendixMSQL'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: SSL_select_next_proto buffer overread'
-            },
-            {
-              'cve':  'CVE-2025-9230',
-              'cvss': {
-                'redhat': {
-                  'v3score':  '5.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L'
-                }
-              },
-              'cwes': [
-                'CWE-125',
-                'CWE-787'
-              ],
-              'description':   'Issue summary: An application trying to decrypt CMS messages encrypted using\npassword based encryption can trigger an out-of-bounds read and write.\n\nImpact summary: This out-of-bounds read may trigger a crash which leads to\nDenial of Service for an application. The out-of-bounds write can cause\na memory corruption which can have various consequences including\na Denial of Service or Execution of attacker-supplied code.\n\nAlthough the consequences of a successful exploit of this vulnerability\ncould be severe, the probability that the attacker would be able to\nperform it is low. Besides, password based (PWRI) encryption support in CMS\nmessages is very rarely used. For that reason the issue was assessed as\nModerate severity according to our Security Policy.\n\nThe FIPS modules in 3.5, 3.4, 3.3, 3.2, 3.1 and 3.0 are not affected by this\nissue, as the CMS implementation is outside the OpenSSL FIPS module\nboundary.',
-              'diffID':        'sha256:aeeb7c12a7530d057bb98eded67710752531c8c2edf76a0a49887254e8a72722',
-              'fixedVersions': [
-                '3.1.8-r1'
-              ],
-              'installedVersion': '3.1.5-r0',
-              'packageName':      'libssl3',
-              'purl':             'pkg:apk/alpine/libssl3@3.1.5-r0?arch=armhf&distro=3.19.2',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2025/09/30/5',
-                'https://access.redhat.com/errata/RHSA-2025:21255',
-                'https://access.redhat.com/security/cve/CVE-2025-9230',
-                'https://bugzilla.redhat.com/2396054',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2396054',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-9230',
-                'https://errata.almalinux.org/9/ALSA-2025-21255.html',
-                'https://errata.rockylinux.org/RLSA-2025:21255',
-                'https://github.com/openssl/openssl/commit/5965ea5dd6960f36d8b7f74f8eac67a8eb8f2b45',
-                'https://github.com/openssl/openssl/commit/9e91358f365dee6c446dcdcdb01c04d2743fd280',
-                'https://github.com/openssl/openssl/commit/a79c4ce559c6a3a8fd4109e9f33c1185d5bf2def',
-                'https://github.com/openssl/openssl/commit/b5282d677551afda7d20e9c00e09561b547b2dfd',
-                'https://github.com/openssl/openssl/commit/bae259a211ada6315dc50900686daaaaaa55f482',
-                'https://github.openssl.org/openssl/extended-releases/commit/c2b96348bfa662f25f4fabf81958ae822063dae3',
-                'https://github.openssl.org/openssl/extended-releases/commit/dfbaf161d8dafc1132dd88cd48ad990ed9b4c8ba',
-                'https://linux.oracle.com/cve/CVE-2025-9230.html',
-                'https://linux.oracle.com/errata/ELSA-2026-0337.html',
-                'https://lists.debian.org/debian-lts-announce/2025/10/msg00001.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2025-9230',
-                'https://openssl-library.org/news/secadv/20250930.txt',
-                'https://ubuntu.com/security/notices/USN-7786-1',
-                'https://www.cve.org/CVERecord?id=CVE-2025-9230'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: Out-of-bounds read & write in RFC 3211 KEK Unwrap'
-            },
-            {
-              'cve':  'CVE-2024-9143',
-              'cvss': {
-                'redhat': {
-                  'v3score':  '3.7',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L'
-                }
-              },
-              'cwes': [
-                'CWE-125',
-                'CWE-787'
-              ],
-              'description':   "Issue summary: Use of the low-level GF(2^m) elliptic curve APIs with untrusted\nexplicit values for the field polynomial can lead to out-of-bounds memory reads\nor writes.\n\nImpact summary: Out of bound memory writes can lead to an application crash or\neven a possibility of a remote code execution, however, in all the protocols\ninvolving Elliptic Curve Cryptography that we're aware of, either only \"named\ncurves\" are supported, or, if explicit curve parameters are supported, they\nspecify an X9.62 encoding of binary (GF(2^m)) curves that can't represent\nproblematic input values. Thus the likelihood of existence of a vulnerable\napplication is low.\n\nIn particular, the X9.62 encoding is used for ECC keys in X.509 certificates,\nso problematic inputs cannot occur in the context of processing X.509\ncertificates.  Any problematic use-cases would have to be using an \"exotic\"\ncurve encoding.\n\nThe affected APIs include: EC_GROUP_new_curve_GF2m(), EC_GROUP_new_from_params(),\nand various supporting BN_GF2m_*() functions.\n\nApplications working with \"exotic\" explicit binary (GF(2^m)) curve parameters,\nthat make it possible to represent invalid field polynomials with a zero\nconstant term, via the above or similar APIs, may terminate abruptly as a\nresult of reading or writing outside of array bounds.  Remote code execution\ncannot easily be ruled out.\n\nThe FIPS modules in 3.3, 3.2, 3.1 and 3.0 are not affected by this issue.",
-              'diffID':        'sha256:aeeb7c12a7530d057bb98eded67710752531c8c2edf76a0a49887254e8a72722',
-              'fixedVersions': [
-                '3.1.7-r1'
-              ],
-              'installedVersion': '3.1.5-r0',
-              'packageName':      'libssl3',
-              'purl':             'pkg:apk/alpine/libssl3@3.1.5-r0?arch=armhf&distro=3.19.2',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2024/10/16/1',
-                'http://www.openwall.com/lists/oss-security/2024/10/23/1',
-                'http://www.openwall.com/lists/oss-security/2024/10/24/1',
-                'https://access.redhat.com/security/cve/CVE-2024-9143',
-                'https://github.com/openssl/openssl/commit/72ae83ad214d2eef262461365a1975707f862712',
-                'https://github.com/openssl/openssl/commit/bc7e04d7c8d509fb78fc0e285aa948fb0da04700',
-                'https://github.com/openssl/openssl/commit/c0d3e4d32d2805f49bec30547f225bc4d092e1f4',
-                'https://github.com/openssl/openssl/commit/fdf6723362ca51bd883295efe206cb5b1cfa5154',
-                'https://github.openssl.org/openssl/extended-releases/commit/8efc0cbaa8ebba8e116f7b81a876a4123594d86a',
-                'https://github.openssl.org/openssl/extended-releases/commit/9d576994cec2b7aa37a91740ea7e680810957e41',
-                'https://lists.debian.org/debian-lts-announce/2024/10/msg00033.html',
-                'https://lists.debian.org/debian-lts-announce/2024/11/msg00000.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2024-9143',
-                'https://openssl-library.org/news/secadv/20241016.txt',
-                'https://security.netapp.com/advisory/ntap-20241101-0001/',
-                'https://ubuntu.com/security/notices/USN-7264-1',
-                'https://ubuntu.com/security/notices/USN-7278-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2024-9143'
-              ],
-              'severity':   'LOW',
-              'suppressed': false,
-              'title':      'openssl: Low-level invalid GF(2^m) parameters lead to OOB memory access'
-            },
-            {
-              'cve':  'CVE-2025-9232',
-              'cvss': {
-                'redhat': {
-                  'v3score':  '3.1',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L'
-                }
-              },
-              'cwes': [
-                'CWE-125'
-              ],
-              'description':   "Issue summary: An application using the OpenSSL HTTP client API functions may\ntrigger an out-of-bounds read if the 'no_proxy' environment variable is set and\nthe host portion of the authority component of the HTTP URL is an IPv6 address.\n\nImpact summary: An out-of-bounds read can trigger a crash which leads to\nDenial of Service for an application.\n\nThe OpenSSL HTTP client API functions can be used directly by applications\nbut they are also used by the OCSP client functions and CMP (Certificate\nManagement Protocol) client implementation in OpenSSL. However the URLs used\nby these implementations are unlikely to be controlled by an attacker.\n\nIn this vulnerable code the out of bounds read can only trigger a crash.\nFurthermore the vulnerability requires an attacker-controlled URL to be\npassed from an application to the OpenSSL function and the user has to have\na 'no_proxy' environment variable set. For the aforementioned reasons the\nissue was assessed as Low severity.\n\nThe vulnerable code was introduced in the following patch releases:\n3.0.16, 3.1.8, 3.2.4, 3.3.3, 3.4.0 and 3.5.0.\n\nThe FIPS modules in 3.5, 3.4, 3.3, 3.2, 3.1 and 3.0 are not affected by this\nissue, as the HTTP client implementation is outside the OpenSSL FIPS module\nboundary.",
-              'diffID':        'sha256:aeeb7c12a7530d057bb98eded67710752531c8c2edf76a0a49887254e8a72722',
-              'fixedVersions': [
-                '3.1.8-r1'
-              ],
-              'installedVersion': '3.1.5-r0',
-              'packageName':      'libssl3',
-              'purl':             'pkg:apk/alpine/libssl3@3.1.5-r0?arch=armhf&distro=3.19.2',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2025/09/30/5',
-                'https://access.redhat.com/security/cve/CVE-2025-9232',
-                'https://github.com/openssl/openssl/commit/2b4ec20e47959170422922eaff25346d362dcb35',
-                'https://github.com/openssl/openssl/commit/654dc11d23468a74fc8ea4672b702dd3feb7be4b',
-                'https://github.com/openssl/openssl/commit/7cf21a30513c9e43c4bc3836c237cf086e194af3',
-                'https://github.com/openssl/openssl/commit/89e790ac431125a4849992858490bed6b225eadf',
-                'https://github.com/openssl/openssl/commit/bbf38c034cdabd0a13330abcc4855c866f53d2e0',
-                'https://nvd.nist.gov/vuln/detail/CVE-2025-9232',
-                'https://openssl-library.org/news/secadv/20250930.txt',
-                'https://ubuntu.com/security/notices/USN-7786-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2025-9232'
-              ],
-              'severity':   'LOW',
-              'suppressed': false,
-              'title':      'openssl: Out-of-bounds read in HTTP client no_proxy handling'
-            },
-            {
-              'cve':  'CVE-2025-26519',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-787'
-              ],
-              'description':   'musl libc 0.9.13 through 1.2.5 before 1.2.6 has an out-of-bounds write vulnerability when an attacker can trigger iconv conversion of untrusted EUC-KR text to UTF-8.',
-              'diffID':        'sha256:aeeb7c12a7530d057bb98eded67710752531c8c2edf76a0a49887254e8a72722',
-              'fixedVersions': [
-                '1.2.4_git20230717-r5'
-              ],
-              'installedVersion': '1.2.4_git20230717-r4',
-              'packageName':      'musl',
-              'purl':             'pkg:apk/alpine/musl@1.2.4_git20230717-r4?arch=armhf&distro=3.19.2',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2025/02/13/2',
-                'http://www.openwall.com/lists/oss-security/2025/02/13/3',
-                'http://www.openwall.com/lists/oss-security/2025/02/13/4',
-                'http://www.openwall.com/lists/oss-security/2025/02/13/5',
-                'http://www.openwall.com/lists/oss-security/2025/02/14/5',
-                'http://www.openwall.com/lists/oss-security/2025/02/14/6',
-                'https://git.musl-libc.org/cgit/musl/commit/?id=c47ad25ea3b484e10326f933e927c0bc8cded3da',
-                'https://git.musl-libc.org/cgit/musl/commit/?id=e5adcd97b5196e29991b524237381a0202a60659',
-                'https://www.openwall.com/lists/oss-security/2025/02/13/2'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'musl libc 0.9.13 through 1.2.5 before 1.2.6 has an out-of-bounds write ...'
-            },
-            {
-              'cve':  'CVE-2025-26519',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-787'
-              ],
-              'description':   'musl libc 0.9.13 through 1.2.5 before 1.2.6 has an out-of-bounds write vulnerability when an attacker can trigger iconv conversion of untrusted EUC-KR text to UTF-8.',
-              'diffID':        'sha256:aeeb7c12a7530d057bb98eded67710752531c8c2edf76a0a49887254e8a72722',
-              'fixedVersions': [
-                '1.2.4_git20230717-r5'
-              ],
-              'installedVersion': '1.2.4_git20230717-r4',
-              'packageName':      'musl-utils',
-              'purl':             'pkg:apk/alpine/musl-utils@1.2.4_git20230717-r4?arch=armhf&distro=3.19.2',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2025/02/13/2',
-                'http://www.openwall.com/lists/oss-security/2025/02/13/3',
-                'http://www.openwall.com/lists/oss-security/2025/02/13/4',
-                'http://www.openwall.com/lists/oss-security/2025/02/13/5',
-                'http://www.openwall.com/lists/oss-security/2025/02/14/5',
-                'http://www.openwall.com/lists/oss-security/2025/02/14/6',
-                'https://git.musl-libc.org/cgit/musl/commit/?id=c47ad25ea3b484e10326f933e927c0bc8cded3da',
-                'https://git.musl-libc.org/cgit/musl/commit/?id=e5adcd97b5196e29991b524237381a0202a60659',
-                'https://www.openwall.com/lists/oss-security/2025/02/13/2'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'musl libc 0.9.13 through 1.2.5 before 1.2.6 has an out-of-bounds write ...'
-            },
-            {
-              'cve':  'CVE-2024-58251',
-              'cwes': [
-                'CWE-150'
-              ],
-              'description':   'In netstat in BusyBox through 1.37.0, local users can launch of network application with an argv[0] containing an ANSI terminal escape sequence, leading to a denial of service (terminal locked up) when netstat is used by a victim.',
-              'diffID':        'sha256:aeeb7c12a7530d057bb98eded67710752531c8c2edf76a0a49887254e8a72722',
-              'fixedVersions': [
-                '1.36.1-r21'
-              ],
-              'installedVersion': '1.36.1-r19',
-              'packageName':      'ssl_client',
-              'purl':             'pkg:apk/alpine/ssl_client@1.36.1-r19?arch=armhf&distro=3.19.2',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2025/04/23/6',
-                'https://bugs.busybox.net/show_bug.cgi?id=15922',
-                'https://www.busybox.net',
-                'https://www.busybox.net/downloads/',
-                'https://www.cve.org/CVERecord?id=CVE-2024-58251'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'In netstat in BusyBox through 1.37.0, local users can launch of networ ...'
-            },
-            {
-              'cve':  'CVE-2025-46394',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '3.3',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-451'
-              ],
-              'description':   'In tar in BusyBox through 1.37.0, a TAR archive can have filenames hidden from a listing through the use of terminal escape sequences.',
-              'diffID':        'sha256:aeeb7c12a7530d057bb98eded67710752531c8c2edf76a0a49887254e8a72722',
-              'fixedVersions': [
-                '1.36.1-r21'
-              ],
-              'installedVersion': '1.36.1-r19',
-              'packageName':      'ssl_client',
-              'purl':             'pkg:apk/alpine/ssl_client@1.36.1-r19?arch=armhf&distro=3.19.2',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2025/04/23/5',
-                'http://www.openwall.com/lists/oss-security/2025/04/24/3',
-                'https://bugs.busybox.net/show_bug.cgi?id=16018',
-                'https://lists.busybox.net/pipermail/busybox/2024-July/090806.html',
-                'https://lists.busybox.net/pipermail/busybox/2024-July/090814.html',
-                'https://www.busybox.net',
-                'https://www.busybox.net/downloads/',
-                'https://www.cve.org/CVERecord?id=CVE-2025-46394',
-                'https://www.openwall.com/lists/oss-security/2025/04/23/1'
-              ],
-              'severity':   'LOW',
-              'suppressed': false,
-              'title':      'In tar in BusyBox through 1.37.0, a TAR archive can have filenames hid ...'
-            }
-          ]
-        }
-      ],
-      'summary': {
-        'critical':   0,
-        'high':       4,
-        'low':        7,
-        'medium':     11,
-        'suppressed': 0,
-        'unknown':    0
-      }
-    }
-  },
-  {
-    'id':    'default/7095c376169d424910fe1391e27d593df40bd6e5d269711352e31f6ab7b853ac',
-    'type':  'storage.sbomscanner.kubewarden.io.vulnerabilityreport',
-    'links': {
-      'patch':  'https://localhost:8005/v1/storage.sbomscanner.kubewarden.io.vulnerabilityreports/default/7095c376169d424910fe1391e27d593df40bd6e5d269711352e31f6ab7b853ac',
-      'remove': 'https://localhost:8005/v1/storage.sbomscanner.kubewarden.io.vulnerabilityreports/default/7095c376169d424910fe1391e27d593df40bd6e5d269711352e31f6ab7b853ac',
-      'self':   'https://localhost:8005/v1/storage.sbomscanner.kubewarden.io.vulnerabilityreports/default/7095c376169d424910fe1391e27d593df40bd6e5d269711352e31f6ab7b853ac',
-      'update': 'https://localhost:8005/v1/storage.sbomscanner.kubewarden.io.vulnerabilityreports/default/7095c376169d424910fe1391e27d593df40bd6e5d269711352e31f6ab7b853ac',
-      'view':   'https://localhost:8005/apis/storage.sbomscanner.kubewarden.io/v1alpha1/namespaces/default/vulnerabilityreports/7095c376169d424910fe1391e27d593df40bd6e5d269711352e31f6ab7b853ac'
-    },
-    '_id':           'default/7095c376169d424910fe1391e27d593df40bd6e5d269711352e31f6ab7b853ac',
-    'apiVersion':    'storage.sbomscanner.kubewarden.io/v1alpha1',
-    'imageMetadata': {
-      'digest':      'sha256:84b52c534d1441eceb3c269c105386e21fa90c40d61f75762b0f4020e4410187',
-      'platform':    'linux/amd64',
-      'registry':    'demo-02',
-      'registryURI': 'ghcr.io',
-      'repository':  'linuxcontainers/alpine',
-      'tag':         '3.16.4'
-    },
-    'kind':     'VulnerabilityReport',
-    'metadata': {
-      'creationTimestamp': '2026-01-09T22:47:15Z',
-      'fields':            [
-        '7095c376169d424910fe1391e27d593df40bd6e5d269711352e31f6ab7b853ac',
-        'ghcr.io/linuxcontainers/alpine:3.16.4',
-        'linux/amd64',
-        '16 (0 suppressed)'
-      ],
-      'labels': {
-        'app.kubernetes.io/managed-by':          'sbomscanner',
-        'app.kubernetes.io/part-of':             'sbomscanner',
-        'sbomscanner.kubewarden.io/scanjob-uid': '42184d01-4b15-466f-98aa-e802d1b6b6b8'
-      },
-      'managedFields': [
-        {
-          'apiVersion': 'storage.sbomscanner.kubewarden.io/v1alpha1',
-          'fieldsType': 'FieldsV1',
-          'fieldsV1':   {
-            'f:imageMetadata': {
-              'f:digest':      {},
-              'f:platform':    {},
-              'f:registry':    {},
-              'f:registryURI': {},
-              'f:repository':  {},
-              'f:tag':         {}
-            },
-            'f:metadata': {
-              'f:labels': {
-                '.':                                       {},
-                'f:app.kubernetes.io/managed-by':          {},
-                'f:app.kubernetes.io/part-of':             {},
-                'f:sbomscanner.kubewarden.io/scanjob-uid': {}
-              },
-              'f:ownerReferences': {
-                '.':                                                {},
-                'k:{"uid":"976bf040-6477-451f-9a2f-19346b0e6fb6"}': {}
-              }
-            },
-            'f:report': {
-              'f:results': {},
-              'f:summary': {
-                'f:high':   {},
-                'f:medium': {}
-              }
-            }
-          },
-          'manager':   'worker',
-          'operation': 'Update',
-          'time':      '2026-01-28T18:34:00Z'
-        }
-      ],
-      'name':            '7095c376169d424910fe1391e27d593df40bd6e5d269711352e31f6ab7b853ac',
-      'namespace':       'default',
-      'ownerReferences': [
-        {
-          'apiVersion':         'storage.sbomscanner.kubewarden.io/v1alpha1',
-          'blockOwnerDeletion': true,
-          'controller':         true,
-          'kind':               'SBOM',
-          'name':               '7095c376169d424910fe1391e27d593df40bd6e5d269711352e31f6ab7b853ac',
-          'uid':                '976bf040-6477-451f-9a2f-19346b0e6fb6'
-        }
-      ],
-      'relationships': [
-        {
-          'fromId':   'default/7095c376169d424910fe1391e27d593df40bd6e5d269711352e31f6ab7b853ac',
-          'fromType': 'storage.sbomscanner.kubewarden.io.sbom',
-          'rel':      'owner',
-          'state':    'active',
-          'message':  'Resource is current'
-        }
-      ],
-      'resourceVersion': '4',
-      'state':           {
-        'error':         false,
-        'message':       'Resource is current',
-        'name':          'active',
-        'transitioning': false
-      },
-      'uid': '8480bac7-ba83-4d64-baa1-210dc2f56940'
-    },
-    'report': {
-      'results': [
-        {
-          'class':           'os-pkgs',
-          'target':          '/var/run/worker/trivy.sbom.1981640254.json (alpine 3.16.4)',
-          'type':            'alpine',
-          'vulnerabilities': [
-            {
-              'cve':  'CVE-2023-42366',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.5',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.1',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-787'
-              ],
-              'description':   'A heap-buffer-overflow was discovered in BusyBox v.1.36.1 in the next_token function at awk.c:1159.',
-              'diffID':        'sha256:aa5968d388b8652cd305e0e037751228967839d83d0cafbde5debf0b092e7c42',
-              'fixedVersions': [
-                '1.35.0-r18'
-              ],
-              'installedVersion': '1.35.0-r17',
-              'packageName':      'busybox',
-              'purl':             'pkg:apk/alpine/busybox@1.35.0-r17?arch=x86_64&distro=3.16.4',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2023-42366',
-                'https://bugs.busybox.net/show_bug.cgi?id=15874',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-42366',
-                'https://security.netapp.com/advisory/ntap-20241206-0007/',
-                'https://www.cve.org/CVERecord?id=CVE-2023-42366'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'busybox: A heap-buffer-overflow'
-            },
-            {
-              'cve':  'CVE-2023-0464',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-295'
-              ],
-              'description':   "A security vulnerability has been identified in all supported versions\n\nof OpenSSL related to the verification of X.509 certificate chains\nthat include policy constraints.  Attackers may be able to exploit this\nvulnerability by creating a malicious certificate chain that triggers\nexponential use of computational resources, leading to a denial-of-service\n(DoS) attack on affected systems.\n\nPolicy processing is disabled by default but can be enabled by passing\nthe `-policy' argument to the command line utilities or by calling the\n`X509_VERIFY_PARAM_set1_policies()' function.",
-              'diffID':        'sha256:aa5968d388b8652cd305e0e037751228967839d83d0cafbde5debf0b092e7c42',
-              'fixedVersions': [
-                '1.1.1t-r1'
-              ],
-              'installedVersion': '1.1.1t-r0',
-              'packageName':      'libcrypto1.1',
-              'purl':             'pkg:apk/alpine/libcrypto1.1@1.1.1t-r0?arch=x86_64&distro=3.16.4',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2023:3722',
-                'https://access.redhat.com/security/cve/CVE-2023-0464',
-                'https://bugzilla.redhat.com/2181082',
-                'https://bugzilla.redhat.com/2182561',
-                'https://bugzilla.redhat.com/2182565',
-                'https://bugzilla.redhat.com/2188461',
-                'https://bugzilla.redhat.com/2207947',
-                'https://errata.almalinux.org/9/ALSA-2023-3722.html',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=2017771e2db3e2b96f89bbe8766c3209f6a99545',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=2dcd4f1e3115f38cefa43e3efbe9b801c27e642e',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=879f7080d7e141f415c79eaa3a8ac4a3dad0348b',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=959c59c7a0164117e7f8366466a32bb1f8d77ff1',
-                'https://linux.oracle.com/cve/CVE-2023-0464.html',
-                'https://linux.oracle.com/errata/ELSA-2023-3722.html',
-                'https://lists.debian.org/debian-lts-announce/2023/06/msg00011.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-0464',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://security.netapp.com/advisory/ntap-20230406-0006/',
-                'https://security.netapp.com/advisory/ntap-20240621-0006/',
-                'https://ubuntu.com/security/notices/USN-6039-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.couchbase.com/alerts/',
-                'https://www.cve.org/CVERecord?id=CVE-2023-0464',
-                'https://www.debian.org/security/2023/dsa-5417',
-                'https://www.openssl.org/news/secadv/20230322.txt'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: Denial of service by excessive resource usage in verifying X509 policy constraints'
-            },
-            {
-              'cve':  'CVE-2023-0465',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N'
-                },
-                'redhat': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-295'
-              ],
-              'description':   "Applications that use a non-default option when verifying certificates may be\nvulnerable to an attack from a malicious CA to circumvent certain checks.\n\nInvalid certificate policies in leaf certificates are silently ignored by\nOpenSSL and other certificate policy checks are skipped for that certificate.\nA malicious CA could use this to deliberately assert invalid certificate policies\nin order to circumvent policy checking on the certificate altogether.\n\nPolicy processing is disabled by default but can be enabled by passing\nthe `-policy' argument to the command line utilities or by calling the\n`X509_VERIFY_PARAM_set1_policies()' function.",
-              'diffID':        'sha256:aa5968d388b8652cd305e0e037751228967839d83d0cafbde5debf0b092e7c42',
-              'fixedVersions': [
-                '1.1.1t-r2'
-              ],
-              'installedVersion': '1.1.1t-r0',
-              'packageName':      'libcrypto1.1',
-              'purl':             'pkg:apk/alpine/libcrypto1.1@1.1.1t-r0?arch=x86_64&distro=3.16.4',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2023:3722',
-                'https://access.redhat.com/security/cve/CVE-2023-0465',
-                'https://bugzilla.redhat.com/2181082',
-                'https://bugzilla.redhat.com/2182561',
-                'https://bugzilla.redhat.com/2182565',
-                'https://bugzilla.redhat.com/2188461',
-                'https://bugzilla.redhat.com/2207947',
-                'https://errata.almalinux.org/9/ALSA-2023-3722.html',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=10325176f3d3e98c6e2b3bf5ab1e3b334de6947a',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=1dd43e0709fece299b15208f36cc7c76209ba0bb',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=b013765abfa80036dc779dd0e50602c57bb3bf95',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=facfb1ab745646e97a1920977ae4a9965ea61d5c',
-                'https://linux.oracle.com/cve/CVE-2023-0465.html',
-                'https://linux.oracle.com/errata/ELSA-2023-3722.html',
-                'https://lists.debian.org/debian-lts-announce/2023/06/msg00011.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-0465',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://security.netapp.com/advisory/ntap-20230414-0001/',
-                'https://ubuntu.com/security/notices/USN-6039-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-0465',
-                'https://www.debian.org/security/2023/dsa-5417',
-                'https://www.openssl.org/news/secadv/20230328.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: Invalid certificate policies in leaf certificates are silently ignored'
-            },
-            {
-              'cve':  'CVE-2023-2650',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '6.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-770'
-              ],
-              'description':   "Issue summary: Processing some specially crafted ASN.1 object identifiers or\ndata containing them may be very slow.\n\nImpact summary: Applications that use OBJ_obj2txt() directly, or use any of\nthe OpenSSL subsystems OCSP, PKCS7/SMIME, CMS, CMP/CRMF or TS with no message\nsize limit may experience notable to very long delays when processing those\nmessages, which may lead to a Denial of Service.\n\nAn OBJECT IDENTIFIER is composed of a series of numbers - sub-identifiers -\nmost of which have no size limit.  OBJ_obj2txt() may be used to translate\nan ASN.1 OBJECT IDENTIFIER given in DER encoding form (using the OpenSSL\ntype ASN1_OBJECT) to its canonical numeric text form, which are the\nsub-identifiers of the OBJECT IDENTIFIER in decimal form, separated by\nperiods.\n\nWhen one of the sub-identifiers in the OBJECT IDENTIFIER is very large\n(these are sizes that are seen as absurdly large, taking up tens or hundreds\nof KiBs), the translation to a decimal number in text may take a very long\ntime.  The time complexity is O(n^2) with 'n' being the size of the\nsub-identifiers in bytes (*).\n\nWith OpenSSL 3.0, support to fetch cryptographic algorithms using names /\nidentifiers in string form was introduced.  This includes using OBJECT\nIDENTIFIERs in canonical numeric text form as identifiers for fetching\nalgorithms.\n\nSuch OBJECT IDENTIFIERs may be received through the ASN.1 structure\nAlgorithmIdentifier, which is commonly used in multiple protocols to specify\nwhat cryptographic algorithm should be used to sign or verify, encrypt or\ndecrypt, or digest passed data.\n\nApplications that call OBJ_obj2txt() directly with untrusted data are\naffected, with any version of OpenSSL.  If the use is for the mere purpose\nof display, the severity is considered low.\n\nIn OpenSSL 3.0 and newer, this affects the subsystems OCSP, PKCS7/SMIME,\nCMS, CMP/CRMF or TS.  It also impacts anything that processes X.509\ncertificates, including simple things like verifying its signature.\n\nThe impact on TLS is relatively low, because all versions of OpenSSL have a\n100KiB limit on the peer's certificate chain.  Additionally, this only\nimpacts clients, or servers that have explicitly enabled client\nauthentication.\n\nIn OpenSSL 1.1.1 and 1.0.2, this only affects displaying diverse objects,\nsuch as X.509 certificates.  This is assumed to not happen in such a way\nthat it would cause a Denial of Service, so these versions are considered\nnot affected by this issue in such a way that it would be cause for concern,\nand the severity is therefore considered low.",
-              'diffID':        'sha256:aa5968d388b8652cd305e0e037751228967839d83d0cafbde5debf0b092e7c42',
-              'fixedVersions': [
-                '1.1.1u-r0'
-              ],
-              'installedVersion': '1.1.1t-r0',
-              'packageName':      'libcrypto1.1',
-              'purl':             'pkg:apk/alpine/libcrypto1.1@1.1.1t-r0?arch=x86_64&distro=3.16.4',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2023/05/30/1',
-                'https://access.redhat.com/errata/RHSA-2023:6330',
-                'https://access.redhat.com/security/cve/CVE-2023-2650',
-                'https://bugzilla.redhat.com/1858038',
-                'https://bugzilla.redhat.com/2207947',
-                'https://errata.almalinux.org/9/ALSA-2023-6330.html',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=423a2bc737a908ad0c77bda470b2b59dc879936b',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=853c5e56ee0b8650c73140816bb8b91d6163422c',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=9e209944b35cf82368071f160a744b6178f9b098',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=db779b0e10b047f2585615e0b8f2acdf21f8544a',
-                'https://linux.oracle.com/cve/CVE-2023-2650.html',
-                'https://linux.oracle.com/errata/ELSA-2023-6330.html',
-                'https://lists.debian.org/debian-lts-announce/2023/06/msg00011.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-2650',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0009',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://security.netapp.com/advisory/ntap-20230703-0001/',
-                'https://security.netapp.com/advisory/ntap-20231027-0009/',
-                'https://ubuntu.com/security/notices/USN-6119-1',
-                'https://ubuntu.com/security/notices/USN-6188-1',
-                'https://ubuntu.com/security/notices/USN-6672-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-2650',
-                'https://www.debian.org/security/2023/dsa-5417',
-                'https://www.openssl.org/news/secadv/20230530.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: Possible DoS translating ASN.1 object identifiers'
-            },
-            {
-              'cve':  'CVE-2023-3446',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L'
-                },
-                'redhat': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L'
-                }
-              },
-              'cwes': [
-                'CWE-606',
-                'CWE-1333'
-              ],
-              'description':   "Issue summary: Checking excessively long DH keys or parameters may be very slow.\n\nImpact summary: Applications that use the functions DH_check(), DH_check_ex()\nor EVP_PKEY_param_check() to check a DH key or DH parameters may experience long\ndelays. Where the key or parameters that are being checked have been obtained\nfrom an untrusted source this may lead to a Denial of Service.\n\nThe function DH_check() performs various checks on DH parameters. One of those\nchecks confirms that the modulus ('p' parameter) is not too large. Trying to use\na very large modulus is slow and OpenSSL will not normally use a modulus which\nis over 10,000 bits in length.\n\nHowever the DH_check() function checks numerous aspects of the key or parameters\nthat have been supplied. Some of those checks use the supplied modulus value\neven if it has already been found to be too large.\n\nAn application that calls DH_check() and supplies a key or parameters obtained\nfrom an untrusted source could be vulernable to a Denial of Service attack.\n\nThe function DH_check() is itself called by a number of other OpenSSL functions.\nAn application calling any of those other functions may similarly be affected.\nThe other functions affected by this are DH_check_ex() and\nEVP_PKEY_param_check().\n\nAlso vulnerable are the OpenSSL dhparam and pkeyparam command line applications\nwhen using the '-check' option.\n\nThe OpenSSL SSL/TLS implementation is not affected by this issue.\nThe OpenSSL 3.0 and 3.1 FIPS providers are not affected by this issue.",
-              'diffID':        'sha256:aa5968d388b8652cd305e0e037751228967839d83d0cafbde5debf0b092e7c42',
-              'fixedVersions': [
-                '1.1.1u-r2'
-              ],
-              'installedVersion': '1.1.1t-r0',
-              'packageName':      'libcrypto1.1',
-              'purl':             'pkg:apk/alpine/libcrypto1.1@1.1.1t-r0?arch=x86_64&distro=3.16.4',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2023/07/19/4',
-                'http://www.openwall.com/lists/oss-security/2023/07/19/5',
-                'http://www.openwall.com/lists/oss-security/2023/07/19/6',
-                'http://www.openwall.com/lists/oss-security/2023/07/31/1',
-                'http://www.openwall.com/lists/oss-security/2024/05/16/1',
-                'https://access.redhat.com/errata/RHSA-2024:2447',
-                'https://access.redhat.com/security/cve/CVE-2023-3446',
-                'https://bugzilla.redhat.com/2223016',
-                'https://bugzilla.redhat.com/2224962',
-                'https://bugzilla.redhat.com/2227852',
-                'https://bugzilla.redhat.com/2248616',
-                'https://bugzilla.redhat.com/2257571',
-                'https://bugzilla.redhat.com/2258502',
-                'https://bugzilla.redhat.com/2259944',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2224962',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2257582',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2257583',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2258677',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2258688',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2258691',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2258694',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2258700',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-36763',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-36764',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3446',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45229',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45231',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45232',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45233',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45235',
-                'https://errata.almalinux.org/9/ALSA-2024-2447.html',
-                'https://errata.rockylinux.org/RLSA-2024:2264',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=1fa20cf2f506113c761777127a38bce5068740eb',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=8780a896543a654e757db1b9396383f9d8095528',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=9a0a4d3c1e7138915563c0df4fe6a3f9377b839c',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=fc9867c1e03c22ebf56943be205202e576aabf23',
-                'https://linux.oracle.com/cve/CVE-2023-3446.html',
-                'https://linux.oracle.com/errata/ELSA-2024-2447.html',
-                'https://lists.debian.org/debian-lts-announce/2023/08/msg00019.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-3446',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://security.netapp.com/advisory/ntap-20230803-0011/',
-                'https://ubuntu.com/security/notices/USN-6435-1',
-                'https://ubuntu.com/security/notices/USN-6435-2',
-                'https://ubuntu.com/security/notices/USN-6450-1',
-                'https://ubuntu.com/security/notices/USN-6709-1',
-                'https://ubuntu.com/security/notices/USN-7018-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-3446',
-                'https://www.openssl.org/news/secadv/20230719.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: Excessive time spent checking DH keys and parameters'
-            },
-            {
-              'cve':  'CVE-2023-3817',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L'
-                },
-                'redhat': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L'
-                }
-              },
-              'cwes': [
-                'CWE-606',
-                'CWE-834'
-              ],
-              'description':   'Issue summary: Checking excessively long DH keys or parameters may be very slow.\n\nImpact summary: Applications that use the functions DH_check(), DH_check_ex()\nor EVP_PKEY_param_check() to check a DH key or DH parameters may experience long\ndelays. Where the key or parameters that are being checked have been obtained\nfrom an untrusted source this may lead to a Denial of Service.\n\nThe function DH_check() performs various checks on DH parameters. After fixing\nCVE-2023-3446 it was discovered that a large q parameter value can also trigger\nan overly long computation during some of these checks. A correct q value,\nif present, cannot be larger than the modulus p parameter, thus it is\nunnecessary to perform these checks if q is larger than p.\n\nAn application that calls DH_check() and supplies a key or parameters obtained\nfrom an untrusted source could be vulnerable to a Denial of Service attack.\n\nThe function DH_check() is itself called by a number of other OpenSSL functions.\nAn application calling any of those other functions may similarly be affected.\nThe other functions affected by this are DH_check_ex() and\nEVP_PKEY_param_check().\n\nAlso vulnerable are the OpenSSL dhparam and pkeyparam command line applications\nwhen using the "-check" option.\n\nThe OpenSSL SSL/TLS implementation is not affected by this issue.\n\nThe OpenSSL 3.0 and 3.1 FIPS providers are not affected by this issue.',
-              'diffID':        'sha256:aa5968d388b8652cd305e0e037751228967839d83d0cafbde5debf0b092e7c42',
-              'fixedVersions': [
-                '1.1.1v-r0'
-              ],
-              'installedVersion': '1.1.1t-r0',
-              'packageName':      'libcrypto1.1',
-              'purl':             'pkg:apk/alpine/libcrypto1.1@1.1.1t-r0?arch=x86_64&distro=3.16.4',
-              'references':       [
-                'http://seclists.org/fulldisclosure/2023/Jul/43',
-                'http://www.openwall.com/lists/oss-security/2023/07/31/1',
-                'http://www.openwall.com/lists/oss-security/2023/09/22/11',
-                'http://www.openwall.com/lists/oss-security/2023/09/22/9',
-                'http://www.openwall.com/lists/oss-security/2023/11/06/2',
-                'https://access.redhat.com/errata/RHSA-2024:2447',
-                'https://access.redhat.com/security/cve/CVE-2023-3817',
-                'https://bugzilla.redhat.com/2223016',
-                'https://bugzilla.redhat.com/2224962',
-                'https://bugzilla.redhat.com/2227852',
-                'https://bugzilla.redhat.com/2248616',
-                'https://bugzilla.redhat.com/2257571',
-                'https://bugzilla.redhat.com/2258502',
-                'https://bugzilla.redhat.com/2259944',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2224962',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2227852',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2248616',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2270358',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3446',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3817',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-5678',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-2408',
-                'https://errata.almalinux.org/9/ALSA-2024-2447.html',
-                'https://errata.rockylinux.org/RLSA-2023:7877',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=6a1eb62c29db6cb5eec707f9338aee00f44e26f5',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=869ad69aadd985c7b8ca6f4e5dd0eb274c9f3644',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=9002fd07327a91f35ba6c1307e71fa6fd4409b7f',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=91ddeba0f2269b017dc06c46c993a788974b1aa5',
-                'https://linux.oracle.com/cve/CVE-2023-3817.html',
-                'https://linux.oracle.com/errata/ELSA-2024-2447.html',
-                'https://lists.debian.org/debian-lts-announce/2023/08/msg00019.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-3817',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://security.netapp.com/advisory/ntap-20230818-0014/',
-                'https://security.netapp.com/advisory/ntap-20231027-0008/',
-                'https://security.netapp.com/advisory/ntap-20240621-0006/',
-                'https://ubuntu.com/security/notices/USN-6435-1',
-                'https://ubuntu.com/security/notices/USN-6435-2',
-                'https://ubuntu.com/security/notices/USN-6450-1',
-                'https://ubuntu.com/security/notices/USN-6709-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-3817',
-                'https://www.openssl.org/news/secadv/20230731.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'OpenSSL: Excessive time spent checking DH q parameter value'
-            },
-            {
-              'cve':  'CVE-2023-5678',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L'
-                },
-                'redhat': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L'
-                }
-              },
-              'cwes': [
-                'CWE-606',
-                'CWE-754'
-              ],
-              'description':   "Issue summary: Generating excessively long X9.42 DH keys or checking\nexcessively long X9.42 DH keys or parameters may be very slow.\n\nImpact summary: Applications that use the functions DH_generate_key() to\ngenerate an X9.42 DH key may experience long delays.  Likewise, applications\nthat use DH_check_pub_key(), DH_check_pub_key_ex() or EVP_PKEY_public_check()\nto check an X9.42 DH key or X9.42 DH parameters may experience long delays.\nWhere the key or parameters that are being checked have been obtained from\nan untrusted source this may lead to a Denial of Service.\n\nWhile DH_check() performs all the necessary checks (as of CVE-2023-3817),\nDH_check_pub_key() doesn't make any of these checks, and is therefore\nvulnerable for excessively large P and Q parameters.\n\nLikewise, while DH_generate_key() performs a check for an excessively large\nP, it doesn't check for an excessively large Q.\n\nAn application that calls DH_generate_key() or DH_check_pub_key() and\nsupplies a key or parameters obtained from an untrusted source could be\nvulnerable to a Denial of Service attack.\n\nDH_generate_key() and DH_check_pub_key() are also called by a number of\nother OpenSSL functions.  An application calling any of those other\nfunctions may similarly be affected.  The other functions affected by this\nare DH_check_pub_key_ex(), EVP_PKEY_public_check(), and EVP_PKEY_generate().\n\nAlso vulnerable are the OpenSSL pkey command line application when using the\n\"-pubcheck\" option, as well as the OpenSSL genpkey command line application.\n\nThe OpenSSL SSL/TLS implementation is not affected by this issue.\n\nThe OpenSSL 3.0 and 3.1 FIPS providers are not affected by this issue.",
-              'diffID':        'sha256:aa5968d388b8652cd305e0e037751228967839d83d0cafbde5debf0b092e7c42',
-              'fixedVersions': [
-                '1.1.1w-r1'
-              ],
-              'installedVersion': '1.1.1t-r0',
-              'packageName':      'libcrypto1.1',
-              'purl':             'pkg:apk/alpine/libcrypto1.1@1.1.1t-r0?arch=x86_64&distro=3.16.4',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2024/03/11/1',
-                'https://access.redhat.com/errata/RHSA-2024:2447',
-                'https://access.redhat.com/security/cve/CVE-2023-5678',
-                'https://bugzilla.redhat.com/2223016',
-                'https://bugzilla.redhat.com/2224962',
-                'https://bugzilla.redhat.com/2227852',
-                'https://bugzilla.redhat.com/2248616',
-                'https://bugzilla.redhat.com/2257571',
-                'https://bugzilla.redhat.com/2258502',
-                'https://bugzilla.redhat.com/2259944',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2224962',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2227852',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2248616',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2270358',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3446',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3817',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-5678',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-2408',
-                'https://errata.almalinux.org/9/ALSA-2024-2447.html',
-                'https://errata.rockylinux.org/RLSA-2023:7877',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=34efaef6c103d636ab507a0cc34dca4d3aecc055',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=710fee740904b6290fef0dd5536fbcedbc38ff0c',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=db925ae2e65d0d925adef429afc37f75bd1c2017',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=ddeb4b6c6d527e54ce9a99cba785c0f7776e54b6',
-                'https://linux.oracle.com/cve/CVE-2023-5678.html',
-                'https://linux.oracle.com/errata/ELSA-2024-2447.html',
-                'https://lists.debian.org/debian-lts-announce/2024/10/msg00033.html',
-                'https://lists.debian.org/debian-lts-announce/2024/11/msg00000.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-5678',
-                'https://security.netapp.com/advisory/ntap-20231130-0010/',
-                'https://ubuntu.com/security/notices/USN-6622-1',
-                'https://ubuntu.com/security/notices/USN-6632-1',
-                'https://ubuntu.com/security/notices/USN-6709-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-5678',
-                'https://www.openssl.org/news/secadv/20231106.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: Generating excessively long X9.42 DH keys or checking excessively long X9.42 DH keys or parameters may be very slow'
-            },
-            {
-              'cve':  'CVE-2023-0464',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-295'
-              ],
-              'description':   "A security vulnerability has been identified in all supported versions\n\nof OpenSSL related to the verification of X.509 certificate chains\nthat include policy constraints.  Attackers may be able to exploit this\nvulnerability by creating a malicious certificate chain that triggers\nexponential use of computational resources, leading to a denial-of-service\n(DoS) attack on affected systems.\n\nPolicy processing is disabled by default but can be enabled by passing\nthe `-policy' argument to the command line utilities or by calling the\n`X509_VERIFY_PARAM_set1_policies()' function.",
-              'diffID':        'sha256:aa5968d388b8652cd305e0e037751228967839d83d0cafbde5debf0b092e7c42',
-              'fixedVersions': [
-                '1.1.1t-r1'
-              ],
-              'installedVersion': '1.1.1t-r0',
-              'packageName':      'libssl1.1',
-              'purl':             'pkg:apk/alpine/libssl1.1@1.1.1t-r0?arch=x86_64&distro=3.16.4',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2023:3722',
-                'https://access.redhat.com/security/cve/CVE-2023-0464',
-                'https://bugzilla.redhat.com/2181082',
-                'https://bugzilla.redhat.com/2182561',
-                'https://bugzilla.redhat.com/2182565',
-                'https://bugzilla.redhat.com/2188461',
-                'https://bugzilla.redhat.com/2207947',
-                'https://errata.almalinux.org/9/ALSA-2023-3722.html',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=2017771e2db3e2b96f89bbe8766c3209f6a99545',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=2dcd4f1e3115f38cefa43e3efbe9b801c27e642e',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=879f7080d7e141f415c79eaa3a8ac4a3dad0348b',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=959c59c7a0164117e7f8366466a32bb1f8d77ff1',
-                'https://linux.oracle.com/cve/CVE-2023-0464.html',
-                'https://linux.oracle.com/errata/ELSA-2023-3722.html',
-                'https://lists.debian.org/debian-lts-announce/2023/06/msg00011.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-0464',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://security.netapp.com/advisory/ntap-20230406-0006/',
-                'https://security.netapp.com/advisory/ntap-20240621-0006/',
-                'https://ubuntu.com/security/notices/USN-6039-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.couchbase.com/alerts/',
-                'https://www.cve.org/CVERecord?id=CVE-2023-0464',
-                'https://www.debian.org/security/2023/dsa-5417',
-                'https://www.openssl.org/news/secadv/20230322.txt'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: Denial of service by excessive resource usage in verifying X509 policy constraints'
-            },
-            {
-              'cve':  'CVE-2023-0465',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N'
-                },
-                'redhat': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-295'
-              ],
-              'description':   "Applications that use a non-default option when verifying certificates may be\nvulnerable to an attack from a malicious CA to circumvent certain checks.\n\nInvalid certificate policies in leaf certificates are silently ignored by\nOpenSSL and other certificate policy checks are skipped for that certificate.\nA malicious CA could use this to deliberately assert invalid certificate policies\nin order to circumvent policy checking on the certificate altogether.\n\nPolicy processing is disabled by default but can be enabled by passing\nthe `-policy' argument to the command line utilities or by calling the\n`X509_VERIFY_PARAM_set1_policies()' function.",
-              'diffID':        'sha256:aa5968d388b8652cd305e0e037751228967839d83d0cafbde5debf0b092e7c42',
-              'fixedVersions': [
-                '1.1.1t-r2'
-              ],
-              'installedVersion': '1.1.1t-r0',
-              'packageName':      'libssl1.1',
-              'purl':             'pkg:apk/alpine/libssl1.1@1.1.1t-r0?arch=x86_64&distro=3.16.4',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2023:3722',
-                'https://access.redhat.com/security/cve/CVE-2023-0465',
-                'https://bugzilla.redhat.com/2181082',
-                'https://bugzilla.redhat.com/2182561',
-                'https://bugzilla.redhat.com/2182565',
-                'https://bugzilla.redhat.com/2188461',
-                'https://bugzilla.redhat.com/2207947',
-                'https://errata.almalinux.org/9/ALSA-2023-3722.html',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=10325176f3d3e98c6e2b3bf5ab1e3b334de6947a',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=1dd43e0709fece299b15208f36cc7c76209ba0bb',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=b013765abfa80036dc779dd0e50602c57bb3bf95',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=facfb1ab745646e97a1920977ae4a9965ea61d5c',
-                'https://linux.oracle.com/cve/CVE-2023-0465.html',
-                'https://linux.oracle.com/errata/ELSA-2023-3722.html',
-                'https://lists.debian.org/debian-lts-announce/2023/06/msg00011.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-0465',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://security.netapp.com/advisory/ntap-20230414-0001/',
-                'https://ubuntu.com/security/notices/USN-6039-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-0465',
-                'https://www.debian.org/security/2023/dsa-5417',
-                'https://www.openssl.org/news/secadv/20230328.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: Invalid certificate policies in leaf certificates are silently ignored'
-            },
-            {
-              'cve':  'CVE-2023-2650',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '6.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-770'
-              ],
-              'description':   "Issue summary: Processing some specially crafted ASN.1 object identifiers or\ndata containing them may be very slow.\n\nImpact summary: Applications that use OBJ_obj2txt() directly, or use any of\nthe OpenSSL subsystems OCSP, PKCS7/SMIME, CMS, CMP/CRMF or TS with no message\nsize limit may experience notable to very long delays when processing those\nmessages, which may lead to a Denial of Service.\n\nAn OBJECT IDENTIFIER is composed of a series of numbers - sub-identifiers -\nmost of which have no size limit.  OBJ_obj2txt() may be used to translate\nan ASN.1 OBJECT IDENTIFIER given in DER encoding form (using the OpenSSL\ntype ASN1_OBJECT) to its canonical numeric text form, which are the\nsub-identifiers of the OBJECT IDENTIFIER in decimal form, separated by\nperiods.\n\nWhen one of the sub-identifiers in the OBJECT IDENTIFIER is very large\n(these are sizes that are seen as absurdly large, taking up tens or hundreds\nof KiBs), the translation to a decimal number in text may take a very long\ntime.  The time complexity is O(n^2) with 'n' being the size of the\nsub-identifiers in bytes (*).\n\nWith OpenSSL 3.0, support to fetch cryptographic algorithms using names /\nidentifiers in string form was introduced.  This includes using OBJECT\nIDENTIFIERs in canonical numeric text form as identifiers for fetching\nalgorithms.\n\nSuch OBJECT IDENTIFIERs may be received through the ASN.1 structure\nAlgorithmIdentifier, which is commonly used in multiple protocols to specify\nwhat cryptographic algorithm should be used to sign or verify, encrypt or\ndecrypt, or digest passed data.\n\nApplications that call OBJ_obj2txt() directly with untrusted data are\naffected, with any version of OpenSSL.  If the use is for the mere purpose\nof display, the severity is considered low.\n\nIn OpenSSL 3.0 and newer, this affects the subsystems OCSP, PKCS7/SMIME,\nCMS, CMP/CRMF or TS.  It also impacts anything that processes X.509\ncertificates, including simple things like verifying its signature.\n\nThe impact on TLS is relatively low, because all versions of OpenSSL have a\n100KiB limit on the peer's certificate chain.  Additionally, this only\nimpacts clients, or servers that have explicitly enabled client\nauthentication.\n\nIn OpenSSL 1.1.1 and 1.0.2, this only affects displaying diverse objects,\nsuch as X.509 certificates.  This is assumed to not happen in such a way\nthat it would cause a Denial of Service, so these versions are considered\nnot affected by this issue in such a way that it would be cause for concern,\nand the severity is therefore considered low.",
-              'diffID':        'sha256:aa5968d388b8652cd305e0e037751228967839d83d0cafbde5debf0b092e7c42',
-              'fixedVersions': [
-                '1.1.1u-r0'
-              ],
-              'installedVersion': '1.1.1t-r0',
-              'packageName':      'libssl1.1',
-              'purl':             'pkg:apk/alpine/libssl1.1@1.1.1t-r0?arch=x86_64&distro=3.16.4',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2023/05/30/1',
-                'https://access.redhat.com/errata/RHSA-2023:6330',
-                'https://access.redhat.com/security/cve/CVE-2023-2650',
-                'https://bugzilla.redhat.com/1858038',
-                'https://bugzilla.redhat.com/2207947',
-                'https://errata.almalinux.org/9/ALSA-2023-6330.html',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=423a2bc737a908ad0c77bda470b2b59dc879936b',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=853c5e56ee0b8650c73140816bb8b91d6163422c',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=9e209944b35cf82368071f160a744b6178f9b098',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=db779b0e10b047f2585615e0b8f2acdf21f8544a',
-                'https://linux.oracle.com/cve/CVE-2023-2650.html',
-                'https://linux.oracle.com/errata/ELSA-2023-6330.html',
-                'https://lists.debian.org/debian-lts-announce/2023/06/msg00011.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-2650',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0009',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://security.netapp.com/advisory/ntap-20230703-0001/',
-                'https://security.netapp.com/advisory/ntap-20231027-0009/',
-                'https://ubuntu.com/security/notices/USN-6119-1',
-                'https://ubuntu.com/security/notices/USN-6188-1',
-                'https://ubuntu.com/security/notices/USN-6672-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-2650',
-                'https://www.debian.org/security/2023/dsa-5417',
-                'https://www.openssl.org/news/secadv/20230530.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: Possible DoS translating ASN.1 object identifiers'
-            },
-            {
-              'cve':  'CVE-2023-3446',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L'
-                },
-                'redhat': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L'
-                }
-              },
-              'cwes': [
-                'CWE-606',
-                'CWE-1333'
-              ],
-              'description':   "Issue summary: Checking excessively long DH keys or parameters may be very slow.\n\nImpact summary: Applications that use the functions DH_check(), DH_check_ex()\nor EVP_PKEY_param_check() to check a DH key or DH parameters may experience long\ndelays. Where the key or parameters that are being checked have been obtained\nfrom an untrusted source this may lead to a Denial of Service.\n\nThe function DH_check() performs various checks on DH parameters. One of those\nchecks confirms that the modulus ('p' parameter) is not too large. Trying to use\na very large modulus is slow and OpenSSL will not normally use a modulus which\nis over 10,000 bits in length.\n\nHowever the DH_check() function checks numerous aspects of the key or parameters\nthat have been supplied. Some of those checks use the supplied modulus value\neven if it has already been found to be too large.\n\nAn application that calls DH_check() and supplies a key or parameters obtained\nfrom an untrusted source could be vulernable to a Denial of Service attack.\n\nThe function DH_check() is itself called by a number of other OpenSSL functions.\nAn application calling any of those other functions may similarly be affected.\nThe other functions affected by this are DH_check_ex() and\nEVP_PKEY_param_check().\n\nAlso vulnerable are the OpenSSL dhparam and pkeyparam command line applications\nwhen using the '-check' option.\n\nThe OpenSSL SSL/TLS implementation is not affected by this issue.\nThe OpenSSL 3.0 and 3.1 FIPS providers are not affected by this issue.",
-              'diffID':        'sha256:aa5968d388b8652cd305e0e037751228967839d83d0cafbde5debf0b092e7c42',
-              'fixedVersions': [
-                '1.1.1u-r2'
-              ],
-              'installedVersion': '1.1.1t-r0',
-              'packageName':      'libssl1.1',
-              'purl':             'pkg:apk/alpine/libssl1.1@1.1.1t-r0?arch=x86_64&distro=3.16.4',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2023/07/19/4',
-                'http://www.openwall.com/lists/oss-security/2023/07/19/5',
-                'http://www.openwall.com/lists/oss-security/2023/07/19/6',
-                'http://www.openwall.com/lists/oss-security/2023/07/31/1',
-                'http://www.openwall.com/lists/oss-security/2024/05/16/1',
-                'https://access.redhat.com/errata/RHSA-2024:2447',
-                'https://access.redhat.com/security/cve/CVE-2023-3446',
-                'https://bugzilla.redhat.com/2223016',
-                'https://bugzilla.redhat.com/2224962',
-                'https://bugzilla.redhat.com/2227852',
-                'https://bugzilla.redhat.com/2248616',
-                'https://bugzilla.redhat.com/2257571',
-                'https://bugzilla.redhat.com/2258502',
-                'https://bugzilla.redhat.com/2259944',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2224962',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2257582',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2257583',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2258677',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2258688',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2258691',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2258694',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2258700',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-36763',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-36764',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3446',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45229',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45231',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45232',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45233',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45235',
-                'https://errata.almalinux.org/9/ALSA-2024-2447.html',
-                'https://errata.rockylinux.org/RLSA-2024:2264',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=1fa20cf2f506113c761777127a38bce5068740eb',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=8780a896543a654e757db1b9396383f9d8095528',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=9a0a4d3c1e7138915563c0df4fe6a3f9377b839c',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=fc9867c1e03c22ebf56943be205202e576aabf23',
-                'https://linux.oracle.com/cve/CVE-2023-3446.html',
-                'https://linux.oracle.com/errata/ELSA-2024-2447.html',
-                'https://lists.debian.org/debian-lts-announce/2023/08/msg00019.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-3446',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://security.netapp.com/advisory/ntap-20230803-0011/',
-                'https://ubuntu.com/security/notices/USN-6435-1',
-                'https://ubuntu.com/security/notices/USN-6435-2',
-                'https://ubuntu.com/security/notices/USN-6450-1',
-                'https://ubuntu.com/security/notices/USN-6709-1',
-                'https://ubuntu.com/security/notices/USN-7018-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-3446',
-                'https://www.openssl.org/news/secadv/20230719.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: Excessive time spent checking DH keys and parameters'
-            },
-            {
-              'cve':  'CVE-2023-3817',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L'
-                },
-                'redhat': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L'
-                }
-              },
-              'cwes': [
-                'CWE-606',
-                'CWE-834'
-              ],
-              'description':   'Issue summary: Checking excessively long DH keys or parameters may be very slow.\n\nImpact summary: Applications that use the functions DH_check(), DH_check_ex()\nor EVP_PKEY_param_check() to check a DH key or DH parameters may experience long\ndelays. Where the key or parameters that are being checked have been obtained\nfrom an untrusted source this may lead to a Denial of Service.\n\nThe function DH_check() performs various checks on DH parameters. After fixing\nCVE-2023-3446 it was discovered that a large q parameter value can also trigger\nan overly long computation during some of these checks. A correct q value,\nif present, cannot be larger than the modulus p parameter, thus it is\nunnecessary to perform these checks if q is larger than p.\n\nAn application that calls DH_check() and supplies a key or parameters obtained\nfrom an untrusted source could be vulnerable to a Denial of Service attack.\n\nThe function DH_check() is itself called by a number of other OpenSSL functions.\nAn application calling any of those other functions may similarly be affected.\nThe other functions affected by this are DH_check_ex() and\nEVP_PKEY_param_check().\n\nAlso vulnerable are the OpenSSL dhparam and pkeyparam command line applications\nwhen using the "-check" option.\n\nThe OpenSSL SSL/TLS implementation is not affected by this issue.\n\nThe OpenSSL 3.0 and 3.1 FIPS providers are not affected by this issue.',
-              'diffID':        'sha256:aa5968d388b8652cd305e0e037751228967839d83d0cafbde5debf0b092e7c42',
-              'fixedVersions': [
-                '1.1.1v-r0'
-              ],
-              'installedVersion': '1.1.1t-r0',
-              'packageName':      'libssl1.1',
-              'purl':             'pkg:apk/alpine/libssl1.1@1.1.1t-r0?arch=x86_64&distro=3.16.4',
-              'references':       [
-                'http://seclists.org/fulldisclosure/2023/Jul/43',
-                'http://www.openwall.com/lists/oss-security/2023/07/31/1',
-                'http://www.openwall.com/lists/oss-security/2023/09/22/11',
-                'http://www.openwall.com/lists/oss-security/2023/09/22/9',
-                'http://www.openwall.com/lists/oss-security/2023/11/06/2',
-                'https://access.redhat.com/errata/RHSA-2024:2447',
-                'https://access.redhat.com/security/cve/CVE-2023-3817',
-                'https://bugzilla.redhat.com/2223016',
-                'https://bugzilla.redhat.com/2224962',
-                'https://bugzilla.redhat.com/2227852',
-                'https://bugzilla.redhat.com/2248616',
-                'https://bugzilla.redhat.com/2257571',
-                'https://bugzilla.redhat.com/2258502',
-                'https://bugzilla.redhat.com/2259944',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2224962',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2227852',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2248616',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2270358',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3446',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3817',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-5678',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-2408',
-                'https://errata.almalinux.org/9/ALSA-2024-2447.html',
-                'https://errata.rockylinux.org/RLSA-2023:7877',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=6a1eb62c29db6cb5eec707f9338aee00f44e26f5',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=869ad69aadd985c7b8ca6f4e5dd0eb274c9f3644',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=9002fd07327a91f35ba6c1307e71fa6fd4409b7f',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=91ddeba0f2269b017dc06c46c993a788974b1aa5',
-                'https://linux.oracle.com/cve/CVE-2023-3817.html',
-                'https://linux.oracle.com/errata/ELSA-2024-2447.html',
-                'https://lists.debian.org/debian-lts-announce/2023/08/msg00019.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-3817',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://security.netapp.com/advisory/ntap-20230818-0014/',
-                'https://security.netapp.com/advisory/ntap-20231027-0008/',
-                'https://security.netapp.com/advisory/ntap-20240621-0006/',
-                'https://ubuntu.com/security/notices/USN-6435-1',
-                'https://ubuntu.com/security/notices/USN-6435-2',
-                'https://ubuntu.com/security/notices/USN-6450-1',
-                'https://ubuntu.com/security/notices/USN-6709-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-3817',
-                'https://www.openssl.org/news/secadv/20230731.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'OpenSSL: Excessive time spent checking DH q parameter value'
-            },
-            {
-              'cve':  'CVE-2023-5678',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L'
-                },
-                'redhat': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L'
-                }
-              },
-              'cwes': [
-                'CWE-606',
-                'CWE-754'
-              ],
-              'description':   "Issue summary: Generating excessively long X9.42 DH keys or checking\nexcessively long X9.42 DH keys or parameters may be very slow.\n\nImpact summary: Applications that use the functions DH_generate_key() to\ngenerate an X9.42 DH key may experience long delays.  Likewise, applications\nthat use DH_check_pub_key(), DH_check_pub_key_ex() or EVP_PKEY_public_check()\nto check an X9.42 DH key or X9.42 DH parameters may experience long delays.\nWhere the key or parameters that are being checked have been obtained from\nan untrusted source this may lead to a Denial of Service.\n\nWhile DH_check() performs all the necessary checks (as of CVE-2023-3817),\nDH_check_pub_key() doesn't make any of these checks, and is therefore\nvulnerable for excessively large P and Q parameters.\n\nLikewise, while DH_generate_key() performs a check for an excessively large\nP, it doesn't check for an excessively large Q.\n\nAn application that calls DH_generate_key() or DH_check_pub_key() and\nsupplies a key or parameters obtained from an untrusted source could be\nvulnerable to a Denial of Service attack.\n\nDH_generate_key() and DH_check_pub_key() are also called by a number of\nother OpenSSL functions.  An application calling any of those other\nfunctions may similarly be affected.  The other functions affected by this\nare DH_check_pub_key_ex(), EVP_PKEY_public_check(), and EVP_PKEY_generate().\n\nAlso vulnerable are the OpenSSL pkey command line application when using the\n\"-pubcheck\" option, as well as the OpenSSL genpkey command line application.\n\nThe OpenSSL SSL/TLS implementation is not affected by this issue.\n\nThe OpenSSL 3.0 and 3.1 FIPS providers are not affected by this issue.",
-              'diffID':        'sha256:aa5968d388b8652cd305e0e037751228967839d83d0cafbde5debf0b092e7c42',
-              'fixedVersions': [
-                '1.1.1w-r1'
-              ],
-              'installedVersion': '1.1.1t-r0',
-              'packageName':      'libssl1.1',
-              'purl':             'pkg:apk/alpine/libssl1.1@1.1.1t-r0?arch=x86_64&distro=3.16.4',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2024/03/11/1',
-                'https://access.redhat.com/errata/RHSA-2024:2447',
-                'https://access.redhat.com/security/cve/CVE-2023-5678',
-                'https://bugzilla.redhat.com/2223016',
-                'https://bugzilla.redhat.com/2224962',
-                'https://bugzilla.redhat.com/2227852',
-                'https://bugzilla.redhat.com/2248616',
-                'https://bugzilla.redhat.com/2257571',
-                'https://bugzilla.redhat.com/2258502',
-                'https://bugzilla.redhat.com/2259944',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2224962',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2227852',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2248616',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2270358',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3446',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3817',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-5678',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-2408',
-                'https://errata.almalinux.org/9/ALSA-2024-2447.html',
-                'https://errata.rockylinux.org/RLSA-2023:7877',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=34efaef6c103d636ab507a0cc34dca4d3aecc055',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=710fee740904b6290fef0dd5536fbcedbc38ff0c',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=db925ae2e65d0d925adef429afc37f75bd1c2017',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=ddeb4b6c6d527e54ce9a99cba785c0f7776e54b6',
-                'https://linux.oracle.com/cve/CVE-2023-5678.html',
-                'https://linux.oracle.com/errata/ELSA-2024-2447.html',
-                'https://lists.debian.org/debian-lts-announce/2024/10/msg00033.html',
-                'https://lists.debian.org/debian-lts-announce/2024/11/msg00000.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-5678',
-                'https://security.netapp.com/advisory/ntap-20231130-0010/',
-                'https://ubuntu.com/security/notices/USN-6622-1',
-                'https://ubuntu.com/security/notices/USN-6632-1',
-                'https://ubuntu.com/security/notices/USN-6709-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-5678',
-                'https://www.openssl.org/news/secadv/20231106.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: Generating excessively long X9.42 DH keys or checking excessively long X9.42 DH keys or parameters may be very slow'
-            },
-            {
-              'cve':  'CVE-2025-26519',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-787'
-              ],
-              'description':   'musl libc 0.9.13 through 1.2.5 before 1.2.6 has an out-of-bounds write vulnerability when an attacker can trigger iconv conversion of untrusted EUC-KR text to UTF-8.',
-              'diffID':        'sha256:aa5968d388b8652cd305e0e037751228967839d83d0cafbde5debf0b092e7c42',
-              'fixedVersions': [
-                '1.2.3-r4'
-              ],
-              'installedVersion': '1.2.3-r2',
-              'packageName':      'musl',
-              'purl':             'pkg:apk/alpine/musl@1.2.3-r2?arch=x86_64&distro=3.16.4',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2025/02/13/2',
-                'http://www.openwall.com/lists/oss-security/2025/02/13/3',
-                'http://www.openwall.com/lists/oss-security/2025/02/13/4',
-                'http://www.openwall.com/lists/oss-security/2025/02/13/5',
-                'http://www.openwall.com/lists/oss-security/2025/02/14/5',
-                'http://www.openwall.com/lists/oss-security/2025/02/14/6',
-                'https://git.musl-libc.org/cgit/musl/commit/?id=c47ad25ea3b484e10326f933e927c0bc8cded3da',
-                'https://git.musl-libc.org/cgit/musl/commit/?id=e5adcd97b5196e29991b524237381a0202a60659',
-                'https://www.openwall.com/lists/oss-security/2025/02/13/2'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'musl libc 0.9.13 through 1.2.5 before 1.2.6 has an out-of-bounds write ...'
-            },
-            {
-              'cve':  'CVE-2025-26519',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-787'
-              ],
-              'description':   'musl libc 0.9.13 through 1.2.5 before 1.2.6 has an out-of-bounds write vulnerability when an attacker can trigger iconv conversion of untrusted EUC-KR text to UTF-8.',
-              'diffID':        'sha256:aa5968d388b8652cd305e0e037751228967839d83d0cafbde5debf0b092e7c42',
-              'fixedVersions': [
-                '1.2.3-r4'
-              ],
-              'installedVersion': '1.2.3-r2',
-              'packageName':      'musl-utils',
-              'purl':             'pkg:apk/alpine/musl-utils@1.2.3-r2?arch=x86_64&distro=3.16.4',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2025/02/13/2',
-                'http://www.openwall.com/lists/oss-security/2025/02/13/3',
-                'http://www.openwall.com/lists/oss-security/2025/02/13/4',
-                'http://www.openwall.com/lists/oss-security/2025/02/13/5',
-                'http://www.openwall.com/lists/oss-security/2025/02/14/5',
-                'http://www.openwall.com/lists/oss-security/2025/02/14/6',
-                'https://git.musl-libc.org/cgit/musl/commit/?id=c47ad25ea3b484e10326f933e927c0bc8cded3da',
-                'https://git.musl-libc.org/cgit/musl/commit/?id=e5adcd97b5196e29991b524237381a0202a60659',
-                'https://www.openwall.com/lists/oss-security/2025/02/13/2'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'musl libc 0.9.13 through 1.2.5 before 1.2.6 has an out-of-bounds write ...'
-            },
-            {
-              'cve':  'CVE-2023-42366',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.5',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.1',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-787'
-              ],
-              'description':   'A heap-buffer-overflow was discovered in BusyBox v.1.36.1 in the next_token function at awk.c:1159.',
-              'diffID':        'sha256:aa5968d388b8652cd305e0e037751228967839d83d0cafbde5debf0b092e7c42',
-              'fixedVersions': [
-                '1.35.0-r18'
-              ],
-              'installedVersion': '1.35.0-r17',
-              'packageName':      'ssl_client',
-              'purl':             'pkg:apk/alpine/ssl_client@1.35.0-r17?arch=x86_64&distro=3.16.4',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2023-42366',
-                'https://bugs.busybox.net/show_bug.cgi?id=15874',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-42366',
-                'https://security.netapp.com/advisory/ntap-20241206-0007/',
-                'https://www.cve.org/CVERecord?id=CVE-2023-42366'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'busybox: A heap-buffer-overflow'
-            }
-          ]
-        }
-      ],
-      'summary': {
-        'critical':   0,
-        'high':       4,
-        'low':        0,
-        'medium':     12,
-        'suppressed': 0,
-        'unknown':    0
-      }
-    }
-  },
-  {
-    'id':    'default/73c5851937eb59914d87a70e39f645f821f2c8aa0a65d2e999f00d6c4e2934a0',
-    'type':  'storage.sbomscanner.kubewarden.io.vulnerabilityreport',
-    'links': {
-      'patch':  'https://localhost:8005/v1/storage.sbomscanner.kubewarden.io.vulnerabilityreports/default/73c5851937eb59914d87a70e39f645f821f2c8aa0a65d2e999f00d6c4e2934a0',
-      'remove': 'https://localhost:8005/v1/storage.sbomscanner.kubewarden.io.vulnerabilityreports/default/73c5851937eb59914d87a70e39f645f821f2c8aa0a65d2e999f00d6c4e2934a0',
-      'self':   'https://localhost:8005/v1/storage.sbomscanner.kubewarden.io.vulnerabilityreports/default/73c5851937eb59914d87a70e39f645f821f2c8aa0a65d2e999f00d6c4e2934a0',
-      'update': 'https://localhost:8005/v1/storage.sbomscanner.kubewarden.io.vulnerabilityreports/default/73c5851937eb59914d87a70e39f645f821f2c8aa0a65d2e999f00d6c4e2934a0',
-      'view':   'https://localhost:8005/apis/storage.sbomscanner.kubewarden.io/v1alpha1/namespaces/default/vulnerabilityreports/73c5851937eb59914d87a70e39f645f821f2c8aa0a65d2e999f00d6c4e2934a0'
-    },
-    '_id':           'default/73c5851937eb59914d87a70e39f645f821f2c8aa0a65d2e999f00d6c4e2934a0',
-    'apiVersion':    'storage.sbomscanner.kubewarden.io/v1alpha1',
-    'imageMetadata': {
-      'digest':      'sha256:7ab44b9258071c702f16a5121b4550ed25f2bfce8f93952a9e61a1910803c02c',
-      'platform':    'linux/amd64',
-      'registry':    'demo-02',
-      'registryURI': 'ghcr.io',
-      'repository':  'linuxcontainers/alpine',
-      'tag':         '3.14.4'
-    },
-    'kind':     'VulnerabilityReport',
-    'metadata': {
-      'creationTimestamp': '2026-01-09T22:47:11Z',
-      'fields':            [
-        '73c5851937eb59914d87a70e39f645f821f2c8aa0a65d2e999f00d6c4e2934a0',
-        'ghcr.io/linuxcontainers/alpine:3.14.4',
-        'linux/amd64',
-        '19 (0 suppressed)'
-      ],
-      'labels': {
-        'app.kubernetes.io/managed-by':          'sbomscanner',
-        'app.kubernetes.io/part-of':             'sbomscanner',
-        'sbomscanner.kubewarden.io/scanjob-uid': '42184d01-4b15-466f-98aa-e802d1b6b6b8'
-      },
-      'managedFields': [
-        {
-          'apiVersion': 'storage.sbomscanner.kubewarden.io/v1alpha1',
-          'fieldsType': 'FieldsV1',
-          'fieldsV1':   {
-            'f:imageMetadata': {
-              'f:digest':      {},
-              'f:platform':    {},
-              'f:registry':    {},
-              'f:registryURI': {},
-              'f:repository':  {},
-              'f:tag':         {}
-            },
-            'f:metadata': {
-              'f:labels': {
-                '.':                                       {},
-                'f:app.kubernetes.io/managed-by':          {},
-                'f:app.kubernetes.io/part-of':             {},
-                'f:sbomscanner.kubewarden.io/scanjob-uid': {}
-              },
-              'f:ownerReferences': {
-                '.':                                                {},
-                'k:{"uid":"6f436ace-795a-4587-a0b2-c721a0e2e3fc"}': {}
-              }
-            },
-            'f:report': {
-              'f:results': {},
-              'f:summary': {
-                'f:critical': {},
-                'f:high':     {},
-                'f:medium':   {}
-              }
-            }
-          },
-          'manager':   'worker',
-          'operation': 'Update',
-          'time':      '2026-01-28T18:34:39Z'
-        }
-      ],
-      'name':            '73c5851937eb59914d87a70e39f645f821f2c8aa0a65d2e999f00d6c4e2934a0',
-      'namespace':       'default',
-      'ownerReferences': [
-        {
-          'apiVersion':         'storage.sbomscanner.kubewarden.io/v1alpha1',
-          'blockOwnerDeletion': true,
-          'controller':         true,
-          'kind':               'SBOM',
-          'name':               '73c5851937eb59914d87a70e39f645f821f2c8aa0a65d2e999f00d6c4e2934a0',
-          'uid':                '6f436ace-795a-4587-a0b2-c721a0e2e3fc'
-        }
-      ],
-      'relationships': [
-        {
-          'fromId':   'default/73c5851937eb59914d87a70e39f645f821f2c8aa0a65d2e999f00d6c4e2934a0',
-          'fromType': 'storage.sbomscanner.kubewarden.io.sbom',
-          'rel':      'owner',
-          'state':    'active',
-          'message':  'Resource is current'
-        }
-      ],
-      'resourceVersion': '10',
-      'state':           {
-        'error':         false,
-        'message':       'Resource is current',
-        'name':          'active',
-        'transitioning': false
-      },
-      'uid': '48e9a08a-6e11-4d93-ae7f-4d5cb7a7b982'
-    },
-    'report': {
-      'results': [
-        {
-          'class':           'os-pkgs',
-          'target':          '/var/run/worker/trivy.sbom.1650572536.json (alpine 3.14.4)',
-          'type':            'alpine',
-          'vulnerabilities': [
-            {
-              'cve':  'CVE-2022-28391',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '8.8',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-88'
-              ],
-              'description':   "BusyBox through 1.35.0 allows remote attackers to execute arbitrary code if netstat is used to print a DNS PTR record's value to a VT compatible terminal. Alternatively, the attacker could choose to change the terminal's colors.",
-              'diffID':        'sha256:2e38978dfe406188f56968f907e9c3dd2692a5d21671e2307bd5a503fb08f8b0',
-              'fixedVersions': [
-                '1.33.1-r7'
-              ],
-              'installedVersion': '1.33.1-r6',
-              'packageName':      'busybox',
-              'purl':             'pkg:apk/alpine/busybox@1.33.1-r6?arch=x86_64&distro=3.14.4',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2022-28391',
-                'https://git.alpinelinux.org/aports/plain/main/busybox/0001-libbb-sockaddr2str-ensure-only-printable-characters-.patch',
-                'https://git.alpinelinux.org/aports/plain/main/busybox/0002-nslookup-sanitize-all-printed-strings-with-printable.patch',
-                'https://gitlab.alpinelinux.org/alpine/aports/-/issues/13661',
-                'https://nvd.nist.gov/vuln/detail/CVE-2022-28391',
-                'https://www.cve.org/CVERecord?id=CVE-2022-28391'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: remote attackers may execute arbitrary code if netstat is used'
-            },
-            {
-              'cve':  'CVE-2022-4450',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'nvd': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-415'
-              ],
-              'description':   'The function PEM_read_bio_ex() reads a PEM file from a BIO and parses and\ndecodes the "name" (e.g. "CERTIFICATE"), any header data and the payload data.\nIf the function succeeds then the "name_out", "header" and "data" arguments are\npopulated with pointers to buffers containing the relevant decoded data. The\ncaller is responsible for freeing those buffers. It is possible to construct a\nPEM file that results in 0 bytes of payload data. In this case PEM_read_bio_ex()\nwill return a failure code but will populate the header argument with a pointer\nto a buffer that has already been freed. If the caller also frees this buffer\nthen a double free will occur. This will most likely lead to a crash. This\ncould be exploited by an attacker who has the ability to supply malicious PEM\nfiles for parsing to achieve a denial of service attack.\n\nThe functions PEM_read_bio() and PEM_read() are simple wrappers around\nPEM_read_bio_ex() and therefore these functions are also directly affected.\n\nThese functions are also called indirectly by a number of other OpenSSL\nfunctions including PEM_X509_INFO_read_bio_ex() and\nSSL_CTX_use_serverinfo_file() which are also vulnerable. Some OpenSSL internal\nuses of these functions are not vulnerable because the caller does not free the\nheader argument if PEM_read_bio_ex() returns a failure code. These locations\ninclude the PEM_read_bio_TYPE() functions as well as the decoders introduced in\nOpenSSL 3.0.\n\nThe OpenSSL asn1parse command line application is also impacted by this issue.',
-              'diffID':        'sha256:2e38978dfe406188f56968f907e9c3dd2692a5d21671e2307bd5a503fb08f8b0',
-              'fixedVersions': [
-                '1.1.1t-r0'
-              ],
-              'installedVersion': '1.1.1n-r0',
-              'packageName':      'libcrypto1.1',
-              'purl':             'pkg:apk/alpine/libcrypto1.1@1.1.1n-r0?arch=x86_64&distro=3.14.4',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2023:2165',
-                'https://access.redhat.com/security/cve/CVE-2022-4450',
-                'https://bugzilla.redhat.com/1960321',
-                'https://bugzilla.redhat.com/2164440',
-                'https://bugzilla.redhat.com/2164487',
-                'https://bugzilla.redhat.com/2164492',
-                'https://bugzilla.redhat.com/2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144000',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144003',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144006',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144008',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144010',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144012',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144015',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144017',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144019',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2145170',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2158412',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164440',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164487',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164488',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164492',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164497',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164499',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164500',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4203',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4304',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4450',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0215',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0216',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0217',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0286',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0401',
-                'https://errata.almalinux.org/9/ALSA-2023-2165.html',
-                'https://errata.rockylinux.org/RLSA-2023:0946',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=63bcf189be73a9cc1264059bed6f57974be74a83',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=bbcf509bd046b34cca19c766bbddc31683d0858b',
-                'https://linux.oracle.com/cve/CVE-2022-4450.html',
-                'https://linux.oracle.com/errata/ELSA-2023-32791.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2022-4450',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0003',
-                'https://rustsec.org/advisories/RUSTSEC-2023-0010.html',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://ubuntu.com/security/notices/USN-5844-1',
-                'https://ubuntu.com/security/notices/USN-6564-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2022-4450',
-                'https://www.openssl.org/news/secadv/20230207.txt'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: double free after calling PEM_read_bio_ex'
-            },
-            {
-              'cve':  'CVE-2023-0215',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'nvd': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   'The public API function BIO_new_NDEF is a helper function used for streaming\nASN.1 data via a BIO. It is primarily used internally to OpenSSL to support the\nSMIME, CMS and PKCS7 streaming capabilities, but may also be called directly by\nend user applications.\n\nThe function receives a BIO from the caller, prepends a new BIO_f_asn1 filter\nBIO onto the front of it to form a BIO chain, and then returns the new head of\nthe BIO chain to the caller. Under certain conditions, for example if a CMS\nrecipient public key is invalid, the new filter BIO is freed and the function\nreturns a NULL result indicating a failure. However, in this case, the BIO chain\nis not properly cleaned up and the BIO passed by the caller still retains\ninternal pointers to the previously freed filter BIO. If the caller then goes on\nto call BIO_pop() on the BIO then a use-after-free will occur. This will most\nlikely result in a crash.\n\n\n\nThis scenario occurs directly in the internal function B64_write_ASN1() which\nmay cause BIO_new_NDEF() to be called and will subsequently call BIO_pop() on\nthe BIO. This internal function is in turn called by the public API functions\nPEM_write_bio_ASN1_stream, PEM_write_bio_CMS_stream, PEM_write_bio_PKCS7_stream,\nSMIME_write_ASN1, SMIME_write_CMS and SMIME_write_PKCS7.\n\nOther public API functions that may be impacted by this include\ni2d_ASN1_bio_stream, BIO_new_CMS, BIO_new_PKCS7, i2d_CMS_bio_stream and\ni2d_PKCS7_bio_stream.\n\nThe OpenSSL cms and smime command line applications are similarly affected.',
-              'diffID':        'sha256:2e38978dfe406188f56968f907e9c3dd2692a5d21671e2307bd5a503fb08f8b0',
-              'fixedVersions': [
-                '1.1.1t-r0'
-              ],
-              'installedVersion': '1.1.1n-r0',
-              'packageName':      'libcrypto1.1',
-              'purl':             'pkg:apk/alpine/libcrypto1.1@1.1.1n-r0?arch=x86_64&distro=3.14.4',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2023:2165',
-                'https://access.redhat.com/security/cve/CVE-2023-0215',
-                'https://bugzilla.redhat.com/1960321',
-                'https://bugzilla.redhat.com/2164440',
-                'https://bugzilla.redhat.com/2164487',
-                'https://bugzilla.redhat.com/2164492',
-                'https://bugzilla.redhat.com/2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144000',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144003',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144006',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144008',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144010',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144012',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144015',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144017',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144019',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2145170',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2158412',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164440',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164487',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164488',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164492',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164497',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164499',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164500',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4203',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4304',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4450',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0215',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0216',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0217',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0286',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0401',
-                'https://errata.almalinux.org/9/ALSA-2023-2165.html',
-                'https://errata.rockylinux.org/RLSA-2023:0946',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=8818064ce3c3c0f1b740a5aaba2a987e75bfbafd',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=9816136fe31d92ace4037d5da5257f763aeeb4eb',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=c3829dd8825c654652201e16f8a0a0c46ee3f344',
-                'https://linux.oracle.com/cve/CVE-2023-0215.html',
-                'https://linux.oracle.com/errata/ELSA-2023-32791.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-0215',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0003',
-                'https://rustsec.org/advisories/RUSTSEC-2023-0009.html',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://security.netapp.com/advisory/ntap-20230427-0007',
-                'https://security.netapp.com/advisory/ntap-20230427-0007/',
-                'https://security.netapp.com/advisory/ntap-20230427-0009',
-                'https://security.netapp.com/advisory/ntap-20230427-0009/',
-                'https://security.netapp.com/advisory/ntap-20240621-0006',
-                'https://security.netapp.com/advisory/ntap-20240621-0006/',
-                'https://ubuntu.com/security/notices/USN-5844-1',
-                'https://ubuntu.com/security/notices/USN-5845-1',
-                'https://ubuntu.com/security/notices/USN-5845-2',
-                'https://ubuntu.com/security/notices/USN-6564-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-0215',
-                'https://www.openssl.org/news/secadv/20230207.txt'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: use-after-free following BIO_new_NDEF'
-            },
-            {
-              'cve':  'CVE-2023-0286',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '7.4',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H'
-                },
-                'nvd': {
-                  'v3score':  '7.4',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.4',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-843'
-              ],
-              'description':   'There is a type confusion vulnerability relating to X.400 address processing\ninside an X.509 GeneralName. X.400 addresses were parsed as an ASN1_STRING but\nthe public structure definition for GENERAL_NAME incorrectly specified the type\nof the x400Address field as ASN1_TYPE. This field is subsequently interpreted by\nthe OpenSSL function GENERAL_NAME_cmp as an ASN1_TYPE rather than an\nASN1_STRING.\n\nWhen CRL checking is enabled (i.e. the application sets the\nX509_V_FLAG_CRL_CHECK flag), this vulnerability may allow an attacker to pass\narbitrary pointers to a memcmp call, enabling them to read memory contents or\nenact a denial of service. In most cases, the attack requires the attacker to\nprovide both the certificate chain and CRL, neither of which need to have a\nvalid signature. If the attacker only controls one of these inputs, the other\ninput must already contain an X.400 address as a CRL distribution point, which\nis uncommon. As such, this vulnerability is most likely to only affect\napplications which have implemented their own functionality for retrieving CRLs\nover a network.',
-              'diffID':        'sha256:2e38978dfe406188f56968f907e9c3dd2692a5d21671e2307bd5a503fb08f8b0',
-              'fixedVersions': [
-                '1.1.1t-r0'
-              ],
-              'installedVersion': '1.1.1n-r0',
-              'packageName':      'libcrypto1.1',
-              'purl':             'pkg:apk/alpine/libcrypto1.1@1.1.1n-r0?arch=x86_64&distro=3.14.4',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2025:7937',
-                'https://access.redhat.com/security/cve/CVE-2023-0286',
-                'https://access.redhat.com/security/cve/cve-2023-0286',
-                'https://bugzilla.redhat.com/2164440',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144000',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144003',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144006',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144008',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144010',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144012',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144015',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144017',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144019',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2145170',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2158412',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164440',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164487',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164488',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164492',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164497',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164499',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164500',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4203',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4304',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4450',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0215',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0216',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0217',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0286',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0401',
-                'https://errata.almalinux.org/9/ALSA-2025-7937.html',
-                'https://errata.rockylinux.org/RLSA-2023:0946',
-                'https://ftp.openbsd.org/pub/OpenBSD/LibreSSL/libressl-3.6.2-relnotes.txt',
-                'https://ftp.openbsd.org/pub/OpenBSD/patches/7.2/common/018_x509.patch.sig',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=2c6c9d439b484e1ba9830d8454a34fa4f80fdfe9',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=2f7530077e0ef79d98718138716bc51ca0cad658',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=fd2af07dc083a350c959147097003a14a5e8ac4d',
-                'https://github.com/pyca/cryptography',
-                'https://github.com/pyca/cryptography/security/advisories/GHSA-x4qr-2fvf-3mr5',
-                'https://linux.oracle.com/cve/CVE-2023-0286.html',
-                'https://linux.oracle.com/errata/ELSA-2025-7937.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-0286',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0003',
-                'https://rustsec.org/advisories/RUSTSEC-2023-0006.html',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://ubuntu.com/security/notices/USN-5844-1',
-                'https://ubuntu.com/security/notices/USN-5845-1',
-                'https://ubuntu.com/security/notices/USN-5845-2',
-                'https://ubuntu.com/security/notices/USN-6564-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-0286',
-                'https://www.openssl.org/news/secadv/20230207.txt'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: X.400 address type confusion in X.509 GeneralName'
-            },
-            {
-              'cve':  'CVE-2023-0464',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-295'
-              ],
-              'description':   "A security vulnerability has been identified in all supported versions\n\nof OpenSSL related to the verification of X.509 certificate chains\nthat include policy constraints.  Attackers may be able to exploit this\nvulnerability by creating a malicious certificate chain that triggers\nexponential use of computational resources, leading to a denial-of-service\n(DoS) attack on affected systems.\n\nPolicy processing is disabled by default but can be enabled by passing\nthe `-policy' argument to the command line utilities or by calling the\n`X509_VERIFY_PARAM_set1_policies()' function.",
-              'diffID':        'sha256:2e38978dfe406188f56968f907e9c3dd2692a5d21671e2307bd5a503fb08f8b0',
-              'fixedVersions': [
-                '1.1.1t-r1'
-              ],
-              'installedVersion': '1.1.1n-r0',
-              'packageName':      'libcrypto1.1',
-              'purl':             'pkg:apk/alpine/libcrypto1.1@1.1.1n-r0?arch=x86_64&distro=3.14.4',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2023:3722',
-                'https://access.redhat.com/security/cve/CVE-2023-0464',
-                'https://bugzilla.redhat.com/2181082',
-                'https://bugzilla.redhat.com/2182561',
-                'https://bugzilla.redhat.com/2182565',
-                'https://bugzilla.redhat.com/2188461',
-                'https://bugzilla.redhat.com/2207947',
-                'https://errata.almalinux.org/9/ALSA-2023-3722.html',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=2017771e2db3e2b96f89bbe8766c3209f6a99545',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=2dcd4f1e3115f38cefa43e3efbe9b801c27e642e',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=879f7080d7e141f415c79eaa3a8ac4a3dad0348b',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=959c59c7a0164117e7f8366466a32bb1f8d77ff1',
-                'https://linux.oracle.com/cve/CVE-2023-0464.html',
-                'https://linux.oracle.com/errata/ELSA-2023-3722.html',
-                'https://lists.debian.org/debian-lts-announce/2023/06/msg00011.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-0464',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://security.netapp.com/advisory/ntap-20230406-0006/',
-                'https://security.netapp.com/advisory/ntap-20240621-0006/',
-                'https://ubuntu.com/security/notices/USN-6039-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.couchbase.com/alerts/',
-                'https://www.cve.org/CVERecord?id=CVE-2023-0464',
-                'https://www.debian.org/security/2023/dsa-5417',
-                'https://www.openssl.org/news/secadv/20230322.txt'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: Denial of service by excessive resource usage in verifying X509 policy constraints'
-            },
-            {
-              'cve':  'CVE-2022-2097',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N'
-                },
-                'nvd': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N'
-                },
-                'redhat': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-327'
-              ],
-              'description':   "AES OCB mode for 32-bit x86 platforms using the AES-NI assembly optimised implementation will not encrypt the entirety of the data under some circumstances. This could reveal sixteen bytes of data that was preexisting in the memory that wasn't written. In the special case of \"in place\" encryption, sixteen bytes of the plaintext would be revealed. Since OpenSSL does not support OCB based cipher suites for TLS and DTLS, they are both unaffected. Fixed in OpenSSL 3.0.5 (Affected 3.0.0-3.0.4). Fixed in OpenSSL 1.1.1q (Affected 1.1.1-1.1.1p).",
-              'diffID':        'sha256:2e38978dfe406188f56968f907e9c3dd2692a5d21671e2307bd5a503fb08f8b0',
-              'fixedVersions': [
-                '1.1.1q-r0'
-              ],
-              'installedVersion': '1.1.1n-r0',
-              'packageName':      'libcrypto1.1',
-              'purl':             'pkg:apk/alpine/libcrypto1.1@1.1.1n-r0?arch=x86_64&distro=3.14.4',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2022:6224',
-                'https://access.redhat.com/security/cve/CVE-2022-2097',
-                'https://bugzilla.redhat.com/2081494',
-                'https://bugzilla.redhat.com/2087911',
-                'https://bugzilla.redhat.com/2087913',
-                'https://bugzilla.redhat.com/2097310',
-                'https://bugzilla.redhat.com/2104905',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2081494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2097310',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2100554',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2104905',
-                'https://cert-portal.siemens.com/productcert/pdf/ssa-332410.pdf',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-1292',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-2068',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-2097',
-                'https://errata.almalinux.org/9/ALSA-2022-6224.html',
-                'https://errata.rockylinux.org/RLSA-2022:5818',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=919925673d6c9cfed3c1085497f5dfbbed5fc431',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=a98f339ddd7e8f487d6e0088d4a9a42324885a93',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=919925673d6c9cfed3c1085497f5dfbbed5fc431',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=a98f339ddd7e8f487d6e0088d4a9a42324885a93',
-                'https://github.com/alexcrichton/openssl-src-rs',
-                'https://linux.oracle.com/cve/CVE-2022-2097.html',
-                'https://linux.oracle.com/errata/ELSA-2022-9955.html',
-                'https://lists.debian.org/debian-lts-announce/2023/02/msg00019.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/R6CK57NBQFTPUMXAPJURCGXUYT76NQAK',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/R6CK57NBQFTPUMXAPJURCGXUYT76NQAK/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/V6567JERRHHJW2GNGJGKDRNHR7SNPZK7',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/V6567JERRHHJW2GNGJGKDRNHR7SNPZK7/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VCMNWKERPBKOEBNL7CLTTX3ZZCZLH7XA',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VCMNWKERPBKOEBNL7CLTTX3ZZCZLH7XA/',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/R6CK57NBQFTPUMXAPJURCGXUYT76NQAK',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/R6CK57NBQFTPUMXAPJURCGXUYT76NQAK/',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/V6567JERRHHJW2GNGJGKDRNHR7SNPZK7',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/V6567JERRHHJW2GNGJGKDRNHR7SNPZK7/',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/VCMNWKERPBKOEBNL7CLTTX3ZZCZLH7XA',
-                'https://nvd.nist.gov/vuln/detail/CVE-2022-2097',
-                'https://rustsec.org/advisories/RUSTSEC-2022-0032.html',
-                'https://security.gentoo.org/glsa/202210-02',
-                'https://security.netapp.com/advisory/ntap-20220715-0011',
-                'https://security.netapp.com/advisory/ntap-20220715-0011/',
-                'https://security.netapp.com/advisory/ntap-20230420-0008',
-                'https://security.netapp.com/advisory/ntap-20230420-0008/',
-                'https://security.netapp.com/advisory/ntap-20240621-0006',
-                'https://security.netapp.com/advisory/ntap-20240621-0006/',
-                'https://ubuntu.com/security/notices/USN-5502-1',
-                'https://ubuntu.com/security/notices/USN-6457-1',
-                'https://www.cve.org/CVERecord?id=CVE-2022-2097',
-                'https://www.debian.org/security/2023/dsa-5343',
-                'https://www.openssl.org/news/secadv/20220705.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: AES OCB fails to encrypt some bytes'
-            },
-            {
-              'cve':  'CVE-2022-4304',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N'
-                },
-                'nvd': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N'
-                },
-                'redhat': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-203'
-              ],
-              'description':   'A timing based side channel exists in the OpenSSL RSA Decryption implementation\nwhich could be sufficient to recover a plaintext across a network in a\nBleichenbacher style attack. To achieve a successful decryption an attacker\nwould have to be able to send a very large number of trial messages for\ndecryption. The vulnerability affects all RSA padding modes: PKCS#1 v1.5,\nRSA-OEAP and RSASVE.\n\nFor example, in a TLS connection, RSA is commonly used by a client to send an\nencrypted pre-master secret to the server. An attacker that had observed a\ngenuine connection between a client and a server could use this flaw to send\ntrial messages to the server and record the time taken to process them. After a\nsufficiently large number of messages the attacker could recover the pre-master\nsecret used for the original connection and thus be able to decrypt the\napplication data sent over that connection.',
-              'diffID':        'sha256:2e38978dfe406188f56968f907e9c3dd2692a5d21671e2307bd5a503fb08f8b0',
-              'fixedVersions': [
-                '1.1.1t-r0'
-              ],
-              'installedVersion': '1.1.1n-r0',
-              'packageName':      'libcrypto1.1',
-              'purl':             'pkg:apk/alpine/libcrypto1.1@1.1.1n-r0?arch=x86_64&distro=3.14.4',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2023:2165',
-                'https://access.redhat.com/security/cve/CVE-2022-4304',
-                'https://bugzilla.redhat.com/1960321',
-                'https://bugzilla.redhat.com/2164440',
-                'https://bugzilla.redhat.com/2164487',
-                'https://bugzilla.redhat.com/2164492',
-                'https://bugzilla.redhat.com/2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144000',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144003',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144006',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144008',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144010',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144012',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144015',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144017',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144019',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2145170',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2158412',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164440',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164487',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164488',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164492',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164497',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164499',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164500',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4203',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4304',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4450',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0215',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0216',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0217',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0286',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0401',
-                'https://errata.almalinux.org/9/ALSA-2023-2165.html',
-                'https://errata.rockylinux.org/RLSA-2023:0946',
-                'https://linux.oracle.com/cve/CVE-2022-4304.html',
-                'https://linux.oracle.com/errata/ELSA-2023-32791.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2022-4304',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0003',
-                'https://rustsec.org/advisories/RUSTSEC-2023-0007.html',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://ubuntu.com/security/notices/USN-5844-1',
-                'https://ubuntu.com/security/notices/USN-6564-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2022-4304',
-                'https://www.openssl.org/news/secadv/20230207.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: timing attack in RSA Decryption implementation'
-            },
-            {
-              'cve':  'CVE-2023-0465',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N'
-                },
-                'redhat': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-295'
-              ],
-              'description':   "Applications that use a non-default option when verifying certificates may be\nvulnerable to an attack from a malicious CA to circumvent certain checks.\n\nInvalid certificate policies in leaf certificates are silently ignored by\nOpenSSL and other certificate policy checks are skipped for that certificate.\nA malicious CA could use this to deliberately assert invalid certificate policies\nin order to circumvent policy checking on the certificate altogether.\n\nPolicy processing is disabled by default but can be enabled by passing\nthe `-policy' argument to the command line utilities or by calling the\n`X509_VERIFY_PARAM_set1_policies()' function.",
-              'diffID':        'sha256:2e38978dfe406188f56968f907e9c3dd2692a5d21671e2307bd5a503fb08f8b0',
-              'fixedVersions': [
-                '1.1.1t-r2'
-              ],
-              'installedVersion': '1.1.1n-r0',
-              'packageName':      'libcrypto1.1',
-              'purl':             'pkg:apk/alpine/libcrypto1.1@1.1.1n-r0?arch=x86_64&distro=3.14.4',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2023:3722',
-                'https://access.redhat.com/security/cve/CVE-2023-0465',
-                'https://bugzilla.redhat.com/2181082',
-                'https://bugzilla.redhat.com/2182561',
-                'https://bugzilla.redhat.com/2182565',
-                'https://bugzilla.redhat.com/2188461',
-                'https://bugzilla.redhat.com/2207947',
-                'https://errata.almalinux.org/9/ALSA-2023-3722.html',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=10325176f3d3e98c6e2b3bf5ab1e3b334de6947a',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=1dd43e0709fece299b15208f36cc7c76209ba0bb',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=b013765abfa80036dc779dd0e50602c57bb3bf95',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=facfb1ab745646e97a1920977ae4a9965ea61d5c',
-                'https://linux.oracle.com/cve/CVE-2023-0465.html',
-                'https://linux.oracle.com/errata/ELSA-2023-3722.html',
-                'https://lists.debian.org/debian-lts-announce/2023/06/msg00011.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-0465',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://security.netapp.com/advisory/ntap-20230414-0001/',
-                'https://ubuntu.com/security/notices/USN-6039-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-0465',
-                'https://www.debian.org/security/2023/dsa-5417',
-                'https://www.openssl.org/news/secadv/20230328.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: Invalid certificate policies in leaf certificates are silently ignored'
-            },
-            {
-              'cve':  'CVE-2022-0778',
-              'cvss': {
-                'bitnami': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'ghsa': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'nvd': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-835'
-              ],
-              'description':   'The BN_mod_sqrt() function, which computes a modular square root, contains a bug that can cause it to loop forever for non-prime moduli. Internally this function is used when parsing certificates that contain elliptic curve public keys in compressed form or explicit elliptic curve parameters with a base point encoded in compressed form. It is possible to trigger the infinite loop by crafting a certificate that has invalid explicit curve parameters. Since certificate parsing happens prior to verification of the certificate signature, any process that parses an externally supplied certificate may thus be subject to a denial of service attack. The infinite loop can also be reached when parsing crafted private keys as they can contain explicit elliptic curve parameters. Thus vulnerable situations include: - TLS clients consuming server certificates - TLS servers consuming client certificates - Hosting providers taking certificates or private keys from customers - Certificate authorities parsing certification requests from subscribers - Anything else which parses ASN.1 elliptic curve parameters Also any other applications that use the BN_mod_sqrt() where the attacker can control the parameter values are vulnerable to this DoS issue. In the OpenSSL 1.0.2 version the public key is not parsed during initial parsing of the certificate which makes it slightly harder to trigger the infinite loop. However any operation which requires the public key from the certificate will trigger the infinite loop. In particular the attacker can use a self-signed certificate to trigger the loop during verification of the certificate signature. This issue affects OpenSSL versions 1.0.2, 1.1.1 and 3.0. It was addressed in the releases of 1.1.1n and 3.0.2 on the 15th March 2022. Fixed in OpenSSL 3.0.2 (Affected 3.0.0,3.0.1). Fixed in OpenSSL 1.1.1n (Affected 1.1.1-1.1.1m). Fixed in OpenSSL 1.0.2zd (Affected 1.0.2-1.0.2zc).',
-              'diffID':        'sha256:2e38978dfe406188f56968f907e9c3dd2692a5d21671e2307bd5a503fb08f8b0',
-              'fixedVersions': [
-                '3.3.3p1-r3'
-              ],
-              'installedVersion': '3.3.3p1-r2',
-              'packageName':      'libretls',
-              'purl':             'pkg:apk/alpine/libretls@3.3.3p1-r2?arch=x86_64&distro=3.14.4',
-              'references':       [
-                'http://packetstormsecurity.com/files/167344/OpenSSL-1.0.2-1.1.1-3.0-BN_mod_sqrt-Infinite-Loop.html',
-                'http://seclists.org/fulldisclosure/2022/May/33',
-                'http://seclists.org/fulldisclosure/2022/May/35',
-                'http://seclists.org/fulldisclosure/2022/May/38',
-                'https://access.redhat.com/errata/RHSA-2022:5326',
-                'https://access.redhat.com/security/cve/CVE-2022-0778',
-                'https://bugzilla.redhat.com/2062202',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2062202',
-                'https://cert-portal.siemens.com/productcert/pdf/ssa-712929.pdf',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-0778',
-                'https://errata.almalinux.org/8/ALSA-2022-5326.html',
-                'https://errata.rockylinux.org/RLSA-2022:4899',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=3118eb64934499d93db3230748a452351d1d9a65',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=380085481c64de749a6dd25cdf0bcf4360b30f83',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=a466912611aa6cbdf550cd10601390e587451246',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=3118eb64934499d93db3230748a452351d1d9a65',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=380085481c64de749a6dd25cdf0bcf4360b30f83',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=a466912611aa6cbdf550cd10601390e587451246',
-                'https://linux.oracle.com/cve/CVE-2022-0778.html',
-                'https://linux.oracle.com/errata/ELSA-2022-9272.html',
-                'https://lists.debian.org/debian-lts-announce/2022/03/msg00023.html',
-                'https://lists.debian.org/debian-lts-announce/2022/03/msg00024.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/323SNN6ZX7PRJJWP2BUAFLPUAE42XWLZ',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/323SNN6ZX7PRJJWP2BUAFLPUAE42XWLZ/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GDB3GQVJPXJE7X5C5JN6JAA4XUDWD6E6',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GDB3GQVJPXJE7X5C5JN6JAA4XUDWD6E6/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/W6K3PR542DXWLEFFMFIDMME4CWMHJRMG',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/W6K3PR542DXWLEFFMFIDMME4CWMHJRMG/',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/323SNN6ZX7PRJJWP2BUAFLPUAE42XWLZ',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/GDB3GQVJPXJE7X5C5JN6JAA4XUDWD6E6',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/W6K3PR542DXWLEFFMFIDMME4CWMHJRMG',
-                'https://nvd.nist.gov/vuln/detail/CVE-2022-0778',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2022-0002',
-                'https://rustsec.org/advisories/RUSTSEC-2022-0014.html',
-                'https://security.gentoo.org/glsa/202210-02',
-                'https://security.netapp.com/advisory/ntap-20220321-0002',
-                'https://security.netapp.com/advisory/ntap-20220321-0002/',
-                'https://security.netapp.com/advisory/ntap-20220429-0005',
-                'https://security.netapp.com/advisory/ntap-20220429-0005/',
-                'https://security.netapp.com/advisory/ntap-20240621-0006',
-                'https://security.netapp.com/advisory/ntap-20240621-0006/',
-                'https://support.apple.com/kb/HT213255',
-                'https://support.apple.com/kb/HT213256',
-                'https://support.apple.com/kb/HT213257',
-                'https://ubuntu.com/security/notices/USN-5328-1',
-                'https://ubuntu.com/security/notices/USN-5328-2',
-                'https://ubuntu.com/security/notices/USN-6457-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2022-0778',
-                'https://www.debian.org/security/2022/dsa-5103',
-                'https://www.openssl.org/news/secadv/20220315.txt',
-                'https://www.oracle.com/security-alerts/cpuapr2022.html',
-                'https://www.oracle.com/security-alerts/cpujul2022.html',
-                'https://www.tenable.com/security/tns-2022-06',
-                'https://www.tenable.com/security/tns-2022-07',
-                'https://www.tenable.com/security/tns-2022-08',
-                'https://www.tenable.com/security/tns-2022-09'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: Infinite loop in BN_mod_sqrt() reachable when parsing certificates'
-            },
-            {
-              'cve':  'CVE-2022-4450',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'nvd': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-415'
-              ],
-              'description':   'The function PEM_read_bio_ex() reads a PEM file from a BIO and parses and\ndecodes the "name" (e.g. "CERTIFICATE"), any header data and the payload data.\nIf the function succeeds then the "name_out", "header" and "data" arguments are\npopulated with pointers to buffers containing the relevant decoded data. The\ncaller is responsible for freeing those buffers. It is possible to construct a\nPEM file that results in 0 bytes of payload data. In this case PEM_read_bio_ex()\nwill return a failure code but will populate the header argument with a pointer\nto a buffer that has already been freed. If the caller also frees this buffer\nthen a double free will occur. This will most likely lead to a crash. This\ncould be exploited by an attacker who has the ability to supply malicious PEM\nfiles for parsing to achieve a denial of service attack.\n\nThe functions PEM_read_bio() and PEM_read() are simple wrappers around\nPEM_read_bio_ex() and therefore these functions are also directly affected.\n\nThese functions are also called indirectly by a number of other OpenSSL\nfunctions including PEM_X509_INFO_read_bio_ex() and\nSSL_CTX_use_serverinfo_file() which are also vulnerable. Some OpenSSL internal\nuses of these functions are not vulnerable because the caller does not free the\nheader argument if PEM_read_bio_ex() returns a failure code. These locations\ninclude the PEM_read_bio_TYPE() functions as well as the decoders introduced in\nOpenSSL 3.0.\n\nThe OpenSSL asn1parse command line application is also impacted by this issue.',
-              'diffID':        'sha256:2e38978dfe406188f56968f907e9c3dd2692a5d21671e2307bd5a503fb08f8b0',
-              'fixedVersions': [
-                '1.1.1t-r0'
-              ],
-              'installedVersion': '1.1.1n-r0',
-              'packageName':      'libssl1.1',
-              'purl':             'pkg:apk/alpine/libssl1.1@1.1.1n-r0?arch=x86_64&distro=3.14.4',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2023:2165',
-                'https://access.redhat.com/security/cve/CVE-2022-4450',
-                'https://bugzilla.redhat.com/1960321',
-                'https://bugzilla.redhat.com/2164440',
-                'https://bugzilla.redhat.com/2164487',
-                'https://bugzilla.redhat.com/2164492',
-                'https://bugzilla.redhat.com/2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144000',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144003',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144006',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144008',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144010',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144012',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144015',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144017',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144019',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2145170',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2158412',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164440',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164487',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164488',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164492',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164497',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164499',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164500',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4203',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4304',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4450',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0215',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0216',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0217',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0286',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0401',
-                'https://errata.almalinux.org/9/ALSA-2023-2165.html',
-                'https://errata.rockylinux.org/RLSA-2023:0946',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=63bcf189be73a9cc1264059bed6f57974be74a83',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=bbcf509bd046b34cca19c766bbddc31683d0858b',
-                'https://linux.oracle.com/cve/CVE-2022-4450.html',
-                'https://linux.oracle.com/errata/ELSA-2023-32791.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2022-4450',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0003',
-                'https://rustsec.org/advisories/RUSTSEC-2023-0010.html',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://ubuntu.com/security/notices/USN-5844-1',
-                'https://ubuntu.com/security/notices/USN-6564-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2022-4450',
-                'https://www.openssl.org/news/secadv/20230207.txt'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: double free after calling PEM_read_bio_ex'
-            },
-            {
-              'cve':  'CVE-2023-0215',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'nvd': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   'The public API function BIO_new_NDEF is a helper function used for streaming\nASN.1 data via a BIO. It is primarily used internally to OpenSSL to support the\nSMIME, CMS and PKCS7 streaming capabilities, but may also be called directly by\nend user applications.\n\nThe function receives a BIO from the caller, prepends a new BIO_f_asn1 filter\nBIO onto the front of it to form a BIO chain, and then returns the new head of\nthe BIO chain to the caller. Under certain conditions, for example if a CMS\nrecipient public key is invalid, the new filter BIO is freed and the function\nreturns a NULL result indicating a failure. However, in this case, the BIO chain\nis not properly cleaned up and the BIO passed by the caller still retains\ninternal pointers to the previously freed filter BIO. If the caller then goes on\nto call BIO_pop() on the BIO then a use-after-free will occur. This will most\nlikely result in a crash.\n\n\n\nThis scenario occurs directly in the internal function B64_write_ASN1() which\nmay cause BIO_new_NDEF() to be called and will subsequently call BIO_pop() on\nthe BIO. This internal function is in turn called by the public API functions\nPEM_write_bio_ASN1_stream, PEM_write_bio_CMS_stream, PEM_write_bio_PKCS7_stream,\nSMIME_write_ASN1, SMIME_write_CMS and SMIME_write_PKCS7.\n\nOther public API functions that may be impacted by this include\ni2d_ASN1_bio_stream, BIO_new_CMS, BIO_new_PKCS7, i2d_CMS_bio_stream and\ni2d_PKCS7_bio_stream.\n\nThe OpenSSL cms and smime command line applications are similarly affected.',
-              'diffID':        'sha256:2e38978dfe406188f56968f907e9c3dd2692a5d21671e2307bd5a503fb08f8b0',
-              'fixedVersions': [
-                '1.1.1t-r0'
-              ],
-              'installedVersion': '1.1.1n-r0',
-              'packageName':      'libssl1.1',
-              'purl':             'pkg:apk/alpine/libssl1.1@1.1.1n-r0?arch=x86_64&distro=3.14.4',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2023:2165',
-                'https://access.redhat.com/security/cve/CVE-2023-0215',
-                'https://bugzilla.redhat.com/1960321',
-                'https://bugzilla.redhat.com/2164440',
-                'https://bugzilla.redhat.com/2164487',
-                'https://bugzilla.redhat.com/2164492',
-                'https://bugzilla.redhat.com/2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144000',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144003',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144006',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144008',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144010',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144012',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144015',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144017',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144019',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2145170',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2158412',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164440',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164487',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164488',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164492',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164497',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164499',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164500',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4203',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4304',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4450',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0215',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0216',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0217',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0286',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0401',
-                'https://errata.almalinux.org/9/ALSA-2023-2165.html',
-                'https://errata.rockylinux.org/RLSA-2023:0946',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=8818064ce3c3c0f1b740a5aaba2a987e75bfbafd',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=9816136fe31d92ace4037d5da5257f763aeeb4eb',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=c3829dd8825c654652201e16f8a0a0c46ee3f344',
-                'https://linux.oracle.com/cve/CVE-2023-0215.html',
-                'https://linux.oracle.com/errata/ELSA-2023-32791.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-0215',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0003',
-                'https://rustsec.org/advisories/RUSTSEC-2023-0009.html',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://security.netapp.com/advisory/ntap-20230427-0007',
-                'https://security.netapp.com/advisory/ntap-20230427-0007/',
-                'https://security.netapp.com/advisory/ntap-20230427-0009',
-                'https://security.netapp.com/advisory/ntap-20230427-0009/',
-                'https://security.netapp.com/advisory/ntap-20240621-0006',
-                'https://security.netapp.com/advisory/ntap-20240621-0006/',
-                'https://ubuntu.com/security/notices/USN-5844-1',
-                'https://ubuntu.com/security/notices/USN-5845-1',
-                'https://ubuntu.com/security/notices/USN-5845-2',
-                'https://ubuntu.com/security/notices/USN-6564-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-0215',
-                'https://www.openssl.org/news/secadv/20230207.txt'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: use-after-free following BIO_new_NDEF'
-            },
-            {
-              'cve':  'CVE-2023-0286',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '7.4',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H'
-                },
-                'nvd': {
-                  'v3score':  '7.4',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.4',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-843'
-              ],
-              'description':   'There is a type confusion vulnerability relating to X.400 address processing\ninside an X.509 GeneralName. X.400 addresses were parsed as an ASN1_STRING but\nthe public structure definition for GENERAL_NAME incorrectly specified the type\nof the x400Address field as ASN1_TYPE. This field is subsequently interpreted by\nthe OpenSSL function GENERAL_NAME_cmp as an ASN1_TYPE rather than an\nASN1_STRING.\n\nWhen CRL checking is enabled (i.e. the application sets the\nX509_V_FLAG_CRL_CHECK flag), this vulnerability may allow an attacker to pass\narbitrary pointers to a memcmp call, enabling them to read memory contents or\nenact a denial of service. In most cases, the attack requires the attacker to\nprovide both the certificate chain and CRL, neither of which need to have a\nvalid signature. If the attacker only controls one of these inputs, the other\ninput must already contain an X.400 address as a CRL distribution point, which\nis uncommon. As such, this vulnerability is most likely to only affect\napplications which have implemented their own functionality for retrieving CRLs\nover a network.',
-              'diffID':        'sha256:2e38978dfe406188f56968f907e9c3dd2692a5d21671e2307bd5a503fb08f8b0',
-              'fixedVersions': [
-                '1.1.1t-r0'
-              ],
-              'installedVersion': '1.1.1n-r0',
-              'packageName':      'libssl1.1',
-              'purl':             'pkg:apk/alpine/libssl1.1@1.1.1n-r0?arch=x86_64&distro=3.14.4',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2025:7937',
-                'https://access.redhat.com/security/cve/CVE-2023-0286',
-                'https://access.redhat.com/security/cve/cve-2023-0286',
-                'https://bugzilla.redhat.com/2164440',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144000',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144003',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144006',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144008',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144010',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144012',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144015',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144017',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144019',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2145170',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2158412',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164440',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164487',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164488',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164492',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164497',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164499',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164500',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4203',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4304',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4450',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0215',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0216',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0217',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0286',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0401',
-                'https://errata.almalinux.org/9/ALSA-2025-7937.html',
-                'https://errata.rockylinux.org/RLSA-2023:0946',
-                'https://ftp.openbsd.org/pub/OpenBSD/LibreSSL/libressl-3.6.2-relnotes.txt',
-                'https://ftp.openbsd.org/pub/OpenBSD/patches/7.2/common/018_x509.patch.sig',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=2c6c9d439b484e1ba9830d8454a34fa4f80fdfe9',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=2f7530077e0ef79d98718138716bc51ca0cad658',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=fd2af07dc083a350c959147097003a14a5e8ac4d',
-                'https://github.com/pyca/cryptography',
-                'https://github.com/pyca/cryptography/security/advisories/GHSA-x4qr-2fvf-3mr5',
-                'https://linux.oracle.com/cve/CVE-2023-0286.html',
-                'https://linux.oracle.com/errata/ELSA-2025-7937.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-0286',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0003',
-                'https://rustsec.org/advisories/RUSTSEC-2023-0006.html',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://ubuntu.com/security/notices/USN-5844-1',
-                'https://ubuntu.com/security/notices/USN-5845-1',
-                'https://ubuntu.com/security/notices/USN-5845-2',
-                'https://ubuntu.com/security/notices/USN-6564-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-0286',
-                'https://www.openssl.org/news/secadv/20230207.txt'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: X.400 address type confusion in X.509 GeneralName'
-            },
-            {
-              'cve':  'CVE-2023-0464',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-295'
-              ],
-              'description':   "A security vulnerability has been identified in all supported versions\n\nof OpenSSL related to the verification of X.509 certificate chains\nthat include policy constraints.  Attackers may be able to exploit this\nvulnerability by creating a malicious certificate chain that triggers\nexponential use of computational resources, leading to a denial-of-service\n(DoS) attack on affected systems.\n\nPolicy processing is disabled by default but can be enabled by passing\nthe `-policy' argument to the command line utilities or by calling the\n`X509_VERIFY_PARAM_set1_policies()' function.",
-              'diffID':        'sha256:2e38978dfe406188f56968f907e9c3dd2692a5d21671e2307bd5a503fb08f8b0',
-              'fixedVersions': [
-                '1.1.1t-r1'
-              ],
-              'installedVersion': '1.1.1n-r0',
-              'packageName':      'libssl1.1',
-              'purl':             'pkg:apk/alpine/libssl1.1@1.1.1n-r0?arch=x86_64&distro=3.14.4',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2023:3722',
-                'https://access.redhat.com/security/cve/CVE-2023-0464',
-                'https://bugzilla.redhat.com/2181082',
-                'https://bugzilla.redhat.com/2182561',
-                'https://bugzilla.redhat.com/2182565',
-                'https://bugzilla.redhat.com/2188461',
-                'https://bugzilla.redhat.com/2207947',
-                'https://errata.almalinux.org/9/ALSA-2023-3722.html',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=2017771e2db3e2b96f89bbe8766c3209f6a99545',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=2dcd4f1e3115f38cefa43e3efbe9b801c27e642e',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=879f7080d7e141f415c79eaa3a8ac4a3dad0348b',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=959c59c7a0164117e7f8366466a32bb1f8d77ff1',
-                'https://linux.oracle.com/cve/CVE-2023-0464.html',
-                'https://linux.oracle.com/errata/ELSA-2023-3722.html',
-                'https://lists.debian.org/debian-lts-announce/2023/06/msg00011.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-0464',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://security.netapp.com/advisory/ntap-20230406-0006/',
-                'https://security.netapp.com/advisory/ntap-20240621-0006/',
-                'https://ubuntu.com/security/notices/USN-6039-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.couchbase.com/alerts/',
-                'https://www.cve.org/CVERecord?id=CVE-2023-0464',
-                'https://www.debian.org/security/2023/dsa-5417',
-                'https://www.openssl.org/news/secadv/20230322.txt'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: Denial of service by excessive resource usage in verifying X509 policy constraints'
-            },
-            {
-              'cve':  'CVE-2022-2097',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N'
-                },
-                'nvd': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N'
-                },
-                'redhat': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-327'
-              ],
-              'description':   "AES OCB mode for 32-bit x86 platforms using the AES-NI assembly optimised implementation will not encrypt the entirety of the data under some circumstances. This could reveal sixteen bytes of data that was preexisting in the memory that wasn't written. In the special case of \"in place\" encryption, sixteen bytes of the plaintext would be revealed. Since OpenSSL does not support OCB based cipher suites for TLS and DTLS, they are both unaffected. Fixed in OpenSSL 3.0.5 (Affected 3.0.0-3.0.4). Fixed in OpenSSL 1.1.1q (Affected 1.1.1-1.1.1p).",
-              'diffID':        'sha256:2e38978dfe406188f56968f907e9c3dd2692a5d21671e2307bd5a503fb08f8b0',
-              'fixedVersions': [
-                '1.1.1q-r0'
-              ],
-              'installedVersion': '1.1.1n-r0',
-              'packageName':      'libssl1.1',
-              'purl':             'pkg:apk/alpine/libssl1.1@1.1.1n-r0?arch=x86_64&distro=3.14.4',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2022:6224',
-                'https://access.redhat.com/security/cve/CVE-2022-2097',
-                'https://bugzilla.redhat.com/2081494',
-                'https://bugzilla.redhat.com/2087911',
-                'https://bugzilla.redhat.com/2087913',
-                'https://bugzilla.redhat.com/2097310',
-                'https://bugzilla.redhat.com/2104905',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2081494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2097310',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2100554',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2104905',
-                'https://cert-portal.siemens.com/productcert/pdf/ssa-332410.pdf',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-1292',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-2068',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-2097',
-                'https://errata.almalinux.org/9/ALSA-2022-6224.html',
-                'https://errata.rockylinux.org/RLSA-2022:5818',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=919925673d6c9cfed3c1085497f5dfbbed5fc431',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=a98f339ddd7e8f487d6e0088d4a9a42324885a93',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=919925673d6c9cfed3c1085497f5dfbbed5fc431',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=a98f339ddd7e8f487d6e0088d4a9a42324885a93',
-                'https://github.com/alexcrichton/openssl-src-rs',
-                'https://linux.oracle.com/cve/CVE-2022-2097.html',
-                'https://linux.oracle.com/errata/ELSA-2022-9955.html',
-                'https://lists.debian.org/debian-lts-announce/2023/02/msg00019.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/R6CK57NBQFTPUMXAPJURCGXUYT76NQAK',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/R6CK57NBQFTPUMXAPJURCGXUYT76NQAK/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/V6567JERRHHJW2GNGJGKDRNHR7SNPZK7',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/V6567JERRHHJW2GNGJGKDRNHR7SNPZK7/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VCMNWKERPBKOEBNL7CLTTX3ZZCZLH7XA',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VCMNWKERPBKOEBNL7CLTTX3ZZCZLH7XA/',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/R6CK57NBQFTPUMXAPJURCGXUYT76NQAK',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/R6CK57NBQFTPUMXAPJURCGXUYT76NQAK/',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/V6567JERRHHJW2GNGJGKDRNHR7SNPZK7',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/V6567JERRHHJW2GNGJGKDRNHR7SNPZK7/',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/VCMNWKERPBKOEBNL7CLTTX3ZZCZLH7XA',
-                'https://nvd.nist.gov/vuln/detail/CVE-2022-2097',
-                'https://rustsec.org/advisories/RUSTSEC-2022-0032.html',
-                'https://security.gentoo.org/glsa/202210-02',
-                'https://security.netapp.com/advisory/ntap-20220715-0011',
-                'https://security.netapp.com/advisory/ntap-20220715-0011/',
-                'https://security.netapp.com/advisory/ntap-20230420-0008',
-                'https://security.netapp.com/advisory/ntap-20230420-0008/',
-                'https://security.netapp.com/advisory/ntap-20240621-0006',
-                'https://security.netapp.com/advisory/ntap-20240621-0006/',
-                'https://ubuntu.com/security/notices/USN-5502-1',
-                'https://ubuntu.com/security/notices/USN-6457-1',
-                'https://www.cve.org/CVERecord?id=CVE-2022-2097',
-                'https://www.debian.org/security/2023/dsa-5343',
-                'https://www.openssl.org/news/secadv/20220705.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: AES OCB fails to encrypt some bytes'
-            },
-            {
-              'cve':  'CVE-2022-4304',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N'
-                },
-                'nvd': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N'
-                },
-                'redhat': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-203'
-              ],
-              'description':   'A timing based side channel exists in the OpenSSL RSA Decryption implementation\nwhich could be sufficient to recover a plaintext across a network in a\nBleichenbacher style attack. To achieve a successful decryption an attacker\nwould have to be able to send a very large number of trial messages for\ndecryption. The vulnerability affects all RSA padding modes: PKCS#1 v1.5,\nRSA-OEAP and RSASVE.\n\nFor example, in a TLS connection, RSA is commonly used by a client to send an\nencrypted pre-master secret to the server. An attacker that had observed a\ngenuine connection between a client and a server could use this flaw to send\ntrial messages to the server and record the time taken to process them. After a\nsufficiently large number of messages the attacker could recover the pre-master\nsecret used for the original connection and thus be able to decrypt the\napplication data sent over that connection.',
-              'diffID':        'sha256:2e38978dfe406188f56968f907e9c3dd2692a5d21671e2307bd5a503fb08f8b0',
-              'fixedVersions': [
-                '1.1.1t-r0'
-              ],
-              'installedVersion': '1.1.1n-r0',
-              'packageName':      'libssl1.1',
-              'purl':             'pkg:apk/alpine/libssl1.1@1.1.1n-r0?arch=x86_64&distro=3.14.4',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2023:2165',
-                'https://access.redhat.com/security/cve/CVE-2022-4304',
-                'https://bugzilla.redhat.com/1960321',
-                'https://bugzilla.redhat.com/2164440',
-                'https://bugzilla.redhat.com/2164487',
-                'https://bugzilla.redhat.com/2164492',
-                'https://bugzilla.redhat.com/2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144000',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144003',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144006',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144008',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144010',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144012',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144015',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144017',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144019',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2145170',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2158412',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164440',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164487',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164488',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164492',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164497',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164499',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164500',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4203',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4304',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4450',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0215',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0216',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0217',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0286',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0401',
-                'https://errata.almalinux.org/9/ALSA-2023-2165.html',
-                'https://errata.rockylinux.org/RLSA-2023:0946',
-                'https://linux.oracle.com/cve/CVE-2022-4304.html',
-                'https://linux.oracle.com/errata/ELSA-2023-32791.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2022-4304',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0003',
-                'https://rustsec.org/advisories/RUSTSEC-2023-0007.html',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://ubuntu.com/security/notices/USN-5844-1',
-                'https://ubuntu.com/security/notices/USN-6564-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2022-4304',
-                'https://www.openssl.org/news/secadv/20230207.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: timing attack in RSA Decryption implementation'
-            },
-            {
-              'cve':  'CVE-2023-0465',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N'
-                },
-                'redhat': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-295'
-              ],
-              'description':   "Applications that use a non-default option when verifying certificates may be\nvulnerable to an attack from a malicious CA to circumvent certain checks.\n\nInvalid certificate policies in leaf certificates are silently ignored by\nOpenSSL and other certificate policy checks are skipped for that certificate.\nA malicious CA could use this to deliberately assert invalid certificate policies\nin order to circumvent policy checking on the certificate altogether.\n\nPolicy processing is disabled by default but can be enabled by passing\nthe `-policy' argument to the command line utilities or by calling the\n`X509_VERIFY_PARAM_set1_policies()' function.",
-              'diffID':        'sha256:2e38978dfe406188f56968f907e9c3dd2692a5d21671e2307bd5a503fb08f8b0',
-              'fixedVersions': [
-                '1.1.1t-r2'
-              ],
-              'installedVersion': '1.1.1n-r0',
-              'packageName':      'libssl1.1',
-              'purl':             'pkg:apk/alpine/libssl1.1@1.1.1n-r0?arch=x86_64&distro=3.14.4',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2023:3722',
-                'https://access.redhat.com/security/cve/CVE-2023-0465',
-                'https://bugzilla.redhat.com/2181082',
-                'https://bugzilla.redhat.com/2182561',
-                'https://bugzilla.redhat.com/2182565',
-                'https://bugzilla.redhat.com/2188461',
-                'https://bugzilla.redhat.com/2207947',
-                'https://errata.almalinux.org/9/ALSA-2023-3722.html',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=10325176f3d3e98c6e2b3bf5ab1e3b334de6947a',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=1dd43e0709fece299b15208f36cc7c76209ba0bb',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=b013765abfa80036dc779dd0e50602c57bb3bf95',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=facfb1ab745646e97a1920977ae4a9965ea61d5c',
-                'https://linux.oracle.com/cve/CVE-2023-0465.html',
-                'https://linux.oracle.com/errata/ELSA-2023-3722.html',
-                'https://lists.debian.org/debian-lts-announce/2023/06/msg00011.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-0465',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://security.netapp.com/advisory/ntap-20230414-0001/',
-                'https://ubuntu.com/security/notices/USN-6039-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-0465',
-                'https://www.debian.org/security/2023/dsa-5417',
-                'https://www.openssl.org/news/secadv/20230328.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: Invalid certificate policies in leaf certificates are silently ignored'
-            },
-            {
-              'cve':  'CVE-2022-28391',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '8.8',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-88'
-              ],
-              'description':   "BusyBox through 1.35.0 allows remote attackers to execute arbitrary code if netstat is used to print a DNS PTR record's value to a VT compatible terminal. Alternatively, the attacker could choose to change the terminal's colors.",
-              'diffID':        'sha256:2e38978dfe406188f56968f907e9c3dd2692a5d21671e2307bd5a503fb08f8b0',
-              'fixedVersions': [
-                '1.33.1-r7'
-              ],
-              'installedVersion': '1.33.1-r6',
-              'packageName':      'ssl_client',
-              'purl':             'pkg:apk/alpine/ssl_client@1.33.1-r6?arch=x86_64&distro=3.14.4',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2022-28391',
-                'https://git.alpinelinux.org/aports/plain/main/busybox/0001-libbb-sockaddr2str-ensure-only-printable-characters-.patch',
-                'https://git.alpinelinux.org/aports/plain/main/busybox/0002-nslookup-sanitize-all-printed-strings-with-printable.patch',
-                'https://gitlab.alpinelinux.org/alpine/aports/-/issues/13661',
-                'https://nvd.nist.gov/vuln/detail/CVE-2022-28391',
-                'https://www.cve.org/CVERecord?id=CVE-2022-28391'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: remote attackers may execute arbitrary code if netstat is used'
-            },
-            {
-              'cve':  'CVE-2022-37434',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '9.8',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-787',
-                'CWE-120'
-              ],
-              'description':   'zlib through 1.2.12 has a heap-based buffer over-read or buffer overflow in inflate in inflate.c via a large gzip header extra field. NOTE: only applications that call inflateGetHeader are affected. Some common applications bundle the affected zlib source code but may be unable to call inflateGetHeader (e.g., see the nodejs/node reference).',
-              'diffID':        'sha256:2e38978dfe406188f56968f907e9c3dd2692a5d21671e2307bd5a503fb08f8b0',
-              'fixedVersions': [
-                '1.2.12-r2'
-              ],
-              'installedVersion': '1.2.11-r3',
-              'packageName':      'zlib',
-              'purl':             'pkg:apk/alpine/zlib@1.2.11-r3?arch=x86_64&distro=3.14.4',
-              'references':       [
-                'http://seclists.org/fulldisclosure/2022/Oct/37',
-                'http://seclists.org/fulldisclosure/2022/Oct/38',
-                'http://seclists.org/fulldisclosure/2022/Oct/41',
-                'http://seclists.org/fulldisclosure/2022/Oct/42',
-                'http://www.openwall.com/lists/oss-security/2022/08/05/2',
-                'http://www.openwall.com/lists/oss-security/2022/08/09/1',
-                'https://access.redhat.com/errata/RHSA-2022:8291',
-                'https://access.redhat.com/security/cve/CVE-2022-37434',
-                'https://bugzilla.redhat.com/2116639',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2053198',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2077431',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2081296',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2116639',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-37434',
-                'https://errata.almalinux.org/9/ALSA-2022-8291.html',
-                'https://errata.rockylinux.org/RLSA-2022:8291',
-                'https://github.com/curl/curl/issues/9271',
-                'https://github.com/ivd38/zlib_overflow',
-                'https://github.com/madler/zlib/blob/21767c654d31d2dccdde4330529775c6c5fd5389/zlib.h#L1062-L1063',
-                'https://github.com/madler/zlib/commit/1eb7682f845ac9e9bf9ae35bbfb3bad5dacbd91d',
-                'https://github.com/madler/zlib/commit/eff308af425b67093bab25f80f1ae950166bece1',
-                'https://github.com/nodejs/node/blob/75b68c6e4db515f76df73af476eccf382bbcb00a/deps/zlib/inflate.c#L762-L764',
-                'https://linux.oracle.com/cve/CVE-2022-37434.html',
-                'https://linux.oracle.com/errata/ELSA-2023-1095.html',
-                'https://lists.debian.org/debian-lts-announce/2022/09/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JWN4VE3JQR4O2SOUS5TXNLANRPMHWV4I/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NMBOJ77A7T7PQCARMDUK75TE6LLESZ3O/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PAVPQNCG3XRLCLNSQRM3KAN5ZFMVXVTY/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/X5U7OTKZSHY2I3ZFJSR2SHFHW72RKGDK/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YRQAI7H4M4RQZ2IWZUEEXECBE5D56BH2/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2022-37434',
-                'https://security.netapp.com/advisory/ntap-20220901-0005/',
-                'https://security.netapp.com/advisory/ntap-20230427-0007/',
-                'https://support.apple.com/kb/HT213488',
-                'https://support.apple.com/kb/HT213489',
-                'https://support.apple.com/kb/HT213490',
-                'https://support.apple.com/kb/HT213491',
-                'https://support.apple.com/kb/HT213493',
-                'https://support.apple.com/kb/HT213494',
-                'https://ubuntu.com/security/notices/USN-5570-1',
-                'https://ubuntu.com/security/notices/USN-5570-2',
-                'https://ubuntu.com/security/notices/USN-5573-1',
-                'https://ubuntu.com/security/notices/USN-6736-1',
-                'https://ubuntu.com/security/notices/USN-6736-2',
-                'https://www.cve.org/CVERecord?id=CVE-2022-37434',
-                'https://www.debian.org/security/2022/dsa-5218'
-              ],
-              'severity':   'CRITICAL',
-              'suppressed': false,
-              'title':      'zlib: heap-based buffer over-read and overflow in inflate() in inflate.c via a large gzip header extra field'
-            },
-            {
-              'cve':  'CVE-2018-25032',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'nvd': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '8.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-787'
-              ],
-              'description':   'zlib before 1.2.12 allows memory corruption when deflating (i.e., when compressing) if the input has many distant matches.',
-              'diffID':        'sha256:2e38978dfe406188f56968f907e9c3dd2692a5d21671e2307bd5a503fb08f8b0',
-              'fixedVersions': [
-                '1.2.12-r0'
-              ],
-              'installedVersion': '1.2.11-r3',
-              'packageName':      'zlib',
-              'purl':             'pkg:apk/alpine/zlib@1.2.11-r3?arch=x86_64&distro=3.14.4',
-              'references':       [
-                'http://seclists.org/fulldisclosure/2022/May/33',
-                'http://seclists.org/fulldisclosure/2022/May/35',
-                'http://seclists.org/fulldisclosure/2022/May/38',
-                'http://www.openwall.com/lists/oss-security/2022/03/25/2',
-                'http://www.openwall.com/lists/oss-security/2022/03/26/1',
-                'https://access.redhat.com/errata/RHSA-2022:8420',
-                'https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-25032.json',
-                'https://access.redhat.com/security/cve/CVE-2018-25032',
-                'https://bugzilla.redhat.com/2067945',
-                'https://cert-portal.siemens.com/productcert/pdf/ssa-333517.pdf',
-                'https://errata.almalinux.org/9/ALSA-2022-8420.html',
-                'https://github.com/advisories/GHSA-jc36-42cf-vqwj',
-                'https://github.com/madler/zlib/commit/5c44459c3b28a9bd3283aaceab7c615f8020c531',
-                'https://github.com/madler/zlib/compare/v1.2.11...v1.2.12',
-                'https://github.com/madler/zlib/issues/605',
-                'https://github.com/rubysec/ruby-advisory-db/blob/master/gems/nokogiri/CVE-2018-25032.yml',
-                'https://github.com/sparklemotion/nokogiri/releases/tag/v1.13.4',
-                'https://github.com/sparklemotion/nokogiri/security/advisories/GHSA-v6gp-9mmm-c6p5',
-                'https://groups.google.com/g/ruby-security-ann/c/vX7qSjsvWis/m/TJWN4oOKBwAJ',
-                'https://linux.oracle.com/cve/CVE-2018-25032.html',
-                'https://linux.oracle.com/errata/ELSA-2022-9565.html',
-                'https://lists.debian.org/debian-lts-announce/2022/04/msg00000.html',
-                'https://lists.debian.org/debian-lts-announce/2022/05/msg00008.html',
-                'https://lists.debian.org/debian-lts-announce/2022/09/msg00023.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DCZFIJBJTZ7CL5QXBFKTQ22Q26VINRUF/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DF62MVMH3QUGMBDCB3DY2ERQ6EBHTADB/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JZZPTWRYQULAOL3AW7RZJNVZ2UONXCV4/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NS2D2GFPFGOJUL4WQ3DUAY7HF4VWQ77F/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VOKNP2L734AEL47NRYGVZIKEFOUBQY5Y/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/XOKFMSNQ5D5WGMALBNBXU3GE442V74WU/',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/DCZFIJBJTZ7CL5QXBFKTQ22Q26VINRUF',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/DCZFIJBJTZ7CL5QXBFKTQ22Q26VINRUF/',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/DF62MVMH3QUGMBDCB3DY2ERQ6EBHTADB',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/DF62MVMH3QUGMBDCB3DY2ERQ6EBHTADB/',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/JZZPTWRYQULAOL3AW7RZJNVZ2UONXCV4',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/JZZPTWRYQULAOL3AW7RZJNVZ2UONXCV4/',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/NS2D2GFPFGOJUL4WQ3DUAY7HF4VWQ77F',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/NS2D2GFPFGOJUL4WQ3DUAY7HF4VWQ77F/',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/VOKNP2L734AEL47NRYGVZIKEFOUBQY5Y',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/VOKNP2L734AEL47NRYGVZIKEFOUBQY5Y/',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/XOKFMSNQ5D5WGMALBNBXU3GE442V74WU',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/XOKFMSNQ5D5WGMALBNBXU3GE442V74WU/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2018-25032',
-                'https://security.gentoo.org/glsa/202210-42',
-                'https://security.netapp.com/advisory/ntap-20220526-0009',
-                'https://security.netapp.com/advisory/ntap-20220526-0009/',
-                'https://security.netapp.com/advisory/ntap-20220729-0004',
-                'https://security.netapp.com/advisory/ntap-20220729-0004/',
-                'https://support.apple.com/kb/HT213255',
-                'https://support.apple.com/kb/HT213256',
-                'https://support.apple.com/kb/HT213257',
-                'https://ubuntu.com/security/notices/USN-5355-1',
-                'https://ubuntu.com/security/notices/USN-5355-2',
-                'https://ubuntu.com/security/notices/USN-5359-1',
-                'https://ubuntu.com/security/notices/USN-5359-2',
-                'https://ubuntu.com/security/notices/USN-5739-1',
-                'https://ubuntu.com/security/notices/USN-6736-1',
-                'https://ubuntu.com/security/notices/USN-6736-2',
-                'https://www.cve.org/CVERecord?id=CVE-2018-25032',
-                'https://www.debian.org/security/2022/dsa-5111',
-                'https://www.openwall.com/lists/oss-security/2022/03/24/1',
-                'https://www.openwall.com/lists/oss-security/2022/03/28/1',
-                'https://www.openwall.com/lists/oss-security/2022/03/28/3',
-                'https://www.oracle.com/security-alerts/cpujul2022.html'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'zlib: A flaw found in zlib when compressing (not decompressing) certain inputs'
-            }
-          ]
-        }
-      ],
-      'summary': {
-        'critical':   1,
-        'high':       12,
-        'low':        0,
-        'medium':     6,
-        'suppressed': 0,
-        'unknown':    0
-      }
-    }
-  },
-  {
-    'id':    'default/75a3990b9209ec91613785cb3ff3bea269b382f6febd2c80a9349085ad570a5f',
-    'type':  'storage.sbomscanner.kubewarden.io.vulnerabilityreport',
-    'links': {
-      'patch':  'https://localhost:8005/v1/storage.sbomscanner.kubewarden.io.vulnerabilityreports/default/75a3990b9209ec91613785cb3ff3bea269b382f6febd2c80a9349085ad570a5f',
-      'remove': 'https://localhost:8005/v1/storage.sbomscanner.kubewarden.io.vulnerabilityreports/default/75a3990b9209ec91613785cb3ff3bea269b382f6febd2c80a9349085ad570a5f',
-      'self':   'https://localhost:8005/v1/storage.sbomscanner.kubewarden.io.vulnerabilityreports/default/75a3990b9209ec91613785cb3ff3bea269b382f6febd2c80a9349085ad570a5f',
-      'update': 'https://localhost:8005/v1/storage.sbomscanner.kubewarden.io.vulnerabilityreports/default/75a3990b9209ec91613785cb3ff3bea269b382f6febd2c80a9349085ad570a5f',
-      'view':   'https://localhost:8005/apis/storage.sbomscanner.kubewarden.io/v1alpha1/namespaces/default/vulnerabilityreports/75a3990b9209ec91613785cb3ff3bea269b382f6febd2c80a9349085ad570a5f'
-    },
-    'apiVersion':    'storage.sbomscanner.kubewarden.io/v1alpha1',
-    'imageMetadata': {
-      'digest':      'sha256:9e334cd6483b43df68504ef67bdaee968c4efb99a791bd941d658f5f534d0486',
-      'platform':    'linux/arm/v6',
-      'registry':    'lsong-demo1',
-      'registryURI': 'registry-1.docker.io',
-      'repository':  'library/alpine',
-      'tag':         '3.20.5'
-    },
-    'kind':     'VulnerabilityReport',
-    'metadata': {
-      'creationTimestamp': '2026-01-14T18:51:38Z',
-      'fields':            [
-        '75a3990b9209ec91613785cb3ff3bea269b382f6febd2c80a9349085ad570a5f',
-        'registry-1.docker.io/library/alpine:3.20.5',
-        'linux/arm/v6',
-        '18 (0 suppressed)'
-      ],
-      'labels': {
-        'app.kubernetes.io/managed-by':          'sbomscanner',
-        'app.kubernetes.io/part-of':             'sbomscanner',
-        'sbomscanner.kubewarden.io/scanjob-uid': '445c600a-c4b6-40b3-bd71-f2d2140a37d5'
-      },
-      'name':            '75a3990b9209ec91613785cb3ff3bea269b382f6febd2c80a9349085ad570a5f',
-      'namespace':       'default',
-      'ownerReferences': [
-        {
-          'apiVersion':         'storage.sbomscanner.kubewarden.io/v1alpha1',
-          'blockOwnerDeletion': true,
-          'controller':         true,
-          'kind':               'SBOM',
-          'name':               '75a3990b9209ec91613785cb3ff3bea269b382f6febd2c80a9349085ad570a5f',
-          'uid':                '95fc9670-02fd-4d27-adb4-40907545a40f'
-        }
-      ],
-      'relationships': [
-        {
-          'fromId':   'default/75a3990b9209ec91613785cb3ff3bea269b382f6febd2c80a9349085ad570a5f',
-          'fromType': 'storage.sbomscanner.kubewarden.io.sbom',
-          'rel':      'owner',
-          'state':    'active',
-          'message':  'Resource is current'
-        }
-      ],
-      'resourceVersion': '1',
-      'state':           {
-        'error':         false,
-        'message':       'Resource is current',
-        'name':          'active',
-        'transitioning': false
-      },
-      'uid': '6d00ce45-eb1f-4189-ad6f-8d4f9ddd5f07'
-    },
-    'report': {
-      'results': [
-        {
-          'class':           'os-pkgs',
-          'target':          '/var/run/worker/trivy.sbom.3569091632.json (alpine 3.20.5)',
-          'type':            'alpine',
-          'vulnerabilities': [
-            {
-              'cve':  'CVE-2024-58251',
-              'cwes': [
-                'CWE-150'
-              ],
-              'description':   'In netstat in BusyBox through 1.37.0, local users can launch of network application with an argv[0] containing an ANSI terminal escape sequence, leading to a denial of service (terminal locked up) when netstat is used by a victim.',
-              'diffID':        'sha256:25902b716555b8e1b2e596d94ef391773dfe114040c40198752f8d2bb65d2232',
-              'fixedVersions': [
-                '1.36.1-r31'
-              ],
-              'installedVersion': '1.36.1-r29',
-              'packageName':      'busybox',
-              'purl':             'pkg:apk/alpine/busybox@1.36.1-r29?arch=armhf&distro=3.20.5',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2025/04/23/6',
-                'https://bugs.busybox.net/show_bug.cgi?id=15922',
-                'https://www.busybox.net',
-                'https://www.busybox.net/downloads/',
-                'https://www.cve.org/CVERecord?id=CVE-2024-58251'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'In netstat in BusyBox through 1.37.0, local users can launch of networ ...'
-            },
-            {
-              'cve':  'CVE-2025-46394',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '3.3',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-451'
-              ],
-              'description':   'In tar in BusyBox through 1.37.0, a TAR archive can have filenames hidden from a listing through the use of terminal escape sequences.',
-              'diffID':        'sha256:25902b716555b8e1b2e596d94ef391773dfe114040c40198752f8d2bb65d2232',
-              'fixedVersions': [
-                '1.36.1-r31'
-              ],
-              'installedVersion': '1.36.1-r29',
-              'packageName':      'busybox',
-              'purl':             'pkg:apk/alpine/busybox@1.36.1-r29?arch=armhf&distro=3.20.5',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2025/04/23/5',
-                'http://www.openwall.com/lists/oss-security/2025/04/24/3',
-                'https://bugs.busybox.net/show_bug.cgi?id=16018',
-                'https://lists.busybox.net/pipermail/busybox/2024-July/090806.html',
-                'https://lists.busybox.net/pipermail/busybox/2024-July/090814.html',
-                'https://www.busybox.net',
-                'https://www.busybox.net/downloads/',
-                'https://www.cve.org/CVERecord?id=CVE-2025-46394',
-                'https://www.openwall.com/lists/oss-security/2025/04/23/1'
-              ],
-              'severity':   'LOW',
-              'suppressed': false,
-              'title':      'In tar in BusyBox through 1.37.0, a TAR archive can have filenames hid ...'
-            },
-            {
-              'cve':  'CVE-2024-58251',
-              'cwes': [
-                'CWE-150'
-              ],
-              'description':   'In netstat in BusyBox through 1.37.0, local users can launch of network application with an argv[0] containing an ANSI terminal escape sequence, leading to a denial of service (terminal locked up) when netstat is used by a victim.',
-              'diffID':        'sha256:25902b716555b8e1b2e596d94ef391773dfe114040c40198752f8d2bb65d2232',
-              'fixedVersions': [
-                '1.36.1-r31'
-              ],
-              'installedVersion': '1.36.1-r29',
-              'packageName':      'busybox-binsh',
-              'purl':             'pkg:apk/alpine/busybox-binsh@1.36.1-r29?arch=armhf&distro=3.20.5',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2025/04/23/6',
-                'https://bugs.busybox.net/show_bug.cgi?id=15922',
-                'https://www.busybox.net',
-                'https://www.busybox.net/downloads/',
-                'https://www.cve.org/CVERecord?id=CVE-2024-58251'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'In netstat in BusyBox through 1.37.0, local users can launch of networ ...'
-            },
-            {
-              'cve':  'CVE-2025-46394',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '3.3',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-451'
-              ],
-              'description':   'In tar in BusyBox through 1.37.0, a TAR archive can have filenames hidden from a listing through the use of terminal escape sequences.',
-              'diffID':        'sha256:25902b716555b8e1b2e596d94ef391773dfe114040c40198752f8d2bb65d2232',
-              'fixedVersions': [
-                '1.36.1-r31'
-              ],
-              'installedVersion': '1.36.1-r29',
-              'packageName':      'busybox-binsh',
-              'purl':             'pkg:apk/alpine/busybox-binsh@1.36.1-r29?arch=armhf&distro=3.20.5',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2025/04/23/5',
-                'http://www.openwall.com/lists/oss-security/2025/04/24/3',
-                'https://bugs.busybox.net/show_bug.cgi?id=16018',
-                'https://lists.busybox.net/pipermail/busybox/2024-July/090806.html',
-                'https://lists.busybox.net/pipermail/busybox/2024-July/090814.html',
-                'https://www.busybox.net',
-                'https://www.busybox.net/downloads/',
-                'https://www.cve.org/CVERecord?id=CVE-2025-46394',
-                'https://www.openwall.com/lists/oss-security/2025/04/23/1'
-              ],
-              'severity':   'LOW',
-              'suppressed': false,
-              'title':      'In tar in BusyBox through 1.37.0, a TAR archive can have filenames hid ...'
-            },
-            {
-              'cve':  'CVE-2024-12797',
-              'cvss': {
-                'redhat': {
-                  'v3score':  '7.4',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-392'
-              ],
-              'description':   "Issue summary: Clients using RFC7250 Raw Public Keys (RPKs) to authenticate a\nserver may fail to notice that the server was not authenticated, because\nhandshakes don't abort as expected when the SSL_VERIFY_PEER verification mode\nis set.\n\nImpact summary: TLS and DTLS connections using raw public keys may be\nvulnerable to man-in-middle attacks when server authentication failure is not\ndetected by clients.\n\nRPKs are disabled by default in both TLS clients and TLS servers.  The issue\nonly arises when TLS clients explicitly enable RPK use by the server, and the\nserver, likewise, enables sending of an RPK instead of an X.509 certificate\nchain.  The affected clients are those that then rely on the handshake to\nfail when the server's RPK fails to match one of the expected public keys,\nby setting the verification mode to SSL_VERIFY_PEER.\n\nClients that enable server-side raw public keys can still find out that raw\npublic key verification failed by calling SSL_get_verify_result(), and those\nthat do, and take appropriate action, are not affected.  This issue was\nintroduced in the initial implementation of RPK support in OpenSSL 3.2.\n\nThe FIPS modules in 3.4, 3.3, 3.2, 3.1 and 3.0 are not affected by this issue.",
-              'diffID':        'sha256:25902b716555b8e1b2e596d94ef391773dfe114040c40198752f8d2bb65d2232',
-              'fixedVersions': [
-                '3.3.3-r0'
-              ],
-              'installedVersion': '3.3.2-r1',
-              'packageName':      'libcrypto3',
-              'purl':             'pkg:apk/alpine/libcrypto3@3.3.2-r1?arch=armhf&distro=3.20.5',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2025/02/11/3',
-                'http://www.openwall.com/lists/oss-security/2025/02/11/4',
-                'https://access.redhat.com/errata/RHSA-2025:1330',
-                'https://access.redhat.com/security/cve/CVE-2024-12797',
-                'https://bugzilla.redhat.com/2342757',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2342757',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-12797',
-                'https://errata.almalinux.org/9/ALSA-2025-1330.html',
-                'https://errata.rockylinux.org/RLSA-2025:1330',
-                'https://github.com/openssl/openssl/commit/738d4f9fdeaad57660dcba50a619fafced3fd5e9',
-                'https://github.com/openssl/openssl/commit/798779d43494549b611233f92652f0da5328fbe7',
-                'https://github.com/openssl/openssl/commit/87ebd203feffcf92ad5889df92f90bb0ee10a699',
-                'https://github.com/pyca/cryptography',
-                'https://github.com/pyca/cryptography/security/advisories/GHSA-79v4-65xg-pq4g',
-                'https://linux.oracle.com/cve/CVE-2024-12797.html',
-                'https://linux.oracle.com/errata/ELSA-2025-1330.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2024-12797',
-                'https://openssl-library.org/news/secadv/20250211.txt',
-                'https://security.netapp.com/advisory/ntap-20250214-0001/',
-                'https://ubuntu.com/security/notices/USN-7264-1',
-                'https://www.cve.org/CVERecord?id=CVE-2024-12797'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      "openssl: RFC7250 handshakes with unauthenticated servers don't abort as expected"
-            },
-            {
-              'cve':  'CVE-2024-13176',
-              'cvss': {
-                'redhat': {
-                  'v3score':  '4.7',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-385'
-              ],
-              'description':   'Issue summary: A timing side-channel which could potentially allow recovering\nthe private key exists in the ECDSA signature computation.\n\nImpact summary: A timing side-channel in ECDSA signature computations\ncould allow recovering the private key by an attacker. However, measuring\nthe timing would require either local access to the signing application or\na very fast network connection with low latency.\n\nThere is a timing signal of around 300 nanoseconds when the top word of\nthe inverted ECDSA nonce value is zero. This can happen with significant\nprobability only for some of the supported elliptic curves. In particular\nthe NIST P-521 curve is affected. To be able to measure this leak, the attacker\nprocess must either be located in the same physical computer or must\nhave a very fast network connection with low latency. For that reason\nthe severity of this vulnerability is Low.\n\nThe FIPS modules in 3.4, 3.3, 3.2, 3.1 and 3.0 are affected by this issue.',
-              'diffID':        'sha256:25902b716555b8e1b2e596d94ef391773dfe114040c40198752f8d2bb65d2232',
-              'fixedVersions': [
-                '3.3.2-r2'
-              ],
-              'installedVersion': '3.3.2-r1',
-              'packageName':      'libcrypto3',
-              'purl':             'pkg:apk/alpine/libcrypto3@3.3.2-r1?arch=armhf&distro=3.20.5',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2025/01/20/2',
-                'https://access.redhat.com/errata/RHSA-2025:16046',
-                'https://access.redhat.com/security/cve/CVE-2024-13176',
-                'https://bugzilla.redhat.com/2359885',
-                'https://bugzilla.redhat.com/2359888',
-                'https://bugzilla.redhat.com/2359892',
-                'https://bugzilla.redhat.com/2359894',
-                'https://bugzilla.redhat.com/2359895',
-                'https://bugzilla.redhat.com/2359899',
-                'https://bugzilla.redhat.com/2359900',
-                'https://bugzilla.redhat.com/2359902',
-                'https://bugzilla.redhat.com/2359903',
-                'https://bugzilla.redhat.com/2359911',
-                'https://bugzilla.redhat.com/2359918',
-                'https://bugzilla.redhat.com/2359920',
-                'https://bugzilla.redhat.com/2359924',
-                'https://bugzilla.redhat.com/2359928',
-                'https://bugzilla.redhat.com/2359930',
-                'https://bugzilla.redhat.com/2359932',
-                'https://bugzilla.redhat.com/2359934',
-                'https://bugzilla.redhat.com/2359938',
-                'https://bugzilla.redhat.com/2359940',
-                'https://bugzilla.redhat.com/2359943',
-                'https://bugzilla.redhat.com/2359944',
-                'https://bugzilla.redhat.com/2359945',
-                'https://bugzilla.redhat.com/2359947',
-                'https://bugzilla.redhat.com/2359950',
-                'https://bugzilla.redhat.com/2359963',
-                'https://bugzilla.redhat.com/2359964',
-                'https://bugzilla.redhat.com/2359972',
-                'https://bugzilla.redhat.com/2370920',
-                'https://bugzilla.redhat.com/2380264',
-                'https://bugzilla.redhat.com/2380273',
-                'https://bugzilla.redhat.com/2380274',
-                'https://bugzilla.redhat.com/2380278',
-                'https://bugzilla.redhat.com/2380280',
-                'https://bugzilla.redhat.com/2380283',
-                'https://bugzilla.redhat.com/2380284',
-                'https://bugzilla.redhat.com/2380290',
-                'https://bugzilla.redhat.com/2380291',
-                'https://bugzilla.redhat.com/2380295',
-                'https://bugzilla.redhat.com/2380298',
-                'https://bugzilla.redhat.com/2380306',
-                'https://bugzilla.redhat.com/2380308',
-                'https://bugzilla.redhat.com/2380309',
-                'https://bugzilla.redhat.com/2380310',
-                'https://bugzilla.redhat.com/2380312',
-                'https://bugzilla.redhat.com/2380313',
-                'https://bugzilla.redhat.com/2380320',
-                'https://bugzilla.redhat.com/2380321',
-                'https://bugzilla.redhat.com/2380322',
-                'https://bugzilla.redhat.com/2380326',
-                'https://bugzilla.redhat.com/2380327',
-                'https://bugzilla.redhat.com/2380334',
-                'https://bugzilla.redhat.com/2380335',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2338999',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359885',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359888',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359892',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359894',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359895',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359899',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359900',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359902',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359903',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359911',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359918',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359920',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359924',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359928',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359930',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359932',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359934',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359938',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359940',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359943',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359944',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359945',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359947',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359950',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359963',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359964',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359972',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2370920',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380264',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380273',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380274',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380278',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380280',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380283',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380284',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380290',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380291',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380295',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380298',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380306',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380308',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380309',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380310',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380312',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380313',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380320',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380321',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380322',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380326',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380327',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380334',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380335',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-13176',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21574',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21575',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21577',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21579',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21580',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21581',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21584',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21585',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21588',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30681',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30682',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30683',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30684',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30685',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30687',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30688',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30689',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30693',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30695',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30696',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30699',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30703',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30704',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30705',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30715',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30721',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30722',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50077',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50078',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50079',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50080',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50081',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50082',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50083',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50084',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50085',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50086',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50087',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50088',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50091',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50092',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50093',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50094',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50096',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50097',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50098',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50099',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50100',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50101',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50102',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50104',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-5399',
-                'https://errata.almalinux.org/9/ALSA-2025-16046.html',
-                'https://errata.rockylinux.org/RLSA-2025:15699',
-                'https://github.com/openssl/openssl/commit/07272b05b04836a762b4baa874958af51d513844',
-                'https://github.com/openssl/openssl/commit/2af62e74fb59bc469506bc37eb2990ea408d9467',
-                'https://github.com/openssl/openssl/commit/392dcb336405a0c94486aa6655057f59fd3a0902',
-                'https://github.com/openssl/openssl/commit/4b1cb94a734a7d4ec363ac0a215a25c181e11f65',
-                'https://github.com/openssl/openssl/commit/77c608f4c8857e63e98e66444e2e761c9627916f',
-                'https://github.openssl.org/openssl/extended-releases/commit/0d5fd1ab987f7571e2c955d8d8b638fc0fb54ded',
-                'https://github.openssl.org/openssl/extended-releases/commit/a2639000db19878d5d89586ae7b725080592ae86',
-                'https://linux.oracle.com/cve/CVE-2024-13176.html',
-                'https://linux.oracle.com/errata/ELSA-2025-16046.html',
-                'https://lists.debian.org/debian-lts-announce/2025/05/msg00028.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2024-13176',
-                'https://openssl-library.org/news/secadv/20250120.txt',
-                'https://security.netapp.com/advisory/ntap-20250124-0005/',
-                'https://security.netapp.com/advisory/ntap-20250418-0010/',
-                'https://security.netapp.com/advisory/ntap-20250502-0006/',
-                'https://ubuntu.com/security/notices/USN-7264-1',
-                'https://ubuntu.com/security/notices/USN-7278-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2024-13176',
-                'https://www.oracle.com/security-alerts/cpuapr2025.html#AppendixMSQL'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: Timing side-channel in ECDSA signature computation'
-            },
-            {
-              'cve':  'CVE-2025-9230',
-              'cvss': {
-                'redhat': {
-                  'v3score':  '5.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L'
-                }
-              },
-              'cwes': [
-                'CWE-125',
-                'CWE-787'
-              ],
-              'description':   'Issue summary: An application trying to decrypt CMS messages encrypted using\npassword based encryption can trigger an out-of-bounds read and write.\n\nImpact summary: This out-of-bounds read may trigger a crash which leads to\nDenial of Service for an application. The out-of-bounds write can cause\na memory corruption which can have various consequences including\na Denial of Service or Execution of attacker-supplied code.\n\nAlthough the consequences of a successful exploit of this vulnerability\ncould be severe, the probability that the attacker would be able to\nperform it is low. Besides, password based (PWRI) encryption support in CMS\nmessages is very rarely used. For that reason the issue was assessed as\nModerate severity according to our Security Policy.\n\nThe FIPS modules in 3.5, 3.4, 3.3, 3.2, 3.1 and 3.0 are not affected by this\nissue, as the CMS implementation is outside the OpenSSL FIPS module\nboundary.',
-              'diffID':        'sha256:25902b716555b8e1b2e596d94ef391773dfe114040c40198752f8d2bb65d2232',
-              'fixedVersions': [
-                '3.3.5-r0'
-              ],
-              'installedVersion': '3.3.2-r1',
-              'packageName':      'libcrypto3',
-              'purl':             'pkg:apk/alpine/libcrypto3@3.3.2-r1?arch=armhf&distro=3.20.5',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2025/09/30/5',
-                'https://access.redhat.com/errata/RHSA-2025:21255',
-                'https://access.redhat.com/security/cve/CVE-2025-9230',
-                'https://bugzilla.redhat.com/2396054',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2396054',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-9230',
-                'https://errata.almalinux.org/9/ALSA-2025-21255.html',
-                'https://errata.rockylinux.org/RLSA-2025:21255',
-                'https://github.com/openssl/openssl/commit/5965ea5dd6960f36d8b7f74f8eac67a8eb8f2b45',
-                'https://github.com/openssl/openssl/commit/9e91358f365dee6c446dcdcdb01c04d2743fd280',
-                'https://github.com/openssl/openssl/commit/a79c4ce559c6a3a8fd4109e9f33c1185d5bf2def',
-                'https://github.com/openssl/openssl/commit/b5282d677551afda7d20e9c00e09561b547b2dfd',
-                'https://github.com/openssl/openssl/commit/bae259a211ada6315dc50900686daaaaaa55f482',
-                'https://github.openssl.org/openssl/extended-releases/commit/c2b96348bfa662f25f4fabf81958ae822063dae3',
-                'https://github.openssl.org/openssl/extended-releases/commit/dfbaf161d8dafc1132dd88cd48ad990ed9b4c8ba',
-                'https://linux.oracle.com/cve/CVE-2025-9230.html',
-                'https://linux.oracle.com/errata/ELSA-2026-0337.html',
-                'https://lists.debian.org/debian-lts-announce/2025/10/msg00001.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2025-9230',
-                'https://openssl-library.org/news/secadv/20250930.txt',
-                'https://ubuntu.com/security/notices/USN-7786-1',
-                'https://www.cve.org/CVERecord?id=CVE-2025-9230'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: Out-of-bounds read & write in RFC 3211 KEK Unwrap'
-            },
-            {
-              'cve':  'CVE-2025-9231',
-              'cvss': {
-                'redhat': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-385'
-              ],
-              'description':   'Issue summary: A timing side-channel which could potentially allow remote\nrecovery of the private key exists in the SM2 algorithm implementation on 64 bit\nARM platforms.\n\nImpact summary: A timing side-channel in SM2 signature computations on 64 bit\nARM platforms could allow recovering the private key by an attacker..\n\nWhile remote key recovery over a network was not attempted by the reporter,\ntiming measurements revealed a timing signal which may allow such an attack.\n\nOpenSSL does not directly support certificates with SM2 keys in TLS, and so\nthis CVE is not relevant in most TLS contexts.  However, given that it is\npossible to add support for such certificates via a custom provider, coupled\nwith the fact that in such a custom provider context the private key may be\nrecoverable via remote timing measurements, we consider this to be a Moderate\nseverity issue.\n\nThe FIPS modules in 3.5, 3.4, 3.3, 3.2, 3.1 and 3.0 are not affected by this\nissue, as SM2 is not an approved algorithm.',
-              'diffID':        'sha256:25902b716555b8e1b2e596d94ef391773dfe114040c40198752f8d2bb65d2232',
-              'fixedVersions': [
-                '3.3.5-r0'
-              ],
-              'installedVersion': '3.3.2-r1',
-              'packageName':      'libcrypto3',
-              'purl':             'pkg:apk/alpine/libcrypto3@3.3.2-r1?arch=armhf&distro=3.20.5',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2025/09/30/5',
-                'https://access.redhat.com/security/cve/CVE-2025-9231',
-                'https://github.com/openssl/openssl/commit/567f64386e43683888212226824b6a179885a0fe',
-                'https://github.com/openssl/openssl/commit/cba616c26ac8e7b37de5e77762e505ba5ca51698',
-                'https://github.com/openssl/openssl/commit/eed5adc9f969d77c94f213767acbb41ff923b6f4',
-                'https://github.com/openssl/openssl/commit/fc47a2ec078912b3e914fab5734535e76c4820c2',
-                'https://nvd.nist.gov/vuln/detail/CVE-2025-9231',
-                'https://openssl-library.org/news/secadv/20250930.txt',
-                'https://ubuntu.com/security/notices/USN-7786-1',
-                'https://www.cve.org/CVERecord?id=CVE-2025-9231'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: Timing side-channel in SM2 algorithm on 64 bit ARM'
-            },
-            {
-              'cve':  'CVE-2025-9232',
-              'cvss': {
-                'redhat': {
-                  'v3score':  '3.1',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L'
-                }
-              },
-              'cwes': [
-                'CWE-125'
-              ],
-              'description':   "Issue summary: An application using the OpenSSL HTTP client API functions may\ntrigger an out-of-bounds read if the 'no_proxy' environment variable is set and\nthe host portion of the authority component of the HTTP URL is an IPv6 address.\n\nImpact summary: An out-of-bounds read can trigger a crash which leads to\nDenial of Service for an application.\n\nThe OpenSSL HTTP client API functions can be used directly by applications\nbut they are also used by the OCSP client functions and CMP (Certificate\nManagement Protocol) client implementation in OpenSSL. However the URLs used\nby these implementations are unlikely to be controlled by an attacker.\n\nIn this vulnerable code the out of bounds read can only trigger a crash.\nFurthermore the vulnerability requires an attacker-controlled URL to be\npassed from an application to the OpenSSL function and the user has to have\na 'no_proxy' environment variable set. For the aforementioned reasons the\nissue was assessed as Low severity.\n\nThe vulnerable code was introduced in the following patch releases:\n3.0.16, 3.1.8, 3.2.4, 3.3.3, 3.4.0 and 3.5.0.\n\nThe FIPS modules in 3.5, 3.4, 3.3, 3.2, 3.1 and 3.0 are not affected by this\nissue, as the HTTP client implementation is outside the OpenSSL FIPS module\nboundary.",
-              'diffID':        'sha256:25902b716555b8e1b2e596d94ef391773dfe114040c40198752f8d2bb65d2232',
-              'fixedVersions': [
-                '3.3.5-r0'
-              ],
-              'installedVersion': '3.3.2-r1',
-              'packageName':      'libcrypto3',
-              'purl':             'pkg:apk/alpine/libcrypto3@3.3.2-r1?arch=armhf&distro=3.20.5',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2025/09/30/5',
-                'https://access.redhat.com/security/cve/CVE-2025-9232',
-                'https://github.com/openssl/openssl/commit/2b4ec20e47959170422922eaff25346d362dcb35',
-                'https://github.com/openssl/openssl/commit/654dc11d23468a74fc8ea4672b702dd3feb7be4b',
-                'https://github.com/openssl/openssl/commit/7cf21a30513c9e43c4bc3836c237cf086e194af3',
-                'https://github.com/openssl/openssl/commit/89e790ac431125a4849992858490bed6b225eadf',
-                'https://github.com/openssl/openssl/commit/bbf38c034cdabd0a13330abcc4855c866f53d2e0',
-                'https://nvd.nist.gov/vuln/detail/CVE-2025-9232',
-                'https://openssl-library.org/news/secadv/20250930.txt',
-                'https://ubuntu.com/security/notices/USN-7786-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2025-9232'
-              ],
-              'severity':   'LOW',
-              'suppressed': false,
-              'title':      'openssl: Out-of-bounds read in HTTP client no_proxy handling'
-            },
-            {
-              'cve':  'CVE-2024-12797',
-              'cvss': {
-                'redhat': {
-                  'v3score':  '7.4',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-392'
-              ],
-              'description':   "Issue summary: Clients using RFC7250 Raw Public Keys (RPKs) to authenticate a\nserver may fail to notice that the server was not authenticated, because\nhandshakes don't abort as expected when the SSL_VERIFY_PEER verification mode\nis set.\n\nImpact summary: TLS and DTLS connections using raw public keys may be\nvulnerable to man-in-middle attacks when server authentication failure is not\ndetected by clients.\n\nRPKs are disabled by default in both TLS clients and TLS servers.  The issue\nonly arises when TLS clients explicitly enable RPK use by the server, and the\nserver, likewise, enables sending of an RPK instead of an X.509 certificate\nchain.  The affected clients are those that then rely on the handshake to\nfail when the server's RPK fails to match one of the expected public keys,\nby setting the verification mode to SSL_VERIFY_PEER.\n\nClients that enable server-side raw public keys can still find out that raw\npublic key verification failed by calling SSL_get_verify_result(), and those\nthat do, and take appropriate action, are not affected.  This issue was\nintroduced in the initial implementation of RPK support in OpenSSL 3.2.\n\nThe FIPS modules in 3.4, 3.3, 3.2, 3.1 and 3.0 are not affected by this issue.",
-              'diffID':        'sha256:25902b716555b8e1b2e596d94ef391773dfe114040c40198752f8d2bb65d2232',
-              'fixedVersions': [
-                '3.3.3-r0'
-              ],
-              'installedVersion': '3.3.2-r1',
-              'packageName':      'libssl3',
-              'purl':             'pkg:apk/alpine/libssl3@3.3.2-r1?arch=armhf&distro=3.20.5',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2025/02/11/3',
-                'http://www.openwall.com/lists/oss-security/2025/02/11/4',
-                'https://access.redhat.com/errata/RHSA-2025:1330',
-                'https://access.redhat.com/security/cve/CVE-2024-12797',
-                'https://bugzilla.redhat.com/2342757',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2342757',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-12797',
-                'https://errata.almalinux.org/9/ALSA-2025-1330.html',
-                'https://errata.rockylinux.org/RLSA-2025:1330',
-                'https://github.com/openssl/openssl/commit/738d4f9fdeaad57660dcba50a619fafced3fd5e9',
-                'https://github.com/openssl/openssl/commit/798779d43494549b611233f92652f0da5328fbe7',
-                'https://github.com/openssl/openssl/commit/87ebd203feffcf92ad5889df92f90bb0ee10a699',
-                'https://github.com/pyca/cryptography',
-                'https://github.com/pyca/cryptography/security/advisories/GHSA-79v4-65xg-pq4g',
-                'https://linux.oracle.com/cve/CVE-2024-12797.html',
-                'https://linux.oracle.com/errata/ELSA-2025-1330.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2024-12797',
-                'https://openssl-library.org/news/secadv/20250211.txt',
-                'https://security.netapp.com/advisory/ntap-20250214-0001/',
-                'https://ubuntu.com/security/notices/USN-7264-1',
-                'https://www.cve.org/CVERecord?id=CVE-2024-12797'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      "openssl: RFC7250 handshakes with unauthenticated servers don't abort as expected"
-            },
-            {
-              'cve':  'CVE-2024-13176',
-              'cvss': {
-                'redhat': {
-                  'v3score':  '4.7',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-385'
-              ],
-              'description':   'Issue summary: A timing side-channel which could potentially allow recovering\nthe private key exists in the ECDSA signature computation.\n\nImpact summary: A timing side-channel in ECDSA signature computations\ncould allow recovering the private key by an attacker. However, measuring\nthe timing would require either local access to the signing application or\na very fast network connection with low latency.\n\nThere is a timing signal of around 300 nanoseconds when the top word of\nthe inverted ECDSA nonce value is zero. This can happen with significant\nprobability only for some of the supported elliptic curves. In particular\nthe NIST P-521 curve is affected. To be able to measure this leak, the attacker\nprocess must either be located in the same physical computer or must\nhave a very fast network connection with low latency. For that reason\nthe severity of this vulnerability is Low.\n\nThe FIPS modules in 3.4, 3.3, 3.2, 3.1 and 3.0 are affected by this issue.',
-              'diffID':        'sha256:25902b716555b8e1b2e596d94ef391773dfe114040c40198752f8d2bb65d2232',
-              'fixedVersions': [
-                '3.3.2-r2'
-              ],
-              'installedVersion': '3.3.2-r1',
-              'packageName':      'libssl3',
-              'purl':             'pkg:apk/alpine/libssl3@3.3.2-r1?arch=armhf&distro=3.20.5',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2025/01/20/2',
-                'https://access.redhat.com/errata/RHSA-2025:16046',
-                'https://access.redhat.com/security/cve/CVE-2024-13176',
-                'https://bugzilla.redhat.com/2359885',
-                'https://bugzilla.redhat.com/2359888',
-                'https://bugzilla.redhat.com/2359892',
-                'https://bugzilla.redhat.com/2359894',
-                'https://bugzilla.redhat.com/2359895',
-                'https://bugzilla.redhat.com/2359899',
-                'https://bugzilla.redhat.com/2359900',
-                'https://bugzilla.redhat.com/2359902',
-                'https://bugzilla.redhat.com/2359903',
-                'https://bugzilla.redhat.com/2359911',
-                'https://bugzilla.redhat.com/2359918',
-                'https://bugzilla.redhat.com/2359920',
-                'https://bugzilla.redhat.com/2359924',
-                'https://bugzilla.redhat.com/2359928',
-                'https://bugzilla.redhat.com/2359930',
-                'https://bugzilla.redhat.com/2359932',
-                'https://bugzilla.redhat.com/2359934',
-                'https://bugzilla.redhat.com/2359938',
-                'https://bugzilla.redhat.com/2359940',
-                'https://bugzilla.redhat.com/2359943',
-                'https://bugzilla.redhat.com/2359944',
-                'https://bugzilla.redhat.com/2359945',
-                'https://bugzilla.redhat.com/2359947',
-                'https://bugzilla.redhat.com/2359950',
-                'https://bugzilla.redhat.com/2359963',
-                'https://bugzilla.redhat.com/2359964',
-                'https://bugzilla.redhat.com/2359972',
-                'https://bugzilla.redhat.com/2370920',
-                'https://bugzilla.redhat.com/2380264',
-                'https://bugzilla.redhat.com/2380273',
-                'https://bugzilla.redhat.com/2380274',
-                'https://bugzilla.redhat.com/2380278',
-                'https://bugzilla.redhat.com/2380280',
-                'https://bugzilla.redhat.com/2380283',
-                'https://bugzilla.redhat.com/2380284',
-                'https://bugzilla.redhat.com/2380290',
-                'https://bugzilla.redhat.com/2380291',
-                'https://bugzilla.redhat.com/2380295',
-                'https://bugzilla.redhat.com/2380298',
-                'https://bugzilla.redhat.com/2380306',
-                'https://bugzilla.redhat.com/2380308',
-                'https://bugzilla.redhat.com/2380309',
-                'https://bugzilla.redhat.com/2380310',
-                'https://bugzilla.redhat.com/2380312',
-                'https://bugzilla.redhat.com/2380313',
-                'https://bugzilla.redhat.com/2380320',
-                'https://bugzilla.redhat.com/2380321',
-                'https://bugzilla.redhat.com/2380322',
-                'https://bugzilla.redhat.com/2380326',
-                'https://bugzilla.redhat.com/2380327',
-                'https://bugzilla.redhat.com/2380334',
-                'https://bugzilla.redhat.com/2380335',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2338999',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359885',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359888',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359892',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359894',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359895',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359899',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359900',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359902',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359903',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359911',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359918',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359920',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359924',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359928',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359930',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359932',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359934',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359938',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359940',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359943',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359944',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359945',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359947',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359950',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359963',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359964',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359972',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2370920',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380264',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380273',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380274',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380278',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380280',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380283',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380284',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380290',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380291',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380295',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380298',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380306',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380308',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380309',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380310',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380312',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380313',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380320',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380321',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380322',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380326',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380327',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380334',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380335',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-13176',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21574',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21575',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21577',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21579',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21580',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21581',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21584',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21585',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21588',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30681',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30682',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30683',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30684',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30685',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30687',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30688',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30689',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30693',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30695',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30696',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30699',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30703',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30704',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30705',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30715',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30721',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30722',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50077',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50078',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50079',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50080',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50081',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50082',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50083',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50084',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50085',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50086',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50087',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50088',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50091',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50092',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50093',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50094',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50096',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50097',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50098',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50099',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50100',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50101',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50102',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50104',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-5399',
-                'https://errata.almalinux.org/9/ALSA-2025-16046.html',
-                'https://errata.rockylinux.org/RLSA-2025:15699',
-                'https://github.com/openssl/openssl/commit/07272b05b04836a762b4baa874958af51d513844',
-                'https://github.com/openssl/openssl/commit/2af62e74fb59bc469506bc37eb2990ea408d9467',
-                'https://github.com/openssl/openssl/commit/392dcb336405a0c94486aa6655057f59fd3a0902',
-                'https://github.com/openssl/openssl/commit/4b1cb94a734a7d4ec363ac0a215a25c181e11f65',
-                'https://github.com/openssl/openssl/commit/77c608f4c8857e63e98e66444e2e761c9627916f',
-                'https://github.openssl.org/openssl/extended-releases/commit/0d5fd1ab987f7571e2c955d8d8b638fc0fb54ded',
-                'https://github.openssl.org/openssl/extended-releases/commit/a2639000db19878d5d89586ae7b725080592ae86',
-                'https://linux.oracle.com/cve/CVE-2024-13176.html',
-                'https://linux.oracle.com/errata/ELSA-2025-16046.html',
-                'https://lists.debian.org/debian-lts-announce/2025/05/msg00028.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2024-13176',
-                'https://openssl-library.org/news/secadv/20250120.txt',
-                'https://security.netapp.com/advisory/ntap-20250124-0005/',
-                'https://security.netapp.com/advisory/ntap-20250418-0010/',
-                'https://security.netapp.com/advisory/ntap-20250502-0006/',
-                'https://ubuntu.com/security/notices/USN-7264-1',
-                'https://ubuntu.com/security/notices/USN-7278-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2024-13176',
-                'https://www.oracle.com/security-alerts/cpuapr2025.html#AppendixMSQL'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: Timing side-channel in ECDSA signature computation'
-            },
-            {
-              'cve':  'CVE-2025-9230',
-              'cvss': {
-                'redhat': {
-                  'v3score':  '5.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L'
-                }
-              },
-              'cwes': [
-                'CWE-125',
-                'CWE-787'
-              ],
-              'description':   'Issue summary: An application trying to decrypt CMS messages encrypted using\npassword based encryption can trigger an out-of-bounds read and write.\n\nImpact summary: This out-of-bounds read may trigger a crash which leads to\nDenial of Service for an application. The out-of-bounds write can cause\na memory corruption which can have various consequences including\na Denial of Service or Execution of attacker-supplied code.\n\nAlthough the consequences of a successful exploit of this vulnerability\ncould be severe, the probability that the attacker would be able to\nperform it is low. Besides, password based (PWRI) encryption support in CMS\nmessages is very rarely used. For that reason the issue was assessed as\nModerate severity according to our Security Policy.\n\nThe FIPS modules in 3.5, 3.4, 3.3, 3.2, 3.1 and 3.0 are not affected by this\nissue, as the CMS implementation is outside the OpenSSL FIPS module\nboundary.',
-              'diffID':        'sha256:25902b716555b8e1b2e596d94ef391773dfe114040c40198752f8d2bb65d2232',
-              'fixedVersions': [
-                '3.3.5-r0'
-              ],
-              'installedVersion': '3.3.2-r1',
-              'packageName':      'libssl3',
-              'purl':             'pkg:apk/alpine/libssl3@3.3.2-r1?arch=armhf&distro=3.20.5',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2025/09/30/5',
-                'https://access.redhat.com/errata/RHSA-2025:21255',
-                'https://access.redhat.com/security/cve/CVE-2025-9230',
-                'https://bugzilla.redhat.com/2396054',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2396054',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-9230',
-                'https://errata.almalinux.org/9/ALSA-2025-21255.html',
-                'https://errata.rockylinux.org/RLSA-2025:21255',
-                'https://github.com/openssl/openssl/commit/5965ea5dd6960f36d8b7f74f8eac67a8eb8f2b45',
-                'https://github.com/openssl/openssl/commit/9e91358f365dee6c446dcdcdb01c04d2743fd280',
-                'https://github.com/openssl/openssl/commit/a79c4ce559c6a3a8fd4109e9f33c1185d5bf2def',
-                'https://github.com/openssl/openssl/commit/b5282d677551afda7d20e9c00e09561b547b2dfd',
-                'https://github.com/openssl/openssl/commit/bae259a211ada6315dc50900686daaaaaa55f482',
-                'https://github.openssl.org/openssl/extended-releases/commit/c2b96348bfa662f25f4fabf81958ae822063dae3',
-                'https://github.openssl.org/openssl/extended-releases/commit/dfbaf161d8dafc1132dd88cd48ad990ed9b4c8ba',
-                'https://linux.oracle.com/cve/CVE-2025-9230.html',
-                'https://linux.oracle.com/errata/ELSA-2026-0337.html',
-                'https://lists.debian.org/debian-lts-announce/2025/10/msg00001.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2025-9230',
-                'https://openssl-library.org/news/secadv/20250930.txt',
-                'https://ubuntu.com/security/notices/USN-7786-1',
-                'https://www.cve.org/CVERecord?id=CVE-2025-9230'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: Out-of-bounds read & write in RFC 3211 KEK Unwrap'
-            },
-            {
-              'cve':  'CVE-2025-9231',
-              'cvss': {
-                'redhat': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-385'
-              ],
-              'description':   'Issue summary: A timing side-channel which could potentially allow remote\nrecovery of the private key exists in the SM2 algorithm implementation on 64 bit\nARM platforms.\n\nImpact summary: A timing side-channel in SM2 signature computations on 64 bit\nARM platforms could allow recovering the private key by an attacker..\n\nWhile remote key recovery over a network was not attempted by the reporter,\ntiming measurements revealed a timing signal which may allow such an attack.\n\nOpenSSL does not directly support certificates with SM2 keys in TLS, and so\nthis CVE is not relevant in most TLS contexts.  However, given that it is\npossible to add support for such certificates via a custom provider, coupled\nwith the fact that in such a custom provider context the private key may be\nrecoverable via remote timing measurements, we consider this to be a Moderate\nseverity issue.\n\nThe FIPS modules in 3.5, 3.4, 3.3, 3.2, 3.1 and 3.0 are not affected by this\nissue, as SM2 is not an approved algorithm.',
-              'diffID':        'sha256:25902b716555b8e1b2e596d94ef391773dfe114040c40198752f8d2bb65d2232',
-              'fixedVersions': [
-                '3.3.5-r0'
-              ],
-              'installedVersion': '3.3.2-r1',
-              'packageName':      'libssl3',
-              'purl':             'pkg:apk/alpine/libssl3@3.3.2-r1?arch=armhf&distro=3.20.5',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2025/09/30/5',
-                'https://access.redhat.com/security/cve/CVE-2025-9231',
-                'https://github.com/openssl/openssl/commit/567f64386e43683888212226824b6a179885a0fe',
-                'https://github.com/openssl/openssl/commit/cba616c26ac8e7b37de5e77762e505ba5ca51698',
-                'https://github.com/openssl/openssl/commit/eed5adc9f969d77c94f213767acbb41ff923b6f4',
-                'https://github.com/openssl/openssl/commit/fc47a2ec078912b3e914fab5734535e76c4820c2',
-                'https://nvd.nist.gov/vuln/detail/CVE-2025-9231',
-                'https://openssl-library.org/news/secadv/20250930.txt',
-                'https://ubuntu.com/security/notices/USN-7786-1',
-                'https://www.cve.org/CVERecord?id=CVE-2025-9231'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: Timing side-channel in SM2 algorithm on 64 bit ARM'
-            },
-            {
-              'cve':  'CVE-2025-9232',
-              'cvss': {
-                'redhat': {
-                  'v3score':  '3.1',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L'
-                }
-              },
-              'cwes': [
-                'CWE-125'
-              ],
-              'description':   "Issue summary: An application using the OpenSSL HTTP client API functions may\ntrigger an out-of-bounds read if the 'no_proxy' environment variable is set and\nthe host portion of the authority component of the HTTP URL is an IPv6 address.\n\nImpact summary: An out-of-bounds read can trigger a crash which leads to\nDenial of Service for an application.\n\nThe OpenSSL HTTP client API functions can be used directly by applications\nbut they are also used by the OCSP client functions and CMP (Certificate\nManagement Protocol) client implementation in OpenSSL. However the URLs used\nby these implementations are unlikely to be controlled by an attacker.\n\nIn this vulnerable code the out of bounds read can only trigger a crash.\nFurthermore the vulnerability requires an attacker-controlled URL to be\npassed from an application to the OpenSSL function and the user has to have\na 'no_proxy' environment variable set. For the aforementioned reasons the\nissue was assessed as Low severity.\n\nThe vulnerable code was introduced in the following patch releases:\n3.0.16, 3.1.8, 3.2.4, 3.3.3, 3.4.0 and 3.5.0.\n\nThe FIPS modules in 3.5, 3.4, 3.3, 3.2, 3.1 and 3.0 are not affected by this\nissue, as the HTTP client implementation is outside the OpenSSL FIPS module\nboundary.",
-              'diffID':        'sha256:25902b716555b8e1b2e596d94ef391773dfe114040c40198752f8d2bb65d2232',
-              'fixedVersions': [
-                '3.3.5-r0'
-              ],
-              'installedVersion': '3.3.2-r1',
-              'packageName':      'libssl3',
-              'purl':             'pkg:apk/alpine/libssl3@3.3.2-r1?arch=armhf&distro=3.20.5',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2025/09/30/5',
-                'https://access.redhat.com/security/cve/CVE-2025-9232',
-                'https://github.com/openssl/openssl/commit/2b4ec20e47959170422922eaff25346d362dcb35',
-                'https://github.com/openssl/openssl/commit/654dc11d23468a74fc8ea4672b702dd3feb7be4b',
-                'https://github.com/openssl/openssl/commit/7cf21a30513c9e43c4bc3836c237cf086e194af3',
-                'https://github.com/openssl/openssl/commit/89e790ac431125a4849992858490bed6b225eadf',
-                'https://github.com/openssl/openssl/commit/bbf38c034cdabd0a13330abcc4855c866f53d2e0',
-                'https://nvd.nist.gov/vuln/detail/CVE-2025-9232',
-                'https://openssl-library.org/news/secadv/20250930.txt',
-                'https://ubuntu.com/security/notices/USN-7786-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2025-9232'
-              ],
-              'severity':   'LOW',
-              'suppressed': false,
-              'title':      'openssl: Out-of-bounds read in HTTP client no_proxy handling'
-            },
-            {
-              'cve':  'CVE-2025-26519',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-787'
-              ],
-              'description':   'musl libc 0.9.13 through 1.2.5 before 1.2.6 has an out-of-bounds write vulnerability when an attacker can trigger iconv conversion of untrusted EUC-KR text to UTF-8.',
-              'diffID':        'sha256:25902b716555b8e1b2e596d94ef391773dfe114040c40198752f8d2bb65d2232',
-              'fixedVersions': [
-                '1.2.5-r1'
-              ],
-              'installedVersion': '1.2.5-r0',
-              'packageName':      'musl',
-              'purl':             'pkg:apk/alpine/musl@1.2.5-r0?arch=armhf&distro=3.20.5',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2025/02/13/2',
-                'http://www.openwall.com/lists/oss-security/2025/02/13/3',
-                'http://www.openwall.com/lists/oss-security/2025/02/13/4',
-                'http://www.openwall.com/lists/oss-security/2025/02/13/5',
-                'http://www.openwall.com/lists/oss-security/2025/02/14/5',
-                'http://www.openwall.com/lists/oss-security/2025/02/14/6',
-                'https://git.musl-libc.org/cgit/musl/commit/?id=c47ad25ea3b484e10326f933e927c0bc8cded3da',
-                'https://git.musl-libc.org/cgit/musl/commit/?id=e5adcd97b5196e29991b524237381a0202a60659',
-                'https://www.openwall.com/lists/oss-security/2025/02/13/2'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'musl libc 0.9.13 through 1.2.5 before 1.2.6 has an out-of-bounds write ...'
-            },
-            {
-              'cve':  'CVE-2025-26519',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-787'
-              ],
-              'description':   'musl libc 0.9.13 through 1.2.5 before 1.2.6 has an out-of-bounds write vulnerability when an attacker can trigger iconv conversion of untrusted EUC-KR text to UTF-8.',
-              'diffID':        'sha256:25902b716555b8e1b2e596d94ef391773dfe114040c40198752f8d2bb65d2232',
-              'fixedVersions': [
-                '1.2.5-r1'
-              ],
-              'installedVersion': '1.2.5-r0',
-              'packageName':      'musl-utils',
-              'purl':             'pkg:apk/alpine/musl-utils@1.2.5-r0?arch=armhf&distro=3.20.5',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2025/02/13/2',
-                'http://www.openwall.com/lists/oss-security/2025/02/13/3',
-                'http://www.openwall.com/lists/oss-security/2025/02/13/4',
-                'http://www.openwall.com/lists/oss-security/2025/02/13/5',
-                'http://www.openwall.com/lists/oss-security/2025/02/14/5',
-                'http://www.openwall.com/lists/oss-security/2025/02/14/6',
-                'https://git.musl-libc.org/cgit/musl/commit/?id=c47ad25ea3b484e10326f933e927c0bc8cded3da',
-                'https://git.musl-libc.org/cgit/musl/commit/?id=e5adcd97b5196e29991b524237381a0202a60659',
-                'https://www.openwall.com/lists/oss-security/2025/02/13/2'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'musl libc 0.9.13 through 1.2.5 before 1.2.6 has an out-of-bounds write ...'
-            },
-            {
-              'cve':  'CVE-2024-58251',
-              'cwes': [
-                'CWE-150'
-              ],
-              'description':   'In netstat in BusyBox through 1.37.0, local users can launch of network application with an argv[0] containing an ANSI terminal escape sequence, leading to a denial of service (terminal locked up) when netstat is used by a victim.',
-              'diffID':        'sha256:25902b716555b8e1b2e596d94ef391773dfe114040c40198752f8d2bb65d2232',
-              'fixedVersions': [
-                '1.36.1-r31'
-              ],
-              'installedVersion': '1.36.1-r29',
-              'packageName':      'ssl_client',
-              'purl':             'pkg:apk/alpine/ssl_client@1.36.1-r29?arch=armhf&distro=3.20.5',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2025/04/23/6',
-                'https://bugs.busybox.net/show_bug.cgi?id=15922',
-                'https://www.busybox.net',
-                'https://www.busybox.net/downloads/',
-                'https://www.cve.org/CVERecord?id=CVE-2024-58251'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'In netstat in BusyBox through 1.37.0, local users can launch of networ ...'
-            },
-            {
-              'cve':  'CVE-2025-46394',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '3.3',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-451'
-              ],
-              'description':   'In tar in BusyBox through 1.37.0, a TAR archive can have filenames hidden from a listing through the use of terminal escape sequences.',
-              'diffID':        'sha256:25902b716555b8e1b2e596d94ef391773dfe114040c40198752f8d2bb65d2232',
-              'fixedVersions': [
-                '1.36.1-r31'
-              ],
-              'installedVersion': '1.36.1-r29',
-              'packageName':      'ssl_client',
-              'purl':             'pkg:apk/alpine/ssl_client@1.36.1-r29?arch=armhf&distro=3.20.5',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2025/04/23/5',
-                'http://www.openwall.com/lists/oss-security/2025/04/24/3',
-                'https://bugs.busybox.net/show_bug.cgi?id=16018',
-                'https://lists.busybox.net/pipermail/busybox/2024-July/090806.html',
-                'https://lists.busybox.net/pipermail/busybox/2024-July/090814.html',
-                'https://www.busybox.net',
-                'https://www.busybox.net/downloads/',
-                'https://www.cve.org/CVERecord?id=CVE-2025-46394',
-                'https://www.openwall.com/lists/oss-security/2025/04/23/1'
-              ],
-              'severity':   'LOW',
-              'suppressed': false,
-              'title':      'In tar in BusyBox through 1.37.0, a TAR archive can have filenames hid ...'
-            }
-          ]
-        }
-      ],
-      'summary': {
-        'critical':   0,
-        'high':       4,
-        'low':        5,
-        'medium':     9,
-        'suppressed': 0,
-        'unknown':    0
-      }
-    }
-  },
-  {
-    'id':    'default/7791aad173ee872dff6f34f13a757e773568f0b169aec61d3d4886d4d059d8e6',
-    'type':  'storage.sbomscanner.kubewarden.io.vulnerabilityreport',
-    'links': {
-      'patch':  'https://localhost:8005/v1/storage.sbomscanner.kubewarden.io.vulnerabilityreports/default/7791aad173ee872dff6f34f13a757e773568f0b169aec61d3d4886d4d059d8e6',
-      'remove': 'https://localhost:8005/v1/storage.sbomscanner.kubewarden.io.vulnerabilityreports/default/7791aad173ee872dff6f34f13a757e773568f0b169aec61d3d4886d4d059d8e6',
-      'self':   'https://localhost:8005/v1/storage.sbomscanner.kubewarden.io.vulnerabilityreports/default/7791aad173ee872dff6f34f13a757e773568f0b169aec61d3d4886d4d059d8e6',
-      'update': 'https://localhost:8005/v1/storage.sbomscanner.kubewarden.io.vulnerabilityreports/default/7791aad173ee872dff6f34f13a757e773568f0b169aec61d3d4886d4d059d8e6',
-      'view':   'https://localhost:8005/apis/storage.sbomscanner.kubewarden.io/v1alpha1/namespaces/default/vulnerabilityreports/7791aad173ee872dff6f34f13a757e773568f0b169aec61d3d4886d4d059d8e6'
-    },
-    'apiVersion':    'storage.sbomscanner.kubewarden.io/v1alpha1',
-    'imageMetadata': {
-      'digest':      'sha256:77d408e9984c7e85d84db11bac01c0df5e55d4f494446eb0bfebcc9f2bf5405c',
-      'platform':    'linux/ppc64le',
-      'registry':    'lsong-demo1',
-      'registryURI': 'registry-1.docker.io',
-      'repository':  'library/alpine',
-      'tag':         '3.6.5'
-    },
-    'kind':     'VulnerabilityReport',
-    'metadata': {
-      'creationTimestamp': '2026-01-14T18:51:50Z',
-      'fields':            [
-        '7791aad173ee872dff6f34f13a757e773568f0b169aec61d3d4886d4d059d8e6',
-        'registry-1.docker.io/library/alpine:3.6.5',
-        'linux/ppc64le',
-        '0 (0 suppressed)'
-      ],
-      'labels': {
-        'app.kubernetes.io/managed-by':          'sbomscanner',
-        'app.kubernetes.io/part-of':             'sbomscanner',
-        'sbomscanner.kubewarden.io/scanjob-uid': '445c600a-c4b6-40b3-bd71-f2d2140a37d5'
-      },
-      'name':            '7791aad173ee872dff6f34f13a757e773568f0b169aec61d3d4886d4d059d8e6',
-      'namespace':       'default',
-      'ownerReferences': [
-        {
-          'apiVersion':         'storage.sbomscanner.kubewarden.io/v1alpha1',
-          'blockOwnerDeletion': true,
-          'controller':         true,
-          'kind':               'SBOM',
-          'name':               '7791aad173ee872dff6f34f13a757e773568f0b169aec61d3d4886d4d059d8e6',
-          'uid':                '72a6314d-c214-487a-b894-e5bb179acbfc'
-        }
-      ],
-      'relationships': [
-        {
-          'fromId':   'default/7791aad173ee872dff6f34f13a757e773568f0b169aec61d3d4886d4d059d8e6',
-          'fromType': 'storage.sbomscanner.kubewarden.io.sbom',
-          'rel':      'owner',
-          'state':    'active',
-          'message':  'Resource is current'
-        }
-      ],
-      'resourceVersion': '1',
-      'state':           {
-        'error':         false,
-        'message':       'Resource is current',
-        'name':          'active',
-        'transitioning': false
-      },
-      'uid': '22565f1d-4e16-4ecf-8199-ad5c579f6ab9'
-    },
-    'report': {
-      'results': [
-        {
-          'class':           'os-pkgs',
-          'target':          '/var/run/worker/trivy.sbom.597685558.json (alpine 3.6.5)',
-          'type':            'alpine',
-          'vulnerabilities': null
-        }
-      ],
-      'summary': {
-        'critical':   0,
-        'high':       0,
-        'low':        0,
-        'medium':     0,
-        'suppressed': 0,
-        'unknown':    0
-      }
-    }
-  },
-  {
-    'id':    'default/77be439166f1ce40f0ef33d53b9e51da60cf9474f6add90d1882c8c35a5e9a44',
-    'type':  'storage.sbomscanner.kubewarden.io.vulnerabilityreport',
-    'links': {
-      'patch':  'https://localhost:8005/v1/storage.sbomscanner.kubewarden.io.vulnerabilityreports/default/77be439166f1ce40f0ef33d53b9e51da60cf9474f6add90d1882c8c35a5e9a44',
-      'remove': 'https://localhost:8005/v1/storage.sbomscanner.kubewarden.io.vulnerabilityreports/default/77be439166f1ce40f0ef33d53b9e51da60cf9474f6add90d1882c8c35a5e9a44',
-      'self':   'https://localhost:8005/v1/storage.sbomscanner.kubewarden.io.vulnerabilityreports/default/77be439166f1ce40f0ef33d53b9e51da60cf9474f6add90d1882c8c35a5e9a44',
-      'update': 'https://localhost:8005/v1/storage.sbomscanner.kubewarden.io.vulnerabilityreports/default/77be439166f1ce40f0ef33d53b9e51da60cf9474f6add90d1882c8c35a5e9a44',
-      'view':   'https://localhost:8005/apis/storage.sbomscanner.kubewarden.io/v1alpha1/namespaces/default/vulnerabilityreports/77be439166f1ce40f0ef33d53b9e51da60cf9474f6add90d1882c8c35a5e9a44'
-    },
-    'apiVersion':    'storage.sbomscanner.kubewarden.io/v1alpha1',
-    'imageMetadata': {
-      'digest':      'sha256:26a8d1303ea6109122ba2df7fafcfbe77ddc3988a2c34e818398b8ed4a20b03d',
-      'platform':    'linux/386',
-      'registry':    'lsong-demo1',
-      'registryURI': 'registry-1.docker.io',
-      'repository':  'library/alpine',
-      'tag':         '3.8.4'
-    },
-    'kind':     'VulnerabilityReport',
-    'metadata': {
-      'creationTimestamp': '2026-01-14T18:51:50Z',
-      'fields':            [
-        '77be439166f1ce40f0ef33d53b9e51da60cf9474f6add90d1882c8c35a5e9a44',
-        'registry-1.docker.io/library/alpine:3.8.4',
-        'linux/386',
-        '2 (0 suppressed)'
-      ],
-      'labels': {
-        'app.kubernetes.io/managed-by':          'sbomscanner',
-        'app.kubernetes.io/part-of':             'sbomscanner',
-        'sbomscanner.kubewarden.io/scanjob-uid': '445c600a-c4b6-40b3-bd71-f2d2140a37d5'
-      },
-      'name':            '77be439166f1ce40f0ef33d53b9e51da60cf9474f6add90d1882c8c35a5e9a44',
-      'namespace':       'default',
-      'ownerReferences': [
-        {
-          'apiVersion':         'storage.sbomscanner.kubewarden.io/v1alpha1',
-          'blockOwnerDeletion': true,
-          'controller':         true,
-          'kind':               'SBOM',
-          'name':               '77be439166f1ce40f0ef33d53b9e51da60cf9474f6add90d1882c8c35a5e9a44',
-          'uid':                '21be7f70-d24a-4c46-b3c6-4a5583dae3a6'
-        }
-      ],
-      'relationships': [
-        {
-          'fromId':   'default/77be439166f1ce40f0ef33d53b9e51da60cf9474f6add90d1882c8c35a5e9a44',
-          'fromType': 'storage.sbomscanner.kubewarden.io.sbom',
-          'rel':      'owner',
-          'state':    'active',
-          'message':  'Resource is current'
-        }
-      ],
-      'resourceVersion': '1',
-      'state':           {
-        'error':         false,
-        'message':       'Resource is current',
-        'name':          'active',
-        'transitioning': false
-      },
-      'uid': '7972b99f-76ff-4ae2-b4d9-2fe607f1f111'
-    },
-    'report': {
-      'results': [
-        {
-          'class':           'os-pkgs',
-          'target':          '/var/run/worker/trivy.sbom.2500076042.json (alpine 3.8.4)',
-          'type':            'alpine',
-          'vulnerabilities': [
-            {
-              'cve':  'CVE-2019-14697',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '9.8',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-787'
-              ],
-              'description':   "musl libc through 1.1.23 has an x87 floating-point stack adjustment imbalance, related to the math/i386/ directory. In some cases, use of this library could introduce out-of-bounds writes that are not present in an application's source code.",
-              'diffID':        'sha256:056e9fd791d330819b7aed8ec740cfda67dab3722b02daf7fbab1e8db10a0e37',
-              'fixedVersions': [
-                '1.1.19-r11'
-              ],
-              'installedVersion': '1.1.19-r10',
-              'packageName':      'musl',
-              'purl':             'pkg:apk/alpine/musl@1.1.19-r10?arch=x86&distro=3.8.4',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2019/08/06/4',
-                'https://git.musl-libc.org/cgit/musl/patch/?id=6818c31c9bc4bbad5357f1de14bedf781e5b349e',
-                'https://git.musl-libc.org/cgit/musl/patch/?id=f3ed8bfe8a82af1870ddc8696ed4cc1d5aa6b441',
-                'https://security.gentoo.org/glsa/202003-13',
-                'https://ubuntu.com/security/notices/USN-5990-1',
-                'https://www.cve.org/CVERecord?id=CVE-2019-14697',
-                'https://www.openwall.com/lists/musl/2019/08/06/1',
-                'https://www.openwall.com/lists/oss-security/2019/08/06/1'
-              ],
-              'severity':   'CRITICAL',
-              'suppressed': false,
-              'title':      'musl libc through 1.1.23 has an x87 floating-point stack adjustment im ...'
-            },
-            {
-              'cve':  'CVE-2019-14697',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '9.8',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-787'
-              ],
-              'description':   "musl libc through 1.1.23 has an x87 floating-point stack adjustment imbalance, related to the math/i386/ directory. In some cases, use of this library could introduce out-of-bounds writes that are not present in an application's source code.",
-              'diffID':        'sha256:056e9fd791d330819b7aed8ec740cfda67dab3722b02daf7fbab1e8db10a0e37',
-              'fixedVersions': [
-                '1.1.19-r11'
-              ],
-              'installedVersion': '1.1.19-r10',
-              'packageName':      'musl-utils',
-              'purl':             'pkg:apk/alpine/musl-utils@1.1.19-r10?arch=x86&distro=3.8.4',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2019/08/06/4',
-                'https://git.musl-libc.org/cgit/musl/patch/?id=6818c31c9bc4bbad5357f1de14bedf781e5b349e',
-                'https://git.musl-libc.org/cgit/musl/patch/?id=f3ed8bfe8a82af1870ddc8696ed4cc1d5aa6b441',
-                'https://security.gentoo.org/glsa/202003-13',
-                'https://ubuntu.com/security/notices/USN-5990-1',
-                'https://www.cve.org/CVERecord?id=CVE-2019-14697',
-                'https://www.openwall.com/lists/musl/2019/08/06/1',
-                'https://www.openwall.com/lists/oss-security/2019/08/06/1'
-              ],
-              'severity':   'CRITICAL',
-              'suppressed': false,
-              'title':      'musl libc through 1.1.23 has an x87 floating-point stack adjustment im ...'
-            }
-          ]
-        }
-      ],
-      'summary': {
-        'critical':   2,
-        'high':       0,
-        'low':        0,
-        'medium':     0,
-        'suppressed': 0,
-        'unknown':    0
-      }
-    }
-  },
-  {
-    'id':    'default/7949e2b89e134dfd1359e28365917cf1e1083ce5848ea5b5999458c4602af0e2',
-    'type':  'storage.sbomscanner.kubewarden.io.vulnerabilityreport',
-    'links': {
-      'patch':  'https://localhost:8005/v1/storage.sbomscanner.kubewarden.io.vulnerabilityreports/default/7949e2b89e134dfd1359e28365917cf1e1083ce5848ea5b5999458c4602af0e2',
-      'remove': 'https://localhost:8005/v1/storage.sbomscanner.kubewarden.io.vulnerabilityreports/default/7949e2b89e134dfd1359e28365917cf1e1083ce5848ea5b5999458c4602af0e2',
-      'self':   'https://localhost:8005/v1/storage.sbomscanner.kubewarden.io.vulnerabilityreports/default/7949e2b89e134dfd1359e28365917cf1e1083ce5848ea5b5999458c4602af0e2',
-      'update': 'https://localhost:8005/v1/storage.sbomscanner.kubewarden.io.vulnerabilityreports/default/7949e2b89e134dfd1359e28365917cf1e1083ce5848ea5b5999458c4602af0e2',
-      'view':   'https://localhost:8005/apis/storage.sbomscanner.kubewarden.io/v1alpha1/namespaces/default/vulnerabilityreports/7949e2b89e134dfd1359e28365917cf1e1083ce5848ea5b5999458c4602af0e2'
-    },
-    'apiVersion':    'storage.sbomscanner.kubewarden.io/v1alpha1',
-    'imageMetadata': {
-      'digest':      'sha256:0a3b174523eafed2b1276cf957020850fc5305ed4605750d0b88f79d4900465d',
-      'platform':    'linux/arm64/v8',
-      'registry':    'lsong-demo1',
-      'registryURI': 'registry-1.docker.io',
-      'repository':  'library/alpine',
-      'tag':         '3.11.12'
-    },
-    'kind':     'VulnerabilityReport',
-    'metadata': {
-      'creationTimestamp': '2026-01-14T18:51:16Z',
-      'fields':            [
-        '7949e2b89e134dfd1359e28365917cf1e1083ce5848ea5b5999458c4602af0e2',
-        'registry-1.docker.io/library/alpine:3.11.12',
-        'linux/arm64/v8',
-        '21 (0 suppressed)'
-      ],
-      'labels': {
-        'app.kubernetes.io/managed-by':          'sbomscanner',
-        'app.kubernetes.io/part-of':             'sbomscanner',
-        'sbomscanner.kubewarden.io/scanjob-uid': '445c600a-c4b6-40b3-bd71-f2d2140a37d5'
-      },
-      'name':            '7949e2b89e134dfd1359e28365917cf1e1083ce5848ea5b5999458c4602af0e2',
-      'namespace':       'default',
-      'ownerReferences': [
-        {
-          'apiVersion':         'storage.sbomscanner.kubewarden.io/v1alpha1',
-          'blockOwnerDeletion': true,
-          'controller':         true,
-          'kind':               'SBOM',
-          'name':               '7949e2b89e134dfd1359e28365917cf1e1083ce5848ea5b5999458c4602af0e2',
-          'uid':                '82cd305b-1492-429f-86da-db9d324c2c13'
-        }
-      ],
-      'relationships': [
-        {
-          'fromId':   'default/7949e2b89e134dfd1359e28365917cf1e1083ce5848ea5b5999458c4602af0e2',
-          'fromType': 'storage.sbomscanner.kubewarden.io.sbom',
-          'rel':      'owner',
-          'state':    'active',
-          'message':  'Resource is current'
-        }
-      ],
-      'resourceVersion': '1',
-      'state':           {
-        'error':         false,
-        'message':       'Resource is current',
-        'name':          'active',
-        'transitioning': false
-      },
-      'uid': '3cfb4112-38f7-47d2-94a2-816065d2ae55'
-    },
-    'report': {
-      'results': [
-        {
-          'class':           'os-pkgs',
-          'target':          '/var/run/worker/trivy.sbom.3726747935.json (alpine 3.11.12)',
-          'type':            'alpine',
-          'vulnerabilities': [
-            {
-              'cve':  'CVE-2021-42378',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the getvar_i function",
-              'diffID':        'sha256:ff4e9a7e4797bc5b170c4936ed183e613013f8a95ab33c17953670c28061b52e',
-              'fixedVersions': [
-                '1.31.1-r11'
-              ],
-              'installedVersion': '1.31.1-r10',
-              'packageName':      'busybox',
-              'purl':             'pkg:apk/alpine/busybox@1.31.1-r10?arch=aarch64&distro=3.11.12',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42378',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42378',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42378'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the getvar_i()'
-            },
-            {
-              'cve':  'CVE-2021-42379',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the next_input_file function",
-              'diffID':        'sha256:ff4e9a7e4797bc5b170c4936ed183e613013f8a95ab33c17953670c28061b52e',
-              'fixedVersions': [
-                '1.31.1-r11'
-              ],
-              'installedVersion': '1.31.1-r10',
-              'packageName':      'busybox',
-              'purl':             'pkg:apk/alpine/busybox@1.31.1-r10?arch=aarch64&distro=3.11.12',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42379',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42379',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42379'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the next_input_file()'
-            },
-            {
-              'cve':  'CVE-2021-42380',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the clrvar function",
-              'diffID':        'sha256:ff4e9a7e4797bc5b170c4936ed183e613013f8a95ab33c17953670c28061b52e',
-              'fixedVersions': [
-                '1.31.1-r11'
-              ],
-              'installedVersion': '1.31.1-r10',
-              'packageName':      'busybox',
-              'purl':             'pkg:apk/alpine/busybox@1.31.1-r10?arch=aarch64&distro=3.11.12',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42380',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42380',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42380'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the clrvar()'
-            },
-            {
-              'cve':  'CVE-2021-42381',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the hash_init function",
-              'diffID':        'sha256:ff4e9a7e4797bc5b170c4936ed183e613013f8a95ab33c17953670c28061b52e',
-              'fixedVersions': [
-                '1.31.1-r11'
-              ],
-              'installedVersion': '1.31.1-r10',
-              'packageName':      'busybox',
-              'purl':             'pkg:apk/alpine/busybox@1.31.1-r10?arch=aarch64&distro=3.11.12',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42381',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42381',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42381'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the hash_init()'
-            },
-            {
-              'cve':  'CVE-2021-42382',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the getvar_s function",
-              'diffID':        'sha256:ff4e9a7e4797bc5b170c4936ed183e613013f8a95ab33c17953670c28061b52e',
-              'fixedVersions': [
-                '1.31.1-r11'
-              ],
-              'installedVersion': '1.31.1-r10',
-              'packageName':      'busybox',
-              'purl':             'pkg:apk/alpine/busybox@1.31.1-r10?arch=aarch64&distro=3.11.12',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42382',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42382',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42382'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the getvar_s()'
-            },
-            {
-              'cve':  'CVE-2021-42383',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the evaluate function",
-              'diffID':        'sha256:ff4e9a7e4797bc5b170c4936ed183e613013f8a95ab33c17953670c28061b52e',
-              'fixedVersions': [
-                '1.31.1-r11'
-              ],
-              'installedVersion': '1.31.1-r10',
-              'packageName':      'busybox',
-              'purl':             'pkg:apk/alpine/busybox@1.31.1-r10?arch=aarch64&distro=3.11.12',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42383',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42383',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42383'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the evaluate()'
-            },
-            {
-              'cve':  'CVE-2021-42384',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the handle_special function",
-              'diffID':        'sha256:ff4e9a7e4797bc5b170c4936ed183e613013f8a95ab33c17953670c28061b52e',
-              'fixedVersions': [
-                '1.31.1-r11'
-              ],
-              'installedVersion': '1.31.1-r10',
-              'packageName':      'busybox',
-              'purl':             'pkg:apk/alpine/busybox@1.31.1-r10?arch=aarch64&distro=3.11.12',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42384',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42384',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42384'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the handle_special()'
-            },
-            {
-              'cve':  'CVE-2021-42385',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the evaluate function",
-              'diffID':        'sha256:ff4e9a7e4797bc5b170c4936ed183e613013f8a95ab33c17953670c28061b52e',
-              'fixedVersions': [
-                '1.31.1-r11'
-              ],
-              'installedVersion': '1.31.1-r10',
-              'packageName':      'busybox',
-              'purl':             'pkg:apk/alpine/busybox@1.31.1-r10?arch=aarch64&distro=3.11.12',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42385',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42385',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42385'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the evaluate()'
-            },
-            {
-              'cve':  'CVE-2021-42386',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the nvalloc function",
-              'diffID':        'sha256:ff4e9a7e4797bc5b170c4936ed183e613013f8a95ab33c17953670c28061b52e',
-              'fixedVersions': [
-                '1.31.1-r11'
-              ],
-              'installedVersion': '1.31.1-r10',
-              'packageName':      'busybox',
-              'purl':             'pkg:apk/alpine/busybox@1.31.1-r10?arch=aarch64&distro=3.11.12',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42386',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42386',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42386'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the nvalloc()'
-            },
-            {
-              'cve':  'CVE-2021-42374',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '5.7',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-125'
-              ],
-              'description':   "An out-of-bounds heap read in Busybox's unlzma applet leads to information leak and denial of service when crafted LZMA-compressed input is decompressed. This can be triggered by any applet/format that",
-              'diffID':        'sha256:ff4e9a7e4797bc5b170c4936ed183e613013f8a95ab33c17953670c28061b52e',
-              'fixedVersions': [
-                '1.31.1-r11'
-              ],
-              'installedVersion': '1.31.1-r10',
-              'packageName':      'busybox',
-              'purl':             'pkg:apk/alpine/busybox@1.31.1-r10?arch=aarch64&distro=3.11.12',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42374',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42374',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42374'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'busybox: out-of-bounds read in unlzma applet leads to information leak and denial of service when crafted LZMA-compressed input is decompressed'
-            },
-            {
-              'cve':  'CVE-2021-42378',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the getvar_i function",
-              'diffID':        'sha256:ff4e9a7e4797bc5b170c4936ed183e613013f8a95ab33c17953670c28061b52e',
-              'fixedVersions': [
-                '1.31.1-r11'
-              ],
-              'installedVersion': '1.31.1-r10',
-              'packageName':      'ssl_client',
-              'purl':             'pkg:apk/alpine/ssl_client@1.31.1-r10?arch=aarch64&distro=3.11.12',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42378',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42378',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42378'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the getvar_i()'
-            },
-            {
-              'cve':  'CVE-2021-42379',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the next_input_file function",
-              'diffID':        'sha256:ff4e9a7e4797bc5b170c4936ed183e613013f8a95ab33c17953670c28061b52e',
-              'fixedVersions': [
-                '1.31.1-r11'
-              ],
-              'installedVersion': '1.31.1-r10',
-              'packageName':      'ssl_client',
-              'purl':             'pkg:apk/alpine/ssl_client@1.31.1-r10?arch=aarch64&distro=3.11.12',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42379',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42379',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42379'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the next_input_file()'
-            },
-            {
-              'cve':  'CVE-2021-42380',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the clrvar function",
-              'diffID':        'sha256:ff4e9a7e4797bc5b170c4936ed183e613013f8a95ab33c17953670c28061b52e',
-              'fixedVersions': [
-                '1.31.1-r11'
-              ],
-              'installedVersion': '1.31.1-r10',
-              'packageName':      'ssl_client',
-              'purl':             'pkg:apk/alpine/ssl_client@1.31.1-r10?arch=aarch64&distro=3.11.12',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42380',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42380',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42380'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the clrvar()'
-            },
-            {
-              'cve':  'CVE-2021-42381',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the hash_init function",
-              'diffID':        'sha256:ff4e9a7e4797bc5b170c4936ed183e613013f8a95ab33c17953670c28061b52e',
-              'fixedVersions': [
-                '1.31.1-r11'
-              ],
-              'installedVersion': '1.31.1-r10',
-              'packageName':      'ssl_client',
-              'purl':             'pkg:apk/alpine/ssl_client@1.31.1-r10?arch=aarch64&distro=3.11.12',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42381',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42381',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42381'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the hash_init()'
-            },
-            {
-              'cve':  'CVE-2021-42382',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the getvar_s function",
-              'diffID':        'sha256:ff4e9a7e4797bc5b170c4936ed183e613013f8a95ab33c17953670c28061b52e',
-              'fixedVersions': [
-                '1.31.1-r11'
-              ],
-              'installedVersion': '1.31.1-r10',
-              'packageName':      'ssl_client',
-              'purl':             'pkg:apk/alpine/ssl_client@1.31.1-r10?arch=aarch64&distro=3.11.12',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42382',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42382',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42382'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the getvar_s()'
-            },
-            {
-              'cve':  'CVE-2021-42383',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the evaluate function",
-              'diffID':        'sha256:ff4e9a7e4797bc5b170c4936ed183e613013f8a95ab33c17953670c28061b52e',
-              'fixedVersions': [
-                '1.31.1-r11'
-              ],
-              'installedVersion': '1.31.1-r10',
-              'packageName':      'ssl_client',
-              'purl':             'pkg:apk/alpine/ssl_client@1.31.1-r10?arch=aarch64&distro=3.11.12',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42383',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42383',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42383'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the evaluate()'
-            },
-            {
-              'cve':  'CVE-2021-42384',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the handle_special function",
-              'diffID':        'sha256:ff4e9a7e4797bc5b170c4936ed183e613013f8a95ab33c17953670c28061b52e',
-              'fixedVersions': [
-                '1.31.1-r11'
-              ],
-              'installedVersion': '1.31.1-r10',
-              'packageName':      'ssl_client',
-              'purl':             'pkg:apk/alpine/ssl_client@1.31.1-r10?arch=aarch64&distro=3.11.12',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42384',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42384',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42384'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the handle_special()'
-            },
-            {
-              'cve':  'CVE-2021-42385',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the evaluate function",
-              'diffID':        'sha256:ff4e9a7e4797bc5b170c4936ed183e613013f8a95ab33c17953670c28061b52e',
-              'fixedVersions': [
-                '1.31.1-r11'
-              ],
-              'installedVersion': '1.31.1-r10',
-              'packageName':      'ssl_client',
-              'purl':             'pkg:apk/alpine/ssl_client@1.31.1-r10?arch=aarch64&distro=3.11.12',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42385',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42385',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42385'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the evaluate()'
-            },
-            {
-              'cve':  'CVE-2021-42386',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the nvalloc function",
-              'diffID':        'sha256:ff4e9a7e4797bc5b170c4936ed183e613013f8a95ab33c17953670c28061b52e',
-              'fixedVersions': [
-                '1.31.1-r11'
-              ],
-              'installedVersion': '1.31.1-r10',
-              'packageName':      'ssl_client',
-              'purl':             'pkg:apk/alpine/ssl_client@1.31.1-r10?arch=aarch64&distro=3.11.12',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42386',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42386',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42386'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the nvalloc()'
-            },
-            {
-              'cve':  'CVE-2021-42374',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '5.7',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-125'
-              ],
-              'description':   "An out-of-bounds heap read in Busybox's unlzma applet leads to information leak and denial of service when crafted LZMA-compressed input is decompressed. This can be triggered by any applet/format that",
-              'diffID':        'sha256:ff4e9a7e4797bc5b170c4936ed183e613013f8a95ab33c17953670c28061b52e',
-              'fixedVersions': [
-                '1.31.1-r11'
-              ],
-              'installedVersion': '1.31.1-r10',
-              'packageName':      'ssl_client',
-              'purl':             'pkg:apk/alpine/ssl_client@1.31.1-r10?arch=aarch64&distro=3.11.12',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42374',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42374',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42374'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'busybox: out-of-bounds read in unlzma applet leads to information leak and denial of service when crafted LZMA-compressed input is decompressed'
-            },
-            {
-              'cve':  'CVE-2022-37434',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '9.8',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-787',
-                'CWE-120'
-              ],
-              'description':   'zlib through 1.2.12 has a heap-based buffer over-read or buffer overflow in inflate in inflate.c via a large gzip header extra field. NOTE: only applications that call inflateGetHeader are affected. Some common applications bundle the affected zlib source code but may be unable to call inflateGetHeader (e.g., see the nodejs/node reference).',
-              'diffID':        'sha256:ff4e9a7e4797bc5b170c4936ed183e613013f8a95ab33c17953670c28061b52e',
-              'fixedVersions': [
-                '1.2.11-r4'
-              ],
-              'installedVersion': '1.2.11-r3',
-              'packageName':      'zlib',
-              'purl':             'pkg:apk/alpine/zlib@1.2.11-r3?arch=aarch64&distro=3.11.12',
-              'references':       [
-                'http://seclists.org/fulldisclosure/2022/Oct/37',
-                'http://seclists.org/fulldisclosure/2022/Oct/38',
-                'http://seclists.org/fulldisclosure/2022/Oct/41',
-                'http://seclists.org/fulldisclosure/2022/Oct/42',
-                'http://www.openwall.com/lists/oss-security/2022/08/05/2',
-                'http://www.openwall.com/lists/oss-security/2022/08/09/1',
-                'https://access.redhat.com/errata/RHSA-2022:8291',
-                'https://access.redhat.com/security/cve/CVE-2022-37434',
-                'https://bugzilla.redhat.com/2116639',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2053198',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2077431',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2081296',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2116639',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-37434',
-                'https://errata.almalinux.org/9/ALSA-2022-8291.html',
-                'https://errata.rockylinux.org/RLSA-2022:8291',
-                'https://github.com/curl/curl/issues/9271',
-                'https://github.com/ivd38/zlib_overflow',
-                'https://github.com/madler/zlib/blob/21767c654d31d2dccdde4330529775c6c5fd5389/zlib.h#L1062-L1063',
-                'https://github.com/madler/zlib/commit/1eb7682f845ac9e9bf9ae35bbfb3bad5dacbd91d',
-                'https://github.com/madler/zlib/commit/eff308af425b67093bab25f80f1ae950166bece1',
-                'https://github.com/nodejs/node/blob/75b68c6e4db515f76df73af476eccf382bbcb00a/deps/zlib/inflate.c#L762-L764',
-                'https://linux.oracle.com/cve/CVE-2022-37434.html',
-                'https://linux.oracle.com/errata/ELSA-2023-1095.html',
-                'https://lists.debian.org/debian-lts-announce/2022/09/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JWN4VE3JQR4O2SOUS5TXNLANRPMHWV4I/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NMBOJ77A7T7PQCARMDUK75TE6LLESZ3O/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PAVPQNCG3XRLCLNSQRM3KAN5ZFMVXVTY/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/X5U7OTKZSHY2I3ZFJSR2SHFHW72RKGDK/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YRQAI7H4M4RQZ2IWZUEEXECBE5D56BH2/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2022-37434',
-                'https://security.netapp.com/advisory/ntap-20220901-0005/',
-                'https://security.netapp.com/advisory/ntap-20230427-0007/',
-                'https://support.apple.com/kb/HT213488',
-                'https://support.apple.com/kb/HT213489',
-                'https://support.apple.com/kb/HT213490',
-                'https://support.apple.com/kb/HT213491',
-                'https://support.apple.com/kb/HT213493',
-                'https://support.apple.com/kb/HT213494',
-                'https://ubuntu.com/security/notices/USN-5570-1',
-                'https://ubuntu.com/security/notices/USN-5570-2',
-                'https://ubuntu.com/security/notices/USN-5573-1',
-                'https://ubuntu.com/security/notices/USN-6736-1',
-                'https://ubuntu.com/security/notices/USN-6736-2',
-                'https://www.cve.org/CVERecord?id=CVE-2022-37434',
-                'https://www.debian.org/security/2022/dsa-5218'
-              ],
-              'severity':   'CRITICAL',
-              'suppressed': false,
-              'title':      'zlib: heap-based buffer over-read and overflow in inflate() in inflate.c via a large gzip header extra field'
-            }
-          ]
-        }
-      ],
-      'summary': {
-        'critical':   1,
-        'high':       18,
-        'low':        0,
-        'medium':     2,
-        'suppressed': 0,
-        'unknown':    0
-      }
-    }
-  },
-  {
-    'id':    'default/79992f4a7947389372139cf0d2d95ee75c13acf7413d32351ec815d5319937a7',
-    'type':  'storage.sbomscanner.kubewarden.io.vulnerabilityreport',
-    'links': {
-      'patch':  'https://localhost:8005/v1/storage.sbomscanner.kubewarden.io.vulnerabilityreports/default/79992f4a7947389372139cf0d2d95ee75c13acf7413d32351ec815d5319937a7',
-      'remove': 'https://localhost:8005/v1/storage.sbomscanner.kubewarden.io.vulnerabilityreports/default/79992f4a7947389372139cf0d2d95ee75c13acf7413d32351ec815d5319937a7',
-      'self':   'https://localhost:8005/v1/storage.sbomscanner.kubewarden.io.vulnerabilityreports/default/79992f4a7947389372139cf0d2d95ee75c13acf7413d32351ec815d5319937a7',
-      'update': 'https://localhost:8005/v1/storage.sbomscanner.kubewarden.io.vulnerabilityreports/default/79992f4a7947389372139cf0d2d95ee75c13acf7413d32351ec815d5319937a7',
-      'view':   'https://localhost:8005/apis/storage.sbomscanner.kubewarden.io/v1alpha1/namespaces/default/vulnerabilityreports/79992f4a7947389372139cf0d2d95ee75c13acf7413d32351ec815d5319937a7'
-    },
-    'apiVersion':    'storage.sbomscanner.kubewarden.io/v1alpha1',
-    'imageMetadata': {
-      'digest':      'sha256:f553db2d6ab7f3ba07024cd1181e16242d8fea0a2840dc2ccbd59e9b8c59b478',
-      'platform':    'linux/ppc64le',
-      'registry':    'lsong-demo1',
-      'registryURI': 'registry-1.docker.io',
-      'repository':  'library/alpine',
-      'tag':         '3.14.1'
-    },
-    'kind':     'VulnerabilityReport',
-    'metadata': {
-      'creationTimestamp': '2026-01-14T18:52:05Z',
-      'fields':            [
-        '79992f4a7947389372139cf0d2d95ee75c13acf7413d32351ec815d5319937a7',
-        'registry-1.docker.io/library/alpine:3.14.1',
-        'linux/ppc64le',
-        '47 (0 suppressed)'
-      ],
-      'labels': {
-        'app.kubernetes.io/managed-by':          'sbomscanner',
-        'app.kubernetes.io/part-of':             'sbomscanner',
-        'sbomscanner.kubewarden.io/scanjob-uid': '445c600a-c4b6-40b3-bd71-f2d2140a37d5'
-      },
-      'name':            '79992f4a7947389372139cf0d2d95ee75c13acf7413d32351ec815d5319937a7',
-      'namespace':       'default',
-      'ownerReferences': [
-        {
-          'apiVersion':         'storage.sbomscanner.kubewarden.io/v1alpha1',
-          'blockOwnerDeletion': true,
-          'controller':         true,
-          'kind':               'SBOM',
-          'name':               '79992f4a7947389372139cf0d2d95ee75c13acf7413d32351ec815d5319937a7',
-          'uid':                'dd2d4db1-6b90-4098-9771-9bb46f0451f7'
-        }
-      ],
-      'relationships': [
-        {
-          'fromId':   'default/79992f4a7947389372139cf0d2d95ee75c13acf7413d32351ec815d5319937a7',
-          'fromType': 'storage.sbomscanner.kubewarden.io.sbom',
-          'rel':      'owner',
-          'state':    'active',
-          'message':  'Resource is current'
-        }
-      ],
-      'resourceVersion': '1',
-      'state':           {
-        'error':         false,
-        'message':       'Resource is current',
-        'name':          'active',
-        'transitioning': false
-      },
-      'uid': '696c105f-3086-4ec7-b21a-f5a92016e475'
-    },
-    'report': {
-      'results': [
-        {
-          'class':           'os-pkgs',
-          'target':          '/var/run/worker/trivy.sbom.167602013.json (alpine 3.14.1)',
-          'type':            'alpine',
-          'vulnerabilities': [
-            {
-              'cve':  'CVE-2021-42378',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the getvar_i function",
-              'diffID':        'sha256:fca5893eb7a3faa1e801274f1d0a34d2d597e03525d9f6f53b4d2d92120d4b26',
-              'fixedVersions': [
-                '1.33.1-r6'
-              ],
-              'installedVersion': '1.33.1-r3',
-              'packageName':      'busybox',
-              'purl':             'pkg:apk/alpine/busybox@1.33.1-r3?arch=ppc64le&distro=3.14.1',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42378',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42378',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42378'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the getvar_i()'
-            },
-            {
-              'cve':  'CVE-2021-42379',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the next_input_file function",
-              'diffID':        'sha256:fca5893eb7a3faa1e801274f1d0a34d2d597e03525d9f6f53b4d2d92120d4b26',
-              'fixedVersions': [
-                '1.33.1-r6'
-              ],
-              'installedVersion': '1.33.1-r3',
-              'packageName':      'busybox',
-              'purl':             'pkg:apk/alpine/busybox@1.33.1-r3?arch=ppc64le&distro=3.14.1',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42379',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42379',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42379'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the next_input_file()'
-            },
-            {
-              'cve':  'CVE-2021-42380',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the clrvar function",
-              'diffID':        'sha256:fca5893eb7a3faa1e801274f1d0a34d2d597e03525d9f6f53b4d2d92120d4b26',
-              'fixedVersions': [
-                '1.33.1-r6'
-              ],
-              'installedVersion': '1.33.1-r3',
-              'packageName':      'busybox',
-              'purl':             'pkg:apk/alpine/busybox@1.33.1-r3?arch=ppc64le&distro=3.14.1',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42380',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42380',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42380'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the clrvar()'
-            },
-            {
-              'cve':  'CVE-2021-42381',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the hash_init function",
-              'diffID':        'sha256:fca5893eb7a3faa1e801274f1d0a34d2d597e03525d9f6f53b4d2d92120d4b26',
-              'fixedVersions': [
-                '1.33.1-r6'
-              ],
-              'installedVersion': '1.33.1-r3',
-              'packageName':      'busybox',
-              'purl':             'pkg:apk/alpine/busybox@1.33.1-r3?arch=ppc64le&distro=3.14.1',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42381',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42381',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42381'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the hash_init()'
-            },
-            {
-              'cve':  'CVE-2021-42382',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the getvar_s function",
-              'diffID':        'sha256:fca5893eb7a3faa1e801274f1d0a34d2d597e03525d9f6f53b4d2d92120d4b26',
-              'fixedVersions': [
-                '1.33.1-r6'
-              ],
-              'installedVersion': '1.33.1-r3',
-              'packageName':      'busybox',
-              'purl':             'pkg:apk/alpine/busybox@1.33.1-r3?arch=ppc64le&distro=3.14.1',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42382',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42382',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42382'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the getvar_s()'
-            },
-            {
-              'cve':  'CVE-2021-42383',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the evaluate function",
-              'diffID':        'sha256:fca5893eb7a3faa1e801274f1d0a34d2d597e03525d9f6f53b4d2d92120d4b26',
-              'fixedVersions': [
-                '1.33.1-r6'
-              ],
-              'installedVersion': '1.33.1-r3',
-              'packageName':      'busybox',
-              'purl':             'pkg:apk/alpine/busybox@1.33.1-r3?arch=ppc64le&distro=3.14.1',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42383',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42383',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42383'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the evaluate()'
-            },
-            {
-              'cve':  'CVE-2021-42384',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the handle_special function",
-              'diffID':        'sha256:fca5893eb7a3faa1e801274f1d0a34d2d597e03525d9f6f53b4d2d92120d4b26',
-              'fixedVersions': [
-                '1.33.1-r6'
-              ],
-              'installedVersion': '1.33.1-r3',
-              'packageName':      'busybox',
-              'purl':             'pkg:apk/alpine/busybox@1.33.1-r3?arch=ppc64le&distro=3.14.1',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42384',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42384',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42384'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the handle_special()'
-            },
-            {
-              'cve':  'CVE-2021-42385',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the evaluate function",
-              'diffID':        'sha256:fca5893eb7a3faa1e801274f1d0a34d2d597e03525d9f6f53b4d2d92120d4b26',
-              'fixedVersions': [
-                '1.33.1-r6'
-              ],
-              'installedVersion': '1.33.1-r3',
-              'packageName':      'busybox',
-              'purl':             'pkg:apk/alpine/busybox@1.33.1-r3?arch=ppc64le&distro=3.14.1',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42385',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42385',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42385'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the evaluate()'
-            },
-            {
-              'cve':  'CVE-2021-42386',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the nvalloc function",
-              'diffID':        'sha256:fca5893eb7a3faa1e801274f1d0a34d2d597e03525d9f6f53b4d2d92120d4b26',
-              'fixedVersions': [
-                '1.33.1-r6'
-              ],
-              'installedVersion': '1.33.1-r3',
-              'packageName':      'busybox',
-              'purl':             'pkg:apk/alpine/busybox@1.33.1-r3?arch=ppc64le&distro=3.14.1',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42386',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42386',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42386'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the nvalloc()'
-            },
-            {
-              'cve':  'CVE-2022-28391',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '8.8',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-88'
-              ],
-              'description':   "BusyBox through 1.35.0 allows remote attackers to execute arbitrary code if netstat is used to print a DNS PTR record's value to a VT compatible terminal. Alternatively, the attacker could choose to change the terminal's colors.",
-              'diffID':        'sha256:fca5893eb7a3faa1e801274f1d0a34d2d597e03525d9f6f53b4d2d92120d4b26',
-              'fixedVersions': [
-                '1.33.1-r7'
-              ],
-              'installedVersion': '1.33.1-r3',
-              'packageName':      'busybox',
-              'purl':             'pkg:apk/alpine/busybox@1.33.1-r3?arch=ppc64le&distro=3.14.1',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2022-28391',
-                'https://git.alpinelinux.org/aports/plain/main/busybox/0001-libbb-sockaddr2str-ensure-only-printable-characters-.patch',
-                'https://git.alpinelinux.org/aports/plain/main/busybox/0002-nslookup-sanitize-all-printed-strings-with-printable.patch',
-                'https://gitlab.alpinelinux.org/alpine/aports/-/issues/13661',
-                'https://nvd.nist.gov/vuln/detail/CVE-2022-28391',
-                'https://www.cve.org/CVERecord?id=CVE-2022-28391'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: remote attackers may execute arbitrary code if netstat is used'
-            },
-            {
-              'cve':  'CVE-2021-42374',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '5.7',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-125'
-              ],
-              'description':   "An out-of-bounds heap read in Busybox's unlzma applet leads to information leak and denial of service when crafted LZMA-compressed input is decompressed. This can be triggered by any applet/format that",
-              'diffID':        'sha256:fca5893eb7a3faa1e801274f1d0a34d2d597e03525d9f6f53b4d2d92120d4b26',
-              'fixedVersions': [
-                '1.33.1-r4'
-              ],
-              'installedVersion': '1.33.1-r3',
-              'packageName':      'busybox',
-              'purl':             'pkg:apk/alpine/busybox@1.33.1-r3?arch=ppc64le&distro=3.14.1',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42374',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42374',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42374'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'busybox: out-of-bounds read in unlzma applet leads to information leak and denial of service when crafted LZMA-compressed input is decompressed'
-            },
-            {
-              'cve':  'CVE-2021-42375',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.5',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '4.1',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-159'
-              ],
-              'description':   "An incorrect handling of a special element in Busybox's ash applet leads to denial of service when processing a crafted shell command, due to the shell mistaking specific characters for reserved characters. This may be used for DoS under rare conditions of filtered command input.",
-              'diffID':        'sha256:fca5893eb7a3faa1e801274f1d0a34d2d597e03525d9f6f53b4d2d92120d4b26',
-              'fixedVersions': [
-                '1.33.1-r5'
-              ],
-              'installedVersion': '1.33.1-r3',
-              'packageName':      'busybox',
-              'purl':             'pkg:apk/alpine/busybox@1.33.1-r3?arch=ppc64le&distro=3.14.1',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42375',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42375',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42375'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'busybox: incorrect handling of a special element in ash applet leads to denial of service when processing a crafted shell command'
-            },
-            {
-              'cve':  'CVE-2021-3711',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '9.8',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'nvd': {
-                  'v3score':  '9.8',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '9.8',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-120'
-              ],
-              'description':   'In order to decrypt SM2 encrypted data an application is expected to call the API function EVP_PKEY_decrypt(). Typically an application will call this function twice. The first time, on entry, the "out" parameter can be NULL and, on exit, the "outlen" parameter is populated with the buffer size required to hold the decrypted plaintext. The application can then allocate a sufficiently sized buffer and call EVP_PKEY_decrypt() again, but this time passing a non-NULL value for the "out" parameter. A bug in the implementation of the SM2 decryption code means that the calculation of the buffer size required to hold the plaintext returned by the first call to EVP_PKEY_decrypt() can be smaller than the actual size required by the second call. This can lead to a buffer overflow when EVP_PKEY_decrypt() is called by the application a second time with a buffer that is too small. A malicious attacker who is able present SM2 content for decryption to an application could cause attacker chosen data to overflow the buffer by up to a maximum of 62 bytes altering the contents of other data held after the buffer, possibly changing application behaviour or causing the application to crash. The location of the buffer is application dependent but is typically heap allocated. Fixed in OpenSSL 1.1.1l (Affected 1.1.1-1.1.1k).',
-              'diffID':        'sha256:fca5893eb7a3faa1e801274f1d0a34d2d597e03525d9f6f53b4d2d92120d4b26',
-              'fixedVersions': [
-                '1.1.1l-r0'
-              ],
-              'installedVersion': '1.1.1k-r0',
-              'packageName':      'libcrypto1.1',
-              'purl':             'pkg:apk/alpine/libcrypto1.1@1.1.1k-r0?arch=ppc64le&distro=3.14.1',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2021/08/26/2',
-                'https://access.redhat.com/security/cve/CVE-2021-3711',
-                'https://cert-portal.siemens.com/productcert/pdf/ssa-389290.pdf',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=59f5e75f3bced8fc0e130d72a3f582cf7b480b46',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=59f5e75f3bced8fc0e130d72a3f582cf7b480b46',
-                'https://lists.apache.org/thread.html/r18995de860f0e63635f3008fd2a6aca82394249476d21691e7c59c9e%40%3Cdev.tomcat.apache.org%3E',
-                'https://lists.apache.org/thread.html/r18995de860f0e63635f3008fd2a6aca82394249476d21691e7c59c9e@%3Cdev.tomcat.apache.org%3E',
-                'https://lists.apache.org/thread.html/rad5d9f83f0d11fb3f8bb148d179b8a9ad7c6a17f18d70e5805a713d1%40%3Cdev.tomcat.apache.org%3E',
-                'https://lists.apache.org/thread.html/rad5d9f83f0d11fb3f8bb148d179b8a9ad7c6a17f18d70e5805a713d1@%3Cdev.tomcat.apache.org%3E',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-3711',
-                'https://rustsec.org/advisories/RUSTSEC-2021-0097.html',
-                'https://security.gentoo.org/glsa/202209-02',
-                'https://security.gentoo.org/glsa/202210-02',
-                'https://security.netapp.com/advisory/ntap-20210827-0010',
-                'https://security.netapp.com/advisory/ntap-20210827-0010/',
-                'https://security.netapp.com/advisory/ntap-20211022-0003',
-                'https://security.netapp.com/advisory/ntap-20211022-0003/',
-                'https://security.netapp.com/advisory/ntap-20240621-0006',
-                'https://security.netapp.com/advisory/ntap-20240621-0006/',
-                'https://ubuntu.com/security/notices/USN-5051-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-3711',
-                'https://www.debian.org/security/2021/dsa-4963',
-                'https://www.openssl.org/news/secadv/20210824.txt',
-                'https://www.oracle.com/security-alerts/cpuapr2022.html',
-                'https://www.oracle.com/security-alerts/cpujan2022.html',
-                'https://www.oracle.com/security-alerts/cpuoct2021.html',
-                'https://www.tenable.com/security/tns-2021-16',
-                'https://www.tenable.com/security/tns-2022-02'
-              ],
-              'severity':   'CRITICAL',
-              'suppressed': false,
-              'title':      'openssl: SM2 Decryption Buffer Overflow'
-            },
-            {
-              'cve':  'CVE-2021-3712',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '7.4',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H'
-                },
-                'nvd': {
-                  'v3score':  '7.4',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.4',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-125'
-              ],
-              'description':   "ASN.1 strings are represented internally within OpenSSL as an ASN1_STRING structure which contains a buffer holding the string data and a field holding the buffer length. This contrasts with normal C strings which are repesented as a buffer for the string data which is terminated with a NUL (0) byte. Although not a strict requirement, ASN.1 strings that are parsed using OpenSSL's own \"d2i\" functions (and other similar parsing functions) as well as any string whose value has been set with the ASN1_STRING_set() function will additionally NUL terminate the byte array in the ASN1_STRING structure. However, it is possible for applications to directly construct valid ASN1_STRING structures which do not NUL terminate the byte array by directly setting the \"data\" and \"length\" fields in the ASN1_STRING array. This can also happen by using the ASN1_STRING_set0() function. Numerous OpenSSL functions that print ASN.1 data have been found to assume that the ASN1_STRING byte array will be NUL terminated, even though this is not guaranteed for strings that have been directly constructed. Where an application requests an ASN.1 structure to be printed, and where that ASN.1 structure contains ASN1_STRINGs that have been directly constructed by the application without NUL terminating the \"data\" field, then a read buffer overrun can occur. The same thing can also occur during name constraints processing of certificates (for example if a certificate has been directly constructed by the application instead of loading it via the OpenSSL parsing functions, and the certificate contains non NUL terminated ASN1_STRING structures). It can also occur in the X509_get1_email(), X509_REQ_get1_email() and X509_get1_ocsp() functions. If a malicious actor can cause an application to directly construct an ASN1_STRING and then process it through one of the affected OpenSSL functions then this issue could be hit. This might result in a crash (causing a Denial of Service attack). It could also result in the disclosure of private memory contents (such as private keys, or sensitive plaintext). Fixed in OpenSSL 1.1.1l (Affected 1.1.1-1.1.1k). Fixed in OpenSSL 1.0.2za (Affected 1.0.2-1.0.2y).",
-              'diffID':        'sha256:fca5893eb7a3faa1e801274f1d0a34d2d597e03525d9f6f53b4d2d92120d4b26',
-              'fixedVersions': [
-                '1.1.1l-r0'
-              ],
-              'installedVersion': '1.1.1k-r0',
-              'packageName':      'libcrypto1.1',
-              'purl':             'pkg:apk/alpine/libcrypto1.1@1.1.1k-r0?arch=ppc64le&distro=3.14.1',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2021/08/26/2',
-                'https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2021-3712.json',
-                'https://access.redhat.com/security/cve/CVE-2021-3712',
-                'https://cert-portal.siemens.com/productcert/pdf/ssa-244969.pdf',
-                'https://cert-portal.siemens.com/productcert/pdf/ssa-389290.pdf',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=94d23fcff9b2a7a8368dfe52214d5c2569882c11',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=ccb0a11145ee72b042d10593a64eaf9e8a55ec12',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=94d23fcff9b2a7a8368dfe52214d5c2569882c11',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=ccb0a11145ee72b042d10593a64eaf9e8a55ec12',
-                'https://kc.mcafee.com/corporate/index?page=content&id=SB10366',
-                'https://linux.oracle.com/cve/CVE-2021-3712.html',
-                'https://linux.oracle.com/errata/ELSA-2022-9023.html',
-                'https://lists.apache.org/thread.html/r18995de860f0e63635f3008fd2a6aca82394249476d21691e7c59c9e%40%3Cdev.tomcat.apache.org%3E',
-                'https://lists.apache.org/thread.html/r18995de860f0e63635f3008fd2a6aca82394249476d21691e7c59c9e@%3Cdev.tomcat.apache.org%3E',
-                'https://lists.apache.org/thread.html/rad5d9f83f0d11fb3f8bb148d179b8a9ad7c6a17f18d70e5805a713d1%40%3Cdev.tomcat.apache.org%3E',
-                'https://lists.apache.org/thread.html/rad5d9f83f0d11fb3f8bb148d179b8a9ad7c6a17f18d70e5805a713d1@%3Cdev.tomcat.apache.org%3E',
-                'https://lists.debian.org/debian-lts-announce/2021/09/msg00014.html',
-                'https://lists.debian.org/debian-lts-announce/2021/09/msg00021.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-3712',
-                'https://rustsec.org/advisories/RUSTSEC-2021-0098.html',
-                'https://security.gentoo.org/glsa/202209-02',
-                'https://security.gentoo.org/glsa/202210-02',
-                'https://security.netapp.com/advisory/ntap-20210827-0010',
-                'https://security.netapp.com/advisory/ntap-20210827-0010/',
-                'https://security.netapp.com/advisory/ntap-20240621-0006',
-                'https://security.netapp.com/advisory/ntap-20240621-0006/',
-                'https://ubuntu.com/security/notices/USN-5051-1',
-                'https://ubuntu.com/security/notices/USN-5051-2',
-                'https://ubuntu.com/security/notices/USN-5051-3',
-                'https://ubuntu.com/security/notices/USN-5051-4 (regression only in trusty/esm)',
-                'https://ubuntu.com/security/notices/USN-5088-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-3712',
-                'https://www.debian.org/security/2021/dsa-4963',
-                'https://www.openssl.org/news/secadv/20210824.txt',
-                'https://www.oracle.com/security-alerts/cpuapr2022.html',
-                'https://www.oracle.com/security-alerts/cpujan2022.html',
-                'https://www.oracle.com/security-alerts/cpuoct2021.html',
-                'https://www.tenable.com/security/tns-2021-16',
-                'https://www.tenable.com/security/tns-2022-02'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: Read buffer overruns processing ASN.1 strings'
-            },
-            {
-              'cve':  'CVE-2022-0778',
-              'cvss': {
-                'bitnami': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'ghsa': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'nvd': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-835'
-              ],
-              'description':   'The BN_mod_sqrt() function, which computes a modular square root, contains a bug that can cause it to loop forever for non-prime moduli. Internally this function is used when parsing certificates that contain elliptic curve public keys in compressed form or explicit elliptic curve parameters with a base point encoded in compressed form. It is possible to trigger the infinite loop by crafting a certificate that has invalid explicit curve parameters. Since certificate parsing happens prior to verification of the certificate signature, any process that parses an externally supplied certificate may thus be subject to a denial of service attack. The infinite loop can also be reached when parsing crafted private keys as they can contain explicit elliptic curve parameters. Thus vulnerable situations include: - TLS clients consuming server certificates - TLS servers consuming client certificates - Hosting providers taking certificates or private keys from customers - Certificate authorities parsing certification requests from subscribers - Anything else which parses ASN.1 elliptic curve parameters Also any other applications that use the BN_mod_sqrt() where the attacker can control the parameter values are vulnerable to this DoS issue. In the OpenSSL 1.0.2 version the public key is not parsed during initial parsing of the certificate which makes it slightly harder to trigger the infinite loop. However any operation which requires the public key from the certificate will trigger the infinite loop. In particular the attacker can use a self-signed certificate to trigger the loop during verification of the certificate signature. This issue affects OpenSSL versions 1.0.2, 1.1.1 and 3.0. It was addressed in the releases of 1.1.1n and 3.0.2 on the 15th March 2022. Fixed in OpenSSL 3.0.2 (Affected 3.0.0,3.0.1). Fixed in OpenSSL 1.1.1n (Affected 1.1.1-1.1.1m). Fixed in OpenSSL 1.0.2zd (Affected 1.0.2-1.0.2zc).',
-              'diffID':        'sha256:fca5893eb7a3faa1e801274f1d0a34d2d597e03525d9f6f53b4d2d92120d4b26',
-              'fixedVersions': [
-                '1.1.1n-r0'
-              ],
-              'installedVersion': '1.1.1k-r0',
-              'packageName':      'libcrypto1.1',
-              'purl':             'pkg:apk/alpine/libcrypto1.1@1.1.1k-r0?arch=ppc64le&distro=3.14.1',
-              'references':       [
-                'http://packetstormsecurity.com/files/167344/OpenSSL-1.0.2-1.1.1-3.0-BN_mod_sqrt-Infinite-Loop.html',
-                'http://seclists.org/fulldisclosure/2022/May/33',
-                'http://seclists.org/fulldisclosure/2022/May/35',
-                'http://seclists.org/fulldisclosure/2022/May/38',
-                'https://access.redhat.com/errata/RHSA-2022:5326',
-                'https://access.redhat.com/security/cve/CVE-2022-0778',
-                'https://bugzilla.redhat.com/2062202',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2062202',
-                'https://cert-portal.siemens.com/productcert/pdf/ssa-712929.pdf',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-0778',
-                'https://errata.almalinux.org/8/ALSA-2022-5326.html',
-                'https://errata.rockylinux.org/RLSA-2022:4899',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=3118eb64934499d93db3230748a452351d1d9a65',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=380085481c64de749a6dd25cdf0bcf4360b30f83',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=a466912611aa6cbdf550cd10601390e587451246',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=3118eb64934499d93db3230748a452351d1d9a65',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=380085481c64de749a6dd25cdf0bcf4360b30f83',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=a466912611aa6cbdf550cd10601390e587451246',
-                'https://linux.oracle.com/cve/CVE-2022-0778.html',
-                'https://linux.oracle.com/errata/ELSA-2022-9272.html',
-                'https://lists.debian.org/debian-lts-announce/2022/03/msg00023.html',
-                'https://lists.debian.org/debian-lts-announce/2022/03/msg00024.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/323SNN6ZX7PRJJWP2BUAFLPUAE42XWLZ',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/323SNN6ZX7PRJJWP2BUAFLPUAE42XWLZ/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GDB3GQVJPXJE7X5C5JN6JAA4XUDWD6E6',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GDB3GQVJPXJE7X5C5JN6JAA4XUDWD6E6/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/W6K3PR542DXWLEFFMFIDMME4CWMHJRMG',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/W6K3PR542DXWLEFFMFIDMME4CWMHJRMG/',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/323SNN6ZX7PRJJWP2BUAFLPUAE42XWLZ',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/GDB3GQVJPXJE7X5C5JN6JAA4XUDWD6E6',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/W6K3PR542DXWLEFFMFIDMME4CWMHJRMG',
-                'https://nvd.nist.gov/vuln/detail/CVE-2022-0778',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2022-0002',
-                'https://rustsec.org/advisories/RUSTSEC-2022-0014.html',
-                'https://security.gentoo.org/glsa/202210-02',
-                'https://security.netapp.com/advisory/ntap-20220321-0002',
-                'https://security.netapp.com/advisory/ntap-20220321-0002/',
-                'https://security.netapp.com/advisory/ntap-20220429-0005',
-                'https://security.netapp.com/advisory/ntap-20220429-0005/',
-                'https://security.netapp.com/advisory/ntap-20240621-0006',
-                'https://security.netapp.com/advisory/ntap-20240621-0006/',
-                'https://support.apple.com/kb/HT213255',
-                'https://support.apple.com/kb/HT213256',
-                'https://support.apple.com/kb/HT213257',
-                'https://ubuntu.com/security/notices/USN-5328-1',
-                'https://ubuntu.com/security/notices/USN-5328-2',
-                'https://ubuntu.com/security/notices/USN-6457-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2022-0778',
-                'https://www.debian.org/security/2022/dsa-5103',
-                'https://www.openssl.org/news/secadv/20220315.txt',
-                'https://www.oracle.com/security-alerts/cpuapr2022.html',
-                'https://www.oracle.com/security-alerts/cpujul2022.html',
-                'https://www.tenable.com/security/tns-2022-06',
-                'https://www.tenable.com/security/tns-2022-07',
-                'https://www.tenable.com/security/tns-2022-08',
-                'https://www.tenable.com/security/tns-2022-09'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: Infinite loop in BN_mod_sqrt() reachable when parsing certificates'
-            },
-            {
-              'cve':  'CVE-2022-4450',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'nvd': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-415'
-              ],
-              'description':   'The function PEM_read_bio_ex() reads a PEM file from a BIO and parses and\ndecodes the "name" (e.g. "CERTIFICATE"), any header data and the payload data.\nIf the function succeeds then the "name_out", "header" and "data" arguments are\npopulated with pointers to buffers containing the relevant decoded data. The\ncaller is responsible for freeing those buffers. It is possible to construct a\nPEM file that results in 0 bytes of payload data. In this case PEM_read_bio_ex()\nwill return a failure code but will populate the header argument with a pointer\nto a buffer that has already been freed. If the caller also frees this buffer\nthen a double free will occur. This will most likely lead to a crash. This\ncould be exploited by an attacker who has the ability to supply malicious PEM\nfiles for parsing to achieve a denial of service attack.\n\nThe functions PEM_read_bio() and PEM_read() are simple wrappers around\nPEM_read_bio_ex() and therefore these functions are also directly affected.\n\nThese functions are also called indirectly by a number of other OpenSSL\nfunctions including PEM_X509_INFO_read_bio_ex() and\nSSL_CTX_use_serverinfo_file() which are also vulnerable. Some OpenSSL internal\nuses of these functions are not vulnerable because the caller does not free the\nheader argument if PEM_read_bio_ex() returns a failure code. These locations\ninclude the PEM_read_bio_TYPE() functions as well as the decoders introduced in\nOpenSSL 3.0.\n\nThe OpenSSL asn1parse command line application is also impacted by this issue.',
-              'diffID':        'sha256:fca5893eb7a3faa1e801274f1d0a34d2d597e03525d9f6f53b4d2d92120d4b26',
-              'fixedVersions': [
-                '1.1.1t-r0'
-              ],
-              'installedVersion': '1.1.1k-r0',
-              'packageName':      'libcrypto1.1',
-              'purl':             'pkg:apk/alpine/libcrypto1.1@1.1.1k-r0?arch=ppc64le&distro=3.14.1',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2023:2165',
-                'https://access.redhat.com/security/cve/CVE-2022-4450',
-                'https://bugzilla.redhat.com/1960321',
-                'https://bugzilla.redhat.com/2164440',
-                'https://bugzilla.redhat.com/2164487',
-                'https://bugzilla.redhat.com/2164492',
-                'https://bugzilla.redhat.com/2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144000',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144003',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144006',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144008',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144010',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144012',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144015',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144017',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144019',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2145170',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2158412',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164440',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164487',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164488',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164492',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164497',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164499',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164500',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4203',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4304',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4450',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0215',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0216',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0217',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0286',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0401',
-                'https://errata.almalinux.org/9/ALSA-2023-2165.html',
-                'https://errata.rockylinux.org/RLSA-2023:0946',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=63bcf189be73a9cc1264059bed6f57974be74a83',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=bbcf509bd046b34cca19c766bbddc31683d0858b',
-                'https://linux.oracle.com/cve/CVE-2022-4450.html',
-                'https://linux.oracle.com/errata/ELSA-2023-32791.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2022-4450',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0003',
-                'https://rustsec.org/advisories/RUSTSEC-2023-0010.html',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://ubuntu.com/security/notices/USN-5844-1',
-                'https://ubuntu.com/security/notices/USN-6564-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2022-4450',
-                'https://www.openssl.org/news/secadv/20230207.txt'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: double free after calling PEM_read_bio_ex'
-            },
-            {
-              'cve':  'CVE-2023-0215',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'nvd': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   'The public API function BIO_new_NDEF is a helper function used for streaming\nASN.1 data via a BIO. It is primarily used internally to OpenSSL to support the\nSMIME, CMS and PKCS7 streaming capabilities, but may also be called directly by\nend user applications.\n\nThe function receives a BIO from the caller, prepends a new BIO_f_asn1 filter\nBIO onto the front of it to form a BIO chain, and then returns the new head of\nthe BIO chain to the caller. Under certain conditions, for example if a CMS\nrecipient public key is invalid, the new filter BIO is freed and the function\nreturns a NULL result indicating a failure. However, in this case, the BIO chain\nis not properly cleaned up and the BIO passed by the caller still retains\ninternal pointers to the previously freed filter BIO. If the caller then goes on\nto call BIO_pop() on the BIO then a use-after-free will occur. This will most\nlikely result in a crash.\n\n\n\nThis scenario occurs directly in the internal function B64_write_ASN1() which\nmay cause BIO_new_NDEF() to be called and will subsequently call BIO_pop() on\nthe BIO. This internal function is in turn called by the public API functions\nPEM_write_bio_ASN1_stream, PEM_write_bio_CMS_stream, PEM_write_bio_PKCS7_stream,\nSMIME_write_ASN1, SMIME_write_CMS and SMIME_write_PKCS7.\n\nOther public API functions that may be impacted by this include\ni2d_ASN1_bio_stream, BIO_new_CMS, BIO_new_PKCS7, i2d_CMS_bio_stream and\ni2d_PKCS7_bio_stream.\n\nThe OpenSSL cms and smime command line applications are similarly affected.',
-              'diffID':        'sha256:fca5893eb7a3faa1e801274f1d0a34d2d597e03525d9f6f53b4d2d92120d4b26',
-              'fixedVersions': [
-                '1.1.1t-r0'
-              ],
-              'installedVersion': '1.1.1k-r0',
-              'packageName':      'libcrypto1.1',
-              'purl':             'pkg:apk/alpine/libcrypto1.1@1.1.1k-r0?arch=ppc64le&distro=3.14.1',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2023:2165',
-                'https://access.redhat.com/security/cve/CVE-2023-0215',
-                'https://bugzilla.redhat.com/1960321',
-                'https://bugzilla.redhat.com/2164440',
-                'https://bugzilla.redhat.com/2164487',
-                'https://bugzilla.redhat.com/2164492',
-                'https://bugzilla.redhat.com/2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144000',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144003',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144006',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144008',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144010',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144012',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144015',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144017',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144019',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2145170',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2158412',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164440',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164487',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164488',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164492',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164497',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164499',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164500',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4203',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4304',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4450',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0215',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0216',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0217',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0286',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0401',
-                'https://errata.almalinux.org/9/ALSA-2023-2165.html',
-                'https://errata.rockylinux.org/RLSA-2023:0946',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=8818064ce3c3c0f1b740a5aaba2a987e75bfbafd',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=9816136fe31d92ace4037d5da5257f763aeeb4eb',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=c3829dd8825c654652201e16f8a0a0c46ee3f344',
-                'https://linux.oracle.com/cve/CVE-2023-0215.html',
-                'https://linux.oracle.com/errata/ELSA-2023-32791.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-0215',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0003',
-                'https://rustsec.org/advisories/RUSTSEC-2023-0009.html',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://security.netapp.com/advisory/ntap-20230427-0007',
-                'https://security.netapp.com/advisory/ntap-20230427-0007/',
-                'https://security.netapp.com/advisory/ntap-20230427-0009',
-                'https://security.netapp.com/advisory/ntap-20230427-0009/',
-                'https://security.netapp.com/advisory/ntap-20240621-0006',
-                'https://security.netapp.com/advisory/ntap-20240621-0006/',
-                'https://ubuntu.com/security/notices/USN-5844-1',
-                'https://ubuntu.com/security/notices/USN-5845-1',
-                'https://ubuntu.com/security/notices/USN-5845-2',
-                'https://ubuntu.com/security/notices/USN-6564-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-0215',
-                'https://www.openssl.org/news/secadv/20230207.txt'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: use-after-free following BIO_new_NDEF'
-            },
-            {
-              'cve':  'CVE-2023-0286',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '7.4',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H'
-                },
-                'nvd': {
-                  'v3score':  '7.4',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.4',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-843'
-              ],
-              'description':   'There is a type confusion vulnerability relating to X.400 address processing\ninside an X.509 GeneralName. X.400 addresses were parsed as an ASN1_STRING but\nthe public structure definition for GENERAL_NAME incorrectly specified the type\nof the x400Address field as ASN1_TYPE. This field is subsequently interpreted by\nthe OpenSSL function GENERAL_NAME_cmp as an ASN1_TYPE rather than an\nASN1_STRING.\n\nWhen CRL checking is enabled (i.e. the application sets the\nX509_V_FLAG_CRL_CHECK flag), this vulnerability may allow an attacker to pass\narbitrary pointers to a memcmp call, enabling them to read memory contents or\nenact a denial of service. In most cases, the attack requires the attacker to\nprovide both the certificate chain and CRL, neither of which need to have a\nvalid signature. If the attacker only controls one of these inputs, the other\ninput must already contain an X.400 address as a CRL distribution point, which\nis uncommon. As such, this vulnerability is most likely to only affect\napplications which have implemented their own functionality for retrieving CRLs\nover a network.',
-              'diffID':        'sha256:fca5893eb7a3faa1e801274f1d0a34d2d597e03525d9f6f53b4d2d92120d4b26',
-              'fixedVersions': [
-                '1.1.1t-r0'
-              ],
-              'installedVersion': '1.1.1k-r0',
-              'packageName':      'libcrypto1.1',
-              'purl':             'pkg:apk/alpine/libcrypto1.1@1.1.1k-r0?arch=ppc64le&distro=3.14.1',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2025:7937',
-                'https://access.redhat.com/security/cve/CVE-2023-0286',
-                'https://access.redhat.com/security/cve/cve-2023-0286',
-                'https://bugzilla.redhat.com/2164440',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144000',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144003',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144006',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144008',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144010',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144012',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144015',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144017',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144019',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2145170',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2158412',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164440',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164487',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164488',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164492',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164497',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164499',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164500',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4203',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4304',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4450',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0215',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0216',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0217',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0286',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0401',
-                'https://errata.almalinux.org/9/ALSA-2025-7937.html',
-                'https://errata.rockylinux.org/RLSA-2023:0946',
-                'https://ftp.openbsd.org/pub/OpenBSD/LibreSSL/libressl-3.6.2-relnotes.txt',
-                'https://ftp.openbsd.org/pub/OpenBSD/patches/7.2/common/018_x509.patch.sig',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=2c6c9d439b484e1ba9830d8454a34fa4f80fdfe9',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=2f7530077e0ef79d98718138716bc51ca0cad658',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=fd2af07dc083a350c959147097003a14a5e8ac4d',
-                'https://github.com/pyca/cryptography',
-                'https://github.com/pyca/cryptography/security/advisories/GHSA-x4qr-2fvf-3mr5',
-                'https://linux.oracle.com/cve/CVE-2023-0286.html',
-                'https://linux.oracle.com/errata/ELSA-2025-7937.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-0286',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0003',
-                'https://rustsec.org/advisories/RUSTSEC-2023-0006.html',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://ubuntu.com/security/notices/USN-5844-1',
-                'https://ubuntu.com/security/notices/USN-5845-1',
-                'https://ubuntu.com/security/notices/USN-5845-2',
-                'https://ubuntu.com/security/notices/USN-6564-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-0286',
-                'https://www.openssl.org/news/secadv/20230207.txt'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: X.400 address type confusion in X.509 GeneralName'
-            },
-            {
-              'cve':  'CVE-2023-0464',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-295'
-              ],
-              'description':   "A security vulnerability has been identified in all supported versions\n\nof OpenSSL related to the verification of X.509 certificate chains\nthat include policy constraints.  Attackers may be able to exploit this\nvulnerability by creating a malicious certificate chain that triggers\nexponential use of computational resources, leading to a denial-of-service\n(DoS) attack on affected systems.\n\nPolicy processing is disabled by default but can be enabled by passing\nthe `-policy' argument to the command line utilities or by calling the\n`X509_VERIFY_PARAM_set1_policies()' function.",
-              'diffID':        'sha256:fca5893eb7a3faa1e801274f1d0a34d2d597e03525d9f6f53b4d2d92120d4b26',
-              'fixedVersions': [
-                '1.1.1t-r1'
-              ],
-              'installedVersion': '1.1.1k-r0',
-              'packageName':      'libcrypto1.1',
-              'purl':             'pkg:apk/alpine/libcrypto1.1@1.1.1k-r0?arch=ppc64le&distro=3.14.1',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2023:3722',
-                'https://access.redhat.com/security/cve/CVE-2023-0464',
-                'https://bugzilla.redhat.com/2181082',
-                'https://bugzilla.redhat.com/2182561',
-                'https://bugzilla.redhat.com/2182565',
-                'https://bugzilla.redhat.com/2188461',
-                'https://bugzilla.redhat.com/2207947',
-                'https://errata.almalinux.org/9/ALSA-2023-3722.html',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=2017771e2db3e2b96f89bbe8766c3209f6a99545',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=2dcd4f1e3115f38cefa43e3efbe9b801c27e642e',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=879f7080d7e141f415c79eaa3a8ac4a3dad0348b',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=959c59c7a0164117e7f8366466a32bb1f8d77ff1',
-                'https://linux.oracle.com/cve/CVE-2023-0464.html',
-                'https://linux.oracle.com/errata/ELSA-2023-3722.html',
-                'https://lists.debian.org/debian-lts-announce/2023/06/msg00011.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-0464',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://security.netapp.com/advisory/ntap-20230406-0006/',
-                'https://security.netapp.com/advisory/ntap-20240621-0006/',
-                'https://ubuntu.com/security/notices/USN-6039-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.couchbase.com/alerts/',
-                'https://www.cve.org/CVERecord?id=CVE-2023-0464',
-                'https://www.debian.org/security/2023/dsa-5417',
-                'https://www.openssl.org/news/secadv/20230322.txt'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: Denial of service by excessive resource usage in verifying X509 policy constraints'
-            },
-            {
-              'cve':  'CVE-2022-2097',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N'
-                },
-                'nvd': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N'
-                },
-                'redhat': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-327'
-              ],
-              'description':   "AES OCB mode for 32-bit x86 platforms using the AES-NI assembly optimised implementation will not encrypt the entirety of the data under some circumstances. This could reveal sixteen bytes of data that was preexisting in the memory that wasn't written. In the special case of \"in place\" encryption, sixteen bytes of the plaintext would be revealed. Since OpenSSL does not support OCB based cipher suites for TLS and DTLS, they are both unaffected. Fixed in OpenSSL 3.0.5 (Affected 3.0.0-3.0.4). Fixed in OpenSSL 1.1.1q (Affected 1.1.1-1.1.1p).",
-              'diffID':        'sha256:fca5893eb7a3faa1e801274f1d0a34d2d597e03525d9f6f53b4d2d92120d4b26',
-              'fixedVersions': [
-                '1.1.1q-r0'
-              ],
-              'installedVersion': '1.1.1k-r0',
-              'packageName':      'libcrypto1.1',
-              'purl':             'pkg:apk/alpine/libcrypto1.1@1.1.1k-r0?arch=ppc64le&distro=3.14.1',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2022:6224',
-                'https://access.redhat.com/security/cve/CVE-2022-2097',
-                'https://bugzilla.redhat.com/2081494',
-                'https://bugzilla.redhat.com/2087911',
-                'https://bugzilla.redhat.com/2087913',
-                'https://bugzilla.redhat.com/2097310',
-                'https://bugzilla.redhat.com/2104905',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2081494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2097310',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2100554',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2104905',
-                'https://cert-portal.siemens.com/productcert/pdf/ssa-332410.pdf',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-1292',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-2068',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-2097',
-                'https://errata.almalinux.org/9/ALSA-2022-6224.html',
-                'https://errata.rockylinux.org/RLSA-2022:5818',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=919925673d6c9cfed3c1085497f5dfbbed5fc431',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=a98f339ddd7e8f487d6e0088d4a9a42324885a93',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=919925673d6c9cfed3c1085497f5dfbbed5fc431',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=a98f339ddd7e8f487d6e0088d4a9a42324885a93',
-                'https://github.com/alexcrichton/openssl-src-rs',
-                'https://linux.oracle.com/cve/CVE-2022-2097.html',
-                'https://linux.oracle.com/errata/ELSA-2022-9955.html',
-                'https://lists.debian.org/debian-lts-announce/2023/02/msg00019.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/R6CK57NBQFTPUMXAPJURCGXUYT76NQAK',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/R6CK57NBQFTPUMXAPJURCGXUYT76NQAK/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/V6567JERRHHJW2GNGJGKDRNHR7SNPZK7',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/V6567JERRHHJW2GNGJGKDRNHR7SNPZK7/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VCMNWKERPBKOEBNL7CLTTX3ZZCZLH7XA',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VCMNWKERPBKOEBNL7CLTTX3ZZCZLH7XA/',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/R6CK57NBQFTPUMXAPJURCGXUYT76NQAK',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/R6CK57NBQFTPUMXAPJURCGXUYT76NQAK/',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/V6567JERRHHJW2GNGJGKDRNHR7SNPZK7',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/V6567JERRHHJW2GNGJGKDRNHR7SNPZK7/',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/VCMNWKERPBKOEBNL7CLTTX3ZZCZLH7XA',
-                'https://nvd.nist.gov/vuln/detail/CVE-2022-2097',
-                'https://rustsec.org/advisories/RUSTSEC-2022-0032.html',
-                'https://security.gentoo.org/glsa/202210-02',
-                'https://security.netapp.com/advisory/ntap-20220715-0011',
-                'https://security.netapp.com/advisory/ntap-20220715-0011/',
-                'https://security.netapp.com/advisory/ntap-20230420-0008',
-                'https://security.netapp.com/advisory/ntap-20230420-0008/',
-                'https://security.netapp.com/advisory/ntap-20240621-0006',
-                'https://security.netapp.com/advisory/ntap-20240621-0006/',
-                'https://ubuntu.com/security/notices/USN-5502-1',
-                'https://ubuntu.com/security/notices/USN-6457-1',
-                'https://www.cve.org/CVERecord?id=CVE-2022-2097',
-                'https://www.debian.org/security/2023/dsa-5343',
-                'https://www.openssl.org/news/secadv/20220705.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: AES OCB fails to encrypt some bytes'
-            },
-            {
-              'cve':  'CVE-2022-4304',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N'
-                },
-                'nvd': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N'
-                },
-                'redhat': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-203'
-              ],
-              'description':   'A timing based side channel exists in the OpenSSL RSA Decryption implementation\nwhich could be sufficient to recover a plaintext across a network in a\nBleichenbacher style attack. To achieve a successful decryption an attacker\nwould have to be able to send a very large number of trial messages for\ndecryption. The vulnerability affects all RSA padding modes: PKCS#1 v1.5,\nRSA-OEAP and RSASVE.\n\nFor example, in a TLS connection, RSA is commonly used by a client to send an\nencrypted pre-master secret to the server. An attacker that had observed a\ngenuine connection between a client and a server could use this flaw to send\ntrial messages to the server and record the time taken to process them. After a\nsufficiently large number of messages the attacker could recover the pre-master\nsecret used for the original connection and thus be able to decrypt the\napplication data sent over that connection.',
-              'diffID':        'sha256:fca5893eb7a3faa1e801274f1d0a34d2d597e03525d9f6f53b4d2d92120d4b26',
-              'fixedVersions': [
-                '1.1.1t-r0'
-              ],
-              'installedVersion': '1.1.1k-r0',
-              'packageName':      'libcrypto1.1',
-              'purl':             'pkg:apk/alpine/libcrypto1.1@1.1.1k-r0?arch=ppc64le&distro=3.14.1',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2023:2165',
-                'https://access.redhat.com/security/cve/CVE-2022-4304',
-                'https://bugzilla.redhat.com/1960321',
-                'https://bugzilla.redhat.com/2164440',
-                'https://bugzilla.redhat.com/2164487',
-                'https://bugzilla.redhat.com/2164492',
-                'https://bugzilla.redhat.com/2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144000',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144003',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144006',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144008',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144010',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144012',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144015',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144017',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144019',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2145170',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2158412',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164440',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164487',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164488',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164492',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164497',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164499',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164500',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4203',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4304',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4450',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0215',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0216',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0217',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0286',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0401',
-                'https://errata.almalinux.org/9/ALSA-2023-2165.html',
-                'https://errata.rockylinux.org/RLSA-2023:0946',
-                'https://linux.oracle.com/cve/CVE-2022-4304.html',
-                'https://linux.oracle.com/errata/ELSA-2023-32791.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2022-4304',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0003',
-                'https://rustsec.org/advisories/RUSTSEC-2023-0007.html',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://ubuntu.com/security/notices/USN-5844-1',
-                'https://ubuntu.com/security/notices/USN-6564-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2022-4304',
-                'https://www.openssl.org/news/secadv/20230207.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: timing attack in RSA Decryption implementation'
-            },
-            {
-              'cve':  'CVE-2023-0465',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N'
-                },
-                'redhat': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-295'
-              ],
-              'description':   "Applications that use a non-default option when verifying certificates may be\nvulnerable to an attack from a malicious CA to circumvent certain checks.\n\nInvalid certificate policies in leaf certificates are silently ignored by\nOpenSSL and other certificate policy checks are skipped for that certificate.\nA malicious CA could use this to deliberately assert invalid certificate policies\nin order to circumvent policy checking on the certificate altogether.\n\nPolicy processing is disabled by default but can be enabled by passing\nthe `-policy' argument to the command line utilities or by calling the\n`X509_VERIFY_PARAM_set1_policies()' function.",
-              'diffID':        'sha256:fca5893eb7a3faa1e801274f1d0a34d2d597e03525d9f6f53b4d2d92120d4b26',
-              'fixedVersions': [
-                '1.1.1t-r2'
-              ],
-              'installedVersion': '1.1.1k-r0',
-              'packageName':      'libcrypto1.1',
-              'purl':             'pkg:apk/alpine/libcrypto1.1@1.1.1k-r0?arch=ppc64le&distro=3.14.1',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2023:3722',
-                'https://access.redhat.com/security/cve/CVE-2023-0465',
-                'https://bugzilla.redhat.com/2181082',
-                'https://bugzilla.redhat.com/2182561',
-                'https://bugzilla.redhat.com/2182565',
-                'https://bugzilla.redhat.com/2188461',
-                'https://bugzilla.redhat.com/2207947',
-                'https://errata.almalinux.org/9/ALSA-2023-3722.html',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=10325176f3d3e98c6e2b3bf5ab1e3b334de6947a',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=1dd43e0709fece299b15208f36cc7c76209ba0bb',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=b013765abfa80036dc779dd0e50602c57bb3bf95',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=facfb1ab745646e97a1920977ae4a9965ea61d5c',
-                'https://linux.oracle.com/cve/CVE-2023-0465.html',
-                'https://linux.oracle.com/errata/ELSA-2023-3722.html',
-                'https://lists.debian.org/debian-lts-announce/2023/06/msg00011.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-0465',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://security.netapp.com/advisory/ntap-20230414-0001/',
-                'https://ubuntu.com/security/notices/USN-6039-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-0465',
-                'https://www.debian.org/security/2023/dsa-5417',
-                'https://www.openssl.org/news/secadv/20230328.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: Invalid certificate policies in leaf certificates are silently ignored'
-            },
-            {
-              'cve':  'CVE-2022-0778',
-              'cvss': {
-                'bitnami': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'ghsa': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'nvd': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-835'
-              ],
-              'description':   'The BN_mod_sqrt() function, which computes a modular square root, contains a bug that can cause it to loop forever for non-prime moduli. Internally this function is used when parsing certificates that contain elliptic curve public keys in compressed form or explicit elliptic curve parameters with a base point encoded in compressed form. It is possible to trigger the infinite loop by crafting a certificate that has invalid explicit curve parameters. Since certificate parsing happens prior to verification of the certificate signature, any process that parses an externally supplied certificate may thus be subject to a denial of service attack. The infinite loop can also be reached when parsing crafted private keys as they can contain explicit elliptic curve parameters. Thus vulnerable situations include: - TLS clients consuming server certificates - TLS servers consuming client certificates - Hosting providers taking certificates or private keys from customers - Certificate authorities parsing certification requests from subscribers - Anything else which parses ASN.1 elliptic curve parameters Also any other applications that use the BN_mod_sqrt() where the attacker can control the parameter values are vulnerable to this DoS issue. In the OpenSSL 1.0.2 version the public key is not parsed during initial parsing of the certificate which makes it slightly harder to trigger the infinite loop. However any operation which requires the public key from the certificate will trigger the infinite loop. In particular the attacker can use a self-signed certificate to trigger the loop during verification of the certificate signature. This issue affects OpenSSL versions 1.0.2, 1.1.1 and 3.0. It was addressed in the releases of 1.1.1n and 3.0.2 on the 15th March 2022. Fixed in OpenSSL 3.0.2 (Affected 3.0.0,3.0.1). Fixed in OpenSSL 1.1.1n (Affected 1.1.1-1.1.1m). Fixed in OpenSSL 1.0.2zd (Affected 1.0.2-1.0.2zc).',
-              'diffID':        'sha256:fca5893eb7a3faa1e801274f1d0a34d2d597e03525d9f6f53b4d2d92120d4b26',
-              'fixedVersions': [
-                '3.3.3p1-r3'
-              ],
-              'installedVersion': '3.3.3p1-r2',
-              'packageName':      'libretls',
-              'purl':             'pkg:apk/alpine/libretls@3.3.3p1-r2?arch=ppc64le&distro=3.14.1',
-              'references':       [
-                'http://packetstormsecurity.com/files/167344/OpenSSL-1.0.2-1.1.1-3.0-BN_mod_sqrt-Infinite-Loop.html',
-                'http://seclists.org/fulldisclosure/2022/May/33',
-                'http://seclists.org/fulldisclosure/2022/May/35',
-                'http://seclists.org/fulldisclosure/2022/May/38',
-                'https://access.redhat.com/errata/RHSA-2022:5326',
-                'https://access.redhat.com/security/cve/CVE-2022-0778',
-                'https://bugzilla.redhat.com/2062202',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2062202',
-                'https://cert-portal.siemens.com/productcert/pdf/ssa-712929.pdf',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-0778',
-                'https://errata.almalinux.org/8/ALSA-2022-5326.html',
-                'https://errata.rockylinux.org/RLSA-2022:4899',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=3118eb64934499d93db3230748a452351d1d9a65',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=380085481c64de749a6dd25cdf0bcf4360b30f83',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=a466912611aa6cbdf550cd10601390e587451246',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=3118eb64934499d93db3230748a452351d1d9a65',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=380085481c64de749a6dd25cdf0bcf4360b30f83',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=a466912611aa6cbdf550cd10601390e587451246',
-                'https://linux.oracle.com/cve/CVE-2022-0778.html',
-                'https://linux.oracle.com/errata/ELSA-2022-9272.html',
-                'https://lists.debian.org/debian-lts-announce/2022/03/msg00023.html',
-                'https://lists.debian.org/debian-lts-announce/2022/03/msg00024.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/323SNN6ZX7PRJJWP2BUAFLPUAE42XWLZ',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/323SNN6ZX7PRJJWP2BUAFLPUAE42XWLZ/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GDB3GQVJPXJE7X5C5JN6JAA4XUDWD6E6',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GDB3GQVJPXJE7X5C5JN6JAA4XUDWD6E6/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/W6K3PR542DXWLEFFMFIDMME4CWMHJRMG',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/W6K3PR542DXWLEFFMFIDMME4CWMHJRMG/',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/323SNN6ZX7PRJJWP2BUAFLPUAE42XWLZ',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/GDB3GQVJPXJE7X5C5JN6JAA4XUDWD6E6',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/W6K3PR542DXWLEFFMFIDMME4CWMHJRMG',
-                'https://nvd.nist.gov/vuln/detail/CVE-2022-0778',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2022-0002',
-                'https://rustsec.org/advisories/RUSTSEC-2022-0014.html',
-                'https://security.gentoo.org/glsa/202210-02',
-                'https://security.netapp.com/advisory/ntap-20220321-0002',
-                'https://security.netapp.com/advisory/ntap-20220321-0002/',
-                'https://security.netapp.com/advisory/ntap-20220429-0005',
-                'https://security.netapp.com/advisory/ntap-20220429-0005/',
-                'https://security.netapp.com/advisory/ntap-20240621-0006',
-                'https://security.netapp.com/advisory/ntap-20240621-0006/',
-                'https://support.apple.com/kb/HT213255',
-                'https://support.apple.com/kb/HT213256',
-                'https://support.apple.com/kb/HT213257',
-                'https://ubuntu.com/security/notices/USN-5328-1',
-                'https://ubuntu.com/security/notices/USN-5328-2',
-                'https://ubuntu.com/security/notices/USN-6457-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2022-0778',
-                'https://www.debian.org/security/2022/dsa-5103',
-                'https://www.openssl.org/news/secadv/20220315.txt',
-                'https://www.oracle.com/security-alerts/cpuapr2022.html',
-                'https://www.oracle.com/security-alerts/cpujul2022.html',
-                'https://www.tenable.com/security/tns-2022-06',
-                'https://www.tenable.com/security/tns-2022-07',
-                'https://www.tenable.com/security/tns-2022-08',
-                'https://www.tenable.com/security/tns-2022-09'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: Infinite loop in BN_mod_sqrt() reachable when parsing certificates'
-            },
-            {
-              'cve':  'CVE-2021-3711',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '9.8',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'nvd': {
-                  'v3score':  '9.8',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '9.8',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-120'
-              ],
-              'description':   'In order to decrypt SM2 encrypted data an application is expected to call the API function EVP_PKEY_decrypt(). Typically an application will call this function twice. The first time, on entry, the "out" parameter can be NULL and, on exit, the "outlen" parameter is populated with the buffer size required to hold the decrypted plaintext. The application can then allocate a sufficiently sized buffer and call EVP_PKEY_decrypt() again, but this time passing a non-NULL value for the "out" parameter. A bug in the implementation of the SM2 decryption code means that the calculation of the buffer size required to hold the plaintext returned by the first call to EVP_PKEY_decrypt() can be smaller than the actual size required by the second call. This can lead to a buffer overflow when EVP_PKEY_decrypt() is called by the application a second time with a buffer that is too small. A malicious attacker who is able present SM2 content for decryption to an application could cause attacker chosen data to overflow the buffer by up to a maximum of 62 bytes altering the contents of other data held after the buffer, possibly changing application behaviour or causing the application to crash. The location of the buffer is application dependent but is typically heap allocated. Fixed in OpenSSL 1.1.1l (Affected 1.1.1-1.1.1k).',
-              'diffID':        'sha256:fca5893eb7a3faa1e801274f1d0a34d2d597e03525d9f6f53b4d2d92120d4b26',
-              'fixedVersions': [
-                '1.1.1l-r0'
-              ],
-              'installedVersion': '1.1.1k-r0',
-              'packageName':      'libssl1.1',
-              'purl':             'pkg:apk/alpine/libssl1.1@1.1.1k-r0?arch=ppc64le&distro=3.14.1',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2021/08/26/2',
-                'https://access.redhat.com/security/cve/CVE-2021-3711',
-                'https://cert-portal.siemens.com/productcert/pdf/ssa-389290.pdf',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=59f5e75f3bced8fc0e130d72a3f582cf7b480b46',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=59f5e75f3bced8fc0e130d72a3f582cf7b480b46',
-                'https://lists.apache.org/thread.html/r18995de860f0e63635f3008fd2a6aca82394249476d21691e7c59c9e%40%3Cdev.tomcat.apache.org%3E',
-                'https://lists.apache.org/thread.html/r18995de860f0e63635f3008fd2a6aca82394249476d21691e7c59c9e@%3Cdev.tomcat.apache.org%3E',
-                'https://lists.apache.org/thread.html/rad5d9f83f0d11fb3f8bb148d179b8a9ad7c6a17f18d70e5805a713d1%40%3Cdev.tomcat.apache.org%3E',
-                'https://lists.apache.org/thread.html/rad5d9f83f0d11fb3f8bb148d179b8a9ad7c6a17f18d70e5805a713d1@%3Cdev.tomcat.apache.org%3E',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-3711',
-                'https://rustsec.org/advisories/RUSTSEC-2021-0097.html',
-                'https://security.gentoo.org/glsa/202209-02',
-                'https://security.gentoo.org/glsa/202210-02',
-                'https://security.netapp.com/advisory/ntap-20210827-0010',
-                'https://security.netapp.com/advisory/ntap-20210827-0010/',
-                'https://security.netapp.com/advisory/ntap-20211022-0003',
-                'https://security.netapp.com/advisory/ntap-20211022-0003/',
-                'https://security.netapp.com/advisory/ntap-20240621-0006',
-                'https://security.netapp.com/advisory/ntap-20240621-0006/',
-                'https://ubuntu.com/security/notices/USN-5051-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-3711',
-                'https://www.debian.org/security/2021/dsa-4963',
-                'https://www.openssl.org/news/secadv/20210824.txt',
-                'https://www.oracle.com/security-alerts/cpuapr2022.html',
-                'https://www.oracle.com/security-alerts/cpujan2022.html',
-                'https://www.oracle.com/security-alerts/cpuoct2021.html',
-                'https://www.tenable.com/security/tns-2021-16',
-                'https://www.tenable.com/security/tns-2022-02'
-              ],
-              'severity':   'CRITICAL',
-              'suppressed': false,
-              'title':      'openssl: SM2 Decryption Buffer Overflow'
-            },
-            {
-              'cve':  'CVE-2021-3712',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '7.4',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H'
-                },
-                'nvd': {
-                  'v3score':  '7.4',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.4',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-125'
-              ],
-              'description':   "ASN.1 strings are represented internally within OpenSSL as an ASN1_STRING structure which contains a buffer holding the string data and a field holding the buffer length. This contrasts with normal C strings which are repesented as a buffer for the string data which is terminated with a NUL (0) byte. Although not a strict requirement, ASN.1 strings that are parsed using OpenSSL's own \"d2i\" functions (and other similar parsing functions) as well as any string whose value has been set with the ASN1_STRING_set() function will additionally NUL terminate the byte array in the ASN1_STRING structure. However, it is possible for applications to directly construct valid ASN1_STRING structures which do not NUL terminate the byte array by directly setting the \"data\" and \"length\" fields in the ASN1_STRING array. This can also happen by using the ASN1_STRING_set0() function. Numerous OpenSSL functions that print ASN.1 data have been found to assume that the ASN1_STRING byte array will be NUL terminated, even though this is not guaranteed for strings that have been directly constructed. Where an application requests an ASN.1 structure to be printed, and where that ASN.1 structure contains ASN1_STRINGs that have been directly constructed by the application without NUL terminating the \"data\" field, then a read buffer overrun can occur. The same thing can also occur during name constraints processing of certificates (for example if a certificate has been directly constructed by the application instead of loading it via the OpenSSL parsing functions, and the certificate contains non NUL terminated ASN1_STRING structures). It can also occur in the X509_get1_email(), X509_REQ_get1_email() and X509_get1_ocsp() functions. If a malicious actor can cause an application to directly construct an ASN1_STRING and then process it through one of the affected OpenSSL functions then this issue could be hit. This might result in a crash (causing a Denial of Service attack). It could also result in the disclosure of private memory contents (such as private keys, or sensitive plaintext). Fixed in OpenSSL 1.1.1l (Affected 1.1.1-1.1.1k). Fixed in OpenSSL 1.0.2za (Affected 1.0.2-1.0.2y).",
-              'diffID':        'sha256:fca5893eb7a3faa1e801274f1d0a34d2d597e03525d9f6f53b4d2d92120d4b26',
-              'fixedVersions': [
-                '1.1.1l-r0'
-              ],
-              'installedVersion': '1.1.1k-r0',
-              'packageName':      'libssl1.1',
-              'purl':             'pkg:apk/alpine/libssl1.1@1.1.1k-r0?arch=ppc64le&distro=3.14.1',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2021/08/26/2',
-                'https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2021-3712.json',
-                'https://access.redhat.com/security/cve/CVE-2021-3712',
-                'https://cert-portal.siemens.com/productcert/pdf/ssa-244969.pdf',
-                'https://cert-portal.siemens.com/productcert/pdf/ssa-389290.pdf',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=94d23fcff9b2a7a8368dfe52214d5c2569882c11',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=ccb0a11145ee72b042d10593a64eaf9e8a55ec12',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=94d23fcff9b2a7a8368dfe52214d5c2569882c11',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=ccb0a11145ee72b042d10593a64eaf9e8a55ec12',
-                'https://kc.mcafee.com/corporate/index?page=content&id=SB10366',
-                'https://linux.oracle.com/cve/CVE-2021-3712.html',
-                'https://linux.oracle.com/errata/ELSA-2022-9023.html',
-                'https://lists.apache.org/thread.html/r18995de860f0e63635f3008fd2a6aca82394249476d21691e7c59c9e%40%3Cdev.tomcat.apache.org%3E',
-                'https://lists.apache.org/thread.html/r18995de860f0e63635f3008fd2a6aca82394249476d21691e7c59c9e@%3Cdev.tomcat.apache.org%3E',
-                'https://lists.apache.org/thread.html/rad5d9f83f0d11fb3f8bb148d179b8a9ad7c6a17f18d70e5805a713d1%40%3Cdev.tomcat.apache.org%3E',
-                'https://lists.apache.org/thread.html/rad5d9f83f0d11fb3f8bb148d179b8a9ad7c6a17f18d70e5805a713d1@%3Cdev.tomcat.apache.org%3E',
-                'https://lists.debian.org/debian-lts-announce/2021/09/msg00014.html',
-                'https://lists.debian.org/debian-lts-announce/2021/09/msg00021.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-3712',
-                'https://rustsec.org/advisories/RUSTSEC-2021-0098.html',
-                'https://security.gentoo.org/glsa/202209-02',
-                'https://security.gentoo.org/glsa/202210-02',
-                'https://security.netapp.com/advisory/ntap-20210827-0010',
-                'https://security.netapp.com/advisory/ntap-20210827-0010/',
-                'https://security.netapp.com/advisory/ntap-20240621-0006',
-                'https://security.netapp.com/advisory/ntap-20240621-0006/',
-                'https://ubuntu.com/security/notices/USN-5051-1',
-                'https://ubuntu.com/security/notices/USN-5051-2',
-                'https://ubuntu.com/security/notices/USN-5051-3',
-                'https://ubuntu.com/security/notices/USN-5051-4 (regression only in trusty/esm)',
-                'https://ubuntu.com/security/notices/USN-5088-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-3712',
-                'https://www.debian.org/security/2021/dsa-4963',
-                'https://www.openssl.org/news/secadv/20210824.txt',
-                'https://www.oracle.com/security-alerts/cpuapr2022.html',
-                'https://www.oracle.com/security-alerts/cpujan2022.html',
-                'https://www.oracle.com/security-alerts/cpuoct2021.html',
-                'https://www.tenable.com/security/tns-2021-16',
-                'https://www.tenable.com/security/tns-2022-02'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: Read buffer overruns processing ASN.1 strings'
-            },
-            {
-              'cve':  'CVE-2022-0778',
-              'cvss': {
-                'bitnami': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'ghsa': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'nvd': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-835'
-              ],
-              'description':   'The BN_mod_sqrt() function, which computes a modular square root, contains a bug that can cause it to loop forever for non-prime moduli. Internally this function is used when parsing certificates that contain elliptic curve public keys in compressed form or explicit elliptic curve parameters with a base point encoded in compressed form. It is possible to trigger the infinite loop by crafting a certificate that has invalid explicit curve parameters. Since certificate parsing happens prior to verification of the certificate signature, any process that parses an externally supplied certificate may thus be subject to a denial of service attack. The infinite loop can also be reached when parsing crafted private keys as they can contain explicit elliptic curve parameters. Thus vulnerable situations include: - TLS clients consuming server certificates - TLS servers consuming client certificates - Hosting providers taking certificates or private keys from customers - Certificate authorities parsing certification requests from subscribers - Anything else which parses ASN.1 elliptic curve parameters Also any other applications that use the BN_mod_sqrt() where the attacker can control the parameter values are vulnerable to this DoS issue. In the OpenSSL 1.0.2 version the public key is not parsed during initial parsing of the certificate which makes it slightly harder to trigger the infinite loop. However any operation which requires the public key from the certificate will trigger the infinite loop. In particular the attacker can use a self-signed certificate to trigger the loop during verification of the certificate signature. This issue affects OpenSSL versions 1.0.2, 1.1.1 and 3.0. It was addressed in the releases of 1.1.1n and 3.0.2 on the 15th March 2022. Fixed in OpenSSL 3.0.2 (Affected 3.0.0,3.0.1). Fixed in OpenSSL 1.1.1n (Affected 1.1.1-1.1.1m). Fixed in OpenSSL 1.0.2zd (Affected 1.0.2-1.0.2zc).',
-              'diffID':        'sha256:fca5893eb7a3faa1e801274f1d0a34d2d597e03525d9f6f53b4d2d92120d4b26',
-              'fixedVersions': [
-                '1.1.1n-r0'
-              ],
-              'installedVersion': '1.1.1k-r0',
-              'packageName':      'libssl1.1',
-              'purl':             'pkg:apk/alpine/libssl1.1@1.1.1k-r0?arch=ppc64le&distro=3.14.1',
-              'references':       [
-                'http://packetstormsecurity.com/files/167344/OpenSSL-1.0.2-1.1.1-3.0-BN_mod_sqrt-Infinite-Loop.html',
-                'http://seclists.org/fulldisclosure/2022/May/33',
-                'http://seclists.org/fulldisclosure/2022/May/35',
-                'http://seclists.org/fulldisclosure/2022/May/38',
-                'https://access.redhat.com/errata/RHSA-2022:5326',
-                'https://access.redhat.com/security/cve/CVE-2022-0778',
-                'https://bugzilla.redhat.com/2062202',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2062202',
-                'https://cert-portal.siemens.com/productcert/pdf/ssa-712929.pdf',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-0778',
-                'https://errata.almalinux.org/8/ALSA-2022-5326.html',
-                'https://errata.rockylinux.org/RLSA-2022:4899',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=3118eb64934499d93db3230748a452351d1d9a65',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=380085481c64de749a6dd25cdf0bcf4360b30f83',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=a466912611aa6cbdf550cd10601390e587451246',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=3118eb64934499d93db3230748a452351d1d9a65',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=380085481c64de749a6dd25cdf0bcf4360b30f83',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=a466912611aa6cbdf550cd10601390e587451246',
-                'https://linux.oracle.com/cve/CVE-2022-0778.html',
-                'https://linux.oracle.com/errata/ELSA-2022-9272.html',
-                'https://lists.debian.org/debian-lts-announce/2022/03/msg00023.html',
-                'https://lists.debian.org/debian-lts-announce/2022/03/msg00024.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/323SNN6ZX7PRJJWP2BUAFLPUAE42XWLZ',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/323SNN6ZX7PRJJWP2BUAFLPUAE42XWLZ/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GDB3GQVJPXJE7X5C5JN6JAA4XUDWD6E6',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GDB3GQVJPXJE7X5C5JN6JAA4XUDWD6E6/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/W6K3PR542DXWLEFFMFIDMME4CWMHJRMG',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/W6K3PR542DXWLEFFMFIDMME4CWMHJRMG/',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/323SNN6ZX7PRJJWP2BUAFLPUAE42XWLZ',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/GDB3GQVJPXJE7X5C5JN6JAA4XUDWD6E6',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/W6K3PR542DXWLEFFMFIDMME4CWMHJRMG',
-                'https://nvd.nist.gov/vuln/detail/CVE-2022-0778',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2022-0002',
-                'https://rustsec.org/advisories/RUSTSEC-2022-0014.html',
-                'https://security.gentoo.org/glsa/202210-02',
-                'https://security.netapp.com/advisory/ntap-20220321-0002',
-                'https://security.netapp.com/advisory/ntap-20220321-0002/',
-                'https://security.netapp.com/advisory/ntap-20220429-0005',
-                'https://security.netapp.com/advisory/ntap-20220429-0005/',
-                'https://security.netapp.com/advisory/ntap-20240621-0006',
-                'https://security.netapp.com/advisory/ntap-20240621-0006/',
-                'https://support.apple.com/kb/HT213255',
-                'https://support.apple.com/kb/HT213256',
-                'https://support.apple.com/kb/HT213257',
-                'https://ubuntu.com/security/notices/USN-5328-1',
-                'https://ubuntu.com/security/notices/USN-5328-2',
-                'https://ubuntu.com/security/notices/USN-6457-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2022-0778',
-                'https://www.debian.org/security/2022/dsa-5103',
-                'https://www.openssl.org/news/secadv/20220315.txt',
-                'https://www.oracle.com/security-alerts/cpuapr2022.html',
-                'https://www.oracle.com/security-alerts/cpujul2022.html',
-                'https://www.tenable.com/security/tns-2022-06',
-                'https://www.tenable.com/security/tns-2022-07',
-                'https://www.tenable.com/security/tns-2022-08',
-                'https://www.tenable.com/security/tns-2022-09'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: Infinite loop in BN_mod_sqrt() reachable when parsing certificates'
-            },
-            {
-              'cve':  'CVE-2022-4450',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'nvd': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-415'
-              ],
-              'description':   'The function PEM_read_bio_ex() reads a PEM file from a BIO and parses and\ndecodes the "name" (e.g. "CERTIFICATE"), any header data and the payload data.\nIf the function succeeds then the "name_out", "header" and "data" arguments are\npopulated with pointers to buffers containing the relevant decoded data. The\ncaller is responsible for freeing those buffers. It is possible to construct a\nPEM file that results in 0 bytes of payload data. In this case PEM_read_bio_ex()\nwill return a failure code but will populate the header argument with a pointer\nto a buffer that has already been freed. If the caller also frees this buffer\nthen a double free will occur. This will most likely lead to a crash. This\ncould be exploited by an attacker who has the ability to supply malicious PEM\nfiles for parsing to achieve a denial of service attack.\n\nThe functions PEM_read_bio() and PEM_read() are simple wrappers around\nPEM_read_bio_ex() and therefore these functions are also directly affected.\n\nThese functions are also called indirectly by a number of other OpenSSL\nfunctions including PEM_X509_INFO_read_bio_ex() and\nSSL_CTX_use_serverinfo_file() which are also vulnerable. Some OpenSSL internal\nuses of these functions are not vulnerable because the caller does not free the\nheader argument if PEM_read_bio_ex() returns a failure code. These locations\ninclude the PEM_read_bio_TYPE() functions as well as the decoders introduced in\nOpenSSL 3.0.\n\nThe OpenSSL asn1parse command line application is also impacted by this issue.',
-              'diffID':        'sha256:fca5893eb7a3faa1e801274f1d0a34d2d597e03525d9f6f53b4d2d92120d4b26',
-              'fixedVersions': [
-                '1.1.1t-r0'
-              ],
-              'installedVersion': '1.1.1k-r0',
-              'packageName':      'libssl1.1',
-              'purl':             'pkg:apk/alpine/libssl1.1@1.1.1k-r0?arch=ppc64le&distro=3.14.1',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2023:2165',
-                'https://access.redhat.com/security/cve/CVE-2022-4450',
-                'https://bugzilla.redhat.com/1960321',
-                'https://bugzilla.redhat.com/2164440',
-                'https://bugzilla.redhat.com/2164487',
-                'https://bugzilla.redhat.com/2164492',
-                'https://bugzilla.redhat.com/2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144000',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144003',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144006',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144008',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144010',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144012',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144015',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144017',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144019',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2145170',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2158412',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164440',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164487',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164488',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164492',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164497',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164499',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164500',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4203',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4304',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4450',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0215',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0216',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0217',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0286',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0401',
-                'https://errata.almalinux.org/9/ALSA-2023-2165.html',
-                'https://errata.rockylinux.org/RLSA-2023:0946',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=63bcf189be73a9cc1264059bed6f57974be74a83',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=bbcf509bd046b34cca19c766bbddc31683d0858b',
-                'https://linux.oracle.com/cve/CVE-2022-4450.html',
-                'https://linux.oracle.com/errata/ELSA-2023-32791.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2022-4450',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0003',
-                'https://rustsec.org/advisories/RUSTSEC-2023-0010.html',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://ubuntu.com/security/notices/USN-5844-1',
-                'https://ubuntu.com/security/notices/USN-6564-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2022-4450',
-                'https://www.openssl.org/news/secadv/20230207.txt'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: double free after calling PEM_read_bio_ex'
-            },
-            {
-              'cve':  'CVE-2023-0215',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'nvd': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   'The public API function BIO_new_NDEF is a helper function used for streaming\nASN.1 data via a BIO. It is primarily used internally to OpenSSL to support the\nSMIME, CMS and PKCS7 streaming capabilities, but may also be called directly by\nend user applications.\n\nThe function receives a BIO from the caller, prepends a new BIO_f_asn1 filter\nBIO onto the front of it to form a BIO chain, and then returns the new head of\nthe BIO chain to the caller. Under certain conditions, for example if a CMS\nrecipient public key is invalid, the new filter BIO is freed and the function\nreturns a NULL result indicating a failure. However, in this case, the BIO chain\nis not properly cleaned up and the BIO passed by the caller still retains\ninternal pointers to the previously freed filter BIO. If the caller then goes on\nto call BIO_pop() on the BIO then a use-after-free will occur. This will most\nlikely result in a crash.\n\n\n\nThis scenario occurs directly in the internal function B64_write_ASN1() which\nmay cause BIO_new_NDEF() to be called and will subsequently call BIO_pop() on\nthe BIO. This internal function is in turn called by the public API functions\nPEM_write_bio_ASN1_stream, PEM_write_bio_CMS_stream, PEM_write_bio_PKCS7_stream,\nSMIME_write_ASN1, SMIME_write_CMS and SMIME_write_PKCS7.\n\nOther public API functions that may be impacted by this include\ni2d_ASN1_bio_stream, BIO_new_CMS, BIO_new_PKCS7, i2d_CMS_bio_stream and\ni2d_PKCS7_bio_stream.\n\nThe OpenSSL cms and smime command line applications are similarly affected.',
-              'diffID':        'sha256:fca5893eb7a3faa1e801274f1d0a34d2d597e03525d9f6f53b4d2d92120d4b26',
-              'fixedVersions': [
-                '1.1.1t-r0'
-              ],
-              'installedVersion': '1.1.1k-r0',
-              'packageName':      'libssl1.1',
-              'purl':             'pkg:apk/alpine/libssl1.1@1.1.1k-r0?arch=ppc64le&distro=3.14.1',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2023:2165',
-                'https://access.redhat.com/security/cve/CVE-2023-0215',
-                'https://bugzilla.redhat.com/1960321',
-                'https://bugzilla.redhat.com/2164440',
-                'https://bugzilla.redhat.com/2164487',
-                'https://bugzilla.redhat.com/2164492',
-                'https://bugzilla.redhat.com/2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144000',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144003',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144006',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144008',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144010',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144012',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144015',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144017',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144019',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2145170',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2158412',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164440',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164487',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164488',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164492',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164497',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164499',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164500',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4203',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4304',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4450',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0215',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0216',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0217',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0286',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0401',
-                'https://errata.almalinux.org/9/ALSA-2023-2165.html',
-                'https://errata.rockylinux.org/RLSA-2023:0946',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=8818064ce3c3c0f1b740a5aaba2a987e75bfbafd',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=9816136fe31d92ace4037d5da5257f763aeeb4eb',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=c3829dd8825c654652201e16f8a0a0c46ee3f344',
-                'https://linux.oracle.com/cve/CVE-2023-0215.html',
-                'https://linux.oracle.com/errata/ELSA-2023-32791.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-0215',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0003',
-                'https://rustsec.org/advisories/RUSTSEC-2023-0009.html',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://security.netapp.com/advisory/ntap-20230427-0007',
-                'https://security.netapp.com/advisory/ntap-20230427-0007/',
-                'https://security.netapp.com/advisory/ntap-20230427-0009',
-                'https://security.netapp.com/advisory/ntap-20230427-0009/',
-                'https://security.netapp.com/advisory/ntap-20240621-0006',
-                'https://security.netapp.com/advisory/ntap-20240621-0006/',
-                'https://ubuntu.com/security/notices/USN-5844-1',
-                'https://ubuntu.com/security/notices/USN-5845-1',
-                'https://ubuntu.com/security/notices/USN-5845-2',
-                'https://ubuntu.com/security/notices/USN-6564-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-0215',
-                'https://www.openssl.org/news/secadv/20230207.txt'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: use-after-free following BIO_new_NDEF'
-            },
-            {
-              'cve':  'CVE-2023-0286',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '7.4',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H'
-                },
-                'nvd': {
-                  'v3score':  '7.4',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.4',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-843'
-              ],
-              'description':   'There is a type confusion vulnerability relating to X.400 address processing\ninside an X.509 GeneralName. X.400 addresses were parsed as an ASN1_STRING but\nthe public structure definition for GENERAL_NAME incorrectly specified the type\nof the x400Address field as ASN1_TYPE. This field is subsequently interpreted by\nthe OpenSSL function GENERAL_NAME_cmp as an ASN1_TYPE rather than an\nASN1_STRING.\n\nWhen CRL checking is enabled (i.e. the application sets the\nX509_V_FLAG_CRL_CHECK flag), this vulnerability may allow an attacker to pass\narbitrary pointers to a memcmp call, enabling them to read memory contents or\nenact a denial of service. In most cases, the attack requires the attacker to\nprovide both the certificate chain and CRL, neither of which need to have a\nvalid signature. If the attacker only controls one of these inputs, the other\ninput must already contain an X.400 address as a CRL distribution point, which\nis uncommon. As such, this vulnerability is most likely to only affect\napplications which have implemented their own functionality for retrieving CRLs\nover a network.',
-              'diffID':        'sha256:fca5893eb7a3faa1e801274f1d0a34d2d597e03525d9f6f53b4d2d92120d4b26',
-              'fixedVersions': [
-                '1.1.1t-r0'
-              ],
-              'installedVersion': '1.1.1k-r0',
-              'packageName':      'libssl1.1',
-              'purl':             'pkg:apk/alpine/libssl1.1@1.1.1k-r0?arch=ppc64le&distro=3.14.1',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2025:7937',
-                'https://access.redhat.com/security/cve/CVE-2023-0286',
-                'https://access.redhat.com/security/cve/cve-2023-0286',
-                'https://bugzilla.redhat.com/2164440',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144000',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144003',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144006',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144008',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144010',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144012',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144015',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144017',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144019',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2145170',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2158412',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164440',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164487',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164488',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164492',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164497',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164499',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164500',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4203',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4304',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4450',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0215',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0216',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0217',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0286',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0401',
-                'https://errata.almalinux.org/9/ALSA-2025-7937.html',
-                'https://errata.rockylinux.org/RLSA-2023:0946',
-                'https://ftp.openbsd.org/pub/OpenBSD/LibreSSL/libressl-3.6.2-relnotes.txt',
-                'https://ftp.openbsd.org/pub/OpenBSD/patches/7.2/common/018_x509.patch.sig',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=2c6c9d439b484e1ba9830d8454a34fa4f80fdfe9',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=2f7530077e0ef79d98718138716bc51ca0cad658',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=fd2af07dc083a350c959147097003a14a5e8ac4d',
-                'https://github.com/pyca/cryptography',
-                'https://github.com/pyca/cryptography/security/advisories/GHSA-x4qr-2fvf-3mr5',
-                'https://linux.oracle.com/cve/CVE-2023-0286.html',
-                'https://linux.oracle.com/errata/ELSA-2025-7937.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-0286',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0003',
-                'https://rustsec.org/advisories/RUSTSEC-2023-0006.html',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://ubuntu.com/security/notices/USN-5844-1',
-                'https://ubuntu.com/security/notices/USN-5845-1',
-                'https://ubuntu.com/security/notices/USN-5845-2',
-                'https://ubuntu.com/security/notices/USN-6564-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-0286',
-                'https://www.openssl.org/news/secadv/20230207.txt'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: X.400 address type confusion in X.509 GeneralName'
-            },
-            {
-              'cve':  'CVE-2023-0464',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-295'
-              ],
-              'description':   "A security vulnerability has been identified in all supported versions\n\nof OpenSSL related to the verification of X.509 certificate chains\nthat include policy constraints.  Attackers may be able to exploit this\nvulnerability by creating a malicious certificate chain that triggers\nexponential use of computational resources, leading to a denial-of-service\n(DoS) attack on affected systems.\n\nPolicy processing is disabled by default but can be enabled by passing\nthe `-policy' argument to the command line utilities or by calling the\n`X509_VERIFY_PARAM_set1_policies()' function.",
-              'diffID':        'sha256:fca5893eb7a3faa1e801274f1d0a34d2d597e03525d9f6f53b4d2d92120d4b26',
-              'fixedVersions': [
-                '1.1.1t-r1'
-              ],
-              'installedVersion': '1.1.1k-r0',
-              'packageName':      'libssl1.1',
-              'purl':             'pkg:apk/alpine/libssl1.1@1.1.1k-r0?arch=ppc64le&distro=3.14.1',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2023:3722',
-                'https://access.redhat.com/security/cve/CVE-2023-0464',
-                'https://bugzilla.redhat.com/2181082',
-                'https://bugzilla.redhat.com/2182561',
-                'https://bugzilla.redhat.com/2182565',
-                'https://bugzilla.redhat.com/2188461',
-                'https://bugzilla.redhat.com/2207947',
-                'https://errata.almalinux.org/9/ALSA-2023-3722.html',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=2017771e2db3e2b96f89bbe8766c3209f6a99545',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=2dcd4f1e3115f38cefa43e3efbe9b801c27e642e',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=879f7080d7e141f415c79eaa3a8ac4a3dad0348b',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=959c59c7a0164117e7f8366466a32bb1f8d77ff1',
-                'https://linux.oracle.com/cve/CVE-2023-0464.html',
-                'https://linux.oracle.com/errata/ELSA-2023-3722.html',
-                'https://lists.debian.org/debian-lts-announce/2023/06/msg00011.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-0464',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://security.netapp.com/advisory/ntap-20230406-0006/',
-                'https://security.netapp.com/advisory/ntap-20240621-0006/',
-                'https://ubuntu.com/security/notices/USN-6039-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.couchbase.com/alerts/',
-                'https://www.cve.org/CVERecord?id=CVE-2023-0464',
-                'https://www.debian.org/security/2023/dsa-5417',
-                'https://www.openssl.org/news/secadv/20230322.txt'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: Denial of service by excessive resource usage in verifying X509 policy constraints'
-            },
-            {
-              'cve':  'CVE-2022-2097',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N'
-                },
-                'nvd': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N'
-                },
-                'redhat': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-327'
-              ],
-              'description':   "AES OCB mode for 32-bit x86 platforms using the AES-NI assembly optimised implementation will not encrypt the entirety of the data under some circumstances. This could reveal sixteen bytes of data that was preexisting in the memory that wasn't written. In the special case of \"in place\" encryption, sixteen bytes of the plaintext would be revealed. Since OpenSSL does not support OCB based cipher suites for TLS and DTLS, they are both unaffected. Fixed in OpenSSL 3.0.5 (Affected 3.0.0-3.0.4). Fixed in OpenSSL 1.1.1q (Affected 1.1.1-1.1.1p).",
-              'diffID':        'sha256:fca5893eb7a3faa1e801274f1d0a34d2d597e03525d9f6f53b4d2d92120d4b26',
-              'fixedVersions': [
-                '1.1.1q-r0'
-              ],
-              'installedVersion': '1.1.1k-r0',
-              'packageName':      'libssl1.1',
-              'purl':             'pkg:apk/alpine/libssl1.1@1.1.1k-r0?arch=ppc64le&distro=3.14.1',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2022:6224',
-                'https://access.redhat.com/security/cve/CVE-2022-2097',
-                'https://bugzilla.redhat.com/2081494',
-                'https://bugzilla.redhat.com/2087911',
-                'https://bugzilla.redhat.com/2087913',
-                'https://bugzilla.redhat.com/2097310',
-                'https://bugzilla.redhat.com/2104905',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2081494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2097310',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2100554',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2104905',
-                'https://cert-portal.siemens.com/productcert/pdf/ssa-332410.pdf',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-1292',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-2068',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-2097',
-                'https://errata.almalinux.org/9/ALSA-2022-6224.html',
-                'https://errata.rockylinux.org/RLSA-2022:5818',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=919925673d6c9cfed3c1085497f5dfbbed5fc431',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=a98f339ddd7e8f487d6e0088d4a9a42324885a93',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=919925673d6c9cfed3c1085497f5dfbbed5fc431',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=a98f339ddd7e8f487d6e0088d4a9a42324885a93',
-                'https://github.com/alexcrichton/openssl-src-rs',
-                'https://linux.oracle.com/cve/CVE-2022-2097.html',
-                'https://linux.oracle.com/errata/ELSA-2022-9955.html',
-                'https://lists.debian.org/debian-lts-announce/2023/02/msg00019.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/R6CK57NBQFTPUMXAPJURCGXUYT76NQAK',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/R6CK57NBQFTPUMXAPJURCGXUYT76NQAK/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/V6567JERRHHJW2GNGJGKDRNHR7SNPZK7',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/V6567JERRHHJW2GNGJGKDRNHR7SNPZK7/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VCMNWKERPBKOEBNL7CLTTX3ZZCZLH7XA',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VCMNWKERPBKOEBNL7CLTTX3ZZCZLH7XA/',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/R6CK57NBQFTPUMXAPJURCGXUYT76NQAK',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/R6CK57NBQFTPUMXAPJURCGXUYT76NQAK/',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/V6567JERRHHJW2GNGJGKDRNHR7SNPZK7',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/V6567JERRHHJW2GNGJGKDRNHR7SNPZK7/',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/VCMNWKERPBKOEBNL7CLTTX3ZZCZLH7XA',
-                'https://nvd.nist.gov/vuln/detail/CVE-2022-2097',
-                'https://rustsec.org/advisories/RUSTSEC-2022-0032.html',
-                'https://security.gentoo.org/glsa/202210-02',
-                'https://security.netapp.com/advisory/ntap-20220715-0011',
-                'https://security.netapp.com/advisory/ntap-20220715-0011/',
-                'https://security.netapp.com/advisory/ntap-20230420-0008',
-                'https://security.netapp.com/advisory/ntap-20230420-0008/',
-                'https://security.netapp.com/advisory/ntap-20240621-0006',
-                'https://security.netapp.com/advisory/ntap-20240621-0006/',
-                'https://ubuntu.com/security/notices/USN-5502-1',
-                'https://ubuntu.com/security/notices/USN-6457-1',
-                'https://www.cve.org/CVERecord?id=CVE-2022-2097',
-                'https://www.debian.org/security/2023/dsa-5343',
-                'https://www.openssl.org/news/secadv/20220705.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: AES OCB fails to encrypt some bytes'
-            },
-            {
-              'cve':  'CVE-2022-4304',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N'
-                },
-                'nvd': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N'
-                },
-                'redhat': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-203'
-              ],
-              'description':   'A timing based side channel exists in the OpenSSL RSA Decryption implementation\nwhich could be sufficient to recover a plaintext across a network in a\nBleichenbacher style attack. To achieve a successful decryption an attacker\nwould have to be able to send a very large number of trial messages for\ndecryption. The vulnerability affects all RSA padding modes: PKCS#1 v1.5,\nRSA-OEAP and RSASVE.\n\nFor example, in a TLS connection, RSA is commonly used by a client to send an\nencrypted pre-master secret to the server. An attacker that had observed a\ngenuine connection between a client and a server could use this flaw to send\ntrial messages to the server and record the time taken to process them. After a\nsufficiently large number of messages the attacker could recover the pre-master\nsecret used for the original connection and thus be able to decrypt the\napplication data sent over that connection.',
-              'diffID':        'sha256:fca5893eb7a3faa1e801274f1d0a34d2d597e03525d9f6f53b4d2d92120d4b26',
-              'fixedVersions': [
-                '1.1.1t-r0'
-              ],
-              'installedVersion': '1.1.1k-r0',
-              'packageName':      'libssl1.1',
-              'purl':             'pkg:apk/alpine/libssl1.1@1.1.1k-r0?arch=ppc64le&distro=3.14.1',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2023:2165',
-                'https://access.redhat.com/security/cve/CVE-2022-4304',
-                'https://bugzilla.redhat.com/1960321',
-                'https://bugzilla.redhat.com/2164440',
-                'https://bugzilla.redhat.com/2164487',
-                'https://bugzilla.redhat.com/2164492',
-                'https://bugzilla.redhat.com/2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144000',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144003',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144006',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144008',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144010',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144012',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144015',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144017',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144019',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2145170',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2158412',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164440',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164487',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164488',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164492',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164497',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164499',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164500',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4203',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4304',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4450',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0215',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0216',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0217',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0286',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0401',
-                'https://errata.almalinux.org/9/ALSA-2023-2165.html',
-                'https://errata.rockylinux.org/RLSA-2023:0946',
-                'https://linux.oracle.com/cve/CVE-2022-4304.html',
-                'https://linux.oracle.com/errata/ELSA-2023-32791.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2022-4304',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0003',
-                'https://rustsec.org/advisories/RUSTSEC-2023-0007.html',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://ubuntu.com/security/notices/USN-5844-1',
-                'https://ubuntu.com/security/notices/USN-6564-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2022-4304',
-                'https://www.openssl.org/news/secadv/20230207.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: timing attack in RSA Decryption implementation'
-            },
-            {
-              'cve':  'CVE-2023-0465',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N'
-                },
-                'redhat': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-295'
-              ],
-              'description':   "Applications that use a non-default option when verifying certificates may be\nvulnerable to an attack from a malicious CA to circumvent certain checks.\n\nInvalid certificate policies in leaf certificates are silently ignored by\nOpenSSL and other certificate policy checks are skipped for that certificate.\nA malicious CA could use this to deliberately assert invalid certificate policies\nin order to circumvent policy checking on the certificate altogether.\n\nPolicy processing is disabled by default but can be enabled by passing\nthe `-policy' argument to the command line utilities or by calling the\n`X509_VERIFY_PARAM_set1_policies()' function.",
-              'diffID':        'sha256:fca5893eb7a3faa1e801274f1d0a34d2d597e03525d9f6f53b4d2d92120d4b26',
-              'fixedVersions': [
-                '1.1.1t-r2'
-              ],
-              'installedVersion': '1.1.1k-r0',
-              'packageName':      'libssl1.1',
-              'purl':             'pkg:apk/alpine/libssl1.1@1.1.1k-r0?arch=ppc64le&distro=3.14.1',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2023:3722',
-                'https://access.redhat.com/security/cve/CVE-2023-0465',
-                'https://bugzilla.redhat.com/2181082',
-                'https://bugzilla.redhat.com/2182561',
-                'https://bugzilla.redhat.com/2182565',
-                'https://bugzilla.redhat.com/2188461',
-                'https://bugzilla.redhat.com/2207947',
-                'https://errata.almalinux.org/9/ALSA-2023-3722.html',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=10325176f3d3e98c6e2b3bf5ab1e3b334de6947a',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=1dd43e0709fece299b15208f36cc7c76209ba0bb',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=b013765abfa80036dc779dd0e50602c57bb3bf95',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=facfb1ab745646e97a1920977ae4a9965ea61d5c',
-                'https://linux.oracle.com/cve/CVE-2023-0465.html',
-                'https://linux.oracle.com/errata/ELSA-2023-3722.html',
-                'https://lists.debian.org/debian-lts-announce/2023/06/msg00011.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-0465',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://security.netapp.com/advisory/ntap-20230414-0001/',
-                'https://ubuntu.com/security/notices/USN-6039-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-0465',
-                'https://www.debian.org/security/2023/dsa-5417',
-                'https://www.openssl.org/news/secadv/20230328.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: Invalid certificate policies in leaf certificates are silently ignored'
-            },
-            {
-              'cve':  'CVE-2021-42378',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the getvar_i function",
-              'diffID':        'sha256:fca5893eb7a3faa1e801274f1d0a34d2d597e03525d9f6f53b4d2d92120d4b26',
-              'fixedVersions': [
-                '1.33.1-r6'
-              ],
-              'installedVersion': '1.33.1-r3',
-              'packageName':      'ssl_client',
-              'purl':             'pkg:apk/alpine/ssl_client@1.33.1-r3?arch=ppc64le&distro=3.14.1',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42378',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42378',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42378'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the getvar_i()'
-            },
-            {
-              'cve':  'CVE-2021-42379',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the next_input_file function",
-              'diffID':        'sha256:fca5893eb7a3faa1e801274f1d0a34d2d597e03525d9f6f53b4d2d92120d4b26',
-              'fixedVersions': [
-                '1.33.1-r6'
-              ],
-              'installedVersion': '1.33.1-r3',
-              'packageName':      'ssl_client',
-              'purl':             'pkg:apk/alpine/ssl_client@1.33.1-r3?arch=ppc64le&distro=3.14.1',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42379',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42379',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42379'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the next_input_file()'
-            },
-            {
-              'cve':  'CVE-2021-42380',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the clrvar function",
-              'diffID':        'sha256:fca5893eb7a3faa1e801274f1d0a34d2d597e03525d9f6f53b4d2d92120d4b26',
-              'fixedVersions': [
-                '1.33.1-r6'
-              ],
-              'installedVersion': '1.33.1-r3',
-              'packageName':      'ssl_client',
-              'purl':             'pkg:apk/alpine/ssl_client@1.33.1-r3?arch=ppc64le&distro=3.14.1',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42380',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42380',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42380'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the clrvar()'
-            },
-            {
-              'cve':  'CVE-2021-42381',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the hash_init function",
-              'diffID':        'sha256:fca5893eb7a3faa1e801274f1d0a34d2d597e03525d9f6f53b4d2d92120d4b26',
-              'fixedVersions': [
-                '1.33.1-r6'
-              ],
-              'installedVersion': '1.33.1-r3',
-              'packageName':      'ssl_client',
-              'purl':             'pkg:apk/alpine/ssl_client@1.33.1-r3?arch=ppc64le&distro=3.14.1',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42381',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42381',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42381'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the hash_init()'
-            },
-            {
-              'cve':  'CVE-2021-42382',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the getvar_s function",
-              'diffID':        'sha256:fca5893eb7a3faa1e801274f1d0a34d2d597e03525d9f6f53b4d2d92120d4b26',
-              'fixedVersions': [
-                '1.33.1-r6'
-              ],
-              'installedVersion': '1.33.1-r3',
-              'packageName':      'ssl_client',
-              'purl':             'pkg:apk/alpine/ssl_client@1.33.1-r3?arch=ppc64le&distro=3.14.1',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42382',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42382',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42382'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the getvar_s()'
-            },
-            {
-              'cve':  'CVE-2021-42383',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the evaluate function",
-              'diffID':        'sha256:fca5893eb7a3faa1e801274f1d0a34d2d597e03525d9f6f53b4d2d92120d4b26',
-              'fixedVersions': [
-                '1.33.1-r6'
-              ],
-              'installedVersion': '1.33.1-r3',
-              'packageName':      'ssl_client',
-              'purl':             'pkg:apk/alpine/ssl_client@1.33.1-r3?arch=ppc64le&distro=3.14.1',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42383',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42383',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42383'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the evaluate()'
-            },
-            {
-              'cve':  'CVE-2021-42384',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the handle_special function",
-              'diffID':        'sha256:fca5893eb7a3faa1e801274f1d0a34d2d597e03525d9f6f53b4d2d92120d4b26',
-              'fixedVersions': [
-                '1.33.1-r6'
-              ],
-              'installedVersion': '1.33.1-r3',
-              'packageName':      'ssl_client',
-              'purl':             'pkg:apk/alpine/ssl_client@1.33.1-r3?arch=ppc64le&distro=3.14.1',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42384',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42384',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42384'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the handle_special()'
-            },
-            {
-              'cve':  'CVE-2021-42385',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the evaluate function",
-              'diffID':        'sha256:fca5893eb7a3faa1e801274f1d0a34d2d597e03525d9f6f53b4d2d92120d4b26',
-              'fixedVersions': [
-                '1.33.1-r6'
-              ],
-              'installedVersion': '1.33.1-r3',
-              'packageName':      'ssl_client',
-              'purl':             'pkg:apk/alpine/ssl_client@1.33.1-r3?arch=ppc64le&distro=3.14.1',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42385',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42385',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42385'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the evaluate()'
-            },
-            {
-              'cve':  'CVE-2021-42386',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the nvalloc function",
-              'diffID':        'sha256:fca5893eb7a3faa1e801274f1d0a34d2d597e03525d9f6f53b4d2d92120d4b26',
-              'fixedVersions': [
-                '1.33.1-r6'
-              ],
-              'installedVersion': '1.33.1-r3',
-              'packageName':      'ssl_client',
-              'purl':             'pkg:apk/alpine/ssl_client@1.33.1-r3?arch=ppc64le&distro=3.14.1',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42386',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42386',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42386'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the nvalloc()'
-            },
-            {
-              'cve':  'CVE-2022-28391',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '8.8',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-88'
-              ],
-              'description':   "BusyBox through 1.35.0 allows remote attackers to execute arbitrary code if netstat is used to print a DNS PTR record's value to a VT compatible terminal. Alternatively, the attacker could choose to change the terminal's colors.",
-              'diffID':        'sha256:fca5893eb7a3faa1e801274f1d0a34d2d597e03525d9f6f53b4d2d92120d4b26',
-              'fixedVersions': [
-                '1.33.1-r7'
-              ],
-              'installedVersion': '1.33.1-r3',
-              'packageName':      'ssl_client',
-              'purl':             'pkg:apk/alpine/ssl_client@1.33.1-r3?arch=ppc64le&distro=3.14.1',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2022-28391',
-                'https://git.alpinelinux.org/aports/plain/main/busybox/0001-libbb-sockaddr2str-ensure-only-printable-characters-.patch',
-                'https://git.alpinelinux.org/aports/plain/main/busybox/0002-nslookup-sanitize-all-printed-strings-with-printable.patch',
-                'https://gitlab.alpinelinux.org/alpine/aports/-/issues/13661',
-                'https://nvd.nist.gov/vuln/detail/CVE-2022-28391',
-                'https://www.cve.org/CVERecord?id=CVE-2022-28391'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: remote attackers may execute arbitrary code if netstat is used'
-            },
-            {
-              'cve':  'CVE-2021-42374',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '5.7',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-125'
-              ],
-              'description':   "An out-of-bounds heap read in Busybox's unlzma applet leads to information leak and denial of service when crafted LZMA-compressed input is decompressed. This can be triggered by any applet/format that",
-              'diffID':        'sha256:fca5893eb7a3faa1e801274f1d0a34d2d597e03525d9f6f53b4d2d92120d4b26',
-              'fixedVersions': [
-                '1.33.1-r4'
-              ],
-              'installedVersion': '1.33.1-r3',
-              'packageName':      'ssl_client',
-              'purl':             'pkg:apk/alpine/ssl_client@1.33.1-r3?arch=ppc64le&distro=3.14.1',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42374',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42374',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42374'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'busybox: out-of-bounds read in unlzma applet leads to information leak and denial of service when crafted LZMA-compressed input is decompressed'
-            },
-            {
-              'cve':  'CVE-2021-42375',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.5',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '4.1',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-159'
-              ],
-              'description':   "An incorrect handling of a special element in Busybox's ash applet leads to denial of service when processing a crafted shell command, due to the shell mistaking specific characters for reserved characters. This may be used for DoS under rare conditions of filtered command input.",
-              'diffID':        'sha256:fca5893eb7a3faa1e801274f1d0a34d2d597e03525d9f6f53b4d2d92120d4b26',
-              'fixedVersions': [
-                '1.33.1-r5'
-              ],
-              'installedVersion': '1.33.1-r3',
-              'packageName':      'ssl_client',
-              'purl':             'pkg:apk/alpine/ssl_client@1.33.1-r3?arch=ppc64le&distro=3.14.1',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42375',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42375',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42375'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'busybox: incorrect handling of a special element in ash applet leads to denial of service when processing a crafted shell command'
-            },
-            {
-              'cve':  'CVE-2022-37434',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '9.8',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-787',
-                'CWE-120'
-              ],
-              'description':   'zlib through 1.2.12 has a heap-based buffer over-read or buffer overflow in inflate in inflate.c via a large gzip header extra field. NOTE: only applications that call inflateGetHeader are affected. Some common applications bundle the affected zlib source code but may be unable to call inflateGetHeader (e.g., see the nodejs/node reference).',
-              'diffID':        'sha256:fca5893eb7a3faa1e801274f1d0a34d2d597e03525d9f6f53b4d2d92120d4b26',
-              'fixedVersions': [
-                '1.2.12-r2'
-              ],
-              'installedVersion': '1.2.11-r3',
-              'packageName':      'zlib',
-              'purl':             'pkg:apk/alpine/zlib@1.2.11-r3?arch=ppc64le&distro=3.14.1',
-              'references':       [
-                'http://seclists.org/fulldisclosure/2022/Oct/37',
-                'http://seclists.org/fulldisclosure/2022/Oct/38',
-                'http://seclists.org/fulldisclosure/2022/Oct/41',
-                'http://seclists.org/fulldisclosure/2022/Oct/42',
-                'http://www.openwall.com/lists/oss-security/2022/08/05/2',
-                'http://www.openwall.com/lists/oss-security/2022/08/09/1',
-                'https://access.redhat.com/errata/RHSA-2022:8291',
-                'https://access.redhat.com/security/cve/CVE-2022-37434',
-                'https://bugzilla.redhat.com/2116639',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2053198',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2077431',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2081296',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2116639',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-37434',
-                'https://errata.almalinux.org/9/ALSA-2022-8291.html',
-                'https://errata.rockylinux.org/RLSA-2022:8291',
-                'https://github.com/curl/curl/issues/9271',
-                'https://github.com/ivd38/zlib_overflow',
-                'https://github.com/madler/zlib/blob/21767c654d31d2dccdde4330529775c6c5fd5389/zlib.h#L1062-L1063',
-                'https://github.com/madler/zlib/commit/1eb7682f845ac9e9bf9ae35bbfb3bad5dacbd91d',
-                'https://github.com/madler/zlib/commit/eff308af425b67093bab25f80f1ae950166bece1',
-                'https://github.com/nodejs/node/blob/75b68c6e4db515f76df73af476eccf382bbcb00a/deps/zlib/inflate.c#L762-L764',
-                'https://linux.oracle.com/cve/CVE-2022-37434.html',
-                'https://linux.oracle.com/errata/ELSA-2023-1095.html',
-                'https://lists.debian.org/debian-lts-announce/2022/09/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JWN4VE3JQR4O2SOUS5TXNLANRPMHWV4I/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NMBOJ77A7T7PQCARMDUK75TE6LLESZ3O/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PAVPQNCG3XRLCLNSQRM3KAN5ZFMVXVTY/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/X5U7OTKZSHY2I3ZFJSR2SHFHW72RKGDK/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YRQAI7H4M4RQZ2IWZUEEXECBE5D56BH2/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2022-37434',
-                'https://security.netapp.com/advisory/ntap-20220901-0005/',
-                'https://security.netapp.com/advisory/ntap-20230427-0007/',
-                'https://support.apple.com/kb/HT213488',
-                'https://support.apple.com/kb/HT213489',
-                'https://support.apple.com/kb/HT213490',
-                'https://support.apple.com/kb/HT213491',
-                'https://support.apple.com/kb/HT213493',
-                'https://support.apple.com/kb/HT213494',
-                'https://ubuntu.com/security/notices/USN-5570-1',
-                'https://ubuntu.com/security/notices/USN-5570-2',
-                'https://ubuntu.com/security/notices/USN-5573-1',
-                'https://ubuntu.com/security/notices/USN-6736-1',
-                'https://ubuntu.com/security/notices/USN-6736-2',
-                'https://www.cve.org/CVERecord?id=CVE-2022-37434',
-                'https://www.debian.org/security/2022/dsa-5218'
-              ],
-              'severity':   'CRITICAL',
-              'suppressed': false,
-              'title':      'zlib: heap-based buffer over-read and overflow in inflate() in inflate.c via a large gzip header extra field'
-            },
-            {
-              'cve':  'CVE-2018-25032',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'nvd': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '8.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-787'
-              ],
-              'description':   'zlib before 1.2.12 allows memory corruption when deflating (i.e., when compressing) if the input has many distant matches.',
-              'diffID':        'sha256:fca5893eb7a3faa1e801274f1d0a34d2d597e03525d9f6f53b4d2d92120d4b26',
-              'fixedVersions': [
-                '1.2.12-r0'
-              ],
-              'installedVersion': '1.2.11-r3',
-              'packageName':      'zlib',
-              'purl':             'pkg:apk/alpine/zlib@1.2.11-r3?arch=ppc64le&distro=3.14.1',
-              'references':       [
-                'http://seclists.org/fulldisclosure/2022/May/33',
-                'http://seclists.org/fulldisclosure/2022/May/35',
-                'http://seclists.org/fulldisclosure/2022/May/38',
-                'http://www.openwall.com/lists/oss-security/2022/03/25/2',
-                'http://www.openwall.com/lists/oss-security/2022/03/26/1',
-                'https://access.redhat.com/errata/RHSA-2022:8420',
-                'https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-25032.json',
-                'https://access.redhat.com/security/cve/CVE-2018-25032',
-                'https://bugzilla.redhat.com/2067945',
-                'https://cert-portal.siemens.com/productcert/pdf/ssa-333517.pdf',
-                'https://errata.almalinux.org/9/ALSA-2022-8420.html',
-                'https://github.com/advisories/GHSA-jc36-42cf-vqwj',
-                'https://github.com/madler/zlib/commit/5c44459c3b28a9bd3283aaceab7c615f8020c531',
-                'https://github.com/madler/zlib/compare/v1.2.11...v1.2.12',
-                'https://github.com/madler/zlib/issues/605',
-                'https://github.com/rubysec/ruby-advisory-db/blob/master/gems/nokogiri/CVE-2018-25032.yml',
-                'https://github.com/sparklemotion/nokogiri/releases/tag/v1.13.4',
-                'https://github.com/sparklemotion/nokogiri/security/advisories/GHSA-v6gp-9mmm-c6p5',
-                'https://groups.google.com/g/ruby-security-ann/c/vX7qSjsvWis/m/TJWN4oOKBwAJ',
-                'https://linux.oracle.com/cve/CVE-2018-25032.html',
-                'https://linux.oracle.com/errata/ELSA-2022-9565.html',
-                'https://lists.debian.org/debian-lts-announce/2022/04/msg00000.html',
-                'https://lists.debian.org/debian-lts-announce/2022/05/msg00008.html',
-                'https://lists.debian.org/debian-lts-announce/2022/09/msg00023.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DCZFIJBJTZ7CL5QXBFKTQ22Q26VINRUF/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DF62MVMH3QUGMBDCB3DY2ERQ6EBHTADB/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JZZPTWRYQULAOL3AW7RZJNVZ2UONXCV4/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NS2D2GFPFGOJUL4WQ3DUAY7HF4VWQ77F/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VOKNP2L734AEL47NRYGVZIKEFOUBQY5Y/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/XOKFMSNQ5D5WGMALBNBXU3GE442V74WU/',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/DCZFIJBJTZ7CL5QXBFKTQ22Q26VINRUF',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/DCZFIJBJTZ7CL5QXBFKTQ22Q26VINRUF/',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/DF62MVMH3QUGMBDCB3DY2ERQ6EBHTADB',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/DF62MVMH3QUGMBDCB3DY2ERQ6EBHTADB/',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/JZZPTWRYQULAOL3AW7RZJNVZ2UONXCV4',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/JZZPTWRYQULAOL3AW7RZJNVZ2UONXCV4/',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/NS2D2GFPFGOJUL4WQ3DUAY7HF4VWQ77F',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/NS2D2GFPFGOJUL4WQ3DUAY7HF4VWQ77F/',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/VOKNP2L734AEL47NRYGVZIKEFOUBQY5Y',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/VOKNP2L734AEL47NRYGVZIKEFOUBQY5Y/',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/XOKFMSNQ5D5WGMALBNBXU3GE442V74WU',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/XOKFMSNQ5D5WGMALBNBXU3GE442V74WU/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2018-25032',
-                'https://security.gentoo.org/glsa/202210-42',
-                'https://security.netapp.com/advisory/ntap-20220526-0009',
-                'https://security.netapp.com/advisory/ntap-20220526-0009/',
-                'https://security.netapp.com/advisory/ntap-20220729-0004',
-                'https://security.netapp.com/advisory/ntap-20220729-0004/',
-                'https://support.apple.com/kb/HT213255',
-                'https://support.apple.com/kb/HT213256',
-                'https://support.apple.com/kb/HT213257',
-                'https://ubuntu.com/security/notices/USN-5355-1',
-                'https://ubuntu.com/security/notices/USN-5355-2',
-                'https://ubuntu.com/security/notices/USN-5359-1',
-                'https://ubuntu.com/security/notices/USN-5359-2',
-                'https://ubuntu.com/security/notices/USN-5739-1',
-                'https://ubuntu.com/security/notices/USN-6736-1',
-                'https://ubuntu.com/security/notices/USN-6736-2',
-                'https://www.cve.org/CVERecord?id=CVE-2018-25032',
-                'https://www.debian.org/security/2022/dsa-5111',
-                'https://www.openwall.com/lists/oss-security/2022/03/24/1',
-                'https://www.openwall.com/lists/oss-security/2022/03/28/1',
-                'https://www.openwall.com/lists/oss-security/2022/03/28/3',
-                'https://www.oracle.com/security-alerts/cpujul2022.html'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'zlib: A flaw found in zlib when compressing (not decompressing) certain inputs'
-            }
-          ]
-        }
-      ],
-      'summary': {
-        'critical':   3,
-        'high':       34,
-        'low':        0,
-        'medium':     10,
-        'suppressed': 0,
-        'unknown':    0
-      }
-    }
-  },
-  {
-    'id':    'default/7cbb9aa3f0ccdfc960a81bea5f992f4e5265597226cd4199b6f0c8e56d19ce7b',
-    'type':  'storage.sbomscanner.kubewarden.io.vulnerabilityreport',
-    'links': {
-      'patch':  'https://localhost:8005/v1/storage.sbomscanner.kubewarden.io.vulnerabilityreports/default/7cbb9aa3f0ccdfc960a81bea5f992f4e5265597226cd4199b6f0c8e56d19ce7b',
-      'remove': 'https://localhost:8005/v1/storage.sbomscanner.kubewarden.io.vulnerabilityreports/default/7cbb9aa3f0ccdfc960a81bea5f992f4e5265597226cd4199b6f0c8e56d19ce7b',
-      'self':   'https://localhost:8005/v1/storage.sbomscanner.kubewarden.io.vulnerabilityreports/default/7cbb9aa3f0ccdfc960a81bea5f992f4e5265597226cd4199b6f0c8e56d19ce7b',
-      'update': 'https://localhost:8005/v1/storage.sbomscanner.kubewarden.io.vulnerabilityreports/default/7cbb9aa3f0ccdfc960a81bea5f992f4e5265597226cd4199b6f0c8e56d19ce7b',
-      'view':   'https://localhost:8005/apis/storage.sbomscanner.kubewarden.io/v1alpha1/namespaces/default/vulnerabilityreports/7cbb9aa3f0ccdfc960a81bea5f992f4e5265597226cd4199b6f0c8e56d19ce7b'
-    },
-    'apiVersion':    'storage.sbomscanner.kubewarden.io/v1alpha1',
-    'imageMetadata': {
-      'digest':      'sha256:d8d321ec5eec88dee69aec467a51fe764daebdb92ecff0d1debd09840cbd86c6',
-      'platform':    'linux/s390x',
-      'registry':    'lsong-demo1',
-      'registryURI': 'registry-1.docker.io',
-      'repository':  'library/alpine',
-      'tag':         '3.10.3'
-    },
-    'kind':     'VulnerabilityReport',
-    'metadata': {
-      'creationTimestamp': '2026-01-14T18:51:28Z',
-      'fields':            [
-        '7cbb9aa3f0ccdfc960a81bea5f992f4e5265597226cd4199b6f0c8e56d19ce7b',
-        'registry-1.docker.io/library/alpine:3.10.3',
-        'linux/s390x',
-        '22 (0 suppressed)'
-      ],
-      'labels': {
-        'app.kubernetes.io/managed-by':          'sbomscanner',
-        'app.kubernetes.io/part-of':             'sbomscanner',
-        'sbomscanner.kubewarden.io/scanjob-uid': '445c600a-c4b6-40b3-bd71-f2d2140a37d5'
-      },
-      'name':            '7cbb9aa3f0ccdfc960a81bea5f992f4e5265597226cd4199b6f0c8e56d19ce7b',
-      'namespace':       'default',
-      'ownerReferences': [
-        {
-          'apiVersion':         'storage.sbomscanner.kubewarden.io/v1alpha1',
-          'blockOwnerDeletion': true,
-          'controller':         true,
-          'kind':               'SBOM',
-          'name':               '7cbb9aa3f0ccdfc960a81bea5f992f4e5265597226cd4199b6f0c8e56d19ce7b',
-          'uid':                '5bb1aa9e-99cb-48c9-b5ec-bb357684098a'
-        }
-      ],
-      'relationships': [
-        {
-          'fromId':   'default/7cbb9aa3f0ccdfc960a81bea5f992f4e5265597226cd4199b6f0c8e56d19ce7b',
-          'fromType': 'storage.sbomscanner.kubewarden.io.sbom',
-          'rel':      'owner',
-          'state':    'active',
-          'message':  'Resource is current'
-        }
-      ],
-      'resourceVersion': '1',
-      'state':           {
-        'error':         false,
-        'message':       'Resource is current',
-        'name':          'active',
-        'transitioning': false
-      },
-      'uid': 'f9f31777-befa-43db-b924-560355a3534e'
-    },
-    'report': {
-      'results': [
-        {
-          'class':           'os-pkgs',
-          'target':          '/var/run/worker/trivy.sbom.3319688051.json (alpine 3.10.3)',
-          'type':            'alpine',
-          'vulnerabilities': [
-            {
-              'cve':  'CVE-2021-36159',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '9.1',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '9.1',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-125'
-              ],
-              'description':   "libfetch before 2021-07-26, as used in apk-tools, xbps, and other products, mishandles numeric strings for the FTP and HTTP protocols. The FTP passive mode implementation allows an out-of-bounds read because strtol is used to parse the relevant numbers into address bytes. It does not check if the line ends prematurely. If it does, the for-loop condition checks for the '\\0' terminator one byte too late.",
-              'diffID':        'sha256:0a2d800493738e3bf1ae4cec4e0382d37d8b7064185c452e6d7dda4ab5eb7ead',
-              'fixedVersions': [
-                '2.10.7-r0'
-              ],
-              'installedVersion': '2.10.4-r2',
-              'packageName':      'apk-tools',
-              'purl':             'pkg:apk/alpine/apk-tools@2.10.4-r2?arch=s390x&distro=3.10.3',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-36159',
-                'https://github.com/freebsd/freebsd-src/commits/main/lib/libfetch',
-                'https://gitlab.alpinelinux.org/alpine/apk-tools/-/issues/10749',
-                'https://lists.apache.org/thread.html/r61db8e7dcb56dc000a5387a88f7a473bacec5ee01b9ff3f55308aacc%40%3Cdev.kafka.apache.org%3E',
-                'https://lists.apache.org/thread.html/r61db8e7dcb56dc000a5387a88f7a473bacec5ee01b9ff3f55308aacc%40%3Cusers.kafka.apache.org%3E',
-                'https://lists.apache.org/thread.html/rbf4ce74b0d1fa9810dec50ba3ace0caeea677af7c27a97111c06ccb7%40%3Cdev.kafka.apache.org%3E',
-                'https://lists.apache.org/thread.html/rbf4ce74b0d1fa9810dec50ba3ace0caeea677af7c27a97111c06ccb7%40%3Cusers.kafka.apache.org%3E',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-36159',
-                'https://www.cve.org/CVERecord?id=CVE-2021-36159'
-              ],
-              'severity':   'CRITICAL',
-              'suppressed': false,
-              'title':      'libfetch: an out of boundary read while libfetch uses strtol to parse the relevant numbers into address bytes leads to information leak or crash'
-            },
-            {
-              'cve':  'CVE-2021-30139',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-125'
-              ],
-              'description':   'In Alpine Linux apk-tools before 2.12.5, the tarball parser allows a buffer overflow and crash.',
-              'diffID':        'sha256:0a2d800493738e3bf1ae4cec4e0382d37d8b7064185c452e6d7dda4ab5eb7ead',
-              'fixedVersions': [
-                '2.10.6-r0'
-              ],
-              'installedVersion': '2.10.4-r2',
-              'packageName':      'apk-tools',
-              'purl':             'pkg:apk/alpine/apk-tools@2.10.4-r2?arch=s390x&distro=3.10.3',
-              'references':       [
-                'https://gitlab.alpinelinux.org/alpine/apk-tools/-/issues/10741',
-                'https://gitlab.alpinelinux.org/alpine/aports/-/issues/12606'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false
-            },
-            {
-              'cve':  'CVE-2021-28831',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-755'
-              ],
-              'description':   'decompress_gunzip.c in BusyBox through 1.32.1 mishandles the error bit on the huft_build result pointer, with a resultant invalid free or segmentation fault, via malformed gzip data.',
-              'diffID':        'sha256:0a2d800493738e3bf1ae4cec4e0382d37d8b7064185c452e6d7dda4ab5eb7ead',
-              'fixedVersions': [
-                '1.30.1-r5'
-              ],
-              'installedVersion': '1.30.1-r2',
-              'packageName':      'busybox',
-              'purl':             'pkg:apk/alpine/busybox@1.30.1-r2?arch=s390x&distro=3.10.3',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-28831',
-                'https://git.busybox.net/busybox/commit/?id=f25d254dfd4243698c31a4f3153d4ac72aa9e9bd',
-                'https://lists.debian.org/debian-lts-announce/2021/04/msg00001.html',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/3UDQGJRECXFS5EZVDH2OI45FMO436AC4/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/Z7ZIFKPRR32ZYA3WAA2NXFA3QHHOU6FJ/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZASBW7QRRLY5V2R44MQ4QQM4CZIDHM2U/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-28831',
-                'https://security.gentoo.org/glsa/202105-09',
-                'https://security.netapp.com/advisory/ntap-20250509-0005/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://ubuntu.com/security/notices/USN-5179-2',
-                'https://ubuntu.com/security/notices/USN-6335-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-28831'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: invalid free or segmentation fault via malformed gzip data'
-            },
-            {
-              'cve':  'CVE-2020-1967',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'nvd': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-476'
-              ],
-              'description':   'Server or client applications that call the SSL_check_chain() function during or after a TLS 1.3 handshake may crash due to a NULL pointer dereference as a result of incorrect handling of the "signature_algorithms_cert" TLS extension. The crash occurs if an invalid or unrecognised signature algorithm is received from the peer. This could be exploited by a malicious peer in a Denial of Service attack. OpenSSL version 1.1.1d, 1.1.1e, and 1.1.1f are affected by this issue. This issue did not affect OpenSSL versions prior to 1.1.1d. Fixed in OpenSSL 1.1.1g (Affected 1.1.1d-1.1.1f).',
-              'diffID':        'sha256:0a2d800493738e3bf1ae4cec4e0382d37d8b7064185c452e6d7dda4ab5eb7ead',
-              'fixedVersions': [
-                '1.1.1g-r0'
-              ],
-              'installedVersion': '1.1.1d-r0',
-              'packageName':      'libcrypto1.1',
-              'purl':             'pkg:apk/alpine/libcrypto1.1@1.1.1d-r0?arch=s390x&distro=3.10.3',
-              'references':       [
-                'http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00004.html',
-                'http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00011.html',
-                'http://packetstormsecurity.com/files/157527/OpenSSL-signature_algorithms_cert-Denial-Of-Service.html',
-                'http://seclists.org/fulldisclosure/2020/May/5',
-                'http://www.openwall.com/lists/oss-security/2020/04/22/2',
-                'https://access.redhat.com/security/cve/CVE-2020-1967',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=eb563247aef3e83dda7679c43f9649270462e5b1',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=eb563247aef3e83dda7679c43f9649270462e5b1',
-                'https://github.com/irsl/CVE-2020-1967',
-                'https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA44440',
-                'https://lists.apache.org/thread.html/r66ea9c436da150683432db5fbc8beb8ae01886c6459ac30c2cea7345%40%3Cdev.tomcat.apache.org%3E',
-                'https://lists.apache.org/thread.html/r66ea9c436da150683432db5fbc8beb8ae01886c6459ac30c2cea7345@%3Cdev.tomcat.apache.org%3E',
-                'https://lists.apache.org/thread.html/r94d6ac3f010a38fccf4f432b12180a13fa1cf303559bd805648c9064%40%3Cdev.tomcat.apache.org%3E',
-                'https://lists.apache.org/thread.html/r94d6ac3f010a38fccf4f432b12180a13fa1cf303559bd805648c9064@%3Cdev.tomcat.apache.org%3E',
-                'https://lists.apache.org/thread.html/r9a41e304992ce6aec6585a87842b4f2e692604f5c892c37e3b0587ee%40%3Cdev.tomcat.apache.org%3E',
-                'https://lists.apache.org/thread.html/r9a41e304992ce6aec6585a87842b4f2e692604f5c892c37e3b0587ee@%3Cdev.tomcat.apache.org%3E',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DDHOAATPWJCXRNFMJ2SASDBBNU5RJONY/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/EXDDAOWSAIEFQNBHWYE6PPYFV4QXGMCD/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/XVEP3LAK4JSPRXFO4QF4GG2IVXADV3SO/',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/DDHOAATPWJCXRNFMJ2SASDBBNU5RJONY',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/EXDDAOWSAIEFQNBHWYE6PPYFV4QXGMCD',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/XVEP3LAK4JSPRXFO4QF4GG2IVXADV3SO',
-                'https://nvd.nist.gov/vuln/detail/CVE-2020-1967',
-                'https://rustsec.org/advisories/RUSTSEC-2020-0015.html',
-                'https://security.FreeBSD.org/advisories/FreeBSD-SA-20:11.openssl.asc',
-                'https://security.gentoo.org/glsa/202004-10',
-                'https://security.netapp.com/advisory/ntap-20200424-0003',
-                'https://security.netapp.com/advisory/ntap-20200424-0003/',
-                'https://security.netapp.com/advisory/ntap-20200717-0004',
-                'https://security.netapp.com/advisory/ntap-20200717-0004/',
-                'https://www.cve.org/CVERecord?id=CVE-2020-1967',
-                'https://www.debian.org/security/2020/dsa-4661',
-                'https://www.openssl.org/news/secadv/20200421.txt',
-                'https://www.oracle.com//security-alerts/cpujul2021.html',
-                'https://www.oracle.com/security-alerts/cpuApr2021.html',
-                'https://www.oracle.com/security-alerts/cpujan2021.html',
-                'https://www.oracle.com/security-alerts/cpujul2020.html',
-                'https://www.oracle.com/security-alerts/cpuoct2020.html',
-                'https://www.oracle.com/security-alerts/cpuoct2021.html',
-                'https://www.synology.com/security/advisory/Synology_SA_20_05',
-                'https://www.synology.com/security/advisory/Synology_SA_20_05_OpenSSL',
-                'https://www.tenable.com/security/tns-2020-03',
-                'https://www.tenable.com/security/tns-2020-04',
-                'https://www.tenable.com/security/tns-2020-11',
-                'https://www.tenable.com/security/tns-2021-10'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: Segmentation fault in SSL_check_chain causes denial of service'
-            },
-            {
-              'cve':  'CVE-2021-23840',
-              'cvss': {
-                'bitnami': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'ghsa': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'nvd': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-190'
-              ],
-              'description':   'Calls to EVP_CipherUpdate, EVP_EncryptUpdate and EVP_DecryptUpdate may overflow the output length argument in some cases where the input length is close to the maximum permissable length for an integer on the platform. In such cases the return value from the function call will be 1 (indicating success), but the output length value will be negative. This could cause applications to behave incorrectly or crash. OpenSSL versions 1.1.1i and below are affected by this issue. Users of these versions should upgrade to OpenSSL 1.1.1j. OpenSSL versions 1.0.2x and below are affected by this issue. However OpenSSL 1.0.2 is out of support and no longer receiving public updates. Premium support customers of OpenSSL 1.0.2 should upgrade to 1.0.2y. Other users should upgrade to 1.1.1j. Fixed in OpenSSL 1.1.1j (Affected 1.1.1-1.1.1i). Fixed in OpenSSL 1.0.2y (Affected 1.0.2-1.0.2x).',
-              'diffID':        'sha256:0a2d800493738e3bf1ae4cec4e0382d37d8b7064185c452e6d7dda4ab5eb7ead',
-              'fixedVersions': [
-                '1.1.1j-r0'
-              ],
-              'installedVersion': '1.1.1d-r0',
-              'packageName':      'libcrypto1.1',
-              'purl':             'pkg:apk/alpine/libcrypto1.1@1.1.1d-r0?arch=s390x&distro=3.10.3',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-23840',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=1908036',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=1930310',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=1930324',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=1934534',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=1934600',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=1939637',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=1940085',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=1965362',
-                'https://cert-portal.siemens.com/productcert/pdf/ssa-389290.pdf',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-23840',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-23841',
-                'https://errata.rockylinux.org/RLSA-2021:4424',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=6a51b9e1d0cf0bf8515f7201b68fb0a3482b3dc1',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=9b1129239f3ebb1d1c98ce9ed41d5c9476c47cb2',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=6a51b9e1d0cf0bf8515f7201b68fb0a3482b3dc1',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=9b1129239f3ebb1d1c98ce9ed41d5c9476c47cb2',
-                'https://github.com/alexcrichton/openssl-src-rs',
-                'https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA44846',
-                'https://kc.mcafee.com/corporate/index?page=content&id=SB10366',
-                'https://linux.oracle.com/cve/CVE-2021-23840.html',
-                'https://linux.oracle.com/errata/ELSA-2021-9561.html',
-                'https://lists.apache.org/thread.html/r58af02e294bd07f487e2c64ffc0a29b837db5600e33b6e698b9d696b%40%3Cissues.bookkeeper.apache.org%3E',
-                'https://lists.apache.org/thread.html/r58af02e294bd07f487e2c64ffc0a29b837db5600e33b6e698b9d696b@%3Cissues.bookkeeper.apache.org%3E',
-                'https://lists.apache.org/thread.html/rf4c02775860db415b4955778a131c2795223f61cb8c6a450893651e4%40%3Cissues.bookkeeper.apache.org%3E',
-                'https://lists.apache.org/thread.html/rf4c02775860db415b4955778a131c2795223f61cb8c6a450893651e4@%3Cissues.bookkeeper.apache.org%3E',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-23840',
-                'https://rustsec.org/advisories/RUSTSEC-2021-0057.html',
-                'https://security.gentoo.org/glsa/202103-03',
-                'https://security.netapp.com/advisory/ntap-20210219-0009',
-                'https://security.netapp.com/advisory/ntap-20210219-0009/',
-                'https://security.netapp.com/advisory/ntap-20240621-0006/',
-                'https://ubuntu.com/security/notices/USN-4738-1',
-                'https://ubuntu.com/security/notices/USN-5088-1',
-                'https://ubuntu.com/security/notices/USN-7018-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-23840',
-                'https://www.debian.org/security/2021/dsa-4855',
-                'https://www.openssl.org/news/secadv/20210216.txt',
-                'https://www.oracle.com//security-alerts/cpujul2021.html',
-                'https://www.oracle.com/security-alerts/cpuApr2021.html',
-                'https://www.oracle.com/security-alerts/cpuapr2022.html',
-                'https://www.oracle.com/security-alerts/cpujan2022.html',
-                'https://www.oracle.com/security-alerts/cpuoct2021.html',
-                'https://www.tenable.com/security/tns-2021-03',
-                'https://www.tenable.com/security/tns-2021-09',
-                'https://www.tenable.com/security/tns-2021-10'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: integer overflow in CipherUpdate'
-            },
-            {
-              'cve':  'CVE-2021-3450',
-              'cvss': {
-                'bitnami': {
-                  'v3score':  '7.4',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N'
-                },
-                'ghsa': {
-                  'v3score':  '7.4',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N'
-                },
-                'nvd': {
-                  'v3score':  '7.4',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N'
-                },
-                'redhat': {
-                  'v3score':  '7.4',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-295'
-              ],
-              'description':   'The X509_V_FLAG_X509_STRICT flag enables additional security checks of the certificates present in a certificate chain. It is not set by default. Starting from OpenSSL version 1.1.1h a check to disallow certificates in the chain that have explicitly encoded elliptic curve parameters was added as an additional strict check. An error in the implementation of this check meant that the result of a previous check to confirm that certificates in the chain are valid CA certificates was overwritten. This effectively bypasses the check that non-CA certificates must not be able to issue other certificates. If a "purpose" has been configured then there is a subsequent opportunity for checks that the certificate is a valid CA. All of the named "purpose" values implemented in libcrypto perform this check. Therefore, where a purpose is set the certificate chain will still be rejected even when the strict flag has been used. A purpose is set by default in libssl client and server certificate verification routines, but it can be overridden or removed by an application. In order to be affected, an application must explicitly set the X509_V_FLAG_X509_STRICT verification flag and either not set a purpose for the certificate verification or, in the case of TLS client or server applications, override the default purpose. OpenSSL versions 1.1.1h and newer are affected by this issue. Users of these versions should upgrade to OpenSSL 1.1.1k. OpenSSL 1.0.2 is not impacted by this issue. Fixed in OpenSSL 1.1.1k (Affected 1.1.1h-1.1.1j).',
-              'diffID':        'sha256:0a2d800493738e3bf1ae4cec4e0382d37d8b7064185c452e6d7dda4ab5eb7ead',
-              'fixedVersions': [
-                '1.1.1k-r0'
-              ],
-              'installedVersion': '1.1.1d-r0',
-              'packageName':      'libcrypto1.1',
-              'purl':             'pkg:apk/alpine/libcrypto1.1@1.1.1d-r0?arch=s390x&distro=3.10.3',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2021/03/27/1',
-                'http://www.openwall.com/lists/oss-security/2021/03/27/2',
-                'http://www.openwall.com/lists/oss-security/2021/03/28/3',
-                'http://www.openwall.com/lists/oss-security/2021/03/28/4',
-                'https://access.redhat.com/security/cve/CVE-2021-3450',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=1941547',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=1941554',
-                'https://cert-portal.siemens.com/productcert/pdf/ssa-389290.pdf',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-3449',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-3450',
-                'https://errata.rockylinux.org/RLSA-2021:1024',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=2a40b7bc7b94dd7de897a74571e7024f0cf0d63b',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=2a40b7bc7b94dd7de897a74571e7024f0cf0d63b',
-                'https://github.com/alexcrichton/openssl-src-rs',
-                'https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA44845',
-                'https://kc.mcafee.com/corporate/index?page=content&id=SB10356',
-                'https://linux.oracle.com/cve/CVE-2021-3450.html',
-                'https://linux.oracle.com/errata/ELSA-2021-9151.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CCBFLLVQVILIVGZMBJL3IXZGKWQISYNP/',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/CCBFLLVQVILIVGZMBJL3IXZGKWQISYNP',
-                'https://mta.openssl.org/pipermail/openssl-announce/2021-March/000198.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-3450',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2021-0013',
-                'https://rustsec.org/advisories/RUSTSEC-2021-0056.html',
-                'https://security.FreeBSD.org/advisories/FreeBSD-SA-21:07.openssl.asc',
-                'https://security.gentoo.org/glsa/202103-03',
-                'https://security.netapp.com/advisory/ntap-20210326-0006',
-                'https://security.netapp.com/advisory/ntap-20210326-0006/',
-                'https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-openssl-2021-GHY28dJd',
-                'https://www.cve.org/CVERecord?id=CVE-2021-3450',
-                'https://www.openssl.org/news/secadv/20210325.txt',
-                'https://www.oracle.com//security-alerts/cpujul2021.html',
-                'https://www.oracle.com/security-alerts/cpuApr2021.html',
-                'https://www.oracle.com/security-alerts/cpuapr2022.html',
-                'https://www.oracle.com/security-alerts/cpujul2022.html',
-                'https://www.oracle.com/security-alerts/cpuoct2021.html',
-                'https://www.tenable.com/security/tns-2021-05',
-                'https://www.tenable.com/security/tns-2021-08',
-                'https://www.tenable.com/security/tns-2021-09'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: CA certificate check bypass with X509_V_FLAG_X509_STRICT'
-            },
-            {
-              'cve':  'CVE-2019-1551',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N'
-                },
-                'redhat': {
-                  'v3score':  '4.8',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-190'
-              ],
-              'description':   'There is an overflow bug in the x64_64 Montgomery squaring procedure used in exponentiation with 512-bit moduli. No EC algorithms are affected. Analysis suggests that attacks against 2-prime RSA1024, 3-prime RSA1536, and DSA1024 as a result of this defect would be very difficult to perform and are not believed likely. Attacks against DH512 are considered just feasible. However, for an attack the target would have to re-use the DH512 private key, which is not recommended anyway. Also applications directly using the low level API BN_mod_exp may be affected if they use BN_FLG_CONSTTIME. Fixed in OpenSSL 1.1.1e (Affected 1.1.1-1.1.1d). Fixed in OpenSSL 1.0.2u (Affected 1.0.2-1.0.2t).',
-              'diffID':        'sha256:0a2d800493738e3bf1ae4cec4e0382d37d8b7064185c452e6d7dda4ab5eb7ead',
-              'fixedVersions': [
-                '1.1.1d-r2'
-              ],
-              'installedVersion': '1.1.1d-r0',
-              'packageName':      'libcrypto1.1',
-              'purl':             'pkg:apk/alpine/libcrypto1.1@1.1.1d-r0?arch=s390x&distro=3.10.3',
-              'references':       [
-                'http://lists.opensuse.org/opensuse-security-announce/2020-01/msg00030.html',
-                'http://packetstormsecurity.com/files/155754/Slackware-Security-Advisory-openssl-Updates.html',
-                'https://access.redhat.com/security/cve/CVE-2019-1551',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=419102400a2811582a7a3d4a4e317d72e5ce0a8f',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=f1c5eea8a817075d31e43f5876993c6710238c98',
-                'https://github.com/openssl/openssl/pull/10575',
-                'https://linux.oracle.com/cve/CVE-2019-1551.html',
-                'https://linux.oracle.com/errata/ELSA-2020-4514.html',
-                'https://lists.debian.org/debian-lts-announce/2022/03/msg00023.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DDHOAATPWJCXRNFMJ2SASDBBNU5RJONY/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/EXDDAOWSAIEFQNBHWYE6PPYFV4QXGMCD/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/XVEP3LAK4JSPRXFO4QF4GG2IVXADV3SO/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2019-1551',
-                'https://seclists.org/bugtraq/2019/Dec/39',
-                'https://seclists.org/bugtraq/2019/Dec/46',
-                'https://security.gentoo.org/glsa/202004-10',
-                'https://security.netapp.com/advisory/ntap-20191210-0001/',
-                'https://ubuntu.com/security/notices/USN-4376-1',
-                'https://ubuntu.com/security/notices/USN-4504-1',
-                'https://usn.ubuntu.com/4376-1/',
-                'https://usn.ubuntu.com/4504-1/',
-                'https://www.cve.org/CVERecord?id=CVE-2019-1551',
-                'https://www.debian.org/security/2019/dsa-4594',
-                'https://www.debian.org/security/2021/dsa-4855',
-                'https://www.openssl.org/news/secadv/20191206.txt',
-                'https://www.oracle.com/security-alerts/cpuApr2021.html',
-                'https://www.oracle.com/security-alerts/cpujan2021.html',
-                'https://www.oracle.com/security-alerts/cpujul2020.html',
-                'https://www.tenable.com/security/tns-2019-09',
-                'https://www.tenable.com/security/tns-2020-03',
-                'https://www.tenable.com/security/tns-2020-11',
-                'https://www.tenable.com/security/tns-2021-10'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: Integer overflow in RSAZ modular exponentiation on x86_64'
-            },
-            {
-              'cve':  'CVE-2020-1971',
-              'cvss': {
-                'bitnami': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'nvd': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-476'
-              ],
-              'description':   "The X.509 GeneralName type is a generic type for representing different types of names. One of those name types is known as EDIPartyName. OpenSSL provides a function GENERAL_NAME_cmp which compares different instances of a GENERAL_NAME to see if they are equal or not. This function behaves incorrectly when both GENERAL_NAMEs contain an EDIPARTYNAME. A NULL pointer dereference and a crash may occur leading to a possible denial of service attack. OpenSSL itself uses the GENERAL_NAME_cmp function for two purposes: 1) Comparing CRL distribution point names between an available CRL and a CRL distribution point embedded in an X509 certificate 2) When verifying that a timestamp response token signer matches the timestamp authority name (exposed via the API functions TS_RESP_verify_response and TS_RESP_verify_token) If an attacker can control both items being compared then that attacker could trigger a crash. For example if the attacker can trick a client or server into checking a malicious certificate against a malicious CRL then this may occur. Note that some applications automatically download CRLs based on a URL embedded in a certificate. This checking happens prior to the signatures on the certificate and CRL being verified. OpenSSL's s_server, s_client and verify tools have support for the \"-crl_download\" option which implements automatic CRL downloading and this attack has been demonstrated to work against those tools. Note that an unrelated bug means that affected versions of OpenSSL cannot parse or construct correct encodings of EDIPARTYNAME. However it is possible to construct a malformed EDIPARTYNAME that OpenSSL's parser will accept and hence trigger this attack. All OpenSSL 1.1.1 and 1.0.2 versions are affected by this issue. Other OpenSSL releases are out of support and have not been checked. Fixed in OpenSSL 1.1.1i (Affected 1.1.1-1.1.1h). Fixed in OpenSSL 1.0.2x (Affected 1.0.2-1.0.2w).",
-              'diffID':        'sha256:0a2d800493738e3bf1ae4cec4e0382d37d8b7064185c452e6d7dda4ab5eb7ead',
-              'fixedVersions': [
-                '1.1.1i-r0'
-              ],
-              'installedVersion': '1.1.1d-r0',
-              'packageName':      'libcrypto1.1',
-              'purl':             'pkg:apk/alpine/libcrypto1.1@1.1.1d-r0?arch=s390x&distro=3.10.3',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2021/09/14/2',
-                'https://access.redhat.com/security/cve/CVE-2020-1971',
-                'https://cert-portal.siemens.com/productcert/pdf/ssa-389290.pdf',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=2154ab83e14ede338d2ede9bbe5cdfce5d5a6c9e',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=f960d81215ebf3f65e03d4d5d857fb9b666d6920',
-                'https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA44676',
-                'https://linux.oracle.com/cve/CVE-2020-1971.html',
-                'https://linux.oracle.com/errata/ELSA-2021-9150.html',
-                'https://lists.apache.org/thread.html/r63c6f2dd363d9b514d0a4bcf624580616a679898cc14c109a49b750c%40%3Cdev.tomcat.apache.org%3E',
-                'https://lists.apache.org/thread.html/rbb769f771711fb274e0a4acb1b5911c8aab544a6ac5e8c12d40c5143%40%3Ccommits.pulsar.apache.org%3E',
-                'https://lists.debian.org/debian-lts-announce/2020/12/msg00020.html',
-                'https://lists.debian.org/debian-lts-announce/2020/12/msg00021.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DGSI34Y5LQ5RYXN4M2I5ZQT65LFVDOUU/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PWPSSZNZOBJU2YR6Z4TGHXKYW3YP5QG7/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2020-1971',
-                'https://security.FreeBSD.org/advisories/FreeBSD-SA-20:33.openssl.asc',
-                'https://security.gentoo.org/glsa/202012-13',
-                'https://security.netapp.com/advisory/ntap-20201218-0005/',
-                'https://security.netapp.com/advisory/ntap-20210513-0002/',
-                'https://security.netapp.com/advisory/ntap-20240621-0006/',
-                'https://ubuntu.com/security/notices/USN-4662-1',
-                'https://ubuntu.com/security/notices/USN-4745-1',
-                'https://www.cve.org/CVERecord?id=CVE-2020-1971',
-                'https://www.debian.org/security/2020/dsa-4807',
-                'https://www.openssl.org/news/secadv/20201208.txt',
-                'https://www.oracle.com//security-alerts/cpujul2021.html',
-                'https://www.oracle.com/security-alerts/cpuApr2021.html',
-                'https://www.oracle.com/security-alerts/cpuapr2022.html',
-                'https://www.oracle.com/security-alerts/cpujan2021.html',
-                'https://www.oracle.com/security-alerts/cpuoct2021.html',
-                'https://www.tenable.com/security/tns-2020-11',
-                'https://www.tenable.com/security/tns-2021-09',
-                'https://www.tenable.com/security/tns-2021-10'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: EDIPARTYNAME NULL pointer de-reference'
-            },
-            {
-              'cve':  'CVE-2021-23841',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'nvd': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-476'
-              ],
-              'description':   'The OpenSSL public API function X509_issuer_and_serial_hash() attempts to create a unique hash value based on the issuer and serial number data contained within an X509 certificate. However it fails to correctly handle any errors that may occur while parsing the issuer field (which might occur if the issuer field is maliciously constructed). This may subsequently result in a NULL pointer deref and a crash leading to a potential denial of service attack. The function X509_issuer_and_serial_hash() is never directly called by OpenSSL itself so applications are only vulnerable if they use this function directly and they use it on certificates that may have been obtained from untrusted sources. OpenSSL versions 1.1.1i and below are affected by this issue. Users of these versions should upgrade to OpenSSL 1.1.1j. OpenSSL versions 1.0.2x and below are affected by this issue. However OpenSSL 1.0.2 is out of support and no longer receiving public updates. Premium support customers of OpenSSL 1.0.2 should upgrade to 1.0.2y. Other users should upgrade to 1.1.1j. Fixed in OpenSSL 1.1.1j (Affected 1.1.1-1.1.1i). Fixed in OpenSSL 1.0.2y (Affected 1.0.2-1.0.2x).',
-              'diffID':        'sha256:0a2d800493738e3bf1ae4cec4e0382d37d8b7064185c452e6d7dda4ab5eb7ead',
-              'fixedVersions': [
-                '1.1.1j-r0'
-              ],
-              'installedVersion': '1.1.1d-r0',
-              'packageName':      'libcrypto1.1',
-              'purl':             'pkg:apk/alpine/libcrypto1.1@1.1.1d-r0?arch=s390x&distro=3.10.3',
-              'references':       [
-                'http://seclists.org/fulldisclosure/2021/May/67',
-                'http://seclists.org/fulldisclosure/2021/May/68',
-                'http://seclists.org/fulldisclosure/2021/May/70',
-                'https://access.redhat.com/security/cve/CVE-2021-23841',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=1908036',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=1930310',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=1930324',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=1934534',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=1934600',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=1939637',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=1940085',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=1965362',
-                'https://cert-portal.siemens.com/productcert/pdf/ssa-637483.pdf',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-23840',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-23841',
-                'https://errata.rockylinux.org/RLSA-2021:4424',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=122a19ab48091c657f7cb1fb3af9fc07bd557bbf',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=8252ee4d90f3f2004d3d0aeeed003ad49c9a7807',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=122a19ab48091c657f7cb1fb3af9fc07bd557bbf',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=6a51b9e1d0cf0bf8515f7201b68fb0a3482b3dc1',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=8252ee4d90f3f2004d3d0aeeed003ad49c9a7807',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=9b1129239f3ebb1d1c98ce9ed41d5c9476c47cb2',
-                'https://github.com/alexcrichton/openssl-src-rs',
-                'https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA44846',
-                'https://linux.oracle.com/cve/CVE-2021-23841.html',
-                'https://linux.oracle.com/errata/ELSA-2021-9561.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-23841',
-                'https://rustsec.org/advisories/RUSTSEC-2021-0058',
-                'https://rustsec.org/advisories/RUSTSEC-2021-0058.html',
-                'https://security.gentoo.org/glsa/202103-03',
-                'https://security.netapp.com/advisory/ntap-20210219-0009',
-                'https://security.netapp.com/advisory/ntap-20210219-0009/',
-                'https://security.netapp.com/advisory/ntap-20210513-0002',
-                'https://security.netapp.com/advisory/ntap-20210513-0002/',
-                'https://security.netapp.com/advisory/ntap-20240621-0006/',
-                'https://support.apple.com/kb/HT212528',
-                'https://support.apple.com/kb/HT212529',
-                'https://support.apple.com/kb/HT212534',
-                'https://ubuntu.com/security/notices/USN-4738-1',
-                'https://ubuntu.com/security/notices/USN-4745-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-23841',
-                'https://www.debian.org/security/2021/dsa-4855',
-                'https://www.openssl.org/news/secadv/20210216.txt',
-                'https://www.oracle.com//security-alerts/cpujul2021.html',
-                'https://www.oracle.com/security-alerts/cpuApr2021.html',
-                'https://www.oracle.com/security-alerts/cpuapr2022.html',
-                'https://www.oracle.com/security-alerts/cpuoct2021.html',
-                'https://www.tenable.com/security/tns-2021-03',
-                'https://www.tenable.com/security/tns-2021-09'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: NULL pointer dereference in X509_issuer_and_serial_hash()'
-            },
-            {
-              'cve':  'CVE-2021-3449',
-              'cvss': {
-                'bitnami': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'ghsa': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'nvd': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-476'
-              ],
-              'description':   'An OpenSSL TLS server may crash if sent a maliciously crafted renegotiation ClientHello message from a client. If a TLSv1.2 renegotiation ClientHello omits the signature_algorithms extension (where it was present in the initial ClientHello), but includes a signature_algorithms_cert extension then a NULL pointer dereference will result, leading to a crash and a denial of service attack. A server is only vulnerable if it has TLSv1.2 and renegotiation enabled (which is the default configuration). OpenSSL TLS clients are not impacted by this issue. All OpenSSL 1.1.1 versions are affected by this issue. Users of these versions should upgrade to OpenSSL 1.1.1k. OpenSSL 1.0.2 is not impacted by this issue. Fixed in OpenSSL 1.1.1k (Affected 1.1.1-1.1.1j).',
-              'diffID':        'sha256:0a2d800493738e3bf1ae4cec4e0382d37d8b7064185c452e6d7dda4ab5eb7ead',
-              'fixedVersions': [
-                '1.1.1k-r0'
-              ],
-              'installedVersion': '1.1.1d-r0',
-              'packageName':      'libcrypto1.1',
-              'purl':             'pkg:apk/alpine/libcrypto1.1@1.1.1d-r0?arch=s390x&distro=3.10.3',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2021/03/27/1',
-                'http://www.openwall.com/lists/oss-security/2021/03/27/2',
-                'http://www.openwall.com/lists/oss-security/2021/03/28/3',
-                'http://www.openwall.com/lists/oss-security/2021/03/28/4',
-                'https://access.redhat.com/security/cve/CVE-2021-3449',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=1941547',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=1941554',
-                'https://cert-portal.siemens.com/productcert/pdf/ssa-389290.pdf',
-                'https://cert-portal.siemens.com/productcert/pdf/ssa-772220.pdf',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-3449',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-3450',
-                'https://errata.rockylinux.org/RLSA-2021:1024',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=fb9fa6b51defd48157eeb207f52181f735d96148',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=fb9fa6b51defd48157eeb207f52181f735d96148',
-                'https://github.com/alexcrichton/openssl-src-rs',
-                'https://github.com/nodejs/node/pull/38083',
-                'https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA44845',
-                'https://kc.mcafee.com/corporate/index?page=content&id=SB10356',
-                'https://linux.oracle.com/cve/CVE-2021-3449.html',
-                'https://linux.oracle.com/errata/ELSA-2021-9151.html',
-                'https://lists.debian.org/debian-lts-announce/2021/08/msg00029.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CCBFLLVQVILIVGZMBJL3IXZGKWQISYNP/',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/CCBFLLVQVILIVGZMBJL3IXZGKWQISYNP',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-3449',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2021-0013',
-                'https://rustsec.org/advisories/RUSTSEC-2021-0055',
-                'https://rustsec.org/advisories/RUSTSEC-2021-0055.html',
-                'https://security.FreeBSD.org/advisories/FreeBSD-SA-21:07.openssl.asc',
-                'https://security.gentoo.org/glsa/202103-03',
-                'https://security.netapp.com/advisory/ntap-20210326-0006',
-                'https://security.netapp.com/advisory/ntap-20210326-0006/',
-                'https://security.netapp.com/advisory/ntap-20210513-0002',
-                'https://security.netapp.com/advisory/ntap-20210513-0002/',
-                'https://security.netapp.com/advisory/ntap-20240621-0006/',
-                'https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-openssl-2021-GHY28dJd',
-                'https://ubuntu.com/security/notices/USN-4891-1',
-                'https://ubuntu.com/security/notices/USN-5038-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-3449',
-                'https://www.debian.org/security/2021/dsa-4875',
-                'https://www.openssl.org/news/secadv/20210325.txt',
-                'https://www.oracle.com//security-alerts/cpujul2021.html',
-                'https://www.oracle.com/security-alerts/cpuApr2021.html',
-                'https://www.oracle.com/security-alerts/cpuapr2022.html',
-                'https://www.oracle.com/security-alerts/cpujul2022.html',
-                'https://www.oracle.com/security-alerts/cpuoct2021.html',
-                'https://www.tenable.com/security/tns-2021-05',
-                'https://www.tenable.com/security/tns-2021-06',
-                'https://www.tenable.com/security/tns-2021-09',
-                'https://www.tenable.com/security/tns-2021-10'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: NULL pointer dereference in signature_algorithms processing'
-            },
-            {
-              'cve':  'CVE-2021-23839',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '3.7',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N'
-                },
-                'redhat': {
-                  'v3score':  '3.7',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-327'
-              ],
-              'description':   'OpenSSL 1.0.2 supports SSLv2. If a client attempts to negotiate SSLv2 with a server that is configured to support both SSLv2 and more recent SSL and TLS versions then a check is made for a version rollback attack when unpadding an RSA signature. Clients that support SSL or TLS versions greater than SSLv2 are supposed to use a special form of padding. A server that supports greater than SSLv2 is supposed to reject connection attempts from a client where this special form of padding is present, because this indicates that a version rollback has occurred (i.e. both client and server support greater than SSLv2, and yet this is the version that is being requested). The implementation of this padding check inverted the logic so that the connection attempt is accepted if the padding is present, and rejected if it is absent. This means that such as server will accept a connection if a version rollback attack has occurred. Further the server will erroneously reject a connection if a normal SSLv2 connection attempt is made. Only OpenSSL 1.0.2 servers from version 1.0.2s to 1.0.2x are affected by this issue. In order to be vulnerable a 1.0.2 server must: 1) have configured SSLv2 support at compile time (this is off by default), 2) have configured SSLv2 support at runtime (this is off by default), 3) have configured SSLv2 ciphersuites (these are not in the default ciphersuite list) OpenSSL 1.1.1 does not have SSLv2 support and therefore is not vulnerable to this issue. The underlying error is in the implementation of the RSA_padding_check_SSLv23() function. This also affects the RSA_SSLV23_PADDING padding mode used by various other functions. Although 1.1.1 does not support SSLv2 the RSA_padding_check_SSLv23() function still exists, as does the RSA_SSLV23_PADDING padding mode. Applications that directly call that function or use that padding mode will encounter this issue. However since there is no support for the SSLv2 protocol in 1.1.1 this is considered a bug and not a security issue in that version. OpenSSL 1.0.2 is out of support and no longer receiving public updates. Premium support customers of OpenSSL 1.0.2 should upgrade to 1.0.2y. Other users should upgrade to 1.1.1j. Fixed in OpenSSL 1.0.2y (Affected 1.0.2s-1.0.2x).',
-              'diffID':        'sha256:0a2d800493738e3bf1ae4cec4e0382d37d8b7064185c452e6d7dda4ab5eb7ead',
-              'fixedVersions': [
-                '1.1.1j-r0'
-              ],
-              'installedVersion': '1.1.1d-r0',
-              'packageName':      'libcrypto1.1',
-              'purl':             'pkg:apk/alpine/libcrypto1.1@1.1.1d-r0?arch=s390x&distro=3.10.3',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-23839',
-                'https://cert-portal.siemens.com/productcert/pdf/ssa-637483.pdf',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=30919ab80a478f2d81f2e9acdcca3fa4740cd547',
-                'https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA44846',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-23839',
-                'https://security.netapp.com/advisory/ntap-20210219-0009/',
-                'https://security.netapp.com/advisory/ntap-20240621-0006/',
-                'https://www.cve.org/CVERecord?id=CVE-2021-23839',
-                'https://www.openssl.org/news/secadv/20210216.txt',
-                'https://www.oracle.com//security-alerts/cpujul2021.html',
-                'https://www.oracle.com/security-alerts/cpuApr2021.html',
-                'https://www.oracle.com/security-alerts/cpuapr2022.html',
-                'https://www.oracle.com/security-alerts/cpuoct2021.html'
-              ],
-              'severity':   'LOW',
-              'suppressed': false,
-              'title':      'openssl: incorrect SSLv2 rollback protection'
-            },
-            {
-              'cve':  'CVE-2020-1967',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'nvd': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-476'
-              ],
-              'description':   'Server or client applications that call the SSL_check_chain() function during or after a TLS 1.3 handshake may crash due to a NULL pointer dereference as a result of incorrect handling of the "signature_algorithms_cert" TLS extension. The crash occurs if an invalid or unrecognised signature algorithm is received from the peer. This could be exploited by a malicious peer in a Denial of Service attack. OpenSSL version 1.1.1d, 1.1.1e, and 1.1.1f are affected by this issue. This issue did not affect OpenSSL versions prior to 1.1.1d. Fixed in OpenSSL 1.1.1g (Affected 1.1.1d-1.1.1f).',
-              'diffID':        'sha256:0a2d800493738e3bf1ae4cec4e0382d37d8b7064185c452e6d7dda4ab5eb7ead',
-              'fixedVersions': [
-                '1.1.1g-r0'
-              ],
-              'installedVersion': '1.1.1d-r0',
-              'packageName':      'libssl1.1',
-              'purl':             'pkg:apk/alpine/libssl1.1@1.1.1d-r0?arch=s390x&distro=3.10.3',
-              'references':       [
-                'http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00004.html',
-                'http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00011.html',
-                'http://packetstormsecurity.com/files/157527/OpenSSL-signature_algorithms_cert-Denial-Of-Service.html',
-                'http://seclists.org/fulldisclosure/2020/May/5',
-                'http://www.openwall.com/lists/oss-security/2020/04/22/2',
-                'https://access.redhat.com/security/cve/CVE-2020-1967',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=eb563247aef3e83dda7679c43f9649270462e5b1',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=eb563247aef3e83dda7679c43f9649270462e5b1',
-                'https://github.com/irsl/CVE-2020-1967',
-                'https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA44440',
-                'https://lists.apache.org/thread.html/r66ea9c436da150683432db5fbc8beb8ae01886c6459ac30c2cea7345%40%3Cdev.tomcat.apache.org%3E',
-                'https://lists.apache.org/thread.html/r66ea9c436da150683432db5fbc8beb8ae01886c6459ac30c2cea7345@%3Cdev.tomcat.apache.org%3E',
-                'https://lists.apache.org/thread.html/r94d6ac3f010a38fccf4f432b12180a13fa1cf303559bd805648c9064%40%3Cdev.tomcat.apache.org%3E',
-                'https://lists.apache.org/thread.html/r94d6ac3f010a38fccf4f432b12180a13fa1cf303559bd805648c9064@%3Cdev.tomcat.apache.org%3E',
-                'https://lists.apache.org/thread.html/r9a41e304992ce6aec6585a87842b4f2e692604f5c892c37e3b0587ee%40%3Cdev.tomcat.apache.org%3E',
-                'https://lists.apache.org/thread.html/r9a41e304992ce6aec6585a87842b4f2e692604f5c892c37e3b0587ee@%3Cdev.tomcat.apache.org%3E',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DDHOAATPWJCXRNFMJ2SASDBBNU5RJONY/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/EXDDAOWSAIEFQNBHWYE6PPYFV4QXGMCD/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/XVEP3LAK4JSPRXFO4QF4GG2IVXADV3SO/',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/DDHOAATPWJCXRNFMJ2SASDBBNU5RJONY',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/EXDDAOWSAIEFQNBHWYE6PPYFV4QXGMCD',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/XVEP3LAK4JSPRXFO4QF4GG2IVXADV3SO',
-                'https://nvd.nist.gov/vuln/detail/CVE-2020-1967',
-                'https://rustsec.org/advisories/RUSTSEC-2020-0015.html',
-                'https://security.FreeBSD.org/advisories/FreeBSD-SA-20:11.openssl.asc',
-                'https://security.gentoo.org/glsa/202004-10',
-                'https://security.netapp.com/advisory/ntap-20200424-0003',
-                'https://security.netapp.com/advisory/ntap-20200424-0003/',
-                'https://security.netapp.com/advisory/ntap-20200717-0004',
-                'https://security.netapp.com/advisory/ntap-20200717-0004/',
-                'https://www.cve.org/CVERecord?id=CVE-2020-1967',
-                'https://www.debian.org/security/2020/dsa-4661',
-                'https://www.openssl.org/news/secadv/20200421.txt',
-                'https://www.oracle.com//security-alerts/cpujul2021.html',
-                'https://www.oracle.com/security-alerts/cpuApr2021.html',
-                'https://www.oracle.com/security-alerts/cpujan2021.html',
-                'https://www.oracle.com/security-alerts/cpujul2020.html',
-                'https://www.oracle.com/security-alerts/cpuoct2020.html',
-                'https://www.oracle.com/security-alerts/cpuoct2021.html',
-                'https://www.synology.com/security/advisory/Synology_SA_20_05',
-                'https://www.synology.com/security/advisory/Synology_SA_20_05_OpenSSL',
-                'https://www.tenable.com/security/tns-2020-03',
-                'https://www.tenable.com/security/tns-2020-04',
-                'https://www.tenable.com/security/tns-2020-11',
-                'https://www.tenable.com/security/tns-2021-10'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: Segmentation fault in SSL_check_chain causes denial of service'
-            },
-            {
-              'cve':  'CVE-2021-23840',
-              'cvss': {
-                'bitnami': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'ghsa': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'nvd': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-190'
-              ],
-              'description':   'Calls to EVP_CipherUpdate, EVP_EncryptUpdate and EVP_DecryptUpdate may overflow the output length argument in some cases where the input length is close to the maximum permissable length for an integer on the platform. In such cases the return value from the function call will be 1 (indicating success), but the output length value will be negative. This could cause applications to behave incorrectly or crash. OpenSSL versions 1.1.1i and below are affected by this issue. Users of these versions should upgrade to OpenSSL 1.1.1j. OpenSSL versions 1.0.2x and below are affected by this issue. However OpenSSL 1.0.2 is out of support and no longer receiving public updates. Premium support customers of OpenSSL 1.0.2 should upgrade to 1.0.2y. Other users should upgrade to 1.1.1j. Fixed in OpenSSL 1.1.1j (Affected 1.1.1-1.1.1i). Fixed in OpenSSL 1.0.2y (Affected 1.0.2-1.0.2x).',
-              'diffID':        'sha256:0a2d800493738e3bf1ae4cec4e0382d37d8b7064185c452e6d7dda4ab5eb7ead',
-              'fixedVersions': [
-                '1.1.1j-r0'
-              ],
-              'installedVersion': '1.1.1d-r0',
-              'packageName':      'libssl1.1',
-              'purl':             'pkg:apk/alpine/libssl1.1@1.1.1d-r0?arch=s390x&distro=3.10.3',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-23840',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=1908036',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=1930310',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=1930324',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=1934534',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=1934600',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=1939637',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=1940085',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=1965362',
-                'https://cert-portal.siemens.com/productcert/pdf/ssa-389290.pdf',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-23840',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-23841',
-                'https://errata.rockylinux.org/RLSA-2021:4424',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=6a51b9e1d0cf0bf8515f7201b68fb0a3482b3dc1',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=9b1129239f3ebb1d1c98ce9ed41d5c9476c47cb2',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=6a51b9e1d0cf0bf8515f7201b68fb0a3482b3dc1',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=9b1129239f3ebb1d1c98ce9ed41d5c9476c47cb2',
-                'https://github.com/alexcrichton/openssl-src-rs',
-                'https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA44846',
-                'https://kc.mcafee.com/corporate/index?page=content&id=SB10366',
-                'https://linux.oracle.com/cve/CVE-2021-23840.html',
-                'https://linux.oracle.com/errata/ELSA-2021-9561.html',
-                'https://lists.apache.org/thread.html/r58af02e294bd07f487e2c64ffc0a29b837db5600e33b6e698b9d696b%40%3Cissues.bookkeeper.apache.org%3E',
-                'https://lists.apache.org/thread.html/r58af02e294bd07f487e2c64ffc0a29b837db5600e33b6e698b9d696b@%3Cissues.bookkeeper.apache.org%3E',
-                'https://lists.apache.org/thread.html/rf4c02775860db415b4955778a131c2795223f61cb8c6a450893651e4%40%3Cissues.bookkeeper.apache.org%3E',
-                'https://lists.apache.org/thread.html/rf4c02775860db415b4955778a131c2795223f61cb8c6a450893651e4@%3Cissues.bookkeeper.apache.org%3E',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-23840',
-                'https://rustsec.org/advisories/RUSTSEC-2021-0057.html',
-                'https://security.gentoo.org/glsa/202103-03',
-                'https://security.netapp.com/advisory/ntap-20210219-0009',
-                'https://security.netapp.com/advisory/ntap-20210219-0009/',
-                'https://security.netapp.com/advisory/ntap-20240621-0006/',
-                'https://ubuntu.com/security/notices/USN-4738-1',
-                'https://ubuntu.com/security/notices/USN-5088-1',
-                'https://ubuntu.com/security/notices/USN-7018-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-23840',
-                'https://www.debian.org/security/2021/dsa-4855',
-                'https://www.openssl.org/news/secadv/20210216.txt',
-                'https://www.oracle.com//security-alerts/cpujul2021.html',
-                'https://www.oracle.com/security-alerts/cpuApr2021.html',
-                'https://www.oracle.com/security-alerts/cpuapr2022.html',
-                'https://www.oracle.com/security-alerts/cpujan2022.html',
-                'https://www.oracle.com/security-alerts/cpuoct2021.html',
-                'https://www.tenable.com/security/tns-2021-03',
-                'https://www.tenable.com/security/tns-2021-09',
-                'https://www.tenable.com/security/tns-2021-10'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: integer overflow in CipherUpdate'
-            },
-            {
-              'cve':  'CVE-2021-3450',
-              'cvss': {
-                'bitnami': {
-                  'v3score':  '7.4',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N'
-                },
-                'ghsa': {
-                  'v3score':  '7.4',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N'
-                },
-                'nvd': {
-                  'v3score':  '7.4',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N'
-                },
-                'redhat': {
-                  'v3score':  '7.4',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-295'
-              ],
-              'description':   'The X509_V_FLAG_X509_STRICT flag enables additional security checks of the certificates present in a certificate chain. It is not set by default. Starting from OpenSSL version 1.1.1h a check to disallow certificates in the chain that have explicitly encoded elliptic curve parameters was added as an additional strict check. An error in the implementation of this check meant that the result of a previous check to confirm that certificates in the chain are valid CA certificates was overwritten. This effectively bypasses the check that non-CA certificates must not be able to issue other certificates. If a "purpose" has been configured then there is a subsequent opportunity for checks that the certificate is a valid CA. All of the named "purpose" values implemented in libcrypto perform this check. Therefore, where a purpose is set the certificate chain will still be rejected even when the strict flag has been used. A purpose is set by default in libssl client and server certificate verification routines, but it can be overridden or removed by an application. In order to be affected, an application must explicitly set the X509_V_FLAG_X509_STRICT verification flag and either not set a purpose for the certificate verification or, in the case of TLS client or server applications, override the default purpose. OpenSSL versions 1.1.1h and newer are affected by this issue. Users of these versions should upgrade to OpenSSL 1.1.1k. OpenSSL 1.0.2 is not impacted by this issue. Fixed in OpenSSL 1.1.1k (Affected 1.1.1h-1.1.1j).',
-              'diffID':        'sha256:0a2d800493738e3bf1ae4cec4e0382d37d8b7064185c452e6d7dda4ab5eb7ead',
-              'fixedVersions': [
-                '1.1.1k-r0'
-              ],
-              'installedVersion': '1.1.1d-r0',
-              'packageName':      'libssl1.1',
-              'purl':             'pkg:apk/alpine/libssl1.1@1.1.1d-r0?arch=s390x&distro=3.10.3',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2021/03/27/1',
-                'http://www.openwall.com/lists/oss-security/2021/03/27/2',
-                'http://www.openwall.com/lists/oss-security/2021/03/28/3',
-                'http://www.openwall.com/lists/oss-security/2021/03/28/4',
-                'https://access.redhat.com/security/cve/CVE-2021-3450',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=1941547',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=1941554',
-                'https://cert-portal.siemens.com/productcert/pdf/ssa-389290.pdf',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-3449',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-3450',
-                'https://errata.rockylinux.org/RLSA-2021:1024',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=2a40b7bc7b94dd7de897a74571e7024f0cf0d63b',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=2a40b7bc7b94dd7de897a74571e7024f0cf0d63b',
-                'https://github.com/alexcrichton/openssl-src-rs',
-                'https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA44845',
-                'https://kc.mcafee.com/corporate/index?page=content&id=SB10356',
-                'https://linux.oracle.com/cve/CVE-2021-3450.html',
-                'https://linux.oracle.com/errata/ELSA-2021-9151.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CCBFLLVQVILIVGZMBJL3IXZGKWQISYNP/',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/CCBFLLVQVILIVGZMBJL3IXZGKWQISYNP',
-                'https://mta.openssl.org/pipermail/openssl-announce/2021-March/000198.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-3450',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2021-0013',
-                'https://rustsec.org/advisories/RUSTSEC-2021-0056.html',
-                'https://security.FreeBSD.org/advisories/FreeBSD-SA-21:07.openssl.asc',
-                'https://security.gentoo.org/glsa/202103-03',
-                'https://security.netapp.com/advisory/ntap-20210326-0006',
-                'https://security.netapp.com/advisory/ntap-20210326-0006/',
-                'https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-openssl-2021-GHY28dJd',
-                'https://www.cve.org/CVERecord?id=CVE-2021-3450',
-                'https://www.openssl.org/news/secadv/20210325.txt',
-                'https://www.oracle.com//security-alerts/cpujul2021.html',
-                'https://www.oracle.com/security-alerts/cpuApr2021.html',
-                'https://www.oracle.com/security-alerts/cpuapr2022.html',
-                'https://www.oracle.com/security-alerts/cpujul2022.html',
-                'https://www.oracle.com/security-alerts/cpuoct2021.html',
-                'https://www.tenable.com/security/tns-2021-05',
-                'https://www.tenable.com/security/tns-2021-08',
-                'https://www.tenable.com/security/tns-2021-09'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: CA certificate check bypass with X509_V_FLAG_X509_STRICT'
-            },
-            {
-              'cve':  'CVE-2019-1551',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N'
-                },
-                'redhat': {
-                  'v3score':  '4.8',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-190'
-              ],
-              'description':   'There is an overflow bug in the x64_64 Montgomery squaring procedure used in exponentiation with 512-bit moduli. No EC algorithms are affected. Analysis suggests that attacks against 2-prime RSA1024, 3-prime RSA1536, and DSA1024 as a result of this defect would be very difficult to perform and are not believed likely. Attacks against DH512 are considered just feasible. However, for an attack the target would have to re-use the DH512 private key, which is not recommended anyway. Also applications directly using the low level API BN_mod_exp may be affected if they use BN_FLG_CONSTTIME. Fixed in OpenSSL 1.1.1e (Affected 1.1.1-1.1.1d). Fixed in OpenSSL 1.0.2u (Affected 1.0.2-1.0.2t).',
-              'diffID':        'sha256:0a2d800493738e3bf1ae4cec4e0382d37d8b7064185c452e6d7dda4ab5eb7ead',
-              'fixedVersions': [
-                '1.1.1d-r2'
-              ],
-              'installedVersion': '1.1.1d-r0',
-              'packageName':      'libssl1.1',
-              'purl':             'pkg:apk/alpine/libssl1.1@1.1.1d-r0?arch=s390x&distro=3.10.3',
-              'references':       [
-                'http://lists.opensuse.org/opensuse-security-announce/2020-01/msg00030.html',
-                'http://packetstormsecurity.com/files/155754/Slackware-Security-Advisory-openssl-Updates.html',
-                'https://access.redhat.com/security/cve/CVE-2019-1551',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=419102400a2811582a7a3d4a4e317d72e5ce0a8f',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=f1c5eea8a817075d31e43f5876993c6710238c98',
-                'https://github.com/openssl/openssl/pull/10575',
-                'https://linux.oracle.com/cve/CVE-2019-1551.html',
-                'https://linux.oracle.com/errata/ELSA-2020-4514.html',
-                'https://lists.debian.org/debian-lts-announce/2022/03/msg00023.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DDHOAATPWJCXRNFMJ2SASDBBNU5RJONY/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/EXDDAOWSAIEFQNBHWYE6PPYFV4QXGMCD/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/XVEP3LAK4JSPRXFO4QF4GG2IVXADV3SO/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2019-1551',
-                'https://seclists.org/bugtraq/2019/Dec/39',
-                'https://seclists.org/bugtraq/2019/Dec/46',
-                'https://security.gentoo.org/glsa/202004-10',
-                'https://security.netapp.com/advisory/ntap-20191210-0001/',
-                'https://ubuntu.com/security/notices/USN-4376-1',
-                'https://ubuntu.com/security/notices/USN-4504-1',
-                'https://usn.ubuntu.com/4376-1/',
-                'https://usn.ubuntu.com/4504-1/',
-                'https://www.cve.org/CVERecord?id=CVE-2019-1551',
-                'https://www.debian.org/security/2019/dsa-4594',
-                'https://www.debian.org/security/2021/dsa-4855',
-                'https://www.openssl.org/news/secadv/20191206.txt',
-                'https://www.oracle.com/security-alerts/cpuApr2021.html',
-                'https://www.oracle.com/security-alerts/cpujan2021.html',
-                'https://www.oracle.com/security-alerts/cpujul2020.html',
-                'https://www.tenable.com/security/tns-2019-09',
-                'https://www.tenable.com/security/tns-2020-03',
-                'https://www.tenable.com/security/tns-2020-11',
-                'https://www.tenable.com/security/tns-2021-10'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: Integer overflow in RSAZ modular exponentiation on x86_64'
-            },
-            {
-              'cve':  'CVE-2020-1971',
-              'cvss': {
-                'bitnami': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'nvd': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-476'
-              ],
-              'description':   "The X.509 GeneralName type is a generic type for representing different types of names. One of those name types is known as EDIPartyName. OpenSSL provides a function GENERAL_NAME_cmp which compares different instances of a GENERAL_NAME to see if they are equal or not. This function behaves incorrectly when both GENERAL_NAMEs contain an EDIPARTYNAME. A NULL pointer dereference and a crash may occur leading to a possible denial of service attack. OpenSSL itself uses the GENERAL_NAME_cmp function for two purposes: 1) Comparing CRL distribution point names between an available CRL and a CRL distribution point embedded in an X509 certificate 2) When verifying that a timestamp response token signer matches the timestamp authority name (exposed via the API functions TS_RESP_verify_response and TS_RESP_verify_token) If an attacker can control both items being compared then that attacker could trigger a crash. For example if the attacker can trick a client or server into checking a malicious certificate against a malicious CRL then this may occur. Note that some applications automatically download CRLs based on a URL embedded in a certificate. This checking happens prior to the signatures on the certificate and CRL being verified. OpenSSL's s_server, s_client and verify tools have support for the \"-crl_download\" option which implements automatic CRL downloading and this attack has been demonstrated to work against those tools. Note that an unrelated bug means that affected versions of OpenSSL cannot parse or construct correct encodings of EDIPARTYNAME. However it is possible to construct a malformed EDIPARTYNAME that OpenSSL's parser will accept and hence trigger this attack. All OpenSSL 1.1.1 and 1.0.2 versions are affected by this issue. Other OpenSSL releases are out of support and have not been checked. Fixed in OpenSSL 1.1.1i (Affected 1.1.1-1.1.1h). Fixed in OpenSSL 1.0.2x (Affected 1.0.2-1.0.2w).",
-              'diffID':        'sha256:0a2d800493738e3bf1ae4cec4e0382d37d8b7064185c452e6d7dda4ab5eb7ead',
-              'fixedVersions': [
-                '1.1.1i-r0'
-              ],
-              'installedVersion': '1.1.1d-r0',
-              'packageName':      'libssl1.1',
-              'purl':             'pkg:apk/alpine/libssl1.1@1.1.1d-r0?arch=s390x&distro=3.10.3',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2021/09/14/2',
-                'https://access.redhat.com/security/cve/CVE-2020-1971',
-                'https://cert-portal.siemens.com/productcert/pdf/ssa-389290.pdf',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=2154ab83e14ede338d2ede9bbe5cdfce5d5a6c9e',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=f960d81215ebf3f65e03d4d5d857fb9b666d6920',
-                'https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA44676',
-                'https://linux.oracle.com/cve/CVE-2020-1971.html',
-                'https://linux.oracle.com/errata/ELSA-2021-9150.html',
-                'https://lists.apache.org/thread.html/r63c6f2dd363d9b514d0a4bcf624580616a679898cc14c109a49b750c%40%3Cdev.tomcat.apache.org%3E',
-                'https://lists.apache.org/thread.html/rbb769f771711fb274e0a4acb1b5911c8aab544a6ac5e8c12d40c5143%40%3Ccommits.pulsar.apache.org%3E',
-                'https://lists.debian.org/debian-lts-announce/2020/12/msg00020.html',
-                'https://lists.debian.org/debian-lts-announce/2020/12/msg00021.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DGSI34Y5LQ5RYXN4M2I5ZQT65LFVDOUU/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PWPSSZNZOBJU2YR6Z4TGHXKYW3YP5QG7/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2020-1971',
-                'https://security.FreeBSD.org/advisories/FreeBSD-SA-20:33.openssl.asc',
-                'https://security.gentoo.org/glsa/202012-13',
-                'https://security.netapp.com/advisory/ntap-20201218-0005/',
-                'https://security.netapp.com/advisory/ntap-20210513-0002/',
-                'https://security.netapp.com/advisory/ntap-20240621-0006/',
-                'https://ubuntu.com/security/notices/USN-4662-1',
-                'https://ubuntu.com/security/notices/USN-4745-1',
-                'https://www.cve.org/CVERecord?id=CVE-2020-1971',
-                'https://www.debian.org/security/2020/dsa-4807',
-                'https://www.openssl.org/news/secadv/20201208.txt',
-                'https://www.oracle.com//security-alerts/cpujul2021.html',
-                'https://www.oracle.com/security-alerts/cpuApr2021.html',
-                'https://www.oracle.com/security-alerts/cpuapr2022.html',
-                'https://www.oracle.com/security-alerts/cpujan2021.html',
-                'https://www.oracle.com/security-alerts/cpuoct2021.html',
-                'https://www.tenable.com/security/tns-2020-11',
-                'https://www.tenable.com/security/tns-2021-09',
-                'https://www.tenable.com/security/tns-2021-10'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: EDIPARTYNAME NULL pointer de-reference'
-            },
-            {
-              'cve':  'CVE-2021-23841',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'nvd': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-476'
-              ],
-              'description':   'The OpenSSL public API function X509_issuer_and_serial_hash() attempts to create a unique hash value based on the issuer and serial number data contained within an X509 certificate. However it fails to correctly handle any errors that may occur while parsing the issuer field (which might occur if the issuer field is maliciously constructed). This may subsequently result in a NULL pointer deref and a crash leading to a potential denial of service attack. The function X509_issuer_and_serial_hash() is never directly called by OpenSSL itself so applications are only vulnerable if they use this function directly and they use it on certificates that may have been obtained from untrusted sources. OpenSSL versions 1.1.1i and below are affected by this issue. Users of these versions should upgrade to OpenSSL 1.1.1j. OpenSSL versions 1.0.2x and below are affected by this issue. However OpenSSL 1.0.2 is out of support and no longer receiving public updates. Premium support customers of OpenSSL 1.0.2 should upgrade to 1.0.2y. Other users should upgrade to 1.1.1j. Fixed in OpenSSL 1.1.1j (Affected 1.1.1-1.1.1i). Fixed in OpenSSL 1.0.2y (Affected 1.0.2-1.0.2x).',
-              'diffID':        'sha256:0a2d800493738e3bf1ae4cec4e0382d37d8b7064185c452e6d7dda4ab5eb7ead',
-              'fixedVersions': [
-                '1.1.1j-r0'
-              ],
-              'installedVersion': '1.1.1d-r0',
-              'packageName':      'libssl1.1',
-              'purl':             'pkg:apk/alpine/libssl1.1@1.1.1d-r0?arch=s390x&distro=3.10.3',
-              'references':       [
-                'http://seclists.org/fulldisclosure/2021/May/67',
-                'http://seclists.org/fulldisclosure/2021/May/68',
-                'http://seclists.org/fulldisclosure/2021/May/70',
-                'https://access.redhat.com/security/cve/CVE-2021-23841',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=1908036',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=1930310',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=1930324',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=1934534',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=1934600',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=1939637',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=1940085',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=1965362',
-                'https://cert-portal.siemens.com/productcert/pdf/ssa-637483.pdf',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-23840',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-23841',
-                'https://errata.rockylinux.org/RLSA-2021:4424',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=122a19ab48091c657f7cb1fb3af9fc07bd557bbf',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=8252ee4d90f3f2004d3d0aeeed003ad49c9a7807',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=122a19ab48091c657f7cb1fb3af9fc07bd557bbf',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=6a51b9e1d0cf0bf8515f7201b68fb0a3482b3dc1',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=8252ee4d90f3f2004d3d0aeeed003ad49c9a7807',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=9b1129239f3ebb1d1c98ce9ed41d5c9476c47cb2',
-                'https://github.com/alexcrichton/openssl-src-rs',
-                'https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA44846',
-                'https://linux.oracle.com/cve/CVE-2021-23841.html',
-                'https://linux.oracle.com/errata/ELSA-2021-9561.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-23841',
-                'https://rustsec.org/advisories/RUSTSEC-2021-0058',
-                'https://rustsec.org/advisories/RUSTSEC-2021-0058.html',
-                'https://security.gentoo.org/glsa/202103-03',
-                'https://security.netapp.com/advisory/ntap-20210219-0009',
-                'https://security.netapp.com/advisory/ntap-20210219-0009/',
-                'https://security.netapp.com/advisory/ntap-20210513-0002',
-                'https://security.netapp.com/advisory/ntap-20210513-0002/',
-                'https://security.netapp.com/advisory/ntap-20240621-0006/',
-                'https://support.apple.com/kb/HT212528',
-                'https://support.apple.com/kb/HT212529',
-                'https://support.apple.com/kb/HT212534',
-                'https://ubuntu.com/security/notices/USN-4738-1',
-                'https://ubuntu.com/security/notices/USN-4745-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-23841',
-                'https://www.debian.org/security/2021/dsa-4855',
-                'https://www.openssl.org/news/secadv/20210216.txt',
-                'https://www.oracle.com//security-alerts/cpujul2021.html',
-                'https://www.oracle.com/security-alerts/cpuApr2021.html',
-                'https://www.oracle.com/security-alerts/cpuapr2022.html',
-                'https://www.oracle.com/security-alerts/cpuoct2021.html',
-                'https://www.tenable.com/security/tns-2021-03',
-                'https://www.tenable.com/security/tns-2021-09'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: NULL pointer dereference in X509_issuer_and_serial_hash()'
-            },
-            {
-              'cve':  'CVE-2021-3449',
-              'cvss': {
-                'bitnami': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'ghsa': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'nvd': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-476'
-              ],
-              'description':   'An OpenSSL TLS server may crash if sent a maliciously crafted renegotiation ClientHello message from a client. If a TLSv1.2 renegotiation ClientHello omits the signature_algorithms extension (where it was present in the initial ClientHello), but includes a signature_algorithms_cert extension then a NULL pointer dereference will result, leading to a crash and a denial of service attack. A server is only vulnerable if it has TLSv1.2 and renegotiation enabled (which is the default configuration). OpenSSL TLS clients are not impacted by this issue. All OpenSSL 1.1.1 versions are affected by this issue. Users of these versions should upgrade to OpenSSL 1.1.1k. OpenSSL 1.0.2 is not impacted by this issue. Fixed in OpenSSL 1.1.1k (Affected 1.1.1-1.1.1j).',
-              'diffID':        'sha256:0a2d800493738e3bf1ae4cec4e0382d37d8b7064185c452e6d7dda4ab5eb7ead',
-              'fixedVersions': [
-                '1.1.1k-r0'
-              ],
-              'installedVersion': '1.1.1d-r0',
-              'packageName':      'libssl1.1',
-              'purl':             'pkg:apk/alpine/libssl1.1@1.1.1d-r0?arch=s390x&distro=3.10.3',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2021/03/27/1',
-                'http://www.openwall.com/lists/oss-security/2021/03/27/2',
-                'http://www.openwall.com/lists/oss-security/2021/03/28/3',
-                'http://www.openwall.com/lists/oss-security/2021/03/28/4',
-                'https://access.redhat.com/security/cve/CVE-2021-3449',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=1941547',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=1941554',
-                'https://cert-portal.siemens.com/productcert/pdf/ssa-389290.pdf',
-                'https://cert-portal.siemens.com/productcert/pdf/ssa-772220.pdf',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-3449',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-3450',
-                'https://errata.rockylinux.org/RLSA-2021:1024',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=fb9fa6b51defd48157eeb207f52181f735d96148',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=fb9fa6b51defd48157eeb207f52181f735d96148',
-                'https://github.com/alexcrichton/openssl-src-rs',
-                'https://github.com/nodejs/node/pull/38083',
-                'https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA44845',
-                'https://kc.mcafee.com/corporate/index?page=content&id=SB10356',
-                'https://linux.oracle.com/cve/CVE-2021-3449.html',
-                'https://linux.oracle.com/errata/ELSA-2021-9151.html',
-                'https://lists.debian.org/debian-lts-announce/2021/08/msg00029.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CCBFLLVQVILIVGZMBJL3IXZGKWQISYNP/',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/CCBFLLVQVILIVGZMBJL3IXZGKWQISYNP',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-3449',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2021-0013',
-                'https://rustsec.org/advisories/RUSTSEC-2021-0055',
-                'https://rustsec.org/advisories/RUSTSEC-2021-0055.html',
-                'https://security.FreeBSD.org/advisories/FreeBSD-SA-21:07.openssl.asc',
-                'https://security.gentoo.org/glsa/202103-03',
-                'https://security.netapp.com/advisory/ntap-20210326-0006',
-                'https://security.netapp.com/advisory/ntap-20210326-0006/',
-                'https://security.netapp.com/advisory/ntap-20210513-0002',
-                'https://security.netapp.com/advisory/ntap-20210513-0002/',
-                'https://security.netapp.com/advisory/ntap-20240621-0006/',
-                'https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-openssl-2021-GHY28dJd',
-                'https://ubuntu.com/security/notices/USN-4891-1',
-                'https://ubuntu.com/security/notices/USN-5038-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-3449',
-                'https://www.debian.org/security/2021/dsa-4875',
-                'https://www.openssl.org/news/secadv/20210325.txt',
-                'https://www.oracle.com//security-alerts/cpujul2021.html',
-                'https://www.oracle.com/security-alerts/cpuApr2021.html',
-                'https://www.oracle.com/security-alerts/cpuapr2022.html',
-                'https://www.oracle.com/security-alerts/cpujul2022.html',
-                'https://www.oracle.com/security-alerts/cpuoct2021.html',
-                'https://www.tenable.com/security/tns-2021-05',
-                'https://www.tenable.com/security/tns-2021-06',
-                'https://www.tenable.com/security/tns-2021-09',
-                'https://www.tenable.com/security/tns-2021-10'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: NULL pointer dereference in signature_algorithms processing'
-            },
-            {
-              'cve':  'CVE-2021-23839',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '3.7',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N'
-                },
-                'redhat': {
-                  'v3score':  '3.7',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-327'
-              ],
-              'description':   'OpenSSL 1.0.2 supports SSLv2. If a client attempts to negotiate SSLv2 with a server that is configured to support both SSLv2 and more recent SSL and TLS versions then a check is made for a version rollback attack when unpadding an RSA signature. Clients that support SSL or TLS versions greater than SSLv2 are supposed to use a special form of padding. A server that supports greater than SSLv2 is supposed to reject connection attempts from a client where this special form of padding is present, because this indicates that a version rollback has occurred (i.e. both client and server support greater than SSLv2, and yet this is the version that is being requested). The implementation of this padding check inverted the logic so that the connection attempt is accepted if the padding is present, and rejected if it is absent. This means that such as server will accept a connection if a version rollback attack has occurred. Further the server will erroneously reject a connection if a normal SSLv2 connection attempt is made. Only OpenSSL 1.0.2 servers from version 1.0.2s to 1.0.2x are affected by this issue. In order to be vulnerable a 1.0.2 server must: 1) have configured SSLv2 support at compile time (this is off by default), 2) have configured SSLv2 support at runtime (this is off by default), 3) have configured SSLv2 ciphersuites (these are not in the default ciphersuite list) OpenSSL 1.1.1 does not have SSLv2 support and therefore is not vulnerable to this issue. The underlying error is in the implementation of the RSA_padding_check_SSLv23() function. This also affects the RSA_SSLV23_PADDING padding mode used by various other functions. Although 1.1.1 does not support SSLv2 the RSA_padding_check_SSLv23() function still exists, as does the RSA_SSLV23_PADDING padding mode. Applications that directly call that function or use that padding mode will encounter this issue. However since there is no support for the SSLv2 protocol in 1.1.1 this is considered a bug and not a security issue in that version. OpenSSL 1.0.2 is out of support and no longer receiving public updates. Premium support customers of OpenSSL 1.0.2 should upgrade to 1.0.2y. Other users should upgrade to 1.1.1j. Fixed in OpenSSL 1.0.2y (Affected 1.0.2s-1.0.2x).',
-              'diffID':        'sha256:0a2d800493738e3bf1ae4cec4e0382d37d8b7064185c452e6d7dda4ab5eb7ead',
-              'fixedVersions': [
-                '1.1.1j-r0'
-              ],
-              'installedVersion': '1.1.1d-r0',
-              'packageName':      'libssl1.1',
-              'purl':             'pkg:apk/alpine/libssl1.1@1.1.1d-r0?arch=s390x&distro=3.10.3',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-23839',
-                'https://cert-portal.siemens.com/productcert/pdf/ssa-637483.pdf',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=30919ab80a478f2d81f2e9acdcca3fa4740cd547',
-                'https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA44846',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-23839',
-                'https://security.netapp.com/advisory/ntap-20210219-0009/',
-                'https://security.netapp.com/advisory/ntap-20240621-0006/',
-                'https://www.cve.org/CVERecord?id=CVE-2021-23839',
-                'https://www.openssl.org/news/secadv/20210216.txt',
-                'https://www.oracle.com//security-alerts/cpujul2021.html',
-                'https://www.oracle.com/security-alerts/cpuApr2021.html',
-                'https://www.oracle.com/security-alerts/cpuapr2022.html',
-                'https://www.oracle.com/security-alerts/cpuoct2021.html'
-              ],
-              'severity':   'LOW',
-              'suppressed': false,
-              'title':      'openssl: incorrect SSLv2 rollback protection'
-            },
-            {
-              'cve':  'CVE-2020-28928',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.5',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-787'
-              ],
-              'description':   'In musl libc through 1.2.1, wcsnrtombs mishandles particular combinations of destination buffer size and source character limit, as demonstrated by an invalid write access (buffer overflow).',
-              'diffID':        'sha256:0a2d800493738e3bf1ae4cec4e0382d37d8b7064185c452e6d7dda4ab5eb7ead',
-              'fixedVersions': [
-                '1.1.22-r4'
-              ],
-              'installedVersion': '1.1.22-r3',
-              'packageName':      'musl',
-              'purl':             'pkg:apk/alpine/musl@1.1.22-r3?arch=s390x&distro=3.10.3',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2020/11/20/4',
-                'https://lists.apache.org/thread.html/r2134abfe847bea7795f0e53756d10a47e6643f35ab8169df8b8a9eb1%40%3Cnotifications.apisix.apache.org%3E',
-                'https://lists.apache.org/thread.html/r90b60cf49348e515257b4950900c1bd3ab95a960cf2469d919c7264e%40%3Cnotifications.apisix.apache.org%3E',
-                'https://lists.apache.org/thread.html/ra63e8dc5137d952afc55dbbfa63be83304ecf842d1eab1ff3ebb29e2%40%3Cnotifications.apisix.apache.org%3E',
-                'https://lists.debian.org/debian-lts-announce/2020/11/msg00050.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LKQ3RVSMVZNZNO4D65W2CZZ4DMYFZN2Q/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UW27QVY7ERPTSGKS4KAWE5TU7EJWHKVQ/',
-                'https://musl.libc.org/releases.html',
-                'https://ubuntu.com/security/notices/USN-5990-1',
-                'https://www.cve.org/CVERecord?id=CVE-2020-28928',
-                'https://www.openwall.com/lists/oss-security/2020/11/20/4',
-                'https://www.oracle.com//security-alerts/cpujul2021.html',
-                'https://www.oracle.com/security-alerts/cpuoct2021.html'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'In musl libc through 1.2.1, wcsnrtombs mishandles particular combinati ...'
-            },
-            {
-              'cve':  'CVE-2020-28928',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.5',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-787'
-              ],
-              'description':   'In musl libc through 1.2.1, wcsnrtombs mishandles particular combinations of destination buffer size and source character limit, as demonstrated by an invalid write access (buffer overflow).',
-              'diffID':        'sha256:0a2d800493738e3bf1ae4cec4e0382d37d8b7064185c452e6d7dda4ab5eb7ead',
-              'fixedVersions': [
-                '1.1.22-r4'
-              ],
-              'installedVersion': '1.1.22-r3',
-              'packageName':      'musl-utils',
-              'purl':             'pkg:apk/alpine/musl-utils@1.1.22-r3?arch=s390x&distro=3.10.3',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2020/11/20/4',
-                'https://lists.apache.org/thread.html/r2134abfe847bea7795f0e53756d10a47e6643f35ab8169df8b8a9eb1%40%3Cnotifications.apisix.apache.org%3E',
-                'https://lists.apache.org/thread.html/r90b60cf49348e515257b4950900c1bd3ab95a960cf2469d919c7264e%40%3Cnotifications.apisix.apache.org%3E',
-                'https://lists.apache.org/thread.html/ra63e8dc5137d952afc55dbbfa63be83304ecf842d1eab1ff3ebb29e2%40%3Cnotifications.apisix.apache.org%3E',
-                'https://lists.debian.org/debian-lts-announce/2020/11/msg00050.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LKQ3RVSMVZNZNO4D65W2CZZ4DMYFZN2Q/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UW27QVY7ERPTSGKS4KAWE5TU7EJWHKVQ/',
-                'https://musl.libc.org/releases.html',
-                'https://ubuntu.com/security/notices/USN-5990-1',
-                'https://www.cve.org/CVERecord?id=CVE-2020-28928',
-                'https://www.openwall.com/lists/oss-security/2020/11/20/4',
-                'https://www.oracle.com//security-alerts/cpujul2021.html',
-                'https://www.oracle.com/security-alerts/cpuoct2021.html'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'In musl libc through 1.2.1, wcsnrtombs mishandles particular combinati ...'
-            },
-            {
-              'cve':  'CVE-2021-28831',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-755'
-              ],
-              'description':   'decompress_gunzip.c in BusyBox through 1.32.1 mishandles the error bit on the huft_build result pointer, with a resultant invalid free or segmentation fault, via malformed gzip data.',
-              'diffID':        'sha256:0a2d800493738e3bf1ae4cec4e0382d37d8b7064185c452e6d7dda4ab5eb7ead',
-              'fixedVersions': [
-                '1.30.1-r5'
-              ],
-              'installedVersion': '1.30.1-r2',
-              'packageName':      'ssl_client',
-              'purl':             'pkg:apk/alpine/ssl_client@1.30.1-r2?arch=s390x&distro=3.10.3',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-28831',
-                'https://git.busybox.net/busybox/commit/?id=f25d254dfd4243698c31a4f3153d4ac72aa9e9bd',
-                'https://lists.debian.org/debian-lts-announce/2021/04/msg00001.html',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/3UDQGJRECXFS5EZVDH2OI45FMO436AC4/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/Z7ZIFKPRR32ZYA3WAA2NXFA3QHHOU6FJ/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZASBW7QRRLY5V2R44MQ4QQM4CZIDHM2U/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-28831',
-                'https://security.gentoo.org/glsa/202105-09',
-                'https://security.netapp.com/advisory/ntap-20250509-0005/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://ubuntu.com/security/notices/USN-5179-2',
-                'https://ubuntu.com/security/notices/USN-6335-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-28831'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: invalid free or segmentation fault via malformed gzip data'
-            }
-          ]
-        }
-      ],
-      'summary': {
-        'critical':   1,
-        'high':       9,
-        'low':        2,
-        'medium':     10,
-        'suppressed': 0,
-        'unknown':    0
-      }
-    }
-  },
-  {
-    'id':    'default/81d52e12a37cbecc4b3f281ba3f408db085e010c4968544bef42e4fc03a6dbb9',
-    'type':  'storage.sbomscanner.kubewarden.io.vulnerabilityreport',
-    'links': {
-      'patch':  'https://localhost:8005/v1/storage.sbomscanner.kubewarden.io.vulnerabilityreports/default/81d52e12a37cbecc4b3f281ba3f408db085e010c4968544bef42e4fc03a6dbb9',
-      'remove': 'https://localhost:8005/v1/storage.sbomscanner.kubewarden.io.vulnerabilityreports/default/81d52e12a37cbecc4b3f281ba3f408db085e010c4968544bef42e4fc03a6dbb9',
-      'self':   'https://localhost:8005/v1/storage.sbomscanner.kubewarden.io.vulnerabilityreports/default/81d52e12a37cbecc4b3f281ba3f408db085e010c4968544bef42e4fc03a6dbb9',
-      'update': 'https://localhost:8005/v1/storage.sbomscanner.kubewarden.io.vulnerabilityreports/default/81d52e12a37cbecc4b3f281ba3f408db085e010c4968544bef42e4fc03a6dbb9',
-      'view':   'https://localhost:8005/apis/storage.sbomscanner.kubewarden.io/v1alpha1/namespaces/default/vulnerabilityreports/81d52e12a37cbecc4b3f281ba3f408db085e010c4968544bef42e4fc03a6dbb9'
-    },
-    'apiVersion':    'storage.sbomscanner.kubewarden.io/v1alpha1',
-    'imageMetadata': {
-      'digest':      'sha256:e15947432b813e8ffa90165da919953e2ce850bef511a0ad1287d7cb86de84b5',
-      'platform':    'linux/amd64',
-      'registry':    'lsong-demo1',
-      'registryURI': 'registry-1.docker.io',
-      'repository':  'library/alpine',
-      'tag':         '3.13.6'
-    },
-    'kind':     'VulnerabilityReport',
-    'metadata': {
-      'creationTimestamp': '2026-01-14T18:52:04Z',
-      'fields':            [
-        '81d52e12a37cbecc4b3f281ba3f408db085e010c4968544bef42e4fc03a6dbb9',
-        'registry-1.docker.io/library/alpine:3.13.6',
-        'linux/amd64',
-        '32 (0 suppressed)'
-      ],
-      'labels': {
-        'app.kubernetes.io/managed-by':          'sbomscanner',
-        'app.kubernetes.io/part-of':             'sbomscanner',
-        'sbomscanner.kubewarden.io/scanjob-uid': '445c600a-c4b6-40b3-bd71-f2d2140a37d5'
-      },
-      'name':            '81d52e12a37cbecc4b3f281ba3f408db085e010c4968544bef42e4fc03a6dbb9',
-      'namespace':       'default',
-      'ownerReferences': [
-        {
-          'apiVersion':         'storage.sbomscanner.kubewarden.io/v1alpha1',
-          'blockOwnerDeletion': true,
-          'controller':         true,
-          'kind':               'SBOM',
-          'name':               '81d52e12a37cbecc4b3f281ba3f408db085e010c4968544bef42e4fc03a6dbb9',
-          'uid':                '980b4834-a106-430c-9bd9-30cd9a8dd2e2'
-        }
-      ],
-      'relationships': [
-        {
-          'fromId':   'default/81d52e12a37cbecc4b3f281ba3f408db085e010c4968544bef42e4fc03a6dbb9',
-          'fromType': 'storage.sbomscanner.kubewarden.io.sbom',
-          'rel':      'owner',
-          'state':    'active',
-          'message':  'Resource is current'
-        }
-      ],
-      'resourceVersion': '1',
-      'state':           {
-        'error':         false,
-        'message':       'Resource is current',
-        'name':          'active',
-        'transitioning': false
-      },
-      'uid': 'd02eccec-9de7-4a50-b2dc-2a60c5066d70'
-    },
-    'report': {
-      'results': [
-        {
-          'class':           'os-pkgs',
-          'target':          '/var/run/worker/trivy.sbom.1342586281.json (alpine 3.13.6)',
-          'type':            'alpine',
-          'vulnerabilities': [
-            {
-              'cve':  'CVE-2021-42378',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the getvar_i function",
-              'diffID':        'sha256:f1dd685eb59e7d19dd353b02c4679d9fafd21ccffe1f51960e6c3645f3ceb0cd',
-              'fixedVersions': [
-                '1.32.1-r7'
-              ],
-              'installedVersion': '1.32.1-r6',
-              'packageName':      'busybox',
-              'purl':             'pkg:apk/alpine/busybox@1.32.1-r6?arch=x86_64&distro=3.13.6',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42378',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42378',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42378'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the getvar_i()'
-            },
-            {
-              'cve':  'CVE-2021-42379',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the next_input_file function",
-              'diffID':        'sha256:f1dd685eb59e7d19dd353b02c4679d9fafd21ccffe1f51960e6c3645f3ceb0cd',
-              'fixedVersions': [
-                '1.32.1-r7'
-              ],
-              'installedVersion': '1.32.1-r6',
-              'packageName':      'busybox',
-              'purl':             'pkg:apk/alpine/busybox@1.32.1-r6?arch=x86_64&distro=3.13.6',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42379',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42379',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42379'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the next_input_file()'
-            },
-            {
-              'cve':  'CVE-2021-42380',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the clrvar function",
-              'diffID':        'sha256:f1dd685eb59e7d19dd353b02c4679d9fafd21ccffe1f51960e6c3645f3ceb0cd',
-              'fixedVersions': [
-                '1.32.1-r7'
-              ],
-              'installedVersion': '1.32.1-r6',
-              'packageName':      'busybox',
-              'purl':             'pkg:apk/alpine/busybox@1.32.1-r6?arch=x86_64&distro=3.13.6',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42380',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42380',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42380'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the clrvar()'
-            },
-            {
-              'cve':  'CVE-2021-42381',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the hash_init function",
-              'diffID':        'sha256:f1dd685eb59e7d19dd353b02c4679d9fafd21ccffe1f51960e6c3645f3ceb0cd',
-              'fixedVersions': [
-                '1.32.1-r7'
-              ],
-              'installedVersion': '1.32.1-r6',
-              'packageName':      'busybox',
-              'purl':             'pkg:apk/alpine/busybox@1.32.1-r6?arch=x86_64&distro=3.13.6',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42381',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42381',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42381'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the hash_init()'
-            },
-            {
-              'cve':  'CVE-2021-42382',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the getvar_s function",
-              'diffID':        'sha256:f1dd685eb59e7d19dd353b02c4679d9fafd21ccffe1f51960e6c3645f3ceb0cd',
-              'fixedVersions': [
-                '1.32.1-r7'
-              ],
-              'installedVersion': '1.32.1-r6',
-              'packageName':      'busybox',
-              'purl':             'pkg:apk/alpine/busybox@1.32.1-r6?arch=x86_64&distro=3.13.6',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42382',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42382',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42382'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the getvar_s()'
-            },
-            {
-              'cve':  'CVE-2021-42383',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the evaluate function",
-              'diffID':        'sha256:f1dd685eb59e7d19dd353b02c4679d9fafd21ccffe1f51960e6c3645f3ceb0cd',
-              'fixedVersions': [
-                '1.32.1-r7'
-              ],
-              'installedVersion': '1.32.1-r6',
-              'packageName':      'busybox',
-              'purl':             'pkg:apk/alpine/busybox@1.32.1-r6?arch=x86_64&distro=3.13.6',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42383',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42383',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42383'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the evaluate()'
-            },
-            {
-              'cve':  'CVE-2021-42384',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the handle_special function",
-              'diffID':        'sha256:f1dd685eb59e7d19dd353b02c4679d9fafd21ccffe1f51960e6c3645f3ceb0cd',
-              'fixedVersions': [
-                '1.32.1-r7'
-              ],
-              'installedVersion': '1.32.1-r6',
-              'packageName':      'busybox',
-              'purl':             'pkg:apk/alpine/busybox@1.32.1-r6?arch=x86_64&distro=3.13.6',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42384',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42384',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42384'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the handle_special()'
-            },
-            {
-              'cve':  'CVE-2021-42385',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the evaluate function",
-              'diffID':        'sha256:f1dd685eb59e7d19dd353b02c4679d9fafd21ccffe1f51960e6c3645f3ceb0cd',
-              'fixedVersions': [
-                '1.32.1-r7'
-              ],
-              'installedVersion': '1.32.1-r6',
-              'packageName':      'busybox',
-              'purl':             'pkg:apk/alpine/busybox@1.32.1-r6?arch=x86_64&distro=3.13.6',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42385',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42385',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42385'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the evaluate()'
-            },
-            {
-              'cve':  'CVE-2021-42386',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the nvalloc function",
-              'diffID':        'sha256:f1dd685eb59e7d19dd353b02c4679d9fafd21ccffe1f51960e6c3645f3ceb0cd',
-              'fixedVersions': [
-                '1.32.1-r7'
-              ],
-              'installedVersion': '1.32.1-r6',
-              'packageName':      'busybox',
-              'purl':             'pkg:apk/alpine/busybox@1.32.1-r6?arch=x86_64&distro=3.13.6',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42386',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42386',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42386'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the nvalloc()'
-            },
-            {
-              'cve':  'CVE-2022-28391',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '8.8',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-88'
-              ],
-              'description':   "BusyBox through 1.35.0 allows remote attackers to execute arbitrary code if netstat is used to print a DNS PTR record's value to a VT compatible terminal. Alternatively, the attacker could choose to change the terminal's colors.",
-              'diffID':        'sha256:f1dd685eb59e7d19dd353b02c4679d9fafd21ccffe1f51960e6c3645f3ceb0cd',
-              'fixedVersions': [
-                '1.32.1-r8'
-              ],
-              'installedVersion': '1.32.1-r6',
-              'packageName':      'busybox',
-              'purl':             'pkg:apk/alpine/busybox@1.32.1-r6?arch=x86_64&distro=3.13.6',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2022-28391',
-                'https://git.alpinelinux.org/aports/plain/main/busybox/0001-libbb-sockaddr2str-ensure-only-printable-characters-.patch',
-                'https://git.alpinelinux.org/aports/plain/main/busybox/0002-nslookup-sanitize-all-printed-strings-with-printable.patch',
-                'https://gitlab.alpinelinux.org/alpine/aports/-/issues/13661',
-                'https://nvd.nist.gov/vuln/detail/CVE-2022-28391',
-                'https://www.cve.org/CVERecord?id=CVE-2022-28391'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: remote attackers may execute arbitrary code if netstat is used'
-            },
-            {
-              'cve':  'CVE-2022-30065',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.8',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.2',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox 1.35-x's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the copyvar function.",
-              'diffID':        'sha256:f1dd685eb59e7d19dd353b02c4679d9fafd21ccffe1f51960e6c3645f3ceb0cd',
-              'fixedVersions': [
-                '1.32.1-r9'
-              ],
-              'installedVersion': '1.32.1-r6',
-              'packageName':      'busybox',
-              'purl':             'pkg:apk/alpine/busybox@1.32.1-r6?arch=x86_64&distro=3.13.6',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2022-30065',
-                'https://bugs.busybox.net/show_bug.cgi?id=14781',
-                'https://cert-portal.siemens.com/productcert/pdf/ssa-333517.pdf',
-                'https://nvd.nist.gov/vuln/detail/CVE-2022-30065',
-                'https://www.cve.org/CVERecord?id=CVE-2022-30065'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      "busybox: A use-after-free in Busybox's awk applet leads to denial of service"
-            },
-            {
-              'cve':  'CVE-2021-42374',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '5.7',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-125'
-              ],
-              'description':   "An out-of-bounds heap read in Busybox's unlzma applet leads to information leak and denial of service when crafted LZMA-compressed input is decompressed. This can be triggered by any applet/format that",
-              'diffID':        'sha256:f1dd685eb59e7d19dd353b02c4679d9fafd21ccffe1f51960e6c3645f3ceb0cd',
-              'fixedVersions': [
-                '1.32.1-r7'
-              ],
-              'installedVersion': '1.32.1-r6',
-              'packageName':      'busybox',
-              'purl':             'pkg:apk/alpine/busybox@1.32.1-r6?arch=x86_64&distro=3.13.6',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42374',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42374',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42374'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'busybox: out-of-bounds read in unlzma applet leads to information leak and denial of service when crafted LZMA-compressed input is decompressed'
-            },
-            {
-              'cve':  'CVE-2021-42375',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.5',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '4.1',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-159'
-              ],
-              'description':   "An incorrect handling of a special element in Busybox's ash applet leads to denial of service when processing a crafted shell command, due to the shell mistaking specific characters for reserved characters. This may be used for DoS under rare conditions of filtered command input.",
-              'diffID':        'sha256:f1dd685eb59e7d19dd353b02c4679d9fafd21ccffe1f51960e6c3645f3ceb0cd',
-              'fixedVersions': [
-                '1.32.1-r7'
-              ],
-              'installedVersion': '1.32.1-r6',
-              'packageName':      'busybox',
-              'purl':             'pkg:apk/alpine/busybox@1.32.1-r6?arch=x86_64&distro=3.13.6',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42375',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42375',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42375'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'busybox: incorrect handling of a special element in ash applet leads to denial of service when processing a crafted shell command'
-            },
-            {
-              'cve':  'CVE-2022-0778',
-              'cvss': {
-                'bitnami': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'ghsa': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'nvd': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-835'
-              ],
-              'description':   'The BN_mod_sqrt() function, which computes a modular square root, contains a bug that can cause it to loop forever for non-prime moduli. Internally this function is used when parsing certificates that contain elliptic curve public keys in compressed form or explicit elliptic curve parameters with a base point encoded in compressed form. It is possible to trigger the infinite loop by crafting a certificate that has invalid explicit curve parameters. Since certificate parsing happens prior to verification of the certificate signature, any process that parses an externally supplied certificate may thus be subject to a denial of service attack. The infinite loop can also be reached when parsing crafted private keys as they can contain explicit elliptic curve parameters. Thus vulnerable situations include: - TLS clients consuming server certificates - TLS servers consuming client certificates - Hosting providers taking certificates or private keys from customers - Certificate authorities parsing certification requests from subscribers - Anything else which parses ASN.1 elliptic curve parameters Also any other applications that use the BN_mod_sqrt() where the attacker can control the parameter values are vulnerable to this DoS issue. In the OpenSSL 1.0.2 version the public key is not parsed during initial parsing of the certificate which makes it slightly harder to trigger the infinite loop. However any operation which requires the public key from the certificate will trigger the infinite loop. In particular the attacker can use a self-signed certificate to trigger the loop during verification of the certificate signature. This issue affects OpenSSL versions 1.0.2, 1.1.1 and 3.0. It was addressed in the releases of 1.1.1n and 3.0.2 on the 15th March 2022. Fixed in OpenSSL 3.0.2 (Affected 3.0.0,3.0.1). Fixed in OpenSSL 1.1.1n (Affected 1.1.1-1.1.1m). Fixed in OpenSSL 1.0.2zd (Affected 1.0.2-1.0.2zc).',
-              'diffID':        'sha256:f1dd685eb59e7d19dd353b02c4679d9fafd21ccffe1f51960e6c3645f3ceb0cd',
-              'fixedVersions': [
-                '1.1.1n-r0'
-              ],
-              'installedVersion': '1.1.1l-r0',
-              'packageName':      'libcrypto1.1',
-              'purl':             'pkg:apk/alpine/libcrypto1.1@1.1.1l-r0?arch=x86_64&distro=3.13.6',
-              'references':       [
-                'http://packetstormsecurity.com/files/167344/OpenSSL-1.0.2-1.1.1-3.0-BN_mod_sqrt-Infinite-Loop.html',
-                'http://seclists.org/fulldisclosure/2022/May/33',
-                'http://seclists.org/fulldisclosure/2022/May/35',
-                'http://seclists.org/fulldisclosure/2022/May/38',
-                'https://access.redhat.com/errata/RHSA-2022:5326',
-                'https://access.redhat.com/security/cve/CVE-2022-0778',
-                'https://bugzilla.redhat.com/2062202',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2062202',
-                'https://cert-portal.siemens.com/productcert/pdf/ssa-712929.pdf',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-0778',
-                'https://errata.almalinux.org/8/ALSA-2022-5326.html',
-                'https://errata.rockylinux.org/RLSA-2022:4899',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=3118eb64934499d93db3230748a452351d1d9a65',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=380085481c64de749a6dd25cdf0bcf4360b30f83',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=a466912611aa6cbdf550cd10601390e587451246',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=3118eb64934499d93db3230748a452351d1d9a65',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=380085481c64de749a6dd25cdf0bcf4360b30f83',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=a466912611aa6cbdf550cd10601390e587451246',
-                'https://linux.oracle.com/cve/CVE-2022-0778.html',
-                'https://linux.oracle.com/errata/ELSA-2022-9272.html',
-                'https://lists.debian.org/debian-lts-announce/2022/03/msg00023.html',
-                'https://lists.debian.org/debian-lts-announce/2022/03/msg00024.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/323SNN6ZX7PRJJWP2BUAFLPUAE42XWLZ',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/323SNN6ZX7PRJJWP2BUAFLPUAE42XWLZ/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GDB3GQVJPXJE7X5C5JN6JAA4XUDWD6E6',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GDB3GQVJPXJE7X5C5JN6JAA4XUDWD6E6/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/W6K3PR542DXWLEFFMFIDMME4CWMHJRMG',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/W6K3PR542DXWLEFFMFIDMME4CWMHJRMG/',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/323SNN6ZX7PRJJWP2BUAFLPUAE42XWLZ',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/GDB3GQVJPXJE7X5C5JN6JAA4XUDWD6E6',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/W6K3PR542DXWLEFFMFIDMME4CWMHJRMG',
-                'https://nvd.nist.gov/vuln/detail/CVE-2022-0778',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2022-0002',
-                'https://rustsec.org/advisories/RUSTSEC-2022-0014.html',
-                'https://security.gentoo.org/glsa/202210-02',
-                'https://security.netapp.com/advisory/ntap-20220321-0002',
-                'https://security.netapp.com/advisory/ntap-20220321-0002/',
-                'https://security.netapp.com/advisory/ntap-20220429-0005',
-                'https://security.netapp.com/advisory/ntap-20220429-0005/',
-                'https://security.netapp.com/advisory/ntap-20240621-0006',
-                'https://security.netapp.com/advisory/ntap-20240621-0006/',
-                'https://support.apple.com/kb/HT213255',
-                'https://support.apple.com/kb/HT213256',
-                'https://support.apple.com/kb/HT213257',
-                'https://ubuntu.com/security/notices/USN-5328-1',
-                'https://ubuntu.com/security/notices/USN-5328-2',
-                'https://ubuntu.com/security/notices/USN-6457-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2022-0778',
-                'https://www.debian.org/security/2022/dsa-5103',
-                'https://www.openssl.org/news/secadv/20220315.txt',
-                'https://www.oracle.com/security-alerts/cpuapr2022.html',
-                'https://www.oracle.com/security-alerts/cpujul2022.html',
-                'https://www.tenable.com/security/tns-2022-06',
-                'https://www.tenable.com/security/tns-2022-07',
-                'https://www.tenable.com/security/tns-2022-08',
-                'https://www.tenable.com/security/tns-2022-09'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: Infinite loop in BN_mod_sqrt() reachable when parsing certificates'
-            },
-            {
-              'cve':  'CVE-2022-2097',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N'
-                },
-                'nvd': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N'
-                },
-                'redhat': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-327'
-              ],
-              'description':   "AES OCB mode for 32-bit x86 platforms using the AES-NI assembly optimised implementation will not encrypt the entirety of the data under some circumstances. This could reveal sixteen bytes of data that was preexisting in the memory that wasn't written. In the special case of \"in place\" encryption, sixteen bytes of the plaintext would be revealed. Since OpenSSL does not support OCB based cipher suites for TLS and DTLS, they are both unaffected. Fixed in OpenSSL 3.0.5 (Affected 3.0.0-3.0.4). Fixed in OpenSSL 1.1.1q (Affected 1.1.1-1.1.1p).",
-              'diffID':        'sha256:f1dd685eb59e7d19dd353b02c4679d9fafd21ccffe1f51960e6c3645f3ceb0cd',
-              'fixedVersions': [
-                '1.1.1q-r0'
-              ],
-              'installedVersion': '1.1.1l-r0',
-              'packageName':      'libcrypto1.1',
-              'purl':             'pkg:apk/alpine/libcrypto1.1@1.1.1l-r0?arch=x86_64&distro=3.13.6',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2022:6224',
-                'https://access.redhat.com/security/cve/CVE-2022-2097',
-                'https://bugzilla.redhat.com/2081494',
-                'https://bugzilla.redhat.com/2087911',
-                'https://bugzilla.redhat.com/2087913',
-                'https://bugzilla.redhat.com/2097310',
-                'https://bugzilla.redhat.com/2104905',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2081494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2097310',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2100554',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2104905',
-                'https://cert-portal.siemens.com/productcert/pdf/ssa-332410.pdf',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-1292',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-2068',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-2097',
-                'https://errata.almalinux.org/9/ALSA-2022-6224.html',
-                'https://errata.rockylinux.org/RLSA-2022:5818',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=919925673d6c9cfed3c1085497f5dfbbed5fc431',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=a98f339ddd7e8f487d6e0088d4a9a42324885a93',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=919925673d6c9cfed3c1085497f5dfbbed5fc431',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=a98f339ddd7e8f487d6e0088d4a9a42324885a93',
-                'https://github.com/alexcrichton/openssl-src-rs',
-                'https://linux.oracle.com/cve/CVE-2022-2097.html',
-                'https://linux.oracle.com/errata/ELSA-2022-9955.html',
-                'https://lists.debian.org/debian-lts-announce/2023/02/msg00019.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/R6CK57NBQFTPUMXAPJURCGXUYT76NQAK',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/R6CK57NBQFTPUMXAPJURCGXUYT76NQAK/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/V6567JERRHHJW2GNGJGKDRNHR7SNPZK7',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/V6567JERRHHJW2GNGJGKDRNHR7SNPZK7/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VCMNWKERPBKOEBNL7CLTTX3ZZCZLH7XA',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VCMNWKERPBKOEBNL7CLTTX3ZZCZLH7XA/',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/R6CK57NBQFTPUMXAPJURCGXUYT76NQAK',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/R6CK57NBQFTPUMXAPJURCGXUYT76NQAK/',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/V6567JERRHHJW2GNGJGKDRNHR7SNPZK7',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/V6567JERRHHJW2GNGJGKDRNHR7SNPZK7/',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/VCMNWKERPBKOEBNL7CLTTX3ZZCZLH7XA',
-                'https://nvd.nist.gov/vuln/detail/CVE-2022-2097',
-                'https://rustsec.org/advisories/RUSTSEC-2022-0032.html',
-                'https://security.gentoo.org/glsa/202210-02',
-                'https://security.netapp.com/advisory/ntap-20220715-0011',
-                'https://security.netapp.com/advisory/ntap-20220715-0011/',
-                'https://security.netapp.com/advisory/ntap-20230420-0008',
-                'https://security.netapp.com/advisory/ntap-20230420-0008/',
-                'https://security.netapp.com/advisory/ntap-20240621-0006',
-                'https://security.netapp.com/advisory/ntap-20240621-0006/',
-                'https://ubuntu.com/security/notices/USN-5502-1',
-                'https://ubuntu.com/security/notices/USN-6457-1',
-                'https://www.cve.org/CVERecord?id=CVE-2022-2097',
-                'https://www.debian.org/security/2023/dsa-5343',
-                'https://www.openssl.org/news/secadv/20220705.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: AES OCB fails to encrypt some bytes'
-            },
-            {
-              'cve':  'CVE-2022-0778',
-              'cvss': {
-                'bitnami': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'ghsa': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'nvd': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-835'
-              ],
-              'description':   'The BN_mod_sqrt() function, which computes a modular square root, contains a bug that can cause it to loop forever for non-prime moduli. Internally this function is used when parsing certificates that contain elliptic curve public keys in compressed form or explicit elliptic curve parameters with a base point encoded in compressed form. It is possible to trigger the infinite loop by crafting a certificate that has invalid explicit curve parameters. Since certificate parsing happens prior to verification of the certificate signature, any process that parses an externally supplied certificate may thus be subject to a denial of service attack. The infinite loop can also be reached when parsing crafted private keys as they can contain explicit elliptic curve parameters. Thus vulnerable situations include: - TLS clients consuming server certificates - TLS servers consuming client certificates - Hosting providers taking certificates or private keys from customers - Certificate authorities parsing certification requests from subscribers - Anything else which parses ASN.1 elliptic curve parameters Also any other applications that use the BN_mod_sqrt() where the attacker can control the parameter values are vulnerable to this DoS issue. In the OpenSSL 1.0.2 version the public key is not parsed during initial parsing of the certificate which makes it slightly harder to trigger the infinite loop. However any operation which requires the public key from the certificate will trigger the infinite loop. In particular the attacker can use a self-signed certificate to trigger the loop during verification of the certificate signature. This issue affects OpenSSL versions 1.0.2, 1.1.1 and 3.0. It was addressed in the releases of 1.1.1n and 3.0.2 on the 15th March 2022. Fixed in OpenSSL 3.0.2 (Affected 3.0.0,3.0.1). Fixed in OpenSSL 1.1.1n (Affected 1.1.1-1.1.1m). Fixed in OpenSSL 1.0.2zd (Affected 1.0.2-1.0.2zc).',
-              'diffID':        'sha256:f1dd685eb59e7d19dd353b02c4679d9fafd21ccffe1f51960e6c3645f3ceb0cd',
-              'fixedVersions': [
-                '1.1.1n-r0'
-              ],
-              'installedVersion': '1.1.1l-r0',
-              'packageName':      'libssl1.1',
-              'purl':             'pkg:apk/alpine/libssl1.1@1.1.1l-r0?arch=x86_64&distro=3.13.6',
-              'references':       [
-                'http://packetstormsecurity.com/files/167344/OpenSSL-1.0.2-1.1.1-3.0-BN_mod_sqrt-Infinite-Loop.html',
-                'http://seclists.org/fulldisclosure/2022/May/33',
-                'http://seclists.org/fulldisclosure/2022/May/35',
-                'http://seclists.org/fulldisclosure/2022/May/38',
-                'https://access.redhat.com/errata/RHSA-2022:5326',
-                'https://access.redhat.com/security/cve/CVE-2022-0778',
-                'https://bugzilla.redhat.com/2062202',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2062202',
-                'https://cert-portal.siemens.com/productcert/pdf/ssa-712929.pdf',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-0778',
-                'https://errata.almalinux.org/8/ALSA-2022-5326.html',
-                'https://errata.rockylinux.org/RLSA-2022:4899',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=3118eb64934499d93db3230748a452351d1d9a65',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=380085481c64de749a6dd25cdf0bcf4360b30f83',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=a466912611aa6cbdf550cd10601390e587451246',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=3118eb64934499d93db3230748a452351d1d9a65',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=380085481c64de749a6dd25cdf0bcf4360b30f83',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=a466912611aa6cbdf550cd10601390e587451246',
-                'https://linux.oracle.com/cve/CVE-2022-0778.html',
-                'https://linux.oracle.com/errata/ELSA-2022-9272.html',
-                'https://lists.debian.org/debian-lts-announce/2022/03/msg00023.html',
-                'https://lists.debian.org/debian-lts-announce/2022/03/msg00024.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/323SNN6ZX7PRJJWP2BUAFLPUAE42XWLZ',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/323SNN6ZX7PRJJWP2BUAFLPUAE42XWLZ/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GDB3GQVJPXJE7X5C5JN6JAA4XUDWD6E6',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GDB3GQVJPXJE7X5C5JN6JAA4XUDWD6E6/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/W6K3PR542DXWLEFFMFIDMME4CWMHJRMG',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/W6K3PR542DXWLEFFMFIDMME4CWMHJRMG/',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/323SNN6ZX7PRJJWP2BUAFLPUAE42XWLZ',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/GDB3GQVJPXJE7X5C5JN6JAA4XUDWD6E6',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/W6K3PR542DXWLEFFMFIDMME4CWMHJRMG',
-                'https://nvd.nist.gov/vuln/detail/CVE-2022-0778',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2022-0002',
-                'https://rustsec.org/advisories/RUSTSEC-2022-0014.html',
-                'https://security.gentoo.org/glsa/202210-02',
-                'https://security.netapp.com/advisory/ntap-20220321-0002',
-                'https://security.netapp.com/advisory/ntap-20220321-0002/',
-                'https://security.netapp.com/advisory/ntap-20220429-0005',
-                'https://security.netapp.com/advisory/ntap-20220429-0005/',
-                'https://security.netapp.com/advisory/ntap-20240621-0006',
-                'https://security.netapp.com/advisory/ntap-20240621-0006/',
-                'https://support.apple.com/kb/HT213255',
-                'https://support.apple.com/kb/HT213256',
-                'https://support.apple.com/kb/HT213257',
-                'https://ubuntu.com/security/notices/USN-5328-1',
-                'https://ubuntu.com/security/notices/USN-5328-2',
-                'https://ubuntu.com/security/notices/USN-6457-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2022-0778',
-                'https://www.debian.org/security/2022/dsa-5103',
-                'https://www.openssl.org/news/secadv/20220315.txt',
-                'https://www.oracle.com/security-alerts/cpuapr2022.html',
-                'https://www.oracle.com/security-alerts/cpujul2022.html',
-                'https://www.tenable.com/security/tns-2022-06',
-                'https://www.tenable.com/security/tns-2022-07',
-                'https://www.tenable.com/security/tns-2022-08',
-                'https://www.tenable.com/security/tns-2022-09'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: Infinite loop in BN_mod_sqrt() reachable when parsing certificates'
-            },
-            {
-              'cve':  'CVE-2022-2097',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N'
-                },
-                'nvd': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N'
-                },
-                'redhat': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-327'
-              ],
-              'description':   "AES OCB mode for 32-bit x86 platforms using the AES-NI assembly optimised implementation will not encrypt the entirety of the data under some circumstances. This could reveal sixteen bytes of data that was preexisting in the memory that wasn't written. In the special case of \"in place\" encryption, sixteen bytes of the plaintext would be revealed. Since OpenSSL does not support OCB based cipher suites for TLS and DTLS, they are both unaffected. Fixed in OpenSSL 3.0.5 (Affected 3.0.0-3.0.4). Fixed in OpenSSL 1.1.1q (Affected 1.1.1-1.1.1p).",
-              'diffID':        'sha256:f1dd685eb59e7d19dd353b02c4679d9fafd21ccffe1f51960e6c3645f3ceb0cd',
-              'fixedVersions': [
-                '1.1.1q-r0'
-              ],
-              'installedVersion': '1.1.1l-r0',
-              'packageName':      'libssl1.1',
-              'purl':             'pkg:apk/alpine/libssl1.1@1.1.1l-r0?arch=x86_64&distro=3.13.6',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2022:6224',
-                'https://access.redhat.com/security/cve/CVE-2022-2097',
-                'https://bugzilla.redhat.com/2081494',
-                'https://bugzilla.redhat.com/2087911',
-                'https://bugzilla.redhat.com/2087913',
-                'https://bugzilla.redhat.com/2097310',
-                'https://bugzilla.redhat.com/2104905',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2081494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2097310',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2100554',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2104905',
-                'https://cert-portal.siemens.com/productcert/pdf/ssa-332410.pdf',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-1292',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-2068',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-2097',
-                'https://errata.almalinux.org/9/ALSA-2022-6224.html',
-                'https://errata.rockylinux.org/RLSA-2022:5818',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=919925673d6c9cfed3c1085497f5dfbbed5fc431',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=a98f339ddd7e8f487d6e0088d4a9a42324885a93',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=919925673d6c9cfed3c1085497f5dfbbed5fc431',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=a98f339ddd7e8f487d6e0088d4a9a42324885a93',
-                'https://github.com/alexcrichton/openssl-src-rs',
-                'https://linux.oracle.com/cve/CVE-2022-2097.html',
-                'https://linux.oracle.com/errata/ELSA-2022-9955.html',
-                'https://lists.debian.org/debian-lts-announce/2023/02/msg00019.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/R6CK57NBQFTPUMXAPJURCGXUYT76NQAK',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/R6CK57NBQFTPUMXAPJURCGXUYT76NQAK/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/V6567JERRHHJW2GNGJGKDRNHR7SNPZK7',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/V6567JERRHHJW2GNGJGKDRNHR7SNPZK7/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VCMNWKERPBKOEBNL7CLTTX3ZZCZLH7XA',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VCMNWKERPBKOEBNL7CLTTX3ZZCZLH7XA/',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/R6CK57NBQFTPUMXAPJURCGXUYT76NQAK',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/R6CK57NBQFTPUMXAPJURCGXUYT76NQAK/',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/V6567JERRHHJW2GNGJGKDRNHR7SNPZK7',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/V6567JERRHHJW2GNGJGKDRNHR7SNPZK7/',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/VCMNWKERPBKOEBNL7CLTTX3ZZCZLH7XA',
-                'https://nvd.nist.gov/vuln/detail/CVE-2022-2097',
-                'https://rustsec.org/advisories/RUSTSEC-2022-0032.html',
-                'https://security.gentoo.org/glsa/202210-02',
-                'https://security.netapp.com/advisory/ntap-20220715-0011',
-                'https://security.netapp.com/advisory/ntap-20220715-0011/',
-                'https://security.netapp.com/advisory/ntap-20230420-0008',
-                'https://security.netapp.com/advisory/ntap-20230420-0008/',
-                'https://security.netapp.com/advisory/ntap-20240621-0006',
-                'https://security.netapp.com/advisory/ntap-20240621-0006/',
-                'https://ubuntu.com/security/notices/USN-5502-1',
-                'https://ubuntu.com/security/notices/USN-6457-1',
-                'https://www.cve.org/CVERecord?id=CVE-2022-2097',
-                'https://www.debian.org/security/2023/dsa-5343',
-                'https://www.openssl.org/news/secadv/20220705.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: AES OCB fails to encrypt some bytes'
-            },
-            {
-              'cve':  'CVE-2021-42378',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the getvar_i function",
-              'diffID':        'sha256:f1dd685eb59e7d19dd353b02c4679d9fafd21ccffe1f51960e6c3645f3ceb0cd',
-              'fixedVersions': [
-                '1.32.1-r7'
-              ],
-              'installedVersion': '1.32.1-r6',
-              'packageName':      'ssl_client',
-              'purl':             'pkg:apk/alpine/ssl_client@1.32.1-r6?arch=x86_64&distro=3.13.6',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42378',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42378',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42378'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the getvar_i()'
-            },
-            {
-              'cve':  'CVE-2021-42379',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the next_input_file function",
-              'diffID':        'sha256:f1dd685eb59e7d19dd353b02c4679d9fafd21ccffe1f51960e6c3645f3ceb0cd',
-              'fixedVersions': [
-                '1.32.1-r7'
-              ],
-              'installedVersion': '1.32.1-r6',
-              'packageName':      'ssl_client',
-              'purl':             'pkg:apk/alpine/ssl_client@1.32.1-r6?arch=x86_64&distro=3.13.6',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42379',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42379',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42379'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the next_input_file()'
-            },
-            {
-              'cve':  'CVE-2021-42380',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the clrvar function",
-              'diffID':        'sha256:f1dd685eb59e7d19dd353b02c4679d9fafd21ccffe1f51960e6c3645f3ceb0cd',
-              'fixedVersions': [
-                '1.32.1-r7'
-              ],
-              'installedVersion': '1.32.1-r6',
-              'packageName':      'ssl_client',
-              'purl':             'pkg:apk/alpine/ssl_client@1.32.1-r6?arch=x86_64&distro=3.13.6',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42380',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42380',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42380'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the clrvar()'
-            },
-            {
-              'cve':  'CVE-2021-42381',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the hash_init function",
-              'diffID':        'sha256:f1dd685eb59e7d19dd353b02c4679d9fafd21ccffe1f51960e6c3645f3ceb0cd',
-              'fixedVersions': [
-                '1.32.1-r7'
-              ],
-              'installedVersion': '1.32.1-r6',
-              'packageName':      'ssl_client',
-              'purl':             'pkg:apk/alpine/ssl_client@1.32.1-r6?arch=x86_64&distro=3.13.6',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42381',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42381',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42381'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the hash_init()'
-            },
-            {
-              'cve':  'CVE-2021-42382',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the getvar_s function",
-              'diffID':        'sha256:f1dd685eb59e7d19dd353b02c4679d9fafd21ccffe1f51960e6c3645f3ceb0cd',
-              'fixedVersions': [
-                '1.32.1-r7'
-              ],
-              'installedVersion': '1.32.1-r6',
-              'packageName':      'ssl_client',
-              'purl':             'pkg:apk/alpine/ssl_client@1.32.1-r6?arch=x86_64&distro=3.13.6',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42382',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42382',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42382'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the getvar_s()'
-            },
-            {
-              'cve':  'CVE-2021-42383',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the evaluate function",
-              'diffID':        'sha256:f1dd685eb59e7d19dd353b02c4679d9fafd21ccffe1f51960e6c3645f3ceb0cd',
-              'fixedVersions': [
-                '1.32.1-r7'
-              ],
-              'installedVersion': '1.32.1-r6',
-              'packageName':      'ssl_client',
-              'purl':             'pkg:apk/alpine/ssl_client@1.32.1-r6?arch=x86_64&distro=3.13.6',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42383',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42383',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42383'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the evaluate()'
-            },
-            {
-              'cve':  'CVE-2021-42384',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the handle_special function",
-              'diffID':        'sha256:f1dd685eb59e7d19dd353b02c4679d9fafd21ccffe1f51960e6c3645f3ceb0cd',
-              'fixedVersions': [
-                '1.32.1-r7'
-              ],
-              'installedVersion': '1.32.1-r6',
-              'packageName':      'ssl_client',
-              'purl':             'pkg:apk/alpine/ssl_client@1.32.1-r6?arch=x86_64&distro=3.13.6',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42384',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42384',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42384'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the handle_special()'
-            },
-            {
-              'cve':  'CVE-2021-42385',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the evaluate function",
-              'diffID':        'sha256:f1dd685eb59e7d19dd353b02c4679d9fafd21ccffe1f51960e6c3645f3ceb0cd',
-              'fixedVersions': [
-                '1.32.1-r7'
-              ],
-              'installedVersion': '1.32.1-r6',
-              'packageName':      'ssl_client',
-              'purl':             'pkg:apk/alpine/ssl_client@1.32.1-r6?arch=x86_64&distro=3.13.6',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42385',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42385',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42385'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the evaluate()'
-            },
-            {
-              'cve':  'CVE-2021-42386',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the nvalloc function",
-              'diffID':        'sha256:f1dd685eb59e7d19dd353b02c4679d9fafd21ccffe1f51960e6c3645f3ceb0cd',
-              'fixedVersions': [
-                '1.32.1-r7'
-              ],
-              'installedVersion': '1.32.1-r6',
-              'packageName':      'ssl_client',
-              'purl':             'pkg:apk/alpine/ssl_client@1.32.1-r6?arch=x86_64&distro=3.13.6',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42386',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42386',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42386'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the nvalloc()'
-            },
-            {
-              'cve':  'CVE-2022-28391',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '8.8',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-88'
-              ],
-              'description':   "BusyBox through 1.35.0 allows remote attackers to execute arbitrary code if netstat is used to print a DNS PTR record's value to a VT compatible terminal. Alternatively, the attacker could choose to change the terminal's colors.",
-              'diffID':        'sha256:f1dd685eb59e7d19dd353b02c4679d9fafd21ccffe1f51960e6c3645f3ceb0cd',
-              'fixedVersions': [
-                '1.32.1-r8'
-              ],
-              'installedVersion': '1.32.1-r6',
-              'packageName':      'ssl_client',
-              'purl':             'pkg:apk/alpine/ssl_client@1.32.1-r6?arch=x86_64&distro=3.13.6',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2022-28391',
-                'https://git.alpinelinux.org/aports/plain/main/busybox/0001-libbb-sockaddr2str-ensure-only-printable-characters-.patch',
-                'https://git.alpinelinux.org/aports/plain/main/busybox/0002-nslookup-sanitize-all-printed-strings-with-printable.patch',
-                'https://gitlab.alpinelinux.org/alpine/aports/-/issues/13661',
-                'https://nvd.nist.gov/vuln/detail/CVE-2022-28391',
-                'https://www.cve.org/CVERecord?id=CVE-2022-28391'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: remote attackers may execute arbitrary code if netstat is used'
-            },
-            {
-              'cve':  'CVE-2022-30065',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.8',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.2',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox 1.35-x's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the copyvar function.",
-              'diffID':        'sha256:f1dd685eb59e7d19dd353b02c4679d9fafd21ccffe1f51960e6c3645f3ceb0cd',
-              'fixedVersions': [
-                '1.32.1-r9'
-              ],
-              'installedVersion': '1.32.1-r6',
-              'packageName':      'ssl_client',
-              'purl':             'pkg:apk/alpine/ssl_client@1.32.1-r6?arch=x86_64&distro=3.13.6',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2022-30065',
-                'https://bugs.busybox.net/show_bug.cgi?id=14781',
-                'https://cert-portal.siemens.com/productcert/pdf/ssa-333517.pdf',
-                'https://nvd.nist.gov/vuln/detail/CVE-2022-30065',
-                'https://www.cve.org/CVERecord?id=CVE-2022-30065'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      "busybox: A use-after-free in Busybox's awk applet leads to denial of service"
-            },
-            {
-              'cve':  'CVE-2021-42374',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '5.7',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-125'
-              ],
-              'description':   "An out-of-bounds heap read in Busybox's unlzma applet leads to information leak and denial of service when crafted LZMA-compressed input is decompressed. This can be triggered by any applet/format that",
-              'diffID':        'sha256:f1dd685eb59e7d19dd353b02c4679d9fafd21ccffe1f51960e6c3645f3ceb0cd',
-              'fixedVersions': [
-                '1.32.1-r7'
-              ],
-              'installedVersion': '1.32.1-r6',
-              'packageName':      'ssl_client',
-              'purl':             'pkg:apk/alpine/ssl_client@1.32.1-r6?arch=x86_64&distro=3.13.6',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42374',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42374',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42374'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'busybox: out-of-bounds read in unlzma applet leads to information leak and denial of service when crafted LZMA-compressed input is decompressed'
-            },
-            {
-              'cve':  'CVE-2021-42375',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.5',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '4.1',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-159'
-              ],
-              'description':   "An incorrect handling of a special element in Busybox's ash applet leads to denial of service when processing a crafted shell command, due to the shell mistaking specific characters for reserved characters. This may be used for DoS under rare conditions of filtered command input.",
-              'diffID':        'sha256:f1dd685eb59e7d19dd353b02c4679d9fafd21ccffe1f51960e6c3645f3ceb0cd',
-              'fixedVersions': [
-                '1.32.1-r7'
-              ],
-              'installedVersion': '1.32.1-r6',
-              'packageName':      'ssl_client',
-              'purl':             'pkg:apk/alpine/ssl_client@1.32.1-r6?arch=x86_64&distro=3.13.6',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42375',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42375',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42375'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'busybox: incorrect handling of a special element in ash applet leads to denial of service when processing a crafted shell command'
-            },
-            {
-              'cve':  'CVE-2022-37434',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '9.8',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-787',
-                'CWE-120'
-              ],
-              'description':   'zlib through 1.2.12 has a heap-based buffer over-read or buffer overflow in inflate in inflate.c via a large gzip header extra field. NOTE: only applications that call inflateGetHeader are affected. Some common applications bundle the affected zlib source code but may be unable to call inflateGetHeader (e.g., see the nodejs/node reference).',
-              'diffID':        'sha256:f1dd685eb59e7d19dd353b02c4679d9fafd21ccffe1f51960e6c3645f3ceb0cd',
-              'fixedVersions': [
-                '1.2.12-r2'
-              ],
-              'installedVersion': '1.2.11-r3',
-              'packageName':      'zlib',
-              'purl':             'pkg:apk/alpine/zlib@1.2.11-r3?arch=x86_64&distro=3.13.6',
-              'references':       [
-                'http://seclists.org/fulldisclosure/2022/Oct/37',
-                'http://seclists.org/fulldisclosure/2022/Oct/38',
-                'http://seclists.org/fulldisclosure/2022/Oct/41',
-                'http://seclists.org/fulldisclosure/2022/Oct/42',
-                'http://www.openwall.com/lists/oss-security/2022/08/05/2',
-                'http://www.openwall.com/lists/oss-security/2022/08/09/1',
-                'https://access.redhat.com/errata/RHSA-2022:8291',
-                'https://access.redhat.com/security/cve/CVE-2022-37434',
-                'https://bugzilla.redhat.com/2116639',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2053198',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2077431',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2081296',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2116639',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-37434',
-                'https://errata.almalinux.org/9/ALSA-2022-8291.html',
-                'https://errata.rockylinux.org/RLSA-2022:8291',
-                'https://github.com/curl/curl/issues/9271',
-                'https://github.com/ivd38/zlib_overflow',
-                'https://github.com/madler/zlib/blob/21767c654d31d2dccdde4330529775c6c5fd5389/zlib.h#L1062-L1063',
-                'https://github.com/madler/zlib/commit/1eb7682f845ac9e9bf9ae35bbfb3bad5dacbd91d',
-                'https://github.com/madler/zlib/commit/eff308af425b67093bab25f80f1ae950166bece1',
-                'https://github.com/nodejs/node/blob/75b68c6e4db515f76df73af476eccf382bbcb00a/deps/zlib/inflate.c#L762-L764',
-                'https://linux.oracle.com/cve/CVE-2022-37434.html',
-                'https://linux.oracle.com/errata/ELSA-2023-1095.html',
-                'https://lists.debian.org/debian-lts-announce/2022/09/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JWN4VE3JQR4O2SOUS5TXNLANRPMHWV4I/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NMBOJ77A7T7PQCARMDUK75TE6LLESZ3O/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PAVPQNCG3XRLCLNSQRM3KAN5ZFMVXVTY/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/X5U7OTKZSHY2I3ZFJSR2SHFHW72RKGDK/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YRQAI7H4M4RQZ2IWZUEEXECBE5D56BH2/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2022-37434',
-                'https://security.netapp.com/advisory/ntap-20220901-0005/',
-                'https://security.netapp.com/advisory/ntap-20230427-0007/',
-                'https://support.apple.com/kb/HT213488',
-                'https://support.apple.com/kb/HT213489',
-                'https://support.apple.com/kb/HT213490',
-                'https://support.apple.com/kb/HT213491',
-                'https://support.apple.com/kb/HT213493',
-                'https://support.apple.com/kb/HT213494',
-                'https://ubuntu.com/security/notices/USN-5570-1',
-                'https://ubuntu.com/security/notices/USN-5570-2',
-                'https://ubuntu.com/security/notices/USN-5573-1',
-                'https://ubuntu.com/security/notices/USN-6736-1',
-                'https://ubuntu.com/security/notices/USN-6736-2',
-                'https://www.cve.org/CVERecord?id=CVE-2022-37434',
-                'https://www.debian.org/security/2022/dsa-5218'
-              ],
-              'severity':   'CRITICAL',
-              'suppressed': false,
-              'title':      'zlib: heap-based buffer over-read and overflow in inflate() in inflate.c via a large gzip header extra field'
-            },
-            {
-              'cve':  'CVE-2018-25032',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'nvd': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '8.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-787'
-              ],
-              'description':   'zlib before 1.2.12 allows memory corruption when deflating (i.e., when compressing) if the input has many distant matches.',
-              'diffID':        'sha256:f1dd685eb59e7d19dd353b02c4679d9fafd21ccffe1f51960e6c3645f3ceb0cd',
-              'fixedVersions': [
-                '1.2.12-r0'
-              ],
-              'installedVersion': '1.2.11-r3',
-              'packageName':      'zlib',
-              'purl':             'pkg:apk/alpine/zlib@1.2.11-r3?arch=x86_64&distro=3.13.6',
-              'references':       [
-                'http://seclists.org/fulldisclosure/2022/May/33',
-                'http://seclists.org/fulldisclosure/2022/May/35',
-                'http://seclists.org/fulldisclosure/2022/May/38',
-                'http://www.openwall.com/lists/oss-security/2022/03/25/2',
-                'http://www.openwall.com/lists/oss-security/2022/03/26/1',
-                'https://access.redhat.com/errata/RHSA-2022:8420',
-                'https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-25032.json',
-                'https://access.redhat.com/security/cve/CVE-2018-25032',
-                'https://bugzilla.redhat.com/2067945',
-                'https://cert-portal.siemens.com/productcert/pdf/ssa-333517.pdf',
-                'https://errata.almalinux.org/9/ALSA-2022-8420.html',
-                'https://github.com/advisories/GHSA-jc36-42cf-vqwj',
-                'https://github.com/madler/zlib/commit/5c44459c3b28a9bd3283aaceab7c615f8020c531',
-                'https://github.com/madler/zlib/compare/v1.2.11...v1.2.12',
-                'https://github.com/madler/zlib/issues/605',
-                'https://github.com/rubysec/ruby-advisory-db/blob/master/gems/nokogiri/CVE-2018-25032.yml',
-                'https://github.com/sparklemotion/nokogiri/releases/tag/v1.13.4',
-                'https://github.com/sparklemotion/nokogiri/security/advisories/GHSA-v6gp-9mmm-c6p5',
-                'https://groups.google.com/g/ruby-security-ann/c/vX7qSjsvWis/m/TJWN4oOKBwAJ',
-                'https://linux.oracle.com/cve/CVE-2018-25032.html',
-                'https://linux.oracle.com/errata/ELSA-2022-9565.html',
-                'https://lists.debian.org/debian-lts-announce/2022/04/msg00000.html',
-                'https://lists.debian.org/debian-lts-announce/2022/05/msg00008.html',
-                'https://lists.debian.org/debian-lts-announce/2022/09/msg00023.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DCZFIJBJTZ7CL5QXBFKTQ22Q26VINRUF/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DF62MVMH3QUGMBDCB3DY2ERQ6EBHTADB/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JZZPTWRYQULAOL3AW7RZJNVZ2UONXCV4/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NS2D2GFPFGOJUL4WQ3DUAY7HF4VWQ77F/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VOKNP2L734AEL47NRYGVZIKEFOUBQY5Y/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/XOKFMSNQ5D5WGMALBNBXU3GE442V74WU/',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/DCZFIJBJTZ7CL5QXBFKTQ22Q26VINRUF',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/DCZFIJBJTZ7CL5QXBFKTQ22Q26VINRUF/',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/DF62MVMH3QUGMBDCB3DY2ERQ6EBHTADB',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/DF62MVMH3QUGMBDCB3DY2ERQ6EBHTADB/',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/JZZPTWRYQULAOL3AW7RZJNVZ2UONXCV4',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/JZZPTWRYQULAOL3AW7RZJNVZ2UONXCV4/',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/NS2D2GFPFGOJUL4WQ3DUAY7HF4VWQ77F',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/NS2D2GFPFGOJUL4WQ3DUAY7HF4VWQ77F/',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/VOKNP2L734AEL47NRYGVZIKEFOUBQY5Y',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/VOKNP2L734AEL47NRYGVZIKEFOUBQY5Y/',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/XOKFMSNQ5D5WGMALBNBXU3GE442V74WU',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/XOKFMSNQ5D5WGMALBNBXU3GE442V74WU/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2018-25032',
-                'https://security.gentoo.org/glsa/202210-42',
-                'https://security.netapp.com/advisory/ntap-20220526-0009',
-                'https://security.netapp.com/advisory/ntap-20220526-0009/',
-                'https://security.netapp.com/advisory/ntap-20220729-0004',
-                'https://security.netapp.com/advisory/ntap-20220729-0004/',
-                'https://support.apple.com/kb/HT213255',
-                'https://support.apple.com/kb/HT213256',
-                'https://support.apple.com/kb/HT213257',
-                'https://ubuntu.com/security/notices/USN-5355-1',
-                'https://ubuntu.com/security/notices/USN-5355-2',
-                'https://ubuntu.com/security/notices/USN-5359-1',
-                'https://ubuntu.com/security/notices/USN-5359-2',
-                'https://ubuntu.com/security/notices/USN-5739-1',
-                'https://ubuntu.com/security/notices/USN-6736-1',
-                'https://ubuntu.com/security/notices/USN-6736-2',
-                'https://www.cve.org/CVERecord?id=CVE-2018-25032',
-                'https://www.debian.org/security/2022/dsa-5111',
-                'https://www.openwall.com/lists/oss-security/2022/03/24/1',
-                'https://www.openwall.com/lists/oss-security/2022/03/28/1',
-                'https://www.openwall.com/lists/oss-security/2022/03/28/3',
-                'https://www.oracle.com/security-alerts/cpujul2022.html'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'zlib: A flaw found in zlib when compressing (not decompressing) certain inputs'
-            }
-          ]
-        }
-      ],
-      'summary': {
-        'critical':   1,
-        'high':       25,
-        'low':        0,
-        'medium':     6,
-        'suppressed': 0,
-        'unknown':    0
-      }
-    }
-  },
-  {
-    'id':    'default/8a267a9453080a0f8d7fc30be89b861aa83bfbddd764f2f90e46a3d0df45f1c0',
-    'type':  'storage.sbomscanner.kubewarden.io.vulnerabilityreport',
-    'links': {
-      'patch':  'https://localhost:8005/v1/storage.sbomscanner.kubewarden.io.vulnerabilityreports/default/8a267a9453080a0f8d7fc30be89b861aa83bfbddd764f2f90e46a3d0df45f1c0',
-      'remove': 'https://localhost:8005/v1/storage.sbomscanner.kubewarden.io.vulnerabilityreports/default/8a267a9453080a0f8d7fc30be89b861aa83bfbddd764f2f90e46a3d0df45f1c0',
-      'self':   'https://localhost:8005/v1/storage.sbomscanner.kubewarden.io.vulnerabilityreports/default/8a267a9453080a0f8d7fc30be89b861aa83bfbddd764f2f90e46a3d0df45f1c0',
-      'update': 'https://localhost:8005/v1/storage.sbomscanner.kubewarden.io.vulnerabilityreports/default/8a267a9453080a0f8d7fc30be89b861aa83bfbddd764f2f90e46a3d0df45f1c0',
-      'view':   'https://localhost:8005/apis/storage.sbomscanner.kubewarden.io/v1alpha1/namespaces/default/vulnerabilityreports/8a267a9453080a0f8d7fc30be89b861aa83bfbddd764f2f90e46a3d0df45f1c0'
-    },
-    'apiVersion':    'storage.sbomscanner.kubewarden.io/v1alpha1',
-    'imageMetadata': {
-      'digest':      'sha256:e12ff876f0075740ed3d7bdf788107ae84c1b3dd6dc98b3baea41088aba5236f',
-      'platform':    'linux/arm/v7',
-      'registry':    'lsong-demo1',
-      'registryURI': 'registry-1.docker.io',
-      'repository':  'library/alpine',
-      'tag':         '3.14.2'
-    },
-    'kind':     'VulnerabilityReport',
-    'metadata': {
-      'creationTimestamp': '2026-01-14T15:47:29Z',
-      'fields':            [
-        '8a267a9453080a0f8d7fc30be89b861aa83bfbddd764f2f90e46a3d0df45f1c0',
-        'registry-1.docker.io/library/alpine:3.14.2',
-        'linux/arm/v7',
-        '43 (0 suppressed)'
-      ],
-      'labels': {
-        'app.kubernetes.io/managed-by':          'sbomscanner',
-        'app.kubernetes.io/part-of':             'sbomscanner',
-        'sbomscanner.kubewarden.io/scanjob-uid': '445c600a-c4b6-40b3-bd71-f2d2140a37d5'
-      },
-      'name':            '8a267a9453080a0f8d7fc30be89b861aa83bfbddd764f2f90e46a3d0df45f1c0',
-      'namespace':       'default',
-      'ownerReferences': [
-        {
-          'apiVersion':         'storage.sbomscanner.kubewarden.io/v1alpha1',
-          'blockOwnerDeletion': true,
-          'controller':         true,
-          'kind':               'SBOM',
-          'name':               '8a267a9453080a0f8d7fc30be89b861aa83bfbddd764f2f90e46a3d0df45f1c0',
-          'uid':                '17b4c056-3ac9-41a6-b99a-4410c90aff1e'
-        }
-      ],
-      'relationships': [
-        {
-          'fromId':   'default/8a267a9453080a0f8d7fc30be89b861aa83bfbddd764f2f90e46a3d0df45f1c0',
-          'fromType': 'storage.sbomscanner.kubewarden.io.sbom',
-          'rel':      'owner',
-          'state':    'active',
-          'message':  'Resource is current'
-        }
-      ],
-      'resourceVersion': '2',
-      'state':           {
-        'error':         false,
-        'message':       'Resource is current',
-        'name':          'active',
-        'transitioning': false
-      },
-      'uid': '0b253f9c-ed62-48e5-9a17-0e1529d8691c'
-    },
-    'report': {
-      'results': [
-        {
-          'class':           'os-pkgs',
-          'target':          '/var/run/worker/trivy.sbom.3561428361.json (alpine 3.14.2)',
-          'type':            'alpine',
-          'vulnerabilities': [
-            {
-              'cve':  'CVE-2021-42378',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the getvar_i function",
-              'diffID':        'sha256:485f8c9dc046cf00979700893b6a61591141a45fd7740b7b8ece1ab7ca4df9a7',
-              'fixedVersions': [
-                '1.33.1-r6'
-              ],
-              'installedVersion': '1.33.1-r3',
-              'packageName':      'busybox',
-              'purl':             'pkg:apk/alpine/busybox@1.33.1-r3?arch=armv7&distro=3.14.2',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42378',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42378',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42378'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the getvar_i()'
-            },
-            {
-              'cve':  'CVE-2021-42379',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the next_input_file function",
-              'diffID':        'sha256:485f8c9dc046cf00979700893b6a61591141a45fd7740b7b8ece1ab7ca4df9a7',
-              'fixedVersions': [
-                '1.33.1-r6'
-              ],
-              'installedVersion': '1.33.1-r3',
-              'packageName':      'busybox',
-              'purl':             'pkg:apk/alpine/busybox@1.33.1-r3?arch=armv7&distro=3.14.2',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42379',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42379',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42379'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the next_input_file()'
-            },
-            {
-              'cve':  'CVE-2021-42380',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the clrvar function",
-              'diffID':        'sha256:485f8c9dc046cf00979700893b6a61591141a45fd7740b7b8ece1ab7ca4df9a7',
-              'fixedVersions': [
-                '1.33.1-r6'
-              ],
-              'installedVersion': '1.33.1-r3',
-              'packageName':      'busybox',
-              'purl':             'pkg:apk/alpine/busybox@1.33.1-r3?arch=armv7&distro=3.14.2',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42380',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42380',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42380'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the clrvar()'
-            },
-            {
-              'cve':  'CVE-2021-42381',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the hash_init function",
-              'diffID':        'sha256:485f8c9dc046cf00979700893b6a61591141a45fd7740b7b8ece1ab7ca4df9a7',
-              'fixedVersions': [
-                '1.33.1-r6'
-              ],
-              'installedVersion': '1.33.1-r3',
-              'packageName':      'busybox',
-              'purl':             'pkg:apk/alpine/busybox@1.33.1-r3?arch=armv7&distro=3.14.2',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42381',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42381',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42381'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the hash_init()'
-            },
-            {
-              'cve':  'CVE-2021-42382',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the getvar_s function",
-              'diffID':        'sha256:485f8c9dc046cf00979700893b6a61591141a45fd7740b7b8ece1ab7ca4df9a7',
-              'fixedVersions': [
-                '1.33.1-r6'
-              ],
-              'installedVersion': '1.33.1-r3',
-              'packageName':      'busybox',
-              'purl':             'pkg:apk/alpine/busybox@1.33.1-r3?arch=armv7&distro=3.14.2',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42382',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42382',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42382'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the getvar_s()'
-            },
-            {
-              'cve':  'CVE-2021-42383',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the evaluate function",
-              'diffID':        'sha256:485f8c9dc046cf00979700893b6a61591141a45fd7740b7b8ece1ab7ca4df9a7',
-              'fixedVersions': [
-                '1.33.1-r6'
-              ],
-              'installedVersion': '1.33.1-r3',
-              'packageName':      'busybox',
-              'purl':             'pkg:apk/alpine/busybox@1.33.1-r3?arch=armv7&distro=3.14.2',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42383',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42383',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42383'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the evaluate()'
-            },
-            {
-              'cve':  'CVE-2021-42384',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the handle_special function",
-              'diffID':        'sha256:485f8c9dc046cf00979700893b6a61591141a45fd7740b7b8ece1ab7ca4df9a7',
-              'fixedVersions': [
-                '1.33.1-r6'
-              ],
-              'installedVersion': '1.33.1-r3',
-              'packageName':      'busybox',
-              'purl':             'pkg:apk/alpine/busybox@1.33.1-r3?arch=armv7&distro=3.14.2',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42384',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42384',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42384'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the handle_special()'
-            },
-            {
-              'cve':  'CVE-2021-42385',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the evaluate function",
-              'diffID':        'sha256:485f8c9dc046cf00979700893b6a61591141a45fd7740b7b8ece1ab7ca4df9a7',
-              'fixedVersions': [
-                '1.33.1-r6'
-              ],
-              'installedVersion': '1.33.1-r3',
-              'packageName':      'busybox',
-              'purl':             'pkg:apk/alpine/busybox@1.33.1-r3?arch=armv7&distro=3.14.2',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42385',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42385',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42385'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the evaluate()'
-            },
-            {
-              'cve':  'CVE-2021-42386',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the nvalloc function",
-              'diffID':        'sha256:485f8c9dc046cf00979700893b6a61591141a45fd7740b7b8ece1ab7ca4df9a7',
-              'fixedVersions': [
-                '1.33.1-r6'
-              ],
-              'installedVersion': '1.33.1-r3',
-              'packageName':      'busybox',
-              'purl':             'pkg:apk/alpine/busybox@1.33.1-r3?arch=armv7&distro=3.14.2',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42386',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42386',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42386'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the nvalloc()'
-            },
-            {
-              'cve':  'CVE-2022-28391',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '8.8',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-88'
-              ],
-              'description':   "BusyBox through 1.35.0 allows remote attackers to execute arbitrary code if netstat is used to print a DNS PTR record's value to a VT compatible terminal. Alternatively, the attacker could choose to change the terminal's colors.",
-              'diffID':        'sha256:485f8c9dc046cf00979700893b6a61591141a45fd7740b7b8ece1ab7ca4df9a7',
-              'fixedVersions': [
-                '1.33.1-r7'
-              ],
-              'installedVersion': '1.33.1-r3',
-              'packageName':      'busybox',
-              'purl':             'pkg:apk/alpine/busybox@1.33.1-r3?arch=armv7&distro=3.14.2',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2022-28391',
-                'https://git.alpinelinux.org/aports/plain/main/busybox/0001-libbb-sockaddr2str-ensure-only-printable-characters-.patch',
-                'https://git.alpinelinux.org/aports/plain/main/busybox/0002-nslookup-sanitize-all-printed-strings-with-printable.patch',
-                'https://gitlab.alpinelinux.org/alpine/aports/-/issues/13661',
-                'https://nvd.nist.gov/vuln/detail/CVE-2022-28391',
-                'https://www.cve.org/CVERecord?id=CVE-2022-28391'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: remote attackers may execute arbitrary code if netstat is used'
-            },
-            {
-              'cve':  'CVE-2021-42374',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '5.7',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-125'
-              ],
-              'description':   "An out-of-bounds heap read in Busybox's unlzma applet leads to information leak and denial of service when crafted LZMA-compressed input is decompressed. This can be triggered by any applet/format that",
-              'diffID':        'sha256:485f8c9dc046cf00979700893b6a61591141a45fd7740b7b8ece1ab7ca4df9a7',
-              'fixedVersions': [
-                '1.33.1-r4'
-              ],
-              'installedVersion': '1.33.1-r3',
-              'packageName':      'busybox',
-              'purl':             'pkg:apk/alpine/busybox@1.33.1-r3?arch=armv7&distro=3.14.2',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42374',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42374',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42374'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'busybox: out-of-bounds read in unlzma applet leads to information leak and denial of service when crafted LZMA-compressed input is decompressed'
-            },
-            {
-              'cve':  'CVE-2021-42375',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.5',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '4.1',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-159'
-              ],
-              'description':   "An incorrect handling of a special element in Busybox's ash applet leads to denial of service when processing a crafted shell command, due to the shell mistaking specific characters for reserved characters. This may be used for DoS under rare conditions of filtered command input.",
-              'diffID':        'sha256:485f8c9dc046cf00979700893b6a61591141a45fd7740b7b8ece1ab7ca4df9a7',
-              'fixedVersions': [
-                '1.33.1-r5'
-              ],
-              'installedVersion': '1.33.1-r3',
-              'packageName':      'busybox',
-              'purl':             'pkg:apk/alpine/busybox@1.33.1-r3?arch=armv7&distro=3.14.2',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42375',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42375',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42375'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'busybox: incorrect handling of a special element in ash applet leads to denial of service when processing a crafted shell command'
-            },
-            {
-              'cve':  'CVE-2022-0778',
-              'cvss': {
-                'bitnami': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'ghsa': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'nvd': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-835'
-              ],
-              'description':   'The BN_mod_sqrt() function, which computes a modular square root, contains a bug that can cause it to loop forever for non-prime moduli. Internally this function is used when parsing certificates that contain elliptic curve public keys in compressed form or explicit elliptic curve parameters with a base point encoded in compressed form. It is possible to trigger the infinite loop by crafting a certificate that has invalid explicit curve parameters. Since certificate parsing happens prior to verification of the certificate signature, any process that parses an externally supplied certificate may thus be subject to a denial of service attack. The infinite loop can also be reached when parsing crafted private keys as they can contain explicit elliptic curve parameters. Thus vulnerable situations include: - TLS clients consuming server certificates - TLS servers consuming client certificates - Hosting providers taking certificates or private keys from customers - Certificate authorities parsing certification requests from subscribers - Anything else which parses ASN.1 elliptic curve parameters Also any other applications that use the BN_mod_sqrt() where the attacker can control the parameter values are vulnerable to this DoS issue. In the OpenSSL 1.0.2 version the public key is not parsed during initial parsing of the certificate which makes it slightly harder to trigger the infinite loop. However any operation which requires the public key from the certificate will trigger the infinite loop. In particular the attacker can use a self-signed certificate to trigger the loop during verification of the certificate signature. This issue affects OpenSSL versions 1.0.2, 1.1.1 and 3.0. It was addressed in the releases of 1.1.1n and 3.0.2 on the 15th March 2022. Fixed in OpenSSL 3.0.2 (Affected 3.0.0,3.0.1). Fixed in OpenSSL 1.1.1n (Affected 1.1.1-1.1.1m). Fixed in OpenSSL 1.0.2zd (Affected 1.0.2-1.0.2zc).',
-              'diffID':        'sha256:485f8c9dc046cf00979700893b6a61591141a45fd7740b7b8ece1ab7ca4df9a7',
-              'fixedVersions': [
-                '1.1.1n-r0'
-              ],
-              'installedVersion': '1.1.1l-r0',
-              'packageName':      'libcrypto1.1',
-              'purl':             'pkg:apk/alpine/libcrypto1.1@1.1.1l-r0?arch=armv7&distro=3.14.2',
-              'references':       [
-                'http://packetstormsecurity.com/files/167344/OpenSSL-1.0.2-1.1.1-3.0-BN_mod_sqrt-Infinite-Loop.html',
-                'http://seclists.org/fulldisclosure/2022/May/33',
-                'http://seclists.org/fulldisclosure/2022/May/35',
-                'http://seclists.org/fulldisclosure/2022/May/38',
-                'https://access.redhat.com/errata/RHSA-2022:5326',
-                'https://access.redhat.com/security/cve/CVE-2022-0778',
-                'https://bugzilla.redhat.com/2062202',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2062202',
-                'https://cert-portal.siemens.com/productcert/pdf/ssa-712929.pdf',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-0778',
-                'https://errata.almalinux.org/8/ALSA-2022-5326.html',
-                'https://errata.rockylinux.org/RLSA-2022:4899',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=3118eb64934499d93db3230748a452351d1d9a65',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=380085481c64de749a6dd25cdf0bcf4360b30f83',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=a466912611aa6cbdf550cd10601390e587451246',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=3118eb64934499d93db3230748a452351d1d9a65',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=380085481c64de749a6dd25cdf0bcf4360b30f83',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=a466912611aa6cbdf550cd10601390e587451246',
-                'https://linux.oracle.com/cve/CVE-2022-0778.html',
-                'https://linux.oracle.com/errata/ELSA-2022-9272.html',
-                'https://lists.debian.org/debian-lts-announce/2022/03/msg00023.html',
-                'https://lists.debian.org/debian-lts-announce/2022/03/msg00024.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/323SNN6ZX7PRJJWP2BUAFLPUAE42XWLZ',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/323SNN6ZX7PRJJWP2BUAFLPUAE42XWLZ/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GDB3GQVJPXJE7X5C5JN6JAA4XUDWD6E6',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GDB3GQVJPXJE7X5C5JN6JAA4XUDWD6E6/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/W6K3PR542DXWLEFFMFIDMME4CWMHJRMG',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/W6K3PR542DXWLEFFMFIDMME4CWMHJRMG/',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/323SNN6ZX7PRJJWP2BUAFLPUAE42XWLZ',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/GDB3GQVJPXJE7X5C5JN6JAA4XUDWD6E6',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/W6K3PR542DXWLEFFMFIDMME4CWMHJRMG',
-                'https://nvd.nist.gov/vuln/detail/CVE-2022-0778',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2022-0002',
-                'https://rustsec.org/advisories/RUSTSEC-2022-0014.html',
-                'https://security.gentoo.org/glsa/202210-02',
-                'https://security.netapp.com/advisory/ntap-20220321-0002',
-                'https://security.netapp.com/advisory/ntap-20220321-0002/',
-                'https://security.netapp.com/advisory/ntap-20220429-0005',
-                'https://security.netapp.com/advisory/ntap-20220429-0005/',
-                'https://security.netapp.com/advisory/ntap-20240621-0006',
-                'https://security.netapp.com/advisory/ntap-20240621-0006/',
-                'https://support.apple.com/kb/HT213255',
-                'https://support.apple.com/kb/HT213256',
-                'https://support.apple.com/kb/HT213257',
-                'https://ubuntu.com/security/notices/USN-5328-1',
-                'https://ubuntu.com/security/notices/USN-5328-2',
-                'https://ubuntu.com/security/notices/USN-6457-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2022-0778',
-                'https://www.debian.org/security/2022/dsa-5103',
-                'https://www.openssl.org/news/secadv/20220315.txt',
-                'https://www.oracle.com/security-alerts/cpuapr2022.html',
-                'https://www.oracle.com/security-alerts/cpujul2022.html',
-                'https://www.tenable.com/security/tns-2022-06',
-                'https://www.tenable.com/security/tns-2022-07',
-                'https://www.tenable.com/security/tns-2022-08',
-                'https://www.tenable.com/security/tns-2022-09'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: Infinite loop in BN_mod_sqrt() reachable when parsing certificates'
-            },
-            {
-              'cve':  'CVE-2022-4450',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'nvd': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-415'
-              ],
-              'description':   'The function PEM_read_bio_ex() reads a PEM file from a BIO and parses and\ndecodes the "name" (e.g. "CERTIFICATE"), any header data and the payload data.\nIf the function succeeds then the "name_out", "header" and "data" arguments are\npopulated with pointers to buffers containing the relevant decoded data. The\ncaller is responsible for freeing those buffers. It is possible to construct a\nPEM file that results in 0 bytes of payload data. In this case PEM_read_bio_ex()\nwill return a failure code but will populate the header argument with a pointer\nto a buffer that has already been freed. If the caller also frees this buffer\nthen a double free will occur. This will most likely lead to a crash. This\ncould be exploited by an attacker who has the ability to supply malicious PEM\nfiles for parsing to achieve a denial of service attack.\n\nThe functions PEM_read_bio() and PEM_read() are simple wrappers around\nPEM_read_bio_ex() and therefore these functions are also directly affected.\n\nThese functions are also called indirectly by a number of other OpenSSL\nfunctions including PEM_X509_INFO_read_bio_ex() and\nSSL_CTX_use_serverinfo_file() which are also vulnerable. Some OpenSSL internal\nuses of these functions are not vulnerable because the caller does not free the\nheader argument if PEM_read_bio_ex() returns a failure code. These locations\ninclude the PEM_read_bio_TYPE() functions as well as the decoders introduced in\nOpenSSL 3.0.\n\nThe OpenSSL asn1parse command line application is also impacted by this issue.',
-              'diffID':        'sha256:485f8c9dc046cf00979700893b6a61591141a45fd7740b7b8ece1ab7ca4df9a7',
-              'fixedVersions': [
-                '1.1.1t-r0'
-              ],
-              'installedVersion': '1.1.1l-r0',
-              'packageName':      'libcrypto1.1',
-              'purl':             'pkg:apk/alpine/libcrypto1.1@1.1.1l-r0?arch=armv7&distro=3.14.2',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2023:2165',
-                'https://access.redhat.com/security/cve/CVE-2022-4450',
-                'https://bugzilla.redhat.com/1960321',
-                'https://bugzilla.redhat.com/2164440',
-                'https://bugzilla.redhat.com/2164487',
-                'https://bugzilla.redhat.com/2164492',
-                'https://bugzilla.redhat.com/2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144000',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144003',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144006',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144008',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144010',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144012',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144015',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144017',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144019',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2145170',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2158412',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164440',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164487',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164488',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164492',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164497',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164499',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164500',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4203',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4304',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4450',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0215',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0216',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0217',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0286',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0401',
-                'https://errata.almalinux.org/9/ALSA-2023-2165.html',
-                'https://errata.rockylinux.org/RLSA-2023:0946',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=63bcf189be73a9cc1264059bed6f57974be74a83',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=bbcf509bd046b34cca19c766bbddc31683d0858b',
-                'https://linux.oracle.com/cve/CVE-2022-4450.html',
-                'https://linux.oracle.com/errata/ELSA-2023-32791.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2022-4450',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0003',
-                'https://rustsec.org/advisories/RUSTSEC-2023-0010.html',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://ubuntu.com/security/notices/USN-5844-1',
-                'https://ubuntu.com/security/notices/USN-6564-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2022-4450',
-                'https://www.openssl.org/news/secadv/20230207.txt'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: double free after calling PEM_read_bio_ex'
-            },
-            {
-              'cve':  'CVE-2023-0215',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'nvd': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   'The public API function BIO_new_NDEF is a helper function used for streaming\nASN.1 data via a BIO. It is primarily used internally to OpenSSL to support the\nSMIME, CMS and PKCS7 streaming capabilities, but may also be called directly by\nend user applications.\n\nThe function receives a BIO from the caller, prepends a new BIO_f_asn1 filter\nBIO onto the front of it to form a BIO chain, and then returns the new head of\nthe BIO chain to the caller. Under certain conditions, for example if a CMS\nrecipient public key is invalid, the new filter BIO is freed and the function\nreturns a NULL result indicating a failure. However, in this case, the BIO chain\nis not properly cleaned up and the BIO passed by the caller still retains\ninternal pointers to the previously freed filter BIO. If the caller then goes on\nto call BIO_pop() on the BIO then a use-after-free will occur. This will most\nlikely result in a crash.\n\n\n\nThis scenario occurs directly in the internal function B64_write_ASN1() which\nmay cause BIO_new_NDEF() to be called and will subsequently call BIO_pop() on\nthe BIO. This internal function is in turn called by the public API functions\nPEM_write_bio_ASN1_stream, PEM_write_bio_CMS_stream, PEM_write_bio_PKCS7_stream,\nSMIME_write_ASN1, SMIME_write_CMS and SMIME_write_PKCS7.\n\nOther public API functions that may be impacted by this include\ni2d_ASN1_bio_stream, BIO_new_CMS, BIO_new_PKCS7, i2d_CMS_bio_stream and\ni2d_PKCS7_bio_stream.\n\nThe OpenSSL cms and smime command line applications are similarly affected.',
-              'diffID':        'sha256:485f8c9dc046cf00979700893b6a61591141a45fd7740b7b8ece1ab7ca4df9a7',
-              'fixedVersions': [
-                '1.1.1t-r0'
-              ],
-              'installedVersion': '1.1.1l-r0',
-              'packageName':      'libcrypto1.1',
-              'purl':             'pkg:apk/alpine/libcrypto1.1@1.1.1l-r0?arch=armv7&distro=3.14.2',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2023:2165',
-                'https://access.redhat.com/security/cve/CVE-2023-0215',
-                'https://bugzilla.redhat.com/1960321',
-                'https://bugzilla.redhat.com/2164440',
-                'https://bugzilla.redhat.com/2164487',
-                'https://bugzilla.redhat.com/2164492',
-                'https://bugzilla.redhat.com/2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144000',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144003',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144006',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144008',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144010',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144012',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144015',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144017',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144019',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2145170',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2158412',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164440',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164487',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164488',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164492',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164497',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164499',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164500',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4203',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4304',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4450',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0215',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0216',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0217',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0286',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0401',
-                'https://errata.almalinux.org/9/ALSA-2023-2165.html',
-                'https://errata.rockylinux.org/RLSA-2023:0946',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=8818064ce3c3c0f1b740a5aaba2a987e75bfbafd',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=9816136fe31d92ace4037d5da5257f763aeeb4eb',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=c3829dd8825c654652201e16f8a0a0c46ee3f344',
-                'https://linux.oracle.com/cve/CVE-2023-0215.html',
-                'https://linux.oracle.com/errata/ELSA-2023-32791.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-0215',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0003',
-                'https://rustsec.org/advisories/RUSTSEC-2023-0009.html',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://security.netapp.com/advisory/ntap-20230427-0007',
-                'https://security.netapp.com/advisory/ntap-20230427-0007/',
-                'https://security.netapp.com/advisory/ntap-20230427-0009',
-                'https://security.netapp.com/advisory/ntap-20230427-0009/',
-                'https://security.netapp.com/advisory/ntap-20240621-0006',
-                'https://security.netapp.com/advisory/ntap-20240621-0006/',
-                'https://ubuntu.com/security/notices/USN-5844-1',
-                'https://ubuntu.com/security/notices/USN-5845-1',
-                'https://ubuntu.com/security/notices/USN-5845-2',
-                'https://ubuntu.com/security/notices/USN-6564-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-0215',
-                'https://www.openssl.org/news/secadv/20230207.txt'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: use-after-free following BIO_new_NDEF'
-            },
-            {
-              'cve':  'CVE-2023-0286',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '7.4',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H'
-                },
-                'nvd': {
-                  'v3score':  '7.4',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.4',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-843'
-              ],
-              'description':   'There is a type confusion vulnerability relating to X.400 address processing\ninside an X.509 GeneralName. X.400 addresses were parsed as an ASN1_STRING but\nthe public structure definition for GENERAL_NAME incorrectly specified the type\nof the x400Address field as ASN1_TYPE. This field is subsequently interpreted by\nthe OpenSSL function GENERAL_NAME_cmp as an ASN1_TYPE rather than an\nASN1_STRING.\n\nWhen CRL checking is enabled (i.e. the application sets the\nX509_V_FLAG_CRL_CHECK flag), this vulnerability may allow an attacker to pass\narbitrary pointers to a memcmp call, enabling them to read memory contents or\nenact a denial of service. In most cases, the attack requires the attacker to\nprovide both the certificate chain and CRL, neither of which need to have a\nvalid signature. If the attacker only controls one of these inputs, the other\ninput must already contain an X.400 address as a CRL distribution point, which\nis uncommon. As such, this vulnerability is most likely to only affect\napplications which have implemented their own functionality for retrieving CRLs\nover a network.',
-              'diffID':        'sha256:485f8c9dc046cf00979700893b6a61591141a45fd7740b7b8ece1ab7ca4df9a7',
-              'fixedVersions': [
-                '1.1.1t-r0'
-              ],
-              'installedVersion': '1.1.1l-r0',
-              'packageName':      'libcrypto1.1',
-              'purl':             'pkg:apk/alpine/libcrypto1.1@1.1.1l-r0?arch=armv7&distro=3.14.2',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2025:7937',
-                'https://access.redhat.com/security/cve/CVE-2023-0286',
-                'https://access.redhat.com/security/cve/cve-2023-0286',
-                'https://bugzilla.redhat.com/2164440',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144000',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144003',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144006',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144008',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144010',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144012',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144015',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144017',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144019',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2145170',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2158412',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164440',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164487',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164488',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164492',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164497',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164499',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164500',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4203',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4304',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4450',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0215',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0216',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0217',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0286',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0401',
-                'https://errata.almalinux.org/9/ALSA-2025-7937.html',
-                'https://errata.rockylinux.org/RLSA-2023:0946',
-                'https://ftp.openbsd.org/pub/OpenBSD/LibreSSL/libressl-3.6.2-relnotes.txt',
-                'https://ftp.openbsd.org/pub/OpenBSD/patches/7.2/common/018_x509.patch.sig',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=2c6c9d439b484e1ba9830d8454a34fa4f80fdfe9',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=2f7530077e0ef79d98718138716bc51ca0cad658',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=fd2af07dc083a350c959147097003a14a5e8ac4d',
-                'https://github.com/pyca/cryptography',
-                'https://github.com/pyca/cryptography/security/advisories/GHSA-x4qr-2fvf-3mr5',
-                'https://linux.oracle.com/cve/CVE-2023-0286.html',
-                'https://linux.oracle.com/errata/ELSA-2025-7937.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-0286',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0003',
-                'https://rustsec.org/advisories/RUSTSEC-2023-0006.html',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://ubuntu.com/security/notices/USN-5844-1',
-                'https://ubuntu.com/security/notices/USN-5845-1',
-                'https://ubuntu.com/security/notices/USN-5845-2',
-                'https://ubuntu.com/security/notices/USN-6564-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-0286',
-                'https://www.openssl.org/news/secadv/20230207.txt'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: X.400 address type confusion in X.509 GeneralName'
-            },
-            {
-              'cve':  'CVE-2023-0464',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-295'
-              ],
-              'description':   "A security vulnerability has been identified in all supported versions\n\nof OpenSSL related to the verification of X.509 certificate chains\nthat include policy constraints.  Attackers may be able to exploit this\nvulnerability by creating a malicious certificate chain that triggers\nexponential use of computational resources, leading to a denial-of-service\n(DoS) attack on affected systems.\n\nPolicy processing is disabled by default but can be enabled by passing\nthe `-policy' argument to the command line utilities or by calling the\n`X509_VERIFY_PARAM_set1_policies()' function.",
-              'diffID':        'sha256:485f8c9dc046cf00979700893b6a61591141a45fd7740b7b8ece1ab7ca4df9a7',
-              'fixedVersions': [
-                '1.1.1t-r1'
-              ],
-              'installedVersion': '1.1.1l-r0',
-              'packageName':      'libcrypto1.1',
-              'purl':             'pkg:apk/alpine/libcrypto1.1@1.1.1l-r0?arch=armv7&distro=3.14.2',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2023:3722',
-                'https://access.redhat.com/security/cve/CVE-2023-0464',
-                'https://bugzilla.redhat.com/2181082',
-                'https://bugzilla.redhat.com/2182561',
-                'https://bugzilla.redhat.com/2182565',
-                'https://bugzilla.redhat.com/2188461',
-                'https://bugzilla.redhat.com/2207947',
-                'https://errata.almalinux.org/9/ALSA-2023-3722.html',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=2017771e2db3e2b96f89bbe8766c3209f6a99545',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=2dcd4f1e3115f38cefa43e3efbe9b801c27e642e',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=879f7080d7e141f415c79eaa3a8ac4a3dad0348b',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=959c59c7a0164117e7f8366466a32bb1f8d77ff1',
-                'https://linux.oracle.com/cve/CVE-2023-0464.html',
-                'https://linux.oracle.com/errata/ELSA-2023-3722.html',
-                'https://lists.debian.org/debian-lts-announce/2023/06/msg00011.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-0464',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://security.netapp.com/advisory/ntap-20230406-0006/',
-                'https://security.netapp.com/advisory/ntap-20240621-0006/',
-                'https://ubuntu.com/security/notices/USN-6039-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.couchbase.com/alerts/',
-                'https://www.cve.org/CVERecord?id=CVE-2023-0464',
-                'https://www.debian.org/security/2023/dsa-5417',
-                'https://www.openssl.org/news/secadv/20230322.txt'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: Denial of service by excessive resource usage in verifying X509 policy constraints'
-            },
-            {
-              'cve':  'CVE-2022-2097',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N'
-                },
-                'nvd': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N'
-                },
-                'redhat': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-327'
-              ],
-              'description':   "AES OCB mode for 32-bit x86 platforms using the AES-NI assembly optimised implementation will not encrypt the entirety of the data under some circumstances. This could reveal sixteen bytes of data that was preexisting in the memory that wasn't written. In the special case of \"in place\" encryption, sixteen bytes of the plaintext would be revealed. Since OpenSSL does not support OCB based cipher suites for TLS and DTLS, they are both unaffected. Fixed in OpenSSL 3.0.5 (Affected 3.0.0-3.0.4). Fixed in OpenSSL 1.1.1q (Affected 1.1.1-1.1.1p).",
-              'diffID':        'sha256:485f8c9dc046cf00979700893b6a61591141a45fd7740b7b8ece1ab7ca4df9a7',
-              'fixedVersions': [
-                '1.1.1q-r0'
-              ],
-              'installedVersion': '1.1.1l-r0',
-              'packageName':      'libcrypto1.1',
-              'purl':             'pkg:apk/alpine/libcrypto1.1@1.1.1l-r0?arch=armv7&distro=3.14.2',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2022:6224',
-                'https://access.redhat.com/security/cve/CVE-2022-2097',
-                'https://bugzilla.redhat.com/2081494',
-                'https://bugzilla.redhat.com/2087911',
-                'https://bugzilla.redhat.com/2087913',
-                'https://bugzilla.redhat.com/2097310',
-                'https://bugzilla.redhat.com/2104905',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2081494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2097310',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2100554',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2104905',
-                'https://cert-portal.siemens.com/productcert/pdf/ssa-332410.pdf',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-1292',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-2068',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-2097',
-                'https://errata.almalinux.org/9/ALSA-2022-6224.html',
-                'https://errata.rockylinux.org/RLSA-2022:5818',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=919925673d6c9cfed3c1085497f5dfbbed5fc431',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=a98f339ddd7e8f487d6e0088d4a9a42324885a93',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=919925673d6c9cfed3c1085497f5dfbbed5fc431',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=a98f339ddd7e8f487d6e0088d4a9a42324885a93',
-                'https://github.com/alexcrichton/openssl-src-rs',
-                'https://linux.oracle.com/cve/CVE-2022-2097.html',
-                'https://linux.oracle.com/errata/ELSA-2022-9955.html',
-                'https://lists.debian.org/debian-lts-announce/2023/02/msg00019.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/R6CK57NBQFTPUMXAPJURCGXUYT76NQAK',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/R6CK57NBQFTPUMXAPJURCGXUYT76NQAK/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/V6567JERRHHJW2GNGJGKDRNHR7SNPZK7',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/V6567JERRHHJW2GNGJGKDRNHR7SNPZK7/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VCMNWKERPBKOEBNL7CLTTX3ZZCZLH7XA',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VCMNWKERPBKOEBNL7CLTTX3ZZCZLH7XA/',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/R6CK57NBQFTPUMXAPJURCGXUYT76NQAK',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/R6CK57NBQFTPUMXAPJURCGXUYT76NQAK/',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/V6567JERRHHJW2GNGJGKDRNHR7SNPZK7',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/V6567JERRHHJW2GNGJGKDRNHR7SNPZK7/',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/VCMNWKERPBKOEBNL7CLTTX3ZZCZLH7XA',
-                'https://nvd.nist.gov/vuln/detail/CVE-2022-2097',
-                'https://rustsec.org/advisories/RUSTSEC-2022-0032.html',
-                'https://security.gentoo.org/glsa/202210-02',
-                'https://security.netapp.com/advisory/ntap-20220715-0011',
-                'https://security.netapp.com/advisory/ntap-20220715-0011/',
-                'https://security.netapp.com/advisory/ntap-20230420-0008',
-                'https://security.netapp.com/advisory/ntap-20230420-0008/',
-                'https://security.netapp.com/advisory/ntap-20240621-0006',
-                'https://security.netapp.com/advisory/ntap-20240621-0006/',
-                'https://ubuntu.com/security/notices/USN-5502-1',
-                'https://ubuntu.com/security/notices/USN-6457-1',
-                'https://www.cve.org/CVERecord?id=CVE-2022-2097',
-                'https://www.debian.org/security/2023/dsa-5343',
-                'https://www.openssl.org/news/secadv/20220705.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: AES OCB fails to encrypt some bytes'
-            },
-            {
-              'cve':  'CVE-2022-4304',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N'
-                },
-                'nvd': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N'
-                },
-                'redhat': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-203'
-              ],
-              'description':   'A timing based side channel exists in the OpenSSL RSA Decryption implementation\nwhich could be sufficient to recover a plaintext across a network in a\nBleichenbacher style attack. To achieve a successful decryption an attacker\nwould have to be able to send a very large number of trial messages for\ndecryption. The vulnerability affects all RSA padding modes: PKCS#1 v1.5,\nRSA-OEAP and RSASVE.\n\nFor example, in a TLS connection, RSA is commonly used by a client to send an\nencrypted pre-master secret to the server. An attacker that had observed a\ngenuine connection between a client and a server could use this flaw to send\ntrial messages to the server and record the time taken to process them. After a\nsufficiently large number of messages the attacker could recover the pre-master\nsecret used for the original connection and thus be able to decrypt the\napplication data sent over that connection.',
-              'diffID':        'sha256:485f8c9dc046cf00979700893b6a61591141a45fd7740b7b8ece1ab7ca4df9a7',
-              'fixedVersions': [
-                '1.1.1t-r0'
-              ],
-              'installedVersion': '1.1.1l-r0',
-              'packageName':      'libcrypto1.1',
-              'purl':             'pkg:apk/alpine/libcrypto1.1@1.1.1l-r0?arch=armv7&distro=3.14.2',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2023:2165',
-                'https://access.redhat.com/security/cve/CVE-2022-4304',
-                'https://bugzilla.redhat.com/1960321',
-                'https://bugzilla.redhat.com/2164440',
-                'https://bugzilla.redhat.com/2164487',
-                'https://bugzilla.redhat.com/2164492',
-                'https://bugzilla.redhat.com/2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144000',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144003',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144006',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144008',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144010',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144012',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144015',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144017',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144019',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2145170',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2158412',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164440',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164487',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164488',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164492',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164497',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164499',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164500',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4203',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4304',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4450',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0215',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0216',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0217',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0286',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0401',
-                'https://errata.almalinux.org/9/ALSA-2023-2165.html',
-                'https://errata.rockylinux.org/RLSA-2023:0946',
-                'https://linux.oracle.com/cve/CVE-2022-4304.html',
-                'https://linux.oracle.com/errata/ELSA-2023-32791.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2022-4304',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0003',
-                'https://rustsec.org/advisories/RUSTSEC-2023-0007.html',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://ubuntu.com/security/notices/USN-5844-1',
-                'https://ubuntu.com/security/notices/USN-6564-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2022-4304',
-                'https://www.openssl.org/news/secadv/20230207.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: timing attack in RSA Decryption implementation'
-            },
-            {
-              'cve':  'CVE-2023-0465',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N'
-                },
-                'redhat': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-295'
-              ],
-              'description':   "Applications that use a non-default option when verifying certificates may be\nvulnerable to an attack from a malicious CA to circumvent certain checks.\n\nInvalid certificate policies in leaf certificates are silently ignored by\nOpenSSL and other certificate policy checks are skipped for that certificate.\nA malicious CA could use this to deliberately assert invalid certificate policies\nin order to circumvent policy checking on the certificate altogether.\n\nPolicy processing is disabled by default but can be enabled by passing\nthe `-policy' argument to the command line utilities or by calling the\n`X509_VERIFY_PARAM_set1_policies()' function.",
-              'diffID':        'sha256:485f8c9dc046cf00979700893b6a61591141a45fd7740b7b8ece1ab7ca4df9a7',
-              'fixedVersions': [
-                '1.1.1t-r2'
-              ],
-              'installedVersion': '1.1.1l-r0',
-              'packageName':      'libcrypto1.1',
-              'purl':             'pkg:apk/alpine/libcrypto1.1@1.1.1l-r0?arch=armv7&distro=3.14.2',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2023:3722',
-                'https://access.redhat.com/security/cve/CVE-2023-0465',
-                'https://bugzilla.redhat.com/2181082',
-                'https://bugzilla.redhat.com/2182561',
-                'https://bugzilla.redhat.com/2182565',
-                'https://bugzilla.redhat.com/2188461',
-                'https://bugzilla.redhat.com/2207947',
-                'https://errata.almalinux.org/9/ALSA-2023-3722.html',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=10325176f3d3e98c6e2b3bf5ab1e3b334de6947a',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=1dd43e0709fece299b15208f36cc7c76209ba0bb',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=b013765abfa80036dc779dd0e50602c57bb3bf95',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=facfb1ab745646e97a1920977ae4a9965ea61d5c',
-                'https://linux.oracle.com/cve/CVE-2023-0465.html',
-                'https://linux.oracle.com/errata/ELSA-2023-3722.html',
-                'https://lists.debian.org/debian-lts-announce/2023/06/msg00011.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-0465',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://security.netapp.com/advisory/ntap-20230414-0001/',
-                'https://ubuntu.com/security/notices/USN-6039-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-0465',
-                'https://www.debian.org/security/2023/dsa-5417',
-                'https://www.openssl.org/news/secadv/20230328.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: Invalid certificate policies in leaf certificates are silently ignored'
-            },
-            {
-              'cve':  'CVE-2022-0778',
-              'cvss': {
-                'bitnami': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'ghsa': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'nvd': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-835'
-              ],
-              'description':   'The BN_mod_sqrt() function, which computes a modular square root, contains a bug that can cause it to loop forever for non-prime moduli. Internally this function is used when parsing certificates that contain elliptic curve public keys in compressed form or explicit elliptic curve parameters with a base point encoded in compressed form. It is possible to trigger the infinite loop by crafting a certificate that has invalid explicit curve parameters. Since certificate parsing happens prior to verification of the certificate signature, any process that parses an externally supplied certificate may thus be subject to a denial of service attack. The infinite loop can also be reached when parsing crafted private keys as they can contain explicit elliptic curve parameters. Thus vulnerable situations include: - TLS clients consuming server certificates - TLS servers consuming client certificates - Hosting providers taking certificates or private keys from customers - Certificate authorities parsing certification requests from subscribers - Anything else which parses ASN.1 elliptic curve parameters Also any other applications that use the BN_mod_sqrt() where the attacker can control the parameter values are vulnerable to this DoS issue. In the OpenSSL 1.0.2 version the public key is not parsed during initial parsing of the certificate which makes it slightly harder to trigger the infinite loop. However any operation which requires the public key from the certificate will trigger the infinite loop. In particular the attacker can use a self-signed certificate to trigger the loop during verification of the certificate signature. This issue affects OpenSSL versions 1.0.2, 1.1.1 and 3.0. It was addressed in the releases of 1.1.1n and 3.0.2 on the 15th March 2022. Fixed in OpenSSL 3.0.2 (Affected 3.0.0,3.0.1). Fixed in OpenSSL 1.1.1n (Affected 1.1.1-1.1.1m). Fixed in OpenSSL 1.0.2zd (Affected 1.0.2-1.0.2zc).',
-              'diffID':        'sha256:485f8c9dc046cf00979700893b6a61591141a45fd7740b7b8ece1ab7ca4df9a7',
-              'fixedVersions': [
-                '3.3.3p1-r3'
-              ],
-              'installedVersion': '3.3.3p1-r2',
-              'packageName':      'libretls',
-              'purl':             'pkg:apk/alpine/libretls@3.3.3p1-r2?arch=armv7&distro=3.14.2',
-              'references':       [
-                'http://packetstormsecurity.com/files/167344/OpenSSL-1.0.2-1.1.1-3.0-BN_mod_sqrt-Infinite-Loop.html',
-                'http://seclists.org/fulldisclosure/2022/May/33',
-                'http://seclists.org/fulldisclosure/2022/May/35',
-                'http://seclists.org/fulldisclosure/2022/May/38',
-                'https://access.redhat.com/errata/RHSA-2022:5326',
-                'https://access.redhat.com/security/cve/CVE-2022-0778',
-                'https://bugzilla.redhat.com/2062202',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2062202',
-                'https://cert-portal.siemens.com/productcert/pdf/ssa-712929.pdf',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-0778',
-                'https://errata.almalinux.org/8/ALSA-2022-5326.html',
-                'https://errata.rockylinux.org/RLSA-2022:4899',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=3118eb64934499d93db3230748a452351d1d9a65',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=380085481c64de749a6dd25cdf0bcf4360b30f83',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=a466912611aa6cbdf550cd10601390e587451246',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=3118eb64934499d93db3230748a452351d1d9a65',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=380085481c64de749a6dd25cdf0bcf4360b30f83',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=a466912611aa6cbdf550cd10601390e587451246',
-                'https://linux.oracle.com/cve/CVE-2022-0778.html',
-                'https://linux.oracle.com/errata/ELSA-2022-9272.html',
-                'https://lists.debian.org/debian-lts-announce/2022/03/msg00023.html',
-                'https://lists.debian.org/debian-lts-announce/2022/03/msg00024.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/323SNN6ZX7PRJJWP2BUAFLPUAE42XWLZ',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/323SNN6ZX7PRJJWP2BUAFLPUAE42XWLZ/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GDB3GQVJPXJE7X5C5JN6JAA4XUDWD6E6',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GDB3GQVJPXJE7X5C5JN6JAA4XUDWD6E6/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/W6K3PR542DXWLEFFMFIDMME4CWMHJRMG',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/W6K3PR542DXWLEFFMFIDMME4CWMHJRMG/',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/323SNN6ZX7PRJJWP2BUAFLPUAE42XWLZ',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/GDB3GQVJPXJE7X5C5JN6JAA4XUDWD6E6',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/W6K3PR542DXWLEFFMFIDMME4CWMHJRMG',
-                'https://nvd.nist.gov/vuln/detail/CVE-2022-0778',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2022-0002',
-                'https://rustsec.org/advisories/RUSTSEC-2022-0014.html',
-                'https://security.gentoo.org/glsa/202210-02',
-                'https://security.netapp.com/advisory/ntap-20220321-0002',
-                'https://security.netapp.com/advisory/ntap-20220321-0002/',
-                'https://security.netapp.com/advisory/ntap-20220429-0005',
-                'https://security.netapp.com/advisory/ntap-20220429-0005/',
-                'https://security.netapp.com/advisory/ntap-20240621-0006',
-                'https://security.netapp.com/advisory/ntap-20240621-0006/',
-                'https://support.apple.com/kb/HT213255',
-                'https://support.apple.com/kb/HT213256',
-                'https://support.apple.com/kb/HT213257',
-                'https://ubuntu.com/security/notices/USN-5328-1',
-                'https://ubuntu.com/security/notices/USN-5328-2',
-                'https://ubuntu.com/security/notices/USN-6457-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2022-0778',
-                'https://www.debian.org/security/2022/dsa-5103',
-                'https://www.openssl.org/news/secadv/20220315.txt',
-                'https://www.oracle.com/security-alerts/cpuapr2022.html',
-                'https://www.oracle.com/security-alerts/cpujul2022.html',
-                'https://www.tenable.com/security/tns-2022-06',
-                'https://www.tenable.com/security/tns-2022-07',
-                'https://www.tenable.com/security/tns-2022-08',
-                'https://www.tenable.com/security/tns-2022-09'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: Infinite loop in BN_mod_sqrt() reachable when parsing certificates'
-            },
-            {
-              'cve':  'CVE-2022-0778',
-              'cvss': {
-                'bitnami': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'ghsa': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'nvd': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-835'
-              ],
-              'description':   'The BN_mod_sqrt() function, which computes a modular square root, contains a bug that can cause it to loop forever for non-prime moduli. Internally this function is used when parsing certificates that contain elliptic curve public keys in compressed form or explicit elliptic curve parameters with a base point encoded in compressed form. It is possible to trigger the infinite loop by crafting a certificate that has invalid explicit curve parameters. Since certificate parsing happens prior to verification of the certificate signature, any process that parses an externally supplied certificate may thus be subject to a denial of service attack. The infinite loop can also be reached when parsing crafted private keys as they can contain explicit elliptic curve parameters. Thus vulnerable situations include: - TLS clients consuming server certificates - TLS servers consuming client certificates - Hosting providers taking certificates or private keys from customers - Certificate authorities parsing certification requests from subscribers - Anything else which parses ASN.1 elliptic curve parameters Also any other applications that use the BN_mod_sqrt() where the attacker can control the parameter values are vulnerable to this DoS issue. In the OpenSSL 1.0.2 version the public key is not parsed during initial parsing of the certificate which makes it slightly harder to trigger the infinite loop. However any operation which requires the public key from the certificate will trigger the infinite loop. In particular the attacker can use a self-signed certificate to trigger the loop during verification of the certificate signature. This issue affects OpenSSL versions 1.0.2, 1.1.1 and 3.0. It was addressed in the releases of 1.1.1n and 3.0.2 on the 15th March 2022. Fixed in OpenSSL 3.0.2 (Affected 3.0.0,3.0.1). Fixed in OpenSSL 1.1.1n (Affected 1.1.1-1.1.1m). Fixed in OpenSSL 1.0.2zd (Affected 1.0.2-1.0.2zc).',
-              'diffID':        'sha256:485f8c9dc046cf00979700893b6a61591141a45fd7740b7b8ece1ab7ca4df9a7',
-              'fixedVersions': [
-                '1.1.1n-r0'
-              ],
-              'installedVersion': '1.1.1l-r0',
-              'packageName':      'libssl1.1',
-              'purl':             'pkg:apk/alpine/libssl1.1@1.1.1l-r0?arch=armv7&distro=3.14.2',
-              'references':       [
-                'http://packetstormsecurity.com/files/167344/OpenSSL-1.0.2-1.1.1-3.0-BN_mod_sqrt-Infinite-Loop.html',
-                'http://seclists.org/fulldisclosure/2022/May/33',
-                'http://seclists.org/fulldisclosure/2022/May/35',
-                'http://seclists.org/fulldisclosure/2022/May/38',
-                'https://access.redhat.com/errata/RHSA-2022:5326',
-                'https://access.redhat.com/security/cve/CVE-2022-0778',
-                'https://bugzilla.redhat.com/2062202',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2062202',
-                'https://cert-portal.siemens.com/productcert/pdf/ssa-712929.pdf',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-0778',
-                'https://errata.almalinux.org/8/ALSA-2022-5326.html',
-                'https://errata.rockylinux.org/RLSA-2022:4899',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=3118eb64934499d93db3230748a452351d1d9a65',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=380085481c64de749a6dd25cdf0bcf4360b30f83',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=a466912611aa6cbdf550cd10601390e587451246',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=3118eb64934499d93db3230748a452351d1d9a65',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=380085481c64de749a6dd25cdf0bcf4360b30f83',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=a466912611aa6cbdf550cd10601390e587451246',
-                'https://linux.oracle.com/cve/CVE-2022-0778.html',
-                'https://linux.oracle.com/errata/ELSA-2022-9272.html',
-                'https://lists.debian.org/debian-lts-announce/2022/03/msg00023.html',
-                'https://lists.debian.org/debian-lts-announce/2022/03/msg00024.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/323SNN6ZX7PRJJWP2BUAFLPUAE42XWLZ',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/323SNN6ZX7PRJJWP2BUAFLPUAE42XWLZ/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GDB3GQVJPXJE7X5C5JN6JAA4XUDWD6E6',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GDB3GQVJPXJE7X5C5JN6JAA4XUDWD6E6/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/W6K3PR542DXWLEFFMFIDMME4CWMHJRMG',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/W6K3PR542DXWLEFFMFIDMME4CWMHJRMG/',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/323SNN6ZX7PRJJWP2BUAFLPUAE42XWLZ',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/GDB3GQVJPXJE7X5C5JN6JAA4XUDWD6E6',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/W6K3PR542DXWLEFFMFIDMME4CWMHJRMG',
-                'https://nvd.nist.gov/vuln/detail/CVE-2022-0778',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2022-0002',
-                'https://rustsec.org/advisories/RUSTSEC-2022-0014.html',
-                'https://security.gentoo.org/glsa/202210-02',
-                'https://security.netapp.com/advisory/ntap-20220321-0002',
-                'https://security.netapp.com/advisory/ntap-20220321-0002/',
-                'https://security.netapp.com/advisory/ntap-20220429-0005',
-                'https://security.netapp.com/advisory/ntap-20220429-0005/',
-                'https://security.netapp.com/advisory/ntap-20240621-0006',
-                'https://security.netapp.com/advisory/ntap-20240621-0006/',
-                'https://support.apple.com/kb/HT213255',
-                'https://support.apple.com/kb/HT213256',
-                'https://support.apple.com/kb/HT213257',
-                'https://ubuntu.com/security/notices/USN-5328-1',
-                'https://ubuntu.com/security/notices/USN-5328-2',
-                'https://ubuntu.com/security/notices/USN-6457-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2022-0778',
-                'https://www.debian.org/security/2022/dsa-5103',
-                'https://www.openssl.org/news/secadv/20220315.txt',
-                'https://www.oracle.com/security-alerts/cpuapr2022.html',
-                'https://www.oracle.com/security-alerts/cpujul2022.html',
-                'https://www.tenable.com/security/tns-2022-06',
-                'https://www.tenable.com/security/tns-2022-07',
-                'https://www.tenable.com/security/tns-2022-08',
-                'https://www.tenable.com/security/tns-2022-09'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: Infinite loop in BN_mod_sqrt() reachable when parsing certificates'
-            },
-            {
-              'cve':  'CVE-2022-4450',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'nvd': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-415'
-              ],
-              'description':   'The function PEM_read_bio_ex() reads a PEM file from a BIO and parses and\ndecodes the "name" (e.g. "CERTIFICATE"), any header data and the payload data.\nIf the function succeeds then the "name_out", "header" and "data" arguments are\npopulated with pointers to buffers containing the relevant decoded data. The\ncaller is responsible for freeing those buffers. It is possible to construct a\nPEM file that results in 0 bytes of payload data. In this case PEM_read_bio_ex()\nwill return a failure code but will populate the header argument with a pointer\nto a buffer that has already been freed. If the caller also frees this buffer\nthen a double free will occur. This will most likely lead to a crash. This\ncould be exploited by an attacker who has the ability to supply malicious PEM\nfiles for parsing to achieve a denial of service attack.\n\nThe functions PEM_read_bio() and PEM_read() are simple wrappers around\nPEM_read_bio_ex() and therefore these functions are also directly affected.\n\nThese functions are also called indirectly by a number of other OpenSSL\nfunctions including PEM_X509_INFO_read_bio_ex() and\nSSL_CTX_use_serverinfo_file() which are also vulnerable. Some OpenSSL internal\nuses of these functions are not vulnerable because the caller does not free the\nheader argument if PEM_read_bio_ex() returns a failure code. These locations\ninclude the PEM_read_bio_TYPE() functions as well as the decoders introduced in\nOpenSSL 3.0.\n\nThe OpenSSL asn1parse command line application is also impacted by this issue.',
-              'diffID':        'sha256:485f8c9dc046cf00979700893b6a61591141a45fd7740b7b8ece1ab7ca4df9a7',
-              'fixedVersions': [
-                '1.1.1t-r0'
-              ],
-              'installedVersion': '1.1.1l-r0',
-              'packageName':      'libssl1.1',
-              'purl':             'pkg:apk/alpine/libssl1.1@1.1.1l-r0?arch=armv7&distro=3.14.2',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2023:2165',
-                'https://access.redhat.com/security/cve/CVE-2022-4450',
-                'https://bugzilla.redhat.com/1960321',
-                'https://bugzilla.redhat.com/2164440',
-                'https://bugzilla.redhat.com/2164487',
-                'https://bugzilla.redhat.com/2164492',
-                'https://bugzilla.redhat.com/2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144000',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144003',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144006',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144008',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144010',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144012',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144015',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144017',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144019',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2145170',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2158412',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164440',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164487',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164488',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164492',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164497',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164499',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164500',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4203',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4304',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4450',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0215',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0216',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0217',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0286',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0401',
-                'https://errata.almalinux.org/9/ALSA-2023-2165.html',
-                'https://errata.rockylinux.org/RLSA-2023:0946',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=63bcf189be73a9cc1264059bed6f57974be74a83',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=bbcf509bd046b34cca19c766bbddc31683d0858b',
-                'https://linux.oracle.com/cve/CVE-2022-4450.html',
-                'https://linux.oracle.com/errata/ELSA-2023-32791.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2022-4450',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0003',
-                'https://rustsec.org/advisories/RUSTSEC-2023-0010.html',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://ubuntu.com/security/notices/USN-5844-1',
-                'https://ubuntu.com/security/notices/USN-6564-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2022-4450',
-                'https://www.openssl.org/news/secadv/20230207.txt'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: double free after calling PEM_read_bio_ex'
-            },
-            {
-              'cve':  'CVE-2023-0215',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'nvd': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   'The public API function BIO_new_NDEF is a helper function used for streaming\nASN.1 data via a BIO. It is primarily used internally to OpenSSL to support the\nSMIME, CMS and PKCS7 streaming capabilities, but may also be called directly by\nend user applications.\n\nThe function receives a BIO from the caller, prepends a new BIO_f_asn1 filter\nBIO onto the front of it to form a BIO chain, and then returns the new head of\nthe BIO chain to the caller. Under certain conditions, for example if a CMS\nrecipient public key is invalid, the new filter BIO is freed and the function\nreturns a NULL result indicating a failure. However, in this case, the BIO chain\nis not properly cleaned up and the BIO passed by the caller still retains\ninternal pointers to the previously freed filter BIO. If the caller then goes on\nto call BIO_pop() on the BIO then a use-after-free will occur. This will most\nlikely result in a crash.\n\n\n\nThis scenario occurs directly in the internal function B64_write_ASN1() which\nmay cause BIO_new_NDEF() to be called and will subsequently call BIO_pop() on\nthe BIO. This internal function is in turn called by the public API functions\nPEM_write_bio_ASN1_stream, PEM_write_bio_CMS_stream, PEM_write_bio_PKCS7_stream,\nSMIME_write_ASN1, SMIME_write_CMS and SMIME_write_PKCS7.\n\nOther public API functions that may be impacted by this include\ni2d_ASN1_bio_stream, BIO_new_CMS, BIO_new_PKCS7, i2d_CMS_bio_stream and\ni2d_PKCS7_bio_stream.\n\nThe OpenSSL cms and smime command line applications are similarly affected.',
-              'diffID':        'sha256:485f8c9dc046cf00979700893b6a61591141a45fd7740b7b8ece1ab7ca4df9a7',
-              'fixedVersions': [
-                '1.1.1t-r0'
-              ],
-              'installedVersion': '1.1.1l-r0',
-              'packageName':      'libssl1.1',
-              'purl':             'pkg:apk/alpine/libssl1.1@1.1.1l-r0?arch=armv7&distro=3.14.2',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2023:2165',
-                'https://access.redhat.com/security/cve/CVE-2023-0215',
-                'https://bugzilla.redhat.com/1960321',
-                'https://bugzilla.redhat.com/2164440',
-                'https://bugzilla.redhat.com/2164487',
-                'https://bugzilla.redhat.com/2164492',
-                'https://bugzilla.redhat.com/2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144000',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144003',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144006',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144008',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144010',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144012',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144015',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144017',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144019',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2145170',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2158412',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164440',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164487',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164488',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164492',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164497',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164499',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164500',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4203',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4304',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4450',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0215',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0216',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0217',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0286',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0401',
-                'https://errata.almalinux.org/9/ALSA-2023-2165.html',
-                'https://errata.rockylinux.org/RLSA-2023:0946',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=8818064ce3c3c0f1b740a5aaba2a987e75bfbafd',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=9816136fe31d92ace4037d5da5257f763aeeb4eb',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=c3829dd8825c654652201e16f8a0a0c46ee3f344',
-                'https://linux.oracle.com/cve/CVE-2023-0215.html',
-                'https://linux.oracle.com/errata/ELSA-2023-32791.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-0215',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0003',
-                'https://rustsec.org/advisories/RUSTSEC-2023-0009.html',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://security.netapp.com/advisory/ntap-20230427-0007',
-                'https://security.netapp.com/advisory/ntap-20230427-0007/',
-                'https://security.netapp.com/advisory/ntap-20230427-0009',
-                'https://security.netapp.com/advisory/ntap-20230427-0009/',
-                'https://security.netapp.com/advisory/ntap-20240621-0006',
-                'https://security.netapp.com/advisory/ntap-20240621-0006/',
-                'https://ubuntu.com/security/notices/USN-5844-1',
-                'https://ubuntu.com/security/notices/USN-5845-1',
-                'https://ubuntu.com/security/notices/USN-5845-2',
-                'https://ubuntu.com/security/notices/USN-6564-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-0215',
-                'https://www.openssl.org/news/secadv/20230207.txt'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: use-after-free following BIO_new_NDEF'
-            },
-            {
-              'cve':  'CVE-2023-0286',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '7.4',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H'
-                },
-                'nvd': {
-                  'v3score':  '7.4',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.4',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-843'
-              ],
-              'description':   'There is a type confusion vulnerability relating to X.400 address processing\ninside an X.509 GeneralName. X.400 addresses were parsed as an ASN1_STRING but\nthe public structure definition for GENERAL_NAME incorrectly specified the type\nof the x400Address field as ASN1_TYPE. This field is subsequently interpreted by\nthe OpenSSL function GENERAL_NAME_cmp as an ASN1_TYPE rather than an\nASN1_STRING.\n\nWhen CRL checking is enabled (i.e. the application sets the\nX509_V_FLAG_CRL_CHECK flag), this vulnerability may allow an attacker to pass\narbitrary pointers to a memcmp call, enabling them to read memory contents or\nenact a denial of service. In most cases, the attack requires the attacker to\nprovide both the certificate chain and CRL, neither of which need to have a\nvalid signature. If the attacker only controls one of these inputs, the other\ninput must already contain an X.400 address as a CRL distribution point, which\nis uncommon. As such, this vulnerability is most likely to only affect\napplications which have implemented their own functionality for retrieving CRLs\nover a network.',
-              'diffID':        'sha256:485f8c9dc046cf00979700893b6a61591141a45fd7740b7b8ece1ab7ca4df9a7',
-              'fixedVersions': [
-                '1.1.1t-r0'
-              ],
-              'installedVersion': '1.1.1l-r0',
-              'packageName':      'libssl1.1',
-              'purl':             'pkg:apk/alpine/libssl1.1@1.1.1l-r0?arch=armv7&distro=3.14.2',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2025:7937',
-                'https://access.redhat.com/security/cve/CVE-2023-0286',
-                'https://access.redhat.com/security/cve/cve-2023-0286',
-                'https://bugzilla.redhat.com/2164440',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144000',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144003',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144006',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144008',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144010',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144012',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144015',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144017',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144019',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2145170',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2158412',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164440',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164487',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164488',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164492',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164497',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164499',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164500',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4203',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4304',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4450',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0215',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0216',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0217',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0286',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0401',
-                'https://errata.almalinux.org/9/ALSA-2025-7937.html',
-                'https://errata.rockylinux.org/RLSA-2023:0946',
-                'https://ftp.openbsd.org/pub/OpenBSD/LibreSSL/libressl-3.6.2-relnotes.txt',
-                'https://ftp.openbsd.org/pub/OpenBSD/patches/7.2/common/018_x509.patch.sig',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=2c6c9d439b484e1ba9830d8454a34fa4f80fdfe9',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=2f7530077e0ef79d98718138716bc51ca0cad658',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=fd2af07dc083a350c959147097003a14a5e8ac4d',
-                'https://github.com/pyca/cryptography',
-                'https://github.com/pyca/cryptography/security/advisories/GHSA-x4qr-2fvf-3mr5',
-                'https://linux.oracle.com/cve/CVE-2023-0286.html',
-                'https://linux.oracle.com/errata/ELSA-2025-7937.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-0286',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0003',
-                'https://rustsec.org/advisories/RUSTSEC-2023-0006.html',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://ubuntu.com/security/notices/USN-5844-1',
-                'https://ubuntu.com/security/notices/USN-5845-1',
-                'https://ubuntu.com/security/notices/USN-5845-2',
-                'https://ubuntu.com/security/notices/USN-6564-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-0286',
-                'https://www.openssl.org/news/secadv/20230207.txt'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: X.400 address type confusion in X.509 GeneralName'
-            },
-            {
-              'cve':  'CVE-2023-0464',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-295'
-              ],
-              'description':   "A security vulnerability has been identified in all supported versions\n\nof OpenSSL related to the verification of X.509 certificate chains\nthat include policy constraints.  Attackers may be able to exploit this\nvulnerability by creating a malicious certificate chain that triggers\nexponential use of computational resources, leading to a denial-of-service\n(DoS) attack on affected systems.\n\nPolicy processing is disabled by default but can be enabled by passing\nthe `-policy' argument to the command line utilities or by calling the\n`X509_VERIFY_PARAM_set1_policies()' function.",
-              'diffID':        'sha256:485f8c9dc046cf00979700893b6a61591141a45fd7740b7b8ece1ab7ca4df9a7',
-              'fixedVersions': [
-                '1.1.1t-r1'
-              ],
-              'installedVersion': '1.1.1l-r0',
-              'packageName':      'libssl1.1',
-              'purl':             'pkg:apk/alpine/libssl1.1@1.1.1l-r0?arch=armv7&distro=3.14.2',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2023:3722',
-                'https://access.redhat.com/security/cve/CVE-2023-0464',
-                'https://bugzilla.redhat.com/2181082',
-                'https://bugzilla.redhat.com/2182561',
-                'https://bugzilla.redhat.com/2182565',
-                'https://bugzilla.redhat.com/2188461',
-                'https://bugzilla.redhat.com/2207947',
-                'https://errata.almalinux.org/9/ALSA-2023-3722.html',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=2017771e2db3e2b96f89bbe8766c3209f6a99545',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=2dcd4f1e3115f38cefa43e3efbe9b801c27e642e',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=879f7080d7e141f415c79eaa3a8ac4a3dad0348b',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=959c59c7a0164117e7f8366466a32bb1f8d77ff1',
-                'https://linux.oracle.com/cve/CVE-2023-0464.html',
-                'https://linux.oracle.com/errata/ELSA-2023-3722.html',
-                'https://lists.debian.org/debian-lts-announce/2023/06/msg00011.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-0464',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://security.netapp.com/advisory/ntap-20230406-0006/',
-                'https://security.netapp.com/advisory/ntap-20240621-0006/',
-                'https://ubuntu.com/security/notices/USN-6039-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.couchbase.com/alerts/',
-                'https://www.cve.org/CVERecord?id=CVE-2023-0464',
-                'https://www.debian.org/security/2023/dsa-5417',
-                'https://www.openssl.org/news/secadv/20230322.txt'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: Denial of service by excessive resource usage in verifying X509 policy constraints'
-            },
-            {
-              'cve':  'CVE-2022-2097',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N'
-                },
-                'nvd': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N'
-                },
-                'redhat': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-327'
-              ],
-              'description':   "AES OCB mode for 32-bit x86 platforms using the AES-NI assembly optimised implementation will not encrypt the entirety of the data under some circumstances. This could reveal sixteen bytes of data that was preexisting in the memory that wasn't written. In the special case of \"in place\" encryption, sixteen bytes of the plaintext would be revealed. Since OpenSSL does not support OCB based cipher suites for TLS and DTLS, they are both unaffected. Fixed in OpenSSL 3.0.5 (Affected 3.0.0-3.0.4). Fixed in OpenSSL 1.1.1q (Affected 1.1.1-1.1.1p).",
-              'diffID':        'sha256:485f8c9dc046cf00979700893b6a61591141a45fd7740b7b8ece1ab7ca4df9a7',
-              'fixedVersions': [
-                '1.1.1q-r0'
-              ],
-              'installedVersion': '1.1.1l-r0',
-              'packageName':      'libssl1.1',
-              'purl':             'pkg:apk/alpine/libssl1.1@1.1.1l-r0?arch=armv7&distro=3.14.2',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2022:6224',
-                'https://access.redhat.com/security/cve/CVE-2022-2097',
-                'https://bugzilla.redhat.com/2081494',
-                'https://bugzilla.redhat.com/2087911',
-                'https://bugzilla.redhat.com/2087913',
-                'https://bugzilla.redhat.com/2097310',
-                'https://bugzilla.redhat.com/2104905',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2081494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2097310',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2100554',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2104905',
-                'https://cert-portal.siemens.com/productcert/pdf/ssa-332410.pdf',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-1292',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-2068',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-2097',
-                'https://errata.almalinux.org/9/ALSA-2022-6224.html',
-                'https://errata.rockylinux.org/RLSA-2022:5818',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=919925673d6c9cfed3c1085497f5dfbbed5fc431',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=a98f339ddd7e8f487d6e0088d4a9a42324885a93',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=919925673d6c9cfed3c1085497f5dfbbed5fc431',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=a98f339ddd7e8f487d6e0088d4a9a42324885a93',
-                'https://github.com/alexcrichton/openssl-src-rs',
-                'https://linux.oracle.com/cve/CVE-2022-2097.html',
-                'https://linux.oracle.com/errata/ELSA-2022-9955.html',
-                'https://lists.debian.org/debian-lts-announce/2023/02/msg00019.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/R6CK57NBQFTPUMXAPJURCGXUYT76NQAK',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/R6CK57NBQFTPUMXAPJURCGXUYT76NQAK/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/V6567JERRHHJW2GNGJGKDRNHR7SNPZK7',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/V6567JERRHHJW2GNGJGKDRNHR7SNPZK7/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VCMNWKERPBKOEBNL7CLTTX3ZZCZLH7XA',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VCMNWKERPBKOEBNL7CLTTX3ZZCZLH7XA/',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/R6CK57NBQFTPUMXAPJURCGXUYT76NQAK',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/R6CK57NBQFTPUMXAPJURCGXUYT76NQAK/',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/V6567JERRHHJW2GNGJGKDRNHR7SNPZK7',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/V6567JERRHHJW2GNGJGKDRNHR7SNPZK7/',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/VCMNWKERPBKOEBNL7CLTTX3ZZCZLH7XA',
-                'https://nvd.nist.gov/vuln/detail/CVE-2022-2097',
-                'https://rustsec.org/advisories/RUSTSEC-2022-0032.html',
-                'https://security.gentoo.org/glsa/202210-02',
-                'https://security.netapp.com/advisory/ntap-20220715-0011',
-                'https://security.netapp.com/advisory/ntap-20220715-0011/',
-                'https://security.netapp.com/advisory/ntap-20230420-0008',
-                'https://security.netapp.com/advisory/ntap-20230420-0008/',
-                'https://security.netapp.com/advisory/ntap-20240621-0006',
-                'https://security.netapp.com/advisory/ntap-20240621-0006/',
-                'https://ubuntu.com/security/notices/USN-5502-1',
-                'https://ubuntu.com/security/notices/USN-6457-1',
-                'https://www.cve.org/CVERecord?id=CVE-2022-2097',
-                'https://www.debian.org/security/2023/dsa-5343',
-                'https://www.openssl.org/news/secadv/20220705.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: AES OCB fails to encrypt some bytes'
-            },
-            {
-              'cve':  'CVE-2022-4304',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N'
-                },
-                'nvd': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N'
-                },
-                'redhat': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-203'
-              ],
-              'description':   'A timing based side channel exists in the OpenSSL RSA Decryption implementation\nwhich could be sufficient to recover a plaintext across a network in a\nBleichenbacher style attack. To achieve a successful decryption an attacker\nwould have to be able to send a very large number of trial messages for\ndecryption. The vulnerability affects all RSA padding modes: PKCS#1 v1.5,\nRSA-OEAP and RSASVE.\n\nFor example, in a TLS connection, RSA is commonly used by a client to send an\nencrypted pre-master secret to the server. An attacker that had observed a\ngenuine connection between a client and a server could use this flaw to send\ntrial messages to the server and record the time taken to process them. After a\nsufficiently large number of messages the attacker could recover the pre-master\nsecret used for the original connection and thus be able to decrypt the\napplication data sent over that connection.',
-              'diffID':        'sha256:485f8c9dc046cf00979700893b6a61591141a45fd7740b7b8ece1ab7ca4df9a7',
-              'fixedVersions': [
-                '1.1.1t-r0'
-              ],
-              'installedVersion': '1.1.1l-r0',
-              'packageName':      'libssl1.1',
-              'purl':             'pkg:apk/alpine/libssl1.1@1.1.1l-r0?arch=armv7&distro=3.14.2',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2023:2165',
-                'https://access.redhat.com/security/cve/CVE-2022-4304',
-                'https://bugzilla.redhat.com/1960321',
-                'https://bugzilla.redhat.com/2164440',
-                'https://bugzilla.redhat.com/2164487',
-                'https://bugzilla.redhat.com/2164492',
-                'https://bugzilla.redhat.com/2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144000',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144003',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144006',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144008',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144010',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144012',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144015',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144017',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144019',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2145170',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2158412',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164440',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164487',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164488',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164492',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164497',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164499',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164500',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4203',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4304',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4450',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0215',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0216',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0217',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0286',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0401',
-                'https://errata.almalinux.org/9/ALSA-2023-2165.html',
-                'https://errata.rockylinux.org/RLSA-2023:0946',
-                'https://linux.oracle.com/cve/CVE-2022-4304.html',
-                'https://linux.oracle.com/errata/ELSA-2023-32791.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2022-4304',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0003',
-                'https://rustsec.org/advisories/RUSTSEC-2023-0007.html',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://ubuntu.com/security/notices/USN-5844-1',
-                'https://ubuntu.com/security/notices/USN-6564-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2022-4304',
-                'https://www.openssl.org/news/secadv/20230207.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: timing attack in RSA Decryption implementation'
-            },
-            {
-              'cve':  'CVE-2023-0465',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N'
-                },
-                'redhat': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-295'
-              ],
-              'description':   "Applications that use a non-default option when verifying certificates may be\nvulnerable to an attack from a malicious CA to circumvent certain checks.\n\nInvalid certificate policies in leaf certificates are silently ignored by\nOpenSSL and other certificate policy checks are skipped for that certificate.\nA malicious CA could use this to deliberately assert invalid certificate policies\nin order to circumvent policy checking on the certificate altogether.\n\nPolicy processing is disabled by default but can be enabled by passing\nthe `-policy' argument to the command line utilities or by calling the\n`X509_VERIFY_PARAM_set1_policies()' function.",
-              'diffID':        'sha256:485f8c9dc046cf00979700893b6a61591141a45fd7740b7b8ece1ab7ca4df9a7',
-              'fixedVersions': [
-                '1.1.1t-r2'
-              ],
-              'installedVersion': '1.1.1l-r0',
-              'packageName':      'libssl1.1',
-              'purl':             'pkg:apk/alpine/libssl1.1@1.1.1l-r0?arch=armv7&distro=3.14.2',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2023:3722',
-                'https://access.redhat.com/security/cve/CVE-2023-0465',
-                'https://bugzilla.redhat.com/2181082',
-                'https://bugzilla.redhat.com/2182561',
-                'https://bugzilla.redhat.com/2182565',
-                'https://bugzilla.redhat.com/2188461',
-                'https://bugzilla.redhat.com/2207947',
-                'https://errata.almalinux.org/9/ALSA-2023-3722.html',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=10325176f3d3e98c6e2b3bf5ab1e3b334de6947a',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=1dd43e0709fece299b15208f36cc7c76209ba0bb',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=b013765abfa80036dc779dd0e50602c57bb3bf95',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=facfb1ab745646e97a1920977ae4a9965ea61d5c',
-                'https://linux.oracle.com/cve/CVE-2023-0465.html',
-                'https://linux.oracle.com/errata/ELSA-2023-3722.html',
-                'https://lists.debian.org/debian-lts-announce/2023/06/msg00011.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-0465',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://security.netapp.com/advisory/ntap-20230414-0001/',
-                'https://ubuntu.com/security/notices/USN-6039-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-0465',
-                'https://www.debian.org/security/2023/dsa-5417',
-                'https://www.openssl.org/news/secadv/20230328.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: Invalid certificate policies in leaf certificates are silently ignored'
-            },
-            {
-              'cve':  'CVE-2021-42378',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the getvar_i function",
-              'diffID':        'sha256:485f8c9dc046cf00979700893b6a61591141a45fd7740b7b8ece1ab7ca4df9a7',
-              'fixedVersions': [
-                '1.33.1-r6'
-              ],
-              'installedVersion': '1.33.1-r3',
-              'packageName':      'ssl_client',
-              'purl':             'pkg:apk/alpine/ssl_client@1.33.1-r3?arch=armv7&distro=3.14.2',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42378',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42378',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42378'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the getvar_i()'
-            },
-            {
-              'cve':  'CVE-2021-42379',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the next_input_file function",
-              'diffID':        'sha256:485f8c9dc046cf00979700893b6a61591141a45fd7740b7b8ece1ab7ca4df9a7',
-              'fixedVersions': [
-                '1.33.1-r6'
-              ],
-              'installedVersion': '1.33.1-r3',
-              'packageName':      'ssl_client',
-              'purl':             'pkg:apk/alpine/ssl_client@1.33.1-r3?arch=armv7&distro=3.14.2',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42379',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42379',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42379'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the next_input_file()'
-            },
-            {
-              'cve':  'CVE-2021-42380',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the clrvar function",
-              'diffID':        'sha256:485f8c9dc046cf00979700893b6a61591141a45fd7740b7b8ece1ab7ca4df9a7',
-              'fixedVersions': [
-                '1.33.1-r6'
-              ],
-              'installedVersion': '1.33.1-r3',
-              'packageName':      'ssl_client',
-              'purl':             'pkg:apk/alpine/ssl_client@1.33.1-r3?arch=armv7&distro=3.14.2',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42380',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42380',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42380'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the clrvar()'
-            },
-            {
-              'cve':  'CVE-2021-42381',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the hash_init function",
-              'diffID':        'sha256:485f8c9dc046cf00979700893b6a61591141a45fd7740b7b8ece1ab7ca4df9a7',
-              'fixedVersions': [
-                '1.33.1-r6'
-              ],
-              'installedVersion': '1.33.1-r3',
-              'packageName':      'ssl_client',
-              'purl':             'pkg:apk/alpine/ssl_client@1.33.1-r3?arch=armv7&distro=3.14.2',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42381',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42381',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42381'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the hash_init()'
-            },
-            {
-              'cve':  'CVE-2021-42382',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the getvar_s function",
-              'diffID':        'sha256:485f8c9dc046cf00979700893b6a61591141a45fd7740b7b8ece1ab7ca4df9a7',
-              'fixedVersions': [
-                '1.33.1-r6'
-              ],
-              'installedVersion': '1.33.1-r3',
-              'packageName':      'ssl_client',
-              'purl':             'pkg:apk/alpine/ssl_client@1.33.1-r3?arch=armv7&distro=3.14.2',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42382',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42382',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42382'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the getvar_s()'
-            },
-            {
-              'cve':  'CVE-2021-42383',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the evaluate function",
-              'diffID':        'sha256:485f8c9dc046cf00979700893b6a61591141a45fd7740b7b8ece1ab7ca4df9a7',
-              'fixedVersions': [
-                '1.33.1-r6'
-              ],
-              'installedVersion': '1.33.1-r3',
-              'packageName':      'ssl_client',
-              'purl':             'pkg:apk/alpine/ssl_client@1.33.1-r3?arch=armv7&distro=3.14.2',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42383',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42383',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42383'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the evaluate()'
-            },
-            {
-              'cve':  'CVE-2021-42384',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the handle_special function",
-              'diffID':        'sha256:485f8c9dc046cf00979700893b6a61591141a45fd7740b7b8ece1ab7ca4df9a7',
-              'fixedVersions': [
-                '1.33.1-r6'
-              ],
-              'installedVersion': '1.33.1-r3',
-              'packageName':      'ssl_client',
-              'purl':             'pkg:apk/alpine/ssl_client@1.33.1-r3?arch=armv7&distro=3.14.2',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42384',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42384',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42384'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the handle_special()'
-            },
-            {
-              'cve':  'CVE-2021-42385',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the evaluate function",
-              'diffID':        'sha256:485f8c9dc046cf00979700893b6a61591141a45fd7740b7b8ece1ab7ca4df9a7',
-              'fixedVersions': [
-                '1.33.1-r6'
-              ],
-              'installedVersion': '1.33.1-r3',
-              'packageName':      'ssl_client',
-              'purl':             'pkg:apk/alpine/ssl_client@1.33.1-r3?arch=armv7&distro=3.14.2',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42385',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42385',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42385'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the evaluate()'
-            },
-            {
-              'cve':  'CVE-2021-42386',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the nvalloc function",
-              'diffID':        'sha256:485f8c9dc046cf00979700893b6a61591141a45fd7740b7b8ece1ab7ca4df9a7',
-              'fixedVersions': [
-                '1.33.1-r6'
-              ],
-              'installedVersion': '1.33.1-r3',
-              'packageName':      'ssl_client',
-              'purl':             'pkg:apk/alpine/ssl_client@1.33.1-r3?arch=armv7&distro=3.14.2',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42386',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42386',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42386'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the nvalloc()'
-            },
-            {
-              'cve':  'CVE-2022-28391',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '8.8',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-88'
-              ],
-              'description':   "BusyBox through 1.35.0 allows remote attackers to execute arbitrary code if netstat is used to print a DNS PTR record's value to a VT compatible terminal. Alternatively, the attacker could choose to change the terminal's colors.",
-              'diffID':        'sha256:485f8c9dc046cf00979700893b6a61591141a45fd7740b7b8ece1ab7ca4df9a7',
-              'fixedVersions': [
-                '1.33.1-r7'
-              ],
-              'installedVersion': '1.33.1-r3',
-              'packageName':      'ssl_client',
-              'purl':             'pkg:apk/alpine/ssl_client@1.33.1-r3?arch=armv7&distro=3.14.2',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2022-28391',
-                'https://git.alpinelinux.org/aports/plain/main/busybox/0001-libbb-sockaddr2str-ensure-only-printable-characters-.patch',
-                'https://git.alpinelinux.org/aports/plain/main/busybox/0002-nslookup-sanitize-all-printed-strings-with-printable.patch',
-                'https://gitlab.alpinelinux.org/alpine/aports/-/issues/13661',
-                'https://nvd.nist.gov/vuln/detail/CVE-2022-28391',
-                'https://www.cve.org/CVERecord?id=CVE-2022-28391'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: remote attackers may execute arbitrary code if netstat is used'
-            },
-            {
-              'cve':  'CVE-2021-42374',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '5.7',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-125'
-              ],
-              'description':   "An out-of-bounds heap read in Busybox's unlzma applet leads to information leak and denial of service when crafted LZMA-compressed input is decompressed. This can be triggered by any applet/format that",
-              'diffID':        'sha256:485f8c9dc046cf00979700893b6a61591141a45fd7740b7b8ece1ab7ca4df9a7',
-              'fixedVersions': [
-                '1.33.1-r4'
-              ],
-              'installedVersion': '1.33.1-r3',
-              'packageName':      'ssl_client',
-              'purl':             'pkg:apk/alpine/ssl_client@1.33.1-r3?arch=armv7&distro=3.14.2',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42374',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42374',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42374'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'busybox: out-of-bounds read in unlzma applet leads to information leak and denial of service when crafted LZMA-compressed input is decompressed'
-            },
-            {
-              'cve':  'CVE-2021-42375',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.5',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '4.1',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-159'
-              ],
-              'description':   "An incorrect handling of a special element in Busybox's ash applet leads to denial of service when processing a crafted shell command, due to the shell mistaking specific characters for reserved characters. This may be used for DoS under rare conditions of filtered command input.",
-              'diffID':        'sha256:485f8c9dc046cf00979700893b6a61591141a45fd7740b7b8ece1ab7ca4df9a7',
-              'fixedVersions': [
-                '1.33.1-r5'
-              ],
-              'installedVersion': '1.33.1-r3',
-              'packageName':      'ssl_client',
-              'purl':             'pkg:apk/alpine/ssl_client@1.33.1-r3?arch=armv7&distro=3.14.2',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42375',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42375',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42375'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'busybox: incorrect handling of a special element in ash applet leads to denial of service when processing a crafted shell command'
-            },
-            {
-              'cve':  'CVE-2022-37434',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '9.8',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-787',
-                'CWE-120'
-              ],
-              'description':   'zlib through 1.2.12 has a heap-based buffer over-read or buffer overflow in inflate in inflate.c via a large gzip header extra field. NOTE: only applications that call inflateGetHeader are affected. Some common applications bundle the affected zlib source code but may be unable to call inflateGetHeader (e.g., see the nodejs/node reference).',
-              'diffID':        'sha256:485f8c9dc046cf00979700893b6a61591141a45fd7740b7b8ece1ab7ca4df9a7',
-              'fixedVersions': [
-                '1.2.12-r2'
-              ],
-              'installedVersion': '1.2.11-r3',
-              'packageName':      'zlib',
-              'purl':             'pkg:apk/alpine/zlib@1.2.11-r3?arch=armv7&distro=3.14.2',
-              'references':       [
-                'http://seclists.org/fulldisclosure/2022/Oct/37',
-                'http://seclists.org/fulldisclosure/2022/Oct/38',
-                'http://seclists.org/fulldisclosure/2022/Oct/41',
-                'http://seclists.org/fulldisclosure/2022/Oct/42',
-                'http://www.openwall.com/lists/oss-security/2022/08/05/2',
-                'http://www.openwall.com/lists/oss-security/2022/08/09/1',
-                'https://access.redhat.com/errata/RHSA-2022:8291',
-                'https://access.redhat.com/security/cve/CVE-2022-37434',
-                'https://bugzilla.redhat.com/2116639',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2053198',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2077431',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2081296',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2116639',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-37434',
-                'https://errata.almalinux.org/9/ALSA-2022-8291.html',
-                'https://errata.rockylinux.org/RLSA-2022:8291',
-                'https://github.com/curl/curl/issues/9271',
-                'https://github.com/ivd38/zlib_overflow',
-                'https://github.com/madler/zlib/blob/21767c654d31d2dccdde4330529775c6c5fd5389/zlib.h#L1062-L1063',
-                'https://github.com/madler/zlib/commit/1eb7682f845ac9e9bf9ae35bbfb3bad5dacbd91d',
-                'https://github.com/madler/zlib/commit/eff308af425b67093bab25f80f1ae950166bece1',
-                'https://github.com/nodejs/node/blob/75b68c6e4db515f76df73af476eccf382bbcb00a/deps/zlib/inflate.c#L762-L764',
-                'https://linux.oracle.com/cve/CVE-2022-37434.html',
-                'https://linux.oracle.com/errata/ELSA-2023-1095.html',
-                'https://lists.debian.org/debian-lts-announce/2022/09/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JWN4VE3JQR4O2SOUS5TXNLANRPMHWV4I/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NMBOJ77A7T7PQCARMDUK75TE6LLESZ3O/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PAVPQNCG3XRLCLNSQRM3KAN5ZFMVXVTY/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/X5U7OTKZSHY2I3ZFJSR2SHFHW72RKGDK/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YRQAI7H4M4RQZ2IWZUEEXECBE5D56BH2/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2022-37434',
-                'https://security.netapp.com/advisory/ntap-20220901-0005/',
-                'https://security.netapp.com/advisory/ntap-20230427-0007/',
-                'https://support.apple.com/kb/HT213488',
-                'https://support.apple.com/kb/HT213489',
-                'https://support.apple.com/kb/HT213490',
-                'https://support.apple.com/kb/HT213491',
-                'https://support.apple.com/kb/HT213493',
-                'https://support.apple.com/kb/HT213494',
-                'https://ubuntu.com/security/notices/USN-5570-1',
-                'https://ubuntu.com/security/notices/USN-5570-2',
-                'https://ubuntu.com/security/notices/USN-5573-1',
-                'https://ubuntu.com/security/notices/USN-6736-1',
-                'https://ubuntu.com/security/notices/USN-6736-2',
-                'https://www.cve.org/CVERecord?id=CVE-2022-37434',
-                'https://www.debian.org/security/2022/dsa-5218'
-              ],
-              'severity':   'CRITICAL',
-              'suppressed': false,
-              'title':      'zlib: heap-based buffer over-read and overflow in inflate() in inflate.c via a large gzip header extra field'
-            },
-            {
-              'cve':  'CVE-2018-25032',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'nvd': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '8.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-787'
-              ],
-              'description':   'zlib before 1.2.12 allows memory corruption when deflating (i.e., when compressing) if the input has many distant matches.',
-              'diffID':        'sha256:485f8c9dc046cf00979700893b6a61591141a45fd7740b7b8ece1ab7ca4df9a7',
-              'fixedVersions': [
-                '1.2.12-r0'
-              ],
-              'installedVersion': '1.2.11-r3',
-              'packageName':      'zlib',
-              'purl':             'pkg:apk/alpine/zlib@1.2.11-r3?arch=armv7&distro=3.14.2',
-              'references':       [
-                'http://seclists.org/fulldisclosure/2022/May/33',
-                'http://seclists.org/fulldisclosure/2022/May/35',
-                'http://seclists.org/fulldisclosure/2022/May/38',
-                'http://www.openwall.com/lists/oss-security/2022/03/25/2',
-                'http://www.openwall.com/lists/oss-security/2022/03/26/1',
-                'https://access.redhat.com/errata/RHSA-2022:8420',
-                'https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-25032.json',
-                'https://access.redhat.com/security/cve/CVE-2018-25032',
-                'https://bugzilla.redhat.com/2067945',
-                'https://cert-portal.siemens.com/productcert/pdf/ssa-333517.pdf',
-                'https://errata.almalinux.org/9/ALSA-2022-8420.html',
-                'https://github.com/advisories/GHSA-jc36-42cf-vqwj',
-                'https://github.com/madler/zlib/commit/5c44459c3b28a9bd3283aaceab7c615f8020c531',
-                'https://github.com/madler/zlib/compare/v1.2.11...v1.2.12',
-                'https://github.com/madler/zlib/issues/605',
-                'https://github.com/rubysec/ruby-advisory-db/blob/master/gems/nokogiri/CVE-2018-25032.yml',
-                'https://github.com/sparklemotion/nokogiri/releases/tag/v1.13.4',
-                'https://github.com/sparklemotion/nokogiri/security/advisories/GHSA-v6gp-9mmm-c6p5',
-                'https://groups.google.com/g/ruby-security-ann/c/vX7qSjsvWis/m/TJWN4oOKBwAJ',
-                'https://linux.oracle.com/cve/CVE-2018-25032.html',
-                'https://linux.oracle.com/errata/ELSA-2022-9565.html',
-                'https://lists.debian.org/debian-lts-announce/2022/04/msg00000.html',
-                'https://lists.debian.org/debian-lts-announce/2022/05/msg00008.html',
-                'https://lists.debian.org/debian-lts-announce/2022/09/msg00023.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DCZFIJBJTZ7CL5QXBFKTQ22Q26VINRUF/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DF62MVMH3QUGMBDCB3DY2ERQ6EBHTADB/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JZZPTWRYQULAOL3AW7RZJNVZ2UONXCV4/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NS2D2GFPFGOJUL4WQ3DUAY7HF4VWQ77F/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VOKNP2L734AEL47NRYGVZIKEFOUBQY5Y/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/XOKFMSNQ5D5WGMALBNBXU3GE442V74WU/',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/DCZFIJBJTZ7CL5QXBFKTQ22Q26VINRUF',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/DCZFIJBJTZ7CL5QXBFKTQ22Q26VINRUF/',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/DF62MVMH3QUGMBDCB3DY2ERQ6EBHTADB',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/DF62MVMH3QUGMBDCB3DY2ERQ6EBHTADB/',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/JZZPTWRYQULAOL3AW7RZJNVZ2UONXCV4',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/JZZPTWRYQULAOL3AW7RZJNVZ2UONXCV4/',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/NS2D2GFPFGOJUL4WQ3DUAY7HF4VWQ77F',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/NS2D2GFPFGOJUL4WQ3DUAY7HF4VWQ77F/',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/VOKNP2L734AEL47NRYGVZIKEFOUBQY5Y',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/VOKNP2L734AEL47NRYGVZIKEFOUBQY5Y/',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/XOKFMSNQ5D5WGMALBNBXU3GE442V74WU',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/XOKFMSNQ5D5WGMALBNBXU3GE442V74WU/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2018-25032',
-                'https://security.gentoo.org/glsa/202210-42',
-                'https://security.netapp.com/advisory/ntap-20220526-0009',
-                'https://security.netapp.com/advisory/ntap-20220526-0009/',
-                'https://security.netapp.com/advisory/ntap-20220729-0004',
-                'https://security.netapp.com/advisory/ntap-20220729-0004/',
-                'https://support.apple.com/kb/HT213255',
-                'https://support.apple.com/kb/HT213256',
-                'https://support.apple.com/kb/HT213257',
-                'https://ubuntu.com/security/notices/USN-5355-1',
-                'https://ubuntu.com/security/notices/USN-5355-2',
-                'https://ubuntu.com/security/notices/USN-5359-1',
-                'https://ubuntu.com/security/notices/USN-5359-2',
-                'https://ubuntu.com/security/notices/USN-5739-1',
-                'https://ubuntu.com/security/notices/USN-6736-1',
-                'https://ubuntu.com/security/notices/USN-6736-2',
-                'https://www.cve.org/CVERecord?id=CVE-2018-25032',
-                'https://www.debian.org/security/2022/dsa-5111',
-                'https://www.openwall.com/lists/oss-security/2022/03/24/1',
-                'https://www.openwall.com/lists/oss-security/2022/03/28/1',
-                'https://www.openwall.com/lists/oss-security/2022/03/28/3',
-                'https://www.oracle.com/security-alerts/cpujul2022.html'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'zlib: A flaw found in zlib when compressing (not decompressing) certain inputs'
-            }
-          ]
-        }
-      ],
-      'summary': {
-        'critical':   1,
-        'high':       32,
-        'low':        0,
-        'medium':     10,
-        'suppressed': 0,
-        'unknown':    0
-      }
-    }
-  },
-  {
-    'id':    'default/8b1cf68023e9aaf42b268d29e608da55d9d36de22c9196b3331c5a4714ad145d',
-    'type':  'storage.sbomscanner.kubewarden.io.vulnerabilityreport',
-    'links': {
-      'patch':  'https://localhost:8005/v1/storage.sbomscanner.kubewarden.io.vulnerabilityreports/default/8b1cf68023e9aaf42b268d29e608da55d9d36de22c9196b3331c5a4714ad145d',
-      'remove': 'https://localhost:8005/v1/storage.sbomscanner.kubewarden.io.vulnerabilityreports/default/8b1cf68023e9aaf42b268d29e608da55d9d36de22c9196b3331c5a4714ad145d',
-      'self':   'https://localhost:8005/v1/storage.sbomscanner.kubewarden.io.vulnerabilityreports/default/8b1cf68023e9aaf42b268d29e608da55d9d36de22c9196b3331c5a4714ad145d',
-      'update': 'https://localhost:8005/v1/storage.sbomscanner.kubewarden.io.vulnerabilityreports/default/8b1cf68023e9aaf42b268d29e608da55d9d36de22c9196b3331c5a4714ad145d',
-      'view':   'https://localhost:8005/apis/storage.sbomscanner.kubewarden.io/v1alpha1/namespaces/default/vulnerabilityreports/8b1cf68023e9aaf42b268d29e608da55d9d36de22c9196b3331c5a4714ad145d'
-    },
-    'apiVersion':    'storage.sbomscanner.kubewarden.io/v1alpha1',
-    'imageMetadata': {
-      'digest':      'sha256:f29c3d10359dd0e6d0c11e4f715735b678c0ab03a7ac4565b4b6c08980f6213b',
-      'platform':    'linux/arm/v6',
-      'registry':    'lsong-demo1',
-      'registryURI': 'registry-1.docker.io',
-      'repository':  'library/alpine',
-      'tag':         '3.8.4'
-    },
-    'kind':     'VulnerabilityReport',
-    'metadata': {
-      'creationTimestamp': '2026-01-14T18:51:48Z',
-      'fields':            [
-        '8b1cf68023e9aaf42b268d29e608da55d9d36de22c9196b3331c5a4714ad145d',
-        'registry-1.docker.io/library/alpine:3.8.4',
-        'linux/arm/v6',
-        '2 (0 suppressed)'
-      ],
-      'labels': {
-        'app.kubernetes.io/managed-by':          'sbomscanner',
-        'app.kubernetes.io/part-of':             'sbomscanner',
-        'sbomscanner.kubewarden.io/scanjob-uid': '445c600a-c4b6-40b3-bd71-f2d2140a37d5'
-      },
-      'name':            '8b1cf68023e9aaf42b268d29e608da55d9d36de22c9196b3331c5a4714ad145d',
-      'namespace':       'default',
-      'ownerReferences': [
-        {
-          'apiVersion':         'storage.sbomscanner.kubewarden.io/v1alpha1',
-          'blockOwnerDeletion': true,
-          'controller':         true,
-          'kind':               'SBOM',
-          'name':               '8b1cf68023e9aaf42b268d29e608da55d9d36de22c9196b3331c5a4714ad145d',
-          'uid':                '68a637f9-7c18-420d-8c8c-1131ae486654'
-        }
-      ],
-      'relationships': [
-        {
-          'fromId':   'default/8b1cf68023e9aaf42b268d29e608da55d9d36de22c9196b3331c5a4714ad145d',
-          'fromType': 'storage.sbomscanner.kubewarden.io.sbom',
-          'rel':      'owner',
-          'state':    'active',
-          'message':  'Resource is current'
-        }
-      ],
-      'resourceVersion': '1',
-      'state':           {
-        'error':         false,
-        'message':       'Resource is current',
-        'name':          'active',
-        'transitioning': false
-      },
-      'uid': 'ebdeb64f-556a-4811-af16-18a5b0964a26'
-    },
-    'report': {
-      'results': [
-        {
-          'class':           'os-pkgs',
-          'target':          '/var/run/worker/trivy.sbom.1818071760.json (alpine 3.8.4)',
-          'type':            'alpine',
-          'vulnerabilities': [
-            {
-              'cve':  'CVE-2019-14697',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '9.8',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-787'
-              ],
-              'description':   "musl libc through 1.1.23 has an x87 floating-point stack adjustment imbalance, related to the math/i386/ directory. In some cases, use of this library could introduce out-of-bounds writes that are not present in an application's source code.",
-              'diffID':        'sha256:5826482cf200371de3cf495d43ba8e97e2a751c56713b7b2bcdae49f08effa51',
-              'fixedVersions': [
-                '1.1.19-r11'
-              ],
-              'installedVersion': '1.1.19-r10',
-              'packageName':      'musl',
-              'purl':             'pkg:apk/alpine/musl@1.1.19-r10?arch=armhf&distro=3.8.4',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2019/08/06/4',
-                'https://git.musl-libc.org/cgit/musl/patch/?id=6818c31c9bc4bbad5357f1de14bedf781e5b349e',
-                'https://git.musl-libc.org/cgit/musl/patch/?id=f3ed8bfe8a82af1870ddc8696ed4cc1d5aa6b441',
-                'https://security.gentoo.org/glsa/202003-13',
-                'https://ubuntu.com/security/notices/USN-5990-1',
-                'https://www.cve.org/CVERecord?id=CVE-2019-14697',
-                'https://www.openwall.com/lists/musl/2019/08/06/1',
-                'https://www.openwall.com/lists/oss-security/2019/08/06/1'
-              ],
-              'severity':   'CRITICAL',
-              'suppressed': false,
-              'title':      'musl libc through 1.1.23 has an x87 floating-point stack adjustment im ...'
-            },
-            {
-              'cve':  'CVE-2019-14697',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '9.8',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-787'
-              ],
-              'description':   "musl libc through 1.1.23 has an x87 floating-point stack adjustment imbalance, related to the math/i386/ directory. In some cases, use of this library could introduce out-of-bounds writes that are not present in an application's source code.",
-              'diffID':        'sha256:5826482cf200371de3cf495d43ba8e97e2a751c56713b7b2bcdae49f08effa51',
-              'fixedVersions': [
-                '1.1.19-r11'
-              ],
-              'installedVersion': '1.1.19-r10',
-              'packageName':      'musl-utils',
-              'purl':             'pkg:apk/alpine/musl-utils@1.1.19-r10?arch=armhf&distro=3.8.4',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2019/08/06/4',
-                'https://git.musl-libc.org/cgit/musl/patch/?id=6818c31c9bc4bbad5357f1de14bedf781e5b349e',
-                'https://git.musl-libc.org/cgit/musl/patch/?id=f3ed8bfe8a82af1870ddc8696ed4cc1d5aa6b441',
-                'https://security.gentoo.org/glsa/202003-13',
-                'https://ubuntu.com/security/notices/USN-5990-1',
-                'https://www.cve.org/CVERecord?id=CVE-2019-14697',
-                'https://www.openwall.com/lists/musl/2019/08/06/1',
-                'https://www.openwall.com/lists/oss-security/2019/08/06/1'
-              ],
-              'severity':   'CRITICAL',
-              'suppressed': false,
-              'title':      'musl libc through 1.1.23 has an x87 floating-point stack adjustment im ...'
-            }
-          ]
-        }
-      ],
-      'summary': {
-        'critical':   2,
-        'high':       0,
-        'low':        0,
-        'medium':     0,
-        'suppressed': 0,
-        'unknown':    0
-      }
-    }
-  },
-  {
-    'id':    'default/8b32daadfbc5c0c29eefabac6c87af3af4173deecca72314a0a15108f0b9321d',
-    'type':  'storage.sbomscanner.kubewarden.io.vulnerabilityreport',
-    'links': {
-      'patch':  'https://localhost:8005/v1/storage.sbomscanner.kubewarden.io.vulnerabilityreports/default/8b32daadfbc5c0c29eefabac6c87af3af4173deecca72314a0a15108f0b9321d',
-      'remove': 'https://localhost:8005/v1/storage.sbomscanner.kubewarden.io.vulnerabilityreports/default/8b32daadfbc5c0c29eefabac6c87af3af4173deecca72314a0a15108f0b9321d',
-      'self':   'https://localhost:8005/v1/storage.sbomscanner.kubewarden.io.vulnerabilityreports/default/8b32daadfbc5c0c29eefabac6c87af3af4173deecca72314a0a15108f0b9321d',
-      'update': 'https://localhost:8005/v1/storage.sbomscanner.kubewarden.io.vulnerabilityreports/default/8b32daadfbc5c0c29eefabac6c87af3af4173deecca72314a0a15108f0b9321d',
-      'view':   'https://localhost:8005/apis/storage.sbomscanner.kubewarden.io/v1alpha1/namespaces/default/vulnerabilityreports/8b32daadfbc5c0c29eefabac6c87af3af4173deecca72314a0a15108f0b9321d'
-    },
-    'apiVersion':    'storage.sbomscanner.kubewarden.io/v1alpha1',
-    'imageMetadata': {
-      'digest':      'sha256:a77adef9f69751add61080617e15e67aba9aa7a5fd5414b9fae84143210ee0ad',
-      'platform':    'linux/386',
-      'registry':    'lsong-demo1',
-      'registryURI': 'registry-1.docker.io',
-      'repository':  'library/alpine',
-      'tag':         '3.14.2'
-    },
-    'kind':     'VulnerabilityReport',
-    'metadata': {
-      'creationTimestamp': '2026-01-14T15:47:31Z',
-      'fields':            [
-        '8b32daadfbc5c0c29eefabac6c87af3af4173deecca72314a0a15108f0b9321d',
-        'registry-1.docker.io/library/alpine:3.14.2',
-        'linux/386',
-        '43 (0 suppressed)'
-      ],
-      'labels': {
-        'app.kubernetes.io/managed-by':          'sbomscanner',
-        'app.kubernetes.io/part-of':             'sbomscanner',
-        'sbomscanner.kubewarden.io/scanjob-uid': '445c600a-c4b6-40b3-bd71-f2d2140a37d5'
-      },
-      'name':            '8b32daadfbc5c0c29eefabac6c87af3af4173deecca72314a0a15108f0b9321d',
-      'namespace':       'default',
-      'ownerReferences': [
-        {
-          'apiVersion':         'storage.sbomscanner.kubewarden.io/v1alpha1',
-          'blockOwnerDeletion': true,
-          'controller':         true,
-          'kind':               'SBOM',
-          'name':               '8b32daadfbc5c0c29eefabac6c87af3af4173deecca72314a0a15108f0b9321d',
-          'uid':                '1275ae9a-2376-481e-a5b6-0c60b5ba1640'
-        }
-      ],
-      'relationships': [
-        {
-          'fromId':   'default/8b32daadfbc5c0c29eefabac6c87af3af4173deecca72314a0a15108f0b9321d',
-          'fromType': 'storage.sbomscanner.kubewarden.io.sbom',
-          'rel':      'owner',
-          'state':    'active',
-          'message':  'Resource is current'
-        }
-      ],
-      'resourceVersion': '2',
-      'state':           {
-        'error':         false,
-        'message':       'Resource is current',
-        'name':          'active',
-        'transitioning': false
-      },
-      'uid': 'ba9a7b58-171a-4dc4-ae7a-4d3daf434fb7'
-    },
-    'report': {
-      'results': [
-        {
-          'class':           'os-pkgs',
-          'target':          '/var/run/worker/trivy.sbom.1257315196.json (alpine 3.14.2)',
-          'type':            'alpine',
-          'vulnerabilities': [
-            {
-              'cve':  'CVE-2021-42378',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the getvar_i function",
-              'diffID':        'sha256:c2605d50d001aac8d63e371109f1d75918ab3c7d1d537b8f003afd5c718cbeb0',
-              'fixedVersions': [
-                '1.33.1-r6'
-              ],
-              'installedVersion': '1.33.1-r3',
-              'packageName':      'busybox',
-              'purl':             'pkg:apk/alpine/busybox@1.33.1-r3?arch=x86&distro=3.14.2',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42378',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42378',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42378'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the getvar_i()'
-            },
-            {
-              'cve':  'CVE-2021-42379',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the next_input_file function",
-              'diffID':        'sha256:c2605d50d001aac8d63e371109f1d75918ab3c7d1d537b8f003afd5c718cbeb0',
-              'fixedVersions': [
-                '1.33.1-r6'
-              ],
-              'installedVersion': '1.33.1-r3',
-              'packageName':      'busybox',
-              'purl':             'pkg:apk/alpine/busybox@1.33.1-r3?arch=x86&distro=3.14.2',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42379',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42379',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42379'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the next_input_file()'
-            },
-            {
-              'cve':  'CVE-2021-42380',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the clrvar function",
-              'diffID':        'sha256:c2605d50d001aac8d63e371109f1d75918ab3c7d1d537b8f003afd5c718cbeb0',
-              'fixedVersions': [
-                '1.33.1-r6'
-              ],
-              'installedVersion': '1.33.1-r3',
-              'packageName':      'busybox',
-              'purl':             'pkg:apk/alpine/busybox@1.33.1-r3?arch=x86&distro=3.14.2',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42380',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42380',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42380'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the clrvar()'
-            },
-            {
-              'cve':  'CVE-2021-42381',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the hash_init function",
-              'diffID':        'sha256:c2605d50d001aac8d63e371109f1d75918ab3c7d1d537b8f003afd5c718cbeb0',
-              'fixedVersions': [
-                '1.33.1-r6'
-              ],
-              'installedVersion': '1.33.1-r3',
-              'packageName':      'busybox',
-              'purl':             'pkg:apk/alpine/busybox@1.33.1-r3?arch=x86&distro=3.14.2',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42381',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42381',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42381'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the hash_init()'
-            },
-            {
-              'cve':  'CVE-2021-42382',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the getvar_s function",
-              'diffID':        'sha256:c2605d50d001aac8d63e371109f1d75918ab3c7d1d537b8f003afd5c718cbeb0',
-              'fixedVersions': [
-                '1.33.1-r6'
-              ],
-              'installedVersion': '1.33.1-r3',
-              'packageName':      'busybox',
-              'purl':             'pkg:apk/alpine/busybox@1.33.1-r3?arch=x86&distro=3.14.2',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42382',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42382',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42382'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the getvar_s()'
-            },
-            {
-              'cve':  'CVE-2021-42383',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the evaluate function",
-              'diffID':        'sha256:c2605d50d001aac8d63e371109f1d75918ab3c7d1d537b8f003afd5c718cbeb0',
-              'fixedVersions': [
-                '1.33.1-r6'
-              ],
-              'installedVersion': '1.33.1-r3',
-              'packageName':      'busybox',
-              'purl':             'pkg:apk/alpine/busybox@1.33.1-r3?arch=x86&distro=3.14.2',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42383',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42383',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42383'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the evaluate()'
-            },
-            {
-              'cve':  'CVE-2021-42384',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the handle_special function",
-              'diffID':        'sha256:c2605d50d001aac8d63e371109f1d75918ab3c7d1d537b8f003afd5c718cbeb0',
-              'fixedVersions': [
-                '1.33.1-r6'
-              ],
-              'installedVersion': '1.33.1-r3',
-              'packageName':      'busybox',
-              'purl':             'pkg:apk/alpine/busybox@1.33.1-r3?arch=x86&distro=3.14.2',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42384',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42384',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42384'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the handle_special()'
-            },
-            {
-              'cve':  'CVE-2021-42385',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the evaluate function",
-              'diffID':        'sha256:c2605d50d001aac8d63e371109f1d75918ab3c7d1d537b8f003afd5c718cbeb0',
-              'fixedVersions': [
-                '1.33.1-r6'
-              ],
-              'installedVersion': '1.33.1-r3',
-              'packageName':      'busybox',
-              'purl':             'pkg:apk/alpine/busybox@1.33.1-r3?arch=x86&distro=3.14.2',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42385',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42385',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42385'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the evaluate()'
-            },
-            {
-              'cve':  'CVE-2021-42386',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the nvalloc function",
-              'diffID':        'sha256:c2605d50d001aac8d63e371109f1d75918ab3c7d1d537b8f003afd5c718cbeb0',
-              'fixedVersions': [
-                '1.33.1-r6'
-              ],
-              'installedVersion': '1.33.1-r3',
-              'packageName':      'busybox',
-              'purl':             'pkg:apk/alpine/busybox@1.33.1-r3?arch=x86&distro=3.14.2',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42386',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42386',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42386'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the nvalloc()'
-            },
-            {
-              'cve':  'CVE-2022-28391',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '8.8',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-88'
-              ],
-              'description':   "BusyBox through 1.35.0 allows remote attackers to execute arbitrary code if netstat is used to print a DNS PTR record's value to a VT compatible terminal. Alternatively, the attacker could choose to change the terminal's colors.",
-              'diffID':        'sha256:c2605d50d001aac8d63e371109f1d75918ab3c7d1d537b8f003afd5c718cbeb0',
-              'fixedVersions': [
-                '1.33.1-r7'
-              ],
-              'installedVersion': '1.33.1-r3',
-              'packageName':      'busybox',
-              'purl':             'pkg:apk/alpine/busybox@1.33.1-r3?arch=x86&distro=3.14.2',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2022-28391',
-                'https://git.alpinelinux.org/aports/plain/main/busybox/0001-libbb-sockaddr2str-ensure-only-printable-characters-.patch',
-                'https://git.alpinelinux.org/aports/plain/main/busybox/0002-nslookup-sanitize-all-printed-strings-with-printable.patch',
-                'https://gitlab.alpinelinux.org/alpine/aports/-/issues/13661',
-                'https://nvd.nist.gov/vuln/detail/CVE-2022-28391',
-                'https://www.cve.org/CVERecord?id=CVE-2022-28391'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: remote attackers may execute arbitrary code if netstat is used'
-            },
-            {
-              'cve':  'CVE-2021-42374',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '5.7',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-125'
-              ],
-              'description':   "An out-of-bounds heap read in Busybox's unlzma applet leads to information leak and denial of service when crafted LZMA-compressed input is decompressed. This can be triggered by any applet/format that",
-              'diffID':        'sha256:c2605d50d001aac8d63e371109f1d75918ab3c7d1d537b8f003afd5c718cbeb0',
-              'fixedVersions': [
-                '1.33.1-r4'
-              ],
-              'installedVersion': '1.33.1-r3',
-              'packageName':      'busybox',
-              'purl':             'pkg:apk/alpine/busybox@1.33.1-r3?arch=x86&distro=3.14.2',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42374',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42374',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42374'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'busybox: out-of-bounds read in unlzma applet leads to information leak and denial of service when crafted LZMA-compressed input is decompressed'
-            },
-            {
-              'cve':  'CVE-2021-42375',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.5',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '4.1',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-159'
-              ],
-              'description':   "An incorrect handling of a special element in Busybox's ash applet leads to denial of service when processing a crafted shell command, due to the shell mistaking specific characters for reserved characters. This may be used for DoS under rare conditions of filtered command input.",
-              'diffID':        'sha256:c2605d50d001aac8d63e371109f1d75918ab3c7d1d537b8f003afd5c718cbeb0',
-              'fixedVersions': [
-                '1.33.1-r5'
-              ],
-              'installedVersion': '1.33.1-r3',
-              'packageName':      'busybox',
-              'purl':             'pkg:apk/alpine/busybox@1.33.1-r3?arch=x86&distro=3.14.2',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42375',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42375',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42375'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'busybox: incorrect handling of a special element in ash applet leads to denial of service when processing a crafted shell command'
-            },
-            {
-              'cve':  'CVE-2022-0778',
-              'cvss': {
-                'bitnami': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'ghsa': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'nvd': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-835'
-              ],
-              'description':   'The BN_mod_sqrt() function, which computes a modular square root, contains a bug that can cause it to loop forever for non-prime moduli. Internally this function is used when parsing certificates that contain elliptic curve public keys in compressed form or explicit elliptic curve parameters with a base point encoded in compressed form. It is possible to trigger the infinite loop by crafting a certificate that has invalid explicit curve parameters. Since certificate parsing happens prior to verification of the certificate signature, any process that parses an externally supplied certificate may thus be subject to a denial of service attack. The infinite loop can also be reached when parsing crafted private keys as they can contain explicit elliptic curve parameters. Thus vulnerable situations include: - TLS clients consuming server certificates - TLS servers consuming client certificates - Hosting providers taking certificates or private keys from customers - Certificate authorities parsing certification requests from subscribers - Anything else which parses ASN.1 elliptic curve parameters Also any other applications that use the BN_mod_sqrt() where the attacker can control the parameter values are vulnerable to this DoS issue. In the OpenSSL 1.0.2 version the public key is not parsed during initial parsing of the certificate which makes it slightly harder to trigger the infinite loop. However any operation which requires the public key from the certificate will trigger the infinite loop. In particular the attacker can use a self-signed certificate to trigger the loop during verification of the certificate signature. This issue affects OpenSSL versions 1.0.2, 1.1.1 and 3.0. It was addressed in the releases of 1.1.1n and 3.0.2 on the 15th March 2022. Fixed in OpenSSL 3.0.2 (Affected 3.0.0,3.0.1). Fixed in OpenSSL 1.1.1n (Affected 1.1.1-1.1.1m). Fixed in OpenSSL 1.0.2zd (Affected 1.0.2-1.0.2zc).',
-              'diffID':        'sha256:c2605d50d001aac8d63e371109f1d75918ab3c7d1d537b8f003afd5c718cbeb0',
-              'fixedVersions': [
-                '1.1.1n-r0'
-              ],
-              'installedVersion': '1.1.1l-r0',
-              'packageName':      'libcrypto1.1',
-              'purl':             'pkg:apk/alpine/libcrypto1.1@1.1.1l-r0?arch=x86&distro=3.14.2',
-              'references':       [
-                'http://packetstormsecurity.com/files/167344/OpenSSL-1.0.2-1.1.1-3.0-BN_mod_sqrt-Infinite-Loop.html',
-                'http://seclists.org/fulldisclosure/2022/May/33',
-                'http://seclists.org/fulldisclosure/2022/May/35',
-                'http://seclists.org/fulldisclosure/2022/May/38',
-                'https://access.redhat.com/errata/RHSA-2022:5326',
-                'https://access.redhat.com/security/cve/CVE-2022-0778',
-                'https://bugzilla.redhat.com/2062202',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2062202',
-                'https://cert-portal.siemens.com/productcert/pdf/ssa-712929.pdf',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-0778',
-                'https://errata.almalinux.org/8/ALSA-2022-5326.html',
-                'https://errata.rockylinux.org/RLSA-2022:4899',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=3118eb64934499d93db3230748a452351d1d9a65',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=380085481c64de749a6dd25cdf0bcf4360b30f83',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=a466912611aa6cbdf550cd10601390e587451246',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=3118eb64934499d93db3230748a452351d1d9a65',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=380085481c64de749a6dd25cdf0bcf4360b30f83',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=a466912611aa6cbdf550cd10601390e587451246',
-                'https://linux.oracle.com/cve/CVE-2022-0778.html',
-                'https://linux.oracle.com/errata/ELSA-2022-9272.html',
-                'https://lists.debian.org/debian-lts-announce/2022/03/msg00023.html',
-                'https://lists.debian.org/debian-lts-announce/2022/03/msg00024.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/323SNN6ZX7PRJJWP2BUAFLPUAE42XWLZ',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/323SNN6ZX7PRJJWP2BUAFLPUAE42XWLZ/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GDB3GQVJPXJE7X5C5JN6JAA4XUDWD6E6',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GDB3GQVJPXJE7X5C5JN6JAA4XUDWD6E6/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/W6K3PR542DXWLEFFMFIDMME4CWMHJRMG',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/W6K3PR542DXWLEFFMFIDMME4CWMHJRMG/',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/323SNN6ZX7PRJJWP2BUAFLPUAE42XWLZ',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/GDB3GQVJPXJE7X5C5JN6JAA4XUDWD6E6',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/W6K3PR542DXWLEFFMFIDMME4CWMHJRMG',
-                'https://nvd.nist.gov/vuln/detail/CVE-2022-0778',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2022-0002',
-                'https://rustsec.org/advisories/RUSTSEC-2022-0014.html',
-                'https://security.gentoo.org/glsa/202210-02',
-                'https://security.netapp.com/advisory/ntap-20220321-0002',
-                'https://security.netapp.com/advisory/ntap-20220321-0002/',
-                'https://security.netapp.com/advisory/ntap-20220429-0005',
-                'https://security.netapp.com/advisory/ntap-20220429-0005/',
-                'https://security.netapp.com/advisory/ntap-20240621-0006',
-                'https://security.netapp.com/advisory/ntap-20240621-0006/',
-                'https://support.apple.com/kb/HT213255',
-                'https://support.apple.com/kb/HT213256',
-                'https://support.apple.com/kb/HT213257',
-                'https://ubuntu.com/security/notices/USN-5328-1',
-                'https://ubuntu.com/security/notices/USN-5328-2',
-                'https://ubuntu.com/security/notices/USN-6457-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2022-0778',
-                'https://www.debian.org/security/2022/dsa-5103',
-                'https://www.openssl.org/news/secadv/20220315.txt',
-                'https://www.oracle.com/security-alerts/cpuapr2022.html',
-                'https://www.oracle.com/security-alerts/cpujul2022.html',
-                'https://www.tenable.com/security/tns-2022-06',
-                'https://www.tenable.com/security/tns-2022-07',
-                'https://www.tenable.com/security/tns-2022-08',
-                'https://www.tenable.com/security/tns-2022-09'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: Infinite loop in BN_mod_sqrt() reachable when parsing certificates'
-            },
-            {
-              'cve':  'CVE-2022-4450',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'nvd': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-415'
-              ],
-              'description':   'The function PEM_read_bio_ex() reads a PEM file from a BIO and parses and\ndecodes the "name" (e.g. "CERTIFICATE"), any header data and the payload data.\nIf the function succeeds then the "name_out", "header" and "data" arguments are\npopulated with pointers to buffers containing the relevant decoded data. The\ncaller is responsible for freeing those buffers. It is possible to construct a\nPEM file that results in 0 bytes of payload data. In this case PEM_read_bio_ex()\nwill return a failure code but will populate the header argument with a pointer\nto a buffer that has already been freed. If the caller also frees this buffer\nthen a double free will occur. This will most likely lead to a crash. This\ncould be exploited by an attacker who has the ability to supply malicious PEM\nfiles for parsing to achieve a denial of service attack.\n\nThe functions PEM_read_bio() and PEM_read() are simple wrappers around\nPEM_read_bio_ex() and therefore these functions are also directly affected.\n\nThese functions are also called indirectly by a number of other OpenSSL\nfunctions including PEM_X509_INFO_read_bio_ex() and\nSSL_CTX_use_serverinfo_file() which are also vulnerable. Some OpenSSL internal\nuses of these functions are not vulnerable because the caller does not free the\nheader argument if PEM_read_bio_ex() returns a failure code. These locations\ninclude the PEM_read_bio_TYPE() functions as well as the decoders introduced in\nOpenSSL 3.0.\n\nThe OpenSSL asn1parse command line application is also impacted by this issue.',
-              'diffID':        'sha256:c2605d50d001aac8d63e371109f1d75918ab3c7d1d537b8f003afd5c718cbeb0',
-              'fixedVersions': [
-                '1.1.1t-r0'
-              ],
-              'installedVersion': '1.1.1l-r0',
-              'packageName':      'libcrypto1.1',
-              'purl':             'pkg:apk/alpine/libcrypto1.1@1.1.1l-r0?arch=x86&distro=3.14.2',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2023:2165',
-                'https://access.redhat.com/security/cve/CVE-2022-4450',
-                'https://bugzilla.redhat.com/1960321',
-                'https://bugzilla.redhat.com/2164440',
-                'https://bugzilla.redhat.com/2164487',
-                'https://bugzilla.redhat.com/2164492',
-                'https://bugzilla.redhat.com/2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144000',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144003',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144006',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144008',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144010',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144012',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144015',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144017',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144019',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2145170',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2158412',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164440',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164487',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164488',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164492',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164497',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164499',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164500',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4203',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4304',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4450',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0215',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0216',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0217',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0286',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0401',
-                'https://errata.almalinux.org/9/ALSA-2023-2165.html',
-                'https://errata.rockylinux.org/RLSA-2023:0946',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=63bcf189be73a9cc1264059bed6f57974be74a83',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=bbcf509bd046b34cca19c766bbddc31683d0858b',
-                'https://linux.oracle.com/cve/CVE-2022-4450.html',
-                'https://linux.oracle.com/errata/ELSA-2023-32791.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2022-4450',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0003',
-                'https://rustsec.org/advisories/RUSTSEC-2023-0010.html',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://ubuntu.com/security/notices/USN-5844-1',
-                'https://ubuntu.com/security/notices/USN-6564-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2022-4450',
-                'https://www.openssl.org/news/secadv/20230207.txt'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: double free after calling PEM_read_bio_ex'
-            },
-            {
-              'cve':  'CVE-2023-0215',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'nvd': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   'The public API function BIO_new_NDEF is a helper function used for streaming\nASN.1 data via a BIO. It is primarily used internally to OpenSSL to support the\nSMIME, CMS and PKCS7 streaming capabilities, but may also be called directly by\nend user applications.\n\nThe function receives a BIO from the caller, prepends a new BIO_f_asn1 filter\nBIO onto the front of it to form a BIO chain, and then returns the new head of\nthe BIO chain to the caller. Under certain conditions, for example if a CMS\nrecipient public key is invalid, the new filter BIO is freed and the function\nreturns a NULL result indicating a failure. However, in this case, the BIO chain\nis not properly cleaned up and the BIO passed by the caller still retains\ninternal pointers to the previously freed filter BIO. If the caller then goes on\nto call BIO_pop() on the BIO then a use-after-free will occur. This will most\nlikely result in a crash.\n\n\n\nThis scenario occurs directly in the internal function B64_write_ASN1() which\nmay cause BIO_new_NDEF() to be called and will subsequently call BIO_pop() on\nthe BIO. This internal function is in turn called by the public API functions\nPEM_write_bio_ASN1_stream, PEM_write_bio_CMS_stream, PEM_write_bio_PKCS7_stream,\nSMIME_write_ASN1, SMIME_write_CMS and SMIME_write_PKCS7.\n\nOther public API functions that may be impacted by this include\ni2d_ASN1_bio_stream, BIO_new_CMS, BIO_new_PKCS7, i2d_CMS_bio_stream and\ni2d_PKCS7_bio_stream.\n\nThe OpenSSL cms and smime command line applications are similarly affected.',
-              'diffID':        'sha256:c2605d50d001aac8d63e371109f1d75918ab3c7d1d537b8f003afd5c718cbeb0',
-              'fixedVersions': [
-                '1.1.1t-r0'
-              ],
-              'installedVersion': '1.1.1l-r0',
-              'packageName':      'libcrypto1.1',
-              'purl':             'pkg:apk/alpine/libcrypto1.1@1.1.1l-r0?arch=x86&distro=3.14.2',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2023:2165',
-                'https://access.redhat.com/security/cve/CVE-2023-0215',
-                'https://bugzilla.redhat.com/1960321',
-                'https://bugzilla.redhat.com/2164440',
-                'https://bugzilla.redhat.com/2164487',
-                'https://bugzilla.redhat.com/2164492',
-                'https://bugzilla.redhat.com/2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144000',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144003',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144006',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144008',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144010',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144012',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144015',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144017',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144019',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2145170',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2158412',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164440',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164487',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164488',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164492',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164497',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164499',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164500',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4203',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4304',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4450',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0215',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0216',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0217',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0286',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0401',
-                'https://errata.almalinux.org/9/ALSA-2023-2165.html',
-                'https://errata.rockylinux.org/RLSA-2023:0946',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=8818064ce3c3c0f1b740a5aaba2a987e75bfbafd',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=9816136fe31d92ace4037d5da5257f763aeeb4eb',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=c3829dd8825c654652201e16f8a0a0c46ee3f344',
-                'https://linux.oracle.com/cve/CVE-2023-0215.html',
-                'https://linux.oracle.com/errata/ELSA-2023-32791.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-0215',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0003',
-                'https://rustsec.org/advisories/RUSTSEC-2023-0009.html',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://security.netapp.com/advisory/ntap-20230427-0007',
-                'https://security.netapp.com/advisory/ntap-20230427-0007/',
-                'https://security.netapp.com/advisory/ntap-20230427-0009',
-                'https://security.netapp.com/advisory/ntap-20230427-0009/',
-                'https://security.netapp.com/advisory/ntap-20240621-0006',
-                'https://security.netapp.com/advisory/ntap-20240621-0006/',
-                'https://ubuntu.com/security/notices/USN-5844-1',
-                'https://ubuntu.com/security/notices/USN-5845-1',
-                'https://ubuntu.com/security/notices/USN-5845-2',
-                'https://ubuntu.com/security/notices/USN-6564-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-0215',
-                'https://www.openssl.org/news/secadv/20230207.txt'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: use-after-free following BIO_new_NDEF'
-            },
-            {
-              'cve':  'CVE-2023-0286',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '7.4',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H'
-                },
-                'nvd': {
-                  'v3score':  '7.4',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.4',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-843'
-              ],
-              'description':   'There is a type confusion vulnerability relating to X.400 address processing\ninside an X.509 GeneralName. X.400 addresses were parsed as an ASN1_STRING but\nthe public structure definition for GENERAL_NAME incorrectly specified the type\nof the x400Address field as ASN1_TYPE. This field is subsequently interpreted by\nthe OpenSSL function GENERAL_NAME_cmp as an ASN1_TYPE rather than an\nASN1_STRING.\n\nWhen CRL checking is enabled (i.e. the application sets the\nX509_V_FLAG_CRL_CHECK flag), this vulnerability may allow an attacker to pass\narbitrary pointers to a memcmp call, enabling them to read memory contents or\nenact a denial of service. In most cases, the attack requires the attacker to\nprovide both the certificate chain and CRL, neither of which need to have a\nvalid signature. If the attacker only controls one of these inputs, the other\ninput must already contain an X.400 address as a CRL distribution point, which\nis uncommon. As such, this vulnerability is most likely to only affect\napplications which have implemented their own functionality for retrieving CRLs\nover a network.',
-              'diffID':        'sha256:c2605d50d001aac8d63e371109f1d75918ab3c7d1d537b8f003afd5c718cbeb0',
-              'fixedVersions': [
-                '1.1.1t-r0'
-              ],
-              'installedVersion': '1.1.1l-r0',
-              'packageName':      'libcrypto1.1',
-              'purl':             'pkg:apk/alpine/libcrypto1.1@1.1.1l-r0?arch=x86&distro=3.14.2',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2025:7937',
-                'https://access.redhat.com/security/cve/CVE-2023-0286',
-                'https://access.redhat.com/security/cve/cve-2023-0286',
-                'https://bugzilla.redhat.com/2164440',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144000',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144003',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144006',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144008',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144010',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144012',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144015',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144017',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144019',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2145170',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2158412',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164440',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164487',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164488',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164492',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164497',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164499',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164500',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4203',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4304',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4450',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0215',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0216',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0217',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0286',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0401',
-                'https://errata.almalinux.org/9/ALSA-2025-7937.html',
-                'https://errata.rockylinux.org/RLSA-2023:0946',
-                'https://ftp.openbsd.org/pub/OpenBSD/LibreSSL/libressl-3.6.2-relnotes.txt',
-                'https://ftp.openbsd.org/pub/OpenBSD/patches/7.2/common/018_x509.patch.sig',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=2c6c9d439b484e1ba9830d8454a34fa4f80fdfe9',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=2f7530077e0ef79d98718138716bc51ca0cad658',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=fd2af07dc083a350c959147097003a14a5e8ac4d',
-                'https://github.com/pyca/cryptography',
-                'https://github.com/pyca/cryptography/security/advisories/GHSA-x4qr-2fvf-3mr5',
-                'https://linux.oracle.com/cve/CVE-2023-0286.html',
-                'https://linux.oracle.com/errata/ELSA-2025-7937.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-0286',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0003',
-                'https://rustsec.org/advisories/RUSTSEC-2023-0006.html',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://ubuntu.com/security/notices/USN-5844-1',
-                'https://ubuntu.com/security/notices/USN-5845-1',
-                'https://ubuntu.com/security/notices/USN-5845-2',
-                'https://ubuntu.com/security/notices/USN-6564-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-0286',
-                'https://www.openssl.org/news/secadv/20230207.txt'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: X.400 address type confusion in X.509 GeneralName'
-            },
-            {
-              'cve':  'CVE-2023-0464',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-295'
-              ],
-              'description':   "A security vulnerability has been identified in all supported versions\n\nof OpenSSL related to the verification of X.509 certificate chains\nthat include policy constraints.  Attackers may be able to exploit this\nvulnerability by creating a malicious certificate chain that triggers\nexponential use of computational resources, leading to a denial-of-service\n(DoS) attack on affected systems.\n\nPolicy processing is disabled by default but can be enabled by passing\nthe `-policy' argument to the command line utilities or by calling the\n`X509_VERIFY_PARAM_set1_policies()' function.",
-              'diffID':        'sha256:c2605d50d001aac8d63e371109f1d75918ab3c7d1d537b8f003afd5c718cbeb0',
-              'fixedVersions': [
-                '1.1.1t-r1'
-              ],
-              'installedVersion': '1.1.1l-r0',
-              'packageName':      'libcrypto1.1',
-              'purl':             'pkg:apk/alpine/libcrypto1.1@1.1.1l-r0?arch=x86&distro=3.14.2',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2023:3722',
-                'https://access.redhat.com/security/cve/CVE-2023-0464',
-                'https://bugzilla.redhat.com/2181082',
-                'https://bugzilla.redhat.com/2182561',
-                'https://bugzilla.redhat.com/2182565',
-                'https://bugzilla.redhat.com/2188461',
-                'https://bugzilla.redhat.com/2207947',
-                'https://errata.almalinux.org/9/ALSA-2023-3722.html',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=2017771e2db3e2b96f89bbe8766c3209f6a99545',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=2dcd4f1e3115f38cefa43e3efbe9b801c27e642e',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=879f7080d7e141f415c79eaa3a8ac4a3dad0348b',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=959c59c7a0164117e7f8366466a32bb1f8d77ff1',
-                'https://linux.oracle.com/cve/CVE-2023-0464.html',
-                'https://linux.oracle.com/errata/ELSA-2023-3722.html',
-                'https://lists.debian.org/debian-lts-announce/2023/06/msg00011.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-0464',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://security.netapp.com/advisory/ntap-20230406-0006/',
-                'https://security.netapp.com/advisory/ntap-20240621-0006/',
-                'https://ubuntu.com/security/notices/USN-6039-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.couchbase.com/alerts/',
-                'https://www.cve.org/CVERecord?id=CVE-2023-0464',
-                'https://www.debian.org/security/2023/dsa-5417',
-                'https://www.openssl.org/news/secadv/20230322.txt'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: Denial of service by excessive resource usage in verifying X509 policy constraints'
-            },
-            {
-              'cve':  'CVE-2022-2097',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N'
-                },
-                'nvd': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N'
-                },
-                'redhat': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-327'
-              ],
-              'description':   "AES OCB mode for 32-bit x86 platforms using the AES-NI assembly optimised implementation will not encrypt the entirety of the data under some circumstances. This could reveal sixteen bytes of data that was preexisting in the memory that wasn't written. In the special case of \"in place\" encryption, sixteen bytes of the plaintext would be revealed. Since OpenSSL does not support OCB based cipher suites for TLS and DTLS, they are both unaffected. Fixed in OpenSSL 3.0.5 (Affected 3.0.0-3.0.4). Fixed in OpenSSL 1.1.1q (Affected 1.1.1-1.1.1p).",
-              'diffID':        'sha256:c2605d50d001aac8d63e371109f1d75918ab3c7d1d537b8f003afd5c718cbeb0',
-              'fixedVersions': [
-                '1.1.1q-r0'
-              ],
-              'installedVersion': '1.1.1l-r0',
-              'packageName':      'libcrypto1.1',
-              'purl':             'pkg:apk/alpine/libcrypto1.1@1.1.1l-r0?arch=x86&distro=3.14.2',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2022:6224',
-                'https://access.redhat.com/security/cve/CVE-2022-2097',
-                'https://bugzilla.redhat.com/2081494',
-                'https://bugzilla.redhat.com/2087911',
-                'https://bugzilla.redhat.com/2087913',
-                'https://bugzilla.redhat.com/2097310',
-                'https://bugzilla.redhat.com/2104905',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2081494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2097310',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2100554',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2104905',
-                'https://cert-portal.siemens.com/productcert/pdf/ssa-332410.pdf',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-1292',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-2068',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-2097',
-                'https://errata.almalinux.org/9/ALSA-2022-6224.html',
-                'https://errata.rockylinux.org/RLSA-2022:5818',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=919925673d6c9cfed3c1085497f5dfbbed5fc431',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=a98f339ddd7e8f487d6e0088d4a9a42324885a93',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=919925673d6c9cfed3c1085497f5dfbbed5fc431',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=a98f339ddd7e8f487d6e0088d4a9a42324885a93',
-                'https://github.com/alexcrichton/openssl-src-rs',
-                'https://linux.oracle.com/cve/CVE-2022-2097.html',
-                'https://linux.oracle.com/errata/ELSA-2022-9955.html',
-                'https://lists.debian.org/debian-lts-announce/2023/02/msg00019.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/R6CK57NBQFTPUMXAPJURCGXUYT76NQAK',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/R6CK57NBQFTPUMXAPJURCGXUYT76NQAK/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/V6567JERRHHJW2GNGJGKDRNHR7SNPZK7',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/V6567JERRHHJW2GNGJGKDRNHR7SNPZK7/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VCMNWKERPBKOEBNL7CLTTX3ZZCZLH7XA',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VCMNWKERPBKOEBNL7CLTTX3ZZCZLH7XA/',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/R6CK57NBQFTPUMXAPJURCGXUYT76NQAK',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/R6CK57NBQFTPUMXAPJURCGXUYT76NQAK/',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/V6567JERRHHJW2GNGJGKDRNHR7SNPZK7',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/V6567JERRHHJW2GNGJGKDRNHR7SNPZK7/',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/VCMNWKERPBKOEBNL7CLTTX3ZZCZLH7XA',
-                'https://nvd.nist.gov/vuln/detail/CVE-2022-2097',
-                'https://rustsec.org/advisories/RUSTSEC-2022-0032.html',
-                'https://security.gentoo.org/glsa/202210-02',
-                'https://security.netapp.com/advisory/ntap-20220715-0011',
-                'https://security.netapp.com/advisory/ntap-20220715-0011/',
-                'https://security.netapp.com/advisory/ntap-20230420-0008',
-                'https://security.netapp.com/advisory/ntap-20230420-0008/',
-                'https://security.netapp.com/advisory/ntap-20240621-0006',
-                'https://security.netapp.com/advisory/ntap-20240621-0006/',
-                'https://ubuntu.com/security/notices/USN-5502-1',
-                'https://ubuntu.com/security/notices/USN-6457-1',
-                'https://www.cve.org/CVERecord?id=CVE-2022-2097',
-                'https://www.debian.org/security/2023/dsa-5343',
-                'https://www.openssl.org/news/secadv/20220705.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: AES OCB fails to encrypt some bytes'
-            },
-            {
-              'cve':  'CVE-2022-4304',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N'
-                },
-                'nvd': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N'
-                },
-                'redhat': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-203'
-              ],
-              'description':   'A timing based side channel exists in the OpenSSL RSA Decryption implementation\nwhich could be sufficient to recover a plaintext across a network in a\nBleichenbacher style attack. To achieve a successful decryption an attacker\nwould have to be able to send a very large number of trial messages for\ndecryption. The vulnerability affects all RSA padding modes: PKCS#1 v1.5,\nRSA-OEAP and RSASVE.\n\nFor example, in a TLS connection, RSA is commonly used by a client to send an\nencrypted pre-master secret to the server. An attacker that had observed a\ngenuine connection between a client and a server could use this flaw to send\ntrial messages to the server and record the time taken to process them. After a\nsufficiently large number of messages the attacker could recover the pre-master\nsecret used for the original connection and thus be able to decrypt the\napplication data sent over that connection.',
-              'diffID':        'sha256:c2605d50d001aac8d63e371109f1d75918ab3c7d1d537b8f003afd5c718cbeb0',
-              'fixedVersions': [
-                '1.1.1t-r0'
-              ],
-              'installedVersion': '1.1.1l-r0',
-              'packageName':      'libcrypto1.1',
-              'purl':             'pkg:apk/alpine/libcrypto1.1@1.1.1l-r0?arch=x86&distro=3.14.2',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2023:2165',
-                'https://access.redhat.com/security/cve/CVE-2022-4304',
-                'https://bugzilla.redhat.com/1960321',
-                'https://bugzilla.redhat.com/2164440',
-                'https://bugzilla.redhat.com/2164487',
-                'https://bugzilla.redhat.com/2164492',
-                'https://bugzilla.redhat.com/2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144000',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144003',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144006',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144008',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144010',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144012',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144015',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144017',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144019',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2145170',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2158412',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164440',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164487',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164488',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164492',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164497',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164499',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164500',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4203',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4304',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4450',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0215',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0216',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0217',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0286',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0401',
-                'https://errata.almalinux.org/9/ALSA-2023-2165.html',
-                'https://errata.rockylinux.org/RLSA-2023:0946',
-                'https://linux.oracle.com/cve/CVE-2022-4304.html',
-                'https://linux.oracle.com/errata/ELSA-2023-32791.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2022-4304',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0003',
-                'https://rustsec.org/advisories/RUSTSEC-2023-0007.html',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://ubuntu.com/security/notices/USN-5844-1',
-                'https://ubuntu.com/security/notices/USN-6564-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2022-4304',
-                'https://www.openssl.org/news/secadv/20230207.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: timing attack in RSA Decryption implementation'
-            },
-            {
-              'cve':  'CVE-2023-0465',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N'
-                },
-                'redhat': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-295'
-              ],
-              'description':   "Applications that use a non-default option when verifying certificates may be\nvulnerable to an attack from a malicious CA to circumvent certain checks.\n\nInvalid certificate policies in leaf certificates are silently ignored by\nOpenSSL and other certificate policy checks are skipped for that certificate.\nA malicious CA could use this to deliberately assert invalid certificate policies\nin order to circumvent policy checking on the certificate altogether.\n\nPolicy processing is disabled by default but can be enabled by passing\nthe `-policy' argument to the command line utilities or by calling the\n`X509_VERIFY_PARAM_set1_policies()' function.",
-              'diffID':        'sha256:c2605d50d001aac8d63e371109f1d75918ab3c7d1d537b8f003afd5c718cbeb0',
-              'fixedVersions': [
-                '1.1.1t-r2'
-              ],
-              'installedVersion': '1.1.1l-r0',
-              'packageName':      'libcrypto1.1',
-              'purl':             'pkg:apk/alpine/libcrypto1.1@1.1.1l-r0?arch=x86&distro=3.14.2',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2023:3722',
-                'https://access.redhat.com/security/cve/CVE-2023-0465',
-                'https://bugzilla.redhat.com/2181082',
-                'https://bugzilla.redhat.com/2182561',
-                'https://bugzilla.redhat.com/2182565',
-                'https://bugzilla.redhat.com/2188461',
-                'https://bugzilla.redhat.com/2207947',
-                'https://errata.almalinux.org/9/ALSA-2023-3722.html',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=10325176f3d3e98c6e2b3bf5ab1e3b334de6947a',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=1dd43e0709fece299b15208f36cc7c76209ba0bb',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=b013765abfa80036dc779dd0e50602c57bb3bf95',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=facfb1ab745646e97a1920977ae4a9965ea61d5c',
-                'https://linux.oracle.com/cve/CVE-2023-0465.html',
-                'https://linux.oracle.com/errata/ELSA-2023-3722.html',
-                'https://lists.debian.org/debian-lts-announce/2023/06/msg00011.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-0465',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://security.netapp.com/advisory/ntap-20230414-0001/',
-                'https://ubuntu.com/security/notices/USN-6039-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-0465',
-                'https://www.debian.org/security/2023/dsa-5417',
-                'https://www.openssl.org/news/secadv/20230328.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: Invalid certificate policies in leaf certificates are silently ignored'
-            },
-            {
-              'cve':  'CVE-2022-0778',
-              'cvss': {
-                'bitnami': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'ghsa': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'nvd': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-835'
-              ],
-              'description':   'The BN_mod_sqrt() function, which computes a modular square root, contains a bug that can cause it to loop forever for non-prime moduli. Internally this function is used when parsing certificates that contain elliptic curve public keys in compressed form or explicit elliptic curve parameters with a base point encoded in compressed form. It is possible to trigger the infinite loop by crafting a certificate that has invalid explicit curve parameters. Since certificate parsing happens prior to verification of the certificate signature, any process that parses an externally supplied certificate may thus be subject to a denial of service attack. The infinite loop can also be reached when parsing crafted private keys as they can contain explicit elliptic curve parameters. Thus vulnerable situations include: - TLS clients consuming server certificates - TLS servers consuming client certificates - Hosting providers taking certificates or private keys from customers - Certificate authorities parsing certification requests from subscribers - Anything else which parses ASN.1 elliptic curve parameters Also any other applications that use the BN_mod_sqrt() where the attacker can control the parameter values are vulnerable to this DoS issue. In the OpenSSL 1.0.2 version the public key is not parsed during initial parsing of the certificate which makes it slightly harder to trigger the infinite loop. However any operation which requires the public key from the certificate will trigger the infinite loop. In particular the attacker can use a self-signed certificate to trigger the loop during verification of the certificate signature. This issue affects OpenSSL versions 1.0.2, 1.1.1 and 3.0. It was addressed in the releases of 1.1.1n and 3.0.2 on the 15th March 2022. Fixed in OpenSSL 3.0.2 (Affected 3.0.0,3.0.1). Fixed in OpenSSL 1.1.1n (Affected 1.1.1-1.1.1m). Fixed in OpenSSL 1.0.2zd (Affected 1.0.2-1.0.2zc).',
-              'diffID':        'sha256:c2605d50d001aac8d63e371109f1d75918ab3c7d1d537b8f003afd5c718cbeb0',
-              'fixedVersions': [
-                '3.3.3p1-r3'
-              ],
-              'installedVersion': '3.3.3p1-r2',
-              'packageName':      'libretls',
-              'purl':             'pkg:apk/alpine/libretls@3.3.3p1-r2?arch=x86&distro=3.14.2',
-              'references':       [
-                'http://packetstormsecurity.com/files/167344/OpenSSL-1.0.2-1.1.1-3.0-BN_mod_sqrt-Infinite-Loop.html',
-                'http://seclists.org/fulldisclosure/2022/May/33',
-                'http://seclists.org/fulldisclosure/2022/May/35',
-                'http://seclists.org/fulldisclosure/2022/May/38',
-                'https://access.redhat.com/errata/RHSA-2022:5326',
-                'https://access.redhat.com/security/cve/CVE-2022-0778',
-                'https://bugzilla.redhat.com/2062202',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2062202',
-                'https://cert-portal.siemens.com/productcert/pdf/ssa-712929.pdf',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-0778',
-                'https://errata.almalinux.org/8/ALSA-2022-5326.html',
-                'https://errata.rockylinux.org/RLSA-2022:4899',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=3118eb64934499d93db3230748a452351d1d9a65',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=380085481c64de749a6dd25cdf0bcf4360b30f83',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=a466912611aa6cbdf550cd10601390e587451246',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=3118eb64934499d93db3230748a452351d1d9a65',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=380085481c64de749a6dd25cdf0bcf4360b30f83',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=a466912611aa6cbdf550cd10601390e587451246',
-                'https://linux.oracle.com/cve/CVE-2022-0778.html',
-                'https://linux.oracle.com/errata/ELSA-2022-9272.html',
-                'https://lists.debian.org/debian-lts-announce/2022/03/msg00023.html',
-                'https://lists.debian.org/debian-lts-announce/2022/03/msg00024.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/323SNN6ZX7PRJJWP2BUAFLPUAE42XWLZ',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/323SNN6ZX7PRJJWP2BUAFLPUAE42XWLZ/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GDB3GQVJPXJE7X5C5JN6JAA4XUDWD6E6',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GDB3GQVJPXJE7X5C5JN6JAA4XUDWD6E6/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/W6K3PR542DXWLEFFMFIDMME4CWMHJRMG',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/W6K3PR542DXWLEFFMFIDMME4CWMHJRMG/',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/323SNN6ZX7PRJJWP2BUAFLPUAE42XWLZ',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/GDB3GQVJPXJE7X5C5JN6JAA4XUDWD6E6',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/W6K3PR542DXWLEFFMFIDMME4CWMHJRMG',
-                'https://nvd.nist.gov/vuln/detail/CVE-2022-0778',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2022-0002',
-                'https://rustsec.org/advisories/RUSTSEC-2022-0014.html',
-                'https://security.gentoo.org/glsa/202210-02',
-                'https://security.netapp.com/advisory/ntap-20220321-0002',
-                'https://security.netapp.com/advisory/ntap-20220321-0002/',
-                'https://security.netapp.com/advisory/ntap-20220429-0005',
-                'https://security.netapp.com/advisory/ntap-20220429-0005/',
-                'https://security.netapp.com/advisory/ntap-20240621-0006',
-                'https://security.netapp.com/advisory/ntap-20240621-0006/',
-                'https://support.apple.com/kb/HT213255',
-                'https://support.apple.com/kb/HT213256',
-                'https://support.apple.com/kb/HT213257',
-                'https://ubuntu.com/security/notices/USN-5328-1',
-                'https://ubuntu.com/security/notices/USN-5328-2',
-                'https://ubuntu.com/security/notices/USN-6457-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2022-0778',
-                'https://www.debian.org/security/2022/dsa-5103',
-                'https://www.openssl.org/news/secadv/20220315.txt',
-                'https://www.oracle.com/security-alerts/cpuapr2022.html',
-                'https://www.oracle.com/security-alerts/cpujul2022.html',
-                'https://www.tenable.com/security/tns-2022-06',
-                'https://www.tenable.com/security/tns-2022-07',
-                'https://www.tenable.com/security/tns-2022-08',
-                'https://www.tenable.com/security/tns-2022-09'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: Infinite loop in BN_mod_sqrt() reachable when parsing certificates'
-            },
-            {
-              'cve':  'CVE-2022-0778',
-              'cvss': {
-                'bitnami': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'ghsa': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'nvd': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-835'
-              ],
-              'description':   'The BN_mod_sqrt() function, which computes a modular square root, contains a bug that can cause it to loop forever for non-prime moduli. Internally this function is used when parsing certificates that contain elliptic curve public keys in compressed form or explicit elliptic curve parameters with a base point encoded in compressed form. It is possible to trigger the infinite loop by crafting a certificate that has invalid explicit curve parameters. Since certificate parsing happens prior to verification of the certificate signature, any process that parses an externally supplied certificate may thus be subject to a denial of service attack. The infinite loop can also be reached when parsing crafted private keys as they can contain explicit elliptic curve parameters. Thus vulnerable situations include: - TLS clients consuming server certificates - TLS servers consuming client certificates - Hosting providers taking certificates or private keys from customers - Certificate authorities parsing certification requests from subscribers - Anything else which parses ASN.1 elliptic curve parameters Also any other applications that use the BN_mod_sqrt() where the attacker can control the parameter values are vulnerable to this DoS issue. In the OpenSSL 1.0.2 version the public key is not parsed during initial parsing of the certificate which makes it slightly harder to trigger the infinite loop. However any operation which requires the public key from the certificate will trigger the infinite loop. In particular the attacker can use a self-signed certificate to trigger the loop during verification of the certificate signature. This issue affects OpenSSL versions 1.0.2, 1.1.1 and 3.0. It was addressed in the releases of 1.1.1n and 3.0.2 on the 15th March 2022. Fixed in OpenSSL 3.0.2 (Affected 3.0.0,3.0.1). Fixed in OpenSSL 1.1.1n (Affected 1.1.1-1.1.1m). Fixed in OpenSSL 1.0.2zd (Affected 1.0.2-1.0.2zc).',
-              'diffID':        'sha256:c2605d50d001aac8d63e371109f1d75918ab3c7d1d537b8f003afd5c718cbeb0',
-              'fixedVersions': [
-                '1.1.1n-r0'
-              ],
-              'installedVersion': '1.1.1l-r0',
-              'packageName':      'libssl1.1',
-              'purl':             'pkg:apk/alpine/libssl1.1@1.1.1l-r0?arch=x86&distro=3.14.2',
-              'references':       [
-                'http://packetstormsecurity.com/files/167344/OpenSSL-1.0.2-1.1.1-3.0-BN_mod_sqrt-Infinite-Loop.html',
-                'http://seclists.org/fulldisclosure/2022/May/33',
-                'http://seclists.org/fulldisclosure/2022/May/35',
-                'http://seclists.org/fulldisclosure/2022/May/38',
-                'https://access.redhat.com/errata/RHSA-2022:5326',
-                'https://access.redhat.com/security/cve/CVE-2022-0778',
-                'https://bugzilla.redhat.com/2062202',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2062202',
-                'https://cert-portal.siemens.com/productcert/pdf/ssa-712929.pdf',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-0778',
-                'https://errata.almalinux.org/8/ALSA-2022-5326.html',
-                'https://errata.rockylinux.org/RLSA-2022:4899',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=3118eb64934499d93db3230748a452351d1d9a65',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=380085481c64de749a6dd25cdf0bcf4360b30f83',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=a466912611aa6cbdf550cd10601390e587451246',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=3118eb64934499d93db3230748a452351d1d9a65',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=380085481c64de749a6dd25cdf0bcf4360b30f83',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=a466912611aa6cbdf550cd10601390e587451246',
-                'https://linux.oracle.com/cve/CVE-2022-0778.html',
-                'https://linux.oracle.com/errata/ELSA-2022-9272.html',
-                'https://lists.debian.org/debian-lts-announce/2022/03/msg00023.html',
-                'https://lists.debian.org/debian-lts-announce/2022/03/msg00024.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/323SNN6ZX7PRJJWP2BUAFLPUAE42XWLZ',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/323SNN6ZX7PRJJWP2BUAFLPUAE42XWLZ/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GDB3GQVJPXJE7X5C5JN6JAA4XUDWD6E6',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GDB3GQVJPXJE7X5C5JN6JAA4XUDWD6E6/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/W6K3PR542DXWLEFFMFIDMME4CWMHJRMG',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/W6K3PR542DXWLEFFMFIDMME4CWMHJRMG/',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/323SNN6ZX7PRJJWP2BUAFLPUAE42XWLZ',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/GDB3GQVJPXJE7X5C5JN6JAA4XUDWD6E6',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/W6K3PR542DXWLEFFMFIDMME4CWMHJRMG',
-                'https://nvd.nist.gov/vuln/detail/CVE-2022-0778',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2022-0002',
-                'https://rustsec.org/advisories/RUSTSEC-2022-0014.html',
-                'https://security.gentoo.org/glsa/202210-02',
-                'https://security.netapp.com/advisory/ntap-20220321-0002',
-                'https://security.netapp.com/advisory/ntap-20220321-0002/',
-                'https://security.netapp.com/advisory/ntap-20220429-0005',
-                'https://security.netapp.com/advisory/ntap-20220429-0005/',
-                'https://security.netapp.com/advisory/ntap-20240621-0006',
-                'https://security.netapp.com/advisory/ntap-20240621-0006/',
-                'https://support.apple.com/kb/HT213255',
-                'https://support.apple.com/kb/HT213256',
-                'https://support.apple.com/kb/HT213257',
-                'https://ubuntu.com/security/notices/USN-5328-1',
-                'https://ubuntu.com/security/notices/USN-5328-2',
-                'https://ubuntu.com/security/notices/USN-6457-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2022-0778',
-                'https://www.debian.org/security/2022/dsa-5103',
-                'https://www.openssl.org/news/secadv/20220315.txt',
-                'https://www.oracle.com/security-alerts/cpuapr2022.html',
-                'https://www.oracle.com/security-alerts/cpujul2022.html',
-                'https://www.tenable.com/security/tns-2022-06',
-                'https://www.tenable.com/security/tns-2022-07',
-                'https://www.tenable.com/security/tns-2022-08',
-                'https://www.tenable.com/security/tns-2022-09'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: Infinite loop in BN_mod_sqrt() reachable when parsing certificates'
-            },
-            {
-              'cve':  'CVE-2022-4450',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'nvd': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-415'
-              ],
-              'description':   'The function PEM_read_bio_ex() reads a PEM file from a BIO and parses and\ndecodes the "name" (e.g. "CERTIFICATE"), any header data and the payload data.\nIf the function succeeds then the "name_out", "header" and "data" arguments are\npopulated with pointers to buffers containing the relevant decoded data. The\ncaller is responsible for freeing those buffers. It is possible to construct a\nPEM file that results in 0 bytes of payload data. In this case PEM_read_bio_ex()\nwill return a failure code but will populate the header argument with a pointer\nto a buffer that has already been freed. If the caller also frees this buffer\nthen a double free will occur. This will most likely lead to a crash. This\ncould be exploited by an attacker who has the ability to supply malicious PEM\nfiles for parsing to achieve a denial of service attack.\n\nThe functions PEM_read_bio() and PEM_read() are simple wrappers around\nPEM_read_bio_ex() and therefore these functions are also directly affected.\n\nThese functions are also called indirectly by a number of other OpenSSL\nfunctions including PEM_X509_INFO_read_bio_ex() and\nSSL_CTX_use_serverinfo_file() which are also vulnerable. Some OpenSSL internal\nuses of these functions are not vulnerable because the caller does not free the\nheader argument if PEM_read_bio_ex() returns a failure code. These locations\ninclude the PEM_read_bio_TYPE() functions as well as the decoders introduced in\nOpenSSL 3.0.\n\nThe OpenSSL asn1parse command line application is also impacted by this issue.',
-              'diffID':        'sha256:c2605d50d001aac8d63e371109f1d75918ab3c7d1d537b8f003afd5c718cbeb0',
-              'fixedVersions': [
-                '1.1.1t-r0'
-              ],
-              'installedVersion': '1.1.1l-r0',
-              'packageName':      'libssl1.1',
-              'purl':             'pkg:apk/alpine/libssl1.1@1.1.1l-r0?arch=x86&distro=3.14.2',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2023:2165',
-                'https://access.redhat.com/security/cve/CVE-2022-4450',
-                'https://bugzilla.redhat.com/1960321',
-                'https://bugzilla.redhat.com/2164440',
-                'https://bugzilla.redhat.com/2164487',
-                'https://bugzilla.redhat.com/2164492',
-                'https://bugzilla.redhat.com/2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144000',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144003',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144006',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144008',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144010',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144012',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144015',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144017',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144019',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2145170',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2158412',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164440',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164487',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164488',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164492',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164497',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164499',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164500',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4203',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4304',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4450',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0215',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0216',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0217',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0286',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0401',
-                'https://errata.almalinux.org/9/ALSA-2023-2165.html',
-                'https://errata.rockylinux.org/RLSA-2023:0946',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=63bcf189be73a9cc1264059bed6f57974be74a83',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=bbcf509bd046b34cca19c766bbddc31683d0858b',
-                'https://linux.oracle.com/cve/CVE-2022-4450.html',
-                'https://linux.oracle.com/errata/ELSA-2023-32791.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2022-4450',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0003',
-                'https://rustsec.org/advisories/RUSTSEC-2023-0010.html',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://ubuntu.com/security/notices/USN-5844-1',
-                'https://ubuntu.com/security/notices/USN-6564-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2022-4450',
-                'https://www.openssl.org/news/secadv/20230207.txt'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: double free after calling PEM_read_bio_ex'
-            },
-            {
-              'cve':  'CVE-2023-0215',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'nvd': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   'The public API function BIO_new_NDEF is a helper function used for streaming\nASN.1 data via a BIO. It is primarily used internally to OpenSSL to support the\nSMIME, CMS and PKCS7 streaming capabilities, but may also be called directly by\nend user applications.\n\nThe function receives a BIO from the caller, prepends a new BIO_f_asn1 filter\nBIO onto the front of it to form a BIO chain, and then returns the new head of\nthe BIO chain to the caller. Under certain conditions, for example if a CMS\nrecipient public key is invalid, the new filter BIO is freed and the function\nreturns a NULL result indicating a failure. However, in this case, the BIO chain\nis not properly cleaned up and the BIO passed by the caller still retains\ninternal pointers to the previously freed filter BIO. If the caller then goes on\nto call BIO_pop() on the BIO then a use-after-free will occur. This will most\nlikely result in a crash.\n\n\n\nThis scenario occurs directly in the internal function B64_write_ASN1() which\nmay cause BIO_new_NDEF() to be called and will subsequently call BIO_pop() on\nthe BIO. This internal function is in turn called by the public API functions\nPEM_write_bio_ASN1_stream, PEM_write_bio_CMS_stream, PEM_write_bio_PKCS7_stream,\nSMIME_write_ASN1, SMIME_write_CMS and SMIME_write_PKCS7.\n\nOther public API functions that may be impacted by this include\ni2d_ASN1_bio_stream, BIO_new_CMS, BIO_new_PKCS7, i2d_CMS_bio_stream and\ni2d_PKCS7_bio_stream.\n\nThe OpenSSL cms and smime command line applications are similarly affected.',
-              'diffID':        'sha256:c2605d50d001aac8d63e371109f1d75918ab3c7d1d537b8f003afd5c718cbeb0',
-              'fixedVersions': [
-                '1.1.1t-r0'
-              ],
-              'installedVersion': '1.1.1l-r0',
-              'packageName':      'libssl1.1',
-              'purl':             'pkg:apk/alpine/libssl1.1@1.1.1l-r0?arch=x86&distro=3.14.2',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2023:2165',
-                'https://access.redhat.com/security/cve/CVE-2023-0215',
-                'https://bugzilla.redhat.com/1960321',
-                'https://bugzilla.redhat.com/2164440',
-                'https://bugzilla.redhat.com/2164487',
-                'https://bugzilla.redhat.com/2164492',
-                'https://bugzilla.redhat.com/2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144000',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144003',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144006',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144008',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144010',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144012',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144015',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144017',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144019',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2145170',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2158412',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164440',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164487',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164488',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164492',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164497',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164499',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164500',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4203',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4304',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4450',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0215',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0216',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0217',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0286',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0401',
-                'https://errata.almalinux.org/9/ALSA-2023-2165.html',
-                'https://errata.rockylinux.org/RLSA-2023:0946',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=8818064ce3c3c0f1b740a5aaba2a987e75bfbafd',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=9816136fe31d92ace4037d5da5257f763aeeb4eb',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=c3829dd8825c654652201e16f8a0a0c46ee3f344',
-                'https://linux.oracle.com/cve/CVE-2023-0215.html',
-                'https://linux.oracle.com/errata/ELSA-2023-32791.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-0215',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0003',
-                'https://rustsec.org/advisories/RUSTSEC-2023-0009.html',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://security.netapp.com/advisory/ntap-20230427-0007',
-                'https://security.netapp.com/advisory/ntap-20230427-0007/',
-                'https://security.netapp.com/advisory/ntap-20230427-0009',
-                'https://security.netapp.com/advisory/ntap-20230427-0009/',
-                'https://security.netapp.com/advisory/ntap-20240621-0006',
-                'https://security.netapp.com/advisory/ntap-20240621-0006/',
-                'https://ubuntu.com/security/notices/USN-5844-1',
-                'https://ubuntu.com/security/notices/USN-5845-1',
-                'https://ubuntu.com/security/notices/USN-5845-2',
-                'https://ubuntu.com/security/notices/USN-6564-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-0215',
-                'https://www.openssl.org/news/secadv/20230207.txt'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: use-after-free following BIO_new_NDEF'
-            },
-            {
-              'cve':  'CVE-2023-0286',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '7.4',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H'
-                },
-                'nvd': {
-                  'v3score':  '7.4',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.4',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-843'
-              ],
-              'description':   'There is a type confusion vulnerability relating to X.400 address processing\ninside an X.509 GeneralName. X.400 addresses were parsed as an ASN1_STRING but\nthe public structure definition for GENERAL_NAME incorrectly specified the type\nof the x400Address field as ASN1_TYPE. This field is subsequently interpreted by\nthe OpenSSL function GENERAL_NAME_cmp as an ASN1_TYPE rather than an\nASN1_STRING.\n\nWhen CRL checking is enabled (i.e. the application sets the\nX509_V_FLAG_CRL_CHECK flag), this vulnerability may allow an attacker to pass\narbitrary pointers to a memcmp call, enabling them to read memory contents or\nenact a denial of service. In most cases, the attack requires the attacker to\nprovide both the certificate chain and CRL, neither of which need to have a\nvalid signature. If the attacker only controls one of these inputs, the other\ninput must already contain an X.400 address as a CRL distribution point, which\nis uncommon. As such, this vulnerability is most likely to only affect\napplications which have implemented their own functionality for retrieving CRLs\nover a network.',
-              'diffID':        'sha256:c2605d50d001aac8d63e371109f1d75918ab3c7d1d537b8f003afd5c718cbeb0',
-              'fixedVersions': [
-                '1.1.1t-r0'
-              ],
-              'installedVersion': '1.1.1l-r0',
-              'packageName':      'libssl1.1',
-              'purl':             'pkg:apk/alpine/libssl1.1@1.1.1l-r0?arch=x86&distro=3.14.2',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2025:7937',
-                'https://access.redhat.com/security/cve/CVE-2023-0286',
-                'https://access.redhat.com/security/cve/cve-2023-0286',
-                'https://bugzilla.redhat.com/2164440',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144000',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144003',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144006',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144008',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144010',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144012',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144015',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144017',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144019',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2145170',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2158412',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164440',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164487',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164488',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164492',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164497',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164499',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164500',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4203',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4304',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4450',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0215',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0216',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0217',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0286',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0401',
-                'https://errata.almalinux.org/9/ALSA-2025-7937.html',
-                'https://errata.rockylinux.org/RLSA-2023:0946',
-                'https://ftp.openbsd.org/pub/OpenBSD/LibreSSL/libressl-3.6.2-relnotes.txt',
-                'https://ftp.openbsd.org/pub/OpenBSD/patches/7.2/common/018_x509.patch.sig',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=2c6c9d439b484e1ba9830d8454a34fa4f80fdfe9',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=2f7530077e0ef79d98718138716bc51ca0cad658',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=fd2af07dc083a350c959147097003a14a5e8ac4d',
-                'https://github.com/pyca/cryptography',
-                'https://github.com/pyca/cryptography/security/advisories/GHSA-x4qr-2fvf-3mr5',
-                'https://linux.oracle.com/cve/CVE-2023-0286.html',
-                'https://linux.oracle.com/errata/ELSA-2025-7937.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-0286',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0003',
-                'https://rustsec.org/advisories/RUSTSEC-2023-0006.html',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://ubuntu.com/security/notices/USN-5844-1',
-                'https://ubuntu.com/security/notices/USN-5845-1',
-                'https://ubuntu.com/security/notices/USN-5845-2',
-                'https://ubuntu.com/security/notices/USN-6564-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-0286',
-                'https://www.openssl.org/news/secadv/20230207.txt'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: X.400 address type confusion in X.509 GeneralName'
-            },
-            {
-              'cve':  'CVE-2023-0464',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-295'
-              ],
-              'description':   "A security vulnerability has been identified in all supported versions\n\nof OpenSSL related to the verification of X.509 certificate chains\nthat include policy constraints.  Attackers may be able to exploit this\nvulnerability by creating a malicious certificate chain that triggers\nexponential use of computational resources, leading to a denial-of-service\n(DoS) attack on affected systems.\n\nPolicy processing is disabled by default but can be enabled by passing\nthe `-policy' argument to the command line utilities or by calling the\n`X509_VERIFY_PARAM_set1_policies()' function.",
-              'diffID':        'sha256:c2605d50d001aac8d63e371109f1d75918ab3c7d1d537b8f003afd5c718cbeb0',
-              'fixedVersions': [
-                '1.1.1t-r1'
-              ],
-              'installedVersion': '1.1.1l-r0',
-              'packageName':      'libssl1.1',
-              'purl':             'pkg:apk/alpine/libssl1.1@1.1.1l-r0?arch=x86&distro=3.14.2',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2023:3722',
-                'https://access.redhat.com/security/cve/CVE-2023-0464',
-                'https://bugzilla.redhat.com/2181082',
-                'https://bugzilla.redhat.com/2182561',
-                'https://bugzilla.redhat.com/2182565',
-                'https://bugzilla.redhat.com/2188461',
-                'https://bugzilla.redhat.com/2207947',
-                'https://errata.almalinux.org/9/ALSA-2023-3722.html',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=2017771e2db3e2b96f89bbe8766c3209f6a99545',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=2dcd4f1e3115f38cefa43e3efbe9b801c27e642e',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=879f7080d7e141f415c79eaa3a8ac4a3dad0348b',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=959c59c7a0164117e7f8366466a32bb1f8d77ff1',
-                'https://linux.oracle.com/cve/CVE-2023-0464.html',
-                'https://linux.oracle.com/errata/ELSA-2023-3722.html',
-                'https://lists.debian.org/debian-lts-announce/2023/06/msg00011.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-0464',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://security.netapp.com/advisory/ntap-20230406-0006/',
-                'https://security.netapp.com/advisory/ntap-20240621-0006/',
-                'https://ubuntu.com/security/notices/USN-6039-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.couchbase.com/alerts/',
-                'https://www.cve.org/CVERecord?id=CVE-2023-0464',
-                'https://www.debian.org/security/2023/dsa-5417',
-                'https://www.openssl.org/news/secadv/20230322.txt'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: Denial of service by excessive resource usage in verifying X509 policy constraints'
-            },
-            {
-              'cve':  'CVE-2022-2097',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N'
-                },
-                'nvd': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N'
-                },
-                'redhat': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-327'
-              ],
-              'description':   "AES OCB mode for 32-bit x86 platforms using the AES-NI assembly optimised implementation will not encrypt the entirety of the data under some circumstances. This could reveal sixteen bytes of data that was preexisting in the memory that wasn't written. In the special case of \"in place\" encryption, sixteen bytes of the plaintext would be revealed. Since OpenSSL does not support OCB based cipher suites for TLS and DTLS, they are both unaffected. Fixed in OpenSSL 3.0.5 (Affected 3.0.0-3.0.4). Fixed in OpenSSL 1.1.1q (Affected 1.1.1-1.1.1p).",
-              'diffID':        'sha256:c2605d50d001aac8d63e371109f1d75918ab3c7d1d537b8f003afd5c718cbeb0',
-              'fixedVersions': [
-                '1.1.1q-r0'
-              ],
-              'installedVersion': '1.1.1l-r0',
-              'packageName':      'libssl1.1',
-              'purl':             'pkg:apk/alpine/libssl1.1@1.1.1l-r0?arch=x86&distro=3.14.2',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2022:6224',
-                'https://access.redhat.com/security/cve/CVE-2022-2097',
-                'https://bugzilla.redhat.com/2081494',
-                'https://bugzilla.redhat.com/2087911',
-                'https://bugzilla.redhat.com/2087913',
-                'https://bugzilla.redhat.com/2097310',
-                'https://bugzilla.redhat.com/2104905',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2081494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2097310',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2100554',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2104905',
-                'https://cert-portal.siemens.com/productcert/pdf/ssa-332410.pdf',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-1292',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-2068',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-2097',
-                'https://errata.almalinux.org/9/ALSA-2022-6224.html',
-                'https://errata.rockylinux.org/RLSA-2022:5818',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=919925673d6c9cfed3c1085497f5dfbbed5fc431',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=a98f339ddd7e8f487d6e0088d4a9a42324885a93',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=919925673d6c9cfed3c1085497f5dfbbed5fc431',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=a98f339ddd7e8f487d6e0088d4a9a42324885a93',
-                'https://github.com/alexcrichton/openssl-src-rs',
-                'https://linux.oracle.com/cve/CVE-2022-2097.html',
-                'https://linux.oracle.com/errata/ELSA-2022-9955.html',
-                'https://lists.debian.org/debian-lts-announce/2023/02/msg00019.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/R6CK57NBQFTPUMXAPJURCGXUYT76NQAK',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/R6CK57NBQFTPUMXAPJURCGXUYT76NQAK/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/V6567JERRHHJW2GNGJGKDRNHR7SNPZK7',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/V6567JERRHHJW2GNGJGKDRNHR7SNPZK7/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VCMNWKERPBKOEBNL7CLTTX3ZZCZLH7XA',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VCMNWKERPBKOEBNL7CLTTX3ZZCZLH7XA/',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/R6CK57NBQFTPUMXAPJURCGXUYT76NQAK',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/R6CK57NBQFTPUMXAPJURCGXUYT76NQAK/',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/V6567JERRHHJW2GNGJGKDRNHR7SNPZK7',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/V6567JERRHHJW2GNGJGKDRNHR7SNPZK7/',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/VCMNWKERPBKOEBNL7CLTTX3ZZCZLH7XA',
-                'https://nvd.nist.gov/vuln/detail/CVE-2022-2097',
-                'https://rustsec.org/advisories/RUSTSEC-2022-0032.html',
-                'https://security.gentoo.org/glsa/202210-02',
-                'https://security.netapp.com/advisory/ntap-20220715-0011',
-                'https://security.netapp.com/advisory/ntap-20220715-0011/',
-                'https://security.netapp.com/advisory/ntap-20230420-0008',
-                'https://security.netapp.com/advisory/ntap-20230420-0008/',
-                'https://security.netapp.com/advisory/ntap-20240621-0006',
-                'https://security.netapp.com/advisory/ntap-20240621-0006/',
-                'https://ubuntu.com/security/notices/USN-5502-1',
-                'https://ubuntu.com/security/notices/USN-6457-1',
-                'https://www.cve.org/CVERecord?id=CVE-2022-2097',
-                'https://www.debian.org/security/2023/dsa-5343',
-                'https://www.openssl.org/news/secadv/20220705.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: AES OCB fails to encrypt some bytes'
-            },
-            {
-              'cve':  'CVE-2022-4304',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N'
-                },
-                'nvd': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N'
-                },
-                'redhat': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-203'
-              ],
-              'description':   'A timing based side channel exists in the OpenSSL RSA Decryption implementation\nwhich could be sufficient to recover a plaintext across a network in a\nBleichenbacher style attack. To achieve a successful decryption an attacker\nwould have to be able to send a very large number of trial messages for\ndecryption. The vulnerability affects all RSA padding modes: PKCS#1 v1.5,\nRSA-OEAP and RSASVE.\n\nFor example, in a TLS connection, RSA is commonly used by a client to send an\nencrypted pre-master secret to the server. An attacker that had observed a\ngenuine connection between a client and a server could use this flaw to send\ntrial messages to the server and record the time taken to process them. After a\nsufficiently large number of messages the attacker could recover the pre-master\nsecret used for the original connection and thus be able to decrypt the\napplication data sent over that connection.',
-              'diffID':        'sha256:c2605d50d001aac8d63e371109f1d75918ab3c7d1d537b8f003afd5c718cbeb0',
-              'fixedVersions': [
-                '1.1.1t-r0'
-              ],
-              'installedVersion': '1.1.1l-r0',
-              'packageName':      'libssl1.1',
-              'purl':             'pkg:apk/alpine/libssl1.1@1.1.1l-r0?arch=x86&distro=3.14.2',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2023:2165',
-                'https://access.redhat.com/security/cve/CVE-2022-4304',
-                'https://bugzilla.redhat.com/1960321',
-                'https://bugzilla.redhat.com/2164440',
-                'https://bugzilla.redhat.com/2164487',
-                'https://bugzilla.redhat.com/2164492',
-                'https://bugzilla.redhat.com/2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144000',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144003',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144006',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144008',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144010',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144012',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144015',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144017',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144019',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2145170',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2158412',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164440',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164487',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164488',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164492',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164497',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164499',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164500',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4203',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4304',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4450',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0215',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0216',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0217',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0286',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0401',
-                'https://errata.almalinux.org/9/ALSA-2023-2165.html',
-                'https://errata.rockylinux.org/RLSA-2023:0946',
-                'https://linux.oracle.com/cve/CVE-2022-4304.html',
-                'https://linux.oracle.com/errata/ELSA-2023-32791.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2022-4304',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0003',
-                'https://rustsec.org/advisories/RUSTSEC-2023-0007.html',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://ubuntu.com/security/notices/USN-5844-1',
-                'https://ubuntu.com/security/notices/USN-6564-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2022-4304',
-                'https://www.openssl.org/news/secadv/20230207.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: timing attack in RSA Decryption implementation'
-            },
-            {
-              'cve':  'CVE-2023-0465',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N'
-                },
-                'redhat': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-295'
-              ],
-              'description':   "Applications that use a non-default option when verifying certificates may be\nvulnerable to an attack from a malicious CA to circumvent certain checks.\n\nInvalid certificate policies in leaf certificates are silently ignored by\nOpenSSL and other certificate policy checks are skipped for that certificate.\nA malicious CA could use this to deliberately assert invalid certificate policies\nin order to circumvent policy checking on the certificate altogether.\n\nPolicy processing is disabled by default but can be enabled by passing\nthe `-policy' argument to the command line utilities or by calling the\n`X509_VERIFY_PARAM_set1_policies()' function.",
-              'diffID':        'sha256:c2605d50d001aac8d63e371109f1d75918ab3c7d1d537b8f003afd5c718cbeb0',
-              'fixedVersions': [
-                '1.1.1t-r2'
-              ],
-              'installedVersion': '1.1.1l-r0',
-              'packageName':      'libssl1.1',
-              'purl':             'pkg:apk/alpine/libssl1.1@1.1.1l-r0?arch=x86&distro=3.14.2',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2023:3722',
-                'https://access.redhat.com/security/cve/CVE-2023-0465',
-                'https://bugzilla.redhat.com/2181082',
-                'https://bugzilla.redhat.com/2182561',
-                'https://bugzilla.redhat.com/2182565',
-                'https://bugzilla.redhat.com/2188461',
-                'https://bugzilla.redhat.com/2207947',
-                'https://errata.almalinux.org/9/ALSA-2023-3722.html',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=10325176f3d3e98c6e2b3bf5ab1e3b334de6947a',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=1dd43e0709fece299b15208f36cc7c76209ba0bb',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=b013765abfa80036dc779dd0e50602c57bb3bf95',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=facfb1ab745646e97a1920977ae4a9965ea61d5c',
-                'https://linux.oracle.com/cve/CVE-2023-0465.html',
-                'https://linux.oracle.com/errata/ELSA-2023-3722.html',
-                'https://lists.debian.org/debian-lts-announce/2023/06/msg00011.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-0465',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://security.netapp.com/advisory/ntap-20230414-0001/',
-                'https://ubuntu.com/security/notices/USN-6039-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-0465',
-                'https://www.debian.org/security/2023/dsa-5417',
-                'https://www.openssl.org/news/secadv/20230328.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: Invalid certificate policies in leaf certificates are silently ignored'
-            },
-            {
-              'cve':  'CVE-2021-42378',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the getvar_i function",
-              'diffID':        'sha256:c2605d50d001aac8d63e371109f1d75918ab3c7d1d537b8f003afd5c718cbeb0',
-              'fixedVersions': [
-                '1.33.1-r6'
-              ],
-              'installedVersion': '1.33.1-r3',
-              'packageName':      'ssl_client',
-              'purl':             'pkg:apk/alpine/ssl_client@1.33.1-r3?arch=x86&distro=3.14.2',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42378',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42378',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42378'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the getvar_i()'
-            },
-            {
-              'cve':  'CVE-2021-42379',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the next_input_file function",
-              'diffID':        'sha256:c2605d50d001aac8d63e371109f1d75918ab3c7d1d537b8f003afd5c718cbeb0',
-              'fixedVersions': [
-                '1.33.1-r6'
-              ],
-              'installedVersion': '1.33.1-r3',
-              'packageName':      'ssl_client',
-              'purl':             'pkg:apk/alpine/ssl_client@1.33.1-r3?arch=x86&distro=3.14.2',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42379',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42379',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42379'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the next_input_file()'
-            },
-            {
-              'cve':  'CVE-2021-42380',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the clrvar function",
-              'diffID':        'sha256:c2605d50d001aac8d63e371109f1d75918ab3c7d1d537b8f003afd5c718cbeb0',
-              'fixedVersions': [
-                '1.33.1-r6'
-              ],
-              'installedVersion': '1.33.1-r3',
-              'packageName':      'ssl_client',
-              'purl':             'pkg:apk/alpine/ssl_client@1.33.1-r3?arch=x86&distro=3.14.2',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42380',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42380',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42380'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the clrvar()'
-            },
-            {
-              'cve':  'CVE-2021-42381',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the hash_init function",
-              'diffID':        'sha256:c2605d50d001aac8d63e371109f1d75918ab3c7d1d537b8f003afd5c718cbeb0',
-              'fixedVersions': [
-                '1.33.1-r6'
-              ],
-              'installedVersion': '1.33.1-r3',
-              'packageName':      'ssl_client',
-              'purl':             'pkg:apk/alpine/ssl_client@1.33.1-r3?arch=x86&distro=3.14.2',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42381',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42381',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42381'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the hash_init()'
-            },
-            {
-              'cve':  'CVE-2021-42382',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the getvar_s function",
-              'diffID':        'sha256:c2605d50d001aac8d63e371109f1d75918ab3c7d1d537b8f003afd5c718cbeb0',
-              'fixedVersions': [
-                '1.33.1-r6'
-              ],
-              'installedVersion': '1.33.1-r3',
-              'packageName':      'ssl_client',
-              'purl':             'pkg:apk/alpine/ssl_client@1.33.1-r3?arch=x86&distro=3.14.2',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42382',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42382',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42382'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the getvar_s()'
-            },
-            {
-              'cve':  'CVE-2021-42383',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the evaluate function",
-              'diffID':        'sha256:c2605d50d001aac8d63e371109f1d75918ab3c7d1d537b8f003afd5c718cbeb0',
-              'fixedVersions': [
-                '1.33.1-r6'
-              ],
-              'installedVersion': '1.33.1-r3',
-              'packageName':      'ssl_client',
-              'purl':             'pkg:apk/alpine/ssl_client@1.33.1-r3?arch=x86&distro=3.14.2',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42383',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42383',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42383'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the evaluate()'
-            },
-            {
-              'cve':  'CVE-2021-42384',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the handle_special function",
-              'diffID':        'sha256:c2605d50d001aac8d63e371109f1d75918ab3c7d1d537b8f003afd5c718cbeb0',
-              'fixedVersions': [
-                '1.33.1-r6'
-              ],
-              'installedVersion': '1.33.1-r3',
-              'packageName':      'ssl_client',
-              'purl':             'pkg:apk/alpine/ssl_client@1.33.1-r3?arch=x86&distro=3.14.2',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42384',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42384',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42384'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the handle_special()'
-            },
-            {
-              'cve':  'CVE-2021-42385',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the evaluate function",
-              'diffID':        'sha256:c2605d50d001aac8d63e371109f1d75918ab3c7d1d537b8f003afd5c718cbeb0',
-              'fixedVersions': [
-                '1.33.1-r6'
-              ],
-              'installedVersion': '1.33.1-r3',
-              'packageName':      'ssl_client',
-              'purl':             'pkg:apk/alpine/ssl_client@1.33.1-r3?arch=x86&distro=3.14.2',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42385',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42385',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42385'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the evaluate()'
-            },
-            {
-              'cve':  'CVE-2021-42386',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the nvalloc function",
-              'diffID':        'sha256:c2605d50d001aac8d63e371109f1d75918ab3c7d1d537b8f003afd5c718cbeb0',
-              'fixedVersions': [
-                '1.33.1-r6'
-              ],
-              'installedVersion': '1.33.1-r3',
-              'packageName':      'ssl_client',
-              'purl':             'pkg:apk/alpine/ssl_client@1.33.1-r3?arch=x86&distro=3.14.2',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42386',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42386',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42386'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the nvalloc()'
-            },
-            {
-              'cve':  'CVE-2022-28391',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '8.8',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-88'
-              ],
-              'description':   "BusyBox through 1.35.0 allows remote attackers to execute arbitrary code if netstat is used to print a DNS PTR record's value to a VT compatible terminal. Alternatively, the attacker could choose to change the terminal's colors.",
-              'diffID':        'sha256:c2605d50d001aac8d63e371109f1d75918ab3c7d1d537b8f003afd5c718cbeb0',
-              'fixedVersions': [
-                '1.33.1-r7'
-              ],
-              'installedVersion': '1.33.1-r3',
-              'packageName':      'ssl_client',
-              'purl':             'pkg:apk/alpine/ssl_client@1.33.1-r3?arch=x86&distro=3.14.2',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2022-28391',
-                'https://git.alpinelinux.org/aports/plain/main/busybox/0001-libbb-sockaddr2str-ensure-only-printable-characters-.patch',
-                'https://git.alpinelinux.org/aports/plain/main/busybox/0002-nslookup-sanitize-all-printed-strings-with-printable.patch',
-                'https://gitlab.alpinelinux.org/alpine/aports/-/issues/13661',
-                'https://nvd.nist.gov/vuln/detail/CVE-2022-28391',
-                'https://www.cve.org/CVERecord?id=CVE-2022-28391'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: remote attackers may execute arbitrary code if netstat is used'
-            },
-            {
-              'cve':  'CVE-2021-42374',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '5.7',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-125'
-              ],
-              'description':   "An out-of-bounds heap read in Busybox's unlzma applet leads to information leak and denial of service when crafted LZMA-compressed input is decompressed. This can be triggered by any applet/format that",
-              'diffID':        'sha256:c2605d50d001aac8d63e371109f1d75918ab3c7d1d537b8f003afd5c718cbeb0',
-              'fixedVersions': [
-                '1.33.1-r4'
-              ],
-              'installedVersion': '1.33.1-r3',
-              'packageName':      'ssl_client',
-              'purl':             'pkg:apk/alpine/ssl_client@1.33.1-r3?arch=x86&distro=3.14.2',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42374',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42374',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42374'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'busybox: out-of-bounds read in unlzma applet leads to information leak and denial of service when crafted LZMA-compressed input is decompressed'
-            },
-            {
-              'cve':  'CVE-2021-42375',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.5',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '4.1',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-159'
-              ],
-              'description':   "An incorrect handling of a special element in Busybox's ash applet leads to denial of service when processing a crafted shell command, due to the shell mistaking specific characters for reserved characters. This may be used for DoS under rare conditions of filtered command input.",
-              'diffID':        'sha256:c2605d50d001aac8d63e371109f1d75918ab3c7d1d537b8f003afd5c718cbeb0',
-              'fixedVersions': [
-                '1.33.1-r5'
-              ],
-              'installedVersion': '1.33.1-r3',
-              'packageName':      'ssl_client',
-              'purl':             'pkg:apk/alpine/ssl_client@1.33.1-r3?arch=x86&distro=3.14.2',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42375',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42375',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42375'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'busybox: incorrect handling of a special element in ash applet leads to denial of service when processing a crafted shell command'
-            },
-            {
-              'cve':  'CVE-2022-37434',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '9.8',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-787',
-                'CWE-120'
-              ],
-              'description':   'zlib through 1.2.12 has a heap-based buffer over-read or buffer overflow in inflate in inflate.c via a large gzip header extra field. NOTE: only applications that call inflateGetHeader are affected. Some common applications bundle the affected zlib source code but may be unable to call inflateGetHeader (e.g., see the nodejs/node reference).',
-              'diffID':        'sha256:c2605d50d001aac8d63e371109f1d75918ab3c7d1d537b8f003afd5c718cbeb0',
-              'fixedVersions': [
-                '1.2.12-r2'
-              ],
-              'installedVersion': '1.2.11-r3',
-              'packageName':      'zlib',
-              'purl':             'pkg:apk/alpine/zlib@1.2.11-r3?arch=x86&distro=3.14.2',
-              'references':       [
-                'http://seclists.org/fulldisclosure/2022/Oct/37',
-                'http://seclists.org/fulldisclosure/2022/Oct/38',
-                'http://seclists.org/fulldisclosure/2022/Oct/41',
-                'http://seclists.org/fulldisclosure/2022/Oct/42',
-                'http://www.openwall.com/lists/oss-security/2022/08/05/2',
-                'http://www.openwall.com/lists/oss-security/2022/08/09/1',
-                'https://access.redhat.com/errata/RHSA-2022:8291',
-                'https://access.redhat.com/security/cve/CVE-2022-37434',
-                'https://bugzilla.redhat.com/2116639',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2053198',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2077431',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2081296',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2116639',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-37434',
-                'https://errata.almalinux.org/9/ALSA-2022-8291.html',
-                'https://errata.rockylinux.org/RLSA-2022:8291',
-                'https://github.com/curl/curl/issues/9271',
-                'https://github.com/ivd38/zlib_overflow',
-                'https://github.com/madler/zlib/blob/21767c654d31d2dccdde4330529775c6c5fd5389/zlib.h#L1062-L1063',
-                'https://github.com/madler/zlib/commit/1eb7682f845ac9e9bf9ae35bbfb3bad5dacbd91d',
-                'https://github.com/madler/zlib/commit/eff308af425b67093bab25f80f1ae950166bece1',
-                'https://github.com/nodejs/node/blob/75b68c6e4db515f76df73af476eccf382bbcb00a/deps/zlib/inflate.c#L762-L764',
-                'https://linux.oracle.com/cve/CVE-2022-37434.html',
-                'https://linux.oracle.com/errata/ELSA-2023-1095.html',
-                'https://lists.debian.org/debian-lts-announce/2022/09/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JWN4VE3JQR4O2SOUS5TXNLANRPMHWV4I/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NMBOJ77A7T7PQCARMDUK75TE6LLESZ3O/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PAVPQNCG3XRLCLNSQRM3KAN5ZFMVXVTY/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/X5U7OTKZSHY2I3ZFJSR2SHFHW72RKGDK/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YRQAI7H4M4RQZ2IWZUEEXECBE5D56BH2/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2022-37434',
-                'https://security.netapp.com/advisory/ntap-20220901-0005/',
-                'https://security.netapp.com/advisory/ntap-20230427-0007/',
-                'https://support.apple.com/kb/HT213488',
-                'https://support.apple.com/kb/HT213489',
-                'https://support.apple.com/kb/HT213490',
-                'https://support.apple.com/kb/HT213491',
-                'https://support.apple.com/kb/HT213493',
-                'https://support.apple.com/kb/HT213494',
-                'https://ubuntu.com/security/notices/USN-5570-1',
-                'https://ubuntu.com/security/notices/USN-5570-2',
-                'https://ubuntu.com/security/notices/USN-5573-1',
-                'https://ubuntu.com/security/notices/USN-6736-1',
-                'https://ubuntu.com/security/notices/USN-6736-2',
-                'https://www.cve.org/CVERecord?id=CVE-2022-37434',
-                'https://www.debian.org/security/2022/dsa-5218'
-              ],
-              'severity':   'CRITICAL',
-              'suppressed': false,
-              'title':      'zlib: heap-based buffer over-read and overflow in inflate() in inflate.c via a large gzip header extra field'
-            },
-            {
-              'cve':  'CVE-2018-25032',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'nvd': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '8.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-787'
-              ],
-              'description':   'zlib before 1.2.12 allows memory corruption when deflating (i.e., when compressing) if the input has many distant matches.',
-              'diffID':        'sha256:c2605d50d001aac8d63e371109f1d75918ab3c7d1d537b8f003afd5c718cbeb0',
-              'fixedVersions': [
-                '1.2.12-r0'
-              ],
-              'installedVersion': '1.2.11-r3',
-              'packageName':      'zlib',
-              'purl':             'pkg:apk/alpine/zlib@1.2.11-r3?arch=x86&distro=3.14.2',
-              'references':       [
-                'http://seclists.org/fulldisclosure/2022/May/33',
-                'http://seclists.org/fulldisclosure/2022/May/35',
-                'http://seclists.org/fulldisclosure/2022/May/38',
-                'http://www.openwall.com/lists/oss-security/2022/03/25/2',
-                'http://www.openwall.com/lists/oss-security/2022/03/26/1',
-                'https://access.redhat.com/errata/RHSA-2022:8420',
-                'https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-25032.json',
-                'https://access.redhat.com/security/cve/CVE-2018-25032',
-                'https://bugzilla.redhat.com/2067945',
-                'https://cert-portal.siemens.com/productcert/pdf/ssa-333517.pdf',
-                'https://errata.almalinux.org/9/ALSA-2022-8420.html',
-                'https://github.com/advisories/GHSA-jc36-42cf-vqwj',
-                'https://github.com/madler/zlib/commit/5c44459c3b28a9bd3283aaceab7c615f8020c531',
-                'https://github.com/madler/zlib/compare/v1.2.11...v1.2.12',
-                'https://github.com/madler/zlib/issues/605',
-                'https://github.com/rubysec/ruby-advisory-db/blob/master/gems/nokogiri/CVE-2018-25032.yml',
-                'https://github.com/sparklemotion/nokogiri/releases/tag/v1.13.4',
-                'https://github.com/sparklemotion/nokogiri/security/advisories/GHSA-v6gp-9mmm-c6p5',
-                'https://groups.google.com/g/ruby-security-ann/c/vX7qSjsvWis/m/TJWN4oOKBwAJ',
-                'https://linux.oracle.com/cve/CVE-2018-25032.html',
-                'https://linux.oracle.com/errata/ELSA-2022-9565.html',
-                'https://lists.debian.org/debian-lts-announce/2022/04/msg00000.html',
-                'https://lists.debian.org/debian-lts-announce/2022/05/msg00008.html',
-                'https://lists.debian.org/debian-lts-announce/2022/09/msg00023.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DCZFIJBJTZ7CL5QXBFKTQ22Q26VINRUF/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DF62MVMH3QUGMBDCB3DY2ERQ6EBHTADB/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JZZPTWRYQULAOL3AW7RZJNVZ2UONXCV4/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NS2D2GFPFGOJUL4WQ3DUAY7HF4VWQ77F/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VOKNP2L734AEL47NRYGVZIKEFOUBQY5Y/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/XOKFMSNQ5D5WGMALBNBXU3GE442V74WU/',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/DCZFIJBJTZ7CL5QXBFKTQ22Q26VINRUF',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/DCZFIJBJTZ7CL5QXBFKTQ22Q26VINRUF/',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/DF62MVMH3QUGMBDCB3DY2ERQ6EBHTADB',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/DF62MVMH3QUGMBDCB3DY2ERQ6EBHTADB/',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/JZZPTWRYQULAOL3AW7RZJNVZ2UONXCV4',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/JZZPTWRYQULAOL3AW7RZJNVZ2UONXCV4/',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/NS2D2GFPFGOJUL4WQ3DUAY7HF4VWQ77F',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/NS2D2GFPFGOJUL4WQ3DUAY7HF4VWQ77F/',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/VOKNP2L734AEL47NRYGVZIKEFOUBQY5Y',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/VOKNP2L734AEL47NRYGVZIKEFOUBQY5Y/',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/XOKFMSNQ5D5WGMALBNBXU3GE442V74WU',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/XOKFMSNQ5D5WGMALBNBXU3GE442V74WU/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2018-25032',
-                'https://security.gentoo.org/glsa/202210-42',
-                'https://security.netapp.com/advisory/ntap-20220526-0009',
-                'https://security.netapp.com/advisory/ntap-20220526-0009/',
-                'https://security.netapp.com/advisory/ntap-20220729-0004',
-                'https://security.netapp.com/advisory/ntap-20220729-0004/',
-                'https://support.apple.com/kb/HT213255',
-                'https://support.apple.com/kb/HT213256',
-                'https://support.apple.com/kb/HT213257',
-                'https://ubuntu.com/security/notices/USN-5355-1',
-                'https://ubuntu.com/security/notices/USN-5355-2',
-                'https://ubuntu.com/security/notices/USN-5359-1',
-                'https://ubuntu.com/security/notices/USN-5359-2',
-                'https://ubuntu.com/security/notices/USN-5739-1',
-                'https://ubuntu.com/security/notices/USN-6736-1',
-                'https://ubuntu.com/security/notices/USN-6736-2',
-                'https://www.cve.org/CVERecord?id=CVE-2018-25032',
-                'https://www.debian.org/security/2022/dsa-5111',
-                'https://www.openwall.com/lists/oss-security/2022/03/24/1',
-                'https://www.openwall.com/lists/oss-security/2022/03/28/1',
-                'https://www.openwall.com/lists/oss-security/2022/03/28/3',
-                'https://www.oracle.com/security-alerts/cpujul2022.html'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'zlib: A flaw found in zlib when compressing (not decompressing) certain inputs'
-            }
-          ]
-        }
-      ],
-      'summary': {
-        'critical':   1,
-        'high':       32,
-        'low':        0,
-        'medium':     10,
-        'suppressed': 0,
-        'unknown':    0
-      }
-    }
-  },
-  {
-    'id':    'default/8c403756aa4819b8f14d4b0fc83b7d6c0046206b0fa96cae292fa95e782ce57b',
-    'type':  'storage.sbomscanner.kubewarden.io.vulnerabilityreport',
-    'links': {
-      'patch':  'https://localhost:8005/v1/storage.sbomscanner.kubewarden.io.vulnerabilityreports/default/8c403756aa4819b8f14d4b0fc83b7d6c0046206b0fa96cae292fa95e782ce57b',
-      'remove': 'https://localhost:8005/v1/storage.sbomscanner.kubewarden.io.vulnerabilityreports/default/8c403756aa4819b8f14d4b0fc83b7d6c0046206b0fa96cae292fa95e782ce57b',
-      'self':   'https://localhost:8005/v1/storage.sbomscanner.kubewarden.io.vulnerabilityreports/default/8c403756aa4819b8f14d4b0fc83b7d6c0046206b0fa96cae292fa95e782ce57b',
-      'update': 'https://localhost:8005/v1/storage.sbomscanner.kubewarden.io.vulnerabilityreports/default/8c403756aa4819b8f14d4b0fc83b7d6c0046206b0fa96cae292fa95e782ce57b',
-      'view':   'https://localhost:8005/apis/storage.sbomscanner.kubewarden.io/v1alpha1/namespaces/default/vulnerabilityreports/8c403756aa4819b8f14d4b0fc83b7d6c0046206b0fa96cae292fa95e782ce57b'
-    },
-    'apiVersion':    'storage.sbomscanner.kubewarden.io/v1alpha1',
-    'imageMetadata': {
-      'digest':      'sha256:8265dab7fa6e31857b7c90f1fb1a2d9b81ea285de45864171307b575e3c6ef31',
-      'platform':    'linux/amd64',
-      'registry':    'demo-02',
-      'registryURI': 'ghcr.io',
-      'repository':  'linuxcontainers/alpine',
-      'tag':         '3.17.0'
-    },
-    'kind':     'VulnerabilityReport',
-    'metadata': {
-      'creationTimestamp': '2026-01-09T22:47:03Z',
-      'fields':            [
-        '8c403756aa4819b8f14d4b0fc83b7d6c0046206b0fa96cae292fa95e782ce57b',
-        'ghcr.io/linuxcontainers/alpine:3.17.0',
-        'linux/amd64',
-        '68 (0 suppressed)'
-      ],
-      'labels': {
-        'app.kubernetes.io/managed-by':          'sbomscanner',
-        'app.kubernetes.io/part-of':             'sbomscanner',
-        'sbomscanner.kubewarden.io/scanjob-uid': '42184d01-4b15-466f-98aa-e802d1b6b6b8'
-      },
-      'name':            '8c403756aa4819b8f14d4b0fc83b7d6c0046206b0fa96cae292fa95e782ce57b',
-      'namespace':       'default',
-      'ownerReferences': [
-        {
-          'apiVersion':         'storage.sbomscanner.kubewarden.io/v1alpha1',
-          'blockOwnerDeletion': true,
-          'controller':         true,
-          'kind':               'SBOM',
-          'name':               '8c403756aa4819b8f14d4b0fc83b7d6c0046206b0fa96cae292fa95e782ce57b',
-          'uid':                '431c9dba-7278-49ae-88b5-77ad0f39d0c1'
-        }
-      ],
-      'relationships': [
-        {
-          'fromId':   'default/8c403756aa4819b8f14d4b0fc83b7d6c0046206b0fa96cae292fa95e782ce57b',
-          'fromType': 'storage.sbomscanner.kubewarden.io.sbom',
-          'rel':      'owner',
-          'state':    'active',
-          'message':  'Resource is current'
-        }
-      ],
-      'resourceVersion': '6',
-      'state':           {
-        'error':         false,
-        'message':       'Resource is current',
-        'name':          'active',
-        'transitioning': false
-      },
-      'uid': '97360c77-dabb-434d-938a-efafaa6a61ce'
-    },
-    'report': {
-      'results': [
-        {
-          'class':           'os-pkgs',
-          'target':          '/var/run/worker/trivy.sbom.2056584901.json (alpine 3.17.0)',
-          'type':            'alpine',
-          'vulnerabilities': [
-            {
-              'cve':  'CVE-2023-42363',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.5',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.8',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   'A use-after-free vulnerability was discovered in xasprintf function in xfuncs_printf.c:344 in BusyBox v.1.36.1.',
-              'diffID':        'sha256:ded7a220bb058e28ee3254fbba04ca90b679070424424761a53a043b93b612bf',
-              'fixedVersions': [
-                '1.35.0-r31'
-              ],
-              'installedVersion': '1.35.0-r29',
-              'packageName':      'busybox',
-              'purl':             'pkg:apk/alpine/busybox@1.35.0-r29?arch=x86_64&distro=3.17.0',
-              'references':       [
-                'http://lists.busybox.net/pipermail/busybox/2024-May/090760.html',
-                'https://access.redhat.com/security/cve/CVE-2023-42363',
-                'https://bugs.busybox.net/show_bug.cgi?id=15865',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-42363',
-                'https://ubuntu.com/security/notices/USN-6961-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-42363'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk'
-            },
-            {
-              'cve':  'CVE-2023-42364',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.5',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.8',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   'A use-after-free vulnerability in BusyBox v.1.36.1 allows attackers to cause a denial of service via a crafted awk pattern in the awk.c evaluate function.',
-              'diffID':        'sha256:ded7a220bb058e28ee3254fbba04ca90b679070424424761a53a043b93b612bf',
-              'fixedVersions': [
-                '1.35.0-r31'
-              ],
-              'installedVersion': '1.35.0-r29',
-              'packageName':      'busybox',
-              'purl':             'pkg:apk/alpine/busybox@1.35.0-r29?arch=x86_64&distro=3.17.0',
-              'references':       [
-                'http://lists.busybox.net/pipermail/busybox/2024-May/090762.html',
-                'https://access.redhat.com/security/cve/CVE-2023-42364',
-                'https://bugs.busybox.net/show_bug.cgi?id=15868',
-                'https://gitlab.alpinelinux.org/alpine/aports/-/blob/master/main/busybox/CVE-2023-42364-CVE-2023-42365.patch',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-42364',
-                'https://ubuntu.com/security/notices/USN-6961-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-42364'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'busybox: use-after-free'
-            },
-            {
-              'cve':  'CVE-2023-42365',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.5',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.8',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   'A use-after-free vulnerability was discovered in BusyBox v.1.36.1 via a crafted awk pattern in the awk.c copyvar function.',
-              'diffID':        'sha256:ded7a220bb058e28ee3254fbba04ca90b679070424424761a53a043b93b612bf',
-              'fixedVersions': [
-                '1.35.0-r31'
-              ],
-              'installedVersion': '1.35.0-r29',
-              'packageName':      'busybox',
-              'purl':             'pkg:apk/alpine/busybox@1.35.0-r29?arch=x86_64&distro=3.17.0',
-              'references':       [
-                'http://lists.busybox.net/pipermail/busybox/2024-May/090762.html',
-                'https://access.redhat.com/security/cve/CVE-2023-42365',
-                'https://bugs.busybox.net/show_bug.cgi?id=15871',
-                'https://gitlab.alpinelinux.org/alpine/aports/-/blob/master/main/busybox/CVE-2023-42364-CVE-2023-42365.patch',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-42365',
-                'https://ubuntu.com/security/notices/USN-6961-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-42365'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'busybox: use-after-free'
-            },
-            {
-              'cve':  'CVE-2023-42366',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.5',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.1',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-787'
-              ],
-              'description':   'A heap-buffer-overflow was discovered in BusyBox v.1.36.1 in the next_token function at awk.c:1159.',
-              'diffID':        'sha256:ded7a220bb058e28ee3254fbba04ca90b679070424424761a53a043b93b612bf',
-              'fixedVersions': [
-                '1.35.0-r30'
-              ],
-              'installedVersion': '1.35.0-r29',
-              'packageName':      'busybox',
-              'purl':             'pkg:apk/alpine/busybox@1.35.0-r29?arch=x86_64&distro=3.17.0',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2023-42366',
-                'https://bugs.busybox.net/show_bug.cgi?id=15874',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-42366',
-                'https://security.netapp.com/advisory/ntap-20241206-0007/',
-                'https://www.cve.org/CVERecord?id=CVE-2023-42366'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'busybox: A heap-buffer-overflow'
-            },
-            {
-              'cve':  'CVE-2023-42363',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.5',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.8',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   'A use-after-free vulnerability was discovered in xasprintf function in xfuncs_printf.c:344 in BusyBox v.1.36.1.',
-              'diffID':        'sha256:ded7a220bb058e28ee3254fbba04ca90b679070424424761a53a043b93b612bf',
-              'fixedVersions': [
-                '1.35.0-r31'
-              ],
-              'installedVersion': '1.35.0-r29',
-              'packageName':      'busybox-binsh',
-              'purl':             'pkg:apk/alpine/busybox-binsh@1.35.0-r29?arch=x86_64&distro=3.17.0',
-              'references':       [
-                'http://lists.busybox.net/pipermail/busybox/2024-May/090760.html',
-                'https://access.redhat.com/security/cve/CVE-2023-42363',
-                'https://bugs.busybox.net/show_bug.cgi?id=15865',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-42363',
-                'https://ubuntu.com/security/notices/USN-6961-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-42363'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk'
-            },
-            {
-              'cve':  'CVE-2023-42364',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.5',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.8',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   'A use-after-free vulnerability in BusyBox v.1.36.1 allows attackers to cause a denial of service via a crafted awk pattern in the awk.c evaluate function.',
-              'diffID':        'sha256:ded7a220bb058e28ee3254fbba04ca90b679070424424761a53a043b93b612bf',
-              'fixedVersions': [
-                '1.35.0-r31'
-              ],
-              'installedVersion': '1.35.0-r29',
-              'packageName':      'busybox-binsh',
-              'purl':             'pkg:apk/alpine/busybox-binsh@1.35.0-r29?arch=x86_64&distro=3.17.0',
-              'references':       [
-                'http://lists.busybox.net/pipermail/busybox/2024-May/090762.html',
-                'https://access.redhat.com/security/cve/CVE-2023-42364',
-                'https://bugs.busybox.net/show_bug.cgi?id=15868',
-                'https://gitlab.alpinelinux.org/alpine/aports/-/blob/master/main/busybox/CVE-2023-42364-CVE-2023-42365.patch',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-42364',
-                'https://ubuntu.com/security/notices/USN-6961-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-42364'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'busybox: use-after-free'
-            },
-            {
-              'cve':  'CVE-2023-42365',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.5',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.8',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   'A use-after-free vulnerability was discovered in BusyBox v.1.36.1 via a crafted awk pattern in the awk.c copyvar function.',
-              'diffID':        'sha256:ded7a220bb058e28ee3254fbba04ca90b679070424424761a53a043b93b612bf',
-              'fixedVersions': [
-                '1.35.0-r31'
-              ],
-              'installedVersion': '1.35.0-r29',
-              'packageName':      'busybox-binsh',
-              'purl':             'pkg:apk/alpine/busybox-binsh@1.35.0-r29?arch=x86_64&distro=3.17.0',
-              'references':       [
-                'http://lists.busybox.net/pipermail/busybox/2024-May/090762.html',
-                'https://access.redhat.com/security/cve/CVE-2023-42365',
-                'https://bugs.busybox.net/show_bug.cgi?id=15871',
-                'https://gitlab.alpinelinux.org/alpine/aports/-/blob/master/main/busybox/CVE-2023-42364-CVE-2023-42365.patch',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-42365',
-                'https://ubuntu.com/security/notices/USN-6961-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-42365'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'busybox: use-after-free'
-            },
-            {
-              'cve':  'CVE-2023-42366',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.5',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.1',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-787'
-              ],
-              'description':   'A heap-buffer-overflow was discovered in BusyBox v.1.36.1 in the next_token function at awk.c:1159.',
-              'diffID':        'sha256:ded7a220bb058e28ee3254fbba04ca90b679070424424761a53a043b93b612bf',
-              'fixedVersions': [
-                '1.35.0-r30'
-              ],
-              'installedVersion': '1.35.0-r29',
-              'packageName':      'busybox-binsh',
-              'purl':             'pkg:apk/alpine/busybox-binsh@1.35.0-r29?arch=x86_64&distro=3.17.0',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2023-42366',
-                'https://bugs.busybox.net/show_bug.cgi?id=15874',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-42366',
-                'https://security.netapp.com/advisory/ntap-20241206-0007/',
-                'https://www.cve.org/CVERecord?id=CVE-2023-42366'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'busybox: A heap-buffer-overflow'
-            },
-            {
-              'cve':  'CVE-2022-4450',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'nvd': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-415'
-              ],
-              'description':   'The function PEM_read_bio_ex() reads a PEM file from a BIO and parses and\ndecodes the "name" (e.g. "CERTIFICATE"), any header data and the payload data.\nIf the function succeeds then the "name_out", "header" and "data" arguments are\npopulated with pointers to buffers containing the relevant decoded data. The\ncaller is responsible for freeing those buffers. It is possible to construct a\nPEM file that results in 0 bytes of payload data. In this case PEM_read_bio_ex()\nwill return a failure code but will populate the header argument with a pointer\nto a buffer that has already been freed. If the caller also frees this buffer\nthen a double free will occur. This will most likely lead to a crash. This\ncould be exploited by an attacker who has the ability to supply malicious PEM\nfiles for parsing to achieve a denial of service attack.\n\nThe functions PEM_read_bio() and PEM_read() are simple wrappers around\nPEM_read_bio_ex() and therefore these functions are also directly affected.\n\nThese functions are also called indirectly by a number of other OpenSSL\nfunctions including PEM_X509_INFO_read_bio_ex() and\nSSL_CTX_use_serverinfo_file() which are also vulnerable. Some OpenSSL internal\nuses of these functions are not vulnerable because the caller does not free the\nheader argument if PEM_read_bio_ex() returns a failure code. These locations\ninclude the PEM_read_bio_TYPE() functions as well as the decoders introduced in\nOpenSSL 3.0.\n\nThe OpenSSL asn1parse command line application is also impacted by this issue.',
-              'diffID':        'sha256:8adafc86079f2f586db2e9c632b5977e96ebfce0fdb93f7c52bc7c83078bad29',
-              'fixedVersions': [
-                '3.0.8-r0'
-              ],
-              'installedVersion': '3.0.7-r2',
-              'packageName':      'libcrypto3',
-              'purl':             'pkg:apk/alpine/libcrypto3@3.0.7-r2?arch=x86_64&distro=3.17.0',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2023:2165',
-                'https://access.redhat.com/security/cve/CVE-2022-4450',
-                'https://bugzilla.redhat.com/1960321',
-                'https://bugzilla.redhat.com/2164440',
-                'https://bugzilla.redhat.com/2164487',
-                'https://bugzilla.redhat.com/2164492',
-                'https://bugzilla.redhat.com/2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144000',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144003',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144006',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144008',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144010',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144012',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144015',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144017',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144019',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2145170',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2158412',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164440',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164487',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164488',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164492',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164497',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164499',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164500',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4203',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4304',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4450',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0215',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0216',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0217',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0286',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0401',
-                'https://errata.almalinux.org/9/ALSA-2023-2165.html',
-                'https://errata.rockylinux.org/RLSA-2023:0946',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=63bcf189be73a9cc1264059bed6f57974be74a83',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=bbcf509bd046b34cca19c766bbddc31683d0858b',
-                'https://linux.oracle.com/cve/CVE-2022-4450.html',
-                'https://linux.oracle.com/errata/ELSA-2023-32791.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2022-4450',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0003',
-                'https://rustsec.org/advisories/RUSTSEC-2023-0010.html',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://ubuntu.com/security/notices/USN-5844-1',
-                'https://ubuntu.com/security/notices/USN-6564-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2022-4450',
-                'https://www.openssl.org/news/secadv/20230207.txt'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: double free after calling PEM_read_bio_ex'
-            },
-            {
-              'cve':  'CVE-2023-0215',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'nvd': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   'The public API function BIO_new_NDEF is a helper function used for streaming\nASN.1 data via a BIO. It is primarily used internally to OpenSSL to support the\nSMIME, CMS and PKCS7 streaming capabilities, but may also be called directly by\nend user applications.\n\nThe function receives a BIO from the caller, prepends a new BIO_f_asn1 filter\nBIO onto the front of it to form a BIO chain, and then returns the new head of\nthe BIO chain to the caller. Under certain conditions, for example if a CMS\nrecipient public key is invalid, the new filter BIO is freed and the function\nreturns a NULL result indicating a failure. However, in this case, the BIO chain\nis not properly cleaned up and the BIO passed by the caller still retains\ninternal pointers to the previously freed filter BIO. If the caller then goes on\nto call BIO_pop() on the BIO then a use-after-free will occur. This will most\nlikely result in a crash.\n\n\n\nThis scenario occurs directly in the internal function B64_write_ASN1() which\nmay cause BIO_new_NDEF() to be called and will subsequently call BIO_pop() on\nthe BIO. This internal function is in turn called by the public API functions\nPEM_write_bio_ASN1_stream, PEM_write_bio_CMS_stream, PEM_write_bio_PKCS7_stream,\nSMIME_write_ASN1, SMIME_write_CMS and SMIME_write_PKCS7.\n\nOther public API functions that may be impacted by this include\ni2d_ASN1_bio_stream, BIO_new_CMS, BIO_new_PKCS7, i2d_CMS_bio_stream and\ni2d_PKCS7_bio_stream.\n\nThe OpenSSL cms and smime command line applications are similarly affected.',
-              'diffID':        'sha256:8adafc86079f2f586db2e9c632b5977e96ebfce0fdb93f7c52bc7c83078bad29',
-              'fixedVersions': [
-                '3.0.8-r0'
-              ],
-              'installedVersion': '3.0.7-r2',
-              'packageName':      'libcrypto3',
-              'purl':             'pkg:apk/alpine/libcrypto3@3.0.7-r2?arch=x86_64&distro=3.17.0',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2023:2165',
-                'https://access.redhat.com/security/cve/CVE-2023-0215',
-                'https://bugzilla.redhat.com/1960321',
-                'https://bugzilla.redhat.com/2164440',
-                'https://bugzilla.redhat.com/2164487',
-                'https://bugzilla.redhat.com/2164492',
-                'https://bugzilla.redhat.com/2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144000',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144003',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144006',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144008',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144010',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144012',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144015',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144017',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144019',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2145170',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2158412',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164440',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164487',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164488',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164492',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164497',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164499',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164500',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4203',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4304',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4450',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0215',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0216',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0217',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0286',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0401',
-                'https://errata.almalinux.org/9/ALSA-2023-2165.html',
-                'https://errata.rockylinux.org/RLSA-2023:0946',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=8818064ce3c3c0f1b740a5aaba2a987e75bfbafd',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=9816136fe31d92ace4037d5da5257f763aeeb4eb',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=c3829dd8825c654652201e16f8a0a0c46ee3f344',
-                'https://linux.oracle.com/cve/CVE-2023-0215.html',
-                'https://linux.oracle.com/errata/ELSA-2023-32791.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-0215',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0003',
-                'https://rustsec.org/advisories/RUSTSEC-2023-0009.html',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://security.netapp.com/advisory/ntap-20230427-0007',
-                'https://security.netapp.com/advisory/ntap-20230427-0007/',
-                'https://security.netapp.com/advisory/ntap-20230427-0009',
-                'https://security.netapp.com/advisory/ntap-20230427-0009/',
-                'https://security.netapp.com/advisory/ntap-20240621-0006',
-                'https://security.netapp.com/advisory/ntap-20240621-0006/',
-                'https://ubuntu.com/security/notices/USN-5844-1',
-                'https://ubuntu.com/security/notices/USN-5845-1',
-                'https://ubuntu.com/security/notices/USN-5845-2',
-                'https://ubuntu.com/security/notices/USN-6564-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-0215',
-                'https://www.openssl.org/news/secadv/20230207.txt'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: use-after-free following BIO_new_NDEF'
-            },
-            {
-              'cve':  'CVE-2023-0216',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'nvd': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-476'
-              ],
-              'description':   'An invalid pointer dereference on read can be triggered when an\napplication tries to load malformed PKCS7 data with the\nd2i_PKCS7(), d2i_PKCS7_bio() or d2i_PKCS7_fp() functions.\n\nThe result of the dereference is an application crash which could\nlead to a denial of service attack. The TLS implementation in OpenSSL\ndoes not call this function however third party applications might\ncall these functions on untrusted data.',
-              'diffID':        'sha256:8adafc86079f2f586db2e9c632b5977e96ebfce0fdb93f7c52bc7c83078bad29',
-              'fixedVersions': [
-                '3.0.8-r0'
-              ],
-              'installedVersion': '3.0.7-r2',
-              'packageName':      'libcrypto3',
-              'purl':             'pkg:apk/alpine/libcrypto3@3.0.7-r2?arch=x86_64&distro=3.17.0',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2023:0946',
-                'https://access.redhat.com/security/cve/CVE-2023-0216',
-                'https://bugzilla.redhat.com/2164440',
-                'https://bugzilla.redhat.com/2164487',
-                'https://bugzilla.redhat.com/2164488',
-                'https://bugzilla.redhat.com/2164492',
-                'https://bugzilla.redhat.com/2164494',
-                'https://bugzilla.redhat.com/2164497',
-                'https://bugzilla.redhat.com/2164499',
-                'https://bugzilla.redhat.com/2164500',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144000',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144003',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144006',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144008',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144010',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144012',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144015',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144017',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144019',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2145170',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2158412',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164440',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164487',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164488',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164492',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164497',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164499',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164500',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4203',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4304',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4450',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0215',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0216',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0217',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0286',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0401',
-                'https://errata.almalinux.org/9/ALSA-2023-0946.html',
-                'https://errata.rockylinux.org/RLSA-2023:0946',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=934a04f0e775309cadbef0aa6b9692e1b12a76c6',
-                'https://linux.oracle.com/cve/CVE-2023-0216.html',
-                'https://linux.oracle.com/errata/ELSA-2023-12152.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-0216',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0003',
-                'https://rustsec.org/advisories/RUSTSEC-2023-0011.html',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://ubuntu.com/security/notices/USN-5844-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-0216',
-                'https://www.openssl.org/news/secadv/20230207.txt'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: invalid pointer dereference in d2i_PKCS7 functions'
-            },
-            {
-              'cve':  'CVE-2023-0217',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'nvd': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-476'
-              ],
-              'description':   'An invalid pointer dereference on read can be triggered when an\napplication tries to check a malformed DSA public key by the\nEVP_PKEY_public_check() function. This will most likely lead\nto an application crash. This function can be called on public\nkeys supplied from untrusted sources which could allow an attacker\nto cause a denial of service attack.\n\nThe TLS implementation in OpenSSL does not call this function\nbut applications might call the function if there are additional\nsecurity requirements imposed by standards such as FIPS 140-3.',
-              'diffID':        'sha256:8adafc86079f2f586db2e9c632b5977e96ebfce0fdb93f7c52bc7c83078bad29',
-              'fixedVersions': [
-                '3.0.8-r0'
-              ],
-              'installedVersion': '3.0.7-r2',
-              'packageName':      'libcrypto3',
-              'purl':             'pkg:apk/alpine/libcrypto3@3.0.7-r2?arch=x86_64&distro=3.17.0',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2023:0946',
-                'https://access.redhat.com/security/cve/CVE-2023-0217',
-                'https://bugzilla.redhat.com/2164440',
-                'https://bugzilla.redhat.com/2164487',
-                'https://bugzilla.redhat.com/2164488',
-                'https://bugzilla.redhat.com/2164492',
-                'https://bugzilla.redhat.com/2164494',
-                'https://bugzilla.redhat.com/2164497',
-                'https://bugzilla.redhat.com/2164499',
-                'https://bugzilla.redhat.com/2164500',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144000',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144003',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144006',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144008',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144010',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144012',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144015',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144017',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144019',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2145170',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2158412',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164440',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164487',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164488',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164492',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164497',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164499',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164500',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4203',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4304',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4450',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0215',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0216',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0217',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0286',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0401',
-                'https://errata.almalinux.org/9/ALSA-2023-0946.html',
-                'https://errata.rockylinux.org/RLSA-2023:0946',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=23985bac83fd50c8e29431009302b5442f985096',
-                'https://linux.oracle.com/cve/CVE-2023-0217.html',
-                'https://linux.oracle.com/errata/ELSA-2023-12152.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-0217',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0003',
-                'https://rustsec.org/advisories/RUSTSEC-2023-0012.html',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://ubuntu.com/security/notices/USN-5844-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-0217',
-                'https://www.openssl.org/news/secadv/20230207.txt'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: NULL dereference validating DSA public key'
-            },
-            {
-              'cve':  'CVE-2023-0286',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '7.4',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H'
-                },
-                'nvd': {
-                  'v3score':  '7.4',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.4',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-843'
-              ],
-              'description':   'There is a type confusion vulnerability relating to X.400 address processing\ninside an X.509 GeneralName. X.400 addresses were parsed as an ASN1_STRING but\nthe public structure definition for GENERAL_NAME incorrectly specified the type\nof the x400Address field as ASN1_TYPE. This field is subsequently interpreted by\nthe OpenSSL function GENERAL_NAME_cmp as an ASN1_TYPE rather than an\nASN1_STRING.\n\nWhen CRL checking is enabled (i.e. the application sets the\nX509_V_FLAG_CRL_CHECK flag), this vulnerability may allow an attacker to pass\narbitrary pointers to a memcmp call, enabling them to read memory contents or\nenact a denial of service. In most cases, the attack requires the attacker to\nprovide both the certificate chain and CRL, neither of which need to have a\nvalid signature. If the attacker only controls one of these inputs, the other\ninput must already contain an X.400 address as a CRL distribution point, which\nis uncommon. As such, this vulnerability is most likely to only affect\napplications which have implemented their own functionality for retrieving CRLs\nover a network.',
-              'diffID':        'sha256:8adafc86079f2f586db2e9c632b5977e96ebfce0fdb93f7c52bc7c83078bad29',
-              'fixedVersions': [
-                '3.0.8-r0'
-              ],
-              'installedVersion': '3.0.7-r2',
-              'packageName':      'libcrypto3',
-              'purl':             'pkg:apk/alpine/libcrypto3@3.0.7-r2?arch=x86_64&distro=3.17.0',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2025:7937',
-                'https://access.redhat.com/security/cve/CVE-2023-0286',
-                'https://access.redhat.com/security/cve/cve-2023-0286',
-                'https://bugzilla.redhat.com/2164440',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144000',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144003',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144006',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144008',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144010',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144012',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144015',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144017',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144019',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2145170',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2158412',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164440',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164487',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164488',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164492',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164497',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164499',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164500',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4203',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4304',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4450',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0215',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0216',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0217',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0286',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0401',
-                'https://errata.almalinux.org/9/ALSA-2025-7937.html',
-                'https://errata.rockylinux.org/RLSA-2023:0946',
-                'https://ftp.openbsd.org/pub/OpenBSD/LibreSSL/libressl-3.6.2-relnotes.txt',
-                'https://ftp.openbsd.org/pub/OpenBSD/patches/7.2/common/018_x509.patch.sig',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=2c6c9d439b484e1ba9830d8454a34fa4f80fdfe9',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=2f7530077e0ef79d98718138716bc51ca0cad658',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=fd2af07dc083a350c959147097003a14a5e8ac4d',
-                'https://github.com/pyca/cryptography',
-                'https://github.com/pyca/cryptography/security/advisories/GHSA-x4qr-2fvf-3mr5',
-                'https://linux.oracle.com/cve/CVE-2023-0286.html',
-                'https://linux.oracle.com/errata/ELSA-2025-7937.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-0286',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0003',
-                'https://rustsec.org/advisories/RUSTSEC-2023-0006.html',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://ubuntu.com/security/notices/USN-5844-1',
-                'https://ubuntu.com/security/notices/USN-5845-1',
-                'https://ubuntu.com/security/notices/USN-5845-2',
-                'https://ubuntu.com/security/notices/USN-6564-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-0286',
-                'https://www.openssl.org/news/secadv/20230207.txt'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: X.400 address type confusion in X.509 GeneralName'
-            },
-            {
-              'cve':  'CVE-2023-0401',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'nvd': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-476'
-              ],
-              'description':   'A NULL pointer can be dereferenced when signatures are being\nverified on PKCS7 signed or signedAndEnveloped data. In case the hash\nalgorithm used for the signature is known to the OpenSSL library but\nthe implementation of the hash algorithm is not available the digest\ninitialization will fail. There is a missing check for the return\nvalue from the initialization function which later leads to invalid\nusage of the digest API most likely leading to a crash.\n\nThe unavailability of an algorithm can be caused by using FIPS\nenabled configuration of providers or more commonly by not loading\nthe legacy provider.\n\nPKCS7 data is processed by the SMIME library calls and also by the\ntime stamp (TS) library calls. The TLS implementation in OpenSSL does\nnot call these functions however third party applications would be\naffected if they call these functions to verify signatures on untrusted\ndata.',
-              'diffID':        'sha256:8adafc86079f2f586db2e9c632b5977e96ebfce0fdb93f7c52bc7c83078bad29',
-              'fixedVersions': [
-                '3.0.8-r0'
-              ],
-              'installedVersion': '3.0.7-r2',
-              'packageName':      'libcrypto3',
-              'purl':             'pkg:apk/alpine/libcrypto3@3.0.7-r2?arch=x86_64&distro=3.17.0',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2023:0946',
-                'https://access.redhat.com/security/cve/CVE-2023-0401',
-                'https://bugzilla.redhat.com/2164440',
-                'https://bugzilla.redhat.com/2164487',
-                'https://bugzilla.redhat.com/2164488',
-                'https://bugzilla.redhat.com/2164492',
-                'https://bugzilla.redhat.com/2164494',
-                'https://bugzilla.redhat.com/2164497',
-                'https://bugzilla.redhat.com/2164499',
-                'https://bugzilla.redhat.com/2164500',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144000',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144003',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144006',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144008',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144010',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144012',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144015',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144017',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144019',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2145170',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2158412',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164440',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164487',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164488',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164492',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164497',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164499',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164500',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4203',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4304',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4450',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0215',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0216',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0217',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0286',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0401',
-                'https://errata.almalinux.org/9/ALSA-2023-0946.html',
-                'https://errata.rockylinux.org/RLSA-2023:0946',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=d3b6dfd70db844c4499bec6ad6601623a565e674',
-                'https://github.com/alexcrichton/openssl-src-rs',
-                'https://linux.oracle.com/cve/CVE-2023-0401.html',
-                'https://linux.oracle.com/errata/ELSA-2023-12152.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-0401',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0003',
-                'https://rustsec.org/advisories/RUSTSEC-2023-0013.html',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://ubuntu.com/security/notices/USN-5844-1',
-                'https://ubuntu.com/security/notices/USN-6564-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-0401',
-                'https://www.openssl.org/news/secadv/20230207.txt'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: NULL dereference during PKCS7 data verification'
-            },
-            {
-              'cve':  'CVE-2023-0464',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-295'
-              ],
-              'description':   "A security vulnerability has been identified in all supported versions\n\nof OpenSSL related to the verification of X.509 certificate chains\nthat include policy constraints.  Attackers may be able to exploit this\nvulnerability by creating a malicious certificate chain that triggers\nexponential use of computational resources, leading to a denial-of-service\n(DoS) attack on affected systems.\n\nPolicy processing is disabled by default but can be enabled by passing\nthe `-policy' argument to the command line utilities or by calling the\n`X509_VERIFY_PARAM_set1_policies()' function.",
-              'diffID':        'sha256:8adafc86079f2f586db2e9c632b5977e96ebfce0fdb93f7c52bc7c83078bad29',
-              'fixedVersions': [
-                '3.0.8-r1'
-              ],
-              'installedVersion': '3.0.7-r2',
-              'packageName':      'libcrypto3',
-              'purl':             'pkg:apk/alpine/libcrypto3@3.0.7-r2?arch=x86_64&distro=3.17.0',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2023:3722',
-                'https://access.redhat.com/security/cve/CVE-2023-0464',
-                'https://bugzilla.redhat.com/2181082',
-                'https://bugzilla.redhat.com/2182561',
-                'https://bugzilla.redhat.com/2182565',
-                'https://bugzilla.redhat.com/2188461',
-                'https://bugzilla.redhat.com/2207947',
-                'https://errata.almalinux.org/9/ALSA-2023-3722.html',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=2017771e2db3e2b96f89bbe8766c3209f6a99545',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=2dcd4f1e3115f38cefa43e3efbe9b801c27e642e',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=879f7080d7e141f415c79eaa3a8ac4a3dad0348b',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=959c59c7a0164117e7f8366466a32bb1f8d77ff1',
-                'https://linux.oracle.com/cve/CVE-2023-0464.html',
-                'https://linux.oracle.com/errata/ELSA-2023-3722.html',
-                'https://lists.debian.org/debian-lts-announce/2023/06/msg00011.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-0464',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://security.netapp.com/advisory/ntap-20230406-0006/',
-                'https://security.netapp.com/advisory/ntap-20240621-0006/',
-                'https://ubuntu.com/security/notices/USN-6039-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.couchbase.com/alerts/',
-                'https://www.cve.org/CVERecord?id=CVE-2023-0464',
-                'https://www.debian.org/security/2023/dsa-5417',
-                'https://www.openssl.org/news/secadv/20230322.txt'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: Denial of service by excessive resource usage in verifying X509 policy constraints'
-            },
-            {
-              'cve':  'CVE-2023-5363',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N'
-                },
-                'redhat': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-684'
-              ],
-              'description':   "Issue summary: A bug has been identified in the processing of key and\ninitialisation vector (IV) lengths.  This can lead to potential truncation\nor overruns during the initialisation of some symmetric ciphers.\n\nImpact summary: A truncation in the IV can result in non-uniqueness,\nwhich could result in loss of confidentiality for some cipher modes.\n\nWhen calling EVP_EncryptInit_ex2(), EVP_DecryptInit_ex2() or\nEVP_CipherInit_ex2() the provided OSSL_PARAM array is processed after\nthe key and IV have been established.  Any alterations to the key length,\nvia the \"keylen\" parameter or the IV length, via the \"ivlen\" parameter,\nwithin the OSSL_PARAM array will not take effect as intended, potentially\ncausing truncation or overreading of these values.  The following ciphers\nand cipher modes are impacted: RC2, RC4, RC5, CCM, GCM and OCB.\n\nFor the CCM, GCM and OCB cipher modes, truncation of the IV can result in\nloss of confidentiality.  For example, when following NIST's SP 800-38D\nsection 8.2.1 guidance for constructing a deterministic IV for AES in\nGCM mode, truncation of the counter portion could lead to IV reuse.\n\nBoth truncations and overruns of the key and overruns of the IV will\nproduce incorrect results and could, in some cases, trigger a memory\nexception.  However, these issues are not currently assessed as security\ncritical.\n\nChanging the key and/or IV lengths is not considered to be a common operation\nand the vulnerable API was recently introduced. Furthermore it is likely that\napplication developers will have spotted this problem during testing since\ndecryption would fail unless both peers in the communication were similarly\nvulnerable. For these reasons we expect the probability of an application being\nvulnerable to this to be quite low. However if an application is vulnerable then\nthis issue is considered very serious. For these reasons we have assessed this\nissue as Moderate severity overall.\n\nThe OpenSSL SSL/TLS implementation is not affected by this issue.\n\nThe OpenSSL 3.0 and 3.1 FIPS providers are not affected by this because\nthe issue lies outside of the FIPS provider boundary.\n\nOpenSSL 3.1 and 3.0 are vulnerable to this issue.",
-              'diffID':        'sha256:8adafc86079f2f586db2e9c632b5977e96ebfce0fdb93f7c52bc7c83078bad29',
-              'fixedVersions': [
-                '3.0.12-r0'
-              ],
-              'installedVersion': '3.0.7-r2',
-              'packageName':      'libcrypto3',
-              'purl':             'pkg:apk/alpine/libcrypto3@3.0.7-r2?arch=x86_64&distro=3.17.0',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2023/10/24/1',
-                'https://access.redhat.com/errata/RHSA-2024:0310',
-                'https://access.redhat.com/security/cve/CVE-2023-5363',
-                'https://bugzilla.redhat.com/2243839',
-                'https://errata.almalinux.org/9/ALSA-2024-0310.html',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=0df40630850fb2740e6be6890bb905d3fc623b2d',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=5f69f5c65e483928c4b28ed16af6e5742929f1ee',
-                'https://linux.oracle.com/cve/CVE-2023-5363.html',
-                'https://linux.oracle.com/errata/ELSA-2024-12093.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-5363',
-                'https://security.netapp.com/advisory/ntap-20231027-0010/',
-                'https://security.netapp.com/advisory/ntap-20240201-0003/',
-                'https://security.netapp.com/advisory/ntap-20240201-0004/',
-                'https://security.netapp.com/advisory/ntap-20241108-0002/',
-                'https://ubuntu.com/security/notices/USN-6450-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-5363',
-                'https://www.debian.org/security/2023/dsa-5532',
-                'https://www.openssl.org/news/secadv/20231024.txt'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: Incorrect cipher key and IV length processing'
-            },
-            {
-              'cve':  'CVE-2024-6119',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-843'
-              ],
-              'description':   "Issue summary: Applications performing certificate name checks (e.g., TLS\nclients checking server certificates) may attempt to read an invalid memory\naddress resulting in abnormal termination of the application process.\n\nImpact summary: Abnormal termination of an application can a cause a denial of\nservice.\n\nApplications performing certificate name checks (e.g., TLS clients checking\nserver certificates) may attempt to read an invalid memory address when\ncomparing the expected name with an `otherName` subject alternative name of an\nX.509 certificate. This may result in an exception that terminates the\napplication program.\n\nNote that basic certificate chain validation (signatures, dates, ...) is not\naffected, the denial of service can occur only when the application also\nspecifies an expected DNS name, Email address or IP address.\n\nTLS servers rarely solicit client certificates, and even when they do, they\ngenerally don't perform a name check against a reference identifier (expected\nidentity), but rather extract the presented identity after checking the\ncertificate chain.  So TLS servers are generally not affected and the severity\nof the issue is Moderate.\n\nThe FIPS modules in 3.3, 3.2, 3.1 and 3.0 are not affected by this issue.",
-              'diffID':        'sha256:8adafc86079f2f586db2e9c632b5977e96ebfce0fdb93f7c52bc7c83078bad29',
-              'fixedVersions': [
-                '3.0.15-r0'
-              ],
-              'installedVersion': '3.0.7-r2',
-              'packageName':      'libcrypto3',
-              'purl':             'pkg:apk/alpine/libcrypto3@3.0.7-r2?arch=x86_64&distro=3.17.0',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2024/09/03/4',
-                'https://access.redhat.com/errata/RHSA-2024:8935',
-                'https://access.redhat.com/security/cve/CVE-2024-6119',
-                'https://bugzilla.redhat.com/2306158',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2306158',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-6119',
-                'https://errata.almalinux.org/9/ALSA-2024-8935.html',
-                'https://errata.rockylinux.org/RLSA-2024:6783',
-                'https://github.com/openssl/openssl/commit/05f360d9e849a1b277db628f1f13083a7f8dd04f',
-                'https://github.com/openssl/openssl/commit/06d1dc3fa96a2ba5a3e22735a033012aadc9f0d6',
-                'https://github.com/openssl/openssl/commit/621f3729831b05ee828a3203eddb621d014ff2b2',
-                'https://github.com/openssl/openssl/commit/7dfcee2cd2a63b2c64b9b4b0850be64cb695b0a0',
-                'https://github.com/openssl/openssl/security/advisories/GHSA-5qrj-vq78-58fj',
-                'https://linux.oracle.com/cve/CVE-2024-6119.html',
-                'https://linux.oracle.com/errata/ELSA-2024-8935.html',
-                'https://lists.freebsd.org/archives/freebsd-security/2024-September/000303.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2024-6119',
-                'https://openssl-library.org/news/secadv/20240903.txt',
-                'https://security.netapp.com/advisory/ntap-20240912-0001/',
-                'https://ubuntu.com/security/notices/USN-6986-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2024-6119'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: Possible denial of service in X.509 name checks'
-            },
-            {
-              'cve':  'CVE-2022-4203',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '9.1',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H'
-                },
-                'nvd': {
-                  'v3score':  '4.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '4.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-125'
-              ],
-              'description':   'A read buffer overrun can be triggered in X.509 certificate verification,\nspecifically in name constraint checking. Note that this occurs\nafter certificate chain signature verification and requires either a\nCA to have signed the malicious certificate or for the application to\ncontinue certificate verification despite failure to construct a path\nto a trusted issuer.\n\nThe read buffer overrun might result in a crash which could lead to\na denial of service attack. In theory it could also result in the disclosure\nof private memory contents (such as private keys, or sensitive plaintext)\nalthough we are not aware of any working exploit leading to memory\ncontents disclosure as of the time of release of this advisory.\n\nIn a TLS client, this can be triggered by connecting to a malicious\nserver. In a TLS server, this can be triggered if the server requests\nclient authentication and a malicious client connects.',
-              'diffID':        'sha256:8adafc86079f2f586db2e9c632b5977e96ebfce0fdb93f7c52bc7c83078bad29',
-              'fixedVersions': [
-                '3.0.8-r0'
-              ],
-              'installedVersion': '3.0.7-r2',
-              'packageName':      'libcrypto3',
-              'purl':             'pkg:apk/alpine/libcrypto3@3.0.7-r2?arch=x86_64&distro=3.17.0',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2023:0946',
-                'https://access.redhat.com/security/cve/CVE-2022-4203',
-                'https://bugzilla.redhat.com/2164440',
-                'https://bugzilla.redhat.com/2164487',
-                'https://bugzilla.redhat.com/2164488',
-                'https://bugzilla.redhat.com/2164492',
-                'https://bugzilla.redhat.com/2164494',
-                'https://bugzilla.redhat.com/2164497',
-                'https://bugzilla.redhat.com/2164499',
-                'https://bugzilla.redhat.com/2164500',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144000',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144003',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144006',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144008',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144010',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144012',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144015',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144017',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144019',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2145170',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2158412',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164440',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164487',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164488',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164492',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164497',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164499',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164500',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4203',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4304',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4450',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0215',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0216',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0217',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0286',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0401',
-                'https://errata.almalinux.org/9/ALSA-2023-0946.html',
-                'https://errata.rockylinux.org/RLSA-2023:0946',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=c927a3492698c254637da836762f9b1f86cffabc',
-                'https://linux.oracle.com/cve/CVE-2022-4203.html',
-                'https://linux.oracle.com/errata/ELSA-2023-12152.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2022-4203',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0003',
-                'https://rustsec.org/advisories/RUSTSEC-2023-0008.html',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://ubuntu.com/security/notices/USN-5844-1',
-                'https://www.cve.org/CVERecord?id=CVE-2022-4203',
-                'https://www.openssl.org/news/secadv/20230207.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: read buffer overflow in X.509 certificate verification'
-            },
-            {
-              'cve':  'CVE-2022-4304',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N'
-                },
-                'nvd': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N'
-                },
-                'redhat': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-203'
-              ],
-              'description':   'A timing based side channel exists in the OpenSSL RSA Decryption implementation\nwhich could be sufficient to recover a plaintext across a network in a\nBleichenbacher style attack. To achieve a successful decryption an attacker\nwould have to be able to send a very large number of trial messages for\ndecryption. The vulnerability affects all RSA padding modes: PKCS#1 v1.5,\nRSA-OEAP and RSASVE.\n\nFor example, in a TLS connection, RSA is commonly used by a client to send an\nencrypted pre-master secret to the server. An attacker that had observed a\ngenuine connection between a client and a server could use this flaw to send\ntrial messages to the server and record the time taken to process them. After a\nsufficiently large number of messages the attacker could recover the pre-master\nsecret used for the original connection and thus be able to decrypt the\napplication data sent over that connection.',
-              'diffID':        'sha256:8adafc86079f2f586db2e9c632b5977e96ebfce0fdb93f7c52bc7c83078bad29',
-              'fixedVersions': [
-                '3.0.8-r0'
-              ],
-              'installedVersion': '3.0.7-r2',
-              'packageName':      'libcrypto3',
-              'purl':             'pkg:apk/alpine/libcrypto3@3.0.7-r2?arch=x86_64&distro=3.17.0',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2023:2165',
-                'https://access.redhat.com/security/cve/CVE-2022-4304',
-                'https://bugzilla.redhat.com/1960321',
-                'https://bugzilla.redhat.com/2164440',
-                'https://bugzilla.redhat.com/2164487',
-                'https://bugzilla.redhat.com/2164492',
-                'https://bugzilla.redhat.com/2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144000',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144003',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144006',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144008',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144010',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144012',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144015',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144017',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144019',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2145170',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2158412',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164440',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164487',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164488',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164492',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164497',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164499',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164500',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4203',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4304',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4450',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0215',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0216',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0217',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0286',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0401',
-                'https://errata.almalinux.org/9/ALSA-2023-2165.html',
-                'https://errata.rockylinux.org/RLSA-2023:0946',
-                'https://linux.oracle.com/cve/CVE-2022-4304.html',
-                'https://linux.oracle.com/errata/ELSA-2023-32791.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2022-4304',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0003',
-                'https://rustsec.org/advisories/RUSTSEC-2023-0007.html',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://ubuntu.com/security/notices/USN-5844-1',
-                'https://ubuntu.com/security/notices/USN-6564-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2022-4304',
-                'https://www.openssl.org/news/secadv/20230207.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: timing attack in RSA Decryption implementation'
-            },
-            {
-              'cve':  'CVE-2023-0465',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N'
-                },
-                'redhat': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-295'
-              ],
-              'description':   "Applications that use a non-default option when verifying certificates may be\nvulnerable to an attack from a malicious CA to circumvent certain checks.\n\nInvalid certificate policies in leaf certificates are silently ignored by\nOpenSSL and other certificate policy checks are skipped for that certificate.\nA malicious CA could use this to deliberately assert invalid certificate policies\nin order to circumvent policy checking on the certificate altogether.\n\nPolicy processing is disabled by default but can be enabled by passing\nthe `-policy' argument to the command line utilities or by calling the\n`X509_VERIFY_PARAM_set1_policies()' function.",
-              'diffID':        'sha256:8adafc86079f2f586db2e9c632b5977e96ebfce0fdb93f7c52bc7c83078bad29',
-              'fixedVersions': [
-                '3.0.8-r2'
-              ],
-              'installedVersion': '3.0.7-r2',
-              'packageName':      'libcrypto3',
-              'purl':             'pkg:apk/alpine/libcrypto3@3.0.7-r2?arch=x86_64&distro=3.17.0',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2023:3722',
-                'https://access.redhat.com/security/cve/CVE-2023-0465',
-                'https://bugzilla.redhat.com/2181082',
-                'https://bugzilla.redhat.com/2182561',
-                'https://bugzilla.redhat.com/2182565',
-                'https://bugzilla.redhat.com/2188461',
-                'https://bugzilla.redhat.com/2207947',
-                'https://errata.almalinux.org/9/ALSA-2023-3722.html',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=10325176f3d3e98c6e2b3bf5ab1e3b334de6947a',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=1dd43e0709fece299b15208f36cc7c76209ba0bb',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=b013765abfa80036dc779dd0e50602c57bb3bf95',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=facfb1ab745646e97a1920977ae4a9965ea61d5c',
-                'https://linux.oracle.com/cve/CVE-2023-0465.html',
-                'https://linux.oracle.com/errata/ELSA-2023-3722.html',
-                'https://lists.debian.org/debian-lts-announce/2023/06/msg00011.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-0465',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://security.netapp.com/advisory/ntap-20230414-0001/',
-                'https://ubuntu.com/security/notices/USN-6039-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-0465',
-                'https://www.debian.org/security/2023/dsa-5417',
-                'https://www.openssl.org/news/secadv/20230328.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: Invalid certificate policies in leaf certificates are silently ignored'
-            },
-            {
-              'cve':  'CVE-2023-0466',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N'
-                },
-                'redhat': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-295'
-              ],
-              'description':   'The function X509_VERIFY_PARAM_add0_policy() is documented to\nimplicitly enable the certificate policy check when doing certificate\nverification. However the implementation of the function does not\nenable the check which allows certificates with invalid or incorrect\npolicies to pass the certificate verification.\n\nAs suddenly enabling the policy check could break existing deployments it was\ndecided to keep the existing behavior of the X509_VERIFY_PARAM_add0_policy()\nfunction.\n\nInstead the applications that require OpenSSL to perform certificate\npolicy check need to use X509_VERIFY_PARAM_set1_policies() or explicitly\nenable the policy check by calling X509_VERIFY_PARAM_set_flags() with\nthe X509_V_FLAG_POLICY_CHECK flag argument.\n\nCertificate policy checks are disabled by default in OpenSSL and are not\ncommonly used by applications.',
-              'diffID':        'sha256:8adafc86079f2f586db2e9c632b5977e96ebfce0fdb93f7c52bc7c83078bad29',
-              'fixedVersions': [
-                '3.0.8-r3'
-              ],
-              'installedVersion': '3.0.7-r2',
-              'packageName':      'libcrypto3',
-              'purl':             'pkg:apk/alpine/libcrypto3@3.0.7-r2?arch=x86_64&distro=3.17.0',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2023/09/28/4',
-                'https://access.redhat.com/errata/RHSA-2023:3722',
-                'https://access.redhat.com/security/cve/CVE-2023-0466',
-                'https://bugzilla.redhat.com/2181082',
-                'https://bugzilla.redhat.com/2182561',
-                'https://bugzilla.redhat.com/2182565',
-                'https://bugzilla.redhat.com/2188461',
-                'https://bugzilla.redhat.com/2207947',
-                'https://errata.almalinux.org/9/ALSA-2023-3722.html',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=0d16b7e99aafc0b4a6d729eec65a411a7e025f0a',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=51e8a84ce742db0f6c70510d0159dad8f7825908',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=73398dea26de9899fb4baa94098ad0a61f435c72',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=fc814a30fc4f0bc54fcea7d9a7462f5457aab061',
-                'https://linux.oracle.com/cve/CVE-2023-0466.html',
-                'https://linux.oracle.com/errata/ELSA-2023-3722.html',
-                'https://lists.debian.org/debian-lts-announce/2023/06/msg00011.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-0466',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://security.netapp.com/advisory/ntap-20230414-0001/',
-                'https://ubuntu.com/security/notices/USN-6039-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-0466',
-                'https://www.debian.org/security/2023/dsa-5417',
-                'https://www.openssl.org/news/secadv/20230328.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: Certificate policy check not enabled'
-            },
-            {
-              'cve':  'CVE-2023-1255',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '5.1',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-125'
-              ],
-              'description':   'Issue summary: The AES-XTS cipher decryption implementation for 64 bit ARM\nplatform contains a bug that could cause it to read past the input buffer,\nleading to a crash.\n\nImpact summary: Applications that use the AES-XTS algorithm on the 64 bit ARM\nplatform can crash in rare circumstances. The AES-XTS algorithm is usually\nused for disk encryption.\n\nThe AES-XTS cipher decryption implementation for 64 bit ARM platform will read\npast the end of the ciphertext buffer if the ciphertext size is 4 mod 5 in 16\nbyte blocks, e.g. 144 bytes or 1024 bytes. If the memory after the ciphertext\nbuffer is unmapped, this will trigger a crash which results in a denial of\nservice.\n\nIf an attacker can control the size and location of the ciphertext buffer\nbeing decrypted by an application using AES-XTS on 64 bit ARM, the\napplication is affected. This is fairly unlikely making this issue\na Low severity one.',
-              'diffID':        'sha256:8adafc86079f2f586db2e9c632b5977e96ebfce0fdb93f7c52bc7c83078bad29',
-              'fixedVersions': [
-                '3.0.8-r4'
-              ],
-              'installedVersion': '3.0.7-r2',
-              'packageName':      'libcrypto3',
-              'purl':             'pkg:apk/alpine/libcrypto3@3.0.7-r2?arch=x86_64&distro=3.17.0',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2023:3722',
-                'https://access.redhat.com/security/cve/CVE-2023-1255',
-                'https://bugzilla.redhat.com/2181082',
-                'https://bugzilla.redhat.com/2182561',
-                'https://bugzilla.redhat.com/2182565',
-                'https://bugzilla.redhat.com/2188461',
-                'https://bugzilla.redhat.com/2207947',
-                'https://errata.almalinux.org/9/ALSA-2023-3722.html',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=02ac9c9420275868472f33b01def01218742b8bb',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=bc2f61ad70971869b242fc1cb445b98bad50074a',
-                'https://linux.oracle.com/cve/CVE-2023-1255.html',
-                'https://linux.oracle.com/errata/ELSA-2023-3722.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-1255',
-                'https://security.netapp.com/advisory/ntap-20230908-0006/',
-                'https://ubuntu.com/security/notices/USN-6119-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-1255',
-                'https://www.openssl.org/news/secadv/20230419.txt',
-                'https://www.openssl.org/news/secadv/20230420.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: Input buffer over-read in AES-XTS implementation on 64 bit ARM'
-            },
-            {
-              'cve':  'CVE-2023-2650',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '6.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-770'
-              ],
-              'description':   "Issue summary: Processing some specially crafted ASN.1 object identifiers or\ndata containing them may be very slow.\n\nImpact summary: Applications that use OBJ_obj2txt() directly, or use any of\nthe OpenSSL subsystems OCSP, PKCS7/SMIME, CMS, CMP/CRMF or TS with no message\nsize limit may experience notable to very long delays when processing those\nmessages, which may lead to a Denial of Service.\n\nAn OBJECT IDENTIFIER is composed of a series of numbers - sub-identifiers -\nmost of which have no size limit.  OBJ_obj2txt() may be used to translate\nan ASN.1 OBJECT IDENTIFIER given in DER encoding form (using the OpenSSL\ntype ASN1_OBJECT) to its canonical numeric text form, which are the\nsub-identifiers of the OBJECT IDENTIFIER in decimal form, separated by\nperiods.\n\nWhen one of the sub-identifiers in the OBJECT IDENTIFIER is very large\n(these are sizes that are seen as absurdly large, taking up tens or hundreds\nof KiBs), the translation to a decimal number in text may take a very long\ntime.  The time complexity is O(n^2) with 'n' being the size of the\nsub-identifiers in bytes (*).\n\nWith OpenSSL 3.0, support to fetch cryptographic algorithms using names /\nidentifiers in string form was introduced.  This includes using OBJECT\nIDENTIFIERs in canonical numeric text form as identifiers for fetching\nalgorithms.\n\nSuch OBJECT IDENTIFIERs may be received through the ASN.1 structure\nAlgorithmIdentifier, which is commonly used in multiple protocols to specify\nwhat cryptographic algorithm should be used to sign or verify, encrypt or\ndecrypt, or digest passed data.\n\nApplications that call OBJ_obj2txt() directly with untrusted data are\naffected, with any version of OpenSSL.  If the use is for the mere purpose\nof display, the severity is considered low.\n\nIn OpenSSL 3.0 and newer, this affects the subsystems OCSP, PKCS7/SMIME,\nCMS, CMP/CRMF or TS.  It also impacts anything that processes X.509\ncertificates, including simple things like verifying its signature.\n\nThe impact on TLS is relatively low, because all versions of OpenSSL have a\n100KiB limit on the peer's certificate chain.  Additionally, this only\nimpacts clients, or servers that have explicitly enabled client\nauthentication.\n\nIn OpenSSL 1.1.1 and 1.0.2, this only affects displaying diverse objects,\nsuch as X.509 certificates.  This is assumed to not happen in such a way\nthat it would cause a Denial of Service, so these versions are considered\nnot affected by this issue in such a way that it would be cause for concern,\nand the severity is therefore considered low.",
-              'diffID':        'sha256:8adafc86079f2f586db2e9c632b5977e96ebfce0fdb93f7c52bc7c83078bad29',
-              'fixedVersions': [
-                '3.0.9-r0'
-              ],
-              'installedVersion': '3.0.7-r2',
-              'packageName':      'libcrypto3',
-              'purl':             'pkg:apk/alpine/libcrypto3@3.0.7-r2?arch=x86_64&distro=3.17.0',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2023/05/30/1',
-                'https://access.redhat.com/errata/RHSA-2023:6330',
-                'https://access.redhat.com/security/cve/CVE-2023-2650',
-                'https://bugzilla.redhat.com/1858038',
-                'https://bugzilla.redhat.com/2207947',
-                'https://errata.almalinux.org/9/ALSA-2023-6330.html',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=423a2bc737a908ad0c77bda470b2b59dc879936b',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=853c5e56ee0b8650c73140816bb8b91d6163422c',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=9e209944b35cf82368071f160a744b6178f9b098',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=db779b0e10b047f2585615e0b8f2acdf21f8544a',
-                'https://linux.oracle.com/cve/CVE-2023-2650.html',
-                'https://linux.oracle.com/errata/ELSA-2023-6330.html',
-                'https://lists.debian.org/debian-lts-announce/2023/06/msg00011.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-2650',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0009',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://security.netapp.com/advisory/ntap-20230703-0001/',
-                'https://security.netapp.com/advisory/ntap-20231027-0009/',
-                'https://ubuntu.com/security/notices/USN-6119-1',
-                'https://ubuntu.com/security/notices/USN-6188-1',
-                'https://ubuntu.com/security/notices/USN-6672-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-2650',
-                'https://www.debian.org/security/2023/dsa-5417',
-                'https://www.openssl.org/news/secadv/20230530.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: Possible DoS translating ASN.1 object identifiers'
-            },
-            {
-              'cve':  'CVE-2023-2975',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N'
-                },
-                'redhat': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-354',
-                'CWE-287'
-              ],
-              'description':   'Issue summary: The AES-SIV cipher implementation contains a bug that causes\nit to ignore empty associated data entries which are unauthenticated as\na consequence.\n\nImpact summary: Applications that use the AES-SIV algorithm and want to\nauthenticate empty data entries as associated data can be misled by removing,\nadding or reordering such empty entries as these are ignored by the OpenSSL\nimplementation. We are currently unaware of any such applications.\n\nThe AES-SIV algorithm allows for authentication of multiple associated\ndata entries along with the encryption. To authenticate empty data the\napplication has to call EVP_EncryptUpdate() (or EVP_CipherUpdate()) with\nNULL pointer as the output buffer and 0 as the input buffer length.\nThe AES-SIV implementation in OpenSSL just returns success for such a call\ninstead of performing the associated data authentication operation.\nThe empty data thus will not be authenticated.\n\nAs this issue does not affect non-empty associated data authentication and\nwe expect it to be rare for an application to use empty associated data\nentries this is qualified as Low severity issue.',
-              'diffID':        'sha256:8adafc86079f2f586db2e9c632b5977e96ebfce0fdb93f7c52bc7c83078bad29',
-              'fixedVersions': [
-                '3.0.9-r2'
-              ],
-              'installedVersion': '3.0.7-r2',
-              'packageName':      'libcrypto3',
-              'purl':             'pkg:apk/alpine/libcrypto3@3.0.7-r2?arch=x86_64&distro=3.17.0',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2023/07/15/1',
-                'http://www.openwall.com/lists/oss-security/2023/07/19/5',
-                'https://access.redhat.com/errata/RHSA-2024:2447',
-                'https://access.redhat.com/security/cve/CVE-2023-2975',
-                'https://bugzilla.redhat.com/2223016',
-                'https://bugzilla.redhat.com/2224962',
-                'https://bugzilla.redhat.com/2227852',
-                'https://bugzilla.redhat.com/2248616',
-                'https://bugzilla.redhat.com/2257571',
-                'https://bugzilla.redhat.com/2258502',
-                'https://bugzilla.redhat.com/2259944',
-                'https://errata.almalinux.org/9/ALSA-2024-2447.html',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=00e2f5eea29994d19293ec4e8c8775ba73678598',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=6a83f0c958811f07e0d11dfc6b5a6a98edfd5bdc',
-                'https://linux.oracle.com/cve/CVE-2023-2975.html',
-                'https://linux.oracle.com/errata/ELSA-2024-2447.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-2975',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://security.netapp.com/advisory/ntap-20230725-0004/',
-                'https://ubuntu.com/security/notices/USN-6450-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-2975',
-                'https://www.openssl.org/news/secadv/20230714.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: AES-SIV cipher implementation contains a bug that causes it to ignore empty associated data entries'
-            },
-            {
-              'cve':  'CVE-2023-3446',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L'
-                },
-                'redhat': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L'
-                }
-              },
-              'cwes': [
-                'CWE-606',
-                'CWE-1333'
-              ],
-              'description':   "Issue summary: Checking excessively long DH keys or parameters may be very slow.\n\nImpact summary: Applications that use the functions DH_check(), DH_check_ex()\nor EVP_PKEY_param_check() to check a DH key or DH parameters may experience long\ndelays. Where the key or parameters that are being checked have been obtained\nfrom an untrusted source this may lead to a Denial of Service.\n\nThe function DH_check() performs various checks on DH parameters. One of those\nchecks confirms that the modulus ('p' parameter) is not too large. Trying to use\na very large modulus is slow and OpenSSL will not normally use a modulus which\nis over 10,000 bits in length.\n\nHowever the DH_check() function checks numerous aspects of the key or parameters\nthat have been supplied. Some of those checks use the supplied modulus value\neven if it has already been found to be too large.\n\nAn application that calls DH_check() and supplies a key or parameters obtained\nfrom an untrusted source could be vulernable to a Denial of Service attack.\n\nThe function DH_check() is itself called by a number of other OpenSSL functions.\nAn application calling any of those other functions may similarly be affected.\nThe other functions affected by this are DH_check_ex() and\nEVP_PKEY_param_check().\n\nAlso vulnerable are the OpenSSL dhparam and pkeyparam command line applications\nwhen using the '-check' option.\n\nThe OpenSSL SSL/TLS implementation is not affected by this issue.\nThe OpenSSL 3.0 and 3.1 FIPS providers are not affected by this issue.",
-              'diffID':        'sha256:8adafc86079f2f586db2e9c632b5977e96ebfce0fdb93f7c52bc7c83078bad29',
-              'fixedVersions': [
-                '3.0.9-r3'
-              ],
-              'installedVersion': '3.0.7-r2',
-              'packageName':      'libcrypto3',
-              'purl':             'pkg:apk/alpine/libcrypto3@3.0.7-r2?arch=x86_64&distro=3.17.0',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2023/07/19/4',
-                'http://www.openwall.com/lists/oss-security/2023/07/19/5',
-                'http://www.openwall.com/lists/oss-security/2023/07/19/6',
-                'http://www.openwall.com/lists/oss-security/2023/07/31/1',
-                'http://www.openwall.com/lists/oss-security/2024/05/16/1',
-                'https://access.redhat.com/errata/RHSA-2024:2447',
-                'https://access.redhat.com/security/cve/CVE-2023-3446',
-                'https://bugzilla.redhat.com/2223016',
-                'https://bugzilla.redhat.com/2224962',
-                'https://bugzilla.redhat.com/2227852',
-                'https://bugzilla.redhat.com/2248616',
-                'https://bugzilla.redhat.com/2257571',
-                'https://bugzilla.redhat.com/2258502',
-                'https://bugzilla.redhat.com/2259944',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2224962',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2257582',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2257583',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2258677',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2258688',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2258691',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2258694',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2258700',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-36763',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-36764',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3446',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45229',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45231',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45232',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45233',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45235',
-                'https://errata.almalinux.org/9/ALSA-2024-2447.html',
-                'https://errata.rockylinux.org/RLSA-2024:2264',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=1fa20cf2f506113c761777127a38bce5068740eb',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=8780a896543a654e757db1b9396383f9d8095528',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=9a0a4d3c1e7138915563c0df4fe6a3f9377b839c',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=fc9867c1e03c22ebf56943be205202e576aabf23',
-                'https://linux.oracle.com/cve/CVE-2023-3446.html',
-                'https://linux.oracle.com/errata/ELSA-2024-2447.html',
-                'https://lists.debian.org/debian-lts-announce/2023/08/msg00019.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-3446',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://security.netapp.com/advisory/ntap-20230803-0011/',
-                'https://ubuntu.com/security/notices/USN-6435-1',
-                'https://ubuntu.com/security/notices/USN-6435-2',
-                'https://ubuntu.com/security/notices/USN-6450-1',
-                'https://ubuntu.com/security/notices/USN-6709-1',
-                'https://ubuntu.com/security/notices/USN-7018-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-3446',
-                'https://www.openssl.org/news/secadv/20230719.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: Excessive time spent checking DH keys and parameters'
-            },
-            {
-              'cve':  'CVE-2023-3817',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L'
-                },
-                'redhat': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L'
-                }
-              },
-              'cwes': [
-                'CWE-606',
-                'CWE-834'
-              ],
-              'description':   'Issue summary: Checking excessively long DH keys or parameters may be very slow.\n\nImpact summary: Applications that use the functions DH_check(), DH_check_ex()\nor EVP_PKEY_param_check() to check a DH key or DH parameters may experience long\ndelays. Where the key or parameters that are being checked have been obtained\nfrom an untrusted source this may lead to a Denial of Service.\n\nThe function DH_check() performs various checks on DH parameters. After fixing\nCVE-2023-3446 it was discovered that a large q parameter value can also trigger\nan overly long computation during some of these checks. A correct q value,\nif present, cannot be larger than the modulus p parameter, thus it is\nunnecessary to perform these checks if q is larger than p.\n\nAn application that calls DH_check() and supplies a key or parameters obtained\nfrom an untrusted source could be vulnerable to a Denial of Service attack.\n\nThe function DH_check() is itself called by a number of other OpenSSL functions.\nAn application calling any of those other functions may similarly be affected.\nThe other functions affected by this are DH_check_ex() and\nEVP_PKEY_param_check().\n\nAlso vulnerable are the OpenSSL dhparam and pkeyparam command line applications\nwhen using the "-check" option.\n\nThe OpenSSL SSL/TLS implementation is not affected by this issue.\n\nThe OpenSSL 3.0 and 3.1 FIPS providers are not affected by this issue.',
-              'diffID':        'sha256:8adafc86079f2f586db2e9c632b5977e96ebfce0fdb93f7c52bc7c83078bad29',
-              'fixedVersions': [
-                '3.0.10-r0'
-              ],
-              'installedVersion': '3.0.7-r2',
-              'packageName':      'libcrypto3',
-              'purl':             'pkg:apk/alpine/libcrypto3@3.0.7-r2?arch=x86_64&distro=3.17.0',
-              'references':       [
-                'http://seclists.org/fulldisclosure/2023/Jul/43',
-                'http://www.openwall.com/lists/oss-security/2023/07/31/1',
-                'http://www.openwall.com/lists/oss-security/2023/09/22/11',
-                'http://www.openwall.com/lists/oss-security/2023/09/22/9',
-                'http://www.openwall.com/lists/oss-security/2023/11/06/2',
-                'https://access.redhat.com/errata/RHSA-2024:2447',
-                'https://access.redhat.com/security/cve/CVE-2023-3817',
-                'https://bugzilla.redhat.com/2223016',
-                'https://bugzilla.redhat.com/2224962',
-                'https://bugzilla.redhat.com/2227852',
-                'https://bugzilla.redhat.com/2248616',
-                'https://bugzilla.redhat.com/2257571',
-                'https://bugzilla.redhat.com/2258502',
-                'https://bugzilla.redhat.com/2259944',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2224962',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2227852',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2248616',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2270358',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3446',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3817',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-5678',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-2408',
-                'https://errata.almalinux.org/9/ALSA-2024-2447.html',
-                'https://errata.rockylinux.org/RLSA-2023:7877',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=6a1eb62c29db6cb5eec707f9338aee00f44e26f5',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=869ad69aadd985c7b8ca6f4e5dd0eb274c9f3644',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=9002fd07327a91f35ba6c1307e71fa6fd4409b7f',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=91ddeba0f2269b017dc06c46c993a788974b1aa5',
-                'https://linux.oracle.com/cve/CVE-2023-3817.html',
-                'https://linux.oracle.com/errata/ELSA-2024-2447.html',
-                'https://lists.debian.org/debian-lts-announce/2023/08/msg00019.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-3817',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://security.netapp.com/advisory/ntap-20230818-0014/',
-                'https://security.netapp.com/advisory/ntap-20231027-0008/',
-                'https://security.netapp.com/advisory/ntap-20240621-0006/',
-                'https://ubuntu.com/security/notices/USN-6435-1',
-                'https://ubuntu.com/security/notices/USN-6435-2',
-                'https://ubuntu.com/security/notices/USN-6450-1',
-                'https://ubuntu.com/security/notices/USN-6709-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-3817',
-                'https://www.openssl.org/news/secadv/20230731.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'OpenSSL: Excessive time spent checking DH q parameter value'
-            },
-            {
-              'cve':  'CVE-2023-5678',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L'
-                },
-                'redhat': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L'
-                }
-              },
-              'cwes': [
-                'CWE-606',
-                'CWE-754'
-              ],
-              'description':   "Issue summary: Generating excessively long X9.42 DH keys or checking\nexcessively long X9.42 DH keys or parameters may be very slow.\n\nImpact summary: Applications that use the functions DH_generate_key() to\ngenerate an X9.42 DH key may experience long delays.  Likewise, applications\nthat use DH_check_pub_key(), DH_check_pub_key_ex() or EVP_PKEY_public_check()\nto check an X9.42 DH key or X9.42 DH parameters may experience long delays.\nWhere the key or parameters that are being checked have been obtained from\nan untrusted source this may lead to a Denial of Service.\n\nWhile DH_check() performs all the necessary checks (as of CVE-2023-3817),\nDH_check_pub_key() doesn't make any of these checks, and is therefore\nvulnerable for excessively large P and Q parameters.\n\nLikewise, while DH_generate_key() performs a check for an excessively large\nP, it doesn't check for an excessively large Q.\n\nAn application that calls DH_generate_key() or DH_check_pub_key() and\nsupplies a key or parameters obtained from an untrusted source could be\nvulnerable to a Denial of Service attack.\n\nDH_generate_key() and DH_check_pub_key() are also called by a number of\nother OpenSSL functions.  An application calling any of those other\nfunctions may similarly be affected.  The other functions affected by this\nare DH_check_pub_key_ex(), EVP_PKEY_public_check(), and EVP_PKEY_generate().\n\nAlso vulnerable are the OpenSSL pkey command line application when using the\n\"-pubcheck\" option, as well as the OpenSSL genpkey command line application.\n\nThe OpenSSL SSL/TLS implementation is not affected by this issue.\n\nThe OpenSSL 3.0 and 3.1 FIPS providers are not affected by this issue.",
-              'diffID':        'sha256:8adafc86079f2f586db2e9c632b5977e96ebfce0fdb93f7c52bc7c83078bad29',
-              'fixedVersions': [
-                '3.0.12-r1'
-              ],
-              'installedVersion': '3.0.7-r2',
-              'packageName':      'libcrypto3',
-              'purl':             'pkg:apk/alpine/libcrypto3@3.0.7-r2?arch=x86_64&distro=3.17.0',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2024/03/11/1',
-                'https://access.redhat.com/errata/RHSA-2024:2447',
-                'https://access.redhat.com/security/cve/CVE-2023-5678',
-                'https://bugzilla.redhat.com/2223016',
-                'https://bugzilla.redhat.com/2224962',
-                'https://bugzilla.redhat.com/2227852',
-                'https://bugzilla.redhat.com/2248616',
-                'https://bugzilla.redhat.com/2257571',
-                'https://bugzilla.redhat.com/2258502',
-                'https://bugzilla.redhat.com/2259944',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2224962',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2227852',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2248616',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2270358',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3446',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3817',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-5678',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-2408',
-                'https://errata.almalinux.org/9/ALSA-2024-2447.html',
-                'https://errata.rockylinux.org/RLSA-2023:7877',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=34efaef6c103d636ab507a0cc34dca4d3aecc055',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=710fee740904b6290fef0dd5536fbcedbc38ff0c',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=db925ae2e65d0d925adef429afc37f75bd1c2017',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=ddeb4b6c6d527e54ce9a99cba785c0f7776e54b6',
-                'https://linux.oracle.com/cve/CVE-2023-5678.html',
-                'https://linux.oracle.com/errata/ELSA-2024-2447.html',
-                'https://lists.debian.org/debian-lts-announce/2024/10/msg00033.html',
-                'https://lists.debian.org/debian-lts-announce/2024/11/msg00000.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-5678',
-                'https://security.netapp.com/advisory/ntap-20231130-0010/',
-                'https://ubuntu.com/security/notices/USN-6622-1',
-                'https://ubuntu.com/security/notices/USN-6632-1',
-                'https://ubuntu.com/security/notices/USN-6709-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-5678',
-                'https://www.openssl.org/news/secadv/20231106.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: Generating excessively long X9.42 DH keys or checking excessively long X9.42 DH keys or parameters may be very slow'
-            },
-            {
-              'cve':  'CVE-2023-6129',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '6.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-440',
-                'CWE-787'
-              ],
-              'description':   'Issue summary: The POLY1305 MAC (message authentication code) implementation\ncontains a bug that might corrupt the internal state of applications running\non PowerPC CPU based platforms if the CPU provides vector instructions.\n\nImpact summary: If an attacker can influence whether the POLY1305 MAC\nalgorithm is used, the application state might be corrupted with various\napplication dependent consequences.\n\nThe POLY1305 MAC (message authentication code) implementation in OpenSSL for\nPowerPC CPUs restores the contents of vector registers in a different order\nthan they are saved. Thus the contents of some of these vector registers\nare corrupted when returning to the caller. The vulnerable code is used only\non newer PowerPC processors supporting the PowerISA 2.07 instructions.\n\nThe consequences of this kind of internal application state corruption can\nbe various - from no consequences, if the calling application does not\ndepend on the contents of non-volatile XMM registers at all, to the worst\nconsequences, where the attacker could get complete control of the application\nprocess. However unless the compiler uses the vector registers for storing\npointers, the most likely consequence, if any, would be an incorrect result\nof some application dependent calculations or a crash leading to a denial of\nservice.\n\nThe POLY1305 MAC algorithm is most frequently used as part of the\nCHACHA20-POLY1305 AEAD (authenticated encryption with associated data)\nalgorithm. The most common usage of this AEAD cipher is with TLS protocol\nversions 1.2 and 1.3. If this cipher is enabled on the server a malicious\nclient can influence whether this AEAD cipher is used. This implies that\nTLS server applications using OpenSSL can be potentially impacted. However\nwe are currently not aware of any concrete application that would be affected\nby this issue therefore we consider this a Low severity security issue.',
-              'diffID':        'sha256:8adafc86079f2f586db2e9c632b5977e96ebfce0fdb93f7c52bc7c83078bad29',
-              'fixedVersions': [
-                '3.0.12-r2'
-              ],
-              'installedVersion': '3.0.7-r2',
-              'packageName':      'libcrypto3',
-              'purl':             'pkg:apk/alpine/libcrypto3@3.0.7-r2?arch=x86_64&distro=3.17.0',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2024/03/11/1',
-                'https://access.redhat.com/errata/RHSA-2024:9088',
-                'https://access.redhat.com/security/cve/CVE-2023-6129',
-                'https://bugzilla.redhat.com/2257571',
-                'https://bugzilla.redhat.com/2258502',
-                'https://bugzilla.redhat.com/2259944',
-                'https://bugzilla.redhat.com/2284243',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2257571',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2258502',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2259944',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2284243',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-6129',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-6237',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-0727',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-1298',
-                'https://errata.almalinux.org/9/ALSA-2024-9088.html',
-                'https://errata.rockylinux.org/RLSA-2024:9088',
-                'https://github.com/openssl/openssl/commit/050d26383d4e264966fb83428e72d5d48f402d35',
-                'https://github.com/openssl/openssl/commit/5b139f95c9a47a55a0c54100f3837b1eee942b04',
-                'https://github.com/openssl/openssl/commit/f3fc5808fe9ff74042d639839610d03b8fdcc015',
-                'https://linux.oracle.com/cve/CVE-2023-6129.html',
-                'https://linux.oracle.com/errata/ELSA-2024-9088.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-6129',
-                'https://security.netapp.com/advisory/ntap-20240216-0009/',
-                'https://security.netapp.com/advisory/ntap-20240426-0008/',
-                'https://security.netapp.com/advisory/ntap-20240426-0013/',
-                'https://security.netapp.com/advisory/ntap-20240503-0011/',
-                'https://ubuntu.com/security/notices/USN-6622-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-6129',
-                'https://www.openssl.org/news/secadv/20240109.txt',
-                'https://www.openwall.com/lists/oss-security/2024/01/09/1'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: POLY1305 MAC implementation corrupts vector registers on PowerPC'
-            },
-            {
-              'cve':  'CVE-2023-6237',
-              'cvss': {
-                'redhat': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-606'
-              ],
-              'description':   "Issue summary: Checking excessively long invalid RSA public keys may take\na long time.\n\nImpact summary: Applications that use the function EVP_PKEY_public_check()\nto check RSA public keys may experience long delays. Where the key that\nis being checked has been obtained from an untrusted source this may lead\nto a Denial of Service.\n\nWhen function EVP_PKEY_public_check() is called on RSA public keys,\na computation is done to confirm that the RSA modulus, n, is composite.\nFor valid RSA keys, n is a product of two or more large primes and this\ncomputation completes quickly. However, if n is an overly large prime,\nthen this computation would take a long time.\n\nAn application that calls EVP_PKEY_public_check() and supplies an RSA key\nobtained from an untrusted source could be vulnerable to a Denial of Service\nattack.\n\nThe function EVP_PKEY_public_check() is not called from other OpenSSL\nfunctions however it is called from the OpenSSL pkey command line\napplication. For that reason that application is also vulnerable if used\nwith the '-pubin' and '-check' options on untrusted data.\n\nThe OpenSSL SSL/TLS implementation is not affected by this issue.\n\nThe OpenSSL 3.0 and 3.1 FIPS providers are affected by this issue.",
-              'diffID':        'sha256:8adafc86079f2f586db2e9c632b5977e96ebfce0fdb93f7c52bc7c83078bad29',
-              'fixedVersions': [
-                '3.0.12-r3'
-              ],
-              'installedVersion': '3.0.7-r2',
-              'packageName':      'libcrypto3',
-              'purl':             'pkg:apk/alpine/libcrypto3@3.0.7-r2?arch=x86_64&distro=3.17.0',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2024/03/11/1',
-                'https://access.redhat.com/errata/RHSA-2024:9088',
-                'https://access.redhat.com/security/cve/CVE-2023-6237',
-                'https://bugzilla.redhat.com/2257571',
-                'https://bugzilla.redhat.com/2258502',
-                'https://bugzilla.redhat.com/2259944',
-                'https://bugzilla.redhat.com/2284243',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2257571',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2258502',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2259944',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2284243',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-6129',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-6237',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-0727',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-1298',
-                'https://errata.almalinux.org/9/ALSA-2024-9088.html',
-                'https://errata.rockylinux.org/RLSA-2024:9088',
-                'https://github.com/openssl/openssl/commit/0b0f7abfb37350794a4b8960fafc292cd5d1b84d',
-                'https://github.com/openssl/openssl/commit/18c02492138d1eb8b6548cb26e7b625fb2414a2a',
-                'https://github.com/openssl/openssl/commit/a830f551557d3d66a84bbb18a5b889c640c36294',
-                'https://linux.oracle.com/cve/CVE-2023-6237.html',
-                'https://linux.oracle.com/errata/ELSA-2024-9088.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-6237',
-                'https://security.netapp.com/advisory/ntap-20240531-0007/',
-                'https://ubuntu.com/security/notices/USN-6622-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-6237',
-                'https://www.openssl.org/news/secadv/20240115.txt',
-                'https://www.openwall.com/lists/oss-security/2024/01/15/2'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: Excessive time spent checking invalid RSA public keys'
-            },
-            {
-              'cve':  'CVE-2024-0727',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '5.5',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H'
-                },
-                'nvd': {
-                  'v3score':  '5.5',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '5.5',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-476'
-              ],
-              'description':   'Issue summary: Processing a maliciously formatted PKCS12 file may lead OpenSSL\nto crash leading to a potential Denial of Service attack\n\nImpact summary: Applications loading files in the PKCS12 format from untrusted\nsources might terminate abruptly.\n\nA file in PKCS12 format can contain certificates and keys and may come from an\nuntrusted source. The PKCS12 specification allows certain fields to be NULL, but\nOpenSSL does not correctly check for this case. This can lead to a NULL pointer\ndereference that results in OpenSSL crashing. If an application processes PKCS12\nfiles from an untrusted source using the OpenSSL APIs then that application will\nbe vulnerable to this issue.\n\nOpenSSL APIs that are vulnerable to this are: PKCS12_parse(),\nPKCS12_unpack_p7data(), PKCS12_unpack_p7encdata(), PKCS12_unpack_authsafes()\nand PKCS12_newpass().\n\nWe have also fixed a similar issue in SMIME_write_PKCS7(). However since this\nfunction is related to writing data we do not consider it security significant.\n\nThe FIPS modules in 3.2, 3.1 and 3.0 are not affected by this issue.',
-              'diffID':        'sha256:8adafc86079f2f586db2e9c632b5977e96ebfce0fdb93f7c52bc7c83078bad29',
-              'fixedVersions': [
-                '3.0.12-r4'
-              ],
-              'installedVersion': '3.0.7-r2',
-              'packageName':      'libcrypto3',
-              'purl':             'pkg:apk/alpine/libcrypto3@3.0.7-r2?arch=x86_64&distro=3.17.0',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2024/03/11/1',
-                'https://access.redhat.com/errata/RHSA-2024:9088',
-                'https://access.redhat.com/security/cve/CVE-2024-0727',
-                'https://bugzilla.redhat.com/2257571',
-                'https://bugzilla.redhat.com/2258502',
-                'https://bugzilla.redhat.com/2259944',
-                'https://bugzilla.redhat.com/2284243',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2257571',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2258502',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2259944',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2284243',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-6129',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-6237',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-0727',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-1298',
-                'https://errata.almalinux.org/9/ALSA-2024-9088.html',
-                'https://errata.rockylinux.org/RLSA-2024:9088',
-                'https://github.com/alexcrichton/openssl-src-rs/commit/add20f73b6b42be7451af2e1044d4e0e778992b2',
-                'https://github.com/github/advisory-database/pull/3472',
-                'https://github.com/openssl/openssl/commit/09df4395b5071217b76dc7d3d2e630eb8c5a79c2',
-                'https://github.com/openssl/openssl/commit/775acfdbd0c6af9ac855f34969cdab0c0c90844a',
-                'https://github.com/openssl/openssl/commit/d135eeab8a5dbf72b3da5240bab9ddb7678dbd2c',
-                'https://github.com/openssl/openssl/pull/23362',
-                'https://github.com/pyca/cryptography/commit/3519591d255d4506fbcd0d04037d45271903c64d',
-                'https://github.openssl.org/openssl/extended-releases/commit/03b3941d60c4bce58fab69a0c22377ab439bc0e8',
-                'https://github.openssl.org/openssl/extended-releases/commit/aebaa5883e31122b404e450732dc833dc9dee539',
-                'https://linux.oracle.com/cve/CVE-2024-0727.html',
-                'https://linux.oracle.com/errata/ELSA-2024-9088.html',
-                'https://lists.debian.org/debian-lts-announce/2024/10/msg00033.html',
-                'https://lists.debian.org/debian-lts-announce/2024/11/msg00000.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2024-0727',
-                'https://security.netapp.com/advisory/ntap-20240208-0006',
-                'https://security.netapp.com/advisory/ntap-20240208-0006/',
-                'https://ubuntu.com/security/notices/USN-6622-1',
-                'https://ubuntu.com/security/notices/USN-6632-1',
-                'https://ubuntu.com/security/notices/USN-6709-1',
-                'https://ubuntu.com/security/notices/USN-7018-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2024-0727',
-                'https://www.openssl.org/news/secadv/20240125.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: denial of service via null dereference'
-            },
-            {
-              'cve':  'CVE-2024-4603',
-              'cvss': {
-                'redhat': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L'
-                }
-              },
-              'cwes': [
-                'CWE-606',
-                'CWE-834'
-              ],
-              'description':   'Issue summary: Checking excessively long DSA keys or parameters may be very\nslow.\n\nImpact summary: Applications that use the functions EVP_PKEY_param_check()\nor EVP_PKEY_public_check() to check a DSA public key or DSA parameters may\nexperience long delays. Where the key or parameters that are being checked\nhave been obtained from an untrusted source this may lead to a Denial of\nService.\n\nThe functions EVP_PKEY_param_check() or EVP_PKEY_public_check() perform\nvarious checks on DSA parameters. Some of those computations take a long time\nif the modulus (`p` parameter) is too large.\n\nTrying to use a very large modulus is slow and OpenSSL will not allow using\npublic keys with a modulus which is over 10,000 bits in length for signature\nverification. However the key and parameter check functions do not limit\nthe modulus size when performing the checks.\n\nAn application that calls EVP_PKEY_param_check() or EVP_PKEY_public_check()\nand supplies a key or parameters obtained from an untrusted source could be\nvulnerable to a Denial of Service attack.\n\nThese functions are not called by OpenSSL itself on untrusted DSA keys so\nonly applications that directly call these functions may be vulnerable.\n\nAlso vulnerable are the OpenSSL pkey and pkeyparam command line applications\nwhen using the `-check` option.\n\nThe OpenSSL SSL/TLS implementation is not affected by this issue.\n\nThe OpenSSL 3.0 and 3.1 FIPS providers are affected by this issue.',
-              'diffID':        'sha256:8adafc86079f2f586db2e9c632b5977e96ebfce0fdb93f7c52bc7c83078bad29',
-              'fixedVersions': [
-                '3.0.13-r0'
-              ],
-              'installedVersion': '3.0.7-r2',
-              'packageName':      'libcrypto3',
-              'purl':             'pkg:apk/alpine/libcrypto3@3.0.7-r2?arch=x86_64&distro=3.17.0',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2024/05/16/2',
-                'https://access.redhat.com/errata/RHSA-2024:9333',
-                'https://access.redhat.com/security/cve/CVE-2024-4603',
-                'https://bugzilla.redhat.com/2274020',
-                'https://bugzilla.redhat.com/2281029',
-                'https://bugzilla.redhat.com/2283757',
-                'https://bugzilla.redhat.com/2294581',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2274020',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2281029',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2283757',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2294581',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-2511',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-4603',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-4741',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-5535',
-                'https://errata.almalinux.org/9/ALSA-2024-9333.html',
-                'https://errata.rockylinux.org/RLSA-2024:9333',
-                'https://github.com/openssl/openssl/commit/3559e868e58005d15c6013a0c1fd832e51c73397',
-                'https://github.com/openssl/openssl/commit/53ea06486d296b890d565fb971b2764fcd826e7e',
-                'https://github.com/openssl/openssl/commit/9c39b3858091c152f52513c066ff2c5a47969f0d',
-                'https://github.com/openssl/openssl/commit/da343d0605c826ef197aceedc67e8e04f065f740',
-                'https://linux.oracle.com/cve/CVE-2024-4603.html',
-                'https://linux.oracle.com/errata/ELSA-2024-9333.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2024-4603',
-                'https://security.netapp.com/advisory/ntap-20240621-0001/',
-                'https://ubuntu.com/security/notices/USN-6937-1',
-                'https://www.cve.org/CVERecord?id=CVE-2024-4603',
-                'https://www.openssl.org/news/secadv/20240516.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: Excessive time spent checking DSA keys and parameters'
-            },
-            {
-              'cve':  'CVE-2024-4741',
-              'cvss': {
-                'redhat': {
-                  'v3score':  '5.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   'Issue summary: Calling the OpenSSL API function SSL_free_buffers may cause\nmemory to be accessed that was previously freed in some situations\n\nImpact summary: A use after free can have a range of potential consequences such\nas the corruption of valid data, crashes or execution of arbitrary code.\nHowever, only applications that directly call the SSL_free_buffers function are\naffected by this issue. Applications that do not call this function are not\nvulnerable. Our investigations indicate that this function is rarely used by\napplications.\n\nThe SSL_free_buffers function is used to free the internal OpenSSL buffer used\nwhen processing an incoming record from the network. The call is only expected\nto succeed if the buffer is not currently in use. However, two scenarios have\nbeen identified where the buffer is freed even when still in use.\n\nThe first scenario occurs where a record header has been received from the\nnetwork and processed by OpenSSL, but the full record body has not yet arrived.\nIn this case calling SSL_free_buffers will succeed even though a record has only\nbeen partially processed and the buffer is still in use.\n\nThe second scenario occurs where a full record containing application data has\nbeen received and processed by OpenSSL but the application has only read part of\nthis data. Again a call to SSL_free_buffers will succeed even though the buffer\nis still in use.\n\nWhile these scenarios could occur accidentally during normal operation a\nmalicious attacker could attempt to engineer a stituation where this occurs.\nWe are not aware of this issue being actively exploited.\n\nThe FIPS modules in 3.3, 3.2, 3.1 and 3.0 are not affected by this issue.',
-              'diffID':        'sha256:8adafc86079f2f586db2e9c632b5977e96ebfce0fdb93f7c52bc7c83078bad29',
-              'fixedVersions': [
-                '3.0.14-r0'
-              ],
-              'installedVersion': '3.0.7-r2',
-              'packageName':      'libcrypto3',
-              'purl':             'pkg:apk/alpine/libcrypto3@3.0.7-r2?arch=x86_64&distro=3.17.0',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2024:9333',
-                'https://access.redhat.com/security/cve/CVE-2024-4741',
-                'https://bugzilla.redhat.com/2274020',
-                'https://bugzilla.redhat.com/2281029',
-                'https://bugzilla.redhat.com/2283757',
-                'https://bugzilla.redhat.com/2294581',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2274020',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2281029',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2283757',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2294581',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-2511',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-4603',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-4741',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-5535',
-                'https://errata.almalinux.org/9/ALSA-2024-9333.html',
-                'https://errata.rockylinux.org/RLSA-2024:9333',
-                'https://github.com/openssl/openssl/commit/704f725b96aa373ee45ecfb23f6abfe8be8d9177',
-                'https://github.com/openssl/openssl/commit/b3f0eb0a295f58f16ba43ba99dad70d4ee5c437d',
-                'https://github.com/openssl/openssl/commit/c88c3de51020c37e8706bf7a682a162593053aac',
-                'https://github.com/openssl/openssl/commit/e5093133c35ca82874ad83697af76f4b0f7e3bd8',
-                'https://github.openssl.org/openssl/extended-releases/commit/f7a045f3143fc6da2ee66bf52d8df04829590dd4',
-                'https://linux.oracle.com/cve/CVE-2024-4741.html',
-                'https://linux.oracle.com/errata/ELSA-2024-9333.html',
-                'https://lists.debian.org/debian-lts-announce/2024/10/msg00033.html',
-                'https://lists.debian.org/debian-lts-announce/2024/11/msg00000.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2024-4741',
-                'https://security.netapp.com/advisory/ntap-20240621-0004/',
-                'https://ubuntu.com/security/notices/USN-6937-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2024-4741',
-                'https://www.openssl.org/news/secadv/20240528.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: Use After Free with SSL_free_buffers'
-            },
-            {
-              'cve':  'CVE-2024-5535',
-              'cvss': {
-                'redhat': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-125'
-              ],
-              'description':   'Issue summary: Calling the OpenSSL API function SSL_select_next_proto with an\nempty supported client protocols buffer may cause a crash or memory contents to\nbe sent to the peer.\n\nImpact summary: A buffer overread can have a range of potential consequences\nsuch as unexpected application beahviour or a crash. In particular this issue\ncould result in up to 255 bytes of arbitrary private data from memory being sent\nto the peer leading to a loss of confidentiality. However, only applications\nthat directly call the SSL_select_next_proto function with a 0 length list of\nsupported client protocols are affected by this issue. This would normally never\nbe a valid scenario and is typically not under attacker control but may occur by\naccident in the case of a configuration or programming error in the calling\napplication.\n\nThe OpenSSL API function SSL_select_next_proto is typically used by TLS\napplications that support ALPN (Application Layer Protocol Negotiation) or NPN\n(Next Protocol Negotiation). NPN is older, was never standardised and\nis deprecated in favour of ALPN. We believe that ALPN is significantly more\nwidely deployed than NPN. The SSL_select_next_proto function accepts a list of\nprotocols from the server and a list of protocols from the client and returns\nthe first protocol that appears in the server list that also appears in the\nclient list. In the case of no overlap between the two lists it returns the\nfirst item in the client list. In either case it will signal whether an overlap\nbetween the two lists was found. In the case where SSL_select_next_proto is\ncalled with a zero length client list it fails to notice this condition and\nreturns the memory immediately following the client list pointer (and reports\nthat there was no overlap in the lists).\n\nThis function is typically called from a server side application callback for\nALPN or a client side application callback for NPN. In the case of ALPN the list\nof protocols supplied by the client is guaranteed by libssl to never be zero in\nlength. The list of server protocols comes from the application and should never\nnormally be expected to be of zero length. In this case if the\nSSL_select_next_proto function has been called as expected (with the list\nsupplied by the client passed in the client/client_len parameters), then the\napplication will not be vulnerable to this issue. If the application has\naccidentally been configured with a zero length server list, and has\naccidentally passed that zero length server list in the client/client_len\nparameters, and has additionally failed to correctly handle a "no overlap"\nresponse (which would normally result in a handshake failure in ALPN) then it\nwill be vulnerable to this problem.\n\nIn the case of NPN, the protocol permits the client to opportunistically select\na protocol when there is no overlap. OpenSSL returns the first client protocol\nin the no overlap case in support of this. The list of client protocols comes\nfrom the application and should never normally be expected to be of zero length.\nHowever if the SSL_select_next_proto function is accidentally called with a\nclient_len of 0 then an invalid memory pointer will be returned instead. If the\napplication uses this output as the opportunistic protocol then the loss of\nconfidentiality will occur.\n\nThis issue has been assessed as Low severity because applications are most\nlikely to be vulnerable if they are using NPN instead of ALPN - but NPN is not\nwidely used. It also requires an application configuration or programming error.\nFinally, this issue would not typically be under attacker control making active\nexploitation unlikely.\n\nThe FIPS modules in 3.3, 3.2, 3.1 and 3.0 are not affected by this issue.\n\nDue to the low severity of this issue we are not issuing new releases of\nOpenSSL at this time. The fix will be included in the next releases when they\nbecome available.',
-              'diffID':        'sha256:8adafc86079f2f586db2e9c632b5977e96ebfce0fdb93f7c52bc7c83078bad29',
-              'fixedVersions': [
-                '3.0.14-r0'
-              ],
-              'installedVersion': '3.0.7-r2',
-              'packageName':      'libcrypto3',
-              'purl':             'pkg:apk/alpine/libcrypto3@3.0.7-r2?arch=x86_64&distro=3.17.0',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2024/06/27/1',
-                'http://www.openwall.com/lists/oss-security/2024/06/28/4',
-                'http://www.openwall.com/lists/oss-security/2024/08/15/1',
-                'https://access.redhat.com/errata/RHSA-2025:1671',
-                'https://access.redhat.com/security/cve/CVE-2024-5535',
-                'https://bugzilla.redhat.com/2294581',
-                'https://bugzilla.redhat.com/2294676',
-                'https://bugzilla.redhat.com/2301888',
-                'https://bugzilla.redhat.com/2318857',
-                'https://bugzilla.redhat.com/2318858',
-                'https://bugzilla.redhat.com/2318870',
-                'https://bugzilla.redhat.com/2318873',
-                'https://bugzilla.redhat.com/2318874',
-                'https://bugzilla.redhat.com/2318876',
-                'https://bugzilla.redhat.com/2318882',
-                'https://bugzilla.redhat.com/2318883',
-                'https://bugzilla.redhat.com/2318884',
-                'https://bugzilla.redhat.com/2318885',
-                'https://bugzilla.redhat.com/2318886',
-                'https://bugzilla.redhat.com/2318897',
-                'https://bugzilla.redhat.com/2318900',
-                'https://bugzilla.redhat.com/2318905',
-                'https://bugzilla.redhat.com/2318914',
-                'https://bugzilla.redhat.com/2318922',
-                'https://bugzilla.redhat.com/2318923',
-                'https://bugzilla.redhat.com/2318925',
-                'https://bugzilla.redhat.com/2318926',
-                'https://bugzilla.redhat.com/2318927',
-                'https://bugzilla.redhat.com/2331191',
-                'https://bugzilla.redhat.com/2339218',
-                'https://bugzilla.redhat.com/2339220',
-                'https://bugzilla.redhat.com/2339221',
-                'https://bugzilla.redhat.com/2339226',
-                'https://bugzilla.redhat.com/2339231',
-                'https://bugzilla.redhat.com/2339236',
-                'https://bugzilla.redhat.com/2339238',
-                'https://bugzilla.redhat.com/2339243',
-                'https://bugzilla.redhat.com/2339247',
-                'https://bugzilla.redhat.com/2339252',
-                'https://bugzilla.redhat.com/2339259',
-                'https://bugzilla.redhat.com/2339266',
-                'https://bugzilla.redhat.com/2339270',
-                'https://bugzilla.redhat.com/2339271',
-                'https://bugzilla.redhat.com/2339275',
-                'https://bugzilla.redhat.com/2339277',
-                'https://bugzilla.redhat.com/2339281',
-                'https://bugzilla.redhat.com/2339284',
-                'https://bugzilla.redhat.com/2339291',
-                'https://bugzilla.redhat.com/2339293',
-                'https://bugzilla.redhat.com/2339295',
-                'https://bugzilla.redhat.com/2339299',
-                'https://bugzilla.redhat.com/2339300',
-                'https://bugzilla.redhat.com/2339304',
-                'https://bugzilla.redhat.com/2339305',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2274020',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2281029',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2283757',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2294581',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-2511',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-4603',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-4741',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-5535',
-                'https://errata.almalinux.org/9/ALSA-2025-1671.html',
-                'https://errata.rockylinux.org/RLSA-2024:9333',
-                'https://github.com/openssl/openssl/commit/4ada436a1946cbb24db5ab4ca082b69c1bc10f37',
-                'https://github.com/openssl/openssl/commit/99fb785a5f85315b95288921a321a935ea29a51e',
-                'https://github.com/openssl/openssl/commit/cf6f91f6121f4db167405db2f0de410a456f260c',
-                'https://github.com/openssl/openssl/commit/e86ac436f0bd54d4517745483e2315650fae7b2c',
-                'https://github.openssl.org/openssl/extended-releases/commit/9947251413065a05189a63c9b7a6c1d4e224c21c',
-                'https://github.openssl.org/openssl/extended-releases/commit/b78ec0824da857223486660177d3b1f255c65d87',
-                'https://linux.oracle.com/cve/CVE-2024-5535.html',
-                'https://linux.oracle.com/errata/ELSA-2025-1673.html',
-                'https://lists.debian.org/debian-lts-announce/2024/10/msg00033.html',
-                'https://lists.debian.org/debian-lts-announce/2024/11/msg00000.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2024-5535',
-                'https://openssl.org/news/secadv/20240627.txt',
-                'https://security.netapp.com/advisory/ntap-20240712-0005/',
-                'https://security.netapp.com/advisory/ntap-20241025-0006/',
-                'https://security.netapp.com/advisory/ntap-20241025-0010/',
-                'https://ubuntu.com/security/notices/USN-6937-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2024-5535',
-                'https://www.openssl.org/news/secadv/20240627.txt',
-                'https://www.oracle.com/security-alerts/cpuoct2024.html#AppendixMSQL'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: SSL_select_next_proto buffer overread'
-            },
-            {
-              'cve':  'CVE-2024-2511',
-              'cvss': {
-                'redhat': {
-                  'v3score':  '3.7',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L'
-                }
-              },
-              'cwes': [
-                'CWE-1325'
-              ],
-              'description':   'Issue summary: Some non-default TLS server configurations can cause unbounded\nmemory growth when processing TLSv1.3 sessions\n\nImpact summary: An attacker may exploit certain server configurations to trigger\nunbounded memory growth that would lead to a Denial of Service\n\nThis problem can occur in TLSv1.3 if the non-default SSL_OP_NO_TICKET option is\nbeing used (but not if early_data support is also configured and the default\nanti-replay protection is in use). In this case, under certain conditions, the\nsession cache can get into an incorrect state and it will fail to flush properly\nas it fills. The session cache will continue to grow in an unbounded manner. A\nmalicious client could deliberately create the scenario for this failure to\nforce a Denial of Service. It may also happen by accident in normal operation.\n\nThis issue only affects TLS servers supporting TLSv1.3. It does not affect TLS\nclients.\n\nThe FIPS modules in 3.2, 3.1 and 3.0 are not affected by this issue. OpenSSL\n1.0.2 is also not affected by this issue.',
-              'diffID':        'sha256:8adafc86079f2f586db2e9c632b5977e96ebfce0fdb93f7c52bc7c83078bad29',
-              'fixedVersions': [
-                '3.0.12-r5'
-              ],
-              'installedVersion': '3.0.7-r2',
-              'packageName':      'libcrypto3',
-              'purl':             'pkg:apk/alpine/libcrypto3@3.0.7-r2?arch=x86_64&distro=3.17.0',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2024/04/08/5',
-                'https://access.redhat.com/errata/RHSA-2024:9333',
-                'https://access.redhat.com/security/cve/CVE-2024-2511',
-                'https://bugzilla.redhat.com/2274020',
-                'https://bugzilla.redhat.com/2281029',
-                'https://bugzilla.redhat.com/2283757',
-                'https://bugzilla.redhat.com/2294581',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2274020',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2281029',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2283757',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2294581',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-2511',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-4603',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-4741',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-5535',
-                'https://errata.almalinux.org/9/ALSA-2024-9333.html',
-                'https://errata.rockylinux.org/RLSA-2024:9333',
-                'https://github.com/openssl/openssl/commit/7e4d731b1c07201ad9374c1cd9ac5263bdf35bce',
-                'https://github.com/openssl/openssl/commit/b52867a9f618bb955bed2a3ce3db4d4f97ed8e5d',
-                'https://github.com/openssl/openssl/commit/e9d7083e241670332e0443da0f0d4ffb52829f08',
-                'https://github.openssl.org/openssl/extended-releases/commit/5f8d25770ae6437db119dfc951e207271a326640',
-                'https://linux.oracle.com/cve/CVE-2024-2511.html',
-                'https://linux.oracle.com/errata/ELSA-2024-9333.html',
-                'https://lists.debian.org/debian-lts-announce/2024/10/msg00033.html',
-                'https://lists.debian.org/debian-lts-announce/2024/11/msg00000.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2024-2511',
-                'https://security.netapp.com/advisory/ntap-20240503-0013/',
-                'https://ubuntu.com/security/notices/USN-6937-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2024-2511',
-                'https://www.openssl.org/news/secadv/20240408.txt',
-                'https://www.openssl.org/news/vulnerabilities.html'
-              ],
-              'severity':   'LOW',
-              'suppressed': false,
-              'title':      'openssl: Unbounded memory growth with session handling in TLSv1.3'
-            },
-            {
-              'cve':  'CVE-2024-9143',
-              'cvss': {
-                'redhat': {
-                  'v3score':  '3.7',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L'
-                }
-              },
-              'cwes': [
-                'CWE-125',
-                'CWE-787'
-              ],
-              'description':   "Issue summary: Use of the low-level GF(2^m) elliptic curve APIs with untrusted\nexplicit values for the field polynomial can lead to out-of-bounds memory reads\nor writes.\n\nImpact summary: Out of bound memory writes can lead to an application crash or\neven a possibility of a remote code execution, however, in all the protocols\ninvolving Elliptic Curve Cryptography that we're aware of, either only \"named\ncurves\" are supported, or, if explicit curve parameters are supported, they\nspecify an X9.62 encoding of binary (GF(2^m)) curves that can't represent\nproblematic input values. Thus the likelihood of existence of a vulnerable\napplication is low.\n\nIn particular, the X9.62 encoding is used for ECC keys in X.509 certificates,\nso problematic inputs cannot occur in the context of processing X.509\ncertificates.  Any problematic use-cases would have to be using an \"exotic\"\ncurve encoding.\n\nThe affected APIs include: EC_GROUP_new_curve_GF2m(), EC_GROUP_new_from_params(),\nand various supporting BN_GF2m_*() functions.\n\nApplications working with \"exotic\" explicit binary (GF(2^m)) curve parameters,\nthat make it possible to represent invalid field polynomials with a zero\nconstant term, via the above or similar APIs, may terminate abruptly as a\nresult of reading or writing outside of array bounds.  Remote code execution\ncannot easily be ruled out.\n\nThe FIPS modules in 3.3, 3.2, 3.1 and 3.0 are not affected by this issue.",
-              'diffID':        'sha256:8adafc86079f2f586db2e9c632b5977e96ebfce0fdb93f7c52bc7c83078bad29',
-              'fixedVersions': [
-                '3.0.15-r1'
-              ],
-              'installedVersion': '3.0.7-r2',
-              'packageName':      'libcrypto3',
-              'purl':             'pkg:apk/alpine/libcrypto3@3.0.7-r2?arch=x86_64&distro=3.17.0',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2024/10/16/1',
-                'http://www.openwall.com/lists/oss-security/2024/10/23/1',
-                'http://www.openwall.com/lists/oss-security/2024/10/24/1',
-                'https://access.redhat.com/security/cve/CVE-2024-9143',
-                'https://github.com/openssl/openssl/commit/72ae83ad214d2eef262461365a1975707f862712',
-                'https://github.com/openssl/openssl/commit/bc7e04d7c8d509fb78fc0e285aa948fb0da04700',
-                'https://github.com/openssl/openssl/commit/c0d3e4d32d2805f49bec30547f225bc4d092e1f4',
-                'https://github.com/openssl/openssl/commit/fdf6723362ca51bd883295efe206cb5b1cfa5154',
-                'https://github.openssl.org/openssl/extended-releases/commit/8efc0cbaa8ebba8e116f7b81a876a4123594d86a',
-                'https://github.openssl.org/openssl/extended-releases/commit/9d576994cec2b7aa37a91740ea7e680810957e41',
-                'https://lists.debian.org/debian-lts-announce/2024/10/msg00033.html',
-                'https://lists.debian.org/debian-lts-announce/2024/11/msg00000.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2024-9143',
-                'https://openssl-library.org/news/secadv/20241016.txt',
-                'https://security.netapp.com/advisory/ntap-20241101-0001/',
-                'https://ubuntu.com/security/notices/USN-7264-1',
-                'https://ubuntu.com/security/notices/USN-7278-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2024-9143'
-              ],
-              'severity':   'LOW',
-              'suppressed': false,
-              'title':      'openssl: Low-level invalid GF(2^m) parameters lead to OOB memory access'
-            },
-            {
-              'cve':  'CVE-2022-4450',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'nvd': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-415'
-              ],
-              'description':   'The function PEM_read_bio_ex() reads a PEM file from a BIO and parses and\ndecodes the "name" (e.g. "CERTIFICATE"), any header data and the payload data.\nIf the function succeeds then the "name_out", "header" and "data" arguments are\npopulated with pointers to buffers containing the relevant decoded data. The\ncaller is responsible for freeing those buffers. It is possible to construct a\nPEM file that results in 0 bytes of payload data. In this case PEM_read_bio_ex()\nwill return a failure code but will populate the header argument with a pointer\nto a buffer that has already been freed. If the caller also frees this buffer\nthen a double free will occur. This will most likely lead to a crash. This\ncould be exploited by an attacker who has the ability to supply malicious PEM\nfiles for parsing to achieve a denial of service attack.\n\nThe functions PEM_read_bio() and PEM_read() are simple wrappers around\nPEM_read_bio_ex() and therefore these functions are also directly affected.\n\nThese functions are also called indirectly by a number of other OpenSSL\nfunctions including PEM_X509_INFO_read_bio_ex() and\nSSL_CTX_use_serverinfo_file() which are also vulnerable. Some OpenSSL internal\nuses of these functions are not vulnerable because the caller does not free the\nheader argument if PEM_read_bio_ex() returns a failure code. These locations\ninclude the PEM_read_bio_TYPE() functions as well as the decoders introduced in\nOpenSSL 3.0.\n\nThe OpenSSL asn1parse command line application is also impacted by this issue.',
-              'diffID':        'sha256:8adafc86079f2f586db2e9c632b5977e96ebfce0fdb93f7c52bc7c83078bad29',
-              'fixedVersions': [
-                '3.0.8-r0'
-              ],
-              'installedVersion': '3.0.7-r2',
-              'packageName':      'libssl3',
-              'purl':             'pkg:apk/alpine/libssl3@3.0.7-r2?arch=x86_64&distro=3.17.0',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2023:2165',
-                'https://access.redhat.com/security/cve/CVE-2022-4450',
-                'https://bugzilla.redhat.com/1960321',
-                'https://bugzilla.redhat.com/2164440',
-                'https://bugzilla.redhat.com/2164487',
-                'https://bugzilla.redhat.com/2164492',
-                'https://bugzilla.redhat.com/2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144000',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144003',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144006',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144008',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144010',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144012',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144015',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144017',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144019',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2145170',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2158412',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164440',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164487',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164488',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164492',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164497',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164499',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164500',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4203',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4304',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4450',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0215',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0216',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0217',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0286',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0401',
-                'https://errata.almalinux.org/9/ALSA-2023-2165.html',
-                'https://errata.rockylinux.org/RLSA-2023:0946',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=63bcf189be73a9cc1264059bed6f57974be74a83',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=bbcf509bd046b34cca19c766bbddc31683d0858b',
-                'https://linux.oracle.com/cve/CVE-2022-4450.html',
-                'https://linux.oracle.com/errata/ELSA-2023-32791.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2022-4450',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0003',
-                'https://rustsec.org/advisories/RUSTSEC-2023-0010.html',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://ubuntu.com/security/notices/USN-5844-1',
-                'https://ubuntu.com/security/notices/USN-6564-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2022-4450',
-                'https://www.openssl.org/news/secadv/20230207.txt'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: double free after calling PEM_read_bio_ex'
-            },
-            {
-              'cve':  'CVE-2023-0215',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'nvd': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   'The public API function BIO_new_NDEF is a helper function used for streaming\nASN.1 data via a BIO. It is primarily used internally to OpenSSL to support the\nSMIME, CMS and PKCS7 streaming capabilities, but may also be called directly by\nend user applications.\n\nThe function receives a BIO from the caller, prepends a new BIO_f_asn1 filter\nBIO onto the front of it to form a BIO chain, and then returns the new head of\nthe BIO chain to the caller. Under certain conditions, for example if a CMS\nrecipient public key is invalid, the new filter BIO is freed and the function\nreturns a NULL result indicating a failure. However, in this case, the BIO chain\nis not properly cleaned up and the BIO passed by the caller still retains\ninternal pointers to the previously freed filter BIO. If the caller then goes on\nto call BIO_pop() on the BIO then a use-after-free will occur. This will most\nlikely result in a crash.\n\n\n\nThis scenario occurs directly in the internal function B64_write_ASN1() which\nmay cause BIO_new_NDEF() to be called and will subsequently call BIO_pop() on\nthe BIO. This internal function is in turn called by the public API functions\nPEM_write_bio_ASN1_stream, PEM_write_bio_CMS_stream, PEM_write_bio_PKCS7_stream,\nSMIME_write_ASN1, SMIME_write_CMS and SMIME_write_PKCS7.\n\nOther public API functions that may be impacted by this include\ni2d_ASN1_bio_stream, BIO_new_CMS, BIO_new_PKCS7, i2d_CMS_bio_stream and\ni2d_PKCS7_bio_stream.\n\nThe OpenSSL cms and smime command line applications are similarly affected.',
-              'diffID':        'sha256:8adafc86079f2f586db2e9c632b5977e96ebfce0fdb93f7c52bc7c83078bad29',
-              'fixedVersions': [
-                '3.0.8-r0'
-              ],
-              'installedVersion': '3.0.7-r2',
-              'packageName':      'libssl3',
-              'purl':             'pkg:apk/alpine/libssl3@3.0.7-r2?arch=x86_64&distro=3.17.0',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2023:2165',
-                'https://access.redhat.com/security/cve/CVE-2023-0215',
-                'https://bugzilla.redhat.com/1960321',
-                'https://bugzilla.redhat.com/2164440',
-                'https://bugzilla.redhat.com/2164487',
-                'https://bugzilla.redhat.com/2164492',
-                'https://bugzilla.redhat.com/2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144000',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144003',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144006',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144008',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144010',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144012',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144015',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144017',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144019',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2145170',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2158412',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164440',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164487',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164488',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164492',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164497',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164499',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164500',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4203',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4304',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4450',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0215',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0216',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0217',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0286',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0401',
-                'https://errata.almalinux.org/9/ALSA-2023-2165.html',
-                'https://errata.rockylinux.org/RLSA-2023:0946',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=8818064ce3c3c0f1b740a5aaba2a987e75bfbafd',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=9816136fe31d92ace4037d5da5257f763aeeb4eb',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=c3829dd8825c654652201e16f8a0a0c46ee3f344',
-                'https://linux.oracle.com/cve/CVE-2023-0215.html',
-                'https://linux.oracle.com/errata/ELSA-2023-32791.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-0215',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0003',
-                'https://rustsec.org/advisories/RUSTSEC-2023-0009.html',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://security.netapp.com/advisory/ntap-20230427-0007',
-                'https://security.netapp.com/advisory/ntap-20230427-0007/',
-                'https://security.netapp.com/advisory/ntap-20230427-0009',
-                'https://security.netapp.com/advisory/ntap-20230427-0009/',
-                'https://security.netapp.com/advisory/ntap-20240621-0006',
-                'https://security.netapp.com/advisory/ntap-20240621-0006/',
-                'https://ubuntu.com/security/notices/USN-5844-1',
-                'https://ubuntu.com/security/notices/USN-5845-1',
-                'https://ubuntu.com/security/notices/USN-5845-2',
-                'https://ubuntu.com/security/notices/USN-6564-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-0215',
-                'https://www.openssl.org/news/secadv/20230207.txt'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: use-after-free following BIO_new_NDEF'
-            },
-            {
-              'cve':  'CVE-2023-0216',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'nvd': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-476'
-              ],
-              'description':   'An invalid pointer dereference on read can be triggered when an\napplication tries to load malformed PKCS7 data with the\nd2i_PKCS7(), d2i_PKCS7_bio() or d2i_PKCS7_fp() functions.\n\nThe result of the dereference is an application crash which could\nlead to a denial of service attack. The TLS implementation in OpenSSL\ndoes not call this function however third party applications might\ncall these functions on untrusted data.',
-              'diffID':        'sha256:8adafc86079f2f586db2e9c632b5977e96ebfce0fdb93f7c52bc7c83078bad29',
-              'fixedVersions': [
-                '3.0.8-r0'
-              ],
-              'installedVersion': '3.0.7-r2',
-              'packageName':      'libssl3',
-              'purl':             'pkg:apk/alpine/libssl3@3.0.7-r2?arch=x86_64&distro=3.17.0',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2023:0946',
-                'https://access.redhat.com/security/cve/CVE-2023-0216',
-                'https://bugzilla.redhat.com/2164440',
-                'https://bugzilla.redhat.com/2164487',
-                'https://bugzilla.redhat.com/2164488',
-                'https://bugzilla.redhat.com/2164492',
-                'https://bugzilla.redhat.com/2164494',
-                'https://bugzilla.redhat.com/2164497',
-                'https://bugzilla.redhat.com/2164499',
-                'https://bugzilla.redhat.com/2164500',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144000',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144003',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144006',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144008',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144010',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144012',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144015',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144017',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144019',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2145170',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2158412',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164440',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164487',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164488',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164492',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164497',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164499',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164500',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4203',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4304',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4450',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0215',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0216',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0217',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0286',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0401',
-                'https://errata.almalinux.org/9/ALSA-2023-0946.html',
-                'https://errata.rockylinux.org/RLSA-2023:0946',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=934a04f0e775309cadbef0aa6b9692e1b12a76c6',
-                'https://linux.oracle.com/cve/CVE-2023-0216.html',
-                'https://linux.oracle.com/errata/ELSA-2023-12152.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-0216',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0003',
-                'https://rustsec.org/advisories/RUSTSEC-2023-0011.html',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://ubuntu.com/security/notices/USN-5844-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-0216',
-                'https://www.openssl.org/news/secadv/20230207.txt'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: invalid pointer dereference in d2i_PKCS7 functions'
-            },
-            {
-              'cve':  'CVE-2023-0217',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'nvd': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-476'
-              ],
-              'description':   'An invalid pointer dereference on read can be triggered when an\napplication tries to check a malformed DSA public key by the\nEVP_PKEY_public_check() function. This will most likely lead\nto an application crash. This function can be called on public\nkeys supplied from untrusted sources which could allow an attacker\nto cause a denial of service attack.\n\nThe TLS implementation in OpenSSL does not call this function\nbut applications might call the function if there are additional\nsecurity requirements imposed by standards such as FIPS 140-3.',
-              'diffID':        'sha256:8adafc86079f2f586db2e9c632b5977e96ebfce0fdb93f7c52bc7c83078bad29',
-              'fixedVersions': [
-                '3.0.8-r0'
-              ],
-              'installedVersion': '3.0.7-r2',
-              'packageName':      'libssl3',
-              'purl':             'pkg:apk/alpine/libssl3@3.0.7-r2?arch=x86_64&distro=3.17.0',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2023:0946',
-                'https://access.redhat.com/security/cve/CVE-2023-0217',
-                'https://bugzilla.redhat.com/2164440',
-                'https://bugzilla.redhat.com/2164487',
-                'https://bugzilla.redhat.com/2164488',
-                'https://bugzilla.redhat.com/2164492',
-                'https://bugzilla.redhat.com/2164494',
-                'https://bugzilla.redhat.com/2164497',
-                'https://bugzilla.redhat.com/2164499',
-                'https://bugzilla.redhat.com/2164500',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144000',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144003',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144006',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144008',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144010',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144012',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144015',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144017',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144019',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2145170',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2158412',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164440',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164487',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164488',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164492',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164497',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164499',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164500',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4203',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4304',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4450',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0215',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0216',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0217',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0286',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0401',
-                'https://errata.almalinux.org/9/ALSA-2023-0946.html',
-                'https://errata.rockylinux.org/RLSA-2023:0946',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=23985bac83fd50c8e29431009302b5442f985096',
-                'https://linux.oracle.com/cve/CVE-2023-0217.html',
-                'https://linux.oracle.com/errata/ELSA-2023-12152.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-0217',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0003',
-                'https://rustsec.org/advisories/RUSTSEC-2023-0012.html',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://ubuntu.com/security/notices/USN-5844-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-0217',
-                'https://www.openssl.org/news/secadv/20230207.txt'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: NULL dereference validating DSA public key'
-            },
-            {
-              'cve':  'CVE-2023-0286',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '7.4',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H'
-                },
-                'nvd': {
-                  'v3score':  '7.4',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.4',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-843'
-              ],
-              'description':   'There is a type confusion vulnerability relating to X.400 address processing\ninside an X.509 GeneralName. X.400 addresses were parsed as an ASN1_STRING but\nthe public structure definition for GENERAL_NAME incorrectly specified the type\nof the x400Address field as ASN1_TYPE. This field is subsequently interpreted by\nthe OpenSSL function GENERAL_NAME_cmp as an ASN1_TYPE rather than an\nASN1_STRING.\n\nWhen CRL checking is enabled (i.e. the application sets the\nX509_V_FLAG_CRL_CHECK flag), this vulnerability may allow an attacker to pass\narbitrary pointers to a memcmp call, enabling them to read memory contents or\nenact a denial of service. In most cases, the attack requires the attacker to\nprovide both the certificate chain and CRL, neither of which need to have a\nvalid signature. If the attacker only controls one of these inputs, the other\ninput must already contain an X.400 address as a CRL distribution point, which\nis uncommon. As such, this vulnerability is most likely to only affect\napplications which have implemented their own functionality for retrieving CRLs\nover a network.',
-              'diffID':        'sha256:8adafc86079f2f586db2e9c632b5977e96ebfce0fdb93f7c52bc7c83078bad29',
-              'fixedVersions': [
-                '3.0.8-r0'
-              ],
-              'installedVersion': '3.0.7-r2',
-              'packageName':      'libssl3',
-              'purl':             'pkg:apk/alpine/libssl3@3.0.7-r2?arch=x86_64&distro=3.17.0',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2025:7937',
-                'https://access.redhat.com/security/cve/CVE-2023-0286',
-                'https://access.redhat.com/security/cve/cve-2023-0286',
-                'https://bugzilla.redhat.com/2164440',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144000',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144003',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144006',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144008',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144010',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144012',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144015',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144017',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144019',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2145170',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2158412',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164440',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164487',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164488',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164492',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164497',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164499',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164500',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4203',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4304',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4450',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0215',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0216',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0217',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0286',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0401',
-                'https://errata.almalinux.org/9/ALSA-2025-7937.html',
-                'https://errata.rockylinux.org/RLSA-2023:0946',
-                'https://ftp.openbsd.org/pub/OpenBSD/LibreSSL/libressl-3.6.2-relnotes.txt',
-                'https://ftp.openbsd.org/pub/OpenBSD/patches/7.2/common/018_x509.patch.sig',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=2c6c9d439b484e1ba9830d8454a34fa4f80fdfe9',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=2f7530077e0ef79d98718138716bc51ca0cad658',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=fd2af07dc083a350c959147097003a14a5e8ac4d',
-                'https://github.com/pyca/cryptography',
-                'https://github.com/pyca/cryptography/security/advisories/GHSA-x4qr-2fvf-3mr5',
-                'https://linux.oracle.com/cve/CVE-2023-0286.html',
-                'https://linux.oracle.com/errata/ELSA-2025-7937.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-0286',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0003',
-                'https://rustsec.org/advisories/RUSTSEC-2023-0006.html',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://ubuntu.com/security/notices/USN-5844-1',
-                'https://ubuntu.com/security/notices/USN-5845-1',
-                'https://ubuntu.com/security/notices/USN-5845-2',
-                'https://ubuntu.com/security/notices/USN-6564-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-0286',
-                'https://www.openssl.org/news/secadv/20230207.txt'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: X.400 address type confusion in X.509 GeneralName'
-            },
-            {
-              'cve':  'CVE-2023-0401',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'nvd': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-476'
-              ],
-              'description':   'A NULL pointer can be dereferenced when signatures are being\nverified on PKCS7 signed or signedAndEnveloped data. In case the hash\nalgorithm used for the signature is known to the OpenSSL library but\nthe implementation of the hash algorithm is not available the digest\ninitialization will fail. There is a missing check for the return\nvalue from the initialization function which later leads to invalid\nusage of the digest API most likely leading to a crash.\n\nThe unavailability of an algorithm can be caused by using FIPS\nenabled configuration of providers or more commonly by not loading\nthe legacy provider.\n\nPKCS7 data is processed by the SMIME library calls and also by the\ntime stamp (TS) library calls. The TLS implementation in OpenSSL does\nnot call these functions however third party applications would be\naffected if they call these functions to verify signatures on untrusted\ndata.',
-              'diffID':        'sha256:8adafc86079f2f586db2e9c632b5977e96ebfce0fdb93f7c52bc7c83078bad29',
-              'fixedVersions': [
-                '3.0.8-r0'
-              ],
-              'installedVersion': '3.0.7-r2',
-              'packageName':      'libssl3',
-              'purl':             'pkg:apk/alpine/libssl3@3.0.7-r2?arch=x86_64&distro=3.17.0',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2023:0946',
-                'https://access.redhat.com/security/cve/CVE-2023-0401',
-                'https://bugzilla.redhat.com/2164440',
-                'https://bugzilla.redhat.com/2164487',
-                'https://bugzilla.redhat.com/2164488',
-                'https://bugzilla.redhat.com/2164492',
-                'https://bugzilla.redhat.com/2164494',
-                'https://bugzilla.redhat.com/2164497',
-                'https://bugzilla.redhat.com/2164499',
-                'https://bugzilla.redhat.com/2164500',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144000',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144003',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144006',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144008',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144010',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144012',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144015',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144017',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144019',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2145170',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2158412',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164440',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164487',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164488',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164492',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164497',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164499',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164500',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4203',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4304',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4450',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0215',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0216',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0217',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0286',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0401',
-                'https://errata.almalinux.org/9/ALSA-2023-0946.html',
-                'https://errata.rockylinux.org/RLSA-2023:0946',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=d3b6dfd70db844c4499bec6ad6601623a565e674',
-                'https://github.com/alexcrichton/openssl-src-rs',
-                'https://linux.oracle.com/cve/CVE-2023-0401.html',
-                'https://linux.oracle.com/errata/ELSA-2023-12152.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-0401',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0003',
-                'https://rustsec.org/advisories/RUSTSEC-2023-0013.html',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://ubuntu.com/security/notices/USN-5844-1',
-                'https://ubuntu.com/security/notices/USN-6564-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-0401',
-                'https://www.openssl.org/news/secadv/20230207.txt'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: NULL dereference during PKCS7 data verification'
-            },
-            {
-              'cve':  'CVE-2023-0464',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-295'
-              ],
-              'description':   "A security vulnerability has been identified in all supported versions\n\nof OpenSSL related to the verification of X.509 certificate chains\nthat include policy constraints.  Attackers may be able to exploit this\nvulnerability by creating a malicious certificate chain that triggers\nexponential use of computational resources, leading to a denial-of-service\n(DoS) attack on affected systems.\n\nPolicy processing is disabled by default but can be enabled by passing\nthe `-policy' argument to the command line utilities or by calling the\n`X509_VERIFY_PARAM_set1_policies()' function.",
-              'diffID':        'sha256:8adafc86079f2f586db2e9c632b5977e96ebfce0fdb93f7c52bc7c83078bad29',
-              'fixedVersions': [
-                '3.0.8-r1'
-              ],
-              'installedVersion': '3.0.7-r2',
-              'packageName':      'libssl3',
-              'purl':             'pkg:apk/alpine/libssl3@3.0.7-r2?arch=x86_64&distro=3.17.0',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2023:3722',
-                'https://access.redhat.com/security/cve/CVE-2023-0464',
-                'https://bugzilla.redhat.com/2181082',
-                'https://bugzilla.redhat.com/2182561',
-                'https://bugzilla.redhat.com/2182565',
-                'https://bugzilla.redhat.com/2188461',
-                'https://bugzilla.redhat.com/2207947',
-                'https://errata.almalinux.org/9/ALSA-2023-3722.html',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=2017771e2db3e2b96f89bbe8766c3209f6a99545',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=2dcd4f1e3115f38cefa43e3efbe9b801c27e642e',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=879f7080d7e141f415c79eaa3a8ac4a3dad0348b',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=959c59c7a0164117e7f8366466a32bb1f8d77ff1',
-                'https://linux.oracle.com/cve/CVE-2023-0464.html',
-                'https://linux.oracle.com/errata/ELSA-2023-3722.html',
-                'https://lists.debian.org/debian-lts-announce/2023/06/msg00011.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-0464',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://security.netapp.com/advisory/ntap-20230406-0006/',
-                'https://security.netapp.com/advisory/ntap-20240621-0006/',
-                'https://ubuntu.com/security/notices/USN-6039-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.couchbase.com/alerts/',
-                'https://www.cve.org/CVERecord?id=CVE-2023-0464',
-                'https://www.debian.org/security/2023/dsa-5417',
-                'https://www.openssl.org/news/secadv/20230322.txt'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: Denial of service by excessive resource usage in verifying X509 policy constraints'
-            },
-            {
-              'cve':  'CVE-2023-5363',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N'
-                },
-                'redhat': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-684'
-              ],
-              'description':   "Issue summary: A bug has been identified in the processing of key and\ninitialisation vector (IV) lengths.  This can lead to potential truncation\nor overruns during the initialisation of some symmetric ciphers.\n\nImpact summary: A truncation in the IV can result in non-uniqueness,\nwhich could result in loss of confidentiality for some cipher modes.\n\nWhen calling EVP_EncryptInit_ex2(), EVP_DecryptInit_ex2() or\nEVP_CipherInit_ex2() the provided OSSL_PARAM array is processed after\nthe key and IV have been established.  Any alterations to the key length,\nvia the \"keylen\" parameter or the IV length, via the \"ivlen\" parameter,\nwithin the OSSL_PARAM array will not take effect as intended, potentially\ncausing truncation or overreading of these values.  The following ciphers\nand cipher modes are impacted: RC2, RC4, RC5, CCM, GCM and OCB.\n\nFor the CCM, GCM and OCB cipher modes, truncation of the IV can result in\nloss of confidentiality.  For example, when following NIST's SP 800-38D\nsection 8.2.1 guidance for constructing a deterministic IV for AES in\nGCM mode, truncation of the counter portion could lead to IV reuse.\n\nBoth truncations and overruns of the key and overruns of the IV will\nproduce incorrect results and could, in some cases, trigger a memory\nexception.  However, these issues are not currently assessed as security\ncritical.\n\nChanging the key and/or IV lengths is not considered to be a common operation\nand the vulnerable API was recently introduced. Furthermore it is likely that\napplication developers will have spotted this problem during testing since\ndecryption would fail unless both peers in the communication were similarly\nvulnerable. For these reasons we expect the probability of an application being\nvulnerable to this to be quite low. However if an application is vulnerable then\nthis issue is considered very serious. For these reasons we have assessed this\nissue as Moderate severity overall.\n\nThe OpenSSL SSL/TLS implementation is not affected by this issue.\n\nThe OpenSSL 3.0 and 3.1 FIPS providers are not affected by this because\nthe issue lies outside of the FIPS provider boundary.\n\nOpenSSL 3.1 and 3.0 are vulnerable to this issue.",
-              'diffID':        'sha256:8adafc86079f2f586db2e9c632b5977e96ebfce0fdb93f7c52bc7c83078bad29',
-              'fixedVersions': [
-                '3.0.12-r0'
-              ],
-              'installedVersion': '3.0.7-r2',
-              'packageName':      'libssl3',
-              'purl':             'pkg:apk/alpine/libssl3@3.0.7-r2?arch=x86_64&distro=3.17.0',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2023/10/24/1',
-                'https://access.redhat.com/errata/RHSA-2024:0310',
-                'https://access.redhat.com/security/cve/CVE-2023-5363',
-                'https://bugzilla.redhat.com/2243839',
-                'https://errata.almalinux.org/9/ALSA-2024-0310.html',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=0df40630850fb2740e6be6890bb905d3fc623b2d',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=5f69f5c65e483928c4b28ed16af6e5742929f1ee',
-                'https://linux.oracle.com/cve/CVE-2023-5363.html',
-                'https://linux.oracle.com/errata/ELSA-2024-12093.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-5363',
-                'https://security.netapp.com/advisory/ntap-20231027-0010/',
-                'https://security.netapp.com/advisory/ntap-20240201-0003/',
-                'https://security.netapp.com/advisory/ntap-20240201-0004/',
-                'https://security.netapp.com/advisory/ntap-20241108-0002/',
-                'https://ubuntu.com/security/notices/USN-6450-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-5363',
-                'https://www.debian.org/security/2023/dsa-5532',
-                'https://www.openssl.org/news/secadv/20231024.txt'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: Incorrect cipher key and IV length processing'
-            },
-            {
-              'cve':  'CVE-2024-6119',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-843'
-              ],
-              'description':   "Issue summary: Applications performing certificate name checks (e.g., TLS\nclients checking server certificates) may attempt to read an invalid memory\naddress resulting in abnormal termination of the application process.\n\nImpact summary: Abnormal termination of an application can a cause a denial of\nservice.\n\nApplications performing certificate name checks (e.g., TLS clients checking\nserver certificates) may attempt to read an invalid memory address when\ncomparing the expected name with an `otherName` subject alternative name of an\nX.509 certificate. This may result in an exception that terminates the\napplication program.\n\nNote that basic certificate chain validation (signatures, dates, ...) is not\naffected, the denial of service can occur only when the application also\nspecifies an expected DNS name, Email address or IP address.\n\nTLS servers rarely solicit client certificates, and even when they do, they\ngenerally don't perform a name check against a reference identifier (expected\nidentity), but rather extract the presented identity after checking the\ncertificate chain.  So TLS servers are generally not affected and the severity\nof the issue is Moderate.\n\nThe FIPS modules in 3.3, 3.2, 3.1 and 3.0 are not affected by this issue.",
-              'diffID':        'sha256:8adafc86079f2f586db2e9c632b5977e96ebfce0fdb93f7c52bc7c83078bad29',
-              'fixedVersions': [
-                '3.0.15-r0'
-              ],
-              'installedVersion': '3.0.7-r2',
-              'packageName':      'libssl3',
-              'purl':             'pkg:apk/alpine/libssl3@3.0.7-r2?arch=x86_64&distro=3.17.0',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2024/09/03/4',
-                'https://access.redhat.com/errata/RHSA-2024:8935',
-                'https://access.redhat.com/security/cve/CVE-2024-6119',
-                'https://bugzilla.redhat.com/2306158',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2306158',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-6119',
-                'https://errata.almalinux.org/9/ALSA-2024-8935.html',
-                'https://errata.rockylinux.org/RLSA-2024:6783',
-                'https://github.com/openssl/openssl/commit/05f360d9e849a1b277db628f1f13083a7f8dd04f',
-                'https://github.com/openssl/openssl/commit/06d1dc3fa96a2ba5a3e22735a033012aadc9f0d6',
-                'https://github.com/openssl/openssl/commit/621f3729831b05ee828a3203eddb621d014ff2b2',
-                'https://github.com/openssl/openssl/commit/7dfcee2cd2a63b2c64b9b4b0850be64cb695b0a0',
-                'https://github.com/openssl/openssl/security/advisories/GHSA-5qrj-vq78-58fj',
-                'https://linux.oracle.com/cve/CVE-2024-6119.html',
-                'https://linux.oracle.com/errata/ELSA-2024-8935.html',
-                'https://lists.freebsd.org/archives/freebsd-security/2024-September/000303.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2024-6119',
-                'https://openssl-library.org/news/secadv/20240903.txt',
-                'https://security.netapp.com/advisory/ntap-20240912-0001/',
-                'https://ubuntu.com/security/notices/USN-6986-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2024-6119'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: Possible denial of service in X.509 name checks'
-            },
-            {
-              'cve':  'CVE-2022-4203',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '9.1',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H'
-                },
-                'nvd': {
-                  'v3score':  '4.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '4.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-125'
-              ],
-              'description':   'A read buffer overrun can be triggered in X.509 certificate verification,\nspecifically in name constraint checking. Note that this occurs\nafter certificate chain signature verification and requires either a\nCA to have signed the malicious certificate or for the application to\ncontinue certificate verification despite failure to construct a path\nto a trusted issuer.\n\nThe read buffer overrun might result in a crash which could lead to\na denial of service attack. In theory it could also result in the disclosure\nof private memory contents (such as private keys, or sensitive plaintext)\nalthough we are not aware of any working exploit leading to memory\ncontents disclosure as of the time of release of this advisory.\n\nIn a TLS client, this can be triggered by connecting to a malicious\nserver. In a TLS server, this can be triggered if the server requests\nclient authentication and a malicious client connects.',
-              'diffID':        'sha256:8adafc86079f2f586db2e9c632b5977e96ebfce0fdb93f7c52bc7c83078bad29',
-              'fixedVersions': [
-                '3.0.8-r0'
-              ],
-              'installedVersion': '3.0.7-r2',
-              'packageName':      'libssl3',
-              'purl':             'pkg:apk/alpine/libssl3@3.0.7-r2?arch=x86_64&distro=3.17.0',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2023:0946',
-                'https://access.redhat.com/security/cve/CVE-2022-4203',
-                'https://bugzilla.redhat.com/2164440',
-                'https://bugzilla.redhat.com/2164487',
-                'https://bugzilla.redhat.com/2164488',
-                'https://bugzilla.redhat.com/2164492',
-                'https://bugzilla.redhat.com/2164494',
-                'https://bugzilla.redhat.com/2164497',
-                'https://bugzilla.redhat.com/2164499',
-                'https://bugzilla.redhat.com/2164500',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144000',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144003',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144006',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144008',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144010',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144012',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144015',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144017',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144019',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2145170',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2158412',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164440',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164487',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164488',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164492',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164497',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164499',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164500',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4203',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4304',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4450',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0215',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0216',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0217',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0286',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0401',
-                'https://errata.almalinux.org/9/ALSA-2023-0946.html',
-                'https://errata.rockylinux.org/RLSA-2023:0946',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=c927a3492698c254637da836762f9b1f86cffabc',
-                'https://linux.oracle.com/cve/CVE-2022-4203.html',
-                'https://linux.oracle.com/errata/ELSA-2023-12152.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2022-4203',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0003',
-                'https://rustsec.org/advisories/RUSTSEC-2023-0008.html',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://ubuntu.com/security/notices/USN-5844-1',
-                'https://www.cve.org/CVERecord?id=CVE-2022-4203',
-                'https://www.openssl.org/news/secadv/20230207.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: read buffer overflow in X.509 certificate verification'
-            },
-            {
-              'cve':  'CVE-2022-4304',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N'
-                },
-                'nvd': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N'
-                },
-                'redhat': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-203'
-              ],
-              'description':   'A timing based side channel exists in the OpenSSL RSA Decryption implementation\nwhich could be sufficient to recover a plaintext across a network in a\nBleichenbacher style attack. To achieve a successful decryption an attacker\nwould have to be able to send a very large number of trial messages for\ndecryption. The vulnerability affects all RSA padding modes: PKCS#1 v1.5,\nRSA-OEAP and RSASVE.\n\nFor example, in a TLS connection, RSA is commonly used by a client to send an\nencrypted pre-master secret to the server. An attacker that had observed a\ngenuine connection between a client and a server could use this flaw to send\ntrial messages to the server and record the time taken to process them. After a\nsufficiently large number of messages the attacker could recover the pre-master\nsecret used for the original connection and thus be able to decrypt the\napplication data sent over that connection.',
-              'diffID':        'sha256:8adafc86079f2f586db2e9c632b5977e96ebfce0fdb93f7c52bc7c83078bad29',
-              'fixedVersions': [
-                '3.0.8-r0'
-              ],
-              'installedVersion': '3.0.7-r2',
-              'packageName':      'libssl3',
-              'purl':             'pkg:apk/alpine/libssl3@3.0.7-r2?arch=x86_64&distro=3.17.0',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2023:2165',
-                'https://access.redhat.com/security/cve/CVE-2022-4304',
-                'https://bugzilla.redhat.com/1960321',
-                'https://bugzilla.redhat.com/2164440',
-                'https://bugzilla.redhat.com/2164487',
-                'https://bugzilla.redhat.com/2164492',
-                'https://bugzilla.redhat.com/2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144000',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144003',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144006',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144008',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144010',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144012',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144015',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144017',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144019',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2145170',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2158412',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164440',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164487',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164488',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164492',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164497',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164499',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164500',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4203',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4304',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4450',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0215',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0216',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0217',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0286',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0401',
-                'https://errata.almalinux.org/9/ALSA-2023-2165.html',
-                'https://errata.rockylinux.org/RLSA-2023:0946',
-                'https://linux.oracle.com/cve/CVE-2022-4304.html',
-                'https://linux.oracle.com/errata/ELSA-2023-32791.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2022-4304',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0003',
-                'https://rustsec.org/advisories/RUSTSEC-2023-0007.html',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://ubuntu.com/security/notices/USN-5844-1',
-                'https://ubuntu.com/security/notices/USN-6564-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2022-4304',
-                'https://www.openssl.org/news/secadv/20230207.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: timing attack in RSA Decryption implementation'
-            },
-            {
-              'cve':  'CVE-2023-0465',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N'
-                },
-                'redhat': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-295'
-              ],
-              'description':   "Applications that use a non-default option when verifying certificates may be\nvulnerable to an attack from a malicious CA to circumvent certain checks.\n\nInvalid certificate policies in leaf certificates are silently ignored by\nOpenSSL and other certificate policy checks are skipped for that certificate.\nA malicious CA could use this to deliberately assert invalid certificate policies\nin order to circumvent policy checking on the certificate altogether.\n\nPolicy processing is disabled by default but can be enabled by passing\nthe `-policy' argument to the command line utilities or by calling the\n`X509_VERIFY_PARAM_set1_policies()' function.",
-              'diffID':        'sha256:8adafc86079f2f586db2e9c632b5977e96ebfce0fdb93f7c52bc7c83078bad29',
-              'fixedVersions': [
-                '3.0.8-r2'
-              ],
-              'installedVersion': '3.0.7-r2',
-              'packageName':      'libssl3',
-              'purl':             'pkg:apk/alpine/libssl3@3.0.7-r2?arch=x86_64&distro=3.17.0',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2023:3722',
-                'https://access.redhat.com/security/cve/CVE-2023-0465',
-                'https://bugzilla.redhat.com/2181082',
-                'https://bugzilla.redhat.com/2182561',
-                'https://bugzilla.redhat.com/2182565',
-                'https://bugzilla.redhat.com/2188461',
-                'https://bugzilla.redhat.com/2207947',
-                'https://errata.almalinux.org/9/ALSA-2023-3722.html',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=10325176f3d3e98c6e2b3bf5ab1e3b334de6947a',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=1dd43e0709fece299b15208f36cc7c76209ba0bb',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=b013765abfa80036dc779dd0e50602c57bb3bf95',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=facfb1ab745646e97a1920977ae4a9965ea61d5c',
-                'https://linux.oracle.com/cve/CVE-2023-0465.html',
-                'https://linux.oracle.com/errata/ELSA-2023-3722.html',
-                'https://lists.debian.org/debian-lts-announce/2023/06/msg00011.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-0465',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://security.netapp.com/advisory/ntap-20230414-0001/',
-                'https://ubuntu.com/security/notices/USN-6039-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-0465',
-                'https://www.debian.org/security/2023/dsa-5417',
-                'https://www.openssl.org/news/secadv/20230328.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: Invalid certificate policies in leaf certificates are silently ignored'
-            },
-            {
-              'cve':  'CVE-2023-0466',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N'
-                },
-                'redhat': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-295'
-              ],
-              'description':   'The function X509_VERIFY_PARAM_add0_policy() is documented to\nimplicitly enable the certificate policy check when doing certificate\nverification. However the implementation of the function does not\nenable the check which allows certificates with invalid or incorrect\npolicies to pass the certificate verification.\n\nAs suddenly enabling the policy check could break existing deployments it was\ndecided to keep the existing behavior of the X509_VERIFY_PARAM_add0_policy()\nfunction.\n\nInstead the applications that require OpenSSL to perform certificate\npolicy check need to use X509_VERIFY_PARAM_set1_policies() or explicitly\nenable the policy check by calling X509_VERIFY_PARAM_set_flags() with\nthe X509_V_FLAG_POLICY_CHECK flag argument.\n\nCertificate policy checks are disabled by default in OpenSSL and are not\ncommonly used by applications.',
-              'diffID':        'sha256:8adafc86079f2f586db2e9c632b5977e96ebfce0fdb93f7c52bc7c83078bad29',
-              'fixedVersions': [
-                '3.0.8-r3'
-              ],
-              'installedVersion': '3.0.7-r2',
-              'packageName':      'libssl3',
-              'purl':             'pkg:apk/alpine/libssl3@3.0.7-r2?arch=x86_64&distro=3.17.0',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2023/09/28/4',
-                'https://access.redhat.com/errata/RHSA-2023:3722',
-                'https://access.redhat.com/security/cve/CVE-2023-0466',
-                'https://bugzilla.redhat.com/2181082',
-                'https://bugzilla.redhat.com/2182561',
-                'https://bugzilla.redhat.com/2182565',
-                'https://bugzilla.redhat.com/2188461',
-                'https://bugzilla.redhat.com/2207947',
-                'https://errata.almalinux.org/9/ALSA-2023-3722.html',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=0d16b7e99aafc0b4a6d729eec65a411a7e025f0a',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=51e8a84ce742db0f6c70510d0159dad8f7825908',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=73398dea26de9899fb4baa94098ad0a61f435c72',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=fc814a30fc4f0bc54fcea7d9a7462f5457aab061',
-                'https://linux.oracle.com/cve/CVE-2023-0466.html',
-                'https://linux.oracle.com/errata/ELSA-2023-3722.html',
-                'https://lists.debian.org/debian-lts-announce/2023/06/msg00011.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-0466',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://security.netapp.com/advisory/ntap-20230414-0001/',
-                'https://ubuntu.com/security/notices/USN-6039-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-0466',
-                'https://www.debian.org/security/2023/dsa-5417',
-                'https://www.openssl.org/news/secadv/20230328.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: Certificate policy check not enabled'
-            },
-            {
-              'cve':  'CVE-2023-1255',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '5.1',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-125'
-              ],
-              'description':   'Issue summary: The AES-XTS cipher decryption implementation for 64 bit ARM\nplatform contains a bug that could cause it to read past the input buffer,\nleading to a crash.\n\nImpact summary: Applications that use the AES-XTS algorithm on the 64 bit ARM\nplatform can crash in rare circumstances. The AES-XTS algorithm is usually\nused for disk encryption.\n\nThe AES-XTS cipher decryption implementation for 64 bit ARM platform will read\npast the end of the ciphertext buffer if the ciphertext size is 4 mod 5 in 16\nbyte blocks, e.g. 144 bytes or 1024 bytes. If the memory after the ciphertext\nbuffer is unmapped, this will trigger a crash which results in a denial of\nservice.\n\nIf an attacker can control the size and location of the ciphertext buffer\nbeing decrypted by an application using AES-XTS on 64 bit ARM, the\napplication is affected. This is fairly unlikely making this issue\na Low severity one.',
-              'diffID':        'sha256:8adafc86079f2f586db2e9c632b5977e96ebfce0fdb93f7c52bc7c83078bad29',
-              'fixedVersions': [
-                '3.0.8-r4'
-              ],
-              'installedVersion': '3.0.7-r2',
-              'packageName':      'libssl3',
-              'purl':             'pkg:apk/alpine/libssl3@3.0.7-r2?arch=x86_64&distro=3.17.0',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2023:3722',
-                'https://access.redhat.com/security/cve/CVE-2023-1255',
-                'https://bugzilla.redhat.com/2181082',
-                'https://bugzilla.redhat.com/2182561',
-                'https://bugzilla.redhat.com/2182565',
-                'https://bugzilla.redhat.com/2188461',
-                'https://bugzilla.redhat.com/2207947',
-                'https://errata.almalinux.org/9/ALSA-2023-3722.html',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=02ac9c9420275868472f33b01def01218742b8bb',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=bc2f61ad70971869b242fc1cb445b98bad50074a',
-                'https://linux.oracle.com/cve/CVE-2023-1255.html',
-                'https://linux.oracle.com/errata/ELSA-2023-3722.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-1255',
-                'https://security.netapp.com/advisory/ntap-20230908-0006/',
-                'https://ubuntu.com/security/notices/USN-6119-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-1255',
-                'https://www.openssl.org/news/secadv/20230419.txt',
-                'https://www.openssl.org/news/secadv/20230420.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: Input buffer over-read in AES-XTS implementation on 64 bit ARM'
-            },
-            {
-              'cve':  'CVE-2023-2650',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '6.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-770'
-              ],
-              'description':   "Issue summary: Processing some specially crafted ASN.1 object identifiers or\ndata containing them may be very slow.\n\nImpact summary: Applications that use OBJ_obj2txt() directly, or use any of\nthe OpenSSL subsystems OCSP, PKCS7/SMIME, CMS, CMP/CRMF or TS with no message\nsize limit may experience notable to very long delays when processing those\nmessages, which may lead to a Denial of Service.\n\nAn OBJECT IDENTIFIER is composed of a series of numbers - sub-identifiers -\nmost of which have no size limit.  OBJ_obj2txt() may be used to translate\nan ASN.1 OBJECT IDENTIFIER given in DER encoding form (using the OpenSSL\ntype ASN1_OBJECT) to its canonical numeric text form, which are the\nsub-identifiers of the OBJECT IDENTIFIER in decimal form, separated by\nperiods.\n\nWhen one of the sub-identifiers in the OBJECT IDENTIFIER is very large\n(these are sizes that are seen as absurdly large, taking up tens or hundreds\nof KiBs), the translation to a decimal number in text may take a very long\ntime.  The time complexity is O(n^2) with 'n' being the size of the\nsub-identifiers in bytes (*).\n\nWith OpenSSL 3.0, support to fetch cryptographic algorithms using names /\nidentifiers in string form was introduced.  This includes using OBJECT\nIDENTIFIERs in canonical numeric text form as identifiers for fetching\nalgorithms.\n\nSuch OBJECT IDENTIFIERs may be received through the ASN.1 structure\nAlgorithmIdentifier, which is commonly used in multiple protocols to specify\nwhat cryptographic algorithm should be used to sign or verify, encrypt or\ndecrypt, or digest passed data.\n\nApplications that call OBJ_obj2txt() directly with untrusted data are\naffected, with any version of OpenSSL.  If the use is for the mere purpose\nof display, the severity is considered low.\n\nIn OpenSSL 3.0 and newer, this affects the subsystems OCSP, PKCS7/SMIME,\nCMS, CMP/CRMF or TS.  It also impacts anything that processes X.509\ncertificates, including simple things like verifying its signature.\n\nThe impact on TLS is relatively low, because all versions of OpenSSL have a\n100KiB limit on the peer's certificate chain.  Additionally, this only\nimpacts clients, or servers that have explicitly enabled client\nauthentication.\n\nIn OpenSSL 1.1.1 and 1.0.2, this only affects displaying diverse objects,\nsuch as X.509 certificates.  This is assumed to not happen in such a way\nthat it would cause a Denial of Service, so these versions are considered\nnot affected by this issue in such a way that it would be cause for concern,\nand the severity is therefore considered low.",
-              'diffID':        'sha256:8adafc86079f2f586db2e9c632b5977e96ebfce0fdb93f7c52bc7c83078bad29',
-              'fixedVersions': [
-                '3.0.9-r0'
-              ],
-              'installedVersion': '3.0.7-r2',
-              'packageName':      'libssl3',
-              'purl':             'pkg:apk/alpine/libssl3@3.0.7-r2?arch=x86_64&distro=3.17.0',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2023/05/30/1',
-                'https://access.redhat.com/errata/RHSA-2023:6330',
-                'https://access.redhat.com/security/cve/CVE-2023-2650',
-                'https://bugzilla.redhat.com/1858038',
-                'https://bugzilla.redhat.com/2207947',
-                'https://errata.almalinux.org/9/ALSA-2023-6330.html',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=423a2bc737a908ad0c77bda470b2b59dc879936b',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=853c5e56ee0b8650c73140816bb8b91d6163422c',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=9e209944b35cf82368071f160a744b6178f9b098',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=db779b0e10b047f2585615e0b8f2acdf21f8544a',
-                'https://linux.oracle.com/cve/CVE-2023-2650.html',
-                'https://linux.oracle.com/errata/ELSA-2023-6330.html',
-                'https://lists.debian.org/debian-lts-announce/2023/06/msg00011.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-2650',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0009',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://security.netapp.com/advisory/ntap-20230703-0001/',
-                'https://security.netapp.com/advisory/ntap-20231027-0009/',
-                'https://ubuntu.com/security/notices/USN-6119-1',
-                'https://ubuntu.com/security/notices/USN-6188-1',
-                'https://ubuntu.com/security/notices/USN-6672-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-2650',
-                'https://www.debian.org/security/2023/dsa-5417',
-                'https://www.openssl.org/news/secadv/20230530.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: Possible DoS translating ASN.1 object identifiers'
-            },
-            {
-              'cve':  'CVE-2023-2975',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N'
-                },
-                'redhat': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-354',
-                'CWE-287'
-              ],
-              'description':   'Issue summary: The AES-SIV cipher implementation contains a bug that causes\nit to ignore empty associated data entries which are unauthenticated as\na consequence.\n\nImpact summary: Applications that use the AES-SIV algorithm and want to\nauthenticate empty data entries as associated data can be misled by removing,\nadding or reordering such empty entries as these are ignored by the OpenSSL\nimplementation. We are currently unaware of any such applications.\n\nThe AES-SIV algorithm allows for authentication of multiple associated\ndata entries along with the encryption. To authenticate empty data the\napplication has to call EVP_EncryptUpdate() (or EVP_CipherUpdate()) with\nNULL pointer as the output buffer and 0 as the input buffer length.\nThe AES-SIV implementation in OpenSSL just returns success for such a call\ninstead of performing the associated data authentication operation.\nThe empty data thus will not be authenticated.\n\nAs this issue does not affect non-empty associated data authentication and\nwe expect it to be rare for an application to use empty associated data\nentries this is qualified as Low severity issue.',
-              'diffID':        'sha256:8adafc86079f2f586db2e9c632b5977e96ebfce0fdb93f7c52bc7c83078bad29',
-              'fixedVersions': [
-                '3.0.9-r2'
-              ],
-              'installedVersion': '3.0.7-r2',
-              'packageName':      'libssl3',
-              'purl':             'pkg:apk/alpine/libssl3@3.0.7-r2?arch=x86_64&distro=3.17.0',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2023/07/15/1',
-                'http://www.openwall.com/lists/oss-security/2023/07/19/5',
-                'https://access.redhat.com/errata/RHSA-2024:2447',
-                'https://access.redhat.com/security/cve/CVE-2023-2975',
-                'https://bugzilla.redhat.com/2223016',
-                'https://bugzilla.redhat.com/2224962',
-                'https://bugzilla.redhat.com/2227852',
-                'https://bugzilla.redhat.com/2248616',
-                'https://bugzilla.redhat.com/2257571',
-                'https://bugzilla.redhat.com/2258502',
-                'https://bugzilla.redhat.com/2259944',
-                'https://errata.almalinux.org/9/ALSA-2024-2447.html',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=00e2f5eea29994d19293ec4e8c8775ba73678598',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=6a83f0c958811f07e0d11dfc6b5a6a98edfd5bdc',
-                'https://linux.oracle.com/cve/CVE-2023-2975.html',
-                'https://linux.oracle.com/errata/ELSA-2024-2447.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-2975',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://security.netapp.com/advisory/ntap-20230725-0004/',
-                'https://ubuntu.com/security/notices/USN-6450-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-2975',
-                'https://www.openssl.org/news/secadv/20230714.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: AES-SIV cipher implementation contains a bug that causes it to ignore empty associated data entries'
-            },
-            {
-              'cve':  'CVE-2023-3446',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L'
-                },
-                'redhat': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L'
-                }
-              },
-              'cwes': [
-                'CWE-606',
-                'CWE-1333'
-              ],
-              'description':   "Issue summary: Checking excessively long DH keys or parameters may be very slow.\n\nImpact summary: Applications that use the functions DH_check(), DH_check_ex()\nor EVP_PKEY_param_check() to check a DH key or DH parameters may experience long\ndelays. Where the key or parameters that are being checked have been obtained\nfrom an untrusted source this may lead to a Denial of Service.\n\nThe function DH_check() performs various checks on DH parameters. One of those\nchecks confirms that the modulus ('p' parameter) is not too large. Trying to use\na very large modulus is slow and OpenSSL will not normally use a modulus which\nis over 10,000 bits in length.\n\nHowever the DH_check() function checks numerous aspects of the key or parameters\nthat have been supplied. Some of those checks use the supplied modulus value\neven if it has already been found to be too large.\n\nAn application that calls DH_check() and supplies a key or parameters obtained\nfrom an untrusted source could be vulernable to a Denial of Service attack.\n\nThe function DH_check() is itself called by a number of other OpenSSL functions.\nAn application calling any of those other functions may similarly be affected.\nThe other functions affected by this are DH_check_ex() and\nEVP_PKEY_param_check().\n\nAlso vulnerable are the OpenSSL dhparam and pkeyparam command line applications\nwhen using the '-check' option.\n\nThe OpenSSL SSL/TLS implementation is not affected by this issue.\nThe OpenSSL 3.0 and 3.1 FIPS providers are not affected by this issue.",
-              'diffID':        'sha256:8adafc86079f2f586db2e9c632b5977e96ebfce0fdb93f7c52bc7c83078bad29',
-              'fixedVersions': [
-                '3.0.9-r3'
-              ],
-              'installedVersion': '3.0.7-r2',
-              'packageName':      'libssl3',
-              'purl':             'pkg:apk/alpine/libssl3@3.0.7-r2?arch=x86_64&distro=3.17.0',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2023/07/19/4',
-                'http://www.openwall.com/lists/oss-security/2023/07/19/5',
-                'http://www.openwall.com/lists/oss-security/2023/07/19/6',
-                'http://www.openwall.com/lists/oss-security/2023/07/31/1',
-                'http://www.openwall.com/lists/oss-security/2024/05/16/1',
-                'https://access.redhat.com/errata/RHSA-2024:2447',
-                'https://access.redhat.com/security/cve/CVE-2023-3446',
-                'https://bugzilla.redhat.com/2223016',
-                'https://bugzilla.redhat.com/2224962',
-                'https://bugzilla.redhat.com/2227852',
-                'https://bugzilla.redhat.com/2248616',
-                'https://bugzilla.redhat.com/2257571',
-                'https://bugzilla.redhat.com/2258502',
-                'https://bugzilla.redhat.com/2259944',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2224962',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2257582',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2257583',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2258677',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2258688',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2258691',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2258694',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2258700',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-36763',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-36764',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3446',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45229',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45231',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45232',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45233',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45235',
-                'https://errata.almalinux.org/9/ALSA-2024-2447.html',
-                'https://errata.rockylinux.org/RLSA-2024:2264',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=1fa20cf2f506113c761777127a38bce5068740eb',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=8780a896543a654e757db1b9396383f9d8095528',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=9a0a4d3c1e7138915563c0df4fe6a3f9377b839c',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=fc9867c1e03c22ebf56943be205202e576aabf23',
-                'https://linux.oracle.com/cve/CVE-2023-3446.html',
-                'https://linux.oracle.com/errata/ELSA-2024-2447.html',
-                'https://lists.debian.org/debian-lts-announce/2023/08/msg00019.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-3446',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://security.netapp.com/advisory/ntap-20230803-0011/',
-                'https://ubuntu.com/security/notices/USN-6435-1',
-                'https://ubuntu.com/security/notices/USN-6435-2',
-                'https://ubuntu.com/security/notices/USN-6450-1',
-                'https://ubuntu.com/security/notices/USN-6709-1',
-                'https://ubuntu.com/security/notices/USN-7018-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-3446',
-                'https://www.openssl.org/news/secadv/20230719.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: Excessive time spent checking DH keys and parameters'
-            },
-            {
-              'cve':  'CVE-2023-3817',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L'
-                },
-                'redhat': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L'
-                }
-              },
-              'cwes': [
-                'CWE-606',
-                'CWE-834'
-              ],
-              'description':   'Issue summary: Checking excessively long DH keys or parameters may be very slow.\n\nImpact summary: Applications that use the functions DH_check(), DH_check_ex()\nor EVP_PKEY_param_check() to check a DH key or DH parameters may experience long\ndelays. Where the key or parameters that are being checked have been obtained\nfrom an untrusted source this may lead to a Denial of Service.\n\nThe function DH_check() performs various checks on DH parameters. After fixing\nCVE-2023-3446 it was discovered that a large q parameter value can also trigger\nan overly long computation during some of these checks. A correct q value,\nif present, cannot be larger than the modulus p parameter, thus it is\nunnecessary to perform these checks if q is larger than p.\n\nAn application that calls DH_check() and supplies a key or parameters obtained\nfrom an untrusted source could be vulnerable to a Denial of Service attack.\n\nThe function DH_check() is itself called by a number of other OpenSSL functions.\nAn application calling any of those other functions may similarly be affected.\nThe other functions affected by this are DH_check_ex() and\nEVP_PKEY_param_check().\n\nAlso vulnerable are the OpenSSL dhparam and pkeyparam command line applications\nwhen using the "-check" option.\n\nThe OpenSSL SSL/TLS implementation is not affected by this issue.\n\nThe OpenSSL 3.0 and 3.1 FIPS providers are not affected by this issue.',
-              'diffID':        'sha256:8adafc86079f2f586db2e9c632b5977e96ebfce0fdb93f7c52bc7c83078bad29',
-              'fixedVersions': [
-                '3.0.10-r0'
-              ],
-              'installedVersion': '3.0.7-r2',
-              'packageName':      'libssl3',
-              'purl':             'pkg:apk/alpine/libssl3@3.0.7-r2?arch=x86_64&distro=3.17.0',
-              'references':       [
-                'http://seclists.org/fulldisclosure/2023/Jul/43',
-                'http://www.openwall.com/lists/oss-security/2023/07/31/1',
-                'http://www.openwall.com/lists/oss-security/2023/09/22/11',
-                'http://www.openwall.com/lists/oss-security/2023/09/22/9',
-                'http://www.openwall.com/lists/oss-security/2023/11/06/2',
-                'https://access.redhat.com/errata/RHSA-2024:2447',
-                'https://access.redhat.com/security/cve/CVE-2023-3817',
-                'https://bugzilla.redhat.com/2223016',
-                'https://bugzilla.redhat.com/2224962',
-                'https://bugzilla.redhat.com/2227852',
-                'https://bugzilla.redhat.com/2248616',
-                'https://bugzilla.redhat.com/2257571',
-                'https://bugzilla.redhat.com/2258502',
-                'https://bugzilla.redhat.com/2259944',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2224962',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2227852',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2248616',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2270358',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3446',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3817',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-5678',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-2408',
-                'https://errata.almalinux.org/9/ALSA-2024-2447.html',
-                'https://errata.rockylinux.org/RLSA-2023:7877',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=6a1eb62c29db6cb5eec707f9338aee00f44e26f5',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=869ad69aadd985c7b8ca6f4e5dd0eb274c9f3644',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=9002fd07327a91f35ba6c1307e71fa6fd4409b7f',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=91ddeba0f2269b017dc06c46c993a788974b1aa5',
-                'https://linux.oracle.com/cve/CVE-2023-3817.html',
-                'https://linux.oracle.com/errata/ELSA-2024-2447.html',
-                'https://lists.debian.org/debian-lts-announce/2023/08/msg00019.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-3817',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://security.netapp.com/advisory/ntap-20230818-0014/',
-                'https://security.netapp.com/advisory/ntap-20231027-0008/',
-                'https://security.netapp.com/advisory/ntap-20240621-0006/',
-                'https://ubuntu.com/security/notices/USN-6435-1',
-                'https://ubuntu.com/security/notices/USN-6435-2',
-                'https://ubuntu.com/security/notices/USN-6450-1',
-                'https://ubuntu.com/security/notices/USN-6709-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-3817',
-                'https://www.openssl.org/news/secadv/20230731.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'OpenSSL: Excessive time spent checking DH q parameter value'
-            },
-            {
-              'cve':  'CVE-2023-5678',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L'
-                },
-                'redhat': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L'
-                }
-              },
-              'cwes': [
-                'CWE-606',
-                'CWE-754'
-              ],
-              'description':   "Issue summary: Generating excessively long X9.42 DH keys or checking\nexcessively long X9.42 DH keys or parameters may be very slow.\n\nImpact summary: Applications that use the functions DH_generate_key() to\ngenerate an X9.42 DH key may experience long delays.  Likewise, applications\nthat use DH_check_pub_key(), DH_check_pub_key_ex() or EVP_PKEY_public_check()\nto check an X9.42 DH key or X9.42 DH parameters may experience long delays.\nWhere the key or parameters that are being checked have been obtained from\nan untrusted source this may lead to a Denial of Service.\n\nWhile DH_check() performs all the necessary checks (as of CVE-2023-3817),\nDH_check_pub_key() doesn't make any of these checks, and is therefore\nvulnerable for excessively large P and Q parameters.\n\nLikewise, while DH_generate_key() performs a check for an excessively large\nP, it doesn't check for an excessively large Q.\n\nAn application that calls DH_generate_key() or DH_check_pub_key() and\nsupplies a key or parameters obtained from an untrusted source could be\nvulnerable to a Denial of Service attack.\n\nDH_generate_key() and DH_check_pub_key() are also called by a number of\nother OpenSSL functions.  An application calling any of those other\nfunctions may similarly be affected.  The other functions affected by this\nare DH_check_pub_key_ex(), EVP_PKEY_public_check(), and EVP_PKEY_generate().\n\nAlso vulnerable are the OpenSSL pkey command line application when using the\n\"-pubcheck\" option, as well as the OpenSSL genpkey command line application.\n\nThe OpenSSL SSL/TLS implementation is not affected by this issue.\n\nThe OpenSSL 3.0 and 3.1 FIPS providers are not affected by this issue.",
-              'diffID':        'sha256:8adafc86079f2f586db2e9c632b5977e96ebfce0fdb93f7c52bc7c83078bad29',
-              'fixedVersions': [
-                '3.0.12-r1'
-              ],
-              'installedVersion': '3.0.7-r2',
-              'packageName':      'libssl3',
-              'purl':             'pkg:apk/alpine/libssl3@3.0.7-r2?arch=x86_64&distro=3.17.0',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2024/03/11/1',
-                'https://access.redhat.com/errata/RHSA-2024:2447',
-                'https://access.redhat.com/security/cve/CVE-2023-5678',
-                'https://bugzilla.redhat.com/2223016',
-                'https://bugzilla.redhat.com/2224962',
-                'https://bugzilla.redhat.com/2227852',
-                'https://bugzilla.redhat.com/2248616',
-                'https://bugzilla.redhat.com/2257571',
-                'https://bugzilla.redhat.com/2258502',
-                'https://bugzilla.redhat.com/2259944',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2224962',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2227852',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2248616',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2270358',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3446',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3817',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-5678',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-2408',
-                'https://errata.almalinux.org/9/ALSA-2024-2447.html',
-                'https://errata.rockylinux.org/RLSA-2023:7877',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=34efaef6c103d636ab507a0cc34dca4d3aecc055',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=710fee740904b6290fef0dd5536fbcedbc38ff0c',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=db925ae2e65d0d925adef429afc37f75bd1c2017',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=ddeb4b6c6d527e54ce9a99cba785c0f7776e54b6',
-                'https://linux.oracle.com/cve/CVE-2023-5678.html',
-                'https://linux.oracle.com/errata/ELSA-2024-2447.html',
-                'https://lists.debian.org/debian-lts-announce/2024/10/msg00033.html',
-                'https://lists.debian.org/debian-lts-announce/2024/11/msg00000.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-5678',
-                'https://security.netapp.com/advisory/ntap-20231130-0010/',
-                'https://ubuntu.com/security/notices/USN-6622-1',
-                'https://ubuntu.com/security/notices/USN-6632-1',
-                'https://ubuntu.com/security/notices/USN-6709-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-5678',
-                'https://www.openssl.org/news/secadv/20231106.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: Generating excessively long X9.42 DH keys or checking excessively long X9.42 DH keys or parameters may be very slow'
-            },
-            {
-              'cve':  'CVE-2023-6129',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '6.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-440',
-                'CWE-787'
-              ],
-              'description':   'Issue summary: The POLY1305 MAC (message authentication code) implementation\ncontains a bug that might corrupt the internal state of applications running\non PowerPC CPU based platforms if the CPU provides vector instructions.\n\nImpact summary: If an attacker can influence whether the POLY1305 MAC\nalgorithm is used, the application state might be corrupted with various\napplication dependent consequences.\n\nThe POLY1305 MAC (message authentication code) implementation in OpenSSL for\nPowerPC CPUs restores the contents of vector registers in a different order\nthan they are saved. Thus the contents of some of these vector registers\nare corrupted when returning to the caller. The vulnerable code is used only\non newer PowerPC processors supporting the PowerISA 2.07 instructions.\n\nThe consequences of this kind of internal application state corruption can\nbe various - from no consequences, if the calling application does not\ndepend on the contents of non-volatile XMM registers at all, to the worst\nconsequences, where the attacker could get complete control of the application\nprocess. However unless the compiler uses the vector registers for storing\npointers, the most likely consequence, if any, would be an incorrect result\nof some application dependent calculations or a crash leading to a denial of\nservice.\n\nThe POLY1305 MAC algorithm is most frequently used as part of the\nCHACHA20-POLY1305 AEAD (authenticated encryption with associated data)\nalgorithm. The most common usage of this AEAD cipher is with TLS protocol\nversions 1.2 and 1.3. If this cipher is enabled on the server a malicious\nclient can influence whether this AEAD cipher is used. This implies that\nTLS server applications using OpenSSL can be potentially impacted. However\nwe are currently not aware of any concrete application that would be affected\nby this issue therefore we consider this a Low severity security issue.',
-              'diffID':        'sha256:8adafc86079f2f586db2e9c632b5977e96ebfce0fdb93f7c52bc7c83078bad29',
-              'fixedVersions': [
-                '3.0.12-r2'
-              ],
-              'installedVersion': '3.0.7-r2',
-              'packageName':      'libssl3',
-              'purl':             'pkg:apk/alpine/libssl3@3.0.7-r2?arch=x86_64&distro=3.17.0',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2024/03/11/1',
-                'https://access.redhat.com/errata/RHSA-2024:9088',
-                'https://access.redhat.com/security/cve/CVE-2023-6129',
-                'https://bugzilla.redhat.com/2257571',
-                'https://bugzilla.redhat.com/2258502',
-                'https://bugzilla.redhat.com/2259944',
-                'https://bugzilla.redhat.com/2284243',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2257571',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2258502',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2259944',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2284243',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-6129',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-6237',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-0727',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-1298',
-                'https://errata.almalinux.org/9/ALSA-2024-9088.html',
-                'https://errata.rockylinux.org/RLSA-2024:9088',
-                'https://github.com/openssl/openssl/commit/050d26383d4e264966fb83428e72d5d48f402d35',
-                'https://github.com/openssl/openssl/commit/5b139f95c9a47a55a0c54100f3837b1eee942b04',
-                'https://github.com/openssl/openssl/commit/f3fc5808fe9ff74042d639839610d03b8fdcc015',
-                'https://linux.oracle.com/cve/CVE-2023-6129.html',
-                'https://linux.oracle.com/errata/ELSA-2024-9088.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-6129',
-                'https://security.netapp.com/advisory/ntap-20240216-0009/',
-                'https://security.netapp.com/advisory/ntap-20240426-0008/',
-                'https://security.netapp.com/advisory/ntap-20240426-0013/',
-                'https://security.netapp.com/advisory/ntap-20240503-0011/',
-                'https://ubuntu.com/security/notices/USN-6622-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-6129',
-                'https://www.openssl.org/news/secadv/20240109.txt',
-                'https://www.openwall.com/lists/oss-security/2024/01/09/1'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: POLY1305 MAC implementation corrupts vector registers on PowerPC'
-            },
-            {
-              'cve':  'CVE-2023-6237',
-              'cvss': {
-                'redhat': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-606'
-              ],
-              'description':   "Issue summary: Checking excessively long invalid RSA public keys may take\na long time.\n\nImpact summary: Applications that use the function EVP_PKEY_public_check()\nto check RSA public keys may experience long delays. Where the key that\nis being checked has been obtained from an untrusted source this may lead\nto a Denial of Service.\n\nWhen function EVP_PKEY_public_check() is called on RSA public keys,\na computation is done to confirm that the RSA modulus, n, is composite.\nFor valid RSA keys, n is a product of two or more large primes and this\ncomputation completes quickly. However, if n is an overly large prime,\nthen this computation would take a long time.\n\nAn application that calls EVP_PKEY_public_check() and supplies an RSA key\nobtained from an untrusted source could be vulnerable to a Denial of Service\nattack.\n\nThe function EVP_PKEY_public_check() is not called from other OpenSSL\nfunctions however it is called from the OpenSSL pkey command line\napplication. For that reason that application is also vulnerable if used\nwith the '-pubin' and '-check' options on untrusted data.\n\nThe OpenSSL SSL/TLS implementation is not affected by this issue.\n\nThe OpenSSL 3.0 and 3.1 FIPS providers are affected by this issue.",
-              'diffID':        'sha256:8adafc86079f2f586db2e9c632b5977e96ebfce0fdb93f7c52bc7c83078bad29',
-              'fixedVersions': [
-                '3.0.12-r3'
-              ],
-              'installedVersion': '3.0.7-r2',
-              'packageName':      'libssl3',
-              'purl':             'pkg:apk/alpine/libssl3@3.0.7-r2?arch=x86_64&distro=3.17.0',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2024/03/11/1',
-                'https://access.redhat.com/errata/RHSA-2024:9088',
-                'https://access.redhat.com/security/cve/CVE-2023-6237',
-                'https://bugzilla.redhat.com/2257571',
-                'https://bugzilla.redhat.com/2258502',
-                'https://bugzilla.redhat.com/2259944',
-                'https://bugzilla.redhat.com/2284243',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2257571',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2258502',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2259944',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2284243',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-6129',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-6237',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-0727',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-1298',
-                'https://errata.almalinux.org/9/ALSA-2024-9088.html',
-                'https://errata.rockylinux.org/RLSA-2024:9088',
-                'https://github.com/openssl/openssl/commit/0b0f7abfb37350794a4b8960fafc292cd5d1b84d',
-                'https://github.com/openssl/openssl/commit/18c02492138d1eb8b6548cb26e7b625fb2414a2a',
-                'https://github.com/openssl/openssl/commit/a830f551557d3d66a84bbb18a5b889c640c36294',
-                'https://linux.oracle.com/cve/CVE-2023-6237.html',
-                'https://linux.oracle.com/errata/ELSA-2024-9088.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-6237',
-                'https://security.netapp.com/advisory/ntap-20240531-0007/',
-                'https://ubuntu.com/security/notices/USN-6622-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-6237',
-                'https://www.openssl.org/news/secadv/20240115.txt',
-                'https://www.openwall.com/lists/oss-security/2024/01/15/2'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: Excessive time spent checking invalid RSA public keys'
-            },
-            {
-              'cve':  'CVE-2024-0727',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '5.5',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H'
-                },
-                'nvd': {
-                  'v3score':  '5.5',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '5.5',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-476'
-              ],
-              'description':   'Issue summary: Processing a maliciously formatted PKCS12 file may lead OpenSSL\nto crash leading to a potential Denial of Service attack\n\nImpact summary: Applications loading files in the PKCS12 format from untrusted\nsources might terminate abruptly.\n\nA file in PKCS12 format can contain certificates and keys and may come from an\nuntrusted source. The PKCS12 specification allows certain fields to be NULL, but\nOpenSSL does not correctly check for this case. This can lead to a NULL pointer\ndereference that results in OpenSSL crashing. If an application processes PKCS12\nfiles from an untrusted source using the OpenSSL APIs then that application will\nbe vulnerable to this issue.\n\nOpenSSL APIs that are vulnerable to this are: PKCS12_parse(),\nPKCS12_unpack_p7data(), PKCS12_unpack_p7encdata(), PKCS12_unpack_authsafes()\nand PKCS12_newpass().\n\nWe have also fixed a similar issue in SMIME_write_PKCS7(). However since this\nfunction is related to writing data we do not consider it security significant.\n\nThe FIPS modules in 3.2, 3.1 and 3.0 are not affected by this issue.',
-              'diffID':        'sha256:8adafc86079f2f586db2e9c632b5977e96ebfce0fdb93f7c52bc7c83078bad29',
-              'fixedVersions': [
-                '3.0.12-r4'
-              ],
-              'installedVersion': '3.0.7-r2',
-              'packageName':      'libssl3',
-              'purl':             'pkg:apk/alpine/libssl3@3.0.7-r2?arch=x86_64&distro=3.17.0',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2024/03/11/1',
-                'https://access.redhat.com/errata/RHSA-2024:9088',
-                'https://access.redhat.com/security/cve/CVE-2024-0727',
-                'https://bugzilla.redhat.com/2257571',
-                'https://bugzilla.redhat.com/2258502',
-                'https://bugzilla.redhat.com/2259944',
-                'https://bugzilla.redhat.com/2284243',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2257571',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2258502',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2259944',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2284243',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-6129',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-6237',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-0727',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-1298',
-                'https://errata.almalinux.org/9/ALSA-2024-9088.html',
-                'https://errata.rockylinux.org/RLSA-2024:9088',
-                'https://github.com/alexcrichton/openssl-src-rs/commit/add20f73b6b42be7451af2e1044d4e0e778992b2',
-                'https://github.com/github/advisory-database/pull/3472',
-                'https://github.com/openssl/openssl/commit/09df4395b5071217b76dc7d3d2e630eb8c5a79c2',
-                'https://github.com/openssl/openssl/commit/775acfdbd0c6af9ac855f34969cdab0c0c90844a',
-                'https://github.com/openssl/openssl/commit/d135eeab8a5dbf72b3da5240bab9ddb7678dbd2c',
-                'https://github.com/openssl/openssl/pull/23362',
-                'https://github.com/pyca/cryptography/commit/3519591d255d4506fbcd0d04037d45271903c64d',
-                'https://github.openssl.org/openssl/extended-releases/commit/03b3941d60c4bce58fab69a0c22377ab439bc0e8',
-                'https://github.openssl.org/openssl/extended-releases/commit/aebaa5883e31122b404e450732dc833dc9dee539',
-                'https://linux.oracle.com/cve/CVE-2024-0727.html',
-                'https://linux.oracle.com/errata/ELSA-2024-9088.html',
-                'https://lists.debian.org/debian-lts-announce/2024/10/msg00033.html',
-                'https://lists.debian.org/debian-lts-announce/2024/11/msg00000.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2024-0727',
-                'https://security.netapp.com/advisory/ntap-20240208-0006',
-                'https://security.netapp.com/advisory/ntap-20240208-0006/',
-                'https://ubuntu.com/security/notices/USN-6622-1',
-                'https://ubuntu.com/security/notices/USN-6632-1',
-                'https://ubuntu.com/security/notices/USN-6709-1',
-                'https://ubuntu.com/security/notices/USN-7018-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2024-0727',
-                'https://www.openssl.org/news/secadv/20240125.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: denial of service via null dereference'
-            },
-            {
-              'cve':  'CVE-2024-4603',
-              'cvss': {
-                'redhat': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L'
-                }
-              },
-              'cwes': [
-                'CWE-606',
-                'CWE-834'
-              ],
-              'description':   'Issue summary: Checking excessively long DSA keys or parameters may be very\nslow.\n\nImpact summary: Applications that use the functions EVP_PKEY_param_check()\nor EVP_PKEY_public_check() to check a DSA public key or DSA parameters may\nexperience long delays. Where the key or parameters that are being checked\nhave been obtained from an untrusted source this may lead to a Denial of\nService.\n\nThe functions EVP_PKEY_param_check() or EVP_PKEY_public_check() perform\nvarious checks on DSA parameters. Some of those computations take a long time\nif the modulus (`p` parameter) is too large.\n\nTrying to use a very large modulus is slow and OpenSSL will not allow using\npublic keys with a modulus which is over 10,000 bits in length for signature\nverification. However the key and parameter check functions do not limit\nthe modulus size when performing the checks.\n\nAn application that calls EVP_PKEY_param_check() or EVP_PKEY_public_check()\nand supplies a key or parameters obtained from an untrusted source could be\nvulnerable to a Denial of Service attack.\n\nThese functions are not called by OpenSSL itself on untrusted DSA keys so\nonly applications that directly call these functions may be vulnerable.\n\nAlso vulnerable are the OpenSSL pkey and pkeyparam command line applications\nwhen using the `-check` option.\n\nThe OpenSSL SSL/TLS implementation is not affected by this issue.\n\nThe OpenSSL 3.0 and 3.1 FIPS providers are affected by this issue.',
-              'diffID':        'sha256:8adafc86079f2f586db2e9c632b5977e96ebfce0fdb93f7c52bc7c83078bad29',
-              'fixedVersions': [
-                '3.0.13-r0'
-              ],
-              'installedVersion': '3.0.7-r2',
-              'packageName':      'libssl3',
-              'purl':             'pkg:apk/alpine/libssl3@3.0.7-r2?arch=x86_64&distro=3.17.0',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2024/05/16/2',
-                'https://access.redhat.com/errata/RHSA-2024:9333',
-                'https://access.redhat.com/security/cve/CVE-2024-4603',
-                'https://bugzilla.redhat.com/2274020',
-                'https://bugzilla.redhat.com/2281029',
-                'https://bugzilla.redhat.com/2283757',
-                'https://bugzilla.redhat.com/2294581',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2274020',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2281029',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2283757',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2294581',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-2511',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-4603',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-4741',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-5535',
-                'https://errata.almalinux.org/9/ALSA-2024-9333.html',
-                'https://errata.rockylinux.org/RLSA-2024:9333',
-                'https://github.com/openssl/openssl/commit/3559e868e58005d15c6013a0c1fd832e51c73397',
-                'https://github.com/openssl/openssl/commit/53ea06486d296b890d565fb971b2764fcd826e7e',
-                'https://github.com/openssl/openssl/commit/9c39b3858091c152f52513c066ff2c5a47969f0d',
-                'https://github.com/openssl/openssl/commit/da343d0605c826ef197aceedc67e8e04f065f740',
-                'https://linux.oracle.com/cve/CVE-2024-4603.html',
-                'https://linux.oracle.com/errata/ELSA-2024-9333.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2024-4603',
-                'https://security.netapp.com/advisory/ntap-20240621-0001/',
-                'https://ubuntu.com/security/notices/USN-6937-1',
-                'https://www.cve.org/CVERecord?id=CVE-2024-4603',
-                'https://www.openssl.org/news/secadv/20240516.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: Excessive time spent checking DSA keys and parameters'
-            },
-            {
-              'cve':  'CVE-2024-4741',
-              'cvss': {
-                'redhat': {
-                  'v3score':  '5.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   'Issue summary: Calling the OpenSSL API function SSL_free_buffers may cause\nmemory to be accessed that was previously freed in some situations\n\nImpact summary: A use after free can have a range of potential consequences such\nas the corruption of valid data, crashes or execution of arbitrary code.\nHowever, only applications that directly call the SSL_free_buffers function are\naffected by this issue. Applications that do not call this function are not\nvulnerable. Our investigations indicate that this function is rarely used by\napplications.\n\nThe SSL_free_buffers function is used to free the internal OpenSSL buffer used\nwhen processing an incoming record from the network. The call is only expected\nto succeed if the buffer is not currently in use. However, two scenarios have\nbeen identified where the buffer is freed even when still in use.\n\nThe first scenario occurs where a record header has been received from the\nnetwork and processed by OpenSSL, but the full record body has not yet arrived.\nIn this case calling SSL_free_buffers will succeed even though a record has only\nbeen partially processed and the buffer is still in use.\n\nThe second scenario occurs where a full record containing application data has\nbeen received and processed by OpenSSL but the application has only read part of\nthis data. Again a call to SSL_free_buffers will succeed even though the buffer\nis still in use.\n\nWhile these scenarios could occur accidentally during normal operation a\nmalicious attacker could attempt to engineer a stituation where this occurs.\nWe are not aware of this issue being actively exploited.\n\nThe FIPS modules in 3.3, 3.2, 3.1 and 3.0 are not affected by this issue.',
-              'diffID':        'sha256:8adafc86079f2f586db2e9c632b5977e96ebfce0fdb93f7c52bc7c83078bad29',
-              'fixedVersions': [
-                '3.0.14-r0'
-              ],
-              'installedVersion': '3.0.7-r2',
-              'packageName':      'libssl3',
-              'purl':             'pkg:apk/alpine/libssl3@3.0.7-r2?arch=x86_64&distro=3.17.0',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2024:9333',
-                'https://access.redhat.com/security/cve/CVE-2024-4741',
-                'https://bugzilla.redhat.com/2274020',
-                'https://bugzilla.redhat.com/2281029',
-                'https://bugzilla.redhat.com/2283757',
-                'https://bugzilla.redhat.com/2294581',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2274020',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2281029',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2283757',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2294581',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-2511',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-4603',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-4741',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-5535',
-                'https://errata.almalinux.org/9/ALSA-2024-9333.html',
-                'https://errata.rockylinux.org/RLSA-2024:9333',
-                'https://github.com/openssl/openssl/commit/704f725b96aa373ee45ecfb23f6abfe8be8d9177',
-                'https://github.com/openssl/openssl/commit/b3f0eb0a295f58f16ba43ba99dad70d4ee5c437d',
-                'https://github.com/openssl/openssl/commit/c88c3de51020c37e8706bf7a682a162593053aac',
-                'https://github.com/openssl/openssl/commit/e5093133c35ca82874ad83697af76f4b0f7e3bd8',
-                'https://github.openssl.org/openssl/extended-releases/commit/f7a045f3143fc6da2ee66bf52d8df04829590dd4',
-                'https://linux.oracle.com/cve/CVE-2024-4741.html',
-                'https://linux.oracle.com/errata/ELSA-2024-9333.html',
-                'https://lists.debian.org/debian-lts-announce/2024/10/msg00033.html',
-                'https://lists.debian.org/debian-lts-announce/2024/11/msg00000.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2024-4741',
-                'https://security.netapp.com/advisory/ntap-20240621-0004/',
-                'https://ubuntu.com/security/notices/USN-6937-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2024-4741',
-                'https://www.openssl.org/news/secadv/20240528.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: Use After Free with SSL_free_buffers'
-            },
-            {
-              'cve':  'CVE-2024-5535',
-              'cvss': {
-                'redhat': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-125'
-              ],
-              'description':   'Issue summary: Calling the OpenSSL API function SSL_select_next_proto with an\nempty supported client protocols buffer may cause a crash or memory contents to\nbe sent to the peer.\n\nImpact summary: A buffer overread can have a range of potential consequences\nsuch as unexpected application beahviour or a crash. In particular this issue\ncould result in up to 255 bytes of arbitrary private data from memory being sent\nto the peer leading to a loss of confidentiality. However, only applications\nthat directly call the SSL_select_next_proto function with a 0 length list of\nsupported client protocols are affected by this issue. This would normally never\nbe a valid scenario and is typically not under attacker control but may occur by\naccident in the case of a configuration or programming error in the calling\napplication.\n\nThe OpenSSL API function SSL_select_next_proto is typically used by TLS\napplications that support ALPN (Application Layer Protocol Negotiation) or NPN\n(Next Protocol Negotiation). NPN is older, was never standardised and\nis deprecated in favour of ALPN. We believe that ALPN is significantly more\nwidely deployed than NPN. The SSL_select_next_proto function accepts a list of\nprotocols from the server and a list of protocols from the client and returns\nthe first protocol that appears in the server list that also appears in the\nclient list. In the case of no overlap between the two lists it returns the\nfirst item in the client list. In either case it will signal whether an overlap\nbetween the two lists was found. In the case where SSL_select_next_proto is\ncalled with a zero length client list it fails to notice this condition and\nreturns the memory immediately following the client list pointer (and reports\nthat there was no overlap in the lists).\n\nThis function is typically called from a server side application callback for\nALPN or a client side application callback for NPN. In the case of ALPN the list\nof protocols supplied by the client is guaranteed by libssl to never be zero in\nlength. The list of server protocols comes from the application and should never\nnormally be expected to be of zero length. In this case if the\nSSL_select_next_proto function has been called as expected (with the list\nsupplied by the client passed in the client/client_len parameters), then the\napplication will not be vulnerable to this issue. If the application has\naccidentally been configured with a zero length server list, and has\naccidentally passed that zero length server list in the client/client_len\nparameters, and has additionally failed to correctly handle a "no overlap"\nresponse (which would normally result in a handshake failure in ALPN) then it\nwill be vulnerable to this problem.\n\nIn the case of NPN, the protocol permits the client to opportunistically select\na protocol when there is no overlap. OpenSSL returns the first client protocol\nin the no overlap case in support of this. The list of client protocols comes\nfrom the application and should never normally be expected to be of zero length.\nHowever if the SSL_select_next_proto function is accidentally called with a\nclient_len of 0 then an invalid memory pointer will be returned instead. If the\napplication uses this output as the opportunistic protocol then the loss of\nconfidentiality will occur.\n\nThis issue has been assessed as Low severity because applications are most\nlikely to be vulnerable if they are using NPN instead of ALPN - but NPN is not\nwidely used. It also requires an application configuration or programming error.\nFinally, this issue would not typically be under attacker control making active\nexploitation unlikely.\n\nThe FIPS modules in 3.3, 3.2, 3.1 and 3.0 are not affected by this issue.\n\nDue to the low severity of this issue we are not issuing new releases of\nOpenSSL at this time. The fix will be included in the next releases when they\nbecome available.',
-              'diffID':        'sha256:8adafc86079f2f586db2e9c632b5977e96ebfce0fdb93f7c52bc7c83078bad29',
-              'fixedVersions': [
-                '3.0.14-r0'
-              ],
-              'installedVersion': '3.0.7-r2',
-              'packageName':      'libssl3',
-              'purl':             'pkg:apk/alpine/libssl3@3.0.7-r2?arch=x86_64&distro=3.17.0',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2024/06/27/1',
-                'http://www.openwall.com/lists/oss-security/2024/06/28/4',
-                'http://www.openwall.com/lists/oss-security/2024/08/15/1',
-                'https://access.redhat.com/errata/RHSA-2025:1671',
-                'https://access.redhat.com/security/cve/CVE-2024-5535',
-                'https://bugzilla.redhat.com/2294581',
-                'https://bugzilla.redhat.com/2294676',
-                'https://bugzilla.redhat.com/2301888',
-                'https://bugzilla.redhat.com/2318857',
-                'https://bugzilla.redhat.com/2318858',
-                'https://bugzilla.redhat.com/2318870',
-                'https://bugzilla.redhat.com/2318873',
-                'https://bugzilla.redhat.com/2318874',
-                'https://bugzilla.redhat.com/2318876',
-                'https://bugzilla.redhat.com/2318882',
-                'https://bugzilla.redhat.com/2318883',
-                'https://bugzilla.redhat.com/2318884',
-                'https://bugzilla.redhat.com/2318885',
-                'https://bugzilla.redhat.com/2318886',
-                'https://bugzilla.redhat.com/2318897',
-                'https://bugzilla.redhat.com/2318900',
-                'https://bugzilla.redhat.com/2318905',
-                'https://bugzilla.redhat.com/2318914',
-                'https://bugzilla.redhat.com/2318922',
-                'https://bugzilla.redhat.com/2318923',
-                'https://bugzilla.redhat.com/2318925',
-                'https://bugzilla.redhat.com/2318926',
-                'https://bugzilla.redhat.com/2318927',
-                'https://bugzilla.redhat.com/2331191',
-                'https://bugzilla.redhat.com/2339218',
-                'https://bugzilla.redhat.com/2339220',
-                'https://bugzilla.redhat.com/2339221',
-                'https://bugzilla.redhat.com/2339226',
-                'https://bugzilla.redhat.com/2339231',
-                'https://bugzilla.redhat.com/2339236',
-                'https://bugzilla.redhat.com/2339238',
-                'https://bugzilla.redhat.com/2339243',
-                'https://bugzilla.redhat.com/2339247',
-                'https://bugzilla.redhat.com/2339252',
-                'https://bugzilla.redhat.com/2339259',
-                'https://bugzilla.redhat.com/2339266',
-                'https://bugzilla.redhat.com/2339270',
-                'https://bugzilla.redhat.com/2339271',
-                'https://bugzilla.redhat.com/2339275',
-                'https://bugzilla.redhat.com/2339277',
-                'https://bugzilla.redhat.com/2339281',
-                'https://bugzilla.redhat.com/2339284',
-                'https://bugzilla.redhat.com/2339291',
-                'https://bugzilla.redhat.com/2339293',
-                'https://bugzilla.redhat.com/2339295',
-                'https://bugzilla.redhat.com/2339299',
-                'https://bugzilla.redhat.com/2339300',
-                'https://bugzilla.redhat.com/2339304',
-                'https://bugzilla.redhat.com/2339305',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2274020',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2281029',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2283757',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2294581',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-2511',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-4603',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-4741',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-5535',
-                'https://errata.almalinux.org/9/ALSA-2025-1671.html',
-                'https://errata.rockylinux.org/RLSA-2024:9333',
-                'https://github.com/openssl/openssl/commit/4ada436a1946cbb24db5ab4ca082b69c1bc10f37',
-                'https://github.com/openssl/openssl/commit/99fb785a5f85315b95288921a321a935ea29a51e',
-                'https://github.com/openssl/openssl/commit/cf6f91f6121f4db167405db2f0de410a456f260c',
-                'https://github.com/openssl/openssl/commit/e86ac436f0bd54d4517745483e2315650fae7b2c',
-                'https://github.openssl.org/openssl/extended-releases/commit/9947251413065a05189a63c9b7a6c1d4e224c21c',
-                'https://github.openssl.org/openssl/extended-releases/commit/b78ec0824da857223486660177d3b1f255c65d87',
-                'https://linux.oracle.com/cve/CVE-2024-5535.html',
-                'https://linux.oracle.com/errata/ELSA-2025-1673.html',
-                'https://lists.debian.org/debian-lts-announce/2024/10/msg00033.html',
-                'https://lists.debian.org/debian-lts-announce/2024/11/msg00000.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2024-5535',
-                'https://openssl.org/news/secadv/20240627.txt',
-                'https://security.netapp.com/advisory/ntap-20240712-0005/',
-                'https://security.netapp.com/advisory/ntap-20241025-0006/',
-                'https://security.netapp.com/advisory/ntap-20241025-0010/',
-                'https://ubuntu.com/security/notices/USN-6937-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2024-5535',
-                'https://www.openssl.org/news/secadv/20240627.txt',
-                'https://www.oracle.com/security-alerts/cpuoct2024.html#AppendixMSQL'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: SSL_select_next_proto buffer overread'
-            },
-            {
-              'cve':  'CVE-2024-2511',
-              'cvss': {
-                'redhat': {
-                  'v3score':  '3.7',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L'
-                }
-              },
-              'cwes': [
-                'CWE-1325'
-              ],
-              'description':   'Issue summary: Some non-default TLS server configurations can cause unbounded\nmemory growth when processing TLSv1.3 sessions\n\nImpact summary: An attacker may exploit certain server configurations to trigger\nunbounded memory growth that would lead to a Denial of Service\n\nThis problem can occur in TLSv1.3 if the non-default SSL_OP_NO_TICKET option is\nbeing used (but not if early_data support is also configured and the default\nanti-replay protection is in use). In this case, under certain conditions, the\nsession cache can get into an incorrect state and it will fail to flush properly\nas it fills. The session cache will continue to grow in an unbounded manner. A\nmalicious client could deliberately create the scenario for this failure to\nforce a Denial of Service. It may also happen by accident in normal operation.\n\nThis issue only affects TLS servers supporting TLSv1.3. It does not affect TLS\nclients.\n\nThe FIPS modules in 3.2, 3.1 and 3.0 are not affected by this issue. OpenSSL\n1.0.2 is also not affected by this issue.',
-              'diffID':        'sha256:8adafc86079f2f586db2e9c632b5977e96ebfce0fdb93f7c52bc7c83078bad29',
-              'fixedVersions': [
-                '3.0.12-r5'
-              ],
-              'installedVersion': '3.0.7-r2',
-              'packageName':      'libssl3',
-              'purl':             'pkg:apk/alpine/libssl3@3.0.7-r2?arch=x86_64&distro=3.17.0',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2024/04/08/5',
-                'https://access.redhat.com/errata/RHSA-2024:9333',
-                'https://access.redhat.com/security/cve/CVE-2024-2511',
-                'https://bugzilla.redhat.com/2274020',
-                'https://bugzilla.redhat.com/2281029',
-                'https://bugzilla.redhat.com/2283757',
-                'https://bugzilla.redhat.com/2294581',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2274020',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2281029',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2283757',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2294581',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-2511',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-4603',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-4741',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-5535',
-                'https://errata.almalinux.org/9/ALSA-2024-9333.html',
-                'https://errata.rockylinux.org/RLSA-2024:9333',
-                'https://github.com/openssl/openssl/commit/7e4d731b1c07201ad9374c1cd9ac5263bdf35bce',
-                'https://github.com/openssl/openssl/commit/b52867a9f618bb955bed2a3ce3db4d4f97ed8e5d',
-                'https://github.com/openssl/openssl/commit/e9d7083e241670332e0443da0f0d4ffb52829f08',
-                'https://github.openssl.org/openssl/extended-releases/commit/5f8d25770ae6437db119dfc951e207271a326640',
-                'https://linux.oracle.com/cve/CVE-2024-2511.html',
-                'https://linux.oracle.com/errata/ELSA-2024-9333.html',
-                'https://lists.debian.org/debian-lts-announce/2024/10/msg00033.html',
-                'https://lists.debian.org/debian-lts-announce/2024/11/msg00000.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2024-2511',
-                'https://security.netapp.com/advisory/ntap-20240503-0013/',
-                'https://ubuntu.com/security/notices/USN-6937-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2024-2511',
-                'https://www.openssl.org/news/secadv/20240408.txt',
-                'https://www.openssl.org/news/vulnerabilities.html'
-              ],
-              'severity':   'LOW',
-              'suppressed': false,
-              'title':      'openssl: Unbounded memory growth with session handling in TLSv1.3'
-            },
-            {
-              'cve':  'CVE-2024-9143',
-              'cvss': {
-                'redhat': {
-                  'v3score':  '3.7',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L'
-                }
-              },
-              'cwes': [
-                'CWE-125',
-                'CWE-787'
-              ],
-              'description':   "Issue summary: Use of the low-level GF(2^m) elliptic curve APIs with untrusted\nexplicit values for the field polynomial can lead to out-of-bounds memory reads\nor writes.\n\nImpact summary: Out of bound memory writes can lead to an application crash or\neven a possibility of a remote code execution, however, in all the protocols\ninvolving Elliptic Curve Cryptography that we're aware of, either only \"named\ncurves\" are supported, or, if explicit curve parameters are supported, they\nspecify an X9.62 encoding of binary (GF(2^m)) curves that can't represent\nproblematic input values. Thus the likelihood of existence of a vulnerable\napplication is low.\n\nIn particular, the X9.62 encoding is used for ECC keys in X.509 certificates,\nso problematic inputs cannot occur in the context of processing X.509\ncertificates.  Any problematic use-cases would have to be using an \"exotic\"\ncurve encoding.\n\nThe affected APIs include: EC_GROUP_new_curve_GF2m(), EC_GROUP_new_from_params(),\nand various supporting BN_GF2m_*() functions.\n\nApplications working with \"exotic\" explicit binary (GF(2^m)) curve parameters,\nthat make it possible to represent invalid field polynomials with a zero\nconstant term, via the above or similar APIs, may terminate abruptly as a\nresult of reading or writing outside of array bounds.  Remote code execution\ncannot easily be ruled out.\n\nThe FIPS modules in 3.3, 3.2, 3.1 and 3.0 are not affected by this issue.",
-              'diffID':        'sha256:8adafc86079f2f586db2e9c632b5977e96ebfce0fdb93f7c52bc7c83078bad29',
-              'fixedVersions': [
-                '3.0.15-r1'
-              ],
-              'installedVersion': '3.0.7-r2',
-              'packageName':      'libssl3',
-              'purl':             'pkg:apk/alpine/libssl3@3.0.7-r2?arch=x86_64&distro=3.17.0',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2024/10/16/1',
-                'http://www.openwall.com/lists/oss-security/2024/10/23/1',
-                'http://www.openwall.com/lists/oss-security/2024/10/24/1',
-                'https://access.redhat.com/security/cve/CVE-2024-9143',
-                'https://github.com/openssl/openssl/commit/72ae83ad214d2eef262461365a1975707f862712',
-                'https://github.com/openssl/openssl/commit/bc7e04d7c8d509fb78fc0e285aa948fb0da04700',
-                'https://github.com/openssl/openssl/commit/c0d3e4d32d2805f49bec30547f225bc4d092e1f4',
-                'https://github.com/openssl/openssl/commit/fdf6723362ca51bd883295efe206cb5b1cfa5154',
-                'https://github.openssl.org/openssl/extended-releases/commit/8efc0cbaa8ebba8e116f7b81a876a4123594d86a',
-                'https://github.openssl.org/openssl/extended-releases/commit/9d576994cec2b7aa37a91740ea7e680810957e41',
-                'https://lists.debian.org/debian-lts-announce/2024/10/msg00033.html',
-                'https://lists.debian.org/debian-lts-announce/2024/11/msg00000.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2024-9143',
-                'https://openssl-library.org/news/secadv/20241016.txt',
-                'https://security.netapp.com/advisory/ntap-20241101-0001/',
-                'https://ubuntu.com/security/notices/USN-7264-1',
-                'https://ubuntu.com/security/notices/USN-7278-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2024-9143'
-              ],
-              'severity':   'LOW',
-              'suppressed': false,
-              'title':      'openssl: Low-level invalid GF(2^m) parameters lead to OOB memory access'
-            },
-            {
-              'cve':  'CVE-2025-26519',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-787'
-              ],
-              'description':   'musl libc 0.9.13 through 1.2.5 before 1.2.6 has an out-of-bounds write vulnerability when an attacker can trigger iconv conversion of untrusted EUC-KR text to UTF-8.',
-              'diffID':        'sha256:ded7a220bb058e28ee3254fbba04ca90b679070424424761a53a043b93b612bf',
-              'fixedVersions': [
-                '1.2.3-r6'
-              ],
-              'installedVersion': '1.2.3-r4',
-              'packageName':      'musl',
-              'purl':             'pkg:apk/alpine/musl@1.2.3-r4?arch=x86_64&distro=3.17.0',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2025/02/13/2',
-                'http://www.openwall.com/lists/oss-security/2025/02/13/3',
-                'http://www.openwall.com/lists/oss-security/2025/02/13/4',
-                'http://www.openwall.com/lists/oss-security/2025/02/13/5',
-                'http://www.openwall.com/lists/oss-security/2025/02/14/5',
-                'http://www.openwall.com/lists/oss-security/2025/02/14/6',
-                'https://git.musl-libc.org/cgit/musl/commit/?id=c47ad25ea3b484e10326f933e927c0bc8cded3da',
-                'https://git.musl-libc.org/cgit/musl/commit/?id=e5adcd97b5196e29991b524237381a0202a60659',
-                'https://www.openwall.com/lists/oss-security/2025/02/13/2'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'musl libc 0.9.13 through 1.2.5 before 1.2.6 has an out-of-bounds write ...'
-            },
-            {
-              'cve':  'CVE-2025-26519',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-787'
-              ],
-              'description':   'musl libc 0.9.13 through 1.2.5 before 1.2.6 has an out-of-bounds write vulnerability when an attacker can trigger iconv conversion of untrusted EUC-KR text to UTF-8.',
-              'diffID':        'sha256:ded7a220bb058e28ee3254fbba04ca90b679070424424761a53a043b93b612bf',
-              'fixedVersions': [
-                '1.2.3-r6'
-              ],
-              'installedVersion': '1.2.3-r4',
-              'packageName':      'musl-utils',
-              'purl':             'pkg:apk/alpine/musl-utils@1.2.3-r4?arch=x86_64&distro=3.17.0',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2025/02/13/2',
-                'http://www.openwall.com/lists/oss-security/2025/02/13/3',
-                'http://www.openwall.com/lists/oss-security/2025/02/13/4',
-                'http://www.openwall.com/lists/oss-security/2025/02/13/5',
-                'http://www.openwall.com/lists/oss-security/2025/02/14/5',
-                'http://www.openwall.com/lists/oss-security/2025/02/14/6',
-                'https://git.musl-libc.org/cgit/musl/commit/?id=c47ad25ea3b484e10326f933e927c0bc8cded3da',
-                'https://git.musl-libc.org/cgit/musl/commit/?id=e5adcd97b5196e29991b524237381a0202a60659',
-                'https://www.openwall.com/lists/oss-security/2025/02/13/2'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'musl libc 0.9.13 through 1.2.5 before 1.2.6 has an out-of-bounds write ...'
-            },
-            {
-              'cve':  'CVE-2023-42363',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.5',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.8',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   'A use-after-free vulnerability was discovered in xasprintf function in xfuncs_printf.c:344 in BusyBox v.1.36.1.',
-              'diffID':        'sha256:ded7a220bb058e28ee3254fbba04ca90b679070424424761a53a043b93b612bf',
-              'fixedVersions': [
-                '1.35.0-r31'
-              ],
-              'installedVersion': '1.35.0-r29',
-              'packageName':      'ssl_client',
-              'purl':             'pkg:apk/alpine/ssl_client@1.35.0-r29?arch=x86_64&distro=3.17.0',
-              'references':       [
-                'http://lists.busybox.net/pipermail/busybox/2024-May/090760.html',
-                'https://access.redhat.com/security/cve/CVE-2023-42363',
-                'https://bugs.busybox.net/show_bug.cgi?id=15865',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-42363',
-                'https://ubuntu.com/security/notices/USN-6961-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-42363'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk'
-            },
-            {
-              'cve':  'CVE-2023-42364',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.5',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.8',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   'A use-after-free vulnerability in BusyBox v.1.36.1 allows attackers to cause a denial of service via a crafted awk pattern in the awk.c evaluate function.',
-              'diffID':        'sha256:ded7a220bb058e28ee3254fbba04ca90b679070424424761a53a043b93b612bf',
-              'fixedVersions': [
-                '1.35.0-r31'
-              ],
-              'installedVersion': '1.35.0-r29',
-              'packageName':      'ssl_client',
-              'purl':             'pkg:apk/alpine/ssl_client@1.35.0-r29?arch=x86_64&distro=3.17.0',
-              'references':       [
-                'http://lists.busybox.net/pipermail/busybox/2024-May/090762.html',
-                'https://access.redhat.com/security/cve/CVE-2023-42364',
-                'https://bugs.busybox.net/show_bug.cgi?id=15868',
-                'https://gitlab.alpinelinux.org/alpine/aports/-/blob/master/main/busybox/CVE-2023-42364-CVE-2023-42365.patch',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-42364',
-                'https://ubuntu.com/security/notices/USN-6961-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-42364'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'busybox: use-after-free'
-            },
-            {
-              'cve':  'CVE-2023-42365',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.5',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.8',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   'A use-after-free vulnerability was discovered in BusyBox v.1.36.1 via a crafted awk pattern in the awk.c copyvar function.',
-              'diffID':        'sha256:ded7a220bb058e28ee3254fbba04ca90b679070424424761a53a043b93b612bf',
-              'fixedVersions': [
-                '1.35.0-r31'
-              ],
-              'installedVersion': '1.35.0-r29',
-              'packageName':      'ssl_client',
-              'purl':             'pkg:apk/alpine/ssl_client@1.35.0-r29?arch=x86_64&distro=3.17.0',
-              'references':       [
-                'http://lists.busybox.net/pipermail/busybox/2024-May/090762.html',
-                'https://access.redhat.com/security/cve/CVE-2023-42365',
-                'https://bugs.busybox.net/show_bug.cgi?id=15871',
-                'https://gitlab.alpinelinux.org/alpine/aports/-/blob/master/main/busybox/CVE-2023-42364-CVE-2023-42365.patch',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-42365',
-                'https://ubuntu.com/security/notices/USN-6961-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-42365'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'busybox: use-after-free'
-            },
-            {
-              'cve':  'CVE-2023-42366',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.5',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.1',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-787'
-              ],
-              'description':   'A heap-buffer-overflow was discovered in BusyBox v.1.36.1 in the next_token function at awk.c:1159.',
-              'diffID':        'sha256:ded7a220bb058e28ee3254fbba04ca90b679070424424761a53a043b93b612bf',
-              'fixedVersions': [
-                '1.35.0-r30'
-              ],
-              'installedVersion': '1.35.0-r29',
-              'packageName':      'ssl_client',
-              'purl':             'pkg:apk/alpine/ssl_client@1.35.0-r29?arch=x86_64&distro=3.17.0',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2023-42366',
-                'https://bugs.busybox.net/show_bug.cgi?id=15874',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-42366',
-                'https://security.netapp.com/advisory/ntap-20241206-0007/',
-                'https://www.cve.org/CVERecord?id=CVE-2023-42366'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'busybox: A heap-buffer-overflow'
-            }
-          ]
-        }
-      ],
-      'summary': {
-        'critical':   0,
-        'high':       20,
-        'low':        4,
-        'medium':     44,
-        'suppressed': 0,
-        'unknown':    0
-      }
-    }
-  },
-  {
-    'id':    'default/8ccad48ad86ecd44ca8e650a4182fe7d6c474189589bedd4e4d82b3de2d5d3dc',
-    'type':  'storage.sbomscanner.kubewarden.io.vulnerabilityreport',
-    'links': {
-      'patch':  'https://localhost:8005/v1/storage.sbomscanner.kubewarden.io.vulnerabilityreports/default/8ccad48ad86ecd44ca8e650a4182fe7d6c474189589bedd4e4d82b3de2d5d3dc',
-      'remove': 'https://localhost:8005/v1/storage.sbomscanner.kubewarden.io.vulnerabilityreports/default/8ccad48ad86ecd44ca8e650a4182fe7d6c474189589bedd4e4d82b3de2d5d3dc',
-      'self':   'https://localhost:8005/v1/storage.sbomscanner.kubewarden.io.vulnerabilityreports/default/8ccad48ad86ecd44ca8e650a4182fe7d6c474189589bedd4e4d82b3de2d5d3dc',
-      'update': 'https://localhost:8005/v1/storage.sbomscanner.kubewarden.io.vulnerabilityreports/default/8ccad48ad86ecd44ca8e650a4182fe7d6c474189589bedd4e4d82b3de2d5d3dc',
-      'view':   'https://localhost:8005/apis/storage.sbomscanner.kubewarden.io/v1alpha1/namespaces/default/vulnerabilityreports/8ccad48ad86ecd44ca8e650a4182fe7d6c474189589bedd4e4d82b3de2d5d3dc'
-    },
-    'apiVersion':    'storage.sbomscanner.kubewarden.io/v1alpha1',
-    'imageMetadata': {
-      'digest':      'sha256:145b24ad7f65c5368b1cae556cec31da472a135d429b0082a611616579f2752d',
-      'platform':    'linux/ppc64le',
-      'registry':    'lsong-demo1',
-      'registryURI': 'registry-1.docker.io',
-      'repository':  'library/alpine',
-      'tag':         '3.17.1'
-    },
-    'kind':     'VulnerabilityReport',
-    'metadata': {
-      'creationTimestamp': '2026-01-14T18:51:33Z',
-      'fields':            [
-        '8ccad48ad86ecd44ca8e650a4182fe7d6c474189589bedd4e4d82b3de2d5d3dc',
-        'registry-1.docker.io/library/alpine:3.17.1',
-        'linux/ppc64le',
-        '68 (0 suppressed)'
-      ],
-      'labels': {
-        'app.kubernetes.io/managed-by':          'sbomscanner',
-        'app.kubernetes.io/part-of':             'sbomscanner',
-        'sbomscanner.kubewarden.io/scanjob-uid': '445c600a-c4b6-40b3-bd71-f2d2140a37d5'
-      },
-      'name':            '8ccad48ad86ecd44ca8e650a4182fe7d6c474189589bedd4e4d82b3de2d5d3dc',
-      'namespace':       'default',
-      'ownerReferences': [
-        {
-          'apiVersion':         'storage.sbomscanner.kubewarden.io/v1alpha1',
-          'blockOwnerDeletion': true,
-          'controller':         true,
-          'kind':               'SBOM',
-          'name':               '8ccad48ad86ecd44ca8e650a4182fe7d6c474189589bedd4e4d82b3de2d5d3dc',
-          'uid':                'a38eb9b6-2d38-472f-9551-4304dd47537b'
-        }
-      ],
-      'relationships': [
-        {
-          'fromId':   'default/8ccad48ad86ecd44ca8e650a4182fe7d6c474189589bedd4e4d82b3de2d5d3dc',
-          'fromType': 'storage.sbomscanner.kubewarden.io.sbom',
-          'rel':      'owner',
-          'state':    'active',
-          'message':  'Resource is current'
-        }
-      ],
-      'resourceVersion': '1',
-      'state':           {
-        'error':         false,
-        'message':       'Resource is current',
-        'name':          'active',
-        'transitioning': false
-      },
-      'uid': 'daee22c7-9ceb-4e88-9ec9-d70ad1140852'
-    },
-    'report': {
-      'results': [
-        {
-          'class':           'os-pkgs',
-          'target':          '/var/run/worker/trivy.sbom.454842780.json (alpine 3.17.1)',
-          'type':            'alpine',
-          'vulnerabilities': [
-            {
-              'cve':  'CVE-2023-42363',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.5',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.8',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   'A use-after-free vulnerability was discovered in xasprintf function in xfuncs_printf.c:344 in BusyBox v.1.36.1.',
-              'diffID':        'sha256:0e3395c9c4d69931dec5029f4c593bdabd1bf4cc1c06b7d568ee72ea29783132',
-              'fixedVersions': [
-                '1.35.0-r31'
-              ],
-              'installedVersion': '1.35.0-r29',
-              'packageName':      'busybox',
-              'purl':             'pkg:apk/alpine/busybox@1.35.0-r29?arch=ppc64le&distro=3.17.1',
-              'references':       [
-                'http://lists.busybox.net/pipermail/busybox/2024-May/090760.html',
-                'https://access.redhat.com/security/cve/CVE-2023-42363',
-                'https://bugs.busybox.net/show_bug.cgi?id=15865',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-42363',
-                'https://ubuntu.com/security/notices/USN-6961-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-42363'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk'
-            },
-            {
-              'cve':  'CVE-2023-42364',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.5',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.8',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   'A use-after-free vulnerability in BusyBox v.1.36.1 allows attackers to cause a denial of service via a crafted awk pattern in the awk.c evaluate function.',
-              'diffID':        'sha256:0e3395c9c4d69931dec5029f4c593bdabd1bf4cc1c06b7d568ee72ea29783132',
-              'fixedVersions': [
-                '1.35.0-r31'
-              ],
-              'installedVersion': '1.35.0-r29',
-              'packageName':      'busybox',
-              'purl':             'pkg:apk/alpine/busybox@1.35.0-r29?arch=ppc64le&distro=3.17.1',
-              'references':       [
-                'http://lists.busybox.net/pipermail/busybox/2024-May/090762.html',
-                'https://access.redhat.com/security/cve/CVE-2023-42364',
-                'https://bugs.busybox.net/show_bug.cgi?id=15868',
-                'https://gitlab.alpinelinux.org/alpine/aports/-/blob/master/main/busybox/CVE-2023-42364-CVE-2023-42365.patch',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-42364',
-                'https://ubuntu.com/security/notices/USN-6961-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-42364'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'busybox: use-after-free'
-            },
-            {
-              'cve':  'CVE-2023-42365',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.5',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.8',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   'A use-after-free vulnerability was discovered in BusyBox v.1.36.1 via a crafted awk pattern in the awk.c copyvar function.',
-              'diffID':        'sha256:0e3395c9c4d69931dec5029f4c593bdabd1bf4cc1c06b7d568ee72ea29783132',
-              'fixedVersions': [
-                '1.35.0-r31'
-              ],
-              'installedVersion': '1.35.0-r29',
-              'packageName':      'busybox',
-              'purl':             'pkg:apk/alpine/busybox@1.35.0-r29?arch=ppc64le&distro=3.17.1',
-              'references':       [
-                'http://lists.busybox.net/pipermail/busybox/2024-May/090762.html',
-                'https://access.redhat.com/security/cve/CVE-2023-42365',
-                'https://bugs.busybox.net/show_bug.cgi?id=15871',
-                'https://gitlab.alpinelinux.org/alpine/aports/-/blob/master/main/busybox/CVE-2023-42364-CVE-2023-42365.patch',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-42365',
-                'https://ubuntu.com/security/notices/USN-6961-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-42365'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'busybox: use-after-free'
-            },
-            {
-              'cve':  'CVE-2023-42366',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.5',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.1',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-787'
-              ],
-              'description':   'A heap-buffer-overflow was discovered in BusyBox v.1.36.1 in the next_token function at awk.c:1159.',
-              'diffID':        'sha256:0e3395c9c4d69931dec5029f4c593bdabd1bf4cc1c06b7d568ee72ea29783132',
-              'fixedVersions': [
-                '1.35.0-r30'
-              ],
-              'installedVersion': '1.35.0-r29',
-              'packageName':      'busybox',
-              'purl':             'pkg:apk/alpine/busybox@1.35.0-r29?arch=ppc64le&distro=3.17.1',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2023-42366',
-                'https://bugs.busybox.net/show_bug.cgi?id=15874',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-42366',
-                'https://security.netapp.com/advisory/ntap-20241206-0007/',
-                'https://www.cve.org/CVERecord?id=CVE-2023-42366'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'busybox: A heap-buffer-overflow'
-            },
-            {
-              'cve':  'CVE-2023-42363',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.5',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.8',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   'A use-after-free vulnerability was discovered in xasprintf function in xfuncs_printf.c:344 in BusyBox v.1.36.1.',
-              'diffID':        'sha256:0e3395c9c4d69931dec5029f4c593bdabd1bf4cc1c06b7d568ee72ea29783132',
-              'fixedVersions': [
-                '1.35.0-r31'
-              ],
-              'installedVersion': '1.35.0-r29',
-              'packageName':      'busybox-binsh',
-              'purl':             'pkg:apk/alpine/busybox-binsh@1.35.0-r29?arch=ppc64le&distro=3.17.1',
-              'references':       [
-                'http://lists.busybox.net/pipermail/busybox/2024-May/090760.html',
-                'https://access.redhat.com/security/cve/CVE-2023-42363',
-                'https://bugs.busybox.net/show_bug.cgi?id=15865',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-42363',
-                'https://ubuntu.com/security/notices/USN-6961-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-42363'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk'
-            },
-            {
-              'cve':  'CVE-2023-42364',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.5',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.8',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   'A use-after-free vulnerability in BusyBox v.1.36.1 allows attackers to cause a denial of service via a crafted awk pattern in the awk.c evaluate function.',
-              'diffID':        'sha256:0e3395c9c4d69931dec5029f4c593bdabd1bf4cc1c06b7d568ee72ea29783132',
-              'fixedVersions': [
-                '1.35.0-r31'
-              ],
-              'installedVersion': '1.35.0-r29',
-              'packageName':      'busybox-binsh',
-              'purl':             'pkg:apk/alpine/busybox-binsh@1.35.0-r29?arch=ppc64le&distro=3.17.1',
-              'references':       [
-                'http://lists.busybox.net/pipermail/busybox/2024-May/090762.html',
-                'https://access.redhat.com/security/cve/CVE-2023-42364',
-                'https://bugs.busybox.net/show_bug.cgi?id=15868',
-                'https://gitlab.alpinelinux.org/alpine/aports/-/blob/master/main/busybox/CVE-2023-42364-CVE-2023-42365.patch',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-42364',
-                'https://ubuntu.com/security/notices/USN-6961-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-42364'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'busybox: use-after-free'
-            },
-            {
-              'cve':  'CVE-2023-42365',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.5',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.8',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   'A use-after-free vulnerability was discovered in BusyBox v.1.36.1 via a crafted awk pattern in the awk.c copyvar function.',
-              'diffID':        'sha256:0e3395c9c4d69931dec5029f4c593bdabd1bf4cc1c06b7d568ee72ea29783132',
-              'fixedVersions': [
-                '1.35.0-r31'
-              ],
-              'installedVersion': '1.35.0-r29',
-              'packageName':      'busybox-binsh',
-              'purl':             'pkg:apk/alpine/busybox-binsh@1.35.0-r29?arch=ppc64le&distro=3.17.1',
-              'references':       [
-                'http://lists.busybox.net/pipermail/busybox/2024-May/090762.html',
-                'https://access.redhat.com/security/cve/CVE-2023-42365',
-                'https://bugs.busybox.net/show_bug.cgi?id=15871',
-                'https://gitlab.alpinelinux.org/alpine/aports/-/blob/master/main/busybox/CVE-2023-42364-CVE-2023-42365.patch',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-42365',
-                'https://ubuntu.com/security/notices/USN-6961-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-42365'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'busybox: use-after-free'
-            },
-            {
-              'cve':  'CVE-2023-42366',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.5',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.1',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-787'
-              ],
-              'description':   'A heap-buffer-overflow was discovered in BusyBox v.1.36.1 in the next_token function at awk.c:1159.',
-              'diffID':        'sha256:0e3395c9c4d69931dec5029f4c593bdabd1bf4cc1c06b7d568ee72ea29783132',
-              'fixedVersions': [
-                '1.35.0-r30'
-              ],
-              'installedVersion': '1.35.0-r29',
-              'packageName':      'busybox-binsh',
-              'purl':             'pkg:apk/alpine/busybox-binsh@1.35.0-r29?arch=ppc64le&distro=3.17.1',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2023-42366',
-                'https://bugs.busybox.net/show_bug.cgi?id=15874',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-42366',
-                'https://security.netapp.com/advisory/ntap-20241206-0007/',
-                'https://www.cve.org/CVERecord?id=CVE-2023-42366'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'busybox: A heap-buffer-overflow'
-            },
-            {
-              'cve':  'CVE-2022-4450',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'nvd': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-415'
-              ],
-              'description':   'The function PEM_read_bio_ex() reads a PEM file from a BIO and parses and\ndecodes the "name" (e.g. "CERTIFICATE"), any header data and the payload data.\nIf the function succeeds then the "name_out", "header" and "data" arguments are\npopulated with pointers to buffers containing the relevant decoded data. The\ncaller is responsible for freeing those buffers. It is possible to construct a\nPEM file that results in 0 bytes of payload data. In this case PEM_read_bio_ex()\nwill return a failure code but will populate the header argument with a pointer\nto a buffer that has already been freed. If the caller also frees this buffer\nthen a double free will occur. This will most likely lead to a crash. This\ncould be exploited by an attacker who has the ability to supply malicious PEM\nfiles for parsing to achieve a denial of service attack.\n\nThe functions PEM_read_bio() and PEM_read() are simple wrappers around\nPEM_read_bio_ex() and therefore these functions are also directly affected.\n\nThese functions are also called indirectly by a number of other OpenSSL\nfunctions including PEM_X509_INFO_read_bio_ex() and\nSSL_CTX_use_serverinfo_file() which are also vulnerable. Some OpenSSL internal\nuses of these functions are not vulnerable because the caller does not free the\nheader argument if PEM_read_bio_ex() returns a failure code. These locations\ninclude the PEM_read_bio_TYPE() functions as well as the decoders introduced in\nOpenSSL 3.0.\n\nThe OpenSSL asn1parse command line application is also impacted by this issue.',
-              'diffID':        'sha256:0e3395c9c4d69931dec5029f4c593bdabd1bf4cc1c06b7d568ee72ea29783132',
-              'fixedVersions': [
-                '3.0.8-r0'
-              ],
-              'installedVersion': '3.0.7-r2',
-              'packageName':      'libcrypto3',
-              'purl':             'pkg:apk/alpine/libcrypto3@3.0.7-r2?arch=ppc64le&distro=3.17.1',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2023:2165',
-                'https://access.redhat.com/security/cve/CVE-2022-4450',
-                'https://bugzilla.redhat.com/1960321',
-                'https://bugzilla.redhat.com/2164440',
-                'https://bugzilla.redhat.com/2164487',
-                'https://bugzilla.redhat.com/2164492',
-                'https://bugzilla.redhat.com/2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144000',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144003',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144006',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144008',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144010',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144012',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144015',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144017',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144019',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2145170',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2158412',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164440',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164487',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164488',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164492',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164497',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164499',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164500',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4203',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4304',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4450',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0215',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0216',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0217',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0286',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0401',
-                'https://errata.almalinux.org/9/ALSA-2023-2165.html',
-                'https://errata.rockylinux.org/RLSA-2023:0946',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=63bcf189be73a9cc1264059bed6f57974be74a83',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=bbcf509bd046b34cca19c766bbddc31683d0858b',
-                'https://linux.oracle.com/cve/CVE-2022-4450.html',
-                'https://linux.oracle.com/errata/ELSA-2023-32791.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2022-4450',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0003',
-                'https://rustsec.org/advisories/RUSTSEC-2023-0010.html',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://ubuntu.com/security/notices/USN-5844-1',
-                'https://ubuntu.com/security/notices/USN-6564-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2022-4450',
-                'https://www.openssl.org/news/secadv/20230207.txt'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: double free after calling PEM_read_bio_ex'
-            },
-            {
-              'cve':  'CVE-2023-0215',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'nvd': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   'The public API function BIO_new_NDEF is a helper function used for streaming\nASN.1 data via a BIO. It is primarily used internally to OpenSSL to support the\nSMIME, CMS and PKCS7 streaming capabilities, but may also be called directly by\nend user applications.\n\nThe function receives a BIO from the caller, prepends a new BIO_f_asn1 filter\nBIO onto the front of it to form a BIO chain, and then returns the new head of\nthe BIO chain to the caller. Under certain conditions, for example if a CMS\nrecipient public key is invalid, the new filter BIO is freed and the function\nreturns a NULL result indicating a failure. However, in this case, the BIO chain\nis not properly cleaned up and the BIO passed by the caller still retains\ninternal pointers to the previously freed filter BIO. If the caller then goes on\nto call BIO_pop() on the BIO then a use-after-free will occur. This will most\nlikely result in a crash.\n\n\n\nThis scenario occurs directly in the internal function B64_write_ASN1() which\nmay cause BIO_new_NDEF() to be called and will subsequently call BIO_pop() on\nthe BIO. This internal function is in turn called by the public API functions\nPEM_write_bio_ASN1_stream, PEM_write_bio_CMS_stream, PEM_write_bio_PKCS7_stream,\nSMIME_write_ASN1, SMIME_write_CMS and SMIME_write_PKCS7.\n\nOther public API functions that may be impacted by this include\ni2d_ASN1_bio_stream, BIO_new_CMS, BIO_new_PKCS7, i2d_CMS_bio_stream and\ni2d_PKCS7_bio_stream.\n\nThe OpenSSL cms and smime command line applications are similarly affected.',
-              'diffID':        'sha256:0e3395c9c4d69931dec5029f4c593bdabd1bf4cc1c06b7d568ee72ea29783132',
-              'fixedVersions': [
-                '3.0.8-r0'
-              ],
-              'installedVersion': '3.0.7-r2',
-              'packageName':      'libcrypto3',
-              'purl':             'pkg:apk/alpine/libcrypto3@3.0.7-r2?arch=ppc64le&distro=3.17.1',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2023:2165',
-                'https://access.redhat.com/security/cve/CVE-2023-0215',
-                'https://bugzilla.redhat.com/1960321',
-                'https://bugzilla.redhat.com/2164440',
-                'https://bugzilla.redhat.com/2164487',
-                'https://bugzilla.redhat.com/2164492',
-                'https://bugzilla.redhat.com/2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144000',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144003',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144006',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144008',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144010',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144012',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144015',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144017',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144019',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2145170',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2158412',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164440',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164487',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164488',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164492',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164497',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164499',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164500',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4203',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4304',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4450',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0215',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0216',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0217',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0286',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0401',
-                'https://errata.almalinux.org/9/ALSA-2023-2165.html',
-                'https://errata.rockylinux.org/RLSA-2023:0946',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=8818064ce3c3c0f1b740a5aaba2a987e75bfbafd',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=9816136fe31d92ace4037d5da5257f763aeeb4eb',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=c3829dd8825c654652201e16f8a0a0c46ee3f344',
-                'https://linux.oracle.com/cve/CVE-2023-0215.html',
-                'https://linux.oracle.com/errata/ELSA-2023-32791.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-0215',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0003',
-                'https://rustsec.org/advisories/RUSTSEC-2023-0009.html',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://security.netapp.com/advisory/ntap-20230427-0007',
-                'https://security.netapp.com/advisory/ntap-20230427-0007/',
-                'https://security.netapp.com/advisory/ntap-20230427-0009',
-                'https://security.netapp.com/advisory/ntap-20230427-0009/',
-                'https://security.netapp.com/advisory/ntap-20240621-0006',
-                'https://security.netapp.com/advisory/ntap-20240621-0006/',
-                'https://ubuntu.com/security/notices/USN-5844-1',
-                'https://ubuntu.com/security/notices/USN-5845-1',
-                'https://ubuntu.com/security/notices/USN-5845-2',
-                'https://ubuntu.com/security/notices/USN-6564-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-0215',
-                'https://www.openssl.org/news/secadv/20230207.txt'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: use-after-free following BIO_new_NDEF'
-            },
-            {
-              'cve':  'CVE-2023-0216',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'nvd': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-476'
-              ],
-              'description':   'An invalid pointer dereference on read can be triggered when an\napplication tries to load malformed PKCS7 data with the\nd2i_PKCS7(), d2i_PKCS7_bio() or d2i_PKCS7_fp() functions.\n\nThe result of the dereference is an application crash which could\nlead to a denial of service attack. The TLS implementation in OpenSSL\ndoes not call this function however third party applications might\ncall these functions on untrusted data.',
-              'diffID':        'sha256:0e3395c9c4d69931dec5029f4c593bdabd1bf4cc1c06b7d568ee72ea29783132',
-              'fixedVersions': [
-                '3.0.8-r0'
-              ],
-              'installedVersion': '3.0.7-r2',
-              'packageName':      'libcrypto3',
-              'purl':             'pkg:apk/alpine/libcrypto3@3.0.7-r2?arch=ppc64le&distro=3.17.1',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2023:0946',
-                'https://access.redhat.com/security/cve/CVE-2023-0216',
-                'https://bugzilla.redhat.com/2164440',
-                'https://bugzilla.redhat.com/2164487',
-                'https://bugzilla.redhat.com/2164488',
-                'https://bugzilla.redhat.com/2164492',
-                'https://bugzilla.redhat.com/2164494',
-                'https://bugzilla.redhat.com/2164497',
-                'https://bugzilla.redhat.com/2164499',
-                'https://bugzilla.redhat.com/2164500',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144000',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144003',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144006',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144008',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144010',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144012',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144015',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144017',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144019',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2145170',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2158412',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164440',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164487',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164488',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164492',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164497',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164499',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164500',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4203',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4304',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4450',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0215',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0216',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0217',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0286',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0401',
-                'https://errata.almalinux.org/9/ALSA-2023-0946.html',
-                'https://errata.rockylinux.org/RLSA-2023:0946',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=934a04f0e775309cadbef0aa6b9692e1b12a76c6',
-                'https://linux.oracle.com/cve/CVE-2023-0216.html',
-                'https://linux.oracle.com/errata/ELSA-2023-12152.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-0216',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0003',
-                'https://rustsec.org/advisories/RUSTSEC-2023-0011.html',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://ubuntu.com/security/notices/USN-5844-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-0216',
-                'https://www.openssl.org/news/secadv/20230207.txt'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: invalid pointer dereference in d2i_PKCS7 functions'
-            },
-            {
-              'cve':  'CVE-2023-0217',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'nvd': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-476'
-              ],
-              'description':   'An invalid pointer dereference on read can be triggered when an\napplication tries to check a malformed DSA public key by the\nEVP_PKEY_public_check() function. This will most likely lead\nto an application crash. This function can be called on public\nkeys supplied from untrusted sources which could allow an attacker\nto cause a denial of service attack.\n\nThe TLS implementation in OpenSSL does not call this function\nbut applications might call the function if there are additional\nsecurity requirements imposed by standards such as FIPS 140-3.',
-              'diffID':        'sha256:0e3395c9c4d69931dec5029f4c593bdabd1bf4cc1c06b7d568ee72ea29783132',
-              'fixedVersions': [
-                '3.0.8-r0'
-              ],
-              'installedVersion': '3.0.7-r2',
-              'packageName':      'libcrypto3',
-              'purl':             'pkg:apk/alpine/libcrypto3@3.0.7-r2?arch=ppc64le&distro=3.17.1',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2023:0946',
-                'https://access.redhat.com/security/cve/CVE-2023-0217',
-                'https://bugzilla.redhat.com/2164440',
-                'https://bugzilla.redhat.com/2164487',
-                'https://bugzilla.redhat.com/2164488',
-                'https://bugzilla.redhat.com/2164492',
-                'https://bugzilla.redhat.com/2164494',
-                'https://bugzilla.redhat.com/2164497',
-                'https://bugzilla.redhat.com/2164499',
-                'https://bugzilla.redhat.com/2164500',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144000',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144003',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144006',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144008',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144010',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144012',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144015',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144017',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144019',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2145170',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2158412',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164440',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164487',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164488',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164492',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164497',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164499',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164500',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4203',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4304',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4450',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0215',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0216',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0217',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0286',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0401',
-                'https://errata.almalinux.org/9/ALSA-2023-0946.html',
-                'https://errata.rockylinux.org/RLSA-2023:0946',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=23985bac83fd50c8e29431009302b5442f985096',
-                'https://linux.oracle.com/cve/CVE-2023-0217.html',
-                'https://linux.oracle.com/errata/ELSA-2023-12152.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-0217',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0003',
-                'https://rustsec.org/advisories/RUSTSEC-2023-0012.html',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://ubuntu.com/security/notices/USN-5844-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-0217',
-                'https://www.openssl.org/news/secadv/20230207.txt'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: NULL dereference validating DSA public key'
-            },
-            {
-              'cve':  'CVE-2023-0286',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '7.4',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H'
-                },
-                'nvd': {
-                  'v3score':  '7.4',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.4',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-843'
-              ],
-              'description':   'There is a type confusion vulnerability relating to X.400 address processing\ninside an X.509 GeneralName. X.400 addresses were parsed as an ASN1_STRING but\nthe public structure definition for GENERAL_NAME incorrectly specified the type\nof the x400Address field as ASN1_TYPE. This field is subsequently interpreted by\nthe OpenSSL function GENERAL_NAME_cmp as an ASN1_TYPE rather than an\nASN1_STRING.\n\nWhen CRL checking is enabled (i.e. the application sets the\nX509_V_FLAG_CRL_CHECK flag), this vulnerability may allow an attacker to pass\narbitrary pointers to a memcmp call, enabling them to read memory contents or\nenact a denial of service. In most cases, the attack requires the attacker to\nprovide both the certificate chain and CRL, neither of which need to have a\nvalid signature. If the attacker only controls one of these inputs, the other\ninput must already contain an X.400 address as a CRL distribution point, which\nis uncommon. As such, this vulnerability is most likely to only affect\napplications which have implemented their own functionality for retrieving CRLs\nover a network.',
-              'diffID':        'sha256:0e3395c9c4d69931dec5029f4c593bdabd1bf4cc1c06b7d568ee72ea29783132',
-              'fixedVersions': [
-                '3.0.8-r0'
-              ],
-              'installedVersion': '3.0.7-r2',
-              'packageName':      'libcrypto3',
-              'purl':             'pkg:apk/alpine/libcrypto3@3.0.7-r2?arch=ppc64le&distro=3.17.1',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2025:7937',
-                'https://access.redhat.com/security/cve/CVE-2023-0286',
-                'https://access.redhat.com/security/cve/cve-2023-0286',
-                'https://bugzilla.redhat.com/2164440',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144000',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144003',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144006',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144008',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144010',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144012',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144015',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144017',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144019',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2145170',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2158412',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164440',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164487',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164488',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164492',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164497',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164499',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164500',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4203',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4304',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4450',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0215',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0216',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0217',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0286',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0401',
-                'https://errata.almalinux.org/9/ALSA-2025-7937.html',
-                'https://errata.rockylinux.org/RLSA-2023:0946',
-                'https://ftp.openbsd.org/pub/OpenBSD/LibreSSL/libressl-3.6.2-relnotes.txt',
-                'https://ftp.openbsd.org/pub/OpenBSD/patches/7.2/common/018_x509.patch.sig',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=2c6c9d439b484e1ba9830d8454a34fa4f80fdfe9',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=2f7530077e0ef79d98718138716bc51ca0cad658',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=fd2af07dc083a350c959147097003a14a5e8ac4d',
-                'https://github.com/pyca/cryptography',
-                'https://github.com/pyca/cryptography/security/advisories/GHSA-x4qr-2fvf-3mr5',
-                'https://linux.oracle.com/cve/CVE-2023-0286.html',
-                'https://linux.oracle.com/errata/ELSA-2025-7937.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-0286',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0003',
-                'https://rustsec.org/advisories/RUSTSEC-2023-0006.html',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://ubuntu.com/security/notices/USN-5844-1',
-                'https://ubuntu.com/security/notices/USN-5845-1',
-                'https://ubuntu.com/security/notices/USN-5845-2',
-                'https://ubuntu.com/security/notices/USN-6564-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-0286',
-                'https://www.openssl.org/news/secadv/20230207.txt'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: X.400 address type confusion in X.509 GeneralName'
-            },
-            {
-              'cve':  'CVE-2023-0401',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'nvd': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-476'
-              ],
-              'description':   'A NULL pointer can be dereferenced when signatures are being\nverified on PKCS7 signed or signedAndEnveloped data. In case the hash\nalgorithm used for the signature is known to the OpenSSL library but\nthe implementation of the hash algorithm is not available the digest\ninitialization will fail. There is a missing check for the return\nvalue from the initialization function which later leads to invalid\nusage of the digest API most likely leading to a crash.\n\nThe unavailability of an algorithm can be caused by using FIPS\nenabled configuration of providers or more commonly by not loading\nthe legacy provider.\n\nPKCS7 data is processed by the SMIME library calls and also by the\ntime stamp (TS) library calls. The TLS implementation in OpenSSL does\nnot call these functions however third party applications would be\naffected if they call these functions to verify signatures on untrusted\ndata.',
-              'diffID':        'sha256:0e3395c9c4d69931dec5029f4c593bdabd1bf4cc1c06b7d568ee72ea29783132',
-              'fixedVersions': [
-                '3.0.8-r0'
-              ],
-              'installedVersion': '3.0.7-r2',
-              'packageName':      'libcrypto3',
-              'purl':             'pkg:apk/alpine/libcrypto3@3.0.7-r2?arch=ppc64le&distro=3.17.1',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2023:0946',
-                'https://access.redhat.com/security/cve/CVE-2023-0401',
-                'https://bugzilla.redhat.com/2164440',
-                'https://bugzilla.redhat.com/2164487',
-                'https://bugzilla.redhat.com/2164488',
-                'https://bugzilla.redhat.com/2164492',
-                'https://bugzilla.redhat.com/2164494',
-                'https://bugzilla.redhat.com/2164497',
-                'https://bugzilla.redhat.com/2164499',
-                'https://bugzilla.redhat.com/2164500',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144000',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144003',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144006',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144008',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144010',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144012',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144015',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144017',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144019',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2145170',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2158412',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164440',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164487',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164488',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164492',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164497',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164499',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164500',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4203',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4304',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4450',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0215',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0216',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0217',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0286',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0401',
-                'https://errata.almalinux.org/9/ALSA-2023-0946.html',
-                'https://errata.rockylinux.org/RLSA-2023:0946',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=d3b6dfd70db844c4499bec6ad6601623a565e674',
-                'https://github.com/alexcrichton/openssl-src-rs',
-                'https://linux.oracle.com/cve/CVE-2023-0401.html',
-                'https://linux.oracle.com/errata/ELSA-2023-12152.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-0401',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0003',
-                'https://rustsec.org/advisories/RUSTSEC-2023-0013.html',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://ubuntu.com/security/notices/USN-5844-1',
-                'https://ubuntu.com/security/notices/USN-6564-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-0401',
-                'https://www.openssl.org/news/secadv/20230207.txt'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: NULL dereference during PKCS7 data verification'
-            },
-            {
-              'cve':  'CVE-2023-0464',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-295'
-              ],
-              'description':   "A security vulnerability has been identified in all supported versions\n\nof OpenSSL related to the verification of X.509 certificate chains\nthat include policy constraints.  Attackers may be able to exploit this\nvulnerability by creating a malicious certificate chain that triggers\nexponential use of computational resources, leading to a denial-of-service\n(DoS) attack on affected systems.\n\nPolicy processing is disabled by default but can be enabled by passing\nthe `-policy' argument to the command line utilities or by calling the\n`X509_VERIFY_PARAM_set1_policies()' function.",
-              'diffID':        'sha256:0e3395c9c4d69931dec5029f4c593bdabd1bf4cc1c06b7d568ee72ea29783132',
-              'fixedVersions': [
-                '3.0.8-r1'
-              ],
-              'installedVersion': '3.0.7-r2',
-              'packageName':      'libcrypto3',
-              'purl':             'pkg:apk/alpine/libcrypto3@3.0.7-r2?arch=ppc64le&distro=3.17.1',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2023:3722',
-                'https://access.redhat.com/security/cve/CVE-2023-0464',
-                'https://bugzilla.redhat.com/2181082',
-                'https://bugzilla.redhat.com/2182561',
-                'https://bugzilla.redhat.com/2182565',
-                'https://bugzilla.redhat.com/2188461',
-                'https://bugzilla.redhat.com/2207947',
-                'https://errata.almalinux.org/9/ALSA-2023-3722.html',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=2017771e2db3e2b96f89bbe8766c3209f6a99545',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=2dcd4f1e3115f38cefa43e3efbe9b801c27e642e',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=879f7080d7e141f415c79eaa3a8ac4a3dad0348b',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=959c59c7a0164117e7f8366466a32bb1f8d77ff1',
-                'https://linux.oracle.com/cve/CVE-2023-0464.html',
-                'https://linux.oracle.com/errata/ELSA-2023-3722.html',
-                'https://lists.debian.org/debian-lts-announce/2023/06/msg00011.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-0464',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://security.netapp.com/advisory/ntap-20230406-0006/',
-                'https://security.netapp.com/advisory/ntap-20240621-0006/',
-                'https://ubuntu.com/security/notices/USN-6039-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.couchbase.com/alerts/',
-                'https://www.cve.org/CVERecord?id=CVE-2023-0464',
-                'https://www.debian.org/security/2023/dsa-5417',
-                'https://www.openssl.org/news/secadv/20230322.txt'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: Denial of service by excessive resource usage in verifying X509 policy constraints'
-            },
-            {
-              'cve':  'CVE-2023-5363',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N'
-                },
-                'redhat': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-684'
-              ],
-              'description':   "Issue summary: A bug has been identified in the processing of key and\ninitialisation vector (IV) lengths.  This can lead to potential truncation\nor overruns during the initialisation of some symmetric ciphers.\n\nImpact summary: A truncation in the IV can result in non-uniqueness,\nwhich could result in loss of confidentiality for some cipher modes.\n\nWhen calling EVP_EncryptInit_ex2(), EVP_DecryptInit_ex2() or\nEVP_CipherInit_ex2() the provided OSSL_PARAM array is processed after\nthe key and IV have been established.  Any alterations to the key length,\nvia the \"keylen\" parameter or the IV length, via the \"ivlen\" parameter,\nwithin the OSSL_PARAM array will not take effect as intended, potentially\ncausing truncation or overreading of these values.  The following ciphers\nand cipher modes are impacted: RC2, RC4, RC5, CCM, GCM and OCB.\n\nFor the CCM, GCM and OCB cipher modes, truncation of the IV can result in\nloss of confidentiality.  For example, when following NIST's SP 800-38D\nsection 8.2.1 guidance for constructing a deterministic IV for AES in\nGCM mode, truncation of the counter portion could lead to IV reuse.\n\nBoth truncations and overruns of the key and overruns of the IV will\nproduce incorrect results and could, in some cases, trigger a memory\nexception.  However, these issues are not currently assessed as security\ncritical.\n\nChanging the key and/or IV lengths is not considered to be a common operation\nand the vulnerable API was recently introduced. Furthermore it is likely that\napplication developers will have spotted this problem during testing since\ndecryption would fail unless both peers in the communication were similarly\nvulnerable. For these reasons we expect the probability of an application being\nvulnerable to this to be quite low. However if an application is vulnerable then\nthis issue is considered very serious. For these reasons we have assessed this\nissue as Moderate severity overall.\n\nThe OpenSSL SSL/TLS implementation is not affected by this issue.\n\nThe OpenSSL 3.0 and 3.1 FIPS providers are not affected by this because\nthe issue lies outside of the FIPS provider boundary.\n\nOpenSSL 3.1 and 3.0 are vulnerable to this issue.",
-              'diffID':        'sha256:0e3395c9c4d69931dec5029f4c593bdabd1bf4cc1c06b7d568ee72ea29783132',
-              'fixedVersions': [
-                '3.0.12-r0'
-              ],
-              'installedVersion': '3.0.7-r2',
-              'packageName':      'libcrypto3',
-              'purl':             'pkg:apk/alpine/libcrypto3@3.0.7-r2?arch=ppc64le&distro=3.17.1',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2023/10/24/1',
-                'https://access.redhat.com/errata/RHSA-2024:0310',
-                'https://access.redhat.com/security/cve/CVE-2023-5363',
-                'https://bugzilla.redhat.com/2243839',
-                'https://errata.almalinux.org/9/ALSA-2024-0310.html',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=0df40630850fb2740e6be6890bb905d3fc623b2d',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=5f69f5c65e483928c4b28ed16af6e5742929f1ee',
-                'https://linux.oracle.com/cve/CVE-2023-5363.html',
-                'https://linux.oracle.com/errata/ELSA-2024-12093.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-5363',
-                'https://security.netapp.com/advisory/ntap-20231027-0010/',
-                'https://security.netapp.com/advisory/ntap-20240201-0003/',
-                'https://security.netapp.com/advisory/ntap-20240201-0004/',
-                'https://security.netapp.com/advisory/ntap-20241108-0002/',
-                'https://ubuntu.com/security/notices/USN-6450-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-5363',
-                'https://www.debian.org/security/2023/dsa-5532',
-                'https://www.openssl.org/news/secadv/20231024.txt'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: Incorrect cipher key and IV length processing'
-            },
-            {
-              'cve':  'CVE-2024-6119',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-843'
-              ],
-              'description':   "Issue summary: Applications performing certificate name checks (e.g., TLS\nclients checking server certificates) may attempt to read an invalid memory\naddress resulting in abnormal termination of the application process.\n\nImpact summary: Abnormal termination of an application can a cause a denial of\nservice.\n\nApplications performing certificate name checks (e.g., TLS clients checking\nserver certificates) may attempt to read an invalid memory address when\ncomparing the expected name with an `otherName` subject alternative name of an\nX.509 certificate. This may result in an exception that terminates the\napplication program.\n\nNote that basic certificate chain validation (signatures, dates, ...) is not\naffected, the denial of service can occur only when the application also\nspecifies an expected DNS name, Email address or IP address.\n\nTLS servers rarely solicit client certificates, and even when they do, they\ngenerally don't perform a name check against a reference identifier (expected\nidentity), but rather extract the presented identity after checking the\ncertificate chain.  So TLS servers are generally not affected and the severity\nof the issue is Moderate.\n\nThe FIPS modules in 3.3, 3.2, 3.1 and 3.0 are not affected by this issue.",
-              'diffID':        'sha256:0e3395c9c4d69931dec5029f4c593bdabd1bf4cc1c06b7d568ee72ea29783132',
-              'fixedVersions': [
-                '3.0.15-r0'
-              ],
-              'installedVersion': '3.0.7-r2',
-              'packageName':      'libcrypto3',
-              'purl':             'pkg:apk/alpine/libcrypto3@3.0.7-r2?arch=ppc64le&distro=3.17.1',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2024/09/03/4',
-                'https://access.redhat.com/errata/RHSA-2024:8935',
-                'https://access.redhat.com/security/cve/CVE-2024-6119',
-                'https://bugzilla.redhat.com/2306158',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2306158',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-6119',
-                'https://errata.almalinux.org/9/ALSA-2024-8935.html',
-                'https://errata.rockylinux.org/RLSA-2024:6783',
-                'https://github.com/openssl/openssl/commit/05f360d9e849a1b277db628f1f13083a7f8dd04f',
-                'https://github.com/openssl/openssl/commit/06d1dc3fa96a2ba5a3e22735a033012aadc9f0d6',
-                'https://github.com/openssl/openssl/commit/621f3729831b05ee828a3203eddb621d014ff2b2',
-                'https://github.com/openssl/openssl/commit/7dfcee2cd2a63b2c64b9b4b0850be64cb695b0a0',
-                'https://github.com/openssl/openssl/security/advisories/GHSA-5qrj-vq78-58fj',
-                'https://linux.oracle.com/cve/CVE-2024-6119.html',
-                'https://linux.oracle.com/errata/ELSA-2024-8935.html',
-                'https://lists.freebsd.org/archives/freebsd-security/2024-September/000303.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2024-6119',
-                'https://openssl-library.org/news/secadv/20240903.txt',
-                'https://security.netapp.com/advisory/ntap-20240912-0001/',
-                'https://ubuntu.com/security/notices/USN-6986-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2024-6119'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: Possible denial of service in X.509 name checks'
-            },
-            {
-              'cve':  'CVE-2022-4203',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '9.1',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H'
-                },
-                'nvd': {
-                  'v3score':  '4.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '4.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-125'
-              ],
-              'description':   'A read buffer overrun can be triggered in X.509 certificate verification,\nspecifically in name constraint checking. Note that this occurs\nafter certificate chain signature verification and requires either a\nCA to have signed the malicious certificate or for the application to\ncontinue certificate verification despite failure to construct a path\nto a trusted issuer.\n\nThe read buffer overrun might result in a crash which could lead to\na denial of service attack. In theory it could also result in the disclosure\nof private memory contents (such as private keys, or sensitive plaintext)\nalthough we are not aware of any working exploit leading to memory\ncontents disclosure as of the time of release of this advisory.\n\nIn a TLS client, this can be triggered by connecting to a malicious\nserver. In a TLS server, this can be triggered if the server requests\nclient authentication and a malicious client connects.',
-              'diffID':        'sha256:0e3395c9c4d69931dec5029f4c593bdabd1bf4cc1c06b7d568ee72ea29783132',
-              'fixedVersions': [
-                '3.0.8-r0'
-              ],
-              'installedVersion': '3.0.7-r2',
-              'packageName':      'libcrypto3',
-              'purl':             'pkg:apk/alpine/libcrypto3@3.0.7-r2?arch=ppc64le&distro=3.17.1',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2023:0946',
-                'https://access.redhat.com/security/cve/CVE-2022-4203',
-                'https://bugzilla.redhat.com/2164440',
-                'https://bugzilla.redhat.com/2164487',
-                'https://bugzilla.redhat.com/2164488',
-                'https://bugzilla.redhat.com/2164492',
-                'https://bugzilla.redhat.com/2164494',
-                'https://bugzilla.redhat.com/2164497',
-                'https://bugzilla.redhat.com/2164499',
-                'https://bugzilla.redhat.com/2164500',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144000',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144003',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144006',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144008',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144010',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144012',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144015',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144017',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144019',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2145170',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2158412',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164440',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164487',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164488',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164492',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164497',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164499',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164500',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4203',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4304',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4450',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0215',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0216',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0217',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0286',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0401',
-                'https://errata.almalinux.org/9/ALSA-2023-0946.html',
-                'https://errata.rockylinux.org/RLSA-2023:0946',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=c927a3492698c254637da836762f9b1f86cffabc',
-                'https://linux.oracle.com/cve/CVE-2022-4203.html',
-                'https://linux.oracle.com/errata/ELSA-2023-12152.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2022-4203',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0003',
-                'https://rustsec.org/advisories/RUSTSEC-2023-0008.html',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://ubuntu.com/security/notices/USN-5844-1',
-                'https://www.cve.org/CVERecord?id=CVE-2022-4203',
-                'https://www.openssl.org/news/secadv/20230207.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: read buffer overflow in X.509 certificate verification'
-            },
-            {
-              'cve':  'CVE-2022-4304',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N'
-                },
-                'nvd': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N'
-                },
-                'redhat': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-203'
-              ],
-              'description':   'A timing based side channel exists in the OpenSSL RSA Decryption implementation\nwhich could be sufficient to recover a plaintext across a network in a\nBleichenbacher style attack. To achieve a successful decryption an attacker\nwould have to be able to send a very large number of trial messages for\ndecryption. The vulnerability affects all RSA padding modes: PKCS#1 v1.5,\nRSA-OEAP and RSASVE.\n\nFor example, in a TLS connection, RSA is commonly used by a client to send an\nencrypted pre-master secret to the server. An attacker that had observed a\ngenuine connection between a client and a server could use this flaw to send\ntrial messages to the server and record the time taken to process them. After a\nsufficiently large number of messages the attacker could recover the pre-master\nsecret used for the original connection and thus be able to decrypt the\napplication data sent over that connection.',
-              'diffID':        'sha256:0e3395c9c4d69931dec5029f4c593bdabd1bf4cc1c06b7d568ee72ea29783132',
-              'fixedVersions': [
-                '3.0.8-r0'
-              ],
-              'installedVersion': '3.0.7-r2',
-              'packageName':      'libcrypto3',
-              'purl':             'pkg:apk/alpine/libcrypto3@3.0.7-r2?arch=ppc64le&distro=3.17.1',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2023:2165',
-                'https://access.redhat.com/security/cve/CVE-2022-4304',
-                'https://bugzilla.redhat.com/1960321',
-                'https://bugzilla.redhat.com/2164440',
-                'https://bugzilla.redhat.com/2164487',
-                'https://bugzilla.redhat.com/2164492',
-                'https://bugzilla.redhat.com/2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144000',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144003',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144006',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144008',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144010',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144012',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144015',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144017',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144019',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2145170',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2158412',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164440',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164487',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164488',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164492',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164497',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164499',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164500',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4203',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4304',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4450',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0215',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0216',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0217',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0286',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0401',
-                'https://errata.almalinux.org/9/ALSA-2023-2165.html',
-                'https://errata.rockylinux.org/RLSA-2023:0946',
-                'https://linux.oracle.com/cve/CVE-2022-4304.html',
-                'https://linux.oracle.com/errata/ELSA-2023-32791.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2022-4304',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0003',
-                'https://rustsec.org/advisories/RUSTSEC-2023-0007.html',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://ubuntu.com/security/notices/USN-5844-1',
-                'https://ubuntu.com/security/notices/USN-6564-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2022-4304',
-                'https://www.openssl.org/news/secadv/20230207.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: timing attack in RSA Decryption implementation'
-            },
-            {
-              'cve':  'CVE-2023-0465',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N'
-                },
-                'redhat': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-295'
-              ],
-              'description':   "Applications that use a non-default option when verifying certificates may be\nvulnerable to an attack from a malicious CA to circumvent certain checks.\n\nInvalid certificate policies in leaf certificates are silently ignored by\nOpenSSL and other certificate policy checks are skipped for that certificate.\nA malicious CA could use this to deliberately assert invalid certificate policies\nin order to circumvent policy checking on the certificate altogether.\n\nPolicy processing is disabled by default but can be enabled by passing\nthe `-policy' argument to the command line utilities or by calling the\n`X509_VERIFY_PARAM_set1_policies()' function.",
-              'diffID':        'sha256:0e3395c9c4d69931dec5029f4c593bdabd1bf4cc1c06b7d568ee72ea29783132',
-              'fixedVersions': [
-                '3.0.8-r2'
-              ],
-              'installedVersion': '3.0.7-r2',
-              'packageName':      'libcrypto3',
-              'purl':             'pkg:apk/alpine/libcrypto3@3.0.7-r2?arch=ppc64le&distro=3.17.1',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2023:3722',
-                'https://access.redhat.com/security/cve/CVE-2023-0465',
-                'https://bugzilla.redhat.com/2181082',
-                'https://bugzilla.redhat.com/2182561',
-                'https://bugzilla.redhat.com/2182565',
-                'https://bugzilla.redhat.com/2188461',
-                'https://bugzilla.redhat.com/2207947',
-                'https://errata.almalinux.org/9/ALSA-2023-3722.html',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=10325176f3d3e98c6e2b3bf5ab1e3b334de6947a',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=1dd43e0709fece299b15208f36cc7c76209ba0bb',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=b013765abfa80036dc779dd0e50602c57bb3bf95',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=facfb1ab745646e97a1920977ae4a9965ea61d5c',
-                'https://linux.oracle.com/cve/CVE-2023-0465.html',
-                'https://linux.oracle.com/errata/ELSA-2023-3722.html',
-                'https://lists.debian.org/debian-lts-announce/2023/06/msg00011.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-0465',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://security.netapp.com/advisory/ntap-20230414-0001/',
-                'https://ubuntu.com/security/notices/USN-6039-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-0465',
-                'https://www.debian.org/security/2023/dsa-5417',
-                'https://www.openssl.org/news/secadv/20230328.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: Invalid certificate policies in leaf certificates are silently ignored'
-            },
-            {
-              'cve':  'CVE-2023-0466',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N'
-                },
-                'redhat': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-295'
-              ],
-              'description':   'The function X509_VERIFY_PARAM_add0_policy() is documented to\nimplicitly enable the certificate policy check when doing certificate\nverification. However the implementation of the function does not\nenable the check which allows certificates with invalid or incorrect\npolicies to pass the certificate verification.\n\nAs suddenly enabling the policy check could break existing deployments it was\ndecided to keep the existing behavior of the X509_VERIFY_PARAM_add0_policy()\nfunction.\n\nInstead the applications that require OpenSSL to perform certificate\npolicy check need to use X509_VERIFY_PARAM_set1_policies() or explicitly\nenable the policy check by calling X509_VERIFY_PARAM_set_flags() with\nthe X509_V_FLAG_POLICY_CHECK flag argument.\n\nCertificate policy checks are disabled by default in OpenSSL and are not\ncommonly used by applications.',
-              'diffID':        'sha256:0e3395c9c4d69931dec5029f4c593bdabd1bf4cc1c06b7d568ee72ea29783132',
-              'fixedVersions': [
-                '3.0.8-r3'
-              ],
-              'installedVersion': '3.0.7-r2',
-              'packageName':      'libcrypto3',
-              'purl':             'pkg:apk/alpine/libcrypto3@3.0.7-r2?arch=ppc64le&distro=3.17.1',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2023/09/28/4',
-                'https://access.redhat.com/errata/RHSA-2023:3722',
-                'https://access.redhat.com/security/cve/CVE-2023-0466',
-                'https://bugzilla.redhat.com/2181082',
-                'https://bugzilla.redhat.com/2182561',
-                'https://bugzilla.redhat.com/2182565',
-                'https://bugzilla.redhat.com/2188461',
-                'https://bugzilla.redhat.com/2207947',
-                'https://errata.almalinux.org/9/ALSA-2023-3722.html',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=0d16b7e99aafc0b4a6d729eec65a411a7e025f0a',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=51e8a84ce742db0f6c70510d0159dad8f7825908',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=73398dea26de9899fb4baa94098ad0a61f435c72',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=fc814a30fc4f0bc54fcea7d9a7462f5457aab061',
-                'https://linux.oracle.com/cve/CVE-2023-0466.html',
-                'https://linux.oracle.com/errata/ELSA-2023-3722.html',
-                'https://lists.debian.org/debian-lts-announce/2023/06/msg00011.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-0466',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://security.netapp.com/advisory/ntap-20230414-0001/',
-                'https://ubuntu.com/security/notices/USN-6039-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-0466',
-                'https://www.debian.org/security/2023/dsa-5417',
-                'https://www.openssl.org/news/secadv/20230328.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: Certificate policy check not enabled'
-            },
-            {
-              'cve':  'CVE-2023-1255',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '5.1',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-125'
-              ],
-              'description':   'Issue summary: The AES-XTS cipher decryption implementation for 64 bit ARM\nplatform contains a bug that could cause it to read past the input buffer,\nleading to a crash.\n\nImpact summary: Applications that use the AES-XTS algorithm on the 64 bit ARM\nplatform can crash in rare circumstances. The AES-XTS algorithm is usually\nused for disk encryption.\n\nThe AES-XTS cipher decryption implementation for 64 bit ARM platform will read\npast the end of the ciphertext buffer if the ciphertext size is 4 mod 5 in 16\nbyte blocks, e.g. 144 bytes or 1024 bytes. If the memory after the ciphertext\nbuffer is unmapped, this will trigger a crash which results in a denial of\nservice.\n\nIf an attacker can control the size and location of the ciphertext buffer\nbeing decrypted by an application using AES-XTS on 64 bit ARM, the\napplication is affected. This is fairly unlikely making this issue\na Low severity one.',
-              'diffID':        'sha256:0e3395c9c4d69931dec5029f4c593bdabd1bf4cc1c06b7d568ee72ea29783132',
-              'fixedVersions': [
-                '3.0.8-r4'
-              ],
-              'installedVersion': '3.0.7-r2',
-              'packageName':      'libcrypto3',
-              'purl':             'pkg:apk/alpine/libcrypto3@3.0.7-r2?arch=ppc64le&distro=3.17.1',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2023:3722',
-                'https://access.redhat.com/security/cve/CVE-2023-1255',
-                'https://bugzilla.redhat.com/2181082',
-                'https://bugzilla.redhat.com/2182561',
-                'https://bugzilla.redhat.com/2182565',
-                'https://bugzilla.redhat.com/2188461',
-                'https://bugzilla.redhat.com/2207947',
-                'https://errata.almalinux.org/9/ALSA-2023-3722.html',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=02ac9c9420275868472f33b01def01218742b8bb',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=bc2f61ad70971869b242fc1cb445b98bad50074a',
-                'https://linux.oracle.com/cve/CVE-2023-1255.html',
-                'https://linux.oracle.com/errata/ELSA-2023-3722.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-1255',
-                'https://security.netapp.com/advisory/ntap-20230908-0006/',
-                'https://ubuntu.com/security/notices/USN-6119-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-1255',
-                'https://www.openssl.org/news/secadv/20230419.txt',
-                'https://www.openssl.org/news/secadv/20230420.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: Input buffer over-read in AES-XTS implementation on 64 bit ARM'
-            },
-            {
-              'cve':  'CVE-2023-2650',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '6.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-770'
-              ],
-              'description':   "Issue summary: Processing some specially crafted ASN.1 object identifiers or\ndata containing them may be very slow.\n\nImpact summary: Applications that use OBJ_obj2txt() directly, or use any of\nthe OpenSSL subsystems OCSP, PKCS7/SMIME, CMS, CMP/CRMF or TS with no message\nsize limit may experience notable to very long delays when processing those\nmessages, which may lead to a Denial of Service.\n\nAn OBJECT IDENTIFIER is composed of a series of numbers - sub-identifiers -\nmost of which have no size limit.  OBJ_obj2txt() may be used to translate\nan ASN.1 OBJECT IDENTIFIER given in DER encoding form (using the OpenSSL\ntype ASN1_OBJECT) to its canonical numeric text form, which are the\nsub-identifiers of the OBJECT IDENTIFIER in decimal form, separated by\nperiods.\n\nWhen one of the sub-identifiers in the OBJECT IDENTIFIER is very large\n(these are sizes that are seen as absurdly large, taking up tens or hundreds\nof KiBs), the translation to a decimal number in text may take a very long\ntime.  The time complexity is O(n^2) with 'n' being the size of the\nsub-identifiers in bytes (*).\n\nWith OpenSSL 3.0, support to fetch cryptographic algorithms using names /\nidentifiers in string form was introduced.  This includes using OBJECT\nIDENTIFIERs in canonical numeric text form as identifiers for fetching\nalgorithms.\n\nSuch OBJECT IDENTIFIERs may be received through the ASN.1 structure\nAlgorithmIdentifier, which is commonly used in multiple protocols to specify\nwhat cryptographic algorithm should be used to sign or verify, encrypt or\ndecrypt, or digest passed data.\n\nApplications that call OBJ_obj2txt() directly with untrusted data are\naffected, with any version of OpenSSL.  If the use is for the mere purpose\nof display, the severity is considered low.\n\nIn OpenSSL 3.0 and newer, this affects the subsystems OCSP, PKCS7/SMIME,\nCMS, CMP/CRMF or TS.  It also impacts anything that processes X.509\ncertificates, including simple things like verifying its signature.\n\nThe impact on TLS is relatively low, because all versions of OpenSSL have a\n100KiB limit on the peer's certificate chain.  Additionally, this only\nimpacts clients, or servers that have explicitly enabled client\nauthentication.\n\nIn OpenSSL 1.1.1 and 1.0.2, this only affects displaying diverse objects,\nsuch as X.509 certificates.  This is assumed to not happen in such a way\nthat it would cause a Denial of Service, so these versions are considered\nnot affected by this issue in such a way that it would be cause for concern,\nand the severity is therefore considered low.",
-              'diffID':        'sha256:0e3395c9c4d69931dec5029f4c593bdabd1bf4cc1c06b7d568ee72ea29783132',
-              'fixedVersions': [
-                '3.0.9-r0'
-              ],
-              'installedVersion': '3.0.7-r2',
-              'packageName':      'libcrypto3',
-              'purl':             'pkg:apk/alpine/libcrypto3@3.0.7-r2?arch=ppc64le&distro=3.17.1',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2023/05/30/1',
-                'https://access.redhat.com/errata/RHSA-2023:6330',
-                'https://access.redhat.com/security/cve/CVE-2023-2650',
-                'https://bugzilla.redhat.com/1858038',
-                'https://bugzilla.redhat.com/2207947',
-                'https://errata.almalinux.org/9/ALSA-2023-6330.html',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=423a2bc737a908ad0c77bda470b2b59dc879936b',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=853c5e56ee0b8650c73140816bb8b91d6163422c',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=9e209944b35cf82368071f160a744b6178f9b098',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=db779b0e10b047f2585615e0b8f2acdf21f8544a',
-                'https://linux.oracle.com/cve/CVE-2023-2650.html',
-                'https://linux.oracle.com/errata/ELSA-2023-6330.html',
-                'https://lists.debian.org/debian-lts-announce/2023/06/msg00011.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-2650',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0009',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://security.netapp.com/advisory/ntap-20230703-0001/',
-                'https://security.netapp.com/advisory/ntap-20231027-0009/',
-                'https://ubuntu.com/security/notices/USN-6119-1',
-                'https://ubuntu.com/security/notices/USN-6188-1',
-                'https://ubuntu.com/security/notices/USN-6672-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-2650',
-                'https://www.debian.org/security/2023/dsa-5417',
-                'https://www.openssl.org/news/secadv/20230530.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: Possible DoS translating ASN.1 object identifiers'
-            },
-            {
-              'cve':  'CVE-2023-2975',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N'
-                },
-                'redhat': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-354',
-                'CWE-287'
-              ],
-              'description':   'Issue summary: The AES-SIV cipher implementation contains a bug that causes\nit to ignore empty associated data entries which are unauthenticated as\na consequence.\n\nImpact summary: Applications that use the AES-SIV algorithm and want to\nauthenticate empty data entries as associated data can be misled by removing,\nadding or reordering such empty entries as these are ignored by the OpenSSL\nimplementation. We are currently unaware of any such applications.\n\nThe AES-SIV algorithm allows for authentication of multiple associated\ndata entries along with the encryption. To authenticate empty data the\napplication has to call EVP_EncryptUpdate() (or EVP_CipherUpdate()) with\nNULL pointer as the output buffer and 0 as the input buffer length.\nThe AES-SIV implementation in OpenSSL just returns success for such a call\ninstead of performing the associated data authentication operation.\nThe empty data thus will not be authenticated.\n\nAs this issue does not affect non-empty associated data authentication and\nwe expect it to be rare for an application to use empty associated data\nentries this is qualified as Low severity issue.',
-              'diffID':        'sha256:0e3395c9c4d69931dec5029f4c593bdabd1bf4cc1c06b7d568ee72ea29783132',
-              'fixedVersions': [
-                '3.0.9-r2'
-              ],
-              'installedVersion': '3.0.7-r2',
-              'packageName':      'libcrypto3',
-              'purl':             'pkg:apk/alpine/libcrypto3@3.0.7-r2?arch=ppc64le&distro=3.17.1',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2023/07/15/1',
-                'http://www.openwall.com/lists/oss-security/2023/07/19/5',
-                'https://access.redhat.com/errata/RHSA-2024:2447',
-                'https://access.redhat.com/security/cve/CVE-2023-2975',
-                'https://bugzilla.redhat.com/2223016',
-                'https://bugzilla.redhat.com/2224962',
-                'https://bugzilla.redhat.com/2227852',
-                'https://bugzilla.redhat.com/2248616',
-                'https://bugzilla.redhat.com/2257571',
-                'https://bugzilla.redhat.com/2258502',
-                'https://bugzilla.redhat.com/2259944',
-                'https://errata.almalinux.org/9/ALSA-2024-2447.html',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=00e2f5eea29994d19293ec4e8c8775ba73678598',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=6a83f0c958811f07e0d11dfc6b5a6a98edfd5bdc',
-                'https://linux.oracle.com/cve/CVE-2023-2975.html',
-                'https://linux.oracle.com/errata/ELSA-2024-2447.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-2975',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://security.netapp.com/advisory/ntap-20230725-0004/',
-                'https://ubuntu.com/security/notices/USN-6450-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-2975',
-                'https://www.openssl.org/news/secadv/20230714.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: AES-SIV cipher implementation contains a bug that causes it to ignore empty associated data entries'
-            },
-            {
-              'cve':  'CVE-2023-3446',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L'
-                },
-                'redhat': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L'
-                }
-              },
-              'cwes': [
-                'CWE-606',
-                'CWE-1333'
-              ],
-              'description':   "Issue summary: Checking excessively long DH keys or parameters may be very slow.\n\nImpact summary: Applications that use the functions DH_check(), DH_check_ex()\nor EVP_PKEY_param_check() to check a DH key or DH parameters may experience long\ndelays. Where the key or parameters that are being checked have been obtained\nfrom an untrusted source this may lead to a Denial of Service.\n\nThe function DH_check() performs various checks on DH parameters. One of those\nchecks confirms that the modulus ('p' parameter) is not too large. Trying to use\na very large modulus is slow and OpenSSL will not normally use a modulus which\nis over 10,000 bits in length.\n\nHowever the DH_check() function checks numerous aspects of the key or parameters\nthat have been supplied. Some of those checks use the supplied modulus value\neven if it has already been found to be too large.\n\nAn application that calls DH_check() and supplies a key or parameters obtained\nfrom an untrusted source could be vulernable to a Denial of Service attack.\n\nThe function DH_check() is itself called by a number of other OpenSSL functions.\nAn application calling any of those other functions may similarly be affected.\nThe other functions affected by this are DH_check_ex() and\nEVP_PKEY_param_check().\n\nAlso vulnerable are the OpenSSL dhparam and pkeyparam command line applications\nwhen using the '-check' option.\n\nThe OpenSSL SSL/TLS implementation is not affected by this issue.\nThe OpenSSL 3.0 and 3.1 FIPS providers are not affected by this issue.",
-              'diffID':        'sha256:0e3395c9c4d69931dec5029f4c593bdabd1bf4cc1c06b7d568ee72ea29783132',
-              'fixedVersions': [
-                '3.0.9-r3'
-              ],
-              'installedVersion': '3.0.7-r2',
-              'packageName':      'libcrypto3',
-              'purl':             'pkg:apk/alpine/libcrypto3@3.0.7-r2?arch=ppc64le&distro=3.17.1',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2023/07/19/4',
-                'http://www.openwall.com/lists/oss-security/2023/07/19/5',
-                'http://www.openwall.com/lists/oss-security/2023/07/19/6',
-                'http://www.openwall.com/lists/oss-security/2023/07/31/1',
-                'http://www.openwall.com/lists/oss-security/2024/05/16/1',
-                'https://access.redhat.com/errata/RHSA-2024:2447',
-                'https://access.redhat.com/security/cve/CVE-2023-3446',
-                'https://bugzilla.redhat.com/2223016',
-                'https://bugzilla.redhat.com/2224962',
-                'https://bugzilla.redhat.com/2227852',
-                'https://bugzilla.redhat.com/2248616',
-                'https://bugzilla.redhat.com/2257571',
-                'https://bugzilla.redhat.com/2258502',
-                'https://bugzilla.redhat.com/2259944',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2224962',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2257582',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2257583',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2258677',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2258688',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2258691',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2258694',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2258700',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-36763',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-36764',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3446',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45229',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45231',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45232',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45233',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45235',
-                'https://errata.almalinux.org/9/ALSA-2024-2447.html',
-                'https://errata.rockylinux.org/RLSA-2024:2264',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=1fa20cf2f506113c761777127a38bce5068740eb',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=8780a896543a654e757db1b9396383f9d8095528',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=9a0a4d3c1e7138915563c0df4fe6a3f9377b839c',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=fc9867c1e03c22ebf56943be205202e576aabf23',
-                'https://linux.oracle.com/cve/CVE-2023-3446.html',
-                'https://linux.oracle.com/errata/ELSA-2024-2447.html',
-                'https://lists.debian.org/debian-lts-announce/2023/08/msg00019.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-3446',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://security.netapp.com/advisory/ntap-20230803-0011/',
-                'https://ubuntu.com/security/notices/USN-6435-1',
-                'https://ubuntu.com/security/notices/USN-6435-2',
-                'https://ubuntu.com/security/notices/USN-6450-1',
-                'https://ubuntu.com/security/notices/USN-6709-1',
-                'https://ubuntu.com/security/notices/USN-7018-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-3446',
-                'https://www.openssl.org/news/secadv/20230719.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: Excessive time spent checking DH keys and parameters'
-            },
-            {
-              'cve':  'CVE-2023-3817',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L'
-                },
-                'redhat': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L'
-                }
-              },
-              'cwes': [
-                'CWE-606',
-                'CWE-834'
-              ],
-              'description':   'Issue summary: Checking excessively long DH keys or parameters may be very slow.\n\nImpact summary: Applications that use the functions DH_check(), DH_check_ex()\nor EVP_PKEY_param_check() to check a DH key or DH parameters may experience long\ndelays. Where the key or parameters that are being checked have been obtained\nfrom an untrusted source this may lead to a Denial of Service.\n\nThe function DH_check() performs various checks on DH parameters. After fixing\nCVE-2023-3446 it was discovered that a large q parameter value can also trigger\nan overly long computation during some of these checks. A correct q value,\nif present, cannot be larger than the modulus p parameter, thus it is\nunnecessary to perform these checks if q is larger than p.\n\nAn application that calls DH_check() and supplies a key or parameters obtained\nfrom an untrusted source could be vulnerable to a Denial of Service attack.\n\nThe function DH_check() is itself called by a number of other OpenSSL functions.\nAn application calling any of those other functions may similarly be affected.\nThe other functions affected by this are DH_check_ex() and\nEVP_PKEY_param_check().\n\nAlso vulnerable are the OpenSSL dhparam and pkeyparam command line applications\nwhen using the "-check" option.\n\nThe OpenSSL SSL/TLS implementation is not affected by this issue.\n\nThe OpenSSL 3.0 and 3.1 FIPS providers are not affected by this issue.',
-              'diffID':        'sha256:0e3395c9c4d69931dec5029f4c593bdabd1bf4cc1c06b7d568ee72ea29783132',
-              'fixedVersions': [
-                '3.0.10-r0'
-              ],
-              'installedVersion': '3.0.7-r2',
-              'packageName':      'libcrypto3',
-              'purl':             'pkg:apk/alpine/libcrypto3@3.0.7-r2?arch=ppc64le&distro=3.17.1',
-              'references':       [
-                'http://seclists.org/fulldisclosure/2023/Jul/43',
-                'http://www.openwall.com/lists/oss-security/2023/07/31/1',
-                'http://www.openwall.com/lists/oss-security/2023/09/22/11',
-                'http://www.openwall.com/lists/oss-security/2023/09/22/9',
-                'http://www.openwall.com/lists/oss-security/2023/11/06/2',
-                'https://access.redhat.com/errata/RHSA-2024:2447',
-                'https://access.redhat.com/security/cve/CVE-2023-3817',
-                'https://bugzilla.redhat.com/2223016',
-                'https://bugzilla.redhat.com/2224962',
-                'https://bugzilla.redhat.com/2227852',
-                'https://bugzilla.redhat.com/2248616',
-                'https://bugzilla.redhat.com/2257571',
-                'https://bugzilla.redhat.com/2258502',
-                'https://bugzilla.redhat.com/2259944',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2224962',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2227852',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2248616',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2270358',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3446',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3817',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-5678',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-2408',
-                'https://errata.almalinux.org/9/ALSA-2024-2447.html',
-                'https://errata.rockylinux.org/RLSA-2023:7877',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=6a1eb62c29db6cb5eec707f9338aee00f44e26f5',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=869ad69aadd985c7b8ca6f4e5dd0eb274c9f3644',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=9002fd07327a91f35ba6c1307e71fa6fd4409b7f',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=91ddeba0f2269b017dc06c46c993a788974b1aa5',
-                'https://linux.oracle.com/cve/CVE-2023-3817.html',
-                'https://linux.oracle.com/errata/ELSA-2024-2447.html',
-                'https://lists.debian.org/debian-lts-announce/2023/08/msg00019.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-3817',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://security.netapp.com/advisory/ntap-20230818-0014/',
-                'https://security.netapp.com/advisory/ntap-20231027-0008/',
-                'https://security.netapp.com/advisory/ntap-20240621-0006/',
-                'https://ubuntu.com/security/notices/USN-6435-1',
-                'https://ubuntu.com/security/notices/USN-6435-2',
-                'https://ubuntu.com/security/notices/USN-6450-1',
-                'https://ubuntu.com/security/notices/USN-6709-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-3817',
-                'https://www.openssl.org/news/secadv/20230731.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'OpenSSL: Excessive time spent checking DH q parameter value'
-            },
-            {
-              'cve':  'CVE-2023-5678',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L'
-                },
-                'redhat': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L'
-                }
-              },
-              'cwes': [
-                'CWE-606',
-                'CWE-754'
-              ],
-              'description':   "Issue summary: Generating excessively long X9.42 DH keys or checking\nexcessively long X9.42 DH keys or parameters may be very slow.\n\nImpact summary: Applications that use the functions DH_generate_key() to\ngenerate an X9.42 DH key may experience long delays.  Likewise, applications\nthat use DH_check_pub_key(), DH_check_pub_key_ex() or EVP_PKEY_public_check()\nto check an X9.42 DH key or X9.42 DH parameters may experience long delays.\nWhere the key or parameters that are being checked have been obtained from\nan untrusted source this may lead to a Denial of Service.\n\nWhile DH_check() performs all the necessary checks (as of CVE-2023-3817),\nDH_check_pub_key() doesn't make any of these checks, and is therefore\nvulnerable for excessively large P and Q parameters.\n\nLikewise, while DH_generate_key() performs a check for an excessively large\nP, it doesn't check for an excessively large Q.\n\nAn application that calls DH_generate_key() or DH_check_pub_key() and\nsupplies a key or parameters obtained from an untrusted source could be\nvulnerable to a Denial of Service attack.\n\nDH_generate_key() and DH_check_pub_key() are also called by a number of\nother OpenSSL functions.  An application calling any of those other\nfunctions may similarly be affected.  The other functions affected by this\nare DH_check_pub_key_ex(), EVP_PKEY_public_check(), and EVP_PKEY_generate().\n\nAlso vulnerable are the OpenSSL pkey command line application when using the\n\"-pubcheck\" option, as well as the OpenSSL genpkey command line application.\n\nThe OpenSSL SSL/TLS implementation is not affected by this issue.\n\nThe OpenSSL 3.0 and 3.1 FIPS providers are not affected by this issue.",
-              'diffID':        'sha256:0e3395c9c4d69931dec5029f4c593bdabd1bf4cc1c06b7d568ee72ea29783132',
-              'fixedVersions': [
-                '3.0.12-r1'
-              ],
-              'installedVersion': '3.0.7-r2',
-              'packageName':      'libcrypto3',
-              'purl':             'pkg:apk/alpine/libcrypto3@3.0.7-r2?arch=ppc64le&distro=3.17.1',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2024/03/11/1',
-                'https://access.redhat.com/errata/RHSA-2024:2447',
-                'https://access.redhat.com/security/cve/CVE-2023-5678',
-                'https://bugzilla.redhat.com/2223016',
-                'https://bugzilla.redhat.com/2224962',
-                'https://bugzilla.redhat.com/2227852',
-                'https://bugzilla.redhat.com/2248616',
-                'https://bugzilla.redhat.com/2257571',
-                'https://bugzilla.redhat.com/2258502',
-                'https://bugzilla.redhat.com/2259944',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2224962',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2227852',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2248616',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2270358',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3446',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3817',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-5678',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-2408',
-                'https://errata.almalinux.org/9/ALSA-2024-2447.html',
-                'https://errata.rockylinux.org/RLSA-2023:7877',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=34efaef6c103d636ab507a0cc34dca4d3aecc055',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=710fee740904b6290fef0dd5536fbcedbc38ff0c',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=db925ae2e65d0d925adef429afc37f75bd1c2017',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=ddeb4b6c6d527e54ce9a99cba785c0f7776e54b6',
-                'https://linux.oracle.com/cve/CVE-2023-5678.html',
-                'https://linux.oracle.com/errata/ELSA-2024-2447.html',
-                'https://lists.debian.org/debian-lts-announce/2024/10/msg00033.html',
-                'https://lists.debian.org/debian-lts-announce/2024/11/msg00000.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-5678',
-                'https://security.netapp.com/advisory/ntap-20231130-0010/',
-                'https://ubuntu.com/security/notices/USN-6622-1',
-                'https://ubuntu.com/security/notices/USN-6632-1',
-                'https://ubuntu.com/security/notices/USN-6709-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-5678',
-                'https://www.openssl.org/news/secadv/20231106.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: Generating excessively long X9.42 DH keys or checking excessively long X9.42 DH keys or parameters may be very slow'
-            },
-            {
-              'cve':  'CVE-2023-6129',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '6.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-440',
-                'CWE-787'
-              ],
-              'description':   'Issue summary: The POLY1305 MAC (message authentication code) implementation\ncontains a bug that might corrupt the internal state of applications running\non PowerPC CPU based platforms if the CPU provides vector instructions.\n\nImpact summary: If an attacker can influence whether the POLY1305 MAC\nalgorithm is used, the application state might be corrupted with various\napplication dependent consequences.\n\nThe POLY1305 MAC (message authentication code) implementation in OpenSSL for\nPowerPC CPUs restores the contents of vector registers in a different order\nthan they are saved. Thus the contents of some of these vector registers\nare corrupted when returning to the caller. The vulnerable code is used only\non newer PowerPC processors supporting the PowerISA 2.07 instructions.\n\nThe consequences of this kind of internal application state corruption can\nbe various - from no consequences, if the calling application does not\ndepend on the contents of non-volatile XMM registers at all, to the worst\nconsequences, where the attacker could get complete control of the application\nprocess. However unless the compiler uses the vector registers for storing\npointers, the most likely consequence, if any, would be an incorrect result\nof some application dependent calculations or a crash leading to a denial of\nservice.\n\nThe POLY1305 MAC algorithm is most frequently used as part of the\nCHACHA20-POLY1305 AEAD (authenticated encryption with associated data)\nalgorithm. The most common usage of this AEAD cipher is with TLS protocol\nversions 1.2 and 1.3. If this cipher is enabled on the server a malicious\nclient can influence whether this AEAD cipher is used. This implies that\nTLS server applications using OpenSSL can be potentially impacted. However\nwe are currently not aware of any concrete application that would be affected\nby this issue therefore we consider this a Low severity security issue.',
-              'diffID':        'sha256:0e3395c9c4d69931dec5029f4c593bdabd1bf4cc1c06b7d568ee72ea29783132',
-              'fixedVersions': [
-                '3.0.12-r2'
-              ],
-              'installedVersion': '3.0.7-r2',
-              'packageName':      'libcrypto3',
-              'purl':             'pkg:apk/alpine/libcrypto3@3.0.7-r2?arch=ppc64le&distro=3.17.1',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2024/03/11/1',
-                'https://access.redhat.com/errata/RHSA-2024:9088',
-                'https://access.redhat.com/security/cve/CVE-2023-6129',
-                'https://bugzilla.redhat.com/2257571',
-                'https://bugzilla.redhat.com/2258502',
-                'https://bugzilla.redhat.com/2259944',
-                'https://bugzilla.redhat.com/2284243',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2257571',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2258502',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2259944',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2284243',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-6129',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-6237',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-0727',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-1298',
-                'https://errata.almalinux.org/9/ALSA-2024-9088.html',
-                'https://errata.rockylinux.org/RLSA-2024:9088',
-                'https://github.com/openssl/openssl/commit/050d26383d4e264966fb83428e72d5d48f402d35',
-                'https://github.com/openssl/openssl/commit/5b139f95c9a47a55a0c54100f3837b1eee942b04',
-                'https://github.com/openssl/openssl/commit/f3fc5808fe9ff74042d639839610d03b8fdcc015',
-                'https://linux.oracle.com/cve/CVE-2023-6129.html',
-                'https://linux.oracle.com/errata/ELSA-2024-9088.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-6129',
-                'https://security.netapp.com/advisory/ntap-20240216-0009/',
-                'https://security.netapp.com/advisory/ntap-20240426-0008/',
-                'https://security.netapp.com/advisory/ntap-20240426-0013/',
-                'https://security.netapp.com/advisory/ntap-20240503-0011/',
-                'https://ubuntu.com/security/notices/USN-6622-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-6129',
-                'https://www.openssl.org/news/secadv/20240109.txt',
-                'https://www.openwall.com/lists/oss-security/2024/01/09/1'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: POLY1305 MAC implementation corrupts vector registers on PowerPC'
-            },
-            {
-              'cve':  'CVE-2023-6237',
-              'cvss': {
-                'redhat': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-606'
-              ],
-              'description':   "Issue summary: Checking excessively long invalid RSA public keys may take\na long time.\n\nImpact summary: Applications that use the function EVP_PKEY_public_check()\nto check RSA public keys may experience long delays. Where the key that\nis being checked has been obtained from an untrusted source this may lead\nto a Denial of Service.\n\nWhen function EVP_PKEY_public_check() is called on RSA public keys,\na computation is done to confirm that the RSA modulus, n, is composite.\nFor valid RSA keys, n is a product of two or more large primes and this\ncomputation completes quickly. However, if n is an overly large prime,\nthen this computation would take a long time.\n\nAn application that calls EVP_PKEY_public_check() and supplies an RSA key\nobtained from an untrusted source could be vulnerable to a Denial of Service\nattack.\n\nThe function EVP_PKEY_public_check() is not called from other OpenSSL\nfunctions however it is called from the OpenSSL pkey command line\napplication. For that reason that application is also vulnerable if used\nwith the '-pubin' and '-check' options on untrusted data.\n\nThe OpenSSL SSL/TLS implementation is not affected by this issue.\n\nThe OpenSSL 3.0 and 3.1 FIPS providers are affected by this issue.",
-              'diffID':        'sha256:0e3395c9c4d69931dec5029f4c593bdabd1bf4cc1c06b7d568ee72ea29783132',
-              'fixedVersions': [
-                '3.0.12-r3'
-              ],
-              'installedVersion': '3.0.7-r2',
-              'packageName':      'libcrypto3',
-              'purl':             'pkg:apk/alpine/libcrypto3@3.0.7-r2?arch=ppc64le&distro=3.17.1',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2024/03/11/1',
-                'https://access.redhat.com/errata/RHSA-2024:9088',
-                'https://access.redhat.com/security/cve/CVE-2023-6237',
-                'https://bugzilla.redhat.com/2257571',
-                'https://bugzilla.redhat.com/2258502',
-                'https://bugzilla.redhat.com/2259944',
-                'https://bugzilla.redhat.com/2284243',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2257571',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2258502',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2259944',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2284243',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-6129',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-6237',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-0727',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-1298',
-                'https://errata.almalinux.org/9/ALSA-2024-9088.html',
-                'https://errata.rockylinux.org/RLSA-2024:9088',
-                'https://github.com/openssl/openssl/commit/0b0f7abfb37350794a4b8960fafc292cd5d1b84d',
-                'https://github.com/openssl/openssl/commit/18c02492138d1eb8b6548cb26e7b625fb2414a2a',
-                'https://github.com/openssl/openssl/commit/a830f551557d3d66a84bbb18a5b889c640c36294',
-                'https://linux.oracle.com/cve/CVE-2023-6237.html',
-                'https://linux.oracle.com/errata/ELSA-2024-9088.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-6237',
-                'https://security.netapp.com/advisory/ntap-20240531-0007/',
-                'https://ubuntu.com/security/notices/USN-6622-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-6237',
-                'https://www.openssl.org/news/secadv/20240115.txt',
-                'https://www.openwall.com/lists/oss-security/2024/01/15/2'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: Excessive time spent checking invalid RSA public keys'
-            },
-            {
-              'cve':  'CVE-2024-0727',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '5.5',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H'
-                },
-                'nvd': {
-                  'v3score':  '5.5',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '5.5',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-476'
-              ],
-              'description':   'Issue summary: Processing a maliciously formatted PKCS12 file may lead OpenSSL\nto crash leading to a potential Denial of Service attack\n\nImpact summary: Applications loading files in the PKCS12 format from untrusted\nsources might terminate abruptly.\n\nA file in PKCS12 format can contain certificates and keys and may come from an\nuntrusted source. The PKCS12 specification allows certain fields to be NULL, but\nOpenSSL does not correctly check for this case. This can lead to a NULL pointer\ndereference that results in OpenSSL crashing. If an application processes PKCS12\nfiles from an untrusted source using the OpenSSL APIs then that application will\nbe vulnerable to this issue.\n\nOpenSSL APIs that are vulnerable to this are: PKCS12_parse(),\nPKCS12_unpack_p7data(), PKCS12_unpack_p7encdata(), PKCS12_unpack_authsafes()\nand PKCS12_newpass().\n\nWe have also fixed a similar issue in SMIME_write_PKCS7(). However since this\nfunction is related to writing data we do not consider it security significant.\n\nThe FIPS modules in 3.2, 3.1 and 3.0 are not affected by this issue.',
-              'diffID':        'sha256:0e3395c9c4d69931dec5029f4c593bdabd1bf4cc1c06b7d568ee72ea29783132',
-              'fixedVersions': [
-                '3.0.12-r4'
-              ],
-              'installedVersion': '3.0.7-r2',
-              'packageName':      'libcrypto3',
-              'purl':             'pkg:apk/alpine/libcrypto3@3.0.7-r2?arch=ppc64le&distro=3.17.1',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2024/03/11/1',
-                'https://access.redhat.com/errata/RHSA-2024:9088',
-                'https://access.redhat.com/security/cve/CVE-2024-0727',
-                'https://bugzilla.redhat.com/2257571',
-                'https://bugzilla.redhat.com/2258502',
-                'https://bugzilla.redhat.com/2259944',
-                'https://bugzilla.redhat.com/2284243',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2257571',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2258502',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2259944',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2284243',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-6129',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-6237',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-0727',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-1298',
-                'https://errata.almalinux.org/9/ALSA-2024-9088.html',
-                'https://errata.rockylinux.org/RLSA-2024:9088',
-                'https://github.com/alexcrichton/openssl-src-rs/commit/add20f73b6b42be7451af2e1044d4e0e778992b2',
-                'https://github.com/github/advisory-database/pull/3472',
-                'https://github.com/openssl/openssl/commit/09df4395b5071217b76dc7d3d2e630eb8c5a79c2',
-                'https://github.com/openssl/openssl/commit/775acfdbd0c6af9ac855f34969cdab0c0c90844a',
-                'https://github.com/openssl/openssl/commit/d135eeab8a5dbf72b3da5240bab9ddb7678dbd2c',
-                'https://github.com/openssl/openssl/pull/23362',
-                'https://github.com/pyca/cryptography/commit/3519591d255d4506fbcd0d04037d45271903c64d',
-                'https://github.openssl.org/openssl/extended-releases/commit/03b3941d60c4bce58fab69a0c22377ab439bc0e8',
-                'https://github.openssl.org/openssl/extended-releases/commit/aebaa5883e31122b404e450732dc833dc9dee539',
-                'https://linux.oracle.com/cve/CVE-2024-0727.html',
-                'https://linux.oracle.com/errata/ELSA-2024-9088.html',
-                'https://lists.debian.org/debian-lts-announce/2024/10/msg00033.html',
-                'https://lists.debian.org/debian-lts-announce/2024/11/msg00000.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2024-0727',
-                'https://security.netapp.com/advisory/ntap-20240208-0006',
-                'https://security.netapp.com/advisory/ntap-20240208-0006/',
-                'https://ubuntu.com/security/notices/USN-6622-1',
-                'https://ubuntu.com/security/notices/USN-6632-1',
-                'https://ubuntu.com/security/notices/USN-6709-1',
-                'https://ubuntu.com/security/notices/USN-7018-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2024-0727',
-                'https://www.openssl.org/news/secadv/20240125.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: denial of service via null dereference'
-            },
-            {
-              'cve':  'CVE-2024-4603',
-              'cvss': {
-                'redhat': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L'
-                }
-              },
-              'cwes': [
-                'CWE-606',
-                'CWE-834'
-              ],
-              'description':   'Issue summary: Checking excessively long DSA keys or parameters may be very\nslow.\n\nImpact summary: Applications that use the functions EVP_PKEY_param_check()\nor EVP_PKEY_public_check() to check a DSA public key or DSA parameters may\nexperience long delays. Where the key or parameters that are being checked\nhave been obtained from an untrusted source this may lead to a Denial of\nService.\n\nThe functions EVP_PKEY_param_check() or EVP_PKEY_public_check() perform\nvarious checks on DSA parameters. Some of those computations take a long time\nif the modulus (`p` parameter) is too large.\n\nTrying to use a very large modulus is slow and OpenSSL will not allow using\npublic keys with a modulus which is over 10,000 bits in length for signature\nverification. However the key and parameter check functions do not limit\nthe modulus size when performing the checks.\n\nAn application that calls EVP_PKEY_param_check() or EVP_PKEY_public_check()\nand supplies a key or parameters obtained from an untrusted source could be\nvulnerable to a Denial of Service attack.\n\nThese functions are not called by OpenSSL itself on untrusted DSA keys so\nonly applications that directly call these functions may be vulnerable.\n\nAlso vulnerable are the OpenSSL pkey and pkeyparam command line applications\nwhen using the `-check` option.\n\nThe OpenSSL SSL/TLS implementation is not affected by this issue.\n\nThe OpenSSL 3.0 and 3.1 FIPS providers are affected by this issue.',
-              'diffID':        'sha256:0e3395c9c4d69931dec5029f4c593bdabd1bf4cc1c06b7d568ee72ea29783132',
-              'fixedVersions': [
-                '3.0.13-r0'
-              ],
-              'installedVersion': '3.0.7-r2',
-              'packageName':      'libcrypto3',
-              'purl':             'pkg:apk/alpine/libcrypto3@3.0.7-r2?arch=ppc64le&distro=3.17.1',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2024/05/16/2',
-                'https://access.redhat.com/errata/RHSA-2024:9333',
-                'https://access.redhat.com/security/cve/CVE-2024-4603',
-                'https://bugzilla.redhat.com/2274020',
-                'https://bugzilla.redhat.com/2281029',
-                'https://bugzilla.redhat.com/2283757',
-                'https://bugzilla.redhat.com/2294581',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2274020',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2281029',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2283757',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2294581',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-2511',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-4603',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-4741',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-5535',
-                'https://errata.almalinux.org/9/ALSA-2024-9333.html',
-                'https://errata.rockylinux.org/RLSA-2024:9333',
-                'https://github.com/openssl/openssl/commit/3559e868e58005d15c6013a0c1fd832e51c73397',
-                'https://github.com/openssl/openssl/commit/53ea06486d296b890d565fb971b2764fcd826e7e',
-                'https://github.com/openssl/openssl/commit/9c39b3858091c152f52513c066ff2c5a47969f0d',
-                'https://github.com/openssl/openssl/commit/da343d0605c826ef197aceedc67e8e04f065f740',
-                'https://linux.oracle.com/cve/CVE-2024-4603.html',
-                'https://linux.oracle.com/errata/ELSA-2024-9333.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2024-4603',
-                'https://security.netapp.com/advisory/ntap-20240621-0001/',
-                'https://ubuntu.com/security/notices/USN-6937-1',
-                'https://www.cve.org/CVERecord?id=CVE-2024-4603',
-                'https://www.openssl.org/news/secadv/20240516.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: Excessive time spent checking DSA keys and parameters'
-            },
-            {
-              'cve':  'CVE-2024-4741',
-              'cvss': {
-                'redhat': {
-                  'v3score':  '5.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   'Issue summary: Calling the OpenSSL API function SSL_free_buffers may cause\nmemory to be accessed that was previously freed in some situations\n\nImpact summary: A use after free can have a range of potential consequences such\nas the corruption of valid data, crashes or execution of arbitrary code.\nHowever, only applications that directly call the SSL_free_buffers function are\naffected by this issue. Applications that do not call this function are not\nvulnerable. Our investigations indicate that this function is rarely used by\napplications.\n\nThe SSL_free_buffers function is used to free the internal OpenSSL buffer used\nwhen processing an incoming record from the network. The call is only expected\nto succeed if the buffer is not currently in use. However, two scenarios have\nbeen identified where the buffer is freed even when still in use.\n\nThe first scenario occurs where a record header has been received from the\nnetwork and processed by OpenSSL, but the full record body has not yet arrived.\nIn this case calling SSL_free_buffers will succeed even though a record has only\nbeen partially processed and the buffer is still in use.\n\nThe second scenario occurs where a full record containing application data has\nbeen received and processed by OpenSSL but the application has only read part of\nthis data. Again a call to SSL_free_buffers will succeed even though the buffer\nis still in use.\n\nWhile these scenarios could occur accidentally during normal operation a\nmalicious attacker could attempt to engineer a stituation where this occurs.\nWe are not aware of this issue being actively exploited.\n\nThe FIPS modules in 3.3, 3.2, 3.1 and 3.0 are not affected by this issue.',
-              'diffID':        'sha256:0e3395c9c4d69931dec5029f4c593bdabd1bf4cc1c06b7d568ee72ea29783132',
-              'fixedVersions': [
-                '3.0.14-r0'
-              ],
-              'installedVersion': '3.0.7-r2',
-              'packageName':      'libcrypto3',
-              'purl':             'pkg:apk/alpine/libcrypto3@3.0.7-r2?arch=ppc64le&distro=3.17.1',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2024:9333',
-                'https://access.redhat.com/security/cve/CVE-2024-4741',
-                'https://bugzilla.redhat.com/2274020',
-                'https://bugzilla.redhat.com/2281029',
-                'https://bugzilla.redhat.com/2283757',
-                'https://bugzilla.redhat.com/2294581',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2274020',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2281029',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2283757',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2294581',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-2511',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-4603',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-4741',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-5535',
-                'https://errata.almalinux.org/9/ALSA-2024-9333.html',
-                'https://errata.rockylinux.org/RLSA-2024:9333',
-                'https://github.com/openssl/openssl/commit/704f725b96aa373ee45ecfb23f6abfe8be8d9177',
-                'https://github.com/openssl/openssl/commit/b3f0eb0a295f58f16ba43ba99dad70d4ee5c437d',
-                'https://github.com/openssl/openssl/commit/c88c3de51020c37e8706bf7a682a162593053aac',
-                'https://github.com/openssl/openssl/commit/e5093133c35ca82874ad83697af76f4b0f7e3bd8',
-                'https://github.openssl.org/openssl/extended-releases/commit/f7a045f3143fc6da2ee66bf52d8df04829590dd4',
-                'https://linux.oracle.com/cve/CVE-2024-4741.html',
-                'https://linux.oracle.com/errata/ELSA-2024-9333.html',
-                'https://lists.debian.org/debian-lts-announce/2024/10/msg00033.html',
-                'https://lists.debian.org/debian-lts-announce/2024/11/msg00000.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2024-4741',
-                'https://security.netapp.com/advisory/ntap-20240621-0004/',
-                'https://ubuntu.com/security/notices/USN-6937-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2024-4741',
-                'https://www.openssl.org/news/secadv/20240528.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: Use After Free with SSL_free_buffers'
-            },
-            {
-              'cve':  'CVE-2024-5535',
-              'cvss': {
-                'redhat': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-125'
-              ],
-              'description':   'Issue summary: Calling the OpenSSL API function SSL_select_next_proto with an\nempty supported client protocols buffer may cause a crash or memory contents to\nbe sent to the peer.\n\nImpact summary: A buffer overread can have a range of potential consequences\nsuch as unexpected application beahviour or a crash. In particular this issue\ncould result in up to 255 bytes of arbitrary private data from memory being sent\nto the peer leading to a loss of confidentiality. However, only applications\nthat directly call the SSL_select_next_proto function with a 0 length list of\nsupported client protocols are affected by this issue. This would normally never\nbe a valid scenario and is typically not under attacker control but may occur by\naccident in the case of a configuration or programming error in the calling\napplication.\n\nThe OpenSSL API function SSL_select_next_proto is typically used by TLS\napplications that support ALPN (Application Layer Protocol Negotiation) or NPN\n(Next Protocol Negotiation). NPN is older, was never standardised and\nis deprecated in favour of ALPN. We believe that ALPN is significantly more\nwidely deployed than NPN. The SSL_select_next_proto function accepts a list of\nprotocols from the server and a list of protocols from the client and returns\nthe first protocol that appears in the server list that also appears in the\nclient list. In the case of no overlap between the two lists it returns the\nfirst item in the client list. In either case it will signal whether an overlap\nbetween the two lists was found. In the case where SSL_select_next_proto is\ncalled with a zero length client list it fails to notice this condition and\nreturns the memory immediately following the client list pointer (and reports\nthat there was no overlap in the lists).\n\nThis function is typically called from a server side application callback for\nALPN or a client side application callback for NPN. In the case of ALPN the list\nof protocols supplied by the client is guaranteed by libssl to never be zero in\nlength. The list of server protocols comes from the application and should never\nnormally be expected to be of zero length. In this case if the\nSSL_select_next_proto function has been called as expected (with the list\nsupplied by the client passed in the client/client_len parameters), then the\napplication will not be vulnerable to this issue. If the application has\naccidentally been configured with a zero length server list, and has\naccidentally passed that zero length server list in the client/client_len\nparameters, and has additionally failed to correctly handle a "no overlap"\nresponse (which would normally result in a handshake failure in ALPN) then it\nwill be vulnerable to this problem.\n\nIn the case of NPN, the protocol permits the client to opportunistically select\na protocol when there is no overlap. OpenSSL returns the first client protocol\nin the no overlap case in support of this. The list of client protocols comes\nfrom the application and should never normally be expected to be of zero length.\nHowever if the SSL_select_next_proto function is accidentally called with a\nclient_len of 0 then an invalid memory pointer will be returned instead. If the\napplication uses this output as the opportunistic protocol then the loss of\nconfidentiality will occur.\n\nThis issue has been assessed as Low severity because applications are most\nlikely to be vulnerable if they are using NPN instead of ALPN - but NPN is not\nwidely used. It also requires an application configuration or programming error.\nFinally, this issue would not typically be under attacker control making active\nexploitation unlikely.\n\nThe FIPS modules in 3.3, 3.2, 3.1 and 3.0 are not affected by this issue.\n\nDue to the low severity of this issue we are not issuing new releases of\nOpenSSL at this time. The fix will be included in the next releases when they\nbecome available.',
-              'diffID':        'sha256:0e3395c9c4d69931dec5029f4c593bdabd1bf4cc1c06b7d568ee72ea29783132',
-              'fixedVersions': [
-                '3.0.14-r0'
-              ],
-              'installedVersion': '3.0.7-r2',
-              'packageName':      'libcrypto3',
-              'purl':             'pkg:apk/alpine/libcrypto3@3.0.7-r2?arch=ppc64le&distro=3.17.1',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2024/06/27/1',
-                'http://www.openwall.com/lists/oss-security/2024/06/28/4',
-                'http://www.openwall.com/lists/oss-security/2024/08/15/1',
-                'https://access.redhat.com/errata/RHSA-2025:1671',
-                'https://access.redhat.com/security/cve/CVE-2024-5535',
-                'https://bugzilla.redhat.com/2294581',
-                'https://bugzilla.redhat.com/2294676',
-                'https://bugzilla.redhat.com/2301888',
-                'https://bugzilla.redhat.com/2318857',
-                'https://bugzilla.redhat.com/2318858',
-                'https://bugzilla.redhat.com/2318870',
-                'https://bugzilla.redhat.com/2318873',
-                'https://bugzilla.redhat.com/2318874',
-                'https://bugzilla.redhat.com/2318876',
-                'https://bugzilla.redhat.com/2318882',
-                'https://bugzilla.redhat.com/2318883',
-                'https://bugzilla.redhat.com/2318884',
-                'https://bugzilla.redhat.com/2318885',
-                'https://bugzilla.redhat.com/2318886',
-                'https://bugzilla.redhat.com/2318897',
-                'https://bugzilla.redhat.com/2318900',
-                'https://bugzilla.redhat.com/2318905',
-                'https://bugzilla.redhat.com/2318914',
-                'https://bugzilla.redhat.com/2318922',
-                'https://bugzilla.redhat.com/2318923',
-                'https://bugzilla.redhat.com/2318925',
-                'https://bugzilla.redhat.com/2318926',
-                'https://bugzilla.redhat.com/2318927',
-                'https://bugzilla.redhat.com/2331191',
-                'https://bugzilla.redhat.com/2339218',
-                'https://bugzilla.redhat.com/2339220',
-                'https://bugzilla.redhat.com/2339221',
-                'https://bugzilla.redhat.com/2339226',
-                'https://bugzilla.redhat.com/2339231',
-                'https://bugzilla.redhat.com/2339236',
-                'https://bugzilla.redhat.com/2339238',
-                'https://bugzilla.redhat.com/2339243',
-                'https://bugzilla.redhat.com/2339247',
-                'https://bugzilla.redhat.com/2339252',
-                'https://bugzilla.redhat.com/2339259',
-                'https://bugzilla.redhat.com/2339266',
-                'https://bugzilla.redhat.com/2339270',
-                'https://bugzilla.redhat.com/2339271',
-                'https://bugzilla.redhat.com/2339275',
-                'https://bugzilla.redhat.com/2339277',
-                'https://bugzilla.redhat.com/2339281',
-                'https://bugzilla.redhat.com/2339284',
-                'https://bugzilla.redhat.com/2339291',
-                'https://bugzilla.redhat.com/2339293',
-                'https://bugzilla.redhat.com/2339295',
-                'https://bugzilla.redhat.com/2339299',
-                'https://bugzilla.redhat.com/2339300',
-                'https://bugzilla.redhat.com/2339304',
-                'https://bugzilla.redhat.com/2339305',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2274020',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2281029',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2283757',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2294581',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-2511',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-4603',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-4741',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-5535',
-                'https://errata.almalinux.org/9/ALSA-2025-1671.html',
-                'https://errata.rockylinux.org/RLSA-2024:9333',
-                'https://github.com/openssl/openssl/commit/4ada436a1946cbb24db5ab4ca082b69c1bc10f37',
-                'https://github.com/openssl/openssl/commit/99fb785a5f85315b95288921a321a935ea29a51e',
-                'https://github.com/openssl/openssl/commit/cf6f91f6121f4db167405db2f0de410a456f260c',
-                'https://github.com/openssl/openssl/commit/e86ac436f0bd54d4517745483e2315650fae7b2c',
-                'https://github.openssl.org/openssl/extended-releases/commit/9947251413065a05189a63c9b7a6c1d4e224c21c',
-                'https://github.openssl.org/openssl/extended-releases/commit/b78ec0824da857223486660177d3b1f255c65d87',
-                'https://linux.oracle.com/cve/CVE-2024-5535.html',
-                'https://linux.oracle.com/errata/ELSA-2025-1673.html',
-                'https://lists.debian.org/debian-lts-announce/2024/10/msg00033.html',
-                'https://lists.debian.org/debian-lts-announce/2024/11/msg00000.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2024-5535',
-                'https://openssl.org/news/secadv/20240627.txt',
-                'https://security.netapp.com/advisory/ntap-20240712-0005/',
-                'https://security.netapp.com/advisory/ntap-20241025-0006/',
-                'https://security.netapp.com/advisory/ntap-20241025-0010/',
-                'https://ubuntu.com/security/notices/USN-6937-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2024-5535',
-                'https://www.openssl.org/news/secadv/20240627.txt',
-                'https://www.oracle.com/security-alerts/cpuoct2024.html#AppendixMSQL'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: SSL_select_next_proto buffer overread'
-            },
-            {
-              'cve':  'CVE-2024-2511',
-              'cvss': {
-                'redhat': {
-                  'v3score':  '3.7',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L'
-                }
-              },
-              'cwes': [
-                'CWE-1325'
-              ],
-              'description':   'Issue summary: Some non-default TLS server configurations can cause unbounded\nmemory growth when processing TLSv1.3 sessions\n\nImpact summary: An attacker may exploit certain server configurations to trigger\nunbounded memory growth that would lead to a Denial of Service\n\nThis problem can occur in TLSv1.3 if the non-default SSL_OP_NO_TICKET option is\nbeing used (but not if early_data support is also configured and the default\nanti-replay protection is in use). In this case, under certain conditions, the\nsession cache can get into an incorrect state and it will fail to flush properly\nas it fills. The session cache will continue to grow in an unbounded manner. A\nmalicious client could deliberately create the scenario for this failure to\nforce a Denial of Service. It may also happen by accident in normal operation.\n\nThis issue only affects TLS servers supporting TLSv1.3. It does not affect TLS\nclients.\n\nThe FIPS modules in 3.2, 3.1 and 3.0 are not affected by this issue. OpenSSL\n1.0.2 is also not affected by this issue.',
-              'diffID':        'sha256:0e3395c9c4d69931dec5029f4c593bdabd1bf4cc1c06b7d568ee72ea29783132',
-              'fixedVersions': [
-                '3.0.12-r5'
-              ],
-              'installedVersion': '3.0.7-r2',
-              'packageName':      'libcrypto3',
-              'purl':             'pkg:apk/alpine/libcrypto3@3.0.7-r2?arch=ppc64le&distro=3.17.1',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2024/04/08/5',
-                'https://access.redhat.com/errata/RHSA-2024:9333',
-                'https://access.redhat.com/security/cve/CVE-2024-2511',
-                'https://bugzilla.redhat.com/2274020',
-                'https://bugzilla.redhat.com/2281029',
-                'https://bugzilla.redhat.com/2283757',
-                'https://bugzilla.redhat.com/2294581',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2274020',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2281029',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2283757',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2294581',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-2511',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-4603',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-4741',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-5535',
-                'https://errata.almalinux.org/9/ALSA-2024-9333.html',
-                'https://errata.rockylinux.org/RLSA-2024:9333',
-                'https://github.com/openssl/openssl/commit/7e4d731b1c07201ad9374c1cd9ac5263bdf35bce',
-                'https://github.com/openssl/openssl/commit/b52867a9f618bb955bed2a3ce3db4d4f97ed8e5d',
-                'https://github.com/openssl/openssl/commit/e9d7083e241670332e0443da0f0d4ffb52829f08',
-                'https://github.openssl.org/openssl/extended-releases/commit/5f8d25770ae6437db119dfc951e207271a326640',
-                'https://linux.oracle.com/cve/CVE-2024-2511.html',
-                'https://linux.oracle.com/errata/ELSA-2024-9333.html',
-                'https://lists.debian.org/debian-lts-announce/2024/10/msg00033.html',
-                'https://lists.debian.org/debian-lts-announce/2024/11/msg00000.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2024-2511',
-                'https://security.netapp.com/advisory/ntap-20240503-0013/',
-                'https://ubuntu.com/security/notices/USN-6937-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2024-2511',
-                'https://www.openssl.org/news/secadv/20240408.txt',
-                'https://www.openssl.org/news/vulnerabilities.html'
-              ],
-              'severity':   'LOW',
-              'suppressed': false,
-              'title':      'openssl: Unbounded memory growth with session handling in TLSv1.3'
-            },
-            {
-              'cve':  'CVE-2024-9143',
-              'cvss': {
-                'redhat': {
-                  'v3score':  '3.7',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L'
-                }
-              },
-              'cwes': [
-                'CWE-125',
-                'CWE-787'
-              ],
-              'description':   "Issue summary: Use of the low-level GF(2^m) elliptic curve APIs with untrusted\nexplicit values for the field polynomial can lead to out-of-bounds memory reads\nor writes.\n\nImpact summary: Out of bound memory writes can lead to an application crash or\neven a possibility of a remote code execution, however, in all the protocols\ninvolving Elliptic Curve Cryptography that we're aware of, either only \"named\ncurves\" are supported, or, if explicit curve parameters are supported, they\nspecify an X9.62 encoding of binary (GF(2^m)) curves that can't represent\nproblematic input values. Thus the likelihood of existence of a vulnerable\napplication is low.\n\nIn particular, the X9.62 encoding is used for ECC keys in X.509 certificates,\nso problematic inputs cannot occur in the context of processing X.509\ncertificates.  Any problematic use-cases would have to be using an \"exotic\"\ncurve encoding.\n\nThe affected APIs include: EC_GROUP_new_curve_GF2m(), EC_GROUP_new_from_params(),\nand various supporting BN_GF2m_*() functions.\n\nApplications working with \"exotic\" explicit binary (GF(2^m)) curve parameters,\nthat make it possible to represent invalid field polynomials with a zero\nconstant term, via the above or similar APIs, may terminate abruptly as a\nresult of reading or writing outside of array bounds.  Remote code execution\ncannot easily be ruled out.\n\nThe FIPS modules in 3.3, 3.2, 3.1 and 3.0 are not affected by this issue.",
-              'diffID':        'sha256:0e3395c9c4d69931dec5029f4c593bdabd1bf4cc1c06b7d568ee72ea29783132',
-              'fixedVersions': [
-                '3.0.15-r1'
-              ],
-              'installedVersion': '3.0.7-r2',
-              'packageName':      'libcrypto3',
-              'purl':             'pkg:apk/alpine/libcrypto3@3.0.7-r2?arch=ppc64le&distro=3.17.1',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2024/10/16/1',
-                'http://www.openwall.com/lists/oss-security/2024/10/23/1',
-                'http://www.openwall.com/lists/oss-security/2024/10/24/1',
-                'https://access.redhat.com/security/cve/CVE-2024-9143',
-                'https://github.com/openssl/openssl/commit/72ae83ad214d2eef262461365a1975707f862712',
-                'https://github.com/openssl/openssl/commit/bc7e04d7c8d509fb78fc0e285aa948fb0da04700',
-                'https://github.com/openssl/openssl/commit/c0d3e4d32d2805f49bec30547f225bc4d092e1f4',
-                'https://github.com/openssl/openssl/commit/fdf6723362ca51bd883295efe206cb5b1cfa5154',
-                'https://github.openssl.org/openssl/extended-releases/commit/8efc0cbaa8ebba8e116f7b81a876a4123594d86a',
-                'https://github.openssl.org/openssl/extended-releases/commit/9d576994cec2b7aa37a91740ea7e680810957e41',
-                'https://lists.debian.org/debian-lts-announce/2024/10/msg00033.html',
-                'https://lists.debian.org/debian-lts-announce/2024/11/msg00000.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2024-9143',
-                'https://openssl-library.org/news/secadv/20241016.txt',
-                'https://security.netapp.com/advisory/ntap-20241101-0001/',
-                'https://ubuntu.com/security/notices/USN-7264-1',
-                'https://ubuntu.com/security/notices/USN-7278-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2024-9143'
-              ],
-              'severity':   'LOW',
-              'suppressed': false,
-              'title':      'openssl: Low-level invalid GF(2^m) parameters lead to OOB memory access'
-            },
-            {
-              'cve':  'CVE-2022-4450',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'nvd': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-415'
-              ],
-              'description':   'The function PEM_read_bio_ex() reads a PEM file from a BIO and parses and\ndecodes the "name" (e.g. "CERTIFICATE"), any header data and the payload data.\nIf the function succeeds then the "name_out", "header" and "data" arguments are\npopulated with pointers to buffers containing the relevant decoded data. The\ncaller is responsible for freeing those buffers. It is possible to construct a\nPEM file that results in 0 bytes of payload data. In this case PEM_read_bio_ex()\nwill return a failure code but will populate the header argument with a pointer\nto a buffer that has already been freed. If the caller also frees this buffer\nthen a double free will occur. This will most likely lead to a crash. This\ncould be exploited by an attacker who has the ability to supply malicious PEM\nfiles for parsing to achieve a denial of service attack.\n\nThe functions PEM_read_bio() and PEM_read() are simple wrappers around\nPEM_read_bio_ex() and therefore these functions are also directly affected.\n\nThese functions are also called indirectly by a number of other OpenSSL\nfunctions including PEM_X509_INFO_read_bio_ex() and\nSSL_CTX_use_serverinfo_file() which are also vulnerable. Some OpenSSL internal\nuses of these functions are not vulnerable because the caller does not free the\nheader argument if PEM_read_bio_ex() returns a failure code. These locations\ninclude the PEM_read_bio_TYPE() functions as well as the decoders introduced in\nOpenSSL 3.0.\n\nThe OpenSSL asn1parse command line application is also impacted by this issue.',
-              'diffID':        'sha256:0e3395c9c4d69931dec5029f4c593bdabd1bf4cc1c06b7d568ee72ea29783132',
-              'fixedVersions': [
-                '3.0.8-r0'
-              ],
-              'installedVersion': '3.0.7-r2',
-              'packageName':      'libssl3',
-              'purl':             'pkg:apk/alpine/libssl3@3.0.7-r2?arch=ppc64le&distro=3.17.1',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2023:2165',
-                'https://access.redhat.com/security/cve/CVE-2022-4450',
-                'https://bugzilla.redhat.com/1960321',
-                'https://bugzilla.redhat.com/2164440',
-                'https://bugzilla.redhat.com/2164487',
-                'https://bugzilla.redhat.com/2164492',
-                'https://bugzilla.redhat.com/2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144000',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144003',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144006',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144008',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144010',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144012',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144015',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144017',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144019',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2145170',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2158412',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164440',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164487',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164488',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164492',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164497',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164499',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164500',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4203',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4304',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4450',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0215',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0216',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0217',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0286',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0401',
-                'https://errata.almalinux.org/9/ALSA-2023-2165.html',
-                'https://errata.rockylinux.org/RLSA-2023:0946',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=63bcf189be73a9cc1264059bed6f57974be74a83',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=bbcf509bd046b34cca19c766bbddc31683d0858b',
-                'https://linux.oracle.com/cve/CVE-2022-4450.html',
-                'https://linux.oracle.com/errata/ELSA-2023-32791.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2022-4450',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0003',
-                'https://rustsec.org/advisories/RUSTSEC-2023-0010.html',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://ubuntu.com/security/notices/USN-5844-1',
-                'https://ubuntu.com/security/notices/USN-6564-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2022-4450',
-                'https://www.openssl.org/news/secadv/20230207.txt'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: double free after calling PEM_read_bio_ex'
-            },
-            {
-              'cve':  'CVE-2023-0215',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'nvd': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   'The public API function BIO_new_NDEF is a helper function used for streaming\nASN.1 data via a BIO. It is primarily used internally to OpenSSL to support the\nSMIME, CMS and PKCS7 streaming capabilities, but may also be called directly by\nend user applications.\n\nThe function receives a BIO from the caller, prepends a new BIO_f_asn1 filter\nBIO onto the front of it to form a BIO chain, and then returns the new head of\nthe BIO chain to the caller. Under certain conditions, for example if a CMS\nrecipient public key is invalid, the new filter BIO is freed and the function\nreturns a NULL result indicating a failure. However, in this case, the BIO chain\nis not properly cleaned up and the BIO passed by the caller still retains\ninternal pointers to the previously freed filter BIO. If the caller then goes on\nto call BIO_pop() on the BIO then a use-after-free will occur. This will most\nlikely result in a crash.\n\n\n\nThis scenario occurs directly in the internal function B64_write_ASN1() which\nmay cause BIO_new_NDEF() to be called and will subsequently call BIO_pop() on\nthe BIO. This internal function is in turn called by the public API functions\nPEM_write_bio_ASN1_stream, PEM_write_bio_CMS_stream, PEM_write_bio_PKCS7_stream,\nSMIME_write_ASN1, SMIME_write_CMS and SMIME_write_PKCS7.\n\nOther public API functions that may be impacted by this include\ni2d_ASN1_bio_stream, BIO_new_CMS, BIO_new_PKCS7, i2d_CMS_bio_stream and\ni2d_PKCS7_bio_stream.\n\nThe OpenSSL cms and smime command line applications are similarly affected.',
-              'diffID':        'sha256:0e3395c9c4d69931dec5029f4c593bdabd1bf4cc1c06b7d568ee72ea29783132',
-              'fixedVersions': [
-                '3.0.8-r0'
-              ],
-              'installedVersion': '3.0.7-r2',
-              'packageName':      'libssl3',
-              'purl':             'pkg:apk/alpine/libssl3@3.0.7-r2?arch=ppc64le&distro=3.17.1',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2023:2165',
-                'https://access.redhat.com/security/cve/CVE-2023-0215',
-                'https://bugzilla.redhat.com/1960321',
-                'https://bugzilla.redhat.com/2164440',
-                'https://bugzilla.redhat.com/2164487',
-                'https://bugzilla.redhat.com/2164492',
-                'https://bugzilla.redhat.com/2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144000',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144003',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144006',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144008',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144010',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144012',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144015',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144017',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144019',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2145170',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2158412',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164440',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164487',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164488',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164492',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164497',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164499',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164500',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4203',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4304',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4450',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0215',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0216',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0217',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0286',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0401',
-                'https://errata.almalinux.org/9/ALSA-2023-2165.html',
-                'https://errata.rockylinux.org/RLSA-2023:0946',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=8818064ce3c3c0f1b740a5aaba2a987e75bfbafd',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=9816136fe31d92ace4037d5da5257f763aeeb4eb',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=c3829dd8825c654652201e16f8a0a0c46ee3f344',
-                'https://linux.oracle.com/cve/CVE-2023-0215.html',
-                'https://linux.oracle.com/errata/ELSA-2023-32791.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-0215',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0003',
-                'https://rustsec.org/advisories/RUSTSEC-2023-0009.html',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://security.netapp.com/advisory/ntap-20230427-0007',
-                'https://security.netapp.com/advisory/ntap-20230427-0007/',
-                'https://security.netapp.com/advisory/ntap-20230427-0009',
-                'https://security.netapp.com/advisory/ntap-20230427-0009/',
-                'https://security.netapp.com/advisory/ntap-20240621-0006',
-                'https://security.netapp.com/advisory/ntap-20240621-0006/',
-                'https://ubuntu.com/security/notices/USN-5844-1',
-                'https://ubuntu.com/security/notices/USN-5845-1',
-                'https://ubuntu.com/security/notices/USN-5845-2',
-                'https://ubuntu.com/security/notices/USN-6564-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-0215',
-                'https://www.openssl.org/news/secadv/20230207.txt'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: use-after-free following BIO_new_NDEF'
-            },
-            {
-              'cve':  'CVE-2023-0216',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'nvd': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-476'
-              ],
-              'description':   'An invalid pointer dereference on read can be triggered when an\napplication tries to load malformed PKCS7 data with the\nd2i_PKCS7(), d2i_PKCS7_bio() or d2i_PKCS7_fp() functions.\n\nThe result of the dereference is an application crash which could\nlead to a denial of service attack. The TLS implementation in OpenSSL\ndoes not call this function however third party applications might\ncall these functions on untrusted data.',
-              'diffID':        'sha256:0e3395c9c4d69931dec5029f4c593bdabd1bf4cc1c06b7d568ee72ea29783132',
-              'fixedVersions': [
-                '3.0.8-r0'
-              ],
-              'installedVersion': '3.0.7-r2',
-              'packageName':      'libssl3',
-              'purl':             'pkg:apk/alpine/libssl3@3.0.7-r2?arch=ppc64le&distro=3.17.1',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2023:0946',
-                'https://access.redhat.com/security/cve/CVE-2023-0216',
-                'https://bugzilla.redhat.com/2164440',
-                'https://bugzilla.redhat.com/2164487',
-                'https://bugzilla.redhat.com/2164488',
-                'https://bugzilla.redhat.com/2164492',
-                'https://bugzilla.redhat.com/2164494',
-                'https://bugzilla.redhat.com/2164497',
-                'https://bugzilla.redhat.com/2164499',
-                'https://bugzilla.redhat.com/2164500',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144000',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144003',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144006',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144008',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144010',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144012',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144015',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144017',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144019',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2145170',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2158412',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164440',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164487',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164488',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164492',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164497',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164499',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164500',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4203',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4304',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4450',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0215',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0216',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0217',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0286',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0401',
-                'https://errata.almalinux.org/9/ALSA-2023-0946.html',
-                'https://errata.rockylinux.org/RLSA-2023:0946',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=934a04f0e775309cadbef0aa6b9692e1b12a76c6',
-                'https://linux.oracle.com/cve/CVE-2023-0216.html',
-                'https://linux.oracle.com/errata/ELSA-2023-12152.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-0216',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0003',
-                'https://rustsec.org/advisories/RUSTSEC-2023-0011.html',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://ubuntu.com/security/notices/USN-5844-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-0216',
-                'https://www.openssl.org/news/secadv/20230207.txt'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: invalid pointer dereference in d2i_PKCS7 functions'
-            },
-            {
-              'cve':  'CVE-2023-0217',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'nvd': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-476'
-              ],
-              'description':   'An invalid pointer dereference on read can be triggered when an\napplication tries to check a malformed DSA public key by the\nEVP_PKEY_public_check() function. This will most likely lead\nto an application crash. This function can be called on public\nkeys supplied from untrusted sources which could allow an attacker\nto cause a denial of service attack.\n\nThe TLS implementation in OpenSSL does not call this function\nbut applications might call the function if there are additional\nsecurity requirements imposed by standards such as FIPS 140-3.',
-              'diffID':        'sha256:0e3395c9c4d69931dec5029f4c593bdabd1bf4cc1c06b7d568ee72ea29783132',
-              'fixedVersions': [
-                '3.0.8-r0'
-              ],
-              'installedVersion': '3.0.7-r2',
-              'packageName':      'libssl3',
-              'purl':             'pkg:apk/alpine/libssl3@3.0.7-r2?arch=ppc64le&distro=3.17.1',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2023:0946',
-                'https://access.redhat.com/security/cve/CVE-2023-0217',
-                'https://bugzilla.redhat.com/2164440',
-                'https://bugzilla.redhat.com/2164487',
-                'https://bugzilla.redhat.com/2164488',
-                'https://bugzilla.redhat.com/2164492',
-                'https://bugzilla.redhat.com/2164494',
-                'https://bugzilla.redhat.com/2164497',
-                'https://bugzilla.redhat.com/2164499',
-                'https://bugzilla.redhat.com/2164500',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144000',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144003',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144006',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144008',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144010',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144012',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144015',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144017',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144019',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2145170',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2158412',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164440',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164487',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164488',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164492',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164497',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164499',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164500',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4203',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4304',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4450',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0215',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0216',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0217',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0286',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0401',
-                'https://errata.almalinux.org/9/ALSA-2023-0946.html',
-                'https://errata.rockylinux.org/RLSA-2023:0946',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=23985bac83fd50c8e29431009302b5442f985096',
-                'https://linux.oracle.com/cve/CVE-2023-0217.html',
-                'https://linux.oracle.com/errata/ELSA-2023-12152.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-0217',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0003',
-                'https://rustsec.org/advisories/RUSTSEC-2023-0012.html',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://ubuntu.com/security/notices/USN-5844-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-0217',
-                'https://www.openssl.org/news/secadv/20230207.txt'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: NULL dereference validating DSA public key'
-            },
-            {
-              'cve':  'CVE-2023-0286',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '7.4',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H'
-                },
-                'nvd': {
-                  'v3score':  '7.4',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.4',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-843'
-              ],
-              'description':   'There is a type confusion vulnerability relating to X.400 address processing\ninside an X.509 GeneralName. X.400 addresses were parsed as an ASN1_STRING but\nthe public structure definition for GENERAL_NAME incorrectly specified the type\nof the x400Address field as ASN1_TYPE. This field is subsequently interpreted by\nthe OpenSSL function GENERAL_NAME_cmp as an ASN1_TYPE rather than an\nASN1_STRING.\n\nWhen CRL checking is enabled (i.e. the application sets the\nX509_V_FLAG_CRL_CHECK flag), this vulnerability may allow an attacker to pass\narbitrary pointers to a memcmp call, enabling them to read memory contents or\nenact a denial of service. In most cases, the attack requires the attacker to\nprovide both the certificate chain and CRL, neither of which need to have a\nvalid signature. If the attacker only controls one of these inputs, the other\ninput must already contain an X.400 address as a CRL distribution point, which\nis uncommon. As such, this vulnerability is most likely to only affect\napplications which have implemented their own functionality for retrieving CRLs\nover a network.',
-              'diffID':        'sha256:0e3395c9c4d69931dec5029f4c593bdabd1bf4cc1c06b7d568ee72ea29783132',
-              'fixedVersions': [
-                '3.0.8-r0'
-              ],
-              'installedVersion': '3.0.7-r2',
-              'packageName':      'libssl3',
-              'purl':             'pkg:apk/alpine/libssl3@3.0.7-r2?arch=ppc64le&distro=3.17.1',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2025:7937',
-                'https://access.redhat.com/security/cve/CVE-2023-0286',
-                'https://access.redhat.com/security/cve/cve-2023-0286',
-                'https://bugzilla.redhat.com/2164440',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144000',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144003',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144006',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144008',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144010',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144012',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144015',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144017',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144019',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2145170',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2158412',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164440',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164487',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164488',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164492',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164497',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164499',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164500',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4203',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4304',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4450',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0215',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0216',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0217',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0286',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0401',
-                'https://errata.almalinux.org/9/ALSA-2025-7937.html',
-                'https://errata.rockylinux.org/RLSA-2023:0946',
-                'https://ftp.openbsd.org/pub/OpenBSD/LibreSSL/libressl-3.6.2-relnotes.txt',
-                'https://ftp.openbsd.org/pub/OpenBSD/patches/7.2/common/018_x509.patch.sig',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=2c6c9d439b484e1ba9830d8454a34fa4f80fdfe9',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=2f7530077e0ef79d98718138716bc51ca0cad658',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=fd2af07dc083a350c959147097003a14a5e8ac4d',
-                'https://github.com/pyca/cryptography',
-                'https://github.com/pyca/cryptography/security/advisories/GHSA-x4qr-2fvf-3mr5',
-                'https://linux.oracle.com/cve/CVE-2023-0286.html',
-                'https://linux.oracle.com/errata/ELSA-2025-7937.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-0286',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0003',
-                'https://rustsec.org/advisories/RUSTSEC-2023-0006.html',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://ubuntu.com/security/notices/USN-5844-1',
-                'https://ubuntu.com/security/notices/USN-5845-1',
-                'https://ubuntu.com/security/notices/USN-5845-2',
-                'https://ubuntu.com/security/notices/USN-6564-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-0286',
-                'https://www.openssl.org/news/secadv/20230207.txt'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: X.400 address type confusion in X.509 GeneralName'
-            },
-            {
-              'cve':  'CVE-2023-0401',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'nvd': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-476'
-              ],
-              'description':   'A NULL pointer can be dereferenced when signatures are being\nverified on PKCS7 signed or signedAndEnveloped data. In case the hash\nalgorithm used for the signature is known to the OpenSSL library but\nthe implementation of the hash algorithm is not available the digest\ninitialization will fail. There is a missing check for the return\nvalue from the initialization function which later leads to invalid\nusage of the digest API most likely leading to a crash.\n\nThe unavailability of an algorithm can be caused by using FIPS\nenabled configuration of providers or more commonly by not loading\nthe legacy provider.\n\nPKCS7 data is processed by the SMIME library calls and also by the\ntime stamp (TS) library calls. The TLS implementation in OpenSSL does\nnot call these functions however third party applications would be\naffected if they call these functions to verify signatures on untrusted\ndata.',
-              'diffID':        'sha256:0e3395c9c4d69931dec5029f4c593bdabd1bf4cc1c06b7d568ee72ea29783132',
-              'fixedVersions': [
-                '3.0.8-r0'
-              ],
-              'installedVersion': '3.0.7-r2',
-              'packageName':      'libssl3',
-              'purl':             'pkg:apk/alpine/libssl3@3.0.7-r2?arch=ppc64le&distro=3.17.1',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2023:0946',
-                'https://access.redhat.com/security/cve/CVE-2023-0401',
-                'https://bugzilla.redhat.com/2164440',
-                'https://bugzilla.redhat.com/2164487',
-                'https://bugzilla.redhat.com/2164488',
-                'https://bugzilla.redhat.com/2164492',
-                'https://bugzilla.redhat.com/2164494',
-                'https://bugzilla.redhat.com/2164497',
-                'https://bugzilla.redhat.com/2164499',
-                'https://bugzilla.redhat.com/2164500',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144000',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144003',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144006',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144008',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144010',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144012',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144015',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144017',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144019',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2145170',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2158412',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164440',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164487',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164488',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164492',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164497',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164499',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164500',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4203',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4304',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4450',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0215',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0216',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0217',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0286',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0401',
-                'https://errata.almalinux.org/9/ALSA-2023-0946.html',
-                'https://errata.rockylinux.org/RLSA-2023:0946',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=d3b6dfd70db844c4499bec6ad6601623a565e674',
-                'https://github.com/alexcrichton/openssl-src-rs',
-                'https://linux.oracle.com/cve/CVE-2023-0401.html',
-                'https://linux.oracle.com/errata/ELSA-2023-12152.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-0401',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0003',
-                'https://rustsec.org/advisories/RUSTSEC-2023-0013.html',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://ubuntu.com/security/notices/USN-5844-1',
-                'https://ubuntu.com/security/notices/USN-6564-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-0401',
-                'https://www.openssl.org/news/secadv/20230207.txt'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: NULL dereference during PKCS7 data verification'
-            },
-            {
-              'cve':  'CVE-2023-0464',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-295'
-              ],
-              'description':   "A security vulnerability has been identified in all supported versions\n\nof OpenSSL related to the verification of X.509 certificate chains\nthat include policy constraints.  Attackers may be able to exploit this\nvulnerability by creating a malicious certificate chain that triggers\nexponential use of computational resources, leading to a denial-of-service\n(DoS) attack on affected systems.\n\nPolicy processing is disabled by default but can be enabled by passing\nthe `-policy' argument to the command line utilities or by calling the\n`X509_VERIFY_PARAM_set1_policies()' function.",
-              'diffID':        'sha256:0e3395c9c4d69931dec5029f4c593bdabd1bf4cc1c06b7d568ee72ea29783132',
-              'fixedVersions': [
-                '3.0.8-r1'
-              ],
-              'installedVersion': '3.0.7-r2',
-              'packageName':      'libssl3',
-              'purl':             'pkg:apk/alpine/libssl3@3.0.7-r2?arch=ppc64le&distro=3.17.1',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2023:3722',
-                'https://access.redhat.com/security/cve/CVE-2023-0464',
-                'https://bugzilla.redhat.com/2181082',
-                'https://bugzilla.redhat.com/2182561',
-                'https://bugzilla.redhat.com/2182565',
-                'https://bugzilla.redhat.com/2188461',
-                'https://bugzilla.redhat.com/2207947',
-                'https://errata.almalinux.org/9/ALSA-2023-3722.html',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=2017771e2db3e2b96f89bbe8766c3209f6a99545',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=2dcd4f1e3115f38cefa43e3efbe9b801c27e642e',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=879f7080d7e141f415c79eaa3a8ac4a3dad0348b',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=959c59c7a0164117e7f8366466a32bb1f8d77ff1',
-                'https://linux.oracle.com/cve/CVE-2023-0464.html',
-                'https://linux.oracle.com/errata/ELSA-2023-3722.html',
-                'https://lists.debian.org/debian-lts-announce/2023/06/msg00011.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-0464',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://security.netapp.com/advisory/ntap-20230406-0006/',
-                'https://security.netapp.com/advisory/ntap-20240621-0006/',
-                'https://ubuntu.com/security/notices/USN-6039-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.couchbase.com/alerts/',
-                'https://www.cve.org/CVERecord?id=CVE-2023-0464',
-                'https://www.debian.org/security/2023/dsa-5417',
-                'https://www.openssl.org/news/secadv/20230322.txt'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: Denial of service by excessive resource usage in verifying X509 policy constraints'
-            },
-            {
-              'cve':  'CVE-2023-5363',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N'
-                },
-                'redhat': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-684'
-              ],
-              'description':   "Issue summary: A bug has been identified in the processing of key and\ninitialisation vector (IV) lengths.  This can lead to potential truncation\nor overruns during the initialisation of some symmetric ciphers.\n\nImpact summary: A truncation in the IV can result in non-uniqueness,\nwhich could result in loss of confidentiality for some cipher modes.\n\nWhen calling EVP_EncryptInit_ex2(), EVP_DecryptInit_ex2() or\nEVP_CipherInit_ex2() the provided OSSL_PARAM array is processed after\nthe key and IV have been established.  Any alterations to the key length,\nvia the \"keylen\" parameter or the IV length, via the \"ivlen\" parameter,\nwithin the OSSL_PARAM array will not take effect as intended, potentially\ncausing truncation or overreading of these values.  The following ciphers\nand cipher modes are impacted: RC2, RC4, RC5, CCM, GCM and OCB.\n\nFor the CCM, GCM and OCB cipher modes, truncation of the IV can result in\nloss of confidentiality.  For example, when following NIST's SP 800-38D\nsection 8.2.1 guidance for constructing a deterministic IV for AES in\nGCM mode, truncation of the counter portion could lead to IV reuse.\n\nBoth truncations and overruns of the key and overruns of the IV will\nproduce incorrect results and could, in some cases, trigger a memory\nexception.  However, these issues are not currently assessed as security\ncritical.\n\nChanging the key and/or IV lengths is not considered to be a common operation\nand the vulnerable API was recently introduced. Furthermore it is likely that\napplication developers will have spotted this problem during testing since\ndecryption would fail unless both peers in the communication were similarly\nvulnerable. For these reasons we expect the probability of an application being\nvulnerable to this to be quite low. However if an application is vulnerable then\nthis issue is considered very serious. For these reasons we have assessed this\nissue as Moderate severity overall.\n\nThe OpenSSL SSL/TLS implementation is not affected by this issue.\n\nThe OpenSSL 3.0 and 3.1 FIPS providers are not affected by this because\nthe issue lies outside of the FIPS provider boundary.\n\nOpenSSL 3.1 and 3.0 are vulnerable to this issue.",
-              'diffID':        'sha256:0e3395c9c4d69931dec5029f4c593bdabd1bf4cc1c06b7d568ee72ea29783132',
-              'fixedVersions': [
-                '3.0.12-r0'
-              ],
-              'installedVersion': '3.0.7-r2',
-              'packageName':      'libssl3',
-              'purl':             'pkg:apk/alpine/libssl3@3.0.7-r2?arch=ppc64le&distro=3.17.1',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2023/10/24/1',
-                'https://access.redhat.com/errata/RHSA-2024:0310',
-                'https://access.redhat.com/security/cve/CVE-2023-5363',
-                'https://bugzilla.redhat.com/2243839',
-                'https://errata.almalinux.org/9/ALSA-2024-0310.html',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=0df40630850fb2740e6be6890bb905d3fc623b2d',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=5f69f5c65e483928c4b28ed16af6e5742929f1ee',
-                'https://linux.oracle.com/cve/CVE-2023-5363.html',
-                'https://linux.oracle.com/errata/ELSA-2024-12093.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-5363',
-                'https://security.netapp.com/advisory/ntap-20231027-0010/',
-                'https://security.netapp.com/advisory/ntap-20240201-0003/',
-                'https://security.netapp.com/advisory/ntap-20240201-0004/',
-                'https://security.netapp.com/advisory/ntap-20241108-0002/',
-                'https://ubuntu.com/security/notices/USN-6450-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-5363',
-                'https://www.debian.org/security/2023/dsa-5532',
-                'https://www.openssl.org/news/secadv/20231024.txt'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: Incorrect cipher key and IV length processing'
-            },
-            {
-              'cve':  'CVE-2024-6119',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-843'
-              ],
-              'description':   "Issue summary: Applications performing certificate name checks (e.g., TLS\nclients checking server certificates) may attempt to read an invalid memory\naddress resulting in abnormal termination of the application process.\n\nImpact summary: Abnormal termination of an application can a cause a denial of\nservice.\n\nApplications performing certificate name checks (e.g., TLS clients checking\nserver certificates) may attempt to read an invalid memory address when\ncomparing the expected name with an `otherName` subject alternative name of an\nX.509 certificate. This may result in an exception that terminates the\napplication program.\n\nNote that basic certificate chain validation (signatures, dates, ...) is not\naffected, the denial of service can occur only when the application also\nspecifies an expected DNS name, Email address or IP address.\n\nTLS servers rarely solicit client certificates, and even when they do, they\ngenerally don't perform a name check against a reference identifier (expected\nidentity), but rather extract the presented identity after checking the\ncertificate chain.  So TLS servers are generally not affected and the severity\nof the issue is Moderate.\n\nThe FIPS modules in 3.3, 3.2, 3.1 and 3.0 are not affected by this issue.",
-              'diffID':        'sha256:0e3395c9c4d69931dec5029f4c593bdabd1bf4cc1c06b7d568ee72ea29783132',
-              'fixedVersions': [
-                '3.0.15-r0'
-              ],
-              'installedVersion': '3.0.7-r2',
-              'packageName':      'libssl3',
-              'purl':             'pkg:apk/alpine/libssl3@3.0.7-r2?arch=ppc64le&distro=3.17.1',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2024/09/03/4',
-                'https://access.redhat.com/errata/RHSA-2024:8935',
-                'https://access.redhat.com/security/cve/CVE-2024-6119',
-                'https://bugzilla.redhat.com/2306158',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2306158',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-6119',
-                'https://errata.almalinux.org/9/ALSA-2024-8935.html',
-                'https://errata.rockylinux.org/RLSA-2024:6783',
-                'https://github.com/openssl/openssl/commit/05f360d9e849a1b277db628f1f13083a7f8dd04f',
-                'https://github.com/openssl/openssl/commit/06d1dc3fa96a2ba5a3e22735a033012aadc9f0d6',
-                'https://github.com/openssl/openssl/commit/621f3729831b05ee828a3203eddb621d014ff2b2',
-                'https://github.com/openssl/openssl/commit/7dfcee2cd2a63b2c64b9b4b0850be64cb695b0a0',
-                'https://github.com/openssl/openssl/security/advisories/GHSA-5qrj-vq78-58fj',
-                'https://linux.oracle.com/cve/CVE-2024-6119.html',
-                'https://linux.oracle.com/errata/ELSA-2024-8935.html',
-                'https://lists.freebsd.org/archives/freebsd-security/2024-September/000303.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2024-6119',
-                'https://openssl-library.org/news/secadv/20240903.txt',
-                'https://security.netapp.com/advisory/ntap-20240912-0001/',
-                'https://ubuntu.com/security/notices/USN-6986-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2024-6119'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: Possible denial of service in X.509 name checks'
-            },
-            {
-              'cve':  'CVE-2022-4203',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '9.1',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H'
-                },
-                'nvd': {
-                  'v3score':  '4.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '4.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-125'
-              ],
-              'description':   'A read buffer overrun can be triggered in X.509 certificate verification,\nspecifically in name constraint checking. Note that this occurs\nafter certificate chain signature verification and requires either a\nCA to have signed the malicious certificate or for the application to\ncontinue certificate verification despite failure to construct a path\nto a trusted issuer.\n\nThe read buffer overrun might result in a crash which could lead to\na denial of service attack. In theory it could also result in the disclosure\nof private memory contents (such as private keys, or sensitive plaintext)\nalthough we are not aware of any working exploit leading to memory\ncontents disclosure as of the time of release of this advisory.\n\nIn a TLS client, this can be triggered by connecting to a malicious\nserver. In a TLS server, this can be triggered if the server requests\nclient authentication and a malicious client connects.',
-              'diffID':        'sha256:0e3395c9c4d69931dec5029f4c593bdabd1bf4cc1c06b7d568ee72ea29783132',
-              'fixedVersions': [
-                '3.0.8-r0'
-              ],
-              'installedVersion': '3.0.7-r2',
-              'packageName':      'libssl3',
-              'purl':             'pkg:apk/alpine/libssl3@3.0.7-r2?arch=ppc64le&distro=3.17.1',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2023:0946',
-                'https://access.redhat.com/security/cve/CVE-2022-4203',
-                'https://bugzilla.redhat.com/2164440',
-                'https://bugzilla.redhat.com/2164487',
-                'https://bugzilla.redhat.com/2164488',
-                'https://bugzilla.redhat.com/2164492',
-                'https://bugzilla.redhat.com/2164494',
-                'https://bugzilla.redhat.com/2164497',
-                'https://bugzilla.redhat.com/2164499',
-                'https://bugzilla.redhat.com/2164500',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144000',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144003',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144006',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144008',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144010',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144012',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144015',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144017',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144019',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2145170',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2158412',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164440',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164487',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164488',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164492',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164497',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164499',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164500',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4203',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4304',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4450',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0215',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0216',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0217',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0286',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0401',
-                'https://errata.almalinux.org/9/ALSA-2023-0946.html',
-                'https://errata.rockylinux.org/RLSA-2023:0946',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=c927a3492698c254637da836762f9b1f86cffabc',
-                'https://linux.oracle.com/cve/CVE-2022-4203.html',
-                'https://linux.oracle.com/errata/ELSA-2023-12152.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2022-4203',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0003',
-                'https://rustsec.org/advisories/RUSTSEC-2023-0008.html',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://ubuntu.com/security/notices/USN-5844-1',
-                'https://www.cve.org/CVERecord?id=CVE-2022-4203',
-                'https://www.openssl.org/news/secadv/20230207.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: read buffer overflow in X.509 certificate verification'
-            },
-            {
-              'cve':  'CVE-2022-4304',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N'
-                },
-                'nvd': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N'
-                },
-                'redhat': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-203'
-              ],
-              'description':   'A timing based side channel exists in the OpenSSL RSA Decryption implementation\nwhich could be sufficient to recover a plaintext across a network in a\nBleichenbacher style attack. To achieve a successful decryption an attacker\nwould have to be able to send a very large number of trial messages for\ndecryption. The vulnerability affects all RSA padding modes: PKCS#1 v1.5,\nRSA-OEAP and RSASVE.\n\nFor example, in a TLS connection, RSA is commonly used by a client to send an\nencrypted pre-master secret to the server. An attacker that had observed a\ngenuine connection between a client and a server could use this flaw to send\ntrial messages to the server and record the time taken to process them. After a\nsufficiently large number of messages the attacker could recover the pre-master\nsecret used for the original connection and thus be able to decrypt the\napplication data sent over that connection.',
-              'diffID':        'sha256:0e3395c9c4d69931dec5029f4c593bdabd1bf4cc1c06b7d568ee72ea29783132',
-              'fixedVersions': [
-                '3.0.8-r0'
-              ],
-              'installedVersion': '3.0.7-r2',
-              'packageName':      'libssl3',
-              'purl':             'pkg:apk/alpine/libssl3@3.0.7-r2?arch=ppc64le&distro=3.17.1',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2023:2165',
-                'https://access.redhat.com/security/cve/CVE-2022-4304',
-                'https://bugzilla.redhat.com/1960321',
-                'https://bugzilla.redhat.com/2164440',
-                'https://bugzilla.redhat.com/2164487',
-                'https://bugzilla.redhat.com/2164492',
-                'https://bugzilla.redhat.com/2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144000',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144003',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144006',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144008',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144010',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144012',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144015',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144017',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144019',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2145170',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2158412',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164440',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164487',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164488',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164492',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164497',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164499',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164500',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4203',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4304',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4450',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0215',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0216',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0217',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0286',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0401',
-                'https://errata.almalinux.org/9/ALSA-2023-2165.html',
-                'https://errata.rockylinux.org/RLSA-2023:0946',
-                'https://linux.oracle.com/cve/CVE-2022-4304.html',
-                'https://linux.oracle.com/errata/ELSA-2023-32791.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2022-4304',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0003',
-                'https://rustsec.org/advisories/RUSTSEC-2023-0007.html',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://ubuntu.com/security/notices/USN-5844-1',
-                'https://ubuntu.com/security/notices/USN-6564-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2022-4304',
-                'https://www.openssl.org/news/secadv/20230207.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: timing attack in RSA Decryption implementation'
-            },
-            {
-              'cve':  'CVE-2023-0465',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N'
-                },
-                'redhat': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-295'
-              ],
-              'description':   "Applications that use a non-default option when verifying certificates may be\nvulnerable to an attack from a malicious CA to circumvent certain checks.\n\nInvalid certificate policies in leaf certificates are silently ignored by\nOpenSSL and other certificate policy checks are skipped for that certificate.\nA malicious CA could use this to deliberately assert invalid certificate policies\nin order to circumvent policy checking on the certificate altogether.\n\nPolicy processing is disabled by default but can be enabled by passing\nthe `-policy' argument to the command line utilities or by calling the\n`X509_VERIFY_PARAM_set1_policies()' function.",
-              'diffID':        'sha256:0e3395c9c4d69931dec5029f4c593bdabd1bf4cc1c06b7d568ee72ea29783132',
-              'fixedVersions': [
-                '3.0.8-r2'
-              ],
-              'installedVersion': '3.0.7-r2',
-              'packageName':      'libssl3',
-              'purl':             'pkg:apk/alpine/libssl3@3.0.7-r2?arch=ppc64le&distro=3.17.1',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2023:3722',
-                'https://access.redhat.com/security/cve/CVE-2023-0465',
-                'https://bugzilla.redhat.com/2181082',
-                'https://bugzilla.redhat.com/2182561',
-                'https://bugzilla.redhat.com/2182565',
-                'https://bugzilla.redhat.com/2188461',
-                'https://bugzilla.redhat.com/2207947',
-                'https://errata.almalinux.org/9/ALSA-2023-3722.html',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=10325176f3d3e98c6e2b3bf5ab1e3b334de6947a',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=1dd43e0709fece299b15208f36cc7c76209ba0bb',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=b013765abfa80036dc779dd0e50602c57bb3bf95',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=facfb1ab745646e97a1920977ae4a9965ea61d5c',
-                'https://linux.oracle.com/cve/CVE-2023-0465.html',
-                'https://linux.oracle.com/errata/ELSA-2023-3722.html',
-                'https://lists.debian.org/debian-lts-announce/2023/06/msg00011.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-0465',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://security.netapp.com/advisory/ntap-20230414-0001/',
-                'https://ubuntu.com/security/notices/USN-6039-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-0465',
-                'https://www.debian.org/security/2023/dsa-5417',
-                'https://www.openssl.org/news/secadv/20230328.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: Invalid certificate policies in leaf certificates are silently ignored'
-            },
-            {
-              'cve':  'CVE-2023-0466',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N'
-                },
-                'redhat': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-295'
-              ],
-              'description':   'The function X509_VERIFY_PARAM_add0_policy() is documented to\nimplicitly enable the certificate policy check when doing certificate\nverification. However the implementation of the function does not\nenable the check which allows certificates with invalid or incorrect\npolicies to pass the certificate verification.\n\nAs suddenly enabling the policy check could break existing deployments it was\ndecided to keep the existing behavior of the X509_VERIFY_PARAM_add0_policy()\nfunction.\n\nInstead the applications that require OpenSSL to perform certificate\npolicy check need to use X509_VERIFY_PARAM_set1_policies() or explicitly\nenable the policy check by calling X509_VERIFY_PARAM_set_flags() with\nthe X509_V_FLAG_POLICY_CHECK flag argument.\n\nCertificate policy checks are disabled by default in OpenSSL and are not\ncommonly used by applications.',
-              'diffID':        'sha256:0e3395c9c4d69931dec5029f4c593bdabd1bf4cc1c06b7d568ee72ea29783132',
-              'fixedVersions': [
-                '3.0.8-r3'
-              ],
-              'installedVersion': '3.0.7-r2',
-              'packageName':      'libssl3',
-              'purl':             'pkg:apk/alpine/libssl3@3.0.7-r2?arch=ppc64le&distro=3.17.1',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2023/09/28/4',
-                'https://access.redhat.com/errata/RHSA-2023:3722',
-                'https://access.redhat.com/security/cve/CVE-2023-0466',
-                'https://bugzilla.redhat.com/2181082',
-                'https://bugzilla.redhat.com/2182561',
-                'https://bugzilla.redhat.com/2182565',
-                'https://bugzilla.redhat.com/2188461',
-                'https://bugzilla.redhat.com/2207947',
-                'https://errata.almalinux.org/9/ALSA-2023-3722.html',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=0d16b7e99aafc0b4a6d729eec65a411a7e025f0a',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=51e8a84ce742db0f6c70510d0159dad8f7825908',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=73398dea26de9899fb4baa94098ad0a61f435c72',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=fc814a30fc4f0bc54fcea7d9a7462f5457aab061',
-                'https://linux.oracle.com/cve/CVE-2023-0466.html',
-                'https://linux.oracle.com/errata/ELSA-2023-3722.html',
-                'https://lists.debian.org/debian-lts-announce/2023/06/msg00011.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-0466',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://security.netapp.com/advisory/ntap-20230414-0001/',
-                'https://ubuntu.com/security/notices/USN-6039-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-0466',
-                'https://www.debian.org/security/2023/dsa-5417',
-                'https://www.openssl.org/news/secadv/20230328.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: Certificate policy check not enabled'
-            },
-            {
-              'cve':  'CVE-2023-1255',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '5.1',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-125'
-              ],
-              'description':   'Issue summary: The AES-XTS cipher decryption implementation for 64 bit ARM\nplatform contains a bug that could cause it to read past the input buffer,\nleading to a crash.\n\nImpact summary: Applications that use the AES-XTS algorithm on the 64 bit ARM\nplatform can crash in rare circumstances. The AES-XTS algorithm is usually\nused for disk encryption.\n\nThe AES-XTS cipher decryption implementation for 64 bit ARM platform will read\npast the end of the ciphertext buffer if the ciphertext size is 4 mod 5 in 16\nbyte blocks, e.g. 144 bytes or 1024 bytes. If the memory after the ciphertext\nbuffer is unmapped, this will trigger a crash which results in a denial of\nservice.\n\nIf an attacker can control the size and location of the ciphertext buffer\nbeing decrypted by an application using AES-XTS on 64 bit ARM, the\napplication is affected. This is fairly unlikely making this issue\na Low severity one.',
-              'diffID':        'sha256:0e3395c9c4d69931dec5029f4c593bdabd1bf4cc1c06b7d568ee72ea29783132',
-              'fixedVersions': [
-                '3.0.8-r4'
-              ],
-              'installedVersion': '3.0.7-r2',
-              'packageName':      'libssl3',
-              'purl':             'pkg:apk/alpine/libssl3@3.0.7-r2?arch=ppc64le&distro=3.17.1',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2023:3722',
-                'https://access.redhat.com/security/cve/CVE-2023-1255',
-                'https://bugzilla.redhat.com/2181082',
-                'https://bugzilla.redhat.com/2182561',
-                'https://bugzilla.redhat.com/2182565',
-                'https://bugzilla.redhat.com/2188461',
-                'https://bugzilla.redhat.com/2207947',
-                'https://errata.almalinux.org/9/ALSA-2023-3722.html',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=02ac9c9420275868472f33b01def01218742b8bb',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=bc2f61ad70971869b242fc1cb445b98bad50074a',
-                'https://linux.oracle.com/cve/CVE-2023-1255.html',
-                'https://linux.oracle.com/errata/ELSA-2023-3722.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-1255',
-                'https://security.netapp.com/advisory/ntap-20230908-0006/',
-                'https://ubuntu.com/security/notices/USN-6119-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-1255',
-                'https://www.openssl.org/news/secadv/20230419.txt',
-                'https://www.openssl.org/news/secadv/20230420.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: Input buffer over-read in AES-XTS implementation on 64 bit ARM'
-            },
-            {
-              'cve':  'CVE-2023-2650',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '6.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-770'
-              ],
-              'description':   "Issue summary: Processing some specially crafted ASN.1 object identifiers or\ndata containing them may be very slow.\n\nImpact summary: Applications that use OBJ_obj2txt() directly, or use any of\nthe OpenSSL subsystems OCSP, PKCS7/SMIME, CMS, CMP/CRMF or TS with no message\nsize limit may experience notable to very long delays when processing those\nmessages, which may lead to a Denial of Service.\n\nAn OBJECT IDENTIFIER is composed of a series of numbers - sub-identifiers -\nmost of which have no size limit.  OBJ_obj2txt() may be used to translate\nan ASN.1 OBJECT IDENTIFIER given in DER encoding form (using the OpenSSL\ntype ASN1_OBJECT) to its canonical numeric text form, which are the\nsub-identifiers of the OBJECT IDENTIFIER in decimal form, separated by\nperiods.\n\nWhen one of the sub-identifiers in the OBJECT IDENTIFIER is very large\n(these are sizes that are seen as absurdly large, taking up tens or hundreds\nof KiBs), the translation to a decimal number in text may take a very long\ntime.  The time complexity is O(n^2) with 'n' being the size of the\nsub-identifiers in bytes (*).\n\nWith OpenSSL 3.0, support to fetch cryptographic algorithms using names /\nidentifiers in string form was introduced.  This includes using OBJECT\nIDENTIFIERs in canonical numeric text form as identifiers for fetching\nalgorithms.\n\nSuch OBJECT IDENTIFIERs may be received through the ASN.1 structure\nAlgorithmIdentifier, which is commonly used in multiple protocols to specify\nwhat cryptographic algorithm should be used to sign or verify, encrypt or\ndecrypt, or digest passed data.\n\nApplications that call OBJ_obj2txt() directly with untrusted data are\naffected, with any version of OpenSSL.  If the use is for the mere purpose\nof display, the severity is considered low.\n\nIn OpenSSL 3.0 and newer, this affects the subsystems OCSP, PKCS7/SMIME,\nCMS, CMP/CRMF or TS.  It also impacts anything that processes X.509\ncertificates, including simple things like verifying its signature.\n\nThe impact on TLS is relatively low, because all versions of OpenSSL have a\n100KiB limit on the peer's certificate chain.  Additionally, this only\nimpacts clients, or servers that have explicitly enabled client\nauthentication.\n\nIn OpenSSL 1.1.1 and 1.0.2, this only affects displaying diverse objects,\nsuch as X.509 certificates.  This is assumed to not happen in such a way\nthat it would cause a Denial of Service, so these versions are considered\nnot affected by this issue in such a way that it would be cause for concern,\nand the severity is therefore considered low.",
-              'diffID':        'sha256:0e3395c9c4d69931dec5029f4c593bdabd1bf4cc1c06b7d568ee72ea29783132',
-              'fixedVersions': [
-                '3.0.9-r0'
-              ],
-              'installedVersion': '3.0.7-r2',
-              'packageName':      'libssl3',
-              'purl':             'pkg:apk/alpine/libssl3@3.0.7-r2?arch=ppc64le&distro=3.17.1',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2023/05/30/1',
-                'https://access.redhat.com/errata/RHSA-2023:6330',
-                'https://access.redhat.com/security/cve/CVE-2023-2650',
-                'https://bugzilla.redhat.com/1858038',
-                'https://bugzilla.redhat.com/2207947',
-                'https://errata.almalinux.org/9/ALSA-2023-6330.html',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=423a2bc737a908ad0c77bda470b2b59dc879936b',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=853c5e56ee0b8650c73140816bb8b91d6163422c',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=9e209944b35cf82368071f160a744b6178f9b098',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=db779b0e10b047f2585615e0b8f2acdf21f8544a',
-                'https://linux.oracle.com/cve/CVE-2023-2650.html',
-                'https://linux.oracle.com/errata/ELSA-2023-6330.html',
-                'https://lists.debian.org/debian-lts-announce/2023/06/msg00011.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-2650',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0009',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://security.netapp.com/advisory/ntap-20230703-0001/',
-                'https://security.netapp.com/advisory/ntap-20231027-0009/',
-                'https://ubuntu.com/security/notices/USN-6119-1',
-                'https://ubuntu.com/security/notices/USN-6188-1',
-                'https://ubuntu.com/security/notices/USN-6672-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-2650',
-                'https://www.debian.org/security/2023/dsa-5417',
-                'https://www.openssl.org/news/secadv/20230530.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: Possible DoS translating ASN.1 object identifiers'
-            },
-            {
-              'cve':  'CVE-2023-2975',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N'
-                },
-                'redhat': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-354',
-                'CWE-287'
-              ],
-              'description':   'Issue summary: The AES-SIV cipher implementation contains a bug that causes\nit to ignore empty associated data entries which are unauthenticated as\na consequence.\n\nImpact summary: Applications that use the AES-SIV algorithm and want to\nauthenticate empty data entries as associated data can be misled by removing,\nadding or reordering such empty entries as these are ignored by the OpenSSL\nimplementation. We are currently unaware of any such applications.\n\nThe AES-SIV algorithm allows for authentication of multiple associated\ndata entries along with the encryption. To authenticate empty data the\napplication has to call EVP_EncryptUpdate() (or EVP_CipherUpdate()) with\nNULL pointer as the output buffer and 0 as the input buffer length.\nThe AES-SIV implementation in OpenSSL just returns success for such a call\ninstead of performing the associated data authentication operation.\nThe empty data thus will not be authenticated.\n\nAs this issue does not affect non-empty associated data authentication and\nwe expect it to be rare for an application to use empty associated data\nentries this is qualified as Low severity issue.',
-              'diffID':        'sha256:0e3395c9c4d69931dec5029f4c593bdabd1bf4cc1c06b7d568ee72ea29783132',
-              'fixedVersions': [
-                '3.0.9-r2'
-              ],
-              'installedVersion': '3.0.7-r2',
-              'packageName':      'libssl3',
-              'purl':             'pkg:apk/alpine/libssl3@3.0.7-r2?arch=ppc64le&distro=3.17.1',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2023/07/15/1',
-                'http://www.openwall.com/lists/oss-security/2023/07/19/5',
-                'https://access.redhat.com/errata/RHSA-2024:2447',
-                'https://access.redhat.com/security/cve/CVE-2023-2975',
-                'https://bugzilla.redhat.com/2223016',
-                'https://bugzilla.redhat.com/2224962',
-                'https://bugzilla.redhat.com/2227852',
-                'https://bugzilla.redhat.com/2248616',
-                'https://bugzilla.redhat.com/2257571',
-                'https://bugzilla.redhat.com/2258502',
-                'https://bugzilla.redhat.com/2259944',
-                'https://errata.almalinux.org/9/ALSA-2024-2447.html',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=00e2f5eea29994d19293ec4e8c8775ba73678598',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=6a83f0c958811f07e0d11dfc6b5a6a98edfd5bdc',
-                'https://linux.oracle.com/cve/CVE-2023-2975.html',
-                'https://linux.oracle.com/errata/ELSA-2024-2447.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-2975',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://security.netapp.com/advisory/ntap-20230725-0004/',
-                'https://ubuntu.com/security/notices/USN-6450-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-2975',
-                'https://www.openssl.org/news/secadv/20230714.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: AES-SIV cipher implementation contains a bug that causes it to ignore empty associated data entries'
-            },
-            {
-              'cve':  'CVE-2023-3446',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L'
-                },
-                'redhat': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L'
-                }
-              },
-              'cwes': [
-                'CWE-606',
-                'CWE-1333'
-              ],
-              'description':   "Issue summary: Checking excessively long DH keys or parameters may be very slow.\n\nImpact summary: Applications that use the functions DH_check(), DH_check_ex()\nor EVP_PKEY_param_check() to check a DH key or DH parameters may experience long\ndelays. Where the key or parameters that are being checked have been obtained\nfrom an untrusted source this may lead to a Denial of Service.\n\nThe function DH_check() performs various checks on DH parameters. One of those\nchecks confirms that the modulus ('p' parameter) is not too large. Trying to use\na very large modulus is slow and OpenSSL will not normally use a modulus which\nis over 10,000 bits in length.\n\nHowever the DH_check() function checks numerous aspects of the key or parameters\nthat have been supplied. Some of those checks use the supplied modulus value\neven if it has already been found to be too large.\n\nAn application that calls DH_check() and supplies a key or parameters obtained\nfrom an untrusted source could be vulernable to a Denial of Service attack.\n\nThe function DH_check() is itself called by a number of other OpenSSL functions.\nAn application calling any of those other functions may similarly be affected.\nThe other functions affected by this are DH_check_ex() and\nEVP_PKEY_param_check().\n\nAlso vulnerable are the OpenSSL dhparam and pkeyparam command line applications\nwhen using the '-check' option.\n\nThe OpenSSL SSL/TLS implementation is not affected by this issue.\nThe OpenSSL 3.0 and 3.1 FIPS providers are not affected by this issue.",
-              'diffID':        'sha256:0e3395c9c4d69931dec5029f4c593bdabd1bf4cc1c06b7d568ee72ea29783132',
-              'fixedVersions': [
-                '3.0.9-r3'
-              ],
-              'installedVersion': '3.0.7-r2',
-              'packageName':      'libssl3',
-              'purl':             'pkg:apk/alpine/libssl3@3.0.7-r2?arch=ppc64le&distro=3.17.1',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2023/07/19/4',
-                'http://www.openwall.com/lists/oss-security/2023/07/19/5',
-                'http://www.openwall.com/lists/oss-security/2023/07/19/6',
-                'http://www.openwall.com/lists/oss-security/2023/07/31/1',
-                'http://www.openwall.com/lists/oss-security/2024/05/16/1',
-                'https://access.redhat.com/errata/RHSA-2024:2447',
-                'https://access.redhat.com/security/cve/CVE-2023-3446',
-                'https://bugzilla.redhat.com/2223016',
-                'https://bugzilla.redhat.com/2224962',
-                'https://bugzilla.redhat.com/2227852',
-                'https://bugzilla.redhat.com/2248616',
-                'https://bugzilla.redhat.com/2257571',
-                'https://bugzilla.redhat.com/2258502',
-                'https://bugzilla.redhat.com/2259944',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2224962',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2257582',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2257583',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2258677',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2258688',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2258691',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2258694',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2258700',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-36763',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-36764',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3446',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45229',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45231',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45232',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45233',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45235',
-                'https://errata.almalinux.org/9/ALSA-2024-2447.html',
-                'https://errata.rockylinux.org/RLSA-2024:2264',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=1fa20cf2f506113c761777127a38bce5068740eb',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=8780a896543a654e757db1b9396383f9d8095528',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=9a0a4d3c1e7138915563c0df4fe6a3f9377b839c',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=fc9867c1e03c22ebf56943be205202e576aabf23',
-                'https://linux.oracle.com/cve/CVE-2023-3446.html',
-                'https://linux.oracle.com/errata/ELSA-2024-2447.html',
-                'https://lists.debian.org/debian-lts-announce/2023/08/msg00019.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-3446',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://security.netapp.com/advisory/ntap-20230803-0011/',
-                'https://ubuntu.com/security/notices/USN-6435-1',
-                'https://ubuntu.com/security/notices/USN-6435-2',
-                'https://ubuntu.com/security/notices/USN-6450-1',
-                'https://ubuntu.com/security/notices/USN-6709-1',
-                'https://ubuntu.com/security/notices/USN-7018-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-3446',
-                'https://www.openssl.org/news/secadv/20230719.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: Excessive time spent checking DH keys and parameters'
-            },
-            {
-              'cve':  'CVE-2023-3817',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L'
-                },
-                'redhat': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L'
-                }
-              },
-              'cwes': [
-                'CWE-606',
-                'CWE-834'
-              ],
-              'description':   'Issue summary: Checking excessively long DH keys or parameters may be very slow.\n\nImpact summary: Applications that use the functions DH_check(), DH_check_ex()\nor EVP_PKEY_param_check() to check a DH key or DH parameters may experience long\ndelays. Where the key or parameters that are being checked have been obtained\nfrom an untrusted source this may lead to a Denial of Service.\n\nThe function DH_check() performs various checks on DH parameters. After fixing\nCVE-2023-3446 it was discovered that a large q parameter value can also trigger\nan overly long computation during some of these checks. A correct q value,\nif present, cannot be larger than the modulus p parameter, thus it is\nunnecessary to perform these checks if q is larger than p.\n\nAn application that calls DH_check() and supplies a key or parameters obtained\nfrom an untrusted source could be vulnerable to a Denial of Service attack.\n\nThe function DH_check() is itself called by a number of other OpenSSL functions.\nAn application calling any of those other functions may similarly be affected.\nThe other functions affected by this are DH_check_ex() and\nEVP_PKEY_param_check().\n\nAlso vulnerable are the OpenSSL dhparam and pkeyparam command line applications\nwhen using the "-check" option.\n\nThe OpenSSL SSL/TLS implementation is not affected by this issue.\n\nThe OpenSSL 3.0 and 3.1 FIPS providers are not affected by this issue.',
-              'diffID':        'sha256:0e3395c9c4d69931dec5029f4c593bdabd1bf4cc1c06b7d568ee72ea29783132',
-              'fixedVersions': [
-                '3.0.10-r0'
-              ],
-              'installedVersion': '3.0.7-r2',
-              'packageName':      'libssl3',
-              'purl':             'pkg:apk/alpine/libssl3@3.0.7-r2?arch=ppc64le&distro=3.17.1',
-              'references':       [
-                'http://seclists.org/fulldisclosure/2023/Jul/43',
-                'http://www.openwall.com/lists/oss-security/2023/07/31/1',
-                'http://www.openwall.com/lists/oss-security/2023/09/22/11',
-                'http://www.openwall.com/lists/oss-security/2023/09/22/9',
-                'http://www.openwall.com/lists/oss-security/2023/11/06/2',
-                'https://access.redhat.com/errata/RHSA-2024:2447',
-                'https://access.redhat.com/security/cve/CVE-2023-3817',
-                'https://bugzilla.redhat.com/2223016',
-                'https://bugzilla.redhat.com/2224962',
-                'https://bugzilla.redhat.com/2227852',
-                'https://bugzilla.redhat.com/2248616',
-                'https://bugzilla.redhat.com/2257571',
-                'https://bugzilla.redhat.com/2258502',
-                'https://bugzilla.redhat.com/2259944',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2224962',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2227852',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2248616',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2270358',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3446',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3817',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-5678',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-2408',
-                'https://errata.almalinux.org/9/ALSA-2024-2447.html',
-                'https://errata.rockylinux.org/RLSA-2023:7877',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=6a1eb62c29db6cb5eec707f9338aee00f44e26f5',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=869ad69aadd985c7b8ca6f4e5dd0eb274c9f3644',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=9002fd07327a91f35ba6c1307e71fa6fd4409b7f',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=91ddeba0f2269b017dc06c46c993a788974b1aa5',
-                'https://linux.oracle.com/cve/CVE-2023-3817.html',
-                'https://linux.oracle.com/errata/ELSA-2024-2447.html',
-                'https://lists.debian.org/debian-lts-announce/2023/08/msg00019.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-3817',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://security.netapp.com/advisory/ntap-20230818-0014/',
-                'https://security.netapp.com/advisory/ntap-20231027-0008/',
-                'https://security.netapp.com/advisory/ntap-20240621-0006/',
-                'https://ubuntu.com/security/notices/USN-6435-1',
-                'https://ubuntu.com/security/notices/USN-6435-2',
-                'https://ubuntu.com/security/notices/USN-6450-1',
-                'https://ubuntu.com/security/notices/USN-6709-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-3817',
-                'https://www.openssl.org/news/secadv/20230731.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'OpenSSL: Excessive time spent checking DH q parameter value'
-            },
-            {
-              'cve':  'CVE-2023-5678',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L'
-                },
-                'redhat': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L'
-                }
-              },
-              'cwes': [
-                'CWE-606',
-                'CWE-754'
-              ],
-              'description':   "Issue summary: Generating excessively long X9.42 DH keys or checking\nexcessively long X9.42 DH keys or parameters may be very slow.\n\nImpact summary: Applications that use the functions DH_generate_key() to\ngenerate an X9.42 DH key may experience long delays.  Likewise, applications\nthat use DH_check_pub_key(), DH_check_pub_key_ex() or EVP_PKEY_public_check()\nto check an X9.42 DH key or X9.42 DH parameters may experience long delays.\nWhere the key or parameters that are being checked have been obtained from\nan untrusted source this may lead to a Denial of Service.\n\nWhile DH_check() performs all the necessary checks (as of CVE-2023-3817),\nDH_check_pub_key() doesn't make any of these checks, and is therefore\nvulnerable for excessively large P and Q parameters.\n\nLikewise, while DH_generate_key() performs a check for an excessively large\nP, it doesn't check for an excessively large Q.\n\nAn application that calls DH_generate_key() or DH_check_pub_key() and\nsupplies a key or parameters obtained from an untrusted source could be\nvulnerable to a Denial of Service attack.\n\nDH_generate_key() and DH_check_pub_key() are also called by a number of\nother OpenSSL functions.  An application calling any of those other\nfunctions may similarly be affected.  The other functions affected by this\nare DH_check_pub_key_ex(), EVP_PKEY_public_check(), and EVP_PKEY_generate().\n\nAlso vulnerable are the OpenSSL pkey command line application when using the\n\"-pubcheck\" option, as well as the OpenSSL genpkey command line application.\n\nThe OpenSSL SSL/TLS implementation is not affected by this issue.\n\nThe OpenSSL 3.0 and 3.1 FIPS providers are not affected by this issue.",
-              'diffID':        'sha256:0e3395c9c4d69931dec5029f4c593bdabd1bf4cc1c06b7d568ee72ea29783132',
-              'fixedVersions': [
-                '3.0.12-r1'
-              ],
-              'installedVersion': '3.0.7-r2',
-              'packageName':      'libssl3',
-              'purl':             'pkg:apk/alpine/libssl3@3.0.7-r2?arch=ppc64le&distro=3.17.1',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2024/03/11/1',
-                'https://access.redhat.com/errata/RHSA-2024:2447',
-                'https://access.redhat.com/security/cve/CVE-2023-5678',
-                'https://bugzilla.redhat.com/2223016',
-                'https://bugzilla.redhat.com/2224962',
-                'https://bugzilla.redhat.com/2227852',
-                'https://bugzilla.redhat.com/2248616',
-                'https://bugzilla.redhat.com/2257571',
-                'https://bugzilla.redhat.com/2258502',
-                'https://bugzilla.redhat.com/2259944',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2224962',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2227852',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2248616',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2270358',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3446',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3817',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-5678',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-2408',
-                'https://errata.almalinux.org/9/ALSA-2024-2447.html',
-                'https://errata.rockylinux.org/RLSA-2023:7877',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=34efaef6c103d636ab507a0cc34dca4d3aecc055',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=710fee740904b6290fef0dd5536fbcedbc38ff0c',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=db925ae2e65d0d925adef429afc37f75bd1c2017',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=ddeb4b6c6d527e54ce9a99cba785c0f7776e54b6',
-                'https://linux.oracle.com/cve/CVE-2023-5678.html',
-                'https://linux.oracle.com/errata/ELSA-2024-2447.html',
-                'https://lists.debian.org/debian-lts-announce/2024/10/msg00033.html',
-                'https://lists.debian.org/debian-lts-announce/2024/11/msg00000.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-5678',
-                'https://security.netapp.com/advisory/ntap-20231130-0010/',
-                'https://ubuntu.com/security/notices/USN-6622-1',
-                'https://ubuntu.com/security/notices/USN-6632-1',
-                'https://ubuntu.com/security/notices/USN-6709-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-5678',
-                'https://www.openssl.org/news/secadv/20231106.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: Generating excessively long X9.42 DH keys or checking excessively long X9.42 DH keys or parameters may be very slow'
-            },
-            {
-              'cve':  'CVE-2023-6129',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '6.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-440',
-                'CWE-787'
-              ],
-              'description':   'Issue summary: The POLY1305 MAC (message authentication code) implementation\ncontains a bug that might corrupt the internal state of applications running\non PowerPC CPU based platforms if the CPU provides vector instructions.\n\nImpact summary: If an attacker can influence whether the POLY1305 MAC\nalgorithm is used, the application state might be corrupted with various\napplication dependent consequences.\n\nThe POLY1305 MAC (message authentication code) implementation in OpenSSL for\nPowerPC CPUs restores the contents of vector registers in a different order\nthan they are saved. Thus the contents of some of these vector registers\nare corrupted when returning to the caller. The vulnerable code is used only\non newer PowerPC processors supporting the PowerISA 2.07 instructions.\n\nThe consequences of this kind of internal application state corruption can\nbe various - from no consequences, if the calling application does not\ndepend on the contents of non-volatile XMM registers at all, to the worst\nconsequences, where the attacker could get complete control of the application\nprocess. However unless the compiler uses the vector registers for storing\npointers, the most likely consequence, if any, would be an incorrect result\nof some application dependent calculations or a crash leading to a denial of\nservice.\n\nThe POLY1305 MAC algorithm is most frequently used as part of the\nCHACHA20-POLY1305 AEAD (authenticated encryption with associated data)\nalgorithm. The most common usage of this AEAD cipher is with TLS protocol\nversions 1.2 and 1.3. If this cipher is enabled on the server a malicious\nclient can influence whether this AEAD cipher is used. This implies that\nTLS server applications using OpenSSL can be potentially impacted. However\nwe are currently not aware of any concrete application that would be affected\nby this issue therefore we consider this a Low severity security issue.',
-              'diffID':        'sha256:0e3395c9c4d69931dec5029f4c593bdabd1bf4cc1c06b7d568ee72ea29783132',
-              'fixedVersions': [
-                '3.0.12-r2'
-              ],
-              'installedVersion': '3.0.7-r2',
-              'packageName':      'libssl3',
-              'purl':             'pkg:apk/alpine/libssl3@3.0.7-r2?arch=ppc64le&distro=3.17.1',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2024/03/11/1',
-                'https://access.redhat.com/errata/RHSA-2024:9088',
-                'https://access.redhat.com/security/cve/CVE-2023-6129',
-                'https://bugzilla.redhat.com/2257571',
-                'https://bugzilla.redhat.com/2258502',
-                'https://bugzilla.redhat.com/2259944',
-                'https://bugzilla.redhat.com/2284243',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2257571',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2258502',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2259944',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2284243',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-6129',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-6237',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-0727',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-1298',
-                'https://errata.almalinux.org/9/ALSA-2024-9088.html',
-                'https://errata.rockylinux.org/RLSA-2024:9088',
-                'https://github.com/openssl/openssl/commit/050d26383d4e264966fb83428e72d5d48f402d35',
-                'https://github.com/openssl/openssl/commit/5b139f95c9a47a55a0c54100f3837b1eee942b04',
-                'https://github.com/openssl/openssl/commit/f3fc5808fe9ff74042d639839610d03b8fdcc015',
-                'https://linux.oracle.com/cve/CVE-2023-6129.html',
-                'https://linux.oracle.com/errata/ELSA-2024-9088.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-6129',
-                'https://security.netapp.com/advisory/ntap-20240216-0009/',
-                'https://security.netapp.com/advisory/ntap-20240426-0008/',
-                'https://security.netapp.com/advisory/ntap-20240426-0013/',
-                'https://security.netapp.com/advisory/ntap-20240503-0011/',
-                'https://ubuntu.com/security/notices/USN-6622-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-6129',
-                'https://www.openssl.org/news/secadv/20240109.txt',
-                'https://www.openwall.com/lists/oss-security/2024/01/09/1'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: POLY1305 MAC implementation corrupts vector registers on PowerPC'
-            },
-            {
-              'cve':  'CVE-2023-6237',
-              'cvss': {
-                'redhat': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-606'
-              ],
-              'description':   "Issue summary: Checking excessively long invalid RSA public keys may take\na long time.\n\nImpact summary: Applications that use the function EVP_PKEY_public_check()\nto check RSA public keys may experience long delays. Where the key that\nis being checked has been obtained from an untrusted source this may lead\nto a Denial of Service.\n\nWhen function EVP_PKEY_public_check() is called on RSA public keys,\na computation is done to confirm that the RSA modulus, n, is composite.\nFor valid RSA keys, n is a product of two or more large primes and this\ncomputation completes quickly. However, if n is an overly large prime,\nthen this computation would take a long time.\n\nAn application that calls EVP_PKEY_public_check() and supplies an RSA key\nobtained from an untrusted source could be vulnerable to a Denial of Service\nattack.\n\nThe function EVP_PKEY_public_check() is not called from other OpenSSL\nfunctions however it is called from the OpenSSL pkey command line\napplication. For that reason that application is also vulnerable if used\nwith the '-pubin' and '-check' options on untrusted data.\n\nThe OpenSSL SSL/TLS implementation is not affected by this issue.\n\nThe OpenSSL 3.0 and 3.1 FIPS providers are affected by this issue.",
-              'diffID':        'sha256:0e3395c9c4d69931dec5029f4c593bdabd1bf4cc1c06b7d568ee72ea29783132',
-              'fixedVersions': [
-                '3.0.12-r3'
-              ],
-              'installedVersion': '3.0.7-r2',
-              'packageName':      'libssl3',
-              'purl':             'pkg:apk/alpine/libssl3@3.0.7-r2?arch=ppc64le&distro=3.17.1',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2024/03/11/1',
-                'https://access.redhat.com/errata/RHSA-2024:9088',
-                'https://access.redhat.com/security/cve/CVE-2023-6237',
-                'https://bugzilla.redhat.com/2257571',
-                'https://bugzilla.redhat.com/2258502',
-                'https://bugzilla.redhat.com/2259944',
-                'https://bugzilla.redhat.com/2284243',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2257571',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2258502',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2259944',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2284243',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-6129',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-6237',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-0727',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-1298',
-                'https://errata.almalinux.org/9/ALSA-2024-9088.html',
-                'https://errata.rockylinux.org/RLSA-2024:9088',
-                'https://github.com/openssl/openssl/commit/0b0f7abfb37350794a4b8960fafc292cd5d1b84d',
-                'https://github.com/openssl/openssl/commit/18c02492138d1eb8b6548cb26e7b625fb2414a2a',
-                'https://github.com/openssl/openssl/commit/a830f551557d3d66a84bbb18a5b889c640c36294',
-                'https://linux.oracle.com/cve/CVE-2023-6237.html',
-                'https://linux.oracle.com/errata/ELSA-2024-9088.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-6237',
-                'https://security.netapp.com/advisory/ntap-20240531-0007/',
-                'https://ubuntu.com/security/notices/USN-6622-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-6237',
-                'https://www.openssl.org/news/secadv/20240115.txt',
-                'https://www.openwall.com/lists/oss-security/2024/01/15/2'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: Excessive time spent checking invalid RSA public keys'
-            },
-            {
-              'cve':  'CVE-2024-0727',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '5.5',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H'
-                },
-                'nvd': {
-                  'v3score':  '5.5',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '5.5',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-476'
-              ],
-              'description':   'Issue summary: Processing a maliciously formatted PKCS12 file may lead OpenSSL\nto crash leading to a potential Denial of Service attack\n\nImpact summary: Applications loading files in the PKCS12 format from untrusted\nsources might terminate abruptly.\n\nA file in PKCS12 format can contain certificates and keys and may come from an\nuntrusted source. The PKCS12 specification allows certain fields to be NULL, but\nOpenSSL does not correctly check for this case. This can lead to a NULL pointer\ndereference that results in OpenSSL crashing. If an application processes PKCS12\nfiles from an untrusted source using the OpenSSL APIs then that application will\nbe vulnerable to this issue.\n\nOpenSSL APIs that are vulnerable to this are: PKCS12_parse(),\nPKCS12_unpack_p7data(), PKCS12_unpack_p7encdata(), PKCS12_unpack_authsafes()\nand PKCS12_newpass().\n\nWe have also fixed a similar issue in SMIME_write_PKCS7(). However since this\nfunction is related to writing data we do not consider it security significant.\n\nThe FIPS modules in 3.2, 3.1 and 3.0 are not affected by this issue.',
-              'diffID':        'sha256:0e3395c9c4d69931dec5029f4c593bdabd1bf4cc1c06b7d568ee72ea29783132',
-              'fixedVersions': [
-                '3.0.12-r4'
-              ],
-              'installedVersion': '3.0.7-r2',
-              'packageName':      'libssl3',
-              'purl':             'pkg:apk/alpine/libssl3@3.0.7-r2?arch=ppc64le&distro=3.17.1',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2024/03/11/1',
-                'https://access.redhat.com/errata/RHSA-2024:9088',
-                'https://access.redhat.com/security/cve/CVE-2024-0727',
-                'https://bugzilla.redhat.com/2257571',
-                'https://bugzilla.redhat.com/2258502',
-                'https://bugzilla.redhat.com/2259944',
-                'https://bugzilla.redhat.com/2284243',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2257571',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2258502',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2259944',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2284243',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-6129',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-6237',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-0727',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-1298',
-                'https://errata.almalinux.org/9/ALSA-2024-9088.html',
-                'https://errata.rockylinux.org/RLSA-2024:9088',
-                'https://github.com/alexcrichton/openssl-src-rs/commit/add20f73b6b42be7451af2e1044d4e0e778992b2',
-                'https://github.com/github/advisory-database/pull/3472',
-                'https://github.com/openssl/openssl/commit/09df4395b5071217b76dc7d3d2e630eb8c5a79c2',
-                'https://github.com/openssl/openssl/commit/775acfdbd0c6af9ac855f34969cdab0c0c90844a',
-                'https://github.com/openssl/openssl/commit/d135eeab8a5dbf72b3da5240bab9ddb7678dbd2c',
-                'https://github.com/openssl/openssl/pull/23362',
-                'https://github.com/pyca/cryptography/commit/3519591d255d4506fbcd0d04037d45271903c64d',
-                'https://github.openssl.org/openssl/extended-releases/commit/03b3941d60c4bce58fab69a0c22377ab439bc0e8',
-                'https://github.openssl.org/openssl/extended-releases/commit/aebaa5883e31122b404e450732dc833dc9dee539',
-                'https://linux.oracle.com/cve/CVE-2024-0727.html',
-                'https://linux.oracle.com/errata/ELSA-2024-9088.html',
-                'https://lists.debian.org/debian-lts-announce/2024/10/msg00033.html',
-                'https://lists.debian.org/debian-lts-announce/2024/11/msg00000.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2024-0727',
-                'https://security.netapp.com/advisory/ntap-20240208-0006',
-                'https://security.netapp.com/advisory/ntap-20240208-0006/',
-                'https://ubuntu.com/security/notices/USN-6622-1',
-                'https://ubuntu.com/security/notices/USN-6632-1',
-                'https://ubuntu.com/security/notices/USN-6709-1',
-                'https://ubuntu.com/security/notices/USN-7018-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2024-0727',
-                'https://www.openssl.org/news/secadv/20240125.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: denial of service via null dereference'
-            },
-            {
-              'cve':  'CVE-2024-4603',
-              'cvss': {
-                'redhat': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L'
-                }
-              },
-              'cwes': [
-                'CWE-606',
-                'CWE-834'
-              ],
-              'description':   'Issue summary: Checking excessively long DSA keys or parameters may be very\nslow.\n\nImpact summary: Applications that use the functions EVP_PKEY_param_check()\nor EVP_PKEY_public_check() to check a DSA public key or DSA parameters may\nexperience long delays. Where the key or parameters that are being checked\nhave been obtained from an untrusted source this may lead to a Denial of\nService.\n\nThe functions EVP_PKEY_param_check() or EVP_PKEY_public_check() perform\nvarious checks on DSA parameters. Some of those computations take a long time\nif the modulus (`p` parameter) is too large.\n\nTrying to use a very large modulus is slow and OpenSSL will not allow using\npublic keys with a modulus which is over 10,000 bits in length for signature\nverification. However the key and parameter check functions do not limit\nthe modulus size when performing the checks.\n\nAn application that calls EVP_PKEY_param_check() or EVP_PKEY_public_check()\nand supplies a key or parameters obtained from an untrusted source could be\nvulnerable to a Denial of Service attack.\n\nThese functions are not called by OpenSSL itself on untrusted DSA keys so\nonly applications that directly call these functions may be vulnerable.\n\nAlso vulnerable are the OpenSSL pkey and pkeyparam command line applications\nwhen using the `-check` option.\n\nThe OpenSSL SSL/TLS implementation is not affected by this issue.\n\nThe OpenSSL 3.0 and 3.1 FIPS providers are affected by this issue.',
-              'diffID':        'sha256:0e3395c9c4d69931dec5029f4c593bdabd1bf4cc1c06b7d568ee72ea29783132',
-              'fixedVersions': [
-                '3.0.13-r0'
-              ],
-              'installedVersion': '3.0.7-r2',
-              'packageName':      'libssl3',
-              'purl':             'pkg:apk/alpine/libssl3@3.0.7-r2?arch=ppc64le&distro=3.17.1',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2024/05/16/2',
-                'https://access.redhat.com/errata/RHSA-2024:9333',
-                'https://access.redhat.com/security/cve/CVE-2024-4603',
-                'https://bugzilla.redhat.com/2274020',
-                'https://bugzilla.redhat.com/2281029',
-                'https://bugzilla.redhat.com/2283757',
-                'https://bugzilla.redhat.com/2294581',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2274020',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2281029',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2283757',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2294581',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-2511',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-4603',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-4741',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-5535',
-                'https://errata.almalinux.org/9/ALSA-2024-9333.html',
-                'https://errata.rockylinux.org/RLSA-2024:9333',
-                'https://github.com/openssl/openssl/commit/3559e868e58005d15c6013a0c1fd832e51c73397',
-                'https://github.com/openssl/openssl/commit/53ea06486d296b890d565fb971b2764fcd826e7e',
-                'https://github.com/openssl/openssl/commit/9c39b3858091c152f52513c066ff2c5a47969f0d',
-                'https://github.com/openssl/openssl/commit/da343d0605c826ef197aceedc67e8e04f065f740',
-                'https://linux.oracle.com/cve/CVE-2024-4603.html',
-                'https://linux.oracle.com/errata/ELSA-2024-9333.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2024-4603',
-                'https://security.netapp.com/advisory/ntap-20240621-0001/',
-                'https://ubuntu.com/security/notices/USN-6937-1',
-                'https://www.cve.org/CVERecord?id=CVE-2024-4603',
-                'https://www.openssl.org/news/secadv/20240516.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: Excessive time spent checking DSA keys and parameters'
-            },
-            {
-              'cve':  'CVE-2024-4741',
-              'cvss': {
-                'redhat': {
-                  'v3score':  '5.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   'Issue summary: Calling the OpenSSL API function SSL_free_buffers may cause\nmemory to be accessed that was previously freed in some situations\n\nImpact summary: A use after free can have a range of potential consequences such\nas the corruption of valid data, crashes or execution of arbitrary code.\nHowever, only applications that directly call the SSL_free_buffers function are\naffected by this issue. Applications that do not call this function are not\nvulnerable. Our investigations indicate that this function is rarely used by\napplications.\n\nThe SSL_free_buffers function is used to free the internal OpenSSL buffer used\nwhen processing an incoming record from the network. The call is only expected\nto succeed if the buffer is not currently in use. However, two scenarios have\nbeen identified where the buffer is freed even when still in use.\n\nThe first scenario occurs where a record header has been received from the\nnetwork and processed by OpenSSL, but the full record body has not yet arrived.\nIn this case calling SSL_free_buffers will succeed even though a record has only\nbeen partially processed and the buffer is still in use.\n\nThe second scenario occurs where a full record containing application data has\nbeen received and processed by OpenSSL but the application has only read part of\nthis data. Again a call to SSL_free_buffers will succeed even though the buffer\nis still in use.\n\nWhile these scenarios could occur accidentally during normal operation a\nmalicious attacker could attempt to engineer a stituation where this occurs.\nWe are not aware of this issue being actively exploited.\n\nThe FIPS modules in 3.3, 3.2, 3.1 and 3.0 are not affected by this issue.',
-              'diffID':        'sha256:0e3395c9c4d69931dec5029f4c593bdabd1bf4cc1c06b7d568ee72ea29783132',
-              'fixedVersions': [
-                '3.0.14-r0'
-              ],
-              'installedVersion': '3.0.7-r2',
-              'packageName':      'libssl3',
-              'purl':             'pkg:apk/alpine/libssl3@3.0.7-r2?arch=ppc64le&distro=3.17.1',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2024:9333',
-                'https://access.redhat.com/security/cve/CVE-2024-4741',
-                'https://bugzilla.redhat.com/2274020',
-                'https://bugzilla.redhat.com/2281029',
-                'https://bugzilla.redhat.com/2283757',
-                'https://bugzilla.redhat.com/2294581',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2274020',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2281029',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2283757',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2294581',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-2511',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-4603',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-4741',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-5535',
-                'https://errata.almalinux.org/9/ALSA-2024-9333.html',
-                'https://errata.rockylinux.org/RLSA-2024:9333',
-                'https://github.com/openssl/openssl/commit/704f725b96aa373ee45ecfb23f6abfe8be8d9177',
-                'https://github.com/openssl/openssl/commit/b3f0eb0a295f58f16ba43ba99dad70d4ee5c437d',
-                'https://github.com/openssl/openssl/commit/c88c3de51020c37e8706bf7a682a162593053aac',
-                'https://github.com/openssl/openssl/commit/e5093133c35ca82874ad83697af76f4b0f7e3bd8',
-                'https://github.openssl.org/openssl/extended-releases/commit/f7a045f3143fc6da2ee66bf52d8df04829590dd4',
-                'https://linux.oracle.com/cve/CVE-2024-4741.html',
-                'https://linux.oracle.com/errata/ELSA-2024-9333.html',
-                'https://lists.debian.org/debian-lts-announce/2024/10/msg00033.html',
-                'https://lists.debian.org/debian-lts-announce/2024/11/msg00000.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2024-4741',
-                'https://security.netapp.com/advisory/ntap-20240621-0004/',
-                'https://ubuntu.com/security/notices/USN-6937-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2024-4741',
-                'https://www.openssl.org/news/secadv/20240528.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: Use After Free with SSL_free_buffers'
-            },
-            {
-              'cve':  'CVE-2024-5535',
-              'cvss': {
-                'redhat': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-125'
-              ],
-              'description':   'Issue summary: Calling the OpenSSL API function SSL_select_next_proto with an\nempty supported client protocols buffer may cause a crash or memory contents to\nbe sent to the peer.\n\nImpact summary: A buffer overread can have a range of potential consequences\nsuch as unexpected application beahviour or a crash. In particular this issue\ncould result in up to 255 bytes of arbitrary private data from memory being sent\nto the peer leading to a loss of confidentiality. However, only applications\nthat directly call the SSL_select_next_proto function with a 0 length list of\nsupported client protocols are affected by this issue. This would normally never\nbe a valid scenario and is typically not under attacker control but may occur by\naccident in the case of a configuration or programming error in the calling\napplication.\n\nThe OpenSSL API function SSL_select_next_proto is typically used by TLS\napplications that support ALPN (Application Layer Protocol Negotiation) or NPN\n(Next Protocol Negotiation). NPN is older, was never standardised and\nis deprecated in favour of ALPN. We believe that ALPN is significantly more\nwidely deployed than NPN. The SSL_select_next_proto function accepts a list of\nprotocols from the server and a list of protocols from the client and returns\nthe first protocol that appears in the server list that also appears in the\nclient list. In the case of no overlap between the two lists it returns the\nfirst item in the client list. In either case it will signal whether an overlap\nbetween the two lists was found. In the case where SSL_select_next_proto is\ncalled with a zero length client list it fails to notice this condition and\nreturns the memory immediately following the client list pointer (and reports\nthat there was no overlap in the lists).\n\nThis function is typically called from a server side application callback for\nALPN or a client side application callback for NPN. In the case of ALPN the list\nof protocols supplied by the client is guaranteed by libssl to never be zero in\nlength. The list of server protocols comes from the application and should never\nnormally be expected to be of zero length. In this case if the\nSSL_select_next_proto function has been called as expected (with the list\nsupplied by the client passed in the client/client_len parameters), then the\napplication will not be vulnerable to this issue. If the application has\naccidentally been configured with a zero length server list, and has\naccidentally passed that zero length server list in the client/client_len\nparameters, and has additionally failed to correctly handle a "no overlap"\nresponse (which would normally result in a handshake failure in ALPN) then it\nwill be vulnerable to this problem.\n\nIn the case of NPN, the protocol permits the client to opportunistically select\na protocol when there is no overlap. OpenSSL returns the first client protocol\nin the no overlap case in support of this. The list of client protocols comes\nfrom the application and should never normally be expected to be of zero length.\nHowever if the SSL_select_next_proto function is accidentally called with a\nclient_len of 0 then an invalid memory pointer will be returned instead. If the\napplication uses this output as the opportunistic protocol then the loss of\nconfidentiality will occur.\n\nThis issue has been assessed as Low severity because applications are most\nlikely to be vulnerable if they are using NPN instead of ALPN - but NPN is not\nwidely used. It also requires an application configuration or programming error.\nFinally, this issue would not typically be under attacker control making active\nexploitation unlikely.\n\nThe FIPS modules in 3.3, 3.2, 3.1 and 3.0 are not affected by this issue.\n\nDue to the low severity of this issue we are not issuing new releases of\nOpenSSL at this time. The fix will be included in the next releases when they\nbecome available.',
-              'diffID':        'sha256:0e3395c9c4d69931dec5029f4c593bdabd1bf4cc1c06b7d568ee72ea29783132',
-              'fixedVersions': [
-                '3.0.14-r0'
-              ],
-              'installedVersion': '3.0.7-r2',
-              'packageName':      'libssl3',
-              'purl':             'pkg:apk/alpine/libssl3@3.0.7-r2?arch=ppc64le&distro=3.17.1',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2024/06/27/1',
-                'http://www.openwall.com/lists/oss-security/2024/06/28/4',
-                'http://www.openwall.com/lists/oss-security/2024/08/15/1',
-                'https://access.redhat.com/errata/RHSA-2025:1671',
-                'https://access.redhat.com/security/cve/CVE-2024-5535',
-                'https://bugzilla.redhat.com/2294581',
-                'https://bugzilla.redhat.com/2294676',
-                'https://bugzilla.redhat.com/2301888',
-                'https://bugzilla.redhat.com/2318857',
-                'https://bugzilla.redhat.com/2318858',
-                'https://bugzilla.redhat.com/2318870',
-                'https://bugzilla.redhat.com/2318873',
-                'https://bugzilla.redhat.com/2318874',
-                'https://bugzilla.redhat.com/2318876',
-                'https://bugzilla.redhat.com/2318882',
-                'https://bugzilla.redhat.com/2318883',
-                'https://bugzilla.redhat.com/2318884',
-                'https://bugzilla.redhat.com/2318885',
-                'https://bugzilla.redhat.com/2318886',
-                'https://bugzilla.redhat.com/2318897',
-                'https://bugzilla.redhat.com/2318900',
-                'https://bugzilla.redhat.com/2318905',
-                'https://bugzilla.redhat.com/2318914',
-                'https://bugzilla.redhat.com/2318922',
-                'https://bugzilla.redhat.com/2318923',
-                'https://bugzilla.redhat.com/2318925',
-                'https://bugzilla.redhat.com/2318926',
-                'https://bugzilla.redhat.com/2318927',
-                'https://bugzilla.redhat.com/2331191',
-                'https://bugzilla.redhat.com/2339218',
-                'https://bugzilla.redhat.com/2339220',
-                'https://bugzilla.redhat.com/2339221',
-                'https://bugzilla.redhat.com/2339226',
-                'https://bugzilla.redhat.com/2339231',
-                'https://bugzilla.redhat.com/2339236',
-                'https://bugzilla.redhat.com/2339238',
-                'https://bugzilla.redhat.com/2339243',
-                'https://bugzilla.redhat.com/2339247',
-                'https://bugzilla.redhat.com/2339252',
-                'https://bugzilla.redhat.com/2339259',
-                'https://bugzilla.redhat.com/2339266',
-                'https://bugzilla.redhat.com/2339270',
-                'https://bugzilla.redhat.com/2339271',
-                'https://bugzilla.redhat.com/2339275',
-                'https://bugzilla.redhat.com/2339277',
-                'https://bugzilla.redhat.com/2339281',
-                'https://bugzilla.redhat.com/2339284',
-                'https://bugzilla.redhat.com/2339291',
-                'https://bugzilla.redhat.com/2339293',
-                'https://bugzilla.redhat.com/2339295',
-                'https://bugzilla.redhat.com/2339299',
-                'https://bugzilla.redhat.com/2339300',
-                'https://bugzilla.redhat.com/2339304',
-                'https://bugzilla.redhat.com/2339305',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2274020',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2281029',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2283757',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2294581',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-2511',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-4603',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-4741',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-5535',
-                'https://errata.almalinux.org/9/ALSA-2025-1671.html',
-                'https://errata.rockylinux.org/RLSA-2024:9333',
-                'https://github.com/openssl/openssl/commit/4ada436a1946cbb24db5ab4ca082b69c1bc10f37',
-                'https://github.com/openssl/openssl/commit/99fb785a5f85315b95288921a321a935ea29a51e',
-                'https://github.com/openssl/openssl/commit/cf6f91f6121f4db167405db2f0de410a456f260c',
-                'https://github.com/openssl/openssl/commit/e86ac436f0bd54d4517745483e2315650fae7b2c',
-                'https://github.openssl.org/openssl/extended-releases/commit/9947251413065a05189a63c9b7a6c1d4e224c21c',
-                'https://github.openssl.org/openssl/extended-releases/commit/b78ec0824da857223486660177d3b1f255c65d87',
-                'https://linux.oracle.com/cve/CVE-2024-5535.html',
-                'https://linux.oracle.com/errata/ELSA-2025-1673.html',
-                'https://lists.debian.org/debian-lts-announce/2024/10/msg00033.html',
-                'https://lists.debian.org/debian-lts-announce/2024/11/msg00000.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2024-5535',
-                'https://openssl.org/news/secadv/20240627.txt',
-                'https://security.netapp.com/advisory/ntap-20240712-0005/',
-                'https://security.netapp.com/advisory/ntap-20241025-0006/',
-                'https://security.netapp.com/advisory/ntap-20241025-0010/',
-                'https://ubuntu.com/security/notices/USN-6937-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2024-5535',
-                'https://www.openssl.org/news/secadv/20240627.txt',
-                'https://www.oracle.com/security-alerts/cpuoct2024.html#AppendixMSQL'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: SSL_select_next_proto buffer overread'
-            },
-            {
-              'cve':  'CVE-2024-2511',
-              'cvss': {
-                'redhat': {
-                  'v3score':  '3.7',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L'
-                }
-              },
-              'cwes': [
-                'CWE-1325'
-              ],
-              'description':   'Issue summary: Some non-default TLS server configurations can cause unbounded\nmemory growth when processing TLSv1.3 sessions\n\nImpact summary: An attacker may exploit certain server configurations to trigger\nunbounded memory growth that would lead to a Denial of Service\n\nThis problem can occur in TLSv1.3 if the non-default SSL_OP_NO_TICKET option is\nbeing used (but not if early_data support is also configured and the default\nanti-replay protection is in use). In this case, under certain conditions, the\nsession cache can get into an incorrect state and it will fail to flush properly\nas it fills. The session cache will continue to grow in an unbounded manner. A\nmalicious client could deliberately create the scenario for this failure to\nforce a Denial of Service. It may also happen by accident in normal operation.\n\nThis issue only affects TLS servers supporting TLSv1.3. It does not affect TLS\nclients.\n\nThe FIPS modules in 3.2, 3.1 and 3.0 are not affected by this issue. OpenSSL\n1.0.2 is also not affected by this issue.',
-              'diffID':        'sha256:0e3395c9c4d69931dec5029f4c593bdabd1bf4cc1c06b7d568ee72ea29783132',
-              'fixedVersions': [
-                '3.0.12-r5'
-              ],
-              'installedVersion': '3.0.7-r2',
-              'packageName':      'libssl3',
-              'purl':             'pkg:apk/alpine/libssl3@3.0.7-r2?arch=ppc64le&distro=3.17.1',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2024/04/08/5',
-                'https://access.redhat.com/errata/RHSA-2024:9333',
-                'https://access.redhat.com/security/cve/CVE-2024-2511',
-                'https://bugzilla.redhat.com/2274020',
-                'https://bugzilla.redhat.com/2281029',
-                'https://bugzilla.redhat.com/2283757',
-                'https://bugzilla.redhat.com/2294581',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2274020',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2281029',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2283757',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2294581',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-2511',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-4603',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-4741',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-5535',
-                'https://errata.almalinux.org/9/ALSA-2024-9333.html',
-                'https://errata.rockylinux.org/RLSA-2024:9333',
-                'https://github.com/openssl/openssl/commit/7e4d731b1c07201ad9374c1cd9ac5263bdf35bce',
-                'https://github.com/openssl/openssl/commit/b52867a9f618bb955bed2a3ce3db4d4f97ed8e5d',
-                'https://github.com/openssl/openssl/commit/e9d7083e241670332e0443da0f0d4ffb52829f08',
-                'https://github.openssl.org/openssl/extended-releases/commit/5f8d25770ae6437db119dfc951e207271a326640',
-                'https://linux.oracle.com/cve/CVE-2024-2511.html',
-                'https://linux.oracle.com/errata/ELSA-2024-9333.html',
-                'https://lists.debian.org/debian-lts-announce/2024/10/msg00033.html',
-                'https://lists.debian.org/debian-lts-announce/2024/11/msg00000.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2024-2511',
-                'https://security.netapp.com/advisory/ntap-20240503-0013/',
-                'https://ubuntu.com/security/notices/USN-6937-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2024-2511',
-                'https://www.openssl.org/news/secadv/20240408.txt',
-                'https://www.openssl.org/news/vulnerabilities.html'
-              ],
-              'severity':   'LOW',
-              'suppressed': false,
-              'title':      'openssl: Unbounded memory growth with session handling in TLSv1.3'
-            },
-            {
-              'cve':  'CVE-2024-9143',
-              'cvss': {
-                'redhat': {
-                  'v3score':  '3.7',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L'
-                }
-              },
-              'cwes': [
-                'CWE-125',
-                'CWE-787'
-              ],
-              'description':   "Issue summary: Use of the low-level GF(2^m) elliptic curve APIs with untrusted\nexplicit values for the field polynomial can lead to out-of-bounds memory reads\nor writes.\n\nImpact summary: Out of bound memory writes can lead to an application crash or\neven a possibility of a remote code execution, however, in all the protocols\ninvolving Elliptic Curve Cryptography that we're aware of, either only \"named\ncurves\" are supported, or, if explicit curve parameters are supported, they\nspecify an X9.62 encoding of binary (GF(2^m)) curves that can't represent\nproblematic input values. Thus the likelihood of existence of a vulnerable\napplication is low.\n\nIn particular, the X9.62 encoding is used for ECC keys in X.509 certificates,\nso problematic inputs cannot occur in the context of processing X.509\ncertificates.  Any problematic use-cases would have to be using an \"exotic\"\ncurve encoding.\n\nThe affected APIs include: EC_GROUP_new_curve_GF2m(), EC_GROUP_new_from_params(),\nand various supporting BN_GF2m_*() functions.\n\nApplications working with \"exotic\" explicit binary (GF(2^m)) curve parameters,\nthat make it possible to represent invalid field polynomials with a zero\nconstant term, via the above or similar APIs, may terminate abruptly as a\nresult of reading or writing outside of array bounds.  Remote code execution\ncannot easily be ruled out.\n\nThe FIPS modules in 3.3, 3.2, 3.1 and 3.0 are not affected by this issue.",
-              'diffID':        'sha256:0e3395c9c4d69931dec5029f4c593bdabd1bf4cc1c06b7d568ee72ea29783132',
-              'fixedVersions': [
-                '3.0.15-r1'
-              ],
-              'installedVersion': '3.0.7-r2',
-              'packageName':      'libssl3',
-              'purl':             'pkg:apk/alpine/libssl3@3.0.7-r2?arch=ppc64le&distro=3.17.1',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2024/10/16/1',
-                'http://www.openwall.com/lists/oss-security/2024/10/23/1',
-                'http://www.openwall.com/lists/oss-security/2024/10/24/1',
-                'https://access.redhat.com/security/cve/CVE-2024-9143',
-                'https://github.com/openssl/openssl/commit/72ae83ad214d2eef262461365a1975707f862712',
-                'https://github.com/openssl/openssl/commit/bc7e04d7c8d509fb78fc0e285aa948fb0da04700',
-                'https://github.com/openssl/openssl/commit/c0d3e4d32d2805f49bec30547f225bc4d092e1f4',
-                'https://github.com/openssl/openssl/commit/fdf6723362ca51bd883295efe206cb5b1cfa5154',
-                'https://github.openssl.org/openssl/extended-releases/commit/8efc0cbaa8ebba8e116f7b81a876a4123594d86a',
-                'https://github.openssl.org/openssl/extended-releases/commit/9d576994cec2b7aa37a91740ea7e680810957e41',
-                'https://lists.debian.org/debian-lts-announce/2024/10/msg00033.html',
-                'https://lists.debian.org/debian-lts-announce/2024/11/msg00000.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2024-9143',
-                'https://openssl-library.org/news/secadv/20241016.txt',
-                'https://security.netapp.com/advisory/ntap-20241101-0001/',
-                'https://ubuntu.com/security/notices/USN-7264-1',
-                'https://ubuntu.com/security/notices/USN-7278-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2024-9143'
-              ],
-              'severity':   'LOW',
-              'suppressed': false,
-              'title':      'openssl: Low-level invalid GF(2^m) parameters lead to OOB memory access'
-            },
-            {
-              'cve':  'CVE-2025-26519',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-787'
-              ],
-              'description':   'musl libc 0.9.13 through 1.2.5 before 1.2.6 has an out-of-bounds write vulnerability when an attacker can trigger iconv conversion of untrusted EUC-KR text to UTF-8.',
-              'diffID':        'sha256:0e3395c9c4d69931dec5029f4c593bdabd1bf4cc1c06b7d568ee72ea29783132',
-              'fixedVersions': [
-                '1.2.3-r6'
-              ],
-              'installedVersion': '1.2.3-r4',
-              'packageName':      'musl',
-              'purl':             'pkg:apk/alpine/musl@1.2.3-r4?arch=ppc64le&distro=3.17.1',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2025/02/13/2',
-                'http://www.openwall.com/lists/oss-security/2025/02/13/3',
-                'http://www.openwall.com/lists/oss-security/2025/02/13/4',
-                'http://www.openwall.com/lists/oss-security/2025/02/13/5',
-                'http://www.openwall.com/lists/oss-security/2025/02/14/5',
-                'http://www.openwall.com/lists/oss-security/2025/02/14/6',
-                'https://git.musl-libc.org/cgit/musl/commit/?id=c47ad25ea3b484e10326f933e927c0bc8cded3da',
-                'https://git.musl-libc.org/cgit/musl/commit/?id=e5adcd97b5196e29991b524237381a0202a60659',
-                'https://www.openwall.com/lists/oss-security/2025/02/13/2'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'musl libc 0.9.13 through 1.2.5 before 1.2.6 has an out-of-bounds write ...'
-            },
-            {
-              'cve':  'CVE-2025-26519',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-787'
-              ],
-              'description':   'musl libc 0.9.13 through 1.2.5 before 1.2.6 has an out-of-bounds write vulnerability when an attacker can trigger iconv conversion of untrusted EUC-KR text to UTF-8.',
-              'diffID':        'sha256:0e3395c9c4d69931dec5029f4c593bdabd1bf4cc1c06b7d568ee72ea29783132',
-              'fixedVersions': [
-                '1.2.3-r6'
-              ],
-              'installedVersion': '1.2.3-r4',
-              'packageName':      'musl-utils',
-              'purl':             'pkg:apk/alpine/musl-utils@1.2.3-r4?arch=ppc64le&distro=3.17.1',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2025/02/13/2',
-                'http://www.openwall.com/lists/oss-security/2025/02/13/3',
-                'http://www.openwall.com/lists/oss-security/2025/02/13/4',
-                'http://www.openwall.com/lists/oss-security/2025/02/13/5',
-                'http://www.openwall.com/lists/oss-security/2025/02/14/5',
-                'http://www.openwall.com/lists/oss-security/2025/02/14/6',
-                'https://git.musl-libc.org/cgit/musl/commit/?id=c47ad25ea3b484e10326f933e927c0bc8cded3da',
-                'https://git.musl-libc.org/cgit/musl/commit/?id=e5adcd97b5196e29991b524237381a0202a60659',
-                'https://www.openwall.com/lists/oss-security/2025/02/13/2'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'musl libc 0.9.13 through 1.2.5 before 1.2.6 has an out-of-bounds write ...'
-            },
-            {
-              'cve':  'CVE-2023-42363',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.5',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.8',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   'A use-after-free vulnerability was discovered in xasprintf function in xfuncs_printf.c:344 in BusyBox v.1.36.1.',
-              'diffID':        'sha256:0e3395c9c4d69931dec5029f4c593bdabd1bf4cc1c06b7d568ee72ea29783132',
-              'fixedVersions': [
-                '1.35.0-r31'
-              ],
-              'installedVersion': '1.35.0-r29',
-              'packageName':      'ssl_client',
-              'purl':             'pkg:apk/alpine/ssl_client@1.35.0-r29?arch=ppc64le&distro=3.17.1',
-              'references':       [
-                'http://lists.busybox.net/pipermail/busybox/2024-May/090760.html',
-                'https://access.redhat.com/security/cve/CVE-2023-42363',
-                'https://bugs.busybox.net/show_bug.cgi?id=15865',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-42363',
-                'https://ubuntu.com/security/notices/USN-6961-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-42363'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk'
-            },
-            {
-              'cve':  'CVE-2023-42364',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.5',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.8',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   'A use-after-free vulnerability in BusyBox v.1.36.1 allows attackers to cause a denial of service via a crafted awk pattern in the awk.c evaluate function.',
-              'diffID':        'sha256:0e3395c9c4d69931dec5029f4c593bdabd1bf4cc1c06b7d568ee72ea29783132',
-              'fixedVersions': [
-                '1.35.0-r31'
-              ],
-              'installedVersion': '1.35.0-r29',
-              'packageName':      'ssl_client',
-              'purl':             'pkg:apk/alpine/ssl_client@1.35.0-r29?arch=ppc64le&distro=3.17.1',
-              'references':       [
-                'http://lists.busybox.net/pipermail/busybox/2024-May/090762.html',
-                'https://access.redhat.com/security/cve/CVE-2023-42364',
-                'https://bugs.busybox.net/show_bug.cgi?id=15868',
-                'https://gitlab.alpinelinux.org/alpine/aports/-/blob/master/main/busybox/CVE-2023-42364-CVE-2023-42365.patch',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-42364',
-                'https://ubuntu.com/security/notices/USN-6961-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-42364'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'busybox: use-after-free'
-            },
-            {
-              'cve':  'CVE-2023-42365',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.5',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.8',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   'A use-after-free vulnerability was discovered in BusyBox v.1.36.1 via a crafted awk pattern in the awk.c copyvar function.',
-              'diffID':        'sha256:0e3395c9c4d69931dec5029f4c593bdabd1bf4cc1c06b7d568ee72ea29783132',
-              'fixedVersions': [
-                '1.35.0-r31'
-              ],
-              'installedVersion': '1.35.0-r29',
-              'packageName':      'ssl_client',
-              'purl':             'pkg:apk/alpine/ssl_client@1.35.0-r29?arch=ppc64le&distro=3.17.1',
-              'references':       [
-                'http://lists.busybox.net/pipermail/busybox/2024-May/090762.html',
-                'https://access.redhat.com/security/cve/CVE-2023-42365',
-                'https://bugs.busybox.net/show_bug.cgi?id=15871',
-                'https://gitlab.alpinelinux.org/alpine/aports/-/blob/master/main/busybox/CVE-2023-42364-CVE-2023-42365.patch',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-42365',
-                'https://ubuntu.com/security/notices/USN-6961-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-42365'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'busybox: use-after-free'
-            },
-            {
-              'cve':  'CVE-2023-42366',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.5',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.1',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-787'
-              ],
-              'description':   'A heap-buffer-overflow was discovered in BusyBox v.1.36.1 in the next_token function at awk.c:1159.',
-              'diffID':        'sha256:0e3395c9c4d69931dec5029f4c593bdabd1bf4cc1c06b7d568ee72ea29783132',
-              'fixedVersions': [
-                '1.35.0-r30'
-              ],
-              'installedVersion': '1.35.0-r29',
-              'packageName':      'ssl_client',
-              'purl':             'pkg:apk/alpine/ssl_client@1.35.0-r29?arch=ppc64le&distro=3.17.1',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2023-42366',
-                'https://bugs.busybox.net/show_bug.cgi?id=15874',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-42366',
-                'https://security.netapp.com/advisory/ntap-20241206-0007/',
-                'https://www.cve.org/CVERecord?id=CVE-2023-42366'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'busybox: A heap-buffer-overflow'
-            }
-          ]
-        }
-      ],
-      'summary': {
-        'critical':   0,
-        'high':       20,
-        'low':        4,
-        'medium':     44,
-        'suppressed': 0,
-        'unknown':    0
-      }
-    }
-  },
-  {
-    'id':    'default/91714193916d90bc45feff4c3ae3b27c63f75839fa9a5c664daa064a6101acc4',
-    'type':  'storage.sbomscanner.kubewarden.io.vulnerabilityreport',
-    'links': {
-      'patch':  'https://localhost:8005/v1/storage.sbomscanner.kubewarden.io.vulnerabilityreports/default/91714193916d90bc45feff4c3ae3b27c63f75839fa9a5c664daa064a6101acc4',
-      'remove': 'https://localhost:8005/v1/storage.sbomscanner.kubewarden.io.vulnerabilityreports/default/91714193916d90bc45feff4c3ae3b27c63f75839fa9a5c664daa064a6101acc4',
-      'self':   'https://localhost:8005/v1/storage.sbomscanner.kubewarden.io.vulnerabilityreports/default/91714193916d90bc45feff4c3ae3b27c63f75839fa9a5c664daa064a6101acc4',
-      'update': 'https://localhost:8005/v1/storage.sbomscanner.kubewarden.io.vulnerabilityreports/default/91714193916d90bc45feff4c3ae3b27c63f75839fa9a5c664daa064a6101acc4',
-      'view':   'https://localhost:8005/apis/storage.sbomscanner.kubewarden.io/v1alpha1/namespaces/default/vulnerabilityreports/91714193916d90bc45feff4c3ae3b27c63f75839fa9a5c664daa064a6101acc4'
-    },
-    'apiVersion':    'storage.sbomscanner.kubewarden.io/v1alpha1',
-    'imageMetadata': {
-      'digest':      'sha256:d96a5642988052dc869a6d881db4f90493626fa05842cc785a8961ed991dc4f5',
-      'platform':    'linux/amd64',
-      'registry':    'demo-02',
-      'registryURI': 'ghcr.io',
-      'repository':  'linuxcontainers/alpine',
-      'tag':         '3.14.3'
-    },
-    'kind':     'VulnerabilityReport',
-    'metadata': {
-      'creationTimestamp': '2026-01-09T22:46:16Z',
-      'fields':            [
-        '91714193916d90bc45feff4c3ae3b27c63f75839fa9a5c664daa064a6101acc4',
-        'ghcr.io/linuxcontainers/alpine:3.14.3',
-        'linux/amd64',
-        '21 (0 suppressed)'
-      ],
-      'labels': {
-        'app.kubernetes.io/managed-by':          'sbomscanner',
-        'app.kubernetes.io/part-of':             'sbomscanner',
-        'sbomscanner.kubewarden.io/scanjob-uid': '42184d01-4b15-466f-98aa-e802d1b6b6b8'
-      },
-      'name':            '91714193916d90bc45feff4c3ae3b27c63f75839fa9a5c664daa064a6101acc4',
-      'namespace':       'default',
-      'ownerReferences': [
-        {
-          'apiVersion':         'storage.sbomscanner.kubewarden.io/v1alpha1',
-          'blockOwnerDeletion': true,
-          'controller':         true,
-          'kind':               'SBOM',
-          'name':               '91714193916d90bc45feff4c3ae3b27c63f75839fa9a5c664daa064a6101acc4',
-          'uid':                '5a9a85f7-0adc-467d-a91f-bd89f9bfb902'
-        }
-      ],
-      'relationships': [
-        {
-          'fromId':   'default/91714193916d90bc45feff4c3ae3b27c63f75839fa9a5c664daa064a6101acc4',
-          'fromType': 'storage.sbomscanner.kubewarden.io.sbom',
-          'rel':      'owner',
-          'state':    'active',
-          'message':  'Resource is current'
-        }
-      ],
-      'resourceVersion': '10',
-      'state':           {
-        'error':         false,
-        'message':       'Resource is current',
-        'name':          'active',
-        'transitioning': false
-      },
-      'uid': '5e8aa2c1-16a1-4bd5-868c-93df0aa551bf'
-    },
-    'report': {
-      'results': [
-        {
-          'class':           'os-pkgs',
-          'target':          '/var/run/worker/trivy.sbom.2532744295.json (alpine 3.14.3)',
-          'type':            'alpine',
-          'vulnerabilities': [
-            {
-              'cve':  'CVE-2022-28391',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '8.8',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-88'
-              ],
-              'description':   "BusyBox through 1.35.0 allows remote attackers to execute arbitrary code if netstat is used to print a DNS PTR record's value to a VT compatible terminal. Alternatively, the attacker could choose to change the terminal's colors.",
-              'diffID':        'sha256:1a058d5342cc722ad5439cacae4b2b4eedde51d8fe8800fcf28444302355c16d',
-              'fixedVersions': [
-                '1.33.1-r7'
-              ],
-              'installedVersion': '1.33.1-r6',
-              'packageName':      'busybox',
-              'purl':             'pkg:apk/alpine/busybox@1.33.1-r6?arch=x86_64&distro=3.14.3',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2022-28391',
-                'https://git.alpinelinux.org/aports/plain/main/busybox/0001-libbb-sockaddr2str-ensure-only-printable-characters-.patch',
-                'https://git.alpinelinux.org/aports/plain/main/busybox/0002-nslookup-sanitize-all-printed-strings-with-printable.patch',
-                'https://gitlab.alpinelinux.org/alpine/aports/-/issues/13661',
-                'https://nvd.nist.gov/vuln/detail/CVE-2022-28391',
-                'https://www.cve.org/CVERecord?id=CVE-2022-28391'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: remote attackers may execute arbitrary code if netstat is used'
-            },
-            {
-              'cve':  'CVE-2022-0778',
-              'cvss': {
-                'bitnami': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'ghsa': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'nvd': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-835'
-              ],
-              'description':   'The BN_mod_sqrt() function, which computes a modular square root, contains a bug that can cause it to loop forever for non-prime moduli. Internally this function is used when parsing certificates that contain elliptic curve public keys in compressed form or explicit elliptic curve parameters with a base point encoded in compressed form. It is possible to trigger the infinite loop by crafting a certificate that has invalid explicit curve parameters. Since certificate parsing happens prior to verification of the certificate signature, any process that parses an externally supplied certificate may thus be subject to a denial of service attack. The infinite loop can also be reached when parsing crafted private keys as they can contain explicit elliptic curve parameters. Thus vulnerable situations include: - TLS clients consuming server certificates - TLS servers consuming client certificates - Hosting providers taking certificates or private keys from customers - Certificate authorities parsing certification requests from subscribers - Anything else which parses ASN.1 elliptic curve parameters Also any other applications that use the BN_mod_sqrt() where the attacker can control the parameter values are vulnerable to this DoS issue. In the OpenSSL 1.0.2 version the public key is not parsed during initial parsing of the certificate which makes it slightly harder to trigger the infinite loop. However any operation which requires the public key from the certificate will trigger the infinite loop. In particular the attacker can use a self-signed certificate to trigger the loop during verification of the certificate signature. This issue affects OpenSSL versions 1.0.2, 1.1.1 and 3.0. It was addressed in the releases of 1.1.1n and 3.0.2 on the 15th March 2022. Fixed in OpenSSL 3.0.2 (Affected 3.0.0,3.0.1). Fixed in OpenSSL 1.1.1n (Affected 1.1.1-1.1.1m). Fixed in OpenSSL 1.0.2zd (Affected 1.0.2-1.0.2zc).',
-              'diffID':        'sha256:1a058d5342cc722ad5439cacae4b2b4eedde51d8fe8800fcf28444302355c16d',
-              'fixedVersions': [
-                '1.1.1n-r0'
-              ],
-              'installedVersion': '1.1.1l-r0',
-              'packageName':      'libcrypto1.1',
-              'purl':             'pkg:apk/alpine/libcrypto1.1@1.1.1l-r0?arch=x86_64&distro=3.14.3',
-              'references':       [
-                'http://packetstormsecurity.com/files/167344/OpenSSL-1.0.2-1.1.1-3.0-BN_mod_sqrt-Infinite-Loop.html',
-                'http://seclists.org/fulldisclosure/2022/May/33',
-                'http://seclists.org/fulldisclosure/2022/May/35',
-                'http://seclists.org/fulldisclosure/2022/May/38',
-                'https://access.redhat.com/errata/RHSA-2022:5326',
-                'https://access.redhat.com/security/cve/CVE-2022-0778',
-                'https://bugzilla.redhat.com/2062202',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2062202',
-                'https://cert-portal.siemens.com/productcert/pdf/ssa-712929.pdf',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-0778',
-                'https://errata.almalinux.org/8/ALSA-2022-5326.html',
-                'https://errata.rockylinux.org/RLSA-2022:4899',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=3118eb64934499d93db3230748a452351d1d9a65',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=380085481c64de749a6dd25cdf0bcf4360b30f83',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=a466912611aa6cbdf550cd10601390e587451246',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=3118eb64934499d93db3230748a452351d1d9a65',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=380085481c64de749a6dd25cdf0bcf4360b30f83',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=a466912611aa6cbdf550cd10601390e587451246',
-                'https://linux.oracle.com/cve/CVE-2022-0778.html',
-                'https://linux.oracle.com/errata/ELSA-2022-9272.html',
-                'https://lists.debian.org/debian-lts-announce/2022/03/msg00023.html',
-                'https://lists.debian.org/debian-lts-announce/2022/03/msg00024.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/323SNN6ZX7PRJJWP2BUAFLPUAE42XWLZ',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/323SNN6ZX7PRJJWP2BUAFLPUAE42XWLZ/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GDB3GQVJPXJE7X5C5JN6JAA4XUDWD6E6',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GDB3GQVJPXJE7X5C5JN6JAA4XUDWD6E6/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/W6K3PR542DXWLEFFMFIDMME4CWMHJRMG',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/W6K3PR542DXWLEFFMFIDMME4CWMHJRMG/',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/323SNN6ZX7PRJJWP2BUAFLPUAE42XWLZ',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/GDB3GQVJPXJE7X5C5JN6JAA4XUDWD6E6',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/W6K3PR542DXWLEFFMFIDMME4CWMHJRMG',
-                'https://nvd.nist.gov/vuln/detail/CVE-2022-0778',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2022-0002',
-                'https://rustsec.org/advisories/RUSTSEC-2022-0014.html',
-                'https://security.gentoo.org/glsa/202210-02',
-                'https://security.netapp.com/advisory/ntap-20220321-0002',
-                'https://security.netapp.com/advisory/ntap-20220321-0002/',
-                'https://security.netapp.com/advisory/ntap-20220429-0005',
-                'https://security.netapp.com/advisory/ntap-20220429-0005/',
-                'https://security.netapp.com/advisory/ntap-20240621-0006',
-                'https://security.netapp.com/advisory/ntap-20240621-0006/',
-                'https://support.apple.com/kb/HT213255',
-                'https://support.apple.com/kb/HT213256',
-                'https://support.apple.com/kb/HT213257',
-                'https://ubuntu.com/security/notices/USN-5328-1',
-                'https://ubuntu.com/security/notices/USN-5328-2',
-                'https://ubuntu.com/security/notices/USN-6457-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2022-0778',
-                'https://www.debian.org/security/2022/dsa-5103',
-                'https://www.openssl.org/news/secadv/20220315.txt',
-                'https://www.oracle.com/security-alerts/cpuapr2022.html',
-                'https://www.oracle.com/security-alerts/cpujul2022.html',
-                'https://www.tenable.com/security/tns-2022-06',
-                'https://www.tenable.com/security/tns-2022-07',
-                'https://www.tenable.com/security/tns-2022-08',
-                'https://www.tenable.com/security/tns-2022-09'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: Infinite loop in BN_mod_sqrt() reachable when parsing certificates'
-            },
-            {
-              'cve':  'CVE-2022-4450',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'nvd': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-415'
-              ],
-              'description':   'The function PEM_read_bio_ex() reads a PEM file from a BIO and parses and\ndecodes the "name" (e.g. "CERTIFICATE"), any header data and the payload data.\nIf the function succeeds then the "name_out", "header" and "data" arguments are\npopulated with pointers to buffers containing the relevant decoded data. The\ncaller is responsible for freeing those buffers. It is possible to construct a\nPEM file that results in 0 bytes of payload data. In this case PEM_read_bio_ex()\nwill return a failure code but will populate the header argument with a pointer\nto a buffer that has already been freed. If the caller also frees this buffer\nthen a double free will occur. This will most likely lead to a crash. This\ncould be exploited by an attacker who has the ability to supply malicious PEM\nfiles for parsing to achieve a denial of service attack.\n\nThe functions PEM_read_bio() and PEM_read() are simple wrappers around\nPEM_read_bio_ex() and therefore these functions are also directly affected.\n\nThese functions are also called indirectly by a number of other OpenSSL\nfunctions including PEM_X509_INFO_read_bio_ex() and\nSSL_CTX_use_serverinfo_file() which are also vulnerable. Some OpenSSL internal\nuses of these functions are not vulnerable because the caller does not free the\nheader argument if PEM_read_bio_ex() returns a failure code. These locations\ninclude the PEM_read_bio_TYPE() functions as well as the decoders introduced in\nOpenSSL 3.0.\n\nThe OpenSSL asn1parse command line application is also impacted by this issue.',
-              'diffID':        'sha256:1a058d5342cc722ad5439cacae4b2b4eedde51d8fe8800fcf28444302355c16d',
-              'fixedVersions': [
-                '1.1.1t-r0'
-              ],
-              'installedVersion': '1.1.1l-r0',
-              'packageName':      'libcrypto1.1',
-              'purl':             'pkg:apk/alpine/libcrypto1.1@1.1.1l-r0?arch=x86_64&distro=3.14.3',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2023:2165',
-                'https://access.redhat.com/security/cve/CVE-2022-4450',
-                'https://bugzilla.redhat.com/1960321',
-                'https://bugzilla.redhat.com/2164440',
-                'https://bugzilla.redhat.com/2164487',
-                'https://bugzilla.redhat.com/2164492',
-                'https://bugzilla.redhat.com/2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144000',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144003',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144006',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144008',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144010',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144012',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144015',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144017',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144019',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2145170',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2158412',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164440',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164487',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164488',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164492',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164497',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164499',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164500',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4203',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4304',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4450',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0215',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0216',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0217',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0286',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0401',
-                'https://errata.almalinux.org/9/ALSA-2023-2165.html',
-                'https://errata.rockylinux.org/RLSA-2023:0946',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=63bcf189be73a9cc1264059bed6f57974be74a83',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=bbcf509bd046b34cca19c766bbddc31683d0858b',
-                'https://linux.oracle.com/cve/CVE-2022-4450.html',
-                'https://linux.oracle.com/errata/ELSA-2023-32791.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2022-4450',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0003',
-                'https://rustsec.org/advisories/RUSTSEC-2023-0010.html',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://ubuntu.com/security/notices/USN-5844-1',
-                'https://ubuntu.com/security/notices/USN-6564-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2022-4450',
-                'https://www.openssl.org/news/secadv/20230207.txt'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: double free after calling PEM_read_bio_ex'
-            },
-            {
-              'cve':  'CVE-2023-0215',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'nvd': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   'The public API function BIO_new_NDEF is a helper function used for streaming\nASN.1 data via a BIO. It is primarily used internally to OpenSSL to support the\nSMIME, CMS and PKCS7 streaming capabilities, but may also be called directly by\nend user applications.\n\nThe function receives a BIO from the caller, prepends a new BIO_f_asn1 filter\nBIO onto the front of it to form a BIO chain, and then returns the new head of\nthe BIO chain to the caller. Under certain conditions, for example if a CMS\nrecipient public key is invalid, the new filter BIO is freed and the function\nreturns a NULL result indicating a failure. However, in this case, the BIO chain\nis not properly cleaned up and the BIO passed by the caller still retains\ninternal pointers to the previously freed filter BIO. If the caller then goes on\nto call BIO_pop() on the BIO then a use-after-free will occur. This will most\nlikely result in a crash.\n\n\n\nThis scenario occurs directly in the internal function B64_write_ASN1() which\nmay cause BIO_new_NDEF() to be called and will subsequently call BIO_pop() on\nthe BIO. This internal function is in turn called by the public API functions\nPEM_write_bio_ASN1_stream, PEM_write_bio_CMS_stream, PEM_write_bio_PKCS7_stream,\nSMIME_write_ASN1, SMIME_write_CMS and SMIME_write_PKCS7.\n\nOther public API functions that may be impacted by this include\ni2d_ASN1_bio_stream, BIO_new_CMS, BIO_new_PKCS7, i2d_CMS_bio_stream and\ni2d_PKCS7_bio_stream.\n\nThe OpenSSL cms and smime command line applications are similarly affected.',
-              'diffID':        'sha256:1a058d5342cc722ad5439cacae4b2b4eedde51d8fe8800fcf28444302355c16d',
-              'fixedVersions': [
-                '1.1.1t-r0'
-              ],
-              'installedVersion': '1.1.1l-r0',
-              'packageName':      'libcrypto1.1',
-              'purl':             'pkg:apk/alpine/libcrypto1.1@1.1.1l-r0?arch=x86_64&distro=3.14.3',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2023:2165',
-                'https://access.redhat.com/security/cve/CVE-2023-0215',
-                'https://bugzilla.redhat.com/1960321',
-                'https://bugzilla.redhat.com/2164440',
-                'https://bugzilla.redhat.com/2164487',
-                'https://bugzilla.redhat.com/2164492',
-                'https://bugzilla.redhat.com/2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144000',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144003',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144006',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144008',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144010',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144012',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144015',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144017',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144019',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2145170',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2158412',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164440',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164487',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164488',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164492',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164497',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164499',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164500',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4203',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4304',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4450',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0215',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0216',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0217',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0286',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0401',
-                'https://errata.almalinux.org/9/ALSA-2023-2165.html',
-                'https://errata.rockylinux.org/RLSA-2023:0946',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=8818064ce3c3c0f1b740a5aaba2a987e75bfbafd',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=9816136fe31d92ace4037d5da5257f763aeeb4eb',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=c3829dd8825c654652201e16f8a0a0c46ee3f344',
-                'https://linux.oracle.com/cve/CVE-2023-0215.html',
-                'https://linux.oracle.com/errata/ELSA-2023-32791.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-0215',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0003',
-                'https://rustsec.org/advisories/RUSTSEC-2023-0009.html',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://security.netapp.com/advisory/ntap-20230427-0007',
-                'https://security.netapp.com/advisory/ntap-20230427-0007/',
-                'https://security.netapp.com/advisory/ntap-20230427-0009',
-                'https://security.netapp.com/advisory/ntap-20230427-0009/',
-                'https://security.netapp.com/advisory/ntap-20240621-0006',
-                'https://security.netapp.com/advisory/ntap-20240621-0006/',
-                'https://ubuntu.com/security/notices/USN-5844-1',
-                'https://ubuntu.com/security/notices/USN-5845-1',
-                'https://ubuntu.com/security/notices/USN-5845-2',
-                'https://ubuntu.com/security/notices/USN-6564-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-0215',
-                'https://www.openssl.org/news/secadv/20230207.txt'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: use-after-free following BIO_new_NDEF'
-            },
-            {
-              'cve':  'CVE-2023-0286',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '7.4',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H'
-                },
-                'nvd': {
-                  'v3score':  '7.4',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.4',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-843'
-              ],
-              'description':   'There is a type confusion vulnerability relating to X.400 address processing\ninside an X.509 GeneralName. X.400 addresses were parsed as an ASN1_STRING but\nthe public structure definition for GENERAL_NAME incorrectly specified the type\nof the x400Address field as ASN1_TYPE. This field is subsequently interpreted by\nthe OpenSSL function GENERAL_NAME_cmp as an ASN1_TYPE rather than an\nASN1_STRING.\n\nWhen CRL checking is enabled (i.e. the application sets the\nX509_V_FLAG_CRL_CHECK flag), this vulnerability may allow an attacker to pass\narbitrary pointers to a memcmp call, enabling them to read memory contents or\nenact a denial of service. In most cases, the attack requires the attacker to\nprovide both the certificate chain and CRL, neither of which need to have a\nvalid signature. If the attacker only controls one of these inputs, the other\ninput must already contain an X.400 address as a CRL distribution point, which\nis uncommon. As such, this vulnerability is most likely to only affect\napplications which have implemented their own functionality for retrieving CRLs\nover a network.',
-              'diffID':        'sha256:1a058d5342cc722ad5439cacae4b2b4eedde51d8fe8800fcf28444302355c16d',
-              'fixedVersions': [
-                '1.1.1t-r0'
-              ],
-              'installedVersion': '1.1.1l-r0',
-              'packageName':      'libcrypto1.1',
-              'purl':             'pkg:apk/alpine/libcrypto1.1@1.1.1l-r0?arch=x86_64&distro=3.14.3',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2025:7937',
-                'https://access.redhat.com/security/cve/CVE-2023-0286',
-                'https://access.redhat.com/security/cve/cve-2023-0286',
-                'https://bugzilla.redhat.com/2164440',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144000',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144003',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144006',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144008',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144010',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144012',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144015',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144017',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144019',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2145170',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2158412',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164440',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164487',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164488',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164492',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164497',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164499',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164500',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4203',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4304',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4450',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0215',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0216',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0217',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0286',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0401',
-                'https://errata.almalinux.org/9/ALSA-2025-7937.html',
-                'https://errata.rockylinux.org/RLSA-2023:0946',
-                'https://ftp.openbsd.org/pub/OpenBSD/LibreSSL/libressl-3.6.2-relnotes.txt',
-                'https://ftp.openbsd.org/pub/OpenBSD/patches/7.2/common/018_x509.patch.sig',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=2c6c9d439b484e1ba9830d8454a34fa4f80fdfe9',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=2f7530077e0ef79d98718138716bc51ca0cad658',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=fd2af07dc083a350c959147097003a14a5e8ac4d',
-                'https://github.com/pyca/cryptography',
-                'https://github.com/pyca/cryptography/security/advisories/GHSA-x4qr-2fvf-3mr5',
-                'https://linux.oracle.com/cve/CVE-2023-0286.html',
-                'https://linux.oracle.com/errata/ELSA-2025-7937.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-0286',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0003',
-                'https://rustsec.org/advisories/RUSTSEC-2023-0006.html',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://ubuntu.com/security/notices/USN-5844-1',
-                'https://ubuntu.com/security/notices/USN-5845-1',
-                'https://ubuntu.com/security/notices/USN-5845-2',
-                'https://ubuntu.com/security/notices/USN-6564-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-0286',
-                'https://www.openssl.org/news/secadv/20230207.txt'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: X.400 address type confusion in X.509 GeneralName'
-            },
-            {
-              'cve':  'CVE-2023-0464',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-295'
-              ],
-              'description':   "A security vulnerability has been identified in all supported versions\n\nof OpenSSL related to the verification of X.509 certificate chains\nthat include policy constraints.  Attackers may be able to exploit this\nvulnerability by creating a malicious certificate chain that triggers\nexponential use of computational resources, leading to a denial-of-service\n(DoS) attack on affected systems.\n\nPolicy processing is disabled by default but can be enabled by passing\nthe `-policy' argument to the command line utilities or by calling the\n`X509_VERIFY_PARAM_set1_policies()' function.",
-              'diffID':        'sha256:1a058d5342cc722ad5439cacae4b2b4eedde51d8fe8800fcf28444302355c16d',
-              'fixedVersions': [
-                '1.1.1t-r1'
-              ],
-              'installedVersion': '1.1.1l-r0',
-              'packageName':      'libcrypto1.1',
-              'purl':             'pkg:apk/alpine/libcrypto1.1@1.1.1l-r0?arch=x86_64&distro=3.14.3',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2023:3722',
-                'https://access.redhat.com/security/cve/CVE-2023-0464',
-                'https://bugzilla.redhat.com/2181082',
-                'https://bugzilla.redhat.com/2182561',
-                'https://bugzilla.redhat.com/2182565',
-                'https://bugzilla.redhat.com/2188461',
-                'https://bugzilla.redhat.com/2207947',
-                'https://errata.almalinux.org/9/ALSA-2023-3722.html',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=2017771e2db3e2b96f89bbe8766c3209f6a99545',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=2dcd4f1e3115f38cefa43e3efbe9b801c27e642e',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=879f7080d7e141f415c79eaa3a8ac4a3dad0348b',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=959c59c7a0164117e7f8366466a32bb1f8d77ff1',
-                'https://linux.oracle.com/cve/CVE-2023-0464.html',
-                'https://linux.oracle.com/errata/ELSA-2023-3722.html',
-                'https://lists.debian.org/debian-lts-announce/2023/06/msg00011.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-0464',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://security.netapp.com/advisory/ntap-20230406-0006/',
-                'https://security.netapp.com/advisory/ntap-20240621-0006/',
-                'https://ubuntu.com/security/notices/USN-6039-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.couchbase.com/alerts/',
-                'https://www.cve.org/CVERecord?id=CVE-2023-0464',
-                'https://www.debian.org/security/2023/dsa-5417',
-                'https://www.openssl.org/news/secadv/20230322.txt'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: Denial of service by excessive resource usage in verifying X509 policy constraints'
-            },
-            {
-              'cve':  'CVE-2022-2097',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N'
-                },
-                'nvd': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N'
-                },
-                'redhat': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-327'
-              ],
-              'description':   "AES OCB mode for 32-bit x86 platforms using the AES-NI assembly optimised implementation will not encrypt the entirety of the data under some circumstances. This could reveal sixteen bytes of data that was preexisting in the memory that wasn't written. In the special case of \"in place\" encryption, sixteen bytes of the plaintext would be revealed. Since OpenSSL does not support OCB based cipher suites for TLS and DTLS, they are both unaffected. Fixed in OpenSSL 3.0.5 (Affected 3.0.0-3.0.4). Fixed in OpenSSL 1.1.1q (Affected 1.1.1-1.1.1p).",
-              'diffID':        'sha256:1a058d5342cc722ad5439cacae4b2b4eedde51d8fe8800fcf28444302355c16d',
-              'fixedVersions': [
-                '1.1.1q-r0'
-              ],
-              'installedVersion': '1.1.1l-r0',
-              'packageName':      'libcrypto1.1',
-              'purl':             'pkg:apk/alpine/libcrypto1.1@1.1.1l-r0?arch=x86_64&distro=3.14.3',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2022:6224',
-                'https://access.redhat.com/security/cve/CVE-2022-2097',
-                'https://bugzilla.redhat.com/2081494',
-                'https://bugzilla.redhat.com/2087911',
-                'https://bugzilla.redhat.com/2087913',
-                'https://bugzilla.redhat.com/2097310',
-                'https://bugzilla.redhat.com/2104905',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2081494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2097310',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2100554',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2104905',
-                'https://cert-portal.siemens.com/productcert/pdf/ssa-332410.pdf',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-1292',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-2068',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-2097',
-                'https://errata.almalinux.org/9/ALSA-2022-6224.html',
-                'https://errata.rockylinux.org/RLSA-2022:5818',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=919925673d6c9cfed3c1085497f5dfbbed5fc431',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=a98f339ddd7e8f487d6e0088d4a9a42324885a93',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=919925673d6c9cfed3c1085497f5dfbbed5fc431',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=a98f339ddd7e8f487d6e0088d4a9a42324885a93',
-                'https://github.com/alexcrichton/openssl-src-rs',
-                'https://linux.oracle.com/cve/CVE-2022-2097.html',
-                'https://linux.oracle.com/errata/ELSA-2022-9955.html',
-                'https://lists.debian.org/debian-lts-announce/2023/02/msg00019.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/R6CK57NBQFTPUMXAPJURCGXUYT76NQAK',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/R6CK57NBQFTPUMXAPJURCGXUYT76NQAK/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/V6567JERRHHJW2GNGJGKDRNHR7SNPZK7',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/V6567JERRHHJW2GNGJGKDRNHR7SNPZK7/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VCMNWKERPBKOEBNL7CLTTX3ZZCZLH7XA',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VCMNWKERPBKOEBNL7CLTTX3ZZCZLH7XA/',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/R6CK57NBQFTPUMXAPJURCGXUYT76NQAK',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/R6CK57NBQFTPUMXAPJURCGXUYT76NQAK/',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/V6567JERRHHJW2GNGJGKDRNHR7SNPZK7',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/V6567JERRHHJW2GNGJGKDRNHR7SNPZK7/',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/VCMNWKERPBKOEBNL7CLTTX3ZZCZLH7XA',
-                'https://nvd.nist.gov/vuln/detail/CVE-2022-2097',
-                'https://rustsec.org/advisories/RUSTSEC-2022-0032.html',
-                'https://security.gentoo.org/glsa/202210-02',
-                'https://security.netapp.com/advisory/ntap-20220715-0011',
-                'https://security.netapp.com/advisory/ntap-20220715-0011/',
-                'https://security.netapp.com/advisory/ntap-20230420-0008',
-                'https://security.netapp.com/advisory/ntap-20230420-0008/',
-                'https://security.netapp.com/advisory/ntap-20240621-0006',
-                'https://security.netapp.com/advisory/ntap-20240621-0006/',
-                'https://ubuntu.com/security/notices/USN-5502-1',
-                'https://ubuntu.com/security/notices/USN-6457-1',
-                'https://www.cve.org/CVERecord?id=CVE-2022-2097',
-                'https://www.debian.org/security/2023/dsa-5343',
-                'https://www.openssl.org/news/secadv/20220705.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: AES OCB fails to encrypt some bytes'
-            },
-            {
-              'cve':  'CVE-2022-4304',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N'
-                },
-                'nvd': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N'
-                },
-                'redhat': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-203'
-              ],
-              'description':   'A timing based side channel exists in the OpenSSL RSA Decryption implementation\nwhich could be sufficient to recover a plaintext across a network in a\nBleichenbacher style attack. To achieve a successful decryption an attacker\nwould have to be able to send a very large number of trial messages for\ndecryption. The vulnerability affects all RSA padding modes: PKCS#1 v1.5,\nRSA-OEAP and RSASVE.\n\nFor example, in a TLS connection, RSA is commonly used by a client to send an\nencrypted pre-master secret to the server. An attacker that had observed a\ngenuine connection between a client and a server could use this flaw to send\ntrial messages to the server and record the time taken to process them. After a\nsufficiently large number of messages the attacker could recover the pre-master\nsecret used for the original connection and thus be able to decrypt the\napplication data sent over that connection.',
-              'diffID':        'sha256:1a058d5342cc722ad5439cacae4b2b4eedde51d8fe8800fcf28444302355c16d',
-              'fixedVersions': [
-                '1.1.1t-r0'
-              ],
-              'installedVersion': '1.1.1l-r0',
-              'packageName':      'libcrypto1.1',
-              'purl':             'pkg:apk/alpine/libcrypto1.1@1.1.1l-r0?arch=x86_64&distro=3.14.3',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2023:2165',
-                'https://access.redhat.com/security/cve/CVE-2022-4304',
-                'https://bugzilla.redhat.com/1960321',
-                'https://bugzilla.redhat.com/2164440',
-                'https://bugzilla.redhat.com/2164487',
-                'https://bugzilla.redhat.com/2164492',
-                'https://bugzilla.redhat.com/2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144000',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144003',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144006',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144008',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144010',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144012',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144015',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144017',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144019',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2145170',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2158412',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164440',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164487',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164488',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164492',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164497',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164499',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164500',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4203',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4304',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4450',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0215',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0216',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0217',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0286',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0401',
-                'https://errata.almalinux.org/9/ALSA-2023-2165.html',
-                'https://errata.rockylinux.org/RLSA-2023:0946',
-                'https://linux.oracle.com/cve/CVE-2022-4304.html',
-                'https://linux.oracle.com/errata/ELSA-2023-32791.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2022-4304',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0003',
-                'https://rustsec.org/advisories/RUSTSEC-2023-0007.html',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://ubuntu.com/security/notices/USN-5844-1',
-                'https://ubuntu.com/security/notices/USN-6564-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2022-4304',
-                'https://www.openssl.org/news/secadv/20230207.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: timing attack in RSA Decryption implementation'
-            },
-            {
-              'cve':  'CVE-2023-0465',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N'
-                },
-                'redhat': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-295'
-              ],
-              'description':   "Applications that use a non-default option when verifying certificates may be\nvulnerable to an attack from a malicious CA to circumvent certain checks.\n\nInvalid certificate policies in leaf certificates are silently ignored by\nOpenSSL and other certificate policy checks are skipped for that certificate.\nA malicious CA could use this to deliberately assert invalid certificate policies\nin order to circumvent policy checking on the certificate altogether.\n\nPolicy processing is disabled by default but can be enabled by passing\nthe `-policy' argument to the command line utilities or by calling the\n`X509_VERIFY_PARAM_set1_policies()' function.",
-              'diffID':        'sha256:1a058d5342cc722ad5439cacae4b2b4eedde51d8fe8800fcf28444302355c16d',
-              'fixedVersions': [
-                '1.1.1t-r2'
-              ],
-              'installedVersion': '1.1.1l-r0',
-              'packageName':      'libcrypto1.1',
-              'purl':             'pkg:apk/alpine/libcrypto1.1@1.1.1l-r0?arch=x86_64&distro=3.14.3',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2023:3722',
-                'https://access.redhat.com/security/cve/CVE-2023-0465',
-                'https://bugzilla.redhat.com/2181082',
-                'https://bugzilla.redhat.com/2182561',
-                'https://bugzilla.redhat.com/2182565',
-                'https://bugzilla.redhat.com/2188461',
-                'https://bugzilla.redhat.com/2207947',
-                'https://errata.almalinux.org/9/ALSA-2023-3722.html',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=10325176f3d3e98c6e2b3bf5ab1e3b334de6947a',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=1dd43e0709fece299b15208f36cc7c76209ba0bb',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=b013765abfa80036dc779dd0e50602c57bb3bf95',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=facfb1ab745646e97a1920977ae4a9965ea61d5c',
-                'https://linux.oracle.com/cve/CVE-2023-0465.html',
-                'https://linux.oracle.com/errata/ELSA-2023-3722.html',
-                'https://lists.debian.org/debian-lts-announce/2023/06/msg00011.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-0465',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://security.netapp.com/advisory/ntap-20230414-0001/',
-                'https://ubuntu.com/security/notices/USN-6039-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-0465',
-                'https://www.debian.org/security/2023/dsa-5417',
-                'https://www.openssl.org/news/secadv/20230328.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: Invalid certificate policies in leaf certificates are silently ignored'
-            },
-            {
-              'cve':  'CVE-2022-0778',
-              'cvss': {
-                'bitnami': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'ghsa': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'nvd': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-835'
-              ],
-              'description':   'The BN_mod_sqrt() function, which computes a modular square root, contains a bug that can cause it to loop forever for non-prime moduli. Internally this function is used when parsing certificates that contain elliptic curve public keys in compressed form or explicit elliptic curve parameters with a base point encoded in compressed form. It is possible to trigger the infinite loop by crafting a certificate that has invalid explicit curve parameters. Since certificate parsing happens prior to verification of the certificate signature, any process that parses an externally supplied certificate may thus be subject to a denial of service attack. The infinite loop can also be reached when parsing crafted private keys as they can contain explicit elliptic curve parameters. Thus vulnerable situations include: - TLS clients consuming server certificates - TLS servers consuming client certificates - Hosting providers taking certificates or private keys from customers - Certificate authorities parsing certification requests from subscribers - Anything else which parses ASN.1 elliptic curve parameters Also any other applications that use the BN_mod_sqrt() where the attacker can control the parameter values are vulnerable to this DoS issue. In the OpenSSL 1.0.2 version the public key is not parsed during initial parsing of the certificate which makes it slightly harder to trigger the infinite loop. However any operation which requires the public key from the certificate will trigger the infinite loop. In particular the attacker can use a self-signed certificate to trigger the loop during verification of the certificate signature. This issue affects OpenSSL versions 1.0.2, 1.1.1 and 3.0. It was addressed in the releases of 1.1.1n and 3.0.2 on the 15th March 2022. Fixed in OpenSSL 3.0.2 (Affected 3.0.0,3.0.1). Fixed in OpenSSL 1.1.1n (Affected 1.1.1-1.1.1m). Fixed in OpenSSL 1.0.2zd (Affected 1.0.2-1.0.2zc).',
-              'diffID':        'sha256:1a058d5342cc722ad5439cacae4b2b4eedde51d8fe8800fcf28444302355c16d',
-              'fixedVersions': [
-                '3.3.3p1-r3'
-              ],
-              'installedVersion': '3.3.3p1-r2',
-              'packageName':      'libretls',
-              'purl':             'pkg:apk/alpine/libretls@3.3.3p1-r2?arch=x86_64&distro=3.14.3',
-              'references':       [
-                'http://packetstormsecurity.com/files/167344/OpenSSL-1.0.2-1.1.1-3.0-BN_mod_sqrt-Infinite-Loop.html',
-                'http://seclists.org/fulldisclosure/2022/May/33',
-                'http://seclists.org/fulldisclosure/2022/May/35',
-                'http://seclists.org/fulldisclosure/2022/May/38',
-                'https://access.redhat.com/errata/RHSA-2022:5326',
-                'https://access.redhat.com/security/cve/CVE-2022-0778',
-                'https://bugzilla.redhat.com/2062202',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2062202',
-                'https://cert-portal.siemens.com/productcert/pdf/ssa-712929.pdf',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-0778',
-                'https://errata.almalinux.org/8/ALSA-2022-5326.html',
-                'https://errata.rockylinux.org/RLSA-2022:4899',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=3118eb64934499d93db3230748a452351d1d9a65',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=380085481c64de749a6dd25cdf0bcf4360b30f83',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=a466912611aa6cbdf550cd10601390e587451246',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=3118eb64934499d93db3230748a452351d1d9a65',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=380085481c64de749a6dd25cdf0bcf4360b30f83',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=a466912611aa6cbdf550cd10601390e587451246',
-                'https://linux.oracle.com/cve/CVE-2022-0778.html',
-                'https://linux.oracle.com/errata/ELSA-2022-9272.html',
-                'https://lists.debian.org/debian-lts-announce/2022/03/msg00023.html',
-                'https://lists.debian.org/debian-lts-announce/2022/03/msg00024.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/323SNN6ZX7PRJJWP2BUAFLPUAE42XWLZ',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/323SNN6ZX7PRJJWP2BUAFLPUAE42XWLZ/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GDB3GQVJPXJE7X5C5JN6JAA4XUDWD6E6',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GDB3GQVJPXJE7X5C5JN6JAA4XUDWD6E6/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/W6K3PR542DXWLEFFMFIDMME4CWMHJRMG',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/W6K3PR542DXWLEFFMFIDMME4CWMHJRMG/',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/323SNN6ZX7PRJJWP2BUAFLPUAE42XWLZ',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/GDB3GQVJPXJE7X5C5JN6JAA4XUDWD6E6',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/W6K3PR542DXWLEFFMFIDMME4CWMHJRMG',
-                'https://nvd.nist.gov/vuln/detail/CVE-2022-0778',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2022-0002',
-                'https://rustsec.org/advisories/RUSTSEC-2022-0014.html',
-                'https://security.gentoo.org/glsa/202210-02',
-                'https://security.netapp.com/advisory/ntap-20220321-0002',
-                'https://security.netapp.com/advisory/ntap-20220321-0002/',
-                'https://security.netapp.com/advisory/ntap-20220429-0005',
-                'https://security.netapp.com/advisory/ntap-20220429-0005/',
-                'https://security.netapp.com/advisory/ntap-20240621-0006',
-                'https://security.netapp.com/advisory/ntap-20240621-0006/',
-                'https://support.apple.com/kb/HT213255',
-                'https://support.apple.com/kb/HT213256',
-                'https://support.apple.com/kb/HT213257',
-                'https://ubuntu.com/security/notices/USN-5328-1',
-                'https://ubuntu.com/security/notices/USN-5328-2',
-                'https://ubuntu.com/security/notices/USN-6457-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2022-0778',
-                'https://www.debian.org/security/2022/dsa-5103',
-                'https://www.openssl.org/news/secadv/20220315.txt',
-                'https://www.oracle.com/security-alerts/cpuapr2022.html',
-                'https://www.oracle.com/security-alerts/cpujul2022.html',
-                'https://www.tenable.com/security/tns-2022-06',
-                'https://www.tenable.com/security/tns-2022-07',
-                'https://www.tenable.com/security/tns-2022-08',
-                'https://www.tenable.com/security/tns-2022-09'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: Infinite loop in BN_mod_sqrt() reachable when parsing certificates'
-            },
-            {
-              'cve':  'CVE-2022-0778',
-              'cvss': {
-                'bitnami': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'ghsa': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'nvd': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-835'
-              ],
-              'description':   'The BN_mod_sqrt() function, which computes a modular square root, contains a bug that can cause it to loop forever for non-prime moduli. Internally this function is used when parsing certificates that contain elliptic curve public keys in compressed form or explicit elliptic curve parameters with a base point encoded in compressed form. It is possible to trigger the infinite loop by crafting a certificate that has invalid explicit curve parameters. Since certificate parsing happens prior to verification of the certificate signature, any process that parses an externally supplied certificate may thus be subject to a denial of service attack. The infinite loop can also be reached when parsing crafted private keys as they can contain explicit elliptic curve parameters. Thus vulnerable situations include: - TLS clients consuming server certificates - TLS servers consuming client certificates - Hosting providers taking certificates or private keys from customers - Certificate authorities parsing certification requests from subscribers - Anything else which parses ASN.1 elliptic curve parameters Also any other applications that use the BN_mod_sqrt() where the attacker can control the parameter values are vulnerable to this DoS issue. In the OpenSSL 1.0.2 version the public key is not parsed during initial parsing of the certificate which makes it slightly harder to trigger the infinite loop. However any operation which requires the public key from the certificate will trigger the infinite loop. In particular the attacker can use a self-signed certificate to trigger the loop during verification of the certificate signature. This issue affects OpenSSL versions 1.0.2, 1.1.1 and 3.0. It was addressed in the releases of 1.1.1n and 3.0.2 on the 15th March 2022. Fixed in OpenSSL 3.0.2 (Affected 3.0.0,3.0.1). Fixed in OpenSSL 1.1.1n (Affected 1.1.1-1.1.1m). Fixed in OpenSSL 1.0.2zd (Affected 1.0.2-1.0.2zc).',
-              'diffID':        'sha256:1a058d5342cc722ad5439cacae4b2b4eedde51d8fe8800fcf28444302355c16d',
-              'fixedVersions': [
-                '1.1.1n-r0'
-              ],
-              'installedVersion': '1.1.1l-r0',
-              'packageName':      'libssl1.1',
-              'purl':             'pkg:apk/alpine/libssl1.1@1.1.1l-r0?arch=x86_64&distro=3.14.3',
-              'references':       [
-                'http://packetstormsecurity.com/files/167344/OpenSSL-1.0.2-1.1.1-3.0-BN_mod_sqrt-Infinite-Loop.html',
-                'http://seclists.org/fulldisclosure/2022/May/33',
-                'http://seclists.org/fulldisclosure/2022/May/35',
-                'http://seclists.org/fulldisclosure/2022/May/38',
-                'https://access.redhat.com/errata/RHSA-2022:5326',
-                'https://access.redhat.com/security/cve/CVE-2022-0778',
-                'https://bugzilla.redhat.com/2062202',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2062202',
-                'https://cert-portal.siemens.com/productcert/pdf/ssa-712929.pdf',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-0778',
-                'https://errata.almalinux.org/8/ALSA-2022-5326.html',
-                'https://errata.rockylinux.org/RLSA-2022:4899',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=3118eb64934499d93db3230748a452351d1d9a65',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=380085481c64de749a6dd25cdf0bcf4360b30f83',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=a466912611aa6cbdf550cd10601390e587451246',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=3118eb64934499d93db3230748a452351d1d9a65',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=380085481c64de749a6dd25cdf0bcf4360b30f83',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=a466912611aa6cbdf550cd10601390e587451246',
-                'https://linux.oracle.com/cve/CVE-2022-0778.html',
-                'https://linux.oracle.com/errata/ELSA-2022-9272.html',
-                'https://lists.debian.org/debian-lts-announce/2022/03/msg00023.html',
-                'https://lists.debian.org/debian-lts-announce/2022/03/msg00024.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/323SNN6ZX7PRJJWP2BUAFLPUAE42XWLZ',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/323SNN6ZX7PRJJWP2BUAFLPUAE42XWLZ/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GDB3GQVJPXJE7X5C5JN6JAA4XUDWD6E6',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GDB3GQVJPXJE7X5C5JN6JAA4XUDWD6E6/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/W6K3PR542DXWLEFFMFIDMME4CWMHJRMG',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/W6K3PR542DXWLEFFMFIDMME4CWMHJRMG/',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/323SNN6ZX7PRJJWP2BUAFLPUAE42XWLZ',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/GDB3GQVJPXJE7X5C5JN6JAA4XUDWD6E6',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/W6K3PR542DXWLEFFMFIDMME4CWMHJRMG',
-                'https://nvd.nist.gov/vuln/detail/CVE-2022-0778',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2022-0002',
-                'https://rustsec.org/advisories/RUSTSEC-2022-0014.html',
-                'https://security.gentoo.org/glsa/202210-02',
-                'https://security.netapp.com/advisory/ntap-20220321-0002',
-                'https://security.netapp.com/advisory/ntap-20220321-0002/',
-                'https://security.netapp.com/advisory/ntap-20220429-0005',
-                'https://security.netapp.com/advisory/ntap-20220429-0005/',
-                'https://security.netapp.com/advisory/ntap-20240621-0006',
-                'https://security.netapp.com/advisory/ntap-20240621-0006/',
-                'https://support.apple.com/kb/HT213255',
-                'https://support.apple.com/kb/HT213256',
-                'https://support.apple.com/kb/HT213257',
-                'https://ubuntu.com/security/notices/USN-5328-1',
-                'https://ubuntu.com/security/notices/USN-5328-2',
-                'https://ubuntu.com/security/notices/USN-6457-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2022-0778',
-                'https://www.debian.org/security/2022/dsa-5103',
-                'https://www.openssl.org/news/secadv/20220315.txt',
-                'https://www.oracle.com/security-alerts/cpuapr2022.html',
-                'https://www.oracle.com/security-alerts/cpujul2022.html',
-                'https://www.tenable.com/security/tns-2022-06',
-                'https://www.tenable.com/security/tns-2022-07',
-                'https://www.tenable.com/security/tns-2022-08',
-                'https://www.tenable.com/security/tns-2022-09'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: Infinite loop in BN_mod_sqrt() reachable when parsing certificates'
-            },
-            {
-              'cve':  'CVE-2022-4450',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'nvd': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-415'
-              ],
-              'description':   'The function PEM_read_bio_ex() reads a PEM file from a BIO and parses and\ndecodes the "name" (e.g. "CERTIFICATE"), any header data and the payload data.\nIf the function succeeds then the "name_out", "header" and "data" arguments are\npopulated with pointers to buffers containing the relevant decoded data. The\ncaller is responsible for freeing those buffers. It is possible to construct a\nPEM file that results in 0 bytes of payload data. In this case PEM_read_bio_ex()\nwill return a failure code but will populate the header argument with a pointer\nto a buffer that has already been freed. If the caller also frees this buffer\nthen a double free will occur. This will most likely lead to a crash. This\ncould be exploited by an attacker who has the ability to supply malicious PEM\nfiles for parsing to achieve a denial of service attack.\n\nThe functions PEM_read_bio() and PEM_read() are simple wrappers around\nPEM_read_bio_ex() and therefore these functions are also directly affected.\n\nThese functions are also called indirectly by a number of other OpenSSL\nfunctions including PEM_X509_INFO_read_bio_ex() and\nSSL_CTX_use_serverinfo_file() which are also vulnerable. Some OpenSSL internal\nuses of these functions are not vulnerable because the caller does not free the\nheader argument if PEM_read_bio_ex() returns a failure code. These locations\ninclude the PEM_read_bio_TYPE() functions as well as the decoders introduced in\nOpenSSL 3.0.\n\nThe OpenSSL asn1parse command line application is also impacted by this issue.',
-              'diffID':        'sha256:1a058d5342cc722ad5439cacae4b2b4eedde51d8fe8800fcf28444302355c16d',
-              'fixedVersions': [
-                '1.1.1t-r0'
-              ],
-              'installedVersion': '1.1.1l-r0',
-              'packageName':      'libssl1.1',
-              'purl':             'pkg:apk/alpine/libssl1.1@1.1.1l-r0?arch=x86_64&distro=3.14.3',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2023:2165',
-                'https://access.redhat.com/security/cve/CVE-2022-4450',
-                'https://bugzilla.redhat.com/1960321',
-                'https://bugzilla.redhat.com/2164440',
-                'https://bugzilla.redhat.com/2164487',
-                'https://bugzilla.redhat.com/2164492',
-                'https://bugzilla.redhat.com/2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144000',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144003',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144006',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144008',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144010',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144012',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144015',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144017',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144019',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2145170',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2158412',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164440',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164487',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164488',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164492',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164497',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164499',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164500',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4203',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4304',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4450',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0215',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0216',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0217',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0286',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0401',
-                'https://errata.almalinux.org/9/ALSA-2023-2165.html',
-                'https://errata.rockylinux.org/RLSA-2023:0946',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=63bcf189be73a9cc1264059bed6f57974be74a83',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=bbcf509bd046b34cca19c766bbddc31683d0858b',
-                'https://linux.oracle.com/cve/CVE-2022-4450.html',
-                'https://linux.oracle.com/errata/ELSA-2023-32791.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2022-4450',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0003',
-                'https://rustsec.org/advisories/RUSTSEC-2023-0010.html',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://ubuntu.com/security/notices/USN-5844-1',
-                'https://ubuntu.com/security/notices/USN-6564-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2022-4450',
-                'https://www.openssl.org/news/secadv/20230207.txt'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: double free after calling PEM_read_bio_ex'
-            },
-            {
-              'cve':  'CVE-2023-0215',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'nvd': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   'The public API function BIO_new_NDEF is a helper function used for streaming\nASN.1 data via a BIO. It is primarily used internally to OpenSSL to support the\nSMIME, CMS and PKCS7 streaming capabilities, but may also be called directly by\nend user applications.\n\nThe function receives a BIO from the caller, prepends a new BIO_f_asn1 filter\nBIO onto the front of it to form a BIO chain, and then returns the new head of\nthe BIO chain to the caller. Under certain conditions, for example if a CMS\nrecipient public key is invalid, the new filter BIO is freed and the function\nreturns a NULL result indicating a failure. However, in this case, the BIO chain\nis not properly cleaned up and the BIO passed by the caller still retains\ninternal pointers to the previously freed filter BIO. If the caller then goes on\nto call BIO_pop() on the BIO then a use-after-free will occur. This will most\nlikely result in a crash.\n\n\n\nThis scenario occurs directly in the internal function B64_write_ASN1() which\nmay cause BIO_new_NDEF() to be called and will subsequently call BIO_pop() on\nthe BIO. This internal function is in turn called by the public API functions\nPEM_write_bio_ASN1_stream, PEM_write_bio_CMS_stream, PEM_write_bio_PKCS7_stream,\nSMIME_write_ASN1, SMIME_write_CMS and SMIME_write_PKCS7.\n\nOther public API functions that may be impacted by this include\ni2d_ASN1_bio_stream, BIO_new_CMS, BIO_new_PKCS7, i2d_CMS_bio_stream and\ni2d_PKCS7_bio_stream.\n\nThe OpenSSL cms and smime command line applications are similarly affected.',
-              'diffID':        'sha256:1a058d5342cc722ad5439cacae4b2b4eedde51d8fe8800fcf28444302355c16d',
-              'fixedVersions': [
-                '1.1.1t-r0'
-              ],
-              'installedVersion': '1.1.1l-r0',
-              'packageName':      'libssl1.1',
-              'purl':             'pkg:apk/alpine/libssl1.1@1.1.1l-r0?arch=x86_64&distro=3.14.3',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2023:2165',
-                'https://access.redhat.com/security/cve/CVE-2023-0215',
-                'https://bugzilla.redhat.com/1960321',
-                'https://bugzilla.redhat.com/2164440',
-                'https://bugzilla.redhat.com/2164487',
-                'https://bugzilla.redhat.com/2164492',
-                'https://bugzilla.redhat.com/2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144000',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144003',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144006',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144008',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144010',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144012',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144015',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144017',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144019',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2145170',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2158412',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164440',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164487',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164488',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164492',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164497',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164499',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164500',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4203',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4304',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4450',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0215',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0216',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0217',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0286',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0401',
-                'https://errata.almalinux.org/9/ALSA-2023-2165.html',
-                'https://errata.rockylinux.org/RLSA-2023:0946',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=8818064ce3c3c0f1b740a5aaba2a987e75bfbafd',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=9816136fe31d92ace4037d5da5257f763aeeb4eb',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=c3829dd8825c654652201e16f8a0a0c46ee3f344',
-                'https://linux.oracle.com/cve/CVE-2023-0215.html',
-                'https://linux.oracle.com/errata/ELSA-2023-32791.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-0215',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0003',
-                'https://rustsec.org/advisories/RUSTSEC-2023-0009.html',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://security.netapp.com/advisory/ntap-20230427-0007',
-                'https://security.netapp.com/advisory/ntap-20230427-0007/',
-                'https://security.netapp.com/advisory/ntap-20230427-0009',
-                'https://security.netapp.com/advisory/ntap-20230427-0009/',
-                'https://security.netapp.com/advisory/ntap-20240621-0006',
-                'https://security.netapp.com/advisory/ntap-20240621-0006/',
-                'https://ubuntu.com/security/notices/USN-5844-1',
-                'https://ubuntu.com/security/notices/USN-5845-1',
-                'https://ubuntu.com/security/notices/USN-5845-2',
-                'https://ubuntu.com/security/notices/USN-6564-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-0215',
-                'https://www.openssl.org/news/secadv/20230207.txt'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: use-after-free following BIO_new_NDEF'
-            },
-            {
-              'cve':  'CVE-2023-0286',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '7.4',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H'
-                },
-                'nvd': {
-                  'v3score':  '7.4',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.4',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-843'
-              ],
-              'description':   'There is a type confusion vulnerability relating to X.400 address processing\ninside an X.509 GeneralName. X.400 addresses were parsed as an ASN1_STRING but\nthe public structure definition for GENERAL_NAME incorrectly specified the type\nof the x400Address field as ASN1_TYPE. This field is subsequently interpreted by\nthe OpenSSL function GENERAL_NAME_cmp as an ASN1_TYPE rather than an\nASN1_STRING.\n\nWhen CRL checking is enabled (i.e. the application sets the\nX509_V_FLAG_CRL_CHECK flag), this vulnerability may allow an attacker to pass\narbitrary pointers to a memcmp call, enabling them to read memory contents or\nenact a denial of service. In most cases, the attack requires the attacker to\nprovide both the certificate chain and CRL, neither of which need to have a\nvalid signature. If the attacker only controls one of these inputs, the other\ninput must already contain an X.400 address as a CRL distribution point, which\nis uncommon. As such, this vulnerability is most likely to only affect\napplications which have implemented their own functionality for retrieving CRLs\nover a network.',
-              'diffID':        'sha256:1a058d5342cc722ad5439cacae4b2b4eedde51d8fe8800fcf28444302355c16d',
-              'fixedVersions': [
-                '1.1.1t-r0'
-              ],
-              'installedVersion': '1.1.1l-r0',
-              'packageName':      'libssl1.1',
-              'purl':             'pkg:apk/alpine/libssl1.1@1.1.1l-r0?arch=x86_64&distro=3.14.3',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2025:7937',
-                'https://access.redhat.com/security/cve/CVE-2023-0286',
-                'https://access.redhat.com/security/cve/cve-2023-0286',
-                'https://bugzilla.redhat.com/2164440',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144000',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144003',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144006',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144008',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144010',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144012',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144015',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144017',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144019',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2145170',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2158412',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164440',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164487',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164488',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164492',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164497',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164499',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164500',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4203',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4304',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4450',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0215',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0216',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0217',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0286',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0401',
-                'https://errata.almalinux.org/9/ALSA-2025-7937.html',
-                'https://errata.rockylinux.org/RLSA-2023:0946',
-                'https://ftp.openbsd.org/pub/OpenBSD/LibreSSL/libressl-3.6.2-relnotes.txt',
-                'https://ftp.openbsd.org/pub/OpenBSD/patches/7.2/common/018_x509.patch.sig',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=2c6c9d439b484e1ba9830d8454a34fa4f80fdfe9',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=2f7530077e0ef79d98718138716bc51ca0cad658',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=fd2af07dc083a350c959147097003a14a5e8ac4d',
-                'https://github.com/pyca/cryptography',
-                'https://github.com/pyca/cryptography/security/advisories/GHSA-x4qr-2fvf-3mr5',
-                'https://linux.oracle.com/cve/CVE-2023-0286.html',
-                'https://linux.oracle.com/errata/ELSA-2025-7937.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-0286',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0003',
-                'https://rustsec.org/advisories/RUSTSEC-2023-0006.html',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://ubuntu.com/security/notices/USN-5844-1',
-                'https://ubuntu.com/security/notices/USN-5845-1',
-                'https://ubuntu.com/security/notices/USN-5845-2',
-                'https://ubuntu.com/security/notices/USN-6564-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-0286',
-                'https://www.openssl.org/news/secadv/20230207.txt'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: X.400 address type confusion in X.509 GeneralName'
-            },
-            {
-              'cve':  'CVE-2023-0464',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-295'
-              ],
-              'description':   "A security vulnerability has been identified in all supported versions\n\nof OpenSSL related to the verification of X.509 certificate chains\nthat include policy constraints.  Attackers may be able to exploit this\nvulnerability by creating a malicious certificate chain that triggers\nexponential use of computational resources, leading to a denial-of-service\n(DoS) attack on affected systems.\n\nPolicy processing is disabled by default but can be enabled by passing\nthe `-policy' argument to the command line utilities or by calling the\n`X509_VERIFY_PARAM_set1_policies()' function.",
-              'diffID':        'sha256:1a058d5342cc722ad5439cacae4b2b4eedde51d8fe8800fcf28444302355c16d',
-              'fixedVersions': [
-                '1.1.1t-r1'
-              ],
-              'installedVersion': '1.1.1l-r0',
-              'packageName':      'libssl1.1',
-              'purl':             'pkg:apk/alpine/libssl1.1@1.1.1l-r0?arch=x86_64&distro=3.14.3',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2023:3722',
-                'https://access.redhat.com/security/cve/CVE-2023-0464',
-                'https://bugzilla.redhat.com/2181082',
-                'https://bugzilla.redhat.com/2182561',
-                'https://bugzilla.redhat.com/2182565',
-                'https://bugzilla.redhat.com/2188461',
-                'https://bugzilla.redhat.com/2207947',
-                'https://errata.almalinux.org/9/ALSA-2023-3722.html',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=2017771e2db3e2b96f89bbe8766c3209f6a99545',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=2dcd4f1e3115f38cefa43e3efbe9b801c27e642e',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=879f7080d7e141f415c79eaa3a8ac4a3dad0348b',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=959c59c7a0164117e7f8366466a32bb1f8d77ff1',
-                'https://linux.oracle.com/cve/CVE-2023-0464.html',
-                'https://linux.oracle.com/errata/ELSA-2023-3722.html',
-                'https://lists.debian.org/debian-lts-announce/2023/06/msg00011.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-0464',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://security.netapp.com/advisory/ntap-20230406-0006/',
-                'https://security.netapp.com/advisory/ntap-20240621-0006/',
-                'https://ubuntu.com/security/notices/USN-6039-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.couchbase.com/alerts/',
-                'https://www.cve.org/CVERecord?id=CVE-2023-0464',
-                'https://www.debian.org/security/2023/dsa-5417',
-                'https://www.openssl.org/news/secadv/20230322.txt'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: Denial of service by excessive resource usage in verifying X509 policy constraints'
-            },
-            {
-              'cve':  'CVE-2022-2097',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N'
-                },
-                'nvd': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N'
-                },
-                'redhat': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-327'
-              ],
-              'description':   "AES OCB mode for 32-bit x86 platforms using the AES-NI assembly optimised implementation will not encrypt the entirety of the data under some circumstances. This could reveal sixteen bytes of data that was preexisting in the memory that wasn't written. In the special case of \"in place\" encryption, sixteen bytes of the plaintext would be revealed. Since OpenSSL does not support OCB based cipher suites for TLS and DTLS, they are both unaffected. Fixed in OpenSSL 3.0.5 (Affected 3.0.0-3.0.4). Fixed in OpenSSL 1.1.1q (Affected 1.1.1-1.1.1p).",
-              'diffID':        'sha256:1a058d5342cc722ad5439cacae4b2b4eedde51d8fe8800fcf28444302355c16d',
-              'fixedVersions': [
-                '1.1.1q-r0'
-              ],
-              'installedVersion': '1.1.1l-r0',
-              'packageName':      'libssl1.1',
-              'purl':             'pkg:apk/alpine/libssl1.1@1.1.1l-r0?arch=x86_64&distro=3.14.3',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2022:6224',
-                'https://access.redhat.com/security/cve/CVE-2022-2097',
-                'https://bugzilla.redhat.com/2081494',
-                'https://bugzilla.redhat.com/2087911',
-                'https://bugzilla.redhat.com/2087913',
-                'https://bugzilla.redhat.com/2097310',
-                'https://bugzilla.redhat.com/2104905',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2081494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2097310',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2100554',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2104905',
-                'https://cert-portal.siemens.com/productcert/pdf/ssa-332410.pdf',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-1292',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-2068',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-2097',
-                'https://errata.almalinux.org/9/ALSA-2022-6224.html',
-                'https://errata.rockylinux.org/RLSA-2022:5818',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=919925673d6c9cfed3c1085497f5dfbbed5fc431',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=a98f339ddd7e8f487d6e0088d4a9a42324885a93',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=919925673d6c9cfed3c1085497f5dfbbed5fc431',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=a98f339ddd7e8f487d6e0088d4a9a42324885a93',
-                'https://github.com/alexcrichton/openssl-src-rs',
-                'https://linux.oracle.com/cve/CVE-2022-2097.html',
-                'https://linux.oracle.com/errata/ELSA-2022-9955.html',
-                'https://lists.debian.org/debian-lts-announce/2023/02/msg00019.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/R6CK57NBQFTPUMXAPJURCGXUYT76NQAK',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/R6CK57NBQFTPUMXAPJURCGXUYT76NQAK/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/V6567JERRHHJW2GNGJGKDRNHR7SNPZK7',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/V6567JERRHHJW2GNGJGKDRNHR7SNPZK7/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VCMNWKERPBKOEBNL7CLTTX3ZZCZLH7XA',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VCMNWKERPBKOEBNL7CLTTX3ZZCZLH7XA/',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/R6CK57NBQFTPUMXAPJURCGXUYT76NQAK',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/R6CK57NBQFTPUMXAPJURCGXUYT76NQAK/',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/V6567JERRHHJW2GNGJGKDRNHR7SNPZK7',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/V6567JERRHHJW2GNGJGKDRNHR7SNPZK7/',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/VCMNWKERPBKOEBNL7CLTTX3ZZCZLH7XA',
-                'https://nvd.nist.gov/vuln/detail/CVE-2022-2097',
-                'https://rustsec.org/advisories/RUSTSEC-2022-0032.html',
-                'https://security.gentoo.org/glsa/202210-02',
-                'https://security.netapp.com/advisory/ntap-20220715-0011',
-                'https://security.netapp.com/advisory/ntap-20220715-0011/',
-                'https://security.netapp.com/advisory/ntap-20230420-0008',
-                'https://security.netapp.com/advisory/ntap-20230420-0008/',
-                'https://security.netapp.com/advisory/ntap-20240621-0006',
-                'https://security.netapp.com/advisory/ntap-20240621-0006/',
-                'https://ubuntu.com/security/notices/USN-5502-1',
-                'https://ubuntu.com/security/notices/USN-6457-1',
-                'https://www.cve.org/CVERecord?id=CVE-2022-2097',
-                'https://www.debian.org/security/2023/dsa-5343',
-                'https://www.openssl.org/news/secadv/20220705.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: AES OCB fails to encrypt some bytes'
-            },
-            {
-              'cve':  'CVE-2022-4304',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N'
-                },
-                'nvd': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N'
-                },
-                'redhat': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-203'
-              ],
-              'description':   'A timing based side channel exists in the OpenSSL RSA Decryption implementation\nwhich could be sufficient to recover a plaintext across a network in a\nBleichenbacher style attack. To achieve a successful decryption an attacker\nwould have to be able to send a very large number of trial messages for\ndecryption. The vulnerability affects all RSA padding modes: PKCS#1 v1.5,\nRSA-OEAP and RSASVE.\n\nFor example, in a TLS connection, RSA is commonly used by a client to send an\nencrypted pre-master secret to the server. An attacker that had observed a\ngenuine connection between a client and a server could use this flaw to send\ntrial messages to the server and record the time taken to process them. After a\nsufficiently large number of messages the attacker could recover the pre-master\nsecret used for the original connection and thus be able to decrypt the\napplication data sent over that connection.',
-              'diffID':        'sha256:1a058d5342cc722ad5439cacae4b2b4eedde51d8fe8800fcf28444302355c16d',
-              'fixedVersions': [
-                '1.1.1t-r0'
-              ],
-              'installedVersion': '1.1.1l-r0',
-              'packageName':      'libssl1.1',
-              'purl':             'pkg:apk/alpine/libssl1.1@1.1.1l-r0?arch=x86_64&distro=3.14.3',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2023:2165',
-                'https://access.redhat.com/security/cve/CVE-2022-4304',
-                'https://bugzilla.redhat.com/1960321',
-                'https://bugzilla.redhat.com/2164440',
-                'https://bugzilla.redhat.com/2164487',
-                'https://bugzilla.redhat.com/2164492',
-                'https://bugzilla.redhat.com/2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144000',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144003',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144006',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144008',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144010',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144012',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144015',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144017',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144019',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2145170',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2158412',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164440',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164487',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164488',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164492',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164497',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164499',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164500',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4203',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4304',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4450',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0215',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0216',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0217',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0286',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0401',
-                'https://errata.almalinux.org/9/ALSA-2023-2165.html',
-                'https://errata.rockylinux.org/RLSA-2023:0946',
-                'https://linux.oracle.com/cve/CVE-2022-4304.html',
-                'https://linux.oracle.com/errata/ELSA-2023-32791.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2022-4304',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0003',
-                'https://rustsec.org/advisories/RUSTSEC-2023-0007.html',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://ubuntu.com/security/notices/USN-5844-1',
-                'https://ubuntu.com/security/notices/USN-6564-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2022-4304',
-                'https://www.openssl.org/news/secadv/20230207.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: timing attack in RSA Decryption implementation'
-            },
-            {
-              'cve':  'CVE-2023-0465',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N'
-                },
-                'redhat': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-295'
-              ],
-              'description':   "Applications that use a non-default option when verifying certificates may be\nvulnerable to an attack from a malicious CA to circumvent certain checks.\n\nInvalid certificate policies in leaf certificates are silently ignored by\nOpenSSL and other certificate policy checks are skipped for that certificate.\nA malicious CA could use this to deliberately assert invalid certificate policies\nin order to circumvent policy checking on the certificate altogether.\n\nPolicy processing is disabled by default but can be enabled by passing\nthe `-policy' argument to the command line utilities or by calling the\n`X509_VERIFY_PARAM_set1_policies()' function.",
-              'diffID':        'sha256:1a058d5342cc722ad5439cacae4b2b4eedde51d8fe8800fcf28444302355c16d',
-              'fixedVersions': [
-                '1.1.1t-r2'
-              ],
-              'installedVersion': '1.1.1l-r0',
-              'packageName':      'libssl1.1',
-              'purl':             'pkg:apk/alpine/libssl1.1@1.1.1l-r0?arch=x86_64&distro=3.14.3',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2023:3722',
-                'https://access.redhat.com/security/cve/CVE-2023-0465',
-                'https://bugzilla.redhat.com/2181082',
-                'https://bugzilla.redhat.com/2182561',
-                'https://bugzilla.redhat.com/2182565',
-                'https://bugzilla.redhat.com/2188461',
-                'https://bugzilla.redhat.com/2207947',
-                'https://errata.almalinux.org/9/ALSA-2023-3722.html',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=10325176f3d3e98c6e2b3bf5ab1e3b334de6947a',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=1dd43e0709fece299b15208f36cc7c76209ba0bb',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=b013765abfa80036dc779dd0e50602c57bb3bf95',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=facfb1ab745646e97a1920977ae4a9965ea61d5c',
-                'https://linux.oracle.com/cve/CVE-2023-0465.html',
-                'https://linux.oracle.com/errata/ELSA-2023-3722.html',
-                'https://lists.debian.org/debian-lts-announce/2023/06/msg00011.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-0465',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://security.netapp.com/advisory/ntap-20230414-0001/',
-                'https://ubuntu.com/security/notices/USN-6039-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-0465',
-                'https://www.debian.org/security/2023/dsa-5417',
-                'https://www.openssl.org/news/secadv/20230328.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: Invalid certificate policies in leaf certificates are silently ignored'
-            },
-            {
-              'cve':  'CVE-2022-28391',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '8.8',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-88'
-              ],
-              'description':   "BusyBox through 1.35.0 allows remote attackers to execute arbitrary code if netstat is used to print a DNS PTR record's value to a VT compatible terminal. Alternatively, the attacker could choose to change the terminal's colors.",
-              'diffID':        'sha256:1a058d5342cc722ad5439cacae4b2b4eedde51d8fe8800fcf28444302355c16d',
-              'fixedVersions': [
-                '1.33.1-r7'
-              ],
-              'installedVersion': '1.33.1-r6',
-              'packageName':      'ssl_client',
-              'purl':             'pkg:apk/alpine/ssl_client@1.33.1-r6?arch=x86_64&distro=3.14.3',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2022-28391',
-                'https://git.alpinelinux.org/aports/plain/main/busybox/0001-libbb-sockaddr2str-ensure-only-printable-characters-.patch',
-                'https://git.alpinelinux.org/aports/plain/main/busybox/0002-nslookup-sanitize-all-printed-strings-with-printable.patch',
-                'https://gitlab.alpinelinux.org/alpine/aports/-/issues/13661',
-                'https://nvd.nist.gov/vuln/detail/CVE-2022-28391',
-                'https://www.cve.org/CVERecord?id=CVE-2022-28391'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: remote attackers may execute arbitrary code if netstat is used'
-            },
-            {
-              'cve':  'CVE-2022-37434',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '9.8',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-787',
-                'CWE-120'
-              ],
-              'description':   'zlib through 1.2.12 has a heap-based buffer over-read or buffer overflow in inflate in inflate.c via a large gzip header extra field. NOTE: only applications that call inflateGetHeader are affected. Some common applications bundle the affected zlib source code but may be unable to call inflateGetHeader (e.g., see the nodejs/node reference).',
-              'diffID':        'sha256:1a058d5342cc722ad5439cacae4b2b4eedde51d8fe8800fcf28444302355c16d',
-              'fixedVersions': [
-                '1.2.12-r2'
-              ],
-              'installedVersion': '1.2.11-r3',
-              'packageName':      'zlib',
-              'purl':             'pkg:apk/alpine/zlib@1.2.11-r3?arch=x86_64&distro=3.14.3',
-              'references':       [
-                'http://seclists.org/fulldisclosure/2022/Oct/37',
-                'http://seclists.org/fulldisclosure/2022/Oct/38',
-                'http://seclists.org/fulldisclosure/2022/Oct/41',
-                'http://seclists.org/fulldisclosure/2022/Oct/42',
-                'http://www.openwall.com/lists/oss-security/2022/08/05/2',
-                'http://www.openwall.com/lists/oss-security/2022/08/09/1',
-                'https://access.redhat.com/errata/RHSA-2022:8291',
-                'https://access.redhat.com/security/cve/CVE-2022-37434',
-                'https://bugzilla.redhat.com/2116639',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2053198',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2077431',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2081296',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2116639',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-37434',
-                'https://errata.almalinux.org/9/ALSA-2022-8291.html',
-                'https://errata.rockylinux.org/RLSA-2022:8291',
-                'https://github.com/curl/curl/issues/9271',
-                'https://github.com/ivd38/zlib_overflow',
-                'https://github.com/madler/zlib/blob/21767c654d31d2dccdde4330529775c6c5fd5389/zlib.h#L1062-L1063',
-                'https://github.com/madler/zlib/commit/1eb7682f845ac9e9bf9ae35bbfb3bad5dacbd91d',
-                'https://github.com/madler/zlib/commit/eff308af425b67093bab25f80f1ae950166bece1',
-                'https://github.com/nodejs/node/blob/75b68c6e4db515f76df73af476eccf382bbcb00a/deps/zlib/inflate.c#L762-L764',
-                'https://linux.oracle.com/cve/CVE-2022-37434.html',
-                'https://linux.oracle.com/errata/ELSA-2023-1095.html',
-                'https://lists.debian.org/debian-lts-announce/2022/09/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JWN4VE3JQR4O2SOUS5TXNLANRPMHWV4I/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NMBOJ77A7T7PQCARMDUK75TE6LLESZ3O/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PAVPQNCG3XRLCLNSQRM3KAN5ZFMVXVTY/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/X5U7OTKZSHY2I3ZFJSR2SHFHW72RKGDK/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YRQAI7H4M4RQZ2IWZUEEXECBE5D56BH2/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2022-37434',
-                'https://security.netapp.com/advisory/ntap-20220901-0005/',
-                'https://security.netapp.com/advisory/ntap-20230427-0007/',
-                'https://support.apple.com/kb/HT213488',
-                'https://support.apple.com/kb/HT213489',
-                'https://support.apple.com/kb/HT213490',
-                'https://support.apple.com/kb/HT213491',
-                'https://support.apple.com/kb/HT213493',
-                'https://support.apple.com/kb/HT213494',
-                'https://ubuntu.com/security/notices/USN-5570-1',
-                'https://ubuntu.com/security/notices/USN-5570-2',
-                'https://ubuntu.com/security/notices/USN-5573-1',
-                'https://ubuntu.com/security/notices/USN-6736-1',
-                'https://ubuntu.com/security/notices/USN-6736-2',
-                'https://www.cve.org/CVERecord?id=CVE-2022-37434',
-                'https://www.debian.org/security/2022/dsa-5218'
-              ],
-              'severity':   'CRITICAL',
-              'suppressed': false,
-              'title':      'zlib: heap-based buffer over-read and overflow in inflate() in inflate.c via a large gzip header extra field'
-            },
-            {
-              'cve':  'CVE-2018-25032',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'nvd': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '8.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-787'
-              ],
-              'description':   'zlib before 1.2.12 allows memory corruption when deflating (i.e., when compressing) if the input has many distant matches.',
-              'diffID':        'sha256:1a058d5342cc722ad5439cacae4b2b4eedde51d8fe8800fcf28444302355c16d',
-              'fixedVersions': [
-                '1.2.12-r0'
-              ],
-              'installedVersion': '1.2.11-r3',
-              'packageName':      'zlib',
-              'purl':             'pkg:apk/alpine/zlib@1.2.11-r3?arch=x86_64&distro=3.14.3',
-              'references':       [
-                'http://seclists.org/fulldisclosure/2022/May/33',
-                'http://seclists.org/fulldisclosure/2022/May/35',
-                'http://seclists.org/fulldisclosure/2022/May/38',
-                'http://www.openwall.com/lists/oss-security/2022/03/25/2',
-                'http://www.openwall.com/lists/oss-security/2022/03/26/1',
-                'https://access.redhat.com/errata/RHSA-2022:8420',
-                'https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-25032.json',
-                'https://access.redhat.com/security/cve/CVE-2018-25032',
-                'https://bugzilla.redhat.com/2067945',
-                'https://cert-portal.siemens.com/productcert/pdf/ssa-333517.pdf',
-                'https://errata.almalinux.org/9/ALSA-2022-8420.html',
-                'https://github.com/advisories/GHSA-jc36-42cf-vqwj',
-                'https://github.com/madler/zlib/commit/5c44459c3b28a9bd3283aaceab7c615f8020c531',
-                'https://github.com/madler/zlib/compare/v1.2.11...v1.2.12',
-                'https://github.com/madler/zlib/issues/605',
-                'https://github.com/rubysec/ruby-advisory-db/blob/master/gems/nokogiri/CVE-2018-25032.yml',
-                'https://github.com/sparklemotion/nokogiri/releases/tag/v1.13.4',
-                'https://github.com/sparklemotion/nokogiri/security/advisories/GHSA-v6gp-9mmm-c6p5',
-                'https://groups.google.com/g/ruby-security-ann/c/vX7qSjsvWis/m/TJWN4oOKBwAJ',
-                'https://linux.oracle.com/cve/CVE-2018-25032.html',
-                'https://linux.oracle.com/errata/ELSA-2022-9565.html',
-                'https://lists.debian.org/debian-lts-announce/2022/04/msg00000.html',
-                'https://lists.debian.org/debian-lts-announce/2022/05/msg00008.html',
-                'https://lists.debian.org/debian-lts-announce/2022/09/msg00023.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DCZFIJBJTZ7CL5QXBFKTQ22Q26VINRUF/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DF62MVMH3QUGMBDCB3DY2ERQ6EBHTADB/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JZZPTWRYQULAOL3AW7RZJNVZ2UONXCV4/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NS2D2GFPFGOJUL4WQ3DUAY7HF4VWQ77F/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VOKNP2L734AEL47NRYGVZIKEFOUBQY5Y/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/XOKFMSNQ5D5WGMALBNBXU3GE442V74WU/',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/DCZFIJBJTZ7CL5QXBFKTQ22Q26VINRUF',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/DCZFIJBJTZ7CL5QXBFKTQ22Q26VINRUF/',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/DF62MVMH3QUGMBDCB3DY2ERQ6EBHTADB',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/DF62MVMH3QUGMBDCB3DY2ERQ6EBHTADB/',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/JZZPTWRYQULAOL3AW7RZJNVZ2UONXCV4',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/JZZPTWRYQULAOL3AW7RZJNVZ2UONXCV4/',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/NS2D2GFPFGOJUL4WQ3DUAY7HF4VWQ77F',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/NS2D2GFPFGOJUL4WQ3DUAY7HF4VWQ77F/',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/VOKNP2L734AEL47NRYGVZIKEFOUBQY5Y',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/VOKNP2L734AEL47NRYGVZIKEFOUBQY5Y/',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/XOKFMSNQ5D5WGMALBNBXU3GE442V74WU',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/XOKFMSNQ5D5WGMALBNBXU3GE442V74WU/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2018-25032',
-                'https://security.gentoo.org/glsa/202210-42',
-                'https://security.netapp.com/advisory/ntap-20220526-0009',
-                'https://security.netapp.com/advisory/ntap-20220526-0009/',
-                'https://security.netapp.com/advisory/ntap-20220729-0004',
-                'https://security.netapp.com/advisory/ntap-20220729-0004/',
-                'https://support.apple.com/kb/HT213255',
-                'https://support.apple.com/kb/HT213256',
-                'https://support.apple.com/kb/HT213257',
-                'https://ubuntu.com/security/notices/USN-5355-1',
-                'https://ubuntu.com/security/notices/USN-5355-2',
-                'https://ubuntu.com/security/notices/USN-5359-1',
-                'https://ubuntu.com/security/notices/USN-5359-2',
-                'https://ubuntu.com/security/notices/USN-5739-1',
-                'https://ubuntu.com/security/notices/USN-6736-1',
-                'https://ubuntu.com/security/notices/USN-6736-2',
-                'https://www.cve.org/CVERecord?id=CVE-2018-25032',
-                'https://www.debian.org/security/2022/dsa-5111',
-                'https://www.openwall.com/lists/oss-security/2022/03/24/1',
-                'https://www.openwall.com/lists/oss-security/2022/03/28/1',
-                'https://www.openwall.com/lists/oss-security/2022/03/28/3',
-                'https://www.oracle.com/security-alerts/cpujul2022.html'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'zlib: A flaw found in zlib when compressing (not decompressing) certain inputs'
-            }
-          ]
-        }
-      ],
-      'summary': {
-        'critical':   1,
-        'high':       14,
-        'low':        0,
-        'medium':     6,
-        'suppressed': 0,
-        'unknown':    0
-      }
-    }
-  },
-  {
-    'id':    'default/92c38bd7501cc86ada2a0d3fc9812f312fec23b04b497e47c10aae307d52bb2a',
-    'type':  'storage.sbomscanner.kubewarden.io.vulnerabilityreport',
-    'links': {
-      'patch':  'https://localhost:8005/v1/storage.sbomscanner.kubewarden.io.vulnerabilityreports/default/92c38bd7501cc86ada2a0d3fc9812f312fec23b04b497e47c10aae307d52bb2a',
-      'remove': 'https://localhost:8005/v1/storage.sbomscanner.kubewarden.io.vulnerabilityreports/default/92c38bd7501cc86ada2a0d3fc9812f312fec23b04b497e47c10aae307d52bb2a',
-      'self':   'https://localhost:8005/v1/storage.sbomscanner.kubewarden.io.vulnerabilityreports/default/92c38bd7501cc86ada2a0d3fc9812f312fec23b04b497e47c10aae307d52bb2a',
-      'update': 'https://localhost:8005/v1/storage.sbomscanner.kubewarden.io.vulnerabilityreports/default/92c38bd7501cc86ada2a0d3fc9812f312fec23b04b497e47c10aae307d52bb2a',
-      'view':   'https://localhost:8005/apis/storage.sbomscanner.kubewarden.io/v1alpha1/namespaces/default/vulnerabilityreports/92c38bd7501cc86ada2a0d3fc9812f312fec23b04b497e47c10aae307d52bb2a'
-    },
-    'apiVersion':    'storage.sbomscanner.kubewarden.io/v1alpha1',
-    'imageMetadata': {
-      'digest':      'sha256:1827be57ca85c28287d18349bbfdb3870419692656cb67c4cd0f5042f0f63aec',
-      'platform':    'linux/arm64/v8',
-      'registry':    'lsong-demo1',
-      'registryURI': 'registry-1.docker.io',
-      'repository':  'library/alpine',
-      'tag':         '3.10.3'
-    },
-    'kind':     'VulnerabilityReport',
-    'metadata': {
-      'creationTimestamp': '2026-01-14T18:51:30Z',
-      'fields':            [
-        '92c38bd7501cc86ada2a0d3fc9812f312fec23b04b497e47c10aae307d52bb2a',
-        'registry-1.docker.io/library/alpine:3.10.3',
-        'linux/arm64/v8',
-        '22 (0 suppressed)'
-      ],
-      'labels': {
-        'app.kubernetes.io/managed-by':          'sbomscanner',
-        'app.kubernetes.io/part-of':             'sbomscanner',
-        'sbomscanner.kubewarden.io/scanjob-uid': '445c600a-c4b6-40b3-bd71-f2d2140a37d5'
-      },
-      'name':            '92c38bd7501cc86ada2a0d3fc9812f312fec23b04b497e47c10aae307d52bb2a',
-      'namespace':       'default',
-      'ownerReferences': [
-        {
-          'apiVersion':         'storage.sbomscanner.kubewarden.io/v1alpha1',
-          'blockOwnerDeletion': true,
-          'controller':         true,
-          'kind':               'SBOM',
-          'name':               '92c38bd7501cc86ada2a0d3fc9812f312fec23b04b497e47c10aae307d52bb2a',
-          'uid':                'acc72724-1239-4bad-b703-9dec316200e8'
-        }
-      ],
-      'relationships': [
-        {
-          'fromId':   'default/92c38bd7501cc86ada2a0d3fc9812f312fec23b04b497e47c10aae307d52bb2a',
-          'fromType': 'storage.sbomscanner.kubewarden.io.sbom',
-          'rel':      'owner',
-          'state':    'active',
-          'message':  'Resource is current'
-        }
-      ],
-      'resourceVersion': '1',
-      'state':           {
-        'error':         false,
-        'message':       'Resource is current',
-        'name':          'active',
-        'transitioning': false
-      },
-      'uid': '4fdc65ea-036b-4052-88e3-24f35c194d9d'
-    },
-    'report': {
-      'results': [
-        {
-          'class':           'os-pkgs',
-          'target':          '/var/run/worker/trivy.sbom.2736598839.json (alpine 3.10.3)',
-          'type':            'alpine',
-          'vulnerabilities': [
-            {
-              'cve':  'CVE-2021-36159',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '9.1',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '9.1',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-125'
-              ],
-              'description':   "libfetch before 2021-07-26, as used in apk-tools, xbps, and other products, mishandles numeric strings for the FTP and HTTP protocols. The FTP passive mode implementation allows an out-of-bounds read because strtol is used to parse the relevant numbers into address bytes. It does not check if the line ends prematurely. If it does, the for-loop condition checks for the '\\0' terminator one byte too late.",
-              'diffID':        'sha256:98713a20507f1aad3aa66c7dbad7b0ff777101087c0b6bea75f01b639bb09e2f',
-              'fixedVersions': [
-                '2.10.7-r0'
-              ],
-              'installedVersion': '2.10.4-r2',
-              'packageName':      'apk-tools',
-              'purl':             'pkg:apk/alpine/apk-tools@2.10.4-r2?arch=aarch64&distro=3.10.3',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-36159',
-                'https://github.com/freebsd/freebsd-src/commits/main/lib/libfetch',
-                'https://gitlab.alpinelinux.org/alpine/apk-tools/-/issues/10749',
-                'https://lists.apache.org/thread.html/r61db8e7dcb56dc000a5387a88f7a473bacec5ee01b9ff3f55308aacc%40%3Cdev.kafka.apache.org%3E',
-                'https://lists.apache.org/thread.html/r61db8e7dcb56dc000a5387a88f7a473bacec5ee01b9ff3f55308aacc%40%3Cusers.kafka.apache.org%3E',
-                'https://lists.apache.org/thread.html/rbf4ce74b0d1fa9810dec50ba3ace0caeea677af7c27a97111c06ccb7%40%3Cdev.kafka.apache.org%3E',
-                'https://lists.apache.org/thread.html/rbf4ce74b0d1fa9810dec50ba3ace0caeea677af7c27a97111c06ccb7%40%3Cusers.kafka.apache.org%3E',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-36159',
-                'https://www.cve.org/CVERecord?id=CVE-2021-36159'
-              ],
-              'severity':   'CRITICAL',
-              'suppressed': false,
-              'title':      'libfetch: an out of boundary read while libfetch uses strtol to parse the relevant numbers into address bytes leads to information leak or crash'
-            },
-            {
-              'cve':  'CVE-2021-30139',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-125'
-              ],
-              'description':   'In Alpine Linux apk-tools before 2.12.5, the tarball parser allows a buffer overflow and crash.',
-              'diffID':        'sha256:98713a20507f1aad3aa66c7dbad7b0ff777101087c0b6bea75f01b639bb09e2f',
-              'fixedVersions': [
-                '2.10.6-r0'
-              ],
-              'installedVersion': '2.10.4-r2',
-              'packageName':      'apk-tools',
-              'purl':             'pkg:apk/alpine/apk-tools@2.10.4-r2?arch=aarch64&distro=3.10.3',
-              'references':       [
-                'https://gitlab.alpinelinux.org/alpine/apk-tools/-/issues/10741',
-                'https://gitlab.alpinelinux.org/alpine/aports/-/issues/12606'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false
-            },
-            {
-              'cve':  'CVE-2021-28831',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-755'
-              ],
-              'description':   'decompress_gunzip.c in BusyBox through 1.32.1 mishandles the error bit on the huft_build result pointer, with a resultant invalid free or segmentation fault, via malformed gzip data.',
-              'diffID':        'sha256:98713a20507f1aad3aa66c7dbad7b0ff777101087c0b6bea75f01b639bb09e2f',
-              'fixedVersions': [
-                '1.30.1-r5'
-              ],
-              'installedVersion': '1.30.1-r2',
-              'packageName':      'busybox',
-              'purl':             'pkg:apk/alpine/busybox@1.30.1-r2?arch=aarch64&distro=3.10.3',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-28831',
-                'https://git.busybox.net/busybox/commit/?id=f25d254dfd4243698c31a4f3153d4ac72aa9e9bd',
-                'https://lists.debian.org/debian-lts-announce/2021/04/msg00001.html',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/3UDQGJRECXFS5EZVDH2OI45FMO436AC4/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/Z7ZIFKPRR32ZYA3WAA2NXFA3QHHOU6FJ/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZASBW7QRRLY5V2R44MQ4QQM4CZIDHM2U/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-28831',
-                'https://security.gentoo.org/glsa/202105-09',
-                'https://security.netapp.com/advisory/ntap-20250509-0005/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://ubuntu.com/security/notices/USN-5179-2',
-                'https://ubuntu.com/security/notices/USN-6335-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-28831'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: invalid free or segmentation fault via malformed gzip data'
-            },
-            {
-              'cve':  'CVE-2020-1967',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'nvd': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-476'
-              ],
-              'description':   'Server or client applications that call the SSL_check_chain() function during or after a TLS 1.3 handshake may crash due to a NULL pointer dereference as a result of incorrect handling of the "signature_algorithms_cert" TLS extension. The crash occurs if an invalid or unrecognised signature algorithm is received from the peer. This could be exploited by a malicious peer in a Denial of Service attack. OpenSSL version 1.1.1d, 1.1.1e, and 1.1.1f are affected by this issue. This issue did not affect OpenSSL versions prior to 1.1.1d. Fixed in OpenSSL 1.1.1g (Affected 1.1.1d-1.1.1f).',
-              'diffID':        'sha256:98713a20507f1aad3aa66c7dbad7b0ff777101087c0b6bea75f01b639bb09e2f',
-              'fixedVersions': [
-                '1.1.1g-r0'
-              ],
-              'installedVersion': '1.1.1d-r0',
-              'packageName':      'libcrypto1.1',
-              'purl':             'pkg:apk/alpine/libcrypto1.1@1.1.1d-r0?arch=aarch64&distro=3.10.3',
-              'references':       [
-                'http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00004.html',
-                'http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00011.html',
-                'http://packetstormsecurity.com/files/157527/OpenSSL-signature_algorithms_cert-Denial-Of-Service.html',
-                'http://seclists.org/fulldisclosure/2020/May/5',
-                'http://www.openwall.com/lists/oss-security/2020/04/22/2',
-                'https://access.redhat.com/security/cve/CVE-2020-1967',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=eb563247aef3e83dda7679c43f9649270462e5b1',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=eb563247aef3e83dda7679c43f9649270462e5b1',
-                'https://github.com/irsl/CVE-2020-1967',
-                'https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA44440',
-                'https://lists.apache.org/thread.html/r66ea9c436da150683432db5fbc8beb8ae01886c6459ac30c2cea7345%40%3Cdev.tomcat.apache.org%3E',
-                'https://lists.apache.org/thread.html/r66ea9c436da150683432db5fbc8beb8ae01886c6459ac30c2cea7345@%3Cdev.tomcat.apache.org%3E',
-                'https://lists.apache.org/thread.html/r94d6ac3f010a38fccf4f432b12180a13fa1cf303559bd805648c9064%40%3Cdev.tomcat.apache.org%3E',
-                'https://lists.apache.org/thread.html/r94d6ac3f010a38fccf4f432b12180a13fa1cf303559bd805648c9064@%3Cdev.tomcat.apache.org%3E',
-                'https://lists.apache.org/thread.html/r9a41e304992ce6aec6585a87842b4f2e692604f5c892c37e3b0587ee%40%3Cdev.tomcat.apache.org%3E',
-                'https://lists.apache.org/thread.html/r9a41e304992ce6aec6585a87842b4f2e692604f5c892c37e3b0587ee@%3Cdev.tomcat.apache.org%3E',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DDHOAATPWJCXRNFMJ2SASDBBNU5RJONY/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/EXDDAOWSAIEFQNBHWYE6PPYFV4QXGMCD/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/XVEP3LAK4JSPRXFO4QF4GG2IVXADV3SO/',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/DDHOAATPWJCXRNFMJ2SASDBBNU5RJONY',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/EXDDAOWSAIEFQNBHWYE6PPYFV4QXGMCD',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/XVEP3LAK4JSPRXFO4QF4GG2IVXADV3SO',
-                'https://nvd.nist.gov/vuln/detail/CVE-2020-1967',
-                'https://rustsec.org/advisories/RUSTSEC-2020-0015.html',
-                'https://security.FreeBSD.org/advisories/FreeBSD-SA-20:11.openssl.asc',
-                'https://security.gentoo.org/glsa/202004-10',
-                'https://security.netapp.com/advisory/ntap-20200424-0003',
-                'https://security.netapp.com/advisory/ntap-20200424-0003/',
-                'https://security.netapp.com/advisory/ntap-20200717-0004',
-                'https://security.netapp.com/advisory/ntap-20200717-0004/',
-                'https://www.cve.org/CVERecord?id=CVE-2020-1967',
-                'https://www.debian.org/security/2020/dsa-4661',
-                'https://www.openssl.org/news/secadv/20200421.txt',
-                'https://www.oracle.com//security-alerts/cpujul2021.html',
-                'https://www.oracle.com/security-alerts/cpuApr2021.html',
-                'https://www.oracle.com/security-alerts/cpujan2021.html',
-                'https://www.oracle.com/security-alerts/cpujul2020.html',
-                'https://www.oracle.com/security-alerts/cpuoct2020.html',
-                'https://www.oracle.com/security-alerts/cpuoct2021.html',
-                'https://www.synology.com/security/advisory/Synology_SA_20_05',
-                'https://www.synology.com/security/advisory/Synology_SA_20_05_OpenSSL',
-                'https://www.tenable.com/security/tns-2020-03',
-                'https://www.tenable.com/security/tns-2020-04',
-                'https://www.tenable.com/security/tns-2020-11',
-                'https://www.tenable.com/security/tns-2021-10'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: Segmentation fault in SSL_check_chain causes denial of service'
-            },
-            {
-              'cve':  'CVE-2021-23840',
-              'cvss': {
-                'bitnami': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'ghsa': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'nvd': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-190'
-              ],
-              'description':   'Calls to EVP_CipherUpdate, EVP_EncryptUpdate and EVP_DecryptUpdate may overflow the output length argument in some cases where the input length is close to the maximum permissable length for an integer on the platform. In such cases the return value from the function call will be 1 (indicating success), but the output length value will be negative. This could cause applications to behave incorrectly or crash. OpenSSL versions 1.1.1i and below are affected by this issue. Users of these versions should upgrade to OpenSSL 1.1.1j. OpenSSL versions 1.0.2x and below are affected by this issue. However OpenSSL 1.0.2 is out of support and no longer receiving public updates. Premium support customers of OpenSSL 1.0.2 should upgrade to 1.0.2y. Other users should upgrade to 1.1.1j. Fixed in OpenSSL 1.1.1j (Affected 1.1.1-1.1.1i). Fixed in OpenSSL 1.0.2y (Affected 1.0.2-1.0.2x).',
-              'diffID':        'sha256:98713a20507f1aad3aa66c7dbad7b0ff777101087c0b6bea75f01b639bb09e2f',
-              'fixedVersions': [
-                '1.1.1j-r0'
-              ],
-              'installedVersion': '1.1.1d-r0',
-              'packageName':      'libcrypto1.1',
-              'purl':             'pkg:apk/alpine/libcrypto1.1@1.1.1d-r0?arch=aarch64&distro=3.10.3',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-23840',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=1908036',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=1930310',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=1930324',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=1934534',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=1934600',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=1939637',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=1940085',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=1965362',
-                'https://cert-portal.siemens.com/productcert/pdf/ssa-389290.pdf',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-23840',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-23841',
-                'https://errata.rockylinux.org/RLSA-2021:4424',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=6a51b9e1d0cf0bf8515f7201b68fb0a3482b3dc1',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=9b1129239f3ebb1d1c98ce9ed41d5c9476c47cb2',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=6a51b9e1d0cf0bf8515f7201b68fb0a3482b3dc1',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=9b1129239f3ebb1d1c98ce9ed41d5c9476c47cb2',
-                'https://github.com/alexcrichton/openssl-src-rs',
-                'https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA44846',
-                'https://kc.mcafee.com/corporate/index?page=content&id=SB10366',
-                'https://linux.oracle.com/cve/CVE-2021-23840.html',
-                'https://linux.oracle.com/errata/ELSA-2021-9561.html',
-                'https://lists.apache.org/thread.html/r58af02e294bd07f487e2c64ffc0a29b837db5600e33b6e698b9d696b%40%3Cissues.bookkeeper.apache.org%3E',
-                'https://lists.apache.org/thread.html/r58af02e294bd07f487e2c64ffc0a29b837db5600e33b6e698b9d696b@%3Cissues.bookkeeper.apache.org%3E',
-                'https://lists.apache.org/thread.html/rf4c02775860db415b4955778a131c2795223f61cb8c6a450893651e4%40%3Cissues.bookkeeper.apache.org%3E',
-                'https://lists.apache.org/thread.html/rf4c02775860db415b4955778a131c2795223f61cb8c6a450893651e4@%3Cissues.bookkeeper.apache.org%3E',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-23840',
-                'https://rustsec.org/advisories/RUSTSEC-2021-0057.html',
-                'https://security.gentoo.org/glsa/202103-03',
-                'https://security.netapp.com/advisory/ntap-20210219-0009',
-                'https://security.netapp.com/advisory/ntap-20210219-0009/',
-                'https://security.netapp.com/advisory/ntap-20240621-0006/',
-                'https://ubuntu.com/security/notices/USN-4738-1',
-                'https://ubuntu.com/security/notices/USN-5088-1',
-                'https://ubuntu.com/security/notices/USN-7018-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-23840',
-                'https://www.debian.org/security/2021/dsa-4855',
-                'https://www.openssl.org/news/secadv/20210216.txt',
-                'https://www.oracle.com//security-alerts/cpujul2021.html',
-                'https://www.oracle.com/security-alerts/cpuApr2021.html',
-                'https://www.oracle.com/security-alerts/cpuapr2022.html',
-                'https://www.oracle.com/security-alerts/cpujan2022.html',
-                'https://www.oracle.com/security-alerts/cpuoct2021.html',
-                'https://www.tenable.com/security/tns-2021-03',
-                'https://www.tenable.com/security/tns-2021-09',
-                'https://www.tenable.com/security/tns-2021-10'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: integer overflow in CipherUpdate'
-            },
-            {
-              'cve':  'CVE-2021-3450',
-              'cvss': {
-                'bitnami': {
-                  'v3score':  '7.4',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N'
-                },
-                'ghsa': {
-                  'v3score':  '7.4',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N'
-                },
-                'nvd': {
-                  'v3score':  '7.4',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N'
-                },
-                'redhat': {
-                  'v3score':  '7.4',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-295'
-              ],
-              'description':   'The X509_V_FLAG_X509_STRICT flag enables additional security checks of the certificates present in a certificate chain. It is not set by default. Starting from OpenSSL version 1.1.1h a check to disallow certificates in the chain that have explicitly encoded elliptic curve parameters was added as an additional strict check. An error in the implementation of this check meant that the result of a previous check to confirm that certificates in the chain are valid CA certificates was overwritten. This effectively bypasses the check that non-CA certificates must not be able to issue other certificates. If a "purpose" has been configured then there is a subsequent opportunity for checks that the certificate is a valid CA. All of the named "purpose" values implemented in libcrypto perform this check. Therefore, where a purpose is set the certificate chain will still be rejected even when the strict flag has been used. A purpose is set by default in libssl client and server certificate verification routines, but it can be overridden or removed by an application. In order to be affected, an application must explicitly set the X509_V_FLAG_X509_STRICT verification flag and either not set a purpose for the certificate verification or, in the case of TLS client or server applications, override the default purpose. OpenSSL versions 1.1.1h and newer are affected by this issue. Users of these versions should upgrade to OpenSSL 1.1.1k. OpenSSL 1.0.2 is not impacted by this issue. Fixed in OpenSSL 1.1.1k (Affected 1.1.1h-1.1.1j).',
-              'diffID':        'sha256:98713a20507f1aad3aa66c7dbad7b0ff777101087c0b6bea75f01b639bb09e2f',
-              'fixedVersions': [
-                '1.1.1k-r0'
-              ],
-              'installedVersion': '1.1.1d-r0',
-              'packageName':      'libcrypto1.1',
-              'purl':             'pkg:apk/alpine/libcrypto1.1@1.1.1d-r0?arch=aarch64&distro=3.10.3',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2021/03/27/1',
-                'http://www.openwall.com/lists/oss-security/2021/03/27/2',
-                'http://www.openwall.com/lists/oss-security/2021/03/28/3',
-                'http://www.openwall.com/lists/oss-security/2021/03/28/4',
-                'https://access.redhat.com/security/cve/CVE-2021-3450',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=1941547',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=1941554',
-                'https://cert-portal.siemens.com/productcert/pdf/ssa-389290.pdf',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-3449',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-3450',
-                'https://errata.rockylinux.org/RLSA-2021:1024',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=2a40b7bc7b94dd7de897a74571e7024f0cf0d63b',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=2a40b7bc7b94dd7de897a74571e7024f0cf0d63b',
-                'https://github.com/alexcrichton/openssl-src-rs',
-                'https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA44845',
-                'https://kc.mcafee.com/corporate/index?page=content&id=SB10356',
-                'https://linux.oracle.com/cve/CVE-2021-3450.html',
-                'https://linux.oracle.com/errata/ELSA-2021-9151.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CCBFLLVQVILIVGZMBJL3IXZGKWQISYNP/',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/CCBFLLVQVILIVGZMBJL3IXZGKWQISYNP',
-                'https://mta.openssl.org/pipermail/openssl-announce/2021-March/000198.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-3450',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2021-0013',
-                'https://rustsec.org/advisories/RUSTSEC-2021-0056.html',
-                'https://security.FreeBSD.org/advisories/FreeBSD-SA-21:07.openssl.asc',
-                'https://security.gentoo.org/glsa/202103-03',
-                'https://security.netapp.com/advisory/ntap-20210326-0006',
-                'https://security.netapp.com/advisory/ntap-20210326-0006/',
-                'https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-openssl-2021-GHY28dJd',
-                'https://www.cve.org/CVERecord?id=CVE-2021-3450',
-                'https://www.openssl.org/news/secadv/20210325.txt',
-                'https://www.oracle.com//security-alerts/cpujul2021.html',
-                'https://www.oracle.com/security-alerts/cpuApr2021.html',
-                'https://www.oracle.com/security-alerts/cpuapr2022.html',
-                'https://www.oracle.com/security-alerts/cpujul2022.html',
-                'https://www.oracle.com/security-alerts/cpuoct2021.html',
-                'https://www.tenable.com/security/tns-2021-05',
-                'https://www.tenable.com/security/tns-2021-08',
-                'https://www.tenable.com/security/tns-2021-09'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: CA certificate check bypass with X509_V_FLAG_X509_STRICT'
-            },
-            {
-              'cve':  'CVE-2019-1551',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N'
-                },
-                'redhat': {
-                  'v3score':  '4.8',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-190'
-              ],
-              'description':   'There is an overflow bug in the x64_64 Montgomery squaring procedure used in exponentiation with 512-bit moduli. No EC algorithms are affected. Analysis suggests that attacks against 2-prime RSA1024, 3-prime RSA1536, and DSA1024 as a result of this defect would be very difficult to perform and are not believed likely. Attacks against DH512 are considered just feasible. However, for an attack the target would have to re-use the DH512 private key, which is not recommended anyway. Also applications directly using the low level API BN_mod_exp may be affected if they use BN_FLG_CONSTTIME. Fixed in OpenSSL 1.1.1e (Affected 1.1.1-1.1.1d). Fixed in OpenSSL 1.0.2u (Affected 1.0.2-1.0.2t).',
-              'diffID':        'sha256:98713a20507f1aad3aa66c7dbad7b0ff777101087c0b6bea75f01b639bb09e2f',
-              'fixedVersions': [
-                '1.1.1d-r2'
-              ],
-              'installedVersion': '1.1.1d-r0',
-              'packageName':      'libcrypto1.1',
-              'purl':             'pkg:apk/alpine/libcrypto1.1@1.1.1d-r0?arch=aarch64&distro=3.10.3',
-              'references':       [
-                'http://lists.opensuse.org/opensuse-security-announce/2020-01/msg00030.html',
-                'http://packetstormsecurity.com/files/155754/Slackware-Security-Advisory-openssl-Updates.html',
-                'https://access.redhat.com/security/cve/CVE-2019-1551',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=419102400a2811582a7a3d4a4e317d72e5ce0a8f',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=f1c5eea8a817075d31e43f5876993c6710238c98',
-                'https://github.com/openssl/openssl/pull/10575',
-                'https://linux.oracle.com/cve/CVE-2019-1551.html',
-                'https://linux.oracle.com/errata/ELSA-2020-4514.html',
-                'https://lists.debian.org/debian-lts-announce/2022/03/msg00023.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DDHOAATPWJCXRNFMJ2SASDBBNU5RJONY/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/EXDDAOWSAIEFQNBHWYE6PPYFV4QXGMCD/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/XVEP3LAK4JSPRXFO4QF4GG2IVXADV3SO/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2019-1551',
-                'https://seclists.org/bugtraq/2019/Dec/39',
-                'https://seclists.org/bugtraq/2019/Dec/46',
-                'https://security.gentoo.org/glsa/202004-10',
-                'https://security.netapp.com/advisory/ntap-20191210-0001/',
-                'https://ubuntu.com/security/notices/USN-4376-1',
-                'https://ubuntu.com/security/notices/USN-4504-1',
-                'https://usn.ubuntu.com/4376-1/',
-                'https://usn.ubuntu.com/4504-1/',
-                'https://www.cve.org/CVERecord?id=CVE-2019-1551',
-                'https://www.debian.org/security/2019/dsa-4594',
-                'https://www.debian.org/security/2021/dsa-4855',
-                'https://www.openssl.org/news/secadv/20191206.txt',
-                'https://www.oracle.com/security-alerts/cpuApr2021.html',
-                'https://www.oracle.com/security-alerts/cpujan2021.html',
-                'https://www.oracle.com/security-alerts/cpujul2020.html',
-                'https://www.tenable.com/security/tns-2019-09',
-                'https://www.tenable.com/security/tns-2020-03',
-                'https://www.tenable.com/security/tns-2020-11',
-                'https://www.tenable.com/security/tns-2021-10'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: Integer overflow in RSAZ modular exponentiation on x86_64'
-            },
-            {
-              'cve':  'CVE-2020-1971',
-              'cvss': {
-                'bitnami': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'nvd': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-476'
-              ],
-              'description':   "The X.509 GeneralName type is a generic type for representing different types of names. One of those name types is known as EDIPartyName. OpenSSL provides a function GENERAL_NAME_cmp which compares different instances of a GENERAL_NAME to see if they are equal or not. This function behaves incorrectly when both GENERAL_NAMEs contain an EDIPARTYNAME. A NULL pointer dereference and a crash may occur leading to a possible denial of service attack. OpenSSL itself uses the GENERAL_NAME_cmp function for two purposes: 1) Comparing CRL distribution point names between an available CRL and a CRL distribution point embedded in an X509 certificate 2) When verifying that a timestamp response token signer matches the timestamp authority name (exposed via the API functions TS_RESP_verify_response and TS_RESP_verify_token) If an attacker can control both items being compared then that attacker could trigger a crash. For example if the attacker can trick a client or server into checking a malicious certificate against a malicious CRL then this may occur. Note that some applications automatically download CRLs based on a URL embedded in a certificate. This checking happens prior to the signatures on the certificate and CRL being verified. OpenSSL's s_server, s_client and verify tools have support for the \"-crl_download\" option which implements automatic CRL downloading and this attack has been demonstrated to work against those tools. Note that an unrelated bug means that affected versions of OpenSSL cannot parse or construct correct encodings of EDIPARTYNAME. However it is possible to construct a malformed EDIPARTYNAME that OpenSSL's parser will accept and hence trigger this attack. All OpenSSL 1.1.1 and 1.0.2 versions are affected by this issue. Other OpenSSL releases are out of support and have not been checked. Fixed in OpenSSL 1.1.1i (Affected 1.1.1-1.1.1h). Fixed in OpenSSL 1.0.2x (Affected 1.0.2-1.0.2w).",
-              'diffID':        'sha256:98713a20507f1aad3aa66c7dbad7b0ff777101087c0b6bea75f01b639bb09e2f',
-              'fixedVersions': [
-                '1.1.1i-r0'
-              ],
-              'installedVersion': '1.1.1d-r0',
-              'packageName':      'libcrypto1.1',
-              'purl':             'pkg:apk/alpine/libcrypto1.1@1.1.1d-r0?arch=aarch64&distro=3.10.3',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2021/09/14/2',
-                'https://access.redhat.com/security/cve/CVE-2020-1971',
-                'https://cert-portal.siemens.com/productcert/pdf/ssa-389290.pdf',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=2154ab83e14ede338d2ede9bbe5cdfce5d5a6c9e',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=f960d81215ebf3f65e03d4d5d857fb9b666d6920',
-                'https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA44676',
-                'https://linux.oracle.com/cve/CVE-2020-1971.html',
-                'https://linux.oracle.com/errata/ELSA-2021-9150.html',
-                'https://lists.apache.org/thread.html/r63c6f2dd363d9b514d0a4bcf624580616a679898cc14c109a49b750c%40%3Cdev.tomcat.apache.org%3E',
-                'https://lists.apache.org/thread.html/rbb769f771711fb274e0a4acb1b5911c8aab544a6ac5e8c12d40c5143%40%3Ccommits.pulsar.apache.org%3E',
-                'https://lists.debian.org/debian-lts-announce/2020/12/msg00020.html',
-                'https://lists.debian.org/debian-lts-announce/2020/12/msg00021.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DGSI34Y5LQ5RYXN4M2I5ZQT65LFVDOUU/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PWPSSZNZOBJU2YR6Z4TGHXKYW3YP5QG7/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2020-1971',
-                'https://security.FreeBSD.org/advisories/FreeBSD-SA-20:33.openssl.asc',
-                'https://security.gentoo.org/glsa/202012-13',
-                'https://security.netapp.com/advisory/ntap-20201218-0005/',
-                'https://security.netapp.com/advisory/ntap-20210513-0002/',
-                'https://security.netapp.com/advisory/ntap-20240621-0006/',
-                'https://ubuntu.com/security/notices/USN-4662-1',
-                'https://ubuntu.com/security/notices/USN-4745-1',
-                'https://www.cve.org/CVERecord?id=CVE-2020-1971',
-                'https://www.debian.org/security/2020/dsa-4807',
-                'https://www.openssl.org/news/secadv/20201208.txt',
-                'https://www.oracle.com//security-alerts/cpujul2021.html',
-                'https://www.oracle.com/security-alerts/cpuApr2021.html',
-                'https://www.oracle.com/security-alerts/cpuapr2022.html',
-                'https://www.oracle.com/security-alerts/cpujan2021.html',
-                'https://www.oracle.com/security-alerts/cpuoct2021.html',
-                'https://www.tenable.com/security/tns-2020-11',
-                'https://www.tenable.com/security/tns-2021-09',
-                'https://www.tenable.com/security/tns-2021-10'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: EDIPARTYNAME NULL pointer de-reference'
-            },
-            {
-              'cve':  'CVE-2021-23841',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'nvd': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-476'
-              ],
-              'description':   'The OpenSSL public API function X509_issuer_and_serial_hash() attempts to create a unique hash value based on the issuer and serial number data contained within an X509 certificate. However it fails to correctly handle any errors that may occur while parsing the issuer field (which might occur if the issuer field is maliciously constructed). This may subsequently result in a NULL pointer deref and a crash leading to a potential denial of service attack. The function X509_issuer_and_serial_hash() is never directly called by OpenSSL itself so applications are only vulnerable if they use this function directly and they use it on certificates that may have been obtained from untrusted sources. OpenSSL versions 1.1.1i and below are affected by this issue. Users of these versions should upgrade to OpenSSL 1.1.1j. OpenSSL versions 1.0.2x and below are affected by this issue. However OpenSSL 1.0.2 is out of support and no longer receiving public updates. Premium support customers of OpenSSL 1.0.2 should upgrade to 1.0.2y. Other users should upgrade to 1.1.1j. Fixed in OpenSSL 1.1.1j (Affected 1.1.1-1.1.1i). Fixed in OpenSSL 1.0.2y (Affected 1.0.2-1.0.2x).',
-              'diffID':        'sha256:98713a20507f1aad3aa66c7dbad7b0ff777101087c0b6bea75f01b639bb09e2f',
-              'fixedVersions': [
-                '1.1.1j-r0'
-              ],
-              'installedVersion': '1.1.1d-r0',
-              'packageName':      'libcrypto1.1',
-              'purl':             'pkg:apk/alpine/libcrypto1.1@1.1.1d-r0?arch=aarch64&distro=3.10.3',
-              'references':       [
-                'http://seclists.org/fulldisclosure/2021/May/67',
-                'http://seclists.org/fulldisclosure/2021/May/68',
-                'http://seclists.org/fulldisclosure/2021/May/70',
-                'https://access.redhat.com/security/cve/CVE-2021-23841',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=1908036',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=1930310',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=1930324',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=1934534',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=1934600',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=1939637',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=1940085',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=1965362',
-                'https://cert-portal.siemens.com/productcert/pdf/ssa-637483.pdf',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-23840',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-23841',
-                'https://errata.rockylinux.org/RLSA-2021:4424',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=122a19ab48091c657f7cb1fb3af9fc07bd557bbf',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=8252ee4d90f3f2004d3d0aeeed003ad49c9a7807',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=122a19ab48091c657f7cb1fb3af9fc07bd557bbf',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=6a51b9e1d0cf0bf8515f7201b68fb0a3482b3dc1',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=8252ee4d90f3f2004d3d0aeeed003ad49c9a7807',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=9b1129239f3ebb1d1c98ce9ed41d5c9476c47cb2',
-                'https://github.com/alexcrichton/openssl-src-rs',
-                'https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA44846',
-                'https://linux.oracle.com/cve/CVE-2021-23841.html',
-                'https://linux.oracle.com/errata/ELSA-2021-9561.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-23841',
-                'https://rustsec.org/advisories/RUSTSEC-2021-0058',
-                'https://rustsec.org/advisories/RUSTSEC-2021-0058.html',
-                'https://security.gentoo.org/glsa/202103-03',
-                'https://security.netapp.com/advisory/ntap-20210219-0009',
-                'https://security.netapp.com/advisory/ntap-20210219-0009/',
-                'https://security.netapp.com/advisory/ntap-20210513-0002',
-                'https://security.netapp.com/advisory/ntap-20210513-0002/',
-                'https://security.netapp.com/advisory/ntap-20240621-0006/',
-                'https://support.apple.com/kb/HT212528',
-                'https://support.apple.com/kb/HT212529',
-                'https://support.apple.com/kb/HT212534',
-                'https://ubuntu.com/security/notices/USN-4738-1',
-                'https://ubuntu.com/security/notices/USN-4745-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-23841',
-                'https://www.debian.org/security/2021/dsa-4855',
-                'https://www.openssl.org/news/secadv/20210216.txt',
-                'https://www.oracle.com//security-alerts/cpujul2021.html',
-                'https://www.oracle.com/security-alerts/cpuApr2021.html',
-                'https://www.oracle.com/security-alerts/cpuapr2022.html',
-                'https://www.oracle.com/security-alerts/cpuoct2021.html',
-                'https://www.tenable.com/security/tns-2021-03',
-                'https://www.tenable.com/security/tns-2021-09'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: NULL pointer dereference in X509_issuer_and_serial_hash()'
-            },
-            {
-              'cve':  'CVE-2021-3449',
-              'cvss': {
-                'bitnami': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'ghsa': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'nvd': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-476'
-              ],
-              'description':   'An OpenSSL TLS server may crash if sent a maliciously crafted renegotiation ClientHello message from a client. If a TLSv1.2 renegotiation ClientHello omits the signature_algorithms extension (where it was present in the initial ClientHello), but includes a signature_algorithms_cert extension then a NULL pointer dereference will result, leading to a crash and a denial of service attack. A server is only vulnerable if it has TLSv1.2 and renegotiation enabled (which is the default configuration). OpenSSL TLS clients are not impacted by this issue. All OpenSSL 1.1.1 versions are affected by this issue. Users of these versions should upgrade to OpenSSL 1.1.1k. OpenSSL 1.0.2 is not impacted by this issue. Fixed in OpenSSL 1.1.1k (Affected 1.1.1-1.1.1j).',
-              'diffID':        'sha256:98713a20507f1aad3aa66c7dbad7b0ff777101087c0b6bea75f01b639bb09e2f',
-              'fixedVersions': [
-                '1.1.1k-r0'
-              ],
-              'installedVersion': '1.1.1d-r0',
-              'packageName':      'libcrypto1.1',
-              'purl':             'pkg:apk/alpine/libcrypto1.1@1.1.1d-r0?arch=aarch64&distro=3.10.3',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2021/03/27/1',
-                'http://www.openwall.com/lists/oss-security/2021/03/27/2',
-                'http://www.openwall.com/lists/oss-security/2021/03/28/3',
-                'http://www.openwall.com/lists/oss-security/2021/03/28/4',
-                'https://access.redhat.com/security/cve/CVE-2021-3449',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=1941547',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=1941554',
-                'https://cert-portal.siemens.com/productcert/pdf/ssa-389290.pdf',
-                'https://cert-portal.siemens.com/productcert/pdf/ssa-772220.pdf',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-3449',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-3450',
-                'https://errata.rockylinux.org/RLSA-2021:1024',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=fb9fa6b51defd48157eeb207f52181f735d96148',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=fb9fa6b51defd48157eeb207f52181f735d96148',
-                'https://github.com/alexcrichton/openssl-src-rs',
-                'https://github.com/nodejs/node/pull/38083',
-                'https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA44845',
-                'https://kc.mcafee.com/corporate/index?page=content&id=SB10356',
-                'https://linux.oracle.com/cve/CVE-2021-3449.html',
-                'https://linux.oracle.com/errata/ELSA-2021-9151.html',
-                'https://lists.debian.org/debian-lts-announce/2021/08/msg00029.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CCBFLLVQVILIVGZMBJL3IXZGKWQISYNP/',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/CCBFLLVQVILIVGZMBJL3IXZGKWQISYNP',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-3449',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2021-0013',
-                'https://rustsec.org/advisories/RUSTSEC-2021-0055',
-                'https://rustsec.org/advisories/RUSTSEC-2021-0055.html',
-                'https://security.FreeBSD.org/advisories/FreeBSD-SA-21:07.openssl.asc',
-                'https://security.gentoo.org/glsa/202103-03',
-                'https://security.netapp.com/advisory/ntap-20210326-0006',
-                'https://security.netapp.com/advisory/ntap-20210326-0006/',
-                'https://security.netapp.com/advisory/ntap-20210513-0002',
-                'https://security.netapp.com/advisory/ntap-20210513-0002/',
-                'https://security.netapp.com/advisory/ntap-20240621-0006/',
-                'https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-openssl-2021-GHY28dJd',
-                'https://ubuntu.com/security/notices/USN-4891-1',
-                'https://ubuntu.com/security/notices/USN-5038-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-3449',
-                'https://www.debian.org/security/2021/dsa-4875',
-                'https://www.openssl.org/news/secadv/20210325.txt',
-                'https://www.oracle.com//security-alerts/cpujul2021.html',
-                'https://www.oracle.com/security-alerts/cpuApr2021.html',
-                'https://www.oracle.com/security-alerts/cpuapr2022.html',
-                'https://www.oracle.com/security-alerts/cpujul2022.html',
-                'https://www.oracle.com/security-alerts/cpuoct2021.html',
-                'https://www.tenable.com/security/tns-2021-05',
-                'https://www.tenable.com/security/tns-2021-06',
-                'https://www.tenable.com/security/tns-2021-09',
-                'https://www.tenable.com/security/tns-2021-10'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: NULL pointer dereference in signature_algorithms processing'
-            },
-            {
-              'cve':  'CVE-2021-23839',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '3.7',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N'
-                },
-                'redhat': {
-                  'v3score':  '3.7',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-327'
-              ],
-              'description':   'OpenSSL 1.0.2 supports SSLv2. If a client attempts to negotiate SSLv2 with a server that is configured to support both SSLv2 and more recent SSL and TLS versions then a check is made for a version rollback attack when unpadding an RSA signature. Clients that support SSL or TLS versions greater than SSLv2 are supposed to use a special form of padding. A server that supports greater than SSLv2 is supposed to reject connection attempts from a client where this special form of padding is present, because this indicates that a version rollback has occurred (i.e. both client and server support greater than SSLv2, and yet this is the version that is being requested). The implementation of this padding check inverted the logic so that the connection attempt is accepted if the padding is present, and rejected if it is absent. This means that such as server will accept a connection if a version rollback attack has occurred. Further the server will erroneously reject a connection if a normal SSLv2 connection attempt is made. Only OpenSSL 1.0.2 servers from version 1.0.2s to 1.0.2x are affected by this issue. In order to be vulnerable a 1.0.2 server must: 1) have configured SSLv2 support at compile time (this is off by default), 2) have configured SSLv2 support at runtime (this is off by default), 3) have configured SSLv2 ciphersuites (these are not in the default ciphersuite list) OpenSSL 1.1.1 does not have SSLv2 support and therefore is not vulnerable to this issue. The underlying error is in the implementation of the RSA_padding_check_SSLv23() function. This also affects the RSA_SSLV23_PADDING padding mode used by various other functions. Although 1.1.1 does not support SSLv2 the RSA_padding_check_SSLv23() function still exists, as does the RSA_SSLV23_PADDING padding mode. Applications that directly call that function or use that padding mode will encounter this issue. However since there is no support for the SSLv2 protocol in 1.1.1 this is considered a bug and not a security issue in that version. OpenSSL 1.0.2 is out of support and no longer receiving public updates. Premium support customers of OpenSSL 1.0.2 should upgrade to 1.0.2y. Other users should upgrade to 1.1.1j. Fixed in OpenSSL 1.0.2y (Affected 1.0.2s-1.0.2x).',
-              'diffID':        'sha256:98713a20507f1aad3aa66c7dbad7b0ff777101087c0b6bea75f01b639bb09e2f',
-              'fixedVersions': [
-                '1.1.1j-r0'
-              ],
-              'installedVersion': '1.1.1d-r0',
-              'packageName':      'libcrypto1.1',
-              'purl':             'pkg:apk/alpine/libcrypto1.1@1.1.1d-r0?arch=aarch64&distro=3.10.3',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-23839',
-                'https://cert-portal.siemens.com/productcert/pdf/ssa-637483.pdf',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=30919ab80a478f2d81f2e9acdcca3fa4740cd547',
-                'https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA44846',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-23839',
-                'https://security.netapp.com/advisory/ntap-20210219-0009/',
-                'https://security.netapp.com/advisory/ntap-20240621-0006/',
-                'https://www.cve.org/CVERecord?id=CVE-2021-23839',
-                'https://www.openssl.org/news/secadv/20210216.txt',
-                'https://www.oracle.com//security-alerts/cpujul2021.html',
-                'https://www.oracle.com/security-alerts/cpuApr2021.html',
-                'https://www.oracle.com/security-alerts/cpuapr2022.html',
-                'https://www.oracle.com/security-alerts/cpuoct2021.html'
-              ],
-              'severity':   'LOW',
-              'suppressed': false,
-              'title':      'openssl: incorrect SSLv2 rollback protection'
-            },
-            {
-              'cve':  'CVE-2020-1967',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'nvd': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-476'
-              ],
-              'description':   'Server or client applications that call the SSL_check_chain() function during or after a TLS 1.3 handshake may crash due to a NULL pointer dereference as a result of incorrect handling of the "signature_algorithms_cert" TLS extension. The crash occurs if an invalid or unrecognised signature algorithm is received from the peer. This could be exploited by a malicious peer in a Denial of Service attack. OpenSSL version 1.1.1d, 1.1.1e, and 1.1.1f are affected by this issue. This issue did not affect OpenSSL versions prior to 1.1.1d. Fixed in OpenSSL 1.1.1g (Affected 1.1.1d-1.1.1f).',
-              'diffID':        'sha256:98713a20507f1aad3aa66c7dbad7b0ff777101087c0b6bea75f01b639bb09e2f',
-              'fixedVersions': [
-                '1.1.1g-r0'
-              ],
-              'installedVersion': '1.1.1d-r0',
-              'packageName':      'libssl1.1',
-              'purl':             'pkg:apk/alpine/libssl1.1@1.1.1d-r0?arch=aarch64&distro=3.10.3',
-              'references':       [
-                'http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00004.html',
-                'http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00011.html',
-                'http://packetstormsecurity.com/files/157527/OpenSSL-signature_algorithms_cert-Denial-Of-Service.html',
-                'http://seclists.org/fulldisclosure/2020/May/5',
-                'http://www.openwall.com/lists/oss-security/2020/04/22/2',
-                'https://access.redhat.com/security/cve/CVE-2020-1967',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=eb563247aef3e83dda7679c43f9649270462e5b1',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=eb563247aef3e83dda7679c43f9649270462e5b1',
-                'https://github.com/irsl/CVE-2020-1967',
-                'https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA44440',
-                'https://lists.apache.org/thread.html/r66ea9c436da150683432db5fbc8beb8ae01886c6459ac30c2cea7345%40%3Cdev.tomcat.apache.org%3E',
-                'https://lists.apache.org/thread.html/r66ea9c436da150683432db5fbc8beb8ae01886c6459ac30c2cea7345@%3Cdev.tomcat.apache.org%3E',
-                'https://lists.apache.org/thread.html/r94d6ac3f010a38fccf4f432b12180a13fa1cf303559bd805648c9064%40%3Cdev.tomcat.apache.org%3E',
-                'https://lists.apache.org/thread.html/r94d6ac3f010a38fccf4f432b12180a13fa1cf303559bd805648c9064@%3Cdev.tomcat.apache.org%3E',
-                'https://lists.apache.org/thread.html/r9a41e304992ce6aec6585a87842b4f2e692604f5c892c37e3b0587ee%40%3Cdev.tomcat.apache.org%3E',
-                'https://lists.apache.org/thread.html/r9a41e304992ce6aec6585a87842b4f2e692604f5c892c37e3b0587ee@%3Cdev.tomcat.apache.org%3E',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DDHOAATPWJCXRNFMJ2SASDBBNU5RJONY/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/EXDDAOWSAIEFQNBHWYE6PPYFV4QXGMCD/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/XVEP3LAK4JSPRXFO4QF4GG2IVXADV3SO/',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/DDHOAATPWJCXRNFMJ2SASDBBNU5RJONY',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/EXDDAOWSAIEFQNBHWYE6PPYFV4QXGMCD',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/XVEP3LAK4JSPRXFO4QF4GG2IVXADV3SO',
-                'https://nvd.nist.gov/vuln/detail/CVE-2020-1967',
-                'https://rustsec.org/advisories/RUSTSEC-2020-0015.html',
-                'https://security.FreeBSD.org/advisories/FreeBSD-SA-20:11.openssl.asc',
-                'https://security.gentoo.org/glsa/202004-10',
-                'https://security.netapp.com/advisory/ntap-20200424-0003',
-                'https://security.netapp.com/advisory/ntap-20200424-0003/',
-                'https://security.netapp.com/advisory/ntap-20200717-0004',
-                'https://security.netapp.com/advisory/ntap-20200717-0004/',
-                'https://www.cve.org/CVERecord?id=CVE-2020-1967',
-                'https://www.debian.org/security/2020/dsa-4661',
-                'https://www.openssl.org/news/secadv/20200421.txt',
-                'https://www.oracle.com//security-alerts/cpujul2021.html',
-                'https://www.oracle.com/security-alerts/cpuApr2021.html',
-                'https://www.oracle.com/security-alerts/cpujan2021.html',
-                'https://www.oracle.com/security-alerts/cpujul2020.html',
-                'https://www.oracle.com/security-alerts/cpuoct2020.html',
-                'https://www.oracle.com/security-alerts/cpuoct2021.html',
-                'https://www.synology.com/security/advisory/Synology_SA_20_05',
-                'https://www.synology.com/security/advisory/Synology_SA_20_05_OpenSSL',
-                'https://www.tenable.com/security/tns-2020-03',
-                'https://www.tenable.com/security/tns-2020-04',
-                'https://www.tenable.com/security/tns-2020-11',
-                'https://www.tenable.com/security/tns-2021-10'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: Segmentation fault in SSL_check_chain causes denial of service'
-            },
-            {
-              'cve':  'CVE-2021-23840',
-              'cvss': {
-                'bitnami': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'ghsa': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'nvd': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-190'
-              ],
-              'description':   'Calls to EVP_CipherUpdate, EVP_EncryptUpdate and EVP_DecryptUpdate may overflow the output length argument in some cases where the input length is close to the maximum permissable length for an integer on the platform. In such cases the return value from the function call will be 1 (indicating success), but the output length value will be negative. This could cause applications to behave incorrectly or crash. OpenSSL versions 1.1.1i and below are affected by this issue. Users of these versions should upgrade to OpenSSL 1.1.1j. OpenSSL versions 1.0.2x and below are affected by this issue. However OpenSSL 1.0.2 is out of support and no longer receiving public updates. Premium support customers of OpenSSL 1.0.2 should upgrade to 1.0.2y. Other users should upgrade to 1.1.1j. Fixed in OpenSSL 1.1.1j (Affected 1.1.1-1.1.1i). Fixed in OpenSSL 1.0.2y (Affected 1.0.2-1.0.2x).',
-              'diffID':        'sha256:98713a20507f1aad3aa66c7dbad7b0ff777101087c0b6bea75f01b639bb09e2f',
-              'fixedVersions': [
-                '1.1.1j-r0'
-              ],
-              'installedVersion': '1.1.1d-r0',
-              'packageName':      'libssl1.1',
-              'purl':             'pkg:apk/alpine/libssl1.1@1.1.1d-r0?arch=aarch64&distro=3.10.3',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-23840',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=1908036',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=1930310',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=1930324',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=1934534',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=1934600',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=1939637',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=1940085',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=1965362',
-                'https://cert-portal.siemens.com/productcert/pdf/ssa-389290.pdf',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-23840',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-23841',
-                'https://errata.rockylinux.org/RLSA-2021:4424',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=6a51b9e1d0cf0bf8515f7201b68fb0a3482b3dc1',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=9b1129239f3ebb1d1c98ce9ed41d5c9476c47cb2',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=6a51b9e1d0cf0bf8515f7201b68fb0a3482b3dc1',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=9b1129239f3ebb1d1c98ce9ed41d5c9476c47cb2',
-                'https://github.com/alexcrichton/openssl-src-rs',
-                'https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA44846',
-                'https://kc.mcafee.com/corporate/index?page=content&id=SB10366',
-                'https://linux.oracle.com/cve/CVE-2021-23840.html',
-                'https://linux.oracle.com/errata/ELSA-2021-9561.html',
-                'https://lists.apache.org/thread.html/r58af02e294bd07f487e2c64ffc0a29b837db5600e33b6e698b9d696b%40%3Cissues.bookkeeper.apache.org%3E',
-                'https://lists.apache.org/thread.html/r58af02e294bd07f487e2c64ffc0a29b837db5600e33b6e698b9d696b@%3Cissues.bookkeeper.apache.org%3E',
-                'https://lists.apache.org/thread.html/rf4c02775860db415b4955778a131c2795223f61cb8c6a450893651e4%40%3Cissues.bookkeeper.apache.org%3E',
-                'https://lists.apache.org/thread.html/rf4c02775860db415b4955778a131c2795223f61cb8c6a450893651e4@%3Cissues.bookkeeper.apache.org%3E',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-23840',
-                'https://rustsec.org/advisories/RUSTSEC-2021-0057.html',
-                'https://security.gentoo.org/glsa/202103-03',
-                'https://security.netapp.com/advisory/ntap-20210219-0009',
-                'https://security.netapp.com/advisory/ntap-20210219-0009/',
-                'https://security.netapp.com/advisory/ntap-20240621-0006/',
-                'https://ubuntu.com/security/notices/USN-4738-1',
-                'https://ubuntu.com/security/notices/USN-5088-1',
-                'https://ubuntu.com/security/notices/USN-7018-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-23840',
-                'https://www.debian.org/security/2021/dsa-4855',
-                'https://www.openssl.org/news/secadv/20210216.txt',
-                'https://www.oracle.com//security-alerts/cpujul2021.html',
-                'https://www.oracle.com/security-alerts/cpuApr2021.html',
-                'https://www.oracle.com/security-alerts/cpuapr2022.html',
-                'https://www.oracle.com/security-alerts/cpujan2022.html',
-                'https://www.oracle.com/security-alerts/cpuoct2021.html',
-                'https://www.tenable.com/security/tns-2021-03',
-                'https://www.tenable.com/security/tns-2021-09',
-                'https://www.tenable.com/security/tns-2021-10'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: integer overflow in CipherUpdate'
-            },
-            {
-              'cve':  'CVE-2021-3450',
-              'cvss': {
-                'bitnami': {
-                  'v3score':  '7.4',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N'
-                },
-                'ghsa': {
-                  'v3score':  '7.4',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N'
-                },
-                'nvd': {
-                  'v3score':  '7.4',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N'
-                },
-                'redhat': {
-                  'v3score':  '7.4',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-295'
-              ],
-              'description':   'The X509_V_FLAG_X509_STRICT flag enables additional security checks of the certificates present in a certificate chain. It is not set by default. Starting from OpenSSL version 1.1.1h a check to disallow certificates in the chain that have explicitly encoded elliptic curve parameters was added as an additional strict check. An error in the implementation of this check meant that the result of a previous check to confirm that certificates in the chain are valid CA certificates was overwritten. This effectively bypasses the check that non-CA certificates must not be able to issue other certificates. If a "purpose" has been configured then there is a subsequent opportunity for checks that the certificate is a valid CA. All of the named "purpose" values implemented in libcrypto perform this check. Therefore, where a purpose is set the certificate chain will still be rejected even when the strict flag has been used. A purpose is set by default in libssl client and server certificate verification routines, but it can be overridden or removed by an application. In order to be affected, an application must explicitly set the X509_V_FLAG_X509_STRICT verification flag and either not set a purpose for the certificate verification or, in the case of TLS client or server applications, override the default purpose. OpenSSL versions 1.1.1h and newer are affected by this issue. Users of these versions should upgrade to OpenSSL 1.1.1k. OpenSSL 1.0.2 is not impacted by this issue. Fixed in OpenSSL 1.1.1k (Affected 1.1.1h-1.1.1j).',
-              'diffID':        'sha256:98713a20507f1aad3aa66c7dbad7b0ff777101087c0b6bea75f01b639bb09e2f',
-              'fixedVersions': [
-                '1.1.1k-r0'
-              ],
-              'installedVersion': '1.1.1d-r0',
-              'packageName':      'libssl1.1',
-              'purl':             'pkg:apk/alpine/libssl1.1@1.1.1d-r0?arch=aarch64&distro=3.10.3',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2021/03/27/1',
-                'http://www.openwall.com/lists/oss-security/2021/03/27/2',
-                'http://www.openwall.com/lists/oss-security/2021/03/28/3',
-                'http://www.openwall.com/lists/oss-security/2021/03/28/4',
-                'https://access.redhat.com/security/cve/CVE-2021-3450',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=1941547',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=1941554',
-                'https://cert-portal.siemens.com/productcert/pdf/ssa-389290.pdf',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-3449',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-3450',
-                'https://errata.rockylinux.org/RLSA-2021:1024',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=2a40b7bc7b94dd7de897a74571e7024f0cf0d63b',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=2a40b7bc7b94dd7de897a74571e7024f0cf0d63b',
-                'https://github.com/alexcrichton/openssl-src-rs',
-                'https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA44845',
-                'https://kc.mcafee.com/corporate/index?page=content&id=SB10356',
-                'https://linux.oracle.com/cve/CVE-2021-3450.html',
-                'https://linux.oracle.com/errata/ELSA-2021-9151.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CCBFLLVQVILIVGZMBJL3IXZGKWQISYNP/',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/CCBFLLVQVILIVGZMBJL3IXZGKWQISYNP',
-                'https://mta.openssl.org/pipermail/openssl-announce/2021-March/000198.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-3450',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2021-0013',
-                'https://rustsec.org/advisories/RUSTSEC-2021-0056.html',
-                'https://security.FreeBSD.org/advisories/FreeBSD-SA-21:07.openssl.asc',
-                'https://security.gentoo.org/glsa/202103-03',
-                'https://security.netapp.com/advisory/ntap-20210326-0006',
-                'https://security.netapp.com/advisory/ntap-20210326-0006/',
-                'https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-openssl-2021-GHY28dJd',
-                'https://www.cve.org/CVERecord?id=CVE-2021-3450',
-                'https://www.openssl.org/news/secadv/20210325.txt',
-                'https://www.oracle.com//security-alerts/cpujul2021.html',
-                'https://www.oracle.com/security-alerts/cpuApr2021.html',
-                'https://www.oracle.com/security-alerts/cpuapr2022.html',
-                'https://www.oracle.com/security-alerts/cpujul2022.html',
-                'https://www.oracle.com/security-alerts/cpuoct2021.html',
-                'https://www.tenable.com/security/tns-2021-05',
-                'https://www.tenable.com/security/tns-2021-08',
-                'https://www.tenable.com/security/tns-2021-09'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: CA certificate check bypass with X509_V_FLAG_X509_STRICT'
-            },
-            {
-              'cve':  'CVE-2019-1551',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N'
-                },
-                'redhat': {
-                  'v3score':  '4.8',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-190'
-              ],
-              'description':   'There is an overflow bug in the x64_64 Montgomery squaring procedure used in exponentiation with 512-bit moduli. No EC algorithms are affected. Analysis suggests that attacks against 2-prime RSA1024, 3-prime RSA1536, and DSA1024 as a result of this defect would be very difficult to perform and are not believed likely. Attacks against DH512 are considered just feasible. However, for an attack the target would have to re-use the DH512 private key, which is not recommended anyway. Also applications directly using the low level API BN_mod_exp may be affected if they use BN_FLG_CONSTTIME. Fixed in OpenSSL 1.1.1e (Affected 1.1.1-1.1.1d). Fixed in OpenSSL 1.0.2u (Affected 1.0.2-1.0.2t).',
-              'diffID':        'sha256:98713a20507f1aad3aa66c7dbad7b0ff777101087c0b6bea75f01b639bb09e2f',
-              'fixedVersions': [
-                '1.1.1d-r2'
-              ],
-              'installedVersion': '1.1.1d-r0',
-              'packageName':      'libssl1.1',
-              'purl':             'pkg:apk/alpine/libssl1.1@1.1.1d-r0?arch=aarch64&distro=3.10.3',
-              'references':       [
-                'http://lists.opensuse.org/opensuse-security-announce/2020-01/msg00030.html',
-                'http://packetstormsecurity.com/files/155754/Slackware-Security-Advisory-openssl-Updates.html',
-                'https://access.redhat.com/security/cve/CVE-2019-1551',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=419102400a2811582a7a3d4a4e317d72e5ce0a8f',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=f1c5eea8a817075d31e43f5876993c6710238c98',
-                'https://github.com/openssl/openssl/pull/10575',
-                'https://linux.oracle.com/cve/CVE-2019-1551.html',
-                'https://linux.oracle.com/errata/ELSA-2020-4514.html',
-                'https://lists.debian.org/debian-lts-announce/2022/03/msg00023.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DDHOAATPWJCXRNFMJ2SASDBBNU5RJONY/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/EXDDAOWSAIEFQNBHWYE6PPYFV4QXGMCD/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/XVEP3LAK4JSPRXFO4QF4GG2IVXADV3SO/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2019-1551',
-                'https://seclists.org/bugtraq/2019/Dec/39',
-                'https://seclists.org/bugtraq/2019/Dec/46',
-                'https://security.gentoo.org/glsa/202004-10',
-                'https://security.netapp.com/advisory/ntap-20191210-0001/',
-                'https://ubuntu.com/security/notices/USN-4376-1',
-                'https://ubuntu.com/security/notices/USN-4504-1',
-                'https://usn.ubuntu.com/4376-1/',
-                'https://usn.ubuntu.com/4504-1/',
-                'https://www.cve.org/CVERecord?id=CVE-2019-1551',
-                'https://www.debian.org/security/2019/dsa-4594',
-                'https://www.debian.org/security/2021/dsa-4855',
-                'https://www.openssl.org/news/secadv/20191206.txt',
-                'https://www.oracle.com/security-alerts/cpuApr2021.html',
-                'https://www.oracle.com/security-alerts/cpujan2021.html',
-                'https://www.oracle.com/security-alerts/cpujul2020.html',
-                'https://www.tenable.com/security/tns-2019-09',
-                'https://www.tenable.com/security/tns-2020-03',
-                'https://www.tenable.com/security/tns-2020-11',
-                'https://www.tenable.com/security/tns-2021-10'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: Integer overflow in RSAZ modular exponentiation on x86_64'
-            },
-            {
-              'cve':  'CVE-2020-1971',
-              'cvss': {
-                'bitnami': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'nvd': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-476'
-              ],
-              'description':   "The X.509 GeneralName type is a generic type for representing different types of names. One of those name types is known as EDIPartyName. OpenSSL provides a function GENERAL_NAME_cmp which compares different instances of a GENERAL_NAME to see if they are equal or not. This function behaves incorrectly when both GENERAL_NAMEs contain an EDIPARTYNAME. A NULL pointer dereference and a crash may occur leading to a possible denial of service attack. OpenSSL itself uses the GENERAL_NAME_cmp function for two purposes: 1) Comparing CRL distribution point names between an available CRL and a CRL distribution point embedded in an X509 certificate 2) When verifying that a timestamp response token signer matches the timestamp authority name (exposed via the API functions TS_RESP_verify_response and TS_RESP_verify_token) If an attacker can control both items being compared then that attacker could trigger a crash. For example if the attacker can trick a client or server into checking a malicious certificate against a malicious CRL then this may occur. Note that some applications automatically download CRLs based on a URL embedded in a certificate. This checking happens prior to the signatures on the certificate and CRL being verified. OpenSSL's s_server, s_client and verify tools have support for the \"-crl_download\" option which implements automatic CRL downloading and this attack has been demonstrated to work against those tools. Note that an unrelated bug means that affected versions of OpenSSL cannot parse or construct correct encodings of EDIPARTYNAME. However it is possible to construct a malformed EDIPARTYNAME that OpenSSL's parser will accept and hence trigger this attack. All OpenSSL 1.1.1 and 1.0.2 versions are affected by this issue. Other OpenSSL releases are out of support and have not been checked. Fixed in OpenSSL 1.1.1i (Affected 1.1.1-1.1.1h). Fixed in OpenSSL 1.0.2x (Affected 1.0.2-1.0.2w).",
-              'diffID':        'sha256:98713a20507f1aad3aa66c7dbad7b0ff777101087c0b6bea75f01b639bb09e2f',
-              'fixedVersions': [
-                '1.1.1i-r0'
-              ],
-              'installedVersion': '1.1.1d-r0',
-              'packageName':      'libssl1.1',
-              'purl':             'pkg:apk/alpine/libssl1.1@1.1.1d-r0?arch=aarch64&distro=3.10.3',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2021/09/14/2',
-                'https://access.redhat.com/security/cve/CVE-2020-1971',
-                'https://cert-portal.siemens.com/productcert/pdf/ssa-389290.pdf',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=2154ab83e14ede338d2ede9bbe5cdfce5d5a6c9e',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=f960d81215ebf3f65e03d4d5d857fb9b666d6920',
-                'https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA44676',
-                'https://linux.oracle.com/cve/CVE-2020-1971.html',
-                'https://linux.oracle.com/errata/ELSA-2021-9150.html',
-                'https://lists.apache.org/thread.html/r63c6f2dd363d9b514d0a4bcf624580616a679898cc14c109a49b750c%40%3Cdev.tomcat.apache.org%3E',
-                'https://lists.apache.org/thread.html/rbb769f771711fb274e0a4acb1b5911c8aab544a6ac5e8c12d40c5143%40%3Ccommits.pulsar.apache.org%3E',
-                'https://lists.debian.org/debian-lts-announce/2020/12/msg00020.html',
-                'https://lists.debian.org/debian-lts-announce/2020/12/msg00021.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DGSI34Y5LQ5RYXN4M2I5ZQT65LFVDOUU/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PWPSSZNZOBJU2YR6Z4TGHXKYW3YP5QG7/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2020-1971',
-                'https://security.FreeBSD.org/advisories/FreeBSD-SA-20:33.openssl.asc',
-                'https://security.gentoo.org/glsa/202012-13',
-                'https://security.netapp.com/advisory/ntap-20201218-0005/',
-                'https://security.netapp.com/advisory/ntap-20210513-0002/',
-                'https://security.netapp.com/advisory/ntap-20240621-0006/',
-                'https://ubuntu.com/security/notices/USN-4662-1',
-                'https://ubuntu.com/security/notices/USN-4745-1',
-                'https://www.cve.org/CVERecord?id=CVE-2020-1971',
-                'https://www.debian.org/security/2020/dsa-4807',
-                'https://www.openssl.org/news/secadv/20201208.txt',
-                'https://www.oracle.com//security-alerts/cpujul2021.html',
-                'https://www.oracle.com/security-alerts/cpuApr2021.html',
-                'https://www.oracle.com/security-alerts/cpuapr2022.html',
-                'https://www.oracle.com/security-alerts/cpujan2021.html',
-                'https://www.oracle.com/security-alerts/cpuoct2021.html',
-                'https://www.tenable.com/security/tns-2020-11',
-                'https://www.tenable.com/security/tns-2021-09',
-                'https://www.tenable.com/security/tns-2021-10'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: EDIPARTYNAME NULL pointer de-reference'
-            },
-            {
-              'cve':  'CVE-2021-23841',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'nvd': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-476'
-              ],
-              'description':   'The OpenSSL public API function X509_issuer_and_serial_hash() attempts to create a unique hash value based on the issuer and serial number data contained within an X509 certificate. However it fails to correctly handle any errors that may occur while parsing the issuer field (which might occur if the issuer field is maliciously constructed). This may subsequently result in a NULL pointer deref and a crash leading to a potential denial of service attack. The function X509_issuer_and_serial_hash() is never directly called by OpenSSL itself so applications are only vulnerable if they use this function directly and they use it on certificates that may have been obtained from untrusted sources. OpenSSL versions 1.1.1i and below are affected by this issue. Users of these versions should upgrade to OpenSSL 1.1.1j. OpenSSL versions 1.0.2x and below are affected by this issue. However OpenSSL 1.0.2 is out of support and no longer receiving public updates. Premium support customers of OpenSSL 1.0.2 should upgrade to 1.0.2y. Other users should upgrade to 1.1.1j. Fixed in OpenSSL 1.1.1j (Affected 1.1.1-1.1.1i). Fixed in OpenSSL 1.0.2y (Affected 1.0.2-1.0.2x).',
-              'diffID':        'sha256:98713a20507f1aad3aa66c7dbad7b0ff777101087c0b6bea75f01b639bb09e2f',
-              'fixedVersions': [
-                '1.1.1j-r0'
-              ],
-              'installedVersion': '1.1.1d-r0',
-              'packageName':      'libssl1.1',
-              'purl':             'pkg:apk/alpine/libssl1.1@1.1.1d-r0?arch=aarch64&distro=3.10.3',
-              'references':       [
-                'http://seclists.org/fulldisclosure/2021/May/67',
-                'http://seclists.org/fulldisclosure/2021/May/68',
-                'http://seclists.org/fulldisclosure/2021/May/70',
-                'https://access.redhat.com/security/cve/CVE-2021-23841',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=1908036',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=1930310',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=1930324',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=1934534',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=1934600',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=1939637',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=1940085',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=1965362',
-                'https://cert-portal.siemens.com/productcert/pdf/ssa-637483.pdf',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-23840',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-23841',
-                'https://errata.rockylinux.org/RLSA-2021:4424',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=122a19ab48091c657f7cb1fb3af9fc07bd557bbf',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=8252ee4d90f3f2004d3d0aeeed003ad49c9a7807',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=122a19ab48091c657f7cb1fb3af9fc07bd557bbf',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=6a51b9e1d0cf0bf8515f7201b68fb0a3482b3dc1',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=8252ee4d90f3f2004d3d0aeeed003ad49c9a7807',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=9b1129239f3ebb1d1c98ce9ed41d5c9476c47cb2',
-                'https://github.com/alexcrichton/openssl-src-rs',
-                'https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA44846',
-                'https://linux.oracle.com/cve/CVE-2021-23841.html',
-                'https://linux.oracle.com/errata/ELSA-2021-9561.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-23841',
-                'https://rustsec.org/advisories/RUSTSEC-2021-0058',
-                'https://rustsec.org/advisories/RUSTSEC-2021-0058.html',
-                'https://security.gentoo.org/glsa/202103-03',
-                'https://security.netapp.com/advisory/ntap-20210219-0009',
-                'https://security.netapp.com/advisory/ntap-20210219-0009/',
-                'https://security.netapp.com/advisory/ntap-20210513-0002',
-                'https://security.netapp.com/advisory/ntap-20210513-0002/',
-                'https://security.netapp.com/advisory/ntap-20240621-0006/',
-                'https://support.apple.com/kb/HT212528',
-                'https://support.apple.com/kb/HT212529',
-                'https://support.apple.com/kb/HT212534',
-                'https://ubuntu.com/security/notices/USN-4738-1',
-                'https://ubuntu.com/security/notices/USN-4745-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-23841',
-                'https://www.debian.org/security/2021/dsa-4855',
-                'https://www.openssl.org/news/secadv/20210216.txt',
-                'https://www.oracle.com//security-alerts/cpujul2021.html',
-                'https://www.oracle.com/security-alerts/cpuApr2021.html',
-                'https://www.oracle.com/security-alerts/cpuapr2022.html',
-                'https://www.oracle.com/security-alerts/cpuoct2021.html',
-                'https://www.tenable.com/security/tns-2021-03',
-                'https://www.tenable.com/security/tns-2021-09'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: NULL pointer dereference in X509_issuer_and_serial_hash()'
-            },
-            {
-              'cve':  'CVE-2021-3449',
-              'cvss': {
-                'bitnami': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'ghsa': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'nvd': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-476'
-              ],
-              'description':   'An OpenSSL TLS server may crash if sent a maliciously crafted renegotiation ClientHello message from a client. If a TLSv1.2 renegotiation ClientHello omits the signature_algorithms extension (where it was present in the initial ClientHello), but includes a signature_algorithms_cert extension then a NULL pointer dereference will result, leading to a crash and a denial of service attack. A server is only vulnerable if it has TLSv1.2 and renegotiation enabled (which is the default configuration). OpenSSL TLS clients are not impacted by this issue. All OpenSSL 1.1.1 versions are affected by this issue. Users of these versions should upgrade to OpenSSL 1.1.1k. OpenSSL 1.0.2 is not impacted by this issue. Fixed in OpenSSL 1.1.1k (Affected 1.1.1-1.1.1j).',
-              'diffID':        'sha256:98713a20507f1aad3aa66c7dbad7b0ff777101087c0b6bea75f01b639bb09e2f',
-              'fixedVersions': [
-                '1.1.1k-r0'
-              ],
-              'installedVersion': '1.1.1d-r0',
-              'packageName':      'libssl1.1',
-              'purl':             'pkg:apk/alpine/libssl1.1@1.1.1d-r0?arch=aarch64&distro=3.10.3',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2021/03/27/1',
-                'http://www.openwall.com/lists/oss-security/2021/03/27/2',
-                'http://www.openwall.com/lists/oss-security/2021/03/28/3',
-                'http://www.openwall.com/lists/oss-security/2021/03/28/4',
-                'https://access.redhat.com/security/cve/CVE-2021-3449',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=1941547',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=1941554',
-                'https://cert-portal.siemens.com/productcert/pdf/ssa-389290.pdf',
-                'https://cert-portal.siemens.com/productcert/pdf/ssa-772220.pdf',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-3449',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-3450',
-                'https://errata.rockylinux.org/RLSA-2021:1024',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=fb9fa6b51defd48157eeb207f52181f735d96148',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=fb9fa6b51defd48157eeb207f52181f735d96148',
-                'https://github.com/alexcrichton/openssl-src-rs',
-                'https://github.com/nodejs/node/pull/38083',
-                'https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA44845',
-                'https://kc.mcafee.com/corporate/index?page=content&id=SB10356',
-                'https://linux.oracle.com/cve/CVE-2021-3449.html',
-                'https://linux.oracle.com/errata/ELSA-2021-9151.html',
-                'https://lists.debian.org/debian-lts-announce/2021/08/msg00029.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CCBFLLVQVILIVGZMBJL3IXZGKWQISYNP/',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/CCBFLLVQVILIVGZMBJL3IXZGKWQISYNP',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-3449',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2021-0013',
-                'https://rustsec.org/advisories/RUSTSEC-2021-0055',
-                'https://rustsec.org/advisories/RUSTSEC-2021-0055.html',
-                'https://security.FreeBSD.org/advisories/FreeBSD-SA-21:07.openssl.asc',
-                'https://security.gentoo.org/glsa/202103-03',
-                'https://security.netapp.com/advisory/ntap-20210326-0006',
-                'https://security.netapp.com/advisory/ntap-20210326-0006/',
-                'https://security.netapp.com/advisory/ntap-20210513-0002',
-                'https://security.netapp.com/advisory/ntap-20210513-0002/',
-                'https://security.netapp.com/advisory/ntap-20240621-0006/',
-                'https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-openssl-2021-GHY28dJd',
-                'https://ubuntu.com/security/notices/USN-4891-1',
-                'https://ubuntu.com/security/notices/USN-5038-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-3449',
-                'https://www.debian.org/security/2021/dsa-4875',
-                'https://www.openssl.org/news/secadv/20210325.txt',
-                'https://www.oracle.com//security-alerts/cpujul2021.html',
-                'https://www.oracle.com/security-alerts/cpuApr2021.html',
-                'https://www.oracle.com/security-alerts/cpuapr2022.html',
-                'https://www.oracle.com/security-alerts/cpujul2022.html',
-                'https://www.oracle.com/security-alerts/cpuoct2021.html',
-                'https://www.tenable.com/security/tns-2021-05',
-                'https://www.tenable.com/security/tns-2021-06',
-                'https://www.tenable.com/security/tns-2021-09',
-                'https://www.tenable.com/security/tns-2021-10'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: NULL pointer dereference in signature_algorithms processing'
-            },
-            {
-              'cve':  'CVE-2021-23839',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '3.7',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N'
-                },
-                'redhat': {
-                  'v3score':  '3.7',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-327'
-              ],
-              'description':   'OpenSSL 1.0.2 supports SSLv2. If a client attempts to negotiate SSLv2 with a server that is configured to support both SSLv2 and more recent SSL and TLS versions then a check is made for a version rollback attack when unpadding an RSA signature. Clients that support SSL or TLS versions greater than SSLv2 are supposed to use a special form of padding. A server that supports greater than SSLv2 is supposed to reject connection attempts from a client where this special form of padding is present, because this indicates that a version rollback has occurred (i.e. both client and server support greater than SSLv2, and yet this is the version that is being requested). The implementation of this padding check inverted the logic so that the connection attempt is accepted if the padding is present, and rejected if it is absent. This means that such as server will accept a connection if a version rollback attack has occurred. Further the server will erroneously reject a connection if a normal SSLv2 connection attempt is made. Only OpenSSL 1.0.2 servers from version 1.0.2s to 1.0.2x are affected by this issue. In order to be vulnerable a 1.0.2 server must: 1) have configured SSLv2 support at compile time (this is off by default), 2) have configured SSLv2 support at runtime (this is off by default), 3) have configured SSLv2 ciphersuites (these are not in the default ciphersuite list) OpenSSL 1.1.1 does not have SSLv2 support and therefore is not vulnerable to this issue. The underlying error is in the implementation of the RSA_padding_check_SSLv23() function. This also affects the RSA_SSLV23_PADDING padding mode used by various other functions. Although 1.1.1 does not support SSLv2 the RSA_padding_check_SSLv23() function still exists, as does the RSA_SSLV23_PADDING padding mode. Applications that directly call that function or use that padding mode will encounter this issue. However since there is no support for the SSLv2 protocol in 1.1.1 this is considered a bug and not a security issue in that version. OpenSSL 1.0.2 is out of support and no longer receiving public updates. Premium support customers of OpenSSL 1.0.2 should upgrade to 1.0.2y. Other users should upgrade to 1.1.1j. Fixed in OpenSSL 1.0.2y (Affected 1.0.2s-1.0.2x).',
-              'diffID':        'sha256:98713a20507f1aad3aa66c7dbad7b0ff777101087c0b6bea75f01b639bb09e2f',
-              'fixedVersions': [
-                '1.1.1j-r0'
-              ],
-              'installedVersion': '1.1.1d-r0',
-              'packageName':      'libssl1.1',
-              'purl':             'pkg:apk/alpine/libssl1.1@1.1.1d-r0?arch=aarch64&distro=3.10.3',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-23839',
-                'https://cert-portal.siemens.com/productcert/pdf/ssa-637483.pdf',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=30919ab80a478f2d81f2e9acdcca3fa4740cd547',
-                'https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA44846',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-23839',
-                'https://security.netapp.com/advisory/ntap-20210219-0009/',
-                'https://security.netapp.com/advisory/ntap-20240621-0006/',
-                'https://www.cve.org/CVERecord?id=CVE-2021-23839',
-                'https://www.openssl.org/news/secadv/20210216.txt',
-                'https://www.oracle.com//security-alerts/cpujul2021.html',
-                'https://www.oracle.com/security-alerts/cpuApr2021.html',
-                'https://www.oracle.com/security-alerts/cpuapr2022.html',
-                'https://www.oracle.com/security-alerts/cpuoct2021.html'
-              ],
-              'severity':   'LOW',
-              'suppressed': false,
-              'title':      'openssl: incorrect SSLv2 rollback protection'
-            },
-            {
-              'cve':  'CVE-2020-28928',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.5',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-787'
-              ],
-              'description':   'In musl libc through 1.2.1, wcsnrtombs mishandles particular combinations of destination buffer size and source character limit, as demonstrated by an invalid write access (buffer overflow).',
-              'diffID':        'sha256:98713a20507f1aad3aa66c7dbad7b0ff777101087c0b6bea75f01b639bb09e2f',
-              'fixedVersions': [
-                '1.1.22-r4'
-              ],
-              'installedVersion': '1.1.22-r3',
-              'packageName':      'musl',
-              'purl':             'pkg:apk/alpine/musl@1.1.22-r3?arch=aarch64&distro=3.10.3',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2020/11/20/4',
-                'https://lists.apache.org/thread.html/r2134abfe847bea7795f0e53756d10a47e6643f35ab8169df8b8a9eb1%40%3Cnotifications.apisix.apache.org%3E',
-                'https://lists.apache.org/thread.html/r90b60cf49348e515257b4950900c1bd3ab95a960cf2469d919c7264e%40%3Cnotifications.apisix.apache.org%3E',
-                'https://lists.apache.org/thread.html/ra63e8dc5137d952afc55dbbfa63be83304ecf842d1eab1ff3ebb29e2%40%3Cnotifications.apisix.apache.org%3E',
-                'https://lists.debian.org/debian-lts-announce/2020/11/msg00050.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LKQ3RVSMVZNZNO4D65W2CZZ4DMYFZN2Q/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UW27QVY7ERPTSGKS4KAWE5TU7EJWHKVQ/',
-                'https://musl.libc.org/releases.html',
-                'https://ubuntu.com/security/notices/USN-5990-1',
-                'https://www.cve.org/CVERecord?id=CVE-2020-28928',
-                'https://www.openwall.com/lists/oss-security/2020/11/20/4',
-                'https://www.oracle.com//security-alerts/cpujul2021.html',
-                'https://www.oracle.com/security-alerts/cpuoct2021.html'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'In musl libc through 1.2.1, wcsnrtombs mishandles particular combinati ...'
-            },
-            {
-              'cve':  'CVE-2020-28928',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.5',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-787'
-              ],
-              'description':   'In musl libc through 1.2.1, wcsnrtombs mishandles particular combinations of destination buffer size and source character limit, as demonstrated by an invalid write access (buffer overflow).',
-              'diffID':        'sha256:98713a20507f1aad3aa66c7dbad7b0ff777101087c0b6bea75f01b639bb09e2f',
-              'fixedVersions': [
-                '1.1.22-r4'
-              ],
-              'installedVersion': '1.1.22-r3',
-              'packageName':      'musl-utils',
-              'purl':             'pkg:apk/alpine/musl-utils@1.1.22-r3?arch=aarch64&distro=3.10.3',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2020/11/20/4',
-                'https://lists.apache.org/thread.html/r2134abfe847bea7795f0e53756d10a47e6643f35ab8169df8b8a9eb1%40%3Cnotifications.apisix.apache.org%3E',
-                'https://lists.apache.org/thread.html/r90b60cf49348e515257b4950900c1bd3ab95a960cf2469d919c7264e%40%3Cnotifications.apisix.apache.org%3E',
-                'https://lists.apache.org/thread.html/ra63e8dc5137d952afc55dbbfa63be83304ecf842d1eab1ff3ebb29e2%40%3Cnotifications.apisix.apache.org%3E',
-                'https://lists.debian.org/debian-lts-announce/2020/11/msg00050.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LKQ3RVSMVZNZNO4D65W2CZZ4DMYFZN2Q/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UW27QVY7ERPTSGKS4KAWE5TU7EJWHKVQ/',
-                'https://musl.libc.org/releases.html',
-                'https://ubuntu.com/security/notices/USN-5990-1',
-                'https://www.cve.org/CVERecord?id=CVE-2020-28928',
-                'https://www.openwall.com/lists/oss-security/2020/11/20/4',
-                'https://www.oracle.com//security-alerts/cpujul2021.html',
-                'https://www.oracle.com/security-alerts/cpuoct2021.html'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'In musl libc through 1.2.1, wcsnrtombs mishandles particular combinati ...'
-            },
-            {
-              'cve':  'CVE-2021-28831',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-755'
-              ],
-              'description':   'decompress_gunzip.c in BusyBox through 1.32.1 mishandles the error bit on the huft_build result pointer, with a resultant invalid free or segmentation fault, via malformed gzip data.',
-              'diffID':        'sha256:98713a20507f1aad3aa66c7dbad7b0ff777101087c0b6bea75f01b639bb09e2f',
-              'fixedVersions': [
-                '1.30.1-r5'
-              ],
-              'installedVersion': '1.30.1-r2',
-              'packageName':      'ssl_client',
-              'purl':             'pkg:apk/alpine/ssl_client@1.30.1-r2?arch=aarch64&distro=3.10.3',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-28831',
-                'https://git.busybox.net/busybox/commit/?id=f25d254dfd4243698c31a4f3153d4ac72aa9e9bd',
-                'https://lists.debian.org/debian-lts-announce/2021/04/msg00001.html',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/3UDQGJRECXFS5EZVDH2OI45FMO436AC4/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/Z7ZIFKPRR32ZYA3WAA2NXFA3QHHOU6FJ/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZASBW7QRRLY5V2R44MQ4QQM4CZIDHM2U/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-28831',
-                'https://security.gentoo.org/glsa/202105-09',
-                'https://security.netapp.com/advisory/ntap-20250509-0005/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://ubuntu.com/security/notices/USN-5179-2',
-                'https://ubuntu.com/security/notices/USN-6335-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-28831'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: invalid free or segmentation fault via malformed gzip data'
-            }
-          ]
-        }
-      ],
-      'summary': {
-        'critical':   1,
-        'high':       9,
-        'low':        2,
-        'medium':     10,
-        'suppressed': 0,
-        'unknown':    0
-      }
-    }
-  },
-  {
-    'id':    'default/94ecaabd4d0e14b07d9efc1662822f1836b0f325d0fba9cf964c27b867404c5c',
-    'type':  'storage.sbomscanner.kubewarden.io.vulnerabilityreport',
-    'links': {
-      'patch':  'https://localhost:8005/v1/storage.sbomscanner.kubewarden.io.vulnerabilityreports/default/94ecaabd4d0e14b07d9efc1662822f1836b0f325d0fba9cf964c27b867404c5c',
-      'remove': 'https://localhost:8005/v1/storage.sbomscanner.kubewarden.io.vulnerabilityreports/default/94ecaabd4d0e14b07d9efc1662822f1836b0f325d0fba9cf964c27b867404c5c',
-      'self':   'https://localhost:8005/v1/storage.sbomscanner.kubewarden.io.vulnerabilityreports/default/94ecaabd4d0e14b07d9efc1662822f1836b0f325d0fba9cf964c27b867404c5c',
-      'update': 'https://localhost:8005/v1/storage.sbomscanner.kubewarden.io.vulnerabilityreports/default/94ecaabd4d0e14b07d9efc1662822f1836b0f325d0fba9cf964c27b867404c5c',
-      'view':   'https://localhost:8005/apis/storage.sbomscanner.kubewarden.io/v1alpha1/namespaces/default/vulnerabilityreports/94ecaabd4d0e14b07d9efc1662822f1836b0f325d0fba9cf964c27b867404c5c'
-    },
-    'apiVersion':    'storage.sbomscanner.kubewarden.io/v1alpha1',
-    'imageMetadata': {
-      'digest':      'sha256:e4355b66995c96b4b468159fc5c7e3540fcef961189ca13fee877798649f531a',
-      'platform':    'linux/amd64',
-      'registry':    'lsong-demo1',
-      'registryURI': 'registry-1.docker.io',
-      'repository':  'library/alpine',
-      'tag':         '3.10.3'
-    },
-    'kind':     'VulnerabilityReport',
-    'metadata': {
-      'creationTimestamp': '2026-01-14T18:52:06Z',
-      'fields':            [
-        '94ecaabd4d0e14b07d9efc1662822f1836b0f325d0fba9cf964c27b867404c5c',
-        'registry-1.docker.io/library/alpine:3.10.3',
-        'linux/amd64',
-        '22 (0 suppressed)'
-      ],
-      'labels': {
-        'app.kubernetes.io/managed-by':          'sbomscanner',
-        'app.kubernetes.io/part-of':             'sbomscanner',
-        'sbomscanner.kubewarden.io/scanjob-uid': '445c600a-c4b6-40b3-bd71-f2d2140a37d5'
-      },
-      'name':            '94ecaabd4d0e14b07d9efc1662822f1836b0f325d0fba9cf964c27b867404c5c',
-      'namespace':       'default',
-      'ownerReferences': [
-        {
-          'apiVersion':         'storage.sbomscanner.kubewarden.io/v1alpha1',
-          'blockOwnerDeletion': true,
-          'controller':         true,
-          'kind':               'SBOM',
-          'name':               '94ecaabd4d0e14b07d9efc1662822f1836b0f325d0fba9cf964c27b867404c5c',
-          'uid':                '692af719-e48e-4a5b-baee-8edaf1717e83'
-        }
-      ],
-      'relationships': [
-        {
-          'fromId':   'default/94ecaabd4d0e14b07d9efc1662822f1836b0f325d0fba9cf964c27b867404c5c',
-          'fromType': 'storage.sbomscanner.kubewarden.io.sbom',
-          'rel':      'owner',
-          'state':    'active',
-          'message':  'Resource is current'
-        }
-      ],
-      'resourceVersion': '1',
-      'state':           {
-        'error':         false,
-        'message':       'Resource is current',
-        'name':          'active',
-        'transitioning': false
-      },
-      'uid': '0e252c46-54f6-4b23-8e6f-aa3d9ac4464f'
-    },
-    'report': {
-      'results': [
-        {
-          'class':           'os-pkgs',
-          'target':          '/var/run/worker/trivy.sbom.2338130141.json (alpine 3.10.3)',
-          'type':            'alpine',
-          'vulnerabilities': [
-            {
-              'cve':  'CVE-2021-36159',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '9.1',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '9.1',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-125'
-              ],
-              'description':   "libfetch before 2021-07-26, as used in apk-tools, xbps, and other products, mishandles numeric strings for the FTP and HTTP protocols. The FTP passive mode implementation allows an out-of-bounds read because strtol is used to parse the relevant numbers into address bytes. It does not check if the line ends prematurely. If it does, the for-loop condition checks for the '\\0' terminator one byte too late.",
-              'diffID':        'sha256:77cae8ab23bf486355d1b3191259705374f4a11d483b24964d2f729dd8c076a0',
-              'fixedVersions': [
-                '2.10.7-r0'
-              ],
-              'installedVersion': '2.10.4-r2',
-              'packageName':      'apk-tools',
-              'purl':             'pkg:apk/alpine/apk-tools@2.10.4-r2?arch=x86_64&distro=3.10.3',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-36159',
-                'https://github.com/freebsd/freebsd-src/commits/main/lib/libfetch',
-                'https://gitlab.alpinelinux.org/alpine/apk-tools/-/issues/10749',
-                'https://lists.apache.org/thread.html/r61db8e7dcb56dc000a5387a88f7a473bacec5ee01b9ff3f55308aacc%40%3Cdev.kafka.apache.org%3E',
-                'https://lists.apache.org/thread.html/r61db8e7dcb56dc000a5387a88f7a473bacec5ee01b9ff3f55308aacc%40%3Cusers.kafka.apache.org%3E',
-                'https://lists.apache.org/thread.html/rbf4ce74b0d1fa9810dec50ba3ace0caeea677af7c27a97111c06ccb7%40%3Cdev.kafka.apache.org%3E',
-                'https://lists.apache.org/thread.html/rbf4ce74b0d1fa9810dec50ba3ace0caeea677af7c27a97111c06ccb7%40%3Cusers.kafka.apache.org%3E',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-36159',
-                'https://www.cve.org/CVERecord?id=CVE-2021-36159'
-              ],
-              'severity':   'CRITICAL',
-              'suppressed': false,
-              'title':      'libfetch: an out of boundary read while libfetch uses strtol to parse the relevant numbers into address bytes leads to information leak or crash'
-            },
-            {
-              'cve':  'CVE-2021-30139',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-125'
-              ],
-              'description':   'In Alpine Linux apk-tools before 2.12.5, the tarball parser allows a buffer overflow and crash.',
-              'diffID':        'sha256:77cae8ab23bf486355d1b3191259705374f4a11d483b24964d2f729dd8c076a0',
-              'fixedVersions': [
-                '2.10.6-r0'
-              ],
-              'installedVersion': '2.10.4-r2',
-              'packageName':      'apk-tools',
-              'purl':             'pkg:apk/alpine/apk-tools@2.10.4-r2?arch=x86_64&distro=3.10.3',
-              'references':       [
-                'https://gitlab.alpinelinux.org/alpine/apk-tools/-/issues/10741',
-                'https://gitlab.alpinelinux.org/alpine/aports/-/issues/12606'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false
-            },
-            {
-              'cve':  'CVE-2021-28831',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-755'
-              ],
-              'description':   'decompress_gunzip.c in BusyBox through 1.32.1 mishandles the error bit on the huft_build result pointer, with a resultant invalid free or segmentation fault, via malformed gzip data.',
-              'diffID':        'sha256:77cae8ab23bf486355d1b3191259705374f4a11d483b24964d2f729dd8c076a0',
-              'fixedVersions': [
-                '1.30.1-r5'
-              ],
-              'installedVersion': '1.30.1-r2',
-              'packageName':      'busybox',
-              'purl':             'pkg:apk/alpine/busybox@1.30.1-r2?arch=x86_64&distro=3.10.3',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-28831',
-                'https://git.busybox.net/busybox/commit/?id=f25d254dfd4243698c31a4f3153d4ac72aa9e9bd',
-                'https://lists.debian.org/debian-lts-announce/2021/04/msg00001.html',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/3UDQGJRECXFS5EZVDH2OI45FMO436AC4/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/Z7ZIFKPRR32ZYA3WAA2NXFA3QHHOU6FJ/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZASBW7QRRLY5V2R44MQ4QQM4CZIDHM2U/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-28831',
-                'https://security.gentoo.org/glsa/202105-09',
-                'https://security.netapp.com/advisory/ntap-20250509-0005/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://ubuntu.com/security/notices/USN-5179-2',
-                'https://ubuntu.com/security/notices/USN-6335-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-28831'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: invalid free or segmentation fault via malformed gzip data'
-            },
-            {
-              'cve':  'CVE-2020-1967',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'nvd': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-476'
-              ],
-              'description':   'Server or client applications that call the SSL_check_chain() function during or after a TLS 1.3 handshake may crash due to a NULL pointer dereference as a result of incorrect handling of the "signature_algorithms_cert" TLS extension. The crash occurs if an invalid or unrecognised signature algorithm is received from the peer. This could be exploited by a malicious peer in a Denial of Service attack. OpenSSL version 1.1.1d, 1.1.1e, and 1.1.1f are affected by this issue. This issue did not affect OpenSSL versions prior to 1.1.1d. Fixed in OpenSSL 1.1.1g (Affected 1.1.1d-1.1.1f).',
-              'diffID':        'sha256:77cae8ab23bf486355d1b3191259705374f4a11d483b24964d2f729dd8c076a0',
-              'fixedVersions': [
-                '1.1.1g-r0'
-              ],
-              'installedVersion': '1.1.1d-r0',
-              'packageName':      'libcrypto1.1',
-              'purl':             'pkg:apk/alpine/libcrypto1.1@1.1.1d-r0?arch=x86_64&distro=3.10.3',
-              'references':       [
-                'http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00004.html',
-                'http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00011.html',
-                'http://packetstormsecurity.com/files/157527/OpenSSL-signature_algorithms_cert-Denial-Of-Service.html',
-                'http://seclists.org/fulldisclosure/2020/May/5',
-                'http://www.openwall.com/lists/oss-security/2020/04/22/2',
-                'https://access.redhat.com/security/cve/CVE-2020-1967',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=eb563247aef3e83dda7679c43f9649270462e5b1',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=eb563247aef3e83dda7679c43f9649270462e5b1',
-                'https://github.com/irsl/CVE-2020-1967',
-                'https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA44440',
-                'https://lists.apache.org/thread.html/r66ea9c436da150683432db5fbc8beb8ae01886c6459ac30c2cea7345%40%3Cdev.tomcat.apache.org%3E',
-                'https://lists.apache.org/thread.html/r66ea9c436da150683432db5fbc8beb8ae01886c6459ac30c2cea7345@%3Cdev.tomcat.apache.org%3E',
-                'https://lists.apache.org/thread.html/r94d6ac3f010a38fccf4f432b12180a13fa1cf303559bd805648c9064%40%3Cdev.tomcat.apache.org%3E',
-                'https://lists.apache.org/thread.html/r94d6ac3f010a38fccf4f432b12180a13fa1cf303559bd805648c9064@%3Cdev.tomcat.apache.org%3E',
-                'https://lists.apache.org/thread.html/r9a41e304992ce6aec6585a87842b4f2e692604f5c892c37e3b0587ee%40%3Cdev.tomcat.apache.org%3E',
-                'https://lists.apache.org/thread.html/r9a41e304992ce6aec6585a87842b4f2e692604f5c892c37e3b0587ee@%3Cdev.tomcat.apache.org%3E',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DDHOAATPWJCXRNFMJ2SASDBBNU5RJONY/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/EXDDAOWSAIEFQNBHWYE6PPYFV4QXGMCD/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/XVEP3LAK4JSPRXFO4QF4GG2IVXADV3SO/',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/DDHOAATPWJCXRNFMJ2SASDBBNU5RJONY',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/EXDDAOWSAIEFQNBHWYE6PPYFV4QXGMCD',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/XVEP3LAK4JSPRXFO4QF4GG2IVXADV3SO',
-                'https://nvd.nist.gov/vuln/detail/CVE-2020-1967',
-                'https://rustsec.org/advisories/RUSTSEC-2020-0015.html',
-                'https://security.FreeBSD.org/advisories/FreeBSD-SA-20:11.openssl.asc',
-                'https://security.gentoo.org/glsa/202004-10',
-                'https://security.netapp.com/advisory/ntap-20200424-0003',
-                'https://security.netapp.com/advisory/ntap-20200424-0003/',
-                'https://security.netapp.com/advisory/ntap-20200717-0004',
-                'https://security.netapp.com/advisory/ntap-20200717-0004/',
-                'https://www.cve.org/CVERecord?id=CVE-2020-1967',
-                'https://www.debian.org/security/2020/dsa-4661',
-                'https://www.openssl.org/news/secadv/20200421.txt',
-                'https://www.oracle.com//security-alerts/cpujul2021.html',
-                'https://www.oracle.com/security-alerts/cpuApr2021.html',
-                'https://www.oracle.com/security-alerts/cpujan2021.html',
-                'https://www.oracle.com/security-alerts/cpujul2020.html',
-                'https://www.oracle.com/security-alerts/cpuoct2020.html',
-                'https://www.oracle.com/security-alerts/cpuoct2021.html',
-                'https://www.synology.com/security/advisory/Synology_SA_20_05',
-                'https://www.synology.com/security/advisory/Synology_SA_20_05_OpenSSL',
-                'https://www.tenable.com/security/tns-2020-03',
-                'https://www.tenable.com/security/tns-2020-04',
-                'https://www.tenable.com/security/tns-2020-11',
-                'https://www.tenable.com/security/tns-2021-10'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: Segmentation fault in SSL_check_chain causes denial of service'
-            },
-            {
-              'cve':  'CVE-2021-23840',
-              'cvss': {
-                'bitnami': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'ghsa': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'nvd': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-190'
-              ],
-              'description':   'Calls to EVP_CipherUpdate, EVP_EncryptUpdate and EVP_DecryptUpdate may overflow the output length argument in some cases where the input length is close to the maximum permissable length for an integer on the platform. In such cases the return value from the function call will be 1 (indicating success), but the output length value will be negative. This could cause applications to behave incorrectly or crash. OpenSSL versions 1.1.1i and below are affected by this issue. Users of these versions should upgrade to OpenSSL 1.1.1j. OpenSSL versions 1.0.2x and below are affected by this issue. However OpenSSL 1.0.2 is out of support and no longer receiving public updates. Premium support customers of OpenSSL 1.0.2 should upgrade to 1.0.2y. Other users should upgrade to 1.1.1j. Fixed in OpenSSL 1.1.1j (Affected 1.1.1-1.1.1i). Fixed in OpenSSL 1.0.2y (Affected 1.0.2-1.0.2x).',
-              'diffID':        'sha256:77cae8ab23bf486355d1b3191259705374f4a11d483b24964d2f729dd8c076a0',
-              'fixedVersions': [
-                '1.1.1j-r0'
-              ],
-              'installedVersion': '1.1.1d-r0',
-              'packageName':      'libcrypto1.1',
-              'purl':             'pkg:apk/alpine/libcrypto1.1@1.1.1d-r0?arch=x86_64&distro=3.10.3',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-23840',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=1908036',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=1930310',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=1930324',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=1934534',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=1934600',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=1939637',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=1940085',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=1965362',
-                'https://cert-portal.siemens.com/productcert/pdf/ssa-389290.pdf',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-23840',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-23841',
-                'https://errata.rockylinux.org/RLSA-2021:4424',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=6a51b9e1d0cf0bf8515f7201b68fb0a3482b3dc1',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=9b1129239f3ebb1d1c98ce9ed41d5c9476c47cb2',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=6a51b9e1d0cf0bf8515f7201b68fb0a3482b3dc1',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=9b1129239f3ebb1d1c98ce9ed41d5c9476c47cb2',
-                'https://github.com/alexcrichton/openssl-src-rs',
-                'https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA44846',
-                'https://kc.mcafee.com/corporate/index?page=content&id=SB10366',
-                'https://linux.oracle.com/cve/CVE-2021-23840.html',
-                'https://linux.oracle.com/errata/ELSA-2021-9561.html',
-                'https://lists.apache.org/thread.html/r58af02e294bd07f487e2c64ffc0a29b837db5600e33b6e698b9d696b%40%3Cissues.bookkeeper.apache.org%3E',
-                'https://lists.apache.org/thread.html/r58af02e294bd07f487e2c64ffc0a29b837db5600e33b6e698b9d696b@%3Cissues.bookkeeper.apache.org%3E',
-                'https://lists.apache.org/thread.html/rf4c02775860db415b4955778a131c2795223f61cb8c6a450893651e4%40%3Cissues.bookkeeper.apache.org%3E',
-                'https://lists.apache.org/thread.html/rf4c02775860db415b4955778a131c2795223f61cb8c6a450893651e4@%3Cissues.bookkeeper.apache.org%3E',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-23840',
-                'https://rustsec.org/advisories/RUSTSEC-2021-0057.html',
-                'https://security.gentoo.org/glsa/202103-03',
-                'https://security.netapp.com/advisory/ntap-20210219-0009',
-                'https://security.netapp.com/advisory/ntap-20210219-0009/',
-                'https://security.netapp.com/advisory/ntap-20240621-0006/',
-                'https://ubuntu.com/security/notices/USN-4738-1',
-                'https://ubuntu.com/security/notices/USN-5088-1',
-                'https://ubuntu.com/security/notices/USN-7018-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-23840',
-                'https://www.debian.org/security/2021/dsa-4855',
-                'https://www.openssl.org/news/secadv/20210216.txt',
-                'https://www.oracle.com//security-alerts/cpujul2021.html',
-                'https://www.oracle.com/security-alerts/cpuApr2021.html',
-                'https://www.oracle.com/security-alerts/cpuapr2022.html',
-                'https://www.oracle.com/security-alerts/cpujan2022.html',
-                'https://www.oracle.com/security-alerts/cpuoct2021.html',
-                'https://www.tenable.com/security/tns-2021-03',
-                'https://www.tenable.com/security/tns-2021-09',
-                'https://www.tenable.com/security/tns-2021-10'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: integer overflow in CipherUpdate'
-            },
-            {
-              'cve':  'CVE-2021-3450',
-              'cvss': {
-                'bitnami': {
-                  'v3score':  '7.4',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N'
-                },
-                'ghsa': {
-                  'v3score':  '7.4',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N'
-                },
-                'nvd': {
-                  'v3score':  '7.4',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N'
-                },
-                'redhat': {
-                  'v3score':  '7.4',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-295'
-              ],
-              'description':   'The X509_V_FLAG_X509_STRICT flag enables additional security checks of the certificates present in a certificate chain. It is not set by default. Starting from OpenSSL version 1.1.1h a check to disallow certificates in the chain that have explicitly encoded elliptic curve parameters was added as an additional strict check. An error in the implementation of this check meant that the result of a previous check to confirm that certificates in the chain are valid CA certificates was overwritten. This effectively bypasses the check that non-CA certificates must not be able to issue other certificates. If a "purpose" has been configured then there is a subsequent opportunity for checks that the certificate is a valid CA. All of the named "purpose" values implemented in libcrypto perform this check. Therefore, where a purpose is set the certificate chain will still be rejected even when the strict flag has been used. A purpose is set by default in libssl client and server certificate verification routines, but it can be overridden or removed by an application. In order to be affected, an application must explicitly set the X509_V_FLAG_X509_STRICT verification flag and either not set a purpose for the certificate verification or, in the case of TLS client or server applications, override the default purpose. OpenSSL versions 1.1.1h and newer are affected by this issue. Users of these versions should upgrade to OpenSSL 1.1.1k. OpenSSL 1.0.2 is not impacted by this issue. Fixed in OpenSSL 1.1.1k (Affected 1.1.1h-1.1.1j).',
-              'diffID':        'sha256:77cae8ab23bf486355d1b3191259705374f4a11d483b24964d2f729dd8c076a0',
-              'fixedVersions': [
-                '1.1.1k-r0'
-              ],
-              'installedVersion': '1.1.1d-r0',
-              'packageName':      'libcrypto1.1',
-              'purl':             'pkg:apk/alpine/libcrypto1.1@1.1.1d-r0?arch=x86_64&distro=3.10.3',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2021/03/27/1',
-                'http://www.openwall.com/lists/oss-security/2021/03/27/2',
-                'http://www.openwall.com/lists/oss-security/2021/03/28/3',
-                'http://www.openwall.com/lists/oss-security/2021/03/28/4',
-                'https://access.redhat.com/security/cve/CVE-2021-3450',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=1941547',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=1941554',
-                'https://cert-portal.siemens.com/productcert/pdf/ssa-389290.pdf',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-3449',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-3450',
-                'https://errata.rockylinux.org/RLSA-2021:1024',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=2a40b7bc7b94dd7de897a74571e7024f0cf0d63b',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=2a40b7bc7b94dd7de897a74571e7024f0cf0d63b',
-                'https://github.com/alexcrichton/openssl-src-rs',
-                'https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA44845',
-                'https://kc.mcafee.com/corporate/index?page=content&id=SB10356',
-                'https://linux.oracle.com/cve/CVE-2021-3450.html',
-                'https://linux.oracle.com/errata/ELSA-2021-9151.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CCBFLLVQVILIVGZMBJL3IXZGKWQISYNP/',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/CCBFLLVQVILIVGZMBJL3IXZGKWQISYNP',
-                'https://mta.openssl.org/pipermail/openssl-announce/2021-March/000198.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-3450',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2021-0013',
-                'https://rustsec.org/advisories/RUSTSEC-2021-0056.html',
-                'https://security.FreeBSD.org/advisories/FreeBSD-SA-21:07.openssl.asc',
-                'https://security.gentoo.org/glsa/202103-03',
-                'https://security.netapp.com/advisory/ntap-20210326-0006',
-                'https://security.netapp.com/advisory/ntap-20210326-0006/',
-                'https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-openssl-2021-GHY28dJd',
-                'https://www.cve.org/CVERecord?id=CVE-2021-3450',
-                'https://www.openssl.org/news/secadv/20210325.txt',
-                'https://www.oracle.com//security-alerts/cpujul2021.html',
-                'https://www.oracle.com/security-alerts/cpuApr2021.html',
-                'https://www.oracle.com/security-alerts/cpuapr2022.html',
-                'https://www.oracle.com/security-alerts/cpujul2022.html',
-                'https://www.oracle.com/security-alerts/cpuoct2021.html',
-                'https://www.tenable.com/security/tns-2021-05',
-                'https://www.tenable.com/security/tns-2021-08',
-                'https://www.tenable.com/security/tns-2021-09'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: CA certificate check bypass with X509_V_FLAG_X509_STRICT'
-            },
-            {
-              'cve':  'CVE-2019-1551',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N'
-                },
-                'redhat': {
-                  'v3score':  '4.8',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-190'
-              ],
-              'description':   'There is an overflow bug in the x64_64 Montgomery squaring procedure used in exponentiation with 512-bit moduli. No EC algorithms are affected. Analysis suggests that attacks against 2-prime RSA1024, 3-prime RSA1536, and DSA1024 as a result of this defect would be very difficult to perform and are not believed likely. Attacks against DH512 are considered just feasible. However, for an attack the target would have to re-use the DH512 private key, which is not recommended anyway. Also applications directly using the low level API BN_mod_exp may be affected if they use BN_FLG_CONSTTIME. Fixed in OpenSSL 1.1.1e (Affected 1.1.1-1.1.1d). Fixed in OpenSSL 1.0.2u (Affected 1.0.2-1.0.2t).',
-              'diffID':        'sha256:77cae8ab23bf486355d1b3191259705374f4a11d483b24964d2f729dd8c076a0',
-              'fixedVersions': [
-                '1.1.1d-r2'
-              ],
-              'installedVersion': '1.1.1d-r0',
-              'packageName':      'libcrypto1.1',
-              'purl':             'pkg:apk/alpine/libcrypto1.1@1.1.1d-r0?arch=x86_64&distro=3.10.3',
-              'references':       [
-                'http://lists.opensuse.org/opensuse-security-announce/2020-01/msg00030.html',
-                'http://packetstormsecurity.com/files/155754/Slackware-Security-Advisory-openssl-Updates.html',
-                'https://access.redhat.com/security/cve/CVE-2019-1551',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=419102400a2811582a7a3d4a4e317d72e5ce0a8f',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=f1c5eea8a817075d31e43f5876993c6710238c98',
-                'https://github.com/openssl/openssl/pull/10575',
-                'https://linux.oracle.com/cve/CVE-2019-1551.html',
-                'https://linux.oracle.com/errata/ELSA-2020-4514.html',
-                'https://lists.debian.org/debian-lts-announce/2022/03/msg00023.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DDHOAATPWJCXRNFMJ2SASDBBNU5RJONY/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/EXDDAOWSAIEFQNBHWYE6PPYFV4QXGMCD/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/XVEP3LAK4JSPRXFO4QF4GG2IVXADV3SO/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2019-1551',
-                'https://seclists.org/bugtraq/2019/Dec/39',
-                'https://seclists.org/bugtraq/2019/Dec/46',
-                'https://security.gentoo.org/glsa/202004-10',
-                'https://security.netapp.com/advisory/ntap-20191210-0001/',
-                'https://ubuntu.com/security/notices/USN-4376-1',
-                'https://ubuntu.com/security/notices/USN-4504-1',
-                'https://usn.ubuntu.com/4376-1/',
-                'https://usn.ubuntu.com/4504-1/',
-                'https://www.cve.org/CVERecord?id=CVE-2019-1551',
-                'https://www.debian.org/security/2019/dsa-4594',
-                'https://www.debian.org/security/2021/dsa-4855',
-                'https://www.openssl.org/news/secadv/20191206.txt',
-                'https://www.oracle.com/security-alerts/cpuApr2021.html',
-                'https://www.oracle.com/security-alerts/cpujan2021.html',
-                'https://www.oracle.com/security-alerts/cpujul2020.html',
-                'https://www.tenable.com/security/tns-2019-09',
-                'https://www.tenable.com/security/tns-2020-03',
-                'https://www.tenable.com/security/tns-2020-11',
-                'https://www.tenable.com/security/tns-2021-10'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: Integer overflow in RSAZ modular exponentiation on x86_64'
-            },
-            {
-              'cve':  'CVE-2020-1971',
-              'cvss': {
-                'bitnami': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'nvd': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-476'
-              ],
-              'description':   "The X.509 GeneralName type is a generic type for representing different types of names. One of those name types is known as EDIPartyName. OpenSSL provides a function GENERAL_NAME_cmp which compares different instances of a GENERAL_NAME to see if they are equal or not. This function behaves incorrectly when both GENERAL_NAMEs contain an EDIPARTYNAME. A NULL pointer dereference and a crash may occur leading to a possible denial of service attack. OpenSSL itself uses the GENERAL_NAME_cmp function for two purposes: 1) Comparing CRL distribution point names between an available CRL and a CRL distribution point embedded in an X509 certificate 2) When verifying that a timestamp response token signer matches the timestamp authority name (exposed via the API functions TS_RESP_verify_response and TS_RESP_verify_token) If an attacker can control both items being compared then that attacker could trigger a crash. For example if the attacker can trick a client or server into checking a malicious certificate against a malicious CRL then this may occur. Note that some applications automatically download CRLs based on a URL embedded in a certificate. This checking happens prior to the signatures on the certificate and CRL being verified. OpenSSL's s_server, s_client and verify tools have support for the \"-crl_download\" option which implements automatic CRL downloading and this attack has been demonstrated to work against those tools. Note that an unrelated bug means that affected versions of OpenSSL cannot parse or construct correct encodings of EDIPARTYNAME. However it is possible to construct a malformed EDIPARTYNAME that OpenSSL's parser will accept and hence trigger this attack. All OpenSSL 1.1.1 and 1.0.2 versions are affected by this issue. Other OpenSSL releases are out of support and have not been checked. Fixed in OpenSSL 1.1.1i (Affected 1.1.1-1.1.1h). Fixed in OpenSSL 1.0.2x (Affected 1.0.2-1.0.2w).",
-              'diffID':        'sha256:77cae8ab23bf486355d1b3191259705374f4a11d483b24964d2f729dd8c076a0',
-              'fixedVersions': [
-                '1.1.1i-r0'
-              ],
-              'installedVersion': '1.1.1d-r0',
-              'packageName':      'libcrypto1.1',
-              'purl':             'pkg:apk/alpine/libcrypto1.1@1.1.1d-r0?arch=x86_64&distro=3.10.3',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2021/09/14/2',
-                'https://access.redhat.com/security/cve/CVE-2020-1971',
-                'https://cert-portal.siemens.com/productcert/pdf/ssa-389290.pdf',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=2154ab83e14ede338d2ede9bbe5cdfce5d5a6c9e',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=f960d81215ebf3f65e03d4d5d857fb9b666d6920',
-                'https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA44676',
-                'https://linux.oracle.com/cve/CVE-2020-1971.html',
-                'https://linux.oracle.com/errata/ELSA-2021-9150.html',
-                'https://lists.apache.org/thread.html/r63c6f2dd363d9b514d0a4bcf624580616a679898cc14c109a49b750c%40%3Cdev.tomcat.apache.org%3E',
-                'https://lists.apache.org/thread.html/rbb769f771711fb274e0a4acb1b5911c8aab544a6ac5e8c12d40c5143%40%3Ccommits.pulsar.apache.org%3E',
-                'https://lists.debian.org/debian-lts-announce/2020/12/msg00020.html',
-                'https://lists.debian.org/debian-lts-announce/2020/12/msg00021.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DGSI34Y5LQ5RYXN4M2I5ZQT65LFVDOUU/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PWPSSZNZOBJU2YR6Z4TGHXKYW3YP5QG7/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2020-1971',
-                'https://security.FreeBSD.org/advisories/FreeBSD-SA-20:33.openssl.asc',
-                'https://security.gentoo.org/glsa/202012-13',
-                'https://security.netapp.com/advisory/ntap-20201218-0005/',
-                'https://security.netapp.com/advisory/ntap-20210513-0002/',
-                'https://security.netapp.com/advisory/ntap-20240621-0006/',
-                'https://ubuntu.com/security/notices/USN-4662-1',
-                'https://ubuntu.com/security/notices/USN-4745-1',
-                'https://www.cve.org/CVERecord?id=CVE-2020-1971',
-                'https://www.debian.org/security/2020/dsa-4807',
-                'https://www.openssl.org/news/secadv/20201208.txt',
-                'https://www.oracle.com//security-alerts/cpujul2021.html',
-                'https://www.oracle.com/security-alerts/cpuApr2021.html',
-                'https://www.oracle.com/security-alerts/cpuapr2022.html',
-                'https://www.oracle.com/security-alerts/cpujan2021.html',
-                'https://www.oracle.com/security-alerts/cpuoct2021.html',
-                'https://www.tenable.com/security/tns-2020-11',
-                'https://www.tenable.com/security/tns-2021-09',
-                'https://www.tenable.com/security/tns-2021-10'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: EDIPARTYNAME NULL pointer de-reference'
-            },
-            {
-              'cve':  'CVE-2021-23841',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'nvd': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-476'
-              ],
-              'description':   'The OpenSSL public API function X509_issuer_and_serial_hash() attempts to create a unique hash value based on the issuer and serial number data contained within an X509 certificate. However it fails to correctly handle any errors that may occur while parsing the issuer field (which might occur if the issuer field is maliciously constructed). This may subsequently result in a NULL pointer deref and a crash leading to a potential denial of service attack. The function X509_issuer_and_serial_hash() is never directly called by OpenSSL itself so applications are only vulnerable if they use this function directly and they use it on certificates that may have been obtained from untrusted sources. OpenSSL versions 1.1.1i and below are affected by this issue. Users of these versions should upgrade to OpenSSL 1.1.1j. OpenSSL versions 1.0.2x and below are affected by this issue. However OpenSSL 1.0.2 is out of support and no longer receiving public updates. Premium support customers of OpenSSL 1.0.2 should upgrade to 1.0.2y. Other users should upgrade to 1.1.1j. Fixed in OpenSSL 1.1.1j (Affected 1.1.1-1.1.1i). Fixed in OpenSSL 1.0.2y (Affected 1.0.2-1.0.2x).',
-              'diffID':        'sha256:77cae8ab23bf486355d1b3191259705374f4a11d483b24964d2f729dd8c076a0',
-              'fixedVersions': [
-                '1.1.1j-r0'
-              ],
-              'installedVersion': '1.1.1d-r0',
-              'packageName':      'libcrypto1.1',
-              'purl':             'pkg:apk/alpine/libcrypto1.1@1.1.1d-r0?arch=x86_64&distro=3.10.3',
-              'references':       [
-                'http://seclists.org/fulldisclosure/2021/May/67',
-                'http://seclists.org/fulldisclosure/2021/May/68',
-                'http://seclists.org/fulldisclosure/2021/May/70',
-                'https://access.redhat.com/security/cve/CVE-2021-23841',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=1908036',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=1930310',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=1930324',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=1934534',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=1934600',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=1939637',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=1940085',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=1965362',
-                'https://cert-portal.siemens.com/productcert/pdf/ssa-637483.pdf',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-23840',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-23841',
-                'https://errata.rockylinux.org/RLSA-2021:4424',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=122a19ab48091c657f7cb1fb3af9fc07bd557bbf',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=8252ee4d90f3f2004d3d0aeeed003ad49c9a7807',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=122a19ab48091c657f7cb1fb3af9fc07bd557bbf',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=6a51b9e1d0cf0bf8515f7201b68fb0a3482b3dc1',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=8252ee4d90f3f2004d3d0aeeed003ad49c9a7807',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=9b1129239f3ebb1d1c98ce9ed41d5c9476c47cb2',
-                'https://github.com/alexcrichton/openssl-src-rs',
-                'https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA44846',
-                'https://linux.oracle.com/cve/CVE-2021-23841.html',
-                'https://linux.oracle.com/errata/ELSA-2021-9561.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-23841',
-                'https://rustsec.org/advisories/RUSTSEC-2021-0058',
-                'https://rustsec.org/advisories/RUSTSEC-2021-0058.html',
-                'https://security.gentoo.org/glsa/202103-03',
-                'https://security.netapp.com/advisory/ntap-20210219-0009',
-                'https://security.netapp.com/advisory/ntap-20210219-0009/',
-                'https://security.netapp.com/advisory/ntap-20210513-0002',
-                'https://security.netapp.com/advisory/ntap-20210513-0002/',
-                'https://security.netapp.com/advisory/ntap-20240621-0006/',
-                'https://support.apple.com/kb/HT212528',
-                'https://support.apple.com/kb/HT212529',
-                'https://support.apple.com/kb/HT212534',
-                'https://ubuntu.com/security/notices/USN-4738-1',
-                'https://ubuntu.com/security/notices/USN-4745-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-23841',
-                'https://www.debian.org/security/2021/dsa-4855',
-                'https://www.openssl.org/news/secadv/20210216.txt',
-                'https://www.oracle.com//security-alerts/cpujul2021.html',
-                'https://www.oracle.com/security-alerts/cpuApr2021.html',
-                'https://www.oracle.com/security-alerts/cpuapr2022.html',
-                'https://www.oracle.com/security-alerts/cpuoct2021.html',
-                'https://www.tenable.com/security/tns-2021-03',
-                'https://www.tenable.com/security/tns-2021-09'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: NULL pointer dereference in X509_issuer_and_serial_hash()'
-            },
-            {
-              'cve':  'CVE-2021-3449',
-              'cvss': {
-                'bitnami': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'ghsa': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'nvd': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-476'
-              ],
-              'description':   'An OpenSSL TLS server may crash if sent a maliciously crafted renegotiation ClientHello message from a client. If a TLSv1.2 renegotiation ClientHello omits the signature_algorithms extension (where it was present in the initial ClientHello), but includes a signature_algorithms_cert extension then a NULL pointer dereference will result, leading to a crash and a denial of service attack. A server is only vulnerable if it has TLSv1.2 and renegotiation enabled (which is the default configuration). OpenSSL TLS clients are not impacted by this issue. All OpenSSL 1.1.1 versions are affected by this issue. Users of these versions should upgrade to OpenSSL 1.1.1k. OpenSSL 1.0.2 is not impacted by this issue. Fixed in OpenSSL 1.1.1k (Affected 1.1.1-1.1.1j).',
-              'diffID':        'sha256:77cae8ab23bf486355d1b3191259705374f4a11d483b24964d2f729dd8c076a0',
-              'fixedVersions': [
-                '1.1.1k-r0'
-              ],
-              'installedVersion': '1.1.1d-r0',
-              'packageName':      'libcrypto1.1',
-              'purl':             'pkg:apk/alpine/libcrypto1.1@1.1.1d-r0?arch=x86_64&distro=3.10.3',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2021/03/27/1',
-                'http://www.openwall.com/lists/oss-security/2021/03/27/2',
-                'http://www.openwall.com/lists/oss-security/2021/03/28/3',
-                'http://www.openwall.com/lists/oss-security/2021/03/28/4',
-                'https://access.redhat.com/security/cve/CVE-2021-3449',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=1941547',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=1941554',
-                'https://cert-portal.siemens.com/productcert/pdf/ssa-389290.pdf',
-                'https://cert-portal.siemens.com/productcert/pdf/ssa-772220.pdf',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-3449',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-3450',
-                'https://errata.rockylinux.org/RLSA-2021:1024',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=fb9fa6b51defd48157eeb207f52181f735d96148',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=fb9fa6b51defd48157eeb207f52181f735d96148',
-                'https://github.com/alexcrichton/openssl-src-rs',
-                'https://github.com/nodejs/node/pull/38083',
-                'https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA44845',
-                'https://kc.mcafee.com/corporate/index?page=content&id=SB10356',
-                'https://linux.oracle.com/cve/CVE-2021-3449.html',
-                'https://linux.oracle.com/errata/ELSA-2021-9151.html',
-                'https://lists.debian.org/debian-lts-announce/2021/08/msg00029.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CCBFLLVQVILIVGZMBJL3IXZGKWQISYNP/',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/CCBFLLVQVILIVGZMBJL3IXZGKWQISYNP',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-3449',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2021-0013',
-                'https://rustsec.org/advisories/RUSTSEC-2021-0055',
-                'https://rustsec.org/advisories/RUSTSEC-2021-0055.html',
-                'https://security.FreeBSD.org/advisories/FreeBSD-SA-21:07.openssl.asc',
-                'https://security.gentoo.org/glsa/202103-03',
-                'https://security.netapp.com/advisory/ntap-20210326-0006',
-                'https://security.netapp.com/advisory/ntap-20210326-0006/',
-                'https://security.netapp.com/advisory/ntap-20210513-0002',
-                'https://security.netapp.com/advisory/ntap-20210513-0002/',
-                'https://security.netapp.com/advisory/ntap-20240621-0006/',
-                'https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-openssl-2021-GHY28dJd',
-                'https://ubuntu.com/security/notices/USN-4891-1',
-                'https://ubuntu.com/security/notices/USN-5038-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-3449',
-                'https://www.debian.org/security/2021/dsa-4875',
-                'https://www.openssl.org/news/secadv/20210325.txt',
-                'https://www.oracle.com//security-alerts/cpujul2021.html',
-                'https://www.oracle.com/security-alerts/cpuApr2021.html',
-                'https://www.oracle.com/security-alerts/cpuapr2022.html',
-                'https://www.oracle.com/security-alerts/cpujul2022.html',
-                'https://www.oracle.com/security-alerts/cpuoct2021.html',
-                'https://www.tenable.com/security/tns-2021-05',
-                'https://www.tenable.com/security/tns-2021-06',
-                'https://www.tenable.com/security/tns-2021-09',
-                'https://www.tenable.com/security/tns-2021-10'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: NULL pointer dereference in signature_algorithms processing'
-            },
-            {
-              'cve':  'CVE-2021-23839',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '3.7',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N'
-                },
-                'redhat': {
-                  'v3score':  '3.7',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-327'
-              ],
-              'description':   'OpenSSL 1.0.2 supports SSLv2. If a client attempts to negotiate SSLv2 with a server that is configured to support both SSLv2 and more recent SSL and TLS versions then a check is made for a version rollback attack when unpadding an RSA signature. Clients that support SSL or TLS versions greater than SSLv2 are supposed to use a special form of padding. A server that supports greater than SSLv2 is supposed to reject connection attempts from a client where this special form of padding is present, because this indicates that a version rollback has occurred (i.e. both client and server support greater than SSLv2, and yet this is the version that is being requested). The implementation of this padding check inverted the logic so that the connection attempt is accepted if the padding is present, and rejected if it is absent. This means that such as server will accept a connection if a version rollback attack has occurred. Further the server will erroneously reject a connection if a normal SSLv2 connection attempt is made. Only OpenSSL 1.0.2 servers from version 1.0.2s to 1.0.2x are affected by this issue. In order to be vulnerable a 1.0.2 server must: 1) have configured SSLv2 support at compile time (this is off by default), 2) have configured SSLv2 support at runtime (this is off by default), 3) have configured SSLv2 ciphersuites (these are not in the default ciphersuite list) OpenSSL 1.1.1 does not have SSLv2 support and therefore is not vulnerable to this issue. The underlying error is in the implementation of the RSA_padding_check_SSLv23() function. This also affects the RSA_SSLV23_PADDING padding mode used by various other functions. Although 1.1.1 does not support SSLv2 the RSA_padding_check_SSLv23() function still exists, as does the RSA_SSLV23_PADDING padding mode. Applications that directly call that function or use that padding mode will encounter this issue. However since there is no support for the SSLv2 protocol in 1.1.1 this is considered a bug and not a security issue in that version. OpenSSL 1.0.2 is out of support and no longer receiving public updates. Premium support customers of OpenSSL 1.0.2 should upgrade to 1.0.2y. Other users should upgrade to 1.1.1j. Fixed in OpenSSL 1.0.2y (Affected 1.0.2s-1.0.2x).',
-              'diffID':        'sha256:77cae8ab23bf486355d1b3191259705374f4a11d483b24964d2f729dd8c076a0',
-              'fixedVersions': [
-                '1.1.1j-r0'
-              ],
-              'installedVersion': '1.1.1d-r0',
-              'packageName':      'libcrypto1.1',
-              'purl':             'pkg:apk/alpine/libcrypto1.1@1.1.1d-r0?arch=x86_64&distro=3.10.3',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-23839',
-                'https://cert-portal.siemens.com/productcert/pdf/ssa-637483.pdf',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=30919ab80a478f2d81f2e9acdcca3fa4740cd547',
-                'https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA44846',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-23839',
-                'https://security.netapp.com/advisory/ntap-20210219-0009/',
-                'https://security.netapp.com/advisory/ntap-20240621-0006/',
-                'https://www.cve.org/CVERecord?id=CVE-2021-23839',
-                'https://www.openssl.org/news/secadv/20210216.txt',
-                'https://www.oracle.com//security-alerts/cpujul2021.html',
-                'https://www.oracle.com/security-alerts/cpuApr2021.html',
-                'https://www.oracle.com/security-alerts/cpuapr2022.html',
-                'https://www.oracle.com/security-alerts/cpuoct2021.html'
-              ],
-              'severity':   'LOW',
-              'suppressed': false,
-              'title':      'openssl: incorrect SSLv2 rollback protection'
-            },
-            {
-              'cve':  'CVE-2020-1967',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'nvd': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-476'
-              ],
-              'description':   'Server or client applications that call the SSL_check_chain() function during or after a TLS 1.3 handshake may crash due to a NULL pointer dereference as a result of incorrect handling of the "signature_algorithms_cert" TLS extension. The crash occurs if an invalid or unrecognised signature algorithm is received from the peer. This could be exploited by a malicious peer in a Denial of Service attack. OpenSSL version 1.1.1d, 1.1.1e, and 1.1.1f are affected by this issue. This issue did not affect OpenSSL versions prior to 1.1.1d. Fixed in OpenSSL 1.1.1g (Affected 1.1.1d-1.1.1f).',
-              'diffID':        'sha256:77cae8ab23bf486355d1b3191259705374f4a11d483b24964d2f729dd8c076a0',
-              'fixedVersions': [
-                '1.1.1g-r0'
-              ],
-              'installedVersion': '1.1.1d-r0',
-              'packageName':      'libssl1.1',
-              'purl':             'pkg:apk/alpine/libssl1.1@1.1.1d-r0?arch=x86_64&distro=3.10.3',
-              'references':       [
-                'http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00004.html',
-                'http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00011.html',
-                'http://packetstormsecurity.com/files/157527/OpenSSL-signature_algorithms_cert-Denial-Of-Service.html',
-                'http://seclists.org/fulldisclosure/2020/May/5',
-                'http://www.openwall.com/lists/oss-security/2020/04/22/2',
-                'https://access.redhat.com/security/cve/CVE-2020-1967',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=eb563247aef3e83dda7679c43f9649270462e5b1',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=eb563247aef3e83dda7679c43f9649270462e5b1',
-                'https://github.com/irsl/CVE-2020-1967',
-                'https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA44440',
-                'https://lists.apache.org/thread.html/r66ea9c436da150683432db5fbc8beb8ae01886c6459ac30c2cea7345%40%3Cdev.tomcat.apache.org%3E',
-                'https://lists.apache.org/thread.html/r66ea9c436da150683432db5fbc8beb8ae01886c6459ac30c2cea7345@%3Cdev.tomcat.apache.org%3E',
-                'https://lists.apache.org/thread.html/r94d6ac3f010a38fccf4f432b12180a13fa1cf303559bd805648c9064%40%3Cdev.tomcat.apache.org%3E',
-                'https://lists.apache.org/thread.html/r94d6ac3f010a38fccf4f432b12180a13fa1cf303559bd805648c9064@%3Cdev.tomcat.apache.org%3E',
-                'https://lists.apache.org/thread.html/r9a41e304992ce6aec6585a87842b4f2e692604f5c892c37e3b0587ee%40%3Cdev.tomcat.apache.org%3E',
-                'https://lists.apache.org/thread.html/r9a41e304992ce6aec6585a87842b4f2e692604f5c892c37e3b0587ee@%3Cdev.tomcat.apache.org%3E',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DDHOAATPWJCXRNFMJ2SASDBBNU5RJONY/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/EXDDAOWSAIEFQNBHWYE6PPYFV4QXGMCD/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/XVEP3LAK4JSPRXFO4QF4GG2IVXADV3SO/',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/DDHOAATPWJCXRNFMJ2SASDBBNU5RJONY',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/EXDDAOWSAIEFQNBHWYE6PPYFV4QXGMCD',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/XVEP3LAK4JSPRXFO4QF4GG2IVXADV3SO',
-                'https://nvd.nist.gov/vuln/detail/CVE-2020-1967',
-                'https://rustsec.org/advisories/RUSTSEC-2020-0015.html',
-                'https://security.FreeBSD.org/advisories/FreeBSD-SA-20:11.openssl.asc',
-                'https://security.gentoo.org/glsa/202004-10',
-                'https://security.netapp.com/advisory/ntap-20200424-0003',
-                'https://security.netapp.com/advisory/ntap-20200424-0003/',
-                'https://security.netapp.com/advisory/ntap-20200717-0004',
-                'https://security.netapp.com/advisory/ntap-20200717-0004/',
-                'https://www.cve.org/CVERecord?id=CVE-2020-1967',
-                'https://www.debian.org/security/2020/dsa-4661',
-                'https://www.openssl.org/news/secadv/20200421.txt',
-                'https://www.oracle.com//security-alerts/cpujul2021.html',
-                'https://www.oracle.com/security-alerts/cpuApr2021.html',
-                'https://www.oracle.com/security-alerts/cpujan2021.html',
-                'https://www.oracle.com/security-alerts/cpujul2020.html',
-                'https://www.oracle.com/security-alerts/cpuoct2020.html',
-                'https://www.oracle.com/security-alerts/cpuoct2021.html',
-                'https://www.synology.com/security/advisory/Synology_SA_20_05',
-                'https://www.synology.com/security/advisory/Synology_SA_20_05_OpenSSL',
-                'https://www.tenable.com/security/tns-2020-03',
-                'https://www.tenable.com/security/tns-2020-04',
-                'https://www.tenable.com/security/tns-2020-11',
-                'https://www.tenable.com/security/tns-2021-10'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: Segmentation fault in SSL_check_chain causes denial of service'
-            },
-            {
-              'cve':  'CVE-2021-23840',
-              'cvss': {
-                'bitnami': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'ghsa': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'nvd': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-190'
-              ],
-              'description':   'Calls to EVP_CipherUpdate, EVP_EncryptUpdate and EVP_DecryptUpdate may overflow the output length argument in some cases where the input length is close to the maximum permissable length for an integer on the platform. In such cases the return value from the function call will be 1 (indicating success), but the output length value will be negative. This could cause applications to behave incorrectly or crash. OpenSSL versions 1.1.1i and below are affected by this issue. Users of these versions should upgrade to OpenSSL 1.1.1j. OpenSSL versions 1.0.2x and below are affected by this issue. However OpenSSL 1.0.2 is out of support and no longer receiving public updates. Premium support customers of OpenSSL 1.0.2 should upgrade to 1.0.2y. Other users should upgrade to 1.1.1j. Fixed in OpenSSL 1.1.1j (Affected 1.1.1-1.1.1i). Fixed in OpenSSL 1.0.2y (Affected 1.0.2-1.0.2x).',
-              'diffID':        'sha256:77cae8ab23bf486355d1b3191259705374f4a11d483b24964d2f729dd8c076a0',
-              'fixedVersions': [
-                '1.1.1j-r0'
-              ],
-              'installedVersion': '1.1.1d-r0',
-              'packageName':      'libssl1.1',
-              'purl':             'pkg:apk/alpine/libssl1.1@1.1.1d-r0?arch=x86_64&distro=3.10.3',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-23840',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=1908036',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=1930310',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=1930324',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=1934534',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=1934600',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=1939637',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=1940085',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=1965362',
-                'https://cert-portal.siemens.com/productcert/pdf/ssa-389290.pdf',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-23840',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-23841',
-                'https://errata.rockylinux.org/RLSA-2021:4424',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=6a51b9e1d0cf0bf8515f7201b68fb0a3482b3dc1',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=9b1129239f3ebb1d1c98ce9ed41d5c9476c47cb2',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=6a51b9e1d0cf0bf8515f7201b68fb0a3482b3dc1',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=9b1129239f3ebb1d1c98ce9ed41d5c9476c47cb2',
-                'https://github.com/alexcrichton/openssl-src-rs',
-                'https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA44846',
-                'https://kc.mcafee.com/corporate/index?page=content&id=SB10366',
-                'https://linux.oracle.com/cve/CVE-2021-23840.html',
-                'https://linux.oracle.com/errata/ELSA-2021-9561.html',
-                'https://lists.apache.org/thread.html/r58af02e294bd07f487e2c64ffc0a29b837db5600e33b6e698b9d696b%40%3Cissues.bookkeeper.apache.org%3E',
-                'https://lists.apache.org/thread.html/r58af02e294bd07f487e2c64ffc0a29b837db5600e33b6e698b9d696b@%3Cissues.bookkeeper.apache.org%3E',
-                'https://lists.apache.org/thread.html/rf4c02775860db415b4955778a131c2795223f61cb8c6a450893651e4%40%3Cissues.bookkeeper.apache.org%3E',
-                'https://lists.apache.org/thread.html/rf4c02775860db415b4955778a131c2795223f61cb8c6a450893651e4@%3Cissues.bookkeeper.apache.org%3E',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-23840',
-                'https://rustsec.org/advisories/RUSTSEC-2021-0057.html',
-                'https://security.gentoo.org/glsa/202103-03',
-                'https://security.netapp.com/advisory/ntap-20210219-0009',
-                'https://security.netapp.com/advisory/ntap-20210219-0009/',
-                'https://security.netapp.com/advisory/ntap-20240621-0006/',
-                'https://ubuntu.com/security/notices/USN-4738-1',
-                'https://ubuntu.com/security/notices/USN-5088-1',
-                'https://ubuntu.com/security/notices/USN-7018-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-23840',
-                'https://www.debian.org/security/2021/dsa-4855',
-                'https://www.openssl.org/news/secadv/20210216.txt',
-                'https://www.oracle.com//security-alerts/cpujul2021.html',
-                'https://www.oracle.com/security-alerts/cpuApr2021.html',
-                'https://www.oracle.com/security-alerts/cpuapr2022.html',
-                'https://www.oracle.com/security-alerts/cpujan2022.html',
-                'https://www.oracle.com/security-alerts/cpuoct2021.html',
-                'https://www.tenable.com/security/tns-2021-03',
-                'https://www.tenable.com/security/tns-2021-09',
-                'https://www.tenable.com/security/tns-2021-10'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: integer overflow in CipherUpdate'
-            },
-            {
-              'cve':  'CVE-2021-3450',
-              'cvss': {
-                'bitnami': {
-                  'v3score':  '7.4',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N'
-                },
-                'ghsa': {
-                  'v3score':  '7.4',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N'
-                },
-                'nvd': {
-                  'v3score':  '7.4',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N'
-                },
-                'redhat': {
-                  'v3score':  '7.4',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-295'
-              ],
-              'description':   'The X509_V_FLAG_X509_STRICT flag enables additional security checks of the certificates present in a certificate chain. It is not set by default. Starting from OpenSSL version 1.1.1h a check to disallow certificates in the chain that have explicitly encoded elliptic curve parameters was added as an additional strict check. An error in the implementation of this check meant that the result of a previous check to confirm that certificates in the chain are valid CA certificates was overwritten. This effectively bypasses the check that non-CA certificates must not be able to issue other certificates. If a "purpose" has been configured then there is a subsequent opportunity for checks that the certificate is a valid CA. All of the named "purpose" values implemented in libcrypto perform this check. Therefore, where a purpose is set the certificate chain will still be rejected even when the strict flag has been used. A purpose is set by default in libssl client and server certificate verification routines, but it can be overridden or removed by an application. In order to be affected, an application must explicitly set the X509_V_FLAG_X509_STRICT verification flag and either not set a purpose for the certificate verification or, in the case of TLS client or server applications, override the default purpose. OpenSSL versions 1.1.1h and newer are affected by this issue. Users of these versions should upgrade to OpenSSL 1.1.1k. OpenSSL 1.0.2 is not impacted by this issue. Fixed in OpenSSL 1.1.1k (Affected 1.1.1h-1.1.1j).',
-              'diffID':        'sha256:77cae8ab23bf486355d1b3191259705374f4a11d483b24964d2f729dd8c076a0',
-              'fixedVersions': [
-                '1.1.1k-r0'
-              ],
-              'installedVersion': '1.1.1d-r0',
-              'packageName':      'libssl1.1',
-              'purl':             'pkg:apk/alpine/libssl1.1@1.1.1d-r0?arch=x86_64&distro=3.10.3',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2021/03/27/1',
-                'http://www.openwall.com/lists/oss-security/2021/03/27/2',
-                'http://www.openwall.com/lists/oss-security/2021/03/28/3',
-                'http://www.openwall.com/lists/oss-security/2021/03/28/4',
-                'https://access.redhat.com/security/cve/CVE-2021-3450',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=1941547',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=1941554',
-                'https://cert-portal.siemens.com/productcert/pdf/ssa-389290.pdf',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-3449',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-3450',
-                'https://errata.rockylinux.org/RLSA-2021:1024',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=2a40b7bc7b94dd7de897a74571e7024f0cf0d63b',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=2a40b7bc7b94dd7de897a74571e7024f0cf0d63b',
-                'https://github.com/alexcrichton/openssl-src-rs',
-                'https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA44845',
-                'https://kc.mcafee.com/corporate/index?page=content&id=SB10356',
-                'https://linux.oracle.com/cve/CVE-2021-3450.html',
-                'https://linux.oracle.com/errata/ELSA-2021-9151.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CCBFLLVQVILIVGZMBJL3IXZGKWQISYNP/',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/CCBFLLVQVILIVGZMBJL3IXZGKWQISYNP',
-                'https://mta.openssl.org/pipermail/openssl-announce/2021-March/000198.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-3450',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2021-0013',
-                'https://rustsec.org/advisories/RUSTSEC-2021-0056.html',
-                'https://security.FreeBSD.org/advisories/FreeBSD-SA-21:07.openssl.asc',
-                'https://security.gentoo.org/glsa/202103-03',
-                'https://security.netapp.com/advisory/ntap-20210326-0006',
-                'https://security.netapp.com/advisory/ntap-20210326-0006/',
-                'https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-openssl-2021-GHY28dJd',
-                'https://www.cve.org/CVERecord?id=CVE-2021-3450',
-                'https://www.openssl.org/news/secadv/20210325.txt',
-                'https://www.oracle.com//security-alerts/cpujul2021.html',
-                'https://www.oracle.com/security-alerts/cpuApr2021.html',
-                'https://www.oracle.com/security-alerts/cpuapr2022.html',
-                'https://www.oracle.com/security-alerts/cpujul2022.html',
-                'https://www.oracle.com/security-alerts/cpuoct2021.html',
-                'https://www.tenable.com/security/tns-2021-05',
-                'https://www.tenable.com/security/tns-2021-08',
-                'https://www.tenable.com/security/tns-2021-09'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: CA certificate check bypass with X509_V_FLAG_X509_STRICT'
-            },
-            {
-              'cve':  'CVE-2019-1551',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N'
-                },
-                'redhat': {
-                  'v3score':  '4.8',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-190'
-              ],
-              'description':   'There is an overflow bug in the x64_64 Montgomery squaring procedure used in exponentiation with 512-bit moduli. No EC algorithms are affected. Analysis suggests that attacks against 2-prime RSA1024, 3-prime RSA1536, and DSA1024 as a result of this defect would be very difficult to perform and are not believed likely. Attacks against DH512 are considered just feasible. However, for an attack the target would have to re-use the DH512 private key, which is not recommended anyway. Also applications directly using the low level API BN_mod_exp may be affected if they use BN_FLG_CONSTTIME. Fixed in OpenSSL 1.1.1e (Affected 1.1.1-1.1.1d). Fixed in OpenSSL 1.0.2u (Affected 1.0.2-1.0.2t).',
-              'diffID':        'sha256:77cae8ab23bf486355d1b3191259705374f4a11d483b24964d2f729dd8c076a0',
-              'fixedVersions': [
-                '1.1.1d-r2'
-              ],
-              'installedVersion': '1.1.1d-r0',
-              'packageName':      'libssl1.1',
-              'purl':             'pkg:apk/alpine/libssl1.1@1.1.1d-r0?arch=x86_64&distro=3.10.3',
-              'references':       [
-                'http://lists.opensuse.org/opensuse-security-announce/2020-01/msg00030.html',
-                'http://packetstormsecurity.com/files/155754/Slackware-Security-Advisory-openssl-Updates.html',
-                'https://access.redhat.com/security/cve/CVE-2019-1551',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=419102400a2811582a7a3d4a4e317d72e5ce0a8f',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=f1c5eea8a817075d31e43f5876993c6710238c98',
-                'https://github.com/openssl/openssl/pull/10575',
-                'https://linux.oracle.com/cve/CVE-2019-1551.html',
-                'https://linux.oracle.com/errata/ELSA-2020-4514.html',
-                'https://lists.debian.org/debian-lts-announce/2022/03/msg00023.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DDHOAATPWJCXRNFMJ2SASDBBNU5RJONY/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/EXDDAOWSAIEFQNBHWYE6PPYFV4QXGMCD/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/XVEP3LAK4JSPRXFO4QF4GG2IVXADV3SO/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2019-1551',
-                'https://seclists.org/bugtraq/2019/Dec/39',
-                'https://seclists.org/bugtraq/2019/Dec/46',
-                'https://security.gentoo.org/glsa/202004-10',
-                'https://security.netapp.com/advisory/ntap-20191210-0001/',
-                'https://ubuntu.com/security/notices/USN-4376-1',
-                'https://ubuntu.com/security/notices/USN-4504-1',
-                'https://usn.ubuntu.com/4376-1/',
-                'https://usn.ubuntu.com/4504-1/',
-                'https://www.cve.org/CVERecord?id=CVE-2019-1551',
-                'https://www.debian.org/security/2019/dsa-4594',
-                'https://www.debian.org/security/2021/dsa-4855',
-                'https://www.openssl.org/news/secadv/20191206.txt',
-                'https://www.oracle.com/security-alerts/cpuApr2021.html',
-                'https://www.oracle.com/security-alerts/cpujan2021.html',
-                'https://www.oracle.com/security-alerts/cpujul2020.html',
-                'https://www.tenable.com/security/tns-2019-09',
-                'https://www.tenable.com/security/tns-2020-03',
-                'https://www.tenable.com/security/tns-2020-11',
-                'https://www.tenable.com/security/tns-2021-10'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: Integer overflow in RSAZ modular exponentiation on x86_64'
-            },
-            {
-              'cve':  'CVE-2020-1971',
-              'cvss': {
-                'bitnami': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'nvd': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-476'
-              ],
-              'description':   "The X.509 GeneralName type is a generic type for representing different types of names. One of those name types is known as EDIPartyName. OpenSSL provides a function GENERAL_NAME_cmp which compares different instances of a GENERAL_NAME to see if they are equal or not. This function behaves incorrectly when both GENERAL_NAMEs contain an EDIPARTYNAME. A NULL pointer dereference and a crash may occur leading to a possible denial of service attack. OpenSSL itself uses the GENERAL_NAME_cmp function for two purposes: 1) Comparing CRL distribution point names between an available CRL and a CRL distribution point embedded in an X509 certificate 2) When verifying that a timestamp response token signer matches the timestamp authority name (exposed via the API functions TS_RESP_verify_response and TS_RESP_verify_token) If an attacker can control both items being compared then that attacker could trigger a crash. For example if the attacker can trick a client or server into checking a malicious certificate against a malicious CRL then this may occur. Note that some applications automatically download CRLs based on a URL embedded in a certificate. This checking happens prior to the signatures on the certificate and CRL being verified. OpenSSL's s_server, s_client and verify tools have support for the \"-crl_download\" option which implements automatic CRL downloading and this attack has been demonstrated to work against those tools. Note that an unrelated bug means that affected versions of OpenSSL cannot parse or construct correct encodings of EDIPARTYNAME. However it is possible to construct a malformed EDIPARTYNAME that OpenSSL's parser will accept and hence trigger this attack. All OpenSSL 1.1.1 and 1.0.2 versions are affected by this issue. Other OpenSSL releases are out of support and have not been checked. Fixed in OpenSSL 1.1.1i (Affected 1.1.1-1.1.1h). Fixed in OpenSSL 1.0.2x (Affected 1.0.2-1.0.2w).",
-              'diffID':        'sha256:77cae8ab23bf486355d1b3191259705374f4a11d483b24964d2f729dd8c076a0',
-              'fixedVersions': [
-                '1.1.1i-r0'
-              ],
-              'installedVersion': '1.1.1d-r0',
-              'packageName':      'libssl1.1',
-              'purl':             'pkg:apk/alpine/libssl1.1@1.1.1d-r0?arch=x86_64&distro=3.10.3',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2021/09/14/2',
-                'https://access.redhat.com/security/cve/CVE-2020-1971',
-                'https://cert-portal.siemens.com/productcert/pdf/ssa-389290.pdf',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=2154ab83e14ede338d2ede9bbe5cdfce5d5a6c9e',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=f960d81215ebf3f65e03d4d5d857fb9b666d6920',
-                'https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA44676',
-                'https://linux.oracle.com/cve/CVE-2020-1971.html',
-                'https://linux.oracle.com/errata/ELSA-2021-9150.html',
-                'https://lists.apache.org/thread.html/r63c6f2dd363d9b514d0a4bcf624580616a679898cc14c109a49b750c%40%3Cdev.tomcat.apache.org%3E',
-                'https://lists.apache.org/thread.html/rbb769f771711fb274e0a4acb1b5911c8aab544a6ac5e8c12d40c5143%40%3Ccommits.pulsar.apache.org%3E',
-                'https://lists.debian.org/debian-lts-announce/2020/12/msg00020.html',
-                'https://lists.debian.org/debian-lts-announce/2020/12/msg00021.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DGSI34Y5LQ5RYXN4M2I5ZQT65LFVDOUU/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PWPSSZNZOBJU2YR6Z4TGHXKYW3YP5QG7/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2020-1971',
-                'https://security.FreeBSD.org/advisories/FreeBSD-SA-20:33.openssl.asc',
-                'https://security.gentoo.org/glsa/202012-13',
-                'https://security.netapp.com/advisory/ntap-20201218-0005/',
-                'https://security.netapp.com/advisory/ntap-20210513-0002/',
-                'https://security.netapp.com/advisory/ntap-20240621-0006/',
-                'https://ubuntu.com/security/notices/USN-4662-1',
-                'https://ubuntu.com/security/notices/USN-4745-1',
-                'https://www.cve.org/CVERecord?id=CVE-2020-1971',
-                'https://www.debian.org/security/2020/dsa-4807',
-                'https://www.openssl.org/news/secadv/20201208.txt',
-                'https://www.oracle.com//security-alerts/cpujul2021.html',
-                'https://www.oracle.com/security-alerts/cpuApr2021.html',
-                'https://www.oracle.com/security-alerts/cpuapr2022.html',
-                'https://www.oracle.com/security-alerts/cpujan2021.html',
-                'https://www.oracle.com/security-alerts/cpuoct2021.html',
-                'https://www.tenable.com/security/tns-2020-11',
-                'https://www.tenable.com/security/tns-2021-09',
-                'https://www.tenable.com/security/tns-2021-10'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: EDIPARTYNAME NULL pointer de-reference'
-            },
-            {
-              'cve':  'CVE-2021-23841',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'nvd': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-476'
-              ],
-              'description':   'The OpenSSL public API function X509_issuer_and_serial_hash() attempts to create a unique hash value based on the issuer and serial number data contained within an X509 certificate. However it fails to correctly handle any errors that may occur while parsing the issuer field (which might occur if the issuer field is maliciously constructed). This may subsequently result in a NULL pointer deref and a crash leading to a potential denial of service attack. The function X509_issuer_and_serial_hash() is never directly called by OpenSSL itself so applications are only vulnerable if they use this function directly and they use it on certificates that may have been obtained from untrusted sources. OpenSSL versions 1.1.1i and below are affected by this issue. Users of these versions should upgrade to OpenSSL 1.1.1j. OpenSSL versions 1.0.2x and below are affected by this issue. However OpenSSL 1.0.2 is out of support and no longer receiving public updates. Premium support customers of OpenSSL 1.0.2 should upgrade to 1.0.2y. Other users should upgrade to 1.1.1j. Fixed in OpenSSL 1.1.1j (Affected 1.1.1-1.1.1i). Fixed in OpenSSL 1.0.2y (Affected 1.0.2-1.0.2x).',
-              'diffID':        'sha256:77cae8ab23bf486355d1b3191259705374f4a11d483b24964d2f729dd8c076a0',
-              'fixedVersions': [
-                '1.1.1j-r0'
-              ],
-              'installedVersion': '1.1.1d-r0',
-              'packageName':      'libssl1.1',
-              'purl':             'pkg:apk/alpine/libssl1.1@1.1.1d-r0?arch=x86_64&distro=3.10.3',
-              'references':       [
-                'http://seclists.org/fulldisclosure/2021/May/67',
-                'http://seclists.org/fulldisclosure/2021/May/68',
-                'http://seclists.org/fulldisclosure/2021/May/70',
-                'https://access.redhat.com/security/cve/CVE-2021-23841',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=1908036',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=1930310',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=1930324',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=1934534',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=1934600',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=1939637',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=1940085',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=1965362',
-                'https://cert-portal.siemens.com/productcert/pdf/ssa-637483.pdf',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-23840',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-23841',
-                'https://errata.rockylinux.org/RLSA-2021:4424',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=122a19ab48091c657f7cb1fb3af9fc07bd557bbf',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=8252ee4d90f3f2004d3d0aeeed003ad49c9a7807',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=122a19ab48091c657f7cb1fb3af9fc07bd557bbf',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=6a51b9e1d0cf0bf8515f7201b68fb0a3482b3dc1',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=8252ee4d90f3f2004d3d0aeeed003ad49c9a7807',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=9b1129239f3ebb1d1c98ce9ed41d5c9476c47cb2',
-                'https://github.com/alexcrichton/openssl-src-rs',
-                'https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA44846',
-                'https://linux.oracle.com/cve/CVE-2021-23841.html',
-                'https://linux.oracle.com/errata/ELSA-2021-9561.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-23841',
-                'https://rustsec.org/advisories/RUSTSEC-2021-0058',
-                'https://rustsec.org/advisories/RUSTSEC-2021-0058.html',
-                'https://security.gentoo.org/glsa/202103-03',
-                'https://security.netapp.com/advisory/ntap-20210219-0009',
-                'https://security.netapp.com/advisory/ntap-20210219-0009/',
-                'https://security.netapp.com/advisory/ntap-20210513-0002',
-                'https://security.netapp.com/advisory/ntap-20210513-0002/',
-                'https://security.netapp.com/advisory/ntap-20240621-0006/',
-                'https://support.apple.com/kb/HT212528',
-                'https://support.apple.com/kb/HT212529',
-                'https://support.apple.com/kb/HT212534',
-                'https://ubuntu.com/security/notices/USN-4738-1',
-                'https://ubuntu.com/security/notices/USN-4745-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-23841',
-                'https://www.debian.org/security/2021/dsa-4855',
-                'https://www.openssl.org/news/secadv/20210216.txt',
-                'https://www.oracle.com//security-alerts/cpujul2021.html',
-                'https://www.oracle.com/security-alerts/cpuApr2021.html',
-                'https://www.oracle.com/security-alerts/cpuapr2022.html',
-                'https://www.oracle.com/security-alerts/cpuoct2021.html',
-                'https://www.tenable.com/security/tns-2021-03',
-                'https://www.tenable.com/security/tns-2021-09'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: NULL pointer dereference in X509_issuer_and_serial_hash()'
-            },
-            {
-              'cve':  'CVE-2021-3449',
-              'cvss': {
-                'bitnami': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'ghsa': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'nvd': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-476'
-              ],
-              'description':   'An OpenSSL TLS server may crash if sent a maliciously crafted renegotiation ClientHello message from a client. If a TLSv1.2 renegotiation ClientHello omits the signature_algorithms extension (where it was present in the initial ClientHello), but includes a signature_algorithms_cert extension then a NULL pointer dereference will result, leading to a crash and a denial of service attack. A server is only vulnerable if it has TLSv1.2 and renegotiation enabled (which is the default configuration). OpenSSL TLS clients are not impacted by this issue. All OpenSSL 1.1.1 versions are affected by this issue. Users of these versions should upgrade to OpenSSL 1.1.1k. OpenSSL 1.0.2 is not impacted by this issue. Fixed in OpenSSL 1.1.1k (Affected 1.1.1-1.1.1j).',
-              'diffID':        'sha256:77cae8ab23bf486355d1b3191259705374f4a11d483b24964d2f729dd8c076a0',
-              'fixedVersions': [
-                '1.1.1k-r0'
-              ],
-              'installedVersion': '1.1.1d-r0',
-              'packageName':      'libssl1.1',
-              'purl':             'pkg:apk/alpine/libssl1.1@1.1.1d-r0?arch=x86_64&distro=3.10.3',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2021/03/27/1',
-                'http://www.openwall.com/lists/oss-security/2021/03/27/2',
-                'http://www.openwall.com/lists/oss-security/2021/03/28/3',
-                'http://www.openwall.com/lists/oss-security/2021/03/28/4',
-                'https://access.redhat.com/security/cve/CVE-2021-3449',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=1941547',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=1941554',
-                'https://cert-portal.siemens.com/productcert/pdf/ssa-389290.pdf',
-                'https://cert-portal.siemens.com/productcert/pdf/ssa-772220.pdf',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-3449',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-3450',
-                'https://errata.rockylinux.org/RLSA-2021:1024',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=fb9fa6b51defd48157eeb207f52181f735d96148',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=fb9fa6b51defd48157eeb207f52181f735d96148',
-                'https://github.com/alexcrichton/openssl-src-rs',
-                'https://github.com/nodejs/node/pull/38083',
-                'https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA44845',
-                'https://kc.mcafee.com/corporate/index?page=content&id=SB10356',
-                'https://linux.oracle.com/cve/CVE-2021-3449.html',
-                'https://linux.oracle.com/errata/ELSA-2021-9151.html',
-                'https://lists.debian.org/debian-lts-announce/2021/08/msg00029.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CCBFLLVQVILIVGZMBJL3IXZGKWQISYNP/',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/CCBFLLVQVILIVGZMBJL3IXZGKWQISYNP',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-3449',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2021-0013',
-                'https://rustsec.org/advisories/RUSTSEC-2021-0055',
-                'https://rustsec.org/advisories/RUSTSEC-2021-0055.html',
-                'https://security.FreeBSD.org/advisories/FreeBSD-SA-21:07.openssl.asc',
-                'https://security.gentoo.org/glsa/202103-03',
-                'https://security.netapp.com/advisory/ntap-20210326-0006',
-                'https://security.netapp.com/advisory/ntap-20210326-0006/',
-                'https://security.netapp.com/advisory/ntap-20210513-0002',
-                'https://security.netapp.com/advisory/ntap-20210513-0002/',
-                'https://security.netapp.com/advisory/ntap-20240621-0006/',
-                'https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-openssl-2021-GHY28dJd',
-                'https://ubuntu.com/security/notices/USN-4891-1',
-                'https://ubuntu.com/security/notices/USN-5038-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-3449',
-                'https://www.debian.org/security/2021/dsa-4875',
-                'https://www.openssl.org/news/secadv/20210325.txt',
-                'https://www.oracle.com//security-alerts/cpujul2021.html',
-                'https://www.oracle.com/security-alerts/cpuApr2021.html',
-                'https://www.oracle.com/security-alerts/cpuapr2022.html',
-                'https://www.oracle.com/security-alerts/cpujul2022.html',
-                'https://www.oracle.com/security-alerts/cpuoct2021.html',
-                'https://www.tenable.com/security/tns-2021-05',
-                'https://www.tenable.com/security/tns-2021-06',
-                'https://www.tenable.com/security/tns-2021-09',
-                'https://www.tenable.com/security/tns-2021-10'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: NULL pointer dereference in signature_algorithms processing'
-            },
-            {
-              'cve':  'CVE-2021-23839',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '3.7',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N'
-                },
-                'redhat': {
-                  'v3score':  '3.7',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-327'
-              ],
-              'description':   'OpenSSL 1.0.2 supports SSLv2. If a client attempts to negotiate SSLv2 with a server that is configured to support both SSLv2 and more recent SSL and TLS versions then a check is made for a version rollback attack when unpadding an RSA signature. Clients that support SSL or TLS versions greater than SSLv2 are supposed to use a special form of padding. A server that supports greater than SSLv2 is supposed to reject connection attempts from a client where this special form of padding is present, because this indicates that a version rollback has occurred (i.e. both client and server support greater than SSLv2, and yet this is the version that is being requested). The implementation of this padding check inverted the logic so that the connection attempt is accepted if the padding is present, and rejected if it is absent. This means that such as server will accept a connection if a version rollback attack has occurred. Further the server will erroneously reject a connection if a normal SSLv2 connection attempt is made. Only OpenSSL 1.0.2 servers from version 1.0.2s to 1.0.2x are affected by this issue. In order to be vulnerable a 1.0.2 server must: 1) have configured SSLv2 support at compile time (this is off by default), 2) have configured SSLv2 support at runtime (this is off by default), 3) have configured SSLv2 ciphersuites (these are not in the default ciphersuite list) OpenSSL 1.1.1 does not have SSLv2 support and therefore is not vulnerable to this issue. The underlying error is in the implementation of the RSA_padding_check_SSLv23() function. This also affects the RSA_SSLV23_PADDING padding mode used by various other functions. Although 1.1.1 does not support SSLv2 the RSA_padding_check_SSLv23() function still exists, as does the RSA_SSLV23_PADDING padding mode. Applications that directly call that function or use that padding mode will encounter this issue. However since there is no support for the SSLv2 protocol in 1.1.1 this is considered a bug and not a security issue in that version. OpenSSL 1.0.2 is out of support and no longer receiving public updates. Premium support customers of OpenSSL 1.0.2 should upgrade to 1.0.2y. Other users should upgrade to 1.1.1j. Fixed in OpenSSL 1.0.2y (Affected 1.0.2s-1.0.2x).',
-              'diffID':        'sha256:77cae8ab23bf486355d1b3191259705374f4a11d483b24964d2f729dd8c076a0',
-              'fixedVersions': [
-                '1.1.1j-r0'
-              ],
-              'installedVersion': '1.1.1d-r0',
-              'packageName':      'libssl1.1',
-              'purl':             'pkg:apk/alpine/libssl1.1@1.1.1d-r0?arch=x86_64&distro=3.10.3',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-23839',
-                'https://cert-portal.siemens.com/productcert/pdf/ssa-637483.pdf',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=30919ab80a478f2d81f2e9acdcca3fa4740cd547',
-                'https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA44846',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-23839',
-                'https://security.netapp.com/advisory/ntap-20210219-0009/',
-                'https://security.netapp.com/advisory/ntap-20240621-0006/',
-                'https://www.cve.org/CVERecord?id=CVE-2021-23839',
-                'https://www.openssl.org/news/secadv/20210216.txt',
-                'https://www.oracle.com//security-alerts/cpujul2021.html',
-                'https://www.oracle.com/security-alerts/cpuApr2021.html',
-                'https://www.oracle.com/security-alerts/cpuapr2022.html',
-                'https://www.oracle.com/security-alerts/cpuoct2021.html'
-              ],
-              'severity':   'LOW',
-              'suppressed': false,
-              'title':      'openssl: incorrect SSLv2 rollback protection'
-            },
-            {
-              'cve':  'CVE-2020-28928',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.5',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-787'
-              ],
-              'description':   'In musl libc through 1.2.1, wcsnrtombs mishandles particular combinations of destination buffer size and source character limit, as demonstrated by an invalid write access (buffer overflow).',
-              'diffID':        'sha256:77cae8ab23bf486355d1b3191259705374f4a11d483b24964d2f729dd8c076a0',
-              'fixedVersions': [
-                '1.1.22-r4'
-              ],
-              'installedVersion': '1.1.22-r3',
-              'packageName':      'musl',
-              'purl':             'pkg:apk/alpine/musl@1.1.22-r3?arch=x86_64&distro=3.10.3',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2020/11/20/4',
-                'https://lists.apache.org/thread.html/r2134abfe847bea7795f0e53756d10a47e6643f35ab8169df8b8a9eb1%40%3Cnotifications.apisix.apache.org%3E',
-                'https://lists.apache.org/thread.html/r90b60cf49348e515257b4950900c1bd3ab95a960cf2469d919c7264e%40%3Cnotifications.apisix.apache.org%3E',
-                'https://lists.apache.org/thread.html/ra63e8dc5137d952afc55dbbfa63be83304ecf842d1eab1ff3ebb29e2%40%3Cnotifications.apisix.apache.org%3E',
-                'https://lists.debian.org/debian-lts-announce/2020/11/msg00050.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LKQ3RVSMVZNZNO4D65W2CZZ4DMYFZN2Q/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UW27QVY7ERPTSGKS4KAWE5TU7EJWHKVQ/',
-                'https://musl.libc.org/releases.html',
-                'https://ubuntu.com/security/notices/USN-5990-1',
-                'https://www.cve.org/CVERecord?id=CVE-2020-28928',
-                'https://www.openwall.com/lists/oss-security/2020/11/20/4',
-                'https://www.oracle.com//security-alerts/cpujul2021.html',
-                'https://www.oracle.com/security-alerts/cpuoct2021.html'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'In musl libc through 1.2.1, wcsnrtombs mishandles particular combinati ...'
-            },
-            {
-              'cve':  'CVE-2020-28928',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.5',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-787'
-              ],
-              'description':   'In musl libc through 1.2.1, wcsnrtombs mishandles particular combinations of destination buffer size and source character limit, as demonstrated by an invalid write access (buffer overflow).',
-              'diffID':        'sha256:77cae8ab23bf486355d1b3191259705374f4a11d483b24964d2f729dd8c076a0',
-              'fixedVersions': [
-                '1.1.22-r4'
-              ],
-              'installedVersion': '1.1.22-r3',
-              'packageName':      'musl-utils',
-              'purl':             'pkg:apk/alpine/musl-utils@1.1.22-r3?arch=x86_64&distro=3.10.3',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2020/11/20/4',
-                'https://lists.apache.org/thread.html/r2134abfe847bea7795f0e53756d10a47e6643f35ab8169df8b8a9eb1%40%3Cnotifications.apisix.apache.org%3E',
-                'https://lists.apache.org/thread.html/r90b60cf49348e515257b4950900c1bd3ab95a960cf2469d919c7264e%40%3Cnotifications.apisix.apache.org%3E',
-                'https://lists.apache.org/thread.html/ra63e8dc5137d952afc55dbbfa63be83304ecf842d1eab1ff3ebb29e2%40%3Cnotifications.apisix.apache.org%3E',
-                'https://lists.debian.org/debian-lts-announce/2020/11/msg00050.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LKQ3RVSMVZNZNO4D65W2CZZ4DMYFZN2Q/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UW27QVY7ERPTSGKS4KAWE5TU7EJWHKVQ/',
-                'https://musl.libc.org/releases.html',
-                'https://ubuntu.com/security/notices/USN-5990-1',
-                'https://www.cve.org/CVERecord?id=CVE-2020-28928',
-                'https://www.openwall.com/lists/oss-security/2020/11/20/4',
-                'https://www.oracle.com//security-alerts/cpujul2021.html',
-                'https://www.oracle.com/security-alerts/cpuoct2021.html'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'In musl libc through 1.2.1, wcsnrtombs mishandles particular combinati ...'
-            },
-            {
-              'cve':  'CVE-2021-28831',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-755'
-              ],
-              'description':   'decompress_gunzip.c in BusyBox through 1.32.1 mishandles the error bit on the huft_build result pointer, with a resultant invalid free or segmentation fault, via malformed gzip data.',
-              'diffID':        'sha256:77cae8ab23bf486355d1b3191259705374f4a11d483b24964d2f729dd8c076a0',
-              'fixedVersions': [
-                '1.30.1-r5'
-              ],
-              'installedVersion': '1.30.1-r2',
-              'packageName':      'ssl_client',
-              'purl':             'pkg:apk/alpine/ssl_client@1.30.1-r2?arch=x86_64&distro=3.10.3',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-28831',
-                'https://git.busybox.net/busybox/commit/?id=f25d254dfd4243698c31a4f3153d4ac72aa9e9bd',
-                'https://lists.debian.org/debian-lts-announce/2021/04/msg00001.html',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/3UDQGJRECXFS5EZVDH2OI45FMO436AC4/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/Z7ZIFKPRR32ZYA3WAA2NXFA3QHHOU6FJ/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZASBW7QRRLY5V2R44MQ4QQM4CZIDHM2U/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-28831',
-                'https://security.gentoo.org/glsa/202105-09',
-                'https://security.netapp.com/advisory/ntap-20250509-0005/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://ubuntu.com/security/notices/USN-5179-2',
-                'https://ubuntu.com/security/notices/USN-6335-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-28831'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: invalid free or segmentation fault via malformed gzip data'
-            }
-          ]
-        }
-      ],
-      'summary': {
-        'critical':   1,
-        'high':       9,
-        'low':        2,
-        'medium':     10,
-        'suppressed': 0,
-        'unknown':    0
-      }
-    }
-  },
-  {
-    'id':    'default/9847f0cc40153cf7a9911d3ed5e3732eec4571c818f95a32cd0fbb03048301c8',
-    'type':  'storage.sbomscanner.kubewarden.io.vulnerabilityreport',
-    'links': {
-      'patch':  'https://localhost:8005/v1/storage.sbomscanner.kubewarden.io.vulnerabilityreports/default/9847f0cc40153cf7a9911d3ed5e3732eec4571c818f95a32cd0fbb03048301c8',
-      'remove': 'https://localhost:8005/v1/storage.sbomscanner.kubewarden.io.vulnerabilityreports/default/9847f0cc40153cf7a9911d3ed5e3732eec4571c818f95a32cd0fbb03048301c8',
-      'self':   'https://localhost:8005/v1/storage.sbomscanner.kubewarden.io.vulnerabilityreports/default/9847f0cc40153cf7a9911d3ed5e3732eec4571c818f95a32cd0fbb03048301c8',
-      'update': 'https://localhost:8005/v1/storage.sbomscanner.kubewarden.io.vulnerabilityreports/default/9847f0cc40153cf7a9911d3ed5e3732eec4571c818f95a32cd0fbb03048301c8',
-      'view':   'https://localhost:8005/apis/storage.sbomscanner.kubewarden.io/v1alpha1/namespaces/default/vulnerabilityreports/9847f0cc40153cf7a9911d3ed5e3732eec4571c818f95a32cd0fbb03048301c8'
-    },
-    '_id':           'default/9847f0cc40153cf7a9911d3ed5e3732eec4571c818f95a32cd0fbb03048301c8',
-    'apiVersion':    'storage.sbomscanner.kubewarden.io/v1alpha1',
-    'imageMetadata': {
-      'digest':      'sha256:9bea59997a84beb47a8cc7ddb11abc957b141e8160852aa93b4cf60659016b53',
-      'platform':    'linux/ppc64le',
-      'registry':    'lsong-demo1',
-      'registryURI': 'registry-1.docker.io',
-      'repository':  'library/alpine',
-      'tag':         '3.14.2'
-    },
-    'kind':     'VulnerabilityReport',
-    'metadata': {
-      'creationTimestamp': '2026-01-14T15:47:33Z',
-      'fields':            [
-        '9847f0cc40153cf7a9911d3ed5e3732eec4571c818f95a32cd0fbb03048301c8',
-        'registry-1.docker.io/library/alpine:3.14.2',
-        'linux/ppc64le',
-        '43 (0 suppressed)'
-      ],
-      'labels': {
-        'app.kubernetes.io/managed-by':          'sbomscanner',
-        'app.kubernetes.io/part-of':             'sbomscanner',
-        'sbomscanner.kubewarden.io/scanjob-uid': '445c600a-c4b6-40b3-bd71-f2d2140a37d5'
-      },
-      'managedFields': [
-        {
-          'apiVersion': 'storage.sbomscanner.kubewarden.io/v1alpha1',
-          'fieldsType': 'FieldsV1',
-          'fieldsV1':   {
-            'f:imageMetadata': {
-              'f:digest':      {},
-              'f:platform':    {},
-              'f:registry':    {},
-              'f:registryURI': {},
-              'f:repository':  {},
-              'f:tag':         {}
-            },
-            'f:metadata': {
-              'f:labels': {
-                '.':                                       {},
-                'f:app.kubernetes.io/managed-by':          {},
-                'f:app.kubernetes.io/part-of':             {},
-                'f:sbomscanner.kubewarden.io/scanjob-uid': {}
-              },
-              'f:ownerReferences': {
-                '.':                                                {},
-                'k:{"uid":"bb747f24-6db7-4e73-8a35-6408a14949ca"}': {}
-              }
-            },
-            'f:report': {
-              'f:results': {},
-              'f:summary': {
-                'f:critical': {},
-                'f:high':     {},
-                'f:medium':   {}
-              }
-            }
-          },
-          'manager':   'worker',
-          'operation': 'Update',
-          'time':      '2026-01-14T18:51:18Z'
-        }
-      ],
-      'name':            '9847f0cc40153cf7a9911d3ed5e3732eec4571c818f95a32cd0fbb03048301c8',
-      'namespace':       'default',
-      'ownerReferences': [
-        {
-          'apiVersion':         'storage.sbomscanner.kubewarden.io/v1alpha1',
-          'blockOwnerDeletion': true,
-          'controller':         true,
-          'kind':               'SBOM',
-          'name':               '9847f0cc40153cf7a9911d3ed5e3732eec4571c818f95a32cd0fbb03048301c8',
-          'uid':                'bb747f24-6db7-4e73-8a35-6408a14949ca'
-        }
-      ],
-      'relationships': [
-        {
-          'fromId':   'default/9847f0cc40153cf7a9911d3ed5e3732eec4571c818f95a32cd0fbb03048301c8',
-          'fromType': 'storage.sbomscanner.kubewarden.io.sbom',
-          'rel':      'owner',
-          'state':    'active',
-          'message':  'Resource is current'
-        }
-      ],
-      'resourceVersion': '2',
-      'state':           {
-        'error':         false,
-        'message':       'Resource is current',
-        'name':          'active',
-        'transitioning': false
-      },
-      'uid': 'c3d1b10d-2b76-4695-a8df-3e84375ae2a6'
-    },
-    'report': {
-      'results': [
-        {
-          'class':           'os-pkgs',
-          'target':          '/var/run/worker/trivy.sbom.846656742.json (alpine 3.14.2)',
-          'type':            'alpine',
-          'vulnerabilities': [
-            {
-              'cve':  'CVE-2021-42378',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the getvar_i function",
-              'diffID':        'sha256:97e0c54a2426a8189659925cc8a66648cb912c3fe682ce312a4725e14d3386a6',
-              'fixedVersions': [
-                '1.33.1-r6'
-              ],
-              'installedVersion': '1.33.1-r3',
-              'packageName':      'busybox',
-              'purl':             'pkg:apk/alpine/busybox@1.33.1-r3?arch=ppc64le&distro=3.14.2',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42378',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42378',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42378'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the getvar_i()'
-            },
-            {
-              'cve':  'CVE-2021-42379',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the next_input_file function",
-              'diffID':        'sha256:97e0c54a2426a8189659925cc8a66648cb912c3fe682ce312a4725e14d3386a6',
-              'fixedVersions': [
-                '1.33.1-r6'
-              ],
-              'installedVersion': '1.33.1-r3',
-              'packageName':      'busybox',
-              'purl':             'pkg:apk/alpine/busybox@1.33.1-r3?arch=ppc64le&distro=3.14.2',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42379',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42379',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42379'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the next_input_file()'
-            },
-            {
-              'cve':  'CVE-2021-42380',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the clrvar function",
-              'diffID':        'sha256:97e0c54a2426a8189659925cc8a66648cb912c3fe682ce312a4725e14d3386a6',
-              'fixedVersions': [
-                '1.33.1-r6'
-              ],
-              'installedVersion': '1.33.1-r3',
-              'packageName':      'busybox',
-              'purl':             'pkg:apk/alpine/busybox@1.33.1-r3?arch=ppc64le&distro=3.14.2',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42380',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42380',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42380'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the clrvar()'
-            },
-            {
-              'cve':  'CVE-2021-42381',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the hash_init function",
-              'diffID':        'sha256:97e0c54a2426a8189659925cc8a66648cb912c3fe682ce312a4725e14d3386a6',
-              'fixedVersions': [
-                '1.33.1-r6'
-              ],
-              'installedVersion': '1.33.1-r3',
-              'packageName':      'busybox',
-              'purl':             'pkg:apk/alpine/busybox@1.33.1-r3?arch=ppc64le&distro=3.14.2',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42381',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42381',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42381'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the hash_init()'
-            },
-            {
-              'cve':  'CVE-2021-42382',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the getvar_s function",
-              'diffID':        'sha256:97e0c54a2426a8189659925cc8a66648cb912c3fe682ce312a4725e14d3386a6',
-              'fixedVersions': [
-                '1.33.1-r6'
-              ],
-              'installedVersion': '1.33.1-r3',
-              'packageName':      'busybox',
-              'purl':             'pkg:apk/alpine/busybox@1.33.1-r3?arch=ppc64le&distro=3.14.2',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42382',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42382',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42382'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the getvar_s()'
-            },
-            {
-              'cve':  'CVE-2021-42383',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the evaluate function",
-              'diffID':        'sha256:97e0c54a2426a8189659925cc8a66648cb912c3fe682ce312a4725e14d3386a6',
-              'fixedVersions': [
-                '1.33.1-r6'
-              ],
-              'installedVersion': '1.33.1-r3',
-              'packageName':      'busybox',
-              'purl':             'pkg:apk/alpine/busybox@1.33.1-r3?arch=ppc64le&distro=3.14.2',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42383',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42383',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42383'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the evaluate()'
-            },
-            {
-              'cve':  'CVE-2021-42384',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the handle_special function",
-              'diffID':        'sha256:97e0c54a2426a8189659925cc8a66648cb912c3fe682ce312a4725e14d3386a6',
-              'fixedVersions': [
-                '1.33.1-r6'
-              ],
-              'installedVersion': '1.33.1-r3',
-              'packageName':      'busybox',
-              'purl':             'pkg:apk/alpine/busybox@1.33.1-r3?arch=ppc64le&distro=3.14.2',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42384',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42384',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42384'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the handle_special()'
-            },
-            {
-              'cve':  'CVE-2021-42385',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the evaluate function",
-              'diffID':        'sha256:97e0c54a2426a8189659925cc8a66648cb912c3fe682ce312a4725e14d3386a6',
-              'fixedVersions': [
-                '1.33.1-r6'
-              ],
-              'installedVersion': '1.33.1-r3',
-              'packageName':      'busybox',
-              'purl':             'pkg:apk/alpine/busybox@1.33.1-r3?arch=ppc64le&distro=3.14.2',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42385',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42385',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42385'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the evaluate()'
-            },
-            {
-              'cve':  'CVE-2021-42386',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the nvalloc function",
-              'diffID':        'sha256:97e0c54a2426a8189659925cc8a66648cb912c3fe682ce312a4725e14d3386a6',
-              'fixedVersions': [
-                '1.33.1-r6'
-              ],
-              'installedVersion': '1.33.1-r3',
-              'packageName':      'busybox',
-              'purl':             'pkg:apk/alpine/busybox@1.33.1-r3?arch=ppc64le&distro=3.14.2',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42386',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42386',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42386'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the nvalloc()'
-            },
-            {
-              'cve':  'CVE-2022-28391',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '8.8',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-88'
-              ],
-              'description':   "BusyBox through 1.35.0 allows remote attackers to execute arbitrary code if netstat is used to print a DNS PTR record's value to a VT compatible terminal. Alternatively, the attacker could choose to change the terminal's colors.",
-              'diffID':        'sha256:97e0c54a2426a8189659925cc8a66648cb912c3fe682ce312a4725e14d3386a6',
-              'fixedVersions': [
-                '1.33.1-r7'
-              ],
-              'installedVersion': '1.33.1-r3',
-              'packageName':      'busybox',
-              'purl':             'pkg:apk/alpine/busybox@1.33.1-r3?arch=ppc64le&distro=3.14.2',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2022-28391',
-                'https://git.alpinelinux.org/aports/plain/main/busybox/0001-libbb-sockaddr2str-ensure-only-printable-characters-.patch',
-                'https://git.alpinelinux.org/aports/plain/main/busybox/0002-nslookup-sanitize-all-printed-strings-with-printable.patch',
-                'https://gitlab.alpinelinux.org/alpine/aports/-/issues/13661',
-                'https://nvd.nist.gov/vuln/detail/CVE-2022-28391',
-                'https://www.cve.org/CVERecord?id=CVE-2022-28391'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: remote attackers may execute arbitrary code if netstat is used'
-            },
-            {
-              'cve':  'CVE-2021-42374',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '5.7',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-125'
-              ],
-              'description':   "An out-of-bounds heap read in Busybox's unlzma applet leads to information leak and denial of service when crafted LZMA-compressed input is decompressed. This can be triggered by any applet/format that",
-              'diffID':        'sha256:97e0c54a2426a8189659925cc8a66648cb912c3fe682ce312a4725e14d3386a6',
-              'fixedVersions': [
-                '1.33.1-r4'
-              ],
-              'installedVersion': '1.33.1-r3',
-              'packageName':      'busybox',
-              'purl':             'pkg:apk/alpine/busybox@1.33.1-r3?arch=ppc64le&distro=3.14.2',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42374',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42374',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42374'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'busybox: out-of-bounds read in unlzma applet leads to information leak and denial of service when crafted LZMA-compressed input is decompressed'
-            },
-            {
-              'cve':  'CVE-2021-42375',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.5',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '4.1',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-159'
-              ],
-              'description':   "An incorrect handling of a special element in Busybox's ash applet leads to denial of service when processing a crafted shell command, due to the shell mistaking specific characters for reserved characters. This may be used for DoS under rare conditions of filtered command input.",
-              'diffID':        'sha256:97e0c54a2426a8189659925cc8a66648cb912c3fe682ce312a4725e14d3386a6',
-              'fixedVersions': [
-                '1.33.1-r5'
-              ],
-              'installedVersion': '1.33.1-r3',
-              'packageName':      'busybox',
-              'purl':             'pkg:apk/alpine/busybox@1.33.1-r3?arch=ppc64le&distro=3.14.2',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42375',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42375',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42375'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'busybox: incorrect handling of a special element in ash applet leads to denial of service when processing a crafted shell command'
-            },
-            {
-              'cve':  'CVE-2022-0778',
-              'cvss': {
-                'bitnami': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'ghsa': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'nvd': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-835'
-              ],
-              'description':   'The BN_mod_sqrt() function, which computes a modular square root, contains a bug that can cause it to loop forever for non-prime moduli. Internally this function is used when parsing certificates that contain elliptic curve public keys in compressed form or explicit elliptic curve parameters with a base point encoded in compressed form. It is possible to trigger the infinite loop by crafting a certificate that has invalid explicit curve parameters. Since certificate parsing happens prior to verification of the certificate signature, any process that parses an externally supplied certificate may thus be subject to a denial of service attack. The infinite loop can also be reached when parsing crafted private keys as they can contain explicit elliptic curve parameters. Thus vulnerable situations include: - TLS clients consuming server certificates - TLS servers consuming client certificates - Hosting providers taking certificates or private keys from customers - Certificate authorities parsing certification requests from subscribers - Anything else which parses ASN.1 elliptic curve parameters Also any other applications that use the BN_mod_sqrt() where the attacker can control the parameter values are vulnerable to this DoS issue. In the OpenSSL 1.0.2 version the public key is not parsed during initial parsing of the certificate which makes it slightly harder to trigger the infinite loop. However any operation which requires the public key from the certificate will trigger the infinite loop. In particular the attacker can use a self-signed certificate to trigger the loop during verification of the certificate signature. This issue affects OpenSSL versions 1.0.2, 1.1.1 and 3.0. It was addressed in the releases of 1.1.1n and 3.0.2 on the 15th March 2022. Fixed in OpenSSL 3.0.2 (Affected 3.0.0,3.0.1). Fixed in OpenSSL 1.1.1n (Affected 1.1.1-1.1.1m). Fixed in OpenSSL 1.0.2zd (Affected 1.0.2-1.0.2zc).',
-              'diffID':        'sha256:97e0c54a2426a8189659925cc8a66648cb912c3fe682ce312a4725e14d3386a6',
-              'fixedVersions': [
-                '1.1.1n-r0'
-              ],
-              'installedVersion': '1.1.1l-r0',
-              'packageName':      'libcrypto1.1',
-              'purl':             'pkg:apk/alpine/libcrypto1.1@1.1.1l-r0?arch=ppc64le&distro=3.14.2',
-              'references':       [
-                'http://packetstormsecurity.com/files/167344/OpenSSL-1.0.2-1.1.1-3.0-BN_mod_sqrt-Infinite-Loop.html',
-                'http://seclists.org/fulldisclosure/2022/May/33',
-                'http://seclists.org/fulldisclosure/2022/May/35',
-                'http://seclists.org/fulldisclosure/2022/May/38',
-                'https://access.redhat.com/errata/RHSA-2022:5326',
-                'https://access.redhat.com/security/cve/CVE-2022-0778',
-                'https://bugzilla.redhat.com/2062202',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2062202',
-                'https://cert-portal.siemens.com/productcert/pdf/ssa-712929.pdf',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-0778',
-                'https://errata.almalinux.org/8/ALSA-2022-5326.html',
-                'https://errata.rockylinux.org/RLSA-2022:4899',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=3118eb64934499d93db3230748a452351d1d9a65',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=380085481c64de749a6dd25cdf0bcf4360b30f83',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=a466912611aa6cbdf550cd10601390e587451246',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=3118eb64934499d93db3230748a452351d1d9a65',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=380085481c64de749a6dd25cdf0bcf4360b30f83',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=a466912611aa6cbdf550cd10601390e587451246',
-                'https://linux.oracle.com/cve/CVE-2022-0778.html',
-                'https://linux.oracle.com/errata/ELSA-2022-9272.html',
-                'https://lists.debian.org/debian-lts-announce/2022/03/msg00023.html',
-                'https://lists.debian.org/debian-lts-announce/2022/03/msg00024.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/323SNN6ZX7PRJJWP2BUAFLPUAE42XWLZ',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/323SNN6ZX7PRJJWP2BUAFLPUAE42XWLZ/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GDB3GQVJPXJE7X5C5JN6JAA4XUDWD6E6',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GDB3GQVJPXJE7X5C5JN6JAA4XUDWD6E6/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/W6K3PR542DXWLEFFMFIDMME4CWMHJRMG',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/W6K3PR542DXWLEFFMFIDMME4CWMHJRMG/',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/323SNN6ZX7PRJJWP2BUAFLPUAE42XWLZ',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/GDB3GQVJPXJE7X5C5JN6JAA4XUDWD6E6',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/W6K3PR542DXWLEFFMFIDMME4CWMHJRMG',
-                'https://nvd.nist.gov/vuln/detail/CVE-2022-0778',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2022-0002',
-                'https://rustsec.org/advisories/RUSTSEC-2022-0014.html',
-                'https://security.gentoo.org/glsa/202210-02',
-                'https://security.netapp.com/advisory/ntap-20220321-0002',
-                'https://security.netapp.com/advisory/ntap-20220321-0002/',
-                'https://security.netapp.com/advisory/ntap-20220429-0005',
-                'https://security.netapp.com/advisory/ntap-20220429-0005/',
-                'https://security.netapp.com/advisory/ntap-20240621-0006',
-                'https://security.netapp.com/advisory/ntap-20240621-0006/',
-                'https://support.apple.com/kb/HT213255',
-                'https://support.apple.com/kb/HT213256',
-                'https://support.apple.com/kb/HT213257',
-                'https://ubuntu.com/security/notices/USN-5328-1',
-                'https://ubuntu.com/security/notices/USN-5328-2',
-                'https://ubuntu.com/security/notices/USN-6457-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2022-0778',
-                'https://www.debian.org/security/2022/dsa-5103',
-                'https://www.openssl.org/news/secadv/20220315.txt',
-                'https://www.oracle.com/security-alerts/cpuapr2022.html',
-                'https://www.oracle.com/security-alerts/cpujul2022.html',
-                'https://www.tenable.com/security/tns-2022-06',
-                'https://www.tenable.com/security/tns-2022-07',
-                'https://www.tenable.com/security/tns-2022-08',
-                'https://www.tenable.com/security/tns-2022-09'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: Infinite loop in BN_mod_sqrt() reachable when parsing certificates'
-            },
-            {
-              'cve':  'CVE-2022-4450',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'nvd': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-415'
-              ],
-              'description':   'The function PEM_read_bio_ex() reads a PEM file from a BIO and parses and\ndecodes the "name" (e.g. "CERTIFICATE"), any header data and the payload data.\nIf the function succeeds then the "name_out", "header" and "data" arguments are\npopulated with pointers to buffers containing the relevant decoded data. The\ncaller is responsible for freeing those buffers. It is possible to construct a\nPEM file that results in 0 bytes of payload data. In this case PEM_read_bio_ex()\nwill return a failure code but will populate the header argument with a pointer\nto a buffer that has already been freed. If the caller also frees this buffer\nthen a double free will occur. This will most likely lead to a crash. This\ncould be exploited by an attacker who has the ability to supply malicious PEM\nfiles for parsing to achieve a denial of service attack.\n\nThe functions PEM_read_bio() and PEM_read() are simple wrappers around\nPEM_read_bio_ex() and therefore these functions are also directly affected.\n\nThese functions are also called indirectly by a number of other OpenSSL\nfunctions including PEM_X509_INFO_read_bio_ex() and\nSSL_CTX_use_serverinfo_file() which are also vulnerable. Some OpenSSL internal\nuses of these functions are not vulnerable because the caller does not free the\nheader argument if PEM_read_bio_ex() returns a failure code. These locations\ninclude the PEM_read_bio_TYPE() functions as well as the decoders introduced in\nOpenSSL 3.0.\n\nThe OpenSSL asn1parse command line application is also impacted by this issue.',
-              'diffID':        'sha256:97e0c54a2426a8189659925cc8a66648cb912c3fe682ce312a4725e14d3386a6',
-              'fixedVersions': [
-                '1.1.1t-r0'
-              ],
-              'installedVersion': '1.1.1l-r0',
-              'packageName':      'libcrypto1.1',
-              'purl':             'pkg:apk/alpine/libcrypto1.1@1.1.1l-r0?arch=ppc64le&distro=3.14.2',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2023:2165',
-                'https://access.redhat.com/security/cve/CVE-2022-4450',
-                'https://bugzilla.redhat.com/1960321',
-                'https://bugzilla.redhat.com/2164440',
-                'https://bugzilla.redhat.com/2164487',
-                'https://bugzilla.redhat.com/2164492',
-                'https://bugzilla.redhat.com/2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144000',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144003',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144006',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144008',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144010',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144012',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144015',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144017',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144019',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2145170',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2158412',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164440',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164487',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164488',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164492',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164497',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164499',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164500',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4203',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4304',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4450',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0215',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0216',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0217',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0286',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0401',
-                'https://errata.almalinux.org/9/ALSA-2023-2165.html',
-                'https://errata.rockylinux.org/RLSA-2023:0946',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=63bcf189be73a9cc1264059bed6f57974be74a83',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=bbcf509bd046b34cca19c766bbddc31683d0858b',
-                'https://linux.oracle.com/cve/CVE-2022-4450.html',
-                'https://linux.oracle.com/errata/ELSA-2023-32791.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2022-4450',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0003',
-                'https://rustsec.org/advisories/RUSTSEC-2023-0010.html',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://ubuntu.com/security/notices/USN-5844-1',
-                'https://ubuntu.com/security/notices/USN-6564-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2022-4450',
-                'https://www.openssl.org/news/secadv/20230207.txt'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: double free after calling PEM_read_bio_ex'
-            },
-            {
-              'cve':  'CVE-2023-0215',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'nvd': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   'The public API function BIO_new_NDEF is a helper function used for streaming\nASN.1 data via a BIO. It is primarily used internally to OpenSSL to support the\nSMIME, CMS and PKCS7 streaming capabilities, but may also be called directly by\nend user applications.\n\nThe function receives a BIO from the caller, prepends a new BIO_f_asn1 filter\nBIO onto the front of it to form a BIO chain, and then returns the new head of\nthe BIO chain to the caller. Under certain conditions, for example if a CMS\nrecipient public key is invalid, the new filter BIO is freed and the function\nreturns a NULL result indicating a failure. However, in this case, the BIO chain\nis not properly cleaned up and the BIO passed by the caller still retains\ninternal pointers to the previously freed filter BIO. If the caller then goes on\nto call BIO_pop() on the BIO then a use-after-free will occur. This will most\nlikely result in a crash.\n\n\n\nThis scenario occurs directly in the internal function B64_write_ASN1() which\nmay cause BIO_new_NDEF() to be called and will subsequently call BIO_pop() on\nthe BIO. This internal function is in turn called by the public API functions\nPEM_write_bio_ASN1_stream, PEM_write_bio_CMS_stream, PEM_write_bio_PKCS7_stream,\nSMIME_write_ASN1, SMIME_write_CMS and SMIME_write_PKCS7.\n\nOther public API functions that may be impacted by this include\ni2d_ASN1_bio_stream, BIO_new_CMS, BIO_new_PKCS7, i2d_CMS_bio_stream and\ni2d_PKCS7_bio_stream.\n\nThe OpenSSL cms and smime command line applications are similarly affected.',
-              'diffID':        'sha256:97e0c54a2426a8189659925cc8a66648cb912c3fe682ce312a4725e14d3386a6',
-              'fixedVersions': [
-                '1.1.1t-r0'
-              ],
-              'installedVersion': '1.1.1l-r0',
-              'packageName':      'libcrypto1.1',
-              'purl':             'pkg:apk/alpine/libcrypto1.1@1.1.1l-r0?arch=ppc64le&distro=3.14.2',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2023:2165',
-                'https://access.redhat.com/security/cve/CVE-2023-0215',
-                'https://bugzilla.redhat.com/1960321',
-                'https://bugzilla.redhat.com/2164440',
-                'https://bugzilla.redhat.com/2164487',
-                'https://bugzilla.redhat.com/2164492',
-                'https://bugzilla.redhat.com/2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144000',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144003',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144006',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144008',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144010',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144012',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144015',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144017',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144019',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2145170',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2158412',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164440',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164487',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164488',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164492',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164497',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164499',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164500',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4203',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4304',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4450',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0215',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0216',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0217',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0286',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0401',
-                'https://errata.almalinux.org/9/ALSA-2023-2165.html',
-                'https://errata.rockylinux.org/RLSA-2023:0946',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=8818064ce3c3c0f1b740a5aaba2a987e75bfbafd',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=9816136fe31d92ace4037d5da5257f763aeeb4eb',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=c3829dd8825c654652201e16f8a0a0c46ee3f344',
-                'https://linux.oracle.com/cve/CVE-2023-0215.html',
-                'https://linux.oracle.com/errata/ELSA-2023-32791.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-0215',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0003',
-                'https://rustsec.org/advisories/RUSTSEC-2023-0009.html',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://security.netapp.com/advisory/ntap-20230427-0007',
-                'https://security.netapp.com/advisory/ntap-20230427-0007/',
-                'https://security.netapp.com/advisory/ntap-20230427-0009',
-                'https://security.netapp.com/advisory/ntap-20230427-0009/',
-                'https://security.netapp.com/advisory/ntap-20240621-0006',
-                'https://security.netapp.com/advisory/ntap-20240621-0006/',
-                'https://ubuntu.com/security/notices/USN-5844-1',
-                'https://ubuntu.com/security/notices/USN-5845-1',
-                'https://ubuntu.com/security/notices/USN-5845-2',
-                'https://ubuntu.com/security/notices/USN-6564-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-0215',
-                'https://www.openssl.org/news/secadv/20230207.txt'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: use-after-free following BIO_new_NDEF'
-            },
-            {
-              'cve':  'CVE-2023-0286',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '7.4',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H'
-                },
-                'nvd': {
-                  'v3score':  '7.4',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.4',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-843'
-              ],
-              'description':   'There is a type confusion vulnerability relating to X.400 address processing\ninside an X.509 GeneralName. X.400 addresses were parsed as an ASN1_STRING but\nthe public structure definition for GENERAL_NAME incorrectly specified the type\nof the x400Address field as ASN1_TYPE. This field is subsequently interpreted by\nthe OpenSSL function GENERAL_NAME_cmp as an ASN1_TYPE rather than an\nASN1_STRING.\n\nWhen CRL checking is enabled (i.e. the application sets the\nX509_V_FLAG_CRL_CHECK flag), this vulnerability may allow an attacker to pass\narbitrary pointers to a memcmp call, enabling them to read memory contents or\nenact a denial of service. In most cases, the attack requires the attacker to\nprovide both the certificate chain and CRL, neither of which need to have a\nvalid signature. If the attacker only controls one of these inputs, the other\ninput must already contain an X.400 address as a CRL distribution point, which\nis uncommon. As such, this vulnerability is most likely to only affect\napplications which have implemented their own functionality for retrieving CRLs\nover a network.',
-              'diffID':        'sha256:97e0c54a2426a8189659925cc8a66648cb912c3fe682ce312a4725e14d3386a6',
-              'fixedVersions': [
-                '1.1.1t-r0'
-              ],
-              'installedVersion': '1.1.1l-r0',
-              'packageName':      'libcrypto1.1',
-              'purl':             'pkg:apk/alpine/libcrypto1.1@1.1.1l-r0?arch=ppc64le&distro=3.14.2',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2025:7937',
-                'https://access.redhat.com/security/cve/CVE-2023-0286',
-                'https://access.redhat.com/security/cve/cve-2023-0286',
-                'https://bugzilla.redhat.com/2164440',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144000',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144003',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144006',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144008',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144010',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144012',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144015',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144017',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144019',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2145170',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2158412',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164440',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164487',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164488',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164492',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164497',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164499',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164500',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4203',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4304',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4450',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0215',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0216',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0217',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0286',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0401',
-                'https://errata.almalinux.org/9/ALSA-2025-7937.html',
-                'https://errata.rockylinux.org/RLSA-2023:0946',
-                'https://ftp.openbsd.org/pub/OpenBSD/LibreSSL/libressl-3.6.2-relnotes.txt',
-                'https://ftp.openbsd.org/pub/OpenBSD/patches/7.2/common/018_x509.patch.sig',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=2c6c9d439b484e1ba9830d8454a34fa4f80fdfe9',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=2f7530077e0ef79d98718138716bc51ca0cad658',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=fd2af07dc083a350c959147097003a14a5e8ac4d',
-                'https://github.com/pyca/cryptography',
-                'https://github.com/pyca/cryptography/security/advisories/GHSA-x4qr-2fvf-3mr5',
-                'https://linux.oracle.com/cve/CVE-2023-0286.html',
-                'https://linux.oracle.com/errata/ELSA-2025-7937.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-0286',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0003',
-                'https://rustsec.org/advisories/RUSTSEC-2023-0006.html',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://ubuntu.com/security/notices/USN-5844-1',
-                'https://ubuntu.com/security/notices/USN-5845-1',
-                'https://ubuntu.com/security/notices/USN-5845-2',
-                'https://ubuntu.com/security/notices/USN-6564-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-0286',
-                'https://www.openssl.org/news/secadv/20230207.txt'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: X.400 address type confusion in X.509 GeneralName'
-            },
-            {
-              'cve':  'CVE-2023-0464',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-295'
-              ],
-              'description':   "A security vulnerability has been identified in all supported versions\n\nof OpenSSL related to the verification of X.509 certificate chains\nthat include policy constraints.  Attackers may be able to exploit this\nvulnerability by creating a malicious certificate chain that triggers\nexponential use of computational resources, leading to a denial-of-service\n(DoS) attack on affected systems.\n\nPolicy processing is disabled by default but can be enabled by passing\nthe `-policy' argument to the command line utilities or by calling the\n`X509_VERIFY_PARAM_set1_policies()' function.",
-              'diffID':        'sha256:97e0c54a2426a8189659925cc8a66648cb912c3fe682ce312a4725e14d3386a6',
-              'fixedVersions': [
-                '1.1.1t-r1'
-              ],
-              'installedVersion': '1.1.1l-r0',
-              'packageName':      'libcrypto1.1',
-              'purl':             'pkg:apk/alpine/libcrypto1.1@1.1.1l-r0?arch=ppc64le&distro=3.14.2',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2023:3722',
-                'https://access.redhat.com/security/cve/CVE-2023-0464',
-                'https://bugzilla.redhat.com/2181082',
-                'https://bugzilla.redhat.com/2182561',
-                'https://bugzilla.redhat.com/2182565',
-                'https://bugzilla.redhat.com/2188461',
-                'https://bugzilla.redhat.com/2207947',
-                'https://errata.almalinux.org/9/ALSA-2023-3722.html',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=2017771e2db3e2b96f89bbe8766c3209f6a99545',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=2dcd4f1e3115f38cefa43e3efbe9b801c27e642e',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=879f7080d7e141f415c79eaa3a8ac4a3dad0348b',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=959c59c7a0164117e7f8366466a32bb1f8d77ff1',
-                'https://linux.oracle.com/cve/CVE-2023-0464.html',
-                'https://linux.oracle.com/errata/ELSA-2023-3722.html',
-                'https://lists.debian.org/debian-lts-announce/2023/06/msg00011.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-0464',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://security.netapp.com/advisory/ntap-20230406-0006/',
-                'https://security.netapp.com/advisory/ntap-20240621-0006/',
-                'https://ubuntu.com/security/notices/USN-6039-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.couchbase.com/alerts/',
-                'https://www.cve.org/CVERecord?id=CVE-2023-0464',
-                'https://www.debian.org/security/2023/dsa-5417',
-                'https://www.openssl.org/news/secadv/20230322.txt'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: Denial of service by excessive resource usage in verifying X509 policy constraints'
-            },
-            {
-              'cve':  'CVE-2022-2097',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N'
-                },
-                'nvd': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N'
-                },
-                'redhat': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-327'
-              ],
-              'description':   "AES OCB mode for 32-bit x86 platforms using the AES-NI assembly optimised implementation will not encrypt the entirety of the data under some circumstances. This could reveal sixteen bytes of data that was preexisting in the memory that wasn't written. In the special case of \"in place\" encryption, sixteen bytes of the plaintext would be revealed. Since OpenSSL does not support OCB based cipher suites for TLS and DTLS, they are both unaffected. Fixed in OpenSSL 3.0.5 (Affected 3.0.0-3.0.4). Fixed in OpenSSL 1.1.1q (Affected 1.1.1-1.1.1p).",
-              'diffID':        'sha256:97e0c54a2426a8189659925cc8a66648cb912c3fe682ce312a4725e14d3386a6',
-              'fixedVersions': [
-                '1.1.1q-r0'
-              ],
-              'installedVersion': '1.1.1l-r0',
-              'packageName':      'libcrypto1.1',
-              'purl':             'pkg:apk/alpine/libcrypto1.1@1.1.1l-r0?arch=ppc64le&distro=3.14.2',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2022:6224',
-                'https://access.redhat.com/security/cve/CVE-2022-2097',
-                'https://bugzilla.redhat.com/2081494',
-                'https://bugzilla.redhat.com/2087911',
-                'https://bugzilla.redhat.com/2087913',
-                'https://bugzilla.redhat.com/2097310',
-                'https://bugzilla.redhat.com/2104905',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2081494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2097310',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2100554',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2104905',
-                'https://cert-portal.siemens.com/productcert/pdf/ssa-332410.pdf',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-1292',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-2068',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-2097',
-                'https://errata.almalinux.org/9/ALSA-2022-6224.html',
-                'https://errata.rockylinux.org/RLSA-2022:5818',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=919925673d6c9cfed3c1085497f5dfbbed5fc431',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=a98f339ddd7e8f487d6e0088d4a9a42324885a93',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=919925673d6c9cfed3c1085497f5dfbbed5fc431',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=a98f339ddd7e8f487d6e0088d4a9a42324885a93',
-                'https://github.com/alexcrichton/openssl-src-rs',
-                'https://linux.oracle.com/cve/CVE-2022-2097.html',
-                'https://linux.oracle.com/errata/ELSA-2022-9955.html',
-                'https://lists.debian.org/debian-lts-announce/2023/02/msg00019.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/R6CK57NBQFTPUMXAPJURCGXUYT76NQAK',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/R6CK57NBQFTPUMXAPJURCGXUYT76NQAK/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/V6567JERRHHJW2GNGJGKDRNHR7SNPZK7',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/V6567JERRHHJW2GNGJGKDRNHR7SNPZK7/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VCMNWKERPBKOEBNL7CLTTX3ZZCZLH7XA',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VCMNWKERPBKOEBNL7CLTTX3ZZCZLH7XA/',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/R6CK57NBQFTPUMXAPJURCGXUYT76NQAK',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/R6CK57NBQFTPUMXAPJURCGXUYT76NQAK/',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/V6567JERRHHJW2GNGJGKDRNHR7SNPZK7',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/V6567JERRHHJW2GNGJGKDRNHR7SNPZK7/',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/VCMNWKERPBKOEBNL7CLTTX3ZZCZLH7XA',
-                'https://nvd.nist.gov/vuln/detail/CVE-2022-2097',
-                'https://rustsec.org/advisories/RUSTSEC-2022-0032.html',
-                'https://security.gentoo.org/glsa/202210-02',
-                'https://security.netapp.com/advisory/ntap-20220715-0011',
-                'https://security.netapp.com/advisory/ntap-20220715-0011/',
-                'https://security.netapp.com/advisory/ntap-20230420-0008',
-                'https://security.netapp.com/advisory/ntap-20230420-0008/',
-                'https://security.netapp.com/advisory/ntap-20240621-0006',
-                'https://security.netapp.com/advisory/ntap-20240621-0006/',
-                'https://ubuntu.com/security/notices/USN-5502-1',
-                'https://ubuntu.com/security/notices/USN-6457-1',
-                'https://www.cve.org/CVERecord?id=CVE-2022-2097',
-                'https://www.debian.org/security/2023/dsa-5343',
-                'https://www.openssl.org/news/secadv/20220705.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: AES OCB fails to encrypt some bytes'
-            },
-            {
-              'cve':  'CVE-2022-4304',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N'
-                },
-                'nvd': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N'
-                },
-                'redhat': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-203'
-              ],
-              'description':   'A timing based side channel exists in the OpenSSL RSA Decryption implementation\nwhich could be sufficient to recover a plaintext across a network in a\nBleichenbacher style attack. To achieve a successful decryption an attacker\nwould have to be able to send a very large number of trial messages for\ndecryption. The vulnerability affects all RSA padding modes: PKCS#1 v1.5,\nRSA-OEAP and RSASVE.\n\nFor example, in a TLS connection, RSA is commonly used by a client to send an\nencrypted pre-master secret to the server. An attacker that had observed a\ngenuine connection between a client and a server could use this flaw to send\ntrial messages to the server and record the time taken to process them. After a\nsufficiently large number of messages the attacker could recover the pre-master\nsecret used for the original connection and thus be able to decrypt the\napplication data sent over that connection.',
-              'diffID':        'sha256:97e0c54a2426a8189659925cc8a66648cb912c3fe682ce312a4725e14d3386a6',
-              'fixedVersions': [
-                '1.1.1t-r0'
-              ],
-              'installedVersion': '1.1.1l-r0',
-              'packageName':      'libcrypto1.1',
-              'purl':             'pkg:apk/alpine/libcrypto1.1@1.1.1l-r0?arch=ppc64le&distro=3.14.2',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2023:2165',
-                'https://access.redhat.com/security/cve/CVE-2022-4304',
-                'https://bugzilla.redhat.com/1960321',
-                'https://bugzilla.redhat.com/2164440',
-                'https://bugzilla.redhat.com/2164487',
-                'https://bugzilla.redhat.com/2164492',
-                'https://bugzilla.redhat.com/2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144000',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144003',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144006',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144008',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144010',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144012',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144015',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144017',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144019',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2145170',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2158412',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164440',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164487',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164488',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164492',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164497',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164499',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164500',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4203',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4304',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4450',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0215',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0216',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0217',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0286',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0401',
-                'https://errata.almalinux.org/9/ALSA-2023-2165.html',
-                'https://errata.rockylinux.org/RLSA-2023:0946',
-                'https://linux.oracle.com/cve/CVE-2022-4304.html',
-                'https://linux.oracle.com/errata/ELSA-2023-32791.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2022-4304',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0003',
-                'https://rustsec.org/advisories/RUSTSEC-2023-0007.html',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://ubuntu.com/security/notices/USN-5844-1',
-                'https://ubuntu.com/security/notices/USN-6564-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2022-4304',
-                'https://www.openssl.org/news/secadv/20230207.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: timing attack in RSA Decryption implementation'
-            },
-            {
-              'cve':  'CVE-2023-0465',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N'
-                },
-                'redhat': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-295'
-              ],
-              'description':   "Applications that use a non-default option when verifying certificates may be\nvulnerable to an attack from a malicious CA to circumvent certain checks.\n\nInvalid certificate policies in leaf certificates are silently ignored by\nOpenSSL and other certificate policy checks are skipped for that certificate.\nA malicious CA could use this to deliberately assert invalid certificate policies\nin order to circumvent policy checking on the certificate altogether.\n\nPolicy processing is disabled by default but can be enabled by passing\nthe `-policy' argument to the command line utilities or by calling the\n`X509_VERIFY_PARAM_set1_policies()' function.",
-              'diffID':        'sha256:97e0c54a2426a8189659925cc8a66648cb912c3fe682ce312a4725e14d3386a6',
-              'fixedVersions': [
-                '1.1.1t-r2'
-              ],
-              'installedVersion': '1.1.1l-r0',
-              'packageName':      'libcrypto1.1',
-              'purl':             'pkg:apk/alpine/libcrypto1.1@1.1.1l-r0?arch=ppc64le&distro=3.14.2',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2023:3722',
-                'https://access.redhat.com/security/cve/CVE-2023-0465',
-                'https://bugzilla.redhat.com/2181082',
-                'https://bugzilla.redhat.com/2182561',
-                'https://bugzilla.redhat.com/2182565',
-                'https://bugzilla.redhat.com/2188461',
-                'https://bugzilla.redhat.com/2207947',
-                'https://errata.almalinux.org/9/ALSA-2023-3722.html',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=10325176f3d3e98c6e2b3bf5ab1e3b334de6947a',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=1dd43e0709fece299b15208f36cc7c76209ba0bb',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=b013765abfa80036dc779dd0e50602c57bb3bf95',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=facfb1ab745646e97a1920977ae4a9965ea61d5c',
-                'https://linux.oracle.com/cve/CVE-2023-0465.html',
-                'https://linux.oracle.com/errata/ELSA-2023-3722.html',
-                'https://lists.debian.org/debian-lts-announce/2023/06/msg00011.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-0465',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://security.netapp.com/advisory/ntap-20230414-0001/',
-                'https://ubuntu.com/security/notices/USN-6039-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-0465',
-                'https://www.debian.org/security/2023/dsa-5417',
-                'https://www.openssl.org/news/secadv/20230328.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: Invalid certificate policies in leaf certificates are silently ignored'
-            },
-            {
-              'cve':  'CVE-2022-0778',
-              'cvss': {
-                'bitnami': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'ghsa': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'nvd': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-835'
-              ],
-              'description':   'The BN_mod_sqrt() function, which computes a modular square root, contains a bug that can cause it to loop forever for non-prime moduli. Internally this function is used when parsing certificates that contain elliptic curve public keys in compressed form or explicit elliptic curve parameters with a base point encoded in compressed form. It is possible to trigger the infinite loop by crafting a certificate that has invalid explicit curve parameters. Since certificate parsing happens prior to verification of the certificate signature, any process that parses an externally supplied certificate may thus be subject to a denial of service attack. The infinite loop can also be reached when parsing crafted private keys as they can contain explicit elliptic curve parameters. Thus vulnerable situations include: - TLS clients consuming server certificates - TLS servers consuming client certificates - Hosting providers taking certificates or private keys from customers - Certificate authorities parsing certification requests from subscribers - Anything else which parses ASN.1 elliptic curve parameters Also any other applications that use the BN_mod_sqrt() where the attacker can control the parameter values are vulnerable to this DoS issue. In the OpenSSL 1.0.2 version the public key is not parsed during initial parsing of the certificate which makes it slightly harder to trigger the infinite loop. However any operation which requires the public key from the certificate will trigger the infinite loop. In particular the attacker can use a self-signed certificate to trigger the loop during verification of the certificate signature. This issue affects OpenSSL versions 1.0.2, 1.1.1 and 3.0. It was addressed in the releases of 1.1.1n and 3.0.2 on the 15th March 2022. Fixed in OpenSSL 3.0.2 (Affected 3.0.0,3.0.1). Fixed in OpenSSL 1.1.1n (Affected 1.1.1-1.1.1m). Fixed in OpenSSL 1.0.2zd (Affected 1.0.2-1.0.2zc).',
-              'diffID':        'sha256:97e0c54a2426a8189659925cc8a66648cb912c3fe682ce312a4725e14d3386a6',
-              'fixedVersions': [
-                '3.3.3p1-r3'
-              ],
-              'installedVersion': '3.3.3p1-r2',
-              'packageName':      'libretls',
-              'purl':             'pkg:apk/alpine/libretls@3.3.3p1-r2?arch=ppc64le&distro=3.14.2',
-              'references':       [
-                'http://packetstormsecurity.com/files/167344/OpenSSL-1.0.2-1.1.1-3.0-BN_mod_sqrt-Infinite-Loop.html',
-                'http://seclists.org/fulldisclosure/2022/May/33',
-                'http://seclists.org/fulldisclosure/2022/May/35',
-                'http://seclists.org/fulldisclosure/2022/May/38',
-                'https://access.redhat.com/errata/RHSA-2022:5326',
-                'https://access.redhat.com/security/cve/CVE-2022-0778',
-                'https://bugzilla.redhat.com/2062202',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2062202',
-                'https://cert-portal.siemens.com/productcert/pdf/ssa-712929.pdf',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-0778',
-                'https://errata.almalinux.org/8/ALSA-2022-5326.html',
-                'https://errata.rockylinux.org/RLSA-2022:4899',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=3118eb64934499d93db3230748a452351d1d9a65',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=380085481c64de749a6dd25cdf0bcf4360b30f83',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=a466912611aa6cbdf550cd10601390e587451246',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=3118eb64934499d93db3230748a452351d1d9a65',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=380085481c64de749a6dd25cdf0bcf4360b30f83',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=a466912611aa6cbdf550cd10601390e587451246',
-                'https://linux.oracle.com/cve/CVE-2022-0778.html',
-                'https://linux.oracle.com/errata/ELSA-2022-9272.html',
-                'https://lists.debian.org/debian-lts-announce/2022/03/msg00023.html',
-                'https://lists.debian.org/debian-lts-announce/2022/03/msg00024.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/323SNN6ZX7PRJJWP2BUAFLPUAE42XWLZ',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/323SNN6ZX7PRJJWP2BUAFLPUAE42XWLZ/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GDB3GQVJPXJE7X5C5JN6JAA4XUDWD6E6',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GDB3GQVJPXJE7X5C5JN6JAA4XUDWD6E6/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/W6K3PR542DXWLEFFMFIDMME4CWMHJRMG',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/W6K3PR542DXWLEFFMFIDMME4CWMHJRMG/',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/323SNN6ZX7PRJJWP2BUAFLPUAE42XWLZ',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/GDB3GQVJPXJE7X5C5JN6JAA4XUDWD6E6',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/W6K3PR542DXWLEFFMFIDMME4CWMHJRMG',
-                'https://nvd.nist.gov/vuln/detail/CVE-2022-0778',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2022-0002',
-                'https://rustsec.org/advisories/RUSTSEC-2022-0014.html',
-                'https://security.gentoo.org/glsa/202210-02',
-                'https://security.netapp.com/advisory/ntap-20220321-0002',
-                'https://security.netapp.com/advisory/ntap-20220321-0002/',
-                'https://security.netapp.com/advisory/ntap-20220429-0005',
-                'https://security.netapp.com/advisory/ntap-20220429-0005/',
-                'https://security.netapp.com/advisory/ntap-20240621-0006',
-                'https://security.netapp.com/advisory/ntap-20240621-0006/',
-                'https://support.apple.com/kb/HT213255',
-                'https://support.apple.com/kb/HT213256',
-                'https://support.apple.com/kb/HT213257',
-                'https://ubuntu.com/security/notices/USN-5328-1',
-                'https://ubuntu.com/security/notices/USN-5328-2',
-                'https://ubuntu.com/security/notices/USN-6457-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2022-0778',
-                'https://www.debian.org/security/2022/dsa-5103',
-                'https://www.openssl.org/news/secadv/20220315.txt',
-                'https://www.oracle.com/security-alerts/cpuapr2022.html',
-                'https://www.oracle.com/security-alerts/cpujul2022.html',
-                'https://www.tenable.com/security/tns-2022-06',
-                'https://www.tenable.com/security/tns-2022-07',
-                'https://www.tenable.com/security/tns-2022-08',
-                'https://www.tenable.com/security/tns-2022-09'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: Infinite loop in BN_mod_sqrt() reachable when parsing certificates'
-            },
-            {
-              'cve':  'CVE-2022-0778',
-              'cvss': {
-                'bitnami': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'ghsa': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'nvd': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-835'
-              ],
-              'description':   'The BN_mod_sqrt() function, which computes a modular square root, contains a bug that can cause it to loop forever for non-prime moduli. Internally this function is used when parsing certificates that contain elliptic curve public keys in compressed form or explicit elliptic curve parameters with a base point encoded in compressed form. It is possible to trigger the infinite loop by crafting a certificate that has invalid explicit curve parameters. Since certificate parsing happens prior to verification of the certificate signature, any process that parses an externally supplied certificate may thus be subject to a denial of service attack. The infinite loop can also be reached when parsing crafted private keys as they can contain explicit elliptic curve parameters. Thus vulnerable situations include: - TLS clients consuming server certificates - TLS servers consuming client certificates - Hosting providers taking certificates or private keys from customers - Certificate authorities parsing certification requests from subscribers - Anything else which parses ASN.1 elliptic curve parameters Also any other applications that use the BN_mod_sqrt() where the attacker can control the parameter values are vulnerable to this DoS issue. In the OpenSSL 1.0.2 version the public key is not parsed during initial parsing of the certificate which makes it slightly harder to trigger the infinite loop. However any operation which requires the public key from the certificate will trigger the infinite loop. In particular the attacker can use a self-signed certificate to trigger the loop during verification of the certificate signature. This issue affects OpenSSL versions 1.0.2, 1.1.1 and 3.0. It was addressed in the releases of 1.1.1n and 3.0.2 on the 15th March 2022. Fixed in OpenSSL 3.0.2 (Affected 3.0.0,3.0.1). Fixed in OpenSSL 1.1.1n (Affected 1.1.1-1.1.1m). Fixed in OpenSSL 1.0.2zd (Affected 1.0.2-1.0.2zc).',
-              'diffID':        'sha256:97e0c54a2426a8189659925cc8a66648cb912c3fe682ce312a4725e14d3386a6',
-              'fixedVersions': [
-                '1.1.1n-r0'
-              ],
-              'installedVersion': '1.1.1l-r0',
-              'packageName':      'libssl1.1',
-              'purl':             'pkg:apk/alpine/libssl1.1@1.1.1l-r0?arch=ppc64le&distro=3.14.2',
-              'references':       [
-                'http://packetstormsecurity.com/files/167344/OpenSSL-1.0.2-1.1.1-3.0-BN_mod_sqrt-Infinite-Loop.html',
-                'http://seclists.org/fulldisclosure/2022/May/33',
-                'http://seclists.org/fulldisclosure/2022/May/35',
-                'http://seclists.org/fulldisclosure/2022/May/38',
-                'https://access.redhat.com/errata/RHSA-2022:5326',
-                'https://access.redhat.com/security/cve/CVE-2022-0778',
-                'https://bugzilla.redhat.com/2062202',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2062202',
-                'https://cert-portal.siemens.com/productcert/pdf/ssa-712929.pdf',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-0778',
-                'https://errata.almalinux.org/8/ALSA-2022-5326.html',
-                'https://errata.rockylinux.org/RLSA-2022:4899',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=3118eb64934499d93db3230748a452351d1d9a65',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=380085481c64de749a6dd25cdf0bcf4360b30f83',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=a466912611aa6cbdf550cd10601390e587451246',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=3118eb64934499d93db3230748a452351d1d9a65',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=380085481c64de749a6dd25cdf0bcf4360b30f83',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=a466912611aa6cbdf550cd10601390e587451246',
-                'https://linux.oracle.com/cve/CVE-2022-0778.html',
-                'https://linux.oracle.com/errata/ELSA-2022-9272.html',
-                'https://lists.debian.org/debian-lts-announce/2022/03/msg00023.html',
-                'https://lists.debian.org/debian-lts-announce/2022/03/msg00024.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/323SNN6ZX7PRJJWP2BUAFLPUAE42XWLZ',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/323SNN6ZX7PRJJWP2BUAFLPUAE42XWLZ/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GDB3GQVJPXJE7X5C5JN6JAA4XUDWD6E6',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GDB3GQVJPXJE7X5C5JN6JAA4XUDWD6E6/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/W6K3PR542DXWLEFFMFIDMME4CWMHJRMG',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/W6K3PR542DXWLEFFMFIDMME4CWMHJRMG/',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/323SNN6ZX7PRJJWP2BUAFLPUAE42XWLZ',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/GDB3GQVJPXJE7X5C5JN6JAA4XUDWD6E6',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/W6K3PR542DXWLEFFMFIDMME4CWMHJRMG',
-                'https://nvd.nist.gov/vuln/detail/CVE-2022-0778',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2022-0002',
-                'https://rustsec.org/advisories/RUSTSEC-2022-0014.html',
-                'https://security.gentoo.org/glsa/202210-02',
-                'https://security.netapp.com/advisory/ntap-20220321-0002',
-                'https://security.netapp.com/advisory/ntap-20220321-0002/',
-                'https://security.netapp.com/advisory/ntap-20220429-0005',
-                'https://security.netapp.com/advisory/ntap-20220429-0005/',
-                'https://security.netapp.com/advisory/ntap-20240621-0006',
-                'https://security.netapp.com/advisory/ntap-20240621-0006/',
-                'https://support.apple.com/kb/HT213255',
-                'https://support.apple.com/kb/HT213256',
-                'https://support.apple.com/kb/HT213257',
-                'https://ubuntu.com/security/notices/USN-5328-1',
-                'https://ubuntu.com/security/notices/USN-5328-2',
-                'https://ubuntu.com/security/notices/USN-6457-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2022-0778',
-                'https://www.debian.org/security/2022/dsa-5103',
-                'https://www.openssl.org/news/secadv/20220315.txt',
-                'https://www.oracle.com/security-alerts/cpuapr2022.html',
-                'https://www.oracle.com/security-alerts/cpujul2022.html',
-                'https://www.tenable.com/security/tns-2022-06',
-                'https://www.tenable.com/security/tns-2022-07',
-                'https://www.tenable.com/security/tns-2022-08',
-                'https://www.tenable.com/security/tns-2022-09'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: Infinite loop in BN_mod_sqrt() reachable when parsing certificates'
-            },
-            {
-              'cve':  'CVE-2022-4450',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'nvd': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-415'
-              ],
-              'description':   'The function PEM_read_bio_ex() reads a PEM file from a BIO and parses and\ndecodes the "name" (e.g. "CERTIFICATE"), any header data and the payload data.\nIf the function succeeds then the "name_out", "header" and "data" arguments are\npopulated with pointers to buffers containing the relevant decoded data. The\ncaller is responsible for freeing those buffers. It is possible to construct a\nPEM file that results in 0 bytes of payload data. In this case PEM_read_bio_ex()\nwill return a failure code but will populate the header argument with a pointer\nto a buffer that has already been freed. If the caller also frees this buffer\nthen a double free will occur. This will most likely lead to a crash. This\ncould be exploited by an attacker who has the ability to supply malicious PEM\nfiles for parsing to achieve a denial of service attack.\n\nThe functions PEM_read_bio() and PEM_read() are simple wrappers around\nPEM_read_bio_ex() and therefore these functions are also directly affected.\n\nThese functions are also called indirectly by a number of other OpenSSL\nfunctions including PEM_X509_INFO_read_bio_ex() and\nSSL_CTX_use_serverinfo_file() which are also vulnerable. Some OpenSSL internal\nuses of these functions are not vulnerable because the caller does not free the\nheader argument if PEM_read_bio_ex() returns a failure code. These locations\ninclude the PEM_read_bio_TYPE() functions as well as the decoders introduced in\nOpenSSL 3.0.\n\nThe OpenSSL asn1parse command line application is also impacted by this issue.',
-              'diffID':        'sha256:97e0c54a2426a8189659925cc8a66648cb912c3fe682ce312a4725e14d3386a6',
-              'fixedVersions': [
-                '1.1.1t-r0'
-              ],
-              'installedVersion': '1.1.1l-r0',
-              'packageName':      'libssl1.1',
-              'purl':             'pkg:apk/alpine/libssl1.1@1.1.1l-r0?arch=ppc64le&distro=3.14.2',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2023:2165',
-                'https://access.redhat.com/security/cve/CVE-2022-4450',
-                'https://bugzilla.redhat.com/1960321',
-                'https://bugzilla.redhat.com/2164440',
-                'https://bugzilla.redhat.com/2164487',
-                'https://bugzilla.redhat.com/2164492',
-                'https://bugzilla.redhat.com/2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144000',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144003',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144006',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144008',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144010',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144012',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144015',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144017',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144019',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2145170',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2158412',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164440',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164487',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164488',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164492',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164497',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164499',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164500',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4203',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4304',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4450',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0215',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0216',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0217',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0286',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0401',
-                'https://errata.almalinux.org/9/ALSA-2023-2165.html',
-                'https://errata.rockylinux.org/RLSA-2023:0946',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=63bcf189be73a9cc1264059bed6f57974be74a83',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=bbcf509bd046b34cca19c766bbddc31683d0858b',
-                'https://linux.oracle.com/cve/CVE-2022-4450.html',
-                'https://linux.oracle.com/errata/ELSA-2023-32791.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2022-4450',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0003',
-                'https://rustsec.org/advisories/RUSTSEC-2023-0010.html',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://ubuntu.com/security/notices/USN-5844-1',
-                'https://ubuntu.com/security/notices/USN-6564-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2022-4450',
-                'https://www.openssl.org/news/secadv/20230207.txt'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: double free after calling PEM_read_bio_ex'
-            },
-            {
-              'cve':  'CVE-2023-0215',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'nvd': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   'The public API function BIO_new_NDEF is a helper function used for streaming\nASN.1 data via a BIO. It is primarily used internally to OpenSSL to support the\nSMIME, CMS and PKCS7 streaming capabilities, but may also be called directly by\nend user applications.\n\nThe function receives a BIO from the caller, prepends a new BIO_f_asn1 filter\nBIO onto the front of it to form a BIO chain, and then returns the new head of\nthe BIO chain to the caller. Under certain conditions, for example if a CMS\nrecipient public key is invalid, the new filter BIO is freed and the function\nreturns a NULL result indicating a failure. However, in this case, the BIO chain\nis not properly cleaned up and the BIO passed by the caller still retains\ninternal pointers to the previously freed filter BIO. If the caller then goes on\nto call BIO_pop() on the BIO then a use-after-free will occur. This will most\nlikely result in a crash.\n\n\n\nThis scenario occurs directly in the internal function B64_write_ASN1() which\nmay cause BIO_new_NDEF() to be called and will subsequently call BIO_pop() on\nthe BIO. This internal function is in turn called by the public API functions\nPEM_write_bio_ASN1_stream, PEM_write_bio_CMS_stream, PEM_write_bio_PKCS7_stream,\nSMIME_write_ASN1, SMIME_write_CMS and SMIME_write_PKCS7.\n\nOther public API functions that may be impacted by this include\ni2d_ASN1_bio_stream, BIO_new_CMS, BIO_new_PKCS7, i2d_CMS_bio_stream and\ni2d_PKCS7_bio_stream.\n\nThe OpenSSL cms and smime command line applications are similarly affected.',
-              'diffID':        'sha256:97e0c54a2426a8189659925cc8a66648cb912c3fe682ce312a4725e14d3386a6',
-              'fixedVersions': [
-                '1.1.1t-r0'
-              ],
-              'installedVersion': '1.1.1l-r0',
-              'packageName':      'libssl1.1',
-              'purl':             'pkg:apk/alpine/libssl1.1@1.1.1l-r0?arch=ppc64le&distro=3.14.2',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2023:2165',
-                'https://access.redhat.com/security/cve/CVE-2023-0215',
-                'https://bugzilla.redhat.com/1960321',
-                'https://bugzilla.redhat.com/2164440',
-                'https://bugzilla.redhat.com/2164487',
-                'https://bugzilla.redhat.com/2164492',
-                'https://bugzilla.redhat.com/2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144000',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144003',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144006',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144008',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144010',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144012',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144015',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144017',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144019',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2145170',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2158412',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164440',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164487',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164488',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164492',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164497',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164499',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164500',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4203',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4304',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4450',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0215',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0216',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0217',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0286',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0401',
-                'https://errata.almalinux.org/9/ALSA-2023-2165.html',
-                'https://errata.rockylinux.org/RLSA-2023:0946',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=8818064ce3c3c0f1b740a5aaba2a987e75bfbafd',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=9816136fe31d92ace4037d5da5257f763aeeb4eb',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=c3829dd8825c654652201e16f8a0a0c46ee3f344',
-                'https://linux.oracle.com/cve/CVE-2023-0215.html',
-                'https://linux.oracle.com/errata/ELSA-2023-32791.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-0215',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0003',
-                'https://rustsec.org/advisories/RUSTSEC-2023-0009.html',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://security.netapp.com/advisory/ntap-20230427-0007',
-                'https://security.netapp.com/advisory/ntap-20230427-0007/',
-                'https://security.netapp.com/advisory/ntap-20230427-0009',
-                'https://security.netapp.com/advisory/ntap-20230427-0009/',
-                'https://security.netapp.com/advisory/ntap-20240621-0006',
-                'https://security.netapp.com/advisory/ntap-20240621-0006/',
-                'https://ubuntu.com/security/notices/USN-5844-1',
-                'https://ubuntu.com/security/notices/USN-5845-1',
-                'https://ubuntu.com/security/notices/USN-5845-2',
-                'https://ubuntu.com/security/notices/USN-6564-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-0215',
-                'https://www.openssl.org/news/secadv/20230207.txt'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: use-after-free following BIO_new_NDEF'
-            },
-            {
-              'cve':  'CVE-2023-0286',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '7.4',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H'
-                },
-                'nvd': {
-                  'v3score':  '7.4',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.4',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-843'
-              ],
-              'description':   'There is a type confusion vulnerability relating to X.400 address processing\ninside an X.509 GeneralName. X.400 addresses were parsed as an ASN1_STRING but\nthe public structure definition for GENERAL_NAME incorrectly specified the type\nof the x400Address field as ASN1_TYPE. This field is subsequently interpreted by\nthe OpenSSL function GENERAL_NAME_cmp as an ASN1_TYPE rather than an\nASN1_STRING.\n\nWhen CRL checking is enabled (i.e. the application sets the\nX509_V_FLAG_CRL_CHECK flag), this vulnerability may allow an attacker to pass\narbitrary pointers to a memcmp call, enabling them to read memory contents or\nenact a denial of service. In most cases, the attack requires the attacker to\nprovide both the certificate chain and CRL, neither of which need to have a\nvalid signature. If the attacker only controls one of these inputs, the other\ninput must already contain an X.400 address as a CRL distribution point, which\nis uncommon. As such, this vulnerability is most likely to only affect\napplications which have implemented their own functionality for retrieving CRLs\nover a network.',
-              'diffID':        'sha256:97e0c54a2426a8189659925cc8a66648cb912c3fe682ce312a4725e14d3386a6',
-              'fixedVersions': [
-                '1.1.1t-r0'
-              ],
-              'installedVersion': '1.1.1l-r0',
-              'packageName':      'libssl1.1',
-              'purl':             'pkg:apk/alpine/libssl1.1@1.1.1l-r0?arch=ppc64le&distro=3.14.2',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2025:7937',
-                'https://access.redhat.com/security/cve/CVE-2023-0286',
-                'https://access.redhat.com/security/cve/cve-2023-0286',
-                'https://bugzilla.redhat.com/2164440',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144000',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144003',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144006',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144008',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144010',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144012',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144015',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144017',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144019',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2145170',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2158412',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164440',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164487',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164488',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164492',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164497',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164499',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164500',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4203',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4304',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4450',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0215',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0216',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0217',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0286',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0401',
-                'https://errata.almalinux.org/9/ALSA-2025-7937.html',
-                'https://errata.rockylinux.org/RLSA-2023:0946',
-                'https://ftp.openbsd.org/pub/OpenBSD/LibreSSL/libressl-3.6.2-relnotes.txt',
-                'https://ftp.openbsd.org/pub/OpenBSD/patches/7.2/common/018_x509.patch.sig',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=2c6c9d439b484e1ba9830d8454a34fa4f80fdfe9',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=2f7530077e0ef79d98718138716bc51ca0cad658',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=fd2af07dc083a350c959147097003a14a5e8ac4d',
-                'https://github.com/pyca/cryptography',
-                'https://github.com/pyca/cryptography/security/advisories/GHSA-x4qr-2fvf-3mr5',
-                'https://linux.oracle.com/cve/CVE-2023-0286.html',
-                'https://linux.oracle.com/errata/ELSA-2025-7937.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-0286',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0003',
-                'https://rustsec.org/advisories/RUSTSEC-2023-0006.html',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://ubuntu.com/security/notices/USN-5844-1',
-                'https://ubuntu.com/security/notices/USN-5845-1',
-                'https://ubuntu.com/security/notices/USN-5845-2',
-                'https://ubuntu.com/security/notices/USN-6564-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-0286',
-                'https://www.openssl.org/news/secadv/20230207.txt'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: X.400 address type confusion in X.509 GeneralName'
-            },
-            {
-              'cve':  'CVE-2023-0464',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-295'
-              ],
-              'description':   "A security vulnerability has been identified in all supported versions\n\nof OpenSSL related to the verification of X.509 certificate chains\nthat include policy constraints.  Attackers may be able to exploit this\nvulnerability by creating a malicious certificate chain that triggers\nexponential use of computational resources, leading to a denial-of-service\n(DoS) attack on affected systems.\n\nPolicy processing is disabled by default but can be enabled by passing\nthe `-policy' argument to the command line utilities or by calling the\n`X509_VERIFY_PARAM_set1_policies()' function.",
-              'diffID':        'sha256:97e0c54a2426a8189659925cc8a66648cb912c3fe682ce312a4725e14d3386a6',
-              'fixedVersions': [
-                '1.1.1t-r1'
-              ],
-              'installedVersion': '1.1.1l-r0',
-              'packageName':      'libssl1.1',
-              'purl':             'pkg:apk/alpine/libssl1.1@1.1.1l-r0?arch=ppc64le&distro=3.14.2',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2023:3722',
-                'https://access.redhat.com/security/cve/CVE-2023-0464',
-                'https://bugzilla.redhat.com/2181082',
-                'https://bugzilla.redhat.com/2182561',
-                'https://bugzilla.redhat.com/2182565',
-                'https://bugzilla.redhat.com/2188461',
-                'https://bugzilla.redhat.com/2207947',
-                'https://errata.almalinux.org/9/ALSA-2023-3722.html',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=2017771e2db3e2b96f89bbe8766c3209f6a99545',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=2dcd4f1e3115f38cefa43e3efbe9b801c27e642e',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=879f7080d7e141f415c79eaa3a8ac4a3dad0348b',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=959c59c7a0164117e7f8366466a32bb1f8d77ff1',
-                'https://linux.oracle.com/cve/CVE-2023-0464.html',
-                'https://linux.oracle.com/errata/ELSA-2023-3722.html',
-                'https://lists.debian.org/debian-lts-announce/2023/06/msg00011.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-0464',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://security.netapp.com/advisory/ntap-20230406-0006/',
-                'https://security.netapp.com/advisory/ntap-20240621-0006/',
-                'https://ubuntu.com/security/notices/USN-6039-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.couchbase.com/alerts/',
-                'https://www.cve.org/CVERecord?id=CVE-2023-0464',
-                'https://www.debian.org/security/2023/dsa-5417',
-                'https://www.openssl.org/news/secadv/20230322.txt'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: Denial of service by excessive resource usage in verifying X509 policy constraints'
-            },
-            {
-              'cve':  'CVE-2022-2097',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N'
-                },
-                'nvd': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N'
-                },
-                'redhat': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-327'
-              ],
-              'description':   "AES OCB mode for 32-bit x86 platforms using the AES-NI assembly optimised implementation will not encrypt the entirety of the data under some circumstances. This could reveal sixteen bytes of data that was preexisting in the memory that wasn't written. In the special case of \"in place\" encryption, sixteen bytes of the plaintext would be revealed. Since OpenSSL does not support OCB based cipher suites for TLS and DTLS, they are both unaffected. Fixed in OpenSSL 3.0.5 (Affected 3.0.0-3.0.4). Fixed in OpenSSL 1.1.1q (Affected 1.1.1-1.1.1p).",
-              'diffID':        'sha256:97e0c54a2426a8189659925cc8a66648cb912c3fe682ce312a4725e14d3386a6',
-              'fixedVersions': [
-                '1.1.1q-r0'
-              ],
-              'installedVersion': '1.1.1l-r0',
-              'packageName':      'libssl1.1',
-              'purl':             'pkg:apk/alpine/libssl1.1@1.1.1l-r0?arch=ppc64le&distro=3.14.2',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2022:6224',
-                'https://access.redhat.com/security/cve/CVE-2022-2097',
-                'https://bugzilla.redhat.com/2081494',
-                'https://bugzilla.redhat.com/2087911',
-                'https://bugzilla.redhat.com/2087913',
-                'https://bugzilla.redhat.com/2097310',
-                'https://bugzilla.redhat.com/2104905',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2081494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2097310',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2100554',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2104905',
-                'https://cert-portal.siemens.com/productcert/pdf/ssa-332410.pdf',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-1292',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-2068',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-2097',
-                'https://errata.almalinux.org/9/ALSA-2022-6224.html',
-                'https://errata.rockylinux.org/RLSA-2022:5818',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=919925673d6c9cfed3c1085497f5dfbbed5fc431',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=a98f339ddd7e8f487d6e0088d4a9a42324885a93',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=919925673d6c9cfed3c1085497f5dfbbed5fc431',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=a98f339ddd7e8f487d6e0088d4a9a42324885a93',
-                'https://github.com/alexcrichton/openssl-src-rs',
-                'https://linux.oracle.com/cve/CVE-2022-2097.html',
-                'https://linux.oracle.com/errata/ELSA-2022-9955.html',
-                'https://lists.debian.org/debian-lts-announce/2023/02/msg00019.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/R6CK57NBQFTPUMXAPJURCGXUYT76NQAK',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/R6CK57NBQFTPUMXAPJURCGXUYT76NQAK/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/V6567JERRHHJW2GNGJGKDRNHR7SNPZK7',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/V6567JERRHHJW2GNGJGKDRNHR7SNPZK7/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VCMNWKERPBKOEBNL7CLTTX3ZZCZLH7XA',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VCMNWKERPBKOEBNL7CLTTX3ZZCZLH7XA/',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/R6CK57NBQFTPUMXAPJURCGXUYT76NQAK',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/R6CK57NBQFTPUMXAPJURCGXUYT76NQAK/',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/V6567JERRHHJW2GNGJGKDRNHR7SNPZK7',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/V6567JERRHHJW2GNGJGKDRNHR7SNPZK7/',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/VCMNWKERPBKOEBNL7CLTTX3ZZCZLH7XA',
-                'https://nvd.nist.gov/vuln/detail/CVE-2022-2097',
-                'https://rustsec.org/advisories/RUSTSEC-2022-0032.html',
-                'https://security.gentoo.org/glsa/202210-02',
-                'https://security.netapp.com/advisory/ntap-20220715-0011',
-                'https://security.netapp.com/advisory/ntap-20220715-0011/',
-                'https://security.netapp.com/advisory/ntap-20230420-0008',
-                'https://security.netapp.com/advisory/ntap-20230420-0008/',
-                'https://security.netapp.com/advisory/ntap-20240621-0006',
-                'https://security.netapp.com/advisory/ntap-20240621-0006/',
-                'https://ubuntu.com/security/notices/USN-5502-1',
-                'https://ubuntu.com/security/notices/USN-6457-1',
-                'https://www.cve.org/CVERecord?id=CVE-2022-2097',
-                'https://www.debian.org/security/2023/dsa-5343',
-                'https://www.openssl.org/news/secadv/20220705.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: AES OCB fails to encrypt some bytes'
-            },
-            {
-              'cve':  'CVE-2022-4304',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N'
-                },
-                'nvd': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N'
-                },
-                'redhat': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-203'
-              ],
-              'description':   'A timing based side channel exists in the OpenSSL RSA Decryption implementation\nwhich could be sufficient to recover a plaintext across a network in a\nBleichenbacher style attack. To achieve a successful decryption an attacker\nwould have to be able to send a very large number of trial messages for\ndecryption. The vulnerability affects all RSA padding modes: PKCS#1 v1.5,\nRSA-OEAP and RSASVE.\n\nFor example, in a TLS connection, RSA is commonly used by a client to send an\nencrypted pre-master secret to the server. An attacker that had observed a\ngenuine connection between a client and a server could use this flaw to send\ntrial messages to the server and record the time taken to process them. After a\nsufficiently large number of messages the attacker could recover the pre-master\nsecret used for the original connection and thus be able to decrypt the\napplication data sent over that connection.',
-              'diffID':        'sha256:97e0c54a2426a8189659925cc8a66648cb912c3fe682ce312a4725e14d3386a6',
-              'fixedVersions': [
-                '1.1.1t-r0'
-              ],
-              'installedVersion': '1.1.1l-r0',
-              'packageName':      'libssl1.1',
-              'purl':             'pkg:apk/alpine/libssl1.1@1.1.1l-r0?arch=ppc64le&distro=3.14.2',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2023:2165',
-                'https://access.redhat.com/security/cve/CVE-2022-4304',
-                'https://bugzilla.redhat.com/1960321',
-                'https://bugzilla.redhat.com/2164440',
-                'https://bugzilla.redhat.com/2164487',
-                'https://bugzilla.redhat.com/2164492',
-                'https://bugzilla.redhat.com/2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144000',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144003',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144006',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144008',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144010',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144012',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144015',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144017',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144019',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2145170',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2158412',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164440',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164487',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164488',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164492',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164497',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164499',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164500',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4203',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4304',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4450',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0215',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0216',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0217',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0286',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0401',
-                'https://errata.almalinux.org/9/ALSA-2023-2165.html',
-                'https://errata.rockylinux.org/RLSA-2023:0946',
-                'https://linux.oracle.com/cve/CVE-2022-4304.html',
-                'https://linux.oracle.com/errata/ELSA-2023-32791.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2022-4304',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0003',
-                'https://rustsec.org/advisories/RUSTSEC-2023-0007.html',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://ubuntu.com/security/notices/USN-5844-1',
-                'https://ubuntu.com/security/notices/USN-6564-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2022-4304',
-                'https://www.openssl.org/news/secadv/20230207.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: timing attack in RSA Decryption implementation'
-            },
-            {
-              'cve':  'CVE-2023-0465',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N'
-                },
-                'redhat': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-295'
-              ],
-              'description':   "Applications that use a non-default option when verifying certificates may be\nvulnerable to an attack from a malicious CA to circumvent certain checks.\n\nInvalid certificate policies in leaf certificates are silently ignored by\nOpenSSL and other certificate policy checks are skipped for that certificate.\nA malicious CA could use this to deliberately assert invalid certificate policies\nin order to circumvent policy checking on the certificate altogether.\n\nPolicy processing is disabled by default but can be enabled by passing\nthe `-policy' argument to the command line utilities or by calling the\n`X509_VERIFY_PARAM_set1_policies()' function.",
-              'diffID':        'sha256:97e0c54a2426a8189659925cc8a66648cb912c3fe682ce312a4725e14d3386a6',
-              'fixedVersions': [
-                '1.1.1t-r2'
-              ],
-              'installedVersion': '1.1.1l-r0',
-              'packageName':      'libssl1.1',
-              'purl':             'pkg:apk/alpine/libssl1.1@1.1.1l-r0?arch=ppc64le&distro=3.14.2',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2023:3722',
-                'https://access.redhat.com/security/cve/CVE-2023-0465',
-                'https://bugzilla.redhat.com/2181082',
-                'https://bugzilla.redhat.com/2182561',
-                'https://bugzilla.redhat.com/2182565',
-                'https://bugzilla.redhat.com/2188461',
-                'https://bugzilla.redhat.com/2207947',
-                'https://errata.almalinux.org/9/ALSA-2023-3722.html',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=10325176f3d3e98c6e2b3bf5ab1e3b334de6947a',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=1dd43e0709fece299b15208f36cc7c76209ba0bb',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=b013765abfa80036dc779dd0e50602c57bb3bf95',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=facfb1ab745646e97a1920977ae4a9965ea61d5c',
-                'https://linux.oracle.com/cve/CVE-2023-0465.html',
-                'https://linux.oracle.com/errata/ELSA-2023-3722.html',
-                'https://lists.debian.org/debian-lts-announce/2023/06/msg00011.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-0465',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://security.netapp.com/advisory/ntap-20230414-0001/',
-                'https://ubuntu.com/security/notices/USN-6039-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-0465',
-                'https://www.debian.org/security/2023/dsa-5417',
-                'https://www.openssl.org/news/secadv/20230328.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: Invalid certificate policies in leaf certificates are silently ignored'
-            },
-            {
-              'cve':  'CVE-2021-42378',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the getvar_i function",
-              'diffID':        'sha256:97e0c54a2426a8189659925cc8a66648cb912c3fe682ce312a4725e14d3386a6',
-              'fixedVersions': [
-                '1.33.1-r6'
-              ],
-              'installedVersion': '1.33.1-r3',
-              'packageName':      'ssl_client',
-              'purl':             'pkg:apk/alpine/ssl_client@1.33.1-r3?arch=ppc64le&distro=3.14.2',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42378',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42378',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42378'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the getvar_i()'
-            },
-            {
-              'cve':  'CVE-2021-42379',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the next_input_file function",
-              'diffID':        'sha256:97e0c54a2426a8189659925cc8a66648cb912c3fe682ce312a4725e14d3386a6',
-              'fixedVersions': [
-                '1.33.1-r6'
-              ],
-              'installedVersion': '1.33.1-r3',
-              'packageName':      'ssl_client',
-              'purl':             'pkg:apk/alpine/ssl_client@1.33.1-r3?arch=ppc64le&distro=3.14.2',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42379',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42379',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42379'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the next_input_file()'
-            },
-            {
-              'cve':  'CVE-2021-42380',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the clrvar function",
-              'diffID':        'sha256:97e0c54a2426a8189659925cc8a66648cb912c3fe682ce312a4725e14d3386a6',
-              'fixedVersions': [
-                '1.33.1-r6'
-              ],
-              'installedVersion': '1.33.1-r3',
-              'packageName':      'ssl_client',
-              'purl':             'pkg:apk/alpine/ssl_client@1.33.1-r3?arch=ppc64le&distro=3.14.2',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42380',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42380',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42380'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the clrvar()'
-            },
-            {
-              'cve':  'CVE-2021-42381',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the hash_init function",
-              'diffID':        'sha256:97e0c54a2426a8189659925cc8a66648cb912c3fe682ce312a4725e14d3386a6',
-              'fixedVersions': [
-                '1.33.1-r6'
-              ],
-              'installedVersion': '1.33.1-r3',
-              'packageName':      'ssl_client',
-              'purl':             'pkg:apk/alpine/ssl_client@1.33.1-r3?arch=ppc64le&distro=3.14.2',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42381',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42381',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42381'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the hash_init()'
-            },
-            {
-              'cve':  'CVE-2021-42382',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the getvar_s function",
-              'diffID':        'sha256:97e0c54a2426a8189659925cc8a66648cb912c3fe682ce312a4725e14d3386a6',
-              'fixedVersions': [
-                '1.33.1-r6'
-              ],
-              'installedVersion': '1.33.1-r3',
-              'packageName':      'ssl_client',
-              'purl':             'pkg:apk/alpine/ssl_client@1.33.1-r3?arch=ppc64le&distro=3.14.2',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42382',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42382',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42382'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the getvar_s()'
-            },
-            {
-              'cve':  'CVE-2021-42383',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the evaluate function",
-              'diffID':        'sha256:97e0c54a2426a8189659925cc8a66648cb912c3fe682ce312a4725e14d3386a6',
-              'fixedVersions': [
-                '1.33.1-r6'
-              ],
-              'installedVersion': '1.33.1-r3',
-              'packageName':      'ssl_client',
-              'purl':             'pkg:apk/alpine/ssl_client@1.33.1-r3?arch=ppc64le&distro=3.14.2',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42383',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42383',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42383'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the evaluate()'
-            },
-            {
-              'cve':  'CVE-2021-42384',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the handle_special function",
-              'diffID':        'sha256:97e0c54a2426a8189659925cc8a66648cb912c3fe682ce312a4725e14d3386a6',
-              'fixedVersions': [
-                '1.33.1-r6'
-              ],
-              'installedVersion': '1.33.1-r3',
-              'packageName':      'ssl_client',
-              'purl':             'pkg:apk/alpine/ssl_client@1.33.1-r3?arch=ppc64le&distro=3.14.2',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42384',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42384',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42384'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the handle_special()'
-            },
-            {
-              'cve':  'CVE-2021-42385',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the evaluate function",
-              'diffID':        'sha256:97e0c54a2426a8189659925cc8a66648cb912c3fe682ce312a4725e14d3386a6',
-              'fixedVersions': [
-                '1.33.1-r6'
-              ],
-              'installedVersion': '1.33.1-r3',
-              'packageName':      'ssl_client',
-              'purl':             'pkg:apk/alpine/ssl_client@1.33.1-r3?arch=ppc64le&distro=3.14.2',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42385',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42385',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42385'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the evaluate()'
-            },
-            {
-              'cve':  'CVE-2021-42386',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the nvalloc function",
-              'diffID':        'sha256:97e0c54a2426a8189659925cc8a66648cb912c3fe682ce312a4725e14d3386a6',
-              'fixedVersions': [
-                '1.33.1-r6'
-              ],
-              'installedVersion': '1.33.1-r3',
-              'packageName':      'ssl_client',
-              'purl':             'pkg:apk/alpine/ssl_client@1.33.1-r3?arch=ppc64le&distro=3.14.2',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42386',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42386',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42386'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the nvalloc()'
-            },
-            {
-              'cve':  'CVE-2022-28391',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '8.8',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-88'
-              ],
-              'description':   "BusyBox through 1.35.0 allows remote attackers to execute arbitrary code if netstat is used to print a DNS PTR record's value to a VT compatible terminal. Alternatively, the attacker could choose to change the terminal's colors.",
-              'diffID':        'sha256:97e0c54a2426a8189659925cc8a66648cb912c3fe682ce312a4725e14d3386a6',
-              'fixedVersions': [
-                '1.33.1-r7'
-              ],
-              'installedVersion': '1.33.1-r3',
-              'packageName':      'ssl_client',
-              'purl':             'pkg:apk/alpine/ssl_client@1.33.1-r3?arch=ppc64le&distro=3.14.2',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2022-28391',
-                'https://git.alpinelinux.org/aports/plain/main/busybox/0001-libbb-sockaddr2str-ensure-only-printable-characters-.patch',
-                'https://git.alpinelinux.org/aports/plain/main/busybox/0002-nslookup-sanitize-all-printed-strings-with-printable.patch',
-                'https://gitlab.alpinelinux.org/alpine/aports/-/issues/13661',
-                'https://nvd.nist.gov/vuln/detail/CVE-2022-28391',
-                'https://www.cve.org/CVERecord?id=CVE-2022-28391'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: remote attackers may execute arbitrary code if netstat is used'
-            },
-            {
-              'cve':  'CVE-2021-42374',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '5.7',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-125'
-              ],
-              'description':   "An out-of-bounds heap read in Busybox's unlzma applet leads to information leak and denial of service when crafted LZMA-compressed input is decompressed. This can be triggered by any applet/format that",
-              'diffID':        'sha256:97e0c54a2426a8189659925cc8a66648cb912c3fe682ce312a4725e14d3386a6',
-              'fixedVersions': [
-                '1.33.1-r4'
-              ],
-              'installedVersion': '1.33.1-r3',
-              'packageName':      'ssl_client',
-              'purl':             'pkg:apk/alpine/ssl_client@1.33.1-r3?arch=ppc64le&distro=3.14.2',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42374',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42374',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42374'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'busybox: out-of-bounds read in unlzma applet leads to information leak and denial of service when crafted LZMA-compressed input is decompressed'
-            },
-            {
-              'cve':  'CVE-2021-42375',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.5',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '4.1',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-159'
-              ],
-              'description':   "An incorrect handling of a special element in Busybox's ash applet leads to denial of service when processing a crafted shell command, due to the shell mistaking specific characters for reserved characters. This may be used for DoS under rare conditions of filtered command input.",
-              'diffID':        'sha256:97e0c54a2426a8189659925cc8a66648cb912c3fe682ce312a4725e14d3386a6',
-              'fixedVersions': [
-                '1.33.1-r5'
-              ],
-              'installedVersion': '1.33.1-r3',
-              'packageName':      'ssl_client',
-              'purl':             'pkg:apk/alpine/ssl_client@1.33.1-r3?arch=ppc64le&distro=3.14.2',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42375',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42375',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42375'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'busybox: incorrect handling of a special element in ash applet leads to denial of service when processing a crafted shell command'
-            },
-            {
-              'cve':  'CVE-2022-37434',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '9.8',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-787',
-                'CWE-120'
-              ],
-              'description':   'zlib through 1.2.12 has a heap-based buffer over-read or buffer overflow in inflate in inflate.c via a large gzip header extra field. NOTE: only applications that call inflateGetHeader are affected. Some common applications bundle the affected zlib source code but may be unable to call inflateGetHeader (e.g., see the nodejs/node reference).',
-              'diffID':        'sha256:97e0c54a2426a8189659925cc8a66648cb912c3fe682ce312a4725e14d3386a6',
-              'fixedVersions': [
-                '1.2.12-r2'
-              ],
-              'installedVersion': '1.2.11-r3',
-              'packageName':      'zlib',
-              'purl':             'pkg:apk/alpine/zlib@1.2.11-r3?arch=ppc64le&distro=3.14.2',
-              'references':       [
-                'http://seclists.org/fulldisclosure/2022/Oct/37',
-                'http://seclists.org/fulldisclosure/2022/Oct/38',
-                'http://seclists.org/fulldisclosure/2022/Oct/41',
-                'http://seclists.org/fulldisclosure/2022/Oct/42',
-                'http://www.openwall.com/lists/oss-security/2022/08/05/2',
-                'http://www.openwall.com/lists/oss-security/2022/08/09/1',
-                'https://access.redhat.com/errata/RHSA-2022:8291',
-                'https://access.redhat.com/security/cve/CVE-2022-37434',
-                'https://bugzilla.redhat.com/2116639',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2053198',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2077431',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2081296',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2116639',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-37434',
-                'https://errata.almalinux.org/9/ALSA-2022-8291.html',
-                'https://errata.rockylinux.org/RLSA-2022:8291',
-                'https://github.com/curl/curl/issues/9271',
-                'https://github.com/ivd38/zlib_overflow',
-                'https://github.com/madler/zlib/blob/21767c654d31d2dccdde4330529775c6c5fd5389/zlib.h#L1062-L1063',
-                'https://github.com/madler/zlib/commit/1eb7682f845ac9e9bf9ae35bbfb3bad5dacbd91d',
-                'https://github.com/madler/zlib/commit/eff308af425b67093bab25f80f1ae950166bece1',
-                'https://github.com/nodejs/node/blob/75b68c6e4db515f76df73af476eccf382bbcb00a/deps/zlib/inflate.c#L762-L764',
-                'https://linux.oracle.com/cve/CVE-2022-37434.html',
-                'https://linux.oracle.com/errata/ELSA-2023-1095.html',
-                'https://lists.debian.org/debian-lts-announce/2022/09/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JWN4VE3JQR4O2SOUS5TXNLANRPMHWV4I/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NMBOJ77A7T7PQCARMDUK75TE6LLESZ3O/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PAVPQNCG3XRLCLNSQRM3KAN5ZFMVXVTY/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/X5U7OTKZSHY2I3ZFJSR2SHFHW72RKGDK/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YRQAI7H4M4RQZ2IWZUEEXECBE5D56BH2/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2022-37434',
-                'https://security.netapp.com/advisory/ntap-20220901-0005/',
-                'https://security.netapp.com/advisory/ntap-20230427-0007/',
-                'https://support.apple.com/kb/HT213488',
-                'https://support.apple.com/kb/HT213489',
-                'https://support.apple.com/kb/HT213490',
-                'https://support.apple.com/kb/HT213491',
-                'https://support.apple.com/kb/HT213493',
-                'https://support.apple.com/kb/HT213494',
-                'https://ubuntu.com/security/notices/USN-5570-1',
-                'https://ubuntu.com/security/notices/USN-5570-2',
-                'https://ubuntu.com/security/notices/USN-5573-1',
-                'https://ubuntu.com/security/notices/USN-6736-1',
-                'https://ubuntu.com/security/notices/USN-6736-2',
-                'https://www.cve.org/CVERecord?id=CVE-2022-37434',
-                'https://www.debian.org/security/2022/dsa-5218'
-              ],
-              'severity':   'CRITICAL',
-              'suppressed': false,
-              'title':      'zlib: heap-based buffer over-read and overflow in inflate() in inflate.c via a large gzip header extra field'
-            },
-            {
-              'cve':  'CVE-2018-25032',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'nvd': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '8.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-787'
-              ],
-              'description':   'zlib before 1.2.12 allows memory corruption when deflating (i.e., when compressing) if the input has many distant matches.',
-              'diffID':        'sha256:97e0c54a2426a8189659925cc8a66648cb912c3fe682ce312a4725e14d3386a6',
-              'fixedVersions': [
-                '1.2.12-r0'
-              ],
-              'installedVersion': '1.2.11-r3',
-              'packageName':      'zlib',
-              'purl':             'pkg:apk/alpine/zlib@1.2.11-r3?arch=ppc64le&distro=3.14.2',
-              'references':       [
-                'http://seclists.org/fulldisclosure/2022/May/33',
-                'http://seclists.org/fulldisclosure/2022/May/35',
-                'http://seclists.org/fulldisclosure/2022/May/38',
-                'http://www.openwall.com/lists/oss-security/2022/03/25/2',
-                'http://www.openwall.com/lists/oss-security/2022/03/26/1',
-                'https://access.redhat.com/errata/RHSA-2022:8420',
-                'https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-25032.json',
-                'https://access.redhat.com/security/cve/CVE-2018-25032',
-                'https://bugzilla.redhat.com/2067945',
-                'https://cert-portal.siemens.com/productcert/pdf/ssa-333517.pdf',
-                'https://errata.almalinux.org/9/ALSA-2022-8420.html',
-                'https://github.com/advisories/GHSA-jc36-42cf-vqwj',
-                'https://github.com/madler/zlib/commit/5c44459c3b28a9bd3283aaceab7c615f8020c531',
-                'https://github.com/madler/zlib/compare/v1.2.11...v1.2.12',
-                'https://github.com/madler/zlib/issues/605',
-                'https://github.com/rubysec/ruby-advisory-db/blob/master/gems/nokogiri/CVE-2018-25032.yml',
-                'https://github.com/sparklemotion/nokogiri/releases/tag/v1.13.4',
-                'https://github.com/sparklemotion/nokogiri/security/advisories/GHSA-v6gp-9mmm-c6p5',
-                'https://groups.google.com/g/ruby-security-ann/c/vX7qSjsvWis/m/TJWN4oOKBwAJ',
-                'https://linux.oracle.com/cve/CVE-2018-25032.html',
-                'https://linux.oracle.com/errata/ELSA-2022-9565.html',
-                'https://lists.debian.org/debian-lts-announce/2022/04/msg00000.html',
-                'https://lists.debian.org/debian-lts-announce/2022/05/msg00008.html',
-                'https://lists.debian.org/debian-lts-announce/2022/09/msg00023.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DCZFIJBJTZ7CL5QXBFKTQ22Q26VINRUF/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DF62MVMH3QUGMBDCB3DY2ERQ6EBHTADB/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JZZPTWRYQULAOL3AW7RZJNVZ2UONXCV4/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NS2D2GFPFGOJUL4WQ3DUAY7HF4VWQ77F/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VOKNP2L734AEL47NRYGVZIKEFOUBQY5Y/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/XOKFMSNQ5D5WGMALBNBXU3GE442V74WU/',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/DCZFIJBJTZ7CL5QXBFKTQ22Q26VINRUF',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/DCZFIJBJTZ7CL5QXBFKTQ22Q26VINRUF/',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/DF62MVMH3QUGMBDCB3DY2ERQ6EBHTADB',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/DF62MVMH3QUGMBDCB3DY2ERQ6EBHTADB/',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/JZZPTWRYQULAOL3AW7RZJNVZ2UONXCV4',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/JZZPTWRYQULAOL3AW7RZJNVZ2UONXCV4/',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/NS2D2GFPFGOJUL4WQ3DUAY7HF4VWQ77F',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/NS2D2GFPFGOJUL4WQ3DUAY7HF4VWQ77F/',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/VOKNP2L734AEL47NRYGVZIKEFOUBQY5Y',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/VOKNP2L734AEL47NRYGVZIKEFOUBQY5Y/',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/XOKFMSNQ5D5WGMALBNBXU3GE442V74WU',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/XOKFMSNQ5D5WGMALBNBXU3GE442V74WU/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2018-25032',
-                'https://security.gentoo.org/glsa/202210-42',
-                'https://security.netapp.com/advisory/ntap-20220526-0009',
-                'https://security.netapp.com/advisory/ntap-20220526-0009/',
-                'https://security.netapp.com/advisory/ntap-20220729-0004',
-                'https://security.netapp.com/advisory/ntap-20220729-0004/',
-                'https://support.apple.com/kb/HT213255',
-                'https://support.apple.com/kb/HT213256',
-                'https://support.apple.com/kb/HT213257',
-                'https://ubuntu.com/security/notices/USN-5355-1',
-                'https://ubuntu.com/security/notices/USN-5355-2',
-                'https://ubuntu.com/security/notices/USN-5359-1',
-                'https://ubuntu.com/security/notices/USN-5359-2',
-                'https://ubuntu.com/security/notices/USN-5739-1',
-                'https://ubuntu.com/security/notices/USN-6736-1',
-                'https://ubuntu.com/security/notices/USN-6736-2',
-                'https://www.cve.org/CVERecord?id=CVE-2018-25032',
-                'https://www.debian.org/security/2022/dsa-5111',
-                'https://www.openwall.com/lists/oss-security/2022/03/24/1',
-                'https://www.openwall.com/lists/oss-security/2022/03/28/1',
-                'https://www.openwall.com/lists/oss-security/2022/03/28/3',
-                'https://www.oracle.com/security-alerts/cpujul2022.html'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'zlib: A flaw found in zlib when compressing (not decompressing) certain inputs'
-            }
-          ]
-        }
-      ],
-      'summary': {
-        'critical':   1,
-        'high':       32,
-        'low':        0,
-        'medium':     10,
-        'suppressed': 0,
-        'unknown':    0
-      }
-    }
-  },
-  {
-    'id':    'default/986783fa1ddfe2c8776d5827489c083484f60242c12ba42a6680c26592601783',
-    'type':  'storage.sbomscanner.kubewarden.io.vulnerabilityreport',
-    'links': {
-      'patch':  'https://localhost:8005/v1/storage.sbomscanner.kubewarden.io.vulnerabilityreports/default/986783fa1ddfe2c8776d5827489c083484f60242c12ba42a6680c26592601783',
-      'remove': 'https://localhost:8005/v1/storage.sbomscanner.kubewarden.io.vulnerabilityreports/default/986783fa1ddfe2c8776d5827489c083484f60242c12ba42a6680c26592601783',
-      'self':   'https://localhost:8005/v1/storage.sbomscanner.kubewarden.io.vulnerabilityreports/default/986783fa1ddfe2c8776d5827489c083484f60242c12ba42a6680c26592601783',
-      'update': 'https://localhost:8005/v1/storage.sbomscanner.kubewarden.io.vulnerabilityreports/default/986783fa1ddfe2c8776d5827489c083484f60242c12ba42a6680c26592601783',
-      'view':   'https://localhost:8005/apis/storage.sbomscanner.kubewarden.io/v1alpha1/namespaces/default/vulnerabilityreports/986783fa1ddfe2c8776d5827489c083484f60242c12ba42a6680c26592601783'
-    },
-    'apiVersion':    'storage.sbomscanner.kubewarden.io/v1alpha1',
-    'imageMetadata': {
-      'digest':      'sha256:360e20fc240529450cf378756935230541da805701e3ff895305b72f37ce4d9c',
-      'platform':    'linux/arm64/v8',
-      'registry':    'lsong-demo1',
-      'registryURI': 'registry-1.docker.io',
-      'repository':  'library/alpine',
-      'tag':         '3.8.4'
-    },
-    'kind':     'VulnerabilityReport',
-    'metadata': {
-      'creationTimestamp': '2026-01-14T18:52:00Z',
-      'fields':            [
-        '986783fa1ddfe2c8776d5827489c083484f60242c12ba42a6680c26592601783',
-        'registry-1.docker.io/library/alpine:3.8.4',
-        'linux/arm64/v8',
-        '2 (0 suppressed)'
-      ],
-      'labels': {
-        'app.kubernetes.io/managed-by':          'sbomscanner',
-        'app.kubernetes.io/part-of':             'sbomscanner',
-        'sbomscanner.kubewarden.io/scanjob-uid': '445c600a-c4b6-40b3-bd71-f2d2140a37d5'
-      },
-      'name':            '986783fa1ddfe2c8776d5827489c083484f60242c12ba42a6680c26592601783',
-      'namespace':       'default',
-      'ownerReferences': [
-        {
-          'apiVersion':         'storage.sbomscanner.kubewarden.io/v1alpha1',
-          'blockOwnerDeletion': true,
-          'controller':         true,
-          'kind':               'SBOM',
-          'name':               '986783fa1ddfe2c8776d5827489c083484f60242c12ba42a6680c26592601783',
-          'uid':                '2b9e533d-1e1c-4ce1-9f33-54080768bddc'
-        }
-      ],
-      'relationships': [
-        {
-          'fromId':   'default/986783fa1ddfe2c8776d5827489c083484f60242c12ba42a6680c26592601783',
-          'fromType': 'storage.sbomscanner.kubewarden.io.sbom',
-          'rel':      'owner',
-          'state':    'active',
-          'message':  'Resource is current'
-        }
-      ],
-      'resourceVersion': '1',
-      'state':           {
-        'error':         false,
-        'message':       'Resource is current',
-        'name':          'active',
-        'transitioning': false
-      },
-      'uid': 'a6a19b98-0347-4ea2-96e1-754acaa7b420'
-    },
-    'report': {
-      'results': [
-        {
-          'class':           'os-pkgs',
-          'target':          '/var/run/worker/trivy.sbom.2792828982.json (alpine 3.8.4)',
-          'type':            'alpine',
-          'vulnerabilities': [
-            {
-              'cve':  'CVE-2019-14697',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '9.8',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-787'
-              ],
-              'description':   "musl libc through 1.1.23 has an x87 floating-point stack adjustment imbalance, related to the math/i386/ directory. In some cases, use of this library could introduce out-of-bounds writes that are not present in an application's source code.",
-              'diffID':        'sha256:11ef7eb924077338758ae26b531c652b6d81d8d46df77eb6a8a00feda53bf7b8',
-              'fixedVersions': [
-                '1.1.19-r11'
-              ],
-              'installedVersion': '1.1.19-r10',
-              'packageName':      'musl',
-              'purl':             'pkg:apk/alpine/musl@1.1.19-r10?arch=aarch64&distro=3.8.4',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2019/08/06/4',
-                'https://git.musl-libc.org/cgit/musl/patch/?id=6818c31c9bc4bbad5357f1de14bedf781e5b349e',
-                'https://git.musl-libc.org/cgit/musl/patch/?id=f3ed8bfe8a82af1870ddc8696ed4cc1d5aa6b441',
-                'https://security.gentoo.org/glsa/202003-13',
-                'https://ubuntu.com/security/notices/USN-5990-1',
-                'https://www.cve.org/CVERecord?id=CVE-2019-14697',
-                'https://www.openwall.com/lists/musl/2019/08/06/1',
-                'https://www.openwall.com/lists/oss-security/2019/08/06/1'
-              ],
-              'severity':   'CRITICAL',
-              'suppressed': false,
-              'title':      'musl libc through 1.1.23 has an x87 floating-point stack adjustment im ...'
-            },
-            {
-              'cve':  'CVE-2019-14697',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '9.8',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-787'
-              ],
-              'description':   "musl libc through 1.1.23 has an x87 floating-point stack adjustment imbalance, related to the math/i386/ directory. In some cases, use of this library could introduce out-of-bounds writes that are not present in an application's source code.",
-              'diffID':        'sha256:11ef7eb924077338758ae26b531c652b6d81d8d46df77eb6a8a00feda53bf7b8',
-              'fixedVersions': [
-                '1.1.19-r11'
-              ],
-              'installedVersion': '1.1.19-r10',
-              'packageName':      'musl-utils',
-              'purl':             'pkg:apk/alpine/musl-utils@1.1.19-r10?arch=aarch64&distro=3.8.4',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2019/08/06/4',
-                'https://git.musl-libc.org/cgit/musl/patch/?id=6818c31c9bc4bbad5357f1de14bedf781e5b349e',
-                'https://git.musl-libc.org/cgit/musl/patch/?id=f3ed8bfe8a82af1870ddc8696ed4cc1d5aa6b441',
-                'https://security.gentoo.org/glsa/202003-13',
-                'https://ubuntu.com/security/notices/USN-5990-1',
-                'https://www.cve.org/CVERecord?id=CVE-2019-14697',
-                'https://www.openwall.com/lists/musl/2019/08/06/1',
-                'https://www.openwall.com/lists/oss-security/2019/08/06/1'
-              ],
-              'severity':   'CRITICAL',
-              'suppressed': false,
-              'title':      'musl libc through 1.1.23 has an x87 floating-point stack adjustment im ...'
-            }
-          ]
-        }
-      ],
-      'summary': {
-        'critical':   2,
-        'high':       0,
-        'low':        0,
-        'medium':     0,
-        'suppressed': 0,
-        'unknown':    0
-      }
-    }
-  },
-  {
-    'id':    'default/9895eadcf452be67f0e22aa381d8a0a38d21354e4493851d07222a913e0bd5de',
-    'type':  'storage.sbomscanner.kubewarden.io.vulnerabilityreport',
-    'links': {
-      'patch':  'https://localhost:8005/v1/storage.sbomscanner.kubewarden.io.vulnerabilityreports/default/9895eadcf452be67f0e22aa381d8a0a38d21354e4493851d07222a913e0bd5de',
-      'remove': 'https://localhost:8005/v1/storage.sbomscanner.kubewarden.io.vulnerabilityreports/default/9895eadcf452be67f0e22aa381d8a0a38d21354e4493851d07222a913e0bd5de',
-      'self':   'https://localhost:8005/v1/storage.sbomscanner.kubewarden.io.vulnerabilityreports/default/9895eadcf452be67f0e22aa381d8a0a38d21354e4493851d07222a913e0bd5de',
-      'update': 'https://localhost:8005/v1/storage.sbomscanner.kubewarden.io.vulnerabilityreports/default/9895eadcf452be67f0e22aa381d8a0a38d21354e4493851d07222a913e0bd5de',
-      'view':   'https://localhost:8005/apis/storage.sbomscanner.kubewarden.io/v1alpha1/namespaces/default/vulnerabilityreports/9895eadcf452be67f0e22aa381d8a0a38d21354e4493851d07222a913e0bd5de'
-    },
-    '_id':           'default/9895eadcf452be67f0e22aa381d8a0a38d21354e4493851d07222a913e0bd5de',
-    'apiVersion':    'storage.sbomscanner.kubewarden.io/v1alpha1',
-    'imageMetadata': {
-      'digest':      'sha256:0b2e6da2bf1a7f93748e3ba45ba51a0ad76608742605ff29c776c7d7c26df6d1',
-      'platform':    'linux/amd64',
-      'registry':    'demo-02',
-      'registryURI': 'ghcr.io',
-      'repository':  'linuxcontainers/alpine',
-      'tag':         '3.13.7'
-    },
-    'kind':     'VulnerabilityReport',
-    'metadata': {
-      'creationTimestamp': '2026-01-09T22:47:09Z',
-      'fields':            [
-        '9895eadcf452be67f0e22aa381d8a0a38d21354e4493851d07222a913e0bd5de',
-        'ghcr.io/linuxcontainers/alpine:3.13.7',
-        'linux/amd64',
-        '10 (0 suppressed)'
-      ],
-      'labels': {
-        'app.kubernetes.io/managed-by':          'sbomscanner',
-        'app.kubernetes.io/part-of':             'sbomscanner',
-        'sbomscanner.kubewarden.io/scanjob-uid': '42184d01-4b15-466f-98aa-e802d1b6b6b8'
-      },
-      'managedFields': [
-        {
-          'apiVersion': 'storage.sbomscanner.kubewarden.io/v1alpha1',
-          'fieldsType': 'FieldsV1',
-          'fieldsV1':   {
-            'f:imageMetadata': {
-              'f:digest':      {},
-              'f:platform':    {},
-              'f:registry':    {},
-              'f:registryURI': {},
-              'f:repository':  {},
-              'f:tag':         {}
-            },
-            'f:metadata': {
-              'f:labels': {
-                '.':                                       {},
-                'f:app.kubernetes.io/managed-by':          {},
-                'f:app.kubernetes.io/part-of':             {},
-                'f:sbomscanner.kubewarden.io/scanjob-uid': {}
-              },
-              'f:ownerReferences': {
-                '.':                                                {},
-                'k:{"uid":"defe0c12-0b52-4745-89d9-977f03122235"}': {}
-              }
-            },
-            'f:report': {
-              'f:results': {},
-              'f:summary': {
-                'f:critical': {},
-                'f:high':     {},
-                'f:medium':   {}
-              }
-            }
-          },
-          'manager':   'worker',
-          'operation': 'Update',
-          'time':      '2026-01-28T18:34:16Z'
-        }
-      ],
-      'name':            '9895eadcf452be67f0e22aa381d8a0a38d21354e4493851d07222a913e0bd5de',
-      'namespace':       'default',
-      'ownerReferences': [
-        {
-          'apiVersion':         'storage.sbomscanner.kubewarden.io/v1alpha1',
-          'blockOwnerDeletion': true,
-          'controller':         true,
-          'kind':               'SBOM',
-          'name':               '9895eadcf452be67f0e22aa381d8a0a38d21354e4493851d07222a913e0bd5de',
-          'uid':                'defe0c12-0b52-4745-89d9-977f03122235'
-        }
-      ],
-      'relationships': [
-        {
-          'fromId':   'default/9895eadcf452be67f0e22aa381d8a0a38d21354e4493851d07222a913e0bd5de',
-          'fromType': 'storage.sbomscanner.kubewarden.io.sbom',
-          'rel':      'owner',
-          'state':    'active',
-          'message':  'Resource is current'
-        }
-      ],
-      'resourceVersion': '8',
-      'state':           {
-        'error':         false,
-        'message':       'Resource is current',
-        'name':          'active',
-        'transitioning': false
-      },
-      'uid': 'f76c3981-7478-4572-a38a-7dd63bfbb3d5'
-    },
-    'report': {
-      'results': [
-        {
-          'class':           'os-pkgs',
-          'target':          '/var/run/worker/trivy.sbom.930803343.json (alpine 3.13.7)',
-          'type':            'alpine',
-          'vulnerabilities': [
-            {
-              'cve':  'CVE-2022-28391',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '8.8',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-88'
-              ],
-              'description':   "BusyBox through 1.35.0 allows remote attackers to execute arbitrary code if netstat is used to print a DNS PTR record's value to a VT compatible terminal. Alternatively, the attacker could choose to change the terminal's colors.",
-              'diffID':        'sha256:7fcb75871b2101082203959c83514ac8a9f4ecfee77a0fe9aa73bbe56afdf1b4',
-              'fixedVersions': [
-                '1.32.1-r8'
-              ],
-              'installedVersion': '1.32.1-r7',
-              'packageName':      'busybox',
-              'purl':             'pkg:apk/alpine/busybox@1.32.1-r7?arch=x86_64&distro=3.13.7',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2022-28391',
-                'https://git.alpinelinux.org/aports/plain/main/busybox/0001-libbb-sockaddr2str-ensure-only-printable-characters-.patch',
-                'https://git.alpinelinux.org/aports/plain/main/busybox/0002-nslookup-sanitize-all-printed-strings-with-printable.patch',
-                'https://gitlab.alpinelinux.org/alpine/aports/-/issues/13661',
-                'https://nvd.nist.gov/vuln/detail/CVE-2022-28391',
-                'https://www.cve.org/CVERecord?id=CVE-2022-28391'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: remote attackers may execute arbitrary code if netstat is used'
-            },
-            {
-              'cve':  'CVE-2022-30065',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.8',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.2',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox 1.35-x's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the copyvar function.",
-              'diffID':        'sha256:7fcb75871b2101082203959c83514ac8a9f4ecfee77a0fe9aa73bbe56afdf1b4',
-              'fixedVersions': [
-                '1.32.1-r9'
-              ],
-              'installedVersion': '1.32.1-r7',
-              'packageName':      'busybox',
-              'purl':             'pkg:apk/alpine/busybox@1.32.1-r7?arch=x86_64&distro=3.13.7',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2022-30065',
-                'https://bugs.busybox.net/show_bug.cgi?id=14781',
-                'https://cert-portal.siemens.com/productcert/pdf/ssa-333517.pdf',
-                'https://nvd.nist.gov/vuln/detail/CVE-2022-30065',
-                'https://www.cve.org/CVERecord?id=CVE-2022-30065'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      "busybox: A use-after-free in Busybox's awk applet leads to denial of service"
-            },
-            {
-              'cve':  'CVE-2022-0778',
-              'cvss': {
-                'bitnami': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'ghsa': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'nvd': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-835'
-              ],
-              'description':   'The BN_mod_sqrt() function, which computes a modular square root, contains a bug that can cause it to loop forever for non-prime moduli. Internally this function is used when parsing certificates that contain elliptic curve public keys in compressed form or explicit elliptic curve parameters with a base point encoded in compressed form. It is possible to trigger the infinite loop by crafting a certificate that has invalid explicit curve parameters. Since certificate parsing happens prior to verification of the certificate signature, any process that parses an externally supplied certificate may thus be subject to a denial of service attack. The infinite loop can also be reached when parsing crafted private keys as they can contain explicit elliptic curve parameters. Thus vulnerable situations include: - TLS clients consuming server certificates - TLS servers consuming client certificates - Hosting providers taking certificates or private keys from customers - Certificate authorities parsing certification requests from subscribers - Anything else which parses ASN.1 elliptic curve parameters Also any other applications that use the BN_mod_sqrt() where the attacker can control the parameter values are vulnerable to this DoS issue. In the OpenSSL 1.0.2 version the public key is not parsed during initial parsing of the certificate which makes it slightly harder to trigger the infinite loop. However any operation which requires the public key from the certificate will trigger the infinite loop. In particular the attacker can use a self-signed certificate to trigger the loop during verification of the certificate signature. This issue affects OpenSSL versions 1.0.2, 1.1.1 and 3.0. It was addressed in the releases of 1.1.1n and 3.0.2 on the 15th March 2022. Fixed in OpenSSL 3.0.2 (Affected 3.0.0,3.0.1). Fixed in OpenSSL 1.1.1n (Affected 1.1.1-1.1.1m). Fixed in OpenSSL 1.0.2zd (Affected 1.0.2-1.0.2zc).',
-              'diffID':        'sha256:7fcb75871b2101082203959c83514ac8a9f4ecfee77a0fe9aa73bbe56afdf1b4',
-              'fixedVersions': [
-                '1.1.1n-r0'
-              ],
-              'installedVersion': '1.1.1l-r0',
-              'packageName':      'libcrypto1.1',
-              'purl':             'pkg:apk/alpine/libcrypto1.1@1.1.1l-r0?arch=x86_64&distro=3.13.7',
-              'references':       [
-                'http://packetstormsecurity.com/files/167344/OpenSSL-1.0.2-1.1.1-3.0-BN_mod_sqrt-Infinite-Loop.html',
-                'http://seclists.org/fulldisclosure/2022/May/33',
-                'http://seclists.org/fulldisclosure/2022/May/35',
-                'http://seclists.org/fulldisclosure/2022/May/38',
-                'https://access.redhat.com/errata/RHSA-2022:5326',
-                'https://access.redhat.com/security/cve/CVE-2022-0778',
-                'https://bugzilla.redhat.com/2062202',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2062202',
-                'https://cert-portal.siemens.com/productcert/pdf/ssa-712929.pdf',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-0778',
-                'https://errata.almalinux.org/8/ALSA-2022-5326.html',
-                'https://errata.rockylinux.org/RLSA-2022:4899',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=3118eb64934499d93db3230748a452351d1d9a65',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=380085481c64de749a6dd25cdf0bcf4360b30f83',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=a466912611aa6cbdf550cd10601390e587451246',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=3118eb64934499d93db3230748a452351d1d9a65',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=380085481c64de749a6dd25cdf0bcf4360b30f83',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=a466912611aa6cbdf550cd10601390e587451246',
-                'https://linux.oracle.com/cve/CVE-2022-0778.html',
-                'https://linux.oracle.com/errata/ELSA-2022-9272.html',
-                'https://lists.debian.org/debian-lts-announce/2022/03/msg00023.html',
-                'https://lists.debian.org/debian-lts-announce/2022/03/msg00024.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/323SNN6ZX7PRJJWP2BUAFLPUAE42XWLZ',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/323SNN6ZX7PRJJWP2BUAFLPUAE42XWLZ/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GDB3GQVJPXJE7X5C5JN6JAA4XUDWD6E6',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GDB3GQVJPXJE7X5C5JN6JAA4XUDWD6E6/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/W6K3PR542DXWLEFFMFIDMME4CWMHJRMG',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/W6K3PR542DXWLEFFMFIDMME4CWMHJRMG/',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/323SNN6ZX7PRJJWP2BUAFLPUAE42XWLZ',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/GDB3GQVJPXJE7X5C5JN6JAA4XUDWD6E6',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/W6K3PR542DXWLEFFMFIDMME4CWMHJRMG',
-                'https://nvd.nist.gov/vuln/detail/CVE-2022-0778',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2022-0002',
-                'https://rustsec.org/advisories/RUSTSEC-2022-0014.html',
-                'https://security.gentoo.org/glsa/202210-02',
-                'https://security.netapp.com/advisory/ntap-20220321-0002',
-                'https://security.netapp.com/advisory/ntap-20220321-0002/',
-                'https://security.netapp.com/advisory/ntap-20220429-0005',
-                'https://security.netapp.com/advisory/ntap-20220429-0005/',
-                'https://security.netapp.com/advisory/ntap-20240621-0006',
-                'https://security.netapp.com/advisory/ntap-20240621-0006/',
-                'https://support.apple.com/kb/HT213255',
-                'https://support.apple.com/kb/HT213256',
-                'https://support.apple.com/kb/HT213257',
-                'https://ubuntu.com/security/notices/USN-5328-1',
-                'https://ubuntu.com/security/notices/USN-5328-2',
-                'https://ubuntu.com/security/notices/USN-6457-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2022-0778',
-                'https://www.debian.org/security/2022/dsa-5103',
-                'https://www.openssl.org/news/secadv/20220315.txt',
-                'https://www.oracle.com/security-alerts/cpuapr2022.html',
-                'https://www.oracle.com/security-alerts/cpujul2022.html',
-                'https://www.tenable.com/security/tns-2022-06',
-                'https://www.tenable.com/security/tns-2022-07',
-                'https://www.tenable.com/security/tns-2022-08',
-                'https://www.tenable.com/security/tns-2022-09'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: Infinite loop in BN_mod_sqrt() reachable when parsing certificates'
-            },
-            {
-              'cve':  'CVE-2022-2097',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N'
-                },
-                'nvd': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N'
-                },
-                'redhat': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-327'
-              ],
-              'description':   "AES OCB mode for 32-bit x86 platforms using the AES-NI assembly optimised implementation will not encrypt the entirety of the data under some circumstances. This could reveal sixteen bytes of data that was preexisting in the memory that wasn't written. In the special case of \"in place\" encryption, sixteen bytes of the plaintext would be revealed. Since OpenSSL does not support OCB based cipher suites for TLS and DTLS, they are both unaffected. Fixed in OpenSSL 3.0.5 (Affected 3.0.0-3.0.4). Fixed in OpenSSL 1.1.1q (Affected 1.1.1-1.1.1p).",
-              'diffID':        'sha256:7fcb75871b2101082203959c83514ac8a9f4ecfee77a0fe9aa73bbe56afdf1b4',
-              'fixedVersions': [
-                '1.1.1q-r0'
-              ],
-              'installedVersion': '1.1.1l-r0',
-              'packageName':      'libcrypto1.1',
-              'purl':             'pkg:apk/alpine/libcrypto1.1@1.1.1l-r0?arch=x86_64&distro=3.13.7',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2022:6224',
-                'https://access.redhat.com/security/cve/CVE-2022-2097',
-                'https://bugzilla.redhat.com/2081494',
-                'https://bugzilla.redhat.com/2087911',
-                'https://bugzilla.redhat.com/2087913',
-                'https://bugzilla.redhat.com/2097310',
-                'https://bugzilla.redhat.com/2104905',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2081494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2097310',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2100554',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2104905',
-                'https://cert-portal.siemens.com/productcert/pdf/ssa-332410.pdf',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-1292',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-2068',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-2097',
-                'https://errata.almalinux.org/9/ALSA-2022-6224.html',
-                'https://errata.rockylinux.org/RLSA-2022:5818',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=919925673d6c9cfed3c1085497f5dfbbed5fc431',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=a98f339ddd7e8f487d6e0088d4a9a42324885a93',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=919925673d6c9cfed3c1085497f5dfbbed5fc431',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=a98f339ddd7e8f487d6e0088d4a9a42324885a93',
-                'https://github.com/alexcrichton/openssl-src-rs',
-                'https://linux.oracle.com/cve/CVE-2022-2097.html',
-                'https://linux.oracle.com/errata/ELSA-2022-9955.html',
-                'https://lists.debian.org/debian-lts-announce/2023/02/msg00019.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/R6CK57NBQFTPUMXAPJURCGXUYT76NQAK',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/R6CK57NBQFTPUMXAPJURCGXUYT76NQAK/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/V6567JERRHHJW2GNGJGKDRNHR7SNPZK7',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/V6567JERRHHJW2GNGJGKDRNHR7SNPZK7/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VCMNWKERPBKOEBNL7CLTTX3ZZCZLH7XA',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VCMNWKERPBKOEBNL7CLTTX3ZZCZLH7XA/',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/R6CK57NBQFTPUMXAPJURCGXUYT76NQAK',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/R6CK57NBQFTPUMXAPJURCGXUYT76NQAK/',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/V6567JERRHHJW2GNGJGKDRNHR7SNPZK7',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/V6567JERRHHJW2GNGJGKDRNHR7SNPZK7/',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/VCMNWKERPBKOEBNL7CLTTX3ZZCZLH7XA',
-                'https://nvd.nist.gov/vuln/detail/CVE-2022-2097',
-                'https://rustsec.org/advisories/RUSTSEC-2022-0032.html',
-                'https://security.gentoo.org/glsa/202210-02',
-                'https://security.netapp.com/advisory/ntap-20220715-0011',
-                'https://security.netapp.com/advisory/ntap-20220715-0011/',
-                'https://security.netapp.com/advisory/ntap-20230420-0008',
-                'https://security.netapp.com/advisory/ntap-20230420-0008/',
-                'https://security.netapp.com/advisory/ntap-20240621-0006',
-                'https://security.netapp.com/advisory/ntap-20240621-0006/',
-                'https://ubuntu.com/security/notices/USN-5502-1',
-                'https://ubuntu.com/security/notices/USN-6457-1',
-                'https://www.cve.org/CVERecord?id=CVE-2022-2097',
-                'https://www.debian.org/security/2023/dsa-5343',
-                'https://www.openssl.org/news/secadv/20220705.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: AES OCB fails to encrypt some bytes'
-            },
-            {
-              'cve':  'CVE-2022-0778',
-              'cvss': {
-                'bitnami': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'ghsa': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'nvd': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-835'
-              ],
-              'description':   'The BN_mod_sqrt() function, which computes a modular square root, contains a bug that can cause it to loop forever for non-prime moduli. Internally this function is used when parsing certificates that contain elliptic curve public keys in compressed form or explicit elliptic curve parameters with a base point encoded in compressed form. It is possible to trigger the infinite loop by crafting a certificate that has invalid explicit curve parameters. Since certificate parsing happens prior to verification of the certificate signature, any process that parses an externally supplied certificate may thus be subject to a denial of service attack. The infinite loop can also be reached when parsing crafted private keys as they can contain explicit elliptic curve parameters. Thus vulnerable situations include: - TLS clients consuming server certificates - TLS servers consuming client certificates - Hosting providers taking certificates or private keys from customers - Certificate authorities parsing certification requests from subscribers - Anything else which parses ASN.1 elliptic curve parameters Also any other applications that use the BN_mod_sqrt() where the attacker can control the parameter values are vulnerable to this DoS issue. In the OpenSSL 1.0.2 version the public key is not parsed during initial parsing of the certificate which makes it slightly harder to trigger the infinite loop. However any operation which requires the public key from the certificate will trigger the infinite loop. In particular the attacker can use a self-signed certificate to trigger the loop during verification of the certificate signature. This issue affects OpenSSL versions 1.0.2, 1.1.1 and 3.0. It was addressed in the releases of 1.1.1n and 3.0.2 on the 15th March 2022. Fixed in OpenSSL 3.0.2 (Affected 3.0.0,3.0.1). Fixed in OpenSSL 1.1.1n (Affected 1.1.1-1.1.1m). Fixed in OpenSSL 1.0.2zd (Affected 1.0.2-1.0.2zc).',
-              'diffID':        'sha256:7fcb75871b2101082203959c83514ac8a9f4ecfee77a0fe9aa73bbe56afdf1b4',
-              'fixedVersions': [
-                '1.1.1n-r0'
-              ],
-              'installedVersion': '1.1.1l-r0',
-              'packageName':      'libssl1.1',
-              'purl':             'pkg:apk/alpine/libssl1.1@1.1.1l-r0?arch=x86_64&distro=3.13.7',
-              'references':       [
-                'http://packetstormsecurity.com/files/167344/OpenSSL-1.0.2-1.1.1-3.0-BN_mod_sqrt-Infinite-Loop.html',
-                'http://seclists.org/fulldisclosure/2022/May/33',
-                'http://seclists.org/fulldisclosure/2022/May/35',
-                'http://seclists.org/fulldisclosure/2022/May/38',
-                'https://access.redhat.com/errata/RHSA-2022:5326',
-                'https://access.redhat.com/security/cve/CVE-2022-0778',
-                'https://bugzilla.redhat.com/2062202',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2062202',
-                'https://cert-portal.siemens.com/productcert/pdf/ssa-712929.pdf',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-0778',
-                'https://errata.almalinux.org/8/ALSA-2022-5326.html',
-                'https://errata.rockylinux.org/RLSA-2022:4899',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=3118eb64934499d93db3230748a452351d1d9a65',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=380085481c64de749a6dd25cdf0bcf4360b30f83',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=a466912611aa6cbdf550cd10601390e587451246',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=3118eb64934499d93db3230748a452351d1d9a65',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=380085481c64de749a6dd25cdf0bcf4360b30f83',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=a466912611aa6cbdf550cd10601390e587451246',
-                'https://linux.oracle.com/cve/CVE-2022-0778.html',
-                'https://linux.oracle.com/errata/ELSA-2022-9272.html',
-                'https://lists.debian.org/debian-lts-announce/2022/03/msg00023.html',
-                'https://lists.debian.org/debian-lts-announce/2022/03/msg00024.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/323SNN6ZX7PRJJWP2BUAFLPUAE42XWLZ',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/323SNN6ZX7PRJJWP2BUAFLPUAE42XWLZ/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GDB3GQVJPXJE7X5C5JN6JAA4XUDWD6E6',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GDB3GQVJPXJE7X5C5JN6JAA4XUDWD6E6/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/W6K3PR542DXWLEFFMFIDMME4CWMHJRMG',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/W6K3PR542DXWLEFFMFIDMME4CWMHJRMG/',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/323SNN6ZX7PRJJWP2BUAFLPUAE42XWLZ',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/GDB3GQVJPXJE7X5C5JN6JAA4XUDWD6E6',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/W6K3PR542DXWLEFFMFIDMME4CWMHJRMG',
-                'https://nvd.nist.gov/vuln/detail/CVE-2022-0778',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2022-0002',
-                'https://rustsec.org/advisories/RUSTSEC-2022-0014.html',
-                'https://security.gentoo.org/glsa/202210-02',
-                'https://security.netapp.com/advisory/ntap-20220321-0002',
-                'https://security.netapp.com/advisory/ntap-20220321-0002/',
-                'https://security.netapp.com/advisory/ntap-20220429-0005',
-                'https://security.netapp.com/advisory/ntap-20220429-0005/',
-                'https://security.netapp.com/advisory/ntap-20240621-0006',
-                'https://security.netapp.com/advisory/ntap-20240621-0006/',
-                'https://support.apple.com/kb/HT213255',
-                'https://support.apple.com/kb/HT213256',
-                'https://support.apple.com/kb/HT213257',
-                'https://ubuntu.com/security/notices/USN-5328-1',
-                'https://ubuntu.com/security/notices/USN-5328-2',
-                'https://ubuntu.com/security/notices/USN-6457-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2022-0778',
-                'https://www.debian.org/security/2022/dsa-5103',
-                'https://www.openssl.org/news/secadv/20220315.txt',
-                'https://www.oracle.com/security-alerts/cpuapr2022.html',
-                'https://www.oracle.com/security-alerts/cpujul2022.html',
-                'https://www.tenable.com/security/tns-2022-06',
-                'https://www.tenable.com/security/tns-2022-07',
-                'https://www.tenable.com/security/tns-2022-08',
-                'https://www.tenable.com/security/tns-2022-09'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: Infinite loop in BN_mod_sqrt() reachable when parsing certificates'
-            },
-            {
-              'cve':  'CVE-2022-2097',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N'
-                },
-                'nvd': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N'
-                },
-                'redhat': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-327'
-              ],
-              'description':   "AES OCB mode for 32-bit x86 platforms using the AES-NI assembly optimised implementation will not encrypt the entirety of the data under some circumstances. This could reveal sixteen bytes of data that was preexisting in the memory that wasn't written. In the special case of \"in place\" encryption, sixteen bytes of the plaintext would be revealed. Since OpenSSL does not support OCB based cipher suites for TLS and DTLS, they are both unaffected. Fixed in OpenSSL 3.0.5 (Affected 3.0.0-3.0.4). Fixed in OpenSSL 1.1.1q (Affected 1.1.1-1.1.1p).",
-              'diffID':        'sha256:7fcb75871b2101082203959c83514ac8a9f4ecfee77a0fe9aa73bbe56afdf1b4',
-              'fixedVersions': [
-                '1.1.1q-r0'
-              ],
-              'installedVersion': '1.1.1l-r0',
-              'packageName':      'libssl1.1',
-              'purl':             'pkg:apk/alpine/libssl1.1@1.1.1l-r0?arch=x86_64&distro=3.13.7',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2022:6224',
-                'https://access.redhat.com/security/cve/CVE-2022-2097',
-                'https://bugzilla.redhat.com/2081494',
-                'https://bugzilla.redhat.com/2087911',
-                'https://bugzilla.redhat.com/2087913',
-                'https://bugzilla.redhat.com/2097310',
-                'https://bugzilla.redhat.com/2104905',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2081494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2097310',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2100554',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2104905',
-                'https://cert-portal.siemens.com/productcert/pdf/ssa-332410.pdf',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-1292',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-2068',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-2097',
-                'https://errata.almalinux.org/9/ALSA-2022-6224.html',
-                'https://errata.rockylinux.org/RLSA-2022:5818',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=919925673d6c9cfed3c1085497f5dfbbed5fc431',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=a98f339ddd7e8f487d6e0088d4a9a42324885a93',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=919925673d6c9cfed3c1085497f5dfbbed5fc431',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=a98f339ddd7e8f487d6e0088d4a9a42324885a93',
-                'https://github.com/alexcrichton/openssl-src-rs',
-                'https://linux.oracle.com/cve/CVE-2022-2097.html',
-                'https://linux.oracle.com/errata/ELSA-2022-9955.html',
-                'https://lists.debian.org/debian-lts-announce/2023/02/msg00019.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/R6CK57NBQFTPUMXAPJURCGXUYT76NQAK',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/R6CK57NBQFTPUMXAPJURCGXUYT76NQAK/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/V6567JERRHHJW2GNGJGKDRNHR7SNPZK7',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/V6567JERRHHJW2GNGJGKDRNHR7SNPZK7/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VCMNWKERPBKOEBNL7CLTTX3ZZCZLH7XA',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VCMNWKERPBKOEBNL7CLTTX3ZZCZLH7XA/',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/R6CK57NBQFTPUMXAPJURCGXUYT76NQAK',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/R6CK57NBQFTPUMXAPJURCGXUYT76NQAK/',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/V6567JERRHHJW2GNGJGKDRNHR7SNPZK7',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/V6567JERRHHJW2GNGJGKDRNHR7SNPZK7/',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/VCMNWKERPBKOEBNL7CLTTX3ZZCZLH7XA',
-                'https://nvd.nist.gov/vuln/detail/CVE-2022-2097',
-                'https://rustsec.org/advisories/RUSTSEC-2022-0032.html',
-                'https://security.gentoo.org/glsa/202210-02',
-                'https://security.netapp.com/advisory/ntap-20220715-0011',
-                'https://security.netapp.com/advisory/ntap-20220715-0011/',
-                'https://security.netapp.com/advisory/ntap-20230420-0008',
-                'https://security.netapp.com/advisory/ntap-20230420-0008/',
-                'https://security.netapp.com/advisory/ntap-20240621-0006',
-                'https://security.netapp.com/advisory/ntap-20240621-0006/',
-                'https://ubuntu.com/security/notices/USN-5502-1',
-                'https://ubuntu.com/security/notices/USN-6457-1',
-                'https://www.cve.org/CVERecord?id=CVE-2022-2097',
-                'https://www.debian.org/security/2023/dsa-5343',
-                'https://www.openssl.org/news/secadv/20220705.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: AES OCB fails to encrypt some bytes'
-            },
-            {
-              'cve':  'CVE-2022-28391',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '8.8',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-88'
-              ],
-              'description':   "BusyBox through 1.35.0 allows remote attackers to execute arbitrary code if netstat is used to print a DNS PTR record's value to a VT compatible terminal. Alternatively, the attacker could choose to change the terminal's colors.",
-              'diffID':        'sha256:7fcb75871b2101082203959c83514ac8a9f4ecfee77a0fe9aa73bbe56afdf1b4',
-              'fixedVersions': [
-                '1.32.1-r8'
-              ],
-              'installedVersion': '1.32.1-r7',
-              'packageName':      'ssl_client',
-              'purl':             'pkg:apk/alpine/ssl_client@1.32.1-r7?arch=x86_64&distro=3.13.7',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2022-28391',
-                'https://git.alpinelinux.org/aports/plain/main/busybox/0001-libbb-sockaddr2str-ensure-only-printable-characters-.patch',
-                'https://git.alpinelinux.org/aports/plain/main/busybox/0002-nslookup-sanitize-all-printed-strings-with-printable.patch',
-                'https://gitlab.alpinelinux.org/alpine/aports/-/issues/13661',
-                'https://nvd.nist.gov/vuln/detail/CVE-2022-28391',
-                'https://www.cve.org/CVERecord?id=CVE-2022-28391'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: remote attackers may execute arbitrary code if netstat is used'
-            },
-            {
-              'cve':  'CVE-2022-30065',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.8',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.2',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox 1.35-x's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the copyvar function.",
-              'diffID':        'sha256:7fcb75871b2101082203959c83514ac8a9f4ecfee77a0fe9aa73bbe56afdf1b4',
-              'fixedVersions': [
-                '1.32.1-r9'
-              ],
-              'installedVersion': '1.32.1-r7',
-              'packageName':      'ssl_client',
-              'purl':             'pkg:apk/alpine/ssl_client@1.32.1-r7?arch=x86_64&distro=3.13.7',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2022-30065',
-                'https://bugs.busybox.net/show_bug.cgi?id=14781',
-                'https://cert-portal.siemens.com/productcert/pdf/ssa-333517.pdf',
-                'https://nvd.nist.gov/vuln/detail/CVE-2022-30065',
-                'https://www.cve.org/CVERecord?id=CVE-2022-30065'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      "busybox: A use-after-free in Busybox's awk applet leads to denial of service"
-            },
-            {
-              'cve':  'CVE-2022-37434',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '9.8',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-787',
-                'CWE-120'
-              ],
-              'description':   'zlib through 1.2.12 has a heap-based buffer over-read or buffer overflow in inflate in inflate.c via a large gzip header extra field. NOTE: only applications that call inflateGetHeader are affected. Some common applications bundle the affected zlib source code but may be unable to call inflateGetHeader (e.g., see the nodejs/node reference).',
-              'diffID':        'sha256:7fcb75871b2101082203959c83514ac8a9f4ecfee77a0fe9aa73bbe56afdf1b4',
-              'fixedVersions': [
-                '1.2.12-r2'
-              ],
-              'installedVersion': '1.2.11-r3',
-              'packageName':      'zlib',
-              'purl':             'pkg:apk/alpine/zlib@1.2.11-r3?arch=x86_64&distro=3.13.7',
-              'references':       [
-                'http://seclists.org/fulldisclosure/2022/Oct/37',
-                'http://seclists.org/fulldisclosure/2022/Oct/38',
-                'http://seclists.org/fulldisclosure/2022/Oct/41',
-                'http://seclists.org/fulldisclosure/2022/Oct/42',
-                'http://www.openwall.com/lists/oss-security/2022/08/05/2',
-                'http://www.openwall.com/lists/oss-security/2022/08/09/1',
-                'https://access.redhat.com/errata/RHSA-2022:8291',
-                'https://access.redhat.com/security/cve/CVE-2022-37434',
-                'https://bugzilla.redhat.com/2116639',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2053198',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2077431',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2081296',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2116639',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-37434',
-                'https://errata.almalinux.org/9/ALSA-2022-8291.html',
-                'https://errata.rockylinux.org/RLSA-2022:8291',
-                'https://github.com/curl/curl/issues/9271',
-                'https://github.com/ivd38/zlib_overflow',
-                'https://github.com/madler/zlib/blob/21767c654d31d2dccdde4330529775c6c5fd5389/zlib.h#L1062-L1063',
-                'https://github.com/madler/zlib/commit/1eb7682f845ac9e9bf9ae35bbfb3bad5dacbd91d',
-                'https://github.com/madler/zlib/commit/eff308af425b67093bab25f80f1ae950166bece1',
-                'https://github.com/nodejs/node/blob/75b68c6e4db515f76df73af476eccf382bbcb00a/deps/zlib/inflate.c#L762-L764',
-                'https://linux.oracle.com/cve/CVE-2022-37434.html',
-                'https://linux.oracle.com/errata/ELSA-2023-1095.html',
-                'https://lists.debian.org/debian-lts-announce/2022/09/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JWN4VE3JQR4O2SOUS5TXNLANRPMHWV4I/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NMBOJ77A7T7PQCARMDUK75TE6LLESZ3O/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PAVPQNCG3XRLCLNSQRM3KAN5ZFMVXVTY/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/X5U7OTKZSHY2I3ZFJSR2SHFHW72RKGDK/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YRQAI7H4M4RQZ2IWZUEEXECBE5D56BH2/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2022-37434',
-                'https://security.netapp.com/advisory/ntap-20220901-0005/',
-                'https://security.netapp.com/advisory/ntap-20230427-0007/',
-                'https://support.apple.com/kb/HT213488',
-                'https://support.apple.com/kb/HT213489',
-                'https://support.apple.com/kb/HT213490',
-                'https://support.apple.com/kb/HT213491',
-                'https://support.apple.com/kb/HT213493',
-                'https://support.apple.com/kb/HT213494',
-                'https://ubuntu.com/security/notices/USN-5570-1',
-                'https://ubuntu.com/security/notices/USN-5570-2',
-                'https://ubuntu.com/security/notices/USN-5573-1',
-                'https://ubuntu.com/security/notices/USN-6736-1',
-                'https://ubuntu.com/security/notices/USN-6736-2',
-                'https://www.cve.org/CVERecord?id=CVE-2022-37434',
-                'https://www.debian.org/security/2022/dsa-5218'
-              ],
-              'severity':   'CRITICAL',
-              'suppressed': false,
-              'title':      'zlib: heap-based buffer over-read and overflow in inflate() in inflate.c via a large gzip header extra field'
-            },
-            {
-              'cve':  'CVE-2018-25032',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'nvd': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '8.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-787'
-              ],
-              'description':   'zlib before 1.2.12 allows memory corruption when deflating (i.e., when compressing) if the input has many distant matches.',
-              'diffID':        'sha256:7fcb75871b2101082203959c83514ac8a9f4ecfee77a0fe9aa73bbe56afdf1b4',
-              'fixedVersions': [
-                '1.2.12-r0'
-              ],
-              'installedVersion': '1.2.11-r3',
-              'packageName':      'zlib',
-              'purl':             'pkg:apk/alpine/zlib@1.2.11-r3?arch=x86_64&distro=3.13.7',
-              'references':       [
-                'http://seclists.org/fulldisclosure/2022/May/33',
-                'http://seclists.org/fulldisclosure/2022/May/35',
-                'http://seclists.org/fulldisclosure/2022/May/38',
-                'http://www.openwall.com/lists/oss-security/2022/03/25/2',
-                'http://www.openwall.com/lists/oss-security/2022/03/26/1',
-                'https://access.redhat.com/errata/RHSA-2022:8420',
-                'https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-25032.json',
-                'https://access.redhat.com/security/cve/CVE-2018-25032',
-                'https://bugzilla.redhat.com/2067945',
-                'https://cert-portal.siemens.com/productcert/pdf/ssa-333517.pdf',
-                'https://errata.almalinux.org/9/ALSA-2022-8420.html',
-                'https://github.com/advisories/GHSA-jc36-42cf-vqwj',
-                'https://github.com/madler/zlib/commit/5c44459c3b28a9bd3283aaceab7c615f8020c531',
-                'https://github.com/madler/zlib/compare/v1.2.11...v1.2.12',
-                'https://github.com/madler/zlib/issues/605',
-                'https://github.com/rubysec/ruby-advisory-db/blob/master/gems/nokogiri/CVE-2018-25032.yml',
-                'https://github.com/sparklemotion/nokogiri/releases/tag/v1.13.4',
-                'https://github.com/sparklemotion/nokogiri/security/advisories/GHSA-v6gp-9mmm-c6p5',
-                'https://groups.google.com/g/ruby-security-ann/c/vX7qSjsvWis/m/TJWN4oOKBwAJ',
-                'https://linux.oracle.com/cve/CVE-2018-25032.html',
-                'https://linux.oracle.com/errata/ELSA-2022-9565.html',
-                'https://lists.debian.org/debian-lts-announce/2022/04/msg00000.html',
-                'https://lists.debian.org/debian-lts-announce/2022/05/msg00008.html',
-                'https://lists.debian.org/debian-lts-announce/2022/09/msg00023.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DCZFIJBJTZ7CL5QXBFKTQ22Q26VINRUF/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DF62MVMH3QUGMBDCB3DY2ERQ6EBHTADB/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JZZPTWRYQULAOL3AW7RZJNVZ2UONXCV4/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NS2D2GFPFGOJUL4WQ3DUAY7HF4VWQ77F/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VOKNP2L734AEL47NRYGVZIKEFOUBQY5Y/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/XOKFMSNQ5D5WGMALBNBXU3GE442V74WU/',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/DCZFIJBJTZ7CL5QXBFKTQ22Q26VINRUF',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/DCZFIJBJTZ7CL5QXBFKTQ22Q26VINRUF/',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/DF62MVMH3QUGMBDCB3DY2ERQ6EBHTADB',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/DF62MVMH3QUGMBDCB3DY2ERQ6EBHTADB/',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/JZZPTWRYQULAOL3AW7RZJNVZ2UONXCV4',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/JZZPTWRYQULAOL3AW7RZJNVZ2UONXCV4/',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/NS2D2GFPFGOJUL4WQ3DUAY7HF4VWQ77F',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/NS2D2GFPFGOJUL4WQ3DUAY7HF4VWQ77F/',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/VOKNP2L734AEL47NRYGVZIKEFOUBQY5Y',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/VOKNP2L734AEL47NRYGVZIKEFOUBQY5Y/',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/XOKFMSNQ5D5WGMALBNBXU3GE442V74WU',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/XOKFMSNQ5D5WGMALBNBXU3GE442V74WU/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2018-25032',
-                'https://security.gentoo.org/glsa/202210-42',
-                'https://security.netapp.com/advisory/ntap-20220526-0009',
-                'https://security.netapp.com/advisory/ntap-20220526-0009/',
-                'https://security.netapp.com/advisory/ntap-20220729-0004',
-                'https://security.netapp.com/advisory/ntap-20220729-0004/',
-                'https://support.apple.com/kb/HT213255',
-                'https://support.apple.com/kb/HT213256',
-                'https://support.apple.com/kb/HT213257',
-                'https://ubuntu.com/security/notices/USN-5355-1',
-                'https://ubuntu.com/security/notices/USN-5355-2',
-                'https://ubuntu.com/security/notices/USN-5359-1',
-                'https://ubuntu.com/security/notices/USN-5359-2',
-                'https://ubuntu.com/security/notices/USN-5739-1',
-                'https://ubuntu.com/security/notices/USN-6736-1',
-                'https://ubuntu.com/security/notices/USN-6736-2',
-                'https://www.cve.org/CVERecord?id=CVE-2018-25032',
-                'https://www.debian.org/security/2022/dsa-5111',
-                'https://www.openwall.com/lists/oss-security/2022/03/24/1',
-                'https://www.openwall.com/lists/oss-security/2022/03/28/1',
-                'https://www.openwall.com/lists/oss-security/2022/03/28/3',
-                'https://www.oracle.com/security-alerts/cpujul2022.html'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'zlib: A flaw found in zlib when compressing (not decompressing) certain inputs'
-            }
-          ]
-        }
-      ],
-      'summary': {
-        'critical':   1,
-        'high':       7,
-        'low':        0,
-        'medium':     2,
-        'suppressed': 0,
-        'unknown':    0
-      }
-    }
-  },
-  {
-    'id':    'default/9a7113b4c89ac9f3a0e9cf82f7186514f2c18f53b2fec262776956c671302125',
-    'type':  'storage.sbomscanner.kubewarden.io.vulnerabilityreport',
-    'links': {
-      'patch':  'https://localhost:8005/v1/storage.sbomscanner.kubewarden.io.vulnerabilityreports/default/9a7113b4c89ac9f3a0e9cf82f7186514f2c18f53b2fec262776956c671302125',
-      'remove': 'https://localhost:8005/v1/storage.sbomscanner.kubewarden.io.vulnerabilityreports/default/9a7113b4c89ac9f3a0e9cf82f7186514f2c18f53b2fec262776956c671302125',
-      'self':   'https://localhost:8005/v1/storage.sbomscanner.kubewarden.io.vulnerabilityreports/default/9a7113b4c89ac9f3a0e9cf82f7186514f2c18f53b2fec262776956c671302125',
-      'update': 'https://localhost:8005/v1/storage.sbomscanner.kubewarden.io.vulnerabilityreports/default/9a7113b4c89ac9f3a0e9cf82f7186514f2c18f53b2fec262776956c671302125',
-      'view':   'https://localhost:8005/apis/storage.sbomscanner.kubewarden.io/v1alpha1/namespaces/default/vulnerabilityreports/9a7113b4c89ac9f3a0e9cf82f7186514f2c18f53b2fec262776956c671302125'
-    },
-    'apiVersion':    'storage.sbomscanner.kubewarden.io/v1alpha1',
-    'imageMetadata': {
-      'digest':      'sha256:6cd7a5c868b12cf98a34451468f01a434c31825f8a562f2644a982a4bd0dc797',
-      'platform':    'linux/arm/v7',
-      'registry':    'lsong-demo1',
-      'registryURI': 'registry-1.docker.io',
-      'repository':  'library/alpine',
-      'tag':         '3.19.2'
-    },
-    'kind':     'VulnerabilityReport',
-    'metadata': {
-      'creationTimestamp': '2026-01-14T18:51:22Z',
-      'fields':            [
-        '9a7113b4c89ac9f3a0e9cf82f7186514f2c18f53b2fec262776956c671302125',
-        'registry-1.docker.io/library/alpine:3.19.2',
-        'linux/arm/v7',
-        '22 (0 suppressed)'
-      ],
-      'labels': {
-        'app.kubernetes.io/managed-by':          'sbomscanner',
-        'app.kubernetes.io/part-of':             'sbomscanner',
-        'sbomscanner.kubewarden.io/scanjob-uid': '445c600a-c4b6-40b3-bd71-f2d2140a37d5'
-      },
-      'name':            '9a7113b4c89ac9f3a0e9cf82f7186514f2c18f53b2fec262776956c671302125',
-      'namespace':       'default',
-      'ownerReferences': [
-        {
-          'apiVersion':         'storage.sbomscanner.kubewarden.io/v1alpha1',
-          'blockOwnerDeletion': true,
-          'controller':         true,
-          'kind':               'SBOM',
-          'name':               '9a7113b4c89ac9f3a0e9cf82f7186514f2c18f53b2fec262776956c671302125',
-          'uid':                '85d52231-0995-438f-a8f7-cd18d7b435a3'
-        }
-      ],
-      'relationships': [
-        {
-          'fromId':   'default/9a7113b4c89ac9f3a0e9cf82f7186514f2c18f53b2fec262776956c671302125',
-          'fromType': 'storage.sbomscanner.kubewarden.io.sbom',
-          'rel':      'owner',
-          'state':    'active',
-          'message':  'Resource is current'
-        }
-      ],
-      'resourceVersion': '1',
-      'state':           {
-        'error':         false,
-        'message':       'Resource is current',
-        'name':          'active',
-        'transitioning': false
-      },
-      'uid': 'a488c3dd-d75e-409c-a2af-c278b9941565'
-    },
-    'report': {
-      'results': [
-        {
-          'class':           'os-pkgs',
-          'target':          '/var/run/worker/trivy.sbom.3774624403.json (alpine 3.19.2)',
-          'type':            'alpine',
-          'vulnerabilities': [
-            {
-              'cve':  'CVE-2024-58251',
-              'cwes': [
-                'CWE-150'
-              ],
-              'description':   'In netstat in BusyBox through 1.37.0, local users can launch of network application with an argv[0] containing an ANSI terminal escape sequence, leading to a denial of service (terminal locked up) when netstat is used by a victim.',
-              'diffID':        'sha256:372c5dfe03e2dd2f702637701b1b0b85048daa6dd67f4bc77fd2ac9b66506dcb',
-              'fixedVersions': [
-                '1.36.1-r21'
-              ],
-              'installedVersion': '1.36.1-r19',
-              'packageName':      'busybox',
-              'purl':             'pkg:apk/alpine/busybox@1.36.1-r19?arch=armv7&distro=3.19.2',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2025/04/23/6',
-                'https://bugs.busybox.net/show_bug.cgi?id=15922',
-                'https://www.busybox.net',
-                'https://www.busybox.net/downloads/',
-                'https://www.cve.org/CVERecord?id=CVE-2024-58251'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'In netstat in BusyBox through 1.37.0, local users can launch of networ ...'
-            },
-            {
-              'cve':  'CVE-2025-46394',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '3.3',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-451'
-              ],
-              'description':   'In tar in BusyBox through 1.37.0, a TAR archive can have filenames hidden from a listing through the use of terminal escape sequences.',
-              'diffID':        'sha256:372c5dfe03e2dd2f702637701b1b0b85048daa6dd67f4bc77fd2ac9b66506dcb',
-              'fixedVersions': [
-                '1.36.1-r21'
-              ],
-              'installedVersion': '1.36.1-r19',
-              'packageName':      'busybox',
-              'purl':             'pkg:apk/alpine/busybox@1.36.1-r19?arch=armv7&distro=3.19.2',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2025/04/23/5',
-                'http://www.openwall.com/lists/oss-security/2025/04/24/3',
-                'https://bugs.busybox.net/show_bug.cgi?id=16018',
-                'https://lists.busybox.net/pipermail/busybox/2024-July/090806.html',
-                'https://lists.busybox.net/pipermail/busybox/2024-July/090814.html',
-                'https://www.busybox.net',
-                'https://www.busybox.net/downloads/',
-                'https://www.cve.org/CVERecord?id=CVE-2025-46394',
-                'https://www.openwall.com/lists/oss-security/2025/04/23/1'
-              ],
-              'severity':   'LOW',
-              'suppressed': false,
-              'title':      'In tar in BusyBox through 1.37.0, a TAR archive can have filenames hid ...'
-            },
-            {
-              'cve':  'CVE-2024-58251',
-              'cwes': [
-                'CWE-150'
-              ],
-              'description':   'In netstat in BusyBox through 1.37.0, local users can launch of network application with an argv[0] containing an ANSI terminal escape sequence, leading to a denial of service (terminal locked up) when netstat is used by a victim.',
-              'diffID':        'sha256:372c5dfe03e2dd2f702637701b1b0b85048daa6dd67f4bc77fd2ac9b66506dcb',
-              'fixedVersions': [
-                '1.36.1-r21'
-              ],
-              'installedVersion': '1.36.1-r19',
-              'packageName':      'busybox-binsh',
-              'purl':             'pkg:apk/alpine/busybox-binsh@1.36.1-r19?arch=armv7&distro=3.19.2',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2025/04/23/6',
-                'https://bugs.busybox.net/show_bug.cgi?id=15922',
-                'https://www.busybox.net',
-                'https://www.busybox.net/downloads/',
-                'https://www.cve.org/CVERecord?id=CVE-2024-58251'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'In netstat in BusyBox through 1.37.0, local users can launch of networ ...'
-            },
-            {
-              'cve':  'CVE-2025-46394',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '3.3',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-451'
-              ],
-              'description':   'In tar in BusyBox through 1.37.0, a TAR archive can have filenames hidden from a listing through the use of terminal escape sequences.',
-              'diffID':        'sha256:372c5dfe03e2dd2f702637701b1b0b85048daa6dd67f4bc77fd2ac9b66506dcb',
-              'fixedVersions': [
-                '1.36.1-r21'
-              ],
-              'installedVersion': '1.36.1-r19',
-              'packageName':      'busybox-binsh',
-              'purl':             'pkg:apk/alpine/busybox-binsh@1.36.1-r19?arch=armv7&distro=3.19.2',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2025/04/23/5',
-                'http://www.openwall.com/lists/oss-security/2025/04/24/3',
-                'https://bugs.busybox.net/show_bug.cgi?id=16018',
-                'https://lists.busybox.net/pipermail/busybox/2024-July/090806.html',
-                'https://lists.busybox.net/pipermail/busybox/2024-July/090814.html',
-                'https://www.busybox.net',
-                'https://www.busybox.net/downloads/',
-                'https://www.cve.org/CVERecord?id=CVE-2025-46394',
-                'https://www.openwall.com/lists/oss-security/2025/04/23/1'
-              ],
-              'severity':   'LOW',
-              'suppressed': false,
-              'title':      'In tar in BusyBox through 1.37.0, a TAR archive can have filenames hid ...'
-            },
-            {
-              'cve':  'CVE-2024-6119',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-843'
-              ],
-              'description':   "Issue summary: Applications performing certificate name checks (e.g., TLS\nclients checking server certificates) may attempt to read an invalid memory\naddress resulting in abnormal termination of the application process.\n\nImpact summary: Abnormal termination of an application can a cause a denial of\nservice.\n\nApplications performing certificate name checks (e.g., TLS clients checking\nserver certificates) may attempt to read an invalid memory address when\ncomparing the expected name with an `otherName` subject alternative name of an\nX.509 certificate. This may result in an exception that terminates the\napplication program.\n\nNote that basic certificate chain validation (signatures, dates, ...) is not\naffected, the denial of service can occur only when the application also\nspecifies an expected DNS name, Email address or IP address.\n\nTLS servers rarely solicit client certificates, and even when they do, they\ngenerally don't perform a name check against a reference identifier (expected\nidentity), but rather extract the presented identity after checking the\ncertificate chain.  So TLS servers are generally not affected and the severity\nof the issue is Moderate.\n\nThe FIPS modules in 3.3, 3.2, 3.1 and 3.0 are not affected by this issue.",
-              'diffID':        'sha256:372c5dfe03e2dd2f702637701b1b0b85048daa6dd67f4bc77fd2ac9b66506dcb',
-              'fixedVersions': [
-                '3.1.7-r0'
-              ],
-              'installedVersion': '3.1.5-r0',
-              'packageName':      'libcrypto3',
-              'purl':             'pkg:apk/alpine/libcrypto3@3.1.5-r0?arch=armv7&distro=3.19.2',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2024/09/03/4',
-                'https://access.redhat.com/errata/RHSA-2024:8935',
-                'https://access.redhat.com/security/cve/CVE-2024-6119',
-                'https://bugzilla.redhat.com/2306158',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2306158',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-6119',
-                'https://errata.almalinux.org/9/ALSA-2024-8935.html',
-                'https://errata.rockylinux.org/RLSA-2024:6783',
-                'https://github.com/openssl/openssl/commit/05f360d9e849a1b277db628f1f13083a7f8dd04f',
-                'https://github.com/openssl/openssl/commit/06d1dc3fa96a2ba5a3e22735a033012aadc9f0d6',
-                'https://github.com/openssl/openssl/commit/621f3729831b05ee828a3203eddb621d014ff2b2',
-                'https://github.com/openssl/openssl/commit/7dfcee2cd2a63b2c64b9b4b0850be64cb695b0a0',
-                'https://github.com/openssl/openssl/security/advisories/GHSA-5qrj-vq78-58fj',
-                'https://linux.oracle.com/cve/CVE-2024-6119.html',
-                'https://linux.oracle.com/errata/ELSA-2024-8935.html',
-                'https://lists.freebsd.org/archives/freebsd-security/2024-September/000303.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2024-6119',
-                'https://openssl-library.org/news/secadv/20240903.txt',
-                'https://security.netapp.com/advisory/ntap-20240912-0001/',
-                'https://ubuntu.com/security/notices/USN-6986-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2024-6119'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: Possible denial of service in X.509 name checks'
-            },
-            {
-              'cve':  'CVE-2024-13176',
-              'cvss': {
-                'redhat': {
-                  'v3score':  '4.7',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-385'
-              ],
-              'description':   'Issue summary: A timing side-channel which could potentially allow recovering\nthe private key exists in the ECDSA signature computation.\n\nImpact summary: A timing side-channel in ECDSA signature computations\ncould allow recovering the private key by an attacker. However, measuring\nthe timing would require either local access to the signing application or\na very fast network connection with low latency.\n\nThere is a timing signal of around 300 nanoseconds when the top word of\nthe inverted ECDSA nonce value is zero. This can happen with significant\nprobability only for some of the supported elliptic curves. In particular\nthe NIST P-521 curve is affected. To be able to measure this leak, the attacker\nprocess must either be located in the same physical computer or must\nhave a very fast network connection with low latency. For that reason\nthe severity of this vulnerability is Low.\n\nThe FIPS modules in 3.4, 3.3, 3.2, 3.1 and 3.0 are affected by this issue.',
-              'diffID':        'sha256:372c5dfe03e2dd2f702637701b1b0b85048daa6dd67f4bc77fd2ac9b66506dcb',
-              'fixedVersions': [
-                '3.1.8-r0'
-              ],
-              'installedVersion': '3.1.5-r0',
-              'packageName':      'libcrypto3',
-              'purl':             'pkg:apk/alpine/libcrypto3@3.1.5-r0?arch=armv7&distro=3.19.2',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2025/01/20/2',
-                'https://access.redhat.com/errata/RHSA-2025:16046',
-                'https://access.redhat.com/security/cve/CVE-2024-13176',
-                'https://bugzilla.redhat.com/2359885',
-                'https://bugzilla.redhat.com/2359888',
-                'https://bugzilla.redhat.com/2359892',
-                'https://bugzilla.redhat.com/2359894',
-                'https://bugzilla.redhat.com/2359895',
-                'https://bugzilla.redhat.com/2359899',
-                'https://bugzilla.redhat.com/2359900',
-                'https://bugzilla.redhat.com/2359902',
-                'https://bugzilla.redhat.com/2359903',
-                'https://bugzilla.redhat.com/2359911',
-                'https://bugzilla.redhat.com/2359918',
-                'https://bugzilla.redhat.com/2359920',
-                'https://bugzilla.redhat.com/2359924',
-                'https://bugzilla.redhat.com/2359928',
-                'https://bugzilla.redhat.com/2359930',
-                'https://bugzilla.redhat.com/2359932',
-                'https://bugzilla.redhat.com/2359934',
-                'https://bugzilla.redhat.com/2359938',
-                'https://bugzilla.redhat.com/2359940',
-                'https://bugzilla.redhat.com/2359943',
-                'https://bugzilla.redhat.com/2359944',
-                'https://bugzilla.redhat.com/2359945',
-                'https://bugzilla.redhat.com/2359947',
-                'https://bugzilla.redhat.com/2359950',
-                'https://bugzilla.redhat.com/2359963',
-                'https://bugzilla.redhat.com/2359964',
-                'https://bugzilla.redhat.com/2359972',
-                'https://bugzilla.redhat.com/2370920',
-                'https://bugzilla.redhat.com/2380264',
-                'https://bugzilla.redhat.com/2380273',
-                'https://bugzilla.redhat.com/2380274',
-                'https://bugzilla.redhat.com/2380278',
-                'https://bugzilla.redhat.com/2380280',
-                'https://bugzilla.redhat.com/2380283',
-                'https://bugzilla.redhat.com/2380284',
-                'https://bugzilla.redhat.com/2380290',
-                'https://bugzilla.redhat.com/2380291',
-                'https://bugzilla.redhat.com/2380295',
-                'https://bugzilla.redhat.com/2380298',
-                'https://bugzilla.redhat.com/2380306',
-                'https://bugzilla.redhat.com/2380308',
-                'https://bugzilla.redhat.com/2380309',
-                'https://bugzilla.redhat.com/2380310',
-                'https://bugzilla.redhat.com/2380312',
-                'https://bugzilla.redhat.com/2380313',
-                'https://bugzilla.redhat.com/2380320',
-                'https://bugzilla.redhat.com/2380321',
-                'https://bugzilla.redhat.com/2380322',
-                'https://bugzilla.redhat.com/2380326',
-                'https://bugzilla.redhat.com/2380327',
-                'https://bugzilla.redhat.com/2380334',
-                'https://bugzilla.redhat.com/2380335',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2338999',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359885',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359888',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359892',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359894',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359895',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359899',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359900',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359902',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359903',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359911',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359918',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359920',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359924',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359928',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359930',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359932',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359934',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359938',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359940',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359943',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359944',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359945',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359947',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359950',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359963',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359964',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359972',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2370920',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380264',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380273',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380274',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380278',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380280',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380283',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380284',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380290',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380291',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380295',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380298',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380306',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380308',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380309',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380310',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380312',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380313',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380320',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380321',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380322',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380326',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380327',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380334',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380335',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-13176',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21574',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21575',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21577',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21579',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21580',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21581',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21584',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21585',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21588',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30681',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30682',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30683',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30684',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30685',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30687',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30688',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30689',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30693',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30695',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30696',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30699',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30703',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30704',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30705',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30715',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30721',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30722',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50077',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50078',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50079',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50080',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50081',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50082',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50083',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50084',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50085',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50086',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50087',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50088',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50091',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50092',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50093',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50094',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50096',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50097',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50098',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50099',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50100',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50101',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50102',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50104',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-5399',
-                'https://errata.almalinux.org/9/ALSA-2025-16046.html',
-                'https://errata.rockylinux.org/RLSA-2025:15699',
-                'https://github.com/openssl/openssl/commit/07272b05b04836a762b4baa874958af51d513844',
-                'https://github.com/openssl/openssl/commit/2af62e74fb59bc469506bc37eb2990ea408d9467',
-                'https://github.com/openssl/openssl/commit/392dcb336405a0c94486aa6655057f59fd3a0902',
-                'https://github.com/openssl/openssl/commit/4b1cb94a734a7d4ec363ac0a215a25c181e11f65',
-                'https://github.com/openssl/openssl/commit/77c608f4c8857e63e98e66444e2e761c9627916f',
-                'https://github.openssl.org/openssl/extended-releases/commit/0d5fd1ab987f7571e2c955d8d8b638fc0fb54ded',
-                'https://github.openssl.org/openssl/extended-releases/commit/a2639000db19878d5d89586ae7b725080592ae86',
-                'https://linux.oracle.com/cve/CVE-2024-13176.html',
-                'https://linux.oracle.com/errata/ELSA-2025-16046.html',
-                'https://lists.debian.org/debian-lts-announce/2025/05/msg00028.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2024-13176',
-                'https://openssl-library.org/news/secadv/20250120.txt',
-                'https://security.netapp.com/advisory/ntap-20250124-0005/',
-                'https://security.netapp.com/advisory/ntap-20250418-0010/',
-                'https://security.netapp.com/advisory/ntap-20250502-0006/',
-                'https://ubuntu.com/security/notices/USN-7264-1',
-                'https://ubuntu.com/security/notices/USN-7278-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2024-13176',
-                'https://www.oracle.com/security-alerts/cpuapr2025.html#AppendixMSQL'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: Timing side-channel in ECDSA signature computation'
-            },
-            {
-              'cve':  'CVE-2024-4741',
-              'cvss': {
-                'redhat': {
-                  'v3score':  '5.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   'Issue summary: Calling the OpenSSL API function SSL_free_buffers may cause\nmemory to be accessed that was previously freed in some situations\n\nImpact summary: A use after free can have a range of potential consequences such\nas the corruption of valid data, crashes or execution of arbitrary code.\nHowever, only applications that directly call the SSL_free_buffers function are\naffected by this issue. Applications that do not call this function are not\nvulnerable. Our investigations indicate that this function is rarely used by\napplications.\n\nThe SSL_free_buffers function is used to free the internal OpenSSL buffer used\nwhen processing an incoming record from the network. The call is only expected\nto succeed if the buffer is not currently in use. However, two scenarios have\nbeen identified where the buffer is freed even when still in use.\n\nThe first scenario occurs where a record header has been received from the\nnetwork and processed by OpenSSL, but the full record body has not yet arrived.\nIn this case calling SSL_free_buffers will succeed even though a record has only\nbeen partially processed and the buffer is still in use.\n\nThe second scenario occurs where a full record containing application data has\nbeen received and processed by OpenSSL but the application has only read part of\nthis data. Again a call to SSL_free_buffers will succeed even though the buffer\nis still in use.\n\nWhile these scenarios could occur accidentally during normal operation a\nmalicious attacker could attempt to engineer a stituation where this occurs.\nWe are not aware of this issue being actively exploited.\n\nThe FIPS modules in 3.3, 3.2, 3.1 and 3.0 are not affected by this issue.',
-              'diffID':        'sha256:372c5dfe03e2dd2f702637701b1b0b85048daa6dd67f4bc77fd2ac9b66506dcb',
-              'fixedVersions': [
-                '3.1.6-r0'
-              ],
-              'installedVersion': '3.1.5-r0',
-              'packageName':      'libcrypto3',
-              'purl':             'pkg:apk/alpine/libcrypto3@3.1.5-r0?arch=armv7&distro=3.19.2',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2024:9333',
-                'https://access.redhat.com/security/cve/CVE-2024-4741',
-                'https://bugzilla.redhat.com/2274020',
-                'https://bugzilla.redhat.com/2281029',
-                'https://bugzilla.redhat.com/2283757',
-                'https://bugzilla.redhat.com/2294581',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2274020',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2281029',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2283757',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2294581',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-2511',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-4603',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-4741',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-5535',
-                'https://errata.almalinux.org/9/ALSA-2024-9333.html',
-                'https://errata.rockylinux.org/RLSA-2024:9333',
-                'https://github.com/openssl/openssl/commit/704f725b96aa373ee45ecfb23f6abfe8be8d9177',
-                'https://github.com/openssl/openssl/commit/b3f0eb0a295f58f16ba43ba99dad70d4ee5c437d',
-                'https://github.com/openssl/openssl/commit/c88c3de51020c37e8706bf7a682a162593053aac',
-                'https://github.com/openssl/openssl/commit/e5093133c35ca82874ad83697af76f4b0f7e3bd8',
-                'https://github.openssl.org/openssl/extended-releases/commit/f7a045f3143fc6da2ee66bf52d8df04829590dd4',
-                'https://linux.oracle.com/cve/CVE-2024-4741.html',
-                'https://linux.oracle.com/errata/ELSA-2024-9333.html',
-                'https://lists.debian.org/debian-lts-announce/2024/10/msg00033.html',
-                'https://lists.debian.org/debian-lts-announce/2024/11/msg00000.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2024-4741',
-                'https://security.netapp.com/advisory/ntap-20240621-0004/',
-                'https://ubuntu.com/security/notices/USN-6937-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2024-4741',
-                'https://www.openssl.org/news/secadv/20240528.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: Use After Free with SSL_free_buffers'
-            },
-            {
-              'cve':  'CVE-2024-5535',
-              'cvss': {
-                'redhat': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-125'
-              ],
-              'description':   'Issue summary: Calling the OpenSSL API function SSL_select_next_proto with an\nempty supported client protocols buffer may cause a crash or memory contents to\nbe sent to the peer.\n\nImpact summary: A buffer overread can have a range of potential consequences\nsuch as unexpected application beahviour or a crash. In particular this issue\ncould result in up to 255 bytes of arbitrary private data from memory being sent\nto the peer leading to a loss of confidentiality. However, only applications\nthat directly call the SSL_select_next_proto function with a 0 length list of\nsupported client protocols are affected by this issue. This would normally never\nbe a valid scenario and is typically not under attacker control but may occur by\naccident in the case of a configuration or programming error in the calling\napplication.\n\nThe OpenSSL API function SSL_select_next_proto is typically used by TLS\napplications that support ALPN (Application Layer Protocol Negotiation) or NPN\n(Next Protocol Negotiation). NPN is older, was never standardised and\nis deprecated in favour of ALPN. We believe that ALPN is significantly more\nwidely deployed than NPN. The SSL_select_next_proto function accepts a list of\nprotocols from the server and a list of protocols from the client and returns\nthe first protocol that appears in the server list that also appears in the\nclient list. In the case of no overlap between the two lists it returns the\nfirst item in the client list. In either case it will signal whether an overlap\nbetween the two lists was found. In the case where SSL_select_next_proto is\ncalled with a zero length client list it fails to notice this condition and\nreturns the memory immediately following the client list pointer (and reports\nthat there was no overlap in the lists).\n\nThis function is typically called from a server side application callback for\nALPN or a client side application callback for NPN. In the case of ALPN the list\nof protocols supplied by the client is guaranteed by libssl to never be zero in\nlength. The list of server protocols comes from the application and should never\nnormally be expected to be of zero length. In this case if the\nSSL_select_next_proto function has been called as expected (with the list\nsupplied by the client passed in the client/client_len parameters), then the\napplication will not be vulnerable to this issue. If the application has\naccidentally been configured with a zero length server list, and has\naccidentally passed that zero length server list in the client/client_len\nparameters, and has additionally failed to correctly handle a "no overlap"\nresponse (which would normally result in a handshake failure in ALPN) then it\nwill be vulnerable to this problem.\n\nIn the case of NPN, the protocol permits the client to opportunistically select\na protocol when there is no overlap. OpenSSL returns the first client protocol\nin the no overlap case in support of this. The list of client protocols comes\nfrom the application and should never normally be expected to be of zero length.\nHowever if the SSL_select_next_proto function is accidentally called with a\nclient_len of 0 then an invalid memory pointer will be returned instead. If the\napplication uses this output as the opportunistic protocol then the loss of\nconfidentiality will occur.\n\nThis issue has been assessed as Low severity because applications are most\nlikely to be vulnerable if they are using NPN instead of ALPN - but NPN is not\nwidely used. It also requires an application configuration or programming error.\nFinally, this issue would not typically be under attacker control making active\nexploitation unlikely.\n\nThe FIPS modules in 3.3, 3.2, 3.1 and 3.0 are not affected by this issue.\n\nDue to the low severity of this issue we are not issuing new releases of\nOpenSSL at this time. The fix will be included in the next releases when they\nbecome available.',
-              'diffID':        'sha256:372c5dfe03e2dd2f702637701b1b0b85048daa6dd67f4bc77fd2ac9b66506dcb',
-              'fixedVersions': [
-                '3.1.6-r0'
-              ],
-              'installedVersion': '3.1.5-r0',
-              'packageName':      'libcrypto3',
-              'purl':             'pkg:apk/alpine/libcrypto3@3.1.5-r0?arch=armv7&distro=3.19.2',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2024/06/27/1',
-                'http://www.openwall.com/lists/oss-security/2024/06/28/4',
-                'http://www.openwall.com/lists/oss-security/2024/08/15/1',
-                'https://access.redhat.com/errata/RHSA-2025:1671',
-                'https://access.redhat.com/security/cve/CVE-2024-5535',
-                'https://bugzilla.redhat.com/2294581',
-                'https://bugzilla.redhat.com/2294676',
-                'https://bugzilla.redhat.com/2301888',
-                'https://bugzilla.redhat.com/2318857',
-                'https://bugzilla.redhat.com/2318858',
-                'https://bugzilla.redhat.com/2318870',
-                'https://bugzilla.redhat.com/2318873',
-                'https://bugzilla.redhat.com/2318874',
-                'https://bugzilla.redhat.com/2318876',
-                'https://bugzilla.redhat.com/2318882',
-                'https://bugzilla.redhat.com/2318883',
-                'https://bugzilla.redhat.com/2318884',
-                'https://bugzilla.redhat.com/2318885',
-                'https://bugzilla.redhat.com/2318886',
-                'https://bugzilla.redhat.com/2318897',
-                'https://bugzilla.redhat.com/2318900',
-                'https://bugzilla.redhat.com/2318905',
-                'https://bugzilla.redhat.com/2318914',
-                'https://bugzilla.redhat.com/2318922',
-                'https://bugzilla.redhat.com/2318923',
-                'https://bugzilla.redhat.com/2318925',
-                'https://bugzilla.redhat.com/2318926',
-                'https://bugzilla.redhat.com/2318927',
-                'https://bugzilla.redhat.com/2331191',
-                'https://bugzilla.redhat.com/2339218',
-                'https://bugzilla.redhat.com/2339220',
-                'https://bugzilla.redhat.com/2339221',
-                'https://bugzilla.redhat.com/2339226',
-                'https://bugzilla.redhat.com/2339231',
-                'https://bugzilla.redhat.com/2339236',
-                'https://bugzilla.redhat.com/2339238',
-                'https://bugzilla.redhat.com/2339243',
-                'https://bugzilla.redhat.com/2339247',
-                'https://bugzilla.redhat.com/2339252',
-                'https://bugzilla.redhat.com/2339259',
-                'https://bugzilla.redhat.com/2339266',
-                'https://bugzilla.redhat.com/2339270',
-                'https://bugzilla.redhat.com/2339271',
-                'https://bugzilla.redhat.com/2339275',
-                'https://bugzilla.redhat.com/2339277',
-                'https://bugzilla.redhat.com/2339281',
-                'https://bugzilla.redhat.com/2339284',
-                'https://bugzilla.redhat.com/2339291',
-                'https://bugzilla.redhat.com/2339293',
-                'https://bugzilla.redhat.com/2339295',
-                'https://bugzilla.redhat.com/2339299',
-                'https://bugzilla.redhat.com/2339300',
-                'https://bugzilla.redhat.com/2339304',
-                'https://bugzilla.redhat.com/2339305',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2274020',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2281029',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2283757',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2294581',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-2511',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-4603',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-4741',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-5535',
-                'https://errata.almalinux.org/9/ALSA-2025-1671.html',
-                'https://errata.rockylinux.org/RLSA-2024:9333',
-                'https://github.com/openssl/openssl/commit/4ada436a1946cbb24db5ab4ca082b69c1bc10f37',
-                'https://github.com/openssl/openssl/commit/99fb785a5f85315b95288921a321a935ea29a51e',
-                'https://github.com/openssl/openssl/commit/cf6f91f6121f4db167405db2f0de410a456f260c',
-                'https://github.com/openssl/openssl/commit/e86ac436f0bd54d4517745483e2315650fae7b2c',
-                'https://github.openssl.org/openssl/extended-releases/commit/9947251413065a05189a63c9b7a6c1d4e224c21c',
-                'https://github.openssl.org/openssl/extended-releases/commit/b78ec0824da857223486660177d3b1f255c65d87',
-                'https://linux.oracle.com/cve/CVE-2024-5535.html',
-                'https://linux.oracle.com/errata/ELSA-2025-1673.html',
-                'https://lists.debian.org/debian-lts-announce/2024/10/msg00033.html',
-                'https://lists.debian.org/debian-lts-announce/2024/11/msg00000.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2024-5535',
-                'https://openssl.org/news/secadv/20240627.txt',
-                'https://security.netapp.com/advisory/ntap-20240712-0005/',
-                'https://security.netapp.com/advisory/ntap-20241025-0006/',
-                'https://security.netapp.com/advisory/ntap-20241025-0010/',
-                'https://ubuntu.com/security/notices/USN-6937-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2024-5535',
-                'https://www.openssl.org/news/secadv/20240627.txt',
-                'https://www.oracle.com/security-alerts/cpuoct2024.html#AppendixMSQL'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: SSL_select_next_proto buffer overread'
-            },
-            {
-              'cve':  'CVE-2025-9230',
-              'cvss': {
-                'redhat': {
-                  'v3score':  '5.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L'
-                }
-              },
-              'cwes': [
-                'CWE-125',
-                'CWE-787'
-              ],
-              'description':   'Issue summary: An application trying to decrypt CMS messages encrypted using\npassword based encryption can trigger an out-of-bounds read and write.\n\nImpact summary: This out-of-bounds read may trigger a crash which leads to\nDenial of Service for an application. The out-of-bounds write can cause\na memory corruption which can have various consequences including\na Denial of Service or Execution of attacker-supplied code.\n\nAlthough the consequences of a successful exploit of this vulnerability\ncould be severe, the probability that the attacker would be able to\nperform it is low. Besides, password based (PWRI) encryption support in CMS\nmessages is very rarely used. For that reason the issue was assessed as\nModerate severity according to our Security Policy.\n\nThe FIPS modules in 3.5, 3.4, 3.3, 3.2, 3.1 and 3.0 are not affected by this\nissue, as the CMS implementation is outside the OpenSSL FIPS module\nboundary.',
-              'diffID':        'sha256:372c5dfe03e2dd2f702637701b1b0b85048daa6dd67f4bc77fd2ac9b66506dcb',
-              'fixedVersions': [
-                '3.1.8-r1'
-              ],
-              'installedVersion': '3.1.5-r0',
-              'packageName':      'libcrypto3',
-              'purl':             'pkg:apk/alpine/libcrypto3@3.1.5-r0?arch=armv7&distro=3.19.2',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2025/09/30/5',
-                'https://access.redhat.com/errata/RHSA-2025:21255',
-                'https://access.redhat.com/security/cve/CVE-2025-9230',
-                'https://bugzilla.redhat.com/2396054',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2396054',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-9230',
-                'https://errata.almalinux.org/9/ALSA-2025-21255.html',
-                'https://errata.rockylinux.org/RLSA-2025:21255',
-                'https://github.com/openssl/openssl/commit/5965ea5dd6960f36d8b7f74f8eac67a8eb8f2b45',
-                'https://github.com/openssl/openssl/commit/9e91358f365dee6c446dcdcdb01c04d2743fd280',
-                'https://github.com/openssl/openssl/commit/a79c4ce559c6a3a8fd4109e9f33c1185d5bf2def',
-                'https://github.com/openssl/openssl/commit/b5282d677551afda7d20e9c00e09561b547b2dfd',
-                'https://github.com/openssl/openssl/commit/bae259a211ada6315dc50900686daaaaaa55f482',
-                'https://github.openssl.org/openssl/extended-releases/commit/c2b96348bfa662f25f4fabf81958ae822063dae3',
-                'https://github.openssl.org/openssl/extended-releases/commit/dfbaf161d8dafc1132dd88cd48ad990ed9b4c8ba',
-                'https://linux.oracle.com/cve/CVE-2025-9230.html',
-                'https://linux.oracle.com/errata/ELSA-2026-0337.html',
-                'https://lists.debian.org/debian-lts-announce/2025/10/msg00001.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2025-9230',
-                'https://openssl-library.org/news/secadv/20250930.txt',
-                'https://ubuntu.com/security/notices/USN-7786-1',
-                'https://www.cve.org/CVERecord?id=CVE-2025-9230'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: Out-of-bounds read & write in RFC 3211 KEK Unwrap'
-            },
-            {
-              'cve':  'CVE-2024-9143',
-              'cvss': {
-                'redhat': {
-                  'v3score':  '3.7',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L'
-                }
-              },
-              'cwes': [
-                'CWE-125',
-                'CWE-787'
-              ],
-              'description':   "Issue summary: Use of the low-level GF(2^m) elliptic curve APIs with untrusted\nexplicit values for the field polynomial can lead to out-of-bounds memory reads\nor writes.\n\nImpact summary: Out of bound memory writes can lead to an application crash or\neven a possibility of a remote code execution, however, in all the protocols\ninvolving Elliptic Curve Cryptography that we're aware of, either only \"named\ncurves\" are supported, or, if explicit curve parameters are supported, they\nspecify an X9.62 encoding of binary (GF(2^m)) curves that can't represent\nproblematic input values. Thus the likelihood of existence of a vulnerable\napplication is low.\n\nIn particular, the X9.62 encoding is used for ECC keys in X.509 certificates,\nso problematic inputs cannot occur in the context of processing X.509\ncertificates.  Any problematic use-cases would have to be using an \"exotic\"\ncurve encoding.\n\nThe affected APIs include: EC_GROUP_new_curve_GF2m(), EC_GROUP_new_from_params(),\nand various supporting BN_GF2m_*() functions.\n\nApplications working with \"exotic\" explicit binary (GF(2^m)) curve parameters,\nthat make it possible to represent invalid field polynomials with a zero\nconstant term, via the above or similar APIs, may terminate abruptly as a\nresult of reading or writing outside of array bounds.  Remote code execution\ncannot easily be ruled out.\n\nThe FIPS modules in 3.3, 3.2, 3.1 and 3.0 are not affected by this issue.",
-              'diffID':        'sha256:372c5dfe03e2dd2f702637701b1b0b85048daa6dd67f4bc77fd2ac9b66506dcb',
-              'fixedVersions': [
-                '3.1.7-r1'
-              ],
-              'installedVersion': '3.1.5-r0',
-              'packageName':      'libcrypto3',
-              'purl':             'pkg:apk/alpine/libcrypto3@3.1.5-r0?arch=armv7&distro=3.19.2',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2024/10/16/1',
-                'http://www.openwall.com/lists/oss-security/2024/10/23/1',
-                'http://www.openwall.com/lists/oss-security/2024/10/24/1',
-                'https://access.redhat.com/security/cve/CVE-2024-9143',
-                'https://github.com/openssl/openssl/commit/72ae83ad214d2eef262461365a1975707f862712',
-                'https://github.com/openssl/openssl/commit/bc7e04d7c8d509fb78fc0e285aa948fb0da04700',
-                'https://github.com/openssl/openssl/commit/c0d3e4d32d2805f49bec30547f225bc4d092e1f4',
-                'https://github.com/openssl/openssl/commit/fdf6723362ca51bd883295efe206cb5b1cfa5154',
-                'https://github.openssl.org/openssl/extended-releases/commit/8efc0cbaa8ebba8e116f7b81a876a4123594d86a',
-                'https://github.openssl.org/openssl/extended-releases/commit/9d576994cec2b7aa37a91740ea7e680810957e41',
-                'https://lists.debian.org/debian-lts-announce/2024/10/msg00033.html',
-                'https://lists.debian.org/debian-lts-announce/2024/11/msg00000.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2024-9143',
-                'https://openssl-library.org/news/secadv/20241016.txt',
-                'https://security.netapp.com/advisory/ntap-20241101-0001/',
-                'https://ubuntu.com/security/notices/USN-7264-1',
-                'https://ubuntu.com/security/notices/USN-7278-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2024-9143'
-              ],
-              'severity':   'LOW',
-              'suppressed': false,
-              'title':      'openssl: Low-level invalid GF(2^m) parameters lead to OOB memory access'
-            },
-            {
-              'cve':  'CVE-2025-9232',
-              'cvss': {
-                'redhat': {
-                  'v3score':  '3.1',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L'
-                }
-              },
-              'cwes': [
-                'CWE-125'
-              ],
-              'description':   "Issue summary: An application using the OpenSSL HTTP client API functions may\ntrigger an out-of-bounds read if the 'no_proxy' environment variable is set and\nthe host portion of the authority component of the HTTP URL is an IPv6 address.\n\nImpact summary: An out-of-bounds read can trigger a crash which leads to\nDenial of Service for an application.\n\nThe OpenSSL HTTP client API functions can be used directly by applications\nbut they are also used by the OCSP client functions and CMP (Certificate\nManagement Protocol) client implementation in OpenSSL. However the URLs used\nby these implementations are unlikely to be controlled by an attacker.\n\nIn this vulnerable code the out of bounds read can only trigger a crash.\nFurthermore the vulnerability requires an attacker-controlled URL to be\npassed from an application to the OpenSSL function and the user has to have\na 'no_proxy' environment variable set. For the aforementioned reasons the\nissue was assessed as Low severity.\n\nThe vulnerable code was introduced in the following patch releases:\n3.0.16, 3.1.8, 3.2.4, 3.3.3, 3.4.0 and 3.5.0.\n\nThe FIPS modules in 3.5, 3.4, 3.3, 3.2, 3.1 and 3.0 are not affected by this\nissue, as the HTTP client implementation is outside the OpenSSL FIPS module\nboundary.",
-              'diffID':        'sha256:372c5dfe03e2dd2f702637701b1b0b85048daa6dd67f4bc77fd2ac9b66506dcb',
-              'fixedVersions': [
-                '3.1.8-r1'
-              ],
-              'installedVersion': '3.1.5-r0',
-              'packageName':      'libcrypto3',
-              'purl':             'pkg:apk/alpine/libcrypto3@3.1.5-r0?arch=armv7&distro=3.19.2',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2025/09/30/5',
-                'https://access.redhat.com/security/cve/CVE-2025-9232',
-                'https://github.com/openssl/openssl/commit/2b4ec20e47959170422922eaff25346d362dcb35',
-                'https://github.com/openssl/openssl/commit/654dc11d23468a74fc8ea4672b702dd3feb7be4b',
-                'https://github.com/openssl/openssl/commit/7cf21a30513c9e43c4bc3836c237cf086e194af3',
-                'https://github.com/openssl/openssl/commit/89e790ac431125a4849992858490bed6b225eadf',
-                'https://github.com/openssl/openssl/commit/bbf38c034cdabd0a13330abcc4855c866f53d2e0',
-                'https://nvd.nist.gov/vuln/detail/CVE-2025-9232',
-                'https://openssl-library.org/news/secadv/20250930.txt',
-                'https://ubuntu.com/security/notices/USN-7786-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2025-9232'
-              ],
-              'severity':   'LOW',
-              'suppressed': false,
-              'title':      'openssl: Out-of-bounds read in HTTP client no_proxy handling'
-            },
-            {
-              'cve':  'CVE-2024-6119',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-843'
-              ],
-              'description':   "Issue summary: Applications performing certificate name checks (e.g., TLS\nclients checking server certificates) may attempt to read an invalid memory\naddress resulting in abnormal termination of the application process.\n\nImpact summary: Abnormal termination of an application can a cause a denial of\nservice.\n\nApplications performing certificate name checks (e.g., TLS clients checking\nserver certificates) may attempt to read an invalid memory address when\ncomparing the expected name with an `otherName` subject alternative name of an\nX.509 certificate. This may result in an exception that terminates the\napplication program.\n\nNote that basic certificate chain validation (signatures, dates, ...) is not\naffected, the denial of service can occur only when the application also\nspecifies an expected DNS name, Email address or IP address.\n\nTLS servers rarely solicit client certificates, and even when they do, they\ngenerally don't perform a name check against a reference identifier (expected\nidentity), but rather extract the presented identity after checking the\ncertificate chain.  So TLS servers are generally not affected and the severity\nof the issue is Moderate.\n\nThe FIPS modules in 3.3, 3.2, 3.1 and 3.0 are not affected by this issue.",
-              'diffID':        'sha256:372c5dfe03e2dd2f702637701b1b0b85048daa6dd67f4bc77fd2ac9b66506dcb',
-              'fixedVersions': [
-                '3.1.7-r0'
-              ],
-              'installedVersion': '3.1.5-r0',
-              'packageName':      'libssl3',
-              'purl':             'pkg:apk/alpine/libssl3@3.1.5-r0?arch=armv7&distro=3.19.2',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2024/09/03/4',
-                'https://access.redhat.com/errata/RHSA-2024:8935',
-                'https://access.redhat.com/security/cve/CVE-2024-6119',
-                'https://bugzilla.redhat.com/2306158',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2306158',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-6119',
-                'https://errata.almalinux.org/9/ALSA-2024-8935.html',
-                'https://errata.rockylinux.org/RLSA-2024:6783',
-                'https://github.com/openssl/openssl/commit/05f360d9e849a1b277db628f1f13083a7f8dd04f',
-                'https://github.com/openssl/openssl/commit/06d1dc3fa96a2ba5a3e22735a033012aadc9f0d6',
-                'https://github.com/openssl/openssl/commit/621f3729831b05ee828a3203eddb621d014ff2b2',
-                'https://github.com/openssl/openssl/commit/7dfcee2cd2a63b2c64b9b4b0850be64cb695b0a0',
-                'https://github.com/openssl/openssl/security/advisories/GHSA-5qrj-vq78-58fj',
-                'https://linux.oracle.com/cve/CVE-2024-6119.html',
-                'https://linux.oracle.com/errata/ELSA-2024-8935.html',
-                'https://lists.freebsd.org/archives/freebsd-security/2024-September/000303.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2024-6119',
-                'https://openssl-library.org/news/secadv/20240903.txt',
-                'https://security.netapp.com/advisory/ntap-20240912-0001/',
-                'https://ubuntu.com/security/notices/USN-6986-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2024-6119'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: Possible denial of service in X.509 name checks'
-            },
-            {
-              'cve':  'CVE-2024-13176',
-              'cvss': {
-                'redhat': {
-                  'v3score':  '4.7',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-385'
-              ],
-              'description':   'Issue summary: A timing side-channel which could potentially allow recovering\nthe private key exists in the ECDSA signature computation.\n\nImpact summary: A timing side-channel in ECDSA signature computations\ncould allow recovering the private key by an attacker. However, measuring\nthe timing would require either local access to the signing application or\na very fast network connection with low latency.\n\nThere is a timing signal of around 300 nanoseconds when the top word of\nthe inverted ECDSA nonce value is zero. This can happen with significant\nprobability only for some of the supported elliptic curves. In particular\nthe NIST P-521 curve is affected. To be able to measure this leak, the attacker\nprocess must either be located in the same physical computer or must\nhave a very fast network connection with low latency. For that reason\nthe severity of this vulnerability is Low.\n\nThe FIPS modules in 3.4, 3.3, 3.2, 3.1 and 3.0 are affected by this issue.',
-              'diffID':        'sha256:372c5dfe03e2dd2f702637701b1b0b85048daa6dd67f4bc77fd2ac9b66506dcb',
-              'fixedVersions': [
-                '3.1.8-r0'
-              ],
-              'installedVersion': '3.1.5-r0',
-              'packageName':      'libssl3',
-              'purl':             'pkg:apk/alpine/libssl3@3.1.5-r0?arch=armv7&distro=3.19.2',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2025/01/20/2',
-                'https://access.redhat.com/errata/RHSA-2025:16046',
-                'https://access.redhat.com/security/cve/CVE-2024-13176',
-                'https://bugzilla.redhat.com/2359885',
-                'https://bugzilla.redhat.com/2359888',
-                'https://bugzilla.redhat.com/2359892',
-                'https://bugzilla.redhat.com/2359894',
-                'https://bugzilla.redhat.com/2359895',
-                'https://bugzilla.redhat.com/2359899',
-                'https://bugzilla.redhat.com/2359900',
-                'https://bugzilla.redhat.com/2359902',
-                'https://bugzilla.redhat.com/2359903',
-                'https://bugzilla.redhat.com/2359911',
-                'https://bugzilla.redhat.com/2359918',
-                'https://bugzilla.redhat.com/2359920',
-                'https://bugzilla.redhat.com/2359924',
-                'https://bugzilla.redhat.com/2359928',
-                'https://bugzilla.redhat.com/2359930',
-                'https://bugzilla.redhat.com/2359932',
-                'https://bugzilla.redhat.com/2359934',
-                'https://bugzilla.redhat.com/2359938',
-                'https://bugzilla.redhat.com/2359940',
-                'https://bugzilla.redhat.com/2359943',
-                'https://bugzilla.redhat.com/2359944',
-                'https://bugzilla.redhat.com/2359945',
-                'https://bugzilla.redhat.com/2359947',
-                'https://bugzilla.redhat.com/2359950',
-                'https://bugzilla.redhat.com/2359963',
-                'https://bugzilla.redhat.com/2359964',
-                'https://bugzilla.redhat.com/2359972',
-                'https://bugzilla.redhat.com/2370920',
-                'https://bugzilla.redhat.com/2380264',
-                'https://bugzilla.redhat.com/2380273',
-                'https://bugzilla.redhat.com/2380274',
-                'https://bugzilla.redhat.com/2380278',
-                'https://bugzilla.redhat.com/2380280',
-                'https://bugzilla.redhat.com/2380283',
-                'https://bugzilla.redhat.com/2380284',
-                'https://bugzilla.redhat.com/2380290',
-                'https://bugzilla.redhat.com/2380291',
-                'https://bugzilla.redhat.com/2380295',
-                'https://bugzilla.redhat.com/2380298',
-                'https://bugzilla.redhat.com/2380306',
-                'https://bugzilla.redhat.com/2380308',
-                'https://bugzilla.redhat.com/2380309',
-                'https://bugzilla.redhat.com/2380310',
-                'https://bugzilla.redhat.com/2380312',
-                'https://bugzilla.redhat.com/2380313',
-                'https://bugzilla.redhat.com/2380320',
-                'https://bugzilla.redhat.com/2380321',
-                'https://bugzilla.redhat.com/2380322',
-                'https://bugzilla.redhat.com/2380326',
-                'https://bugzilla.redhat.com/2380327',
-                'https://bugzilla.redhat.com/2380334',
-                'https://bugzilla.redhat.com/2380335',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2338999',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359885',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359888',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359892',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359894',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359895',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359899',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359900',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359902',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359903',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359911',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359918',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359920',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359924',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359928',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359930',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359932',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359934',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359938',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359940',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359943',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359944',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359945',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359947',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359950',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359963',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359964',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359972',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2370920',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380264',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380273',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380274',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380278',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380280',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380283',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380284',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380290',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380291',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380295',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380298',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380306',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380308',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380309',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380310',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380312',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380313',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380320',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380321',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380322',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380326',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380327',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380334',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380335',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-13176',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21574',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21575',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21577',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21579',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21580',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21581',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21584',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21585',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21588',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30681',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30682',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30683',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30684',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30685',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30687',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30688',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30689',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30693',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30695',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30696',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30699',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30703',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30704',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30705',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30715',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30721',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30722',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50077',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50078',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50079',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50080',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50081',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50082',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50083',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50084',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50085',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50086',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50087',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50088',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50091',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50092',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50093',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50094',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50096',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50097',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50098',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50099',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50100',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50101',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50102',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50104',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-5399',
-                'https://errata.almalinux.org/9/ALSA-2025-16046.html',
-                'https://errata.rockylinux.org/RLSA-2025:15699',
-                'https://github.com/openssl/openssl/commit/07272b05b04836a762b4baa874958af51d513844',
-                'https://github.com/openssl/openssl/commit/2af62e74fb59bc469506bc37eb2990ea408d9467',
-                'https://github.com/openssl/openssl/commit/392dcb336405a0c94486aa6655057f59fd3a0902',
-                'https://github.com/openssl/openssl/commit/4b1cb94a734a7d4ec363ac0a215a25c181e11f65',
-                'https://github.com/openssl/openssl/commit/77c608f4c8857e63e98e66444e2e761c9627916f',
-                'https://github.openssl.org/openssl/extended-releases/commit/0d5fd1ab987f7571e2c955d8d8b638fc0fb54ded',
-                'https://github.openssl.org/openssl/extended-releases/commit/a2639000db19878d5d89586ae7b725080592ae86',
-                'https://linux.oracle.com/cve/CVE-2024-13176.html',
-                'https://linux.oracle.com/errata/ELSA-2025-16046.html',
-                'https://lists.debian.org/debian-lts-announce/2025/05/msg00028.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2024-13176',
-                'https://openssl-library.org/news/secadv/20250120.txt',
-                'https://security.netapp.com/advisory/ntap-20250124-0005/',
-                'https://security.netapp.com/advisory/ntap-20250418-0010/',
-                'https://security.netapp.com/advisory/ntap-20250502-0006/',
-                'https://ubuntu.com/security/notices/USN-7264-1',
-                'https://ubuntu.com/security/notices/USN-7278-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2024-13176',
-                'https://www.oracle.com/security-alerts/cpuapr2025.html#AppendixMSQL'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: Timing side-channel in ECDSA signature computation'
-            },
-            {
-              'cve':  'CVE-2024-4741',
-              'cvss': {
-                'redhat': {
-                  'v3score':  '5.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   'Issue summary: Calling the OpenSSL API function SSL_free_buffers may cause\nmemory to be accessed that was previously freed in some situations\n\nImpact summary: A use after free can have a range of potential consequences such\nas the corruption of valid data, crashes or execution of arbitrary code.\nHowever, only applications that directly call the SSL_free_buffers function are\naffected by this issue. Applications that do not call this function are not\nvulnerable. Our investigations indicate that this function is rarely used by\napplications.\n\nThe SSL_free_buffers function is used to free the internal OpenSSL buffer used\nwhen processing an incoming record from the network. The call is only expected\nto succeed if the buffer is not currently in use. However, two scenarios have\nbeen identified where the buffer is freed even when still in use.\n\nThe first scenario occurs where a record header has been received from the\nnetwork and processed by OpenSSL, but the full record body has not yet arrived.\nIn this case calling SSL_free_buffers will succeed even though a record has only\nbeen partially processed and the buffer is still in use.\n\nThe second scenario occurs where a full record containing application data has\nbeen received and processed by OpenSSL but the application has only read part of\nthis data. Again a call to SSL_free_buffers will succeed even though the buffer\nis still in use.\n\nWhile these scenarios could occur accidentally during normal operation a\nmalicious attacker could attempt to engineer a stituation where this occurs.\nWe are not aware of this issue being actively exploited.\n\nThe FIPS modules in 3.3, 3.2, 3.1 and 3.0 are not affected by this issue.',
-              'diffID':        'sha256:372c5dfe03e2dd2f702637701b1b0b85048daa6dd67f4bc77fd2ac9b66506dcb',
-              'fixedVersions': [
-                '3.1.6-r0'
-              ],
-              'installedVersion': '3.1.5-r0',
-              'packageName':      'libssl3',
-              'purl':             'pkg:apk/alpine/libssl3@3.1.5-r0?arch=armv7&distro=3.19.2',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2024:9333',
-                'https://access.redhat.com/security/cve/CVE-2024-4741',
-                'https://bugzilla.redhat.com/2274020',
-                'https://bugzilla.redhat.com/2281029',
-                'https://bugzilla.redhat.com/2283757',
-                'https://bugzilla.redhat.com/2294581',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2274020',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2281029',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2283757',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2294581',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-2511',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-4603',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-4741',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-5535',
-                'https://errata.almalinux.org/9/ALSA-2024-9333.html',
-                'https://errata.rockylinux.org/RLSA-2024:9333',
-                'https://github.com/openssl/openssl/commit/704f725b96aa373ee45ecfb23f6abfe8be8d9177',
-                'https://github.com/openssl/openssl/commit/b3f0eb0a295f58f16ba43ba99dad70d4ee5c437d',
-                'https://github.com/openssl/openssl/commit/c88c3de51020c37e8706bf7a682a162593053aac',
-                'https://github.com/openssl/openssl/commit/e5093133c35ca82874ad83697af76f4b0f7e3bd8',
-                'https://github.openssl.org/openssl/extended-releases/commit/f7a045f3143fc6da2ee66bf52d8df04829590dd4',
-                'https://linux.oracle.com/cve/CVE-2024-4741.html',
-                'https://linux.oracle.com/errata/ELSA-2024-9333.html',
-                'https://lists.debian.org/debian-lts-announce/2024/10/msg00033.html',
-                'https://lists.debian.org/debian-lts-announce/2024/11/msg00000.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2024-4741',
-                'https://security.netapp.com/advisory/ntap-20240621-0004/',
-                'https://ubuntu.com/security/notices/USN-6937-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2024-4741',
-                'https://www.openssl.org/news/secadv/20240528.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: Use After Free with SSL_free_buffers'
-            },
-            {
-              'cve':  'CVE-2024-5535',
-              'cvss': {
-                'redhat': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-125'
-              ],
-              'description':   'Issue summary: Calling the OpenSSL API function SSL_select_next_proto with an\nempty supported client protocols buffer may cause a crash or memory contents to\nbe sent to the peer.\n\nImpact summary: A buffer overread can have a range of potential consequences\nsuch as unexpected application beahviour or a crash. In particular this issue\ncould result in up to 255 bytes of arbitrary private data from memory being sent\nto the peer leading to a loss of confidentiality. However, only applications\nthat directly call the SSL_select_next_proto function with a 0 length list of\nsupported client protocols are affected by this issue. This would normally never\nbe a valid scenario and is typically not under attacker control but may occur by\naccident in the case of a configuration or programming error in the calling\napplication.\n\nThe OpenSSL API function SSL_select_next_proto is typically used by TLS\napplications that support ALPN (Application Layer Protocol Negotiation) or NPN\n(Next Protocol Negotiation). NPN is older, was never standardised and\nis deprecated in favour of ALPN. We believe that ALPN is significantly more\nwidely deployed than NPN. The SSL_select_next_proto function accepts a list of\nprotocols from the server and a list of protocols from the client and returns\nthe first protocol that appears in the server list that also appears in the\nclient list. In the case of no overlap between the two lists it returns the\nfirst item in the client list. In either case it will signal whether an overlap\nbetween the two lists was found. In the case where SSL_select_next_proto is\ncalled with a zero length client list it fails to notice this condition and\nreturns the memory immediately following the client list pointer (and reports\nthat there was no overlap in the lists).\n\nThis function is typically called from a server side application callback for\nALPN or a client side application callback for NPN. In the case of ALPN the list\nof protocols supplied by the client is guaranteed by libssl to never be zero in\nlength. The list of server protocols comes from the application and should never\nnormally be expected to be of zero length. In this case if the\nSSL_select_next_proto function has been called as expected (with the list\nsupplied by the client passed in the client/client_len parameters), then the\napplication will not be vulnerable to this issue. If the application has\naccidentally been configured with a zero length server list, and has\naccidentally passed that zero length server list in the client/client_len\nparameters, and has additionally failed to correctly handle a "no overlap"\nresponse (which would normally result in a handshake failure in ALPN) then it\nwill be vulnerable to this problem.\n\nIn the case of NPN, the protocol permits the client to opportunistically select\na protocol when there is no overlap. OpenSSL returns the first client protocol\nin the no overlap case in support of this. The list of client protocols comes\nfrom the application and should never normally be expected to be of zero length.\nHowever if the SSL_select_next_proto function is accidentally called with a\nclient_len of 0 then an invalid memory pointer will be returned instead. If the\napplication uses this output as the opportunistic protocol then the loss of\nconfidentiality will occur.\n\nThis issue has been assessed as Low severity because applications are most\nlikely to be vulnerable if they are using NPN instead of ALPN - but NPN is not\nwidely used. It also requires an application configuration or programming error.\nFinally, this issue would not typically be under attacker control making active\nexploitation unlikely.\n\nThe FIPS modules in 3.3, 3.2, 3.1 and 3.0 are not affected by this issue.\n\nDue to the low severity of this issue we are not issuing new releases of\nOpenSSL at this time. The fix will be included in the next releases when they\nbecome available.',
-              'diffID':        'sha256:372c5dfe03e2dd2f702637701b1b0b85048daa6dd67f4bc77fd2ac9b66506dcb',
-              'fixedVersions': [
-                '3.1.6-r0'
-              ],
-              'installedVersion': '3.1.5-r0',
-              'packageName':      'libssl3',
-              'purl':             'pkg:apk/alpine/libssl3@3.1.5-r0?arch=armv7&distro=3.19.2',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2024/06/27/1',
-                'http://www.openwall.com/lists/oss-security/2024/06/28/4',
-                'http://www.openwall.com/lists/oss-security/2024/08/15/1',
-                'https://access.redhat.com/errata/RHSA-2025:1671',
-                'https://access.redhat.com/security/cve/CVE-2024-5535',
-                'https://bugzilla.redhat.com/2294581',
-                'https://bugzilla.redhat.com/2294676',
-                'https://bugzilla.redhat.com/2301888',
-                'https://bugzilla.redhat.com/2318857',
-                'https://bugzilla.redhat.com/2318858',
-                'https://bugzilla.redhat.com/2318870',
-                'https://bugzilla.redhat.com/2318873',
-                'https://bugzilla.redhat.com/2318874',
-                'https://bugzilla.redhat.com/2318876',
-                'https://bugzilla.redhat.com/2318882',
-                'https://bugzilla.redhat.com/2318883',
-                'https://bugzilla.redhat.com/2318884',
-                'https://bugzilla.redhat.com/2318885',
-                'https://bugzilla.redhat.com/2318886',
-                'https://bugzilla.redhat.com/2318897',
-                'https://bugzilla.redhat.com/2318900',
-                'https://bugzilla.redhat.com/2318905',
-                'https://bugzilla.redhat.com/2318914',
-                'https://bugzilla.redhat.com/2318922',
-                'https://bugzilla.redhat.com/2318923',
-                'https://bugzilla.redhat.com/2318925',
-                'https://bugzilla.redhat.com/2318926',
-                'https://bugzilla.redhat.com/2318927',
-                'https://bugzilla.redhat.com/2331191',
-                'https://bugzilla.redhat.com/2339218',
-                'https://bugzilla.redhat.com/2339220',
-                'https://bugzilla.redhat.com/2339221',
-                'https://bugzilla.redhat.com/2339226',
-                'https://bugzilla.redhat.com/2339231',
-                'https://bugzilla.redhat.com/2339236',
-                'https://bugzilla.redhat.com/2339238',
-                'https://bugzilla.redhat.com/2339243',
-                'https://bugzilla.redhat.com/2339247',
-                'https://bugzilla.redhat.com/2339252',
-                'https://bugzilla.redhat.com/2339259',
-                'https://bugzilla.redhat.com/2339266',
-                'https://bugzilla.redhat.com/2339270',
-                'https://bugzilla.redhat.com/2339271',
-                'https://bugzilla.redhat.com/2339275',
-                'https://bugzilla.redhat.com/2339277',
-                'https://bugzilla.redhat.com/2339281',
-                'https://bugzilla.redhat.com/2339284',
-                'https://bugzilla.redhat.com/2339291',
-                'https://bugzilla.redhat.com/2339293',
-                'https://bugzilla.redhat.com/2339295',
-                'https://bugzilla.redhat.com/2339299',
-                'https://bugzilla.redhat.com/2339300',
-                'https://bugzilla.redhat.com/2339304',
-                'https://bugzilla.redhat.com/2339305',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2274020',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2281029',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2283757',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2294581',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-2511',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-4603',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-4741',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-5535',
-                'https://errata.almalinux.org/9/ALSA-2025-1671.html',
-                'https://errata.rockylinux.org/RLSA-2024:9333',
-                'https://github.com/openssl/openssl/commit/4ada436a1946cbb24db5ab4ca082b69c1bc10f37',
-                'https://github.com/openssl/openssl/commit/99fb785a5f85315b95288921a321a935ea29a51e',
-                'https://github.com/openssl/openssl/commit/cf6f91f6121f4db167405db2f0de410a456f260c',
-                'https://github.com/openssl/openssl/commit/e86ac436f0bd54d4517745483e2315650fae7b2c',
-                'https://github.openssl.org/openssl/extended-releases/commit/9947251413065a05189a63c9b7a6c1d4e224c21c',
-                'https://github.openssl.org/openssl/extended-releases/commit/b78ec0824da857223486660177d3b1f255c65d87',
-                'https://linux.oracle.com/cve/CVE-2024-5535.html',
-                'https://linux.oracle.com/errata/ELSA-2025-1673.html',
-                'https://lists.debian.org/debian-lts-announce/2024/10/msg00033.html',
-                'https://lists.debian.org/debian-lts-announce/2024/11/msg00000.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2024-5535',
-                'https://openssl.org/news/secadv/20240627.txt',
-                'https://security.netapp.com/advisory/ntap-20240712-0005/',
-                'https://security.netapp.com/advisory/ntap-20241025-0006/',
-                'https://security.netapp.com/advisory/ntap-20241025-0010/',
-                'https://ubuntu.com/security/notices/USN-6937-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2024-5535',
-                'https://www.openssl.org/news/secadv/20240627.txt',
-                'https://www.oracle.com/security-alerts/cpuoct2024.html#AppendixMSQL'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: SSL_select_next_proto buffer overread'
-            },
-            {
-              'cve':  'CVE-2025-9230',
-              'cvss': {
-                'redhat': {
-                  'v3score':  '5.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L'
-                }
-              },
-              'cwes': [
-                'CWE-125',
-                'CWE-787'
-              ],
-              'description':   'Issue summary: An application trying to decrypt CMS messages encrypted using\npassword based encryption can trigger an out-of-bounds read and write.\n\nImpact summary: This out-of-bounds read may trigger a crash which leads to\nDenial of Service for an application. The out-of-bounds write can cause\na memory corruption which can have various consequences including\na Denial of Service or Execution of attacker-supplied code.\n\nAlthough the consequences of a successful exploit of this vulnerability\ncould be severe, the probability that the attacker would be able to\nperform it is low. Besides, password based (PWRI) encryption support in CMS\nmessages is very rarely used. For that reason the issue was assessed as\nModerate severity according to our Security Policy.\n\nThe FIPS modules in 3.5, 3.4, 3.3, 3.2, 3.1 and 3.0 are not affected by this\nissue, as the CMS implementation is outside the OpenSSL FIPS module\nboundary.',
-              'diffID':        'sha256:372c5dfe03e2dd2f702637701b1b0b85048daa6dd67f4bc77fd2ac9b66506dcb',
-              'fixedVersions': [
-                '3.1.8-r1'
-              ],
-              'installedVersion': '3.1.5-r0',
-              'packageName':      'libssl3',
-              'purl':             'pkg:apk/alpine/libssl3@3.1.5-r0?arch=armv7&distro=3.19.2',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2025/09/30/5',
-                'https://access.redhat.com/errata/RHSA-2025:21255',
-                'https://access.redhat.com/security/cve/CVE-2025-9230',
-                'https://bugzilla.redhat.com/2396054',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2396054',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-9230',
-                'https://errata.almalinux.org/9/ALSA-2025-21255.html',
-                'https://errata.rockylinux.org/RLSA-2025:21255',
-                'https://github.com/openssl/openssl/commit/5965ea5dd6960f36d8b7f74f8eac67a8eb8f2b45',
-                'https://github.com/openssl/openssl/commit/9e91358f365dee6c446dcdcdb01c04d2743fd280',
-                'https://github.com/openssl/openssl/commit/a79c4ce559c6a3a8fd4109e9f33c1185d5bf2def',
-                'https://github.com/openssl/openssl/commit/b5282d677551afda7d20e9c00e09561b547b2dfd',
-                'https://github.com/openssl/openssl/commit/bae259a211ada6315dc50900686daaaaaa55f482',
-                'https://github.openssl.org/openssl/extended-releases/commit/c2b96348bfa662f25f4fabf81958ae822063dae3',
-                'https://github.openssl.org/openssl/extended-releases/commit/dfbaf161d8dafc1132dd88cd48ad990ed9b4c8ba',
-                'https://linux.oracle.com/cve/CVE-2025-9230.html',
-                'https://linux.oracle.com/errata/ELSA-2026-0337.html',
-                'https://lists.debian.org/debian-lts-announce/2025/10/msg00001.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2025-9230',
-                'https://openssl-library.org/news/secadv/20250930.txt',
-                'https://ubuntu.com/security/notices/USN-7786-1',
-                'https://www.cve.org/CVERecord?id=CVE-2025-9230'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: Out-of-bounds read & write in RFC 3211 KEK Unwrap'
-            },
-            {
-              'cve':  'CVE-2024-9143',
-              'cvss': {
-                'redhat': {
-                  'v3score':  '3.7',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L'
-                }
-              },
-              'cwes': [
-                'CWE-125',
-                'CWE-787'
-              ],
-              'description':   "Issue summary: Use of the low-level GF(2^m) elliptic curve APIs with untrusted\nexplicit values for the field polynomial can lead to out-of-bounds memory reads\nor writes.\n\nImpact summary: Out of bound memory writes can lead to an application crash or\neven a possibility of a remote code execution, however, in all the protocols\ninvolving Elliptic Curve Cryptography that we're aware of, either only \"named\ncurves\" are supported, or, if explicit curve parameters are supported, they\nspecify an X9.62 encoding of binary (GF(2^m)) curves that can't represent\nproblematic input values. Thus the likelihood of existence of a vulnerable\napplication is low.\n\nIn particular, the X9.62 encoding is used for ECC keys in X.509 certificates,\nso problematic inputs cannot occur in the context of processing X.509\ncertificates.  Any problematic use-cases would have to be using an \"exotic\"\ncurve encoding.\n\nThe affected APIs include: EC_GROUP_new_curve_GF2m(), EC_GROUP_new_from_params(),\nand various supporting BN_GF2m_*() functions.\n\nApplications working with \"exotic\" explicit binary (GF(2^m)) curve parameters,\nthat make it possible to represent invalid field polynomials with a zero\nconstant term, via the above or similar APIs, may terminate abruptly as a\nresult of reading or writing outside of array bounds.  Remote code execution\ncannot easily be ruled out.\n\nThe FIPS modules in 3.3, 3.2, 3.1 and 3.0 are not affected by this issue.",
-              'diffID':        'sha256:372c5dfe03e2dd2f702637701b1b0b85048daa6dd67f4bc77fd2ac9b66506dcb',
-              'fixedVersions': [
-                '3.1.7-r1'
-              ],
-              'installedVersion': '3.1.5-r0',
-              'packageName':      'libssl3',
-              'purl':             'pkg:apk/alpine/libssl3@3.1.5-r0?arch=armv7&distro=3.19.2',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2024/10/16/1',
-                'http://www.openwall.com/lists/oss-security/2024/10/23/1',
-                'http://www.openwall.com/lists/oss-security/2024/10/24/1',
-                'https://access.redhat.com/security/cve/CVE-2024-9143',
-                'https://github.com/openssl/openssl/commit/72ae83ad214d2eef262461365a1975707f862712',
-                'https://github.com/openssl/openssl/commit/bc7e04d7c8d509fb78fc0e285aa948fb0da04700',
-                'https://github.com/openssl/openssl/commit/c0d3e4d32d2805f49bec30547f225bc4d092e1f4',
-                'https://github.com/openssl/openssl/commit/fdf6723362ca51bd883295efe206cb5b1cfa5154',
-                'https://github.openssl.org/openssl/extended-releases/commit/8efc0cbaa8ebba8e116f7b81a876a4123594d86a',
-                'https://github.openssl.org/openssl/extended-releases/commit/9d576994cec2b7aa37a91740ea7e680810957e41',
-                'https://lists.debian.org/debian-lts-announce/2024/10/msg00033.html',
-                'https://lists.debian.org/debian-lts-announce/2024/11/msg00000.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2024-9143',
-                'https://openssl-library.org/news/secadv/20241016.txt',
-                'https://security.netapp.com/advisory/ntap-20241101-0001/',
-                'https://ubuntu.com/security/notices/USN-7264-1',
-                'https://ubuntu.com/security/notices/USN-7278-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2024-9143'
-              ],
-              'severity':   'LOW',
-              'suppressed': false,
-              'title':      'openssl: Low-level invalid GF(2^m) parameters lead to OOB memory access'
-            },
-            {
-              'cve':  'CVE-2025-9232',
-              'cvss': {
-                'redhat': {
-                  'v3score':  '3.1',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L'
-                }
-              },
-              'cwes': [
-                'CWE-125'
-              ],
-              'description':   "Issue summary: An application using the OpenSSL HTTP client API functions may\ntrigger an out-of-bounds read if the 'no_proxy' environment variable is set and\nthe host portion of the authority component of the HTTP URL is an IPv6 address.\n\nImpact summary: An out-of-bounds read can trigger a crash which leads to\nDenial of Service for an application.\n\nThe OpenSSL HTTP client API functions can be used directly by applications\nbut they are also used by the OCSP client functions and CMP (Certificate\nManagement Protocol) client implementation in OpenSSL. However the URLs used\nby these implementations are unlikely to be controlled by an attacker.\n\nIn this vulnerable code the out of bounds read can only trigger a crash.\nFurthermore the vulnerability requires an attacker-controlled URL to be\npassed from an application to the OpenSSL function and the user has to have\na 'no_proxy' environment variable set. For the aforementioned reasons the\nissue was assessed as Low severity.\n\nThe vulnerable code was introduced in the following patch releases:\n3.0.16, 3.1.8, 3.2.4, 3.3.3, 3.4.0 and 3.5.0.\n\nThe FIPS modules in 3.5, 3.4, 3.3, 3.2, 3.1 and 3.0 are not affected by this\nissue, as the HTTP client implementation is outside the OpenSSL FIPS module\nboundary.",
-              'diffID':        'sha256:372c5dfe03e2dd2f702637701b1b0b85048daa6dd67f4bc77fd2ac9b66506dcb',
-              'fixedVersions': [
-                '3.1.8-r1'
-              ],
-              'installedVersion': '3.1.5-r0',
-              'packageName':      'libssl3',
-              'purl':             'pkg:apk/alpine/libssl3@3.1.5-r0?arch=armv7&distro=3.19.2',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2025/09/30/5',
-                'https://access.redhat.com/security/cve/CVE-2025-9232',
-                'https://github.com/openssl/openssl/commit/2b4ec20e47959170422922eaff25346d362dcb35',
-                'https://github.com/openssl/openssl/commit/654dc11d23468a74fc8ea4672b702dd3feb7be4b',
-                'https://github.com/openssl/openssl/commit/7cf21a30513c9e43c4bc3836c237cf086e194af3',
-                'https://github.com/openssl/openssl/commit/89e790ac431125a4849992858490bed6b225eadf',
-                'https://github.com/openssl/openssl/commit/bbf38c034cdabd0a13330abcc4855c866f53d2e0',
-                'https://nvd.nist.gov/vuln/detail/CVE-2025-9232',
-                'https://openssl-library.org/news/secadv/20250930.txt',
-                'https://ubuntu.com/security/notices/USN-7786-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2025-9232'
-              ],
-              'severity':   'LOW',
-              'suppressed': false,
-              'title':      'openssl: Out-of-bounds read in HTTP client no_proxy handling'
-            },
-            {
-              'cve':  'CVE-2025-26519',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-787'
-              ],
-              'description':   'musl libc 0.9.13 through 1.2.5 before 1.2.6 has an out-of-bounds write vulnerability when an attacker can trigger iconv conversion of untrusted EUC-KR text to UTF-8.',
-              'diffID':        'sha256:372c5dfe03e2dd2f702637701b1b0b85048daa6dd67f4bc77fd2ac9b66506dcb',
-              'fixedVersions': [
-                '1.2.4_git20230717-r5'
-              ],
-              'installedVersion': '1.2.4_git20230717-r4',
-              'packageName':      'musl',
-              'purl':             'pkg:apk/alpine/musl@1.2.4_git20230717-r4?arch=armv7&distro=3.19.2',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2025/02/13/2',
-                'http://www.openwall.com/lists/oss-security/2025/02/13/3',
-                'http://www.openwall.com/lists/oss-security/2025/02/13/4',
-                'http://www.openwall.com/lists/oss-security/2025/02/13/5',
-                'http://www.openwall.com/lists/oss-security/2025/02/14/5',
-                'http://www.openwall.com/lists/oss-security/2025/02/14/6',
-                'https://git.musl-libc.org/cgit/musl/commit/?id=c47ad25ea3b484e10326f933e927c0bc8cded3da',
-                'https://git.musl-libc.org/cgit/musl/commit/?id=e5adcd97b5196e29991b524237381a0202a60659',
-                'https://www.openwall.com/lists/oss-security/2025/02/13/2'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'musl libc 0.9.13 through 1.2.5 before 1.2.6 has an out-of-bounds write ...'
-            },
-            {
-              'cve':  'CVE-2025-26519',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-787'
-              ],
-              'description':   'musl libc 0.9.13 through 1.2.5 before 1.2.6 has an out-of-bounds write vulnerability when an attacker can trigger iconv conversion of untrusted EUC-KR text to UTF-8.',
-              'diffID':        'sha256:372c5dfe03e2dd2f702637701b1b0b85048daa6dd67f4bc77fd2ac9b66506dcb',
-              'fixedVersions': [
-                '1.2.4_git20230717-r5'
-              ],
-              'installedVersion': '1.2.4_git20230717-r4',
-              'packageName':      'musl-utils',
-              'purl':             'pkg:apk/alpine/musl-utils@1.2.4_git20230717-r4?arch=armv7&distro=3.19.2',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2025/02/13/2',
-                'http://www.openwall.com/lists/oss-security/2025/02/13/3',
-                'http://www.openwall.com/lists/oss-security/2025/02/13/4',
-                'http://www.openwall.com/lists/oss-security/2025/02/13/5',
-                'http://www.openwall.com/lists/oss-security/2025/02/14/5',
-                'http://www.openwall.com/lists/oss-security/2025/02/14/6',
-                'https://git.musl-libc.org/cgit/musl/commit/?id=c47ad25ea3b484e10326f933e927c0bc8cded3da',
-                'https://git.musl-libc.org/cgit/musl/commit/?id=e5adcd97b5196e29991b524237381a0202a60659',
-                'https://www.openwall.com/lists/oss-security/2025/02/13/2'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'musl libc 0.9.13 through 1.2.5 before 1.2.6 has an out-of-bounds write ...'
-            },
-            {
-              'cve':  'CVE-2024-58251',
-              'cwes': [
-                'CWE-150'
-              ],
-              'description':   'In netstat in BusyBox through 1.37.0, local users can launch of network application with an argv[0] containing an ANSI terminal escape sequence, leading to a denial of service (terminal locked up) when netstat is used by a victim.',
-              'diffID':        'sha256:372c5dfe03e2dd2f702637701b1b0b85048daa6dd67f4bc77fd2ac9b66506dcb',
-              'fixedVersions': [
-                '1.36.1-r21'
-              ],
-              'installedVersion': '1.36.1-r19',
-              'packageName':      'ssl_client',
-              'purl':             'pkg:apk/alpine/ssl_client@1.36.1-r19?arch=armv7&distro=3.19.2',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2025/04/23/6',
-                'https://bugs.busybox.net/show_bug.cgi?id=15922',
-                'https://www.busybox.net',
-                'https://www.busybox.net/downloads/',
-                'https://www.cve.org/CVERecord?id=CVE-2024-58251'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'In netstat in BusyBox through 1.37.0, local users can launch of networ ...'
-            },
-            {
-              'cve':  'CVE-2025-46394',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '3.3',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-451'
-              ],
-              'description':   'In tar in BusyBox through 1.37.0, a TAR archive can have filenames hidden from a listing through the use of terminal escape sequences.',
-              'diffID':        'sha256:372c5dfe03e2dd2f702637701b1b0b85048daa6dd67f4bc77fd2ac9b66506dcb',
-              'fixedVersions': [
-                '1.36.1-r21'
-              ],
-              'installedVersion': '1.36.1-r19',
-              'packageName':      'ssl_client',
-              'purl':             'pkg:apk/alpine/ssl_client@1.36.1-r19?arch=armv7&distro=3.19.2',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2025/04/23/5',
-                'http://www.openwall.com/lists/oss-security/2025/04/24/3',
-                'https://bugs.busybox.net/show_bug.cgi?id=16018',
-                'https://lists.busybox.net/pipermail/busybox/2024-July/090806.html',
-                'https://lists.busybox.net/pipermail/busybox/2024-July/090814.html',
-                'https://www.busybox.net',
-                'https://www.busybox.net/downloads/',
-                'https://www.cve.org/CVERecord?id=CVE-2025-46394',
-                'https://www.openwall.com/lists/oss-security/2025/04/23/1'
-              ],
-              'severity':   'LOW',
-              'suppressed': false,
-              'title':      'In tar in BusyBox through 1.37.0, a TAR archive can have filenames hid ...'
-            }
-          ]
-        }
-      ],
-      'summary': {
-        'critical':   0,
-        'high':       4,
-        'low':        7,
-        'medium':     11,
-        'suppressed': 0,
-        'unknown':    0
-      }
-    }
-  },
-  {
-    'id':    'default/9ad39fd0658d9406687ac01362b527e98c3684999c8f8826245375a163e0951c',
-    'type':  'storage.sbomscanner.kubewarden.io.vulnerabilityreport',
-    'links': {
-      'patch':  'https://localhost:8005/v1/storage.sbomscanner.kubewarden.io.vulnerabilityreports/default/9ad39fd0658d9406687ac01362b527e98c3684999c8f8826245375a163e0951c',
-      'remove': 'https://localhost:8005/v1/storage.sbomscanner.kubewarden.io.vulnerabilityreports/default/9ad39fd0658d9406687ac01362b527e98c3684999c8f8826245375a163e0951c',
-      'self':   'https://localhost:8005/v1/storage.sbomscanner.kubewarden.io.vulnerabilityreports/default/9ad39fd0658d9406687ac01362b527e98c3684999c8f8826245375a163e0951c',
-      'update': 'https://localhost:8005/v1/storage.sbomscanner.kubewarden.io.vulnerabilityreports/default/9ad39fd0658d9406687ac01362b527e98c3684999c8f8826245375a163e0951c',
-      'view':   'https://localhost:8005/apis/storage.sbomscanner.kubewarden.io/v1alpha1/namespaces/default/vulnerabilityreports/9ad39fd0658d9406687ac01362b527e98c3684999c8f8826245375a163e0951c'
-    },
-    'apiVersion':    'storage.sbomscanner.kubewarden.io/v1alpha1',
-    'imageMetadata': {
-      'digest':      'sha256:e513372a3c66cd89fdbbd8d677b86a2e3a134d46db95558f84169206976313a5',
-      'platform':    'linux/amd64',
-      'registry':    'demo-02',
-      'registryURI': 'ghcr.io',
-      'repository':  'linuxcontainers/alpine',
-      'tag':         '3.15.2'
-    },
-    'kind':     'VulnerabilityReport',
-    'metadata': {
-      'creationTimestamp': '2026-01-09T22:46:57Z',
-      'fields':            [
-        '9ad39fd0658d9406687ac01362b527e98c3684999c8f8826245375a163e0951c',
-        'ghcr.io/linuxcontainers/alpine:3.15.2',
-        'linux/amd64',
-        '26 (0 suppressed)'
-      ],
-      'labels': {
-        'app.kubernetes.io/managed-by':          'sbomscanner',
-        'app.kubernetes.io/part-of':             'sbomscanner',
-        'sbomscanner.kubewarden.io/scanjob-uid': '42184d01-4b15-466f-98aa-e802d1b6b6b8'
-      },
-      'name':            '9ad39fd0658d9406687ac01362b527e98c3684999c8f8826245375a163e0951c',
-      'namespace':       'default',
-      'ownerReferences': [
-        {
-          'apiVersion':         'storage.sbomscanner.kubewarden.io/v1alpha1',
-          'blockOwnerDeletion': true,
-          'controller':         true,
-          'kind':               'SBOM',
-          'name':               '9ad39fd0658d9406687ac01362b527e98c3684999c8f8826245375a163e0951c',
-          'uid':                'fd05f0a1-0aa1-47c9-99bd-1ada2efea7ff'
-        }
-      ],
-      'relationships': [
-        {
-          'fromId':   'default/9ad39fd0658d9406687ac01362b527e98c3684999c8f8826245375a163e0951c',
-          'fromType': 'storage.sbomscanner.kubewarden.io.sbom',
-          'rel':      'owner',
-          'state':    'active',
-          'message':  'Resource is current'
-        }
-      ],
-      'resourceVersion': '3',
-      'state':           {
-        'error':         false,
-        'message':       'Resource is current',
-        'name':          'active',
-        'transitioning': false
-      },
-      'uid': 'a7e02f7f-0dc6-4fb0-bd59-43938b3b7a89'
-    },
-    'report': {
-      'results': [
-        {
-          'class':           'os-pkgs',
-          'target':          '/var/run/worker/trivy.sbom.3378370632.json (alpine 3.15.2)',
-          'type':            'alpine',
-          'vulnerabilities': [
-            {
-              'cve':  'CVE-2022-28391',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '8.8',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-88'
-              ],
-              'description':   "BusyBox through 1.35.0 allows remote attackers to execute arbitrary code if netstat is used to print a DNS PTR record's value to a VT compatible terminal. Alternatively, the attacker could choose to change the terminal's colors.",
-              'diffID':        'sha256:ff768a1413ba109308c0d897ffa555e052a46d2cf471178f001b825b4c21f354',
-              'fixedVersions': [
-                '1.34.1-r5'
-              ],
-              'installedVersion': '1.34.1-r4',
-              'packageName':      'busybox',
-              'purl':             'pkg:apk/alpine/busybox@1.34.1-r4?arch=x86_64&distro=3.15.2',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2022-28391',
-                'https://git.alpinelinux.org/aports/plain/main/busybox/0001-libbb-sockaddr2str-ensure-only-printable-characters-.patch',
-                'https://git.alpinelinux.org/aports/plain/main/busybox/0002-nslookup-sanitize-all-printed-strings-with-printable.patch',
-                'https://gitlab.alpinelinux.org/alpine/aports/-/issues/13661',
-                'https://nvd.nist.gov/vuln/detail/CVE-2022-28391',
-                'https://www.cve.org/CVERecord?id=CVE-2022-28391'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: remote attackers may execute arbitrary code if netstat is used'
-            },
-            {
-              'cve':  'CVE-2022-4450',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'nvd': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-415'
-              ],
-              'description':   'The function PEM_read_bio_ex() reads a PEM file from a BIO and parses and\ndecodes the "name" (e.g. "CERTIFICATE"), any header data and the payload data.\nIf the function succeeds then the "name_out", "header" and "data" arguments are\npopulated with pointers to buffers containing the relevant decoded data. The\ncaller is responsible for freeing those buffers. It is possible to construct a\nPEM file that results in 0 bytes of payload data. In this case PEM_read_bio_ex()\nwill return a failure code but will populate the header argument with a pointer\nto a buffer that has already been freed. If the caller also frees this buffer\nthen a double free will occur. This will most likely lead to a crash. This\ncould be exploited by an attacker who has the ability to supply malicious PEM\nfiles for parsing to achieve a denial of service attack.\n\nThe functions PEM_read_bio() and PEM_read() are simple wrappers around\nPEM_read_bio_ex() and therefore these functions are also directly affected.\n\nThese functions are also called indirectly by a number of other OpenSSL\nfunctions including PEM_X509_INFO_read_bio_ex() and\nSSL_CTX_use_serverinfo_file() which are also vulnerable. Some OpenSSL internal\nuses of these functions are not vulnerable because the caller does not free the\nheader argument if PEM_read_bio_ex() returns a failure code. These locations\ninclude the PEM_read_bio_TYPE() functions as well as the decoders introduced in\nOpenSSL 3.0.\n\nThe OpenSSL asn1parse command line application is also impacted by this issue.',
-              'diffID':        'sha256:ff768a1413ba109308c0d897ffa555e052a46d2cf471178f001b825b4c21f354',
-              'fixedVersions': [
-                '1.1.1t-r0'
-              ],
-              'installedVersion': '1.1.1n-r0',
-              'packageName':      'libcrypto1.1',
-              'purl':             'pkg:apk/alpine/libcrypto1.1@1.1.1n-r0?arch=x86_64&distro=3.15.2',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2023:2165',
-                'https://access.redhat.com/security/cve/CVE-2022-4450',
-                'https://bugzilla.redhat.com/1960321',
-                'https://bugzilla.redhat.com/2164440',
-                'https://bugzilla.redhat.com/2164487',
-                'https://bugzilla.redhat.com/2164492',
-                'https://bugzilla.redhat.com/2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144000',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144003',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144006',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144008',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144010',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144012',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144015',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144017',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144019',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2145170',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2158412',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164440',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164487',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164488',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164492',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164497',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164499',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164500',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4203',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4304',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4450',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0215',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0216',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0217',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0286',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0401',
-                'https://errata.almalinux.org/9/ALSA-2023-2165.html',
-                'https://errata.rockylinux.org/RLSA-2023:0946',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=63bcf189be73a9cc1264059bed6f57974be74a83',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=bbcf509bd046b34cca19c766bbddc31683d0858b',
-                'https://linux.oracle.com/cve/CVE-2022-4450.html',
-                'https://linux.oracle.com/errata/ELSA-2023-32791.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2022-4450',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0003',
-                'https://rustsec.org/advisories/RUSTSEC-2023-0010.html',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://ubuntu.com/security/notices/USN-5844-1',
-                'https://ubuntu.com/security/notices/USN-6564-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2022-4450',
-                'https://www.openssl.org/news/secadv/20230207.txt'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: double free after calling PEM_read_bio_ex'
-            },
-            {
-              'cve':  'CVE-2023-0215',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'nvd': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   'The public API function BIO_new_NDEF is a helper function used for streaming\nASN.1 data via a BIO. It is primarily used internally to OpenSSL to support the\nSMIME, CMS and PKCS7 streaming capabilities, but may also be called directly by\nend user applications.\n\nThe function receives a BIO from the caller, prepends a new BIO_f_asn1 filter\nBIO onto the front of it to form a BIO chain, and then returns the new head of\nthe BIO chain to the caller. Under certain conditions, for example if a CMS\nrecipient public key is invalid, the new filter BIO is freed and the function\nreturns a NULL result indicating a failure. However, in this case, the BIO chain\nis not properly cleaned up and the BIO passed by the caller still retains\ninternal pointers to the previously freed filter BIO. If the caller then goes on\nto call BIO_pop() on the BIO then a use-after-free will occur. This will most\nlikely result in a crash.\n\n\n\nThis scenario occurs directly in the internal function B64_write_ASN1() which\nmay cause BIO_new_NDEF() to be called and will subsequently call BIO_pop() on\nthe BIO. This internal function is in turn called by the public API functions\nPEM_write_bio_ASN1_stream, PEM_write_bio_CMS_stream, PEM_write_bio_PKCS7_stream,\nSMIME_write_ASN1, SMIME_write_CMS and SMIME_write_PKCS7.\n\nOther public API functions that may be impacted by this include\ni2d_ASN1_bio_stream, BIO_new_CMS, BIO_new_PKCS7, i2d_CMS_bio_stream and\ni2d_PKCS7_bio_stream.\n\nThe OpenSSL cms and smime command line applications are similarly affected.',
-              'diffID':        'sha256:ff768a1413ba109308c0d897ffa555e052a46d2cf471178f001b825b4c21f354',
-              'fixedVersions': [
-                '1.1.1t-r0'
-              ],
-              'installedVersion': '1.1.1n-r0',
-              'packageName':      'libcrypto1.1',
-              'purl':             'pkg:apk/alpine/libcrypto1.1@1.1.1n-r0?arch=x86_64&distro=3.15.2',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2023:2165',
-                'https://access.redhat.com/security/cve/CVE-2023-0215',
-                'https://bugzilla.redhat.com/1960321',
-                'https://bugzilla.redhat.com/2164440',
-                'https://bugzilla.redhat.com/2164487',
-                'https://bugzilla.redhat.com/2164492',
-                'https://bugzilla.redhat.com/2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144000',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144003',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144006',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144008',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144010',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144012',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144015',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144017',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144019',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2145170',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2158412',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164440',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164487',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164488',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164492',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164497',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164499',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164500',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4203',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4304',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4450',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0215',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0216',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0217',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0286',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0401',
-                'https://errata.almalinux.org/9/ALSA-2023-2165.html',
-                'https://errata.rockylinux.org/RLSA-2023:0946',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=8818064ce3c3c0f1b740a5aaba2a987e75bfbafd',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=9816136fe31d92ace4037d5da5257f763aeeb4eb',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=c3829dd8825c654652201e16f8a0a0c46ee3f344',
-                'https://linux.oracle.com/cve/CVE-2023-0215.html',
-                'https://linux.oracle.com/errata/ELSA-2023-32791.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-0215',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0003',
-                'https://rustsec.org/advisories/RUSTSEC-2023-0009.html',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://security.netapp.com/advisory/ntap-20230427-0007',
-                'https://security.netapp.com/advisory/ntap-20230427-0007/',
-                'https://security.netapp.com/advisory/ntap-20230427-0009',
-                'https://security.netapp.com/advisory/ntap-20230427-0009/',
-                'https://security.netapp.com/advisory/ntap-20240621-0006',
-                'https://security.netapp.com/advisory/ntap-20240621-0006/',
-                'https://ubuntu.com/security/notices/USN-5844-1',
-                'https://ubuntu.com/security/notices/USN-5845-1',
-                'https://ubuntu.com/security/notices/USN-5845-2',
-                'https://ubuntu.com/security/notices/USN-6564-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-0215',
-                'https://www.openssl.org/news/secadv/20230207.txt'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: use-after-free following BIO_new_NDEF'
-            },
-            {
-              'cve':  'CVE-2023-0286',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '7.4',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H'
-                },
-                'nvd': {
-                  'v3score':  '7.4',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.4',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-843'
-              ],
-              'description':   'There is a type confusion vulnerability relating to X.400 address processing\ninside an X.509 GeneralName. X.400 addresses were parsed as an ASN1_STRING but\nthe public structure definition for GENERAL_NAME incorrectly specified the type\nof the x400Address field as ASN1_TYPE. This field is subsequently interpreted by\nthe OpenSSL function GENERAL_NAME_cmp as an ASN1_TYPE rather than an\nASN1_STRING.\n\nWhen CRL checking is enabled (i.e. the application sets the\nX509_V_FLAG_CRL_CHECK flag), this vulnerability may allow an attacker to pass\narbitrary pointers to a memcmp call, enabling them to read memory contents or\nenact a denial of service. In most cases, the attack requires the attacker to\nprovide both the certificate chain and CRL, neither of which need to have a\nvalid signature. If the attacker only controls one of these inputs, the other\ninput must already contain an X.400 address as a CRL distribution point, which\nis uncommon. As such, this vulnerability is most likely to only affect\napplications which have implemented their own functionality for retrieving CRLs\nover a network.',
-              'diffID':        'sha256:ff768a1413ba109308c0d897ffa555e052a46d2cf471178f001b825b4c21f354',
-              'fixedVersions': [
-                '1.1.1t-r0'
-              ],
-              'installedVersion': '1.1.1n-r0',
-              'packageName':      'libcrypto1.1',
-              'purl':             'pkg:apk/alpine/libcrypto1.1@1.1.1n-r0?arch=x86_64&distro=3.15.2',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2025:7937',
-                'https://access.redhat.com/security/cve/CVE-2023-0286',
-                'https://access.redhat.com/security/cve/cve-2023-0286',
-                'https://bugzilla.redhat.com/2164440',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144000',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144003',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144006',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144008',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144010',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144012',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144015',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144017',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144019',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2145170',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2158412',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164440',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164487',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164488',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164492',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164497',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164499',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164500',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4203',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4304',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4450',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0215',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0216',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0217',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0286',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0401',
-                'https://errata.almalinux.org/9/ALSA-2025-7937.html',
-                'https://errata.rockylinux.org/RLSA-2023:0946',
-                'https://ftp.openbsd.org/pub/OpenBSD/LibreSSL/libressl-3.6.2-relnotes.txt',
-                'https://ftp.openbsd.org/pub/OpenBSD/patches/7.2/common/018_x509.patch.sig',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=2c6c9d439b484e1ba9830d8454a34fa4f80fdfe9',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=2f7530077e0ef79d98718138716bc51ca0cad658',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=fd2af07dc083a350c959147097003a14a5e8ac4d',
-                'https://github.com/pyca/cryptography',
-                'https://github.com/pyca/cryptography/security/advisories/GHSA-x4qr-2fvf-3mr5',
-                'https://linux.oracle.com/cve/CVE-2023-0286.html',
-                'https://linux.oracle.com/errata/ELSA-2025-7937.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-0286',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0003',
-                'https://rustsec.org/advisories/RUSTSEC-2023-0006.html',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://ubuntu.com/security/notices/USN-5844-1',
-                'https://ubuntu.com/security/notices/USN-5845-1',
-                'https://ubuntu.com/security/notices/USN-5845-2',
-                'https://ubuntu.com/security/notices/USN-6564-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-0286',
-                'https://www.openssl.org/news/secadv/20230207.txt'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: X.400 address type confusion in X.509 GeneralName'
-            },
-            {
-              'cve':  'CVE-2023-0464',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-295'
-              ],
-              'description':   "A security vulnerability has been identified in all supported versions\n\nof OpenSSL related to the verification of X.509 certificate chains\nthat include policy constraints.  Attackers may be able to exploit this\nvulnerability by creating a malicious certificate chain that triggers\nexponential use of computational resources, leading to a denial-of-service\n(DoS) attack on affected systems.\n\nPolicy processing is disabled by default but can be enabled by passing\nthe `-policy' argument to the command line utilities or by calling the\n`X509_VERIFY_PARAM_set1_policies()' function.",
-              'diffID':        'sha256:ff768a1413ba109308c0d897ffa555e052a46d2cf471178f001b825b4c21f354',
-              'fixedVersions': [
-                '1.1.1t-r2'
-              ],
-              'installedVersion': '1.1.1n-r0',
-              'packageName':      'libcrypto1.1',
-              'purl':             'pkg:apk/alpine/libcrypto1.1@1.1.1n-r0?arch=x86_64&distro=3.15.2',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2023:3722',
-                'https://access.redhat.com/security/cve/CVE-2023-0464',
-                'https://bugzilla.redhat.com/2181082',
-                'https://bugzilla.redhat.com/2182561',
-                'https://bugzilla.redhat.com/2182565',
-                'https://bugzilla.redhat.com/2188461',
-                'https://bugzilla.redhat.com/2207947',
-                'https://errata.almalinux.org/9/ALSA-2023-3722.html',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=2017771e2db3e2b96f89bbe8766c3209f6a99545',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=2dcd4f1e3115f38cefa43e3efbe9b801c27e642e',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=879f7080d7e141f415c79eaa3a8ac4a3dad0348b',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=959c59c7a0164117e7f8366466a32bb1f8d77ff1',
-                'https://linux.oracle.com/cve/CVE-2023-0464.html',
-                'https://linux.oracle.com/errata/ELSA-2023-3722.html',
-                'https://lists.debian.org/debian-lts-announce/2023/06/msg00011.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-0464',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://security.netapp.com/advisory/ntap-20230406-0006/',
-                'https://security.netapp.com/advisory/ntap-20240621-0006/',
-                'https://ubuntu.com/security/notices/USN-6039-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.couchbase.com/alerts/',
-                'https://www.cve.org/CVERecord?id=CVE-2023-0464',
-                'https://www.debian.org/security/2023/dsa-5417',
-                'https://www.openssl.org/news/secadv/20230322.txt'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: Denial of service by excessive resource usage in verifying X509 policy constraints'
-            },
-            {
-              'cve':  'CVE-2022-2097',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N'
-                },
-                'nvd': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N'
-                },
-                'redhat': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-327'
-              ],
-              'description':   "AES OCB mode for 32-bit x86 platforms using the AES-NI assembly optimised implementation will not encrypt the entirety of the data under some circumstances. This could reveal sixteen bytes of data that was preexisting in the memory that wasn't written. In the special case of \"in place\" encryption, sixteen bytes of the plaintext would be revealed. Since OpenSSL does not support OCB based cipher suites for TLS and DTLS, they are both unaffected. Fixed in OpenSSL 3.0.5 (Affected 3.0.0-3.0.4). Fixed in OpenSSL 1.1.1q (Affected 1.1.1-1.1.1p).",
-              'diffID':        'sha256:ff768a1413ba109308c0d897ffa555e052a46d2cf471178f001b825b4c21f354',
-              'fixedVersions': [
-                '1.1.1q-r0'
-              ],
-              'installedVersion': '1.1.1n-r0',
-              'packageName':      'libcrypto1.1',
-              'purl':             'pkg:apk/alpine/libcrypto1.1@1.1.1n-r0?arch=x86_64&distro=3.15.2',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2022:6224',
-                'https://access.redhat.com/security/cve/CVE-2022-2097',
-                'https://bugzilla.redhat.com/2081494',
-                'https://bugzilla.redhat.com/2087911',
-                'https://bugzilla.redhat.com/2087913',
-                'https://bugzilla.redhat.com/2097310',
-                'https://bugzilla.redhat.com/2104905',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2081494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2097310',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2100554',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2104905',
-                'https://cert-portal.siemens.com/productcert/pdf/ssa-332410.pdf',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-1292',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-2068',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-2097',
-                'https://errata.almalinux.org/9/ALSA-2022-6224.html',
-                'https://errata.rockylinux.org/RLSA-2022:5818',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=919925673d6c9cfed3c1085497f5dfbbed5fc431',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=a98f339ddd7e8f487d6e0088d4a9a42324885a93',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=919925673d6c9cfed3c1085497f5dfbbed5fc431',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=a98f339ddd7e8f487d6e0088d4a9a42324885a93',
-                'https://github.com/alexcrichton/openssl-src-rs',
-                'https://linux.oracle.com/cve/CVE-2022-2097.html',
-                'https://linux.oracle.com/errata/ELSA-2022-9955.html',
-                'https://lists.debian.org/debian-lts-announce/2023/02/msg00019.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/R6CK57NBQFTPUMXAPJURCGXUYT76NQAK',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/R6CK57NBQFTPUMXAPJURCGXUYT76NQAK/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/V6567JERRHHJW2GNGJGKDRNHR7SNPZK7',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/V6567JERRHHJW2GNGJGKDRNHR7SNPZK7/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VCMNWKERPBKOEBNL7CLTTX3ZZCZLH7XA',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VCMNWKERPBKOEBNL7CLTTX3ZZCZLH7XA/',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/R6CK57NBQFTPUMXAPJURCGXUYT76NQAK',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/R6CK57NBQFTPUMXAPJURCGXUYT76NQAK/',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/V6567JERRHHJW2GNGJGKDRNHR7SNPZK7',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/V6567JERRHHJW2GNGJGKDRNHR7SNPZK7/',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/VCMNWKERPBKOEBNL7CLTTX3ZZCZLH7XA',
-                'https://nvd.nist.gov/vuln/detail/CVE-2022-2097',
-                'https://rustsec.org/advisories/RUSTSEC-2022-0032.html',
-                'https://security.gentoo.org/glsa/202210-02',
-                'https://security.netapp.com/advisory/ntap-20220715-0011',
-                'https://security.netapp.com/advisory/ntap-20220715-0011/',
-                'https://security.netapp.com/advisory/ntap-20230420-0008',
-                'https://security.netapp.com/advisory/ntap-20230420-0008/',
-                'https://security.netapp.com/advisory/ntap-20240621-0006',
-                'https://security.netapp.com/advisory/ntap-20240621-0006/',
-                'https://ubuntu.com/security/notices/USN-5502-1',
-                'https://ubuntu.com/security/notices/USN-6457-1',
-                'https://www.cve.org/CVERecord?id=CVE-2022-2097',
-                'https://www.debian.org/security/2023/dsa-5343',
-                'https://www.openssl.org/news/secadv/20220705.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: AES OCB fails to encrypt some bytes'
-            },
-            {
-              'cve':  'CVE-2022-4304',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N'
-                },
-                'nvd': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N'
-                },
-                'redhat': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-203'
-              ],
-              'description':   'A timing based side channel exists in the OpenSSL RSA Decryption implementation\nwhich could be sufficient to recover a plaintext across a network in a\nBleichenbacher style attack. To achieve a successful decryption an attacker\nwould have to be able to send a very large number of trial messages for\ndecryption. The vulnerability affects all RSA padding modes: PKCS#1 v1.5,\nRSA-OEAP and RSASVE.\n\nFor example, in a TLS connection, RSA is commonly used by a client to send an\nencrypted pre-master secret to the server. An attacker that had observed a\ngenuine connection between a client and a server could use this flaw to send\ntrial messages to the server and record the time taken to process them. After a\nsufficiently large number of messages the attacker could recover the pre-master\nsecret used for the original connection and thus be able to decrypt the\napplication data sent over that connection.',
-              'diffID':        'sha256:ff768a1413ba109308c0d897ffa555e052a46d2cf471178f001b825b4c21f354',
-              'fixedVersions': [
-                '1.1.1t-r0'
-              ],
-              'installedVersion': '1.1.1n-r0',
-              'packageName':      'libcrypto1.1',
-              'purl':             'pkg:apk/alpine/libcrypto1.1@1.1.1n-r0?arch=x86_64&distro=3.15.2',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2023:2165',
-                'https://access.redhat.com/security/cve/CVE-2022-4304',
-                'https://bugzilla.redhat.com/1960321',
-                'https://bugzilla.redhat.com/2164440',
-                'https://bugzilla.redhat.com/2164487',
-                'https://bugzilla.redhat.com/2164492',
-                'https://bugzilla.redhat.com/2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144000',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144003',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144006',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144008',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144010',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144012',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144015',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144017',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144019',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2145170',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2158412',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164440',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164487',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164488',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164492',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164497',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164499',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164500',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4203',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4304',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4450',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0215',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0216',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0217',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0286',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0401',
-                'https://errata.almalinux.org/9/ALSA-2023-2165.html',
-                'https://errata.rockylinux.org/RLSA-2023:0946',
-                'https://linux.oracle.com/cve/CVE-2022-4304.html',
-                'https://linux.oracle.com/errata/ELSA-2023-32791.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2022-4304',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0003',
-                'https://rustsec.org/advisories/RUSTSEC-2023-0007.html',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://ubuntu.com/security/notices/USN-5844-1',
-                'https://ubuntu.com/security/notices/USN-6564-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2022-4304',
-                'https://www.openssl.org/news/secadv/20230207.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: timing attack in RSA Decryption implementation'
-            },
-            {
-              'cve':  'CVE-2023-0465',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N'
-                },
-                'redhat': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-295'
-              ],
-              'description':   "Applications that use a non-default option when verifying certificates may be\nvulnerable to an attack from a malicious CA to circumvent certain checks.\n\nInvalid certificate policies in leaf certificates are silently ignored by\nOpenSSL and other certificate policy checks are skipped for that certificate.\nA malicious CA could use this to deliberately assert invalid certificate policies\nin order to circumvent policy checking on the certificate altogether.\n\nPolicy processing is disabled by default but can be enabled by passing\nthe `-policy' argument to the command line utilities or by calling the\n`X509_VERIFY_PARAM_set1_policies()' function.",
-              'diffID':        'sha256:ff768a1413ba109308c0d897ffa555e052a46d2cf471178f001b825b4c21f354',
-              'fixedVersions': [
-                '1.1.1t-r2'
-              ],
-              'installedVersion': '1.1.1n-r0',
-              'packageName':      'libcrypto1.1',
-              'purl':             'pkg:apk/alpine/libcrypto1.1@1.1.1n-r0?arch=x86_64&distro=3.15.2',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2023:3722',
-                'https://access.redhat.com/security/cve/CVE-2023-0465',
-                'https://bugzilla.redhat.com/2181082',
-                'https://bugzilla.redhat.com/2182561',
-                'https://bugzilla.redhat.com/2182565',
-                'https://bugzilla.redhat.com/2188461',
-                'https://bugzilla.redhat.com/2207947',
-                'https://errata.almalinux.org/9/ALSA-2023-3722.html',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=10325176f3d3e98c6e2b3bf5ab1e3b334de6947a',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=1dd43e0709fece299b15208f36cc7c76209ba0bb',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=b013765abfa80036dc779dd0e50602c57bb3bf95',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=facfb1ab745646e97a1920977ae4a9965ea61d5c',
-                'https://linux.oracle.com/cve/CVE-2023-0465.html',
-                'https://linux.oracle.com/errata/ELSA-2023-3722.html',
-                'https://lists.debian.org/debian-lts-announce/2023/06/msg00011.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-0465',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://security.netapp.com/advisory/ntap-20230414-0001/',
-                'https://ubuntu.com/security/notices/USN-6039-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-0465',
-                'https://www.debian.org/security/2023/dsa-5417',
-                'https://www.openssl.org/news/secadv/20230328.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: Invalid certificate policies in leaf certificates are silently ignored'
-            },
-            {
-              'cve':  'CVE-2023-2650',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '6.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-770'
-              ],
-              'description':   "Issue summary: Processing some specially crafted ASN.1 object identifiers or\ndata containing them may be very slow.\n\nImpact summary: Applications that use OBJ_obj2txt() directly, or use any of\nthe OpenSSL subsystems OCSP, PKCS7/SMIME, CMS, CMP/CRMF or TS with no message\nsize limit may experience notable to very long delays when processing those\nmessages, which may lead to a Denial of Service.\n\nAn OBJECT IDENTIFIER is composed of a series of numbers - sub-identifiers -\nmost of which have no size limit.  OBJ_obj2txt() may be used to translate\nan ASN.1 OBJECT IDENTIFIER given in DER encoding form (using the OpenSSL\ntype ASN1_OBJECT) to its canonical numeric text form, which are the\nsub-identifiers of the OBJECT IDENTIFIER in decimal form, separated by\nperiods.\n\nWhen one of the sub-identifiers in the OBJECT IDENTIFIER is very large\n(these are sizes that are seen as absurdly large, taking up tens or hundreds\nof KiBs), the translation to a decimal number in text may take a very long\ntime.  The time complexity is O(n^2) with 'n' being the size of the\nsub-identifiers in bytes (*).\n\nWith OpenSSL 3.0, support to fetch cryptographic algorithms using names /\nidentifiers in string form was introduced.  This includes using OBJECT\nIDENTIFIERs in canonical numeric text form as identifiers for fetching\nalgorithms.\n\nSuch OBJECT IDENTIFIERs may be received through the ASN.1 structure\nAlgorithmIdentifier, which is commonly used in multiple protocols to specify\nwhat cryptographic algorithm should be used to sign or verify, encrypt or\ndecrypt, or digest passed data.\n\nApplications that call OBJ_obj2txt() directly with untrusted data are\naffected, with any version of OpenSSL.  If the use is for the mere purpose\nof display, the severity is considered low.\n\nIn OpenSSL 3.0 and newer, this affects the subsystems OCSP, PKCS7/SMIME,\nCMS, CMP/CRMF or TS.  It also impacts anything that processes X.509\ncertificates, including simple things like verifying its signature.\n\nThe impact on TLS is relatively low, because all versions of OpenSSL have a\n100KiB limit on the peer's certificate chain.  Additionally, this only\nimpacts clients, or servers that have explicitly enabled client\nauthentication.\n\nIn OpenSSL 1.1.1 and 1.0.2, this only affects displaying diverse objects,\nsuch as X.509 certificates.  This is assumed to not happen in such a way\nthat it would cause a Denial of Service, so these versions are considered\nnot affected by this issue in such a way that it would be cause for concern,\nand the severity is therefore considered low.",
-              'diffID':        'sha256:ff768a1413ba109308c0d897ffa555e052a46d2cf471178f001b825b4c21f354',
-              'fixedVersions': [
-                '1.1.1u-r0'
-              ],
-              'installedVersion': '1.1.1n-r0',
-              'packageName':      'libcrypto1.1',
-              'purl':             'pkg:apk/alpine/libcrypto1.1@1.1.1n-r0?arch=x86_64&distro=3.15.2',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2023/05/30/1',
-                'https://access.redhat.com/errata/RHSA-2023:6330',
-                'https://access.redhat.com/security/cve/CVE-2023-2650',
-                'https://bugzilla.redhat.com/1858038',
-                'https://bugzilla.redhat.com/2207947',
-                'https://errata.almalinux.org/9/ALSA-2023-6330.html',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=423a2bc737a908ad0c77bda470b2b59dc879936b',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=853c5e56ee0b8650c73140816bb8b91d6163422c',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=9e209944b35cf82368071f160a744b6178f9b098',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=db779b0e10b047f2585615e0b8f2acdf21f8544a',
-                'https://linux.oracle.com/cve/CVE-2023-2650.html',
-                'https://linux.oracle.com/errata/ELSA-2023-6330.html',
-                'https://lists.debian.org/debian-lts-announce/2023/06/msg00011.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-2650',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0009',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://security.netapp.com/advisory/ntap-20230703-0001/',
-                'https://security.netapp.com/advisory/ntap-20231027-0009/',
-                'https://ubuntu.com/security/notices/USN-6119-1',
-                'https://ubuntu.com/security/notices/USN-6188-1',
-                'https://ubuntu.com/security/notices/USN-6672-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-2650',
-                'https://www.debian.org/security/2023/dsa-5417',
-                'https://www.openssl.org/news/secadv/20230530.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: Possible DoS translating ASN.1 object identifiers'
-            },
-            {
-              'cve':  'CVE-2023-3446',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L'
-                },
-                'redhat': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L'
-                }
-              },
-              'cwes': [
-                'CWE-606',
-                'CWE-1333'
-              ],
-              'description':   "Issue summary: Checking excessively long DH keys or parameters may be very slow.\n\nImpact summary: Applications that use the functions DH_check(), DH_check_ex()\nor EVP_PKEY_param_check() to check a DH key or DH parameters may experience long\ndelays. Where the key or parameters that are being checked have been obtained\nfrom an untrusted source this may lead to a Denial of Service.\n\nThe function DH_check() performs various checks on DH parameters. One of those\nchecks confirms that the modulus ('p' parameter) is not too large. Trying to use\na very large modulus is slow and OpenSSL will not normally use a modulus which\nis over 10,000 bits in length.\n\nHowever the DH_check() function checks numerous aspects of the key or parameters\nthat have been supplied. Some of those checks use the supplied modulus value\neven if it has already been found to be too large.\n\nAn application that calls DH_check() and supplies a key or parameters obtained\nfrom an untrusted source could be vulernable to a Denial of Service attack.\n\nThe function DH_check() is itself called by a number of other OpenSSL functions.\nAn application calling any of those other functions may similarly be affected.\nThe other functions affected by this are DH_check_ex() and\nEVP_PKEY_param_check().\n\nAlso vulnerable are the OpenSSL dhparam and pkeyparam command line applications\nwhen using the '-check' option.\n\nThe OpenSSL SSL/TLS implementation is not affected by this issue.\nThe OpenSSL 3.0 and 3.1 FIPS providers are not affected by this issue.",
-              'diffID':        'sha256:ff768a1413ba109308c0d897ffa555e052a46d2cf471178f001b825b4c21f354',
-              'fixedVersions': [
-                '1.1.1u-r2'
-              ],
-              'installedVersion': '1.1.1n-r0',
-              'packageName':      'libcrypto1.1',
-              'purl':             'pkg:apk/alpine/libcrypto1.1@1.1.1n-r0?arch=x86_64&distro=3.15.2',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2023/07/19/4',
-                'http://www.openwall.com/lists/oss-security/2023/07/19/5',
-                'http://www.openwall.com/lists/oss-security/2023/07/19/6',
-                'http://www.openwall.com/lists/oss-security/2023/07/31/1',
-                'http://www.openwall.com/lists/oss-security/2024/05/16/1',
-                'https://access.redhat.com/errata/RHSA-2024:2447',
-                'https://access.redhat.com/security/cve/CVE-2023-3446',
-                'https://bugzilla.redhat.com/2223016',
-                'https://bugzilla.redhat.com/2224962',
-                'https://bugzilla.redhat.com/2227852',
-                'https://bugzilla.redhat.com/2248616',
-                'https://bugzilla.redhat.com/2257571',
-                'https://bugzilla.redhat.com/2258502',
-                'https://bugzilla.redhat.com/2259944',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2224962',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2257582',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2257583',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2258677',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2258688',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2258691',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2258694',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2258700',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-36763',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-36764',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3446',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45229',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45231',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45232',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45233',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45235',
-                'https://errata.almalinux.org/9/ALSA-2024-2447.html',
-                'https://errata.rockylinux.org/RLSA-2024:2264',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=1fa20cf2f506113c761777127a38bce5068740eb',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=8780a896543a654e757db1b9396383f9d8095528',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=9a0a4d3c1e7138915563c0df4fe6a3f9377b839c',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=fc9867c1e03c22ebf56943be205202e576aabf23',
-                'https://linux.oracle.com/cve/CVE-2023-3446.html',
-                'https://linux.oracle.com/errata/ELSA-2024-2447.html',
-                'https://lists.debian.org/debian-lts-announce/2023/08/msg00019.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-3446',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://security.netapp.com/advisory/ntap-20230803-0011/',
-                'https://ubuntu.com/security/notices/USN-6435-1',
-                'https://ubuntu.com/security/notices/USN-6435-2',
-                'https://ubuntu.com/security/notices/USN-6450-1',
-                'https://ubuntu.com/security/notices/USN-6709-1',
-                'https://ubuntu.com/security/notices/USN-7018-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-3446',
-                'https://www.openssl.org/news/secadv/20230719.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: Excessive time spent checking DH keys and parameters'
-            },
-            {
-              'cve':  'CVE-2023-3817',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L'
-                },
-                'redhat': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L'
-                }
-              },
-              'cwes': [
-                'CWE-606',
-                'CWE-834'
-              ],
-              'description':   'Issue summary: Checking excessively long DH keys or parameters may be very slow.\n\nImpact summary: Applications that use the functions DH_check(), DH_check_ex()\nor EVP_PKEY_param_check() to check a DH key or DH parameters may experience long\ndelays. Where the key or parameters that are being checked have been obtained\nfrom an untrusted source this may lead to a Denial of Service.\n\nThe function DH_check() performs various checks on DH parameters. After fixing\nCVE-2023-3446 it was discovered that a large q parameter value can also trigger\nan overly long computation during some of these checks. A correct q value,\nif present, cannot be larger than the modulus p parameter, thus it is\nunnecessary to perform these checks if q is larger than p.\n\nAn application that calls DH_check() and supplies a key or parameters obtained\nfrom an untrusted source could be vulnerable to a Denial of Service attack.\n\nThe function DH_check() is itself called by a number of other OpenSSL functions.\nAn application calling any of those other functions may similarly be affected.\nThe other functions affected by this are DH_check_ex() and\nEVP_PKEY_param_check().\n\nAlso vulnerable are the OpenSSL dhparam and pkeyparam command line applications\nwhen using the "-check" option.\n\nThe OpenSSL SSL/TLS implementation is not affected by this issue.\n\nThe OpenSSL 3.0 and 3.1 FIPS providers are not affected by this issue.',
-              'diffID':        'sha256:ff768a1413ba109308c0d897ffa555e052a46d2cf471178f001b825b4c21f354',
-              'fixedVersions': [
-                '1.1.1v-r0'
-              ],
-              'installedVersion': '1.1.1n-r0',
-              'packageName':      'libcrypto1.1',
-              'purl':             'pkg:apk/alpine/libcrypto1.1@1.1.1n-r0?arch=x86_64&distro=3.15.2',
-              'references':       [
-                'http://seclists.org/fulldisclosure/2023/Jul/43',
-                'http://www.openwall.com/lists/oss-security/2023/07/31/1',
-                'http://www.openwall.com/lists/oss-security/2023/09/22/11',
-                'http://www.openwall.com/lists/oss-security/2023/09/22/9',
-                'http://www.openwall.com/lists/oss-security/2023/11/06/2',
-                'https://access.redhat.com/errata/RHSA-2024:2447',
-                'https://access.redhat.com/security/cve/CVE-2023-3817',
-                'https://bugzilla.redhat.com/2223016',
-                'https://bugzilla.redhat.com/2224962',
-                'https://bugzilla.redhat.com/2227852',
-                'https://bugzilla.redhat.com/2248616',
-                'https://bugzilla.redhat.com/2257571',
-                'https://bugzilla.redhat.com/2258502',
-                'https://bugzilla.redhat.com/2259944',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2224962',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2227852',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2248616',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2270358',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3446',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3817',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-5678',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-2408',
-                'https://errata.almalinux.org/9/ALSA-2024-2447.html',
-                'https://errata.rockylinux.org/RLSA-2023:7877',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=6a1eb62c29db6cb5eec707f9338aee00f44e26f5',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=869ad69aadd985c7b8ca6f4e5dd0eb274c9f3644',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=9002fd07327a91f35ba6c1307e71fa6fd4409b7f',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=91ddeba0f2269b017dc06c46c993a788974b1aa5',
-                'https://linux.oracle.com/cve/CVE-2023-3817.html',
-                'https://linux.oracle.com/errata/ELSA-2024-2447.html',
-                'https://lists.debian.org/debian-lts-announce/2023/08/msg00019.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-3817',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://security.netapp.com/advisory/ntap-20230818-0014/',
-                'https://security.netapp.com/advisory/ntap-20231027-0008/',
-                'https://security.netapp.com/advisory/ntap-20240621-0006/',
-                'https://ubuntu.com/security/notices/USN-6435-1',
-                'https://ubuntu.com/security/notices/USN-6435-2',
-                'https://ubuntu.com/security/notices/USN-6450-1',
-                'https://ubuntu.com/security/notices/USN-6709-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-3817',
-                'https://www.openssl.org/news/secadv/20230731.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'OpenSSL: Excessive time spent checking DH q parameter value'
-            },
-            {
-              'cve':  'CVE-2023-5678',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L'
-                },
-                'redhat': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L'
-                }
-              },
-              'cwes': [
-                'CWE-606',
-                'CWE-754'
-              ],
-              'description':   "Issue summary: Generating excessively long X9.42 DH keys or checking\nexcessively long X9.42 DH keys or parameters may be very slow.\n\nImpact summary: Applications that use the functions DH_generate_key() to\ngenerate an X9.42 DH key may experience long delays.  Likewise, applications\nthat use DH_check_pub_key(), DH_check_pub_key_ex() or EVP_PKEY_public_check()\nto check an X9.42 DH key or X9.42 DH parameters may experience long delays.\nWhere the key or parameters that are being checked have been obtained from\nan untrusted source this may lead to a Denial of Service.\n\nWhile DH_check() performs all the necessary checks (as of CVE-2023-3817),\nDH_check_pub_key() doesn't make any of these checks, and is therefore\nvulnerable for excessively large P and Q parameters.\n\nLikewise, while DH_generate_key() performs a check for an excessively large\nP, it doesn't check for an excessively large Q.\n\nAn application that calls DH_generate_key() or DH_check_pub_key() and\nsupplies a key or parameters obtained from an untrusted source could be\nvulnerable to a Denial of Service attack.\n\nDH_generate_key() and DH_check_pub_key() are also called by a number of\nother OpenSSL functions.  An application calling any of those other\nfunctions may similarly be affected.  The other functions affected by this\nare DH_check_pub_key_ex(), EVP_PKEY_public_check(), and EVP_PKEY_generate().\n\nAlso vulnerable are the OpenSSL pkey command line application when using the\n\"-pubcheck\" option, as well as the OpenSSL genpkey command line application.\n\nThe OpenSSL SSL/TLS implementation is not affected by this issue.\n\nThe OpenSSL 3.0 and 3.1 FIPS providers are not affected by this issue.",
-              'diffID':        'sha256:ff768a1413ba109308c0d897ffa555e052a46d2cf471178f001b825b4c21f354',
-              'fixedVersions': [
-                '1.1.1w-r1'
-              ],
-              'installedVersion': '1.1.1n-r0',
-              'packageName':      'libcrypto1.1',
-              'purl':             'pkg:apk/alpine/libcrypto1.1@1.1.1n-r0?arch=x86_64&distro=3.15.2',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2024/03/11/1',
-                'https://access.redhat.com/errata/RHSA-2024:2447',
-                'https://access.redhat.com/security/cve/CVE-2023-5678',
-                'https://bugzilla.redhat.com/2223016',
-                'https://bugzilla.redhat.com/2224962',
-                'https://bugzilla.redhat.com/2227852',
-                'https://bugzilla.redhat.com/2248616',
-                'https://bugzilla.redhat.com/2257571',
-                'https://bugzilla.redhat.com/2258502',
-                'https://bugzilla.redhat.com/2259944',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2224962',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2227852',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2248616',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2270358',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3446',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3817',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-5678',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-2408',
-                'https://errata.almalinux.org/9/ALSA-2024-2447.html',
-                'https://errata.rockylinux.org/RLSA-2023:7877',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=34efaef6c103d636ab507a0cc34dca4d3aecc055',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=710fee740904b6290fef0dd5536fbcedbc38ff0c',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=db925ae2e65d0d925adef429afc37f75bd1c2017',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=ddeb4b6c6d527e54ce9a99cba785c0f7776e54b6',
-                'https://linux.oracle.com/cve/CVE-2023-5678.html',
-                'https://linux.oracle.com/errata/ELSA-2024-2447.html',
-                'https://lists.debian.org/debian-lts-announce/2024/10/msg00033.html',
-                'https://lists.debian.org/debian-lts-announce/2024/11/msg00000.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-5678',
-                'https://security.netapp.com/advisory/ntap-20231130-0010/',
-                'https://ubuntu.com/security/notices/USN-6622-1',
-                'https://ubuntu.com/security/notices/USN-6632-1',
-                'https://ubuntu.com/security/notices/USN-6709-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-5678',
-                'https://www.openssl.org/news/secadv/20231106.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: Generating excessively long X9.42 DH keys or checking excessively long X9.42 DH keys or parameters may be very slow'
-            },
-            {
-              'cve':  'CVE-2022-4450',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'nvd': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-415'
-              ],
-              'description':   'The function PEM_read_bio_ex() reads a PEM file from a BIO and parses and\ndecodes the "name" (e.g. "CERTIFICATE"), any header data and the payload data.\nIf the function succeeds then the "name_out", "header" and "data" arguments are\npopulated with pointers to buffers containing the relevant decoded data. The\ncaller is responsible for freeing those buffers. It is possible to construct a\nPEM file that results in 0 bytes of payload data. In this case PEM_read_bio_ex()\nwill return a failure code but will populate the header argument with a pointer\nto a buffer that has already been freed. If the caller also frees this buffer\nthen a double free will occur. This will most likely lead to a crash. This\ncould be exploited by an attacker who has the ability to supply malicious PEM\nfiles for parsing to achieve a denial of service attack.\n\nThe functions PEM_read_bio() and PEM_read() are simple wrappers around\nPEM_read_bio_ex() and therefore these functions are also directly affected.\n\nThese functions are also called indirectly by a number of other OpenSSL\nfunctions including PEM_X509_INFO_read_bio_ex() and\nSSL_CTX_use_serverinfo_file() which are also vulnerable. Some OpenSSL internal\nuses of these functions are not vulnerable because the caller does not free the\nheader argument if PEM_read_bio_ex() returns a failure code. These locations\ninclude the PEM_read_bio_TYPE() functions as well as the decoders introduced in\nOpenSSL 3.0.\n\nThe OpenSSL asn1parse command line application is also impacted by this issue.',
-              'diffID':        'sha256:ff768a1413ba109308c0d897ffa555e052a46d2cf471178f001b825b4c21f354',
-              'fixedVersions': [
-                '1.1.1t-r0'
-              ],
-              'installedVersion': '1.1.1n-r0',
-              'packageName':      'libssl1.1',
-              'purl':             'pkg:apk/alpine/libssl1.1@1.1.1n-r0?arch=x86_64&distro=3.15.2',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2023:2165',
-                'https://access.redhat.com/security/cve/CVE-2022-4450',
-                'https://bugzilla.redhat.com/1960321',
-                'https://bugzilla.redhat.com/2164440',
-                'https://bugzilla.redhat.com/2164487',
-                'https://bugzilla.redhat.com/2164492',
-                'https://bugzilla.redhat.com/2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144000',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144003',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144006',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144008',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144010',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144012',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144015',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144017',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144019',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2145170',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2158412',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164440',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164487',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164488',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164492',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164497',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164499',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164500',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4203',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4304',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4450',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0215',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0216',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0217',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0286',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0401',
-                'https://errata.almalinux.org/9/ALSA-2023-2165.html',
-                'https://errata.rockylinux.org/RLSA-2023:0946',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=63bcf189be73a9cc1264059bed6f57974be74a83',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=bbcf509bd046b34cca19c766bbddc31683d0858b',
-                'https://linux.oracle.com/cve/CVE-2022-4450.html',
-                'https://linux.oracle.com/errata/ELSA-2023-32791.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2022-4450',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0003',
-                'https://rustsec.org/advisories/RUSTSEC-2023-0010.html',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://ubuntu.com/security/notices/USN-5844-1',
-                'https://ubuntu.com/security/notices/USN-6564-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2022-4450',
-                'https://www.openssl.org/news/secadv/20230207.txt'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: double free after calling PEM_read_bio_ex'
-            },
-            {
-              'cve':  'CVE-2023-0215',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'nvd': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   'The public API function BIO_new_NDEF is a helper function used for streaming\nASN.1 data via a BIO. It is primarily used internally to OpenSSL to support the\nSMIME, CMS and PKCS7 streaming capabilities, but may also be called directly by\nend user applications.\n\nThe function receives a BIO from the caller, prepends a new BIO_f_asn1 filter\nBIO onto the front of it to form a BIO chain, and then returns the new head of\nthe BIO chain to the caller. Under certain conditions, for example if a CMS\nrecipient public key is invalid, the new filter BIO is freed and the function\nreturns a NULL result indicating a failure. However, in this case, the BIO chain\nis not properly cleaned up and the BIO passed by the caller still retains\ninternal pointers to the previously freed filter BIO. If the caller then goes on\nto call BIO_pop() on the BIO then a use-after-free will occur. This will most\nlikely result in a crash.\n\n\n\nThis scenario occurs directly in the internal function B64_write_ASN1() which\nmay cause BIO_new_NDEF() to be called and will subsequently call BIO_pop() on\nthe BIO. This internal function is in turn called by the public API functions\nPEM_write_bio_ASN1_stream, PEM_write_bio_CMS_stream, PEM_write_bio_PKCS7_stream,\nSMIME_write_ASN1, SMIME_write_CMS and SMIME_write_PKCS7.\n\nOther public API functions that may be impacted by this include\ni2d_ASN1_bio_stream, BIO_new_CMS, BIO_new_PKCS7, i2d_CMS_bio_stream and\ni2d_PKCS7_bio_stream.\n\nThe OpenSSL cms and smime command line applications are similarly affected.',
-              'diffID':        'sha256:ff768a1413ba109308c0d897ffa555e052a46d2cf471178f001b825b4c21f354',
-              'fixedVersions': [
-                '1.1.1t-r0'
-              ],
-              'installedVersion': '1.1.1n-r0',
-              'packageName':      'libssl1.1',
-              'purl':             'pkg:apk/alpine/libssl1.1@1.1.1n-r0?arch=x86_64&distro=3.15.2',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2023:2165',
-                'https://access.redhat.com/security/cve/CVE-2023-0215',
-                'https://bugzilla.redhat.com/1960321',
-                'https://bugzilla.redhat.com/2164440',
-                'https://bugzilla.redhat.com/2164487',
-                'https://bugzilla.redhat.com/2164492',
-                'https://bugzilla.redhat.com/2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144000',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144003',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144006',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144008',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144010',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144012',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144015',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144017',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144019',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2145170',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2158412',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164440',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164487',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164488',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164492',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164497',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164499',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164500',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4203',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4304',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4450',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0215',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0216',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0217',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0286',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0401',
-                'https://errata.almalinux.org/9/ALSA-2023-2165.html',
-                'https://errata.rockylinux.org/RLSA-2023:0946',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=8818064ce3c3c0f1b740a5aaba2a987e75bfbafd',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=9816136fe31d92ace4037d5da5257f763aeeb4eb',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=c3829dd8825c654652201e16f8a0a0c46ee3f344',
-                'https://linux.oracle.com/cve/CVE-2023-0215.html',
-                'https://linux.oracle.com/errata/ELSA-2023-32791.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-0215',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0003',
-                'https://rustsec.org/advisories/RUSTSEC-2023-0009.html',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://security.netapp.com/advisory/ntap-20230427-0007',
-                'https://security.netapp.com/advisory/ntap-20230427-0007/',
-                'https://security.netapp.com/advisory/ntap-20230427-0009',
-                'https://security.netapp.com/advisory/ntap-20230427-0009/',
-                'https://security.netapp.com/advisory/ntap-20240621-0006',
-                'https://security.netapp.com/advisory/ntap-20240621-0006/',
-                'https://ubuntu.com/security/notices/USN-5844-1',
-                'https://ubuntu.com/security/notices/USN-5845-1',
-                'https://ubuntu.com/security/notices/USN-5845-2',
-                'https://ubuntu.com/security/notices/USN-6564-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-0215',
-                'https://www.openssl.org/news/secadv/20230207.txt'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: use-after-free following BIO_new_NDEF'
-            },
-            {
-              'cve':  'CVE-2023-0286',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '7.4',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H'
-                },
-                'nvd': {
-                  'v3score':  '7.4',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.4',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-843'
-              ],
-              'description':   'There is a type confusion vulnerability relating to X.400 address processing\ninside an X.509 GeneralName. X.400 addresses were parsed as an ASN1_STRING but\nthe public structure definition for GENERAL_NAME incorrectly specified the type\nof the x400Address field as ASN1_TYPE. This field is subsequently interpreted by\nthe OpenSSL function GENERAL_NAME_cmp as an ASN1_TYPE rather than an\nASN1_STRING.\n\nWhen CRL checking is enabled (i.e. the application sets the\nX509_V_FLAG_CRL_CHECK flag), this vulnerability may allow an attacker to pass\narbitrary pointers to a memcmp call, enabling them to read memory contents or\nenact a denial of service. In most cases, the attack requires the attacker to\nprovide both the certificate chain and CRL, neither of which need to have a\nvalid signature. If the attacker only controls one of these inputs, the other\ninput must already contain an X.400 address as a CRL distribution point, which\nis uncommon. As such, this vulnerability is most likely to only affect\napplications which have implemented their own functionality for retrieving CRLs\nover a network.',
-              'diffID':        'sha256:ff768a1413ba109308c0d897ffa555e052a46d2cf471178f001b825b4c21f354',
-              'fixedVersions': [
-                '1.1.1t-r0'
-              ],
-              'installedVersion': '1.1.1n-r0',
-              'packageName':      'libssl1.1',
-              'purl':             'pkg:apk/alpine/libssl1.1@1.1.1n-r0?arch=x86_64&distro=3.15.2',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2025:7937',
-                'https://access.redhat.com/security/cve/CVE-2023-0286',
-                'https://access.redhat.com/security/cve/cve-2023-0286',
-                'https://bugzilla.redhat.com/2164440',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144000',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144003',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144006',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144008',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144010',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144012',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144015',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144017',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144019',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2145170',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2158412',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164440',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164487',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164488',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164492',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164497',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164499',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164500',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4203',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4304',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4450',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0215',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0216',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0217',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0286',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0401',
-                'https://errata.almalinux.org/9/ALSA-2025-7937.html',
-                'https://errata.rockylinux.org/RLSA-2023:0946',
-                'https://ftp.openbsd.org/pub/OpenBSD/LibreSSL/libressl-3.6.2-relnotes.txt',
-                'https://ftp.openbsd.org/pub/OpenBSD/patches/7.2/common/018_x509.patch.sig',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=2c6c9d439b484e1ba9830d8454a34fa4f80fdfe9',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=2f7530077e0ef79d98718138716bc51ca0cad658',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=fd2af07dc083a350c959147097003a14a5e8ac4d',
-                'https://github.com/pyca/cryptography',
-                'https://github.com/pyca/cryptography/security/advisories/GHSA-x4qr-2fvf-3mr5',
-                'https://linux.oracle.com/cve/CVE-2023-0286.html',
-                'https://linux.oracle.com/errata/ELSA-2025-7937.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-0286',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0003',
-                'https://rustsec.org/advisories/RUSTSEC-2023-0006.html',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://ubuntu.com/security/notices/USN-5844-1',
-                'https://ubuntu.com/security/notices/USN-5845-1',
-                'https://ubuntu.com/security/notices/USN-5845-2',
-                'https://ubuntu.com/security/notices/USN-6564-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-0286',
-                'https://www.openssl.org/news/secadv/20230207.txt'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: X.400 address type confusion in X.509 GeneralName'
-            },
-            {
-              'cve':  'CVE-2023-0464',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-295'
-              ],
-              'description':   "A security vulnerability has been identified in all supported versions\n\nof OpenSSL related to the verification of X.509 certificate chains\nthat include policy constraints.  Attackers may be able to exploit this\nvulnerability by creating a malicious certificate chain that triggers\nexponential use of computational resources, leading to a denial-of-service\n(DoS) attack on affected systems.\n\nPolicy processing is disabled by default but can be enabled by passing\nthe `-policy' argument to the command line utilities or by calling the\n`X509_VERIFY_PARAM_set1_policies()' function.",
-              'diffID':        'sha256:ff768a1413ba109308c0d897ffa555e052a46d2cf471178f001b825b4c21f354',
-              'fixedVersions': [
-                '1.1.1t-r2'
-              ],
-              'installedVersion': '1.1.1n-r0',
-              'packageName':      'libssl1.1',
-              'purl':             'pkg:apk/alpine/libssl1.1@1.1.1n-r0?arch=x86_64&distro=3.15.2',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2023:3722',
-                'https://access.redhat.com/security/cve/CVE-2023-0464',
-                'https://bugzilla.redhat.com/2181082',
-                'https://bugzilla.redhat.com/2182561',
-                'https://bugzilla.redhat.com/2182565',
-                'https://bugzilla.redhat.com/2188461',
-                'https://bugzilla.redhat.com/2207947',
-                'https://errata.almalinux.org/9/ALSA-2023-3722.html',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=2017771e2db3e2b96f89bbe8766c3209f6a99545',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=2dcd4f1e3115f38cefa43e3efbe9b801c27e642e',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=879f7080d7e141f415c79eaa3a8ac4a3dad0348b',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=959c59c7a0164117e7f8366466a32bb1f8d77ff1',
-                'https://linux.oracle.com/cve/CVE-2023-0464.html',
-                'https://linux.oracle.com/errata/ELSA-2023-3722.html',
-                'https://lists.debian.org/debian-lts-announce/2023/06/msg00011.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-0464',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://security.netapp.com/advisory/ntap-20230406-0006/',
-                'https://security.netapp.com/advisory/ntap-20240621-0006/',
-                'https://ubuntu.com/security/notices/USN-6039-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.couchbase.com/alerts/',
-                'https://www.cve.org/CVERecord?id=CVE-2023-0464',
-                'https://www.debian.org/security/2023/dsa-5417',
-                'https://www.openssl.org/news/secadv/20230322.txt'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: Denial of service by excessive resource usage in verifying X509 policy constraints'
-            },
-            {
-              'cve':  'CVE-2022-2097',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N'
-                },
-                'nvd': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N'
-                },
-                'redhat': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-327'
-              ],
-              'description':   "AES OCB mode for 32-bit x86 platforms using the AES-NI assembly optimised implementation will not encrypt the entirety of the data under some circumstances. This could reveal sixteen bytes of data that was preexisting in the memory that wasn't written. In the special case of \"in place\" encryption, sixteen bytes of the plaintext would be revealed. Since OpenSSL does not support OCB based cipher suites for TLS and DTLS, they are both unaffected. Fixed in OpenSSL 3.0.5 (Affected 3.0.0-3.0.4). Fixed in OpenSSL 1.1.1q (Affected 1.1.1-1.1.1p).",
-              'diffID':        'sha256:ff768a1413ba109308c0d897ffa555e052a46d2cf471178f001b825b4c21f354',
-              'fixedVersions': [
-                '1.1.1q-r0'
-              ],
-              'installedVersion': '1.1.1n-r0',
-              'packageName':      'libssl1.1',
-              'purl':             'pkg:apk/alpine/libssl1.1@1.1.1n-r0?arch=x86_64&distro=3.15.2',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2022:6224',
-                'https://access.redhat.com/security/cve/CVE-2022-2097',
-                'https://bugzilla.redhat.com/2081494',
-                'https://bugzilla.redhat.com/2087911',
-                'https://bugzilla.redhat.com/2087913',
-                'https://bugzilla.redhat.com/2097310',
-                'https://bugzilla.redhat.com/2104905',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2081494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2097310',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2100554',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2104905',
-                'https://cert-portal.siemens.com/productcert/pdf/ssa-332410.pdf',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-1292',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-2068',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-2097',
-                'https://errata.almalinux.org/9/ALSA-2022-6224.html',
-                'https://errata.rockylinux.org/RLSA-2022:5818',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=919925673d6c9cfed3c1085497f5dfbbed5fc431',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=a98f339ddd7e8f487d6e0088d4a9a42324885a93',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=919925673d6c9cfed3c1085497f5dfbbed5fc431',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=a98f339ddd7e8f487d6e0088d4a9a42324885a93',
-                'https://github.com/alexcrichton/openssl-src-rs',
-                'https://linux.oracle.com/cve/CVE-2022-2097.html',
-                'https://linux.oracle.com/errata/ELSA-2022-9955.html',
-                'https://lists.debian.org/debian-lts-announce/2023/02/msg00019.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/R6CK57NBQFTPUMXAPJURCGXUYT76NQAK',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/R6CK57NBQFTPUMXAPJURCGXUYT76NQAK/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/V6567JERRHHJW2GNGJGKDRNHR7SNPZK7',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/V6567JERRHHJW2GNGJGKDRNHR7SNPZK7/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VCMNWKERPBKOEBNL7CLTTX3ZZCZLH7XA',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VCMNWKERPBKOEBNL7CLTTX3ZZCZLH7XA/',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/R6CK57NBQFTPUMXAPJURCGXUYT76NQAK',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/R6CK57NBQFTPUMXAPJURCGXUYT76NQAK/',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/V6567JERRHHJW2GNGJGKDRNHR7SNPZK7',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/V6567JERRHHJW2GNGJGKDRNHR7SNPZK7/',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/VCMNWKERPBKOEBNL7CLTTX3ZZCZLH7XA',
-                'https://nvd.nist.gov/vuln/detail/CVE-2022-2097',
-                'https://rustsec.org/advisories/RUSTSEC-2022-0032.html',
-                'https://security.gentoo.org/glsa/202210-02',
-                'https://security.netapp.com/advisory/ntap-20220715-0011',
-                'https://security.netapp.com/advisory/ntap-20220715-0011/',
-                'https://security.netapp.com/advisory/ntap-20230420-0008',
-                'https://security.netapp.com/advisory/ntap-20230420-0008/',
-                'https://security.netapp.com/advisory/ntap-20240621-0006',
-                'https://security.netapp.com/advisory/ntap-20240621-0006/',
-                'https://ubuntu.com/security/notices/USN-5502-1',
-                'https://ubuntu.com/security/notices/USN-6457-1',
-                'https://www.cve.org/CVERecord?id=CVE-2022-2097',
-                'https://www.debian.org/security/2023/dsa-5343',
-                'https://www.openssl.org/news/secadv/20220705.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: AES OCB fails to encrypt some bytes'
-            },
-            {
-              'cve':  'CVE-2022-4304',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N'
-                },
-                'nvd': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N'
-                },
-                'redhat': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-203'
-              ],
-              'description':   'A timing based side channel exists in the OpenSSL RSA Decryption implementation\nwhich could be sufficient to recover a plaintext across a network in a\nBleichenbacher style attack. To achieve a successful decryption an attacker\nwould have to be able to send a very large number of trial messages for\ndecryption. The vulnerability affects all RSA padding modes: PKCS#1 v1.5,\nRSA-OEAP and RSASVE.\n\nFor example, in a TLS connection, RSA is commonly used by a client to send an\nencrypted pre-master secret to the server. An attacker that had observed a\ngenuine connection between a client and a server could use this flaw to send\ntrial messages to the server and record the time taken to process them. After a\nsufficiently large number of messages the attacker could recover the pre-master\nsecret used for the original connection and thus be able to decrypt the\napplication data sent over that connection.',
-              'diffID':        'sha256:ff768a1413ba109308c0d897ffa555e052a46d2cf471178f001b825b4c21f354',
-              'fixedVersions': [
-                '1.1.1t-r0'
-              ],
-              'installedVersion': '1.1.1n-r0',
-              'packageName':      'libssl1.1',
-              'purl':             'pkg:apk/alpine/libssl1.1@1.1.1n-r0?arch=x86_64&distro=3.15.2',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2023:2165',
-                'https://access.redhat.com/security/cve/CVE-2022-4304',
-                'https://bugzilla.redhat.com/1960321',
-                'https://bugzilla.redhat.com/2164440',
-                'https://bugzilla.redhat.com/2164487',
-                'https://bugzilla.redhat.com/2164492',
-                'https://bugzilla.redhat.com/2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144000',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144003',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144006',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144008',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144010',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144012',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144015',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144017',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144019',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2145170',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2158412',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164440',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164487',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164488',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164492',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164497',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164499',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164500',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4203',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4304',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4450',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0215',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0216',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0217',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0286',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0401',
-                'https://errata.almalinux.org/9/ALSA-2023-2165.html',
-                'https://errata.rockylinux.org/RLSA-2023:0946',
-                'https://linux.oracle.com/cve/CVE-2022-4304.html',
-                'https://linux.oracle.com/errata/ELSA-2023-32791.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2022-4304',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0003',
-                'https://rustsec.org/advisories/RUSTSEC-2023-0007.html',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://ubuntu.com/security/notices/USN-5844-1',
-                'https://ubuntu.com/security/notices/USN-6564-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2022-4304',
-                'https://www.openssl.org/news/secadv/20230207.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: timing attack in RSA Decryption implementation'
-            },
-            {
-              'cve':  'CVE-2023-0465',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N'
-                },
-                'redhat': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-295'
-              ],
-              'description':   "Applications that use a non-default option when verifying certificates may be\nvulnerable to an attack from a malicious CA to circumvent certain checks.\n\nInvalid certificate policies in leaf certificates are silently ignored by\nOpenSSL and other certificate policy checks are skipped for that certificate.\nA malicious CA could use this to deliberately assert invalid certificate policies\nin order to circumvent policy checking on the certificate altogether.\n\nPolicy processing is disabled by default but can be enabled by passing\nthe `-policy' argument to the command line utilities or by calling the\n`X509_VERIFY_PARAM_set1_policies()' function.",
-              'diffID':        'sha256:ff768a1413ba109308c0d897ffa555e052a46d2cf471178f001b825b4c21f354',
-              'fixedVersions': [
-                '1.1.1t-r2'
-              ],
-              'installedVersion': '1.1.1n-r0',
-              'packageName':      'libssl1.1',
-              'purl':             'pkg:apk/alpine/libssl1.1@1.1.1n-r0?arch=x86_64&distro=3.15.2',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2023:3722',
-                'https://access.redhat.com/security/cve/CVE-2023-0465',
-                'https://bugzilla.redhat.com/2181082',
-                'https://bugzilla.redhat.com/2182561',
-                'https://bugzilla.redhat.com/2182565',
-                'https://bugzilla.redhat.com/2188461',
-                'https://bugzilla.redhat.com/2207947',
-                'https://errata.almalinux.org/9/ALSA-2023-3722.html',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=10325176f3d3e98c6e2b3bf5ab1e3b334de6947a',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=1dd43e0709fece299b15208f36cc7c76209ba0bb',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=b013765abfa80036dc779dd0e50602c57bb3bf95',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=facfb1ab745646e97a1920977ae4a9965ea61d5c',
-                'https://linux.oracle.com/cve/CVE-2023-0465.html',
-                'https://linux.oracle.com/errata/ELSA-2023-3722.html',
-                'https://lists.debian.org/debian-lts-announce/2023/06/msg00011.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-0465',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://security.netapp.com/advisory/ntap-20230414-0001/',
-                'https://ubuntu.com/security/notices/USN-6039-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-0465',
-                'https://www.debian.org/security/2023/dsa-5417',
-                'https://www.openssl.org/news/secadv/20230328.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: Invalid certificate policies in leaf certificates are silently ignored'
-            },
-            {
-              'cve':  'CVE-2023-2650',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '6.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-770'
-              ],
-              'description':   "Issue summary: Processing some specially crafted ASN.1 object identifiers or\ndata containing them may be very slow.\n\nImpact summary: Applications that use OBJ_obj2txt() directly, or use any of\nthe OpenSSL subsystems OCSP, PKCS7/SMIME, CMS, CMP/CRMF or TS with no message\nsize limit may experience notable to very long delays when processing those\nmessages, which may lead to a Denial of Service.\n\nAn OBJECT IDENTIFIER is composed of a series of numbers - sub-identifiers -\nmost of which have no size limit.  OBJ_obj2txt() may be used to translate\nan ASN.1 OBJECT IDENTIFIER given in DER encoding form (using the OpenSSL\ntype ASN1_OBJECT) to its canonical numeric text form, which are the\nsub-identifiers of the OBJECT IDENTIFIER in decimal form, separated by\nperiods.\n\nWhen one of the sub-identifiers in the OBJECT IDENTIFIER is very large\n(these are sizes that are seen as absurdly large, taking up tens or hundreds\nof KiBs), the translation to a decimal number in text may take a very long\ntime.  The time complexity is O(n^2) with 'n' being the size of the\nsub-identifiers in bytes (*).\n\nWith OpenSSL 3.0, support to fetch cryptographic algorithms using names /\nidentifiers in string form was introduced.  This includes using OBJECT\nIDENTIFIERs in canonical numeric text form as identifiers for fetching\nalgorithms.\n\nSuch OBJECT IDENTIFIERs may be received through the ASN.1 structure\nAlgorithmIdentifier, which is commonly used in multiple protocols to specify\nwhat cryptographic algorithm should be used to sign or verify, encrypt or\ndecrypt, or digest passed data.\n\nApplications that call OBJ_obj2txt() directly with untrusted data are\naffected, with any version of OpenSSL.  If the use is for the mere purpose\nof display, the severity is considered low.\n\nIn OpenSSL 3.0 and newer, this affects the subsystems OCSP, PKCS7/SMIME,\nCMS, CMP/CRMF or TS.  It also impacts anything that processes X.509\ncertificates, including simple things like verifying its signature.\n\nThe impact on TLS is relatively low, because all versions of OpenSSL have a\n100KiB limit on the peer's certificate chain.  Additionally, this only\nimpacts clients, or servers that have explicitly enabled client\nauthentication.\n\nIn OpenSSL 1.1.1 and 1.0.2, this only affects displaying diverse objects,\nsuch as X.509 certificates.  This is assumed to not happen in such a way\nthat it would cause a Denial of Service, so these versions are considered\nnot affected by this issue in such a way that it would be cause for concern,\nand the severity is therefore considered low.",
-              'diffID':        'sha256:ff768a1413ba109308c0d897ffa555e052a46d2cf471178f001b825b4c21f354',
-              'fixedVersions': [
-                '1.1.1u-r0'
-              ],
-              'installedVersion': '1.1.1n-r0',
-              'packageName':      'libssl1.1',
-              'purl':             'pkg:apk/alpine/libssl1.1@1.1.1n-r0?arch=x86_64&distro=3.15.2',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2023/05/30/1',
-                'https://access.redhat.com/errata/RHSA-2023:6330',
-                'https://access.redhat.com/security/cve/CVE-2023-2650',
-                'https://bugzilla.redhat.com/1858038',
-                'https://bugzilla.redhat.com/2207947',
-                'https://errata.almalinux.org/9/ALSA-2023-6330.html',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=423a2bc737a908ad0c77bda470b2b59dc879936b',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=853c5e56ee0b8650c73140816bb8b91d6163422c',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=9e209944b35cf82368071f160a744b6178f9b098',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=db779b0e10b047f2585615e0b8f2acdf21f8544a',
-                'https://linux.oracle.com/cve/CVE-2023-2650.html',
-                'https://linux.oracle.com/errata/ELSA-2023-6330.html',
-                'https://lists.debian.org/debian-lts-announce/2023/06/msg00011.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-2650',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0009',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://security.netapp.com/advisory/ntap-20230703-0001/',
-                'https://security.netapp.com/advisory/ntap-20231027-0009/',
-                'https://ubuntu.com/security/notices/USN-6119-1',
-                'https://ubuntu.com/security/notices/USN-6188-1',
-                'https://ubuntu.com/security/notices/USN-6672-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-2650',
-                'https://www.debian.org/security/2023/dsa-5417',
-                'https://www.openssl.org/news/secadv/20230530.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: Possible DoS translating ASN.1 object identifiers'
-            },
-            {
-              'cve':  'CVE-2023-3446',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L'
-                },
-                'redhat': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L'
-                }
-              },
-              'cwes': [
-                'CWE-606',
-                'CWE-1333'
-              ],
-              'description':   "Issue summary: Checking excessively long DH keys or parameters may be very slow.\n\nImpact summary: Applications that use the functions DH_check(), DH_check_ex()\nor EVP_PKEY_param_check() to check a DH key or DH parameters may experience long\ndelays. Where the key or parameters that are being checked have been obtained\nfrom an untrusted source this may lead to a Denial of Service.\n\nThe function DH_check() performs various checks on DH parameters. One of those\nchecks confirms that the modulus ('p' parameter) is not too large. Trying to use\na very large modulus is slow and OpenSSL will not normally use a modulus which\nis over 10,000 bits in length.\n\nHowever the DH_check() function checks numerous aspects of the key or parameters\nthat have been supplied. Some of those checks use the supplied modulus value\neven if it has already been found to be too large.\n\nAn application that calls DH_check() and supplies a key or parameters obtained\nfrom an untrusted source could be vulernable to a Denial of Service attack.\n\nThe function DH_check() is itself called by a number of other OpenSSL functions.\nAn application calling any of those other functions may similarly be affected.\nThe other functions affected by this are DH_check_ex() and\nEVP_PKEY_param_check().\n\nAlso vulnerable are the OpenSSL dhparam and pkeyparam command line applications\nwhen using the '-check' option.\n\nThe OpenSSL SSL/TLS implementation is not affected by this issue.\nThe OpenSSL 3.0 and 3.1 FIPS providers are not affected by this issue.",
-              'diffID':        'sha256:ff768a1413ba109308c0d897ffa555e052a46d2cf471178f001b825b4c21f354',
-              'fixedVersions': [
-                '1.1.1u-r2'
-              ],
-              'installedVersion': '1.1.1n-r0',
-              'packageName':      'libssl1.1',
-              'purl':             'pkg:apk/alpine/libssl1.1@1.1.1n-r0?arch=x86_64&distro=3.15.2',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2023/07/19/4',
-                'http://www.openwall.com/lists/oss-security/2023/07/19/5',
-                'http://www.openwall.com/lists/oss-security/2023/07/19/6',
-                'http://www.openwall.com/lists/oss-security/2023/07/31/1',
-                'http://www.openwall.com/lists/oss-security/2024/05/16/1',
-                'https://access.redhat.com/errata/RHSA-2024:2447',
-                'https://access.redhat.com/security/cve/CVE-2023-3446',
-                'https://bugzilla.redhat.com/2223016',
-                'https://bugzilla.redhat.com/2224962',
-                'https://bugzilla.redhat.com/2227852',
-                'https://bugzilla.redhat.com/2248616',
-                'https://bugzilla.redhat.com/2257571',
-                'https://bugzilla.redhat.com/2258502',
-                'https://bugzilla.redhat.com/2259944',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2224962',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2257582',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2257583',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2258677',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2258688',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2258691',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2258694',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2258700',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-36763',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-36764',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3446',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45229',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45231',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45232',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45233',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45235',
-                'https://errata.almalinux.org/9/ALSA-2024-2447.html',
-                'https://errata.rockylinux.org/RLSA-2024:2264',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=1fa20cf2f506113c761777127a38bce5068740eb',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=8780a896543a654e757db1b9396383f9d8095528',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=9a0a4d3c1e7138915563c0df4fe6a3f9377b839c',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=fc9867c1e03c22ebf56943be205202e576aabf23',
-                'https://linux.oracle.com/cve/CVE-2023-3446.html',
-                'https://linux.oracle.com/errata/ELSA-2024-2447.html',
-                'https://lists.debian.org/debian-lts-announce/2023/08/msg00019.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-3446',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://security.netapp.com/advisory/ntap-20230803-0011/',
-                'https://ubuntu.com/security/notices/USN-6435-1',
-                'https://ubuntu.com/security/notices/USN-6435-2',
-                'https://ubuntu.com/security/notices/USN-6450-1',
-                'https://ubuntu.com/security/notices/USN-6709-1',
-                'https://ubuntu.com/security/notices/USN-7018-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-3446',
-                'https://www.openssl.org/news/secadv/20230719.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: Excessive time spent checking DH keys and parameters'
-            },
-            {
-              'cve':  'CVE-2023-3817',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L'
-                },
-                'redhat': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L'
-                }
-              },
-              'cwes': [
-                'CWE-606',
-                'CWE-834'
-              ],
-              'description':   'Issue summary: Checking excessively long DH keys or parameters may be very slow.\n\nImpact summary: Applications that use the functions DH_check(), DH_check_ex()\nor EVP_PKEY_param_check() to check a DH key or DH parameters may experience long\ndelays. Where the key or parameters that are being checked have been obtained\nfrom an untrusted source this may lead to a Denial of Service.\n\nThe function DH_check() performs various checks on DH parameters. After fixing\nCVE-2023-3446 it was discovered that a large q parameter value can also trigger\nan overly long computation during some of these checks. A correct q value,\nif present, cannot be larger than the modulus p parameter, thus it is\nunnecessary to perform these checks if q is larger than p.\n\nAn application that calls DH_check() and supplies a key or parameters obtained\nfrom an untrusted source could be vulnerable to a Denial of Service attack.\n\nThe function DH_check() is itself called by a number of other OpenSSL functions.\nAn application calling any of those other functions may similarly be affected.\nThe other functions affected by this are DH_check_ex() and\nEVP_PKEY_param_check().\n\nAlso vulnerable are the OpenSSL dhparam and pkeyparam command line applications\nwhen using the "-check" option.\n\nThe OpenSSL SSL/TLS implementation is not affected by this issue.\n\nThe OpenSSL 3.0 and 3.1 FIPS providers are not affected by this issue.',
-              'diffID':        'sha256:ff768a1413ba109308c0d897ffa555e052a46d2cf471178f001b825b4c21f354',
-              'fixedVersions': [
-                '1.1.1v-r0'
-              ],
-              'installedVersion': '1.1.1n-r0',
-              'packageName':      'libssl1.1',
-              'purl':             'pkg:apk/alpine/libssl1.1@1.1.1n-r0?arch=x86_64&distro=3.15.2',
-              'references':       [
-                'http://seclists.org/fulldisclosure/2023/Jul/43',
-                'http://www.openwall.com/lists/oss-security/2023/07/31/1',
-                'http://www.openwall.com/lists/oss-security/2023/09/22/11',
-                'http://www.openwall.com/lists/oss-security/2023/09/22/9',
-                'http://www.openwall.com/lists/oss-security/2023/11/06/2',
-                'https://access.redhat.com/errata/RHSA-2024:2447',
-                'https://access.redhat.com/security/cve/CVE-2023-3817',
-                'https://bugzilla.redhat.com/2223016',
-                'https://bugzilla.redhat.com/2224962',
-                'https://bugzilla.redhat.com/2227852',
-                'https://bugzilla.redhat.com/2248616',
-                'https://bugzilla.redhat.com/2257571',
-                'https://bugzilla.redhat.com/2258502',
-                'https://bugzilla.redhat.com/2259944',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2224962',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2227852',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2248616',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2270358',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3446',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3817',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-5678',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-2408',
-                'https://errata.almalinux.org/9/ALSA-2024-2447.html',
-                'https://errata.rockylinux.org/RLSA-2023:7877',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=6a1eb62c29db6cb5eec707f9338aee00f44e26f5',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=869ad69aadd985c7b8ca6f4e5dd0eb274c9f3644',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=9002fd07327a91f35ba6c1307e71fa6fd4409b7f',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=91ddeba0f2269b017dc06c46c993a788974b1aa5',
-                'https://linux.oracle.com/cve/CVE-2023-3817.html',
-                'https://linux.oracle.com/errata/ELSA-2024-2447.html',
-                'https://lists.debian.org/debian-lts-announce/2023/08/msg00019.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-3817',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://security.netapp.com/advisory/ntap-20230818-0014/',
-                'https://security.netapp.com/advisory/ntap-20231027-0008/',
-                'https://security.netapp.com/advisory/ntap-20240621-0006/',
-                'https://ubuntu.com/security/notices/USN-6435-1',
-                'https://ubuntu.com/security/notices/USN-6435-2',
-                'https://ubuntu.com/security/notices/USN-6450-1',
-                'https://ubuntu.com/security/notices/USN-6709-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-3817',
-                'https://www.openssl.org/news/secadv/20230731.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'OpenSSL: Excessive time spent checking DH q parameter value'
-            },
-            {
-              'cve':  'CVE-2023-5678',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L'
-                },
-                'redhat': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L'
-                }
-              },
-              'cwes': [
-                'CWE-606',
-                'CWE-754'
-              ],
-              'description':   "Issue summary: Generating excessively long X9.42 DH keys or checking\nexcessively long X9.42 DH keys or parameters may be very slow.\n\nImpact summary: Applications that use the functions DH_generate_key() to\ngenerate an X9.42 DH key may experience long delays.  Likewise, applications\nthat use DH_check_pub_key(), DH_check_pub_key_ex() or EVP_PKEY_public_check()\nto check an X9.42 DH key or X9.42 DH parameters may experience long delays.\nWhere the key or parameters that are being checked have been obtained from\nan untrusted source this may lead to a Denial of Service.\n\nWhile DH_check() performs all the necessary checks (as of CVE-2023-3817),\nDH_check_pub_key() doesn't make any of these checks, and is therefore\nvulnerable for excessively large P and Q parameters.\n\nLikewise, while DH_generate_key() performs a check for an excessively large\nP, it doesn't check for an excessively large Q.\n\nAn application that calls DH_generate_key() or DH_check_pub_key() and\nsupplies a key or parameters obtained from an untrusted source could be\nvulnerable to a Denial of Service attack.\n\nDH_generate_key() and DH_check_pub_key() are also called by a number of\nother OpenSSL functions.  An application calling any of those other\nfunctions may similarly be affected.  The other functions affected by this\nare DH_check_pub_key_ex(), EVP_PKEY_public_check(), and EVP_PKEY_generate().\n\nAlso vulnerable are the OpenSSL pkey command line application when using the\n\"-pubcheck\" option, as well as the OpenSSL genpkey command line application.\n\nThe OpenSSL SSL/TLS implementation is not affected by this issue.\n\nThe OpenSSL 3.0 and 3.1 FIPS providers are not affected by this issue.",
-              'diffID':        'sha256:ff768a1413ba109308c0d897ffa555e052a46d2cf471178f001b825b4c21f354',
-              'fixedVersions': [
-                '1.1.1w-r1'
-              ],
-              'installedVersion': '1.1.1n-r0',
-              'packageName':      'libssl1.1',
-              'purl':             'pkg:apk/alpine/libssl1.1@1.1.1n-r0?arch=x86_64&distro=3.15.2',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2024/03/11/1',
-                'https://access.redhat.com/errata/RHSA-2024:2447',
-                'https://access.redhat.com/security/cve/CVE-2023-5678',
-                'https://bugzilla.redhat.com/2223016',
-                'https://bugzilla.redhat.com/2224962',
-                'https://bugzilla.redhat.com/2227852',
-                'https://bugzilla.redhat.com/2248616',
-                'https://bugzilla.redhat.com/2257571',
-                'https://bugzilla.redhat.com/2258502',
-                'https://bugzilla.redhat.com/2259944',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2224962',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2227852',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2248616',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2270358',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3446',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3817',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-5678',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-2408',
-                'https://errata.almalinux.org/9/ALSA-2024-2447.html',
-                'https://errata.rockylinux.org/RLSA-2023:7877',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=34efaef6c103d636ab507a0cc34dca4d3aecc055',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=710fee740904b6290fef0dd5536fbcedbc38ff0c',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=db925ae2e65d0d925adef429afc37f75bd1c2017',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=ddeb4b6c6d527e54ce9a99cba785c0f7776e54b6',
-                'https://linux.oracle.com/cve/CVE-2023-5678.html',
-                'https://linux.oracle.com/errata/ELSA-2024-2447.html',
-                'https://lists.debian.org/debian-lts-announce/2024/10/msg00033.html',
-                'https://lists.debian.org/debian-lts-announce/2024/11/msg00000.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-5678',
-                'https://security.netapp.com/advisory/ntap-20231130-0010/',
-                'https://ubuntu.com/security/notices/USN-6622-1',
-                'https://ubuntu.com/security/notices/USN-6632-1',
-                'https://ubuntu.com/security/notices/USN-6709-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-5678',
-                'https://www.openssl.org/news/secadv/20231106.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: Generating excessively long X9.42 DH keys or checking excessively long X9.42 DH keys or parameters may be very slow'
-            },
-            {
-              'cve':  'CVE-2022-28391',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '8.8',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-88'
-              ],
-              'description':   "BusyBox through 1.35.0 allows remote attackers to execute arbitrary code if netstat is used to print a DNS PTR record's value to a VT compatible terminal. Alternatively, the attacker could choose to change the terminal's colors.",
-              'diffID':        'sha256:ff768a1413ba109308c0d897ffa555e052a46d2cf471178f001b825b4c21f354',
-              'fixedVersions': [
-                '1.34.1-r5'
-              ],
-              'installedVersion': '1.34.1-r4',
-              'packageName':      'ssl_client',
-              'purl':             'pkg:apk/alpine/ssl_client@1.34.1-r4?arch=x86_64&distro=3.15.2',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2022-28391',
-                'https://git.alpinelinux.org/aports/plain/main/busybox/0001-libbb-sockaddr2str-ensure-only-printable-characters-.patch',
-                'https://git.alpinelinux.org/aports/plain/main/busybox/0002-nslookup-sanitize-all-printed-strings-with-printable.patch',
-                'https://gitlab.alpinelinux.org/alpine/aports/-/issues/13661',
-                'https://nvd.nist.gov/vuln/detail/CVE-2022-28391',
-                'https://www.cve.org/CVERecord?id=CVE-2022-28391'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: remote attackers may execute arbitrary code if netstat is used'
-            },
-            {
-              'cve':  'CVE-2022-37434',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '9.8',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-787',
-                'CWE-120'
-              ],
-              'description':   'zlib through 1.2.12 has a heap-based buffer over-read or buffer overflow in inflate in inflate.c via a large gzip header extra field. NOTE: only applications that call inflateGetHeader are affected. Some common applications bundle the affected zlib source code but may be unable to call inflateGetHeader (e.g., see the nodejs/node reference).',
-              'diffID':        'sha256:ff768a1413ba109308c0d897ffa555e052a46d2cf471178f001b825b4c21f354',
-              'fixedVersions': [
-                '1.2.12-r2'
-              ],
-              'installedVersion': '1.2.11-r3',
-              'packageName':      'zlib',
-              'purl':             'pkg:apk/alpine/zlib@1.2.11-r3?arch=x86_64&distro=3.15.2',
-              'references':       [
-                'http://seclists.org/fulldisclosure/2022/Oct/37',
-                'http://seclists.org/fulldisclosure/2022/Oct/38',
-                'http://seclists.org/fulldisclosure/2022/Oct/41',
-                'http://seclists.org/fulldisclosure/2022/Oct/42',
-                'http://www.openwall.com/lists/oss-security/2022/08/05/2',
-                'http://www.openwall.com/lists/oss-security/2022/08/09/1',
-                'https://access.redhat.com/errata/RHSA-2022:8291',
-                'https://access.redhat.com/security/cve/CVE-2022-37434',
-                'https://bugzilla.redhat.com/2116639',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2053198',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2077431',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2081296',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2116639',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-37434',
-                'https://errata.almalinux.org/9/ALSA-2022-8291.html',
-                'https://errata.rockylinux.org/RLSA-2022:8291',
-                'https://github.com/curl/curl/issues/9271',
-                'https://github.com/ivd38/zlib_overflow',
-                'https://github.com/madler/zlib/blob/21767c654d31d2dccdde4330529775c6c5fd5389/zlib.h#L1062-L1063',
-                'https://github.com/madler/zlib/commit/1eb7682f845ac9e9bf9ae35bbfb3bad5dacbd91d',
-                'https://github.com/madler/zlib/commit/eff308af425b67093bab25f80f1ae950166bece1',
-                'https://github.com/nodejs/node/blob/75b68c6e4db515f76df73af476eccf382bbcb00a/deps/zlib/inflate.c#L762-L764',
-                'https://linux.oracle.com/cve/CVE-2022-37434.html',
-                'https://linux.oracle.com/errata/ELSA-2023-1095.html',
-                'https://lists.debian.org/debian-lts-announce/2022/09/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JWN4VE3JQR4O2SOUS5TXNLANRPMHWV4I/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NMBOJ77A7T7PQCARMDUK75TE6LLESZ3O/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PAVPQNCG3XRLCLNSQRM3KAN5ZFMVXVTY/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/X5U7OTKZSHY2I3ZFJSR2SHFHW72RKGDK/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YRQAI7H4M4RQZ2IWZUEEXECBE5D56BH2/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2022-37434',
-                'https://security.netapp.com/advisory/ntap-20220901-0005/',
-                'https://security.netapp.com/advisory/ntap-20230427-0007/',
-                'https://support.apple.com/kb/HT213488',
-                'https://support.apple.com/kb/HT213489',
-                'https://support.apple.com/kb/HT213490',
-                'https://support.apple.com/kb/HT213491',
-                'https://support.apple.com/kb/HT213493',
-                'https://support.apple.com/kb/HT213494',
-                'https://ubuntu.com/security/notices/USN-5570-1',
-                'https://ubuntu.com/security/notices/USN-5570-2',
-                'https://ubuntu.com/security/notices/USN-5573-1',
-                'https://ubuntu.com/security/notices/USN-6736-1',
-                'https://ubuntu.com/security/notices/USN-6736-2',
-                'https://www.cve.org/CVERecord?id=CVE-2022-37434',
-                'https://www.debian.org/security/2022/dsa-5218'
-              ],
-              'severity':   'CRITICAL',
-              'suppressed': false,
-              'title':      'zlib: heap-based buffer over-read and overflow in inflate() in inflate.c via a large gzip header extra field'
-            },
-            {
-              'cve':  'CVE-2018-25032',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'nvd': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '8.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-787'
-              ],
-              'description':   'zlib before 1.2.12 allows memory corruption when deflating (i.e., when compressing) if the input has many distant matches.',
-              'diffID':        'sha256:ff768a1413ba109308c0d897ffa555e052a46d2cf471178f001b825b4c21f354',
-              'fixedVersions': [
-                '1.2.12-r0'
-              ],
-              'installedVersion': '1.2.11-r3',
-              'packageName':      'zlib',
-              'purl':             'pkg:apk/alpine/zlib@1.2.11-r3?arch=x86_64&distro=3.15.2',
-              'references':       [
-                'http://seclists.org/fulldisclosure/2022/May/33',
-                'http://seclists.org/fulldisclosure/2022/May/35',
-                'http://seclists.org/fulldisclosure/2022/May/38',
-                'http://www.openwall.com/lists/oss-security/2022/03/25/2',
-                'http://www.openwall.com/lists/oss-security/2022/03/26/1',
-                'https://access.redhat.com/errata/RHSA-2022:8420',
-                'https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-25032.json',
-                'https://access.redhat.com/security/cve/CVE-2018-25032',
-                'https://bugzilla.redhat.com/2067945',
-                'https://cert-portal.siemens.com/productcert/pdf/ssa-333517.pdf',
-                'https://errata.almalinux.org/9/ALSA-2022-8420.html',
-                'https://github.com/advisories/GHSA-jc36-42cf-vqwj',
-                'https://github.com/madler/zlib/commit/5c44459c3b28a9bd3283aaceab7c615f8020c531',
-                'https://github.com/madler/zlib/compare/v1.2.11...v1.2.12',
-                'https://github.com/madler/zlib/issues/605',
-                'https://github.com/rubysec/ruby-advisory-db/blob/master/gems/nokogiri/CVE-2018-25032.yml',
-                'https://github.com/sparklemotion/nokogiri/releases/tag/v1.13.4',
-                'https://github.com/sparklemotion/nokogiri/security/advisories/GHSA-v6gp-9mmm-c6p5',
-                'https://groups.google.com/g/ruby-security-ann/c/vX7qSjsvWis/m/TJWN4oOKBwAJ',
-                'https://linux.oracle.com/cve/CVE-2018-25032.html',
-                'https://linux.oracle.com/errata/ELSA-2022-9565.html',
-                'https://lists.debian.org/debian-lts-announce/2022/04/msg00000.html',
-                'https://lists.debian.org/debian-lts-announce/2022/05/msg00008.html',
-                'https://lists.debian.org/debian-lts-announce/2022/09/msg00023.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DCZFIJBJTZ7CL5QXBFKTQ22Q26VINRUF/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DF62MVMH3QUGMBDCB3DY2ERQ6EBHTADB/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JZZPTWRYQULAOL3AW7RZJNVZ2UONXCV4/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NS2D2GFPFGOJUL4WQ3DUAY7HF4VWQ77F/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VOKNP2L734AEL47NRYGVZIKEFOUBQY5Y/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/XOKFMSNQ5D5WGMALBNBXU3GE442V74WU/',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/DCZFIJBJTZ7CL5QXBFKTQ22Q26VINRUF',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/DCZFIJBJTZ7CL5QXBFKTQ22Q26VINRUF/',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/DF62MVMH3QUGMBDCB3DY2ERQ6EBHTADB',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/DF62MVMH3QUGMBDCB3DY2ERQ6EBHTADB/',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/JZZPTWRYQULAOL3AW7RZJNVZ2UONXCV4',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/JZZPTWRYQULAOL3AW7RZJNVZ2UONXCV4/',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/NS2D2GFPFGOJUL4WQ3DUAY7HF4VWQ77F',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/NS2D2GFPFGOJUL4WQ3DUAY7HF4VWQ77F/',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/VOKNP2L734AEL47NRYGVZIKEFOUBQY5Y',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/VOKNP2L734AEL47NRYGVZIKEFOUBQY5Y/',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/XOKFMSNQ5D5WGMALBNBXU3GE442V74WU',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/XOKFMSNQ5D5WGMALBNBXU3GE442V74WU/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2018-25032',
-                'https://security.gentoo.org/glsa/202210-42',
-                'https://security.netapp.com/advisory/ntap-20220526-0009',
-                'https://security.netapp.com/advisory/ntap-20220526-0009/',
-                'https://security.netapp.com/advisory/ntap-20220729-0004',
-                'https://security.netapp.com/advisory/ntap-20220729-0004/',
-                'https://support.apple.com/kb/HT213255',
-                'https://support.apple.com/kb/HT213256',
-                'https://support.apple.com/kb/HT213257',
-                'https://ubuntu.com/security/notices/USN-5355-1',
-                'https://ubuntu.com/security/notices/USN-5355-2',
-                'https://ubuntu.com/security/notices/USN-5359-1',
-                'https://ubuntu.com/security/notices/USN-5359-2',
-                'https://ubuntu.com/security/notices/USN-5739-1',
-                'https://ubuntu.com/security/notices/USN-6736-1',
-                'https://ubuntu.com/security/notices/USN-6736-2',
-                'https://www.cve.org/CVERecord?id=CVE-2018-25032',
-                'https://www.debian.org/security/2022/dsa-5111',
-                'https://www.openwall.com/lists/oss-security/2022/03/24/1',
-                'https://www.openwall.com/lists/oss-security/2022/03/28/1',
-                'https://www.openwall.com/lists/oss-security/2022/03/28/3',
-                'https://www.oracle.com/security-alerts/cpujul2022.html'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'zlib: A flaw found in zlib when compressing (not decompressing) certain inputs'
-            }
-          ]
-        }
-      ],
-      'summary': {
-        'critical':   1,
-        'high':       11,
-        'low':        0,
-        'medium':     14,
-        'suppressed': 0,
-        'unknown':    0
-      }
-    }
-  },
-  {
-    'id':    'default/9fe8b6190fb94c3690000195e22778342c05c3c11bdc95797223c9ad9341e895',
-    'type':  'storage.sbomscanner.kubewarden.io.vulnerabilityreport',
-    'links': {
-      'patch':  'https://localhost:8005/v1/storage.sbomscanner.kubewarden.io.vulnerabilityreports/default/9fe8b6190fb94c3690000195e22778342c05c3c11bdc95797223c9ad9341e895',
-      'remove': 'https://localhost:8005/v1/storage.sbomscanner.kubewarden.io.vulnerabilityreports/default/9fe8b6190fb94c3690000195e22778342c05c3c11bdc95797223c9ad9341e895',
-      'self':   'https://localhost:8005/v1/storage.sbomscanner.kubewarden.io.vulnerabilityreports/default/9fe8b6190fb94c3690000195e22778342c05c3c11bdc95797223c9ad9341e895',
-      'update': 'https://localhost:8005/v1/storage.sbomscanner.kubewarden.io.vulnerabilityreports/default/9fe8b6190fb94c3690000195e22778342c05c3c11bdc95797223c9ad9341e895',
-      'view':   'https://localhost:8005/apis/storage.sbomscanner.kubewarden.io/v1alpha1/namespaces/default/vulnerabilityreports/9fe8b6190fb94c3690000195e22778342c05c3c11bdc95797223c9ad9341e895'
-    },
-    'apiVersion':    'storage.sbomscanner.kubewarden.io/v1alpha1',
-    'imageMetadata': {
-      'digest':      'sha256:cc8129666469e0512c44e1c1be9710238b05d07e91401753972d2c3ae1855655',
-      'platform':    'linux/arm64/v8',
-      'registry':    'lsong-demo1',
-      'registryURI': 'registry-1.docker.io',
-      'repository':  'library/alpine',
-      'tag':         '3.19.2'
-    },
-    'kind':     'VulnerabilityReport',
-    'metadata': {
-      'creationTimestamp': '2026-01-14T18:51:25Z',
-      'fields':            [
-        '9fe8b6190fb94c3690000195e22778342c05c3c11bdc95797223c9ad9341e895',
-        'registry-1.docker.io/library/alpine:3.19.2',
-        'linux/arm64/v8',
-        '22 (0 suppressed)'
-      ],
-      'labels': {
-        'app.kubernetes.io/managed-by':          'sbomscanner',
-        'app.kubernetes.io/part-of':             'sbomscanner',
-        'sbomscanner.kubewarden.io/scanjob-uid': '445c600a-c4b6-40b3-bd71-f2d2140a37d5'
-      },
-      'name':            '9fe8b6190fb94c3690000195e22778342c05c3c11bdc95797223c9ad9341e895',
-      'namespace':       'default',
-      'ownerReferences': [
-        {
-          'apiVersion':         'storage.sbomscanner.kubewarden.io/v1alpha1',
-          'blockOwnerDeletion': true,
-          'controller':         true,
-          'kind':               'SBOM',
-          'name':               '9fe8b6190fb94c3690000195e22778342c05c3c11bdc95797223c9ad9341e895',
-          'uid':                'a69b34a4-5e66-4911-ace5-191cf853d7bf'
-        }
-      ],
-      'relationships': [
-        {
-          'fromId':   'default/9fe8b6190fb94c3690000195e22778342c05c3c11bdc95797223c9ad9341e895',
-          'fromType': 'storage.sbomscanner.kubewarden.io.sbom',
-          'rel':      'owner',
-          'state':    'active',
-          'message':  'Resource is current'
-        }
-      ],
-      'resourceVersion': '1',
-      'state':           {
-        'error':         false,
-        'message':       'Resource is current',
-        'name':          'active',
-        'transitioning': false
-      },
-      'uid': 'a4483da0-7f4a-4ca8-ab5b-96e8f02788c2'
-    },
-    'report': {
-      'results': [
-        {
-          'class':           'os-pkgs',
-          'target':          '/var/run/worker/trivy.sbom.1803381793.json (alpine 3.19.2)',
-          'type':            'alpine',
-          'vulnerabilities': [
-            {
-              'cve':  'CVE-2024-58251',
-              'cwes': [
-                'CWE-150'
-              ],
-              'description':   'In netstat in BusyBox through 1.37.0, local users can launch of network application with an argv[0] containing an ANSI terminal escape sequence, leading to a denial of service (terminal locked up) when netstat is used by a victim.',
-              'diffID':        'sha256:64038f9df03fdd885a24f303b0aac77808bacd042a2d8d324fcca56a86262d4a',
-              'fixedVersions': [
-                '1.36.1-r21'
-              ],
-              'installedVersion': '1.36.1-r19',
-              'packageName':      'busybox',
-              'purl':             'pkg:apk/alpine/busybox@1.36.1-r19?arch=aarch64&distro=3.19.2',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2025/04/23/6',
-                'https://bugs.busybox.net/show_bug.cgi?id=15922',
-                'https://www.busybox.net',
-                'https://www.busybox.net/downloads/',
-                'https://www.cve.org/CVERecord?id=CVE-2024-58251'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'In netstat in BusyBox through 1.37.0, local users can launch of networ ...'
-            },
-            {
-              'cve':  'CVE-2025-46394',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '3.3',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-451'
-              ],
-              'description':   'In tar in BusyBox through 1.37.0, a TAR archive can have filenames hidden from a listing through the use of terminal escape sequences.',
-              'diffID':        'sha256:64038f9df03fdd885a24f303b0aac77808bacd042a2d8d324fcca56a86262d4a',
-              'fixedVersions': [
-                '1.36.1-r21'
-              ],
-              'installedVersion': '1.36.1-r19',
-              'packageName':      'busybox',
-              'purl':             'pkg:apk/alpine/busybox@1.36.1-r19?arch=aarch64&distro=3.19.2',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2025/04/23/5',
-                'http://www.openwall.com/lists/oss-security/2025/04/24/3',
-                'https://bugs.busybox.net/show_bug.cgi?id=16018',
-                'https://lists.busybox.net/pipermail/busybox/2024-July/090806.html',
-                'https://lists.busybox.net/pipermail/busybox/2024-July/090814.html',
-                'https://www.busybox.net',
-                'https://www.busybox.net/downloads/',
-                'https://www.cve.org/CVERecord?id=CVE-2025-46394',
-                'https://www.openwall.com/lists/oss-security/2025/04/23/1'
-              ],
-              'severity':   'LOW',
-              'suppressed': false,
-              'title':      'In tar in BusyBox through 1.37.0, a TAR archive can have filenames hid ...'
-            },
-            {
-              'cve':  'CVE-2024-58251',
-              'cwes': [
-                'CWE-150'
-              ],
-              'description':   'In netstat in BusyBox through 1.37.0, local users can launch of network application with an argv[0] containing an ANSI terminal escape sequence, leading to a denial of service (terminal locked up) when netstat is used by a victim.',
-              'diffID':        'sha256:64038f9df03fdd885a24f303b0aac77808bacd042a2d8d324fcca56a86262d4a',
-              'fixedVersions': [
-                '1.36.1-r21'
-              ],
-              'installedVersion': '1.36.1-r19',
-              'packageName':      'busybox-binsh',
-              'purl':             'pkg:apk/alpine/busybox-binsh@1.36.1-r19?arch=aarch64&distro=3.19.2',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2025/04/23/6',
-                'https://bugs.busybox.net/show_bug.cgi?id=15922',
-                'https://www.busybox.net',
-                'https://www.busybox.net/downloads/',
-                'https://www.cve.org/CVERecord?id=CVE-2024-58251'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'In netstat in BusyBox through 1.37.0, local users can launch of networ ...'
-            },
-            {
-              'cve':  'CVE-2025-46394',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '3.3',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-451'
-              ],
-              'description':   'In tar in BusyBox through 1.37.0, a TAR archive can have filenames hidden from a listing through the use of terminal escape sequences.',
-              'diffID':        'sha256:64038f9df03fdd885a24f303b0aac77808bacd042a2d8d324fcca56a86262d4a',
-              'fixedVersions': [
-                '1.36.1-r21'
-              ],
-              'installedVersion': '1.36.1-r19',
-              'packageName':      'busybox-binsh',
-              'purl':             'pkg:apk/alpine/busybox-binsh@1.36.1-r19?arch=aarch64&distro=3.19.2',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2025/04/23/5',
-                'http://www.openwall.com/lists/oss-security/2025/04/24/3',
-                'https://bugs.busybox.net/show_bug.cgi?id=16018',
-                'https://lists.busybox.net/pipermail/busybox/2024-July/090806.html',
-                'https://lists.busybox.net/pipermail/busybox/2024-July/090814.html',
-                'https://www.busybox.net',
-                'https://www.busybox.net/downloads/',
-                'https://www.cve.org/CVERecord?id=CVE-2025-46394',
-                'https://www.openwall.com/lists/oss-security/2025/04/23/1'
-              ],
-              'severity':   'LOW',
-              'suppressed': false,
-              'title':      'In tar in BusyBox through 1.37.0, a TAR archive can have filenames hid ...'
-            },
-            {
-              'cve':  'CVE-2024-6119',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-843'
-              ],
-              'description':   "Issue summary: Applications performing certificate name checks (e.g., TLS\nclients checking server certificates) may attempt to read an invalid memory\naddress resulting in abnormal termination of the application process.\n\nImpact summary: Abnormal termination of an application can a cause a denial of\nservice.\n\nApplications performing certificate name checks (e.g., TLS clients checking\nserver certificates) may attempt to read an invalid memory address when\ncomparing the expected name with an `otherName` subject alternative name of an\nX.509 certificate. This may result in an exception that terminates the\napplication program.\n\nNote that basic certificate chain validation (signatures, dates, ...) is not\naffected, the denial of service can occur only when the application also\nspecifies an expected DNS name, Email address or IP address.\n\nTLS servers rarely solicit client certificates, and even when they do, they\ngenerally don't perform a name check against a reference identifier (expected\nidentity), but rather extract the presented identity after checking the\ncertificate chain.  So TLS servers are generally not affected and the severity\nof the issue is Moderate.\n\nThe FIPS modules in 3.3, 3.2, 3.1 and 3.0 are not affected by this issue.",
-              'diffID':        'sha256:64038f9df03fdd885a24f303b0aac77808bacd042a2d8d324fcca56a86262d4a',
-              'fixedVersions': [
-                '3.1.7-r0'
-              ],
-              'installedVersion': '3.1.5-r0',
-              'packageName':      'libcrypto3',
-              'purl':             'pkg:apk/alpine/libcrypto3@3.1.5-r0?arch=aarch64&distro=3.19.2',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2024/09/03/4',
-                'https://access.redhat.com/errata/RHSA-2024:8935',
-                'https://access.redhat.com/security/cve/CVE-2024-6119',
-                'https://bugzilla.redhat.com/2306158',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2306158',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-6119',
-                'https://errata.almalinux.org/9/ALSA-2024-8935.html',
-                'https://errata.rockylinux.org/RLSA-2024:6783',
-                'https://github.com/openssl/openssl/commit/05f360d9e849a1b277db628f1f13083a7f8dd04f',
-                'https://github.com/openssl/openssl/commit/06d1dc3fa96a2ba5a3e22735a033012aadc9f0d6',
-                'https://github.com/openssl/openssl/commit/621f3729831b05ee828a3203eddb621d014ff2b2',
-                'https://github.com/openssl/openssl/commit/7dfcee2cd2a63b2c64b9b4b0850be64cb695b0a0',
-                'https://github.com/openssl/openssl/security/advisories/GHSA-5qrj-vq78-58fj',
-                'https://linux.oracle.com/cve/CVE-2024-6119.html',
-                'https://linux.oracle.com/errata/ELSA-2024-8935.html',
-                'https://lists.freebsd.org/archives/freebsd-security/2024-September/000303.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2024-6119',
-                'https://openssl-library.org/news/secadv/20240903.txt',
-                'https://security.netapp.com/advisory/ntap-20240912-0001/',
-                'https://ubuntu.com/security/notices/USN-6986-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2024-6119'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: Possible denial of service in X.509 name checks'
-            },
-            {
-              'cve':  'CVE-2024-13176',
-              'cvss': {
-                'redhat': {
-                  'v3score':  '4.7',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-385'
-              ],
-              'description':   'Issue summary: A timing side-channel which could potentially allow recovering\nthe private key exists in the ECDSA signature computation.\n\nImpact summary: A timing side-channel in ECDSA signature computations\ncould allow recovering the private key by an attacker. However, measuring\nthe timing would require either local access to the signing application or\na very fast network connection with low latency.\n\nThere is a timing signal of around 300 nanoseconds when the top word of\nthe inverted ECDSA nonce value is zero. This can happen with significant\nprobability only for some of the supported elliptic curves. In particular\nthe NIST P-521 curve is affected. To be able to measure this leak, the attacker\nprocess must either be located in the same physical computer or must\nhave a very fast network connection with low latency. For that reason\nthe severity of this vulnerability is Low.\n\nThe FIPS modules in 3.4, 3.3, 3.2, 3.1 and 3.0 are affected by this issue.',
-              'diffID':        'sha256:64038f9df03fdd885a24f303b0aac77808bacd042a2d8d324fcca56a86262d4a',
-              'fixedVersions': [
-                '3.1.8-r0'
-              ],
-              'installedVersion': '3.1.5-r0',
-              'packageName':      'libcrypto3',
-              'purl':             'pkg:apk/alpine/libcrypto3@3.1.5-r0?arch=aarch64&distro=3.19.2',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2025/01/20/2',
-                'https://access.redhat.com/errata/RHSA-2025:16046',
-                'https://access.redhat.com/security/cve/CVE-2024-13176',
-                'https://bugzilla.redhat.com/2359885',
-                'https://bugzilla.redhat.com/2359888',
-                'https://bugzilla.redhat.com/2359892',
-                'https://bugzilla.redhat.com/2359894',
-                'https://bugzilla.redhat.com/2359895',
-                'https://bugzilla.redhat.com/2359899',
-                'https://bugzilla.redhat.com/2359900',
-                'https://bugzilla.redhat.com/2359902',
-                'https://bugzilla.redhat.com/2359903',
-                'https://bugzilla.redhat.com/2359911',
-                'https://bugzilla.redhat.com/2359918',
-                'https://bugzilla.redhat.com/2359920',
-                'https://bugzilla.redhat.com/2359924',
-                'https://bugzilla.redhat.com/2359928',
-                'https://bugzilla.redhat.com/2359930',
-                'https://bugzilla.redhat.com/2359932',
-                'https://bugzilla.redhat.com/2359934',
-                'https://bugzilla.redhat.com/2359938',
-                'https://bugzilla.redhat.com/2359940',
-                'https://bugzilla.redhat.com/2359943',
-                'https://bugzilla.redhat.com/2359944',
-                'https://bugzilla.redhat.com/2359945',
-                'https://bugzilla.redhat.com/2359947',
-                'https://bugzilla.redhat.com/2359950',
-                'https://bugzilla.redhat.com/2359963',
-                'https://bugzilla.redhat.com/2359964',
-                'https://bugzilla.redhat.com/2359972',
-                'https://bugzilla.redhat.com/2370920',
-                'https://bugzilla.redhat.com/2380264',
-                'https://bugzilla.redhat.com/2380273',
-                'https://bugzilla.redhat.com/2380274',
-                'https://bugzilla.redhat.com/2380278',
-                'https://bugzilla.redhat.com/2380280',
-                'https://bugzilla.redhat.com/2380283',
-                'https://bugzilla.redhat.com/2380284',
-                'https://bugzilla.redhat.com/2380290',
-                'https://bugzilla.redhat.com/2380291',
-                'https://bugzilla.redhat.com/2380295',
-                'https://bugzilla.redhat.com/2380298',
-                'https://bugzilla.redhat.com/2380306',
-                'https://bugzilla.redhat.com/2380308',
-                'https://bugzilla.redhat.com/2380309',
-                'https://bugzilla.redhat.com/2380310',
-                'https://bugzilla.redhat.com/2380312',
-                'https://bugzilla.redhat.com/2380313',
-                'https://bugzilla.redhat.com/2380320',
-                'https://bugzilla.redhat.com/2380321',
-                'https://bugzilla.redhat.com/2380322',
-                'https://bugzilla.redhat.com/2380326',
-                'https://bugzilla.redhat.com/2380327',
-                'https://bugzilla.redhat.com/2380334',
-                'https://bugzilla.redhat.com/2380335',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2338999',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359885',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359888',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359892',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359894',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359895',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359899',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359900',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359902',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359903',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359911',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359918',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359920',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359924',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359928',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359930',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359932',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359934',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359938',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359940',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359943',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359944',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359945',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359947',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359950',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359963',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359964',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359972',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2370920',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380264',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380273',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380274',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380278',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380280',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380283',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380284',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380290',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380291',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380295',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380298',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380306',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380308',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380309',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380310',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380312',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380313',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380320',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380321',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380322',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380326',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380327',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380334',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380335',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-13176',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21574',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21575',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21577',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21579',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21580',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21581',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21584',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21585',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21588',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30681',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30682',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30683',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30684',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30685',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30687',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30688',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30689',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30693',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30695',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30696',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30699',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30703',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30704',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30705',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30715',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30721',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30722',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50077',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50078',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50079',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50080',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50081',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50082',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50083',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50084',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50085',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50086',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50087',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50088',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50091',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50092',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50093',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50094',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50096',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50097',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50098',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50099',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50100',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50101',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50102',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50104',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-5399',
-                'https://errata.almalinux.org/9/ALSA-2025-16046.html',
-                'https://errata.rockylinux.org/RLSA-2025:15699',
-                'https://github.com/openssl/openssl/commit/07272b05b04836a762b4baa874958af51d513844',
-                'https://github.com/openssl/openssl/commit/2af62e74fb59bc469506bc37eb2990ea408d9467',
-                'https://github.com/openssl/openssl/commit/392dcb336405a0c94486aa6655057f59fd3a0902',
-                'https://github.com/openssl/openssl/commit/4b1cb94a734a7d4ec363ac0a215a25c181e11f65',
-                'https://github.com/openssl/openssl/commit/77c608f4c8857e63e98e66444e2e761c9627916f',
-                'https://github.openssl.org/openssl/extended-releases/commit/0d5fd1ab987f7571e2c955d8d8b638fc0fb54ded',
-                'https://github.openssl.org/openssl/extended-releases/commit/a2639000db19878d5d89586ae7b725080592ae86',
-                'https://linux.oracle.com/cve/CVE-2024-13176.html',
-                'https://linux.oracle.com/errata/ELSA-2025-16046.html',
-                'https://lists.debian.org/debian-lts-announce/2025/05/msg00028.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2024-13176',
-                'https://openssl-library.org/news/secadv/20250120.txt',
-                'https://security.netapp.com/advisory/ntap-20250124-0005/',
-                'https://security.netapp.com/advisory/ntap-20250418-0010/',
-                'https://security.netapp.com/advisory/ntap-20250502-0006/',
-                'https://ubuntu.com/security/notices/USN-7264-1',
-                'https://ubuntu.com/security/notices/USN-7278-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2024-13176',
-                'https://www.oracle.com/security-alerts/cpuapr2025.html#AppendixMSQL'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: Timing side-channel in ECDSA signature computation'
-            },
-            {
-              'cve':  'CVE-2024-4741',
-              'cvss': {
-                'redhat': {
-                  'v3score':  '5.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   'Issue summary: Calling the OpenSSL API function SSL_free_buffers may cause\nmemory to be accessed that was previously freed in some situations\n\nImpact summary: A use after free can have a range of potential consequences such\nas the corruption of valid data, crashes or execution of arbitrary code.\nHowever, only applications that directly call the SSL_free_buffers function are\naffected by this issue. Applications that do not call this function are not\nvulnerable. Our investigations indicate that this function is rarely used by\napplications.\n\nThe SSL_free_buffers function is used to free the internal OpenSSL buffer used\nwhen processing an incoming record from the network. The call is only expected\nto succeed if the buffer is not currently in use. However, two scenarios have\nbeen identified where the buffer is freed even when still in use.\n\nThe first scenario occurs where a record header has been received from the\nnetwork and processed by OpenSSL, but the full record body has not yet arrived.\nIn this case calling SSL_free_buffers will succeed even though a record has only\nbeen partially processed and the buffer is still in use.\n\nThe second scenario occurs where a full record containing application data has\nbeen received and processed by OpenSSL but the application has only read part of\nthis data. Again a call to SSL_free_buffers will succeed even though the buffer\nis still in use.\n\nWhile these scenarios could occur accidentally during normal operation a\nmalicious attacker could attempt to engineer a stituation where this occurs.\nWe are not aware of this issue being actively exploited.\n\nThe FIPS modules in 3.3, 3.2, 3.1 and 3.0 are not affected by this issue.',
-              'diffID':        'sha256:64038f9df03fdd885a24f303b0aac77808bacd042a2d8d324fcca56a86262d4a',
-              'fixedVersions': [
-                '3.1.6-r0'
-              ],
-              'installedVersion': '3.1.5-r0',
-              'packageName':      'libcrypto3',
-              'purl':             'pkg:apk/alpine/libcrypto3@3.1.5-r0?arch=aarch64&distro=3.19.2',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2024:9333',
-                'https://access.redhat.com/security/cve/CVE-2024-4741',
-                'https://bugzilla.redhat.com/2274020',
-                'https://bugzilla.redhat.com/2281029',
-                'https://bugzilla.redhat.com/2283757',
-                'https://bugzilla.redhat.com/2294581',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2274020',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2281029',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2283757',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2294581',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-2511',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-4603',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-4741',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-5535',
-                'https://errata.almalinux.org/9/ALSA-2024-9333.html',
-                'https://errata.rockylinux.org/RLSA-2024:9333',
-                'https://github.com/openssl/openssl/commit/704f725b96aa373ee45ecfb23f6abfe8be8d9177',
-                'https://github.com/openssl/openssl/commit/b3f0eb0a295f58f16ba43ba99dad70d4ee5c437d',
-                'https://github.com/openssl/openssl/commit/c88c3de51020c37e8706bf7a682a162593053aac',
-                'https://github.com/openssl/openssl/commit/e5093133c35ca82874ad83697af76f4b0f7e3bd8',
-                'https://github.openssl.org/openssl/extended-releases/commit/f7a045f3143fc6da2ee66bf52d8df04829590dd4',
-                'https://linux.oracle.com/cve/CVE-2024-4741.html',
-                'https://linux.oracle.com/errata/ELSA-2024-9333.html',
-                'https://lists.debian.org/debian-lts-announce/2024/10/msg00033.html',
-                'https://lists.debian.org/debian-lts-announce/2024/11/msg00000.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2024-4741',
-                'https://security.netapp.com/advisory/ntap-20240621-0004/',
-                'https://ubuntu.com/security/notices/USN-6937-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2024-4741',
-                'https://www.openssl.org/news/secadv/20240528.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: Use After Free with SSL_free_buffers'
-            },
-            {
-              'cve':  'CVE-2024-5535',
-              'cvss': {
-                'redhat': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-125'
-              ],
-              'description':   'Issue summary: Calling the OpenSSL API function SSL_select_next_proto with an\nempty supported client protocols buffer may cause a crash or memory contents to\nbe sent to the peer.\n\nImpact summary: A buffer overread can have a range of potential consequences\nsuch as unexpected application beahviour or a crash. In particular this issue\ncould result in up to 255 bytes of arbitrary private data from memory being sent\nto the peer leading to a loss of confidentiality. However, only applications\nthat directly call the SSL_select_next_proto function with a 0 length list of\nsupported client protocols are affected by this issue. This would normally never\nbe a valid scenario and is typically not under attacker control but may occur by\naccident in the case of a configuration or programming error in the calling\napplication.\n\nThe OpenSSL API function SSL_select_next_proto is typically used by TLS\napplications that support ALPN (Application Layer Protocol Negotiation) or NPN\n(Next Protocol Negotiation). NPN is older, was never standardised and\nis deprecated in favour of ALPN. We believe that ALPN is significantly more\nwidely deployed than NPN. The SSL_select_next_proto function accepts a list of\nprotocols from the server and a list of protocols from the client and returns\nthe first protocol that appears in the server list that also appears in the\nclient list. In the case of no overlap between the two lists it returns the\nfirst item in the client list. In either case it will signal whether an overlap\nbetween the two lists was found. In the case where SSL_select_next_proto is\ncalled with a zero length client list it fails to notice this condition and\nreturns the memory immediately following the client list pointer (and reports\nthat there was no overlap in the lists).\n\nThis function is typically called from a server side application callback for\nALPN or a client side application callback for NPN. In the case of ALPN the list\nof protocols supplied by the client is guaranteed by libssl to never be zero in\nlength. The list of server protocols comes from the application and should never\nnormally be expected to be of zero length. In this case if the\nSSL_select_next_proto function has been called as expected (with the list\nsupplied by the client passed in the client/client_len parameters), then the\napplication will not be vulnerable to this issue. If the application has\naccidentally been configured with a zero length server list, and has\naccidentally passed that zero length server list in the client/client_len\nparameters, and has additionally failed to correctly handle a "no overlap"\nresponse (which would normally result in a handshake failure in ALPN) then it\nwill be vulnerable to this problem.\n\nIn the case of NPN, the protocol permits the client to opportunistically select\na protocol when there is no overlap. OpenSSL returns the first client protocol\nin the no overlap case in support of this. The list of client protocols comes\nfrom the application and should never normally be expected to be of zero length.\nHowever if the SSL_select_next_proto function is accidentally called with a\nclient_len of 0 then an invalid memory pointer will be returned instead. If the\napplication uses this output as the opportunistic protocol then the loss of\nconfidentiality will occur.\n\nThis issue has been assessed as Low severity because applications are most\nlikely to be vulnerable if they are using NPN instead of ALPN - but NPN is not\nwidely used. It also requires an application configuration or programming error.\nFinally, this issue would not typically be under attacker control making active\nexploitation unlikely.\n\nThe FIPS modules in 3.3, 3.2, 3.1 and 3.0 are not affected by this issue.\n\nDue to the low severity of this issue we are not issuing new releases of\nOpenSSL at this time. The fix will be included in the next releases when they\nbecome available.',
-              'diffID':        'sha256:64038f9df03fdd885a24f303b0aac77808bacd042a2d8d324fcca56a86262d4a',
-              'fixedVersions': [
-                '3.1.6-r0'
-              ],
-              'installedVersion': '3.1.5-r0',
-              'packageName':      'libcrypto3',
-              'purl':             'pkg:apk/alpine/libcrypto3@3.1.5-r0?arch=aarch64&distro=3.19.2',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2024/06/27/1',
-                'http://www.openwall.com/lists/oss-security/2024/06/28/4',
-                'http://www.openwall.com/lists/oss-security/2024/08/15/1',
-                'https://access.redhat.com/errata/RHSA-2025:1671',
-                'https://access.redhat.com/security/cve/CVE-2024-5535',
-                'https://bugzilla.redhat.com/2294581',
-                'https://bugzilla.redhat.com/2294676',
-                'https://bugzilla.redhat.com/2301888',
-                'https://bugzilla.redhat.com/2318857',
-                'https://bugzilla.redhat.com/2318858',
-                'https://bugzilla.redhat.com/2318870',
-                'https://bugzilla.redhat.com/2318873',
-                'https://bugzilla.redhat.com/2318874',
-                'https://bugzilla.redhat.com/2318876',
-                'https://bugzilla.redhat.com/2318882',
-                'https://bugzilla.redhat.com/2318883',
-                'https://bugzilla.redhat.com/2318884',
-                'https://bugzilla.redhat.com/2318885',
-                'https://bugzilla.redhat.com/2318886',
-                'https://bugzilla.redhat.com/2318897',
-                'https://bugzilla.redhat.com/2318900',
-                'https://bugzilla.redhat.com/2318905',
-                'https://bugzilla.redhat.com/2318914',
-                'https://bugzilla.redhat.com/2318922',
-                'https://bugzilla.redhat.com/2318923',
-                'https://bugzilla.redhat.com/2318925',
-                'https://bugzilla.redhat.com/2318926',
-                'https://bugzilla.redhat.com/2318927',
-                'https://bugzilla.redhat.com/2331191',
-                'https://bugzilla.redhat.com/2339218',
-                'https://bugzilla.redhat.com/2339220',
-                'https://bugzilla.redhat.com/2339221',
-                'https://bugzilla.redhat.com/2339226',
-                'https://bugzilla.redhat.com/2339231',
-                'https://bugzilla.redhat.com/2339236',
-                'https://bugzilla.redhat.com/2339238',
-                'https://bugzilla.redhat.com/2339243',
-                'https://bugzilla.redhat.com/2339247',
-                'https://bugzilla.redhat.com/2339252',
-                'https://bugzilla.redhat.com/2339259',
-                'https://bugzilla.redhat.com/2339266',
-                'https://bugzilla.redhat.com/2339270',
-                'https://bugzilla.redhat.com/2339271',
-                'https://bugzilla.redhat.com/2339275',
-                'https://bugzilla.redhat.com/2339277',
-                'https://bugzilla.redhat.com/2339281',
-                'https://bugzilla.redhat.com/2339284',
-                'https://bugzilla.redhat.com/2339291',
-                'https://bugzilla.redhat.com/2339293',
-                'https://bugzilla.redhat.com/2339295',
-                'https://bugzilla.redhat.com/2339299',
-                'https://bugzilla.redhat.com/2339300',
-                'https://bugzilla.redhat.com/2339304',
-                'https://bugzilla.redhat.com/2339305',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2274020',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2281029',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2283757',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2294581',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-2511',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-4603',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-4741',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-5535',
-                'https://errata.almalinux.org/9/ALSA-2025-1671.html',
-                'https://errata.rockylinux.org/RLSA-2024:9333',
-                'https://github.com/openssl/openssl/commit/4ada436a1946cbb24db5ab4ca082b69c1bc10f37',
-                'https://github.com/openssl/openssl/commit/99fb785a5f85315b95288921a321a935ea29a51e',
-                'https://github.com/openssl/openssl/commit/cf6f91f6121f4db167405db2f0de410a456f260c',
-                'https://github.com/openssl/openssl/commit/e86ac436f0bd54d4517745483e2315650fae7b2c',
-                'https://github.openssl.org/openssl/extended-releases/commit/9947251413065a05189a63c9b7a6c1d4e224c21c',
-                'https://github.openssl.org/openssl/extended-releases/commit/b78ec0824da857223486660177d3b1f255c65d87',
-                'https://linux.oracle.com/cve/CVE-2024-5535.html',
-                'https://linux.oracle.com/errata/ELSA-2025-1673.html',
-                'https://lists.debian.org/debian-lts-announce/2024/10/msg00033.html',
-                'https://lists.debian.org/debian-lts-announce/2024/11/msg00000.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2024-5535',
-                'https://openssl.org/news/secadv/20240627.txt',
-                'https://security.netapp.com/advisory/ntap-20240712-0005/',
-                'https://security.netapp.com/advisory/ntap-20241025-0006/',
-                'https://security.netapp.com/advisory/ntap-20241025-0010/',
-                'https://ubuntu.com/security/notices/USN-6937-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2024-5535',
-                'https://www.openssl.org/news/secadv/20240627.txt',
-                'https://www.oracle.com/security-alerts/cpuoct2024.html#AppendixMSQL'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: SSL_select_next_proto buffer overread'
-            },
-            {
-              'cve':  'CVE-2025-9230',
-              'cvss': {
-                'redhat': {
-                  'v3score':  '5.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L'
-                }
-              },
-              'cwes': [
-                'CWE-125',
-                'CWE-787'
-              ],
-              'description':   'Issue summary: An application trying to decrypt CMS messages encrypted using\npassword based encryption can trigger an out-of-bounds read and write.\n\nImpact summary: This out-of-bounds read may trigger a crash which leads to\nDenial of Service for an application. The out-of-bounds write can cause\na memory corruption which can have various consequences including\na Denial of Service or Execution of attacker-supplied code.\n\nAlthough the consequences of a successful exploit of this vulnerability\ncould be severe, the probability that the attacker would be able to\nperform it is low. Besides, password based (PWRI) encryption support in CMS\nmessages is very rarely used. For that reason the issue was assessed as\nModerate severity according to our Security Policy.\n\nThe FIPS modules in 3.5, 3.4, 3.3, 3.2, 3.1 and 3.0 are not affected by this\nissue, as the CMS implementation is outside the OpenSSL FIPS module\nboundary.',
-              'diffID':        'sha256:64038f9df03fdd885a24f303b0aac77808bacd042a2d8d324fcca56a86262d4a',
-              'fixedVersions': [
-                '3.1.8-r1'
-              ],
-              'installedVersion': '3.1.5-r0',
-              'packageName':      'libcrypto3',
-              'purl':             'pkg:apk/alpine/libcrypto3@3.1.5-r0?arch=aarch64&distro=3.19.2',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2025/09/30/5',
-                'https://access.redhat.com/errata/RHSA-2025:21255',
-                'https://access.redhat.com/security/cve/CVE-2025-9230',
-                'https://bugzilla.redhat.com/2396054',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2396054',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-9230',
-                'https://errata.almalinux.org/9/ALSA-2025-21255.html',
-                'https://errata.rockylinux.org/RLSA-2025:21255',
-                'https://github.com/openssl/openssl/commit/5965ea5dd6960f36d8b7f74f8eac67a8eb8f2b45',
-                'https://github.com/openssl/openssl/commit/9e91358f365dee6c446dcdcdb01c04d2743fd280',
-                'https://github.com/openssl/openssl/commit/a79c4ce559c6a3a8fd4109e9f33c1185d5bf2def',
-                'https://github.com/openssl/openssl/commit/b5282d677551afda7d20e9c00e09561b547b2dfd',
-                'https://github.com/openssl/openssl/commit/bae259a211ada6315dc50900686daaaaaa55f482',
-                'https://github.openssl.org/openssl/extended-releases/commit/c2b96348bfa662f25f4fabf81958ae822063dae3',
-                'https://github.openssl.org/openssl/extended-releases/commit/dfbaf161d8dafc1132dd88cd48ad990ed9b4c8ba',
-                'https://linux.oracle.com/cve/CVE-2025-9230.html',
-                'https://linux.oracle.com/errata/ELSA-2026-0337.html',
-                'https://lists.debian.org/debian-lts-announce/2025/10/msg00001.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2025-9230',
-                'https://openssl-library.org/news/secadv/20250930.txt',
-                'https://ubuntu.com/security/notices/USN-7786-1',
-                'https://www.cve.org/CVERecord?id=CVE-2025-9230'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: Out-of-bounds read & write in RFC 3211 KEK Unwrap'
-            },
-            {
-              'cve':  'CVE-2024-9143',
-              'cvss': {
-                'redhat': {
-                  'v3score':  '3.7',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L'
-                }
-              },
-              'cwes': [
-                'CWE-125',
-                'CWE-787'
-              ],
-              'description':   "Issue summary: Use of the low-level GF(2^m) elliptic curve APIs with untrusted\nexplicit values for the field polynomial can lead to out-of-bounds memory reads\nor writes.\n\nImpact summary: Out of bound memory writes can lead to an application crash or\neven a possibility of a remote code execution, however, in all the protocols\ninvolving Elliptic Curve Cryptography that we're aware of, either only \"named\ncurves\" are supported, or, if explicit curve parameters are supported, they\nspecify an X9.62 encoding of binary (GF(2^m)) curves that can't represent\nproblematic input values. Thus the likelihood of existence of a vulnerable\napplication is low.\n\nIn particular, the X9.62 encoding is used for ECC keys in X.509 certificates,\nso problematic inputs cannot occur in the context of processing X.509\ncertificates.  Any problematic use-cases would have to be using an \"exotic\"\ncurve encoding.\n\nThe affected APIs include: EC_GROUP_new_curve_GF2m(), EC_GROUP_new_from_params(),\nand various supporting BN_GF2m_*() functions.\n\nApplications working with \"exotic\" explicit binary (GF(2^m)) curve parameters,\nthat make it possible to represent invalid field polynomials with a zero\nconstant term, via the above or similar APIs, may terminate abruptly as a\nresult of reading or writing outside of array bounds.  Remote code execution\ncannot easily be ruled out.\n\nThe FIPS modules in 3.3, 3.2, 3.1 and 3.0 are not affected by this issue.",
-              'diffID':        'sha256:64038f9df03fdd885a24f303b0aac77808bacd042a2d8d324fcca56a86262d4a',
-              'fixedVersions': [
-                '3.1.7-r1'
-              ],
-              'installedVersion': '3.1.5-r0',
-              'packageName':      'libcrypto3',
-              'purl':             'pkg:apk/alpine/libcrypto3@3.1.5-r0?arch=aarch64&distro=3.19.2',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2024/10/16/1',
-                'http://www.openwall.com/lists/oss-security/2024/10/23/1',
-                'http://www.openwall.com/lists/oss-security/2024/10/24/1',
-                'https://access.redhat.com/security/cve/CVE-2024-9143',
-                'https://github.com/openssl/openssl/commit/72ae83ad214d2eef262461365a1975707f862712',
-                'https://github.com/openssl/openssl/commit/bc7e04d7c8d509fb78fc0e285aa948fb0da04700',
-                'https://github.com/openssl/openssl/commit/c0d3e4d32d2805f49bec30547f225bc4d092e1f4',
-                'https://github.com/openssl/openssl/commit/fdf6723362ca51bd883295efe206cb5b1cfa5154',
-                'https://github.openssl.org/openssl/extended-releases/commit/8efc0cbaa8ebba8e116f7b81a876a4123594d86a',
-                'https://github.openssl.org/openssl/extended-releases/commit/9d576994cec2b7aa37a91740ea7e680810957e41',
-                'https://lists.debian.org/debian-lts-announce/2024/10/msg00033.html',
-                'https://lists.debian.org/debian-lts-announce/2024/11/msg00000.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2024-9143',
-                'https://openssl-library.org/news/secadv/20241016.txt',
-                'https://security.netapp.com/advisory/ntap-20241101-0001/',
-                'https://ubuntu.com/security/notices/USN-7264-1',
-                'https://ubuntu.com/security/notices/USN-7278-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2024-9143'
-              ],
-              'severity':   'LOW',
-              'suppressed': false,
-              'title':      'openssl: Low-level invalid GF(2^m) parameters lead to OOB memory access'
-            },
-            {
-              'cve':  'CVE-2025-9232',
-              'cvss': {
-                'redhat': {
-                  'v3score':  '3.1',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L'
-                }
-              },
-              'cwes': [
-                'CWE-125'
-              ],
-              'description':   "Issue summary: An application using the OpenSSL HTTP client API functions may\ntrigger an out-of-bounds read if the 'no_proxy' environment variable is set and\nthe host portion of the authority component of the HTTP URL is an IPv6 address.\n\nImpact summary: An out-of-bounds read can trigger a crash which leads to\nDenial of Service for an application.\n\nThe OpenSSL HTTP client API functions can be used directly by applications\nbut they are also used by the OCSP client functions and CMP (Certificate\nManagement Protocol) client implementation in OpenSSL. However the URLs used\nby these implementations are unlikely to be controlled by an attacker.\n\nIn this vulnerable code the out of bounds read can only trigger a crash.\nFurthermore the vulnerability requires an attacker-controlled URL to be\npassed from an application to the OpenSSL function and the user has to have\na 'no_proxy' environment variable set. For the aforementioned reasons the\nissue was assessed as Low severity.\n\nThe vulnerable code was introduced in the following patch releases:\n3.0.16, 3.1.8, 3.2.4, 3.3.3, 3.4.0 and 3.5.0.\n\nThe FIPS modules in 3.5, 3.4, 3.3, 3.2, 3.1 and 3.0 are not affected by this\nissue, as the HTTP client implementation is outside the OpenSSL FIPS module\nboundary.",
-              'diffID':        'sha256:64038f9df03fdd885a24f303b0aac77808bacd042a2d8d324fcca56a86262d4a',
-              'fixedVersions': [
-                '3.1.8-r1'
-              ],
-              'installedVersion': '3.1.5-r0',
-              'packageName':      'libcrypto3',
-              'purl':             'pkg:apk/alpine/libcrypto3@3.1.5-r0?arch=aarch64&distro=3.19.2',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2025/09/30/5',
-                'https://access.redhat.com/security/cve/CVE-2025-9232',
-                'https://github.com/openssl/openssl/commit/2b4ec20e47959170422922eaff25346d362dcb35',
-                'https://github.com/openssl/openssl/commit/654dc11d23468a74fc8ea4672b702dd3feb7be4b',
-                'https://github.com/openssl/openssl/commit/7cf21a30513c9e43c4bc3836c237cf086e194af3',
-                'https://github.com/openssl/openssl/commit/89e790ac431125a4849992858490bed6b225eadf',
-                'https://github.com/openssl/openssl/commit/bbf38c034cdabd0a13330abcc4855c866f53d2e0',
-                'https://nvd.nist.gov/vuln/detail/CVE-2025-9232',
-                'https://openssl-library.org/news/secadv/20250930.txt',
-                'https://ubuntu.com/security/notices/USN-7786-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2025-9232'
-              ],
-              'severity':   'LOW',
-              'suppressed': false,
-              'title':      'openssl: Out-of-bounds read in HTTP client no_proxy handling'
-            },
-            {
-              'cve':  'CVE-2024-6119',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-843'
-              ],
-              'description':   "Issue summary: Applications performing certificate name checks (e.g., TLS\nclients checking server certificates) may attempt to read an invalid memory\naddress resulting in abnormal termination of the application process.\n\nImpact summary: Abnormal termination of an application can a cause a denial of\nservice.\n\nApplications performing certificate name checks (e.g., TLS clients checking\nserver certificates) may attempt to read an invalid memory address when\ncomparing the expected name with an `otherName` subject alternative name of an\nX.509 certificate. This may result in an exception that terminates the\napplication program.\n\nNote that basic certificate chain validation (signatures, dates, ...) is not\naffected, the denial of service can occur only when the application also\nspecifies an expected DNS name, Email address or IP address.\n\nTLS servers rarely solicit client certificates, and even when they do, they\ngenerally don't perform a name check against a reference identifier (expected\nidentity), but rather extract the presented identity after checking the\ncertificate chain.  So TLS servers are generally not affected and the severity\nof the issue is Moderate.\n\nThe FIPS modules in 3.3, 3.2, 3.1 and 3.0 are not affected by this issue.",
-              'diffID':        'sha256:64038f9df03fdd885a24f303b0aac77808bacd042a2d8d324fcca56a86262d4a',
-              'fixedVersions': [
-                '3.1.7-r0'
-              ],
-              'installedVersion': '3.1.5-r0',
-              'packageName':      'libssl3',
-              'purl':             'pkg:apk/alpine/libssl3@3.1.5-r0?arch=aarch64&distro=3.19.2',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2024/09/03/4',
-                'https://access.redhat.com/errata/RHSA-2024:8935',
-                'https://access.redhat.com/security/cve/CVE-2024-6119',
-                'https://bugzilla.redhat.com/2306158',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2306158',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-6119',
-                'https://errata.almalinux.org/9/ALSA-2024-8935.html',
-                'https://errata.rockylinux.org/RLSA-2024:6783',
-                'https://github.com/openssl/openssl/commit/05f360d9e849a1b277db628f1f13083a7f8dd04f',
-                'https://github.com/openssl/openssl/commit/06d1dc3fa96a2ba5a3e22735a033012aadc9f0d6',
-                'https://github.com/openssl/openssl/commit/621f3729831b05ee828a3203eddb621d014ff2b2',
-                'https://github.com/openssl/openssl/commit/7dfcee2cd2a63b2c64b9b4b0850be64cb695b0a0',
-                'https://github.com/openssl/openssl/security/advisories/GHSA-5qrj-vq78-58fj',
-                'https://linux.oracle.com/cve/CVE-2024-6119.html',
-                'https://linux.oracle.com/errata/ELSA-2024-8935.html',
-                'https://lists.freebsd.org/archives/freebsd-security/2024-September/000303.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2024-6119',
-                'https://openssl-library.org/news/secadv/20240903.txt',
-                'https://security.netapp.com/advisory/ntap-20240912-0001/',
-                'https://ubuntu.com/security/notices/USN-6986-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2024-6119'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: Possible denial of service in X.509 name checks'
-            },
-            {
-              'cve':  'CVE-2024-13176',
-              'cvss': {
-                'redhat': {
-                  'v3score':  '4.7',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-385'
-              ],
-              'description':   'Issue summary: A timing side-channel which could potentially allow recovering\nthe private key exists in the ECDSA signature computation.\n\nImpact summary: A timing side-channel in ECDSA signature computations\ncould allow recovering the private key by an attacker. However, measuring\nthe timing would require either local access to the signing application or\na very fast network connection with low latency.\n\nThere is a timing signal of around 300 nanoseconds when the top word of\nthe inverted ECDSA nonce value is zero. This can happen with significant\nprobability only for some of the supported elliptic curves. In particular\nthe NIST P-521 curve is affected. To be able to measure this leak, the attacker\nprocess must either be located in the same physical computer or must\nhave a very fast network connection with low latency. For that reason\nthe severity of this vulnerability is Low.\n\nThe FIPS modules in 3.4, 3.3, 3.2, 3.1 and 3.0 are affected by this issue.',
-              'diffID':        'sha256:64038f9df03fdd885a24f303b0aac77808bacd042a2d8d324fcca56a86262d4a',
-              'fixedVersions': [
-                '3.1.8-r0'
-              ],
-              'installedVersion': '3.1.5-r0',
-              'packageName':      'libssl3',
-              'purl':             'pkg:apk/alpine/libssl3@3.1.5-r0?arch=aarch64&distro=3.19.2',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2025/01/20/2',
-                'https://access.redhat.com/errata/RHSA-2025:16046',
-                'https://access.redhat.com/security/cve/CVE-2024-13176',
-                'https://bugzilla.redhat.com/2359885',
-                'https://bugzilla.redhat.com/2359888',
-                'https://bugzilla.redhat.com/2359892',
-                'https://bugzilla.redhat.com/2359894',
-                'https://bugzilla.redhat.com/2359895',
-                'https://bugzilla.redhat.com/2359899',
-                'https://bugzilla.redhat.com/2359900',
-                'https://bugzilla.redhat.com/2359902',
-                'https://bugzilla.redhat.com/2359903',
-                'https://bugzilla.redhat.com/2359911',
-                'https://bugzilla.redhat.com/2359918',
-                'https://bugzilla.redhat.com/2359920',
-                'https://bugzilla.redhat.com/2359924',
-                'https://bugzilla.redhat.com/2359928',
-                'https://bugzilla.redhat.com/2359930',
-                'https://bugzilla.redhat.com/2359932',
-                'https://bugzilla.redhat.com/2359934',
-                'https://bugzilla.redhat.com/2359938',
-                'https://bugzilla.redhat.com/2359940',
-                'https://bugzilla.redhat.com/2359943',
-                'https://bugzilla.redhat.com/2359944',
-                'https://bugzilla.redhat.com/2359945',
-                'https://bugzilla.redhat.com/2359947',
-                'https://bugzilla.redhat.com/2359950',
-                'https://bugzilla.redhat.com/2359963',
-                'https://bugzilla.redhat.com/2359964',
-                'https://bugzilla.redhat.com/2359972',
-                'https://bugzilla.redhat.com/2370920',
-                'https://bugzilla.redhat.com/2380264',
-                'https://bugzilla.redhat.com/2380273',
-                'https://bugzilla.redhat.com/2380274',
-                'https://bugzilla.redhat.com/2380278',
-                'https://bugzilla.redhat.com/2380280',
-                'https://bugzilla.redhat.com/2380283',
-                'https://bugzilla.redhat.com/2380284',
-                'https://bugzilla.redhat.com/2380290',
-                'https://bugzilla.redhat.com/2380291',
-                'https://bugzilla.redhat.com/2380295',
-                'https://bugzilla.redhat.com/2380298',
-                'https://bugzilla.redhat.com/2380306',
-                'https://bugzilla.redhat.com/2380308',
-                'https://bugzilla.redhat.com/2380309',
-                'https://bugzilla.redhat.com/2380310',
-                'https://bugzilla.redhat.com/2380312',
-                'https://bugzilla.redhat.com/2380313',
-                'https://bugzilla.redhat.com/2380320',
-                'https://bugzilla.redhat.com/2380321',
-                'https://bugzilla.redhat.com/2380322',
-                'https://bugzilla.redhat.com/2380326',
-                'https://bugzilla.redhat.com/2380327',
-                'https://bugzilla.redhat.com/2380334',
-                'https://bugzilla.redhat.com/2380335',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2338999',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359885',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359888',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359892',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359894',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359895',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359899',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359900',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359902',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359903',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359911',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359918',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359920',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359924',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359928',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359930',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359932',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359934',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359938',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359940',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359943',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359944',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359945',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359947',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359950',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359963',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359964',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359972',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2370920',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380264',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380273',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380274',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380278',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380280',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380283',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380284',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380290',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380291',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380295',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380298',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380306',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380308',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380309',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380310',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380312',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380313',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380320',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380321',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380322',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380326',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380327',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380334',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380335',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-13176',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21574',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21575',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21577',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21579',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21580',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21581',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21584',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21585',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21588',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30681',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30682',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30683',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30684',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30685',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30687',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30688',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30689',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30693',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30695',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30696',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30699',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30703',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30704',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30705',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30715',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30721',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30722',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50077',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50078',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50079',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50080',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50081',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50082',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50083',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50084',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50085',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50086',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50087',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50088',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50091',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50092',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50093',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50094',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50096',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50097',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50098',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50099',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50100',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50101',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50102',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50104',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-5399',
-                'https://errata.almalinux.org/9/ALSA-2025-16046.html',
-                'https://errata.rockylinux.org/RLSA-2025:15699',
-                'https://github.com/openssl/openssl/commit/07272b05b04836a762b4baa874958af51d513844',
-                'https://github.com/openssl/openssl/commit/2af62e74fb59bc469506bc37eb2990ea408d9467',
-                'https://github.com/openssl/openssl/commit/392dcb336405a0c94486aa6655057f59fd3a0902',
-                'https://github.com/openssl/openssl/commit/4b1cb94a734a7d4ec363ac0a215a25c181e11f65',
-                'https://github.com/openssl/openssl/commit/77c608f4c8857e63e98e66444e2e761c9627916f',
-                'https://github.openssl.org/openssl/extended-releases/commit/0d5fd1ab987f7571e2c955d8d8b638fc0fb54ded',
-                'https://github.openssl.org/openssl/extended-releases/commit/a2639000db19878d5d89586ae7b725080592ae86',
-                'https://linux.oracle.com/cve/CVE-2024-13176.html',
-                'https://linux.oracle.com/errata/ELSA-2025-16046.html',
-                'https://lists.debian.org/debian-lts-announce/2025/05/msg00028.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2024-13176',
-                'https://openssl-library.org/news/secadv/20250120.txt',
-                'https://security.netapp.com/advisory/ntap-20250124-0005/',
-                'https://security.netapp.com/advisory/ntap-20250418-0010/',
-                'https://security.netapp.com/advisory/ntap-20250502-0006/',
-                'https://ubuntu.com/security/notices/USN-7264-1',
-                'https://ubuntu.com/security/notices/USN-7278-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2024-13176',
-                'https://www.oracle.com/security-alerts/cpuapr2025.html#AppendixMSQL'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: Timing side-channel in ECDSA signature computation'
-            },
-            {
-              'cve':  'CVE-2024-4741',
-              'cvss': {
-                'redhat': {
-                  'v3score':  '5.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   'Issue summary: Calling the OpenSSL API function SSL_free_buffers may cause\nmemory to be accessed that was previously freed in some situations\n\nImpact summary: A use after free can have a range of potential consequences such\nas the corruption of valid data, crashes or execution of arbitrary code.\nHowever, only applications that directly call the SSL_free_buffers function are\naffected by this issue. Applications that do not call this function are not\nvulnerable. Our investigations indicate that this function is rarely used by\napplications.\n\nThe SSL_free_buffers function is used to free the internal OpenSSL buffer used\nwhen processing an incoming record from the network. The call is only expected\nto succeed if the buffer is not currently in use. However, two scenarios have\nbeen identified where the buffer is freed even when still in use.\n\nThe first scenario occurs where a record header has been received from the\nnetwork and processed by OpenSSL, but the full record body has not yet arrived.\nIn this case calling SSL_free_buffers will succeed even though a record has only\nbeen partially processed and the buffer is still in use.\n\nThe second scenario occurs where a full record containing application data has\nbeen received and processed by OpenSSL but the application has only read part of\nthis data. Again a call to SSL_free_buffers will succeed even though the buffer\nis still in use.\n\nWhile these scenarios could occur accidentally during normal operation a\nmalicious attacker could attempt to engineer a stituation where this occurs.\nWe are not aware of this issue being actively exploited.\n\nThe FIPS modules in 3.3, 3.2, 3.1 and 3.0 are not affected by this issue.',
-              'diffID':        'sha256:64038f9df03fdd885a24f303b0aac77808bacd042a2d8d324fcca56a86262d4a',
-              'fixedVersions': [
-                '3.1.6-r0'
-              ],
-              'installedVersion': '3.1.5-r0',
-              'packageName':      'libssl3',
-              'purl':             'pkg:apk/alpine/libssl3@3.1.5-r0?arch=aarch64&distro=3.19.2',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2024:9333',
-                'https://access.redhat.com/security/cve/CVE-2024-4741',
-                'https://bugzilla.redhat.com/2274020',
-                'https://bugzilla.redhat.com/2281029',
-                'https://bugzilla.redhat.com/2283757',
-                'https://bugzilla.redhat.com/2294581',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2274020',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2281029',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2283757',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2294581',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-2511',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-4603',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-4741',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-5535',
-                'https://errata.almalinux.org/9/ALSA-2024-9333.html',
-                'https://errata.rockylinux.org/RLSA-2024:9333',
-                'https://github.com/openssl/openssl/commit/704f725b96aa373ee45ecfb23f6abfe8be8d9177',
-                'https://github.com/openssl/openssl/commit/b3f0eb0a295f58f16ba43ba99dad70d4ee5c437d',
-                'https://github.com/openssl/openssl/commit/c88c3de51020c37e8706bf7a682a162593053aac',
-                'https://github.com/openssl/openssl/commit/e5093133c35ca82874ad83697af76f4b0f7e3bd8',
-                'https://github.openssl.org/openssl/extended-releases/commit/f7a045f3143fc6da2ee66bf52d8df04829590dd4',
-                'https://linux.oracle.com/cve/CVE-2024-4741.html',
-                'https://linux.oracle.com/errata/ELSA-2024-9333.html',
-                'https://lists.debian.org/debian-lts-announce/2024/10/msg00033.html',
-                'https://lists.debian.org/debian-lts-announce/2024/11/msg00000.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2024-4741',
-                'https://security.netapp.com/advisory/ntap-20240621-0004/',
-                'https://ubuntu.com/security/notices/USN-6937-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2024-4741',
-                'https://www.openssl.org/news/secadv/20240528.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: Use After Free with SSL_free_buffers'
-            },
-            {
-              'cve':  'CVE-2024-5535',
-              'cvss': {
-                'redhat': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-125'
-              ],
-              'description':   'Issue summary: Calling the OpenSSL API function SSL_select_next_proto with an\nempty supported client protocols buffer may cause a crash or memory contents to\nbe sent to the peer.\n\nImpact summary: A buffer overread can have a range of potential consequences\nsuch as unexpected application beahviour or a crash. In particular this issue\ncould result in up to 255 bytes of arbitrary private data from memory being sent\nto the peer leading to a loss of confidentiality. However, only applications\nthat directly call the SSL_select_next_proto function with a 0 length list of\nsupported client protocols are affected by this issue. This would normally never\nbe a valid scenario and is typically not under attacker control but may occur by\naccident in the case of a configuration or programming error in the calling\napplication.\n\nThe OpenSSL API function SSL_select_next_proto is typically used by TLS\napplications that support ALPN (Application Layer Protocol Negotiation) or NPN\n(Next Protocol Negotiation). NPN is older, was never standardised and\nis deprecated in favour of ALPN. We believe that ALPN is significantly more\nwidely deployed than NPN. The SSL_select_next_proto function accepts a list of\nprotocols from the server and a list of protocols from the client and returns\nthe first protocol that appears in the server list that also appears in the\nclient list. In the case of no overlap between the two lists it returns the\nfirst item in the client list. In either case it will signal whether an overlap\nbetween the two lists was found. In the case where SSL_select_next_proto is\ncalled with a zero length client list it fails to notice this condition and\nreturns the memory immediately following the client list pointer (and reports\nthat there was no overlap in the lists).\n\nThis function is typically called from a server side application callback for\nALPN or a client side application callback for NPN. In the case of ALPN the list\nof protocols supplied by the client is guaranteed by libssl to never be zero in\nlength. The list of server protocols comes from the application and should never\nnormally be expected to be of zero length. In this case if the\nSSL_select_next_proto function has been called as expected (with the list\nsupplied by the client passed in the client/client_len parameters), then the\napplication will not be vulnerable to this issue. If the application has\naccidentally been configured with a zero length server list, and has\naccidentally passed that zero length server list in the client/client_len\nparameters, and has additionally failed to correctly handle a "no overlap"\nresponse (which would normally result in a handshake failure in ALPN) then it\nwill be vulnerable to this problem.\n\nIn the case of NPN, the protocol permits the client to opportunistically select\na protocol when there is no overlap. OpenSSL returns the first client protocol\nin the no overlap case in support of this. The list of client protocols comes\nfrom the application and should never normally be expected to be of zero length.\nHowever if the SSL_select_next_proto function is accidentally called with a\nclient_len of 0 then an invalid memory pointer will be returned instead. If the\napplication uses this output as the opportunistic protocol then the loss of\nconfidentiality will occur.\n\nThis issue has been assessed as Low severity because applications are most\nlikely to be vulnerable if they are using NPN instead of ALPN - but NPN is not\nwidely used. It also requires an application configuration or programming error.\nFinally, this issue would not typically be under attacker control making active\nexploitation unlikely.\n\nThe FIPS modules in 3.3, 3.2, 3.1 and 3.0 are not affected by this issue.\n\nDue to the low severity of this issue we are not issuing new releases of\nOpenSSL at this time. The fix will be included in the next releases when they\nbecome available.',
-              'diffID':        'sha256:64038f9df03fdd885a24f303b0aac77808bacd042a2d8d324fcca56a86262d4a',
-              'fixedVersions': [
-                '3.1.6-r0'
-              ],
-              'installedVersion': '3.1.5-r0',
-              'packageName':      'libssl3',
-              'purl':             'pkg:apk/alpine/libssl3@3.1.5-r0?arch=aarch64&distro=3.19.2',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2024/06/27/1',
-                'http://www.openwall.com/lists/oss-security/2024/06/28/4',
-                'http://www.openwall.com/lists/oss-security/2024/08/15/1',
-                'https://access.redhat.com/errata/RHSA-2025:1671',
-                'https://access.redhat.com/security/cve/CVE-2024-5535',
-                'https://bugzilla.redhat.com/2294581',
-                'https://bugzilla.redhat.com/2294676',
-                'https://bugzilla.redhat.com/2301888',
-                'https://bugzilla.redhat.com/2318857',
-                'https://bugzilla.redhat.com/2318858',
-                'https://bugzilla.redhat.com/2318870',
-                'https://bugzilla.redhat.com/2318873',
-                'https://bugzilla.redhat.com/2318874',
-                'https://bugzilla.redhat.com/2318876',
-                'https://bugzilla.redhat.com/2318882',
-                'https://bugzilla.redhat.com/2318883',
-                'https://bugzilla.redhat.com/2318884',
-                'https://bugzilla.redhat.com/2318885',
-                'https://bugzilla.redhat.com/2318886',
-                'https://bugzilla.redhat.com/2318897',
-                'https://bugzilla.redhat.com/2318900',
-                'https://bugzilla.redhat.com/2318905',
-                'https://bugzilla.redhat.com/2318914',
-                'https://bugzilla.redhat.com/2318922',
-                'https://bugzilla.redhat.com/2318923',
-                'https://bugzilla.redhat.com/2318925',
-                'https://bugzilla.redhat.com/2318926',
-                'https://bugzilla.redhat.com/2318927',
-                'https://bugzilla.redhat.com/2331191',
-                'https://bugzilla.redhat.com/2339218',
-                'https://bugzilla.redhat.com/2339220',
-                'https://bugzilla.redhat.com/2339221',
-                'https://bugzilla.redhat.com/2339226',
-                'https://bugzilla.redhat.com/2339231',
-                'https://bugzilla.redhat.com/2339236',
-                'https://bugzilla.redhat.com/2339238',
-                'https://bugzilla.redhat.com/2339243',
-                'https://bugzilla.redhat.com/2339247',
-                'https://bugzilla.redhat.com/2339252',
-                'https://bugzilla.redhat.com/2339259',
-                'https://bugzilla.redhat.com/2339266',
-                'https://bugzilla.redhat.com/2339270',
-                'https://bugzilla.redhat.com/2339271',
-                'https://bugzilla.redhat.com/2339275',
-                'https://bugzilla.redhat.com/2339277',
-                'https://bugzilla.redhat.com/2339281',
-                'https://bugzilla.redhat.com/2339284',
-                'https://bugzilla.redhat.com/2339291',
-                'https://bugzilla.redhat.com/2339293',
-                'https://bugzilla.redhat.com/2339295',
-                'https://bugzilla.redhat.com/2339299',
-                'https://bugzilla.redhat.com/2339300',
-                'https://bugzilla.redhat.com/2339304',
-                'https://bugzilla.redhat.com/2339305',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2274020',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2281029',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2283757',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2294581',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-2511',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-4603',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-4741',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-5535',
-                'https://errata.almalinux.org/9/ALSA-2025-1671.html',
-                'https://errata.rockylinux.org/RLSA-2024:9333',
-                'https://github.com/openssl/openssl/commit/4ada436a1946cbb24db5ab4ca082b69c1bc10f37',
-                'https://github.com/openssl/openssl/commit/99fb785a5f85315b95288921a321a935ea29a51e',
-                'https://github.com/openssl/openssl/commit/cf6f91f6121f4db167405db2f0de410a456f260c',
-                'https://github.com/openssl/openssl/commit/e86ac436f0bd54d4517745483e2315650fae7b2c',
-                'https://github.openssl.org/openssl/extended-releases/commit/9947251413065a05189a63c9b7a6c1d4e224c21c',
-                'https://github.openssl.org/openssl/extended-releases/commit/b78ec0824da857223486660177d3b1f255c65d87',
-                'https://linux.oracle.com/cve/CVE-2024-5535.html',
-                'https://linux.oracle.com/errata/ELSA-2025-1673.html',
-                'https://lists.debian.org/debian-lts-announce/2024/10/msg00033.html',
-                'https://lists.debian.org/debian-lts-announce/2024/11/msg00000.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2024-5535',
-                'https://openssl.org/news/secadv/20240627.txt',
-                'https://security.netapp.com/advisory/ntap-20240712-0005/',
-                'https://security.netapp.com/advisory/ntap-20241025-0006/',
-                'https://security.netapp.com/advisory/ntap-20241025-0010/',
-                'https://ubuntu.com/security/notices/USN-6937-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2024-5535',
-                'https://www.openssl.org/news/secadv/20240627.txt',
-                'https://www.oracle.com/security-alerts/cpuoct2024.html#AppendixMSQL'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: SSL_select_next_proto buffer overread'
-            },
-            {
-              'cve':  'CVE-2025-9230',
-              'cvss': {
-                'redhat': {
-                  'v3score':  '5.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L'
-                }
-              },
-              'cwes': [
-                'CWE-125',
-                'CWE-787'
-              ],
-              'description':   'Issue summary: An application trying to decrypt CMS messages encrypted using\npassword based encryption can trigger an out-of-bounds read and write.\n\nImpact summary: This out-of-bounds read may trigger a crash which leads to\nDenial of Service for an application. The out-of-bounds write can cause\na memory corruption which can have various consequences including\na Denial of Service or Execution of attacker-supplied code.\n\nAlthough the consequences of a successful exploit of this vulnerability\ncould be severe, the probability that the attacker would be able to\nperform it is low. Besides, password based (PWRI) encryption support in CMS\nmessages is very rarely used. For that reason the issue was assessed as\nModerate severity according to our Security Policy.\n\nThe FIPS modules in 3.5, 3.4, 3.3, 3.2, 3.1 and 3.0 are not affected by this\nissue, as the CMS implementation is outside the OpenSSL FIPS module\nboundary.',
-              'diffID':        'sha256:64038f9df03fdd885a24f303b0aac77808bacd042a2d8d324fcca56a86262d4a',
-              'fixedVersions': [
-                '3.1.8-r1'
-              ],
-              'installedVersion': '3.1.5-r0',
-              'packageName':      'libssl3',
-              'purl':             'pkg:apk/alpine/libssl3@3.1.5-r0?arch=aarch64&distro=3.19.2',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2025/09/30/5',
-                'https://access.redhat.com/errata/RHSA-2025:21255',
-                'https://access.redhat.com/security/cve/CVE-2025-9230',
-                'https://bugzilla.redhat.com/2396054',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2396054',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-9230',
-                'https://errata.almalinux.org/9/ALSA-2025-21255.html',
-                'https://errata.rockylinux.org/RLSA-2025:21255',
-                'https://github.com/openssl/openssl/commit/5965ea5dd6960f36d8b7f74f8eac67a8eb8f2b45',
-                'https://github.com/openssl/openssl/commit/9e91358f365dee6c446dcdcdb01c04d2743fd280',
-                'https://github.com/openssl/openssl/commit/a79c4ce559c6a3a8fd4109e9f33c1185d5bf2def',
-                'https://github.com/openssl/openssl/commit/b5282d677551afda7d20e9c00e09561b547b2dfd',
-                'https://github.com/openssl/openssl/commit/bae259a211ada6315dc50900686daaaaaa55f482',
-                'https://github.openssl.org/openssl/extended-releases/commit/c2b96348bfa662f25f4fabf81958ae822063dae3',
-                'https://github.openssl.org/openssl/extended-releases/commit/dfbaf161d8dafc1132dd88cd48ad990ed9b4c8ba',
-                'https://linux.oracle.com/cve/CVE-2025-9230.html',
-                'https://linux.oracle.com/errata/ELSA-2026-0337.html',
-                'https://lists.debian.org/debian-lts-announce/2025/10/msg00001.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2025-9230',
-                'https://openssl-library.org/news/secadv/20250930.txt',
-                'https://ubuntu.com/security/notices/USN-7786-1',
-                'https://www.cve.org/CVERecord?id=CVE-2025-9230'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: Out-of-bounds read & write in RFC 3211 KEK Unwrap'
-            },
-            {
-              'cve':  'CVE-2024-9143',
-              'cvss': {
-                'redhat': {
-                  'v3score':  '3.7',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L'
-                }
-              },
-              'cwes': [
-                'CWE-125',
-                'CWE-787'
-              ],
-              'description':   "Issue summary: Use of the low-level GF(2^m) elliptic curve APIs with untrusted\nexplicit values for the field polynomial can lead to out-of-bounds memory reads\nor writes.\n\nImpact summary: Out of bound memory writes can lead to an application crash or\neven a possibility of a remote code execution, however, in all the protocols\ninvolving Elliptic Curve Cryptography that we're aware of, either only \"named\ncurves\" are supported, or, if explicit curve parameters are supported, they\nspecify an X9.62 encoding of binary (GF(2^m)) curves that can't represent\nproblematic input values. Thus the likelihood of existence of a vulnerable\napplication is low.\n\nIn particular, the X9.62 encoding is used for ECC keys in X.509 certificates,\nso problematic inputs cannot occur in the context of processing X.509\ncertificates.  Any problematic use-cases would have to be using an \"exotic\"\ncurve encoding.\n\nThe affected APIs include: EC_GROUP_new_curve_GF2m(), EC_GROUP_new_from_params(),\nand various supporting BN_GF2m_*() functions.\n\nApplications working with \"exotic\" explicit binary (GF(2^m)) curve parameters,\nthat make it possible to represent invalid field polynomials with a zero\nconstant term, via the above or similar APIs, may terminate abruptly as a\nresult of reading or writing outside of array bounds.  Remote code execution\ncannot easily be ruled out.\n\nThe FIPS modules in 3.3, 3.2, 3.1 and 3.0 are not affected by this issue.",
-              'diffID':        'sha256:64038f9df03fdd885a24f303b0aac77808bacd042a2d8d324fcca56a86262d4a',
-              'fixedVersions': [
-                '3.1.7-r1'
-              ],
-              'installedVersion': '3.1.5-r0',
-              'packageName':      'libssl3',
-              'purl':             'pkg:apk/alpine/libssl3@3.1.5-r0?arch=aarch64&distro=3.19.2',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2024/10/16/1',
-                'http://www.openwall.com/lists/oss-security/2024/10/23/1',
-                'http://www.openwall.com/lists/oss-security/2024/10/24/1',
-                'https://access.redhat.com/security/cve/CVE-2024-9143',
-                'https://github.com/openssl/openssl/commit/72ae83ad214d2eef262461365a1975707f862712',
-                'https://github.com/openssl/openssl/commit/bc7e04d7c8d509fb78fc0e285aa948fb0da04700',
-                'https://github.com/openssl/openssl/commit/c0d3e4d32d2805f49bec30547f225bc4d092e1f4',
-                'https://github.com/openssl/openssl/commit/fdf6723362ca51bd883295efe206cb5b1cfa5154',
-                'https://github.openssl.org/openssl/extended-releases/commit/8efc0cbaa8ebba8e116f7b81a876a4123594d86a',
-                'https://github.openssl.org/openssl/extended-releases/commit/9d576994cec2b7aa37a91740ea7e680810957e41',
-                'https://lists.debian.org/debian-lts-announce/2024/10/msg00033.html',
-                'https://lists.debian.org/debian-lts-announce/2024/11/msg00000.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2024-9143',
-                'https://openssl-library.org/news/secadv/20241016.txt',
-                'https://security.netapp.com/advisory/ntap-20241101-0001/',
-                'https://ubuntu.com/security/notices/USN-7264-1',
-                'https://ubuntu.com/security/notices/USN-7278-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2024-9143'
-              ],
-              'severity':   'LOW',
-              'suppressed': false,
-              'title':      'openssl: Low-level invalid GF(2^m) parameters lead to OOB memory access'
-            },
-            {
-              'cve':  'CVE-2025-9232',
-              'cvss': {
-                'redhat': {
-                  'v3score':  '3.1',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L'
-                }
-              },
-              'cwes': [
-                'CWE-125'
-              ],
-              'description':   "Issue summary: An application using the OpenSSL HTTP client API functions may\ntrigger an out-of-bounds read if the 'no_proxy' environment variable is set and\nthe host portion of the authority component of the HTTP URL is an IPv6 address.\n\nImpact summary: An out-of-bounds read can trigger a crash which leads to\nDenial of Service for an application.\n\nThe OpenSSL HTTP client API functions can be used directly by applications\nbut they are also used by the OCSP client functions and CMP (Certificate\nManagement Protocol) client implementation in OpenSSL. However the URLs used\nby these implementations are unlikely to be controlled by an attacker.\n\nIn this vulnerable code the out of bounds read can only trigger a crash.\nFurthermore the vulnerability requires an attacker-controlled URL to be\npassed from an application to the OpenSSL function and the user has to have\na 'no_proxy' environment variable set. For the aforementioned reasons the\nissue was assessed as Low severity.\n\nThe vulnerable code was introduced in the following patch releases:\n3.0.16, 3.1.8, 3.2.4, 3.3.3, 3.4.0 and 3.5.0.\n\nThe FIPS modules in 3.5, 3.4, 3.3, 3.2, 3.1 and 3.0 are not affected by this\nissue, as the HTTP client implementation is outside the OpenSSL FIPS module\nboundary.",
-              'diffID':        'sha256:64038f9df03fdd885a24f303b0aac77808bacd042a2d8d324fcca56a86262d4a',
-              'fixedVersions': [
-                '3.1.8-r1'
-              ],
-              'installedVersion': '3.1.5-r0',
-              'packageName':      'libssl3',
-              'purl':             'pkg:apk/alpine/libssl3@3.1.5-r0?arch=aarch64&distro=3.19.2',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2025/09/30/5',
-                'https://access.redhat.com/security/cve/CVE-2025-9232',
-                'https://github.com/openssl/openssl/commit/2b4ec20e47959170422922eaff25346d362dcb35',
-                'https://github.com/openssl/openssl/commit/654dc11d23468a74fc8ea4672b702dd3feb7be4b',
-                'https://github.com/openssl/openssl/commit/7cf21a30513c9e43c4bc3836c237cf086e194af3',
-                'https://github.com/openssl/openssl/commit/89e790ac431125a4849992858490bed6b225eadf',
-                'https://github.com/openssl/openssl/commit/bbf38c034cdabd0a13330abcc4855c866f53d2e0',
-                'https://nvd.nist.gov/vuln/detail/CVE-2025-9232',
-                'https://openssl-library.org/news/secadv/20250930.txt',
-                'https://ubuntu.com/security/notices/USN-7786-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2025-9232'
-              ],
-              'severity':   'LOW',
-              'suppressed': false,
-              'title':      'openssl: Out-of-bounds read in HTTP client no_proxy handling'
-            },
-            {
-              'cve':  'CVE-2025-26519',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-787'
-              ],
-              'description':   'musl libc 0.9.13 through 1.2.5 before 1.2.6 has an out-of-bounds write vulnerability when an attacker can trigger iconv conversion of untrusted EUC-KR text to UTF-8.',
-              'diffID':        'sha256:64038f9df03fdd885a24f303b0aac77808bacd042a2d8d324fcca56a86262d4a',
-              'fixedVersions': [
-                '1.2.4_git20230717-r5'
-              ],
-              'installedVersion': '1.2.4_git20230717-r4',
-              'packageName':      'musl',
-              'purl':             'pkg:apk/alpine/musl@1.2.4_git20230717-r4?arch=aarch64&distro=3.19.2',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2025/02/13/2',
-                'http://www.openwall.com/lists/oss-security/2025/02/13/3',
-                'http://www.openwall.com/lists/oss-security/2025/02/13/4',
-                'http://www.openwall.com/lists/oss-security/2025/02/13/5',
-                'http://www.openwall.com/lists/oss-security/2025/02/14/5',
-                'http://www.openwall.com/lists/oss-security/2025/02/14/6',
-                'https://git.musl-libc.org/cgit/musl/commit/?id=c47ad25ea3b484e10326f933e927c0bc8cded3da',
-                'https://git.musl-libc.org/cgit/musl/commit/?id=e5adcd97b5196e29991b524237381a0202a60659',
-                'https://www.openwall.com/lists/oss-security/2025/02/13/2'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'musl libc 0.9.13 through 1.2.5 before 1.2.6 has an out-of-bounds write ...'
-            },
-            {
-              'cve':  'CVE-2025-26519',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-787'
-              ],
-              'description':   'musl libc 0.9.13 through 1.2.5 before 1.2.6 has an out-of-bounds write vulnerability when an attacker can trigger iconv conversion of untrusted EUC-KR text to UTF-8.',
-              'diffID':        'sha256:64038f9df03fdd885a24f303b0aac77808bacd042a2d8d324fcca56a86262d4a',
-              'fixedVersions': [
-                '1.2.4_git20230717-r5'
-              ],
-              'installedVersion': '1.2.4_git20230717-r4',
-              'packageName':      'musl-utils',
-              'purl':             'pkg:apk/alpine/musl-utils@1.2.4_git20230717-r4?arch=aarch64&distro=3.19.2',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2025/02/13/2',
-                'http://www.openwall.com/lists/oss-security/2025/02/13/3',
-                'http://www.openwall.com/lists/oss-security/2025/02/13/4',
-                'http://www.openwall.com/lists/oss-security/2025/02/13/5',
-                'http://www.openwall.com/lists/oss-security/2025/02/14/5',
-                'http://www.openwall.com/lists/oss-security/2025/02/14/6',
-                'https://git.musl-libc.org/cgit/musl/commit/?id=c47ad25ea3b484e10326f933e927c0bc8cded3da',
-                'https://git.musl-libc.org/cgit/musl/commit/?id=e5adcd97b5196e29991b524237381a0202a60659',
-                'https://www.openwall.com/lists/oss-security/2025/02/13/2'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'musl libc 0.9.13 through 1.2.5 before 1.2.6 has an out-of-bounds write ...'
-            },
-            {
-              'cve':  'CVE-2024-58251',
-              'cwes': [
-                'CWE-150'
-              ],
-              'description':   'In netstat in BusyBox through 1.37.0, local users can launch of network application with an argv[0] containing an ANSI terminal escape sequence, leading to a denial of service (terminal locked up) when netstat is used by a victim.',
-              'diffID':        'sha256:64038f9df03fdd885a24f303b0aac77808bacd042a2d8d324fcca56a86262d4a',
-              'fixedVersions': [
-                '1.36.1-r21'
-              ],
-              'installedVersion': '1.36.1-r19',
-              'packageName':      'ssl_client',
-              'purl':             'pkg:apk/alpine/ssl_client@1.36.1-r19?arch=aarch64&distro=3.19.2',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2025/04/23/6',
-                'https://bugs.busybox.net/show_bug.cgi?id=15922',
-                'https://www.busybox.net',
-                'https://www.busybox.net/downloads/',
-                'https://www.cve.org/CVERecord?id=CVE-2024-58251'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'In netstat in BusyBox through 1.37.0, local users can launch of networ ...'
-            },
-            {
-              'cve':  'CVE-2025-46394',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '3.3',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-451'
-              ],
-              'description':   'In tar in BusyBox through 1.37.0, a TAR archive can have filenames hidden from a listing through the use of terminal escape sequences.',
-              'diffID':        'sha256:64038f9df03fdd885a24f303b0aac77808bacd042a2d8d324fcca56a86262d4a',
-              'fixedVersions': [
-                '1.36.1-r21'
-              ],
-              'installedVersion': '1.36.1-r19',
-              'packageName':      'ssl_client',
-              'purl':             'pkg:apk/alpine/ssl_client@1.36.1-r19?arch=aarch64&distro=3.19.2',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2025/04/23/5',
-                'http://www.openwall.com/lists/oss-security/2025/04/24/3',
-                'https://bugs.busybox.net/show_bug.cgi?id=16018',
-                'https://lists.busybox.net/pipermail/busybox/2024-July/090806.html',
-                'https://lists.busybox.net/pipermail/busybox/2024-July/090814.html',
-                'https://www.busybox.net',
-                'https://www.busybox.net/downloads/',
-                'https://www.cve.org/CVERecord?id=CVE-2025-46394',
-                'https://www.openwall.com/lists/oss-security/2025/04/23/1'
-              ],
-              'severity':   'LOW',
-              'suppressed': false,
-              'title':      'In tar in BusyBox through 1.37.0, a TAR archive can have filenames hid ...'
-            }
-          ]
-        }
-      ],
-      'summary': {
-        'critical':   0,
-        'high':       4,
-        'low':        7,
-        'medium':     11,
-        'suppressed': 0,
-        'unknown':    0
-      }
-    }
-  },
-  {
-    'id':    'default/a16351b9f7f543220aa5bf60ab00b224935ca02744cabf96b7674ae2401b7a85',
-    'type':  'storage.sbomscanner.kubewarden.io.vulnerabilityreport',
-    'links': {
-      'patch':  'https://localhost:8005/v1/storage.sbomscanner.kubewarden.io.vulnerabilityreports/default/a16351b9f7f543220aa5bf60ab00b224935ca02744cabf96b7674ae2401b7a85',
-      'remove': 'https://localhost:8005/v1/storage.sbomscanner.kubewarden.io.vulnerabilityreports/default/a16351b9f7f543220aa5bf60ab00b224935ca02744cabf96b7674ae2401b7a85',
-      'self':   'https://localhost:8005/v1/storage.sbomscanner.kubewarden.io.vulnerabilityreports/default/a16351b9f7f543220aa5bf60ab00b224935ca02744cabf96b7674ae2401b7a85',
-      'update': 'https://localhost:8005/v1/storage.sbomscanner.kubewarden.io.vulnerabilityreports/default/a16351b9f7f543220aa5bf60ab00b224935ca02744cabf96b7674ae2401b7a85',
-      'view':   'https://localhost:8005/apis/storage.sbomscanner.kubewarden.io/v1alpha1/namespaces/default/vulnerabilityreports/a16351b9f7f543220aa5bf60ab00b224935ca02744cabf96b7674ae2401b7a85'
-    },
-    'apiVersion':    'storage.sbomscanner.kubewarden.io/v1alpha1',
-    'imageMetadata': {
-      'digest':      'sha256:6622643e53abb6b11da0128a027eb60969079975d713207618735d3beae6e3c8',
-      'platform':    'linux/amd64',
-      'registry':    'demo-02',
-      'registryURI': 'ghcr.io',
-      'repository':  'linuxcontainers/alpine',
-      'tag':         '3.13.11'
-    },
-    'kind':     'VulnerabilityReport',
-    'metadata': {
-      'creationTimestamp': '2026-01-09T22:47:12Z',
-      'fields':            [
-        'a16351b9f7f543220aa5bf60ab00b224935ca02744cabf96b7674ae2401b7a85',
-        'ghcr.io/linuxcontainers/alpine:3.13.11',
-        'linux/amd64',
-        '1 (0 suppressed)'
-      ],
-      'labels': {
-        'app.kubernetes.io/managed-by':          'sbomscanner',
-        'app.kubernetes.io/part-of':             'sbomscanner',
-        'sbomscanner.kubewarden.io/scanjob-uid': '42184d01-4b15-466f-98aa-e802d1b6b6b8'
-      },
-      'name':            'a16351b9f7f543220aa5bf60ab00b224935ca02744cabf96b7674ae2401b7a85',
-      'namespace':       'default',
-      'ownerReferences': [
-        {
-          'apiVersion':         'storage.sbomscanner.kubewarden.io/v1alpha1',
-          'blockOwnerDeletion': true,
-          'controller':         true,
-          'kind':               'SBOM',
-          'name':               'a16351b9f7f543220aa5bf60ab00b224935ca02744cabf96b7674ae2401b7a85',
-          'uid':                '0816d03d-dc38-4dcc-8639-43898eae077e'
-        }
-      ],
-      'relationships': [
-        {
-          'fromId':   'default/a16351b9f7f543220aa5bf60ab00b224935ca02744cabf96b7674ae2401b7a85',
-          'fromType': 'storage.sbomscanner.kubewarden.io.sbom',
-          'rel':      'owner',
-          'state':    'active',
-          'message':  'Resource is current'
-        }
-      ],
-      'resourceVersion': '4',
-      'state':           {
-        'error':         false,
-        'message':       'Resource is current',
-        'name':          'active',
-        'transitioning': false
-      },
-      'uid': '41e6fb03-80a1-4a25-93fa-f099c3bb352f'
-    },
-    'report': {
-      'results': [
-        {
-          'class':           'os-pkgs',
-          'target':          '/var/run/worker/trivy.sbom.3130302753.json (alpine 3.13.11)',
-          'type':            'alpine',
-          'vulnerabilities': [
-            {
-              'cve':  'CVE-2022-37434',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '9.8',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-787',
-                'CWE-120'
-              ],
-              'description':   'zlib through 1.2.12 has a heap-based buffer over-read or buffer overflow in inflate in inflate.c via a large gzip header extra field. NOTE: only applications that call inflateGetHeader are affected. Some common applications bundle the affected zlib source code but may be unable to call inflateGetHeader (e.g., see the nodejs/node reference).',
-              'diffID':        'sha256:16f2b0951240495ea6d9b3adac52b4a25817698a135d8b77d22b26be383a9a1e',
-              'fixedVersions': [
-                '1.2.12-r2'
-              ],
-              'installedVersion': '1.2.12-r1',
-              'packageName':      'zlib',
-              'purl':             'pkg:apk/alpine/zlib@1.2.12-r1?arch=x86_64&distro=3.13.11',
-              'references':       [
-                'http://seclists.org/fulldisclosure/2022/Oct/37',
-                'http://seclists.org/fulldisclosure/2022/Oct/38',
-                'http://seclists.org/fulldisclosure/2022/Oct/41',
-                'http://seclists.org/fulldisclosure/2022/Oct/42',
-                'http://www.openwall.com/lists/oss-security/2022/08/05/2',
-                'http://www.openwall.com/lists/oss-security/2022/08/09/1',
-                'https://access.redhat.com/errata/RHSA-2022:8291',
-                'https://access.redhat.com/security/cve/CVE-2022-37434',
-                'https://bugzilla.redhat.com/2116639',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2053198',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2077431',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2081296',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2116639',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-37434',
-                'https://errata.almalinux.org/9/ALSA-2022-8291.html',
-                'https://errata.rockylinux.org/RLSA-2022:8291',
-                'https://github.com/curl/curl/issues/9271',
-                'https://github.com/ivd38/zlib_overflow',
-                'https://github.com/madler/zlib/blob/21767c654d31d2dccdde4330529775c6c5fd5389/zlib.h#L1062-L1063',
-                'https://github.com/madler/zlib/commit/1eb7682f845ac9e9bf9ae35bbfb3bad5dacbd91d',
-                'https://github.com/madler/zlib/commit/eff308af425b67093bab25f80f1ae950166bece1',
-                'https://github.com/nodejs/node/blob/75b68c6e4db515f76df73af476eccf382bbcb00a/deps/zlib/inflate.c#L762-L764',
-                'https://linux.oracle.com/cve/CVE-2022-37434.html',
-                'https://linux.oracle.com/errata/ELSA-2023-1095.html',
-                'https://lists.debian.org/debian-lts-announce/2022/09/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JWN4VE3JQR4O2SOUS5TXNLANRPMHWV4I/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NMBOJ77A7T7PQCARMDUK75TE6LLESZ3O/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PAVPQNCG3XRLCLNSQRM3KAN5ZFMVXVTY/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/X5U7OTKZSHY2I3ZFJSR2SHFHW72RKGDK/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YRQAI7H4M4RQZ2IWZUEEXECBE5D56BH2/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2022-37434',
-                'https://security.netapp.com/advisory/ntap-20220901-0005/',
-                'https://security.netapp.com/advisory/ntap-20230427-0007/',
-                'https://support.apple.com/kb/HT213488',
-                'https://support.apple.com/kb/HT213489',
-                'https://support.apple.com/kb/HT213490',
-                'https://support.apple.com/kb/HT213491',
-                'https://support.apple.com/kb/HT213493',
-                'https://support.apple.com/kb/HT213494',
-                'https://ubuntu.com/security/notices/USN-5570-1',
-                'https://ubuntu.com/security/notices/USN-5570-2',
-                'https://ubuntu.com/security/notices/USN-5573-1',
-                'https://ubuntu.com/security/notices/USN-6736-1',
-                'https://ubuntu.com/security/notices/USN-6736-2',
-                'https://www.cve.org/CVERecord?id=CVE-2022-37434',
-                'https://www.debian.org/security/2022/dsa-5218'
-              ],
-              'severity':   'CRITICAL',
-              'suppressed': false,
-              'title':      'zlib: heap-based buffer over-read and overflow in inflate() in inflate.c via a large gzip header extra field'
-            }
-          ]
-        }
-      ],
-      'summary': {
-        'critical':   1,
-        'high':       0,
-        'low':        0,
-        'medium':     0,
-        'suppressed': 0,
-        'unknown':    0
-      }
-    }
-  },
-  {
-    'id':    'default/a6dc4c183f1186d12268b4dd4d977dc7964405738677a72024ba7f67b333c405',
-    'type':  'storage.sbomscanner.kubewarden.io.vulnerabilityreport',
-    'links': {
-      'patch':  'https://localhost:8005/v1/storage.sbomscanner.kubewarden.io.vulnerabilityreports/default/a6dc4c183f1186d12268b4dd4d977dc7964405738677a72024ba7f67b333c405',
-      'remove': 'https://localhost:8005/v1/storage.sbomscanner.kubewarden.io.vulnerabilityreports/default/a6dc4c183f1186d12268b4dd4d977dc7964405738677a72024ba7f67b333c405',
-      'self':   'https://localhost:8005/v1/storage.sbomscanner.kubewarden.io.vulnerabilityreports/default/a6dc4c183f1186d12268b4dd4d977dc7964405738677a72024ba7f67b333c405',
-      'update': 'https://localhost:8005/v1/storage.sbomscanner.kubewarden.io.vulnerabilityreports/default/a6dc4c183f1186d12268b4dd4d977dc7964405738677a72024ba7f67b333c405',
-      'view':   'https://localhost:8005/apis/storage.sbomscanner.kubewarden.io/v1alpha1/namespaces/default/vulnerabilityreports/a6dc4c183f1186d12268b4dd4d977dc7964405738677a72024ba7f67b333c405'
-    },
-    'apiVersion':    'storage.sbomscanner.kubewarden.io/v1alpha1',
-    'imageMetadata': {
-      'digest':      'sha256:5f82c1806d60592b747d6a53d35164b0c8f40e7ccf5425c1d59ae86ec8b3c0bc',
-      'platform':    'linux/s390x',
-      'registry':    'lsong-demo1',
-      'registryURI': 'registry-1.docker.io',
-      'repository':  'library/alpine',
-      'tag':         '3.11.12'
-    },
-    'kind':     'VulnerabilityReport',
-    'metadata': {
-      'creationTimestamp': '2026-01-14T18:52:04Z',
-      'fields':            [
-        'a6dc4c183f1186d12268b4dd4d977dc7964405738677a72024ba7f67b333c405',
-        'registry-1.docker.io/library/alpine:3.11.12',
-        'linux/s390x',
-        '21 (0 suppressed)'
-      ],
-      'labels': {
-        'app.kubernetes.io/managed-by':          'sbomscanner',
-        'app.kubernetes.io/part-of':             'sbomscanner',
-        'sbomscanner.kubewarden.io/scanjob-uid': '445c600a-c4b6-40b3-bd71-f2d2140a37d5'
-      },
-      'name':            'a6dc4c183f1186d12268b4dd4d977dc7964405738677a72024ba7f67b333c405',
-      'namespace':       'default',
-      'ownerReferences': [
-        {
-          'apiVersion':         'storage.sbomscanner.kubewarden.io/v1alpha1',
-          'blockOwnerDeletion': true,
-          'controller':         true,
-          'kind':               'SBOM',
-          'name':               'a6dc4c183f1186d12268b4dd4d977dc7964405738677a72024ba7f67b333c405',
-          'uid':                '058c9dd0-3e97-4e66-bc4b-2b7fe163e8d1'
-        }
-      ],
-      'relationships': [
-        {
-          'fromId':   'default/a6dc4c183f1186d12268b4dd4d977dc7964405738677a72024ba7f67b333c405',
-          'fromType': 'storage.sbomscanner.kubewarden.io.sbom',
-          'rel':      'owner',
-          'state':    'active',
-          'message':  'Resource is current'
-        }
-      ],
-      'resourceVersion': '1',
-      'state':           {
-        'error':         false,
-        'message':       'Resource is current',
-        'name':          'active',
-        'transitioning': false
-      },
-      'uid': '04f52e2f-cba6-4e9b-85b4-70bc2e0dd8bf'
-    },
-    'report': {
-      'results': [
-        {
-          'class':           'os-pkgs',
-          'target':          '/var/run/worker/trivy.sbom.788269292.json (alpine 3.11.12)',
-          'type':            'alpine',
-          'vulnerabilities': [
-            {
-              'cve':  'CVE-2021-42378',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the getvar_i function",
-              'diffID':        'sha256:2db480cb17a4754fcd3b95c9f905fdbda828e7031a89dcac6e5ac3a668c2fd99',
-              'fixedVersions': [
-                '1.31.1-r11'
-              ],
-              'installedVersion': '1.31.1-r10',
-              'packageName':      'busybox',
-              'purl':             'pkg:apk/alpine/busybox@1.31.1-r10?arch=s390x&distro=3.11.12',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42378',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42378',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42378'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the getvar_i()'
-            },
-            {
-              'cve':  'CVE-2021-42379',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the next_input_file function",
-              'diffID':        'sha256:2db480cb17a4754fcd3b95c9f905fdbda828e7031a89dcac6e5ac3a668c2fd99',
-              'fixedVersions': [
-                '1.31.1-r11'
-              ],
-              'installedVersion': '1.31.1-r10',
-              'packageName':      'busybox',
-              'purl':             'pkg:apk/alpine/busybox@1.31.1-r10?arch=s390x&distro=3.11.12',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42379',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42379',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42379'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the next_input_file()'
-            },
-            {
-              'cve':  'CVE-2021-42380',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the clrvar function",
-              'diffID':        'sha256:2db480cb17a4754fcd3b95c9f905fdbda828e7031a89dcac6e5ac3a668c2fd99',
-              'fixedVersions': [
-                '1.31.1-r11'
-              ],
-              'installedVersion': '1.31.1-r10',
-              'packageName':      'busybox',
-              'purl':             'pkg:apk/alpine/busybox@1.31.1-r10?arch=s390x&distro=3.11.12',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42380',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42380',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42380'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the clrvar()'
-            },
-            {
-              'cve':  'CVE-2021-42381',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the hash_init function",
-              'diffID':        'sha256:2db480cb17a4754fcd3b95c9f905fdbda828e7031a89dcac6e5ac3a668c2fd99',
-              'fixedVersions': [
-                '1.31.1-r11'
-              ],
-              'installedVersion': '1.31.1-r10',
-              'packageName':      'busybox',
-              'purl':             'pkg:apk/alpine/busybox@1.31.1-r10?arch=s390x&distro=3.11.12',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42381',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42381',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42381'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the hash_init()'
-            },
-            {
-              'cve':  'CVE-2021-42382',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the getvar_s function",
-              'diffID':        'sha256:2db480cb17a4754fcd3b95c9f905fdbda828e7031a89dcac6e5ac3a668c2fd99',
-              'fixedVersions': [
-                '1.31.1-r11'
-              ],
-              'installedVersion': '1.31.1-r10',
-              'packageName':      'busybox',
-              'purl':             'pkg:apk/alpine/busybox@1.31.1-r10?arch=s390x&distro=3.11.12',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42382',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42382',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42382'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the getvar_s()'
-            },
-            {
-              'cve':  'CVE-2021-42383',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the evaluate function",
-              'diffID':        'sha256:2db480cb17a4754fcd3b95c9f905fdbda828e7031a89dcac6e5ac3a668c2fd99',
-              'fixedVersions': [
-                '1.31.1-r11'
-              ],
-              'installedVersion': '1.31.1-r10',
-              'packageName':      'busybox',
-              'purl':             'pkg:apk/alpine/busybox@1.31.1-r10?arch=s390x&distro=3.11.12',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42383',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42383',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42383'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the evaluate()'
-            },
-            {
-              'cve':  'CVE-2021-42384',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the handle_special function",
-              'diffID':        'sha256:2db480cb17a4754fcd3b95c9f905fdbda828e7031a89dcac6e5ac3a668c2fd99',
-              'fixedVersions': [
-                '1.31.1-r11'
-              ],
-              'installedVersion': '1.31.1-r10',
-              'packageName':      'busybox',
-              'purl':             'pkg:apk/alpine/busybox@1.31.1-r10?arch=s390x&distro=3.11.12',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42384',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42384',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42384'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the handle_special()'
-            },
-            {
-              'cve':  'CVE-2021-42385',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the evaluate function",
-              'diffID':        'sha256:2db480cb17a4754fcd3b95c9f905fdbda828e7031a89dcac6e5ac3a668c2fd99',
-              'fixedVersions': [
-                '1.31.1-r11'
-              ],
-              'installedVersion': '1.31.1-r10',
-              'packageName':      'busybox',
-              'purl':             'pkg:apk/alpine/busybox@1.31.1-r10?arch=s390x&distro=3.11.12',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42385',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42385',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42385'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the evaluate()'
-            },
-            {
-              'cve':  'CVE-2021-42386',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the nvalloc function",
-              'diffID':        'sha256:2db480cb17a4754fcd3b95c9f905fdbda828e7031a89dcac6e5ac3a668c2fd99',
-              'fixedVersions': [
-                '1.31.1-r11'
-              ],
-              'installedVersion': '1.31.1-r10',
-              'packageName':      'busybox',
-              'purl':             'pkg:apk/alpine/busybox@1.31.1-r10?arch=s390x&distro=3.11.12',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42386',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42386',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42386'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the nvalloc()'
-            },
-            {
-              'cve':  'CVE-2021-42374',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '5.7',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-125'
-              ],
-              'description':   "An out-of-bounds heap read in Busybox's unlzma applet leads to information leak and denial of service when crafted LZMA-compressed input is decompressed. This can be triggered by any applet/format that",
-              'diffID':        'sha256:2db480cb17a4754fcd3b95c9f905fdbda828e7031a89dcac6e5ac3a668c2fd99',
-              'fixedVersions': [
-                '1.31.1-r11'
-              ],
-              'installedVersion': '1.31.1-r10',
-              'packageName':      'busybox',
-              'purl':             'pkg:apk/alpine/busybox@1.31.1-r10?arch=s390x&distro=3.11.12',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42374',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42374',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42374'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'busybox: out-of-bounds read in unlzma applet leads to information leak and denial of service when crafted LZMA-compressed input is decompressed'
-            },
-            {
-              'cve':  'CVE-2021-42378',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the getvar_i function",
-              'diffID':        'sha256:2db480cb17a4754fcd3b95c9f905fdbda828e7031a89dcac6e5ac3a668c2fd99',
-              'fixedVersions': [
-                '1.31.1-r11'
-              ],
-              'installedVersion': '1.31.1-r10',
-              'packageName':      'ssl_client',
-              'purl':             'pkg:apk/alpine/ssl_client@1.31.1-r10?arch=s390x&distro=3.11.12',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42378',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42378',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42378'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the getvar_i()'
-            },
-            {
-              'cve':  'CVE-2021-42379',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the next_input_file function",
-              'diffID':        'sha256:2db480cb17a4754fcd3b95c9f905fdbda828e7031a89dcac6e5ac3a668c2fd99',
-              'fixedVersions': [
-                '1.31.1-r11'
-              ],
-              'installedVersion': '1.31.1-r10',
-              'packageName':      'ssl_client',
-              'purl':             'pkg:apk/alpine/ssl_client@1.31.1-r10?arch=s390x&distro=3.11.12',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42379',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42379',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42379'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the next_input_file()'
-            },
-            {
-              'cve':  'CVE-2021-42380',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the clrvar function",
-              'diffID':        'sha256:2db480cb17a4754fcd3b95c9f905fdbda828e7031a89dcac6e5ac3a668c2fd99',
-              'fixedVersions': [
-                '1.31.1-r11'
-              ],
-              'installedVersion': '1.31.1-r10',
-              'packageName':      'ssl_client',
-              'purl':             'pkg:apk/alpine/ssl_client@1.31.1-r10?arch=s390x&distro=3.11.12',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42380',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42380',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42380'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the clrvar()'
-            },
-            {
-              'cve':  'CVE-2021-42381',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the hash_init function",
-              'diffID':        'sha256:2db480cb17a4754fcd3b95c9f905fdbda828e7031a89dcac6e5ac3a668c2fd99',
-              'fixedVersions': [
-                '1.31.1-r11'
-              ],
-              'installedVersion': '1.31.1-r10',
-              'packageName':      'ssl_client',
-              'purl':             'pkg:apk/alpine/ssl_client@1.31.1-r10?arch=s390x&distro=3.11.12',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42381',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42381',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42381'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the hash_init()'
-            },
-            {
-              'cve':  'CVE-2021-42382',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the getvar_s function",
-              'diffID':        'sha256:2db480cb17a4754fcd3b95c9f905fdbda828e7031a89dcac6e5ac3a668c2fd99',
-              'fixedVersions': [
-                '1.31.1-r11'
-              ],
-              'installedVersion': '1.31.1-r10',
-              'packageName':      'ssl_client',
-              'purl':             'pkg:apk/alpine/ssl_client@1.31.1-r10?arch=s390x&distro=3.11.12',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42382',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42382',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42382'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the getvar_s()'
-            },
-            {
-              'cve':  'CVE-2021-42383',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the evaluate function",
-              'diffID':        'sha256:2db480cb17a4754fcd3b95c9f905fdbda828e7031a89dcac6e5ac3a668c2fd99',
-              'fixedVersions': [
-                '1.31.1-r11'
-              ],
-              'installedVersion': '1.31.1-r10',
-              'packageName':      'ssl_client',
-              'purl':             'pkg:apk/alpine/ssl_client@1.31.1-r10?arch=s390x&distro=3.11.12',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42383',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42383',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42383'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the evaluate()'
-            },
-            {
-              'cve':  'CVE-2021-42384',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the handle_special function",
-              'diffID':        'sha256:2db480cb17a4754fcd3b95c9f905fdbda828e7031a89dcac6e5ac3a668c2fd99',
-              'fixedVersions': [
-                '1.31.1-r11'
-              ],
-              'installedVersion': '1.31.1-r10',
-              'packageName':      'ssl_client',
-              'purl':             'pkg:apk/alpine/ssl_client@1.31.1-r10?arch=s390x&distro=3.11.12',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42384',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42384',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42384'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the handle_special()'
-            },
-            {
-              'cve':  'CVE-2021-42385',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the evaluate function",
-              'diffID':        'sha256:2db480cb17a4754fcd3b95c9f905fdbda828e7031a89dcac6e5ac3a668c2fd99',
-              'fixedVersions': [
-                '1.31.1-r11'
-              ],
-              'installedVersion': '1.31.1-r10',
-              'packageName':      'ssl_client',
-              'purl':             'pkg:apk/alpine/ssl_client@1.31.1-r10?arch=s390x&distro=3.11.12',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42385',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42385',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42385'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the evaluate()'
-            },
-            {
-              'cve':  'CVE-2021-42386',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the nvalloc function",
-              'diffID':        'sha256:2db480cb17a4754fcd3b95c9f905fdbda828e7031a89dcac6e5ac3a668c2fd99',
-              'fixedVersions': [
-                '1.31.1-r11'
-              ],
-              'installedVersion': '1.31.1-r10',
-              'packageName':      'ssl_client',
-              'purl':             'pkg:apk/alpine/ssl_client@1.31.1-r10?arch=s390x&distro=3.11.12',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42386',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42386',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42386'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the nvalloc()'
-            },
-            {
-              'cve':  'CVE-2021-42374',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '5.7',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-125'
-              ],
-              'description':   "An out-of-bounds heap read in Busybox's unlzma applet leads to information leak and denial of service when crafted LZMA-compressed input is decompressed. This can be triggered by any applet/format that",
-              'diffID':        'sha256:2db480cb17a4754fcd3b95c9f905fdbda828e7031a89dcac6e5ac3a668c2fd99',
-              'fixedVersions': [
-                '1.31.1-r11'
-              ],
-              'installedVersion': '1.31.1-r10',
-              'packageName':      'ssl_client',
-              'purl':             'pkg:apk/alpine/ssl_client@1.31.1-r10?arch=s390x&distro=3.11.12',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42374',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42374',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42374'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'busybox: out-of-bounds read in unlzma applet leads to information leak and denial of service when crafted LZMA-compressed input is decompressed'
-            },
-            {
-              'cve':  'CVE-2022-37434',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '9.8',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-787',
-                'CWE-120'
-              ],
-              'description':   'zlib through 1.2.12 has a heap-based buffer over-read or buffer overflow in inflate in inflate.c via a large gzip header extra field. NOTE: only applications that call inflateGetHeader are affected. Some common applications bundle the affected zlib source code but may be unable to call inflateGetHeader (e.g., see the nodejs/node reference).',
-              'diffID':        'sha256:2db480cb17a4754fcd3b95c9f905fdbda828e7031a89dcac6e5ac3a668c2fd99',
-              'fixedVersions': [
-                '1.2.11-r4'
-              ],
-              'installedVersion': '1.2.11-r3',
-              'packageName':      'zlib',
-              'purl':             'pkg:apk/alpine/zlib@1.2.11-r3?arch=s390x&distro=3.11.12',
-              'references':       [
-                'http://seclists.org/fulldisclosure/2022/Oct/37',
-                'http://seclists.org/fulldisclosure/2022/Oct/38',
-                'http://seclists.org/fulldisclosure/2022/Oct/41',
-                'http://seclists.org/fulldisclosure/2022/Oct/42',
-                'http://www.openwall.com/lists/oss-security/2022/08/05/2',
-                'http://www.openwall.com/lists/oss-security/2022/08/09/1',
-                'https://access.redhat.com/errata/RHSA-2022:8291',
-                'https://access.redhat.com/security/cve/CVE-2022-37434',
-                'https://bugzilla.redhat.com/2116639',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2053198',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2077431',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2081296',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2116639',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-37434',
-                'https://errata.almalinux.org/9/ALSA-2022-8291.html',
-                'https://errata.rockylinux.org/RLSA-2022:8291',
-                'https://github.com/curl/curl/issues/9271',
-                'https://github.com/ivd38/zlib_overflow',
-                'https://github.com/madler/zlib/blob/21767c654d31d2dccdde4330529775c6c5fd5389/zlib.h#L1062-L1063',
-                'https://github.com/madler/zlib/commit/1eb7682f845ac9e9bf9ae35bbfb3bad5dacbd91d',
-                'https://github.com/madler/zlib/commit/eff308af425b67093bab25f80f1ae950166bece1',
-                'https://github.com/nodejs/node/blob/75b68c6e4db515f76df73af476eccf382bbcb00a/deps/zlib/inflate.c#L762-L764',
-                'https://linux.oracle.com/cve/CVE-2022-37434.html',
-                'https://linux.oracle.com/errata/ELSA-2023-1095.html',
-                'https://lists.debian.org/debian-lts-announce/2022/09/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JWN4VE3JQR4O2SOUS5TXNLANRPMHWV4I/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NMBOJ77A7T7PQCARMDUK75TE6LLESZ3O/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PAVPQNCG3XRLCLNSQRM3KAN5ZFMVXVTY/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/X5U7OTKZSHY2I3ZFJSR2SHFHW72RKGDK/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YRQAI7H4M4RQZ2IWZUEEXECBE5D56BH2/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2022-37434',
-                'https://security.netapp.com/advisory/ntap-20220901-0005/',
-                'https://security.netapp.com/advisory/ntap-20230427-0007/',
-                'https://support.apple.com/kb/HT213488',
-                'https://support.apple.com/kb/HT213489',
-                'https://support.apple.com/kb/HT213490',
-                'https://support.apple.com/kb/HT213491',
-                'https://support.apple.com/kb/HT213493',
-                'https://support.apple.com/kb/HT213494',
-                'https://ubuntu.com/security/notices/USN-5570-1',
-                'https://ubuntu.com/security/notices/USN-5570-2',
-                'https://ubuntu.com/security/notices/USN-5573-1',
-                'https://ubuntu.com/security/notices/USN-6736-1',
-                'https://ubuntu.com/security/notices/USN-6736-2',
-                'https://www.cve.org/CVERecord?id=CVE-2022-37434',
-                'https://www.debian.org/security/2022/dsa-5218'
-              ],
-              'severity':   'CRITICAL',
-              'suppressed': false,
-              'title':      'zlib: heap-based buffer over-read and overflow in inflate() in inflate.c via a large gzip header extra field'
-            }
-          ]
-        }
-      ],
-      'summary': {
-        'critical':   1,
-        'high':       18,
-        'low':        0,
-        'medium':     2,
-        'suppressed': 0,
-        'unknown':    0
-      }
-    }
-  },
-  {
-    'id':    'default/a6fd8406794abf24154c5ac4f03a88eb941ce4b9815fe0f3432911f4d7521a22',
-    'type':  'storage.sbomscanner.kubewarden.io.vulnerabilityreport',
-    'links': {
-      'patch':  'https://localhost:8005/v1/storage.sbomscanner.kubewarden.io.vulnerabilityreports/default/a6fd8406794abf24154c5ac4f03a88eb941ce4b9815fe0f3432911f4d7521a22',
-      'remove': 'https://localhost:8005/v1/storage.sbomscanner.kubewarden.io.vulnerabilityreports/default/a6fd8406794abf24154c5ac4f03a88eb941ce4b9815fe0f3432911f4d7521a22',
-      'self':   'https://localhost:8005/v1/storage.sbomscanner.kubewarden.io.vulnerabilityreports/default/a6fd8406794abf24154c5ac4f03a88eb941ce4b9815fe0f3432911f4d7521a22',
-      'update': 'https://localhost:8005/v1/storage.sbomscanner.kubewarden.io.vulnerabilityreports/default/a6fd8406794abf24154c5ac4f03a88eb941ce4b9815fe0f3432911f4d7521a22',
-      'view':   'https://localhost:8005/apis/storage.sbomscanner.kubewarden.io/v1alpha1/namespaces/default/vulnerabilityreports/a6fd8406794abf24154c5ac4f03a88eb941ce4b9815fe0f3432911f4d7521a22'
-    },
-    'apiVersion':    'storage.sbomscanner.kubewarden.io/v1alpha1',
-    'imageMetadata': {
-      'digest':      'sha256:9ed53fd3b83120f78b33685d930ce9bf5aa481f6e2d165c42cbbddbeaa196f6f',
-      'platform':    'linux/ppc64le',
-      'registry':    'lsong-demo1',
-      'registryURI': 'registry-1.docker.io',
-      'repository':  'library/alpine',
-      'tag':         '3.21.3'
-    },
-    'kind':     'VulnerabilityReport',
-    'metadata': {
-      'creationTimestamp': '2026-01-14T18:51:44Z',
-      'fields':            [
-        'a6fd8406794abf24154c5ac4f03a88eb941ce4b9815fe0f3432911f4d7521a22',
-        'registry-1.docker.io/library/alpine:3.21.3',
-        'linux/ppc64le',
-        '12 (0 suppressed)'
-      ],
-      'labels': {
-        'app.kubernetes.io/managed-by':          'sbomscanner',
-        'app.kubernetes.io/part-of':             'sbomscanner',
-        'sbomscanner.kubewarden.io/scanjob-uid': '445c600a-c4b6-40b3-bd71-f2d2140a37d5'
-      },
-      'name':            'a6fd8406794abf24154c5ac4f03a88eb941ce4b9815fe0f3432911f4d7521a22',
-      'namespace':       'default',
-      'ownerReferences': [
-        {
-          'apiVersion':         'storage.sbomscanner.kubewarden.io/v1alpha1',
-          'blockOwnerDeletion': true,
-          'controller':         true,
-          'kind':               'SBOM',
-          'name':               'a6fd8406794abf24154c5ac4f03a88eb941ce4b9815fe0f3432911f4d7521a22',
-          'uid':                'd78588d2-e04a-419c-9164-592d8a40df33'
-        }
-      ],
-      'relationships': [
-        {
-          'fromId':   'default/a6fd8406794abf24154c5ac4f03a88eb941ce4b9815fe0f3432911f4d7521a22',
-          'fromType': 'storage.sbomscanner.kubewarden.io.sbom',
-          'rel':      'owner',
-          'state':    'active',
-          'message':  'Resource is current'
-        }
-      ],
-      'resourceVersion': '1',
-      'state':           {
-        'error':         false,
-        'message':       'Resource is current',
-        'name':          'active',
-        'transitioning': false
-      },
-      'uid': '1c5ccf45-1d81-4c35-b7d4-a25b451efd8a'
-    },
-    'report': {
-      'results': [
-        {
-          'class':           'os-pkgs',
-          'target':          '/var/run/worker/trivy.sbom.2263341740.json (alpine 3.21.3)',
-          'type':            'alpine',
-          'vulnerabilities': [
-            {
-              'cve':  'CVE-2024-58251',
-              'cwes': [
-                'CWE-150'
-              ],
-              'description':   'In netstat in BusyBox through 1.37.0, local users can launch of network application with an argv[0] containing an ANSI terminal escape sequence, leading to a denial of service (terminal locked up) when netstat is used by a victim.',
-              'diffID':        'sha256:b2a4b097c0193fdb15fb83aeef42ab730ce78dc155b8545b5f4d1ee958bc30d4',
-              'fixedVersions': [
-                '1.37.0-r14'
-              ],
-              'installedVersion': '1.37.0-r12',
-              'packageName':      'busybox',
-              'purl':             'pkg:apk/alpine/busybox@1.37.0-r12?arch=ppc64le&distro=3.21.3',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2025/04/23/6',
-                'https://bugs.busybox.net/show_bug.cgi?id=15922',
-                'https://www.busybox.net',
-                'https://www.busybox.net/downloads/',
-                'https://www.cve.org/CVERecord?id=CVE-2024-58251'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'In netstat in BusyBox through 1.37.0, local users can launch of networ ...'
-            },
-            {
-              'cve':  'CVE-2025-46394',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '3.3',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-451'
-              ],
-              'description':   'In tar in BusyBox through 1.37.0, a TAR archive can have filenames hidden from a listing through the use of terminal escape sequences.',
-              'diffID':        'sha256:b2a4b097c0193fdb15fb83aeef42ab730ce78dc155b8545b5f4d1ee958bc30d4',
-              'fixedVersions': [
-                '1.37.0-r14'
-              ],
-              'installedVersion': '1.37.0-r12',
-              'packageName':      'busybox',
-              'purl':             'pkg:apk/alpine/busybox@1.37.0-r12?arch=ppc64le&distro=3.21.3',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2025/04/23/5',
-                'http://www.openwall.com/lists/oss-security/2025/04/24/3',
-                'https://bugs.busybox.net/show_bug.cgi?id=16018',
-                'https://lists.busybox.net/pipermail/busybox/2024-July/090806.html',
-                'https://lists.busybox.net/pipermail/busybox/2024-July/090814.html',
-                'https://www.busybox.net',
-                'https://www.busybox.net/downloads/',
-                'https://www.cve.org/CVERecord?id=CVE-2025-46394',
-                'https://www.openwall.com/lists/oss-security/2025/04/23/1'
-              ],
-              'severity':   'LOW',
-              'suppressed': false,
-              'title':      'In tar in BusyBox through 1.37.0, a TAR archive can have filenames hid ...'
-            },
-            {
-              'cve':  'CVE-2024-58251',
-              'cwes': [
-                'CWE-150'
-              ],
-              'description':   'In netstat in BusyBox through 1.37.0, local users can launch of network application with an argv[0] containing an ANSI terminal escape sequence, leading to a denial of service (terminal locked up) when netstat is used by a victim.',
-              'diffID':        'sha256:b2a4b097c0193fdb15fb83aeef42ab730ce78dc155b8545b5f4d1ee958bc30d4',
-              'fixedVersions': [
-                '1.37.0-r14'
-              ],
-              'installedVersion': '1.37.0-r12',
-              'packageName':      'busybox-binsh',
-              'purl':             'pkg:apk/alpine/busybox-binsh@1.37.0-r12?arch=ppc64le&distro=3.21.3',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2025/04/23/6',
-                'https://bugs.busybox.net/show_bug.cgi?id=15922',
-                'https://www.busybox.net',
-                'https://www.busybox.net/downloads/',
-                'https://www.cve.org/CVERecord?id=CVE-2024-58251'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'In netstat in BusyBox through 1.37.0, local users can launch of networ ...'
-            },
-            {
-              'cve':  'CVE-2025-46394',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '3.3',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-451'
-              ],
-              'description':   'In tar in BusyBox through 1.37.0, a TAR archive can have filenames hidden from a listing through the use of terminal escape sequences.',
-              'diffID':        'sha256:b2a4b097c0193fdb15fb83aeef42ab730ce78dc155b8545b5f4d1ee958bc30d4',
-              'fixedVersions': [
-                '1.37.0-r14'
-              ],
-              'installedVersion': '1.37.0-r12',
-              'packageName':      'busybox-binsh',
-              'purl':             'pkg:apk/alpine/busybox-binsh@1.37.0-r12?arch=ppc64le&distro=3.21.3',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2025/04/23/5',
-                'http://www.openwall.com/lists/oss-security/2025/04/24/3',
-                'https://bugs.busybox.net/show_bug.cgi?id=16018',
-                'https://lists.busybox.net/pipermail/busybox/2024-July/090806.html',
-                'https://lists.busybox.net/pipermail/busybox/2024-July/090814.html',
-                'https://www.busybox.net',
-                'https://www.busybox.net/downloads/',
-                'https://www.cve.org/CVERecord?id=CVE-2025-46394',
-                'https://www.openwall.com/lists/oss-security/2025/04/23/1'
-              ],
-              'severity':   'LOW',
-              'suppressed': false,
-              'title':      'In tar in BusyBox through 1.37.0, a TAR archive can have filenames hid ...'
-            },
-            {
-              'cve':  'CVE-2025-9230',
-              'cvss': {
-                'redhat': {
-                  'v3score':  '5.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L'
-                }
-              },
-              'cwes': [
-                'CWE-125',
-                'CWE-787'
-              ],
-              'description':   'Issue summary: An application trying to decrypt CMS messages encrypted using\npassword based encryption can trigger an out-of-bounds read and write.\n\nImpact summary: This out-of-bounds read may trigger a crash which leads to\nDenial of Service for an application. The out-of-bounds write can cause\na memory corruption which can have various consequences including\na Denial of Service or Execution of attacker-supplied code.\n\nAlthough the consequences of a successful exploit of this vulnerability\ncould be severe, the probability that the attacker would be able to\nperform it is low. Besides, password based (PWRI) encryption support in CMS\nmessages is very rarely used. For that reason the issue was assessed as\nModerate severity according to our Security Policy.\n\nThe FIPS modules in 3.5, 3.4, 3.3, 3.2, 3.1 and 3.0 are not affected by this\nissue, as the CMS implementation is outside the OpenSSL FIPS module\nboundary.',
-              'diffID':        'sha256:b2a4b097c0193fdb15fb83aeef42ab730ce78dc155b8545b5f4d1ee958bc30d4',
-              'fixedVersions': [
-                '3.3.5-r0'
-              ],
-              'installedVersion': '3.3.3-r0',
-              'packageName':      'libcrypto3',
-              'purl':             'pkg:apk/alpine/libcrypto3@3.3.3-r0?arch=ppc64le&distro=3.21.3',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2025/09/30/5',
-                'https://access.redhat.com/errata/RHSA-2025:21255',
-                'https://access.redhat.com/security/cve/CVE-2025-9230',
-                'https://bugzilla.redhat.com/2396054',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2396054',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-9230',
-                'https://errata.almalinux.org/9/ALSA-2025-21255.html',
-                'https://errata.rockylinux.org/RLSA-2025:21255',
-                'https://github.com/openssl/openssl/commit/5965ea5dd6960f36d8b7f74f8eac67a8eb8f2b45',
-                'https://github.com/openssl/openssl/commit/9e91358f365dee6c446dcdcdb01c04d2743fd280',
-                'https://github.com/openssl/openssl/commit/a79c4ce559c6a3a8fd4109e9f33c1185d5bf2def',
-                'https://github.com/openssl/openssl/commit/b5282d677551afda7d20e9c00e09561b547b2dfd',
-                'https://github.com/openssl/openssl/commit/bae259a211ada6315dc50900686daaaaaa55f482',
-                'https://github.openssl.org/openssl/extended-releases/commit/c2b96348bfa662f25f4fabf81958ae822063dae3',
-                'https://github.openssl.org/openssl/extended-releases/commit/dfbaf161d8dafc1132dd88cd48ad990ed9b4c8ba',
-                'https://linux.oracle.com/cve/CVE-2025-9230.html',
-                'https://linux.oracle.com/errata/ELSA-2026-0337.html',
-                'https://lists.debian.org/debian-lts-announce/2025/10/msg00001.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2025-9230',
-                'https://openssl-library.org/news/secadv/20250930.txt',
-                'https://ubuntu.com/security/notices/USN-7786-1',
-                'https://www.cve.org/CVERecord?id=CVE-2025-9230'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: Out-of-bounds read & write in RFC 3211 KEK Unwrap'
-            },
-            {
-              'cve':  'CVE-2025-9231',
-              'cvss': {
-                'redhat': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-385'
-              ],
-              'description':   'Issue summary: A timing side-channel which could potentially allow remote\nrecovery of the private key exists in the SM2 algorithm implementation on 64 bit\nARM platforms.\n\nImpact summary: A timing side-channel in SM2 signature computations on 64 bit\nARM platforms could allow recovering the private key by an attacker..\n\nWhile remote key recovery over a network was not attempted by the reporter,\ntiming measurements revealed a timing signal which may allow such an attack.\n\nOpenSSL does not directly support certificates with SM2 keys in TLS, and so\nthis CVE is not relevant in most TLS contexts.  However, given that it is\npossible to add support for such certificates via a custom provider, coupled\nwith the fact that in such a custom provider context the private key may be\nrecoverable via remote timing measurements, we consider this to be a Moderate\nseverity issue.\n\nThe FIPS modules in 3.5, 3.4, 3.3, 3.2, 3.1 and 3.0 are not affected by this\nissue, as SM2 is not an approved algorithm.',
-              'diffID':        'sha256:b2a4b097c0193fdb15fb83aeef42ab730ce78dc155b8545b5f4d1ee958bc30d4',
-              'fixedVersions': [
-                '3.3.5-r0'
-              ],
-              'installedVersion': '3.3.3-r0',
-              'packageName':      'libcrypto3',
-              'purl':             'pkg:apk/alpine/libcrypto3@3.3.3-r0?arch=ppc64le&distro=3.21.3',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2025/09/30/5',
-                'https://access.redhat.com/security/cve/CVE-2025-9231',
-                'https://github.com/openssl/openssl/commit/567f64386e43683888212226824b6a179885a0fe',
-                'https://github.com/openssl/openssl/commit/cba616c26ac8e7b37de5e77762e505ba5ca51698',
-                'https://github.com/openssl/openssl/commit/eed5adc9f969d77c94f213767acbb41ff923b6f4',
-                'https://github.com/openssl/openssl/commit/fc47a2ec078912b3e914fab5734535e76c4820c2',
-                'https://nvd.nist.gov/vuln/detail/CVE-2025-9231',
-                'https://openssl-library.org/news/secadv/20250930.txt',
-                'https://ubuntu.com/security/notices/USN-7786-1',
-                'https://www.cve.org/CVERecord?id=CVE-2025-9231'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: Timing side-channel in SM2 algorithm on 64 bit ARM'
-            },
-            {
-              'cve':  'CVE-2025-9232',
-              'cvss': {
-                'redhat': {
-                  'v3score':  '3.1',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L'
-                }
-              },
-              'cwes': [
-                'CWE-125'
-              ],
-              'description':   "Issue summary: An application using the OpenSSL HTTP client API functions may\ntrigger an out-of-bounds read if the 'no_proxy' environment variable is set and\nthe host portion of the authority component of the HTTP URL is an IPv6 address.\n\nImpact summary: An out-of-bounds read can trigger a crash which leads to\nDenial of Service for an application.\n\nThe OpenSSL HTTP client API functions can be used directly by applications\nbut they are also used by the OCSP client functions and CMP (Certificate\nManagement Protocol) client implementation in OpenSSL. However the URLs used\nby these implementations are unlikely to be controlled by an attacker.\n\nIn this vulnerable code the out of bounds read can only trigger a crash.\nFurthermore the vulnerability requires an attacker-controlled URL to be\npassed from an application to the OpenSSL function and the user has to have\na 'no_proxy' environment variable set. For the aforementioned reasons the\nissue was assessed as Low severity.\n\nThe vulnerable code was introduced in the following patch releases:\n3.0.16, 3.1.8, 3.2.4, 3.3.3, 3.4.0 and 3.5.0.\n\nThe FIPS modules in 3.5, 3.4, 3.3, 3.2, 3.1 and 3.0 are not affected by this\nissue, as the HTTP client implementation is outside the OpenSSL FIPS module\nboundary.",
-              'diffID':        'sha256:b2a4b097c0193fdb15fb83aeef42ab730ce78dc155b8545b5f4d1ee958bc30d4',
-              'fixedVersions': [
-                '3.3.5-r0'
-              ],
-              'installedVersion': '3.3.3-r0',
-              'packageName':      'libcrypto3',
-              'purl':             'pkg:apk/alpine/libcrypto3@3.3.3-r0?arch=ppc64le&distro=3.21.3',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2025/09/30/5',
-                'https://access.redhat.com/security/cve/CVE-2025-9232',
-                'https://github.com/openssl/openssl/commit/2b4ec20e47959170422922eaff25346d362dcb35',
-                'https://github.com/openssl/openssl/commit/654dc11d23468a74fc8ea4672b702dd3feb7be4b',
-                'https://github.com/openssl/openssl/commit/7cf21a30513c9e43c4bc3836c237cf086e194af3',
-                'https://github.com/openssl/openssl/commit/89e790ac431125a4849992858490bed6b225eadf',
-                'https://github.com/openssl/openssl/commit/bbf38c034cdabd0a13330abcc4855c866f53d2e0',
-                'https://nvd.nist.gov/vuln/detail/CVE-2025-9232',
-                'https://openssl-library.org/news/secadv/20250930.txt',
-                'https://ubuntu.com/security/notices/USN-7786-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2025-9232'
-              ],
-              'severity':   'LOW',
-              'suppressed': false,
-              'title':      'openssl: Out-of-bounds read in HTTP client no_proxy handling'
-            },
-            {
-              'cve':  'CVE-2025-9230',
-              'cvss': {
-                'redhat': {
-                  'v3score':  '5.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L'
-                }
-              },
-              'cwes': [
-                'CWE-125',
-                'CWE-787'
-              ],
-              'description':   'Issue summary: An application trying to decrypt CMS messages encrypted using\npassword based encryption can trigger an out-of-bounds read and write.\n\nImpact summary: This out-of-bounds read may trigger a crash which leads to\nDenial of Service for an application. The out-of-bounds write can cause\na memory corruption which can have various consequences including\na Denial of Service or Execution of attacker-supplied code.\n\nAlthough the consequences of a successful exploit of this vulnerability\ncould be severe, the probability that the attacker would be able to\nperform it is low. Besides, password based (PWRI) encryption support in CMS\nmessages is very rarely used. For that reason the issue was assessed as\nModerate severity according to our Security Policy.\n\nThe FIPS modules in 3.5, 3.4, 3.3, 3.2, 3.1 and 3.0 are not affected by this\nissue, as the CMS implementation is outside the OpenSSL FIPS module\nboundary.',
-              'diffID':        'sha256:b2a4b097c0193fdb15fb83aeef42ab730ce78dc155b8545b5f4d1ee958bc30d4',
-              'fixedVersions': [
-                '3.3.5-r0'
-              ],
-              'installedVersion': '3.3.3-r0',
-              'packageName':      'libssl3',
-              'purl':             'pkg:apk/alpine/libssl3@3.3.3-r0?arch=ppc64le&distro=3.21.3',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2025/09/30/5',
-                'https://access.redhat.com/errata/RHSA-2025:21255',
-                'https://access.redhat.com/security/cve/CVE-2025-9230',
-                'https://bugzilla.redhat.com/2396054',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2396054',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-9230',
-                'https://errata.almalinux.org/9/ALSA-2025-21255.html',
-                'https://errata.rockylinux.org/RLSA-2025:21255',
-                'https://github.com/openssl/openssl/commit/5965ea5dd6960f36d8b7f74f8eac67a8eb8f2b45',
-                'https://github.com/openssl/openssl/commit/9e91358f365dee6c446dcdcdb01c04d2743fd280',
-                'https://github.com/openssl/openssl/commit/a79c4ce559c6a3a8fd4109e9f33c1185d5bf2def',
-                'https://github.com/openssl/openssl/commit/b5282d677551afda7d20e9c00e09561b547b2dfd',
-                'https://github.com/openssl/openssl/commit/bae259a211ada6315dc50900686daaaaaa55f482',
-                'https://github.openssl.org/openssl/extended-releases/commit/c2b96348bfa662f25f4fabf81958ae822063dae3',
-                'https://github.openssl.org/openssl/extended-releases/commit/dfbaf161d8dafc1132dd88cd48ad990ed9b4c8ba',
-                'https://linux.oracle.com/cve/CVE-2025-9230.html',
-                'https://linux.oracle.com/errata/ELSA-2026-0337.html',
-                'https://lists.debian.org/debian-lts-announce/2025/10/msg00001.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2025-9230',
-                'https://openssl-library.org/news/secadv/20250930.txt',
-                'https://ubuntu.com/security/notices/USN-7786-1',
-                'https://www.cve.org/CVERecord?id=CVE-2025-9230'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: Out-of-bounds read & write in RFC 3211 KEK Unwrap'
-            },
-            {
-              'cve':  'CVE-2025-9231',
-              'cvss': {
-                'redhat': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-385'
-              ],
-              'description':   'Issue summary: A timing side-channel which could potentially allow remote\nrecovery of the private key exists in the SM2 algorithm implementation on 64 bit\nARM platforms.\n\nImpact summary: A timing side-channel in SM2 signature computations on 64 bit\nARM platforms could allow recovering the private key by an attacker..\n\nWhile remote key recovery over a network was not attempted by the reporter,\ntiming measurements revealed a timing signal which may allow such an attack.\n\nOpenSSL does not directly support certificates with SM2 keys in TLS, and so\nthis CVE is not relevant in most TLS contexts.  However, given that it is\npossible to add support for such certificates via a custom provider, coupled\nwith the fact that in such a custom provider context the private key may be\nrecoverable via remote timing measurements, we consider this to be a Moderate\nseverity issue.\n\nThe FIPS modules in 3.5, 3.4, 3.3, 3.2, 3.1 and 3.0 are not affected by this\nissue, as SM2 is not an approved algorithm.',
-              'diffID':        'sha256:b2a4b097c0193fdb15fb83aeef42ab730ce78dc155b8545b5f4d1ee958bc30d4',
-              'fixedVersions': [
-                '3.3.5-r0'
-              ],
-              'installedVersion': '3.3.3-r0',
-              'packageName':      'libssl3',
-              'purl':             'pkg:apk/alpine/libssl3@3.3.3-r0?arch=ppc64le&distro=3.21.3',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2025/09/30/5',
-                'https://access.redhat.com/security/cve/CVE-2025-9231',
-                'https://github.com/openssl/openssl/commit/567f64386e43683888212226824b6a179885a0fe',
-                'https://github.com/openssl/openssl/commit/cba616c26ac8e7b37de5e77762e505ba5ca51698',
-                'https://github.com/openssl/openssl/commit/eed5adc9f969d77c94f213767acbb41ff923b6f4',
-                'https://github.com/openssl/openssl/commit/fc47a2ec078912b3e914fab5734535e76c4820c2',
-                'https://nvd.nist.gov/vuln/detail/CVE-2025-9231',
-                'https://openssl-library.org/news/secadv/20250930.txt',
-                'https://ubuntu.com/security/notices/USN-7786-1',
-                'https://www.cve.org/CVERecord?id=CVE-2025-9231'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: Timing side-channel in SM2 algorithm on 64 bit ARM'
-            },
-            {
-              'cve':  'CVE-2025-9232',
-              'cvss': {
-                'redhat': {
-                  'v3score':  '3.1',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L'
-                }
-              },
-              'cwes': [
-                'CWE-125'
-              ],
-              'description':   "Issue summary: An application using the OpenSSL HTTP client API functions may\ntrigger an out-of-bounds read if the 'no_proxy' environment variable is set and\nthe host portion of the authority component of the HTTP URL is an IPv6 address.\n\nImpact summary: An out-of-bounds read can trigger a crash which leads to\nDenial of Service for an application.\n\nThe OpenSSL HTTP client API functions can be used directly by applications\nbut they are also used by the OCSP client functions and CMP (Certificate\nManagement Protocol) client implementation in OpenSSL. However the URLs used\nby these implementations are unlikely to be controlled by an attacker.\n\nIn this vulnerable code the out of bounds read can only trigger a crash.\nFurthermore the vulnerability requires an attacker-controlled URL to be\npassed from an application to the OpenSSL function and the user has to have\na 'no_proxy' environment variable set. For the aforementioned reasons the\nissue was assessed as Low severity.\n\nThe vulnerable code was introduced in the following patch releases:\n3.0.16, 3.1.8, 3.2.4, 3.3.3, 3.4.0 and 3.5.0.\n\nThe FIPS modules in 3.5, 3.4, 3.3, 3.2, 3.1 and 3.0 are not affected by this\nissue, as the HTTP client implementation is outside the OpenSSL FIPS module\nboundary.",
-              'diffID':        'sha256:b2a4b097c0193fdb15fb83aeef42ab730ce78dc155b8545b5f4d1ee958bc30d4',
-              'fixedVersions': [
-                '3.3.5-r0'
-              ],
-              'installedVersion': '3.3.3-r0',
-              'packageName':      'libssl3',
-              'purl':             'pkg:apk/alpine/libssl3@3.3.3-r0?arch=ppc64le&distro=3.21.3',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2025/09/30/5',
-                'https://access.redhat.com/security/cve/CVE-2025-9232',
-                'https://github.com/openssl/openssl/commit/2b4ec20e47959170422922eaff25346d362dcb35',
-                'https://github.com/openssl/openssl/commit/654dc11d23468a74fc8ea4672b702dd3feb7be4b',
-                'https://github.com/openssl/openssl/commit/7cf21a30513c9e43c4bc3836c237cf086e194af3',
-                'https://github.com/openssl/openssl/commit/89e790ac431125a4849992858490bed6b225eadf',
-                'https://github.com/openssl/openssl/commit/bbf38c034cdabd0a13330abcc4855c866f53d2e0',
-                'https://nvd.nist.gov/vuln/detail/CVE-2025-9232',
-                'https://openssl-library.org/news/secadv/20250930.txt',
-                'https://ubuntu.com/security/notices/USN-7786-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2025-9232'
-              ],
-              'severity':   'LOW',
-              'suppressed': false,
-              'title':      'openssl: Out-of-bounds read in HTTP client no_proxy handling'
-            },
-            {
-              'cve':  'CVE-2024-58251',
-              'cwes': [
-                'CWE-150'
-              ],
-              'description':   'In netstat in BusyBox through 1.37.0, local users can launch of network application with an argv[0] containing an ANSI terminal escape sequence, leading to a denial of service (terminal locked up) when netstat is used by a victim.',
-              'diffID':        'sha256:b2a4b097c0193fdb15fb83aeef42ab730ce78dc155b8545b5f4d1ee958bc30d4',
-              'fixedVersions': [
-                '1.37.0-r14'
-              ],
-              'installedVersion': '1.37.0-r12',
-              'packageName':      'ssl_client',
-              'purl':             'pkg:apk/alpine/ssl_client@1.37.0-r12?arch=ppc64le&distro=3.21.3',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2025/04/23/6',
-                'https://bugs.busybox.net/show_bug.cgi?id=15922',
-                'https://www.busybox.net',
-                'https://www.busybox.net/downloads/',
-                'https://www.cve.org/CVERecord?id=CVE-2024-58251'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'In netstat in BusyBox through 1.37.0, local users can launch of networ ...'
-            },
-            {
-              'cve':  'CVE-2025-46394',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '3.3',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-451'
-              ],
-              'description':   'In tar in BusyBox through 1.37.0, a TAR archive can have filenames hidden from a listing through the use of terminal escape sequences.',
-              'diffID':        'sha256:b2a4b097c0193fdb15fb83aeef42ab730ce78dc155b8545b5f4d1ee958bc30d4',
-              'fixedVersions': [
-                '1.37.0-r14'
-              ],
-              'installedVersion': '1.37.0-r12',
-              'packageName':      'ssl_client',
-              'purl':             'pkg:apk/alpine/ssl_client@1.37.0-r12?arch=ppc64le&distro=3.21.3',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2025/04/23/5',
-                'http://www.openwall.com/lists/oss-security/2025/04/24/3',
-                'https://bugs.busybox.net/show_bug.cgi?id=16018',
-                'https://lists.busybox.net/pipermail/busybox/2024-July/090806.html',
-                'https://lists.busybox.net/pipermail/busybox/2024-July/090814.html',
-                'https://www.busybox.net',
-                'https://www.busybox.net/downloads/',
-                'https://www.cve.org/CVERecord?id=CVE-2025-46394',
-                'https://www.openwall.com/lists/oss-security/2025/04/23/1'
-              ],
-              'severity':   'LOW',
-              'suppressed': false,
-              'title':      'In tar in BusyBox through 1.37.0, a TAR archive can have filenames hid ...'
-            }
-          ]
-        }
-      ],
-      'summary': {
-        'critical':   0,
-        'high':       0,
-        'low':        5,
-        'medium':     7,
-        'suppressed': 0,
-        'unknown':    0
-      }
-    }
-  },
-  {
-    'id':    'default/a822742e8f05dd4b0f8b265e9b3edcf0834ee1a15cfebf85843eed8066c3b517',
-    'type':  'storage.sbomscanner.kubewarden.io.vulnerabilityreport',
-    'links': {
-      'patch':  'https://localhost:8005/v1/storage.sbomscanner.kubewarden.io.vulnerabilityreports/default/a822742e8f05dd4b0f8b265e9b3edcf0834ee1a15cfebf85843eed8066c3b517',
-      'remove': 'https://localhost:8005/v1/storage.sbomscanner.kubewarden.io.vulnerabilityreports/default/a822742e8f05dd4b0f8b265e9b3edcf0834ee1a15cfebf85843eed8066c3b517',
-      'self':   'https://localhost:8005/v1/storage.sbomscanner.kubewarden.io.vulnerabilityreports/default/a822742e8f05dd4b0f8b265e9b3edcf0834ee1a15cfebf85843eed8066c3b517',
-      'update': 'https://localhost:8005/v1/storage.sbomscanner.kubewarden.io.vulnerabilityreports/default/a822742e8f05dd4b0f8b265e9b3edcf0834ee1a15cfebf85843eed8066c3b517',
-      'view':   'https://localhost:8005/apis/storage.sbomscanner.kubewarden.io/v1alpha1/namespaces/default/vulnerabilityreports/a822742e8f05dd4b0f8b265e9b3edcf0834ee1a15cfebf85843eed8066c3b517'
-    },
-    'apiVersion':    'storage.sbomscanner.kubewarden.io/v1alpha1',
-    'imageMetadata': {
-      'digest':      'sha256:644a9af8e7c8df0984839835cd6638e14861caf5f231adf0f63f9e05dfa9864f',
-      'platform':    'linux/amd64',
-      'registry':    'demo-02',
-      'registryURI': 'ghcr.io',
-      'repository':  'linuxcontainers/alpine',
-      'tag':         '3.17.2'
-    },
-    'kind':     'VulnerabilityReport',
-    'metadata': {
-      'creationTimestamp': '2026-01-09T22:47:05Z',
-      'fields':            [
-        'a822742e8f05dd4b0f8b265e9b3edcf0834ee1a15cfebf85843eed8066c3b517',
-        'ghcr.io/linuxcontainers/alpine:3.17.2',
-        'linux/amd64',
-        '46 (0 suppressed)'
-      ],
-      'labels': {
-        'app.kubernetes.io/managed-by':          'sbomscanner',
-        'app.kubernetes.io/part-of':             'sbomscanner',
-        'sbomscanner.kubewarden.io/scanjob-uid': '42184d01-4b15-466f-98aa-e802d1b6b6b8'
-      },
-      'name':            'a822742e8f05dd4b0f8b265e9b3edcf0834ee1a15cfebf85843eed8066c3b517',
-      'namespace':       'default',
-      'ownerReferences': [
-        {
-          'apiVersion':         'storage.sbomscanner.kubewarden.io/v1alpha1',
-          'blockOwnerDeletion': true,
-          'controller':         true,
-          'kind':               'SBOM',
-          'name':               'a822742e8f05dd4b0f8b265e9b3edcf0834ee1a15cfebf85843eed8066c3b517',
-          'uid':                '6232db47-61a2-40b5-9016-ec5ada24191a'
-        }
-      ],
-      'relationships': [
-        {
-          'fromId':   'default/a822742e8f05dd4b0f8b265e9b3edcf0834ee1a15cfebf85843eed8066c3b517',
-          'fromType': 'storage.sbomscanner.kubewarden.io.sbom',
-          'rel':      'owner',
-          'state':    'active',
-          'message':  'Resource is current'
-        }
-      ],
-      'resourceVersion': '7',
-      'state':           {
-        'error':         false,
-        'message':       'Resource is current',
-        'name':          'active',
-        'transitioning': false
-      },
-      'uid': '56ad63d5-47f9-4d86-ba7d-c18bd659b7e8'
-    },
-    'report': {
-      'results': [
-        {
-          'class':           'os-pkgs',
-          'target':          '/var/run/worker/trivy.sbom.2242605210.json (alpine 3.17.2)',
-          'type':            'alpine',
-          'vulnerabilities': [
-            {
-              'cve':  'CVE-2023-42363',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.5',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.8',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   'A use-after-free vulnerability was discovered in xasprintf function in xfuncs_printf.c:344 in BusyBox v.1.36.1.',
-              'diffID':        'sha256:7cd52847ad775a5ddc4b58326cf884beee34544296402c6292ed76474c686d39',
-              'fixedVersions': [
-                '1.35.0-r31'
-              ],
-              'installedVersion': '1.35.0-r29',
-              'packageName':      'busybox',
-              'purl':             'pkg:apk/alpine/busybox@1.35.0-r29?arch=x86_64&distro=3.17.2',
-              'references':       [
-                'http://lists.busybox.net/pipermail/busybox/2024-May/090760.html',
-                'https://access.redhat.com/security/cve/CVE-2023-42363',
-                'https://bugs.busybox.net/show_bug.cgi?id=15865',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-42363',
-                'https://ubuntu.com/security/notices/USN-6961-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-42363'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk'
-            },
-            {
-              'cve':  'CVE-2023-42364',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.5',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.8',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   'A use-after-free vulnerability in BusyBox v.1.36.1 allows attackers to cause a denial of service via a crafted awk pattern in the awk.c evaluate function.',
-              'diffID':        'sha256:7cd52847ad775a5ddc4b58326cf884beee34544296402c6292ed76474c686d39',
-              'fixedVersions': [
-                '1.35.0-r31'
-              ],
-              'installedVersion': '1.35.0-r29',
-              'packageName':      'busybox',
-              'purl':             'pkg:apk/alpine/busybox@1.35.0-r29?arch=x86_64&distro=3.17.2',
-              'references':       [
-                'http://lists.busybox.net/pipermail/busybox/2024-May/090762.html',
-                'https://access.redhat.com/security/cve/CVE-2023-42364',
-                'https://bugs.busybox.net/show_bug.cgi?id=15868',
-                'https://gitlab.alpinelinux.org/alpine/aports/-/blob/master/main/busybox/CVE-2023-42364-CVE-2023-42365.patch',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-42364',
-                'https://ubuntu.com/security/notices/USN-6961-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-42364'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'busybox: use-after-free'
-            },
-            {
-              'cve':  'CVE-2023-42365',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.5',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.8',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   'A use-after-free vulnerability was discovered in BusyBox v.1.36.1 via a crafted awk pattern in the awk.c copyvar function.',
-              'diffID':        'sha256:7cd52847ad775a5ddc4b58326cf884beee34544296402c6292ed76474c686d39',
-              'fixedVersions': [
-                '1.35.0-r31'
-              ],
-              'installedVersion': '1.35.0-r29',
-              'packageName':      'busybox',
-              'purl':             'pkg:apk/alpine/busybox@1.35.0-r29?arch=x86_64&distro=3.17.2',
-              'references':       [
-                'http://lists.busybox.net/pipermail/busybox/2024-May/090762.html',
-                'https://access.redhat.com/security/cve/CVE-2023-42365',
-                'https://bugs.busybox.net/show_bug.cgi?id=15871',
-                'https://gitlab.alpinelinux.org/alpine/aports/-/blob/master/main/busybox/CVE-2023-42364-CVE-2023-42365.patch',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-42365',
-                'https://ubuntu.com/security/notices/USN-6961-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-42365'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'busybox: use-after-free'
-            },
-            {
-              'cve':  'CVE-2023-42366',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.5',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.1',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-787'
-              ],
-              'description':   'A heap-buffer-overflow was discovered in BusyBox v.1.36.1 in the next_token function at awk.c:1159.',
-              'diffID':        'sha256:7cd52847ad775a5ddc4b58326cf884beee34544296402c6292ed76474c686d39',
-              'fixedVersions': [
-                '1.35.0-r30'
-              ],
-              'installedVersion': '1.35.0-r29',
-              'packageName':      'busybox',
-              'purl':             'pkg:apk/alpine/busybox@1.35.0-r29?arch=x86_64&distro=3.17.2',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2023-42366',
-                'https://bugs.busybox.net/show_bug.cgi?id=15874',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-42366',
-                'https://security.netapp.com/advisory/ntap-20241206-0007/',
-                'https://www.cve.org/CVERecord?id=CVE-2023-42366'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'busybox: A heap-buffer-overflow'
-            },
-            {
-              'cve':  'CVE-2023-42363',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.5',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.8',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   'A use-after-free vulnerability was discovered in xasprintf function in xfuncs_printf.c:344 in BusyBox v.1.36.1.',
-              'diffID':        'sha256:7cd52847ad775a5ddc4b58326cf884beee34544296402c6292ed76474c686d39',
-              'fixedVersions': [
-                '1.35.0-r31'
-              ],
-              'installedVersion': '1.35.0-r29',
-              'packageName':      'busybox-binsh',
-              'purl':             'pkg:apk/alpine/busybox-binsh@1.35.0-r29?arch=x86_64&distro=3.17.2',
-              'references':       [
-                'http://lists.busybox.net/pipermail/busybox/2024-May/090760.html',
-                'https://access.redhat.com/security/cve/CVE-2023-42363',
-                'https://bugs.busybox.net/show_bug.cgi?id=15865',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-42363',
-                'https://ubuntu.com/security/notices/USN-6961-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-42363'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk'
-            },
-            {
-              'cve':  'CVE-2023-42364',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.5',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.8',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   'A use-after-free vulnerability in BusyBox v.1.36.1 allows attackers to cause a denial of service via a crafted awk pattern in the awk.c evaluate function.',
-              'diffID':        'sha256:7cd52847ad775a5ddc4b58326cf884beee34544296402c6292ed76474c686d39',
-              'fixedVersions': [
-                '1.35.0-r31'
-              ],
-              'installedVersion': '1.35.0-r29',
-              'packageName':      'busybox-binsh',
-              'purl':             'pkg:apk/alpine/busybox-binsh@1.35.0-r29?arch=x86_64&distro=3.17.2',
-              'references':       [
-                'http://lists.busybox.net/pipermail/busybox/2024-May/090762.html',
-                'https://access.redhat.com/security/cve/CVE-2023-42364',
-                'https://bugs.busybox.net/show_bug.cgi?id=15868',
-                'https://gitlab.alpinelinux.org/alpine/aports/-/blob/master/main/busybox/CVE-2023-42364-CVE-2023-42365.patch',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-42364',
-                'https://ubuntu.com/security/notices/USN-6961-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-42364'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'busybox: use-after-free'
-            },
-            {
-              'cve':  'CVE-2023-42365',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.5',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.8',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   'A use-after-free vulnerability was discovered in BusyBox v.1.36.1 via a crafted awk pattern in the awk.c copyvar function.',
-              'diffID':        'sha256:7cd52847ad775a5ddc4b58326cf884beee34544296402c6292ed76474c686d39',
-              'fixedVersions': [
-                '1.35.0-r31'
-              ],
-              'installedVersion': '1.35.0-r29',
-              'packageName':      'busybox-binsh',
-              'purl':             'pkg:apk/alpine/busybox-binsh@1.35.0-r29?arch=x86_64&distro=3.17.2',
-              'references':       [
-                'http://lists.busybox.net/pipermail/busybox/2024-May/090762.html',
-                'https://access.redhat.com/security/cve/CVE-2023-42365',
-                'https://bugs.busybox.net/show_bug.cgi?id=15871',
-                'https://gitlab.alpinelinux.org/alpine/aports/-/blob/master/main/busybox/CVE-2023-42364-CVE-2023-42365.patch',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-42365',
-                'https://ubuntu.com/security/notices/USN-6961-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-42365'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'busybox: use-after-free'
-            },
-            {
-              'cve':  'CVE-2023-42366',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.5',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.1',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-787'
-              ],
-              'description':   'A heap-buffer-overflow was discovered in BusyBox v.1.36.1 in the next_token function at awk.c:1159.',
-              'diffID':        'sha256:7cd52847ad775a5ddc4b58326cf884beee34544296402c6292ed76474c686d39',
-              'fixedVersions': [
-                '1.35.0-r30'
-              ],
-              'installedVersion': '1.35.0-r29',
-              'packageName':      'busybox-binsh',
-              'purl':             'pkg:apk/alpine/busybox-binsh@1.35.0-r29?arch=x86_64&distro=3.17.2',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2023-42366',
-                'https://bugs.busybox.net/show_bug.cgi?id=15874',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-42366',
-                'https://security.netapp.com/advisory/ntap-20241206-0007/',
-                'https://www.cve.org/CVERecord?id=CVE-2023-42366'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'busybox: A heap-buffer-overflow'
-            },
-            {
-              'cve':  'CVE-2023-5363',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N'
-                },
-                'redhat': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-684'
-              ],
-              'description':   "Issue summary: A bug has been identified in the processing of key and\ninitialisation vector (IV) lengths.  This can lead to potential truncation\nor overruns during the initialisation of some symmetric ciphers.\n\nImpact summary: A truncation in the IV can result in non-uniqueness,\nwhich could result in loss of confidentiality for some cipher modes.\n\nWhen calling EVP_EncryptInit_ex2(), EVP_DecryptInit_ex2() or\nEVP_CipherInit_ex2() the provided OSSL_PARAM array is processed after\nthe key and IV have been established.  Any alterations to the key length,\nvia the \"keylen\" parameter or the IV length, via the \"ivlen\" parameter,\nwithin the OSSL_PARAM array will not take effect as intended, potentially\ncausing truncation or overreading of these values.  The following ciphers\nand cipher modes are impacted: RC2, RC4, RC5, CCM, GCM and OCB.\n\nFor the CCM, GCM and OCB cipher modes, truncation of the IV can result in\nloss of confidentiality.  For example, when following NIST's SP 800-38D\nsection 8.2.1 guidance for constructing a deterministic IV for AES in\nGCM mode, truncation of the counter portion could lead to IV reuse.\n\nBoth truncations and overruns of the key and overruns of the IV will\nproduce incorrect results and could, in some cases, trigger a memory\nexception.  However, these issues are not currently assessed as security\ncritical.\n\nChanging the key and/or IV lengths is not considered to be a common operation\nand the vulnerable API was recently introduced. Furthermore it is likely that\napplication developers will have spotted this problem during testing since\ndecryption would fail unless both peers in the communication were similarly\nvulnerable. For these reasons we expect the probability of an application being\nvulnerable to this to be quite low. However if an application is vulnerable then\nthis issue is considered very serious. For these reasons we have assessed this\nissue as Moderate severity overall.\n\nThe OpenSSL SSL/TLS implementation is not affected by this issue.\n\nThe OpenSSL 3.0 and 3.1 FIPS providers are not affected by this because\nthe issue lies outside of the FIPS provider boundary.\n\nOpenSSL 3.1 and 3.0 are vulnerable to this issue.",
-              'diffID':        'sha256:b2211fbc93f3bb0604bd24acc24fb7f60f2c154505217e00e3689a8baa0c0c72',
-              'fixedVersions': [
-                '3.0.12-r0'
-              ],
-              'installedVersion': '3.0.8-r3',
-              'packageName':      'libcrypto3',
-              'purl':             'pkg:apk/alpine/libcrypto3@3.0.8-r3?arch=x86_64&distro=3.17.2',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2023/10/24/1',
-                'https://access.redhat.com/errata/RHSA-2024:0310',
-                'https://access.redhat.com/security/cve/CVE-2023-5363',
-                'https://bugzilla.redhat.com/2243839',
-                'https://errata.almalinux.org/9/ALSA-2024-0310.html',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=0df40630850fb2740e6be6890bb905d3fc623b2d',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=5f69f5c65e483928c4b28ed16af6e5742929f1ee',
-                'https://linux.oracle.com/cve/CVE-2023-5363.html',
-                'https://linux.oracle.com/errata/ELSA-2024-12093.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-5363',
-                'https://security.netapp.com/advisory/ntap-20231027-0010/',
-                'https://security.netapp.com/advisory/ntap-20240201-0003/',
-                'https://security.netapp.com/advisory/ntap-20240201-0004/',
-                'https://security.netapp.com/advisory/ntap-20241108-0002/',
-                'https://ubuntu.com/security/notices/USN-6450-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-5363',
-                'https://www.debian.org/security/2023/dsa-5532',
-                'https://www.openssl.org/news/secadv/20231024.txt'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: Incorrect cipher key and IV length processing'
-            },
-            {
-              'cve':  'CVE-2024-6119',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-843'
-              ],
-              'description':   "Issue summary: Applications performing certificate name checks (e.g., TLS\nclients checking server certificates) may attempt to read an invalid memory\naddress resulting in abnormal termination of the application process.\n\nImpact summary: Abnormal termination of an application can a cause a denial of\nservice.\n\nApplications performing certificate name checks (e.g., TLS clients checking\nserver certificates) may attempt to read an invalid memory address when\ncomparing the expected name with an `otherName` subject alternative name of an\nX.509 certificate. This may result in an exception that terminates the\napplication program.\n\nNote that basic certificate chain validation (signatures, dates, ...) is not\naffected, the denial of service can occur only when the application also\nspecifies an expected DNS name, Email address or IP address.\n\nTLS servers rarely solicit client certificates, and even when they do, they\ngenerally don't perform a name check against a reference identifier (expected\nidentity), but rather extract the presented identity after checking the\ncertificate chain.  So TLS servers are generally not affected and the severity\nof the issue is Moderate.\n\nThe FIPS modules in 3.3, 3.2, 3.1 and 3.0 are not affected by this issue.",
-              'diffID':        'sha256:b2211fbc93f3bb0604bd24acc24fb7f60f2c154505217e00e3689a8baa0c0c72',
-              'fixedVersions': [
-                '3.0.15-r0'
-              ],
-              'installedVersion': '3.0.8-r3',
-              'packageName':      'libcrypto3',
-              'purl':             'pkg:apk/alpine/libcrypto3@3.0.8-r3?arch=x86_64&distro=3.17.2',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2024/09/03/4',
-                'https://access.redhat.com/errata/RHSA-2024:8935',
-                'https://access.redhat.com/security/cve/CVE-2024-6119',
-                'https://bugzilla.redhat.com/2306158',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2306158',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-6119',
-                'https://errata.almalinux.org/9/ALSA-2024-8935.html',
-                'https://errata.rockylinux.org/RLSA-2024:6783',
-                'https://github.com/openssl/openssl/commit/05f360d9e849a1b277db628f1f13083a7f8dd04f',
-                'https://github.com/openssl/openssl/commit/06d1dc3fa96a2ba5a3e22735a033012aadc9f0d6',
-                'https://github.com/openssl/openssl/commit/621f3729831b05ee828a3203eddb621d014ff2b2',
-                'https://github.com/openssl/openssl/commit/7dfcee2cd2a63b2c64b9b4b0850be64cb695b0a0',
-                'https://github.com/openssl/openssl/security/advisories/GHSA-5qrj-vq78-58fj',
-                'https://linux.oracle.com/cve/CVE-2024-6119.html',
-                'https://linux.oracle.com/errata/ELSA-2024-8935.html',
-                'https://lists.freebsd.org/archives/freebsd-security/2024-September/000303.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2024-6119',
-                'https://openssl-library.org/news/secadv/20240903.txt',
-                'https://security.netapp.com/advisory/ntap-20240912-0001/',
-                'https://ubuntu.com/security/notices/USN-6986-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2024-6119'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: Possible denial of service in X.509 name checks'
-            },
-            {
-              'cve':  'CVE-2023-1255',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '5.1',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-125'
-              ],
-              'description':   'Issue summary: The AES-XTS cipher decryption implementation for 64 bit ARM\nplatform contains a bug that could cause it to read past the input buffer,\nleading to a crash.\n\nImpact summary: Applications that use the AES-XTS algorithm on the 64 bit ARM\nplatform can crash in rare circumstances. The AES-XTS algorithm is usually\nused for disk encryption.\n\nThe AES-XTS cipher decryption implementation for 64 bit ARM platform will read\npast the end of the ciphertext buffer if the ciphertext size is 4 mod 5 in 16\nbyte blocks, e.g. 144 bytes or 1024 bytes. If the memory after the ciphertext\nbuffer is unmapped, this will trigger a crash which results in a denial of\nservice.\n\nIf an attacker can control the size and location of the ciphertext buffer\nbeing decrypted by an application using AES-XTS on 64 bit ARM, the\napplication is affected. This is fairly unlikely making this issue\na Low severity one.',
-              'diffID':        'sha256:b2211fbc93f3bb0604bd24acc24fb7f60f2c154505217e00e3689a8baa0c0c72',
-              'fixedVersions': [
-                '3.0.8-r4'
-              ],
-              'installedVersion': '3.0.8-r3',
-              'packageName':      'libcrypto3',
-              'purl':             'pkg:apk/alpine/libcrypto3@3.0.8-r3?arch=x86_64&distro=3.17.2',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2023:3722',
-                'https://access.redhat.com/security/cve/CVE-2023-1255',
-                'https://bugzilla.redhat.com/2181082',
-                'https://bugzilla.redhat.com/2182561',
-                'https://bugzilla.redhat.com/2182565',
-                'https://bugzilla.redhat.com/2188461',
-                'https://bugzilla.redhat.com/2207947',
-                'https://errata.almalinux.org/9/ALSA-2023-3722.html',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=02ac9c9420275868472f33b01def01218742b8bb',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=bc2f61ad70971869b242fc1cb445b98bad50074a',
-                'https://linux.oracle.com/cve/CVE-2023-1255.html',
-                'https://linux.oracle.com/errata/ELSA-2023-3722.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-1255',
-                'https://security.netapp.com/advisory/ntap-20230908-0006/',
-                'https://ubuntu.com/security/notices/USN-6119-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-1255',
-                'https://www.openssl.org/news/secadv/20230419.txt',
-                'https://www.openssl.org/news/secadv/20230420.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: Input buffer over-read in AES-XTS implementation on 64 bit ARM'
-            },
-            {
-              'cve':  'CVE-2023-2650',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '6.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-770'
-              ],
-              'description':   "Issue summary: Processing some specially crafted ASN.1 object identifiers or\ndata containing them may be very slow.\n\nImpact summary: Applications that use OBJ_obj2txt() directly, or use any of\nthe OpenSSL subsystems OCSP, PKCS7/SMIME, CMS, CMP/CRMF or TS with no message\nsize limit may experience notable to very long delays when processing those\nmessages, which may lead to a Denial of Service.\n\nAn OBJECT IDENTIFIER is composed of a series of numbers - sub-identifiers -\nmost of which have no size limit.  OBJ_obj2txt() may be used to translate\nan ASN.1 OBJECT IDENTIFIER given in DER encoding form (using the OpenSSL\ntype ASN1_OBJECT) to its canonical numeric text form, which are the\nsub-identifiers of the OBJECT IDENTIFIER in decimal form, separated by\nperiods.\n\nWhen one of the sub-identifiers in the OBJECT IDENTIFIER is very large\n(these are sizes that are seen as absurdly large, taking up tens or hundreds\nof KiBs), the translation to a decimal number in text may take a very long\ntime.  The time complexity is O(n^2) with 'n' being the size of the\nsub-identifiers in bytes (*).\n\nWith OpenSSL 3.0, support to fetch cryptographic algorithms using names /\nidentifiers in string form was introduced.  This includes using OBJECT\nIDENTIFIERs in canonical numeric text form as identifiers for fetching\nalgorithms.\n\nSuch OBJECT IDENTIFIERs may be received through the ASN.1 structure\nAlgorithmIdentifier, which is commonly used in multiple protocols to specify\nwhat cryptographic algorithm should be used to sign or verify, encrypt or\ndecrypt, or digest passed data.\n\nApplications that call OBJ_obj2txt() directly with untrusted data are\naffected, with any version of OpenSSL.  If the use is for the mere purpose\nof display, the severity is considered low.\n\nIn OpenSSL 3.0 and newer, this affects the subsystems OCSP, PKCS7/SMIME,\nCMS, CMP/CRMF or TS.  It also impacts anything that processes X.509\ncertificates, including simple things like verifying its signature.\n\nThe impact on TLS is relatively low, because all versions of OpenSSL have a\n100KiB limit on the peer's certificate chain.  Additionally, this only\nimpacts clients, or servers that have explicitly enabled client\nauthentication.\n\nIn OpenSSL 1.1.1 and 1.0.2, this only affects displaying diverse objects,\nsuch as X.509 certificates.  This is assumed to not happen in such a way\nthat it would cause a Denial of Service, so these versions are considered\nnot affected by this issue in such a way that it would be cause for concern,\nand the severity is therefore considered low.",
-              'diffID':        'sha256:b2211fbc93f3bb0604bd24acc24fb7f60f2c154505217e00e3689a8baa0c0c72',
-              'fixedVersions': [
-                '3.0.9-r0'
-              ],
-              'installedVersion': '3.0.8-r3',
-              'packageName':      'libcrypto3',
-              'purl':             'pkg:apk/alpine/libcrypto3@3.0.8-r3?arch=x86_64&distro=3.17.2',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2023/05/30/1',
-                'https://access.redhat.com/errata/RHSA-2023:6330',
-                'https://access.redhat.com/security/cve/CVE-2023-2650',
-                'https://bugzilla.redhat.com/1858038',
-                'https://bugzilla.redhat.com/2207947',
-                'https://errata.almalinux.org/9/ALSA-2023-6330.html',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=423a2bc737a908ad0c77bda470b2b59dc879936b',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=853c5e56ee0b8650c73140816bb8b91d6163422c',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=9e209944b35cf82368071f160a744b6178f9b098',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=db779b0e10b047f2585615e0b8f2acdf21f8544a',
-                'https://linux.oracle.com/cve/CVE-2023-2650.html',
-                'https://linux.oracle.com/errata/ELSA-2023-6330.html',
-                'https://lists.debian.org/debian-lts-announce/2023/06/msg00011.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-2650',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0009',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://security.netapp.com/advisory/ntap-20230703-0001/',
-                'https://security.netapp.com/advisory/ntap-20231027-0009/',
-                'https://ubuntu.com/security/notices/USN-6119-1',
-                'https://ubuntu.com/security/notices/USN-6188-1',
-                'https://ubuntu.com/security/notices/USN-6672-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-2650',
-                'https://www.debian.org/security/2023/dsa-5417',
-                'https://www.openssl.org/news/secadv/20230530.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: Possible DoS translating ASN.1 object identifiers'
-            },
-            {
-              'cve':  'CVE-2023-2975',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N'
-                },
-                'redhat': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-354',
-                'CWE-287'
-              ],
-              'description':   'Issue summary: The AES-SIV cipher implementation contains a bug that causes\nit to ignore empty associated data entries which are unauthenticated as\na consequence.\n\nImpact summary: Applications that use the AES-SIV algorithm and want to\nauthenticate empty data entries as associated data can be misled by removing,\nadding or reordering such empty entries as these are ignored by the OpenSSL\nimplementation. We are currently unaware of any such applications.\n\nThe AES-SIV algorithm allows for authentication of multiple associated\ndata entries along with the encryption. To authenticate empty data the\napplication has to call EVP_EncryptUpdate() (or EVP_CipherUpdate()) with\nNULL pointer as the output buffer and 0 as the input buffer length.\nThe AES-SIV implementation in OpenSSL just returns success for such a call\ninstead of performing the associated data authentication operation.\nThe empty data thus will not be authenticated.\n\nAs this issue does not affect non-empty associated data authentication and\nwe expect it to be rare for an application to use empty associated data\nentries this is qualified as Low severity issue.',
-              'diffID':        'sha256:b2211fbc93f3bb0604bd24acc24fb7f60f2c154505217e00e3689a8baa0c0c72',
-              'fixedVersions': [
-                '3.0.9-r2'
-              ],
-              'installedVersion': '3.0.8-r3',
-              'packageName':      'libcrypto3',
-              'purl':             'pkg:apk/alpine/libcrypto3@3.0.8-r3?arch=x86_64&distro=3.17.2',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2023/07/15/1',
-                'http://www.openwall.com/lists/oss-security/2023/07/19/5',
-                'https://access.redhat.com/errata/RHSA-2024:2447',
-                'https://access.redhat.com/security/cve/CVE-2023-2975',
-                'https://bugzilla.redhat.com/2223016',
-                'https://bugzilla.redhat.com/2224962',
-                'https://bugzilla.redhat.com/2227852',
-                'https://bugzilla.redhat.com/2248616',
-                'https://bugzilla.redhat.com/2257571',
-                'https://bugzilla.redhat.com/2258502',
-                'https://bugzilla.redhat.com/2259944',
-                'https://errata.almalinux.org/9/ALSA-2024-2447.html',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=00e2f5eea29994d19293ec4e8c8775ba73678598',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=6a83f0c958811f07e0d11dfc6b5a6a98edfd5bdc',
-                'https://linux.oracle.com/cve/CVE-2023-2975.html',
-                'https://linux.oracle.com/errata/ELSA-2024-2447.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-2975',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://security.netapp.com/advisory/ntap-20230725-0004/',
-                'https://ubuntu.com/security/notices/USN-6450-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-2975',
-                'https://www.openssl.org/news/secadv/20230714.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: AES-SIV cipher implementation contains a bug that causes it to ignore empty associated data entries'
-            },
-            {
-              'cve':  'CVE-2023-3446',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L'
-                },
-                'redhat': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L'
-                }
-              },
-              'cwes': [
-                'CWE-606',
-                'CWE-1333'
-              ],
-              'description':   "Issue summary: Checking excessively long DH keys or parameters may be very slow.\n\nImpact summary: Applications that use the functions DH_check(), DH_check_ex()\nor EVP_PKEY_param_check() to check a DH key or DH parameters may experience long\ndelays. Where the key or parameters that are being checked have been obtained\nfrom an untrusted source this may lead to a Denial of Service.\n\nThe function DH_check() performs various checks on DH parameters. One of those\nchecks confirms that the modulus ('p' parameter) is not too large. Trying to use\na very large modulus is slow and OpenSSL will not normally use a modulus which\nis over 10,000 bits in length.\n\nHowever the DH_check() function checks numerous aspects of the key or parameters\nthat have been supplied. Some of those checks use the supplied modulus value\neven if it has already been found to be too large.\n\nAn application that calls DH_check() and supplies a key or parameters obtained\nfrom an untrusted source could be vulernable to a Denial of Service attack.\n\nThe function DH_check() is itself called by a number of other OpenSSL functions.\nAn application calling any of those other functions may similarly be affected.\nThe other functions affected by this are DH_check_ex() and\nEVP_PKEY_param_check().\n\nAlso vulnerable are the OpenSSL dhparam and pkeyparam command line applications\nwhen using the '-check' option.\n\nThe OpenSSL SSL/TLS implementation is not affected by this issue.\nThe OpenSSL 3.0 and 3.1 FIPS providers are not affected by this issue.",
-              'diffID':        'sha256:b2211fbc93f3bb0604bd24acc24fb7f60f2c154505217e00e3689a8baa0c0c72',
-              'fixedVersions': [
-                '3.0.9-r3'
-              ],
-              'installedVersion': '3.0.8-r3',
-              'packageName':      'libcrypto3',
-              'purl':             'pkg:apk/alpine/libcrypto3@3.0.8-r3?arch=x86_64&distro=3.17.2',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2023/07/19/4',
-                'http://www.openwall.com/lists/oss-security/2023/07/19/5',
-                'http://www.openwall.com/lists/oss-security/2023/07/19/6',
-                'http://www.openwall.com/lists/oss-security/2023/07/31/1',
-                'http://www.openwall.com/lists/oss-security/2024/05/16/1',
-                'https://access.redhat.com/errata/RHSA-2024:2447',
-                'https://access.redhat.com/security/cve/CVE-2023-3446',
-                'https://bugzilla.redhat.com/2223016',
-                'https://bugzilla.redhat.com/2224962',
-                'https://bugzilla.redhat.com/2227852',
-                'https://bugzilla.redhat.com/2248616',
-                'https://bugzilla.redhat.com/2257571',
-                'https://bugzilla.redhat.com/2258502',
-                'https://bugzilla.redhat.com/2259944',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2224962',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2257582',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2257583',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2258677',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2258688',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2258691',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2258694',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2258700',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-36763',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-36764',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3446',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45229',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45231',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45232',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45233',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45235',
-                'https://errata.almalinux.org/9/ALSA-2024-2447.html',
-                'https://errata.rockylinux.org/RLSA-2024:2264',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=1fa20cf2f506113c761777127a38bce5068740eb',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=8780a896543a654e757db1b9396383f9d8095528',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=9a0a4d3c1e7138915563c0df4fe6a3f9377b839c',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=fc9867c1e03c22ebf56943be205202e576aabf23',
-                'https://linux.oracle.com/cve/CVE-2023-3446.html',
-                'https://linux.oracle.com/errata/ELSA-2024-2447.html',
-                'https://lists.debian.org/debian-lts-announce/2023/08/msg00019.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-3446',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://security.netapp.com/advisory/ntap-20230803-0011/',
-                'https://ubuntu.com/security/notices/USN-6435-1',
-                'https://ubuntu.com/security/notices/USN-6435-2',
-                'https://ubuntu.com/security/notices/USN-6450-1',
-                'https://ubuntu.com/security/notices/USN-6709-1',
-                'https://ubuntu.com/security/notices/USN-7018-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-3446',
-                'https://www.openssl.org/news/secadv/20230719.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: Excessive time spent checking DH keys and parameters'
-            },
-            {
-              'cve':  'CVE-2023-3817',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L'
-                },
-                'redhat': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L'
-                }
-              },
-              'cwes': [
-                'CWE-606',
-                'CWE-834'
-              ],
-              'description':   'Issue summary: Checking excessively long DH keys or parameters may be very slow.\n\nImpact summary: Applications that use the functions DH_check(), DH_check_ex()\nor EVP_PKEY_param_check() to check a DH key or DH parameters may experience long\ndelays. Where the key or parameters that are being checked have been obtained\nfrom an untrusted source this may lead to a Denial of Service.\n\nThe function DH_check() performs various checks on DH parameters. After fixing\nCVE-2023-3446 it was discovered that a large q parameter value can also trigger\nan overly long computation during some of these checks. A correct q value,\nif present, cannot be larger than the modulus p parameter, thus it is\nunnecessary to perform these checks if q is larger than p.\n\nAn application that calls DH_check() and supplies a key or parameters obtained\nfrom an untrusted source could be vulnerable to a Denial of Service attack.\n\nThe function DH_check() is itself called by a number of other OpenSSL functions.\nAn application calling any of those other functions may similarly be affected.\nThe other functions affected by this are DH_check_ex() and\nEVP_PKEY_param_check().\n\nAlso vulnerable are the OpenSSL dhparam and pkeyparam command line applications\nwhen using the "-check" option.\n\nThe OpenSSL SSL/TLS implementation is not affected by this issue.\n\nThe OpenSSL 3.0 and 3.1 FIPS providers are not affected by this issue.',
-              'diffID':        'sha256:b2211fbc93f3bb0604bd24acc24fb7f60f2c154505217e00e3689a8baa0c0c72',
-              'fixedVersions': [
-                '3.0.10-r0'
-              ],
-              'installedVersion': '3.0.8-r3',
-              'packageName':      'libcrypto3',
-              'purl':             'pkg:apk/alpine/libcrypto3@3.0.8-r3?arch=x86_64&distro=3.17.2',
-              'references':       [
-                'http://seclists.org/fulldisclosure/2023/Jul/43',
-                'http://www.openwall.com/lists/oss-security/2023/07/31/1',
-                'http://www.openwall.com/lists/oss-security/2023/09/22/11',
-                'http://www.openwall.com/lists/oss-security/2023/09/22/9',
-                'http://www.openwall.com/lists/oss-security/2023/11/06/2',
-                'https://access.redhat.com/errata/RHSA-2024:2447',
-                'https://access.redhat.com/security/cve/CVE-2023-3817',
-                'https://bugzilla.redhat.com/2223016',
-                'https://bugzilla.redhat.com/2224962',
-                'https://bugzilla.redhat.com/2227852',
-                'https://bugzilla.redhat.com/2248616',
-                'https://bugzilla.redhat.com/2257571',
-                'https://bugzilla.redhat.com/2258502',
-                'https://bugzilla.redhat.com/2259944',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2224962',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2227852',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2248616',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2270358',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3446',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3817',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-5678',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-2408',
-                'https://errata.almalinux.org/9/ALSA-2024-2447.html',
-                'https://errata.rockylinux.org/RLSA-2023:7877',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=6a1eb62c29db6cb5eec707f9338aee00f44e26f5',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=869ad69aadd985c7b8ca6f4e5dd0eb274c9f3644',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=9002fd07327a91f35ba6c1307e71fa6fd4409b7f',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=91ddeba0f2269b017dc06c46c993a788974b1aa5',
-                'https://linux.oracle.com/cve/CVE-2023-3817.html',
-                'https://linux.oracle.com/errata/ELSA-2024-2447.html',
-                'https://lists.debian.org/debian-lts-announce/2023/08/msg00019.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-3817',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://security.netapp.com/advisory/ntap-20230818-0014/',
-                'https://security.netapp.com/advisory/ntap-20231027-0008/',
-                'https://security.netapp.com/advisory/ntap-20240621-0006/',
-                'https://ubuntu.com/security/notices/USN-6435-1',
-                'https://ubuntu.com/security/notices/USN-6435-2',
-                'https://ubuntu.com/security/notices/USN-6450-1',
-                'https://ubuntu.com/security/notices/USN-6709-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-3817',
-                'https://www.openssl.org/news/secadv/20230731.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'OpenSSL: Excessive time spent checking DH q parameter value'
-            },
-            {
-              'cve':  'CVE-2023-5678',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L'
-                },
-                'redhat': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L'
-                }
-              },
-              'cwes': [
-                'CWE-606',
-                'CWE-754'
-              ],
-              'description':   "Issue summary: Generating excessively long X9.42 DH keys or checking\nexcessively long X9.42 DH keys or parameters may be very slow.\n\nImpact summary: Applications that use the functions DH_generate_key() to\ngenerate an X9.42 DH key may experience long delays.  Likewise, applications\nthat use DH_check_pub_key(), DH_check_pub_key_ex() or EVP_PKEY_public_check()\nto check an X9.42 DH key or X9.42 DH parameters may experience long delays.\nWhere the key or parameters that are being checked have been obtained from\nan untrusted source this may lead to a Denial of Service.\n\nWhile DH_check() performs all the necessary checks (as of CVE-2023-3817),\nDH_check_pub_key() doesn't make any of these checks, and is therefore\nvulnerable for excessively large P and Q parameters.\n\nLikewise, while DH_generate_key() performs a check for an excessively large\nP, it doesn't check for an excessively large Q.\n\nAn application that calls DH_generate_key() or DH_check_pub_key() and\nsupplies a key or parameters obtained from an untrusted source could be\nvulnerable to a Denial of Service attack.\n\nDH_generate_key() and DH_check_pub_key() are also called by a number of\nother OpenSSL functions.  An application calling any of those other\nfunctions may similarly be affected.  The other functions affected by this\nare DH_check_pub_key_ex(), EVP_PKEY_public_check(), and EVP_PKEY_generate().\n\nAlso vulnerable are the OpenSSL pkey command line application when using the\n\"-pubcheck\" option, as well as the OpenSSL genpkey command line application.\n\nThe OpenSSL SSL/TLS implementation is not affected by this issue.\n\nThe OpenSSL 3.0 and 3.1 FIPS providers are not affected by this issue.",
-              'diffID':        'sha256:b2211fbc93f3bb0604bd24acc24fb7f60f2c154505217e00e3689a8baa0c0c72',
-              'fixedVersions': [
-                '3.0.12-r1'
-              ],
-              'installedVersion': '3.0.8-r3',
-              'packageName':      'libcrypto3',
-              'purl':             'pkg:apk/alpine/libcrypto3@3.0.8-r3?arch=x86_64&distro=3.17.2',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2024/03/11/1',
-                'https://access.redhat.com/errata/RHSA-2024:2447',
-                'https://access.redhat.com/security/cve/CVE-2023-5678',
-                'https://bugzilla.redhat.com/2223016',
-                'https://bugzilla.redhat.com/2224962',
-                'https://bugzilla.redhat.com/2227852',
-                'https://bugzilla.redhat.com/2248616',
-                'https://bugzilla.redhat.com/2257571',
-                'https://bugzilla.redhat.com/2258502',
-                'https://bugzilla.redhat.com/2259944',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2224962',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2227852',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2248616',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2270358',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3446',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3817',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-5678',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-2408',
-                'https://errata.almalinux.org/9/ALSA-2024-2447.html',
-                'https://errata.rockylinux.org/RLSA-2023:7877',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=34efaef6c103d636ab507a0cc34dca4d3aecc055',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=710fee740904b6290fef0dd5536fbcedbc38ff0c',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=db925ae2e65d0d925adef429afc37f75bd1c2017',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=ddeb4b6c6d527e54ce9a99cba785c0f7776e54b6',
-                'https://linux.oracle.com/cve/CVE-2023-5678.html',
-                'https://linux.oracle.com/errata/ELSA-2024-2447.html',
-                'https://lists.debian.org/debian-lts-announce/2024/10/msg00033.html',
-                'https://lists.debian.org/debian-lts-announce/2024/11/msg00000.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-5678',
-                'https://security.netapp.com/advisory/ntap-20231130-0010/',
-                'https://ubuntu.com/security/notices/USN-6622-1',
-                'https://ubuntu.com/security/notices/USN-6632-1',
-                'https://ubuntu.com/security/notices/USN-6709-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-5678',
-                'https://www.openssl.org/news/secadv/20231106.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: Generating excessively long X9.42 DH keys or checking excessively long X9.42 DH keys or parameters may be very slow'
-            },
-            {
-              'cve':  'CVE-2023-6129',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '6.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-440',
-                'CWE-787'
-              ],
-              'description':   'Issue summary: The POLY1305 MAC (message authentication code) implementation\ncontains a bug that might corrupt the internal state of applications running\non PowerPC CPU based platforms if the CPU provides vector instructions.\n\nImpact summary: If an attacker can influence whether the POLY1305 MAC\nalgorithm is used, the application state might be corrupted with various\napplication dependent consequences.\n\nThe POLY1305 MAC (message authentication code) implementation in OpenSSL for\nPowerPC CPUs restores the contents of vector registers in a different order\nthan they are saved. Thus the contents of some of these vector registers\nare corrupted when returning to the caller. The vulnerable code is used only\non newer PowerPC processors supporting the PowerISA 2.07 instructions.\n\nThe consequences of this kind of internal application state corruption can\nbe various - from no consequences, if the calling application does not\ndepend on the contents of non-volatile XMM registers at all, to the worst\nconsequences, where the attacker could get complete control of the application\nprocess. However unless the compiler uses the vector registers for storing\npointers, the most likely consequence, if any, would be an incorrect result\nof some application dependent calculations or a crash leading to a denial of\nservice.\n\nThe POLY1305 MAC algorithm is most frequently used as part of the\nCHACHA20-POLY1305 AEAD (authenticated encryption with associated data)\nalgorithm. The most common usage of this AEAD cipher is with TLS protocol\nversions 1.2 and 1.3. If this cipher is enabled on the server a malicious\nclient can influence whether this AEAD cipher is used. This implies that\nTLS server applications using OpenSSL can be potentially impacted. However\nwe are currently not aware of any concrete application that would be affected\nby this issue therefore we consider this a Low severity security issue.',
-              'diffID':        'sha256:b2211fbc93f3bb0604bd24acc24fb7f60f2c154505217e00e3689a8baa0c0c72',
-              'fixedVersions': [
-                '3.0.12-r2'
-              ],
-              'installedVersion': '3.0.8-r3',
-              'packageName':      'libcrypto3',
-              'purl':             'pkg:apk/alpine/libcrypto3@3.0.8-r3?arch=x86_64&distro=3.17.2',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2024/03/11/1',
-                'https://access.redhat.com/errata/RHSA-2024:9088',
-                'https://access.redhat.com/security/cve/CVE-2023-6129',
-                'https://bugzilla.redhat.com/2257571',
-                'https://bugzilla.redhat.com/2258502',
-                'https://bugzilla.redhat.com/2259944',
-                'https://bugzilla.redhat.com/2284243',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2257571',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2258502',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2259944',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2284243',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-6129',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-6237',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-0727',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-1298',
-                'https://errata.almalinux.org/9/ALSA-2024-9088.html',
-                'https://errata.rockylinux.org/RLSA-2024:9088',
-                'https://github.com/openssl/openssl/commit/050d26383d4e264966fb83428e72d5d48f402d35',
-                'https://github.com/openssl/openssl/commit/5b139f95c9a47a55a0c54100f3837b1eee942b04',
-                'https://github.com/openssl/openssl/commit/f3fc5808fe9ff74042d639839610d03b8fdcc015',
-                'https://linux.oracle.com/cve/CVE-2023-6129.html',
-                'https://linux.oracle.com/errata/ELSA-2024-9088.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-6129',
-                'https://security.netapp.com/advisory/ntap-20240216-0009/',
-                'https://security.netapp.com/advisory/ntap-20240426-0008/',
-                'https://security.netapp.com/advisory/ntap-20240426-0013/',
-                'https://security.netapp.com/advisory/ntap-20240503-0011/',
-                'https://ubuntu.com/security/notices/USN-6622-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-6129',
-                'https://www.openssl.org/news/secadv/20240109.txt',
-                'https://www.openwall.com/lists/oss-security/2024/01/09/1'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: POLY1305 MAC implementation corrupts vector registers on PowerPC'
-            },
-            {
-              'cve':  'CVE-2023-6237',
-              'cvss': {
-                'redhat': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-606'
-              ],
-              'description':   "Issue summary: Checking excessively long invalid RSA public keys may take\na long time.\n\nImpact summary: Applications that use the function EVP_PKEY_public_check()\nto check RSA public keys may experience long delays. Where the key that\nis being checked has been obtained from an untrusted source this may lead\nto a Denial of Service.\n\nWhen function EVP_PKEY_public_check() is called on RSA public keys,\na computation is done to confirm that the RSA modulus, n, is composite.\nFor valid RSA keys, n is a product of two or more large primes and this\ncomputation completes quickly. However, if n is an overly large prime,\nthen this computation would take a long time.\n\nAn application that calls EVP_PKEY_public_check() and supplies an RSA key\nobtained from an untrusted source could be vulnerable to a Denial of Service\nattack.\n\nThe function EVP_PKEY_public_check() is not called from other OpenSSL\nfunctions however it is called from the OpenSSL pkey command line\napplication. For that reason that application is also vulnerable if used\nwith the '-pubin' and '-check' options on untrusted data.\n\nThe OpenSSL SSL/TLS implementation is not affected by this issue.\n\nThe OpenSSL 3.0 and 3.1 FIPS providers are affected by this issue.",
-              'diffID':        'sha256:b2211fbc93f3bb0604bd24acc24fb7f60f2c154505217e00e3689a8baa0c0c72',
-              'fixedVersions': [
-                '3.0.12-r3'
-              ],
-              'installedVersion': '3.0.8-r3',
-              'packageName':      'libcrypto3',
-              'purl':             'pkg:apk/alpine/libcrypto3@3.0.8-r3?arch=x86_64&distro=3.17.2',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2024/03/11/1',
-                'https://access.redhat.com/errata/RHSA-2024:9088',
-                'https://access.redhat.com/security/cve/CVE-2023-6237',
-                'https://bugzilla.redhat.com/2257571',
-                'https://bugzilla.redhat.com/2258502',
-                'https://bugzilla.redhat.com/2259944',
-                'https://bugzilla.redhat.com/2284243',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2257571',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2258502',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2259944',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2284243',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-6129',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-6237',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-0727',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-1298',
-                'https://errata.almalinux.org/9/ALSA-2024-9088.html',
-                'https://errata.rockylinux.org/RLSA-2024:9088',
-                'https://github.com/openssl/openssl/commit/0b0f7abfb37350794a4b8960fafc292cd5d1b84d',
-                'https://github.com/openssl/openssl/commit/18c02492138d1eb8b6548cb26e7b625fb2414a2a',
-                'https://github.com/openssl/openssl/commit/a830f551557d3d66a84bbb18a5b889c640c36294',
-                'https://linux.oracle.com/cve/CVE-2023-6237.html',
-                'https://linux.oracle.com/errata/ELSA-2024-9088.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-6237',
-                'https://security.netapp.com/advisory/ntap-20240531-0007/',
-                'https://ubuntu.com/security/notices/USN-6622-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-6237',
-                'https://www.openssl.org/news/secadv/20240115.txt',
-                'https://www.openwall.com/lists/oss-security/2024/01/15/2'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: Excessive time spent checking invalid RSA public keys'
-            },
-            {
-              'cve':  'CVE-2024-0727',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '5.5',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H'
-                },
-                'nvd': {
-                  'v3score':  '5.5',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '5.5',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-476'
-              ],
-              'description':   'Issue summary: Processing a maliciously formatted PKCS12 file may lead OpenSSL\nto crash leading to a potential Denial of Service attack\n\nImpact summary: Applications loading files in the PKCS12 format from untrusted\nsources might terminate abruptly.\n\nA file in PKCS12 format can contain certificates and keys and may come from an\nuntrusted source. The PKCS12 specification allows certain fields to be NULL, but\nOpenSSL does not correctly check for this case. This can lead to a NULL pointer\ndereference that results in OpenSSL crashing. If an application processes PKCS12\nfiles from an untrusted source using the OpenSSL APIs then that application will\nbe vulnerable to this issue.\n\nOpenSSL APIs that are vulnerable to this are: PKCS12_parse(),\nPKCS12_unpack_p7data(), PKCS12_unpack_p7encdata(), PKCS12_unpack_authsafes()\nand PKCS12_newpass().\n\nWe have also fixed a similar issue in SMIME_write_PKCS7(). However since this\nfunction is related to writing data we do not consider it security significant.\n\nThe FIPS modules in 3.2, 3.1 and 3.0 are not affected by this issue.',
-              'diffID':        'sha256:b2211fbc93f3bb0604bd24acc24fb7f60f2c154505217e00e3689a8baa0c0c72',
-              'fixedVersions': [
-                '3.0.12-r4'
-              ],
-              'installedVersion': '3.0.8-r3',
-              'packageName':      'libcrypto3',
-              'purl':             'pkg:apk/alpine/libcrypto3@3.0.8-r3?arch=x86_64&distro=3.17.2',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2024/03/11/1',
-                'https://access.redhat.com/errata/RHSA-2024:9088',
-                'https://access.redhat.com/security/cve/CVE-2024-0727',
-                'https://bugzilla.redhat.com/2257571',
-                'https://bugzilla.redhat.com/2258502',
-                'https://bugzilla.redhat.com/2259944',
-                'https://bugzilla.redhat.com/2284243',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2257571',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2258502',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2259944',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2284243',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-6129',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-6237',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-0727',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-1298',
-                'https://errata.almalinux.org/9/ALSA-2024-9088.html',
-                'https://errata.rockylinux.org/RLSA-2024:9088',
-                'https://github.com/alexcrichton/openssl-src-rs/commit/add20f73b6b42be7451af2e1044d4e0e778992b2',
-                'https://github.com/github/advisory-database/pull/3472',
-                'https://github.com/openssl/openssl/commit/09df4395b5071217b76dc7d3d2e630eb8c5a79c2',
-                'https://github.com/openssl/openssl/commit/775acfdbd0c6af9ac855f34969cdab0c0c90844a',
-                'https://github.com/openssl/openssl/commit/d135eeab8a5dbf72b3da5240bab9ddb7678dbd2c',
-                'https://github.com/openssl/openssl/pull/23362',
-                'https://github.com/pyca/cryptography/commit/3519591d255d4506fbcd0d04037d45271903c64d',
-                'https://github.openssl.org/openssl/extended-releases/commit/03b3941d60c4bce58fab69a0c22377ab439bc0e8',
-                'https://github.openssl.org/openssl/extended-releases/commit/aebaa5883e31122b404e450732dc833dc9dee539',
-                'https://linux.oracle.com/cve/CVE-2024-0727.html',
-                'https://linux.oracle.com/errata/ELSA-2024-9088.html',
-                'https://lists.debian.org/debian-lts-announce/2024/10/msg00033.html',
-                'https://lists.debian.org/debian-lts-announce/2024/11/msg00000.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2024-0727',
-                'https://security.netapp.com/advisory/ntap-20240208-0006',
-                'https://security.netapp.com/advisory/ntap-20240208-0006/',
-                'https://ubuntu.com/security/notices/USN-6622-1',
-                'https://ubuntu.com/security/notices/USN-6632-1',
-                'https://ubuntu.com/security/notices/USN-6709-1',
-                'https://ubuntu.com/security/notices/USN-7018-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2024-0727',
-                'https://www.openssl.org/news/secadv/20240125.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: denial of service via null dereference'
-            },
-            {
-              'cve':  'CVE-2024-4603',
-              'cvss': {
-                'redhat': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L'
-                }
-              },
-              'cwes': [
-                'CWE-606',
-                'CWE-834'
-              ],
-              'description':   'Issue summary: Checking excessively long DSA keys or parameters may be very\nslow.\n\nImpact summary: Applications that use the functions EVP_PKEY_param_check()\nor EVP_PKEY_public_check() to check a DSA public key or DSA parameters may\nexperience long delays. Where the key or parameters that are being checked\nhave been obtained from an untrusted source this may lead to a Denial of\nService.\n\nThe functions EVP_PKEY_param_check() or EVP_PKEY_public_check() perform\nvarious checks on DSA parameters. Some of those computations take a long time\nif the modulus (`p` parameter) is too large.\n\nTrying to use a very large modulus is slow and OpenSSL will not allow using\npublic keys with a modulus which is over 10,000 bits in length for signature\nverification. However the key and parameter check functions do not limit\nthe modulus size when performing the checks.\n\nAn application that calls EVP_PKEY_param_check() or EVP_PKEY_public_check()\nand supplies a key or parameters obtained from an untrusted source could be\nvulnerable to a Denial of Service attack.\n\nThese functions are not called by OpenSSL itself on untrusted DSA keys so\nonly applications that directly call these functions may be vulnerable.\n\nAlso vulnerable are the OpenSSL pkey and pkeyparam command line applications\nwhen using the `-check` option.\n\nThe OpenSSL SSL/TLS implementation is not affected by this issue.\n\nThe OpenSSL 3.0 and 3.1 FIPS providers are affected by this issue.',
-              'diffID':        'sha256:b2211fbc93f3bb0604bd24acc24fb7f60f2c154505217e00e3689a8baa0c0c72',
-              'fixedVersions': [
-                '3.0.13-r0'
-              ],
-              'installedVersion': '3.0.8-r3',
-              'packageName':      'libcrypto3',
-              'purl':             'pkg:apk/alpine/libcrypto3@3.0.8-r3?arch=x86_64&distro=3.17.2',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2024/05/16/2',
-                'https://access.redhat.com/errata/RHSA-2024:9333',
-                'https://access.redhat.com/security/cve/CVE-2024-4603',
-                'https://bugzilla.redhat.com/2274020',
-                'https://bugzilla.redhat.com/2281029',
-                'https://bugzilla.redhat.com/2283757',
-                'https://bugzilla.redhat.com/2294581',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2274020',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2281029',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2283757',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2294581',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-2511',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-4603',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-4741',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-5535',
-                'https://errata.almalinux.org/9/ALSA-2024-9333.html',
-                'https://errata.rockylinux.org/RLSA-2024:9333',
-                'https://github.com/openssl/openssl/commit/3559e868e58005d15c6013a0c1fd832e51c73397',
-                'https://github.com/openssl/openssl/commit/53ea06486d296b890d565fb971b2764fcd826e7e',
-                'https://github.com/openssl/openssl/commit/9c39b3858091c152f52513c066ff2c5a47969f0d',
-                'https://github.com/openssl/openssl/commit/da343d0605c826ef197aceedc67e8e04f065f740',
-                'https://linux.oracle.com/cve/CVE-2024-4603.html',
-                'https://linux.oracle.com/errata/ELSA-2024-9333.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2024-4603',
-                'https://security.netapp.com/advisory/ntap-20240621-0001/',
-                'https://ubuntu.com/security/notices/USN-6937-1',
-                'https://www.cve.org/CVERecord?id=CVE-2024-4603',
-                'https://www.openssl.org/news/secadv/20240516.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: Excessive time spent checking DSA keys and parameters'
-            },
-            {
-              'cve':  'CVE-2024-4741',
-              'cvss': {
-                'redhat': {
-                  'v3score':  '5.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   'Issue summary: Calling the OpenSSL API function SSL_free_buffers may cause\nmemory to be accessed that was previously freed in some situations\n\nImpact summary: A use after free can have a range of potential consequences such\nas the corruption of valid data, crashes or execution of arbitrary code.\nHowever, only applications that directly call the SSL_free_buffers function are\naffected by this issue. Applications that do not call this function are not\nvulnerable. Our investigations indicate that this function is rarely used by\napplications.\n\nThe SSL_free_buffers function is used to free the internal OpenSSL buffer used\nwhen processing an incoming record from the network. The call is only expected\nto succeed if the buffer is not currently in use. However, two scenarios have\nbeen identified where the buffer is freed even when still in use.\n\nThe first scenario occurs where a record header has been received from the\nnetwork and processed by OpenSSL, but the full record body has not yet arrived.\nIn this case calling SSL_free_buffers will succeed even though a record has only\nbeen partially processed and the buffer is still in use.\n\nThe second scenario occurs where a full record containing application data has\nbeen received and processed by OpenSSL but the application has only read part of\nthis data. Again a call to SSL_free_buffers will succeed even though the buffer\nis still in use.\n\nWhile these scenarios could occur accidentally during normal operation a\nmalicious attacker could attempt to engineer a stituation where this occurs.\nWe are not aware of this issue being actively exploited.\n\nThe FIPS modules in 3.3, 3.2, 3.1 and 3.0 are not affected by this issue.',
-              'diffID':        'sha256:b2211fbc93f3bb0604bd24acc24fb7f60f2c154505217e00e3689a8baa0c0c72',
-              'fixedVersions': [
-                '3.0.14-r0'
-              ],
-              'installedVersion': '3.0.8-r3',
-              'packageName':      'libcrypto3',
-              'purl':             'pkg:apk/alpine/libcrypto3@3.0.8-r3?arch=x86_64&distro=3.17.2',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2024:9333',
-                'https://access.redhat.com/security/cve/CVE-2024-4741',
-                'https://bugzilla.redhat.com/2274020',
-                'https://bugzilla.redhat.com/2281029',
-                'https://bugzilla.redhat.com/2283757',
-                'https://bugzilla.redhat.com/2294581',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2274020',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2281029',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2283757',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2294581',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-2511',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-4603',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-4741',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-5535',
-                'https://errata.almalinux.org/9/ALSA-2024-9333.html',
-                'https://errata.rockylinux.org/RLSA-2024:9333',
-                'https://github.com/openssl/openssl/commit/704f725b96aa373ee45ecfb23f6abfe8be8d9177',
-                'https://github.com/openssl/openssl/commit/b3f0eb0a295f58f16ba43ba99dad70d4ee5c437d',
-                'https://github.com/openssl/openssl/commit/c88c3de51020c37e8706bf7a682a162593053aac',
-                'https://github.com/openssl/openssl/commit/e5093133c35ca82874ad83697af76f4b0f7e3bd8',
-                'https://github.openssl.org/openssl/extended-releases/commit/f7a045f3143fc6da2ee66bf52d8df04829590dd4',
-                'https://linux.oracle.com/cve/CVE-2024-4741.html',
-                'https://linux.oracle.com/errata/ELSA-2024-9333.html',
-                'https://lists.debian.org/debian-lts-announce/2024/10/msg00033.html',
-                'https://lists.debian.org/debian-lts-announce/2024/11/msg00000.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2024-4741',
-                'https://security.netapp.com/advisory/ntap-20240621-0004/',
-                'https://ubuntu.com/security/notices/USN-6937-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2024-4741',
-                'https://www.openssl.org/news/secadv/20240528.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: Use After Free with SSL_free_buffers'
-            },
-            {
-              'cve':  'CVE-2024-5535',
-              'cvss': {
-                'redhat': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-125'
-              ],
-              'description':   'Issue summary: Calling the OpenSSL API function SSL_select_next_proto with an\nempty supported client protocols buffer may cause a crash or memory contents to\nbe sent to the peer.\n\nImpact summary: A buffer overread can have a range of potential consequences\nsuch as unexpected application beahviour or a crash. In particular this issue\ncould result in up to 255 bytes of arbitrary private data from memory being sent\nto the peer leading to a loss of confidentiality. However, only applications\nthat directly call the SSL_select_next_proto function with a 0 length list of\nsupported client protocols are affected by this issue. This would normally never\nbe a valid scenario and is typically not under attacker control but may occur by\naccident in the case of a configuration or programming error in the calling\napplication.\n\nThe OpenSSL API function SSL_select_next_proto is typically used by TLS\napplications that support ALPN (Application Layer Protocol Negotiation) or NPN\n(Next Protocol Negotiation). NPN is older, was never standardised and\nis deprecated in favour of ALPN. We believe that ALPN is significantly more\nwidely deployed than NPN. The SSL_select_next_proto function accepts a list of\nprotocols from the server and a list of protocols from the client and returns\nthe first protocol that appears in the server list that also appears in the\nclient list. In the case of no overlap between the two lists it returns the\nfirst item in the client list. In either case it will signal whether an overlap\nbetween the two lists was found. In the case where SSL_select_next_proto is\ncalled with a zero length client list it fails to notice this condition and\nreturns the memory immediately following the client list pointer (and reports\nthat there was no overlap in the lists).\n\nThis function is typically called from a server side application callback for\nALPN or a client side application callback for NPN. In the case of ALPN the list\nof protocols supplied by the client is guaranteed by libssl to never be zero in\nlength. The list of server protocols comes from the application and should never\nnormally be expected to be of zero length. In this case if the\nSSL_select_next_proto function has been called as expected (with the list\nsupplied by the client passed in the client/client_len parameters), then the\napplication will not be vulnerable to this issue. If the application has\naccidentally been configured with a zero length server list, and has\naccidentally passed that zero length server list in the client/client_len\nparameters, and has additionally failed to correctly handle a "no overlap"\nresponse (which would normally result in a handshake failure in ALPN) then it\nwill be vulnerable to this problem.\n\nIn the case of NPN, the protocol permits the client to opportunistically select\na protocol when there is no overlap. OpenSSL returns the first client protocol\nin the no overlap case in support of this. The list of client protocols comes\nfrom the application and should never normally be expected to be of zero length.\nHowever if the SSL_select_next_proto function is accidentally called with a\nclient_len of 0 then an invalid memory pointer will be returned instead. If the\napplication uses this output as the opportunistic protocol then the loss of\nconfidentiality will occur.\n\nThis issue has been assessed as Low severity because applications are most\nlikely to be vulnerable if they are using NPN instead of ALPN - but NPN is not\nwidely used. It also requires an application configuration or programming error.\nFinally, this issue would not typically be under attacker control making active\nexploitation unlikely.\n\nThe FIPS modules in 3.3, 3.2, 3.1 and 3.0 are not affected by this issue.\n\nDue to the low severity of this issue we are not issuing new releases of\nOpenSSL at this time. The fix will be included in the next releases when they\nbecome available.',
-              'diffID':        'sha256:b2211fbc93f3bb0604bd24acc24fb7f60f2c154505217e00e3689a8baa0c0c72',
-              'fixedVersions': [
-                '3.0.14-r0'
-              ],
-              'installedVersion': '3.0.8-r3',
-              'packageName':      'libcrypto3',
-              'purl':             'pkg:apk/alpine/libcrypto3@3.0.8-r3?arch=x86_64&distro=3.17.2',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2024/06/27/1',
-                'http://www.openwall.com/lists/oss-security/2024/06/28/4',
-                'http://www.openwall.com/lists/oss-security/2024/08/15/1',
-                'https://access.redhat.com/errata/RHSA-2025:1671',
-                'https://access.redhat.com/security/cve/CVE-2024-5535',
-                'https://bugzilla.redhat.com/2294581',
-                'https://bugzilla.redhat.com/2294676',
-                'https://bugzilla.redhat.com/2301888',
-                'https://bugzilla.redhat.com/2318857',
-                'https://bugzilla.redhat.com/2318858',
-                'https://bugzilla.redhat.com/2318870',
-                'https://bugzilla.redhat.com/2318873',
-                'https://bugzilla.redhat.com/2318874',
-                'https://bugzilla.redhat.com/2318876',
-                'https://bugzilla.redhat.com/2318882',
-                'https://bugzilla.redhat.com/2318883',
-                'https://bugzilla.redhat.com/2318884',
-                'https://bugzilla.redhat.com/2318885',
-                'https://bugzilla.redhat.com/2318886',
-                'https://bugzilla.redhat.com/2318897',
-                'https://bugzilla.redhat.com/2318900',
-                'https://bugzilla.redhat.com/2318905',
-                'https://bugzilla.redhat.com/2318914',
-                'https://bugzilla.redhat.com/2318922',
-                'https://bugzilla.redhat.com/2318923',
-                'https://bugzilla.redhat.com/2318925',
-                'https://bugzilla.redhat.com/2318926',
-                'https://bugzilla.redhat.com/2318927',
-                'https://bugzilla.redhat.com/2331191',
-                'https://bugzilla.redhat.com/2339218',
-                'https://bugzilla.redhat.com/2339220',
-                'https://bugzilla.redhat.com/2339221',
-                'https://bugzilla.redhat.com/2339226',
-                'https://bugzilla.redhat.com/2339231',
-                'https://bugzilla.redhat.com/2339236',
-                'https://bugzilla.redhat.com/2339238',
-                'https://bugzilla.redhat.com/2339243',
-                'https://bugzilla.redhat.com/2339247',
-                'https://bugzilla.redhat.com/2339252',
-                'https://bugzilla.redhat.com/2339259',
-                'https://bugzilla.redhat.com/2339266',
-                'https://bugzilla.redhat.com/2339270',
-                'https://bugzilla.redhat.com/2339271',
-                'https://bugzilla.redhat.com/2339275',
-                'https://bugzilla.redhat.com/2339277',
-                'https://bugzilla.redhat.com/2339281',
-                'https://bugzilla.redhat.com/2339284',
-                'https://bugzilla.redhat.com/2339291',
-                'https://bugzilla.redhat.com/2339293',
-                'https://bugzilla.redhat.com/2339295',
-                'https://bugzilla.redhat.com/2339299',
-                'https://bugzilla.redhat.com/2339300',
-                'https://bugzilla.redhat.com/2339304',
-                'https://bugzilla.redhat.com/2339305',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2274020',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2281029',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2283757',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2294581',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-2511',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-4603',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-4741',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-5535',
-                'https://errata.almalinux.org/9/ALSA-2025-1671.html',
-                'https://errata.rockylinux.org/RLSA-2024:9333',
-                'https://github.com/openssl/openssl/commit/4ada436a1946cbb24db5ab4ca082b69c1bc10f37',
-                'https://github.com/openssl/openssl/commit/99fb785a5f85315b95288921a321a935ea29a51e',
-                'https://github.com/openssl/openssl/commit/cf6f91f6121f4db167405db2f0de410a456f260c',
-                'https://github.com/openssl/openssl/commit/e86ac436f0bd54d4517745483e2315650fae7b2c',
-                'https://github.openssl.org/openssl/extended-releases/commit/9947251413065a05189a63c9b7a6c1d4e224c21c',
-                'https://github.openssl.org/openssl/extended-releases/commit/b78ec0824da857223486660177d3b1f255c65d87',
-                'https://linux.oracle.com/cve/CVE-2024-5535.html',
-                'https://linux.oracle.com/errata/ELSA-2025-1673.html',
-                'https://lists.debian.org/debian-lts-announce/2024/10/msg00033.html',
-                'https://lists.debian.org/debian-lts-announce/2024/11/msg00000.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2024-5535',
-                'https://openssl.org/news/secadv/20240627.txt',
-                'https://security.netapp.com/advisory/ntap-20240712-0005/',
-                'https://security.netapp.com/advisory/ntap-20241025-0006/',
-                'https://security.netapp.com/advisory/ntap-20241025-0010/',
-                'https://ubuntu.com/security/notices/USN-6937-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2024-5535',
-                'https://www.openssl.org/news/secadv/20240627.txt',
-                'https://www.oracle.com/security-alerts/cpuoct2024.html#AppendixMSQL'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: SSL_select_next_proto buffer overread'
-            },
-            {
-              'cve':  'CVE-2024-2511',
-              'cvss': {
-                'redhat': {
-                  'v3score':  '3.7',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L'
-                }
-              },
-              'cwes': [
-                'CWE-1325'
-              ],
-              'description':   'Issue summary: Some non-default TLS server configurations can cause unbounded\nmemory growth when processing TLSv1.3 sessions\n\nImpact summary: An attacker may exploit certain server configurations to trigger\nunbounded memory growth that would lead to a Denial of Service\n\nThis problem can occur in TLSv1.3 if the non-default SSL_OP_NO_TICKET option is\nbeing used (but not if early_data support is also configured and the default\nanti-replay protection is in use). In this case, under certain conditions, the\nsession cache can get into an incorrect state and it will fail to flush properly\nas it fills. The session cache will continue to grow in an unbounded manner. A\nmalicious client could deliberately create the scenario for this failure to\nforce a Denial of Service. It may also happen by accident in normal operation.\n\nThis issue only affects TLS servers supporting TLSv1.3. It does not affect TLS\nclients.\n\nThe FIPS modules in 3.2, 3.1 and 3.0 are not affected by this issue. OpenSSL\n1.0.2 is also not affected by this issue.',
-              'diffID':        'sha256:b2211fbc93f3bb0604bd24acc24fb7f60f2c154505217e00e3689a8baa0c0c72',
-              'fixedVersions': [
-                '3.0.12-r5'
-              ],
-              'installedVersion': '3.0.8-r3',
-              'packageName':      'libcrypto3',
-              'purl':             'pkg:apk/alpine/libcrypto3@3.0.8-r3?arch=x86_64&distro=3.17.2',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2024/04/08/5',
-                'https://access.redhat.com/errata/RHSA-2024:9333',
-                'https://access.redhat.com/security/cve/CVE-2024-2511',
-                'https://bugzilla.redhat.com/2274020',
-                'https://bugzilla.redhat.com/2281029',
-                'https://bugzilla.redhat.com/2283757',
-                'https://bugzilla.redhat.com/2294581',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2274020',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2281029',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2283757',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2294581',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-2511',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-4603',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-4741',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-5535',
-                'https://errata.almalinux.org/9/ALSA-2024-9333.html',
-                'https://errata.rockylinux.org/RLSA-2024:9333',
-                'https://github.com/openssl/openssl/commit/7e4d731b1c07201ad9374c1cd9ac5263bdf35bce',
-                'https://github.com/openssl/openssl/commit/b52867a9f618bb955bed2a3ce3db4d4f97ed8e5d',
-                'https://github.com/openssl/openssl/commit/e9d7083e241670332e0443da0f0d4ffb52829f08',
-                'https://github.openssl.org/openssl/extended-releases/commit/5f8d25770ae6437db119dfc951e207271a326640',
-                'https://linux.oracle.com/cve/CVE-2024-2511.html',
-                'https://linux.oracle.com/errata/ELSA-2024-9333.html',
-                'https://lists.debian.org/debian-lts-announce/2024/10/msg00033.html',
-                'https://lists.debian.org/debian-lts-announce/2024/11/msg00000.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2024-2511',
-                'https://security.netapp.com/advisory/ntap-20240503-0013/',
-                'https://ubuntu.com/security/notices/USN-6937-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2024-2511',
-                'https://www.openssl.org/news/secadv/20240408.txt',
-                'https://www.openssl.org/news/vulnerabilities.html'
-              ],
-              'severity':   'LOW',
-              'suppressed': false,
-              'title':      'openssl: Unbounded memory growth with session handling in TLSv1.3'
-            },
-            {
-              'cve':  'CVE-2024-9143',
-              'cvss': {
-                'redhat': {
-                  'v3score':  '3.7',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L'
-                }
-              },
-              'cwes': [
-                'CWE-125',
-                'CWE-787'
-              ],
-              'description':   "Issue summary: Use of the low-level GF(2^m) elliptic curve APIs with untrusted\nexplicit values for the field polynomial can lead to out-of-bounds memory reads\nor writes.\n\nImpact summary: Out of bound memory writes can lead to an application crash or\neven a possibility of a remote code execution, however, in all the protocols\ninvolving Elliptic Curve Cryptography that we're aware of, either only \"named\ncurves\" are supported, or, if explicit curve parameters are supported, they\nspecify an X9.62 encoding of binary (GF(2^m)) curves that can't represent\nproblematic input values. Thus the likelihood of existence of a vulnerable\napplication is low.\n\nIn particular, the X9.62 encoding is used for ECC keys in X.509 certificates,\nso problematic inputs cannot occur in the context of processing X.509\ncertificates.  Any problematic use-cases would have to be using an \"exotic\"\ncurve encoding.\n\nThe affected APIs include: EC_GROUP_new_curve_GF2m(), EC_GROUP_new_from_params(),\nand various supporting BN_GF2m_*() functions.\n\nApplications working with \"exotic\" explicit binary (GF(2^m)) curve parameters,\nthat make it possible to represent invalid field polynomials with a zero\nconstant term, via the above or similar APIs, may terminate abruptly as a\nresult of reading or writing outside of array bounds.  Remote code execution\ncannot easily be ruled out.\n\nThe FIPS modules in 3.3, 3.2, 3.1 and 3.0 are not affected by this issue.",
-              'diffID':        'sha256:b2211fbc93f3bb0604bd24acc24fb7f60f2c154505217e00e3689a8baa0c0c72',
-              'fixedVersions': [
-                '3.0.15-r1'
-              ],
-              'installedVersion': '3.0.8-r3',
-              'packageName':      'libcrypto3',
-              'purl':             'pkg:apk/alpine/libcrypto3@3.0.8-r3?arch=x86_64&distro=3.17.2',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2024/10/16/1',
-                'http://www.openwall.com/lists/oss-security/2024/10/23/1',
-                'http://www.openwall.com/lists/oss-security/2024/10/24/1',
-                'https://access.redhat.com/security/cve/CVE-2024-9143',
-                'https://github.com/openssl/openssl/commit/72ae83ad214d2eef262461365a1975707f862712',
-                'https://github.com/openssl/openssl/commit/bc7e04d7c8d509fb78fc0e285aa948fb0da04700',
-                'https://github.com/openssl/openssl/commit/c0d3e4d32d2805f49bec30547f225bc4d092e1f4',
-                'https://github.com/openssl/openssl/commit/fdf6723362ca51bd883295efe206cb5b1cfa5154',
-                'https://github.openssl.org/openssl/extended-releases/commit/8efc0cbaa8ebba8e116f7b81a876a4123594d86a',
-                'https://github.openssl.org/openssl/extended-releases/commit/9d576994cec2b7aa37a91740ea7e680810957e41',
-                'https://lists.debian.org/debian-lts-announce/2024/10/msg00033.html',
-                'https://lists.debian.org/debian-lts-announce/2024/11/msg00000.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2024-9143',
-                'https://openssl-library.org/news/secadv/20241016.txt',
-                'https://security.netapp.com/advisory/ntap-20241101-0001/',
-                'https://ubuntu.com/security/notices/USN-7264-1',
-                'https://ubuntu.com/security/notices/USN-7278-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2024-9143'
-              ],
-              'severity':   'LOW',
-              'suppressed': false,
-              'title':      'openssl: Low-level invalid GF(2^m) parameters lead to OOB memory access'
-            },
-            {
-              'cve':  'CVE-2023-5363',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N'
-                },
-                'redhat': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-684'
-              ],
-              'description':   "Issue summary: A bug has been identified in the processing of key and\ninitialisation vector (IV) lengths.  This can lead to potential truncation\nor overruns during the initialisation of some symmetric ciphers.\n\nImpact summary: A truncation in the IV can result in non-uniqueness,\nwhich could result in loss of confidentiality for some cipher modes.\n\nWhen calling EVP_EncryptInit_ex2(), EVP_DecryptInit_ex2() or\nEVP_CipherInit_ex2() the provided OSSL_PARAM array is processed after\nthe key and IV have been established.  Any alterations to the key length,\nvia the \"keylen\" parameter or the IV length, via the \"ivlen\" parameter,\nwithin the OSSL_PARAM array will not take effect as intended, potentially\ncausing truncation or overreading of these values.  The following ciphers\nand cipher modes are impacted: RC2, RC4, RC5, CCM, GCM and OCB.\n\nFor the CCM, GCM and OCB cipher modes, truncation of the IV can result in\nloss of confidentiality.  For example, when following NIST's SP 800-38D\nsection 8.2.1 guidance for constructing a deterministic IV for AES in\nGCM mode, truncation of the counter portion could lead to IV reuse.\n\nBoth truncations and overruns of the key and overruns of the IV will\nproduce incorrect results and could, in some cases, trigger a memory\nexception.  However, these issues are not currently assessed as security\ncritical.\n\nChanging the key and/or IV lengths is not considered to be a common operation\nand the vulnerable API was recently introduced. Furthermore it is likely that\napplication developers will have spotted this problem during testing since\ndecryption would fail unless both peers in the communication were similarly\nvulnerable. For these reasons we expect the probability of an application being\nvulnerable to this to be quite low. However if an application is vulnerable then\nthis issue is considered very serious. For these reasons we have assessed this\nissue as Moderate severity overall.\n\nThe OpenSSL SSL/TLS implementation is not affected by this issue.\n\nThe OpenSSL 3.0 and 3.1 FIPS providers are not affected by this because\nthe issue lies outside of the FIPS provider boundary.\n\nOpenSSL 3.1 and 3.0 are vulnerable to this issue.",
-              'diffID':        'sha256:b2211fbc93f3bb0604bd24acc24fb7f60f2c154505217e00e3689a8baa0c0c72',
-              'fixedVersions': [
-                '3.0.12-r0'
-              ],
-              'installedVersion': '3.0.8-r3',
-              'packageName':      'libssl3',
-              'purl':             'pkg:apk/alpine/libssl3@3.0.8-r3?arch=x86_64&distro=3.17.2',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2023/10/24/1',
-                'https://access.redhat.com/errata/RHSA-2024:0310',
-                'https://access.redhat.com/security/cve/CVE-2023-5363',
-                'https://bugzilla.redhat.com/2243839',
-                'https://errata.almalinux.org/9/ALSA-2024-0310.html',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=0df40630850fb2740e6be6890bb905d3fc623b2d',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=5f69f5c65e483928c4b28ed16af6e5742929f1ee',
-                'https://linux.oracle.com/cve/CVE-2023-5363.html',
-                'https://linux.oracle.com/errata/ELSA-2024-12093.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-5363',
-                'https://security.netapp.com/advisory/ntap-20231027-0010/',
-                'https://security.netapp.com/advisory/ntap-20240201-0003/',
-                'https://security.netapp.com/advisory/ntap-20240201-0004/',
-                'https://security.netapp.com/advisory/ntap-20241108-0002/',
-                'https://ubuntu.com/security/notices/USN-6450-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-5363',
-                'https://www.debian.org/security/2023/dsa-5532',
-                'https://www.openssl.org/news/secadv/20231024.txt'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: Incorrect cipher key and IV length processing'
-            },
-            {
-              'cve':  'CVE-2024-6119',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-843'
-              ],
-              'description':   "Issue summary: Applications performing certificate name checks (e.g., TLS\nclients checking server certificates) may attempt to read an invalid memory\naddress resulting in abnormal termination of the application process.\n\nImpact summary: Abnormal termination of an application can a cause a denial of\nservice.\n\nApplications performing certificate name checks (e.g., TLS clients checking\nserver certificates) may attempt to read an invalid memory address when\ncomparing the expected name with an `otherName` subject alternative name of an\nX.509 certificate. This may result in an exception that terminates the\napplication program.\n\nNote that basic certificate chain validation (signatures, dates, ...) is not\naffected, the denial of service can occur only when the application also\nspecifies an expected DNS name, Email address or IP address.\n\nTLS servers rarely solicit client certificates, and even when they do, they\ngenerally don't perform a name check against a reference identifier (expected\nidentity), but rather extract the presented identity after checking the\ncertificate chain.  So TLS servers are generally not affected and the severity\nof the issue is Moderate.\n\nThe FIPS modules in 3.3, 3.2, 3.1 and 3.0 are not affected by this issue.",
-              'diffID':        'sha256:b2211fbc93f3bb0604bd24acc24fb7f60f2c154505217e00e3689a8baa0c0c72',
-              'fixedVersions': [
-                '3.0.15-r0'
-              ],
-              'installedVersion': '3.0.8-r3',
-              'packageName':      'libssl3',
-              'purl':             'pkg:apk/alpine/libssl3@3.0.8-r3?arch=x86_64&distro=3.17.2',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2024/09/03/4',
-                'https://access.redhat.com/errata/RHSA-2024:8935',
-                'https://access.redhat.com/security/cve/CVE-2024-6119',
-                'https://bugzilla.redhat.com/2306158',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2306158',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-6119',
-                'https://errata.almalinux.org/9/ALSA-2024-8935.html',
-                'https://errata.rockylinux.org/RLSA-2024:6783',
-                'https://github.com/openssl/openssl/commit/05f360d9e849a1b277db628f1f13083a7f8dd04f',
-                'https://github.com/openssl/openssl/commit/06d1dc3fa96a2ba5a3e22735a033012aadc9f0d6',
-                'https://github.com/openssl/openssl/commit/621f3729831b05ee828a3203eddb621d014ff2b2',
-                'https://github.com/openssl/openssl/commit/7dfcee2cd2a63b2c64b9b4b0850be64cb695b0a0',
-                'https://github.com/openssl/openssl/security/advisories/GHSA-5qrj-vq78-58fj',
-                'https://linux.oracle.com/cve/CVE-2024-6119.html',
-                'https://linux.oracle.com/errata/ELSA-2024-8935.html',
-                'https://lists.freebsd.org/archives/freebsd-security/2024-September/000303.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2024-6119',
-                'https://openssl-library.org/news/secadv/20240903.txt',
-                'https://security.netapp.com/advisory/ntap-20240912-0001/',
-                'https://ubuntu.com/security/notices/USN-6986-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2024-6119'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: Possible denial of service in X.509 name checks'
-            },
-            {
-              'cve':  'CVE-2023-1255',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '5.1',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-125'
-              ],
-              'description':   'Issue summary: The AES-XTS cipher decryption implementation for 64 bit ARM\nplatform contains a bug that could cause it to read past the input buffer,\nleading to a crash.\n\nImpact summary: Applications that use the AES-XTS algorithm on the 64 bit ARM\nplatform can crash in rare circumstances. The AES-XTS algorithm is usually\nused for disk encryption.\n\nThe AES-XTS cipher decryption implementation for 64 bit ARM platform will read\npast the end of the ciphertext buffer if the ciphertext size is 4 mod 5 in 16\nbyte blocks, e.g. 144 bytes or 1024 bytes. If the memory after the ciphertext\nbuffer is unmapped, this will trigger a crash which results in a denial of\nservice.\n\nIf an attacker can control the size and location of the ciphertext buffer\nbeing decrypted by an application using AES-XTS on 64 bit ARM, the\napplication is affected. This is fairly unlikely making this issue\na Low severity one.',
-              'diffID':        'sha256:b2211fbc93f3bb0604bd24acc24fb7f60f2c154505217e00e3689a8baa0c0c72',
-              'fixedVersions': [
-                '3.0.8-r4'
-              ],
-              'installedVersion': '3.0.8-r3',
-              'packageName':      'libssl3',
-              'purl':             'pkg:apk/alpine/libssl3@3.0.8-r3?arch=x86_64&distro=3.17.2',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2023:3722',
-                'https://access.redhat.com/security/cve/CVE-2023-1255',
-                'https://bugzilla.redhat.com/2181082',
-                'https://bugzilla.redhat.com/2182561',
-                'https://bugzilla.redhat.com/2182565',
-                'https://bugzilla.redhat.com/2188461',
-                'https://bugzilla.redhat.com/2207947',
-                'https://errata.almalinux.org/9/ALSA-2023-3722.html',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=02ac9c9420275868472f33b01def01218742b8bb',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=bc2f61ad70971869b242fc1cb445b98bad50074a',
-                'https://linux.oracle.com/cve/CVE-2023-1255.html',
-                'https://linux.oracle.com/errata/ELSA-2023-3722.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-1255',
-                'https://security.netapp.com/advisory/ntap-20230908-0006/',
-                'https://ubuntu.com/security/notices/USN-6119-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-1255',
-                'https://www.openssl.org/news/secadv/20230419.txt',
-                'https://www.openssl.org/news/secadv/20230420.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: Input buffer over-read in AES-XTS implementation on 64 bit ARM'
-            },
-            {
-              'cve':  'CVE-2023-2650',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '6.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-770'
-              ],
-              'description':   "Issue summary: Processing some specially crafted ASN.1 object identifiers or\ndata containing them may be very slow.\n\nImpact summary: Applications that use OBJ_obj2txt() directly, or use any of\nthe OpenSSL subsystems OCSP, PKCS7/SMIME, CMS, CMP/CRMF or TS with no message\nsize limit may experience notable to very long delays when processing those\nmessages, which may lead to a Denial of Service.\n\nAn OBJECT IDENTIFIER is composed of a series of numbers - sub-identifiers -\nmost of which have no size limit.  OBJ_obj2txt() may be used to translate\nan ASN.1 OBJECT IDENTIFIER given in DER encoding form (using the OpenSSL\ntype ASN1_OBJECT) to its canonical numeric text form, which are the\nsub-identifiers of the OBJECT IDENTIFIER in decimal form, separated by\nperiods.\n\nWhen one of the sub-identifiers in the OBJECT IDENTIFIER is very large\n(these are sizes that are seen as absurdly large, taking up tens or hundreds\nof KiBs), the translation to a decimal number in text may take a very long\ntime.  The time complexity is O(n^2) with 'n' being the size of the\nsub-identifiers in bytes (*).\n\nWith OpenSSL 3.0, support to fetch cryptographic algorithms using names /\nidentifiers in string form was introduced.  This includes using OBJECT\nIDENTIFIERs in canonical numeric text form as identifiers for fetching\nalgorithms.\n\nSuch OBJECT IDENTIFIERs may be received through the ASN.1 structure\nAlgorithmIdentifier, which is commonly used in multiple protocols to specify\nwhat cryptographic algorithm should be used to sign or verify, encrypt or\ndecrypt, or digest passed data.\n\nApplications that call OBJ_obj2txt() directly with untrusted data are\naffected, with any version of OpenSSL.  If the use is for the mere purpose\nof display, the severity is considered low.\n\nIn OpenSSL 3.0 and newer, this affects the subsystems OCSP, PKCS7/SMIME,\nCMS, CMP/CRMF or TS.  It also impacts anything that processes X.509\ncertificates, including simple things like verifying its signature.\n\nThe impact on TLS is relatively low, because all versions of OpenSSL have a\n100KiB limit on the peer's certificate chain.  Additionally, this only\nimpacts clients, or servers that have explicitly enabled client\nauthentication.\n\nIn OpenSSL 1.1.1 and 1.0.2, this only affects displaying diverse objects,\nsuch as X.509 certificates.  This is assumed to not happen in such a way\nthat it would cause a Denial of Service, so these versions are considered\nnot affected by this issue in such a way that it would be cause for concern,\nand the severity is therefore considered low.",
-              'diffID':        'sha256:b2211fbc93f3bb0604bd24acc24fb7f60f2c154505217e00e3689a8baa0c0c72',
-              'fixedVersions': [
-                '3.0.9-r0'
-              ],
-              'installedVersion': '3.0.8-r3',
-              'packageName':      'libssl3',
-              'purl':             'pkg:apk/alpine/libssl3@3.0.8-r3?arch=x86_64&distro=3.17.2',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2023/05/30/1',
-                'https://access.redhat.com/errata/RHSA-2023:6330',
-                'https://access.redhat.com/security/cve/CVE-2023-2650',
-                'https://bugzilla.redhat.com/1858038',
-                'https://bugzilla.redhat.com/2207947',
-                'https://errata.almalinux.org/9/ALSA-2023-6330.html',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=423a2bc737a908ad0c77bda470b2b59dc879936b',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=853c5e56ee0b8650c73140816bb8b91d6163422c',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=9e209944b35cf82368071f160a744b6178f9b098',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=db779b0e10b047f2585615e0b8f2acdf21f8544a',
-                'https://linux.oracle.com/cve/CVE-2023-2650.html',
-                'https://linux.oracle.com/errata/ELSA-2023-6330.html',
-                'https://lists.debian.org/debian-lts-announce/2023/06/msg00011.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-2650',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0009',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://security.netapp.com/advisory/ntap-20230703-0001/',
-                'https://security.netapp.com/advisory/ntap-20231027-0009/',
-                'https://ubuntu.com/security/notices/USN-6119-1',
-                'https://ubuntu.com/security/notices/USN-6188-1',
-                'https://ubuntu.com/security/notices/USN-6672-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-2650',
-                'https://www.debian.org/security/2023/dsa-5417',
-                'https://www.openssl.org/news/secadv/20230530.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: Possible DoS translating ASN.1 object identifiers'
-            },
-            {
-              'cve':  'CVE-2023-2975',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N'
-                },
-                'redhat': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-354',
-                'CWE-287'
-              ],
-              'description':   'Issue summary: The AES-SIV cipher implementation contains a bug that causes\nit to ignore empty associated data entries which are unauthenticated as\na consequence.\n\nImpact summary: Applications that use the AES-SIV algorithm and want to\nauthenticate empty data entries as associated data can be misled by removing,\nadding or reordering such empty entries as these are ignored by the OpenSSL\nimplementation. We are currently unaware of any such applications.\n\nThe AES-SIV algorithm allows for authentication of multiple associated\ndata entries along with the encryption. To authenticate empty data the\napplication has to call EVP_EncryptUpdate() (or EVP_CipherUpdate()) with\nNULL pointer as the output buffer and 0 as the input buffer length.\nThe AES-SIV implementation in OpenSSL just returns success for such a call\ninstead of performing the associated data authentication operation.\nThe empty data thus will not be authenticated.\n\nAs this issue does not affect non-empty associated data authentication and\nwe expect it to be rare for an application to use empty associated data\nentries this is qualified as Low severity issue.',
-              'diffID':        'sha256:b2211fbc93f3bb0604bd24acc24fb7f60f2c154505217e00e3689a8baa0c0c72',
-              'fixedVersions': [
-                '3.0.9-r2'
-              ],
-              'installedVersion': '3.0.8-r3',
-              'packageName':      'libssl3',
-              'purl':             'pkg:apk/alpine/libssl3@3.0.8-r3?arch=x86_64&distro=3.17.2',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2023/07/15/1',
-                'http://www.openwall.com/lists/oss-security/2023/07/19/5',
-                'https://access.redhat.com/errata/RHSA-2024:2447',
-                'https://access.redhat.com/security/cve/CVE-2023-2975',
-                'https://bugzilla.redhat.com/2223016',
-                'https://bugzilla.redhat.com/2224962',
-                'https://bugzilla.redhat.com/2227852',
-                'https://bugzilla.redhat.com/2248616',
-                'https://bugzilla.redhat.com/2257571',
-                'https://bugzilla.redhat.com/2258502',
-                'https://bugzilla.redhat.com/2259944',
-                'https://errata.almalinux.org/9/ALSA-2024-2447.html',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=00e2f5eea29994d19293ec4e8c8775ba73678598',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=6a83f0c958811f07e0d11dfc6b5a6a98edfd5bdc',
-                'https://linux.oracle.com/cve/CVE-2023-2975.html',
-                'https://linux.oracle.com/errata/ELSA-2024-2447.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-2975',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://security.netapp.com/advisory/ntap-20230725-0004/',
-                'https://ubuntu.com/security/notices/USN-6450-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-2975',
-                'https://www.openssl.org/news/secadv/20230714.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: AES-SIV cipher implementation contains a bug that causes it to ignore empty associated data entries'
-            },
-            {
-              'cve':  'CVE-2023-3446',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L'
-                },
-                'redhat': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L'
-                }
-              },
-              'cwes': [
-                'CWE-606',
-                'CWE-1333'
-              ],
-              'description':   "Issue summary: Checking excessively long DH keys or parameters may be very slow.\n\nImpact summary: Applications that use the functions DH_check(), DH_check_ex()\nor EVP_PKEY_param_check() to check a DH key or DH parameters may experience long\ndelays. Where the key or parameters that are being checked have been obtained\nfrom an untrusted source this may lead to a Denial of Service.\n\nThe function DH_check() performs various checks on DH parameters. One of those\nchecks confirms that the modulus ('p' parameter) is not too large. Trying to use\na very large modulus is slow and OpenSSL will not normally use a modulus which\nis over 10,000 bits in length.\n\nHowever the DH_check() function checks numerous aspects of the key or parameters\nthat have been supplied. Some of those checks use the supplied modulus value\neven if it has already been found to be too large.\n\nAn application that calls DH_check() and supplies a key or parameters obtained\nfrom an untrusted source could be vulernable to a Denial of Service attack.\n\nThe function DH_check() is itself called by a number of other OpenSSL functions.\nAn application calling any of those other functions may similarly be affected.\nThe other functions affected by this are DH_check_ex() and\nEVP_PKEY_param_check().\n\nAlso vulnerable are the OpenSSL dhparam and pkeyparam command line applications\nwhen using the '-check' option.\n\nThe OpenSSL SSL/TLS implementation is not affected by this issue.\nThe OpenSSL 3.0 and 3.1 FIPS providers are not affected by this issue.",
-              'diffID':        'sha256:b2211fbc93f3bb0604bd24acc24fb7f60f2c154505217e00e3689a8baa0c0c72',
-              'fixedVersions': [
-                '3.0.9-r3'
-              ],
-              'installedVersion': '3.0.8-r3',
-              'packageName':      'libssl3',
-              'purl':             'pkg:apk/alpine/libssl3@3.0.8-r3?arch=x86_64&distro=3.17.2',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2023/07/19/4',
-                'http://www.openwall.com/lists/oss-security/2023/07/19/5',
-                'http://www.openwall.com/lists/oss-security/2023/07/19/6',
-                'http://www.openwall.com/lists/oss-security/2023/07/31/1',
-                'http://www.openwall.com/lists/oss-security/2024/05/16/1',
-                'https://access.redhat.com/errata/RHSA-2024:2447',
-                'https://access.redhat.com/security/cve/CVE-2023-3446',
-                'https://bugzilla.redhat.com/2223016',
-                'https://bugzilla.redhat.com/2224962',
-                'https://bugzilla.redhat.com/2227852',
-                'https://bugzilla.redhat.com/2248616',
-                'https://bugzilla.redhat.com/2257571',
-                'https://bugzilla.redhat.com/2258502',
-                'https://bugzilla.redhat.com/2259944',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2224962',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2257582',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2257583',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2258677',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2258688',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2258691',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2258694',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2258700',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-36763',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-36764',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3446',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45229',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45231',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45232',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45233',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45235',
-                'https://errata.almalinux.org/9/ALSA-2024-2447.html',
-                'https://errata.rockylinux.org/RLSA-2024:2264',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=1fa20cf2f506113c761777127a38bce5068740eb',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=8780a896543a654e757db1b9396383f9d8095528',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=9a0a4d3c1e7138915563c0df4fe6a3f9377b839c',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=fc9867c1e03c22ebf56943be205202e576aabf23',
-                'https://linux.oracle.com/cve/CVE-2023-3446.html',
-                'https://linux.oracle.com/errata/ELSA-2024-2447.html',
-                'https://lists.debian.org/debian-lts-announce/2023/08/msg00019.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-3446',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://security.netapp.com/advisory/ntap-20230803-0011/',
-                'https://ubuntu.com/security/notices/USN-6435-1',
-                'https://ubuntu.com/security/notices/USN-6435-2',
-                'https://ubuntu.com/security/notices/USN-6450-1',
-                'https://ubuntu.com/security/notices/USN-6709-1',
-                'https://ubuntu.com/security/notices/USN-7018-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-3446',
-                'https://www.openssl.org/news/secadv/20230719.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: Excessive time spent checking DH keys and parameters'
-            },
-            {
-              'cve':  'CVE-2023-3817',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L'
-                },
-                'redhat': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L'
-                }
-              },
-              'cwes': [
-                'CWE-606',
-                'CWE-834'
-              ],
-              'description':   'Issue summary: Checking excessively long DH keys or parameters may be very slow.\n\nImpact summary: Applications that use the functions DH_check(), DH_check_ex()\nor EVP_PKEY_param_check() to check a DH key or DH parameters may experience long\ndelays. Where the key or parameters that are being checked have been obtained\nfrom an untrusted source this may lead to a Denial of Service.\n\nThe function DH_check() performs various checks on DH parameters. After fixing\nCVE-2023-3446 it was discovered that a large q parameter value can also trigger\nan overly long computation during some of these checks. A correct q value,\nif present, cannot be larger than the modulus p parameter, thus it is\nunnecessary to perform these checks if q is larger than p.\n\nAn application that calls DH_check() and supplies a key or parameters obtained\nfrom an untrusted source could be vulnerable to a Denial of Service attack.\n\nThe function DH_check() is itself called by a number of other OpenSSL functions.\nAn application calling any of those other functions may similarly be affected.\nThe other functions affected by this are DH_check_ex() and\nEVP_PKEY_param_check().\n\nAlso vulnerable are the OpenSSL dhparam and pkeyparam command line applications\nwhen using the "-check" option.\n\nThe OpenSSL SSL/TLS implementation is not affected by this issue.\n\nThe OpenSSL 3.0 and 3.1 FIPS providers are not affected by this issue.',
-              'diffID':        'sha256:b2211fbc93f3bb0604bd24acc24fb7f60f2c154505217e00e3689a8baa0c0c72',
-              'fixedVersions': [
-                '3.0.10-r0'
-              ],
-              'installedVersion': '3.0.8-r3',
-              'packageName':      'libssl3',
-              'purl':             'pkg:apk/alpine/libssl3@3.0.8-r3?arch=x86_64&distro=3.17.2',
-              'references':       [
-                'http://seclists.org/fulldisclosure/2023/Jul/43',
-                'http://www.openwall.com/lists/oss-security/2023/07/31/1',
-                'http://www.openwall.com/lists/oss-security/2023/09/22/11',
-                'http://www.openwall.com/lists/oss-security/2023/09/22/9',
-                'http://www.openwall.com/lists/oss-security/2023/11/06/2',
-                'https://access.redhat.com/errata/RHSA-2024:2447',
-                'https://access.redhat.com/security/cve/CVE-2023-3817',
-                'https://bugzilla.redhat.com/2223016',
-                'https://bugzilla.redhat.com/2224962',
-                'https://bugzilla.redhat.com/2227852',
-                'https://bugzilla.redhat.com/2248616',
-                'https://bugzilla.redhat.com/2257571',
-                'https://bugzilla.redhat.com/2258502',
-                'https://bugzilla.redhat.com/2259944',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2224962',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2227852',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2248616',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2270358',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3446',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3817',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-5678',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-2408',
-                'https://errata.almalinux.org/9/ALSA-2024-2447.html',
-                'https://errata.rockylinux.org/RLSA-2023:7877',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=6a1eb62c29db6cb5eec707f9338aee00f44e26f5',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=869ad69aadd985c7b8ca6f4e5dd0eb274c9f3644',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=9002fd07327a91f35ba6c1307e71fa6fd4409b7f',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=91ddeba0f2269b017dc06c46c993a788974b1aa5',
-                'https://linux.oracle.com/cve/CVE-2023-3817.html',
-                'https://linux.oracle.com/errata/ELSA-2024-2447.html',
-                'https://lists.debian.org/debian-lts-announce/2023/08/msg00019.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-3817',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://security.netapp.com/advisory/ntap-20230818-0014/',
-                'https://security.netapp.com/advisory/ntap-20231027-0008/',
-                'https://security.netapp.com/advisory/ntap-20240621-0006/',
-                'https://ubuntu.com/security/notices/USN-6435-1',
-                'https://ubuntu.com/security/notices/USN-6435-2',
-                'https://ubuntu.com/security/notices/USN-6450-1',
-                'https://ubuntu.com/security/notices/USN-6709-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-3817',
-                'https://www.openssl.org/news/secadv/20230731.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'OpenSSL: Excessive time spent checking DH q parameter value'
-            },
-            {
-              'cve':  'CVE-2023-5678',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L'
-                },
-                'redhat': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L'
-                }
-              },
-              'cwes': [
-                'CWE-606',
-                'CWE-754'
-              ],
-              'description':   "Issue summary: Generating excessively long X9.42 DH keys or checking\nexcessively long X9.42 DH keys or parameters may be very slow.\n\nImpact summary: Applications that use the functions DH_generate_key() to\ngenerate an X9.42 DH key may experience long delays.  Likewise, applications\nthat use DH_check_pub_key(), DH_check_pub_key_ex() or EVP_PKEY_public_check()\nto check an X9.42 DH key or X9.42 DH parameters may experience long delays.\nWhere the key or parameters that are being checked have been obtained from\nan untrusted source this may lead to a Denial of Service.\n\nWhile DH_check() performs all the necessary checks (as of CVE-2023-3817),\nDH_check_pub_key() doesn't make any of these checks, and is therefore\nvulnerable for excessively large P and Q parameters.\n\nLikewise, while DH_generate_key() performs a check for an excessively large\nP, it doesn't check for an excessively large Q.\n\nAn application that calls DH_generate_key() or DH_check_pub_key() and\nsupplies a key or parameters obtained from an untrusted source could be\nvulnerable to a Denial of Service attack.\n\nDH_generate_key() and DH_check_pub_key() are also called by a number of\nother OpenSSL functions.  An application calling any of those other\nfunctions may similarly be affected.  The other functions affected by this\nare DH_check_pub_key_ex(), EVP_PKEY_public_check(), and EVP_PKEY_generate().\n\nAlso vulnerable are the OpenSSL pkey command line application when using the\n\"-pubcheck\" option, as well as the OpenSSL genpkey command line application.\n\nThe OpenSSL SSL/TLS implementation is not affected by this issue.\n\nThe OpenSSL 3.0 and 3.1 FIPS providers are not affected by this issue.",
-              'diffID':        'sha256:b2211fbc93f3bb0604bd24acc24fb7f60f2c154505217e00e3689a8baa0c0c72',
-              'fixedVersions': [
-                '3.0.12-r1'
-              ],
-              'installedVersion': '3.0.8-r3',
-              'packageName':      'libssl3',
-              'purl':             'pkg:apk/alpine/libssl3@3.0.8-r3?arch=x86_64&distro=3.17.2',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2024/03/11/1',
-                'https://access.redhat.com/errata/RHSA-2024:2447',
-                'https://access.redhat.com/security/cve/CVE-2023-5678',
-                'https://bugzilla.redhat.com/2223016',
-                'https://bugzilla.redhat.com/2224962',
-                'https://bugzilla.redhat.com/2227852',
-                'https://bugzilla.redhat.com/2248616',
-                'https://bugzilla.redhat.com/2257571',
-                'https://bugzilla.redhat.com/2258502',
-                'https://bugzilla.redhat.com/2259944',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2224962',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2227852',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2248616',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2270358',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3446',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3817',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-5678',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-2408',
-                'https://errata.almalinux.org/9/ALSA-2024-2447.html',
-                'https://errata.rockylinux.org/RLSA-2023:7877',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=34efaef6c103d636ab507a0cc34dca4d3aecc055',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=710fee740904b6290fef0dd5536fbcedbc38ff0c',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=db925ae2e65d0d925adef429afc37f75bd1c2017',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=ddeb4b6c6d527e54ce9a99cba785c0f7776e54b6',
-                'https://linux.oracle.com/cve/CVE-2023-5678.html',
-                'https://linux.oracle.com/errata/ELSA-2024-2447.html',
-                'https://lists.debian.org/debian-lts-announce/2024/10/msg00033.html',
-                'https://lists.debian.org/debian-lts-announce/2024/11/msg00000.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-5678',
-                'https://security.netapp.com/advisory/ntap-20231130-0010/',
-                'https://ubuntu.com/security/notices/USN-6622-1',
-                'https://ubuntu.com/security/notices/USN-6632-1',
-                'https://ubuntu.com/security/notices/USN-6709-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-5678',
-                'https://www.openssl.org/news/secadv/20231106.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: Generating excessively long X9.42 DH keys or checking excessively long X9.42 DH keys or parameters may be very slow'
-            },
-            {
-              'cve':  'CVE-2023-6129',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '6.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-440',
-                'CWE-787'
-              ],
-              'description':   'Issue summary: The POLY1305 MAC (message authentication code) implementation\ncontains a bug that might corrupt the internal state of applications running\non PowerPC CPU based platforms if the CPU provides vector instructions.\n\nImpact summary: If an attacker can influence whether the POLY1305 MAC\nalgorithm is used, the application state might be corrupted with various\napplication dependent consequences.\n\nThe POLY1305 MAC (message authentication code) implementation in OpenSSL for\nPowerPC CPUs restores the contents of vector registers in a different order\nthan they are saved. Thus the contents of some of these vector registers\nare corrupted when returning to the caller. The vulnerable code is used only\non newer PowerPC processors supporting the PowerISA 2.07 instructions.\n\nThe consequences of this kind of internal application state corruption can\nbe various - from no consequences, if the calling application does not\ndepend on the contents of non-volatile XMM registers at all, to the worst\nconsequences, where the attacker could get complete control of the application\nprocess. However unless the compiler uses the vector registers for storing\npointers, the most likely consequence, if any, would be an incorrect result\nof some application dependent calculations or a crash leading to a denial of\nservice.\n\nThe POLY1305 MAC algorithm is most frequently used as part of the\nCHACHA20-POLY1305 AEAD (authenticated encryption with associated data)\nalgorithm. The most common usage of this AEAD cipher is with TLS protocol\nversions 1.2 and 1.3. If this cipher is enabled on the server a malicious\nclient can influence whether this AEAD cipher is used. This implies that\nTLS server applications using OpenSSL can be potentially impacted. However\nwe are currently not aware of any concrete application that would be affected\nby this issue therefore we consider this a Low severity security issue.',
-              'diffID':        'sha256:b2211fbc93f3bb0604bd24acc24fb7f60f2c154505217e00e3689a8baa0c0c72',
-              'fixedVersions': [
-                '3.0.12-r2'
-              ],
-              'installedVersion': '3.0.8-r3',
-              'packageName':      'libssl3',
-              'purl':             'pkg:apk/alpine/libssl3@3.0.8-r3?arch=x86_64&distro=3.17.2',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2024/03/11/1',
-                'https://access.redhat.com/errata/RHSA-2024:9088',
-                'https://access.redhat.com/security/cve/CVE-2023-6129',
-                'https://bugzilla.redhat.com/2257571',
-                'https://bugzilla.redhat.com/2258502',
-                'https://bugzilla.redhat.com/2259944',
-                'https://bugzilla.redhat.com/2284243',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2257571',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2258502',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2259944',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2284243',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-6129',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-6237',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-0727',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-1298',
-                'https://errata.almalinux.org/9/ALSA-2024-9088.html',
-                'https://errata.rockylinux.org/RLSA-2024:9088',
-                'https://github.com/openssl/openssl/commit/050d26383d4e264966fb83428e72d5d48f402d35',
-                'https://github.com/openssl/openssl/commit/5b139f95c9a47a55a0c54100f3837b1eee942b04',
-                'https://github.com/openssl/openssl/commit/f3fc5808fe9ff74042d639839610d03b8fdcc015',
-                'https://linux.oracle.com/cve/CVE-2023-6129.html',
-                'https://linux.oracle.com/errata/ELSA-2024-9088.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-6129',
-                'https://security.netapp.com/advisory/ntap-20240216-0009/',
-                'https://security.netapp.com/advisory/ntap-20240426-0008/',
-                'https://security.netapp.com/advisory/ntap-20240426-0013/',
-                'https://security.netapp.com/advisory/ntap-20240503-0011/',
-                'https://ubuntu.com/security/notices/USN-6622-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-6129',
-                'https://www.openssl.org/news/secadv/20240109.txt',
-                'https://www.openwall.com/lists/oss-security/2024/01/09/1'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: POLY1305 MAC implementation corrupts vector registers on PowerPC'
-            },
-            {
-              'cve':  'CVE-2023-6237',
-              'cvss': {
-                'redhat': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-606'
-              ],
-              'description':   "Issue summary: Checking excessively long invalid RSA public keys may take\na long time.\n\nImpact summary: Applications that use the function EVP_PKEY_public_check()\nto check RSA public keys may experience long delays. Where the key that\nis being checked has been obtained from an untrusted source this may lead\nto a Denial of Service.\n\nWhen function EVP_PKEY_public_check() is called on RSA public keys,\na computation is done to confirm that the RSA modulus, n, is composite.\nFor valid RSA keys, n is a product of two or more large primes and this\ncomputation completes quickly. However, if n is an overly large prime,\nthen this computation would take a long time.\n\nAn application that calls EVP_PKEY_public_check() and supplies an RSA key\nobtained from an untrusted source could be vulnerable to a Denial of Service\nattack.\n\nThe function EVP_PKEY_public_check() is not called from other OpenSSL\nfunctions however it is called from the OpenSSL pkey command line\napplication. For that reason that application is also vulnerable if used\nwith the '-pubin' and '-check' options on untrusted data.\n\nThe OpenSSL SSL/TLS implementation is not affected by this issue.\n\nThe OpenSSL 3.0 and 3.1 FIPS providers are affected by this issue.",
-              'diffID':        'sha256:b2211fbc93f3bb0604bd24acc24fb7f60f2c154505217e00e3689a8baa0c0c72',
-              'fixedVersions': [
-                '3.0.12-r3'
-              ],
-              'installedVersion': '3.0.8-r3',
-              'packageName':      'libssl3',
-              'purl':             'pkg:apk/alpine/libssl3@3.0.8-r3?arch=x86_64&distro=3.17.2',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2024/03/11/1',
-                'https://access.redhat.com/errata/RHSA-2024:9088',
-                'https://access.redhat.com/security/cve/CVE-2023-6237',
-                'https://bugzilla.redhat.com/2257571',
-                'https://bugzilla.redhat.com/2258502',
-                'https://bugzilla.redhat.com/2259944',
-                'https://bugzilla.redhat.com/2284243',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2257571',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2258502',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2259944',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2284243',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-6129',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-6237',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-0727',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-1298',
-                'https://errata.almalinux.org/9/ALSA-2024-9088.html',
-                'https://errata.rockylinux.org/RLSA-2024:9088',
-                'https://github.com/openssl/openssl/commit/0b0f7abfb37350794a4b8960fafc292cd5d1b84d',
-                'https://github.com/openssl/openssl/commit/18c02492138d1eb8b6548cb26e7b625fb2414a2a',
-                'https://github.com/openssl/openssl/commit/a830f551557d3d66a84bbb18a5b889c640c36294',
-                'https://linux.oracle.com/cve/CVE-2023-6237.html',
-                'https://linux.oracle.com/errata/ELSA-2024-9088.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-6237',
-                'https://security.netapp.com/advisory/ntap-20240531-0007/',
-                'https://ubuntu.com/security/notices/USN-6622-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-6237',
-                'https://www.openssl.org/news/secadv/20240115.txt',
-                'https://www.openwall.com/lists/oss-security/2024/01/15/2'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: Excessive time spent checking invalid RSA public keys'
-            },
-            {
-              'cve':  'CVE-2024-0727',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '5.5',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H'
-                },
-                'nvd': {
-                  'v3score':  '5.5',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '5.5',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-476'
-              ],
-              'description':   'Issue summary: Processing a maliciously formatted PKCS12 file may lead OpenSSL\nto crash leading to a potential Denial of Service attack\n\nImpact summary: Applications loading files in the PKCS12 format from untrusted\nsources might terminate abruptly.\n\nA file in PKCS12 format can contain certificates and keys and may come from an\nuntrusted source. The PKCS12 specification allows certain fields to be NULL, but\nOpenSSL does not correctly check for this case. This can lead to a NULL pointer\ndereference that results in OpenSSL crashing. If an application processes PKCS12\nfiles from an untrusted source using the OpenSSL APIs then that application will\nbe vulnerable to this issue.\n\nOpenSSL APIs that are vulnerable to this are: PKCS12_parse(),\nPKCS12_unpack_p7data(), PKCS12_unpack_p7encdata(), PKCS12_unpack_authsafes()\nand PKCS12_newpass().\n\nWe have also fixed a similar issue in SMIME_write_PKCS7(). However since this\nfunction is related to writing data we do not consider it security significant.\n\nThe FIPS modules in 3.2, 3.1 and 3.0 are not affected by this issue.',
-              'diffID':        'sha256:b2211fbc93f3bb0604bd24acc24fb7f60f2c154505217e00e3689a8baa0c0c72',
-              'fixedVersions': [
-                '3.0.12-r4'
-              ],
-              'installedVersion': '3.0.8-r3',
-              'packageName':      'libssl3',
-              'purl':             'pkg:apk/alpine/libssl3@3.0.8-r3?arch=x86_64&distro=3.17.2',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2024/03/11/1',
-                'https://access.redhat.com/errata/RHSA-2024:9088',
-                'https://access.redhat.com/security/cve/CVE-2024-0727',
-                'https://bugzilla.redhat.com/2257571',
-                'https://bugzilla.redhat.com/2258502',
-                'https://bugzilla.redhat.com/2259944',
-                'https://bugzilla.redhat.com/2284243',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2257571',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2258502',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2259944',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2284243',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-6129',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-6237',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-0727',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-1298',
-                'https://errata.almalinux.org/9/ALSA-2024-9088.html',
-                'https://errata.rockylinux.org/RLSA-2024:9088',
-                'https://github.com/alexcrichton/openssl-src-rs/commit/add20f73b6b42be7451af2e1044d4e0e778992b2',
-                'https://github.com/github/advisory-database/pull/3472',
-                'https://github.com/openssl/openssl/commit/09df4395b5071217b76dc7d3d2e630eb8c5a79c2',
-                'https://github.com/openssl/openssl/commit/775acfdbd0c6af9ac855f34969cdab0c0c90844a',
-                'https://github.com/openssl/openssl/commit/d135eeab8a5dbf72b3da5240bab9ddb7678dbd2c',
-                'https://github.com/openssl/openssl/pull/23362',
-                'https://github.com/pyca/cryptography/commit/3519591d255d4506fbcd0d04037d45271903c64d',
-                'https://github.openssl.org/openssl/extended-releases/commit/03b3941d60c4bce58fab69a0c22377ab439bc0e8',
-                'https://github.openssl.org/openssl/extended-releases/commit/aebaa5883e31122b404e450732dc833dc9dee539',
-                'https://linux.oracle.com/cve/CVE-2024-0727.html',
-                'https://linux.oracle.com/errata/ELSA-2024-9088.html',
-                'https://lists.debian.org/debian-lts-announce/2024/10/msg00033.html',
-                'https://lists.debian.org/debian-lts-announce/2024/11/msg00000.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2024-0727',
-                'https://security.netapp.com/advisory/ntap-20240208-0006',
-                'https://security.netapp.com/advisory/ntap-20240208-0006/',
-                'https://ubuntu.com/security/notices/USN-6622-1',
-                'https://ubuntu.com/security/notices/USN-6632-1',
-                'https://ubuntu.com/security/notices/USN-6709-1',
-                'https://ubuntu.com/security/notices/USN-7018-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2024-0727',
-                'https://www.openssl.org/news/secadv/20240125.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: denial of service via null dereference'
-            },
-            {
-              'cve':  'CVE-2024-4603',
-              'cvss': {
-                'redhat': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L'
-                }
-              },
-              'cwes': [
-                'CWE-606',
-                'CWE-834'
-              ],
-              'description':   'Issue summary: Checking excessively long DSA keys or parameters may be very\nslow.\n\nImpact summary: Applications that use the functions EVP_PKEY_param_check()\nor EVP_PKEY_public_check() to check a DSA public key or DSA parameters may\nexperience long delays. Where the key or parameters that are being checked\nhave been obtained from an untrusted source this may lead to a Denial of\nService.\n\nThe functions EVP_PKEY_param_check() or EVP_PKEY_public_check() perform\nvarious checks on DSA parameters. Some of those computations take a long time\nif the modulus (`p` parameter) is too large.\n\nTrying to use a very large modulus is slow and OpenSSL will not allow using\npublic keys with a modulus which is over 10,000 bits in length for signature\nverification. However the key and parameter check functions do not limit\nthe modulus size when performing the checks.\n\nAn application that calls EVP_PKEY_param_check() or EVP_PKEY_public_check()\nand supplies a key or parameters obtained from an untrusted source could be\nvulnerable to a Denial of Service attack.\n\nThese functions are not called by OpenSSL itself on untrusted DSA keys so\nonly applications that directly call these functions may be vulnerable.\n\nAlso vulnerable are the OpenSSL pkey and pkeyparam command line applications\nwhen using the `-check` option.\n\nThe OpenSSL SSL/TLS implementation is not affected by this issue.\n\nThe OpenSSL 3.0 and 3.1 FIPS providers are affected by this issue.',
-              'diffID':        'sha256:b2211fbc93f3bb0604bd24acc24fb7f60f2c154505217e00e3689a8baa0c0c72',
-              'fixedVersions': [
-                '3.0.13-r0'
-              ],
-              'installedVersion': '3.0.8-r3',
-              'packageName':      'libssl3',
-              'purl':             'pkg:apk/alpine/libssl3@3.0.8-r3?arch=x86_64&distro=3.17.2',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2024/05/16/2',
-                'https://access.redhat.com/errata/RHSA-2024:9333',
-                'https://access.redhat.com/security/cve/CVE-2024-4603',
-                'https://bugzilla.redhat.com/2274020',
-                'https://bugzilla.redhat.com/2281029',
-                'https://bugzilla.redhat.com/2283757',
-                'https://bugzilla.redhat.com/2294581',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2274020',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2281029',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2283757',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2294581',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-2511',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-4603',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-4741',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-5535',
-                'https://errata.almalinux.org/9/ALSA-2024-9333.html',
-                'https://errata.rockylinux.org/RLSA-2024:9333',
-                'https://github.com/openssl/openssl/commit/3559e868e58005d15c6013a0c1fd832e51c73397',
-                'https://github.com/openssl/openssl/commit/53ea06486d296b890d565fb971b2764fcd826e7e',
-                'https://github.com/openssl/openssl/commit/9c39b3858091c152f52513c066ff2c5a47969f0d',
-                'https://github.com/openssl/openssl/commit/da343d0605c826ef197aceedc67e8e04f065f740',
-                'https://linux.oracle.com/cve/CVE-2024-4603.html',
-                'https://linux.oracle.com/errata/ELSA-2024-9333.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2024-4603',
-                'https://security.netapp.com/advisory/ntap-20240621-0001/',
-                'https://ubuntu.com/security/notices/USN-6937-1',
-                'https://www.cve.org/CVERecord?id=CVE-2024-4603',
-                'https://www.openssl.org/news/secadv/20240516.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: Excessive time spent checking DSA keys and parameters'
-            },
-            {
-              'cve':  'CVE-2024-4741',
-              'cvss': {
-                'redhat': {
-                  'v3score':  '5.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   'Issue summary: Calling the OpenSSL API function SSL_free_buffers may cause\nmemory to be accessed that was previously freed in some situations\n\nImpact summary: A use after free can have a range of potential consequences such\nas the corruption of valid data, crashes or execution of arbitrary code.\nHowever, only applications that directly call the SSL_free_buffers function are\naffected by this issue. Applications that do not call this function are not\nvulnerable. Our investigations indicate that this function is rarely used by\napplications.\n\nThe SSL_free_buffers function is used to free the internal OpenSSL buffer used\nwhen processing an incoming record from the network. The call is only expected\nto succeed if the buffer is not currently in use. However, two scenarios have\nbeen identified where the buffer is freed even when still in use.\n\nThe first scenario occurs where a record header has been received from the\nnetwork and processed by OpenSSL, but the full record body has not yet arrived.\nIn this case calling SSL_free_buffers will succeed even though a record has only\nbeen partially processed and the buffer is still in use.\n\nThe second scenario occurs where a full record containing application data has\nbeen received and processed by OpenSSL but the application has only read part of\nthis data. Again a call to SSL_free_buffers will succeed even though the buffer\nis still in use.\n\nWhile these scenarios could occur accidentally during normal operation a\nmalicious attacker could attempt to engineer a stituation where this occurs.\nWe are not aware of this issue being actively exploited.\n\nThe FIPS modules in 3.3, 3.2, 3.1 and 3.0 are not affected by this issue.',
-              'diffID':        'sha256:b2211fbc93f3bb0604bd24acc24fb7f60f2c154505217e00e3689a8baa0c0c72',
-              'fixedVersions': [
-                '3.0.14-r0'
-              ],
-              'installedVersion': '3.0.8-r3',
-              'packageName':      'libssl3',
-              'purl':             'pkg:apk/alpine/libssl3@3.0.8-r3?arch=x86_64&distro=3.17.2',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2024:9333',
-                'https://access.redhat.com/security/cve/CVE-2024-4741',
-                'https://bugzilla.redhat.com/2274020',
-                'https://bugzilla.redhat.com/2281029',
-                'https://bugzilla.redhat.com/2283757',
-                'https://bugzilla.redhat.com/2294581',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2274020',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2281029',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2283757',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2294581',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-2511',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-4603',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-4741',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-5535',
-                'https://errata.almalinux.org/9/ALSA-2024-9333.html',
-                'https://errata.rockylinux.org/RLSA-2024:9333',
-                'https://github.com/openssl/openssl/commit/704f725b96aa373ee45ecfb23f6abfe8be8d9177',
-                'https://github.com/openssl/openssl/commit/b3f0eb0a295f58f16ba43ba99dad70d4ee5c437d',
-                'https://github.com/openssl/openssl/commit/c88c3de51020c37e8706bf7a682a162593053aac',
-                'https://github.com/openssl/openssl/commit/e5093133c35ca82874ad83697af76f4b0f7e3bd8',
-                'https://github.openssl.org/openssl/extended-releases/commit/f7a045f3143fc6da2ee66bf52d8df04829590dd4',
-                'https://linux.oracle.com/cve/CVE-2024-4741.html',
-                'https://linux.oracle.com/errata/ELSA-2024-9333.html',
-                'https://lists.debian.org/debian-lts-announce/2024/10/msg00033.html',
-                'https://lists.debian.org/debian-lts-announce/2024/11/msg00000.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2024-4741',
-                'https://security.netapp.com/advisory/ntap-20240621-0004/',
-                'https://ubuntu.com/security/notices/USN-6937-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2024-4741',
-                'https://www.openssl.org/news/secadv/20240528.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: Use After Free with SSL_free_buffers'
-            },
-            {
-              'cve':  'CVE-2024-5535',
-              'cvss': {
-                'redhat': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-125'
-              ],
-              'description':   'Issue summary: Calling the OpenSSL API function SSL_select_next_proto with an\nempty supported client protocols buffer may cause a crash or memory contents to\nbe sent to the peer.\n\nImpact summary: A buffer overread can have a range of potential consequences\nsuch as unexpected application beahviour or a crash. In particular this issue\ncould result in up to 255 bytes of arbitrary private data from memory being sent\nto the peer leading to a loss of confidentiality. However, only applications\nthat directly call the SSL_select_next_proto function with a 0 length list of\nsupported client protocols are affected by this issue. This would normally never\nbe a valid scenario and is typically not under attacker control but may occur by\naccident in the case of a configuration or programming error in the calling\napplication.\n\nThe OpenSSL API function SSL_select_next_proto is typically used by TLS\napplications that support ALPN (Application Layer Protocol Negotiation) or NPN\n(Next Protocol Negotiation). NPN is older, was never standardised and\nis deprecated in favour of ALPN. We believe that ALPN is significantly more\nwidely deployed than NPN. The SSL_select_next_proto function accepts a list of\nprotocols from the server and a list of protocols from the client and returns\nthe first protocol that appears in the server list that also appears in the\nclient list. In the case of no overlap between the two lists it returns the\nfirst item in the client list. In either case it will signal whether an overlap\nbetween the two lists was found. In the case where SSL_select_next_proto is\ncalled with a zero length client list it fails to notice this condition and\nreturns the memory immediately following the client list pointer (and reports\nthat there was no overlap in the lists).\n\nThis function is typically called from a server side application callback for\nALPN or a client side application callback for NPN. In the case of ALPN the list\nof protocols supplied by the client is guaranteed by libssl to never be zero in\nlength. The list of server protocols comes from the application and should never\nnormally be expected to be of zero length. In this case if the\nSSL_select_next_proto function has been called as expected (with the list\nsupplied by the client passed in the client/client_len parameters), then the\napplication will not be vulnerable to this issue. If the application has\naccidentally been configured with a zero length server list, and has\naccidentally passed that zero length server list in the client/client_len\nparameters, and has additionally failed to correctly handle a "no overlap"\nresponse (which would normally result in a handshake failure in ALPN) then it\nwill be vulnerable to this problem.\n\nIn the case of NPN, the protocol permits the client to opportunistically select\na protocol when there is no overlap. OpenSSL returns the first client protocol\nin the no overlap case in support of this. The list of client protocols comes\nfrom the application and should never normally be expected to be of zero length.\nHowever if the SSL_select_next_proto function is accidentally called with a\nclient_len of 0 then an invalid memory pointer will be returned instead. If the\napplication uses this output as the opportunistic protocol then the loss of\nconfidentiality will occur.\n\nThis issue has been assessed as Low severity because applications are most\nlikely to be vulnerable if they are using NPN instead of ALPN - but NPN is not\nwidely used. It also requires an application configuration or programming error.\nFinally, this issue would not typically be under attacker control making active\nexploitation unlikely.\n\nThe FIPS modules in 3.3, 3.2, 3.1 and 3.0 are not affected by this issue.\n\nDue to the low severity of this issue we are not issuing new releases of\nOpenSSL at this time. The fix will be included in the next releases when they\nbecome available.',
-              'diffID':        'sha256:b2211fbc93f3bb0604bd24acc24fb7f60f2c154505217e00e3689a8baa0c0c72',
-              'fixedVersions': [
-                '3.0.14-r0'
-              ],
-              'installedVersion': '3.0.8-r3',
-              'packageName':      'libssl3',
-              'purl':             'pkg:apk/alpine/libssl3@3.0.8-r3?arch=x86_64&distro=3.17.2',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2024/06/27/1',
-                'http://www.openwall.com/lists/oss-security/2024/06/28/4',
-                'http://www.openwall.com/lists/oss-security/2024/08/15/1',
-                'https://access.redhat.com/errata/RHSA-2025:1671',
-                'https://access.redhat.com/security/cve/CVE-2024-5535',
-                'https://bugzilla.redhat.com/2294581',
-                'https://bugzilla.redhat.com/2294676',
-                'https://bugzilla.redhat.com/2301888',
-                'https://bugzilla.redhat.com/2318857',
-                'https://bugzilla.redhat.com/2318858',
-                'https://bugzilla.redhat.com/2318870',
-                'https://bugzilla.redhat.com/2318873',
-                'https://bugzilla.redhat.com/2318874',
-                'https://bugzilla.redhat.com/2318876',
-                'https://bugzilla.redhat.com/2318882',
-                'https://bugzilla.redhat.com/2318883',
-                'https://bugzilla.redhat.com/2318884',
-                'https://bugzilla.redhat.com/2318885',
-                'https://bugzilla.redhat.com/2318886',
-                'https://bugzilla.redhat.com/2318897',
-                'https://bugzilla.redhat.com/2318900',
-                'https://bugzilla.redhat.com/2318905',
-                'https://bugzilla.redhat.com/2318914',
-                'https://bugzilla.redhat.com/2318922',
-                'https://bugzilla.redhat.com/2318923',
-                'https://bugzilla.redhat.com/2318925',
-                'https://bugzilla.redhat.com/2318926',
-                'https://bugzilla.redhat.com/2318927',
-                'https://bugzilla.redhat.com/2331191',
-                'https://bugzilla.redhat.com/2339218',
-                'https://bugzilla.redhat.com/2339220',
-                'https://bugzilla.redhat.com/2339221',
-                'https://bugzilla.redhat.com/2339226',
-                'https://bugzilla.redhat.com/2339231',
-                'https://bugzilla.redhat.com/2339236',
-                'https://bugzilla.redhat.com/2339238',
-                'https://bugzilla.redhat.com/2339243',
-                'https://bugzilla.redhat.com/2339247',
-                'https://bugzilla.redhat.com/2339252',
-                'https://bugzilla.redhat.com/2339259',
-                'https://bugzilla.redhat.com/2339266',
-                'https://bugzilla.redhat.com/2339270',
-                'https://bugzilla.redhat.com/2339271',
-                'https://bugzilla.redhat.com/2339275',
-                'https://bugzilla.redhat.com/2339277',
-                'https://bugzilla.redhat.com/2339281',
-                'https://bugzilla.redhat.com/2339284',
-                'https://bugzilla.redhat.com/2339291',
-                'https://bugzilla.redhat.com/2339293',
-                'https://bugzilla.redhat.com/2339295',
-                'https://bugzilla.redhat.com/2339299',
-                'https://bugzilla.redhat.com/2339300',
-                'https://bugzilla.redhat.com/2339304',
-                'https://bugzilla.redhat.com/2339305',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2274020',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2281029',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2283757',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2294581',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-2511',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-4603',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-4741',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-5535',
-                'https://errata.almalinux.org/9/ALSA-2025-1671.html',
-                'https://errata.rockylinux.org/RLSA-2024:9333',
-                'https://github.com/openssl/openssl/commit/4ada436a1946cbb24db5ab4ca082b69c1bc10f37',
-                'https://github.com/openssl/openssl/commit/99fb785a5f85315b95288921a321a935ea29a51e',
-                'https://github.com/openssl/openssl/commit/cf6f91f6121f4db167405db2f0de410a456f260c',
-                'https://github.com/openssl/openssl/commit/e86ac436f0bd54d4517745483e2315650fae7b2c',
-                'https://github.openssl.org/openssl/extended-releases/commit/9947251413065a05189a63c9b7a6c1d4e224c21c',
-                'https://github.openssl.org/openssl/extended-releases/commit/b78ec0824da857223486660177d3b1f255c65d87',
-                'https://linux.oracle.com/cve/CVE-2024-5535.html',
-                'https://linux.oracle.com/errata/ELSA-2025-1673.html',
-                'https://lists.debian.org/debian-lts-announce/2024/10/msg00033.html',
-                'https://lists.debian.org/debian-lts-announce/2024/11/msg00000.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2024-5535',
-                'https://openssl.org/news/secadv/20240627.txt',
-                'https://security.netapp.com/advisory/ntap-20240712-0005/',
-                'https://security.netapp.com/advisory/ntap-20241025-0006/',
-                'https://security.netapp.com/advisory/ntap-20241025-0010/',
-                'https://ubuntu.com/security/notices/USN-6937-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2024-5535',
-                'https://www.openssl.org/news/secadv/20240627.txt',
-                'https://www.oracle.com/security-alerts/cpuoct2024.html#AppendixMSQL'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: SSL_select_next_proto buffer overread'
-            },
-            {
-              'cve':  'CVE-2024-2511',
-              'cvss': {
-                'redhat': {
-                  'v3score':  '3.7',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L'
-                }
-              },
-              'cwes': [
-                'CWE-1325'
-              ],
-              'description':   'Issue summary: Some non-default TLS server configurations can cause unbounded\nmemory growth when processing TLSv1.3 sessions\n\nImpact summary: An attacker may exploit certain server configurations to trigger\nunbounded memory growth that would lead to a Denial of Service\n\nThis problem can occur in TLSv1.3 if the non-default SSL_OP_NO_TICKET option is\nbeing used (but not if early_data support is also configured and the default\nanti-replay protection is in use). In this case, under certain conditions, the\nsession cache can get into an incorrect state and it will fail to flush properly\nas it fills. The session cache will continue to grow in an unbounded manner. A\nmalicious client could deliberately create the scenario for this failure to\nforce a Denial of Service. It may also happen by accident in normal operation.\n\nThis issue only affects TLS servers supporting TLSv1.3. It does not affect TLS\nclients.\n\nThe FIPS modules in 3.2, 3.1 and 3.0 are not affected by this issue. OpenSSL\n1.0.2 is also not affected by this issue.',
-              'diffID':        'sha256:b2211fbc93f3bb0604bd24acc24fb7f60f2c154505217e00e3689a8baa0c0c72',
-              'fixedVersions': [
-                '3.0.12-r5'
-              ],
-              'installedVersion': '3.0.8-r3',
-              'packageName':      'libssl3',
-              'purl':             'pkg:apk/alpine/libssl3@3.0.8-r3?arch=x86_64&distro=3.17.2',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2024/04/08/5',
-                'https://access.redhat.com/errata/RHSA-2024:9333',
-                'https://access.redhat.com/security/cve/CVE-2024-2511',
-                'https://bugzilla.redhat.com/2274020',
-                'https://bugzilla.redhat.com/2281029',
-                'https://bugzilla.redhat.com/2283757',
-                'https://bugzilla.redhat.com/2294581',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2274020',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2281029',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2283757',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2294581',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-2511',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-4603',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-4741',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-5535',
-                'https://errata.almalinux.org/9/ALSA-2024-9333.html',
-                'https://errata.rockylinux.org/RLSA-2024:9333',
-                'https://github.com/openssl/openssl/commit/7e4d731b1c07201ad9374c1cd9ac5263bdf35bce',
-                'https://github.com/openssl/openssl/commit/b52867a9f618bb955bed2a3ce3db4d4f97ed8e5d',
-                'https://github.com/openssl/openssl/commit/e9d7083e241670332e0443da0f0d4ffb52829f08',
-                'https://github.openssl.org/openssl/extended-releases/commit/5f8d25770ae6437db119dfc951e207271a326640',
-                'https://linux.oracle.com/cve/CVE-2024-2511.html',
-                'https://linux.oracle.com/errata/ELSA-2024-9333.html',
-                'https://lists.debian.org/debian-lts-announce/2024/10/msg00033.html',
-                'https://lists.debian.org/debian-lts-announce/2024/11/msg00000.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2024-2511',
-                'https://security.netapp.com/advisory/ntap-20240503-0013/',
-                'https://ubuntu.com/security/notices/USN-6937-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2024-2511',
-                'https://www.openssl.org/news/secadv/20240408.txt',
-                'https://www.openssl.org/news/vulnerabilities.html'
-              ],
-              'severity':   'LOW',
-              'suppressed': false,
-              'title':      'openssl: Unbounded memory growth with session handling in TLSv1.3'
-            },
-            {
-              'cve':  'CVE-2024-9143',
-              'cvss': {
-                'redhat': {
-                  'v3score':  '3.7',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L'
-                }
-              },
-              'cwes': [
-                'CWE-125',
-                'CWE-787'
-              ],
-              'description':   "Issue summary: Use of the low-level GF(2^m) elliptic curve APIs with untrusted\nexplicit values for the field polynomial can lead to out-of-bounds memory reads\nor writes.\n\nImpact summary: Out of bound memory writes can lead to an application crash or\neven a possibility of a remote code execution, however, in all the protocols\ninvolving Elliptic Curve Cryptography that we're aware of, either only \"named\ncurves\" are supported, or, if explicit curve parameters are supported, they\nspecify an X9.62 encoding of binary (GF(2^m)) curves that can't represent\nproblematic input values. Thus the likelihood of existence of a vulnerable\napplication is low.\n\nIn particular, the X9.62 encoding is used for ECC keys in X.509 certificates,\nso problematic inputs cannot occur in the context of processing X.509\ncertificates.  Any problematic use-cases would have to be using an \"exotic\"\ncurve encoding.\n\nThe affected APIs include: EC_GROUP_new_curve_GF2m(), EC_GROUP_new_from_params(),\nand various supporting BN_GF2m_*() functions.\n\nApplications working with \"exotic\" explicit binary (GF(2^m)) curve parameters,\nthat make it possible to represent invalid field polynomials with a zero\nconstant term, via the above or similar APIs, may terminate abruptly as a\nresult of reading or writing outside of array bounds.  Remote code execution\ncannot easily be ruled out.\n\nThe FIPS modules in 3.3, 3.2, 3.1 and 3.0 are not affected by this issue.",
-              'diffID':        'sha256:b2211fbc93f3bb0604bd24acc24fb7f60f2c154505217e00e3689a8baa0c0c72',
-              'fixedVersions': [
-                '3.0.15-r1'
-              ],
-              'installedVersion': '3.0.8-r3',
-              'packageName':      'libssl3',
-              'purl':             'pkg:apk/alpine/libssl3@3.0.8-r3?arch=x86_64&distro=3.17.2',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2024/10/16/1',
-                'http://www.openwall.com/lists/oss-security/2024/10/23/1',
-                'http://www.openwall.com/lists/oss-security/2024/10/24/1',
-                'https://access.redhat.com/security/cve/CVE-2024-9143',
-                'https://github.com/openssl/openssl/commit/72ae83ad214d2eef262461365a1975707f862712',
-                'https://github.com/openssl/openssl/commit/bc7e04d7c8d509fb78fc0e285aa948fb0da04700',
-                'https://github.com/openssl/openssl/commit/c0d3e4d32d2805f49bec30547f225bc4d092e1f4',
-                'https://github.com/openssl/openssl/commit/fdf6723362ca51bd883295efe206cb5b1cfa5154',
-                'https://github.openssl.org/openssl/extended-releases/commit/8efc0cbaa8ebba8e116f7b81a876a4123594d86a',
-                'https://github.openssl.org/openssl/extended-releases/commit/9d576994cec2b7aa37a91740ea7e680810957e41',
-                'https://lists.debian.org/debian-lts-announce/2024/10/msg00033.html',
-                'https://lists.debian.org/debian-lts-announce/2024/11/msg00000.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2024-9143',
-                'https://openssl-library.org/news/secadv/20241016.txt',
-                'https://security.netapp.com/advisory/ntap-20241101-0001/',
-                'https://ubuntu.com/security/notices/USN-7264-1',
-                'https://ubuntu.com/security/notices/USN-7278-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2024-9143'
-              ],
-              'severity':   'LOW',
-              'suppressed': false,
-              'title':      'openssl: Low-level invalid GF(2^m) parameters lead to OOB memory access'
-            },
-            {
-              'cve':  'CVE-2025-26519',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-787'
-              ],
-              'description':   'musl libc 0.9.13 through 1.2.5 before 1.2.6 has an out-of-bounds write vulnerability when an attacker can trigger iconv conversion of untrusted EUC-KR text to UTF-8.',
-              'diffID':        'sha256:7cd52847ad775a5ddc4b58326cf884beee34544296402c6292ed76474c686d39',
-              'fixedVersions': [
-                '1.2.3-r6'
-              ],
-              'installedVersion': '1.2.3-r4',
-              'packageName':      'musl',
-              'purl':             'pkg:apk/alpine/musl@1.2.3-r4?arch=x86_64&distro=3.17.2',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2025/02/13/2',
-                'http://www.openwall.com/lists/oss-security/2025/02/13/3',
-                'http://www.openwall.com/lists/oss-security/2025/02/13/4',
-                'http://www.openwall.com/lists/oss-security/2025/02/13/5',
-                'http://www.openwall.com/lists/oss-security/2025/02/14/5',
-                'http://www.openwall.com/lists/oss-security/2025/02/14/6',
-                'https://git.musl-libc.org/cgit/musl/commit/?id=c47ad25ea3b484e10326f933e927c0bc8cded3da',
-                'https://git.musl-libc.org/cgit/musl/commit/?id=e5adcd97b5196e29991b524237381a0202a60659',
-                'https://www.openwall.com/lists/oss-security/2025/02/13/2'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'musl libc 0.9.13 through 1.2.5 before 1.2.6 has an out-of-bounds write ...'
-            },
-            {
-              'cve':  'CVE-2025-26519',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-787'
-              ],
-              'description':   'musl libc 0.9.13 through 1.2.5 before 1.2.6 has an out-of-bounds write vulnerability when an attacker can trigger iconv conversion of untrusted EUC-KR text to UTF-8.',
-              'diffID':        'sha256:7cd52847ad775a5ddc4b58326cf884beee34544296402c6292ed76474c686d39',
-              'fixedVersions': [
-                '1.2.3-r6'
-              ],
-              'installedVersion': '1.2.3-r4',
-              'packageName':      'musl-utils',
-              'purl':             'pkg:apk/alpine/musl-utils@1.2.3-r4?arch=x86_64&distro=3.17.2',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2025/02/13/2',
-                'http://www.openwall.com/lists/oss-security/2025/02/13/3',
-                'http://www.openwall.com/lists/oss-security/2025/02/13/4',
-                'http://www.openwall.com/lists/oss-security/2025/02/13/5',
-                'http://www.openwall.com/lists/oss-security/2025/02/14/5',
-                'http://www.openwall.com/lists/oss-security/2025/02/14/6',
-                'https://git.musl-libc.org/cgit/musl/commit/?id=c47ad25ea3b484e10326f933e927c0bc8cded3da',
-                'https://git.musl-libc.org/cgit/musl/commit/?id=e5adcd97b5196e29991b524237381a0202a60659',
-                'https://www.openwall.com/lists/oss-security/2025/02/13/2'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'musl libc 0.9.13 through 1.2.5 before 1.2.6 has an out-of-bounds write ...'
-            },
-            {
-              'cve':  'CVE-2023-42363',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.5',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.8',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   'A use-after-free vulnerability was discovered in xasprintf function in xfuncs_printf.c:344 in BusyBox v.1.36.1.',
-              'diffID':        'sha256:7cd52847ad775a5ddc4b58326cf884beee34544296402c6292ed76474c686d39',
-              'fixedVersions': [
-                '1.35.0-r31'
-              ],
-              'installedVersion': '1.35.0-r29',
-              'packageName':      'ssl_client',
-              'purl':             'pkg:apk/alpine/ssl_client@1.35.0-r29?arch=x86_64&distro=3.17.2',
-              'references':       [
-                'http://lists.busybox.net/pipermail/busybox/2024-May/090760.html',
-                'https://access.redhat.com/security/cve/CVE-2023-42363',
-                'https://bugs.busybox.net/show_bug.cgi?id=15865',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-42363',
-                'https://ubuntu.com/security/notices/USN-6961-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-42363'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk'
-            },
-            {
-              'cve':  'CVE-2023-42364',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.5',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.8',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   'A use-after-free vulnerability in BusyBox v.1.36.1 allows attackers to cause a denial of service via a crafted awk pattern in the awk.c evaluate function.',
-              'diffID':        'sha256:7cd52847ad775a5ddc4b58326cf884beee34544296402c6292ed76474c686d39',
-              'fixedVersions': [
-                '1.35.0-r31'
-              ],
-              'installedVersion': '1.35.0-r29',
-              'packageName':      'ssl_client',
-              'purl':             'pkg:apk/alpine/ssl_client@1.35.0-r29?arch=x86_64&distro=3.17.2',
-              'references':       [
-                'http://lists.busybox.net/pipermail/busybox/2024-May/090762.html',
-                'https://access.redhat.com/security/cve/CVE-2023-42364',
-                'https://bugs.busybox.net/show_bug.cgi?id=15868',
-                'https://gitlab.alpinelinux.org/alpine/aports/-/blob/master/main/busybox/CVE-2023-42364-CVE-2023-42365.patch',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-42364',
-                'https://ubuntu.com/security/notices/USN-6961-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-42364'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'busybox: use-after-free'
-            },
-            {
-              'cve':  'CVE-2023-42365',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.5',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.8',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   'A use-after-free vulnerability was discovered in BusyBox v.1.36.1 via a crafted awk pattern in the awk.c copyvar function.',
-              'diffID':        'sha256:7cd52847ad775a5ddc4b58326cf884beee34544296402c6292ed76474c686d39',
-              'fixedVersions': [
-                '1.35.0-r31'
-              ],
-              'installedVersion': '1.35.0-r29',
-              'packageName':      'ssl_client',
-              'purl':             'pkg:apk/alpine/ssl_client@1.35.0-r29?arch=x86_64&distro=3.17.2',
-              'references':       [
-                'http://lists.busybox.net/pipermail/busybox/2024-May/090762.html',
-                'https://access.redhat.com/security/cve/CVE-2023-42365',
-                'https://bugs.busybox.net/show_bug.cgi?id=15871',
-                'https://gitlab.alpinelinux.org/alpine/aports/-/blob/master/main/busybox/CVE-2023-42364-CVE-2023-42365.patch',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-42365',
-                'https://ubuntu.com/security/notices/USN-6961-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-42365'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'busybox: use-after-free'
-            },
-            {
-              'cve':  'CVE-2023-42366',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.5',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.1',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-787'
-              ],
-              'description':   'A heap-buffer-overflow was discovered in BusyBox v.1.36.1 in the next_token function at awk.c:1159.',
-              'diffID':        'sha256:7cd52847ad775a5ddc4b58326cf884beee34544296402c6292ed76474c686d39',
-              'fixedVersions': [
-                '1.35.0-r30'
-              ],
-              'installedVersion': '1.35.0-r29',
-              'packageName':      'ssl_client',
-              'purl':             'pkg:apk/alpine/ssl_client@1.35.0-r29?arch=x86_64&distro=3.17.2',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2023-42366',
-                'https://bugs.busybox.net/show_bug.cgi?id=15874',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-42366',
-                'https://security.netapp.com/advisory/ntap-20241206-0007/',
-                'https://www.cve.org/CVERecord?id=CVE-2023-42366'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'busybox: A heap-buffer-overflow'
-            }
-          ]
-        }
-      ],
-      'summary': {
-        'critical':   0,
-        'high':       6,
-        'low':        4,
-        'medium':     36,
-        'suppressed': 0,
-        'unknown':    0
-      }
-    }
-  },
-  {
-    'id':    'default/afbcb3020252bb3f083c41a87797af5a86037e2c2660d436ffe8f26b9f57e312',
-    'type':  'storage.sbomscanner.kubewarden.io.vulnerabilityreport',
-    'links': {
-      'patch':  'https://localhost:8005/v1/storage.sbomscanner.kubewarden.io.vulnerabilityreports/default/afbcb3020252bb3f083c41a87797af5a86037e2c2660d436ffe8f26b9f57e312',
-      'remove': 'https://localhost:8005/v1/storage.sbomscanner.kubewarden.io.vulnerabilityreports/default/afbcb3020252bb3f083c41a87797af5a86037e2c2660d436ffe8f26b9f57e312',
-      'self':   'https://localhost:8005/v1/storage.sbomscanner.kubewarden.io.vulnerabilityreports/default/afbcb3020252bb3f083c41a87797af5a86037e2c2660d436ffe8f26b9f57e312',
-      'update': 'https://localhost:8005/v1/storage.sbomscanner.kubewarden.io.vulnerabilityreports/default/afbcb3020252bb3f083c41a87797af5a86037e2c2660d436ffe8f26b9f57e312',
-      'view':   'https://localhost:8005/apis/storage.sbomscanner.kubewarden.io/v1alpha1/namespaces/default/vulnerabilityreports/afbcb3020252bb3f083c41a87797af5a86037e2c2660d436ffe8f26b9f57e312'
-    },
-    'apiVersion':    'storage.sbomscanner.kubewarden.io/v1alpha1',
-    'imageMetadata': {
-      'digest':      'sha256:70dc0b1a6029d999b9bba6b9d8793e077a16c938f5883397944f3bd01f8cd48a',
-      'platform':    'linux/arm/v6',
-      'registry':    'lsong-demo1',
-      'registryURI': 'registry-1.docker.io',
-      'repository':  'library/alpine',
-      'tag':         '3.15.4'
-    },
-    'kind':     'VulnerabilityReport',
-    'metadata': {
-      'creationTimestamp': '2026-01-14T18:52:05Z',
-      'fields':            [
-        'afbcb3020252bb3f083c41a87797af5a86037e2c2660d436ffe8f26b9f57e312',
-        'registry-1.docker.io/library/alpine:3.15.4',
-        'linux/arm/v6',
-        '23 (0 suppressed)'
-      ],
-      'labels': {
-        'app.kubernetes.io/managed-by':          'sbomscanner',
-        'app.kubernetes.io/part-of':             'sbomscanner',
-        'sbomscanner.kubewarden.io/scanjob-uid': '445c600a-c4b6-40b3-bd71-f2d2140a37d5'
-      },
-      'name':            'afbcb3020252bb3f083c41a87797af5a86037e2c2660d436ffe8f26b9f57e312',
-      'namespace':       'default',
-      'ownerReferences': [
-        {
-          'apiVersion':         'storage.sbomscanner.kubewarden.io/v1alpha1',
-          'blockOwnerDeletion': true,
-          'controller':         true,
-          'kind':               'SBOM',
-          'name':               'afbcb3020252bb3f083c41a87797af5a86037e2c2660d436ffe8f26b9f57e312',
-          'uid':                '57eef5db-e210-4f5d-80c7-497604664f1c'
-        }
-      ],
-      'relationships': [
-        {
-          'fromId':   'default/afbcb3020252bb3f083c41a87797af5a86037e2c2660d436ffe8f26b9f57e312',
-          'fromType': 'storage.sbomscanner.kubewarden.io.sbom',
-          'rel':      'owner',
-          'state':    'active',
-          'message':  'Resource is current'
-        }
-      ],
-      'resourceVersion': '1',
-      'state':           {
-        'error':         false,
-        'message':       'Resource is current',
-        'name':          'active',
-        'transitioning': false
-      },
-      'uid': '7f9087f4-9457-4dd7-8ae6-00d72ba8ad70'
-    },
-    'report': {
-      'results': [
-        {
-          'class':           'os-pkgs',
-          'target':          '/var/run/worker/trivy.sbom.986102288.json (alpine 3.15.4)',
-          'type':            'alpine',
-          'vulnerabilities': [
-            {
-              'cve':  'CVE-2022-4450',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'nvd': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-415'
-              ],
-              'description':   'The function PEM_read_bio_ex() reads a PEM file from a BIO and parses and\ndecodes the "name" (e.g. "CERTIFICATE"), any header data and the payload data.\nIf the function succeeds then the "name_out", "header" and "data" arguments are\npopulated with pointers to buffers containing the relevant decoded data. The\ncaller is responsible for freeing those buffers. It is possible to construct a\nPEM file that results in 0 bytes of payload data. In this case PEM_read_bio_ex()\nwill return a failure code but will populate the header argument with a pointer\nto a buffer that has already been freed. If the caller also frees this buffer\nthen a double free will occur. This will most likely lead to a crash. This\ncould be exploited by an attacker who has the ability to supply malicious PEM\nfiles for parsing to achieve a denial of service attack.\n\nThe functions PEM_read_bio() and PEM_read() are simple wrappers around\nPEM_read_bio_ex() and therefore these functions are also directly affected.\n\nThese functions are also called indirectly by a number of other OpenSSL\nfunctions including PEM_X509_INFO_read_bio_ex() and\nSSL_CTX_use_serverinfo_file() which are also vulnerable. Some OpenSSL internal\nuses of these functions are not vulnerable because the caller does not free the\nheader argument if PEM_read_bio_ex() returns a failure code. These locations\ninclude the PEM_read_bio_TYPE() functions as well as the decoders introduced in\nOpenSSL 3.0.\n\nThe OpenSSL asn1parse command line application is also impacted by this issue.',
-              'diffID':        'sha256:12c71d74c4f7e927c6ca166d24b007fe736e41308cd24acdaebfbfb8f6bbfd27',
-              'fixedVersions': [
-                '1.1.1t-r0'
-              ],
-              'installedVersion': '1.1.1n-r0',
-              'packageName':      'libcrypto1.1',
-              'purl':             'pkg:apk/alpine/libcrypto1.1@1.1.1n-r0?arch=armhf&distro=3.15.4',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2023:2165',
-                'https://access.redhat.com/security/cve/CVE-2022-4450',
-                'https://bugzilla.redhat.com/1960321',
-                'https://bugzilla.redhat.com/2164440',
-                'https://bugzilla.redhat.com/2164487',
-                'https://bugzilla.redhat.com/2164492',
-                'https://bugzilla.redhat.com/2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144000',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144003',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144006',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144008',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144010',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144012',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144015',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144017',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144019',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2145170',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2158412',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164440',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164487',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164488',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164492',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164497',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164499',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164500',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4203',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4304',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4450',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0215',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0216',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0217',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0286',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0401',
-                'https://errata.almalinux.org/9/ALSA-2023-2165.html',
-                'https://errata.rockylinux.org/RLSA-2023:0946',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=63bcf189be73a9cc1264059bed6f57974be74a83',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=bbcf509bd046b34cca19c766bbddc31683d0858b',
-                'https://linux.oracle.com/cve/CVE-2022-4450.html',
-                'https://linux.oracle.com/errata/ELSA-2023-32791.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2022-4450',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0003',
-                'https://rustsec.org/advisories/RUSTSEC-2023-0010.html',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://ubuntu.com/security/notices/USN-5844-1',
-                'https://ubuntu.com/security/notices/USN-6564-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2022-4450',
-                'https://www.openssl.org/news/secadv/20230207.txt'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: double free after calling PEM_read_bio_ex'
-            },
-            {
-              'cve':  'CVE-2023-0215',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'nvd': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   'The public API function BIO_new_NDEF is a helper function used for streaming\nASN.1 data via a BIO. It is primarily used internally to OpenSSL to support the\nSMIME, CMS and PKCS7 streaming capabilities, but may also be called directly by\nend user applications.\n\nThe function receives a BIO from the caller, prepends a new BIO_f_asn1 filter\nBIO onto the front of it to form a BIO chain, and then returns the new head of\nthe BIO chain to the caller. Under certain conditions, for example if a CMS\nrecipient public key is invalid, the new filter BIO is freed and the function\nreturns a NULL result indicating a failure. However, in this case, the BIO chain\nis not properly cleaned up and the BIO passed by the caller still retains\ninternal pointers to the previously freed filter BIO. If the caller then goes on\nto call BIO_pop() on the BIO then a use-after-free will occur. This will most\nlikely result in a crash.\n\n\n\nThis scenario occurs directly in the internal function B64_write_ASN1() which\nmay cause BIO_new_NDEF() to be called and will subsequently call BIO_pop() on\nthe BIO. This internal function is in turn called by the public API functions\nPEM_write_bio_ASN1_stream, PEM_write_bio_CMS_stream, PEM_write_bio_PKCS7_stream,\nSMIME_write_ASN1, SMIME_write_CMS and SMIME_write_PKCS7.\n\nOther public API functions that may be impacted by this include\ni2d_ASN1_bio_stream, BIO_new_CMS, BIO_new_PKCS7, i2d_CMS_bio_stream and\ni2d_PKCS7_bio_stream.\n\nThe OpenSSL cms and smime command line applications are similarly affected.',
-              'diffID':        'sha256:12c71d74c4f7e927c6ca166d24b007fe736e41308cd24acdaebfbfb8f6bbfd27',
-              'fixedVersions': [
-                '1.1.1t-r0'
-              ],
-              'installedVersion': '1.1.1n-r0',
-              'packageName':      'libcrypto1.1',
-              'purl':             'pkg:apk/alpine/libcrypto1.1@1.1.1n-r0?arch=armhf&distro=3.15.4',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2023:2165',
-                'https://access.redhat.com/security/cve/CVE-2023-0215',
-                'https://bugzilla.redhat.com/1960321',
-                'https://bugzilla.redhat.com/2164440',
-                'https://bugzilla.redhat.com/2164487',
-                'https://bugzilla.redhat.com/2164492',
-                'https://bugzilla.redhat.com/2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144000',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144003',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144006',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144008',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144010',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144012',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144015',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144017',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144019',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2145170',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2158412',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164440',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164487',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164488',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164492',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164497',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164499',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164500',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4203',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4304',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4450',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0215',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0216',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0217',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0286',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0401',
-                'https://errata.almalinux.org/9/ALSA-2023-2165.html',
-                'https://errata.rockylinux.org/RLSA-2023:0946',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=8818064ce3c3c0f1b740a5aaba2a987e75bfbafd',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=9816136fe31d92ace4037d5da5257f763aeeb4eb',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=c3829dd8825c654652201e16f8a0a0c46ee3f344',
-                'https://linux.oracle.com/cve/CVE-2023-0215.html',
-                'https://linux.oracle.com/errata/ELSA-2023-32791.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-0215',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0003',
-                'https://rustsec.org/advisories/RUSTSEC-2023-0009.html',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://security.netapp.com/advisory/ntap-20230427-0007',
-                'https://security.netapp.com/advisory/ntap-20230427-0007/',
-                'https://security.netapp.com/advisory/ntap-20230427-0009',
-                'https://security.netapp.com/advisory/ntap-20230427-0009/',
-                'https://security.netapp.com/advisory/ntap-20240621-0006',
-                'https://security.netapp.com/advisory/ntap-20240621-0006/',
-                'https://ubuntu.com/security/notices/USN-5844-1',
-                'https://ubuntu.com/security/notices/USN-5845-1',
-                'https://ubuntu.com/security/notices/USN-5845-2',
-                'https://ubuntu.com/security/notices/USN-6564-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-0215',
-                'https://www.openssl.org/news/secadv/20230207.txt'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: use-after-free following BIO_new_NDEF'
-            },
-            {
-              'cve':  'CVE-2023-0286',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '7.4',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H'
-                },
-                'nvd': {
-                  'v3score':  '7.4',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.4',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-843'
-              ],
-              'description':   'There is a type confusion vulnerability relating to X.400 address processing\ninside an X.509 GeneralName. X.400 addresses were parsed as an ASN1_STRING but\nthe public structure definition for GENERAL_NAME incorrectly specified the type\nof the x400Address field as ASN1_TYPE. This field is subsequently interpreted by\nthe OpenSSL function GENERAL_NAME_cmp as an ASN1_TYPE rather than an\nASN1_STRING.\n\nWhen CRL checking is enabled (i.e. the application sets the\nX509_V_FLAG_CRL_CHECK flag), this vulnerability may allow an attacker to pass\narbitrary pointers to a memcmp call, enabling them to read memory contents or\nenact a denial of service. In most cases, the attack requires the attacker to\nprovide both the certificate chain and CRL, neither of which need to have a\nvalid signature. If the attacker only controls one of these inputs, the other\ninput must already contain an X.400 address as a CRL distribution point, which\nis uncommon. As such, this vulnerability is most likely to only affect\napplications which have implemented their own functionality for retrieving CRLs\nover a network.',
-              'diffID':        'sha256:12c71d74c4f7e927c6ca166d24b007fe736e41308cd24acdaebfbfb8f6bbfd27',
-              'fixedVersions': [
-                '1.1.1t-r0'
-              ],
-              'installedVersion': '1.1.1n-r0',
-              'packageName':      'libcrypto1.1',
-              'purl':             'pkg:apk/alpine/libcrypto1.1@1.1.1n-r0?arch=armhf&distro=3.15.4',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2025:7937',
-                'https://access.redhat.com/security/cve/CVE-2023-0286',
-                'https://access.redhat.com/security/cve/cve-2023-0286',
-                'https://bugzilla.redhat.com/2164440',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144000',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144003',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144006',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144008',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144010',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144012',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144015',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144017',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144019',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2145170',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2158412',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164440',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164487',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164488',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164492',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164497',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164499',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164500',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4203',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4304',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4450',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0215',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0216',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0217',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0286',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0401',
-                'https://errata.almalinux.org/9/ALSA-2025-7937.html',
-                'https://errata.rockylinux.org/RLSA-2023:0946',
-                'https://ftp.openbsd.org/pub/OpenBSD/LibreSSL/libressl-3.6.2-relnotes.txt',
-                'https://ftp.openbsd.org/pub/OpenBSD/patches/7.2/common/018_x509.patch.sig',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=2c6c9d439b484e1ba9830d8454a34fa4f80fdfe9',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=2f7530077e0ef79d98718138716bc51ca0cad658',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=fd2af07dc083a350c959147097003a14a5e8ac4d',
-                'https://github.com/pyca/cryptography',
-                'https://github.com/pyca/cryptography/security/advisories/GHSA-x4qr-2fvf-3mr5',
-                'https://linux.oracle.com/cve/CVE-2023-0286.html',
-                'https://linux.oracle.com/errata/ELSA-2025-7937.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-0286',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0003',
-                'https://rustsec.org/advisories/RUSTSEC-2023-0006.html',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://ubuntu.com/security/notices/USN-5844-1',
-                'https://ubuntu.com/security/notices/USN-5845-1',
-                'https://ubuntu.com/security/notices/USN-5845-2',
-                'https://ubuntu.com/security/notices/USN-6564-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-0286',
-                'https://www.openssl.org/news/secadv/20230207.txt'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: X.400 address type confusion in X.509 GeneralName'
-            },
-            {
-              'cve':  'CVE-2023-0464',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-295'
-              ],
-              'description':   "A security vulnerability has been identified in all supported versions\n\nof OpenSSL related to the verification of X.509 certificate chains\nthat include policy constraints.  Attackers may be able to exploit this\nvulnerability by creating a malicious certificate chain that triggers\nexponential use of computational resources, leading to a denial-of-service\n(DoS) attack on affected systems.\n\nPolicy processing is disabled by default but can be enabled by passing\nthe `-policy' argument to the command line utilities or by calling the\n`X509_VERIFY_PARAM_set1_policies()' function.",
-              'diffID':        'sha256:12c71d74c4f7e927c6ca166d24b007fe736e41308cd24acdaebfbfb8f6bbfd27',
-              'fixedVersions': [
-                '1.1.1t-r2'
-              ],
-              'installedVersion': '1.1.1n-r0',
-              'packageName':      'libcrypto1.1',
-              'purl':             'pkg:apk/alpine/libcrypto1.1@1.1.1n-r0?arch=armhf&distro=3.15.4',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2023:3722',
-                'https://access.redhat.com/security/cve/CVE-2023-0464',
-                'https://bugzilla.redhat.com/2181082',
-                'https://bugzilla.redhat.com/2182561',
-                'https://bugzilla.redhat.com/2182565',
-                'https://bugzilla.redhat.com/2188461',
-                'https://bugzilla.redhat.com/2207947',
-                'https://errata.almalinux.org/9/ALSA-2023-3722.html',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=2017771e2db3e2b96f89bbe8766c3209f6a99545',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=2dcd4f1e3115f38cefa43e3efbe9b801c27e642e',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=879f7080d7e141f415c79eaa3a8ac4a3dad0348b',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=959c59c7a0164117e7f8366466a32bb1f8d77ff1',
-                'https://linux.oracle.com/cve/CVE-2023-0464.html',
-                'https://linux.oracle.com/errata/ELSA-2023-3722.html',
-                'https://lists.debian.org/debian-lts-announce/2023/06/msg00011.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-0464',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://security.netapp.com/advisory/ntap-20230406-0006/',
-                'https://security.netapp.com/advisory/ntap-20240621-0006/',
-                'https://ubuntu.com/security/notices/USN-6039-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.couchbase.com/alerts/',
-                'https://www.cve.org/CVERecord?id=CVE-2023-0464',
-                'https://www.debian.org/security/2023/dsa-5417',
-                'https://www.openssl.org/news/secadv/20230322.txt'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: Denial of service by excessive resource usage in verifying X509 policy constraints'
-            },
-            {
-              'cve':  'CVE-2022-2097',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N'
-                },
-                'nvd': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N'
-                },
-                'redhat': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-327'
-              ],
-              'description':   "AES OCB mode for 32-bit x86 platforms using the AES-NI assembly optimised implementation will not encrypt the entirety of the data under some circumstances. This could reveal sixteen bytes of data that was preexisting in the memory that wasn't written. In the special case of \"in place\" encryption, sixteen bytes of the plaintext would be revealed. Since OpenSSL does not support OCB based cipher suites for TLS and DTLS, they are both unaffected. Fixed in OpenSSL 3.0.5 (Affected 3.0.0-3.0.4). Fixed in OpenSSL 1.1.1q (Affected 1.1.1-1.1.1p).",
-              'diffID':        'sha256:12c71d74c4f7e927c6ca166d24b007fe736e41308cd24acdaebfbfb8f6bbfd27',
-              'fixedVersions': [
-                '1.1.1q-r0'
-              ],
-              'installedVersion': '1.1.1n-r0',
-              'packageName':      'libcrypto1.1',
-              'purl':             'pkg:apk/alpine/libcrypto1.1@1.1.1n-r0?arch=armhf&distro=3.15.4',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2022:6224',
-                'https://access.redhat.com/security/cve/CVE-2022-2097',
-                'https://bugzilla.redhat.com/2081494',
-                'https://bugzilla.redhat.com/2087911',
-                'https://bugzilla.redhat.com/2087913',
-                'https://bugzilla.redhat.com/2097310',
-                'https://bugzilla.redhat.com/2104905',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2081494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2097310',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2100554',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2104905',
-                'https://cert-portal.siemens.com/productcert/pdf/ssa-332410.pdf',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-1292',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-2068',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-2097',
-                'https://errata.almalinux.org/9/ALSA-2022-6224.html',
-                'https://errata.rockylinux.org/RLSA-2022:5818',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=919925673d6c9cfed3c1085497f5dfbbed5fc431',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=a98f339ddd7e8f487d6e0088d4a9a42324885a93',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=919925673d6c9cfed3c1085497f5dfbbed5fc431',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=a98f339ddd7e8f487d6e0088d4a9a42324885a93',
-                'https://github.com/alexcrichton/openssl-src-rs',
-                'https://linux.oracle.com/cve/CVE-2022-2097.html',
-                'https://linux.oracle.com/errata/ELSA-2022-9955.html',
-                'https://lists.debian.org/debian-lts-announce/2023/02/msg00019.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/R6CK57NBQFTPUMXAPJURCGXUYT76NQAK',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/R6CK57NBQFTPUMXAPJURCGXUYT76NQAK/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/V6567JERRHHJW2GNGJGKDRNHR7SNPZK7',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/V6567JERRHHJW2GNGJGKDRNHR7SNPZK7/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VCMNWKERPBKOEBNL7CLTTX3ZZCZLH7XA',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VCMNWKERPBKOEBNL7CLTTX3ZZCZLH7XA/',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/R6CK57NBQFTPUMXAPJURCGXUYT76NQAK',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/R6CK57NBQFTPUMXAPJURCGXUYT76NQAK/',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/V6567JERRHHJW2GNGJGKDRNHR7SNPZK7',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/V6567JERRHHJW2GNGJGKDRNHR7SNPZK7/',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/VCMNWKERPBKOEBNL7CLTTX3ZZCZLH7XA',
-                'https://nvd.nist.gov/vuln/detail/CVE-2022-2097',
-                'https://rustsec.org/advisories/RUSTSEC-2022-0032.html',
-                'https://security.gentoo.org/glsa/202210-02',
-                'https://security.netapp.com/advisory/ntap-20220715-0011',
-                'https://security.netapp.com/advisory/ntap-20220715-0011/',
-                'https://security.netapp.com/advisory/ntap-20230420-0008',
-                'https://security.netapp.com/advisory/ntap-20230420-0008/',
-                'https://security.netapp.com/advisory/ntap-20240621-0006',
-                'https://security.netapp.com/advisory/ntap-20240621-0006/',
-                'https://ubuntu.com/security/notices/USN-5502-1',
-                'https://ubuntu.com/security/notices/USN-6457-1',
-                'https://www.cve.org/CVERecord?id=CVE-2022-2097',
-                'https://www.debian.org/security/2023/dsa-5343',
-                'https://www.openssl.org/news/secadv/20220705.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: AES OCB fails to encrypt some bytes'
-            },
-            {
-              'cve':  'CVE-2022-4304',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N'
-                },
-                'nvd': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N'
-                },
-                'redhat': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-203'
-              ],
-              'description':   'A timing based side channel exists in the OpenSSL RSA Decryption implementation\nwhich could be sufficient to recover a plaintext across a network in a\nBleichenbacher style attack. To achieve a successful decryption an attacker\nwould have to be able to send a very large number of trial messages for\ndecryption. The vulnerability affects all RSA padding modes: PKCS#1 v1.5,\nRSA-OEAP and RSASVE.\n\nFor example, in a TLS connection, RSA is commonly used by a client to send an\nencrypted pre-master secret to the server. An attacker that had observed a\ngenuine connection between a client and a server could use this flaw to send\ntrial messages to the server and record the time taken to process them. After a\nsufficiently large number of messages the attacker could recover the pre-master\nsecret used for the original connection and thus be able to decrypt the\napplication data sent over that connection.',
-              'diffID':        'sha256:12c71d74c4f7e927c6ca166d24b007fe736e41308cd24acdaebfbfb8f6bbfd27',
-              'fixedVersions': [
-                '1.1.1t-r0'
-              ],
-              'installedVersion': '1.1.1n-r0',
-              'packageName':      'libcrypto1.1',
-              'purl':             'pkg:apk/alpine/libcrypto1.1@1.1.1n-r0?arch=armhf&distro=3.15.4',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2023:2165',
-                'https://access.redhat.com/security/cve/CVE-2022-4304',
-                'https://bugzilla.redhat.com/1960321',
-                'https://bugzilla.redhat.com/2164440',
-                'https://bugzilla.redhat.com/2164487',
-                'https://bugzilla.redhat.com/2164492',
-                'https://bugzilla.redhat.com/2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144000',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144003',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144006',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144008',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144010',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144012',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144015',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144017',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144019',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2145170',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2158412',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164440',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164487',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164488',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164492',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164497',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164499',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164500',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4203',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4304',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4450',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0215',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0216',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0217',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0286',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0401',
-                'https://errata.almalinux.org/9/ALSA-2023-2165.html',
-                'https://errata.rockylinux.org/RLSA-2023:0946',
-                'https://linux.oracle.com/cve/CVE-2022-4304.html',
-                'https://linux.oracle.com/errata/ELSA-2023-32791.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2022-4304',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0003',
-                'https://rustsec.org/advisories/RUSTSEC-2023-0007.html',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://ubuntu.com/security/notices/USN-5844-1',
-                'https://ubuntu.com/security/notices/USN-6564-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2022-4304',
-                'https://www.openssl.org/news/secadv/20230207.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: timing attack in RSA Decryption implementation'
-            },
-            {
-              'cve':  'CVE-2023-0465',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N'
-                },
-                'redhat': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-295'
-              ],
-              'description':   "Applications that use a non-default option when verifying certificates may be\nvulnerable to an attack from a malicious CA to circumvent certain checks.\n\nInvalid certificate policies in leaf certificates are silently ignored by\nOpenSSL and other certificate policy checks are skipped for that certificate.\nA malicious CA could use this to deliberately assert invalid certificate policies\nin order to circumvent policy checking on the certificate altogether.\n\nPolicy processing is disabled by default but can be enabled by passing\nthe `-policy' argument to the command line utilities or by calling the\n`X509_VERIFY_PARAM_set1_policies()' function.",
-              'diffID':        'sha256:12c71d74c4f7e927c6ca166d24b007fe736e41308cd24acdaebfbfb8f6bbfd27',
-              'fixedVersions': [
-                '1.1.1t-r2'
-              ],
-              'installedVersion': '1.1.1n-r0',
-              'packageName':      'libcrypto1.1',
-              'purl':             'pkg:apk/alpine/libcrypto1.1@1.1.1n-r0?arch=armhf&distro=3.15.4',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2023:3722',
-                'https://access.redhat.com/security/cve/CVE-2023-0465',
-                'https://bugzilla.redhat.com/2181082',
-                'https://bugzilla.redhat.com/2182561',
-                'https://bugzilla.redhat.com/2182565',
-                'https://bugzilla.redhat.com/2188461',
-                'https://bugzilla.redhat.com/2207947',
-                'https://errata.almalinux.org/9/ALSA-2023-3722.html',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=10325176f3d3e98c6e2b3bf5ab1e3b334de6947a',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=1dd43e0709fece299b15208f36cc7c76209ba0bb',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=b013765abfa80036dc779dd0e50602c57bb3bf95',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=facfb1ab745646e97a1920977ae4a9965ea61d5c',
-                'https://linux.oracle.com/cve/CVE-2023-0465.html',
-                'https://linux.oracle.com/errata/ELSA-2023-3722.html',
-                'https://lists.debian.org/debian-lts-announce/2023/06/msg00011.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-0465',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://security.netapp.com/advisory/ntap-20230414-0001/',
-                'https://ubuntu.com/security/notices/USN-6039-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-0465',
-                'https://www.debian.org/security/2023/dsa-5417',
-                'https://www.openssl.org/news/secadv/20230328.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: Invalid certificate policies in leaf certificates are silently ignored'
-            },
-            {
-              'cve':  'CVE-2023-2650',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '6.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-770'
-              ],
-              'description':   "Issue summary: Processing some specially crafted ASN.1 object identifiers or\ndata containing them may be very slow.\n\nImpact summary: Applications that use OBJ_obj2txt() directly, or use any of\nthe OpenSSL subsystems OCSP, PKCS7/SMIME, CMS, CMP/CRMF or TS with no message\nsize limit may experience notable to very long delays when processing those\nmessages, which may lead to a Denial of Service.\n\nAn OBJECT IDENTIFIER is composed of a series of numbers - sub-identifiers -\nmost of which have no size limit.  OBJ_obj2txt() may be used to translate\nan ASN.1 OBJECT IDENTIFIER given in DER encoding form (using the OpenSSL\ntype ASN1_OBJECT) to its canonical numeric text form, which are the\nsub-identifiers of the OBJECT IDENTIFIER in decimal form, separated by\nperiods.\n\nWhen one of the sub-identifiers in the OBJECT IDENTIFIER is very large\n(these are sizes that are seen as absurdly large, taking up tens or hundreds\nof KiBs), the translation to a decimal number in text may take a very long\ntime.  The time complexity is O(n^2) with 'n' being the size of the\nsub-identifiers in bytes (*).\n\nWith OpenSSL 3.0, support to fetch cryptographic algorithms using names /\nidentifiers in string form was introduced.  This includes using OBJECT\nIDENTIFIERs in canonical numeric text form as identifiers for fetching\nalgorithms.\n\nSuch OBJECT IDENTIFIERs may be received through the ASN.1 structure\nAlgorithmIdentifier, which is commonly used in multiple protocols to specify\nwhat cryptographic algorithm should be used to sign or verify, encrypt or\ndecrypt, or digest passed data.\n\nApplications that call OBJ_obj2txt() directly with untrusted data are\naffected, with any version of OpenSSL.  If the use is for the mere purpose\nof display, the severity is considered low.\n\nIn OpenSSL 3.0 and newer, this affects the subsystems OCSP, PKCS7/SMIME,\nCMS, CMP/CRMF or TS.  It also impacts anything that processes X.509\ncertificates, including simple things like verifying its signature.\n\nThe impact on TLS is relatively low, because all versions of OpenSSL have a\n100KiB limit on the peer's certificate chain.  Additionally, this only\nimpacts clients, or servers that have explicitly enabled client\nauthentication.\n\nIn OpenSSL 1.1.1 and 1.0.2, this only affects displaying diverse objects,\nsuch as X.509 certificates.  This is assumed to not happen in such a way\nthat it would cause a Denial of Service, so these versions are considered\nnot affected by this issue in such a way that it would be cause for concern,\nand the severity is therefore considered low.",
-              'diffID':        'sha256:12c71d74c4f7e927c6ca166d24b007fe736e41308cd24acdaebfbfb8f6bbfd27',
-              'fixedVersions': [
-                '1.1.1u-r0'
-              ],
-              'installedVersion': '1.1.1n-r0',
-              'packageName':      'libcrypto1.1',
-              'purl':             'pkg:apk/alpine/libcrypto1.1@1.1.1n-r0?arch=armhf&distro=3.15.4',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2023/05/30/1',
-                'https://access.redhat.com/errata/RHSA-2023:6330',
-                'https://access.redhat.com/security/cve/CVE-2023-2650',
-                'https://bugzilla.redhat.com/1858038',
-                'https://bugzilla.redhat.com/2207947',
-                'https://errata.almalinux.org/9/ALSA-2023-6330.html',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=423a2bc737a908ad0c77bda470b2b59dc879936b',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=853c5e56ee0b8650c73140816bb8b91d6163422c',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=9e209944b35cf82368071f160a744b6178f9b098',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=db779b0e10b047f2585615e0b8f2acdf21f8544a',
-                'https://linux.oracle.com/cve/CVE-2023-2650.html',
-                'https://linux.oracle.com/errata/ELSA-2023-6330.html',
-                'https://lists.debian.org/debian-lts-announce/2023/06/msg00011.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-2650',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0009',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://security.netapp.com/advisory/ntap-20230703-0001/',
-                'https://security.netapp.com/advisory/ntap-20231027-0009/',
-                'https://ubuntu.com/security/notices/USN-6119-1',
-                'https://ubuntu.com/security/notices/USN-6188-1',
-                'https://ubuntu.com/security/notices/USN-6672-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-2650',
-                'https://www.debian.org/security/2023/dsa-5417',
-                'https://www.openssl.org/news/secadv/20230530.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: Possible DoS translating ASN.1 object identifiers'
-            },
-            {
-              'cve':  'CVE-2023-3446',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L'
-                },
-                'redhat': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L'
-                }
-              },
-              'cwes': [
-                'CWE-606',
-                'CWE-1333'
-              ],
-              'description':   "Issue summary: Checking excessively long DH keys or parameters may be very slow.\n\nImpact summary: Applications that use the functions DH_check(), DH_check_ex()\nor EVP_PKEY_param_check() to check a DH key or DH parameters may experience long\ndelays. Where the key or parameters that are being checked have been obtained\nfrom an untrusted source this may lead to a Denial of Service.\n\nThe function DH_check() performs various checks on DH parameters. One of those\nchecks confirms that the modulus ('p' parameter) is not too large. Trying to use\na very large modulus is slow and OpenSSL will not normally use a modulus which\nis over 10,000 bits in length.\n\nHowever the DH_check() function checks numerous aspects of the key or parameters\nthat have been supplied. Some of those checks use the supplied modulus value\neven if it has already been found to be too large.\n\nAn application that calls DH_check() and supplies a key or parameters obtained\nfrom an untrusted source could be vulernable to a Denial of Service attack.\n\nThe function DH_check() is itself called by a number of other OpenSSL functions.\nAn application calling any of those other functions may similarly be affected.\nThe other functions affected by this are DH_check_ex() and\nEVP_PKEY_param_check().\n\nAlso vulnerable are the OpenSSL dhparam and pkeyparam command line applications\nwhen using the '-check' option.\n\nThe OpenSSL SSL/TLS implementation is not affected by this issue.\nThe OpenSSL 3.0 and 3.1 FIPS providers are not affected by this issue.",
-              'diffID':        'sha256:12c71d74c4f7e927c6ca166d24b007fe736e41308cd24acdaebfbfb8f6bbfd27',
-              'fixedVersions': [
-                '1.1.1u-r2'
-              ],
-              'installedVersion': '1.1.1n-r0',
-              'packageName':      'libcrypto1.1',
-              'purl':             'pkg:apk/alpine/libcrypto1.1@1.1.1n-r0?arch=armhf&distro=3.15.4',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2023/07/19/4',
-                'http://www.openwall.com/lists/oss-security/2023/07/19/5',
-                'http://www.openwall.com/lists/oss-security/2023/07/19/6',
-                'http://www.openwall.com/lists/oss-security/2023/07/31/1',
-                'http://www.openwall.com/lists/oss-security/2024/05/16/1',
-                'https://access.redhat.com/errata/RHSA-2024:2447',
-                'https://access.redhat.com/security/cve/CVE-2023-3446',
-                'https://bugzilla.redhat.com/2223016',
-                'https://bugzilla.redhat.com/2224962',
-                'https://bugzilla.redhat.com/2227852',
-                'https://bugzilla.redhat.com/2248616',
-                'https://bugzilla.redhat.com/2257571',
-                'https://bugzilla.redhat.com/2258502',
-                'https://bugzilla.redhat.com/2259944',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2224962',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2257582',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2257583',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2258677',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2258688',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2258691',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2258694',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2258700',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-36763',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-36764',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3446',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45229',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45231',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45232',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45233',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45235',
-                'https://errata.almalinux.org/9/ALSA-2024-2447.html',
-                'https://errata.rockylinux.org/RLSA-2024:2264',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=1fa20cf2f506113c761777127a38bce5068740eb',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=8780a896543a654e757db1b9396383f9d8095528',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=9a0a4d3c1e7138915563c0df4fe6a3f9377b839c',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=fc9867c1e03c22ebf56943be205202e576aabf23',
-                'https://linux.oracle.com/cve/CVE-2023-3446.html',
-                'https://linux.oracle.com/errata/ELSA-2024-2447.html',
-                'https://lists.debian.org/debian-lts-announce/2023/08/msg00019.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-3446',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://security.netapp.com/advisory/ntap-20230803-0011/',
-                'https://ubuntu.com/security/notices/USN-6435-1',
-                'https://ubuntu.com/security/notices/USN-6435-2',
-                'https://ubuntu.com/security/notices/USN-6450-1',
-                'https://ubuntu.com/security/notices/USN-6709-1',
-                'https://ubuntu.com/security/notices/USN-7018-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-3446',
-                'https://www.openssl.org/news/secadv/20230719.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: Excessive time spent checking DH keys and parameters'
-            },
-            {
-              'cve':  'CVE-2023-3817',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L'
-                },
-                'redhat': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L'
-                }
-              },
-              'cwes': [
-                'CWE-606',
-                'CWE-834'
-              ],
-              'description':   'Issue summary: Checking excessively long DH keys or parameters may be very slow.\n\nImpact summary: Applications that use the functions DH_check(), DH_check_ex()\nor EVP_PKEY_param_check() to check a DH key or DH parameters may experience long\ndelays. Where the key or parameters that are being checked have been obtained\nfrom an untrusted source this may lead to a Denial of Service.\n\nThe function DH_check() performs various checks on DH parameters. After fixing\nCVE-2023-3446 it was discovered that a large q parameter value can also trigger\nan overly long computation during some of these checks. A correct q value,\nif present, cannot be larger than the modulus p parameter, thus it is\nunnecessary to perform these checks if q is larger than p.\n\nAn application that calls DH_check() and supplies a key or parameters obtained\nfrom an untrusted source could be vulnerable to a Denial of Service attack.\n\nThe function DH_check() is itself called by a number of other OpenSSL functions.\nAn application calling any of those other functions may similarly be affected.\nThe other functions affected by this are DH_check_ex() and\nEVP_PKEY_param_check().\n\nAlso vulnerable are the OpenSSL dhparam and pkeyparam command line applications\nwhen using the "-check" option.\n\nThe OpenSSL SSL/TLS implementation is not affected by this issue.\n\nThe OpenSSL 3.0 and 3.1 FIPS providers are not affected by this issue.',
-              'diffID':        'sha256:12c71d74c4f7e927c6ca166d24b007fe736e41308cd24acdaebfbfb8f6bbfd27',
-              'fixedVersions': [
-                '1.1.1v-r0'
-              ],
-              'installedVersion': '1.1.1n-r0',
-              'packageName':      'libcrypto1.1',
-              'purl':             'pkg:apk/alpine/libcrypto1.1@1.1.1n-r0?arch=armhf&distro=3.15.4',
-              'references':       [
-                'http://seclists.org/fulldisclosure/2023/Jul/43',
-                'http://www.openwall.com/lists/oss-security/2023/07/31/1',
-                'http://www.openwall.com/lists/oss-security/2023/09/22/11',
-                'http://www.openwall.com/lists/oss-security/2023/09/22/9',
-                'http://www.openwall.com/lists/oss-security/2023/11/06/2',
-                'https://access.redhat.com/errata/RHSA-2024:2447',
-                'https://access.redhat.com/security/cve/CVE-2023-3817',
-                'https://bugzilla.redhat.com/2223016',
-                'https://bugzilla.redhat.com/2224962',
-                'https://bugzilla.redhat.com/2227852',
-                'https://bugzilla.redhat.com/2248616',
-                'https://bugzilla.redhat.com/2257571',
-                'https://bugzilla.redhat.com/2258502',
-                'https://bugzilla.redhat.com/2259944',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2224962',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2227852',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2248616',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2270358',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3446',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3817',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-5678',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-2408',
-                'https://errata.almalinux.org/9/ALSA-2024-2447.html',
-                'https://errata.rockylinux.org/RLSA-2023:7877',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=6a1eb62c29db6cb5eec707f9338aee00f44e26f5',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=869ad69aadd985c7b8ca6f4e5dd0eb274c9f3644',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=9002fd07327a91f35ba6c1307e71fa6fd4409b7f',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=91ddeba0f2269b017dc06c46c993a788974b1aa5',
-                'https://linux.oracle.com/cve/CVE-2023-3817.html',
-                'https://linux.oracle.com/errata/ELSA-2024-2447.html',
-                'https://lists.debian.org/debian-lts-announce/2023/08/msg00019.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-3817',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://security.netapp.com/advisory/ntap-20230818-0014/',
-                'https://security.netapp.com/advisory/ntap-20231027-0008/',
-                'https://security.netapp.com/advisory/ntap-20240621-0006/',
-                'https://ubuntu.com/security/notices/USN-6435-1',
-                'https://ubuntu.com/security/notices/USN-6435-2',
-                'https://ubuntu.com/security/notices/USN-6450-1',
-                'https://ubuntu.com/security/notices/USN-6709-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-3817',
-                'https://www.openssl.org/news/secadv/20230731.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'OpenSSL: Excessive time spent checking DH q parameter value'
-            },
-            {
-              'cve':  'CVE-2023-5678',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L'
-                },
-                'redhat': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L'
-                }
-              },
-              'cwes': [
-                'CWE-606',
-                'CWE-754'
-              ],
-              'description':   "Issue summary: Generating excessively long X9.42 DH keys or checking\nexcessively long X9.42 DH keys or parameters may be very slow.\n\nImpact summary: Applications that use the functions DH_generate_key() to\ngenerate an X9.42 DH key may experience long delays.  Likewise, applications\nthat use DH_check_pub_key(), DH_check_pub_key_ex() or EVP_PKEY_public_check()\nto check an X9.42 DH key or X9.42 DH parameters may experience long delays.\nWhere the key or parameters that are being checked have been obtained from\nan untrusted source this may lead to a Denial of Service.\n\nWhile DH_check() performs all the necessary checks (as of CVE-2023-3817),\nDH_check_pub_key() doesn't make any of these checks, and is therefore\nvulnerable for excessively large P and Q parameters.\n\nLikewise, while DH_generate_key() performs a check for an excessively large\nP, it doesn't check for an excessively large Q.\n\nAn application that calls DH_generate_key() or DH_check_pub_key() and\nsupplies a key or parameters obtained from an untrusted source could be\nvulnerable to a Denial of Service attack.\n\nDH_generate_key() and DH_check_pub_key() are also called by a number of\nother OpenSSL functions.  An application calling any of those other\nfunctions may similarly be affected.  The other functions affected by this\nare DH_check_pub_key_ex(), EVP_PKEY_public_check(), and EVP_PKEY_generate().\n\nAlso vulnerable are the OpenSSL pkey command line application when using the\n\"-pubcheck\" option, as well as the OpenSSL genpkey command line application.\n\nThe OpenSSL SSL/TLS implementation is not affected by this issue.\n\nThe OpenSSL 3.0 and 3.1 FIPS providers are not affected by this issue.",
-              'diffID':        'sha256:12c71d74c4f7e927c6ca166d24b007fe736e41308cd24acdaebfbfb8f6bbfd27',
-              'fixedVersions': [
-                '1.1.1w-r1'
-              ],
-              'installedVersion': '1.1.1n-r0',
-              'packageName':      'libcrypto1.1',
-              'purl':             'pkg:apk/alpine/libcrypto1.1@1.1.1n-r0?arch=armhf&distro=3.15.4',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2024/03/11/1',
-                'https://access.redhat.com/errata/RHSA-2024:2447',
-                'https://access.redhat.com/security/cve/CVE-2023-5678',
-                'https://bugzilla.redhat.com/2223016',
-                'https://bugzilla.redhat.com/2224962',
-                'https://bugzilla.redhat.com/2227852',
-                'https://bugzilla.redhat.com/2248616',
-                'https://bugzilla.redhat.com/2257571',
-                'https://bugzilla.redhat.com/2258502',
-                'https://bugzilla.redhat.com/2259944',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2224962',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2227852',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2248616',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2270358',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3446',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3817',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-5678',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-2408',
-                'https://errata.almalinux.org/9/ALSA-2024-2447.html',
-                'https://errata.rockylinux.org/RLSA-2023:7877',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=34efaef6c103d636ab507a0cc34dca4d3aecc055',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=710fee740904b6290fef0dd5536fbcedbc38ff0c',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=db925ae2e65d0d925adef429afc37f75bd1c2017',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=ddeb4b6c6d527e54ce9a99cba785c0f7776e54b6',
-                'https://linux.oracle.com/cve/CVE-2023-5678.html',
-                'https://linux.oracle.com/errata/ELSA-2024-2447.html',
-                'https://lists.debian.org/debian-lts-announce/2024/10/msg00033.html',
-                'https://lists.debian.org/debian-lts-announce/2024/11/msg00000.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-5678',
-                'https://security.netapp.com/advisory/ntap-20231130-0010/',
-                'https://ubuntu.com/security/notices/USN-6622-1',
-                'https://ubuntu.com/security/notices/USN-6632-1',
-                'https://ubuntu.com/security/notices/USN-6709-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-5678',
-                'https://www.openssl.org/news/secadv/20231106.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: Generating excessively long X9.42 DH keys or checking excessively long X9.42 DH keys or parameters may be very slow'
-            },
-            {
-              'cve':  'CVE-2022-4450',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'nvd': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-415'
-              ],
-              'description':   'The function PEM_read_bio_ex() reads a PEM file from a BIO and parses and\ndecodes the "name" (e.g. "CERTIFICATE"), any header data and the payload data.\nIf the function succeeds then the "name_out", "header" and "data" arguments are\npopulated with pointers to buffers containing the relevant decoded data. The\ncaller is responsible for freeing those buffers. It is possible to construct a\nPEM file that results in 0 bytes of payload data. In this case PEM_read_bio_ex()\nwill return a failure code but will populate the header argument with a pointer\nto a buffer that has already been freed. If the caller also frees this buffer\nthen a double free will occur. This will most likely lead to a crash. This\ncould be exploited by an attacker who has the ability to supply malicious PEM\nfiles for parsing to achieve a denial of service attack.\n\nThe functions PEM_read_bio() and PEM_read() are simple wrappers around\nPEM_read_bio_ex() and therefore these functions are also directly affected.\n\nThese functions are also called indirectly by a number of other OpenSSL\nfunctions including PEM_X509_INFO_read_bio_ex() and\nSSL_CTX_use_serverinfo_file() which are also vulnerable. Some OpenSSL internal\nuses of these functions are not vulnerable because the caller does not free the\nheader argument if PEM_read_bio_ex() returns a failure code. These locations\ninclude the PEM_read_bio_TYPE() functions as well as the decoders introduced in\nOpenSSL 3.0.\n\nThe OpenSSL asn1parse command line application is also impacted by this issue.',
-              'diffID':        'sha256:12c71d74c4f7e927c6ca166d24b007fe736e41308cd24acdaebfbfb8f6bbfd27',
-              'fixedVersions': [
-                '1.1.1t-r0'
-              ],
-              'installedVersion': '1.1.1n-r0',
-              'packageName':      'libssl1.1',
-              'purl':             'pkg:apk/alpine/libssl1.1@1.1.1n-r0?arch=armhf&distro=3.15.4',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2023:2165',
-                'https://access.redhat.com/security/cve/CVE-2022-4450',
-                'https://bugzilla.redhat.com/1960321',
-                'https://bugzilla.redhat.com/2164440',
-                'https://bugzilla.redhat.com/2164487',
-                'https://bugzilla.redhat.com/2164492',
-                'https://bugzilla.redhat.com/2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144000',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144003',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144006',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144008',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144010',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144012',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144015',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144017',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144019',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2145170',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2158412',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164440',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164487',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164488',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164492',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164497',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164499',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164500',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4203',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4304',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4450',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0215',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0216',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0217',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0286',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0401',
-                'https://errata.almalinux.org/9/ALSA-2023-2165.html',
-                'https://errata.rockylinux.org/RLSA-2023:0946',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=63bcf189be73a9cc1264059bed6f57974be74a83',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=bbcf509bd046b34cca19c766bbddc31683d0858b',
-                'https://linux.oracle.com/cve/CVE-2022-4450.html',
-                'https://linux.oracle.com/errata/ELSA-2023-32791.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2022-4450',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0003',
-                'https://rustsec.org/advisories/RUSTSEC-2023-0010.html',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://ubuntu.com/security/notices/USN-5844-1',
-                'https://ubuntu.com/security/notices/USN-6564-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2022-4450',
-                'https://www.openssl.org/news/secadv/20230207.txt'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: double free after calling PEM_read_bio_ex'
-            },
-            {
-              'cve':  'CVE-2023-0215',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'nvd': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   'The public API function BIO_new_NDEF is a helper function used for streaming\nASN.1 data via a BIO. It is primarily used internally to OpenSSL to support the\nSMIME, CMS and PKCS7 streaming capabilities, but may also be called directly by\nend user applications.\n\nThe function receives a BIO from the caller, prepends a new BIO_f_asn1 filter\nBIO onto the front of it to form a BIO chain, and then returns the new head of\nthe BIO chain to the caller. Under certain conditions, for example if a CMS\nrecipient public key is invalid, the new filter BIO is freed and the function\nreturns a NULL result indicating a failure. However, in this case, the BIO chain\nis not properly cleaned up and the BIO passed by the caller still retains\ninternal pointers to the previously freed filter BIO. If the caller then goes on\nto call BIO_pop() on the BIO then a use-after-free will occur. This will most\nlikely result in a crash.\n\n\n\nThis scenario occurs directly in the internal function B64_write_ASN1() which\nmay cause BIO_new_NDEF() to be called and will subsequently call BIO_pop() on\nthe BIO. This internal function is in turn called by the public API functions\nPEM_write_bio_ASN1_stream, PEM_write_bio_CMS_stream, PEM_write_bio_PKCS7_stream,\nSMIME_write_ASN1, SMIME_write_CMS and SMIME_write_PKCS7.\n\nOther public API functions that may be impacted by this include\ni2d_ASN1_bio_stream, BIO_new_CMS, BIO_new_PKCS7, i2d_CMS_bio_stream and\ni2d_PKCS7_bio_stream.\n\nThe OpenSSL cms and smime command line applications are similarly affected.',
-              'diffID':        'sha256:12c71d74c4f7e927c6ca166d24b007fe736e41308cd24acdaebfbfb8f6bbfd27',
-              'fixedVersions': [
-                '1.1.1t-r0'
-              ],
-              'installedVersion': '1.1.1n-r0',
-              'packageName':      'libssl1.1',
-              'purl':             'pkg:apk/alpine/libssl1.1@1.1.1n-r0?arch=armhf&distro=3.15.4',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2023:2165',
-                'https://access.redhat.com/security/cve/CVE-2023-0215',
-                'https://bugzilla.redhat.com/1960321',
-                'https://bugzilla.redhat.com/2164440',
-                'https://bugzilla.redhat.com/2164487',
-                'https://bugzilla.redhat.com/2164492',
-                'https://bugzilla.redhat.com/2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144000',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144003',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144006',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144008',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144010',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144012',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144015',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144017',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144019',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2145170',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2158412',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164440',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164487',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164488',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164492',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164497',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164499',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164500',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4203',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4304',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4450',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0215',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0216',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0217',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0286',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0401',
-                'https://errata.almalinux.org/9/ALSA-2023-2165.html',
-                'https://errata.rockylinux.org/RLSA-2023:0946',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=8818064ce3c3c0f1b740a5aaba2a987e75bfbafd',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=9816136fe31d92ace4037d5da5257f763aeeb4eb',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=c3829dd8825c654652201e16f8a0a0c46ee3f344',
-                'https://linux.oracle.com/cve/CVE-2023-0215.html',
-                'https://linux.oracle.com/errata/ELSA-2023-32791.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-0215',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0003',
-                'https://rustsec.org/advisories/RUSTSEC-2023-0009.html',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://security.netapp.com/advisory/ntap-20230427-0007',
-                'https://security.netapp.com/advisory/ntap-20230427-0007/',
-                'https://security.netapp.com/advisory/ntap-20230427-0009',
-                'https://security.netapp.com/advisory/ntap-20230427-0009/',
-                'https://security.netapp.com/advisory/ntap-20240621-0006',
-                'https://security.netapp.com/advisory/ntap-20240621-0006/',
-                'https://ubuntu.com/security/notices/USN-5844-1',
-                'https://ubuntu.com/security/notices/USN-5845-1',
-                'https://ubuntu.com/security/notices/USN-5845-2',
-                'https://ubuntu.com/security/notices/USN-6564-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-0215',
-                'https://www.openssl.org/news/secadv/20230207.txt'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: use-after-free following BIO_new_NDEF'
-            },
-            {
-              'cve':  'CVE-2023-0286',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '7.4',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H'
-                },
-                'nvd': {
-                  'v3score':  '7.4',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.4',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-843'
-              ],
-              'description':   'There is a type confusion vulnerability relating to X.400 address processing\ninside an X.509 GeneralName. X.400 addresses were parsed as an ASN1_STRING but\nthe public structure definition for GENERAL_NAME incorrectly specified the type\nof the x400Address field as ASN1_TYPE. This field is subsequently interpreted by\nthe OpenSSL function GENERAL_NAME_cmp as an ASN1_TYPE rather than an\nASN1_STRING.\n\nWhen CRL checking is enabled (i.e. the application sets the\nX509_V_FLAG_CRL_CHECK flag), this vulnerability may allow an attacker to pass\narbitrary pointers to a memcmp call, enabling them to read memory contents or\nenact a denial of service. In most cases, the attack requires the attacker to\nprovide both the certificate chain and CRL, neither of which need to have a\nvalid signature. If the attacker only controls one of these inputs, the other\ninput must already contain an X.400 address as a CRL distribution point, which\nis uncommon. As such, this vulnerability is most likely to only affect\napplications which have implemented their own functionality for retrieving CRLs\nover a network.',
-              'diffID':        'sha256:12c71d74c4f7e927c6ca166d24b007fe736e41308cd24acdaebfbfb8f6bbfd27',
-              'fixedVersions': [
-                '1.1.1t-r0'
-              ],
-              'installedVersion': '1.1.1n-r0',
-              'packageName':      'libssl1.1',
-              'purl':             'pkg:apk/alpine/libssl1.1@1.1.1n-r0?arch=armhf&distro=3.15.4',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2025:7937',
-                'https://access.redhat.com/security/cve/CVE-2023-0286',
-                'https://access.redhat.com/security/cve/cve-2023-0286',
-                'https://bugzilla.redhat.com/2164440',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144000',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144003',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144006',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144008',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144010',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144012',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144015',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144017',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144019',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2145170',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2158412',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164440',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164487',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164488',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164492',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164497',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164499',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164500',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4203',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4304',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4450',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0215',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0216',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0217',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0286',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0401',
-                'https://errata.almalinux.org/9/ALSA-2025-7937.html',
-                'https://errata.rockylinux.org/RLSA-2023:0946',
-                'https://ftp.openbsd.org/pub/OpenBSD/LibreSSL/libressl-3.6.2-relnotes.txt',
-                'https://ftp.openbsd.org/pub/OpenBSD/patches/7.2/common/018_x509.patch.sig',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=2c6c9d439b484e1ba9830d8454a34fa4f80fdfe9',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=2f7530077e0ef79d98718138716bc51ca0cad658',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=fd2af07dc083a350c959147097003a14a5e8ac4d',
-                'https://github.com/pyca/cryptography',
-                'https://github.com/pyca/cryptography/security/advisories/GHSA-x4qr-2fvf-3mr5',
-                'https://linux.oracle.com/cve/CVE-2023-0286.html',
-                'https://linux.oracle.com/errata/ELSA-2025-7937.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-0286',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0003',
-                'https://rustsec.org/advisories/RUSTSEC-2023-0006.html',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://ubuntu.com/security/notices/USN-5844-1',
-                'https://ubuntu.com/security/notices/USN-5845-1',
-                'https://ubuntu.com/security/notices/USN-5845-2',
-                'https://ubuntu.com/security/notices/USN-6564-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-0286',
-                'https://www.openssl.org/news/secadv/20230207.txt'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: X.400 address type confusion in X.509 GeneralName'
-            },
-            {
-              'cve':  'CVE-2023-0464',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-295'
-              ],
-              'description':   "A security vulnerability has been identified in all supported versions\n\nof OpenSSL related to the verification of X.509 certificate chains\nthat include policy constraints.  Attackers may be able to exploit this\nvulnerability by creating a malicious certificate chain that triggers\nexponential use of computational resources, leading to a denial-of-service\n(DoS) attack on affected systems.\n\nPolicy processing is disabled by default but can be enabled by passing\nthe `-policy' argument to the command line utilities or by calling the\n`X509_VERIFY_PARAM_set1_policies()' function.",
-              'diffID':        'sha256:12c71d74c4f7e927c6ca166d24b007fe736e41308cd24acdaebfbfb8f6bbfd27',
-              'fixedVersions': [
-                '1.1.1t-r2'
-              ],
-              'installedVersion': '1.1.1n-r0',
-              'packageName':      'libssl1.1',
-              'purl':             'pkg:apk/alpine/libssl1.1@1.1.1n-r0?arch=armhf&distro=3.15.4',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2023:3722',
-                'https://access.redhat.com/security/cve/CVE-2023-0464',
-                'https://bugzilla.redhat.com/2181082',
-                'https://bugzilla.redhat.com/2182561',
-                'https://bugzilla.redhat.com/2182565',
-                'https://bugzilla.redhat.com/2188461',
-                'https://bugzilla.redhat.com/2207947',
-                'https://errata.almalinux.org/9/ALSA-2023-3722.html',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=2017771e2db3e2b96f89bbe8766c3209f6a99545',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=2dcd4f1e3115f38cefa43e3efbe9b801c27e642e',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=879f7080d7e141f415c79eaa3a8ac4a3dad0348b',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=959c59c7a0164117e7f8366466a32bb1f8d77ff1',
-                'https://linux.oracle.com/cve/CVE-2023-0464.html',
-                'https://linux.oracle.com/errata/ELSA-2023-3722.html',
-                'https://lists.debian.org/debian-lts-announce/2023/06/msg00011.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-0464',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://security.netapp.com/advisory/ntap-20230406-0006/',
-                'https://security.netapp.com/advisory/ntap-20240621-0006/',
-                'https://ubuntu.com/security/notices/USN-6039-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.couchbase.com/alerts/',
-                'https://www.cve.org/CVERecord?id=CVE-2023-0464',
-                'https://www.debian.org/security/2023/dsa-5417',
-                'https://www.openssl.org/news/secadv/20230322.txt'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: Denial of service by excessive resource usage in verifying X509 policy constraints'
-            },
-            {
-              'cve':  'CVE-2022-2097',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N'
-                },
-                'nvd': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N'
-                },
-                'redhat': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-327'
-              ],
-              'description':   "AES OCB mode for 32-bit x86 platforms using the AES-NI assembly optimised implementation will not encrypt the entirety of the data under some circumstances. This could reveal sixteen bytes of data that was preexisting in the memory that wasn't written. In the special case of \"in place\" encryption, sixteen bytes of the plaintext would be revealed. Since OpenSSL does not support OCB based cipher suites for TLS and DTLS, they are both unaffected. Fixed in OpenSSL 3.0.5 (Affected 3.0.0-3.0.4). Fixed in OpenSSL 1.1.1q (Affected 1.1.1-1.1.1p).",
-              'diffID':        'sha256:12c71d74c4f7e927c6ca166d24b007fe736e41308cd24acdaebfbfb8f6bbfd27',
-              'fixedVersions': [
-                '1.1.1q-r0'
-              ],
-              'installedVersion': '1.1.1n-r0',
-              'packageName':      'libssl1.1',
-              'purl':             'pkg:apk/alpine/libssl1.1@1.1.1n-r0?arch=armhf&distro=3.15.4',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2022:6224',
-                'https://access.redhat.com/security/cve/CVE-2022-2097',
-                'https://bugzilla.redhat.com/2081494',
-                'https://bugzilla.redhat.com/2087911',
-                'https://bugzilla.redhat.com/2087913',
-                'https://bugzilla.redhat.com/2097310',
-                'https://bugzilla.redhat.com/2104905',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2081494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2097310',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2100554',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2104905',
-                'https://cert-portal.siemens.com/productcert/pdf/ssa-332410.pdf',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-1292',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-2068',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-2097',
-                'https://errata.almalinux.org/9/ALSA-2022-6224.html',
-                'https://errata.rockylinux.org/RLSA-2022:5818',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=919925673d6c9cfed3c1085497f5dfbbed5fc431',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=a98f339ddd7e8f487d6e0088d4a9a42324885a93',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=919925673d6c9cfed3c1085497f5dfbbed5fc431',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=a98f339ddd7e8f487d6e0088d4a9a42324885a93',
-                'https://github.com/alexcrichton/openssl-src-rs',
-                'https://linux.oracle.com/cve/CVE-2022-2097.html',
-                'https://linux.oracle.com/errata/ELSA-2022-9955.html',
-                'https://lists.debian.org/debian-lts-announce/2023/02/msg00019.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/R6CK57NBQFTPUMXAPJURCGXUYT76NQAK',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/R6CK57NBQFTPUMXAPJURCGXUYT76NQAK/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/V6567JERRHHJW2GNGJGKDRNHR7SNPZK7',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/V6567JERRHHJW2GNGJGKDRNHR7SNPZK7/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VCMNWKERPBKOEBNL7CLTTX3ZZCZLH7XA',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VCMNWKERPBKOEBNL7CLTTX3ZZCZLH7XA/',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/R6CK57NBQFTPUMXAPJURCGXUYT76NQAK',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/R6CK57NBQFTPUMXAPJURCGXUYT76NQAK/',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/V6567JERRHHJW2GNGJGKDRNHR7SNPZK7',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/V6567JERRHHJW2GNGJGKDRNHR7SNPZK7/',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/VCMNWKERPBKOEBNL7CLTTX3ZZCZLH7XA',
-                'https://nvd.nist.gov/vuln/detail/CVE-2022-2097',
-                'https://rustsec.org/advisories/RUSTSEC-2022-0032.html',
-                'https://security.gentoo.org/glsa/202210-02',
-                'https://security.netapp.com/advisory/ntap-20220715-0011',
-                'https://security.netapp.com/advisory/ntap-20220715-0011/',
-                'https://security.netapp.com/advisory/ntap-20230420-0008',
-                'https://security.netapp.com/advisory/ntap-20230420-0008/',
-                'https://security.netapp.com/advisory/ntap-20240621-0006',
-                'https://security.netapp.com/advisory/ntap-20240621-0006/',
-                'https://ubuntu.com/security/notices/USN-5502-1',
-                'https://ubuntu.com/security/notices/USN-6457-1',
-                'https://www.cve.org/CVERecord?id=CVE-2022-2097',
-                'https://www.debian.org/security/2023/dsa-5343',
-                'https://www.openssl.org/news/secadv/20220705.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: AES OCB fails to encrypt some bytes'
-            },
-            {
-              'cve':  'CVE-2022-4304',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N'
-                },
-                'nvd': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N'
-                },
-                'redhat': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-203'
-              ],
-              'description':   'A timing based side channel exists in the OpenSSL RSA Decryption implementation\nwhich could be sufficient to recover a plaintext across a network in a\nBleichenbacher style attack. To achieve a successful decryption an attacker\nwould have to be able to send a very large number of trial messages for\ndecryption. The vulnerability affects all RSA padding modes: PKCS#1 v1.5,\nRSA-OEAP and RSASVE.\n\nFor example, in a TLS connection, RSA is commonly used by a client to send an\nencrypted pre-master secret to the server. An attacker that had observed a\ngenuine connection between a client and a server could use this flaw to send\ntrial messages to the server and record the time taken to process them. After a\nsufficiently large number of messages the attacker could recover the pre-master\nsecret used for the original connection and thus be able to decrypt the\napplication data sent over that connection.',
-              'diffID':        'sha256:12c71d74c4f7e927c6ca166d24b007fe736e41308cd24acdaebfbfb8f6bbfd27',
-              'fixedVersions': [
-                '1.1.1t-r0'
-              ],
-              'installedVersion': '1.1.1n-r0',
-              'packageName':      'libssl1.1',
-              'purl':             'pkg:apk/alpine/libssl1.1@1.1.1n-r0?arch=armhf&distro=3.15.4',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2023:2165',
-                'https://access.redhat.com/security/cve/CVE-2022-4304',
-                'https://bugzilla.redhat.com/1960321',
-                'https://bugzilla.redhat.com/2164440',
-                'https://bugzilla.redhat.com/2164487',
-                'https://bugzilla.redhat.com/2164492',
-                'https://bugzilla.redhat.com/2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144000',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144003',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144006',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144008',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144010',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144012',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144015',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144017',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144019',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2145170',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2158412',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164440',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164487',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164488',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164492',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164497',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164499',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164500',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4203',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4304',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4450',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0215',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0216',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0217',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0286',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0401',
-                'https://errata.almalinux.org/9/ALSA-2023-2165.html',
-                'https://errata.rockylinux.org/RLSA-2023:0946',
-                'https://linux.oracle.com/cve/CVE-2022-4304.html',
-                'https://linux.oracle.com/errata/ELSA-2023-32791.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2022-4304',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0003',
-                'https://rustsec.org/advisories/RUSTSEC-2023-0007.html',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://ubuntu.com/security/notices/USN-5844-1',
-                'https://ubuntu.com/security/notices/USN-6564-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2022-4304',
-                'https://www.openssl.org/news/secadv/20230207.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: timing attack in RSA Decryption implementation'
-            },
-            {
-              'cve':  'CVE-2023-0465',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N'
-                },
-                'redhat': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-295'
-              ],
-              'description':   "Applications that use a non-default option when verifying certificates may be\nvulnerable to an attack from a malicious CA to circumvent certain checks.\n\nInvalid certificate policies in leaf certificates are silently ignored by\nOpenSSL and other certificate policy checks are skipped for that certificate.\nA malicious CA could use this to deliberately assert invalid certificate policies\nin order to circumvent policy checking on the certificate altogether.\n\nPolicy processing is disabled by default but can be enabled by passing\nthe `-policy' argument to the command line utilities or by calling the\n`X509_VERIFY_PARAM_set1_policies()' function.",
-              'diffID':        'sha256:12c71d74c4f7e927c6ca166d24b007fe736e41308cd24acdaebfbfb8f6bbfd27',
-              'fixedVersions': [
-                '1.1.1t-r2'
-              ],
-              'installedVersion': '1.1.1n-r0',
-              'packageName':      'libssl1.1',
-              'purl':             'pkg:apk/alpine/libssl1.1@1.1.1n-r0?arch=armhf&distro=3.15.4',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2023:3722',
-                'https://access.redhat.com/security/cve/CVE-2023-0465',
-                'https://bugzilla.redhat.com/2181082',
-                'https://bugzilla.redhat.com/2182561',
-                'https://bugzilla.redhat.com/2182565',
-                'https://bugzilla.redhat.com/2188461',
-                'https://bugzilla.redhat.com/2207947',
-                'https://errata.almalinux.org/9/ALSA-2023-3722.html',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=10325176f3d3e98c6e2b3bf5ab1e3b334de6947a',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=1dd43e0709fece299b15208f36cc7c76209ba0bb',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=b013765abfa80036dc779dd0e50602c57bb3bf95',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=facfb1ab745646e97a1920977ae4a9965ea61d5c',
-                'https://linux.oracle.com/cve/CVE-2023-0465.html',
-                'https://linux.oracle.com/errata/ELSA-2023-3722.html',
-                'https://lists.debian.org/debian-lts-announce/2023/06/msg00011.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-0465',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://security.netapp.com/advisory/ntap-20230414-0001/',
-                'https://ubuntu.com/security/notices/USN-6039-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-0465',
-                'https://www.debian.org/security/2023/dsa-5417',
-                'https://www.openssl.org/news/secadv/20230328.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: Invalid certificate policies in leaf certificates are silently ignored'
-            },
-            {
-              'cve':  'CVE-2023-2650',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '6.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-770'
-              ],
-              'description':   "Issue summary: Processing some specially crafted ASN.1 object identifiers or\ndata containing them may be very slow.\n\nImpact summary: Applications that use OBJ_obj2txt() directly, or use any of\nthe OpenSSL subsystems OCSP, PKCS7/SMIME, CMS, CMP/CRMF or TS with no message\nsize limit may experience notable to very long delays when processing those\nmessages, which may lead to a Denial of Service.\n\nAn OBJECT IDENTIFIER is composed of a series of numbers - sub-identifiers -\nmost of which have no size limit.  OBJ_obj2txt() may be used to translate\nan ASN.1 OBJECT IDENTIFIER given in DER encoding form (using the OpenSSL\ntype ASN1_OBJECT) to its canonical numeric text form, which are the\nsub-identifiers of the OBJECT IDENTIFIER in decimal form, separated by\nperiods.\n\nWhen one of the sub-identifiers in the OBJECT IDENTIFIER is very large\n(these are sizes that are seen as absurdly large, taking up tens or hundreds\nof KiBs), the translation to a decimal number in text may take a very long\ntime.  The time complexity is O(n^2) with 'n' being the size of the\nsub-identifiers in bytes (*).\n\nWith OpenSSL 3.0, support to fetch cryptographic algorithms using names /\nidentifiers in string form was introduced.  This includes using OBJECT\nIDENTIFIERs in canonical numeric text form as identifiers for fetching\nalgorithms.\n\nSuch OBJECT IDENTIFIERs may be received through the ASN.1 structure\nAlgorithmIdentifier, which is commonly used in multiple protocols to specify\nwhat cryptographic algorithm should be used to sign or verify, encrypt or\ndecrypt, or digest passed data.\n\nApplications that call OBJ_obj2txt() directly with untrusted data are\naffected, with any version of OpenSSL.  If the use is for the mere purpose\nof display, the severity is considered low.\n\nIn OpenSSL 3.0 and newer, this affects the subsystems OCSP, PKCS7/SMIME,\nCMS, CMP/CRMF or TS.  It also impacts anything that processes X.509\ncertificates, including simple things like verifying its signature.\n\nThe impact on TLS is relatively low, because all versions of OpenSSL have a\n100KiB limit on the peer's certificate chain.  Additionally, this only\nimpacts clients, or servers that have explicitly enabled client\nauthentication.\n\nIn OpenSSL 1.1.1 and 1.0.2, this only affects displaying diverse objects,\nsuch as X.509 certificates.  This is assumed to not happen in such a way\nthat it would cause a Denial of Service, so these versions are considered\nnot affected by this issue in such a way that it would be cause for concern,\nand the severity is therefore considered low.",
-              'diffID':        'sha256:12c71d74c4f7e927c6ca166d24b007fe736e41308cd24acdaebfbfb8f6bbfd27',
-              'fixedVersions': [
-                '1.1.1u-r0'
-              ],
-              'installedVersion': '1.1.1n-r0',
-              'packageName':      'libssl1.1',
-              'purl':             'pkg:apk/alpine/libssl1.1@1.1.1n-r0?arch=armhf&distro=3.15.4',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2023/05/30/1',
-                'https://access.redhat.com/errata/RHSA-2023:6330',
-                'https://access.redhat.com/security/cve/CVE-2023-2650',
-                'https://bugzilla.redhat.com/1858038',
-                'https://bugzilla.redhat.com/2207947',
-                'https://errata.almalinux.org/9/ALSA-2023-6330.html',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=423a2bc737a908ad0c77bda470b2b59dc879936b',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=853c5e56ee0b8650c73140816bb8b91d6163422c',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=9e209944b35cf82368071f160a744b6178f9b098',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=db779b0e10b047f2585615e0b8f2acdf21f8544a',
-                'https://linux.oracle.com/cve/CVE-2023-2650.html',
-                'https://linux.oracle.com/errata/ELSA-2023-6330.html',
-                'https://lists.debian.org/debian-lts-announce/2023/06/msg00011.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-2650',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0009',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://security.netapp.com/advisory/ntap-20230703-0001/',
-                'https://security.netapp.com/advisory/ntap-20231027-0009/',
-                'https://ubuntu.com/security/notices/USN-6119-1',
-                'https://ubuntu.com/security/notices/USN-6188-1',
-                'https://ubuntu.com/security/notices/USN-6672-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-2650',
-                'https://www.debian.org/security/2023/dsa-5417',
-                'https://www.openssl.org/news/secadv/20230530.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: Possible DoS translating ASN.1 object identifiers'
-            },
-            {
-              'cve':  'CVE-2023-3446',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L'
-                },
-                'redhat': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L'
-                }
-              },
-              'cwes': [
-                'CWE-606',
-                'CWE-1333'
-              ],
-              'description':   "Issue summary: Checking excessively long DH keys or parameters may be very slow.\n\nImpact summary: Applications that use the functions DH_check(), DH_check_ex()\nor EVP_PKEY_param_check() to check a DH key or DH parameters may experience long\ndelays. Where the key or parameters that are being checked have been obtained\nfrom an untrusted source this may lead to a Denial of Service.\n\nThe function DH_check() performs various checks on DH parameters. One of those\nchecks confirms that the modulus ('p' parameter) is not too large. Trying to use\na very large modulus is slow and OpenSSL will not normally use a modulus which\nis over 10,000 bits in length.\n\nHowever the DH_check() function checks numerous aspects of the key or parameters\nthat have been supplied. Some of those checks use the supplied modulus value\neven if it has already been found to be too large.\n\nAn application that calls DH_check() and supplies a key or parameters obtained\nfrom an untrusted source could be vulernable to a Denial of Service attack.\n\nThe function DH_check() is itself called by a number of other OpenSSL functions.\nAn application calling any of those other functions may similarly be affected.\nThe other functions affected by this are DH_check_ex() and\nEVP_PKEY_param_check().\n\nAlso vulnerable are the OpenSSL dhparam and pkeyparam command line applications\nwhen using the '-check' option.\n\nThe OpenSSL SSL/TLS implementation is not affected by this issue.\nThe OpenSSL 3.0 and 3.1 FIPS providers are not affected by this issue.",
-              'diffID':        'sha256:12c71d74c4f7e927c6ca166d24b007fe736e41308cd24acdaebfbfb8f6bbfd27',
-              'fixedVersions': [
-                '1.1.1u-r2'
-              ],
-              'installedVersion': '1.1.1n-r0',
-              'packageName':      'libssl1.1',
-              'purl':             'pkg:apk/alpine/libssl1.1@1.1.1n-r0?arch=armhf&distro=3.15.4',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2023/07/19/4',
-                'http://www.openwall.com/lists/oss-security/2023/07/19/5',
-                'http://www.openwall.com/lists/oss-security/2023/07/19/6',
-                'http://www.openwall.com/lists/oss-security/2023/07/31/1',
-                'http://www.openwall.com/lists/oss-security/2024/05/16/1',
-                'https://access.redhat.com/errata/RHSA-2024:2447',
-                'https://access.redhat.com/security/cve/CVE-2023-3446',
-                'https://bugzilla.redhat.com/2223016',
-                'https://bugzilla.redhat.com/2224962',
-                'https://bugzilla.redhat.com/2227852',
-                'https://bugzilla.redhat.com/2248616',
-                'https://bugzilla.redhat.com/2257571',
-                'https://bugzilla.redhat.com/2258502',
-                'https://bugzilla.redhat.com/2259944',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2224962',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2257582',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2257583',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2258677',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2258688',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2258691',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2258694',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2258700',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-36763',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-36764',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3446',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45229',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45231',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45232',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45233',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45235',
-                'https://errata.almalinux.org/9/ALSA-2024-2447.html',
-                'https://errata.rockylinux.org/RLSA-2024:2264',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=1fa20cf2f506113c761777127a38bce5068740eb',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=8780a896543a654e757db1b9396383f9d8095528',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=9a0a4d3c1e7138915563c0df4fe6a3f9377b839c',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=fc9867c1e03c22ebf56943be205202e576aabf23',
-                'https://linux.oracle.com/cve/CVE-2023-3446.html',
-                'https://linux.oracle.com/errata/ELSA-2024-2447.html',
-                'https://lists.debian.org/debian-lts-announce/2023/08/msg00019.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-3446',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://security.netapp.com/advisory/ntap-20230803-0011/',
-                'https://ubuntu.com/security/notices/USN-6435-1',
-                'https://ubuntu.com/security/notices/USN-6435-2',
-                'https://ubuntu.com/security/notices/USN-6450-1',
-                'https://ubuntu.com/security/notices/USN-6709-1',
-                'https://ubuntu.com/security/notices/USN-7018-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-3446',
-                'https://www.openssl.org/news/secadv/20230719.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: Excessive time spent checking DH keys and parameters'
-            },
-            {
-              'cve':  'CVE-2023-3817',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L'
-                },
-                'redhat': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L'
-                }
-              },
-              'cwes': [
-                'CWE-606',
-                'CWE-834'
-              ],
-              'description':   'Issue summary: Checking excessively long DH keys or parameters may be very slow.\n\nImpact summary: Applications that use the functions DH_check(), DH_check_ex()\nor EVP_PKEY_param_check() to check a DH key or DH parameters may experience long\ndelays. Where the key or parameters that are being checked have been obtained\nfrom an untrusted source this may lead to a Denial of Service.\n\nThe function DH_check() performs various checks on DH parameters. After fixing\nCVE-2023-3446 it was discovered that a large q parameter value can also trigger\nan overly long computation during some of these checks. A correct q value,\nif present, cannot be larger than the modulus p parameter, thus it is\nunnecessary to perform these checks if q is larger than p.\n\nAn application that calls DH_check() and supplies a key or parameters obtained\nfrom an untrusted source could be vulnerable to a Denial of Service attack.\n\nThe function DH_check() is itself called by a number of other OpenSSL functions.\nAn application calling any of those other functions may similarly be affected.\nThe other functions affected by this are DH_check_ex() and\nEVP_PKEY_param_check().\n\nAlso vulnerable are the OpenSSL dhparam and pkeyparam command line applications\nwhen using the "-check" option.\n\nThe OpenSSL SSL/TLS implementation is not affected by this issue.\n\nThe OpenSSL 3.0 and 3.1 FIPS providers are not affected by this issue.',
-              'diffID':        'sha256:12c71d74c4f7e927c6ca166d24b007fe736e41308cd24acdaebfbfb8f6bbfd27',
-              'fixedVersions': [
-                '1.1.1v-r0'
-              ],
-              'installedVersion': '1.1.1n-r0',
-              'packageName':      'libssl1.1',
-              'purl':             'pkg:apk/alpine/libssl1.1@1.1.1n-r0?arch=armhf&distro=3.15.4',
-              'references':       [
-                'http://seclists.org/fulldisclosure/2023/Jul/43',
-                'http://www.openwall.com/lists/oss-security/2023/07/31/1',
-                'http://www.openwall.com/lists/oss-security/2023/09/22/11',
-                'http://www.openwall.com/lists/oss-security/2023/09/22/9',
-                'http://www.openwall.com/lists/oss-security/2023/11/06/2',
-                'https://access.redhat.com/errata/RHSA-2024:2447',
-                'https://access.redhat.com/security/cve/CVE-2023-3817',
-                'https://bugzilla.redhat.com/2223016',
-                'https://bugzilla.redhat.com/2224962',
-                'https://bugzilla.redhat.com/2227852',
-                'https://bugzilla.redhat.com/2248616',
-                'https://bugzilla.redhat.com/2257571',
-                'https://bugzilla.redhat.com/2258502',
-                'https://bugzilla.redhat.com/2259944',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2224962',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2227852',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2248616',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2270358',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3446',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3817',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-5678',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-2408',
-                'https://errata.almalinux.org/9/ALSA-2024-2447.html',
-                'https://errata.rockylinux.org/RLSA-2023:7877',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=6a1eb62c29db6cb5eec707f9338aee00f44e26f5',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=869ad69aadd985c7b8ca6f4e5dd0eb274c9f3644',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=9002fd07327a91f35ba6c1307e71fa6fd4409b7f',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=91ddeba0f2269b017dc06c46c993a788974b1aa5',
-                'https://linux.oracle.com/cve/CVE-2023-3817.html',
-                'https://linux.oracle.com/errata/ELSA-2024-2447.html',
-                'https://lists.debian.org/debian-lts-announce/2023/08/msg00019.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-3817',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://security.netapp.com/advisory/ntap-20230818-0014/',
-                'https://security.netapp.com/advisory/ntap-20231027-0008/',
-                'https://security.netapp.com/advisory/ntap-20240621-0006/',
-                'https://ubuntu.com/security/notices/USN-6435-1',
-                'https://ubuntu.com/security/notices/USN-6435-2',
-                'https://ubuntu.com/security/notices/USN-6450-1',
-                'https://ubuntu.com/security/notices/USN-6709-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-3817',
-                'https://www.openssl.org/news/secadv/20230731.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'OpenSSL: Excessive time spent checking DH q parameter value'
-            },
-            {
-              'cve':  'CVE-2023-5678',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L'
-                },
-                'redhat': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L'
-                }
-              },
-              'cwes': [
-                'CWE-606',
-                'CWE-754'
-              ],
-              'description':   "Issue summary: Generating excessively long X9.42 DH keys or checking\nexcessively long X9.42 DH keys or parameters may be very slow.\n\nImpact summary: Applications that use the functions DH_generate_key() to\ngenerate an X9.42 DH key may experience long delays.  Likewise, applications\nthat use DH_check_pub_key(), DH_check_pub_key_ex() or EVP_PKEY_public_check()\nto check an X9.42 DH key or X9.42 DH parameters may experience long delays.\nWhere the key or parameters that are being checked have been obtained from\nan untrusted source this may lead to a Denial of Service.\n\nWhile DH_check() performs all the necessary checks (as of CVE-2023-3817),\nDH_check_pub_key() doesn't make any of these checks, and is therefore\nvulnerable for excessively large P and Q parameters.\n\nLikewise, while DH_generate_key() performs a check for an excessively large\nP, it doesn't check for an excessively large Q.\n\nAn application that calls DH_generate_key() or DH_check_pub_key() and\nsupplies a key or parameters obtained from an untrusted source could be\nvulnerable to a Denial of Service attack.\n\nDH_generate_key() and DH_check_pub_key() are also called by a number of\nother OpenSSL functions.  An application calling any of those other\nfunctions may similarly be affected.  The other functions affected by this\nare DH_check_pub_key_ex(), EVP_PKEY_public_check(), and EVP_PKEY_generate().\n\nAlso vulnerable are the OpenSSL pkey command line application when using the\n\"-pubcheck\" option, as well as the OpenSSL genpkey command line application.\n\nThe OpenSSL SSL/TLS implementation is not affected by this issue.\n\nThe OpenSSL 3.0 and 3.1 FIPS providers are not affected by this issue.",
-              'diffID':        'sha256:12c71d74c4f7e927c6ca166d24b007fe736e41308cd24acdaebfbfb8f6bbfd27',
-              'fixedVersions': [
-                '1.1.1w-r1'
-              ],
-              'installedVersion': '1.1.1n-r0',
-              'packageName':      'libssl1.1',
-              'purl':             'pkg:apk/alpine/libssl1.1@1.1.1n-r0?arch=armhf&distro=3.15.4',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2024/03/11/1',
-                'https://access.redhat.com/errata/RHSA-2024:2447',
-                'https://access.redhat.com/security/cve/CVE-2023-5678',
-                'https://bugzilla.redhat.com/2223016',
-                'https://bugzilla.redhat.com/2224962',
-                'https://bugzilla.redhat.com/2227852',
-                'https://bugzilla.redhat.com/2248616',
-                'https://bugzilla.redhat.com/2257571',
-                'https://bugzilla.redhat.com/2258502',
-                'https://bugzilla.redhat.com/2259944',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2224962',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2227852',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2248616',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2270358',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3446',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3817',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-5678',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-2408',
-                'https://errata.almalinux.org/9/ALSA-2024-2447.html',
-                'https://errata.rockylinux.org/RLSA-2023:7877',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=34efaef6c103d636ab507a0cc34dca4d3aecc055',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=710fee740904b6290fef0dd5536fbcedbc38ff0c',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=db925ae2e65d0d925adef429afc37f75bd1c2017',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=ddeb4b6c6d527e54ce9a99cba785c0f7776e54b6',
-                'https://linux.oracle.com/cve/CVE-2023-5678.html',
-                'https://linux.oracle.com/errata/ELSA-2024-2447.html',
-                'https://lists.debian.org/debian-lts-announce/2024/10/msg00033.html',
-                'https://lists.debian.org/debian-lts-announce/2024/11/msg00000.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-5678',
-                'https://security.netapp.com/advisory/ntap-20231130-0010/',
-                'https://ubuntu.com/security/notices/USN-6622-1',
-                'https://ubuntu.com/security/notices/USN-6632-1',
-                'https://ubuntu.com/security/notices/USN-6709-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-5678',
-                'https://www.openssl.org/news/secadv/20231106.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: Generating excessively long X9.42 DH keys or checking excessively long X9.42 DH keys or parameters may be very slow'
-            },
-            {
-              'cve':  'CVE-2022-37434',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '9.8',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-787',
-                'CWE-120'
-              ],
-              'description':   'zlib through 1.2.12 has a heap-based buffer over-read or buffer overflow in inflate in inflate.c via a large gzip header extra field. NOTE: only applications that call inflateGetHeader are affected. Some common applications bundle the affected zlib source code but may be unable to call inflateGetHeader (e.g., see the nodejs/node reference).',
-              'diffID':        'sha256:12c71d74c4f7e927c6ca166d24b007fe736e41308cd24acdaebfbfb8f6bbfd27',
-              'fixedVersions': [
-                '1.2.12-r2'
-              ],
-              'installedVersion': '1.2.12-r0',
-              'packageName':      'zlib',
-              'purl':             'pkg:apk/alpine/zlib@1.2.12-r0?arch=armhf&distro=3.15.4',
-              'references':       [
-                'http://seclists.org/fulldisclosure/2022/Oct/37',
-                'http://seclists.org/fulldisclosure/2022/Oct/38',
-                'http://seclists.org/fulldisclosure/2022/Oct/41',
-                'http://seclists.org/fulldisclosure/2022/Oct/42',
-                'http://www.openwall.com/lists/oss-security/2022/08/05/2',
-                'http://www.openwall.com/lists/oss-security/2022/08/09/1',
-                'https://access.redhat.com/errata/RHSA-2022:8291',
-                'https://access.redhat.com/security/cve/CVE-2022-37434',
-                'https://bugzilla.redhat.com/2116639',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2053198',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2077431',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2081296',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2116639',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-37434',
-                'https://errata.almalinux.org/9/ALSA-2022-8291.html',
-                'https://errata.rockylinux.org/RLSA-2022:8291',
-                'https://github.com/curl/curl/issues/9271',
-                'https://github.com/ivd38/zlib_overflow',
-                'https://github.com/madler/zlib/blob/21767c654d31d2dccdde4330529775c6c5fd5389/zlib.h#L1062-L1063',
-                'https://github.com/madler/zlib/commit/1eb7682f845ac9e9bf9ae35bbfb3bad5dacbd91d',
-                'https://github.com/madler/zlib/commit/eff308af425b67093bab25f80f1ae950166bece1',
-                'https://github.com/nodejs/node/blob/75b68c6e4db515f76df73af476eccf382bbcb00a/deps/zlib/inflate.c#L762-L764',
-                'https://linux.oracle.com/cve/CVE-2022-37434.html',
-                'https://linux.oracle.com/errata/ELSA-2023-1095.html',
-                'https://lists.debian.org/debian-lts-announce/2022/09/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JWN4VE3JQR4O2SOUS5TXNLANRPMHWV4I/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NMBOJ77A7T7PQCARMDUK75TE6LLESZ3O/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PAVPQNCG3XRLCLNSQRM3KAN5ZFMVXVTY/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/X5U7OTKZSHY2I3ZFJSR2SHFHW72RKGDK/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YRQAI7H4M4RQZ2IWZUEEXECBE5D56BH2/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2022-37434',
-                'https://security.netapp.com/advisory/ntap-20220901-0005/',
-                'https://security.netapp.com/advisory/ntap-20230427-0007/',
-                'https://support.apple.com/kb/HT213488',
-                'https://support.apple.com/kb/HT213489',
-                'https://support.apple.com/kb/HT213490',
-                'https://support.apple.com/kb/HT213491',
-                'https://support.apple.com/kb/HT213493',
-                'https://support.apple.com/kb/HT213494',
-                'https://ubuntu.com/security/notices/USN-5570-1',
-                'https://ubuntu.com/security/notices/USN-5570-2',
-                'https://ubuntu.com/security/notices/USN-5573-1',
-                'https://ubuntu.com/security/notices/USN-6736-1',
-                'https://ubuntu.com/security/notices/USN-6736-2',
-                'https://www.cve.org/CVERecord?id=CVE-2022-37434',
-                'https://www.debian.org/security/2022/dsa-5218'
-              ],
-              'severity':   'CRITICAL',
-              'suppressed': false,
-              'title':      'zlib: heap-based buffer over-read and overflow in inflate() in inflate.c via a large gzip header extra field'
-            }
-          ]
-        }
-      ],
-      'summary': {
-        'critical':   1,
-        'high':       8,
-        'low':        0,
-        'medium':     14,
-        'suppressed': 0,
-        'unknown':    0
-      }
-    }
-  },
-  {
-    'id':    'default/b0823d1382fbad799dab0648c89409d9909ad5f2d1bec4ed17344a4bd2dc6a6a',
-    'type':  'storage.sbomscanner.kubewarden.io.vulnerabilityreport',
-    'links': {
-      'patch':  'https://localhost:8005/v1/storage.sbomscanner.kubewarden.io.vulnerabilityreports/default/b0823d1382fbad799dab0648c89409d9909ad5f2d1bec4ed17344a4bd2dc6a6a',
-      'remove': 'https://localhost:8005/v1/storage.sbomscanner.kubewarden.io.vulnerabilityreports/default/b0823d1382fbad799dab0648c89409d9909ad5f2d1bec4ed17344a4bd2dc6a6a',
-      'self':   'https://localhost:8005/v1/storage.sbomscanner.kubewarden.io.vulnerabilityreports/default/b0823d1382fbad799dab0648c89409d9909ad5f2d1bec4ed17344a4bd2dc6a6a',
-      'update': 'https://localhost:8005/v1/storage.sbomscanner.kubewarden.io.vulnerabilityreports/default/b0823d1382fbad799dab0648c89409d9909ad5f2d1bec4ed17344a4bd2dc6a6a',
-      'view':   'https://localhost:8005/apis/storage.sbomscanner.kubewarden.io/v1alpha1/namespaces/default/vulnerabilityreports/b0823d1382fbad799dab0648c89409d9909ad5f2d1bec4ed17344a4bd2dc6a6a'
-    },
-    'apiVersion':    'storage.sbomscanner.kubewarden.io/v1alpha1',
-    'imageMetadata': {
-      'digest':      'sha256:ae397224603c43cd35bc2e0d863427495c1792a9d72c826d93d4bdef5ee1e094',
-      'platform':    'linux/amd64',
-      'registry':    'demo-02',
-      'registryURI': 'ghcr.io',
-      'repository':  'linuxcontainers/alpine',
-      'tag':         '3.14.9'
-    },
-    'kind':     'VulnerabilityReport',
-    'metadata': {
-      'creationTimestamp': '2026-01-09T22:46:20Z',
-      'fields':            [
-        'b0823d1382fbad799dab0648c89409d9909ad5f2d1bec4ed17344a4bd2dc6a6a',
-        'ghcr.io/linuxcontainers/alpine:3.14.9',
-        'linux/amd64',
-        '4 (0 suppressed)'
-      ],
-      'labels': {
-        'app.kubernetes.io/managed-by':          'sbomscanner',
-        'app.kubernetes.io/part-of':             'sbomscanner',
-        'sbomscanner.kubewarden.io/scanjob-uid': '42184d01-4b15-466f-98aa-e802d1b6b6b8'
-      },
-      'name':            'b0823d1382fbad799dab0648c89409d9909ad5f2d1bec4ed17344a4bd2dc6a6a',
-      'namespace':       'default',
-      'ownerReferences': [
-        {
-          'apiVersion':         'storage.sbomscanner.kubewarden.io/v1alpha1',
-          'blockOwnerDeletion': true,
-          'controller':         true,
-          'kind':               'SBOM',
-          'name':               'b0823d1382fbad799dab0648c89409d9909ad5f2d1bec4ed17344a4bd2dc6a6a',
-          'uid':                '1cb8f85e-95bb-4969-aed3-348d7b4e7dee'
-        }
-      ],
-      'relationships': [
-        {
-          'fromId':   'default/b0823d1382fbad799dab0648c89409d9909ad5f2d1bec4ed17344a4bd2dc6a6a',
-          'fromType': 'storage.sbomscanner.kubewarden.io.sbom',
-          'rel':      'owner',
-          'state':    'active',
-          'message':  'Resource is current'
-        }
-      ],
-      'resourceVersion': '6',
-      'state':           {
-        'error':         false,
-        'message':       'Resource is current',
-        'name':          'active',
-        'transitioning': false
-      },
-      'uid': '31403049-4e69-4aeb-b2a4-2dcb5aceb4ea'
-    },
-    'report': {
-      'results': [
-        {
-          'class':           'os-pkgs',
-          'target':          '/var/run/worker/trivy.sbom.935005714.json (alpine 3.14.9)',
-          'type':            'alpine',
-          'vulnerabilities': [
-            {
-              'cve':  'CVE-2023-0464',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-295'
-              ],
-              'description':   "A security vulnerability has been identified in all supported versions\n\nof OpenSSL related to the verification of X.509 certificate chains\nthat include policy constraints.  Attackers may be able to exploit this\nvulnerability by creating a malicious certificate chain that triggers\nexponential use of computational resources, leading to a denial-of-service\n(DoS) attack on affected systems.\n\nPolicy processing is disabled by default but can be enabled by passing\nthe `-policy' argument to the command line utilities or by calling the\n`X509_VERIFY_PARAM_set1_policies()' function.",
-              'diffID':        'sha256:625523cb9cce7a1bcc1d03e3038de4843a27af3b92d859004bcefb0027291933',
-              'fixedVersions': [
-                '1.1.1t-r1'
-              ],
-              'installedVersion': '1.1.1t-r0',
-              'packageName':      'libcrypto1.1',
-              'purl':             'pkg:apk/alpine/libcrypto1.1@1.1.1t-r0?arch=x86_64&distro=3.14.9',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2023:3722',
-                'https://access.redhat.com/security/cve/CVE-2023-0464',
-                'https://bugzilla.redhat.com/2181082',
-                'https://bugzilla.redhat.com/2182561',
-                'https://bugzilla.redhat.com/2182565',
-                'https://bugzilla.redhat.com/2188461',
-                'https://bugzilla.redhat.com/2207947',
-                'https://errata.almalinux.org/9/ALSA-2023-3722.html',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=2017771e2db3e2b96f89bbe8766c3209f6a99545',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=2dcd4f1e3115f38cefa43e3efbe9b801c27e642e',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=879f7080d7e141f415c79eaa3a8ac4a3dad0348b',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=959c59c7a0164117e7f8366466a32bb1f8d77ff1',
-                'https://linux.oracle.com/cve/CVE-2023-0464.html',
-                'https://linux.oracle.com/errata/ELSA-2023-3722.html',
-                'https://lists.debian.org/debian-lts-announce/2023/06/msg00011.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-0464',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://security.netapp.com/advisory/ntap-20230406-0006/',
-                'https://security.netapp.com/advisory/ntap-20240621-0006/',
-                'https://ubuntu.com/security/notices/USN-6039-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.couchbase.com/alerts/',
-                'https://www.cve.org/CVERecord?id=CVE-2023-0464',
-                'https://www.debian.org/security/2023/dsa-5417',
-                'https://www.openssl.org/news/secadv/20230322.txt'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: Denial of service by excessive resource usage in verifying X509 policy constraints'
-            },
-            {
-              'cve':  'CVE-2023-0465',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N'
-                },
-                'redhat': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-295'
-              ],
-              'description':   "Applications that use a non-default option when verifying certificates may be\nvulnerable to an attack from a malicious CA to circumvent certain checks.\n\nInvalid certificate policies in leaf certificates are silently ignored by\nOpenSSL and other certificate policy checks are skipped for that certificate.\nA malicious CA could use this to deliberately assert invalid certificate policies\nin order to circumvent policy checking on the certificate altogether.\n\nPolicy processing is disabled by default but can be enabled by passing\nthe `-policy' argument to the command line utilities or by calling the\n`X509_VERIFY_PARAM_set1_policies()' function.",
-              'diffID':        'sha256:625523cb9cce7a1bcc1d03e3038de4843a27af3b92d859004bcefb0027291933',
-              'fixedVersions': [
-                '1.1.1t-r2'
-              ],
-              'installedVersion': '1.1.1t-r0',
-              'packageName':      'libcrypto1.1',
-              'purl':             'pkg:apk/alpine/libcrypto1.1@1.1.1t-r0?arch=x86_64&distro=3.14.9',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2023:3722',
-                'https://access.redhat.com/security/cve/CVE-2023-0465',
-                'https://bugzilla.redhat.com/2181082',
-                'https://bugzilla.redhat.com/2182561',
-                'https://bugzilla.redhat.com/2182565',
-                'https://bugzilla.redhat.com/2188461',
-                'https://bugzilla.redhat.com/2207947',
-                'https://errata.almalinux.org/9/ALSA-2023-3722.html',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=10325176f3d3e98c6e2b3bf5ab1e3b334de6947a',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=1dd43e0709fece299b15208f36cc7c76209ba0bb',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=b013765abfa80036dc779dd0e50602c57bb3bf95',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=facfb1ab745646e97a1920977ae4a9965ea61d5c',
-                'https://linux.oracle.com/cve/CVE-2023-0465.html',
-                'https://linux.oracle.com/errata/ELSA-2023-3722.html',
-                'https://lists.debian.org/debian-lts-announce/2023/06/msg00011.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-0465',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://security.netapp.com/advisory/ntap-20230414-0001/',
-                'https://ubuntu.com/security/notices/USN-6039-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-0465',
-                'https://www.debian.org/security/2023/dsa-5417',
-                'https://www.openssl.org/news/secadv/20230328.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: Invalid certificate policies in leaf certificates are silently ignored'
-            },
-            {
-              'cve':  'CVE-2023-0464',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-295'
-              ],
-              'description':   "A security vulnerability has been identified in all supported versions\n\nof OpenSSL related to the verification of X.509 certificate chains\nthat include policy constraints.  Attackers may be able to exploit this\nvulnerability by creating a malicious certificate chain that triggers\nexponential use of computational resources, leading to a denial-of-service\n(DoS) attack on affected systems.\n\nPolicy processing is disabled by default but can be enabled by passing\nthe `-policy' argument to the command line utilities or by calling the\n`X509_VERIFY_PARAM_set1_policies()' function.",
-              'diffID':        'sha256:625523cb9cce7a1bcc1d03e3038de4843a27af3b92d859004bcefb0027291933',
-              'fixedVersions': [
-                '1.1.1t-r1'
-              ],
-              'installedVersion': '1.1.1t-r0',
-              'packageName':      'libssl1.1',
-              'purl':             'pkg:apk/alpine/libssl1.1@1.1.1t-r0?arch=x86_64&distro=3.14.9',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2023:3722',
-                'https://access.redhat.com/security/cve/CVE-2023-0464',
-                'https://bugzilla.redhat.com/2181082',
-                'https://bugzilla.redhat.com/2182561',
-                'https://bugzilla.redhat.com/2182565',
-                'https://bugzilla.redhat.com/2188461',
-                'https://bugzilla.redhat.com/2207947',
-                'https://errata.almalinux.org/9/ALSA-2023-3722.html',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=2017771e2db3e2b96f89bbe8766c3209f6a99545',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=2dcd4f1e3115f38cefa43e3efbe9b801c27e642e',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=879f7080d7e141f415c79eaa3a8ac4a3dad0348b',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=959c59c7a0164117e7f8366466a32bb1f8d77ff1',
-                'https://linux.oracle.com/cve/CVE-2023-0464.html',
-                'https://linux.oracle.com/errata/ELSA-2023-3722.html',
-                'https://lists.debian.org/debian-lts-announce/2023/06/msg00011.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-0464',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://security.netapp.com/advisory/ntap-20230406-0006/',
-                'https://security.netapp.com/advisory/ntap-20240621-0006/',
-                'https://ubuntu.com/security/notices/USN-6039-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.couchbase.com/alerts/',
-                'https://www.cve.org/CVERecord?id=CVE-2023-0464',
-                'https://www.debian.org/security/2023/dsa-5417',
-                'https://www.openssl.org/news/secadv/20230322.txt'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: Denial of service by excessive resource usage in verifying X509 policy constraints'
-            },
-            {
-              'cve':  'CVE-2023-0465',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N'
-                },
-                'redhat': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-295'
-              ],
-              'description':   "Applications that use a non-default option when verifying certificates may be\nvulnerable to an attack from a malicious CA to circumvent certain checks.\n\nInvalid certificate policies in leaf certificates are silently ignored by\nOpenSSL and other certificate policy checks are skipped for that certificate.\nA malicious CA could use this to deliberately assert invalid certificate policies\nin order to circumvent policy checking on the certificate altogether.\n\nPolicy processing is disabled by default but can be enabled by passing\nthe `-policy' argument to the command line utilities or by calling the\n`X509_VERIFY_PARAM_set1_policies()' function.",
-              'diffID':        'sha256:625523cb9cce7a1bcc1d03e3038de4843a27af3b92d859004bcefb0027291933',
-              'fixedVersions': [
-                '1.1.1t-r2'
-              ],
-              'installedVersion': '1.1.1t-r0',
-              'packageName':      'libssl1.1',
-              'purl':             'pkg:apk/alpine/libssl1.1@1.1.1t-r0?arch=x86_64&distro=3.14.9',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2023:3722',
-                'https://access.redhat.com/security/cve/CVE-2023-0465',
-                'https://bugzilla.redhat.com/2181082',
-                'https://bugzilla.redhat.com/2182561',
-                'https://bugzilla.redhat.com/2182565',
-                'https://bugzilla.redhat.com/2188461',
-                'https://bugzilla.redhat.com/2207947',
-                'https://errata.almalinux.org/9/ALSA-2023-3722.html',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=10325176f3d3e98c6e2b3bf5ab1e3b334de6947a',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=1dd43e0709fece299b15208f36cc7c76209ba0bb',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=b013765abfa80036dc779dd0e50602c57bb3bf95',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=facfb1ab745646e97a1920977ae4a9965ea61d5c',
-                'https://linux.oracle.com/cve/CVE-2023-0465.html',
-                'https://linux.oracle.com/errata/ELSA-2023-3722.html',
-                'https://lists.debian.org/debian-lts-announce/2023/06/msg00011.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-0465',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://security.netapp.com/advisory/ntap-20230414-0001/',
-                'https://ubuntu.com/security/notices/USN-6039-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-0465',
-                'https://www.debian.org/security/2023/dsa-5417',
-                'https://www.openssl.org/news/secadv/20230328.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: Invalid certificate policies in leaf certificates are silently ignored'
-            }
-          ]
-        }
-      ],
-      'summary': {
-        'critical':   0,
-        'high':       2,
-        'low':        0,
-        'medium':     2,
-        'suppressed': 0,
-        'unknown':    0
-      }
-    }
-  },
-  {
-    'id':    'default/b12dc8cd6c65cc2565a40bff88ebb3347892965f947cbe45aa35ebb0b994aef4',
-    'type':  'storage.sbomscanner.kubewarden.io.vulnerabilityreport',
-    'links': {
-      'patch':  'https://localhost:8005/v1/storage.sbomscanner.kubewarden.io.vulnerabilityreports/default/b12dc8cd6c65cc2565a40bff88ebb3347892965f947cbe45aa35ebb0b994aef4',
-      'remove': 'https://localhost:8005/v1/storage.sbomscanner.kubewarden.io.vulnerabilityreports/default/b12dc8cd6c65cc2565a40bff88ebb3347892965f947cbe45aa35ebb0b994aef4',
-      'self':   'https://localhost:8005/v1/storage.sbomscanner.kubewarden.io.vulnerabilityreports/default/b12dc8cd6c65cc2565a40bff88ebb3347892965f947cbe45aa35ebb0b994aef4',
-      'update': 'https://localhost:8005/v1/storage.sbomscanner.kubewarden.io.vulnerabilityreports/default/b12dc8cd6c65cc2565a40bff88ebb3347892965f947cbe45aa35ebb0b994aef4',
-      'view':   'https://localhost:8005/apis/storage.sbomscanner.kubewarden.io/v1alpha1/namespaces/default/vulnerabilityreports/b12dc8cd6c65cc2565a40bff88ebb3347892965f947cbe45aa35ebb0b994aef4'
-    },
-    'apiVersion':    'storage.sbomscanner.kubewarden.io/v1alpha1',
-    'imageMetadata': {
-      'digest':      'sha256:e3eab9c3eca392e368ce5d1ff18735e2ccafae461ba4542ae1a36d1f51f3663e',
-      'platform':    'linux/s390x',
-      'registry':    'lsong-demo1',
-      'registryURI': 'registry-1.docker.io',
-      'repository':  'library/alpine',
-      'tag':         '3.6.5'
-    },
-    'kind':     'VulnerabilityReport',
-    'metadata': {
-      'creationTimestamp': '2026-01-14T18:51:47Z',
-      'fields':            [
-        'b12dc8cd6c65cc2565a40bff88ebb3347892965f947cbe45aa35ebb0b994aef4',
-        'registry-1.docker.io/library/alpine:3.6.5',
-        'linux/s390x',
-        '0 (0 suppressed)'
-      ],
-      'labels': {
-        'app.kubernetes.io/managed-by':          'sbomscanner',
-        'app.kubernetes.io/part-of':             'sbomscanner',
-        'sbomscanner.kubewarden.io/scanjob-uid': '445c600a-c4b6-40b3-bd71-f2d2140a37d5'
-      },
-      'name':            'b12dc8cd6c65cc2565a40bff88ebb3347892965f947cbe45aa35ebb0b994aef4',
-      'namespace':       'default',
-      'ownerReferences': [
-        {
-          'apiVersion':         'storage.sbomscanner.kubewarden.io/v1alpha1',
-          'blockOwnerDeletion': true,
-          'controller':         true,
-          'kind':               'SBOM',
-          'name':               'b12dc8cd6c65cc2565a40bff88ebb3347892965f947cbe45aa35ebb0b994aef4',
-          'uid':                '55b00c3b-8035-4898-8c1e-788dc2bba6f5'
-        }
-      ],
-      'relationships': [
-        {
-          'fromId':   'default/b12dc8cd6c65cc2565a40bff88ebb3347892965f947cbe45aa35ebb0b994aef4',
-          'fromType': 'storage.sbomscanner.kubewarden.io.sbom',
-          'rel':      'owner',
-          'state':    'active',
-          'message':  'Resource is current'
-        }
-      ],
-      'resourceVersion': '1',
-      'state':           {
-        'error':         false,
-        'message':       'Resource is current',
-        'name':          'active',
-        'transitioning': false
-      },
-      'uid': '251460d6-ccc0-482e-a6fd-60534892f5ea'
-    },
-    'report': {
-      'results': [
-        {
-          'class':           'os-pkgs',
-          'target':          '/var/run/worker/trivy.sbom.1969905217.json (alpine 3.6.5)',
-          'type':            'alpine',
-          'vulnerabilities': null
-        }
-      ],
-      'summary': {
-        'critical':   0,
-        'high':       0,
-        'low':        0,
-        'medium':     0,
-        'suppressed': 0,
-        'unknown':    0
-      }
-    }
-  },
-  {
-    'id':    'default/b453b6e90d4a6db5a3eb2fd9e12f8aa598f676cacafdaefa30af17a4905b623f',
-    'type':  'storage.sbomscanner.kubewarden.io.vulnerabilityreport',
-    'links': {
-      'patch':  'https://localhost:8005/v1/storage.sbomscanner.kubewarden.io.vulnerabilityreports/default/b453b6e90d4a6db5a3eb2fd9e12f8aa598f676cacafdaefa30af17a4905b623f',
-      'remove': 'https://localhost:8005/v1/storage.sbomscanner.kubewarden.io.vulnerabilityreports/default/b453b6e90d4a6db5a3eb2fd9e12f8aa598f676cacafdaefa30af17a4905b623f',
-      'self':   'https://localhost:8005/v1/storage.sbomscanner.kubewarden.io.vulnerabilityreports/default/b453b6e90d4a6db5a3eb2fd9e12f8aa598f676cacafdaefa30af17a4905b623f',
-      'update': 'https://localhost:8005/v1/storage.sbomscanner.kubewarden.io.vulnerabilityreports/default/b453b6e90d4a6db5a3eb2fd9e12f8aa598f676cacafdaefa30af17a4905b623f',
-      'view':   'https://localhost:8005/apis/storage.sbomscanner.kubewarden.io/v1alpha1/namespaces/default/vulnerabilityreports/b453b6e90d4a6db5a3eb2fd9e12f8aa598f676cacafdaefa30af17a4905b623f'
-    },
-    'apiVersion':    'storage.sbomscanner.kubewarden.io/v1alpha1',
-    'imageMetadata': {
-      'digest':      'sha256:51103b3f2993cbc1b45ff9d941b5d461484002792e02aa29580ec5282de719d4',
-      'platform':    'linux/386',
-      'registry':    'lsong-demo1',
-      'registryURI': 'registry-1.docker.io',
-      'repository':  'library/alpine',
-      'tag':         '3.15.4'
-    },
-    'kind':     'VulnerabilityReport',
-    'metadata': {
-      'creationTimestamp': '2026-01-14T18:51:20Z',
-      'fields':            [
-        'b453b6e90d4a6db5a3eb2fd9e12f8aa598f676cacafdaefa30af17a4905b623f',
-        'registry-1.docker.io/library/alpine:3.15.4',
-        'linux/386',
-        '23 (0 suppressed)'
-      ],
-      'labels': {
-        'app.kubernetes.io/managed-by':          'sbomscanner',
-        'app.kubernetes.io/part-of':             'sbomscanner',
-        'sbomscanner.kubewarden.io/scanjob-uid': '445c600a-c4b6-40b3-bd71-f2d2140a37d5'
-      },
-      'name':            'b453b6e90d4a6db5a3eb2fd9e12f8aa598f676cacafdaefa30af17a4905b623f',
-      'namespace':       'default',
-      'ownerReferences': [
-        {
-          'apiVersion':         'storage.sbomscanner.kubewarden.io/v1alpha1',
-          'blockOwnerDeletion': true,
-          'controller':         true,
-          'kind':               'SBOM',
-          'name':               'b453b6e90d4a6db5a3eb2fd9e12f8aa598f676cacafdaefa30af17a4905b623f',
-          'uid':                '96a68983-2fdf-4939-ad48-84af88b43b95'
-        }
-      ],
-      'relationships': [
-        {
-          'fromId':   'default/b453b6e90d4a6db5a3eb2fd9e12f8aa598f676cacafdaefa30af17a4905b623f',
-          'fromType': 'storage.sbomscanner.kubewarden.io.sbom',
-          'rel':      'owner',
-          'state':    'active',
-          'message':  'Resource is current'
-        }
-      ],
-      'resourceVersion': '1',
-      'state':           {
-        'error':         false,
-        'message':       'Resource is current',
-        'name':          'active',
-        'transitioning': false
-      },
-      'uid': 'c418f5a6-58c5-48be-9723-13433d3b9e8a'
-    },
-    'report': {
-      'results': [
-        {
-          'class':           'os-pkgs',
-          'target':          '/var/run/worker/trivy.sbom.4243659777.json (alpine 3.15.4)',
-          'type':            'alpine',
-          'vulnerabilities': [
-            {
-              'cve':  'CVE-2022-4450',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'nvd': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-415'
-              ],
-              'description':   'The function PEM_read_bio_ex() reads a PEM file from a BIO and parses and\ndecodes the "name" (e.g. "CERTIFICATE"), any header data and the payload data.\nIf the function succeeds then the "name_out", "header" and "data" arguments are\npopulated with pointers to buffers containing the relevant decoded data. The\ncaller is responsible for freeing those buffers. It is possible to construct a\nPEM file that results in 0 bytes of payload data. In this case PEM_read_bio_ex()\nwill return a failure code but will populate the header argument with a pointer\nto a buffer that has already been freed. If the caller also frees this buffer\nthen a double free will occur. This will most likely lead to a crash. This\ncould be exploited by an attacker who has the ability to supply malicious PEM\nfiles for parsing to achieve a denial of service attack.\n\nThe functions PEM_read_bio() and PEM_read() are simple wrappers around\nPEM_read_bio_ex() and therefore these functions are also directly affected.\n\nThese functions are also called indirectly by a number of other OpenSSL\nfunctions including PEM_X509_INFO_read_bio_ex() and\nSSL_CTX_use_serverinfo_file() which are also vulnerable. Some OpenSSL internal\nuses of these functions are not vulnerable because the caller does not free the\nheader argument if PEM_read_bio_ex() returns a failure code. These locations\ninclude the PEM_read_bio_TYPE() functions as well as the decoders introduced in\nOpenSSL 3.0.\n\nThe OpenSSL asn1parse command line application is also impacted by this issue.',
-              'diffID':        'sha256:0031821638929a505453c79634f2e750384303c5b605e744d56379fa34bd8bda',
-              'fixedVersions': [
-                '1.1.1t-r0'
-              ],
-              'installedVersion': '1.1.1n-r0',
-              'packageName':      'libcrypto1.1',
-              'purl':             'pkg:apk/alpine/libcrypto1.1@1.1.1n-r0?arch=x86&distro=3.15.4',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2023:2165',
-                'https://access.redhat.com/security/cve/CVE-2022-4450',
-                'https://bugzilla.redhat.com/1960321',
-                'https://bugzilla.redhat.com/2164440',
-                'https://bugzilla.redhat.com/2164487',
-                'https://bugzilla.redhat.com/2164492',
-                'https://bugzilla.redhat.com/2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144000',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144003',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144006',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144008',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144010',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144012',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144015',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144017',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144019',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2145170',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2158412',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164440',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164487',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164488',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164492',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164497',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164499',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164500',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4203',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4304',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4450',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0215',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0216',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0217',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0286',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0401',
-                'https://errata.almalinux.org/9/ALSA-2023-2165.html',
-                'https://errata.rockylinux.org/RLSA-2023:0946',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=63bcf189be73a9cc1264059bed6f57974be74a83',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=bbcf509bd046b34cca19c766bbddc31683d0858b',
-                'https://linux.oracle.com/cve/CVE-2022-4450.html',
-                'https://linux.oracle.com/errata/ELSA-2023-32791.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2022-4450',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0003',
-                'https://rustsec.org/advisories/RUSTSEC-2023-0010.html',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://ubuntu.com/security/notices/USN-5844-1',
-                'https://ubuntu.com/security/notices/USN-6564-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2022-4450',
-                'https://www.openssl.org/news/secadv/20230207.txt'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: double free after calling PEM_read_bio_ex'
-            },
-            {
-              'cve':  'CVE-2023-0215',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'nvd': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   'The public API function BIO_new_NDEF is a helper function used for streaming\nASN.1 data via a BIO. It is primarily used internally to OpenSSL to support the\nSMIME, CMS and PKCS7 streaming capabilities, but may also be called directly by\nend user applications.\n\nThe function receives a BIO from the caller, prepends a new BIO_f_asn1 filter\nBIO onto the front of it to form a BIO chain, and then returns the new head of\nthe BIO chain to the caller. Under certain conditions, for example if a CMS\nrecipient public key is invalid, the new filter BIO is freed and the function\nreturns a NULL result indicating a failure. However, in this case, the BIO chain\nis not properly cleaned up and the BIO passed by the caller still retains\ninternal pointers to the previously freed filter BIO. If the caller then goes on\nto call BIO_pop() on the BIO then a use-after-free will occur. This will most\nlikely result in a crash.\n\n\n\nThis scenario occurs directly in the internal function B64_write_ASN1() which\nmay cause BIO_new_NDEF() to be called and will subsequently call BIO_pop() on\nthe BIO. This internal function is in turn called by the public API functions\nPEM_write_bio_ASN1_stream, PEM_write_bio_CMS_stream, PEM_write_bio_PKCS7_stream,\nSMIME_write_ASN1, SMIME_write_CMS and SMIME_write_PKCS7.\n\nOther public API functions that may be impacted by this include\ni2d_ASN1_bio_stream, BIO_new_CMS, BIO_new_PKCS7, i2d_CMS_bio_stream and\ni2d_PKCS7_bio_stream.\n\nThe OpenSSL cms and smime command line applications are similarly affected.',
-              'diffID':        'sha256:0031821638929a505453c79634f2e750384303c5b605e744d56379fa34bd8bda',
-              'fixedVersions': [
-                '1.1.1t-r0'
-              ],
-              'installedVersion': '1.1.1n-r0',
-              'packageName':      'libcrypto1.1',
-              'purl':             'pkg:apk/alpine/libcrypto1.1@1.1.1n-r0?arch=x86&distro=3.15.4',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2023:2165',
-                'https://access.redhat.com/security/cve/CVE-2023-0215',
-                'https://bugzilla.redhat.com/1960321',
-                'https://bugzilla.redhat.com/2164440',
-                'https://bugzilla.redhat.com/2164487',
-                'https://bugzilla.redhat.com/2164492',
-                'https://bugzilla.redhat.com/2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144000',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144003',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144006',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144008',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144010',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144012',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144015',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144017',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144019',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2145170',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2158412',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164440',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164487',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164488',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164492',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164497',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164499',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164500',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4203',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4304',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4450',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0215',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0216',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0217',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0286',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0401',
-                'https://errata.almalinux.org/9/ALSA-2023-2165.html',
-                'https://errata.rockylinux.org/RLSA-2023:0946',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=8818064ce3c3c0f1b740a5aaba2a987e75bfbafd',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=9816136fe31d92ace4037d5da5257f763aeeb4eb',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=c3829dd8825c654652201e16f8a0a0c46ee3f344',
-                'https://linux.oracle.com/cve/CVE-2023-0215.html',
-                'https://linux.oracle.com/errata/ELSA-2023-32791.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-0215',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0003',
-                'https://rustsec.org/advisories/RUSTSEC-2023-0009.html',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://security.netapp.com/advisory/ntap-20230427-0007',
-                'https://security.netapp.com/advisory/ntap-20230427-0007/',
-                'https://security.netapp.com/advisory/ntap-20230427-0009',
-                'https://security.netapp.com/advisory/ntap-20230427-0009/',
-                'https://security.netapp.com/advisory/ntap-20240621-0006',
-                'https://security.netapp.com/advisory/ntap-20240621-0006/',
-                'https://ubuntu.com/security/notices/USN-5844-1',
-                'https://ubuntu.com/security/notices/USN-5845-1',
-                'https://ubuntu.com/security/notices/USN-5845-2',
-                'https://ubuntu.com/security/notices/USN-6564-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-0215',
-                'https://www.openssl.org/news/secadv/20230207.txt'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: use-after-free following BIO_new_NDEF'
-            },
-            {
-              'cve':  'CVE-2023-0286',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '7.4',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H'
-                },
-                'nvd': {
-                  'v3score':  '7.4',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.4',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-843'
-              ],
-              'description':   'There is a type confusion vulnerability relating to X.400 address processing\ninside an X.509 GeneralName. X.400 addresses were parsed as an ASN1_STRING but\nthe public structure definition for GENERAL_NAME incorrectly specified the type\nof the x400Address field as ASN1_TYPE. This field is subsequently interpreted by\nthe OpenSSL function GENERAL_NAME_cmp as an ASN1_TYPE rather than an\nASN1_STRING.\n\nWhen CRL checking is enabled (i.e. the application sets the\nX509_V_FLAG_CRL_CHECK flag), this vulnerability may allow an attacker to pass\narbitrary pointers to a memcmp call, enabling them to read memory contents or\nenact a denial of service. In most cases, the attack requires the attacker to\nprovide both the certificate chain and CRL, neither of which need to have a\nvalid signature. If the attacker only controls one of these inputs, the other\ninput must already contain an X.400 address as a CRL distribution point, which\nis uncommon. As such, this vulnerability is most likely to only affect\napplications which have implemented their own functionality for retrieving CRLs\nover a network.',
-              'diffID':        'sha256:0031821638929a505453c79634f2e750384303c5b605e744d56379fa34bd8bda',
-              'fixedVersions': [
-                '1.1.1t-r0'
-              ],
-              'installedVersion': '1.1.1n-r0',
-              'packageName':      'libcrypto1.1',
-              'purl':             'pkg:apk/alpine/libcrypto1.1@1.1.1n-r0?arch=x86&distro=3.15.4',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2025:7937',
-                'https://access.redhat.com/security/cve/CVE-2023-0286',
-                'https://access.redhat.com/security/cve/cve-2023-0286',
-                'https://bugzilla.redhat.com/2164440',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144000',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144003',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144006',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144008',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144010',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144012',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144015',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144017',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144019',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2145170',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2158412',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164440',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164487',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164488',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164492',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164497',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164499',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164500',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4203',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4304',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4450',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0215',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0216',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0217',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0286',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0401',
-                'https://errata.almalinux.org/9/ALSA-2025-7937.html',
-                'https://errata.rockylinux.org/RLSA-2023:0946',
-                'https://ftp.openbsd.org/pub/OpenBSD/LibreSSL/libressl-3.6.2-relnotes.txt',
-                'https://ftp.openbsd.org/pub/OpenBSD/patches/7.2/common/018_x509.patch.sig',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=2c6c9d439b484e1ba9830d8454a34fa4f80fdfe9',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=2f7530077e0ef79d98718138716bc51ca0cad658',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=fd2af07dc083a350c959147097003a14a5e8ac4d',
-                'https://github.com/pyca/cryptography',
-                'https://github.com/pyca/cryptography/security/advisories/GHSA-x4qr-2fvf-3mr5',
-                'https://linux.oracle.com/cve/CVE-2023-0286.html',
-                'https://linux.oracle.com/errata/ELSA-2025-7937.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-0286',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0003',
-                'https://rustsec.org/advisories/RUSTSEC-2023-0006.html',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://ubuntu.com/security/notices/USN-5844-1',
-                'https://ubuntu.com/security/notices/USN-5845-1',
-                'https://ubuntu.com/security/notices/USN-5845-2',
-                'https://ubuntu.com/security/notices/USN-6564-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-0286',
-                'https://www.openssl.org/news/secadv/20230207.txt'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: X.400 address type confusion in X.509 GeneralName'
-            },
-            {
-              'cve':  'CVE-2023-0464',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-295'
-              ],
-              'description':   "A security vulnerability has been identified in all supported versions\n\nof OpenSSL related to the verification of X.509 certificate chains\nthat include policy constraints.  Attackers may be able to exploit this\nvulnerability by creating a malicious certificate chain that triggers\nexponential use of computational resources, leading to a denial-of-service\n(DoS) attack on affected systems.\n\nPolicy processing is disabled by default but can be enabled by passing\nthe `-policy' argument to the command line utilities or by calling the\n`X509_VERIFY_PARAM_set1_policies()' function.",
-              'diffID':        'sha256:0031821638929a505453c79634f2e750384303c5b605e744d56379fa34bd8bda',
-              'fixedVersions': [
-                '1.1.1t-r2'
-              ],
-              'installedVersion': '1.1.1n-r0',
-              'packageName':      'libcrypto1.1',
-              'purl':             'pkg:apk/alpine/libcrypto1.1@1.1.1n-r0?arch=x86&distro=3.15.4',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2023:3722',
-                'https://access.redhat.com/security/cve/CVE-2023-0464',
-                'https://bugzilla.redhat.com/2181082',
-                'https://bugzilla.redhat.com/2182561',
-                'https://bugzilla.redhat.com/2182565',
-                'https://bugzilla.redhat.com/2188461',
-                'https://bugzilla.redhat.com/2207947',
-                'https://errata.almalinux.org/9/ALSA-2023-3722.html',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=2017771e2db3e2b96f89bbe8766c3209f6a99545',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=2dcd4f1e3115f38cefa43e3efbe9b801c27e642e',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=879f7080d7e141f415c79eaa3a8ac4a3dad0348b',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=959c59c7a0164117e7f8366466a32bb1f8d77ff1',
-                'https://linux.oracle.com/cve/CVE-2023-0464.html',
-                'https://linux.oracle.com/errata/ELSA-2023-3722.html',
-                'https://lists.debian.org/debian-lts-announce/2023/06/msg00011.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-0464',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://security.netapp.com/advisory/ntap-20230406-0006/',
-                'https://security.netapp.com/advisory/ntap-20240621-0006/',
-                'https://ubuntu.com/security/notices/USN-6039-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.couchbase.com/alerts/',
-                'https://www.cve.org/CVERecord?id=CVE-2023-0464',
-                'https://www.debian.org/security/2023/dsa-5417',
-                'https://www.openssl.org/news/secadv/20230322.txt'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: Denial of service by excessive resource usage in verifying X509 policy constraints'
-            },
-            {
-              'cve':  'CVE-2022-2097',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N'
-                },
-                'nvd': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N'
-                },
-                'redhat': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-327'
-              ],
-              'description':   "AES OCB mode for 32-bit x86 platforms using the AES-NI assembly optimised implementation will not encrypt the entirety of the data under some circumstances. This could reveal sixteen bytes of data that was preexisting in the memory that wasn't written. In the special case of \"in place\" encryption, sixteen bytes of the plaintext would be revealed. Since OpenSSL does not support OCB based cipher suites for TLS and DTLS, they are both unaffected. Fixed in OpenSSL 3.0.5 (Affected 3.0.0-3.0.4). Fixed in OpenSSL 1.1.1q (Affected 1.1.1-1.1.1p).",
-              'diffID':        'sha256:0031821638929a505453c79634f2e750384303c5b605e744d56379fa34bd8bda',
-              'fixedVersions': [
-                '1.1.1q-r0'
-              ],
-              'installedVersion': '1.1.1n-r0',
-              'packageName':      'libcrypto1.1',
-              'purl':             'pkg:apk/alpine/libcrypto1.1@1.1.1n-r0?arch=x86&distro=3.15.4',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2022:6224',
-                'https://access.redhat.com/security/cve/CVE-2022-2097',
-                'https://bugzilla.redhat.com/2081494',
-                'https://bugzilla.redhat.com/2087911',
-                'https://bugzilla.redhat.com/2087913',
-                'https://bugzilla.redhat.com/2097310',
-                'https://bugzilla.redhat.com/2104905',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2081494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2097310',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2100554',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2104905',
-                'https://cert-portal.siemens.com/productcert/pdf/ssa-332410.pdf',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-1292',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-2068',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-2097',
-                'https://errata.almalinux.org/9/ALSA-2022-6224.html',
-                'https://errata.rockylinux.org/RLSA-2022:5818',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=919925673d6c9cfed3c1085497f5dfbbed5fc431',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=a98f339ddd7e8f487d6e0088d4a9a42324885a93',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=919925673d6c9cfed3c1085497f5dfbbed5fc431',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=a98f339ddd7e8f487d6e0088d4a9a42324885a93',
-                'https://github.com/alexcrichton/openssl-src-rs',
-                'https://linux.oracle.com/cve/CVE-2022-2097.html',
-                'https://linux.oracle.com/errata/ELSA-2022-9955.html',
-                'https://lists.debian.org/debian-lts-announce/2023/02/msg00019.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/R6CK57NBQFTPUMXAPJURCGXUYT76NQAK',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/R6CK57NBQFTPUMXAPJURCGXUYT76NQAK/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/V6567JERRHHJW2GNGJGKDRNHR7SNPZK7',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/V6567JERRHHJW2GNGJGKDRNHR7SNPZK7/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VCMNWKERPBKOEBNL7CLTTX3ZZCZLH7XA',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VCMNWKERPBKOEBNL7CLTTX3ZZCZLH7XA/',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/R6CK57NBQFTPUMXAPJURCGXUYT76NQAK',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/R6CK57NBQFTPUMXAPJURCGXUYT76NQAK/',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/V6567JERRHHJW2GNGJGKDRNHR7SNPZK7',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/V6567JERRHHJW2GNGJGKDRNHR7SNPZK7/',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/VCMNWKERPBKOEBNL7CLTTX3ZZCZLH7XA',
-                'https://nvd.nist.gov/vuln/detail/CVE-2022-2097',
-                'https://rustsec.org/advisories/RUSTSEC-2022-0032.html',
-                'https://security.gentoo.org/glsa/202210-02',
-                'https://security.netapp.com/advisory/ntap-20220715-0011',
-                'https://security.netapp.com/advisory/ntap-20220715-0011/',
-                'https://security.netapp.com/advisory/ntap-20230420-0008',
-                'https://security.netapp.com/advisory/ntap-20230420-0008/',
-                'https://security.netapp.com/advisory/ntap-20240621-0006',
-                'https://security.netapp.com/advisory/ntap-20240621-0006/',
-                'https://ubuntu.com/security/notices/USN-5502-1',
-                'https://ubuntu.com/security/notices/USN-6457-1',
-                'https://www.cve.org/CVERecord?id=CVE-2022-2097',
-                'https://www.debian.org/security/2023/dsa-5343',
-                'https://www.openssl.org/news/secadv/20220705.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: AES OCB fails to encrypt some bytes'
-            },
-            {
-              'cve':  'CVE-2022-4304',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N'
-                },
-                'nvd': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N'
-                },
-                'redhat': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-203'
-              ],
-              'description':   'A timing based side channel exists in the OpenSSL RSA Decryption implementation\nwhich could be sufficient to recover a plaintext across a network in a\nBleichenbacher style attack. To achieve a successful decryption an attacker\nwould have to be able to send a very large number of trial messages for\ndecryption. The vulnerability affects all RSA padding modes: PKCS#1 v1.5,\nRSA-OEAP and RSASVE.\n\nFor example, in a TLS connection, RSA is commonly used by a client to send an\nencrypted pre-master secret to the server. An attacker that had observed a\ngenuine connection between a client and a server could use this flaw to send\ntrial messages to the server and record the time taken to process them. After a\nsufficiently large number of messages the attacker could recover the pre-master\nsecret used for the original connection and thus be able to decrypt the\napplication data sent over that connection.',
-              'diffID':        'sha256:0031821638929a505453c79634f2e750384303c5b605e744d56379fa34bd8bda',
-              'fixedVersions': [
-                '1.1.1t-r0'
-              ],
-              'installedVersion': '1.1.1n-r0',
-              'packageName':      'libcrypto1.1',
-              'purl':             'pkg:apk/alpine/libcrypto1.1@1.1.1n-r0?arch=x86&distro=3.15.4',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2023:2165',
-                'https://access.redhat.com/security/cve/CVE-2022-4304',
-                'https://bugzilla.redhat.com/1960321',
-                'https://bugzilla.redhat.com/2164440',
-                'https://bugzilla.redhat.com/2164487',
-                'https://bugzilla.redhat.com/2164492',
-                'https://bugzilla.redhat.com/2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144000',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144003',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144006',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144008',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144010',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144012',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144015',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144017',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144019',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2145170',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2158412',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164440',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164487',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164488',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164492',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164497',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164499',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164500',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4203',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4304',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4450',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0215',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0216',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0217',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0286',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0401',
-                'https://errata.almalinux.org/9/ALSA-2023-2165.html',
-                'https://errata.rockylinux.org/RLSA-2023:0946',
-                'https://linux.oracle.com/cve/CVE-2022-4304.html',
-                'https://linux.oracle.com/errata/ELSA-2023-32791.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2022-4304',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0003',
-                'https://rustsec.org/advisories/RUSTSEC-2023-0007.html',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://ubuntu.com/security/notices/USN-5844-1',
-                'https://ubuntu.com/security/notices/USN-6564-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2022-4304',
-                'https://www.openssl.org/news/secadv/20230207.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: timing attack in RSA Decryption implementation'
-            },
-            {
-              'cve':  'CVE-2023-0465',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N'
-                },
-                'redhat': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-295'
-              ],
-              'description':   "Applications that use a non-default option when verifying certificates may be\nvulnerable to an attack from a malicious CA to circumvent certain checks.\n\nInvalid certificate policies in leaf certificates are silently ignored by\nOpenSSL and other certificate policy checks are skipped for that certificate.\nA malicious CA could use this to deliberately assert invalid certificate policies\nin order to circumvent policy checking on the certificate altogether.\n\nPolicy processing is disabled by default but can be enabled by passing\nthe `-policy' argument to the command line utilities or by calling the\n`X509_VERIFY_PARAM_set1_policies()' function.",
-              'diffID':        'sha256:0031821638929a505453c79634f2e750384303c5b605e744d56379fa34bd8bda',
-              'fixedVersions': [
-                '1.1.1t-r2'
-              ],
-              'installedVersion': '1.1.1n-r0',
-              'packageName':      'libcrypto1.1',
-              'purl':             'pkg:apk/alpine/libcrypto1.1@1.1.1n-r0?arch=x86&distro=3.15.4',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2023:3722',
-                'https://access.redhat.com/security/cve/CVE-2023-0465',
-                'https://bugzilla.redhat.com/2181082',
-                'https://bugzilla.redhat.com/2182561',
-                'https://bugzilla.redhat.com/2182565',
-                'https://bugzilla.redhat.com/2188461',
-                'https://bugzilla.redhat.com/2207947',
-                'https://errata.almalinux.org/9/ALSA-2023-3722.html',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=10325176f3d3e98c6e2b3bf5ab1e3b334de6947a',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=1dd43e0709fece299b15208f36cc7c76209ba0bb',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=b013765abfa80036dc779dd0e50602c57bb3bf95',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=facfb1ab745646e97a1920977ae4a9965ea61d5c',
-                'https://linux.oracle.com/cve/CVE-2023-0465.html',
-                'https://linux.oracle.com/errata/ELSA-2023-3722.html',
-                'https://lists.debian.org/debian-lts-announce/2023/06/msg00011.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-0465',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://security.netapp.com/advisory/ntap-20230414-0001/',
-                'https://ubuntu.com/security/notices/USN-6039-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-0465',
-                'https://www.debian.org/security/2023/dsa-5417',
-                'https://www.openssl.org/news/secadv/20230328.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: Invalid certificate policies in leaf certificates are silently ignored'
-            },
-            {
-              'cve':  'CVE-2023-2650',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '6.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-770'
-              ],
-              'description':   "Issue summary: Processing some specially crafted ASN.1 object identifiers or\ndata containing them may be very slow.\n\nImpact summary: Applications that use OBJ_obj2txt() directly, or use any of\nthe OpenSSL subsystems OCSP, PKCS7/SMIME, CMS, CMP/CRMF or TS with no message\nsize limit may experience notable to very long delays when processing those\nmessages, which may lead to a Denial of Service.\n\nAn OBJECT IDENTIFIER is composed of a series of numbers - sub-identifiers -\nmost of which have no size limit.  OBJ_obj2txt() may be used to translate\nan ASN.1 OBJECT IDENTIFIER given in DER encoding form (using the OpenSSL\ntype ASN1_OBJECT) to its canonical numeric text form, which are the\nsub-identifiers of the OBJECT IDENTIFIER in decimal form, separated by\nperiods.\n\nWhen one of the sub-identifiers in the OBJECT IDENTIFIER is very large\n(these are sizes that are seen as absurdly large, taking up tens or hundreds\nof KiBs), the translation to a decimal number in text may take a very long\ntime.  The time complexity is O(n^2) with 'n' being the size of the\nsub-identifiers in bytes (*).\n\nWith OpenSSL 3.0, support to fetch cryptographic algorithms using names /\nidentifiers in string form was introduced.  This includes using OBJECT\nIDENTIFIERs in canonical numeric text form as identifiers for fetching\nalgorithms.\n\nSuch OBJECT IDENTIFIERs may be received through the ASN.1 structure\nAlgorithmIdentifier, which is commonly used in multiple protocols to specify\nwhat cryptographic algorithm should be used to sign or verify, encrypt or\ndecrypt, or digest passed data.\n\nApplications that call OBJ_obj2txt() directly with untrusted data are\naffected, with any version of OpenSSL.  If the use is for the mere purpose\nof display, the severity is considered low.\n\nIn OpenSSL 3.0 and newer, this affects the subsystems OCSP, PKCS7/SMIME,\nCMS, CMP/CRMF or TS.  It also impacts anything that processes X.509\ncertificates, including simple things like verifying its signature.\n\nThe impact on TLS is relatively low, because all versions of OpenSSL have a\n100KiB limit on the peer's certificate chain.  Additionally, this only\nimpacts clients, or servers that have explicitly enabled client\nauthentication.\n\nIn OpenSSL 1.1.1 and 1.0.2, this only affects displaying diverse objects,\nsuch as X.509 certificates.  This is assumed to not happen in such a way\nthat it would cause a Denial of Service, so these versions are considered\nnot affected by this issue in such a way that it would be cause for concern,\nand the severity is therefore considered low.",
-              'diffID':        'sha256:0031821638929a505453c79634f2e750384303c5b605e744d56379fa34bd8bda',
-              'fixedVersions': [
-                '1.1.1u-r0'
-              ],
-              'installedVersion': '1.1.1n-r0',
-              'packageName':      'libcrypto1.1',
-              'purl':             'pkg:apk/alpine/libcrypto1.1@1.1.1n-r0?arch=x86&distro=3.15.4',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2023/05/30/1',
-                'https://access.redhat.com/errata/RHSA-2023:6330',
-                'https://access.redhat.com/security/cve/CVE-2023-2650',
-                'https://bugzilla.redhat.com/1858038',
-                'https://bugzilla.redhat.com/2207947',
-                'https://errata.almalinux.org/9/ALSA-2023-6330.html',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=423a2bc737a908ad0c77bda470b2b59dc879936b',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=853c5e56ee0b8650c73140816bb8b91d6163422c',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=9e209944b35cf82368071f160a744b6178f9b098',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=db779b0e10b047f2585615e0b8f2acdf21f8544a',
-                'https://linux.oracle.com/cve/CVE-2023-2650.html',
-                'https://linux.oracle.com/errata/ELSA-2023-6330.html',
-                'https://lists.debian.org/debian-lts-announce/2023/06/msg00011.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-2650',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0009',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://security.netapp.com/advisory/ntap-20230703-0001/',
-                'https://security.netapp.com/advisory/ntap-20231027-0009/',
-                'https://ubuntu.com/security/notices/USN-6119-1',
-                'https://ubuntu.com/security/notices/USN-6188-1',
-                'https://ubuntu.com/security/notices/USN-6672-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-2650',
-                'https://www.debian.org/security/2023/dsa-5417',
-                'https://www.openssl.org/news/secadv/20230530.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: Possible DoS translating ASN.1 object identifiers'
-            },
-            {
-              'cve':  'CVE-2023-3446',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L'
-                },
-                'redhat': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L'
-                }
-              },
-              'cwes': [
-                'CWE-606',
-                'CWE-1333'
-              ],
-              'description':   "Issue summary: Checking excessively long DH keys or parameters may be very slow.\n\nImpact summary: Applications that use the functions DH_check(), DH_check_ex()\nor EVP_PKEY_param_check() to check a DH key or DH parameters may experience long\ndelays. Where the key or parameters that are being checked have been obtained\nfrom an untrusted source this may lead to a Denial of Service.\n\nThe function DH_check() performs various checks on DH parameters. One of those\nchecks confirms that the modulus ('p' parameter) is not too large. Trying to use\na very large modulus is slow and OpenSSL will not normally use a modulus which\nis over 10,000 bits in length.\n\nHowever the DH_check() function checks numerous aspects of the key or parameters\nthat have been supplied. Some of those checks use the supplied modulus value\neven if it has already been found to be too large.\n\nAn application that calls DH_check() and supplies a key or parameters obtained\nfrom an untrusted source could be vulernable to a Denial of Service attack.\n\nThe function DH_check() is itself called by a number of other OpenSSL functions.\nAn application calling any of those other functions may similarly be affected.\nThe other functions affected by this are DH_check_ex() and\nEVP_PKEY_param_check().\n\nAlso vulnerable are the OpenSSL dhparam and pkeyparam command line applications\nwhen using the '-check' option.\n\nThe OpenSSL SSL/TLS implementation is not affected by this issue.\nThe OpenSSL 3.0 and 3.1 FIPS providers are not affected by this issue.",
-              'diffID':        'sha256:0031821638929a505453c79634f2e750384303c5b605e744d56379fa34bd8bda',
-              'fixedVersions': [
-                '1.1.1u-r2'
-              ],
-              'installedVersion': '1.1.1n-r0',
-              'packageName':      'libcrypto1.1',
-              'purl':             'pkg:apk/alpine/libcrypto1.1@1.1.1n-r0?arch=x86&distro=3.15.4',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2023/07/19/4',
-                'http://www.openwall.com/lists/oss-security/2023/07/19/5',
-                'http://www.openwall.com/lists/oss-security/2023/07/19/6',
-                'http://www.openwall.com/lists/oss-security/2023/07/31/1',
-                'http://www.openwall.com/lists/oss-security/2024/05/16/1',
-                'https://access.redhat.com/errata/RHSA-2024:2447',
-                'https://access.redhat.com/security/cve/CVE-2023-3446',
-                'https://bugzilla.redhat.com/2223016',
-                'https://bugzilla.redhat.com/2224962',
-                'https://bugzilla.redhat.com/2227852',
-                'https://bugzilla.redhat.com/2248616',
-                'https://bugzilla.redhat.com/2257571',
-                'https://bugzilla.redhat.com/2258502',
-                'https://bugzilla.redhat.com/2259944',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2224962',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2257582',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2257583',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2258677',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2258688',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2258691',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2258694',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2258700',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-36763',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-36764',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3446',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45229',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45231',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45232',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45233',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45235',
-                'https://errata.almalinux.org/9/ALSA-2024-2447.html',
-                'https://errata.rockylinux.org/RLSA-2024:2264',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=1fa20cf2f506113c761777127a38bce5068740eb',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=8780a896543a654e757db1b9396383f9d8095528',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=9a0a4d3c1e7138915563c0df4fe6a3f9377b839c',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=fc9867c1e03c22ebf56943be205202e576aabf23',
-                'https://linux.oracle.com/cve/CVE-2023-3446.html',
-                'https://linux.oracle.com/errata/ELSA-2024-2447.html',
-                'https://lists.debian.org/debian-lts-announce/2023/08/msg00019.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-3446',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://security.netapp.com/advisory/ntap-20230803-0011/',
-                'https://ubuntu.com/security/notices/USN-6435-1',
-                'https://ubuntu.com/security/notices/USN-6435-2',
-                'https://ubuntu.com/security/notices/USN-6450-1',
-                'https://ubuntu.com/security/notices/USN-6709-1',
-                'https://ubuntu.com/security/notices/USN-7018-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-3446',
-                'https://www.openssl.org/news/secadv/20230719.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: Excessive time spent checking DH keys and parameters'
-            },
-            {
-              'cve':  'CVE-2023-3817',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L'
-                },
-                'redhat': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L'
-                }
-              },
-              'cwes': [
-                'CWE-606',
-                'CWE-834'
-              ],
-              'description':   'Issue summary: Checking excessively long DH keys or parameters may be very slow.\n\nImpact summary: Applications that use the functions DH_check(), DH_check_ex()\nor EVP_PKEY_param_check() to check a DH key or DH parameters may experience long\ndelays. Where the key or parameters that are being checked have been obtained\nfrom an untrusted source this may lead to a Denial of Service.\n\nThe function DH_check() performs various checks on DH parameters. After fixing\nCVE-2023-3446 it was discovered that a large q parameter value can also trigger\nan overly long computation during some of these checks. A correct q value,\nif present, cannot be larger than the modulus p parameter, thus it is\nunnecessary to perform these checks if q is larger than p.\n\nAn application that calls DH_check() and supplies a key or parameters obtained\nfrom an untrusted source could be vulnerable to a Denial of Service attack.\n\nThe function DH_check() is itself called by a number of other OpenSSL functions.\nAn application calling any of those other functions may similarly be affected.\nThe other functions affected by this are DH_check_ex() and\nEVP_PKEY_param_check().\n\nAlso vulnerable are the OpenSSL dhparam and pkeyparam command line applications\nwhen using the "-check" option.\n\nThe OpenSSL SSL/TLS implementation is not affected by this issue.\n\nThe OpenSSL 3.0 and 3.1 FIPS providers are not affected by this issue.',
-              'diffID':        'sha256:0031821638929a505453c79634f2e750384303c5b605e744d56379fa34bd8bda',
-              'fixedVersions': [
-                '1.1.1v-r0'
-              ],
-              'installedVersion': '1.1.1n-r0',
-              'packageName':      'libcrypto1.1',
-              'purl':             'pkg:apk/alpine/libcrypto1.1@1.1.1n-r0?arch=x86&distro=3.15.4',
-              'references':       [
-                'http://seclists.org/fulldisclosure/2023/Jul/43',
-                'http://www.openwall.com/lists/oss-security/2023/07/31/1',
-                'http://www.openwall.com/lists/oss-security/2023/09/22/11',
-                'http://www.openwall.com/lists/oss-security/2023/09/22/9',
-                'http://www.openwall.com/lists/oss-security/2023/11/06/2',
-                'https://access.redhat.com/errata/RHSA-2024:2447',
-                'https://access.redhat.com/security/cve/CVE-2023-3817',
-                'https://bugzilla.redhat.com/2223016',
-                'https://bugzilla.redhat.com/2224962',
-                'https://bugzilla.redhat.com/2227852',
-                'https://bugzilla.redhat.com/2248616',
-                'https://bugzilla.redhat.com/2257571',
-                'https://bugzilla.redhat.com/2258502',
-                'https://bugzilla.redhat.com/2259944',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2224962',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2227852',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2248616',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2270358',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3446',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3817',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-5678',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-2408',
-                'https://errata.almalinux.org/9/ALSA-2024-2447.html',
-                'https://errata.rockylinux.org/RLSA-2023:7877',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=6a1eb62c29db6cb5eec707f9338aee00f44e26f5',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=869ad69aadd985c7b8ca6f4e5dd0eb274c9f3644',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=9002fd07327a91f35ba6c1307e71fa6fd4409b7f',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=91ddeba0f2269b017dc06c46c993a788974b1aa5',
-                'https://linux.oracle.com/cve/CVE-2023-3817.html',
-                'https://linux.oracle.com/errata/ELSA-2024-2447.html',
-                'https://lists.debian.org/debian-lts-announce/2023/08/msg00019.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-3817',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://security.netapp.com/advisory/ntap-20230818-0014/',
-                'https://security.netapp.com/advisory/ntap-20231027-0008/',
-                'https://security.netapp.com/advisory/ntap-20240621-0006/',
-                'https://ubuntu.com/security/notices/USN-6435-1',
-                'https://ubuntu.com/security/notices/USN-6435-2',
-                'https://ubuntu.com/security/notices/USN-6450-1',
-                'https://ubuntu.com/security/notices/USN-6709-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-3817',
-                'https://www.openssl.org/news/secadv/20230731.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'OpenSSL: Excessive time spent checking DH q parameter value'
-            },
-            {
-              'cve':  'CVE-2023-5678',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L'
-                },
-                'redhat': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L'
-                }
-              },
-              'cwes': [
-                'CWE-606',
-                'CWE-754'
-              ],
-              'description':   "Issue summary: Generating excessively long X9.42 DH keys or checking\nexcessively long X9.42 DH keys or parameters may be very slow.\n\nImpact summary: Applications that use the functions DH_generate_key() to\ngenerate an X9.42 DH key may experience long delays.  Likewise, applications\nthat use DH_check_pub_key(), DH_check_pub_key_ex() or EVP_PKEY_public_check()\nto check an X9.42 DH key or X9.42 DH parameters may experience long delays.\nWhere the key or parameters that are being checked have been obtained from\nan untrusted source this may lead to a Denial of Service.\n\nWhile DH_check() performs all the necessary checks (as of CVE-2023-3817),\nDH_check_pub_key() doesn't make any of these checks, and is therefore\nvulnerable for excessively large P and Q parameters.\n\nLikewise, while DH_generate_key() performs a check for an excessively large\nP, it doesn't check for an excessively large Q.\n\nAn application that calls DH_generate_key() or DH_check_pub_key() and\nsupplies a key or parameters obtained from an untrusted source could be\nvulnerable to a Denial of Service attack.\n\nDH_generate_key() and DH_check_pub_key() are also called by a number of\nother OpenSSL functions.  An application calling any of those other\nfunctions may similarly be affected.  The other functions affected by this\nare DH_check_pub_key_ex(), EVP_PKEY_public_check(), and EVP_PKEY_generate().\n\nAlso vulnerable are the OpenSSL pkey command line application when using the\n\"-pubcheck\" option, as well as the OpenSSL genpkey command line application.\n\nThe OpenSSL SSL/TLS implementation is not affected by this issue.\n\nThe OpenSSL 3.0 and 3.1 FIPS providers are not affected by this issue.",
-              'diffID':        'sha256:0031821638929a505453c79634f2e750384303c5b605e744d56379fa34bd8bda',
-              'fixedVersions': [
-                '1.1.1w-r1'
-              ],
-              'installedVersion': '1.1.1n-r0',
-              'packageName':      'libcrypto1.1',
-              'purl':             'pkg:apk/alpine/libcrypto1.1@1.1.1n-r0?arch=x86&distro=3.15.4',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2024/03/11/1',
-                'https://access.redhat.com/errata/RHSA-2024:2447',
-                'https://access.redhat.com/security/cve/CVE-2023-5678',
-                'https://bugzilla.redhat.com/2223016',
-                'https://bugzilla.redhat.com/2224962',
-                'https://bugzilla.redhat.com/2227852',
-                'https://bugzilla.redhat.com/2248616',
-                'https://bugzilla.redhat.com/2257571',
-                'https://bugzilla.redhat.com/2258502',
-                'https://bugzilla.redhat.com/2259944',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2224962',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2227852',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2248616',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2270358',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3446',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3817',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-5678',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-2408',
-                'https://errata.almalinux.org/9/ALSA-2024-2447.html',
-                'https://errata.rockylinux.org/RLSA-2023:7877',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=34efaef6c103d636ab507a0cc34dca4d3aecc055',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=710fee740904b6290fef0dd5536fbcedbc38ff0c',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=db925ae2e65d0d925adef429afc37f75bd1c2017',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=ddeb4b6c6d527e54ce9a99cba785c0f7776e54b6',
-                'https://linux.oracle.com/cve/CVE-2023-5678.html',
-                'https://linux.oracle.com/errata/ELSA-2024-2447.html',
-                'https://lists.debian.org/debian-lts-announce/2024/10/msg00033.html',
-                'https://lists.debian.org/debian-lts-announce/2024/11/msg00000.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-5678',
-                'https://security.netapp.com/advisory/ntap-20231130-0010/',
-                'https://ubuntu.com/security/notices/USN-6622-1',
-                'https://ubuntu.com/security/notices/USN-6632-1',
-                'https://ubuntu.com/security/notices/USN-6709-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-5678',
-                'https://www.openssl.org/news/secadv/20231106.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: Generating excessively long X9.42 DH keys or checking excessively long X9.42 DH keys or parameters may be very slow'
-            },
-            {
-              'cve':  'CVE-2022-4450',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'nvd': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-415'
-              ],
-              'description':   'The function PEM_read_bio_ex() reads a PEM file from a BIO and parses and\ndecodes the "name" (e.g. "CERTIFICATE"), any header data and the payload data.\nIf the function succeeds then the "name_out", "header" and "data" arguments are\npopulated with pointers to buffers containing the relevant decoded data. The\ncaller is responsible for freeing those buffers. It is possible to construct a\nPEM file that results in 0 bytes of payload data. In this case PEM_read_bio_ex()\nwill return a failure code but will populate the header argument with a pointer\nto a buffer that has already been freed. If the caller also frees this buffer\nthen a double free will occur. This will most likely lead to a crash. This\ncould be exploited by an attacker who has the ability to supply malicious PEM\nfiles for parsing to achieve a denial of service attack.\n\nThe functions PEM_read_bio() and PEM_read() are simple wrappers around\nPEM_read_bio_ex() and therefore these functions are also directly affected.\n\nThese functions are also called indirectly by a number of other OpenSSL\nfunctions including PEM_X509_INFO_read_bio_ex() and\nSSL_CTX_use_serverinfo_file() which are also vulnerable. Some OpenSSL internal\nuses of these functions are not vulnerable because the caller does not free the\nheader argument if PEM_read_bio_ex() returns a failure code. These locations\ninclude the PEM_read_bio_TYPE() functions as well as the decoders introduced in\nOpenSSL 3.0.\n\nThe OpenSSL asn1parse command line application is also impacted by this issue.',
-              'diffID':        'sha256:0031821638929a505453c79634f2e750384303c5b605e744d56379fa34bd8bda',
-              'fixedVersions': [
-                '1.1.1t-r0'
-              ],
-              'installedVersion': '1.1.1n-r0',
-              'packageName':      'libssl1.1',
-              'purl':             'pkg:apk/alpine/libssl1.1@1.1.1n-r0?arch=x86&distro=3.15.4',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2023:2165',
-                'https://access.redhat.com/security/cve/CVE-2022-4450',
-                'https://bugzilla.redhat.com/1960321',
-                'https://bugzilla.redhat.com/2164440',
-                'https://bugzilla.redhat.com/2164487',
-                'https://bugzilla.redhat.com/2164492',
-                'https://bugzilla.redhat.com/2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144000',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144003',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144006',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144008',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144010',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144012',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144015',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144017',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144019',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2145170',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2158412',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164440',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164487',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164488',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164492',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164497',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164499',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164500',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4203',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4304',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4450',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0215',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0216',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0217',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0286',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0401',
-                'https://errata.almalinux.org/9/ALSA-2023-2165.html',
-                'https://errata.rockylinux.org/RLSA-2023:0946',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=63bcf189be73a9cc1264059bed6f57974be74a83',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=bbcf509bd046b34cca19c766bbddc31683d0858b',
-                'https://linux.oracle.com/cve/CVE-2022-4450.html',
-                'https://linux.oracle.com/errata/ELSA-2023-32791.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2022-4450',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0003',
-                'https://rustsec.org/advisories/RUSTSEC-2023-0010.html',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://ubuntu.com/security/notices/USN-5844-1',
-                'https://ubuntu.com/security/notices/USN-6564-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2022-4450',
-                'https://www.openssl.org/news/secadv/20230207.txt'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: double free after calling PEM_read_bio_ex'
-            },
-            {
-              'cve':  'CVE-2023-0215',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'nvd': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   'The public API function BIO_new_NDEF is a helper function used for streaming\nASN.1 data via a BIO. It is primarily used internally to OpenSSL to support the\nSMIME, CMS and PKCS7 streaming capabilities, but may also be called directly by\nend user applications.\n\nThe function receives a BIO from the caller, prepends a new BIO_f_asn1 filter\nBIO onto the front of it to form a BIO chain, and then returns the new head of\nthe BIO chain to the caller. Under certain conditions, for example if a CMS\nrecipient public key is invalid, the new filter BIO is freed and the function\nreturns a NULL result indicating a failure. However, in this case, the BIO chain\nis not properly cleaned up and the BIO passed by the caller still retains\ninternal pointers to the previously freed filter BIO. If the caller then goes on\nto call BIO_pop() on the BIO then a use-after-free will occur. This will most\nlikely result in a crash.\n\n\n\nThis scenario occurs directly in the internal function B64_write_ASN1() which\nmay cause BIO_new_NDEF() to be called and will subsequently call BIO_pop() on\nthe BIO. This internal function is in turn called by the public API functions\nPEM_write_bio_ASN1_stream, PEM_write_bio_CMS_stream, PEM_write_bio_PKCS7_stream,\nSMIME_write_ASN1, SMIME_write_CMS and SMIME_write_PKCS7.\n\nOther public API functions that may be impacted by this include\ni2d_ASN1_bio_stream, BIO_new_CMS, BIO_new_PKCS7, i2d_CMS_bio_stream and\ni2d_PKCS7_bio_stream.\n\nThe OpenSSL cms and smime command line applications are similarly affected.',
-              'diffID':        'sha256:0031821638929a505453c79634f2e750384303c5b605e744d56379fa34bd8bda',
-              'fixedVersions': [
-                '1.1.1t-r0'
-              ],
-              'installedVersion': '1.1.1n-r0',
-              'packageName':      'libssl1.1',
-              'purl':             'pkg:apk/alpine/libssl1.1@1.1.1n-r0?arch=x86&distro=3.15.4',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2023:2165',
-                'https://access.redhat.com/security/cve/CVE-2023-0215',
-                'https://bugzilla.redhat.com/1960321',
-                'https://bugzilla.redhat.com/2164440',
-                'https://bugzilla.redhat.com/2164487',
-                'https://bugzilla.redhat.com/2164492',
-                'https://bugzilla.redhat.com/2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144000',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144003',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144006',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144008',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144010',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144012',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144015',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144017',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144019',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2145170',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2158412',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164440',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164487',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164488',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164492',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164497',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164499',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164500',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4203',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4304',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4450',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0215',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0216',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0217',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0286',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0401',
-                'https://errata.almalinux.org/9/ALSA-2023-2165.html',
-                'https://errata.rockylinux.org/RLSA-2023:0946',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=8818064ce3c3c0f1b740a5aaba2a987e75bfbafd',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=9816136fe31d92ace4037d5da5257f763aeeb4eb',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=c3829dd8825c654652201e16f8a0a0c46ee3f344',
-                'https://linux.oracle.com/cve/CVE-2023-0215.html',
-                'https://linux.oracle.com/errata/ELSA-2023-32791.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-0215',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0003',
-                'https://rustsec.org/advisories/RUSTSEC-2023-0009.html',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://security.netapp.com/advisory/ntap-20230427-0007',
-                'https://security.netapp.com/advisory/ntap-20230427-0007/',
-                'https://security.netapp.com/advisory/ntap-20230427-0009',
-                'https://security.netapp.com/advisory/ntap-20230427-0009/',
-                'https://security.netapp.com/advisory/ntap-20240621-0006',
-                'https://security.netapp.com/advisory/ntap-20240621-0006/',
-                'https://ubuntu.com/security/notices/USN-5844-1',
-                'https://ubuntu.com/security/notices/USN-5845-1',
-                'https://ubuntu.com/security/notices/USN-5845-2',
-                'https://ubuntu.com/security/notices/USN-6564-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-0215',
-                'https://www.openssl.org/news/secadv/20230207.txt'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: use-after-free following BIO_new_NDEF'
-            },
-            {
-              'cve':  'CVE-2023-0286',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '7.4',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H'
-                },
-                'nvd': {
-                  'v3score':  '7.4',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.4',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-843'
-              ],
-              'description':   'There is a type confusion vulnerability relating to X.400 address processing\ninside an X.509 GeneralName. X.400 addresses were parsed as an ASN1_STRING but\nthe public structure definition for GENERAL_NAME incorrectly specified the type\nof the x400Address field as ASN1_TYPE. This field is subsequently interpreted by\nthe OpenSSL function GENERAL_NAME_cmp as an ASN1_TYPE rather than an\nASN1_STRING.\n\nWhen CRL checking is enabled (i.e. the application sets the\nX509_V_FLAG_CRL_CHECK flag), this vulnerability may allow an attacker to pass\narbitrary pointers to a memcmp call, enabling them to read memory contents or\nenact a denial of service. In most cases, the attack requires the attacker to\nprovide both the certificate chain and CRL, neither of which need to have a\nvalid signature. If the attacker only controls one of these inputs, the other\ninput must already contain an X.400 address as a CRL distribution point, which\nis uncommon. As such, this vulnerability is most likely to only affect\napplications which have implemented their own functionality for retrieving CRLs\nover a network.',
-              'diffID':        'sha256:0031821638929a505453c79634f2e750384303c5b605e744d56379fa34bd8bda',
-              'fixedVersions': [
-                '1.1.1t-r0'
-              ],
-              'installedVersion': '1.1.1n-r0',
-              'packageName':      'libssl1.1',
-              'purl':             'pkg:apk/alpine/libssl1.1@1.1.1n-r0?arch=x86&distro=3.15.4',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2025:7937',
-                'https://access.redhat.com/security/cve/CVE-2023-0286',
-                'https://access.redhat.com/security/cve/cve-2023-0286',
-                'https://bugzilla.redhat.com/2164440',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144000',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144003',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144006',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144008',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144010',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144012',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144015',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144017',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144019',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2145170',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2158412',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164440',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164487',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164488',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164492',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164497',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164499',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164500',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4203',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4304',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4450',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0215',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0216',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0217',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0286',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0401',
-                'https://errata.almalinux.org/9/ALSA-2025-7937.html',
-                'https://errata.rockylinux.org/RLSA-2023:0946',
-                'https://ftp.openbsd.org/pub/OpenBSD/LibreSSL/libressl-3.6.2-relnotes.txt',
-                'https://ftp.openbsd.org/pub/OpenBSD/patches/7.2/common/018_x509.patch.sig',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=2c6c9d439b484e1ba9830d8454a34fa4f80fdfe9',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=2f7530077e0ef79d98718138716bc51ca0cad658',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=fd2af07dc083a350c959147097003a14a5e8ac4d',
-                'https://github.com/pyca/cryptography',
-                'https://github.com/pyca/cryptography/security/advisories/GHSA-x4qr-2fvf-3mr5',
-                'https://linux.oracle.com/cve/CVE-2023-0286.html',
-                'https://linux.oracle.com/errata/ELSA-2025-7937.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-0286',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0003',
-                'https://rustsec.org/advisories/RUSTSEC-2023-0006.html',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://ubuntu.com/security/notices/USN-5844-1',
-                'https://ubuntu.com/security/notices/USN-5845-1',
-                'https://ubuntu.com/security/notices/USN-5845-2',
-                'https://ubuntu.com/security/notices/USN-6564-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-0286',
-                'https://www.openssl.org/news/secadv/20230207.txt'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: X.400 address type confusion in X.509 GeneralName'
-            },
-            {
-              'cve':  'CVE-2023-0464',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-295'
-              ],
-              'description':   "A security vulnerability has been identified in all supported versions\n\nof OpenSSL related to the verification of X.509 certificate chains\nthat include policy constraints.  Attackers may be able to exploit this\nvulnerability by creating a malicious certificate chain that triggers\nexponential use of computational resources, leading to a denial-of-service\n(DoS) attack on affected systems.\n\nPolicy processing is disabled by default but can be enabled by passing\nthe `-policy' argument to the command line utilities or by calling the\n`X509_VERIFY_PARAM_set1_policies()' function.",
-              'diffID':        'sha256:0031821638929a505453c79634f2e750384303c5b605e744d56379fa34bd8bda',
-              'fixedVersions': [
-                '1.1.1t-r2'
-              ],
-              'installedVersion': '1.1.1n-r0',
-              'packageName':      'libssl1.1',
-              'purl':             'pkg:apk/alpine/libssl1.1@1.1.1n-r0?arch=x86&distro=3.15.4',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2023:3722',
-                'https://access.redhat.com/security/cve/CVE-2023-0464',
-                'https://bugzilla.redhat.com/2181082',
-                'https://bugzilla.redhat.com/2182561',
-                'https://bugzilla.redhat.com/2182565',
-                'https://bugzilla.redhat.com/2188461',
-                'https://bugzilla.redhat.com/2207947',
-                'https://errata.almalinux.org/9/ALSA-2023-3722.html',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=2017771e2db3e2b96f89bbe8766c3209f6a99545',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=2dcd4f1e3115f38cefa43e3efbe9b801c27e642e',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=879f7080d7e141f415c79eaa3a8ac4a3dad0348b',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=959c59c7a0164117e7f8366466a32bb1f8d77ff1',
-                'https://linux.oracle.com/cve/CVE-2023-0464.html',
-                'https://linux.oracle.com/errata/ELSA-2023-3722.html',
-                'https://lists.debian.org/debian-lts-announce/2023/06/msg00011.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-0464',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://security.netapp.com/advisory/ntap-20230406-0006/',
-                'https://security.netapp.com/advisory/ntap-20240621-0006/',
-                'https://ubuntu.com/security/notices/USN-6039-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.couchbase.com/alerts/',
-                'https://www.cve.org/CVERecord?id=CVE-2023-0464',
-                'https://www.debian.org/security/2023/dsa-5417',
-                'https://www.openssl.org/news/secadv/20230322.txt'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: Denial of service by excessive resource usage in verifying X509 policy constraints'
-            },
-            {
-              'cve':  'CVE-2022-2097',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N'
-                },
-                'nvd': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N'
-                },
-                'redhat': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-327'
-              ],
-              'description':   "AES OCB mode for 32-bit x86 platforms using the AES-NI assembly optimised implementation will not encrypt the entirety of the data under some circumstances. This could reveal sixteen bytes of data that was preexisting in the memory that wasn't written. In the special case of \"in place\" encryption, sixteen bytes of the plaintext would be revealed. Since OpenSSL does not support OCB based cipher suites for TLS and DTLS, they are both unaffected. Fixed in OpenSSL 3.0.5 (Affected 3.0.0-3.0.4). Fixed in OpenSSL 1.1.1q (Affected 1.1.1-1.1.1p).",
-              'diffID':        'sha256:0031821638929a505453c79634f2e750384303c5b605e744d56379fa34bd8bda',
-              'fixedVersions': [
-                '1.1.1q-r0'
-              ],
-              'installedVersion': '1.1.1n-r0',
-              'packageName':      'libssl1.1',
-              'purl':             'pkg:apk/alpine/libssl1.1@1.1.1n-r0?arch=x86&distro=3.15.4',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2022:6224',
-                'https://access.redhat.com/security/cve/CVE-2022-2097',
-                'https://bugzilla.redhat.com/2081494',
-                'https://bugzilla.redhat.com/2087911',
-                'https://bugzilla.redhat.com/2087913',
-                'https://bugzilla.redhat.com/2097310',
-                'https://bugzilla.redhat.com/2104905',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2081494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2097310',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2100554',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2104905',
-                'https://cert-portal.siemens.com/productcert/pdf/ssa-332410.pdf',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-1292',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-2068',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-2097',
-                'https://errata.almalinux.org/9/ALSA-2022-6224.html',
-                'https://errata.rockylinux.org/RLSA-2022:5818',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=919925673d6c9cfed3c1085497f5dfbbed5fc431',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=a98f339ddd7e8f487d6e0088d4a9a42324885a93',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=919925673d6c9cfed3c1085497f5dfbbed5fc431',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=a98f339ddd7e8f487d6e0088d4a9a42324885a93',
-                'https://github.com/alexcrichton/openssl-src-rs',
-                'https://linux.oracle.com/cve/CVE-2022-2097.html',
-                'https://linux.oracle.com/errata/ELSA-2022-9955.html',
-                'https://lists.debian.org/debian-lts-announce/2023/02/msg00019.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/R6CK57NBQFTPUMXAPJURCGXUYT76NQAK',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/R6CK57NBQFTPUMXAPJURCGXUYT76NQAK/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/V6567JERRHHJW2GNGJGKDRNHR7SNPZK7',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/V6567JERRHHJW2GNGJGKDRNHR7SNPZK7/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VCMNWKERPBKOEBNL7CLTTX3ZZCZLH7XA',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VCMNWKERPBKOEBNL7CLTTX3ZZCZLH7XA/',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/R6CK57NBQFTPUMXAPJURCGXUYT76NQAK',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/R6CK57NBQFTPUMXAPJURCGXUYT76NQAK/',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/V6567JERRHHJW2GNGJGKDRNHR7SNPZK7',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/V6567JERRHHJW2GNGJGKDRNHR7SNPZK7/',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/VCMNWKERPBKOEBNL7CLTTX3ZZCZLH7XA',
-                'https://nvd.nist.gov/vuln/detail/CVE-2022-2097',
-                'https://rustsec.org/advisories/RUSTSEC-2022-0032.html',
-                'https://security.gentoo.org/glsa/202210-02',
-                'https://security.netapp.com/advisory/ntap-20220715-0011',
-                'https://security.netapp.com/advisory/ntap-20220715-0011/',
-                'https://security.netapp.com/advisory/ntap-20230420-0008',
-                'https://security.netapp.com/advisory/ntap-20230420-0008/',
-                'https://security.netapp.com/advisory/ntap-20240621-0006',
-                'https://security.netapp.com/advisory/ntap-20240621-0006/',
-                'https://ubuntu.com/security/notices/USN-5502-1',
-                'https://ubuntu.com/security/notices/USN-6457-1',
-                'https://www.cve.org/CVERecord?id=CVE-2022-2097',
-                'https://www.debian.org/security/2023/dsa-5343',
-                'https://www.openssl.org/news/secadv/20220705.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: AES OCB fails to encrypt some bytes'
-            },
-            {
-              'cve':  'CVE-2022-4304',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N'
-                },
-                'nvd': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N'
-                },
-                'redhat': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-203'
-              ],
-              'description':   'A timing based side channel exists in the OpenSSL RSA Decryption implementation\nwhich could be sufficient to recover a plaintext across a network in a\nBleichenbacher style attack. To achieve a successful decryption an attacker\nwould have to be able to send a very large number of trial messages for\ndecryption. The vulnerability affects all RSA padding modes: PKCS#1 v1.5,\nRSA-OEAP and RSASVE.\n\nFor example, in a TLS connection, RSA is commonly used by a client to send an\nencrypted pre-master secret to the server. An attacker that had observed a\ngenuine connection between a client and a server could use this flaw to send\ntrial messages to the server and record the time taken to process them. After a\nsufficiently large number of messages the attacker could recover the pre-master\nsecret used for the original connection and thus be able to decrypt the\napplication data sent over that connection.',
-              'diffID':        'sha256:0031821638929a505453c79634f2e750384303c5b605e744d56379fa34bd8bda',
-              'fixedVersions': [
-                '1.1.1t-r0'
-              ],
-              'installedVersion': '1.1.1n-r0',
-              'packageName':      'libssl1.1',
-              'purl':             'pkg:apk/alpine/libssl1.1@1.1.1n-r0?arch=x86&distro=3.15.4',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2023:2165',
-                'https://access.redhat.com/security/cve/CVE-2022-4304',
-                'https://bugzilla.redhat.com/1960321',
-                'https://bugzilla.redhat.com/2164440',
-                'https://bugzilla.redhat.com/2164487',
-                'https://bugzilla.redhat.com/2164492',
-                'https://bugzilla.redhat.com/2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144000',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144003',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144006',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144008',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144010',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144012',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144015',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144017',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144019',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2145170',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2158412',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164440',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164487',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164488',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164492',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164497',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164499',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164500',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4203',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4304',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4450',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0215',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0216',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0217',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0286',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0401',
-                'https://errata.almalinux.org/9/ALSA-2023-2165.html',
-                'https://errata.rockylinux.org/RLSA-2023:0946',
-                'https://linux.oracle.com/cve/CVE-2022-4304.html',
-                'https://linux.oracle.com/errata/ELSA-2023-32791.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2022-4304',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0003',
-                'https://rustsec.org/advisories/RUSTSEC-2023-0007.html',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://ubuntu.com/security/notices/USN-5844-1',
-                'https://ubuntu.com/security/notices/USN-6564-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2022-4304',
-                'https://www.openssl.org/news/secadv/20230207.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: timing attack in RSA Decryption implementation'
-            },
-            {
-              'cve':  'CVE-2023-0465',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N'
-                },
-                'redhat': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-295'
-              ],
-              'description':   "Applications that use a non-default option when verifying certificates may be\nvulnerable to an attack from a malicious CA to circumvent certain checks.\n\nInvalid certificate policies in leaf certificates are silently ignored by\nOpenSSL and other certificate policy checks are skipped for that certificate.\nA malicious CA could use this to deliberately assert invalid certificate policies\nin order to circumvent policy checking on the certificate altogether.\n\nPolicy processing is disabled by default but can be enabled by passing\nthe `-policy' argument to the command line utilities or by calling the\n`X509_VERIFY_PARAM_set1_policies()' function.",
-              'diffID':        'sha256:0031821638929a505453c79634f2e750384303c5b605e744d56379fa34bd8bda',
-              'fixedVersions': [
-                '1.1.1t-r2'
-              ],
-              'installedVersion': '1.1.1n-r0',
-              'packageName':      'libssl1.1',
-              'purl':             'pkg:apk/alpine/libssl1.1@1.1.1n-r0?arch=x86&distro=3.15.4',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2023:3722',
-                'https://access.redhat.com/security/cve/CVE-2023-0465',
-                'https://bugzilla.redhat.com/2181082',
-                'https://bugzilla.redhat.com/2182561',
-                'https://bugzilla.redhat.com/2182565',
-                'https://bugzilla.redhat.com/2188461',
-                'https://bugzilla.redhat.com/2207947',
-                'https://errata.almalinux.org/9/ALSA-2023-3722.html',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=10325176f3d3e98c6e2b3bf5ab1e3b334de6947a',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=1dd43e0709fece299b15208f36cc7c76209ba0bb',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=b013765abfa80036dc779dd0e50602c57bb3bf95',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=facfb1ab745646e97a1920977ae4a9965ea61d5c',
-                'https://linux.oracle.com/cve/CVE-2023-0465.html',
-                'https://linux.oracle.com/errata/ELSA-2023-3722.html',
-                'https://lists.debian.org/debian-lts-announce/2023/06/msg00011.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-0465',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://security.netapp.com/advisory/ntap-20230414-0001/',
-                'https://ubuntu.com/security/notices/USN-6039-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-0465',
-                'https://www.debian.org/security/2023/dsa-5417',
-                'https://www.openssl.org/news/secadv/20230328.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: Invalid certificate policies in leaf certificates are silently ignored'
-            },
-            {
-              'cve':  'CVE-2023-2650',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '6.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-770'
-              ],
-              'description':   "Issue summary: Processing some specially crafted ASN.1 object identifiers or\ndata containing them may be very slow.\n\nImpact summary: Applications that use OBJ_obj2txt() directly, or use any of\nthe OpenSSL subsystems OCSP, PKCS7/SMIME, CMS, CMP/CRMF or TS with no message\nsize limit may experience notable to very long delays when processing those\nmessages, which may lead to a Denial of Service.\n\nAn OBJECT IDENTIFIER is composed of a series of numbers - sub-identifiers -\nmost of which have no size limit.  OBJ_obj2txt() may be used to translate\nan ASN.1 OBJECT IDENTIFIER given in DER encoding form (using the OpenSSL\ntype ASN1_OBJECT) to its canonical numeric text form, which are the\nsub-identifiers of the OBJECT IDENTIFIER in decimal form, separated by\nperiods.\n\nWhen one of the sub-identifiers in the OBJECT IDENTIFIER is very large\n(these are sizes that are seen as absurdly large, taking up tens or hundreds\nof KiBs), the translation to a decimal number in text may take a very long\ntime.  The time complexity is O(n^2) with 'n' being the size of the\nsub-identifiers in bytes (*).\n\nWith OpenSSL 3.0, support to fetch cryptographic algorithms using names /\nidentifiers in string form was introduced.  This includes using OBJECT\nIDENTIFIERs in canonical numeric text form as identifiers for fetching\nalgorithms.\n\nSuch OBJECT IDENTIFIERs may be received through the ASN.1 structure\nAlgorithmIdentifier, which is commonly used in multiple protocols to specify\nwhat cryptographic algorithm should be used to sign or verify, encrypt or\ndecrypt, or digest passed data.\n\nApplications that call OBJ_obj2txt() directly with untrusted data are\naffected, with any version of OpenSSL.  If the use is for the mere purpose\nof display, the severity is considered low.\n\nIn OpenSSL 3.0 and newer, this affects the subsystems OCSP, PKCS7/SMIME,\nCMS, CMP/CRMF or TS.  It also impacts anything that processes X.509\ncertificates, including simple things like verifying its signature.\n\nThe impact on TLS is relatively low, because all versions of OpenSSL have a\n100KiB limit on the peer's certificate chain.  Additionally, this only\nimpacts clients, or servers that have explicitly enabled client\nauthentication.\n\nIn OpenSSL 1.1.1 and 1.0.2, this only affects displaying diverse objects,\nsuch as X.509 certificates.  This is assumed to not happen in such a way\nthat it would cause a Denial of Service, so these versions are considered\nnot affected by this issue in such a way that it would be cause for concern,\nand the severity is therefore considered low.",
-              'diffID':        'sha256:0031821638929a505453c79634f2e750384303c5b605e744d56379fa34bd8bda',
-              'fixedVersions': [
-                '1.1.1u-r0'
-              ],
-              'installedVersion': '1.1.1n-r0',
-              'packageName':      'libssl1.1',
-              'purl':             'pkg:apk/alpine/libssl1.1@1.1.1n-r0?arch=x86&distro=3.15.4',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2023/05/30/1',
-                'https://access.redhat.com/errata/RHSA-2023:6330',
-                'https://access.redhat.com/security/cve/CVE-2023-2650',
-                'https://bugzilla.redhat.com/1858038',
-                'https://bugzilla.redhat.com/2207947',
-                'https://errata.almalinux.org/9/ALSA-2023-6330.html',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=423a2bc737a908ad0c77bda470b2b59dc879936b',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=853c5e56ee0b8650c73140816bb8b91d6163422c',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=9e209944b35cf82368071f160a744b6178f9b098',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=db779b0e10b047f2585615e0b8f2acdf21f8544a',
-                'https://linux.oracle.com/cve/CVE-2023-2650.html',
-                'https://linux.oracle.com/errata/ELSA-2023-6330.html',
-                'https://lists.debian.org/debian-lts-announce/2023/06/msg00011.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-2650',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0009',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://security.netapp.com/advisory/ntap-20230703-0001/',
-                'https://security.netapp.com/advisory/ntap-20231027-0009/',
-                'https://ubuntu.com/security/notices/USN-6119-1',
-                'https://ubuntu.com/security/notices/USN-6188-1',
-                'https://ubuntu.com/security/notices/USN-6672-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-2650',
-                'https://www.debian.org/security/2023/dsa-5417',
-                'https://www.openssl.org/news/secadv/20230530.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: Possible DoS translating ASN.1 object identifiers'
-            },
-            {
-              'cve':  'CVE-2023-3446',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L'
-                },
-                'redhat': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L'
-                }
-              },
-              'cwes': [
-                'CWE-606',
-                'CWE-1333'
-              ],
-              'description':   "Issue summary: Checking excessively long DH keys or parameters may be very slow.\n\nImpact summary: Applications that use the functions DH_check(), DH_check_ex()\nor EVP_PKEY_param_check() to check a DH key or DH parameters may experience long\ndelays. Where the key or parameters that are being checked have been obtained\nfrom an untrusted source this may lead to a Denial of Service.\n\nThe function DH_check() performs various checks on DH parameters. One of those\nchecks confirms that the modulus ('p' parameter) is not too large. Trying to use\na very large modulus is slow and OpenSSL will not normally use a modulus which\nis over 10,000 bits in length.\n\nHowever the DH_check() function checks numerous aspects of the key or parameters\nthat have been supplied. Some of those checks use the supplied modulus value\neven if it has already been found to be too large.\n\nAn application that calls DH_check() and supplies a key or parameters obtained\nfrom an untrusted source could be vulernable to a Denial of Service attack.\n\nThe function DH_check() is itself called by a number of other OpenSSL functions.\nAn application calling any of those other functions may similarly be affected.\nThe other functions affected by this are DH_check_ex() and\nEVP_PKEY_param_check().\n\nAlso vulnerable are the OpenSSL dhparam and pkeyparam command line applications\nwhen using the '-check' option.\n\nThe OpenSSL SSL/TLS implementation is not affected by this issue.\nThe OpenSSL 3.0 and 3.1 FIPS providers are not affected by this issue.",
-              'diffID':        'sha256:0031821638929a505453c79634f2e750384303c5b605e744d56379fa34bd8bda',
-              'fixedVersions': [
-                '1.1.1u-r2'
-              ],
-              'installedVersion': '1.1.1n-r0',
-              'packageName':      'libssl1.1',
-              'purl':             'pkg:apk/alpine/libssl1.1@1.1.1n-r0?arch=x86&distro=3.15.4',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2023/07/19/4',
-                'http://www.openwall.com/lists/oss-security/2023/07/19/5',
-                'http://www.openwall.com/lists/oss-security/2023/07/19/6',
-                'http://www.openwall.com/lists/oss-security/2023/07/31/1',
-                'http://www.openwall.com/lists/oss-security/2024/05/16/1',
-                'https://access.redhat.com/errata/RHSA-2024:2447',
-                'https://access.redhat.com/security/cve/CVE-2023-3446',
-                'https://bugzilla.redhat.com/2223016',
-                'https://bugzilla.redhat.com/2224962',
-                'https://bugzilla.redhat.com/2227852',
-                'https://bugzilla.redhat.com/2248616',
-                'https://bugzilla.redhat.com/2257571',
-                'https://bugzilla.redhat.com/2258502',
-                'https://bugzilla.redhat.com/2259944',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2224962',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2257582',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2257583',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2258677',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2258688',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2258691',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2258694',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2258700',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-36763',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-36764',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3446',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45229',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45231',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45232',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45233',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45235',
-                'https://errata.almalinux.org/9/ALSA-2024-2447.html',
-                'https://errata.rockylinux.org/RLSA-2024:2264',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=1fa20cf2f506113c761777127a38bce5068740eb',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=8780a896543a654e757db1b9396383f9d8095528',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=9a0a4d3c1e7138915563c0df4fe6a3f9377b839c',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=fc9867c1e03c22ebf56943be205202e576aabf23',
-                'https://linux.oracle.com/cve/CVE-2023-3446.html',
-                'https://linux.oracle.com/errata/ELSA-2024-2447.html',
-                'https://lists.debian.org/debian-lts-announce/2023/08/msg00019.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-3446',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://security.netapp.com/advisory/ntap-20230803-0011/',
-                'https://ubuntu.com/security/notices/USN-6435-1',
-                'https://ubuntu.com/security/notices/USN-6435-2',
-                'https://ubuntu.com/security/notices/USN-6450-1',
-                'https://ubuntu.com/security/notices/USN-6709-1',
-                'https://ubuntu.com/security/notices/USN-7018-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-3446',
-                'https://www.openssl.org/news/secadv/20230719.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: Excessive time spent checking DH keys and parameters'
-            },
-            {
-              'cve':  'CVE-2023-3817',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L'
-                },
-                'redhat': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L'
-                }
-              },
-              'cwes': [
-                'CWE-606',
-                'CWE-834'
-              ],
-              'description':   'Issue summary: Checking excessively long DH keys or parameters may be very slow.\n\nImpact summary: Applications that use the functions DH_check(), DH_check_ex()\nor EVP_PKEY_param_check() to check a DH key or DH parameters may experience long\ndelays. Where the key or parameters that are being checked have been obtained\nfrom an untrusted source this may lead to a Denial of Service.\n\nThe function DH_check() performs various checks on DH parameters. After fixing\nCVE-2023-3446 it was discovered that a large q parameter value can also trigger\nan overly long computation during some of these checks. A correct q value,\nif present, cannot be larger than the modulus p parameter, thus it is\nunnecessary to perform these checks if q is larger than p.\n\nAn application that calls DH_check() and supplies a key or parameters obtained\nfrom an untrusted source could be vulnerable to a Denial of Service attack.\n\nThe function DH_check() is itself called by a number of other OpenSSL functions.\nAn application calling any of those other functions may similarly be affected.\nThe other functions affected by this are DH_check_ex() and\nEVP_PKEY_param_check().\n\nAlso vulnerable are the OpenSSL dhparam and pkeyparam command line applications\nwhen using the "-check" option.\n\nThe OpenSSL SSL/TLS implementation is not affected by this issue.\n\nThe OpenSSL 3.0 and 3.1 FIPS providers are not affected by this issue.',
-              'diffID':        'sha256:0031821638929a505453c79634f2e750384303c5b605e744d56379fa34bd8bda',
-              'fixedVersions': [
-                '1.1.1v-r0'
-              ],
-              'installedVersion': '1.1.1n-r0',
-              'packageName':      'libssl1.1',
-              'purl':             'pkg:apk/alpine/libssl1.1@1.1.1n-r0?arch=x86&distro=3.15.4',
-              'references':       [
-                'http://seclists.org/fulldisclosure/2023/Jul/43',
-                'http://www.openwall.com/lists/oss-security/2023/07/31/1',
-                'http://www.openwall.com/lists/oss-security/2023/09/22/11',
-                'http://www.openwall.com/lists/oss-security/2023/09/22/9',
-                'http://www.openwall.com/lists/oss-security/2023/11/06/2',
-                'https://access.redhat.com/errata/RHSA-2024:2447',
-                'https://access.redhat.com/security/cve/CVE-2023-3817',
-                'https://bugzilla.redhat.com/2223016',
-                'https://bugzilla.redhat.com/2224962',
-                'https://bugzilla.redhat.com/2227852',
-                'https://bugzilla.redhat.com/2248616',
-                'https://bugzilla.redhat.com/2257571',
-                'https://bugzilla.redhat.com/2258502',
-                'https://bugzilla.redhat.com/2259944',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2224962',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2227852',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2248616',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2270358',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3446',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3817',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-5678',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-2408',
-                'https://errata.almalinux.org/9/ALSA-2024-2447.html',
-                'https://errata.rockylinux.org/RLSA-2023:7877',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=6a1eb62c29db6cb5eec707f9338aee00f44e26f5',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=869ad69aadd985c7b8ca6f4e5dd0eb274c9f3644',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=9002fd07327a91f35ba6c1307e71fa6fd4409b7f',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=91ddeba0f2269b017dc06c46c993a788974b1aa5',
-                'https://linux.oracle.com/cve/CVE-2023-3817.html',
-                'https://linux.oracle.com/errata/ELSA-2024-2447.html',
-                'https://lists.debian.org/debian-lts-announce/2023/08/msg00019.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-3817',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://security.netapp.com/advisory/ntap-20230818-0014/',
-                'https://security.netapp.com/advisory/ntap-20231027-0008/',
-                'https://security.netapp.com/advisory/ntap-20240621-0006/',
-                'https://ubuntu.com/security/notices/USN-6435-1',
-                'https://ubuntu.com/security/notices/USN-6435-2',
-                'https://ubuntu.com/security/notices/USN-6450-1',
-                'https://ubuntu.com/security/notices/USN-6709-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-3817',
-                'https://www.openssl.org/news/secadv/20230731.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'OpenSSL: Excessive time spent checking DH q parameter value'
-            },
-            {
-              'cve':  'CVE-2023-5678',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L'
-                },
-                'redhat': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L'
-                }
-              },
-              'cwes': [
-                'CWE-606',
-                'CWE-754'
-              ],
-              'description':   "Issue summary: Generating excessively long X9.42 DH keys or checking\nexcessively long X9.42 DH keys or parameters may be very slow.\n\nImpact summary: Applications that use the functions DH_generate_key() to\ngenerate an X9.42 DH key may experience long delays.  Likewise, applications\nthat use DH_check_pub_key(), DH_check_pub_key_ex() or EVP_PKEY_public_check()\nto check an X9.42 DH key or X9.42 DH parameters may experience long delays.\nWhere the key or parameters that are being checked have been obtained from\nan untrusted source this may lead to a Denial of Service.\n\nWhile DH_check() performs all the necessary checks (as of CVE-2023-3817),\nDH_check_pub_key() doesn't make any of these checks, and is therefore\nvulnerable for excessively large P and Q parameters.\n\nLikewise, while DH_generate_key() performs a check for an excessively large\nP, it doesn't check for an excessively large Q.\n\nAn application that calls DH_generate_key() or DH_check_pub_key() and\nsupplies a key or parameters obtained from an untrusted source could be\nvulnerable to a Denial of Service attack.\n\nDH_generate_key() and DH_check_pub_key() are also called by a number of\nother OpenSSL functions.  An application calling any of those other\nfunctions may similarly be affected.  The other functions affected by this\nare DH_check_pub_key_ex(), EVP_PKEY_public_check(), and EVP_PKEY_generate().\n\nAlso vulnerable are the OpenSSL pkey command line application when using the\n\"-pubcheck\" option, as well as the OpenSSL genpkey command line application.\n\nThe OpenSSL SSL/TLS implementation is not affected by this issue.\n\nThe OpenSSL 3.0 and 3.1 FIPS providers are not affected by this issue.",
-              'diffID':        'sha256:0031821638929a505453c79634f2e750384303c5b605e744d56379fa34bd8bda',
-              'fixedVersions': [
-                '1.1.1w-r1'
-              ],
-              'installedVersion': '1.1.1n-r0',
-              'packageName':      'libssl1.1',
-              'purl':             'pkg:apk/alpine/libssl1.1@1.1.1n-r0?arch=x86&distro=3.15.4',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2024/03/11/1',
-                'https://access.redhat.com/errata/RHSA-2024:2447',
-                'https://access.redhat.com/security/cve/CVE-2023-5678',
-                'https://bugzilla.redhat.com/2223016',
-                'https://bugzilla.redhat.com/2224962',
-                'https://bugzilla.redhat.com/2227852',
-                'https://bugzilla.redhat.com/2248616',
-                'https://bugzilla.redhat.com/2257571',
-                'https://bugzilla.redhat.com/2258502',
-                'https://bugzilla.redhat.com/2259944',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2224962',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2227852',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2248616',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2270358',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3446',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3817',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-5678',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-2408',
-                'https://errata.almalinux.org/9/ALSA-2024-2447.html',
-                'https://errata.rockylinux.org/RLSA-2023:7877',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=34efaef6c103d636ab507a0cc34dca4d3aecc055',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=710fee740904b6290fef0dd5536fbcedbc38ff0c',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=db925ae2e65d0d925adef429afc37f75bd1c2017',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=ddeb4b6c6d527e54ce9a99cba785c0f7776e54b6',
-                'https://linux.oracle.com/cve/CVE-2023-5678.html',
-                'https://linux.oracle.com/errata/ELSA-2024-2447.html',
-                'https://lists.debian.org/debian-lts-announce/2024/10/msg00033.html',
-                'https://lists.debian.org/debian-lts-announce/2024/11/msg00000.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-5678',
-                'https://security.netapp.com/advisory/ntap-20231130-0010/',
-                'https://ubuntu.com/security/notices/USN-6622-1',
-                'https://ubuntu.com/security/notices/USN-6632-1',
-                'https://ubuntu.com/security/notices/USN-6709-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-5678',
-                'https://www.openssl.org/news/secadv/20231106.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: Generating excessively long X9.42 DH keys or checking excessively long X9.42 DH keys or parameters may be very slow'
-            },
-            {
-              'cve':  'CVE-2022-37434',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '9.8',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-787',
-                'CWE-120'
-              ],
-              'description':   'zlib through 1.2.12 has a heap-based buffer over-read or buffer overflow in inflate in inflate.c via a large gzip header extra field. NOTE: only applications that call inflateGetHeader are affected. Some common applications bundle the affected zlib source code but may be unable to call inflateGetHeader (e.g., see the nodejs/node reference).',
-              'diffID':        'sha256:0031821638929a505453c79634f2e750384303c5b605e744d56379fa34bd8bda',
-              'fixedVersions': [
-                '1.2.12-r2'
-              ],
-              'installedVersion': '1.2.12-r0',
-              'packageName':      'zlib',
-              'purl':             'pkg:apk/alpine/zlib@1.2.12-r0?arch=x86&distro=3.15.4',
-              'references':       [
-                'http://seclists.org/fulldisclosure/2022/Oct/37',
-                'http://seclists.org/fulldisclosure/2022/Oct/38',
-                'http://seclists.org/fulldisclosure/2022/Oct/41',
-                'http://seclists.org/fulldisclosure/2022/Oct/42',
-                'http://www.openwall.com/lists/oss-security/2022/08/05/2',
-                'http://www.openwall.com/lists/oss-security/2022/08/09/1',
-                'https://access.redhat.com/errata/RHSA-2022:8291',
-                'https://access.redhat.com/security/cve/CVE-2022-37434',
-                'https://bugzilla.redhat.com/2116639',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2053198',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2077431',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2081296',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2116639',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-37434',
-                'https://errata.almalinux.org/9/ALSA-2022-8291.html',
-                'https://errata.rockylinux.org/RLSA-2022:8291',
-                'https://github.com/curl/curl/issues/9271',
-                'https://github.com/ivd38/zlib_overflow',
-                'https://github.com/madler/zlib/blob/21767c654d31d2dccdde4330529775c6c5fd5389/zlib.h#L1062-L1063',
-                'https://github.com/madler/zlib/commit/1eb7682f845ac9e9bf9ae35bbfb3bad5dacbd91d',
-                'https://github.com/madler/zlib/commit/eff308af425b67093bab25f80f1ae950166bece1',
-                'https://github.com/nodejs/node/blob/75b68c6e4db515f76df73af476eccf382bbcb00a/deps/zlib/inflate.c#L762-L764',
-                'https://linux.oracle.com/cve/CVE-2022-37434.html',
-                'https://linux.oracle.com/errata/ELSA-2023-1095.html',
-                'https://lists.debian.org/debian-lts-announce/2022/09/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JWN4VE3JQR4O2SOUS5TXNLANRPMHWV4I/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NMBOJ77A7T7PQCARMDUK75TE6LLESZ3O/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PAVPQNCG3XRLCLNSQRM3KAN5ZFMVXVTY/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/X5U7OTKZSHY2I3ZFJSR2SHFHW72RKGDK/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YRQAI7H4M4RQZ2IWZUEEXECBE5D56BH2/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2022-37434',
-                'https://security.netapp.com/advisory/ntap-20220901-0005/',
-                'https://security.netapp.com/advisory/ntap-20230427-0007/',
-                'https://support.apple.com/kb/HT213488',
-                'https://support.apple.com/kb/HT213489',
-                'https://support.apple.com/kb/HT213490',
-                'https://support.apple.com/kb/HT213491',
-                'https://support.apple.com/kb/HT213493',
-                'https://support.apple.com/kb/HT213494',
-                'https://ubuntu.com/security/notices/USN-5570-1',
-                'https://ubuntu.com/security/notices/USN-5570-2',
-                'https://ubuntu.com/security/notices/USN-5573-1',
-                'https://ubuntu.com/security/notices/USN-6736-1',
-                'https://ubuntu.com/security/notices/USN-6736-2',
-                'https://www.cve.org/CVERecord?id=CVE-2022-37434',
-                'https://www.debian.org/security/2022/dsa-5218'
-              ],
-              'severity':   'CRITICAL',
-              'suppressed': false,
-              'title':      'zlib: heap-based buffer over-read and overflow in inflate() in inflate.c via a large gzip header extra field'
-            }
-          ]
-        }
-      ],
-      'summary': {
-        'critical':   1,
-        'high':       8,
-        'low':        0,
-        'medium':     14,
-        'suppressed': 0,
-        'unknown':    0
-      }
-    }
-  },
-  {
-    'id':    'default/b46389fe27f312ee8741985788f7fe12e59ca414e4a6e37941547153c74b82fa',
-    'type':  'storage.sbomscanner.kubewarden.io.vulnerabilityreport',
-    'links': {
-      'patch':  'https://localhost:8005/v1/storage.sbomscanner.kubewarden.io.vulnerabilityreports/default/b46389fe27f312ee8741985788f7fe12e59ca414e4a6e37941547153c74b82fa',
-      'remove': 'https://localhost:8005/v1/storage.sbomscanner.kubewarden.io.vulnerabilityreports/default/b46389fe27f312ee8741985788f7fe12e59ca414e4a6e37941547153c74b82fa',
-      'self':   'https://localhost:8005/v1/storage.sbomscanner.kubewarden.io.vulnerabilityreports/default/b46389fe27f312ee8741985788f7fe12e59ca414e4a6e37941547153c74b82fa',
-      'update': 'https://localhost:8005/v1/storage.sbomscanner.kubewarden.io.vulnerabilityreports/default/b46389fe27f312ee8741985788f7fe12e59ca414e4a6e37941547153c74b82fa',
-      'view':   'https://localhost:8005/apis/storage.sbomscanner.kubewarden.io/v1alpha1/namespaces/default/vulnerabilityreports/b46389fe27f312ee8741985788f7fe12e59ca414e4a6e37941547153c74b82fa'
-    },
-    'apiVersion':    'storage.sbomscanner.kubewarden.io/v1alpha1',
-    'imageMetadata': {
-      'digest':      'sha256:dc18010aabc13ce121123c7bb0f4dcb6879ce22b4f7c65669a2c634b5ceecafb',
-      'platform':    'linux/arm/v7',
-      'registry':    'lsong-demo1',
-      'registryURI': 'registry-1.docker.io',
-      'repository':  'library/alpine',
-      'tag':         '3.15.4'
-    },
-    'kind':     'VulnerabilityReport',
-    'metadata': {
-      'creationTimestamp': '2026-01-14T18:51:19Z',
-      'fields':            [
-        'b46389fe27f312ee8741985788f7fe12e59ca414e4a6e37941547153c74b82fa',
-        'registry-1.docker.io/library/alpine:3.15.4',
-        'linux/arm/v7',
-        '23 (0 suppressed)'
-      ],
-      'labels': {
-        'app.kubernetes.io/managed-by':          'sbomscanner',
-        'app.kubernetes.io/part-of':             'sbomscanner',
-        'sbomscanner.kubewarden.io/scanjob-uid': '445c600a-c4b6-40b3-bd71-f2d2140a37d5'
-      },
-      'name':            'b46389fe27f312ee8741985788f7fe12e59ca414e4a6e37941547153c74b82fa',
-      'namespace':       'default',
-      'ownerReferences': [
-        {
-          'apiVersion':         'storage.sbomscanner.kubewarden.io/v1alpha1',
-          'blockOwnerDeletion': true,
-          'controller':         true,
-          'kind':               'SBOM',
-          'name':               'b46389fe27f312ee8741985788f7fe12e59ca414e4a6e37941547153c74b82fa',
-          'uid':                'b62602b0-18c4-471c-8585-83eeb26463ec'
-        }
-      ],
-      'relationships': [
-        {
-          'fromId':   'default/b46389fe27f312ee8741985788f7fe12e59ca414e4a6e37941547153c74b82fa',
-          'fromType': 'storage.sbomscanner.kubewarden.io.sbom',
-          'rel':      'owner',
-          'state':    'active',
-          'message':  'Resource is current'
-        }
-      ],
-      'resourceVersion': '1',
-      'state':           {
-        'error':         false,
-        'message':       'Resource is current',
-        'name':          'active',
-        'transitioning': false
-      },
-      'uid': 'b5f9973f-3500-4d1f-9503-1d88c9b612e6'
-    },
-    'report': {
-      'results': [
-        {
-          'class':           'os-pkgs',
-          'target':          '/var/run/worker/trivy.sbom.3419473108.json (alpine 3.15.4)',
-          'type':            'alpine',
-          'vulnerabilities': [
-            {
-              'cve':  'CVE-2022-4450',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'nvd': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-415'
-              ],
-              'description':   'The function PEM_read_bio_ex() reads a PEM file from a BIO and parses and\ndecodes the "name" (e.g. "CERTIFICATE"), any header data and the payload data.\nIf the function succeeds then the "name_out", "header" and "data" arguments are\npopulated with pointers to buffers containing the relevant decoded data. The\ncaller is responsible for freeing those buffers. It is possible to construct a\nPEM file that results in 0 bytes of payload data. In this case PEM_read_bio_ex()\nwill return a failure code but will populate the header argument with a pointer\nto a buffer that has already been freed. If the caller also frees this buffer\nthen a double free will occur. This will most likely lead to a crash. This\ncould be exploited by an attacker who has the ability to supply malicious PEM\nfiles for parsing to achieve a denial of service attack.\n\nThe functions PEM_read_bio() and PEM_read() are simple wrappers around\nPEM_read_bio_ex() and therefore these functions are also directly affected.\n\nThese functions are also called indirectly by a number of other OpenSSL\nfunctions including PEM_X509_INFO_read_bio_ex() and\nSSL_CTX_use_serverinfo_file() which are also vulnerable. Some OpenSSL internal\nuses of these functions are not vulnerable because the caller does not free the\nheader argument if PEM_read_bio_ex() returns a failure code. These locations\ninclude the PEM_read_bio_TYPE() functions as well as the decoders introduced in\nOpenSSL 3.0.\n\nThe OpenSSL asn1parse command line application is also impacted by this issue.',
-              'diffID':        'sha256:f3cad9f8ac1ee2f04e09db4d66d14c7806b881917a632bed9ae1117c6b10e1f9',
-              'fixedVersions': [
-                '1.1.1t-r0'
-              ],
-              'installedVersion': '1.1.1n-r0',
-              'packageName':      'libcrypto1.1',
-              'purl':             'pkg:apk/alpine/libcrypto1.1@1.1.1n-r0?arch=armv7&distro=3.15.4',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2023:2165',
-                'https://access.redhat.com/security/cve/CVE-2022-4450',
-                'https://bugzilla.redhat.com/1960321',
-                'https://bugzilla.redhat.com/2164440',
-                'https://bugzilla.redhat.com/2164487',
-                'https://bugzilla.redhat.com/2164492',
-                'https://bugzilla.redhat.com/2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144000',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144003',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144006',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144008',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144010',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144012',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144015',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144017',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144019',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2145170',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2158412',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164440',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164487',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164488',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164492',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164497',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164499',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164500',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4203',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4304',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4450',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0215',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0216',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0217',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0286',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0401',
-                'https://errata.almalinux.org/9/ALSA-2023-2165.html',
-                'https://errata.rockylinux.org/RLSA-2023:0946',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=63bcf189be73a9cc1264059bed6f57974be74a83',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=bbcf509bd046b34cca19c766bbddc31683d0858b',
-                'https://linux.oracle.com/cve/CVE-2022-4450.html',
-                'https://linux.oracle.com/errata/ELSA-2023-32791.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2022-4450',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0003',
-                'https://rustsec.org/advisories/RUSTSEC-2023-0010.html',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://ubuntu.com/security/notices/USN-5844-1',
-                'https://ubuntu.com/security/notices/USN-6564-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2022-4450',
-                'https://www.openssl.org/news/secadv/20230207.txt'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: double free after calling PEM_read_bio_ex'
-            },
-            {
-              'cve':  'CVE-2023-0215',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'nvd': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   'The public API function BIO_new_NDEF is a helper function used for streaming\nASN.1 data via a BIO. It is primarily used internally to OpenSSL to support the\nSMIME, CMS and PKCS7 streaming capabilities, but may also be called directly by\nend user applications.\n\nThe function receives a BIO from the caller, prepends a new BIO_f_asn1 filter\nBIO onto the front of it to form a BIO chain, and then returns the new head of\nthe BIO chain to the caller. Under certain conditions, for example if a CMS\nrecipient public key is invalid, the new filter BIO is freed and the function\nreturns a NULL result indicating a failure. However, in this case, the BIO chain\nis not properly cleaned up and the BIO passed by the caller still retains\ninternal pointers to the previously freed filter BIO. If the caller then goes on\nto call BIO_pop() on the BIO then a use-after-free will occur. This will most\nlikely result in a crash.\n\n\n\nThis scenario occurs directly in the internal function B64_write_ASN1() which\nmay cause BIO_new_NDEF() to be called and will subsequently call BIO_pop() on\nthe BIO. This internal function is in turn called by the public API functions\nPEM_write_bio_ASN1_stream, PEM_write_bio_CMS_stream, PEM_write_bio_PKCS7_stream,\nSMIME_write_ASN1, SMIME_write_CMS and SMIME_write_PKCS7.\n\nOther public API functions that may be impacted by this include\ni2d_ASN1_bio_stream, BIO_new_CMS, BIO_new_PKCS7, i2d_CMS_bio_stream and\ni2d_PKCS7_bio_stream.\n\nThe OpenSSL cms and smime command line applications are similarly affected.',
-              'diffID':        'sha256:f3cad9f8ac1ee2f04e09db4d66d14c7806b881917a632bed9ae1117c6b10e1f9',
-              'fixedVersions': [
-                '1.1.1t-r0'
-              ],
-              'installedVersion': '1.1.1n-r0',
-              'packageName':      'libcrypto1.1',
-              'purl':             'pkg:apk/alpine/libcrypto1.1@1.1.1n-r0?arch=armv7&distro=3.15.4',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2023:2165',
-                'https://access.redhat.com/security/cve/CVE-2023-0215',
-                'https://bugzilla.redhat.com/1960321',
-                'https://bugzilla.redhat.com/2164440',
-                'https://bugzilla.redhat.com/2164487',
-                'https://bugzilla.redhat.com/2164492',
-                'https://bugzilla.redhat.com/2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144000',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144003',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144006',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144008',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144010',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144012',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144015',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144017',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144019',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2145170',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2158412',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164440',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164487',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164488',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164492',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164497',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164499',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164500',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4203',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4304',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4450',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0215',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0216',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0217',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0286',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0401',
-                'https://errata.almalinux.org/9/ALSA-2023-2165.html',
-                'https://errata.rockylinux.org/RLSA-2023:0946',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=8818064ce3c3c0f1b740a5aaba2a987e75bfbafd',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=9816136fe31d92ace4037d5da5257f763aeeb4eb',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=c3829dd8825c654652201e16f8a0a0c46ee3f344',
-                'https://linux.oracle.com/cve/CVE-2023-0215.html',
-                'https://linux.oracle.com/errata/ELSA-2023-32791.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-0215',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0003',
-                'https://rustsec.org/advisories/RUSTSEC-2023-0009.html',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://security.netapp.com/advisory/ntap-20230427-0007',
-                'https://security.netapp.com/advisory/ntap-20230427-0007/',
-                'https://security.netapp.com/advisory/ntap-20230427-0009',
-                'https://security.netapp.com/advisory/ntap-20230427-0009/',
-                'https://security.netapp.com/advisory/ntap-20240621-0006',
-                'https://security.netapp.com/advisory/ntap-20240621-0006/',
-                'https://ubuntu.com/security/notices/USN-5844-1',
-                'https://ubuntu.com/security/notices/USN-5845-1',
-                'https://ubuntu.com/security/notices/USN-5845-2',
-                'https://ubuntu.com/security/notices/USN-6564-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-0215',
-                'https://www.openssl.org/news/secadv/20230207.txt'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: use-after-free following BIO_new_NDEF'
-            },
-            {
-              'cve':  'CVE-2023-0286',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '7.4',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H'
-                },
-                'nvd': {
-                  'v3score':  '7.4',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.4',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-843'
-              ],
-              'description':   'There is a type confusion vulnerability relating to X.400 address processing\ninside an X.509 GeneralName. X.400 addresses were parsed as an ASN1_STRING but\nthe public structure definition for GENERAL_NAME incorrectly specified the type\nof the x400Address field as ASN1_TYPE. This field is subsequently interpreted by\nthe OpenSSL function GENERAL_NAME_cmp as an ASN1_TYPE rather than an\nASN1_STRING.\n\nWhen CRL checking is enabled (i.e. the application sets the\nX509_V_FLAG_CRL_CHECK flag), this vulnerability may allow an attacker to pass\narbitrary pointers to a memcmp call, enabling them to read memory contents or\nenact a denial of service. In most cases, the attack requires the attacker to\nprovide both the certificate chain and CRL, neither of which need to have a\nvalid signature. If the attacker only controls one of these inputs, the other\ninput must already contain an X.400 address as a CRL distribution point, which\nis uncommon. As such, this vulnerability is most likely to only affect\napplications which have implemented their own functionality for retrieving CRLs\nover a network.',
-              'diffID':        'sha256:f3cad9f8ac1ee2f04e09db4d66d14c7806b881917a632bed9ae1117c6b10e1f9',
-              'fixedVersions': [
-                '1.1.1t-r0'
-              ],
-              'installedVersion': '1.1.1n-r0',
-              'packageName':      'libcrypto1.1',
-              'purl':             'pkg:apk/alpine/libcrypto1.1@1.1.1n-r0?arch=armv7&distro=3.15.4',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2025:7937',
-                'https://access.redhat.com/security/cve/CVE-2023-0286',
-                'https://access.redhat.com/security/cve/cve-2023-0286',
-                'https://bugzilla.redhat.com/2164440',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144000',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144003',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144006',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144008',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144010',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144012',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144015',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144017',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144019',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2145170',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2158412',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164440',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164487',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164488',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164492',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164497',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164499',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164500',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4203',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4304',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4450',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0215',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0216',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0217',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0286',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0401',
-                'https://errata.almalinux.org/9/ALSA-2025-7937.html',
-                'https://errata.rockylinux.org/RLSA-2023:0946',
-                'https://ftp.openbsd.org/pub/OpenBSD/LibreSSL/libressl-3.6.2-relnotes.txt',
-                'https://ftp.openbsd.org/pub/OpenBSD/patches/7.2/common/018_x509.patch.sig',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=2c6c9d439b484e1ba9830d8454a34fa4f80fdfe9',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=2f7530077e0ef79d98718138716bc51ca0cad658',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=fd2af07dc083a350c959147097003a14a5e8ac4d',
-                'https://github.com/pyca/cryptography',
-                'https://github.com/pyca/cryptography/security/advisories/GHSA-x4qr-2fvf-3mr5',
-                'https://linux.oracle.com/cve/CVE-2023-0286.html',
-                'https://linux.oracle.com/errata/ELSA-2025-7937.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-0286',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0003',
-                'https://rustsec.org/advisories/RUSTSEC-2023-0006.html',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://ubuntu.com/security/notices/USN-5844-1',
-                'https://ubuntu.com/security/notices/USN-5845-1',
-                'https://ubuntu.com/security/notices/USN-5845-2',
-                'https://ubuntu.com/security/notices/USN-6564-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-0286',
-                'https://www.openssl.org/news/secadv/20230207.txt'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: X.400 address type confusion in X.509 GeneralName'
-            },
-            {
-              'cve':  'CVE-2023-0464',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-295'
-              ],
-              'description':   "A security vulnerability has been identified in all supported versions\n\nof OpenSSL related to the verification of X.509 certificate chains\nthat include policy constraints.  Attackers may be able to exploit this\nvulnerability by creating a malicious certificate chain that triggers\nexponential use of computational resources, leading to a denial-of-service\n(DoS) attack on affected systems.\n\nPolicy processing is disabled by default but can be enabled by passing\nthe `-policy' argument to the command line utilities or by calling the\n`X509_VERIFY_PARAM_set1_policies()' function.",
-              'diffID':        'sha256:f3cad9f8ac1ee2f04e09db4d66d14c7806b881917a632bed9ae1117c6b10e1f9',
-              'fixedVersions': [
-                '1.1.1t-r2'
-              ],
-              'installedVersion': '1.1.1n-r0',
-              'packageName':      'libcrypto1.1',
-              'purl':             'pkg:apk/alpine/libcrypto1.1@1.1.1n-r0?arch=armv7&distro=3.15.4',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2023:3722',
-                'https://access.redhat.com/security/cve/CVE-2023-0464',
-                'https://bugzilla.redhat.com/2181082',
-                'https://bugzilla.redhat.com/2182561',
-                'https://bugzilla.redhat.com/2182565',
-                'https://bugzilla.redhat.com/2188461',
-                'https://bugzilla.redhat.com/2207947',
-                'https://errata.almalinux.org/9/ALSA-2023-3722.html',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=2017771e2db3e2b96f89bbe8766c3209f6a99545',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=2dcd4f1e3115f38cefa43e3efbe9b801c27e642e',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=879f7080d7e141f415c79eaa3a8ac4a3dad0348b',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=959c59c7a0164117e7f8366466a32bb1f8d77ff1',
-                'https://linux.oracle.com/cve/CVE-2023-0464.html',
-                'https://linux.oracle.com/errata/ELSA-2023-3722.html',
-                'https://lists.debian.org/debian-lts-announce/2023/06/msg00011.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-0464',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://security.netapp.com/advisory/ntap-20230406-0006/',
-                'https://security.netapp.com/advisory/ntap-20240621-0006/',
-                'https://ubuntu.com/security/notices/USN-6039-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.couchbase.com/alerts/',
-                'https://www.cve.org/CVERecord?id=CVE-2023-0464',
-                'https://www.debian.org/security/2023/dsa-5417',
-                'https://www.openssl.org/news/secadv/20230322.txt'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: Denial of service by excessive resource usage in verifying X509 policy constraints'
-            },
-            {
-              'cve':  'CVE-2022-2097',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N'
-                },
-                'nvd': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N'
-                },
-                'redhat': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-327'
-              ],
-              'description':   "AES OCB mode for 32-bit x86 platforms using the AES-NI assembly optimised implementation will not encrypt the entirety of the data under some circumstances. This could reveal sixteen bytes of data that was preexisting in the memory that wasn't written. In the special case of \"in place\" encryption, sixteen bytes of the plaintext would be revealed. Since OpenSSL does not support OCB based cipher suites for TLS and DTLS, they are both unaffected. Fixed in OpenSSL 3.0.5 (Affected 3.0.0-3.0.4). Fixed in OpenSSL 1.1.1q (Affected 1.1.1-1.1.1p).",
-              'diffID':        'sha256:f3cad9f8ac1ee2f04e09db4d66d14c7806b881917a632bed9ae1117c6b10e1f9',
-              'fixedVersions': [
-                '1.1.1q-r0'
-              ],
-              'installedVersion': '1.1.1n-r0',
-              'packageName':      'libcrypto1.1',
-              'purl':             'pkg:apk/alpine/libcrypto1.1@1.1.1n-r0?arch=armv7&distro=3.15.4',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2022:6224',
-                'https://access.redhat.com/security/cve/CVE-2022-2097',
-                'https://bugzilla.redhat.com/2081494',
-                'https://bugzilla.redhat.com/2087911',
-                'https://bugzilla.redhat.com/2087913',
-                'https://bugzilla.redhat.com/2097310',
-                'https://bugzilla.redhat.com/2104905',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2081494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2097310',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2100554',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2104905',
-                'https://cert-portal.siemens.com/productcert/pdf/ssa-332410.pdf',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-1292',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-2068',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-2097',
-                'https://errata.almalinux.org/9/ALSA-2022-6224.html',
-                'https://errata.rockylinux.org/RLSA-2022:5818',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=919925673d6c9cfed3c1085497f5dfbbed5fc431',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=a98f339ddd7e8f487d6e0088d4a9a42324885a93',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=919925673d6c9cfed3c1085497f5dfbbed5fc431',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=a98f339ddd7e8f487d6e0088d4a9a42324885a93',
-                'https://github.com/alexcrichton/openssl-src-rs',
-                'https://linux.oracle.com/cve/CVE-2022-2097.html',
-                'https://linux.oracle.com/errata/ELSA-2022-9955.html',
-                'https://lists.debian.org/debian-lts-announce/2023/02/msg00019.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/R6CK57NBQFTPUMXAPJURCGXUYT76NQAK',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/R6CK57NBQFTPUMXAPJURCGXUYT76NQAK/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/V6567JERRHHJW2GNGJGKDRNHR7SNPZK7',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/V6567JERRHHJW2GNGJGKDRNHR7SNPZK7/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VCMNWKERPBKOEBNL7CLTTX3ZZCZLH7XA',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VCMNWKERPBKOEBNL7CLTTX3ZZCZLH7XA/',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/R6CK57NBQFTPUMXAPJURCGXUYT76NQAK',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/R6CK57NBQFTPUMXAPJURCGXUYT76NQAK/',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/V6567JERRHHJW2GNGJGKDRNHR7SNPZK7',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/V6567JERRHHJW2GNGJGKDRNHR7SNPZK7/',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/VCMNWKERPBKOEBNL7CLTTX3ZZCZLH7XA',
-                'https://nvd.nist.gov/vuln/detail/CVE-2022-2097',
-                'https://rustsec.org/advisories/RUSTSEC-2022-0032.html',
-                'https://security.gentoo.org/glsa/202210-02',
-                'https://security.netapp.com/advisory/ntap-20220715-0011',
-                'https://security.netapp.com/advisory/ntap-20220715-0011/',
-                'https://security.netapp.com/advisory/ntap-20230420-0008',
-                'https://security.netapp.com/advisory/ntap-20230420-0008/',
-                'https://security.netapp.com/advisory/ntap-20240621-0006',
-                'https://security.netapp.com/advisory/ntap-20240621-0006/',
-                'https://ubuntu.com/security/notices/USN-5502-1',
-                'https://ubuntu.com/security/notices/USN-6457-1',
-                'https://www.cve.org/CVERecord?id=CVE-2022-2097',
-                'https://www.debian.org/security/2023/dsa-5343',
-                'https://www.openssl.org/news/secadv/20220705.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: AES OCB fails to encrypt some bytes'
-            },
-            {
-              'cve':  'CVE-2022-4304',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N'
-                },
-                'nvd': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N'
-                },
-                'redhat': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-203'
-              ],
-              'description':   'A timing based side channel exists in the OpenSSL RSA Decryption implementation\nwhich could be sufficient to recover a plaintext across a network in a\nBleichenbacher style attack. To achieve a successful decryption an attacker\nwould have to be able to send a very large number of trial messages for\ndecryption. The vulnerability affects all RSA padding modes: PKCS#1 v1.5,\nRSA-OEAP and RSASVE.\n\nFor example, in a TLS connection, RSA is commonly used by a client to send an\nencrypted pre-master secret to the server. An attacker that had observed a\ngenuine connection between a client and a server could use this flaw to send\ntrial messages to the server and record the time taken to process them. After a\nsufficiently large number of messages the attacker could recover the pre-master\nsecret used for the original connection and thus be able to decrypt the\napplication data sent over that connection.',
-              'diffID':        'sha256:f3cad9f8ac1ee2f04e09db4d66d14c7806b881917a632bed9ae1117c6b10e1f9',
-              'fixedVersions': [
-                '1.1.1t-r0'
-              ],
-              'installedVersion': '1.1.1n-r0',
-              'packageName':      'libcrypto1.1',
-              'purl':             'pkg:apk/alpine/libcrypto1.1@1.1.1n-r0?arch=armv7&distro=3.15.4',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2023:2165',
-                'https://access.redhat.com/security/cve/CVE-2022-4304',
-                'https://bugzilla.redhat.com/1960321',
-                'https://bugzilla.redhat.com/2164440',
-                'https://bugzilla.redhat.com/2164487',
-                'https://bugzilla.redhat.com/2164492',
-                'https://bugzilla.redhat.com/2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144000',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144003',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144006',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144008',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144010',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144012',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144015',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144017',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144019',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2145170',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2158412',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164440',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164487',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164488',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164492',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164497',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164499',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164500',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4203',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4304',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4450',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0215',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0216',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0217',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0286',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0401',
-                'https://errata.almalinux.org/9/ALSA-2023-2165.html',
-                'https://errata.rockylinux.org/RLSA-2023:0946',
-                'https://linux.oracle.com/cve/CVE-2022-4304.html',
-                'https://linux.oracle.com/errata/ELSA-2023-32791.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2022-4304',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0003',
-                'https://rustsec.org/advisories/RUSTSEC-2023-0007.html',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://ubuntu.com/security/notices/USN-5844-1',
-                'https://ubuntu.com/security/notices/USN-6564-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2022-4304',
-                'https://www.openssl.org/news/secadv/20230207.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: timing attack in RSA Decryption implementation'
-            },
-            {
-              'cve':  'CVE-2023-0465',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N'
-                },
-                'redhat': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-295'
-              ],
-              'description':   "Applications that use a non-default option when verifying certificates may be\nvulnerable to an attack from a malicious CA to circumvent certain checks.\n\nInvalid certificate policies in leaf certificates are silently ignored by\nOpenSSL and other certificate policy checks are skipped for that certificate.\nA malicious CA could use this to deliberately assert invalid certificate policies\nin order to circumvent policy checking on the certificate altogether.\n\nPolicy processing is disabled by default but can be enabled by passing\nthe `-policy' argument to the command line utilities or by calling the\n`X509_VERIFY_PARAM_set1_policies()' function.",
-              'diffID':        'sha256:f3cad9f8ac1ee2f04e09db4d66d14c7806b881917a632bed9ae1117c6b10e1f9',
-              'fixedVersions': [
-                '1.1.1t-r2'
-              ],
-              'installedVersion': '1.1.1n-r0',
-              'packageName':      'libcrypto1.1',
-              'purl':             'pkg:apk/alpine/libcrypto1.1@1.1.1n-r0?arch=armv7&distro=3.15.4',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2023:3722',
-                'https://access.redhat.com/security/cve/CVE-2023-0465',
-                'https://bugzilla.redhat.com/2181082',
-                'https://bugzilla.redhat.com/2182561',
-                'https://bugzilla.redhat.com/2182565',
-                'https://bugzilla.redhat.com/2188461',
-                'https://bugzilla.redhat.com/2207947',
-                'https://errata.almalinux.org/9/ALSA-2023-3722.html',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=10325176f3d3e98c6e2b3bf5ab1e3b334de6947a',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=1dd43e0709fece299b15208f36cc7c76209ba0bb',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=b013765abfa80036dc779dd0e50602c57bb3bf95',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=facfb1ab745646e97a1920977ae4a9965ea61d5c',
-                'https://linux.oracle.com/cve/CVE-2023-0465.html',
-                'https://linux.oracle.com/errata/ELSA-2023-3722.html',
-                'https://lists.debian.org/debian-lts-announce/2023/06/msg00011.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-0465',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://security.netapp.com/advisory/ntap-20230414-0001/',
-                'https://ubuntu.com/security/notices/USN-6039-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-0465',
-                'https://www.debian.org/security/2023/dsa-5417',
-                'https://www.openssl.org/news/secadv/20230328.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: Invalid certificate policies in leaf certificates are silently ignored'
-            },
-            {
-              'cve':  'CVE-2023-2650',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '6.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-770'
-              ],
-              'description':   "Issue summary: Processing some specially crafted ASN.1 object identifiers or\ndata containing them may be very slow.\n\nImpact summary: Applications that use OBJ_obj2txt() directly, or use any of\nthe OpenSSL subsystems OCSP, PKCS7/SMIME, CMS, CMP/CRMF or TS with no message\nsize limit may experience notable to very long delays when processing those\nmessages, which may lead to a Denial of Service.\n\nAn OBJECT IDENTIFIER is composed of a series of numbers - sub-identifiers -\nmost of which have no size limit.  OBJ_obj2txt() may be used to translate\nan ASN.1 OBJECT IDENTIFIER given in DER encoding form (using the OpenSSL\ntype ASN1_OBJECT) to its canonical numeric text form, which are the\nsub-identifiers of the OBJECT IDENTIFIER in decimal form, separated by\nperiods.\n\nWhen one of the sub-identifiers in the OBJECT IDENTIFIER is very large\n(these are sizes that are seen as absurdly large, taking up tens or hundreds\nof KiBs), the translation to a decimal number in text may take a very long\ntime.  The time complexity is O(n^2) with 'n' being the size of the\nsub-identifiers in bytes (*).\n\nWith OpenSSL 3.0, support to fetch cryptographic algorithms using names /\nidentifiers in string form was introduced.  This includes using OBJECT\nIDENTIFIERs in canonical numeric text form as identifiers for fetching\nalgorithms.\n\nSuch OBJECT IDENTIFIERs may be received through the ASN.1 structure\nAlgorithmIdentifier, which is commonly used in multiple protocols to specify\nwhat cryptographic algorithm should be used to sign or verify, encrypt or\ndecrypt, or digest passed data.\n\nApplications that call OBJ_obj2txt() directly with untrusted data are\naffected, with any version of OpenSSL.  If the use is for the mere purpose\nof display, the severity is considered low.\n\nIn OpenSSL 3.0 and newer, this affects the subsystems OCSP, PKCS7/SMIME,\nCMS, CMP/CRMF or TS.  It also impacts anything that processes X.509\ncertificates, including simple things like verifying its signature.\n\nThe impact on TLS is relatively low, because all versions of OpenSSL have a\n100KiB limit on the peer's certificate chain.  Additionally, this only\nimpacts clients, or servers that have explicitly enabled client\nauthentication.\n\nIn OpenSSL 1.1.1 and 1.0.2, this only affects displaying diverse objects,\nsuch as X.509 certificates.  This is assumed to not happen in such a way\nthat it would cause a Denial of Service, so these versions are considered\nnot affected by this issue in such a way that it would be cause for concern,\nand the severity is therefore considered low.",
-              'diffID':        'sha256:f3cad9f8ac1ee2f04e09db4d66d14c7806b881917a632bed9ae1117c6b10e1f9',
-              'fixedVersions': [
-                '1.1.1u-r0'
-              ],
-              'installedVersion': '1.1.1n-r0',
-              'packageName':      'libcrypto1.1',
-              'purl':             'pkg:apk/alpine/libcrypto1.1@1.1.1n-r0?arch=armv7&distro=3.15.4',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2023/05/30/1',
-                'https://access.redhat.com/errata/RHSA-2023:6330',
-                'https://access.redhat.com/security/cve/CVE-2023-2650',
-                'https://bugzilla.redhat.com/1858038',
-                'https://bugzilla.redhat.com/2207947',
-                'https://errata.almalinux.org/9/ALSA-2023-6330.html',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=423a2bc737a908ad0c77bda470b2b59dc879936b',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=853c5e56ee0b8650c73140816bb8b91d6163422c',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=9e209944b35cf82368071f160a744b6178f9b098',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=db779b0e10b047f2585615e0b8f2acdf21f8544a',
-                'https://linux.oracle.com/cve/CVE-2023-2650.html',
-                'https://linux.oracle.com/errata/ELSA-2023-6330.html',
-                'https://lists.debian.org/debian-lts-announce/2023/06/msg00011.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-2650',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0009',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://security.netapp.com/advisory/ntap-20230703-0001/',
-                'https://security.netapp.com/advisory/ntap-20231027-0009/',
-                'https://ubuntu.com/security/notices/USN-6119-1',
-                'https://ubuntu.com/security/notices/USN-6188-1',
-                'https://ubuntu.com/security/notices/USN-6672-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-2650',
-                'https://www.debian.org/security/2023/dsa-5417',
-                'https://www.openssl.org/news/secadv/20230530.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: Possible DoS translating ASN.1 object identifiers'
-            },
-            {
-              'cve':  'CVE-2023-3446',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L'
-                },
-                'redhat': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L'
-                }
-              },
-              'cwes': [
-                'CWE-606',
-                'CWE-1333'
-              ],
-              'description':   "Issue summary: Checking excessively long DH keys or parameters may be very slow.\n\nImpact summary: Applications that use the functions DH_check(), DH_check_ex()\nor EVP_PKEY_param_check() to check a DH key or DH parameters may experience long\ndelays. Where the key or parameters that are being checked have been obtained\nfrom an untrusted source this may lead to a Denial of Service.\n\nThe function DH_check() performs various checks on DH parameters. One of those\nchecks confirms that the modulus ('p' parameter) is not too large. Trying to use\na very large modulus is slow and OpenSSL will not normally use a modulus which\nis over 10,000 bits in length.\n\nHowever the DH_check() function checks numerous aspects of the key or parameters\nthat have been supplied. Some of those checks use the supplied modulus value\neven if it has already been found to be too large.\n\nAn application that calls DH_check() and supplies a key or parameters obtained\nfrom an untrusted source could be vulernable to a Denial of Service attack.\n\nThe function DH_check() is itself called by a number of other OpenSSL functions.\nAn application calling any of those other functions may similarly be affected.\nThe other functions affected by this are DH_check_ex() and\nEVP_PKEY_param_check().\n\nAlso vulnerable are the OpenSSL dhparam and pkeyparam command line applications\nwhen using the '-check' option.\n\nThe OpenSSL SSL/TLS implementation is not affected by this issue.\nThe OpenSSL 3.0 and 3.1 FIPS providers are not affected by this issue.",
-              'diffID':        'sha256:f3cad9f8ac1ee2f04e09db4d66d14c7806b881917a632bed9ae1117c6b10e1f9',
-              'fixedVersions': [
-                '1.1.1u-r2'
-              ],
-              'installedVersion': '1.1.1n-r0',
-              'packageName':      'libcrypto1.1',
-              'purl':             'pkg:apk/alpine/libcrypto1.1@1.1.1n-r0?arch=armv7&distro=3.15.4',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2023/07/19/4',
-                'http://www.openwall.com/lists/oss-security/2023/07/19/5',
-                'http://www.openwall.com/lists/oss-security/2023/07/19/6',
-                'http://www.openwall.com/lists/oss-security/2023/07/31/1',
-                'http://www.openwall.com/lists/oss-security/2024/05/16/1',
-                'https://access.redhat.com/errata/RHSA-2024:2447',
-                'https://access.redhat.com/security/cve/CVE-2023-3446',
-                'https://bugzilla.redhat.com/2223016',
-                'https://bugzilla.redhat.com/2224962',
-                'https://bugzilla.redhat.com/2227852',
-                'https://bugzilla.redhat.com/2248616',
-                'https://bugzilla.redhat.com/2257571',
-                'https://bugzilla.redhat.com/2258502',
-                'https://bugzilla.redhat.com/2259944',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2224962',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2257582',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2257583',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2258677',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2258688',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2258691',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2258694',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2258700',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-36763',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-36764',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3446',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45229',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45231',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45232',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45233',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45235',
-                'https://errata.almalinux.org/9/ALSA-2024-2447.html',
-                'https://errata.rockylinux.org/RLSA-2024:2264',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=1fa20cf2f506113c761777127a38bce5068740eb',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=8780a896543a654e757db1b9396383f9d8095528',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=9a0a4d3c1e7138915563c0df4fe6a3f9377b839c',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=fc9867c1e03c22ebf56943be205202e576aabf23',
-                'https://linux.oracle.com/cve/CVE-2023-3446.html',
-                'https://linux.oracle.com/errata/ELSA-2024-2447.html',
-                'https://lists.debian.org/debian-lts-announce/2023/08/msg00019.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-3446',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://security.netapp.com/advisory/ntap-20230803-0011/',
-                'https://ubuntu.com/security/notices/USN-6435-1',
-                'https://ubuntu.com/security/notices/USN-6435-2',
-                'https://ubuntu.com/security/notices/USN-6450-1',
-                'https://ubuntu.com/security/notices/USN-6709-1',
-                'https://ubuntu.com/security/notices/USN-7018-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-3446',
-                'https://www.openssl.org/news/secadv/20230719.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: Excessive time spent checking DH keys and parameters'
-            },
-            {
-              'cve':  'CVE-2023-3817',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L'
-                },
-                'redhat': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L'
-                }
-              },
-              'cwes': [
-                'CWE-606',
-                'CWE-834'
-              ],
-              'description':   'Issue summary: Checking excessively long DH keys or parameters may be very slow.\n\nImpact summary: Applications that use the functions DH_check(), DH_check_ex()\nor EVP_PKEY_param_check() to check a DH key or DH parameters may experience long\ndelays. Where the key or parameters that are being checked have been obtained\nfrom an untrusted source this may lead to a Denial of Service.\n\nThe function DH_check() performs various checks on DH parameters. After fixing\nCVE-2023-3446 it was discovered that a large q parameter value can also trigger\nan overly long computation during some of these checks. A correct q value,\nif present, cannot be larger than the modulus p parameter, thus it is\nunnecessary to perform these checks if q is larger than p.\n\nAn application that calls DH_check() and supplies a key or parameters obtained\nfrom an untrusted source could be vulnerable to a Denial of Service attack.\n\nThe function DH_check() is itself called by a number of other OpenSSL functions.\nAn application calling any of those other functions may similarly be affected.\nThe other functions affected by this are DH_check_ex() and\nEVP_PKEY_param_check().\n\nAlso vulnerable are the OpenSSL dhparam and pkeyparam command line applications\nwhen using the "-check" option.\n\nThe OpenSSL SSL/TLS implementation is not affected by this issue.\n\nThe OpenSSL 3.0 and 3.1 FIPS providers are not affected by this issue.',
-              'diffID':        'sha256:f3cad9f8ac1ee2f04e09db4d66d14c7806b881917a632bed9ae1117c6b10e1f9',
-              'fixedVersions': [
-                '1.1.1v-r0'
-              ],
-              'installedVersion': '1.1.1n-r0',
-              'packageName':      'libcrypto1.1',
-              'purl':             'pkg:apk/alpine/libcrypto1.1@1.1.1n-r0?arch=armv7&distro=3.15.4',
-              'references':       [
-                'http://seclists.org/fulldisclosure/2023/Jul/43',
-                'http://www.openwall.com/lists/oss-security/2023/07/31/1',
-                'http://www.openwall.com/lists/oss-security/2023/09/22/11',
-                'http://www.openwall.com/lists/oss-security/2023/09/22/9',
-                'http://www.openwall.com/lists/oss-security/2023/11/06/2',
-                'https://access.redhat.com/errata/RHSA-2024:2447',
-                'https://access.redhat.com/security/cve/CVE-2023-3817',
-                'https://bugzilla.redhat.com/2223016',
-                'https://bugzilla.redhat.com/2224962',
-                'https://bugzilla.redhat.com/2227852',
-                'https://bugzilla.redhat.com/2248616',
-                'https://bugzilla.redhat.com/2257571',
-                'https://bugzilla.redhat.com/2258502',
-                'https://bugzilla.redhat.com/2259944',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2224962',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2227852',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2248616',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2270358',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3446',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3817',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-5678',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-2408',
-                'https://errata.almalinux.org/9/ALSA-2024-2447.html',
-                'https://errata.rockylinux.org/RLSA-2023:7877',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=6a1eb62c29db6cb5eec707f9338aee00f44e26f5',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=869ad69aadd985c7b8ca6f4e5dd0eb274c9f3644',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=9002fd07327a91f35ba6c1307e71fa6fd4409b7f',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=91ddeba0f2269b017dc06c46c993a788974b1aa5',
-                'https://linux.oracle.com/cve/CVE-2023-3817.html',
-                'https://linux.oracle.com/errata/ELSA-2024-2447.html',
-                'https://lists.debian.org/debian-lts-announce/2023/08/msg00019.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-3817',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://security.netapp.com/advisory/ntap-20230818-0014/',
-                'https://security.netapp.com/advisory/ntap-20231027-0008/',
-                'https://security.netapp.com/advisory/ntap-20240621-0006/',
-                'https://ubuntu.com/security/notices/USN-6435-1',
-                'https://ubuntu.com/security/notices/USN-6435-2',
-                'https://ubuntu.com/security/notices/USN-6450-1',
-                'https://ubuntu.com/security/notices/USN-6709-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-3817',
-                'https://www.openssl.org/news/secadv/20230731.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'OpenSSL: Excessive time spent checking DH q parameter value'
-            },
-            {
-              'cve':  'CVE-2023-5678',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L'
-                },
-                'redhat': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L'
-                }
-              },
-              'cwes': [
-                'CWE-606',
-                'CWE-754'
-              ],
-              'description':   "Issue summary: Generating excessively long X9.42 DH keys or checking\nexcessively long X9.42 DH keys or parameters may be very slow.\n\nImpact summary: Applications that use the functions DH_generate_key() to\ngenerate an X9.42 DH key may experience long delays.  Likewise, applications\nthat use DH_check_pub_key(), DH_check_pub_key_ex() or EVP_PKEY_public_check()\nto check an X9.42 DH key or X9.42 DH parameters may experience long delays.\nWhere the key or parameters that are being checked have been obtained from\nan untrusted source this may lead to a Denial of Service.\n\nWhile DH_check() performs all the necessary checks (as of CVE-2023-3817),\nDH_check_pub_key() doesn't make any of these checks, and is therefore\nvulnerable for excessively large P and Q parameters.\n\nLikewise, while DH_generate_key() performs a check for an excessively large\nP, it doesn't check for an excessively large Q.\n\nAn application that calls DH_generate_key() or DH_check_pub_key() and\nsupplies a key or parameters obtained from an untrusted source could be\nvulnerable to a Denial of Service attack.\n\nDH_generate_key() and DH_check_pub_key() are also called by a number of\nother OpenSSL functions.  An application calling any of those other\nfunctions may similarly be affected.  The other functions affected by this\nare DH_check_pub_key_ex(), EVP_PKEY_public_check(), and EVP_PKEY_generate().\n\nAlso vulnerable are the OpenSSL pkey command line application when using the\n\"-pubcheck\" option, as well as the OpenSSL genpkey command line application.\n\nThe OpenSSL SSL/TLS implementation is not affected by this issue.\n\nThe OpenSSL 3.0 and 3.1 FIPS providers are not affected by this issue.",
-              'diffID':        'sha256:f3cad9f8ac1ee2f04e09db4d66d14c7806b881917a632bed9ae1117c6b10e1f9',
-              'fixedVersions': [
-                '1.1.1w-r1'
-              ],
-              'installedVersion': '1.1.1n-r0',
-              'packageName':      'libcrypto1.1',
-              'purl':             'pkg:apk/alpine/libcrypto1.1@1.1.1n-r0?arch=armv7&distro=3.15.4',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2024/03/11/1',
-                'https://access.redhat.com/errata/RHSA-2024:2447',
-                'https://access.redhat.com/security/cve/CVE-2023-5678',
-                'https://bugzilla.redhat.com/2223016',
-                'https://bugzilla.redhat.com/2224962',
-                'https://bugzilla.redhat.com/2227852',
-                'https://bugzilla.redhat.com/2248616',
-                'https://bugzilla.redhat.com/2257571',
-                'https://bugzilla.redhat.com/2258502',
-                'https://bugzilla.redhat.com/2259944',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2224962',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2227852',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2248616',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2270358',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3446',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3817',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-5678',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-2408',
-                'https://errata.almalinux.org/9/ALSA-2024-2447.html',
-                'https://errata.rockylinux.org/RLSA-2023:7877',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=34efaef6c103d636ab507a0cc34dca4d3aecc055',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=710fee740904b6290fef0dd5536fbcedbc38ff0c',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=db925ae2e65d0d925adef429afc37f75bd1c2017',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=ddeb4b6c6d527e54ce9a99cba785c0f7776e54b6',
-                'https://linux.oracle.com/cve/CVE-2023-5678.html',
-                'https://linux.oracle.com/errata/ELSA-2024-2447.html',
-                'https://lists.debian.org/debian-lts-announce/2024/10/msg00033.html',
-                'https://lists.debian.org/debian-lts-announce/2024/11/msg00000.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-5678',
-                'https://security.netapp.com/advisory/ntap-20231130-0010/',
-                'https://ubuntu.com/security/notices/USN-6622-1',
-                'https://ubuntu.com/security/notices/USN-6632-1',
-                'https://ubuntu.com/security/notices/USN-6709-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-5678',
-                'https://www.openssl.org/news/secadv/20231106.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: Generating excessively long X9.42 DH keys or checking excessively long X9.42 DH keys or parameters may be very slow'
-            },
-            {
-              'cve':  'CVE-2022-4450',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'nvd': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-415'
-              ],
-              'description':   'The function PEM_read_bio_ex() reads a PEM file from a BIO and parses and\ndecodes the "name" (e.g. "CERTIFICATE"), any header data and the payload data.\nIf the function succeeds then the "name_out", "header" and "data" arguments are\npopulated with pointers to buffers containing the relevant decoded data. The\ncaller is responsible for freeing those buffers. It is possible to construct a\nPEM file that results in 0 bytes of payload data. In this case PEM_read_bio_ex()\nwill return a failure code but will populate the header argument with a pointer\nto a buffer that has already been freed. If the caller also frees this buffer\nthen a double free will occur. This will most likely lead to a crash. This\ncould be exploited by an attacker who has the ability to supply malicious PEM\nfiles for parsing to achieve a denial of service attack.\n\nThe functions PEM_read_bio() and PEM_read() are simple wrappers around\nPEM_read_bio_ex() and therefore these functions are also directly affected.\n\nThese functions are also called indirectly by a number of other OpenSSL\nfunctions including PEM_X509_INFO_read_bio_ex() and\nSSL_CTX_use_serverinfo_file() which are also vulnerable. Some OpenSSL internal\nuses of these functions are not vulnerable because the caller does not free the\nheader argument if PEM_read_bio_ex() returns a failure code. These locations\ninclude the PEM_read_bio_TYPE() functions as well as the decoders introduced in\nOpenSSL 3.0.\n\nThe OpenSSL asn1parse command line application is also impacted by this issue.',
-              'diffID':        'sha256:f3cad9f8ac1ee2f04e09db4d66d14c7806b881917a632bed9ae1117c6b10e1f9',
-              'fixedVersions': [
-                '1.1.1t-r0'
-              ],
-              'installedVersion': '1.1.1n-r0',
-              'packageName':      'libssl1.1',
-              'purl':             'pkg:apk/alpine/libssl1.1@1.1.1n-r0?arch=armv7&distro=3.15.4',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2023:2165',
-                'https://access.redhat.com/security/cve/CVE-2022-4450',
-                'https://bugzilla.redhat.com/1960321',
-                'https://bugzilla.redhat.com/2164440',
-                'https://bugzilla.redhat.com/2164487',
-                'https://bugzilla.redhat.com/2164492',
-                'https://bugzilla.redhat.com/2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144000',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144003',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144006',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144008',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144010',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144012',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144015',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144017',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144019',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2145170',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2158412',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164440',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164487',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164488',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164492',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164497',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164499',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164500',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4203',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4304',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4450',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0215',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0216',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0217',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0286',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0401',
-                'https://errata.almalinux.org/9/ALSA-2023-2165.html',
-                'https://errata.rockylinux.org/RLSA-2023:0946',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=63bcf189be73a9cc1264059bed6f57974be74a83',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=bbcf509bd046b34cca19c766bbddc31683d0858b',
-                'https://linux.oracle.com/cve/CVE-2022-4450.html',
-                'https://linux.oracle.com/errata/ELSA-2023-32791.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2022-4450',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0003',
-                'https://rustsec.org/advisories/RUSTSEC-2023-0010.html',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://ubuntu.com/security/notices/USN-5844-1',
-                'https://ubuntu.com/security/notices/USN-6564-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2022-4450',
-                'https://www.openssl.org/news/secadv/20230207.txt'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: double free after calling PEM_read_bio_ex'
-            },
-            {
-              'cve':  'CVE-2023-0215',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'nvd': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   'The public API function BIO_new_NDEF is a helper function used for streaming\nASN.1 data via a BIO. It is primarily used internally to OpenSSL to support the\nSMIME, CMS and PKCS7 streaming capabilities, but may also be called directly by\nend user applications.\n\nThe function receives a BIO from the caller, prepends a new BIO_f_asn1 filter\nBIO onto the front of it to form a BIO chain, and then returns the new head of\nthe BIO chain to the caller. Under certain conditions, for example if a CMS\nrecipient public key is invalid, the new filter BIO is freed and the function\nreturns a NULL result indicating a failure. However, in this case, the BIO chain\nis not properly cleaned up and the BIO passed by the caller still retains\ninternal pointers to the previously freed filter BIO. If the caller then goes on\nto call BIO_pop() on the BIO then a use-after-free will occur. This will most\nlikely result in a crash.\n\n\n\nThis scenario occurs directly in the internal function B64_write_ASN1() which\nmay cause BIO_new_NDEF() to be called and will subsequently call BIO_pop() on\nthe BIO. This internal function is in turn called by the public API functions\nPEM_write_bio_ASN1_stream, PEM_write_bio_CMS_stream, PEM_write_bio_PKCS7_stream,\nSMIME_write_ASN1, SMIME_write_CMS and SMIME_write_PKCS7.\n\nOther public API functions that may be impacted by this include\ni2d_ASN1_bio_stream, BIO_new_CMS, BIO_new_PKCS7, i2d_CMS_bio_stream and\ni2d_PKCS7_bio_stream.\n\nThe OpenSSL cms and smime command line applications are similarly affected.',
-              'diffID':        'sha256:f3cad9f8ac1ee2f04e09db4d66d14c7806b881917a632bed9ae1117c6b10e1f9',
-              'fixedVersions': [
-                '1.1.1t-r0'
-              ],
-              'installedVersion': '1.1.1n-r0',
-              'packageName':      'libssl1.1',
-              'purl':             'pkg:apk/alpine/libssl1.1@1.1.1n-r0?arch=armv7&distro=3.15.4',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2023:2165',
-                'https://access.redhat.com/security/cve/CVE-2023-0215',
-                'https://bugzilla.redhat.com/1960321',
-                'https://bugzilla.redhat.com/2164440',
-                'https://bugzilla.redhat.com/2164487',
-                'https://bugzilla.redhat.com/2164492',
-                'https://bugzilla.redhat.com/2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144000',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144003',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144006',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144008',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144010',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144012',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144015',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144017',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144019',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2145170',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2158412',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164440',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164487',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164488',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164492',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164497',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164499',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164500',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4203',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4304',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4450',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0215',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0216',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0217',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0286',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0401',
-                'https://errata.almalinux.org/9/ALSA-2023-2165.html',
-                'https://errata.rockylinux.org/RLSA-2023:0946',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=8818064ce3c3c0f1b740a5aaba2a987e75bfbafd',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=9816136fe31d92ace4037d5da5257f763aeeb4eb',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=c3829dd8825c654652201e16f8a0a0c46ee3f344',
-                'https://linux.oracle.com/cve/CVE-2023-0215.html',
-                'https://linux.oracle.com/errata/ELSA-2023-32791.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-0215',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0003',
-                'https://rustsec.org/advisories/RUSTSEC-2023-0009.html',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://security.netapp.com/advisory/ntap-20230427-0007',
-                'https://security.netapp.com/advisory/ntap-20230427-0007/',
-                'https://security.netapp.com/advisory/ntap-20230427-0009',
-                'https://security.netapp.com/advisory/ntap-20230427-0009/',
-                'https://security.netapp.com/advisory/ntap-20240621-0006',
-                'https://security.netapp.com/advisory/ntap-20240621-0006/',
-                'https://ubuntu.com/security/notices/USN-5844-1',
-                'https://ubuntu.com/security/notices/USN-5845-1',
-                'https://ubuntu.com/security/notices/USN-5845-2',
-                'https://ubuntu.com/security/notices/USN-6564-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-0215',
-                'https://www.openssl.org/news/secadv/20230207.txt'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: use-after-free following BIO_new_NDEF'
-            },
-            {
-              'cve':  'CVE-2023-0286',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '7.4',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H'
-                },
-                'nvd': {
-                  'v3score':  '7.4',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.4',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-843'
-              ],
-              'description':   'There is a type confusion vulnerability relating to X.400 address processing\ninside an X.509 GeneralName. X.400 addresses were parsed as an ASN1_STRING but\nthe public structure definition for GENERAL_NAME incorrectly specified the type\nof the x400Address field as ASN1_TYPE. This field is subsequently interpreted by\nthe OpenSSL function GENERAL_NAME_cmp as an ASN1_TYPE rather than an\nASN1_STRING.\n\nWhen CRL checking is enabled (i.e. the application sets the\nX509_V_FLAG_CRL_CHECK flag), this vulnerability may allow an attacker to pass\narbitrary pointers to a memcmp call, enabling them to read memory contents or\nenact a denial of service. In most cases, the attack requires the attacker to\nprovide both the certificate chain and CRL, neither of which need to have a\nvalid signature. If the attacker only controls one of these inputs, the other\ninput must already contain an X.400 address as a CRL distribution point, which\nis uncommon. As such, this vulnerability is most likely to only affect\napplications which have implemented their own functionality for retrieving CRLs\nover a network.',
-              'diffID':        'sha256:f3cad9f8ac1ee2f04e09db4d66d14c7806b881917a632bed9ae1117c6b10e1f9',
-              'fixedVersions': [
-                '1.1.1t-r0'
-              ],
-              'installedVersion': '1.1.1n-r0',
-              'packageName':      'libssl1.1',
-              'purl':             'pkg:apk/alpine/libssl1.1@1.1.1n-r0?arch=armv7&distro=3.15.4',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2025:7937',
-                'https://access.redhat.com/security/cve/CVE-2023-0286',
-                'https://access.redhat.com/security/cve/cve-2023-0286',
-                'https://bugzilla.redhat.com/2164440',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144000',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144003',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144006',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144008',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144010',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144012',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144015',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144017',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144019',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2145170',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2158412',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164440',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164487',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164488',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164492',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164497',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164499',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164500',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4203',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4304',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4450',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0215',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0216',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0217',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0286',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0401',
-                'https://errata.almalinux.org/9/ALSA-2025-7937.html',
-                'https://errata.rockylinux.org/RLSA-2023:0946',
-                'https://ftp.openbsd.org/pub/OpenBSD/LibreSSL/libressl-3.6.2-relnotes.txt',
-                'https://ftp.openbsd.org/pub/OpenBSD/patches/7.2/common/018_x509.patch.sig',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=2c6c9d439b484e1ba9830d8454a34fa4f80fdfe9',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=2f7530077e0ef79d98718138716bc51ca0cad658',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=fd2af07dc083a350c959147097003a14a5e8ac4d',
-                'https://github.com/pyca/cryptography',
-                'https://github.com/pyca/cryptography/security/advisories/GHSA-x4qr-2fvf-3mr5',
-                'https://linux.oracle.com/cve/CVE-2023-0286.html',
-                'https://linux.oracle.com/errata/ELSA-2025-7937.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-0286',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0003',
-                'https://rustsec.org/advisories/RUSTSEC-2023-0006.html',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://ubuntu.com/security/notices/USN-5844-1',
-                'https://ubuntu.com/security/notices/USN-5845-1',
-                'https://ubuntu.com/security/notices/USN-5845-2',
-                'https://ubuntu.com/security/notices/USN-6564-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-0286',
-                'https://www.openssl.org/news/secadv/20230207.txt'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: X.400 address type confusion in X.509 GeneralName'
-            },
-            {
-              'cve':  'CVE-2023-0464',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-295'
-              ],
-              'description':   "A security vulnerability has been identified in all supported versions\n\nof OpenSSL related to the verification of X.509 certificate chains\nthat include policy constraints.  Attackers may be able to exploit this\nvulnerability by creating a malicious certificate chain that triggers\nexponential use of computational resources, leading to a denial-of-service\n(DoS) attack on affected systems.\n\nPolicy processing is disabled by default but can be enabled by passing\nthe `-policy' argument to the command line utilities or by calling the\n`X509_VERIFY_PARAM_set1_policies()' function.",
-              'diffID':        'sha256:f3cad9f8ac1ee2f04e09db4d66d14c7806b881917a632bed9ae1117c6b10e1f9',
-              'fixedVersions': [
-                '1.1.1t-r2'
-              ],
-              'installedVersion': '1.1.1n-r0',
-              'packageName':      'libssl1.1',
-              'purl':             'pkg:apk/alpine/libssl1.1@1.1.1n-r0?arch=armv7&distro=3.15.4',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2023:3722',
-                'https://access.redhat.com/security/cve/CVE-2023-0464',
-                'https://bugzilla.redhat.com/2181082',
-                'https://bugzilla.redhat.com/2182561',
-                'https://bugzilla.redhat.com/2182565',
-                'https://bugzilla.redhat.com/2188461',
-                'https://bugzilla.redhat.com/2207947',
-                'https://errata.almalinux.org/9/ALSA-2023-3722.html',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=2017771e2db3e2b96f89bbe8766c3209f6a99545',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=2dcd4f1e3115f38cefa43e3efbe9b801c27e642e',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=879f7080d7e141f415c79eaa3a8ac4a3dad0348b',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=959c59c7a0164117e7f8366466a32bb1f8d77ff1',
-                'https://linux.oracle.com/cve/CVE-2023-0464.html',
-                'https://linux.oracle.com/errata/ELSA-2023-3722.html',
-                'https://lists.debian.org/debian-lts-announce/2023/06/msg00011.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-0464',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://security.netapp.com/advisory/ntap-20230406-0006/',
-                'https://security.netapp.com/advisory/ntap-20240621-0006/',
-                'https://ubuntu.com/security/notices/USN-6039-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.couchbase.com/alerts/',
-                'https://www.cve.org/CVERecord?id=CVE-2023-0464',
-                'https://www.debian.org/security/2023/dsa-5417',
-                'https://www.openssl.org/news/secadv/20230322.txt'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: Denial of service by excessive resource usage in verifying X509 policy constraints'
-            },
-            {
-              'cve':  'CVE-2022-2097',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N'
-                },
-                'nvd': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N'
-                },
-                'redhat': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-327'
-              ],
-              'description':   "AES OCB mode for 32-bit x86 platforms using the AES-NI assembly optimised implementation will not encrypt the entirety of the data under some circumstances. This could reveal sixteen bytes of data that was preexisting in the memory that wasn't written. In the special case of \"in place\" encryption, sixteen bytes of the plaintext would be revealed. Since OpenSSL does not support OCB based cipher suites for TLS and DTLS, they are both unaffected. Fixed in OpenSSL 3.0.5 (Affected 3.0.0-3.0.4). Fixed in OpenSSL 1.1.1q (Affected 1.1.1-1.1.1p).",
-              'diffID':        'sha256:f3cad9f8ac1ee2f04e09db4d66d14c7806b881917a632bed9ae1117c6b10e1f9',
-              'fixedVersions': [
-                '1.1.1q-r0'
-              ],
-              'installedVersion': '1.1.1n-r0',
-              'packageName':      'libssl1.1',
-              'purl':             'pkg:apk/alpine/libssl1.1@1.1.1n-r0?arch=armv7&distro=3.15.4',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2022:6224',
-                'https://access.redhat.com/security/cve/CVE-2022-2097',
-                'https://bugzilla.redhat.com/2081494',
-                'https://bugzilla.redhat.com/2087911',
-                'https://bugzilla.redhat.com/2087913',
-                'https://bugzilla.redhat.com/2097310',
-                'https://bugzilla.redhat.com/2104905',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2081494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2097310',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2100554',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2104905',
-                'https://cert-portal.siemens.com/productcert/pdf/ssa-332410.pdf',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-1292',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-2068',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-2097',
-                'https://errata.almalinux.org/9/ALSA-2022-6224.html',
-                'https://errata.rockylinux.org/RLSA-2022:5818',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=919925673d6c9cfed3c1085497f5dfbbed5fc431',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=a98f339ddd7e8f487d6e0088d4a9a42324885a93',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=919925673d6c9cfed3c1085497f5dfbbed5fc431',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=a98f339ddd7e8f487d6e0088d4a9a42324885a93',
-                'https://github.com/alexcrichton/openssl-src-rs',
-                'https://linux.oracle.com/cve/CVE-2022-2097.html',
-                'https://linux.oracle.com/errata/ELSA-2022-9955.html',
-                'https://lists.debian.org/debian-lts-announce/2023/02/msg00019.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/R6CK57NBQFTPUMXAPJURCGXUYT76NQAK',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/R6CK57NBQFTPUMXAPJURCGXUYT76NQAK/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/V6567JERRHHJW2GNGJGKDRNHR7SNPZK7',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/V6567JERRHHJW2GNGJGKDRNHR7SNPZK7/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VCMNWKERPBKOEBNL7CLTTX3ZZCZLH7XA',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VCMNWKERPBKOEBNL7CLTTX3ZZCZLH7XA/',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/R6CK57NBQFTPUMXAPJURCGXUYT76NQAK',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/R6CK57NBQFTPUMXAPJURCGXUYT76NQAK/',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/V6567JERRHHJW2GNGJGKDRNHR7SNPZK7',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/V6567JERRHHJW2GNGJGKDRNHR7SNPZK7/',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/VCMNWKERPBKOEBNL7CLTTX3ZZCZLH7XA',
-                'https://nvd.nist.gov/vuln/detail/CVE-2022-2097',
-                'https://rustsec.org/advisories/RUSTSEC-2022-0032.html',
-                'https://security.gentoo.org/glsa/202210-02',
-                'https://security.netapp.com/advisory/ntap-20220715-0011',
-                'https://security.netapp.com/advisory/ntap-20220715-0011/',
-                'https://security.netapp.com/advisory/ntap-20230420-0008',
-                'https://security.netapp.com/advisory/ntap-20230420-0008/',
-                'https://security.netapp.com/advisory/ntap-20240621-0006',
-                'https://security.netapp.com/advisory/ntap-20240621-0006/',
-                'https://ubuntu.com/security/notices/USN-5502-1',
-                'https://ubuntu.com/security/notices/USN-6457-1',
-                'https://www.cve.org/CVERecord?id=CVE-2022-2097',
-                'https://www.debian.org/security/2023/dsa-5343',
-                'https://www.openssl.org/news/secadv/20220705.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: AES OCB fails to encrypt some bytes'
-            },
-            {
-              'cve':  'CVE-2022-4304',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N'
-                },
-                'nvd': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N'
-                },
-                'redhat': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-203'
-              ],
-              'description':   'A timing based side channel exists in the OpenSSL RSA Decryption implementation\nwhich could be sufficient to recover a plaintext across a network in a\nBleichenbacher style attack. To achieve a successful decryption an attacker\nwould have to be able to send a very large number of trial messages for\ndecryption. The vulnerability affects all RSA padding modes: PKCS#1 v1.5,\nRSA-OEAP and RSASVE.\n\nFor example, in a TLS connection, RSA is commonly used by a client to send an\nencrypted pre-master secret to the server. An attacker that had observed a\ngenuine connection between a client and a server could use this flaw to send\ntrial messages to the server and record the time taken to process them. After a\nsufficiently large number of messages the attacker could recover the pre-master\nsecret used for the original connection and thus be able to decrypt the\napplication data sent over that connection.',
-              'diffID':        'sha256:f3cad9f8ac1ee2f04e09db4d66d14c7806b881917a632bed9ae1117c6b10e1f9',
-              'fixedVersions': [
-                '1.1.1t-r0'
-              ],
-              'installedVersion': '1.1.1n-r0',
-              'packageName':      'libssl1.1',
-              'purl':             'pkg:apk/alpine/libssl1.1@1.1.1n-r0?arch=armv7&distro=3.15.4',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2023:2165',
-                'https://access.redhat.com/security/cve/CVE-2022-4304',
-                'https://bugzilla.redhat.com/1960321',
-                'https://bugzilla.redhat.com/2164440',
-                'https://bugzilla.redhat.com/2164487',
-                'https://bugzilla.redhat.com/2164492',
-                'https://bugzilla.redhat.com/2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144000',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144003',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144006',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144008',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144010',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144012',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144015',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144017',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144019',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2145170',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2158412',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164440',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164487',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164488',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164492',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164497',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164499',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164500',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4203',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4304',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4450',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0215',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0216',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0217',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0286',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0401',
-                'https://errata.almalinux.org/9/ALSA-2023-2165.html',
-                'https://errata.rockylinux.org/RLSA-2023:0946',
-                'https://linux.oracle.com/cve/CVE-2022-4304.html',
-                'https://linux.oracle.com/errata/ELSA-2023-32791.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2022-4304',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0003',
-                'https://rustsec.org/advisories/RUSTSEC-2023-0007.html',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://ubuntu.com/security/notices/USN-5844-1',
-                'https://ubuntu.com/security/notices/USN-6564-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2022-4304',
-                'https://www.openssl.org/news/secadv/20230207.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: timing attack in RSA Decryption implementation'
-            },
-            {
-              'cve':  'CVE-2023-0465',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N'
-                },
-                'redhat': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-295'
-              ],
-              'description':   "Applications that use a non-default option when verifying certificates may be\nvulnerable to an attack from a malicious CA to circumvent certain checks.\n\nInvalid certificate policies in leaf certificates are silently ignored by\nOpenSSL and other certificate policy checks are skipped for that certificate.\nA malicious CA could use this to deliberately assert invalid certificate policies\nin order to circumvent policy checking on the certificate altogether.\n\nPolicy processing is disabled by default but can be enabled by passing\nthe `-policy' argument to the command line utilities or by calling the\n`X509_VERIFY_PARAM_set1_policies()' function.",
-              'diffID':        'sha256:f3cad9f8ac1ee2f04e09db4d66d14c7806b881917a632bed9ae1117c6b10e1f9',
-              'fixedVersions': [
-                '1.1.1t-r2'
-              ],
-              'installedVersion': '1.1.1n-r0',
-              'packageName':      'libssl1.1',
-              'purl':             'pkg:apk/alpine/libssl1.1@1.1.1n-r0?arch=armv7&distro=3.15.4',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2023:3722',
-                'https://access.redhat.com/security/cve/CVE-2023-0465',
-                'https://bugzilla.redhat.com/2181082',
-                'https://bugzilla.redhat.com/2182561',
-                'https://bugzilla.redhat.com/2182565',
-                'https://bugzilla.redhat.com/2188461',
-                'https://bugzilla.redhat.com/2207947',
-                'https://errata.almalinux.org/9/ALSA-2023-3722.html',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=10325176f3d3e98c6e2b3bf5ab1e3b334de6947a',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=1dd43e0709fece299b15208f36cc7c76209ba0bb',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=b013765abfa80036dc779dd0e50602c57bb3bf95',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=facfb1ab745646e97a1920977ae4a9965ea61d5c',
-                'https://linux.oracle.com/cve/CVE-2023-0465.html',
-                'https://linux.oracle.com/errata/ELSA-2023-3722.html',
-                'https://lists.debian.org/debian-lts-announce/2023/06/msg00011.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-0465',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://security.netapp.com/advisory/ntap-20230414-0001/',
-                'https://ubuntu.com/security/notices/USN-6039-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-0465',
-                'https://www.debian.org/security/2023/dsa-5417',
-                'https://www.openssl.org/news/secadv/20230328.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: Invalid certificate policies in leaf certificates are silently ignored'
-            },
-            {
-              'cve':  'CVE-2023-2650',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '6.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-770'
-              ],
-              'description':   "Issue summary: Processing some specially crafted ASN.1 object identifiers or\ndata containing them may be very slow.\n\nImpact summary: Applications that use OBJ_obj2txt() directly, or use any of\nthe OpenSSL subsystems OCSP, PKCS7/SMIME, CMS, CMP/CRMF or TS with no message\nsize limit may experience notable to very long delays when processing those\nmessages, which may lead to a Denial of Service.\n\nAn OBJECT IDENTIFIER is composed of a series of numbers - sub-identifiers -\nmost of which have no size limit.  OBJ_obj2txt() may be used to translate\nan ASN.1 OBJECT IDENTIFIER given in DER encoding form (using the OpenSSL\ntype ASN1_OBJECT) to its canonical numeric text form, which are the\nsub-identifiers of the OBJECT IDENTIFIER in decimal form, separated by\nperiods.\n\nWhen one of the sub-identifiers in the OBJECT IDENTIFIER is very large\n(these are sizes that are seen as absurdly large, taking up tens or hundreds\nof KiBs), the translation to a decimal number in text may take a very long\ntime.  The time complexity is O(n^2) with 'n' being the size of the\nsub-identifiers in bytes (*).\n\nWith OpenSSL 3.0, support to fetch cryptographic algorithms using names /\nidentifiers in string form was introduced.  This includes using OBJECT\nIDENTIFIERs in canonical numeric text form as identifiers for fetching\nalgorithms.\n\nSuch OBJECT IDENTIFIERs may be received through the ASN.1 structure\nAlgorithmIdentifier, which is commonly used in multiple protocols to specify\nwhat cryptographic algorithm should be used to sign or verify, encrypt or\ndecrypt, or digest passed data.\n\nApplications that call OBJ_obj2txt() directly with untrusted data are\naffected, with any version of OpenSSL.  If the use is for the mere purpose\nof display, the severity is considered low.\n\nIn OpenSSL 3.0 and newer, this affects the subsystems OCSP, PKCS7/SMIME,\nCMS, CMP/CRMF or TS.  It also impacts anything that processes X.509\ncertificates, including simple things like verifying its signature.\n\nThe impact on TLS is relatively low, because all versions of OpenSSL have a\n100KiB limit on the peer's certificate chain.  Additionally, this only\nimpacts clients, or servers that have explicitly enabled client\nauthentication.\n\nIn OpenSSL 1.1.1 and 1.0.2, this only affects displaying diverse objects,\nsuch as X.509 certificates.  This is assumed to not happen in such a way\nthat it would cause a Denial of Service, so these versions are considered\nnot affected by this issue in such a way that it would be cause for concern,\nand the severity is therefore considered low.",
-              'diffID':        'sha256:f3cad9f8ac1ee2f04e09db4d66d14c7806b881917a632bed9ae1117c6b10e1f9',
-              'fixedVersions': [
-                '1.1.1u-r0'
-              ],
-              'installedVersion': '1.1.1n-r0',
-              'packageName':      'libssl1.1',
-              'purl':             'pkg:apk/alpine/libssl1.1@1.1.1n-r0?arch=armv7&distro=3.15.4',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2023/05/30/1',
-                'https://access.redhat.com/errata/RHSA-2023:6330',
-                'https://access.redhat.com/security/cve/CVE-2023-2650',
-                'https://bugzilla.redhat.com/1858038',
-                'https://bugzilla.redhat.com/2207947',
-                'https://errata.almalinux.org/9/ALSA-2023-6330.html',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=423a2bc737a908ad0c77bda470b2b59dc879936b',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=853c5e56ee0b8650c73140816bb8b91d6163422c',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=9e209944b35cf82368071f160a744b6178f9b098',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=db779b0e10b047f2585615e0b8f2acdf21f8544a',
-                'https://linux.oracle.com/cve/CVE-2023-2650.html',
-                'https://linux.oracle.com/errata/ELSA-2023-6330.html',
-                'https://lists.debian.org/debian-lts-announce/2023/06/msg00011.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-2650',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0009',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://security.netapp.com/advisory/ntap-20230703-0001/',
-                'https://security.netapp.com/advisory/ntap-20231027-0009/',
-                'https://ubuntu.com/security/notices/USN-6119-1',
-                'https://ubuntu.com/security/notices/USN-6188-1',
-                'https://ubuntu.com/security/notices/USN-6672-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-2650',
-                'https://www.debian.org/security/2023/dsa-5417',
-                'https://www.openssl.org/news/secadv/20230530.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: Possible DoS translating ASN.1 object identifiers'
-            },
-            {
-              'cve':  'CVE-2023-3446',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L'
-                },
-                'redhat': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L'
-                }
-              },
-              'cwes': [
-                'CWE-606',
-                'CWE-1333'
-              ],
-              'description':   "Issue summary: Checking excessively long DH keys or parameters may be very slow.\n\nImpact summary: Applications that use the functions DH_check(), DH_check_ex()\nor EVP_PKEY_param_check() to check a DH key or DH parameters may experience long\ndelays. Where the key or parameters that are being checked have been obtained\nfrom an untrusted source this may lead to a Denial of Service.\n\nThe function DH_check() performs various checks on DH parameters. One of those\nchecks confirms that the modulus ('p' parameter) is not too large. Trying to use\na very large modulus is slow and OpenSSL will not normally use a modulus which\nis over 10,000 bits in length.\n\nHowever the DH_check() function checks numerous aspects of the key or parameters\nthat have been supplied. Some of those checks use the supplied modulus value\neven if it has already been found to be too large.\n\nAn application that calls DH_check() and supplies a key or parameters obtained\nfrom an untrusted source could be vulernable to a Denial of Service attack.\n\nThe function DH_check() is itself called by a number of other OpenSSL functions.\nAn application calling any of those other functions may similarly be affected.\nThe other functions affected by this are DH_check_ex() and\nEVP_PKEY_param_check().\n\nAlso vulnerable are the OpenSSL dhparam and pkeyparam command line applications\nwhen using the '-check' option.\n\nThe OpenSSL SSL/TLS implementation is not affected by this issue.\nThe OpenSSL 3.0 and 3.1 FIPS providers are not affected by this issue.",
-              'diffID':        'sha256:f3cad9f8ac1ee2f04e09db4d66d14c7806b881917a632bed9ae1117c6b10e1f9',
-              'fixedVersions': [
-                '1.1.1u-r2'
-              ],
-              'installedVersion': '1.1.1n-r0',
-              'packageName':      'libssl1.1',
-              'purl':             'pkg:apk/alpine/libssl1.1@1.1.1n-r0?arch=armv7&distro=3.15.4',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2023/07/19/4',
-                'http://www.openwall.com/lists/oss-security/2023/07/19/5',
-                'http://www.openwall.com/lists/oss-security/2023/07/19/6',
-                'http://www.openwall.com/lists/oss-security/2023/07/31/1',
-                'http://www.openwall.com/lists/oss-security/2024/05/16/1',
-                'https://access.redhat.com/errata/RHSA-2024:2447',
-                'https://access.redhat.com/security/cve/CVE-2023-3446',
-                'https://bugzilla.redhat.com/2223016',
-                'https://bugzilla.redhat.com/2224962',
-                'https://bugzilla.redhat.com/2227852',
-                'https://bugzilla.redhat.com/2248616',
-                'https://bugzilla.redhat.com/2257571',
-                'https://bugzilla.redhat.com/2258502',
-                'https://bugzilla.redhat.com/2259944',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2224962',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2257582',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2257583',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2258677',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2258688',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2258691',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2258694',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2258700',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-36763',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-36764',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3446',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45229',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45231',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45232',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45233',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45235',
-                'https://errata.almalinux.org/9/ALSA-2024-2447.html',
-                'https://errata.rockylinux.org/RLSA-2024:2264',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=1fa20cf2f506113c761777127a38bce5068740eb',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=8780a896543a654e757db1b9396383f9d8095528',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=9a0a4d3c1e7138915563c0df4fe6a3f9377b839c',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=fc9867c1e03c22ebf56943be205202e576aabf23',
-                'https://linux.oracle.com/cve/CVE-2023-3446.html',
-                'https://linux.oracle.com/errata/ELSA-2024-2447.html',
-                'https://lists.debian.org/debian-lts-announce/2023/08/msg00019.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-3446',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://security.netapp.com/advisory/ntap-20230803-0011/',
-                'https://ubuntu.com/security/notices/USN-6435-1',
-                'https://ubuntu.com/security/notices/USN-6435-2',
-                'https://ubuntu.com/security/notices/USN-6450-1',
-                'https://ubuntu.com/security/notices/USN-6709-1',
-                'https://ubuntu.com/security/notices/USN-7018-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-3446',
-                'https://www.openssl.org/news/secadv/20230719.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: Excessive time spent checking DH keys and parameters'
-            },
-            {
-              'cve':  'CVE-2023-3817',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L'
-                },
-                'redhat': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L'
-                }
-              },
-              'cwes': [
-                'CWE-606',
-                'CWE-834'
-              ],
-              'description':   'Issue summary: Checking excessively long DH keys or parameters may be very slow.\n\nImpact summary: Applications that use the functions DH_check(), DH_check_ex()\nor EVP_PKEY_param_check() to check a DH key or DH parameters may experience long\ndelays. Where the key or parameters that are being checked have been obtained\nfrom an untrusted source this may lead to a Denial of Service.\n\nThe function DH_check() performs various checks on DH parameters. After fixing\nCVE-2023-3446 it was discovered that a large q parameter value can also trigger\nan overly long computation during some of these checks. A correct q value,\nif present, cannot be larger than the modulus p parameter, thus it is\nunnecessary to perform these checks if q is larger than p.\n\nAn application that calls DH_check() and supplies a key or parameters obtained\nfrom an untrusted source could be vulnerable to a Denial of Service attack.\n\nThe function DH_check() is itself called by a number of other OpenSSL functions.\nAn application calling any of those other functions may similarly be affected.\nThe other functions affected by this are DH_check_ex() and\nEVP_PKEY_param_check().\n\nAlso vulnerable are the OpenSSL dhparam and pkeyparam command line applications\nwhen using the "-check" option.\n\nThe OpenSSL SSL/TLS implementation is not affected by this issue.\n\nThe OpenSSL 3.0 and 3.1 FIPS providers are not affected by this issue.',
-              'diffID':        'sha256:f3cad9f8ac1ee2f04e09db4d66d14c7806b881917a632bed9ae1117c6b10e1f9',
-              'fixedVersions': [
-                '1.1.1v-r0'
-              ],
-              'installedVersion': '1.1.1n-r0',
-              'packageName':      'libssl1.1',
-              'purl':             'pkg:apk/alpine/libssl1.1@1.1.1n-r0?arch=armv7&distro=3.15.4',
-              'references':       [
-                'http://seclists.org/fulldisclosure/2023/Jul/43',
-                'http://www.openwall.com/lists/oss-security/2023/07/31/1',
-                'http://www.openwall.com/lists/oss-security/2023/09/22/11',
-                'http://www.openwall.com/lists/oss-security/2023/09/22/9',
-                'http://www.openwall.com/lists/oss-security/2023/11/06/2',
-                'https://access.redhat.com/errata/RHSA-2024:2447',
-                'https://access.redhat.com/security/cve/CVE-2023-3817',
-                'https://bugzilla.redhat.com/2223016',
-                'https://bugzilla.redhat.com/2224962',
-                'https://bugzilla.redhat.com/2227852',
-                'https://bugzilla.redhat.com/2248616',
-                'https://bugzilla.redhat.com/2257571',
-                'https://bugzilla.redhat.com/2258502',
-                'https://bugzilla.redhat.com/2259944',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2224962',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2227852',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2248616',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2270358',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3446',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3817',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-5678',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-2408',
-                'https://errata.almalinux.org/9/ALSA-2024-2447.html',
-                'https://errata.rockylinux.org/RLSA-2023:7877',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=6a1eb62c29db6cb5eec707f9338aee00f44e26f5',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=869ad69aadd985c7b8ca6f4e5dd0eb274c9f3644',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=9002fd07327a91f35ba6c1307e71fa6fd4409b7f',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=91ddeba0f2269b017dc06c46c993a788974b1aa5',
-                'https://linux.oracle.com/cve/CVE-2023-3817.html',
-                'https://linux.oracle.com/errata/ELSA-2024-2447.html',
-                'https://lists.debian.org/debian-lts-announce/2023/08/msg00019.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-3817',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://security.netapp.com/advisory/ntap-20230818-0014/',
-                'https://security.netapp.com/advisory/ntap-20231027-0008/',
-                'https://security.netapp.com/advisory/ntap-20240621-0006/',
-                'https://ubuntu.com/security/notices/USN-6435-1',
-                'https://ubuntu.com/security/notices/USN-6435-2',
-                'https://ubuntu.com/security/notices/USN-6450-1',
-                'https://ubuntu.com/security/notices/USN-6709-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-3817',
-                'https://www.openssl.org/news/secadv/20230731.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'OpenSSL: Excessive time spent checking DH q parameter value'
-            },
-            {
-              'cve':  'CVE-2023-5678',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L'
-                },
-                'redhat': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L'
-                }
-              },
-              'cwes': [
-                'CWE-606',
-                'CWE-754'
-              ],
-              'description':   "Issue summary: Generating excessively long X9.42 DH keys or checking\nexcessively long X9.42 DH keys or parameters may be very slow.\n\nImpact summary: Applications that use the functions DH_generate_key() to\ngenerate an X9.42 DH key may experience long delays.  Likewise, applications\nthat use DH_check_pub_key(), DH_check_pub_key_ex() or EVP_PKEY_public_check()\nto check an X9.42 DH key or X9.42 DH parameters may experience long delays.\nWhere the key or parameters that are being checked have been obtained from\nan untrusted source this may lead to a Denial of Service.\n\nWhile DH_check() performs all the necessary checks (as of CVE-2023-3817),\nDH_check_pub_key() doesn't make any of these checks, and is therefore\nvulnerable for excessively large P and Q parameters.\n\nLikewise, while DH_generate_key() performs a check for an excessively large\nP, it doesn't check for an excessively large Q.\n\nAn application that calls DH_generate_key() or DH_check_pub_key() and\nsupplies a key or parameters obtained from an untrusted source could be\nvulnerable to a Denial of Service attack.\n\nDH_generate_key() and DH_check_pub_key() are also called by a number of\nother OpenSSL functions.  An application calling any of those other\nfunctions may similarly be affected.  The other functions affected by this\nare DH_check_pub_key_ex(), EVP_PKEY_public_check(), and EVP_PKEY_generate().\n\nAlso vulnerable are the OpenSSL pkey command line application when using the\n\"-pubcheck\" option, as well as the OpenSSL genpkey command line application.\n\nThe OpenSSL SSL/TLS implementation is not affected by this issue.\n\nThe OpenSSL 3.0 and 3.1 FIPS providers are not affected by this issue.",
-              'diffID':        'sha256:f3cad9f8ac1ee2f04e09db4d66d14c7806b881917a632bed9ae1117c6b10e1f9',
-              'fixedVersions': [
-                '1.1.1w-r1'
-              ],
-              'installedVersion': '1.1.1n-r0',
-              'packageName':      'libssl1.1',
-              'purl':             'pkg:apk/alpine/libssl1.1@1.1.1n-r0?arch=armv7&distro=3.15.4',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2024/03/11/1',
-                'https://access.redhat.com/errata/RHSA-2024:2447',
-                'https://access.redhat.com/security/cve/CVE-2023-5678',
-                'https://bugzilla.redhat.com/2223016',
-                'https://bugzilla.redhat.com/2224962',
-                'https://bugzilla.redhat.com/2227852',
-                'https://bugzilla.redhat.com/2248616',
-                'https://bugzilla.redhat.com/2257571',
-                'https://bugzilla.redhat.com/2258502',
-                'https://bugzilla.redhat.com/2259944',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2224962',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2227852',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2248616',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2270358',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3446',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3817',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-5678',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-2408',
-                'https://errata.almalinux.org/9/ALSA-2024-2447.html',
-                'https://errata.rockylinux.org/RLSA-2023:7877',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=34efaef6c103d636ab507a0cc34dca4d3aecc055',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=710fee740904b6290fef0dd5536fbcedbc38ff0c',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=db925ae2e65d0d925adef429afc37f75bd1c2017',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=ddeb4b6c6d527e54ce9a99cba785c0f7776e54b6',
-                'https://linux.oracle.com/cve/CVE-2023-5678.html',
-                'https://linux.oracle.com/errata/ELSA-2024-2447.html',
-                'https://lists.debian.org/debian-lts-announce/2024/10/msg00033.html',
-                'https://lists.debian.org/debian-lts-announce/2024/11/msg00000.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-5678',
-                'https://security.netapp.com/advisory/ntap-20231130-0010/',
-                'https://ubuntu.com/security/notices/USN-6622-1',
-                'https://ubuntu.com/security/notices/USN-6632-1',
-                'https://ubuntu.com/security/notices/USN-6709-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-5678',
-                'https://www.openssl.org/news/secadv/20231106.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: Generating excessively long X9.42 DH keys or checking excessively long X9.42 DH keys or parameters may be very slow'
-            },
-            {
-              'cve':  'CVE-2022-37434',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '9.8',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-787',
-                'CWE-120'
-              ],
-              'description':   'zlib through 1.2.12 has a heap-based buffer over-read or buffer overflow in inflate in inflate.c via a large gzip header extra field. NOTE: only applications that call inflateGetHeader are affected. Some common applications bundle the affected zlib source code but may be unable to call inflateGetHeader (e.g., see the nodejs/node reference).',
-              'diffID':        'sha256:f3cad9f8ac1ee2f04e09db4d66d14c7806b881917a632bed9ae1117c6b10e1f9',
-              'fixedVersions': [
-                '1.2.12-r2'
-              ],
-              'installedVersion': '1.2.12-r0',
-              'packageName':      'zlib',
-              'purl':             'pkg:apk/alpine/zlib@1.2.12-r0?arch=armv7&distro=3.15.4',
-              'references':       [
-                'http://seclists.org/fulldisclosure/2022/Oct/37',
-                'http://seclists.org/fulldisclosure/2022/Oct/38',
-                'http://seclists.org/fulldisclosure/2022/Oct/41',
-                'http://seclists.org/fulldisclosure/2022/Oct/42',
-                'http://www.openwall.com/lists/oss-security/2022/08/05/2',
-                'http://www.openwall.com/lists/oss-security/2022/08/09/1',
-                'https://access.redhat.com/errata/RHSA-2022:8291',
-                'https://access.redhat.com/security/cve/CVE-2022-37434',
-                'https://bugzilla.redhat.com/2116639',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2053198',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2077431',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2081296',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2116639',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-37434',
-                'https://errata.almalinux.org/9/ALSA-2022-8291.html',
-                'https://errata.rockylinux.org/RLSA-2022:8291',
-                'https://github.com/curl/curl/issues/9271',
-                'https://github.com/ivd38/zlib_overflow',
-                'https://github.com/madler/zlib/blob/21767c654d31d2dccdde4330529775c6c5fd5389/zlib.h#L1062-L1063',
-                'https://github.com/madler/zlib/commit/1eb7682f845ac9e9bf9ae35bbfb3bad5dacbd91d',
-                'https://github.com/madler/zlib/commit/eff308af425b67093bab25f80f1ae950166bece1',
-                'https://github.com/nodejs/node/blob/75b68c6e4db515f76df73af476eccf382bbcb00a/deps/zlib/inflate.c#L762-L764',
-                'https://linux.oracle.com/cve/CVE-2022-37434.html',
-                'https://linux.oracle.com/errata/ELSA-2023-1095.html',
-                'https://lists.debian.org/debian-lts-announce/2022/09/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JWN4VE3JQR4O2SOUS5TXNLANRPMHWV4I/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NMBOJ77A7T7PQCARMDUK75TE6LLESZ3O/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PAVPQNCG3XRLCLNSQRM3KAN5ZFMVXVTY/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/X5U7OTKZSHY2I3ZFJSR2SHFHW72RKGDK/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YRQAI7H4M4RQZ2IWZUEEXECBE5D56BH2/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2022-37434',
-                'https://security.netapp.com/advisory/ntap-20220901-0005/',
-                'https://security.netapp.com/advisory/ntap-20230427-0007/',
-                'https://support.apple.com/kb/HT213488',
-                'https://support.apple.com/kb/HT213489',
-                'https://support.apple.com/kb/HT213490',
-                'https://support.apple.com/kb/HT213491',
-                'https://support.apple.com/kb/HT213493',
-                'https://support.apple.com/kb/HT213494',
-                'https://ubuntu.com/security/notices/USN-5570-1',
-                'https://ubuntu.com/security/notices/USN-5570-2',
-                'https://ubuntu.com/security/notices/USN-5573-1',
-                'https://ubuntu.com/security/notices/USN-6736-1',
-                'https://ubuntu.com/security/notices/USN-6736-2',
-                'https://www.cve.org/CVERecord?id=CVE-2022-37434',
-                'https://www.debian.org/security/2022/dsa-5218'
-              ],
-              'severity':   'CRITICAL',
-              'suppressed': false,
-              'title':      'zlib: heap-based buffer over-read and overflow in inflate() in inflate.c via a large gzip header extra field'
-            }
-          ]
-        }
-      ],
-      'summary': {
-        'critical':   1,
-        'high':       8,
-        'low':        0,
-        'medium':     14,
-        'suppressed': 0,
-        'unknown':    0
-      }
-    }
-  },
-  {
-    'id':    'default/b4a74d02c43c195fbbe594d1e410ef628526de71cbbd467fd35fa37642640f45',
-    'type':  'storage.sbomscanner.kubewarden.io.vulnerabilityreport',
-    'links': {
-      'patch':  'https://localhost:8005/v1/storage.sbomscanner.kubewarden.io.vulnerabilityreports/default/b4a74d02c43c195fbbe594d1e410ef628526de71cbbd467fd35fa37642640f45',
-      'remove': 'https://localhost:8005/v1/storage.sbomscanner.kubewarden.io.vulnerabilityreports/default/b4a74d02c43c195fbbe594d1e410ef628526de71cbbd467fd35fa37642640f45',
-      'self':   'https://localhost:8005/v1/storage.sbomscanner.kubewarden.io.vulnerabilityreports/default/b4a74d02c43c195fbbe594d1e410ef628526de71cbbd467fd35fa37642640f45',
-      'update': 'https://localhost:8005/v1/storage.sbomscanner.kubewarden.io.vulnerabilityreports/default/b4a74d02c43c195fbbe594d1e410ef628526de71cbbd467fd35fa37642640f45',
-      'view':   'https://localhost:8005/apis/storage.sbomscanner.kubewarden.io/v1alpha1/namespaces/default/vulnerabilityreports/b4a74d02c43c195fbbe594d1e410ef628526de71cbbd467fd35fa37642640f45'
-    },
-    'apiVersion':    'storage.sbomscanner.kubewarden.io/v1alpha1',
-    'imageMetadata': {
-      'digest':      'sha256:b836e8a5a3ad3a108cdcdad7087a63089b2dd2e2f30bd9121edd8dbc06a3124d',
-      'platform':    'linux/amd64',
-      'registry':    'lsong-demo1',
-      'registryURI': 'registry-1.docker.io',
-      'repository':  'library/alpine',
-      'tag':         '3.19.2'
-    },
-    'kind':     'VulnerabilityReport',
-    'metadata': {
-      'creationTimestamp': '2026-01-14T18:52:05Z',
-      'fields':            [
-        'b4a74d02c43c195fbbe594d1e410ef628526de71cbbd467fd35fa37642640f45',
-        'registry-1.docker.io/library/alpine:3.19.2',
-        'linux/amd64',
-        '22 (0 suppressed)'
-      ],
-      'labels': {
-        'app.kubernetes.io/managed-by':          'sbomscanner',
-        'app.kubernetes.io/part-of':             'sbomscanner',
-        'sbomscanner.kubewarden.io/scanjob-uid': '445c600a-c4b6-40b3-bd71-f2d2140a37d5'
-      },
-      'name':            'b4a74d02c43c195fbbe594d1e410ef628526de71cbbd467fd35fa37642640f45',
-      'namespace':       'default',
-      'ownerReferences': [
-        {
-          'apiVersion':         'storage.sbomscanner.kubewarden.io/v1alpha1',
-          'blockOwnerDeletion': true,
-          'controller':         true,
-          'kind':               'SBOM',
-          'name':               'b4a74d02c43c195fbbe594d1e410ef628526de71cbbd467fd35fa37642640f45',
-          'uid':                '16ad48f3-8c48-4ea5-9aee-b91412498d29'
-        }
-      ],
-      'relationships': [
-        {
-          'fromId':   'default/b4a74d02c43c195fbbe594d1e410ef628526de71cbbd467fd35fa37642640f45',
-          'fromType': 'storage.sbomscanner.kubewarden.io.sbom',
-          'rel':      'owner',
-          'state':    'active',
-          'message':  'Resource is current'
-        }
-      ],
-      'resourceVersion': '1',
-      'state':           {
-        'error':         false,
-        'message':       'Resource is current',
-        'name':          'active',
-        'transitioning': false
-      },
-      'uid': 'a6175624-6d58-4963-a983-5a22be8ef61f'
-    },
-    'report': {
-      'results': [
-        {
-          'class':           'os-pkgs',
-          'target':          '/var/run/worker/trivy.sbom.2317011425.json (alpine 3.19.2)',
-          'type':            'alpine',
-          'vulnerabilities': [
-            {
-              'cve':  'CVE-2024-58251',
-              'cwes': [
-                'CWE-150'
-              ],
-              'description':   'In netstat in BusyBox through 1.37.0, local users can launch of network application with an argv[0] containing an ANSI terminal escape sequence, leading to a denial of service (terminal locked up) when netstat is used by a victim.',
-              'diffID':        'sha256:af9a70194aa4d12f967dbd4bcb1ce9c98ba42adb4ec05536080fd4560155e809',
-              'fixedVersions': [
-                '1.36.1-r21'
-              ],
-              'installedVersion': '1.36.1-r19',
-              'packageName':      'busybox',
-              'purl':             'pkg:apk/alpine/busybox@1.36.1-r19?arch=x86_64&distro=3.19.2',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2025/04/23/6',
-                'https://bugs.busybox.net/show_bug.cgi?id=15922',
-                'https://www.busybox.net',
-                'https://www.busybox.net/downloads/',
-                'https://www.cve.org/CVERecord?id=CVE-2024-58251'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'In netstat in BusyBox through 1.37.0, local users can launch of networ ...'
-            },
-            {
-              'cve':  'CVE-2025-46394',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '3.3',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-451'
-              ],
-              'description':   'In tar in BusyBox through 1.37.0, a TAR archive can have filenames hidden from a listing through the use of terminal escape sequences.',
-              'diffID':        'sha256:af9a70194aa4d12f967dbd4bcb1ce9c98ba42adb4ec05536080fd4560155e809',
-              'fixedVersions': [
-                '1.36.1-r21'
-              ],
-              'installedVersion': '1.36.1-r19',
-              'packageName':      'busybox',
-              'purl':             'pkg:apk/alpine/busybox@1.36.1-r19?arch=x86_64&distro=3.19.2',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2025/04/23/5',
-                'http://www.openwall.com/lists/oss-security/2025/04/24/3',
-                'https://bugs.busybox.net/show_bug.cgi?id=16018',
-                'https://lists.busybox.net/pipermail/busybox/2024-July/090806.html',
-                'https://lists.busybox.net/pipermail/busybox/2024-July/090814.html',
-                'https://www.busybox.net',
-                'https://www.busybox.net/downloads/',
-                'https://www.cve.org/CVERecord?id=CVE-2025-46394',
-                'https://www.openwall.com/lists/oss-security/2025/04/23/1'
-              ],
-              'severity':   'LOW',
-              'suppressed': false,
-              'title':      'In tar in BusyBox through 1.37.0, a TAR archive can have filenames hid ...'
-            },
-            {
-              'cve':  'CVE-2024-58251',
-              'cwes': [
-                'CWE-150'
-              ],
-              'description':   'In netstat in BusyBox through 1.37.0, local users can launch of network application with an argv[0] containing an ANSI terminal escape sequence, leading to a denial of service (terminal locked up) when netstat is used by a victim.',
-              'diffID':        'sha256:af9a70194aa4d12f967dbd4bcb1ce9c98ba42adb4ec05536080fd4560155e809',
-              'fixedVersions': [
-                '1.36.1-r21'
-              ],
-              'installedVersion': '1.36.1-r19',
-              'packageName':      'busybox-binsh',
-              'purl':             'pkg:apk/alpine/busybox-binsh@1.36.1-r19?arch=x86_64&distro=3.19.2',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2025/04/23/6',
-                'https://bugs.busybox.net/show_bug.cgi?id=15922',
-                'https://www.busybox.net',
-                'https://www.busybox.net/downloads/',
-                'https://www.cve.org/CVERecord?id=CVE-2024-58251'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'In netstat in BusyBox through 1.37.0, local users can launch of networ ...'
-            },
-            {
-              'cve':  'CVE-2025-46394',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '3.3',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-451'
-              ],
-              'description':   'In tar in BusyBox through 1.37.0, a TAR archive can have filenames hidden from a listing through the use of terminal escape sequences.',
-              'diffID':        'sha256:af9a70194aa4d12f967dbd4bcb1ce9c98ba42adb4ec05536080fd4560155e809',
-              'fixedVersions': [
-                '1.36.1-r21'
-              ],
-              'installedVersion': '1.36.1-r19',
-              'packageName':      'busybox-binsh',
-              'purl':             'pkg:apk/alpine/busybox-binsh@1.36.1-r19?arch=x86_64&distro=3.19.2',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2025/04/23/5',
-                'http://www.openwall.com/lists/oss-security/2025/04/24/3',
-                'https://bugs.busybox.net/show_bug.cgi?id=16018',
-                'https://lists.busybox.net/pipermail/busybox/2024-July/090806.html',
-                'https://lists.busybox.net/pipermail/busybox/2024-July/090814.html',
-                'https://www.busybox.net',
-                'https://www.busybox.net/downloads/',
-                'https://www.cve.org/CVERecord?id=CVE-2025-46394',
-                'https://www.openwall.com/lists/oss-security/2025/04/23/1'
-              ],
-              'severity':   'LOW',
-              'suppressed': false,
-              'title':      'In tar in BusyBox through 1.37.0, a TAR archive can have filenames hid ...'
-            },
-            {
-              'cve':  'CVE-2024-6119',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-843'
-              ],
-              'description':   "Issue summary: Applications performing certificate name checks (e.g., TLS\nclients checking server certificates) may attempt to read an invalid memory\naddress resulting in abnormal termination of the application process.\n\nImpact summary: Abnormal termination of an application can a cause a denial of\nservice.\n\nApplications performing certificate name checks (e.g., TLS clients checking\nserver certificates) may attempt to read an invalid memory address when\ncomparing the expected name with an `otherName` subject alternative name of an\nX.509 certificate. This may result in an exception that terminates the\napplication program.\n\nNote that basic certificate chain validation (signatures, dates, ...) is not\naffected, the denial of service can occur only when the application also\nspecifies an expected DNS name, Email address or IP address.\n\nTLS servers rarely solicit client certificates, and even when they do, they\ngenerally don't perform a name check against a reference identifier (expected\nidentity), but rather extract the presented identity after checking the\ncertificate chain.  So TLS servers are generally not affected and the severity\nof the issue is Moderate.\n\nThe FIPS modules in 3.3, 3.2, 3.1 and 3.0 are not affected by this issue.",
-              'diffID':        'sha256:af9a70194aa4d12f967dbd4bcb1ce9c98ba42adb4ec05536080fd4560155e809',
-              'fixedVersions': [
-                '3.1.7-r0'
-              ],
-              'installedVersion': '3.1.5-r0',
-              'packageName':      'libcrypto3',
-              'purl':             'pkg:apk/alpine/libcrypto3@3.1.5-r0?arch=x86_64&distro=3.19.2',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2024/09/03/4',
-                'https://access.redhat.com/errata/RHSA-2024:8935',
-                'https://access.redhat.com/security/cve/CVE-2024-6119',
-                'https://bugzilla.redhat.com/2306158',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2306158',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-6119',
-                'https://errata.almalinux.org/9/ALSA-2024-8935.html',
-                'https://errata.rockylinux.org/RLSA-2024:6783',
-                'https://github.com/openssl/openssl/commit/05f360d9e849a1b277db628f1f13083a7f8dd04f',
-                'https://github.com/openssl/openssl/commit/06d1dc3fa96a2ba5a3e22735a033012aadc9f0d6',
-                'https://github.com/openssl/openssl/commit/621f3729831b05ee828a3203eddb621d014ff2b2',
-                'https://github.com/openssl/openssl/commit/7dfcee2cd2a63b2c64b9b4b0850be64cb695b0a0',
-                'https://github.com/openssl/openssl/security/advisories/GHSA-5qrj-vq78-58fj',
-                'https://linux.oracle.com/cve/CVE-2024-6119.html',
-                'https://linux.oracle.com/errata/ELSA-2024-8935.html',
-                'https://lists.freebsd.org/archives/freebsd-security/2024-September/000303.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2024-6119',
-                'https://openssl-library.org/news/secadv/20240903.txt',
-                'https://security.netapp.com/advisory/ntap-20240912-0001/',
-                'https://ubuntu.com/security/notices/USN-6986-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2024-6119'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: Possible denial of service in X.509 name checks'
-            },
-            {
-              'cve':  'CVE-2024-13176',
-              'cvss': {
-                'redhat': {
-                  'v3score':  '4.7',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-385'
-              ],
-              'description':   'Issue summary: A timing side-channel which could potentially allow recovering\nthe private key exists in the ECDSA signature computation.\n\nImpact summary: A timing side-channel in ECDSA signature computations\ncould allow recovering the private key by an attacker. However, measuring\nthe timing would require either local access to the signing application or\na very fast network connection with low latency.\n\nThere is a timing signal of around 300 nanoseconds when the top word of\nthe inverted ECDSA nonce value is zero. This can happen with significant\nprobability only for some of the supported elliptic curves. In particular\nthe NIST P-521 curve is affected. To be able to measure this leak, the attacker\nprocess must either be located in the same physical computer or must\nhave a very fast network connection with low latency. For that reason\nthe severity of this vulnerability is Low.\n\nThe FIPS modules in 3.4, 3.3, 3.2, 3.1 and 3.0 are affected by this issue.',
-              'diffID':        'sha256:af9a70194aa4d12f967dbd4bcb1ce9c98ba42adb4ec05536080fd4560155e809',
-              'fixedVersions': [
-                '3.1.8-r0'
-              ],
-              'installedVersion': '3.1.5-r0',
-              'packageName':      'libcrypto3',
-              'purl':             'pkg:apk/alpine/libcrypto3@3.1.5-r0?arch=x86_64&distro=3.19.2',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2025/01/20/2',
-                'https://access.redhat.com/errata/RHSA-2025:16046',
-                'https://access.redhat.com/security/cve/CVE-2024-13176',
-                'https://bugzilla.redhat.com/2359885',
-                'https://bugzilla.redhat.com/2359888',
-                'https://bugzilla.redhat.com/2359892',
-                'https://bugzilla.redhat.com/2359894',
-                'https://bugzilla.redhat.com/2359895',
-                'https://bugzilla.redhat.com/2359899',
-                'https://bugzilla.redhat.com/2359900',
-                'https://bugzilla.redhat.com/2359902',
-                'https://bugzilla.redhat.com/2359903',
-                'https://bugzilla.redhat.com/2359911',
-                'https://bugzilla.redhat.com/2359918',
-                'https://bugzilla.redhat.com/2359920',
-                'https://bugzilla.redhat.com/2359924',
-                'https://bugzilla.redhat.com/2359928',
-                'https://bugzilla.redhat.com/2359930',
-                'https://bugzilla.redhat.com/2359932',
-                'https://bugzilla.redhat.com/2359934',
-                'https://bugzilla.redhat.com/2359938',
-                'https://bugzilla.redhat.com/2359940',
-                'https://bugzilla.redhat.com/2359943',
-                'https://bugzilla.redhat.com/2359944',
-                'https://bugzilla.redhat.com/2359945',
-                'https://bugzilla.redhat.com/2359947',
-                'https://bugzilla.redhat.com/2359950',
-                'https://bugzilla.redhat.com/2359963',
-                'https://bugzilla.redhat.com/2359964',
-                'https://bugzilla.redhat.com/2359972',
-                'https://bugzilla.redhat.com/2370920',
-                'https://bugzilla.redhat.com/2380264',
-                'https://bugzilla.redhat.com/2380273',
-                'https://bugzilla.redhat.com/2380274',
-                'https://bugzilla.redhat.com/2380278',
-                'https://bugzilla.redhat.com/2380280',
-                'https://bugzilla.redhat.com/2380283',
-                'https://bugzilla.redhat.com/2380284',
-                'https://bugzilla.redhat.com/2380290',
-                'https://bugzilla.redhat.com/2380291',
-                'https://bugzilla.redhat.com/2380295',
-                'https://bugzilla.redhat.com/2380298',
-                'https://bugzilla.redhat.com/2380306',
-                'https://bugzilla.redhat.com/2380308',
-                'https://bugzilla.redhat.com/2380309',
-                'https://bugzilla.redhat.com/2380310',
-                'https://bugzilla.redhat.com/2380312',
-                'https://bugzilla.redhat.com/2380313',
-                'https://bugzilla.redhat.com/2380320',
-                'https://bugzilla.redhat.com/2380321',
-                'https://bugzilla.redhat.com/2380322',
-                'https://bugzilla.redhat.com/2380326',
-                'https://bugzilla.redhat.com/2380327',
-                'https://bugzilla.redhat.com/2380334',
-                'https://bugzilla.redhat.com/2380335',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2338999',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359885',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359888',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359892',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359894',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359895',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359899',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359900',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359902',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359903',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359911',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359918',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359920',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359924',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359928',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359930',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359932',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359934',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359938',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359940',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359943',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359944',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359945',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359947',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359950',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359963',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359964',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359972',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2370920',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380264',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380273',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380274',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380278',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380280',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380283',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380284',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380290',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380291',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380295',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380298',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380306',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380308',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380309',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380310',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380312',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380313',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380320',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380321',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380322',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380326',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380327',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380334',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380335',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-13176',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21574',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21575',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21577',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21579',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21580',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21581',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21584',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21585',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21588',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30681',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30682',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30683',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30684',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30685',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30687',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30688',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30689',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30693',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30695',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30696',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30699',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30703',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30704',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30705',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30715',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30721',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30722',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50077',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50078',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50079',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50080',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50081',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50082',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50083',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50084',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50085',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50086',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50087',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50088',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50091',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50092',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50093',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50094',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50096',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50097',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50098',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50099',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50100',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50101',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50102',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50104',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-5399',
-                'https://errata.almalinux.org/9/ALSA-2025-16046.html',
-                'https://errata.rockylinux.org/RLSA-2025:15699',
-                'https://github.com/openssl/openssl/commit/07272b05b04836a762b4baa874958af51d513844',
-                'https://github.com/openssl/openssl/commit/2af62e74fb59bc469506bc37eb2990ea408d9467',
-                'https://github.com/openssl/openssl/commit/392dcb336405a0c94486aa6655057f59fd3a0902',
-                'https://github.com/openssl/openssl/commit/4b1cb94a734a7d4ec363ac0a215a25c181e11f65',
-                'https://github.com/openssl/openssl/commit/77c608f4c8857e63e98e66444e2e761c9627916f',
-                'https://github.openssl.org/openssl/extended-releases/commit/0d5fd1ab987f7571e2c955d8d8b638fc0fb54ded',
-                'https://github.openssl.org/openssl/extended-releases/commit/a2639000db19878d5d89586ae7b725080592ae86',
-                'https://linux.oracle.com/cve/CVE-2024-13176.html',
-                'https://linux.oracle.com/errata/ELSA-2025-16046.html',
-                'https://lists.debian.org/debian-lts-announce/2025/05/msg00028.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2024-13176',
-                'https://openssl-library.org/news/secadv/20250120.txt',
-                'https://security.netapp.com/advisory/ntap-20250124-0005/',
-                'https://security.netapp.com/advisory/ntap-20250418-0010/',
-                'https://security.netapp.com/advisory/ntap-20250502-0006/',
-                'https://ubuntu.com/security/notices/USN-7264-1',
-                'https://ubuntu.com/security/notices/USN-7278-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2024-13176',
-                'https://www.oracle.com/security-alerts/cpuapr2025.html#AppendixMSQL'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: Timing side-channel in ECDSA signature computation'
-            },
-            {
-              'cve':  'CVE-2024-4741',
-              'cvss': {
-                'redhat': {
-                  'v3score':  '5.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   'Issue summary: Calling the OpenSSL API function SSL_free_buffers may cause\nmemory to be accessed that was previously freed in some situations\n\nImpact summary: A use after free can have a range of potential consequences such\nas the corruption of valid data, crashes or execution of arbitrary code.\nHowever, only applications that directly call the SSL_free_buffers function are\naffected by this issue. Applications that do not call this function are not\nvulnerable. Our investigations indicate that this function is rarely used by\napplications.\n\nThe SSL_free_buffers function is used to free the internal OpenSSL buffer used\nwhen processing an incoming record from the network. The call is only expected\nto succeed if the buffer is not currently in use. However, two scenarios have\nbeen identified where the buffer is freed even when still in use.\n\nThe first scenario occurs where a record header has been received from the\nnetwork and processed by OpenSSL, but the full record body has not yet arrived.\nIn this case calling SSL_free_buffers will succeed even though a record has only\nbeen partially processed and the buffer is still in use.\n\nThe second scenario occurs where a full record containing application data has\nbeen received and processed by OpenSSL but the application has only read part of\nthis data. Again a call to SSL_free_buffers will succeed even though the buffer\nis still in use.\n\nWhile these scenarios could occur accidentally during normal operation a\nmalicious attacker could attempt to engineer a stituation where this occurs.\nWe are not aware of this issue being actively exploited.\n\nThe FIPS modules in 3.3, 3.2, 3.1 and 3.0 are not affected by this issue.',
-              'diffID':        'sha256:af9a70194aa4d12f967dbd4bcb1ce9c98ba42adb4ec05536080fd4560155e809',
-              'fixedVersions': [
-                '3.1.6-r0'
-              ],
-              'installedVersion': '3.1.5-r0',
-              'packageName':      'libcrypto3',
-              'purl':             'pkg:apk/alpine/libcrypto3@3.1.5-r0?arch=x86_64&distro=3.19.2',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2024:9333',
-                'https://access.redhat.com/security/cve/CVE-2024-4741',
-                'https://bugzilla.redhat.com/2274020',
-                'https://bugzilla.redhat.com/2281029',
-                'https://bugzilla.redhat.com/2283757',
-                'https://bugzilla.redhat.com/2294581',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2274020',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2281029',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2283757',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2294581',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-2511',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-4603',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-4741',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-5535',
-                'https://errata.almalinux.org/9/ALSA-2024-9333.html',
-                'https://errata.rockylinux.org/RLSA-2024:9333',
-                'https://github.com/openssl/openssl/commit/704f725b96aa373ee45ecfb23f6abfe8be8d9177',
-                'https://github.com/openssl/openssl/commit/b3f0eb0a295f58f16ba43ba99dad70d4ee5c437d',
-                'https://github.com/openssl/openssl/commit/c88c3de51020c37e8706bf7a682a162593053aac',
-                'https://github.com/openssl/openssl/commit/e5093133c35ca82874ad83697af76f4b0f7e3bd8',
-                'https://github.openssl.org/openssl/extended-releases/commit/f7a045f3143fc6da2ee66bf52d8df04829590dd4',
-                'https://linux.oracle.com/cve/CVE-2024-4741.html',
-                'https://linux.oracle.com/errata/ELSA-2024-9333.html',
-                'https://lists.debian.org/debian-lts-announce/2024/10/msg00033.html',
-                'https://lists.debian.org/debian-lts-announce/2024/11/msg00000.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2024-4741',
-                'https://security.netapp.com/advisory/ntap-20240621-0004/',
-                'https://ubuntu.com/security/notices/USN-6937-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2024-4741',
-                'https://www.openssl.org/news/secadv/20240528.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: Use After Free with SSL_free_buffers'
-            },
-            {
-              'cve':  'CVE-2024-5535',
-              'cvss': {
-                'redhat': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-125'
-              ],
-              'description':   'Issue summary: Calling the OpenSSL API function SSL_select_next_proto with an\nempty supported client protocols buffer may cause a crash or memory contents to\nbe sent to the peer.\n\nImpact summary: A buffer overread can have a range of potential consequences\nsuch as unexpected application beahviour or a crash. In particular this issue\ncould result in up to 255 bytes of arbitrary private data from memory being sent\nto the peer leading to a loss of confidentiality. However, only applications\nthat directly call the SSL_select_next_proto function with a 0 length list of\nsupported client protocols are affected by this issue. This would normally never\nbe a valid scenario and is typically not under attacker control but may occur by\naccident in the case of a configuration or programming error in the calling\napplication.\n\nThe OpenSSL API function SSL_select_next_proto is typically used by TLS\napplications that support ALPN (Application Layer Protocol Negotiation) or NPN\n(Next Protocol Negotiation). NPN is older, was never standardised and\nis deprecated in favour of ALPN. We believe that ALPN is significantly more\nwidely deployed than NPN. The SSL_select_next_proto function accepts a list of\nprotocols from the server and a list of protocols from the client and returns\nthe first protocol that appears in the server list that also appears in the\nclient list. In the case of no overlap between the two lists it returns the\nfirst item in the client list. In either case it will signal whether an overlap\nbetween the two lists was found. In the case where SSL_select_next_proto is\ncalled with a zero length client list it fails to notice this condition and\nreturns the memory immediately following the client list pointer (and reports\nthat there was no overlap in the lists).\n\nThis function is typically called from a server side application callback for\nALPN or a client side application callback for NPN. In the case of ALPN the list\nof protocols supplied by the client is guaranteed by libssl to never be zero in\nlength. The list of server protocols comes from the application and should never\nnormally be expected to be of zero length. In this case if the\nSSL_select_next_proto function has been called as expected (with the list\nsupplied by the client passed in the client/client_len parameters), then the\napplication will not be vulnerable to this issue. If the application has\naccidentally been configured with a zero length server list, and has\naccidentally passed that zero length server list in the client/client_len\nparameters, and has additionally failed to correctly handle a "no overlap"\nresponse (which would normally result in a handshake failure in ALPN) then it\nwill be vulnerable to this problem.\n\nIn the case of NPN, the protocol permits the client to opportunistically select\na protocol when there is no overlap. OpenSSL returns the first client protocol\nin the no overlap case in support of this. The list of client protocols comes\nfrom the application and should never normally be expected to be of zero length.\nHowever if the SSL_select_next_proto function is accidentally called with a\nclient_len of 0 then an invalid memory pointer will be returned instead. If the\napplication uses this output as the opportunistic protocol then the loss of\nconfidentiality will occur.\n\nThis issue has been assessed as Low severity because applications are most\nlikely to be vulnerable if they are using NPN instead of ALPN - but NPN is not\nwidely used. It also requires an application configuration or programming error.\nFinally, this issue would not typically be under attacker control making active\nexploitation unlikely.\n\nThe FIPS modules in 3.3, 3.2, 3.1 and 3.0 are not affected by this issue.\n\nDue to the low severity of this issue we are not issuing new releases of\nOpenSSL at this time. The fix will be included in the next releases when they\nbecome available.',
-              'diffID':        'sha256:af9a70194aa4d12f967dbd4bcb1ce9c98ba42adb4ec05536080fd4560155e809',
-              'fixedVersions': [
-                '3.1.6-r0'
-              ],
-              'installedVersion': '3.1.5-r0',
-              'packageName':      'libcrypto3',
-              'purl':             'pkg:apk/alpine/libcrypto3@3.1.5-r0?arch=x86_64&distro=3.19.2',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2024/06/27/1',
-                'http://www.openwall.com/lists/oss-security/2024/06/28/4',
-                'http://www.openwall.com/lists/oss-security/2024/08/15/1',
-                'https://access.redhat.com/errata/RHSA-2025:1671',
-                'https://access.redhat.com/security/cve/CVE-2024-5535',
-                'https://bugzilla.redhat.com/2294581',
-                'https://bugzilla.redhat.com/2294676',
-                'https://bugzilla.redhat.com/2301888',
-                'https://bugzilla.redhat.com/2318857',
-                'https://bugzilla.redhat.com/2318858',
-                'https://bugzilla.redhat.com/2318870',
-                'https://bugzilla.redhat.com/2318873',
-                'https://bugzilla.redhat.com/2318874',
-                'https://bugzilla.redhat.com/2318876',
-                'https://bugzilla.redhat.com/2318882',
-                'https://bugzilla.redhat.com/2318883',
-                'https://bugzilla.redhat.com/2318884',
-                'https://bugzilla.redhat.com/2318885',
-                'https://bugzilla.redhat.com/2318886',
-                'https://bugzilla.redhat.com/2318897',
-                'https://bugzilla.redhat.com/2318900',
-                'https://bugzilla.redhat.com/2318905',
-                'https://bugzilla.redhat.com/2318914',
-                'https://bugzilla.redhat.com/2318922',
-                'https://bugzilla.redhat.com/2318923',
-                'https://bugzilla.redhat.com/2318925',
-                'https://bugzilla.redhat.com/2318926',
-                'https://bugzilla.redhat.com/2318927',
-                'https://bugzilla.redhat.com/2331191',
-                'https://bugzilla.redhat.com/2339218',
-                'https://bugzilla.redhat.com/2339220',
-                'https://bugzilla.redhat.com/2339221',
-                'https://bugzilla.redhat.com/2339226',
-                'https://bugzilla.redhat.com/2339231',
-                'https://bugzilla.redhat.com/2339236',
-                'https://bugzilla.redhat.com/2339238',
-                'https://bugzilla.redhat.com/2339243',
-                'https://bugzilla.redhat.com/2339247',
-                'https://bugzilla.redhat.com/2339252',
-                'https://bugzilla.redhat.com/2339259',
-                'https://bugzilla.redhat.com/2339266',
-                'https://bugzilla.redhat.com/2339270',
-                'https://bugzilla.redhat.com/2339271',
-                'https://bugzilla.redhat.com/2339275',
-                'https://bugzilla.redhat.com/2339277',
-                'https://bugzilla.redhat.com/2339281',
-                'https://bugzilla.redhat.com/2339284',
-                'https://bugzilla.redhat.com/2339291',
-                'https://bugzilla.redhat.com/2339293',
-                'https://bugzilla.redhat.com/2339295',
-                'https://bugzilla.redhat.com/2339299',
-                'https://bugzilla.redhat.com/2339300',
-                'https://bugzilla.redhat.com/2339304',
-                'https://bugzilla.redhat.com/2339305',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2274020',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2281029',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2283757',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2294581',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-2511',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-4603',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-4741',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-5535',
-                'https://errata.almalinux.org/9/ALSA-2025-1671.html',
-                'https://errata.rockylinux.org/RLSA-2024:9333',
-                'https://github.com/openssl/openssl/commit/4ada436a1946cbb24db5ab4ca082b69c1bc10f37',
-                'https://github.com/openssl/openssl/commit/99fb785a5f85315b95288921a321a935ea29a51e',
-                'https://github.com/openssl/openssl/commit/cf6f91f6121f4db167405db2f0de410a456f260c',
-                'https://github.com/openssl/openssl/commit/e86ac436f0bd54d4517745483e2315650fae7b2c',
-                'https://github.openssl.org/openssl/extended-releases/commit/9947251413065a05189a63c9b7a6c1d4e224c21c',
-                'https://github.openssl.org/openssl/extended-releases/commit/b78ec0824da857223486660177d3b1f255c65d87',
-                'https://linux.oracle.com/cve/CVE-2024-5535.html',
-                'https://linux.oracle.com/errata/ELSA-2025-1673.html',
-                'https://lists.debian.org/debian-lts-announce/2024/10/msg00033.html',
-                'https://lists.debian.org/debian-lts-announce/2024/11/msg00000.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2024-5535',
-                'https://openssl.org/news/secadv/20240627.txt',
-                'https://security.netapp.com/advisory/ntap-20240712-0005/',
-                'https://security.netapp.com/advisory/ntap-20241025-0006/',
-                'https://security.netapp.com/advisory/ntap-20241025-0010/',
-                'https://ubuntu.com/security/notices/USN-6937-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2024-5535',
-                'https://www.openssl.org/news/secadv/20240627.txt',
-                'https://www.oracle.com/security-alerts/cpuoct2024.html#AppendixMSQL'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: SSL_select_next_proto buffer overread'
-            },
-            {
-              'cve':  'CVE-2025-9230',
-              'cvss': {
-                'redhat': {
-                  'v3score':  '5.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L'
-                }
-              },
-              'cwes': [
-                'CWE-125',
-                'CWE-787'
-              ],
-              'description':   'Issue summary: An application trying to decrypt CMS messages encrypted using\npassword based encryption can trigger an out-of-bounds read and write.\n\nImpact summary: This out-of-bounds read may trigger a crash which leads to\nDenial of Service for an application. The out-of-bounds write can cause\na memory corruption which can have various consequences including\na Denial of Service or Execution of attacker-supplied code.\n\nAlthough the consequences of a successful exploit of this vulnerability\ncould be severe, the probability that the attacker would be able to\nperform it is low. Besides, password based (PWRI) encryption support in CMS\nmessages is very rarely used. For that reason the issue was assessed as\nModerate severity according to our Security Policy.\n\nThe FIPS modules in 3.5, 3.4, 3.3, 3.2, 3.1 and 3.0 are not affected by this\nissue, as the CMS implementation is outside the OpenSSL FIPS module\nboundary.',
-              'diffID':        'sha256:af9a70194aa4d12f967dbd4bcb1ce9c98ba42adb4ec05536080fd4560155e809',
-              'fixedVersions': [
-                '3.1.8-r1'
-              ],
-              'installedVersion': '3.1.5-r0',
-              'packageName':      'libcrypto3',
-              'purl':             'pkg:apk/alpine/libcrypto3@3.1.5-r0?arch=x86_64&distro=3.19.2',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2025/09/30/5',
-                'https://access.redhat.com/errata/RHSA-2025:21255',
-                'https://access.redhat.com/security/cve/CVE-2025-9230',
-                'https://bugzilla.redhat.com/2396054',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2396054',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-9230',
-                'https://errata.almalinux.org/9/ALSA-2025-21255.html',
-                'https://errata.rockylinux.org/RLSA-2025:21255',
-                'https://github.com/openssl/openssl/commit/5965ea5dd6960f36d8b7f74f8eac67a8eb8f2b45',
-                'https://github.com/openssl/openssl/commit/9e91358f365dee6c446dcdcdb01c04d2743fd280',
-                'https://github.com/openssl/openssl/commit/a79c4ce559c6a3a8fd4109e9f33c1185d5bf2def',
-                'https://github.com/openssl/openssl/commit/b5282d677551afda7d20e9c00e09561b547b2dfd',
-                'https://github.com/openssl/openssl/commit/bae259a211ada6315dc50900686daaaaaa55f482',
-                'https://github.openssl.org/openssl/extended-releases/commit/c2b96348bfa662f25f4fabf81958ae822063dae3',
-                'https://github.openssl.org/openssl/extended-releases/commit/dfbaf161d8dafc1132dd88cd48ad990ed9b4c8ba',
-                'https://linux.oracle.com/cve/CVE-2025-9230.html',
-                'https://linux.oracle.com/errata/ELSA-2026-0337.html',
-                'https://lists.debian.org/debian-lts-announce/2025/10/msg00001.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2025-9230',
-                'https://openssl-library.org/news/secadv/20250930.txt',
-                'https://ubuntu.com/security/notices/USN-7786-1',
-                'https://www.cve.org/CVERecord?id=CVE-2025-9230'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: Out-of-bounds read & write in RFC 3211 KEK Unwrap'
-            },
-            {
-              'cve':  'CVE-2024-9143',
-              'cvss': {
-                'redhat': {
-                  'v3score':  '3.7',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L'
-                }
-              },
-              'cwes': [
-                'CWE-125',
-                'CWE-787'
-              ],
-              'description':   "Issue summary: Use of the low-level GF(2^m) elliptic curve APIs with untrusted\nexplicit values for the field polynomial can lead to out-of-bounds memory reads\nor writes.\n\nImpact summary: Out of bound memory writes can lead to an application crash or\neven a possibility of a remote code execution, however, in all the protocols\ninvolving Elliptic Curve Cryptography that we're aware of, either only \"named\ncurves\" are supported, or, if explicit curve parameters are supported, they\nspecify an X9.62 encoding of binary (GF(2^m)) curves that can't represent\nproblematic input values. Thus the likelihood of existence of a vulnerable\napplication is low.\n\nIn particular, the X9.62 encoding is used for ECC keys in X.509 certificates,\nso problematic inputs cannot occur in the context of processing X.509\ncertificates.  Any problematic use-cases would have to be using an \"exotic\"\ncurve encoding.\n\nThe affected APIs include: EC_GROUP_new_curve_GF2m(), EC_GROUP_new_from_params(),\nand various supporting BN_GF2m_*() functions.\n\nApplications working with \"exotic\" explicit binary (GF(2^m)) curve parameters,\nthat make it possible to represent invalid field polynomials with a zero\nconstant term, via the above or similar APIs, may terminate abruptly as a\nresult of reading or writing outside of array bounds.  Remote code execution\ncannot easily be ruled out.\n\nThe FIPS modules in 3.3, 3.2, 3.1 and 3.0 are not affected by this issue.",
-              'diffID':        'sha256:af9a70194aa4d12f967dbd4bcb1ce9c98ba42adb4ec05536080fd4560155e809',
-              'fixedVersions': [
-                '3.1.7-r1'
-              ],
-              'installedVersion': '3.1.5-r0',
-              'packageName':      'libcrypto3',
-              'purl':             'pkg:apk/alpine/libcrypto3@3.1.5-r0?arch=x86_64&distro=3.19.2',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2024/10/16/1',
-                'http://www.openwall.com/lists/oss-security/2024/10/23/1',
-                'http://www.openwall.com/lists/oss-security/2024/10/24/1',
-                'https://access.redhat.com/security/cve/CVE-2024-9143',
-                'https://github.com/openssl/openssl/commit/72ae83ad214d2eef262461365a1975707f862712',
-                'https://github.com/openssl/openssl/commit/bc7e04d7c8d509fb78fc0e285aa948fb0da04700',
-                'https://github.com/openssl/openssl/commit/c0d3e4d32d2805f49bec30547f225bc4d092e1f4',
-                'https://github.com/openssl/openssl/commit/fdf6723362ca51bd883295efe206cb5b1cfa5154',
-                'https://github.openssl.org/openssl/extended-releases/commit/8efc0cbaa8ebba8e116f7b81a876a4123594d86a',
-                'https://github.openssl.org/openssl/extended-releases/commit/9d576994cec2b7aa37a91740ea7e680810957e41',
-                'https://lists.debian.org/debian-lts-announce/2024/10/msg00033.html',
-                'https://lists.debian.org/debian-lts-announce/2024/11/msg00000.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2024-9143',
-                'https://openssl-library.org/news/secadv/20241016.txt',
-                'https://security.netapp.com/advisory/ntap-20241101-0001/',
-                'https://ubuntu.com/security/notices/USN-7264-1',
-                'https://ubuntu.com/security/notices/USN-7278-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2024-9143'
-              ],
-              'severity':   'LOW',
-              'suppressed': false,
-              'title':      'openssl: Low-level invalid GF(2^m) parameters lead to OOB memory access'
-            },
-            {
-              'cve':  'CVE-2025-9232',
-              'cvss': {
-                'redhat': {
-                  'v3score':  '3.1',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L'
-                }
-              },
-              'cwes': [
-                'CWE-125'
-              ],
-              'description':   "Issue summary: An application using the OpenSSL HTTP client API functions may\ntrigger an out-of-bounds read if the 'no_proxy' environment variable is set and\nthe host portion of the authority component of the HTTP URL is an IPv6 address.\n\nImpact summary: An out-of-bounds read can trigger a crash which leads to\nDenial of Service for an application.\n\nThe OpenSSL HTTP client API functions can be used directly by applications\nbut they are also used by the OCSP client functions and CMP (Certificate\nManagement Protocol) client implementation in OpenSSL. However the URLs used\nby these implementations are unlikely to be controlled by an attacker.\n\nIn this vulnerable code the out of bounds read can only trigger a crash.\nFurthermore the vulnerability requires an attacker-controlled URL to be\npassed from an application to the OpenSSL function and the user has to have\na 'no_proxy' environment variable set. For the aforementioned reasons the\nissue was assessed as Low severity.\n\nThe vulnerable code was introduced in the following patch releases:\n3.0.16, 3.1.8, 3.2.4, 3.3.3, 3.4.0 and 3.5.0.\n\nThe FIPS modules in 3.5, 3.4, 3.3, 3.2, 3.1 and 3.0 are not affected by this\nissue, as the HTTP client implementation is outside the OpenSSL FIPS module\nboundary.",
-              'diffID':        'sha256:af9a70194aa4d12f967dbd4bcb1ce9c98ba42adb4ec05536080fd4560155e809',
-              'fixedVersions': [
-                '3.1.8-r1'
-              ],
-              'installedVersion': '3.1.5-r0',
-              'packageName':      'libcrypto3',
-              'purl':             'pkg:apk/alpine/libcrypto3@3.1.5-r0?arch=x86_64&distro=3.19.2',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2025/09/30/5',
-                'https://access.redhat.com/security/cve/CVE-2025-9232',
-                'https://github.com/openssl/openssl/commit/2b4ec20e47959170422922eaff25346d362dcb35',
-                'https://github.com/openssl/openssl/commit/654dc11d23468a74fc8ea4672b702dd3feb7be4b',
-                'https://github.com/openssl/openssl/commit/7cf21a30513c9e43c4bc3836c237cf086e194af3',
-                'https://github.com/openssl/openssl/commit/89e790ac431125a4849992858490bed6b225eadf',
-                'https://github.com/openssl/openssl/commit/bbf38c034cdabd0a13330abcc4855c866f53d2e0',
-                'https://nvd.nist.gov/vuln/detail/CVE-2025-9232',
-                'https://openssl-library.org/news/secadv/20250930.txt',
-                'https://ubuntu.com/security/notices/USN-7786-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2025-9232'
-              ],
-              'severity':   'LOW',
-              'suppressed': false,
-              'title':      'openssl: Out-of-bounds read in HTTP client no_proxy handling'
-            },
-            {
-              'cve':  'CVE-2024-6119',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-843'
-              ],
-              'description':   "Issue summary: Applications performing certificate name checks (e.g., TLS\nclients checking server certificates) may attempt to read an invalid memory\naddress resulting in abnormal termination of the application process.\n\nImpact summary: Abnormal termination of an application can a cause a denial of\nservice.\n\nApplications performing certificate name checks (e.g., TLS clients checking\nserver certificates) may attempt to read an invalid memory address when\ncomparing the expected name with an `otherName` subject alternative name of an\nX.509 certificate. This may result in an exception that terminates the\napplication program.\n\nNote that basic certificate chain validation (signatures, dates, ...) is not\naffected, the denial of service can occur only when the application also\nspecifies an expected DNS name, Email address or IP address.\n\nTLS servers rarely solicit client certificates, and even when they do, they\ngenerally don't perform a name check against a reference identifier (expected\nidentity), but rather extract the presented identity after checking the\ncertificate chain.  So TLS servers are generally not affected and the severity\nof the issue is Moderate.\n\nThe FIPS modules in 3.3, 3.2, 3.1 and 3.0 are not affected by this issue.",
-              'diffID':        'sha256:af9a70194aa4d12f967dbd4bcb1ce9c98ba42adb4ec05536080fd4560155e809',
-              'fixedVersions': [
-                '3.1.7-r0'
-              ],
-              'installedVersion': '3.1.5-r0',
-              'packageName':      'libssl3',
-              'purl':             'pkg:apk/alpine/libssl3@3.1.5-r0?arch=x86_64&distro=3.19.2',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2024/09/03/4',
-                'https://access.redhat.com/errata/RHSA-2024:8935',
-                'https://access.redhat.com/security/cve/CVE-2024-6119',
-                'https://bugzilla.redhat.com/2306158',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2306158',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-6119',
-                'https://errata.almalinux.org/9/ALSA-2024-8935.html',
-                'https://errata.rockylinux.org/RLSA-2024:6783',
-                'https://github.com/openssl/openssl/commit/05f360d9e849a1b277db628f1f13083a7f8dd04f',
-                'https://github.com/openssl/openssl/commit/06d1dc3fa96a2ba5a3e22735a033012aadc9f0d6',
-                'https://github.com/openssl/openssl/commit/621f3729831b05ee828a3203eddb621d014ff2b2',
-                'https://github.com/openssl/openssl/commit/7dfcee2cd2a63b2c64b9b4b0850be64cb695b0a0',
-                'https://github.com/openssl/openssl/security/advisories/GHSA-5qrj-vq78-58fj',
-                'https://linux.oracle.com/cve/CVE-2024-6119.html',
-                'https://linux.oracle.com/errata/ELSA-2024-8935.html',
-                'https://lists.freebsd.org/archives/freebsd-security/2024-September/000303.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2024-6119',
-                'https://openssl-library.org/news/secadv/20240903.txt',
-                'https://security.netapp.com/advisory/ntap-20240912-0001/',
-                'https://ubuntu.com/security/notices/USN-6986-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2024-6119'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: Possible denial of service in X.509 name checks'
-            },
-            {
-              'cve':  'CVE-2024-13176',
-              'cvss': {
-                'redhat': {
-                  'v3score':  '4.7',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-385'
-              ],
-              'description':   'Issue summary: A timing side-channel which could potentially allow recovering\nthe private key exists in the ECDSA signature computation.\n\nImpact summary: A timing side-channel in ECDSA signature computations\ncould allow recovering the private key by an attacker. However, measuring\nthe timing would require either local access to the signing application or\na very fast network connection with low latency.\n\nThere is a timing signal of around 300 nanoseconds when the top word of\nthe inverted ECDSA nonce value is zero. This can happen with significant\nprobability only for some of the supported elliptic curves. In particular\nthe NIST P-521 curve is affected. To be able to measure this leak, the attacker\nprocess must either be located in the same physical computer or must\nhave a very fast network connection with low latency. For that reason\nthe severity of this vulnerability is Low.\n\nThe FIPS modules in 3.4, 3.3, 3.2, 3.1 and 3.0 are affected by this issue.',
-              'diffID':        'sha256:af9a70194aa4d12f967dbd4bcb1ce9c98ba42adb4ec05536080fd4560155e809',
-              'fixedVersions': [
-                '3.1.8-r0'
-              ],
-              'installedVersion': '3.1.5-r0',
-              'packageName':      'libssl3',
-              'purl':             'pkg:apk/alpine/libssl3@3.1.5-r0?arch=x86_64&distro=3.19.2',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2025/01/20/2',
-                'https://access.redhat.com/errata/RHSA-2025:16046',
-                'https://access.redhat.com/security/cve/CVE-2024-13176',
-                'https://bugzilla.redhat.com/2359885',
-                'https://bugzilla.redhat.com/2359888',
-                'https://bugzilla.redhat.com/2359892',
-                'https://bugzilla.redhat.com/2359894',
-                'https://bugzilla.redhat.com/2359895',
-                'https://bugzilla.redhat.com/2359899',
-                'https://bugzilla.redhat.com/2359900',
-                'https://bugzilla.redhat.com/2359902',
-                'https://bugzilla.redhat.com/2359903',
-                'https://bugzilla.redhat.com/2359911',
-                'https://bugzilla.redhat.com/2359918',
-                'https://bugzilla.redhat.com/2359920',
-                'https://bugzilla.redhat.com/2359924',
-                'https://bugzilla.redhat.com/2359928',
-                'https://bugzilla.redhat.com/2359930',
-                'https://bugzilla.redhat.com/2359932',
-                'https://bugzilla.redhat.com/2359934',
-                'https://bugzilla.redhat.com/2359938',
-                'https://bugzilla.redhat.com/2359940',
-                'https://bugzilla.redhat.com/2359943',
-                'https://bugzilla.redhat.com/2359944',
-                'https://bugzilla.redhat.com/2359945',
-                'https://bugzilla.redhat.com/2359947',
-                'https://bugzilla.redhat.com/2359950',
-                'https://bugzilla.redhat.com/2359963',
-                'https://bugzilla.redhat.com/2359964',
-                'https://bugzilla.redhat.com/2359972',
-                'https://bugzilla.redhat.com/2370920',
-                'https://bugzilla.redhat.com/2380264',
-                'https://bugzilla.redhat.com/2380273',
-                'https://bugzilla.redhat.com/2380274',
-                'https://bugzilla.redhat.com/2380278',
-                'https://bugzilla.redhat.com/2380280',
-                'https://bugzilla.redhat.com/2380283',
-                'https://bugzilla.redhat.com/2380284',
-                'https://bugzilla.redhat.com/2380290',
-                'https://bugzilla.redhat.com/2380291',
-                'https://bugzilla.redhat.com/2380295',
-                'https://bugzilla.redhat.com/2380298',
-                'https://bugzilla.redhat.com/2380306',
-                'https://bugzilla.redhat.com/2380308',
-                'https://bugzilla.redhat.com/2380309',
-                'https://bugzilla.redhat.com/2380310',
-                'https://bugzilla.redhat.com/2380312',
-                'https://bugzilla.redhat.com/2380313',
-                'https://bugzilla.redhat.com/2380320',
-                'https://bugzilla.redhat.com/2380321',
-                'https://bugzilla.redhat.com/2380322',
-                'https://bugzilla.redhat.com/2380326',
-                'https://bugzilla.redhat.com/2380327',
-                'https://bugzilla.redhat.com/2380334',
-                'https://bugzilla.redhat.com/2380335',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2338999',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359885',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359888',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359892',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359894',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359895',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359899',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359900',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359902',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359903',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359911',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359918',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359920',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359924',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359928',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359930',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359932',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359934',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359938',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359940',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359943',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359944',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359945',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359947',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359950',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359963',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359964',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359972',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2370920',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380264',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380273',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380274',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380278',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380280',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380283',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380284',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380290',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380291',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380295',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380298',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380306',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380308',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380309',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380310',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380312',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380313',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380320',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380321',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380322',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380326',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380327',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380334',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380335',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-13176',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21574',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21575',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21577',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21579',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21580',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21581',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21584',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21585',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21588',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30681',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30682',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30683',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30684',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30685',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30687',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30688',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30689',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30693',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30695',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30696',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30699',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30703',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30704',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30705',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30715',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30721',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30722',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50077',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50078',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50079',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50080',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50081',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50082',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50083',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50084',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50085',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50086',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50087',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50088',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50091',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50092',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50093',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50094',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50096',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50097',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50098',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50099',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50100',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50101',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50102',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50104',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-5399',
-                'https://errata.almalinux.org/9/ALSA-2025-16046.html',
-                'https://errata.rockylinux.org/RLSA-2025:15699',
-                'https://github.com/openssl/openssl/commit/07272b05b04836a762b4baa874958af51d513844',
-                'https://github.com/openssl/openssl/commit/2af62e74fb59bc469506bc37eb2990ea408d9467',
-                'https://github.com/openssl/openssl/commit/392dcb336405a0c94486aa6655057f59fd3a0902',
-                'https://github.com/openssl/openssl/commit/4b1cb94a734a7d4ec363ac0a215a25c181e11f65',
-                'https://github.com/openssl/openssl/commit/77c608f4c8857e63e98e66444e2e761c9627916f',
-                'https://github.openssl.org/openssl/extended-releases/commit/0d5fd1ab987f7571e2c955d8d8b638fc0fb54ded',
-                'https://github.openssl.org/openssl/extended-releases/commit/a2639000db19878d5d89586ae7b725080592ae86',
-                'https://linux.oracle.com/cve/CVE-2024-13176.html',
-                'https://linux.oracle.com/errata/ELSA-2025-16046.html',
-                'https://lists.debian.org/debian-lts-announce/2025/05/msg00028.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2024-13176',
-                'https://openssl-library.org/news/secadv/20250120.txt',
-                'https://security.netapp.com/advisory/ntap-20250124-0005/',
-                'https://security.netapp.com/advisory/ntap-20250418-0010/',
-                'https://security.netapp.com/advisory/ntap-20250502-0006/',
-                'https://ubuntu.com/security/notices/USN-7264-1',
-                'https://ubuntu.com/security/notices/USN-7278-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2024-13176',
-                'https://www.oracle.com/security-alerts/cpuapr2025.html#AppendixMSQL'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: Timing side-channel in ECDSA signature computation'
-            },
-            {
-              'cve':  'CVE-2024-4741',
-              'cvss': {
-                'redhat': {
-                  'v3score':  '5.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   'Issue summary: Calling the OpenSSL API function SSL_free_buffers may cause\nmemory to be accessed that was previously freed in some situations\n\nImpact summary: A use after free can have a range of potential consequences such\nas the corruption of valid data, crashes or execution of arbitrary code.\nHowever, only applications that directly call the SSL_free_buffers function are\naffected by this issue. Applications that do not call this function are not\nvulnerable. Our investigations indicate that this function is rarely used by\napplications.\n\nThe SSL_free_buffers function is used to free the internal OpenSSL buffer used\nwhen processing an incoming record from the network. The call is only expected\nto succeed if the buffer is not currently in use. However, two scenarios have\nbeen identified where the buffer is freed even when still in use.\n\nThe first scenario occurs where a record header has been received from the\nnetwork and processed by OpenSSL, but the full record body has not yet arrived.\nIn this case calling SSL_free_buffers will succeed even though a record has only\nbeen partially processed and the buffer is still in use.\n\nThe second scenario occurs where a full record containing application data has\nbeen received and processed by OpenSSL but the application has only read part of\nthis data. Again a call to SSL_free_buffers will succeed even though the buffer\nis still in use.\n\nWhile these scenarios could occur accidentally during normal operation a\nmalicious attacker could attempt to engineer a stituation where this occurs.\nWe are not aware of this issue being actively exploited.\n\nThe FIPS modules in 3.3, 3.2, 3.1 and 3.0 are not affected by this issue.',
-              'diffID':        'sha256:af9a70194aa4d12f967dbd4bcb1ce9c98ba42adb4ec05536080fd4560155e809',
-              'fixedVersions': [
-                '3.1.6-r0'
-              ],
-              'installedVersion': '3.1.5-r0',
-              'packageName':      'libssl3',
-              'purl':             'pkg:apk/alpine/libssl3@3.1.5-r0?arch=x86_64&distro=3.19.2',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2024:9333',
-                'https://access.redhat.com/security/cve/CVE-2024-4741',
-                'https://bugzilla.redhat.com/2274020',
-                'https://bugzilla.redhat.com/2281029',
-                'https://bugzilla.redhat.com/2283757',
-                'https://bugzilla.redhat.com/2294581',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2274020',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2281029',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2283757',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2294581',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-2511',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-4603',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-4741',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-5535',
-                'https://errata.almalinux.org/9/ALSA-2024-9333.html',
-                'https://errata.rockylinux.org/RLSA-2024:9333',
-                'https://github.com/openssl/openssl/commit/704f725b96aa373ee45ecfb23f6abfe8be8d9177',
-                'https://github.com/openssl/openssl/commit/b3f0eb0a295f58f16ba43ba99dad70d4ee5c437d',
-                'https://github.com/openssl/openssl/commit/c88c3de51020c37e8706bf7a682a162593053aac',
-                'https://github.com/openssl/openssl/commit/e5093133c35ca82874ad83697af76f4b0f7e3bd8',
-                'https://github.openssl.org/openssl/extended-releases/commit/f7a045f3143fc6da2ee66bf52d8df04829590dd4',
-                'https://linux.oracle.com/cve/CVE-2024-4741.html',
-                'https://linux.oracle.com/errata/ELSA-2024-9333.html',
-                'https://lists.debian.org/debian-lts-announce/2024/10/msg00033.html',
-                'https://lists.debian.org/debian-lts-announce/2024/11/msg00000.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2024-4741',
-                'https://security.netapp.com/advisory/ntap-20240621-0004/',
-                'https://ubuntu.com/security/notices/USN-6937-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2024-4741',
-                'https://www.openssl.org/news/secadv/20240528.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: Use After Free with SSL_free_buffers'
-            },
-            {
-              'cve':  'CVE-2024-5535',
-              'cvss': {
-                'redhat': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-125'
-              ],
-              'description':   'Issue summary: Calling the OpenSSL API function SSL_select_next_proto with an\nempty supported client protocols buffer may cause a crash or memory contents to\nbe sent to the peer.\n\nImpact summary: A buffer overread can have a range of potential consequences\nsuch as unexpected application beahviour or a crash. In particular this issue\ncould result in up to 255 bytes of arbitrary private data from memory being sent\nto the peer leading to a loss of confidentiality. However, only applications\nthat directly call the SSL_select_next_proto function with a 0 length list of\nsupported client protocols are affected by this issue. This would normally never\nbe a valid scenario and is typically not under attacker control but may occur by\naccident in the case of a configuration or programming error in the calling\napplication.\n\nThe OpenSSL API function SSL_select_next_proto is typically used by TLS\napplications that support ALPN (Application Layer Protocol Negotiation) or NPN\n(Next Protocol Negotiation). NPN is older, was never standardised and\nis deprecated in favour of ALPN. We believe that ALPN is significantly more\nwidely deployed than NPN. The SSL_select_next_proto function accepts a list of\nprotocols from the server and a list of protocols from the client and returns\nthe first protocol that appears in the server list that also appears in the\nclient list. In the case of no overlap between the two lists it returns the\nfirst item in the client list. In either case it will signal whether an overlap\nbetween the two lists was found. In the case where SSL_select_next_proto is\ncalled with a zero length client list it fails to notice this condition and\nreturns the memory immediately following the client list pointer (and reports\nthat there was no overlap in the lists).\n\nThis function is typically called from a server side application callback for\nALPN or a client side application callback for NPN. In the case of ALPN the list\nof protocols supplied by the client is guaranteed by libssl to never be zero in\nlength. The list of server protocols comes from the application and should never\nnormally be expected to be of zero length. In this case if the\nSSL_select_next_proto function has been called as expected (with the list\nsupplied by the client passed in the client/client_len parameters), then the\napplication will not be vulnerable to this issue. If the application has\naccidentally been configured with a zero length server list, and has\naccidentally passed that zero length server list in the client/client_len\nparameters, and has additionally failed to correctly handle a "no overlap"\nresponse (which would normally result in a handshake failure in ALPN) then it\nwill be vulnerable to this problem.\n\nIn the case of NPN, the protocol permits the client to opportunistically select\na protocol when there is no overlap. OpenSSL returns the first client protocol\nin the no overlap case in support of this. The list of client protocols comes\nfrom the application and should never normally be expected to be of zero length.\nHowever if the SSL_select_next_proto function is accidentally called with a\nclient_len of 0 then an invalid memory pointer will be returned instead. If the\napplication uses this output as the opportunistic protocol then the loss of\nconfidentiality will occur.\n\nThis issue has been assessed as Low severity because applications are most\nlikely to be vulnerable if they are using NPN instead of ALPN - but NPN is not\nwidely used. It also requires an application configuration or programming error.\nFinally, this issue would not typically be under attacker control making active\nexploitation unlikely.\n\nThe FIPS modules in 3.3, 3.2, 3.1 and 3.0 are not affected by this issue.\n\nDue to the low severity of this issue we are not issuing new releases of\nOpenSSL at this time. The fix will be included in the next releases when they\nbecome available.',
-              'diffID':        'sha256:af9a70194aa4d12f967dbd4bcb1ce9c98ba42adb4ec05536080fd4560155e809',
-              'fixedVersions': [
-                '3.1.6-r0'
-              ],
-              'installedVersion': '3.1.5-r0',
-              'packageName':      'libssl3',
-              'purl':             'pkg:apk/alpine/libssl3@3.1.5-r0?arch=x86_64&distro=3.19.2',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2024/06/27/1',
-                'http://www.openwall.com/lists/oss-security/2024/06/28/4',
-                'http://www.openwall.com/lists/oss-security/2024/08/15/1',
-                'https://access.redhat.com/errata/RHSA-2025:1671',
-                'https://access.redhat.com/security/cve/CVE-2024-5535',
-                'https://bugzilla.redhat.com/2294581',
-                'https://bugzilla.redhat.com/2294676',
-                'https://bugzilla.redhat.com/2301888',
-                'https://bugzilla.redhat.com/2318857',
-                'https://bugzilla.redhat.com/2318858',
-                'https://bugzilla.redhat.com/2318870',
-                'https://bugzilla.redhat.com/2318873',
-                'https://bugzilla.redhat.com/2318874',
-                'https://bugzilla.redhat.com/2318876',
-                'https://bugzilla.redhat.com/2318882',
-                'https://bugzilla.redhat.com/2318883',
-                'https://bugzilla.redhat.com/2318884',
-                'https://bugzilla.redhat.com/2318885',
-                'https://bugzilla.redhat.com/2318886',
-                'https://bugzilla.redhat.com/2318897',
-                'https://bugzilla.redhat.com/2318900',
-                'https://bugzilla.redhat.com/2318905',
-                'https://bugzilla.redhat.com/2318914',
-                'https://bugzilla.redhat.com/2318922',
-                'https://bugzilla.redhat.com/2318923',
-                'https://bugzilla.redhat.com/2318925',
-                'https://bugzilla.redhat.com/2318926',
-                'https://bugzilla.redhat.com/2318927',
-                'https://bugzilla.redhat.com/2331191',
-                'https://bugzilla.redhat.com/2339218',
-                'https://bugzilla.redhat.com/2339220',
-                'https://bugzilla.redhat.com/2339221',
-                'https://bugzilla.redhat.com/2339226',
-                'https://bugzilla.redhat.com/2339231',
-                'https://bugzilla.redhat.com/2339236',
-                'https://bugzilla.redhat.com/2339238',
-                'https://bugzilla.redhat.com/2339243',
-                'https://bugzilla.redhat.com/2339247',
-                'https://bugzilla.redhat.com/2339252',
-                'https://bugzilla.redhat.com/2339259',
-                'https://bugzilla.redhat.com/2339266',
-                'https://bugzilla.redhat.com/2339270',
-                'https://bugzilla.redhat.com/2339271',
-                'https://bugzilla.redhat.com/2339275',
-                'https://bugzilla.redhat.com/2339277',
-                'https://bugzilla.redhat.com/2339281',
-                'https://bugzilla.redhat.com/2339284',
-                'https://bugzilla.redhat.com/2339291',
-                'https://bugzilla.redhat.com/2339293',
-                'https://bugzilla.redhat.com/2339295',
-                'https://bugzilla.redhat.com/2339299',
-                'https://bugzilla.redhat.com/2339300',
-                'https://bugzilla.redhat.com/2339304',
-                'https://bugzilla.redhat.com/2339305',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2274020',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2281029',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2283757',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2294581',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-2511',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-4603',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-4741',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-5535',
-                'https://errata.almalinux.org/9/ALSA-2025-1671.html',
-                'https://errata.rockylinux.org/RLSA-2024:9333',
-                'https://github.com/openssl/openssl/commit/4ada436a1946cbb24db5ab4ca082b69c1bc10f37',
-                'https://github.com/openssl/openssl/commit/99fb785a5f85315b95288921a321a935ea29a51e',
-                'https://github.com/openssl/openssl/commit/cf6f91f6121f4db167405db2f0de410a456f260c',
-                'https://github.com/openssl/openssl/commit/e86ac436f0bd54d4517745483e2315650fae7b2c',
-                'https://github.openssl.org/openssl/extended-releases/commit/9947251413065a05189a63c9b7a6c1d4e224c21c',
-                'https://github.openssl.org/openssl/extended-releases/commit/b78ec0824da857223486660177d3b1f255c65d87',
-                'https://linux.oracle.com/cve/CVE-2024-5535.html',
-                'https://linux.oracle.com/errata/ELSA-2025-1673.html',
-                'https://lists.debian.org/debian-lts-announce/2024/10/msg00033.html',
-                'https://lists.debian.org/debian-lts-announce/2024/11/msg00000.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2024-5535',
-                'https://openssl.org/news/secadv/20240627.txt',
-                'https://security.netapp.com/advisory/ntap-20240712-0005/',
-                'https://security.netapp.com/advisory/ntap-20241025-0006/',
-                'https://security.netapp.com/advisory/ntap-20241025-0010/',
-                'https://ubuntu.com/security/notices/USN-6937-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2024-5535',
-                'https://www.openssl.org/news/secadv/20240627.txt',
-                'https://www.oracle.com/security-alerts/cpuoct2024.html#AppendixMSQL'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: SSL_select_next_proto buffer overread'
-            },
-            {
-              'cve':  'CVE-2025-9230',
-              'cvss': {
-                'redhat': {
-                  'v3score':  '5.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L'
-                }
-              },
-              'cwes': [
-                'CWE-125',
-                'CWE-787'
-              ],
-              'description':   'Issue summary: An application trying to decrypt CMS messages encrypted using\npassword based encryption can trigger an out-of-bounds read and write.\n\nImpact summary: This out-of-bounds read may trigger a crash which leads to\nDenial of Service for an application. The out-of-bounds write can cause\na memory corruption which can have various consequences including\na Denial of Service or Execution of attacker-supplied code.\n\nAlthough the consequences of a successful exploit of this vulnerability\ncould be severe, the probability that the attacker would be able to\nperform it is low. Besides, password based (PWRI) encryption support in CMS\nmessages is very rarely used. For that reason the issue was assessed as\nModerate severity according to our Security Policy.\n\nThe FIPS modules in 3.5, 3.4, 3.3, 3.2, 3.1 and 3.0 are not affected by this\nissue, as the CMS implementation is outside the OpenSSL FIPS module\nboundary.',
-              'diffID':        'sha256:af9a70194aa4d12f967dbd4bcb1ce9c98ba42adb4ec05536080fd4560155e809',
-              'fixedVersions': [
-                '3.1.8-r1'
-              ],
-              'installedVersion': '3.1.5-r0',
-              'packageName':      'libssl3',
-              'purl':             'pkg:apk/alpine/libssl3@3.1.5-r0?arch=x86_64&distro=3.19.2',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2025/09/30/5',
-                'https://access.redhat.com/errata/RHSA-2025:21255',
-                'https://access.redhat.com/security/cve/CVE-2025-9230',
-                'https://bugzilla.redhat.com/2396054',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2396054',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-9230',
-                'https://errata.almalinux.org/9/ALSA-2025-21255.html',
-                'https://errata.rockylinux.org/RLSA-2025:21255',
-                'https://github.com/openssl/openssl/commit/5965ea5dd6960f36d8b7f74f8eac67a8eb8f2b45',
-                'https://github.com/openssl/openssl/commit/9e91358f365dee6c446dcdcdb01c04d2743fd280',
-                'https://github.com/openssl/openssl/commit/a79c4ce559c6a3a8fd4109e9f33c1185d5bf2def',
-                'https://github.com/openssl/openssl/commit/b5282d677551afda7d20e9c00e09561b547b2dfd',
-                'https://github.com/openssl/openssl/commit/bae259a211ada6315dc50900686daaaaaa55f482',
-                'https://github.openssl.org/openssl/extended-releases/commit/c2b96348bfa662f25f4fabf81958ae822063dae3',
-                'https://github.openssl.org/openssl/extended-releases/commit/dfbaf161d8dafc1132dd88cd48ad990ed9b4c8ba',
-                'https://linux.oracle.com/cve/CVE-2025-9230.html',
-                'https://linux.oracle.com/errata/ELSA-2026-0337.html',
-                'https://lists.debian.org/debian-lts-announce/2025/10/msg00001.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2025-9230',
-                'https://openssl-library.org/news/secadv/20250930.txt',
-                'https://ubuntu.com/security/notices/USN-7786-1',
-                'https://www.cve.org/CVERecord?id=CVE-2025-9230'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: Out-of-bounds read & write in RFC 3211 KEK Unwrap'
-            },
-            {
-              'cve':  'CVE-2024-9143',
-              'cvss': {
-                'redhat': {
-                  'v3score':  '3.7',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L'
-                }
-              },
-              'cwes': [
-                'CWE-125',
-                'CWE-787'
-              ],
-              'description':   "Issue summary: Use of the low-level GF(2^m) elliptic curve APIs with untrusted\nexplicit values for the field polynomial can lead to out-of-bounds memory reads\nor writes.\n\nImpact summary: Out of bound memory writes can lead to an application crash or\neven a possibility of a remote code execution, however, in all the protocols\ninvolving Elliptic Curve Cryptography that we're aware of, either only \"named\ncurves\" are supported, or, if explicit curve parameters are supported, they\nspecify an X9.62 encoding of binary (GF(2^m)) curves that can't represent\nproblematic input values. Thus the likelihood of existence of a vulnerable\napplication is low.\n\nIn particular, the X9.62 encoding is used for ECC keys in X.509 certificates,\nso problematic inputs cannot occur in the context of processing X.509\ncertificates.  Any problematic use-cases would have to be using an \"exotic\"\ncurve encoding.\n\nThe affected APIs include: EC_GROUP_new_curve_GF2m(), EC_GROUP_new_from_params(),\nand various supporting BN_GF2m_*() functions.\n\nApplications working with \"exotic\" explicit binary (GF(2^m)) curve parameters,\nthat make it possible to represent invalid field polynomials with a zero\nconstant term, via the above or similar APIs, may terminate abruptly as a\nresult of reading or writing outside of array bounds.  Remote code execution\ncannot easily be ruled out.\n\nThe FIPS modules in 3.3, 3.2, 3.1 and 3.0 are not affected by this issue.",
-              'diffID':        'sha256:af9a70194aa4d12f967dbd4bcb1ce9c98ba42adb4ec05536080fd4560155e809',
-              'fixedVersions': [
-                '3.1.7-r1'
-              ],
-              'installedVersion': '3.1.5-r0',
-              'packageName':      'libssl3',
-              'purl':             'pkg:apk/alpine/libssl3@3.1.5-r0?arch=x86_64&distro=3.19.2',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2024/10/16/1',
-                'http://www.openwall.com/lists/oss-security/2024/10/23/1',
-                'http://www.openwall.com/lists/oss-security/2024/10/24/1',
-                'https://access.redhat.com/security/cve/CVE-2024-9143',
-                'https://github.com/openssl/openssl/commit/72ae83ad214d2eef262461365a1975707f862712',
-                'https://github.com/openssl/openssl/commit/bc7e04d7c8d509fb78fc0e285aa948fb0da04700',
-                'https://github.com/openssl/openssl/commit/c0d3e4d32d2805f49bec30547f225bc4d092e1f4',
-                'https://github.com/openssl/openssl/commit/fdf6723362ca51bd883295efe206cb5b1cfa5154',
-                'https://github.openssl.org/openssl/extended-releases/commit/8efc0cbaa8ebba8e116f7b81a876a4123594d86a',
-                'https://github.openssl.org/openssl/extended-releases/commit/9d576994cec2b7aa37a91740ea7e680810957e41',
-                'https://lists.debian.org/debian-lts-announce/2024/10/msg00033.html',
-                'https://lists.debian.org/debian-lts-announce/2024/11/msg00000.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2024-9143',
-                'https://openssl-library.org/news/secadv/20241016.txt',
-                'https://security.netapp.com/advisory/ntap-20241101-0001/',
-                'https://ubuntu.com/security/notices/USN-7264-1',
-                'https://ubuntu.com/security/notices/USN-7278-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2024-9143'
-              ],
-              'severity':   'LOW',
-              'suppressed': false,
-              'title':      'openssl: Low-level invalid GF(2^m) parameters lead to OOB memory access'
-            },
-            {
-              'cve':  'CVE-2025-9232',
-              'cvss': {
-                'redhat': {
-                  'v3score':  '3.1',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L'
-                }
-              },
-              'cwes': [
-                'CWE-125'
-              ],
-              'description':   "Issue summary: An application using the OpenSSL HTTP client API functions may\ntrigger an out-of-bounds read if the 'no_proxy' environment variable is set and\nthe host portion of the authority component of the HTTP URL is an IPv6 address.\n\nImpact summary: An out-of-bounds read can trigger a crash which leads to\nDenial of Service for an application.\n\nThe OpenSSL HTTP client API functions can be used directly by applications\nbut they are also used by the OCSP client functions and CMP (Certificate\nManagement Protocol) client implementation in OpenSSL. However the URLs used\nby these implementations are unlikely to be controlled by an attacker.\n\nIn this vulnerable code the out of bounds read can only trigger a crash.\nFurthermore the vulnerability requires an attacker-controlled URL to be\npassed from an application to the OpenSSL function and the user has to have\na 'no_proxy' environment variable set. For the aforementioned reasons the\nissue was assessed as Low severity.\n\nThe vulnerable code was introduced in the following patch releases:\n3.0.16, 3.1.8, 3.2.4, 3.3.3, 3.4.0 and 3.5.0.\n\nThe FIPS modules in 3.5, 3.4, 3.3, 3.2, 3.1 and 3.0 are not affected by this\nissue, as the HTTP client implementation is outside the OpenSSL FIPS module\nboundary.",
-              'diffID':        'sha256:af9a70194aa4d12f967dbd4bcb1ce9c98ba42adb4ec05536080fd4560155e809',
-              'fixedVersions': [
-                '3.1.8-r1'
-              ],
-              'installedVersion': '3.1.5-r0',
-              'packageName':      'libssl3',
-              'purl':             'pkg:apk/alpine/libssl3@3.1.5-r0?arch=x86_64&distro=3.19.2',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2025/09/30/5',
-                'https://access.redhat.com/security/cve/CVE-2025-9232',
-                'https://github.com/openssl/openssl/commit/2b4ec20e47959170422922eaff25346d362dcb35',
-                'https://github.com/openssl/openssl/commit/654dc11d23468a74fc8ea4672b702dd3feb7be4b',
-                'https://github.com/openssl/openssl/commit/7cf21a30513c9e43c4bc3836c237cf086e194af3',
-                'https://github.com/openssl/openssl/commit/89e790ac431125a4849992858490bed6b225eadf',
-                'https://github.com/openssl/openssl/commit/bbf38c034cdabd0a13330abcc4855c866f53d2e0',
-                'https://nvd.nist.gov/vuln/detail/CVE-2025-9232',
-                'https://openssl-library.org/news/secadv/20250930.txt',
-                'https://ubuntu.com/security/notices/USN-7786-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2025-9232'
-              ],
-              'severity':   'LOW',
-              'suppressed': false,
-              'title':      'openssl: Out-of-bounds read in HTTP client no_proxy handling'
-            },
-            {
-              'cve':  'CVE-2025-26519',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-787'
-              ],
-              'description':   'musl libc 0.9.13 through 1.2.5 before 1.2.6 has an out-of-bounds write vulnerability when an attacker can trigger iconv conversion of untrusted EUC-KR text to UTF-8.',
-              'diffID':        'sha256:af9a70194aa4d12f967dbd4bcb1ce9c98ba42adb4ec05536080fd4560155e809',
-              'fixedVersions': [
-                '1.2.4_git20230717-r5'
-              ],
-              'installedVersion': '1.2.4_git20230717-r4',
-              'packageName':      'musl',
-              'purl':             'pkg:apk/alpine/musl@1.2.4_git20230717-r4?arch=x86_64&distro=3.19.2',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2025/02/13/2',
-                'http://www.openwall.com/lists/oss-security/2025/02/13/3',
-                'http://www.openwall.com/lists/oss-security/2025/02/13/4',
-                'http://www.openwall.com/lists/oss-security/2025/02/13/5',
-                'http://www.openwall.com/lists/oss-security/2025/02/14/5',
-                'http://www.openwall.com/lists/oss-security/2025/02/14/6',
-                'https://git.musl-libc.org/cgit/musl/commit/?id=c47ad25ea3b484e10326f933e927c0bc8cded3da',
-                'https://git.musl-libc.org/cgit/musl/commit/?id=e5adcd97b5196e29991b524237381a0202a60659',
-                'https://www.openwall.com/lists/oss-security/2025/02/13/2'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'musl libc 0.9.13 through 1.2.5 before 1.2.6 has an out-of-bounds write ...'
-            },
-            {
-              'cve':  'CVE-2025-26519',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-787'
-              ],
-              'description':   'musl libc 0.9.13 through 1.2.5 before 1.2.6 has an out-of-bounds write vulnerability when an attacker can trigger iconv conversion of untrusted EUC-KR text to UTF-8.',
-              'diffID':        'sha256:af9a70194aa4d12f967dbd4bcb1ce9c98ba42adb4ec05536080fd4560155e809',
-              'fixedVersions': [
-                '1.2.4_git20230717-r5'
-              ],
-              'installedVersion': '1.2.4_git20230717-r4',
-              'packageName':      'musl-utils',
-              'purl':             'pkg:apk/alpine/musl-utils@1.2.4_git20230717-r4?arch=x86_64&distro=3.19.2',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2025/02/13/2',
-                'http://www.openwall.com/lists/oss-security/2025/02/13/3',
-                'http://www.openwall.com/lists/oss-security/2025/02/13/4',
-                'http://www.openwall.com/lists/oss-security/2025/02/13/5',
-                'http://www.openwall.com/lists/oss-security/2025/02/14/5',
-                'http://www.openwall.com/lists/oss-security/2025/02/14/6',
-                'https://git.musl-libc.org/cgit/musl/commit/?id=c47ad25ea3b484e10326f933e927c0bc8cded3da',
-                'https://git.musl-libc.org/cgit/musl/commit/?id=e5adcd97b5196e29991b524237381a0202a60659',
-                'https://www.openwall.com/lists/oss-security/2025/02/13/2'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'musl libc 0.9.13 through 1.2.5 before 1.2.6 has an out-of-bounds write ...'
-            },
-            {
-              'cve':  'CVE-2024-58251',
-              'cwes': [
-                'CWE-150'
-              ],
-              'description':   'In netstat in BusyBox through 1.37.0, local users can launch of network application with an argv[0] containing an ANSI terminal escape sequence, leading to a denial of service (terminal locked up) when netstat is used by a victim.',
-              'diffID':        'sha256:af9a70194aa4d12f967dbd4bcb1ce9c98ba42adb4ec05536080fd4560155e809',
-              'fixedVersions': [
-                '1.36.1-r21'
-              ],
-              'installedVersion': '1.36.1-r19',
-              'packageName':      'ssl_client',
-              'purl':             'pkg:apk/alpine/ssl_client@1.36.1-r19?arch=x86_64&distro=3.19.2',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2025/04/23/6',
-                'https://bugs.busybox.net/show_bug.cgi?id=15922',
-                'https://www.busybox.net',
-                'https://www.busybox.net/downloads/',
-                'https://www.cve.org/CVERecord?id=CVE-2024-58251'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'In netstat in BusyBox through 1.37.0, local users can launch of networ ...'
-            },
-            {
-              'cve':  'CVE-2025-46394',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '3.3',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-451'
-              ],
-              'description':   'In tar in BusyBox through 1.37.0, a TAR archive can have filenames hidden from a listing through the use of terminal escape sequences.',
-              'diffID':        'sha256:af9a70194aa4d12f967dbd4bcb1ce9c98ba42adb4ec05536080fd4560155e809',
-              'fixedVersions': [
-                '1.36.1-r21'
-              ],
-              'installedVersion': '1.36.1-r19',
-              'packageName':      'ssl_client',
-              'purl':             'pkg:apk/alpine/ssl_client@1.36.1-r19?arch=x86_64&distro=3.19.2',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2025/04/23/5',
-                'http://www.openwall.com/lists/oss-security/2025/04/24/3',
-                'https://bugs.busybox.net/show_bug.cgi?id=16018',
-                'https://lists.busybox.net/pipermail/busybox/2024-July/090806.html',
-                'https://lists.busybox.net/pipermail/busybox/2024-July/090814.html',
-                'https://www.busybox.net',
-                'https://www.busybox.net/downloads/',
-                'https://www.cve.org/CVERecord?id=CVE-2025-46394',
-                'https://www.openwall.com/lists/oss-security/2025/04/23/1'
-              ],
-              'severity':   'LOW',
-              'suppressed': false,
-              'title':      'In tar in BusyBox through 1.37.0, a TAR archive can have filenames hid ...'
-            }
-          ]
-        }
-      ],
-      'summary': {
-        'critical':   0,
-        'high':       4,
-        'low':        7,
-        'medium':     11,
-        'suppressed': 0,
-        'unknown':    0
-      }
-    }
-  },
-  {
-    'id':    'default/b509df27eaab1d0314c74b4bdc0fd39df5f28eef3ea02929c80067225cc6bbbb',
-    'type':  'storage.sbomscanner.kubewarden.io.vulnerabilityreport',
-    'links': {
-      'patch':  'https://localhost:8005/v1/storage.sbomscanner.kubewarden.io.vulnerabilityreports/default/b509df27eaab1d0314c74b4bdc0fd39df5f28eef3ea02929c80067225cc6bbbb',
-      'remove': 'https://localhost:8005/v1/storage.sbomscanner.kubewarden.io.vulnerabilityreports/default/b509df27eaab1d0314c74b4bdc0fd39df5f28eef3ea02929c80067225cc6bbbb',
-      'self':   'https://localhost:8005/v1/storage.sbomscanner.kubewarden.io.vulnerabilityreports/default/b509df27eaab1d0314c74b4bdc0fd39df5f28eef3ea02929c80067225cc6bbbb',
-      'update': 'https://localhost:8005/v1/storage.sbomscanner.kubewarden.io.vulnerabilityreports/default/b509df27eaab1d0314c74b4bdc0fd39df5f28eef3ea02929c80067225cc6bbbb',
-      'view':   'https://localhost:8005/apis/storage.sbomscanner.kubewarden.io/v1alpha1/namespaces/default/vulnerabilityreports/b509df27eaab1d0314c74b4bdc0fd39df5f28eef3ea02929c80067225cc6bbbb'
-    },
-    'apiVersion':    'storage.sbomscanner.kubewarden.io/v1alpha1',
-    'imageMetadata': {
-      'digest':      'sha256:4217ef60b4b11942f76d992798c5904782ebb86f70742800644da32ba3a6f25b',
-      'platform':    'linux/s390x',
-      'registry':    'lsong-demo1',
-      'registryURI': 'registry-1.docker.io',
-      'repository':  'library/alpine',
-      'tag':         '3.12.3'
-    },
-    'kind':     'VulnerabilityReport',
-    'metadata': {
-      'creationTimestamp': '2026-01-14T18:52:04Z',
-      'fields':            [
-        'b509df27eaab1d0314c74b4bdc0fd39df5f28eef3ea02929c80067225cc6bbbb',
-        'registry-1.docker.io/library/alpine:3.12.3',
-        'linux/s390x',
-        '44 (0 suppressed)'
-      ],
-      'labels': {
-        'app.kubernetes.io/managed-by':          'sbomscanner',
-        'app.kubernetes.io/part-of':             'sbomscanner',
-        'sbomscanner.kubewarden.io/scanjob-uid': '445c600a-c4b6-40b3-bd71-f2d2140a37d5'
-      },
-      'name':            'b509df27eaab1d0314c74b4bdc0fd39df5f28eef3ea02929c80067225cc6bbbb',
-      'namespace':       'default',
-      'ownerReferences': [
-        {
-          'apiVersion':         'storage.sbomscanner.kubewarden.io/v1alpha1',
-          'blockOwnerDeletion': true,
-          'controller':         true,
-          'kind':               'SBOM',
-          'name':               'b509df27eaab1d0314c74b4bdc0fd39df5f28eef3ea02929c80067225cc6bbbb',
-          'uid':                'e03e7b47-0f34-4ec9-a622-d5d11f4bf6c1'
-        }
-      ],
-      'relationships': [
-        {
-          'fromId':   'default/b509df27eaab1d0314c74b4bdc0fd39df5f28eef3ea02929c80067225cc6bbbb',
-          'fromType': 'storage.sbomscanner.kubewarden.io.sbom',
-          'rel':      'owner',
-          'state':    'active',
-          'message':  'Resource is current'
-        }
-      ],
-      'resourceVersion': '1',
-      'state':           {
-        'error':         false,
-        'message':       'Resource is current',
-        'name':          'active',
-        'transitioning': false
-      },
-      'uid': '6fc1d97d-7946-434d-8729-ef841eb9a27f'
-    },
-    'report': {
-      'results': [
-        {
-          'class':           'os-pkgs',
-          'target':          '/var/run/worker/trivy.sbom.4152635624.json (alpine 3.12.3)',
-          'type':            'alpine',
-          'vulnerabilities': [
-            {
-              'cve':  'CVE-2021-36159',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '9.1',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '9.1',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-125'
-              ],
-              'description':   "libfetch before 2021-07-26, as used in apk-tools, xbps, and other products, mishandles numeric strings for the FTP and HTTP protocols. The FTP passive mode implementation allows an out-of-bounds read because strtol is used to parse the relevant numbers into address bytes. It does not check if the line ends prematurely. If it does, the for-loop condition checks for the '\\0' terminator one byte too late.",
-              'diffID':        'sha256:f1498886f9a6173beaafc4fee55074d6c389ce2f70d1a4b0ee866e4ab45a41ad',
-              'fixedVersions': [
-                '2.10.7-r0'
-              ],
-              'installedVersion': '2.10.5-r1',
-              'packageName':      'apk-tools',
-              'purl':             'pkg:apk/alpine/apk-tools@2.10.5-r1?arch=s390x&distro=3.12.3',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-36159',
-                'https://github.com/freebsd/freebsd-src/commits/main/lib/libfetch',
-                'https://gitlab.alpinelinux.org/alpine/apk-tools/-/issues/10749',
-                'https://lists.apache.org/thread.html/r61db8e7dcb56dc000a5387a88f7a473bacec5ee01b9ff3f55308aacc%40%3Cdev.kafka.apache.org%3E',
-                'https://lists.apache.org/thread.html/r61db8e7dcb56dc000a5387a88f7a473bacec5ee01b9ff3f55308aacc%40%3Cusers.kafka.apache.org%3E',
-                'https://lists.apache.org/thread.html/rbf4ce74b0d1fa9810dec50ba3ace0caeea677af7c27a97111c06ccb7%40%3Cdev.kafka.apache.org%3E',
-                'https://lists.apache.org/thread.html/rbf4ce74b0d1fa9810dec50ba3ace0caeea677af7c27a97111c06ccb7%40%3Cusers.kafka.apache.org%3E',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-36159',
-                'https://www.cve.org/CVERecord?id=CVE-2021-36159'
-              ],
-              'severity':   'CRITICAL',
-              'suppressed': false,
-              'title':      'libfetch: an out of boundary read while libfetch uses strtol to parse the relevant numbers into address bytes leads to information leak or crash'
-            },
-            {
-              'cve':  'CVE-2021-30139',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-125'
-              ],
-              'description':   'In Alpine Linux apk-tools before 2.12.5, the tarball parser allows a buffer overflow and crash.',
-              'diffID':        'sha256:f1498886f9a6173beaafc4fee55074d6c389ce2f70d1a4b0ee866e4ab45a41ad',
-              'fixedVersions': [
-                '2.10.6-r0'
-              ],
-              'installedVersion': '2.10.5-r1',
-              'packageName':      'apk-tools',
-              'purl':             'pkg:apk/alpine/apk-tools@2.10.5-r1?arch=s390x&distro=3.12.3',
-              'references':       [
-                'https://gitlab.alpinelinux.org/alpine/apk-tools/-/issues/10741',
-                'https://gitlab.alpinelinux.org/alpine/aports/-/issues/12606'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false
-            },
-            {
-              'cve':  'CVE-2021-28831',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-755'
-              ],
-              'description':   'decompress_gunzip.c in BusyBox through 1.32.1 mishandles the error bit on the huft_build result pointer, with a resultant invalid free or segmentation fault, via malformed gzip data.',
-              'diffID':        'sha256:f1498886f9a6173beaafc4fee55074d6c389ce2f70d1a4b0ee866e4ab45a41ad',
-              'fixedVersions': [
-                '1.31.1-r20'
-              ],
-              'installedVersion': '1.31.1-r19',
-              'packageName':      'busybox',
-              'purl':             'pkg:apk/alpine/busybox@1.31.1-r19?arch=s390x&distro=3.12.3',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-28831',
-                'https://git.busybox.net/busybox/commit/?id=f25d254dfd4243698c31a4f3153d4ac72aa9e9bd',
-                'https://lists.debian.org/debian-lts-announce/2021/04/msg00001.html',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/3UDQGJRECXFS5EZVDH2OI45FMO436AC4/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/Z7ZIFKPRR32ZYA3WAA2NXFA3QHHOU6FJ/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZASBW7QRRLY5V2R44MQ4QQM4CZIDHM2U/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-28831',
-                'https://security.gentoo.org/glsa/202105-09',
-                'https://security.netapp.com/advisory/ntap-20250509-0005/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://ubuntu.com/security/notices/USN-5179-2',
-                'https://ubuntu.com/security/notices/USN-6335-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-28831'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: invalid free or segmentation fault via malformed gzip data'
-            },
-            {
-              'cve':  'CVE-2021-42378',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the getvar_i function",
-              'diffID':        'sha256:f1498886f9a6173beaafc4fee55074d6c389ce2f70d1a4b0ee866e4ab45a41ad',
-              'fixedVersions': [
-                '1.31.1-r21'
-              ],
-              'installedVersion': '1.31.1-r19',
-              'packageName':      'busybox',
-              'purl':             'pkg:apk/alpine/busybox@1.31.1-r19?arch=s390x&distro=3.12.3',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42378',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42378',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42378'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the getvar_i()'
-            },
-            {
-              'cve':  'CVE-2021-42379',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the next_input_file function",
-              'diffID':        'sha256:f1498886f9a6173beaafc4fee55074d6c389ce2f70d1a4b0ee866e4ab45a41ad',
-              'fixedVersions': [
-                '1.31.1-r21'
-              ],
-              'installedVersion': '1.31.1-r19',
-              'packageName':      'busybox',
-              'purl':             'pkg:apk/alpine/busybox@1.31.1-r19?arch=s390x&distro=3.12.3',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42379',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42379',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42379'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the next_input_file()'
-            },
-            {
-              'cve':  'CVE-2021-42380',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the clrvar function",
-              'diffID':        'sha256:f1498886f9a6173beaafc4fee55074d6c389ce2f70d1a4b0ee866e4ab45a41ad',
-              'fixedVersions': [
-                '1.31.1-r21'
-              ],
-              'installedVersion': '1.31.1-r19',
-              'packageName':      'busybox',
-              'purl':             'pkg:apk/alpine/busybox@1.31.1-r19?arch=s390x&distro=3.12.3',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42380',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42380',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42380'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the clrvar()'
-            },
-            {
-              'cve':  'CVE-2021-42381',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the hash_init function",
-              'diffID':        'sha256:f1498886f9a6173beaafc4fee55074d6c389ce2f70d1a4b0ee866e4ab45a41ad',
-              'fixedVersions': [
-                '1.31.1-r21'
-              ],
-              'installedVersion': '1.31.1-r19',
-              'packageName':      'busybox',
-              'purl':             'pkg:apk/alpine/busybox@1.31.1-r19?arch=s390x&distro=3.12.3',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42381',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42381',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42381'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the hash_init()'
-            },
-            {
-              'cve':  'CVE-2021-42382',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the getvar_s function",
-              'diffID':        'sha256:f1498886f9a6173beaafc4fee55074d6c389ce2f70d1a4b0ee866e4ab45a41ad',
-              'fixedVersions': [
-                '1.31.1-r21'
-              ],
-              'installedVersion': '1.31.1-r19',
-              'packageName':      'busybox',
-              'purl':             'pkg:apk/alpine/busybox@1.31.1-r19?arch=s390x&distro=3.12.3',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42382',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42382',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42382'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the getvar_s()'
-            },
-            {
-              'cve':  'CVE-2021-42383',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the evaluate function",
-              'diffID':        'sha256:f1498886f9a6173beaafc4fee55074d6c389ce2f70d1a4b0ee866e4ab45a41ad',
-              'fixedVersions': [
-                '1.31.1-r21'
-              ],
-              'installedVersion': '1.31.1-r19',
-              'packageName':      'busybox',
-              'purl':             'pkg:apk/alpine/busybox@1.31.1-r19?arch=s390x&distro=3.12.3',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42383',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42383',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42383'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the evaluate()'
-            },
-            {
-              'cve':  'CVE-2021-42384',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the handle_special function",
-              'diffID':        'sha256:f1498886f9a6173beaafc4fee55074d6c389ce2f70d1a4b0ee866e4ab45a41ad',
-              'fixedVersions': [
-                '1.31.1-r21'
-              ],
-              'installedVersion': '1.31.1-r19',
-              'packageName':      'busybox',
-              'purl':             'pkg:apk/alpine/busybox@1.31.1-r19?arch=s390x&distro=3.12.3',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42384',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42384',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42384'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the handle_special()'
-            },
-            {
-              'cve':  'CVE-2021-42385',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the evaluate function",
-              'diffID':        'sha256:f1498886f9a6173beaafc4fee55074d6c389ce2f70d1a4b0ee866e4ab45a41ad',
-              'fixedVersions': [
-                '1.31.1-r21'
-              ],
-              'installedVersion': '1.31.1-r19',
-              'packageName':      'busybox',
-              'purl':             'pkg:apk/alpine/busybox@1.31.1-r19?arch=s390x&distro=3.12.3',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42385',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42385',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42385'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the evaluate()'
-            },
-            {
-              'cve':  'CVE-2021-42386',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the nvalloc function",
-              'diffID':        'sha256:f1498886f9a6173beaafc4fee55074d6c389ce2f70d1a4b0ee866e4ab45a41ad',
-              'fixedVersions': [
-                '1.31.1-r21'
-              ],
-              'installedVersion': '1.31.1-r19',
-              'packageName':      'busybox',
-              'purl':             'pkg:apk/alpine/busybox@1.31.1-r19?arch=s390x&distro=3.12.3',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42386',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42386',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42386'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the nvalloc()'
-            },
-            {
-              'cve':  'CVE-2022-28391',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '8.8',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-88'
-              ],
-              'description':   "BusyBox through 1.35.0 allows remote attackers to execute arbitrary code if netstat is used to print a DNS PTR record's value to a VT compatible terminal. Alternatively, the attacker could choose to change the terminal's colors.",
-              'diffID':        'sha256:f1498886f9a6173beaafc4fee55074d6c389ce2f70d1a4b0ee866e4ab45a41ad',
-              'fixedVersions': [
-                '1.31.1-r22'
-              ],
-              'installedVersion': '1.31.1-r19',
-              'packageName':      'busybox',
-              'purl':             'pkg:apk/alpine/busybox@1.31.1-r19?arch=s390x&distro=3.12.3',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2022-28391',
-                'https://git.alpinelinux.org/aports/plain/main/busybox/0001-libbb-sockaddr2str-ensure-only-printable-characters-.patch',
-                'https://git.alpinelinux.org/aports/plain/main/busybox/0002-nslookup-sanitize-all-printed-strings-with-printable.patch',
-                'https://gitlab.alpinelinux.org/alpine/aports/-/issues/13661',
-                'https://nvd.nist.gov/vuln/detail/CVE-2022-28391',
-                'https://www.cve.org/CVERecord?id=CVE-2022-28391'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: remote attackers may execute arbitrary code if netstat is used'
-            },
-            {
-              'cve':  'CVE-2021-42374',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '5.7',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-125'
-              ],
-              'description':   "An out-of-bounds heap read in Busybox's unlzma applet leads to information leak and denial of service when crafted LZMA-compressed input is decompressed. This can be triggered by any applet/format that",
-              'diffID':        'sha256:f1498886f9a6173beaafc4fee55074d6c389ce2f70d1a4b0ee866e4ab45a41ad',
-              'fixedVersions': [
-                '1.31.1-r21'
-              ],
-              'installedVersion': '1.31.1-r19',
-              'packageName':      'busybox',
-              'purl':             'pkg:apk/alpine/busybox@1.31.1-r19?arch=s390x&distro=3.12.3',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42374',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42374',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42374'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'busybox: out-of-bounds read in unlzma applet leads to information leak and denial of service when crafted LZMA-compressed input is decompressed'
-            },
-            {
-              'cve':  'CVE-2021-3711',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '9.8',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'nvd': {
-                  'v3score':  '9.8',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '9.8',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-120'
-              ],
-              'description':   'In order to decrypt SM2 encrypted data an application is expected to call the API function EVP_PKEY_decrypt(). Typically an application will call this function twice. The first time, on entry, the "out" parameter can be NULL and, on exit, the "outlen" parameter is populated with the buffer size required to hold the decrypted plaintext. The application can then allocate a sufficiently sized buffer and call EVP_PKEY_decrypt() again, but this time passing a non-NULL value for the "out" parameter. A bug in the implementation of the SM2 decryption code means that the calculation of the buffer size required to hold the plaintext returned by the first call to EVP_PKEY_decrypt() can be smaller than the actual size required by the second call. This can lead to a buffer overflow when EVP_PKEY_decrypt() is called by the application a second time with a buffer that is too small. A malicious attacker who is able present SM2 content for decryption to an application could cause attacker chosen data to overflow the buffer by up to a maximum of 62 bytes altering the contents of other data held after the buffer, possibly changing application behaviour or causing the application to crash. The location of the buffer is application dependent but is typically heap allocated. Fixed in OpenSSL 1.1.1l (Affected 1.1.1-1.1.1k).',
-              'diffID':        'sha256:f1498886f9a6173beaafc4fee55074d6c389ce2f70d1a4b0ee866e4ab45a41ad',
-              'fixedVersions': [
-                '1.1.1l-r0'
-              ],
-              'installedVersion': '1.1.1i-r0',
-              'packageName':      'libcrypto1.1',
-              'purl':             'pkg:apk/alpine/libcrypto1.1@1.1.1i-r0?arch=s390x&distro=3.12.3',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2021/08/26/2',
-                'https://access.redhat.com/security/cve/CVE-2021-3711',
-                'https://cert-portal.siemens.com/productcert/pdf/ssa-389290.pdf',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=59f5e75f3bced8fc0e130d72a3f582cf7b480b46',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=59f5e75f3bced8fc0e130d72a3f582cf7b480b46',
-                'https://lists.apache.org/thread.html/r18995de860f0e63635f3008fd2a6aca82394249476d21691e7c59c9e%40%3Cdev.tomcat.apache.org%3E',
-                'https://lists.apache.org/thread.html/r18995de860f0e63635f3008fd2a6aca82394249476d21691e7c59c9e@%3Cdev.tomcat.apache.org%3E',
-                'https://lists.apache.org/thread.html/rad5d9f83f0d11fb3f8bb148d179b8a9ad7c6a17f18d70e5805a713d1%40%3Cdev.tomcat.apache.org%3E',
-                'https://lists.apache.org/thread.html/rad5d9f83f0d11fb3f8bb148d179b8a9ad7c6a17f18d70e5805a713d1@%3Cdev.tomcat.apache.org%3E',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-3711',
-                'https://rustsec.org/advisories/RUSTSEC-2021-0097.html',
-                'https://security.gentoo.org/glsa/202209-02',
-                'https://security.gentoo.org/glsa/202210-02',
-                'https://security.netapp.com/advisory/ntap-20210827-0010',
-                'https://security.netapp.com/advisory/ntap-20210827-0010/',
-                'https://security.netapp.com/advisory/ntap-20211022-0003',
-                'https://security.netapp.com/advisory/ntap-20211022-0003/',
-                'https://security.netapp.com/advisory/ntap-20240621-0006',
-                'https://security.netapp.com/advisory/ntap-20240621-0006/',
-                'https://ubuntu.com/security/notices/USN-5051-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-3711',
-                'https://www.debian.org/security/2021/dsa-4963',
-                'https://www.openssl.org/news/secadv/20210824.txt',
-                'https://www.oracle.com/security-alerts/cpuapr2022.html',
-                'https://www.oracle.com/security-alerts/cpujan2022.html',
-                'https://www.oracle.com/security-alerts/cpuoct2021.html',
-                'https://www.tenable.com/security/tns-2021-16',
-                'https://www.tenable.com/security/tns-2022-02'
-              ],
-              'severity':   'CRITICAL',
-              'suppressed': false,
-              'title':      'openssl: SM2 Decryption Buffer Overflow'
-            },
-            {
-              'cve':  'CVE-2021-23840',
-              'cvss': {
-                'bitnami': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'ghsa': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'nvd': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-190'
-              ],
-              'description':   'Calls to EVP_CipherUpdate, EVP_EncryptUpdate and EVP_DecryptUpdate may overflow the output length argument in some cases where the input length is close to the maximum permissable length for an integer on the platform. In such cases the return value from the function call will be 1 (indicating success), but the output length value will be negative. This could cause applications to behave incorrectly or crash. OpenSSL versions 1.1.1i and below are affected by this issue. Users of these versions should upgrade to OpenSSL 1.1.1j. OpenSSL versions 1.0.2x and below are affected by this issue. However OpenSSL 1.0.2 is out of support and no longer receiving public updates. Premium support customers of OpenSSL 1.0.2 should upgrade to 1.0.2y. Other users should upgrade to 1.1.1j. Fixed in OpenSSL 1.1.1j (Affected 1.1.1-1.1.1i). Fixed in OpenSSL 1.0.2y (Affected 1.0.2-1.0.2x).',
-              'diffID':        'sha256:f1498886f9a6173beaafc4fee55074d6c389ce2f70d1a4b0ee866e4ab45a41ad',
-              'fixedVersions': [
-                '1.1.1j-r0'
-              ],
-              'installedVersion': '1.1.1i-r0',
-              'packageName':      'libcrypto1.1',
-              'purl':             'pkg:apk/alpine/libcrypto1.1@1.1.1i-r0?arch=s390x&distro=3.12.3',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-23840',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=1908036',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=1930310',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=1930324',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=1934534',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=1934600',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=1939637',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=1940085',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=1965362',
-                'https://cert-portal.siemens.com/productcert/pdf/ssa-389290.pdf',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-23840',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-23841',
-                'https://errata.rockylinux.org/RLSA-2021:4424',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=6a51b9e1d0cf0bf8515f7201b68fb0a3482b3dc1',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=9b1129239f3ebb1d1c98ce9ed41d5c9476c47cb2',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=6a51b9e1d0cf0bf8515f7201b68fb0a3482b3dc1',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=9b1129239f3ebb1d1c98ce9ed41d5c9476c47cb2',
-                'https://github.com/alexcrichton/openssl-src-rs',
-                'https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA44846',
-                'https://kc.mcafee.com/corporate/index?page=content&id=SB10366',
-                'https://linux.oracle.com/cve/CVE-2021-23840.html',
-                'https://linux.oracle.com/errata/ELSA-2021-9561.html',
-                'https://lists.apache.org/thread.html/r58af02e294bd07f487e2c64ffc0a29b837db5600e33b6e698b9d696b%40%3Cissues.bookkeeper.apache.org%3E',
-                'https://lists.apache.org/thread.html/r58af02e294bd07f487e2c64ffc0a29b837db5600e33b6e698b9d696b@%3Cissues.bookkeeper.apache.org%3E',
-                'https://lists.apache.org/thread.html/rf4c02775860db415b4955778a131c2795223f61cb8c6a450893651e4%40%3Cissues.bookkeeper.apache.org%3E',
-                'https://lists.apache.org/thread.html/rf4c02775860db415b4955778a131c2795223f61cb8c6a450893651e4@%3Cissues.bookkeeper.apache.org%3E',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-23840',
-                'https://rustsec.org/advisories/RUSTSEC-2021-0057.html',
-                'https://security.gentoo.org/glsa/202103-03',
-                'https://security.netapp.com/advisory/ntap-20210219-0009',
-                'https://security.netapp.com/advisory/ntap-20210219-0009/',
-                'https://security.netapp.com/advisory/ntap-20240621-0006/',
-                'https://ubuntu.com/security/notices/USN-4738-1',
-                'https://ubuntu.com/security/notices/USN-5088-1',
-                'https://ubuntu.com/security/notices/USN-7018-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-23840',
-                'https://www.debian.org/security/2021/dsa-4855',
-                'https://www.openssl.org/news/secadv/20210216.txt',
-                'https://www.oracle.com//security-alerts/cpujul2021.html',
-                'https://www.oracle.com/security-alerts/cpuApr2021.html',
-                'https://www.oracle.com/security-alerts/cpuapr2022.html',
-                'https://www.oracle.com/security-alerts/cpujan2022.html',
-                'https://www.oracle.com/security-alerts/cpuoct2021.html',
-                'https://www.tenable.com/security/tns-2021-03',
-                'https://www.tenable.com/security/tns-2021-09',
-                'https://www.tenable.com/security/tns-2021-10'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: integer overflow in CipherUpdate'
-            },
-            {
-              'cve':  'CVE-2021-3450',
-              'cvss': {
-                'bitnami': {
-                  'v3score':  '7.4',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N'
-                },
-                'ghsa': {
-                  'v3score':  '7.4',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N'
-                },
-                'nvd': {
-                  'v3score':  '7.4',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N'
-                },
-                'redhat': {
-                  'v3score':  '7.4',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-295'
-              ],
-              'description':   'The X509_V_FLAG_X509_STRICT flag enables additional security checks of the certificates present in a certificate chain. It is not set by default. Starting from OpenSSL version 1.1.1h a check to disallow certificates in the chain that have explicitly encoded elliptic curve parameters was added as an additional strict check. An error in the implementation of this check meant that the result of a previous check to confirm that certificates in the chain are valid CA certificates was overwritten. This effectively bypasses the check that non-CA certificates must not be able to issue other certificates. If a "purpose" has been configured then there is a subsequent opportunity for checks that the certificate is a valid CA. All of the named "purpose" values implemented in libcrypto perform this check. Therefore, where a purpose is set the certificate chain will still be rejected even when the strict flag has been used. A purpose is set by default in libssl client and server certificate verification routines, but it can be overridden or removed by an application. In order to be affected, an application must explicitly set the X509_V_FLAG_X509_STRICT verification flag and either not set a purpose for the certificate verification or, in the case of TLS client or server applications, override the default purpose. OpenSSL versions 1.1.1h and newer are affected by this issue. Users of these versions should upgrade to OpenSSL 1.1.1k. OpenSSL 1.0.2 is not impacted by this issue. Fixed in OpenSSL 1.1.1k (Affected 1.1.1h-1.1.1j).',
-              'diffID':        'sha256:f1498886f9a6173beaafc4fee55074d6c389ce2f70d1a4b0ee866e4ab45a41ad',
-              'fixedVersions': [
-                '1.1.1k-r0'
-              ],
-              'installedVersion': '1.1.1i-r0',
-              'packageName':      'libcrypto1.1',
-              'purl':             'pkg:apk/alpine/libcrypto1.1@1.1.1i-r0?arch=s390x&distro=3.12.3',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2021/03/27/1',
-                'http://www.openwall.com/lists/oss-security/2021/03/27/2',
-                'http://www.openwall.com/lists/oss-security/2021/03/28/3',
-                'http://www.openwall.com/lists/oss-security/2021/03/28/4',
-                'https://access.redhat.com/security/cve/CVE-2021-3450',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=1941547',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=1941554',
-                'https://cert-portal.siemens.com/productcert/pdf/ssa-389290.pdf',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-3449',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-3450',
-                'https://errata.rockylinux.org/RLSA-2021:1024',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=2a40b7bc7b94dd7de897a74571e7024f0cf0d63b',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=2a40b7bc7b94dd7de897a74571e7024f0cf0d63b',
-                'https://github.com/alexcrichton/openssl-src-rs',
-                'https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA44845',
-                'https://kc.mcafee.com/corporate/index?page=content&id=SB10356',
-                'https://linux.oracle.com/cve/CVE-2021-3450.html',
-                'https://linux.oracle.com/errata/ELSA-2021-9151.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CCBFLLVQVILIVGZMBJL3IXZGKWQISYNP/',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/CCBFLLVQVILIVGZMBJL3IXZGKWQISYNP',
-                'https://mta.openssl.org/pipermail/openssl-announce/2021-March/000198.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-3450',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2021-0013',
-                'https://rustsec.org/advisories/RUSTSEC-2021-0056.html',
-                'https://security.FreeBSD.org/advisories/FreeBSD-SA-21:07.openssl.asc',
-                'https://security.gentoo.org/glsa/202103-03',
-                'https://security.netapp.com/advisory/ntap-20210326-0006',
-                'https://security.netapp.com/advisory/ntap-20210326-0006/',
-                'https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-openssl-2021-GHY28dJd',
-                'https://www.cve.org/CVERecord?id=CVE-2021-3450',
-                'https://www.openssl.org/news/secadv/20210325.txt',
-                'https://www.oracle.com//security-alerts/cpujul2021.html',
-                'https://www.oracle.com/security-alerts/cpuApr2021.html',
-                'https://www.oracle.com/security-alerts/cpuapr2022.html',
-                'https://www.oracle.com/security-alerts/cpujul2022.html',
-                'https://www.oracle.com/security-alerts/cpuoct2021.html',
-                'https://www.tenable.com/security/tns-2021-05',
-                'https://www.tenable.com/security/tns-2021-08',
-                'https://www.tenable.com/security/tns-2021-09'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: CA certificate check bypass with X509_V_FLAG_X509_STRICT'
-            },
-            {
-              'cve':  'CVE-2021-3712',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '7.4',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H'
-                },
-                'nvd': {
-                  'v3score':  '7.4',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.4',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-125'
-              ],
-              'description':   "ASN.1 strings are represented internally within OpenSSL as an ASN1_STRING structure which contains a buffer holding the string data and a field holding the buffer length. This contrasts with normal C strings which are repesented as a buffer for the string data which is terminated with a NUL (0) byte. Although not a strict requirement, ASN.1 strings that are parsed using OpenSSL's own \"d2i\" functions (and other similar parsing functions) as well as any string whose value has been set with the ASN1_STRING_set() function will additionally NUL terminate the byte array in the ASN1_STRING structure. However, it is possible for applications to directly construct valid ASN1_STRING structures which do not NUL terminate the byte array by directly setting the \"data\" and \"length\" fields in the ASN1_STRING array. This can also happen by using the ASN1_STRING_set0() function. Numerous OpenSSL functions that print ASN.1 data have been found to assume that the ASN1_STRING byte array will be NUL terminated, even though this is not guaranteed for strings that have been directly constructed. Where an application requests an ASN.1 structure to be printed, and where that ASN.1 structure contains ASN1_STRINGs that have been directly constructed by the application without NUL terminating the \"data\" field, then a read buffer overrun can occur. The same thing can also occur during name constraints processing of certificates (for example if a certificate has been directly constructed by the application instead of loading it via the OpenSSL parsing functions, and the certificate contains non NUL terminated ASN1_STRING structures). It can also occur in the X509_get1_email(), X509_REQ_get1_email() and X509_get1_ocsp() functions. If a malicious actor can cause an application to directly construct an ASN1_STRING and then process it through one of the affected OpenSSL functions then this issue could be hit. This might result in a crash (causing a Denial of Service attack). It could also result in the disclosure of private memory contents (such as private keys, or sensitive plaintext). Fixed in OpenSSL 1.1.1l (Affected 1.1.1-1.1.1k). Fixed in OpenSSL 1.0.2za (Affected 1.0.2-1.0.2y).",
-              'diffID':        'sha256:f1498886f9a6173beaafc4fee55074d6c389ce2f70d1a4b0ee866e4ab45a41ad',
-              'fixedVersions': [
-                '1.1.1l-r0'
-              ],
-              'installedVersion': '1.1.1i-r0',
-              'packageName':      'libcrypto1.1',
-              'purl':             'pkg:apk/alpine/libcrypto1.1@1.1.1i-r0?arch=s390x&distro=3.12.3',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2021/08/26/2',
-                'https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2021-3712.json',
-                'https://access.redhat.com/security/cve/CVE-2021-3712',
-                'https://cert-portal.siemens.com/productcert/pdf/ssa-244969.pdf',
-                'https://cert-portal.siemens.com/productcert/pdf/ssa-389290.pdf',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=94d23fcff9b2a7a8368dfe52214d5c2569882c11',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=ccb0a11145ee72b042d10593a64eaf9e8a55ec12',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=94d23fcff9b2a7a8368dfe52214d5c2569882c11',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=ccb0a11145ee72b042d10593a64eaf9e8a55ec12',
-                'https://kc.mcafee.com/corporate/index?page=content&id=SB10366',
-                'https://linux.oracle.com/cve/CVE-2021-3712.html',
-                'https://linux.oracle.com/errata/ELSA-2022-9023.html',
-                'https://lists.apache.org/thread.html/r18995de860f0e63635f3008fd2a6aca82394249476d21691e7c59c9e%40%3Cdev.tomcat.apache.org%3E',
-                'https://lists.apache.org/thread.html/r18995de860f0e63635f3008fd2a6aca82394249476d21691e7c59c9e@%3Cdev.tomcat.apache.org%3E',
-                'https://lists.apache.org/thread.html/rad5d9f83f0d11fb3f8bb148d179b8a9ad7c6a17f18d70e5805a713d1%40%3Cdev.tomcat.apache.org%3E',
-                'https://lists.apache.org/thread.html/rad5d9f83f0d11fb3f8bb148d179b8a9ad7c6a17f18d70e5805a713d1@%3Cdev.tomcat.apache.org%3E',
-                'https://lists.debian.org/debian-lts-announce/2021/09/msg00014.html',
-                'https://lists.debian.org/debian-lts-announce/2021/09/msg00021.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-3712',
-                'https://rustsec.org/advisories/RUSTSEC-2021-0098.html',
-                'https://security.gentoo.org/glsa/202209-02',
-                'https://security.gentoo.org/glsa/202210-02',
-                'https://security.netapp.com/advisory/ntap-20210827-0010',
-                'https://security.netapp.com/advisory/ntap-20210827-0010/',
-                'https://security.netapp.com/advisory/ntap-20240621-0006',
-                'https://security.netapp.com/advisory/ntap-20240621-0006/',
-                'https://ubuntu.com/security/notices/USN-5051-1',
-                'https://ubuntu.com/security/notices/USN-5051-2',
-                'https://ubuntu.com/security/notices/USN-5051-3',
-                'https://ubuntu.com/security/notices/USN-5051-4 (regression only in trusty/esm)',
-                'https://ubuntu.com/security/notices/USN-5088-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-3712',
-                'https://www.debian.org/security/2021/dsa-4963',
-                'https://www.openssl.org/news/secadv/20210824.txt',
-                'https://www.oracle.com/security-alerts/cpuapr2022.html',
-                'https://www.oracle.com/security-alerts/cpujan2022.html',
-                'https://www.oracle.com/security-alerts/cpuoct2021.html',
-                'https://www.tenable.com/security/tns-2021-16',
-                'https://www.tenable.com/security/tns-2022-02'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: Read buffer overruns processing ASN.1 strings'
-            },
-            {
-              'cve':  'CVE-2022-0778',
-              'cvss': {
-                'bitnami': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'ghsa': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'nvd': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-835'
-              ],
-              'description':   'The BN_mod_sqrt() function, which computes a modular square root, contains a bug that can cause it to loop forever for non-prime moduli. Internally this function is used when parsing certificates that contain elliptic curve public keys in compressed form or explicit elliptic curve parameters with a base point encoded in compressed form. It is possible to trigger the infinite loop by crafting a certificate that has invalid explicit curve parameters. Since certificate parsing happens prior to verification of the certificate signature, any process that parses an externally supplied certificate may thus be subject to a denial of service attack. The infinite loop can also be reached when parsing crafted private keys as they can contain explicit elliptic curve parameters. Thus vulnerable situations include: - TLS clients consuming server certificates - TLS servers consuming client certificates - Hosting providers taking certificates or private keys from customers - Certificate authorities parsing certification requests from subscribers - Anything else which parses ASN.1 elliptic curve parameters Also any other applications that use the BN_mod_sqrt() where the attacker can control the parameter values are vulnerable to this DoS issue. In the OpenSSL 1.0.2 version the public key is not parsed during initial parsing of the certificate which makes it slightly harder to trigger the infinite loop. However any operation which requires the public key from the certificate will trigger the infinite loop. In particular the attacker can use a self-signed certificate to trigger the loop during verification of the certificate signature. This issue affects OpenSSL versions 1.0.2, 1.1.1 and 3.0. It was addressed in the releases of 1.1.1n and 3.0.2 on the 15th March 2022. Fixed in OpenSSL 3.0.2 (Affected 3.0.0,3.0.1). Fixed in OpenSSL 1.1.1n (Affected 1.1.1-1.1.1m). Fixed in OpenSSL 1.0.2zd (Affected 1.0.2-1.0.2zc).',
-              'diffID':        'sha256:f1498886f9a6173beaafc4fee55074d6c389ce2f70d1a4b0ee866e4ab45a41ad',
-              'fixedVersions': [
-                '1.1.1n-r0'
-              ],
-              'installedVersion': '1.1.1i-r0',
-              'packageName':      'libcrypto1.1',
-              'purl':             'pkg:apk/alpine/libcrypto1.1@1.1.1i-r0?arch=s390x&distro=3.12.3',
-              'references':       [
-                'http://packetstormsecurity.com/files/167344/OpenSSL-1.0.2-1.1.1-3.0-BN_mod_sqrt-Infinite-Loop.html',
-                'http://seclists.org/fulldisclosure/2022/May/33',
-                'http://seclists.org/fulldisclosure/2022/May/35',
-                'http://seclists.org/fulldisclosure/2022/May/38',
-                'https://access.redhat.com/errata/RHSA-2022:5326',
-                'https://access.redhat.com/security/cve/CVE-2022-0778',
-                'https://bugzilla.redhat.com/2062202',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2062202',
-                'https://cert-portal.siemens.com/productcert/pdf/ssa-712929.pdf',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-0778',
-                'https://errata.almalinux.org/8/ALSA-2022-5326.html',
-                'https://errata.rockylinux.org/RLSA-2022:4899',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=3118eb64934499d93db3230748a452351d1d9a65',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=380085481c64de749a6dd25cdf0bcf4360b30f83',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=a466912611aa6cbdf550cd10601390e587451246',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=3118eb64934499d93db3230748a452351d1d9a65',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=380085481c64de749a6dd25cdf0bcf4360b30f83',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=a466912611aa6cbdf550cd10601390e587451246',
-                'https://linux.oracle.com/cve/CVE-2022-0778.html',
-                'https://linux.oracle.com/errata/ELSA-2022-9272.html',
-                'https://lists.debian.org/debian-lts-announce/2022/03/msg00023.html',
-                'https://lists.debian.org/debian-lts-announce/2022/03/msg00024.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/323SNN6ZX7PRJJWP2BUAFLPUAE42XWLZ',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/323SNN6ZX7PRJJWP2BUAFLPUAE42XWLZ/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GDB3GQVJPXJE7X5C5JN6JAA4XUDWD6E6',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GDB3GQVJPXJE7X5C5JN6JAA4XUDWD6E6/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/W6K3PR542DXWLEFFMFIDMME4CWMHJRMG',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/W6K3PR542DXWLEFFMFIDMME4CWMHJRMG/',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/323SNN6ZX7PRJJWP2BUAFLPUAE42XWLZ',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/GDB3GQVJPXJE7X5C5JN6JAA4XUDWD6E6',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/W6K3PR542DXWLEFFMFIDMME4CWMHJRMG',
-                'https://nvd.nist.gov/vuln/detail/CVE-2022-0778',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2022-0002',
-                'https://rustsec.org/advisories/RUSTSEC-2022-0014.html',
-                'https://security.gentoo.org/glsa/202210-02',
-                'https://security.netapp.com/advisory/ntap-20220321-0002',
-                'https://security.netapp.com/advisory/ntap-20220321-0002/',
-                'https://security.netapp.com/advisory/ntap-20220429-0005',
-                'https://security.netapp.com/advisory/ntap-20220429-0005/',
-                'https://security.netapp.com/advisory/ntap-20240621-0006',
-                'https://security.netapp.com/advisory/ntap-20240621-0006/',
-                'https://support.apple.com/kb/HT213255',
-                'https://support.apple.com/kb/HT213256',
-                'https://support.apple.com/kb/HT213257',
-                'https://ubuntu.com/security/notices/USN-5328-1',
-                'https://ubuntu.com/security/notices/USN-5328-2',
-                'https://ubuntu.com/security/notices/USN-6457-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2022-0778',
-                'https://www.debian.org/security/2022/dsa-5103',
-                'https://www.openssl.org/news/secadv/20220315.txt',
-                'https://www.oracle.com/security-alerts/cpuapr2022.html',
-                'https://www.oracle.com/security-alerts/cpujul2022.html',
-                'https://www.tenable.com/security/tns-2022-06',
-                'https://www.tenable.com/security/tns-2022-07',
-                'https://www.tenable.com/security/tns-2022-08',
-                'https://www.tenable.com/security/tns-2022-09'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: Infinite loop in BN_mod_sqrt() reachable when parsing certificates'
-            },
-            {
-              'cve':  'CVE-2021-23841',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'nvd': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-476'
-              ],
-              'description':   'The OpenSSL public API function X509_issuer_and_serial_hash() attempts to create a unique hash value based on the issuer and serial number data contained within an X509 certificate. However it fails to correctly handle any errors that may occur while parsing the issuer field (which might occur if the issuer field is maliciously constructed). This may subsequently result in a NULL pointer deref and a crash leading to a potential denial of service attack. The function X509_issuer_and_serial_hash() is never directly called by OpenSSL itself so applications are only vulnerable if they use this function directly and they use it on certificates that may have been obtained from untrusted sources. OpenSSL versions 1.1.1i and below are affected by this issue. Users of these versions should upgrade to OpenSSL 1.1.1j. OpenSSL versions 1.0.2x and below are affected by this issue. However OpenSSL 1.0.2 is out of support and no longer receiving public updates. Premium support customers of OpenSSL 1.0.2 should upgrade to 1.0.2y. Other users should upgrade to 1.1.1j. Fixed in OpenSSL 1.1.1j (Affected 1.1.1-1.1.1i). Fixed in OpenSSL 1.0.2y (Affected 1.0.2-1.0.2x).',
-              'diffID':        'sha256:f1498886f9a6173beaafc4fee55074d6c389ce2f70d1a4b0ee866e4ab45a41ad',
-              'fixedVersions': [
-                '1.1.1j-r0'
-              ],
-              'installedVersion': '1.1.1i-r0',
-              'packageName':      'libcrypto1.1',
-              'purl':             'pkg:apk/alpine/libcrypto1.1@1.1.1i-r0?arch=s390x&distro=3.12.3',
-              'references':       [
-                'http://seclists.org/fulldisclosure/2021/May/67',
-                'http://seclists.org/fulldisclosure/2021/May/68',
-                'http://seclists.org/fulldisclosure/2021/May/70',
-                'https://access.redhat.com/security/cve/CVE-2021-23841',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=1908036',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=1930310',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=1930324',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=1934534',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=1934600',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=1939637',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=1940085',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=1965362',
-                'https://cert-portal.siemens.com/productcert/pdf/ssa-637483.pdf',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-23840',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-23841',
-                'https://errata.rockylinux.org/RLSA-2021:4424',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=122a19ab48091c657f7cb1fb3af9fc07bd557bbf',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=8252ee4d90f3f2004d3d0aeeed003ad49c9a7807',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=122a19ab48091c657f7cb1fb3af9fc07bd557bbf',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=6a51b9e1d0cf0bf8515f7201b68fb0a3482b3dc1',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=8252ee4d90f3f2004d3d0aeeed003ad49c9a7807',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=9b1129239f3ebb1d1c98ce9ed41d5c9476c47cb2',
-                'https://github.com/alexcrichton/openssl-src-rs',
-                'https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA44846',
-                'https://linux.oracle.com/cve/CVE-2021-23841.html',
-                'https://linux.oracle.com/errata/ELSA-2021-9561.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-23841',
-                'https://rustsec.org/advisories/RUSTSEC-2021-0058',
-                'https://rustsec.org/advisories/RUSTSEC-2021-0058.html',
-                'https://security.gentoo.org/glsa/202103-03',
-                'https://security.netapp.com/advisory/ntap-20210219-0009',
-                'https://security.netapp.com/advisory/ntap-20210219-0009/',
-                'https://security.netapp.com/advisory/ntap-20210513-0002',
-                'https://security.netapp.com/advisory/ntap-20210513-0002/',
-                'https://security.netapp.com/advisory/ntap-20240621-0006/',
-                'https://support.apple.com/kb/HT212528',
-                'https://support.apple.com/kb/HT212529',
-                'https://support.apple.com/kb/HT212534',
-                'https://ubuntu.com/security/notices/USN-4738-1',
-                'https://ubuntu.com/security/notices/USN-4745-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-23841',
-                'https://www.debian.org/security/2021/dsa-4855',
-                'https://www.openssl.org/news/secadv/20210216.txt',
-                'https://www.oracle.com//security-alerts/cpujul2021.html',
-                'https://www.oracle.com/security-alerts/cpuApr2021.html',
-                'https://www.oracle.com/security-alerts/cpuapr2022.html',
-                'https://www.oracle.com/security-alerts/cpuoct2021.html',
-                'https://www.tenable.com/security/tns-2021-03',
-                'https://www.tenable.com/security/tns-2021-09'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: NULL pointer dereference in X509_issuer_and_serial_hash()'
-            },
-            {
-              'cve':  'CVE-2021-3449',
-              'cvss': {
-                'bitnami': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'ghsa': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'nvd': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-476'
-              ],
-              'description':   'An OpenSSL TLS server may crash if sent a maliciously crafted renegotiation ClientHello message from a client. If a TLSv1.2 renegotiation ClientHello omits the signature_algorithms extension (where it was present in the initial ClientHello), but includes a signature_algorithms_cert extension then a NULL pointer dereference will result, leading to a crash and a denial of service attack. A server is only vulnerable if it has TLSv1.2 and renegotiation enabled (which is the default configuration). OpenSSL TLS clients are not impacted by this issue. All OpenSSL 1.1.1 versions are affected by this issue. Users of these versions should upgrade to OpenSSL 1.1.1k. OpenSSL 1.0.2 is not impacted by this issue. Fixed in OpenSSL 1.1.1k (Affected 1.1.1-1.1.1j).',
-              'diffID':        'sha256:f1498886f9a6173beaafc4fee55074d6c389ce2f70d1a4b0ee866e4ab45a41ad',
-              'fixedVersions': [
-                '1.1.1k-r0'
-              ],
-              'installedVersion': '1.1.1i-r0',
-              'packageName':      'libcrypto1.1',
-              'purl':             'pkg:apk/alpine/libcrypto1.1@1.1.1i-r0?arch=s390x&distro=3.12.3',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2021/03/27/1',
-                'http://www.openwall.com/lists/oss-security/2021/03/27/2',
-                'http://www.openwall.com/lists/oss-security/2021/03/28/3',
-                'http://www.openwall.com/lists/oss-security/2021/03/28/4',
-                'https://access.redhat.com/security/cve/CVE-2021-3449',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=1941547',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=1941554',
-                'https://cert-portal.siemens.com/productcert/pdf/ssa-389290.pdf',
-                'https://cert-portal.siemens.com/productcert/pdf/ssa-772220.pdf',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-3449',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-3450',
-                'https://errata.rockylinux.org/RLSA-2021:1024',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=fb9fa6b51defd48157eeb207f52181f735d96148',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=fb9fa6b51defd48157eeb207f52181f735d96148',
-                'https://github.com/alexcrichton/openssl-src-rs',
-                'https://github.com/nodejs/node/pull/38083',
-                'https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA44845',
-                'https://kc.mcafee.com/corporate/index?page=content&id=SB10356',
-                'https://linux.oracle.com/cve/CVE-2021-3449.html',
-                'https://linux.oracle.com/errata/ELSA-2021-9151.html',
-                'https://lists.debian.org/debian-lts-announce/2021/08/msg00029.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CCBFLLVQVILIVGZMBJL3IXZGKWQISYNP/',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/CCBFLLVQVILIVGZMBJL3IXZGKWQISYNP',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-3449',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2021-0013',
-                'https://rustsec.org/advisories/RUSTSEC-2021-0055',
-                'https://rustsec.org/advisories/RUSTSEC-2021-0055.html',
-                'https://security.FreeBSD.org/advisories/FreeBSD-SA-21:07.openssl.asc',
-                'https://security.gentoo.org/glsa/202103-03',
-                'https://security.netapp.com/advisory/ntap-20210326-0006',
-                'https://security.netapp.com/advisory/ntap-20210326-0006/',
-                'https://security.netapp.com/advisory/ntap-20210513-0002',
-                'https://security.netapp.com/advisory/ntap-20210513-0002/',
-                'https://security.netapp.com/advisory/ntap-20240621-0006/',
-                'https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-openssl-2021-GHY28dJd',
-                'https://ubuntu.com/security/notices/USN-4891-1',
-                'https://ubuntu.com/security/notices/USN-5038-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-3449',
-                'https://www.debian.org/security/2021/dsa-4875',
-                'https://www.openssl.org/news/secadv/20210325.txt',
-                'https://www.oracle.com//security-alerts/cpujul2021.html',
-                'https://www.oracle.com/security-alerts/cpuApr2021.html',
-                'https://www.oracle.com/security-alerts/cpuapr2022.html',
-                'https://www.oracle.com/security-alerts/cpujul2022.html',
-                'https://www.oracle.com/security-alerts/cpuoct2021.html',
-                'https://www.tenable.com/security/tns-2021-05',
-                'https://www.tenable.com/security/tns-2021-06',
-                'https://www.tenable.com/security/tns-2021-09',
-                'https://www.tenable.com/security/tns-2021-10'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: NULL pointer dereference in signature_algorithms processing'
-            },
-            {
-              'cve':  'CVE-2021-23839',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '3.7',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N'
-                },
-                'redhat': {
-                  'v3score':  '3.7',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-327'
-              ],
-              'description':   'OpenSSL 1.0.2 supports SSLv2. If a client attempts to negotiate SSLv2 with a server that is configured to support both SSLv2 and more recent SSL and TLS versions then a check is made for a version rollback attack when unpadding an RSA signature. Clients that support SSL or TLS versions greater than SSLv2 are supposed to use a special form of padding. A server that supports greater than SSLv2 is supposed to reject connection attempts from a client where this special form of padding is present, because this indicates that a version rollback has occurred (i.e. both client and server support greater than SSLv2, and yet this is the version that is being requested). The implementation of this padding check inverted the logic so that the connection attempt is accepted if the padding is present, and rejected if it is absent. This means that such as server will accept a connection if a version rollback attack has occurred. Further the server will erroneously reject a connection if a normal SSLv2 connection attempt is made. Only OpenSSL 1.0.2 servers from version 1.0.2s to 1.0.2x are affected by this issue. In order to be vulnerable a 1.0.2 server must: 1) have configured SSLv2 support at compile time (this is off by default), 2) have configured SSLv2 support at runtime (this is off by default), 3) have configured SSLv2 ciphersuites (these are not in the default ciphersuite list) OpenSSL 1.1.1 does not have SSLv2 support and therefore is not vulnerable to this issue. The underlying error is in the implementation of the RSA_padding_check_SSLv23() function. This also affects the RSA_SSLV23_PADDING padding mode used by various other functions. Although 1.1.1 does not support SSLv2 the RSA_padding_check_SSLv23() function still exists, as does the RSA_SSLV23_PADDING padding mode. Applications that directly call that function or use that padding mode will encounter this issue. However since there is no support for the SSLv2 protocol in 1.1.1 this is considered a bug and not a security issue in that version. OpenSSL 1.0.2 is out of support and no longer receiving public updates. Premium support customers of OpenSSL 1.0.2 should upgrade to 1.0.2y. Other users should upgrade to 1.1.1j. Fixed in OpenSSL 1.0.2y (Affected 1.0.2s-1.0.2x).',
-              'diffID':        'sha256:f1498886f9a6173beaafc4fee55074d6c389ce2f70d1a4b0ee866e4ab45a41ad',
-              'fixedVersions': [
-                '1.1.1j-r0'
-              ],
-              'installedVersion': '1.1.1i-r0',
-              'packageName':      'libcrypto1.1',
-              'purl':             'pkg:apk/alpine/libcrypto1.1@1.1.1i-r0?arch=s390x&distro=3.12.3',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-23839',
-                'https://cert-portal.siemens.com/productcert/pdf/ssa-637483.pdf',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=30919ab80a478f2d81f2e9acdcca3fa4740cd547',
-                'https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA44846',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-23839',
-                'https://security.netapp.com/advisory/ntap-20210219-0009/',
-                'https://security.netapp.com/advisory/ntap-20240621-0006/',
-                'https://www.cve.org/CVERecord?id=CVE-2021-23839',
-                'https://www.openssl.org/news/secadv/20210216.txt',
-                'https://www.oracle.com//security-alerts/cpujul2021.html',
-                'https://www.oracle.com/security-alerts/cpuApr2021.html',
-                'https://www.oracle.com/security-alerts/cpuapr2022.html',
-                'https://www.oracle.com/security-alerts/cpuoct2021.html'
-              ],
-              'severity':   'LOW',
-              'suppressed': false,
-              'title':      'openssl: incorrect SSLv2 rollback protection'
-            },
-            {
-              'cve':  'CVE-2021-3711',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '9.8',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'nvd': {
-                  'v3score':  '9.8',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '9.8',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-120'
-              ],
-              'description':   'In order to decrypt SM2 encrypted data an application is expected to call the API function EVP_PKEY_decrypt(). Typically an application will call this function twice. The first time, on entry, the "out" parameter can be NULL and, on exit, the "outlen" parameter is populated with the buffer size required to hold the decrypted plaintext. The application can then allocate a sufficiently sized buffer and call EVP_PKEY_decrypt() again, but this time passing a non-NULL value for the "out" parameter. A bug in the implementation of the SM2 decryption code means that the calculation of the buffer size required to hold the plaintext returned by the first call to EVP_PKEY_decrypt() can be smaller than the actual size required by the second call. This can lead to a buffer overflow when EVP_PKEY_decrypt() is called by the application a second time with a buffer that is too small. A malicious attacker who is able present SM2 content for decryption to an application could cause attacker chosen data to overflow the buffer by up to a maximum of 62 bytes altering the contents of other data held after the buffer, possibly changing application behaviour or causing the application to crash. The location of the buffer is application dependent but is typically heap allocated. Fixed in OpenSSL 1.1.1l (Affected 1.1.1-1.1.1k).',
-              'diffID':        'sha256:f1498886f9a6173beaafc4fee55074d6c389ce2f70d1a4b0ee866e4ab45a41ad',
-              'fixedVersions': [
-                '1.1.1l-r0'
-              ],
-              'installedVersion': '1.1.1i-r0',
-              'packageName':      'libssl1.1',
-              'purl':             'pkg:apk/alpine/libssl1.1@1.1.1i-r0?arch=s390x&distro=3.12.3',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2021/08/26/2',
-                'https://access.redhat.com/security/cve/CVE-2021-3711',
-                'https://cert-portal.siemens.com/productcert/pdf/ssa-389290.pdf',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=59f5e75f3bced8fc0e130d72a3f582cf7b480b46',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=59f5e75f3bced8fc0e130d72a3f582cf7b480b46',
-                'https://lists.apache.org/thread.html/r18995de860f0e63635f3008fd2a6aca82394249476d21691e7c59c9e%40%3Cdev.tomcat.apache.org%3E',
-                'https://lists.apache.org/thread.html/r18995de860f0e63635f3008fd2a6aca82394249476d21691e7c59c9e@%3Cdev.tomcat.apache.org%3E',
-                'https://lists.apache.org/thread.html/rad5d9f83f0d11fb3f8bb148d179b8a9ad7c6a17f18d70e5805a713d1%40%3Cdev.tomcat.apache.org%3E',
-                'https://lists.apache.org/thread.html/rad5d9f83f0d11fb3f8bb148d179b8a9ad7c6a17f18d70e5805a713d1@%3Cdev.tomcat.apache.org%3E',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-3711',
-                'https://rustsec.org/advisories/RUSTSEC-2021-0097.html',
-                'https://security.gentoo.org/glsa/202209-02',
-                'https://security.gentoo.org/glsa/202210-02',
-                'https://security.netapp.com/advisory/ntap-20210827-0010',
-                'https://security.netapp.com/advisory/ntap-20210827-0010/',
-                'https://security.netapp.com/advisory/ntap-20211022-0003',
-                'https://security.netapp.com/advisory/ntap-20211022-0003/',
-                'https://security.netapp.com/advisory/ntap-20240621-0006',
-                'https://security.netapp.com/advisory/ntap-20240621-0006/',
-                'https://ubuntu.com/security/notices/USN-5051-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-3711',
-                'https://www.debian.org/security/2021/dsa-4963',
-                'https://www.openssl.org/news/secadv/20210824.txt',
-                'https://www.oracle.com/security-alerts/cpuapr2022.html',
-                'https://www.oracle.com/security-alerts/cpujan2022.html',
-                'https://www.oracle.com/security-alerts/cpuoct2021.html',
-                'https://www.tenable.com/security/tns-2021-16',
-                'https://www.tenable.com/security/tns-2022-02'
-              ],
-              'severity':   'CRITICAL',
-              'suppressed': false,
-              'title':      'openssl: SM2 Decryption Buffer Overflow'
-            },
-            {
-              'cve':  'CVE-2021-23840',
-              'cvss': {
-                'bitnami': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'ghsa': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'nvd': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-190'
-              ],
-              'description':   'Calls to EVP_CipherUpdate, EVP_EncryptUpdate and EVP_DecryptUpdate may overflow the output length argument in some cases where the input length is close to the maximum permissable length for an integer on the platform. In such cases the return value from the function call will be 1 (indicating success), but the output length value will be negative. This could cause applications to behave incorrectly or crash. OpenSSL versions 1.1.1i and below are affected by this issue. Users of these versions should upgrade to OpenSSL 1.1.1j. OpenSSL versions 1.0.2x and below are affected by this issue. However OpenSSL 1.0.2 is out of support and no longer receiving public updates. Premium support customers of OpenSSL 1.0.2 should upgrade to 1.0.2y. Other users should upgrade to 1.1.1j. Fixed in OpenSSL 1.1.1j (Affected 1.1.1-1.1.1i). Fixed in OpenSSL 1.0.2y (Affected 1.0.2-1.0.2x).',
-              'diffID':        'sha256:f1498886f9a6173beaafc4fee55074d6c389ce2f70d1a4b0ee866e4ab45a41ad',
-              'fixedVersions': [
-                '1.1.1j-r0'
-              ],
-              'installedVersion': '1.1.1i-r0',
-              'packageName':      'libssl1.1',
-              'purl':             'pkg:apk/alpine/libssl1.1@1.1.1i-r0?arch=s390x&distro=3.12.3',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-23840',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=1908036',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=1930310',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=1930324',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=1934534',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=1934600',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=1939637',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=1940085',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=1965362',
-                'https://cert-portal.siemens.com/productcert/pdf/ssa-389290.pdf',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-23840',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-23841',
-                'https://errata.rockylinux.org/RLSA-2021:4424',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=6a51b9e1d0cf0bf8515f7201b68fb0a3482b3dc1',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=9b1129239f3ebb1d1c98ce9ed41d5c9476c47cb2',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=6a51b9e1d0cf0bf8515f7201b68fb0a3482b3dc1',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=9b1129239f3ebb1d1c98ce9ed41d5c9476c47cb2',
-                'https://github.com/alexcrichton/openssl-src-rs',
-                'https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA44846',
-                'https://kc.mcafee.com/corporate/index?page=content&id=SB10366',
-                'https://linux.oracle.com/cve/CVE-2021-23840.html',
-                'https://linux.oracle.com/errata/ELSA-2021-9561.html',
-                'https://lists.apache.org/thread.html/r58af02e294bd07f487e2c64ffc0a29b837db5600e33b6e698b9d696b%40%3Cissues.bookkeeper.apache.org%3E',
-                'https://lists.apache.org/thread.html/r58af02e294bd07f487e2c64ffc0a29b837db5600e33b6e698b9d696b@%3Cissues.bookkeeper.apache.org%3E',
-                'https://lists.apache.org/thread.html/rf4c02775860db415b4955778a131c2795223f61cb8c6a450893651e4%40%3Cissues.bookkeeper.apache.org%3E',
-                'https://lists.apache.org/thread.html/rf4c02775860db415b4955778a131c2795223f61cb8c6a450893651e4@%3Cissues.bookkeeper.apache.org%3E',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-23840',
-                'https://rustsec.org/advisories/RUSTSEC-2021-0057.html',
-                'https://security.gentoo.org/glsa/202103-03',
-                'https://security.netapp.com/advisory/ntap-20210219-0009',
-                'https://security.netapp.com/advisory/ntap-20210219-0009/',
-                'https://security.netapp.com/advisory/ntap-20240621-0006/',
-                'https://ubuntu.com/security/notices/USN-4738-1',
-                'https://ubuntu.com/security/notices/USN-5088-1',
-                'https://ubuntu.com/security/notices/USN-7018-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-23840',
-                'https://www.debian.org/security/2021/dsa-4855',
-                'https://www.openssl.org/news/secadv/20210216.txt',
-                'https://www.oracle.com//security-alerts/cpujul2021.html',
-                'https://www.oracle.com/security-alerts/cpuApr2021.html',
-                'https://www.oracle.com/security-alerts/cpuapr2022.html',
-                'https://www.oracle.com/security-alerts/cpujan2022.html',
-                'https://www.oracle.com/security-alerts/cpuoct2021.html',
-                'https://www.tenable.com/security/tns-2021-03',
-                'https://www.tenable.com/security/tns-2021-09',
-                'https://www.tenable.com/security/tns-2021-10'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: integer overflow in CipherUpdate'
-            },
-            {
-              'cve':  'CVE-2021-3450',
-              'cvss': {
-                'bitnami': {
-                  'v3score':  '7.4',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N'
-                },
-                'ghsa': {
-                  'v3score':  '7.4',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N'
-                },
-                'nvd': {
-                  'v3score':  '7.4',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N'
-                },
-                'redhat': {
-                  'v3score':  '7.4',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-295'
-              ],
-              'description':   'The X509_V_FLAG_X509_STRICT flag enables additional security checks of the certificates present in a certificate chain. It is not set by default. Starting from OpenSSL version 1.1.1h a check to disallow certificates in the chain that have explicitly encoded elliptic curve parameters was added as an additional strict check. An error in the implementation of this check meant that the result of a previous check to confirm that certificates in the chain are valid CA certificates was overwritten. This effectively bypasses the check that non-CA certificates must not be able to issue other certificates. If a "purpose" has been configured then there is a subsequent opportunity for checks that the certificate is a valid CA. All of the named "purpose" values implemented in libcrypto perform this check. Therefore, where a purpose is set the certificate chain will still be rejected even when the strict flag has been used. A purpose is set by default in libssl client and server certificate verification routines, but it can be overridden or removed by an application. In order to be affected, an application must explicitly set the X509_V_FLAG_X509_STRICT verification flag and either not set a purpose for the certificate verification or, in the case of TLS client or server applications, override the default purpose. OpenSSL versions 1.1.1h and newer are affected by this issue. Users of these versions should upgrade to OpenSSL 1.1.1k. OpenSSL 1.0.2 is not impacted by this issue. Fixed in OpenSSL 1.1.1k (Affected 1.1.1h-1.1.1j).',
-              'diffID':        'sha256:f1498886f9a6173beaafc4fee55074d6c389ce2f70d1a4b0ee866e4ab45a41ad',
-              'fixedVersions': [
-                '1.1.1k-r0'
-              ],
-              'installedVersion': '1.1.1i-r0',
-              'packageName':      'libssl1.1',
-              'purl':             'pkg:apk/alpine/libssl1.1@1.1.1i-r0?arch=s390x&distro=3.12.3',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2021/03/27/1',
-                'http://www.openwall.com/lists/oss-security/2021/03/27/2',
-                'http://www.openwall.com/lists/oss-security/2021/03/28/3',
-                'http://www.openwall.com/lists/oss-security/2021/03/28/4',
-                'https://access.redhat.com/security/cve/CVE-2021-3450',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=1941547',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=1941554',
-                'https://cert-portal.siemens.com/productcert/pdf/ssa-389290.pdf',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-3449',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-3450',
-                'https://errata.rockylinux.org/RLSA-2021:1024',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=2a40b7bc7b94dd7de897a74571e7024f0cf0d63b',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=2a40b7bc7b94dd7de897a74571e7024f0cf0d63b',
-                'https://github.com/alexcrichton/openssl-src-rs',
-                'https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA44845',
-                'https://kc.mcafee.com/corporate/index?page=content&id=SB10356',
-                'https://linux.oracle.com/cve/CVE-2021-3450.html',
-                'https://linux.oracle.com/errata/ELSA-2021-9151.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CCBFLLVQVILIVGZMBJL3IXZGKWQISYNP/',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/CCBFLLVQVILIVGZMBJL3IXZGKWQISYNP',
-                'https://mta.openssl.org/pipermail/openssl-announce/2021-March/000198.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-3450',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2021-0013',
-                'https://rustsec.org/advisories/RUSTSEC-2021-0056.html',
-                'https://security.FreeBSD.org/advisories/FreeBSD-SA-21:07.openssl.asc',
-                'https://security.gentoo.org/glsa/202103-03',
-                'https://security.netapp.com/advisory/ntap-20210326-0006',
-                'https://security.netapp.com/advisory/ntap-20210326-0006/',
-                'https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-openssl-2021-GHY28dJd',
-                'https://www.cve.org/CVERecord?id=CVE-2021-3450',
-                'https://www.openssl.org/news/secadv/20210325.txt',
-                'https://www.oracle.com//security-alerts/cpujul2021.html',
-                'https://www.oracle.com/security-alerts/cpuApr2021.html',
-                'https://www.oracle.com/security-alerts/cpuapr2022.html',
-                'https://www.oracle.com/security-alerts/cpujul2022.html',
-                'https://www.oracle.com/security-alerts/cpuoct2021.html',
-                'https://www.tenable.com/security/tns-2021-05',
-                'https://www.tenable.com/security/tns-2021-08',
-                'https://www.tenable.com/security/tns-2021-09'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: CA certificate check bypass with X509_V_FLAG_X509_STRICT'
-            },
-            {
-              'cve':  'CVE-2021-3712',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '7.4',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H'
-                },
-                'nvd': {
-                  'v3score':  '7.4',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.4',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-125'
-              ],
-              'description':   "ASN.1 strings are represented internally within OpenSSL as an ASN1_STRING structure which contains a buffer holding the string data and a field holding the buffer length. This contrasts with normal C strings which are repesented as a buffer for the string data which is terminated with a NUL (0) byte. Although not a strict requirement, ASN.1 strings that are parsed using OpenSSL's own \"d2i\" functions (and other similar parsing functions) as well as any string whose value has been set with the ASN1_STRING_set() function will additionally NUL terminate the byte array in the ASN1_STRING structure. However, it is possible for applications to directly construct valid ASN1_STRING structures which do not NUL terminate the byte array by directly setting the \"data\" and \"length\" fields in the ASN1_STRING array. This can also happen by using the ASN1_STRING_set0() function. Numerous OpenSSL functions that print ASN.1 data have been found to assume that the ASN1_STRING byte array will be NUL terminated, even though this is not guaranteed for strings that have been directly constructed. Where an application requests an ASN.1 structure to be printed, and where that ASN.1 structure contains ASN1_STRINGs that have been directly constructed by the application without NUL terminating the \"data\" field, then a read buffer overrun can occur. The same thing can also occur during name constraints processing of certificates (for example if a certificate has been directly constructed by the application instead of loading it via the OpenSSL parsing functions, and the certificate contains non NUL terminated ASN1_STRING structures). It can also occur in the X509_get1_email(), X509_REQ_get1_email() and X509_get1_ocsp() functions. If a malicious actor can cause an application to directly construct an ASN1_STRING and then process it through one of the affected OpenSSL functions then this issue could be hit. This might result in a crash (causing a Denial of Service attack). It could also result in the disclosure of private memory contents (such as private keys, or sensitive plaintext). Fixed in OpenSSL 1.1.1l (Affected 1.1.1-1.1.1k). Fixed in OpenSSL 1.0.2za (Affected 1.0.2-1.0.2y).",
-              'diffID':        'sha256:f1498886f9a6173beaafc4fee55074d6c389ce2f70d1a4b0ee866e4ab45a41ad',
-              'fixedVersions': [
-                '1.1.1l-r0'
-              ],
-              'installedVersion': '1.1.1i-r0',
-              'packageName':      'libssl1.1',
-              'purl':             'pkg:apk/alpine/libssl1.1@1.1.1i-r0?arch=s390x&distro=3.12.3',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2021/08/26/2',
-                'https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2021-3712.json',
-                'https://access.redhat.com/security/cve/CVE-2021-3712',
-                'https://cert-portal.siemens.com/productcert/pdf/ssa-244969.pdf',
-                'https://cert-portal.siemens.com/productcert/pdf/ssa-389290.pdf',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=94d23fcff9b2a7a8368dfe52214d5c2569882c11',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=ccb0a11145ee72b042d10593a64eaf9e8a55ec12',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=94d23fcff9b2a7a8368dfe52214d5c2569882c11',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=ccb0a11145ee72b042d10593a64eaf9e8a55ec12',
-                'https://kc.mcafee.com/corporate/index?page=content&id=SB10366',
-                'https://linux.oracle.com/cve/CVE-2021-3712.html',
-                'https://linux.oracle.com/errata/ELSA-2022-9023.html',
-                'https://lists.apache.org/thread.html/r18995de860f0e63635f3008fd2a6aca82394249476d21691e7c59c9e%40%3Cdev.tomcat.apache.org%3E',
-                'https://lists.apache.org/thread.html/r18995de860f0e63635f3008fd2a6aca82394249476d21691e7c59c9e@%3Cdev.tomcat.apache.org%3E',
-                'https://lists.apache.org/thread.html/rad5d9f83f0d11fb3f8bb148d179b8a9ad7c6a17f18d70e5805a713d1%40%3Cdev.tomcat.apache.org%3E',
-                'https://lists.apache.org/thread.html/rad5d9f83f0d11fb3f8bb148d179b8a9ad7c6a17f18d70e5805a713d1@%3Cdev.tomcat.apache.org%3E',
-                'https://lists.debian.org/debian-lts-announce/2021/09/msg00014.html',
-                'https://lists.debian.org/debian-lts-announce/2021/09/msg00021.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-3712',
-                'https://rustsec.org/advisories/RUSTSEC-2021-0098.html',
-                'https://security.gentoo.org/glsa/202209-02',
-                'https://security.gentoo.org/glsa/202210-02',
-                'https://security.netapp.com/advisory/ntap-20210827-0010',
-                'https://security.netapp.com/advisory/ntap-20210827-0010/',
-                'https://security.netapp.com/advisory/ntap-20240621-0006',
-                'https://security.netapp.com/advisory/ntap-20240621-0006/',
-                'https://ubuntu.com/security/notices/USN-5051-1',
-                'https://ubuntu.com/security/notices/USN-5051-2',
-                'https://ubuntu.com/security/notices/USN-5051-3',
-                'https://ubuntu.com/security/notices/USN-5051-4 (regression only in trusty/esm)',
-                'https://ubuntu.com/security/notices/USN-5088-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-3712',
-                'https://www.debian.org/security/2021/dsa-4963',
-                'https://www.openssl.org/news/secadv/20210824.txt',
-                'https://www.oracle.com/security-alerts/cpuapr2022.html',
-                'https://www.oracle.com/security-alerts/cpujan2022.html',
-                'https://www.oracle.com/security-alerts/cpuoct2021.html',
-                'https://www.tenable.com/security/tns-2021-16',
-                'https://www.tenable.com/security/tns-2022-02'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: Read buffer overruns processing ASN.1 strings'
-            },
-            {
-              'cve':  'CVE-2022-0778',
-              'cvss': {
-                'bitnami': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'ghsa': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'nvd': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-835'
-              ],
-              'description':   'The BN_mod_sqrt() function, which computes a modular square root, contains a bug that can cause it to loop forever for non-prime moduli. Internally this function is used when parsing certificates that contain elliptic curve public keys in compressed form or explicit elliptic curve parameters with a base point encoded in compressed form. It is possible to trigger the infinite loop by crafting a certificate that has invalid explicit curve parameters. Since certificate parsing happens prior to verification of the certificate signature, any process that parses an externally supplied certificate may thus be subject to a denial of service attack. The infinite loop can also be reached when parsing crafted private keys as they can contain explicit elliptic curve parameters. Thus vulnerable situations include: - TLS clients consuming server certificates - TLS servers consuming client certificates - Hosting providers taking certificates or private keys from customers - Certificate authorities parsing certification requests from subscribers - Anything else which parses ASN.1 elliptic curve parameters Also any other applications that use the BN_mod_sqrt() where the attacker can control the parameter values are vulnerable to this DoS issue. In the OpenSSL 1.0.2 version the public key is not parsed during initial parsing of the certificate which makes it slightly harder to trigger the infinite loop. However any operation which requires the public key from the certificate will trigger the infinite loop. In particular the attacker can use a self-signed certificate to trigger the loop during verification of the certificate signature. This issue affects OpenSSL versions 1.0.2, 1.1.1 and 3.0. It was addressed in the releases of 1.1.1n and 3.0.2 on the 15th March 2022. Fixed in OpenSSL 3.0.2 (Affected 3.0.0,3.0.1). Fixed in OpenSSL 1.1.1n (Affected 1.1.1-1.1.1m). Fixed in OpenSSL 1.0.2zd (Affected 1.0.2-1.0.2zc).',
-              'diffID':        'sha256:f1498886f9a6173beaafc4fee55074d6c389ce2f70d1a4b0ee866e4ab45a41ad',
-              'fixedVersions': [
-                '1.1.1n-r0'
-              ],
-              'installedVersion': '1.1.1i-r0',
-              'packageName':      'libssl1.1',
-              'purl':             'pkg:apk/alpine/libssl1.1@1.1.1i-r0?arch=s390x&distro=3.12.3',
-              'references':       [
-                'http://packetstormsecurity.com/files/167344/OpenSSL-1.0.2-1.1.1-3.0-BN_mod_sqrt-Infinite-Loop.html',
-                'http://seclists.org/fulldisclosure/2022/May/33',
-                'http://seclists.org/fulldisclosure/2022/May/35',
-                'http://seclists.org/fulldisclosure/2022/May/38',
-                'https://access.redhat.com/errata/RHSA-2022:5326',
-                'https://access.redhat.com/security/cve/CVE-2022-0778',
-                'https://bugzilla.redhat.com/2062202',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2062202',
-                'https://cert-portal.siemens.com/productcert/pdf/ssa-712929.pdf',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-0778',
-                'https://errata.almalinux.org/8/ALSA-2022-5326.html',
-                'https://errata.rockylinux.org/RLSA-2022:4899',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=3118eb64934499d93db3230748a452351d1d9a65',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=380085481c64de749a6dd25cdf0bcf4360b30f83',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=a466912611aa6cbdf550cd10601390e587451246',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=3118eb64934499d93db3230748a452351d1d9a65',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=380085481c64de749a6dd25cdf0bcf4360b30f83',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=a466912611aa6cbdf550cd10601390e587451246',
-                'https://linux.oracle.com/cve/CVE-2022-0778.html',
-                'https://linux.oracle.com/errata/ELSA-2022-9272.html',
-                'https://lists.debian.org/debian-lts-announce/2022/03/msg00023.html',
-                'https://lists.debian.org/debian-lts-announce/2022/03/msg00024.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/323SNN6ZX7PRJJWP2BUAFLPUAE42XWLZ',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/323SNN6ZX7PRJJWP2BUAFLPUAE42XWLZ/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GDB3GQVJPXJE7X5C5JN6JAA4XUDWD6E6',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GDB3GQVJPXJE7X5C5JN6JAA4XUDWD6E6/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/W6K3PR542DXWLEFFMFIDMME4CWMHJRMG',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/W6K3PR542DXWLEFFMFIDMME4CWMHJRMG/',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/323SNN6ZX7PRJJWP2BUAFLPUAE42XWLZ',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/GDB3GQVJPXJE7X5C5JN6JAA4XUDWD6E6',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/W6K3PR542DXWLEFFMFIDMME4CWMHJRMG',
-                'https://nvd.nist.gov/vuln/detail/CVE-2022-0778',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2022-0002',
-                'https://rustsec.org/advisories/RUSTSEC-2022-0014.html',
-                'https://security.gentoo.org/glsa/202210-02',
-                'https://security.netapp.com/advisory/ntap-20220321-0002',
-                'https://security.netapp.com/advisory/ntap-20220321-0002/',
-                'https://security.netapp.com/advisory/ntap-20220429-0005',
-                'https://security.netapp.com/advisory/ntap-20220429-0005/',
-                'https://security.netapp.com/advisory/ntap-20240621-0006',
-                'https://security.netapp.com/advisory/ntap-20240621-0006/',
-                'https://support.apple.com/kb/HT213255',
-                'https://support.apple.com/kb/HT213256',
-                'https://support.apple.com/kb/HT213257',
-                'https://ubuntu.com/security/notices/USN-5328-1',
-                'https://ubuntu.com/security/notices/USN-5328-2',
-                'https://ubuntu.com/security/notices/USN-6457-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2022-0778',
-                'https://www.debian.org/security/2022/dsa-5103',
-                'https://www.openssl.org/news/secadv/20220315.txt',
-                'https://www.oracle.com/security-alerts/cpuapr2022.html',
-                'https://www.oracle.com/security-alerts/cpujul2022.html',
-                'https://www.tenable.com/security/tns-2022-06',
-                'https://www.tenable.com/security/tns-2022-07',
-                'https://www.tenable.com/security/tns-2022-08',
-                'https://www.tenable.com/security/tns-2022-09'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: Infinite loop in BN_mod_sqrt() reachable when parsing certificates'
-            },
-            {
-              'cve':  'CVE-2021-23841',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'nvd': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-476'
-              ],
-              'description':   'The OpenSSL public API function X509_issuer_and_serial_hash() attempts to create a unique hash value based on the issuer and serial number data contained within an X509 certificate. However it fails to correctly handle any errors that may occur while parsing the issuer field (which might occur if the issuer field is maliciously constructed). This may subsequently result in a NULL pointer deref and a crash leading to a potential denial of service attack. The function X509_issuer_and_serial_hash() is never directly called by OpenSSL itself so applications are only vulnerable if they use this function directly and they use it on certificates that may have been obtained from untrusted sources. OpenSSL versions 1.1.1i and below are affected by this issue. Users of these versions should upgrade to OpenSSL 1.1.1j. OpenSSL versions 1.0.2x and below are affected by this issue. However OpenSSL 1.0.2 is out of support and no longer receiving public updates. Premium support customers of OpenSSL 1.0.2 should upgrade to 1.0.2y. Other users should upgrade to 1.1.1j. Fixed in OpenSSL 1.1.1j (Affected 1.1.1-1.1.1i). Fixed in OpenSSL 1.0.2y (Affected 1.0.2-1.0.2x).',
-              'diffID':        'sha256:f1498886f9a6173beaafc4fee55074d6c389ce2f70d1a4b0ee866e4ab45a41ad',
-              'fixedVersions': [
-                '1.1.1j-r0'
-              ],
-              'installedVersion': '1.1.1i-r0',
-              'packageName':      'libssl1.1',
-              'purl':             'pkg:apk/alpine/libssl1.1@1.1.1i-r0?arch=s390x&distro=3.12.3',
-              'references':       [
-                'http://seclists.org/fulldisclosure/2021/May/67',
-                'http://seclists.org/fulldisclosure/2021/May/68',
-                'http://seclists.org/fulldisclosure/2021/May/70',
-                'https://access.redhat.com/security/cve/CVE-2021-23841',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=1908036',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=1930310',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=1930324',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=1934534',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=1934600',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=1939637',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=1940085',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=1965362',
-                'https://cert-portal.siemens.com/productcert/pdf/ssa-637483.pdf',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-23840',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-23841',
-                'https://errata.rockylinux.org/RLSA-2021:4424',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=122a19ab48091c657f7cb1fb3af9fc07bd557bbf',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=8252ee4d90f3f2004d3d0aeeed003ad49c9a7807',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=122a19ab48091c657f7cb1fb3af9fc07bd557bbf',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=6a51b9e1d0cf0bf8515f7201b68fb0a3482b3dc1',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=8252ee4d90f3f2004d3d0aeeed003ad49c9a7807',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=9b1129239f3ebb1d1c98ce9ed41d5c9476c47cb2',
-                'https://github.com/alexcrichton/openssl-src-rs',
-                'https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA44846',
-                'https://linux.oracle.com/cve/CVE-2021-23841.html',
-                'https://linux.oracle.com/errata/ELSA-2021-9561.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-23841',
-                'https://rustsec.org/advisories/RUSTSEC-2021-0058',
-                'https://rustsec.org/advisories/RUSTSEC-2021-0058.html',
-                'https://security.gentoo.org/glsa/202103-03',
-                'https://security.netapp.com/advisory/ntap-20210219-0009',
-                'https://security.netapp.com/advisory/ntap-20210219-0009/',
-                'https://security.netapp.com/advisory/ntap-20210513-0002',
-                'https://security.netapp.com/advisory/ntap-20210513-0002/',
-                'https://security.netapp.com/advisory/ntap-20240621-0006/',
-                'https://support.apple.com/kb/HT212528',
-                'https://support.apple.com/kb/HT212529',
-                'https://support.apple.com/kb/HT212534',
-                'https://ubuntu.com/security/notices/USN-4738-1',
-                'https://ubuntu.com/security/notices/USN-4745-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-23841',
-                'https://www.debian.org/security/2021/dsa-4855',
-                'https://www.openssl.org/news/secadv/20210216.txt',
-                'https://www.oracle.com//security-alerts/cpujul2021.html',
-                'https://www.oracle.com/security-alerts/cpuApr2021.html',
-                'https://www.oracle.com/security-alerts/cpuapr2022.html',
-                'https://www.oracle.com/security-alerts/cpuoct2021.html',
-                'https://www.tenable.com/security/tns-2021-03',
-                'https://www.tenable.com/security/tns-2021-09'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: NULL pointer dereference in X509_issuer_and_serial_hash()'
-            },
-            {
-              'cve':  'CVE-2021-3449',
-              'cvss': {
-                'bitnami': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'ghsa': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'nvd': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-476'
-              ],
-              'description':   'An OpenSSL TLS server may crash if sent a maliciously crafted renegotiation ClientHello message from a client. If a TLSv1.2 renegotiation ClientHello omits the signature_algorithms extension (where it was present in the initial ClientHello), but includes a signature_algorithms_cert extension then a NULL pointer dereference will result, leading to a crash and a denial of service attack. A server is only vulnerable if it has TLSv1.2 and renegotiation enabled (which is the default configuration). OpenSSL TLS clients are not impacted by this issue. All OpenSSL 1.1.1 versions are affected by this issue. Users of these versions should upgrade to OpenSSL 1.1.1k. OpenSSL 1.0.2 is not impacted by this issue. Fixed in OpenSSL 1.1.1k (Affected 1.1.1-1.1.1j).',
-              'diffID':        'sha256:f1498886f9a6173beaafc4fee55074d6c389ce2f70d1a4b0ee866e4ab45a41ad',
-              'fixedVersions': [
-                '1.1.1k-r0'
-              ],
-              'installedVersion': '1.1.1i-r0',
-              'packageName':      'libssl1.1',
-              'purl':             'pkg:apk/alpine/libssl1.1@1.1.1i-r0?arch=s390x&distro=3.12.3',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2021/03/27/1',
-                'http://www.openwall.com/lists/oss-security/2021/03/27/2',
-                'http://www.openwall.com/lists/oss-security/2021/03/28/3',
-                'http://www.openwall.com/lists/oss-security/2021/03/28/4',
-                'https://access.redhat.com/security/cve/CVE-2021-3449',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=1941547',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=1941554',
-                'https://cert-portal.siemens.com/productcert/pdf/ssa-389290.pdf',
-                'https://cert-portal.siemens.com/productcert/pdf/ssa-772220.pdf',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-3449',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-3450',
-                'https://errata.rockylinux.org/RLSA-2021:1024',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=fb9fa6b51defd48157eeb207f52181f735d96148',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=fb9fa6b51defd48157eeb207f52181f735d96148',
-                'https://github.com/alexcrichton/openssl-src-rs',
-                'https://github.com/nodejs/node/pull/38083',
-                'https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA44845',
-                'https://kc.mcafee.com/corporate/index?page=content&id=SB10356',
-                'https://linux.oracle.com/cve/CVE-2021-3449.html',
-                'https://linux.oracle.com/errata/ELSA-2021-9151.html',
-                'https://lists.debian.org/debian-lts-announce/2021/08/msg00029.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CCBFLLVQVILIVGZMBJL3IXZGKWQISYNP/',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/CCBFLLVQVILIVGZMBJL3IXZGKWQISYNP',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-3449',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2021-0013',
-                'https://rustsec.org/advisories/RUSTSEC-2021-0055',
-                'https://rustsec.org/advisories/RUSTSEC-2021-0055.html',
-                'https://security.FreeBSD.org/advisories/FreeBSD-SA-21:07.openssl.asc',
-                'https://security.gentoo.org/glsa/202103-03',
-                'https://security.netapp.com/advisory/ntap-20210326-0006',
-                'https://security.netapp.com/advisory/ntap-20210326-0006/',
-                'https://security.netapp.com/advisory/ntap-20210513-0002',
-                'https://security.netapp.com/advisory/ntap-20210513-0002/',
-                'https://security.netapp.com/advisory/ntap-20240621-0006/',
-                'https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-openssl-2021-GHY28dJd',
-                'https://ubuntu.com/security/notices/USN-4891-1',
-                'https://ubuntu.com/security/notices/USN-5038-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-3449',
-                'https://www.debian.org/security/2021/dsa-4875',
-                'https://www.openssl.org/news/secadv/20210325.txt',
-                'https://www.oracle.com//security-alerts/cpujul2021.html',
-                'https://www.oracle.com/security-alerts/cpuApr2021.html',
-                'https://www.oracle.com/security-alerts/cpuapr2022.html',
-                'https://www.oracle.com/security-alerts/cpujul2022.html',
-                'https://www.oracle.com/security-alerts/cpuoct2021.html',
-                'https://www.tenable.com/security/tns-2021-05',
-                'https://www.tenable.com/security/tns-2021-06',
-                'https://www.tenable.com/security/tns-2021-09',
-                'https://www.tenable.com/security/tns-2021-10'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: NULL pointer dereference in signature_algorithms processing'
-            },
-            {
-              'cve':  'CVE-2021-23839',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '3.7',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N'
-                },
-                'redhat': {
-                  'v3score':  '3.7',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-327'
-              ],
-              'description':   'OpenSSL 1.0.2 supports SSLv2. If a client attempts to negotiate SSLv2 with a server that is configured to support both SSLv2 and more recent SSL and TLS versions then a check is made for a version rollback attack when unpadding an RSA signature. Clients that support SSL or TLS versions greater than SSLv2 are supposed to use a special form of padding. A server that supports greater than SSLv2 is supposed to reject connection attempts from a client where this special form of padding is present, because this indicates that a version rollback has occurred (i.e. both client and server support greater than SSLv2, and yet this is the version that is being requested). The implementation of this padding check inverted the logic so that the connection attempt is accepted if the padding is present, and rejected if it is absent. This means that such as server will accept a connection if a version rollback attack has occurred. Further the server will erroneously reject a connection if a normal SSLv2 connection attempt is made. Only OpenSSL 1.0.2 servers from version 1.0.2s to 1.0.2x are affected by this issue. In order to be vulnerable a 1.0.2 server must: 1) have configured SSLv2 support at compile time (this is off by default), 2) have configured SSLv2 support at runtime (this is off by default), 3) have configured SSLv2 ciphersuites (these are not in the default ciphersuite list) OpenSSL 1.1.1 does not have SSLv2 support and therefore is not vulnerable to this issue. The underlying error is in the implementation of the RSA_padding_check_SSLv23() function. This also affects the RSA_SSLV23_PADDING padding mode used by various other functions. Although 1.1.1 does not support SSLv2 the RSA_padding_check_SSLv23() function still exists, as does the RSA_SSLV23_PADDING padding mode. Applications that directly call that function or use that padding mode will encounter this issue. However since there is no support for the SSLv2 protocol in 1.1.1 this is considered a bug and not a security issue in that version. OpenSSL 1.0.2 is out of support and no longer receiving public updates. Premium support customers of OpenSSL 1.0.2 should upgrade to 1.0.2y. Other users should upgrade to 1.1.1j. Fixed in OpenSSL 1.0.2y (Affected 1.0.2s-1.0.2x).',
-              'diffID':        'sha256:f1498886f9a6173beaafc4fee55074d6c389ce2f70d1a4b0ee866e4ab45a41ad',
-              'fixedVersions': [
-                '1.1.1j-r0'
-              ],
-              'installedVersion': '1.1.1i-r0',
-              'packageName':      'libssl1.1',
-              'purl':             'pkg:apk/alpine/libssl1.1@1.1.1i-r0?arch=s390x&distro=3.12.3',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-23839',
-                'https://cert-portal.siemens.com/productcert/pdf/ssa-637483.pdf',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=30919ab80a478f2d81f2e9acdcca3fa4740cd547',
-                'https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA44846',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-23839',
-                'https://security.netapp.com/advisory/ntap-20210219-0009/',
-                'https://security.netapp.com/advisory/ntap-20240621-0006/',
-                'https://www.cve.org/CVERecord?id=CVE-2021-23839',
-                'https://www.openssl.org/news/secadv/20210216.txt',
-                'https://www.oracle.com//security-alerts/cpujul2021.html',
-                'https://www.oracle.com/security-alerts/cpuApr2021.html',
-                'https://www.oracle.com/security-alerts/cpuapr2022.html',
-                'https://www.oracle.com/security-alerts/cpuoct2021.html'
-              ],
-              'severity':   'LOW',
-              'suppressed': false,
-              'title':      'openssl: incorrect SSLv2 rollback protection'
-            },
-            {
-              'cve':  'CVE-2021-28831',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-755'
-              ],
-              'description':   'decompress_gunzip.c in BusyBox through 1.32.1 mishandles the error bit on the huft_build result pointer, with a resultant invalid free or segmentation fault, via malformed gzip data.',
-              'diffID':        'sha256:f1498886f9a6173beaafc4fee55074d6c389ce2f70d1a4b0ee866e4ab45a41ad',
-              'fixedVersions': [
-                '1.31.1-r20'
-              ],
-              'installedVersion': '1.31.1-r19',
-              'packageName':      'ssl_client',
-              'purl':             'pkg:apk/alpine/ssl_client@1.31.1-r19?arch=s390x&distro=3.12.3',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-28831',
-                'https://git.busybox.net/busybox/commit/?id=f25d254dfd4243698c31a4f3153d4ac72aa9e9bd',
-                'https://lists.debian.org/debian-lts-announce/2021/04/msg00001.html',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/3UDQGJRECXFS5EZVDH2OI45FMO436AC4/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/Z7ZIFKPRR32ZYA3WAA2NXFA3QHHOU6FJ/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZASBW7QRRLY5V2R44MQ4QQM4CZIDHM2U/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-28831',
-                'https://security.gentoo.org/glsa/202105-09',
-                'https://security.netapp.com/advisory/ntap-20250509-0005/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://ubuntu.com/security/notices/USN-5179-2',
-                'https://ubuntu.com/security/notices/USN-6335-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-28831'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: invalid free or segmentation fault via malformed gzip data'
-            },
-            {
-              'cve':  'CVE-2021-42378',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the getvar_i function",
-              'diffID':        'sha256:f1498886f9a6173beaafc4fee55074d6c389ce2f70d1a4b0ee866e4ab45a41ad',
-              'fixedVersions': [
-                '1.31.1-r21'
-              ],
-              'installedVersion': '1.31.1-r19',
-              'packageName':      'ssl_client',
-              'purl':             'pkg:apk/alpine/ssl_client@1.31.1-r19?arch=s390x&distro=3.12.3',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42378',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42378',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42378'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the getvar_i()'
-            },
-            {
-              'cve':  'CVE-2021-42379',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the next_input_file function",
-              'diffID':        'sha256:f1498886f9a6173beaafc4fee55074d6c389ce2f70d1a4b0ee866e4ab45a41ad',
-              'fixedVersions': [
-                '1.31.1-r21'
-              ],
-              'installedVersion': '1.31.1-r19',
-              'packageName':      'ssl_client',
-              'purl':             'pkg:apk/alpine/ssl_client@1.31.1-r19?arch=s390x&distro=3.12.3',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42379',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42379',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42379'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the next_input_file()'
-            },
-            {
-              'cve':  'CVE-2021-42380',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the clrvar function",
-              'diffID':        'sha256:f1498886f9a6173beaafc4fee55074d6c389ce2f70d1a4b0ee866e4ab45a41ad',
-              'fixedVersions': [
-                '1.31.1-r21'
-              ],
-              'installedVersion': '1.31.1-r19',
-              'packageName':      'ssl_client',
-              'purl':             'pkg:apk/alpine/ssl_client@1.31.1-r19?arch=s390x&distro=3.12.3',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42380',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42380',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42380'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the clrvar()'
-            },
-            {
-              'cve':  'CVE-2021-42381',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the hash_init function",
-              'diffID':        'sha256:f1498886f9a6173beaafc4fee55074d6c389ce2f70d1a4b0ee866e4ab45a41ad',
-              'fixedVersions': [
-                '1.31.1-r21'
-              ],
-              'installedVersion': '1.31.1-r19',
-              'packageName':      'ssl_client',
-              'purl':             'pkg:apk/alpine/ssl_client@1.31.1-r19?arch=s390x&distro=3.12.3',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42381',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42381',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42381'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the hash_init()'
-            },
-            {
-              'cve':  'CVE-2021-42382',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the getvar_s function",
-              'diffID':        'sha256:f1498886f9a6173beaafc4fee55074d6c389ce2f70d1a4b0ee866e4ab45a41ad',
-              'fixedVersions': [
-                '1.31.1-r21'
-              ],
-              'installedVersion': '1.31.1-r19',
-              'packageName':      'ssl_client',
-              'purl':             'pkg:apk/alpine/ssl_client@1.31.1-r19?arch=s390x&distro=3.12.3',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42382',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42382',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42382'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the getvar_s()'
-            },
-            {
-              'cve':  'CVE-2021-42383',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the evaluate function",
-              'diffID':        'sha256:f1498886f9a6173beaafc4fee55074d6c389ce2f70d1a4b0ee866e4ab45a41ad',
-              'fixedVersions': [
-                '1.31.1-r21'
-              ],
-              'installedVersion': '1.31.1-r19',
-              'packageName':      'ssl_client',
-              'purl':             'pkg:apk/alpine/ssl_client@1.31.1-r19?arch=s390x&distro=3.12.3',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42383',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42383',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42383'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the evaluate()'
-            },
-            {
-              'cve':  'CVE-2021-42384',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the handle_special function",
-              'diffID':        'sha256:f1498886f9a6173beaafc4fee55074d6c389ce2f70d1a4b0ee866e4ab45a41ad',
-              'fixedVersions': [
-                '1.31.1-r21'
-              ],
-              'installedVersion': '1.31.1-r19',
-              'packageName':      'ssl_client',
-              'purl':             'pkg:apk/alpine/ssl_client@1.31.1-r19?arch=s390x&distro=3.12.3',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42384',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42384',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42384'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the handle_special()'
-            },
-            {
-              'cve':  'CVE-2021-42385',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the evaluate function",
-              'diffID':        'sha256:f1498886f9a6173beaafc4fee55074d6c389ce2f70d1a4b0ee866e4ab45a41ad',
-              'fixedVersions': [
-                '1.31.1-r21'
-              ],
-              'installedVersion': '1.31.1-r19',
-              'packageName':      'ssl_client',
-              'purl':             'pkg:apk/alpine/ssl_client@1.31.1-r19?arch=s390x&distro=3.12.3',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42385',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42385',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42385'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the evaluate()'
-            },
-            {
-              'cve':  'CVE-2021-42386',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the nvalloc function",
-              'diffID':        'sha256:f1498886f9a6173beaafc4fee55074d6c389ce2f70d1a4b0ee866e4ab45a41ad',
-              'fixedVersions': [
-                '1.31.1-r21'
-              ],
-              'installedVersion': '1.31.1-r19',
-              'packageName':      'ssl_client',
-              'purl':             'pkg:apk/alpine/ssl_client@1.31.1-r19?arch=s390x&distro=3.12.3',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42386',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42386',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42386'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the nvalloc()'
-            },
-            {
-              'cve':  'CVE-2022-28391',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '8.8',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-88'
-              ],
-              'description':   "BusyBox through 1.35.0 allows remote attackers to execute arbitrary code if netstat is used to print a DNS PTR record's value to a VT compatible terminal. Alternatively, the attacker could choose to change the terminal's colors.",
-              'diffID':        'sha256:f1498886f9a6173beaafc4fee55074d6c389ce2f70d1a4b0ee866e4ab45a41ad',
-              'fixedVersions': [
-                '1.31.1-r22'
-              ],
-              'installedVersion': '1.31.1-r19',
-              'packageName':      'ssl_client',
-              'purl':             'pkg:apk/alpine/ssl_client@1.31.1-r19?arch=s390x&distro=3.12.3',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2022-28391',
-                'https://git.alpinelinux.org/aports/plain/main/busybox/0001-libbb-sockaddr2str-ensure-only-printable-characters-.patch',
-                'https://git.alpinelinux.org/aports/plain/main/busybox/0002-nslookup-sanitize-all-printed-strings-with-printable.patch',
-                'https://gitlab.alpinelinux.org/alpine/aports/-/issues/13661',
-                'https://nvd.nist.gov/vuln/detail/CVE-2022-28391',
-                'https://www.cve.org/CVERecord?id=CVE-2022-28391'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: remote attackers may execute arbitrary code if netstat is used'
-            },
-            {
-              'cve':  'CVE-2021-42374',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '5.7',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-125'
-              ],
-              'description':   "An out-of-bounds heap read in Busybox's unlzma applet leads to information leak and denial of service when crafted LZMA-compressed input is decompressed. This can be triggered by any applet/format that",
-              'diffID':        'sha256:f1498886f9a6173beaafc4fee55074d6c389ce2f70d1a4b0ee866e4ab45a41ad',
-              'fixedVersions': [
-                '1.31.1-r21'
-              ],
-              'installedVersion': '1.31.1-r19',
-              'packageName':      'ssl_client',
-              'purl':             'pkg:apk/alpine/ssl_client@1.31.1-r19?arch=s390x&distro=3.12.3',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42374',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42374',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42374'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'busybox: out-of-bounds read in unlzma applet leads to information leak and denial of service when crafted LZMA-compressed input is decompressed'
-            },
-            {
-              'cve':  'CVE-2022-37434',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '9.8',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-787',
-                'CWE-120'
-              ],
-              'description':   'zlib through 1.2.12 has a heap-based buffer over-read or buffer overflow in inflate in inflate.c via a large gzip header extra field. NOTE: only applications that call inflateGetHeader are affected. Some common applications bundle the affected zlib source code but may be unable to call inflateGetHeader (e.g., see the nodejs/node reference).',
-              'diffID':        'sha256:f1498886f9a6173beaafc4fee55074d6c389ce2f70d1a4b0ee866e4ab45a41ad',
-              'fixedVersions': [
-                '1.2.12-r2'
-              ],
-              'installedVersion': '1.2.11-r3',
-              'packageName':      'zlib',
-              'purl':             'pkg:apk/alpine/zlib@1.2.11-r3?arch=s390x&distro=3.12.3',
-              'references':       [
-                'http://seclists.org/fulldisclosure/2022/Oct/37',
-                'http://seclists.org/fulldisclosure/2022/Oct/38',
-                'http://seclists.org/fulldisclosure/2022/Oct/41',
-                'http://seclists.org/fulldisclosure/2022/Oct/42',
-                'http://www.openwall.com/lists/oss-security/2022/08/05/2',
-                'http://www.openwall.com/lists/oss-security/2022/08/09/1',
-                'https://access.redhat.com/errata/RHSA-2022:8291',
-                'https://access.redhat.com/security/cve/CVE-2022-37434',
-                'https://bugzilla.redhat.com/2116639',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2053198',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2077431',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2081296',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2116639',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-37434',
-                'https://errata.almalinux.org/9/ALSA-2022-8291.html',
-                'https://errata.rockylinux.org/RLSA-2022:8291',
-                'https://github.com/curl/curl/issues/9271',
-                'https://github.com/ivd38/zlib_overflow',
-                'https://github.com/madler/zlib/blob/21767c654d31d2dccdde4330529775c6c5fd5389/zlib.h#L1062-L1063',
-                'https://github.com/madler/zlib/commit/1eb7682f845ac9e9bf9ae35bbfb3bad5dacbd91d',
-                'https://github.com/madler/zlib/commit/eff308af425b67093bab25f80f1ae950166bece1',
-                'https://github.com/nodejs/node/blob/75b68c6e4db515f76df73af476eccf382bbcb00a/deps/zlib/inflate.c#L762-L764',
-                'https://linux.oracle.com/cve/CVE-2022-37434.html',
-                'https://linux.oracle.com/errata/ELSA-2023-1095.html',
-                'https://lists.debian.org/debian-lts-announce/2022/09/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JWN4VE3JQR4O2SOUS5TXNLANRPMHWV4I/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NMBOJ77A7T7PQCARMDUK75TE6LLESZ3O/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PAVPQNCG3XRLCLNSQRM3KAN5ZFMVXVTY/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/X5U7OTKZSHY2I3ZFJSR2SHFHW72RKGDK/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YRQAI7H4M4RQZ2IWZUEEXECBE5D56BH2/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2022-37434',
-                'https://security.netapp.com/advisory/ntap-20220901-0005/',
-                'https://security.netapp.com/advisory/ntap-20230427-0007/',
-                'https://support.apple.com/kb/HT213488',
-                'https://support.apple.com/kb/HT213489',
-                'https://support.apple.com/kb/HT213490',
-                'https://support.apple.com/kb/HT213491',
-                'https://support.apple.com/kb/HT213493',
-                'https://support.apple.com/kb/HT213494',
-                'https://ubuntu.com/security/notices/USN-5570-1',
-                'https://ubuntu.com/security/notices/USN-5570-2',
-                'https://ubuntu.com/security/notices/USN-5573-1',
-                'https://ubuntu.com/security/notices/USN-6736-1',
-                'https://ubuntu.com/security/notices/USN-6736-2',
-                'https://www.cve.org/CVERecord?id=CVE-2022-37434',
-                'https://www.debian.org/security/2022/dsa-5218'
-              ],
-              'severity':   'CRITICAL',
-              'suppressed': false,
-              'title':      'zlib: heap-based buffer over-read and overflow in inflate() in inflate.c via a large gzip header extra field'
-            },
-            {
-              'cve':  'CVE-2018-25032',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'nvd': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '8.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-787'
-              ],
-              'description':   'zlib before 1.2.12 allows memory corruption when deflating (i.e., when compressing) if the input has many distant matches.',
-              'diffID':        'sha256:f1498886f9a6173beaafc4fee55074d6c389ce2f70d1a4b0ee866e4ab45a41ad',
-              'fixedVersions': [
-                '1.2.12-r0'
-              ],
-              'installedVersion': '1.2.11-r3',
-              'packageName':      'zlib',
-              'purl':             'pkg:apk/alpine/zlib@1.2.11-r3?arch=s390x&distro=3.12.3',
-              'references':       [
-                'http://seclists.org/fulldisclosure/2022/May/33',
-                'http://seclists.org/fulldisclosure/2022/May/35',
-                'http://seclists.org/fulldisclosure/2022/May/38',
-                'http://www.openwall.com/lists/oss-security/2022/03/25/2',
-                'http://www.openwall.com/lists/oss-security/2022/03/26/1',
-                'https://access.redhat.com/errata/RHSA-2022:8420',
-                'https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-25032.json',
-                'https://access.redhat.com/security/cve/CVE-2018-25032',
-                'https://bugzilla.redhat.com/2067945',
-                'https://cert-portal.siemens.com/productcert/pdf/ssa-333517.pdf',
-                'https://errata.almalinux.org/9/ALSA-2022-8420.html',
-                'https://github.com/advisories/GHSA-jc36-42cf-vqwj',
-                'https://github.com/madler/zlib/commit/5c44459c3b28a9bd3283aaceab7c615f8020c531',
-                'https://github.com/madler/zlib/compare/v1.2.11...v1.2.12',
-                'https://github.com/madler/zlib/issues/605',
-                'https://github.com/rubysec/ruby-advisory-db/blob/master/gems/nokogiri/CVE-2018-25032.yml',
-                'https://github.com/sparklemotion/nokogiri/releases/tag/v1.13.4',
-                'https://github.com/sparklemotion/nokogiri/security/advisories/GHSA-v6gp-9mmm-c6p5',
-                'https://groups.google.com/g/ruby-security-ann/c/vX7qSjsvWis/m/TJWN4oOKBwAJ',
-                'https://linux.oracle.com/cve/CVE-2018-25032.html',
-                'https://linux.oracle.com/errata/ELSA-2022-9565.html',
-                'https://lists.debian.org/debian-lts-announce/2022/04/msg00000.html',
-                'https://lists.debian.org/debian-lts-announce/2022/05/msg00008.html',
-                'https://lists.debian.org/debian-lts-announce/2022/09/msg00023.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DCZFIJBJTZ7CL5QXBFKTQ22Q26VINRUF/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DF62MVMH3QUGMBDCB3DY2ERQ6EBHTADB/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JZZPTWRYQULAOL3AW7RZJNVZ2UONXCV4/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NS2D2GFPFGOJUL4WQ3DUAY7HF4VWQ77F/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VOKNP2L734AEL47NRYGVZIKEFOUBQY5Y/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/XOKFMSNQ5D5WGMALBNBXU3GE442V74WU/',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/DCZFIJBJTZ7CL5QXBFKTQ22Q26VINRUF',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/DCZFIJBJTZ7CL5QXBFKTQ22Q26VINRUF/',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/DF62MVMH3QUGMBDCB3DY2ERQ6EBHTADB',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/DF62MVMH3QUGMBDCB3DY2ERQ6EBHTADB/',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/JZZPTWRYQULAOL3AW7RZJNVZ2UONXCV4',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/JZZPTWRYQULAOL3AW7RZJNVZ2UONXCV4/',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/NS2D2GFPFGOJUL4WQ3DUAY7HF4VWQ77F',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/NS2D2GFPFGOJUL4WQ3DUAY7HF4VWQ77F/',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/VOKNP2L734AEL47NRYGVZIKEFOUBQY5Y',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/VOKNP2L734AEL47NRYGVZIKEFOUBQY5Y/',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/XOKFMSNQ5D5WGMALBNBXU3GE442V74WU',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/XOKFMSNQ5D5WGMALBNBXU3GE442V74WU/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2018-25032',
-                'https://security.gentoo.org/glsa/202210-42',
-                'https://security.netapp.com/advisory/ntap-20220526-0009',
-                'https://security.netapp.com/advisory/ntap-20220526-0009/',
-                'https://security.netapp.com/advisory/ntap-20220729-0004',
-                'https://security.netapp.com/advisory/ntap-20220729-0004/',
-                'https://support.apple.com/kb/HT213255',
-                'https://support.apple.com/kb/HT213256',
-                'https://support.apple.com/kb/HT213257',
-                'https://ubuntu.com/security/notices/USN-5355-1',
-                'https://ubuntu.com/security/notices/USN-5355-2',
-                'https://ubuntu.com/security/notices/USN-5359-1',
-                'https://ubuntu.com/security/notices/USN-5359-2',
-                'https://ubuntu.com/security/notices/USN-5739-1',
-                'https://ubuntu.com/security/notices/USN-6736-1',
-                'https://ubuntu.com/security/notices/USN-6736-2',
-                'https://www.cve.org/CVERecord?id=CVE-2018-25032',
-                'https://www.debian.org/security/2022/dsa-5111',
-                'https://www.openwall.com/lists/oss-security/2022/03/24/1',
-                'https://www.openwall.com/lists/oss-security/2022/03/28/1',
-                'https://www.openwall.com/lists/oss-security/2022/03/28/3',
-                'https://www.oracle.com/security-alerts/cpujul2022.html'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'zlib: A flaw found in zlib when compressing (not decompressing) certain inputs'
-            }
-          ]
-        }
-      ],
-      'summary': {
-        'critical':   4,
-        'high':       32,
-        'low':        2,
-        'medium':     6,
-        'suppressed': 0,
-        'unknown':    0
-      }
-    }
-  },
-  {
-    'id':    'default/b5816f24b588dd4b3c0c27a3493f15c7377e7f7d25ac012286dcf4b20facefc3',
-    'type':  'storage.sbomscanner.kubewarden.io.vulnerabilityreport',
-    'links': {
-      'patch':  'https://localhost:8005/v1/storage.sbomscanner.kubewarden.io.vulnerabilityreports/default/b5816f24b588dd4b3c0c27a3493f15c7377e7f7d25ac012286dcf4b20facefc3',
-      'remove': 'https://localhost:8005/v1/storage.sbomscanner.kubewarden.io.vulnerabilityreports/default/b5816f24b588dd4b3c0c27a3493f15c7377e7f7d25ac012286dcf4b20facefc3',
-      'self':   'https://localhost:8005/v1/storage.sbomscanner.kubewarden.io.vulnerabilityreports/default/b5816f24b588dd4b3c0c27a3493f15c7377e7f7d25ac012286dcf4b20facefc3',
-      'update': 'https://localhost:8005/v1/storage.sbomscanner.kubewarden.io.vulnerabilityreports/default/b5816f24b588dd4b3c0c27a3493f15c7377e7f7d25ac012286dcf4b20facefc3',
-      'view':   'https://localhost:8005/apis/storage.sbomscanner.kubewarden.io/v1alpha1/namespaces/default/vulnerabilityreports/b5816f24b588dd4b3c0c27a3493f15c7377e7f7d25ac012286dcf4b20facefc3'
-    },
-    'apiVersion':    'storage.sbomscanner.kubewarden.io/v1alpha1',
-    'imageMetadata': {
-      'digest':      'sha256:bc3a56cf7fea030fbf230540ce724c2e5f81434eb2903910c31e7be3918f3890',
-      'platform':    'linux/arm/v7',
-      'registry':    'lsong-demo1',
-      'registryURI': 'registry-1.docker.io',
-      'repository':  'library/alpine',
-      'tag':         '3.11.12'
-    },
-    'kind':     'VulnerabilityReport',
-    'metadata': {
-      'creationTimestamp': '2026-01-14T18:52:03Z',
-      'fields':            [
-        'b5816f24b588dd4b3c0c27a3493f15c7377e7f7d25ac012286dcf4b20facefc3',
-        'registry-1.docker.io/library/alpine:3.11.12',
-        'linux/arm/v7',
-        '21 (0 suppressed)'
-      ],
-      'labels': {
-        'app.kubernetes.io/managed-by':          'sbomscanner',
-        'app.kubernetes.io/part-of':             'sbomscanner',
-        'sbomscanner.kubewarden.io/scanjob-uid': '445c600a-c4b6-40b3-bd71-f2d2140a37d5'
-      },
-      'name':            'b5816f24b588dd4b3c0c27a3493f15c7377e7f7d25ac012286dcf4b20facefc3',
-      'namespace':       'default',
-      'ownerReferences': [
-        {
-          'apiVersion':         'storage.sbomscanner.kubewarden.io/v1alpha1',
-          'blockOwnerDeletion': true,
-          'controller':         true,
-          'kind':               'SBOM',
-          'name':               'b5816f24b588dd4b3c0c27a3493f15c7377e7f7d25ac012286dcf4b20facefc3',
-          'uid':                '3212e111-599b-4bdb-8ef5-52465405a01e'
-        }
-      ],
-      'relationships': [
-        {
-          'fromId':   'default/b5816f24b588dd4b3c0c27a3493f15c7377e7f7d25ac012286dcf4b20facefc3',
-          'fromType': 'storage.sbomscanner.kubewarden.io.sbom',
-          'rel':      'owner',
-          'state':    'active',
-          'message':  'Resource is current'
-        }
-      ],
-      'resourceVersion': '1',
-      'state':           {
-        'error':         false,
-        'message':       'Resource is current',
-        'name':          'active',
-        'transitioning': false
-      },
-      'uid': 'c7638ad8-94d6-4ccf-9898-d5c9704e7af2'
-    },
-    'report': {
-      'results': [
-        {
-          'class':           'os-pkgs',
-          'target':          '/var/run/worker/trivy.sbom.4249144902.json (alpine 3.11.12)',
-          'type':            'alpine',
-          'vulnerabilities': [
-            {
-              'cve':  'CVE-2021-42378',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the getvar_i function",
-              'diffID':        'sha256:94af0aca5f523a289371ee13b51521833b4e93cca9988f97bd010e841e51ea0f',
-              'fixedVersions': [
-                '1.31.1-r11'
-              ],
-              'installedVersion': '1.31.1-r10',
-              'packageName':      'busybox',
-              'purl':             'pkg:apk/alpine/busybox@1.31.1-r10?arch=armv7&distro=3.11.12',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42378',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42378',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42378'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the getvar_i()'
-            },
-            {
-              'cve':  'CVE-2021-42379',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the next_input_file function",
-              'diffID':        'sha256:94af0aca5f523a289371ee13b51521833b4e93cca9988f97bd010e841e51ea0f',
-              'fixedVersions': [
-                '1.31.1-r11'
-              ],
-              'installedVersion': '1.31.1-r10',
-              'packageName':      'busybox',
-              'purl':             'pkg:apk/alpine/busybox@1.31.1-r10?arch=armv7&distro=3.11.12',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42379',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42379',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42379'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the next_input_file()'
-            },
-            {
-              'cve':  'CVE-2021-42380',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the clrvar function",
-              'diffID':        'sha256:94af0aca5f523a289371ee13b51521833b4e93cca9988f97bd010e841e51ea0f',
-              'fixedVersions': [
-                '1.31.1-r11'
-              ],
-              'installedVersion': '1.31.1-r10',
-              'packageName':      'busybox',
-              'purl':             'pkg:apk/alpine/busybox@1.31.1-r10?arch=armv7&distro=3.11.12',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42380',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42380',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42380'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the clrvar()'
-            },
-            {
-              'cve':  'CVE-2021-42381',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the hash_init function",
-              'diffID':        'sha256:94af0aca5f523a289371ee13b51521833b4e93cca9988f97bd010e841e51ea0f',
-              'fixedVersions': [
-                '1.31.1-r11'
-              ],
-              'installedVersion': '1.31.1-r10',
-              'packageName':      'busybox',
-              'purl':             'pkg:apk/alpine/busybox@1.31.1-r10?arch=armv7&distro=3.11.12',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42381',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42381',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42381'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the hash_init()'
-            },
-            {
-              'cve':  'CVE-2021-42382',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the getvar_s function",
-              'diffID':        'sha256:94af0aca5f523a289371ee13b51521833b4e93cca9988f97bd010e841e51ea0f',
-              'fixedVersions': [
-                '1.31.1-r11'
-              ],
-              'installedVersion': '1.31.1-r10',
-              'packageName':      'busybox',
-              'purl':             'pkg:apk/alpine/busybox@1.31.1-r10?arch=armv7&distro=3.11.12',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42382',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42382',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42382'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the getvar_s()'
-            },
-            {
-              'cve':  'CVE-2021-42383',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the evaluate function",
-              'diffID':        'sha256:94af0aca5f523a289371ee13b51521833b4e93cca9988f97bd010e841e51ea0f',
-              'fixedVersions': [
-                '1.31.1-r11'
-              ],
-              'installedVersion': '1.31.1-r10',
-              'packageName':      'busybox',
-              'purl':             'pkg:apk/alpine/busybox@1.31.1-r10?arch=armv7&distro=3.11.12',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42383',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42383',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42383'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the evaluate()'
-            },
-            {
-              'cve':  'CVE-2021-42384',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the handle_special function",
-              'diffID':        'sha256:94af0aca5f523a289371ee13b51521833b4e93cca9988f97bd010e841e51ea0f',
-              'fixedVersions': [
-                '1.31.1-r11'
-              ],
-              'installedVersion': '1.31.1-r10',
-              'packageName':      'busybox',
-              'purl':             'pkg:apk/alpine/busybox@1.31.1-r10?arch=armv7&distro=3.11.12',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42384',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42384',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42384'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the handle_special()'
-            },
-            {
-              'cve':  'CVE-2021-42385',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the evaluate function",
-              'diffID':        'sha256:94af0aca5f523a289371ee13b51521833b4e93cca9988f97bd010e841e51ea0f',
-              'fixedVersions': [
-                '1.31.1-r11'
-              ],
-              'installedVersion': '1.31.1-r10',
-              'packageName':      'busybox',
-              'purl':             'pkg:apk/alpine/busybox@1.31.1-r10?arch=armv7&distro=3.11.12',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42385',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42385',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42385'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the evaluate()'
-            },
-            {
-              'cve':  'CVE-2021-42386',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the nvalloc function",
-              'diffID':        'sha256:94af0aca5f523a289371ee13b51521833b4e93cca9988f97bd010e841e51ea0f',
-              'fixedVersions': [
-                '1.31.1-r11'
-              ],
-              'installedVersion': '1.31.1-r10',
-              'packageName':      'busybox',
-              'purl':             'pkg:apk/alpine/busybox@1.31.1-r10?arch=armv7&distro=3.11.12',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42386',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42386',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42386'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the nvalloc()'
-            },
-            {
-              'cve':  'CVE-2021-42374',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '5.7',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-125'
-              ],
-              'description':   "An out-of-bounds heap read in Busybox's unlzma applet leads to information leak and denial of service when crafted LZMA-compressed input is decompressed. This can be triggered by any applet/format that",
-              'diffID':        'sha256:94af0aca5f523a289371ee13b51521833b4e93cca9988f97bd010e841e51ea0f',
-              'fixedVersions': [
-                '1.31.1-r11'
-              ],
-              'installedVersion': '1.31.1-r10',
-              'packageName':      'busybox',
-              'purl':             'pkg:apk/alpine/busybox@1.31.1-r10?arch=armv7&distro=3.11.12',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42374',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42374',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42374'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'busybox: out-of-bounds read in unlzma applet leads to information leak and denial of service when crafted LZMA-compressed input is decompressed'
-            },
-            {
-              'cve':  'CVE-2021-42378',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the getvar_i function",
-              'diffID':        'sha256:94af0aca5f523a289371ee13b51521833b4e93cca9988f97bd010e841e51ea0f',
-              'fixedVersions': [
-                '1.31.1-r11'
-              ],
-              'installedVersion': '1.31.1-r10',
-              'packageName':      'ssl_client',
-              'purl':             'pkg:apk/alpine/ssl_client@1.31.1-r10?arch=armv7&distro=3.11.12',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42378',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42378',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42378'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the getvar_i()'
-            },
-            {
-              'cve':  'CVE-2021-42379',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the next_input_file function",
-              'diffID':        'sha256:94af0aca5f523a289371ee13b51521833b4e93cca9988f97bd010e841e51ea0f',
-              'fixedVersions': [
-                '1.31.1-r11'
-              ],
-              'installedVersion': '1.31.1-r10',
-              'packageName':      'ssl_client',
-              'purl':             'pkg:apk/alpine/ssl_client@1.31.1-r10?arch=armv7&distro=3.11.12',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42379',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42379',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42379'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the next_input_file()'
-            },
-            {
-              'cve':  'CVE-2021-42380',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the clrvar function",
-              'diffID':        'sha256:94af0aca5f523a289371ee13b51521833b4e93cca9988f97bd010e841e51ea0f',
-              'fixedVersions': [
-                '1.31.1-r11'
-              ],
-              'installedVersion': '1.31.1-r10',
-              'packageName':      'ssl_client',
-              'purl':             'pkg:apk/alpine/ssl_client@1.31.1-r10?arch=armv7&distro=3.11.12',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42380',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42380',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42380'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the clrvar()'
-            },
-            {
-              'cve':  'CVE-2021-42381',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the hash_init function",
-              'diffID':        'sha256:94af0aca5f523a289371ee13b51521833b4e93cca9988f97bd010e841e51ea0f',
-              'fixedVersions': [
-                '1.31.1-r11'
-              ],
-              'installedVersion': '1.31.1-r10',
-              'packageName':      'ssl_client',
-              'purl':             'pkg:apk/alpine/ssl_client@1.31.1-r10?arch=armv7&distro=3.11.12',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42381',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42381',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42381'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the hash_init()'
-            },
-            {
-              'cve':  'CVE-2021-42382',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the getvar_s function",
-              'diffID':        'sha256:94af0aca5f523a289371ee13b51521833b4e93cca9988f97bd010e841e51ea0f',
-              'fixedVersions': [
-                '1.31.1-r11'
-              ],
-              'installedVersion': '1.31.1-r10',
-              'packageName':      'ssl_client',
-              'purl':             'pkg:apk/alpine/ssl_client@1.31.1-r10?arch=armv7&distro=3.11.12',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42382',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42382',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42382'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the getvar_s()'
-            },
-            {
-              'cve':  'CVE-2021-42383',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the evaluate function",
-              'diffID':        'sha256:94af0aca5f523a289371ee13b51521833b4e93cca9988f97bd010e841e51ea0f',
-              'fixedVersions': [
-                '1.31.1-r11'
-              ],
-              'installedVersion': '1.31.1-r10',
-              'packageName':      'ssl_client',
-              'purl':             'pkg:apk/alpine/ssl_client@1.31.1-r10?arch=armv7&distro=3.11.12',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42383',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42383',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42383'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the evaluate()'
-            },
-            {
-              'cve':  'CVE-2021-42384',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the handle_special function",
-              'diffID':        'sha256:94af0aca5f523a289371ee13b51521833b4e93cca9988f97bd010e841e51ea0f',
-              'fixedVersions': [
-                '1.31.1-r11'
-              ],
-              'installedVersion': '1.31.1-r10',
-              'packageName':      'ssl_client',
-              'purl':             'pkg:apk/alpine/ssl_client@1.31.1-r10?arch=armv7&distro=3.11.12',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42384',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42384',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42384'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the handle_special()'
-            },
-            {
-              'cve':  'CVE-2021-42385',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the evaluate function",
-              'diffID':        'sha256:94af0aca5f523a289371ee13b51521833b4e93cca9988f97bd010e841e51ea0f',
-              'fixedVersions': [
-                '1.31.1-r11'
-              ],
-              'installedVersion': '1.31.1-r10',
-              'packageName':      'ssl_client',
-              'purl':             'pkg:apk/alpine/ssl_client@1.31.1-r10?arch=armv7&distro=3.11.12',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42385',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42385',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42385'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the evaluate()'
-            },
-            {
-              'cve':  'CVE-2021-42386',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the nvalloc function",
-              'diffID':        'sha256:94af0aca5f523a289371ee13b51521833b4e93cca9988f97bd010e841e51ea0f',
-              'fixedVersions': [
-                '1.31.1-r11'
-              ],
-              'installedVersion': '1.31.1-r10',
-              'packageName':      'ssl_client',
-              'purl':             'pkg:apk/alpine/ssl_client@1.31.1-r10?arch=armv7&distro=3.11.12',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42386',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42386',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42386'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the nvalloc()'
-            },
-            {
-              'cve':  'CVE-2021-42374',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '5.7',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-125'
-              ],
-              'description':   "An out-of-bounds heap read in Busybox's unlzma applet leads to information leak and denial of service when crafted LZMA-compressed input is decompressed. This can be triggered by any applet/format that",
-              'diffID':        'sha256:94af0aca5f523a289371ee13b51521833b4e93cca9988f97bd010e841e51ea0f',
-              'fixedVersions': [
-                '1.31.1-r11'
-              ],
-              'installedVersion': '1.31.1-r10',
-              'packageName':      'ssl_client',
-              'purl':             'pkg:apk/alpine/ssl_client@1.31.1-r10?arch=armv7&distro=3.11.12',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42374',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42374',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42374'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'busybox: out-of-bounds read in unlzma applet leads to information leak and denial of service when crafted LZMA-compressed input is decompressed'
-            },
-            {
-              'cve':  'CVE-2022-37434',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '9.8',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-787',
-                'CWE-120'
-              ],
-              'description':   'zlib through 1.2.12 has a heap-based buffer over-read or buffer overflow in inflate in inflate.c via a large gzip header extra field. NOTE: only applications that call inflateGetHeader are affected. Some common applications bundle the affected zlib source code but may be unable to call inflateGetHeader (e.g., see the nodejs/node reference).',
-              'diffID':        'sha256:94af0aca5f523a289371ee13b51521833b4e93cca9988f97bd010e841e51ea0f',
-              'fixedVersions': [
-                '1.2.11-r4'
-              ],
-              'installedVersion': '1.2.11-r3',
-              'packageName':      'zlib',
-              'purl':             'pkg:apk/alpine/zlib@1.2.11-r3?arch=armv7&distro=3.11.12',
-              'references':       [
-                'http://seclists.org/fulldisclosure/2022/Oct/37',
-                'http://seclists.org/fulldisclosure/2022/Oct/38',
-                'http://seclists.org/fulldisclosure/2022/Oct/41',
-                'http://seclists.org/fulldisclosure/2022/Oct/42',
-                'http://www.openwall.com/lists/oss-security/2022/08/05/2',
-                'http://www.openwall.com/lists/oss-security/2022/08/09/1',
-                'https://access.redhat.com/errata/RHSA-2022:8291',
-                'https://access.redhat.com/security/cve/CVE-2022-37434',
-                'https://bugzilla.redhat.com/2116639',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2053198',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2077431',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2081296',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2116639',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-37434',
-                'https://errata.almalinux.org/9/ALSA-2022-8291.html',
-                'https://errata.rockylinux.org/RLSA-2022:8291',
-                'https://github.com/curl/curl/issues/9271',
-                'https://github.com/ivd38/zlib_overflow',
-                'https://github.com/madler/zlib/blob/21767c654d31d2dccdde4330529775c6c5fd5389/zlib.h#L1062-L1063',
-                'https://github.com/madler/zlib/commit/1eb7682f845ac9e9bf9ae35bbfb3bad5dacbd91d',
-                'https://github.com/madler/zlib/commit/eff308af425b67093bab25f80f1ae950166bece1',
-                'https://github.com/nodejs/node/blob/75b68c6e4db515f76df73af476eccf382bbcb00a/deps/zlib/inflate.c#L762-L764',
-                'https://linux.oracle.com/cve/CVE-2022-37434.html',
-                'https://linux.oracle.com/errata/ELSA-2023-1095.html',
-                'https://lists.debian.org/debian-lts-announce/2022/09/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JWN4VE3JQR4O2SOUS5TXNLANRPMHWV4I/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NMBOJ77A7T7PQCARMDUK75TE6LLESZ3O/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PAVPQNCG3XRLCLNSQRM3KAN5ZFMVXVTY/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/X5U7OTKZSHY2I3ZFJSR2SHFHW72RKGDK/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YRQAI7H4M4RQZ2IWZUEEXECBE5D56BH2/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2022-37434',
-                'https://security.netapp.com/advisory/ntap-20220901-0005/',
-                'https://security.netapp.com/advisory/ntap-20230427-0007/',
-                'https://support.apple.com/kb/HT213488',
-                'https://support.apple.com/kb/HT213489',
-                'https://support.apple.com/kb/HT213490',
-                'https://support.apple.com/kb/HT213491',
-                'https://support.apple.com/kb/HT213493',
-                'https://support.apple.com/kb/HT213494',
-                'https://ubuntu.com/security/notices/USN-5570-1',
-                'https://ubuntu.com/security/notices/USN-5570-2',
-                'https://ubuntu.com/security/notices/USN-5573-1',
-                'https://ubuntu.com/security/notices/USN-6736-1',
-                'https://ubuntu.com/security/notices/USN-6736-2',
-                'https://www.cve.org/CVERecord?id=CVE-2022-37434',
-                'https://www.debian.org/security/2022/dsa-5218'
-              ],
-              'severity':   'CRITICAL',
-              'suppressed': false,
-              'title':      'zlib: heap-based buffer over-read and overflow in inflate() in inflate.c via a large gzip header extra field'
-            }
-          ]
-        }
-      ],
-      'summary': {
-        'critical':   1,
-        'high':       18,
-        'low':        0,
-        'medium':     2,
-        'suppressed': 0,
-        'unknown':    0
-      }
-    }
-  },
-  {
-    'id':    'default/b6f279ffe17823e2097bcaedefa5b6ce75e482e7ed4e989815fc20fe0efa1f6b',
-    'type':  'storage.sbomscanner.kubewarden.io.vulnerabilityreport',
-    'links': {
-      'patch':  'https://localhost:8005/v1/storage.sbomscanner.kubewarden.io.vulnerabilityreports/default/b6f279ffe17823e2097bcaedefa5b6ce75e482e7ed4e989815fc20fe0efa1f6b',
-      'remove': 'https://localhost:8005/v1/storage.sbomscanner.kubewarden.io.vulnerabilityreports/default/b6f279ffe17823e2097bcaedefa5b6ce75e482e7ed4e989815fc20fe0efa1f6b',
-      'self':   'https://localhost:8005/v1/storage.sbomscanner.kubewarden.io.vulnerabilityreports/default/b6f279ffe17823e2097bcaedefa5b6ce75e482e7ed4e989815fc20fe0efa1f6b',
-      'update': 'https://localhost:8005/v1/storage.sbomscanner.kubewarden.io.vulnerabilityreports/default/b6f279ffe17823e2097bcaedefa5b6ce75e482e7ed4e989815fc20fe0efa1f6b',
-      'view':   'https://localhost:8005/apis/storage.sbomscanner.kubewarden.io/v1alpha1/namespaces/default/vulnerabilityreports/b6f279ffe17823e2097bcaedefa5b6ce75e482e7ed4e989815fc20fe0efa1f6b'
-    },
-    'apiVersion':    'storage.sbomscanner.kubewarden.io/v1alpha1',
-    'imageMetadata': {
-      'digest':      'sha256:915a0447d045e3b55f84e8456de861571200ee39f38a0ce70a45f91c29491a21',
-      'platform':    'linux/arm/v7',
-      'registry':    'lsong-demo1',
-      'registryURI': 'registry-1.docker.io',
-      'repository':  'library/alpine',
-      'tag':         '3.10.3'
-    },
-    'kind':     'VulnerabilityReport',
-    'metadata': {
-      'creationTimestamp': '2026-01-14T18:51:26Z',
-      'fields':            [
-        'b6f279ffe17823e2097bcaedefa5b6ce75e482e7ed4e989815fc20fe0efa1f6b',
-        'registry-1.docker.io/library/alpine:3.10.3',
-        'linux/arm/v7',
-        '22 (0 suppressed)'
-      ],
-      'labels': {
-        'app.kubernetes.io/managed-by':          'sbomscanner',
-        'app.kubernetes.io/part-of':             'sbomscanner',
-        'sbomscanner.kubewarden.io/scanjob-uid': '445c600a-c4b6-40b3-bd71-f2d2140a37d5'
-      },
-      'name':            'b6f279ffe17823e2097bcaedefa5b6ce75e482e7ed4e989815fc20fe0efa1f6b',
-      'namespace':       'default',
-      'ownerReferences': [
-        {
-          'apiVersion':         'storage.sbomscanner.kubewarden.io/v1alpha1',
-          'blockOwnerDeletion': true,
-          'controller':         true,
-          'kind':               'SBOM',
-          'name':               'b6f279ffe17823e2097bcaedefa5b6ce75e482e7ed4e989815fc20fe0efa1f6b',
-          'uid':                'aecfbcec-5a04-4c78-9409-7cbc793af2f8'
-        }
-      ],
-      'relationships': [
-        {
-          'fromId':   'default/b6f279ffe17823e2097bcaedefa5b6ce75e482e7ed4e989815fc20fe0efa1f6b',
-          'fromType': 'storage.sbomscanner.kubewarden.io.sbom',
-          'rel':      'owner',
-          'state':    'active',
-          'message':  'Resource is current'
-        }
-      ],
-      'resourceVersion': '1',
-      'state':           {
-        'error':         false,
-        'message':       'Resource is current',
-        'name':          'active',
-        'transitioning': false
-      },
-      'uid': 'e35ecbe8-d713-4389-a572-69a4b30fae1d'
-    },
-    'report': {
-      'results': [
-        {
-          'class':           'os-pkgs',
-          'target':          '/var/run/worker/trivy.sbom.2353760722.json (alpine 3.10.3)',
-          'type':            'alpine',
-          'vulnerabilities': [
-            {
-              'cve':  'CVE-2021-36159',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '9.1',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '9.1',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-125'
-              ],
-              'description':   "libfetch before 2021-07-26, as used in apk-tools, xbps, and other products, mishandles numeric strings for the FTP and HTTP protocols. The FTP passive mode implementation allows an out-of-bounds read because strtol is used to parse the relevant numbers into address bytes. It does not check if the line ends prematurely. If it does, the for-loop condition checks for the '\\0' terminator one byte too late.",
-              'diffID':        'sha256:30a0150d2171ea876ccf57ecd34d56a8938c4a6ebe34589b9c59509e33a56e9a',
-              'fixedVersions': [
-                '2.10.7-r0'
-              ],
-              'installedVersion': '2.10.4-r2',
-              'packageName':      'apk-tools',
-              'purl':             'pkg:apk/alpine/apk-tools@2.10.4-r2?arch=armv7&distro=3.10.3',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-36159',
-                'https://github.com/freebsd/freebsd-src/commits/main/lib/libfetch',
-                'https://gitlab.alpinelinux.org/alpine/apk-tools/-/issues/10749',
-                'https://lists.apache.org/thread.html/r61db8e7dcb56dc000a5387a88f7a473bacec5ee01b9ff3f55308aacc%40%3Cdev.kafka.apache.org%3E',
-                'https://lists.apache.org/thread.html/r61db8e7dcb56dc000a5387a88f7a473bacec5ee01b9ff3f55308aacc%40%3Cusers.kafka.apache.org%3E',
-                'https://lists.apache.org/thread.html/rbf4ce74b0d1fa9810dec50ba3ace0caeea677af7c27a97111c06ccb7%40%3Cdev.kafka.apache.org%3E',
-                'https://lists.apache.org/thread.html/rbf4ce74b0d1fa9810dec50ba3ace0caeea677af7c27a97111c06ccb7%40%3Cusers.kafka.apache.org%3E',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-36159',
-                'https://www.cve.org/CVERecord?id=CVE-2021-36159'
-              ],
-              'severity':   'CRITICAL',
-              'suppressed': false,
-              'title':      'libfetch: an out of boundary read while libfetch uses strtol to parse the relevant numbers into address bytes leads to information leak or crash'
-            },
-            {
-              'cve':  'CVE-2021-30139',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-125'
-              ],
-              'description':   'In Alpine Linux apk-tools before 2.12.5, the tarball parser allows a buffer overflow and crash.',
-              'diffID':        'sha256:30a0150d2171ea876ccf57ecd34d56a8938c4a6ebe34589b9c59509e33a56e9a',
-              'fixedVersions': [
-                '2.10.6-r0'
-              ],
-              'installedVersion': '2.10.4-r2',
-              'packageName':      'apk-tools',
-              'purl':             'pkg:apk/alpine/apk-tools@2.10.4-r2?arch=armv7&distro=3.10.3',
-              'references':       [
-                'https://gitlab.alpinelinux.org/alpine/apk-tools/-/issues/10741',
-                'https://gitlab.alpinelinux.org/alpine/aports/-/issues/12606'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false
-            },
-            {
-              'cve':  'CVE-2021-28831',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-755'
-              ],
-              'description':   'decompress_gunzip.c in BusyBox through 1.32.1 mishandles the error bit on the huft_build result pointer, with a resultant invalid free or segmentation fault, via malformed gzip data.',
-              'diffID':        'sha256:30a0150d2171ea876ccf57ecd34d56a8938c4a6ebe34589b9c59509e33a56e9a',
-              'fixedVersions': [
-                '1.30.1-r5'
-              ],
-              'installedVersion': '1.30.1-r2',
-              'packageName':      'busybox',
-              'purl':             'pkg:apk/alpine/busybox@1.30.1-r2?arch=armv7&distro=3.10.3',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-28831',
-                'https://git.busybox.net/busybox/commit/?id=f25d254dfd4243698c31a4f3153d4ac72aa9e9bd',
-                'https://lists.debian.org/debian-lts-announce/2021/04/msg00001.html',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/3UDQGJRECXFS5EZVDH2OI45FMO436AC4/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/Z7ZIFKPRR32ZYA3WAA2NXFA3QHHOU6FJ/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZASBW7QRRLY5V2R44MQ4QQM4CZIDHM2U/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-28831',
-                'https://security.gentoo.org/glsa/202105-09',
-                'https://security.netapp.com/advisory/ntap-20250509-0005/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://ubuntu.com/security/notices/USN-5179-2',
-                'https://ubuntu.com/security/notices/USN-6335-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-28831'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: invalid free or segmentation fault via malformed gzip data'
-            },
-            {
-              'cve':  'CVE-2020-1967',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'nvd': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-476'
-              ],
-              'description':   'Server or client applications that call the SSL_check_chain() function during or after a TLS 1.3 handshake may crash due to a NULL pointer dereference as a result of incorrect handling of the "signature_algorithms_cert" TLS extension. The crash occurs if an invalid or unrecognised signature algorithm is received from the peer. This could be exploited by a malicious peer in a Denial of Service attack. OpenSSL version 1.1.1d, 1.1.1e, and 1.1.1f are affected by this issue. This issue did not affect OpenSSL versions prior to 1.1.1d. Fixed in OpenSSL 1.1.1g (Affected 1.1.1d-1.1.1f).',
-              'diffID':        'sha256:30a0150d2171ea876ccf57ecd34d56a8938c4a6ebe34589b9c59509e33a56e9a',
-              'fixedVersions': [
-                '1.1.1g-r0'
-              ],
-              'installedVersion': '1.1.1d-r0',
-              'packageName':      'libcrypto1.1',
-              'purl':             'pkg:apk/alpine/libcrypto1.1@1.1.1d-r0?arch=armv7&distro=3.10.3',
-              'references':       [
-                'http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00004.html',
-                'http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00011.html',
-                'http://packetstormsecurity.com/files/157527/OpenSSL-signature_algorithms_cert-Denial-Of-Service.html',
-                'http://seclists.org/fulldisclosure/2020/May/5',
-                'http://www.openwall.com/lists/oss-security/2020/04/22/2',
-                'https://access.redhat.com/security/cve/CVE-2020-1967',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=eb563247aef3e83dda7679c43f9649270462e5b1',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=eb563247aef3e83dda7679c43f9649270462e5b1',
-                'https://github.com/irsl/CVE-2020-1967',
-                'https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA44440',
-                'https://lists.apache.org/thread.html/r66ea9c436da150683432db5fbc8beb8ae01886c6459ac30c2cea7345%40%3Cdev.tomcat.apache.org%3E',
-                'https://lists.apache.org/thread.html/r66ea9c436da150683432db5fbc8beb8ae01886c6459ac30c2cea7345@%3Cdev.tomcat.apache.org%3E',
-                'https://lists.apache.org/thread.html/r94d6ac3f010a38fccf4f432b12180a13fa1cf303559bd805648c9064%40%3Cdev.tomcat.apache.org%3E',
-                'https://lists.apache.org/thread.html/r94d6ac3f010a38fccf4f432b12180a13fa1cf303559bd805648c9064@%3Cdev.tomcat.apache.org%3E',
-                'https://lists.apache.org/thread.html/r9a41e304992ce6aec6585a87842b4f2e692604f5c892c37e3b0587ee%40%3Cdev.tomcat.apache.org%3E',
-                'https://lists.apache.org/thread.html/r9a41e304992ce6aec6585a87842b4f2e692604f5c892c37e3b0587ee@%3Cdev.tomcat.apache.org%3E',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DDHOAATPWJCXRNFMJ2SASDBBNU5RJONY/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/EXDDAOWSAIEFQNBHWYE6PPYFV4QXGMCD/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/XVEP3LAK4JSPRXFO4QF4GG2IVXADV3SO/',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/DDHOAATPWJCXRNFMJ2SASDBBNU5RJONY',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/EXDDAOWSAIEFQNBHWYE6PPYFV4QXGMCD',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/XVEP3LAK4JSPRXFO4QF4GG2IVXADV3SO',
-                'https://nvd.nist.gov/vuln/detail/CVE-2020-1967',
-                'https://rustsec.org/advisories/RUSTSEC-2020-0015.html',
-                'https://security.FreeBSD.org/advisories/FreeBSD-SA-20:11.openssl.asc',
-                'https://security.gentoo.org/glsa/202004-10',
-                'https://security.netapp.com/advisory/ntap-20200424-0003',
-                'https://security.netapp.com/advisory/ntap-20200424-0003/',
-                'https://security.netapp.com/advisory/ntap-20200717-0004',
-                'https://security.netapp.com/advisory/ntap-20200717-0004/',
-                'https://www.cve.org/CVERecord?id=CVE-2020-1967',
-                'https://www.debian.org/security/2020/dsa-4661',
-                'https://www.openssl.org/news/secadv/20200421.txt',
-                'https://www.oracle.com//security-alerts/cpujul2021.html',
-                'https://www.oracle.com/security-alerts/cpuApr2021.html',
-                'https://www.oracle.com/security-alerts/cpujan2021.html',
-                'https://www.oracle.com/security-alerts/cpujul2020.html',
-                'https://www.oracle.com/security-alerts/cpuoct2020.html',
-                'https://www.oracle.com/security-alerts/cpuoct2021.html',
-                'https://www.synology.com/security/advisory/Synology_SA_20_05',
-                'https://www.synology.com/security/advisory/Synology_SA_20_05_OpenSSL',
-                'https://www.tenable.com/security/tns-2020-03',
-                'https://www.tenable.com/security/tns-2020-04',
-                'https://www.tenable.com/security/tns-2020-11',
-                'https://www.tenable.com/security/tns-2021-10'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: Segmentation fault in SSL_check_chain causes denial of service'
-            },
-            {
-              'cve':  'CVE-2021-23840',
-              'cvss': {
-                'bitnami': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'ghsa': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'nvd': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-190'
-              ],
-              'description':   'Calls to EVP_CipherUpdate, EVP_EncryptUpdate and EVP_DecryptUpdate may overflow the output length argument in some cases where the input length is close to the maximum permissable length for an integer on the platform. In such cases the return value from the function call will be 1 (indicating success), but the output length value will be negative. This could cause applications to behave incorrectly or crash. OpenSSL versions 1.1.1i and below are affected by this issue. Users of these versions should upgrade to OpenSSL 1.1.1j. OpenSSL versions 1.0.2x and below are affected by this issue. However OpenSSL 1.0.2 is out of support and no longer receiving public updates. Premium support customers of OpenSSL 1.0.2 should upgrade to 1.0.2y. Other users should upgrade to 1.1.1j. Fixed in OpenSSL 1.1.1j (Affected 1.1.1-1.1.1i). Fixed in OpenSSL 1.0.2y (Affected 1.0.2-1.0.2x).',
-              'diffID':        'sha256:30a0150d2171ea876ccf57ecd34d56a8938c4a6ebe34589b9c59509e33a56e9a',
-              'fixedVersions': [
-                '1.1.1j-r0'
-              ],
-              'installedVersion': '1.1.1d-r0',
-              'packageName':      'libcrypto1.1',
-              'purl':             'pkg:apk/alpine/libcrypto1.1@1.1.1d-r0?arch=armv7&distro=3.10.3',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-23840',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=1908036',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=1930310',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=1930324',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=1934534',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=1934600',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=1939637',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=1940085',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=1965362',
-                'https://cert-portal.siemens.com/productcert/pdf/ssa-389290.pdf',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-23840',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-23841',
-                'https://errata.rockylinux.org/RLSA-2021:4424',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=6a51b9e1d0cf0bf8515f7201b68fb0a3482b3dc1',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=9b1129239f3ebb1d1c98ce9ed41d5c9476c47cb2',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=6a51b9e1d0cf0bf8515f7201b68fb0a3482b3dc1',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=9b1129239f3ebb1d1c98ce9ed41d5c9476c47cb2',
-                'https://github.com/alexcrichton/openssl-src-rs',
-                'https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA44846',
-                'https://kc.mcafee.com/corporate/index?page=content&id=SB10366',
-                'https://linux.oracle.com/cve/CVE-2021-23840.html',
-                'https://linux.oracle.com/errata/ELSA-2021-9561.html',
-                'https://lists.apache.org/thread.html/r58af02e294bd07f487e2c64ffc0a29b837db5600e33b6e698b9d696b%40%3Cissues.bookkeeper.apache.org%3E',
-                'https://lists.apache.org/thread.html/r58af02e294bd07f487e2c64ffc0a29b837db5600e33b6e698b9d696b@%3Cissues.bookkeeper.apache.org%3E',
-                'https://lists.apache.org/thread.html/rf4c02775860db415b4955778a131c2795223f61cb8c6a450893651e4%40%3Cissues.bookkeeper.apache.org%3E',
-                'https://lists.apache.org/thread.html/rf4c02775860db415b4955778a131c2795223f61cb8c6a450893651e4@%3Cissues.bookkeeper.apache.org%3E',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-23840',
-                'https://rustsec.org/advisories/RUSTSEC-2021-0057.html',
-                'https://security.gentoo.org/glsa/202103-03',
-                'https://security.netapp.com/advisory/ntap-20210219-0009',
-                'https://security.netapp.com/advisory/ntap-20210219-0009/',
-                'https://security.netapp.com/advisory/ntap-20240621-0006/',
-                'https://ubuntu.com/security/notices/USN-4738-1',
-                'https://ubuntu.com/security/notices/USN-5088-1',
-                'https://ubuntu.com/security/notices/USN-7018-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-23840',
-                'https://www.debian.org/security/2021/dsa-4855',
-                'https://www.openssl.org/news/secadv/20210216.txt',
-                'https://www.oracle.com//security-alerts/cpujul2021.html',
-                'https://www.oracle.com/security-alerts/cpuApr2021.html',
-                'https://www.oracle.com/security-alerts/cpuapr2022.html',
-                'https://www.oracle.com/security-alerts/cpujan2022.html',
-                'https://www.oracle.com/security-alerts/cpuoct2021.html',
-                'https://www.tenable.com/security/tns-2021-03',
-                'https://www.tenable.com/security/tns-2021-09',
-                'https://www.tenable.com/security/tns-2021-10'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: integer overflow in CipherUpdate'
-            },
-            {
-              'cve':  'CVE-2021-3450',
-              'cvss': {
-                'bitnami': {
-                  'v3score':  '7.4',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N'
-                },
-                'ghsa': {
-                  'v3score':  '7.4',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N'
-                },
-                'nvd': {
-                  'v3score':  '7.4',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N'
-                },
-                'redhat': {
-                  'v3score':  '7.4',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-295'
-              ],
-              'description':   'The X509_V_FLAG_X509_STRICT flag enables additional security checks of the certificates present in a certificate chain. It is not set by default. Starting from OpenSSL version 1.1.1h a check to disallow certificates in the chain that have explicitly encoded elliptic curve parameters was added as an additional strict check. An error in the implementation of this check meant that the result of a previous check to confirm that certificates in the chain are valid CA certificates was overwritten. This effectively bypasses the check that non-CA certificates must not be able to issue other certificates. If a "purpose" has been configured then there is a subsequent opportunity for checks that the certificate is a valid CA. All of the named "purpose" values implemented in libcrypto perform this check. Therefore, where a purpose is set the certificate chain will still be rejected even when the strict flag has been used. A purpose is set by default in libssl client and server certificate verification routines, but it can be overridden or removed by an application. In order to be affected, an application must explicitly set the X509_V_FLAG_X509_STRICT verification flag and either not set a purpose for the certificate verification or, in the case of TLS client or server applications, override the default purpose. OpenSSL versions 1.1.1h and newer are affected by this issue. Users of these versions should upgrade to OpenSSL 1.1.1k. OpenSSL 1.0.2 is not impacted by this issue. Fixed in OpenSSL 1.1.1k (Affected 1.1.1h-1.1.1j).',
-              'diffID':        'sha256:30a0150d2171ea876ccf57ecd34d56a8938c4a6ebe34589b9c59509e33a56e9a',
-              'fixedVersions': [
-                '1.1.1k-r0'
-              ],
-              'installedVersion': '1.1.1d-r0',
-              'packageName':      'libcrypto1.1',
-              'purl':             'pkg:apk/alpine/libcrypto1.1@1.1.1d-r0?arch=armv7&distro=3.10.3',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2021/03/27/1',
-                'http://www.openwall.com/lists/oss-security/2021/03/27/2',
-                'http://www.openwall.com/lists/oss-security/2021/03/28/3',
-                'http://www.openwall.com/lists/oss-security/2021/03/28/4',
-                'https://access.redhat.com/security/cve/CVE-2021-3450',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=1941547',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=1941554',
-                'https://cert-portal.siemens.com/productcert/pdf/ssa-389290.pdf',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-3449',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-3450',
-                'https://errata.rockylinux.org/RLSA-2021:1024',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=2a40b7bc7b94dd7de897a74571e7024f0cf0d63b',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=2a40b7bc7b94dd7de897a74571e7024f0cf0d63b',
-                'https://github.com/alexcrichton/openssl-src-rs',
-                'https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA44845',
-                'https://kc.mcafee.com/corporate/index?page=content&id=SB10356',
-                'https://linux.oracle.com/cve/CVE-2021-3450.html',
-                'https://linux.oracle.com/errata/ELSA-2021-9151.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CCBFLLVQVILIVGZMBJL3IXZGKWQISYNP/',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/CCBFLLVQVILIVGZMBJL3IXZGKWQISYNP',
-                'https://mta.openssl.org/pipermail/openssl-announce/2021-March/000198.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-3450',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2021-0013',
-                'https://rustsec.org/advisories/RUSTSEC-2021-0056.html',
-                'https://security.FreeBSD.org/advisories/FreeBSD-SA-21:07.openssl.asc',
-                'https://security.gentoo.org/glsa/202103-03',
-                'https://security.netapp.com/advisory/ntap-20210326-0006',
-                'https://security.netapp.com/advisory/ntap-20210326-0006/',
-                'https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-openssl-2021-GHY28dJd',
-                'https://www.cve.org/CVERecord?id=CVE-2021-3450',
-                'https://www.openssl.org/news/secadv/20210325.txt',
-                'https://www.oracle.com//security-alerts/cpujul2021.html',
-                'https://www.oracle.com/security-alerts/cpuApr2021.html',
-                'https://www.oracle.com/security-alerts/cpuapr2022.html',
-                'https://www.oracle.com/security-alerts/cpujul2022.html',
-                'https://www.oracle.com/security-alerts/cpuoct2021.html',
-                'https://www.tenable.com/security/tns-2021-05',
-                'https://www.tenable.com/security/tns-2021-08',
-                'https://www.tenable.com/security/tns-2021-09'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: CA certificate check bypass with X509_V_FLAG_X509_STRICT'
-            },
-            {
-              'cve':  'CVE-2019-1551',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N'
-                },
-                'redhat': {
-                  'v3score':  '4.8',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-190'
-              ],
-              'description':   'There is an overflow bug in the x64_64 Montgomery squaring procedure used in exponentiation with 512-bit moduli. No EC algorithms are affected. Analysis suggests that attacks against 2-prime RSA1024, 3-prime RSA1536, and DSA1024 as a result of this defect would be very difficult to perform and are not believed likely. Attacks against DH512 are considered just feasible. However, for an attack the target would have to re-use the DH512 private key, which is not recommended anyway. Also applications directly using the low level API BN_mod_exp may be affected if they use BN_FLG_CONSTTIME. Fixed in OpenSSL 1.1.1e (Affected 1.1.1-1.1.1d). Fixed in OpenSSL 1.0.2u (Affected 1.0.2-1.0.2t).',
-              'diffID':        'sha256:30a0150d2171ea876ccf57ecd34d56a8938c4a6ebe34589b9c59509e33a56e9a',
-              'fixedVersions': [
-                '1.1.1d-r2'
-              ],
-              'installedVersion': '1.1.1d-r0',
-              'packageName':      'libcrypto1.1',
-              'purl':             'pkg:apk/alpine/libcrypto1.1@1.1.1d-r0?arch=armv7&distro=3.10.3',
-              'references':       [
-                'http://lists.opensuse.org/opensuse-security-announce/2020-01/msg00030.html',
-                'http://packetstormsecurity.com/files/155754/Slackware-Security-Advisory-openssl-Updates.html',
-                'https://access.redhat.com/security/cve/CVE-2019-1551',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=419102400a2811582a7a3d4a4e317d72e5ce0a8f',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=f1c5eea8a817075d31e43f5876993c6710238c98',
-                'https://github.com/openssl/openssl/pull/10575',
-                'https://linux.oracle.com/cve/CVE-2019-1551.html',
-                'https://linux.oracle.com/errata/ELSA-2020-4514.html',
-                'https://lists.debian.org/debian-lts-announce/2022/03/msg00023.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DDHOAATPWJCXRNFMJ2SASDBBNU5RJONY/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/EXDDAOWSAIEFQNBHWYE6PPYFV4QXGMCD/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/XVEP3LAK4JSPRXFO4QF4GG2IVXADV3SO/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2019-1551',
-                'https://seclists.org/bugtraq/2019/Dec/39',
-                'https://seclists.org/bugtraq/2019/Dec/46',
-                'https://security.gentoo.org/glsa/202004-10',
-                'https://security.netapp.com/advisory/ntap-20191210-0001/',
-                'https://ubuntu.com/security/notices/USN-4376-1',
-                'https://ubuntu.com/security/notices/USN-4504-1',
-                'https://usn.ubuntu.com/4376-1/',
-                'https://usn.ubuntu.com/4504-1/',
-                'https://www.cve.org/CVERecord?id=CVE-2019-1551',
-                'https://www.debian.org/security/2019/dsa-4594',
-                'https://www.debian.org/security/2021/dsa-4855',
-                'https://www.openssl.org/news/secadv/20191206.txt',
-                'https://www.oracle.com/security-alerts/cpuApr2021.html',
-                'https://www.oracle.com/security-alerts/cpujan2021.html',
-                'https://www.oracle.com/security-alerts/cpujul2020.html',
-                'https://www.tenable.com/security/tns-2019-09',
-                'https://www.tenable.com/security/tns-2020-03',
-                'https://www.tenable.com/security/tns-2020-11',
-                'https://www.tenable.com/security/tns-2021-10'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: Integer overflow in RSAZ modular exponentiation on x86_64'
-            },
-            {
-              'cve':  'CVE-2020-1971',
-              'cvss': {
-                'bitnami': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'nvd': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-476'
-              ],
-              'description':   "The X.509 GeneralName type is a generic type for representing different types of names. One of those name types is known as EDIPartyName. OpenSSL provides a function GENERAL_NAME_cmp which compares different instances of a GENERAL_NAME to see if they are equal or not. This function behaves incorrectly when both GENERAL_NAMEs contain an EDIPARTYNAME. A NULL pointer dereference and a crash may occur leading to a possible denial of service attack. OpenSSL itself uses the GENERAL_NAME_cmp function for two purposes: 1) Comparing CRL distribution point names between an available CRL and a CRL distribution point embedded in an X509 certificate 2) When verifying that a timestamp response token signer matches the timestamp authority name (exposed via the API functions TS_RESP_verify_response and TS_RESP_verify_token) If an attacker can control both items being compared then that attacker could trigger a crash. For example if the attacker can trick a client or server into checking a malicious certificate against a malicious CRL then this may occur. Note that some applications automatically download CRLs based on a URL embedded in a certificate. This checking happens prior to the signatures on the certificate and CRL being verified. OpenSSL's s_server, s_client and verify tools have support for the \"-crl_download\" option which implements automatic CRL downloading and this attack has been demonstrated to work against those tools. Note that an unrelated bug means that affected versions of OpenSSL cannot parse or construct correct encodings of EDIPARTYNAME. However it is possible to construct a malformed EDIPARTYNAME that OpenSSL's parser will accept and hence trigger this attack. All OpenSSL 1.1.1 and 1.0.2 versions are affected by this issue. Other OpenSSL releases are out of support and have not been checked. Fixed in OpenSSL 1.1.1i (Affected 1.1.1-1.1.1h). Fixed in OpenSSL 1.0.2x (Affected 1.0.2-1.0.2w).",
-              'diffID':        'sha256:30a0150d2171ea876ccf57ecd34d56a8938c4a6ebe34589b9c59509e33a56e9a',
-              'fixedVersions': [
-                '1.1.1i-r0'
-              ],
-              'installedVersion': '1.1.1d-r0',
-              'packageName':      'libcrypto1.1',
-              'purl':             'pkg:apk/alpine/libcrypto1.1@1.1.1d-r0?arch=armv7&distro=3.10.3',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2021/09/14/2',
-                'https://access.redhat.com/security/cve/CVE-2020-1971',
-                'https://cert-portal.siemens.com/productcert/pdf/ssa-389290.pdf',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=2154ab83e14ede338d2ede9bbe5cdfce5d5a6c9e',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=f960d81215ebf3f65e03d4d5d857fb9b666d6920',
-                'https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA44676',
-                'https://linux.oracle.com/cve/CVE-2020-1971.html',
-                'https://linux.oracle.com/errata/ELSA-2021-9150.html',
-                'https://lists.apache.org/thread.html/r63c6f2dd363d9b514d0a4bcf624580616a679898cc14c109a49b750c%40%3Cdev.tomcat.apache.org%3E',
-                'https://lists.apache.org/thread.html/rbb769f771711fb274e0a4acb1b5911c8aab544a6ac5e8c12d40c5143%40%3Ccommits.pulsar.apache.org%3E',
-                'https://lists.debian.org/debian-lts-announce/2020/12/msg00020.html',
-                'https://lists.debian.org/debian-lts-announce/2020/12/msg00021.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DGSI34Y5LQ5RYXN4M2I5ZQT65LFVDOUU/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PWPSSZNZOBJU2YR6Z4TGHXKYW3YP5QG7/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2020-1971',
-                'https://security.FreeBSD.org/advisories/FreeBSD-SA-20:33.openssl.asc',
-                'https://security.gentoo.org/glsa/202012-13',
-                'https://security.netapp.com/advisory/ntap-20201218-0005/',
-                'https://security.netapp.com/advisory/ntap-20210513-0002/',
-                'https://security.netapp.com/advisory/ntap-20240621-0006/',
-                'https://ubuntu.com/security/notices/USN-4662-1',
-                'https://ubuntu.com/security/notices/USN-4745-1',
-                'https://www.cve.org/CVERecord?id=CVE-2020-1971',
-                'https://www.debian.org/security/2020/dsa-4807',
-                'https://www.openssl.org/news/secadv/20201208.txt',
-                'https://www.oracle.com//security-alerts/cpujul2021.html',
-                'https://www.oracle.com/security-alerts/cpuApr2021.html',
-                'https://www.oracle.com/security-alerts/cpuapr2022.html',
-                'https://www.oracle.com/security-alerts/cpujan2021.html',
-                'https://www.oracle.com/security-alerts/cpuoct2021.html',
-                'https://www.tenable.com/security/tns-2020-11',
-                'https://www.tenable.com/security/tns-2021-09',
-                'https://www.tenable.com/security/tns-2021-10'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: EDIPARTYNAME NULL pointer de-reference'
-            },
-            {
-              'cve':  'CVE-2021-23841',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'nvd': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-476'
-              ],
-              'description':   'The OpenSSL public API function X509_issuer_and_serial_hash() attempts to create a unique hash value based on the issuer and serial number data contained within an X509 certificate. However it fails to correctly handle any errors that may occur while parsing the issuer field (which might occur if the issuer field is maliciously constructed). This may subsequently result in a NULL pointer deref and a crash leading to a potential denial of service attack. The function X509_issuer_and_serial_hash() is never directly called by OpenSSL itself so applications are only vulnerable if they use this function directly and they use it on certificates that may have been obtained from untrusted sources. OpenSSL versions 1.1.1i and below are affected by this issue. Users of these versions should upgrade to OpenSSL 1.1.1j. OpenSSL versions 1.0.2x and below are affected by this issue. However OpenSSL 1.0.2 is out of support and no longer receiving public updates. Premium support customers of OpenSSL 1.0.2 should upgrade to 1.0.2y. Other users should upgrade to 1.1.1j. Fixed in OpenSSL 1.1.1j (Affected 1.1.1-1.1.1i). Fixed in OpenSSL 1.0.2y (Affected 1.0.2-1.0.2x).',
-              'diffID':        'sha256:30a0150d2171ea876ccf57ecd34d56a8938c4a6ebe34589b9c59509e33a56e9a',
-              'fixedVersions': [
-                '1.1.1j-r0'
-              ],
-              'installedVersion': '1.1.1d-r0',
-              'packageName':      'libcrypto1.1',
-              'purl':             'pkg:apk/alpine/libcrypto1.1@1.1.1d-r0?arch=armv7&distro=3.10.3',
-              'references':       [
-                'http://seclists.org/fulldisclosure/2021/May/67',
-                'http://seclists.org/fulldisclosure/2021/May/68',
-                'http://seclists.org/fulldisclosure/2021/May/70',
-                'https://access.redhat.com/security/cve/CVE-2021-23841',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=1908036',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=1930310',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=1930324',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=1934534',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=1934600',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=1939637',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=1940085',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=1965362',
-                'https://cert-portal.siemens.com/productcert/pdf/ssa-637483.pdf',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-23840',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-23841',
-                'https://errata.rockylinux.org/RLSA-2021:4424',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=122a19ab48091c657f7cb1fb3af9fc07bd557bbf',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=8252ee4d90f3f2004d3d0aeeed003ad49c9a7807',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=122a19ab48091c657f7cb1fb3af9fc07bd557bbf',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=6a51b9e1d0cf0bf8515f7201b68fb0a3482b3dc1',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=8252ee4d90f3f2004d3d0aeeed003ad49c9a7807',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=9b1129239f3ebb1d1c98ce9ed41d5c9476c47cb2',
-                'https://github.com/alexcrichton/openssl-src-rs',
-                'https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA44846',
-                'https://linux.oracle.com/cve/CVE-2021-23841.html',
-                'https://linux.oracle.com/errata/ELSA-2021-9561.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-23841',
-                'https://rustsec.org/advisories/RUSTSEC-2021-0058',
-                'https://rustsec.org/advisories/RUSTSEC-2021-0058.html',
-                'https://security.gentoo.org/glsa/202103-03',
-                'https://security.netapp.com/advisory/ntap-20210219-0009',
-                'https://security.netapp.com/advisory/ntap-20210219-0009/',
-                'https://security.netapp.com/advisory/ntap-20210513-0002',
-                'https://security.netapp.com/advisory/ntap-20210513-0002/',
-                'https://security.netapp.com/advisory/ntap-20240621-0006/',
-                'https://support.apple.com/kb/HT212528',
-                'https://support.apple.com/kb/HT212529',
-                'https://support.apple.com/kb/HT212534',
-                'https://ubuntu.com/security/notices/USN-4738-1',
-                'https://ubuntu.com/security/notices/USN-4745-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-23841',
-                'https://www.debian.org/security/2021/dsa-4855',
-                'https://www.openssl.org/news/secadv/20210216.txt',
-                'https://www.oracle.com//security-alerts/cpujul2021.html',
-                'https://www.oracle.com/security-alerts/cpuApr2021.html',
-                'https://www.oracle.com/security-alerts/cpuapr2022.html',
-                'https://www.oracle.com/security-alerts/cpuoct2021.html',
-                'https://www.tenable.com/security/tns-2021-03',
-                'https://www.tenable.com/security/tns-2021-09'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: NULL pointer dereference in X509_issuer_and_serial_hash()'
-            },
-            {
-              'cve':  'CVE-2021-3449',
-              'cvss': {
-                'bitnami': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'ghsa': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'nvd': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-476'
-              ],
-              'description':   'An OpenSSL TLS server may crash if sent a maliciously crafted renegotiation ClientHello message from a client. If a TLSv1.2 renegotiation ClientHello omits the signature_algorithms extension (where it was present in the initial ClientHello), but includes a signature_algorithms_cert extension then a NULL pointer dereference will result, leading to a crash and a denial of service attack. A server is only vulnerable if it has TLSv1.2 and renegotiation enabled (which is the default configuration). OpenSSL TLS clients are not impacted by this issue. All OpenSSL 1.1.1 versions are affected by this issue. Users of these versions should upgrade to OpenSSL 1.1.1k. OpenSSL 1.0.2 is not impacted by this issue. Fixed in OpenSSL 1.1.1k (Affected 1.1.1-1.1.1j).',
-              'diffID':        'sha256:30a0150d2171ea876ccf57ecd34d56a8938c4a6ebe34589b9c59509e33a56e9a',
-              'fixedVersions': [
-                '1.1.1k-r0'
-              ],
-              'installedVersion': '1.1.1d-r0',
-              'packageName':      'libcrypto1.1',
-              'purl':             'pkg:apk/alpine/libcrypto1.1@1.1.1d-r0?arch=armv7&distro=3.10.3',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2021/03/27/1',
-                'http://www.openwall.com/lists/oss-security/2021/03/27/2',
-                'http://www.openwall.com/lists/oss-security/2021/03/28/3',
-                'http://www.openwall.com/lists/oss-security/2021/03/28/4',
-                'https://access.redhat.com/security/cve/CVE-2021-3449',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=1941547',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=1941554',
-                'https://cert-portal.siemens.com/productcert/pdf/ssa-389290.pdf',
-                'https://cert-portal.siemens.com/productcert/pdf/ssa-772220.pdf',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-3449',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-3450',
-                'https://errata.rockylinux.org/RLSA-2021:1024',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=fb9fa6b51defd48157eeb207f52181f735d96148',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=fb9fa6b51defd48157eeb207f52181f735d96148',
-                'https://github.com/alexcrichton/openssl-src-rs',
-                'https://github.com/nodejs/node/pull/38083',
-                'https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA44845',
-                'https://kc.mcafee.com/corporate/index?page=content&id=SB10356',
-                'https://linux.oracle.com/cve/CVE-2021-3449.html',
-                'https://linux.oracle.com/errata/ELSA-2021-9151.html',
-                'https://lists.debian.org/debian-lts-announce/2021/08/msg00029.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CCBFLLVQVILIVGZMBJL3IXZGKWQISYNP/',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/CCBFLLVQVILIVGZMBJL3IXZGKWQISYNP',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-3449',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2021-0013',
-                'https://rustsec.org/advisories/RUSTSEC-2021-0055',
-                'https://rustsec.org/advisories/RUSTSEC-2021-0055.html',
-                'https://security.FreeBSD.org/advisories/FreeBSD-SA-21:07.openssl.asc',
-                'https://security.gentoo.org/glsa/202103-03',
-                'https://security.netapp.com/advisory/ntap-20210326-0006',
-                'https://security.netapp.com/advisory/ntap-20210326-0006/',
-                'https://security.netapp.com/advisory/ntap-20210513-0002',
-                'https://security.netapp.com/advisory/ntap-20210513-0002/',
-                'https://security.netapp.com/advisory/ntap-20240621-0006/',
-                'https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-openssl-2021-GHY28dJd',
-                'https://ubuntu.com/security/notices/USN-4891-1',
-                'https://ubuntu.com/security/notices/USN-5038-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-3449',
-                'https://www.debian.org/security/2021/dsa-4875',
-                'https://www.openssl.org/news/secadv/20210325.txt',
-                'https://www.oracle.com//security-alerts/cpujul2021.html',
-                'https://www.oracle.com/security-alerts/cpuApr2021.html',
-                'https://www.oracle.com/security-alerts/cpuapr2022.html',
-                'https://www.oracle.com/security-alerts/cpujul2022.html',
-                'https://www.oracle.com/security-alerts/cpuoct2021.html',
-                'https://www.tenable.com/security/tns-2021-05',
-                'https://www.tenable.com/security/tns-2021-06',
-                'https://www.tenable.com/security/tns-2021-09',
-                'https://www.tenable.com/security/tns-2021-10'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: NULL pointer dereference in signature_algorithms processing'
-            },
-            {
-              'cve':  'CVE-2021-23839',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '3.7',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N'
-                },
-                'redhat': {
-                  'v3score':  '3.7',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-327'
-              ],
-              'description':   'OpenSSL 1.0.2 supports SSLv2. If a client attempts to negotiate SSLv2 with a server that is configured to support both SSLv2 and more recent SSL and TLS versions then a check is made for a version rollback attack when unpadding an RSA signature. Clients that support SSL or TLS versions greater than SSLv2 are supposed to use a special form of padding. A server that supports greater than SSLv2 is supposed to reject connection attempts from a client where this special form of padding is present, because this indicates that a version rollback has occurred (i.e. both client and server support greater than SSLv2, and yet this is the version that is being requested). The implementation of this padding check inverted the logic so that the connection attempt is accepted if the padding is present, and rejected if it is absent. This means that such as server will accept a connection if a version rollback attack has occurred. Further the server will erroneously reject a connection if a normal SSLv2 connection attempt is made. Only OpenSSL 1.0.2 servers from version 1.0.2s to 1.0.2x are affected by this issue. In order to be vulnerable a 1.0.2 server must: 1) have configured SSLv2 support at compile time (this is off by default), 2) have configured SSLv2 support at runtime (this is off by default), 3) have configured SSLv2 ciphersuites (these are not in the default ciphersuite list) OpenSSL 1.1.1 does not have SSLv2 support and therefore is not vulnerable to this issue. The underlying error is in the implementation of the RSA_padding_check_SSLv23() function. This also affects the RSA_SSLV23_PADDING padding mode used by various other functions. Although 1.1.1 does not support SSLv2 the RSA_padding_check_SSLv23() function still exists, as does the RSA_SSLV23_PADDING padding mode. Applications that directly call that function or use that padding mode will encounter this issue. However since there is no support for the SSLv2 protocol in 1.1.1 this is considered a bug and not a security issue in that version. OpenSSL 1.0.2 is out of support and no longer receiving public updates. Premium support customers of OpenSSL 1.0.2 should upgrade to 1.0.2y. Other users should upgrade to 1.1.1j. Fixed in OpenSSL 1.0.2y (Affected 1.0.2s-1.0.2x).',
-              'diffID':        'sha256:30a0150d2171ea876ccf57ecd34d56a8938c4a6ebe34589b9c59509e33a56e9a',
-              'fixedVersions': [
-                '1.1.1j-r0'
-              ],
-              'installedVersion': '1.1.1d-r0',
-              'packageName':      'libcrypto1.1',
-              'purl':             'pkg:apk/alpine/libcrypto1.1@1.1.1d-r0?arch=armv7&distro=3.10.3',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-23839',
-                'https://cert-portal.siemens.com/productcert/pdf/ssa-637483.pdf',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=30919ab80a478f2d81f2e9acdcca3fa4740cd547',
-                'https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA44846',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-23839',
-                'https://security.netapp.com/advisory/ntap-20210219-0009/',
-                'https://security.netapp.com/advisory/ntap-20240621-0006/',
-                'https://www.cve.org/CVERecord?id=CVE-2021-23839',
-                'https://www.openssl.org/news/secadv/20210216.txt',
-                'https://www.oracle.com//security-alerts/cpujul2021.html',
-                'https://www.oracle.com/security-alerts/cpuApr2021.html',
-                'https://www.oracle.com/security-alerts/cpuapr2022.html',
-                'https://www.oracle.com/security-alerts/cpuoct2021.html'
-              ],
-              'severity':   'LOW',
-              'suppressed': false,
-              'title':      'openssl: incorrect SSLv2 rollback protection'
-            },
-            {
-              'cve':  'CVE-2020-1967',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'nvd': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-476'
-              ],
-              'description':   'Server or client applications that call the SSL_check_chain() function during or after a TLS 1.3 handshake may crash due to a NULL pointer dereference as a result of incorrect handling of the "signature_algorithms_cert" TLS extension. The crash occurs if an invalid or unrecognised signature algorithm is received from the peer. This could be exploited by a malicious peer in a Denial of Service attack. OpenSSL version 1.1.1d, 1.1.1e, and 1.1.1f are affected by this issue. This issue did not affect OpenSSL versions prior to 1.1.1d. Fixed in OpenSSL 1.1.1g (Affected 1.1.1d-1.1.1f).',
-              'diffID':        'sha256:30a0150d2171ea876ccf57ecd34d56a8938c4a6ebe34589b9c59509e33a56e9a',
-              'fixedVersions': [
-                '1.1.1g-r0'
-              ],
-              'installedVersion': '1.1.1d-r0',
-              'packageName':      'libssl1.1',
-              'purl':             'pkg:apk/alpine/libssl1.1@1.1.1d-r0?arch=armv7&distro=3.10.3',
-              'references':       [
-                'http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00004.html',
-                'http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00011.html',
-                'http://packetstormsecurity.com/files/157527/OpenSSL-signature_algorithms_cert-Denial-Of-Service.html',
-                'http://seclists.org/fulldisclosure/2020/May/5',
-                'http://www.openwall.com/lists/oss-security/2020/04/22/2',
-                'https://access.redhat.com/security/cve/CVE-2020-1967',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=eb563247aef3e83dda7679c43f9649270462e5b1',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=eb563247aef3e83dda7679c43f9649270462e5b1',
-                'https://github.com/irsl/CVE-2020-1967',
-                'https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA44440',
-                'https://lists.apache.org/thread.html/r66ea9c436da150683432db5fbc8beb8ae01886c6459ac30c2cea7345%40%3Cdev.tomcat.apache.org%3E',
-                'https://lists.apache.org/thread.html/r66ea9c436da150683432db5fbc8beb8ae01886c6459ac30c2cea7345@%3Cdev.tomcat.apache.org%3E',
-                'https://lists.apache.org/thread.html/r94d6ac3f010a38fccf4f432b12180a13fa1cf303559bd805648c9064%40%3Cdev.tomcat.apache.org%3E',
-                'https://lists.apache.org/thread.html/r94d6ac3f010a38fccf4f432b12180a13fa1cf303559bd805648c9064@%3Cdev.tomcat.apache.org%3E',
-                'https://lists.apache.org/thread.html/r9a41e304992ce6aec6585a87842b4f2e692604f5c892c37e3b0587ee%40%3Cdev.tomcat.apache.org%3E',
-                'https://lists.apache.org/thread.html/r9a41e304992ce6aec6585a87842b4f2e692604f5c892c37e3b0587ee@%3Cdev.tomcat.apache.org%3E',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DDHOAATPWJCXRNFMJ2SASDBBNU5RJONY/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/EXDDAOWSAIEFQNBHWYE6PPYFV4QXGMCD/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/XVEP3LAK4JSPRXFO4QF4GG2IVXADV3SO/',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/DDHOAATPWJCXRNFMJ2SASDBBNU5RJONY',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/EXDDAOWSAIEFQNBHWYE6PPYFV4QXGMCD',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/XVEP3LAK4JSPRXFO4QF4GG2IVXADV3SO',
-                'https://nvd.nist.gov/vuln/detail/CVE-2020-1967',
-                'https://rustsec.org/advisories/RUSTSEC-2020-0015.html',
-                'https://security.FreeBSD.org/advisories/FreeBSD-SA-20:11.openssl.asc',
-                'https://security.gentoo.org/glsa/202004-10',
-                'https://security.netapp.com/advisory/ntap-20200424-0003',
-                'https://security.netapp.com/advisory/ntap-20200424-0003/',
-                'https://security.netapp.com/advisory/ntap-20200717-0004',
-                'https://security.netapp.com/advisory/ntap-20200717-0004/',
-                'https://www.cve.org/CVERecord?id=CVE-2020-1967',
-                'https://www.debian.org/security/2020/dsa-4661',
-                'https://www.openssl.org/news/secadv/20200421.txt',
-                'https://www.oracle.com//security-alerts/cpujul2021.html',
-                'https://www.oracle.com/security-alerts/cpuApr2021.html',
-                'https://www.oracle.com/security-alerts/cpujan2021.html',
-                'https://www.oracle.com/security-alerts/cpujul2020.html',
-                'https://www.oracle.com/security-alerts/cpuoct2020.html',
-                'https://www.oracle.com/security-alerts/cpuoct2021.html',
-                'https://www.synology.com/security/advisory/Synology_SA_20_05',
-                'https://www.synology.com/security/advisory/Synology_SA_20_05_OpenSSL',
-                'https://www.tenable.com/security/tns-2020-03',
-                'https://www.tenable.com/security/tns-2020-04',
-                'https://www.tenable.com/security/tns-2020-11',
-                'https://www.tenable.com/security/tns-2021-10'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: Segmentation fault in SSL_check_chain causes denial of service'
-            },
-            {
-              'cve':  'CVE-2021-23840',
-              'cvss': {
-                'bitnami': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'ghsa': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'nvd': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-190'
-              ],
-              'description':   'Calls to EVP_CipherUpdate, EVP_EncryptUpdate and EVP_DecryptUpdate may overflow the output length argument in some cases where the input length is close to the maximum permissable length for an integer on the platform. In such cases the return value from the function call will be 1 (indicating success), but the output length value will be negative. This could cause applications to behave incorrectly or crash. OpenSSL versions 1.1.1i and below are affected by this issue. Users of these versions should upgrade to OpenSSL 1.1.1j. OpenSSL versions 1.0.2x and below are affected by this issue. However OpenSSL 1.0.2 is out of support and no longer receiving public updates. Premium support customers of OpenSSL 1.0.2 should upgrade to 1.0.2y. Other users should upgrade to 1.1.1j. Fixed in OpenSSL 1.1.1j (Affected 1.1.1-1.1.1i). Fixed in OpenSSL 1.0.2y (Affected 1.0.2-1.0.2x).',
-              'diffID':        'sha256:30a0150d2171ea876ccf57ecd34d56a8938c4a6ebe34589b9c59509e33a56e9a',
-              'fixedVersions': [
-                '1.1.1j-r0'
-              ],
-              'installedVersion': '1.1.1d-r0',
-              'packageName':      'libssl1.1',
-              'purl':             'pkg:apk/alpine/libssl1.1@1.1.1d-r0?arch=armv7&distro=3.10.3',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-23840',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=1908036',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=1930310',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=1930324',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=1934534',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=1934600',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=1939637',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=1940085',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=1965362',
-                'https://cert-portal.siemens.com/productcert/pdf/ssa-389290.pdf',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-23840',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-23841',
-                'https://errata.rockylinux.org/RLSA-2021:4424',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=6a51b9e1d0cf0bf8515f7201b68fb0a3482b3dc1',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=9b1129239f3ebb1d1c98ce9ed41d5c9476c47cb2',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=6a51b9e1d0cf0bf8515f7201b68fb0a3482b3dc1',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=9b1129239f3ebb1d1c98ce9ed41d5c9476c47cb2',
-                'https://github.com/alexcrichton/openssl-src-rs',
-                'https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA44846',
-                'https://kc.mcafee.com/corporate/index?page=content&id=SB10366',
-                'https://linux.oracle.com/cve/CVE-2021-23840.html',
-                'https://linux.oracle.com/errata/ELSA-2021-9561.html',
-                'https://lists.apache.org/thread.html/r58af02e294bd07f487e2c64ffc0a29b837db5600e33b6e698b9d696b%40%3Cissues.bookkeeper.apache.org%3E',
-                'https://lists.apache.org/thread.html/r58af02e294bd07f487e2c64ffc0a29b837db5600e33b6e698b9d696b@%3Cissues.bookkeeper.apache.org%3E',
-                'https://lists.apache.org/thread.html/rf4c02775860db415b4955778a131c2795223f61cb8c6a450893651e4%40%3Cissues.bookkeeper.apache.org%3E',
-                'https://lists.apache.org/thread.html/rf4c02775860db415b4955778a131c2795223f61cb8c6a450893651e4@%3Cissues.bookkeeper.apache.org%3E',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-23840',
-                'https://rustsec.org/advisories/RUSTSEC-2021-0057.html',
-                'https://security.gentoo.org/glsa/202103-03',
-                'https://security.netapp.com/advisory/ntap-20210219-0009',
-                'https://security.netapp.com/advisory/ntap-20210219-0009/',
-                'https://security.netapp.com/advisory/ntap-20240621-0006/',
-                'https://ubuntu.com/security/notices/USN-4738-1',
-                'https://ubuntu.com/security/notices/USN-5088-1',
-                'https://ubuntu.com/security/notices/USN-7018-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-23840',
-                'https://www.debian.org/security/2021/dsa-4855',
-                'https://www.openssl.org/news/secadv/20210216.txt',
-                'https://www.oracle.com//security-alerts/cpujul2021.html',
-                'https://www.oracle.com/security-alerts/cpuApr2021.html',
-                'https://www.oracle.com/security-alerts/cpuapr2022.html',
-                'https://www.oracle.com/security-alerts/cpujan2022.html',
-                'https://www.oracle.com/security-alerts/cpuoct2021.html',
-                'https://www.tenable.com/security/tns-2021-03',
-                'https://www.tenable.com/security/tns-2021-09',
-                'https://www.tenable.com/security/tns-2021-10'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: integer overflow in CipherUpdate'
-            },
-            {
-              'cve':  'CVE-2021-3450',
-              'cvss': {
-                'bitnami': {
-                  'v3score':  '7.4',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N'
-                },
-                'ghsa': {
-                  'v3score':  '7.4',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N'
-                },
-                'nvd': {
-                  'v3score':  '7.4',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N'
-                },
-                'redhat': {
-                  'v3score':  '7.4',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-295'
-              ],
-              'description':   'The X509_V_FLAG_X509_STRICT flag enables additional security checks of the certificates present in a certificate chain. It is not set by default. Starting from OpenSSL version 1.1.1h a check to disallow certificates in the chain that have explicitly encoded elliptic curve parameters was added as an additional strict check. An error in the implementation of this check meant that the result of a previous check to confirm that certificates in the chain are valid CA certificates was overwritten. This effectively bypasses the check that non-CA certificates must not be able to issue other certificates. If a "purpose" has been configured then there is a subsequent opportunity for checks that the certificate is a valid CA. All of the named "purpose" values implemented in libcrypto perform this check. Therefore, where a purpose is set the certificate chain will still be rejected even when the strict flag has been used. A purpose is set by default in libssl client and server certificate verification routines, but it can be overridden or removed by an application. In order to be affected, an application must explicitly set the X509_V_FLAG_X509_STRICT verification flag and either not set a purpose for the certificate verification or, in the case of TLS client or server applications, override the default purpose. OpenSSL versions 1.1.1h and newer are affected by this issue. Users of these versions should upgrade to OpenSSL 1.1.1k. OpenSSL 1.0.2 is not impacted by this issue. Fixed in OpenSSL 1.1.1k (Affected 1.1.1h-1.1.1j).',
-              'diffID':        'sha256:30a0150d2171ea876ccf57ecd34d56a8938c4a6ebe34589b9c59509e33a56e9a',
-              'fixedVersions': [
-                '1.1.1k-r0'
-              ],
-              'installedVersion': '1.1.1d-r0',
-              'packageName':      'libssl1.1',
-              'purl':             'pkg:apk/alpine/libssl1.1@1.1.1d-r0?arch=armv7&distro=3.10.3',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2021/03/27/1',
-                'http://www.openwall.com/lists/oss-security/2021/03/27/2',
-                'http://www.openwall.com/lists/oss-security/2021/03/28/3',
-                'http://www.openwall.com/lists/oss-security/2021/03/28/4',
-                'https://access.redhat.com/security/cve/CVE-2021-3450',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=1941547',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=1941554',
-                'https://cert-portal.siemens.com/productcert/pdf/ssa-389290.pdf',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-3449',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-3450',
-                'https://errata.rockylinux.org/RLSA-2021:1024',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=2a40b7bc7b94dd7de897a74571e7024f0cf0d63b',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=2a40b7bc7b94dd7de897a74571e7024f0cf0d63b',
-                'https://github.com/alexcrichton/openssl-src-rs',
-                'https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA44845',
-                'https://kc.mcafee.com/corporate/index?page=content&id=SB10356',
-                'https://linux.oracle.com/cve/CVE-2021-3450.html',
-                'https://linux.oracle.com/errata/ELSA-2021-9151.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CCBFLLVQVILIVGZMBJL3IXZGKWQISYNP/',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/CCBFLLVQVILIVGZMBJL3IXZGKWQISYNP',
-                'https://mta.openssl.org/pipermail/openssl-announce/2021-March/000198.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-3450',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2021-0013',
-                'https://rustsec.org/advisories/RUSTSEC-2021-0056.html',
-                'https://security.FreeBSD.org/advisories/FreeBSD-SA-21:07.openssl.asc',
-                'https://security.gentoo.org/glsa/202103-03',
-                'https://security.netapp.com/advisory/ntap-20210326-0006',
-                'https://security.netapp.com/advisory/ntap-20210326-0006/',
-                'https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-openssl-2021-GHY28dJd',
-                'https://www.cve.org/CVERecord?id=CVE-2021-3450',
-                'https://www.openssl.org/news/secadv/20210325.txt',
-                'https://www.oracle.com//security-alerts/cpujul2021.html',
-                'https://www.oracle.com/security-alerts/cpuApr2021.html',
-                'https://www.oracle.com/security-alerts/cpuapr2022.html',
-                'https://www.oracle.com/security-alerts/cpujul2022.html',
-                'https://www.oracle.com/security-alerts/cpuoct2021.html',
-                'https://www.tenable.com/security/tns-2021-05',
-                'https://www.tenable.com/security/tns-2021-08',
-                'https://www.tenable.com/security/tns-2021-09'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: CA certificate check bypass with X509_V_FLAG_X509_STRICT'
-            },
-            {
-              'cve':  'CVE-2019-1551',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N'
-                },
-                'redhat': {
-                  'v3score':  '4.8',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-190'
-              ],
-              'description':   'There is an overflow bug in the x64_64 Montgomery squaring procedure used in exponentiation with 512-bit moduli. No EC algorithms are affected. Analysis suggests that attacks against 2-prime RSA1024, 3-prime RSA1536, and DSA1024 as a result of this defect would be very difficult to perform and are not believed likely. Attacks against DH512 are considered just feasible. However, for an attack the target would have to re-use the DH512 private key, which is not recommended anyway. Also applications directly using the low level API BN_mod_exp may be affected if they use BN_FLG_CONSTTIME. Fixed in OpenSSL 1.1.1e (Affected 1.1.1-1.1.1d). Fixed in OpenSSL 1.0.2u (Affected 1.0.2-1.0.2t).',
-              'diffID':        'sha256:30a0150d2171ea876ccf57ecd34d56a8938c4a6ebe34589b9c59509e33a56e9a',
-              'fixedVersions': [
-                '1.1.1d-r2'
-              ],
-              'installedVersion': '1.1.1d-r0',
-              'packageName':      'libssl1.1',
-              'purl':             'pkg:apk/alpine/libssl1.1@1.1.1d-r0?arch=armv7&distro=3.10.3',
-              'references':       [
-                'http://lists.opensuse.org/opensuse-security-announce/2020-01/msg00030.html',
-                'http://packetstormsecurity.com/files/155754/Slackware-Security-Advisory-openssl-Updates.html',
-                'https://access.redhat.com/security/cve/CVE-2019-1551',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=419102400a2811582a7a3d4a4e317d72e5ce0a8f',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=f1c5eea8a817075d31e43f5876993c6710238c98',
-                'https://github.com/openssl/openssl/pull/10575',
-                'https://linux.oracle.com/cve/CVE-2019-1551.html',
-                'https://linux.oracle.com/errata/ELSA-2020-4514.html',
-                'https://lists.debian.org/debian-lts-announce/2022/03/msg00023.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DDHOAATPWJCXRNFMJ2SASDBBNU5RJONY/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/EXDDAOWSAIEFQNBHWYE6PPYFV4QXGMCD/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/XVEP3LAK4JSPRXFO4QF4GG2IVXADV3SO/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2019-1551',
-                'https://seclists.org/bugtraq/2019/Dec/39',
-                'https://seclists.org/bugtraq/2019/Dec/46',
-                'https://security.gentoo.org/glsa/202004-10',
-                'https://security.netapp.com/advisory/ntap-20191210-0001/',
-                'https://ubuntu.com/security/notices/USN-4376-1',
-                'https://ubuntu.com/security/notices/USN-4504-1',
-                'https://usn.ubuntu.com/4376-1/',
-                'https://usn.ubuntu.com/4504-1/',
-                'https://www.cve.org/CVERecord?id=CVE-2019-1551',
-                'https://www.debian.org/security/2019/dsa-4594',
-                'https://www.debian.org/security/2021/dsa-4855',
-                'https://www.openssl.org/news/secadv/20191206.txt',
-                'https://www.oracle.com/security-alerts/cpuApr2021.html',
-                'https://www.oracle.com/security-alerts/cpujan2021.html',
-                'https://www.oracle.com/security-alerts/cpujul2020.html',
-                'https://www.tenable.com/security/tns-2019-09',
-                'https://www.tenable.com/security/tns-2020-03',
-                'https://www.tenable.com/security/tns-2020-11',
-                'https://www.tenable.com/security/tns-2021-10'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: Integer overflow in RSAZ modular exponentiation on x86_64'
-            },
-            {
-              'cve':  'CVE-2020-1971',
-              'cvss': {
-                'bitnami': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'nvd': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-476'
-              ],
-              'description':   "The X.509 GeneralName type is a generic type for representing different types of names. One of those name types is known as EDIPartyName. OpenSSL provides a function GENERAL_NAME_cmp which compares different instances of a GENERAL_NAME to see if they are equal or not. This function behaves incorrectly when both GENERAL_NAMEs contain an EDIPARTYNAME. A NULL pointer dereference and a crash may occur leading to a possible denial of service attack. OpenSSL itself uses the GENERAL_NAME_cmp function for two purposes: 1) Comparing CRL distribution point names between an available CRL and a CRL distribution point embedded in an X509 certificate 2) When verifying that a timestamp response token signer matches the timestamp authority name (exposed via the API functions TS_RESP_verify_response and TS_RESP_verify_token) If an attacker can control both items being compared then that attacker could trigger a crash. For example if the attacker can trick a client or server into checking a malicious certificate against a malicious CRL then this may occur. Note that some applications automatically download CRLs based on a URL embedded in a certificate. This checking happens prior to the signatures on the certificate and CRL being verified. OpenSSL's s_server, s_client and verify tools have support for the \"-crl_download\" option which implements automatic CRL downloading and this attack has been demonstrated to work against those tools. Note that an unrelated bug means that affected versions of OpenSSL cannot parse or construct correct encodings of EDIPARTYNAME. However it is possible to construct a malformed EDIPARTYNAME that OpenSSL's parser will accept and hence trigger this attack. All OpenSSL 1.1.1 and 1.0.2 versions are affected by this issue. Other OpenSSL releases are out of support and have not been checked. Fixed in OpenSSL 1.1.1i (Affected 1.1.1-1.1.1h). Fixed in OpenSSL 1.0.2x (Affected 1.0.2-1.0.2w).",
-              'diffID':        'sha256:30a0150d2171ea876ccf57ecd34d56a8938c4a6ebe34589b9c59509e33a56e9a',
-              'fixedVersions': [
-                '1.1.1i-r0'
-              ],
-              'installedVersion': '1.1.1d-r0',
-              'packageName':      'libssl1.1',
-              'purl':             'pkg:apk/alpine/libssl1.1@1.1.1d-r0?arch=armv7&distro=3.10.3',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2021/09/14/2',
-                'https://access.redhat.com/security/cve/CVE-2020-1971',
-                'https://cert-portal.siemens.com/productcert/pdf/ssa-389290.pdf',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=2154ab83e14ede338d2ede9bbe5cdfce5d5a6c9e',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=f960d81215ebf3f65e03d4d5d857fb9b666d6920',
-                'https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA44676',
-                'https://linux.oracle.com/cve/CVE-2020-1971.html',
-                'https://linux.oracle.com/errata/ELSA-2021-9150.html',
-                'https://lists.apache.org/thread.html/r63c6f2dd363d9b514d0a4bcf624580616a679898cc14c109a49b750c%40%3Cdev.tomcat.apache.org%3E',
-                'https://lists.apache.org/thread.html/rbb769f771711fb274e0a4acb1b5911c8aab544a6ac5e8c12d40c5143%40%3Ccommits.pulsar.apache.org%3E',
-                'https://lists.debian.org/debian-lts-announce/2020/12/msg00020.html',
-                'https://lists.debian.org/debian-lts-announce/2020/12/msg00021.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DGSI34Y5LQ5RYXN4M2I5ZQT65LFVDOUU/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PWPSSZNZOBJU2YR6Z4TGHXKYW3YP5QG7/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2020-1971',
-                'https://security.FreeBSD.org/advisories/FreeBSD-SA-20:33.openssl.asc',
-                'https://security.gentoo.org/glsa/202012-13',
-                'https://security.netapp.com/advisory/ntap-20201218-0005/',
-                'https://security.netapp.com/advisory/ntap-20210513-0002/',
-                'https://security.netapp.com/advisory/ntap-20240621-0006/',
-                'https://ubuntu.com/security/notices/USN-4662-1',
-                'https://ubuntu.com/security/notices/USN-4745-1',
-                'https://www.cve.org/CVERecord?id=CVE-2020-1971',
-                'https://www.debian.org/security/2020/dsa-4807',
-                'https://www.openssl.org/news/secadv/20201208.txt',
-                'https://www.oracle.com//security-alerts/cpujul2021.html',
-                'https://www.oracle.com/security-alerts/cpuApr2021.html',
-                'https://www.oracle.com/security-alerts/cpuapr2022.html',
-                'https://www.oracle.com/security-alerts/cpujan2021.html',
-                'https://www.oracle.com/security-alerts/cpuoct2021.html',
-                'https://www.tenable.com/security/tns-2020-11',
-                'https://www.tenable.com/security/tns-2021-09',
-                'https://www.tenable.com/security/tns-2021-10'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: EDIPARTYNAME NULL pointer de-reference'
-            },
-            {
-              'cve':  'CVE-2021-23841',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'nvd': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-476'
-              ],
-              'description':   'The OpenSSL public API function X509_issuer_and_serial_hash() attempts to create a unique hash value based on the issuer and serial number data contained within an X509 certificate. However it fails to correctly handle any errors that may occur while parsing the issuer field (which might occur if the issuer field is maliciously constructed). This may subsequently result in a NULL pointer deref and a crash leading to a potential denial of service attack. The function X509_issuer_and_serial_hash() is never directly called by OpenSSL itself so applications are only vulnerable if they use this function directly and they use it on certificates that may have been obtained from untrusted sources. OpenSSL versions 1.1.1i and below are affected by this issue. Users of these versions should upgrade to OpenSSL 1.1.1j. OpenSSL versions 1.0.2x and below are affected by this issue. However OpenSSL 1.0.2 is out of support and no longer receiving public updates. Premium support customers of OpenSSL 1.0.2 should upgrade to 1.0.2y. Other users should upgrade to 1.1.1j. Fixed in OpenSSL 1.1.1j (Affected 1.1.1-1.1.1i). Fixed in OpenSSL 1.0.2y (Affected 1.0.2-1.0.2x).',
-              'diffID':        'sha256:30a0150d2171ea876ccf57ecd34d56a8938c4a6ebe34589b9c59509e33a56e9a',
-              'fixedVersions': [
-                '1.1.1j-r0'
-              ],
-              'installedVersion': '1.1.1d-r0',
-              'packageName':      'libssl1.1',
-              'purl':             'pkg:apk/alpine/libssl1.1@1.1.1d-r0?arch=armv7&distro=3.10.3',
-              'references':       [
-                'http://seclists.org/fulldisclosure/2021/May/67',
-                'http://seclists.org/fulldisclosure/2021/May/68',
-                'http://seclists.org/fulldisclosure/2021/May/70',
-                'https://access.redhat.com/security/cve/CVE-2021-23841',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=1908036',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=1930310',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=1930324',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=1934534',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=1934600',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=1939637',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=1940085',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=1965362',
-                'https://cert-portal.siemens.com/productcert/pdf/ssa-637483.pdf',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-23840',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-23841',
-                'https://errata.rockylinux.org/RLSA-2021:4424',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=122a19ab48091c657f7cb1fb3af9fc07bd557bbf',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=8252ee4d90f3f2004d3d0aeeed003ad49c9a7807',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=122a19ab48091c657f7cb1fb3af9fc07bd557bbf',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=6a51b9e1d0cf0bf8515f7201b68fb0a3482b3dc1',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=8252ee4d90f3f2004d3d0aeeed003ad49c9a7807',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=9b1129239f3ebb1d1c98ce9ed41d5c9476c47cb2',
-                'https://github.com/alexcrichton/openssl-src-rs',
-                'https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA44846',
-                'https://linux.oracle.com/cve/CVE-2021-23841.html',
-                'https://linux.oracle.com/errata/ELSA-2021-9561.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-23841',
-                'https://rustsec.org/advisories/RUSTSEC-2021-0058',
-                'https://rustsec.org/advisories/RUSTSEC-2021-0058.html',
-                'https://security.gentoo.org/glsa/202103-03',
-                'https://security.netapp.com/advisory/ntap-20210219-0009',
-                'https://security.netapp.com/advisory/ntap-20210219-0009/',
-                'https://security.netapp.com/advisory/ntap-20210513-0002',
-                'https://security.netapp.com/advisory/ntap-20210513-0002/',
-                'https://security.netapp.com/advisory/ntap-20240621-0006/',
-                'https://support.apple.com/kb/HT212528',
-                'https://support.apple.com/kb/HT212529',
-                'https://support.apple.com/kb/HT212534',
-                'https://ubuntu.com/security/notices/USN-4738-1',
-                'https://ubuntu.com/security/notices/USN-4745-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-23841',
-                'https://www.debian.org/security/2021/dsa-4855',
-                'https://www.openssl.org/news/secadv/20210216.txt',
-                'https://www.oracle.com//security-alerts/cpujul2021.html',
-                'https://www.oracle.com/security-alerts/cpuApr2021.html',
-                'https://www.oracle.com/security-alerts/cpuapr2022.html',
-                'https://www.oracle.com/security-alerts/cpuoct2021.html',
-                'https://www.tenable.com/security/tns-2021-03',
-                'https://www.tenable.com/security/tns-2021-09'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: NULL pointer dereference in X509_issuer_and_serial_hash()'
-            },
-            {
-              'cve':  'CVE-2021-3449',
-              'cvss': {
-                'bitnami': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'ghsa': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'nvd': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-476'
-              ],
-              'description':   'An OpenSSL TLS server may crash if sent a maliciously crafted renegotiation ClientHello message from a client. If a TLSv1.2 renegotiation ClientHello omits the signature_algorithms extension (where it was present in the initial ClientHello), but includes a signature_algorithms_cert extension then a NULL pointer dereference will result, leading to a crash and a denial of service attack. A server is only vulnerable if it has TLSv1.2 and renegotiation enabled (which is the default configuration). OpenSSL TLS clients are not impacted by this issue. All OpenSSL 1.1.1 versions are affected by this issue. Users of these versions should upgrade to OpenSSL 1.1.1k. OpenSSL 1.0.2 is not impacted by this issue. Fixed in OpenSSL 1.1.1k (Affected 1.1.1-1.1.1j).',
-              'diffID':        'sha256:30a0150d2171ea876ccf57ecd34d56a8938c4a6ebe34589b9c59509e33a56e9a',
-              'fixedVersions': [
-                '1.1.1k-r0'
-              ],
-              'installedVersion': '1.1.1d-r0',
-              'packageName':      'libssl1.1',
-              'purl':             'pkg:apk/alpine/libssl1.1@1.1.1d-r0?arch=armv7&distro=3.10.3',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2021/03/27/1',
-                'http://www.openwall.com/lists/oss-security/2021/03/27/2',
-                'http://www.openwall.com/lists/oss-security/2021/03/28/3',
-                'http://www.openwall.com/lists/oss-security/2021/03/28/4',
-                'https://access.redhat.com/security/cve/CVE-2021-3449',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=1941547',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=1941554',
-                'https://cert-portal.siemens.com/productcert/pdf/ssa-389290.pdf',
-                'https://cert-portal.siemens.com/productcert/pdf/ssa-772220.pdf',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-3449',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-3450',
-                'https://errata.rockylinux.org/RLSA-2021:1024',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=fb9fa6b51defd48157eeb207f52181f735d96148',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=fb9fa6b51defd48157eeb207f52181f735d96148',
-                'https://github.com/alexcrichton/openssl-src-rs',
-                'https://github.com/nodejs/node/pull/38083',
-                'https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA44845',
-                'https://kc.mcafee.com/corporate/index?page=content&id=SB10356',
-                'https://linux.oracle.com/cve/CVE-2021-3449.html',
-                'https://linux.oracle.com/errata/ELSA-2021-9151.html',
-                'https://lists.debian.org/debian-lts-announce/2021/08/msg00029.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CCBFLLVQVILIVGZMBJL3IXZGKWQISYNP/',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/CCBFLLVQVILIVGZMBJL3IXZGKWQISYNP',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-3449',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2021-0013',
-                'https://rustsec.org/advisories/RUSTSEC-2021-0055',
-                'https://rustsec.org/advisories/RUSTSEC-2021-0055.html',
-                'https://security.FreeBSD.org/advisories/FreeBSD-SA-21:07.openssl.asc',
-                'https://security.gentoo.org/glsa/202103-03',
-                'https://security.netapp.com/advisory/ntap-20210326-0006',
-                'https://security.netapp.com/advisory/ntap-20210326-0006/',
-                'https://security.netapp.com/advisory/ntap-20210513-0002',
-                'https://security.netapp.com/advisory/ntap-20210513-0002/',
-                'https://security.netapp.com/advisory/ntap-20240621-0006/',
-                'https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-openssl-2021-GHY28dJd',
-                'https://ubuntu.com/security/notices/USN-4891-1',
-                'https://ubuntu.com/security/notices/USN-5038-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-3449',
-                'https://www.debian.org/security/2021/dsa-4875',
-                'https://www.openssl.org/news/secadv/20210325.txt',
-                'https://www.oracle.com//security-alerts/cpujul2021.html',
-                'https://www.oracle.com/security-alerts/cpuApr2021.html',
-                'https://www.oracle.com/security-alerts/cpuapr2022.html',
-                'https://www.oracle.com/security-alerts/cpujul2022.html',
-                'https://www.oracle.com/security-alerts/cpuoct2021.html',
-                'https://www.tenable.com/security/tns-2021-05',
-                'https://www.tenable.com/security/tns-2021-06',
-                'https://www.tenable.com/security/tns-2021-09',
-                'https://www.tenable.com/security/tns-2021-10'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: NULL pointer dereference in signature_algorithms processing'
-            },
-            {
-              'cve':  'CVE-2021-23839',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '3.7',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N'
-                },
-                'redhat': {
-                  'v3score':  '3.7',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-327'
-              ],
-              'description':   'OpenSSL 1.0.2 supports SSLv2. If a client attempts to negotiate SSLv2 with a server that is configured to support both SSLv2 and more recent SSL and TLS versions then a check is made for a version rollback attack when unpadding an RSA signature. Clients that support SSL or TLS versions greater than SSLv2 are supposed to use a special form of padding. A server that supports greater than SSLv2 is supposed to reject connection attempts from a client where this special form of padding is present, because this indicates that a version rollback has occurred (i.e. both client and server support greater than SSLv2, and yet this is the version that is being requested). The implementation of this padding check inverted the logic so that the connection attempt is accepted if the padding is present, and rejected if it is absent. This means that such as server will accept a connection if a version rollback attack has occurred. Further the server will erroneously reject a connection if a normal SSLv2 connection attempt is made. Only OpenSSL 1.0.2 servers from version 1.0.2s to 1.0.2x are affected by this issue. In order to be vulnerable a 1.0.2 server must: 1) have configured SSLv2 support at compile time (this is off by default), 2) have configured SSLv2 support at runtime (this is off by default), 3) have configured SSLv2 ciphersuites (these are not in the default ciphersuite list) OpenSSL 1.1.1 does not have SSLv2 support and therefore is not vulnerable to this issue. The underlying error is in the implementation of the RSA_padding_check_SSLv23() function. This also affects the RSA_SSLV23_PADDING padding mode used by various other functions. Although 1.1.1 does not support SSLv2 the RSA_padding_check_SSLv23() function still exists, as does the RSA_SSLV23_PADDING padding mode. Applications that directly call that function or use that padding mode will encounter this issue. However since there is no support for the SSLv2 protocol in 1.1.1 this is considered a bug and not a security issue in that version. OpenSSL 1.0.2 is out of support and no longer receiving public updates. Premium support customers of OpenSSL 1.0.2 should upgrade to 1.0.2y. Other users should upgrade to 1.1.1j. Fixed in OpenSSL 1.0.2y (Affected 1.0.2s-1.0.2x).',
-              'diffID':        'sha256:30a0150d2171ea876ccf57ecd34d56a8938c4a6ebe34589b9c59509e33a56e9a',
-              'fixedVersions': [
-                '1.1.1j-r0'
-              ],
-              'installedVersion': '1.1.1d-r0',
-              'packageName':      'libssl1.1',
-              'purl':             'pkg:apk/alpine/libssl1.1@1.1.1d-r0?arch=armv7&distro=3.10.3',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-23839',
-                'https://cert-portal.siemens.com/productcert/pdf/ssa-637483.pdf',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=30919ab80a478f2d81f2e9acdcca3fa4740cd547',
-                'https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA44846',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-23839',
-                'https://security.netapp.com/advisory/ntap-20210219-0009/',
-                'https://security.netapp.com/advisory/ntap-20240621-0006/',
-                'https://www.cve.org/CVERecord?id=CVE-2021-23839',
-                'https://www.openssl.org/news/secadv/20210216.txt',
-                'https://www.oracle.com//security-alerts/cpujul2021.html',
-                'https://www.oracle.com/security-alerts/cpuApr2021.html',
-                'https://www.oracle.com/security-alerts/cpuapr2022.html',
-                'https://www.oracle.com/security-alerts/cpuoct2021.html'
-              ],
-              'severity':   'LOW',
-              'suppressed': false,
-              'title':      'openssl: incorrect SSLv2 rollback protection'
-            },
-            {
-              'cve':  'CVE-2020-28928',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.5',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-787'
-              ],
-              'description':   'In musl libc through 1.2.1, wcsnrtombs mishandles particular combinations of destination buffer size and source character limit, as demonstrated by an invalid write access (buffer overflow).',
-              'diffID':        'sha256:30a0150d2171ea876ccf57ecd34d56a8938c4a6ebe34589b9c59509e33a56e9a',
-              'fixedVersions': [
-                '1.1.22-r4'
-              ],
-              'installedVersion': '1.1.22-r3',
-              'packageName':      'musl',
-              'purl':             'pkg:apk/alpine/musl@1.1.22-r3?arch=armv7&distro=3.10.3',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2020/11/20/4',
-                'https://lists.apache.org/thread.html/r2134abfe847bea7795f0e53756d10a47e6643f35ab8169df8b8a9eb1%40%3Cnotifications.apisix.apache.org%3E',
-                'https://lists.apache.org/thread.html/r90b60cf49348e515257b4950900c1bd3ab95a960cf2469d919c7264e%40%3Cnotifications.apisix.apache.org%3E',
-                'https://lists.apache.org/thread.html/ra63e8dc5137d952afc55dbbfa63be83304ecf842d1eab1ff3ebb29e2%40%3Cnotifications.apisix.apache.org%3E',
-                'https://lists.debian.org/debian-lts-announce/2020/11/msg00050.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LKQ3RVSMVZNZNO4D65W2CZZ4DMYFZN2Q/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UW27QVY7ERPTSGKS4KAWE5TU7EJWHKVQ/',
-                'https://musl.libc.org/releases.html',
-                'https://ubuntu.com/security/notices/USN-5990-1',
-                'https://www.cve.org/CVERecord?id=CVE-2020-28928',
-                'https://www.openwall.com/lists/oss-security/2020/11/20/4',
-                'https://www.oracle.com//security-alerts/cpujul2021.html',
-                'https://www.oracle.com/security-alerts/cpuoct2021.html'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'In musl libc through 1.2.1, wcsnrtombs mishandles particular combinati ...'
-            },
-            {
-              'cve':  'CVE-2020-28928',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.5',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-787'
-              ],
-              'description':   'In musl libc through 1.2.1, wcsnrtombs mishandles particular combinations of destination buffer size and source character limit, as demonstrated by an invalid write access (buffer overflow).',
-              'diffID':        'sha256:30a0150d2171ea876ccf57ecd34d56a8938c4a6ebe34589b9c59509e33a56e9a',
-              'fixedVersions': [
-                '1.1.22-r4'
-              ],
-              'installedVersion': '1.1.22-r3',
-              'packageName':      'musl-utils',
-              'purl':             'pkg:apk/alpine/musl-utils@1.1.22-r3?arch=armv7&distro=3.10.3',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2020/11/20/4',
-                'https://lists.apache.org/thread.html/r2134abfe847bea7795f0e53756d10a47e6643f35ab8169df8b8a9eb1%40%3Cnotifications.apisix.apache.org%3E',
-                'https://lists.apache.org/thread.html/r90b60cf49348e515257b4950900c1bd3ab95a960cf2469d919c7264e%40%3Cnotifications.apisix.apache.org%3E',
-                'https://lists.apache.org/thread.html/ra63e8dc5137d952afc55dbbfa63be83304ecf842d1eab1ff3ebb29e2%40%3Cnotifications.apisix.apache.org%3E',
-                'https://lists.debian.org/debian-lts-announce/2020/11/msg00050.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LKQ3RVSMVZNZNO4D65W2CZZ4DMYFZN2Q/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UW27QVY7ERPTSGKS4KAWE5TU7EJWHKVQ/',
-                'https://musl.libc.org/releases.html',
-                'https://ubuntu.com/security/notices/USN-5990-1',
-                'https://www.cve.org/CVERecord?id=CVE-2020-28928',
-                'https://www.openwall.com/lists/oss-security/2020/11/20/4',
-                'https://www.oracle.com//security-alerts/cpujul2021.html',
-                'https://www.oracle.com/security-alerts/cpuoct2021.html'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'In musl libc through 1.2.1, wcsnrtombs mishandles particular combinati ...'
-            },
-            {
-              'cve':  'CVE-2021-28831',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-755'
-              ],
-              'description':   'decompress_gunzip.c in BusyBox through 1.32.1 mishandles the error bit on the huft_build result pointer, with a resultant invalid free or segmentation fault, via malformed gzip data.',
-              'diffID':        'sha256:30a0150d2171ea876ccf57ecd34d56a8938c4a6ebe34589b9c59509e33a56e9a',
-              'fixedVersions': [
-                '1.30.1-r5'
-              ],
-              'installedVersion': '1.30.1-r2',
-              'packageName':      'ssl_client',
-              'purl':             'pkg:apk/alpine/ssl_client@1.30.1-r2?arch=armv7&distro=3.10.3',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-28831',
-                'https://git.busybox.net/busybox/commit/?id=f25d254dfd4243698c31a4f3153d4ac72aa9e9bd',
-                'https://lists.debian.org/debian-lts-announce/2021/04/msg00001.html',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/3UDQGJRECXFS5EZVDH2OI45FMO436AC4/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/Z7ZIFKPRR32ZYA3WAA2NXFA3QHHOU6FJ/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZASBW7QRRLY5V2R44MQ4QQM4CZIDHM2U/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-28831',
-                'https://security.gentoo.org/glsa/202105-09',
-                'https://security.netapp.com/advisory/ntap-20250509-0005/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://ubuntu.com/security/notices/USN-5179-2',
-                'https://ubuntu.com/security/notices/USN-6335-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-28831'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: invalid free or segmentation fault via malformed gzip data'
-            }
-          ]
-        }
-      ],
-      'summary': {
-        'critical':   1,
-        'high':       9,
-        'low':        2,
-        'medium':     10,
-        'suppressed': 0,
-        'unknown':    0
-      }
-    }
-  },
-  {
-    'id':    'default/b73e6ef50a60ef02e9edf60b4d345bf475f4a87f8f2a7854a6b91157cbd6ef62',
-    'type':  'storage.sbomscanner.kubewarden.io.vulnerabilityreport',
-    'links': {
-      'patch':  'https://localhost:8005/v1/storage.sbomscanner.kubewarden.io.vulnerabilityreports/default/b73e6ef50a60ef02e9edf60b4d345bf475f4a87f8f2a7854a6b91157cbd6ef62',
-      'remove': 'https://localhost:8005/v1/storage.sbomscanner.kubewarden.io.vulnerabilityreports/default/b73e6ef50a60ef02e9edf60b4d345bf475f4a87f8f2a7854a6b91157cbd6ef62',
-      'self':   'https://localhost:8005/v1/storage.sbomscanner.kubewarden.io.vulnerabilityreports/default/b73e6ef50a60ef02e9edf60b4d345bf475f4a87f8f2a7854a6b91157cbd6ef62',
-      'update': 'https://localhost:8005/v1/storage.sbomscanner.kubewarden.io.vulnerabilityreports/default/b73e6ef50a60ef02e9edf60b4d345bf475f4a87f8f2a7854a6b91157cbd6ef62',
-      'view':   'https://localhost:8005/apis/storage.sbomscanner.kubewarden.io/v1alpha1/namespaces/default/vulnerabilityreports/b73e6ef50a60ef02e9edf60b4d345bf475f4a87f8f2a7854a6b91157cbd6ef62'
-    },
-    'apiVersion':    'storage.sbomscanner.kubewarden.io/v1alpha1',
-    'imageMetadata': {
-      'digest':      'sha256:881d343d0372b8c3b7c0cadd786a51be4a4d778f662e9a096ec30135b86a052f',
-      'platform':    'linux/amd64',
-      'registry':    'demo-02',
-      'registryURI': 'ghcr.io',
-      'repository':  'linuxcontainers/alpine',
-      'tag':         '3.14.7'
-    },
-    'kind':     'VulnerabilityReport',
-    'metadata': {
-      'creationTimestamp': '2026-01-09T22:46:21Z',
-      'fields':            [
-        'b73e6ef50a60ef02e9edf60b4d345bf475f4a87f8f2a7854a6b91157cbd6ef62',
-        'ghcr.io/linuxcontainers/alpine:3.14.7',
-        'linux/amd64',
-        '13 (0 suppressed)'
-      ],
-      'labels': {
-        'app.kubernetes.io/managed-by':          'sbomscanner',
-        'app.kubernetes.io/part-of':             'sbomscanner',
-        'sbomscanner.kubewarden.io/scanjob-uid': '42184d01-4b15-466f-98aa-e802d1b6b6b8'
-      },
-      'name':            'b73e6ef50a60ef02e9edf60b4d345bf475f4a87f8f2a7854a6b91157cbd6ef62',
-      'namespace':       'default',
-      'ownerReferences': [
-        {
-          'apiVersion':         'storage.sbomscanner.kubewarden.io/v1alpha1',
-          'blockOwnerDeletion': true,
-          'controller':         true,
-          'kind':               'SBOM',
-          'name':               'b73e6ef50a60ef02e9edf60b4d345bf475f4a87f8f2a7854a6b91157cbd6ef62',
-          'uid':                '8bbf59e1-d00d-4430-8716-f6d98f7f43ee'
-        }
-      ],
-      'relationships': [
-        {
-          'fromId':   'default/b73e6ef50a60ef02e9edf60b4d345bf475f4a87f8f2a7854a6b91157cbd6ef62',
-          'fromType': 'storage.sbomscanner.kubewarden.io.sbom',
-          'rel':      'owner',
-          'state':    'active',
-          'message':  'Resource is current'
-        }
-      ],
-      'resourceVersion': '4',
-      'state':           {
-        'error':         false,
-        'message':       'Resource is current',
-        'name':          'active',
-        'transitioning': false
-      },
-      'uid': '989d1987-26f8-42c0-a8f5-2ede852dbd66'
-    },
-    'report': {
-      'results': [
-        {
-          'class':           'os-pkgs',
-          'target':          '/var/run/worker/trivy.sbom.3440331662.json (alpine 3.14.7)',
-          'type':            'alpine',
-          'vulnerabilities': [
-            {
-              'cve':  'CVE-2022-4450',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'nvd': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-415'
-              ],
-              'description':   'The function PEM_read_bio_ex() reads a PEM file from a BIO and parses and\ndecodes the "name" (e.g. "CERTIFICATE"), any header data and the payload data.\nIf the function succeeds then the "name_out", "header" and "data" arguments are\npopulated with pointers to buffers containing the relevant decoded data. The\ncaller is responsible for freeing those buffers. It is possible to construct a\nPEM file that results in 0 bytes of payload data. In this case PEM_read_bio_ex()\nwill return a failure code but will populate the header argument with a pointer\nto a buffer that has already been freed. If the caller also frees this buffer\nthen a double free will occur. This will most likely lead to a crash. This\ncould be exploited by an attacker who has the ability to supply malicious PEM\nfiles for parsing to achieve a denial of service attack.\n\nThe functions PEM_read_bio() and PEM_read() are simple wrappers around\nPEM_read_bio_ex() and therefore these functions are also directly affected.\n\nThese functions are also called indirectly by a number of other OpenSSL\nfunctions including PEM_X509_INFO_read_bio_ex() and\nSSL_CTX_use_serverinfo_file() which are also vulnerable. Some OpenSSL internal\nuses of these functions are not vulnerable because the caller does not free the\nheader argument if PEM_read_bio_ex() returns a failure code. These locations\ninclude the PEM_read_bio_TYPE() functions as well as the decoders introduced in\nOpenSSL 3.0.\n\nThe OpenSSL asn1parse command line application is also impacted by this issue.',
-              'diffID':        'sha256:713e7675e2c1e8b5b484c7032e21ca148e1fb18dad74f61be1338b8671ed2aef',
-              'fixedVersions': [
-                '1.1.1t-r0'
-              ],
-              'installedVersion': '1.1.1q-r0',
-              'packageName':      'libcrypto1.1',
-              'purl':             'pkg:apk/alpine/libcrypto1.1@1.1.1q-r0?arch=x86_64&distro=3.14.7',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2023:2165',
-                'https://access.redhat.com/security/cve/CVE-2022-4450',
-                'https://bugzilla.redhat.com/1960321',
-                'https://bugzilla.redhat.com/2164440',
-                'https://bugzilla.redhat.com/2164487',
-                'https://bugzilla.redhat.com/2164492',
-                'https://bugzilla.redhat.com/2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144000',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144003',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144006',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144008',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144010',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144012',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144015',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144017',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144019',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2145170',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2158412',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164440',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164487',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164488',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164492',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164497',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164499',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164500',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4203',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4304',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4450',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0215',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0216',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0217',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0286',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0401',
-                'https://errata.almalinux.org/9/ALSA-2023-2165.html',
-                'https://errata.rockylinux.org/RLSA-2023:0946',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=63bcf189be73a9cc1264059bed6f57974be74a83',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=bbcf509bd046b34cca19c766bbddc31683d0858b',
-                'https://linux.oracle.com/cve/CVE-2022-4450.html',
-                'https://linux.oracle.com/errata/ELSA-2023-32791.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2022-4450',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0003',
-                'https://rustsec.org/advisories/RUSTSEC-2023-0010.html',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://ubuntu.com/security/notices/USN-5844-1',
-                'https://ubuntu.com/security/notices/USN-6564-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2022-4450',
-                'https://www.openssl.org/news/secadv/20230207.txt'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: double free after calling PEM_read_bio_ex'
-            },
-            {
-              'cve':  'CVE-2023-0215',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'nvd': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   'The public API function BIO_new_NDEF is a helper function used for streaming\nASN.1 data via a BIO. It is primarily used internally to OpenSSL to support the\nSMIME, CMS and PKCS7 streaming capabilities, but may also be called directly by\nend user applications.\n\nThe function receives a BIO from the caller, prepends a new BIO_f_asn1 filter\nBIO onto the front of it to form a BIO chain, and then returns the new head of\nthe BIO chain to the caller. Under certain conditions, for example if a CMS\nrecipient public key is invalid, the new filter BIO is freed and the function\nreturns a NULL result indicating a failure. However, in this case, the BIO chain\nis not properly cleaned up and the BIO passed by the caller still retains\ninternal pointers to the previously freed filter BIO. If the caller then goes on\nto call BIO_pop() on the BIO then a use-after-free will occur. This will most\nlikely result in a crash.\n\n\n\nThis scenario occurs directly in the internal function B64_write_ASN1() which\nmay cause BIO_new_NDEF() to be called and will subsequently call BIO_pop() on\nthe BIO. This internal function is in turn called by the public API functions\nPEM_write_bio_ASN1_stream, PEM_write_bio_CMS_stream, PEM_write_bio_PKCS7_stream,\nSMIME_write_ASN1, SMIME_write_CMS and SMIME_write_PKCS7.\n\nOther public API functions that may be impacted by this include\ni2d_ASN1_bio_stream, BIO_new_CMS, BIO_new_PKCS7, i2d_CMS_bio_stream and\ni2d_PKCS7_bio_stream.\n\nThe OpenSSL cms and smime command line applications are similarly affected.',
-              'diffID':        'sha256:713e7675e2c1e8b5b484c7032e21ca148e1fb18dad74f61be1338b8671ed2aef',
-              'fixedVersions': [
-                '1.1.1t-r0'
-              ],
-              'installedVersion': '1.1.1q-r0',
-              'packageName':      'libcrypto1.1',
-              'purl':             'pkg:apk/alpine/libcrypto1.1@1.1.1q-r0?arch=x86_64&distro=3.14.7',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2023:2165',
-                'https://access.redhat.com/security/cve/CVE-2023-0215',
-                'https://bugzilla.redhat.com/1960321',
-                'https://bugzilla.redhat.com/2164440',
-                'https://bugzilla.redhat.com/2164487',
-                'https://bugzilla.redhat.com/2164492',
-                'https://bugzilla.redhat.com/2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144000',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144003',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144006',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144008',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144010',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144012',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144015',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144017',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144019',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2145170',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2158412',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164440',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164487',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164488',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164492',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164497',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164499',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164500',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4203',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4304',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4450',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0215',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0216',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0217',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0286',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0401',
-                'https://errata.almalinux.org/9/ALSA-2023-2165.html',
-                'https://errata.rockylinux.org/RLSA-2023:0946',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=8818064ce3c3c0f1b740a5aaba2a987e75bfbafd',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=9816136fe31d92ace4037d5da5257f763aeeb4eb',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=c3829dd8825c654652201e16f8a0a0c46ee3f344',
-                'https://linux.oracle.com/cve/CVE-2023-0215.html',
-                'https://linux.oracle.com/errata/ELSA-2023-32791.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-0215',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0003',
-                'https://rustsec.org/advisories/RUSTSEC-2023-0009.html',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://security.netapp.com/advisory/ntap-20230427-0007',
-                'https://security.netapp.com/advisory/ntap-20230427-0007/',
-                'https://security.netapp.com/advisory/ntap-20230427-0009',
-                'https://security.netapp.com/advisory/ntap-20230427-0009/',
-                'https://security.netapp.com/advisory/ntap-20240621-0006',
-                'https://security.netapp.com/advisory/ntap-20240621-0006/',
-                'https://ubuntu.com/security/notices/USN-5844-1',
-                'https://ubuntu.com/security/notices/USN-5845-1',
-                'https://ubuntu.com/security/notices/USN-5845-2',
-                'https://ubuntu.com/security/notices/USN-6564-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-0215',
-                'https://www.openssl.org/news/secadv/20230207.txt'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: use-after-free following BIO_new_NDEF'
-            },
-            {
-              'cve':  'CVE-2023-0286',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '7.4',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H'
-                },
-                'nvd': {
-                  'v3score':  '7.4',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.4',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-843'
-              ],
-              'description':   'There is a type confusion vulnerability relating to X.400 address processing\ninside an X.509 GeneralName. X.400 addresses were parsed as an ASN1_STRING but\nthe public structure definition for GENERAL_NAME incorrectly specified the type\nof the x400Address field as ASN1_TYPE. This field is subsequently interpreted by\nthe OpenSSL function GENERAL_NAME_cmp as an ASN1_TYPE rather than an\nASN1_STRING.\n\nWhen CRL checking is enabled (i.e. the application sets the\nX509_V_FLAG_CRL_CHECK flag), this vulnerability may allow an attacker to pass\narbitrary pointers to a memcmp call, enabling them to read memory contents or\nenact a denial of service. In most cases, the attack requires the attacker to\nprovide both the certificate chain and CRL, neither of which need to have a\nvalid signature. If the attacker only controls one of these inputs, the other\ninput must already contain an X.400 address as a CRL distribution point, which\nis uncommon. As such, this vulnerability is most likely to only affect\napplications which have implemented their own functionality for retrieving CRLs\nover a network.',
-              'diffID':        'sha256:713e7675e2c1e8b5b484c7032e21ca148e1fb18dad74f61be1338b8671ed2aef',
-              'fixedVersions': [
-                '1.1.1t-r0'
-              ],
-              'installedVersion': '1.1.1q-r0',
-              'packageName':      'libcrypto1.1',
-              'purl':             'pkg:apk/alpine/libcrypto1.1@1.1.1q-r0?arch=x86_64&distro=3.14.7',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2025:7937',
-                'https://access.redhat.com/security/cve/CVE-2023-0286',
-                'https://access.redhat.com/security/cve/cve-2023-0286',
-                'https://bugzilla.redhat.com/2164440',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144000',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144003',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144006',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144008',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144010',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144012',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144015',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144017',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144019',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2145170',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2158412',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164440',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164487',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164488',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164492',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164497',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164499',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164500',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4203',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4304',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4450',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0215',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0216',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0217',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0286',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0401',
-                'https://errata.almalinux.org/9/ALSA-2025-7937.html',
-                'https://errata.rockylinux.org/RLSA-2023:0946',
-                'https://ftp.openbsd.org/pub/OpenBSD/LibreSSL/libressl-3.6.2-relnotes.txt',
-                'https://ftp.openbsd.org/pub/OpenBSD/patches/7.2/common/018_x509.patch.sig',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=2c6c9d439b484e1ba9830d8454a34fa4f80fdfe9',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=2f7530077e0ef79d98718138716bc51ca0cad658',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=fd2af07dc083a350c959147097003a14a5e8ac4d',
-                'https://github.com/pyca/cryptography',
-                'https://github.com/pyca/cryptography/security/advisories/GHSA-x4qr-2fvf-3mr5',
-                'https://linux.oracle.com/cve/CVE-2023-0286.html',
-                'https://linux.oracle.com/errata/ELSA-2025-7937.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-0286',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0003',
-                'https://rustsec.org/advisories/RUSTSEC-2023-0006.html',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://ubuntu.com/security/notices/USN-5844-1',
-                'https://ubuntu.com/security/notices/USN-5845-1',
-                'https://ubuntu.com/security/notices/USN-5845-2',
-                'https://ubuntu.com/security/notices/USN-6564-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-0286',
-                'https://www.openssl.org/news/secadv/20230207.txt'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: X.400 address type confusion in X.509 GeneralName'
-            },
-            {
-              'cve':  'CVE-2023-0464',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-295'
-              ],
-              'description':   "A security vulnerability has been identified in all supported versions\n\nof OpenSSL related to the verification of X.509 certificate chains\nthat include policy constraints.  Attackers may be able to exploit this\nvulnerability by creating a malicious certificate chain that triggers\nexponential use of computational resources, leading to a denial-of-service\n(DoS) attack on affected systems.\n\nPolicy processing is disabled by default but can be enabled by passing\nthe `-policy' argument to the command line utilities or by calling the\n`X509_VERIFY_PARAM_set1_policies()' function.",
-              'diffID':        'sha256:713e7675e2c1e8b5b484c7032e21ca148e1fb18dad74f61be1338b8671ed2aef',
-              'fixedVersions': [
-                '1.1.1t-r1'
-              ],
-              'installedVersion': '1.1.1q-r0',
-              'packageName':      'libcrypto1.1',
-              'purl':             'pkg:apk/alpine/libcrypto1.1@1.1.1q-r0?arch=x86_64&distro=3.14.7',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2023:3722',
-                'https://access.redhat.com/security/cve/CVE-2023-0464',
-                'https://bugzilla.redhat.com/2181082',
-                'https://bugzilla.redhat.com/2182561',
-                'https://bugzilla.redhat.com/2182565',
-                'https://bugzilla.redhat.com/2188461',
-                'https://bugzilla.redhat.com/2207947',
-                'https://errata.almalinux.org/9/ALSA-2023-3722.html',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=2017771e2db3e2b96f89bbe8766c3209f6a99545',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=2dcd4f1e3115f38cefa43e3efbe9b801c27e642e',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=879f7080d7e141f415c79eaa3a8ac4a3dad0348b',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=959c59c7a0164117e7f8366466a32bb1f8d77ff1',
-                'https://linux.oracle.com/cve/CVE-2023-0464.html',
-                'https://linux.oracle.com/errata/ELSA-2023-3722.html',
-                'https://lists.debian.org/debian-lts-announce/2023/06/msg00011.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-0464',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://security.netapp.com/advisory/ntap-20230406-0006/',
-                'https://security.netapp.com/advisory/ntap-20240621-0006/',
-                'https://ubuntu.com/security/notices/USN-6039-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.couchbase.com/alerts/',
-                'https://www.cve.org/CVERecord?id=CVE-2023-0464',
-                'https://www.debian.org/security/2023/dsa-5417',
-                'https://www.openssl.org/news/secadv/20230322.txt'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: Denial of service by excessive resource usage in verifying X509 policy constraints'
-            },
-            {
-              'cve':  'CVE-2022-4304',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N'
-                },
-                'nvd': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N'
-                },
-                'redhat': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-203'
-              ],
-              'description':   'A timing based side channel exists in the OpenSSL RSA Decryption implementation\nwhich could be sufficient to recover a plaintext across a network in a\nBleichenbacher style attack. To achieve a successful decryption an attacker\nwould have to be able to send a very large number of trial messages for\ndecryption. The vulnerability affects all RSA padding modes: PKCS#1 v1.5,\nRSA-OEAP and RSASVE.\n\nFor example, in a TLS connection, RSA is commonly used by a client to send an\nencrypted pre-master secret to the server. An attacker that had observed a\ngenuine connection between a client and a server could use this flaw to send\ntrial messages to the server and record the time taken to process them. After a\nsufficiently large number of messages the attacker could recover the pre-master\nsecret used for the original connection and thus be able to decrypt the\napplication data sent over that connection.',
-              'diffID':        'sha256:713e7675e2c1e8b5b484c7032e21ca148e1fb18dad74f61be1338b8671ed2aef',
-              'fixedVersions': [
-                '1.1.1t-r0'
-              ],
-              'installedVersion': '1.1.1q-r0',
-              'packageName':      'libcrypto1.1',
-              'purl':             'pkg:apk/alpine/libcrypto1.1@1.1.1q-r0?arch=x86_64&distro=3.14.7',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2023:2165',
-                'https://access.redhat.com/security/cve/CVE-2022-4304',
-                'https://bugzilla.redhat.com/1960321',
-                'https://bugzilla.redhat.com/2164440',
-                'https://bugzilla.redhat.com/2164487',
-                'https://bugzilla.redhat.com/2164492',
-                'https://bugzilla.redhat.com/2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144000',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144003',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144006',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144008',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144010',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144012',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144015',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144017',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144019',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2145170',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2158412',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164440',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164487',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164488',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164492',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164497',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164499',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164500',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4203',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4304',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4450',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0215',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0216',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0217',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0286',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0401',
-                'https://errata.almalinux.org/9/ALSA-2023-2165.html',
-                'https://errata.rockylinux.org/RLSA-2023:0946',
-                'https://linux.oracle.com/cve/CVE-2022-4304.html',
-                'https://linux.oracle.com/errata/ELSA-2023-32791.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2022-4304',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0003',
-                'https://rustsec.org/advisories/RUSTSEC-2023-0007.html',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://ubuntu.com/security/notices/USN-5844-1',
-                'https://ubuntu.com/security/notices/USN-6564-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2022-4304',
-                'https://www.openssl.org/news/secadv/20230207.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: timing attack in RSA Decryption implementation'
-            },
-            {
-              'cve':  'CVE-2023-0465',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N'
-                },
-                'redhat': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-295'
-              ],
-              'description':   "Applications that use a non-default option when verifying certificates may be\nvulnerable to an attack from a malicious CA to circumvent certain checks.\n\nInvalid certificate policies in leaf certificates are silently ignored by\nOpenSSL and other certificate policy checks are skipped for that certificate.\nA malicious CA could use this to deliberately assert invalid certificate policies\nin order to circumvent policy checking on the certificate altogether.\n\nPolicy processing is disabled by default but can be enabled by passing\nthe `-policy' argument to the command line utilities or by calling the\n`X509_VERIFY_PARAM_set1_policies()' function.",
-              'diffID':        'sha256:713e7675e2c1e8b5b484c7032e21ca148e1fb18dad74f61be1338b8671ed2aef',
-              'fixedVersions': [
-                '1.1.1t-r2'
-              ],
-              'installedVersion': '1.1.1q-r0',
-              'packageName':      'libcrypto1.1',
-              'purl':             'pkg:apk/alpine/libcrypto1.1@1.1.1q-r0?arch=x86_64&distro=3.14.7',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2023:3722',
-                'https://access.redhat.com/security/cve/CVE-2023-0465',
-                'https://bugzilla.redhat.com/2181082',
-                'https://bugzilla.redhat.com/2182561',
-                'https://bugzilla.redhat.com/2182565',
-                'https://bugzilla.redhat.com/2188461',
-                'https://bugzilla.redhat.com/2207947',
-                'https://errata.almalinux.org/9/ALSA-2023-3722.html',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=10325176f3d3e98c6e2b3bf5ab1e3b334de6947a',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=1dd43e0709fece299b15208f36cc7c76209ba0bb',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=b013765abfa80036dc779dd0e50602c57bb3bf95',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=facfb1ab745646e97a1920977ae4a9965ea61d5c',
-                'https://linux.oracle.com/cve/CVE-2023-0465.html',
-                'https://linux.oracle.com/errata/ELSA-2023-3722.html',
-                'https://lists.debian.org/debian-lts-announce/2023/06/msg00011.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-0465',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://security.netapp.com/advisory/ntap-20230414-0001/',
-                'https://ubuntu.com/security/notices/USN-6039-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-0465',
-                'https://www.debian.org/security/2023/dsa-5417',
-                'https://www.openssl.org/news/secadv/20230328.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: Invalid certificate policies in leaf certificates are silently ignored'
-            },
-            {
-              'cve':  'CVE-2022-4450',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'nvd': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-415'
-              ],
-              'description':   'The function PEM_read_bio_ex() reads a PEM file from a BIO and parses and\ndecodes the "name" (e.g. "CERTIFICATE"), any header data and the payload data.\nIf the function succeeds then the "name_out", "header" and "data" arguments are\npopulated with pointers to buffers containing the relevant decoded data. The\ncaller is responsible for freeing those buffers. It is possible to construct a\nPEM file that results in 0 bytes of payload data. In this case PEM_read_bio_ex()\nwill return a failure code but will populate the header argument with a pointer\nto a buffer that has already been freed. If the caller also frees this buffer\nthen a double free will occur. This will most likely lead to a crash. This\ncould be exploited by an attacker who has the ability to supply malicious PEM\nfiles for parsing to achieve a denial of service attack.\n\nThe functions PEM_read_bio() and PEM_read() are simple wrappers around\nPEM_read_bio_ex() and therefore these functions are also directly affected.\n\nThese functions are also called indirectly by a number of other OpenSSL\nfunctions including PEM_X509_INFO_read_bio_ex() and\nSSL_CTX_use_serverinfo_file() which are also vulnerable. Some OpenSSL internal\nuses of these functions are not vulnerable because the caller does not free the\nheader argument if PEM_read_bio_ex() returns a failure code. These locations\ninclude the PEM_read_bio_TYPE() functions as well as the decoders introduced in\nOpenSSL 3.0.\n\nThe OpenSSL asn1parse command line application is also impacted by this issue.',
-              'diffID':        'sha256:713e7675e2c1e8b5b484c7032e21ca148e1fb18dad74f61be1338b8671ed2aef',
-              'fixedVersions': [
-                '1.1.1t-r0'
-              ],
-              'installedVersion': '1.1.1q-r0',
-              'packageName':      'libssl1.1',
-              'purl':             'pkg:apk/alpine/libssl1.1@1.1.1q-r0?arch=x86_64&distro=3.14.7',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2023:2165',
-                'https://access.redhat.com/security/cve/CVE-2022-4450',
-                'https://bugzilla.redhat.com/1960321',
-                'https://bugzilla.redhat.com/2164440',
-                'https://bugzilla.redhat.com/2164487',
-                'https://bugzilla.redhat.com/2164492',
-                'https://bugzilla.redhat.com/2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144000',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144003',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144006',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144008',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144010',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144012',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144015',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144017',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144019',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2145170',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2158412',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164440',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164487',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164488',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164492',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164497',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164499',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164500',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4203',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4304',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4450',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0215',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0216',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0217',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0286',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0401',
-                'https://errata.almalinux.org/9/ALSA-2023-2165.html',
-                'https://errata.rockylinux.org/RLSA-2023:0946',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=63bcf189be73a9cc1264059bed6f57974be74a83',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=bbcf509bd046b34cca19c766bbddc31683d0858b',
-                'https://linux.oracle.com/cve/CVE-2022-4450.html',
-                'https://linux.oracle.com/errata/ELSA-2023-32791.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2022-4450',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0003',
-                'https://rustsec.org/advisories/RUSTSEC-2023-0010.html',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://ubuntu.com/security/notices/USN-5844-1',
-                'https://ubuntu.com/security/notices/USN-6564-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2022-4450',
-                'https://www.openssl.org/news/secadv/20230207.txt'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: double free after calling PEM_read_bio_ex'
-            },
-            {
-              'cve':  'CVE-2023-0215',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'nvd': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   'The public API function BIO_new_NDEF is a helper function used for streaming\nASN.1 data via a BIO. It is primarily used internally to OpenSSL to support the\nSMIME, CMS and PKCS7 streaming capabilities, but may also be called directly by\nend user applications.\n\nThe function receives a BIO from the caller, prepends a new BIO_f_asn1 filter\nBIO onto the front of it to form a BIO chain, and then returns the new head of\nthe BIO chain to the caller. Under certain conditions, for example if a CMS\nrecipient public key is invalid, the new filter BIO is freed and the function\nreturns a NULL result indicating a failure. However, in this case, the BIO chain\nis not properly cleaned up and the BIO passed by the caller still retains\ninternal pointers to the previously freed filter BIO. If the caller then goes on\nto call BIO_pop() on the BIO then a use-after-free will occur. This will most\nlikely result in a crash.\n\n\n\nThis scenario occurs directly in the internal function B64_write_ASN1() which\nmay cause BIO_new_NDEF() to be called and will subsequently call BIO_pop() on\nthe BIO. This internal function is in turn called by the public API functions\nPEM_write_bio_ASN1_stream, PEM_write_bio_CMS_stream, PEM_write_bio_PKCS7_stream,\nSMIME_write_ASN1, SMIME_write_CMS and SMIME_write_PKCS7.\n\nOther public API functions that may be impacted by this include\ni2d_ASN1_bio_stream, BIO_new_CMS, BIO_new_PKCS7, i2d_CMS_bio_stream and\ni2d_PKCS7_bio_stream.\n\nThe OpenSSL cms and smime command line applications are similarly affected.',
-              'diffID':        'sha256:713e7675e2c1e8b5b484c7032e21ca148e1fb18dad74f61be1338b8671ed2aef',
-              'fixedVersions': [
-                '1.1.1t-r0'
-              ],
-              'installedVersion': '1.1.1q-r0',
-              'packageName':      'libssl1.1',
-              'purl':             'pkg:apk/alpine/libssl1.1@1.1.1q-r0?arch=x86_64&distro=3.14.7',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2023:2165',
-                'https://access.redhat.com/security/cve/CVE-2023-0215',
-                'https://bugzilla.redhat.com/1960321',
-                'https://bugzilla.redhat.com/2164440',
-                'https://bugzilla.redhat.com/2164487',
-                'https://bugzilla.redhat.com/2164492',
-                'https://bugzilla.redhat.com/2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144000',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144003',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144006',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144008',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144010',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144012',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144015',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144017',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144019',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2145170',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2158412',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164440',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164487',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164488',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164492',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164497',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164499',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164500',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4203',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4304',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4450',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0215',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0216',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0217',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0286',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0401',
-                'https://errata.almalinux.org/9/ALSA-2023-2165.html',
-                'https://errata.rockylinux.org/RLSA-2023:0946',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=8818064ce3c3c0f1b740a5aaba2a987e75bfbafd',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=9816136fe31d92ace4037d5da5257f763aeeb4eb',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=c3829dd8825c654652201e16f8a0a0c46ee3f344',
-                'https://linux.oracle.com/cve/CVE-2023-0215.html',
-                'https://linux.oracle.com/errata/ELSA-2023-32791.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-0215',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0003',
-                'https://rustsec.org/advisories/RUSTSEC-2023-0009.html',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://security.netapp.com/advisory/ntap-20230427-0007',
-                'https://security.netapp.com/advisory/ntap-20230427-0007/',
-                'https://security.netapp.com/advisory/ntap-20230427-0009',
-                'https://security.netapp.com/advisory/ntap-20230427-0009/',
-                'https://security.netapp.com/advisory/ntap-20240621-0006',
-                'https://security.netapp.com/advisory/ntap-20240621-0006/',
-                'https://ubuntu.com/security/notices/USN-5844-1',
-                'https://ubuntu.com/security/notices/USN-5845-1',
-                'https://ubuntu.com/security/notices/USN-5845-2',
-                'https://ubuntu.com/security/notices/USN-6564-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-0215',
-                'https://www.openssl.org/news/secadv/20230207.txt'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: use-after-free following BIO_new_NDEF'
-            },
-            {
-              'cve':  'CVE-2023-0286',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '7.4',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H'
-                },
-                'nvd': {
-                  'v3score':  '7.4',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.4',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-843'
-              ],
-              'description':   'There is a type confusion vulnerability relating to X.400 address processing\ninside an X.509 GeneralName. X.400 addresses were parsed as an ASN1_STRING but\nthe public structure definition for GENERAL_NAME incorrectly specified the type\nof the x400Address field as ASN1_TYPE. This field is subsequently interpreted by\nthe OpenSSL function GENERAL_NAME_cmp as an ASN1_TYPE rather than an\nASN1_STRING.\n\nWhen CRL checking is enabled (i.e. the application sets the\nX509_V_FLAG_CRL_CHECK flag), this vulnerability may allow an attacker to pass\narbitrary pointers to a memcmp call, enabling them to read memory contents or\nenact a denial of service. In most cases, the attack requires the attacker to\nprovide both the certificate chain and CRL, neither of which need to have a\nvalid signature. If the attacker only controls one of these inputs, the other\ninput must already contain an X.400 address as a CRL distribution point, which\nis uncommon. As such, this vulnerability is most likely to only affect\napplications which have implemented their own functionality for retrieving CRLs\nover a network.',
-              'diffID':        'sha256:713e7675e2c1e8b5b484c7032e21ca148e1fb18dad74f61be1338b8671ed2aef',
-              'fixedVersions': [
-                '1.1.1t-r0'
-              ],
-              'installedVersion': '1.1.1q-r0',
-              'packageName':      'libssl1.1',
-              'purl':             'pkg:apk/alpine/libssl1.1@1.1.1q-r0?arch=x86_64&distro=3.14.7',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2025:7937',
-                'https://access.redhat.com/security/cve/CVE-2023-0286',
-                'https://access.redhat.com/security/cve/cve-2023-0286',
-                'https://bugzilla.redhat.com/2164440',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144000',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144003',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144006',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144008',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144010',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144012',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144015',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144017',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144019',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2145170',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2158412',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164440',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164487',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164488',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164492',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164497',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164499',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164500',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4203',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4304',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4450',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0215',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0216',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0217',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0286',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0401',
-                'https://errata.almalinux.org/9/ALSA-2025-7937.html',
-                'https://errata.rockylinux.org/RLSA-2023:0946',
-                'https://ftp.openbsd.org/pub/OpenBSD/LibreSSL/libressl-3.6.2-relnotes.txt',
-                'https://ftp.openbsd.org/pub/OpenBSD/patches/7.2/common/018_x509.patch.sig',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=2c6c9d439b484e1ba9830d8454a34fa4f80fdfe9',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=2f7530077e0ef79d98718138716bc51ca0cad658',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=fd2af07dc083a350c959147097003a14a5e8ac4d',
-                'https://github.com/pyca/cryptography',
-                'https://github.com/pyca/cryptography/security/advisories/GHSA-x4qr-2fvf-3mr5',
-                'https://linux.oracle.com/cve/CVE-2023-0286.html',
-                'https://linux.oracle.com/errata/ELSA-2025-7937.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-0286',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0003',
-                'https://rustsec.org/advisories/RUSTSEC-2023-0006.html',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://ubuntu.com/security/notices/USN-5844-1',
-                'https://ubuntu.com/security/notices/USN-5845-1',
-                'https://ubuntu.com/security/notices/USN-5845-2',
-                'https://ubuntu.com/security/notices/USN-6564-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-0286',
-                'https://www.openssl.org/news/secadv/20230207.txt'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: X.400 address type confusion in X.509 GeneralName'
-            },
-            {
-              'cve':  'CVE-2023-0464',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-295'
-              ],
-              'description':   "A security vulnerability has been identified in all supported versions\n\nof OpenSSL related to the verification of X.509 certificate chains\nthat include policy constraints.  Attackers may be able to exploit this\nvulnerability by creating a malicious certificate chain that triggers\nexponential use of computational resources, leading to a denial-of-service\n(DoS) attack on affected systems.\n\nPolicy processing is disabled by default but can be enabled by passing\nthe `-policy' argument to the command line utilities or by calling the\n`X509_VERIFY_PARAM_set1_policies()' function.",
-              'diffID':        'sha256:713e7675e2c1e8b5b484c7032e21ca148e1fb18dad74f61be1338b8671ed2aef',
-              'fixedVersions': [
-                '1.1.1t-r1'
-              ],
-              'installedVersion': '1.1.1q-r0',
-              'packageName':      'libssl1.1',
-              'purl':             'pkg:apk/alpine/libssl1.1@1.1.1q-r0?arch=x86_64&distro=3.14.7',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2023:3722',
-                'https://access.redhat.com/security/cve/CVE-2023-0464',
-                'https://bugzilla.redhat.com/2181082',
-                'https://bugzilla.redhat.com/2182561',
-                'https://bugzilla.redhat.com/2182565',
-                'https://bugzilla.redhat.com/2188461',
-                'https://bugzilla.redhat.com/2207947',
-                'https://errata.almalinux.org/9/ALSA-2023-3722.html',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=2017771e2db3e2b96f89bbe8766c3209f6a99545',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=2dcd4f1e3115f38cefa43e3efbe9b801c27e642e',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=879f7080d7e141f415c79eaa3a8ac4a3dad0348b',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=959c59c7a0164117e7f8366466a32bb1f8d77ff1',
-                'https://linux.oracle.com/cve/CVE-2023-0464.html',
-                'https://linux.oracle.com/errata/ELSA-2023-3722.html',
-                'https://lists.debian.org/debian-lts-announce/2023/06/msg00011.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-0464',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://security.netapp.com/advisory/ntap-20230406-0006/',
-                'https://security.netapp.com/advisory/ntap-20240621-0006/',
-                'https://ubuntu.com/security/notices/USN-6039-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.couchbase.com/alerts/',
-                'https://www.cve.org/CVERecord?id=CVE-2023-0464',
-                'https://www.debian.org/security/2023/dsa-5417',
-                'https://www.openssl.org/news/secadv/20230322.txt'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: Denial of service by excessive resource usage in verifying X509 policy constraints'
-            },
-            {
-              'cve':  'CVE-2022-4304',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N'
-                },
-                'nvd': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N'
-                },
-                'redhat': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-203'
-              ],
-              'description':   'A timing based side channel exists in the OpenSSL RSA Decryption implementation\nwhich could be sufficient to recover a plaintext across a network in a\nBleichenbacher style attack. To achieve a successful decryption an attacker\nwould have to be able to send a very large number of trial messages for\ndecryption. The vulnerability affects all RSA padding modes: PKCS#1 v1.5,\nRSA-OEAP and RSASVE.\n\nFor example, in a TLS connection, RSA is commonly used by a client to send an\nencrypted pre-master secret to the server. An attacker that had observed a\ngenuine connection between a client and a server could use this flaw to send\ntrial messages to the server and record the time taken to process them. After a\nsufficiently large number of messages the attacker could recover the pre-master\nsecret used for the original connection and thus be able to decrypt the\napplication data sent over that connection.',
-              'diffID':        'sha256:713e7675e2c1e8b5b484c7032e21ca148e1fb18dad74f61be1338b8671ed2aef',
-              'fixedVersions': [
-                '1.1.1t-r0'
-              ],
-              'installedVersion': '1.1.1q-r0',
-              'packageName':      'libssl1.1',
-              'purl':             'pkg:apk/alpine/libssl1.1@1.1.1q-r0?arch=x86_64&distro=3.14.7',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2023:2165',
-                'https://access.redhat.com/security/cve/CVE-2022-4304',
-                'https://bugzilla.redhat.com/1960321',
-                'https://bugzilla.redhat.com/2164440',
-                'https://bugzilla.redhat.com/2164487',
-                'https://bugzilla.redhat.com/2164492',
-                'https://bugzilla.redhat.com/2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144000',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144003',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144006',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144008',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144010',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144012',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144015',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144017',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144019',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2145170',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2158412',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164440',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164487',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164488',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164492',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164497',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164499',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164500',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4203',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4304',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4450',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0215',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0216',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0217',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0286',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0401',
-                'https://errata.almalinux.org/9/ALSA-2023-2165.html',
-                'https://errata.rockylinux.org/RLSA-2023:0946',
-                'https://linux.oracle.com/cve/CVE-2022-4304.html',
-                'https://linux.oracle.com/errata/ELSA-2023-32791.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2022-4304',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0003',
-                'https://rustsec.org/advisories/RUSTSEC-2023-0007.html',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://ubuntu.com/security/notices/USN-5844-1',
-                'https://ubuntu.com/security/notices/USN-6564-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2022-4304',
-                'https://www.openssl.org/news/secadv/20230207.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: timing attack in RSA Decryption implementation'
-            },
-            {
-              'cve':  'CVE-2023-0465',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N'
-                },
-                'redhat': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-295'
-              ],
-              'description':   "Applications that use a non-default option when verifying certificates may be\nvulnerable to an attack from a malicious CA to circumvent certain checks.\n\nInvalid certificate policies in leaf certificates are silently ignored by\nOpenSSL and other certificate policy checks are skipped for that certificate.\nA malicious CA could use this to deliberately assert invalid certificate policies\nin order to circumvent policy checking on the certificate altogether.\n\nPolicy processing is disabled by default but can be enabled by passing\nthe `-policy' argument to the command line utilities or by calling the\n`X509_VERIFY_PARAM_set1_policies()' function.",
-              'diffID':        'sha256:713e7675e2c1e8b5b484c7032e21ca148e1fb18dad74f61be1338b8671ed2aef',
-              'fixedVersions': [
-                '1.1.1t-r2'
-              ],
-              'installedVersion': '1.1.1q-r0',
-              'packageName':      'libssl1.1',
-              'purl':             'pkg:apk/alpine/libssl1.1@1.1.1q-r0?arch=x86_64&distro=3.14.7',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2023:3722',
-                'https://access.redhat.com/security/cve/CVE-2023-0465',
-                'https://bugzilla.redhat.com/2181082',
-                'https://bugzilla.redhat.com/2182561',
-                'https://bugzilla.redhat.com/2182565',
-                'https://bugzilla.redhat.com/2188461',
-                'https://bugzilla.redhat.com/2207947',
-                'https://errata.almalinux.org/9/ALSA-2023-3722.html',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=10325176f3d3e98c6e2b3bf5ab1e3b334de6947a',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=1dd43e0709fece299b15208f36cc7c76209ba0bb',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=b013765abfa80036dc779dd0e50602c57bb3bf95',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=facfb1ab745646e97a1920977ae4a9965ea61d5c',
-                'https://linux.oracle.com/cve/CVE-2023-0465.html',
-                'https://linux.oracle.com/errata/ELSA-2023-3722.html',
-                'https://lists.debian.org/debian-lts-announce/2023/06/msg00011.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-0465',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://security.netapp.com/advisory/ntap-20230414-0001/',
-                'https://ubuntu.com/security/notices/USN-6039-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-0465',
-                'https://www.debian.org/security/2023/dsa-5417',
-                'https://www.openssl.org/news/secadv/20230328.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: Invalid certificate policies in leaf certificates are silently ignored'
-            },
-            {
-              'cve':  'CVE-2022-37434',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '9.8',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-787',
-                'CWE-120'
-              ],
-              'description':   'zlib through 1.2.12 has a heap-based buffer over-read or buffer overflow in inflate in inflate.c via a large gzip header extra field. NOTE: only applications that call inflateGetHeader are affected. Some common applications bundle the affected zlib source code but may be unable to call inflateGetHeader (e.g., see the nodejs/node reference).',
-              'diffID':        'sha256:713e7675e2c1e8b5b484c7032e21ca148e1fb18dad74f61be1338b8671ed2aef',
-              'fixedVersions': [
-                '1.2.12-r2'
-              ],
-              'installedVersion': '1.2.12-r1',
-              'packageName':      'zlib',
-              'purl':             'pkg:apk/alpine/zlib@1.2.12-r1?arch=x86_64&distro=3.14.7',
-              'references':       [
-                'http://seclists.org/fulldisclosure/2022/Oct/37',
-                'http://seclists.org/fulldisclosure/2022/Oct/38',
-                'http://seclists.org/fulldisclosure/2022/Oct/41',
-                'http://seclists.org/fulldisclosure/2022/Oct/42',
-                'http://www.openwall.com/lists/oss-security/2022/08/05/2',
-                'http://www.openwall.com/lists/oss-security/2022/08/09/1',
-                'https://access.redhat.com/errata/RHSA-2022:8291',
-                'https://access.redhat.com/security/cve/CVE-2022-37434',
-                'https://bugzilla.redhat.com/2116639',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2053198',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2077431',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2081296',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2116639',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-37434',
-                'https://errata.almalinux.org/9/ALSA-2022-8291.html',
-                'https://errata.rockylinux.org/RLSA-2022:8291',
-                'https://github.com/curl/curl/issues/9271',
-                'https://github.com/ivd38/zlib_overflow',
-                'https://github.com/madler/zlib/blob/21767c654d31d2dccdde4330529775c6c5fd5389/zlib.h#L1062-L1063',
-                'https://github.com/madler/zlib/commit/1eb7682f845ac9e9bf9ae35bbfb3bad5dacbd91d',
-                'https://github.com/madler/zlib/commit/eff308af425b67093bab25f80f1ae950166bece1',
-                'https://github.com/nodejs/node/blob/75b68c6e4db515f76df73af476eccf382bbcb00a/deps/zlib/inflate.c#L762-L764',
-                'https://linux.oracle.com/cve/CVE-2022-37434.html',
-                'https://linux.oracle.com/errata/ELSA-2023-1095.html',
-                'https://lists.debian.org/debian-lts-announce/2022/09/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JWN4VE3JQR4O2SOUS5TXNLANRPMHWV4I/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NMBOJ77A7T7PQCARMDUK75TE6LLESZ3O/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PAVPQNCG3XRLCLNSQRM3KAN5ZFMVXVTY/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/X5U7OTKZSHY2I3ZFJSR2SHFHW72RKGDK/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YRQAI7H4M4RQZ2IWZUEEXECBE5D56BH2/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2022-37434',
-                'https://security.netapp.com/advisory/ntap-20220901-0005/',
-                'https://security.netapp.com/advisory/ntap-20230427-0007/',
-                'https://support.apple.com/kb/HT213488',
-                'https://support.apple.com/kb/HT213489',
-                'https://support.apple.com/kb/HT213490',
-                'https://support.apple.com/kb/HT213491',
-                'https://support.apple.com/kb/HT213493',
-                'https://support.apple.com/kb/HT213494',
-                'https://ubuntu.com/security/notices/USN-5570-1',
-                'https://ubuntu.com/security/notices/USN-5570-2',
-                'https://ubuntu.com/security/notices/USN-5573-1',
-                'https://ubuntu.com/security/notices/USN-6736-1',
-                'https://ubuntu.com/security/notices/USN-6736-2',
-                'https://www.cve.org/CVERecord?id=CVE-2022-37434',
-                'https://www.debian.org/security/2022/dsa-5218'
-              ],
-              'severity':   'CRITICAL',
-              'suppressed': false,
-              'title':      'zlib: heap-based buffer over-read and overflow in inflate() in inflate.c via a large gzip header extra field'
-            }
-          ]
-        }
-      ],
-      'summary': {
-        'critical':   1,
-        'high':       8,
-        'low':        0,
-        'medium':     4,
-        'suppressed': 0,
-        'unknown':    0
-      }
-    }
-  },
-  {
-    'id':    'default/ba6574671740228b2900c86f095eed5d488c5ea4442aa8e0fb885b443fcf88ef',
-    'type':  'storage.sbomscanner.kubewarden.io.vulnerabilityreport',
-    'links': {
-      'patch':  'https://localhost:8005/v1/storage.sbomscanner.kubewarden.io.vulnerabilityreports/default/ba6574671740228b2900c86f095eed5d488c5ea4442aa8e0fb885b443fcf88ef',
-      'remove': 'https://localhost:8005/v1/storage.sbomscanner.kubewarden.io.vulnerabilityreports/default/ba6574671740228b2900c86f095eed5d488c5ea4442aa8e0fb885b443fcf88ef',
-      'self':   'https://localhost:8005/v1/storage.sbomscanner.kubewarden.io.vulnerabilityreports/default/ba6574671740228b2900c86f095eed5d488c5ea4442aa8e0fb885b443fcf88ef',
-      'update': 'https://localhost:8005/v1/storage.sbomscanner.kubewarden.io.vulnerabilityreports/default/ba6574671740228b2900c86f095eed5d488c5ea4442aa8e0fb885b443fcf88ef',
-      'view':   'https://localhost:8005/apis/storage.sbomscanner.kubewarden.io/v1alpha1/namespaces/default/vulnerabilityreports/ba6574671740228b2900c86f095eed5d488c5ea4442aa8e0fb885b443fcf88ef'
-    },
-    'apiVersion':    'storage.sbomscanner.kubewarden.io/v1alpha1',
-    'imageMetadata': {
-      'digest':      'sha256:17d432b0c16d46b7d978dd82a14084f7bcebe497532baea3e3cd9864eb044406',
-      'platform':    'linux/arm64/v8',
-      'registry':    'lsong-demo1',
-      'registryURI': 'registry-1.docker.io',
-      'repository':  'library/alpine',
-      'tag':         '3.13.6'
-    },
-    'kind':     'VulnerabilityReport',
-    'metadata': {
-      'creationTimestamp': '2026-01-14T18:51:17Z',
-      'fields':            [
-        'ba6574671740228b2900c86f095eed5d488c5ea4442aa8e0fb885b443fcf88ef',
-        'registry-1.docker.io/library/alpine:3.13.6',
-        'linux/arm64/v8',
-        '32 (0 suppressed)'
-      ],
-      'labels': {
-        'app.kubernetes.io/managed-by':          'sbomscanner',
-        'app.kubernetes.io/part-of':             'sbomscanner',
-        'sbomscanner.kubewarden.io/scanjob-uid': '445c600a-c4b6-40b3-bd71-f2d2140a37d5'
-      },
-      'name':            'ba6574671740228b2900c86f095eed5d488c5ea4442aa8e0fb885b443fcf88ef',
-      'namespace':       'default',
-      'ownerReferences': [
-        {
-          'apiVersion':         'storage.sbomscanner.kubewarden.io/v1alpha1',
-          'blockOwnerDeletion': true,
-          'controller':         true,
-          'kind':               'SBOM',
-          'name':               'ba6574671740228b2900c86f095eed5d488c5ea4442aa8e0fb885b443fcf88ef',
-          'uid':                '8d997912-58c4-414f-a96f-738271d19833'
-        }
-      ],
-      'relationships': [
-        {
-          'fromId':   'default/ba6574671740228b2900c86f095eed5d488c5ea4442aa8e0fb885b443fcf88ef',
-          'fromType': 'storage.sbomscanner.kubewarden.io.sbom',
-          'rel':      'owner',
-          'state':    'active',
-          'message':  'Resource is current'
-        }
-      ],
-      'resourceVersion': '1',
-      'state':           {
-        'error':         false,
-        'message':       'Resource is current',
-        'name':          'active',
-        'transitioning': false
-      },
-      'uid': '60d78571-5b94-45a4-8b24-9063d955acfa'
-    },
-    'report': {
-      'results': [
-        {
-          'class':           'os-pkgs',
-          'target':          '/var/run/worker/trivy.sbom.1433064460.json (alpine 3.13.6)',
-          'type':            'alpine',
-          'vulnerabilities': [
-            {
-              'cve':  'CVE-2021-42378',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the getvar_i function",
-              'diffID':        'sha256:986e97ef82aae7f2953f0cdae29c64e09efb52acd14e72489bd3df7b0552013f',
-              'fixedVersions': [
-                '1.32.1-r7'
-              ],
-              'installedVersion': '1.32.1-r6',
-              'packageName':      'busybox',
-              'purl':             'pkg:apk/alpine/busybox@1.32.1-r6?arch=aarch64&distro=3.13.6',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42378',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42378',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42378'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the getvar_i()'
-            },
-            {
-              'cve':  'CVE-2021-42379',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the next_input_file function",
-              'diffID':        'sha256:986e97ef82aae7f2953f0cdae29c64e09efb52acd14e72489bd3df7b0552013f',
-              'fixedVersions': [
-                '1.32.1-r7'
-              ],
-              'installedVersion': '1.32.1-r6',
-              'packageName':      'busybox',
-              'purl':             'pkg:apk/alpine/busybox@1.32.1-r6?arch=aarch64&distro=3.13.6',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42379',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42379',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42379'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the next_input_file()'
-            },
-            {
-              'cve':  'CVE-2021-42380',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the clrvar function",
-              'diffID':        'sha256:986e97ef82aae7f2953f0cdae29c64e09efb52acd14e72489bd3df7b0552013f',
-              'fixedVersions': [
-                '1.32.1-r7'
-              ],
-              'installedVersion': '1.32.1-r6',
-              'packageName':      'busybox',
-              'purl':             'pkg:apk/alpine/busybox@1.32.1-r6?arch=aarch64&distro=3.13.6',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42380',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42380',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42380'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the clrvar()'
-            },
-            {
-              'cve':  'CVE-2021-42381',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the hash_init function",
-              'diffID':        'sha256:986e97ef82aae7f2953f0cdae29c64e09efb52acd14e72489bd3df7b0552013f',
-              'fixedVersions': [
-                '1.32.1-r7'
-              ],
-              'installedVersion': '1.32.1-r6',
-              'packageName':      'busybox',
-              'purl':             'pkg:apk/alpine/busybox@1.32.1-r6?arch=aarch64&distro=3.13.6',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42381',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42381',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42381'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the hash_init()'
-            },
-            {
-              'cve':  'CVE-2021-42382',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the getvar_s function",
-              'diffID':        'sha256:986e97ef82aae7f2953f0cdae29c64e09efb52acd14e72489bd3df7b0552013f',
-              'fixedVersions': [
-                '1.32.1-r7'
-              ],
-              'installedVersion': '1.32.1-r6',
-              'packageName':      'busybox',
-              'purl':             'pkg:apk/alpine/busybox@1.32.1-r6?arch=aarch64&distro=3.13.6',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42382',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42382',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42382'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the getvar_s()'
-            },
-            {
-              'cve':  'CVE-2021-42383',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the evaluate function",
-              'diffID':        'sha256:986e97ef82aae7f2953f0cdae29c64e09efb52acd14e72489bd3df7b0552013f',
-              'fixedVersions': [
-                '1.32.1-r7'
-              ],
-              'installedVersion': '1.32.1-r6',
-              'packageName':      'busybox',
-              'purl':             'pkg:apk/alpine/busybox@1.32.1-r6?arch=aarch64&distro=3.13.6',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42383',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42383',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42383'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the evaluate()'
-            },
-            {
-              'cve':  'CVE-2021-42384',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the handle_special function",
-              'diffID':        'sha256:986e97ef82aae7f2953f0cdae29c64e09efb52acd14e72489bd3df7b0552013f',
-              'fixedVersions': [
-                '1.32.1-r7'
-              ],
-              'installedVersion': '1.32.1-r6',
-              'packageName':      'busybox',
-              'purl':             'pkg:apk/alpine/busybox@1.32.1-r6?arch=aarch64&distro=3.13.6',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42384',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42384',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42384'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the handle_special()'
-            },
-            {
-              'cve':  'CVE-2021-42385',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the evaluate function",
-              'diffID':        'sha256:986e97ef82aae7f2953f0cdae29c64e09efb52acd14e72489bd3df7b0552013f',
-              'fixedVersions': [
-                '1.32.1-r7'
-              ],
-              'installedVersion': '1.32.1-r6',
-              'packageName':      'busybox',
-              'purl':             'pkg:apk/alpine/busybox@1.32.1-r6?arch=aarch64&distro=3.13.6',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42385',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42385',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42385'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the evaluate()'
-            },
-            {
-              'cve':  'CVE-2021-42386',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the nvalloc function",
-              'diffID':        'sha256:986e97ef82aae7f2953f0cdae29c64e09efb52acd14e72489bd3df7b0552013f',
-              'fixedVersions': [
-                '1.32.1-r7'
-              ],
-              'installedVersion': '1.32.1-r6',
-              'packageName':      'busybox',
-              'purl':             'pkg:apk/alpine/busybox@1.32.1-r6?arch=aarch64&distro=3.13.6',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42386',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42386',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42386'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the nvalloc()'
-            },
-            {
-              'cve':  'CVE-2022-28391',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '8.8',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-88'
-              ],
-              'description':   "BusyBox through 1.35.0 allows remote attackers to execute arbitrary code if netstat is used to print a DNS PTR record's value to a VT compatible terminal. Alternatively, the attacker could choose to change the terminal's colors.",
-              'diffID':        'sha256:986e97ef82aae7f2953f0cdae29c64e09efb52acd14e72489bd3df7b0552013f',
-              'fixedVersions': [
-                '1.32.1-r8'
-              ],
-              'installedVersion': '1.32.1-r6',
-              'packageName':      'busybox',
-              'purl':             'pkg:apk/alpine/busybox@1.32.1-r6?arch=aarch64&distro=3.13.6',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2022-28391',
-                'https://git.alpinelinux.org/aports/plain/main/busybox/0001-libbb-sockaddr2str-ensure-only-printable-characters-.patch',
-                'https://git.alpinelinux.org/aports/plain/main/busybox/0002-nslookup-sanitize-all-printed-strings-with-printable.patch',
-                'https://gitlab.alpinelinux.org/alpine/aports/-/issues/13661',
-                'https://nvd.nist.gov/vuln/detail/CVE-2022-28391',
-                'https://www.cve.org/CVERecord?id=CVE-2022-28391'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: remote attackers may execute arbitrary code if netstat is used'
-            },
-            {
-              'cve':  'CVE-2022-30065',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.8',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.2',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox 1.35-x's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the copyvar function.",
-              'diffID':        'sha256:986e97ef82aae7f2953f0cdae29c64e09efb52acd14e72489bd3df7b0552013f',
-              'fixedVersions': [
-                '1.32.1-r9'
-              ],
-              'installedVersion': '1.32.1-r6',
-              'packageName':      'busybox',
-              'purl':             'pkg:apk/alpine/busybox@1.32.1-r6?arch=aarch64&distro=3.13.6',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2022-30065',
-                'https://bugs.busybox.net/show_bug.cgi?id=14781',
-                'https://cert-portal.siemens.com/productcert/pdf/ssa-333517.pdf',
-                'https://nvd.nist.gov/vuln/detail/CVE-2022-30065',
-                'https://www.cve.org/CVERecord?id=CVE-2022-30065'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      "busybox: A use-after-free in Busybox's awk applet leads to denial of service"
-            },
-            {
-              'cve':  'CVE-2021-42374',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '5.7',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-125'
-              ],
-              'description':   "An out-of-bounds heap read in Busybox's unlzma applet leads to information leak and denial of service when crafted LZMA-compressed input is decompressed. This can be triggered by any applet/format that",
-              'diffID':        'sha256:986e97ef82aae7f2953f0cdae29c64e09efb52acd14e72489bd3df7b0552013f',
-              'fixedVersions': [
-                '1.32.1-r7'
-              ],
-              'installedVersion': '1.32.1-r6',
-              'packageName':      'busybox',
-              'purl':             'pkg:apk/alpine/busybox@1.32.1-r6?arch=aarch64&distro=3.13.6',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42374',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42374',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42374'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'busybox: out-of-bounds read in unlzma applet leads to information leak and denial of service when crafted LZMA-compressed input is decompressed'
-            },
-            {
-              'cve':  'CVE-2021-42375',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.5',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '4.1',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-159'
-              ],
-              'description':   "An incorrect handling of a special element in Busybox's ash applet leads to denial of service when processing a crafted shell command, due to the shell mistaking specific characters for reserved characters. This may be used for DoS under rare conditions of filtered command input.",
-              'diffID':        'sha256:986e97ef82aae7f2953f0cdae29c64e09efb52acd14e72489bd3df7b0552013f',
-              'fixedVersions': [
-                '1.32.1-r7'
-              ],
-              'installedVersion': '1.32.1-r6',
-              'packageName':      'busybox',
-              'purl':             'pkg:apk/alpine/busybox@1.32.1-r6?arch=aarch64&distro=3.13.6',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42375',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42375',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42375'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'busybox: incorrect handling of a special element in ash applet leads to denial of service when processing a crafted shell command'
-            },
-            {
-              'cve':  'CVE-2022-0778',
-              'cvss': {
-                'bitnami': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'ghsa': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'nvd': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-835'
-              ],
-              'description':   'The BN_mod_sqrt() function, which computes a modular square root, contains a bug that can cause it to loop forever for non-prime moduli. Internally this function is used when parsing certificates that contain elliptic curve public keys in compressed form or explicit elliptic curve parameters with a base point encoded in compressed form. It is possible to trigger the infinite loop by crafting a certificate that has invalid explicit curve parameters. Since certificate parsing happens prior to verification of the certificate signature, any process that parses an externally supplied certificate may thus be subject to a denial of service attack. The infinite loop can also be reached when parsing crafted private keys as they can contain explicit elliptic curve parameters. Thus vulnerable situations include: - TLS clients consuming server certificates - TLS servers consuming client certificates - Hosting providers taking certificates or private keys from customers - Certificate authorities parsing certification requests from subscribers - Anything else which parses ASN.1 elliptic curve parameters Also any other applications that use the BN_mod_sqrt() where the attacker can control the parameter values are vulnerable to this DoS issue. In the OpenSSL 1.0.2 version the public key is not parsed during initial parsing of the certificate which makes it slightly harder to trigger the infinite loop. However any operation which requires the public key from the certificate will trigger the infinite loop. In particular the attacker can use a self-signed certificate to trigger the loop during verification of the certificate signature. This issue affects OpenSSL versions 1.0.2, 1.1.1 and 3.0. It was addressed in the releases of 1.1.1n and 3.0.2 on the 15th March 2022. Fixed in OpenSSL 3.0.2 (Affected 3.0.0,3.0.1). Fixed in OpenSSL 1.1.1n (Affected 1.1.1-1.1.1m). Fixed in OpenSSL 1.0.2zd (Affected 1.0.2-1.0.2zc).',
-              'diffID':        'sha256:986e97ef82aae7f2953f0cdae29c64e09efb52acd14e72489bd3df7b0552013f',
-              'fixedVersions': [
-                '1.1.1n-r0'
-              ],
-              'installedVersion': '1.1.1l-r0',
-              'packageName':      'libcrypto1.1',
-              'purl':             'pkg:apk/alpine/libcrypto1.1@1.1.1l-r0?arch=aarch64&distro=3.13.6',
-              'references':       [
-                'http://packetstormsecurity.com/files/167344/OpenSSL-1.0.2-1.1.1-3.0-BN_mod_sqrt-Infinite-Loop.html',
-                'http://seclists.org/fulldisclosure/2022/May/33',
-                'http://seclists.org/fulldisclosure/2022/May/35',
-                'http://seclists.org/fulldisclosure/2022/May/38',
-                'https://access.redhat.com/errata/RHSA-2022:5326',
-                'https://access.redhat.com/security/cve/CVE-2022-0778',
-                'https://bugzilla.redhat.com/2062202',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2062202',
-                'https://cert-portal.siemens.com/productcert/pdf/ssa-712929.pdf',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-0778',
-                'https://errata.almalinux.org/8/ALSA-2022-5326.html',
-                'https://errata.rockylinux.org/RLSA-2022:4899',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=3118eb64934499d93db3230748a452351d1d9a65',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=380085481c64de749a6dd25cdf0bcf4360b30f83',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=a466912611aa6cbdf550cd10601390e587451246',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=3118eb64934499d93db3230748a452351d1d9a65',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=380085481c64de749a6dd25cdf0bcf4360b30f83',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=a466912611aa6cbdf550cd10601390e587451246',
-                'https://linux.oracle.com/cve/CVE-2022-0778.html',
-                'https://linux.oracle.com/errata/ELSA-2022-9272.html',
-                'https://lists.debian.org/debian-lts-announce/2022/03/msg00023.html',
-                'https://lists.debian.org/debian-lts-announce/2022/03/msg00024.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/323SNN6ZX7PRJJWP2BUAFLPUAE42XWLZ',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/323SNN6ZX7PRJJWP2BUAFLPUAE42XWLZ/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GDB3GQVJPXJE7X5C5JN6JAA4XUDWD6E6',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GDB3GQVJPXJE7X5C5JN6JAA4XUDWD6E6/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/W6K3PR542DXWLEFFMFIDMME4CWMHJRMG',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/W6K3PR542DXWLEFFMFIDMME4CWMHJRMG/',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/323SNN6ZX7PRJJWP2BUAFLPUAE42XWLZ',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/GDB3GQVJPXJE7X5C5JN6JAA4XUDWD6E6',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/W6K3PR542DXWLEFFMFIDMME4CWMHJRMG',
-                'https://nvd.nist.gov/vuln/detail/CVE-2022-0778',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2022-0002',
-                'https://rustsec.org/advisories/RUSTSEC-2022-0014.html',
-                'https://security.gentoo.org/glsa/202210-02',
-                'https://security.netapp.com/advisory/ntap-20220321-0002',
-                'https://security.netapp.com/advisory/ntap-20220321-0002/',
-                'https://security.netapp.com/advisory/ntap-20220429-0005',
-                'https://security.netapp.com/advisory/ntap-20220429-0005/',
-                'https://security.netapp.com/advisory/ntap-20240621-0006',
-                'https://security.netapp.com/advisory/ntap-20240621-0006/',
-                'https://support.apple.com/kb/HT213255',
-                'https://support.apple.com/kb/HT213256',
-                'https://support.apple.com/kb/HT213257',
-                'https://ubuntu.com/security/notices/USN-5328-1',
-                'https://ubuntu.com/security/notices/USN-5328-2',
-                'https://ubuntu.com/security/notices/USN-6457-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2022-0778',
-                'https://www.debian.org/security/2022/dsa-5103',
-                'https://www.openssl.org/news/secadv/20220315.txt',
-                'https://www.oracle.com/security-alerts/cpuapr2022.html',
-                'https://www.oracle.com/security-alerts/cpujul2022.html',
-                'https://www.tenable.com/security/tns-2022-06',
-                'https://www.tenable.com/security/tns-2022-07',
-                'https://www.tenable.com/security/tns-2022-08',
-                'https://www.tenable.com/security/tns-2022-09'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: Infinite loop in BN_mod_sqrt() reachable when parsing certificates'
-            },
-            {
-              'cve':  'CVE-2022-2097',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N'
-                },
-                'nvd': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N'
-                },
-                'redhat': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-327'
-              ],
-              'description':   "AES OCB mode for 32-bit x86 platforms using the AES-NI assembly optimised implementation will not encrypt the entirety of the data under some circumstances. This could reveal sixteen bytes of data that was preexisting in the memory that wasn't written. In the special case of \"in place\" encryption, sixteen bytes of the plaintext would be revealed. Since OpenSSL does not support OCB based cipher suites for TLS and DTLS, they are both unaffected. Fixed in OpenSSL 3.0.5 (Affected 3.0.0-3.0.4). Fixed in OpenSSL 1.1.1q (Affected 1.1.1-1.1.1p).",
-              'diffID':        'sha256:986e97ef82aae7f2953f0cdae29c64e09efb52acd14e72489bd3df7b0552013f',
-              'fixedVersions': [
-                '1.1.1q-r0'
-              ],
-              'installedVersion': '1.1.1l-r0',
-              'packageName':      'libcrypto1.1',
-              'purl':             'pkg:apk/alpine/libcrypto1.1@1.1.1l-r0?arch=aarch64&distro=3.13.6',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2022:6224',
-                'https://access.redhat.com/security/cve/CVE-2022-2097',
-                'https://bugzilla.redhat.com/2081494',
-                'https://bugzilla.redhat.com/2087911',
-                'https://bugzilla.redhat.com/2087913',
-                'https://bugzilla.redhat.com/2097310',
-                'https://bugzilla.redhat.com/2104905',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2081494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2097310',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2100554',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2104905',
-                'https://cert-portal.siemens.com/productcert/pdf/ssa-332410.pdf',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-1292',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-2068',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-2097',
-                'https://errata.almalinux.org/9/ALSA-2022-6224.html',
-                'https://errata.rockylinux.org/RLSA-2022:5818',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=919925673d6c9cfed3c1085497f5dfbbed5fc431',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=a98f339ddd7e8f487d6e0088d4a9a42324885a93',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=919925673d6c9cfed3c1085497f5dfbbed5fc431',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=a98f339ddd7e8f487d6e0088d4a9a42324885a93',
-                'https://github.com/alexcrichton/openssl-src-rs',
-                'https://linux.oracle.com/cve/CVE-2022-2097.html',
-                'https://linux.oracle.com/errata/ELSA-2022-9955.html',
-                'https://lists.debian.org/debian-lts-announce/2023/02/msg00019.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/R6CK57NBQFTPUMXAPJURCGXUYT76NQAK',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/R6CK57NBQFTPUMXAPJURCGXUYT76NQAK/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/V6567JERRHHJW2GNGJGKDRNHR7SNPZK7',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/V6567JERRHHJW2GNGJGKDRNHR7SNPZK7/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VCMNWKERPBKOEBNL7CLTTX3ZZCZLH7XA',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VCMNWKERPBKOEBNL7CLTTX3ZZCZLH7XA/',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/R6CK57NBQFTPUMXAPJURCGXUYT76NQAK',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/R6CK57NBQFTPUMXAPJURCGXUYT76NQAK/',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/V6567JERRHHJW2GNGJGKDRNHR7SNPZK7',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/V6567JERRHHJW2GNGJGKDRNHR7SNPZK7/',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/VCMNWKERPBKOEBNL7CLTTX3ZZCZLH7XA',
-                'https://nvd.nist.gov/vuln/detail/CVE-2022-2097',
-                'https://rustsec.org/advisories/RUSTSEC-2022-0032.html',
-                'https://security.gentoo.org/glsa/202210-02',
-                'https://security.netapp.com/advisory/ntap-20220715-0011',
-                'https://security.netapp.com/advisory/ntap-20220715-0011/',
-                'https://security.netapp.com/advisory/ntap-20230420-0008',
-                'https://security.netapp.com/advisory/ntap-20230420-0008/',
-                'https://security.netapp.com/advisory/ntap-20240621-0006',
-                'https://security.netapp.com/advisory/ntap-20240621-0006/',
-                'https://ubuntu.com/security/notices/USN-5502-1',
-                'https://ubuntu.com/security/notices/USN-6457-1',
-                'https://www.cve.org/CVERecord?id=CVE-2022-2097',
-                'https://www.debian.org/security/2023/dsa-5343',
-                'https://www.openssl.org/news/secadv/20220705.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: AES OCB fails to encrypt some bytes'
-            },
-            {
-              'cve':  'CVE-2022-0778',
-              'cvss': {
-                'bitnami': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'ghsa': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'nvd': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-835'
-              ],
-              'description':   'The BN_mod_sqrt() function, which computes a modular square root, contains a bug that can cause it to loop forever for non-prime moduli. Internally this function is used when parsing certificates that contain elliptic curve public keys in compressed form or explicit elliptic curve parameters with a base point encoded in compressed form. It is possible to trigger the infinite loop by crafting a certificate that has invalid explicit curve parameters. Since certificate parsing happens prior to verification of the certificate signature, any process that parses an externally supplied certificate may thus be subject to a denial of service attack. The infinite loop can also be reached when parsing crafted private keys as they can contain explicit elliptic curve parameters. Thus vulnerable situations include: - TLS clients consuming server certificates - TLS servers consuming client certificates - Hosting providers taking certificates or private keys from customers - Certificate authorities parsing certification requests from subscribers - Anything else which parses ASN.1 elliptic curve parameters Also any other applications that use the BN_mod_sqrt() where the attacker can control the parameter values are vulnerable to this DoS issue. In the OpenSSL 1.0.2 version the public key is not parsed during initial parsing of the certificate which makes it slightly harder to trigger the infinite loop. However any operation which requires the public key from the certificate will trigger the infinite loop. In particular the attacker can use a self-signed certificate to trigger the loop during verification of the certificate signature. This issue affects OpenSSL versions 1.0.2, 1.1.1 and 3.0. It was addressed in the releases of 1.1.1n and 3.0.2 on the 15th March 2022. Fixed in OpenSSL 3.0.2 (Affected 3.0.0,3.0.1). Fixed in OpenSSL 1.1.1n (Affected 1.1.1-1.1.1m). Fixed in OpenSSL 1.0.2zd (Affected 1.0.2-1.0.2zc).',
-              'diffID':        'sha256:986e97ef82aae7f2953f0cdae29c64e09efb52acd14e72489bd3df7b0552013f',
-              'fixedVersions': [
-                '1.1.1n-r0'
-              ],
-              'installedVersion': '1.1.1l-r0',
-              'packageName':      'libssl1.1',
-              'purl':             'pkg:apk/alpine/libssl1.1@1.1.1l-r0?arch=aarch64&distro=3.13.6',
-              'references':       [
-                'http://packetstormsecurity.com/files/167344/OpenSSL-1.0.2-1.1.1-3.0-BN_mod_sqrt-Infinite-Loop.html',
-                'http://seclists.org/fulldisclosure/2022/May/33',
-                'http://seclists.org/fulldisclosure/2022/May/35',
-                'http://seclists.org/fulldisclosure/2022/May/38',
-                'https://access.redhat.com/errata/RHSA-2022:5326',
-                'https://access.redhat.com/security/cve/CVE-2022-0778',
-                'https://bugzilla.redhat.com/2062202',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2062202',
-                'https://cert-portal.siemens.com/productcert/pdf/ssa-712929.pdf',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-0778',
-                'https://errata.almalinux.org/8/ALSA-2022-5326.html',
-                'https://errata.rockylinux.org/RLSA-2022:4899',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=3118eb64934499d93db3230748a452351d1d9a65',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=380085481c64de749a6dd25cdf0bcf4360b30f83',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=a466912611aa6cbdf550cd10601390e587451246',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=3118eb64934499d93db3230748a452351d1d9a65',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=380085481c64de749a6dd25cdf0bcf4360b30f83',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=a466912611aa6cbdf550cd10601390e587451246',
-                'https://linux.oracle.com/cve/CVE-2022-0778.html',
-                'https://linux.oracle.com/errata/ELSA-2022-9272.html',
-                'https://lists.debian.org/debian-lts-announce/2022/03/msg00023.html',
-                'https://lists.debian.org/debian-lts-announce/2022/03/msg00024.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/323SNN6ZX7PRJJWP2BUAFLPUAE42XWLZ',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/323SNN6ZX7PRJJWP2BUAFLPUAE42XWLZ/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GDB3GQVJPXJE7X5C5JN6JAA4XUDWD6E6',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GDB3GQVJPXJE7X5C5JN6JAA4XUDWD6E6/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/W6K3PR542DXWLEFFMFIDMME4CWMHJRMG',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/W6K3PR542DXWLEFFMFIDMME4CWMHJRMG/',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/323SNN6ZX7PRJJWP2BUAFLPUAE42XWLZ',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/GDB3GQVJPXJE7X5C5JN6JAA4XUDWD6E6',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/W6K3PR542DXWLEFFMFIDMME4CWMHJRMG',
-                'https://nvd.nist.gov/vuln/detail/CVE-2022-0778',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2022-0002',
-                'https://rustsec.org/advisories/RUSTSEC-2022-0014.html',
-                'https://security.gentoo.org/glsa/202210-02',
-                'https://security.netapp.com/advisory/ntap-20220321-0002',
-                'https://security.netapp.com/advisory/ntap-20220321-0002/',
-                'https://security.netapp.com/advisory/ntap-20220429-0005',
-                'https://security.netapp.com/advisory/ntap-20220429-0005/',
-                'https://security.netapp.com/advisory/ntap-20240621-0006',
-                'https://security.netapp.com/advisory/ntap-20240621-0006/',
-                'https://support.apple.com/kb/HT213255',
-                'https://support.apple.com/kb/HT213256',
-                'https://support.apple.com/kb/HT213257',
-                'https://ubuntu.com/security/notices/USN-5328-1',
-                'https://ubuntu.com/security/notices/USN-5328-2',
-                'https://ubuntu.com/security/notices/USN-6457-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2022-0778',
-                'https://www.debian.org/security/2022/dsa-5103',
-                'https://www.openssl.org/news/secadv/20220315.txt',
-                'https://www.oracle.com/security-alerts/cpuapr2022.html',
-                'https://www.oracle.com/security-alerts/cpujul2022.html',
-                'https://www.tenable.com/security/tns-2022-06',
-                'https://www.tenable.com/security/tns-2022-07',
-                'https://www.tenable.com/security/tns-2022-08',
-                'https://www.tenable.com/security/tns-2022-09'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: Infinite loop in BN_mod_sqrt() reachable when parsing certificates'
-            },
-            {
-              'cve':  'CVE-2022-2097',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N'
-                },
-                'nvd': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N'
-                },
-                'redhat': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-327'
-              ],
-              'description':   "AES OCB mode for 32-bit x86 platforms using the AES-NI assembly optimised implementation will not encrypt the entirety of the data under some circumstances. This could reveal sixteen bytes of data that was preexisting in the memory that wasn't written. In the special case of \"in place\" encryption, sixteen bytes of the plaintext would be revealed. Since OpenSSL does not support OCB based cipher suites for TLS and DTLS, they are both unaffected. Fixed in OpenSSL 3.0.5 (Affected 3.0.0-3.0.4). Fixed in OpenSSL 1.1.1q (Affected 1.1.1-1.1.1p).",
-              'diffID':        'sha256:986e97ef82aae7f2953f0cdae29c64e09efb52acd14e72489bd3df7b0552013f',
-              'fixedVersions': [
-                '1.1.1q-r0'
-              ],
-              'installedVersion': '1.1.1l-r0',
-              'packageName':      'libssl1.1',
-              'purl':             'pkg:apk/alpine/libssl1.1@1.1.1l-r0?arch=aarch64&distro=3.13.6',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2022:6224',
-                'https://access.redhat.com/security/cve/CVE-2022-2097',
-                'https://bugzilla.redhat.com/2081494',
-                'https://bugzilla.redhat.com/2087911',
-                'https://bugzilla.redhat.com/2087913',
-                'https://bugzilla.redhat.com/2097310',
-                'https://bugzilla.redhat.com/2104905',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2081494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2097310',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2100554',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2104905',
-                'https://cert-portal.siemens.com/productcert/pdf/ssa-332410.pdf',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-1292',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-2068',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-2097',
-                'https://errata.almalinux.org/9/ALSA-2022-6224.html',
-                'https://errata.rockylinux.org/RLSA-2022:5818',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=919925673d6c9cfed3c1085497f5dfbbed5fc431',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=a98f339ddd7e8f487d6e0088d4a9a42324885a93',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=919925673d6c9cfed3c1085497f5dfbbed5fc431',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=a98f339ddd7e8f487d6e0088d4a9a42324885a93',
-                'https://github.com/alexcrichton/openssl-src-rs',
-                'https://linux.oracle.com/cve/CVE-2022-2097.html',
-                'https://linux.oracle.com/errata/ELSA-2022-9955.html',
-                'https://lists.debian.org/debian-lts-announce/2023/02/msg00019.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/R6CK57NBQFTPUMXAPJURCGXUYT76NQAK',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/R6CK57NBQFTPUMXAPJURCGXUYT76NQAK/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/V6567JERRHHJW2GNGJGKDRNHR7SNPZK7',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/V6567JERRHHJW2GNGJGKDRNHR7SNPZK7/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VCMNWKERPBKOEBNL7CLTTX3ZZCZLH7XA',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VCMNWKERPBKOEBNL7CLTTX3ZZCZLH7XA/',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/R6CK57NBQFTPUMXAPJURCGXUYT76NQAK',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/R6CK57NBQFTPUMXAPJURCGXUYT76NQAK/',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/V6567JERRHHJW2GNGJGKDRNHR7SNPZK7',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/V6567JERRHHJW2GNGJGKDRNHR7SNPZK7/',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/VCMNWKERPBKOEBNL7CLTTX3ZZCZLH7XA',
-                'https://nvd.nist.gov/vuln/detail/CVE-2022-2097',
-                'https://rustsec.org/advisories/RUSTSEC-2022-0032.html',
-                'https://security.gentoo.org/glsa/202210-02',
-                'https://security.netapp.com/advisory/ntap-20220715-0011',
-                'https://security.netapp.com/advisory/ntap-20220715-0011/',
-                'https://security.netapp.com/advisory/ntap-20230420-0008',
-                'https://security.netapp.com/advisory/ntap-20230420-0008/',
-                'https://security.netapp.com/advisory/ntap-20240621-0006',
-                'https://security.netapp.com/advisory/ntap-20240621-0006/',
-                'https://ubuntu.com/security/notices/USN-5502-1',
-                'https://ubuntu.com/security/notices/USN-6457-1',
-                'https://www.cve.org/CVERecord?id=CVE-2022-2097',
-                'https://www.debian.org/security/2023/dsa-5343',
-                'https://www.openssl.org/news/secadv/20220705.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: AES OCB fails to encrypt some bytes'
-            },
-            {
-              'cve':  'CVE-2021-42378',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the getvar_i function",
-              'diffID':        'sha256:986e97ef82aae7f2953f0cdae29c64e09efb52acd14e72489bd3df7b0552013f',
-              'fixedVersions': [
-                '1.32.1-r7'
-              ],
-              'installedVersion': '1.32.1-r6',
-              'packageName':      'ssl_client',
-              'purl':             'pkg:apk/alpine/ssl_client@1.32.1-r6?arch=aarch64&distro=3.13.6',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42378',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42378',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42378'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the getvar_i()'
-            },
-            {
-              'cve':  'CVE-2021-42379',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the next_input_file function",
-              'diffID':        'sha256:986e97ef82aae7f2953f0cdae29c64e09efb52acd14e72489bd3df7b0552013f',
-              'fixedVersions': [
-                '1.32.1-r7'
-              ],
-              'installedVersion': '1.32.1-r6',
-              'packageName':      'ssl_client',
-              'purl':             'pkg:apk/alpine/ssl_client@1.32.1-r6?arch=aarch64&distro=3.13.6',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42379',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42379',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42379'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the next_input_file()'
-            },
-            {
-              'cve':  'CVE-2021-42380',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the clrvar function",
-              'diffID':        'sha256:986e97ef82aae7f2953f0cdae29c64e09efb52acd14e72489bd3df7b0552013f',
-              'fixedVersions': [
-                '1.32.1-r7'
-              ],
-              'installedVersion': '1.32.1-r6',
-              'packageName':      'ssl_client',
-              'purl':             'pkg:apk/alpine/ssl_client@1.32.1-r6?arch=aarch64&distro=3.13.6',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42380',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42380',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42380'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the clrvar()'
-            },
-            {
-              'cve':  'CVE-2021-42381',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the hash_init function",
-              'diffID':        'sha256:986e97ef82aae7f2953f0cdae29c64e09efb52acd14e72489bd3df7b0552013f',
-              'fixedVersions': [
-                '1.32.1-r7'
-              ],
-              'installedVersion': '1.32.1-r6',
-              'packageName':      'ssl_client',
-              'purl':             'pkg:apk/alpine/ssl_client@1.32.1-r6?arch=aarch64&distro=3.13.6',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42381',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42381',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42381'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the hash_init()'
-            },
-            {
-              'cve':  'CVE-2021-42382',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the getvar_s function",
-              'diffID':        'sha256:986e97ef82aae7f2953f0cdae29c64e09efb52acd14e72489bd3df7b0552013f',
-              'fixedVersions': [
-                '1.32.1-r7'
-              ],
-              'installedVersion': '1.32.1-r6',
-              'packageName':      'ssl_client',
-              'purl':             'pkg:apk/alpine/ssl_client@1.32.1-r6?arch=aarch64&distro=3.13.6',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42382',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42382',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42382'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the getvar_s()'
-            },
-            {
-              'cve':  'CVE-2021-42383',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the evaluate function",
-              'diffID':        'sha256:986e97ef82aae7f2953f0cdae29c64e09efb52acd14e72489bd3df7b0552013f',
-              'fixedVersions': [
-                '1.32.1-r7'
-              ],
-              'installedVersion': '1.32.1-r6',
-              'packageName':      'ssl_client',
-              'purl':             'pkg:apk/alpine/ssl_client@1.32.1-r6?arch=aarch64&distro=3.13.6',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42383',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42383',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42383'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the evaluate()'
-            },
-            {
-              'cve':  'CVE-2021-42384',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the handle_special function",
-              'diffID':        'sha256:986e97ef82aae7f2953f0cdae29c64e09efb52acd14e72489bd3df7b0552013f',
-              'fixedVersions': [
-                '1.32.1-r7'
-              ],
-              'installedVersion': '1.32.1-r6',
-              'packageName':      'ssl_client',
-              'purl':             'pkg:apk/alpine/ssl_client@1.32.1-r6?arch=aarch64&distro=3.13.6',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42384',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42384',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42384'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the handle_special()'
-            },
-            {
-              'cve':  'CVE-2021-42385',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the evaluate function",
-              'diffID':        'sha256:986e97ef82aae7f2953f0cdae29c64e09efb52acd14e72489bd3df7b0552013f',
-              'fixedVersions': [
-                '1.32.1-r7'
-              ],
-              'installedVersion': '1.32.1-r6',
-              'packageName':      'ssl_client',
-              'purl':             'pkg:apk/alpine/ssl_client@1.32.1-r6?arch=aarch64&distro=3.13.6',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42385',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42385',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42385'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the evaluate()'
-            },
-            {
-              'cve':  'CVE-2021-42386',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the nvalloc function",
-              'diffID':        'sha256:986e97ef82aae7f2953f0cdae29c64e09efb52acd14e72489bd3df7b0552013f',
-              'fixedVersions': [
-                '1.32.1-r7'
-              ],
-              'installedVersion': '1.32.1-r6',
-              'packageName':      'ssl_client',
-              'purl':             'pkg:apk/alpine/ssl_client@1.32.1-r6?arch=aarch64&distro=3.13.6',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42386',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42386',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42386'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the nvalloc()'
-            },
-            {
-              'cve':  'CVE-2022-28391',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '8.8',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-88'
-              ],
-              'description':   "BusyBox through 1.35.0 allows remote attackers to execute arbitrary code if netstat is used to print a DNS PTR record's value to a VT compatible terminal. Alternatively, the attacker could choose to change the terminal's colors.",
-              'diffID':        'sha256:986e97ef82aae7f2953f0cdae29c64e09efb52acd14e72489bd3df7b0552013f',
-              'fixedVersions': [
-                '1.32.1-r8'
-              ],
-              'installedVersion': '1.32.1-r6',
-              'packageName':      'ssl_client',
-              'purl':             'pkg:apk/alpine/ssl_client@1.32.1-r6?arch=aarch64&distro=3.13.6',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2022-28391',
-                'https://git.alpinelinux.org/aports/plain/main/busybox/0001-libbb-sockaddr2str-ensure-only-printable-characters-.patch',
-                'https://git.alpinelinux.org/aports/plain/main/busybox/0002-nslookup-sanitize-all-printed-strings-with-printable.patch',
-                'https://gitlab.alpinelinux.org/alpine/aports/-/issues/13661',
-                'https://nvd.nist.gov/vuln/detail/CVE-2022-28391',
-                'https://www.cve.org/CVERecord?id=CVE-2022-28391'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: remote attackers may execute arbitrary code if netstat is used'
-            },
-            {
-              'cve':  'CVE-2022-30065',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.8',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.2',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox 1.35-x's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the copyvar function.",
-              'diffID':        'sha256:986e97ef82aae7f2953f0cdae29c64e09efb52acd14e72489bd3df7b0552013f',
-              'fixedVersions': [
-                '1.32.1-r9'
-              ],
-              'installedVersion': '1.32.1-r6',
-              'packageName':      'ssl_client',
-              'purl':             'pkg:apk/alpine/ssl_client@1.32.1-r6?arch=aarch64&distro=3.13.6',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2022-30065',
-                'https://bugs.busybox.net/show_bug.cgi?id=14781',
-                'https://cert-portal.siemens.com/productcert/pdf/ssa-333517.pdf',
-                'https://nvd.nist.gov/vuln/detail/CVE-2022-30065',
-                'https://www.cve.org/CVERecord?id=CVE-2022-30065'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      "busybox: A use-after-free in Busybox's awk applet leads to denial of service"
-            },
-            {
-              'cve':  'CVE-2021-42374',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '5.7',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-125'
-              ],
-              'description':   "An out-of-bounds heap read in Busybox's unlzma applet leads to information leak and denial of service when crafted LZMA-compressed input is decompressed. This can be triggered by any applet/format that",
-              'diffID':        'sha256:986e97ef82aae7f2953f0cdae29c64e09efb52acd14e72489bd3df7b0552013f',
-              'fixedVersions': [
-                '1.32.1-r7'
-              ],
-              'installedVersion': '1.32.1-r6',
-              'packageName':      'ssl_client',
-              'purl':             'pkg:apk/alpine/ssl_client@1.32.1-r6?arch=aarch64&distro=3.13.6',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42374',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42374',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42374'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'busybox: out-of-bounds read in unlzma applet leads to information leak and denial of service when crafted LZMA-compressed input is decompressed'
-            },
-            {
-              'cve':  'CVE-2021-42375',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.5',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '4.1',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-159'
-              ],
-              'description':   "An incorrect handling of a special element in Busybox's ash applet leads to denial of service when processing a crafted shell command, due to the shell mistaking specific characters for reserved characters. This may be used for DoS under rare conditions of filtered command input.",
-              'diffID':        'sha256:986e97ef82aae7f2953f0cdae29c64e09efb52acd14e72489bd3df7b0552013f',
-              'fixedVersions': [
-                '1.32.1-r7'
-              ],
-              'installedVersion': '1.32.1-r6',
-              'packageName':      'ssl_client',
-              'purl':             'pkg:apk/alpine/ssl_client@1.32.1-r6?arch=aarch64&distro=3.13.6',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42375',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42375',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42375'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'busybox: incorrect handling of a special element in ash applet leads to denial of service when processing a crafted shell command'
-            },
-            {
-              'cve':  'CVE-2022-37434',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '9.8',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-787',
-                'CWE-120'
-              ],
-              'description':   'zlib through 1.2.12 has a heap-based buffer over-read or buffer overflow in inflate in inflate.c via a large gzip header extra field. NOTE: only applications that call inflateGetHeader are affected. Some common applications bundle the affected zlib source code but may be unable to call inflateGetHeader (e.g., see the nodejs/node reference).',
-              'diffID':        'sha256:986e97ef82aae7f2953f0cdae29c64e09efb52acd14e72489bd3df7b0552013f',
-              'fixedVersions': [
-                '1.2.12-r2'
-              ],
-              'installedVersion': '1.2.11-r3',
-              'packageName':      'zlib',
-              'purl':             'pkg:apk/alpine/zlib@1.2.11-r3?arch=aarch64&distro=3.13.6',
-              'references':       [
-                'http://seclists.org/fulldisclosure/2022/Oct/37',
-                'http://seclists.org/fulldisclosure/2022/Oct/38',
-                'http://seclists.org/fulldisclosure/2022/Oct/41',
-                'http://seclists.org/fulldisclosure/2022/Oct/42',
-                'http://www.openwall.com/lists/oss-security/2022/08/05/2',
-                'http://www.openwall.com/lists/oss-security/2022/08/09/1',
-                'https://access.redhat.com/errata/RHSA-2022:8291',
-                'https://access.redhat.com/security/cve/CVE-2022-37434',
-                'https://bugzilla.redhat.com/2116639',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2053198',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2077431',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2081296',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2116639',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-37434',
-                'https://errata.almalinux.org/9/ALSA-2022-8291.html',
-                'https://errata.rockylinux.org/RLSA-2022:8291',
-                'https://github.com/curl/curl/issues/9271',
-                'https://github.com/ivd38/zlib_overflow',
-                'https://github.com/madler/zlib/blob/21767c654d31d2dccdde4330529775c6c5fd5389/zlib.h#L1062-L1063',
-                'https://github.com/madler/zlib/commit/1eb7682f845ac9e9bf9ae35bbfb3bad5dacbd91d',
-                'https://github.com/madler/zlib/commit/eff308af425b67093bab25f80f1ae950166bece1',
-                'https://github.com/nodejs/node/blob/75b68c6e4db515f76df73af476eccf382bbcb00a/deps/zlib/inflate.c#L762-L764',
-                'https://linux.oracle.com/cve/CVE-2022-37434.html',
-                'https://linux.oracle.com/errata/ELSA-2023-1095.html',
-                'https://lists.debian.org/debian-lts-announce/2022/09/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JWN4VE3JQR4O2SOUS5TXNLANRPMHWV4I/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NMBOJ77A7T7PQCARMDUK75TE6LLESZ3O/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PAVPQNCG3XRLCLNSQRM3KAN5ZFMVXVTY/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/X5U7OTKZSHY2I3ZFJSR2SHFHW72RKGDK/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YRQAI7H4M4RQZ2IWZUEEXECBE5D56BH2/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2022-37434',
-                'https://security.netapp.com/advisory/ntap-20220901-0005/',
-                'https://security.netapp.com/advisory/ntap-20230427-0007/',
-                'https://support.apple.com/kb/HT213488',
-                'https://support.apple.com/kb/HT213489',
-                'https://support.apple.com/kb/HT213490',
-                'https://support.apple.com/kb/HT213491',
-                'https://support.apple.com/kb/HT213493',
-                'https://support.apple.com/kb/HT213494',
-                'https://ubuntu.com/security/notices/USN-5570-1',
-                'https://ubuntu.com/security/notices/USN-5570-2',
-                'https://ubuntu.com/security/notices/USN-5573-1',
-                'https://ubuntu.com/security/notices/USN-6736-1',
-                'https://ubuntu.com/security/notices/USN-6736-2',
-                'https://www.cve.org/CVERecord?id=CVE-2022-37434',
-                'https://www.debian.org/security/2022/dsa-5218'
-              ],
-              'severity':   'CRITICAL',
-              'suppressed': false,
-              'title':      'zlib: heap-based buffer over-read and overflow in inflate() in inflate.c via a large gzip header extra field'
-            },
-            {
-              'cve':  'CVE-2018-25032',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'nvd': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '8.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-787'
-              ],
-              'description':   'zlib before 1.2.12 allows memory corruption when deflating (i.e., when compressing) if the input has many distant matches.',
-              'diffID':        'sha256:986e97ef82aae7f2953f0cdae29c64e09efb52acd14e72489bd3df7b0552013f',
-              'fixedVersions': [
-                '1.2.12-r0'
-              ],
-              'installedVersion': '1.2.11-r3',
-              'packageName':      'zlib',
-              'purl':             'pkg:apk/alpine/zlib@1.2.11-r3?arch=aarch64&distro=3.13.6',
-              'references':       [
-                'http://seclists.org/fulldisclosure/2022/May/33',
-                'http://seclists.org/fulldisclosure/2022/May/35',
-                'http://seclists.org/fulldisclosure/2022/May/38',
-                'http://www.openwall.com/lists/oss-security/2022/03/25/2',
-                'http://www.openwall.com/lists/oss-security/2022/03/26/1',
-                'https://access.redhat.com/errata/RHSA-2022:8420',
-                'https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-25032.json',
-                'https://access.redhat.com/security/cve/CVE-2018-25032',
-                'https://bugzilla.redhat.com/2067945',
-                'https://cert-portal.siemens.com/productcert/pdf/ssa-333517.pdf',
-                'https://errata.almalinux.org/9/ALSA-2022-8420.html',
-                'https://github.com/advisories/GHSA-jc36-42cf-vqwj',
-                'https://github.com/madler/zlib/commit/5c44459c3b28a9bd3283aaceab7c615f8020c531',
-                'https://github.com/madler/zlib/compare/v1.2.11...v1.2.12',
-                'https://github.com/madler/zlib/issues/605',
-                'https://github.com/rubysec/ruby-advisory-db/blob/master/gems/nokogiri/CVE-2018-25032.yml',
-                'https://github.com/sparklemotion/nokogiri/releases/tag/v1.13.4',
-                'https://github.com/sparklemotion/nokogiri/security/advisories/GHSA-v6gp-9mmm-c6p5',
-                'https://groups.google.com/g/ruby-security-ann/c/vX7qSjsvWis/m/TJWN4oOKBwAJ',
-                'https://linux.oracle.com/cve/CVE-2018-25032.html',
-                'https://linux.oracle.com/errata/ELSA-2022-9565.html',
-                'https://lists.debian.org/debian-lts-announce/2022/04/msg00000.html',
-                'https://lists.debian.org/debian-lts-announce/2022/05/msg00008.html',
-                'https://lists.debian.org/debian-lts-announce/2022/09/msg00023.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DCZFIJBJTZ7CL5QXBFKTQ22Q26VINRUF/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DF62MVMH3QUGMBDCB3DY2ERQ6EBHTADB/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JZZPTWRYQULAOL3AW7RZJNVZ2UONXCV4/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NS2D2GFPFGOJUL4WQ3DUAY7HF4VWQ77F/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VOKNP2L734AEL47NRYGVZIKEFOUBQY5Y/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/XOKFMSNQ5D5WGMALBNBXU3GE442V74WU/',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/DCZFIJBJTZ7CL5QXBFKTQ22Q26VINRUF',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/DCZFIJBJTZ7CL5QXBFKTQ22Q26VINRUF/',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/DF62MVMH3QUGMBDCB3DY2ERQ6EBHTADB',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/DF62MVMH3QUGMBDCB3DY2ERQ6EBHTADB/',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/JZZPTWRYQULAOL3AW7RZJNVZ2UONXCV4',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/JZZPTWRYQULAOL3AW7RZJNVZ2UONXCV4/',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/NS2D2GFPFGOJUL4WQ3DUAY7HF4VWQ77F',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/NS2D2GFPFGOJUL4WQ3DUAY7HF4VWQ77F/',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/VOKNP2L734AEL47NRYGVZIKEFOUBQY5Y',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/VOKNP2L734AEL47NRYGVZIKEFOUBQY5Y/',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/XOKFMSNQ5D5WGMALBNBXU3GE442V74WU',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/XOKFMSNQ5D5WGMALBNBXU3GE442V74WU/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2018-25032',
-                'https://security.gentoo.org/glsa/202210-42',
-                'https://security.netapp.com/advisory/ntap-20220526-0009',
-                'https://security.netapp.com/advisory/ntap-20220526-0009/',
-                'https://security.netapp.com/advisory/ntap-20220729-0004',
-                'https://security.netapp.com/advisory/ntap-20220729-0004/',
-                'https://support.apple.com/kb/HT213255',
-                'https://support.apple.com/kb/HT213256',
-                'https://support.apple.com/kb/HT213257',
-                'https://ubuntu.com/security/notices/USN-5355-1',
-                'https://ubuntu.com/security/notices/USN-5355-2',
-                'https://ubuntu.com/security/notices/USN-5359-1',
-                'https://ubuntu.com/security/notices/USN-5359-2',
-                'https://ubuntu.com/security/notices/USN-5739-1',
-                'https://ubuntu.com/security/notices/USN-6736-1',
-                'https://ubuntu.com/security/notices/USN-6736-2',
-                'https://www.cve.org/CVERecord?id=CVE-2018-25032',
-                'https://www.debian.org/security/2022/dsa-5111',
-                'https://www.openwall.com/lists/oss-security/2022/03/24/1',
-                'https://www.openwall.com/lists/oss-security/2022/03/28/1',
-                'https://www.openwall.com/lists/oss-security/2022/03/28/3',
-                'https://www.oracle.com/security-alerts/cpujul2022.html'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'zlib: A flaw found in zlib when compressing (not decompressing) certain inputs'
-            }
-          ]
-        }
-      ],
-      'summary': {
-        'critical':   1,
-        'high':       25,
-        'low':        0,
-        'medium':     6,
-        'suppressed': 0,
-        'unknown':    0
-      }
-    }
-  },
-  {
-    'id':    'default/baefe2a0e210919962d50c2921650e44227d98f02720811bcb51e4852b17d4aa',
-    'type':  'storage.sbomscanner.kubewarden.io.vulnerabilityreport',
-    'links': {
-      'patch':  'https://localhost:8005/v1/storage.sbomscanner.kubewarden.io.vulnerabilityreports/default/baefe2a0e210919962d50c2921650e44227d98f02720811bcb51e4852b17d4aa',
-      'remove': 'https://localhost:8005/v1/storage.sbomscanner.kubewarden.io.vulnerabilityreports/default/baefe2a0e210919962d50c2921650e44227d98f02720811bcb51e4852b17d4aa',
-      'self':   'https://localhost:8005/v1/storage.sbomscanner.kubewarden.io.vulnerabilityreports/default/baefe2a0e210919962d50c2921650e44227d98f02720811bcb51e4852b17d4aa',
-      'update': 'https://localhost:8005/v1/storage.sbomscanner.kubewarden.io.vulnerabilityreports/default/baefe2a0e210919962d50c2921650e44227d98f02720811bcb51e4852b17d4aa',
-      'view':   'https://localhost:8005/apis/storage.sbomscanner.kubewarden.io/v1alpha1/namespaces/default/vulnerabilityreports/baefe2a0e210919962d50c2921650e44227d98f02720811bcb51e4852b17d4aa'
-    },
-    'apiVersion':    'storage.sbomscanner.kubewarden.io/v1alpha1',
-    'imageMetadata': {
-      'digest':      'sha256:299294be8699c1b323c137f972fd0aa5eaa4b95489c213091dcf46ef39b6c810',
-      'platform':    'linux/arm/v7',
-      'registry':    'lsong-demo1',
-      'registryURI': 'registry-1.docker.io',
-      'repository':  'library/alpine',
-      'tag':         '3.12.3'
-    },
-    'kind':     'VulnerabilityReport',
-    'metadata': {
-      'creationTimestamp': '2026-01-14T18:51:17Z',
-      'fields':            [
-        'baefe2a0e210919962d50c2921650e44227d98f02720811bcb51e4852b17d4aa',
-        'registry-1.docker.io/library/alpine:3.12.3',
-        'linux/arm/v7',
-        '44 (0 suppressed)'
-      ],
-      'labels': {
-        'app.kubernetes.io/managed-by':          'sbomscanner',
-        'app.kubernetes.io/part-of':             'sbomscanner',
-        'sbomscanner.kubewarden.io/scanjob-uid': '445c600a-c4b6-40b3-bd71-f2d2140a37d5'
-      },
-      'name':            'baefe2a0e210919962d50c2921650e44227d98f02720811bcb51e4852b17d4aa',
-      'namespace':       'default',
-      'ownerReferences': [
-        {
-          'apiVersion':         'storage.sbomscanner.kubewarden.io/v1alpha1',
-          'blockOwnerDeletion': true,
-          'controller':         true,
-          'kind':               'SBOM',
-          'name':               'baefe2a0e210919962d50c2921650e44227d98f02720811bcb51e4852b17d4aa',
-          'uid':                '7ad0b900-f7b5-4315-be7f-bb224e77ba19'
-        }
-      ],
-      'relationships': [
-        {
-          'fromId':   'default/baefe2a0e210919962d50c2921650e44227d98f02720811bcb51e4852b17d4aa',
-          'fromType': 'storage.sbomscanner.kubewarden.io.sbom',
-          'rel':      'owner',
-          'state':    'active',
-          'message':  'Resource is current'
-        }
-      ],
-      'resourceVersion': '1',
-      'state':           {
-        'error':         false,
-        'message':       'Resource is current',
-        'name':          'active',
-        'transitioning': false
-      },
-      'uid': 'b6648096-b905-4c04-a044-958fd7baf6e7'
-    },
-    'report': {
-      'results': [
-        {
-          'class':           'os-pkgs',
-          'target':          '/var/run/worker/trivy.sbom.1448046346.json (alpine 3.12.3)',
-          'type':            'alpine',
-          'vulnerabilities': [
-            {
-              'cve':  'CVE-2021-36159',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '9.1',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '9.1',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-125'
-              ],
-              'description':   "libfetch before 2021-07-26, as used in apk-tools, xbps, and other products, mishandles numeric strings for the FTP and HTTP protocols. The FTP passive mode implementation allows an out-of-bounds read because strtol is used to parse the relevant numbers into address bytes. It does not check if the line ends prematurely. If it does, the for-loop condition checks for the '\\0' terminator one byte too late.",
-              'diffID':        'sha256:72bbe6b5204e7df9466d6597c4888cf950f0b379bf476a76925feabf17e94aa9',
-              'fixedVersions': [
-                '2.10.7-r0'
-              ],
-              'installedVersion': '2.10.5-r1',
-              'packageName':      'apk-tools',
-              'purl':             'pkg:apk/alpine/apk-tools@2.10.5-r1?arch=armv7&distro=3.12.3',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-36159',
-                'https://github.com/freebsd/freebsd-src/commits/main/lib/libfetch',
-                'https://gitlab.alpinelinux.org/alpine/apk-tools/-/issues/10749',
-                'https://lists.apache.org/thread.html/r61db8e7dcb56dc000a5387a88f7a473bacec5ee01b9ff3f55308aacc%40%3Cdev.kafka.apache.org%3E',
-                'https://lists.apache.org/thread.html/r61db8e7dcb56dc000a5387a88f7a473bacec5ee01b9ff3f55308aacc%40%3Cusers.kafka.apache.org%3E',
-                'https://lists.apache.org/thread.html/rbf4ce74b0d1fa9810dec50ba3ace0caeea677af7c27a97111c06ccb7%40%3Cdev.kafka.apache.org%3E',
-                'https://lists.apache.org/thread.html/rbf4ce74b0d1fa9810dec50ba3ace0caeea677af7c27a97111c06ccb7%40%3Cusers.kafka.apache.org%3E',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-36159',
-                'https://www.cve.org/CVERecord?id=CVE-2021-36159'
-              ],
-              'severity':   'CRITICAL',
-              'suppressed': false,
-              'title':      'libfetch: an out of boundary read while libfetch uses strtol to parse the relevant numbers into address bytes leads to information leak or crash'
-            },
-            {
-              'cve':  'CVE-2021-30139',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-125'
-              ],
-              'description':   'In Alpine Linux apk-tools before 2.12.5, the tarball parser allows a buffer overflow and crash.',
-              'diffID':        'sha256:72bbe6b5204e7df9466d6597c4888cf950f0b379bf476a76925feabf17e94aa9',
-              'fixedVersions': [
-                '2.10.6-r0'
-              ],
-              'installedVersion': '2.10.5-r1',
-              'packageName':      'apk-tools',
-              'purl':             'pkg:apk/alpine/apk-tools@2.10.5-r1?arch=armv7&distro=3.12.3',
-              'references':       [
-                'https://gitlab.alpinelinux.org/alpine/apk-tools/-/issues/10741',
-                'https://gitlab.alpinelinux.org/alpine/aports/-/issues/12606'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false
-            },
-            {
-              'cve':  'CVE-2021-28831',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-755'
-              ],
-              'description':   'decompress_gunzip.c in BusyBox through 1.32.1 mishandles the error bit on the huft_build result pointer, with a resultant invalid free or segmentation fault, via malformed gzip data.',
-              'diffID':        'sha256:72bbe6b5204e7df9466d6597c4888cf950f0b379bf476a76925feabf17e94aa9',
-              'fixedVersions': [
-                '1.31.1-r20'
-              ],
-              'installedVersion': '1.31.1-r19',
-              'packageName':      'busybox',
-              'purl':             'pkg:apk/alpine/busybox@1.31.1-r19?arch=armv7&distro=3.12.3',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-28831',
-                'https://git.busybox.net/busybox/commit/?id=f25d254dfd4243698c31a4f3153d4ac72aa9e9bd',
-                'https://lists.debian.org/debian-lts-announce/2021/04/msg00001.html',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/3UDQGJRECXFS5EZVDH2OI45FMO436AC4/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/Z7ZIFKPRR32ZYA3WAA2NXFA3QHHOU6FJ/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZASBW7QRRLY5V2R44MQ4QQM4CZIDHM2U/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-28831',
-                'https://security.gentoo.org/glsa/202105-09',
-                'https://security.netapp.com/advisory/ntap-20250509-0005/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://ubuntu.com/security/notices/USN-5179-2',
-                'https://ubuntu.com/security/notices/USN-6335-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-28831'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: invalid free or segmentation fault via malformed gzip data'
-            },
-            {
-              'cve':  'CVE-2021-42378',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the getvar_i function",
-              'diffID':        'sha256:72bbe6b5204e7df9466d6597c4888cf950f0b379bf476a76925feabf17e94aa9',
-              'fixedVersions': [
-                '1.31.1-r21'
-              ],
-              'installedVersion': '1.31.1-r19',
-              'packageName':      'busybox',
-              'purl':             'pkg:apk/alpine/busybox@1.31.1-r19?arch=armv7&distro=3.12.3',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42378',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42378',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42378'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the getvar_i()'
-            },
-            {
-              'cve':  'CVE-2021-42379',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the next_input_file function",
-              'diffID':        'sha256:72bbe6b5204e7df9466d6597c4888cf950f0b379bf476a76925feabf17e94aa9',
-              'fixedVersions': [
-                '1.31.1-r21'
-              ],
-              'installedVersion': '1.31.1-r19',
-              'packageName':      'busybox',
-              'purl':             'pkg:apk/alpine/busybox@1.31.1-r19?arch=armv7&distro=3.12.3',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42379',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42379',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42379'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the next_input_file()'
-            },
-            {
-              'cve':  'CVE-2021-42380',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the clrvar function",
-              'diffID':        'sha256:72bbe6b5204e7df9466d6597c4888cf950f0b379bf476a76925feabf17e94aa9',
-              'fixedVersions': [
-                '1.31.1-r21'
-              ],
-              'installedVersion': '1.31.1-r19',
-              'packageName':      'busybox',
-              'purl':             'pkg:apk/alpine/busybox@1.31.1-r19?arch=armv7&distro=3.12.3',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42380',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42380',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42380'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the clrvar()'
-            },
-            {
-              'cve':  'CVE-2021-42381',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the hash_init function",
-              'diffID':        'sha256:72bbe6b5204e7df9466d6597c4888cf950f0b379bf476a76925feabf17e94aa9',
-              'fixedVersions': [
-                '1.31.1-r21'
-              ],
-              'installedVersion': '1.31.1-r19',
-              'packageName':      'busybox',
-              'purl':             'pkg:apk/alpine/busybox@1.31.1-r19?arch=armv7&distro=3.12.3',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42381',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42381',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42381'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the hash_init()'
-            },
-            {
-              'cve':  'CVE-2021-42382',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the getvar_s function",
-              'diffID':        'sha256:72bbe6b5204e7df9466d6597c4888cf950f0b379bf476a76925feabf17e94aa9',
-              'fixedVersions': [
-                '1.31.1-r21'
-              ],
-              'installedVersion': '1.31.1-r19',
-              'packageName':      'busybox',
-              'purl':             'pkg:apk/alpine/busybox@1.31.1-r19?arch=armv7&distro=3.12.3',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42382',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42382',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42382'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the getvar_s()'
-            },
-            {
-              'cve':  'CVE-2021-42383',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the evaluate function",
-              'diffID':        'sha256:72bbe6b5204e7df9466d6597c4888cf950f0b379bf476a76925feabf17e94aa9',
-              'fixedVersions': [
-                '1.31.1-r21'
-              ],
-              'installedVersion': '1.31.1-r19',
-              'packageName':      'busybox',
-              'purl':             'pkg:apk/alpine/busybox@1.31.1-r19?arch=armv7&distro=3.12.3',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42383',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42383',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42383'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the evaluate()'
-            },
-            {
-              'cve':  'CVE-2021-42384',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the handle_special function",
-              'diffID':        'sha256:72bbe6b5204e7df9466d6597c4888cf950f0b379bf476a76925feabf17e94aa9',
-              'fixedVersions': [
-                '1.31.1-r21'
-              ],
-              'installedVersion': '1.31.1-r19',
-              'packageName':      'busybox',
-              'purl':             'pkg:apk/alpine/busybox@1.31.1-r19?arch=armv7&distro=3.12.3',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42384',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42384',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42384'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the handle_special()'
-            },
-            {
-              'cve':  'CVE-2021-42385',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the evaluate function",
-              'diffID':        'sha256:72bbe6b5204e7df9466d6597c4888cf950f0b379bf476a76925feabf17e94aa9',
-              'fixedVersions': [
-                '1.31.1-r21'
-              ],
-              'installedVersion': '1.31.1-r19',
-              'packageName':      'busybox',
-              'purl':             'pkg:apk/alpine/busybox@1.31.1-r19?arch=armv7&distro=3.12.3',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42385',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42385',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42385'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the evaluate()'
-            },
-            {
-              'cve':  'CVE-2021-42386',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the nvalloc function",
-              'diffID':        'sha256:72bbe6b5204e7df9466d6597c4888cf950f0b379bf476a76925feabf17e94aa9',
-              'fixedVersions': [
-                '1.31.1-r21'
-              ],
-              'installedVersion': '1.31.1-r19',
-              'packageName':      'busybox',
-              'purl':             'pkg:apk/alpine/busybox@1.31.1-r19?arch=armv7&distro=3.12.3',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42386',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42386',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42386'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the nvalloc()'
-            },
-            {
-              'cve':  'CVE-2022-28391',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '8.8',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-88'
-              ],
-              'description':   "BusyBox through 1.35.0 allows remote attackers to execute arbitrary code if netstat is used to print a DNS PTR record's value to a VT compatible terminal. Alternatively, the attacker could choose to change the terminal's colors.",
-              'diffID':        'sha256:72bbe6b5204e7df9466d6597c4888cf950f0b379bf476a76925feabf17e94aa9',
-              'fixedVersions': [
-                '1.31.1-r22'
-              ],
-              'installedVersion': '1.31.1-r19',
-              'packageName':      'busybox',
-              'purl':             'pkg:apk/alpine/busybox@1.31.1-r19?arch=armv7&distro=3.12.3',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2022-28391',
-                'https://git.alpinelinux.org/aports/plain/main/busybox/0001-libbb-sockaddr2str-ensure-only-printable-characters-.patch',
-                'https://git.alpinelinux.org/aports/plain/main/busybox/0002-nslookup-sanitize-all-printed-strings-with-printable.patch',
-                'https://gitlab.alpinelinux.org/alpine/aports/-/issues/13661',
-                'https://nvd.nist.gov/vuln/detail/CVE-2022-28391',
-                'https://www.cve.org/CVERecord?id=CVE-2022-28391'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: remote attackers may execute arbitrary code if netstat is used'
-            },
-            {
-              'cve':  'CVE-2021-42374',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '5.7',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-125'
-              ],
-              'description':   "An out-of-bounds heap read in Busybox's unlzma applet leads to information leak and denial of service when crafted LZMA-compressed input is decompressed. This can be triggered by any applet/format that",
-              'diffID':        'sha256:72bbe6b5204e7df9466d6597c4888cf950f0b379bf476a76925feabf17e94aa9',
-              'fixedVersions': [
-                '1.31.1-r21'
-              ],
-              'installedVersion': '1.31.1-r19',
-              'packageName':      'busybox',
-              'purl':             'pkg:apk/alpine/busybox@1.31.1-r19?arch=armv7&distro=3.12.3',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42374',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42374',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42374'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'busybox: out-of-bounds read in unlzma applet leads to information leak and denial of service when crafted LZMA-compressed input is decompressed'
-            },
-            {
-              'cve':  'CVE-2021-3711',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '9.8',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'nvd': {
-                  'v3score':  '9.8',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '9.8',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-120'
-              ],
-              'description':   'In order to decrypt SM2 encrypted data an application is expected to call the API function EVP_PKEY_decrypt(). Typically an application will call this function twice. The first time, on entry, the "out" parameter can be NULL and, on exit, the "outlen" parameter is populated with the buffer size required to hold the decrypted plaintext. The application can then allocate a sufficiently sized buffer and call EVP_PKEY_decrypt() again, but this time passing a non-NULL value for the "out" parameter. A bug in the implementation of the SM2 decryption code means that the calculation of the buffer size required to hold the plaintext returned by the first call to EVP_PKEY_decrypt() can be smaller than the actual size required by the second call. This can lead to a buffer overflow when EVP_PKEY_decrypt() is called by the application a second time with a buffer that is too small. A malicious attacker who is able present SM2 content for decryption to an application could cause attacker chosen data to overflow the buffer by up to a maximum of 62 bytes altering the contents of other data held after the buffer, possibly changing application behaviour or causing the application to crash. The location of the buffer is application dependent but is typically heap allocated. Fixed in OpenSSL 1.1.1l (Affected 1.1.1-1.1.1k).',
-              'diffID':        'sha256:72bbe6b5204e7df9466d6597c4888cf950f0b379bf476a76925feabf17e94aa9',
-              'fixedVersions': [
-                '1.1.1l-r0'
-              ],
-              'installedVersion': '1.1.1i-r0',
-              'packageName':      'libcrypto1.1',
-              'purl':             'pkg:apk/alpine/libcrypto1.1@1.1.1i-r0?arch=armv7&distro=3.12.3',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2021/08/26/2',
-                'https://access.redhat.com/security/cve/CVE-2021-3711',
-                'https://cert-portal.siemens.com/productcert/pdf/ssa-389290.pdf',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=59f5e75f3bced8fc0e130d72a3f582cf7b480b46',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=59f5e75f3bced8fc0e130d72a3f582cf7b480b46',
-                'https://lists.apache.org/thread.html/r18995de860f0e63635f3008fd2a6aca82394249476d21691e7c59c9e%40%3Cdev.tomcat.apache.org%3E',
-                'https://lists.apache.org/thread.html/r18995de860f0e63635f3008fd2a6aca82394249476d21691e7c59c9e@%3Cdev.tomcat.apache.org%3E',
-                'https://lists.apache.org/thread.html/rad5d9f83f0d11fb3f8bb148d179b8a9ad7c6a17f18d70e5805a713d1%40%3Cdev.tomcat.apache.org%3E',
-                'https://lists.apache.org/thread.html/rad5d9f83f0d11fb3f8bb148d179b8a9ad7c6a17f18d70e5805a713d1@%3Cdev.tomcat.apache.org%3E',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-3711',
-                'https://rustsec.org/advisories/RUSTSEC-2021-0097.html',
-                'https://security.gentoo.org/glsa/202209-02',
-                'https://security.gentoo.org/glsa/202210-02',
-                'https://security.netapp.com/advisory/ntap-20210827-0010',
-                'https://security.netapp.com/advisory/ntap-20210827-0010/',
-                'https://security.netapp.com/advisory/ntap-20211022-0003',
-                'https://security.netapp.com/advisory/ntap-20211022-0003/',
-                'https://security.netapp.com/advisory/ntap-20240621-0006',
-                'https://security.netapp.com/advisory/ntap-20240621-0006/',
-                'https://ubuntu.com/security/notices/USN-5051-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-3711',
-                'https://www.debian.org/security/2021/dsa-4963',
-                'https://www.openssl.org/news/secadv/20210824.txt',
-                'https://www.oracle.com/security-alerts/cpuapr2022.html',
-                'https://www.oracle.com/security-alerts/cpujan2022.html',
-                'https://www.oracle.com/security-alerts/cpuoct2021.html',
-                'https://www.tenable.com/security/tns-2021-16',
-                'https://www.tenable.com/security/tns-2022-02'
-              ],
-              'severity':   'CRITICAL',
-              'suppressed': false,
-              'title':      'openssl: SM2 Decryption Buffer Overflow'
-            },
-            {
-              'cve':  'CVE-2021-23840',
-              'cvss': {
-                'bitnami': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'ghsa': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'nvd': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-190'
-              ],
-              'description':   'Calls to EVP_CipherUpdate, EVP_EncryptUpdate and EVP_DecryptUpdate may overflow the output length argument in some cases where the input length is close to the maximum permissable length for an integer on the platform. In such cases the return value from the function call will be 1 (indicating success), but the output length value will be negative. This could cause applications to behave incorrectly or crash. OpenSSL versions 1.1.1i and below are affected by this issue. Users of these versions should upgrade to OpenSSL 1.1.1j. OpenSSL versions 1.0.2x and below are affected by this issue. However OpenSSL 1.0.2 is out of support and no longer receiving public updates. Premium support customers of OpenSSL 1.0.2 should upgrade to 1.0.2y. Other users should upgrade to 1.1.1j. Fixed in OpenSSL 1.1.1j (Affected 1.1.1-1.1.1i). Fixed in OpenSSL 1.0.2y (Affected 1.0.2-1.0.2x).',
-              'diffID':        'sha256:72bbe6b5204e7df9466d6597c4888cf950f0b379bf476a76925feabf17e94aa9',
-              'fixedVersions': [
-                '1.1.1j-r0'
-              ],
-              'installedVersion': '1.1.1i-r0',
-              'packageName':      'libcrypto1.1',
-              'purl':             'pkg:apk/alpine/libcrypto1.1@1.1.1i-r0?arch=armv7&distro=3.12.3',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-23840',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=1908036',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=1930310',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=1930324',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=1934534',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=1934600',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=1939637',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=1940085',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=1965362',
-                'https://cert-portal.siemens.com/productcert/pdf/ssa-389290.pdf',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-23840',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-23841',
-                'https://errata.rockylinux.org/RLSA-2021:4424',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=6a51b9e1d0cf0bf8515f7201b68fb0a3482b3dc1',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=9b1129239f3ebb1d1c98ce9ed41d5c9476c47cb2',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=6a51b9e1d0cf0bf8515f7201b68fb0a3482b3dc1',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=9b1129239f3ebb1d1c98ce9ed41d5c9476c47cb2',
-                'https://github.com/alexcrichton/openssl-src-rs',
-                'https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA44846',
-                'https://kc.mcafee.com/corporate/index?page=content&id=SB10366',
-                'https://linux.oracle.com/cve/CVE-2021-23840.html',
-                'https://linux.oracle.com/errata/ELSA-2021-9561.html',
-                'https://lists.apache.org/thread.html/r58af02e294bd07f487e2c64ffc0a29b837db5600e33b6e698b9d696b%40%3Cissues.bookkeeper.apache.org%3E',
-                'https://lists.apache.org/thread.html/r58af02e294bd07f487e2c64ffc0a29b837db5600e33b6e698b9d696b@%3Cissues.bookkeeper.apache.org%3E',
-                'https://lists.apache.org/thread.html/rf4c02775860db415b4955778a131c2795223f61cb8c6a450893651e4%40%3Cissues.bookkeeper.apache.org%3E',
-                'https://lists.apache.org/thread.html/rf4c02775860db415b4955778a131c2795223f61cb8c6a450893651e4@%3Cissues.bookkeeper.apache.org%3E',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-23840',
-                'https://rustsec.org/advisories/RUSTSEC-2021-0057.html',
-                'https://security.gentoo.org/glsa/202103-03',
-                'https://security.netapp.com/advisory/ntap-20210219-0009',
-                'https://security.netapp.com/advisory/ntap-20210219-0009/',
-                'https://security.netapp.com/advisory/ntap-20240621-0006/',
-                'https://ubuntu.com/security/notices/USN-4738-1',
-                'https://ubuntu.com/security/notices/USN-5088-1',
-                'https://ubuntu.com/security/notices/USN-7018-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-23840',
-                'https://www.debian.org/security/2021/dsa-4855',
-                'https://www.openssl.org/news/secadv/20210216.txt',
-                'https://www.oracle.com//security-alerts/cpujul2021.html',
-                'https://www.oracle.com/security-alerts/cpuApr2021.html',
-                'https://www.oracle.com/security-alerts/cpuapr2022.html',
-                'https://www.oracle.com/security-alerts/cpujan2022.html',
-                'https://www.oracle.com/security-alerts/cpuoct2021.html',
-                'https://www.tenable.com/security/tns-2021-03',
-                'https://www.tenable.com/security/tns-2021-09',
-                'https://www.tenable.com/security/tns-2021-10'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: integer overflow in CipherUpdate'
-            },
-            {
-              'cve':  'CVE-2021-3450',
-              'cvss': {
-                'bitnami': {
-                  'v3score':  '7.4',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N'
-                },
-                'ghsa': {
-                  'v3score':  '7.4',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N'
-                },
-                'nvd': {
-                  'v3score':  '7.4',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N'
-                },
-                'redhat': {
-                  'v3score':  '7.4',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-295'
-              ],
-              'description':   'The X509_V_FLAG_X509_STRICT flag enables additional security checks of the certificates present in a certificate chain. It is not set by default. Starting from OpenSSL version 1.1.1h a check to disallow certificates in the chain that have explicitly encoded elliptic curve parameters was added as an additional strict check. An error in the implementation of this check meant that the result of a previous check to confirm that certificates in the chain are valid CA certificates was overwritten. This effectively bypasses the check that non-CA certificates must not be able to issue other certificates. If a "purpose" has been configured then there is a subsequent opportunity for checks that the certificate is a valid CA. All of the named "purpose" values implemented in libcrypto perform this check. Therefore, where a purpose is set the certificate chain will still be rejected even when the strict flag has been used. A purpose is set by default in libssl client and server certificate verification routines, but it can be overridden or removed by an application. In order to be affected, an application must explicitly set the X509_V_FLAG_X509_STRICT verification flag and either not set a purpose for the certificate verification or, in the case of TLS client or server applications, override the default purpose. OpenSSL versions 1.1.1h and newer are affected by this issue. Users of these versions should upgrade to OpenSSL 1.1.1k. OpenSSL 1.0.2 is not impacted by this issue. Fixed in OpenSSL 1.1.1k (Affected 1.1.1h-1.1.1j).',
-              'diffID':        'sha256:72bbe6b5204e7df9466d6597c4888cf950f0b379bf476a76925feabf17e94aa9',
-              'fixedVersions': [
-                '1.1.1k-r0'
-              ],
-              'installedVersion': '1.1.1i-r0',
-              'packageName':      'libcrypto1.1',
-              'purl':             'pkg:apk/alpine/libcrypto1.1@1.1.1i-r0?arch=armv7&distro=3.12.3',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2021/03/27/1',
-                'http://www.openwall.com/lists/oss-security/2021/03/27/2',
-                'http://www.openwall.com/lists/oss-security/2021/03/28/3',
-                'http://www.openwall.com/lists/oss-security/2021/03/28/4',
-                'https://access.redhat.com/security/cve/CVE-2021-3450',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=1941547',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=1941554',
-                'https://cert-portal.siemens.com/productcert/pdf/ssa-389290.pdf',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-3449',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-3450',
-                'https://errata.rockylinux.org/RLSA-2021:1024',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=2a40b7bc7b94dd7de897a74571e7024f0cf0d63b',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=2a40b7bc7b94dd7de897a74571e7024f0cf0d63b',
-                'https://github.com/alexcrichton/openssl-src-rs',
-                'https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA44845',
-                'https://kc.mcafee.com/corporate/index?page=content&id=SB10356',
-                'https://linux.oracle.com/cve/CVE-2021-3450.html',
-                'https://linux.oracle.com/errata/ELSA-2021-9151.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CCBFLLVQVILIVGZMBJL3IXZGKWQISYNP/',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/CCBFLLVQVILIVGZMBJL3IXZGKWQISYNP',
-                'https://mta.openssl.org/pipermail/openssl-announce/2021-March/000198.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-3450',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2021-0013',
-                'https://rustsec.org/advisories/RUSTSEC-2021-0056.html',
-                'https://security.FreeBSD.org/advisories/FreeBSD-SA-21:07.openssl.asc',
-                'https://security.gentoo.org/glsa/202103-03',
-                'https://security.netapp.com/advisory/ntap-20210326-0006',
-                'https://security.netapp.com/advisory/ntap-20210326-0006/',
-                'https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-openssl-2021-GHY28dJd',
-                'https://www.cve.org/CVERecord?id=CVE-2021-3450',
-                'https://www.openssl.org/news/secadv/20210325.txt',
-                'https://www.oracle.com//security-alerts/cpujul2021.html',
-                'https://www.oracle.com/security-alerts/cpuApr2021.html',
-                'https://www.oracle.com/security-alerts/cpuapr2022.html',
-                'https://www.oracle.com/security-alerts/cpujul2022.html',
-                'https://www.oracle.com/security-alerts/cpuoct2021.html',
-                'https://www.tenable.com/security/tns-2021-05',
-                'https://www.tenable.com/security/tns-2021-08',
-                'https://www.tenable.com/security/tns-2021-09'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: CA certificate check bypass with X509_V_FLAG_X509_STRICT'
-            },
-            {
-              'cve':  'CVE-2021-3712',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '7.4',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H'
-                },
-                'nvd': {
-                  'v3score':  '7.4',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.4',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-125'
-              ],
-              'description':   "ASN.1 strings are represented internally within OpenSSL as an ASN1_STRING structure which contains a buffer holding the string data and a field holding the buffer length. This contrasts with normal C strings which are repesented as a buffer for the string data which is terminated with a NUL (0) byte. Although not a strict requirement, ASN.1 strings that are parsed using OpenSSL's own \"d2i\" functions (and other similar parsing functions) as well as any string whose value has been set with the ASN1_STRING_set() function will additionally NUL terminate the byte array in the ASN1_STRING structure. However, it is possible for applications to directly construct valid ASN1_STRING structures which do not NUL terminate the byte array by directly setting the \"data\" and \"length\" fields in the ASN1_STRING array. This can also happen by using the ASN1_STRING_set0() function. Numerous OpenSSL functions that print ASN.1 data have been found to assume that the ASN1_STRING byte array will be NUL terminated, even though this is not guaranteed for strings that have been directly constructed. Where an application requests an ASN.1 structure to be printed, and where that ASN.1 structure contains ASN1_STRINGs that have been directly constructed by the application without NUL terminating the \"data\" field, then a read buffer overrun can occur. The same thing can also occur during name constraints processing of certificates (for example if a certificate has been directly constructed by the application instead of loading it via the OpenSSL parsing functions, and the certificate contains non NUL terminated ASN1_STRING structures). It can also occur in the X509_get1_email(), X509_REQ_get1_email() and X509_get1_ocsp() functions. If a malicious actor can cause an application to directly construct an ASN1_STRING and then process it through one of the affected OpenSSL functions then this issue could be hit. This might result in a crash (causing a Denial of Service attack). It could also result in the disclosure of private memory contents (such as private keys, or sensitive plaintext). Fixed in OpenSSL 1.1.1l (Affected 1.1.1-1.1.1k). Fixed in OpenSSL 1.0.2za (Affected 1.0.2-1.0.2y).",
-              'diffID':        'sha256:72bbe6b5204e7df9466d6597c4888cf950f0b379bf476a76925feabf17e94aa9',
-              'fixedVersions': [
-                '1.1.1l-r0'
-              ],
-              'installedVersion': '1.1.1i-r0',
-              'packageName':      'libcrypto1.1',
-              'purl':             'pkg:apk/alpine/libcrypto1.1@1.1.1i-r0?arch=armv7&distro=3.12.3',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2021/08/26/2',
-                'https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2021-3712.json',
-                'https://access.redhat.com/security/cve/CVE-2021-3712',
-                'https://cert-portal.siemens.com/productcert/pdf/ssa-244969.pdf',
-                'https://cert-portal.siemens.com/productcert/pdf/ssa-389290.pdf',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=94d23fcff9b2a7a8368dfe52214d5c2569882c11',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=ccb0a11145ee72b042d10593a64eaf9e8a55ec12',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=94d23fcff9b2a7a8368dfe52214d5c2569882c11',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=ccb0a11145ee72b042d10593a64eaf9e8a55ec12',
-                'https://kc.mcafee.com/corporate/index?page=content&id=SB10366',
-                'https://linux.oracle.com/cve/CVE-2021-3712.html',
-                'https://linux.oracle.com/errata/ELSA-2022-9023.html',
-                'https://lists.apache.org/thread.html/r18995de860f0e63635f3008fd2a6aca82394249476d21691e7c59c9e%40%3Cdev.tomcat.apache.org%3E',
-                'https://lists.apache.org/thread.html/r18995de860f0e63635f3008fd2a6aca82394249476d21691e7c59c9e@%3Cdev.tomcat.apache.org%3E',
-                'https://lists.apache.org/thread.html/rad5d9f83f0d11fb3f8bb148d179b8a9ad7c6a17f18d70e5805a713d1%40%3Cdev.tomcat.apache.org%3E',
-                'https://lists.apache.org/thread.html/rad5d9f83f0d11fb3f8bb148d179b8a9ad7c6a17f18d70e5805a713d1@%3Cdev.tomcat.apache.org%3E',
-                'https://lists.debian.org/debian-lts-announce/2021/09/msg00014.html',
-                'https://lists.debian.org/debian-lts-announce/2021/09/msg00021.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-3712',
-                'https://rustsec.org/advisories/RUSTSEC-2021-0098.html',
-                'https://security.gentoo.org/glsa/202209-02',
-                'https://security.gentoo.org/glsa/202210-02',
-                'https://security.netapp.com/advisory/ntap-20210827-0010',
-                'https://security.netapp.com/advisory/ntap-20210827-0010/',
-                'https://security.netapp.com/advisory/ntap-20240621-0006',
-                'https://security.netapp.com/advisory/ntap-20240621-0006/',
-                'https://ubuntu.com/security/notices/USN-5051-1',
-                'https://ubuntu.com/security/notices/USN-5051-2',
-                'https://ubuntu.com/security/notices/USN-5051-3',
-                'https://ubuntu.com/security/notices/USN-5051-4 (regression only in trusty/esm)',
-                'https://ubuntu.com/security/notices/USN-5088-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-3712',
-                'https://www.debian.org/security/2021/dsa-4963',
-                'https://www.openssl.org/news/secadv/20210824.txt',
-                'https://www.oracle.com/security-alerts/cpuapr2022.html',
-                'https://www.oracle.com/security-alerts/cpujan2022.html',
-                'https://www.oracle.com/security-alerts/cpuoct2021.html',
-                'https://www.tenable.com/security/tns-2021-16',
-                'https://www.tenable.com/security/tns-2022-02'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: Read buffer overruns processing ASN.1 strings'
-            },
-            {
-              'cve':  'CVE-2022-0778',
-              'cvss': {
-                'bitnami': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'ghsa': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'nvd': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-835'
-              ],
-              'description':   'The BN_mod_sqrt() function, which computes a modular square root, contains a bug that can cause it to loop forever for non-prime moduli. Internally this function is used when parsing certificates that contain elliptic curve public keys in compressed form or explicit elliptic curve parameters with a base point encoded in compressed form. It is possible to trigger the infinite loop by crafting a certificate that has invalid explicit curve parameters. Since certificate parsing happens prior to verification of the certificate signature, any process that parses an externally supplied certificate may thus be subject to a denial of service attack. The infinite loop can also be reached when parsing crafted private keys as they can contain explicit elliptic curve parameters. Thus vulnerable situations include: - TLS clients consuming server certificates - TLS servers consuming client certificates - Hosting providers taking certificates or private keys from customers - Certificate authorities parsing certification requests from subscribers - Anything else which parses ASN.1 elliptic curve parameters Also any other applications that use the BN_mod_sqrt() where the attacker can control the parameter values are vulnerable to this DoS issue. In the OpenSSL 1.0.2 version the public key is not parsed during initial parsing of the certificate which makes it slightly harder to trigger the infinite loop. However any operation which requires the public key from the certificate will trigger the infinite loop. In particular the attacker can use a self-signed certificate to trigger the loop during verification of the certificate signature. This issue affects OpenSSL versions 1.0.2, 1.1.1 and 3.0. It was addressed in the releases of 1.1.1n and 3.0.2 on the 15th March 2022. Fixed in OpenSSL 3.0.2 (Affected 3.0.0,3.0.1). Fixed in OpenSSL 1.1.1n (Affected 1.1.1-1.1.1m). Fixed in OpenSSL 1.0.2zd (Affected 1.0.2-1.0.2zc).',
-              'diffID':        'sha256:72bbe6b5204e7df9466d6597c4888cf950f0b379bf476a76925feabf17e94aa9',
-              'fixedVersions': [
-                '1.1.1n-r0'
-              ],
-              'installedVersion': '1.1.1i-r0',
-              'packageName':      'libcrypto1.1',
-              'purl':             'pkg:apk/alpine/libcrypto1.1@1.1.1i-r0?arch=armv7&distro=3.12.3',
-              'references':       [
-                'http://packetstormsecurity.com/files/167344/OpenSSL-1.0.2-1.1.1-3.0-BN_mod_sqrt-Infinite-Loop.html',
-                'http://seclists.org/fulldisclosure/2022/May/33',
-                'http://seclists.org/fulldisclosure/2022/May/35',
-                'http://seclists.org/fulldisclosure/2022/May/38',
-                'https://access.redhat.com/errata/RHSA-2022:5326',
-                'https://access.redhat.com/security/cve/CVE-2022-0778',
-                'https://bugzilla.redhat.com/2062202',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2062202',
-                'https://cert-portal.siemens.com/productcert/pdf/ssa-712929.pdf',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-0778',
-                'https://errata.almalinux.org/8/ALSA-2022-5326.html',
-                'https://errata.rockylinux.org/RLSA-2022:4899',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=3118eb64934499d93db3230748a452351d1d9a65',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=380085481c64de749a6dd25cdf0bcf4360b30f83',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=a466912611aa6cbdf550cd10601390e587451246',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=3118eb64934499d93db3230748a452351d1d9a65',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=380085481c64de749a6dd25cdf0bcf4360b30f83',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=a466912611aa6cbdf550cd10601390e587451246',
-                'https://linux.oracle.com/cve/CVE-2022-0778.html',
-                'https://linux.oracle.com/errata/ELSA-2022-9272.html',
-                'https://lists.debian.org/debian-lts-announce/2022/03/msg00023.html',
-                'https://lists.debian.org/debian-lts-announce/2022/03/msg00024.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/323SNN6ZX7PRJJWP2BUAFLPUAE42XWLZ',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/323SNN6ZX7PRJJWP2BUAFLPUAE42XWLZ/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GDB3GQVJPXJE7X5C5JN6JAA4XUDWD6E6',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GDB3GQVJPXJE7X5C5JN6JAA4XUDWD6E6/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/W6K3PR542DXWLEFFMFIDMME4CWMHJRMG',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/W6K3PR542DXWLEFFMFIDMME4CWMHJRMG/',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/323SNN6ZX7PRJJWP2BUAFLPUAE42XWLZ',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/GDB3GQVJPXJE7X5C5JN6JAA4XUDWD6E6',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/W6K3PR542DXWLEFFMFIDMME4CWMHJRMG',
-                'https://nvd.nist.gov/vuln/detail/CVE-2022-0778',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2022-0002',
-                'https://rustsec.org/advisories/RUSTSEC-2022-0014.html',
-                'https://security.gentoo.org/glsa/202210-02',
-                'https://security.netapp.com/advisory/ntap-20220321-0002',
-                'https://security.netapp.com/advisory/ntap-20220321-0002/',
-                'https://security.netapp.com/advisory/ntap-20220429-0005',
-                'https://security.netapp.com/advisory/ntap-20220429-0005/',
-                'https://security.netapp.com/advisory/ntap-20240621-0006',
-                'https://security.netapp.com/advisory/ntap-20240621-0006/',
-                'https://support.apple.com/kb/HT213255',
-                'https://support.apple.com/kb/HT213256',
-                'https://support.apple.com/kb/HT213257',
-                'https://ubuntu.com/security/notices/USN-5328-1',
-                'https://ubuntu.com/security/notices/USN-5328-2',
-                'https://ubuntu.com/security/notices/USN-6457-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2022-0778',
-                'https://www.debian.org/security/2022/dsa-5103',
-                'https://www.openssl.org/news/secadv/20220315.txt',
-                'https://www.oracle.com/security-alerts/cpuapr2022.html',
-                'https://www.oracle.com/security-alerts/cpujul2022.html',
-                'https://www.tenable.com/security/tns-2022-06',
-                'https://www.tenable.com/security/tns-2022-07',
-                'https://www.tenable.com/security/tns-2022-08',
-                'https://www.tenable.com/security/tns-2022-09'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: Infinite loop in BN_mod_sqrt() reachable when parsing certificates'
-            },
-            {
-              'cve':  'CVE-2021-23841',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'nvd': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-476'
-              ],
-              'description':   'The OpenSSL public API function X509_issuer_and_serial_hash() attempts to create a unique hash value based on the issuer and serial number data contained within an X509 certificate. However it fails to correctly handle any errors that may occur while parsing the issuer field (which might occur if the issuer field is maliciously constructed). This may subsequently result in a NULL pointer deref and a crash leading to a potential denial of service attack. The function X509_issuer_and_serial_hash() is never directly called by OpenSSL itself so applications are only vulnerable if they use this function directly and they use it on certificates that may have been obtained from untrusted sources. OpenSSL versions 1.1.1i and below are affected by this issue. Users of these versions should upgrade to OpenSSL 1.1.1j. OpenSSL versions 1.0.2x and below are affected by this issue. However OpenSSL 1.0.2 is out of support and no longer receiving public updates. Premium support customers of OpenSSL 1.0.2 should upgrade to 1.0.2y. Other users should upgrade to 1.1.1j. Fixed in OpenSSL 1.1.1j (Affected 1.1.1-1.1.1i). Fixed in OpenSSL 1.0.2y (Affected 1.0.2-1.0.2x).',
-              'diffID':        'sha256:72bbe6b5204e7df9466d6597c4888cf950f0b379bf476a76925feabf17e94aa9',
-              'fixedVersions': [
-                '1.1.1j-r0'
-              ],
-              'installedVersion': '1.1.1i-r0',
-              'packageName':      'libcrypto1.1',
-              'purl':             'pkg:apk/alpine/libcrypto1.1@1.1.1i-r0?arch=armv7&distro=3.12.3',
-              'references':       [
-                'http://seclists.org/fulldisclosure/2021/May/67',
-                'http://seclists.org/fulldisclosure/2021/May/68',
-                'http://seclists.org/fulldisclosure/2021/May/70',
-                'https://access.redhat.com/security/cve/CVE-2021-23841',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=1908036',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=1930310',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=1930324',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=1934534',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=1934600',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=1939637',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=1940085',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=1965362',
-                'https://cert-portal.siemens.com/productcert/pdf/ssa-637483.pdf',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-23840',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-23841',
-                'https://errata.rockylinux.org/RLSA-2021:4424',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=122a19ab48091c657f7cb1fb3af9fc07bd557bbf',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=8252ee4d90f3f2004d3d0aeeed003ad49c9a7807',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=122a19ab48091c657f7cb1fb3af9fc07bd557bbf',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=6a51b9e1d0cf0bf8515f7201b68fb0a3482b3dc1',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=8252ee4d90f3f2004d3d0aeeed003ad49c9a7807',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=9b1129239f3ebb1d1c98ce9ed41d5c9476c47cb2',
-                'https://github.com/alexcrichton/openssl-src-rs',
-                'https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA44846',
-                'https://linux.oracle.com/cve/CVE-2021-23841.html',
-                'https://linux.oracle.com/errata/ELSA-2021-9561.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-23841',
-                'https://rustsec.org/advisories/RUSTSEC-2021-0058',
-                'https://rustsec.org/advisories/RUSTSEC-2021-0058.html',
-                'https://security.gentoo.org/glsa/202103-03',
-                'https://security.netapp.com/advisory/ntap-20210219-0009',
-                'https://security.netapp.com/advisory/ntap-20210219-0009/',
-                'https://security.netapp.com/advisory/ntap-20210513-0002',
-                'https://security.netapp.com/advisory/ntap-20210513-0002/',
-                'https://security.netapp.com/advisory/ntap-20240621-0006/',
-                'https://support.apple.com/kb/HT212528',
-                'https://support.apple.com/kb/HT212529',
-                'https://support.apple.com/kb/HT212534',
-                'https://ubuntu.com/security/notices/USN-4738-1',
-                'https://ubuntu.com/security/notices/USN-4745-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-23841',
-                'https://www.debian.org/security/2021/dsa-4855',
-                'https://www.openssl.org/news/secadv/20210216.txt',
-                'https://www.oracle.com//security-alerts/cpujul2021.html',
-                'https://www.oracle.com/security-alerts/cpuApr2021.html',
-                'https://www.oracle.com/security-alerts/cpuapr2022.html',
-                'https://www.oracle.com/security-alerts/cpuoct2021.html',
-                'https://www.tenable.com/security/tns-2021-03',
-                'https://www.tenable.com/security/tns-2021-09'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: NULL pointer dereference in X509_issuer_and_serial_hash()'
-            },
-            {
-              'cve':  'CVE-2021-3449',
-              'cvss': {
-                'bitnami': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'ghsa': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'nvd': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-476'
-              ],
-              'description':   'An OpenSSL TLS server may crash if sent a maliciously crafted renegotiation ClientHello message from a client. If a TLSv1.2 renegotiation ClientHello omits the signature_algorithms extension (where it was present in the initial ClientHello), but includes a signature_algorithms_cert extension then a NULL pointer dereference will result, leading to a crash and a denial of service attack. A server is only vulnerable if it has TLSv1.2 and renegotiation enabled (which is the default configuration). OpenSSL TLS clients are not impacted by this issue. All OpenSSL 1.1.1 versions are affected by this issue. Users of these versions should upgrade to OpenSSL 1.1.1k. OpenSSL 1.0.2 is not impacted by this issue. Fixed in OpenSSL 1.1.1k (Affected 1.1.1-1.1.1j).',
-              'diffID':        'sha256:72bbe6b5204e7df9466d6597c4888cf950f0b379bf476a76925feabf17e94aa9',
-              'fixedVersions': [
-                '1.1.1k-r0'
-              ],
-              'installedVersion': '1.1.1i-r0',
-              'packageName':      'libcrypto1.1',
-              'purl':             'pkg:apk/alpine/libcrypto1.1@1.1.1i-r0?arch=armv7&distro=3.12.3',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2021/03/27/1',
-                'http://www.openwall.com/lists/oss-security/2021/03/27/2',
-                'http://www.openwall.com/lists/oss-security/2021/03/28/3',
-                'http://www.openwall.com/lists/oss-security/2021/03/28/4',
-                'https://access.redhat.com/security/cve/CVE-2021-3449',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=1941547',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=1941554',
-                'https://cert-portal.siemens.com/productcert/pdf/ssa-389290.pdf',
-                'https://cert-portal.siemens.com/productcert/pdf/ssa-772220.pdf',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-3449',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-3450',
-                'https://errata.rockylinux.org/RLSA-2021:1024',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=fb9fa6b51defd48157eeb207f52181f735d96148',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=fb9fa6b51defd48157eeb207f52181f735d96148',
-                'https://github.com/alexcrichton/openssl-src-rs',
-                'https://github.com/nodejs/node/pull/38083',
-                'https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA44845',
-                'https://kc.mcafee.com/corporate/index?page=content&id=SB10356',
-                'https://linux.oracle.com/cve/CVE-2021-3449.html',
-                'https://linux.oracle.com/errata/ELSA-2021-9151.html',
-                'https://lists.debian.org/debian-lts-announce/2021/08/msg00029.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CCBFLLVQVILIVGZMBJL3IXZGKWQISYNP/',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/CCBFLLVQVILIVGZMBJL3IXZGKWQISYNP',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-3449',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2021-0013',
-                'https://rustsec.org/advisories/RUSTSEC-2021-0055',
-                'https://rustsec.org/advisories/RUSTSEC-2021-0055.html',
-                'https://security.FreeBSD.org/advisories/FreeBSD-SA-21:07.openssl.asc',
-                'https://security.gentoo.org/glsa/202103-03',
-                'https://security.netapp.com/advisory/ntap-20210326-0006',
-                'https://security.netapp.com/advisory/ntap-20210326-0006/',
-                'https://security.netapp.com/advisory/ntap-20210513-0002',
-                'https://security.netapp.com/advisory/ntap-20210513-0002/',
-                'https://security.netapp.com/advisory/ntap-20240621-0006/',
-                'https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-openssl-2021-GHY28dJd',
-                'https://ubuntu.com/security/notices/USN-4891-1',
-                'https://ubuntu.com/security/notices/USN-5038-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-3449',
-                'https://www.debian.org/security/2021/dsa-4875',
-                'https://www.openssl.org/news/secadv/20210325.txt',
-                'https://www.oracle.com//security-alerts/cpujul2021.html',
-                'https://www.oracle.com/security-alerts/cpuApr2021.html',
-                'https://www.oracle.com/security-alerts/cpuapr2022.html',
-                'https://www.oracle.com/security-alerts/cpujul2022.html',
-                'https://www.oracle.com/security-alerts/cpuoct2021.html',
-                'https://www.tenable.com/security/tns-2021-05',
-                'https://www.tenable.com/security/tns-2021-06',
-                'https://www.tenable.com/security/tns-2021-09',
-                'https://www.tenable.com/security/tns-2021-10'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: NULL pointer dereference in signature_algorithms processing'
-            },
-            {
-              'cve':  'CVE-2021-23839',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '3.7',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N'
-                },
-                'redhat': {
-                  'v3score':  '3.7',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-327'
-              ],
-              'description':   'OpenSSL 1.0.2 supports SSLv2. If a client attempts to negotiate SSLv2 with a server that is configured to support both SSLv2 and more recent SSL and TLS versions then a check is made for a version rollback attack when unpadding an RSA signature. Clients that support SSL or TLS versions greater than SSLv2 are supposed to use a special form of padding. A server that supports greater than SSLv2 is supposed to reject connection attempts from a client where this special form of padding is present, because this indicates that a version rollback has occurred (i.e. both client and server support greater than SSLv2, and yet this is the version that is being requested). The implementation of this padding check inverted the logic so that the connection attempt is accepted if the padding is present, and rejected if it is absent. This means that such as server will accept a connection if a version rollback attack has occurred. Further the server will erroneously reject a connection if a normal SSLv2 connection attempt is made. Only OpenSSL 1.0.2 servers from version 1.0.2s to 1.0.2x are affected by this issue. In order to be vulnerable a 1.0.2 server must: 1) have configured SSLv2 support at compile time (this is off by default), 2) have configured SSLv2 support at runtime (this is off by default), 3) have configured SSLv2 ciphersuites (these are not in the default ciphersuite list) OpenSSL 1.1.1 does not have SSLv2 support and therefore is not vulnerable to this issue. The underlying error is in the implementation of the RSA_padding_check_SSLv23() function. This also affects the RSA_SSLV23_PADDING padding mode used by various other functions. Although 1.1.1 does not support SSLv2 the RSA_padding_check_SSLv23() function still exists, as does the RSA_SSLV23_PADDING padding mode. Applications that directly call that function or use that padding mode will encounter this issue. However since there is no support for the SSLv2 protocol in 1.1.1 this is considered a bug and not a security issue in that version. OpenSSL 1.0.2 is out of support and no longer receiving public updates. Premium support customers of OpenSSL 1.0.2 should upgrade to 1.0.2y. Other users should upgrade to 1.1.1j. Fixed in OpenSSL 1.0.2y (Affected 1.0.2s-1.0.2x).',
-              'diffID':        'sha256:72bbe6b5204e7df9466d6597c4888cf950f0b379bf476a76925feabf17e94aa9',
-              'fixedVersions': [
-                '1.1.1j-r0'
-              ],
-              'installedVersion': '1.1.1i-r0',
-              'packageName':      'libcrypto1.1',
-              'purl':             'pkg:apk/alpine/libcrypto1.1@1.1.1i-r0?arch=armv7&distro=3.12.3',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-23839',
-                'https://cert-portal.siemens.com/productcert/pdf/ssa-637483.pdf',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=30919ab80a478f2d81f2e9acdcca3fa4740cd547',
-                'https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA44846',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-23839',
-                'https://security.netapp.com/advisory/ntap-20210219-0009/',
-                'https://security.netapp.com/advisory/ntap-20240621-0006/',
-                'https://www.cve.org/CVERecord?id=CVE-2021-23839',
-                'https://www.openssl.org/news/secadv/20210216.txt',
-                'https://www.oracle.com//security-alerts/cpujul2021.html',
-                'https://www.oracle.com/security-alerts/cpuApr2021.html',
-                'https://www.oracle.com/security-alerts/cpuapr2022.html',
-                'https://www.oracle.com/security-alerts/cpuoct2021.html'
-              ],
-              'severity':   'LOW',
-              'suppressed': false,
-              'title':      'openssl: incorrect SSLv2 rollback protection'
-            },
-            {
-              'cve':  'CVE-2021-3711',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '9.8',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'nvd': {
-                  'v3score':  '9.8',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '9.8',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-120'
-              ],
-              'description':   'In order to decrypt SM2 encrypted data an application is expected to call the API function EVP_PKEY_decrypt(). Typically an application will call this function twice. The first time, on entry, the "out" parameter can be NULL and, on exit, the "outlen" parameter is populated with the buffer size required to hold the decrypted plaintext. The application can then allocate a sufficiently sized buffer and call EVP_PKEY_decrypt() again, but this time passing a non-NULL value for the "out" parameter. A bug in the implementation of the SM2 decryption code means that the calculation of the buffer size required to hold the plaintext returned by the first call to EVP_PKEY_decrypt() can be smaller than the actual size required by the second call. This can lead to a buffer overflow when EVP_PKEY_decrypt() is called by the application a second time with a buffer that is too small. A malicious attacker who is able present SM2 content for decryption to an application could cause attacker chosen data to overflow the buffer by up to a maximum of 62 bytes altering the contents of other data held after the buffer, possibly changing application behaviour or causing the application to crash. The location of the buffer is application dependent but is typically heap allocated. Fixed in OpenSSL 1.1.1l (Affected 1.1.1-1.1.1k).',
-              'diffID':        'sha256:72bbe6b5204e7df9466d6597c4888cf950f0b379bf476a76925feabf17e94aa9',
-              'fixedVersions': [
-                '1.1.1l-r0'
-              ],
-              'installedVersion': '1.1.1i-r0',
-              'packageName':      'libssl1.1',
-              'purl':             'pkg:apk/alpine/libssl1.1@1.1.1i-r0?arch=armv7&distro=3.12.3',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2021/08/26/2',
-                'https://access.redhat.com/security/cve/CVE-2021-3711',
-                'https://cert-portal.siemens.com/productcert/pdf/ssa-389290.pdf',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=59f5e75f3bced8fc0e130d72a3f582cf7b480b46',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=59f5e75f3bced8fc0e130d72a3f582cf7b480b46',
-                'https://lists.apache.org/thread.html/r18995de860f0e63635f3008fd2a6aca82394249476d21691e7c59c9e%40%3Cdev.tomcat.apache.org%3E',
-                'https://lists.apache.org/thread.html/r18995de860f0e63635f3008fd2a6aca82394249476d21691e7c59c9e@%3Cdev.tomcat.apache.org%3E',
-                'https://lists.apache.org/thread.html/rad5d9f83f0d11fb3f8bb148d179b8a9ad7c6a17f18d70e5805a713d1%40%3Cdev.tomcat.apache.org%3E',
-                'https://lists.apache.org/thread.html/rad5d9f83f0d11fb3f8bb148d179b8a9ad7c6a17f18d70e5805a713d1@%3Cdev.tomcat.apache.org%3E',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-3711',
-                'https://rustsec.org/advisories/RUSTSEC-2021-0097.html',
-                'https://security.gentoo.org/glsa/202209-02',
-                'https://security.gentoo.org/glsa/202210-02',
-                'https://security.netapp.com/advisory/ntap-20210827-0010',
-                'https://security.netapp.com/advisory/ntap-20210827-0010/',
-                'https://security.netapp.com/advisory/ntap-20211022-0003',
-                'https://security.netapp.com/advisory/ntap-20211022-0003/',
-                'https://security.netapp.com/advisory/ntap-20240621-0006',
-                'https://security.netapp.com/advisory/ntap-20240621-0006/',
-                'https://ubuntu.com/security/notices/USN-5051-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-3711',
-                'https://www.debian.org/security/2021/dsa-4963',
-                'https://www.openssl.org/news/secadv/20210824.txt',
-                'https://www.oracle.com/security-alerts/cpuapr2022.html',
-                'https://www.oracle.com/security-alerts/cpujan2022.html',
-                'https://www.oracle.com/security-alerts/cpuoct2021.html',
-                'https://www.tenable.com/security/tns-2021-16',
-                'https://www.tenable.com/security/tns-2022-02'
-              ],
-              'severity':   'CRITICAL',
-              'suppressed': false,
-              'title':      'openssl: SM2 Decryption Buffer Overflow'
-            },
-            {
-              'cve':  'CVE-2021-23840',
-              'cvss': {
-                'bitnami': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'ghsa': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'nvd': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-190'
-              ],
-              'description':   'Calls to EVP_CipherUpdate, EVP_EncryptUpdate and EVP_DecryptUpdate may overflow the output length argument in some cases where the input length is close to the maximum permissable length for an integer on the platform. In such cases the return value from the function call will be 1 (indicating success), but the output length value will be negative. This could cause applications to behave incorrectly or crash. OpenSSL versions 1.1.1i and below are affected by this issue. Users of these versions should upgrade to OpenSSL 1.1.1j. OpenSSL versions 1.0.2x and below are affected by this issue. However OpenSSL 1.0.2 is out of support and no longer receiving public updates. Premium support customers of OpenSSL 1.0.2 should upgrade to 1.0.2y. Other users should upgrade to 1.1.1j. Fixed in OpenSSL 1.1.1j (Affected 1.1.1-1.1.1i). Fixed in OpenSSL 1.0.2y (Affected 1.0.2-1.0.2x).',
-              'diffID':        'sha256:72bbe6b5204e7df9466d6597c4888cf950f0b379bf476a76925feabf17e94aa9',
-              'fixedVersions': [
-                '1.1.1j-r0'
-              ],
-              'installedVersion': '1.1.1i-r0',
-              'packageName':      'libssl1.1',
-              'purl':             'pkg:apk/alpine/libssl1.1@1.1.1i-r0?arch=armv7&distro=3.12.3',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-23840',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=1908036',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=1930310',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=1930324',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=1934534',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=1934600',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=1939637',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=1940085',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=1965362',
-                'https://cert-portal.siemens.com/productcert/pdf/ssa-389290.pdf',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-23840',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-23841',
-                'https://errata.rockylinux.org/RLSA-2021:4424',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=6a51b9e1d0cf0bf8515f7201b68fb0a3482b3dc1',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=9b1129239f3ebb1d1c98ce9ed41d5c9476c47cb2',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=6a51b9e1d0cf0bf8515f7201b68fb0a3482b3dc1',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=9b1129239f3ebb1d1c98ce9ed41d5c9476c47cb2',
-                'https://github.com/alexcrichton/openssl-src-rs',
-                'https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA44846',
-                'https://kc.mcafee.com/corporate/index?page=content&id=SB10366',
-                'https://linux.oracle.com/cve/CVE-2021-23840.html',
-                'https://linux.oracle.com/errata/ELSA-2021-9561.html',
-                'https://lists.apache.org/thread.html/r58af02e294bd07f487e2c64ffc0a29b837db5600e33b6e698b9d696b%40%3Cissues.bookkeeper.apache.org%3E',
-                'https://lists.apache.org/thread.html/r58af02e294bd07f487e2c64ffc0a29b837db5600e33b6e698b9d696b@%3Cissues.bookkeeper.apache.org%3E',
-                'https://lists.apache.org/thread.html/rf4c02775860db415b4955778a131c2795223f61cb8c6a450893651e4%40%3Cissues.bookkeeper.apache.org%3E',
-                'https://lists.apache.org/thread.html/rf4c02775860db415b4955778a131c2795223f61cb8c6a450893651e4@%3Cissues.bookkeeper.apache.org%3E',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-23840',
-                'https://rustsec.org/advisories/RUSTSEC-2021-0057.html',
-                'https://security.gentoo.org/glsa/202103-03',
-                'https://security.netapp.com/advisory/ntap-20210219-0009',
-                'https://security.netapp.com/advisory/ntap-20210219-0009/',
-                'https://security.netapp.com/advisory/ntap-20240621-0006/',
-                'https://ubuntu.com/security/notices/USN-4738-1',
-                'https://ubuntu.com/security/notices/USN-5088-1',
-                'https://ubuntu.com/security/notices/USN-7018-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-23840',
-                'https://www.debian.org/security/2021/dsa-4855',
-                'https://www.openssl.org/news/secadv/20210216.txt',
-                'https://www.oracle.com//security-alerts/cpujul2021.html',
-                'https://www.oracle.com/security-alerts/cpuApr2021.html',
-                'https://www.oracle.com/security-alerts/cpuapr2022.html',
-                'https://www.oracle.com/security-alerts/cpujan2022.html',
-                'https://www.oracle.com/security-alerts/cpuoct2021.html',
-                'https://www.tenable.com/security/tns-2021-03',
-                'https://www.tenable.com/security/tns-2021-09',
-                'https://www.tenable.com/security/tns-2021-10'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: integer overflow in CipherUpdate'
-            },
-            {
-              'cve':  'CVE-2021-3450',
-              'cvss': {
-                'bitnami': {
-                  'v3score':  '7.4',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N'
-                },
-                'ghsa': {
-                  'v3score':  '7.4',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N'
-                },
-                'nvd': {
-                  'v3score':  '7.4',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N'
-                },
-                'redhat': {
-                  'v3score':  '7.4',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-295'
-              ],
-              'description':   'The X509_V_FLAG_X509_STRICT flag enables additional security checks of the certificates present in a certificate chain. It is not set by default. Starting from OpenSSL version 1.1.1h a check to disallow certificates in the chain that have explicitly encoded elliptic curve parameters was added as an additional strict check. An error in the implementation of this check meant that the result of a previous check to confirm that certificates in the chain are valid CA certificates was overwritten. This effectively bypasses the check that non-CA certificates must not be able to issue other certificates. If a "purpose" has been configured then there is a subsequent opportunity for checks that the certificate is a valid CA. All of the named "purpose" values implemented in libcrypto perform this check. Therefore, where a purpose is set the certificate chain will still be rejected even when the strict flag has been used. A purpose is set by default in libssl client and server certificate verification routines, but it can be overridden or removed by an application. In order to be affected, an application must explicitly set the X509_V_FLAG_X509_STRICT verification flag and either not set a purpose for the certificate verification or, in the case of TLS client or server applications, override the default purpose. OpenSSL versions 1.1.1h and newer are affected by this issue. Users of these versions should upgrade to OpenSSL 1.1.1k. OpenSSL 1.0.2 is not impacted by this issue. Fixed in OpenSSL 1.1.1k (Affected 1.1.1h-1.1.1j).',
-              'diffID':        'sha256:72bbe6b5204e7df9466d6597c4888cf950f0b379bf476a76925feabf17e94aa9',
-              'fixedVersions': [
-                '1.1.1k-r0'
-              ],
-              'installedVersion': '1.1.1i-r0',
-              'packageName':      'libssl1.1',
-              'purl':             'pkg:apk/alpine/libssl1.1@1.1.1i-r0?arch=armv7&distro=3.12.3',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2021/03/27/1',
-                'http://www.openwall.com/lists/oss-security/2021/03/27/2',
-                'http://www.openwall.com/lists/oss-security/2021/03/28/3',
-                'http://www.openwall.com/lists/oss-security/2021/03/28/4',
-                'https://access.redhat.com/security/cve/CVE-2021-3450',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=1941547',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=1941554',
-                'https://cert-portal.siemens.com/productcert/pdf/ssa-389290.pdf',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-3449',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-3450',
-                'https://errata.rockylinux.org/RLSA-2021:1024',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=2a40b7bc7b94dd7de897a74571e7024f0cf0d63b',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=2a40b7bc7b94dd7de897a74571e7024f0cf0d63b',
-                'https://github.com/alexcrichton/openssl-src-rs',
-                'https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA44845',
-                'https://kc.mcafee.com/corporate/index?page=content&id=SB10356',
-                'https://linux.oracle.com/cve/CVE-2021-3450.html',
-                'https://linux.oracle.com/errata/ELSA-2021-9151.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CCBFLLVQVILIVGZMBJL3IXZGKWQISYNP/',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/CCBFLLVQVILIVGZMBJL3IXZGKWQISYNP',
-                'https://mta.openssl.org/pipermail/openssl-announce/2021-March/000198.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-3450',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2021-0013',
-                'https://rustsec.org/advisories/RUSTSEC-2021-0056.html',
-                'https://security.FreeBSD.org/advisories/FreeBSD-SA-21:07.openssl.asc',
-                'https://security.gentoo.org/glsa/202103-03',
-                'https://security.netapp.com/advisory/ntap-20210326-0006',
-                'https://security.netapp.com/advisory/ntap-20210326-0006/',
-                'https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-openssl-2021-GHY28dJd',
-                'https://www.cve.org/CVERecord?id=CVE-2021-3450',
-                'https://www.openssl.org/news/secadv/20210325.txt',
-                'https://www.oracle.com//security-alerts/cpujul2021.html',
-                'https://www.oracle.com/security-alerts/cpuApr2021.html',
-                'https://www.oracle.com/security-alerts/cpuapr2022.html',
-                'https://www.oracle.com/security-alerts/cpujul2022.html',
-                'https://www.oracle.com/security-alerts/cpuoct2021.html',
-                'https://www.tenable.com/security/tns-2021-05',
-                'https://www.tenable.com/security/tns-2021-08',
-                'https://www.tenable.com/security/tns-2021-09'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: CA certificate check bypass with X509_V_FLAG_X509_STRICT'
-            },
-            {
-              'cve':  'CVE-2021-3712',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '7.4',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H'
-                },
-                'nvd': {
-                  'v3score':  '7.4',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.4',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-125'
-              ],
-              'description':   "ASN.1 strings are represented internally within OpenSSL as an ASN1_STRING structure which contains a buffer holding the string data and a field holding the buffer length. This contrasts with normal C strings which are repesented as a buffer for the string data which is terminated with a NUL (0) byte. Although not a strict requirement, ASN.1 strings that are parsed using OpenSSL's own \"d2i\" functions (and other similar parsing functions) as well as any string whose value has been set with the ASN1_STRING_set() function will additionally NUL terminate the byte array in the ASN1_STRING structure. However, it is possible for applications to directly construct valid ASN1_STRING structures which do not NUL terminate the byte array by directly setting the \"data\" and \"length\" fields in the ASN1_STRING array. This can also happen by using the ASN1_STRING_set0() function. Numerous OpenSSL functions that print ASN.1 data have been found to assume that the ASN1_STRING byte array will be NUL terminated, even though this is not guaranteed for strings that have been directly constructed. Where an application requests an ASN.1 structure to be printed, and where that ASN.1 structure contains ASN1_STRINGs that have been directly constructed by the application without NUL terminating the \"data\" field, then a read buffer overrun can occur. The same thing can also occur during name constraints processing of certificates (for example if a certificate has been directly constructed by the application instead of loading it via the OpenSSL parsing functions, and the certificate contains non NUL terminated ASN1_STRING structures). It can also occur in the X509_get1_email(), X509_REQ_get1_email() and X509_get1_ocsp() functions. If a malicious actor can cause an application to directly construct an ASN1_STRING and then process it through one of the affected OpenSSL functions then this issue could be hit. This might result in a crash (causing a Denial of Service attack). It could also result in the disclosure of private memory contents (such as private keys, or sensitive plaintext). Fixed in OpenSSL 1.1.1l (Affected 1.1.1-1.1.1k). Fixed in OpenSSL 1.0.2za (Affected 1.0.2-1.0.2y).",
-              'diffID':        'sha256:72bbe6b5204e7df9466d6597c4888cf950f0b379bf476a76925feabf17e94aa9',
-              'fixedVersions': [
-                '1.1.1l-r0'
-              ],
-              'installedVersion': '1.1.1i-r0',
-              'packageName':      'libssl1.1',
-              'purl':             'pkg:apk/alpine/libssl1.1@1.1.1i-r0?arch=armv7&distro=3.12.3',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2021/08/26/2',
-                'https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2021-3712.json',
-                'https://access.redhat.com/security/cve/CVE-2021-3712',
-                'https://cert-portal.siemens.com/productcert/pdf/ssa-244969.pdf',
-                'https://cert-portal.siemens.com/productcert/pdf/ssa-389290.pdf',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=94d23fcff9b2a7a8368dfe52214d5c2569882c11',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=ccb0a11145ee72b042d10593a64eaf9e8a55ec12',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=94d23fcff9b2a7a8368dfe52214d5c2569882c11',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=ccb0a11145ee72b042d10593a64eaf9e8a55ec12',
-                'https://kc.mcafee.com/corporate/index?page=content&id=SB10366',
-                'https://linux.oracle.com/cve/CVE-2021-3712.html',
-                'https://linux.oracle.com/errata/ELSA-2022-9023.html',
-                'https://lists.apache.org/thread.html/r18995de860f0e63635f3008fd2a6aca82394249476d21691e7c59c9e%40%3Cdev.tomcat.apache.org%3E',
-                'https://lists.apache.org/thread.html/r18995de860f0e63635f3008fd2a6aca82394249476d21691e7c59c9e@%3Cdev.tomcat.apache.org%3E',
-                'https://lists.apache.org/thread.html/rad5d9f83f0d11fb3f8bb148d179b8a9ad7c6a17f18d70e5805a713d1%40%3Cdev.tomcat.apache.org%3E',
-                'https://lists.apache.org/thread.html/rad5d9f83f0d11fb3f8bb148d179b8a9ad7c6a17f18d70e5805a713d1@%3Cdev.tomcat.apache.org%3E',
-                'https://lists.debian.org/debian-lts-announce/2021/09/msg00014.html',
-                'https://lists.debian.org/debian-lts-announce/2021/09/msg00021.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-3712',
-                'https://rustsec.org/advisories/RUSTSEC-2021-0098.html',
-                'https://security.gentoo.org/glsa/202209-02',
-                'https://security.gentoo.org/glsa/202210-02',
-                'https://security.netapp.com/advisory/ntap-20210827-0010',
-                'https://security.netapp.com/advisory/ntap-20210827-0010/',
-                'https://security.netapp.com/advisory/ntap-20240621-0006',
-                'https://security.netapp.com/advisory/ntap-20240621-0006/',
-                'https://ubuntu.com/security/notices/USN-5051-1',
-                'https://ubuntu.com/security/notices/USN-5051-2',
-                'https://ubuntu.com/security/notices/USN-5051-3',
-                'https://ubuntu.com/security/notices/USN-5051-4 (regression only in trusty/esm)',
-                'https://ubuntu.com/security/notices/USN-5088-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-3712',
-                'https://www.debian.org/security/2021/dsa-4963',
-                'https://www.openssl.org/news/secadv/20210824.txt',
-                'https://www.oracle.com/security-alerts/cpuapr2022.html',
-                'https://www.oracle.com/security-alerts/cpujan2022.html',
-                'https://www.oracle.com/security-alerts/cpuoct2021.html',
-                'https://www.tenable.com/security/tns-2021-16',
-                'https://www.tenable.com/security/tns-2022-02'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: Read buffer overruns processing ASN.1 strings'
-            },
-            {
-              'cve':  'CVE-2022-0778',
-              'cvss': {
-                'bitnami': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'ghsa': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'nvd': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-835'
-              ],
-              'description':   'The BN_mod_sqrt() function, which computes a modular square root, contains a bug that can cause it to loop forever for non-prime moduli. Internally this function is used when parsing certificates that contain elliptic curve public keys in compressed form or explicit elliptic curve parameters with a base point encoded in compressed form. It is possible to trigger the infinite loop by crafting a certificate that has invalid explicit curve parameters. Since certificate parsing happens prior to verification of the certificate signature, any process that parses an externally supplied certificate may thus be subject to a denial of service attack. The infinite loop can also be reached when parsing crafted private keys as they can contain explicit elliptic curve parameters. Thus vulnerable situations include: - TLS clients consuming server certificates - TLS servers consuming client certificates - Hosting providers taking certificates or private keys from customers - Certificate authorities parsing certification requests from subscribers - Anything else which parses ASN.1 elliptic curve parameters Also any other applications that use the BN_mod_sqrt() where the attacker can control the parameter values are vulnerable to this DoS issue. In the OpenSSL 1.0.2 version the public key is not parsed during initial parsing of the certificate which makes it slightly harder to trigger the infinite loop. However any operation which requires the public key from the certificate will trigger the infinite loop. In particular the attacker can use a self-signed certificate to trigger the loop during verification of the certificate signature. This issue affects OpenSSL versions 1.0.2, 1.1.1 and 3.0. It was addressed in the releases of 1.1.1n and 3.0.2 on the 15th March 2022. Fixed in OpenSSL 3.0.2 (Affected 3.0.0,3.0.1). Fixed in OpenSSL 1.1.1n (Affected 1.1.1-1.1.1m). Fixed in OpenSSL 1.0.2zd (Affected 1.0.2-1.0.2zc).',
-              'diffID':        'sha256:72bbe6b5204e7df9466d6597c4888cf950f0b379bf476a76925feabf17e94aa9',
-              'fixedVersions': [
-                '1.1.1n-r0'
-              ],
-              'installedVersion': '1.1.1i-r0',
-              'packageName':      'libssl1.1',
-              'purl':             'pkg:apk/alpine/libssl1.1@1.1.1i-r0?arch=armv7&distro=3.12.3',
-              'references':       [
-                'http://packetstormsecurity.com/files/167344/OpenSSL-1.0.2-1.1.1-3.0-BN_mod_sqrt-Infinite-Loop.html',
-                'http://seclists.org/fulldisclosure/2022/May/33',
-                'http://seclists.org/fulldisclosure/2022/May/35',
-                'http://seclists.org/fulldisclosure/2022/May/38',
-                'https://access.redhat.com/errata/RHSA-2022:5326',
-                'https://access.redhat.com/security/cve/CVE-2022-0778',
-                'https://bugzilla.redhat.com/2062202',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2062202',
-                'https://cert-portal.siemens.com/productcert/pdf/ssa-712929.pdf',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-0778',
-                'https://errata.almalinux.org/8/ALSA-2022-5326.html',
-                'https://errata.rockylinux.org/RLSA-2022:4899',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=3118eb64934499d93db3230748a452351d1d9a65',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=380085481c64de749a6dd25cdf0bcf4360b30f83',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=a466912611aa6cbdf550cd10601390e587451246',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=3118eb64934499d93db3230748a452351d1d9a65',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=380085481c64de749a6dd25cdf0bcf4360b30f83',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=a466912611aa6cbdf550cd10601390e587451246',
-                'https://linux.oracle.com/cve/CVE-2022-0778.html',
-                'https://linux.oracle.com/errata/ELSA-2022-9272.html',
-                'https://lists.debian.org/debian-lts-announce/2022/03/msg00023.html',
-                'https://lists.debian.org/debian-lts-announce/2022/03/msg00024.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/323SNN6ZX7PRJJWP2BUAFLPUAE42XWLZ',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/323SNN6ZX7PRJJWP2BUAFLPUAE42XWLZ/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GDB3GQVJPXJE7X5C5JN6JAA4XUDWD6E6',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GDB3GQVJPXJE7X5C5JN6JAA4XUDWD6E6/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/W6K3PR542DXWLEFFMFIDMME4CWMHJRMG',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/W6K3PR542DXWLEFFMFIDMME4CWMHJRMG/',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/323SNN6ZX7PRJJWP2BUAFLPUAE42XWLZ',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/GDB3GQVJPXJE7X5C5JN6JAA4XUDWD6E6',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/W6K3PR542DXWLEFFMFIDMME4CWMHJRMG',
-                'https://nvd.nist.gov/vuln/detail/CVE-2022-0778',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2022-0002',
-                'https://rustsec.org/advisories/RUSTSEC-2022-0014.html',
-                'https://security.gentoo.org/glsa/202210-02',
-                'https://security.netapp.com/advisory/ntap-20220321-0002',
-                'https://security.netapp.com/advisory/ntap-20220321-0002/',
-                'https://security.netapp.com/advisory/ntap-20220429-0005',
-                'https://security.netapp.com/advisory/ntap-20220429-0005/',
-                'https://security.netapp.com/advisory/ntap-20240621-0006',
-                'https://security.netapp.com/advisory/ntap-20240621-0006/',
-                'https://support.apple.com/kb/HT213255',
-                'https://support.apple.com/kb/HT213256',
-                'https://support.apple.com/kb/HT213257',
-                'https://ubuntu.com/security/notices/USN-5328-1',
-                'https://ubuntu.com/security/notices/USN-5328-2',
-                'https://ubuntu.com/security/notices/USN-6457-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2022-0778',
-                'https://www.debian.org/security/2022/dsa-5103',
-                'https://www.openssl.org/news/secadv/20220315.txt',
-                'https://www.oracle.com/security-alerts/cpuapr2022.html',
-                'https://www.oracle.com/security-alerts/cpujul2022.html',
-                'https://www.tenable.com/security/tns-2022-06',
-                'https://www.tenable.com/security/tns-2022-07',
-                'https://www.tenable.com/security/tns-2022-08',
-                'https://www.tenable.com/security/tns-2022-09'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: Infinite loop in BN_mod_sqrt() reachable when parsing certificates'
-            },
-            {
-              'cve':  'CVE-2021-23841',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'nvd': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-476'
-              ],
-              'description':   'The OpenSSL public API function X509_issuer_and_serial_hash() attempts to create a unique hash value based on the issuer and serial number data contained within an X509 certificate. However it fails to correctly handle any errors that may occur while parsing the issuer field (which might occur if the issuer field is maliciously constructed). This may subsequently result in a NULL pointer deref and a crash leading to a potential denial of service attack. The function X509_issuer_and_serial_hash() is never directly called by OpenSSL itself so applications are only vulnerable if they use this function directly and they use it on certificates that may have been obtained from untrusted sources. OpenSSL versions 1.1.1i and below are affected by this issue. Users of these versions should upgrade to OpenSSL 1.1.1j. OpenSSL versions 1.0.2x and below are affected by this issue. However OpenSSL 1.0.2 is out of support and no longer receiving public updates. Premium support customers of OpenSSL 1.0.2 should upgrade to 1.0.2y. Other users should upgrade to 1.1.1j. Fixed in OpenSSL 1.1.1j (Affected 1.1.1-1.1.1i). Fixed in OpenSSL 1.0.2y (Affected 1.0.2-1.0.2x).',
-              'diffID':        'sha256:72bbe6b5204e7df9466d6597c4888cf950f0b379bf476a76925feabf17e94aa9',
-              'fixedVersions': [
-                '1.1.1j-r0'
-              ],
-              'installedVersion': '1.1.1i-r0',
-              'packageName':      'libssl1.1',
-              'purl':             'pkg:apk/alpine/libssl1.1@1.1.1i-r0?arch=armv7&distro=3.12.3',
-              'references':       [
-                'http://seclists.org/fulldisclosure/2021/May/67',
-                'http://seclists.org/fulldisclosure/2021/May/68',
-                'http://seclists.org/fulldisclosure/2021/May/70',
-                'https://access.redhat.com/security/cve/CVE-2021-23841',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=1908036',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=1930310',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=1930324',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=1934534',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=1934600',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=1939637',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=1940085',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=1965362',
-                'https://cert-portal.siemens.com/productcert/pdf/ssa-637483.pdf',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-23840',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-23841',
-                'https://errata.rockylinux.org/RLSA-2021:4424',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=122a19ab48091c657f7cb1fb3af9fc07bd557bbf',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=8252ee4d90f3f2004d3d0aeeed003ad49c9a7807',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=122a19ab48091c657f7cb1fb3af9fc07bd557bbf',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=6a51b9e1d0cf0bf8515f7201b68fb0a3482b3dc1',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=8252ee4d90f3f2004d3d0aeeed003ad49c9a7807',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=9b1129239f3ebb1d1c98ce9ed41d5c9476c47cb2',
-                'https://github.com/alexcrichton/openssl-src-rs',
-                'https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA44846',
-                'https://linux.oracle.com/cve/CVE-2021-23841.html',
-                'https://linux.oracle.com/errata/ELSA-2021-9561.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-23841',
-                'https://rustsec.org/advisories/RUSTSEC-2021-0058',
-                'https://rustsec.org/advisories/RUSTSEC-2021-0058.html',
-                'https://security.gentoo.org/glsa/202103-03',
-                'https://security.netapp.com/advisory/ntap-20210219-0009',
-                'https://security.netapp.com/advisory/ntap-20210219-0009/',
-                'https://security.netapp.com/advisory/ntap-20210513-0002',
-                'https://security.netapp.com/advisory/ntap-20210513-0002/',
-                'https://security.netapp.com/advisory/ntap-20240621-0006/',
-                'https://support.apple.com/kb/HT212528',
-                'https://support.apple.com/kb/HT212529',
-                'https://support.apple.com/kb/HT212534',
-                'https://ubuntu.com/security/notices/USN-4738-1',
-                'https://ubuntu.com/security/notices/USN-4745-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-23841',
-                'https://www.debian.org/security/2021/dsa-4855',
-                'https://www.openssl.org/news/secadv/20210216.txt',
-                'https://www.oracle.com//security-alerts/cpujul2021.html',
-                'https://www.oracle.com/security-alerts/cpuApr2021.html',
-                'https://www.oracle.com/security-alerts/cpuapr2022.html',
-                'https://www.oracle.com/security-alerts/cpuoct2021.html',
-                'https://www.tenable.com/security/tns-2021-03',
-                'https://www.tenable.com/security/tns-2021-09'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: NULL pointer dereference in X509_issuer_and_serial_hash()'
-            },
-            {
-              'cve':  'CVE-2021-3449',
-              'cvss': {
-                'bitnami': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'ghsa': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'nvd': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-476'
-              ],
-              'description':   'An OpenSSL TLS server may crash if sent a maliciously crafted renegotiation ClientHello message from a client. If a TLSv1.2 renegotiation ClientHello omits the signature_algorithms extension (where it was present in the initial ClientHello), but includes a signature_algorithms_cert extension then a NULL pointer dereference will result, leading to a crash and a denial of service attack. A server is only vulnerable if it has TLSv1.2 and renegotiation enabled (which is the default configuration). OpenSSL TLS clients are not impacted by this issue. All OpenSSL 1.1.1 versions are affected by this issue. Users of these versions should upgrade to OpenSSL 1.1.1k. OpenSSL 1.0.2 is not impacted by this issue. Fixed in OpenSSL 1.1.1k (Affected 1.1.1-1.1.1j).',
-              'diffID':        'sha256:72bbe6b5204e7df9466d6597c4888cf950f0b379bf476a76925feabf17e94aa9',
-              'fixedVersions': [
-                '1.1.1k-r0'
-              ],
-              'installedVersion': '1.1.1i-r0',
-              'packageName':      'libssl1.1',
-              'purl':             'pkg:apk/alpine/libssl1.1@1.1.1i-r0?arch=armv7&distro=3.12.3',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2021/03/27/1',
-                'http://www.openwall.com/lists/oss-security/2021/03/27/2',
-                'http://www.openwall.com/lists/oss-security/2021/03/28/3',
-                'http://www.openwall.com/lists/oss-security/2021/03/28/4',
-                'https://access.redhat.com/security/cve/CVE-2021-3449',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=1941547',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=1941554',
-                'https://cert-portal.siemens.com/productcert/pdf/ssa-389290.pdf',
-                'https://cert-portal.siemens.com/productcert/pdf/ssa-772220.pdf',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-3449',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-3450',
-                'https://errata.rockylinux.org/RLSA-2021:1024',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=fb9fa6b51defd48157eeb207f52181f735d96148',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=fb9fa6b51defd48157eeb207f52181f735d96148',
-                'https://github.com/alexcrichton/openssl-src-rs',
-                'https://github.com/nodejs/node/pull/38083',
-                'https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA44845',
-                'https://kc.mcafee.com/corporate/index?page=content&id=SB10356',
-                'https://linux.oracle.com/cve/CVE-2021-3449.html',
-                'https://linux.oracle.com/errata/ELSA-2021-9151.html',
-                'https://lists.debian.org/debian-lts-announce/2021/08/msg00029.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CCBFLLVQVILIVGZMBJL3IXZGKWQISYNP/',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/CCBFLLVQVILIVGZMBJL3IXZGKWQISYNP',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-3449',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2021-0013',
-                'https://rustsec.org/advisories/RUSTSEC-2021-0055',
-                'https://rustsec.org/advisories/RUSTSEC-2021-0055.html',
-                'https://security.FreeBSD.org/advisories/FreeBSD-SA-21:07.openssl.asc',
-                'https://security.gentoo.org/glsa/202103-03',
-                'https://security.netapp.com/advisory/ntap-20210326-0006',
-                'https://security.netapp.com/advisory/ntap-20210326-0006/',
-                'https://security.netapp.com/advisory/ntap-20210513-0002',
-                'https://security.netapp.com/advisory/ntap-20210513-0002/',
-                'https://security.netapp.com/advisory/ntap-20240621-0006/',
-                'https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-openssl-2021-GHY28dJd',
-                'https://ubuntu.com/security/notices/USN-4891-1',
-                'https://ubuntu.com/security/notices/USN-5038-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-3449',
-                'https://www.debian.org/security/2021/dsa-4875',
-                'https://www.openssl.org/news/secadv/20210325.txt',
-                'https://www.oracle.com//security-alerts/cpujul2021.html',
-                'https://www.oracle.com/security-alerts/cpuApr2021.html',
-                'https://www.oracle.com/security-alerts/cpuapr2022.html',
-                'https://www.oracle.com/security-alerts/cpujul2022.html',
-                'https://www.oracle.com/security-alerts/cpuoct2021.html',
-                'https://www.tenable.com/security/tns-2021-05',
-                'https://www.tenable.com/security/tns-2021-06',
-                'https://www.tenable.com/security/tns-2021-09',
-                'https://www.tenable.com/security/tns-2021-10'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: NULL pointer dereference in signature_algorithms processing'
-            },
-            {
-              'cve':  'CVE-2021-23839',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '3.7',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N'
-                },
-                'redhat': {
-                  'v3score':  '3.7',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-327'
-              ],
-              'description':   'OpenSSL 1.0.2 supports SSLv2. If a client attempts to negotiate SSLv2 with a server that is configured to support both SSLv2 and more recent SSL and TLS versions then a check is made for a version rollback attack when unpadding an RSA signature. Clients that support SSL or TLS versions greater than SSLv2 are supposed to use a special form of padding. A server that supports greater than SSLv2 is supposed to reject connection attempts from a client where this special form of padding is present, because this indicates that a version rollback has occurred (i.e. both client and server support greater than SSLv2, and yet this is the version that is being requested). The implementation of this padding check inverted the logic so that the connection attempt is accepted if the padding is present, and rejected if it is absent. This means that such as server will accept a connection if a version rollback attack has occurred. Further the server will erroneously reject a connection if a normal SSLv2 connection attempt is made. Only OpenSSL 1.0.2 servers from version 1.0.2s to 1.0.2x are affected by this issue. In order to be vulnerable a 1.0.2 server must: 1) have configured SSLv2 support at compile time (this is off by default), 2) have configured SSLv2 support at runtime (this is off by default), 3) have configured SSLv2 ciphersuites (these are not in the default ciphersuite list) OpenSSL 1.1.1 does not have SSLv2 support and therefore is not vulnerable to this issue. The underlying error is in the implementation of the RSA_padding_check_SSLv23() function. This also affects the RSA_SSLV23_PADDING padding mode used by various other functions. Although 1.1.1 does not support SSLv2 the RSA_padding_check_SSLv23() function still exists, as does the RSA_SSLV23_PADDING padding mode. Applications that directly call that function or use that padding mode will encounter this issue. However since there is no support for the SSLv2 protocol in 1.1.1 this is considered a bug and not a security issue in that version. OpenSSL 1.0.2 is out of support and no longer receiving public updates. Premium support customers of OpenSSL 1.0.2 should upgrade to 1.0.2y. Other users should upgrade to 1.1.1j. Fixed in OpenSSL 1.0.2y (Affected 1.0.2s-1.0.2x).',
-              'diffID':        'sha256:72bbe6b5204e7df9466d6597c4888cf950f0b379bf476a76925feabf17e94aa9',
-              'fixedVersions': [
-                '1.1.1j-r0'
-              ],
-              'installedVersion': '1.1.1i-r0',
-              'packageName':      'libssl1.1',
-              'purl':             'pkg:apk/alpine/libssl1.1@1.1.1i-r0?arch=armv7&distro=3.12.3',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-23839',
-                'https://cert-portal.siemens.com/productcert/pdf/ssa-637483.pdf',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=30919ab80a478f2d81f2e9acdcca3fa4740cd547',
-                'https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA44846',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-23839',
-                'https://security.netapp.com/advisory/ntap-20210219-0009/',
-                'https://security.netapp.com/advisory/ntap-20240621-0006/',
-                'https://www.cve.org/CVERecord?id=CVE-2021-23839',
-                'https://www.openssl.org/news/secadv/20210216.txt',
-                'https://www.oracle.com//security-alerts/cpujul2021.html',
-                'https://www.oracle.com/security-alerts/cpuApr2021.html',
-                'https://www.oracle.com/security-alerts/cpuapr2022.html',
-                'https://www.oracle.com/security-alerts/cpuoct2021.html'
-              ],
-              'severity':   'LOW',
-              'suppressed': false,
-              'title':      'openssl: incorrect SSLv2 rollback protection'
-            },
-            {
-              'cve':  'CVE-2021-28831',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-755'
-              ],
-              'description':   'decompress_gunzip.c in BusyBox through 1.32.1 mishandles the error bit on the huft_build result pointer, with a resultant invalid free or segmentation fault, via malformed gzip data.',
-              'diffID':        'sha256:72bbe6b5204e7df9466d6597c4888cf950f0b379bf476a76925feabf17e94aa9',
-              'fixedVersions': [
-                '1.31.1-r20'
-              ],
-              'installedVersion': '1.31.1-r19',
-              'packageName':      'ssl_client',
-              'purl':             'pkg:apk/alpine/ssl_client@1.31.1-r19?arch=armv7&distro=3.12.3',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-28831',
-                'https://git.busybox.net/busybox/commit/?id=f25d254dfd4243698c31a4f3153d4ac72aa9e9bd',
-                'https://lists.debian.org/debian-lts-announce/2021/04/msg00001.html',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/3UDQGJRECXFS5EZVDH2OI45FMO436AC4/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/Z7ZIFKPRR32ZYA3WAA2NXFA3QHHOU6FJ/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZASBW7QRRLY5V2R44MQ4QQM4CZIDHM2U/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-28831',
-                'https://security.gentoo.org/glsa/202105-09',
-                'https://security.netapp.com/advisory/ntap-20250509-0005/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://ubuntu.com/security/notices/USN-5179-2',
-                'https://ubuntu.com/security/notices/USN-6335-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-28831'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: invalid free or segmentation fault via malformed gzip data'
-            },
-            {
-              'cve':  'CVE-2021-42378',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the getvar_i function",
-              'diffID':        'sha256:72bbe6b5204e7df9466d6597c4888cf950f0b379bf476a76925feabf17e94aa9',
-              'fixedVersions': [
-                '1.31.1-r21'
-              ],
-              'installedVersion': '1.31.1-r19',
-              'packageName':      'ssl_client',
-              'purl':             'pkg:apk/alpine/ssl_client@1.31.1-r19?arch=armv7&distro=3.12.3',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42378',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42378',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42378'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the getvar_i()'
-            },
-            {
-              'cve':  'CVE-2021-42379',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the next_input_file function",
-              'diffID':        'sha256:72bbe6b5204e7df9466d6597c4888cf950f0b379bf476a76925feabf17e94aa9',
-              'fixedVersions': [
-                '1.31.1-r21'
-              ],
-              'installedVersion': '1.31.1-r19',
-              'packageName':      'ssl_client',
-              'purl':             'pkg:apk/alpine/ssl_client@1.31.1-r19?arch=armv7&distro=3.12.3',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42379',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42379',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42379'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the next_input_file()'
-            },
-            {
-              'cve':  'CVE-2021-42380',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the clrvar function",
-              'diffID':        'sha256:72bbe6b5204e7df9466d6597c4888cf950f0b379bf476a76925feabf17e94aa9',
-              'fixedVersions': [
-                '1.31.1-r21'
-              ],
-              'installedVersion': '1.31.1-r19',
-              'packageName':      'ssl_client',
-              'purl':             'pkg:apk/alpine/ssl_client@1.31.1-r19?arch=armv7&distro=3.12.3',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42380',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42380',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42380'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the clrvar()'
-            },
-            {
-              'cve':  'CVE-2021-42381',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the hash_init function",
-              'diffID':        'sha256:72bbe6b5204e7df9466d6597c4888cf950f0b379bf476a76925feabf17e94aa9',
-              'fixedVersions': [
-                '1.31.1-r21'
-              ],
-              'installedVersion': '1.31.1-r19',
-              'packageName':      'ssl_client',
-              'purl':             'pkg:apk/alpine/ssl_client@1.31.1-r19?arch=armv7&distro=3.12.3',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42381',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42381',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42381'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the hash_init()'
-            },
-            {
-              'cve':  'CVE-2021-42382',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the getvar_s function",
-              'diffID':        'sha256:72bbe6b5204e7df9466d6597c4888cf950f0b379bf476a76925feabf17e94aa9',
-              'fixedVersions': [
-                '1.31.1-r21'
-              ],
-              'installedVersion': '1.31.1-r19',
-              'packageName':      'ssl_client',
-              'purl':             'pkg:apk/alpine/ssl_client@1.31.1-r19?arch=armv7&distro=3.12.3',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42382',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42382',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42382'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the getvar_s()'
-            },
-            {
-              'cve':  'CVE-2021-42383',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the evaluate function",
-              'diffID':        'sha256:72bbe6b5204e7df9466d6597c4888cf950f0b379bf476a76925feabf17e94aa9',
-              'fixedVersions': [
-                '1.31.1-r21'
-              ],
-              'installedVersion': '1.31.1-r19',
-              'packageName':      'ssl_client',
-              'purl':             'pkg:apk/alpine/ssl_client@1.31.1-r19?arch=armv7&distro=3.12.3',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42383',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42383',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42383'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the evaluate()'
-            },
-            {
-              'cve':  'CVE-2021-42384',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the handle_special function",
-              'diffID':        'sha256:72bbe6b5204e7df9466d6597c4888cf950f0b379bf476a76925feabf17e94aa9',
-              'fixedVersions': [
-                '1.31.1-r21'
-              ],
-              'installedVersion': '1.31.1-r19',
-              'packageName':      'ssl_client',
-              'purl':             'pkg:apk/alpine/ssl_client@1.31.1-r19?arch=armv7&distro=3.12.3',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42384',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42384',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42384'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the handle_special()'
-            },
-            {
-              'cve':  'CVE-2021-42385',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the evaluate function",
-              'diffID':        'sha256:72bbe6b5204e7df9466d6597c4888cf950f0b379bf476a76925feabf17e94aa9',
-              'fixedVersions': [
-                '1.31.1-r21'
-              ],
-              'installedVersion': '1.31.1-r19',
-              'packageName':      'ssl_client',
-              'purl':             'pkg:apk/alpine/ssl_client@1.31.1-r19?arch=armv7&distro=3.12.3',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42385',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42385',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42385'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the evaluate()'
-            },
-            {
-              'cve':  'CVE-2021-42386',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the nvalloc function",
-              'diffID':        'sha256:72bbe6b5204e7df9466d6597c4888cf950f0b379bf476a76925feabf17e94aa9',
-              'fixedVersions': [
-                '1.31.1-r21'
-              ],
-              'installedVersion': '1.31.1-r19',
-              'packageName':      'ssl_client',
-              'purl':             'pkg:apk/alpine/ssl_client@1.31.1-r19?arch=armv7&distro=3.12.3',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42386',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42386',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42386'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the nvalloc()'
-            },
-            {
-              'cve':  'CVE-2022-28391',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '8.8',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-88'
-              ],
-              'description':   "BusyBox through 1.35.0 allows remote attackers to execute arbitrary code if netstat is used to print a DNS PTR record's value to a VT compatible terminal. Alternatively, the attacker could choose to change the terminal's colors.",
-              'diffID':        'sha256:72bbe6b5204e7df9466d6597c4888cf950f0b379bf476a76925feabf17e94aa9',
-              'fixedVersions': [
-                '1.31.1-r22'
-              ],
-              'installedVersion': '1.31.1-r19',
-              'packageName':      'ssl_client',
-              'purl':             'pkg:apk/alpine/ssl_client@1.31.1-r19?arch=armv7&distro=3.12.3',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2022-28391',
-                'https://git.alpinelinux.org/aports/plain/main/busybox/0001-libbb-sockaddr2str-ensure-only-printable-characters-.patch',
-                'https://git.alpinelinux.org/aports/plain/main/busybox/0002-nslookup-sanitize-all-printed-strings-with-printable.patch',
-                'https://gitlab.alpinelinux.org/alpine/aports/-/issues/13661',
-                'https://nvd.nist.gov/vuln/detail/CVE-2022-28391',
-                'https://www.cve.org/CVERecord?id=CVE-2022-28391'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: remote attackers may execute arbitrary code if netstat is used'
-            },
-            {
-              'cve':  'CVE-2021-42374',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '5.7',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-125'
-              ],
-              'description':   "An out-of-bounds heap read in Busybox's unlzma applet leads to information leak and denial of service when crafted LZMA-compressed input is decompressed. This can be triggered by any applet/format that",
-              'diffID':        'sha256:72bbe6b5204e7df9466d6597c4888cf950f0b379bf476a76925feabf17e94aa9',
-              'fixedVersions': [
-                '1.31.1-r21'
-              ],
-              'installedVersion': '1.31.1-r19',
-              'packageName':      'ssl_client',
-              'purl':             'pkg:apk/alpine/ssl_client@1.31.1-r19?arch=armv7&distro=3.12.3',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42374',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42374',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42374'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'busybox: out-of-bounds read in unlzma applet leads to information leak and denial of service when crafted LZMA-compressed input is decompressed'
-            },
-            {
-              'cve':  'CVE-2022-37434',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '9.8',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-787',
-                'CWE-120'
-              ],
-              'description':   'zlib through 1.2.12 has a heap-based buffer over-read or buffer overflow in inflate in inflate.c via a large gzip header extra field. NOTE: only applications that call inflateGetHeader are affected. Some common applications bundle the affected zlib source code but may be unable to call inflateGetHeader (e.g., see the nodejs/node reference).',
-              'diffID':        'sha256:72bbe6b5204e7df9466d6597c4888cf950f0b379bf476a76925feabf17e94aa9',
-              'fixedVersions': [
-                '1.2.12-r2'
-              ],
-              'installedVersion': '1.2.11-r3',
-              'packageName':      'zlib',
-              'purl':             'pkg:apk/alpine/zlib@1.2.11-r3?arch=armv7&distro=3.12.3',
-              'references':       [
-                'http://seclists.org/fulldisclosure/2022/Oct/37',
-                'http://seclists.org/fulldisclosure/2022/Oct/38',
-                'http://seclists.org/fulldisclosure/2022/Oct/41',
-                'http://seclists.org/fulldisclosure/2022/Oct/42',
-                'http://www.openwall.com/lists/oss-security/2022/08/05/2',
-                'http://www.openwall.com/lists/oss-security/2022/08/09/1',
-                'https://access.redhat.com/errata/RHSA-2022:8291',
-                'https://access.redhat.com/security/cve/CVE-2022-37434',
-                'https://bugzilla.redhat.com/2116639',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2053198',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2077431',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2081296',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2116639',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-37434',
-                'https://errata.almalinux.org/9/ALSA-2022-8291.html',
-                'https://errata.rockylinux.org/RLSA-2022:8291',
-                'https://github.com/curl/curl/issues/9271',
-                'https://github.com/ivd38/zlib_overflow',
-                'https://github.com/madler/zlib/blob/21767c654d31d2dccdde4330529775c6c5fd5389/zlib.h#L1062-L1063',
-                'https://github.com/madler/zlib/commit/1eb7682f845ac9e9bf9ae35bbfb3bad5dacbd91d',
-                'https://github.com/madler/zlib/commit/eff308af425b67093bab25f80f1ae950166bece1',
-                'https://github.com/nodejs/node/blob/75b68c6e4db515f76df73af476eccf382bbcb00a/deps/zlib/inflate.c#L762-L764',
-                'https://linux.oracle.com/cve/CVE-2022-37434.html',
-                'https://linux.oracle.com/errata/ELSA-2023-1095.html',
-                'https://lists.debian.org/debian-lts-announce/2022/09/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JWN4VE3JQR4O2SOUS5TXNLANRPMHWV4I/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NMBOJ77A7T7PQCARMDUK75TE6LLESZ3O/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PAVPQNCG3XRLCLNSQRM3KAN5ZFMVXVTY/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/X5U7OTKZSHY2I3ZFJSR2SHFHW72RKGDK/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YRQAI7H4M4RQZ2IWZUEEXECBE5D56BH2/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2022-37434',
-                'https://security.netapp.com/advisory/ntap-20220901-0005/',
-                'https://security.netapp.com/advisory/ntap-20230427-0007/',
-                'https://support.apple.com/kb/HT213488',
-                'https://support.apple.com/kb/HT213489',
-                'https://support.apple.com/kb/HT213490',
-                'https://support.apple.com/kb/HT213491',
-                'https://support.apple.com/kb/HT213493',
-                'https://support.apple.com/kb/HT213494',
-                'https://ubuntu.com/security/notices/USN-5570-1',
-                'https://ubuntu.com/security/notices/USN-5570-2',
-                'https://ubuntu.com/security/notices/USN-5573-1',
-                'https://ubuntu.com/security/notices/USN-6736-1',
-                'https://ubuntu.com/security/notices/USN-6736-2',
-                'https://www.cve.org/CVERecord?id=CVE-2022-37434',
-                'https://www.debian.org/security/2022/dsa-5218'
-              ],
-              'severity':   'CRITICAL',
-              'suppressed': false,
-              'title':      'zlib: heap-based buffer over-read and overflow in inflate() in inflate.c via a large gzip header extra field'
-            },
-            {
-              'cve':  'CVE-2018-25032',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'nvd': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '8.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-787'
-              ],
-              'description':   'zlib before 1.2.12 allows memory corruption when deflating (i.e., when compressing) if the input has many distant matches.',
-              'diffID':        'sha256:72bbe6b5204e7df9466d6597c4888cf950f0b379bf476a76925feabf17e94aa9',
-              'fixedVersions': [
-                '1.2.12-r0'
-              ],
-              'installedVersion': '1.2.11-r3',
-              'packageName':      'zlib',
-              'purl':             'pkg:apk/alpine/zlib@1.2.11-r3?arch=armv7&distro=3.12.3',
-              'references':       [
-                'http://seclists.org/fulldisclosure/2022/May/33',
-                'http://seclists.org/fulldisclosure/2022/May/35',
-                'http://seclists.org/fulldisclosure/2022/May/38',
-                'http://www.openwall.com/lists/oss-security/2022/03/25/2',
-                'http://www.openwall.com/lists/oss-security/2022/03/26/1',
-                'https://access.redhat.com/errata/RHSA-2022:8420',
-                'https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-25032.json',
-                'https://access.redhat.com/security/cve/CVE-2018-25032',
-                'https://bugzilla.redhat.com/2067945',
-                'https://cert-portal.siemens.com/productcert/pdf/ssa-333517.pdf',
-                'https://errata.almalinux.org/9/ALSA-2022-8420.html',
-                'https://github.com/advisories/GHSA-jc36-42cf-vqwj',
-                'https://github.com/madler/zlib/commit/5c44459c3b28a9bd3283aaceab7c615f8020c531',
-                'https://github.com/madler/zlib/compare/v1.2.11...v1.2.12',
-                'https://github.com/madler/zlib/issues/605',
-                'https://github.com/rubysec/ruby-advisory-db/blob/master/gems/nokogiri/CVE-2018-25032.yml',
-                'https://github.com/sparklemotion/nokogiri/releases/tag/v1.13.4',
-                'https://github.com/sparklemotion/nokogiri/security/advisories/GHSA-v6gp-9mmm-c6p5',
-                'https://groups.google.com/g/ruby-security-ann/c/vX7qSjsvWis/m/TJWN4oOKBwAJ',
-                'https://linux.oracle.com/cve/CVE-2018-25032.html',
-                'https://linux.oracle.com/errata/ELSA-2022-9565.html',
-                'https://lists.debian.org/debian-lts-announce/2022/04/msg00000.html',
-                'https://lists.debian.org/debian-lts-announce/2022/05/msg00008.html',
-                'https://lists.debian.org/debian-lts-announce/2022/09/msg00023.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DCZFIJBJTZ7CL5QXBFKTQ22Q26VINRUF/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DF62MVMH3QUGMBDCB3DY2ERQ6EBHTADB/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JZZPTWRYQULAOL3AW7RZJNVZ2UONXCV4/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NS2D2GFPFGOJUL4WQ3DUAY7HF4VWQ77F/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VOKNP2L734AEL47NRYGVZIKEFOUBQY5Y/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/XOKFMSNQ5D5WGMALBNBXU3GE442V74WU/',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/DCZFIJBJTZ7CL5QXBFKTQ22Q26VINRUF',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/DCZFIJBJTZ7CL5QXBFKTQ22Q26VINRUF/',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/DF62MVMH3QUGMBDCB3DY2ERQ6EBHTADB',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/DF62MVMH3QUGMBDCB3DY2ERQ6EBHTADB/',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/JZZPTWRYQULAOL3AW7RZJNVZ2UONXCV4',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/JZZPTWRYQULAOL3AW7RZJNVZ2UONXCV4/',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/NS2D2GFPFGOJUL4WQ3DUAY7HF4VWQ77F',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/NS2D2GFPFGOJUL4WQ3DUAY7HF4VWQ77F/',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/VOKNP2L734AEL47NRYGVZIKEFOUBQY5Y',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/VOKNP2L734AEL47NRYGVZIKEFOUBQY5Y/',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/XOKFMSNQ5D5WGMALBNBXU3GE442V74WU',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/XOKFMSNQ5D5WGMALBNBXU3GE442V74WU/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2018-25032',
-                'https://security.gentoo.org/glsa/202210-42',
-                'https://security.netapp.com/advisory/ntap-20220526-0009',
-                'https://security.netapp.com/advisory/ntap-20220526-0009/',
-                'https://security.netapp.com/advisory/ntap-20220729-0004',
-                'https://security.netapp.com/advisory/ntap-20220729-0004/',
-                'https://support.apple.com/kb/HT213255',
-                'https://support.apple.com/kb/HT213256',
-                'https://support.apple.com/kb/HT213257',
-                'https://ubuntu.com/security/notices/USN-5355-1',
-                'https://ubuntu.com/security/notices/USN-5355-2',
-                'https://ubuntu.com/security/notices/USN-5359-1',
-                'https://ubuntu.com/security/notices/USN-5359-2',
-                'https://ubuntu.com/security/notices/USN-5739-1',
-                'https://ubuntu.com/security/notices/USN-6736-1',
-                'https://ubuntu.com/security/notices/USN-6736-2',
-                'https://www.cve.org/CVERecord?id=CVE-2018-25032',
-                'https://www.debian.org/security/2022/dsa-5111',
-                'https://www.openwall.com/lists/oss-security/2022/03/24/1',
-                'https://www.openwall.com/lists/oss-security/2022/03/28/1',
-                'https://www.openwall.com/lists/oss-security/2022/03/28/3',
-                'https://www.oracle.com/security-alerts/cpujul2022.html'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'zlib: A flaw found in zlib when compressing (not decompressing) certain inputs'
-            }
-          ]
-        }
-      ],
-      'summary': {
-        'critical':   4,
-        'high':       32,
-        'low':        2,
-        'medium':     6,
-        'suppressed': 0,
-        'unknown':    0
-      }
-    }
-  },
-  {
-    'id':    'default/c3a725db65daacd9e6736d67a53aed00e526fe70690e03a1ba4586f32ae1cbed',
-    'type':  'storage.sbomscanner.kubewarden.io.vulnerabilityreport',
-    'links': {
-      'patch':  'https://localhost:8005/v1/storage.sbomscanner.kubewarden.io.vulnerabilityreports/default/c3a725db65daacd9e6736d67a53aed00e526fe70690e03a1ba4586f32ae1cbed',
-      'remove': 'https://localhost:8005/v1/storage.sbomscanner.kubewarden.io.vulnerabilityreports/default/c3a725db65daacd9e6736d67a53aed00e526fe70690e03a1ba4586f32ae1cbed',
-      'self':   'https://localhost:8005/v1/storage.sbomscanner.kubewarden.io.vulnerabilityreports/default/c3a725db65daacd9e6736d67a53aed00e526fe70690e03a1ba4586f32ae1cbed',
-      'update': 'https://localhost:8005/v1/storage.sbomscanner.kubewarden.io.vulnerabilityreports/default/c3a725db65daacd9e6736d67a53aed00e526fe70690e03a1ba4586f32ae1cbed',
-      'view':   'https://localhost:8005/apis/storage.sbomscanner.kubewarden.io/v1alpha1/namespaces/default/vulnerabilityreports/c3a725db65daacd9e6736d67a53aed00e526fe70690e03a1ba4586f32ae1cbed'
-    },
-    'apiVersion':    'storage.sbomscanner.kubewarden.io/v1alpha1',
-    'imageMetadata': {
-      'digest':      'sha256:d04f568d1401e6bcc2c34bd81ac1035ba1d8fc3a03b92c78e84cec61e028d6ea',
-      'platform':    'linux/s390x',
-      'registry':    'lsong-demo1',
-      'registryURI': 'registry-1.docker.io',
-      'repository':  'library/alpine',
-      'tag':         '3.13.6'
-    },
-    'kind':     'VulnerabilityReport',
-    'metadata': {
-      'creationTimestamp': '2026-01-14T18:51:17Z',
-      'fields':            [
-        'c3a725db65daacd9e6736d67a53aed00e526fe70690e03a1ba4586f32ae1cbed',
-        'registry-1.docker.io/library/alpine:3.13.6',
-        'linux/s390x',
-        '32 (0 suppressed)'
-      ],
-      'labels': {
-        'app.kubernetes.io/managed-by':          'sbomscanner',
-        'app.kubernetes.io/part-of':             'sbomscanner',
-        'sbomscanner.kubewarden.io/scanjob-uid': '445c600a-c4b6-40b3-bd71-f2d2140a37d5'
-      },
-      'name':            'c3a725db65daacd9e6736d67a53aed00e526fe70690e03a1ba4586f32ae1cbed',
-      'namespace':       'default',
-      'ownerReferences': [
-        {
-          'apiVersion':         'storage.sbomscanner.kubewarden.io/v1alpha1',
-          'blockOwnerDeletion': true,
-          'controller':         true,
-          'kind':               'SBOM',
-          'name':               'c3a725db65daacd9e6736d67a53aed00e526fe70690e03a1ba4586f32ae1cbed',
-          'uid':                '237cd124-a7ed-4dfe-8809-cbd996dbd226'
-        }
-      ],
-      'relationships': [
-        {
-          'fromId':   'default/c3a725db65daacd9e6736d67a53aed00e526fe70690e03a1ba4586f32ae1cbed',
-          'fromType': 'storage.sbomscanner.kubewarden.io.sbom',
-          'rel':      'owner',
-          'state':    'active',
-          'message':  'Resource is current'
-        }
-      ],
-      'resourceVersion': '1',
-      'state':           {
-        'error':         false,
-        'message':       'Resource is current',
-        'name':          'active',
-        'transitioning': false
-      },
-      'uid': 'd793a31e-35f7-42b0-b218-7265602a0eb2'
-    },
-    'report': {
-      'results': [
-        {
-          'class':           'os-pkgs',
-          'target':          '/var/run/worker/trivy.sbom.437886663.json (alpine 3.13.6)',
-          'type':            'alpine',
-          'vulnerabilities': [
-            {
-              'cve':  'CVE-2021-42378',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the getvar_i function",
-              'diffID':        'sha256:0b759d4cc16e54ce7977793e22c0a5b4b2456f5536985c2b241f359aadc8032c',
-              'fixedVersions': [
-                '1.32.1-r7'
-              ],
-              'installedVersion': '1.32.1-r6',
-              'packageName':      'busybox',
-              'purl':             'pkg:apk/alpine/busybox@1.32.1-r6?arch=s390x&distro=3.13.6',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42378',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42378',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42378'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the getvar_i()'
-            },
-            {
-              'cve':  'CVE-2021-42379',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the next_input_file function",
-              'diffID':        'sha256:0b759d4cc16e54ce7977793e22c0a5b4b2456f5536985c2b241f359aadc8032c',
-              'fixedVersions': [
-                '1.32.1-r7'
-              ],
-              'installedVersion': '1.32.1-r6',
-              'packageName':      'busybox',
-              'purl':             'pkg:apk/alpine/busybox@1.32.1-r6?arch=s390x&distro=3.13.6',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42379',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42379',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42379'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the next_input_file()'
-            },
-            {
-              'cve':  'CVE-2021-42380',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the clrvar function",
-              'diffID':        'sha256:0b759d4cc16e54ce7977793e22c0a5b4b2456f5536985c2b241f359aadc8032c',
-              'fixedVersions': [
-                '1.32.1-r7'
-              ],
-              'installedVersion': '1.32.1-r6',
-              'packageName':      'busybox',
-              'purl':             'pkg:apk/alpine/busybox@1.32.1-r6?arch=s390x&distro=3.13.6',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42380',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42380',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42380'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the clrvar()'
-            },
-            {
-              'cve':  'CVE-2021-42381',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the hash_init function",
-              'diffID':        'sha256:0b759d4cc16e54ce7977793e22c0a5b4b2456f5536985c2b241f359aadc8032c',
-              'fixedVersions': [
-                '1.32.1-r7'
-              ],
-              'installedVersion': '1.32.1-r6',
-              'packageName':      'busybox',
-              'purl':             'pkg:apk/alpine/busybox@1.32.1-r6?arch=s390x&distro=3.13.6',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42381',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42381',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42381'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the hash_init()'
-            },
-            {
-              'cve':  'CVE-2021-42382',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the getvar_s function",
-              'diffID':        'sha256:0b759d4cc16e54ce7977793e22c0a5b4b2456f5536985c2b241f359aadc8032c',
-              'fixedVersions': [
-                '1.32.1-r7'
-              ],
-              'installedVersion': '1.32.1-r6',
-              'packageName':      'busybox',
-              'purl':             'pkg:apk/alpine/busybox@1.32.1-r6?arch=s390x&distro=3.13.6',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42382',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42382',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42382'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the getvar_s()'
-            },
-            {
-              'cve':  'CVE-2021-42383',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the evaluate function",
-              'diffID':        'sha256:0b759d4cc16e54ce7977793e22c0a5b4b2456f5536985c2b241f359aadc8032c',
-              'fixedVersions': [
-                '1.32.1-r7'
-              ],
-              'installedVersion': '1.32.1-r6',
-              'packageName':      'busybox',
-              'purl':             'pkg:apk/alpine/busybox@1.32.1-r6?arch=s390x&distro=3.13.6',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42383',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42383',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42383'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the evaluate()'
-            },
-            {
-              'cve':  'CVE-2021-42384',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the handle_special function",
-              'diffID':        'sha256:0b759d4cc16e54ce7977793e22c0a5b4b2456f5536985c2b241f359aadc8032c',
-              'fixedVersions': [
-                '1.32.1-r7'
-              ],
-              'installedVersion': '1.32.1-r6',
-              'packageName':      'busybox',
-              'purl':             'pkg:apk/alpine/busybox@1.32.1-r6?arch=s390x&distro=3.13.6',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42384',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42384',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42384'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the handle_special()'
-            },
-            {
-              'cve':  'CVE-2021-42385',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the evaluate function",
-              'diffID':        'sha256:0b759d4cc16e54ce7977793e22c0a5b4b2456f5536985c2b241f359aadc8032c',
-              'fixedVersions': [
-                '1.32.1-r7'
-              ],
-              'installedVersion': '1.32.1-r6',
-              'packageName':      'busybox',
-              'purl':             'pkg:apk/alpine/busybox@1.32.1-r6?arch=s390x&distro=3.13.6',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42385',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42385',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42385'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the evaluate()'
-            },
-            {
-              'cve':  'CVE-2021-42386',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the nvalloc function",
-              'diffID':        'sha256:0b759d4cc16e54ce7977793e22c0a5b4b2456f5536985c2b241f359aadc8032c',
-              'fixedVersions': [
-                '1.32.1-r7'
-              ],
-              'installedVersion': '1.32.1-r6',
-              'packageName':      'busybox',
-              'purl':             'pkg:apk/alpine/busybox@1.32.1-r6?arch=s390x&distro=3.13.6',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42386',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42386',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42386'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the nvalloc()'
-            },
-            {
-              'cve':  'CVE-2022-28391',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '8.8',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-88'
-              ],
-              'description':   "BusyBox through 1.35.0 allows remote attackers to execute arbitrary code if netstat is used to print a DNS PTR record's value to a VT compatible terminal. Alternatively, the attacker could choose to change the terminal's colors.",
-              'diffID':        'sha256:0b759d4cc16e54ce7977793e22c0a5b4b2456f5536985c2b241f359aadc8032c',
-              'fixedVersions': [
-                '1.32.1-r8'
-              ],
-              'installedVersion': '1.32.1-r6',
-              'packageName':      'busybox',
-              'purl':             'pkg:apk/alpine/busybox@1.32.1-r6?arch=s390x&distro=3.13.6',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2022-28391',
-                'https://git.alpinelinux.org/aports/plain/main/busybox/0001-libbb-sockaddr2str-ensure-only-printable-characters-.patch',
-                'https://git.alpinelinux.org/aports/plain/main/busybox/0002-nslookup-sanitize-all-printed-strings-with-printable.patch',
-                'https://gitlab.alpinelinux.org/alpine/aports/-/issues/13661',
-                'https://nvd.nist.gov/vuln/detail/CVE-2022-28391',
-                'https://www.cve.org/CVERecord?id=CVE-2022-28391'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: remote attackers may execute arbitrary code if netstat is used'
-            },
-            {
-              'cve':  'CVE-2022-30065',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.8',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.2',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox 1.35-x's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the copyvar function.",
-              'diffID':        'sha256:0b759d4cc16e54ce7977793e22c0a5b4b2456f5536985c2b241f359aadc8032c',
-              'fixedVersions': [
-                '1.32.1-r9'
-              ],
-              'installedVersion': '1.32.1-r6',
-              'packageName':      'busybox',
-              'purl':             'pkg:apk/alpine/busybox@1.32.1-r6?arch=s390x&distro=3.13.6',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2022-30065',
-                'https://bugs.busybox.net/show_bug.cgi?id=14781',
-                'https://cert-portal.siemens.com/productcert/pdf/ssa-333517.pdf',
-                'https://nvd.nist.gov/vuln/detail/CVE-2022-30065',
-                'https://www.cve.org/CVERecord?id=CVE-2022-30065'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      "busybox: A use-after-free in Busybox's awk applet leads to denial of service"
-            },
-            {
-              'cve':  'CVE-2021-42374',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '5.7',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-125'
-              ],
-              'description':   "An out-of-bounds heap read in Busybox's unlzma applet leads to information leak and denial of service when crafted LZMA-compressed input is decompressed. This can be triggered by any applet/format that",
-              'diffID':        'sha256:0b759d4cc16e54ce7977793e22c0a5b4b2456f5536985c2b241f359aadc8032c',
-              'fixedVersions': [
-                '1.32.1-r7'
-              ],
-              'installedVersion': '1.32.1-r6',
-              'packageName':      'busybox',
-              'purl':             'pkg:apk/alpine/busybox@1.32.1-r6?arch=s390x&distro=3.13.6',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42374',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42374',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42374'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'busybox: out-of-bounds read in unlzma applet leads to information leak and denial of service when crafted LZMA-compressed input is decompressed'
-            },
-            {
-              'cve':  'CVE-2021-42375',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.5',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '4.1',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-159'
-              ],
-              'description':   "An incorrect handling of a special element in Busybox's ash applet leads to denial of service when processing a crafted shell command, due to the shell mistaking specific characters for reserved characters. This may be used for DoS under rare conditions of filtered command input.",
-              'diffID':        'sha256:0b759d4cc16e54ce7977793e22c0a5b4b2456f5536985c2b241f359aadc8032c',
-              'fixedVersions': [
-                '1.32.1-r7'
-              ],
-              'installedVersion': '1.32.1-r6',
-              'packageName':      'busybox',
-              'purl':             'pkg:apk/alpine/busybox@1.32.1-r6?arch=s390x&distro=3.13.6',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42375',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42375',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42375'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'busybox: incorrect handling of a special element in ash applet leads to denial of service when processing a crafted shell command'
-            },
-            {
-              'cve':  'CVE-2022-0778',
-              'cvss': {
-                'bitnami': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'ghsa': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'nvd': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-835'
-              ],
-              'description':   'The BN_mod_sqrt() function, which computes a modular square root, contains a bug that can cause it to loop forever for non-prime moduli. Internally this function is used when parsing certificates that contain elliptic curve public keys in compressed form or explicit elliptic curve parameters with a base point encoded in compressed form. It is possible to trigger the infinite loop by crafting a certificate that has invalid explicit curve parameters. Since certificate parsing happens prior to verification of the certificate signature, any process that parses an externally supplied certificate may thus be subject to a denial of service attack. The infinite loop can also be reached when parsing crafted private keys as they can contain explicit elliptic curve parameters. Thus vulnerable situations include: - TLS clients consuming server certificates - TLS servers consuming client certificates - Hosting providers taking certificates or private keys from customers - Certificate authorities parsing certification requests from subscribers - Anything else which parses ASN.1 elliptic curve parameters Also any other applications that use the BN_mod_sqrt() where the attacker can control the parameter values are vulnerable to this DoS issue. In the OpenSSL 1.0.2 version the public key is not parsed during initial parsing of the certificate which makes it slightly harder to trigger the infinite loop. However any operation which requires the public key from the certificate will trigger the infinite loop. In particular the attacker can use a self-signed certificate to trigger the loop during verification of the certificate signature. This issue affects OpenSSL versions 1.0.2, 1.1.1 and 3.0. It was addressed in the releases of 1.1.1n and 3.0.2 on the 15th March 2022. Fixed in OpenSSL 3.0.2 (Affected 3.0.0,3.0.1). Fixed in OpenSSL 1.1.1n (Affected 1.1.1-1.1.1m). Fixed in OpenSSL 1.0.2zd (Affected 1.0.2-1.0.2zc).',
-              'diffID':        'sha256:0b759d4cc16e54ce7977793e22c0a5b4b2456f5536985c2b241f359aadc8032c',
-              'fixedVersions': [
-                '1.1.1n-r0'
-              ],
-              'installedVersion': '1.1.1l-r0',
-              'packageName':      'libcrypto1.1',
-              'purl':             'pkg:apk/alpine/libcrypto1.1@1.1.1l-r0?arch=s390x&distro=3.13.6',
-              'references':       [
-                'http://packetstormsecurity.com/files/167344/OpenSSL-1.0.2-1.1.1-3.0-BN_mod_sqrt-Infinite-Loop.html',
-                'http://seclists.org/fulldisclosure/2022/May/33',
-                'http://seclists.org/fulldisclosure/2022/May/35',
-                'http://seclists.org/fulldisclosure/2022/May/38',
-                'https://access.redhat.com/errata/RHSA-2022:5326',
-                'https://access.redhat.com/security/cve/CVE-2022-0778',
-                'https://bugzilla.redhat.com/2062202',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2062202',
-                'https://cert-portal.siemens.com/productcert/pdf/ssa-712929.pdf',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-0778',
-                'https://errata.almalinux.org/8/ALSA-2022-5326.html',
-                'https://errata.rockylinux.org/RLSA-2022:4899',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=3118eb64934499d93db3230748a452351d1d9a65',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=380085481c64de749a6dd25cdf0bcf4360b30f83',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=a466912611aa6cbdf550cd10601390e587451246',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=3118eb64934499d93db3230748a452351d1d9a65',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=380085481c64de749a6dd25cdf0bcf4360b30f83',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=a466912611aa6cbdf550cd10601390e587451246',
-                'https://linux.oracle.com/cve/CVE-2022-0778.html',
-                'https://linux.oracle.com/errata/ELSA-2022-9272.html',
-                'https://lists.debian.org/debian-lts-announce/2022/03/msg00023.html',
-                'https://lists.debian.org/debian-lts-announce/2022/03/msg00024.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/323SNN6ZX7PRJJWP2BUAFLPUAE42XWLZ',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/323SNN6ZX7PRJJWP2BUAFLPUAE42XWLZ/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GDB3GQVJPXJE7X5C5JN6JAA4XUDWD6E6',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GDB3GQVJPXJE7X5C5JN6JAA4XUDWD6E6/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/W6K3PR542DXWLEFFMFIDMME4CWMHJRMG',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/W6K3PR542DXWLEFFMFIDMME4CWMHJRMG/',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/323SNN6ZX7PRJJWP2BUAFLPUAE42XWLZ',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/GDB3GQVJPXJE7X5C5JN6JAA4XUDWD6E6',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/W6K3PR542DXWLEFFMFIDMME4CWMHJRMG',
-                'https://nvd.nist.gov/vuln/detail/CVE-2022-0778',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2022-0002',
-                'https://rustsec.org/advisories/RUSTSEC-2022-0014.html',
-                'https://security.gentoo.org/glsa/202210-02',
-                'https://security.netapp.com/advisory/ntap-20220321-0002',
-                'https://security.netapp.com/advisory/ntap-20220321-0002/',
-                'https://security.netapp.com/advisory/ntap-20220429-0005',
-                'https://security.netapp.com/advisory/ntap-20220429-0005/',
-                'https://security.netapp.com/advisory/ntap-20240621-0006',
-                'https://security.netapp.com/advisory/ntap-20240621-0006/',
-                'https://support.apple.com/kb/HT213255',
-                'https://support.apple.com/kb/HT213256',
-                'https://support.apple.com/kb/HT213257',
-                'https://ubuntu.com/security/notices/USN-5328-1',
-                'https://ubuntu.com/security/notices/USN-5328-2',
-                'https://ubuntu.com/security/notices/USN-6457-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2022-0778',
-                'https://www.debian.org/security/2022/dsa-5103',
-                'https://www.openssl.org/news/secadv/20220315.txt',
-                'https://www.oracle.com/security-alerts/cpuapr2022.html',
-                'https://www.oracle.com/security-alerts/cpujul2022.html',
-                'https://www.tenable.com/security/tns-2022-06',
-                'https://www.tenable.com/security/tns-2022-07',
-                'https://www.tenable.com/security/tns-2022-08',
-                'https://www.tenable.com/security/tns-2022-09'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: Infinite loop in BN_mod_sqrt() reachable when parsing certificates'
-            },
-            {
-              'cve':  'CVE-2022-2097',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N'
-                },
-                'nvd': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N'
-                },
-                'redhat': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-327'
-              ],
-              'description':   "AES OCB mode for 32-bit x86 platforms using the AES-NI assembly optimised implementation will not encrypt the entirety of the data under some circumstances. This could reveal sixteen bytes of data that was preexisting in the memory that wasn't written. In the special case of \"in place\" encryption, sixteen bytes of the plaintext would be revealed. Since OpenSSL does not support OCB based cipher suites for TLS and DTLS, they are both unaffected. Fixed in OpenSSL 3.0.5 (Affected 3.0.0-3.0.4). Fixed in OpenSSL 1.1.1q (Affected 1.1.1-1.1.1p).",
-              'diffID':        'sha256:0b759d4cc16e54ce7977793e22c0a5b4b2456f5536985c2b241f359aadc8032c',
-              'fixedVersions': [
-                '1.1.1q-r0'
-              ],
-              'installedVersion': '1.1.1l-r0',
-              'packageName':      'libcrypto1.1',
-              'purl':             'pkg:apk/alpine/libcrypto1.1@1.1.1l-r0?arch=s390x&distro=3.13.6',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2022:6224',
-                'https://access.redhat.com/security/cve/CVE-2022-2097',
-                'https://bugzilla.redhat.com/2081494',
-                'https://bugzilla.redhat.com/2087911',
-                'https://bugzilla.redhat.com/2087913',
-                'https://bugzilla.redhat.com/2097310',
-                'https://bugzilla.redhat.com/2104905',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2081494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2097310',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2100554',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2104905',
-                'https://cert-portal.siemens.com/productcert/pdf/ssa-332410.pdf',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-1292',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-2068',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-2097',
-                'https://errata.almalinux.org/9/ALSA-2022-6224.html',
-                'https://errata.rockylinux.org/RLSA-2022:5818',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=919925673d6c9cfed3c1085497f5dfbbed5fc431',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=a98f339ddd7e8f487d6e0088d4a9a42324885a93',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=919925673d6c9cfed3c1085497f5dfbbed5fc431',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=a98f339ddd7e8f487d6e0088d4a9a42324885a93',
-                'https://github.com/alexcrichton/openssl-src-rs',
-                'https://linux.oracle.com/cve/CVE-2022-2097.html',
-                'https://linux.oracle.com/errata/ELSA-2022-9955.html',
-                'https://lists.debian.org/debian-lts-announce/2023/02/msg00019.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/R6CK57NBQFTPUMXAPJURCGXUYT76NQAK',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/R6CK57NBQFTPUMXAPJURCGXUYT76NQAK/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/V6567JERRHHJW2GNGJGKDRNHR7SNPZK7',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/V6567JERRHHJW2GNGJGKDRNHR7SNPZK7/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VCMNWKERPBKOEBNL7CLTTX3ZZCZLH7XA',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VCMNWKERPBKOEBNL7CLTTX3ZZCZLH7XA/',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/R6CK57NBQFTPUMXAPJURCGXUYT76NQAK',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/R6CK57NBQFTPUMXAPJURCGXUYT76NQAK/',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/V6567JERRHHJW2GNGJGKDRNHR7SNPZK7',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/V6567JERRHHJW2GNGJGKDRNHR7SNPZK7/',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/VCMNWKERPBKOEBNL7CLTTX3ZZCZLH7XA',
-                'https://nvd.nist.gov/vuln/detail/CVE-2022-2097',
-                'https://rustsec.org/advisories/RUSTSEC-2022-0032.html',
-                'https://security.gentoo.org/glsa/202210-02',
-                'https://security.netapp.com/advisory/ntap-20220715-0011',
-                'https://security.netapp.com/advisory/ntap-20220715-0011/',
-                'https://security.netapp.com/advisory/ntap-20230420-0008',
-                'https://security.netapp.com/advisory/ntap-20230420-0008/',
-                'https://security.netapp.com/advisory/ntap-20240621-0006',
-                'https://security.netapp.com/advisory/ntap-20240621-0006/',
-                'https://ubuntu.com/security/notices/USN-5502-1',
-                'https://ubuntu.com/security/notices/USN-6457-1',
-                'https://www.cve.org/CVERecord?id=CVE-2022-2097',
-                'https://www.debian.org/security/2023/dsa-5343',
-                'https://www.openssl.org/news/secadv/20220705.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: AES OCB fails to encrypt some bytes'
-            },
-            {
-              'cve':  'CVE-2022-0778',
-              'cvss': {
-                'bitnami': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'ghsa': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'nvd': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-835'
-              ],
-              'description':   'The BN_mod_sqrt() function, which computes a modular square root, contains a bug that can cause it to loop forever for non-prime moduli. Internally this function is used when parsing certificates that contain elliptic curve public keys in compressed form or explicit elliptic curve parameters with a base point encoded in compressed form. It is possible to trigger the infinite loop by crafting a certificate that has invalid explicit curve parameters. Since certificate parsing happens prior to verification of the certificate signature, any process that parses an externally supplied certificate may thus be subject to a denial of service attack. The infinite loop can also be reached when parsing crafted private keys as they can contain explicit elliptic curve parameters. Thus vulnerable situations include: - TLS clients consuming server certificates - TLS servers consuming client certificates - Hosting providers taking certificates or private keys from customers - Certificate authorities parsing certification requests from subscribers - Anything else which parses ASN.1 elliptic curve parameters Also any other applications that use the BN_mod_sqrt() where the attacker can control the parameter values are vulnerable to this DoS issue. In the OpenSSL 1.0.2 version the public key is not parsed during initial parsing of the certificate which makes it slightly harder to trigger the infinite loop. However any operation which requires the public key from the certificate will trigger the infinite loop. In particular the attacker can use a self-signed certificate to trigger the loop during verification of the certificate signature. This issue affects OpenSSL versions 1.0.2, 1.1.1 and 3.0. It was addressed in the releases of 1.1.1n and 3.0.2 on the 15th March 2022. Fixed in OpenSSL 3.0.2 (Affected 3.0.0,3.0.1). Fixed in OpenSSL 1.1.1n (Affected 1.1.1-1.1.1m). Fixed in OpenSSL 1.0.2zd (Affected 1.0.2-1.0.2zc).',
-              'diffID':        'sha256:0b759d4cc16e54ce7977793e22c0a5b4b2456f5536985c2b241f359aadc8032c',
-              'fixedVersions': [
-                '1.1.1n-r0'
-              ],
-              'installedVersion': '1.1.1l-r0',
-              'packageName':      'libssl1.1',
-              'purl':             'pkg:apk/alpine/libssl1.1@1.1.1l-r0?arch=s390x&distro=3.13.6',
-              'references':       [
-                'http://packetstormsecurity.com/files/167344/OpenSSL-1.0.2-1.1.1-3.0-BN_mod_sqrt-Infinite-Loop.html',
-                'http://seclists.org/fulldisclosure/2022/May/33',
-                'http://seclists.org/fulldisclosure/2022/May/35',
-                'http://seclists.org/fulldisclosure/2022/May/38',
-                'https://access.redhat.com/errata/RHSA-2022:5326',
-                'https://access.redhat.com/security/cve/CVE-2022-0778',
-                'https://bugzilla.redhat.com/2062202',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2062202',
-                'https://cert-portal.siemens.com/productcert/pdf/ssa-712929.pdf',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-0778',
-                'https://errata.almalinux.org/8/ALSA-2022-5326.html',
-                'https://errata.rockylinux.org/RLSA-2022:4899',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=3118eb64934499d93db3230748a452351d1d9a65',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=380085481c64de749a6dd25cdf0bcf4360b30f83',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=a466912611aa6cbdf550cd10601390e587451246',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=3118eb64934499d93db3230748a452351d1d9a65',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=380085481c64de749a6dd25cdf0bcf4360b30f83',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=a466912611aa6cbdf550cd10601390e587451246',
-                'https://linux.oracle.com/cve/CVE-2022-0778.html',
-                'https://linux.oracle.com/errata/ELSA-2022-9272.html',
-                'https://lists.debian.org/debian-lts-announce/2022/03/msg00023.html',
-                'https://lists.debian.org/debian-lts-announce/2022/03/msg00024.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/323SNN6ZX7PRJJWP2BUAFLPUAE42XWLZ',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/323SNN6ZX7PRJJWP2BUAFLPUAE42XWLZ/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GDB3GQVJPXJE7X5C5JN6JAA4XUDWD6E6',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GDB3GQVJPXJE7X5C5JN6JAA4XUDWD6E6/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/W6K3PR542DXWLEFFMFIDMME4CWMHJRMG',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/W6K3PR542DXWLEFFMFIDMME4CWMHJRMG/',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/323SNN6ZX7PRJJWP2BUAFLPUAE42XWLZ',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/GDB3GQVJPXJE7X5C5JN6JAA4XUDWD6E6',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/W6K3PR542DXWLEFFMFIDMME4CWMHJRMG',
-                'https://nvd.nist.gov/vuln/detail/CVE-2022-0778',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2022-0002',
-                'https://rustsec.org/advisories/RUSTSEC-2022-0014.html',
-                'https://security.gentoo.org/glsa/202210-02',
-                'https://security.netapp.com/advisory/ntap-20220321-0002',
-                'https://security.netapp.com/advisory/ntap-20220321-0002/',
-                'https://security.netapp.com/advisory/ntap-20220429-0005',
-                'https://security.netapp.com/advisory/ntap-20220429-0005/',
-                'https://security.netapp.com/advisory/ntap-20240621-0006',
-                'https://security.netapp.com/advisory/ntap-20240621-0006/',
-                'https://support.apple.com/kb/HT213255',
-                'https://support.apple.com/kb/HT213256',
-                'https://support.apple.com/kb/HT213257',
-                'https://ubuntu.com/security/notices/USN-5328-1',
-                'https://ubuntu.com/security/notices/USN-5328-2',
-                'https://ubuntu.com/security/notices/USN-6457-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2022-0778',
-                'https://www.debian.org/security/2022/dsa-5103',
-                'https://www.openssl.org/news/secadv/20220315.txt',
-                'https://www.oracle.com/security-alerts/cpuapr2022.html',
-                'https://www.oracle.com/security-alerts/cpujul2022.html',
-                'https://www.tenable.com/security/tns-2022-06',
-                'https://www.tenable.com/security/tns-2022-07',
-                'https://www.tenable.com/security/tns-2022-08',
-                'https://www.tenable.com/security/tns-2022-09'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: Infinite loop in BN_mod_sqrt() reachable when parsing certificates'
-            },
-            {
-              'cve':  'CVE-2022-2097',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N'
-                },
-                'nvd': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N'
-                },
-                'redhat': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-327'
-              ],
-              'description':   "AES OCB mode for 32-bit x86 platforms using the AES-NI assembly optimised implementation will not encrypt the entirety of the data under some circumstances. This could reveal sixteen bytes of data that was preexisting in the memory that wasn't written. In the special case of \"in place\" encryption, sixteen bytes of the plaintext would be revealed. Since OpenSSL does not support OCB based cipher suites for TLS and DTLS, they are both unaffected. Fixed in OpenSSL 3.0.5 (Affected 3.0.0-3.0.4). Fixed in OpenSSL 1.1.1q (Affected 1.1.1-1.1.1p).",
-              'diffID':        'sha256:0b759d4cc16e54ce7977793e22c0a5b4b2456f5536985c2b241f359aadc8032c',
-              'fixedVersions': [
-                '1.1.1q-r0'
-              ],
-              'installedVersion': '1.1.1l-r0',
-              'packageName':      'libssl1.1',
-              'purl':             'pkg:apk/alpine/libssl1.1@1.1.1l-r0?arch=s390x&distro=3.13.6',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2022:6224',
-                'https://access.redhat.com/security/cve/CVE-2022-2097',
-                'https://bugzilla.redhat.com/2081494',
-                'https://bugzilla.redhat.com/2087911',
-                'https://bugzilla.redhat.com/2087913',
-                'https://bugzilla.redhat.com/2097310',
-                'https://bugzilla.redhat.com/2104905',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2081494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2097310',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2100554',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2104905',
-                'https://cert-portal.siemens.com/productcert/pdf/ssa-332410.pdf',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-1292',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-2068',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-2097',
-                'https://errata.almalinux.org/9/ALSA-2022-6224.html',
-                'https://errata.rockylinux.org/RLSA-2022:5818',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=919925673d6c9cfed3c1085497f5dfbbed5fc431',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=a98f339ddd7e8f487d6e0088d4a9a42324885a93',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=919925673d6c9cfed3c1085497f5dfbbed5fc431',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=a98f339ddd7e8f487d6e0088d4a9a42324885a93',
-                'https://github.com/alexcrichton/openssl-src-rs',
-                'https://linux.oracle.com/cve/CVE-2022-2097.html',
-                'https://linux.oracle.com/errata/ELSA-2022-9955.html',
-                'https://lists.debian.org/debian-lts-announce/2023/02/msg00019.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/R6CK57NBQFTPUMXAPJURCGXUYT76NQAK',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/R6CK57NBQFTPUMXAPJURCGXUYT76NQAK/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/V6567JERRHHJW2GNGJGKDRNHR7SNPZK7',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/V6567JERRHHJW2GNGJGKDRNHR7SNPZK7/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VCMNWKERPBKOEBNL7CLTTX3ZZCZLH7XA',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VCMNWKERPBKOEBNL7CLTTX3ZZCZLH7XA/',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/R6CK57NBQFTPUMXAPJURCGXUYT76NQAK',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/R6CK57NBQFTPUMXAPJURCGXUYT76NQAK/',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/V6567JERRHHJW2GNGJGKDRNHR7SNPZK7',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/V6567JERRHHJW2GNGJGKDRNHR7SNPZK7/',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/VCMNWKERPBKOEBNL7CLTTX3ZZCZLH7XA',
-                'https://nvd.nist.gov/vuln/detail/CVE-2022-2097',
-                'https://rustsec.org/advisories/RUSTSEC-2022-0032.html',
-                'https://security.gentoo.org/glsa/202210-02',
-                'https://security.netapp.com/advisory/ntap-20220715-0011',
-                'https://security.netapp.com/advisory/ntap-20220715-0011/',
-                'https://security.netapp.com/advisory/ntap-20230420-0008',
-                'https://security.netapp.com/advisory/ntap-20230420-0008/',
-                'https://security.netapp.com/advisory/ntap-20240621-0006',
-                'https://security.netapp.com/advisory/ntap-20240621-0006/',
-                'https://ubuntu.com/security/notices/USN-5502-1',
-                'https://ubuntu.com/security/notices/USN-6457-1',
-                'https://www.cve.org/CVERecord?id=CVE-2022-2097',
-                'https://www.debian.org/security/2023/dsa-5343',
-                'https://www.openssl.org/news/secadv/20220705.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: AES OCB fails to encrypt some bytes'
-            },
-            {
-              'cve':  'CVE-2021-42378',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the getvar_i function",
-              'diffID':        'sha256:0b759d4cc16e54ce7977793e22c0a5b4b2456f5536985c2b241f359aadc8032c',
-              'fixedVersions': [
-                '1.32.1-r7'
-              ],
-              'installedVersion': '1.32.1-r6',
-              'packageName':      'ssl_client',
-              'purl':             'pkg:apk/alpine/ssl_client@1.32.1-r6?arch=s390x&distro=3.13.6',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42378',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42378',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42378'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the getvar_i()'
-            },
-            {
-              'cve':  'CVE-2021-42379',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the next_input_file function",
-              'diffID':        'sha256:0b759d4cc16e54ce7977793e22c0a5b4b2456f5536985c2b241f359aadc8032c',
-              'fixedVersions': [
-                '1.32.1-r7'
-              ],
-              'installedVersion': '1.32.1-r6',
-              'packageName':      'ssl_client',
-              'purl':             'pkg:apk/alpine/ssl_client@1.32.1-r6?arch=s390x&distro=3.13.6',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42379',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42379',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42379'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the next_input_file()'
-            },
-            {
-              'cve':  'CVE-2021-42380',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the clrvar function",
-              'diffID':        'sha256:0b759d4cc16e54ce7977793e22c0a5b4b2456f5536985c2b241f359aadc8032c',
-              'fixedVersions': [
-                '1.32.1-r7'
-              ],
-              'installedVersion': '1.32.1-r6',
-              'packageName':      'ssl_client',
-              'purl':             'pkg:apk/alpine/ssl_client@1.32.1-r6?arch=s390x&distro=3.13.6',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42380',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42380',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42380'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the clrvar()'
-            },
-            {
-              'cve':  'CVE-2021-42381',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the hash_init function",
-              'diffID':        'sha256:0b759d4cc16e54ce7977793e22c0a5b4b2456f5536985c2b241f359aadc8032c',
-              'fixedVersions': [
-                '1.32.1-r7'
-              ],
-              'installedVersion': '1.32.1-r6',
-              'packageName':      'ssl_client',
-              'purl':             'pkg:apk/alpine/ssl_client@1.32.1-r6?arch=s390x&distro=3.13.6',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42381',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42381',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42381'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the hash_init()'
-            },
-            {
-              'cve':  'CVE-2021-42382',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the getvar_s function",
-              'diffID':        'sha256:0b759d4cc16e54ce7977793e22c0a5b4b2456f5536985c2b241f359aadc8032c',
-              'fixedVersions': [
-                '1.32.1-r7'
-              ],
-              'installedVersion': '1.32.1-r6',
-              'packageName':      'ssl_client',
-              'purl':             'pkg:apk/alpine/ssl_client@1.32.1-r6?arch=s390x&distro=3.13.6',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42382',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42382',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42382'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the getvar_s()'
-            },
-            {
-              'cve':  'CVE-2021-42383',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the evaluate function",
-              'diffID':        'sha256:0b759d4cc16e54ce7977793e22c0a5b4b2456f5536985c2b241f359aadc8032c',
-              'fixedVersions': [
-                '1.32.1-r7'
-              ],
-              'installedVersion': '1.32.1-r6',
-              'packageName':      'ssl_client',
-              'purl':             'pkg:apk/alpine/ssl_client@1.32.1-r6?arch=s390x&distro=3.13.6',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42383',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42383',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42383'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the evaluate()'
-            },
-            {
-              'cve':  'CVE-2021-42384',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the handle_special function",
-              'diffID':        'sha256:0b759d4cc16e54ce7977793e22c0a5b4b2456f5536985c2b241f359aadc8032c',
-              'fixedVersions': [
-                '1.32.1-r7'
-              ],
-              'installedVersion': '1.32.1-r6',
-              'packageName':      'ssl_client',
-              'purl':             'pkg:apk/alpine/ssl_client@1.32.1-r6?arch=s390x&distro=3.13.6',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42384',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42384',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42384'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the handle_special()'
-            },
-            {
-              'cve':  'CVE-2021-42385',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the evaluate function",
-              'diffID':        'sha256:0b759d4cc16e54ce7977793e22c0a5b4b2456f5536985c2b241f359aadc8032c',
-              'fixedVersions': [
-                '1.32.1-r7'
-              ],
-              'installedVersion': '1.32.1-r6',
-              'packageName':      'ssl_client',
-              'purl':             'pkg:apk/alpine/ssl_client@1.32.1-r6?arch=s390x&distro=3.13.6',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42385',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42385',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42385'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the evaluate()'
-            },
-            {
-              'cve':  'CVE-2021-42386',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the nvalloc function",
-              'diffID':        'sha256:0b759d4cc16e54ce7977793e22c0a5b4b2456f5536985c2b241f359aadc8032c',
-              'fixedVersions': [
-                '1.32.1-r7'
-              ],
-              'installedVersion': '1.32.1-r6',
-              'packageName':      'ssl_client',
-              'purl':             'pkg:apk/alpine/ssl_client@1.32.1-r6?arch=s390x&distro=3.13.6',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42386',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42386',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42386'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the nvalloc()'
-            },
-            {
-              'cve':  'CVE-2022-28391',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '8.8',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-88'
-              ],
-              'description':   "BusyBox through 1.35.0 allows remote attackers to execute arbitrary code if netstat is used to print a DNS PTR record's value to a VT compatible terminal. Alternatively, the attacker could choose to change the terminal's colors.",
-              'diffID':        'sha256:0b759d4cc16e54ce7977793e22c0a5b4b2456f5536985c2b241f359aadc8032c',
-              'fixedVersions': [
-                '1.32.1-r8'
-              ],
-              'installedVersion': '1.32.1-r6',
-              'packageName':      'ssl_client',
-              'purl':             'pkg:apk/alpine/ssl_client@1.32.1-r6?arch=s390x&distro=3.13.6',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2022-28391',
-                'https://git.alpinelinux.org/aports/plain/main/busybox/0001-libbb-sockaddr2str-ensure-only-printable-characters-.patch',
-                'https://git.alpinelinux.org/aports/plain/main/busybox/0002-nslookup-sanitize-all-printed-strings-with-printable.patch',
-                'https://gitlab.alpinelinux.org/alpine/aports/-/issues/13661',
-                'https://nvd.nist.gov/vuln/detail/CVE-2022-28391',
-                'https://www.cve.org/CVERecord?id=CVE-2022-28391'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: remote attackers may execute arbitrary code if netstat is used'
-            },
-            {
-              'cve':  'CVE-2022-30065',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.8',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.2',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox 1.35-x's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the copyvar function.",
-              'diffID':        'sha256:0b759d4cc16e54ce7977793e22c0a5b4b2456f5536985c2b241f359aadc8032c',
-              'fixedVersions': [
-                '1.32.1-r9'
-              ],
-              'installedVersion': '1.32.1-r6',
-              'packageName':      'ssl_client',
-              'purl':             'pkg:apk/alpine/ssl_client@1.32.1-r6?arch=s390x&distro=3.13.6',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2022-30065',
-                'https://bugs.busybox.net/show_bug.cgi?id=14781',
-                'https://cert-portal.siemens.com/productcert/pdf/ssa-333517.pdf',
-                'https://nvd.nist.gov/vuln/detail/CVE-2022-30065',
-                'https://www.cve.org/CVERecord?id=CVE-2022-30065'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      "busybox: A use-after-free in Busybox's awk applet leads to denial of service"
-            },
-            {
-              'cve':  'CVE-2021-42374',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '5.7',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-125'
-              ],
-              'description':   "An out-of-bounds heap read in Busybox's unlzma applet leads to information leak and denial of service when crafted LZMA-compressed input is decompressed. This can be triggered by any applet/format that",
-              'diffID':        'sha256:0b759d4cc16e54ce7977793e22c0a5b4b2456f5536985c2b241f359aadc8032c',
-              'fixedVersions': [
-                '1.32.1-r7'
-              ],
-              'installedVersion': '1.32.1-r6',
-              'packageName':      'ssl_client',
-              'purl':             'pkg:apk/alpine/ssl_client@1.32.1-r6?arch=s390x&distro=3.13.6',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42374',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42374',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42374'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'busybox: out-of-bounds read in unlzma applet leads to information leak and denial of service when crafted LZMA-compressed input is decompressed'
-            },
-            {
-              'cve':  'CVE-2021-42375',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.5',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '4.1',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-159'
-              ],
-              'description':   "An incorrect handling of a special element in Busybox's ash applet leads to denial of service when processing a crafted shell command, due to the shell mistaking specific characters for reserved characters. This may be used for DoS under rare conditions of filtered command input.",
-              'diffID':        'sha256:0b759d4cc16e54ce7977793e22c0a5b4b2456f5536985c2b241f359aadc8032c',
-              'fixedVersions': [
-                '1.32.1-r7'
-              ],
-              'installedVersion': '1.32.1-r6',
-              'packageName':      'ssl_client',
-              'purl':             'pkg:apk/alpine/ssl_client@1.32.1-r6?arch=s390x&distro=3.13.6',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42375',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42375',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42375'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'busybox: incorrect handling of a special element in ash applet leads to denial of service when processing a crafted shell command'
-            },
-            {
-              'cve':  'CVE-2022-37434',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '9.8',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-787',
-                'CWE-120'
-              ],
-              'description':   'zlib through 1.2.12 has a heap-based buffer over-read or buffer overflow in inflate in inflate.c via a large gzip header extra field. NOTE: only applications that call inflateGetHeader are affected. Some common applications bundle the affected zlib source code but may be unable to call inflateGetHeader (e.g., see the nodejs/node reference).',
-              'diffID':        'sha256:0b759d4cc16e54ce7977793e22c0a5b4b2456f5536985c2b241f359aadc8032c',
-              'fixedVersions': [
-                '1.2.12-r2'
-              ],
-              'installedVersion': '1.2.11-r3',
-              'packageName':      'zlib',
-              'purl':             'pkg:apk/alpine/zlib@1.2.11-r3?arch=s390x&distro=3.13.6',
-              'references':       [
-                'http://seclists.org/fulldisclosure/2022/Oct/37',
-                'http://seclists.org/fulldisclosure/2022/Oct/38',
-                'http://seclists.org/fulldisclosure/2022/Oct/41',
-                'http://seclists.org/fulldisclosure/2022/Oct/42',
-                'http://www.openwall.com/lists/oss-security/2022/08/05/2',
-                'http://www.openwall.com/lists/oss-security/2022/08/09/1',
-                'https://access.redhat.com/errata/RHSA-2022:8291',
-                'https://access.redhat.com/security/cve/CVE-2022-37434',
-                'https://bugzilla.redhat.com/2116639',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2053198',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2077431',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2081296',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2116639',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-37434',
-                'https://errata.almalinux.org/9/ALSA-2022-8291.html',
-                'https://errata.rockylinux.org/RLSA-2022:8291',
-                'https://github.com/curl/curl/issues/9271',
-                'https://github.com/ivd38/zlib_overflow',
-                'https://github.com/madler/zlib/blob/21767c654d31d2dccdde4330529775c6c5fd5389/zlib.h#L1062-L1063',
-                'https://github.com/madler/zlib/commit/1eb7682f845ac9e9bf9ae35bbfb3bad5dacbd91d',
-                'https://github.com/madler/zlib/commit/eff308af425b67093bab25f80f1ae950166bece1',
-                'https://github.com/nodejs/node/blob/75b68c6e4db515f76df73af476eccf382bbcb00a/deps/zlib/inflate.c#L762-L764',
-                'https://linux.oracle.com/cve/CVE-2022-37434.html',
-                'https://linux.oracle.com/errata/ELSA-2023-1095.html',
-                'https://lists.debian.org/debian-lts-announce/2022/09/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JWN4VE3JQR4O2SOUS5TXNLANRPMHWV4I/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NMBOJ77A7T7PQCARMDUK75TE6LLESZ3O/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PAVPQNCG3XRLCLNSQRM3KAN5ZFMVXVTY/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/X5U7OTKZSHY2I3ZFJSR2SHFHW72RKGDK/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YRQAI7H4M4RQZ2IWZUEEXECBE5D56BH2/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2022-37434',
-                'https://security.netapp.com/advisory/ntap-20220901-0005/',
-                'https://security.netapp.com/advisory/ntap-20230427-0007/',
-                'https://support.apple.com/kb/HT213488',
-                'https://support.apple.com/kb/HT213489',
-                'https://support.apple.com/kb/HT213490',
-                'https://support.apple.com/kb/HT213491',
-                'https://support.apple.com/kb/HT213493',
-                'https://support.apple.com/kb/HT213494',
-                'https://ubuntu.com/security/notices/USN-5570-1',
-                'https://ubuntu.com/security/notices/USN-5570-2',
-                'https://ubuntu.com/security/notices/USN-5573-1',
-                'https://ubuntu.com/security/notices/USN-6736-1',
-                'https://ubuntu.com/security/notices/USN-6736-2',
-                'https://www.cve.org/CVERecord?id=CVE-2022-37434',
-                'https://www.debian.org/security/2022/dsa-5218'
-              ],
-              'severity':   'CRITICAL',
-              'suppressed': false,
-              'title':      'zlib: heap-based buffer over-read and overflow in inflate() in inflate.c via a large gzip header extra field'
-            },
-            {
-              'cve':  'CVE-2018-25032',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'nvd': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '8.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-787'
-              ],
-              'description':   'zlib before 1.2.12 allows memory corruption when deflating (i.e., when compressing) if the input has many distant matches.',
-              'diffID':        'sha256:0b759d4cc16e54ce7977793e22c0a5b4b2456f5536985c2b241f359aadc8032c',
-              'fixedVersions': [
-                '1.2.12-r0'
-              ],
-              'installedVersion': '1.2.11-r3',
-              'packageName':      'zlib',
-              'purl':             'pkg:apk/alpine/zlib@1.2.11-r3?arch=s390x&distro=3.13.6',
-              'references':       [
-                'http://seclists.org/fulldisclosure/2022/May/33',
-                'http://seclists.org/fulldisclosure/2022/May/35',
-                'http://seclists.org/fulldisclosure/2022/May/38',
-                'http://www.openwall.com/lists/oss-security/2022/03/25/2',
-                'http://www.openwall.com/lists/oss-security/2022/03/26/1',
-                'https://access.redhat.com/errata/RHSA-2022:8420',
-                'https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-25032.json',
-                'https://access.redhat.com/security/cve/CVE-2018-25032',
-                'https://bugzilla.redhat.com/2067945',
-                'https://cert-portal.siemens.com/productcert/pdf/ssa-333517.pdf',
-                'https://errata.almalinux.org/9/ALSA-2022-8420.html',
-                'https://github.com/advisories/GHSA-jc36-42cf-vqwj',
-                'https://github.com/madler/zlib/commit/5c44459c3b28a9bd3283aaceab7c615f8020c531',
-                'https://github.com/madler/zlib/compare/v1.2.11...v1.2.12',
-                'https://github.com/madler/zlib/issues/605',
-                'https://github.com/rubysec/ruby-advisory-db/blob/master/gems/nokogiri/CVE-2018-25032.yml',
-                'https://github.com/sparklemotion/nokogiri/releases/tag/v1.13.4',
-                'https://github.com/sparklemotion/nokogiri/security/advisories/GHSA-v6gp-9mmm-c6p5',
-                'https://groups.google.com/g/ruby-security-ann/c/vX7qSjsvWis/m/TJWN4oOKBwAJ',
-                'https://linux.oracle.com/cve/CVE-2018-25032.html',
-                'https://linux.oracle.com/errata/ELSA-2022-9565.html',
-                'https://lists.debian.org/debian-lts-announce/2022/04/msg00000.html',
-                'https://lists.debian.org/debian-lts-announce/2022/05/msg00008.html',
-                'https://lists.debian.org/debian-lts-announce/2022/09/msg00023.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DCZFIJBJTZ7CL5QXBFKTQ22Q26VINRUF/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DF62MVMH3QUGMBDCB3DY2ERQ6EBHTADB/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JZZPTWRYQULAOL3AW7RZJNVZ2UONXCV4/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NS2D2GFPFGOJUL4WQ3DUAY7HF4VWQ77F/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VOKNP2L734AEL47NRYGVZIKEFOUBQY5Y/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/XOKFMSNQ5D5WGMALBNBXU3GE442V74WU/',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/DCZFIJBJTZ7CL5QXBFKTQ22Q26VINRUF',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/DCZFIJBJTZ7CL5QXBFKTQ22Q26VINRUF/',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/DF62MVMH3QUGMBDCB3DY2ERQ6EBHTADB',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/DF62MVMH3QUGMBDCB3DY2ERQ6EBHTADB/',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/JZZPTWRYQULAOL3AW7RZJNVZ2UONXCV4',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/JZZPTWRYQULAOL3AW7RZJNVZ2UONXCV4/',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/NS2D2GFPFGOJUL4WQ3DUAY7HF4VWQ77F',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/NS2D2GFPFGOJUL4WQ3DUAY7HF4VWQ77F/',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/VOKNP2L734AEL47NRYGVZIKEFOUBQY5Y',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/VOKNP2L734AEL47NRYGVZIKEFOUBQY5Y/',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/XOKFMSNQ5D5WGMALBNBXU3GE442V74WU',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/XOKFMSNQ5D5WGMALBNBXU3GE442V74WU/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2018-25032',
-                'https://security.gentoo.org/glsa/202210-42',
-                'https://security.netapp.com/advisory/ntap-20220526-0009',
-                'https://security.netapp.com/advisory/ntap-20220526-0009/',
-                'https://security.netapp.com/advisory/ntap-20220729-0004',
-                'https://security.netapp.com/advisory/ntap-20220729-0004/',
-                'https://support.apple.com/kb/HT213255',
-                'https://support.apple.com/kb/HT213256',
-                'https://support.apple.com/kb/HT213257',
-                'https://ubuntu.com/security/notices/USN-5355-1',
-                'https://ubuntu.com/security/notices/USN-5355-2',
-                'https://ubuntu.com/security/notices/USN-5359-1',
-                'https://ubuntu.com/security/notices/USN-5359-2',
-                'https://ubuntu.com/security/notices/USN-5739-1',
-                'https://ubuntu.com/security/notices/USN-6736-1',
-                'https://ubuntu.com/security/notices/USN-6736-2',
-                'https://www.cve.org/CVERecord?id=CVE-2018-25032',
-                'https://www.debian.org/security/2022/dsa-5111',
-                'https://www.openwall.com/lists/oss-security/2022/03/24/1',
-                'https://www.openwall.com/lists/oss-security/2022/03/28/1',
-                'https://www.openwall.com/lists/oss-security/2022/03/28/3',
-                'https://www.oracle.com/security-alerts/cpujul2022.html'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'zlib: A flaw found in zlib when compressing (not decompressing) certain inputs'
-            }
-          ]
-        }
-      ],
-      'summary': {
-        'critical':   1,
-        'high':       25,
-        'low':        0,
-        'medium':     6,
-        'suppressed': 0,
-        'unknown':    0
-      }
-    }
-  },
-  {
-    'id':    'default/c80cb9ad09128fe9099c8930c063f0026ff0d5866ba1aa0c8e7042b41eb1de26',
-    'type':  'storage.sbomscanner.kubewarden.io.vulnerabilityreport',
-    'links': {
-      'patch':  'https://localhost:8005/v1/storage.sbomscanner.kubewarden.io.vulnerabilityreports/default/c80cb9ad09128fe9099c8930c063f0026ff0d5866ba1aa0c8e7042b41eb1de26',
-      'remove': 'https://localhost:8005/v1/storage.sbomscanner.kubewarden.io.vulnerabilityreports/default/c80cb9ad09128fe9099c8930c063f0026ff0d5866ba1aa0c8e7042b41eb1de26',
-      'self':   'https://localhost:8005/v1/storage.sbomscanner.kubewarden.io.vulnerabilityreports/default/c80cb9ad09128fe9099c8930c063f0026ff0d5866ba1aa0c8e7042b41eb1de26',
-      'update': 'https://localhost:8005/v1/storage.sbomscanner.kubewarden.io.vulnerabilityreports/default/c80cb9ad09128fe9099c8930c063f0026ff0d5866ba1aa0c8e7042b41eb1de26',
-      'view':   'https://localhost:8005/apis/storage.sbomscanner.kubewarden.io/v1alpha1/namespaces/default/vulnerabilityreports/c80cb9ad09128fe9099c8930c063f0026ff0d5866ba1aa0c8e7042b41eb1de26'
-    },
-    'apiVersion':    'storage.sbomscanner.kubewarden.io/v1alpha1',
-    'imageMetadata': {
-      'digest':      'sha256:903bfe2ae9942c3e1520ef3b4085d3ed0ae7aa04d5b084a6b5f20c3a2bf54d37',
-      'platform':    'linux/arm/v6',
-      'registry':    'lsong-demo1',
-      'registryURI': 'registry-1.docker.io',
-      'repository':  'library/alpine',
-      'tag':         '3.21.3'
-    },
-    'kind':     'VulnerabilityReport',
-    'metadata': {
-      'creationTimestamp': '2026-01-14T18:51:42Z',
-      'fields':            [
-        'c80cb9ad09128fe9099c8930c063f0026ff0d5866ba1aa0c8e7042b41eb1de26',
-        'registry-1.docker.io/library/alpine:3.21.3',
-        'linux/arm/v6',
-        '12 (0 suppressed)'
-      ],
-      'labels': {
-        'app.kubernetes.io/managed-by':          'sbomscanner',
-        'app.kubernetes.io/part-of':             'sbomscanner',
-        'sbomscanner.kubewarden.io/scanjob-uid': '445c600a-c4b6-40b3-bd71-f2d2140a37d5'
-      },
-      'name':            'c80cb9ad09128fe9099c8930c063f0026ff0d5866ba1aa0c8e7042b41eb1de26',
-      'namespace':       'default',
-      'ownerReferences': [
-        {
-          'apiVersion':         'storage.sbomscanner.kubewarden.io/v1alpha1',
-          'blockOwnerDeletion': true,
-          'controller':         true,
-          'kind':               'SBOM',
-          'name':               'c80cb9ad09128fe9099c8930c063f0026ff0d5866ba1aa0c8e7042b41eb1de26',
-          'uid':                'd87e9ade-ca96-4a0e-9b40-1cb1c41ff391'
-        }
-      ],
-      'relationships': [
-        {
-          'fromId':   'default/c80cb9ad09128fe9099c8930c063f0026ff0d5866ba1aa0c8e7042b41eb1de26',
-          'fromType': 'storage.sbomscanner.kubewarden.io.sbom',
-          'rel':      'owner',
-          'state':    'active',
-          'message':  'Resource is current'
-        }
-      ],
-      'resourceVersion': '1',
-      'state':           {
-        'error':         false,
-        'message':       'Resource is current',
-        'name':          'active',
-        'transitioning': false
-      },
-      'uid': '678996bb-d9a9-4f2f-b1e7-26fc2ba692b4'
-    },
-    'report': {
-      'results': [
-        {
-          'class':           'os-pkgs',
-          'target':          '/var/run/worker/trivy.sbom.1727898779.json (alpine 3.21.3)',
-          'type':            'alpine',
-          'vulnerabilities': [
-            {
-              'cve':  'CVE-2024-58251',
-              'cwes': [
-                'CWE-150'
-              ],
-              'description':   'In netstat in BusyBox through 1.37.0, local users can launch of network application with an argv[0] containing an ANSI terminal escape sequence, leading to a denial of service (terminal locked up) when netstat is used by a victim.',
-              'diffID':        'sha256:d4760a0d6710eff9ce0e24df0716c4988f818d0b68a40d876415bfa1f4b24342',
-              'fixedVersions': [
-                '1.37.0-r14'
-              ],
-              'installedVersion': '1.37.0-r12',
-              'packageName':      'busybox',
-              'purl':             'pkg:apk/alpine/busybox@1.37.0-r12?arch=armhf&distro=3.21.3',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2025/04/23/6',
-                'https://bugs.busybox.net/show_bug.cgi?id=15922',
-                'https://www.busybox.net',
-                'https://www.busybox.net/downloads/',
-                'https://www.cve.org/CVERecord?id=CVE-2024-58251'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'In netstat in BusyBox through 1.37.0, local users can launch of networ ...'
-            },
-            {
-              'cve':  'CVE-2025-46394',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '3.3',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-451'
-              ],
-              'description':   'In tar in BusyBox through 1.37.0, a TAR archive can have filenames hidden from a listing through the use of terminal escape sequences.',
-              'diffID':        'sha256:d4760a0d6710eff9ce0e24df0716c4988f818d0b68a40d876415bfa1f4b24342',
-              'fixedVersions': [
-                '1.37.0-r14'
-              ],
-              'installedVersion': '1.37.0-r12',
-              'packageName':      'busybox',
-              'purl':             'pkg:apk/alpine/busybox@1.37.0-r12?arch=armhf&distro=3.21.3',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2025/04/23/5',
-                'http://www.openwall.com/lists/oss-security/2025/04/24/3',
-                'https://bugs.busybox.net/show_bug.cgi?id=16018',
-                'https://lists.busybox.net/pipermail/busybox/2024-July/090806.html',
-                'https://lists.busybox.net/pipermail/busybox/2024-July/090814.html',
-                'https://www.busybox.net',
-                'https://www.busybox.net/downloads/',
-                'https://www.cve.org/CVERecord?id=CVE-2025-46394',
-                'https://www.openwall.com/lists/oss-security/2025/04/23/1'
-              ],
-              'severity':   'LOW',
-              'suppressed': false,
-              'title':      'In tar in BusyBox through 1.37.0, a TAR archive can have filenames hid ...'
-            },
-            {
-              'cve':  'CVE-2024-58251',
-              'cwes': [
-                'CWE-150'
-              ],
-              'description':   'In netstat in BusyBox through 1.37.0, local users can launch of network application with an argv[0] containing an ANSI terminal escape sequence, leading to a denial of service (terminal locked up) when netstat is used by a victim.',
-              'diffID':        'sha256:d4760a0d6710eff9ce0e24df0716c4988f818d0b68a40d876415bfa1f4b24342',
-              'fixedVersions': [
-                '1.37.0-r14'
-              ],
-              'installedVersion': '1.37.0-r12',
-              'packageName':      'busybox-binsh',
-              'purl':             'pkg:apk/alpine/busybox-binsh@1.37.0-r12?arch=armhf&distro=3.21.3',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2025/04/23/6',
-                'https://bugs.busybox.net/show_bug.cgi?id=15922',
-                'https://www.busybox.net',
-                'https://www.busybox.net/downloads/',
-                'https://www.cve.org/CVERecord?id=CVE-2024-58251'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'In netstat in BusyBox through 1.37.0, local users can launch of networ ...'
-            },
-            {
-              'cve':  'CVE-2025-46394',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '3.3',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-451'
-              ],
-              'description':   'In tar in BusyBox through 1.37.0, a TAR archive can have filenames hidden from a listing through the use of terminal escape sequences.',
-              'diffID':        'sha256:d4760a0d6710eff9ce0e24df0716c4988f818d0b68a40d876415bfa1f4b24342',
-              'fixedVersions': [
-                '1.37.0-r14'
-              ],
-              'installedVersion': '1.37.0-r12',
-              'packageName':      'busybox-binsh',
-              'purl':             'pkg:apk/alpine/busybox-binsh@1.37.0-r12?arch=armhf&distro=3.21.3',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2025/04/23/5',
-                'http://www.openwall.com/lists/oss-security/2025/04/24/3',
-                'https://bugs.busybox.net/show_bug.cgi?id=16018',
-                'https://lists.busybox.net/pipermail/busybox/2024-July/090806.html',
-                'https://lists.busybox.net/pipermail/busybox/2024-July/090814.html',
-                'https://www.busybox.net',
-                'https://www.busybox.net/downloads/',
-                'https://www.cve.org/CVERecord?id=CVE-2025-46394',
-                'https://www.openwall.com/lists/oss-security/2025/04/23/1'
-              ],
-              'severity':   'LOW',
-              'suppressed': false,
-              'title':      'In tar in BusyBox through 1.37.0, a TAR archive can have filenames hid ...'
-            },
-            {
-              'cve':  'CVE-2025-9230',
-              'cvss': {
-                'redhat': {
-                  'v3score':  '5.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L'
-                }
-              },
-              'cwes': [
-                'CWE-125',
-                'CWE-787'
-              ],
-              'description':   'Issue summary: An application trying to decrypt CMS messages encrypted using\npassword based encryption can trigger an out-of-bounds read and write.\n\nImpact summary: This out-of-bounds read may trigger a crash which leads to\nDenial of Service for an application. The out-of-bounds write can cause\na memory corruption which can have various consequences including\na Denial of Service or Execution of attacker-supplied code.\n\nAlthough the consequences of a successful exploit of this vulnerability\ncould be severe, the probability that the attacker would be able to\nperform it is low. Besides, password based (PWRI) encryption support in CMS\nmessages is very rarely used. For that reason the issue was assessed as\nModerate severity according to our Security Policy.\n\nThe FIPS modules in 3.5, 3.4, 3.3, 3.2, 3.1 and 3.0 are not affected by this\nissue, as the CMS implementation is outside the OpenSSL FIPS module\nboundary.',
-              'diffID':        'sha256:d4760a0d6710eff9ce0e24df0716c4988f818d0b68a40d876415bfa1f4b24342',
-              'fixedVersions': [
-                '3.3.5-r0'
-              ],
-              'installedVersion': '3.3.3-r0',
-              'packageName':      'libcrypto3',
-              'purl':             'pkg:apk/alpine/libcrypto3@3.3.3-r0?arch=armhf&distro=3.21.3',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2025/09/30/5',
-                'https://access.redhat.com/errata/RHSA-2025:21255',
-                'https://access.redhat.com/security/cve/CVE-2025-9230',
-                'https://bugzilla.redhat.com/2396054',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2396054',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-9230',
-                'https://errata.almalinux.org/9/ALSA-2025-21255.html',
-                'https://errata.rockylinux.org/RLSA-2025:21255',
-                'https://github.com/openssl/openssl/commit/5965ea5dd6960f36d8b7f74f8eac67a8eb8f2b45',
-                'https://github.com/openssl/openssl/commit/9e91358f365dee6c446dcdcdb01c04d2743fd280',
-                'https://github.com/openssl/openssl/commit/a79c4ce559c6a3a8fd4109e9f33c1185d5bf2def',
-                'https://github.com/openssl/openssl/commit/b5282d677551afda7d20e9c00e09561b547b2dfd',
-                'https://github.com/openssl/openssl/commit/bae259a211ada6315dc50900686daaaaaa55f482',
-                'https://github.openssl.org/openssl/extended-releases/commit/c2b96348bfa662f25f4fabf81958ae822063dae3',
-                'https://github.openssl.org/openssl/extended-releases/commit/dfbaf161d8dafc1132dd88cd48ad990ed9b4c8ba',
-                'https://linux.oracle.com/cve/CVE-2025-9230.html',
-                'https://linux.oracle.com/errata/ELSA-2026-0337.html',
-                'https://lists.debian.org/debian-lts-announce/2025/10/msg00001.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2025-9230',
-                'https://openssl-library.org/news/secadv/20250930.txt',
-                'https://ubuntu.com/security/notices/USN-7786-1',
-                'https://www.cve.org/CVERecord?id=CVE-2025-9230'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: Out-of-bounds read & write in RFC 3211 KEK Unwrap'
-            },
-            {
-              'cve':  'CVE-2025-9231',
-              'cvss': {
-                'redhat': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-385'
-              ],
-              'description':   'Issue summary: A timing side-channel which could potentially allow remote\nrecovery of the private key exists in the SM2 algorithm implementation on 64 bit\nARM platforms.\n\nImpact summary: A timing side-channel in SM2 signature computations on 64 bit\nARM platforms could allow recovering the private key by an attacker..\n\nWhile remote key recovery over a network was not attempted by the reporter,\ntiming measurements revealed a timing signal which may allow such an attack.\n\nOpenSSL does not directly support certificates with SM2 keys in TLS, and so\nthis CVE is not relevant in most TLS contexts.  However, given that it is\npossible to add support for such certificates via a custom provider, coupled\nwith the fact that in such a custom provider context the private key may be\nrecoverable via remote timing measurements, we consider this to be a Moderate\nseverity issue.\n\nThe FIPS modules in 3.5, 3.4, 3.3, 3.2, 3.1 and 3.0 are not affected by this\nissue, as SM2 is not an approved algorithm.',
-              'diffID':        'sha256:d4760a0d6710eff9ce0e24df0716c4988f818d0b68a40d876415bfa1f4b24342',
-              'fixedVersions': [
-                '3.3.5-r0'
-              ],
-              'installedVersion': '3.3.3-r0',
-              'packageName':      'libcrypto3',
-              'purl':             'pkg:apk/alpine/libcrypto3@3.3.3-r0?arch=armhf&distro=3.21.3',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2025/09/30/5',
-                'https://access.redhat.com/security/cve/CVE-2025-9231',
-                'https://github.com/openssl/openssl/commit/567f64386e43683888212226824b6a179885a0fe',
-                'https://github.com/openssl/openssl/commit/cba616c26ac8e7b37de5e77762e505ba5ca51698',
-                'https://github.com/openssl/openssl/commit/eed5adc9f969d77c94f213767acbb41ff923b6f4',
-                'https://github.com/openssl/openssl/commit/fc47a2ec078912b3e914fab5734535e76c4820c2',
-                'https://nvd.nist.gov/vuln/detail/CVE-2025-9231',
-                'https://openssl-library.org/news/secadv/20250930.txt',
-                'https://ubuntu.com/security/notices/USN-7786-1',
-                'https://www.cve.org/CVERecord?id=CVE-2025-9231'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: Timing side-channel in SM2 algorithm on 64 bit ARM'
-            },
-            {
-              'cve':  'CVE-2025-9232',
-              'cvss': {
-                'redhat': {
-                  'v3score':  '3.1',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L'
-                }
-              },
-              'cwes': [
-                'CWE-125'
-              ],
-              'description':   "Issue summary: An application using the OpenSSL HTTP client API functions may\ntrigger an out-of-bounds read if the 'no_proxy' environment variable is set and\nthe host portion of the authority component of the HTTP URL is an IPv6 address.\n\nImpact summary: An out-of-bounds read can trigger a crash which leads to\nDenial of Service for an application.\n\nThe OpenSSL HTTP client API functions can be used directly by applications\nbut they are also used by the OCSP client functions and CMP (Certificate\nManagement Protocol) client implementation in OpenSSL. However the URLs used\nby these implementations are unlikely to be controlled by an attacker.\n\nIn this vulnerable code the out of bounds read can only trigger a crash.\nFurthermore the vulnerability requires an attacker-controlled URL to be\npassed from an application to the OpenSSL function and the user has to have\na 'no_proxy' environment variable set. For the aforementioned reasons the\nissue was assessed as Low severity.\n\nThe vulnerable code was introduced in the following patch releases:\n3.0.16, 3.1.8, 3.2.4, 3.3.3, 3.4.0 and 3.5.0.\n\nThe FIPS modules in 3.5, 3.4, 3.3, 3.2, 3.1 and 3.0 are not affected by this\nissue, as the HTTP client implementation is outside the OpenSSL FIPS module\nboundary.",
-              'diffID':        'sha256:d4760a0d6710eff9ce0e24df0716c4988f818d0b68a40d876415bfa1f4b24342',
-              'fixedVersions': [
-                '3.3.5-r0'
-              ],
-              'installedVersion': '3.3.3-r0',
-              'packageName':      'libcrypto3',
-              'purl':             'pkg:apk/alpine/libcrypto3@3.3.3-r0?arch=armhf&distro=3.21.3',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2025/09/30/5',
-                'https://access.redhat.com/security/cve/CVE-2025-9232',
-                'https://github.com/openssl/openssl/commit/2b4ec20e47959170422922eaff25346d362dcb35',
-                'https://github.com/openssl/openssl/commit/654dc11d23468a74fc8ea4672b702dd3feb7be4b',
-                'https://github.com/openssl/openssl/commit/7cf21a30513c9e43c4bc3836c237cf086e194af3',
-                'https://github.com/openssl/openssl/commit/89e790ac431125a4849992858490bed6b225eadf',
-                'https://github.com/openssl/openssl/commit/bbf38c034cdabd0a13330abcc4855c866f53d2e0',
-                'https://nvd.nist.gov/vuln/detail/CVE-2025-9232',
-                'https://openssl-library.org/news/secadv/20250930.txt',
-                'https://ubuntu.com/security/notices/USN-7786-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2025-9232'
-              ],
-              'severity':   'LOW',
-              'suppressed': false,
-              'title':      'openssl: Out-of-bounds read in HTTP client no_proxy handling'
-            },
-            {
-              'cve':  'CVE-2025-9230',
-              'cvss': {
-                'redhat': {
-                  'v3score':  '5.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L'
-                }
-              },
-              'cwes': [
-                'CWE-125',
-                'CWE-787'
-              ],
-              'description':   'Issue summary: An application trying to decrypt CMS messages encrypted using\npassword based encryption can trigger an out-of-bounds read and write.\n\nImpact summary: This out-of-bounds read may trigger a crash which leads to\nDenial of Service for an application. The out-of-bounds write can cause\na memory corruption which can have various consequences including\na Denial of Service or Execution of attacker-supplied code.\n\nAlthough the consequences of a successful exploit of this vulnerability\ncould be severe, the probability that the attacker would be able to\nperform it is low. Besides, password based (PWRI) encryption support in CMS\nmessages is very rarely used. For that reason the issue was assessed as\nModerate severity according to our Security Policy.\n\nThe FIPS modules in 3.5, 3.4, 3.3, 3.2, 3.1 and 3.0 are not affected by this\nissue, as the CMS implementation is outside the OpenSSL FIPS module\nboundary.',
-              'diffID':        'sha256:d4760a0d6710eff9ce0e24df0716c4988f818d0b68a40d876415bfa1f4b24342',
-              'fixedVersions': [
-                '3.3.5-r0'
-              ],
-              'installedVersion': '3.3.3-r0',
-              'packageName':      'libssl3',
-              'purl':             'pkg:apk/alpine/libssl3@3.3.3-r0?arch=armhf&distro=3.21.3',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2025/09/30/5',
-                'https://access.redhat.com/errata/RHSA-2025:21255',
-                'https://access.redhat.com/security/cve/CVE-2025-9230',
-                'https://bugzilla.redhat.com/2396054',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2396054',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-9230',
-                'https://errata.almalinux.org/9/ALSA-2025-21255.html',
-                'https://errata.rockylinux.org/RLSA-2025:21255',
-                'https://github.com/openssl/openssl/commit/5965ea5dd6960f36d8b7f74f8eac67a8eb8f2b45',
-                'https://github.com/openssl/openssl/commit/9e91358f365dee6c446dcdcdb01c04d2743fd280',
-                'https://github.com/openssl/openssl/commit/a79c4ce559c6a3a8fd4109e9f33c1185d5bf2def',
-                'https://github.com/openssl/openssl/commit/b5282d677551afda7d20e9c00e09561b547b2dfd',
-                'https://github.com/openssl/openssl/commit/bae259a211ada6315dc50900686daaaaaa55f482',
-                'https://github.openssl.org/openssl/extended-releases/commit/c2b96348bfa662f25f4fabf81958ae822063dae3',
-                'https://github.openssl.org/openssl/extended-releases/commit/dfbaf161d8dafc1132dd88cd48ad990ed9b4c8ba',
-                'https://linux.oracle.com/cve/CVE-2025-9230.html',
-                'https://linux.oracle.com/errata/ELSA-2026-0337.html',
-                'https://lists.debian.org/debian-lts-announce/2025/10/msg00001.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2025-9230',
-                'https://openssl-library.org/news/secadv/20250930.txt',
-                'https://ubuntu.com/security/notices/USN-7786-1',
-                'https://www.cve.org/CVERecord?id=CVE-2025-9230'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: Out-of-bounds read & write in RFC 3211 KEK Unwrap'
-            },
-            {
-              'cve':  'CVE-2025-9231',
-              'cvss': {
-                'redhat': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-385'
-              ],
-              'description':   'Issue summary: A timing side-channel which could potentially allow remote\nrecovery of the private key exists in the SM2 algorithm implementation on 64 bit\nARM platforms.\n\nImpact summary: A timing side-channel in SM2 signature computations on 64 bit\nARM platforms could allow recovering the private key by an attacker..\n\nWhile remote key recovery over a network was not attempted by the reporter,\ntiming measurements revealed a timing signal which may allow such an attack.\n\nOpenSSL does not directly support certificates with SM2 keys in TLS, and so\nthis CVE is not relevant in most TLS contexts.  However, given that it is\npossible to add support for such certificates via a custom provider, coupled\nwith the fact that in such a custom provider context the private key may be\nrecoverable via remote timing measurements, we consider this to be a Moderate\nseverity issue.\n\nThe FIPS modules in 3.5, 3.4, 3.3, 3.2, 3.1 and 3.0 are not affected by this\nissue, as SM2 is not an approved algorithm.',
-              'diffID':        'sha256:d4760a0d6710eff9ce0e24df0716c4988f818d0b68a40d876415bfa1f4b24342',
-              'fixedVersions': [
-                '3.3.5-r0'
-              ],
-              'installedVersion': '3.3.3-r0',
-              'packageName':      'libssl3',
-              'purl':             'pkg:apk/alpine/libssl3@3.3.3-r0?arch=armhf&distro=3.21.3',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2025/09/30/5',
-                'https://access.redhat.com/security/cve/CVE-2025-9231',
-                'https://github.com/openssl/openssl/commit/567f64386e43683888212226824b6a179885a0fe',
-                'https://github.com/openssl/openssl/commit/cba616c26ac8e7b37de5e77762e505ba5ca51698',
-                'https://github.com/openssl/openssl/commit/eed5adc9f969d77c94f213767acbb41ff923b6f4',
-                'https://github.com/openssl/openssl/commit/fc47a2ec078912b3e914fab5734535e76c4820c2',
-                'https://nvd.nist.gov/vuln/detail/CVE-2025-9231',
-                'https://openssl-library.org/news/secadv/20250930.txt',
-                'https://ubuntu.com/security/notices/USN-7786-1',
-                'https://www.cve.org/CVERecord?id=CVE-2025-9231'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: Timing side-channel in SM2 algorithm on 64 bit ARM'
-            },
-            {
-              'cve':  'CVE-2025-9232',
-              'cvss': {
-                'redhat': {
-                  'v3score':  '3.1',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L'
-                }
-              },
-              'cwes': [
-                'CWE-125'
-              ],
-              'description':   "Issue summary: An application using the OpenSSL HTTP client API functions may\ntrigger an out-of-bounds read if the 'no_proxy' environment variable is set and\nthe host portion of the authority component of the HTTP URL is an IPv6 address.\n\nImpact summary: An out-of-bounds read can trigger a crash which leads to\nDenial of Service for an application.\n\nThe OpenSSL HTTP client API functions can be used directly by applications\nbut they are also used by the OCSP client functions and CMP (Certificate\nManagement Protocol) client implementation in OpenSSL. However the URLs used\nby these implementations are unlikely to be controlled by an attacker.\n\nIn this vulnerable code the out of bounds read can only trigger a crash.\nFurthermore the vulnerability requires an attacker-controlled URL to be\npassed from an application to the OpenSSL function and the user has to have\na 'no_proxy' environment variable set. For the aforementioned reasons the\nissue was assessed as Low severity.\n\nThe vulnerable code was introduced in the following patch releases:\n3.0.16, 3.1.8, 3.2.4, 3.3.3, 3.4.0 and 3.5.0.\n\nThe FIPS modules in 3.5, 3.4, 3.3, 3.2, 3.1 and 3.0 are not affected by this\nissue, as the HTTP client implementation is outside the OpenSSL FIPS module\nboundary.",
-              'diffID':        'sha256:d4760a0d6710eff9ce0e24df0716c4988f818d0b68a40d876415bfa1f4b24342',
-              'fixedVersions': [
-                '3.3.5-r0'
-              ],
-              'installedVersion': '3.3.3-r0',
-              'packageName':      'libssl3',
-              'purl':             'pkg:apk/alpine/libssl3@3.3.3-r0?arch=armhf&distro=3.21.3',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2025/09/30/5',
-                'https://access.redhat.com/security/cve/CVE-2025-9232',
-                'https://github.com/openssl/openssl/commit/2b4ec20e47959170422922eaff25346d362dcb35',
-                'https://github.com/openssl/openssl/commit/654dc11d23468a74fc8ea4672b702dd3feb7be4b',
-                'https://github.com/openssl/openssl/commit/7cf21a30513c9e43c4bc3836c237cf086e194af3',
-                'https://github.com/openssl/openssl/commit/89e790ac431125a4849992858490bed6b225eadf',
-                'https://github.com/openssl/openssl/commit/bbf38c034cdabd0a13330abcc4855c866f53d2e0',
-                'https://nvd.nist.gov/vuln/detail/CVE-2025-9232',
-                'https://openssl-library.org/news/secadv/20250930.txt',
-                'https://ubuntu.com/security/notices/USN-7786-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2025-9232'
-              ],
-              'severity':   'LOW',
-              'suppressed': false,
-              'title':      'openssl: Out-of-bounds read in HTTP client no_proxy handling'
-            },
-            {
-              'cve':  'CVE-2024-58251',
-              'cwes': [
-                'CWE-150'
-              ],
-              'description':   'In netstat in BusyBox through 1.37.0, local users can launch of network application with an argv[0] containing an ANSI terminal escape sequence, leading to a denial of service (terminal locked up) when netstat is used by a victim.',
-              'diffID':        'sha256:d4760a0d6710eff9ce0e24df0716c4988f818d0b68a40d876415bfa1f4b24342',
-              'fixedVersions': [
-                '1.37.0-r14'
-              ],
-              'installedVersion': '1.37.0-r12',
-              'packageName':      'ssl_client',
-              'purl':             'pkg:apk/alpine/ssl_client@1.37.0-r12?arch=armhf&distro=3.21.3',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2025/04/23/6',
-                'https://bugs.busybox.net/show_bug.cgi?id=15922',
-                'https://www.busybox.net',
-                'https://www.busybox.net/downloads/',
-                'https://www.cve.org/CVERecord?id=CVE-2024-58251'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'In netstat in BusyBox through 1.37.0, local users can launch of networ ...'
-            },
-            {
-              'cve':  'CVE-2025-46394',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '3.3',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-451'
-              ],
-              'description':   'In tar in BusyBox through 1.37.0, a TAR archive can have filenames hidden from a listing through the use of terminal escape sequences.',
-              'diffID':        'sha256:d4760a0d6710eff9ce0e24df0716c4988f818d0b68a40d876415bfa1f4b24342',
-              'fixedVersions': [
-                '1.37.0-r14'
-              ],
-              'installedVersion': '1.37.0-r12',
-              'packageName':      'ssl_client',
-              'purl':             'pkg:apk/alpine/ssl_client@1.37.0-r12?arch=armhf&distro=3.21.3',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2025/04/23/5',
-                'http://www.openwall.com/lists/oss-security/2025/04/24/3',
-                'https://bugs.busybox.net/show_bug.cgi?id=16018',
-                'https://lists.busybox.net/pipermail/busybox/2024-July/090806.html',
-                'https://lists.busybox.net/pipermail/busybox/2024-July/090814.html',
-                'https://www.busybox.net',
-                'https://www.busybox.net/downloads/',
-                'https://www.cve.org/CVERecord?id=CVE-2025-46394',
-                'https://www.openwall.com/lists/oss-security/2025/04/23/1'
-              ],
-              'severity':   'LOW',
-              'suppressed': false,
-              'title':      'In tar in BusyBox through 1.37.0, a TAR archive can have filenames hid ...'
-            }
-          ]
-        }
-      ],
-      'summary': {
-        'critical':   0,
-        'high':       0,
-        'low':        5,
-        'medium':     7,
-        'suppressed': 0,
-        'unknown':    0
-      }
-    }
-  },
-  {
-    'id':    'default/c80f943a984cc78938fcbef5e806c917dc5595ad17cdebba30da310b7d652ef1',
-    'type':  'storage.sbomscanner.kubewarden.io.vulnerabilityreport',
-    'links': {
-      'patch':  'https://localhost:8005/v1/storage.sbomscanner.kubewarden.io.vulnerabilityreports/default/c80f943a984cc78938fcbef5e806c917dc5595ad17cdebba30da310b7d652ef1',
-      'remove': 'https://localhost:8005/v1/storage.sbomscanner.kubewarden.io.vulnerabilityreports/default/c80f943a984cc78938fcbef5e806c917dc5595ad17cdebba30da310b7d652ef1',
-      'self':   'https://localhost:8005/v1/storage.sbomscanner.kubewarden.io.vulnerabilityreports/default/c80f943a984cc78938fcbef5e806c917dc5595ad17cdebba30da310b7d652ef1',
-      'update': 'https://localhost:8005/v1/storage.sbomscanner.kubewarden.io.vulnerabilityreports/default/c80f943a984cc78938fcbef5e806c917dc5595ad17cdebba30da310b7d652ef1',
-      'view':   'https://localhost:8005/apis/storage.sbomscanner.kubewarden.io/v1alpha1/namespaces/default/vulnerabilityreports/c80f943a984cc78938fcbef5e806c917dc5595ad17cdebba30da310b7d652ef1'
-    },
-    'apiVersion':    'storage.sbomscanner.kubewarden.io/v1alpha1',
-    'imageMetadata': {
-      'digest':      'sha256:f8bf2ce4b4bcd0e65f4880ddec62b1c214be2a3b7ef0f143a5c280474e8e1ba4',
-      'platform':    'linux/amd64',
-      'registry':    'demo-02',
-      'registryURI': 'ghcr.io',
-      'repository':  'linuxcontainers/alpine',
-      'tag':         '3.13.12'
-    },
-    'kind':     'VulnerabilityReport',
-    'metadata': {
-      'creationTimestamp': '2026-01-09T22:47:05Z',
-      'fields':            [
-        'c80f943a984cc78938fcbef5e806c917dc5595ad17cdebba30da310b7d652ef1',
-        'ghcr.io/linuxcontainers/alpine:3.13.12',
-        'linux/amd64',
-        '0 (0 suppressed)'
-      ],
-      'labels': {
-        'app.kubernetes.io/managed-by':          'sbomscanner',
-        'app.kubernetes.io/part-of':             'sbomscanner',
-        'sbomscanner.kubewarden.io/scanjob-uid': '42184d01-4b15-466f-98aa-e802d1b6b6b8'
-      },
-      'name':            'c80f943a984cc78938fcbef5e806c917dc5595ad17cdebba30da310b7d652ef1',
-      'namespace':       'default',
-      'ownerReferences': [
-        {
-          'apiVersion':         'storage.sbomscanner.kubewarden.io/v1alpha1',
-          'blockOwnerDeletion': true,
-          'controller':         true,
-          'kind':               'SBOM',
-          'name':               'c80f943a984cc78938fcbef5e806c917dc5595ad17cdebba30da310b7d652ef1',
-          'uid':                '430419ff-0cef-45db-ae2c-5303edacaf59'
-        }
-      ],
-      'relationships': [
-        {
-          'fromId':   'default/c80f943a984cc78938fcbef5e806c917dc5595ad17cdebba30da310b7d652ef1',
-          'fromType': 'storage.sbomscanner.kubewarden.io.sbom',
-          'rel':      'owner',
-          'state':    'active',
-          'message':  'Resource is current'
-        }
-      ],
-      'resourceVersion': '3',
-      'state':           {
-        'error':         false,
-        'message':       'Resource is current',
-        'name':          'active',
-        'transitioning': false
-      },
-      'uid': '83642cbc-9d58-46d3-9065-88ceb71caad1'
-    },
-    'report': {
-      'results': [
-        {
-          'class':           'os-pkgs',
-          'target':          '/var/run/worker/trivy.sbom.3412834659.json (alpine 3.13.12)',
-          'type':            'alpine',
-          'vulnerabilities': null
-        }
-      ],
-      'summary': {
-        'critical':   0,
-        'high':       0,
-        'low':        0,
-        'medium':     0,
-        'suppressed': 0,
-        'unknown':    0
-      }
-    }
-  },
-  {
-    'id':    'default/c858bfb44995bee988522f59b5e8e480f79e13b95cf6c69c4b5b487f5febcab5',
-    'type':  'storage.sbomscanner.kubewarden.io.vulnerabilityreport',
-    'links': {
-      'patch':  'https://localhost:8005/v1/storage.sbomscanner.kubewarden.io.vulnerabilityreports/default/c858bfb44995bee988522f59b5e8e480f79e13b95cf6c69c4b5b487f5febcab5',
-      'remove': 'https://localhost:8005/v1/storage.sbomscanner.kubewarden.io.vulnerabilityreports/default/c858bfb44995bee988522f59b5e8e480f79e13b95cf6c69c4b5b487f5febcab5',
-      'self':   'https://localhost:8005/v1/storage.sbomscanner.kubewarden.io.vulnerabilityreports/default/c858bfb44995bee988522f59b5e8e480f79e13b95cf6c69c4b5b487f5febcab5',
-      'update': 'https://localhost:8005/v1/storage.sbomscanner.kubewarden.io.vulnerabilityreports/default/c858bfb44995bee988522f59b5e8e480f79e13b95cf6c69c4b5b487f5febcab5',
-      'view':   'https://localhost:8005/apis/storage.sbomscanner.kubewarden.io/v1alpha1/namespaces/default/vulnerabilityreports/c858bfb44995bee988522f59b5e8e480f79e13b95cf6c69c4b5b487f5febcab5'
-    },
-    '_id':           'default/c858bfb44995bee988522f59b5e8e480f79e13b95cf6c69c4b5b487f5febcab5',
-    'apiVersion':    'storage.sbomscanner.kubewarden.io/v1alpha1',
-    'imageMetadata': {
-      'digest':      'sha256:d22cb65d578ea325347d7a6e5645998c3e7310f57504368df2a1a8f4337d1ed6',
-      'platform':    'linux/amd64',
-      'registry':    'demo-02',
-      'registryURI': 'ghcr.io',
-      'repository':  'linuxcontainers/alpine',
-      'tag':         'latest'
-    },
-    'kind':     'VulnerabilityReport',
-    'metadata': {
-      'creationTimestamp': '2026-01-09T22:47:09Z',
-      'fields':            [
-        'c858bfb44995bee988522f59b5e8e480f79e13b95cf6c69c4b5b487f5febcab5',
-        'ghcr.io/linuxcontainers/alpine:latest',
-        'linux/amd64',
-        '32 (0 suppressed)'
-      ],
-      'labels': {
-        'app.kubernetes.io/managed-by':          'sbomscanner',
-        'app.kubernetes.io/part-of':             'sbomscanner',
-        'sbomscanner.kubewarden.io/scanjob-uid': '42184d01-4b15-466f-98aa-e802d1b6b6b8'
-      },
-      'managedFields': [
-        {
-          'apiVersion': 'storage.sbomscanner.kubewarden.io/v1alpha1',
-          'fieldsType': 'FieldsV1',
-          'fieldsV1':   {
-            'f:imageMetadata': {
-              'f:digest':      {},
-              'f:platform':    {},
-              'f:registry':    {},
-              'f:registryURI': {},
-              'f:repository':  {},
-              'f:tag':         {}
-            },
-            'f:metadata': {
-              'f:labels': {
-                '.':                                       {},
-                'f:app.kubernetes.io/managed-by':          {},
-                'f:app.kubernetes.io/part-of':             {},
-                'f:sbomscanner.kubewarden.io/scanjob-uid': {}
-              },
-              'f:ownerReferences': {
-                '.':                                                {},
-                'k:{"uid":"a939f96c-6708-49b7-8cd1-f3295e85cc8a"}': {}
-              }
-            },
-            'f:report': {
-              'f:results': {},
-              'f:summary': {
-                'f:critical': {},
-                'f:high':     {},
-                'f:low':      {},
-                'f:medium':   {}
-              }
-            }
-          },
-          'manager':   'worker',
-          'operation': 'Update',
-          'time':      '2026-01-28T18:34:36Z'
-        }
-      ],
-      'name':            'c858bfb44995bee988522f59b5e8e480f79e13b95cf6c69c4b5b487f5febcab5',
-      'namespace':       'default',
-      'ownerReferences': [
-        {
-          'apiVersion':         'storage.sbomscanner.kubewarden.io/v1alpha1',
-          'blockOwnerDeletion': true,
-          'controller':         true,
-          'kind':               'SBOM',
-          'name':               'c858bfb44995bee988522f59b5e8e480f79e13b95cf6c69c4b5b487f5febcab5',
-          'uid':                'a939f96c-6708-49b7-8cd1-f3295e85cc8a'
-        }
-      ],
-      'relationships': [
-        {
-          'fromId':   'default/c858bfb44995bee988522f59b5e8e480f79e13b95cf6c69c4b5b487f5febcab5',
-          'fromType': 'storage.sbomscanner.kubewarden.io.sbom',
-          'rel':      'owner',
-          'state':    'active',
-          'message':  'Resource is current'
-        }
-      ],
-      'resourceVersion': '7',
-      'state':           {
-        'error':         false,
-        'message':       'Resource is current',
-        'name':          'active',
-        'transitioning': false
-      },
-      'uid': '0551afef-ee5d-4007-9981-ca379a723f52'
-    },
-    'report': {
-      'results': [
-        {
-          'class':           'os-pkgs',
-          'target':          '/var/run/worker/trivy.sbom.2516625628.json (alpine 3.20.6)',
-          'type':            'alpine',
-          'vulnerabilities': [
-            {
-              'cve':  'CVE-2024-58251',
-              'cwes': [
-                'CWE-150'
-              ],
-              'description':   'In netstat in BusyBox through 1.37.0, local users can launch of network application with an argv[0] containing an ANSI terminal escape sequence, leading to a denial of service (terminal locked up) when netstat is used by a victim.',
-              'diffID':        'sha256:994456c4fd7b2b87346a81961efb4ce945a39592d32e0762b38768bca7c7d085',
-              'fixedVersions': [
-                '1.36.1-r31'
-              ],
-              'installedVersion': '1.36.1-r29',
-              'packageName':      'busybox',
-              'purl':             'pkg:apk/alpine/busybox@1.36.1-r29?arch=x86_64&distro=3.20.6',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2025/04/23/6',
-                'https://bugs.busybox.net/show_bug.cgi?id=15922',
-                'https://www.busybox.net',
-                'https://www.busybox.net/downloads/',
-                'https://www.cve.org/CVERecord?id=CVE-2024-58251'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'In netstat in BusyBox through 1.37.0, local users can launch of networ ...'
-            },
-            {
-              'cve':  'CVE-2025-46394',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '3.3',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-451'
-              ],
-              'description':   'In tar in BusyBox through 1.37.0, a TAR archive can have filenames hidden from a listing through the use of terminal escape sequences.',
-              'diffID':        'sha256:994456c4fd7b2b87346a81961efb4ce945a39592d32e0762b38768bca7c7d085',
-              'fixedVersions': [
-                '1.36.1-r31'
-              ],
-              'installedVersion': '1.36.1-r29',
-              'packageName':      'busybox',
-              'purl':             'pkg:apk/alpine/busybox@1.36.1-r29?arch=x86_64&distro=3.20.6',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2025/04/23/5',
-                'http://www.openwall.com/lists/oss-security/2025/04/24/3',
-                'https://bugs.busybox.net/show_bug.cgi?id=16018',
-                'https://lists.busybox.net/pipermail/busybox/2024-July/090806.html',
-                'https://lists.busybox.net/pipermail/busybox/2024-July/090814.html',
-                'https://www.busybox.net',
-                'https://www.busybox.net/downloads/',
-                'https://www.cve.org/CVERecord?id=CVE-2025-46394',
-                'https://www.openwall.com/lists/oss-security/2025/04/23/1'
-              ],
-              'severity':   'LOW',
-              'suppressed': false,
-              'title':      'In tar in BusyBox through 1.37.0, a TAR archive can have filenames hid ...'
-            },
-            {
-              'cve':  'CVE-2024-58251',
-              'cwes': [
-                'CWE-150'
-              ],
-              'description':   'In netstat in BusyBox through 1.37.0, local users can launch of network application with an argv[0] containing an ANSI terminal escape sequence, leading to a denial of service (terminal locked up) when netstat is used by a victim.',
-              'diffID':        'sha256:994456c4fd7b2b87346a81961efb4ce945a39592d32e0762b38768bca7c7d085',
-              'fixedVersions': [
-                '1.36.1-r31'
-              ],
-              'installedVersion': '1.36.1-r29',
-              'packageName':      'busybox-binsh',
-              'purl':             'pkg:apk/alpine/busybox-binsh@1.36.1-r29?arch=x86_64&distro=3.20.6',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2025/04/23/6',
-                'https://bugs.busybox.net/show_bug.cgi?id=15922',
-                'https://www.busybox.net',
-                'https://www.busybox.net/downloads/',
-                'https://www.cve.org/CVERecord?id=CVE-2024-58251'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'In netstat in BusyBox through 1.37.0, local users can launch of networ ...'
-            },
-            {
-              'cve':  'CVE-2025-46394',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '3.3',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-451'
-              ],
-              'description':   'In tar in BusyBox through 1.37.0, a TAR archive can have filenames hidden from a listing through the use of terminal escape sequences.',
-              'diffID':        'sha256:994456c4fd7b2b87346a81961efb4ce945a39592d32e0762b38768bca7c7d085',
-              'fixedVersions': [
-                '1.36.1-r31'
-              ],
-              'installedVersion': '1.36.1-r29',
-              'packageName':      'busybox-binsh',
-              'purl':             'pkg:apk/alpine/busybox-binsh@1.36.1-r29?arch=x86_64&distro=3.20.6',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2025/04/23/5',
-                'http://www.openwall.com/lists/oss-security/2025/04/24/3',
-                'https://bugs.busybox.net/show_bug.cgi?id=16018',
-                'https://lists.busybox.net/pipermail/busybox/2024-July/090806.html',
-                'https://lists.busybox.net/pipermail/busybox/2024-July/090814.html',
-                'https://www.busybox.net',
-                'https://www.busybox.net/downloads/',
-                'https://www.cve.org/CVERecord?id=CVE-2025-46394',
-                'https://www.openwall.com/lists/oss-security/2025/04/23/1'
-              ],
-              'severity':   'LOW',
-              'suppressed': false,
-              'title':      'In tar in BusyBox through 1.37.0, a TAR archive can have filenames hid ...'
-            },
-            {
-              'cve':  'CVE-2025-15467',
-              'cvss': {
-                'redhat': {
-                  'v3score':  '9.8',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-787'
-              ],
-              'description':   'Issue summary: Parsing CMS AuthEnvelopedData message with maliciously\ncrafted AEAD parameters can trigger a stack buffer overflow.\n\nImpact summary: A stack buffer overflow may lead to a crash, causing Denial\nof Service, or potentially remote code execution.\n\nWhen parsing CMS AuthEnvelopedData structures that use AEAD ciphers such as\nAES-GCM, the IV (Initialization Vector) encoded in the ASN.1 parameters is\ncopied into a fixed-size stack buffer without verifying that its length fits\nthe destination. An attacker can supply a crafted CMS message with an\noversized IV, causing a stack-based out-of-bounds write before any\nauthentication or tag verification occurs.\n\nApplications and services that parse untrusted CMS or PKCS#7 content using\nAEAD ciphers (e.g., S/MIME AuthEnvelopedData with AES-GCM) are vulnerable.\nBecause the overflow occurs prior to authentication, no valid key material\nis required to trigger it. While exploitability to remote code execution\ndepends on platform and toolchain mitigations, the stack-based write\nprimitive represents a severe risk.\n\nThe FIPS modules in 3.6, 3.5, 3.4, 3.3 and 3.0 are not affected by this\nissue, as the CMS implementation is outside the OpenSSL FIPS module\nboundary.\n\nOpenSSL 3.6, 3.5, 3.4, 3.3 and 3.0 are vulnerable to this issue.\n\nOpenSSL 1.1.1 and 1.0.2 are not affected by this issue.',
-              'diffID':        'sha256:994456c4fd7b2b87346a81961efb4ce945a39592d32e0762b38768bca7c7d085',
-              'fixedVersions': [
-                '3.3.6-r0'
-              ],
-              'installedVersion': '3.3.3-r0',
-              'packageName':      'libcrypto3',
-              'purl':             'pkg:apk/alpine/libcrypto3@3.3.3-r0?arch=x86_64&distro=3.20.6',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2026/01/27/10',
-                'https://access.redhat.com/security/cve/CVE-2025-15467',
-                'https://github.com/openssl/openssl/commit/2c8f0e5fa9b6ee5508a0349e4572ddb74db5a703',
-                'https://github.com/openssl/openssl/commit/5f26d4202f5b89664c5c3f3c62086276026ba9a9',
-                'https://github.com/openssl/openssl/commit/6ced0fe6b10faa560e410e3ee8d6c82f06c65ea3',
-                'https://github.com/openssl/openssl/commit/ce39170276daec87f55c39dad1f629b56344429e',
-                'https://github.com/openssl/openssl/commit/d0071a0799f20cc8101730145349ed4487c268dc',
-                'https://nvd.nist.gov/vuln/detail/CVE-2025-15467',
-                'https://openssl-library.org/news/secadv/20260127.txt',
-                'https://ubuntu.com/security/notices/USN-7980-1',
-                'https://www.cve.org/CVERecord?id=CVE-2025-15467'
-              ],
-              'severity':   'CRITICAL',
-              'suppressed': false,
-              'title':      'openssl: OpenSSL: Remote code execution or Denial of Service via oversized Initialization Vector in CMS parsing'
-            },
-            {
-              'cve':  'CVE-2025-69419',
-              'cvss': {
-                'redhat': {
-                  'v3score':  '7.4',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-787'
-              ],
-              'description':   'Issue summary: Calling PKCS12_get_friendlyname() function on a maliciously\ncrafted PKCS#12 file with a BMPString (UTF-16BE) friendly name containing\nnon-ASCII BMP code point can trigger a one byte write before the allocated\nbuffer.\n\nImpact summary: The out-of-bounds write can cause a memory corruption\nwhich can have various consequences including a Denial of Service.\n\nThe OPENSSL_uni2utf8() function performs a two-pass conversion of a PKCS#12\nBMPString (UTF-16BE) to UTF-8. In the second pass, when emitting UTF-8 bytes,\nthe helper function bmp_to_utf8() incorrectly forwards the remaining UTF-16\nsource byte count as the destination buffer capacity to UTF8_putc(). For BMP\ncode points above U+07FF, UTF-8 requires three bytes, but the forwarded\ncapacity can be just two bytes. UTF8_putc() then returns -1, and this negative\nvalue is added to the output length without validation, causing the\nlength to become negative. The subsequent trailing NUL byte is then written\nat a negative offset, causing write outside of heap allocated buffer.\n\nThe vulnerability is reachable via the public PKCS12_get_friendlyname() API\nwhen parsing attacker-controlled PKCS#12 files. While PKCS12_parse() uses a\ndifferent code path that avoids this issue, PKCS12_get_friendlyname() directly\ninvokes the vulnerable function. Exploitation requires an attacker to provide\na malicious PKCS#12 file to be parsed by the application and the attacker\ncan just trigger a one zero byte write before the allocated buffer.\nFor that reason the issue was assessed as Low severity according to our\nSecurity Policy.\n\nThe FIPS modules in 3.6, 3.5, 3.4, 3.3 and 3.0 are not affected by this issue,\nas the PKCS#12 implementation is outside the OpenSSL FIPS module boundary.\n\nOpenSSL 3.6, 3.5, 3.4, 3.3, 3.0 and 1.1.1 are vulnerable to this issue.\n\nOpenSSL 1.0.2 is not affected by this issue.',
-              'diffID':        'sha256:994456c4fd7b2b87346a81961efb4ce945a39592d32e0762b38768bca7c7d085',
-              'fixedVersions': [
-                '3.3.6-r0'
-              ],
-              'installedVersion': '3.3.3-r0',
-              'packageName':      'libcrypto3',
-              'purl':             'pkg:apk/alpine/libcrypto3@3.3.3-r0?arch=x86_64&distro=3.20.6',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2025-69419',
-                'https://github.com/openssl/openssl/commit/41be0f216404f14457bbf3b9cc488dba60b49296',
-                'https://github.com/openssl/openssl/commit/7e9cac9832e4705b91987c2474ed06a37a93cecb',
-                'https://github.com/openssl/openssl/commit/a26a90d38edec3748566129d824e664b54bee2e2',
-                'https://github.com/openssl/openssl/commit/cda12de3bc0e333ea8d2c6fd15001dbdaf280015',
-                'https://github.com/openssl/openssl/commit/ff628933755075446bca8307e8417c14d164b535',
-                'https://nvd.nist.gov/vuln/detail/CVE-2025-69419',
-                'https://openssl-library.org/news/secadv/20260127.txt',
-                'https://ubuntu.com/security/notices/USN-7980-1',
-                'https://ubuntu.com/security/notices/USN-7980-2',
-                'https://www.cve.org/CVERecord?id=CVE-2025-69419'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: OpenSSL: Arbitrary code execution due to out-of-bounds write in PKCS#12 processing'
-            },
-            {
-              'cve':  'CVE-2025-15468',
-              'cvss': {
-                'redhat': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-476'
-              ],
-              'description':   'Issue summary: If an application using the SSL_CIPHER_find() function in\na QUIC protocol client or server receives an unknown cipher suite from\nthe peer, a NULL dereference occurs.\n\nImpact summary: A NULL pointer dereference leads to abnormal termination of\nthe running process causing Denial of Service.\n\nSome applications call SSL_CIPHER_find() from the client_hello_cb callback\non the cipher ID received from the peer. If this is done with an SSL object\nimplementing the QUIC protocol, NULL pointer dereference will happen if\nthe examined cipher ID is unknown or unsupported.\n\nAs it is not very common to call this function in applications using the QUIC \nprotocol and the worst outcome is Denial of Service, the issue was assessed\nas Low severity.\n\nThe vulnerable code was introduced in the 3.2 version with the addition\nof the QUIC protocol support.\n\nThe FIPS modules in 3.6, 3.5, 3.4 and 3.3 are not affected by this issue,\nas the QUIC implementation is outside the OpenSSL FIPS module boundary.\n\nOpenSSL 3.6, 3.5, 3.4 and 3.3 are vulnerable to this issue.\n\nOpenSSL 3.0, 1.1.1 and 1.0.2 are not affected by this issue.',
-              'diffID':        'sha256:994456c4fd7b2b87346a81961efb4ce945a39592d32e0762b38768bca7c7d085',
-              'fixedVersions': [
-                '3.3.6-r0'
-              ],
-              'installedVersion': '3.3.3-r0',
-              'packageName':      'libcrypto3',
-              'purl':             'pkg:apk/alpine/libcrypto3@3.3.3-r0?arch=x86_64&distro=3.20.6',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2025-15468',
-                'https://github.com/openssl/openssl/commit/1f08e54bad32843044fe8a675948d65e3b4ece65',
-                'https://github.com/openssl/openssl/commit/7c88376731c589ee5b36116c5a6e32d5ae5f7ae2',
-                'https://github.com/openssl/openssl/commit/b2539639400288a4580fe2d76247541b976bade4',
-                'https://github.com/openssl/openssl/commit/d75b309879631d45b972396ce4e5102559c64ac7',
-                'https://nvd.nist.gov/vuln/detail/CVE-2025-15468',
-                'https://openssl-library.org/news/secadv/20260127.txt',
-                'https://ubuntu.com/security/notices/USN-7980-1',
-                'https://www.cve.org/CVERecord?id=CVE-2025-15468'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: OpenSSL: Denial of Service via NULL pointer dereference in QUIC protocol handling'
-            },
-            {
-              'cve':  'CVE-2025-66199',
-              'cvss': {
-                'redhat': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-789'
-              ],
-              'description':   'Issue summary: A TLS 1.3 connection using certificate compression can be\nforced to allocate a large buffer before decompression without checking\nagainst the configured certificate size limit.\n\nImpact summary: An attacker can cause per-connection memory allocations of\nup to approximately 22 MiB and extra CPU work, potentially leading to\nservice degradation or resource exhaustion (Denial of Service).\n\nIn affected configurations, the peer-supplied uncompressed certificate\nlength from a CompressedCertificate message is used to grow a heap buffer\nprior to decompression. This length is not bounded by the max_cert_list\nsetting, which otherwise constrains certificate message sizes. An attacker\ncan exploit this to cause large per-connection allocations followed by\nhandshake failure. No memory corruption or information disclosure occurs.\n\nThis issue only affects builds where TLS 1.3 certificate compression is\ncompiled in (i.e., not OPENSSL_NO_COMP_ALG) and at least one compression\nalgorithm (brotli, zlib, or zstd) is available, and where the compression\nextension is negotiated. Both clients receiving a server CompressedCertificate\nand servers in mutual TLS scenarios receiving a client CompressedCertificate\nare affected. Servers that do not request client certificates are not\nvulnerable to client-initiated attacks.\n\nUsers can mitigate this issue by setting SSL_OP_NO_RX_CERTIFICATE_COMPRESSION\nto disable receiving compressed certificates.\n\nThe FIPS modules in 3.6, 3.5, 3.4 and 3.3 are not affected by this issue,\nas the TLS implementation is outside the OpenSSL FIPS module boundary.\n\nOpenSSL 3.6, 3.5, 3.4 and 3.3 are vulnerable to this issue.\n\nOpenSSL 3.0, 1.1.1 and 1.0.2 are not affected by this issue.',
-              'diffID':        'sha256:994456c4fd7b2b87346a81961efb4ce945a39592d32e0762b38768bca7c7d085',
-              'fixedVersions': [
-                '3.3.6-r0'
-              ],
-              'installedVersion': '3.3.3-r0',
-              'packageName':      'libcrypto3',
-              'purl':             'pkg:apk/alpine/libcrypto3@3.3.3-r0?arch=x86_64&distro=3.20.6',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2025-66199',
-                'https://github.com/openssl/openssl/commit/3ed1f75249932b155eef993a8e66a99cb98bfef4',
-                'https://github.com/openssl/openssl/commit/6184a4fb08ee6d7bca570d931a4e8bef40b64451',
-                'https://github.com/openssl/openssl/commit/895150b5e021d16b52fb32b97e1dd12f20448be5',
-                'https://github.com/openssl/openssl/commit/966a2478046c311ed7dae50c457d0db4cafbf7e4',
-                'https://nvd.nist.gov/vuln/detail/CVE-2025-66199',
-                'https://openssl-library.org/news/secadv/20260127.txt',
-                'https://ubuntu.com/security/notices/USN-7980-1',
-                'https://www.cve.org/CVERecord?id=CVE-2025-66199'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: OpenSSL: Denial of Service due to excessive memory allocation in TLS 1.3 certificate compression'
-            },
-            {
-              'cve':  'CVE-2025-68160',
-              'cvss': {
-                'redhat': {
-                  'v3score':  '4.7',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-787'
-              ],
-              'description':   'Issue summary: Writing large, newline-free data into a BIO chain using the\nline-buffering filter where the next BIO performs short writes can trigger\na heap-based out-of-bounds write.\n\nImpact summary: This out-of-bounds write can cause memory corruption which\ntypically results in a crash, leading to Denial of Service for an application.\n\nThe line-buffering BIO filter (BIO_f_linebuffer) is not used by default in\nTLS/SSL data paths. In OpenSSL command-line applications, it is typically\nonly pushed onto stdout/stderr on VMS systems. Third-party applications that\nexplicitly use this filter with a BIO chain that can short-write and that\nwrite large, newline-free data influenced by an attacker would be affected.\nHowever, the circumstances where this could happen are unlikely to be under\nattacker control, and BIO_f_linebuffer is unlikely to be handling non-curated\ndata controlled by an attacker. For that reason the issue was assessed as\nLow severity.\n\nThe FIPS modules in 3.6, 3.5, 3.4, 3.3 and 3.0 are not affected by this issue,\nas the BIO implementation is outside the OpenSSL FIPS module boundary.\n\nOpenSSL 3.6, 3.5, 3.4, 3.3, 3.0, 1.1.1 and 1.0.2 are vulnerable to this issue.',
-              'diffID':        'sha256:994456c4fd7b2b87346a81961efb4ce945a39592d32e0762b38768bca7c7d085',
-              'fixedVersions': [
-                '3.3.6-r0'
-              ],
-              'installedVersion': '3.3.3-r0',
-              'packageName':      'libcrypto3',
-              'purl':             'pkg:apk/alpine/libcrypto3@3.3.3-r0?arch=x86_64&distro=3.20.6',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2025-68160',
-                'https://github.com/openssl/openssl/commit/384011202af92605d926fafe4a0bcd6b65d162ad',
-                'https://github.com/openssl/openssl/commit/475c466ef2fbd8fc1df6fae1c3eed9c813fc8ff6',
-                'https://github.com/openssl/openssl/commit/4c96fbba618e1940f038012506ee9e21d32ee12c',
-                'https://github.com/openssl/openssl/commit/6845c3b6460a98b1ec4e463baa2ea1a63a32d7c0',
-                'https://github.com/openssl/openssl/commit/68a7cd2e2816c3a02f4d45a2ce43fc04fac97096',
-                'https://nvd.nist.gov/vuln/detail/CVE-2025-68160',
-                'https://openssl-library.org/news/secadv/20260127.txt',
-                'https://ubuntu.com/security/notices/USN-7980-1',
-                'https://ubuntu.com/security/notices/USN-7980-2',
-                'https://www.cve.org/CVERecord?id=CVE-2025-68160'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: OpenSSL: Denial of Service due to out-of-bounds write in BIO filter'
-            },
-            {
-              'cve':  'CVE-2025-69418',
-              'cvss': {
-                'redhat': {
-                  'v3score':  '4',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-325'
-              ],
-              'description':   'Issue summary: When using the low-level OCB API directly with AES-NI or<br>other hardware-accelerated code paths, inputs whose length is not a multiple<br>of 16 bytes can leave the final partial block unencrypted and unauthenticated.<br><br>Impact summary: The trailing 1-15 bytes of a message may be exposed in<br>cleartext on encryption and are not covered by the authentication tag,<br>allowing an attacker to read or tamper with those bytes without detection.<br><br>The low-level OCB encrypt and decrypt routines in the hardware-accelerated<br>stream path process full 16-byte blocks but do not advance the input/output<br>pointers. The subsequent tail-handling code then operates on the original<br>base pointers, effectively reprocessing the beginning of the buffer while<br>leaving the actual trailing bytes unprocessed. The authentication checksum<br>also excludes the true tail bytes.<br><br>However, typical OpenSSL consumers using EVP are not affected because the<br>higher-level EVP and provider OCB implementations split inputs so that full<br>blocks and trailing partial blocks are processed in separate calls, avoiding<br>the problematic code path. Additionally, TLS does not use OCB ciphersuites.<br>The vulnerability only affects applications that call the low-level<br>CRYPTO_ocb128_encrypt() or CRYPTO_ocb128_decrypt() functions directly with<br>non-block-aligned lengths in a single call on hardware-accelerated builds.<br>For these reasons the issue was assessed as Low severity.<br><br>The FIPS modules in 3.6, 3.5, 3.4, 3.3, 3.2, 3.1 and 3.0 are not affected<br>by this issue, as OCB mode is not a FIPS-approved algorithm.<br><br>OpenSSL 3.6, 3.5, 3.4, 3.3, 3.0 and 1.1.1 are vulnerable to this issue.<br><br>OpenSSL 1.0.2 is not affected by this issue.',
-              'diffID':        'sha256:994456c4fd7b2b87346a81961efb4ce945a39592d32e0762b38768bca7c7d085',
-              'fixedVersions': [
-                '3.3.6-r0'
-              ],
-              'installedVersion': '3.3.3-r0',
-              'packageName':      'libcrypto3',
-              'purl':             'pkg:apk/alpine/libcrypto3@3.3.3-r0?arch=x86_64&distro=3.20.6',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2025-69418',
-                'https://github.com/openssl/openssl/commit/372fc5c77529695b05b4f5b5187691a57ef5dffc',
-                'https://github.com/openssl/openssl/commit/4016975d4469cd6b94927c607f7c511385f928d8',
-                'https://github.com/openssl/openssl/commit/52d23c86a54adab5ee9f80e48b242b52c4cc2347',
-                'https://github.com/openssl/openssl/commit/a7589230356d908c0eca4b969ec4f62106f4f5ae',
-                'https://github.com/openssl/openssl/commit/ed40856d7d4ba6cb42779b6770666a65f19cb977',
-                'https://nvd.nist.gov/vuln/detail/CVE-2025-69418',
-                'https://openssl-library.org/news/secadv/20260127.txt',
-                'https://ubuntu.com/security/notices/USN-7980-1',
-                'https://ubuntu.com/security/notices/USN-7980-2',
-                'https://www.cve.org/CVERecord?id=CVE-2025-69418'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: OpenSSL: Information disclosure and data tampering via specific low-level OCB encryption/decryption calls'
-            },
-            {
-              'cve':  'CVE-2025-69420',
-              'cvss': {
-                'redhat': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-754'
-              ],
-              'description':   'Issue summary: A type confusion vulnerability exists in the TimeStamp Response\nverification code where an ASN1_TYPE union member is accessed without first\nvalidating the type, causing an invalid or NULL pointer dereference when\nprocessing a malformed TimeStamp Response file.\n\nImpact summary: An application calling TS_RESP_verify_response() with a\nmalformed TimeStamp Response can be caused to dereference an invalid or\nNULL pointer when reading, resulting in a Denial of Service.\n\nThe functions ossl_ess_get_signing_cert() and ossl_ess_get_signing_cert_v2()\naccess the signing cert attribute value without validating its type.\nWhen the type is not V_ASN1_SEQUENCE, this results in accessing invalid memory\nthrough the ASN1_TYPE union, causing a crash.\n\nExploiting this vulnerability requires an attacker to provide a malformed\nTimeStamp Response to an application that verifies timestamp responses. The\nTimeStamp protocol (RFC 3161) is not widely used and the impact of the\nexploit is just a Denial of Service. For these reasons the issue was\nassessed as Low severity.\n\nThe FIPS modules in 3.5, 3.4, 3.3 and 3.0 are not affected by this issue,\nas the TimeStamp Response implementation is outside the OpenSSL FIPS module\nboundary.\n\nOpenSSL 3.6, 3.5, 3.4, 3.3, 3.0 and 1.1.1 are vulnerable to this issue.\n\nOpenSSL 1.0.2 is not affected by this issue.',
-              'diffID':        'sha256:994456c4fd7b2b87346a81961efb4ce945a39592d32e0762b38768bca7c7d085',
-              'fixedVersions': [
-                '3.3.6-r0'
-              ],
-              'installedVersion': '3.3.3-r0',
-              'packageName':      'libcrypto3',
-              'purl':             'pkg:apk/alpine/libcrypto3@3.3.3-r0?arch=x86_64&distro=3.20.6',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2025-69420',
-                'https://github.com/openssl/openssl/commit/27c7012c91cc986a598d7540f3079dfde2416eb9',
-                'https://github.com/openssl/openssl/commit/4e254b48ad93cc092be3dd62d97015f33f73133a',
-                'https://github.com/openssl/openssl/commit/564fd9c73787f25693bf9e75faf7bf6bb1305d4e',
-                'https://github.com/openssl/openssl/commit/5eb0770ffcf11b785cf374ff3c19196245e54f1b',
-                'https://github.com/openssl/openssl/commit/a99349ebfc519999edc50620abe24d599b9eb085',
-                'https://nvd.nist.gov/vuln/detail/CVE-2025-69420',
-                'https://openssl-library.org/news/secadv/20260127.txt',
-                'https://ubuntu.com/security/notices/USN-7980-1',
-                'https://ubuntu.com/security/notices/USN-7980-2',
-                'https://www.cve.org/CVERecord?id=CVE-2025-69420'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: OpenSSL: Denial of Service via malformed TimeStamp Response'
-            },
-            {
-              'cve':  'CVE-2025-69421',
-              'cvss': {
-                'redhat': {
-                  'v3score':  '6.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-476'
-              ],
-              'description':   'Issue summary: Processing a malformed PKCS#12 file can trigger a NULL pointer\ndereference in the PKCS12_item_decrypt_d2i_ex() function.\n\nImpact summary: A NULL pointer dereference can trigger a crash which leads to\nDenial of Service for an application processing PKCS#12 files.\n\nThe PKCS12_item_decrypt_d2i_ex() function does not check whether the oct\nparameter is NULL before dereferencing it. When called from\nPKCS12_unpack_p7encdata() with a malformed PKCS#12 file, this parameter can\nbe NULL, causing a crash. The vulnerability is limited to Denial of Service\nand cannot be escalated to achieve code execution or memory disclosure.\n\nExploiting this issue requires an attacker to provide a malformed PKCS#12 file\nto an application that processes it. For that reason the issue was assessed as\nLow severity according to our Security Policy.\n\nThe FIPS modules in 3.6, 3.5, 3.4, 3.3 and 3.0 are not affected by this issue,\nas the PKCS#12 implementation is outside the OpenSSL FIPS module boundary.\n\nOpenSSL 3.6, 3.5, 3.4, 3.3, 3.0, 1.1.1 and 1.0.2 are vulnerable to this issue.',
-              'diffID':        'sha256:994456c4fd7b2b87346a81961efb4ce945a39592d32e0762b38768bca7c7d085',
-              'fixedVersions': [
-                '3.3.6-r0'
-              ],
-              'installedVersion': '3.3.3-r0',
-              'packageName':      'libcrypto3',
-              'purl':             'pkg:apk/alpine/libcrypto3@3.3.3-r0?arch=x86_64&distro=3.20.6',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2025-69421',
-                'https://github.com/openssl/openssl/commit/3524a29271f8191b8fd8a5257eb05173982a097b',
-                'https://github.com/openssl/openssl/commit/36ecb4960872a4ce04bf6f1e1f4e78d75ec0c0c7',
-                'https://github.com/openssl/openssl/commit/4bbc8d41a72c842ce4077a8a3eccd1109aaf74bd',
-                'https://github.com/openssl/openssl/commit/643986985cd1c21221f941129d76fe0c2785aeb3',
-                'https://github.com/openssl/openssl/commit/a2dbc539f0f9cc63832709fa5aa33ad9495eb19c',
-                'https://nvd.nist.gov/vuln/detail/CVE-2025-69421',
-                'https://openssl-library.org/news/secadv/20260127.txt',
-                'https://ubuntu.com/security/notices/USN-7980-1',
-                'https://ubuntu.com/security/notices/USN-7980-2',
-                'https://www.cve.org/CVERecord?id=CVE-2025-69421'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: OpenSSL: Denial of Service via malformed PKCS#12 file processing'
-            },
-            {
-              'cve':  'CVE-2025-9230',
-              'cvss': {
-                'redhat': {
-                  'v3score':  '5.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L'
-                }
-              },
-              'cwes': [
-                'CWE-125',
-                'CWE-787'
-              ],
-              'description':   'Issue summary: An application trying to decrypt CMS messages encrypted using\npassword based encryption can trigger an out-of-bounds read and write.\n\nImpact summary: This out-of-bounds read may trigger a crash which leads to\nDenial of Service for an application. The out-of-bounds write can cause\na memory corruption which can have various consequences including\na Denial of Service or Execution of attacker-supplied code.\n\nAlthough the consequences of a successful exploit of this vulnerability\ncould be severe, the probability that the attacker would be able to\nperform it is low. Besides, password based (PWRI) encryption support in CMS\nmessages is very rarely used. For that reason the issue was assessed as\nModerate severity according to our Security Policy.\n\nThe FIPS modules in 3.5, 3.4, 3.3, 3.2, 3.1 and 3.0 are not affected by this\nissue, as the CMS implementation is outside the OpenSSL FIPS module\nboundary.',
-              'diffID':        'sha256:994456c4fd7b2b87346a81961efb4ce945a39592d32e0762b38768bca7c7d085',
-              'fixedVersions': [
-                '3.3.5-r0'
-              ],
-              'installedVersion': '3.3.3-r0',
-              'packageName':      'libcrypto3',
-              'purl':             'pkg:apk/alpine/libcrypto3@3.3.3-r0?arch=x86_64&distro=3.20.6',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2025/09/30/5',
-                'https://access.redhat.com/errata/RHSA-2025:21255',
-                'https://access.redhat.com/security/cve/CVE-2025-9230',
-                'https://bugzilla.redhat.com/2396054',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2396054',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-9230',
-                'https://errata.almalinux.org/9/ALSA-2025-21255.html',
-                'https://errata.rockylinux.org/RLSA-2025:21255',
-                'https://github.com/openssl/openssl/commit/5965ea5dd6960f36d8b7f74f8eac67a8eb8f2b45',
-                'https://github.com/openssl/openssl/commit/9e91358f365dee6c446dcdcdb01c04d2743fd280',
-                'https://github.com/openssl/openssl/commit/a79c4ce559c6a3a8fd4109e9f33c1185d5bf2def',
-                'https://github.com/openssl/openssl/commit/b5282d677551afda7d20e9c00e09561b547b2dfd',
-                'https://github.com/openssl/openssl/commit/bae259a211ada6315dc50900686daaaaaa55f482',
-                'https://github.openssl.org/openssl/extended-releases/commit/c2b96348bfa662f25f4fabf81958ae822063dae3',
-                'https://github.openssl.org/openssl/extended-releases/commit/dfbaf161d8dafc1132dd88cd48ad990ed9b4c8ba',
-                'https://linux.oracle.com/cve/CVE-2025-9230.html',
-                'https://linux.oracle.com/errata/ELSA-2026-50008.html',
-                'https://lists.debian.org/debian-lts-announce/2025/10/msg00001.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2025-9230',
-                'https://openssl-library.org/news/secadv/20250930.txt',
-                'https://ubuntu.com/security/notices/USN-7786-1',
-                'https://www.cve.org/CVERecord?id=CVE-2025-9230'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: Out-of-bounds read & write in RFC 3211 KEK Unwrap'
-            },
-            {
-              'cve':  'CVE-2025-9231',
-              'cvss': {
-                'redhat': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-385'
-              ],
-              'description':   'Issue summary: A timing side-channel which could potentially allow remote\nrecovery of the private key exists in the SM2 algorithm implementation on 64 bit\nARM platforms.\n\nImpact summary: A timing side-channel in SM2 signature computations on 64 bit\nARM platforms could allow recovering the private key by an attacker..\n\nWhile remote key recovery over a network was not attempted by the reporter,\ntiming measurements revealed a timing signal which may allow such an attack.\n\nOpenSSL does not directly support certificates with SM2 keys in TLS, and so\nthis CVE is not relevant in most TLS contexts.  However, given that it is\npossible to add support for such certificates via a custom provider, coupled\nwith the fact that in such a custom provider context the private key may be\nrecoverable via remote timing measurements, we consider this to be a Moderate\nseverity issue.\n\nThe FIPS modules in 3.5, 3.4, 3.3, 3.2, 3.1 and 3.0 are not affected by this\nissue, as SM2 is not an approved algorithm.',
-              'diffID':        'sha256:994456c4fd7b2b87346a81961efb4ce945a39592d32e0762b38768bca7c7d085',
-              'fixedVersions': [
-                '3.3.5-r0'
-              ],
-              'installedVersion': '3.3.3-r0',
-              'packageName':      'libcrypto3',
-              'purl':             'pkg:apk/alpine/libcrypto3@3.3.3-r0?arch=x86_64&distro=3.20.6',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2025/09/30/5',
-                'https://access.redhat.com/security/cve/CVE-2025-9231',
-                'https://github.com/openssl/openssl/commit/567f64386e43683888212226824b6a179885a0fe',
-                'https://github.com/openssl/openssl/commit/cba616c26ac8e7b37de5e77762e505ba5ca51698',
-                'https://github.com/openssl/openssl/commit/eed5adc9f969d77c94f213767acbb41ff923b6f4',
-                'https://github.com/openssl/openssl/commit/fc47a2ec078912b3e914fab5734535e76c4820c2',
-                'https://nvd.nist.gov/vuln/detail/CVE-2025-9231',
-                'https://openssl-library.org/news/secadv/20250930.txt',
-                'https://ubuntu.com/security/notices/USN-7786-1',
-                'https://www.cve.org/CVERecord?id=CVE-2025-9231'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: Timing side-channel in SM2 algorithm on 64 bit ARM'
-            },
-            {
-              'cve':  'CVE-2026-22795',
-              'cvss': {
-                'redhat': {
-                  'v3score':  '5.5',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-754'
-              ],
-              'description':   'Issue summary: An invalid or NULL pointer dereference can happen in\nan application processing a malformed PKCS#12 file.\n\nImpact summary: An application processing a malformed PKCS#12 file can be\ncaused to dereference an invalid or NULL pointer on memory read, resulting\nin a Denial of Service.\n\nA type confusion vulnerability exists in PKCS#12 parsing code where\nan ASN1_TYPE union member is accessed without first validating the type,\ncausing an invalid pointer read.\n\nThe location is constrained to a 1-byte address space, meaning any\nattempted pointer manipulation can only target addresses between 0x00 and 0xFF.\nThis range corresponds to the zero page, which is unmapped on most modern\noperating systems and will reliably result in a crash, leading only to a\nDenial of Service. Exploiting this issue also requires a user or application\nto process a maliciously crafted PKCS#12 file. It is uncommon to accept\nuntrusted PKCS#12 files in applications as they are usually used to store\nprivate keys which are trusted by definition. For these reasons, the issue\nwas assessed as Low severity.\n\nThe FIPS modules in 3.5, 3.4, 3.3 and 3.0 are not affected by this issue,\nas the PKCS12 implementation is outside the OpenSSL FIPS module boundary.\n\nOpenSSL 3.6, 3.5, 3.4, 3.3, 3.0 and 1.1.1 are vulnerable to this issue.\n\nOpenSSL 1.0.2 is not affected by this issue.',
-              'diffID':        'sha256:994456c4fd7b2b87346a81961efb4ce945a39592d32e0762b38768bca7c7d085',
-              'fixedVersions': [
-                '3.3.6-r0'
-              ],
-              'installedVersion': '3.3.3-r0',
-              'packageName':      'libcrypto3',
-              'purl':             'pkg:apk/alpine/libcrypto3@3.3.3-r0?arch=x86_64&distro=3.20.6',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2026-22795',
-                'https://github.com/openssl/openssl/commit/2502e7b7d4c0cf4f972a881641fe09edc67aeec4',
-                'https://github.com/openssl/openssl/commit/572844beca95068394c916626a6d3a490f831a49',
-                'https://github.com/openssl/openssl/commit/7bbca05be55b129651d9df4bdb92becc45002c12',
-                'https://github.com/openssl/openssl/commit/eeee3cbd4d682095ed431052f00403004596373e',
-                'https://github.com/openssl/openssl/commit/ef2fb66ec571564d64d1c74a12e388a2a54d05d2',
-                'https://nvd.nist.gov/vuln/detail/CVE-2026-22795',
-                'https://openssl-library.org/news/secadv/20260127.txt',
-                'https://ubuntu.com/security/notices/USN-7980-1',
-                'https://ubuntu.com/security/notices/USN-7980-2',
-                'https://www.cve.org/CVERecord?id=CVE-2026-22795'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: OpenSSL: Denial of Service due to type confusion in PKCS#12 file processing'
-            },
-            {
-              'cve':  'CVE-2026-22796',
-              'cvss': {
-                'redhat': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-754'
-              ],
-              'description':   'Issue summary: A type confusion vulnerability exists in the signature\nverification of signed PKCS#7 data where an ASN1_TYPE union member is\naccessed without first validating the type, causing an invalid or NULL\npointer dereference when processing malformed PKCS#7 data.\n\nImpact summary: An application performing signature verification of PKCS#7\ndata or calling directly the PKCS7_digest_from_attributes() function can be\ncaused to dereference an invalid or NULL pointer when reading, resulting in\na Denial of Service.\n\nThe function PKCS7_digest_from_attributes() accesses the message digest attribute\nvalue without validating its type. When the type is not V_ASN1_OCTET_STRING,\nthis results in accessing invalid memory through the ASN1_TYPE union, causing\na crash.\n\nExploiting this vulnerability requires an attacker to provide a malformed\nsigned PKCS#7 to an application that verifies it. The impact of the\nexploit is just a Denial of Service, the PKCS7 API is legacy and applications\nshould be using the CMS API instead. For these reasons the issue was\nassessed as Low severity.\n\nThe FIPS modules in 3.5, 3.4, 3.3 and 3.0 are not affected by this issue,\nas the PKCS#7 parsing implementation is outside the OpenSSL FIPS module\nboundary.\n\nOpenSSL 3.6, 3.5, 3.4, 3.3, 3.0, 1.1.1 and 1.0.2 are vulnerable to this issue.',
-              'diffID':        'sha256:994456c4fd7b2b87346a81961efb4ce945a39592d32e0762b38768bca7c7d085',
-              'fixedVersions': [
-                '3.3.6-r0'
-              ],
-              'installedVersion': '3.3.3-r0',
-              'packageName':      'libcrypto3',
-              'purl':             'pkg:apk/alpine/libcrypto3@3.3.3-r0?arch=x86_64&distro=3.20.6',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2026-22796',
-                'https://github.com/openssl/openssl/commit/2502e7b7d4c0cf4f972a881641fe09edc67aeec4',
-                'https://github.com/openssl/openssl/commit/572844beca95068394c916626a6d3a490f831a49',
-                'https://github.com/openssl/openssl/commit/7bbca05be55b129651d9df4bdb92becc45002c12',
-                'https://github.com/openssl/openssl/commit/eeee3cbd4d682095ed431052f00403004596373e',
-                'https://github.com/openssl/openssl/commit/ef2fb66ec571564d64d1c74a12e388a2a54d05d2',
-                'https://nvd.nist.gov/vuln/detail/CVE-2026-22796',
-                'https://openssl-library.org/news/secadv/20260127.txt',
-                'https://ubuntu.com/security/notices/USN-7980-1',
-                'https://ubuntu.com/security/notices/USN-7980-2',
-                'https://www.cve.org/CVERecord?id=CVE-2026-22796'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: OpenSSL: Denial of Service via type confusion in PKCS#7 signature verification'
-            },
-            {
-              'cve':  'CVE-2025-9232',
-              'cvss': {
-                'redhat': {
-                  'v3score':  '3.1',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L'
-                }
-              },
-              'cwes': [
-                'CWE-125'
-              ],
-              'description':   "Issue summary: An application using the OpenSSL HTTP client API functions may\ntrigger an out-of-bounds read if the 'no_proxy' environment variable is set and\nthe host portion of the authority component of the HTTP URL is an IPv6 address.\n\nImpact summary: An out-of-bounds read can trigger a crash which leads to\nDenial of Service for an application.\n\nThe OpenSSL HTTP client API functions can be used directly by applications\nbut they are also used by the OCSP client functions and CMP (Certificate\nManagement Protocol) client implementation in OpenSSL. However the URLs used\nby these implementations are unlikely to be controlled by an attacker.\n\nIn this vulnerable code the out of bounds read can only trigger a crash.\nFurthermore the vulnerability requires an attacker-controlled URL to be\npassed from an application to the OpenSSL function and the user has to have\na 'no_proxy' environment variable set. For the aforementioned reasons the\nissue was assessed as Low severity.\n\nThe vulnerable code was introduced in the following patch releases:\n3.0.16, 3.1.8, 3.2.4, 3.3.3, 3.4.0 and 3.5.0.\n\nThe FIPS modules in 3.5, 3.4, 3.3, 3.2, 3.1 and 3.0 are not affected by this\nissue, as the HTTP client implementation is outside the OpenSSL FIPS module\nboundary.",
-              'diffID':        'sha256:994456c4fd7b2b87346a81961efb4ce945a39592d32e0762b38768bca7c7d085',
-              'fixedVersions': [
-                '3.3.5-r0'
-              ],
-              'installedVersion': '3.3.3-r0',
-              'packageName':      'libcrypto3',
-              'purl':             'pkg:apk/alpine/libcrypto3@3.3.3-r0?arch=x86_64&distro=3.20.6',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2025/09/30/5',
-                'https://access.redhat.com/security/cve/CVE-2025-9232',
-                'https://github.com/openssl/openssl/commit/2b4ec20e47959170422922eaff25346d362dcb35',
-                'https://github.com/openssl/openssl/commit/654dc11d23468a74fc8ea4672b702dd3feb7be4b',
-                'https://github.com/openssl/openssl/commit/7cf21a30513c9e43c4bc3836c237cf086e194af3',
-                'https://github.com/openssl/openssl/commit/89e790ac431125a4849992858490bed6b225eadf',
-                'https://github.com/openssl/openssl/commit/bbf38c034cdabd0a13330abcc4855c866f53d2e0',
-                'https://nvd.nist.gov/vuln/detail/CVE-2025-9232',
-                'https://openssl-library.org/news/secadv/20250930.txt',
-                'https://ubuntu.com/security/notices/USN-7786-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2025-9232'
-              ],
-              'severity':   'LOW',
-              'suppressed': false,
-              'title':      'openssl: Out-of-bounds read in HTTP client no_proxy handling'
-            },
-            {
-              'cve':  'CVE-2025-15467',
-              'cvss': {
-                'redhat': {
-                  'v3score':  '9.8',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-787'
-              ],
-              'description':   'Issue summary: Parsing CMS AuthEnvelopedData message with maliciously\ncrafted AEAD parameters can trigger a stack buffer overflow.\n\nImpact summary: A stack buffer overflow may lead to a crash, causing Denial\nof Service, or potentially remote code execution.\n\nWhen parsing CMS AuthEnvelopedData structures that use AEAD ciphers such as\nAES-GCM, the IV (Initialization Vector) encoded in the ASN.1 parameters is\ncopied into a fixed-size stack buffer without verifying that its length fits\nthe destination. An attacker can supply a crafted CMS message with an\noversized IV, causing a stack-based out-of-bounds write before any\nauthentication or tag verification occurs.\n\nApplications and services that parse untrusted CMS or PKCS#7 content using\nAEAD ciphers (e.g., S/MIME AuthEnvelopedData with AES-GCM) are vulnerable.\nBecause the overflow occurs prior to authentication, no valid key material\nis required to trigger it. While exploitability to remote code execution\ndepends on platform and toolchain mitigations, the stack-based write\nprimitive represents a severe risk.\n\nThe FIPS modules in 3.6, 3.5, 3.4, 3.3 and 3.0 are not affected by this\nissue, as the CMS implementation is outside the OpenSSL FIPS module\nboundary.\n\nOpenSSL 3.6, 3.5, 3.4, 3.3 and 3.0 are vulnerable to this issue.\n\nOpenSSL 1.1.1 and 1.0.2 are not affected by this issue.',
-              'diffID':        'sha256:994456c4fd7b2b87346a81961efb4ce945a39592d32e0762b38768bca7c7d085',
-              'fixedVersions': [
-                '3.3.6-r0'
-              ],
-              'installedVersion': '3.3.3-r0',
-              'packageName':      'libssl3',
-              'purl':             'pkg:apk/alpine/libssl3@3.3.3-r0?arch=x86_64&distro=3.20.6',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2026/01/27/10',
-                'https://access.redhat.com/security/cve/CVE-2025-15467',
-                'https://github.com/openssl/openssl/commit/2c8f0e5fa9b6ee5508a0349e4572ddb74db5a703',
-                'https://github.com/openssl/openssl/commit/5f26d4202f5b89664c5c3f3c62086276026ba9a9',
-                'https://github.com/openssl/openssl/commit/6ced0fe6b10faa560e410e3ee8d6c82f06c65ea3',
-                'https://github.com/openssl/openssl/commit/ce39170276daec87f55c39dad1f629b56344429e',
-                'https://github.com/openssl/openssl/commit/d0071a0799f20cc8101730145349ed4487c268dc',
-                'https://nvd.nist.gov/vuln/detail/CVE-2025-15467',
-                'https://openssl-library.org/news/secadv/20260127.txt',
-                'https://ubuntu.com/security/notices/USN-7980-1',
-                'https://www.cve.org/CVERecord?id=CVE-2025-15467'
-              ],
-              'severity':   'CRITICAL',
-              'suppressed': false,
-              'title':      'openssl: OpenSSL: Remote code execution or Denial of Service via oversized Initialization Vector in CMS parsing'
-            },
-            {
-              'cve':  'CVE-2025-69419',
-              'cvss': {
-                'redhat': {
-                  'v3score':  '7.4',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-787'
-              ],
-              'description':   'Issue summary: Calling PKCS12_get_friendlyname() function on a maliciously\ncrafted PKCS#12 file with a BMPString (UTF-16BE) friendly name containing\nnon-ASCII BMP code point can trigger a one byte write before the allocated\nbuffer.\n\nImpact summary: The out-of-bounds write can cause a memory corruption\nwhich can have various consequences including a Denial of Service.\n\nThe OPENSSL_uni2utf8() function performs a two-pass conversion of a PKCS#12\nBMPString (UTF-16BE) to UTF-8. In the second pass, when emitting UTF-8 bytes,\nthe helper function bmp_to_utf8() incorrectly forwards the remaining UTF-16\nsource byte count as the destination buffer capacity to UTF8_putc(). For BMP\ncode points above U+07FF, UTF-8 requires three bytes, but the forwarded\ncapacity can be just two bytes. UTF8_putc() then returns -1, and this negative\nvalue is added to the output length without validation, causing the\nlength to become negative. The subsequent trailing NUL byte is then written\nat a negative offset, causing write outside of heap allocated buffer.\n\nThe vulnerability is reachable via the public PKCS12_get_friendlyname() API\nwhen parsing attacker-controlled PKCS#12 files. While PKCS12_parse() uses a\ndifferent code path that avoids this issue, PKCS12_get_friendlyname() directly\ninvokes the vulnerable function. Exploitation requires an attacker to provide\na malicious PKCS#12 file to be parsed by the application and the attacker\ncan just trigger a one zero byte write before the allocated buffer.\nFor that reason the issue was assessed as Low severity according to our\nSecurity Policy.\n\nThe FIPS modules in 3.6, 3.5, 3.4, 3.3 and 3.0 are not affected by this issue,\nas the PKCS#12 implementation is outside the OpenSSL FIPS module boundary.\n\nOpenSSL 3.6, 3.5, 3.4, 3.3, 3.0 and 1.1.1 are vulnerable to this issue.\n\nOpenSSL 1.0.2 is not affected by this issue.',
-              'diffID':        'sha256:994456c4fd7b2b87346a81961efb4ce945a39592d32e0762b38768bca7c7d085',
-              'fixedVersions': [
-                '3.3.6-r0'
-              ],
-              'installedVersion': '3.3.3-r0',
-              'packageName':      'libssl3',
-              'purl':             'pkg:apk/alpine/libssl3@3.3.3-r0?arch=x86_64&distro=3.20.6',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2025-69419',
-                'https://github.com/openssl/openssl/commit/41be0f216404f14457bbf3b9cc488dba60b49296',
-                'https://github.com/openssl/openssl/commit/7e9cac9832e4705b91987c2474ed06a37a93cecb',
-                'https://github.com/openssl/openssl/commit/a26a90d38edec3748566129d824e664b54bee2e2',
-                'https://github.com/openssl/openssl/commit/cda12de3bc0e333ea8d2c6fd15001dbdaf280015',
-                'https://github.com/openssl/openssl/commit/ff628933755075446bca8307e8417c14d164b535',
-                'https://nvd.nist.gov/vuln/detail/CVE-2025-69419',
-                'https://openssl-library.org/news/secadv/20260127.txt',
-                'https://ubuntu.com/security/notices/USN-7980-1',
-                'https://ubuntu.com/security/notices/USN-7980-2',
-                'https://www.cve.org/CVERecord?id=CVE-2025-69419'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: OpenSSL: Arbitrary code execution due to out-of-bounds write in PKCS#12 processing'
-            },
-            {
-              'cve':  'CVE-2025-15468',
-              'cvss': {
-                'redhat': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-476'
-              ],
-              'description':   'Issue summary: If an application using the SSL_CIPHER_find() function in\na QUIC protocol client or server receives an unknown cipher suite from\nthe peer, a NULL dereference occurs.\n\nImpact summary: A NULL pointer dereference leads to abnormal termination of\nthe running process causing Denial of Service.\n\nSome applications call SSL_CIPHER_find() from the client_hello_cb callback\non the cipher ID received from the peer. If this is done with an SSL object\nimplementing the QUIC protocol, NULL pointer dereference will happen if\nthe examined cipher ID is unknown or unsupported.\n\nAs it is not very common to call this function in applications using the QUIC \nprotocol and the worst outcome is Denial of Service, the issue was assessed\nas Low severity.\n\nThe vulnerable code was introduced in the 3.2 version with the addition\nof the QUIC protocol support.\n\nThe FIPS modules in 3.6, 3.5, 3.4 and 3.3 are not affected by this issue,\nas the QUIC implementation is outside the OpenSSL FIPS module boundary.\n\nOpenSSL 3.6, 3.5, 3.4 and 3.3 are vulnerable to this issue.\n\nOpenSSL 3.0, 1.1.1 and 1.0.2 are not affected by this issue.',
-              'diffID':        'sha256:994456c4fd7b2b87346a81961efb4ce945a39592d32e0762b38768bca7c7d085',
-              'fixedVersions': [
-                '3.3.6-r0'
-              ],
-              'installedVersion': '3.3.3-r0',
-              'packageName':      'libssl3',
-              'purl':             'pkg:apk/alpine/libssl3@3.3.3-r0?arch=x86_64&distro=3.20.6',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2025-15468',
-                'https://github.com/openssl/openssl/commit/1f08e54bad32843044fe8a675948d65e3b4ece65',
-                'https://github.com/openssl/openssl/commit/7c88376731c589ee5b36116c5a6e32d5ae5f7ae2',
-                'https://github.com/openssl/openssl/commit/b2539639400288a4580fe2d76247541b976bade4',
-                'https://github.com/openssl/openssl/commit/d75b309879631d45b972396ce4e5102559c64ac7',
-                'https://nvd.nist.gov/vuln/detail/CVE-2025-15468',
-                'https://openssl-library.org/news/secadv/20260127.txt',
-                'https://ubuntu.com/security/notices/USN-7980-1',
-                'https://www.cve.org/CVERecord?id=CVE-2025-15468'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: OpenSSL: Denial of Service via NULL pointer dereference in QUIC protocol handling'
-            },
-            {
-              'cve':  'CVE-2025-66199',
-              'cvss': {
-                'redhat': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-789'
-              ],
-              'description':   'Issue summary: A TLS 1.3 connection using certificate compression can be\nforced to allocate a large buffer before decompression without checking\nagainst the configured certificate size limit.\n\nImpact summary: An attacker can cause per-connection memory allocations of\nup to approximately 22 MiB and extra CPU work, potentially leading to\nservice degradation or resource exhaustion (Denial of Service).\n\nIn affected configurations, the peer-supplied uncompressed certificate\nlength from a CompressedCertificate message is used to grow a heap buffer\nprior to decompression. This length is not bounded by the max_cert_list\nsetting, which otherwise constrains certificate message sizes. An attacker\ncan exploit this to cause large per-connection allocations followed by\nhandshake failure. No memory corruption or information disclosure occurs.\n\nThis issue only affects builds where TLS 1.3 certificate compression is\ncompiled in (i.e., not OPENSSL_NO_COMP_ALG) and at least one compression\nalgorithm (brotli, zlib, or zstd) is available, and where the compression\nextension is negotiated. Both clients receiving a server CompressedCertificate\nand servers in mutual TLS scenarios receiving a client CompressedCertificate\nare affected. Servers that do not request client certificates are not\nvulnerable to client-initiated attacks.\n\nUsers can mitigate this issue by setting SSL_OP_NO_RX_CERTIFICATE_COMPRESSION\nto disable receiving compressed certificates.\n\nThe FIPS modules in 3.6, 3.5, 3.4 and 3.3 are not affected by this issue,\nas the TLS implementation is outside the OpenSSL FIPS module boundary.\n\nOpenSSL 3.6, 3.5, 3.4 and 3.3 are vulnerable to this issue.\n\nOpenSSL 3.0, 1.1.1 and 1.0.2 are not affected by this issue.',
-              'diffID':        'sha256:994456c4fd7b2b87346a81961efb4ce945a39592d32e0762b38768bca7c7d085',
-              'fixedVersions': [
-                '3.3.6-r0'
-              ],
-              'installedVersion': '3.3.3-r0',
-              'packageName':      'libssl3',
-              'purl':             'pkg:apk/alpine/libssl3@3.3.3-r0?arch=x86_64&distro=3.20.6',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2025-66199',
-                'https://github.com/openssl/openssl/commit/3ed1f75249932b155eef993a8e66a99cb98bfef4',
-                'https://github.com/openssl/openssl/commit/6184a4fb08ee6d7bca570d931a4e8bef40b64451',
-                'https://github.com/openssl/openssl/commit/895150b5e021d16b52fb32b97e1dd12f20448be5',
-                'https://github.com/openssl/openssl/commit/966a2478046c311ed7dae50c457d0db4cafbf7e4',
-                'https://nvd.nist.gov/vuln/detail/CVE-2025-66199',
-                'https://openssl-library.org/news/secadv/20260127.txt',
-                'https://ubuntu.com/security/notices/USN-7980-1',
-                'https://www.cve.org/CVERecord?id=CVE-2025-66199'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: OpenSSL: Denial of Service due to excessive memory allocation in TLS 1.3 certificate compression'
-            },
-            {
-              'cve':  'CVE-2025-68160',
-              'cvss': {
-                'redhat': {
-                  'v3score':  '4.7',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-787'
-              ],
-              'description':   'Issue summary: Writing large, newline-free data into a BIO chain using the\nline-buffering filter where the next BIO performs short writes can trigger\na heap-based out-of-bounds write.\n\nImpact summary: This out-of-bounds write can cause memory corruption which\ntypically results in a crash, leading to Denial of Service for an application.\n\nThe line-buffering BIO filter (BIO_f_linebuffer) is not used by default in\nTLS/SSL data paths. In OpenSSL command-line applications, it is typically\nonly pushed onto stdout/stderr on VMS systems. Third-party applications that\nexplicitly use this filter with a BIO chain that can short-write and that\nwrite large, newline-free data influenced by an attacker would be affected.\nHowever, the circumstances where this could happen are unlikely to be under\nattacker control, and BIO_f_linebuffer is unlikely to be handling non-curated\ndata controlled by an attacker. For that reason the issue was assessed as\nLow severity.\n\nThe FIPS modules in 3.6, 3.5, 3.4, 3.3 and 3.0 are not affected by this issue,\nas the BIO implementation is outside the OpenSSL FIPS module boundary.\n\nOpenSSL 3.6, 3.5, 3.4, 3.3, 3.0, 1.1.1 and 1.0.2 are vulnerable to this issue.',
-              'diffID':        'sha256:994456c4fd7b2b87346a81961efb4ce945a39592d32e0762b38768bca7c7d085',
-              'fixedVersions': [
-                '3.3.6-r0'
-              ],
-              'installedVersion': '3.3.3-r0',
-              'packageName':      'libssl3',
-              'purl':             'pkg:apk/alpine/libssl3@3.3.3-r0?arch=x86_64&distro=3.20.6',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2025-68160',
-                'https://github.com/openssl/openssl/commit/384011202af92605d926fafe4a0bcd6b65d162ad',
-                'https://github.com/openssl/openssl/commit/475c466ef2fbd8fc1df6fae1c3eed9c813fc8ff6',
-                'https://github.com/openssl/openssl/commit/4c96fbba618e1940f038012506ee9e21d32ee12c',
-                'https://github.com/openssl/openssl/commit/6845c3b6460a98b1ec4e463baa2ea1a63a32d7c0',
-                'https://github.com/openssl/openssl/commit/68a7cd2e2816c3a02f4d45a2ce43fc04fac97096',
-                'https://nvd.nist.gov/vuln/detail/CVE-2025-68160',
-                'https://openssl-library.org/news/secadv/20260127.txt',
-                'https://ubuntu.com/security/notices/USN-7980-1',
-                'https://ubuntu.com/security/notices/USN-7980-2',
-                'https://www.cve.org/CVERecord?id=CVE-2025-68160'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: OpenSSL: Denial of Service due to out-of-bounds write in BIO filter'
-            },
-            {
-              'cve':  'CVE-2025-69418',
-              'cvss': {
-                'redhat': {
-                  'v3score':  '4',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-325'
-              ],
-              'description':   'Issue summary: When using the low-level OCB API directly with AES-NI or<br>other hardware-accelerated code paths, inputs whose length is not a multiple<br>of 16 bytes can leave the final partial block unencrypted and unauthenticated.<br><br>Impact summary: The trailing 1-15 bytes of a message may be exposed in<br>cleartext on encryption and are not covered by the authentication tag,<br>allowing an attacker to read or tamper with those bytes without detection.<br><br>The low-level OCB encrypt and decrypt routines in the hardware-accelerated<br>stream path process full 16-byte blocks but do not advance the input/output<br>pointers. The subsequent tail-handling code then operates on the original<br>base pointers, effectively reprocessing the beginning of the buffer while<br>leaving the actual trailing bytes unprocessed. The authentication checksum<br>also excludes the true tail bytes.<br><br>However, typical OpenSSL consumers using EVP are not affected because the<br>higher-level EVP and provider OCB implementations split inputs so that full<br>blocks and trailing partial blocks are processed in separate calls, avoiding<br>the problematic code path. Additionally, TLS does not use OCB ciphersuites.<br>The vulnerability only affects applications that call the low-level<br>CRYPTO_ocb128_encrypt() or CRYPTO_ocb128_decrypt() functions directly with<br>non-block-aligned lengths in a single call on hardware-accelerated builds.<br>For these reasons the issue was assessed as Low severity.<br><br>The FIPS modules in 3.6, 3.5, 3.4, 3.3, 3.2, 3.1 and 3.0 are not affected<br>by this issue, as OCB mode is not a FIPS-approved algorithm.<br><br>OpenSSL 3.6, 3.5, 3.4, 3.3, 3.0 and 1.1.1 are vulnerable to this issue.<br><br>OpenSSL 1.0.2 is not affected by this issue.',
-              'diffID':        'sha256:994456c4fd7b2b87346a81961efb4ce945a39592d32e0762b38768bca7c7d085',
-              'fixedVersions': [
-                '3.3.6-r0'
-              ],
-              'installedVersion': '3.3.3-r0',
-              'packageName':      'libssl3',
-              'purl':             'pkg:apk/alpine/libssl3@3.3.3-r0?arch=x86_64&distro=3.20.6',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2025-69418',
-                'https://github.com/openssl/openssl/commit/372fc5c77529695b05b4f5b5187691a57ef5dffc',
-                'https://github.com/openssl/openssl/commit/4016975d4469cd6b94927c607f7c511385f928d8',
-                'https://github.com/openssl/openssl/commit/52d23c86a54adab5ee9f80e48b242b52c4cc2347',
-                'https://github.com/openssl/openssl/commit/a7589230356d908c0eca4b969ec4f62106f4f5ae',
-                'https://github.com/openssl/openssl/commit/ed40856d7d4ba6cb42779b6770666a65f19cb977',
-                'https://nvd.nist.gov/vuln/detail/CVE-2025-69418',
-                'https://openssl-library.org/news/secadv/20260127.txt',
-                'https://ubuntu.com/security/notices/USN-7980-1',
-                'https://ubuntu.com/security/notices/USN-7980-2',
-                'https://www.cve.org/CVERecord?id=CVE-2025-69418'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: OpenSSL: Information disclosure and data tampering via specific low-level OCB encryption/decryption calls'
-            },
-            {
-              'cve':  'CVE-2025-69420',
-              'cvss': {
-                'redhat': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-754'
-              ],
-              'description':   'Issue summary: A type confusion vulnerability exists in the TimeStamp Response\nverification code where an ASN1_TYPE union member is accessed without first\nvalidating the type, causing an invalid or NULL pointer dereference when\nprocessing a malformed TimeStamp Response file.\n\nImpact summary: An application calling TS_RESP_verify_response() with a\nmalformed TimeStamp Response can be caused to dereference an invalid or\nNULL pointer when reading, resulting in a Denial of Service.\n\nThe functions ossl_ess_get_signing_cert() and ossl_ess_get_signing_cert_v2()\naccess the signing cert attribute value without validating its type.\nWhen the type is not V_ASN1_SEQUENCE, this results in accessing invalid memory\nthrough the ASN1_TYPE union, causing a crash.\n\nExploiting this vulnerability requires an attacker to provide a malformed\nTimeStamp Response to an application that verifies timestamp responses. The\nTimeStamp protocol (RFC 3161) is not widely used and the impact of the\nexploit is just a Denial of Service. For these reasons the issue was\nassessed as Low severity.\n\nThe FIPS modules in 3.5, 3.4, 3.3 and 3.0 are not affected by this issue,\nas the TimeStamp Response implementation is outside the OpenSSL FIPS module\nboundary.\n\nOpenSSL 3.6, 3.5, 3.4, 3.3, 3.0 and 1.1.1 are vulnerable to this issue.\n\nOpenSSL 1.0.2 is not affected by this issue.',
-              'diffID':        'sha256:994456c4fd7b2b87346a81961efb4ce945a39592d32e0762b38768bca7c7d085',
-              'fixedVersions': [
-                '3.3.6-r0'
-              ],
-              'installedVersion': '3.3.3-r0',
-              'packageName':      'libssl3',
-              'purl':             'pkg:apk/alpine/libssl3@3.3.3-r0?arch=x86_64&distro=3.20.6',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2025-69420',
-                'https://github.com/openssl/openssl/commit/27c7012c91cc986a598d7540f3079dfde2416eb9',
-                'https://github.com/openssl/openssl/commit/4e254b48ad93cc092be3dd62d97015f33f73133a',
-                'https://github.com/openssl/openssl/commit/564fd9c73787f25693bf9e75faf7bf6bb1305d4e',
-                'https://github.com/openssl/openssl/commit/5eb0770ffcf11b785cf374ff3c19196245e54f1b',
-                'https://github.com/openssl/openssl/commit/a99349ebfc519999edc50620abe24d599b9eb085',
-                'https://nvd.nist.gov/vuln/detail/CVE-2025-69420',
-                'https://openssl-library.org/news/secadv/20260127.txt',
-                'https://ubuntu.com/security/notices/USN-7980-1',
-                'https://ubuntu.com/security/notices/USN-7980-2',
-                'https://www.cve.org/CVERecord?id=CVE-2025-69420'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: OpenSSL: Denial of Service via malformed TimeStamp Response'
-            },
-            {
-              'cve':  'CVE-2025-69421',
-              'cvss': {
-                'redhat': {
-                  'v3score':  '6.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-476'
-              ],
-              'description':   'Issue summary: Processing a malformed PKCS#12 file can trigger a NULL pointer\ndereference in the PKCS12_item_decrypt_d2i_ex() function.\n\nImpact summary: A NULL pointer dereference can trigger a crash which leads to\nDenial of Service for an application processing PKCS#12 files.\n\nThe PKCS12_item_decrypt_d2i_ex() function does not check whether the oct\nparameter is NULL before dereferencing it. When called from\nPKCS12_unpack_p7encdata() with a malformed PKCS#12 file, this parameter can\nbe NULL, causing a crash. The vulnerability is limited to Denial of Service\nand cannot be escalated to achieve code execution or memory disclosure.\n\nExploiting this issue requires an attacker to provide a malformed PKCS#12 file\nto an application that processes it. For that reason the issue was assessed as\nLow severity according to our Security Policy.\n\nThe FIPS modules in 3.6, 3.5, 3.4, 3.3 and 3.0 are not affected by this issue,\nas the PKCS#12 implementation is outside the OpenSSL FIPS module boundary.\n\nOpenSSL 3.6, 3.5, 3.4, 3.3, 3.0, 1.1.1 and 1.0.2 are vulnerable to this issue.',
-              'diffID':        'sha256:994456c4fd7b2b87346a81961efb4ce945a39592d32e0762b38768bca7c7d085',
-              'fixedVersions': [
-                '3.3.6-r0'
-              ],
-              'installedVersion': '3.3.3-r0',
-              'packageName':      'libssl3',
-              'purl':             'pkg:apk/alpine/libssl3@3.3.3-r0?arch=x86_64&distro=3.20.6',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2025-69421',
-                'https://github.com/openssl/openssl/commit/3524a29271f8191b8fd8a5257eb05173982a097b',
-                'https://github.com/openssl/openssl/commit/36ecb4960872a4ce04bf6f1e1f4e78d75ec0c0c7',
-                'https://github.com/openssl/openssl/commit/4bbc8d41a72c842ce4077a8a3eccd1109aaf74bd',
-                'https://github.com/openssl/openssl/commit/643986985cd1c21221f941129d76fe0c2785aeb3',
-                'https://github.com/openssl/openssl/commit/a2dbc539f0f9cc63832709fa5aa33ad9495eb19c',
-                'https://nvd.nist.gov/vuln/detail/CVE-2025-69421',
-                'https://openssl-library.org/news/secadv/20260127.txt',
-                'https://ubuntu.com/security/notices/USN-7980-1',
-                'https://ubuntu.com/security/notices/USN-7980-2',
-                'https://www.cve.org/CVERecord?id=CVE-2025-69421'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: OpenSSL: Denial of Service via malformed PKCS#12 file processing'
-            },
-            {
-              'cve':  'CVE-2025-9230',
-              'cvss': {
-                'redhat': {
-                  'v3score':  '5.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L'
-                }
-              },
-              'cwes': [
-                'CWE-125',
-                'CWE-787'
-              ],
-              'description':   'Issue summary: An application trying to decrypt CMS messages encrypted using\npassword based encryption can trigger an out-of-bounds read and write.\n\nImpact summary: This out-of-bounds read may trigger a crash which leads to\nDenial of Service for an application. The out-of-bounds write can cause\na memory corruption which can have various consequences including\na Denial of Service or Execution of attacker-supplied code.\n\nAlthough the consequences of a successful exploit of this vulnerability\ncould be severe, the probability that the attacker would be able to\nperform it is low. Besides, password based (PWRI) encryption support in CMS\nmessages is very rarely used. For that reason the issue was assessed as\nModerate severity according to our Security Policy.\n\nThe FIPS modules in 3.5, 3.4, 3.3, 3.2, 3.1 and 3.0 are not affected by this\nissue, as the CMS implementation is outside the OpenSSL FIPS module\nboundary.',
-              'diffID':        'sha256:994456c4fd7b2b87346a81961efb4ce945a39592d32e0762b38768bca7c7d085',
-              'fixedVersions': [
-                '3.3.5-r0'
-              ],
-              'installedVersion': '3.3.3-r0',
-              'packageName':      'libssl3',
-              'purl':             'pkg:apk/alpine/libssl3@3.3.3-r0?arch=x86_64&distro=3.20.6',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2025/09/30/5',
-                'https://access.redhat.com/errata/RHSA-2025:21255',
-                'https://access.redhat.com/security/cve/CVE-2025-9230',
-                'https://bugzilla.redhat.com/2396054',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2396054',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-9230',
-                'https://errata.almalinux.org/9/ALSA-2025-21255.html',
-                'https://errata.rockylinux.org/RLSA-2025:21255',
-                'https://github.com/openssl/openssl/commit/5965ea5dd6960f36d8b7f74f8eac67a8eb8f2b45',
-                'https://github.com/openssl/openssl/commit/9e91358f365dee6c446dcdcdb01c04d2743fd280',
-                'https://github.com/openssl/openssl/commit/a79c4ce559c6a3a8fd4109e9f33c1185d5bf2def',
-                'https://github.com/openssl/openssl/commit/b5282d677551afda7d20e9c00e09561b547b2dfd',
-                'https://github.com/openssl/openssl/commit/bae259a211ada6315dc50900686daaaaaa55f482',
-                'https://github.openssl.org/openssl/extended-releases/commit/c2b96348bfa662f25f4fabf81958ae822063dae3',
-                'https://github.openssl.org/openssl/extended-releases/commit/dfbaf161d8dafc1132dd88cd48ad990ed9b4c8ba',
-                'https://linux.oracle.com/cve/CVE-2025-9230.html',
-                'https://linux.oracle.com/errata/ELSA-2026-50008.html',
-                'https://lists.debian.org/debian-lts-announce/2025/10/msg00001.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2025-9230',
-                'https://openssl-library.org/news/secadv/20250930.txt',
-                'https://ubuntu.com/security/notices/USN-7786-1',
-                'https://www.cve.org/CVERecord?id=CVE-2025-9230'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: Out-of-bounds read & write in RFC 3211 KEK Unwrap'
-            },
-            {
-              'cve':  'CVE-2025-9231',
-              'cvss': {
-                'redhat': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-385'
-              ],
-              'description':   'Issue summary: A timing side-channel which could potentially allow remote\nrecovery of the private key exists in the SM2 algorithm implementation on 64 bit\nARM platforms.\n\nImpact summary: A timing side-channel in SM2 signature computations on 64 bit\nARM platforms could allow recovering the private key by an attacker..\n\nWhile remote key recovery over a network was not attempted by the reporter,\ntiming measurements revealed a timing signal which may allow such an attack.\n\nOpenSSL does not directly support certificates with SM2 keys in TLS, and so\nthis CVE is not relevant in most TLS contexts.  However, given that it is\npossible to add support for such certificates via a custom provider, coupled\nwith the fact that in such a custom provider context the private key may be\nrecoverable via remote timing measurements, we consider this to be a Moderate\nseverity issue.\n\nThe FIPS modules in 3.5, 3.4, 3.3, 3.2, 3.1 and 3.0 are not affected by this\nissue, as SM2 is not an approved algorithm.',
-              'diffID':        'sha256:994456c4fd7b2b87346a81961efb4ce945a39592d32e0762b38768bca7c7d085',
-              'fixedVersions': [
-                '3.3.5-r0'
-              ],
-              'installedVersion': '3.3.3-r0',
-              'packageName':      'libssl3',
-              'purl':             'pkg:apk/alpine/libssl3@3.3.3-r0?arch=x86_64&distro=3.20.6',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2025/09/30/5',
-                'https://access.redhat.com/security/cve/CVE-2025-9231',
-                'https://github.com/openssl/openssl/commit/567f64386e43683888212226824b6a179885a0fe',
-                'https://github.com/openssl/openssl/commit/cba616c26ac8e7b37de5e77762e505ba5ca51698',
-                'https://github.com/openssl/openssl/commit/eed5adc9f969d77c94f213767acbb41ff923b6f4',
-                'https://github.com/openssl/openssl/commit/fc47a2ec078912b3e914fab5734535e76c4820c2',
-                'https://nvd.nist.gov/vuln/detail/CVE-2025-9231',
-                'https://openssl-library.org/news/secadv/20250930.txt',
-                'https://ubuntu.com/security/notices/USN-7786-1',
-                'https://www.cve.org/CVERecord?id=CVE-2025-9231'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: Timing side-channel in SM2 algorithm on 64 bit ARM'
-            },
-            {
-              'cve':  'CVE-2026-22795',
-              'cvss': {
-                'redhat': {
-                  'v3score':  '5.5',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-754'
-              ],
-              'description':   'Issue summary: An invalid or NULL pointer dereference can happen in\nan application processing a malformed PKCS#12 file.\n\nImpact summary: An application processing a malformed PKCS#12 file can be\ncaused to dereference an invalid or NULL pointer on memory read, resulting\nin a Denial of Service.\n\nA type confusion vulnerability exists in PKCS#12 parsing code where\nan ASN1_TYPE union member is accessed without first validating the type,\ncausing an invalid pointer read.\n\nThe location is constrained to a 1-byte address space, meaning any\nattempted pointer manipulation can only target addresses between 0x00 and 0xFF.\nThis range corresponds to the zero page, which is unmapped on most modern\noperating systems and will reliably result in a crash, leading only to a\nDenial of Service. Exploiting this issue also requires a user or application\nto process a maliciously crafted PKCS#12 file. It is uncommon to accept\nuntrusted PKCS#12 files in applications as they are usually used to store\nprivate keys which are trusted by definition. For these reasons, the issue\nwas assessed as Low severity.\n\nThe FIPS modules in 3.5, 3.4, 3.3 and 3.0 are not affected by this issue,\nas the PKCS12 implementation is outside the OpenSSL FIPS module boundary.\n\nOpenSSL 3.6, 3.5, 3.4, 3.3, 3.0 and 1.1.1 are vulnerable to this issue.\n\nOpenSSL 1.0.2 is not affected by this issue.',
-              'diffID':        'sha256:994456c4fd7b2b87346a81961efb4ce945a39592d32e0762b38768bca7c7d085',
-              'fixedVersions': [
-                '3.3.6-r0'
-              ],
-              'installedVersion': '3.3.3-r0',
-              'packageName':      'libssl3',
-              'purl':             'pkg:apk/alpine/libssl3@3.3.3-r0?arch=x86_64&distro=3.20.6',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2026-22795',
-                'https://github.com/openssl/openssl/commit/2502e7b7d4c0cf4f972a881641fe09edc67aeec4',
-                'https://github.com/openssl/openssl/commit/572844beca95068394c916626a6d3a490f831a49',
-                'https://github.com/openssl/openssl/commit/7bbca05be55b129651d9df4bdb92becc45002c12',
-                'https://github.com/openssl/openssl/commit/eeee3cbd4d682095ed431052f00403004596373e',
-                'https://github.com/openssl/openssl/commit/ef2fb66ec571564d64d1c74a12e388a2a54d05d2',
-                'https://nvd.nist.gov/vuln/detail/CVE-2026-22795',
-                'https://openssl-library.org/news/secadv/20260127.txt',
-                'https://ubuntu.com/security/notices/USN-7980-1',
-                'https://ubuntu.com/security/notices/USN-7980-2',
-                'https://www.cve.org/CVERecord?id=CVE-2026-22795'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: OpenSSL: Denial of Service due to type confusion in PKCS#12 file processing'
-            },
-            {
-              'cve':  'CVE-2026-22796',
-              'cvss': {
-                'redhat': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-754'
-              ],
-              'description':   'Issue summary: A type confusion vulnerability exists in the signature\nverification of signed PKCS#7 data where an ASN1_TYPE union member is\naccessed without first validating the type, causing an invalid or NULL\npointer dereference when processing malformed PKCS#7 data.\n\nImpact summary: An application performing signature verification of PKCS#7\ndata or calling directly the PKCS7_digest_from_attributes() function can be\ncaused to dereference an invalid or NULL pointer when reading, resulting in\na Denial of Service.\n\nThe function PKCS7_digest_from_attributes() accesses the message digest attribute\nvalue without validating its type. When the type is not V_ASN1_OCTET_STRING,\nthis results in accessing invalid memory through the ASN1_TYPE union, causing\na crash.\n\nExploiting this vulnerability requires an attacker to provide a malformed\nsigned PKCS#7 to an application that verifies it. The impact of the\nexploit is just a Denial of Service, the PKCS7 API is legacy and applications\nshould be using the CMS API instead. For these reasons the issue was\nassessed as Low severity.\n\nThe FIPS modules in 3.5, 3.4, 3.3 and 3.0 are not affected by this issue,\nas the PKCS#7 parsing implementation is outside the OpenSSL FIPS module\nboundary.\n\nOpenSSL 3.6, 3.5, 3.4, 3.3, 3.0, 1.1.1 and 1.0.2 are vulnerable to this issue.',
-              'diffID':        'sha256:994456c4fd7b2b87346a81961efb4ce945a39592d32e0762b38768bca7c7d085',
-              'fixedVersions': [
-                '3.3.6-r0'
-              ],
-              'installedVersion': '3.3.3-r0',
-              'packageName':      'libssl3',
-              'purl':             'pkg:apk/alpine/libssl3@3.3.3-r0?arch=x86_64&distro=3.20.6',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2026-22796',
-                'https://github.com/openssl/openssl/commit/2502e7b7d4c0cf4f972a881641fe09edc67aeec4',
-                'https://github.com/openssl/openssl/commit/572844beca95068394c916626a6d3a490f831a49',
-                'https://github.com/openssl/openssl/commit/7bbca05be55b129651d9df4bdb92becc45002c12',
-                'https://github.com/openssl/openssl/commit/eeee3cbd4d682095ed431052f00403004596373e',
-                'https://github.com/openssl/openssl/commit/ef2fb66ec571564d64d1c74a12e388a2a54d05d2',
-                'https://nvd.nist.gov/vuln/detail/CVE-2026-22796',
-                'https://openssl-library.org/news/secadv/20260127.txt',
-                'https://ubuntu.com/security/notices/USN-7980-1',
-                'https://ubuntu.com/security/notices/USN-7980-2',
-                'https://www.cve.org/CVERecord?id=CVE-2026-22796'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: OpenSSL: Denial of Service via type confusion in PKCS#7 signature verification'
-            },
-            {
-              'cve':  'CVE-2025-9232',
-              'cvss': {
-                'redhat': {
-                  'v3score':  '3.1',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L'
-                }
-              },
-              'cwes': [
-                'CWE-125'
-              ],
-              'description':   "Issue summary: An application using the OpenSSL HTTP client API functions may\ntrigger an out-of-bounds read if the 'no_proxy' environment variable is set and\nthe host portion of the authority component of the HTTP URL is an IPv6 address.\n\nImpact summary: An out-of-bounds read can trigger a crash which leads to\nDenial of Service for an application.\n\nThe OpenSSL HTTP client API functions can be used directly by applications\nbut they are also used by the OCSP client functions and CMP (Certificate\nManagement Protocol) client implementation in OpenSSL. However the URLs used\nby these implementations are unlikely to be controlled by an attacker.\n\nIn this vulnerable code the out of bounds read can only trigger a crash.\nFurthermore the vulnerability requires an attacker-controlled URL to be\npassed from an application to the OpenSSL function and the user has to have\na 'no_proxy' environment variable set. For the aforementioned reasons the\nissue was assessed as Low severity.\n\nThe vulnerable code was introduced in the following patch releases:\n3.0.16, 3.1.8, 3.2.4, 3.3.3, 3.4.0 and 3.5.0.\n\nThe FIPS modules in 3.5, 3.4, 3.3, 3.2, 3.1 and 3.0 are not affected by this\nissue, as the HTTP client implementation is outside the OpenSSL FIPS module\nboundary.",
-              'diffID':        'sha256:994456c4fd7b2b87346a81961efb4ce945a39592d32e0762b38768bca7c7d085',
-              'fixedVersions': [
-                '3.3.5-r0'
-              ],
-              'installedVersion': '3.3.3-r0',
-              'packageName':      'libssl3',
-              'purl':             'pkg:apk/alpine/libssl3@3.3.3-r0?arch=x86_64&distro=3.20.6',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2025/09/30/5',
-                'https://access.redhat.com/security/cve/CVE-2025-9232',
-                'https://github.com/openssl/openssl/commit/2b4ec20e47959170422922eaff25346d362dcb35',
-                'https://github.com/openssl/openssl/commit/654dc11d23468a74fc8ea4672b702dd3feb7be4b',
-                'https://github.com/openssl/openssl/commit/7cf21a30513c9e43c4bc3836c237cf086e194af3',
-                'https://github.com/openssl/openssl/commit/89e790ac431125a4849992858490bed6b225eadf',
-                'https://github.com/openssl/openssl/commit/bbf38c034cdabd0a13330abcc4855c866f53d2e0',
-                'https://nvd.nist.gov/vuln/detail/CVE-2025-9232',
-                'https://openssl-library.org/news/secadv/20250930.txt',
-                'https://ubuntu.com/security/notices/USN-7786-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2025-9232'
-              ],
-              'severity':   'LOW',
-              'suppressed': false,
-              'title':      'openssl: Out-of-bounds read in HTTP client no_proxy handling'
-            },
-            {
-              'cve':  'CVE-2024-58251',
-              'cwes': [
-                'CWE-150'
-              ],
-              'description':   'In netstat in BusyBox through 1.37.0, local users can launch of network application with an argv[0] containing an ANSI terminal escape sequence, leading to a denial of service (terminal locked up) when netstat is used by a victim.',
-              'diffID':        'sha256:994456c4fd7b2b87346a81961efb4ce945a39592d32e0762b38768bca7c7d085',
-              'fixedVersions': [
-                '1.36.1-r31'
-              ],
-              'installedVersion': '1.36.1-r29',
-              'packageName':      'ssl_client',
-              'purl':             'pkg:apk/alpine/ssl_client@1.36.1-r29?arch=x86_64&distro=3.20.6',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2025/04/23/6',
-                'https://bugs.busybox.net/show_bug.cgi?id=15922',
-                'https://www.busybox.net',
-                'https://www.busybox.net/downloads/',
-                'https://www.cve.org/CVERecord?id=CVE-2024-58251'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'In netstat in BusyBox through 1.37.0, local users can launch of networ ...'
-            },
-            {
-              'cve':  'CVE-2025-46394',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '3.3',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-451'
-              ],
-              'description':   'In tar in BusyBox through 1.37.0, a TAR archive can have filenames hidden from a listing through the use of terminal escape sequences.',
-              'diffID':        'sha256:994456c4fd7b2b87346a81961efb4ce945a39592d32e0762b38768bca7c7d085',
-              'fixedVersions': [
-                '1.36.1-r31'
-              ],
-              'installedVersion': '1.36.1-r29',
-              'packageName':      'ssl_client',
-              'purl':             'pkg:apk/alpine/ssl_client@1.36.1-r29?arch=x86_64&distro=3.20.6',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2025/04/23/5',
-                'http://www.openwall.com/lists/oss-security/2025/04/24/3',
-                'https://bugs.busybox.net/show_bug.cgi?id=16018',
-                'https://lists.busybox.net/pipermail/busybox/2024-July/090806.html',
-                'https://lists.busybox.net/pipermail/busybox/2024-July/090814.html',
-                'https://www.busybox.net',
-                'https://www.busybox.net/downloads/',
-                'https://www.cve.org/CVERecord?id=CVE-2025-46394',
-                'https://www.openwall.com/lists/oss-security/2025/04/23/1'
-              ],
-              'severity':   'LOW',
-              'suppressed': false,
-              'title':      'In tar in BusyBox through 1.37.0, a TAR archive can have filenames hid ...'
-            }
-          ]
-        }
-      ],
-      'summary': {
-        'critical':   2,
-        'high':       2,
-        'low':        5,
-        'medium':     23,
-        'suppressed': 0,
-        'unknown':    0
-      }
-    }
-  },
-  {
-    'id':    'default/cdeb233e7b54d1d0f2ca2a15a63879a8261ca4ae10f095631d728047732d3117',
-    'type':  'storage.sbomscanner.kubewarden.io.vulnerabilityreport',
-    'links': {
-      'patch':  'https://localhost:8005/v1/storage.sbomscanner.kubewarden.io.vulnerabilityreports/default/cdeb233e7b54d1d0f2ca2a15a63879a8261ca4ae10f095631d728047732d3117',
-      'remove': 'https://localhost:8005/v1/storage.sbomscanner.kubewarden.io.vulnerabilityreports/default/cdeb233e7b54d1d0f2ca2a15a63879a8261ca4ae10f095631d728047732d3117',
-      'self':   'https://localhost:8005/v1/storage.sbomscanner.kubewarden.io.vulnerabilityreports/default/cdeb233e7b54d1d0f2ca2a15a63879a8261ca4ae10f095631d728047732d3117',
-      'update': 'https://localhost:8005/v1/storage.sbomscanner.kubewarden.io.vulnerabilityreports/default/cdeb233e7b54d1d0f2ca2a15a63879a8261ca4ae10f095631d728047732d3117',
-      'view':   'https://localhost:8005/apis/storage.sbomscanner.kubewarden.io/v1alpha1/namespaces/default/vulnerabilityreports/cdeb233e7b54d1d0f2ca2a15a63879a8261ca4ae10f095631d728047732d3117'
-    },
-    'apiVersion':    'storage.sbomscanner.kubewarden.io/v1alpha1',
-    'imageMetadata': {
-      'digest':      'sha256:1de5eb4a9a6735adb46b2c9c88674c0cfba3444dd4ac2341b3babf1261700529',
-      'platform':    'linux/riscv64',
-      'registry':    'lsong-demo1',
-      'registryURI': 'registry-1.docker.io',
-      'repository':  'library/alpine',
-      'tag':         '3.21.3'
-    },
-    'kind':     'VulnerabilityReport',
-    'metadata': {
-      'creationTimestamp': '2026-01-14T18:51:41Z',
-      'fields':            [
-        'cdeb233e7b54d1d0f2ca2a15a63879a8261ca4ae10f095631d728047732d3117',
-        'registry-1.docker.io/library/alpine:3.21.3',
-        'linux/riscv64',
-        '12 (0 suppressed)'
-      ],
-      'labels': {
-        'app.kubernetes.io/managed-by':          'sbomscanner',
-        'app.kubernetes.io/part-of':             'sbomscanner',
-        'sbomscanner.kubewarden.io/scanjob-uid': '445c600a-c4b6-40b3-bd71-f2d2140a37d5'
-      },
-      'name':            'cdeb233e7b54d1d0f2ca2a15a63879a8261ca4ae10f095631d728047732d3117',
-      'namespace':       'default',
-      'ownerReferences': [
-        {
-          'apiVersion':         'storage.sbomscanner.kubewarden.io/v1alpha1',
-          'blockOwnerDeletion': true,
-          'controller':         true,
-          'kind':               'SBOM',
-          'name':               'cdeb233e7b54d1d0f2ca2a15a63879a8261ca4ae10f095631d728047732d3117',
-          'uid':                'c25f0325-7b1b-42b4-b585-1bbfb3c46867'
-        }
-      ],
-      'relationships': [
-        {
-          'fromId':   'default/cdeb233e7b54d1d0f2ca2a15a63879a8261ca4ae10f095631d728047732d3117',
-          'fromType': 'storage.sbomscanner.kubewarden.io.sbom',
-          'rel':      'owner',
-          'state':    'active',
-          'message':  'Resource is current'
-        }
-      ],
-      'resourceVersion': '1',
-      'state':           {
-        'error':         false,
-        'message':       'Resource is current',
-        'name':          'active',
-        'transitioning': false
-      },
-      'uid': 'd1d546c1-572a-4e4c-9d0f-7037b2c351b7'
-    },
-    'report': {
-      'results': [
-        {
-          'class':           'os-pkgs',
-          'target':          '/var/run/worker/trivy.sbom.3451049696.json (alpine 3.21.3)',
-          'type':            'alpine',
-          'vulnerabilities': [
-            {
-              'cve':  'CVE-2024-58251',
-              'cwes': [
-                'CWE-150'
-              ],
-              'description':   'In netstat in BusyBox through 1.37.0, local users can launch of network application with an argv[0] containing an ANSI terminal escape sequence, leading to a denial of service (terminal locked up) when netstat is used by a victim.',
-              'diffID':        'sha256:c5d09ab84caef85a8bf007bb921bb6c73499d3583f310c393ab650109c24efaf',
-              'fixedVersions': [
-                '1.37.0-r14'
-              ],
-              'installedVersion': '1.37.0-r12',
-              'packageName':      'busybox',
-              'purl':             'pkg:apk/alpine/busybox@1.37.0-r12?arch=riscv64&distro=3.21.3',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2025/04/23/6',
-                'https://bugs.busybox.net/show_bug.cgi?id=15922',
-                'https://www.busybox.net',
-                'https://www.busybox.net/downloads/',
-                'https://www.cve.org/CVERecord?id=CVE-2024-58251'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'In netstat in BusyBox through 1.37.0, local users can launch of networ ...'
-            },
-            {
-              'cve':  'CVE-2025-46394',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '3.3',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-451'
-              ],
-              'description':   'In tar in BusyBox through 1.37.0, a TAR archive can have filenames hidden from a listing through the use of terminal escape sequences.',
-              'diffID':        'sha256:c5d09ab84caef85a8bf007bb921bb6c73499d3583f310c393ab650109c24efaf',
-              'fixedVersions': [
-                '1.37.0-r14'
-              ],
-              'installedVersion': '1.37.0-r12',
-              'packageName':      'busybox',
-              'purl':             'pkg:apk/alpine/busybox@1.37.0-r12?arch=riscv64&distro=3.21.3',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2025/04/23/5',
-                'http://www.openwall.com/lists/oss-security/2025/04/24/3',
-                'https://bugs.busybox.net/show_bug.cgi?id=16018',
-                'https://lists.busybox.net/pipermail/busybox/2024-July/090806.html',
-                'https://lists.busybox.net/pipermail/busybox/2024-July/090814.html',
-                'https://www.busybox.net',
-                'https://www.busybox.net/downloads/',
-                'https://www.cve.org/CVERecord?id=CVE-2025-46394',
-                'https://www.openwall.com/lists/oss-security/2025/04/23/1'
-              ],
-              'severity':   'LOW',
-              'suppressed': false,
-              'title':      'In tar in BusyBox through 1.37.0, a TAR archive can have filenames hid ...'
-            },
-            {
-              'cve':  'CVE-2024-58251',
-              'cwes': [
-                'CWE-150'
-              ],
-              'description':   'In netstat in BusyBox through 1.37.0, local users can launch of network application with an argv[0] containing an ANSI terminal escape sequence, leading to a denial of service (terminal locked up) when netstat is used by a victim.',
-              'diffID':        'sha256:c5d09ab84caef85a8bf007bb921bb6c73499d3583f310c393ab650109c24efaf',
-              'fixedVersions': [
-                '1.37.0-r14'
-              ],
-              'installedVersion': '1.37.0-r12',
-              'packageName':      'busybox-binsh',
-              'purl':             'pkg:apk/alpine/busybox-binsh@1.37.0-r12?arch=riscv64&distro=3.21.3',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2025/04/23/6',
-                'https://bugs.busybox.net/show_bug.cgi?id=15922',
-                'https://www.busybox.net',
-                'https://www.busybox.net/downloads/',
-                'https://www.cve.org/CVERecord?id=CVE-2024-58251'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'In netstat in BusyBox through 1.37.0, local users can launch of networ ...'
-            },
-            {
-              'cve':  'CVE-2025-46394',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '3.3',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-451'
-              ],
-              'description':   'In tar in BusyBox through 1.37.0, a TAR archive can have filenames hidden from a listing through the use of terminal escape sequences.',
-              'diffID':        'sha256:c5d09ab84caef85a8bf007bb921bb6c73499d3583f310c393ab650109c24efaf',
-              'fixedVersions': [
-                '1.37.0-r14'
-              ],
-              'installedVersion': '1.37.0-r12',
-              'packageName':      'busybox-binsh',
-              'purl':             'pkg:apk/alpine/busybox-binsh@1.37.0-r12?arch=riscv64&distro=3.21.3',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2025/04/23/5',
-                'http://www.openwall.com/lists/oss-security/2025/04/24/3',
-                'https://bugs.busybox.net/show_bug.cgi?id=16018',
-                'https://lists.busybox.net/pipermail/busybox/2024-July/090806.html',
-                'https://lists.busybox.net/pipermail/busybox/2024-July/090814.html',
-                'https://www.busybox.net',
-                'https://www.busybox.net/downloads/',
-                'https://www.cve.org/CVERecord?id=CVE-2025-46394',
-                'https://www.openwall.com/lists/oss-security/2025/04/23/1'
-              ],
-              'severity':   'LOW',
-              'suppressed': false,
-              'title':      'In tar in BusyBox through 1.37.0, a TAR archive can have filenames hid ...'
-            },
-            {
-              'cve':  'CVE-2025-9230',
-              'cvss': {
-                'redhat': {
-                  'v3score':  '5.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L'
-                }
-              },
-              'cwes': [
-                'CWE-125',
-                'CWE-787'
-              ],
-              'description':   'Issue summary: An application trying to decrypt CMS messages encrypted using\npassword based encryption can trigger an out-of-bounds read and write.\n\nImpact summary: This out-of-bounds read may trigger a crash which leads to\nDenial of Service for an application. The out-of-bounds write can cause\na memory corruption which can have various consequences including\na Denial of Service or Execution of attacker-supplied code.\n\nAlthough the consequences of a successful exploit of this vulnerability\ncould be severe, the probability that the attacker would be able to\nperform it is low. Besides, password based (PWRI) encryption support in CMS\nmessages is very rarely used. For that reason the issue was assessed as\nModerate severity according to our Security Policy.\n\nThe FIPS modules in 3.5, 3.4, 3.3, 3.2, 3.1 and 3.0 are not affected by this\nissue, as the CMS implementation is outside the OpenSSL FIPS module\nboundary.',
-              'diffID':        'sha256:c5d09ab84caef85a8bf007bb921bb6c73499d3583f310c393ab650109c24efaf',
-              'fixedVersions': [
-                '3.3.5-r0'
-              ],
-              'installedVersion': '3.3.3-r0',
-              'packageName':      'libcrypto3',
-              'purl':             'pkg:apk/alpine/libcrypto3@3.3.3-r0?arch=riscv64&distro=3.21.3',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2025/09/30/5',
-                'https://access.redhat.com/errata/RHSA-2025:21255',
-                'https://access.redhat.com/security/cve/CVE-2025-9230',
-                'https://bugzilla.redhat.com/2396054',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2396054',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-9230',
-                'https://errata.almalinux.org/9/ALSA-2025-21255.html',
-                'https://errata.rockylinux.org/RLSA-2025:21255',
-                'https://github.com/openssl/openssl/commit/5965ea5dd6960f36d8b7f74f8eac67a8eb8f2b45',
-                'https://github.com/openssl/openssl/commit/9e91358f365dee6c446dcdcdb01c04d2743fd280',
-                'https://github.com/openssl/openssl/commit/a79c4ce559c6a3a8fd4109e9f33c1185d5bf2def',
-                'https://github.com/openssl/openssl/commit/b5282d677551afda7d20e9c00e09561b547b2dfd',
-                'https://github.com/openssl/openssl/commit/bae259a211ada6315dc50900686daaaaaa55f482',
-                'https://github.openssl.org/openssl/extended-releases/commit/c2b96348bfa662f25f4fabf81958ae822063dae3',
-                'https://github.openssl.org/openssl/extended-releases/commit/dfbaf161d8dafc1132dd88cd48ad990ed9b4c8ba',
-                'https://linux.oracle.com/cve/CVE-2025-9230.html',
-                'https://linux.oracle.com/errata/ELSA-2026-0337.html',
-                'https://lists.debian.org/debian-lts-announce/2025/10/msg00001.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2025-9230',
-                'https://openssl-library.org/news/secadv/20250930.txt',
-                'https://ubuntu.com/security/notices/USN-7786-1',
-                'https://www.cve.org/CVERecord?id=CVE-2025-9230'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: Out-of-bounds read & write in RFC 3211 KEK Unwrap'
-            },
-            {
-              'cve':  'CVE-2025-9231',
-              'cvss': {
-                'redhat': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-385'
-              ],
-              'description':   'Issue summary: A timing side-channel which could potentially allow remote\nrecovery of the private key exists in the SM2 algorithm implementation on 64 bit\nARM platforms.\n\nImpact summary: A timing side-channel in SM2 signature computations on 64 bit\nARM platforms could allow recovering the private key by an attacker..\n\nWhile remote key recovery over a network was not attempted by the reporter,\ntiming measurements revealed a timing signal which may allow such an attack.\n\nOpenSSL does not directly support certificates with SM2 keys in TLS, and so\nthis CVE is not relevant in most TLS contexts.  However, given that it is\npossible to add support for such certificates via a custom provider, coupled\nwith the fact that in such a custom provider context the private key may be\nrecoverable via remote timing measurements, we consider this to be a Moderate\nseverity issue.\n\nThe FIPS modules in 3.5, 3.4, 3.3, 3.2, 3.1 and 3.0 are not affected by this\nissue, as SM2 is not an approved algorithm.',
-              'diffID':        'sha256:c5d09ab84caef85a8bf007bb921bb6c73499d3583f310c393ab650109c24efaf',
-              'fixedVersions': [
-                '3.3.5-r0'
-              ],
-              'installedVersion': '3.3.3-r0',
-              'packageName':      'libcrypto3',
-              'purl':             'pkg:apk/alpine/libcrypto3@3.3.3-r0?arch=riscv64&distro=3.21.3',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2025/09/30/5',
-                'https://access.redhat.com/security/cve/CVE-2025-9231',
-                'https://github.com/openssl/openssl/commit/567f64386e43683888212226824b6a179885a0fe',
-                'https://github.com/openssl/openssl/commit/cba616c26ac8e7b37de5e77762e505ba5ca51698',
-                'https://github.com/openssl/openssl/commit/eed5adc9f969d77c94f213767acbb41ff923b6f4',
-                'https://github.com/openssl/openssl/commit/fc47a2ec078912b3e914fab5734535e76c4820c2',
-                'https://nvd.nist.gov/vuln/detail/CVE-2025-9231',
-                'https://openssl-library.org/news/secadv/20250930.txt',
-                'https://ubuntu.com/security/notices/USN-7786-1',
-                'https://www.cve.org/CVERecord?id=CVE-2025-9231'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: Timing side-channel in SM2 algorithm on 64 bit ARM'
-            },
-            {
-              'cve':  'CVE-2025-9232',
-              'cvss': {
-                'redhat': {
-                  'v3score':  '3.1',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L'
-                }
-              },
-              'cwes': [
-                'CWE-125'
-              ],
-              'description':   "Issue summary: An application using the OpenSSL HTTP client API functions may\ntrigger an out-of-bounds read if the 'no_proxy' environment variable is set and\nthe host portion of the authority component of the HTTP URL is an IPv6 address.\n\nImpact summary: An out-of-bounds read can trigger a crash which leads to\nDenial of Service for an application.\n\nThe OpenSSL HTTP client API functions can be used directly by applications\nbut they are also used by the OCSP client functions and CMP (Certificate\nManagement Protocol) client implementation in OpenSSL. However the URLs used\nby these implementations are unlikely to be controlled by an attacker.\n\nIn this vulnerable code the out of bounds read can only trigger a crash.\nFurthermore the vulnerability requires an attacker-controlled URL to be\npassed from an application to the OpenSSL function and the user has to have\na 'no_proxy' environment variable set. For the aforementioned reasons the\nissue was assessed as Low severity.\n\nThe vulnerable code was introduced in the following patch releases:\n3.0.16, 3.1.8, 3.2.4, 3.3.3, 3.4.0 and 3.5.0.\n\nThe FIPS modules in 3.5, 3.4, 3.3, 3.2, 3.1 and 3.0 are not affected by this\nissue, as the HTTP client implementation is outside the OpenSSL FIPS module\nboundary.",
-              'diffID':        'sha256:c5d09ab84caef85a8bf007bb921bb6c73499d3583f310c393ab650109c24efaf',
-              'fixedVersions': [
-                '3.3.5-r0'
-              ],
-              'installedVersion': '3.3.3-r0',
-              'packageName':      'libcrypto3',
-              'purl':             'pkg:apk/alpine/libcrypto3@3.3.3-r0?arch=riscv64&distro=3.21.3',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2025/09/30/5',
-                'https://access.redhat.com/security/cve/CVE-2025-9232',
-                'https://github.com/openssl/openssl/commit/2b4ec20e47959170422922eaff25346d362dcb35',
-                'https://github.com/openssl/openssl/commit/654dc11d23468a74fc8ea4672b702dd3feb7be4b',
-                'https://github.com/openssl/openssl/commit/7cf21a30513c9e43c4bc3836c237cf086e194af3',
-                'https://github.com/openssl/openssl/commit/89e790ac431125a4849992858490bed6b225eadf',
-                'https://github.com/openssl/openssl/commit/bbf38c034cdabd0a13330abcc4855c866f53d2e0',
-                'https://nvd.nist.gov/vuln/detail/CVE-2025-9232',
-                'https://openssl-library.org/news/secadv/20250930.txt',
-                'https://ubuntu.com/security/notices/USN-7786-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2025-9232'
-              ],
-              'severity':   'LOW',
-              'suppressed': false,
-              'title':      'openssl: Out-of-bounds read in HTTP client no_proxy handling'
-            },
-            {
-              'cve':  'CVE-2025-9230',
-              'cvss': {
-                'redhat': {
-                  'v3score':  '5.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L'
-                }
-              },
-              'cwes': [
-                'CWE-125',
-                'CWE-787'
-              ],
-              'description':   'Issue summary: An application trying to decrypt CMS messages encrypted using\npassword based encryption can trigger an out-of-bounds read and write.\n\nImpact summary: This out-of-bounds read may trigger a crash which leads to\nDenial of Service for an application. The out-of-bounds write can cause\na memory corruption which can have various consequences including\na Denial of Service or Execution of attacker-supplied code.\n\nAlthough the consequences of a successful exploit of this vulnerability\ncould be severe, the probability that the attacker would be able to\nperform it is low. Besides, password based (PWRI) encryption support in CMS\nmessages is very rarely used. For that reason the issue was assessed as\nModerate severity according to our Security Policy.\n\nThe FIPS modules in 3.5, 3.4, 3.3, 3.2, 3.1 and 3.0 are not affected by this\nissue, as the CMS implementation is outside the OpenSSL FIPS module\nboundary.',
-              'diffID':        'sha256:c5d09ab84caef85a8bf007bb921bb6c73499d3583f310c393ab650109c24efaf',
-              'fixedVersions': [
-                '3.3.5-r0'
-              ],
-              'installedVersion': '3.3.3-r0',
-              'packageName':      'libssl3',
-              'purl':             'pkg:apk/alpine/libssl3@3.3.3-r0?arch=riscv64&distro=3.21.3',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2025/09/30/5',
-                'https://access.redhat.com/errata/RHSA-2025:21255',
-                'https://access.redhat.com/security/cve/CVE-2025-9230',
-                'https://bugzilla.redhat.com/2396054',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2396054',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-9230',
-                'https://errata.almalinux.org/9/ALSA-2025-21255.html',
-                'https://errata.rockylinux.org/RLSA-2025:21255',
-                'https://github.com/openssl/openssl/commit/5965ea5dd6960f36d8b7f74f8eac67a8eb8f2b45',
-                'https://github.com/openssl/openssl/commit/9e91358f365dee6c446dcdcdb01c04d2743fd280',
-                'https://github.com/openssl/openssl/commit/a79c4ce559c6a3a8fd4109e9f33c1185d5bf2def',
-                'https://github.com/openssl/openssl/commit/b5282d677551afda7d20e9c00e09561b547b2dfd',
-                'https://github.com/openssl/openssl/commit/bae259a211ada6315dc50900686daaaaaa55f482',
-                'https://github.openssl.org/openssl/extended-releases/commit/c2b96348bfa662f25f4fabf81958ae822063dae3',
-                'https://github.openssl.org/openssl/extended-releases/commit/dfbaf161d8dafc1132dd88cd48ad990ed9b4c8ba',
-                'https://linux.oracle.com/cve/CVE-2025-9230.html',
-                'https://linux.oracle.com/errata/ELSA-2026-0337.html',
-                'https://lists.debian.org/debian-lts-announce/2025/10/msg00001.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2025-9230',
-                'https://openssl-library.org/news/secadv/20250930.txt',
-                'https://ubuntu.com/security/notices/USN-7786-1',
-                'https://www.cve.org/CVERecord?id=CVE-2025-9230'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: Out-of-bounds read & write in RFC 3211 KEK Unwrap'
-            },
-            {
-              'cve':  'CVE-2025-9231',
-              'cvss': {
-                'redhat': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-385'
-              ],
-              'description':   'Issue summary: A timing side-channel which could potentially allow remote\nrecovery of the private key exists in the SM2 algorithm implementation on 64 bit\nARM platforms.\n\nImpact summary: A timing side-channel in SM2 signature computations on 64 bit\nARM platforms could allow recovering the private key by an attacker..\n\nWhile remote key recovery over a network was not attempted by the reporter,\ntiming measurements revealed a timing signal which may allow such an attack.\n\nOpenSSL does not directly support certificates with SM2 keys in TLS, and so\nthis CVE is not relevant in most TLS contexts.  However, given that it is\npossible to add support for such certificates via a custom provider, coupled\nwith the fact that in such a custom provider context the private key may be\nrecoverable via remote timing measurements, we consider this to be a Moderate\nseverity issue.\n\nThe FIPS modules in 3.5, 3.4, 3.3, 3.2, 3.1 and 3.0 are not affected by this\nissue, as SM2 is not an approved algorithm.',
-              'diffID':        'sha256:c5d09ab84caef85a8bf007bb921bb6c73499d3583f310c393ab650109c24efaf',
-              'fixedVersions': [
-                '3.3.5-r0'
-              ],
-              'installedVersion': '3.3.3-r0',
-              'packageName':      'libssl3',
-              'purl':             'pkg:apk/alpine/libssl3@3.3.3-r0?arch=riscv64&distro=3.21.3',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2025/09/30/5',
-                'https://access.redhat.com/security/cve/CVE-2025-9231',
-                'https://github.com/openssl/openssl/commit/567f64386e43683888212226824b6a179885a0fe',
-                'https://github.com/openssl/openssl/commit/cba616c26ac8e7b37de5e77762e505ba5ca51698',
-                'https://github.com/openssl/openssl/commit/eed5adc9f969d77c94f213767acbb41ff923b6f4',
-                'https://github.com/openssl/openssl/commit/fc47a2ec078912b3e914fab5734535e76c4820c2',
-                'https://nvd.nist.gov/vuln/detail/CVE-2025-9231',
-                'https://openssl-library.org/news/secadv/20250930.txt',
-                'https://ubuntu.com/security/notices/USN-7786-1',
-                'https://www.cve.org/CVERecord?id=CVE-2025-9231'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: Timing side-channel in SM2 algorithm on 64 bit ARM'
-            },
-            {
-              'cve':  'CVE-2025-9232',
-              'cvss': {
-                'redhat': {
-                  'v3score':  '3.1',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L'
-                }
-              },
-              'cwes': [
-                'CWE-125'
-              ],
-              'description':   "Issue summary: An application using the OpenSSL HTTP client API functions may\ntrigger an out-of-bounds read if the 'no_proxy' environment variable is set and\nthe host portion of the authority component of the HTTP URL is an IPv6 address.\n\nImpact summary: An out-of-bounds read can trigger a crash which leads to\nDenial of Service for an application.\n\nThe OpenSSL HTTP client API functions can be used directly by applications\nbut they are also used by the OCSP client functions and CMP (Certificate\nManagement Protocol) client implementation in OpenSSL. However the URLs used\nby these implementations are unlikely to be controlled by an attacker.\n\nIn this vulnerable code the out of bounds read can only trigger a crash.\nFurthermore the vulnerability requires an attacker-controlled URL to be\npassed from an application to the OpenSSL function and the user has to have\na 'no_proxy' environment variable set. For the aforementioned reasons the\nissue was assessed as Low severity.\n\nThe vulnerable code was introduced in the following patch releases:\n3.0.16, 3.1.8, 3.2.4, 3.3.3, 3.4.0 and 3.5.0.\n\nThe FIPS modules in 3.5, 3.4, 3.3, 3.2, 3.1 and 3.0 are not affected by this\nissue, as the HTTP client implementation is outside the OpenSSL FIPS module\nboundary.",
-              'diffID':        'sha256:c5d09ab84caef85a8bf007bb921bb6c73499d3583f310c393ab650109c24efaf',
-              'fixedVersions': [
-                '3.3.5-r0'
-              ],
-              'installedVersion': '3.3.3-r0',
-              'packageName':      'libssl3',
-              'purl':             'pkg:apk/alpine/libssl3@3.3.3-r0?arch=riscv64&distro=3.21.3',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2025/09/30/5',
-                'https://access.redhat.com/security/cve/CVE-2025-9232',
-                'https://github.com/openssl/openssl/commit/2b4ec20e47959170422922eaff25346d362dcb35',
-                'https://github.com/openssl/openssl/commit/654dc11d23468a74fc8ea4672b702dd3feb7be4b',
-                'https://github.com/openssl/openssl/commit/7cf21a30513c9e43c4bc3836c237cf086e194af3',
-                'https://github.com/openssl/openssl/commit/89e790ac431125a4849992858490bed6b225eadf',
-                'https://github.com/openssl/openssl/commit/bbf38c034cdabd0a13330abcc4855c866f53d2e0',
-                'https://nvd.nist.gov/vuln/detail/CVE-2025-9232',
-                'https://openssl-library.org/news/secadv/20250930.txt',
-                'https://ubuntu.com/security/notices/USN-7786-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2025-9232'
-              ],
-              'severity':   'LOW',
-              'suppressed': false,
-              'title':      'openssl: Out-of-bounds read in HTTP client no_proxy handling'
-            },
-            {
-              'cve':  'CVE-2024-58251',
-              'cwes': [
-                'CWE-150'
-              ],
-              'description':   'In netstat in BusyBox through 1.37.0, local users can launch of network application with an argv[0] containing an ANSI terminal escape sequence, leading to a denial of service (terminal locked up) when netstat is used by a victim.',
-              'diffID':        'sha256:c5d09ab84caef85a8bf007bb921bb6c73499d3583f310c393ab650109c24efaf',
-              'fixedVersions': [
-                '1.37.0-r14'
-              ],
-              'installedVersion': '1.37.0-r12',
-              'packageName':      'ssl_client',
-              'purl':             'pkg:apk/alpine/ssl_client@1.37.0-r12?arch=riscv64&distro=3.21.3',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2025/04/23/6',
-                'https://bugs.busybox.net/show_bug.cgi?id=15922',
-                'https://www.busybox.net',
-                'https://www.busybox.net/downloads/',
-                'https://www.cve.org/CVERecord?id=CVE-2024-58251'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'In netstat in BusyBox through 1.37.0, local users can launch of networ ...'
-            },
-            {
-              'cve':  'CVE-2025-46394',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '3.3',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-451'
-              ],
-              'description':   'In tar in BusyBox through 1.37.0, a TAR archive can have filenames hidden from a listing through the use of terminal escape sequences.',
-              'diffID':        'sha256:c5d09ab84caef85a8bf007bb921bb6c73499d3583f310c393ab650109c24efaf',
-              'fixedVersions': [
-                '1.37.0-r14'
-              ],
-              'installedVersion': '1.37.0-r12',
-              'packageName':      'ssl_client',
-              'purl':             'pkg:apk/alpine/ssl_client@1.37.0-r12?arch=riscv64&distro=3.21.3',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2025/04/23/5',
-                'http://www.openwall.com/lists/oss-security/2025/04/24/3',
-                'https://bugs.busybox.net/show_bug.cgi?id=16018',
-                'https://lists.busybox.net/pipermail/busybox/2024-July/090806.html',
-                'https://lists.busybox.net/pipermail/busybox/2024-July/090814.html',
-                'https://www.busybox.net',
-                'https://www.busybox.net/downloads/',
-                'https://www.cve.org/CVERecord?id=CVE-2025-46394',
-                'https://www.openwall.com/lists/oss-security/2025/04/23/1'
-              ],
-              'severity':   'LOW',
-              'suppressed': false,
-              'title':      'In tar in BusyBox through 1.37.0, a TAR archive can have filenames hid ...'
-            }
-          ]
-        }
-      ],
-      'summary': {
-        'critical':   0,
-        'high':       0,
-        'low':        5,
-        'medium':     7,
-        'suppressed': 0,
-        'unknown':    0
-      }
-    }
-  },
-  {
-    'id':    'default/d11a4ab92e010af0af50762cce9832e4f54b784f1ded715d44e55f025687a8fe',
-    'type':  'storage.sbomscanner.kubewarden.io.vulnerabilityreport',
-    'links': {
-      'patch':  'https://localhost:8005/v1/storage.sbomscanner.kubewarden.io.vulnerabilityreports/default/d11a4ab92e010af0af50762cce9832e4f54b784f1ded715d44e55f025687a8fe',
-      'remove': 'https://localhost:8005/v1/storage.sbomscanner.kubewarden.io.vulnerabilityreports/default/d11a4ab92e010af0af50762cce9832e4f54b784f1ded715d44e55f025687a8fe',
-      'self':   'https://localhost:8005/v1/storage.sbomscanner.kubewarden.io.vulnerabilityreports/default/d11a4ab92e010af0af50762cce9832e4f54b784f1ded715d44e55f025687a8fe',
-      'update': 'https://localhost:8005/v1/storage.sbomscanner.kubewarden.io.vulnerabilityreports/default/d11a4ab92e010af0af50762cce9832e4f54b784f1ded715d44e55f025687a8fe',
-      'view':   'https://localhost:8005/apis/storage.sbomscanner.kubewarden.io/v1alpha1/namespaces/default/vulnerabilityreports/d11a4ab92e010af0af50762cce9832e4f54b784f1ded715d44e55f025687a8fe'
-    },
-    'apiVersion':    'storage.sbomscanner.kubewarden.io/v1alpha1',
-    'imageMetadata': {
-      'digest':      'sha256:0325f4ff0aa8c89a27d1dbe10b29a71a8d4c1a42719a4170e0552a312e22fe88',
-      'platform':    'linux/amd64',
-      'registry':    'lsong-demo1',
-      'registryURI': 'registry-1.docker.io',
-      'repository':  'library/alpine',
-      'tag':         '3.4'
-    },
-    'kind':     'VulnerabilityReport',
-    'metadata': {
-      'creationTimestamp': '2026-01-14T18:52:06Z',
-      'fields':            [
-        'd11a4ab92e010af0af50762cce9832e4f54b784f1ded715d44e55f025687a8fe',
-        'registry-1.docker.io/library/alpine:3.4',
-        'linux/amd64',
-        '12 (0 suppressed)'
-      ],
-      'labels': {
-        'app.kubernetes.io/managed-by':          'sbomscanner',
-        'app.kubernetes.io/part-of':             'sbomscanner',
-        'sbomscanner.kubewarden.io/scanjob-uid': '445c600a-c4b6-40b3-bd71-f2d2140a37d5'
-      },
-      'name':            'd11a4ab92e010af0af50762cce9832e4f54b784f1ded715d44e55f025687a8fe',
-      'namespace':       'default',
-      'ownerReferences': [
-        {
-          'apiVersion':         'storage.sbomscanner.kubewarden.io/v1alpha1',
-          'blockOwnerDeletion': true,
-          'controller':         true,
-          'kind':               'SBOM',
-          'name':               'd11a4ab92e010af0af50762cce9832e4f54b784f1ded715d44e55f025687a8fe',
-          'uid':                'd9b2ef23-2da0-4ec0-b738-e7f552fcb606'
-        }
-      ],
-      'relationships': [
-        {
-          'fromId':   'default/d11a4ab92e010af0af50762cce9832e4f54b784f1ded715d44e55f025687a8fe',
-          'fromType': 'storage.sbomscanner.kubewarden.io.sbom',
-          'rel':      'owner',
-          'state':    'active',
-          'message':  'Resource is current'
-        }
-      ],
-      'resourceVersion': '1',
-      'state':           {
-        'error':         false,
-        'message':       'Resource is current',
-        'name':          'active',
-        'transitioning': false
-      },
-      'uid': '80c4c241-ddb5-461e-aa75-6a26368a86c1'
-    },
-    'report': {
-      'results': [
-        {
-          'class':           'os-pkgs',
-          'target':          '/var/run/worker/trivy.sbom.3521004361.json (alpine 3.4.6)',
-          'type':            'alpine',
-          'vulnerabilities': [
-            {
-              'cve':  'CVE-2018-0732',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '4.3',
-                  'v3vector': 'CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L'
-                }
-              },
-              'cwes': [
-                'CWE-320'
-              ],
-              'description':   'During key agreement in a TLS handshake using a DH(E) based ciphersuite a malicious server can send a very large prime value to the client. This will cause the client to spend an unreasonably long period of time generating a key for this prime resulting in a hang until the client has finished. This could be exploited in a Denial Of Service attack. Fixed in OpenSSL 1.1.0i-dev (Affected 1.1.0-1.1.0h). Fixed in OpenSSL 1.0.2p-dev (Affected 1.0.2-1.0.2o).',
-              'diffID':        'sha256:23f7bd114e4a0ea39a34e1bd50c2b71fb7d60f89139ca86ee746efb0bb49b4b8',
-              'fixedVersions': [
-                '1.0.2o-r1'
-              ],
-              'installedVersion': '1.0.2n-r0',
-              'packageName':      'libcrypto1.0',
-              'purl':             'pkg:apk/alpine/libcrypto1.0@1.0.2n-r0?arch=x86_64&distro=3.4.6',
-              'references':       [
-                'http://www.oracle.com/technetwork/security-advisory/cpuoct2018-4428296.html',
-                'http://www.securityfocus.com/bid/104442',
-                'http://www.securitytracker.com/id/1041090',
-                'https://access.redhat.com/errata/RHSA-2018:2552',
-                'https://access.redhat.com/errata/RHSA-2018:2553',
-                'https://access.redhat.com/errata/RHSA-2018:3221',
-                'https://access.redhat.com/errata/RHSA-2018:3505',
-                'https://access.redhat.com/errata/RHSA-2019:1296',
-                'https://access.redhat.com/errata/RHSA-2019:1297',
-                'https://access.redhat.com/errata/RHSA-2019:1543',
-                'https://access.redhat.com/security/cve/CVE-2018-0732',
-                'https://cert-portal.siemens.com/productcert/pdf/ssa-419820.pdf',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=3984ef0b72831da8b3ece4745cac4f8575b19098',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=ea7abeeabf92b7aca160bdd0208636d4da69f4f4',
-                'https://linux.oracle.com/cve/CVE-2018-0732.html',
-                'https://linux.oracle.com/errata/ELSA-2018-4249.html',
-                'https://lists.debian.org/debian-lts-announce/2018/07/msg00043.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/EWC42UXL5GHTU5G77VKBF6JYUUNGSHOM/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/Y3IVFGSERAZLNJCK35TEM2R4726XIH3Z/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZBEV5QGDRFUZDMNECFXUSN5FMYOZDE4V/',
-                'https://nodejs.org/en/blog/vulnerability/august-2018-security-releases/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2018-0732',
-                'https://security.gentoo.org/glsa/201811-03',
-                'https://security.netapp.com/advisory/ntap-20181105-0001/',
-                'https://security.netapp.com/advisory/ntap-20190118-0002/',
-                'https://securityadvisories.paloaltonetworks.com/Home/Detail/133',
-                'https://ubuntu.com/security/notices/USN-3692-1',
-                'https://ubuntu.com/security/notices/USN-3692-2',
-                'https://usn.ubuntu.com/3692-1/',
-                'https://usn.ubuntu.com/3692-2/',
-                'https://www.cve.org/CVERecord?id=CVE-2018-0732',
-                'https://www.debian.org/security/2018/dsa-4348',
-                'https://www.debian.org/security/2018/dsa-4355',
-                'https://www.openssl.org/news/secadv/20180612.txt',
-                'https://www.oracle.com/security-alerts/cpuapr2020.html',
-                'https://www.oracle.com/security-alerts/cpujan2021.html',
-                'https://www.oracle.com/technetwork/security-advisory/cpuapr2019-5072813.html',
-                'https://www.oracle.com/technetwork/security-advisory/cpujan2019-5072801.html',
-                'https://www.oracle.com/technetwork/security-advisory/cpujul2019-5072835.html',
-                'https://www.oracle.com/technetwork/security-advisory/cpuoct2019-5072832.html',
-                'https://www.tenable.com/security/tns-2018-12',
-                'https://www.tenable.com/security/tns-2018-13',
-                'https://www.tenable.com/security/tns-2018-14',
-                'https://www.tenable.com/security/tns-2018-17'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: Malicious server can send large prime to client during DH(E) TLS handshake causing the client to hang'
-            },
-            {
-              'cve':  'CVE-2018-0733',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N'
-                },
-                'redhat': {
-                  'v3score':  '4.8',
-                  'v3vector': 'CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N'
-                }
-              },
-              'description':   'Because of an implementation bug the PA-RISC CRYPTO_memcmp function is effectively reduced to only comparing the least significant bit of each byte. This allows an attacker to forge messages that would be considered as authenticated in an amount of tries lower than that guaranteed by the security claims of the scheme. The module can only be compiled by the HP-UX assembler, so that only HP-UX PA-RISC targets are affected. Fixed in OpenSSL 1.1.0h (Affected 1.1.0-1.1.0g).',
-              'diffID':        'sha256:23f7bd114e4a0ea39a34e1bd50c2b71fb7d60f89139ca86ee746efb0bb49b4b8',
-              'fixedVersions': [
-                '1.0.2o-r0'
-              ],
-              'installedVersion': '1.0.2n-r0',
-              'packageName':      'libcrypto1.0',
-              'purl':             'pkg:apk/alpine/libcrypto1.0@1.0.2n-r0?arch=x86_64&distro=3.4.6',
-              'references':       [
-                'http://www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.html',
-                'http://www.oracle.com/technetwork/security-advisory/cpuoct2018-4428296.html',
-                'http://www.securityfocus.com/bid/103517',
-                'http://www.securitytracker.com/id/1040576',
-                'https://access.redhat.com/security/cve/CVE-2018-0733',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=56d5a4bfcaf37fa420aef2bb881aa55e61cf5f2f',
-                'https://nvd.nist.gov/vuln/detail/CVE-2018-0733',
-                'https://security.gentoo.org/glsa/201811-21',
-                'https://security.netapp.com/advisory/ntap-20180330-0002/',
-                'https://www.cve.org/CVERecord?id=CVE-2018-0733',
-                'https://www.openssl.org/news/secadv/20180327.txt',
-                'https://www.oracle.com/technetwork/security-advisory/cpuapr2019-5072813.html',
-                'https://www.oracle.com/technetwork/security-advisory/cpujan2019-5072801.html',
-                'https://www.oracle.com/technetwork/security-advisory/cpujul2019-5072835.html',
-                'https://www.tenable.com/security/tns-2018-04',
-                'https://www.tenable.com/security/tns-2018-06',
-                'https://www.tenable.com/security/tns-2018-07'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: Implementation bug in PA-RISC CRYPTO_memcmp function allows attackers to forge authenticated messages in a reduced number of attempts'
-            },
-            {
-              'cve':  'CVE-2018-0734',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N'
-                },
-                'redhat': {
-                  'v3score':  '5.1',
-                  'v3vector': 'CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-327'
-              ],
-              'description':   'The OpenSSL DSA signature algorithm has been shown to be vulnerable to a timing side channel attack. An attacker could use variations in the signing algorithm to recover the private key. Fixed in OpenSSL 1.1.1a (Affected 1.1.1). Fixed in OpenSSL 1.1.0j (Affected 1.1.0-1.1.0i). Fixed in OpenSSL 1.0.2q (Affected 1.0.2-1.0.2p).',
-              'diffID':        'sha256:23f7bd114e4a0ea39a34e1bd50c2b71fb7d60f89139ca86ee746efb0bb49b4b8',
-              'fixedVersions': [
-                '1.0.2q-r0'
-              ],
-              'installedVersion': '1.0.2n-r0',
-              'packageName':      'libcrypto1.0',
-              'purl':             'pkg:apk/alpine/libcrypto1.0@1.0.2n-r0?arch=x86_64&distro=3.4.6',
-              'references':       [
-                'http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00030.html',
-                'http://lists.opensuse.org/opensuse-security-announce/2019-07/msg00056.html',
-                'http://www.securityfocus.com/bid/105758',
-                'https://access.redhat.com/errata/RHSA-2019:2304',
-                'https://access.redhat.com/errata/RHSA-2019:3700',
-                'https://access.redhat.com/errata/RHSA-2019:3932',
-                'https://access.redhat.com/errata/RHSA-2019:3933',
-                'https://access.redhat.com/errata/RHSA-2019:3935',
-                'https://access.redhat.com/security/cve/CVE-2018-0734',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=43e6a58d4991a451daf4891ff05a48735df871ac',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=8abfe72e8c1de1b95f50aa0d9134803b4d00070f',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=ef11e19d1365eea2b1851e6f540a0bf365d303e7',
-                'https://linux.oracle.com/cve/CVE-2018-0734.html',
-                'https://linux.oracle.com/errata/ELSA-2019-3700.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/EWC42UXL5GHTU5G77VKBF6JYUUNGSHOM/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/Y3IVFGSERAZLNJCK35TEM2R4726XIH3Z/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZBEV5QGDRFUZDMNECFXUSN5FMYOZDE4V/',
-                'https://nodejs.org/en/blog/vulnerability/november-2018-security-releases/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2018-0734',
-                'https://security.netapp.com/advisory/ntap-20181105-0002/',
-                'https://security.netapp.com/advisory/ntap-20190118-0002/',
-                'https://security.netapp.com/advisory/ntap-20190423-0002/',
-                'https://ubuntu.com/security/notices/USN-3840-1',
-                'https://usn.ubuntu.com/3840-1/',
-                'https://www.cve.org/CVERecord?id=CVE-2018-0734',
-                'https://www.debian.org/security/2018/dsa-4348',
-                'https://www.debian.org/security/2018/dsa-4355',
-                'https://www.openssl.org/news/secadv/20181030.txt',
-                'https://www.oracle.com/security-alerts/cpuapr2020.html',
-                'https://www.oracle.com/security-alerts/cpujan2020.html',
-                'https://www.oracle.com/technetwork/security-advisory/cpuapr2019-5072813.html',
-                'https://www.oracle.com/technetwork/security-advisory/cpujan2019-5072801.html',
-                'https://www.oracle.com/technetwork/security-advisory/cpujul2019-5072835.html',
-                'https://www.tenable.com/security/tns-2018-16',
-                'https://www.tenable.com/security/tns-2018-17'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: timing side channel attack in the DSA signature algorithm'
-            },
-            {
-              'cve':  'CVE-2018-0737',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N'
-                },
-                'redhat': {
-                  'v3score':  '3.3',
-                  'v3vector': 'CVSS:3.0/AV:L/AC:H/PR:L/UI:R/S:U/C:L/I:L/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-327'
-              ],
-              'description':   'The OpenSSL RSA Key generation algorithm has been shown to be vulnerable to a cache timing side channel attack. An attacker with sufficient access to mount cache timing attacks during the RSA key generation process could recover the private key. Fixed in OpenSSL 1.1.0i-dev (Affected 1.1.0-1.1.0h). Fixed in OpenSSL 1.0.2p-dev (Affected 1.0.2b-1.0.2o).',
-              'diffID':        'sha256:23f7bd114e4a0ea39a34e1bd50c2b71fb7d60f89139ca86ee746efb0bb49b4b8',
-              'fixedVersions': [
-                '1.0.2o-r2'
-              ],
-              'installedVersion': '1.0.2n-r0',
-              'packageName':      'libcrypto1.0',
-              'purl':             'pkg:apk/alpine/libcrypto1.0@1.0.2n-r0?arch=x86_64&distro=3.4.6',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2018/04/16/3',
-                'http://www.oracle.com/technetwork/security-advisory/cpuoct2018-4428296.html',
-                'http://www.securityfocus.com/bid/103766',
-                'http://www.securitytracker.com/id/1040685',
-                'https://access.redhat.com/errata/RHSA-2018:3221',
-                'https://access.redhat.com/errata/RHSA-2018:3505',
-                'https://access.redhat.com/errata/RHSA-2019:3932',
-                'https://access.redhat.com/errata/RHSA-2019:3933',
-                'https://access.redhat.com/errata/RHSA-2019:3935',
-                'https://access.redhat.com/security/cve/CVE-2018-0737',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=349a41da1ad88ad87825414752a8ff5fdd6a6c3f',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=6939eab03a6e23d2bd2c3f5e34fe1d48e542e787',
-                'https://linux.oracle.com/cve/CVE-2018-0737.html',
-                'https://linux.oracle.com/errata/ELSA-2018-4249.html',
-                'https://lists.debian.org/debian-lts-announce/2018/07/msg00043.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/EWC42UXL5GHTU5G77VKBF6JYUUNGSHOM/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/Y3IVFGSERAZLNJCK35TEM2R4726XIH3Z/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZBEV5QGDRFUZDMNECFXUSN5FMYOZDE4V/',
-                'https://nodejs.org/en/blog/vulnerability/august-2018-security-releases/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2018-0737',
-                'https://security.gentoo.org/glsa/201811-21',
-                'https://security.netapp.com/advisory/ntap-20180726-0003/',
-                'https://securityadvisories.paloaltonetworks.com/Home/Detail/133',
-                'https://ubuntu.com/security/notices/USN-3628-1',
-                'https://ubuntu.com/security/notices/USN-3628-2',
-                'https://ubuntu.com/security/notices/USN-3692-1',
-                'https://ubuntu.com/security/notices/USN-3692-2',
-                'https://usn.ubuntu.com/3628-1/',
-                'https://usn.ubuntu.com/3628-2/',
-                'https://usn.ubuntu.com/3692-1/',
-                'https://usn.ubuntu.com/3692-2/',
-                'https://www.cve.org/CVERecord?id=CVE-2018-0737',
-                'https://www.debian.org/security/2018/dsa-4348',
-                'https://www.debian.org/security/2018/dsa-4355',
-                'https://www.openssl.org/news/secadv/20180416.txt',
-                'https://www.oracle.com//security-alerts/cpujul2021.html',
-                'https://www.oracle.com/security-alerts/cpuapr2020.html',
-                'https://www.oracle.com/technetwork/security-advisory/cpuapr2019-5072813.html',
-                'https://www.oracle.com/technetwork/security-advisory/cpujan2019-5072801.html',
-                'https://www.oracle.com/technetwork/security-advisory/cpujul2019-5072835.html',
-                'https://www.tenable.com/security/tns-2018-12',
-                'https://www.tenable.com/security/tns-2018-13',
-                'https://www.tenable.com/security/tns-2018-14',
-                'https://www.tenable.com/security/tns-2018-17'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: RSA key generation cache timing vulnerability in crypto/rsa/rsa_gen.c allows attackers to recover private keys'
-            },
-            {
-              'cve':  'CVE-2018-0739',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '6.5',
-                  'v3vector': 'CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.5',
-                  'v3vector': 'CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-674'
-              ],
-              'description':   'Constructed ASN.1 types with a recursive definition (such as can be found in PKCS7) could eventually exceed the stack given malicious input with excessive recursion. This could result in a Denial Of Service attack. There are no such structures used within SSL/TLS that come from untrusted sources so this is considered safe. Fixed in OpenSSL 1.1.0h (Affected 1.1.0-1.1.0g). Fixed in OpenSSL 1.0.2o (Affected 1.0.2b-1.0.2n).',
-              'diffID':        'sha256:23f7bd114e4a0ea39a34e1bd50c2b71fb7d60f89139ca86ee746efb0bb49b4b8',
-              'fixedVersions': [
-                '1.0.2o-r0'
-              ],
-              'installedVersion': '1.0.2n-r0',
-              'packageName':      'libcrypto1.0',
-              'purl':             'pkg:apk/alpine/libcrypto1.0@1.0.2n-r0?arch=x86_64&distro=3.4.6',
-              'references':       [
-                'http://www.oracle.com/technetwork/security-advisory/cpuapr2018-3678067.html',
-                'http://www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.html',
-                'http://www.oracle.com/technetwork/security-advisory/cpuoct2018-4428296.html',
-                'http://www.securityfocus.com/bid/103518',
-                'http://www.securityfocus.com/bid/105609',
-                'http://www.securitytracker.com/id/1040576',
-                'https://access.redhat.com/errata/RHSA-2018:3090',
-                'https://access.redhat.com/errata/RHSA-2018:3221',
-                'https://access.redhat.com/errata/RHSA-2018:3505',
-                'https://access.redhat.com/errata/RHSA-2019:0366',
-                'https://access.redhat.com/errata/RHSA-2019:0367',
-                'https://access.redhat.com/errata/RHSA-2019:1711',
-                'https://access.redhat.com/errata/RHSA-2019:1712',
-                'https://access.redhat.com/security/cve/CVE-2018-0739',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=2ac4c6f7b2b2af20c0e2b0ba05367e454cd11b33',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=9310d45087ae546e27e61ddf8f6367f29848220d',
-                'https://linux.oracle.com/cve/CVE-2018-0739.html',
-                'https://linux.oracle.com/errata/ELSA-2018-4228.html',
-                'https://lists.debian.org/debian-lts-announce/2018/03/msg00033.html',
-                'https://nodejs.org/en/blog/vulnerability/march-2018-security-releases/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2018-0739',
-                'https://security.gentoo.org/glsa/201811-21',
-                'https://security.gentoo.org/glsa/202007-53',
-                'https://security.netapp.com/advisory/ntap-20180330-0002/',
-                'https://security.netapp.com/advisory/ntap-20180726-0002/',
-                'https://securityadvisories.paloaltonetworks.com/Home/Detail/133',
-                'https://ubuntu.com/security/notices/USN-3611-1',
-                'https://ubuntu.com/security/notices/USN-3611-2',
-                'https://usn.ubuntu.com/3611-1/',
-                'https://usn.ubuntu.com/3611-2/',
-                'https://www.cve.org/CVERecord?id=CVE-2018-0739',
-                'https://www.debian.org/security/2018/dsa-4157',
-                'https://www.debian.org/security/2018/dsa-4158',
-                'https://www.openssl.org/news/secadv/20180327.txt',
-                'https://www.oracle.com//security-alerts/cpujul2021.html',
-                'https://www.oracle.com/technetwork/security-advisory/cpuapr2019-5072813.html',
-                'https://www.oracle.com/technetwork/security-advisory/cpujan2019-5072801.html',
-                'https://www.oracle.com/technetwork/security-advisory/cpujul2019-5072835.html',
-                'https://www.tenable.com/security/tns-2018-04',
-                'https://www.tenable.com/security/tns-2018-06',
-                'https://www.tenable.com/security/tns-2018-07'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: Handling of crafted recursive ASN.1 structures can cause a stack overflow and resulting denial of service'
-            },
-            {
-              'cve':  'CVE-2018-5407',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '4.7',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N'
-                },
-                'redhat': {
-                  'v3score':  '4.8',
-                  'v3vector': 'CVSS:3.0/AV:P/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-200',
-                'CWE-203'
-              ],
-              'description':   "Simultaneous Multi-threading (SMT) in processors can enable local users to exploit software vulnerable to timing attacks via a side-channel timing attack on 'port contention'.",
-              'diffID':        'sha256:23f7bd114e4a0ea39a34e1bd50c2b71fb7d60f89139ca86ee746efb0bb49b4b8',
-              'fixedVersions': [
-                '1.0.2q-r0'
-              ],
-              'installedVersion': '1.0.2n-r0',
-              'packageName':      'libcrypto1.0',
-              'purl':             'pkg:apk/alpine/libcrypto1.0@1.0.2n-r0?arch=x86_64&distro=3.4.6',
-              'references':       [
-                'http://www.securityfocus.com/bid/105897',
-                'https://access.redhat.com/errata/RHSA-2019:0483',
-                'https://access.redhat.com/errata/RHSA-2019:0651',
-                'https://access.redhat.com/errata/RHSA-2019:0652',
-                'https://access.redhat.com/errata/RHSA-2019:2125',
-                'https://access.redhat.com/errata/RHSA-2019:3929',
-                'https://access.redhat.com/errata/RHSA-2019:3931',
-                'https://access.redhat.com/errata/RHSA-2019:3932',
-                'https://access.redhat.com/errata/RHSA-2019:3933',
-                'https://access.redhat.com/errata/RHSA-2019:3935',
-                'https://access.redhat.com/security/cve/CVE-2018-5407',
-                'https://eprint.iacr.org/2018/1060.pdf',
-                'https://github.com/bbbrumley/portsmash',
-                'https://linux.oracle.com/cve/CVE-2018-5407.html',
-                'https://linux.oracle.com/errata/ELSA-2019-2125.html',
-                'https://lists.debian.org/debian-lts-announce/2018/11/msg00024.html',
-                'https://nodejs.org/en/blog/vulnerability/november-2018-security-releases/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2018-5407',
-                'https://security.gentoo.org/glsa/201903-10',
-                'https://security.netapp.com/advisory/ntap-20181126-0001/',
-                'https://support.f5.com/csp/article/K49711130?utm_source=f5support&amp%3Butm_medium=RSS',
-                'https://ubuntu.com/security/notices/USN-3840-1',
-                'https://usn.ubuntu.com/3840-1/',
-                'https://www.cve.org/CVERecord?id=CVE-2018-5407',
-                'https://www.debian.org/security/2018/dsa-4348',
-                'https://www.debian.org/security/2018/dsa-4355',
-                'https://www.exploit-db.com/exploits/45785/',
-                'https://www.openssl.org/news/secadv/20181112.txt',
-                'https://www.openwall.com/lists/oss-security/2018/11/01/4',
-                'https://www.oracle.com/security-alerts/cpuapr2020.html',
-                'https://www.oracle.com/security-alerts/cpujan2020.html',
-                'https://www.oracle.com/technetwork/security-advisory/cpuapr2019-5072813.html',
-                'https://www.oracle.com/technetwork/security-advisory/cpujan2019-5072801.html',
-                'https://www.oracle.com/technetwork/security-advisory/cpujul2019-5072835.html',
-                'https://www.tenable.com/security/tns-2018-16',
-                'https://www.tenable.com/security/tns-2018-17'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: Side-channel vulnerability on SMT/Hyper-Threading architectures (PortSmash)'
-            },
-            {
-              'cve':  'CVE-2018-0732',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '4.3',
-                  'v3vector': 'CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L'
-                }
-              },
-              'cwes': [
-                'CWE-320'
-              ],
-              'description':   'During key agreement in a TLS handshake using a DH(E) based ciphersuite a malicious server can send a very large prime value to the client. This will cause the client to spend an unreasonably long period of time generating a key for this prime resulting in a hang until the client has finished. This could be exploited in a Denial Of Service attack. Fixed in OpenSSL 1.1.0i-dev (Affected 1.1.0-1.1.0h). Fixed in OpenSSL 1.0.2p-dev (Affected 1.0.2-1.0.2o).',
-              'diffID':        'sha256:23f7bd114e4a0ea39a34e1bd50c2b71fb7d60f89139ca86ee746efb0bb49b4b8',
-              'fixedVersions': [
-                '1.0.2o-r1'
-              ],
-              'installedVersion': '1.0.2n-r0',
-              'packageName':      'libssl1.0',
-              'purl':             'pkg:apk/alpine/libssl1.0@1.0.2n-r0?arch=x86_64&distro=3.4.6',
-              'references':       [
-                'http://www.oracle.com/technetwork/security-advisory/cpuoct2018-4428296.html',
-                'http://www.securityfocus.com/bid/104442',
-                'http://www.securitytracker.com/id/1041090',
-                'https://access.redhat.com/errata/RHSA-2018:2552',
-                'https://access.redhat.com/errata/RHSA-2018:2553',
-                'https://access.redhat.com/errata/RHSA-2018:3221',
-                'https://access.redhat.com/errata/RHSA-2018:3505',
-                'https://access.redhat.com/errata/RHSA-2019:1296',
-                'https://access.redhat.com/errata/RHSA-2019:1297',
-                'https://access.redhat.com/errata/RHSA-2019:1543',
-                'https://access.redhat.com/security/cve/CVE-2018-0732',
-                'https://cert-portal.siemens.com/productcert/pdf/ssa-419820.pdf',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=3984ef0b72831da8b3ece4745cac4f8575b19098',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=ea7abeeabf92b7aca160bdd0208636d4da69f4f4',
-                'https://linux.oracle.com/cve/CVE-2018-0732.html',
-                'https://linux.oracle.com/errata/ELSA-2018-4249.html',
-                'https://lists.debian.org/debian-lts-announce/2018/07/msg00043.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/EWC42UXL5GHTU5G77VKBF6JYUUNGSHOM/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/Y3IVFGSERAZLNJCK35TEM2R4726XIH3Z/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZBEV5QGDRFUZDMNECFXUSN5FMYOZDE4V/',
-                'https://nodejs.org/en/blog/vulnerability/august-2018-security-releases/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2018-0732',
-                'https://security.gentoo.org/glsa/201811-03',
-                'https://security.netapp.com/advisory/ntap-20181105-0001/',
-                'https://security.netapp.com/advisory/ntap-20190118-0002/',
-                'https://securityadvisories.paloaltonetworks.com/Home/Detail/133',
-                'https://ubuntu.com/security/notices/USN-3692-1',
-                'https://ubuntu.com/security/notices/USN-3692-2',
-                'https://usn.ubuntu.com/3692-1/',
-                'https://usn.ubuntu.com/3692-2/',
-                'https://www.cve.org/CVERecord?id=CVE-2018-0732',
-                'https://www.debian.org/security/2018/dsa-4348',
-                'https://www.debian.org/security/2018/dsa-4355',
-                'https://www.openssl.org/news/secadv/20180612.txt',
-                'https://www.oracle.com/security-alerts/cpuapr2020.html',
-                'https://www.oracle.com/security-alerts/cpujan2021.html',
-                'https://www.oracle.com/technetwork/security-advisory/cpuapr2019-5072813.html',
-                'https://www.oracle.com/technetwork/security-advisory/cpujan2019-5072801.html',
-                'https://www.oracle.com/technetwork/security-advisory/cpujul2019-5072835.html',
-                'https://www.oracle.com/technetwork/security-advisory/cpuoct2019-5072832.html',
-                'https://www.tenable.com/security/tns-2018-12',
-                'https://www.tenable.com/security/tns-2018-13',
-                'https://www.tenable.com/security/tns-2018-14',
-                'https://www.tenable.com/security/tns-2018-17'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: Malicious server can send large prime to client during DH(E) TLS handshake causing the client to hang'
-            },
-            {
-              'cve':  'CVE-2018-0733',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N'
-                },
-                'redhat': {
-                  'v3score':  '4.8',
-                  'v3vector': 'CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N'
-                }
-              },
-              'description':   'Because of an implementation bug the PA-RISC CRYPTO_memcmp function is effectively reduced to only comparing the least significant bit of each byte. This allows an attacker to forge messages that would be considered as authenticated in an amount of tries lower than that guaranteed by the security claims of the scheme. The module can only be compiled by the HP-UX assembler, so that only HP-UX PA-RISC targets are affected. Fixed in OpenSSL 1.1.0h (Affected 1.1.0-1.1.0g).',
-              'diffID':        'sha256:23f7bd114e4a0ea39a34e1bd50c2b71fb7d60f89139ca86ee746efb0bb49b4b8',
-              'fixedVersions': [
-                '1.0.2o-r0'
-              ],
-              'installedVersion': '1.0.2n-r0',
-              'packageName':      'libssl1.0',
-              'purl':             'pkg:apk/alpine/libssl1.0@1.0.2n-r0?arch=x86_64&distro=3.4.6',
-              'references':       [
-                'http://www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.html',
-                'http://www.oracle.com/technetwork/security-advisory/cpuoct2018-4428296.html',
-                'http://www.securityfocus.com/bid/103517',
-                'http://www.securitytracker.com/id/1040576',
-                'https://access.redhat.com/security/cve/CVE-2018-0733',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=56d5a4bfcaf37fa420aef2bb881aa55e61cf5f2f',
-                'https://nvd.nist.gov/vuln/detail/CVE-2018-0733',
-                'https://security.gentoo.org/glsa/201811-21',
-                'https://security.netapp.com/advisory/ntap-20180330-0002/',
-                'https://www.cve.org/CVERecord?id=CVE-2018-0733',
-                'https://www.openssl.org/news/secadv/20180327.txt',
-                'https://www.oracle.com/technetwork/security-advisory/cpuapr2019-5072813.html',
-                'https://www.oracle.com/technetwork/security-advisory/cpujan2019-5072801.html',
-                'https://www.oracle.com/technetwork/security-advisory/cpujul2019-5072835.html',
-                'https://www.tenable.com/security/tns-2018-04',
-                'https://www.tenable.com/security/tns-2018-06',
-                'https://www.tenable.com/security/tns-2018-07'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: Implementation bug in PA-RISC CRYPTO_memcmp function allows attackers to forge authenticated messages in a reduced number of attempts'
-            },
-            {
-              'cve':  'CVE-2018-0734',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N'
-                },
-                'redhat': {
-                  'v3score':  '5.1',
-                  'v3vector': 'CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-327'
-              ],
-              'description':   'The OpenSSL DSA signature algorithm has been shown to be vulnerable to a timing side channel attack. An attacker could use variations in the signing algorithm to recover the private key. Fixed in OpenSSL 1.1.1a (Affected 1.1.1). Fixed in OpenSSL 1.1.0j (Affected 1.1.0-1.1.0i). Fixed in OpenSSL 1.0.2q (Affected 1.0.2-1.0.2p).',
-              'diffID':        'sha256:23f7bd114e4a0ea39a34e1bd50c2b71fb7d60f89139ca86ee746efb0bb49b4b8',
-              'fixedVersions': [
-                '1.0.2q-r0'
-              ],
-              'installedVersion': '1.0.2n-r0',
-              'packageName':      'libssl1.0',
-              'purl':             'pkg:apk/alpine/libssl1.0@1.0.2n-r0?arch=x86_64&distro=3.4.6',
-              'references':       [
-                'http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00030.html',
-                'http://lists.opensuse.org/opensuse-security-announce/2019-07/msg00056.html',
-                'http://www.securityfocus.com/bid/105758',
-                'https://access.redhat.com/errata/RHSA-2019:2304',
-                'https://access.redhat.com/errata/RHSA-2019:3700',
-                'https://access.redhat.com/errata/RHSA-2019:3932',
-                'https://access.redhat.com/errata/RHSA-2019:3933',
-                'https://access.redhat.com/errata/RHSA-2019:3935',
-                'https://access.redhat.com/security/cve/CVE-2018-0734',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=43e6a58d4991a451daf4891ff05a48735df871ac',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=8abfe72e8c1de1b95f50aa0d9134803b4d00070f',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=ef11e19d1365eea2b1851e6f540a0bf365d303e7',
-                'https://linux.oracle.com/cve/CVE-2018-0734.html',
-                'https://linux.oracle.com/errata/ELSA-2019-3700.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/EWC42UXL5GHTU5G77VKBF6JYUUNGSHOM/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/Y3IVFGSERAZLNJCK35TEM2R4726XIH3Z/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZBEV5QGDRFUZDMNECFXUSN5FMYOZDE4V/',
-                'https://nodejs.org/en/blog/vulnerability/november-2018-security-releases/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2018-0734',
-                'https://security.netapp.com/advisory/ntap-20181105-0002/',
-                'https://security.netapp.com/advisory/ntap-20190118-0002/',
-                'https://security.netapp.com/advisory/ntap-20190423-0002/',
-                'https://ubuntu.com/security/notices/USN-3840-1',
-                'https://usn.ubuntu.com/3840-1/',
-                'https://www.cve.org/CVERecord?id=CVE-2018-0734',
-                'https://www.debian.org/security/2018/dsa-4348',
-                'https://www.debian.org/security/2018/dsa-4355',
-                'https://www.openssl.org/news/secadv/20181030.txt',
-                'https://www.oracle.com/security-alerts/cpuapr2020.html',
-                'https://www.oracle.com/security-alerts/cpujan2020.html',
-                'https://www.oracle.com/technetwork/security-advisory/cpuapr2019-5072813.html',
-                'https://www.oracle.com/technetwork/security-advisory/cpujan2019-5072801.html',
-                'https://www.oracle.com/technetwork/security-advisory/cpujul2019-5072835.html',
-                'https://www.tenable.com/security/tns-2018-16',
-                'https://www.tenable.com/security/tns-2018-17'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: timing side channel attack in the DSA signature algorithm'
-            },
-            {
-              'cve':  'CVE-2018-0737',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N'
-                },
-                'redhat': {
-                  'v3score':  '3.3',
-                  'v3vector': 'CVSS:3.0/AV:L/AC:H/PR:L/UI:R/S:U/C:L/I:L/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-327'
-              ],
-              'description':   'The OpenSSL RSA Key generation algorithm has been shown to be vulnerable to a cache timing side channel attack. An attacker with sufficient access to mount cache timing attacks during the RSA key generation process could recover the private key. Fixed in OpenSSL 1.1.0i-dev (Affected 1.1.0-1.1.0h). Fixed in OpenSSL 1.0.2p-dev (Affected 1.0.2b-1.0.2o).',
-              'diffID':        'sha256:23f7bd114e4a0ea39a34e1bd50c2b71fb7d60f89139ca86ee746efb0bb49b4b8',
-              'fixedVersions': [
-                '1.0.2o-r2'
-              ],
-              'installedVersion': '1.0.2n-r0',
-              'packageName':      'libssl1.0',
-              'purl':             'pkg:apk/alpine/libssl1.0@1.0.2n-r0?arch=x86_64&distro=3.4.6',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2018/04/16/3',
-                'http://www.oracle.com/technetwork/security-advisory/cpuoct2018-4428296.html',
-                'http://www.securityfocus.com/bid/103766',
-                'http://www.securitytracker.com/id/1040685',
-                'https://access.redhat.com/errata/RHSA-2018:3221',
-                'https://access.redhat.com/errata/RHSA-2018:3505',
-                'https://access.redhat.com/errata/RHSA-2019:3932',
-                'https://access.redhat.com/errata/RHSA-2019:3933',
-                'https://access.redhat.com/errata/RHSA-2019:3935',
-                'https://access.redhat.com/security/cve/CVE-2018-0737',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=349a41da1ad88ad87825414752a8ff5fdd6a6c3f',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=6939eab03a6e23d2bd2c3f5e34fe1d48e542e787',
-                'https://linux.oracle.com/cve/CVE-2018-0737.html',
-                'https://linux.oracle.com/errata/ELSA-2018-4249.html',
-                'https://lists.debian.org/debian-lts-announce/2018/07/msg00043.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/EWC42UXL5GHTU5G77VKBF6JYUUNGSHOM/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/Y3IVFGSERAZLNJCK35TEM2R4726XIH3Z/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZBEV5QGDRFUZDMNECFXUSN5FMYOZDE4V/',
-                'https://nodejs.org/en/blog/vulnerability/august-2018-security-releases/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2018-0737',
-                'https://security.gentoo.org/glsa/201811-21',
-                'https://security.netapp.com/advisory/ntap-20180726-0003/',
-                'https://securityadvisories.paloaltonetworks.com/Home/Detail/133',
-                'https://ubuntu.com/security/notices/USN-3628-1',
-                'https://ubuntu.com/security/notices/USN-3628-2',
-                'https://ubuntu.com/security/notices/USN-3692-1',
-                'https://ubuntu.com/security/notices/USN-3692-2',
-                'https://usn.ubuntu.com/3628-1/',
-                'https://usn.ubuntu.com/3628-2/',
-                'https://usn.ubuntu.com/3692-1/',
-                'https://usn.ubuntu.com/3692-2/',
-                'https://www.cve.org/CVERecord?id=CVE-2018-0737',
-                'https://www.debian.org/security/2018/dsa-4348',
-                'https://www.debian.org/security/2018/dsa-4355',
-                'https://www.openssl.org/news/secadv/20180416.txt',
-                'https://www.oracle.com//security-alerts/cpujul2021.html',
-                'https://www.oracle.com/security-alerts/cpuapr2020.html',
-                'https://www.oracle.com/technetwork/security-advisory/cpuapr2019-5072813.html',
-                'https://www.oracle.com/technetwork/security-advisory/cpujan2019-5072801.html',
-                'https://www.oracle.com/technetwork/security-advisory/cpujul2019-5072835.html',
-                'https://www.tenable.com/security/tns-2018-12',
-                'https://www.tenable.com/security/tns-2018-13',
-                'https://www.tenable.com/security/tns-2018-14',
-                'https://www.tenable.com/security/tns-2018-17'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: RSA key generation cache timing vulnerability in crypto/rsa/rsa_gen.c allows attackers to recover private keys'
-            },
-            {
-              'cve':  'CVE-2018-0739',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '6.5',
-                  'v3vector': 'CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.5',
-                  'v3vector': 'CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-674'
-              ],
-              'description':   'Constructed ASN.1 types with a recursive definition (such as can be found in PKCS7) could eventually exceed the stack given malicious input with excessive recursion. This could result in a Denial Of Service attack. There are no such structures used within SSL/TLS that come from untrusted sources so this is considered safe. Fixed in OpenSSL 1.1.0h (Affected 1.1.0-1.1.0g). Fixed in OpenSSL 1.0.2o (Affected 1.0.2b-1.0.2n).',
-              'diffID':        'sha256:23f7bd114e4a0ea39a34e1bd50c2b71fb7d60f89139ca86ee746efb0bb49b4b8',
-              'fixedVersions': [
-                '1.0.2o-r0'
-              ],
-              'installedVersion': '1.0.2n-r0',
-              'packageName':      'libssl1.0',
-              'purl':             'pkg:apk/alpine/libssl1.0@1.0.2n-r0?arch=x86_64&distro=3.4.6',
-              'references':       [
-                'http://www.oracle.com/technetwork/security-advisory/cpuapr2018-3678067.html',
-                'http://www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.html',
-                'http://www.oracle.com/technetwork/security-advisory/cpuoct2018-4428296.html',
-                'http://www.securityfocus.com/bid/103518',
-                'http://www.securityfocus.com/bid/105609',
-                'http://www.securitytracker.com/id/1040576',
-                'https://access.redhat.com/errata/RHSA-2018:3090',
-                'https://access.redhat.com/errata/RHSA-2018:3221',
-                'https://access.redhat.com/errata/RHSA-2018:3505',
-                'https://access.redhat.com/errata/RHSA-2019:0366',
-                'https://access.redhat.com/errata/RHSA-2019:0367',
-                'https://access.redhat.com/errata/RHSA-2019:1711',
-                'https://access.redhat.com/errata/RHSA-2019:1712',
-                'https://access.redhat.com/security/cve/CVE-2018-0739',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=2ac4c6f7b2b2af20c0e2b0ba05367e454cd11b33',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=9310d45087ae546e27e61ddf8f6367f29848220d',
-                'https://linux.oracle.com/cve/CVE-2018-0739.html',
-                'https://linux.oracle.com/errata/ELSA-2018-4228.html',
-                'https://lists.debian.org/debian-lts-announce/2018/03/msg00033.html',
-                'https://nodejs.org/en/blog/vulnerability/march-2018-security-releases/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2018-0739',
-                'https://security.gentoo.org/glsa/201811-21',
-                'https://security.gentoo.org/glsa/202007-53',
-                'https://security.netapp.com/advisory/ntap-20180330-0002/',
-                'https://security.netapp.com/advisory/ntap-20180726-0002/',
-                'https://securityadvisories.paloaltonetworks.com/Home/Detail/133',
-                'https://ubuntu.com/security/notices/USN-3611-1',
-                'https://ubuntu.com/security/notices/USN-3611-2',
-                'https://usn.ubuntu.com/3611-1/',
-                'https://usn.ubuntu.com/3611-2/',
-                'https://www.cve.org/CVERecord?id=CVE-2018-0739',
-                'https://www.debian.org/security/2018/dsa-4157',
-                'https://www.debian.org/security/2018/dsa-4158',
-                'https://www.openssl.org/news/secadv/20180327.txt',
-                'https://www.oracle.com//security-alerts/cpujul2021.html',
-                'https://www.oracle.com/technetwork/security-advisory/cpuapr2019-5072813.html',
-                'https://www.oracle.com/technetwork/security-advisory/cpujan2019-5072801.html',
-                'https://www.oracle.com/technetwork/security-advisory/cpujul2019-5072835.html',
-                'https://www.tenable.com/security/tns-2018-04',
-                'https://www.tenable.com/security/tns-2018-06',
-                'https://www.tenable.com/security/tns-2018-07'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: Handling of crafted recursive ASN.1 structures can cause a stack overflow and resulting denial of service'
-            },
-            {
-              'cve':  'CVE-2018-5407',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '4.7',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N'
-                },
-                'redhat': {
-                  'v3score':  '4.8',
-                  'v3vector': 'CVSS:3.0/AV:P/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-200',
-                'CWE-203'
-              ],
-              'description':   "Simultaneous Multi-threading (SMT) in processors can enable local users to exploit software vulnerable to timing attacks via a side-channel timing attack on 'port contention'.",
-              'diffID':        'sha256:23f7bd114e4a0ea39a34e1bd50c2b71fb7d60f89139ca86ee746efb0bb49b4b8',
-              'fixedVersions': [
-                '1.0.2q-r0'
-              ],
-              'installedVersion': '1.0.2n-r0',
-              'packageName':      'libssl1.0',
-              'purl':             'pkg:apk/alpine/libssl1.0@1.0.2n-r0?arch=x86_64&distro=3.4.6',
-              'references':       [
-                'http://www.securityfocus.com/bid/105897',
-                'https://access.redhat.com/errata/RHSA-2019:0483',
-                'https://access.redhat.com/errata/RHSA-2019:0651',
-                'https://access.redhat.com/errata/RHSA-2019:0652',
-                'https://access.redhat.com/errata/RHSA-2019:2125',
-                'https://access.redhat.com/errata/RHSA-2019:3929',
-                'https://access.redhat.com/errata/RHSA-2019:3931',
-                'https://access.redhat.com/errata/RHSA-2019:3932',
-                'https://access.redhat.com/errata/RHSA-2019:3933',
-                'https://access.redhat.com/errata/RHSA-2019:3935',
-                'https://access.redhat.com/security/cve/CVE-2018-5407',
-                'https://eprint.iacr.org/2018/1060.pdf',
-                'https://github.com/bbbrumley/portsmash',
-                'https://linux.oracle.com/cve/CVE-2018-5407.html',
-                'https://linux.oracle.com/errata/ELSA-2019-2125.html',
-                'https://lists.debian.org/debian-lts-announce/2018/11/msg00024.html',
-                'https://nodejs.org/en/blog/vulnerability/november-2018-security-releases/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2018-5407',
-                'https://security.gentoo.org/glsa/201903-10',
-                'https://security.netapp.com/advisory/ntap-20181126-0001/',
-                'https://support.f5.com/csp/article/K49711130?utm_source=f5support&amp%3Butm_medium=RSS',
-                'https://ubuntu.com/security/notices/USN-3840-1',
-                'https://usn.ubuntu.com/3840-1/',
-                'https://www.cve.org/CVERecord?id=CVE-2018-5407',
-                'https://www.debian.org/security/2018/dsa-4348',
-                'https://www.debian.org/security/2018/dsa-4355',
-                'https://www.exploit-db.com/exploits/45785/',
-                'https://www.openssl.org/news/secadv/20181112.txt',
-                'https://www.openwall.com/lists/oss-security/2018/11/01/4',
-                'https://www.oracle.com/security-alerts/cpuapr2020.html',
-                'https://www.oracle.com/security-alerts/cpujan2020.html',
-                'https://www.oracle.com/technetwork/security-advisory/cpuapr2019-5072813.html',
-                'https://www.oracle.com/technetwork/security-advisory/cpujan2019-5072801.html',
-                'https://www.oracle.com/technetwork/security-advisory/cpujul2019-5072835.html',
-                'https://www.tenable.com/security/tns-2018-16',
-                'https://www.tenable.com/security/tns-2018-17'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: Side-channel vulnerability on SMT/Hyper-Threading architectures (PortSmash)'
-            }
-          ]
-        }
-      ],
-      'summary': {
-        'critical':   0,
-        'high':       2,
-        'low':        0,
-        'medium':     10,
-        'suppressed': 0,
-        'unknown':    0
-      }
-    }
-  },
-  {
-    'id':    'default/d127fcd6e13e6f89db254cbf77930216f8925380218ea4425e4d570ee8496a9f',
-    'type':  'storage.sbomscanner.kubewarden.io.vulnerabilityreport',
-    'links': {
-      'patch':  'https://localhost:8005/v1/storage.sbomscanner.kubewarden.io.vulnerabilityreports/default/d127fcd6e13e6f89db254cbf77930216f8925380218ea4425e4d570ee8496a9f',
-      'remove': 'https://localhost:8005/v1/storage.sbomscanner.kubewarden.io.vulnerabilityreports/default/d127fcd6e13e6f89db254cbf77930216f8925380218ea4425e4d570ee8496a9f',
-      'self':   'https://localhost:8005/v1/storage.sbomscanner.kubewarden.io.vulnerabilityreports/default/d127fcd6e13e6f89db254cbf77930216f8925380218ea4425e4d570ee8496a9f',
-      'update': 'https://localhost:8005/v1/storage.sbomscanner.kubewarden.io.vulnerabilityreports/default/d127fcd6e13e6f89db254cbf77930216f8925380218ea4425e4d570ee8496a9f',
-      'view':   'https://localhost:8005/apis/storage.sbomscanner.kubewarden.io/v1alpha1/namespaces/default/vulnerabilityreports/d127fcd6e13e6f89db254cbf77930216f8925380218ea4425e4d570ee8496a9f'
-    },
-    'apiVersion':    'storage.sbomscanner.kubewarden.io/v1alpha1',
-    'imageMetadata': {
-      'digest':      'sha256:f398c8d5c6b54212a0d71bd3d9c6e08b2c2df51210f837187a6eb1280a284fdb',
-      'platform':    'linux/arm64/v8',
-      'registry':    'lsong-demo1',
-      'registryURI': 'registry-1.docker.io',
-      'repository':  'library/alpine',
-      'tag':         '3.20.5'
-    },
-    'kind':     'VulnerabilityReport',
-    'metadata': {
-      'creationTimestamp': '2026-01-14T18:51:39Z',
-      'fields':            [
-        'd127fcd6e13e6f89db254cbf77930216f8925380218ea4425e4d570ee8496a9f',
-        'registry-1.docker.io/library/alpine:3.20.5',
-        'linux/arm64/v8',
-        '18 (0 suppressed)'
-      ],
-      'labels': {
-        'app.kubernetes.io/managed-by':          'sbomscanner',
-        'app.kubernetes.io/part-of':             'sbomscanner',
-        'sbomscanner.kubewarden.io/scanjob-uid': '445c600a-c4b6-40b3-bd71-f2d2140a37d5'
-      },
-      'name':            'd127fcd6e13e6f89db254cbf77930216f8925380218ea4425e4d570ee8496a9f',
-      'namespace':       'default',
-      'ownerReferences': [
-        {
-          'apiVersion':         'storage.sbomscanner.kubewarden.io/v1alpha1',
-          'blockOwnerDeletion': true,
-          'controller':         true,
-          'kind':               'SBOM',
-          'name':               'd127fcd6e13e6f89db254cbf77930216f8925380218ea4425e4d570ee8496a9f',
-          'uid':                '077829ac-e5c0-4382-8b52-18d982f09740'
-        }
-      ],
-      'relationships': [
-        {
-          'fromId':   'default/d127fcd6e13e6f89db254cbf77930216f8925380218ea4425e4d570ee8496a9f',
-          'fromType': 'storage.sbomscanner.kubewarden.io.sbom',
-          'rel':      'owner',
-          'state':    'active',
-          'message':  'Resource is current'
-        }
-      ],
-      'resourceVersion': '1',
-      'state':           {
-        'error':         false,
-        'message':       'Resource is current',
-        'name':          'active',
-        'transitioning': false
-      },
-      'uid': '738ba826-b430-4149-8131-61368a55b7c3'
-    },
-    'report': {
-      'results': [
-        {
-          'class':           'os-pkgs',
-          'target':          '/var/run/worker/trivy.sbom.271713623.json (alpine 3.20.5)',
-          'type':            'alpine',
-          'vulnerabilities': [
-            {
-              'cve':  'CVE-2024-58251',
-              'cwes': [
-                'CWE-150'
-              ],
-              'description':   'In netstat in BusyBox through 1.37.0, local users can launch of network application with an argv[0] containing an ANSI terminal escape sequence, leading to a denial of service (terminal locked up) when netstat is used by a victim.',
-              'diffID':        'sha256:534a70dc82967ee32184e13d28ea485e909b20d3f13d553122bab3e4de03b50c',
-              'fixedVersions': [
-                '1.36.1-r31'
-              ],
-              'installedVersion': '1.36.1-r29',
-              'packageName':      'busybox',
-              'purl':             'pkg:apk/alpine/busybox@1.36.1-r29?arch=aarch64&distro=3.20.5',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2025/04/23/6',
-                'https://bugs.busybox.net/show_bug.cgi?id=15922',
-                'https://www.busybox.net',
-                'https://www.busybox.net/downloads/',
-                'https://www.cve.org/CVERecord?id=CVE-2024-58251'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'In netstat in BusyBox through 1.37.0, local users can launch of networ ...'
-            },
-            {
-              'cve':  'CVE-2025-46394',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '3.3',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-451'
-              ],
-              'description':   'In tar in BusyBox through 1.37.0, a TAR archive can have filenames hidden from a listing through the use of terminal escape sequences.',
-              'diffID':        'sha256:534a70dc82967ee32184e13d28ea485e909b20d3f13d553122bab3e4de03b50c',
-              'fixedVersions': [
-                '1.36.1-r31'
-              ],
-              'installedVersion': '1.36.1-r29',
-              'packageName':      'busybox',
-              'purl':             'pkg:apk/alpine/busybox@1.36.1-r29?arch=aarch64&distro=3.20.5',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2025/04/23/5',
-                'http://www.openwall.com/lists/oss-security/2025/04/24/3',
-                'https://bugs.busybox.net/show_bug.cgi?id=16018',
-                'https://lists.busybox.net/pipermail/busybox/2024-July/090806.html',
-                'https://lists.busybox.net/pipermail/busybox/2024-July/090814.html',
-                'https://www.busybox.net',
-                'https://www.busybox.net/downloads/',
-                'https://www.cve.org/CVERecord?id=CVE-2025-46394',
-                'https://www.openwall.com/lists/oss-security/2025/04/23/1'
-              ],
-              'severity':   'LOW',
-              'suppressed': false,
-              'title':      'In tar in BusyBox through 1.37.0, a TAR archive can have filenames hid ...'
-            },
-            {
-              'cve':  'CVE-2024-58251',
-              'cwes': [
-                'CWE-150'
-              ],
-              'description':   'In netstat in BusyBox through 1.37.0, local users can launch of network application with an argv[0] containing an ANSI terminal escape sequence, leading to a denial of service (terminal locked up) when netstat is used by a victim.',
-              'diffID':        'sha256:534a70dc82967ee32184e13d28ea485e909b20d3f13d553122bab3e4de03b50c',
-              'fixedVersions': [
-                '1.36.1-r31'
-              ],
-              'installedVersion': '1.36.1-r29',
-              'packageName':      'busybox-binsh',
-              'purl':             'pkg:apk/alpine/busybox-binsh@1.36.1-r29?arch=aarch64&distro=3.20.5',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2025/04/23/6',
-                'https://bugs.busybox.net/show_bug.cgi?id=15922',
-                'https://www.busybox.net',
-                'https://www.busybox.net/downloads/',
-                'https://www.cve.org/CVERecord?id=CVE-2024-58251'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'In netstat in BusyBox through 1.37.0, local users can launch of networ ...'
-            },
-            {
-              'cve':  'CVE-2025-46394',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '3.3',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-451'
-              ],
-              'description':   'In tar in BusyBox through 1.37.0, a TAR archive can have filenames hidden from a listing through the use of terminal escape sequences.',
-              'diffID':        'sha256:534a70dc82967ee32184e13d28ea485e909b20d3f13d553122bab3e4de03b50c',
-              'fixedVersions': [
-                '1.36.1-r31'
-              ],
-              'installedVersion': '1.36.1-r29',
-              'packageName':      'busybox-binsh',
-              'purl':             'pkg:apk/alpine/busybox-binsh@1.36.1-r29?arch=aarch64&distro=3.20.5',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2025/04/23/5',
-                'http://www.openwall.com/lists/oss-security/2025/04/24/3',
-                'https://bugs.busybox.net/show_bug.cgi?id=16018',
-                'https://lists.busybox.net/pipermail/busybox/2024-July/090806.html',
-                'https://lists.busybox.net/pipermail/busybox/2024-July/090814.html',
-                'https://www.busybox.net',
-                'https://www.busybox.net/downloads/',
-                'https://www.cve.org/CVERecord?id=CVE-2025-46394',
-                'https://www.openwall.com/lists/oss-security/2025/04/23/1'
-              ],
-              'severity':   'LOW',
-              'suppressed': false,
-              'title':      'In tar in BusyBox through 1.37.0, a TAR archive can have filenames hid ...'
-            },
-            {
-              'cve':  'CVE-2024-12797',
-              'cvss': {
-                'redhat': {
-                  'v3score':  '7.4',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-392'
-              ],
-              'description':   "Issue summary: Clients using RFC7250 Raw Public Keys (RPKs) to authenticate a\nserver may fail to notice that the server was not authenticated, because\nhandshakes don't abort as expected when the SSL_VERIFY_PEER verification mode\nis set.\n\nImpact summary: TLS and DTLS connections using raw public keys may be\nvulnerable to man-in-middle attacks when server authentication failure is not\ndetected by clients.\n\nRPKs are disabled by default in both TLS clients and TLS servers.  The issue\nonly arises when TLS clients explicitly enable RPK use by the server, and the\nserver, likewise, enables sending of an RPK instead of an X.509 certificate\nchain.  The affected clients are those that then rely on the handshake to\nfail when the server's RPK fails to match one of the expected public keys,\nby setting the verification mode to SSL_VERIFY_PEER.\n\nClients that enable server-side raw public keys can still find out that raw\npublic key verification failed by calling SSL_get_verify_result(), and those\nthat do, and take appropriate action, are not affected.  This issue was\nintroduced in the initial implementation of RPK support in OpenSSL 3.2.\n\nThe FIPS modules in 3.4, 3.3, 3.2, 3.1 and 3.0 are not affected by this issue.",
-              'diffID':        'sha256:534a70dc82967ee32184e13d28ea485e909b20d3f13d553122bab3e4de03b50c',
-              'fixedVersions': [
-                '3.3.3-r0'
-              ],
-              'installedVersion': '3.3.2-r1',
-              'packageName':      'libcrypto3',
-              'purl':             'pkg:apk/alpine/libcrypto3@3.3.2-r1?arch=aarch64&distro=3.20.5',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2025/02/11/3',
-                'http://www.openwall.com/lists/oss-security/2025/02/11/4',
-                'https://access.redhat.com/errata/RHSA-2025:1330',
-                'https://access.redhat.com/security/cve/CVE-2024-12797',
-                'https://bugzilla.redhat.com/2342757',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2342757',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-12797',
-                'https://errata.almalinux.org/9/ALSA-2025-1330.html',
-                'https://errata.rockylinux.org/RLSA-2025:1330',
-                'https://github.com/openssl/openssl/commit/738d4f9fdeaad57660dcba50a619fafced3fd5e9',
-                'https://github.com/openssl/openssl/commit/798779d43494549b611233f92652f0da5328fbe7',
-                'https://github.com/openssl/openssl/commit/87ebd203feffcf92ad5889df92f90bb0ee10a699',
-                'https://github.com/pyca/cryptography',
-                'https://github.com/pyca/cryptography/security/advisories/GHSA-79v4-65xg-pq4g',
-                'https://linux.oracle.com/cve/CVE-2024-12797.html',
-                'https://linux.oracle.com/errata/ELSA-2025-1330.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2024-12797',
-                'https://openssl-library.org/news/secadv/20250211.txt',
-                'https://security.netapp.com/advisory/ntap-20250214-0001/',
-                'https://ubuntu.com/security/notices/USN-7264-1',
-                'https://www.cve.org/CVERecord?id=CVE-2024-12797'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      "openssl: RFC7250 handshakes with unauthenticated servers don't abort as expected"
-            },
-            {
-              'cve':  'CVE-2024-13176',
-              'cvss': {
-                'redhat': {
-                  'v3score':  '4.7',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-385'
-              ],
-              'description':   'Issue summary: A timing side-channel which could potentially allow recovering\nthe private key exists in the ECDSA signature computation.\n\nImpact summary: A timing side-channel in ECDSA signature computations\ncould allow recovering the private key by an attacker. However, measuring\nthe timing would require either local access to the signing application or\na very fast network connection with low latency.\n\nThere is a timing signal of around 300 nanoseconds when the top word of\nthe inverted ECDSA nonce value is zero. This can happen with significant\nprobability only for some of the supported elliptic curves. In particular\nthe NIST P-521 curve is affected. To be able to measure this leak, the attacker\nprocess must either be located in the same physical computer or must\nhave a very fast network connection with low latency. For that reason\nthe severity of this vulnerability is Low.\n\nThe FIPS modules in 3.4, 3.3, 3.2, 3.1 and 3.0 are affected by this issue.',
-              'diffID':        'sha256:534a70dc82967ee32184e13d28ea485e909b20d3f13d553122bab3e4de03b50c',
-              'fixedVersions': [
-                '3.3.2-r2'
-              ],
-              'installedVersion': '3.3.2-r1',
-              'packageName':      'libcrypto3',
-              'purl':             'pkg:apk/alpine/libcrypto3@3.3.2-r1?arch=aarch64&distro=3.20.5',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2025/01/20/2',
-                'https://access.redhat.com/errata/RHSA-2025:16046',
-                'https://access.redhat.com/security/cve/CVE-2024-13176',
-                'https://bugzilla.redhat.com/2359885',
-                'https://bugzilla.redhat.com/2359888',
-                'https://bugzilla.redhat.com/2359892',
-                'https://bugzilla.redhat.com/2359894',
-                'https://bugzilla.redhat.com/2359895',
-                'https://bugzilla.redhat.com/2359899',
-                'https://bugzilla.redhat.com/2359900',
-                'https://bugzilla.redhat.com/2359902',
-                'https://bugzilla.redhat.com/2359903',
-                'https://bugzilla.redhat.com/2359911',
-                'https://bugzilla.redhat.com/2359918',
-                'https://bugzilla.redhat.com/2359920',
-                'https://bugzilla.redhat.com/2359924',
-                'https://bugzilla.redhat.com/2359928',
-                'https://bugzilla.redhat.com/2359930',
-                'https://bugzilla.redhat.com/2359932',
-                'https://bugzilla.redhat.com/2359934',
-                'https://bugzilla.redhat.com/2359938',
-                'https://bugzilla.redhat.com/2359940',
-                'https://bugzilla.redhat.com/2359943',
-                'https://bugzilla.redhat.com/2359944',
-                'https://bugzilla.redhat.com/2359945',
-                'https://bugzilla.redhat.com/2359947',
-                'https://bugzilla.redhat.com/2359950',
-                'https://bugzilla.redhat.com/2359963',
-                'https://bugzilla.redhat.com/2359964',
-                'https://bugzilla.redhat.com/2359972',
-                'https://bugzilla.redhat.com/2370920',
-                'https://bugzilla.redhat.com/2380264',
-                'https://bugzilla.redhat.com/2380273',
-                'https://bugzilla.redhat.com/2380274',
-                'https://bugzilla.redhat.com/2380278',
-                'https://bugzilla.redhat.com/2380280',
-                'https://bugzilla.redhat.com/2380283',
-                'https://bugzilla.redhat.com/2380284',
-                'https://bugzilla.redhat.com/2380290',
-                'https://bugzilla.redhat.com/2380291',
-                'https://bugzilla.redhat.com/2380295',
-                'https://bugzilla.redhat.com/2380298',
-                'https://bugzilla.redhat.com/2380306',
-                'https://bugzilla.redhat.com/2380308',
-                'https://bugzilla.redhat.com/2380309',
-                'https://bugzilla.redhat.com/2380310',
-                'https://bugzilla.redhat.com/2380312',
-                'https://bugzilla.redhat.com/2380313',
-                'https://bugzilla.redhat.com/2380320',
-                'https://bugzilla.redhat.com/2380321',
-                'https://bugzilla.redhat.com/2380322',
-                'https://bugzilla.redhat.com/2380326',
-                'https://bugzilla.redhat.com/2380327',
-                'https://bugzilla.redhat.com/2380334',
-                'https://bugzilla.redhat.com/2380335',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2338999',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359885',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359888',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359892',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359894',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359895',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359899',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359900',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359902',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359903',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359911',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359918',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359920',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359924',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359928',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359930',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359932',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359934',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359938',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359940',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359943',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359944',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359945',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359947',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359950',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359963',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359964',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359972',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2370920',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380264',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380273',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380274',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380278',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380280',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380283',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380284',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380290',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380291',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380295',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380298',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380306',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380308',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380309',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380310',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380312',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380313',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380320',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380321',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380322',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380326',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380327',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380334',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380335',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-13176',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21574',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21575',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21577',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21579',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21580',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21581',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21584',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21585',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21588',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30681',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30682',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30683',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30684',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30685',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30687',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30688',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30689',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30693',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30695',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30696',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30699',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30703',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30704',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30705',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30715',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30721',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30722',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50077',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50078',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50079',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50080',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50081',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50082',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50083',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50084',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50085',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50086',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50087',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50088',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50091',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50092',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50093',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50094',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50096',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50097',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50098',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50099',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50100',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50101',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50102',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50104',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-5399',
-                'https://errata.almalinux.org/9/ALSA-2025-16046.html',
-                'https://errata.rockylinux.org/RLSA-2025:15699',
-                'https://github.com/openssl/openssl/commit/07272b05b04836a762b4baa874958af51d513844',
-                'https://github.com/openssl/openssl/commit/2af62e74fb59bc469506bc37eb2990ea408d9467',
-                'https://github.com/openssl/openssl/commit/392dcb336405a0c94486aa6655057f59fd3a0902',
-                'https://github.com/openssl/openssl/commit/4b1cb94a734a7d4ec363ac0a215a25c181e11f65',
-                'https://github.com/openssl/openssl/commit/77c608f4c8857e63e98e66444e2e761c9627916f',
-                'https://github.openssl.org/openssl/extended-releases/commit/0d5fd1ab987f7571e2c955d8d8b638fc0fb54ded',
-                'https://github.openssl.org/openssl/extended-releases/commit/a2639000db19878d5d89586ae7b725080592ae86',
-                'https://linux.oracle.com/cve/CVE-2024-13176.html',
-                'https://linux.oracle.com/errata/ELSA-2025-16046.html',
-                'https://lists.debian.org/debian-lts-announce/2025/05/msg00028.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2024-13176',
-                'https://openssl-library.org/news/secadv/20250120.txt',
-                'https://security.netapp.com/advisory/ntap-20250124-0005/',
-                'https://security.netapp.com/advisory/ntap-20250418-0010/',
-                'https://security.netapp.com/advisory/ntap-20250502-0006/',
-                'https://ubuntu.com/security/notices/USN-7264-1',
-                'https://ubuntu.com/security/notices/USN-7278-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2024-13176',
-                'https://www.oracle.com/security-alerts/cpuapr2025.html#AppendixMSQL'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: Timing side-channel in ECDSA signature computation'
-            },
-            {
-              'cve':  'CVE-2025-9230',
-              'cvss': {
-                'redhat': {
-                  'v3score':  '5.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L'
-                }
-              },
-              'cwes': [
-                'CWE-125',
-                'CWE-787'
-              ],
-              'description':   'Issue summary: An application trying to decrypt CMS messages encrypted using\npassword based encryption can trigger an out-of-bounds read and write.\n\nImpact summary: This out-of-bounds read may trigger a crash which leads to\nDenial of Service for an application. The out-of-bounds write can cause\na memory corruption which can have various consequences including\na Denial of Service or Execution of attacker-supplied code.\n\nAlthough the consequences of a successful exploit of this vulnerability\ncould be severe, the probability that the attacker would be able to\nperform it is low. Besides, password based (PWRI) encryption support in CMS\nmessages is very rarely used. For that reason the issue was assessed as\nModerate severity according to our Security Policy.\n\nThe FIPS modules in 3.5, 3.4, 3.3, 3.2, 3.1 and 3.0 are not affected by this\nissue, as the CMS implementation is outside the OpenSSL FIPS module\nboundary.',
-              'diffID':        'sha256:534a70dc82967ee32184e13d28ea485e909b20d3f13d553122bab3e4de03b50c',
-              'fixedVersions': [
-                '3.3.5-r0'
-              ],
-              'installedVersion': '3.3.2-r1',
-              'packageName':      'libcrypto3',
-              'purl':             'pkg:apk/alpine/libcrypto3@3.3.2-r1?arch=aarch64&distro=3.20.5',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2025/09/30/5',
-                'https://access.redhat.com/errata/RHSA-2025:21255',
-                'https://access.redhat.com/security/cve/CVE-2025-9230',
-                'https://bugzilla.redhat.com/2396054',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2396054',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-9230',
-                'https://errata.almalinux.org/9/ALSA-2025-21255.html',
-                'https://errata.rockylinux.org/RLSA-2025:21255',
-                'https://github.com/openssl/openssl/commit/5965ea5dd6960f36d8b7f74f8eac67a8eb8f2b45',
-                'https://github.com/openssl/openssl/commit/9e91358f365dee6c446dcdcdb01c04d2743fd280',
-                'https://github.com/openssl/openssl/commit/a79c4ce559c6a3a8fd4109e9f33c1185d5bf2def',
-                'https://github.com/openssl/openssl/commit/b5282d677551afda7d20e9c00e09561b547b2dfd',
-                'https://github.com/openssl/openssl/commit/bae259a211ada6315dc50900686daaaaaa55f482',
-                'https://github.openssl.org/openssl/extended-releases/commit/c2b96348bfa662f25f4fabf81958ae822063dae3',
-                'https://github.openssl.org/openssl/extended-releases/commit/dfbaf161d8dafc1132dd88cd48ad990ed9b4c8ba',
-                'https://linux.oracle.com/cve/CVE-2025-9230.html',
-                'https://linux.oracle.com/errata/ELSA-2026-0337.html',
-                'https://lists.debian.org/debian-lts-announce/2025/10/msg00001.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2025-9230',
-                'https://openssl-library.org/news/secadv/20250930.txt',
-                'https://ubuntu.com/security/notices/USN-7786-1',
-                'https://www.cve.org/CVERecord?id=CVE-2025-9230'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: Out-of-bounds read & write in RFC 3211 KEK Unwrap'
-            },
-            {
-              'cve':  'CVE-2025-9231',
-              'cvss': {
-                'redhat': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-385'
-              ],
-              'description':   'Issue summary: A timing side-channel which could potentially allow remote\nrecovery of the private key exists in the SM2 algorithm implementation on 64 bit\nARM platforms.\n\nImpact summary: A timing side-channel in SM2 signature computations on 64 bit\nARM platforms could allow recovering the private key by an attacker..\n\nWhile remote key recovery over a network was not attempted by the reporter,\ntiming measurements revealed a timing signal which may allow such an attack.\n\nOpenSSL does not directly support certificates with SM2 keys in TLS, and so\nthis CVE is not relevant in most TLS contexts.  However, given that it is\npossible to add support for such certificates via a custom provider, coupled\nwith the fact that in such a custom provider context the private key may be\nrecoverable via remote timing measurements, we consider this to be a Moderate\nseverity issue.\n\nThe FIPS modules in 3.5, 3.4, 3.3, 3.2, 3.1 and 3.0 are not affected by this\nissue, as SM2 is not an approved algorithm.',
-              'diffID':        'sha256:534a70dc82967ee32184e13d28ea485e909b20d3f13d553122bab3e4de03b50c',
-              'fixedVersions': [
-                '3.3.5-r0'
-              ],
-              'installedVersion': '3.3.2-r1',
-              'packageName':      'libcrypto3',
-              'purl':             'pkg:apk/alpine/libcrypto3@3.3.2-r1?arch=aarch64&distro=3.20.5',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2025/09/30/5',
-                'https://access.redhat.com/security/cve/CVE-2025-9231',
-                'https://github.com/openssl/openssl/commit/567f64386e43683888212226824b6a179885a0fe',
-                'https://github.com/openssl/openssl/commit/cba616c26ac8e7b37de5e77762e505ba5ca51698',
-                'https://github.com/openssl/openssl/commit/eed5adc9f969d77c94f213767acbb41ff923b6f4',
-                'https://github.com/openssl/openssl/commit/fc47a2ec078912b3e914fab5734535e76c4820c2',
-                'https://nvd.nist.gov/vuln/detail/CVE-2025-9231',
-                'https://openssl-library.org/news/secadv/20250930.txt',
-                'https://ubuntu.com/security/notices/USN-7786-1',
-                'https://www.cve.org/CVERecord?id=CVE-2025-9231'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: Timing side-channel in SM2 algorithm on 64 bit ARM'
-            },
-            {
-              'cve':  'CVE-2025-9232',
-              'cvss': {
-                'redhat': {
-                  'v3score':  '3.1',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L'
-                }
-              },
-              'cwes': [
-                'CWE-125'
-              ],
-              'description':   "Issue summary: An application using the OpenSSL HTTP client API functions may\ntrigger an out-of-bounds read if the 'no_proxy' environment variable is set and\nthe host portion of the authority component of the HTTP URL is an IPv6 address.\n\nImpact summary: An out-of-bounds read can trigger a crash which leads to\nDenial of Service for an application.\n\nThe OpenSSL HTTP client API functions can be used directly by applications\nbut they are also used by the OCSP client functions and CMP (Certificate\nManagement Protocol) client implementation in OpenSSL. However the URLs used\nby these implementations are unlikely to be controlled by an attacker.\n\nIn this vulnerable code the out of bounds read can only trigger a crash.\nFurthermore the vulnerability requires an attacker-controlled URL to be\npassed from an application to the OpenSSL function and the user has to have\na 'no_proxy' environment variable set. For the aforementioned reasons the\nissue was assessed as Low severity.\n\nThe vulnerable code was introduced in the following patch releases:\n3.0.16, 3.1.8, 3.2.4, 3.3.3, 3.4.0 and 3.5.0.\n\nThe FIPS modules in 3.5, 3.4, 3.3, 3.2, 3.1 and 3.0 are not affected by this\nissue, as the HTTP client implementation is outside the OpenSSL FIPS module\nboundary.",
-              'diffID':        'sha256:534a70dc82967ee32184e13d28ea485e909b20d3f13d553122bab3e4de03b50c',
-              'fixedVersions': [
-                '3.3.5-r0'
-              ],
-              'installedVersion': '3.3.2-r1',
-              'packageName':      'libcrypto3',
-              'purl':             'pkg:apk/alpine/libcrypto3@3.3.2-r1?arch=aarch64&distro=3.20.5',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2025/09/30/5',
-                'https://access.redhat.com/security/cve/CVE-2025-9232',
-                'https://github.com/openssl/openssl/commit/2b4ec20e47959170422922eaff25346d362dcb35',
-                'https://github.com/openssl/openssl/commit/654dc11d23468a74fc8ea4672b702dd3feb7be4b',
-                'https://github.com/openssl/openssl/commit/7cf21a30513c9e43c4bc3836c237cf086e194af3',
-                'https://github.com/openssl/openssl/commit/89e790ac431125a4849992858490bed6b225eadf',
-                'https://github.com/openssl/openssl/commit/bbf38c034cdabd0a13330abcc4855c866f53d2e0',
-                'https://nvd.nist.gov/vuln/detail/CVE-2025-9232',
-                'https://openssl-library.org/news/secadv/20250930.txt',
-                'https://ubuntu.com/security/notices/USN-7786-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2025-9232'
-              ],
-              'severity':   'LOW',
-              'suppressed': false,
-              'title':      'openssl: Out-of-bounds read in HTTP client no_proxy handling'
-            },
-            {
-              'cve':  'CVE-2024-12797',
-              'cvss': {
-                'redhat': {
-                  'v3score':  '7.4',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-392'
-              ],
-              'description':   "Issue summary: Clients using RFC7250 Raw Public Keys (RPKs) to authenticate a\nserver may fail to notice that the server was not authenticated, because\nhandshakes don't abort as expected when the SSL_VERIFY_PEER verification mode\nis set.\n\nImpact summary: TLS and DTLS connections using raw public keys may be\nvulnerable to man-in-middle attacks when server authentication failure is not\ndetected by clients.\n\nRPKs are disabled by default in both TLS clients and TLS servers.  The issue\nonly arises when TLS clients explicitly enable RPK use by the server, and the\nserver, likewise, enables sending of an RPK instead of an X.509 certificate\nchain.  The affected clients are those that then rely on the handshake to\nfail when the server's RPK fails to match one of the expected public keys,\nby setting the verification mode to SSL_VERIFY_PEER.\n\nClients that enable server-side raw public keys can still find out that raw\npublic key verification failed by calling SSL_get_verify_result(), and those\nthat do, and take appropriate action, are not affected.  This issue was\nintroduced in the initial implementation of RPK support in OpenSSL 3.2.\n\nThe FIPS modules in 3.4, 3.3, 3.2, 3.1 and 3.0 are not affected by this issue.",
-              'diffID':        'sha256:534a70dc82967ee32184e13d28ea485e909b20d3f13d553122bab3e4de03b50c',
-              'fixedVersions': [
-                '3.3.3-r0'
-              ],
-              'installedVersion': '3.3.2-r1',
-              'packageName':      'libssl3',
-              'purl':             'pkg:apk/alpine/libssl3@3.3.2-r1?arch=aarch64&distro=3.20.5',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2025/02/11/3',
-                'http://www.openwall.com/lists/oss-security/2025/02/11/4',
-                'https://access.redhat.com/errata/RHSA-2025:1330',
-                'https://access.redhat.com/security/cve/CVE-2024-12797',
-                'https://bugzilla.redhat.com/2342757',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2342757',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-12797',
-                'https://errata.almalinux.org/9/ALSA-2025-1330.html',
-                'https://errata.rockylinux.org/RLSA-2025:1330',
-                'https://github.com/openssl/openssl/commit/738d4f9fdeaad57660dcba50a619fafced3fd5e9',
-                'https://github.com/openssl/openssl/commit/798779d43494549b611233f92652f0da5328fbe7',
-                'https://github.com/openssl/openssl/commit/87ebd203feffcf92ad5889df92f90bb0ee10a699',
-                'https://github.com/pyca/cryptography',
-                'https://github.com/pyca/cryptography/security/advisories/GHSA-79v4-65xg-pq4g',
-                'https://linux.oracle.com/cve/CVE-2024-12797.html',
-                'https://linux.oracle.com/errata/ELSA-2025-1330.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2024-12797',
-                'https://openssl-library.org/news/secadv/20250211.txt',
-                'https://security.netapp.com/advisory/ntap-20250214-0001/',
-                'https://ubuntu.com/security/notices/USN-7264-1',
-                'https://www.cve.org/CVERecord?id=CVE-2024-12797'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      "openssl: RFC7250 handshakes with unauthenticated servers don't abort as expected"
-            },
-            {
-              'cve':  'CVE-2024-13176',
-              'cvss': {
-                'redhat': {
-                  'v3score':  '4.7',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-385'
-              ],
-              'description':   'Issue summary: A timing side-channel which could potentially allow recovering\nthe private key exists in the ECDSA signature computation.\n\nImpact summary: A timing side-channel in ECDSA signature computations\ncould allow recovering the private key by an attacker. However, measuring\nthe timing would require either local access to the signing application or\na very fast network connection with low latency.\n\nThere is a timing signal of around 300 nanoseconds when the top word of\nthe inverted ECDSA nonce value is zero. This can happen with significant\nprobability only for some of the supported elliptic curves. In particular\nthe NIST P-521 curve is affected. To be able to measure this leak, the attacker\nprocess must either be located in the same physical computer or must\nhave a very fast network connection with low latency. For that reason\nthe severity of this vulnerability is Low.\n\nThe FIPS modules in 3.4, 3.3, 3.2, 3.1 and 3.0 are affected by this issue.',
-              'diffID':        'sha256:534a70dc82967ee32184e13d28ea485e909b20d3f13d553122bab3e4de03b50c',
-              'fixedVersions': [
-                '3.3.2-r2'
-              ],
-              'installedVersion': '3.3.2-r1',
-              'packageName':      'libssl3',
-              'purl':             'pkg:apk/alpine/libssl3@3.3.2-r1?arch=aarch64&distro=3.20.5',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2025/01/20/2',
-                'https://access.redhat.com/errata/RHSA-2025:16046',
-                'https://access.redhat.com/security/cve/CVE-2024-13176',
-                'https://bugzilla.redhat.com/2359885',
-                'https://bugzilla.redhat.com/2359888',
-                'https://bugzilla.redhat.com/2359892',
-                'https://bugzilla.redhat.com/2359894',
-                'https://bugzilla.redhat.com/2359895',
-                'https://bugzilla.redhat.com/2359899',
-                'https://bugzilla.redhat.com/2359900',
-                'https://bugzilla.redhat.com/2359902',
-                'https://bugzilla.redhat.com/2359903',
-                'https://bugzilla.redhat.com/2359911',
-                'https://bugzilla.redhat.com/2359918',
-                'https://bugzilla.redhat.com/2359920',
-                'https://bugzilla.redhat.com/2359924',
-                'https://bugzilla.redhat.com/2359928',
-                'https://bugzilla.redhat.com/2359930',
-                'https://bugzilla.redhat.com/2359932',
-                'https://bugzilla.redhat.com/2359934',
-                'https://bugzilla.redhat.com/2359938',
-                'https://bugzilla.redhat.com/2359940',
-                'https://bugzilla.redhat.com/2359943',
-                'https://bugzilla.redhat.com/2359944',
-                'https://bugzilla.redhat.com/2359945',
-                'https://bugzilla.redhat.com/2359947',
-                'https://bugzilla.redhat.com/2359950',
-                'https://bugzilla.redhat.com/2359963',
-                'https://bugzilla.redhat.com/2359964',
-                'https://bugzilla.redhat.com/2359972',
-                'https://bugzilla.redhat.com/2370920',
-                'https://bugzilla.redhat.com/2380264',
-                'https://bugzilla.redhat.com/2380273',
-                'https://bugzilla.redhat.com/2380274',
-                'https://bugzilla.redhat.com/2380278',
-                'https://bugzilla.redhat.com/2380280',
-                'https://bugzilla.redhat.com/2380283',
-                'https://bugzilla.redhat.com/2380284',
-                'https://bugzilla.redhat.com/2380290',
-                'https://bugzilla.redhat.com/2380291',
-                'https://bugzilla.redhat.com/2380295',
-                'https://bugzilla.redhat.com/2380298',
-                'https://bugzilla.redhat.com/2380306',
-                'https://bugzilla.redhat.com/2380308',
-                'https://bugzilla.redhat.com/2380309',
-                'https://bugzilla.redhat.com/2380310',
-                'https://bugzilla.redhat.com/2380312',
-                'https://bugzilla.redhat.com/2380313',
-                'https://bugzilla.redhat.com/2380320',
-                'https://bugzilla.redhat.com/2380321',
-                'https://bugzilla.redhat.com/2380322',
-                'https://bugzilla.redhat.com/2380326',
-                'https://bugzilla.redhat.com/2380327',
-                'https://bugzilla.redhat.com/2380334',
-                'https://bugzilla.redhat.com/2380335',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2338999',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359885',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359888',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359892',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359894',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359895',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359899',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359900',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359902',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359903',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359911',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359918',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359920',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359924',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359928',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359930',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359932',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359934',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359938',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359940',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359943',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359944',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359945',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359947',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359950',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359963',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359964',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359972',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2370920',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380264',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380273',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380274',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380278',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380280',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380283',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380284',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380290',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380291',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380295',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380298',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380306',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380308',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380309',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380310',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380312',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380313',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380320',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380321',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380322',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380326',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380327',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380334',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380335',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-13176',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21574',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21575',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21577',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21579',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21580',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21581',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21584',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21585',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21588',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30681',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30682',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30683',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30684',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30685',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30687',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30688',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30689',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30693',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30695',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30696',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30699',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30703',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30704',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30705',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30715',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30721',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30722',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50077',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50078',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50079',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50080',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50081',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50082',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50083',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50084',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50085',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50086',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50087',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50088',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50091',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50092',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50093',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50094',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50096',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50097',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50098',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50099',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50100',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50101',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50102',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50104',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-5399',
-                'https://errata.almalinux.org/9/ALSA-2025-16046.html',
-                'https://errata.rockylinux.org/RLSA-2025:15699',
-                'https://github.com/openssl/openssl/commit/07272b05b04836a762b4baa874958af51d513844',
-                'https://github.com/openssl/openssl/commit/2af62e74fb59bc469506bc37eb2990ea408d9467',
-                'https://github.com/openssl/openssl/commit/392dcb336405a0c94486aa6655057f59fd3a0902',
-                'https://github.com/openssl/openssl/commit/4b1cb94a734a7d4ec363ac0a215a25c181e11f65',
-                'https://github.com/openssl/openssl/commit/77c608f4c8857e63e98e66444e2e761c9627916f',
-                'https://github.openssl.org/openssl/extended-releases/commit/0d5fd1ab987f7571e2c955d8d8b638fc0fb54ded',
-                'https://github.openssl.org/openssl/extended-releases/commit/a2639000db19878d5d89586ae7b725080592ae86',
-                'https://linux.oracle.com/cve/CVE-2024-13176.html',
-                'https://linux.oracle.com/errata/ELSA-2025-16046.html',
-                'https://lists.debian.org/debian-lts-announce/2025/05/msg00028.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2024-13176',
-                'https://openssl-library.org/news/secadv/20250120.txt',
-                'https://security.netapp.com/advisory/ntap-20250124-0005/',
-                'https://security.netapp.com/advisory/ntap-20250418-0010/',
-                'https://security.netapp.com/advisory/ntap-20250502-0006/',
-                'https://ubuntu.com/security/notices/USN-7264-1',
-                'https://ubuntu.com/security/notices/USN-7278-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2024-13176',
-                'https://www.oracle.com/security-alerts/cpuapr2025.html#AppendixMSQL'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: Timing side-channel in ECDSA signature computation'
-            },
-            {
-              'cve':  'CVE-2025-9230',
-              'cvss': {
-                'redhat': {
-                  'v3score':  '5.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L'
-                }
-              },
-              'cwes': [
-                'CWE-125',
-                'CWE-787'
-              ],
-              'description':   'Issue summary: An application trying to decrypt CMS messages encrypted using\npassword based encryption can trigger an out-of-bounds read and write.\n\nImpact summary: This out-of-bounds read may trigger a crash which leads to\nDenial of Service for an application. The out-of-bounds write can cause\na memory corruption which can have various consequences including\na Denial of Service or Execution of attacker-supplied code.\n\nAlthough the consequences of a successful exploit of this vulnerability\ncould be severe, the probability that the attacker would be able to\nperform it is low. Besides, password based (PWRI) encryption support in CMS\nmessages is very rarely used. For that reason the issue was assessed as\nModerate severity according to our Security Policy.\n\nThe FIPS modules in 3.5, 3.4, 3.3, 3.2, 3.1 and 3.0 are not affected by this\nissue, as the CMS implementation is outside the OpenSSL FIPS module\nboundary.',
-              'diffID':        'sha256:534a70dc82967ee32184e13d28ea485e909b20d3f13d553122bab3e4de03b50c',
-              'fixedVersions': [
-                '3.3.5-r0'
-              ],
-              'installedVersion': '3.3.2-r1',
-              'packageName':      'libssl3',
-              'purl':             'pkg:apk/alpine/libssl3@3.3.2-r1?arch=aarch64&distro=3.20.5',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2025/09/30/5',
-                'https://access.redhat.com/errata/RHSA-2025:21255',
-                'https://access.redhat.com/security/cve/CVE-2025-9230',
-                'https://bugzilla.redhat.com/2396054',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2396054',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-9230',
-                'https://errata.almalinux.org/9/ALSA-2025-21255.html',
-                'https://errata.rockylinux.org/RLSA-2025:21255',
-                'https://github.com/openssl/openssl/commit/5965ea5dd6960f36d8b7f74f8eac67a8eb8f2b45',
-                'https://github.com/openssl/openssl/commit/9e91358f365dee6c446dcdcdb01c04d2743fd280',
-                'https://github.com/openssl/openssl/commit/a79c4ce559c6a3a8fd4109e9f33c1185d5bf2def',
-                'https://github.com/openssl/openssl/commit/b5282d677551afda7d20e9c00e09561b547b2dfd',
-                'https://github.com/openssl/openssl/commit/bae259a211ada6315dc50900686daaaaaa55f482',
-                'https://github.openssl.org/openssl/extended-releases/commit/c2b96348bfa662f25f4fabf81958ae822063dae3',
-                'https://github.openssl.org/openssl/extended-releases/commit/dfbaf161d8dafc1132dd88cd48ad990ed9b4c8ba',
-                'https://linux.oracle.com/cve/CVE-2025-9230.html',
-                'https://linux.oracle.com/errata/ELSA-2026-0337.html',
-                'https://lists.debian.org/debian-lts-announce/2025/10/msg00001.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2025-9230',
-                'https://openssl-library.org/news/secadv/20250930.txt',
-                'https://ubuntu.com/security/notices/USN-7786-1',
-                'https://www.cve.org/CVERecord?id=CVE-2025-9230'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: Out-of-bounds read & write in RFC 3211 KEK Unwrap'
-            },
-            {
-              'cve':  'CVE-2025-9231',
-              'cvss': {
-                'redhat': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-385'
-              ],
-              'description':   'Issue summary: A timing side-channel which could potentially allow remote\nrecovery of the private key exists in the SM2 algorithm implementation on 64 bit\nARM platforms.\n\nImpact summary: A timing side-channel in SM2 signature computations on 64 bit\nARM platforms could allow recovering the private key by an attacker..\n\nWhile remote key recovery over a network was not attempted by the reporter,\ntiming measurements revealed a timing signal which may allow such an attack.\n\nOpenSSL does not directly support certificates with SM2 keys in TLS, and so\nthis CVE is not relevant in most TLS contexts.  However, given that it is\npossible to add support for such certificates via a custom provider, coupled\nwith the fact that in such a custom provider context the private key may be\nrecoverable via remote timing measurements, we consider this to be a Moderate\nseverity issue.\n\nThe FIPS modules in 3.5, 3.4, 3.3, 3.2, 3.1 and 3.0 are not affected by this\nissue, as SM2 is not an approved algorithm.',
-              'diffID':        'sha256:534a70dc82967ee32184e13d28ea485e909b20d3f13d553122bab3e4de03b50c',
-              'fixedVersions': [
-                '3.3.5-r0'
-              ],
-              'installedVersion': '3.3.2-r1',
-              'packageName':      'libssl3',
-              'purl':             'pkg:apk/alpine/libssl3@3.3.2-r1?arch=aarch64&distro=3.20.5',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2025/09/30/5',
-                'https://access.redhat.com/security/cve/CVE-2025-9231',
-                'https://github.com/openssl/openssl/commit/567f64386e43683888212226824b6a179885a0fe',
-                'https://github.com/openssl/openssl/commit/cba616c26ac8e7b37de5e77762e505ba5ca51698',
-                'https://github.com/openssl/openssl/commit/eed5adc9f969d77c94f213767acbb41ff923b6f4',
-                'https://github.com/openssl/openssl/commit/fc47a2ec078912b3e914fab5734535e76c4820c2',
-                'https://nvd.nist.gov/vuln/detail/CVE-2025-9231',
-                'https://openssl-library.org/news/secadv/20250930.txt',
-                'https://ubuntu.com/security/notices/USN-7786-1',
-                'https://www.cve.org/CVERecord?id=CVE-2025-9231'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: Timing side-channel in SM2 algorithm on 64 bit ARM'
-            },
-            {
-              'cve':  'CVE-2025-9232',
-              'cvss': {
-                'redhat': {
-                  'v3score':  '3.1',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L'
-                }
-              },
-              'cwes': [
-                'CWE-125'
-              ],
-              'description':   "Issue summary: An application using the OpenSSL HTTP client API functions may\ntrigger an out-of-bounds read if the 'no_proxy' environment variable is set and\nthe host portion of the authority component of the HTTP URL is an IPv6 address.\n\nImpact summary: An out-of-bounds read can trigger a crash which leads to\nDenial of Service for an application.\n\nThe OpenSSL HTTP client API functions can be used directly by applications\nbut they are also used by the OCSP client functions and CMP (Certificate\nManagement Protocol) client implementation in OpenSSL. However the URLs used\nby these implementations are unlikely to be controlled by an attacker.\n\nIn this vulnerable code the out of bounds read can only trigger a crash.\nFurthermore the vulnerability requires an attacker-controlled URL to be\npassed from an application to the OpenSSL function and the user has to have\na 'no_proxy' environment variable set. For the aforementioned reasons the\nissue was assessed as Low severity.\n\nThe vulnerable code was introduced in the following patch releases:\n3.0.16, 3.1.8, 3.2.4, 3.3.3, 3.4.0 and 3.5.0.\n\nThe FIPS modules in 3.5, 3.4, 3.3, 3.2, 3.1 and 3.0 are not affected by this\nissue, as the HTTP client implementation is outside the OpenSSL FIPS module\nboundary.",
-              'diffID':        'sha256:534a70dc82967ee32184e13d28ea485e909b20d3f13d553122bab3e4de03b50c',
-              'fixedVersions': [
-                '3.3.5-r0'
-              ],
-              'installedVersion': '3.3.2-r1',
-              'packageName':      'libssl3',
-              'purl':             'pkg:apk/alpine/libssl3@3.3.2-r1?arch=aarch64&distro=3.20.5',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2025/09/30/5',
-                'https://access.redhat.com/security/cve/CVE-2025-9232',
-                'https://github.com/openssl/openssl/commit/2b4ec20e47959170422922eaff25346d362dcb35',
-                'https://github.com/openssl/openssl/commit/654dc11d23468a74fc8ea4672b702dd3feb7be4b',
-                'https://github.com/openssl/openssl/commit/7cf21a30513c9e43c4bc3836c237cf086e194af3',
-                'https://github.com/openssl/openssl/commit/89e790ac431125a4849992858490bed6b225eadf',
-                'https://github.com/openssl/openssl/commit/bbf38c034cdabd0a13330abcc4855c866f53d2e0',
-                'https://nvd.nist.gov/vuln/detail/CVE-2025-9232',
-                'https://openssl-library.org/news/secadv/20250930.txt',
-                'https://ubuntu.com/security/notices/USN-7786-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2025-9232'
-              ],
-              'severity':   'LOW',
-              'suppressed': false,
-              'title':      'openssl: Out-of-bounds read in HTTP client no_proxy handling'
-            },
-            {
-              'cve':  'CVE-2025-26519',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-787'
-              ],
-              'description':   'musl libc 0.9.13 through 1.2.5 before 1.2.6 has an out-of-bounds write vulnerability when an attacker can trigger iconv conversion of untrusted EUC-KR text to UTF-8.',
-              'diffID':        'sha256:534a70dc82967ee32184e13d28ea485e909b20d3f13d553122bab3e4de03b50c',
-              'fixedVersions': [
-                '1.2.5-r1'
-              ],
-              'installedVersion': '1.2.5-r0',
-              'packageName':      'musl',
-              'purl':             'pkg:apk/alpine/musl@1.2.5-r0?arch=aarch64&distro=3.20.5',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2025/02/13/2',
-                'http://www.openwall.com/lists/oss-security/2025/02/13/3',
-                'http://www.openwall.com/lists/oss-security/2025/02/13/4',
-                'http://www.openwall.com/lists/oss-security/2025/02/13/5',
-                'http://www.openwall.com/lists/oss-security/2025/02/14/5',
-                'http://www.openwall.com/lists/oss-security/2025/02/14/6',
-                'https://git.musl-libc.org/cgit/musl/commit/?id=c47ad25ea3b484e10326f933e927c0bc8cded3da',
-                'https://git.musl-libc.org/cgit/musl/commit/?id=e5adcd97b5196e29991b524237381a0202a60659',
-                'https://www.openwall.com/lists/oss-security/2025/02/13/2'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'musl libc 0.9.13 through 1.2.5 before 1.2.6 has an out-of-bounds write ...'
-            },
-            {
-              'cve':  'CVE-2025-26519',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-787'
-              ],
-              'description':   'musl libc 0.9.13 through 1.2.5 before 1.2.6 has an out-of-bounds write vulnerability when an attacker can trigger iconv conversion of untrusted EUC-KR text to UTF-8.',
-              'diffID':        'sha256:534a70dc82967ee32184e13d28ea485e909b20d3f13d553122bab3e4de03b50c',
-              'fixedVersions': [
-                '1.2.5-r1'
-              ],
-              'installedVersion': '1.2.5-r0',
-              'packageName':      'musl-utils',
-              'purl':             'pkg:apk/alpine/musl-utils@1.2.5-r0?arch=aarch64&distro=3.20.5',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2025/02/13/2',
-                'http://www.openwall.com/lists/oss-security/2025/02/13/3',
-                'http://www.openwall.com/lists/oss-security/2025/02/13/4',
-                'http://www.openwall.com/lists/oss-security/2025/02/13/5',
-                'http://www.openwall.com/lists/oss-security/2025/02/14/5',
-                'http://www.openwall.com/lists/oss-security/2025/02/14/6',
-                'https://git.musl-libc.org/cgit/musl/commit/?id=c47ad25ea3b484e10326f933e927c0bc8cded3da',
-                'https://git.musl-libc.org/cgit/musl/commit/?id=e5adcd97b5196e29991b524237381a0202a60659',
-                'https://www.openwall.com/lists/oss-security/2025/02/13/2'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'musl libc 0.9.13 through 1.2.5 before 1.2.6 has an out-of-bounds write ...'
-            },
-            {
-              'cve':  'CVE-2024-58251',
-              'cwes': [
-                'CWE-150'
-              ],
-              'description':   'In netstat in BusyBox through 1.37.0, local users can launch of network application with an argv[0] containing an ANSI terminal escape sequence, leading to a denial of service (terminal locked up) when netstat is used by a victim.',
-              'diffID':        'sha256:534a70dc82967ee32184e13d28ea485e909b20d3f13d553122bab3e4de03b50c',
-              'fixedVersions': [
-                '1.36.1-r31'
-              ],
-              'installedVersion': '1.36.1-r29',
-              'packageName':      'ssl_client',
-              'purl':             'pkg:apk/alpine/ssl_client@1.36.1-r29?arch=aarch64&distro=3.20.5',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2025/04/23/6',
-                'https://bugs.busybox.net/show_bug.cgi?id=15922',
-                'https://www.busybox.net',
-                'https://www.busybox.net/downloads/',
-                'https://www.cve.org/CVERecord?id=CVE-2024-58251'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'In netstat in BusyBox through 1.37.0, local users can launch of networ ...'
-            },
-            {
-              'cve':  'CVE-2025-46394',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '3.3',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-451'
-              ],
-              'description':   'In tar in BusyBox through 1.37.0, a TAR archive can have filenames hidden from a listing through the use of terminal escape sequences.',
-              'diffID':        'sha256:534a70dc82967ee32184e13d28ea485e909b20d3f13d553122bab3e4de03b50c',
-              'fixedVersions': [
-                '1.36.1-r31'
-              ],
-              'installedVersion': '1.36.1-r29',
-              'packageName':      'ssl_client',
-              'purl':             'pkg:apk/alpine/ssl_client@1.36.1-r29?arch=aarch64&distro=3.20.5',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2025/04/23/5',
-                'http://www.openwall.com/lists/oss-security/2025/04/24/3',
-                'https://bugs.busybox.net/show_bug.cgi?id=16018',
-                'https://lists.busybox.net/pipermail/busybox/2024-July/090806.html',
-                'https://lists.busybox.net/pipermail/busybox/2024-July/090814.html',
-                'https://www.busybox.net',
-                'https://www.busybox.net/downloads/',
-                'https://www.cve.org/CVERecord?id=CVE-2025-46394',
-                'https://www.openwall.com/lists/oss-security/2025/04/23/1'
-              ],
-              'severity':   'LOW',
-              'suppressed': false,
-              'title':      'In tar in BusyBox through 1.37.0, a TAR archive can have filenames hid ...'
-            }
-          ]
-        }
-      ],
-      'summary': {
-        'critical':   0,
-        'high':       4,
-        'low':        5,
-        'medium':     9,
-        'suppressed': 0,
-        'unknown':    0
-      }
-    }
-  },
-  {
-    'id':    'default/d1793b8757aa3af53af988721b4a863d550a5cf8c19016a3df5fb07ad00356e4',
-    'type':  'storage.sbomscanner.kubewarden.io.vulnerabilityreport',
-    'links': {
-      'patch':  'https://localhost:8005/v1/storage.sbomscanner.kubewarden.io.vulnerabilityreports/default/d1793b8757aa3af53af988721b4a863d550a5cf8c19016a3df5fb07ad00356e4',
-      'remove': 'https://localhost:8005/v1/storage.sbomscanner.kubewarden.io.vulnerabilityreports/default/d1793b8757aa3af53af988721b4a863d550a5cf8c19016a3df5fb07ad00356e4',
-      'self':   'https://localhost:8005/v1/storage.sbomscanner.kubewarden.io.vulnerabilityreports/default/d1793b8757aa3af53af988721b4a863d550a5cf8c19016a3df5fb07ad00356e4',
-      'update': 'https://localhost:8005/v1/storage.sbomscanner.kubewarden.io.vulnerabilityreports/default/d1793b8757aa3af53af988721b4a863d550a5cf8c19016a3df5fb07ad00356e4',
-      'view':   'https://localhost:8005/apis/storage.sbomscanner.kubewarden.io/v1alpha1/namespaces/default/vulnerabilityreports/d1793b8757aa3af53af988721b4a863d550a5cf8c19016a3df5fb07ad00356e4'
-    },
-    'apiVersion':    'storage.sbomscanner.kubewarden.io/v1alpha1',
-    'imageMetadata': {
-      'digest':      'sha256:277e770b7532b4c7e0576494f77d20b8cc115b3c517d02f50c3202a6a3bdb5d5',
-      'platform':    'linux/386',
-      'registry':    'lsong-demo1',
-      'registryURI': 'registry-1.docker.io',
-      'repository':  'library/alpine',
-      'tag':         '3.6.5'
-    },
-    'kind':     'VulnerabilityReport',
-    'metadata': {
-      'creationTimestamp': '2026-01-14T18:51:46Z',
-      'fields':            [
-        'd1793b8757aa3af53af988721b4a863d550a5cf8c19016a3df5fb07ad00356e4',
-        'registry-1.docker.io/library/alpine:3.6.5',
-        'linux/386',
-        '0 (0 suppressed)'
-      ],
-      'labels': {
-        'app.kubernetes.io/managed-by':          'sbomscanner',
-        'app.kubernetes.io/part-of':             'sbomscanner',
-        'sbomscanner.kubewarden.io/scanjob-uid': '445c600a-c4b6-40b3-bd71-f2d2140a37d5'
-      },
-      'name':            'd1793b8757aa3af53af988721b4a863d550a5cf8c19016a3df5fb07ad00356e4',
-      'namespace':       'default',
-      'ownerReferences': [
-        {
-          'apiVersion':         'storage.sbomscanner.kubewarden.io/v1alpha1',
-          'blockOwnerDeletion': true,
-          'controller':         true,
-          'kind':               'SBOM',
-          'name':               'd1793b8757aa3af53af988721b4a863d550a5cf8c19016a3df5fb07ad00356e4',
-          'uid':                '15d04c1f-9a23-4c68-a87a-3f3f5f36516f'
-        }
-      ],
-      'relationships': [
-        {
-          'fromId':   'default/d1793b8757aa3af53af988721b4a863d550a5cf8c19016a3df5fb07ad00356e4',
-          'fromType': 'storage.sbomscanner.kubewarden.io.sbom',
-          'rel':      'owner',
-          'state':    'active',
-          'message':  'Resource is current'
-        }
-      ],
-      'resourceVersion': '1',
-      'state':           {
-        'error':         false,
-        'message':       'Resource is current',
-        'name':          'active',
-        'transitioning': false
-      },
-      'uid': '4057ec0c-14c6-43e9-b475-78ce0b497b95'
-    },
-    'report': {
-      'results': [
-        {
-          'class':           'os-pkgs',
-          'target':          '/var/run/worker/trivy.sbom.3193437502.json (alpine 3.6.5)',
-          'type':            'alpine',
-          'vulnerabilities': null
-        }
-      ],
-      'summary': {
-        'critical':   0,
-        'high':       0,
-        'low':        0,
-        'medium':     0,
-        'suppressed': 0,
-        'unknown':    0
-      }
-    }
-  },
-  {
-    'id':    'default/d2285f7c1af281fbae5e5bd9eadfcc4c3be0e36f6228091406c1715e88b640f0',
-    'type':  'storage.sbomscanner.kubewarden.io.vulnerabilityreport',
-    'links': {
-      'patch':  'https://localhost:8005/v1/storage.sbomscanner.kubewarden.io.vulnerabilityreports/default/d2285f7c1af281fbae5e5bd9eadfcc4c3be0e36f6228091406c1715e88b640f0',
-      'remove': 'https://localhost:8005/v1/storage.sbomscanner.kubewarden.io.vulnerabilityreports/default/d2285f7c1af281fbae5e5bd9eadfcc4c3be0e36f6228091406c1715e88b640f0',
-      'self':   'https://localhost:8005/v1/storage.sbomscanner.kubewarden.io.vulnerabilityreports/default/d2285f7c1af281fbae5e5bd9eadfcc4c3be0e36f6228091406c1715e88b640f0',
-      'update': 'https://localhost:8005/v1/storage.sbomscanner.kubewarden.io.vulnerabilityreports/default/d2285f7c1af281fbae5e5bd9eadfcc4c3be0e36f6228091406c1715e88b640f0',
-      'view':   'https://localhost:8005/apis/storage.sbomscanner.kubewarden.io/v1alpha1/namespaces/default/vulnerabilityreports/d2285f7c1af281fbae5e5bd9eadfcc4c3be0e36f6228091406c1715e88b640f0'
-    },
-    'apiVersion':    'storage.sbomscanner.kubewarden.io/v1alpha1',
-    'imageMetadata': {
-      'digest':      'sha256:4ed1812024ed78962a34727137627e8854a3b414d19e2c35a1dc727a47e16fba',
-      'platform':    'linux/386',
-      'registry':    'lsong-demo1',
-      'registryURI': 'registry-1.docker.io',
-      'repository':  'library/alpine',
-      'tag':         '3.13.6'
-    },
-    'kind':     'VulnerabilityReport',
-    'metadata': {
-      'creationTimestamp': '2026-01-14T18:52:04Z',
-      'fields':            [
-        'd2285f7c1af281fbae5e5bd9eadfcc4c3be0e36f6228091406c1715e88b640f0',
-        'registry-1.docker.io/library/alpine:3.13.6',
-        'linux/386',
-        '32 (0 suppressed)'
-      ],
-      'labels': {
-        'app.kubernetes.io/managed-by':          'sbomscanner',
-        'app.kubernetes.io/part-of':             'sbomscanner',
-        'sbomscanner.kubewarden.io/scanjob-uid': '445c600a-c4b6-40b3-bd71-f2d2140a37d5'
-      },
-      'name':            'd2285f7c1af281fbae5e5bd9eadfcc4c3be0e36f6228091406c1715e88b640f0',
-      'namespace':       'default',
-      'ownerReferences': [
-        {
-          'apiVersion':         'storage.sbomscanner.kubewarden.io/v1alpha1',
-          'blockOwnerDeletion': true,
-          'controller':         true,
-          'kind':               'SBOM',
-          'name':               'd2285f7c1af281fbae5e5bd9eadfcc4c3be0e36f6228091406c1715e88b640f0',
-          'uid':                'bdf9d15f-ec25-4400-beeb-a29ff779f8b4'
-        }
-      ],
-      'relationships': [
-        {
-          'fromId':   'default/d2285f7c1af281fbae5e5bd9eadfcc4c3be0e36f6228091406c1715e88b640f0',
-          'fromType': 'storage.sbomscanner.kubewarden.io.sbom',
-          'rel':      'owner',
-          'state':    'active',
-          'message':  'Resource is current'
-        }
-      ],
-      'resourceVersion': '1',
-      'state':           {
-        'error':         false,
-        'message':       'Resource is current',
-        'name':          'active',
-        'transitioning': false
-      },
-      'uid': '82dfbcbf-fa06-400b-9b5a-1262ab8e43eb'
-    },
-    'report': {
-      'results': [
-        {
-          'class':           'os-pkgs',
-          'target':          '/var/run/worker/trivy.sbom.3340640538.json (alpine 3.13.6)',
-          'type':            'alpine',
-          'vulnerabilities': [
-            {
-              'cve':  'CVE-2021-42378',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the getvar_i function",
-              'diffID':        'sha256:8de001548e4b5f9bcbbb6713a1df4458914348942e3f4bc1c02cfc75f7a4793a',
-              'fixedVersions': [
-                '1.32.1-r7'
-              ],
-              'installedVersion': '1.32.1-r6',
-              'packageName':      'busybox',
-              'purl':             'pkg:apk/alpine/busybox@1.32.1-r6?arch=x86&distro=3.13.6',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42378',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42378',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42378'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the getvar_i()'
-            },
-            {
-              'cve':  'CVE-2021-42379',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the next_input_file function",
-              'diffID':        'sha256:8de001548e4b5f9bcbbb6713a1df4458914348942e3f4bc1c02cfc75f7a4793a',
-              'fixedVersions': [
-                '1.32.1-r7'
-              ],
-              'installedVersion': '1.32.1-r6',
-              'packageName':      'busybox',
-              'purl':             'pkg:apk/alpine/busybox@1.32.1-r6?arch=x86&distro=3.13.6',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42379',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42379',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42379'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the next_input_file()'
-            },
-            {
-              'cve':  'CVE-2021-42380',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the clrvar function",
-              'diffID':        'sha256:8de001548e4b5f9bcbbb6713a1df4458914348942e3f4bc1c02cfc75f7a4793a',
-              'fixedVersions': [
-                '1.32.1-r7'
-              ],
-              'installedVersion': '1.32.1-r6',
-              'packageName':      'busybox',
-              'purl':             'pkg:apk/alpine/busybox@1.32.1-r6?arch=x86&distro=3.13.6',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42380',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42380',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42380'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the clrvar()'
-            },
-            {
-              'cve':  'CVE-2021-42381',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the hash_init function",
-              'diffID':        'sha256:8de001548e4b5f9bcbbb6713a1df4458914348942e3f4bc1c02cfc75f7a4793a',
-              'fixedVersions': [
-                '1.32.1-r7'
-              ],
-              'installedVersion': '1.32.1-r6',
-              'packageName':      'busybox',
-              'purl':             'pkg:apk/alpine/busybox@1.32.1-r6?arch=x86&distro=3.13.6',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42381',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42381',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42381'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the hash_init()'
-            },
-            {
-              'cve':  'CVE-2021-42382',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the getvar_s function",
-              'diffID':        'sha256:8de001548e4b5f9bcbbb6713a1df4458914348942e3f4bc1c02cfc75f7a4793a',
-              'fixedVersions': [
-                '1.32.1-r7'
-              ],
-              'installedVersion': '1.32.1-r6',
-              'packageName':      'busybox',
-              'purl':             'pkg:apk/alpine/busybox@1.32.1-r6?arch=x86&distro=3.13.6',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42382',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42382',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42382'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the getvar_s()'
-            },
-            {
-              'cve':  'CVE-2021-42383',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the evaluate function",
-              'diffID':        'sha256:8de001548e4b5f9bcbbb6713a1df4458914348942e3f4bc1c02cfc75f7a4793a',
-              'fixedVersions': [
-                '1.32.1-r7'
-              ],
-              'installedVersion': '1.32.1-r6',
-              'packageName':      'busybox',
-              'purl':             'pkg:apk/alpine/busybox@1.32.1-r6?arch=x86&distro=3.13.6',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42383',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42383',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42383'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the evaluate()'
-            },
-            {
-              'cve':  'CVE-2021-42384',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the handle_special function",
-              'diffID':        'sha256:8de001548e4b5f9bcbbb6713a1df4458914348942e3f4bc1c02cfc75f7a4793a',
-              'fixedVersions': [
-                '1.32.1-r7'
-              ],
-              'installedVersion': '1.32.1-r6',
-              'packageName':      'busybox',
-              'purl':             'pkg:apk/alpine/busybox@1.32.1-r6?arch=x86&distro=3.13.6',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42384',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42384',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42384'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the handle_special()'
-            },
-            {
-              'cve':  'CVE-2021-42385',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the evaluate function",
-              'diffID':        'sha256:8de001548e4b5f9bcbbb6713a1df4458914348942e3f4bc1c02cfc75f7a4793a',
-              'fixedVersions': [
-                '1.32.1-r7'
-              ],
-              'installedVersion': '1.32.1-r6',
-              'packageName':      'busybox',
-              'purl':             'pkg:apk/alpine/busybox@1.32.1-r6?arch=x86&distro=3.13.6',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42385',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42385',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42385'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the evaluate()'
-            },
-            {
-              'cve':  'CVE-2021-42386',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the nvalloc function",
-              'diffID':        'sha256:8de001548e4b5f9bcbbb6713a1df4458914348942e3f4bc1c02cfc75f7a4793a',
-              'fixedVersions': [
-                '1.32.1-r7'
-              ],
-              'installedVersion': '1.32.1-r6',
-              'packageName':      'busybox',
-              'purl':             'pkg:apk/alpine/busybox@1.32.1-r6?arch=x86&distro=3.13.6',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42386',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42386',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42386'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the nvalloc()'
-            },
-            {
-              'cve':  'CVE-2022-28391',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '8.8',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-88'
-              ],
-              'description':   "BusyBox through 1.35.0 allows remote attackers to execute arbitrary code if netstat is used to print a DNS PTR record's value to a VT compatible terminal. Alternatively, the attacker could choose to change the terminal's colors.",
-              'diffID':        'sha256:8de001548e4b5f9bcbbb6713a1df4458914348942e3f4bc1c02cfc75f7a4793a',
-              'fixedVersions': [
-                '1.32.1-r8'
-              ],
-              'installedVersion': '1.32.1-r6',
-              'packageName':      'busybox',
-              'purl':             'pkg:apk/alpine/busybox@1.32.1-r6?arch=x86&distro=3.13.6',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2022-28391',
-                'https://git.alpinelinux.org/aports/plain/main/busybox/0001-libbb-sockaddr2str-ensure-only-printable-characters-.patch',
-                'https://git.alpinelinux.org/aports/plain/main/busybox/0002-nslookup-sanitize-all-printed-strings-with-printable.patch',
-                'https://gitlab.alpinelinux.org/alpine/aports/-/issues/13661',
-                'https://nvd.nist.gov/vuln/detail/CVE-2022-28391',
-                'https://www.cve.org/CVERecord?id=CVE-2022-28391'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: remote attackers may execute arbitrary code if netstat is used'
-            },
-            {
-              'cve':  'CVE-2022-30065',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.8',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.2',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox 1.35-x's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the copyvar function.",
-              'diffID':        'sha256:8de001548e4b5f9bcbbb6713a1df4458914348942e3f4bc1c02cfc75f7a4793a',
-              'fixedVersions': [
-                '1.32.1-r9'
-              ],
-              'installedVersion': '1.32.1-r6',
-              'packageName':      'busybox',
-              'purl':             'pkg:apk/alpine/busybox@1.32.1-r6?arch=x86&distro=3.13.6',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2022-30065',
-                'https://bugs.busybox.net/show_bug.cgi?id=14781',
-                'https://cert-portal.siemens.com/productcert/pdf/ssa-333517.pdf',
-                'https://nvd.nist.gov/vuln/detail/CVE-2022-30065',
-                'https://www.cve.org/CVERecord?id=CVE-2022-30065'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      "busybox: A use-after-free in Busybox's awk applet leads to denial of service"
-            },
-            {
-              'cve':  'CVE-2021-42374',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '5.7',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-125'
-              ],
-              'description':   "An out-of-bounds heap read in Busybox's unlzma applet leads to information leak and denial of service when crafted LZMA-compressed input is decompressed. This can be triggered by any applet/format that",
-              'diffID':        'sha256:8de001548e4b5f9bcbbb6713a1df4458914348942e3f4bc1c02cfc75f7a4793a',
-              'fixedVersions': [
-                '1.32.1-r7'
-              ],
-              'installedVersion': '1.32.1-r6',
-              'packageName':      'busybox',
-              'purl':             'pkg:apk/alpine/busybox@1.32.1-r6?arch=x86&distro=3.13.6',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42374',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42374',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42374'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'busybox: out-of-bounds read in unlzma applet leads to information leak and denial of service when crafted LZMA-compressed input is decompressed'
-            },
-            {
-              'cve':  'CVE-2021-42375',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.5',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '4.1',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-159'
-              ],
-              'description':   "An incorrect handling of a special element in Busybox's ash applet leads to denial of service when processing a crafted shell command, due to the shell mistaking specific characters for reserved characters. This may be used for DoS under rare conditions of filtered command input.",
-              'diffID':        'sha256:8de001548e4b5f9bcbbb6713a1df4458914348942e3f4bc1c02cfc75f7a4793a',
-              'fixedVersions': [
-                '1.32.1-r7'
-              ],
-              'installedVersion': '1.32.1-r6',
-              'packageName':      'busybox',
-              'purl':             'pkg:apk/alpine/busybox@1.32.1-r6?arch=x86&distro=3.13.6',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42375',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42375',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42375'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'busybox: incorrect handling of a special element in ash applet leads to denial of service when processing a crafted shell command'
-            },
-            {
-              'cve':  'CVE-2022-0778',
-              'cvss': {
-                'bitnami': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'ghsa': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'nvd': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-835'
-              ],
-              'description':   'The BN_mod_sqrt() function, which computes a modular square root, contains a bug that can cause it to loop forever for non-prime moduli. Internally this function is used when parsing certificates that contain elliptic curve public keys in compressed form or explicit elliptic curve parameters with a base point encoded in compressed form. It is possible to trigger the infinite loop by crafting a certificate that has invalid explicit curve parameters. Since certificate parsing happens prior to verification of the certificate signature, any process that parses an externally supplied certificate may thus be subject to a denial of service attack. The infinite loop can also be reached when parsing crafted private keys as they can contain explicit elliptic curve parameters. Thus vulnerable situations include: - TLS clients consuming server certificates - TLS servers consuming client certificates - Hosting providers taking certificates or private keys from customers - Certificate authorities parsing certification requests from subscribers - Anything else which parses ASN.1 elliptic curve parameters Also any other applications that use the BN_mod_sqrt() where the attacker can control the parameter values are vulnerable to this DoS issue. In the OpenSSL 1.0.2 version the public key is not parsed during initial parsing of the certificate which makes it slightly harder to trigger the infinite loop. However any operation which requires the public key from the certificate will trigger the infinite loop. In particular the attacker can use a self-signed certificate to trigger the loop during verification of the certificate signature. This issue affects OpenSSL versions 1.0.2, 1.1.1 and 3.0. It was addressed in the releases of 1.1.1n and 3.0.2 on the 15th March 2022. Fixed in OpenSSL 3.0.2 (Affected 3.0.0,3.0.1). Fixed in OpenSSL 1.1.1n (Affected 1.1.1-1.1.1m). Fixed in OpenSSL 1.0.2zd (Affected 1.0.2-1.0.2zc).',
-              'diffID':        'sha256:8de001548e4b5f9bcbbb6713a1df4458914348942e3f4bc1c02cfc75f7a4793a',
-              'fixedVersions': [
-                '1.1.1n-r0'
-              ],
-              'installedVersion': '1.1.1l-r0',
-              'packageName':      'libcrypto1.1',
-              'purl':             'pkg:apk/alpine/libcrypto1.1@1.1.1l-r0?arch=x86&distro=3.13.6',
-              'references':       [
-                'http://packetstormsecurity.com/files/167344/OpenSSL-1.0.2-1.1.1-3.0-BN_mod_sqrt-Infinite-Loop.html',
-                'http://seclists.org/fulldisclosure/2022/May/33',
-                'http://seclists.org/fulldisclosure/2022/May/35',
-                'http://seclists.org/fulldisclosure/2022/May/38',
-                'https://access.redhat.com/errata/RHSA-2022:5326',
-                'https://access.redhat.com/security/cve/CVE-2022-0778',
-                'https://bugzilla.redhat.com/2062202',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2062202',
-                'https://cert-portal.siemens.com/productcert/pdf/ssa-712929.pdf',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-0778',
-                'https://errata.almalinux.org/8/ALSA-2022-5326.html',
-                'https://errata.rockylinux.org/RLSA-2022:4899',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=3118eb64934499d93db3230748a452351d1d9a65',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=380085481c64de749a6dd25cdf0bcf4360b30f83',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=a466912611aa6cbdf550cd10601390e587451246',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=3118eb64934499d93db3230748a452351d1d9a65',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=380085481c64de749a6dd25cdf0bcf4360b30f83',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=a466912611aa6cbdf550cd10601390e587451246',
-                'https://linux.oracle.com/cve/CVE-2022-0778.html',
-                'https://linux.oracle.com/errata/ELSA-2022-9272.html',
-                'https://lists.debian.org/debian-lts-announce/2022/03/msg00023.html',
-                'https://lists.debian.org/debian-lts-announce/2022/03/msg00024.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/323SNN6ZX7PRJJWP2BUAFLPUAE42XWLZ',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/323SNN6ZX7PRJJWP2BUAFLPUAE42XWLZ/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GDB3GQVJPXJE7X5C5JN6JAA4XUDWD6E6',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GDB3GQVJPXJE7X5C5JN6JAA4XUDWD6E6/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/W6K3PR542DXWLEFFMFIDMME4CWMHJRMG',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/W6K3PR542DXWLEFFMFIDMME4CWMHJRMG/',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/323SNN6ZX7PRJJWP2BUAFLPUAE42XWLZ',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/GDB3GQVJPXJE7X5C5JN6JAA4XUDWD6E6',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/W6K3PR542DXWLEFFMFIDMME4CWMHJRMG',
-                'https://nvd.nist.gov/vuln/detail/CVE-2022-0778',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2022-0002',
-                'https://rustsec.org/advisories/RUSTSEC-2022-0014.html',
-                'https://security.gentoo.org/glsa/202210-02',
-                'https://security.netapp.com/advisory/ntap-20220321-0002',
-                'https://security.netapp.com/advisory/ntap-20220321-0002/',
-                'https://security.netapp.com/advisory/ntap-20220429-0005',
-                'https://security.netapp.com/advisory/ntap-20220429-0005/',
-                'https://security.netapp.com/advisory/ntap-20240621-0006',
-                'https://security.netapp.com/advisory/ntap-20240621-0006/',
-                'https://support.apple.com/kb/HT213255',
-                'https://support.apple.com/kb/HT213256',
-                'https://support.apple.com/kb/HT213257',
-                'https://ubuntu.com/security/notices/USN-5328-1',
-                'https://ubuntu.com/security/notices/USN-5328-2',
-                'https://ubuntu.com/security/notices/USN-6457-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2022-0778',
-                'https://www.debian.org/security/2022/dsa-5103',
-                'https://www.openssl.org/news/secadv/20220315.txt',
-                'https://www.oracle.com/security-alerts/cpuapr2022.html',
-                'https://www.oracle.com/security-alerts/cpujul2022.html',
-                'https://www.tenable.com/security/tns-2022-06',
-                'https://www.tenable.com/security/tns-2022-07',
-                'https://www.tenable.com/security/tns-2022-08',
-                'https://www.tenable.com/security/tns-2022-09'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: Infinite loop in BN_mod_sqrt() reachable when parsing certificates'
-            },
-            {
-              'cve':  'CVE-2022-2097',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N'
-                },
-                'nvd': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N'
-                },
-                'redhat': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-327'
-              ],
-              'description':   "AES OCB mode for 32-bit x86 platforms using the AES-NI assembly optimised implementation will not encrypt the entirety of the data under some circumstances. This could reveal sixteen bytes of data that was preexisting in the memory that wasn't written. In the special case of \"in place\" encryption, sixteen bytes of the plaintext would be revealed. Since OpenSSL does not support OCB based cipher suites for TLS and DTLS, they are both unaffected. Fixed in OpenSSL 3.0.5 (Affected 3.0.0-3.0.4). Fixed in OpenSSL 1.1.1q (Affected 1.1.1-1.1.1p).",
-              'diffID':        'sha256:8de001548e4b5f9bcbbb6713a1df4458914348942e3f4bc1c02cfc75f7a4793a',
-              'fixedVersions': [
-                '1.1.1q-r0'
-              ],
-              'installedVersion': '1.1.1l-r0',
-              'packageName':      'libcrypto1.1',
-              'purl':             'pkg:apk/alpine/libcrypto1.1@1.1.1l-r0?arch=x86&distro=3.13.6',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2022:6224',
-                'https://access.redhat.com/security/cve/CVE-2022-2097',
-                'https://bugzilla.redhat.com/2081494',
-                'https://bugzilla.redhat.com/2087911',
-                'https://bugzilla.redhat.com/2087913',
-                'https://bugzilla.redhat.com/2097310',
-                'https://bugzilla.redhat.com/2104905',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2081494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2097310',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2100554',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2104905',
-                'https://cert-portal.siemens.com/productcert/pdf/ssa-332410.pdf',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-1292',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-2068',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-2097',
-                'https://errata.almalinux.org/9/ALSA-2022-6224.html',
-                'https://errata.rockylinux.org/RLSA-2022:5818',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=919925673d6c9cfed3c1085497f5dfbbed5fc431',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=a98f339ddd7e8f487d6e0088d4a9a42324885a93',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=919925673d6c9cfed3c1085497f5dfbbed5fc431',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=a98f339ddd7e8f487d6e0088d4a9a42324885a93',
-                'https://github.com/alexcrichton/openssl-src-rs',
-                'https://linux.oracle.com/cve/CVE-2022-2097.html',
-                'https://linux.oracle.com/errata/ELSA-2022-9955.html',
-                'https://lists.debian.org/debian-lts-announce/2023/02/msg00019.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/R6CK57NBQFTPUMXAPJURCGXUYT76NQAK',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/R6CK57NBQFTPUMXAPJURCGXUYT76NQAK/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/V6567JERRHHJW2GNGJGKDRNHR7SNPZK7',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/V6567JERRHHJW2GNGJGKDRNHR7SNPZK7/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VCMNWKERPBKOEBNL7CLTTX3ZZCZLH7XA',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VCMNWKERPBKOEBNL7CLTTX3ZZCZLH7XA/',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/R6CK57NBQFTPUMXAPJURCGXUYT76NQAK',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/R6CK57NBQFTPUMXAPJURCGXUYT76NQAK/',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/V6567JERRHHJW2GNGJGKDRNHR7SNPZK7',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/V6567JERRHHJW2GNGJGKDRNHR7SNPZK7/',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/VCMNWKERPBKOEBNL7CLTTX3ZZCZLH7XA',
-                'https://nvd.nist.gov/vuln/detail/CVE-2022-2097',
-                'https://rustsec.org/advisories/RUSTSEC-2022-0032.html',
-                'https://security.gentoo.org/glsa/202210-02',
-                'https://security.netapp.com/advisory/ntap-20220715-0011',
-                'https://security.netapp.com/advisory/ntap-20220715-0011/',
-                'https://security.netapp.com/advisory/ntap-20230420-0008',
-                'https://security.netapp.com/advisory/ntap-20230420-0008/',
-                'https://security.netapp.com/advisory/ntap-20240621-0006',
-                'https://security.netapp.com/advisory/ntap-20240621-0006/',
-                'https://ubuntu.com/security/notices/USN-5502-1',
-                'https://ubuntu.com/security/notices/USN-6457-1',
-                'https://www.cve.org/CVERecord?id=CVE-2022-2097',
-                'https://www.debian.org/security/2023/dsa-5343',
-                'https://www.openssl.org/news/secadv/20220705.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: AES OCB fails to encrypt some bytes'
-            },
-            {
-              'cve':  'CVE-2022-0778',
-              'cvss': {
-                'bitnami': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'ghsa': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'nvd': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-835'
-              ],
-              'description':   'The BN_mod_sqrt() function, which computes a modular square root, contains a bug that can cause it to loop forever for non-prime moduli. Internally this function is used when parsing certificates that contain elliptic curve public keys in compressed form or explicit elliptic curve parameters with a base point encoded in compressed form. It is possible to trigger the infinite loop by crafting a certificate that has invalid explicit curve parameters. Since certificate parsing happens prior to verification of the certificate signature, any process that parses an externally supplied certificate may thus be subject to a denial of service attack. The infinite loop can also be reached when parsing crafted private keys as they can contain explicit elliptic curve parameters. Thus vulnerable situations include: - TLS clients consuming server certificates - TLS servers consuming client certificates - Hosting providers taking certificates or private keys from customers - Certificate authorities parsing certification requests from subscribers - Anything else which parses ASN.1 elliptic curve parameters Also any other applications that use the BN_mod_sqrt() where the attacker can control the parameter values are vulnerable to this DoS issue. In the OpenSSL 1.0.2 version the public key is not parsed during initial parsing of the certificate which makes it slightly harder to trigger the infinite loop. However any operation which requires the public key from the certificate will trigger the infinite loop. In particular the attacker can use a self-signed certificate to trigger the loop during verification of the certificate signature. This issue affects OpenSSL versions 1.0.2, 1.1.1 and 3.0. It was addressed in the releases of 1.1.1n and 3.0.2 on the 15th March 2022. Fixed in OpenSSL 3.0.2 (Affected 3.0.0,3.0.1). Fixed in OpenSSL 1.1.1n (Affected 1.1.1-1.1.1m). Fixed in OpenSSL 1.0.2zd (Affected 1.0.2-1.0.2zc).',
-              'diffID':        'sha256:8de001548e4b5f9bcbbb6713a1df4458914348942e3f4bc1c02cfc75f7a4793a',
-              'fixedVersions': [
-                '1.1.1n-r0'
-              ],
-              'installedVersion': '1.1.1l-r0',
-              'packageName':      'libssl1.1',
-              'purl':             'pkg:apk/alpine/libssl1.1@1.1.1l-r0?arch=x86&distro=3.13.6',
-              'references':       [
-                'http://packetstormsecurity.com/files/167344/OpenSSL-1.0.2-1.1.1-3.0-BN_mod_sqrt-Infinite-Loop.html',
-                'http://seclists.org/fulldisclosure/2022/May/33',
-                'http://seclists.org/fulldisclosure/2022/May/35',
-                'http://seclists.org/fulldisclosure/2022/May/38',
-                'https://access.redhat.com/errata/RHSA-2022:5326',
-                'https://access.redhat.com/security/cve/CVE-2022-0778',
-                'https://bugzilla.redhat.com/2062202',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2062202',
-                'https://cert-portal.siemens.com/productcert/pdf/ssa-712929.pdf',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-0778',
-                'https://errata.almalinux.org/8/ALSA-2022-5326.html',
-                'https://errata.rockylinux.org/RLSA-2022:4899',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=3118eb64934499d93db3230748a452351d1d9a65',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=380085481c64de749a6dd25cdf0bcf4360b30f83',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=a466912611aa6cbdf550cd10601390e587451246',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=3118eb64934499d93db3230748a452351d1d9a65',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=380085481c64de749a6dd25cdf0bcf4360b30f83',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=a466912611aa6cbdf550cd10601390e587451246',
-                'https://linux.oracle.com/cve/CVE-2022-0778.html',
-                'https://linux.oracle.com/errata/ELSA-2022-9272.html',
-                'https://lists.debian.org/debian-lts-announce/2022/03/msg00023.html',
-                'https://lists.debian.org/debian-lts-announce/2022/03/msg00024.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/323SNN6ZX7PRJJWP2BUAFLPUAE42XWLZ',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/323SNN6ZX7PRJJWP2BUAFLPUAE42XWLZ/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GDB3GQVJPXJE7X5C5JN6JAA4XUDWD6E6',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GDB3GQVJPXJE7X5C5JN6JAA4XUDWD6E6/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/W6K3PR542DXWLEFFMFIDMME4CWMHJRMG',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/W6K3PR542DXWLEFFMFIDMME4CWMHJRMG/',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/323SNN6ZX7PRJJWP2BUAFLPUAE42XWLZ',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/GDB3GQVJPXJE7X5C5JN6JAA4XUDWD6E6',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/W6K3PR542DXWLEFFMFIDMME4CWMHJRMG',
-                'https://nvd.nist.gov/vuln/detail/CVE-2022-0778',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2022-0002',
-                'https://rustsec.org/advisories/RUSTSEC-2022-0014.html',
-                'https://security.gentoo.org/glsa/202210-02',
-                'https://security.netapp.com/advisory/ntap-20220321-0002',
-                'https://security.netapp.com/advisory/ntap-20220321-0002/',
-                'https://security.netapp.com/advisory/ntap-20220429-0005',
-                'https://security.netapp.com/advisory/ntap-20220429-0005/',
-                'https://security.netapp.com/advisory/ntap-20240621-0006',
-                'https://security.netapp.com/advisory/ntap-20240621-0006/',
-                'https://support.apple.com/kb/HT213255',
-                'https://support.apple.com/kb/HT213256',
-                'https://support.apple.com/kb/HT213257',
-                'https://ubuntu.com/security/notices/USN-5328-1',
-                'https://ubuntu.com/security/notices/USN-5328-2',
-                'https://ubuntu.com/security/notices/USN-6457-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2022-0778',
-                'https://www.debian.org/security/2022/dsa-5103',
-                'https://www.openssl.org/news/secadv/20220315.txt',
-                'https://www.oracle.com/security-alerts/cpuapr2022.html',
-                'https://www.oracle.com/security-alerts/cpujul2022.html',
-                'https://www.tenable.com/security/tns-2022-06',
-                'https://www.tenable.com/security/tns-2022-07',
-                'https://www.tenable.com/security/tns-2022-08',
-                'https://www.tenable.com/security/tns-2022-09'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: Infinite loop in BN_mod_sqrt() reachable when parsing certificates'
-            },
-            {
-              'cve':  'CVE-2022-2097',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N'
-                },
-                'nvd': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N'
-                },
-                'redhat': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-327'
-              ],
-              'description':   "AES OCB mode for 32-bit x86 platforms using the AES-NI assembly optimised implementation will not encrypt the entirety of the data under some circumstances. This could reveal sixteen bytes of data that was preexisting in the memory that wasn't written. In the special case of \"in place\" encryption, sixteen bytes of the plaintext would be revealed. Since OpenSSL does not support OCB based cipher suites for TLS and DTLS, they are both unaffected. Fixed in OpenSSL 3.0.5 (Affected 3.0.0-3.0.4). Fixed in OpenSSL 1.1.1q (Affected 1.1.1-1.1.1p).",
-              'diffID':        'sha256:8de001548e4b5f9bcbbb6713a1df4458914348942e3f4bc1c02cfc75f7a4793a',
-              'fixedVersions': [
-                '1.1.1q-r0'
-              ],
-              'installedVersion': '1.1.1l-r0',
-              'packageName':      'libssl1.1',
-              'purl':             'pkg:apk/alpine/libssl1.1@1.1.1l-r0?arch=x86&distro=3.13.6',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2022:6224',
-                'https://access.redhat.com/security/cve/CVE-2022-2097',
-                'https://bugzilla.redhat.com/2081494',
-                'https://bugzilla.redhat.com/2087911',
-                'https://bugzilla.redhat.com/2087913',
-                'https://bugzilla.redhat.com/2097310',
-                'https://bugzilla.redhat.com/2104905',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2081494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2097310',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2100554',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2104905',
-                'https://cert-portal.siemens.com/productcert/pdf/ssa-332410.pdf',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-1292',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-2068',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-2097',
-                'https://errata.almalinux.org/9/ALSA-2022-6224.html',
-                'https://errata.rockylinux.org/RLSA-2022:5818',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=919925673d6c9cfed3c1085497f5dfbbed5fc431',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=a98f339ddd7e8f487d6e0088d4a9a42324885a93',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=919925673d6c9cfed3c1085497f5dfbbed5fc431',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=a98f339ddd7e8f487d6e0088d4a9a42324885a93',
-                'https://github.com/alexcrichton/openssl-src-rs',
-                'https://linux.oracle.com/cve/CVE-2022-2097.html',
-                'https://linux.oracle.com/errata/ELSA-2022-9955.html',
-                'https://lists.debian.org/debian-lts-announce/2023/02/msg00019.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/R6CK57NBQFTPUMXAPJURCGXUYT76NQAK',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/R6CK57NBQFTPUMXAPJURCGXUYT76NQAK/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/V6567JERRHHJW2GNGJGKDRNHR7SNPZK7',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/V6567JERRHHJW2GNGJGKDRNHR7SNPZK7/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VCMNWKERPBKOEBNL7CLTTX3ZZCZLH7XA',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VCMNWKERPBKOEBNL7CLTTX3ZZCZLH7XA/',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/R6CK57NBQFTPUMXAPJURCGXUYT76NQAK',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/R6CK57NBQFTPUMXAPJURCGXUYT76NQAK/',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/V6567JERRHHJW2GNGJGKDRNHR7SNPZK7',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/V6567JERRHHJW2GNGJGKDRNHR7SNPZK7/',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/VCMNWKERPBKOEBNL7CLTTX3ZZCZLH7XA',
-                'https://nvd.nist.gov/vuln/detail/CVE-2022-2097',
-                'https://rustsec.org/advisories/RUSTSEC-2022-0032.html',
-                'https://security.gentoo.org/glsa/202210-02',
-                'https://security.netapp.com/advisory/ntap-20220715-0011',
-                'https://security.netapp.com/advisory/ntap-20220715-0011/',
-                'https://security.netapp.com/advisory/ntap-20230420-0008',
-                'https://security.netapp.com/advisory/ntap-20230420-0008/',
-                'https://security.netapp.com/advisory/ntap-20240621-0006',
-                'https://security.netapp.com/advisory/ntap-20240621-0006/',
-                'https://ubuntu.com/security/notices/USN-5502-1',
-                'https://ubuntu.com/security/notices/USN-6457-1',
-                'https://www.cve.org/CVERecord?id=CVE-2022-2097',
-                'https://www.debian.org/security/2023/dsa-5343',
-                'https://www.openssl.org/news/secadv/20220705.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: AES OCB fails to encrypt some bytes'
-            },
-            {
-              'cve':  'CVE-2021-42378',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the getvar_i function",
-              'diffID':        'sha256:8de001548e4b5f9bcbbb6713a1df4458914348942e3f4bc1c02cfc75f7a4793a',
-              'fixedVersions': [
-                '1.32.1-r7'
-              ],
-              'installedVersion': '1.32.1-r6',
-              'packageName':      'ssl_client',
-              'purl':             'pkg:apk/alpine/ssl_client@1.32.1-r6?arch=x86&distro=3.13.6',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42378',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42378',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42378'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the getvar_i()'
-            },
-            {
-              'cve':  'CVE-2021-42379',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the next_input_file function",
-              'diffID':        'sha256:8de001548e4b5f9bcbbb6713a1df4458914348942e3f4bc1c02cfc75f7a4793a',
-              'fixedVersions': [
-                '1.32.1-r7'
-              ],
-              'installedVersion': '1.32.1-r6',
-              'packageName':      'ssl_client',
-              'purl':             'pkg:apk/alpine/ssl_client@1.32.1-r6?arch=x86&distro=3.13.6',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42379',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42379',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42379'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the next_input_file()'
-            },
-            {
-              'cve':  'CVE-2021-42380',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the clrvar function",
-              'diffID':        'sha256:8de001548e4b5f9bcbbb6713a1df4458914348942e3f4bc1c02cfc75f7a4793a',
-              'fixedVersions': [
-                '1.32.1-r7'
-              ],
-              'installedVersion': '1.32.1-r6',
-              'packageName':      'ssl_client',
-              'purl':             'pkg:apk/alpine/ssl_client@1.32.1-r6?arch=x86&distro=3.13.6',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42380',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42380',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42380'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the clrvar()'
-            },
-            {
-              'cve':  'CVE-2021-42381',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the hash_init function",
-              'diffID':        'sha256:8de001548e4b5f9bcbbb6713a1df4458914348942e3f4bc1c02cfc75f7a4793a',
-              'fixedVersions': [
-                '1.32.1-r7'
-              ],
-              'installedVersion': '1.32.1-r6',
-              'packageName':      'ssl_client',
-              'purl':             'pkg:apk/alpine/ssl_client@1.32.1-r6?arch=x86&distro=3.13.6',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42381',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42381',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42381'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the hash_init()'
-            },
-            {
-              'cve':  'CVE-2021-42382',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the getvar_s function",
-              'diffID':        'sha256:8de001548e4b5f9bcbbb6713a1df4458914348942e3f4bc1c02cfc75f7a4793a',
-              'fixedVersions': [
-                '1.32.1-r7'
-              ],
-              'installedVersion': '1.32.1-r6',
-              'packageName':      'ssl_client',
-              'purl':             'pkg:apk/alpine/ssl_client@1.32.1-r6?arch=x86&distro=3.13.6',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42382',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42382',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42382'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the getvar_s()'
-            },
-            {
-              'cve':  'CVE-2021-42383',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the evaluate function",
-              'diffID':        'sha256:8de001548e4b5f9bcbbb6713a1df4458914348942e3f4bc1c02cfc75f7a4793a',
-              'fixedVersions': [
-                '1.32.1-r7'
-              ],
-              'installedVersion': '1.32.1-r6',
-              'packageName':      'ssl_client',
-              'purl':             'pkg:apk/alpine/ssl_client@1.32.1-r6?arch=x86&distro=3.13.6',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42383',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42383',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42383'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the evaluate()'
-            },
-            {
-              'cve':  'CVE-2021-42384',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the handle_special function",
-              'diffID':        'sha256:8de001548e4b5f9bcbbb6713a1df4458914348942e3f4bc1c02cfc75f7a4793a',
-              'fixedVersions': [
-                '1.32.1-r7'
-              ],
-              'installedVersion': '1.32.1-r6',
-              'packageName':      'ssl_client',
-              'purl':             'pkg:apk/alpine/ssl_client@1.32.1-r6?arch=x86&distro=3.13.6',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42384',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42384',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42384'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the handle_special()'
-            },
-            {
-              'cve':  'CVE-2021-42385',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the evaluate function",
-              'diffID':        'sha256:8de001548e4b5f9bcbbb6713a1df4458914348942e3f4bc1c02cfc75f7a4793a',
-              'fixedVersions': [
-                '1.32.1-r7'
-              ],
-              'installedVersion': '1.32.1-r6',
-              'packageName':      'ssl_client',
-              'purl':             'pkg:apk/alpine/ssl_client@1.32.1-r6?arch=x86&distro=3.13.6',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42385',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42385',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42385'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the evaluate()'
-            },
-            {
-              'cve':  'CVE-2021-42386',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the nvalloc function",
-              'diffID':        'sha256:8de001548e4b5f9bcbbb6713a1df4458914348942e3f4bc1c02cfc75f7a4793a',
-              'fixedVersions': [
-                '1.32.1-r7'
-              ],
-              'installedVersion': '1.32.1-r6',
-              'packageName':      'ssl_client',
-              'purl':             'pkg:apk/alpine/ssl_client@1.32.1-r6?arch=x86&distro=3.13.6',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42386',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42386',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42386'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the nvalloc()'
-            },
-            {
-              'cve':  'CVE-2022-28391',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '8.8',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-88'
-              ],
-              'description':   "BusyBox through 1.35.0 allows remote attackers to execute arbitrary code if netstat is used to print a DNS PTR record's value to a VT compatible terminal. Alternatively, the attacker could choose to change the terminal's colors.",
-              'diffID':        'sha256:8de001548e4b5f9bcbbb6713a1df4458914348942e3f4bc1c02cfc75f7a4793a',
-              'fixedVersions': [
-                '1.32.1-r8'
-              ],
-              'installedVersion': '1.32.1-r6',
-              'packageName':      'ssl_client',
-              'purl':             'pkg:apk/alpine/ssl_client@1.32.1-r6?arch=x86&distro=3.13.6',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2022-28391',
-                'https://git.alpinelinux.org/aports/plain/main/busybox/0001-libbb-sockaddr2str-ensure-only-printable-characters-.patch',
-                'https://git.alpinelinux.org/aports/plain/main/busybox/0002-nslookup-sanitize-all-printed-strings-with-printable.patch',
-                'https://gitlab.alpinelinux.org/alpine/aports/-/issues/13661',
-                'https://nvd.nist.gov/vuln/detail/CVE-2022-28391',
-                'https://www.cve.org/CVERecord?id=CVE-2022-28391'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: remote attackers may execute arbitrary code if netstat is used'
-            },
-            {
-              'cve':  'CVE-2022-30065',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.8',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.2',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox 1.35-x's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the copyvar function.",
-              'diffID':        'sha256:8de001548e4b5f9bcbbb6713a1df4458914348942e3f4bc1c02cfc75f7a4793a',
-              'fixedVersions': [
-                '1.32.1-r9'
-              ],
-              'installedVersion': '1.32.1-r6',
-              'packageName':      'ssl_client',
-              'purl':             'pkg:apk/alpine/ssl_client@1.32.1-r6?arch=x86&distro=3.13.6',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2022-30065',
-                'https://bugs.busybox.net/show_bug.cgi?id=14781',
-                'https://cert-portal.siemens.com/productcert/pdf/ssa-333517.pdf',
-                'https://nvd.nist.gov/vuln/detail/CVE-2022-30065',
-                'https://www.cve.org/CVERecord?id=CVE-2022-30065'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      "busybox: A use-after-free in Busybox's awk applet leads to denial of service"
-            },
-            {
-              'cve':  'CVE-2021-42374',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '5.7',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-125'
-              ],
-              'description':   "An out-of-bounds heap read in Busybox's unlzma applet leads to information leak and denial of service when crafted LZMA-compressed input is decompressed. This can be triggered by any applet/format that",
-              'diffID':        'sha256:8de001548e4b5f9bcbbb6713a1df4458914348942e3f4bc1c02cfc75f7a4793a',
-              'fixedVersions': [
-                '1.32.1-r7'
-              ],
-              'installedVersion': '1.32.1-r6',
-              'packageName':      'ssl_client',
-              'purl':             'pkg:apk/alpine/ssl_client@1.32.1-r6?arch=x86&distro=3.13.6',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42374',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42374',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42374'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'busybox: out-of-bounds read in unlzma applet leads to information leak and denial of service when crafted LZMA-compressed input is decompressed'
-            },
-            {
-              'cve':  'CVE-2021-42375',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.5',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '4.1',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-159'
-              ],
-              'description':   "An incorrect handling of a special element in Busybox's ash applet leads to denial of service when processing a crafted shell command, due to the shell mistaking specific characters for reserved characters. This may be used for DoS under rare conditions of filtered command input.",
-              'diffID':        'sha256:8de001548e4b5f9bcbbb6713a1df4458914348942e3f4bc1c02cfc75f7a4793a',
-              'fixedVersions': [
-                '1.32.1-r7'
-              ],
-              'installedVersion': '1.32.1-r6',
-              'packageName':      'ssl_client',
-              'purl':             'pkg:apk/alpine/ssl_client@1.32.1-r6?arch=x86&distro=3.13.6',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42375',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42375',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42375'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'busybox: incorrect handling of a special element in ash applet leads to denial of service when processing a crafted shell command'
-            },
-            {
-              'cve':  'CVE-2022-37434',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '9.8',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-787',
-                'CWE-120'
-              ],
-              'description':   'zlib through 1.2.12 has a heap-based buffer over-read or buffer overflow in inflate in inflate.c via a large gzip header extra field. NOTE: only applications that call inflateGetHeader are affected. Some common applications bundle the affected zlib source code but may be unable to call inflateGetHeader (e.g., see the nodejs/node reference).',
-              'diffID':        'sha256:8de001548e4b5f9bcbbb6713a1df4458914348942e3f4bc1c02cfc75f7a4793a',
-              'fixedVersions': [
-                '1.2.12-r2'
-              ],
-              'installedVersion': '1.2.11-r3',
-              'packageName':      'zlib',
-              'purl':             'pkg:apk/alpine/zlib@1.2.11-r3?arch=x86&distro=3.13.6',
-              'references':       [
-                'http://seclists.org/fulldisclosure/2022/Oct/37',
-                'http://seclists.org/fulldisclosure/2022/Oct/38',
-                'http://seclists.org/fulldisclosure/2022/Oct/41',
-                'http://seclists.org/fulldisclosure/2022/Oct/42',
-                'http://www.openwall.com/lists/oss-security/2022/08/05/2',
-                'http://www.openwall.com/lists/oss-security/2022/08/09/1',
-                'https://access.redhat.com/errata/RHSA-2022:8291',
-                'https://access.redhat.com/security/cve/CVE-2022-37434',
-                'https://bugzilla.redhat.com/2116639',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2053198',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2077431',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2081296',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2116639',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-37434',
-                'https://errata.almalinux.org/9/ALSA-2022-8291.html',
-                'https://errata.rockylinux.org/RLSA-2022:8291',
-                'https://github.com/curl/curl/issues/9271',
-                'https://github.com/ivd38/zlib_overflow',
-                'https://github.com/madler/zlib/blob/21767c654d31d2dccdde4330529775c6c5fd5389/zlib.h#L1062-L1063',
-                'https://github.com/madler/zlib/commit/1eb7682f845ac9e9bf9ae35bbfb3bad5dacbd91d',
-                'https://github.com/madler/zlib/commit/eff308af425b67093bab25f80f1ae950166bece1',
-                'https://github.com/nodejs/node/blob/75b68c6e4db515f76df73af476eccf382bbcb00a/deps/zlib/inflate.c#L762-L764',
-                'https://linux.oracle.com/cve/CVE-2022-37434.html',
-                'https://linux.oracle.com/errata/ELSA-2023-1095.html',
-                'https://lists.debian.org/debian-lts-announce/2022/09/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JWN4VE3JQR4O2SOUS5TXNLANRPMHWV4I/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NMBOJ77A7T7PQCARMDUK75TE6LLESZ3O/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PAVPQNCG3XRLCLNSQRM3KAN5ZFMVXVTY/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/X5U7OTKZSHY2I3ZFJSR2SHFHW72RKGDK/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YRQAI7H4M4RQZ2IWZUEEXECBE5D56BH2/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2022-37434',
-                'https://security.netapp.com/advisory/ntap-20220901-0005/',
-                'https://security.netapp.com/advisory/ntap-20230427-0007/',
-                'https://support.apple.com/kb/HT213488',
-                'https://support.apple.com/kb/HT213489',
-                'https://support.apple.com/kb/HT213490',
-                'https://support.apple.com/kb/HT213491',
-                'https://support.apple.com/kb/HT213493',
-                'https://support.apple.com/kb/HT213494',
-                'https://ubuntu.com/security/notices/USN-5570-1',
-                'https://ubuntu.com/security/notices/USN-5570-2',
-                'https://ubuntu.com/security/notices/USN-5573-1',
-                'https://ubuntu.com/security/notices/USN-6736-1',
-                'https://ubuntu.com/security/notices/USN-6736-2',
-                'https://www.cve.org/CVERecord?id=CVE-2022-37434',
-                'https://www.debian.org/security/2022/dsa-5218'
-              ],
-              'severity':   'CRITICAL',
-              'suppressed': false,
-              'title':      'zlib: heap-based buffer over-read and overflow in inflate() in inflate.c via a large gzip header extra field'
-            },
-            {
-              'cve':  'CVE-2018-25032',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'nvd': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '8.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-787'
-              ],
-              'description':   'zlib before 1.2.12 allows memory corruption when deflating (i.e., when compressing) if the input has many distant matches.',
-              'diffID':        'sha256:8de001548e4b5f9bcbbb6713a1df4458914348942e3f4bc1c02cfc75f7a4793a',
-              'fixedVersions': [
-                '1.2.12-r0'
-              ],
-              'installedVersion': '1.2.11-r3',
-              'packageName':      'zlib',
-              'purl':             'pkg:apk/alpine/zlib@1.2.11-r3?arch=x86&distro=3.13.6',
-              'references':       [
-                'http://seclists.org/fulldisclosure/2022/May/33',
-                'http://seclists.org/fulldisclosure/2022/May/35',
-                'http://seclists.org/fulldisclosure/2022/May/38',
-                'http://www.openwall.com/lists/oss-security/2022/03/25/2',
-                'http://www.openwall.com/lists/oss-security/2022/03/26/1',
-                'https://access.redhat.com/errata/RHSA-2022:8420',
-                'https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-25032.json',
-                'https://access.redhat.com/security/cve/CVE-2018-25032',
-                'https://bugzilla.redhat.com/2067945',
-                'https://cert-portal.siemens.com/productcert/pdf/ssa-333517.pdf',
-                'https://errata.almalinux.org/9/ALSA-2022-8420.html',
-                'https://github.com/advisories/GHSA-jc36-42cf-vqwj',
-                'https://github.com/madler/zlib/commit/5c44459c3b28a9bd3283aaceab7c615f8020c531',
-                'https://github.com/madler/zlib/compare/v1.2.11...v1.2.12',
-                'https://github.com/madler/zlib/issues/605',
-                'https://github.com/rubysec/ruby-advisory-db/blob/master/gems/nokogiri/CVE-2018-25032.yml',
-                'https://github.com/sparklemotion/nokogiri/releases/tag/v1.13.4',
-                'https://github.com/sparklemotion/nokogiri/security/advisories/GHSA-v6gp-9mmm-c6p5',
-                'https://groups.google.com/g/ruby-security-ann/c/vX7qSjsvWis/m/TJWN4oOKBwAJ',
-                'https://linux.oracle.com/cve/CVE-2018-25032.html',
-                'https://linux.oracle.com/errata/ELSA-2022-9565.html',
-                'https://lists.debian.org/debian-lts-announce/2022/04/msg00000.html',
-                'https://lists.debian.org/debian-lts-announce/2022/05/msg00008.html',
-                'https://lists.debian.org/debian-lts-announce/2022/09/msg00023.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DCZFIJBJTZ7CL5QXBFKTQ22Q26VINRUF/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DF62MVMH3QUGMBDCB3DY2ERQ6EBHTADB/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JZZPTWRYQULAOL3AW7RZJNVZ2UONXCV4/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NS2D2GFPFGOJUL4WQ3DUAY7HF4VWQ77F/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VOKNP2L734AEL47NRYGVZIKEFOUBQY5Y/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/XOKFMSNQ5D5WGMALBNBXU3GE442V74WU/',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/DCZFIJBJTZ7CL5QXBFKTQ22Q26VINRUF',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/DCZFIJBJTZ7CL5QXBFKTQ22Q26VINRUF/',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/DF62MVMH3QUGMBDCB3DY2ERQ6EBHTADB',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/DF62MVMH3QUGMBDCB3DY2ERQ6EBHTADB/',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/JZZPTWRYQULAOL3AW7RZJNVZ2UONXCV4',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/JZZPTWRYQULAOL3AW7RZJNVZ2UONXCV4/',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/NS2D2GFPFGOJUL4WQ3DUAY7HF4VWQ77F',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/NS2D2GFPFGOJUL4WQ3DUAY7HF4VWQ77F/',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/VOKNP2L734AEL47NRYGVZIKEFOUBQY5Y',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/VOKNP2L734AEL47NRYGVZIKEFOUBQY5Y/',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/XOKFMSNQ5D5WGMALBNBXU3GE442V74WU',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/XOKFMSNQ5D5WGMALBNBXU3GE442V74WU/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2018-25032',
-                'https://security.gentoo.org/glsa/202210-42',
-                'https://security.netapp.com/advisory/ntap-20220526-0009',
-                'https://security.netapp.com/advisory/ntap-20220526-0009/',
-                'https://security.netapp.com/advisory/ntap-20220729-0004',
-                'https://security.netapp.com/advisory/ntap-20220729-0004/',
-                'https://support.apple.com/kb/HT213255',
-                'https://support.apple.com/kb/HT213256',
-                'https://support.apple.com/kb/HT213257',
-                'https://ubuntu.com/security/notices/USN-5355-1',
-                'https://ubuntu.com/security/notices/USN-5355-2',
-                'https://ubuntu.com/security/notices/USN-5359-1',
-                'https://ubuntu.com/security/notices/USN-5359-2',
-                'https://ubuntu.com/security/notices/USN-5739-1',
-                'https://ubuntu.com/security/notices/USN-6736-1',
-                'https://ubuntu.com/security/notices/USN-6736-2',
-                'https://www.cve.org/CVERecord?id=CVE-2018-25032',
-                'https://www.debian.org/security/2022/dsa-5111',
-                'https://www.openwall.com/lists/oss-security/2022/03/24/1',
-                'https://www.openwall.com/lists/oss-security/2022/03/28/1',
-                'https://www.openwall.com/lists/oss-security/2022/03/28/3',
-                'https://www.oracle.com/security-alerts/cpujul2022.html'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'zlib: A flaw found in zlib when compressing (not decompressing) certain inputs'
-            }
-          ]
-        }
-      ],
-      'summary': {
-        'critical':   1,
-        'high':       25,
-        'low':        0,
-        'medium':     6,
-        'suppressed': 0,
-        'unknown':    0
-      }
-    }
-  },
-  {
-    'id':    'default/d316bf9e6db7f3f45bc84da646170acc32017034c6485a14e3623566a7686b79',
-    'type':  'storage.sbomscanner.kubewarden.io.vulnerabilityreport',
-    'links': {
-      'patch':  'https://localhost:8005/v1/storage.sbomscanner.kubewarden.io.vulnerabilityreports/default/d316bf9e6db7f3f45bc84da646170acc32017034c6485a14e3623566a7686b79',
-      'remove': 'https://localhost:8005/v1/storage.sbomscanner.kubewarden.io.vulnerabilityreports/default/d316bf9e6db7f3f45bc84da646170acc32017034c6485a14e3623566a7686b79',
-      'self':   'https://localhost:8005/v1/storage.sbomscanner.kubewarden.io.vulnerabilityreports/default/d316bf9e6db7f3f45bc84da646170acc32017034c6485a14e3623566a7686b79',
-      'update': 'https://localhost:8005/v1/storage.sbomscanner.kubewarden.io.vulnerabilityreports/default/d316bf9e6db7f3f45bc84da646170acc32017034c6485a14e3623566a7686b79',
-      'view':   'https://localhost:8005/apis/storage.sbomscanner.kubewarden.io/v1alpha1/namespaces/default/vulnerabilityreports/d316bf9e6db7f3f45bc84da646170acc32017034c6485a14e3623566a7686b79'
-    },
-    'apiVersion':    'storage.sbomscanner.kubewarden.io/v1alpha1',
-    'imageMetadata': {
-      'digest':      'sha256:47391b9954d5b3de74ecf108a53eced4e63a56dd8a77dfc9a3542dd658055172',
-      'platform':    'linux/riscv64',
-      'registry':    'lsong-demo1',
-      'registryURI': 'registry-1.docker.io',
-      'repository':  'library/alpine',
-      'tag':         '3.20.5'
-    },
-    'kind':     'VulnerabilityReport',
-    'metadata': {
-      'creationTimestamp': '2026-01-14T18:51:36Z',
-      'fields':            [
-        'd316bf9e6db7f3f45bc84da646170acc32017034c6485a14e3623566a7686b79',
-        'registry-1.docker.io/library/alpine:3.20.5',
-        'linux/riscv64',
-        '18 (0 suppressed)'
-      ],
-      'labels': {
-        'app.kubernetes.io/managed-by':          'sbomscanner',
-        'app.kubernetes.io/part-of':             'sbomscanner',
-        'sbomscanner.kubewarden.io/scanjob-uid': '445c600a-c4b6-40b3-bd71-f2d2140a37d5'
-      },
-      'name':            'd316bf9e6db7f3f45bc84da646170acc32017034c6485a14e3623566a7686b79',
-      'namespace':       'default',
-      'ownerReferences': [
-        {
-          'apiVersion':         'storage.sbomscanner.kubewarden.io/v1alpha1',
-          'blockOwnerDeletion': true,
-          'controller':         true,
-          'kind':               'SBOM',
-          'name':               'd316bf9e6db7f3f45bc84da646170acc32017034c6485a14e3623566a7686b79',
-          'uid':                'b92d229e-ac61-4a17-aa89-084e4b60d0a8'
-        }
-      ],
-      'relationships': [
-        {
-          'fromId':   'default/d316bf9e6db7f3f45bc84da646170acc32017034c6485a14e3623566a7686b79',
-          'fromType': 'storage.sbomscanner.kubewarden.io.sbom',
-          'rel':      'owner',
-          'state':    'active',
-          'message':  'Resource is current'
-        }
-      ],
-      'resourceVersion': '1',
-      'state':           {
-        'error':         false,
-        'message':       'Resource is current',
-        'name':          'active',
-        'transitioning': false
-      },
-      'uid': '2d05fc9f-8c76-4c47-992c-bc434cd9deb1'
-    },
-    'report': {
-      'results': [
-        {
-          'class':           'os-pkgs',
-          'target':          '/var/run/worker/trivy.sbom.2789872089.json (alpine 3.20.5)',
-          'type':            'alpine',
-          'vulnerabilities': [
-            {
-              'cve':  'CVE-2024-58251',
-              'cwes': [
-                'CWE-150'
-              ],
-              'description':   'In netstat in BusyBox through 1.37.0, local users can launch of network application with an argv[0] containing an ANSI terminal escape sequence, leading to a denial of service (terminal locked up) when netstat is used by a victim.',
-              'diffID':        'sha256:945d14811b65488b1ae0b02ed9ae97066ef9fe7aa237336794b7a50ceeea4d80',
-              'fixedVersions': [
-                '1.36.1-r31'
-              ],
-              'installedVersion': '1.36.1-r29',
-              'packageName':      'busybox',
-              'purl':             'pkg:apk/alpine/busybox@1.36.1-r29?arch=riscv64&distro=3.20.5',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2025/04/23/6',
-                'https://bugs.busybox.net/show_bug.cgi?id=15922',
-                'https://www.busybox.net',
-                'https://www.busybox.net/downloads/',
-                'https://www.cve.org/CVERecord?id=CVE-2024-58251'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'In netstat in BusyBox through 1.37.0, local users can launch of networ ...'
-            },
-            {
-              'cve':  'CVE-2025-46394',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '3.3',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-451'
-              ],
-              'description':   'In tar in BusyBox through 1.37.0, a TAR archive can have filenames hidden from a listing through the use of terminal escape sequences.',
-              'diffID':        'sha256:945d14811b65488b1ae0b02ed9ae97066ef9fe7aa237336794b7a50ceeea4d80',
-              'fixedVersions': [
-                '1.36.1-r31'
-              ],
-              'installedVersion': '1.36.1-r29',
-              'packageName':      'busybox',
-              'purl':             'pkg:apk/alpine/busybox@1.36.1-r29?arch=riscv64&distro=3.20.5',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2025/04/23/5',
-                'http://www.openwall.com/lists/oss-security/2025/04/24/3',
-                'https://bugs.busybox.net/show_bug.cgi?id=16018',
-                'https://lists.busybox.net/pipermail/busybox/2024-July/090806.html',
-                'https://lists.busybox.net/pipermail/busybox/2024-July/090814.html',
-                'https://www.busybox.net',
-                'https://www.busybox.net/downloads/',
-                'https://www.cve.org/CVERecord?id=CVE-2025-46394',
-                'https://www.openwall.com/lists/oss-security/2025/04/23/1'
-              ],
-              'severity':   'LOW',
-              'suppressed': false,
-              'title':      'In tar in BusyBox through 1.37.0, a TAR archive can have filenames hid ...'
-            },
-            {
-              'cve':  'CVE-2024-58251',
-              'cwes': [
-                'CWE-150'
-              ],
-              'description':   'In netstat in BusyBox through 1.37.0, local users can launch of network application with an argv[0] containing an ANSI terminal escape sequence, leading to a denial of service (terminal locked up) when netstat is used by a victim.',
-              'diffID':        'sha256:945d14811b65488b1ae0b02ed9ae97066ef9fe7aa237336794b7a50ceeea4d80',
-              'fixedVersions': [
-                '1.36.1-r31'
-              ],
-              'installedVersion': '1.36.1-r29',
-              'packageName':      'busybox-binsh',
-              'purl':             'pkg:apk/alpine/busybox-binsh@1.36.1-r29?arch=riscv64&distro=3.20.5',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2025/04/23/6',
-                'https://bugs.busybox.net/show_bug.cgi?id=15922',
-                'https://www.busybox.net',
-                'https://www.busybox.net/downloads/',
-                'https://www.cve.org/CVERecord?id=CVE-2024-58251'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'In netstat in BusyBox through 1.37.0, local users can launch of networ ...'
-            },
-            {
-              'cve':  'CVE-2025-46394',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '3.3',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-451'
-              ],
-              'description':   'In tar in BusyBox through 1.37.0, a TAR archive can have filenames hidden from a listing through the use of terminal escape sequences.',
-              'diffID':        'sha256:945d14811b65488b1ae0b02ed9ae97066ef9fe7aa237336794b7a50ceeea4d80',
-              'fixedVersions': [
-                '1.36.1-r31'
-              ],
-              'installedVersion': '1.36.1-r29',
-              'packageName':      'busybox-binsh',
-              'purl':             'pkg:apk/alpine/busybox-binsh@1.36.1-r29?arch=riscv64&distro=3.20.5',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2025/04/23/5',
-                'http://www.openwall.com/lists/oss-security/2025/04/24/3',
-                'https://bugs.busybox.net/show_bug.cgi?id=16018',
-                'https://lists.busybox.net/pipermail/busybox/2024-July/090806.html',
-                'https://lists.busybox.net/pipermail/busybox/2024-July/090814.html',
-                'https://www.busybox.net',
-                'https://www.busybox.net/downloads/',
-                'https://www.cve.org/CVERecord?id=CVE-2025-46394',
-                'https://www.openwall.com/lists/oss-security/2025/04/23/1'
-              ],
-              'severity':   'LOW',
-              'suppressed': false,
-              'title':      'In tar in BusyBox through 1.37.0, a TAR archive can have filenames hid ...'
-            },
-            {
-              'cve':  'CVE-2024-12797',
-              'cvss': {
-                'redhat': {
-                  'v3score':  '7.4',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-392'
-              ],
-              'description':   "Issue summary: Clients using RFC7250 Raw Public Keys (RPKs) to authenticate a\nserver may fail to notice that the server was not authenticated, because\nhandshakes don't abort as expected when the SSL_VERIFY_PEER verification mode\nis set.\n\nImpact summary: TLS and DTLS connections using raw public keys may be\nvulnerable to man-in-middle attacks when server authentication failure is not\ndetected by clients.\n\nRPKs are disabled by default in both TLS clients and TLS servers.  The issue\nonly arises when TLS clients explicitly enable RPK use by the server, and the\nserver, likewise, enables sending of an RPK instead of an X.509 certificate\nchain.  The affected clients are those that then rely on the handshake to\nfail when the server's RPK fails to match one of the expected public keys,\nby setting the verification mode to SSL_VERIFY_PEER.\n\nClients that enable server-side raw public keys can still find out that raw\npublic key verification failed by calling SSL_get_verify_result(), and those\nthat do, and take appropriate action, are not affected.  This issue was\nintroduced in the initial implementation of RPK support in OpenSSL 3.2.\n\nThe FIPS modules in 3.4, 3.3, 3.2, 3.1 and 3.0 are not affected by this issue.",
-              'diffID':        'sha256:945d14811b65488b1ae0b02ed9ae97066ef9fe7aa237336794b7a50ceeea4d80',
-              'fixedVersions': [
-                '3.3.3-r0'
-              ],
-              'installedVersion': '3.3.2-r1',
-              'packageName':      'libcrypto3',
-              'purl':             'pkg:apk/alpine/libcrypto3@3.3.2-r1?arch=riscv64&distro=3.20.5',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2025/02/11/3',
-                'http://www.openwall.com/lists/oss-security/2025/02/11/4',
-                'https://access.redhat.com/errata/RHSA-2025:1330',
-                'https://access.redhat.com/security/cve/CVE-2024-12797',
-                'https://bugzilla.redhat.com/2342757',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2342757',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-12797',
-                'https://errata.almalinux.org/9/ALSA-2025-1330.html',
-                'https://errata.rockylinux.org/RLSA-2025:1330',
-                'https://github.com/openssl/openssl/commit/738d4f9fdeaad57660dcba50a619fafced3fd5e9',
-                'https://github.com/openssl/openssl/commit/798779d43494549b611233f92652f0da5328fbe7',
-                'https://github.com/openssl/openssl/commit/87ebd203feffcf92ad5889df92f90bb0ee10a699',
-                'https://github.com/pyca/cryptography',
-                'https://github.com/pyca/cryptography/security/advisories/GHSA-79v4-65xg-pq4g',
-                'https://linux.oracle.com/cve/CVE-2024-12797.html',
-                'https://linux.oracle.com/errata/ELSA-2025-1330.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2024-12797',
-                'https://openssl-library.org/news/secadv/20250211.txt',
-                'https://security.netapp.com/advisory/ntap-20250214-0001/',
-                'https://ubuntu.com/security/notices/USN-7264-1',
-                'https://www.cve.org/CVERecord?id=CVE-2024-12797'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      "openssl: RFC7250 handshakes with unauthenticated servers don't abort as expected"
-            },
-            {
-              'cve':  'CVE-2024-13176',
-              'cvss': {
-                'redhat': {
-                  'v3score':  '4.7',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-385'
-              ],
-              'description':   'Issue summary: A timing side-channel which could potentially allow recovering\nthe private key exists in the ECDSA signature computation.\n\nImpact summary: A timing side-channel in ECDSA signature computations\ncould allow recovering the private key by an attacker. However, measuring\nthe timing would require either local access to the signing application or\na very fast network connection with low latency.\n\nThere is a timing signal of around 300 nanoseconds when the top word of\nthe inverted ECDSA nonce value is zero. This can happen with significant\nprobability only for some of the supported elliptic curves. In particular\nthe NIST P-521 curve is affected. To be able to measure this leak, the attacker\nprocess must either be located in the same physical computer or must\nhave a very fast network connection with low latency. For that reason\nthe severity of this vulnerability is Low.\n\nThe FIPS modules in 3.4, 3.3, 3.2, 3.1 and 3.0 are affected by this issue.',
-              'diffID':        'sha256:945d14811b65488b1ae0b02ed9ae97066ef9fe7aa237336794b7a50ceeea4d80',
-              'fixedVersions': [
-                '3.3.2-r2'
-              ],
-              'installedVersion': '3.3.2-r1',
-              'packageName':      'libcrypto3',
-              'purl':             'pkg:apk/alpine/libcrypto3@3.3.2-r1?arch=riscv64&distro=3.20.5',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2025/01/20/2',
-                'https://access.redhat.com/errata/RHSA-2025:16046',
-                'https://access.redhat.com/security/cve/CVE-2024-13176',
-                'https://bugzilla.redhat.com/2359885',
-                'https://bugzilla.redhat.com/2359888',
-                'https://bugzilla.redhat.com/2359892',
-                'https://bugzilla.redhat.com/2359894',
-                'https://bugzilla.redhat.com/2359895',
-                'https://bugzilla.redhat.com/2359899',
-                'https://bugzilla.redhat.com/2359900',
-                'https://bugzilla.redhat.com/2359902',
-                'https://bugzilla.redhat.com/2359903',
-                'https://bugzilla.redhat.com/2359911',
-                'https://bugzilla.redhat.com/2359918',
-                'https://bugzilla.redhat.com/2359920',
-                'https://bugzilla.redhat.com/2359924',
-                'https://bugzilla.redhat.com/2359928',
-                'https://bugzilla.redhat.com/2359930',
-                'https://bugzilla.redhat.com/2359932',
-                'https://bugzilla.redhat.com/2359934',
-                'https://bugzilla.redhat.com/2359938',
-                'https://bugzilla.redhat.com/2359940',
-                'https://bugzilla.redhat.com/2359943',
-                'https://bugzilla.redhat.com/2359944',
-                'https://bugzilla.redhat.com/2359945',
-                'https://bugzilla.redhat.com/2359947',
-                'https://bugzilla.redhat.com/2359950',
-                'https://bugzilla.redhat.com/2359963',
-                'https://bugzilla.redhat.com/2359964',
-                'https://bugzilla.redhat.com/2359972',
-                'https://bugzilla.redhat.com/2370920',
-                'https://bugzilla.redhat.com/2380264',
-                'https://bugzilla.redhat.com/2380273',
-                'https://bugzilla.redhat.com/2380274',
-                'https://bugzilla.redhat.com/2380278',
-                'https://bugzilla.redhat.com/2380280',
-                'https://bugzilla.redhat.com/2380283',
-                'https://bugzilla.redhat.com/2380284',
-                'https://bugzilla.redhat.com/2380290',
-                'https://bugzilla.redhat.com/2380291',
-                'https://bugzilla.redhat.com/2380295',
-                'https://bugzilla.redhat.com/2380298',
-                'https://bugzilla.redhat.com/2380306',
-                'https://bugzilla.redhat.com/2380308',
-                'https://bugzilla.redhat.com/2380309',
-                'https://bugzilla.redhat.com/2380310',
-                'https://bugzilla.redhat.com/2380312',
-                'https://bugzilla.redhat.com/2380313',
-                'https://bugzilla.redhat.com/2380320',
-                'https://bugzilla.redhat.com/2380321',
-                'https://bugzilla.redhat.com/2380322',
-                'https://bugzilla.redhat.com/2380326',
-                'https://bugzilla.redhat.com/2380327',
-                'https://bugzilla.redhat.com/2380334',
-                'https://bugzilla.redhat.com/2380335',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2338999',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359885',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359888',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359892',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359894',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359895',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359899',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359900',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359902',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359903',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359911',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359918',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359920',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359924',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359928',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359930',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359932',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359934',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359938',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359940',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359943',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359944',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359945',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359947',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359950',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359963',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359964',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359972',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2370920',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380264',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380273',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380274',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380278',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380280',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380283',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380284',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380290',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380291',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380295',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380298',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380306',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380308',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380309',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380310',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380312',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380313',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380320',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380321',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380322',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380326',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380327',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380334',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380335',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-13176',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21574',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21575',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21577',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21579',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21580',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21581',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21584',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21585',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21588',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30681',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30682',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30683',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30684',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30685',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30687',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30688',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30689',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30693',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30695',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30696',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30699',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30703',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30704',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30705',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30715',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30721',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30722',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50077',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50078',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50079',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50080',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50081',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50082',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50083',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50084',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50085',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50086',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50087',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50088',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50091',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50092',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50093',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50094',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50096',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50097',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50098',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50099',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50100',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50101',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50102',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50104',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-5399',
-                'https://errata.almalinux.org/9/ALSA-2025-16046.html',
-                'https://errata.rockylinux.org/RLSA-2025:15699',
-                'https://github.com/openssl/openssl/commit/07272b05b04836a762b4baa874958af51d513844',
-                'https://github.com/openssl/openssl/commit/2af62e74fb59bc469506bc37eb2990ea408d9467',
-                'https://github.com/openssl/openssl/commit/392dcb336405a0c94486aa6655057f59fd3a0902',
-                'https://github.com/openssl/openssl/commit/4b1cb94a734a7d4ec363ac0a215a25c181e11f65',
-                'https://github.com/openssl/openssl/commit/77c608f4c8857e63e98e66444e2e761c9627916f',
-                'https://github.openssl.org/openssl/extended-releases/commit/0d5fd1ab987f7571e2c955d8d8b638fc0fb54ded',
-                'https://github.openssl.org/openssl/extended-releases/commit/a2639000db19878d5d89586ae7b725080592ae86',
-                'https://linux.oracle.com/cve/CVE-2024-13176.html',
-                'https://linux.oracle.com/errata/ELSA-2025-16046.html',
-                'https://lists.debian.org/debian-lts-announce/2025/05/msg00028.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2024-13176',
-                'https://openssl-library.org/news/secadv/20250120.txt',
-                'https://security.netapp.com/advisory/ntap-20250124-0005/',
-                'https://security.netapp.com/advisory/ntap-20250418-0010/',
-                'https://security.netapp.com/advisory/ntap-20250502-0006/',
-                'https://ubuntu.com/security/notices/USN-7264-1',
-                'https://ubuntu.com/security/notices/USN-7278-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2024-13176',
-                'https://www.oracle.com/security-alerts/cpuapr2025.html#AppendixMSQL'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: Timing side-channel in ECDSA signature computation'
-            },
-            {
-              'cve':  'CVE-2025-9230',
-              'cvss': {
-                'redhat': {
-                  'v3score':  '5.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L'
-                }
-              },
-              'cwes': [
-                'CWE-125',
-                'CWE-787'
-              ],
-              'description':   'Issue summary: An application trying to decrypt CMS messages encrypted using\npassword based encryption can trigger an out-of-bounds read and write.\n\nImpact summary: This out-of-bounds read may trigger a crash which leads to\nDenial of Service for an application. The out-of-bounds write can cause\na memory corruption which can have various consequences including\na Denial of Service or Execution of attacker-supplied code.\n\nAlthough the consequences of a successful exploit of this vulnerability\ncould be severe, the probability that the attacker would be able to\nperform it is low. Besides, password based (PWRI) encryption support in CMS\nmessages is very rarely used. For that reason the issue was assessed as\nModerate severity according to our Security Policy.\n\nThe FIPS modules in 3.5, 3.4, 3.3, 3.2, 3.1 and 3.0 are not affected by this\nissue, as the CMS implementation is outside the OpenSSL FIPS module\nboundary.',
-              'diffID':        'sha256:945d14811b65488b1ae0b02ed9ae97066ef9fe7aa237336794b7a50ceeea4d80',
-              'fixedVersions': [
-                '3.3.5-r0'
-              ],
-              'installedVersion': '3.3.2-r1',
-              'packageName':      'libcrypto3',
-              'purl':             'pkg:apk/alpine/libcrypto3@3.3.2-r1?arch=riscv64&distro=3.20.5',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2025/09/30/5',
-                'https://access.redhat.com/errata/RHSA-2025:21255',
-                'https://access.redhat.com/security/cve/CVE-2025-9230',
-                'https://bugzilla.redhat.com/2396054',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2396054',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-9230',
-                'https://errata.almalinux.org/9/ALSA-2025-21255.html',
-                'https://errata.rockylinux.org/RLSA-2025:21255',
-                'https://github.com/openssl/openssl/commit/5965ea5dd6960f36d8b7f74f8eac67a8eb8f2b45',
-                'https://github.com/openssl/openssl/commit/9e91358f365dee6c446dcdcdb01c04d2743fd280',
-                'https://github.com/openssl/openssl/commit/a79c4ce559c6a3a8fd4109e9f33c1185d5bf2def',
-                'https://github.com/openssl/openssl/commit/b5282d677551afda7d20e9c00e09561b547b2dfd',
-                'https://github.com/openssl/openssl/commit/bae259a211ada6315dc50900686daaaaaa55f482',
-                'https://github.openssl.org/openssl/extended-releases/commit/c2b96348bfa662f25f4fabf81958ae822063dae3',
-                'https://github.openssl.org/openssl/extended-releases/commit/dfbaf161d8dafc1132dd88cd48ad990ed9b4c8ba',
-                'https://linux.oracle.com/cve/CVE-2025-9230.html',
-                'https://linux.oracle.com/errata/ELSA-2026-0337.html',
-                'https://lists.debian.org/debian-lts-announce/2025/10/msg00001.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2025-9230',
-                'https://openssl-library.org/news/secadv/20250930.txt',
-                'https://ubuntu.com/security/notices/USN-7786-1',
-                'https://www.cve.org/CVERecord?id=CVE-2025-9230'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: Out-of-bounds read & write in RFC 3211 KEK Unwrap'
-            },
-            {
-              'cve':  'CVE-2025-9231',
-              'cvss': {
-                'redhat': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-385'
-              ],
-              'description':   'Issue summary: A timing side-channel which could potentially allow remote\nrecovery of the private key exists in the SM2 algorithm implementation on 64 bit\nARM platforms.\n\nImpact summary: A timing side-channel in SM2 signature computations on 64 bit\nARM platforms could allow recovering the private key by an attacker..\n\nWhile remote key recovery over a network was not attempted by the reporter,\ntiming measurements revealed a timing signal which may allow such an attack.\n\nOpenSSL does not directly support certificates with SM2 keys in TLS, and so\nthis CVE is not relevant in most TLS contexts.  However, given that it is\npossible to add support for such certificates via a custom provider, coupled\nwith the fact that in such a custom provider context the private key may be\nrecoverable via remote timing measurements, we consider this to be a Moderate\nseverity issue.\n\nThe FIPS modules in 3.5, 3.4, 3.3, 3.2, 3.1 and 3.0 are not affected by this\nissue, as SM2 is not an approved algorithm.',
-              'diffID':        'sha256:945d14811b65488b1ae0b02ed9ae97066ef9fe7aa237336794b7a50ceeea4d80',
-              'fixedVersions': [
-                '3.3.5-r0'
-              ],
-              'installedVersion': '3.3.2-r1',
-              'packageName':      'libcrypto3',
-              'purl':             'pkg:apk/alpine/libcrypto3@3.3.2-r1?arch=riscv64&distro=3.20.5',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2025/09/30/5',
-                'https://access.redhat.com/security/cve/CVE-2025-9231',
-                'https://github.com/openssl/openssl/commit/567f64386e43683888212226824b6a179885a0fe',
-                'https://github.com/openssl/openssl/commit/cba616c26ac8e7b37de5e77762e505ba5ca51698',
-                'https://github.com/openssl/openssl/commit/eed5adc9f969d77c94f213767acbb41ff923b6f4',
-                'https://github.com/openssl/openssl/commit/fc47a2ec078912b3e914fab5734535e76c4820c2',
-                'https://nvd.nist.gov/vuln/detail/CVE-2025-9231',
-                'https://openssl-library.org/news/secadv/20250930.txt',
-                'https://ubuntu.com/security/notices/USN-7786-1',
-                'https://www.cve.org/CVERecord?id=CVE-2025-9231'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: Timing side-channel in SM2 algorithm on 64 bit ARM'
-            },
-            {
-              'cve':  'CVE-2025-9232',
-              'cvss': {
-                'redhat': {
-                  'v3score':  '3.1',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L'
-                }
-              },
-              'cwes': [
-                'CWE-125'
-              ],
-              'description':   "Issue summary: An application using the OpenSSL HTTP client API functions may\ntrigger an out-of-bounds read if the 'no_proxy' environment variable is set and\nthe host portion of the authority component of the HTTP URL is an IPv6 address.\n\nImpact summary: An out-of-bounds read can trigger a crash which leads to\nDenial of Service for an application.\n\nThe OpenSSL HTTP client API functions can be used directly by applications\nbut they are also used by the OCSP client functions and CMP (Certificate\nManagement Protocol) client implementation in OpenSSL. However the URLs used\nby these implementations are unlikely to be controlled by an attacker.\n\nIn this vulnerable code the out of bounds read can only trigger a crash.\nFurthermore the vulnerability requires an attacker-controlled URL to be\npassed from an application to the OpenSSL function and the user has to have\na 'no_proxy' environment variable set. For the aforementioned reasons the\nissue was assessed as Low severity.\n\nThe vulnerable code was introduced in the following patch releases:\n3.0.16, 3.1.8, 3.2.4, 3.3.3, 3.4.0 and 3.5.0.\n\nThe FIPS modules in 3.5, 3.4, 3.3, 3.2, 3.1 and 3.0 are not affected by this\nissue, as the HTTP client implementation is outside the OpenSSL FIPS module\nboundary.",
-              'diffID':        'sha256:945d14811b65488b1ae0b02ed9ae97066ef9fe7aa237336794b7a50ceeea4d80',
-              'fixedVersions': [
-                '3.3.5-r0'
-              ],
-              'installedVersion': '3.3.2-r1',
-              'packageName':      'libcrypto3',
-              'purl':             'pkg:apk/alpine/libcrypto3@3.3.2-r1?arch=riscv64&distro=3.20.5',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2025/09/30/5',
-                'https://access.redhat.com/security/cve/CVE-2025-9232',
-                'https://github.com/openssl/openssl/commit/2b4ec20e47959170422922eaff25346d362dcb35',
-                'https://github.com/openssl/openssl/commit/654dc11d23468a74fc8ea4672b702dd3feb7be4b',
-                'https://github.com/openssl/openssl/commit/7cf21a30513c9e43c4bc3836c237cf086e194af3',
-                'https://github.com/openssl/openssl/commit/89e790ac431125a4849992858490bed6b225eadf',
-                'https://github.com/openssl/openssl/commit/bbf38c034cdabd0a13330abcc4855c866f53d2e0',
-                'https://nvd.nist.gov/vuln/detail/CVE-2025-9232',
-                'https://openssl-library.org/news/secadv/20250930.txt',
-                'https://ubuntu.com/security/notices/USN-7786-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2025-9232'
-              ],
-              'severity':   'LOW',
-              'suppressed': false,
-              'title':      'openssl: Out-of-bounds read in HTTP client no_proxy handling'
-            },
-            {
-              'cve':  'CVE-2024-12797',
-              'cvss': {
-                'redhat': {
-                  'v3score':  '7.4',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-392'
-              ],
-              'description':   "Issue summary: Clients using RFC7250 Raw Public Keys (RPKs) to authenticate a\nserver may fail to notice that the server was not authenticated, because\nhandshakes don't abort as expected when the SSL_VERIFY_PEER verification mode\nis set.\n\nImpact summary: TLS and DTLS connections using raw public keys may be\nvulnerable to man-in-middle attacks when server authentication failure is not\ndetected by clients.\n\nRPKs are disabled by default in both TLS clients and TLS servers.  The issue\nonly arises when TLS clients explicitly enable RPK use by the server, and the\nserver, likewise, enables sending of an RPK instead of an X.509 certificate\nchain.  The affected clients are those that then rely on the handshake to\nfail when the server's RPK fails to match one of the expected public keys,\nby setting the verification mode to SSL_VERIFY_PEER.\n\nClients that enable server-side raw public keys can still find out that raw\npublic key verification failed by calling SSL_get_verify_result(), and those\nthat do, and take appropriate action, are not affected.  This issue was\nintroduced in the initial implementation of RPK support in OpenSSL 3.2.\n\nThe FIPS modules in 3.4, 3.3, 3.2, 3.1 and 3.0 are not affected by this issue.",
-              'diffID':        'sha256:945d14811b65488b1ae0b02ed9ae97066ef9fe7aa237336794b7a50ceeea4d80',
-              'fixedVersions': [
-                '3.3.3-r0'
-              ],
-              'installedVersion': '3.3.2-r1',
-              'packageName':      'libssl3',
-              'purl':             'pkg:apk/alpine/libssl3@3.3.2-r1?arch=riscv64&distro=3.20.5',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2025/02/11/3',
-                'http://www.openwall.com/lists/oss-security/2025/02/11/4',
-                'https://access.redhat.com/errata/RHSA-2025:1330',
-                'https://access.redhat.com/security/cve/CVE-2024-12797',
-                'https://bugzilla.redhat.com/2342757',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2342757',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-12797',
-                'https://errata.almalinux.org/9/ALSA-2025-1330.html',
-                'https://errata.rockylinux.org/RLSA-2025:1330',
-                'https://github.com/openssl/openssl/commit/738d4f9fdeaad57660dcba50a619fafced3fd5e9',
-                'https://github.com/openssl/openssl/commit/798779d43494549b611233f92652f0da5328fbe7',
-                'https://github.com/openssl/openssl/commit/87ebd203feffcf92ad5889df92f90bb0ee10a699',
-                'https://github.com/pyca/cryptography',
-                'https://github.com/pyca/cryptography/security/advisories/GHSA-79v4-65xg-pq4g',
-                'https://linux.oracle.com/cve/CVE-2024-12797.html',
-                'https://linux.oracle.com/errata/ELSA-2025-1330.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2024-12797',
-                'https://openssl-library.org/news/secadv/20250211.txt',
-                'https://security.netapp.com/advisory/ntap-20250214-0001/',
-                'https://ubuntu.com/security/notices/USN-7264-1',
-                'https://www.cve.org/CVERecord?id=CVE-2024-12797'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      "openssl: RFC7250 handshakes with unauthenticated servers don't abort as expected"
-            },
-            {
-              'cve':  'CVE-2024-13176',
-              'cvss': {
-                'redhat': {
-                  'v3score':  '4.7',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-385'
-              ],
-              'description':   'Issue summary: A timing side-channel which could potentially allow recovering\nthe private key exists in the ECDSA signature computation.\n\nImpact summary: A timing side-channel in ECDSA signature computations\ncould allow recovering the private key by an attacker. However, measuring\nthe timing would require either local access to the signing application or\na very fast network connection with low latency.\n\nThere is a timing signal of around 300 nanoseconds when the top word of\nthe inverted ECDSA nonce value is zero. This can happen with significant\nprobability only for some of the supported elliptic curves. In particular\nthe NIST P-521 curve is affected. To be able to measure this leak, the attacker\nprocess must either be located in the same physical computer or must\nhave a very fast network connection with low latency. For that reason\nthe severity of this vulnerability is Low.\n\nThe FIPS modules in 3.4, 3.3, 3.2, 3.1 and 3.0 are affected by this issue.',
-              'diffID':        'sha256:945d14811b65488b1ae0b02ed9ae97066ef9fe7aa237336794b7a50ceeea4d80',
-              'fixedVersions': [
-                '3.3.2-r2'
-              ],
-              'installedVersion': '3.3.2-r1',
-              'packageName':      'libssl3',
-              'purl':             'pkg:apk/alpine/libssl3@3.3.2-r1?arch=riscv64&distro=3.20.5',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2025/01/20/2',
-                'https://access.redhat.com/errata/RHSA-2025:16046',
-                'https://access.redhat.com/security/cve/CVE-2024-13176',
-                'https://bugzilla.redhat.com/2359885',
-                'https://bugzilla.redhat.com/2359888',
-                'https://bugzilla.redhat.com/2359892',
-                'https://bugzilla.redhat.com/2359894',
-                'https://bugzilla.redhat.com/2359895',
-                'https://bugzilla.redhat.com/2359899',
-                'https://bugzilla.redhat.com/2359900',
-                'https://bugzilla.redhat.com/2359902',
-                'https://bugzilla.redhat.com/2359903',
-                'https://bugzilla.redhat.com/2359911',
-                'https://bugzilla.redhat.com/2359918',
-                'https://bugzilla.redhat.com/2359920',
-                'https://bugzilla.redhat.com/2359924',
-                'https://bugzilla.redhat.com/2359928',
-                'https://bugzilla.redhat.com/2359930',
-                'https://bugzilla.redhat.com/2359932',
-                'https://bugzilla.redhat.com/2359934',
-                'https://bugzilla.redhat.com/2359938',
-                'https://bugzilla.redhat.com/2359940',
-                'https://bugzilla.redhat.com/2359943',
-                'https://bugzilla.redhat.com/2359944',
-                'https://bugzilla.redhat.com/2359945',
-                'https://bugzilla.redhat.com/2359947',
-                'https://bugzilla.redhat.com/2359950',
-                'https://bugzilla.redhat.com/2359963',
-                'https://bugzilla.redhat.com/2359964',
-                'https://bugzilla.redhat.com/2359972',
-                'https://bugzilla.redhat.com/2370920',
-                'https://bugzilla.redhat.com/2380264',
-                'https://bugzilla.redhat.com/2380273',
-                'https://bugzilla.redhat.com/2380274',
-                'https://bugzilla.redhat.com/2380278',
-                'https://bugzilla.redhat.com/2380280',
-                'https://bugzilla.redhat.com/2380283',
-                'https://bugzilla.redhat.com/2380284',
-                'https://bugzilla.redhat.com/2380290',
-                'https://bugzilla.redhat.com/2380291',
-                'https://bugzilla.redhat.com/2380295',
-                'https://bugzilla.redhat.com/2380298',
-                'https://bugzilla.redhat.com/2380306',
-                'https://bugzilla.redhat.com/2380308',
-                'https://bugzilla.redhat.com/2380309',
-                'https://bugzilla.redhat.com/2380310',
-                'https://bugzilla.redhat.com/2380312',
-                'https://bugzilla.redhat.com/2380313',
-                'https://bugzilla.redhat.com/2380320',
-                'https://bugzilla.redhat.com/2380321',
-                'https://bugzilla.redhat.com/2380322',
-                'https://bugzilla.redhat.com/2380326',
-                'https://bugzilla.redhat.com/2380327',
-                'https://bugzilla.redhat.com/2380334',
-                'https://bugzilla.redhat.com/2380335',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2338999',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359885',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359888',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359892',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359894',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359895',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359899',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359900',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359902',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359903',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359911',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359918',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359920',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359924',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359928',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359930',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359932',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359934',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359938',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359940',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359943',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359944',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359945',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359947',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359950',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359963',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359964',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359972',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2370920',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380264',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380273',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380274',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380278',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380280',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380283',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380284',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380290',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380291',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380295',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380298',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380306',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380308',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380309',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380310',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380312',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380313',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380320',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380321',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380322',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380326',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380327',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380334',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380335',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-13176',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21574',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21575',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21577',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21579',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21580',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21581',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21584',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21585',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21588',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30681',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30682',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30683',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30684',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30685',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30687',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30688',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30689',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30693',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30695',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30696',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30699',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30703',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30704',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30705',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30715',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30721',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30722',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50077',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50078',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50079',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50080',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50081',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50082',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50083',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50084',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50085',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50086',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50087',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50088',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50091',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50092',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50093',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50094',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50096',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50097',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50098',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50099',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50100',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50101',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50102',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50104',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-5399',
-                'https://errata.almalinux.org/9/ALSA-2025-16046.html',
-                'https://errata.rockylinux.org/RLSA-2025:15699',
-                'https://github.com/openssl/openssl/commit/07272b05b04836a762b4baa874958af51d513844',
-                'https://github.com/openssl/openssl/commit/2af62e74fb59bc469506bc37eb2990ea408d9467',
-                'https://github.com/openssl/openssl/commit/392dcb336405a0c94486aa6655057f59fd3a0902',
-                'https://github.com/openssl/openssl/commit/4b1cb94a734a7d4ec363ac0a215a25c181e11f65',
-                'https://github.com/openssl/openssl/commit/77c608f4c8857e63e98e66444e2e761c9627916f',
-                'https://github.openssl.org/openssl/extended-releases/commit/0d5fd1ab987f7571e2c955d8d8b638fc0fb54ded',
-                'https://github.openssl.org/openssl/extended-releases/commit/a2639000db19878d5d89586ae7b725080592ae86',
-                'https://linux.oracle.com/cve/CVE-2024-13176.html',
-                'https://linux.oracle.com/errata/ELSA-2025-16046.html',
-                'https://lists.debian.org/debian-lts-announce/2025/05/msg00028.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2024-13176',
-                'https://openssl-library.org/news/secadv/20250120.txt',
-                'https://security.netapp.com/advisory/ntap-20250124-0005/',
-                'https://security.netapp.com/advisory/ntap-20250418-0010/',
-                'https://security.netapp.com/advisory/ntap-20250502-0006/',
-                'https://ubuntu.com/security/notices/USN-7264-1',
-                'https://ubuntu.com/security/notices/USN-7278-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2024-13176',
-                'https://www.oracle.com/security-alerts/cpuapr2025.html#AppendixMSQL'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: Timing side-channel in ECDSA signature computation'
-            },
-            {
-              'cve':  'CVE-2025-9230',
-              'cvss': {
-                'redhat': {
-                  'v3score':  '5.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L'
-                }
-              },
-              'cwes': [
-                'CWE-125',
-                'CWE-787'
-              ],
-              'description':   'Issue summary: An application trying to decrypt CMS messages encrypted using\npassword based encryption can trigger an out-of-bounds read and write.\n\nImpact summary: This out-of-bounds read may trigger a crash which leads to\nDenial of Service for an application. The out-of-bounds write can cause\na memory corruption which can have various consequences including\na Denial of Service or Execution of attacker-supplied code.\n\nAlthough the consequences of a successful exploit of this vulnerability\ncould be severe, the probability that the attacker would be able to\nperform it is low. Besides, password based (PWRI) encryption support in CMS\nmessages is very rarely used. For that reason the issue was assessed as\nModerate severity according to our Security Policy.\n\nThe FIPS modules in 3.5, 3.4, 3.3, 3.2, 3.1 and 3.0 are not affected by this\nissue, as the CMS implementation is outside the OpenSSL FIPS module\nboundary.',
-              'diffID':        'sha256:945d14811b65488b1ae0b02ed9ae97066ef9fe7aa237336794b7a50ceeea4d80',
-              'fixedVersions': [
-                '3.3.5-r0'
-              ],
-              'installedVersion': '3.3.2-r1',
-              'packageName':      'libssl3',
-              'purl':             'pkg:apk/alpine/libssl3@3.3.2-r1?arch=riscv64&distro=3.20.5',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2025/09/30/5',
-                'https://access.redhat.com/errata/RHSA-2025:21255',
-                'https://access.redhat.com/security/cve/CVE-2025-9230',
-                'https://bugzilla.redhat.com/2396054',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2396054',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-9230',
-                'https://errata.almalinux.org/9/ALSA-2025-21255.html',
-                'https://errata.rockylinux.org/RLSA-2025:21255',
-                'https://github.com/openssl/openssl/commit/5965ea5dd6960f36d8b7f74f8eac67a8eb8f2b45',
-                'https://github.com/openssl/openssl/commit/9e91358f365dee6c446dcdcdb01c04d2743fd280',
-                'https://github.com/openssl/openssl/commit/a79c4ce559c6a3a8fd4109e9f33c1185d5bf2def',
-                'https://github.com/openssl/openssl/commit/b5282d677551afda7d20e9c00e09561b547b2dfd',
-                'https://github.com/openssl/openssl/commit/bae259a211ada6315dc50900686daaaaaa55f482',
-                'https://github.openssl.org/openssl/extended-releases/commit/c2b96348bfa662f25f4fabf81958ae822063dae3',
-                'https://github.openssl.org/openssl/extended-releases/commit/dfbaf161d8dafc1132dd88cd48ad990ed9b4c8ba',
-                'https://linux.oracle.com/cve/CVE-2025-9230.html',
-                'https://linux.oracle.com/errata/ELSA-2026-0337.html',
-                'https://lists.debian.org/debian-lts-announce/2025/10/msg00001.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2025-9230',
-                'https://openssl-library.org/news/secadv/20250930.txt',
-                'https://ubuntu.com/security/notices/USN-7786-1',
-                'https://www.cve.org/CVERecord?id=CVE-2025-9230'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: Out-of-bounds read & write in RFC 3211 KEK Unwrap'
-            },
-            {
-              'cve':  'CVE-2025-9231',
-              'cvss': {
-                'redhat': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-385'
-              ],
-              'description':   'Issue summary: A timing side-channel which could potentially allow remote\nrecovery of the private key exists in the SM2 algorithm implementation on 64 bit\nARM platforms.\n\nImpact summary: A timing side-channel in SM2 signature computations on 64 bit\nARM platforms could allow recovering the private key by an attacker..\n\nWhile remote key recovery over a network was not attempted by the reporter,\ntiming measurements revealed a timing signal which may allow such an attack.\n\nOpenSSL does not directly support certificates with SM2 keys in TLS, and so\nthis CVE is not relevant in most TLS contexts.  However, given that it is\npossible to add support for such certificates via a custom provider, coupled\nwith the fact that in such a custom provider context the private key may be\nrecoverable via remote timing measurements, we consider this to be a Moderate\nseverity issue.\n\nThe FIPS modules in 3.5, 3.4, 3.3, 3.2, 3.1 and 3.0 are not affected by this\nissue, as SM2 is not an approved algorithm.',
-              'diffID':        'sha256:945d14811b65488b1ae0b02ed9ae97066ef9fe7aa237336794b7a50ceeea4d80',
-              'fixedVersions': [
-                '3.3.5-r0'
-              ],
-              'installedVersion': '3.3.2-r1',
-              'packageName':      'libssl3',
-              'purl':             'pkg:apk/alpine/libssl3@3.3.2-r1?arch=riscv64&distro=3.20.5',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2025/09/30/5',
-                'https://access.redhat.com/security/cve/CVE-2025-9231',
-                'https://github.com/openssl/openssl/commit/567f64386e43683888212226824b6a179885a0fe',
-                'https://github.com/openssl/openssl/commit/cba616c26ac8e7b37de5e77762e505ba5ca51698',
-                'https://github.com/openssl/openssl/commit/eed5adc9f969d77c94f213767acbb41ff923b6f4',
-                'https://github.com/openssl/openssl/commit/fc47a2ec078912b3e914fab5734535e76c4820c2',
-                'https://nvd.nist.gov/vuln/detail/CVE-2025-9231',
-                'https://openssl-library.org/news/secadv/20250930.txt',
-                'https://ubuntu.com/security/notices/USN-7786-1',
-                'https://www.cve.org/CVERecord?id=CVE-2025-9231'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: Timing side-channel in SM2 algorithm on 64 bit ARM'
-            },
-            {
-              'cve':  'CVE-2025-9232',
-              'cvss': {
-                'redhat': {
-                  'v3score':  '3.1',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L'
-                }
-              },
-              'cwes': [
-                'CWE-125'
-              ],
-              'description':   "Issue summary: An application using the OpenSSL HTTP client API functions may\ntrigger an out-of-bounds read if the 'no_proxy' environment variable is set and\nthe host portion of the authority component of the HTTP URL is an IPv6 address.\n\nImpact summary: An out-of-bounds read can trigger a crash which leads to\nDenial of Service for an application.\n\nThe OpenSSL HTTP client API functions can be used directly by applications\nbut they are also used by the OCSP client functions and CMP (Certificate\nManagement Protocol) client implementation in OpenSSL. However the URLs used\nby these implementations are unlikely to be controlled by an attacker.\n\nIn this vulnerable code the out of bounds read can only trigger a crash.\nFurthermore the vulnerability requires an attacker-controlled URL to be\npassed from an application to the OpenSSL function and the user has to have\na 'no_proxy' environment variable set. For the aforementioned reasons the\nissue was assessed as Low severity.\n\nThe vulnerable code was introduced in the following patch releases:\n3.0.16, 3.1.8, 3.2.4, 3.3.3, 3.4.0 and 3.5.0.\n\nThe FIPS modules in 3.5, 3.4, 3.3, 3.2, 3.1 and 3.0 are not affected by this\nissue, as the HTTP client implementation is outside the OpenSSL FIPS module\nboundary.",
-              'diffID':        'sha256:945d14811b65488b1ae0b02ed9ae97066ef9fe7aa237336794b7a50ceeea4d80',
-              'fixedVersions': [
-                '3.3.5-r0'
-              ],
-              'installedVersion': '3.3.2-r1',
-              'packageName':      'libssl3',
-              'purl':             'pkg:apk/alpine/libssl3@3.3.2-r1?arch=riscv64&distro=3.20.5',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2025/09/30/5',
-                'https://access.redhat.com/security/cve/CVE-2025-9232',
-                'https://github.com/openssl/openssl/commit/2b4ec20e47959170422922eaff25346d362dcb35',
-                'https://github.com/openssl/openssl/commit/654dc11d23468a74fc8ea4672b702dd3feb7be4b',
-                'https://github.com/openssl/openssl/commit/7cf21a30513c9e43c4bc3836c237cf086e194af3',
-                'https://github.com/openssl/openssl/commit/89e790ac431125a4849992858490bed6b225eadf',
-                'https://github.com/openssl/openssl/commit/bbf38c034cdabd0a13330abcc4855c866f53d2e0',
-                'https://nvd.nist.gov/vuln/detail/CVE-2025-9232',
-                'https://openssl-library.org/news/secadv/20250930.txt',
-                'https://ubuntu.com/security/notices/USN-7786-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2025-9232'
-              ],
-              'severity':   'LOW',
-              'suppressed': false,
-              'title':      'openssl: Out-of-bounds read in HTTP client no_proxy handling'
-            },
-            {
-              'cve':  'CVE-2025-26519',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-787'
-              ],
-              'description':   'musl libc 0.9.13 through 1.2.5 before 1.2.6 has an out-of-bounds write vulnerability when an attacker can trigger iconv conversion of untrusted EUC-KR text to UTF-8.',
-              'diffID':        'sha256:945d14811b65488b1ae0b02ed9ae97066ef9fe7aa237336794b7a50ceeea4d80',
-              'fixedVersions': [
-                '1.2.5-r1'
-              ],
-              'installedVersion': '1.2.5-r0',
-              'packageName':      'musl',
-              'purl':             'pkg:apk/alpine/musl@1.2.5-r0?arch=riscv64&distro=3.20.5',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2025/02/13/2',
-                'http://www.openwall.com/lists/oss-security/2025/02/13/3',
-                'http://www.openwall.com/lists/oss-security/2025/02/13/4',
-                'http://www.openwall.com/lists/oss-security/2025/02/13/5',
-                'http://www.openwall.com/lists/oss-security/2025/02/14/5',
-                'http://www.openwall.com/lists/oss-security/2025/02/14/6',
-                'https://git.musl-libc.org/cgit/musl/commit/?id=c47ad25ea3b484e10326f933e927c0bc8cded3da',
-                'https://git.musl-libc.org/cgit/musl/commit/?id=e5adcd97b5196e29991b524237381a0202a60659',
-                'https://www.openwall.com/lists/oss-security/2025/02/13/2'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'musl libc 0.9.13 through 1.2.5 before 1.2.6 has an out-of-bounds write ...'
-            },
-            {
-              'cve':  'CVE-2025-26519',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-787'
-              ],
-              'description':   'musl libc 0.9.13 through 1.2.5 before 1.2.6 has an out-of-bounds write vulnerability when an attacker can trigger iconv conversion of untrusted EUC-KR text to UTF-8.',
-              'diffID':        'sha256:945d14811b65488b1ae0b02ed9ae97066ef9fe7aa237336794b7a50ceeea4d80',
-              'fixedVersions': [
-                '1.2.5-r1'
-              ],
-              'installedVersion': '1.2.5-r0',
-              'packageName':      'musl-utils',
-              'purl':             'pkg:apk/alpine/musl-utils@1.2.5-r0?arch=riscv64&distro=3.20.5',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2025/02/13/2',
-                'http://www.openwall.com/lists/oss-security/2025/02/13/3',
-                'http://www.openwall.com/lists/oss-security/2025/02/13/4',
-                'http://www.openwall.com/lists/oss-security/2025/02/13/5',
-                'http://www.openwall.com/lists/oss-security/2025/02/14/5',
-                'http://www.openwall.com/lists/oss-security/2025/02/14/6',
-                'https://git.musl-libc.org/cgit/musl/commit/?id=c47ad25ea3b484e10326f933e927c0bc8cded3da',
-                'https://git.musl-libc.org/cgit/musl/commit/?id=e5adcd97b5196e29991b524237381a0202a60659',
-                'https://www.openwall.com/lists/oss-security/2025/02/13/2'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'musl libc 0.9.13 through 1.2.5 before 1.2.6 has an out-of-bounds write ...'
-            },
-            {
-              'cve':  'CVE-2024-58251',
-              'cwes': [
-                'CWE-150'
-              ],
-              'description':   'In netstat in BusyBox through 1.37.0, local users can launch of network application with an argv[0] containing an ANSI terminal escape sequence, leading to a denial of service (terminal locked up) when netstat is used by a victim.',
-              'diffID':        'sha256:945d14811b65488b1ae0b02ed9ae97066ef9fe7aa237336794b7a50ceeea4d80',
-              'fixedVersions': [
-                '1.36.1-r31'
-              ],
-              'installedVersion': '1.36.1-r29',
-              'packageName':      'ssl_client',
-              'purl':             'pkg:apk/alpine/ssl_client@1.36.1-r29?arch=riscv64&distro=3.20.5',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2025/04/23/6',
-                'https://bugs.busybox.net/show_bug.cgi?id=15922',
-                'https://www.busybox.net',
-                'https://www.busybox.net/downloads/',
-                'https://www.cve.org/CVERecord?id=CVE-2024-58251'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'In netstat in BusyBox through 1.37.0, local users can launch of networ ...'
-            },
-            {
-              'cve':  'CVE-2025-46394',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '3.3',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-451'
-              ],
-              'description':   'In tar in BusyBox through 1.37.0, a TAR archive can have filenames hidden from a listing through the use of terminal escape sequences.',
-              'diffID':        'sha256:945d14811b65488b1ae0b02ed9ae97066ef9fe7aa237336794b7a50ceeea4d80',
-              'fixedVersions': [
-                '1.36.1-r31'
-              ],
-              'installedVersion': '1.36.1-r29',
-              'packageName':      'ssl_client',
-              'purl':             'pkg:apk/alpine/ssl_client@1.36.1-r29?arch=riscv64&distro=3.20.5',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2025/04/23/5',
-                'http://www.openwall.com/lists/oss-security/2025/04/24/3',
-                'https://bugs.busybox.net/show_bug.cgi?id=16018',
-                'https://lists.busybox.net/pipermail/busybox/2024-July/090806.html',
-                'https://lists.busybox.net/pipermail/busybox/2024-July/090814.html',
-                'https://www.busybox.net',
-                'https://www.busybox.net/downloads/',
-                'https://www.cve.org/CVERecord?id=CVE-2025-46394',
-                'https://www.openwall.com/lists/oss-security/2025/04/23/1'
-              ],
-              'severity':   'LOW',
-              'suppressed': false,
-              'title':      'In tar in BusyBox through 1.37.0, a TAR archive can have filenames hid ...'
-            }
-          ]
-        }
-      ],
-      'summary': {
-        'critical':   0,
-        'high':       4,
-        'low':        5,
-        'medium':     9,
-        'suppressed': 0,
-        'unknown':    0
-      }
-    }
-  },
-  {
-    'id':    'default/d34b30700563700be05b190aed10a41e171890826b11b79f840660b0912ec838',
-    'type':  'storage.sbomscanner.kubewarden.io.vulnerabilityreport',
-    'links': {
-      'patch':  'https://localhost:8005/v1/storage.sbomscanner.kubewarden.io.vulnerabilityreports/default/d34b30700563700be05b190aed10a41e171890826b11b79f840660b0912ec838',
-      'remove': 'https://localhost:8005/v1/storage.sbomscanner.kubewarden.io.vulnerabilityreports/default/d34b30700563700be05b190aed10a41e171890826b11b79f840660b0912ec838',
-      'self':   'https://localhost:8005/v1/storage.sbomscanner.kubewarden.io.vulnerabilityreports/default/d34b30700563700be05b190aed10a41e171890826b11b79f840660b0912ec838',
-      'update': 'https://localhost:8005/v1/storage.sbomscanner.kubewarden.io.vulnerabilityreports/default/d34b30700563700be05b190aed10a41e171890826b11b79f840660b0912ec838',
-      'view':   'https://localhost:8005/apis/storage.sbomscanner.kubewarden.io/v1alpha1/namespaces/default/vulnerabilityreports/d34b30700563700be05b190aed10a41e171890826b11b79f840660b0912ec838'
-    },
-    'apiVersion':    'storage.sbomscanner.kubewarden.io/v1alpha1',
-    'imageMetadata': {
-      'digest':      'sha256:b1429bbe9300c9d5407491acf2a3ccd1ce19f24d6662c1d0d024ad6d8f0f8d5d',
-      'platform':    'linux/amd64',
-      'registry':    'demo-02',
-      'registryURI': 'ghcr.io',
-      'repository':  'linuxcontainers/alpine',
-      'tag':         '3.16.1'
-    },
-    'kind':     'VulnerabilityReport',
-    'metadata': {
-      'creationTimestamp': '2026-01-09T22:45:55Z',
-      'fields':            [
-        'd34b30700563700be05b190aed10a41e171890826b11b79f840660b0912ec838',
-        'ghcr.io/linuxcontainers/alpine:3.16.1',
-        'linux/amd64',
-        '24 (0 suppressed)'
-      ],
-      'labels': {
-        'app.kubernetes.io/managed-by':          'sbomscanner',
-        'app.kubernetes.io/part-of':             'sbomscanner',
-        'sbomscanner.kubewarden.io/scanjob-uid': '42184d01-4b15-466f-98aa-e802d1b6b6b8'
-      },
-      'name':            'd34b30700563700be05b190aed10a41e171890826b11b79f840660b0912ec838',
-      'namespace':       'default',
-      'ownerReferences': [
-        {
-          'apiVersion':         'storage.sbomscanner.kubewarden.io/v1alpha1',
-          'blockOwnerDeletion': true,
-          'controller':         true,
-          'kind':               'SBOM',
-          'name':               'd34b30700563700be05b190aed10a41e171890826b11b79f840660b0912ec838',
-          'uid':                '30f12891-6123-41fb-b3cf-425c90df8f84'
-        }
-      ],
-      'relationships': [
-        {
-          'fromId':   'default/d34b30700563700be05b190aed10a41e171890826b11b79f840660b0912ec838',
-          'fromType': 'storage.sbomscanner.kubewarden.io.sbom',
-          'rel':      'owner',
-          'state':    'active',
-          'message':  'Resource is current'
-        }
-      ],
-      'resourceVersion': '4',
-      'state':           {
-        'error':         false,
-        'message':       'Resource is current',
-        'name':          'active',
-        'transitioning': false
-      },
-      'uid': '67c4d625-d93f-472a-bcf9-a29197a8cfdb'
-    },
-    'report': {
-      'results': [
-        {
-          'class':           'os-pkgs',
-          'target':          '/var/run/worker/trivy.sbom.3098784353.json (alpine 3.16.1)',
-          'type':            'alpine',
-          'vulnerabilities': [
-            {
-              'cve':  'CVE-2023-42366',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.5',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.1',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-787'
-              ],
-              'description':   'A heap-buffer-overflow was discovered in BusyBox v.1.36.1 in the next_token function at awk.c:1159.',
-              'diffID':        'sha256:8185abbba581bec9174836154a57e09da6c7ed1633216992ffbcf36971626d61',
-              'fixedVersions': [
-                '1.35.0-r18'
-              ],
-              'installedVersion': '1.35.0-r17',
-              'packageName':      'busybox',
-              'purl':             'pkg:apk/alpine/busybox@1.35.0-r17?arch=x86_64&distro=3.16.1',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2023-42366',
-                'https://bugs.busybox.net/show_bug.cgi?id=15874',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-42366',
-                'https://security.netapp.com/advisory/ntap-20241206-0007/',
-                'https://www.cve.org/CVERecord?id=CVE-2023-42366'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'busybox: A heap-buffer-overflow'
-            },
-            {
-              'cve':  'CVE-2022-4450',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'nvd': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-415'
-              ],
-              'description':   'The function PEM_read_bio_ex() reads a PEM file from a BIO and parses and\ndecodes the "name" (e.g. "CERTIFICATE"), any header data and the payload data.\nIf the function succeeds then the "name_out", "header" and "data" arguments are\npopulated with pointers to buffers containing the relevant decoded data. The\ncaller is responsible for freeing those buffers. It is possible to construct a\nPEM file that results in 0 bytes of payload data. In this case PEM_read_bio_ex()\nwill return a failure code but will populate the header argument with a pointer\nto a buffer that has already been freed. If the caller also frees this buffer\nthen a double free will occur. This will most likely lead to a crash. This\ncould be exploited by an attacker who has the ability to supply malicious PEM\nfiles for parsing to achieve a denial of service attack.\n\nThe functions PEM_read_bio() and PEM_read() are simple wrappers around\nPEM_read_bio_ex() and therefore these functions are also directly affected.\n\nThese functions are also called indirectly by a number of other OpenSSL\nfunctions including PEM_X509_INFO_read_bio_ex() and\nSSL_CTX_use_serverinfo_file() which are also vulnerable. Some OpenSSL internal\nuses of these functions are not vulnerable because the caller does not free the\nheader argument if PEM_read_bio_ex() returns a failure code. These locations\ninclude the PEM_read_bio_TYPE() functions as well as the decoders introduced in\nOpenSSL 3.0.\n\nThe OpenSSL asn1parse command line application is also impacted by this issue.',
-              'diffID':        'sha256:ec34fcc1d526fba48f7f88e4ec765fccc17d4692570db85cf32d9d6b020330f2',
-              'fixedVersions': [
-                '1.1.1t-r0'
-              ],
-              'installedVersion': '1.1.1q-r0',
-              'packageName':      'libcrypto1.1',
-              'purl':             'pkg:apk/alpine/libcrypto1.1@1.1.1q-r0?arch=x86_64&distro=3.16.1',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2023:2165',
-                'https://access.redhat.com/security/cve/CVE-2022-4450',
-                'https://bugzilla.redhat.com/1960321',
-                'https://bugzilla.redhat.com/2164440',
-                'https://bugzilla.redhat.com/2164487',
-                'https://bugzilla.redhat.com/2164492',
-                'https://bugzilla.redhat.com/2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144000',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144003',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144006',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144008',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144010',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144012',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144015',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144017',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144019',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2145170',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2158412',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164440',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164487',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164488',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164492',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164497',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164499',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164500',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4203',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4304',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4450',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0215',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0216',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0217',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0286',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0401',
-                'https://errata.almalinux.org/9/ALSA-2023-2165.html',
-                'https://errata.rockylinux.org/RLSA-2023:0946',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=63bcf189be73a9cc1264059bed6f57974be74a83',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=bbcf509bd046b34cca19c766bbddc31683d0858b',
-                'https://linux.oracle.com/cve/CVE-2022-4450.html',
-                'https://linux.oracle.com/errata/ELSA-2023-32791.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2022-4450',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0003',
-                'https://rustsec.org/advisories/RUSTSEC-2023-0010.html',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://ubuntu.com/security/notices/USN-5844-1',
-                'https://ubuntu.com/security/notices/USN-6564-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2022-4450',
-                'https://www.openssl.org/news/secadv/20230207.txt'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: double free after calling PEM_read_bio_ex'
-            },
-            {
-              'cve':  'CVE-2023-0215',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'nvd': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   'The public API function BIO_new_NDEF is a helper function used for streaming\nASN.1 data via a BIO. It is primarily used internally to OpenSSL to support the\nSMIME, CMS and PKCS7 streaming capabilities, but may also be called directly by\nend user applications.\n\nThe function receives a BIO from the caller, prepends a new BIO_f_asn1 filter\nBIO onto the front of it to form a BIO chain, and then returns the new head of\nthe BIO chain to the caller. Under certain conditions, for example if a CMS\nrecipient public key is invalid, the new filter BIO is freed and the function\nreturns a NULL result indicating a failure. However, in this case, the BIO chain\nis not properly cleaned up and the BIO passed by the caller still retains\ninternal pointers to the previously freed filter BIO. If the caller then goes on\nto call BIO_pop() on the BIO then a use-after-free will occur. This will most\nlikely result in a crash.\n\n\n\nThis scenario occurs directly in the internal function B64_write_ASN1() which\nmay cause BIO_new_NDEF() to be called and will subsequently call BIO_pop() on\nthe BIO. This internal function is in turn called by the public API functions\nPEM_write_bio_ASN1_stream, PEM_write_bio_CMS_stream, PEM_write_bio_PKCS7_stream,\nSMIME_write_ASN1, SMIME_write_CMS and SMIME_write_PKCS7.\n\nOther public API functions that may be impacted by this include\ni2d_ASN1_bio_stream, BIO_new_CMS, BIO_new_PKCS7, i2d_CMS_bio_stream and\ni2d_PKCS7_bio_stream.\n\nThe OpenSSL cms and smime command line applications are similarly affected.',
-              'diffID':        'sha256:ec34fcc1d526fba48f7f88e4ec765fccc17d4692570db85cf32d9d6b020330f2',
-              'fixedVersions': [
-                '1.1.1t-r0'
-              ],
-              'installedVersion': '1.1.1q-r0',
-              'packageName':      'libcrypto1.1',
-              'purl':             'pkg:apk/alpine/libcrypto1.1@1.1.1q-r0?arch=x86_64&distro=3.16.1',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2023:2165',
-                'https://access.redhat.com/security/cve/CVE-2023-0215',
-                'https://bugzilla.redhat.com/1960321',
-                'https://bugzilla.redhat.com/2164440',
-                'https://bugzilla.redhat.com/2164487',
-                'https://bugzilla.redhat.com/2164492',
-                'https://bugzilla.redhat.com/2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144000',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144003',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144006',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144008',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144010',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144012',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144015',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144017',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144019',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2145170',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2158412',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164440',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164487',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164488',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164492',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164497',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164499',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164500',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4203',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4304',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4450',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0215',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0216',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0217',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0286',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0401',
-                'https://errata.almalinux.org/9/ALSA-2023-2165.html',
-                'https://errata.rockylinux.org/RLSA-2023:0946',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=8818064ce3c3c0f1b740a5aaba2a987e75bfbafd',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=9816136fe31d92ace4037d5da5257f763aeeb4eb',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=c3829dd8825c654652201e16f8a0a0c46ee3f344',
-                'https://linux.oracle.com/cve/CVE-2023-0215.html',
-                'https://linux.oracle.com/errata/ELSA-2023-32791.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-0215',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0003',
-                'https://rustsec.org/advisories/RUSTSEC-2023-0009.html',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://security.netapp.com/advisory/ntap-20230427-0007',
-                'https://security.netapp.com/advisory/ntap-20230427-0007/',
-                'https://security.netapp.com/advisory/ntap-20230427-0009',
-                'https://security.netapp.com/advisory/ntap-20230427-0009/',
-                'https://security.netapp.com/advisory/ntap-20240621-0006',
-                'https://security.netapp.com/advisory/ntap-20240621-0006/',
-                'https://ubuntu.com/security/notices/USN-5844-1',
-                'https://ubuntu.com/security/notices/USN-5845-1',
-                'https://ubuntu.com/security/notices/USN-5845-2',
-                'https://ubuntu.com/security/notices/USN-6564-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-0215',
-                'https://www.openssl.org/news/secadv/20230207.txt'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: use-after-free following BIO_new_NDEF'
-            },
-            {
-              'cve':  'CVE-2023-0286',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '7.4',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H'
-                },
-                'nvd': {
-                  'v3score':  '7.4',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.4',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-843'
-              ],
-              'description':   'There is a type confusion vulnerability relating to X.400 address processing\ninside an X.509 GeneralName. X.400 addresses were parsed as an ASN1_STRING but\nthe public structure definition for GENERAL_NAME incorrectly specified the type\nof the x400Address field as ASN1_TYPE. This field is subsequently interpreted by\nthe OpenSSL function GENERAL_NAME_cmp as an ASN1_TYPE rather than an\nASN1_STRING.\n\nWhen CRL checking is enabled (i.e. the application sets the\nX509_V_FLAG_CRL_CHECK flag), this vulnerability may allow an attacker to pass\narbitrary pointers to a memcmp call, enabling them to read memory contents or\nenact a denial of service. In most cases, the attack requires the attacker to\nprovide both the certificate chain and CRL, neither of which need to have a\nvalid signature. If the attacker only controls one of these inputs, the other\ninput must already contain an X.400 address as a CRL distribution point, which\nis uncommon. As such, this vulnerability is most likely to only affect\napplications which have implemented their own functionality for retrieving CRLs\nover a network.',
-              'diffID':        'sha256:ec34fcc1d526fba48f7f88e4ec765fccc17d4692570db85cf32d9d6b020330f2',
-              'fixedVersions': [
-                '1.1.1t-r0'
-              ],
-              'installedVersion': '1.1.1q-r0',
-              'packageName':      'libcrypto1.1',
-              'purl':             'pkg:apk/alpine/libcrypto1.1@1.1.1q-r0?arch=x86_64&distro=3.16.1',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2025:7937',
-                'https://access.redhat.com/security/cve/CVE-2023-0286',
-                'https://access.redhat.com/security/cve/cve-2023-0286',
-                'https://bugzilla.redhat.com/2164440',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144000',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144003',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144006',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144008',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144010',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144012',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144015',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144017',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144019',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2145170',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2158412',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164440',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164487',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164488',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164492',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164497',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164499',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164500',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4203',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4304',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4450',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0215',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0216',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0217',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0286',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0401',
-                'https://errata.almalinux.org/9/ALSA-2025-7937.html',
-                'https://errata.rockylinux.org/RLSA-2023:0946',
-                'https://ftp.openbsd.org/pub/OpenBSD/LibreSSL/libressl-3.6.2-relnotes.txt',
-                'https://ftp.openbsd.org/pub/OpenBSD/patches/7.2/common/018_x509.patch.sig',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=2c6c9d439b484e1ba9830d8454a34fa4f80fdfe9',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=2f7530077e0ef79d98718138716bc51ca0cad658',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=fd2af07dc083a350c959147097003a14a5e8ac4d',
-                'https://github.com/pyca/cryptography',
-                'https://github.com/pyca/cryptography/security/advisories/GHSA-x4qr-2fvf-3mr5',
-                'https://linux.oracle.com/cve/CVE-2023-0286.html',
-                'https://linux.oracle.com/errata/ELSA-2025-7937.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-0286',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0003',
-                'https://rustsec.org/advisories/RUSTSEC-2023-0006.html',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://ubuntu.com/security/notices/USN-5844-1',
-                'https://ubuntu.com/security/notices/USN-5845-1',
-                'https://ubuntu.com/security/notices/USN-5845-2',
-                'https://ubuntu.com/security/notices/USN-6564-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-0286',
-                'https://www.openssl.org/news/secadv/20230207.txt'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: X.400 address type confusion in X.509 GeneralName'
-            },
-            {
-              'cve':  'CVE-2023-0464',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-295'
-              ],
-              'description':   "A security vulnerability has been identified in all supported versions\n\nof OpenSSL related to the verification of X.509 certificate chains\nthat include policy constraints.  Attackers may be able to exploit this\nvulnerability by creating a malicious certificate chain that triggers\nexponential use of computational resources, leading to a denial-of-service\n(DoS) attack on affected systems.\n\nPolicy processing is disabled by default but can be enabled by passing\nthe `-policy' argument to the command line utilities or by calling the\n`X509_VERIFY_PARAM_set1_policies()' function.",
-              'diffID':        'sha256:ec34fcc1d526fba48f7f88e4ec765fccc17d4692570db85cf32d9d6b020330f2',
-              'fixedVersions': [
-                '1.1.1t-r1'
-              ],
-              'installedVersion': '1.1.1q-r0',
-              'packageName':      'libcrypto1.1',
-              'purl':             'pkg:apk/alpine/libcrypto1.1@1.1.1q-r0?arch=x86_64&distro=3.16.1',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2023:3722',
-                'https://access.redhat.com/security/cve/CVE-2023-0464',
-                'https://bugzilla.redhat.com/2181082',
-                'https://bugzilla.redhat.com/2182561',
-                'https://bugzilla.redhat.com/2182565',
-                'https://bugzilla.redhat.com/2188461',
-                'https://bugzilla.redhat.com/2207947',
-                'https://errata.almalinux.org/9/ALSA-2023-3722.html',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=2017771e2db3e2b96f89bbe8766c3209f6a99545',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=2dcd4f1e3115f38cefa43e3efbe9b801c27e642e',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=879f7080d7e141f415c79eaa3a8ac4a3dad0348b',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=959c59c7a0164117e7f8366466a32bb1f8d77ff1',
-                'https://linux.oracle.com/cve/CVE-2023-0464.html',
-                'https://linux.oracle.com/errata/ELSA-2023-3722.html',
-                'https://lists.debian.org/debian-lts-announce/2023/06/msg00011.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-0464',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://security.netapp.com/advisory/ntap-20230406-0006/',
-                'https://security.netapp.com/advisory/ntap-20240621-0006/',
-                'https://ubuntu.com/security/notices/USN-6039-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.couchbase.com/alerts/',
-                'https://www.cve.org/CVERecord?id=CVE-2023-0464',
-                'https://www.debian.org/security/2023/dsa-5417',
-                'https://www.openssl.org/news/secadv/20230322.txt'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: Denial of service by excessive resource usage in verifying X509 policy constraints'
-            },
-            {
-              'cve':  'CVE-2022-4304',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N'
-                },
-                'nvd': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N'
-                },
-                'redhat': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-203'
-              ],
-              'description':   'A timing based side channel exists in the OpenSSL RSA Decryption implementation\nwhich could be sufficient to recover a plaintext across a network in a\nBleichenbacher style attack. To achieve a successful decryption an attacker\nwould have to be able to send a very large number of trial messages for\ndecryption. The vulnerability affects all RSA padding modes: PKCS#1 v1.5,\nRSA-OEAP and RSASVE.\n\nFor example, in a TLS connection, RSA is commonly used by a client to send an\nencrypted pre-master secret to the server. An attacker that had observed a\ngenuine connection between a client and a server could use this flaw to send\ntrial messages to the server and record the time taken to process them. After a\nsufficiently large number of messages the attacker could recover the pre-master\nsecret used for the original connection and thus be able to decrypt the\napplication data sent over that connection.',
-              'diffID':        'sha256:ec34fcc1d526fba48f7f88e4ec765fccc17d4692570db85cf32d9d6b020330f2',
-              'fixedVersions': [
-                '1.1.1t-r0'
-              ],
-              'installedVersion': '1.1.1q-r0',
-              'packageName':      'libcrypto1.1',
-              'purl':             'pkg:apk/alpine/libcrypto1.1@1.1.1q-r0?arch=x86_64&distro=3.16.1',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2023:2165',
-                'https://access.redhat.com/security/cve/CVE-2022-4304',
-                'https://bugzilla.redhat.com/1960321',
-                'https://bugzilla.redhat.com/2164440',
-                'https://bugzilla.redhat.com/2164487',
-                'https://bugzilla.redhat.com/2164492',
-                'https://bugzilla.redhat.com/2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144000',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144003',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144006',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144008',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144010',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144012',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144015',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144017',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144019',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2145170',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2158412',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164440',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164487',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164488',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164492',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164497',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164499',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164500',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4203',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4304',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4450',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0215',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0216',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0217',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0286',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0401',
-                'https://errata.almalinux.org/9/ALSA-2023-2165.html',
-                'https://errata.rockylinux.org/RLSA-2023:0946',
-                'https://linux.oracle.com/cve/CVE-2022-4304.html',
-                'https://linux.oracle.com/errata/ELSA-2023-32791.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2022-4304',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0003',
-                'https://rustsec.org/advisories/RUSTSEC-2023-0007.html',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://ubuntu.com/security/notices/USN-5844-1',
-                'https://ubuntu.com/security/notices/USN-6564-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2022-4304',
-                'https://www.openssl.org/news/secadv/20230207.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: timing attack in RSA Decryption implementation'
-            },
-            {
-              'cve':  'CVE-2023-0465',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N'
-                },
-                'redhat': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-295'
-              ],
-              'description':   "Applications that use a non-default option when verifying certificates may be\nvulnerable to an attack from a malicious CA to circumvent certain checks.\n\nInvalid certificate policies in leaf certificates are silently ignored by\nOpenSSL and other certificate policy checks are skipped for that certificate.\nA malicious CA could use this to deliberately assert invalid certificate policies\nin order to circumvent policy checking on the certificate altogether.\n\nPolicy processing is disabled by default but can be enabled by passing\nthe `-policy' argument to the command line utilities or by calling the\n`X509_VERIFY_PARAM_set1_policies()' function.",
-              'diffID':        'sha256:ec34fcc1d526fba48f7f88e4ec765fccc17d4692570db85cf32d9d6b020330f2',
-              'fixedVersions': [
-                '1.1.1t-r2'
-              ],
-              'installedVersion': '1.1.1q-r0',
-              'packageName':      'libcrypto1.1',
-              'purl':             'pkg:apk/alpine/libcrypto1.1@1.1.1q-r0?arch=x86_64&distro=3.16.1',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2023:3722',
-                'https://access.redhat.com/security/cve/CVE-2023-0465',
-                'https://bugzilla.redhat.com/2181082',
-                'https://bugzilla.redhat.com/2182561',
-                'https://bugzilla.redhat.com/2182565',
-                'https://bugzilla.redhat.com/2188461',
-                'https://bugzilla.redhat.com/2207947',
-                'https://errata.almalinux.org/9/ALSA-2023-3722.html',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=10325176f3d3e98c6e2b3bf5ab1e3b334de6947a',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=1dd43e0709fece299b15208f36cc7c76209ba0bb',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=b013765abfa80036dc779dd0e50602c57bb3bf95',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=facfb1ab745646e97a1920977ae4a9965ea61d5c',
-                'https://linux.oracle.com/cve/CVE-2023-0465.html',
-                'https://linux.oracle.com/errata/ELSA-2023-3722.html',
-                'https://lists.debian.org/debian-lts-announce/2023/06/msg00011.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-0465',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://security.netapp.com/advisory/ntap-20230414-0001/',
-                'https://ubuntu.com/security/notices/USN-6039-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-0465',
-                'https://www.debian.org/security/2023/dsa-5417',
-                'https://www.openssl.org/news/secadv/20230328.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: Invalid certificate policies in leaf certificates are silently ignored'
-            },
-            {
-              'cve':  'CVE-2023-2650',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '6.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-770'
-              ],
-              'description':   "Issue summary: Processing some specially crafted ASN.1 object identifiers or\ndata containing them may be very slow.\n\nImpact summary: Applications that use OBJ_obj2txt() directly, or use any of\nthe OpenSSL subsystems OCSP, PKCS7/SMIME, CMS, CMP/CRMF or TS with no message\nsize limit may experience notable to very long delays when processing those\nmessages, which may lead to a Denial of Service.\n\nAn OBJECT IDENTIFIER is composed of a series of numbers - sub-identifiers -\nmost of which have no size limit.  OBJ_obj2txt() may be used to translate\nan ASN.1 OBJECT IDENTIFIER given in DER encoding form (using the OpenSSL\ntype ASN1_OBJECT) to its canonical numeric text form, which are the\nsub-identifiers of the OBJECT IDENTIFIER in decimal form, separated by\nperiods.\n\nWhen one of the sub-identifiers in the OBJECT IDENTIFIER is very large\n(these are sizes that are seen as absurdly large, taking up tens or hundreds\nof KiBs), the translation to a decimal number in text may take a very long\ntime.  The time complexity is O(n^2) with 'n' being the size of the\nsub-identifiers in bytes (*).\n\nWith OpenSSL 3.0, support to fetch cryptographic algorithms using names /\nidentifiers in string form was introduced.  This includes using OBJECT\nIDENTIFIERs in canonical numeric text form as identifiers for fetching\nalgorithms.\n\nSuch OBJECT IDENTIFIERs may be received through the ASN.1 structure\nAlgorithmIdentifier, which is commonly used in multiple protocols to specify\nwhat cryptographic algorithm should be used to sign or verify, encrypt or\ndecrypt, or digest passed data.\n\nApplications that call OBJ_obj2txt() directly with untrusted data are\naffected, with any version of OpenSSL.  If the use is for the mere purpose\nof display, the severity is considered low.\n\nIn OpenSSL 3.0 and newer, this affects the subsystems OCSP, PKCS7/SMIME,\nCMS, CMP/CRMF or TS.  It also impacts anything that processes X.509\ncertificates, including simple things like verifying its signature.\n\nThe impact on TLS is relatively low, because all versions of OpenSSL have a\n100KiB limit on the peer's certificate chain.  Additionally, this only\nimpacts clients, or servers that have explicitly enabled client\nauthentication.\n\nIn OpenSSL 1.1.1 and 1.0.2, this only affects displaying diverse objects,\nsuch as X.509 certificates.  This is assumed to not happen in such a way\nthat it would cause a Denial of Service, so these versions are considered\nnot affected by this issue in such a way that it would be cause for concern,\nand the severity is therefore considered low.",
-              'diffID':        'sha256:ec34fcc1d526fba48f7f88e4ec765fccc17d4692570db85cf32d9d6b020330f2',
-              'fixedVersions': [
-                '1.1.1u-r0'
-              ],
-              'installedVersion': '1.1.1q-r0',
-              'packageName':      'libcrypto1.1',
-              'purl':             'pkg:apk/alpine/libcrypto1.1@1.1.1q-r0?arch=x86_64&distro=3.16.1',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2023/05/30/1',
-                'https://access.redhat.com/errata/RHSA-2023:6330',
-                'https://access.redhat.com/security/cve/CVE-2023-2650',
-                'https://bugzilla.redhat.com/1858038',
-                'https://bugzilla.redhat.com/2207947',
-                'https://errata.almalinux.org/9/ALSA-2023-6330.html',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=423a2bc737a908ad0c77bda470b2b59dc879936b',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=853c5e56ee0b8650c73140816bb8b91d6163422c',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=9e209944b35cf82368071f160a744b6178f9b098',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=db779b0e10b047f2585615e0b8f2acdf21f8544a',
-                'https://linux.oracle.com/cve/CVE-2023-2650.html',
-                'https://linux.oracle.com/errata/ELSA-2023-6330.html',
-                'https://lists.debian.org/debian-lts-announce/2023/06/msg00011.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-2650',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0009',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://security.netapp.com/advisory/ntap-20230703-0001/',
-                'https://security.netapp.com/advisory/ntap-20231027-0009/',
-                'https://ubuntu.com/security/notices/USN-6119-1',
-                'https://ubuntu.com/security/notices/USN-6188-1',
-                'https://ubuntu.com/security/notices/USN-6672-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-2650',
-                'https://www.debian.org/security/2023/dsa-5417',
-                'https://www.openssl.org/news/secadv/20230530.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: Possible DoS translating ASN.1 object identifiers'
-            },
-            {
-              'cve':  'CVE-2023-3446',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L'
-                },
-                'redhat': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L'
-                }
-              },
-              'cwes': [
-                'CWE-606',
-                'CWE-1333'
-              ],
-              'description':   "Issue summary: Checking excessively long DH keys or parameters may be very slow.\n\nImpact summary: Applications that use the functions DH_check(), DH_check_ex()\nor EVP_PKEY_param_check() to check a DH key or DH parameters may experience long\ndelays. Where the key or parameters that are being checked have been obtained\nfrom an untrusted source this may lead to a Denial of Service.\n\nThe function DH_check() performs various checks on DH parameters. One of those\nchecks confirms that the modulus ('p' parameter) is not too large. Trying to use\na very large modulus is slow and OpenSSL will not normally use a modulus which\nis over 10,000 bits in length.\n\nHowever the DH_check() function checks numerous aspects of the key or parameters\nthat have been supplied. Some of those checks use the supplied modulus value\neven if it has already been found to be too large.\n\nAn application that calls DH_check() and supplies a key or parameters obtained\nfrom an untrusted source could be vulernable to a Denial of Service attack.\n\nThe function DH_check() is itself called by a number of other OpenSSL functions.\nAn application calling any of those other functions may similarly be affected.\nThe other functions affected by this are DH_check_ex() and\nEVP_PKEY_param_check().\n\nAlso vulnerable are the OpenSSL dhparam and pkeyparam command line applications\nwhen using the '-check' option.\n\nThe OpenSSL SSL/TLS implementation is not affected by this issue.\nThe OpenSSL 3.0 and 3.1 FIPS providers are not affected by this issue.",
-              'diffID':        'sha256:ec34fcc1d526fba48f7f88e4ec765fccc17d4692570db85cf32d9d6b020330f2',
-              'fixedVersions': [
-                '1.1.1u-r2'
-              ],
-              'installedVersion': '1.1.1q-r0',
-              'packageName':      'libcrypto1.1',
-              'purl':             'pkg:apk/alpine/libcrypto1.1@1.1.1q-r0?arch=x86_64&distro=3.16.1',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2023/07/19/4',
-                'http://www.openwall.com/lists/oss-security/2023/07/19/5',
-                'http://www.openwall.com/lists/oss-security/2023/07/19/6',
-                'http://www.openwall.com/lists/oss-security/2023/07/31/1',
-                'http://www.openwall.com/lists/oss-security/2024/05/16/1',
-                'https://access.redhat.com/errata/RHSA-2024:2447',
-                'https://access.redhat.com/security/cve/CVE-2023-3446',
-                'https://bugzilla.redhat.com/2223016',
-                'https://bugzilla.redhat.com/2224962',
-                'https://bugzilla.redhat.com/2227852',
-                'https://bugzilla.redhat.com/2248616',
-                'https://bugzilla.redhat.com/2257571',
-                'https://bugzilla.redhat.com/2258502',
-                'https://bugzilla.redhat.com/2259944',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2224962',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2257582',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2257583',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2258677',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2258688',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2258691',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2258694',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2258700',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-36763',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-36764',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3446',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45229',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45231',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45232',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45233',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45235',
-                'https://errata.almalinux.org/9/ALSA-2024-2447.html',
-                'https://errata.rockylinux.org/RLSA-2024:2264',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=1fa20cf2f506113c761777127a38bce5068740eb',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=8780a896543a654e757db1b9396383f9d8095528',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=9a0a4d3c1e7138915563c0df4fe6a3f9377b839c',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=fc9867c1e03c22ebf56943be205202e576aabf23',
-                'https://linux.oracle.com/cve/CVE-2023-3446.html',
-                'https://linux.oracle.com/errata/ELSA-2024-2447.html',
-                'https://lists.debian.org/debian-lts-announce/2023/08/msg00019.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-3446',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://security.netapp.com/advisory/ntap-20230803-0011/',
-                'https://ubuntu.com/security/notices/USN-6435-1',
-                'https://ubuntu.com/security/notices/USN-6435-2',
-                'https://ubuntu.com/security/notices/USN-6450-1',
-                'https://ubuntu.com/security/notices/USN-6709-1',
-                'https://ubuntu.com/security/notices/USN-7018-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-3446',
-                'https://www.openssl.org/news/secadv/20230719.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: Excessive time spent checking DH keys and parameters'
-            },
-            {
-              'cve':  'CVE-2023-3817',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L'
-                },
-                'redhat': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L'
-                }
-              },
-              'cwes': [
-                'CWE-606',
-                'CWE-834'
-              ],
-              'description':   'Issue summary: Checking excessively long DH keys or parameters may be very slow.\n\nImpact summary: Applications that use the functions DH_check(), DH_check_ex()\nor EVP_PKEY_param_check() to check a DH key or DH parameters may experience long\ndelays. Where the key or parameters that are being checked have been obtained\nfrom an untrusted source this may lead to a Denial of Service.\n\nThe function DH_check() performs various checks on DH parameters. After fixing\nCVE-2023-3446 it was discovered that a large q parameter value can also trigger\nan overly long computation during some of these checks. A correct q value,\nif present, cannot be larger than the modulus p parameter, thus it is\nunnecessary to perform these checks if q is larger than p.\n\nAn application that calls DH_check() and supplies a key or parameters obtained\nfrom an untrusted source could be vulnerable to a Denial of Service attack.\n\nThe function DH_check() is itself called by a number of other OpenSSL functions.\nAn application calling any of those other functions may similarly be affected.\nThe other functions affected by this are DH_check_ex() and\nEVP_PKEY_param_check().\n\nAlso vulnerable are the OpenSSL dhparam and pkeyparam command line applications\nwhen using the "-check" option.\n\nThe OpenSSL SSL/TLS implementation is not affected by this issue.\n\nThe OpenSSL 3.0 and 3.1 FIPS providers are not affected by this issue.',
-              'diffID':        'sha256:ec34fcc1d526fba48f7f88e4ec765fccc17d4692570db85cf32d9d6b020330f2',
-              'fixedVersions': [
-                '1.1.1v-r0'
-              ],
-              'installedVersion': '1.1.1q-r0',
-              'packageName':      'libcrypto1.1',
-              'purl':             'pkg:apk/alpine/libcrypto1.1@1.1.1q-r0?arch=x86_64&distro=3.16.1',
-              'references':       [
-                'http://seclists.org/fulldisclosure/2023/Jul/43',
-                'http://www.openwall.com/lists/oss-security/2023/07/31/1',
-                'http://www.openwall.com/lists/oss-security/2023/09/22/11',
-                'http://www.openwall.com/lists/oss-security/2023/09/22/9',
-                'http://www.openwall.com/lists/oss-security/2023/11/06/2',
-                'https://access.redhat.com/errata/RHSA-2024:2447',
-                'https://access.redhat.com/security/cve/CVE-2023-3817',
-                'https://bugzilla.redhat.com/2223016',
-                'https://bugzilla.redhat.com/2224962',
-                'https://bugzilla.redhat.com/2227852',
-                'https://bugzilla.redhat.com/2248616',
-                'https://bugzilla.redhat.com/2257571',
-                'https://bugzilla.redhat.com/2258502',
-                'https://bugzilla.redhat.com/2259944',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2224962',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2227852',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2248616',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2270358',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3446',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3817',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-5678',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-2408',
-                'https://errata.almalinux.org/9/ALSA-2024-2447.html',
-                'https://errata.rockylinux.org/RLSA-2023:7877',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=6a1eb62c29db6cb5eec707f9338aee00f44e26f5',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=869ad69aadd985c7b8ca6f4e5dd0eb274c9f3644',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=9002fd07327a91f35ba6c1307e71fa6fd4409b7f',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=91ddeba0f2269b017dc06c46c993a788974b1aa5',
-                'https://linux.oracle.com/cve/CVE-2023-3817.html',
-                'https://linux.oracle.com/errata/ELSA-2024-2447.html',
-                'https://lists.debian.org/debian-lts-announce/2023/08/msg00019.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-3817',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://security.netapp.com/advisory/ntap-20230818-0014/',
-                'https://security.netapp.com/advisory/ntap-20231027-0008/',
-                'https://security.netapp.com/advisory/ntap-20240621-0006/',
-                'https://ubuntu.com/security/notices/USN-6435-1',
-                'https://ubuntu.com/security/notices/USN-6435-2',
-                'https://ubuntu.com/security/notices/USN-6450-1',
-                'https://ubuntu.com/security/notices/USN-6709-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-3817',
-                'https://www.openssl.org/news/secadv/20230731.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'OpenSSL: Excessive time spent checking DH q parameter value'
-            },
-            {
-              'cve':  'CVE-2023-5678',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L'
-                },
-                'redhat': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L'
-                }
-              },
-              'cwes': [
-                'CWE-606',
-                'CWE-754'
-              ],
-              'description':   "Issue summary: Generating excessively long X9.42 DH keys or checking\nexcessively long X9.42 DH keys or parameters may be very slow.\n\nImpact summary: Applications that use the functions DH_generate_key() to\ngenerate an X9.42 DH key may experience long delays.  Likewise, applications\nthat use DH_check_pub_key(), DH_check_pub_key_ex() or EVP_PKEY_public_check()\nto check an X9.42 DH key or X9.42 DH parameters may experience long delays.\nWhere the key or parameters that are being checked have been obtained from\nan untrusted source this may lead to a Denial of Service.\n\nWhile DH_check() performs all the necessary checks (as of CVE-2023-3817),\nDH_check_pub_key() doesn't make any of these checks, and is therefore\nvulnerable for excessively large P and Q parameters.\n\nLikewise, while DH_generate_key() performs a check for an excessively large\nP, it doesn't check for an excessively large Q.\n\nAn application that calls DH_generate_key() or DH_check_pub_key() and\nsupplies a key or parameters obtained from an untrusted source could be\nvulnerable to a Denial of Service attack.\n\nDH_generate_key() and DH_check_pub_key() are also called by a number of\nother OpenSSL functions.  An application calling any of those other\nfunctions may similarly be affected.  The other functions affected by this\nare DH_check_pub_key_ex(), EVP_PKEY_public_check(), and EVP_PKEY_generate().\n\nAlso vulnerable are the OpenSSL pkey command line application when using the\n\"-pubcheck\" option, as well as the OpenSSL genpkey command line application.\n\nThe OpenSSL SSL/TLS implementation is not affected by this issue.\n\nThe OpenSSL 3.0 and 3.1 FIPS providers are not affected by this issue.",
-              'diffID':        'sha256:ec34fcc1d526fba48f7f88e4ec765fccc17d4692570db85cf32d9d6b020330f2',
-              'fixedVersions': [
-                '1.1.1w-r1'
-              ],
-              'installedVersion': '1.1.1q-r0',
-              'packageName':      'libcrypto1.1',
-              'purl':             'pkg:apk/alpine/libcrypto1.1@1.1.1q-r0?arch=x86_64&distro=3.16.1',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2024/03/11/1',
-                'https://access.redhat.com/errata/RHSA-2024:2447',
-                'https://access.redhat.com/security/cve/CVE-2023-5678',
-                'https://bugzilla.redhat.com/2223016',
-                'https://bugzilla.redhat.com/2224962',
-                'https://bugzilla.redhat.com/2227852',
-                'https://bugzilla.redhat.com/2248616',
-                'https://bugzilla.redhat.com/2257571',
-                'https://bugzilla.redhat.com/2258502',
-                'https://bugzilla.redhat.com/2259944',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2224962',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2227852',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2248616',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2270358',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3446',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3817',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-5678',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-2408',
-                'https://errata.almalinux.org/9/ALSA-2024-2447.html',
-                'https://errata.rockylinux.org/RLSA-2023:7877',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=34efaef6c103d636ab507a0cc34dca4d3aecc055',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=710fee740904b6290fef0dd5536fbcedbc38ff0c',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=db925ae2e65d0d925adef429afc37f75bd1c2017',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=ddeb4b6c6d527e54ce9a99cba785c0f7776e54b6',
-                'https://linux.oracle.com/cve/CVE-2023-5678.html',
-                'https://linux.oracle.com/errata/ELSA-2024-2447.html',
-                'https://lists.debian.org/debian-lts-announce/2024/10/msg00033.html',
-                'https://lists.debian.org/debian-lts-announce/2024/11/msg00000.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-5678',
-                'https://security.netapp.com/advisory/ntap-20231130-0010/',
-                'https://ubuntu.com/security/notices/USN-6622-1',
-                'https://ubuntu.com/security/notices/USN-6632-1',
-                'https://ubuntu.com/security/notices/USN-6709-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-5678',
-                'https://www.openssl.org/news/secadv/20231106.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: Generating excessively long X9.42 DH keys or checking excessively long X9.42 DH keys or parameters may be very slow'
-            },
-            {
-              'cve':  'CVE-2022-4450',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'nvd': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-415'
-              ],
-              'description':   'The function PEM_read_bio_ex() reads a PEM file from a BIO and parses and\ndecodes the "name" (e.g. "CERTIFICATE"), any header data and the payload data.\nIf the function succeeds then the "name_out", "header" and "data" arguments are\npopulated with pointers to buffers containing the relevant decoded data. The\ncaller is responsible for freeing those buffers. It is possible to construct a\nPEM file that results in 0 bytes of payload data. In this case PEM_read_bio_ex()\nwill return a failure code but will populate the header argument with a pointer\nto a buffer that has already been freed. If the caller also frees this buffer\nthen a double free will occur. This will most likely lead to a crash. This\ncould be exploited by an attacker who has the ability to supply malicious PEM\nfiles for parsing to achieve a denial of service attack.\n\nThe functions PEM_read_bio() and PEM_read() are simple wrappers around\nPEM_read_bio_ex() and therefore these functions are also directly affected.\n\nThese functions are also called indirectly by a number of other OpenSSL\nfunctions including PEM_X509_INFO_read_bio_ex() and\nSSL_CTX_use_serverinfo_file() which are also vulnerable. Some OpenSSL internal\nuses of these functions are not vulnerable because the caller does not free the\nheader argument if PEM_read_bio_ex() returns a failure code. These locations\ninclude the PEM_read_bio_TYPE() functions as well as the decoders introduced in\nOpenSSL 3.0.\n\nThe OpenSSL asn1parse command line application is also impacted by this issue.',
-              'diffID':        'sha256:ec34fcc1d526fba48f7f88e4ec765fccc17d4692570db85cf32d9d6b020330f2',
-              'fixedVersions': [
-                '1.1.1t-r0'
-              ],
-              'installedVersion': '1.1.1q-r0',
-              'packageName':      'libssl1.1',
-              'purl':             'pkg:apk/alpine/libssl1.1@1.1.1q-r0?arch=x86_64&distro=3.16.1',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2023:2165',
-                'https://access.redhat.com/security/cve/CVE-2022-4450',
-                'https://bugzilla.redhat.com/1960321',
-                'https://bugzilla.redhat.com/2164440',
-                'https://bugzilla.redhat.com/2164487',
-                'https://bugzilla.redhat.com/2164492',
-                'https://bugzilla.redhat.com/2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144000',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144003',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144006',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144008',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144010',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144012',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144015',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144017',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144019',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2145170',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2158412',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164440',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164487',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164488',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164492',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164497',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164499',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164500',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4203',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4304',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4450',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0215',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0216',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0217',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0286',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0401',
-                'https://errata.almalinux.org/9/ALSA-2023-2165.html',
-                'https://errata.rockylinux.org/RLSA-2023:0946',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=63bcf189be73a9cc1264059bed6f57974be74a83',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=bbcf509bd046b34cca19c766bbddc31683d0858b',
-                'https://linux.oracle.com/cve/CVE-2022-4450.html',
-                'https://linux.oracle.com/errata/ELSA-2023-32791.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2022-4450',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0003',
-                'https://rustsec.org/advisories/RUSTSEC-2023-0010.html',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://ubuntu.com/security/notices/USN-5844-1',
-                'https://ubuntu.com/security/notices/USN-6564-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2022-4450',
-                'https://www.openssl.org/news/secadv/20230207.txt'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: double free after calling PEM_read_bio_ex'
-            },
-            {
-              'cve':  'CVE-2023-0215',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'nvd': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   'The public API function BIO_new_NDEF is a helper function used for streaming\nASN.1 data via a BIO. It is primarily used internally to OpenSSL to support the\nSMIME, CMS and PKCS7 streaming capabilities, but may also be called directly by\nend user applications.\n\nThe function receives a BIO from the caller, prepends a new BIO_f_asn1 filter\nBIO onto the front of it to form a BIO chain, and then returns the new head of\nthe BIO chain to the caller. Under certain conditions, for example if a CMS\nrecipient public key is invalid, the new filter BIO is freed and the function\nreturns a NULL result indicating a failure. However, in this case, the BIO chain\nis not properly cleaned up and the BIO passed by the caller still retains\ninternal pointers to the previously freed filter BIO. If the caller then goes on\nto call BIO_pop() on the BIO then a use-after-free will occur. This will most\nlikely result in a crash.\n\n\n\nThis scenario occurs directly in the internal function B64_write_ASN1() which\nmay cause BIO_new_NDEF() to be called and will subsequently call BIO_pop() on\nthe BIO. This internal function is in turn called by the public API functions\nPEM_write_bio_ASN1_stream, PEM_write_bio_CMS_stream, PEM_write_bio_PKCS7_stream,\nSMIME_write_ASN1, SMIME_write_CMS and SMIME_write_PKCS7.\n\nOther public API functions that may be impacted by this include\ni2d_ASN1_bio_stream, BIO_new_CMS, BIO_new_PKCS7, i2d_CMS_bio_stream and\ni2d_PKCS7_bio_stream.\n\nThe OpenSSL cms and smime command line applications are similarly affected.',
-              'diffID':        'sha256:ec34fcc1d526fba48f7f88e4ec765fccc17d4692570db85cf32d9d6b020330f2',
-              'fixedVersions': [
-                '1.1.1t-r0'
-              ],
-              'installedVersion': '1.1.1q-r0',
-              'packageName':      'libssl1.1',
-              'purl':             'pkg:apk/alpine/libssl1.1@1.1.1q-r0?arch=x86_64&distro=3.16.1',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2023:2165',
-                'https://access.redhat.com/security/cve/CVE-2023-0215',
-                'https://bugzilla.redhat.com/1960321',
-                'https://bugzilla.redhat.com/2164440',
-                'https://bugzilla.redhat.com/2164487',
-                'https://bugzilla.redhat.com/2164492',
-                'https://bugzilla.redhat.com/2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144000',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144003',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144006',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144008',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144010',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144012',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144015',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144017',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144019',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2145170',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2158412',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164440',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164487',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164488',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164492',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164497',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164499',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164500',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4203',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4304',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4450',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0215',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0216',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0217',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0286',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0401',
-                'https://errata.almalinux.org/9/ALSA-2023-2165.html',
-                'https://errata.rockylinux.org/RLSA-2023:0946',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=8818064ce3c3c0f1b740a5aaba2a987e75bfbafd',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=9816136fe31d92ace4037d5da5257f763aeeb4eb',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=c3829dd8825c654652201e16f8a0a0c46ee3f344',
-                'https://linux.oracle.com/cve/CVE-2023-0215.html',
-                'https://linux.oracle.com/errata/ELSA-2023-32791.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-0215',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0003',
-                'https://rustsec.org/advisories/RUSTSEC-2023-0009.html',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://security.netapp.com/advisory/ntap-20230427-0007',
-                'https://security.netapp.com/advisory/ntap-20230427-0007/',
-                'https://security.netapp.com/advisory/ntap-20230427-0009',
-                'https://security.netapp.com/advisory/ntap-20230427-0009/',
-                'https://security.netapp.com/advisory/ntap-20240621-0006',
-                'https://security.netapp.com/advisory/ntap-20240621-0006/',
-                'https://ubuntu.com/security/notices/USN-5844-1',
-                'https://ubuntu.com/security/notices/USN-5845-1',
-                'https://ubuntu.com/security/notices/USN-5845-2',
-                'https://ubuntu.com/security/notices/USN-6564-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-0215',
-                'https://www.openssl.org/news/secadv/20230207.txt'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: use-after-free following BIO_new_NDEF'
-            },
-            {
-              'cve':  'CVE-2023-0286',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '7.4',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H'
-                },
-                'nvd': {
-                  'v3score':  '7.4',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.4',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-843'
-              ],
-              'description':   'There is a type confusion vulnerability relating to X.400 address processing\ninside an X.509 GeneralName. X.400 addresses were parsed as an ASN1_STRING but\nthe public structure definition for GENERAL_NAME incorrectly specified the type\nof the x400Address field as ASN1_TYPE. This field is subsequently interpreted by\nthe OpenSSL function GENERAL_NAME_cmp as an ASN1_TYPE rather than an\nASN1_STRING.\n\nWhen CRL checking is enabled (i.e. the application sets the\nX509_V_FLAG_CRL_CHECK flag), this vulnerability may allow an attacker to pass\narbitrary pointers to a memcmp call, enabling them to read memory contents or\nenact a denial of service. In most cases, the attack requires the attacker to\nprovide both the certificate chain and CRL, neither of which need to have a\nvalid signature. If the attacker only controls one of these inputs, the other\ninput must already contain an X.400 address as a CRL distribution point, which\nis uncommon. As such, this vulnerability is most likely to only affect\napplications which have implemented their own functionality for retrieving CRLs\nover a network.',
-              'diffID':        'sha256:ec34fcc1d526fba48f7f88e4ec765fccc17d4692570db85cf32d9d6b020330f2',
-              'fixedVersions': [
-                '1.1.1t-r0'
-              ],
-              'installedVersion': '1.1.1q-r0',
-              'packageName':      'libssl1.1',
-              'purl':             'pkg:apk/alpine/libssl1.1@1.1.1q-r0?arch=x86_64&distro=3.16.1',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2025:7937',
-                'https://access.redhat.com/security/cve/CVE-2023-0286',
-                'https://access.redhat.com/security/cve/cve-2023-0286',
-                'https://bugzilla.redhat.com/2164440',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144000',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144003',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144006',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144008',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144010',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144012',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144015',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144017',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144019',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2145170',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2158412',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164440',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164487',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164488',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164492',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164497',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164499',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164500',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4203',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4304',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4450',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0215',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0216',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0217',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0286',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0401',
-                'https://errata.almalinux.org/9/ALSA-2025-7937.html',
-                'https://errata.rockylinux.org/RLSA-2023:0946',
-                'https://ftp.openbsd.org/pub/OpenBSD/LibreSSL/libressl-3.6.2-relnotes.txt',
-                'https://ftp.openbsd.org/pub/OpenBSD/patches/7.2/common/018_x509.patch.sig',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=2c6c9d439b484e1ba9830d8454a34fa4f80fdfe9',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=2f7530077e0ef79d98718138716bc51ca0cad658',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=fd2af07dc083a350c959147097003a14a5e8ac4d',
-                'https://github.com/pyca/cryptography',
-                'https://github.com/pyca/cryptography/security/advisories/GHSA-x4qr-2fvf-3mr5',
-                'https://linux.oracle.com/cve/CVE-2023-0286.html',
-                'https://linux.oracle.com/errata/ELSA-2025-7937.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-0286',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0003',
-                'https://rustsec.org/advisories/RUSTSEC-2023-0006.html',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://ubuntu.com/security/notices/USN-5844-1',
-                'https://ubuntu.com/security/notices/USN-5845-1',
-                'https://ubuntu.com/security/notices/USN-5845-2',
-                'https://ubuntu.com/security/notices/USN-6564-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-0286',
-                'https://www.openssl.org/news/secadv/20230207.txt'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: X.400 address type confusion in X.509 GeneralName'
-            },
-            {
-              'cve':  'CVE-2023-0464',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-295'
-              ],
-              'description':   "A security vulnerability has been identified in all supported versions\n\nof OpenSSL related to the verification of X.509 certificate chains\nthat include policy constraints.  Attackers may be able to exploit this\nvulnerability by creating a malicious certificate chain that triggers\nexponential use of computational resources, leading to a denial-of-service\n(DoS) attack on affected systems.\n\nPolicy processing is disabled by default but can be enabled by passing\nthe `-policy' argument to the command line utilities or by calling the\n`X509_VERIFY_PARAM_set1_policies()' function.",
-              'diffID':        'sha256:ec34fcc1d526fba48f7f88e4ec765fccc17d4692570db85cf32d9d6b020330f2',
-              'fixedVersions': [
-                '1.1.1t-r1'
-              ],
-              'installedVersion': '1.1.1q-r0',
-              'packageName':      'libssl1.1',
-              'purl':             'pkg:apk/alpine/libssl1.1@1.1.1q-r0?arch=x86_64&distro=3.16.1',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2023:3722',
-                'https://access.redhat.com/security/cve/CVE-2023-0464',
-                'https://bugzilla.redhat.com/2181082',
-                'https://bugzilla.redhat.com/2182561',
-                'https://bugzilla.redhat.com/2182565',
-                'https://bugzilla.redhat.com/2188461',
-                'https://bugzilla.redhat.com/2207947',
-                'https://errata.almalinux.org/9/ALSA-2023-3722.html',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=2017771e2db3e2b96f89bbe8766c3209f6a99545',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=2dcd4f1e3115f38cefa43e3efbe9b801c27e642e',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=879f7080d7e141f415c79eaa3a8ac4a3dad0348b',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=959c59c7a0164117e7f8366466a32bb1f8d77ff1',
-                'https://linux.oracle.com/cve/CVE-2023-0464.html',
-                'https://linux.oracle.com/errata/ELSA-2023-3722.html',
-                'https://lists.debian.org/debian-lts-announce/2023/06/msg00011.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-0464',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://security.netapp.com/advisory/ntap-20230406-0006/',
-                'https://security.netapp.com/advisory/ntap-20240621-0006/',
-                'https://ubuntu.com/security/notices/USN-6039-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.couchbase.com/alerts/',
-                'https://www.cve.org/CVERecord?id=CVE-2023-0464',
-                'https://www.debian.org/security/2023/dsa-5417',
-                'https://www.openssl.org/news/secadv/20230322.txt'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: Denial of service by excessive resource usage in verifying X509 policy constraints'
-            },
-            {
-              'cve':  'CVE-2022-4304',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N'
-                },
-                'nvd': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N'
-                },
-                'redhat': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-203'
-              ],
-              'description':   'A timing based side channel exists in the OpenSSL RSA Decryption implementation\nwhich could be sufficient to recover a plaintext across a network in a\nBleichenbacher style attack. To achieve a successful decryption an attacker\nwould have to be able to send a very large number of trial messages for\ndecryption. The vulnerability affects all RSA padding modes: PKCS#1 v1.5,\nRSA-OEAP and RSASVE.\n\nFor example, in a TLS connection, RSA is commonly used by a client to send an\nencrypted pre-master secret to the server. An attacker that had observed a\ngenuine connection between a client and a server could use this flaw to send\ntrial messages to the server and record the time taken to process them. After a\nsufficiently large number of messages the attacker could recover the pre-master\nsecret used for the original connection and thus be able to decrypt the\napplication data sent over that connection.',
-              'diffID':        'sha256:ec34fcc1d526fba48f7f88e4ec765fccc17d4692570db85cf32d9d6b020330f2',
-              'fixedVersions': [
-                '1.1.1t-r0'
-              ],
-              'installedVersion': '1.1.1q-r0',
-              'packageName':      'libssl1.1',
-              'purl':             'pkg:apk/alpine/libssl1.1@1.1.1q-r0?arch=x86_64&distro=3.16.1',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2023:2165',
-                'https://access.redhat.com/security/cve/CVE-2022-4304',
-                'https://bugzilla.redhat.com/1960321',
-                'https://bugzilla.redhat.com/2164440',
-                'https://bugzilla.redhat.com/2164487',
-                'https://bugzilla.redhat.com/2164492',
-                'https://bugzilla.redhat.com/2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144000',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144003',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144006',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144008',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144010',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144012',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144015',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144017',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144019',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2145170',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2158412',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164440',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164487',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164488',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164492',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164497',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164499',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164500',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4203',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4304',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4450',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0215',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0216',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0217',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0286',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0401',
-                'https://errata.almalinux.org/9/ALSA-2023-2165.html',
-                'https://errata.rockylinux.org/RLSA-2023:0946',
-                'https://linux.oracle.com/cve/CVE-2022-4304.html',
-                'https://linux.oracle.com/errata/ELSA-2023-32791.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2022-4304',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0003',
-                'https://rustsec.org/advisories/RUSTSEC-2023-0007.html',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://ubuntu.com/security/notices/USN-5844-1',
-                'https://ubuntu.com/security/notices/USN-6564-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2022-4304',
-                'https://www.openssl.org/news/secadv/20230207.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: timing attack in RSA Decryption implementation'
-            },
-            {
-              'cve':  'CVE-2023-0465',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N'
-                },
-                'redhat': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-295'
-              ],
-              'description':   "Applications that use a non-default option when verifying certificates may be\nvulnerable to an attack from a malicious CA to circumvent certain checks.\n\nInvalid certificate policies in leaf certificates are silently ignored by\nOpenSSL and other certificate policy checks are skipped for that certificate.\nA malicious CA could use this to deliberately assert invalid certificate policies\nin order to circumvent policy checking on the certificate altogether.\n\nPolicy processing is disabled by default but can be enabled by passing\nthe `-policy' argument to the command line utilities or by calling the\n`X509_VERIFY_PARAM_set1_policies()' function.",
-              'diffID':        'sha256:ec34fcc1d526fba48f7f88e4ec765fccc17d4692570db85cf32d9d6b020330f2',
-              'fixedVersions': [
-                '1.1.1t-r2'
-              ],
-              'installedVersion': '1.1.1q-r0',
-              'packageName':      'libssl1.1',
-              'purl':             'pkg:apk/alpine/libssl1.1@1.1.1q-r0?arch=x86_64&distro=3.16.1',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2023:3722',
-                'https://access.redhat.com/security/cve/CVE-2023-0465',
-                'https://bugzilla.redhat.com/2181082',
-                'https://bugzilla.redhat.com/2182561',
-                'https://bugzilla.redhat.com/2182565',
-                'https://bugzilla.redhat.com/2188461',
-                'https://bugzilla.redhat.com/2207947',
-                'https://errata.almalinux.org/9/ALSA-2023-3722.html',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=10325176f3d3e98c6e2b3bf5ab1e3b334de6947a',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=1dd43e0709fece299b15208f36cc7c76209ba0bb',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=b013765abfa80036dc779dd0e50602c57bb3bf95',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=facfb1ab745646e97a1920977ae4a9965ea61d5c',
-                'https://linux.oracle.com/cve/CVE-2023-0465.html',
-                'https://linux.oracle.com/errata/ELSA-2023-3722.html',
-                'https://lists.debian.org/debian-lts-announce/2023/06/msg00011.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-0465',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://security.netapp.com/advisory/ntap-20230414-0001/',
-                'https://ubuntu.com/security/notices/USN-6039-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-0465',
-                'https://www.debian.org/security/2023/dsa-5417',
-                'https://www.openssl.org/news/secadv/20230328.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: Invalid certificate policies in leaf certificates are silently ignored'
-            },
-            {
-              'cve':  'CVE-2023-2650',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '6.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-770'
-              ],
-              'description':   "Issue summary: Processing some specially crafted ASN.1 object identifiers or\ndata containing them may be very slow.\n\nImpact summary: Applications that use OBJ_obj2txt() directly, or use any of\nthe OpenSSL subsystems OCSP, PKCS7/SMIME, CMS, CMP/CRMF or TS with no message\nsize limit may experience notable to very long delays when processing those\nmessages, which may lead to a Denial of Service.\n\nAn OBJECT IDENTIFIER is composed of a series of numbers - sub-identifiers -\nmost of which have no size limit.  OBJ_obj2txt() may be used to translate\nan ASN.1 OBJECT IDENTIFIER given in DER encoding form (using the OpenSSL\ntype ASN1_OBJECT) to its canonical numeric text form, which are the\nsub-identifiers of the OBJECT IDENTIFIER in decimal form, separated by\nperiods.\n\nWhen one of the sub-identifiers in the OBJECT IDENTIFIER is very large\n(these are sizes that are seen as absurdly large, taking up tens or hundreds\nof KiBs), the translation to a decimal number in text may take a very long\ntime.  The time complexity is O(n^2) with 'n' being the size of the\nsub-identifiers in bytes (*).\n\nWith OpenSSL 3.0, support to fetch cryptographic algorithms using names /\nidentifiers in string form was introduced.  This includes using OBJECT\nIDENTIFIERs in canonical numeric text form as identifiers for fetching\nalgorithms.\n\nSuch OBJECT IDENTIFIERs may be received through the ASN.1 structure\nAlgorithmIdentifier, which is commonly used in multiple protocols to specify\nwhat cryptographic algorithm should be used to sign or verify, encrypt or\ndecrypt, or digest passed data.\n\nApplications that call OBJ_obj2txt() directly with untrusted data are\naffected, with any version of OpenSSL.  If the use is for the mere purpose\nof display, the severity is considered low.\n\nIn OpenSSL 3.0 and newer, this affects the subsystems OCSP, PKCS7/SMIME,\nCMS, CMP/CRMF or TS.  It also impacts anything that processes X.509\ncertificates, including simple things like verifying its signature.\n\nThe impact on TLS is relatively low, because all versions of OpenSSL have a\n100KiB limit on the peer's certificate chain.  Additionally, this only\nimpacts clients, or servers that have explicitly enabled client\nauthentication.\n\nIn OpenSSL 1.1.1 and 1.0.2, this only affects displaying diverse objects,\nsuch as X.509 certificates.  This is assumed to not happen in such a way\nthat it would cause a Denial of Service, so these versions are considered\nnot affected by this issue in such a way that it would be cause for concern,\nand the severity is therefore considered low.",
-              'diffID':        'sha256:ec34fcc1d526fba48f7f88e4ec765fccc17d4692570db85cf32d9d6b020330f2',
-              'fixedVersions': [
-                '1.1.1u-r0'
-              ],
-              'installedVersion': '1.1.1q-r0',
-              'packageName':      'libssl1.1',
-              'purl':             'pkg:apk/alpine/libssl1.1@1.1.1q-r0?arch=x86_64&distro=3.16.1',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2023/05/30/1',
-                'https://access.redhat.com/errata/RHSA-2023:6330',
-                'https://access.redhat.com/security/cve/CVE-2023-2650',
-                'https://bugzilla.redhat.com/1858038',
-                'https://bugzilla.redhat.com/2207947',
-                'https://errata.almalinux.org/9/ALSA-2023-6330.html',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=423a2bc737a908ad0c77bda470b2b59dc879936b',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=853c5e56ee0b8650c73140816bb8b91d6163422c',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=9e209944b35cf82368071f160a744b6178f9b098',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=db779b0e10b047f2585615e0b8f2acdf21f8544a',
-                'https://linux.oracle.com/cve/CVE-2023-2650.html',
-                'https://linux.oracle.com/errata/ELSA-2023-6330.html',
-                'https://lists.debian.org/debian-lts-announce/2023/06/msg00011.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-2650',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0009',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://security.netapp.com/advisory/ntap-20230703-0001/',
-                'https://security.netapp.com/advisory/ntap-20231027-0009/',
-                'https://ubuntu.com/security/notices/USN-6119-1',
-                'https://ubuntu.com/security/notices/USN-6188-1',
-                'https://ubuntu.com/security/notices/USN-6672-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-2650',
-                'https://www.debian.org/security/2023/dsa-5417',
-                'https://www.openssl.org/news/secadv/20230530.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: Possible DoS translating ASN.1 object identifiers'
-            },
-            {
-              'cve':  'CVE-2023-3446',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L'
-                },
-                'redhat': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L'
-                }
-              },
-              'cwes': [
-                'CWE-606',
-                'CWE-1333'
-              ],
-              'description':   "Issue summary: Checking excessively long DH keys or parameters may be very slow.\n\nImpact summary: Applications that use the functions DH_check(), DH_check_ex()\nor EVP_PKEY_param_check() to check a DH key or DH parameters may experience long\ndelays. Where the key or parameters that are being checked have been obtained\nfrom an untrusted source this may lead to a Denial of Service.\n\nThe function DH_check() performs various checks on DH parameters. One of those\nchecks confirms that the modulus ('p' parameter) is not too large. Trying to use\na very large modulus is slow and OpenSSL will not normally use a modulus which\nis over 10,000 bits in length.\n\nHowever the DH_check() function checks numerous aspects of the key or parameters\nthat have been supplied. Some of those checks use the supplied modulus value\neven if it has already been found to be too large.\n\nAn application that calls DH_check() and supplies a key or parameters obtained\nfrom an untrusted source could be vulernable to a Denial of Service attack.\n\nThe function DH_check() is itself called by a number of other OpenSSL functions.\nAn application calling any of those other functions may similarly be affected.\nThe other functions affected by this are DH_check_ex() and\nEVP_PKEY_param_check().\n\nAlso vulnerable are the OpenSSL dhparam and pkeyparam command line applications\nwhen using the '-check' option.\n\nThe OpenSSL SSL/TLS implementation is not affected by this issue.\nThe OpenSSL 3.0 and 3.1 FIPS providers are not affected by this issue.",
-              'diffID':        'sha256:ec34fcc1d526fba48f7f88e4ec765fccc17d4692570db85cf32d9d6b020330f2',
-              'fixedVersions': [
-                '1.1.1u-r2'
-              ],
-              'installedVersion': '1.1.1q-r0',
-              'packageName':      'libssl1.1',
-              'purl':             'pkg:apk/alpine/libssl1.1@1.1.1q-r0?arch=x86_64&distro=3.16.1',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2023/07/19/4',
-                'http://www.openwall.com/lists/oss-security/2023/07/19/5',
-                'http://www.openwall.com/lists/oss-security/2023/07/19/6',
-                'http://www.openwall.com/lists/oss-security/2023/07/31/1',
-                'http://www.openwall.com/lists/oss-security/2024/05/16/1',
-                'https://access.redhat.com/errata/RHSA-2024:2447',
-                'https://access.redhat.com/security/cve/CVE-2023-3446',
-                'https://bugzilla.redhat.com/2223016',
-                'https://bugzilla.redhat.com/2224962',
-                'https://bugzilla.redhat.com/2227852',
-                'https://bugzilla.redhat.com/2248616',
-                'https://bugzilla.redhat.com/2257571',
-                'https://bugzilla.redhat.com/2258502',
-                'https://bugzilla.redhat.com/2259944',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2224962',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2257582',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2257583',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2258677',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2258688',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2258691',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2258694',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2258700',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-36763',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-36764',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3446',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45229',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45231',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45232',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45233',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45235',
-                'https://errata.almalinux.org/9/ALSA-2024-2447.html',
-                'https://errata.rockylinux.org/RLSA-2024:2264',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=1fa20cf2f506113c761777127a38bce5068740eb',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=8780a896543a654e757db1b9396383f9d8095528',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=9a0a4d3c1e7138915563c0df4fe6a3f9377b839c',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=fc9867c1e03c22ebf56943be205202e576aabf23',
-                'https://linux.oracle.com/cve/CVE-2023-3446.html',
-                'https://linux.oracle.com/errata/ELSA-2024-2447.html',
-                'https://lists.debian.org/debian-lts-announce/2023/08/msg00019.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-3446',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://security.netapp.com/advisory/ntap-20230803-0011/',
-                'https://ubuntu.com/security/notices/USN-6435-1',
-                'https://ubuntu.com/security/notices/USN-6435-2',
-                'https://ubuntu.com/security/notices/USN-6450-1',
-                'https://ubuntu.com/security/notices/USN-6709-1',
-                'https://ubuntu.com/security/notices/USN-7018-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-3446',
-                'https://www.openssl.org/news/secadv/20230719.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: Excessive time spent checking DH keys and parameters'
-            },
-            {
-              'cve':  'CVE-2023-3817',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L'
-                },
-                'redhat': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L'
-                }
-              },
-              'cwes': [
-                'CWE-606',
-                'CWE-834'
-              ],
-              'description':   'Issue summary: Checking excessively long DH keys or parameters may be very slow.\n\nImpact summary: Applications that use the functions DH_check(), DH_check_ex()\nor EVP_PKEY_param_check() to check a DH key or DH parameters may experience long\ndelays. Where the key or parameters that are being checked have been obtained\nfrom an untrusted source this may lead to a Denial of Service.\n\nThe function DH_check() performs various checks on DH parameters. After fixing\nCVE-2023-3446 it was discovered that a large q parameter value can also trigger\nan overly long computation during some of these checks. A correct q value,\nif present, cannot be larger than the modulus p parameter, thus it is\nunnecessary to perform these checks if q is larger than p.\n\nAn application that calls DH_check() and supplies a key or parameters obtained\nfrom an untrusted source could be vulnerable to a Denial of Service attack.\n\nThe function DH_check() is itself called by a number of other OpenSSL functions.\nAn application calling any of those other functions may similarly be affected.\nThe other functions affected by this are DH_check_ex() and\nEVP_PKEY_param_check().\n\nAlso vulnerable are the OpenSSL dhparam and pkeyparam command line applications\nwhen using the "-check" option.\n\nThe OpenSSL SSL/TLS implementation is not affected by this issue.\n\nThe OpenSSL 3.0 and 3.1 FIPS providers are not affected by this issue.',
-              'diffID':        'sha256:ec34fcc1d526fba48f7f88e4ec765fccc17d4692570db85cf32d9d6b020330f2',
-              'fixedVersions': [
-                '1.1.1v-r0'
-              ],
-              'installedVersion': '1.1.1q-r0',
-              'packageName':      'libssl1.1',
-              'purl':             'pkg:apk/alpine/libssl1.1@1.1.1q-r0?arch=x86_64&distro=3.16.1',
-              'references':       [
-                'http://seclists.org/fulldisclosure/2023/Jul/43',
-                'http://www.openwall.com/lists/oss-security/2023/07/31/1',
-                'http://www.openwall.com/lists/oss-security/2023/09/22/11',
-                'http://www.openwall.com/lists/oss-security/2023/09/22/9',
-                'http://www.openwall.com/lists/oss-security/2023/11/06/2',
-                'https://access.redhat.com/errata/RHSA-2024:2447',
-                'https://access.redhat.com/security/cve/CVE-2023-3817',
-                'https://bugzilla.redhat.com/2223016',
-                'https://bugzilla.redhat.com/2224962',
-                'https://bugzilla.redhat.com/2227852',
-                'https://bugzilla.redhat.com/2248616',
-                'https://bugzilla.redhat.com/2257571',
-                'https://bugzilla.redhat.com/2258502',
-                'https://bugzilla.redhat.com/2259944',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2224962',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2227852',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2248616',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2270358',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3446',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3817',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-5678',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-2408',
-                'https://errata.almalinux.org/9/ALSA-2024-2447.html',
-                'https://errata.rockylinux.org/RLSA-2023:7877',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=6a1eb62c29db6cb5eec707f9338aee00f44e26f5',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=869ad69aadd985c7b8ca6f4e5dd0eb274c9f3644',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=9002fd07327a91f35ba6c1307e71fa6fd4409b7f',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=91ddeba0f2269b017dc06c46c993a788974b1aa5',
-                'https://linux.oracle.com/cve/CVE-2023-3817.html',
-                'https://linux.oracle.com/errata/ELSA-2024-2447.html',
-                'https://lists.debian.org/debian-lts-announce/2023/08/msg00019.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-3817',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://security.netapp.com/advisory/ntap-20230818-0014/',
-                'https://security.netapp.com/advisory/ntap-20231027-0008/',
-                'https://security.netapp.com/advisory/ntap-20240621-0006/',
-                'https://ubuntu.com/security/notices/USN-6435-1',
-                'https://ubuntu.com/security/notices/USN-6435-2',
-                'https://ubuntu.com/security/notices/USN-6450-1',
-                'https://ubuntu.com/security/notices/USN-6709-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-3817',
-                'https://www.openssl.org/news/secadv/20230731.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'OpenSSL: Excessive time spent checking DH q parameter value'
-            },
-            {
-              'cve':  'CVE-2023-5678',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L'
-                },
-                'redhat': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L'
-                }
-              },
-              'cwes': [
-                'CWE-606',
-                'CWE-754'
-              ],
-              'description':   "Issue summary: Generating excessively long X9.42 DH keys or checking\nexcessively long X9.42 DH keys or parameters may be very slow.\n\nImpact summary: Applications that use the functions DH_generate_key() to\ngenerate an X9.42 DH key may experience long delays.  Likewise, applications\nthat use DH_check_pub_key(), DH_check_pub_key_ex() or EVP_PKEY_public_check()\nto check an X9.42 DH key or X9.42 DH parameters may experience long delays.\nWhere the key or parameters that are being checked have been obtained from\nan untrusted source this may lead to a Denial of Service.\n\nWhile DH_check() performs all the necessary checks (as of CVE-2023-3817),\nDH_check_pub_key() doesn't make any of these checks, and is therefore\nvulnerable for excessively large P and Q parameters.\n\nLikewise, while DH_generate_key() performs a check for an excessively large\nP, it doesn't check for an excessively large Q.\n\nAn application that calls DH_generate_key() or DH_check_pub_key() and\nsupplies a key or parameters obtained from an untrusted source could be\nvulnerable to a Denial of Service attack.\n\nDH_generate_key() and DH_check_pub_key() are also called by a number of\nother OpenSSL functions.  An application calling any of those other\nfunctions may similarly be affected.  The other functions affected by this\nare DH_check_pub_key_ex(), EVP_PKEY_public_check(), and EVP_PKEY_generate().\n\nAlso vulnerable are the OpenSSL pkey command line application when using the\n\"-pubcheck\" option, as well as the OpenSSL genpkey command line application.\n\nThe OpenSSL SSL/TLS implementation is not affected by this issue.\n\nThe OpenSSL 3.0 and 3.1 FIPS providers are not affected by this issue.",
-              'diffID':        'sha256:ec34fcc1d526fba48f7f88e4ec765fccc17d4692570db85cf32d9d6b020330f2',
-              'fixedVersions': [
-                '1.1.1w-r1'
-              ],
-              'installedVersion': '1.1.1q-r0',
-              'packageName':      'libssl1.1',
-              'purl':             'pkg:apk/alpine/libssl1.1@1.1.1q-r0?arch=x86_64&distro=3.16.1',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2024/03/11/1',
-                'https://access.redhat.com/errata/RHSA-2024:2447',
-                'https://access.redhat.com/security/cve/CVE-2023-5678',
-                'https://bugzilla.redhat.com/2223016',
-                'https://bugzilla.redhat.com/2224962',
-                'https://bugzilla.redhat.com/2227852',
-                'https://bugzilla.redhat.com/2248616',
-                'https://bugzilla.redhat.com/2257571',
-                'https://bugzilla.redhat.com/2258502',
-                'https://bugzilla.redhat.com/2259944',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2224962',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2227852',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2248616',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2270358',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3446',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3817',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-5678',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-2408',
-                'https://errata.almalinux.org/9/ALSA-2024-2447.html',
-                'https://errata.rockylinux.org/RLSA-2023:7877',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=34efaef6c103d636ab507a0cc34dca4d3aecc055',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=710fee740904b6290fef0dd5536fbcedbc38ff0c',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=db925ae2e65d0d925adef429afc37f75bd1c2017',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=ddeb4b6c6d527e54ce9a99cba785c0f7776e54b6',
-                'https://linux.oracle.com/cve/CVE-2023-5678.html',
-                'https://linux.oracle.com/errata/ELSA-2024-2447.html',
-                'https://lists.debian.org/debian-lts-announce/2024/10/msg00033.html',
-                'https://lists.debian.org/debian-lts-announce/2024/11/msg00000.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-5678',
-                'https://security.netapp.com/advisory/ntap-20231130-0010/',
-                'https://ubuntu.com/security/notices/USN-6622-1',
-                'https://ubuntu.com/security/notices/USN-6632-1',
-                'https://ubuntu.com/security/notices/USN-6709-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-5678',
-                'https://www.openssl.org/news/secadv/20231106.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: Generating excessively long X9.42 DH keys or checking excessively long X9.42 DH keys or parameters may be very slow'
-            },
-            {
-              'cve':  'CVE-2025-26519',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-787'
-              ],
-              'description':   'musl libc 0.9.13 through 1.2.5 before 1.2.6 has an out-of-bounds write vulnerability when an attacker can trigger iconv conversion of untrusted EUC-KR text to UTF-8.',
-              'diffID':        'sha256:ec34fcc1d526fba48f7f88e4ec765fccc17d4692570db85cf32d9d6b020330f2',
-              'fixedVersions': [
-                '1.2.3-r4'
-              ],
-              'installedVersion': '1.2.3-r0',
-              'packageName':      'musl',
-              'purl':             'pkg:apk/alpine/musl@1.2.3-r0?arch=x86_64&distro=3.16.1',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2025/02/13/2',
-                'http://www.openwall.com/lists/oss-security/2025/02/13/3',
-                'http://www.openwall.com/lists/oss-security/2025/02/13/4',
-                'http://www.openwall.com/lists/oss-security/2025/02/13/5',
-                'http://www.openwall.com/lists/oss-security/2025/02/14/5',
-                'http://www.openwall.com/lists/oss-security/2025/02/14/6',
-                'https://git.musl-libc.org/cgit/musl/commit/?id=c47ad25ea3b484e10326f933e927c0bc8cded3da',
-                'https://git.musl-libc.org/cgit/musl/commit/?id=e5adcd97b5196e29991b524237381a0202a60659',
-                'https://www.openwall.com/lists/oss-security/2025/02/13/2'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'musl libc 0.9.13 through 1.2.5 before 1.2.6 has an out-of-bounds write ...'
-            },
-            {
-              'cve':  'CVE-2025-26519',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-787'
-              ],
-              'description':   'musl libc 0.9.13 through 1.2.5 before 1.2.6 has an out-of-bounds write vulnerability when an attacker can trigger iconv conversion of untrusted EUC-KR text to UTF-8.',
-              'diffID':        'sha256:ec34fcc1d526fba48f7f88e4ec765fccc17d4692570db85cf32d9d6b020330f2',
-              'fixedVersions': [
-                '1.2.3-r4'
-              ],
-              'installedVersion': '1.2.3-r0',
-              'packageName':      'musl-utils',
-              'purl':             'pkg:apk/alpine/musl-utils@1.2.3-r0?arch=x86_64&distro=3.16.1',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2025/02/13/2',
-                'http://www.openwall.com/lists/oss-security/2025/02/13/3',
-                'http://www.openwall.com/lists/oss-security/2025/02/13/4',
-                'http://www.openwall.com/lists/oss-security/2025/02/13/5',
-                'http://www.openwall.com/lists/oss-security/2025/02/14/5',
-                'http://www.openwall.com/lists/oss-security/2025/02/14/6',
-                'https://git.musl-libc.org/cgit/musl/commit/?id=c47ad25ea3b484e10326f933e927c0bc8cded3da',
-                'https://git.musl-libc.org/cgit/musl/commit/?id=e5adcd97b5196e29991b524237381a0202a60659',
-                'https://www.openwall.com/lists/oss-security/2025/02/13/2'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'musl libc 0.9.13 through 1.2.5 before 1.2.6 has an out-of-bounds write ...'
-            },
-            {
-              'cve':  'CVE-2023-42366',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.5',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.1',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-787'
-              ],
-              'description':   'A heap-buffer-overflow was discovered in BusyBox v.1.36.1 in the next_token function at awk.c:1159.',
-              'diffID':        'sha256:8185abbba581bec9174836154a57e09da6c7ed1633216992ffbcf36971626d61',
-              'fixedVersions': [
-                '1.35.0-r18'
-              ],
-              'installedVersion': '1.35.0-r17',
-              'packageName':      'ssl_client',
-              'purl':             'pkg:apk/alpine/ssl_client@1.35.0-r17?arch=x86_64&distro=3.16.1',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2023-42366',
-                'https://bugs.busybox.net/show_bug.cgi?id=15874',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-42366',
-                'https://security.netapp.com/advisory/ntap-20241206-0007/',
-                'https://www.cve.org/CVERecord?id=CVE-2023-42366'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'busybox: A heap-buffer-overflow'
-            }
-          ]
-        }
-      ],
-      'summary': {
-        'critical':   0,
-        'high':       10,
-        'low':        0,
-        'medium':     14,
-        'suppressed': 0,
-        'unknown':    0
-      }
-    }
-  },
-  {
-    'id':    'default/d4492ce7b1e9f250ee3a711a33f4000ea30a188997a0baa0a16c6ec9d95a3c36',
-    'type':  'storage.sbomscanner.kubewarden.io.vulnerabilityreport',
-    'links': {
-      'patch':  'https://localhost:8005/v1/storage.sbomscanner.kubewarden.io.vulnerabilityreports/default/d4492ce7b1e9f250ee3a711a33f4000ea30a188997a0baa0a16c6ec9d95a3c36',
-      'remove': 'https://localhost:8005/v1/storage.sbomscanner.kubewarden.io.vulnerabilityreports/default/d4492ce7b1e9f250ee3a711a33f4000ea30a188997a0baa0a16c6ec9d95a3c36',
-      'self':   'https://localhost:8005/v1/storage.sbomscanner.kubewarden.io.vulnerabilityreports/default/d4492ce7b1e9f250ee3a711a33f4000ea30a188997a0baa0a16c6ec9d95a3c36',
-      'update': 'https://localhost:8005/v1/storage.sbomscanner.kubewarden.io.vulnerabilityreports/default/d4492ce7b1e9f250ee3a711a33f4000ea30a188997a0baa0a16c6ec9d95a3c36',
-      'view':   'https://localhost:8005/apis/storage.sbomscanner.kubewarden.io/v1alpha1/namespaces/default/vulnerabilityreports/d4492ce7b1e9f250ee3a711a33f4000ea30a188997a0baa0a16c6ec9d95a3c36'
-    },
-    'apiVersion':    'storage.sbomscanner.kubewarden.io/v1alpha1',
-    'imageMetadata': {
-      'digest':      'sha256:14d4381342be1cab4adc3d5288a279a8a2fc665907363e1dce510bec52f29af3',
-      'platform':    'linux/386',
-      'registry':    'lsong-demo1',
-      'registryURI': 'registry-1.docker.io',
-      'repository':  'library/alpine',
-      'tag':         '3.17.1'
-    },
-    'kind':     'VulnerabilityReport',
-    'metadata': {
-      'creationTimestamp': '2026-01-14T18:51:36Z',
-      'fields':            [
-        'd4492ce7b1e9f250ee3a711a33f4000ea30a188997a0baa0a16c6ec9d95a3c36',
-        'registry-1.docker.io/library/alpine:3.17.1',
-        'linux/386',
-        '68 (0 suppressed)'
-      ],
-      'labels': {
-        'app.kubernetes.io/managed-by':          'sbomscanner',
-        'app.kubernetes.io/part-of':             'sbomscanner',
-        'sbomscanner.kubewarden.io/scanjob-uid': '445c600a-c4b6-40b3-bd71-f2d2140a37d5'
-      },
-      'name':            'd4492ce7b1e9f250ee3a711a33f4000ea30a188997a0baa0a16c6ec9d95a3c36',
-      'namespace':       'default',
-      'ownerReferences': [
-        {
-          'apiVersion':         'storage.sbomscanner.kubewarden.io/v1alpha1',
-          'blockOwnerDeletion': true,
-          'controller':         true,
-          'kind':               'SBOM',
-          'name':               'd4492ce7b1e9f250ee3a711a33f4000ea30a188997a0baa0a16c6ec9d95a3c36',
-          'uid':                '027b6f98-468e-4a93-a9fc-21fbade3cc21'
-        }
-      ],
-      'relationships': [
-        {
-          'fromId':   'default/d4492ce7b1e9f250ee3a711a33f4000ea30a188997a0baa0a16c6ec9d95a3c36',
-          'fromType': 'storage.sbomscanner.kubewarden.io.sbom',
-          'rel':      'owner',
-          'state':    'active',
-          'message':  'Resource is current'
-        }
-      ],
-      'resourceVersion': '1',
-      'state':           {
-        'error':         false,
-        'message':       'Resource is current',
-        'name':          'active',
-        'transitioning': false
-      },
-      'uid': '7fbcab6d-15e9-44af-b337-40e184692566'
-    },
-    'report': {
-      'results': [
-        {
-          'class':           'os-pkgs',
-          'target':          '/var/run/worker/trivy.sbom.1367225094.json (alpine 3.17.1)',
-          'type':            'alpine',
-          'vulnerabilities': [
-            {
-              'cve':  'CVE-2023-42363',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.5',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.8',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   'A use-after-free vulnerability was discovered in xasprintf function in xfuncs_printf.c:344 in BusyBox v.1.36.1.',
-              'diffID':        'sha256:253f1efcceb575705106468bdc1c875a7c9b2a734d4bcca3b1335946656d7acb',
-              'fixedVersions': [
-                '1.35.0-r31'
-              ],
-              'installedVersion': '1.35.0-r29',
-              'packageName':      'busybox',
-              'purl':             'pkg:apk/alpine/busybox@1.35.0-r29?arch=x86&distro=3.17.1',
-              'references':       [
-                'http://lists.busybox.net/pipermail/busybox/2024-May/090760.html',
-                'https://access.redhat.com/security/cve/CVE-2023-42363',
-                'https://bugs.busybox.net/show_bug.cgi?id=15865',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-42363',
-                'https://ubuntu.com/security/notices/USN-6961-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-42363'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk'
-            },
-            {
-              'cve':  'CVE-2023-42364',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.5',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.8',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   'A use-after-free vulnerability in BusyBox v.1.36.1 allows attackers to cause a denial of service via a crafted awk pattern in the awk.c evaluate function.',
-              'diffID':        'sha256:253f1efcceb575705106468bdc1c875a7c9b2a734d4bcca3b1335946656d7acb',
-              'fixedVersions': [
-                '1.35.0-r31'
-              ],
-              'installedVersion': '1.35.0-r29',
-              'packageName':      'busybox',
-              'purl':             'pkg:apk/alpine/busybox@1.35.0-r29?arch=x86&distro=3.17.1',
-              'references':       [
-                'http://lists.busybox.net/pipermail/busybox/2024-May/090762.html',
-                'https://access.redhat.com/security/cve/CVE-2023-42364',
-                'https://bugs.busybox.net/show_bug.cgi?id=15868',
-                'https://gitlab.alpinelinux.org/alpine/aports/-/blob/master/main/busybox/CVE-2023-42364-CVE-2023-42365.patch',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-42364',
-                'https://ubuntu.com/security/notices/USN-6961-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-42364'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'busybox: use-after-free'
-            },
-            {
-              'cve':  'CVE-2023-42365',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.5',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.8',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   'A use-after-free vulnerability was discovered in BusyBox v.1.36.1 via a crafted awk pattern in the awk.c copyvar function.',
-              'diffID':        'sha256:253f1efcceb575705106468bdc1c875a7c9b2a734d4bcca3b1335946656d7acb',
-              'fixedVersions': [
-                '1.35.0-r31'
-              ],
-              'installedVersion': '1.35.0-r29',
-              'packageName':      'busybox',
-              'purl':             'pkg:apk/alpine/busybox@1.35.0-r29?arch=x86&distro=3.17.1',
-              'references':       [
-                'http://lists.busybox.net/pipermail/busybox/2024-May/090762.html',
-                'https://access.redhat.com/security/cve/CVE-2023-42365',
-                'https://bugs.busybox.net/show_bug.cgi?id=15871',
-                'https://gitlab.alpinelinux.org/alpine/aports/-/blob/master/main/busybox/CVE-2023-42364-CVE-2023-42365.patch',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-42365',
-                'https://ubuntu.com/security/notices/USN-6961-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-42365'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'busybox: use-after-free'
-            },
-            {
-              'cve':  'CVE-2023-42366',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.5',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.1',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-787'
-              ],
-              'description':   'A heap-buffer-overflow was discovered in BusyBox v.1.36.1 in the next_token function at awk.c:1159.',
-              'diffID':        'sha256:253f1efcceb575705106468bdc1c875a7c9b2a734d4bcca3b1335946656d7acb',
-              'fixedVersions': [
-                '1.35.0-r30'
-              ],
-              'installedVersion': '1.35.0-r29',
-              'packageName':      'busybox',
-              'purl':             'pkg:apk/alpine/busybox@1.35.0-r29?arch=x86&distro=3.17.1',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2023-42366',
-                'https://bugs.busybox.net/show_bug.cgi?id=15874',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-42366',
-                'https://security.netapp.com/advisory/ntap-20241206-0007/',
-                'https://www.cve.org/CVERecord?id=CVE-2023-42366'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'busybox: A heap-buffer-overflow'
-            },
-            {
-              'cve':  'CVE-2023-42363',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.5',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.8',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   'A use-after-free vulnerability was discovered in xasprintf function in xfuncs_printf.c:344 in BusyBox v.1.36.1.',
-              'diffID':        'sha256:253f1efcceb575705106468bdc1c875a7c9b2a734d4bcca3b1335946656d7acb',
-              'fixedVersions': [
-                '1.35.0-r31'
-              ],
-              'installedVersion': '1.35.0-r29',
-              'packageName':      'busybox-binsh',
-              'purl':             'pkg:apk/alpine/busybox-binsh@1.35.0-r29?arch=x86&distro=3.17.1',
-              'references':       [
-                'http://lists.busybox.net/pipermail/busybox/2024-May/090760.html',
-                'https://access.redhat.com/security/cve/CVE-2023-42363',
-                'https://bugs.busybox.net/show_bug.cgi?id=15865',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-42363',
-                'https://ubuntu.com/security/notices/USN-6961-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-42363'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk'
-            },
-            {
-              'cve':  'CVE-2023-42364',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.5',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.8',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   'A use-after-free vulnerability in BusyBox v.1.36.1 allows attackers to cause a denial of service via a crafted awk pattern in the awk.c evaluate function.',
-              'diffID':        'sha256:253f1efcceb575705106468bdc1c875a7c9b2a734d4bcca3b1335946656d7acb',
-              'fixedVersions': [
-                '1.35.0-r31'
-              ],
-              'installedVersion': '1.35.0-r29',
-              'packageName':      'busybox-binsh',
-              'purl':             'pkg:apk/alpine/busybox-binsh@1.35.0-r29?arch=x86&distro=3.17.1',
-              'references':       [
-                'http://lists.busybox.net/pipermail/busybox/2024-May/090762.html',
-                'https://access.redhat.com/security/cve/CVE-2023-42364',
-                'https://bugs.busybox.net/show_bug.cgi?id=15868',
-                'https://gitlab.alpinelinux.org/alpine/aports/-/blob/master/main/busybox/CVE-2023-42364-CVE-2023-42365.patch',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-42364',
-                'https://ubuntu.com/security/notices/USN-6961-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-42364'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'busybox: use-after-free'
-            },
-            {
-              'cve':  'CVE-2023-42365',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.5',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.8',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   'A use-after-free vulnerability was discovered in BusyBox v.1.36.1 via a crafted awk pattern in the awk.c copyvar function.',
-              'diffID':        'sha256:253f1efcceb575705106468bdc1c875a7c9b2a734d4bcca3b1335946656d7acb',
-              'fixedVersions': [
-                '1.35.0-r31'
-              ],
-              'installedVersion': '1.35.0-r29',
-              'packageName':      'busybox-binsh',
-              'purl':             'pkg:apk/alpine/busybox-binsh@1.35.0-r29?arch=x86&distro=3.17.1',
-              'references':       [
-                'http://lists.busybox.net/pipermail/busybox/2024-May/090762.html',
-                'https://access.redhat.com/security/cve/CVE-2023-42365',
-                'https://bugs.busybox.net/show_bug.cgi?id=15871',
-                'https://gitlab.alpinelinux.org/alpine/aports/-/blob/master/main/busybox/CVE-2023-42364-CVE-2023-42365.patch',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-42365',
-                'https://ubuntu.com/security/notices/USN-6961-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-42365'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'busybox: use-after-free'
-            },
-            {
-              'cve':  'CVE-2023-42366',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.5',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.1',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-787'
-              ],
-              'description':   'A heap-buffer-overflow was discovered in BusyBox v.1.36.1 in the next_token function at awk.c:1159.',
-              'diffID':        'sha256:253f1efcceb575705106468bdc1c875a7c9b2a734d4bcca3b1335946656d7acb',
-              'fixedVersions': [
-                '1.35.0-r30'
-              ],
-              'installedVersion': '1.35.0-r29',
-              'packageName':      'busybox-binsh',
-              'purl':             'pkg:apk/alpine/busybox-binsh@1.35.0-r29?arch=x86&distro=3.17.1',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2023-42366',
-                'https://bugs.busybox.net/show_bug.cgi?id=15874',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-42366',
-                'https://security.netapp.com/advisory/ntap-20241206-0007/',
-                'https://www.cve.org/CVERecord?id=CVE-2023-42366'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'busybox: A heap-buffer-overflow'
-            },
-            {
-              'cve':  'CVE-2022-4450',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'nvd': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-415'
-              ],
-              'description':   'The function PEM_read_bio_ex() reads a PEM file from a BIO and parses and\ndecodes the "name" (e.g. "CERTIFICATE"), any header data and the payload data.\nIf the function succeeds then the "name_out", "header" and "data" arguments are\npopulated with pointers to buffers containing the relevant decoded data. The\ncaller is responsible for freeing those buffers. It is possible to construct a\nPEM file that results in 0 bytes of payload data. In this case PEM_read_bio_ex()\nwill return a failure code but will populate the header argument with a pointer\nto a buffer that has already been freed. If the caller also frees this buffer\nthen a double free will occur. This will most likely lead to a crash. This\ncould be exploited by an attacker who has the ability to supply malicious PEM\nfiles for parsing to achieve a denial of service attack.\n\nThe functions PEM_read_bio() and PEM_read() are simple wrappers around\nPEM_read_bio_ex() and therefore these functions are also directly affected.\n\nThese functions are also called indirectly by a number of other OpenSSL\nfunctions including PEM_X509_INFO_read_bio_ex() and\nSSL_CTX_use_serverinfo_file() which are also vulnerable. Some OpenSSL internal\nuses of these functions are not vulnerable because the caller does not free the\nheader argument if PEM_read_bio_ex() returns a failure code. These locations\ninclude the PEM_read_bio_TYPE() functions as well as the decoders introduced in\nOpenSSL 3.0.\n\nThe OpenSSL asn1parse command line application is also impacted by this issue.',
-              'diffID':        'sha256:253f1efcceb575705106468bdc1c875a7c9b2a734d4bcca3b1335946656d7acb',
-              'fixedVersions': [
-                '3.0.8-r0'
-              ],
-              'installedVersion': '3.0.7-r2',
-              'packageName':      'libcrypto3',
-              'purl':             'pkg:apk/alpine/libcrypto3@3.0.7-r2?arch=x86&distro=3.17.1',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2023:2165',
-                'https://access.redhat.com/security/cve/CVE-2022-4450',
-                'https://bugzilla.redhat.com/1960321',
-                'https://bugzilla.redhat.com/2164440',
-                'https://bugzilla.redhat.com/2164487',
-                'https://bugzilla.redhat.com/2164492',
-                'https://bugzilla.redhat.com/2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144000',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144003',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144006',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144008',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144010',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144012',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144015',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144017',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144019',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2145170',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2158412',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164440',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164487',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164488',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164492',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164497',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164499',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164500',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4203',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4304',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4450',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0215',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0216',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0217',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0286',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0401',
-                'https://errata.almalinux.org/9/ALSA-2023-2165.html',
-                'https://errata.rockylinux.org/RLSA-2023:0946',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=63bcf189be73a9cc1264059bed6f57974be74a83',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=bbcf509bd046b34cca19c766bbddc31683d0858b',
-                'https://linux.oracle.com/cve/CVE-2022-4450.html',
-                'https://linux.oracle.com/errata/ELSA-2023-32791.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2022-4450',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0003',
-                'https://rustsec.org/advisories/RUSTSEC-2023-0010.html',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://ubuntu.com/security/notices/USN-5844-1',
-                'https://ubuntu.com/security/notices/USN-6564-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2022-4450',
-                'https://www.openssl.org/news/secadv/20230207.txt'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: double free after calling PEM_read_bio_ex'
-            },
-            {
-              'cve':  'CVE-2023-0215',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'nvd': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   'The public API function BIO_new_NDEF is a helper function used for streaming\nASN.1 data via a BIO. It is primarily used internally to OpenSSL to support the\nSMIME, CMS and PKCS7 streaming capabilities, but may also be called directly by\nend user applications.\n\nThe function receives a BIO from the caller, prepends a new BIO_f_asn1 filter\nBIO onto the front of it to form a BIO chain, and then returns the new head of\nthe BIO chain to the caller. Under certain conditions, for example if a CMS\nrecipient public key is invalid, the new filter BIO is freed and the function\nreturns a NULL result indicating a failure. However, in this case, the BIO chain\nis not properly cleaned up and the BIO passed by the caller still retains\ninternal pointers to the previously freed filter BIO. If the caller then goes on\nto call BIO_pop() on the BIO then a use-after-free will occur. This will most\nlikely result in a crash.\n\n\n\nThis scenario occurs directly in the internal function B64_write_ASN1() which\nmay cause BIO_new_NDEF() to be called and will subsequently call BIO_pop() on\nthe BIO. This internal function is in turn called by the public API functions\nPEM_write_bio_ASN1_stream, PEM_write_bio_CMS_stream, PEM_write_bio_PKCS7_stream,\nSMIME_write_ASN1, SMIME_write_CMS and SMIME_write_PKCS7.\n\nOther public API functions that may be impacted by this include\ni2d_ASN1_bio_stream, BIO_new_CMS, BIO_new_PKCS7, i2d_CMS_bio_stream and\ni2d_PKCS7_bio_stream.\n\nThe OpenSSL cms and smime command line applications are similarly affected.',
-              'diffID':        'sha256:253f1efcceb575705106468bdc1c875a7c9b2a734d4bcca3b1335946656d7acb',
-              'fixedVersions': [
-                '3.0.8-r0'
-              ],
-              'installedVersion': '3.0.7-r2',
-              'packageName':      'libcrypto3',
-              'purl':             'pkg:apk/alpine/libcrypto3@3.0.7-r2?arch=x86&distro=3.17.1',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2023:2165',
-                'https://access.redhat.com/security/cve/CVE-2023-0215',
-                'https://bugzilla.redhat.com/1960321',
-                'https://bugzilla.redhat.com/2164440',
-                'https://bugzilla.redhat.com/2164487',
-                'https://bugzilla.redhat.com/2164492',
-                'https://bugzilla.redhat.com/2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144000',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144003',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144006',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144008',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144010',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144012',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144015',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144017',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144019',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2145170',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2158412',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164440',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164487',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164488',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164492',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164497',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164499',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164500',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4203',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4304',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4450',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0215',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0216',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0217',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0286',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0401',
-                'https://errata.almalinux.org/9/ALSA-2023-2165.html',
-                'https://errata.rockylinux.org/RLSA-2023:0946',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=8818064ce3c3c0f1b740a5aaba2a987e75bfbafd',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=9816136fe31d92ace4037d5da5257f763aeeb4eb',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=c3829dd8825c654652201e16f8a0a0c46ee3f344',
-                'https://linux.oracle.com/cve/CVE-2023-0215.html',
-                'https://linux.oracle.com/errata/ELSA-2023-32791.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-0215',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0003',
-                'https://rustsec.org/advisories/RUSTSEC-2023-0009.html',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://security.netapp.com/advisory/ntap-20230427-0007',
-                'https://security.netapp.com/advisory/ntap-20230427-0007/',
-                'https://security.netapp.com/advisory/ntap-20230427-0009',
-                'https://security.netapp.com/advisory/ntap-20230427-0009/',
-                'https://security.netapp.com/advisory/ntap-20240621-0006',
-                'https://security.netapp.com/advisory/ntap-20240621-0006/',
-                'https://ubuntu.com/security/notices/USN-5844-1',
-                'https://ubuntu.com/security/notices/USN-5845-1',
-                'https://ubuntu.com/security/notices/USN-5845-2',
-                'https://ubuntu.com/security/notices/USN-6564-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-0215',
-                'https://www.openssl.org/news/secadv/20230207.txt'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: use-after-free following BIO_new_NDEF'
-            },
-            {
-              'cve':  'CVE-2023-0216',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'nvd': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-476'
-              ],
-              'description':   'An invalid pointer dereference on read can be triggered when an\napplication tries to load malformed PKCS7 data with the\nd2i_PKCS7(), d2i_PKCS7_bio() or d2i_PKCS7_fp() functions.\n\nThe result of the dereference is an application crash which could\nlead to a denial of service attack. The TLS implementation in OpenSSL\ndoes not call this function however third party applications might\ncall these functions on untrusted data.',
-              'diffID':        'sha256:253f1efcceb575705106468bdc1c875a7c9b2a734d4bcca3b1335946656d7acb',
-              'fixedVersions': [
-                '3.0.8-r0'
-              ],
-              'installedVersion': '3.0.7-r2',
-              'packageName':      'libcrypto3',
-              'purl':             'pkg:apk/alpine/libcrypto3@3.0.7-r2?arch=x86&distro=3.17.1',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2023:0946',
-                'https://access.redhat.com/security/cve/CVE-2023-0216',
-                'https://bugzilla.redhat.com/2164440',
-                'https://bugzilla.redhat.com/2164487',
-                'https://bugzilla.redhat.com/2164488',
-                'https://bugzilla.redhat.com/2164492',
-                'https://bugzilla.redhat.com/2164494',
-                'https://bugzilla.redhat.com/2164497',
-                'https://bugzilla.redhat.com/2164499',
-                'https://bugzilla.redhat.com/2164500',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144000',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144003',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144006',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144008',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144010',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144012',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144015',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144017',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144019',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2145170',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2158412',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164440',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164487',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164488',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164492',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164497',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164499',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164500',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4203',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4304',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4450',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0215',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0216',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0217',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0286',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0401',
-                'https://errata.almalinux.org/9/ALSA-2023-0946.html',
-                'https://errata.rockylinux.org/RLSA-2023:0946',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=934a04f0e775309cadbef0aa6b9692e1b12a76c6',
-                'https://linux.oracle.com/cve/CVE-2023-0216.html',
-                'https://linux.oracle.com/errata/ELSA-2023-12152.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-0216',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0003',
-                'https://rustsec.org/advisories/RUSTSEC-2023-0011.html',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://ubuntu.com/security/notices/USN-5844-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-0216',
-                'https://www.openssl.org/news/secadv/20230207.txt'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: invalid pointer dereference in d2i_PKCS7 functions'
-            },
-            {
-              'cve':  'CVE-2023-0217',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'nvd': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-476'
-              ],
-              'description':   'An invalid pointer dereference on read can be triggered when an\napplication tries to check a malformed DSA public key by the\nEVP_PKEY_public_check() function. This will most likely lead\nto an application crash. This function can be called on public\nkeys supplied from untrusted sources which could allow an attacker\nto cause a denial of service attack.\n\nThe TLS implementation in OpenSSL does not call this function\nbut applications might call the function if there are additional\nsecurity requirements imposed by standards such as FIPS 140-3.',
-              'diffID':        'sha256:253f1efcceb575705106468bdc1c875a7c9b2a734d4bcca3b1335946656d7acb',
-              'fixedVersions': [
-                '3.0.8-r0'
-              ],
-              'installedVersion': '3.0.7-r2',
-              'packageName':      'libcrypto3',
-              'purl':             'pkg:apk/alpine/libcrypto3@3.0.7-r2?arch=x86&distro=3.17.1',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2023:0946',
-                'https://access.redhat.com/security/cve/CVE-2023-0217',
-                'https://bugzilla.redhat.com/2164440',
-                'https://bugzilla.redhat.com/2164487',
-                'https://bugzilla.redhat.com/2164488',
-                'https://bugzilla.redhat.com/2164492',
-                'https://bugzilla.redhat.com/2164494',
-                'https://bugzilla.redhat.com/2164497',
-                'https://bugzilla.redhat.com/2164499',
-                'https://bugzilla.redhat.com/2164500',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144000',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144003',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144006',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144008',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144010',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144012',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144015',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144017',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144019',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2145170',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2158412',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164440',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164487',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164488',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164492',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164497',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164499',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164500',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4203',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4304',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4450',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0215',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0216',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0217',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0286',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0401',
-                'https://errata.almalinux.org/9/ALSA-2023-0946.html',
-                'https://errata.rockylinux.org/RLSA-2023:0946',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=23985bac83fd50c8e29431009302b5442f985096',
-                'https://linux.oracle.com/cve/CVE-2023-0217.html',
-                'https://linux.oracle.com/errata/ELSA-2023-12152.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-0217',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0003',
-                'https://rustsec.org/advisories/RUSTSEC-2023-0012.html',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://ubuntu.com/security/notices/USN-5844-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-0217',
-                'https://www.openssl.org/news/secadv/20230207.txt'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: NULL dereference validating DSA public key'
-            },
-            {
-              'cve':  'CVE-2023-0286',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '7.4',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H'
-                },
-                'nvd': {
-                  'v3score':  '7.4',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.4',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-843'
-              ],
-              'description':   'There is a type confusion vulnerability relating to X.400 address processing\ninside an X.509 GeneralName. X.400 addresses were parsed as an ASN1_STRING but\nthe public structure definition for GENERAL_NAME incorrectly specified the type\nof the x400Address field as ASN1_TYPE. This field is subsequently interpreted by\nthe OpenSSL function GENERAL_NAME_cmp as an ASN1_TYPE rather than an\nASN1_STRING.\n\nWhen CRL checking is enabled (i.e. the application sets the\nX509_V_FLAG_CRL_CHECK flag), this vulnerability may allow an attacker to pass\narbitrary pointers to a memcmp call, enabling them to read memory contents or\nenact a denial of service. In most cases, the attack requires the attacker to\nprovide both the certificate chain and CRL, neither of which need to have a\nvalid signature. If the attacker only controls one of these inputs, the other\ninput must already contain an X.400 address as a CRL distribution point, which\nis uncommon. As such, this vulnerability is most likely to only affect\napplications which have implemented their own functionality for retrieving CRLs\nover a network.',
-              'diffID':        'sha256:253f1efcceb575705106468bdc1c875a7c9b2a734d4bcca3b1335946656d7acb',
-              'fixedVersions': [
-                '3.0.8-r0'
-              ],
-              'installedVersion': '3.0.7-r2',
-              'packageName':      'libcrypto3',
-              'purl':             'pkg:apk/alpine/libcrypto3@3.0.7-r2?arch=x86&distro=3.17.1',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2025:7937',
-                'https://access.redhat.com/security/cve/CVE-2023-0286',
-                'https://access.redhat.com/security/cve/cve-2023-0286',
-                'https://bugzilla.redhat.com/2164440',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144000',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144003',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144006',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144008',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144010',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144012',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144015',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144017',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144019',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2145170',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2158412',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164440',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164487',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164488',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164492',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164497',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164499',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164500',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4203',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4304',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4450',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0215',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0216',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0217',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0286',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0401',
-                'https://errata.almalinux.org/9/ALSA-2025-7937.html',
-                'https://errata.rockylinux.org/RLSA-2023:0946',
-                'https://ftp.openbsd.org/pub/OpenBSD/LibreSSL/libressl-3.6.2-relnotes.txt',
-                'https://ftp.openbsd.org/pub/OpenBSD/patches/7.2/common/018_x509.patch.sig',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=2c6c9d439b484e1ba9830d8454a34fa4f80fdfe9',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=2f7530077e0ef79d98718138716bc51ca0cad658',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=fd2af07dc083a350c959147097003a14a5e8ac4d',
-                'https://github.com/pyca/cryptography',
-                'https://github.com/pyca/cryptography/security/advisories/GHSA-x4qr-2fvf-3mr5',
-                'https://linux.oracle.com/cve/CVE-2023-0286.html',
-                'https://linux.oracle.com/errata/ELSA-2025-7937.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-0286',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0003',
-                'https://rustsec.org/advisories/RUSTSEC-2023-0006.html',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://ubuntu.com/security/notices/USN-5844-1',
-                'https://ubuntu.com/security/notices/USN-5845-1',
-                'https://ubuntu.com/security/notices/USN-5845-2',
-                'https://ubuntu.com/security/notices/USN-6564-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-0286',
-                'https://www.openssl.org/news/secadv/20230207.txt'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: X.400 address type confusion in X.509 GeneralName'
-            },
-            {
-              'cve':  'CVE-2023-0401',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'nvd': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-476'
-              ],
-              'description':   'A NULL pointer can be dereferenced when signatures are being\nverified on PKCS7 signed or signedAndEnveloped data. In case the hash\nalgorithm used for the signature is known to the OpenSSL library but\nthe implementation of the hash algorithm is not available the digest\ninitialization will fail. There is a missing check for the return\nvalue from the initialization function which later leads to invalid\nusage of the digest API most likely leading to a crash.\n\nThe unavailability of an algorithm can be caused by using FIPS\nenabled configuration of providers or more commonly by not loading\nthe legacy provider.\n\nPKCS7 data is processed by the SMIME library calls and also by the\ntime stamp (TS) library calls. The TLS implementation in OpenSSL does\nnot call these functions however third party applications would be\naffected if they call these functions to verify signatures on untrusted\ndata.',
-              'diffID':        'sha256:253f1efcceb575705106468bdc1c875a7c9b2a734d4bcca3b1335946656d7acb',
-              'fixedVersions': [
-                '3.0.8-r0'
-              ],
-              'installedVersion': '3.0.7-r2',
-              'packageName':      'libcrypto3',
-              'purl':             'pkg:apk/alpine/libcrypto3@3.0.7-r2?arch=x86&distro=3.17.1',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2023:0946',
-                'https://access.redhat.com/security/cve/CVE-2023-0401',
-                'https://bugzilla.redhat.com/2164440',
-                'https://bugzilla.redhat.com/2164487',
-                'https://bugzilla.redhat.com/2164488',
-                'https://bugzilla.redhat.com/2164492',
-                'https://bugzilla.redhat.com/2164494',
-                'https://bugzilla.redhat.com/2164497',
-                'https://bugzilla.redhat.com/2164499',
-                'https://bugzilla.redhat.com/2164500',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144000',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144003',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144006',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144008',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144010',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144012',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144015',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144017',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144019',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2145170',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2158412',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164440',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164487',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164488',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164492',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164497',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164499',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164500',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4203',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4304',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4450',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0215',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0216',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0217',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0286',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0401',
-                'https://errata.almalinux.org/9/ALSA-2023-0946.html',
-                'https://errata.rockylinux.org/RLSA-2023:0946',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=d3b6dfd70db844c4499bec6ad6601623a565e674',
-                'https://github.com/alexcrichton/openssl-src-rs',
-                'https://linux.oracle.com/cve/CVE-2023-0401.html',
-                'https://linux.oracle.com/errata/ELSA-2023-12152.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-0401',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0003',
-                'https://rustsec.org/advisories/RUSTSEC-2023-0013.html',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://ubuntu.com/security/notices/USN-5844-1',
-                'https://ubuntu.com/security/notices/USN-6564-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-0401',
-                'https://www.openssl.org/news/secadv/20230207.txt'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: NULL dereference during PKCS7 data verification'
-            },
-            {
-              'cve':  'CVE-2023-0464',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-295'
-              ],
-              'description':   "A security vulnerability has been identified in all supported versions\n\nof OpenSSL related to the verification of X.509 certificate chains\nthat include policy constraints.  Attackers may be able to exploit this\nvulnerability by creating a malicious certificate chain that triggers\nexponential use of computational resources, leading to a denial-of-service\n(DoS) attack on affected systems.\n\nPolicy processing is disabled by default but can be enabled by passing\nthe `-policy' argument to the command line utilities or by calling the\n`X509_VERIFY_PARAM_set1_policies()' function.",
-              'diffID':        'sha256:253f1efcceb575705106468bdc1c875a7c9b2a734d4bcca3b1335946656d7acb',
-              'fixedVersions': [
-                '3.0.8-r1'
-              ],
-              'installedVersion': '3.0.7-r2',
-              'packageName':      'libcrypto3',
-              'purl':             'pkg:apk/alpine/libcrypto3@3.0.7-r2?arch=x86&distro=3.17.1',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2023:3722',
-                'https://access.redhat.com/security/cve/CVE-2023-0464',
-                'https://bugzilla.redhat.com/2181082',
-                'https://bugzilla.redhat.com/2182561',
-                'https://bugzilla.redhat.com/2182565',
-                'https://bugzilla.redhat.com/2188461',
-                'https://bugzilla.redhat.com/2207947',
-                'https://errata.almalinux.org/9/ALSA-2023-3722.html',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=2017771e2db3e2b96f89bbe8766c3209f6a99545',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=2dcd4f1e3115f38cefa43e3efbe9b801c27e642e',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=879f7080d7e141f415c79eaa3a8ac4a3dad0348b',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=959c59c7a0164117e7f8366466a32bb1f8d77ff1',
-                'https://linux.oracle.com/cve/CVE-2023-0464.html',
-                'https://linux.oracle.com/errata/ELSA-2023-3722.html',
-                'https://lists.debian.org/debian-lts-announce/2023/06/msg00011.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-0464',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://security.netapp.com/advisory/ntap-20230406-0006/',
-                'https://security.netapp.com/advisory/ntap-20240621-0006/',
-                'https://ubuntu.com/security/notices/USN-6039-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.couchbase.com/alerts/',
-                'https://www.cve.org/CVERecord?id=CVE-2023-0464',
-                'https://www.debian.org/security/2023/dsa-5417',
-                'https://www.openssl.org/news/secadv/20230322.txt'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: Denial of service by excessive resource usage in verifying X509 policy constraints'
-            },
-            {
-              'cve':  'CVE-2023-5363',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N'
-                },
-                'redhat': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-684'
-              ],
-              'description':   "Issue summary: A bug has been identified in the processing of key and\ninitialisation vector (IV) lengths.  This can lead to potential truncation\nor overruns during the initialisation of some symmetric ciphers.\n\nImpact summary: A truncation in the IV can result in non-uniqueness,\nwhich could result in loss of confidentiality for some cipher modes.\n\nWhen calling EVP_EncryptInit_ex2(), EVP_DecryptInit_ex2() or\nEVP_CipherInit_ex2() the provided OSSL_PARAM array is processed after\nthe key and IV have been established.  Any alterations to the key length,\nvia the \"keylen\" parameter or the IV length, via the \"ivlen\" parameter,\nwithin the OSSL_PARAM array will not take effect as intended, potentially\ncausing truncation or overreading of these values.  The following ciphers\nand cipher modes are impacted: RC2, RC4, RC5, CCM, GCM and OCB.\n\nFor the CCM, GCM and OCB cipher modes, truncation of the IV can result in\nloss of confidentiality.  For example, when following NIST's SP 800-38D\nsection 8.2.1 guidance for constructing a deterministic IV for AES in\nGCM mode, truncation of the counter portion could lead to IV reuse.\n\nBoth truncations and overruns of the key and overruns of the IV will\nproduce incorrect results and could, in some cases, trigger a memory\nexception.  However, these issues are not currently assessed as security\ncritical.\n\nChanging the key and/or IV lengths is not considered to be a common operation\nand the vulnerable API was recently introduced. Furthermore it is likely that\napplication developers will have spotted this problem during testing since\ndecryption would fail unless both peers in the communication were similarly\nvulnerable. For these reasons we expect the probability of an application being\nvulnerable to this to be quite low. However if an application is vulnerable then\nthis issue is considered very serious. For these reasons we have assessed this\nissue as Moderate severity overall.\n\nThe OpenSSL SSL/TLS implementation is not affected by this issue.\n\nThe OpenSSL 3.0 and 3.1 FIPS providers are not affected by this because\nthe issue lies outside of the FIPS provider boundary.\n\nOpenSSL 3.1 and 3.0 are vulnerable to this issue.",
-              'diffID':        'sha256:253f1efcceb575705106468bdc1c875a7c9b2a734d4bcca3b1335946656d7acb',
-              'fixedVersions': [
-                '3.0.12-r0'
-              ],
-              'installedVersion': '3.0.7-r2',
-              'packageName':      'libcrypto3',
-              'purl':             'pkg:apk/alpine/libcrypto3@3.0.7-r2?arch=x86&distro=3.17.1',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2023/10/24/1',
-                'https://access.redhat.com/errata/RHSA-2024:0310',
-                'https://access.redhat.com/security/cve/CVE-2023-5363',
-                'https://bugzilla.redhat.com/2243839',
-                'https://errata.almalinux.org/9/ALSA-2024-0310.html',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=0df40630850fb2740e6be6890bb905d3fc623b2d',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=5f69f5c65e483928c4b28ed16af6e5742929f1ee',
-                'https://linux.oracle.com/cve/CVE-2023-5363.html',
-                'https://linux.oracle.com/errata/ELSA-2024-12093.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-5363',
-                'https://security.netapp.com/advisory/ntap-20231027-0010/',
-                'https://security.netapp.com/advisory/ntap-20240201-0003/',
-                'https://security.netapp.com/advisory/ntap-20240201-0004/',
-                'https://security.netapp.com/advisory/ntap-20241108-0002/',
-                'https://ubuntu.com/security/notices/USN-6450-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-5363',
-                'https://www.debian.org/security/2023/dsa-5532',
-                'https://www.openssl.org/news/secadv/20231024.txt'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: Incorrect cipher key and IV length processing'
-            },
-            {
-              'cve':  'CVE-2024-6119',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-843'
-              ],
-              'description':   "Issue summary: Applications performing certificate name checks (e.g., TLS\nclients checking server certificates) may attempt to read an invalid memory\naddress resulting in abnormal termination of the application process.\n\nImpact summary: Abnormal termination of an application can a cause a denial of\nservice.\n\nApplications performing certificate name checks (e.g., TLS clients checking\nserver certificates) may attempt to read an invalid memory address when\ncomparing the expected name with an `otherName` subject alternative name of an\nX.509 certificate. This may result in an exception that terminates the\napplication program.\n\nNote that basic certificate chain validation (signatures, dates, ...) is not\naffected, the denial of service can occur only when the application also\nspecifies an expected DNS name, Email address or IP address.\n\nTLS servers rarely solicit client certificates, and even when they do, they\ngenerally don't perform a name check against a reference identifier (expected\nidentity), but rather extract the presented identity after checking the\ncertificate chain.  So TLS servers are generally not affected and the severity\nof the issue is Moderate.\n\nThe FIPS modules in 3.3, 3.2, 3.1 and 3.0 are not affected by this issue.",
-              'diffID':        'sha256:253f1efcceb575705106468bdc1c875a7c9b2a734d4bcca3b1335946656d7acb',
-              'fixedVersions': [
-                '3.0.15-r0'
-              ],
-              'installedVersion': '3.0.7-r2',
-              'packageName':      'libcrypto3',
-              'purl':             'pkg:apk/alpine/libcrypto3@3.0.7-r2?arch=x86&distro=3.17.1',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2024/09/03/4',
-                'https://access.redhat.com/errata/RHSA-2024:8935',
-                'https://access.redhat.com/security/cve/CVE-2024-6119',
-                'https://bugzilla.redhat.com/2306158',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2306158',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-6119',
-                'https://errata.almalinux.org/9/ALSA-2024-8935.html',
-                'https://errata.rockylinux.org/RLSA-2024:6783',
-                'https://github.com/openssl/openssl/commit/05f360d9e849a1b277db628f1f13083a7f8dd04f',
-                'https://github.com/openssl/openssl/commit/06d1dc3fa96a2ba5a3e22735a033012aadc9f0d6',
-                'https://github.com/openssl/openssl/commit/621f3729831b05ee828a3203eddb621d014ff2b2',
-                'https://github.com/openssl/openssl/commit/7dfcee2cd2a63b2c64b9b4b0850be64cb695b0a0',
-                'https://github.com/openssl/openssl/security/advisories/GHSA-5qrj-vq78-58fj',
-                'https://linux.oracle.com/cve/CVE-2024-6119.html',
-                'https://linux.oracle.com/errata/ELSA-2024-8935.html',
-                'https://lists.freebsd.org/archives/freebsd-security/2024-September/000303.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2024-6119',
-                'https://openssl-library.org/news/secadv/20240903.txt',
-                'https://security.netapp.com/advisory/ntap-20240912-0001/',
-                'https://ubuntu.com/security/notices/USN-6986-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2024-6119'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: Possible denial of service in X.509 name checks'
-            },
-            {
-              'cve':  'CVE-2022-4203',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '9.1',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H'
-                },
-                'nvd': {
-                  'v3score':  '4.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '4.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-125'
-              ],
-              'description':   'A read buffer overrun can be triggered in X.509 certificate verification,\nspecifically in name constraint checking. Note that this occurs\nafter certificate chain signature verification and requires either a\nCA to have signed the malicious certificate or for the application to\ncontinue certificate verification despite failure to construct a path\nto a trusted issuer.\n\nThe read buffer overrun might result in a crash which could lead to\na denial of service attack. In theory it could also result in the disclosure\nof private memory contents (such as private keys, or sensitive plaintext)\nalthough we are not aware of any working exploit leading to memory\ncontents disclosure as of the time of release of this advisory.\n\nIn a TLS client, this can be triggered by connecting to a malicious\nserver. In a TLS server, this can be triggered if the server requests\nclient authentication and a malicious client connects.',
-              'diffID':        'sha256:253f1efcceb575705106468bdc1c875a7c9b2a734d4bcca3b1335946656d7acb',
-              'fixedVersions': [
-                '3.0.8-r0'
-              ],
-              'installedVersion': '3.0.7-r2',
-              'packageName':      'libcrypto3',
-              'purl':             'pkg:apk/alpine/libcrypto3@3.0.7-r2?arch=x86&distro=3.17.1',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2023:0946',
-                'https://access.redhat.com/security/cve/CVE-2022-4203',
-                'https://bugzilla.redhat.com/2164440',
-                'https://bugzilla.redhat.com/2164487',
-                'https://bugzilla.redhat.com/2164488',
-                'https://bugzilla.redhat.com/2164492',
-                'https://bugzilla.redhat.com/2164494',
-                'https://bugzilla.redhat.com/2164497',
-                'https://bugzilla.redhat.com/2164499',
-                'https://bugzilla.redhat.com/2164500',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144000',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144003',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144006',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144008',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144010',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144012',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144015',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144017',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144019',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2145170',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2158412',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164440',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164487',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164488',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164492',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164497',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164499',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164500',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4203',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4304',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4450',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0215',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0216',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0217',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0286',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0401',
-                'https://errata.almalinux.org/9/ALSA-2023-0946.html',
-                'https://errata.rockylinux.org/RLSA-2023:0946',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=c927a3492698c254637da836762f9b1f86cffabc',
-                'https://linux.oracle.com/cve/CVE-2022-4203.html',
-                'https://linux.oracle.com/errata/ELSA-2023-12152.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2022-4203',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0003',
-                'https://rustsec.org/advisories/RUSTSEC-2023-0008.html',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://ubuntu.com/security/notices/USN-5844-1',
-                'https://www.cve.org/CVERecord?id=CVE-2022-4203',
-                'https://www.openssl.org/news/secadv/20230207.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: read buffer overflow in X.509 certificate verification'
-            },
-            {
-              'cve':  'CVE-2022-4304',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N'
-                },
-                'nvd': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N'
-                },
-                'redhat': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-203'
-              ],
-              'description':   'A timing based side channel exists in the OpenSSL RSA Decryption implementation\nwhich could be sufficient to recover a plaintext across a network in a\nBleichenbacher style attack. To achieve a successful decryption an attacker\nwould have to be able to send a very large number of trial messages for\ndecryption. The vulnerability affects all RSA padding modes: PKCS#1 v1.5,\nRSA-OEAP and RSASVE.\n\nFor example, in a TLS connection, RSA is commonly used by a client to send an\nencrypted pre-master secret to the server. An attacker that had observed a\ngenuine connection between a client and a server could use this flaw to send\ntrial messages to the server and record the time taken to process them. After a\nsufficiently large number of messages the attacker could recover the pre-master\nsecret used for the original connection and thus be able to decrypt the\napplication data sent over that connection.',
-              'diffID':        'sha256:253f1efcceb575705106468bdc1c875a7c9b2a734d4bcca3b1335946656d7acb',
-              'fixedVersions': [
-                '3.0.8-r0'
-              ],
-              'installedVersion': '3.0.7-r2',
-              'packageName':      'libcrypto3',
-              'purl':             'pkg:apk/alpine/libcrypto3@3.0.7-r2?arch=x86&distro=3.17.1',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2023:2165',
-                'https://access.redhat.com/security/cve/CVE-2022-4304',
-                'https://bugzilla.redhat.com/1960321',
-                'https://bugzilla.redhat.com/2164440',
-                'https://bugzilla.redhat.com/2164487',
-                'https://bugzilla.redhat.com/2164492',
-                'https://bugzilla.redhat.com/2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144000',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144003',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144006',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144008',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144010',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144012',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144015',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144017',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144019',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2145170',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2158412',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164440',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164487',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164488',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164492',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164497',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164499',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164500',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4203',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4304',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4450',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0215',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0216',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0217',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0286',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0401',
-                'https://errata.almalinux.org/9/ALSA-2023-2165.html',
-                'https://errata.rockylinux.org/RLSA-2023:0946',
-                'https://linux.oracle.com/cve/CVE-2022-4304.html',
-                'https://linux.oracle.com/errata/ELSA-2023-32791.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2022-4304',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0003',
-                'https://rustsec.org/advisories/RUSTSEC-2023-0007.html',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://ubuntu.com/security/notices/USN-5844-1',
-                'https://ubuntu.com/security/notices/USN-6564-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2022-4304',
-                'https://www.openssl.org/news/secadv/20230207.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: timing attack in RSA Decryption implementation'
-            },
-            {
-              'cve':  'CVE-2023-0465',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N'
-                },
-                'redhat': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-295'
-              ],
-              'description':   "Applications that use a non-default option when verifying certificates may be\nvulnerable to an attack from a malicious CA to circumvent certain checks.\n\nInvalid certificate policies in leaf certificates are silently ignored by\nOpenSSL and other certificate policy checks are skipped for that certificate.\nA malicious CA could use this to deliberately assert invalid certificate policies\nin order to circumvent policy checking on the certificate altogether.\n\nPolicy processing is disabled by default but can be enabled by passing\nthe `-policy' argument to the command line utilities or by calling the\n`X509_VERIFY_PARAM_set1_policies()' function.",
-              'diffID':        'sha256:253f1efcceb575705106468bdc1c875a7c9b2a734d4bcca3b1335946656d7acb',
-              'fixedVersions': [
-                '3.0.8-r2'
-              ],
-              'installedVersion': '3.0.7-r2',
-              'packageName':      'libcrypto3',
-              'purl':             'pkg:apk/alpine/libcrypto3@3.0.7-r2?arch=x86&distro=3.17.1',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2023:3722',
-                'https://access.redhat.com/security/cve/CVE-2023-0465',
-                'https://bugzilla.redhat.com/2181082',
-                'https://bugzilla.redhat.com/2182561',
-                'https://bugzilla.redhat.com/2182565',
-                'https://bugzilla.redhat.com/2188461',
-                'https://bugzilla.redhat.com/2207947',
-                'https://errata.almalinux.org/9/ALSA-2023-3722.html',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=10325176f3d3e98c6e2b3bf5ab1e3b334de6947a',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=1dd43e0709fece299b15208f36cc7c76209ba0bb',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=b013765abfa80036dc779dd0e50602c57bb3bf95',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=facfb1ab745646e97a1920977ae4a9965ea61d5c',
-                'https://linux.oracle.com/cve/CVE-2023-0465.html',
-                'https://linux.oracle.com/errata/ELSA-2023-3722.html',
-                'https://lists.debian.org/debian-lts-announce/2023/06/msg00011.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-0465',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://security.netapp.com/advisory/ntap-20230414-0001/',
-                'https://ubuntu.com/security/notices/USN-6039-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-0465',
-                'https://www.debian.org/security/2023/dsa-5417',
-                'https://www.openssl.org/news/secadv/20230328.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: Invalid certificate policies in leaf certificates are silently ignored'
-            },
-            {
-              'cve':  'CVE-2023-0466',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N'
-                },
-                'redhat': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-295'
-              ],
-              'description':   'The function X509_VERIFY_PARAM_add0_policy() is documented to\nimplicitly enable the certificate policy check when doing certificate\nverification. However the implementation of the function does not\nenable the check which allows certificates with invalid or incorrect\npolicies to pass the certificate verification.\n\nAs suddenly enabling the policy check could break existing deployments it was\ndecided to keep the existing behavior of the X509_VERIFY_PARAM_add0_policy()\nfunction.\n\nInstead the applications that require OpenSSL to perform certificate\npolicy check need to use X509_VERIFY_PARAM_set1_policies() or explicitly\nenable the policy check by calling X509_VERIFY_PARAM_set_flags() with\nthe X509_V_FLAG_POLICY_CHECK flag argument.\n\nCertificate policy checks are disabled by default in OpenSSL and are not\ncommonly used by applications.',
-              'diffID':        'sha256:253f1efcceb575705106468bdc1c875a7c9b2a734d4bcca3b1335946656d7acb',
-              'fixedVersions': [
-                '3.0.8-r3'
-              ],
-              'installedVersion': '3.0.7-r2',
-              'packageName':      'libcrypto3',
-              'purl':             'pkg:apk/alpine/libcrypto3@3.0.7-r2?arch=x86&distro=3.17.1',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2023/09/28/4',
-                'https://access.redhat.com/errata/RHSA-2023:3722',
-                'https://access.redhat.com/security/cve/CVE-2023-0466',
-                'https://bugzilla.redhat.com/2181082',
-                'https://bugzilla.redhat.com/2182561',
-                'https://bugzilla.redhat.com/2182565',
-                'https://bugzilla.redhat.com/2188461',
-                'https://bugzilla.redhat.com/2207947',
-                'https://errata.almalinux.org/9/ALSA-2023-3722.html',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=0d16b7e99aafc0b4a6d729eec65a411a7e025f0a',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=51e8a84ce742db0f6c70510d0159dad8f7825908',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=73398dea26de9899fb4baa94098ad0a61f435c72',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=fc814a30fc4f0bc54fcea7d9a7462f5457aab061',
-                'https://linux.oracle.com/cve/CVE-2023-0466.html',
-                'https://linux.oracle.com/errata/ELSA-2023-3722.html',
-                'https://lists.debian.org/debian-lts-announce/2023/06/msg00011.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-0466',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://security.netapp.com/advisory/ntap-20230414-0001/',
-                'https://ubuntu.com/security/notices/USN-6039-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-0466',
-                'https://www.debian.org/security/2023/dsa-5417',
-                'https://www.openssl.org/news/secadv/20230328.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: Certificate policy check not enabled'
-            },
-            {
-              'cve':  'CVE-2023-1255',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '5.1',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-125'
-              ],
-              'description':   'Issue summary: The AES-XTS cipher decryption implementation for 64 bit ARM\nplatform contains a bug that could cause it to read past the input buffer,\nleading to a crash.\n\nImpact summary: Applications that use the AES-XTS algorithm on the 64 bit ARM\nplatform can crash in rare circumstances. The AES-XTS algorithm is usually\nused for disk encryption.\n\nThe AES-XTS cipher decryption implementation for 64 bit ARM platform will read\npast the end of the ciphertext buffer if the ciphertext size is 4 mod 5 in 16\nbyte blocks, e.g. 144 bytes or 1024 bytes. If the memory after the ciphertext\nbuffer is unmapped, this will trigger a crash which results in a denial of\nservice.\n\nIf an attacker can control the size and location of the ciphertext buffer\nbeing decrypted by an application using AES-XTS on 64 bit ARM, the\napplication is affected. This is fairly unlikely making this issue\na Low severity one.',
-              'diffID':        'sha256:253f1efcceb575705106468bdc1c875a7c9b2a734d4bcca3b1335946656d7acb',
-              'fixedVersions': [
-                '3.0.8-r4'
-              ],
-              'installedVersion': '3.0.7-r2',
-              'packageName':      'libcrypto3',
-              'purl':             'pkg:apk/alpine/libcrypto3@3.0.7-r2?arch=x86&distro=3.17.1',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2023:3722',
-                'https://access.redhat.com/security/cve/CVE-2023-1255',
-                'https://bugzilla.redhat.com/2181082',
-                'https://bugzilla.redhat.com/2182561',
-                'https://bugzilla.redhat.com/2182565',
-                'https://bugzilla.redhat.com/2188461',
-                'https://bugzilla.redhat.com/2207947',
-                'https://errata.almalinux.org/9/ALSA-2023-3722.html',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=02ac9c9420275868472f33b01def01218742b8bb',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=bc2f61ad70971869b242fc1cb445b98bad50074a',
-                'https://linux.oracle.com/cve/CVE-2023-1255.html',
-                'https://linux.oracle.com/errata/ELSA-2023-3722.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-1255',
-                'https://security.netapp.com/advisory/ntap-20230908-0006/',
-                'https://ubuntu.com/security/notices/USN-6119-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-1255',
-                'https://www.openssl.org/news/secadv/20230419.txt',
-                'https://www.openssl.org/news/secadv/20230420.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: Input buffer over-read in AES-XTS implementation on 64 bit ARM'
-            },
-            {
-              'cve':  'CVE-2023-2650',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '6.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-770'
-              ],
-              'description':   "Issue summary: Processing some specially crafted ASN.1 object identifiers or\ndata containing them may be very slow.\n\nImpact summary: Applications that use OBJ_obj2txt() directly, or use any of\nthe OpenSSL subsystems OCSP, PKCS7/SMIME, CMS, CMP/CRMF or TS with no message\nsize limit may experience notable to very long delays when processing those\nmessages, which may lead to a Denial of Service.\n\nAn OBJECT IDENTIFIER is composed of a series of numbers - sub-identifiers -\nmost of which have no size limit.  OBJ_obj2txt() may be used to translate\nan ASN.1 OBJECT IDENTIFIER given in DER encoding form (using the OpenSSL\ntype ASN1_OBJECT) to its canonical numeric text form, which are the\nsub-identifiers of the OBJECT IDENTIFIER in decimal form, separated by\nperiods.\n\nWhen one of the sub-identifiers in the OBJECT IDENTIFIER is very large\n(these are sizes that are seen as absurdly large, taking up tens or hundreds\nof KiBs), the translation to a decimal number in text may take a very long\ntime.  The time complexity is O(n^2) with 'n' being the size of the\nsub-identifiers in bytes (*).\n\nWith OpenSSL 3.0, support to fetch cryptographic algorithms using names /\nidentifiers in string form was introduced.  This includes using OBJECT\nIDENTIFIERs in canonical numeric text form as identifiers for fetching\nalgorithms.\n\nSuch OBJECT IDENTIFIERs may be received through the ASN.1 structure\nAlgorithmIdentifier, which is commonly used in multiple protocols to specify\nwhat cryptographic algorithm should be used to sign or verify, encrypt or\ndecrypt, or digest passed data.\n\nApplications that call OBJ_obj2txt() directly with untrusted data are\naffected, with any version of OpenSSL.  If the use is for the mere purpose\nof display, the severity is considered low.\n\nIn OpenSSL 3.0 and newer, this affects the subsystems OCSP, PKCS7/SMIME,\nCMS, CMP/CRMF or TS.  It also impacts anything that processes X.509\ncertificates, including simple things like verifying its signature.\n\nThe impact on TLS is relatively low, because all versions of OpenSSL have a\n100KiB limit on the peer's certificate chain.  Additionally, this only\nimpacts clients, or servers that have explicitly enabled client\nauthentication.\n\nIn OpenSSL 1.1.1 and 1.0.2, this only affects displaying diverse objects,\nsuch as X.509 certificates.  This is assumed to not happen in such a way\nthat it would cause a Denial of Service, so these versions are considered\nnot affected by this issue in such a way that it would be cause for concern,\nand the severity is therefore considered low.",
-              'diffID':        'sha256:253f1efcceb575705106468bdc1c875a7c9b2a734d4bcca3b1335946656d7acb',
-              'fixedVersions': [
-                '3.0.9-r0'
-              ],
-              'installedVersion': '3.0.7-r2',
-              'packageName':      'libcrypto3',
-              'purl':             'pkg:apk/alpine/libcrypto3@3.0.7-r2?arch=x86&distro=3.17.1',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2023/05/30/1',
-                'https://access.redhat.com/errata/RHSA-2023:6330',
-                'https://access.redhat.com/security/cve/CVE-2023-2650',
-                'https://bugzilla.redhat.com/1858038',
-                'https://bugzilla.redhat.com/2207947',
-                'https://errata.almalinux.org/9/ALSA-2023-6330.html',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=423a2bc737a908ad0c77bda470b2b59dc879936b',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=853c5e56ee0b8650c73140816bb8b91d6163422c',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=9e209944b35cf82368071f160a744b6178f9b098',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=db779b0e10b047f2585615e0b8f2acdf21f8544a',
-                'https://linux.oracle.com/cve/CVE-2023-2650.html',
-                'https://linux.oracle.com/errata/ELSA-2023-6330.html',
-                'https://lists.debian.org/debian-lts-announce/2023/06/msg00011.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-2650',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0009',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://security.netapp.com/advisory/ntap-20230703-0001/',
-                'https://security.netapp.com/advisory/ntap-20231027-0009/',
-                'https://ubuntu.com/security/notices/USN-6119-1',
-                'https://ubuntu.com/security/notices/USN-6188-1',
-                'https://ubuntu.com/security/notices/USN-6672-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-2650',
-                'https://www.debian.org/security/2023/dsa-5417',
-                'https://www.openssl.org/news/secadv/20230530.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: Possible DoS translating ASN.1 object identifiers'
-            },
-            {
-              'cve':  'CVE-2023-2975',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N'
-                },
-                'redhat': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-354',
-                'CWE-287'
-              ],
-              'description':   'Issue summary: The AES-SIV cipher implementation contains a bug that causes\nit to ignore empty associated data entries which are unauthenticated as\na consequence.\n\nImpact summary: Applications that use the AES-SIV algorithm and want to\nauthenticate empty data entries as associated data can be misled by removing,\nadding or reordering such empty entries as these are ignored by the OpenSSL\nimplementation. We are currently unaware of any such applications.\n\nThe AES-SIV algorithm allows for authentication of multiple associated\ndata entries along with the encryption. To authenticate empty data the\napplication has to call EVP_EncryptUpdate() (or EVP_CipherUpdate()) with\nNULL pointer as the output buffer and 0 as the input buffer length.\nThe AES-SIV implementation in OpenSSL just returns success for such a call\ninstead of performing the associated data authentication operation.\nThe empty data thus will not be authenticated.\n\nAs this issue does not affect non-empty associated data authentication and\nwe expect it to be rare for an application to use empty associated data\nentries this is qualified as Low severity issue.',
-              'diffID':        'sha256:253f1efcceb575705106468bdc1c875a7c9b2a734d4bcca3b1335946656d7acb',
-              'fixedVersions': [
-                '3.0.9-r2'
-              ],
-              'installedVersion': '3.0.7-r2',
-              'packageName':      'libcrypto3',
-              'purl':             'pkg:apk/alpine/libcrypto3@3.0.7-r2?arch=x86&distro=3.17.1',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2023/07/15/1',
-                'http://www.openwall.com/lists/oss-security/2023/07/19/5',
-                'https://access.redhat.com/errata/RHSA-2024:2447',
-                'https://access.redhat.com/security/cve/CVE-2023-2975',
-                'https://bugzilla.redhat.com/2223016',
-                'https://bugzilla.redhat.com/2224962',
-                'https://bugzilla.redhat.com/2227852',
-                'https://bugzilla.redhat.com/2248616',
-                'https://bugzilla.redhat.com/2257571',
-                'https://bugzilla.redhat.com/2258502',
-                'https://bugzilla.redhat.com/2259944',
-                'https://errata.almalinux.org/9/ALSA-2024-2447.html',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=00e2f5eea29994d19293ec4e8c8775ba73678598',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=6a83f0c958811f07e0d11dfc6b5a6a98edfd5bdc',
-                'https://linux.oracle.com/cve/CVE-2023-2975.html',
-                'https://linux.oracle.com/errata/ELSA-2024-2447.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-2975',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://security.netapp.com/advisory/ntap-20230725-0004/',
-                'https://ubuntu.com/security/notices/USN-6450-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-2975',
-                'https://www.openssl.org/news/secadv/20230714.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: AES-SIV cipher implementation contains a bug that causes it to ignore empty associated data entries'
-            },
-            {
-              'cve':  'CVE-2023-3446',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L'
-                },
-                'redhat': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L'
-                }
-              },
-              'cwes': [
-                'CWE-606',
-                'CWE-1333'
-              ],
-              'description':   "Issue summary: Checking excessively long DH keys or parameters may be very slow.\n\nImpact summary: Applications that use the functions DH_check(), DH_check_ex()\nor EVP_PKEY_param_check() to check a DH key or DH parameters may experience long\ndelays. Where the key or parameters that are being checked have been obtained\nfrom an untrusted source this may lead to a Denial of Service.\n\nThe function DH_check() performs various checks on DH parameters. One of those\nchecks confirms that the modulus ('p' parameter) is not too large. Trying to use\na very large modulus is slow and OpenSSL will not normally use a modulus which\nis over 10,000 bits in length.\n\nHowever the DH_check() function checks numerous aspects of the key or parameters\nthat have been supplied. Some of those checks use the supplied modulus value\neven if it has already been found to be too large.\n\nAn application that calls DH_check() and supplies a key or parameters obtained\nfrom an untrusted source could be vulernable to a Denial of Service attack.\n\nThe function DH_check() is itself called by a number of other OpenSSL functions.\nAn application calling any of those other functions may similarly be affected.\nThe other functions affected by this are DH_check_ex() and\nEVP_PKEY_param_check().\n\nAlso vulnerable are the OpenSSL dhparam and pkeyparam command line applications\nwhen using the '-check' option.\n\nThe OpenSSL SSL/TLS implementation is not affected by this issue.\nThe OpenSSL 3.0 and 3.1 FIPS providers are not affected by this issue.",
-              'diffID':        'sha256:253f1efcceb575705106468bdc1c875a7c9b2a734d4bcca3b1335946656d7acb',
-              'fixedVersions': [
-                '3.0.9-r3'
-              ],
-              'installedVersion': '3.0.7-r2',
-              'packageName':      'libcrypto3',
-              'purl':             'pkg:apk/alpine/libcrypto3@3.0.7-r2?arch=x86&distro=3.17.1',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2023/07/19/4',
-                'http://www.openwall.com/lists/oss-security/2023/07/19/5',
-                'http://www.openwall.com/lists/oss-security/2023/07/19/6',
-                'http://www.openwall.com/lists/oss-security/2023/07/31/1',
-                'http://www.openwall.com/lists/oss-security/2024/05/16/1',
-                'https://access.redhat.com/errata/RHSA-2024:2447',
-                'https://access.redhat.com/security/cve/CVE-2023-3446',
-                'https://bugzilla.redhat.com/2223016',
-                'https://bugzilla.redhat.com/2224962',
-                'https://bugzilla.redhat.com/2227852',
-                'https://bugzilla.redhat.com/2248616',
-                'https://bugzilla.redhat.com/2257571',
-                'https://bugzilla.redhat.com/2258502',
-                'https://bugzilla.redhat.com/2259944',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2224962',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2257582',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2257583',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2258677',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2258688',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2258691',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2258694',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2258700',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-36763',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-36764',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3446',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45229',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45231',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45232',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45233',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45235',
-                'https://errata.almalinux.org/9/ALSA-2024-2447.html',
-                'https://errata.rockylinux.org/RLSA-2024:2264',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=1fa20cf2f506113c761777127a38bce5068740eb',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=8780a896543a654e757db1b9396383f9d8095528',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=9a0a4d3c1e7138915563c0df4fe6a3f9377b839c',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=fc9867c1e03c22ebf56943be205202e576aabf23',
-                'https://linux.oracle.com/cve/CVE-2023-3446.html',
-                'https://linux.oracle.com/errata/ELSA-2024-2447.html',
-                'https://lists.debian.org/debian-lts-announce/2023/08/msg00019.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-3446',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://security.netapp.com/advisory/ntap-20230803-0011/',
-                'https://ubuntu.com/security/notices/USN-6435-1',
-                'https://ubuntu.com/security/notices/USN-6435-2',
-                'https://ubuntu.com/security/notices/USN-6450-1',
-                'https://ubuntu.com/security/notices/USN-6709-1',
-                'https://ubuntu.com/security/notices/USN-7018-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-3446',
-                'https://www.openssl.org/news/secadv/20230719.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: Excessive time spent checking DH keys and parameters'
-            },
-            {
-              'cve':  'CVE-2023-3817',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L'
-                },
-                'redhat': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L'
-                }
-              },
-              'cwes': [
-                'CWE-606',
-                'CWE-834'
-              ],
-              'description':   'Issue summary: Checking excessively long DH keys or parameters may be very slow.\n\nImpact summary: Applications that use the functions DH_check(), DH_check_ex()\nor EVP_PKEY_param_check() to check a DH key or DH parameters may experience long\ndelays. Where the key or parameters that are being checked have been obtained\nfrom an untrusted source this may lead to a Denial of Service.\n\nThe function DH_check() performs various checks on DH parameters. After fixing\nCVE-2023-3446 it was discovered that a large q parameter value can also trigger\nan overly long computation during some of these checks. A correct q value,\nif present, cannot be larger than the modulus p parameter, thus it is\nunnecessary to perform these checks if q is larger than p.\n\nAn application that calls DH_check() and supplies a key or parameters obtained\nfrom an untrusted source could be vulnerable to a Denial of Service attack.\n\nThe function DH_check() is itself called by a number of other OpenSSL functions.\nAn application calling any of those other functions may similarly be affected.\nThe other functions affected by this are DH_check_ex() and\nEVP_PKEY_param_check().\n\nAlso vulnerable are the OpenSSL dhparam and pkeyparam command line applications\nwhen using the "-check" option.\n\nThe OpenSSL SSL/TLS implementation is not affected by this issue.\n\nThe OpenSSL 3.0 and 3.1 FIPS providers are not affected by this issue.',
-              'diffID':        'sha256:253f1efcceb575705106468bdc1c875a7c9b2a734d4bcca3b1335946656d7acb',
-              'fixedVersions': [
-                '3.0.10-r0'
-              ],
-              'installedVersion': '3.0.7-r2',
-              'packageName':      'libcrypto3',
-              'purl':             'pkg:apk/alpine/libcrypto3@3.0.7-r2?arch=x86&distro=3.17.1',
-              'references':       [
-                'http://seclists.org/fulldisclosure/2023/Jul/43',
-                'http://www.openwall.com/lists/oss-security/2023/07/31/1',
-                'http://www.openwall.com/lists/oss-security/2023/09/22/11',
-                'http://www.openwall.com/lists/oss-security/2023/09/22/9',
-                'http://www.openwall.com/lists/oss-security/2023/11/06/2',
-                'https://access.redhat.com/errata/RHSA-2024:2447',
-                'https://access.redhat.com/security/cve/CVE-2023-3817',
-                'https://bugzilla.redhat.com/2223016',
-                'https://bugzilla.redhat.com/2224962',
-                'https://bugzilla.redhat.com/2227852',
-                'https://bugzilla.redhat.com/2248616',
-                'https://bugzilla.redhat.com/2257571',
-                'https://bugzilla.redhat.com/2258502',
-                'https://bugzilla.redhat.com/2259944',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2224962',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2227852',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2248616',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2270358',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3446',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3817',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-5678',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-2408',
-                'https://errata.almalinux.org/9/ALSA-2024-2447.html',
-                'https://errata.rockylinux.org/RLSA-2023:7877',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=6a1eb62c29db6cb5eec707f9338aee00f44e26f5',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=869ad69aadd985c7b8ca6f4e5dd0eb274c9f3644',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=9002fd07327a91f35ba6c1307e71fa6fd4409b7f',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=91ddeba0f2269b017dc06c46c993a788974b1aa5',
-                'https://linux.oracle.com/cve/CVE-2023-3817.html',
-                'https://linux.oracle.com/errata/ELSA-2024-2447.html',
-                'https://lists.debian.org/debian-lts-announce/2023/08/msg00019.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-3817',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://security.netapp.com/advisory/ntap-20230818-0014/',
-                'https://security.netapp.com/advisory/ntap-20231027-0008/',
-                'https://security.netapp.com/advisory/ntap-20240621-0006/',
-                'https://ubuntu.com/security/notices/USN-6435-1',
-                'https://ubuntu.com/security/notices/USN-6435-2',
-                'https://ubuntu.com/security/notices/USN-6450-1',
-                'https://ubuntu.com/security/notices/USN-6709-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-3817',
-                'https://www.openssl.org/news/secadv/20230731.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'OpenSSL: Excessive time spent checking DH q parameter value'
-            },
-            {
-              'cve':  'CVE-2023-5678',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L'
-                },
-                'redhat': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L'
-                }
-              },
-              'cwes': [
-                'CWE-606',
-                'CWE-754'
-              ],
-              'description':   "Issue summary: Generating excessively long X9.42 DH keys or checking\nexcessively long X9.42 DH keys or parameters may be very slow.\n\nImpact summary: Applications that use the functions DH_generate_key() to\ngenerate an X9.42 DH key may experience long delays.  Likewise, applications\nthat use DH_check_pub_key(), DH_check_pub_key_ex() or EVP_PKEY_public_check()\nto check an X9.42 DH key or X9.42 DH parameters may experience long delays.\nWhere the key or parameters that are being checked have been obtained from\nan untrusted source this may lead to a Denial of Service.\n\nWhile DH_check() performs all the necessary checks (as of CVE-2023-3817),\nDH_check_pub_key() doesn't make any of these checks, and is therefore\nvulnerable for excessively large P and Q parameters.\n\nLikewise, while DH_generate_key() performs a check for an excessively large\nP, it doesn't check for an excessively large Q.\n\nAn application that calls DH_generate_key() or DH_check_pub_key() and\nsupplies a key or parameters obtained from an untrusted source could be\nvulnerable to a Denial of Service attack.\n\nDH_generate_key() and DH_check_pub_key() are also called by a number of\nother OpenSSL functions.  An application calling any of those other\nfunctions may similarly be affected.  The other functions affected by this\nare DH_check_pub_key_ex(), EVP_PKEY_public_check(), and EVP_PKEY_generate().\n\nAlso vulnerable are the OpenSSL pkey command line application when using the\n\"-pubcheck\" option, as well as the OpenSSL genpkey command line application.\n\nThe OpenSSL SSL/TLS implementation is not affected by this issue.\n\nThe OpenSSL 3.0 and 3.1 FIPS providers are not affected by this issue.",
-              'diffID':        'sha256:253f1efcceb575705106468bdc1c875a7c9b2a734d4bcca3b1335946656d7acb',
-              'fixedVersions': [
-                '3.0.12-r1'
-              ],
-              'installedVersion': '3.0.7-r2',
-              'packageName':      'libcrypto3',
-              'purl':             'pkg:apk/alpine/libcrypto3@3.0.7-r2?arch=x86&distro=3.17.1',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2024/03/11/1',
-                'https://access.redhat.com/errata/RHSA-2024:2447',
-                'https://access.redhat.com/security/cve/CVE-2023-5678',
-                'https://bugzilla.redhat.com/2223016',
-                'https://bugzilla.redhat.com/2224962',
-                'https://bugzilla.redhat.com/2227852',
-                'https://bugzilla.redhat.com/2248616',
-                'https://bugzilla.redhat.com/2257571',
-                'https://bugzilla.redhat.com/2258502',
-                'https://bugzilla.redhat.com/2259944',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2224962',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2227852',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2248616',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2270358',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3446',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3817',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-5678',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-2408',
-                'https://errata.almalinux.org/9/ALSA-2024-2447.html',
-                'https://errata.rockylinux.org/RLSA-2023:7877',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=34efaef6c103d636ab507a0cc34dca4d3aecc055',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=710fee740904b6290fef0dd5536fbcedbc38ff0c',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=db925ae2e65d0d925adef429afc37f75bd1c2017',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=ddeb4b6c6d527e54ce9a99cba785c0f7776e54b6',
-                'https://linux.oracle.com/cve/CVE-2023-5678.html',
-                'https://linux.oracle.com/errata/ELSA-2024-2447.html',
-                'https://lists.debian.org/debian-lts-announce/2024/10/msg00033.html',
-                'https://lists.debian.org/debian-lts-announce/2024/11/msg00000.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-5678',
-                'https://security.netapp.com/advisory/ntap-20231130-0010/',
-                'https://ubuntu.com/security/notices/USN-6622-1',
-                'https://ubuntu.com/security/notices/USN-6632-1',
-                'https://ubuntu.com/security/notices/USN-6709-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-5678',
-                'https://www.openssl.org/news/secadv/20231106.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: Generating excessively long X9.42 DH keys or checking excessively long X9.42 DH keys or parameters may be very slow'
-            },
-            {
-              'cve':  'CVE-2023-6129',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '6.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-440',
-                'CWE-787'
-              ],
-              'description':   'Issue summary: The POLY1305 MAC (message authentication code) implementation\ncontains a bug that might corrupt the internal state of applications running\non PowerPC CPU based platforms if the CPU provides vector instructions.\n\nImpact summary: If an attacker can influence whether the POLY1305 MAC\nalgorithm is used, the application state might be corrupted with various\napplication dependent consequences.\n\nThe POLY1305 MAC (message authentication code) implementation in OpenSSL for\nPowerPC CPUs restores the contents of vector registers in a different order\nthan they are saved. Thus the contents of some of these vector registers\nare corrupted when returning to the caller. The vulnerable code is used only\non newer PowerPC processors supporting the PowerISA 2.07 instructions.\n\nThe consequences of this kind of internal application state corruption can\nbe various - from no consequences, if the calling application does not\ndepend on the contents of non-volatile XMM registers at all, to the worst\nconsequences, where the attacker could get complete control of the application\nprocess. However unless the compiler uses the vector registers for storing\npointers, the most likely consequence, if any, would be an incorrect result\nof some application dependent calculations or a crash leading to a denial of\nservice.\n\nThe POLY1305 MAC algorithm is most frequently used as part of the\nCHACHA20-POLY1305 AEAD (authenticated encryption with associated data)\nalgorithm. The most common usage of this AEAD cipher is with TLS protocol\nversions 1.2 and 1.3. If this cipher is enabled on the server a malicious\nclient can influence whether this AEAD cipher is used. This implies that\nTLS server applications using OpenSSL can be potentially impacted. However\nwe are currently not aware of any concrete application that would be affected\nby this issue therefore we consider this a Low severity security issue.',
-              'diffID':        'sha256:253f1efcceb575705106468bdc1c875a7c9b2a734d4bcca3b1335946656d7acb',
-              'fixedVersions': [
-                '3.0.12-r2'
-              ],
-              'installedVersion': '3.0.7-r2',
-              'packageName':      'libcrypto3',
-              'purl':             'pkg:apk/alpine/libcrypto3@3.0.7-r2?arch=x86&distro=3.17.1',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2024/03/11/1',
-                'https://access.redhat.com/errata/RHSA-2024:9088',
-                'https://access.redhat.com/security/cve/CVE-2023-6129',
-                'https://bugzilla.redhat.com/2257571',
-                'https://bugzilla.redhat.com/2258502',
-                'https://bugzilla.redhat.com/2259944',
-                'https://bugzilla.redhat.com/2284243',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2257571',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2258502',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2259944',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2284243',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-6129',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-6237',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-0727',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-1298',
-                'https://errata.almalinux.org/9/ALSA-2024-9088.html',
-                'https://errata.rockylinux.org/RLSA-2024:9088',
-                'https://github.com/openssl/openssl/commit/050d26383d4e264966fb83428e72d5d48f402d35',
-                'https://github.com/openssl/openssl/commit/5b139f95c9a47a55a0c54100f3837b1eee942b04',
-                'https://github.com/openssl/openssl/commit/f3fc5808fe9ff74042d639839610d03b8fdcc015',
-                'https://linux.oracle.com/cve/CVE-2023-6129.html',
-                'https://linux.oracle.com/errata/ELSA-2024-9088.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-6129',
-                'https://security.netapp.com/advisory/ntap-20240216-0009/',
-                'https://security.netapp.com/advisory/ntap-20240426-0008/',
-                'https://security.netapp.com/advisory/ntap-20240426-0013/',
-                'https://security.netapp.com/advisory/ntap-20240503-0011/',
-                'https://ubuntu.com/security/notices/USN-6622-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-6129',
-                'https://www.openssl.org/news/secadv/20240109.txt',
-                'https://www.openwall.com/lists/oss-security/2024/01/09/1'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: POLY1305 MAC implementation corrupts vector registers on PowerPC'
-            },
-            {
-              'cve':  'CVE-2023-6237',
-              'cvss': {
-                'redhat': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-606'
-              ],
-              'description':   "Issue summary: Checking excessively long invalid RSA public keys may take\na long time.\n\nImpact summary: Applications that use the function EVP_PKEY_public_check()\nto check RSA public keys may experience long delays. Where the key that\nis being checked has been obtained from an untrusted source this may lead\nto a Denial of Service.\n\nWhen function EVP_PKEY_public_check() is called on RSA public keys,\na computation is done to confirm that the RSA modulus, n, is composite.\nFor valid RSA keys, n is a product of two or more large primes and this\ncomputation completes quickly. However, if n is an overly large prime,\nthen this computation would take a long time.\n\nAn application that calls EVP_PKEY_public_check() and supplies an RSA key\nobtained from an untrusted source could be vulnerable to a Denial of Service\nattack.\n\nThe function EVP_PKEY_public_check() is not called from other OpenSSL\nfunctions however it is called from the OpenSSL pkey command line\napplication. For that reason that application is also vulnerable if used\nwith the '-pubin' and '-check' options on untrusted data.\n\nThe OpenSSL SSL/TLS implementation is not affected by this issue.\n\nThe OpenSSL 3.0 and 3.1 FIPS providers are affected by this issue.",
-              'diffID':        'sha256:253f1efcceb575705106468bdc1c875a7c9b2a734d4bcca3b1335946656d7acb',
-              'fixedVersions': [
-                '3.0.12-r3'
-              ],
-              'installedVersion': '3.0.7-r2',
-              'packageName':      'libcrypto3',
-              'purl':             'pkg:apk/alpine/libcrypto3@3.0.7-r2?arch=x86&distro=3.17.1',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2024/03/11/1',
-                'https://access.redhat.com/errata/RHSA-2024:9088',
-                'https://access.redhat.com/security/cve/CVE-2023-6237',
-                'https://bugzilla.redhat.com/2257571',
-                'https://bugzilla.redhat.com/2258502',
-                'https://bugzilla.redhat.com/2259944',
-                'https://bugzilla.redhat.com/2284243',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2257571',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2258502',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2259944',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2284243',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-6129',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-6237',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-0727',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-1298',
-                'https://errata.almalinux.org/9/ALSA-2024-9088.html',
-                'https://errata.rockylinux.org/RLSA-2024:9088',
-                'https://github.com/openssl/openssl/commit/0b0f7abfb37350794a4b8960fafc292cd5d1b84d',
-                'https://github.com/openssl/openssl/commit/18c02492138d1eb8b6548cb26e7b625fb2414a2a',
-                'https://github.com/openssl/openssl/commit/a830f551557d3d66a84bbb18a5b889c640c36294',
-                'https://linux.oracle.com/cve/CVE-2023-6237.html',
-                'https://linux.oracle.com/errata/ELSA-2024-9088.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-6237',
-                'https://security.netapp.com/advisory/ntap-20240531-0007/',
-                'https://ubuntu.com/security/notices/USN-6622-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-6237',
-                'https://www.openssl.org/news/secadv/20240115.txt',
-                'https://www.openwall.com/lists/oss-security/2024/01/15/2'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: Excessive time spent checking invalid RSA public keys'
-            },
-            {
-              'cve':  'CVE-2024-0727',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '5.5',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H'
-                },
-                'nvd': {
-                  'v3score':  '5.5',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '5.5',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-476'
-              ],
-              'description':   'Issue summary: Processing a maliciously formatted PKCS12 file may lead OpenSSL\nto crash leading to a potential Denial of Service attack\n\nImpact summary: Applications loading files in the PKCS12 format from untrusted\nsources might terminate abruptly.\n\nA file in PKCS12 format can contain certificates and keys and may come from an\nuntrusted source. The PKCS12 specification allows certain fields to be NULL, but\nOpenSSL does not correctly check for this case. This can lead to a NULL pointer\ndereference that results in OpenSSL crashing. If an application processes PKCS12\nfiles from an untrusted source using the OpenSSL APIs then that application will\nbe vulnerable to this issue.\n\nOpenSSL APIs that are vulnerable to this are: PKCS12_parse(),\nPKCS12_unpack_p7data(), PKCS12_unpack_p7encdata(), PKCS12_unpack_authsafes()\nand PKCS12_newpass().\n\nWe have also fixed a similar issue in SMIME_write_PKCS7(). However since this\nfunction is related to writing data we do not consider it security significant.\n\nThe FIPS modules in 3.2, 3.1 and 3.0 are not affected by this issue.',
-              'diffID':        'sha256:253f1efcceb575705106468bdc1c875a7c9b2a734d4bcca3b1335946656d7acb',
-              'fixedVersions': [
-                '3.0.12-r4'
-              ],
-              'installedVersion': '3.0.7-r2',
-              'packageName':      'libcrypto3',
-              'purl':             'pkg:apk/alpine/libcrypto3@3.0.7-r2?arch=x86&distro=3.17.1',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2024/03/11/1',
-                'https://access.redhat.com/errata/RHSA-2024:9088',
-                'https://access.redhat.com/security/cve/CVE-2024-0727',
-                'https://bugzilla.redhat.com/2257571',
-                'https://bugzilla.redhat.com/2258502',
-                'https://bugzilla.redhat.com/2259944',
-                'https://bugzilla.redhat.com/2284243',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2257571',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2258502',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2259944',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2284243',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-6129',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-6237',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-0727',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-1298',
-                'https://errata.almalinux.org/9/ALSA-2024-9088.html',
-                'https://errata.rockylinux.org/RLSA-2024:9088',
-                'https://github.com/alexcrichton/openssl-src-rs/commit/add20f73b6b42be7451af2e1044d4e0e778992b2',
-                'https://github.com/github/advisory-database/pull/3472',
-                'https://github.com/openssl/openssl/commit/09df4395b5071217b76dc7d3d2e630eb8c5a79c2',
-                'https://github.com/openssl/openssl/commit/775acfdbd0c6af9ac855f34969cdab0c0c90844a',
-                'https://github.com/openssl/openssl/commit/d135eeab8a5dbf72b3da5240bab9ddb7678dbd2c',
-                'https://github.com/openssl/openssl/pull/23362',
-                'https://github.com/pyca/cryptography/commit/3519591d255d4506fbcd0d04037d45271903c64d',
-                'https://github.openssl.org/openssl/extended-releases/commit/03b3941d60c4bce58fab69a0c22377ab439bc0e8',
-                'https://github.openssl.org/openssl/extended-releases/commit/aebaa5883e31122b404e450732dc833dc9dee539',
-                'https://linux.oracle.com/cve/CVE-2024-0727.html',
-                'https://linux.oracle.com/errata/ELSA-2024-9088.html',
-                'https://lists.debian.org/debian-lts-announce/2024/10/msg00033.html',
-                'https://lists.debian.org/debian-lts-announce/2024/11/msg00000.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2024-0727',
-                'https://security.netapp.com/advisory/ntap-20240208-0006',
-                'https://security.netapp.com/advisory/ntap-20240208-0006/',
-                'https://ubuntu.com/security/notices/USN-6622-1',
-                'https://ubuntu.com/security/notices/USN-6632-1',
-                'https://ubuntu.com/security/notices/USN-6709-1',
-                'https://ubuntu.com/security/notices/USN-7018-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2024-0727',
-                'https://www.openssl.org/news/secadv/20240125.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: denial of service via null dereference'
-            },
-            {
-              'cve':  'CVE-2024-4603',
-              'cvss': {
-                'redhat': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L'
-                }
-              },
-              'cwes': [
-                'CWE-606',
-                'CWE-834'
-              ],
-              'description':   'Issue summary: Checking excessively long DSA keys or parameters may be very\nslow.\n\nImpact summary: Applications that use the functions EVP_PKEY_param_check()\nor EVP_PKEY_public_check() to check a DSA public key or DSA parameters may\nexperience long delays. Where the key or parameters that are being checked\nhave been obtained from an untrusted source this may lead to a Denial of\nService.\n\nThe functions EVP_PKEY_param_check() or EVP_PKEY_public_check() perform\nvarious checks on DSA parameters. Some of those computations take a long time\nif the modulus (`p` parameter) is too large.\n\nTrying to use a very large modulus is slow and OpenSSL will not allow using\npublic keys with a modulus which is over 10,000 bits in length for signature\nverification. However the key and parameter check functions do not limit\nthe modulus size when performing the checks.\n\nAn application that calls EVP_PKEY_param_check() or EVP_PKEY_public_check()\nand supplies a key or parameters obtained from an untrusted source could be\nvulnerable to a Denial of Service attack.\n\nThese functions are not called by OpenSSL itself on untrusted DSA keys so\nonly applications that directly call these functions may be vulnerable.\n\nAlso vulnerable are the OpenSSL pkey and pkeyparam command line applications\nwhen using the `-check` option.\n\nThe OpenSSL SSL/TLS implementation is not affected by this issue.\n\nThe OpenSSL 3.0 and 3.1 FIPS providers are affected by this issue.',
-              'diffID':        'sha256:253f1efcceb575705106468bdc1c875a7c9b2a734d4bcca3b1335946656d7acb',
-              'fixedVersions': [
-                '3.0.13-r0'
-              ],
-              'installedVersion': '3.0.7-r2',
-              'packageName':      'libcrypto3',
-              'purl':             'pkg:apk/alpine/libcrypto3@3.0.7-r2?arch=x86&distro=3.17.1',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2024/05/16/2',
-                'https://access.redhat.com/errata/RHSA-2024:9333',
-                'https://access.redhat.com/security/cve/CVE-2024-4603',
-                'https://bugzilla.redhat.com/2274020',
-                'https://bugzilla.redhat.com/2281029',
-                'https://bugzilla.redhat.com/2283757',
-                'https://bugzilla.redhat.com/2294581',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2274020',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2281029',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2283757',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2294581',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-2511',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-4603',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-4741',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-5535',
-                'https://errata.almalinux.org/9/ALSA-2024-9333.html',
-                'https://errata.rockylinux.org/RLSA-2024:9333',
-                'https://github.com/openssl/openssl/commit/3559e868e58005d15c6013a0c1fd832e51c73397',
-                'https://github.com/openssl/openssl/commit/53ea06486d296b890d565fb971b2764fcd826e7e',
-                'https://github.com/openssl/openssl/commit/9c39b3858091c152f52513c066ff2c5a47969f0d',
-                'https://github.com/openssl/openssl/commit/da343d0605c826ef197aceedc67e8e04f065f740',
-                'https://linux.oracle.com/cve/CVE-2024-4603.html',
-                'https://linux.oracle.com/errata/ELSA-2024-9333.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2024-4603',
-                'https://security.netapp.com/advisory/ntap-20240621-0001/',
-                'https://ubuntu.com/security/notices/USN-6937-1',
-                'https://www.cve.org/CVERecord?id=CVE-2024-4603',
-                'https://www.openssl.org/news/secadv/20240516.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: Excessive time spent checking DSA keys and parameters'
-            },
-            {
-              'cve':  'CVE-2024-4741',
-              'cvss': {
-                'redhat': {
-                  'v3score':  '5.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   'Issue summary: Calling the OpenSSL API function SSL_free_buffers may cause\nmemory to be accessed that was previously freed in some situations\n\nImpact summary: A use after free can have a range of potential consequences such\nas the corruption of valid data, crashes or execution of arbitrary code.\nHowever, only applications that directly call the SSL_free_buffers function are\naffected by this issue. Applications that do not call this function are not\nvulnerable. Our investigations indicate that this function is rarely used by\napplications.\n\nThe SSL_free_buffers function is used to free the internal OpenSSL buffer used\nwhen processing an incoming record from the network. The call is only expected\nto succeed if the buffer is not currently in use. However, two scenarios have\nbeen identified where the buffer is freed even when still in use.\n\nThe first scenario occurs where a record header has been received from the\nnetwork and processed by OpenSSL, but the full record body has not yet arrived.\nIn this case calling SSL_free_buffers will succeed even though a record has only\nbeen partially processed and the buffer is still in use.\n\nThe second scenario occurs where a full record containing application data has\nbeen received and processed by OpenSSL but the application has only read part of\nthis data. Again a call to SSL_free_buffers will succeed even though the buffer\nis still in use.\n\nWhile these scenarios could occur accidentally during normal operation a\nmalicious attacker could attempt to engineer a stituation where this occurs.\nWe are not aware of this issue being actively exploited.\n\nThe FIPS modules in 3.3, 3.2, 3.1 and 3.0 are not affected by this issue.',
-              'diffID':        'sha256:253f1efcceb575705106468bdc1c875a7c9b2a734d4bcca3b1335946656d7acb',
-              'fixedVersions': [
-                '3.0.14-r0'
-              ],
-              'installedVersion': '3.0.7-r2',
-              'packageName':      'libcrypto3',
-              'purl':             'pkg:apk/alpine/libcrypto3@3.0.7-r2?arch=x86&distro=3.17.1',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2024:9333',
-                'https://access.redhat.com/security/cve/CVE-2024-4741',
-                'https://bugzilla.redhat.com/2274020',
-                'https://bugzilla.redhat.com/2281029',
-                'https://bugzilla.redhat.com/2283757',
-                'https://bugzilla.redhat.com/2294581',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2274020',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2281029',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2283757',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2294581',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-2511',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-4603',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-4741',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-5535',
-                'https://errata.almalinux.org/9/ALSA-2024-9333.html',
-                'https://errata.rockylinux.org/RLSA-2024:9333',
-                'https://github.com/openssl/openssl/commit/704f725b96aa373ee45ecfb23f6abfe8be8d9177',
-                'https://github.com/openssl/openssl/commit/b3f0eb0a295f58f16ba43ba99dad70d4ee5c437d',
-                'https://github.com/openssl/openssl/commit/c88c3de51020c37e8706bf7a682a162593053aac',
-                'https://github.com/openssl/openssl/commit/e5093133c35ca82874ad83697af76f4b0f7e3bd8',
-                'https://github.openssl.org/openssl/extended-releases/commit/f7a045f3143fc6da2ee66bf52d8df04829590dd4',
-                'https://linux.oracle.com/cve/CVE-2024-4741.html',
-                'https://linux.oracle.com/errata/ELSA-2024-9333.html',
-                'https://lists.debian.org/debian-lts-announce/2024/10/msg00033.html',
-                'https://lists.debian.org/debian-lts-announce/2024/11/msg00000.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2024-4741',
-                'https://security.netapp.com/advisory/ntap-20240621-0004/',
-                'https://ubuntu.com/security/notices/USN-6937-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2024-4741',
-                'https://www.openssl.org/news/secadv/20240528.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: Use After Free with SSL_free_buffers'
-            },
-            {
-              'cve':  'CVE-2024-5535',
-              'cvss': {
-                'redhat': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-125'
-              ],
-              'description':   'Issue summary: Calling the OpenSSL API function SSL_select_next_proto with an\nempty supported client protocols buffer may cause a crash or memory contents to\nbe sent to the peer.\n\nImpact summary: A buffer overread can have a range of potential consequences\nsuch as unexpected application beahviour or a crash. In particular this issue\ncould result in up to 255 bytes of arbitrary private data from memory being sent\nto the peer leading to a loss of confidentiality. However, only applications\nthat directly call the SSL_select_next_proto function with a 0 length list of\nsupported client protocols are affected by this issue. This would normally never\nbe a valid scenario and is typically not under attacker control but may occur by\naccident in the case of a configuration or programming error in the calling\napplication.\n\nThe OpenSSL API function SSL_select_next_proto is typically used by TLS\napplications that support ALPN (Application Layer Protocol Negotiation) or NPN\n(Next Protocol Negotiation). NPN is older, was never standardised and\nis deprecated in favour of ALPN. We believe that ALPN is significantly more\nwidely deployed than NPN. The SSL_select_next_proto function accepts a list of\nprotocols from the server and a list of protocols from the client and returns\nthe first protocol that appears in the server list that also appears in the\nclient list. In the case of no overlap between the two lists it returns the\nfirst item in the client list. In either case it will signal whether an overlap\nbetween the two lists was found. In the case where SSL_select_next_proto is\ncalled with a zero length client list it fails to notice this condition and\nreturns the memory immediately following the client list pointer (and reports\nthat there was no overlap in the lists).\n\nThis function is typically called from a server side application callback for\nALPN or a client side application callback for NPN. In the case of ALPN the list\nof protocols supplied by the client is guaranteed by libssl to never be zero in\nlength. The list of server protocols comes from the application and should never\nnormally be expected to be of zero length. In this case if the\nSSL_select_next_proto function has been called as expected (with the list\nsupplied by the client passed in the client/client_len parameters), then the\napplication will not be vulnerable to this issue. If the application has\naccidentally been configured with a zero length server list, and has\naccidentally passed that zero length server list in the client/client_len\nparameters, and has additionally failed to correctly handle a "no overlap"\nresponse (which would normally result in a handshake failure in ALPN) then it\nwill be vulnerable to this problem.\n\nIn the case of NPN, the protocol permits the client to opportunistically select\na protocol when there is no overlap. OpenSSL returns the first client protocol\nin the no overlap case in support of this. The list of client protocols comes\nfrom the application and should never normally be expected to be of zero length.\nHowever if the SSL_select_next_proto function is accidentally called with a\nclient_len of 0 then an invalid memory pointer will be returned instead. If the\napplication uses this output as the opportunistic protocol then the loss of\nconfidentiality will occur.\n\nThis issue has been assessed as Low severity because applications are most\nlikely to be vulnerable if they are using NPN instead of ALPN - but NPN is not\nwidely used. It also requires an application configuration or programming error.\nFinally, this issue would not typically be under attacker control making active\nexploitation unlikely.\n\nThe FIPS modules in 3.3, 3.2, 3.1 and 3.0 are not affected by this issue.\n\nDue to the low severity of this issue we are not issuing new releases of\nOpenSSL at this time. The fix will be included in the next releases when they\nbecome available.',
-              'diffID':        'sha256:253f1efcceb575705106468bdc1c875a7c9b2a734d4bcca3b1335946656d7acb',
-              'fixedVersions': [
-                '3.0.14-r0'
-              ],
-              'installedVersion': '3.0.7-r2',
-              'packageName':      'libcrypto3',
-              'purl':             'pkg:apk/alpine/libcrypto3@3.0.7-r2?arch=x86&distro=3.17.1',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2024/06/27/1',
-                'http://www.openwall.com/lists/oss-security/2024/06/28/4',
-                'http://www.openwall.com/lists/oss-security/2024/08/15/1',
-                'https://access.redhat.com/errata/RHSA-2025:1671',
-                'https://access.redhat.com/security/cve/CVE-2024-5535',
-                'https://bugzilla.redhat.com/2294581',
-                'https://bugzilla.redhat.com/2294676',
-                'https://bugzilla.redhat.com/2301888',
-                'https://bugzilla.redhat.com/2318857',
-                'https://bugzilla.redhat.com/2318858',
-                'https://bugzilla.redhat.com/2318870',
-                'https://bugzilla.redhat.com/2318873',
-                'https://bugzilla.redhat.com/2318874',
-                'https://bugzilla.redhat.com/2318876',
-                'https://bugzilla.redhat.com/2318882',
-                'https://bugzilla.redhat.com/2318883',
-                'https://bugzilla.redhat.com/2318884',
-                'https://bugzilla.redhat.com/2318885',
-                'https://bugzilla.redhat.com/2318886',
-                'https://bugzilla.redhat.com/2318897',
-                'https://bugzilla.redhat.com/2318900',
-                'https://bugzilla.redhat.com/2318905',
-                'https://bugzilla.redhat.com/2318914',
-                'https://bugzilla.redhat.com/2318922',
-                'https://bugzilla.redhat.com/2318923',
-                'https://bugzilla.redhat.com/2318925',
-                'https://bugzilla.redhat.com/2318926',
-                'https://bugzilla.redhat.com/2318927',
-                'https://bugzilla.redhat.com/2331191',
-                'https://bugzilla.redhat.com/2339218',
-                'https://bugzilla.redhat.com/2339220',
-                'https://bugzilla.redhat.com/2339221',
-                'https://bugzilla.redhat.com/2339226',
-                'https://bugzilla.redhat.com/2339231',
-                'https://bugzilla.redhat.com/2339236',
-                'https://bugzilla.redhat.com/2339238',
-                'https://bugzilla.redhat.com/2339243',
-                'https://bugzilla.redhat.com/2339247',
-                'https://bugzilla.redhat.com/2339252',
-                'https://bugzilla.redhat.com/2339259',
-                'https://bugzilla.redhat.com/2339266',
-                'https://bugzilla.redhat.com/2339270',
-                'https://bugzilla.redhat.com/2339271',
-                'https://bugzilla.redhat.com/2339275',
-                'https://bugzilla.redhat.com/2339277',
-                'https://bugzilla.redhat.com/2339281',
-                'https://bugzilla.redhat.com/2339284',
-                'https://bugzilla.redhat.com/2339291',
-                'https://bugzilla.redhat.com/2339293',
-                'https://bugzilla.redhat.com/2339295',
-                'https://bugzilla.redhat.com/2339299',
-                'https://bugzilla.redhat.com/2339300',
-                'https://bugzilla.redhat.com/2339304',
-                'https://bugzilla.redhat.com/2339305',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2274020',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2281029',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2283757',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2294581',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-2511',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-4603',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-4741',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-5535',
-                'https://errata.almalinux.org/9/ALSA-2025-1671.html',
-                'https://errata.rockylinux.org/RLSA-2024:9333',
-                'https://github.com/openssl/openssl/commit/4ada436a1946cbb24db5ab4ca082b69c1bc10f37',
-                'https://github.com/openssl/openssl/commit/99fb785a5f85315b95288921a321a935ea29a51e',
-                'https://github.com/openssl/openssl/commit/cf6f91f6121f4db167405db2f0de410a456f260c',
-                'https://github.com/openssl/openssl/commit/e86ac436f0bd54d4517745483e2315650fae7b2c',
-                'https://github.openssl.org/openssl/extended-releases/commit/9947251413065a05189a63c9b7a6c1d4e224c21c',
-                'https://github.openssl.org/openssl/extended-releases/commit/b78ec0824da857223486660177d3b1f255c65d87',
-                'https://linux.oracle.com/cve/CVE-2024-5535.html',
-                'https://linux.oracle.com/errata/ELSA-2025-1673.html',
-                'https://lists.debian.org/debian-lts-announce/2024/10/msg00033.html',
-                'https://lists.debian.org/debian-lts-announce/2024/11/msg00000.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2024-5535',
-                'https://openssl.org/news/secadv/20240627.txt',
-                'https://security.netapp.com/advisory/ntap-20240712-0005/',
-                'https://security.netapp.com/advisory/ntap-20241025-0006/',
-                'https://security.netapp.com/advisory/ntap-20241025-0010/',
-                'https://ubuntu.com/security/notices/USN-6937-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2024-5535',
-                'https://www.openssl.org/news/secadv/20240627.txt',
-                'https://www.oracle.com/security-alerts/cpuoct2024.html#AppendixMSQL'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: SSL_select_next_proto buffer overread'
-            },
-            {
-              'cve':  'CVE-2024-2511',
-              'cvss': {
-                'redhat': {
-                  'v3score':  '3.7',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L'
-                }
-              },
-              'cwes': [
-                'CWE-1325'
-              ],
-              'description':   'Issue summary: Some non-default TLS server configurations can cause unbounded\nmemory growth when processing TLSv1.3 sessions\n\nImpact summary: An attacker may exploit certain server configurations to trigger\nunbounded memory growth that would lead to a Denial of Service\n\nThis problem can occur in TLSv1.3 if the non-default SSL_OP_NO_TICKET option is\nbeing used (but not if early_data support is also configured and the default\nanti-replay protection is in use). In this case, under certain conditions, the\nsession cache can get into an incorrect state and it will fail to flush properly\nas it fills. The session cache will continue to grow in an unbounded manner. A\nmalicious client could deliberately create the scenario for this failure to\nforce a Denial of Service. It may also happen by accident in normal operation.\n\nThis issue only affects TLS servers supporting TLSv1.3. It does not affect TLS\nclients.\n\nThe FIPS modules in 3.2, 3.1 and 3.0 are not affected by this issue. OpenSSL\n1.0.2 is also not affected by this issue.',
-              'diffID':        'sha256:253f1efcceb575705106468bdc1c875a7c9b2a734d4bcca3b1335946656d7acb',
-              'fixedVersions': [
-                '3.0.12-r5'
-              ],
-              'installedVersion': '3.0.7-r2',
-              'packageName':      'libcrypto3',
-              'purl':             'pkg:apk/alpine/libcrypto3@3.0.7-r2?arch=x86&distro=3.17.1',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2024/04/08/5',
-                'https://access.redhat.com/errata/RHSA-2024:9333',
-                'https://access.redhat.com/security/cve/CVE-2024-2511',
-                'https://bugzilla.redhat.com/2274020',
-                'https://bugzilla.redhat.com/2281029',
-                'https://bugzilla.redhat.com/2283757',
-                'https://bugzilla.redhat.com/2294581',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2274020',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2281029',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2283757',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2294581',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-2511',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-4603',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-4741',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-5535',
-                'https://errata.almalinux.org/9/ALSA-2024-9333.html',
-                'https://errata.rockylinux.org/RLSA-2024:9333',
-                'https://github.com/openssl/openssl/commit/7e4d731b1c07201ad9374c1cd9ac5263bdf35bce',
-                'https://github.com/openssl/openssl/commit/b52867a9f618bb955bed2a3ce3db4d4f97ed8e5d',
-                'https://github.com/openssl/openssl/commit/e9d7083e241670332e0443da0f0d4ffb52829f08',
-                'https://github.openssl.org/openssl/extended-releases/commit/5f8d25770ae6437db119dfc951e207271a326640',
-                'https://linux.oracle.com/cve/CVE-2024-2511.html',
-                'https://linux.oracle.com/errata/ELSA-2024-9333.html',
-                'https://lists.debian.org/debian-lts-announce/2024/10/msg00033.html',
-                'https://lists.debian.org/debian-lts-announce/2024/11/msg00000.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2024-2511',
-                'https://security.netapp.com/advisory/ntap-20240503-0013/',
-                'https://ubuntu.com/security/notices/USN-6937-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2024-2511',
-                'https://www.openssl.org/news/secadv/20240408.txt',
-                'https://www.openssl.org/news/vulnerabilities.html'
-              ],
-              'severity':   'LOW',
-              'suppressed': false,
-              'title':      'openssl: Unbounded memory growth with session handling in TLSv1.3'
-            },
-            {
-              'cve':  'CVE-2024-9143',
-              'cvss': {
-                'redhat': {
-                  'v3score':  '3.7',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L'
-                }
-              },
-              'cwes': [
-                'CWE-125',
-                'CWE-787'
-              ],
-              'description':   "Issue summary: Use of the low-level GF(2^m) elliptic curve APIs with untrusted\nexplicit values for the field polynomial can lead to out-of-bounds memory reads\nor writes.\n\nImpact summary: Out of bound memory writes can lead to an application crash or\neven a possibility of a remote code execution, however, in all the protocols\ninvolving Elliptic Curve Cryptography that we're aware of, either only \"named\ncurves\" are supported, or, if explicit curve parameters are supported, they\nspecify an X9.62 encoding of binary (GF(2^m)) curves that can't represent\nproblematic input values. Thus the likelihood of existence of a vulnerable\napplication is low.\n\nIn particular, the X9.62 encoding is used for ECC keys in X.509 certificates,\nso problematic inputs cannot occur in the context of processing X.509\ncertificates.  Any problematic use-cases would have to be using an \"exotic\"\ncurve encoding.\n\nThe affected APIs include: EC_GROUP_new_curve_GF2m(), EC_GROUP_new_from_params(),\nand various supporting BN_GF2m_*() functions.\n\nApplications working with \"exotic\" explicit binary (GF(2^m)) curve parameters,\nthat make it possible to represent invalid field polynomials with a zero\nconstant term, via the above or similar APIs, may terminate abruptly as a\nresult of reading or writing outside of array bounds.  Remote code execution\ncannot easily be ruled out.\n\nThe FIPS modules in 3.3, 3.2, 3.1 and 3.0 are not affected by this issue.",
-              'diffID':        'sha256:253f1efcceb575705106468bdc1c875a7c9b2a734d4bcca3b1335946656d7acb',
-              'fixedVersions': [
-                '3.0.15-r1'
-              ],
-              'installedVersion': '3.0.7-r2',
-              'packageName':      'libcrypto3',
-              'purl':             'pkg:apk/alpine/libcrypto3@3.0.7-r2?arch=x86&distro=3.17.1',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2024/10/16/1',
-                'http://www.openwall.com/lists/oss-security/2024/10/23/1',
-                'http://www.openwall.com/lists/oss-security/2024/10/24/1',
-                'https://access.redhat.com/security/cve/CVE-2024-9143',
-                'https://github.com/openssl/openssl/commit/72ae83ad214d2eef262461365a1975707f862712',
-                'https://github.com/openssl/openssl/commit/bc7e04d7c8d509fb78fc0e285aa948fb0da04700',
-                'https://github.com/openssl/openssl/commit/c0d3e4d32d2805f49bec30547f225bc4d092e1f4',
-                'https://github.com/openssl/openssl/commit/fdf6723362ca51bd883295efe206cb5b1cfa5154',
-                'https://github.openssl.org/openssl/extended-releases/commit/8efc0cbaa8ebba8e116f7b81a876a4123594d86a',
-                'https://github.openssl.org/openssl/extended-releases/commit/9d576994cec2b7aa37a91740ea7e680810957e41',
-                'https://lists.debian.org/debian-lts-announce/2024/10/msg00033.html',
-                'https://lists.debian.org/debian-lts-announce/2024/11/msg00000.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2024-9143',
-                'https://openssl-library.org/news/secadv/20241016.txt',
-                'https://security.netapp.com/advisory/ntap-20241101-0001/',
-                'https://ubuntu.com/security/notices/USN-7264-1',
-                'https://ubuntu.com/security/notices/USN-7278-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2024-9143'
-              ],
-              'severity':   'LOW',
-              'suppressed': false,
-              'title':      'openssl: Low-level invalid GF(2^m) parameters lead to OOB memory access'
-            },
-            {
-              'cve':  'CVE-2022-4450',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'nvd': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-415'
-              ],
-              'description':   'The function PEM_read_bio_ex() reads a PEM file from a BIO and parses and\ndecodes the "name" (e.g. "CERTIFICATE"), any header data and the payload data.\nIf the function succeeds then the "name_out", "header" and "data" arguments are\npopulated with pointers to buffers containing the relevant decoded data. The\ncaller is responsible for freeing those buffers. It is possible to construct a\nPEM file that results in 0 bytes of payload data. In this case PEM_read_bio_ex()\nwill return a failure code but will populate the header argument with a pointer\nto a buffer that has already been freed. If the caller also frees this buffer\nthen a double free will occur. This will most likely lead to a crash. This\ncould be exploited by an attacker who has the ability to supply malicious PEM\nfiles for parsing to achieve a denial of service attack.\n\nThe functions PEM_read_bio() and PEM_read() are simple wrappers around\nPEM_read_bio_ex() and therefore these functions are also directly affected.\n\nThese functions are also called indirectly by a number of other OpenSSL\nfunctions including PEM_X509_INFO_read_bio_ex() and\nSSL_CTX_use_serverinfo_file() which are also vulnerable. Some OpenSSL internal\nuses of these functions are not vulnerable because the caller does not free the\nheader argument if PEM_read_bio_ex() returns a failure code. These locations\ninclude the PEM_read_bio_TYPE() functions as well as the decoders introduced in\nOpenSSL 3.0.\n\nThe OpenSSL asn1parse command line application is also impacted by this issue.',
-              'diffID':        'sha256:253f1efcceb575705106468bdc1c875a7c9b2a734d4bcca3b1335946656d7acb',
-              'fixedVersions': [
-                '3.0.8-r0'
-              ],
-              'installedVersion': '3.0.7-r2',
-              'packageName':      'libssl3',
-              'purl':             'pkg:apk/alpine/libssl3@3.0.7-r2?arch=x86&distro=3.17.1',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2023:2165',
-                'https://access.redhat.com/security/cve/CVE-2022-4450',
-                'https://bugzilla.redhat.com/1960321',
-                'https://bugzilla.redhat.com/2164440',
-                'https://bugzilla.redhat.com/2164487',
-                'https://bugzilla.redhat.com/2164492',
-                'https://bugzilla.redhat.com/2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144000',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144003',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144006',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144008',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144010',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144012',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144015',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144017',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144019',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2145170',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2158412',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164440',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164487',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164488',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164492',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164497',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164499',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164500',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4203',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4304',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4450',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0215',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0216',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0217',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0286',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0401',
-                'https://errata.almalinux.org/9/ALSA-2023-2165.html',
-                'https://errata.rockylinux.org/RLSA-2023:0946',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=63bcf189be73a9cc1264059bed6f57974be74a83',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=bbcf509bd046b34cca19c766bbddc31683d0858b',
-                'https://linux.oracle.com/cve/CVE-2022-4450.html',
-                'https://linux.oracle.com/errata/ELSA-2023-32791.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2022-4450',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0003',
-                'https://rustsec.org/advisories/RUSTSEC-2023-0010.html',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://ubuntu.com/security/notices/USN-5844-1',
-                'https://ubuntu.com/security/notices/USN-6564-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2022-4450',
-                'https://www.openssl.org/news/secadv/20230207.txt'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: double free after calling PEM_read_bio_ex'
-            },
-            {
-              'cve':  'CVE-2023-0215',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'nvd': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   'The public API function BIO_new_NDEF is a helper function used for streaming\nASN.1 data via a BIO. It is primarily used internally to OpenSSL to support the\nSMIME, CMS and PKCS7 streaming capabilities, but may also be called directly by\nend user applications.\n\nThe function receives a BIO from the caller, prepends a new BIO_f_asn1 filter\nBIO onto the front of it to form a BIO chain, and then returns the new head of\nthe BIO chain to the caller. Under certain conditions, for example if a CMS\nrecipient public key is invalid, the new filter BIO is freed and the function\nreturns a NULL result indicating a failure. However, in this case, the BIO chain\nis not properly cleaned up and the BIO passed by the caller still retains\ninternal pointers to the previously freed filter BIO. If the caller then goes on\nto call BIO_pop() on the BIO then a use-after-free will occur. This will most\nlikely result in a crash.\n\n\n\nThis scenario occurs directly in the internal function B64_write_ASN1() which\nmay cause BIO_new_NDEF() to be called and will subsequently call BIO_pop() on\nthe BIO. This internal function is in turn called by the public API functions\nPEM_write_bio_ASN1_stream, PEM_write_bio_CMS_stream, PEM_write_bio_PKCS7_stream,\nSMIME_write_ASN1, SMIME_write_CMS and SMIME_write_PKCS7.\n\nOther public API functions that may be impacted by this include\ni2d_ASN1_bio_stream, BIO_new_CMS, BIO_new_PKCS7, i2d_CMS_bio_stream and\ni2d_PKCS7_bio_stream.\n\nThe OpenSSL cms and smime command line applications are similarly affected.',
-              'diffID':        'sha256:253f1efcceb575705106468bdc1c875a7c9b2a734d4bcca3b1335946656d7acb',
-              'fixedVersions': [
-                '3.0.8-r0'
-              ],
-              'installedVersion': '3.0.7-r2',
-              'packageName':      'libssl3',
-              'purl':             'pkg:apk/alpine/libssl3@3.0.7-r2?arch=x86&distro=3.17.1',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2023:2165',
-                'https://access.redhat.com/security/cve/CVE-2023-0215',
-                'https://bugzilla.redhat.com/1960321',
-                'https://bugzilla.redhat.com/2164440',
-                'https://bugzilla.redhat.com/2164487',
-                'https://bugzilla.redhat.com/2164492',
-                'https://bugzilla.redhat.com/2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144000',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144003',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144006',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144008',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144010',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144012',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144015',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144017',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144019',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2145170',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2158412',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164440',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164487',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164488',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164492',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164497',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164499',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164500',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4203',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4304',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4450',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0215',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0216',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0217',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0286',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0401',
-                'https://errata.almalinux.org/9/ALSA-2023-2165.html',
-                'https://errata.rockylinux.org/RLSA-2023:0946',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=8818064ce3c3c0f1b740a5aaba2a987e75bfbafd',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=9816136fe31d92ace4037d5da5257f763aeeb4eb',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=c3829dd8825c654652201e16f8a0a0c46ee3f344',
-                'https://linux.oracle.com/cve/CVE-2023-0215.html',
-                'https://linux.oracle.com/errata/ELSA-2023-32791.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-0215',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0003',
-                'https://rustsec.org/advisories/RUSTSEC-2023-0009.html',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://security.netapp.com/advisory/ntap-20230427-0007',
-                'https://security.netapp.com/advisory/ntap-20230427-0007/',
-                'https://security.netapp.com/advisory/ntap-20230427-0009',
-                'https://security.netapp.com/advisory/ntap-20230427-0009/',
-                'https://security.netapp.com/advisory/ntap-20240621-0006',
-                'https://security.netapp.com/advisory/ntap-20240621-0006/',
-                'https://ubuntu.com/security/notices/USN-5844-1',
-                'https://ubuntu.com/security/notices/USN-5845-1',
-                'https://ubuntu.com/security/notices/USN-5845-2',
-                'https://ubuntu.com/security/notices/USN-6564-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-0215',
-                'https://www.openssl.org/news/secadv/20230207.txt'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: use-after-free following BIO_new_NDEF'
-            },
-            {
-              'cve':  'CVE-2023-0216',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'nvd': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-476'
-              ],
-              'description':   'An invalid pointer dereference on read can be triggered when an\napplication tries to load malformed PKCS7 data with the\nd2i_PKCS7(), d2i_PKCS7_bio() or d2i_PKCS7_fp() functions.\n\nThe result of the dereference is an application crash which could\nlead to a denial of service attack. The TLS implementation in OpenSSL\ndoes not call this function however third party applications might\ncall these functions on untrusted data.',
-              'diffID':        'sha256:253f1efcceb575705106468bdc1c875a7c9b2a734d4bcca3b1335946656d7acb',
-              'fixedVersions': [
-                '3.0.8-r0'
-              ],
-              'installedVersion': '3.0.7-r2',
-              'packageName':      'libssl3',
-              'purl':             'pkg:apk/alpine/libssl3@3.0.7-r2?arch=x86&distro=3.17.1',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2023:0946',
-                'https://access.redhat.com/security/cve/CVE-2023-0216',
-                'https://bugzilla.redhat.com/2164440',
-                'https://bugzilla.redhat.com/2164487',
-                'https://bugzilla.redhat.com/2164488',
-                'https://bugzilla.redhat.com/2164492',
-                'https://bugzilla.redhat.com/2164494',
-                'https://bugzilla.redhat.com/2164497',
-                'https://bugzilla.redhat.com/2164499',
-                'https://bugzilla.redhat.com/2164500',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144000',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144003',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144006',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144008',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144010',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144012',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144015',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144017',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144019',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2145170',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2158412',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164440',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164487',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164488',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164492',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164497',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164499',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164500',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4203',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4304',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4450',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0215',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0216',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0217',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0286',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0401',
-                'https://errata.almalinux.org/9/ALSA-2023-0946.html',
-                'https://errata.rockylinux.org/RLSA-2023:0946',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=934a04f0e775309cadbef0aa6b9692e1b12a76c6',
-                'https://linux.oracle.com/cve/CVE-2023-0216.html',
-                'https://linux.oracle.com/errata/ELSA-2023-12152.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-0216',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0003',
-                'https://rustsec.org/advisories/RUSTSEC-2023-0011.html',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://ubuntu.com/security/notices/USN-5844-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-0216',
-                'https://www.openssl.org/news/secadv/20230207.txt'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: invalid pointer dereference in d2i_PKCS7 functions'
-            },
-            {
-              'cve':  'CVE-2023-0217',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'nvd': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-476'
-              ],
-              'description':   'An invalid pointer dereference on read can be triggered when an\napplication tries to check a malformed DSA public key by the\nEVP_PKEY_public_check() function. This will most likely lead\nto an application crash. This function can be called on public\nkeys supplied from untrusted sources which could allow an attacker\nto cause a denial of service attack.\n\nThe TLS implementation in OpenSSL does not call this function\nbut applications might call the function if there are additional\nsecurity requirements imposed by standards such as FIPS 140-3.',
-              'diffID':        'sha256:253f1efcceb575705106468bdc1c875a7c9b2a734d4bcca3b1335946656d7acb',
-              'fixedVersions': [
-                '3.0.8-r0'
-              ],
-              'installedVersion': '3.0.7-r2',
-              'packageName':      'libssl3',
-              'purl':             'pkg:apk/alpine/libssl3@3.0.7-r2?arch=x86&distro=3.17.1',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2023:0946',
-                'https://access.redhat.com/security/cve/CVE-2023-0217',
-                'https://bugzilla.redhat.com/2164440',
-                'https://bugzilla.redhat.com/2164487',
-                'https://bugzilla.redhat.com/2164488',
-                'https://bugzilla.redhat.com/2164492',
-                'https://bugzilla.redhat.com/2164494',
-                'https://bugzilla.redhat.com/2164497',
-                'https://bugzilla.redhat.com/2164499',
-                'https://bugzilla.redhat.com/2164500',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144000',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144003',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144006',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144008',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144010',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144012',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144015',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144017',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144019',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2145170',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2158412',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164440',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164487',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164488',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164492',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164497',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164499',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164500',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4203',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4304',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4450',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0215',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0216',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0217',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0286',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0401',
-                'https://errata.almalinux.org/9/ALSA-2023-0946.html',
-                'https://errata.rockylinux.org/RLSA-2023:0946',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=23985bac83fd50c8e29431009302b5442f985096',
-                'https://linux.oracle.com/cve/CVE-2023-0217.html',
-                'https://linux.oracle.com/errata/ELSA-2023-12152.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-0217',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0003',
-                'https://rustsec.org/advisories/RUSTSEC-2023-0012.html',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://ubuntu.com/security/notices/USN-5844-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-0217',
-                'https://www.openssl.org/news/secadv/20230207.txt'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: NULL dereference validating DSA public key'
-            },
-            {
-              'cve':  'CVE-2023-0286',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '7.4',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H'
-                },
-                'nvd': {
-                  'v3score':  '7.4',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.4',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-843'
-              ],
-              'description':   'There is a type confusion vulnerability relating to X.400 address processing\ninside an X.509 GeneralName. X.400 addresses were parsed as an ASN1_STRING but\nthe public structure definition for GENERAL_NAME incorrectly specified the type\nof the x400Address field as ASN1_TYPE. This field is subsequently interpreted by\nthe OpenSSL function GENERAL_NAME_cmp as an ASN1_TYPE rather than an\nASN1_STRING.\n\nWhen CRL checking is enabled (i.e. the application sets the\nX509_V_FLAG_CRL_CHECK flag), this vulnerability may allow an attacker to pass\narbitrary pointers to a memcmp call, enabling them to read memory contents or\nenact a denial of service. In most cases, the attack requires the attacker to\nprovide both the certificate chain and CRL, neither of which need to have a\nvalid signature. If the attacker only controls one of these inputs, the other\ninput must already contain an X.400 address as a CRL distribution point, which\nis uncommon. As such, this vulnerability is most likely to only affect\napplications which have implemented their own functionality for retrieving CRLs\nover a network.',
-              'diffID':        'sha256:253f1efcceb575705106468bdc1c875a7c9b2a734d4bcca3b1335946656d7acb',
-              'fixedVersions': [
-                '3.0.8-r0'
-              ],
-              'installedVersion': '3.0.7-r2',
-              'packageName':      'libssl3',
-              'purl':             'pkg:apk/alpine/libssl3@3.0.7-r2?arch=x86&distro=3.17.1',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2025:7937',
-                'https://access.redhat.com/security/cve/CVE-2023-0286',
-                'https://access.redhat.com/security/cve/cve-2023-0286',
-                'https://bugzilla.redhat.com/2164440',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144000',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144003',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144006',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144008',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144010',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144012',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144015',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144017',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144019',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2145170',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2158412',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164440',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164487',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164488',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164492',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164497',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164499',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164500',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4203',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4304',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4450',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0215',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0216',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0217',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0286',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0401',
-                'https://errata.almalinux.org/9/ALSA-2025-7937.html',
-                'https://errata.rockylinux.org/RLSA-2023:0946',
-                'https://ftp.openbsd.org/pub/OpenBSD/LibreSSL/libressl-3.6.2-relnotes.txt',
-                'https://ftp.openbsd.org/pub/OpenBSD/patches/7.2/common/018_x509.patch.sig',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=2c6c9d439b484e1ba9830d8454a34fa4f80fdfe9',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=2f7530077e0ef79d98718138716bc51ca0cad658',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=fd2af07dc083a350c959147097003a14a5e8ac4d',
-                'https://github.com/pyca/cryptography',
-                'https://github.com/pyca/cryptography/security/advisories/GHSA-x4qr-2fvf-3mr5',
-                'https://linux.oracle.com/cve/CVE-2023-0286.html',
-                'https://linux.oracle.com/errata/ELSA-2025-7937.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-0286',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0003',
-                'https://rustsec.org/advisories/RUSTSEC-2023-0006.html',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://ubuntu.com/security/notices/USN-5844-1',
-                'https://ubuntu.com/security/notices/USN-5845-1',
-                'https://ubuntu.com/security/notices/USN-5845-2',
-                'https://ubuntu.com/security/notices/USN-6564-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-0286',
-                'https://www.openssl.org/news/secadv/20230207.txt'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: X.400 address type confusion in X.509 GeneralName'
-            },
-            {
-              'cve':  'CVE-2023-0401',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'nvd': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-476'
-              ],
-              'description':   'A NULL pointer can be dereferenced when signatures are being\nverified on PKCS7 signed or signedAndEnveloped data. In case the hash\nalgorithm used for the signature is known to the OpenSSL library but\nthe implementation of the hash algorithm is not available the digest\ninitialization will fail. There is a missing check for the return\nvalue from the initialization function which later leads to invalid\nusage of the digest API most likely leading to a crash.\n\nThe unavailability of an algorithm can be caused by using FIPS\nenabled configuration of providers or more commonly by not loading\nthe legacy provider.\n\nPKCS7 data is processed by the SMIME library calls and also by the\ntime stamp (TS) library calls. The TLS implementation in OpenSSL does\nnot call these functions however third party applications would be\naffected if they call these functions to verify signatures on untrusted\ndata.',
-              'diffID':        'sha256:253f1efcceb575705106468bdc1c875a7c9b2a734d4bcca3b1335946656d7acb',
-              'fixedVersions': [
-                '3.0.8-r0'
-              ],
-              'installedVersion': '3.0.7-r2',
-              'packageName':      'libssl3',
-              'purl':             'pkg:apk/alpine/libssl3@3.0.7-r2?arch=x86&distro=3.17.1',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2023:0946',
-                'https://access.redhat.com/security/cve/CVE-2023-0401',
-                'https://bugzilla.redhat.com/2164440',
-                'https://bugzilla.redhat.com/2164487',
-                'https://bugzilla.redhat.com/2164488',
-                'https://bugzilla.redhat.com/2164492',
-                'https://bugzilla.redhat.com/2164494',
-                'https://bugzilla.redhat.com/2164497',
-                'https://bugzilla.redhat.com/2164499',
-                'https://bugzilla.redhat.com/2164500',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144000',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144003',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144006',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144008',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144010',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144012',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144015',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144017',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144019',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2145170',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2158412',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164440',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164487',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164488',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164492',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164497',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164499',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164500',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4203',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4304',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4450',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0215',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0216',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0217',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0286',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0401',
-                'https://errata.almalinux.org/9/ALSA-2023-0946.html',
-                'https://errata.rockylinux.org/RLSA-2023:0946',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=d3b6dfd70db844c4499bec6ad6601623a565e674',
-                'https://github.com/alexcrichton/openssl-src-rs',
-                'https://linux.oracle.com/cve/CVE-2023-0401.html',
-                'https://linux.oracle.com/errata/ELSA-2023-12152.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-0401',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0003',
-                'https://rustsec.org/advisories/RUSTSEC-2023-0013.html',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://ubuntu.com/security/notices/USN-5844-1',
-                'https://ubuntu.com/security/notices/USN-6564-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-0401',
-                'https://www.openssl.org/news/secadv/20230207.txt'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: NULL dereference during PKCS7 data verification'
-            },
-            {
-              'cve':  'CVE-2023-0464',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-295'
-              ],
-              'description':   "A security vulnerability has been identified in all supported versions\n\nof OpenSSL related to the verification of X.509 certificate chains\nthat include policy constraints.  Attackers may be able to exploit this\nvulnerability by creating a malicious certificate chain that triggers\nexponential use of computational resources, leading to a denial-of-service\n(DoS) attack on affected systems.\n\nPolicy processing is disabled by default but can be enabled by passing\nthe `-policy' argument to the command line utilities or by calling the\n`X509_VERIFY_PARAM_set1_policies()' function.",
-              'diffID':        'sha256:253f1efcceb575705106468bdc1c875a7c9b2a734d4bcca3b1335946656d7acb',
-              'fixedVersions': [
-                '3.0.8-r1'
-              ],
-              'installedVersion': '3.0.7-r2',
-              'packageName':      'libssl3',
-              'purl':             'pkg:apk/alpine/libssl3@3.0.7-r2?arch=x86&distro=3.17.1',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2023:3722',
-                'https://access.redhat.com/security/cve/CVE-2023-0464',
-                'https://bugzilla.redhat.com/2181082',
-                'https://bugzilla.redhat.com/2182561',
-                'https://bugzilla.redhat.com/2182565',
-                'https://bugzilla.redhat.com/2188461',
-                'https://bugzilla.redhat.com/2207947',
-                'https://errata.almalinux.org/9/ALSA-2023-3722.html',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=2017771e2db3e2b96f89bbe8766c3209f6a99545',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=2dcd4f1e3115f38cefa43e3efbe9b801c27e642e',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=879f7080d7e141f415c79eaa3a8ac4a3dad0348b',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=959c59c7a0164117e7f8366466a32bb1f8d77ff1',
-                'https://linux.oracle.com/cve/CVE-2023-0464.html',
-                'https://linux.oracle.com/errata/ELSA-2023-3722.html',
-                'https://lists.debian.org/debian-lts-announce/2023/06/msg00011.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-0464',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://security.netapp.com/advisory/ntap-20230406-0006/',
-                'https://security.netapp.com/advisory/ntap-20240621-0006/',
-                'https://ubuntu.com/security/notices/USN-6039-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.couchbase.com/alerts/',
-                'https://www.cve.org/CVERecord?id=CVE-2023-0464',
-                'https://www.debian.org/security/2023/dsa-5417',
-                'https://www.openssl.org/news/secadv/20230322.txt'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: Denial of service by excessive resource usage in verifying X509 policy constraints'
-            },
-            {
-              'cve':  'CVE-2023-5363',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N'
-                },
-                'redhat': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-684'
-              ],
-              'description':   "Issue summary: A bug has been identified in the processing of key and\ninitialisation vector (IV) lengths.  This can lead to potential truncation\nor overruns during the initialisation of some symmetric ciphers.\n\nImpact summary: A truncation in the IV can result in non-uniqueness,\nwhich could result in loss of confidentiality for some cipher modes.\n\nWhen calling EVP_EncryptInit_ex2(), EVP_DecryptInit_ex2() or\nEVP_CipherInit_ex2() the provided OSSL_PARAM array is processed after\nthe key and IV have been established.  Any alterations to the key length,\nvia the \"keylen\" parameter or the IV length, via the \"ivlen\" parameter,\nwithin the OSSL_PARAM array will not take effect as intended, potentially\ncausing truncation or overreading of these values.  The following ciphers\nand cipher modes are impacted: RC2, RC4, RC5, CCM, GCM and OCB.\n\nFor the CCM, GCM and OCB cipher modes, truncation of the IV can result in\nloss of confidentiality.  For example, when following NIST's SP 800-38D\nsection 8.2.1 guidance for constructing a deterministic IV for AES in\nGCM mode, truncation of the counter portion could lead to IV reuse.\n\nBoth truncations and overruns of the key and overruns of the IV will\nproduce incorrect results and could, in some cases, trigger a memory\nexception.  However, these issues are not currently assessed as security\ncritical.\n\nChanging the key and/or IV lengths is not considered to be a common operation\nand the vulnerable API was recently introduced. Furthermore it is likely that\napplication developers will have spotted this problem during testing since\ndecryption would fail unless both peers in the communication were similarly\nvulnerable. For these reasons we expect the probability of an application being\nvulnerable to this to be quite low. However if an application is vulnerable then\nthis issue is considered very serious. For these reasons we have assessed this\nissue as Moderate severity overall.\n\nThe OpenSSL SSL/TLS implementation is not affected by this issue.\n\nThe OpenSSL 3.0 and 3.1 FIPS providers are not affected by this because\nthe issue lies outside of the FIPS provider boundary.\n\nOpenSSL 3.1 and 3.0 are vulnerable to this issue.",
-              'diffID':        'sha256:253f1efcceb575705106468bdc1c875a7c9b2a734d4bcca3b1335946656d7acb',
-              'fixedVersions': [
-                '3.0.12-r0'
-              ],
-              'installedVersion': '3.0.7-r2',
-              'packageName':      'libssl3',
-              'purl':             'pkg:apk/alpine/libssl3@3.0.7-r2?arch=x86&distro=3.17.1',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2023/10/24/1',
-                'https://access.redhat.com/errata/RHSA-2024:0310',
-                'https://access.redhat.com/security/cve/CVE-2023-5363',
-                'https://bugzilla.redhat.com/2243839',
-                'https://errata.almalinux.org/9/ALSA-2024-0310.html',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=0df40630850fb2740e6be6890bb905d3fc623b2d',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=5f69f5c65e483928c4b28ed16af6e5742929f1ee',
-                'https://linux.oracle.com/cve/CVE-2023-5363.html',
-                'https://linux.oracle.com/errata/ELSA-2024-12093.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-5363',
-                'https://security.netapp.com/advisory/ntap-20231027-0010/',
-                'https://security.netapp.com/advisory/ntap-20240201-0003/',
-                'https://security.netapp.com/advisory/ntap-20240201-0004/',
-                'https://security.netapp.com/advisory/ntap-20241108-0002/',
-                'https://ubuntu.com/security/notices/USN-6450-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-5363',
-                'https://www.debian.org/security/2023/dsa-5532',
-                'https://www.openssl.org/news/secadv/20231024.txt'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: Incorrect cipher key and IV length processing'
-            },
-            {
-              'cve':  'CVE-2024-6119',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-843'
-              ],
-              'description':   "Issue summary: Applications performing certificate name checks (e.g., TLS\nclients checking server certificates) may attempt to read an invalid memory\naddress resulting in abnormal termination of the application process.\n\nImpact summary: Abnormal termination of an application can a cause a denial of\nservice.\n\nApplications performing certificate name checks (e.g., TLS clients checking\nserver certificates) may attempt to read an invalid memory address when\ncomparing the expected name with an `otherName` subject alternative name of an\nX.509 certificate. This may result in an exception that terminates the\napplication program.\n\nNote that basic certificate chain validation (signatures, dates, ...) is not\naffected, the denial of service can occur only when the application also\nspecifies an expected DNS name, Email address or IP address.\n\nTLS servers rarely solicit client certificates, and even when they do, they\ngenerally don't perform a name check against a reference identifier (expected\nidentity), but rather extract the presented identity after checking the\ncertificate chain.  So TLS servers are generally not affected and the severity\nof the issue is Moderate.\n\nThe FIPS modules in 3.3, 3.2, 3.1 and 3.0 are not affected by this issue.",
-              'diffID':        'sha256:253f1efcceb575705106468bdc1c875a7c9b2a734d4bcca3b1335946656d7acb',
-              'fixedVersions': [
-                '3.0.15-r0'
-              ],
-              'installedVersion': '3.0.7-r2',
-              'packageName':      'libssl3',
-              'purl':             'pkg:apk/alpine/libssl3@3.0.7-r2?arch=x86&distro=3.17.1',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2024/09/03/4',
-                'https://access.redhat.com/errata/RHSA-2024:8935',
-                'https://access.redhat.com/security/cve/CVE-2024-6119',
-                'https://bugzilla.redhat.com/2306158',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2306158',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-6119',
-                'https://errata.almalinux.org/9/ALSA-2024-8935.html',
-                'https://errata.rockylinux.org/RLSA-2024:6783',
-                'https://github.com/openssl/openssl/commit/05f360d9e849a1b277db628f1f13083a7f8dd04f',
-                'https://github.com/openssl/openssl/commit/06d1dc3fa96a2ba5a3e22735a033012aadc9f0d6',
-                'https://github.com/openssl/openssl/commit/621f3729831b05ee828a3203eddb621d014ff2b2',
-                'https://github.com/openssl/openssl/commit/7dfcee2cd2a63b2c64b9b4b0850be64cb695b0a0',
-                'https://github.com/openssl/openssl/security/advisories/GHSA-5qrj-vq78-58fj',
-                'https://linux.oracle.com/cve/CVE-2024-6119.html',
-                'https://linux.oracle.com/errata/ELSA-2024-8935.html',
-                'https://lists.freebsd.org/archives/freebsd-security/2024-September/000303.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2024-6119',
-                'https://openssl-library.org/news/secadv/20240903.txt',
-                'https://security.netapp.com/advisory/ntap-20240912-0001/',
-                'https://ubuntu.com/security/notices/USN-6986-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2024-6119'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: Possible denial of service in X.509 name checks'
-            },
-            {
-              'cve':  'CVE-2022-4203',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '9.1',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H'
-                },
-                'nvd': {
-                  'v3score':  '4.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '4.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-125'
-              ],
-              'description':   'A read buffer overrun can be triggered in X.509 certificate verification,\nspecifically in name constraint checking. Note that this occurs\nafter certificate chain signature verification and requires either a\nCA to have signed the malicious certificate or for the application to\ncontinue certificate verification despite failure to construct a path\nto a trusted issuer.\n\nThe read buffer overrun might result in a crash which could lead to\na denial of service attack. In theory it could also result in the disclosure\nof private memory contents (such as private keys, or sensitive plaintext)\nalthough we are not aware of any working exploit leading to memory\ncontents disclosure as of the time of release of this advisory.\n\nIn a TLS client, this can be triggered by connecting to a malicious\nserver. In a TLS server, this can be triggered if the server requests\nclient authentication and a malicious client connects.',
-              'diffID':        'sha256:253f1efcceb575705106468bdc1c875a7c9b2a734d4bcca3b1335946656d7acb',
-              'fixedVersions': [
-                '3.0.8-r0'
-              ],
-              'installedVersion': '3.0.7-r2',
-              'packageName':      'libssl3',
-              'purl':             'pkg:apk/alpine/libssl3@3.0.7-r2?arch=x86&distro=3.17.1',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2023:0946',
-                'https://access.redhat.com/security/cve/CVE-2022-4203',
-                'https://bugzilla.redhat.com/2164440',
-                'https://bugzilla.redhat.com/2164487',
-                'https://bugzilla.redhat.com/2164488',
-                'https://bugzilla.redhat.com/2164492',
-                'https://bugzilla.redhat.com/2164494',
-                'https://bugzilla.redhat.com/2164497',
-                'https://bugzilla.redhat.com/2164499',
-                'https://bugzilla.redhat.com/2164500',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144000',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144003',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144006',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144008',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144010',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144012',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144015',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144017',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144019',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2145170',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2158412',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164440',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164487',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164488',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164492',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164497',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164499',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164500',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4203',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4304',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4450',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0215',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0216',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0217',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0286',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0401',
-                'https://errata.almalinux.org/9/ALSA-2023-0946.html',
-                'https://errata.rockylinux.org/RLSA-2023:0946',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=c927a3492698c254637da836762f9b1f86cffabc',
-                'https://linux.oracle.com/cve/CVE-2022-4203.html',
-                'https://linux.oracle.com/errata/ELSA-2023-12152.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2022-4203',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0003',
-                'https://rustsec.org/advisories/RUSTSEC-2023-0008.html',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://ubuntu.com/security/notices/USN-5844-1',
-                'https://www.cve.org/CVERecord?id=CVE-2022-4203',
-                'https://www.openssl.org/news/secadv/20230207.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: read buffer overflow in X.509 certificate verification'
-            },
-            {
-              'cve':  'CVE-2022-4304',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N'
-                },
-                'nvd': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N'
-                },
-                'redhat': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-203'
-              ],
-              'description':   'A timing based side channel exists in the OpenSSL RSA Decryption implementation\nwhich could be sufficient to recover a plaintext across a network in a\nBleichenbacher style attack. To achieve a successful decryption an attacker\nwould have to be able to send a very large number of trial messages for\ndecryption. The vulnerability affects all RSA padding modes: PKCS#1 v1.5,\nRSA-OEAP and RSASVE.\n\nFor example, in a TLS connection, RSA is commonly used by a client to send an\nencrypted pre-master secret to the server. An attacker that had observed a\ngenuine connection between a client and a server could use this flaw to send\ntrial messages to the server and record the time taken to process them. After a\nsufficiently large number of messages the attacker could recover the pre-master\nsecret used for the original connection and thus be able to decrypt the\napplication data sent over that connection.',
-              'diffID':        'sha256:253f1efcceb575705106468bdc1c875a7c9b2a734d4bcca3b1335946656d7acb',
-              'fixedVersions': [
-                '3.0.8-r0'
-              ],
-              'installedVersion': '3.0.7-r2',
-              'packageName':      'libssl3',
-              'purl':             'pkg:apk/alpine/libssl3@3.0.7-r2?arch=x86&distro=3.17.1',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2023:2165',
-                'https://access.redhat.com/security/cve/CVE-2022-4304',
-                'https://bugzilla.redhat.com/1960321',
-                'https://bugzilla.redhat.com/2164440',
-                'https://bugzilla.redhat.com/2164487',
-                'https://bugzilla.redhat.com/2164492',
-                'https://bugzilla.redhat.com/2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144000',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144003',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144006',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144008',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144010',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144012',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144015',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144017',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144019',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2145170',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2158412',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164440',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164487',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164488',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164492',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164497',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164499',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164500',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4203',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4304',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4450',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0215',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0216',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0217',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0286',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0401',
-                'https://errata.almalinux.org/9/ALSA-2023-2165.html',
-                'https://errata.rockylinux.org/RLSA-2023:0946',
-                'https://linux.oracle.com/cve/CVE-2022-4304.html',
-                'https://linux.oracle.com/errata/ELSA-2023-32791.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2022-4304',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0003',
-                'https://rustsec.org/advisories/RUSTSEC-2023-0007.html',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://ubuntu.com/security/notices/USN-5844-1',
-                'https://ubuntu.com/security/notices/USN-6564-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2022-4304',
-                'https://www.openssl.org/news/secadv/20230207.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: timing attack in RSA Decryption implementation'
-            },
-            {
-              'cve':  'CVE-2023-0465',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N'
-                },
-                'redhat': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-295'
-              ],
-              'description':   "Applications that use a non-default option when verifying certificates may be\nvulnerable to an attack from a malicious CA to circumvent certain checks.\n\nInvalid certificate policies in leaf certificates are silently ignored by\nOpenSSL and other certificate policy checks are skipped for that certificate.\nA malicious CA could use this to deliberately assert invalid certificate policies\nin order to circumvent policy checking on the certificate altogether.\n\nPolicy processing is disabled by default but can be enabled by passing\nthe `-policy' argument to the command line utilities or by calling the\n`X509_VERIFY_PARAM_set1_policies()' function.",
-              'diffID':        'sha256:253f1efcceb575705106468bdc1c875a7c9b2a734d4bcca3b1335946656d7acb',
-              'fixedVersions': [
-                '3.0.8-r2'
-              ],
-              'installedVersion': '3.0.7-r2',
-              'packageName':      'libssl3',
-              'purl':             'pkg:apk/alpine/libssl3@3.0.7-r2?arch=x86&distro=3.17.1',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2023:3722',
-                'https://access.redhat.com/security/cve/CVE-2023-0465',
-                'https://bugzilla.redhat.com/2181082',
-                'https://bugzilla.redhat.com/2182561',
-                'https://bugzilla.redhat.com/2182565',
-                'https://bugzilla.redhat.com/2188461',
-                'https://bugzilla.redhat.com/2207947',
-                'https://errata.almalinux.org/9/ALSA-2023-3722.html',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=10325176f3d3e98c6e2b3bf5ab1e3b334de6947a',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=1dd43e0709fece299b15208f36cc7c76209ba0bb',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=b013765abfa80036dc779dd0e50602c57bb3bf95',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=facfb1ab745646e97a1920977ae4a9965ea61d5c',
-                'https://linux.oracle.com/cve/CVE-2023-0465.html',
-                'https://linux.oracle.com/errata/ELSA-2023-3722.html',
-                'https://lists.debian.org/debian-lts-announce/2023/06/msg00011.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-0465',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://security.netapp.com/advisory/ntap-20230414-0001/',
-                'https://ubuntu.com/security/notices/USN-6039-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-0465',
-                'https://www.debian.org/security/2023/dsa-5417',
-                'https://www.openssl.org/news/secadv/20230328.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: Invalid certificate policies in leaf certificates are silently ignored'
-            },
-            {
-              'cve':  'CVE-2023-0466',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N'
-                },
-                'redhat': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-295'
-              ],
-              'description':   'The function X509_VERIFY_PARAM_add0_policy() is documented to\nimplicitly enable the certificate policy check when doing certificate\nverification. However the implementation of the function does not\nenable the check which allows certificates with invalid or incorrect\npolicies to pass the certificate verification.\n\nAs suddenly enabling the policy check could break existing deployments it was\ndecided to keep the existing behavior of the X509_VERIFY_PARAM_add0_policy()\nfunction.\n\nInstead the applications that require OpenSSL to perform certificate\npolicy check need to use X509_VERIFY_PARAM_set1_policies() or explicitly\nenable the policy check by calling X509_VERIFY_PARAM_set_flags() with\nthe X509_V_FLAG_POLICY_CHECK flag argument.\n\nCertificate policy checks are disabled by default in OpenSSL and are not\ncommonly used by applications.',
-              'diffID':        'sha256:253f1efcceb575705106468bdc1c875a7c9b2a734d4bcca3b1335946656d7acb',
-              'fixedVersions': [
-                '3.0.8-r3'
-              ],
-              'installedVersion': '3.0.7-r2',
-              'packageName':      'libssl3',
-              'purl':             'pkg:apk/alpine/libssl3@3.0.7-r2?arch=x86&distro=3.17.1',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2023/09/28/4',
-                'https://access.redhat.com/errata/RHSA-2023:3722',
-                'https://access.redhat.com/security/cve/CVE-2023-0466',
-                'https://bugzilla.redhat.com/2181082',
-                'https://bugzilla.redhat.com/2182561',
-                'https://bugzilla.redhat.com/2182565',
-                'https://bugzilla.redhat.com/2188461',
-                'https://bugzilla.redhat.com/2207947',
-                'https://errata.almalinux.org/9/ALSA-2023-3722.html',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=0d16b7e99aafc0b4a6d729eec65a411a7e025f0a',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=51e8a84ce742db0f6c70510d0159dad8f7825908',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=73398dea26de9899fb4baa94098ad0a61f435c72',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=fc814a30fc4f0bc54fcea7d9a7462f5457aab061',
-                'https://linux.oracle.com/cve/CVE-2023-0466.html',
-                'https://linux.oracle.com/errata/ELSA-2023-3722.html',
-                'https://lists.debian.org/debian-lts-announce/2023/06/msg00011.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-0466',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://security.netapp.com/advisory/ntap-20230414-0001/',
-                'https://ubuntu.com/security/notices/USN-6039-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-0466',
-                'https://www.debian.org/security/2023/dsa-5417',
-                'https://www.openssl.org/news/secadv/20230328.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: Certificate policy check not enabled'
-            },
-            {
-              'cve':  'CVE-2023-1255',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '5.1',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-125'
-              ],
-              'description':   'Issue summary: The AES-XTS cipher decryption implementation for 64 bit ARM\nplatform contains a bug that could cause it to read past the input buffer,\nleading to a crash.\n\nImpact summary: Applications that use the AES-XTS algorithm on the 64 bit ARM\nplatform can crash in rare circumstances. The AES-XTS algorithm is usually\nused for disk encryption.\n\nThe AES-XTS cipher decryption implementation for 64 bit ARM platform will read\npast the end of the ciphertext buffer if the ciphertext size is 4 mod 5 in 16\nbyte blocks, e.g. 144 bytes or 1024 bytes. If the memory after the ciphertext\nbuffer is unmapped, this will trigger a crash which results in a denial of\nservice.\n\nIf an attacker can control the size and location of the ciphertext buffer\nbeing decrypted by an application using AES-XTS on 64 bit ARM, the\napplication is affected. This is fairly unlikely making this issue\na Low severity one.',
-              'diffID':        'sha256:253f1efcceb575705106468bdc1c875a7c9b2a734d4bcca3b1335946656d7acb',
-              'fixedVersions': [
-                '3.0.8-r4'
-              ],
-              'installedVersion': '3.0.7-r2',
-              'packageName':      'libssl3',
-              'purl':             'pkg:apk/alpine/libssl3@3.0.7-r2?arch=x86&distro=3.17.1',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2023:3722',
-                'https://access.redhat.com/security/cve/CVE-2023-1255',
-                'https://bugzilla.redhat.com/2181082',
-                'https://bugzilla.redhat.com/2182561',
-                'https://bugzilla.redhat.com/2182565',
-                'https://bugzilla.redhat.com/2188461',
-                'https://bugzilla.redhat.com/2207947',
-                'https://errata.almalinux.org/9/ALSA-2023-3722.html',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=02ac9c9420275868472f33b01def01218742b8bb',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=bc2f61ad70971869b242fc1cb445b98bad50074a',
-                'https://linux.oracle.com/cve/CVE-2023-1255.html',
-                'https://linux.oracle.com/errata/ELSA-2023-3722.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-1255',
-                'https://security.netapp.com/advisory/ntap-20230908-0006/',
-                'https://ubuntu.com/security/notices/USN-6119-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-1255',
-                'https://www.openssl.org/news/secadv/20230419.txt',
-                'https://www.openssl.org/news/secadv/20230420.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: Input buffer over-read in AES-XTS implementation on 64 bit ARM'
-            },
-            {
-              'cve':  'CVE-2023-2650',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '6.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-770'
-              ],
-              'description':   "Issue summary: Processing some specially crafted ASN.1 object identifiers or\ndata containing them may be very slow.\n\nImpact summary: Applications that use OBJ_obj2txt() directly, or use any of\nthe OpenSSL subsystems OCSP, PKCS7/SMIME, CMS, CMP/CRMF or TS with no message\nsize limit may experience notable to very long delays when processing those\nmessages, which may lead to a Denial of Service.\n\nAn OBJECT IDENTIFIER is composed of a series of numbers - sub-identifiers -\nmost of which have no size limit.  OBJ_obj2txt() may be used to translate\nan ASN.1 OBJECT IDENTIFIER given in DER encoding form (using the OpenSSL\ntype ASN1_OBJECT) to its canonical numeric text form, which are the\nsub-identifiers of the OBJECT IDENTIFIER in decimal form, separated by\nperiods.\n\nWhen one of the sub-identifiers in the OBJECT IDENTIFIER is very large\n(these are sizes that are seen as absurdly large, taking up tens or hundreds\nof KiBs), the translation to a decimal number in text may take a very long\ntime.  The time complexity is O(n^2) with 'n' being the size of the\nsub-identifiers in bytes (*).\n\nWith OpenSSL 3.0, support to fetch cryptographic algorithms using names /\nidentifiers in string form was introduced.  This includes using OBJECT\nIDENTIFIERs in canonical numeric text form as identifiers for fetching\nalgorithms.\n\nSuch OBJECT IDENTIFIERs may be received through the ASN.1 structure\nAlgorithmIdentifier, which is commonly used in multiple protocols to specify\nwhat cryptographic algorithm should be used to sign or verify, encrypt or\ndecrypt, or digest passed data.\n\nApplications that call OBJ_obj2txt() directly with untrusted data are\naffected, with any version of OpenSSL.  If the use is for the mere purpose\nof display, the severity is considered low.\n\nIn OpenSSL 3.0 and newer, this affects the subsystems OCSP, PKCS7/SMIME,\nCMS, CMP/CRMF or TS.  It also impacts anything that processes X.509\ncertificates, including simple things like verifying its signature.\n\nThe impact on TLS is relatively low, because all versions of OpenSSL have a\n100KiB limit on the peer's certificate chain.  Additionally, this only\nimpacts clients, or servers that have explicitly enabled client\nauthentication.\n\nIn OpenSSL 1.1.1 and 1.0.2, this only affects displaying diverse objects,\nsuch as X.509 certificates.  This is assumed to not happen in such a way\nthat it would cause a Denial of Service, so these versions are considered\nnot affected by this issue in such a way that it would be cause for concern,\nand the severity is therefore considered low.",
-              'diffID':        'sha256:253f1efcceb575705106468bdc1c875a7c9b2a734d4bcca3b1335946656d7acb',
-              'fixedVersions': [
-                '3.0.9-r0'
-              ],
-              'installedVersion': '3.0.7-r2',
-              'packageName':      'libssl3',
-              'purl':             'pkg:apk/alpine/libssl3@3.0.7-r2?arch=x86&distro=3.17.1',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2023/05/30/1',
-                'https://access.redhat.com/errata/RHSA-2023:6330',
-                'https://access.redhat.com/security/cve/CVE-2023-2650',
-                'https://bugzilla.redhat.com/1858038',
-                'https://bugzilla.redhat.com/2207947',
-                'https://errata.almalinux.org/9/ALSA-2023-6330.html',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=423a2bc737a908ad0c77bda470b2b59dc879936b',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=853c5e56ee0b8650c73140816bb8b91d6163422c',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=9e209944b35cf82368071f160a744b6178f9b098',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=db779b0e10b047f2585615e0b8f2acdf21f8544a',
-                'https://linux.oracle.com/cve/CVE-2023-2650.html',
-                'https://linux.oracle.com/errata/ELSA-2023-6330.html',
-                'https://lists.debian.org/debian-lts-announce/2023/06/msg00011.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-2650',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0009',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://security.netapp.com/advisory/ntap-20230703-0001/',
-                'https://security.netapp.com/advisory/ntap-20231027-0009/',
-                'https://ubuntu.com/security/notices/USN-6119-1',
-                'https://ubuntu.com/security/notices/USN-6188-1',
-                'https://ubuntu.com/security/notices/USN-6672-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-2650',
-                'https://www.debian.org/security/2023/dsa-5417',
-                'https://www.openssl.org/news/secadv/20230530.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: Possible DoS translating ASN.1 object identifiers'
-            },
-            {
-              'cve':  'CVE-2023-2975',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N'
-                },
-                'redhat': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-354',
-                'CWE-287'
-              ],
-              'description':   'Issue summary: The AES-SIV cipher implementation contains a bug that causes\nit to ignore empty associated data entries which are unauthenticated as\na consequence.\n\nImpact summary: Applications that use the AES-SIV algorithm and want to\nauthenticate empty data entries as associated data can be misled by removing,\nadding or reordering such empty entries as these are ignored by the OpenSSL\nimplementation. We are currently unaware of any such applications.\n\nThe AES-SIV algorithm allows for authentication of multiple associated\ndata entries along with the encryption. To authenticate empty data the\napplication has to call EVP_EncryptUpdate() (or EVP_CipherUpdate()) with\nNULL pointer as the output buffer and 0 as the input buffer length.\nThe AES-SIV implementation in OpenSSL just returns success for such a call\ninstead of performing the associated data authentication operation.\nThe empty data thus will not be authenticated.\n\nAs this issue does not affect non-empty associated data authentication and\nwe expect it to be rare for an application to use empty associated data\nentries this is qualified as Low severity issue.',
-              'diffID':        'sha256:253f1efcceb575705106468bdc1c875a7c9b2a734d4bcca3b1335946656d7acb',
-              'fixedVersions': [
-                '3.0.9-r2'
-              ],
-              'installedVersion': '3.0.7-r2',
-              'packageName':      'libssl3',
-              'purl':             'pkg:apk/alpine/libssl3@3.0.7-r2?arch=x86&distro=3.17.1',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2023/07/15/1',
-                'http://www.openwall.com/lists/oss-security/2023/07/19/5',
-                'https://access.redhat.com/errata/RHSA-2024:2447',
-                'https://access.redhat.com/security/cve/CVE-2023-2975',
-                'https://bugzilla.redhat.com/2223016',
-                'https://bugzilla.redhat.com/2224962',
-                'https://bugzilla.redhat.com/2227852',
-                'https://bugzilla.redhat.com/2248616',
-                'https://bugzilla.redhat.com/2257571',
-                'https://bugzilla.redhat.com/2258502',
-                'https://bugzilla.redhat.com/2259944',
-                'https://errata.almalinux.org/9/ALSA-2024-2447.html',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=00e2f5eea29994d19293ec4e8c8775ba73678598',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=6a83f0c958811f07e0d11dfc6b5a6a98edfd5bdc',
-                'https://linux.oracle.com/cve/CVE-2023-2975.html',
-                'https://linux.oracle.com/errata/ELSA-2024-2447.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-2975',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://security.netapp.com/advisory/ntap-20230725-0004/',
-                'https://ubuntu.com/security/notices/USN-6450-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-2975',
-                'https://www.openssl.org/news/secadv/20230714.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: AES-SIV cipher implementation contains a bug that causes it to ignore empty associated data entries'
-            },
-            {
-              'cve':  'CVE-2023-3446',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L'
-                },
-                'redhat': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L'
-                }
-              },
-              'cwes': [
-                'CWE-606',
-                'CWE-1333'
-              ],
-              'description':   "Issue summary: Checking excessively long DH keys or parameters may be very slow.\n\nImpact summary: Applications that use the functions DH_check(), DH_check_ex()\nor EVP_PKEY_param_check() to check a DH key or DH parameters may experience long\ndelays. Where the key or parameters that are being checked have been obtained\nfrom an untrusted source this may lead to a Denial of Service.\n\nThe function DH_check() performs various checks on DH parameters. One of those\nchecks confirms that the modulus ('p' parameter) is not too large. Trying to use\na very large modulus is slow and OpenSSL will not normally use a modulus which\nis over 10,000 bits in length.\n\nHowever the DH_check() function checks numerous aspects of the key or parameters\nthat have been supplied. Some of those checks use the supplied modulus value\neven if it has already been found to be too large.\n\nAn application that calls DH_check() and supplies a key or parameters obtained\nfrom an untrusted source could be vulernable to a Denial of Service attack.\n\nThe function DH_check() is itself called by a number of other OpenSSL functions.\nAn application calling any of those other functions may similarly be affected.\nThe other functions affected by this are DH_check_ex() and\nEVP_PKEY_param_check().\n\nAlso vulnerable are the OpenSSL dhparam and pkeyparam command line applications\nwhen using the '-check' option.\n\nThe OpenSSL SSL/TLS implementation is not affected by this issue.\nThe OpenSSL 3.0 and 3.1 FIPS providers are not affected by this issue.",
-              'diffID':        'sha256:253f1efcceb575705106468bdc1c875a7c9b2a734d4bcca3b1335946656d7acb',
-              'fixedVersions': [
-                '3.0.9-r3'
-              ],
-              'installedVersion': '3.0.7-r2',
-              'packageName':      'libssl3',
-              'purl':             'pkg:apk/alpine/libssl3@3.0.7-r2?arch=x86&distro=3.17.1',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2023/07/19/4',
-                'http://www.openwall.com/lists/oss-security/2023/07/19/5',
-                'http://www.openwall.com/lists/oss-security/2023/07/19/6',
-                'http://www.openwall.com/lists/oss-security/2023/07/31/1',
-                'http://www.openwall.com/lists/oss-security/2024/05/16/1',
-                'https://access.redhat.com/errata/RHSA-2024:2447',
-                'https://access.redhat.com/security/cve/CVE-2023-3446',
-                'https://bugzilla.redhat.com/2223016',
-                'https://bugzilla.redhat.com/2224962',
-                'https://bugzilla.redhat.com/2227852',
-                'https://bugzilla.redhat.com/2248616',
-                'https://bugzilla.redhat.com/2257571',
-                'https://bugzilla.redhat.com/2258502',
-                'https://bugzilla.redhat.com/2259944',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2224962',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2257582',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2257583',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2258677',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2258688',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2258691',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2258694',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2258700',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-36763',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-36764',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3446',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45229',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45231',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45232',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45233',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45235',
-                'https://errata.almalinux.org/9/ALSA-2024-2447.html',
-                'https://errata.rockylinux.org/RLSA-2024:2264',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=1fa20cf2f506113c761777127a38bce5068740eb',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=8780a896543a654e757db1b9396383f9d8095528',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=9a0a4d3c1e7138915563c0df4fe6a3f9377b839c',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=fc9867c1e03c22ebf56943be205202e576aabf23',
-                'https://linux.oracle.com/cve/CVE-2023-3446.html',
-                'https://linux.oracle.com/errata/ELSA-2024-2447.html',
-                'https://lists.debian.org/debian-lts-announce/2023/08/msg00019.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-3446',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://security.netapp.com/advisory/ntap-20230803-0011/',
-                'https://ubuntu.com/security/notices/USN-6435-1',
-                'https://ubuntu.com/security/notices/USN-6435-2',
-                'https://ubuntu.com/security/notices/USN-6450-1',
-                'https://ubuntu.com/security/notices/USN-6709-1',
-                'https://ubuntu.com/security/notices/USN-7018-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-3446',
-                'https://www.openssl.org/news/secadv/20230719.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: Excessive time spent checking DH keys and parameters'
-            },
-            {
-              'cve':  'CVE-2023-3817',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L'
-                },
-                'redhat': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L'
-                }
-              },
-              'cwes': [
-                'CWE-606',
-                'CWE-834'
-              ],
-              'description':   'Issue summary: Checking excessively long DH keys or parameters may be very slow.\n\nImpact summary: Applications that use the functions DH_check(), DH_check_ex()\nor EVP_PKEY_param_check() to check a DH key or DH parameters may experience long\ndelays. Where the key or parameters that are being checked have been obtained\nfrom an untrusted source this may lead to a Denial of Service.\n\nThe function DH_check() performs various checks on DH parameters. After fixing\nCVE-2023-3446 it was discovered that a large q parameter value can also trigger\nan overly long computation during some of these checks. A correct q value,\nif present, cannot be larger than the modulus p parameter, thus it is\nunnecessary to perform these checks if q is larger than p.\n\nAn application that calls DH_check() and supplies a key or parameters obtained\nfrom an untrusted source could be vulnerable to a Denial of Service attack.\n\nThe function DH_check() is itself called by a number of other OpenSSL functions.\nAn application calling any of those other functions may similarly be affected.\nThe other functions affected by this are DH_check_ex() and\nEVP_PKEY_param_check().\n\nAlso vulnerable are the OpenSSL dhparam and pkeyparam command line applications\nwhen using the "-check" option.\n\nThe OpenSSL SSL/TLS implementation is not affected by this issue.\n\nThe OpenSSL 3.0 and 3.1 FIPS providers are not affected by this issue.',
-              'diffID':        'sha256:253f1efcceb575705106468bdc1c875a7c9b2a734d4bcca3b1335946656d7acb',
-              'fixedVersions': [
-                '3.0.10-r0'
-              ],
-              'installedVersion': '3.0.7-r2',
-              'packageName':      'libssl3',
-              'purl':             'pkg:apk/alpine/libssl3@3.0.7-r2?arch=x86&distro=3.17.1',
-              'references':       [
-                'http://seclists.org/fulldisclosure/2023/Jul/43',
-                'http://www.openwall.com/lists/oss-security/2023/07/31/1',
-                'http://www.openwall.com/lists/oss-security/2023/09/22/11',
-                'http://www.openwall.com/lists/oss-security/2023/09/22/9',
-                'http://www.openwall.com/lists/oss-security/2023/11/06/2',
-                'https://access.redhat.com/errata/RHSA-2024:2447',
-                'https://access.redhat.com/security/cve/CVE-2023-3817',
-                'https://bugzilla.redhat.com/2223016',
-                'https://bugzilla.redhat.com/2224962',
-                'https://bugzilla.redhat.com/2227852',
-                'https://bugzilla.redhat.com/2248616',
-                'https://bugzilla.redhat.com/2257571',
-                'https://bugzilla.redhat.com/2258502',
-                'https://bugzilla.redhat.com/2259944',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2224962',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2227852',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2248616',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2270358',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3446',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3817',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-5678',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-2408',
-                'https://errata.almalinux.org/9/ALSA-2024-2447.html',
-                'https://errata.rockylinux.org/RLSA-2023:7877',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=6a1eb62c29db6cb5eec707f9338aee00f44e26f5',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=869ad69aadd985c7b8ca6f4e5dd0eb274c9f3644',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=9002fd07327a91f35ba6c1307e71fa6fd4409b7f',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=91ddeba0f2269b017dc06c46c993a788974b1aa5',
-                'https://linux.oracle.com/cve/CVE-2023-3817.html',
-                'https://linux.oracle.com/errata/ELSA-2024-2447.html',
-                'https://lists.debian.org/debian-lts-announce/2023/08/msg00019.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-3817',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://security.netapp.com/advisory/ntap-20230818-0014/',
-                'https://security.netapp.com/advisory/ntap-20231027-0008/',
-                'https://security.netapp.com/advisory/ntap-20240621-0006/',
-                'https://ubuntu.com/security/notices/USN-6435-1',
-                'https://ubuntu.com/security/notices/USN-6435-2',
-                'https://ubuntu.com/security/notices/USN-6450-1',
-                'https://ubuntu.com/security/notices/USN-6709-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-3817',
-                'https://www.openssl.org/news/secadv/20230731.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'OpenSSL: Excessive time spent checking DH q parameter value'
-            },
-            {
-              'cve':  'CVE-2023-5678',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L'
-                },
-                'redhat': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L'
-                }
-              },
-              'cwes': [
-                'CWE-606',
-                'CWE-754'
-              ],
-              'description':   "Issue summary: Generating excessively long X9.42 DH keys or checking\nexcessively long X9.42 DH keys or parameters may be very slow.\n\nImpact summary: Applications that use the functions DH_generate_key() to\ngenerate an X9.42 DH key may experience long delays.  Likewise, applications\nthat use DH_check_pub_key(), DH_check_pub_key_ex() or EVP_PKEY_public_check()\nto check an X9.42 DH key or X9.42 DH parameters may experience long delays.\nWhere the key or parameters that are being checked have been obtained from\nan untrusted source this may lead to a Denial of Service.\n\nWhile DH_check() performs all the necessary checks (as of CVE-2023-3817),\nDH_check_pub_key() doesn't make any of these checks, and is therefore\nvulnerable for excessively large P and Q parameters.\n\nLikewise, while DH_generate_key() performs a check for an excessively large\nP, it doesn't check for an excessively large Q.\n\nAn application that calls DH_generate_key() or DH_check_pub_key() and\nsupplies a key or parameters obtained from an untrusted source could be\nvulnerable to a Denial of Service attack.\n\nDH_generate_key() and DH_check_pub_key() are also called by a number of\nother OpenSSL functions.  An application calling any of those other\nfunctions may similarly be affected.  The other functions affected by this\nare DH_check_pub_key_ex(), EVP_PKEY_public_check(), and EVP_PKEY_generate().\n\nAlso vulnerable are the OpenSSL pkey command line application when using the\n\"-pubcheck\" option, as well as the OpenSSL genpkey command line application.\n\nThe OpenSSL SSL/TLS implementation is not affected by this issue.\n\nThe OpenSSL 3.0 and 3.1 FIPS providers are not affected by this issue.",
-              'diffID':        'sha256:253f1efcceb575705106468bdc1c875a7c9b2a734d4bcca3b1335946656d7acb',
-              'fixedVersions': [
-                '3.0.12-r1'
-              ],
-              'installedVersion': '3.0.7-r2',
-              'packageName':      'libssl3',
-              'purl':             'pkg:apk/alpine/libssl3@3.0.7-r2?arch=x86&distro=3.17.1',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2024/03/11/1',
-                'https://access.redhat.com/errata/RHSA-2024:2447',
-                'https://access.redhat.com/security/cve/CVE-2023-5678',
-                'https://bugzilla.redhat.com/2223016',
-                'https://bugzilla.redhat.com/2224962',
-                'https://bugzilla.redhat.com/2227852',
-                'https://bugzilla.redhat.com/2248616',
-                'https://bugzilla.redhat.com/2257571',
-                'https://bugzilla.redhat.com/2258502',
-                'https://bugzilla.redhat.com/2259944',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2224962',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2227852',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2248616',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2270358',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3446',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3817',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-5678',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-2408',
-                'https://errata.almalinux.org/9/ALSA-2024-2447.html',
-                'https://errata.rockylinux.org/RLSA-2023:7877',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=34efaef6c103d636ab507a0cc34dca4d3aecc055',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=710fee740904b6290fef0dd5536fbcedbc38ff0c',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=db925ae2e65d0d925adef429afc37f75bd1c2017',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=ddeb4b6c6d527e54ce9a99cba785c0f7776e54b6',
-                'https://linux.oracle.com/cve/CVE-2023-5678.html',
-                'https://linux.oracle.com/errata/ELSA-2024-2447.html',
-                'https://lists.debian.org/debian-lts-announce/2024/10/msg00033.html',
-                'https://lists.debian.org/debian-lts-announce/2024/11/msg00000.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-5678',
-                'https://security.netapp.com/advisory/ntap-20231130-0010/',
-                'https://ubuntu.com/security/notices/USN-6622-1',
-                'https://ubuntu.com/security/notices/USN-6632-1',
-                'https://ubuntu.com/security/notices/USN-6709-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-5678',
-                'https://www.openssl.org/news/secadv/20231106.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: Generating excessively long X9.42 DH keys or checking excessively long X9.42 DH keys or parameters may be very slow'
-            },
-            {
-              'cve':  'CVE-2023-6129',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '6.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-440',
-                'CWE-787'
-              ],
-              'description':   'Issue summary: The POLY1305 MAC (message authentication code) implementation\ncontains a bug that might corrupt the internal state of applications running\non PowerPC CPU based platforms if the CPU provides vector instructions.\n\nImpact summary: If an attacker can influence whether the POLY1305 MAC\nalgorithm is used, the application state might be corrupted with various\napplication dependent consequences.\n\nThe POLY1305 MAC (message authentication code) implementation in OpenSSL for\nPowerPC CPUs restores the contents of vector registers in a different order\nthan they are saved. Thus the contents of some of these vector registers\nare corrupted when returning to the caller. The vulnerable code is used only\non newer PowerPC processors supporting the PowerISA 2.07 instructions.\n\nThe consequences of this kind of internal application state corruption can\nbe various - from no consequences, if the calling application does not\ndepend on the contents of non-volatile XMM registers at all, to the worst\nconsequences, where the attacker could get complete control of the application\nprocess. However unless the compiler uses the vector registers for storing\npointers, the most likely consequence, if any, would be an incorrect result\nof some application dependent calculations or a crash leading to a denial of\nservice.\n\nThe POLY1305 MAC algorithm is most frequently used as part of the\nCHACHA20-POLY1305 AEAD (authenticated encryption with associated data)\nalgorithm. The most common usage of this AEAD cipher is with TLS protocol\nversions 1.2 and 1.3. If this cipher is enabled on the server a malicious\nclient can influence whether this AEAD cipher is used. This implies that\nTLS server applications using OpenSSL can be potentially impacted. However\nwe are currently not aware of any concrete application that would be affected\nby this issue therefore we consider this a Low severity security issue.',
-              'diffID':        'sha256:253f1efcceb575705106468bdc1c875a7c9b2a734d4bcca3b1335946656d7acb',
-              'fixedVersions': [
-                '3.0.12-r2'
-              ],
-              'installedVersion': '3.0.7-r2',
-              'packageName':      'libssl3',
-              'purl':             'pkg:apk/alpine/libssl3@3.0.7-r2?arch=x86&distro=3.17.1',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2024/03/11/1',
-                'https://access.redhat.com/errata/RHSA-2024:9088',
-                'https://access.redhat.com/security/cve/CVE-2023-6129',
-                'https://bugzilla.redhat.com/2257571',
-                'https://bugzilla.redhat.com/2258502',
-                'https://bugzilla.redhat.com/2259944',
-                'https://bugzilla.redhat.com/2284243',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2257571',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2258502',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2259944',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2284243',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-6129',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-6237',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-0727',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-1298',
-                'https://errata.almalinux.org/9/ALSA-2024-9088.html',
-                'https://errata.rockylinux.org/RLSA-2024:9088',
-                'https://github.com/openssl/openssl/commit/050d26383d4e264966fb83428e72d5d48f402d35',
-                'https://github.com/openssl/openssl/commit/5b139f95c9a47a55a0c54100f3837b1eee942b04',
-                'https://github.com/openssl/openssl/commit/f3fc5808fe9ff74042d639839610d03b8fdcc015',
-                'https://linux.oracle.com/cve/CVE-2023-6129.html',
-                'https://linux.oracle.com/errata/ELSA-2024-9088.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-6129',
-                'https://security.netapp.com/advisory/ntap-20240216-0009/',
-                'https://security.netapp.com/advisory/ntap-20240426-0008/',
-                'https://security.netapp.com/advisory/ntap-20240426-0013/',
-                'https://security.netapp.com/advisory/ntap-20240503-0011/',
-                'https://ubuntu.com/security/notices/USN-6622-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-6129',
-                'https://www.openssl.org/news/secadv/20240109.txt',
-                'https://www.openwall.com/lists/oss-security/2024/01/09/1'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: POLY1305 MAC implementation corrupts vector registers on PowerPC'
-            },
-            {
-              'cve':  'CVE-2023-6237',
-              'cvss': {
-                'redhat': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-606'
-              ],
-              'description':   "Issue summary: Checking excessively long invalid RSA public keys may take\na long time.\n\nImpact summary: Applications that use the function EVP_PKEY_public_check()\nto check RSA public keys may experience long delays. Where the key that\nis being checked has been obtained from an untrusted source this may lead\nto a Denial of Service.\n\nWhen function EVP_PKEY_public_check() is called on RSA public keys,\na computation is done to confirm that the RSA modulus, n, is composite.\nFor valid RSA keys, n is a product of two or more large primes and this\ncomputation completes quickly. However, if n is an overly large prime,\nthen this computation would take a long time.\n\nAn application that calls EVP_PKEY_public_check() and supplies an RSA key\nobtained from an untrusted source could be vulnerable to a Denial of Service\nattack.\n\nThe function EVP_PKEY_public_check() is not called from other OpenSSL\nfunctions however it is called from the OpenSSL pkey command line\napplication. For that reason that application is also vulnerable if used\nwith the '-pubin' and '-check' options on untrusted data.\n\nThe OpenSSL SSL/TLS implementation is not affected by this issue.\n\nThe OpenSSL 3.0 and 3.1 FIPS providers are affected by this issue.",
-              'diffID':        'sha256:253f1efcceb575705106468bdc1c875a7c9b2a734d4bcca3b1335946656d7acb',
-              'fixedVersions': [
-                '3.0.12-r3'
-              ],
-              'installedVersion': '3.0.7-r2',
-              'packageName':      'libssl3',
-              'purl':             'pkg:apk/alpine/libssl3@3.0.7-r2?arch=x86&distro=3.17.1',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2024/03/11/1',
-                'https://access.redhat.com/errata/RHSA-2024:9088',
-                'https://access.redhat.com/security/cve/CVE-2023-6237',
-                'https://bugzilla.redhat.com/2257571',
-                'https://bugzilla.redhat.com/2258502',
-                'https://bugzilla.redhat.com/2259944',
-                'https://bugzilla.redhat.com/2284243',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2257571',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2258502',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2259944',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2284243',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-6129',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-6237',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-0727',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-1298',
-                'https://errata.almalinux.org/9/ALSA-2024-9088.html',
-                'https://errata.rockylinux.org/RLSA-2024:9088',
-                'https://github.com/openssl/openssl/commit/0b0f7abfb37350794a4b8960fafc292cd5d1b84d',
-                'https://github.com/openssl/openssl/commit/18c02492138d1eb8b6548cb26e7b625fb2414a2a',
-                'https://github.com/openssl/openssl/commit/a830f551557d3d66a84bbb18a5b889c640c36294',
-                'https://linux.oracle.com/cve/CVE-2023-6237.html',
-                'https://linux.oracle.com/errata/ELSA-2024-9088.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-6237',
-                'https://security.netapp.com/advisory/ntap-20240531-0007/',
-                'https://ubuntu.com/security/notices/USN-6622-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-6237',
-                'https://www.openssl.org/news/secadv/20240115.txt',
-                'https://www.openwall.com/lists/oss-security/2024/01/15/2'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: Excessive time spent checking invalid RSA public keys'
-            },
-            {
-              'cve':  'CVE-2024-0727',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '5.5',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H'
-                },
-                'nvd': {
-                  'v3score':  '5.5',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '5.5',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-476'
-              ],
-              'description':   'Issue summary: Processing a maliciously formatted PKCS12 file may lead OpenSSL\nto crash leading to a potential Denial of Service attack\n\nImpact summary: Applications loading files in the PKCS12 format from untrusted\nsources might terminate abruptly.\n\nA file in PKCS12 format can contain certificates and keys and may come from an\nuntrusted source. The PKCS12 specification allows certain fields to be NULL, but\nOpenSSL does not correctly check for this case. This can lead to a NULL pointer\ndereference that results in OpenSSL crashing. If an application processes PKCS12\nfiles from an untrusted source using the OpenSSL APIs then that application will\nbe vulnerable to this issue.\n\nOpenSSL APIs that are vulnerable to this are: PKCS12_parse(),\nPKCS12_unpack_p7data(), PKCS12_unpack_p7encdata(), PKCS12_unpack_authsafes()\nand PKCS12_newpass().\n\nWe have also fixed a similar issue in SMIME_write_PKCS7(). However since this\nfunction is related to writing data we do not consider it security significant.\n\nThe FIPS modules in 3.2, 3.1 and 3.0 are not affected by this issue.',
-              'diffID':        'sha256:253f1efcceb575705106468bdc1c875a7c9b2a734d4bcca3b1335946656d7acb',
-              'fixedVersions': [
-                '3.0.12-r4'
-              ],
-              'installedVersion': '3.0.7-r2',
-              'packageName':      'libssl3',
-              'purl':             'pkg:apk/alpine/libssl3@3.0.7-r2?arch=x86&distro=3.17.1',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2024/03/11/1',
-                'https://access.redhat.com/errata/RHSA-2024:9088',
-                'https://access.redhat.com/security/cve/CVE-2024-0727',
-                'https://bugzilla.redhat.com/2257571',
-                'https://bugzilla.redhat.com/2258502',
-                'https://bugzilla.redhat.com/2259944',
-                'https://bugzilla.redhat.com/2284243',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2257571',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2258502',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2259944',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2284243',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-6129',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-6237',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-0727',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-1298',
-                'https://errata.almalinux.org/9/ALSA-2024-9088.html',
-                'https://errata.rockylinux.org/RLSA-2024:9088',
-                'https://github.com/alexcrichton/openssl-src-rs/commit/add20f73b6b42be7451af2e1044d4e0e778992b2',
-                'https://github.com/github/advisory-database/pull/3472',
-                'https://github.com/openssl/openssl/commit/09df4395b5071217b76dc7d3d2e630eb8c5a79c2',
-                'https://github.com/openssl/openssl/commit/775acfdbd0c6af9ac855f34969cdab0c0c90844a',
-                'https://github.com/openssl/openssl/commit/d135eeab8a5dbf72b3da5240bab9ddb7678dbd2c',
-                'https://github.com/openssl/openssl/pull/23362',
-                'https://github.com/pyca/cryptography/commit/3519591d255d4506fbcd0d04037d45271903c64d',
-                'https://github.openssl.org/openssl/extended-releases/commit/03b3941d60c4bce58fab69a0c22377ab439bc0e8',
-                'https://github.openssl.org/openssl/extended-releases/commit/aebaa5883e31122b404e450732dc833dc9dee539',
-                'https://linux.oracle.com/cve/CVE-2024-0727.html',
-                'https://linux.oracle.com/errata/ELSA-2024-9088.html',
-                'https://lists.debian.org/debian-lts-announce/2024/10/msg00033.html',
-                'https://lists.debian.org/debian-lts-announce/2024/11/msg00000.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2024-0727',
-                'https://security.netapp.com/advisory/ntap-20240208-0006',
-                'https://security.netapp.com/advisory/ntap-20240208-0006/',
-                'https://ubuntu.com/security/notices/USN-6622-1',
-                'https://ubuntu.com/security/notices/USN-6632-1',
-                'https://ubuntu.com/security/notices/USN-6709-1',
-                'https://ubuntu.com/security/notices/USN-7018-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2024-0727',
-                'https://www.openssl.org/news/secadv/20240125.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: denial of service via null dereference'
-            },
-            {
-              'cve':  'CVE-2024-4603',
-              'cvss': {
-                'redhat': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L'
-                }
-              },
-              'cwes': [
-                'CWE-606',
-                'CWE-834'
-              ],
-              'description':   'Issue summary: Checking excessively long DSA keys or parameters may be very\nslow.\n\nImpact summary: Applications that use the functions EVP_PKEY_param_check()\nor EVP_PKEY_public_check() to check a DSA public key or DSA parameters may\nexperience long delays. Where the key or parameters that are being checked\nhave been obtained from an untrusted source this may lead to a Denial of\nService.\n\nThe functions EVP_PKEY_param_check() or EVP_PKEY_public_check() perform\nvarious checks on DSA parameters. Some of those computations take a long time\nif the modulus (`p` parameter) is too large.\n\nTrying to use a very large modulus is slow and OpenSSL will not allow using\npublic keys with a modulus which is over 10,000 bits in length for signature\nverification. However the key and parameter check functions do not limit\nthe modulus size when performing the checks.\n\nAn application that calls EVP_PKEY_param_check() or EVP_PKEY_public_check()\nand supplies a key or parameters obtained from an untrusted source could be\nvulnerable to a Denial of Service attack.\n\nThese functions are not called by OpenSSL itself on untrusted DSA keys so\nonly applications that directly call these functions may be vulnerable.\n\nAlso vulnerable are the OpenSSL pkey and pkeyparam command line applications\nwhen using the `-check` option.\n\nThe OpenSSL SSL/TLS implementation is not affected by this issue.\n\nThe OpenSSL 3.0 and 3.1 FIPS providers are affected by this issue.',
-              'diffID':        'sha256:253f1efcceb575705106468bdc1c875a7c9b2a734d4bcca3b1335946656d7acb',
-              'fixedVersions': [
-                '3.0.13-r0'
-              ],
-              'installedVersion': '3.0.7-r2',
-              'packageName':      'libssl3',
-              'purl':             'pkg:apk/alpine/libssl3@3.0.7-r2?arch=x86&distro=3.17.1',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2024/05/16/2',
-                'https://access.redhat.com/errata/RHSA-2024:9333',
-                'https://access.redhat.com/security/cve/CVE-2024-4603',
-                'https://bugzilla.redhat.com/2274020',
-                'https://bugzilla.redhat.com/2281029',
-                'https://bugzilla.redhat.com/2283757',
-                'https://bugzilla.redhat.com/2294581',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2274020',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2281029',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2283757',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2294581',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-2511',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-4603',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-4741',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-5535',
-                'https://errata.almalinux.org/9/ALSA-2024-9333.html',
-                'https://errata.rockylinux.org/RLSA-2024:9333',
-                'https://github.com/openssl/openssl/commit/3559e868e58005d15c6013a0c1fd832e51c73397',
-                'https://github.com/openssl/openssl/commit/53ea06486d296b890d565fb971b2764fcd826e7e',
-                'https://github.com/openssl/openssl/commit/9c39b3858091c152f52513c066ff2c5a47969f0d',
-                'https://github.com/openssl/openssl/commit/da343d0605c826ef197aceedc67e8e04f065f740',
-                'https://linux.oracle.com/cve/CVE-2024-4603.html',
-                'https://linux.oracle.com/errata/ELSA-2024-9333.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2024-4603',
-                'https://security.netapp.com/advisory/ntap-20240621-0001/',
-                'https://ubuntu.com/security/notices/USN-6937-1',
-                'https://www.cve.org/CVERecord?id=CVE-2024-4603',
-                'https://www.openssl.org/news/secadv/20240516.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: Excessive time spent checking DSA keys and parameters'
-            },
-            {
-              'cve':  'CVE-2024-4741',
-              'cvss': {
-                'redhat': {
-                  'v3score':  '5.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   'Issue summary: Calling the OpenSSL API function SSL_free_buffers may cause\nmemory to be accessed that was previously freed in some situations\n\nImpact summary: A use after free can have a range of potential consequences such\nas the corruption of valid data, crashes or execution of arbitrary code.\nHowever, only applications that directly call the SSL_free_buffers function are\naffected by this issue. Applications that do not call this function are not\nvulnerable. Our investigations indicate that this function is rarely used by\napplications.\n\nThe SSL_free_buffers function is used to free the internal OpenSSL buffer used\nwhen processing an incoming record from the network. The call is only expected\nto succeed if the buffer is not currently in use. However, two scenarios have\nbeen identified where the buffer is freed even when still in use.\n\nThe first scenario occurs where a record header has been received from the\nnetwork and processed by OpenSSL, but the full record body has not yet arrived.\nIn this case calling SSL_free_buffers will succeed even though a record has only\nbeen partially processed and the buffer is still in use.\n\nThe second scenario occurs where a full record containing application data has\nbeen received and processed by OpenSSL but the application has only read part of\nthis data. Again a call to SSL_free_buffers will succeed even though the buffer\nis still in use.\n\nWhile these scenarios could occur accidentally during normal operation a\nmalicious attacker could attempt to engineer a stituation where this occurs.\nWe are not aware of this issue being actively exploited.\n\nThe FIPS modules in 3.3, 3.2, 3.1 and 3.0 are not affected by this issue.',
-              'diffID':        'sha256:253f1efcceb575705106468bdc1c875a7c9b2a734d4bcca3b1335946656d7acb',
-              'fixedVersions': [
-                '3.0.14-r0'
-              ],
-              'installedVersion': '3.0.7-r2',
-              'packageName':      'libssl3',
-              'purl':             'pkg:apk/alpine/libssl3@3.0.7-r2?arch=x86&distro=3.17.1',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2024:9333',
-                'https://access.redhat.com/security/cve/CVE-2024-4741',
-                'https://bugzilla.redhat.com/2274020',
-                'https://bugzilla.redhat.com/2281029',
-                'https://bugzilla.redhat.com/2283757',
-                'https://bugzilla.redhat.com/2294581',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2274020',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2281029',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2283757',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2294581',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-2511',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-4603',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-4741',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-5535',
-                'https://errata.almalinux.org/9/ALSA-2024-9333.html',
-                'https://errata.rockylinux.org/RLSA-2024:9333',
-                'https://github.com/openssl/openssl/commit/704f725b96aa373ee45ecfb23f6abfe8be8d9177',
-                'https://github.com/openssl/openssl/commit/b3f0eb0a295f58f16ba43ba99dad70d4ee5c437d',
-                'https://github.com/openssl/openssl/commit/c88c3de51020c37e8706bf7a682a162593053aac',
-                'https://github.com/openssl/openssl/commit/e5093133c35ca82874ad83697af76f4b0f7e3bd8',
-                'https://github.openssl.org/openssl/extended-releases/commit/f7a045f3143fc6da2ee66bf52d8df04829590dd4',
-                'https://linux.oracle.com/cve/CVE-2024-4741.html',
-                'https://linux.oracle.com/errata/ELSA-2024-9333.html',
-                'https://lists.debian.org/debian-lts-announce/2024/10/msg00033.html',
-                'https://lists.debian.org/debian-lts-announce/2024/11/msg00000.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2024-4741',
-                'https://security.netapp.com/advisory/ntap-20240621-0004/',
-                'https://ubuntu.com/security/notices/USN-6937-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2024-4741',
-                'https://www.openssl.org/news/secadv/20240528.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: Use After Free with SSL_free_buffers'
-            },
-            {
-              'cve':  'CVE-2024-5535',
-              'cvss': {
-                'redhat': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-125'
-              ],
-              'description':   'Issue summary: Calling the OpenSSL API function SSL_select_next_proto with an\nempty supported client protocols buffer may cause a crash or memory contents to\nbe sent to the peer.\n\nImpact summary: A buffer overread can have a range of potential consequences\nsuch as unexpected application beahviour or a crash. In particular this issue\ncould result in up to 255 bytes of arbitrary private data from memory being sent\nto the peer leading to a loss of confidentiality. However, only applications\nthat directly call the SSL_select_next_proto function with a 0 length list of\nsupported client protocols are affected by this issue. This would normally never\nbe a valid scenario and is typically not under attacker control but may occur by\naccident in the case of a configuration or programming error in the calling\napplication.\n\nThe OpenSSL API function SSL_select_next_proto is typically used by TLS\napplications that support ALPN (Application Layer Protocol Negotiation) or NPN\n(Next Protocol Negotiation). NPN is older, was never standardised and\nis deprecated in favour of ALPN. We believe that ALPN is significantly more\nwidely deployed than NPN. The SSL_select_next_proto function accepts a list of\nprotocols from the server and a list of protocols from the client and returns\nthe first protocol that appears in the server list that also appears in the\nclient list. In the case of no overlap between the two lists it returns the\nfirst item in the client list. In either case it will signal whether an overlap\nbetween the two lists was found. In the case where SSL_select_next_proto is\ncalled with a zero length client list it fails to notice this condition and\nreturns the memory immediately following the client list pointer (and reports\nthat there was no overlap in the lists).\n\nThis function is typically called from a server side application callback for\nALPN or a client side application callback for NPN. In the case of ALPN the list\nof protocols supplied by the client is guaranteed by libssl to never be zero in\nlength. The list of server protocols comes from the application and should never\nnormally be expected to be of zero length. In this case if the\nSSL_select_next_proto function has been called as expected (with the list\nsupplied by the client passed in the client/client_len parameters), then the\napplication will not be vulnerable to this issue. If the application has\naccidentally been configured with a zero length server list, and has\naccidentally passed that zero length server list in the client/client_len\nparameters, and has additionally failed to correctly handle a "no overlap"\nresponse (which would normally result in a handshake failure in ALPN) then it\nwill be vulnerable to this problem.\n\nIn the case of NPN, the protocol permits the client to opportunistically select\na protocol when there is no overlap. OpenSSL returns the first client protocol\nin the no overlap case in support of this. The list of client protocols comes\nfrom the application and should never normally be expected to be of zero length.\nHowever if the SSL_select_next_proto function is accidentally called with a\nclient_len of 0 then an invalid memory pointer will be returned instead. If the\napplication uses this output as the opportunistic protocol then the loss of\nconfidentiality will occur.\n\nThis issue has been assessed as Low severity because applications are most\nlikely to be vulnerable if they are using NPN instead of ALPN - but NPN is not\nwidely used. It also requires an application configuration or programming error.\nFinally, this issue would not typically be under attacker control making active\nexploitation unlikely.\n\nThe FIPS modules in 3.3, 3.2, 3.1 and 3.0 are not affected by this issue.\n\nDue to the low severity of this issue we are not issuing new releases of\nOpenSSL at this time. The fix will be included in the next releases when they\nbecome available.',
-              'diffID':        'sha256:253f1efcceb575705106468bdc1c875a7c9b2a734d4bcca3b1335946656d7acb',
-              'fixedVersions': [
-                '3.0.14-r0'
-              ],
-              'installedVersion': '3.0.7-r2',
-              'packageName':      'libssl3',
-              'purl':             'pkg:apk/alpine/libssl3@3.0.7-r2?arch=x86&distro=3.17.1',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2024/06/27/1',
-                'http://www.openwall.com/lists/oss-security/2024/06/28/4',
-                'http://www.openwall.com/lists/oss-security/2024/08/15/1',
-                'https://access.redhat.com/errata/RHSA-2025:1671',
-                'https://access.redhat.com/security/cve/CVE-2024-5535',
-                'https://bugzilla.redhat.com/2294581',
-                'https://bugzilla.redhat.com/2294676',
-                'https://bugzilla.redhat.com/2301888',
-                'https://bugzilla.redhat.com/2318857',
-                'https://bugzilla.redhat.com/2318858',
-                'https://bugzilla.redhat.com/2318870',
-                'https://bugzilla.redhat.com/2318873',
-                'https://bugzilla.redhat.com/2318874',
-                'https://bugzilla.redhat.com/2318876',
-                'https://bugzilla.redhat.com/2318882',
-                'https://bugzilla.redhat.com/2318883',
-                'https://bugzilla.redhat.com/2318884',
-                'https://bugzilla.redhat.com/2318885',
-                'https://bugzilla.redhat.com/2318886',
-                'https://bugzilla.redhat.com/2318897',
-                'https://bugzilla.redhat.com/2318900',
-                'https://bugzilla.redhat.com/2318905',
-                'https://bugzilla.redhat.com/2318914',
-                'https://bugzilla.redhat.com/2318922',
-                'https://bugzilla.redhat.com/2318923',
-                'https://bugzilla.redhat.com/2318925',
-                'https://bugzilla.redhat.com/2318926',
-                'https://bugzilla.redhat.com/2318927',
-                'https://bugzilla.redhat.com/2331191',
-                'https://bugzilla.redhat.com/2339218',
-                'https://bugzilla.redhat.com/2339220',
-                'https://bugzilla.redhat.com/2339221',
-                'https://bugzilla.redhat.com/2339226',
-                'https://bugzilla.redhat.com/2339231',
-                'https://bugzilla.redhat.com/2339236',
-                'https://bugzilla.redhat.com/2339238',
-                'https://bugzilla.redhat.com/2339243',
-                'https://bugzilla.redhat.com/2339247',
-                'https://bugzilla.redhat.com/2339252',
-                'https://bugzilla.redhat.com/2339259',
-                'https://bugzilla.redhat.com/2339266',
-                'https://bugzilla.redhat.com/2339270',
-                'https://bugzilla.redhat.com/2339271',
-                'https://bugzilla.redhat.com/2339275',
-                'https://bugzilla.redhat.com/2339277',
-                'https://bugzilla.redhat.com/2339281',
-                'https://bugzilla.redhat.com/2339284',
-                'https://bugzilla.redhat.com/2339291',
-                'https://bugzilla.redhat.com/2339293',
-                'https://bugzilla.redhat.com/2339295',
-                'https://bugzilla.redhat.com/2339299',
-                'https://bugzilla.redhat.com/2339300',
-                'https://bugzilla.redhat.com/2339304',
-                'https://bugzilla.redhat.com/2339305',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2274020',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2281029',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2283757',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2294581',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-2511',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-4603',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-4741',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-5535',
-                'https://errata.almalinux.org/9/ALSA-2025-1671.html',
-                'https://errata.rockylinux.org/RLSA-2024:9333',
-                'https://github.com/openssl/openssl/commit/4ada436a1946cbb24db5ab4ca082b69c1bc10f37',
-                'https://github.com/openssl/openssl/commit/99fb785a5f85315b95288921a321a935ea29a51e',
-                'https://github.com/openssl/openssl/commit/cf6f91f6121f4db167405db2f0de410a456f260c',
-                'https://github.com/openssl/openssl/commit/e86ac436f0bd54d4517745483e2315650fae7b2c',
-                'https://github.openssl.org/openssl/extended-releases/commit/9947251413065a05189a63c9b7a6c1d4e224c21c',
-                'https://github.openssl.org/openssl/extended-releases/commit/b78ec0824da857223486660177d3b1f255c65d87',
-                'https://linux.oracle.com/cve/CVE-2024-5535.html',
-                'https://linux.oracle.com/errata/ELSA-2025-1673.html',
-                'https://lists.debian.org/debian-lts-announce/2024/10/msg00033.html',
-                'https://lists.debian.org/debian-lts-announce/2024/11/msg00000.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2024-5535',
-                'https://openssl.org/news/secadv/20240627.txt',
-                'https://security.netapp.com/advisory/ntap-20240712-0005/',
-                'https://security.netapp.com/advisory/ntap-20241025-0006/',
-                'https://security.netapp.com/advisory/ntap-20241025-0010/',
-                'https://ubuntu.com/security/notices/USN-6937-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2024-5535',
-                'https://www.openssl.org/news/secadv/20240627.txt',
-                'https://www.oracle.com/security-alerts/cpuoct2024.html#AppendixMSQL'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: SSL_select_next_proto buffer overread'
-            },
-            {
-              'cve':  'CVE-2024-2511',
-              'cvss': {
-                'redhat': {
-                  'v3score':  '3.7',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L'
-                }
-              },
-              'cwes': [
-                'CWE-1325'
-              ],
-              'description':   'Issue summary: Some non-default TLS server configurations can cause unbounded\nmemory growth when processing TLSv1.3 sessions\n\nImpact summary: An attacker may exploit certain server configurations to trigger\nunbounded memory growth that would lead to a Denial of Service\n\nThis problem can occur in TLSv1.3 if the non-default SSL_OP_NO_TICKET option is\nbeing used (but not if early_data support is also configured and the default\nanti-replay protection is in use). In this case, under certain conditions, the\nsession cache can get into an incorrect state and it will fail to flush properly\nas it fills. The session cache will continue to grow in an unbounded manner. A\nmalicious client could deliberately create the scenario for this failure to\nforce a Denial of Service. It may also happen by accident in normal operation.\n\nThis issue only affects TLS servers supporting TLSv1.3. It does not affect TLS\nclients.\n\nThe FIPS modules in 3.2, 3.1 and 3.0 are not affected by this issue. OpenSSL\n1.0.2 is also not affected by this issue.',
-              'diffID':        'sha256:253f1efcceb575705106468bdc1c875a7c9b2a734d4bcca3b1335946656d7acb',
-              'fixedVersions': [
-                '3.0.12-r5'
-              ],
-              'installedVersion': '3.0.7-r2',
-              'packageName':      'libssl3',
-              'purl':             'pkg:apk/alpine/libssl3@3.0.7-r2?arch=x86&distro=3.17.1',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2024/04/08/5',
-                'https://access.redhat.com/errata/RHSA-2024:9333',
-                'https://access.redhat.com/security/cve/CVE-2024-2511',
-                'https://bugzilla.redhat.com/2274020',
-                'https://bugzilla.redhat.com/2281029',
-                'https://bugzilla.redhat.com/2283757',
-                'https://bugzilla.redhat.com/2294581',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2274020',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2281029',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2283757',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2294581',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-2511',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-4603',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-4741',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-5535',
-                'https://errata.almalinux.org/9/ALSA-2024-9333.html',
-                'https://errata.rockylinux.org/RLSA-2024:9333',
-                'https://github.com/openssl/openssl/commit/7e4d731b1c07201ad9374c1cd9ac5263bdf35bce',
-                'https://github.com/openssl/openssl/commit/b52867a9f618bb955bed2a3ce3db4d4f97ed8e5d',
-                'https://github.com/openssl/openssl/commit/e9d7083e241670332e0443da0f0d4ffb52829f08',
-                'https://github.openssl.org/openssl/extended-releases/commit/5f8d25770ae6437db119dfc951e207271a326640',
-                'https://linux.oracle.com/cve/CVE-2024-2511.html',
-                'https://linux.oracle.com/errata/ELSA-2024-9333.html',
-                'https://lists.debian.org/debian-lts-announce/2024/10/msg00033.html',
-                'https://lists.debian.org/debian-lts-announce/2024/11/msg00000.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2024-2511',
-                'https://security.netapp.com/advisory/ntap-20240503-0013/',
-                'https://ubuntu.com/security/notices/USN-6937-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2024-2511',
-                'https://www.openssl.org/news/secadv/20240408.txt',
-                'https://www.openssl.org/news/vulnerabilities.html'
-              ],
-              'severity':   'LOW',
-              'suppressed': false,
-              'title':      'openssl: Unbounded memory growth with session handling in TLSv1.3'
-            },
-            {
-              'cve':  'CVE-2024-9143',
-              'cvss': {
-                'redhat': {
-                  'v3score':  '3.7',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L'
-                }
-              },
-              'cwes': [
-                'CWE-125',
-                'CWE-787'
-              ],
-              'description':   "Issue summary: Use of the low-level GF(2^m) elliptic curve APIs with untrusted\nexplicit values for the field polynomial can lead to out-of-bounds memory reads\nor writes.\n\nImpact summary: Out of bound memory writes can lead to an application crash or\neven a possibility of a remote code execution, however, in all the protocols\ninvolving Elliptic Curve Cryptography that we're aware of, either only \"named\ncurves\" are supported, or, if explicit curve parameters are supported, they\nspecify an X9.62 encoding of binary (GF(2^m)) curves that can't represent\nproblematic input values. Thus the likelihood of existence of a vulnerable\napplication is low.\n\nIn particular, the X9.62 encoding is used for ECC keys in X.509 certificates,\nso problematic inputs cannot occur in the context of processing X.509\ncertificates.  Any problematic use-cases would have to be using an \"exotic\"\ncurve encoding.\n\nThe affected APIs include: EC_GROUP_new_curve_GF2m(), EC_GROUP_new_from_params(),\nand various supporting BN_GF2m_*() functions.\n\nApplications working with \"exotic\" explicit binary (GF(2^m)) curve parameters,\nthat make it possible to represent invalid field polynomials with a zero\nconstant term, via the above or similar APIs, may terminate abruptly as a\nresult of reading or writing outside of array bounds.  Remote code execution\ncannot easily be ruled out.\n\nThe FIPS modules in 3.3, 3.2, 3.1 and 3.0 are not affected by this issue.",
-              'diffID':        'sha256:253f1efcceb575705106468bdc1c875a7c9b2a734d4bcca3b1335946656d7acb',
-              'fixedVersions': [
-                '3.0.15-r1'
-              ],
-              'installedVersion': '3.0.7-r2',
-              'packageName':      'libssl3',
-              'purl':             'pkg:apk/alpine/libssl3@3.0.7-r2?arch=x86&distro=3.17.1',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2024/10/16/1',
-                'http://www.openwall.com/lists/oss-security/2024/10/23/1',
-                'http://www.openwall.com/lists/oss-security/2024/10/24/1',
-                'https://access.redhat.com/security/cve/CVE-2024-9143',
-                'https://github.com/openssl/openssl/commit/72ae83ad214d2eef262461365a1975707f862712',
-                'https://github.com/openssl/openssl/commit/bc7e04d7c8d509fb78fc0e285aa948fb0da04700',
-                'https://github.com/openssl/openssl/commit/c0d3e4d32d2805f49bec30547f225bc4d092e1f4',
-                'https://github.com/openssl/openssl/commit/fdf6723362ca51bd883295efe206cb5b1cfa5154',
-                'https://github.openssl.org/openssl/extended-releases/commit/8efc0cbaa8ebba8e116f7b81a876a4123594d86a',
-                'https://github.openssl.org/openssl/extended-releases/commit/9d576994cec2b7aa37a91740ea7e680810957e41',
-                'https://lists.debian.org/debian-lts-announce/2024/10/msg00033.html',
-                'https://lists.debian.org/debian-lts-announce/2024/11/msg00000.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2024-9143',
-                'https://openssl-library.org/news/secadv/20241016.txt',
-                'https://security.netapp.com/advisory/ntap-20241101-0001/',
-                'https://ubuntu.com/security/notices/USN-7264-1',
-                'https://ubuntu.com/security/notices/USN-7278-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2024-9143'
-              ],
-              'severity':   'LOW',
-              'suppressed': false,
-              'title':      'openssl: Low-level invalid GF(2^m) parameters lead to OOB memory access'
-            },
-            {
-              'cve':  'CVE-2025-26519',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-787'
-              ],
-              'description':   'musl libc 0.9.13 through 1.2.5 before 1.2.6 has an out-of-bounds write vulnerability when an attacker can trigger iconv conversion of untrusted EUC-KR text to UTF-8.',
-              'diffID':        'sha256:253f1efcceb575705106468bdc1c875a7c9b2a734d4bcca3b1335946656d7acb',
-              'fixedVersions': [
-                '1.2.3-r6'
-              ],
-              'installedVersion': '1.2.3-r4',
-              'packageName':      'musl',
-              'purl':             'pkg:apk/alpine/musl@1.2.3-r4?arch=x86&distro=3.17.1',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2025/02/13/2',
-                'http://www.openwall.com/lists/oss-security/2025/02/13/3',
-                'http://www.openwall.com/lists/oss-security/2025/02/13/4',
-                'http://www.openwall.com/lists/oss-security/2025/02/13/5',
-                'http://www.openwall.com/lists/oss-security/2025/02/14/5',
-                'http://www.openwall.com/lists/oss-security/2025/02/14/6',
-                'https://git.musl-libc.org/cgit/musl/commit/?id=c47ad25ea3b484e10326f933e927c0bc8cded3da',
-                'https://git.musl-libc.org/cgit/musl/commit/?id=e5adcd97b5196e29991b524237381a0202a60659',
-                'https://www.openwall.com/lists/oss-security/2025/02/13/2'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'musl libc 0.9.13 through 1.2.5 before 1.2.6 has an out-of-bounds write ...'
-            },
-            {
-              'cve':  'CVE-2025-26519',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-787'
-              ],
-              'description':   'musl libc 0.9.13 through 1.2.5 before 1.2.6 has an out-of-bounds write vulnerability when an attacker can trigger iconv conversion of untrusted EUC-KR text to UTF-8.',
-              'diffID':        'sha256:253f1efcceb575705106468bdc1c875a7c9b2a734d4bcca3b1335946656d7acb',
-              'fixedVersions': [
-                '1.2.3-r6'
-              ],
-              'installedVersion': '1.2.3-r4',
-              'packageName':      'musl-utils',
-              'purl':             'pkg:apk/alpine/musl-utils@1.2.3-r4?arch=x86&distro=3.17.1',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2025/02/13/2',
-                'http://www.openwall.com/lists/oss-security/2025/02/13/3',
-                'http://www.openwall.com/lists/oss-security/2025/02/13/4',
-                'http://www.openwall.com/lists/oss-security/2025/02/13/5',
-                'http://www.openwall.com/lists/oss-security/2025/02/14/5',
-                'http://www.openwall.com/lists/oss-security/2025/02/14/6',
-                'https://git.musl-libc.org/cgit/musl/commit/?id=c47ad25ea3b484e10326f933e927c0bc8cded3da',
-                'https://git.musl-libc.org/cgit/musl/commit/?id=e5adcd97b5196e29991b524237381a0202a60659',
-                'https://www.openwall.com/lists/oss-security/2025/02/13/2'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'musl libc 0.9.13 through 1.2.5 before 1.2.6 has an out-of-bounds write ...'
-            },
-            {
-              'cve':  'CVE-2023-42363',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.5',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.8',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   'A use-after-free vulnerability was discovered in xasprintf function in xfuncs_printf.c:344 in BusyBox v.1.36.1.',
-              'diffID':        'sha256:253f1efcceb575705106468bdc1c875a7c9b2a734d4bcca3b1335946656d7acb',
-              'fixedVersions': [
-                '1.35.0-r31'
-              ],
-              'installedVersion': '1.35.0-r29',
-              'packageName':      'ssl_client',
-              'purl':             'pkg:apk/alpine/ssl_client@1.35.0-r29?arch=x86&distro=3.17.1',
-              'references':       [
-                'http://lists.busybox.net/pipermail/busybox/2024-May/090760.html',
-                'https://access.redhat.com/security/cve/CVE-2023-42363',
-                'https://bugs.busybox.net/show_bug.cgi?id=15865',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-42363',
-                'https://ubuntu.com/security/notices/USN-6961-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-42363'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk'
-            },
-            {
-              'cve':  'CVE-2023-42364',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.5',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.8',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   'A use-after-free vulnerability in BusyBox v.1.36.1 allows attackers to cause a denial of service via a crafted awk pattern in the awk.c evaluate function.',
-              'diffID':        'sha256:253f1efcceb575705106468bdc1c875a7c9b2a734d4bcca3b1335946656d7acb',
-              'fixedVersions': [
-                '1.35.0-r31'
-              ],
-              'installedVersion': '1.35.0-r29',
-              'packageName':      'ssl_client',
-              'purl':             'pkg:apk/alpine/ssl_client@1.35.0-r29?arch=x86&distro=3.17.1',
-              'references':       [
-                'http://lists.busybox.net/pipermail/busybox/2024-May/090762.html',
-                'https://access.redhat.com/security/cve/CVE-2023-42364',
-                'https://bugs.busybox.net/show_bug.cgi?id=15868',
-                'https://gitlab.alpinelinux.org/alpine/aports/-/blob/master/main/busybox/CVE-2023-42364-CVE-2023-42365.patch',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-42364',
-                'https://ubuntu.com/security/notices/USN-6961-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-42364'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'busybox: use-after-free'
-            },
-            {
-              'cve':  'CVE-2023-42365',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.5',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.8',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   'A use-after-free vulnerability was discovered in BusyBox v.1.36.1 via a crafted awk pattern in the awk.c copyvar function.',
-              'diffID':        'sha256:253f1efcceb575705106468bdc1c875a7c9b2a734d4bcca3b1335946656d7acb',
-              'fixedVersions': [
-                '1.35.0-r31'
-              ],
-              'installedVersion': '1.35.0-r29',
-              'packageName':      'ssl_client',
-              'purl':             'pkg:apk/alpine/ssl_client@1.35.0-r29?arch=x86&distro=3.17.1',
-              'references':       [
-                'http://lists.busybox.net/pipermail/busybox/2024-May/090762.html',
-                'https://access.redhat.com/security/cve/CVE-2023-42365',
-                'https://bugs.busybox.net/show_bug.cgi?id=15871',
-                'https://gitlab.alpinelinux.org/alpine/aports/-/blob/master/main/busybox/CVE-2023-42364-CVE-2023-42365.patch',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-42365',
-                'https://ubuntu.com/security/notices/USN-6961-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-42365'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'busybox: use-after-free'
-            },
-            {
-              'cve':  'CVE-2023-42366',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.5',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.1',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-787'
-              ],
-              'description':   'A heap-buffer-overflow was discovered in BusyBox v.1.36.1 in the next_token function at awk.c:1159.',
-              'diffID':        'sha256:253f1efcceb575705106468bdc1c875a7c9b2a734d4bcca3b1335946656d7acb',
-              'fixedVersions': [
-                '1.35.0-r30'
-              ],
-              'installedVersion': '1.35.0-r29',
-              'packageName':      'ssl_client',
-              'purl':             'pkg:apk/alpine/ssl_client@1.35.0-r29?arch=x86&distro=3.17.1',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2023-42366',
-                'https://bugs.busybox.net/show_bug.cgi?id=15874',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-42366',
-                'https://security.netapp.com/advisory/ntap-20241206-0007/',
-                'https://www.cve.org/CVERecord?id=CVE-2023-42366'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'busybox: A heap-buffer-overflow'
-            }
-          ]
-        }
-      ],
-      'summary': {
-        'critical':   0,
-        'high':       20,
-        'low':        4,
-        'medium':     44,
-        'suppressed': 0,
-        'unknown':    0
-      }
-    }
-  },
-  {
-    'id':    'default/d487aaacd519c2855283601ba860f991825e36ee36ffd9cb437a0fa98c77e7f5',
-    'type':  'storage.sbomscanner.kubewarden.io.vulnerabilityreport',
-    'links': {
-      'patch':  'https://localhost:8005/v1/storage.sbomscanner.kubewarden.io.vulnerabilityreports/default/d487aaacd519c2855283601ba860f991825e36ee36ffd9cb437a0fa98c77e7f5',
-      'remove': 'https://localhost:8005/v1/storage.sbomscanner.kubewarden.io.vulnerabilityreports/default/d487aaacd519c2855283601ba860f991825e36ee36ffd9cb437a0fa98c77e7f5',
-      'self':   'https://localhost:8005/v1/storage.sbomscanner.kubewarden.io.vulnerabilityreports/default/d487aaacd519c2855283601ba860f991825e36ee36ffd9cb437a0fa98c77e7f5',
-      'update': 'https://localhost:8005/v1/storage.sbomscanner.kubewarden.io.vulnerabilityreports/default/d487aaacd519c2855283601ba860f991825e36ee36ffd9cb437a0fa98c77e7f5',
-      'view':   'https://localhost:8005/apis/storage.sbomscanner.kubewarden.io/v1alpha1/namespaces/default/vulnerabilityreports/d487aaacd519c2855283601ba860f991825e36ee36ffd9cb437a0fa98c77e7f5'
-    },
-    '_id':           'default/d487aaacd519c2855283601ba860f991825e36ee36ffd9cb437a0fa98c77e7f5',
-    'apiVersion':    'storage.sbomscanner.kubewarden.io/v1alpha1',
-    'imageMetadata': {
-      'digest':      'sha256:29a82d50bdb8dd7814009852c1773fb9bb300d2f655bd1cd9e764e7bb1412be3',
-      'platform':    'linux/arm/v6',
-      'registry':    'lsong-demo1',
-      'registryURI': 'registry-1.docker.io',
-      'repository':  'library/alpine',
-      'tag':         '3.10.3'
-    },
-    'kind':     'VulnerabilityReport',
-    'metadata': {
-      'creationTimestamp': '2026-01-14T18:52:06Z',
-      'fields':            [
-        'd487aaacd519c2855283601ba860f991825e36ee36ffd9cb437a0fa98c77e7f5',
-        'registry-1.docker.io/library/alpine:3.10.3',
-        'linux/arm/v6',
-        '22 (0 suppressed)'
-      ],
-      'labels': {
-        'app.kubernetes.io/managed-by':          'sbomscanner',
-        'app.kubernetes.io/part-of':             'sbomscanner',
-        'sbomscanner.kubewarden.io/scanjob-uid': '445c600a-c4b6-40b3-bd71-f2d2140a37d5'
-      },
-      'managedFields': [
-        {
-          'apiVersion': 'storage.sbomscanner.kubewarden.io/v1alpha1',
-          'fieldsType': 'FieldsV1',
-          'fieldsV1':   {
-            'f:imageMetadata': {
-              'f:digest':      {},
-              'f:platform':    {},
-              'f:registry':    {},
-              'f:registryURI': {},
-              'f:repository':  {},
-              'f:tag':         {}
-            },
-            'f:metadata': {
-              'f:labels': {
-                '.':                                       {},
-                'f:app.kubernetes.io/managed-by':          {},
-                'f:app.kubernetes.io/part-of':             {},
-                'f:sbomscanner.kubewarden.io/scanjob-uid': {}
-              },
-              'f:ownerReferences': {
-                '.':                                                {},
-                'k:{"uid":"a632a210-c45b-4c2a-a376-e28a5f1eaf97"}': {}
-              }
-            },
-            'f:report': {
-              'f:results': {},
-              'f:summary': {
-                'f:critical': {},
-                'f:high':     {},
-                'f:low':      {},
-                'f:medium':   {}
-              }
-            }
-          },
-          'manager':   'worker',
-          'operation': 'Update',
-          'time':      '2026-01-14T18:52:06Z'
-        }
-      ],
-      'name':            'd487aaacd519c2855283601ba860f991825e36ee36ffd9cb437a0fa98c77e7f5',
-      'namespace':       'default',
-      'ownerReferences': [
-        {
-          'apiVersion':         'storage.sbomscanner.kubewarden.io/v1alpha1',
-          'blockOwnerDeletion': true,
-          'controller':         true,
-          'kind':               'SBOM',
-          'name':               'd487aaacd519c2855283601ba860f991825e36ee36ffd9cb437a0fa98c77e7f5',
-          'uid':                'a632a210-c45b-4c2a-a376-e28a5f1eaf97'
-        }
-      ],
-      'relationships': [
-        {
-          'fromId':   'default/d487aaacd519c2855283601ba860f991825e36ee36ffd9cb437a0fa98c77e7f5',
-          'fromType': 'storage.sbomscanner.kubewarden.io.sbom',
-          'rel':      'owner',
-          'state':    'active',
-          'message':  'Resource is current'
-        }
-      ],
-      'resourceVersion': '1',
-      'state':           {
-        'error':         false,
-        'message':       'Resource is current',
-        'name':          'active',
-        'transitioning': false
-      },
-      'uid': 'abfb16f5-c3c9-48b0-9318-4ab9ca53783f'
-    },
-    'report': {
-      'results': [
-        {
-          'class':           'os-pkgs',
-          'target':          '/var/run/worker/trivy.sbom.412406627.json (alpine 3.10.3)',
-          'type':            'alpine',
-          'vulnerabilities': [
-            {
-              'cve':  'CVE-2021-36159',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '9.1',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '9.1',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-125'
-              ],
-              'description':   "libfetch before 2021-07-26, as used in apk-tools, xbps, and other products, mishandles numeric strings for the FTP and HTTP protocols. The FTP passive mode implementation allows an out-of-bounds read because strtol is used to parse the relevant numbers into address bytes. It does not check if the line ends prematurely. If it does, the for-loop condition checks for the '\\0' terminator one byte too late.",
-              'diffID':        'sha256:4896c4b6487e7a5bb605dc7321c82ee3ed0c5a0f2255f3c64ebb0e3e99f2c155',
-              'fixedVersions': [
-                '2.10.7-r0'
-              ],
-              'installedVersion': '2.10.4-r2',
-              'packageName':      'apk-tools',
-              'purl':             'pkg:apk/alpine/apk-tools@2.10.4-r2?arch=armhf&distro=3.10.3',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-36159',
-                'https://github.com/freebsd/freebsd-src/commits/main/lib/libfetch',
-                'https://gitlab.alpinelinux.org/alpine/apk-tools/-/issues/10749',
-                'https://lists.apache.org/thread.html/r61db8e7dcb56dc000a5387a88f7a473bacec5ee01b9ff3f55308aacc%40%3Cdev.kafka.apache.org%3E',
-                'https://lists.apache.org/thread.html/r61db8e7dcb56dc000a5387a88f7a473bacec5ee01b9ff3f55308aacc%40%3Cusers.kafka.apache.org%3E',
-                'https://lists.apache.org/thread.html/rbf4ce74b0d1fa9810dec50ba3ace0caeea677af7c27a97111c06ccb7%40%3Cdev.kafka.apache.org%3E',
-                'https://lists.apache.org/thread.html/rbf4ce74b0d1fa9810dec50ba3ace0caeea677af7c27a97111c06ccb7%40%3Cusers.kafka.apache.org%3E',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-36159',
-                'https://www.cve.org/CVERecord?id=CVE-2021-36159'
-              ],
-              'severity':   'CRITICAL',
-              'suppressed': false,
-              'title':      'libfetch: an out of boundary read while libfetch uses strtol to parse the relevant numbers into address bytes leads to information leak or crash'
-            },
-            {
-              'cve':  'CVE-2021-30139',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-125'
-              ],
-              'description':   'In Alpine Linux apk-tools before 2.12.5, the tarball parser allows a buffer overflow and crash.',
-              'diffID':        'sha256:4896c4b6487e7a5bb605dc7321c82ee3ed0c5a0f2255f3c64ebb0e3e99f2c155',
-              'fixedVersions': [
-                '2.10.6-r0'
-              ],
-              'installedVersion': '2.10.4-r2',
-              'packageName':      'apk-tools',
-              'purl':             'pkg:apk/alpine/apk-tools@2.10.4-r2?arch=armhf&distro=3.10.3',
-              'references':       [
-                'https://gitlab.alpinelinux.org/alpine/apk-tools/-/issues/10741',
-                'https://gitlab.alpinelinux.org/alpine/aports/-/issues/12606'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false
-            },
-            {
-              'cve':  'CVE-2021-28831',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-755'
-              ],
-              'description':   'decompress_gunzip.c in BusyBox through 1.32.1 mishandles the error bit on the huft_build result pointer, with a resultant invalid free or segmentation fault, via malformed gzip data.',
-              'diffID':        'sha256:4896c4b6487e7a5bb605dc7321c82ee3ed0c5a0f2255f3c64ebb0e3e99f2c155',
-              'fixedVersions': [
-                '1.30.1-r5'
-              ],
-              'installedVersion': '1.30.1-r2',
-              'packageName':      'busybox',
-              'purl':             'pkg:apk/alpine/busybox@1.30.1-r2?arch=armhf&distro=3.10.3',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-28831',
-                'https://git.busybox.net/busybox/commit/?id=f25d254dfd4243698c31a4f3153d4ac72aa9e9bd',
-                'https://lists.debian.org/debian-lts-announce/2021/04/msg00001.html',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/3UDQGJRECXFS5EZVDH2OI45FMO436AC4/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/Z7ZIFKPRR32ZYA3WAA2NXFA3QHHOU6FJ/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZASBW7QRRLY5V2R44MQ4QQM4CZIDHM2U/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-28831',
-                'https://security.gentoo.org/glsa/202105-09',
-                'https://security.netapp.com/advisory/ntap-20250509-0005/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://ubuntu.com/security/notices/USN-5179-2',
-                'https://ubuntu.com/security/notices/USN-6335-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-28831'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: invalid free or segmentation fault via malformed gzip data'
-            },
-            {
-              'cve':  'CVE-2020-1967',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'nvd': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-476'
-              ],
-              'description':   'Server or client applications that call the SSL_check_chain() function during or after a TLS 1.3 handshake may crash due to a NULL pointer dereference as a result of incorrect handling of the "signature_algorithms_cert" TLS extension. The crash occurs if an invalid or unrecognised signature algorithm is received from the peer. This could be exploited by a malicious peer in a Denial of Service attack. OpenSSL version 1.1.1d, 1.1.1e, and 1.1.1f are affected by this issue. This issue did not affect OpenSSL versions prior to 1.1.1d. Fixed in OpenSSL 1.1.1g (Affected 1.1.1d-1.1.1f).',
-              'diffID':        'sha256:4896c4b6487e7a5bb605dc7321c82ee3ed0c5a0f2255f3c64ebb0e3e99f2c155',
-              'fixedVersions': [
-                '1.1.1g-r0'
-              ],
-              'installedVersion': '1.1.1d-r0',
-              'packageName':      'libcrypto1.1',
-              'purl':             'pkg:apk/alpine/libcrypto1.1@1.1.1d-r0?arch=armhf&distro=3.10.3',
-              'references':       [
-                'http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00004.html',
-                'http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00011.html',
-                'http://packetstormsecurity.com/files/157527/OpenSSL-signature_algorithms_cert-Denial-Of-Service.html',
-                'http://seclists.org/fulldisclosure/2020/May/5',
-                'http://www.openwall.com/lists/oss-security/2020/04/22/2',
-                'https://access.redhat.com/security/cve/CVE-2020-1967',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=eb563247aef3e83dda7679c43f9649270462e5b1',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=eb563247aef3e83dda7679c43f9649270462e5b1',
-                'https://github.com/irsl/CVE-2020-1967',
-                'https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA44440',
-                'https://lists.apache.org/thread.html/r66ea9c436da150683432db5fbc8beb8ae01886c6459ac30c2cea7345%40%3Cdev.tomcat.apache.org%3E',
-                'https://lists.apache.org/thread.html/r66ea9c436da150683432db5fbc8beb8ae01886c6459ac30c2cea7345@%3Cdev.tomcat.apache.org%3E',
-                'https://lists.apache.org/thread.html/r94d6ac3f010a38fccf4f432b12180a13fa1cf303559bd805648c9064%40%3Cdev.tomcat.apache.org%3E',
-                'https://lists.apache.org/thread.html/r94d6ac3f010a38fccf4f432b12180a13fa1cf303559bd805648c9064@%3Cdev.tomcat.apache.org%3E',
-                'https://lists.apache.org/thread.html/r9a41e304992ce6aec6585a87842b4f2e692604f5c892c37e3b0587ee%40%3Cdev.tomcat.apache.org%3E',
-                'https://lists.apache.org/thread.html/r9a41e304992ce6aec6585a87842b4f2e692604f5c892c37e3b0587ee@%3Cdev.tomcat.apache.org%3E',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DDHOAATPWJCXRNFMJ2SASDBBNU5RJONY/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/EXDDAOWSAIEFQNBHWYE6PPYFV4QXGMCD/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/XVEP3LAK4JSPRXFO4QF4GG2IVXADV3SO/',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/DDHOAATPWJCXRNFMJ2SASDBBNU5RJONY',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/EXDDAOWSAIEFQNBHWYE6PPYFV4QXGMCD',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/XVEP3LAK4JSPRXFO4QF4GG2IVXADV3SO',
-                'https://nvd.nist.gov/vuln/detail/CVE-2020-1967',
-                'https://rustsec.org/advisories/RUSTSEC-2020-0015.html',
-                'https://security.FreeBSD.org/advisories/FreeBSD-SA-20:11.openssl.asc',
-                'https://security.gentoo.org/glsa/202004-10',
-                'https://security.netapp.com/advisory/ntap-20200424-0003',
-                'https://security.netapp.com/advisory/ntap-20200424-0003/',
-                'https://security.netapp.com/advisory/ntap-20200717-0004',
-                'https://security.netapp.com/advisory/ntap-20200717-0004/',
-                'https://www.cve.org/CVERecord?id=CVE-2020-1967',
-                'https://www.debian.org/security/2020/dsa-4661',
-                'https://www.openssl.org/news/secadv/20200421.txt',
-                'https://www.oracle.com//security-alerts/cpujul2021.html',
-                'https://www.oracle.com/security-alerts/cpuApr2021.html',
-                'https://www.oracle.com/security-alerts/cpujan2021.html',
-                'https://www.oracle.com/security-alerts/cpujul2020.html',
-                'https://www.oracle.com/security-alerts/cpuoct2020.html',
-                'https://www.oracle.com/security-alerts/cpuoct2021.html',
-                'https://www.synology.com/security/advisory/Synology_SA_20_05',
-                'https://www.synology.com/security/advisory/Synology_SA_20_05_OpenSSL',
-                'https://www.tenable.com/security/tns-2020-03',
-                'https://www.tenable.com/security/tns-2020-04',
-                'https://www.tenable.com/security/tns-2020-11',
-                'https://www.tenable.com/security/tns-2021-10'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: Segmentation fault in SSL_check_chain causes denial of service'
-            },
-            {
-              'cve':  'CVE-2021-23840',
-              'cvss': {
-                'bitnami': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'ghsa': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'nvd': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-190'
-              ],
-              'description':   'Calls to EVP_CipherUpdate, EVP_EncryptUpdate and EVP_DecryptUpdate may overflow the output length argument in some cases where the input length is close to the maximum permissable length for an integer on the platform. In such cases the return value from the function call will be 1 (indicating success), but the output length value will be negative. This could cause applications to behave incorrectly or crash. OpenSSL versions 1.1.1i and below are affected by this issue. Users of these versions should upgrade to OpenSSL 1.1.1j. OpenSSL versions 1.0.2x and below are affected by this issue. However OpenSSL 1.0.2 is out of support and no longer receiving public updates. Premium support customers of OpenSSL 1.0.2 should upgrade to 1.0.2y. Other users should upgrade to 1.1.1j. Fixed in OpenSSL 1.1.1j (Affected 1.1.1-1.1.1i). Fixed in OpenSSL 1.0.2y (Affected 1.0.2-1.0.2x).',
-              'diffID':        'sha256:4896c4b6487e7a5bb605dc7321c82ee3ed0c5a0f2255f3c64ebb0e3e99f2c155',
-              'fixedVersions': [
-                '1.1.1j-r0'
-              ],
-              'installedVersion': '1.1.1d-r0',
-              'packageName':      'libcrypto1.1',
-              'purl':             'pkg:apk/alpine/libcrypto1.1@1.1.1d-r0?arch=armhf&distro=3.10.3',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-23840',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=1908036',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=1930310',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=1930324',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=1934534',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=1934600',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=1939637',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=1940085',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=1965362',
-                'https://cert-portal.siemens.com/productcert/pdf/ssa-389290.pdf',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-23840',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-23841',
-                'https://errata.rockylinux.org/RLSA-2021:4424',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=6a51b9e1d0cf0bf8515f7201b68fb0a3482b3dc1',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=9b1129239f3ebb1d1c98ce9ed41d5c9476c47cb2',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=6a51b9e1d0cf0bf8515f7201b68fb0a3482b3dc1',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=9b1129239f3ebb1d1c98ce9ed41d5c9476c47cb2',
-                'https://github.com/alexcrichton/openssl-src-rs',
-                'https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA44846',
-                'https://kc.mcafee.com/corporate/index?page=content&id=SB10366',
-                'https://linux.oracle.com/cve/CVE-2021-23840.html',
-                'https://linux.oracle.com/errata/ELSA-2021-9561.html',
-                'https://lists.apache.org/thread.html/r58af02e294bd07f487e2c64ffc0a29b837db5600e33b6e698b9d696b%40%3Cissues.bookkeeper.apache.org%3E',
-                'https://lists.apache.org/thread.html/r58af02e294bd07f487e2c64ffc0a29b837db5600e33b6e698b9d696b@%3Cissues.bookkeeper.apache.org%3E',
-                'https://lists.apache.org/thread.html/rf4c02775860db415b4955778a131c2795223f61cb8c6a450893651e4%40%3Cissues.bookkeeper.apache.org%3E',
-                'https://lists.apache.org/thread.html/rf4c02775860db415b4955778a131c2795223f61cb8c6a450893651e4@%3Cissues.bookkeeper.apache.org%3E',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-23840',
-                'https://rustsec.org/advisories/RUSTSEC-2021-0057.html',
-                'https://security.gentoo.org/glsa/202103-03',
-                'https://security.netapp.com/advisory/ntap-20210219-0009',
-                'https://security.netapp.com/advisory/ntap-20210219-0009/',
-                'https://security.netapp.com/advisory/ntap-20240621-0006/',
-                'https://ubuntu.com/security/notices/USN-4738-1',
-                'https://ubuntu.com/security/notices/USN-5088-1',
-                'https://ubuntu.com/security/notices/USN-7018-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-23840',
-                'https://www.debian.org/security/2021/dsa-4855',
-                'https://www.openssl.org/news/secadv/20210216.txt',
-                'https://www.oracle.com//security-alerts/cpujul2021.html',
-                'https://www.oracle.com/security-alerts/cpuApr2021.html',
-                'https://www.oracle.com/security-alerts/cpuapr2022.html',
-                'https://www.oracle.com/security-alerts/cpujan2022.html',
-                'https://www.oracle.com/security-alerts/cpuoct2021.html',
-                'https://www.tenable.com/security/tns-2021-03',
-                'https://www.tenable.com/security/tns-2021-09',
-                'https://www.tenable.com/security/tns-2021-10'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: integer overflow in CipherUpdate'
-            },
-            {
-              'cve':  'CVE-2021-3450',
-              'cvss': {
-                'bitnami': {
-                  'v3score':  '7.4',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N'
-                },
-                'ghsa': {
-                  'v3score':  '7.4',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N'
-                },
-                'nvd': {
-                  'v3score':  '7.4',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N'
-                },
-                'redhat': {
-                  'v3score':  '7.4',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-295'
-              ],
-              'description':   'The X509_V_FLAG_X509_STRICT flag enables additional security checks of the certificates present in a certificate chain. It is not set by default. Starting from OpenSSL version 1.1.1h a check to disallow certificates in the chain that have explicitly encoded elliptic curve parameters was added as an additional strict check. An error in the implementation of this check meant that the result of a previous check to confirm that certificates in the chain are valid CA certificates was overwritten. This effectively bypasses the check that non-CA certificates must not be able to issue other certificates. If a "purpose" has been configured then there is a subsequent opportunity for checks that the certificate is a valid CA. All of the named "purpose" values implemented in libcrypto perform this check. Therefore, where a purpose is set the certificate chain will still be rejected even when the strict flag has been used. A purpose is set by default in libssl client and server certificate verification routines, but it can be overridden or removed by an application. In order to be affected, an application must explicitly set the X509_V_FLAG_X509_STRICT verification flag and either not set a purpose for the certificate verification or, in the case of TLS client or server applications, override the default purpose. OpenSSL versions 1.1.1h and newer are affected by this issue. Users of these versions should upgrade to OpenSSL 1.1.1k. OpenSSL 1.0.2 is not impacted by this issue. Fixed in OpenSSL 1.1.1k (Affected 1.1.1h-1.1.1j).',
-              'diffID':        'sha256:4896c4b6487e7a5bb605dc7321c82ee3ed0c5a0f2255f3c64ebb0e3e99f2c155',
-              'fixedVersions': [
-                '1.1.1k-r0'
-              ],
-              'installedVersion': '1.1.1d-r0',
-              'packageName':      'libcrypto1.1',
-              'purl':             'pkg:apk/alpine/libcrypto1.1@1.1.1d-r0?arch=armhf&distro=3.10.3',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2021/03/27/1',
-                'http://www.openwall.com/lists/oss-security/2021/03/27/2',
-                'http://www.openwall.com/lists/oss-security/2021/03/28/3',
-                'http://www.openwall.com/lists/oss-security/2021/03/28/4',
-                'https://access.redhat.com/security/cve/CVE-2021-3450',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=1941547',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=1941554',
-                'https://cert-portal.siemens.com/productcert/pdf/ssa-389290.pdf',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-3449',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-3450',
-                'https://errata.rockylinux.org/RLSA-2021:1024',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=2a40b7bc7b94dd7de897a74571e7024f0cf0d63b',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=2a40b7bc7b94dd7de897a74571e7024f0cf0d63b',
-                'https://github.com/alexcrichton/openssl-src-rs',
-                'https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA44845',
-                'https://kc.mcafee.com/corporate/index?page=content&id=SB10356',
-                'https://linux.oracle.com/cve/CVE-2021-3450.html',
-                'https://linux.oracle.com/errata/ELSA-2021-9151.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CCBFLLVQVILIVGZMBJL3IXZGKWQISYNP/',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/CCBFLLVQVILIVGZMBJL3IXZGKWQISYNP',
-                'https://mta.openssl.org/pipermail/openssl-announce/2021-March/000198.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-3450',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2021-0013',
-                'https://rustsec.org/advisories/RUSTSEC-2021-0056.html',
-                'https://security.FreeBSD.org/advisories/FreeBSD-SA-21:07.openssl.asc',
-                'https://security.gentoo.org/glsa/202103-03',
-                'https://security.netapp.com/advisory/ntap-20210326-0006',
-                'https://security.netapp.com/advisory/ntap-20210326-0006/',
-                'https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-openssl-2021-GHY28dJd',
-                'https://www.cve.org/CVERecord?id=CVE-2021-3450',
-                'https://www.openssl.org/news/secadv/20210325.txt',
-                'https://www.oracle.com//security-alerts/cpujul2021.html',
-                'https://www.oracle.com/security-alerts/cpuApr2021.html',
-                'https://www.oracle.com/security-alerts/cpuapr2022.html',
-                'https://www.oracle.com/security-alerts/cpujul2022.html',
-                'https://www.oracle.com/security-alerts/cpuoct2021.html',
-                'https://www.tenable.com/security/tns-2021-05',
-                'https://www.tenable.com/security/tns-2021-08',
-                'https://www.tenable.com/security/tns-2021-09'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: CA certificate check bypass with X509_V_FLAG_X509_STRICT'
-            },
-            {
-              'cve':  'CVE-2019-1551',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N'
-                },
-                'redhat': {
-                  'v3score':  '4.8',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-190'
-              ],
-              'description':   'There is an overflow bug in the x64_64 Montgomery squaring procedure used in exponentiation with 512-bit moduli. No EC algorithms are affected. Analysis suggests that attacks against 2-prime RSA1024, 3-prime RSA1536, and DSA1024 as a result of this defect would be very difficult to perform and are not believed likely. Attacks against DH512 are considered just feasible. However, for an attack the target would have to re-use the DH512 private key, which is not recommended anyway. Also applications directly using the low level API BN_mod_exp may be affected if they use BN_FLG_CONSTTIME. Fixed in OpenSSL 1.1.1e (Affected 1.1.1-1.1.1d). Fixed in OpenSSL 1.0.2u (Affected 1.0.2-1.0.2t).',
-              'diffID':        'sha256:4896c4b6487e7a5bb605dc7321c82ee3ed0c5a0f2255f3c64ebb0e3e99f2c155',
-              'fixedVersions': [
-                '1.1.1d-r2'
-              ],
-              'installedVersion': '1.1.1d-r0',
-              'packageName':      'libcrypto1.1',
-              'purl':             'pkg:apk/alpine/libcrypto1.1@1.1.1d-r0?arch=armhf&distro=3.10.3',
-              'references':       [
-                'http://lists.opensuse.org/opensuse-security-announce/2020-01/msg00030.html',
-                'http://packetstormsecurity.com/files/155754/Slackware-Security-Advisory-openssl-Updates.html',
-                'https://access.redhat.com/security/cve/CVE-2019-1551',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=419102400a2811582a7a3d4a4e317d72e5ce0a8f',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=f1c5eea8a817075d31e43f5876993c6710238c98',
-                'https://github.com/openssl/openssl/pull/10575',
-                'https://linux.oracle.com/cve/CVE-2019-1551.html',
-                'https://linux.oracle.com/errata/ELSA-2020-4514.html',
-                'https://lists.debian.org/debian-lts-announce/2022/03/msg00023.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DDHOAATPWJCXRNFMJ2SASDBBNU5RJONY/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/EXDDAOWSAIEFQNBHWYE6PPYFV4QXGMCD/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/XVEP3LAK4JSPRXFO4QF4GG2IVXADV3SO/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2019-1551',
-                'https://seclists.org/bugtraq/2019/Dec/39',
-                'https://seclists.org/bugtraq/2019/Dec/46',
-                'https://security.gentoo.org/glsa/202004-10',
-                'https://security.netapp.com/advisory/ntap-20191210-0001/',
-                'https://ubuntu.com/security/notices/USN-4376-1',
-                'https://ubuntu.com/security/notices/USN-4504-1',
-                'https://usn.ubuntu.com/4376-1/',
-                'https://usn.ubuntu.com/4504-1/',
-                'https://www.cve.org/CVERecord?id=CVE-2019-1551',
-                'https://www.debian.org/security/2019/dsa-4594',
-                'https://www.debian.org/security/2021/dsa-4855',
-                'https://www.openssl.org/news/secadv/20191206.txt',
-                'https://www.oracle.com/security-alerts/cpuApr2021.html',
-                'https://www.oracle.com/security-alerts/cpujan2021.html',
-                'https://www.oracle.com/security-alerts/cpujul2020.html',
-                'https://www.tenable.com/security/tns-2019-09',
-                'https://www.tenable.com/security/tns-2020-03',
-                'https://www.tenable.com/security/tns-2020-11',
-                'https://www.tenable.com/security/tns-2021-10'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: Integer overflow in RSAZ modular exponentiation on x86_64'
-            },
-            {
-              'cve':  'CVE-2020-1971',
-              'cvss': {
-                'bitnami': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'nvd': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-476'
-              ],
-              'description':   "The X.509 GeneralName type is a generic type for representing different types of names. One of those name types is known as EDIPartyName. OpenSSL provides a function GENERAL_NAME_cmp which compares different instances of a GENERAL_NAME to see if they are equal or not. This function behaves incorrectly when both GENERAL_NAMEs contain an EDIPARTYNAME. A NULL pointer dereference and a crash may occur leading to a possible denial of service attack. OpenSSL itself uses the GENERAL_NAME_cmp function for two purposes: 1) Comparing CRL distribution point names between an available CRL and a CRL distribution point embedded in an X509 certificate 2) When verifying that a timestamp response token signer matches the timestamp authority name (exposed via the API functions TS_RESP_verify_response and TS_RESP_verify_token) If an attacker can control both items being compared then that attacker could trigger a crash. For example if the attacker can trick a client or server into checking a malicious certificate against a malicious CRL then this may occur. Note that some applications automatically download CRLs based on a URL embedded in a certificate. This checking happens prior to the signatures on the certificate and CRL being verified. OpenSSL's s_server, s_client and verify tools have support for the \"-crl_download\" option which implements automatic CRL downloading and this attack has been demonstrated to work against those tools. Note that an unrelated bug means that affected versions of OpenSSL cannot parse or construct correct encodings of EDIPARTYNAME. However it is possible to construct a malformed EDIPARTYNAME that OpenSSL's parser will accept and hence trigger this attack. All OpenSSL 1.1.1 and 1.0.2 versions are affected by this issue. Other OpenSSL releases are out of support and have not been checked. Fixed in OpenSSL 1.1.1i (Affected 1.1.1-1.1.1h). Fixed in OpenSSL 1.0.2x (Affected 1.0.2-1.0.2w).",
-              'diffID':        'sha256:4896c4b6487e7a5bb605dc7321c82ee3ed0c5a0f2255f3c64ebb0e3e99f2c155',
-              'fixedVersions': [
-                '1.1.1i-r0'
-              ],
-              'installedVersion': '1.1.1d-r0',
-              'packageName':      'libcrypto1.1',
-              'purl':             'pkg:apk/alpine/libcrypto1.1@1.1.1d-r0?arch=armhf&distro=3.10.3',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2021/09/14/2',
-                'https://access.redhat.com/security/cve/CVE-2020-1971',
-                'https://cert-portal.siemens.com/productcert/pdf/ssa-389290.pdf',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=2154ab83e14ede338d2ede9bbe5cdfce5d5a6c9e',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=f960d81215ebf3f65e03d4d5d857fb9b666d6920',
-                'https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA44676',
-                'https://linux.oracle.com/cve/CVE-2020-1971.html',
-                'https://linux.oracle.com/errata/ELSA-2021-9150.html',
-                'https://lists.apache.org/thread.html/r63c6f2dd363d9b514d0a4bcf624580616a679898cc14c109a49b750c%40%3Cdev.tomcat.apache.org%3E',
-                'https://lists.apache.org/thread.html/rbb769f771711fb274e0a4acb1b5911c8aab544a6ac5e8c12d40c5143%40%3Ccommits.pulsar.apache.org%3E',
-                'https://lists.debian.org/debian-lts-announce/2020/12/msg00020.html',
-                'https://lists.debian.org/debian-lts-announce/2020/12/msg00021.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DGSI34Y5LQ5RYXN4M2I5ZQT65LFVDOUU/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PWPSSZNZOBJU2YR6Z4TGHXKYW3YP5QG7/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2020-1971',
-                'https://security.FreeBSD.org/advisories/FreeBSD-SA-20:33.openssl.asc',
-                'https://security.gentoo.org/glsa/202012-13',
-                'https://security.netapp.com/advisory/ntap-20201218-0005/',
-                'https://security.netapp.com/advisory/ntap-20210513-0002/',
-                'https://security.netapp.com/advisory/ntap-20240621-0006/',
-                'https://ubuntu.com/security/notices/USN-4662-1',
-                'https://ubuntu.com/security/notices/USN-4745-1',
-                'https://www.cve.org/CVERecord?id=CVE-2020-1971',
-                'https://www.debian.org/security/2020/dsa-4807',
-                'https://www.openssl.org/news/secadv/20201208.txt',
-                'https://www.oracle.com//security-alerts/cpujul2021.html',
-                'https://www.oracle.com/security-alerts/cpuApr2021.html',
-                'https://www.oracle.com/security-alerts/cpuapr2022.html',
-                'https://www.oracle.com/security-alerts/cpujan2021.html',
-                'https://www.oracle.com/security-alerts/cpuoct2021.html',
-                'https://www.tenable.com/security/tns-2020-11',
-                'https://www.tenable.com/security/tns-2021-09',
-                'https://www.tenable.com/security/tns-2021-10'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: EDIPARTYNAME NULL pointer de-reference'
-            },
-            {
-              'cve':  'CVE-2021-23841',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'nvd': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-476'
-              ],
-              'description':   'The OpenSSL public API function X509_issuer_and_serial_hash() attempts to create a unique hash value based on the issuer and serial number data contained within an X509 certificate. However it fails to correctly handle any errors that may occur while parsing the issuer field (which might occur if the issuer field is maliciously constructed). This may subsequently result in a NULL pointer deref and a crash leading to a potential denial of service attack. The function X509_issuer_and_serial_hash() is never directly called by OpenSSL itself so applications are only vulnerable if they use this function directly and they use it on certificates that may have been obtained from untrusted sources. OpenSSL versions 1.1.1i and below are affected by this issue. Users of these versions should upgrade to OpenSSL 1.1.1j. OpenSSL versions 1.0.2x and below are affected by this issue. However OpenSSL 1.0.2 is out of support and no longer receiving public updates. Premium support customers of OpenSSL 1.0.2 should upgrade to 1.0.2y. Other users should upgrade to 1.1.1j. Fixed in OpenSSL 1.1.1j (Affected 1.1.1-1.1.1i). Fixed in OpenSSL 1.0.2y (Affected 1.0.2-1.0.2x).',
-              'diffID':        'sha256:4896c4b6487e7a5bb605dc7321c82ee3ed0c5a0f2255f3c64ebb0e3e99f2c155',
-              'fixedVersions': [
-                '1.1.1j-r0'
-              ],
-              'installedVersion': '1.1.1d-r0',
-              'packageName':      'libcrypto1.1',
-              'purl':             'pkg:apk/alpine/libcrypto1.1@1.1.1d-r0?arch=armhf&distro=3.10.3',
-              'references':       [
-                'http://seclists.org/fulldisclosure/2021/May/67',
-                'http://seclists.org/fulldisclosure/2021/May/68',
-                'http://seclists.org/fulldisclosure/2021/May/70',
-                'https://access.redhat.com/security/cve/CVE-2021-23841',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=1908036',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=1930310',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=1930324',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=1934534',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=1934600',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=1939637',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=1940085',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=1965362',
-                'https://cert-portal.siemens.com/productcert/pdf/ssa-637483.pdf',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-23840',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-23841',
-                'https://errata.rockylinux.org/RLSA-2021:4424',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=122a19ab48091c657f7cb1fb3af9fc07bd557bbf',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=8252ee4d90f3f2004d3d0aeeed003ad49c9a7807',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=122a19ab48091c657f7cb1fb3af9fc07bd557bbf',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=6a51b9e1d0cf0bf8515f7201b68fb0a3482b3dc1',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=8252ee4d90f3f2004d3d0aeeed003ad49c9a7807',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=9b1129239f3ebb1d1c98ce9ed41d5c9476c47cb2',
-                'https://github.com/alexcrichton/openssl-src-rs',
-                'https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA44846',
-                'https://linux.oracle.com/cve/CVE-2021-23841.html',
-                'https://linux.oracle.com/errata/ELSA-2021-9561.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-23841',
-                'https://rustsec.org/advisories/RUSTSEC-2021-0058',
-                'https://rustsec.org/advisories/RUSTSEC-2021-0058.html',
-                'https://security.gentoo.org/glsa/202103-03',
-                'https://security.netapp.com/advisory/ntap-20210219-0009',
-                'https://security.netapp.com/advisory/ntap-20210219-0009/',
-                'https://security.netapp.com/advisory/ntap-20210513-0002',
-                'https://security.netapp.com/advisory/ntap-20210513-0002/',
-                'https://security.netapp.com/advisory/ntap-20240621-0006/',
-                'https://support.apple.com/kb/HT212528',
-                'https://support.apple.com/kb/HT212529',
-                'https://support.apple.com/kb/HT212534',
-                'https://ubuntu.com/security/notices/USN-4738-1',
-                'https://ubuntu.com/security/notices/USN-4745-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-23841',
-                'https://www.debian.org/security/2021/dsa-4855',
-                'https://www.openssl.org/news/secadv/20210216.txt',
-                'https://www.oracle.com//security-alerts/cpujul2021.html',
-                'https://www.oracle.com/security-alerts/cpuApr2021.html',
-                'https://www.oracle.com/security-alerts/cpuapr2022.html',
-                'https://www.oracle.com/security-alerts/cpuoct2021.html',
-                'https://www.tenable.com/security/tns-2021-03',
-                'https://www.tenable.com/security/tns-2021-09'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: NULL pointer dereference in X509_issuer_and_serial_hash()'
-            },
-            {
-              'cve':  'CVE-2021-3449',
-              'cvss': {
-                'bitnami': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'ghsa': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'nvd': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-476'
-              ],
-              'description':   'An OpenSSL TLS server may crash if sent a maliciously crafted renegotiation ClientHello message from a client. If a TLSv1.2 renegotiation ClientHello omits the signature_algorithms extension (where it was present in the initial ClientHello), but includes a signature_algorithms_cert extension then a NULL pointer dereference will result, leading to a crash and a denial of service attack. A server is only vulnerable if it has TLSv1.2 and renegotiation enabled (which is the default configuration). OpenSSL TLS clients are not impacted by this issue. All OpenSSL 1.1.1 versions are affected by this issue. Users of these versions should upgrade to OpenSSL 1.1.1k. OpenSSL 1.0.2 is not impacted by this issue. Fixed in OpenSSL 1.1.1k (Affected 1.1.1-1.1.1j).',
-              'diffID':        'sha256:4896c4b6487e7a5bb605dc7321c82ee3ed0c5a0f2255f3c64ebb0e3e99f2c155',
-              'fixedVersions': [
-                '1.1.1k-r0'
-              ],
-              'installedVersion': '1.1.1d-r0',
-              'packageName':      'libcrypto1.1',
-              'purl':             'pkg:apk/alpine/libcrypto1.1@1.1.1d-r0?arch=armhf&distro=3.10.3',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2021/03/27/1',
-                'http://www.openwall.com/lists/oss-security/2021/03/27/2',
-                'http://www.openwall.com/lists/oss-security/2021/03/28/3',
-                'http://www.openwall.com/lists/oss-security/2021/03/28/4',
-                'https://access.redhat.com/security/cve/CVE-2021-3449',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=1941547',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=1941554',
-                'https://cert-portal.siemens.com/productcert/pdf/ssa-389290.pdf',
-                'https://cert-portal.siemens.com/productcert/pdf/ssa-772220.pdf',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-3449',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-3450',
-                'https://errata.rockylinux.org/RLSA-2021:1024',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=fb9fa6b51defd48157eeb207f52181f735d96148',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=fb9fa6b51defd48157eeb207f52181f735d96148',
-                'https://github.com/alexcrichton/openssl-src-rs',
-                'https://github.com/nodejs/node/pull/38083',
-                'https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA44845',
-                'https://kc.mcafee.com/corporate/index?page=content&id=SB10356',
-                'https://linux.oracle.com/cve/CVE-2021-3449.html',
-                'https://linux.oracle.com/errata/ELSA-2021-9151.html',
-                'https://lists.debian.org/debian-lts-announce/2021/08/msg00029.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CCBFLLVQVILIVGZMBJL3IXZGKWQISYNP/',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/CCBFLLVQVILIVGZMBJL3IXZGKWQISYNP',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-3449',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2021-0013',
-                'https://rustsec.org/advisories/RUSTSEC-2021-0055',
-                'https://rustsec.org/advisories/RUSTSEC-2021-0055.html',
-                'https://security.FreeBSD.org/advisories/FreeBSD-SA-21:07.openssl.asc',
-                'https://security.gentoo.org/glsa/202103-03',
-                'https://security.netapp.com/advisory/ntap-20210326-0006',
-                'https://security.netapp.com/advisory/ntap-20210326-0006/',
-                'https://security.netapp.com/advisory/ntap-20210513-0002',
-                'https://security.netapp.com/advisory/ntap-20210513-0002/',
-                'https://security.netapp.com/advisory/ntap-20240621-0006/',
-                'https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-openssl-2021-GHY28dJd',
-                'https://ubuntu.com/security/notices/USN-4891-1',
-                'https://ubuntu.com/security/notices/USN-5038-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-3449',
-                'https://www.debian.org/security/2021/dsa-4875',
-                'https://www.openssl.org/news/secadv/20210325.txt',
-                'https://www.oracle.com//security-alerts/cpujul2021.html',
-                'https://www.oracle.com/security-alerts/cpuApr2021.html',
-                'https://www.oracle.com/security-alerts/cpuapr2022.html',
-                'https://www.oracle.com/security-alerts/cpujul2022.html',
-                'https://www.oracle.com/security-alerts/cpuoct2021.html',
-                'https://www.tenable.com/security/tns-2021-05',
-                'https://www.tenable.com/security/tns-2021-06',
-                'https://www.tenable.com/security/tns-2021-09',
-                'https://www.tenable.com/security/tns-2021-10'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: NULL pointer dereference in signature_algorithms processing'
-            },
-            {
-              'cve':  'CVE-2021-23839',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '3.7',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N'
-                },
-                'redhat': {
-                  'v3score':  '3.7',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-327'
-              ],
-              'description':   'OpenSSL 1.0.2 supports SSLv2. If a client attempts to negotiate SSLv2 with a server that is configured to support both SSLv2 and more recent SSL and TLS versions then a check is made for a version rollback attack when unpadding an RSA signature. Clients that support SSL or TLS versions greater than SSLv2 are supposed to use a special form of padding. A server that supports greater than SSLv2 is supposed to reject connection attempts from a client where this special form of padding is present, because this indicates that a version rollback has occurred (i.e. both client and server support greater than SSLv2, and yet this is the version that is being requested). The implementation of this padding check inverted the logic so that the connection attempt is accepted if the padding is present, and rejected if it is absent. This means that such as server will accept a connection if a version rollback attack has occurred. Further the server will erroneously reject a connection if a normal SSLv2 connection attempt is made. Only OpenSSL 1.0.2 servers from version 1.0.2s to 1.0.2x are affected by this issue. In order to be vulnerable a 1.0.2 server must: 1) have configured SSLv2 support at compile time (this is off by default), 2) have configured SSLv2 support at runtime (this is off by default), 3) have configured SSLv2 ciphersuites (these are not in the default ciphersuite list) OpenSSL 1.1.1 does not have SSLv2 support and therefore is not vulnerable to this issue. The underlying error is in the implementation of the RSA_padding_check_SSLv23() function. This also affects the RSA_SSLV23_PADDING padding mode used by various other functions. Although 1.1.1 does not support SSLv2 the RSA_padding_check_SSLv23() function still exists, as does the RSA_SSLV23_PADDING padding mode. Applications that directly call that function or use that padding mode will encounter this issue. However since there is no support for the SSLv2 protocol in 1.1.1 this is considered a bug and not a security issue in that version. OpenSSL 1.0.2 is out of support and no longer receiving public updates. Premium support customers of OpenSSL 1.0.2 should upgrade to 1.0.2y. Other users should upgrade to 1.1.1j. Fixed in OpenSSL 1.0.2y (Affected 1.0.2s-1.0.2x).',
-              'diffID':        'sha256:4896c4b6487e7a5bb605dc7321c82ee3ed0c5a0f2255f3c64ebb0e3e99f2c155',
-              'fixedVersions': [
-                '1.1.1j-r0'
-              ],
-              'installedVersion': '1.1.1d-r0',
-              'packageName':      'libcrypto1.1',
-              'purl':             'pkg:apk/alpine/libcrypto1.1@1.1.1d-r0?arch=armhf&distro=3.10.3',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-23839',
-                'https://cert-portal.siemens.com/productcert/pdf/ssa-637483.pdf',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=30919ab80a478f2d81f2e9acdcca3fa4740cd547',
-                'https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA44846',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-23839',
-                'https://security.netapp.com/advisory/ntap-20210219-0009/',
-                'https://security.netapp.com/advisory/ntap-20240621-0006/',
-                'https://www.cve.org/CVERecord?id=CVE-2021-23839',
-                'https://www.openssl.org/news/secadv/20210216.txt',
-                'https://www.oracle.com//security-alerts/cpujul2021.html',
-                'https://www.oracle.com/security-alerts/cpuApr2021.html',
-                'https://www.oracle.com/security-alerts/cpuapr2022.html',
-                'https://www.oracle.com/security-alerts/cpuoct2021.html'
-              ],
-              'severity':   'LOW',
-              'suppressed': false,
-              'title':      'openssl: incorrect SSLv2 rollback protection'
-            },
-            {
-              'cve':  'CVE-2020-1967',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'nvd': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-476'
-              ],
-              'description':   'Server or client applications that call the SSL_check_chain() function during or after a TLS 1.3 handshake may crash due to a NULL pointer dereference as a result of incorrect handling of the "signature_algorithms_cert" TLS extension. The crash occurs if an invalid or unrecognised signature algorithm is received from the peer. This could be exploited by a malicious peer in a Denial of Service attack. OpenSSL version 1.1.1d, 1.1.1e, and 1.1.1f are affected by this issue. This issue did not affect OpenSSL versions prior to 1.1.1d. Fixed in OpenSSL 1.1.1g (Affected 1.1.1d-1.1.1f).',
-              'diffID':        'sha256:4896c4b6487e7a5bb605dc7321c82ee3ed0c5a0f2255f3c64ebb0e3e99f2c155',
-              'fixedVersions': [
-                '1.1.1g-r0'
-              ],
-              'installedVersion': '1.1.1d-r0',
-              'packageName':      'libssl1.1',
-              'purl':             'pkg:apk/alpine/libssl1.1@1.1.1d-r0?arch=armhf&distro=3.10.3',
-              'references':       [
-                'http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00004.html',
-                'http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00011.html',
-                'http://packetstormsecurity.com/files/157527/OpenSSL-signature_algorithms_cert-Denial-Of-Service.html',
-                'http://seclists.org/fulldisclosure/2020/May/5',
-                'http://www.openwall.com/lists/oss-security/2020/04/22/2',
-                'https://access.redhat.com/security/cve/CVE-2020-1967',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=eb563247aef3e83dda7679c43f9649270462e5b1',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=eb563247aef3e83dda7679c43f9649270462e5b1',
-                'https://github.com/irsl/CVE-2020-1967',
-                'https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA44440',
-                'https://lists.apache.org/thread.html/r66ea9c436da150683432db5fbc8beb8ae01886c6459ac30c2cea7345%40%3Cdev.tomcat.apache.org%3E',
-                'https://lists.apache.org/thread.html/r66ea9c436da150683432db5fbc8beb8ae01886c6459ac30c2cea7345@%3Cdev.tomcat.apache.org%3E',
-                'https://lists.apache.org/thread.html/r94d6ac3f010a38fccf4f432b12180a13fa1cf303559bd805648c9064%40%3Cdev.tomcat.apache.org%3E',
-                'https://lists.apache.org/thread.html/r94d6ac3f010a38fccf4f432b12180a13fa1cf303559bd805648c9064@%3Cdev.tomcat.apache.org%3E',
-                'https://lists.apache.org/thread.html/r9a41e304992ce6aec6585a87842b4f2e692604f5c892c37e3b0587ee%40%3Cdev.tomcat.apache.org%3E',
-                'https://lists.apache.org/thread.html/r9a41e304992ce6aec6585a87842b4f2e692604f5c892c37e3b0587ee@%3Cdev.tomcat.apache.org%3E',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DDHOAATPWJCXRNFMJ2SASDBBNU5RJONY/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/EXDDAOWSAIEFQNBHWYE6PPYFV4QXGMCD/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/XVEP3LAK4JSPRXFO4QF4GG2IVXADV3SO/',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/DDHOAATPWJCXRNFMJ2SASDBBNU5RJONY',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/EXDDAOWSAIEFQNBHWYE6PPYFV4QXGMCD',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/XVEP3LAK4JSPRXFO4QF4GG2IVXADV3SO',
-                'https://nvd.nist.gov/vuln/detail/CVE-2020-1967',
-                'https://rustsec.org/advisories/RUSTSEC-2020-0015.html',
-                'https://security.FreeBSD.org/advisories/FreeBSD-SA-20:11.openssl.asc',
-                'https://security.gentoo.org/glsa/202004-10',
-                'https://security.netapp.com/advisory/ntap-20200424-0003',
-                'https://security.netapp.com/advisory/ntap-20200424-0003/',
-                'https://security.netapp.com/advisory/ntap-20200717-0004',
-                'https://security.netapp.com/advisory/ntap-20200717-0004/',
-                'https://www.cve.org/CVERecord?id=CVE-2020-1967',
-                'https://www.debian.org/security/2020/dsa-4661',
-                'https://www.openssl.org/news/secadv/20200421.txt',
-                'https://www.oracle.com//security-alerts/cpujul2021.html',
-                'https://www.oracle.com/security-alerts/cpuApr2021.html',
-                'https://www.oracle.com/security-alerts/cpujan2021.html',
-                'https://www.oracle.com/security-alerts/cpujul2020.html',
-                'https://www.oracle.com/security-alerts/cpuoct2020.html',
-                'https://www.oracle.com/security-alerts/cpuoct2021.html',
-                'https://www.synology.com/security/advisory/Synology_SA_20_05',
-                'https://www.synology.com/security/advisory/Synology_SA_20_05_OpenSSL',
-                'https://www.tenable.com/security/tns-2020-03',
-                'https://www.tenable.com/security/tns-2020-04',
-                'https://www.tenable.com/security/tns-2020-11',
-                'https://www.tenable.com/security/tns-2021-10'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: Segmentation fault in SSL_check_chain causes denial of service'
-            },
-            {
-              'cve':  'CVE-2021-23840',
-              'cvss': {
-                'bitnami': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'ghsa': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'nvd': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-190'
-              ],
-              'description':   'Calls to EVP_CipherUpdate, EVP_EncryptUpdate and EVP_DecryptUpdate may overflow the output length argument in some cases where the input length is close to the maximum permissable length for an integer on the platform. In such cases the return value from the function call will be 1 (indicating success), but the output length value will be negative. This could cause applications to behave incorrectly or crash. OpenSSL versions 1.1.1i and below are affected by this issue. Users of these versions should upgrade to OpenSSL 1.1.1j. OpenSSL versions 1.0.2x and below are affected by this issue. However OpenSSL 1.0.2 is out of support and no longer receiving public updates. Premium support customers of OpenSSL 1.0.2 should upgrade to 1.0.2y. Other users should upgrade to 1.1.1j. Fixed in OpenSSL 1.1.1j (Affected 1.1.1-1.1.1i). Fixed in OpenSSL 1.0.2y (Affected 1.0.2-1.0.2x).',
-              'diffID':        'sha256:4896c4b6487e7a5bb605dc7321c82ee3ed0c5a0f2255f3c64ebb0e3e99f2c155',
-              'fixedVersions': [
-                '1.1.1j-r0'
-              ],
-              'installedVersion': '1.1.1d-r0',
-              'packageName':      'libssl1.1',
-              'purl':             'pkg:apk/alpine/libssl1.1@1.1.1d-r0?arch=armhf&distro=3.10.3',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-23840',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=1908036',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=1930310',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=1930324',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=1934534',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=1934600',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=1939637',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=1940085',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=1965362',
-                'https://cert-portal.siemens.com/productcert/pdf/ssa-389290.pdf',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-23840',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-23841',
-                'https://errata.rockylinux.org/RLSA-2021:4424',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=6a51b9e1d0cf0bf8515f7201b68fb0a3482b3dc1',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=9b1129239f3ebb1d1c98ce9ed41d5c9476c47cb2',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=6a51b9e1d0cf0bf8515f7201b68fb0a3482b3dc1',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=9b1129239f3ebb1d1c98ce9ed41d5c9476c47cb2',
-                'https://github.com/alexcrichton/openssl-src-rs',
-                'https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA44846',
-                'https://kc.mcafee.com/corporate/index?page=content&id=SB10366',
-                'https://linux.oracle.com/cve/CVE-2021-23840.html',
-                'https://linux.oracle.com/errata/ELSA-2021-9561.html',
-                'https://lists.apache.org/thread.html/r58af02e294bd07f487e2c64ffc0a29b837db5600e33b6e698b9d696b%40%3Cissues.bookkeeper.apache.org%3E',
-                'https://lists.apache.org/thread.html/r58af02e294bd07f487e2c64ffc0a29b837db5600e33b6e698b9d696b@%3Cissues.bookkeeper.apache.org%3E',
-                'https://lists.apache.org/thread.html/rf4c02775860db415b4955778a131c2795223f61cb8c6a450893651e4%40%3Cissues.bookkeeper.apache.org%3E',
-                'https://lists.apache.org/thread.html/rf4c02775860db415b4955778a131c2795223f61cb8c6a450893651e4@%3Cissues.bookkeeper.apache.org%3E',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-23840',
-                'https://rustsec.org/advisories/RUSTSEC-2021-0057.html',
-                'https://security.gentoo.org/glsa/202103-03',
-                'https://security.netapp.com/advisory/ntap-20210219-0009',
-                'https://security.netapp.com/advisory/ntap-20210219-0009/',
-                'https://security.netapp.com/advisory/ntap-20240621-0006/',
-                'https://ubuntu.com/security/notices/USN-4738-1',
-                'https://ubuntu.com/security/notices/USN-5088-1',
-                'https://ubuntu.com/security/notices/USN-7018-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-23840',
-                'https://www.debian.org/security/2021/dsa-4855',
-                'https://www.openssl.org/news/secadv/20210216.txt',
-                'https://www.oracle.com//security-alerts/cpujul2021.html',
-                'https://www.oracle.com/security-alerts/cpuApr2021.html',
-                'https://www.oracle.com/security-alerts/cpuapr2022.html',
-                'https://www.oracle.com/security-alerts/cpujan2022.html',
-                'https://www.oracle.com/security-alerts/cpuoct2021.html',
-                'https://www.tenable.com/security/tns-2021-03',
-                'https://www.tenable.com/security/tns-2021-09',
-                'https://www.tenable.com/security/tns-2021-10'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: integer overflow in CipherUpdate'
-            },
-            {
-              'cve':  'CVE-2021-3450',
-              'cvss': {
-                'bitnami': {
-                  'v3score':  '7.4',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N'
-                },
-                'ghsa': {
-                  'v3score':  '7.4',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N'
-                },
-                'nvd': {
-                  'v3score':  '7.4',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N'
-                },
-                'redhat': {
-                  'v3score':  '7.4',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-295'
-              ],
-              'description':   'The X509_V_FLAG_X509_STRICT flag enables additional security checks of the certificates present in a certificate chain. It is not set by default. Starting from OpenSSL version 1.1.1h a check to disallow certificates in the chain that have explicitly encoded elliptic curve parameters was added as an additional strict check. An error in the implementation of this check meant that the result of a previous check to confirm that certificates in the chain are valid CA certificates was overwritten. This effectively bypasses the check that non-CA certificates must not be able to issue other certificates. If a "purpose" has been configured then there is a subsequent opportunity for checks that the certificate is a valid CA. All of the named "purpose" values implemented in libcrypto perform this check. Therefore, where a purpose is set the certificate chain will still be rejected even when the strict flag has been used. A purpose is set by default in libssl client and server certificate verification routines, but it can be overridden or removed by an application. In order to be affected, an application must explicitly set the X509_V_FLAG_X509_STRICT verification flag and either not set a purpose for the certificate verification or, in the case of TLS client or server applications, override the default purpose. OpenSSL versions 1.1.1h and newer are affected by this issue. Users of these versions should upgrade to OpenSSL 1.1.1k. OpenSSL 1.0.2 is not impacted by this issue. Fixed in OpenSSL 1.1.1k (Affected 1.1.1h-1.1.1j).',
-              'diffID':        'sha256:4896c4b6487e7a5bb605dc7321c82ee3ed0c5a0f2255f3c64ebb0e3e99f2c155',
-              'fixedVersions': [
-                '1.1.1k-r0'
-              ],
-              'installedVersion': '1.1.1d-r0',
-              'packageName':      'libssl1.1',
-              'purl':             'pkg:apk/alpine/libssl1.1@1.1.1d-r0?arch=armhf&distro=3.10.3',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2021/03/27/1',
-                'http://www.openwall.com/lists/oss-security/2021/03/27/2',
-                'http://www.openwall.com/lists/oss-security/2021/03/28/3',
-                'http://www.openwall.com/lists/oss-security/2021/03/28/4',
-                'https://access.redhat.com/security/cve/CVE-2021-3450',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=1941547',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=1941554',
-                'https://cert-portal.siemens.com/productcert/pdf/ssa-389290.pdf',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-3449',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-3450',
-                'https://errata.rockylinux.org/RLSA-2021:1024',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=2a40b7bc7b94dd7de897a74571e7024f0cf0d63b',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=2a40b7bc7b94dd7de897a74571e7024f0cf0d63b',
-                'https://github.com/alexcrichton/openssl-src-rs',
-                'https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA44845',
-                'https://kc.mcafee.com/corporate/index?page=content&id=SB10356',
-                'https://linux.oracle.com/cve/CVE-2021-3450.html',
-                'https://linux.oracle.com/errata/ELSA-2021-9151.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CCBFLLVQVILIVGZMBJL3IXZGKWQISYNP/',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/CCBFLLVQVILIVGZMBJL3IXZGKWQISYNP',
-                'https://mta.openssl.org/pipermail/openssl-announce/2021-March/000198.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-3450',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2021-0013',
-                'https://rustsec.org/advisories/RUSTSEC-2021-0056.html',
-                'https://security.FreeBSD.org/advisories/FreeBSD-SA-21:07.openssl.asc',
-                'https://security.gentoo.org/glsa/202103-03',
-                'https://security.netapp.com/advisory/ntap-20210326-0006',
-                'https://security.netapp.com/advisory/ntap-20210326-0006/',
-                'https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-openssl-2021-GHY28dJd',
-                'https://www.cve.org/CVERecord?id=CVE-2021-3450',
-                'https://www.openssl.org/news/secadv/20210325.txt',
-                'https://www.oracle.com//security-alerts/cpujul2021.html',
-                'https://www.oracle.com/security-alerts/cpuApr2021.html',
-                'https://www.oracle.com/security-alerts/cpuapr2022.html',
-                'https://www.oracle.com/security-alerts/cpujul2022.html',
-                'https://www.oracle.com/security-alerts/cpuoct2021.html',
-                'https://www.tenable.com/security/tns-2021-05',
-                'https://www.tenable.com/security/tns-2021-08',
-                'https://www.tenable.com/security/tns-2021-09'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: CA certificate check bypass with X509_V_FLAG_X509_STRICT'
-            },
-            {
-              'cve':  'CVE-2019-1551',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N'
-                },
-                'redhat': {
-                  'v3score':  '4.8',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-190'
-              ],
-              'description':   'There is an overflow bug in the x64_64 Montgomery squaring procedure used in exponentiation with 512-bit moduli. No EC algorithms are affected. Analysis suggests that attacks against 2-prime RSA1024, 3-prime RSA1536, and DSA1024 as a result of this defect would be very difficult to perform and are not believed likely. Attacks against DH512 are considered just feasible. However, for an attack the target would have to re-use the DH512 private key, which is not recommended anyway. Also applications directly using the low level API BN_mod_exp may be affected if they use BN_FLG_CONSTTIME. Fixed in OpenSSL 1.1.1e (Affected 1.1.1-1.1.1d). Fixed in OpenSSL 1.0.2u (Affected 1.0.2-1.0.2t).',
-              'diffID':        'sha256:4896c4b6487e7a5bb605dc7321c82ee3ed0c5a0f2255f3c64ebb0e3e99f2c155',
-              'fixedVersions': [
-                '1.1.1d-r2'
-              ],
-              'installedVersion': '1.1.1d-r0',
-              'packageName':      'libssl1.1',
-              'purl':             'pkg:apk/alpine/libssl1.1@1.1.1d-r0?arch=armhf&distro=3.10.3',
-              'references':       [
-                'http://lists.opensuse.org/opensuse-security-announce/2020-01/msg00030.html',
-                'http://packetstormsecurity.com/files/155754/Slackware-Security-Advisory-openssl-Updates.html',
-                'https://access.redhat.com/security/cve/CVE-2019-1551',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=419102400a2811582a7a3d4a4e317d72e5ce0a8f',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=f1c5eea8a817075d31e43f5876993c6710238c98',
-                'https://github.com/openssl/openssl/pull/10575',
-                'https://linux.oracle.com/cve/CVE-2019-1551.html',
-                'https://linux.oracle.com/errata/ELSA-2020-4514.html',
-                'https://lists.debian.org/debian-lts-announce/2022/03/msg00023.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DDHOAATPWJCXRNFMJ2SASDBBNU5RJONY/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/EXDDAOWSAIEFQNBHWYE6PPYFV4QXGMCD/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/XVEP3LAK4JSPRXFO4QF4GG2IVXADV3SO/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2019-1551',
-                'https://seclists.org/bugtraq/2019/Dec/39',
-                'https://seclists.org/bugtraq/2019/Dec/46',
-                'https://security.gentoo.org/glsa/202004-10',
-                'https://security.netapp.com/advisory/ntap-20191210-0001/',
-                'https://ubuntu.com/security/notices/USN-4376-1',
-                'https://ubuntu.com/security/notices/USN-4504-1',
-                'https://usn.ubuntu.com/4376-1/',
-                'https://usn.ubuntu.com/4504-1/',
-                'https://www.cve.org/CVERecord?id=CVE-2019-1551',
-                'https://www.debian.org/security/2019/dsa-4594',
-                'https://www.debian.org/security/2021/dsa-4855',
-                'https://www.openssl.org/news/secadv/20191206.txt',
-                'https://www.oracle.com/security-alerts/cpuApr2021.html',
-                'https://www.oracle.com/security-alerts/cpujan2021.html',
-                'https://www.oracle.com/security-alerts/cpujul2020.html',
-                'https://www.tenable.com/security/tns-2019-09',
-                'https://www.tenable.com/security/tns-2020-03',
-                'https://www.tenable.com/security/tns-2020-11',
-                'https://www.tenable.com/security/tns-2021-10'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: Integer overflow in RSAZ modular exponentiation on x86_64'
-            },
-            {
-              'cve':  'CVE-2020-1971',
-              'cvss': {
-                'bitnami': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'nvd': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-476'
-              ],
-              'description':   "The X.509 GeneralName type is a generic type for representing different types of names. One of those name types is known as EDIPartyName. OpenSSL provides a function GENERAL_NAME_cmp which compares different instances of a GENERAL_NAME to see if they are equal or not. This function behaves incorrectly when both GENERAL_NAMEs contain an EDIPARTYNAME. A NULL pointer dereference and a crash may occur leading to a possible denial of service attack. OpenSSL itself uses the GENERAL_NAME_cmp function for two purposes: 1) Comparing CRL distribution point names between an available CRL and a CRL distribution point embedded in an X509 certificate 2) When verifying that a timestamp response token signer matches the timestamp authority name (exposed via the API functions TS_RESP_verify_response and TS_RESP_verify_token) If an attacker can control both items being compared then that attacker could trigger a crash. For example if the attacker can trick a client or server into checking a malicious certificate against a malicious CRL then this may occur. Note that some applications automatically download CRLs based on a URL embedded in a certificate. This checking happens prior to the signatures on the certificate and CRL being verified. OpenSSL's s_server, s_client and verify tools have support for the \"-crl_download\" option which implements automatic CRL downloading and this attack has been demonstrated to work against those tools. Note that an unrelated bug means that affected versions of OpenSSL cannot parse or construct correct encodings of EDIPARTYNAME. However it is possible to construct a malformed EDIPARTYNAME that OpenSSL's parser will accept and hence trigger this attack. All OpenSSL 1.1.1 and 1.0.2 versions are affected by this issue. Other OpenSSL releases are out of support and have not been checked. Fixed in OpenSSL 1.1.1i (Affected 1.1.1-1.1.1h). Fixed in OpenSSL 1.0.2x (Affected 1.0.2-1.0.2w).",
-              'diffID':        'sha256:4896c4b6487e7a5bb605dc7321c82ee3ed0c5a0f2255f3c64ebb0e3e99f2c155',
-              'fixedVersions': [
-                '1.1.1i-r0'
-              ],
-              'installedVersion': '1.1.1d-r0',
-              'packageName':      'libssl1.1',
-              'purl':             'pkg:apk/alpine/libssl1.1@1.1.1d-r0?arch=armhf&distro=3.10.3',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2021/09/14/2',
-                'https://access.redhat.com/security/cve/CVE-2020-1971',
-                'https://cert-portal.siemens.com/productcert/pdf/ssa-389290.pdf',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=2154ab83e14ede338d2ede9bbe5cdfce5d5a6c9e',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=f960d81215ebf3f65e03d4d5d857fb9b666d6920',
-                'https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA44676',
-                'https://linux.oracle.com/cve/CVE-2020-1971.html',
-                'https://linux.oracle.com/errata/ELSA-2021-9150.html',
-                'https://lists.apache.org/thread.html/r63c6f2dd363d9b514d0a4bcf624580616a679898cc14c109a49b750c%40%3Cdev.tomcat.apache.org%3E',
-                'https://lists.apache.org/thread.html/rbb769f771711fb274e0a4acb1b5911c8aab544a6ac5e8c12d40c5143%40%3Ccommits.pulsar.apache.org%3E',
-                'https://lists.debian.org/debian-lts-announce/2020/12/msg00020.html',
-                'https://lists.debian.org/debian-lts-announce/2020/12/msg00021.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DGSI34Y5LQ5RYXN4M2I5ZQT65LFVDOUU/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PWPSSZNZOBJU2YR6Z4TGHXKYW3YP5QG7/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2020-1971',
-                'https://security.FreeBSD.org/advisories/FreeBSD-SA-20:33.openssl.asc',
-                'https://security.gentoo.org/glsa/202012-13',
-                'https://security.netapp.com/advisory/ntap-20201218-0005/',
-                'https://security.netapp.com/advisory/ntap-20210513-0002/',
-                'https://security.netapp.com/advisory/ntap-20240621-0006/',
-                'https://ubuntu.com/security/notices/USN-4662-1',
-                'https://ubuntu.com/security/notices/USN-4745-1',
-                'https://www.cve.org/CVERecord?id=CVE-2020-1971',
-                'https://www.debian.org/security/2020/dsa-4807',
-                'https://www.openssl.org/news/secadv/20201208.txt',
-                'https://www.oracle.com//security-alerts/cpujul2021.html',
-                'https://www.oracle.com/security-alerts/cpuApr2021.html',
-                'https://www.oracle.com/security-alerts/cpuapr2022.html',
-                'https://www.oracle.com/security-alerts/cpujan2021.html',
-                'https://www.oracle.com/security-alerts/cpuoct2021.html',
-                'https://www.tenable.com/security/tns-2020-11',
-                'https://www.tenable.com/security/tns-2021-09',
-                'https://www.tenable.com/security/tns-2021-10'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: EDIPARTYNAME NULL pointer de-reference'
-            },
-            {
-              'cve':  'CVE-2021-23841',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'nvd': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-476'
-              ],
-              'description':   'The OpenSSL public API function X509_issuer_and_serial_hash() attempts to create a unique hash value based on the issuer and serial number data contained within an X509 certificate. However it fails to correctly handle any errors that may occur while parsing the issuer field (which might occur if the issuer field is maliciously constructed). This may subsequently result in a NULL pointer deref and a crash leading to a potential denial of service attack. The function X509_issuer_and_serial_hash() is never directly called by OpenSSL itself so applications are only vulnerable if they use this function directly and they use it on certificates that may have been obtained from untrusted sources. OpenSSL versions 1.1.1i and below are affected by this issue. Users of these versions should upgrade to OpenSSL 1.1.1j. OpenSSL versions 1.0.2x and below are affected by this issue. However OpenSSL 1.0.2 is out of support and no longer receiving public updates. Premium support customers of OpenSSL 1.0.2 should upgrade to 1.0.2y. Other users should upgrade to 1.1.1j. Fixed in OpenSSL 1.1.1j (Affected 1.1.1-1.1.1i). Fixed in OpenSSL 1.0.2y (Affected 1.0.2-1.0.2x).',
-              'diffID':        'sha256:4896c4b6487e7a5bb605dc7321c82ee3ed0c5a0f2255f3c64ebb0e3e99f2c155',
-              'fixedVersions': [
-                '1.1.1j-r0'
-              ],
-              'installedVersion': '1.1.1d-r0',
-              'packageName':      'libssl1.1',
-              'purl':             'pkg:apk/alpine/libssl1.1@1.1.1d-r0?arch=armhf&distro=3.10.3',
-              'references':       [
-                'http://seclists.org/fulldisclosure/2021/May/67',
-                'http://seclists.org/fulldisclosure/2021/May/68',
-                'http://seclists.org/fulldisclosure/2021/May/70',
-                'https://access.redhat.com/security/cve/CVE-2021-23841',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=1908036',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=1930310',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=1930324',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=1934534',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=1934600',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=1939637',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=1940085',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=1965362',
-                'https://cert-portal.siemens.com/productcert/pdf/ssa-637483.pdf',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-23840',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-23841',
-                'https://errata.rockylinux.org/RLSA-2021:4424',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=122a19ab48091c657f7cb1fb3af9fc07bd557bbf',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=8252ee4d90f3f2004d3d0aeeed003ad49c9a7807',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=122a19ab48091c657f7cb1fb3af9fc07bd557bbf',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=6a51b9e1d0cf0bf8515f7201b68fb0a3482b3dc1',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=8252ee4d90f3f2004d3d0aeeed003ad49c9a7807',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=9b1129239f3ebb1d1c98ce9ed41d5c9476c47cb2',
-                'https://github.com/alexcrichton/openssl-src-rs',
-                'https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA44846',
-                'https://linux.oracle.com/cve/CVE-2021-23841.html',
-                'https://linux.oracle.com/errata/ELSA-2021-9561.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-23841',
-                'https://rustsec.org/advisories/RUSTSEC-2021-0058',
-                'https://rustsec.org/advisories/RUSTSEC-2021-0058.html',
-                'https://security.gentoo.org/glsa/202103-03',
-                'https://security.netapp.com/advisory/ntap-20210219-0009',
-                'https://security.netapp.com/advisory/ntap-20210219-0009/',
-                'https://security.netapp.com/advisory/ntap-20210513-0002',
-                'https://security.netapp.com/advisory/ntap-20210513-0002/',
-                'https://security.netapp.com/advisory/ntap-20240621-0006/',
-                'https://support.apple.com/kb/HT212528',
-                'https://support.apple.com/kb/HT212529',
-                'https://support.apple.com/kb/HT212534',
-                'https://ubuntu.com/security/notices/USN-4738-1',
-                'https://ubuntu.com/security/notices/USN-4745-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-23841',
-                'https://www.debian.org/security/2021/dsa-4855',
-                'https://www.openssl.org/news/secadv/20210216.txt',
-                'https://www.oracle.com//security-alerts/cpujul2021.html',
-                'https://www.oracle.com/security-alerts/cpuApr2021.html',
-                'https://www.oracle.com/security-alerts/cpuapr2022.html',
-                'https://www.oracle.com/security-alerts/cpuoct2021.html',
-                'https://www.tenable.com/security/tns-2021-03',
-                'https://www.tenable.com/security/tns-2021-09'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: NULL pointer dereference in X509_issuer_and_serial_hash()'
-            },
-            {
-              'cve':  'CVE-2021-3449',
-              'cvss': {
-                'bitnami': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'ghsa': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'nvd': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-476'
-              ],
-              'description':   'An OpenSSL TLS server may crash if sent a maliciously crafted renegotiation ClientHello message from a client. If a TLSv1.2 renegotiation ClientHello omits the signature_algorithms extension (where it was present in the initial ClientHello), but includes a signature_algorithms_cert extension then a NULL pointer dereference will result, leading to a crash and a denial of service attack. A server is only vulnerable if it has TLSv1.2 and renegotiation enabled (which is the default configuration). OpenSSL TLS clients are not impacted by this issue. All OpenSSL 1.1.1 versions are affected by this issue. Users of these versions should upgrade to OpenSSL 1.1.1k. OpenSSL 1.0.2 is not impacted by this issue. Fixed in OpenSSL 1.1.1k (Affected 1.1.1-1.1.1j).',
-              'diffID':        'sha256:4896c4b6487e7a5bb605dc7321c82ee3ed0c5a0f2255f3c64ebb0e3e99f2c155',
-              'fixedVersions': [
-                '1.1.1k-r0'
-              ],
-              'installedVersion': '1.1.1d-r0',
-              'packageName':      'libssl1.1',
-              'purl':             'pkg:apk/alpine/libssl1.1@1.1.1d-r0?arch=armhf&distro=3.10.3',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2021/03/27/1',
-                'http://www.openwall.com/lists/oss-security/2021/03/27/2',
-                'http://www.openwall.com/lists/oss-security/2021/03/28/3',
-                'http://www.openwall.com/lists/oss-security/2021/03/28/4',
-                'https://access.redhat.com/security/cve/CVE-2021-3449',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=1941547',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=1941554',
-                'https://cert-portal.siemens.com/productcert/pdf/ssa-389290.pdf',
-                'https://cert-portal.siemens.com/productcert/pdf/ssa-772220.pdf',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-3449',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-3450',
-                'https://errata.rockylinux.org/RLSA-2021:1024',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=fb9fa6b51defd48157eeb207f52181f735d96148',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=fb9fa6b51defd48157eeb207f52181f735d96148',
-                'https://github.com/alexcrichton/openssl-src-rs',
-                'https://github.com/nodejs/node/pull/38083',
-                'https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA44845',
-                'https://kc.mcafee.com/corporate/index?page=content&id=SB10356',
-                'https://linux.oracle.com/cve/CVE-2021-3449.html',
-                'https://linux.oracle.com/errata/ELSA-2021-9151.html',
-                'https://lists.debian.org/debian-lts-announce/2021/08/msg00029.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CCBFLLVQVILIVGZMBJL3IXZGKWQISYNP/',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/CCBFLLVQVILIVGZMBJL3IXZGKWQISYNP',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-3449',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2021-0013',
-                'https://rustsec.org/advisories/RUSTSEC-2021-0055',
-                'https://rustsec.org/advisories/RUSTSEC-2021-0055.html',
-                'https://security.FreeBSD.org/advisories/FreeBSD-SA-21:07.openssl.asc',
-                'https://security.gentoo.org/glsa/202103-03',
-                'https://security.netapp.com/advisory/ntap-20210326-0006',
-                'https://security.netapp.com/advisory/ntap-20210326-0006/',
-                'https://security.netapp.com/advisory/ntap-20210513-0002',
-                'https://security.netapp.com/advisory/ntap-20210513-0002/',
-                'https://security.netapp.com/advisory/ntap-20240621-0006/',
-                'https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-openssl-2021-GHY28dJd',
-                'https://ubuntu.com/security/notices/USN-4891-1',
-                'https://ubuntu.com/security/notices/USN-5038-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-3449',
-                'https://www.debian.org/security/2021/dsa-4875',
-                'https://www.openssl.org/news/secadv/20210325.txt',
-                'https://www.oracle.com//security-alerts/cpujul2021.html',
-                'https://www.oracle.com/security-alerts/cpuApr2021.html',
-                'https://www.oracle.com/security-alerts/cpuapr2022.html',
-                'https://www.oracle.com/security-alerts/cpujul2022.html',
-                'https://www.oracle.com/security-alerts/cpuoct2021.html',
-                'https://www.tenable.com/security/tns-2021-05',
-                'https://www.tenable.com/security/tns-2021-06',
-                'https://www.tenable.com/security/tns-2021-09',
-                'https://www.tenable.com/security/tns-2021-10'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: NULL pointer dereference in signature_algorithms processing'
-            },
-            {
-              'cve':  'CVE-2021-23839',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '3.7',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N'
-                },
-                'redhat': {
-                  'v3score':  '3.7',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-327'
-              ],
-              'description':   'OpenSSL 1.0.2 supports SSLv2. If a client attempts to negotiate SSLv2 with a server that is configured to support both SSLv2 and more recent SSL and TLS versions then a check is made for a version rollback attack when unpadding an RSA signature. Clients that support SSL or TLS versions greater than SSLv2 are supposed to use a special form of padding. A server that supports greater than SSLv2 is supposed to reject connection attempts from a client where this special form of padding is present, because this indicates that a version rollback has occurred (i.e. both client and server support greater than SSLv2, and yet this is the version that is being requested). The implementation of this padding check inverted the logic so that the connection attempt is accepted if the padding is present, and rejected if it is absent. This means that such as server will accept a connection if a version rollback attack has occurred. Further the server will erroneously reject a connection if a normal SSLv2 connection attempt is made. Only OpenSSL 1.0.2 servers from version 1.0.2s to 1.0.2x are affected by this issue. In order to be vulnerable a 1.0.2 server must: 1) have configured SSLv2 support at compile time (this is off by default), 2) have configured SSLv2 support at runtime (this is off by default), 3) have configured SSLv2 ciphersuites (these are not in the default ciphersuite list) OpenSSL 1.1.1 does not have SSLv2 support and therefore is not vulnerable to this issue. The underlying error is in the implementation of the RSA_padding_check_SSLv23() function. This also affects the RSA_SSLV23_PADDING padding mode used by various other functions. Although 1.1.1 does not support SSLv2 the RSA_padding_check_SSLv23() function still exists, as does the RSA_SSLV23_PADDING padding mode. Applications that directly call that function or use that padding mode will encounter this issue. However since there is no support for the SSLv2 protocol in 1.1.1 this is considered a bug and not a security issue in that version. OpenSSL 1.0.2 is out of support and no longer receiving public updates. Premium support customers of OpenSSL 1.0.2 should upgrade to 1.0.2y. Other users should upgrade to 1.1.1j. Fixed in OpenSSL 1.0.2y (Affected 1.0.2s-1.0.2x).',
-              'diffID':        'sha256:4896c4b6487e7a5bb605dc7321c82ee3ed0c5a0f2255f3c64ebb0e3e99f2c155',
-              'fixedVersions': [
-                '1.1.1j-r0'
-              ],
-              'installedVersion': '1.1.1d-r0',
-              'packageName':      'libssl1.1',
-              'purl':             'pkg:apk/alpine/libssl1.1@1.1.1d-r0?arch=armhf&distro=3.10.3',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-23839',
-                'https://cert-portal.siemens.com/productcert/pdf/ssa-637483.pdf',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=30919ab80a478f2d81f2e9acdcca3fa4740cd547',
-                'https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA44846',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-23839',
-                'https://security.netapp.com/advisory/ntap-20210219-0009/',
-                'https://security.netapp.com/advisory/ntap-20240621-0006/',
-                'https://www.cve.org/CVERecord?id=CVE-2021-23839',
-                'https://www.openssl.org/news/secadv/20210216.txt',
-                'https://www.oracle.com//security-alerts/cpujul2021.html',
-                'https://www.oracle.com/security-alerts/cpuApr2021.html',
-                'https://www.oracle.com/security-alerts/cpuapr2022.html',
-                'https://www.oracle.com/security-alerts/cpuoct2021.html'
-              ],
-              'severity':   'LOW',
-              'suppressed': false,
-              'title':      'openssl: incorrect SSLv2 rollback protection'
-            },
-            {
-              'cve':  'CVE-2020-28928',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.5',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-787'
-              ],
-              'description':   'In musl libc through 1.2.1, wcsnrtombs mishandles particular combinations of destination buffer size and source character limit, as demonstrated by an invalid write access (buffer overflow).',
-              'diffID':        'sha256:4896c4b6487e7a5bb605dc7321c82ee3ed0c5a0f2255f3c64ebb0e3e99f2c155',
-              'fixedVersions': [
-                '1.1.22-r4'
-              ],
-              'installedVersion': '1.1.22-r3',
-              'packageName':      'musl',
-              'purl':             'pkg:apk/alpine/musl@1.1.22-r3?arch=armhf&distro=3.10.3',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2020/11/20/4',
-                'https://lists.apache.org/thread.html/r2134abfe847bea7795f0e53756d10a47e6643f35ab8169df8b8a9eb1%40%3Cnotifications.apisix.apache.org%3E',
-                'https://lists.apache.org/thread.html/r90b60cf49348e515257b4950900c1bd3ab95a960cf2469d919c7264e%40%3Cnotifications.apisix.apache.org%3E',
-                'https://lists.apache.org/thread.html/ra63e8dc5137d952afc55dbbfa63be83304ecf842d1eab1ff3ebb29e2%40%3Cnotifications.apisix.apache.org%3E',
-                'https://lists.debian.org/debian-lts-announce/2020/11/msg00050.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LKQ3RVSMVZNZNO4D65W2CZZ4DMYFZN2Q/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UW27QVY7ERPTSGKS4KAWE5TU7EJWHKVQ/',
-                'https://musl.libc.org/releases.html',
-                'https://ubuntu.com/security/notices/USN-5990-1',
-                'https://www.cve.org/CVERecord?id=CVE-2020-28928',
-                'https://www.openwall.com/lists/oss-security/2020/11/20/4',
-                'https://www.oracle.com//security-alerts/cpujul2021.html',
-                'https://www.oracle.com/security-alerts/cpuoct2021.html'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'In musl libc through 1.2.1, wcsnrtombs mishandles particular combinati ...'
-            },
-            {
-              'cve':  'CVE-2020-28928',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.5',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-787'
-              ],
-              'description':   'In musl libc through 1.2.1, wcsnrtombs mishandles particular combinations of destination buffer size and source character limit, as demonstrated by an invalid write access (buffer overflow).',
-              'diffID':        'sha256:4896c4b6487e7a5bb605dc7321c82ee3ed0c5a0f2255f3c64ebb0e3e99f2c155',
-              'fixedVersions': [
-                '1.1.22-r4'
-              ],
-              'installedVersion': '1.1.22-r3',
-              'packageName':      'musl-utils',
-              'purl':             'pkg:apk/alpine/musl-utils@1.1.22-r3?arch=armhf&distro=3.10.3',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2020/11/20/4',
-                'https://lists.apache.org/thread.html/r2134abfe847bea7795f0e53756d10a47e6643f35ab8169df8b8a9eb1%40%3Cnotifications.apisix.apache.org%3E',
-                'https://lists.apache.org/thread.html/r90b60cf49348e515257b4950900c1bd3ab95a960cf2469d919c7264e%40%3Cnotifications.apisix.apache.org%3E',
-                'https://lists.apache.org/thread.html/ra63e8dc5137d952afc55dbbfa63be83304ecf842d1eab1ff3ebb29e2%40%3Cnotifications.apisix.apache.org%3E',
-                'https://lists.debian.org/debian-lts-announce/2020/11/msg00050.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LKQ3RVSMVZNZNO4D65W2CZZ4DMYFZN2Q/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UW27QVY7ERPTSGKS4KAWE5TU7EJWHKVQ/',
-                'https://musl.libc.org/releases.html',
-                'https://ubuntu.com/security/notices/USN-5990-1',
-                'https://www.cve.org/CVERecord?id=CVE-2020-28928',
-                'https://www.openwall.com/lists/oss-security/2020/11/20/4',
-                'https://www.oracle.com//security-alerts/cpujul2021.html',
-                'https://www.oracle.com/security-alerts/cpuoct2021.html'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'In musl libc through 1.2.1, wcsnrtombs mishandles particular combinati ...'
-            },
-            {
-              'cve':  'CVE-2021-28831',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-755'
-              ],
-              'description':   'decompress_gunzip.c in BusyBox through 1.32.1 mishandles the error bit on the huft_build result pointer, with a resultant invalid free or segmentation fault, via malformed gzip data.',
-              'diffID':        'sha256:4896c4b6487e7a5bb605dc7321c82ee3ed0c5a0f2255f3c64ebb0e3e99f2c155',
-              'fixedVersions': [
-                '1.30.1-r5'
-              ],
-              'installedVersion': '1.30.1-r2',
-              'packageName':      'ssl_client',
-              'purl':             'pkg:apk/alpine/ssl_client@1.30.1-r2?arch=armhf&distro=3.10.3',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-28831',
-                'https://git.busybox.net/busybox/commit/?id=f25d254dfd4243698c31a4f3153d4ac72aa9e9bd',
-                'https://lists.debian.org/debian-lts-announce/2021/04/msg00001.html',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/3UDQGJRECXFS5EZVDH2OI45FMO436AC4/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/Z7ZIFKPRR32ZYA3WAA2NXFA3QHHOU6FJ/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZASBW7QRRLY5V2R44MQ4QQM4CZIDHM2U/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-28831',
-                'https://security.gentoo.org/glsa/202105-09',
-                'https://security.netapp.com/advisory/ntap-20250509-0005/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://ubuntu.com/security/notices/USN-5179-2',
-                'https://ubuntu.com/security/notices/USN-6335-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-28831'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: invalid free or segmentation fault via malformed gzip data'
-            }
-          ]
-        }
-      ],
-      'summary': {
-        'critical':   1,
-        'high':       9,
-        'low':        2,
-        'medium':     10,
-        'suppressed': 0,
-        'unknown':    0
-      }
-    }
-  },
-  {
-    'id':    'default/d5db05f79b6b63cc3851164f156b78eda270106d4376b07ae33a5b3bd1ca3181',
-    'type':  'storage.sbomscanner.kubewarden.io.vulnerabilityreport',
-    'links': {
-      'patch':  'https://localhost:8005/v1/storage.sbomscanner.kubewarden.io.vulnerabilityreports/default/d5db05f79b6b63cc3851164f156b78eda270106d4376b07ae33a5b3bd1ca3181',
-      'remove': 'https://localhost:8005/v1/storage.sbomscanner.kubewarden.io.vulnerabilityreports/default/d5db05f79b6b63cc3851164f156b78eda270106d4376b07ae33a5b3bd1ca3181',
-      'self':   'https://localhost:8005/v1/storage.sbomscanner.kubewarden.io.vulnerabilityreports/default/d5db05f79b6b63cc3851164f156b78eda270106d4376b07ae33a5b3bd1ca3181',
-      'update': 'https://localhost:8005/v1/storage.sbomscanner.kubewarden.io.vulnerabilityreports/default/d5db05f79b6b63cc3851164f156b78eda270106d4376b07ae33a5b3bd1ca3181',
-      'view':   'https://localhost:8005/apis/storage.sbomscanner.kubewarden.io/v1alpha1/namespaces/default/vulnerabilityreports/d5db05f79b6b63cc3851164f156b78eda270106d4376b07ae33a5b3bd1ca3181'
-    },
-    '_id':           'default/d5db05f79b6b63cc3851164f156b78eda270106d4376b07ae33a5b3bd1ca3181',
-    'apiVersion':    'storage.sbomscanner.kubewarden.io/v1alpha1',
-    'imageMetadata': {
-      'digest':      'sha256:0280c1a478f8c9daf4d60b066e1eb76c94bf90beb5c67a0ce74c50a3f8b48a94',
-      'platform':    'linux/amd64',
-      'registry':    'demo-02',
-      'registryURI': 'ghcr.io',
-      'repository':  'linuxcontainers/alpine',
-      'tag':         '3.17'
-    },
-    'kind':     'VulnerabilityReport',
-    'metadata': {
-      'creationTimestamp': '2026-01-09T22:47:08Z',
-      'fields':            [
-        'd5db05f79b6b63cc3851164f156b78eda270106d4376b07ae33a5b3bd1ca3181',
-        'ghcr.io/linuxcontainers/alpine:3.17',
-        'linux/amd64',
-        '44 (0 suppressed)'
-      ],
-      'labels': {
-        'app.kubernetes.io/managed-by':          'sbomscanner',
-        'app.kubernetes.io/part-of':             'sbomscanner',
-        'sbomscanner.kubewarden.io/scanjob-uid': '42184d01-4b15-466f-98aa-e802d1b6b6b8'
-      },
-      'managedFields': [
-        {
-          'apiVersion': 'storage.sbomscanner.kubewarden.io/v1alpha1',
-          'fieldsType': 'FieldsV1',
-          'fieldsV1':   {
-            'f:imageMetadata': {
-              'f:digest':      {},
-              'f:platform':    {},
-              'f:registry':    {},
-              'f:registryURI': {},
-              'f:repository':  {},
-              'f:tag':         {}
-            },
-            'f:metadata': {
-              'f:labels': {
-                '.':                                       {},
-                'f:app.kubernetes.io/managed-by':          {},
-                'f:app.kubernetes.io/part-of':             {},
-                'f:sbomscanner.kubewarden.io/scanjob-uid': {}
-              },
-              'f:ownerReferences': {
-                '.':                                                {},
-                'k:{"uid":"ab556ad1-b44a-4f17-8a53-ad8ce00fe745"}': {}
-              }
-            },
-            'f:report': {
-              'f:results': {},
-              'f:summary': {
-                'f:high':   {},
-                'f:low':    {},
-                'f:medium': {}
-              }
-            }
-          },
-          'manager':   'worker',
-          'operation': 'Update',
-          'time':      '2026-01-28T18:34:00Z'
-        }
-      ],
-      'name':            'd5db05f79b6b63cc3851164f156b78eda270106d4376b07ae33a5b3bd1ca3181',
-      'namespace':       'default',
-      'ownerReferences': [
-        {
-          'apiVersion':         'storage.sbomscanner.kubewarden.io/v1alpha1',
-          'blockOwnerDeletion': true,
-          'controller':         true,
-          'kind':               'SBOM',
-          'name':               'd5db05f79b6b63cc3851164f156b78eda270106d4376b07ae33a5b3bd1ca3181',
-          'uid':                'ab556ad1-b44a-4f17-8a53-ad8ce00fe745'
-        }
-      ],
-      'relationships': [
-        {
-          'fromId':   'default/d5db05f79b6b63cc3851164f156b78eda270106d4376b07ae33a5b3bd1ca3181',
-          'fromType': 'storage.sbomscanner.kubewarden.io.sbom',
-          'rel':      'owner',
-          'state':    'active',
-          'message':  'Resource is current'
-        }
-      ],
-      'resourceVersion': '3',
-      'state':           {
-        'error':         false,
-        'message':       'Resource is current',
-        'name':          'active',
-        'transitioning': false
-      },
-      'uid': '09e44b44-75e6-4071-9b19-00dcfcf482a5'
-    },
-    'report': {
-      'results': [
-        {
-          'class':           'os-pkgs',
-          'target':          '/var/run/worker/trivy.sbom.3306415636.json (alpine 3.17.3)',
-          'type':            'alpine',
-          'vulnerabilities': [
-            {
-              'cve':  'CVE-2023-42363',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.5',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.8',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   'A use-after-free vulnerability was discovered in xasprintf function in xfuncs_printf.c:344 in BusyBox v.1.36.1.',
-              'diffID':        'sha256:f1417ff83b319fbdae6dd9cd6d8c9c88002dcd75ecf6ec201c8c6894681cf2b5',
-              'fixedVersions': [
-                '1.35.0-r31'
-              ],
-              'installedVersion': '1.35.0-r29',
-              'packageName':      'busybox',
-              'purl':             'pkg:apk/alpine/busybox@1.35.0-r29?arch=x86_64&distro=3.17.3',
-              'references':       [
-                'http://lists.busybox.net/pipermail/busybox/2024-May/090760.html',
-                'https://access.redhat.com/security/cve/CVE-2023-42363',
-                'https://bugs.busybox.net/show_bug.cgi?id=15865',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-42363',
-                'https://ubuntu.com/security/notices/USN-6961-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-42363'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk'
-            },
-            {
-              'cve':  'CVE-2023-42364',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.5',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.8',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   'A use-after-free vulnerability in BusyBox v.1.36.1 allows attackers to cause a denial of service via a crafted awk pattern in the awk.c evaluate function.',
-              'diffID':        'sha256:f1417ff83b319fbdae6dd9cd6d8c9c88002dcd75ecf6ec201c8c6894681cf2b5',
-              'fixedVersions': [
-                '1.35.0-r31'
-              ],
-              'installedVersion': '1.35.0-r29',
-              'packageName':      'busybox',
-              'purl':             'pkg:apk/alpine/busybox@1.35.0-r29?arch=x86_64&distro=3.17.3',
-              'references':       [
-                'http://lists.busybox.net/pipermail/busybox/2024-May/090762.html',
-                'https://access.redhat.com/security/cve/CVE-2023-42364',
-                'https://bugs.busybox.net/show_bug.cgi?id=15868',
-                'https://gitlab.alpinelinux.org/alpine/aports/-/blob/master/main/busybox/CVE-2023-42364-CVE-2023-42365.patch',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-42364',
-                'https://ubuntu.com/security/notices/USN-6961-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-42364'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'busybox: use-after-free'
-            },
-            {
-              'cve':  'CVE-2023-42365',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.5',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.8',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   'A use-after-free vulnerability was discovered in BusyBox v.1.36.1 via a crafted awk pattern in the awk.c copyvar function.',
-              'diffID':        'sha256:f1417ff83b319fbdae6dd9cd6d8c9c88002dcd75ecf6ec201c8c6894681cf2b5',
-              'fixedVersions': [
-                '1.35.0-r31'
-              ],
-              'installedVersion': '1.35.0-r29',
-              'packageName':      'busybox',
-              'purl':             'pkg:apk/alpine/busybox@1.35.0-r29?arch=x86_64&distro=3.17.3',
-              'references':       [
-                'http://lists.busybox.net/pipermail/busybox/2024-May/090762.html',
-                'https://access.redhat.com/security/cve/CVE-2023-42365',
-                'https://bugs.busybox.net/show_bug.cgi?id=15871',
-                'https://gitlab.alpinelinux.org/alpine/aports/-/blob/master/main/busybox/CVE-2023-42364-CVE-2023-42365.patch',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-42365',
-                'https://ubuntu.com/security/notices/USN-6961-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-42365'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'busybox: use-after-free'
-            },
-            {
-              'cve':  'CVE-2023-42366',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.5',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.1',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-787'
-              ],
-              'description':   'A heap-buffer-overflow was discovered in BusyBox v.1.36.1 in the next_token function at awk.c:1159.',
-              'diffID':        'sha256:f1417ff83b319fbdae6dd9cd6d8c9c88002dcd75ecf6ec201c8c6894681cf2b5',
-              'fixedVersions': [
-                '1.35.0-r30'
-              ],
-              'installedVersion': '1.35.0-r29',
-              'packageName':      'busybox',
-              'purl':             'pkg:apk/alpine/busybox@1.35.0-r29?arch=x86_64&distro=3.17.3',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2023-42366',
-                'https://bugs.busybox.net/show_bug.cgi?id=15874',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-42366',
-                'https://security.netapp.com/advisory/ntap-20241206-0007/',
-                'https://www.cve.org/CVERecord?id=CVE-2023-42366'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'busybox: A heap-buffer-overflow'
-            },
-            {
-              'cve':  'CVE-2023-42363',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.5',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.8',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   'A use-after-free vulnerability was discovered in xasprintf function in xfuncs_printf.c:344 in BusyBox v.1.36.1.',
-              'diffID':        'sha256:f1417ff83b319fbdae6dd9cd6d8c9c88002dcd75ecf6ec201c8c6894681cf2b5',
-              'fixedVersions': [
-                '1.35.0-r31'
-              ],
-              'installedVersion': '1.35.0-r29',
-              'packageName':      'busybox-binsh',
-              'purl':             'pkg:apk/alpine/busybox-binsh@1.35.0-r29?arch=x86_64&distro=3.17.3',
-              'references':       [
-                'http://lists.busybox.net/pipermail/busybox/2024-May/090760.html',
-                'https://access.redhat.com/security/cve/CVE-2023-42363',
-                'https://bugs.busybox.net/show_bug.cgi?id=15865',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-42363',
-                'https://ubuntu.com/security/notices/USN-6961-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-42363'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk'
-            },
-            {
-              'cve':  'CVE-2023-42364',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.5',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.8',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   'A use-after-free vulnerability in BusyBox v.1.36.1 allows attackers to cause a denial of service via a crafted awk pattern in the awk.c evaluate function.',
-              'diffID':        'sha256:f1417ff83b319fbdae6dd9cd6d8c9c88002dcd75ecf6ec201c8c6894681cf2b5',
-              'fixedVersions': [
-                '1.35.0-r31'
-              ],
-              'installedVersion': '1.35.0-r29',
-              'packageName':      'busybox-binsh',
-              'purl':             'pkg:apk/alpine/busybox-binsh@1.35.0-r29?arch=x86_64&distro=3.17.3',
-              'references':       [
-                'http://lists.busybox.net/pipermail/busybox/2024-May/090762.html',
-                'https://access.redhat.com/security/cve/CVE-2023-42364',
-                'https://bugs.busybox.net/show_bug.cgi?id=15868',
-                'https://gitlab.alpinelinux.org/alpine/aports/-/blob/master/main/busybox/CVE-2023-42364-CVE-2023-42365.patch',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-42364',
-                'https://ubuntu.com/security/notices/USN-6961-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-42364'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'busybox: use-after-free'
-            },
-            {
-              'cve':  'CVE-2023-42365',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.5',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.8',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   'A use-after-free vulnerability was discovered in BusyBox v.1.36.1 via a crafted awk pattern in the awk.c copyvar function.',
-              'diffID':        'sha256:f1417ff83b319fbdae6dd9cd6d8c9c88002dcd75ecf6ec201c8c6894681cf2b5',
-              'fixedVersions': [
-                '1.35.0-r31'
-              ],
-              'installedVersion': '1.35.0-r29',
-              'packageName':      'busybox-binsh',
-              'purl':             'pkg:apk/alpine/busybox-binsh@1.35.0-r29?arch=x86_64&distro=3.17.3',
-              'references':       [
-                'http://lists.busybox.net/pipermail/busybox/2024-May/090762.html',
-                'https://access.redhat.com/security/cve/CVE-2023-42365',
-                'https://bugs.busybox.net/show_bug.cgi?id=15871',
-                'https://gitlab.alpinelinux.org/alpine/aports/-/blob/master/main/busybox/CVE-2023-42364-CVE-2023-42365.patch',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-42365',
-                'https://ubuntu.com/security/notices/USN-6961-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-42365'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'busybox: use-after-free'
-            },
-            {
-              'cve':  'CVE-2023-42366',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.5',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.1',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-787'
-              ],
-              'description':   'A heap-buffer-overflow was discovered in BusyBox v.1.36.1 in the next_token function at awk.c:1159.',
-              'diffID':        'sha256:f1417ff83b319fbdae6dd9cd6d8c9c88002dcd75ecf6ec201c8c6894681cf2b5',
-              'fixedVersions': [
-                '1.35.0-r30'
-              ],
-              'installedVersion': '1.35.0-r29',
-              'packageName':      'busybox-binsh',
-              'purl':             'pkg:apk/alpine/busybox-binsh@1.35.0-r29?arch=x86_64&distro=3.17.3',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2023-42366',
-                'https://bugs.busybox.net/show_bug.cgi?id=15874',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-42366',
-                'https://security.netapp.com/advisory/ntap-20241206-0007/',
-                'https://www.cve.org/CVERecord?id=CVE-2023-42366'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'busybox: A heap-buffer-overflow'
-            },
-            {
-              'cve':  'CVE-2023-5363',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N'
-                },
-                'redhat': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-684'
-              ],
-              'description':   "Issue summary: A bug has been identified in the processing of key and\ninitialisation vector (IV) lengths.  This can lead to potential truncation\nor overruns during the initialisation of some symmetric ciphers.\n\nImpact summary: A truncation in the IV can result in non-uniqueness,\nwhich could result in loss of confidentiality for some cipher modes.\n\nWhen calling EVP_EncryptInit_ex2(), EVP_DecryptInit_ex2() or\nEVP_CipherInit_ex2() the provided OSSL_PARAM array is processed after\nthe key and IV have been established.  Any alterations to the key length,\nvia the \"keylen\" parameter or the IV length, via the \"ivlen\" parameter,\nwithin the OSSL_PARAM array will not take effect as intended, potentially\ncausing truncation or overreading of these values.  The following ciphers\nand cipher modes are impacted: RC2, RC4, RC5, CCM, GCM and OCB.\n\nFor the CCM, GCM and OCB cipher modes, truncation of the IV can result in\nloss of confidentiality.  For example, when following NIST's SP 800-38D\nsection 8.2.1 guidance for constructing a deterministic IV for AES in\nGCM mode, truncation of the counter portion could lead to IV reuse.\n\nBoth truncations and overruns of the key and overruns of the IV will\nproduce incorrect results and could, in some cases, trigger a memory\nexception.  However, these issues are not currently assessed as security\ncritical.\n\nChanging the key and/or IV lengths is not considered to be a common operation\nand the vulnerable API was recently introduced. Furthermore it is likely that\napplication developers will have spotted this problem during testing since\ndecryption would fail unless both peers in the communication were similarly\nvulnerable. For these reasons we expect the probability of an application being\nvulnerable to this to be quite low. However if an application is vulnerable then\nthis issue is considered very serious. For these reasons we have assessed this\nissue as Moderate severity overall.\n\nThe OpenSSL SSL/TLS implementation is not affected by this issue.\n\nThe OpenSSL 3.0 and 3.1 FIPS providers are not affected by this because\nthe issue lies outside of the FIPS provider boundary.\n\nOpenSSL 3.1 and 3.0 are vulnerable to this issue.",
-              'diffID':        'sha256:05590cd53e0098af064bffc79d5b76acb8f14b8db4643871eb0a18325fad8005',
-              'fixedVersions': [
-                '3.0.12-r0'
-              ],
-              'installedVersion': '3.0.8-r4',
-              'packageName':      'libcrypto3',
-              'purl':             'pkg:apk/alpine/libcrypto3@3.0.8-r4?arch=x86_64&distro=3.17.3',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2023/10/24/1',
-                'https://access.redhat.com/errata/RHSA-2024:0310',
-                'https://access.redhat.com/security/cve/CVE-2023-5363',
-                'https://bugzilla.redhat.com/2243839',
-                'https://errata.almalinux.org/9/ALSA-2024-0310.html',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=0df40630850fb2740e6be6890bb905d3fc623b2d',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=5f69f5c65e483928c4b28ed16af6e5742929f1ee',
-                'https://linux.oracle.com/cve/CVE-2023-5363.html',
-                'https://linux.oracle.com/errata/ELSA-2024-12093.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-5363',
-                'https://security.netapp.com/advisory/ntap-20231027-0010/',
-                'https://security.netapp.com/advisory/ntap-20240201-0003/',
-                'https://security.netapp.com/advisory/ntap-20240201-0004/',
-                'https://security.netapp.com/advisory/ntap-20241108-0002/',
-                'https://ubuntu.com/security/notices/USN-6450-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-5363',
-                'https://www.debian.org/security/2023/dsa-5532',
-                'https://www.openssl.org/news/secadv/20231024.txt'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: Incorrect cipher key and IV length processing'
-            },
-            {
-              'cve':  'CVE-2024-6119',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-843'
-              ],
-              'description':   "Issue summary: Applications performing certificate name checks (e.g., TLS\nclients checking server certificates) may attempt to read an invalid memory\naddress resulting in abnormal termination of the application process.\n\nImpact summary: Abnormal termination of an application can a cause a denial of\nservice.\n\nApplications performing certificate name checks (e.g., TLS clients checking\nserver certificates) may attempt to read an invalid memory address when\ncomparing the expected name with an `otherName` subject alternative name of an\nX.509 certificate. This may result in an exception that terminates the\napplication program.\n\nNote that basic certificate chain validation (signatures, dates, ...) is not\naffected, the denial of service can occur only when the application also\nspecifies an expected DNS name, Email address or IP address.\n\nTLS servers rarely solicit client certificates, and even when they do, they\ngenerally don't perform a name check against a reference identifier (expected\nidentity), but rather extract the presented identity after checking the\ncertificate chain.  So TLS servers are generally not affected and the severity\nof the issue is Moderate.\n\nThe FIPS modules in 3.3, 3.2, 3.1 and 3.0 are not affected by this issue.",
-              'diffID':        'sha256:05590cd53e0098af064bffc79d5b76acb8f14b8db4643871eb0a18325fad8005',
-              'fixedVersions': [
-                '3.0.15-r0'
-              ],
-              'installedVersion': '3.0.8-r4',
-              'packageName':      'libcrypto3',
-              'purl':             'pkg:apk/alpine/libcrypto3@3.0.8-r4?arch=x86_64&distro=3.17.3',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2024/09/03/4',
-                'https://access.redhat.com/errata/RHSA-2024:8935',
-                'https://access.redhat.com/security/cve/CVE-2024-6119',
-                'https://bugzilla.redhat.com/2306158',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2306158',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-6119',
-                'https://errata.almalinux.org/9/ALSA-2024-8935.html',
-                'https://errata.rockylinux.org/RLSA-2024:6783',
-                'https://github.com/openssl/openssl/commit/05f360d9e849a1b277db628f1f13083a7f8dd04f',
-                'https://github.com/openssl/openssl/commit/06d1dc3fa96a2ba5a3e22735a033012aadc9f0d6',
-                'https://github.com/openssl/openssl/commit/621f3729831b05ee828a3203eddb621d014ff2b2',
-                'https://github.com/openssl/openssl/commit/7dfcee2cd2a63b2c64b9b4b0850be64cb695b0a0',
-                'https://github.com/openssl/openssl/security/advisories/GHSA-5qrj-vq78-58fj',
-                'https://linux.oracle.com/cve/CVE-2024-6119.html',
-                'https://linux.oracle.com/errata/ELSA-2024-8935.html',
-                'https://lists.freebsd.org/archives/freebsd-security/2024-September/000303.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2024-6119',
-                'https://openssl-library.org/news/secadv/20240903.txt',
-                'https://security.netapp.com/advisory/ntap-20240912-0001/',
-                'https://ubuntu.com/security/notices/USN-6986-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2024-6119'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: Possible denial of service in X.509 name checks'
-            },
-            {
-              'cve':  'CVE-2023-2650',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '6.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-770'
-              ],
-              'description':   "Issue summary: Processing some specially crafted ASN.1 object identifiers or\ndata containing them may be very slow.\n\nImpact summary: Applications that use OBJ_obj2txt() directly, or use any of\nthe OpenSSL subsystems OCSP, PKCS7/SMIME, CMS, CMP/CRMF or TS with no message\nsize limit may experience notable to very long delays when processing those\nmessages, which may lead to a Denial of Service.\n\nAn OBJECT IDENTIFIER is composed of a series of numbers - sub-identifiers -\nmost of which have no size limit.  OBJ_obj2txt() may be used to translate\nan ASN.1 OBJECT IDENTIFIER given in DER encoding form (using the OpenSSL\ntype ASN1_OBJECT) to its canonical numeric text form, which are the\nsub-identifiers of the OBJECT IDENTIFIER in decimal form, separated by\nperiods.\n\nWhen one of the sub-identifiers in the OBJECT IDENTIFIER is very large\n(these are sizes that are seen as absurdly large, taking up tens or hundreds\nof KiBs), the translation to a decimal number in text may take a very long\ntime.  The time complexity is O(n^2) with 'n' being the size of the\nsub-identifiers in bytes (*).\n\nWith OpenSSL 3.0, support to fetch cryptographic algorithms using names /\nidentifiers in string form was introduced.  This includes using OBJECT\nIDENTIFIERs in canonical numeric text form as identifiers for fetching\nalgorithms.\n\nSuch OBJECT IDENTIFIERs may be received through the ASN.1 structure\nAlgorithmIdentifier, which is commonly used in multiple protocols to specify\nwhat cryptographic algorithm should be used to sign or verify, encrypt or\ndecrypt, or digest passed data.\n\nApplications that call OBJ_obj2txt() directly with untrusted data are\naffected, with any version of OpenSSL.  If the use is for the mere purpose\nof display, the severity is considered low.\n\nIn OpenSSL 3.0 and newer, this affects the subsystems OCSP, PKCS7/SMIME,\nCMS, CMP/CRMF or TS.  It also impacts anything that processes X.509\ncertificates, including simple things like verifying its signature.\n\nThe impact on TLS is relatively low, because all versions of OpenSSL have a\n100KiB limit on the peer's certificate chain.  Additionally, this only\nimpacts clients, or servers that have explicitly enabled client\nauthentication.\n\nIn OpenSSL 1.1.1 and 1.0.2, this only affects displaying diverse objects,\nsuch as X.509 certificates.  This is assumed to not happen in such a way\nthat it would cause a Denial of Service, so these versions are considered\nnot affected by this issue in such a way that it would be cause for concern,\nand the severity is therefore considered low.",
-              'diffID':        'sha256:05590cd53e0098af064bffc79d5b76acb8f14b8db4643871eb0a18325fad8005',
-              'fixedVersions': [
-                '3.0.9-r0'
-              ],
-              'installedVersion': '3.0.8-r4',
-              'packageName':      'libcrypto3',
-              'purl':             'pkg:apk/alpine/libcrypto3@3.0.8-r4?arch=x86_64&distro=3.17.3',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2023/05/30/1',
-                'https://access.redhat.com/errata/RHSA-2023:6330',
-                'https://access.redhat.com/security/cve/CVE-2023-2650',
-                'https://bugzilla.redhat.com/1858038',
-                'https://bugzilla.redhat.com/2207947',
-                'https://errata.almalinux.org/9/ALSA-2023-6330.html',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=423a2bc737a908ad0c77bda470b2b59dc879936b',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=853c5e56ee0b8650c73140816bb8b91d6163422c',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=9e209944b35cf82368071f160a744b6178f9b098',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=db779b0e10b047f2585615e0b8f2acdf21f8544a',
-                'https://linux.oracle.com/cve/CVE-2023-2650.html',
-                'https://linux.oracle.com/errata/ELSA-2023-6330.html',
-                'https://lists.debian.org/debian-lts-announce/2023/06/msg00011.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-2650',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0009',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://security.netapp.com/advisory/ntap-20230703-0001/',
-                'https://security.netapp.com/advisory/ntap-20231027-0009/',
-                'https://ubuntu.com/security/notices/USN-6119-1',
-                'https://ubuntu.com/security/notices/USN-6188-1',
-                'https://ubuntu.com/security/notices/USN-6672-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-2650',
-                'https://www.debian.org/security/2023/dsa-5417',
-                'https://www.openssl.org/news/secadv/20230530.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: Possible DoS translating ASN.1 object identifiers'
-            },
-            {
-              'cve':  'CVE-2023-2975',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N'
-                },
-                'redhat': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-354',
-                'CWE-287'
-              ],
-              'description':   'Issue summary: The AES-SIV cipher implementation contains a bug that causes\nit to ignore empty associated data entries which are unauthenticated as\na consequence.\n\nImpact summary: Applications that use the AES-SIV algorithm and want to\nauthenticate empty data entries as associated data can be misled by removing,\nadding or reordering such empty entries as these are ignored by the OpenSSL\nimplementation. We are currently unaware of any such applications.\n\nThe AES-SIV algorithm allows for authentication of multiple associated\ndata entries along with the encryption. To authenticate empty data the\napplication has to call EVP_EncryptUpdate() (or EVP_CipherUpdate()) with\nNULL pointer as the output buffer and 0 as the input buffer length.\nThe AES-SIV implementation in OpenSSL just returns success for such a call\ninstead of performing the associated data authentication operation.\nThe empty data thus will not be authenticated.\n\nAs this issue does not affect non-empty associated data authentication and\nwe expect it to be rare for an application to use empty associated data\nentries this is qualified as Low severity issue.',
-              'diffID':        'sha256:05590cd53e0098af064bffc79d5b76acb8f14b8db4643871eb0a18325fad8005',
-              'fixedVersions': [
-                '3.0.9-r2'
-              ],
-              'installedVersion': '3.0.8-r4',
-              'packageName':      'libcrypto3',
-              'purl':             'pkg:apk/alpine/libcrypto3@3.0.8-r4?arch=x86_64&distro=3.17.3',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2023/07/15/1',
-                'http://www.openwall.com/lists/oss-security/2023/07/19/5',
-                'https://access.redhat.com/errata/RHSA-2024:2447',
-                'https://access.redhat.com/security/cve/CVE-2023-2975',
-                'https://bugzilla.redhat.com/2223016',
-                'https://bugzilla.redhat.com/2224962',
-                'https://bugzilla.redhat.com/2227852',
-                'https://bugzilla.redhat.com/2248616',
-                'https://bugzilla.redhat.com/2257571',
-                'https://bugzilla.redhat.com/2258502',
-                'https://bugzilla.redhat.com/2259944',
-                'https://errata.almalinux.org/9/ALSA-2024-2447.html',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=00e2f5eea29994d19293ec4e8c8775ba73678598',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=6a83f0c958811f07e0d11dfc6b5a6a98edfd5bdc',
-                'https://linux.oracle.com/cve/CVE-2023-2975.html',
-                'https://linux.oracle.com/errata/ELSA-2024-2447.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-2975',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://security.netapp.com/advisory/ntap-20230725-0004/',
-                'https://ubuntu.com/security/notices/USN-6450-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-2975',
-                'https://www.openssl.org/news/secadv/20230714.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: AES-SIV cipher implementation contains a bug that causes it to ignore empty associated data entries'
-            },
-            {
-              'cve':  'CVE-2023-3446',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L'
-                },
-                'redhat': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L'
-                }
-              },
-              'cwes': [
-                'CWE-606',
-                'CWE-1333'
-              ],
-              'description':   "Issue summary: Checking excessively long DH keys or parameters may be very slow.\n\nImpact summary: Applications that use the functions DH_check(), DH_check_ex()\nor EVP_PKEY_param_check() to check a DH key or DH parameters may experience long\ndelays. Where the key or parameters that are being checked have been obtained\nfrom an untrusted source this may lead to a Denial of Service.\n\nThe function DH_check() performs various checks on DH parameters. One of those\nchecks confirms that the modulus ('p' parameter) is not too large. Trying to use\na very large modulus is slow and OpenSSL will not normally use a modulus which\nis over 10,000 bits in length.\n\nHowever the DH_check() function checks numerous aspects of the key or parameters\nthat have been supplied. Some of those checks use the supplied modulus value\neven if it has already been found to be too large.\n\nAn application that calls DH_check() and supplies a key or parameters obtained\nfrom an untrusted source could be vulernable to a Denial of Service attack.\n\nThe function DH_check() is itself called by a number of other OpenSSL functions.\nAn application calling any of those other functions may similarly be affected.\nThe other functions affected by this are DH_check_ex() and\nEVP_PKEY_param_check().\n\nAlso vulnerable are the OpenSSL dhparam and pkeyparam command line applications\nwhen using the '-check' option.\n\nThe OpenSSL SSL/TLS implementation is not affected by this issue.\nThe OpenSSL 3.0 and 3.1 FIPS providers are not affected by this issue.",
-              'diffID':        'sha256:05590cd53e0098af064bffc79d5b76acb8f14b8db4643871eb0a18325fad8005',
-              'fixedVersions': [
-                '3.0.9-r3'
-              ],
-              'installedVersion': '3.0.8-r4',
-              'packageName':      'libcrypto3',
-              'purl':             'pkg:apk/alpine/libcrypto3@3.0.8-r4?arch=x86_64&distro=3.17.3',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2023/07/19/4',
-                'http://www.openwall.com/lists/oss-security/2023/07/19/5',
-                'http://www.openwall.com/lists/oss-security/2023/07/19/6',
-                'http://www.openwall.com/lists/oss-security/2023/07/31/1',
-                'http://www.openwall.com/lists/oss-security/2024/05/16/1',
-                'https://access.redhat.com/errata/RHSA-2024:2447',
-                'https://access.redhat.com/security/cve/CVE-2023-3446',
-                'https://bugzilla.redhat.com/2223016',
-                'https://bugzilla.redhat.com/2224962',
-                'https://bugzilla.redhat.com/2227852',
-                'https://bugzilla.redhat.com/2248616',
-                'https://bugzilla.redhat.com/2257571',
-                'https://bugzilla.redhat.com/2258502',
-                'https://bugzilla.redhat.com/2259944',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2224962',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2257582',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2257583',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2258677',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2258688',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2258691',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2258694',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2258700',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-36763',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-36764',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3446',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45229',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45231',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45232',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45233',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45235',
-                'https://errata.almalinux.org/9/ALSA-2024-2447.html',
-                'https://errata.rockylinux.org/RLSA-2024:2264',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=1fa20cf2f506113c761777127a38bce5068740eb',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=8780a896543a654e757db1b9396383f9d8095528',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=9a0a4d3c1e7138915563c0df4fe6a3f9377b839c',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=fc9867c1e03c22ebf56943be205202e576aabf23',
-                'https://linux.oracle.com/cve/CVE-2023-3446.html',
-                'https://linux.oracle.com/errata/ELSA-2024-2447.html',
-                'https://lists.debian.org/debian-lts-announce/2023/08/msg00019.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-3446',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://security.netapp.com/advisory/ntap-20230803-0011/',
-                'https://ubuntu.com/security/notices/USN-6435-1',
-                'https://ubuntu.com/security/notices/USN-6435-2',
-                'https://ubuntu.com/security/notices/USN-6450-1',
-                'https://ubuntu.com/security/notices/USN-6709-1',
-                'https://ubuntu.com/security/notices/USN-7018-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-3446',
-                'https://www.openssl.org/news/secadv/20230719.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: Excessive time spent checking DH keys and parameters'
-            },
-            {
-              'cve':  'CVE-2023-3817',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L'
-                },
-                'redhat': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L'
-                }
-              },
-              'cwes': [
-                'CWE-606',
-                'CWE-834'
-              ],
-              'description':   'Issue summary: Checking excessively long DH keys or parameters may be very slow.\n\nImpact summary: Applications that use the functions DH_check(), DH_check_ex()\nor EVP_PKEY_param_check() to check a DH key or DH parameters may experience long\ndelays. Where the key or parameters that are being checked have been obtained\nfrom an untrusted source this may lead to a Denial of Service.\n\nThe function DH_check() performs various checks on DH parameters. After fixing\nCVE-2023-3446 it was discovered that a large q parameter value can also trigger\nan overly long computation during some of these checks. A correct q value,\nif present, cannot be larger than the modulus p parameter, thus it is\nunnecessary to perform these checks if q is larger than p.\n\nAn application that calls DH_check() and supplies a key or parameters obtained\nfrom an untrusted source could be vulnerable to a Denial of Service attack.\n\nThe function DH_check() is itself called by a number of other OpenSSL functions.\nAn application calling any of those other functions may similarly be affected.\nThe other functions affected by this are DH_check_ex() and\nEVP_PKEY_param_check().\n\nAlso vulnerable are the OpenSSL dhparam and pkeyparam command line applications\nwhen using the "-check" option.\n\nThe OpenSSL SSL/TLS implementation is not affected by this issue.\n\nThe OpenSSL 3.0 and 3.1 FIPS providers are not affected by this issue.',
-              'diffID':        'sha256:05590cd53e0098af064bffc79d5b76acb8f14b8db4643871eb0a18325fad8005',
-              'fixedVersions': [
-                '3.0.10-r0'
-              ],
-              'installedVersion': '3.0.8-r4',
-              'packageName':      'libcrypto3',
-              'purl':             'pkg:apk/alpine/libcrypto3@3.0.8-r4?arch=x86_64&distro=3.17.3',
-              'references':       [
-                'http://seclists.org/fulldisclosure/2023/Jul/43',
-                'http://www.openwall.com/lists/oss-security/2023/07/31/1',
-                'http://www.openwall.com/lists/oss-security/2023/09/22/11',
-                'http://www.openwall.com/lists/oss-security/2023/09/22/9',
-                'http://www.openwall.com/lists/oss-security/2023/11/06/2',
-                'https://access.redhat.com/errata/RHSA-2024:2447',
-                'https://access.redhat.com/security/cve/CVE-2023-3817',
-                'https://bugzilla.redhat.com/2223016',
-                'https://bugzilla.redhat.com/2224962',
-                'https://bugzilla.redhat.com/2227852',
-                'https://bugzilla.redhat.com/2248616',
-                'https://bugzilla.redhat.com/2257571',
-                'https://bugzilla.redhat.com/2258502',
-                'https://bugzilla.redhat.com/2259944',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2224962',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2227852',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2248616',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2270358',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3446',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3817',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-5678',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-2408',
-                'https://errata.almalinux.org/9/ALSA-2024-2447.html',
-                'https://errata.rockylinux.org/RLSA-2023:7877',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=6a1eb62c29db6cb5eec707f9338aee00f44e26f5',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=869ad69aadd985c7b8ca6f4e5dd0eb274c9f3644',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=9002fd07327a91f35ba6c1307e71fa6fd4409b7f',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=91ddeba0f2269b017dc06c46c993a788974b1aa5',
-                'https://linux.oracle.com/cve/CVE-2023-3817.html',
-                'https://linux.oracle.com/errata/ELSA-2024-2447.html',
-                'https://lists.debian.org/debian-lts-announce/2023/08/msg00019.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-3817',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://security.netapp.com/advisory/ntap-20230818-0014/',
-                'https://security.netapp.com/advisory/ntap-20231027-0008/',
-                'https://security.netapp.com/advisory/ntap-20240621-0006/',
-                'https://ubuntu.com/security/notices/USN-6435-1',
-                'https://ubuntu.com/security/notices/USN-6435-2',
-                'https://ubuntu.com/security/notices/USN-6450-1',
-                'https://ubuntu.com/security/notices/USN-6709-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-3817',
-                'https://www.openssl.org/news/secadv/20230731.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'OpenSSL: Excessive time spent checking DH q parameter value'
-            },
-            {
-              'cve':  'CVE-2023-5678',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L'
-                },
-                'redhat': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L'
-                }
-              },
-              'cwes': [
-                'CWE-606',
-                'CWE-754'
-              ],
-              'description':   "Issue summary: Generating excessively long X9.42 DH keys or checking\nexcessively long X9.42 DH keys or parameters may be very slow.\n\nImpact summary: Applications that use the functions DH_generate_key() to\ngenerate an X9.42 DH key may experience long delays.  Likewise, applications\nthat use DH_check_pub_key(), DH_check_pub_key_ex() or EVP_PKEY_public_check()\nto check an X9.42 DH key or X9.42 DH parameters may experience long delays.\nWhere the key or parameters that are being checked have been obtained from\nan untrusted source this may lead to a Denial of Service.\n\nWhile DH_check() performs all the necessary checks (as of CVE-2023-3817),\nDH_check_pub_key() doesn't make any of these checks, and is therefore\nvulnerable for excessively large P and Q parameters.\n\nLikewise, while DH_generate_key() performs a check for an excessively large\nP, it doesn't check for an excessively large Q.\n\nAn application that calls DH_generate_key() or DH_check_pub_key() and\nsupplies a key or parameters obtained from an untrusted source could be\nvulnerable to a Denial of Service attack.\n\nDH_generate_key() and DH_check_pub_key() are also called by a number of\nother OpenSSL functions.  An application calling any of those other\nfunctions may similarly be affected.  The other functions affected by this\nare DH_check_pub_key_ex(), EVP_PKEY_public_check(), and EVP_PKEY_generate().\n\nAlso vulnerable are the OpenSSL pkey command line application when using the\n\"-pubcheck\" option, as well as the OpenSSL genpkey command line application.\n\nThe OpenSSL SSL/TLS implementation is not affected by this issue.\n\nThe OpenSSL 3.0 and 3.1 FIPS providers are not affected by this issue.",
-              'diffID':        'sha256:05590cd53e0098af064bffc79d5b76acb8f14b8db4643871eb0a18325fad8005',
-              'fixedVersions': [
-                '3.0.12-r1'
-              ],
-              'installedVersion': '3.0.8-r4',
-              'packageName':      'libcrypto3',
-              'purl':             'pkg:apk/alpine/libcrypto3@3.0.8-r4?arch=x86_64&distro=3.17.3',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2024/03/11/1',
-                'https://access.redhat.com/errata/RHSA-2024:2447',
-                'https://access.redhat.com/security/cve/CVE-2023-5678',
-                'https://bugzilla.redhat.com/2223016',
-                'https://bugzilla.redhat.com/2224962',
-                'https://bugzilla.redhat.com/2227852',
-                'https://bugzilla.redhat.com/2248616',
-                'https://bugzilla.redhat.com/2257571',
-                'https://bugzilla.redhat.com/2258502',
-                'https://bugzilla.redhat.com/2259944',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2224962',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2227852',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2248616',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2270358',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3446',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3817',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-5678',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-2408',
-                'https://errata.almalinux.org/9/ALSA-2024-2447.html',
-                'https://errata.rockylinux.org/RLSA-2023:7877',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=34efaef6c103d636ab507a0cc34dca4d3aecc055',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=710fee740904b6290fef0dd5536fbcedbc38ff0c',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=db925ae2e65d0d925adef429afc37f75bd1c2017',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=ddeb4b6c6d527e54ce9a99cba785c0f7776e54b6',
-                'https://linux.oracle.com/cve/CVE-2023-5678.html',
-                'https://linux.oracle.com/errata/ELSA-2024-2447.html',
-                'https://lists.debian.org/debian-lts-announce/2024/10/msg00033.html',
-                'https://lists.debian.org/debian-lts-announce/2024/11/msg00000.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-5678',
-                'https://security.netapp.com/advisory/ntap-20231130-0010/',
-                'https://ubuntu.com/security/notices/USN-6622-1',
-                'https://ubuntu.com/security/notices/USN-6632-1',
-                'https://ubuntu.com/security/notices/USN-6709-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-5678',
-                'https://www.openssl.org/news/secadv/20231106.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: Generating excessively long X9.42 DH keys or checking excessively long X9.42 DH keys or parameters may be very slow'
-            },
-            {
-              'cve':  'CVE-2023-6129',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '6.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-440',
-                'CWE-787'
-              ],
-              'description':   'Issue summary: The POLY1305 MAC (message authentication code) implementation\ncontains a bug that might corrupt the internal state of applications running\non PowerPC CPU based platforms if the CPU provides vector instructions.\n\nImpact summary: If an attacker can influence whether the POLY1305 MAC\nalgorithm is used, the application state might be corrupted with various\napplication dependent consequences.\n\nThe POLY1305 MAC (message authentication code) implementation in OpenSSL for\nPowerPC CPUs restores the contents of vector registers in a different order\nthan they are saved. Thus the contents of some of these vector registers\nare corrupted when returning to the caller. The vulnerable code is used only\non newer PowerPC processors supporting the PowerISA 2.07 instructions.\n\nThe consequences of this kind of internal application state corruption can\nbe various - from no consequences, if the calling application does not\ndepend on the contents of non-volatile XMM registers at all, to the worst\nconsequences, where the attacker could get complete control of the application\nprocess. However unless the compiler uses the vector registers for storing\npointers, the most likely consequence, if any, would be an incorrect result\nof some application dependent calculations or a crash leading to a denial of\nservice.\n\nThe POLY1305 MAC algorithm is most frequently used as part of the\nCHACHA20-POLY1305 AEAD (authenticated encryption with associated data)\nalgorithm. The most common usage of this AEAD cipher is with TLS protocol\nversions 1.2 and 1.3. If this cipher is enabled on the server a malicious\nclient can influence whether this AEAD cipher is used. This implies that\nTLS server applications using OpenSSL can be potentially impacted. However\nwe are currently not aware of any concrete application that would be affected\nby this issue therefore we consider this a Low severity security issue.',
-              'diffID':        'sha256:05590cd53e0098af064bffc79d5b76acb8f14b8db4643871eb0a18325fad8005',
-              'fixedVersions': [
-                '3.0.12-r2'
-              ],
-              'installedVersion': '3.0.8-r4',
-              'packageName':      'libcrypto3',
-              'purl':             'pkg:apk/alpine/libcrypto3@3.0.8-r4?arch=x86_64&distro=3.17.3',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2024/03/11/1',
-                'https://access.redhat.com/errata/RHSA-2024:9088',
-                'https://access.redhat.com/security/cve/CVE-2023-6129',
-                'https://bugzilla.redhat.com/2257571',
-                'https://bugzilla.redhat.com/2258502',
-                'https://bugzilla.redhat.com/2259944',
-                'https://bugzilla.redhat.com/2284243',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2257571',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2258502',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2259944',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2284243',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-6129',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-6237',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-0727',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-1298',
-                'https://errata.almalinux.org/9/ALSA-2024-9088.html',
-                'https://errata.rockylinux.org/RLSA-2024:9088',
-                'https://github.com/openssl/openssl/commit/050d26383d4e264966fb83428e72d5d48f402d35',
-                'https://github.com/openssl/openssl/commit/5b139f95c9a47a55a0c54100f3837b1eee942b04',
-                'https://github.com/openssl/openssl/commit/f3fc5808fe9ff74042d639839610d03b8fdcc015',
-                'https://linux.oracle.com/cve/CVE-2023-6129.html',
-                'https://linux.oracle.com/errata/ELSA-2024-9088.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-6129',
-                'https://security.netapp.com/advisory/ntap-20240216-0009/',
-                'https://security.netapp.com/advisory/ntap-20240426-0008/',
-                'https://security.netapp.com/advisory/ntap-20240426-0013/',
-                'https://security.netapp.com/advisory/ntap-20240503-0011/',
-                'https://ubuntu.com/security/notices/USN-6622-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-6129',
-                'https://www.openssl.org/news/secadv/20240109.txt',
-                'https://www.openwall.com/lists/oss-security/2024/01/09/1'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: POLY1305 MAC implementation corrupts vector registers on PowerPC'
-            },
-            {
-              'cve':  'CVE-2023-6237',
-              'cvss': {
-                'redhat': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-606'
-              ],
-              'description':   "Issue summary: Checking excessively long invalid RSA public keys may take\na long time.\n\nImpact summary: Applications that use the function EVP_PKEY_public_check()\nto check RSA public keys may experience long delays. Where the key that\nis being checked has been obtained from an untrusted source this may lead\nto a Denial of Service.\n\nWhen function EVP_PKEY_public_check() is called on RSA public keys,\na computation is done to confirm that the RSA modulus, n, is composite.\nFor valid RSA keys, n is a product of two or more large primes and this\ncomputation completes quickly. However, if n is an overly large prime,\nthen this computation would take a long time.\n\nAn application that calls EVP_PKEY_public_check() and supplies an RSA key\nobtained from an untrusted source could be vulnerable to a Denial of Service\nattack.\n\nThe function EVP_PKEY_public_check() is not called from other OpenSSL\nfunctions however it is called from the OpenSSL pkey command line\napplication. For that reason that application is also vulnerable if used\nwith the '-pubin' and '-check' options on untrusted data.\n\nThe OpenSSL SSL/TLS implementation is not affected by this issue.\n\nThe OpenSSL 3.0 and 3.1 FIPS providers are affected by this issue.",
-              'diffID':        'sha256:05590cd53e0098af064bffc79d5b76acb8f14b8db4643871eb0a18325fad8005',
-              'fixedVersions': [
-                '3.0.12-r3'
-              ],
-              'installedVersion': '3.0.8-r4',
-              'packageName':      'libcrypto3',
-              'purl':             'pkg:apk/alpine/libcrypto3@3.0.8-r4?arch=x86_64&distro=3.17.3',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2024/03/11/1',
-                'https://access.redhat.com/errata/RHSA-2024:9088',
-                'https://access.redhat.com/security/cve/CVE-2023-6237',
-                'https://bugzilla.redhat.com/2257571',
-                'https://bugzilla.redhat.com/2258502',
-                'https://bugzilla.redhat.com/2259944',
-                'https://bugzilla.redhat.com/2284243',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2257571',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2258502',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2259944',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2284243',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-6129',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-6237',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-0727',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-1298',
-                'https://errata.almalinux.org/9/ALSA-2024-9088.html',
-                'https://errata.rockylinux.org/RLSA-2024:9088',
-                'https://github.com/openssl/openssl/commit/0b0f7abfb37350794a4b8960fafc292cd5d1b84d',
-                'https://github.com/openssl/openssl/commit/18c02492138d1eb8b6548cb26e7b625fb2414a2a',
-                'https://github.com/openssl/openssl/commit/a830f551557d3d66a84bbb18a5b889c640c36294',
-                'https://linux.oracle.com/cve/CVE-2023-6237.html',
-                'https://linux.oracle.com/errata/ELSA-2024-9088.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-6237',
-                'https://security.netapp.com/advisory/ntap-20240531-0007/',
-                'https://ubuntu.com/security/notices/USN-6622-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-6237',
-                'https://www.openssl.org/news/secadv/20240115.txt',
-                'https://www.openwall.com/lists/oss-security/2024/01/15/2'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: Excessive time spent checking invalid RSA public keys'
-            },
-            {
-              'cve':  'CVE-2024-0727',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '5.5',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H'
-                },
-                'nvd': {
-                  'v3score':  '5.5',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '5.5',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-476'
-              ],
-              'description':   'Issue summary: Processing a maliciously formatted PKCS12 file may lead OpenSSL\nto crash leading to a potential Denial of Service attack\n\nImpact summary: Applications loading files in the PKCS12 format from untrusted\nsources might terminate abruptly.\n\nA file in PKCS12 format can contain certificates and keys and may come from an\nuntrusted source. The PKCS12 specification allows certain fields to be NULL, but\nOpenSSL does not correctly check for this case. This can lead to a NULL pointer\ndereference that results in OpenSSL crashing. If an application processes PKCS12\nfiles from an untrusted source using the OpenSSL APIs then that application will\nbe vulnerable to this issue.\n\nOpenSSL APIs that are vulnerable to this are: PKCS12_parse(),\nPKCS12_unpack_p7data(), PKCS12_unpack_p7encdata(), PKCS12_unpack_authsafes()\nand PKCS12_newpass().\n\nWe have also fixed a similar issue in SMIME_write_PKCS7(). However since this\nfunction is related to writing data we do not consider it security significant.\n\nThe FIPS modules in 3.2, 3.1 and 3.0 are not affected by this issue.',
-              'diffID':        'sha256:05590cd53e0098af064bffc79d5b76acb8f14b8db4643871eb0a18325fad8005',
-              'fixedVersions': [
-                '3.0.12-r4'
-              ],
-              'installedVersion': '3.0.8-r4',
-              'packageName':      'libcrypto3',
-              'purl':             'pkg:apk/alpine/libcrypto3@3.0.8-r4?arch=x86_64&distro=3.17.3',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2024/03/11/1',
-                'https://access.redhat.com/errata/RHSA-2024:9088',
-                'https://access.redhat.com/security/cve/CVE-2024-0727',
-                'https://bugzilla.redhat.com/2257571',
-                'https://bugzilla.redhat.com/2258502',
-                'https://bugzilla.redhat.com/2259944',
-                'https://bugzilla.redhat.com/2284243',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2257571',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2258502',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2259944',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2284243',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-6129',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-6237',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-0727',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-1298',
-                'https://errata.almalinux.org/9/ALSA-2024-9088.html',
-                'https://errata.rockylinux.org/RLSA-2024:9088',
-                'https://github.com/alexcrichton/openssl-src-rs/commit/add20f73b6b42be7451af2e1044d4e0e778992b2',
-                'https://github.com/github/advisory-database/pull/3472',
-                'https://github.com/openssl/openssl/commit/09df4395b5071217b76dc7d3d2e630eb8c5a79c2',
-                'https://github.com/openssl/openssl/commit/775acfdbd0c6af9ac855f34969cdab0c0c90844a',
-                'https://github.com/openssl/openssl/commit/d135eeab8a5dbf72b3da5240bab9ddb7678dbd2c',
-                'https://github.com/openssl/openssl/pull/23362',
-                'https://github.com/pyca/cryptography/commit/3519591d255d4506fbcd0d04037d45271903c64d',
-                'https://github.openssl.org/openssl/extended-releases/commit/03b3941d60c4bce58fab69a0c22377ab439bc0e8',
-                'https://github.openssl.org/openssl/extended-releases/commit/aebaa5883e31122b404e450732dc833dc9dee539',
-                'https://linux.oracle.com/cve/CVE-2024-0727.html',
-                'https://linux.oracle.com/errata/ELSA-2024-9088.html',
-                'https://lists.debian.org/debian-lts-announce/2024/10/msg00033.html',
-                'https://lists.debian.org/debian-lts-announce/2024/11/msg00000.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2024-0727',
-                'https://security.netapp.com/advisory/ntap-20240208-0006',
-                'https://security.netapp.com/advisory/ntap-20240208-0006/',
-                'https://ubuntu.com/security/notices/USN-6622-1',
-                'https://ubuntu.com/security/notices/USN-6632-1',
-                'https://ubuntu.com/security/notices/USN-6709-1',
-                'https://ubuntu.com/security/notices/USN-7018-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2024-0727',
-                'https://www.openssl.org/news/secadv/20240125.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: denial of service via null dereference'
-            },
-            {
-              'cve':  'CVE-2024-4603',
-              'cvss': {
-                'redhat': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L'
-                }
-              },
-              'cwes': [
-                'CWE-606',
-                'CWE-834'
-              ],
-              'description':   'Issue summary: Checking excessively long DSA keys or parameters may be very\nslow.\n\nImpact summary: Applications that use the functions EVP_PKEY_param_check()\nor EVP_PKEY_public_check() to check a DSA public key or DSA parameters may\nexperience long delays. Where the key or parameters that are being checked\nhave been obtained from an untrusted source this may lead to a Denial of\nService.\n\nThe functions EVP_PKEY_param_check() or EVP_PKEY_public_check() perform\nvarious checks on DSA parameters. Some of those computations take a long time\nif the modulus (`p` parameter) is too large.\n\nTrying to use a very large modulus is slow and OpenSSL will not allow using\npublic keys with a modulus which is over 10,000 bits in length for signature\nverification. However the key and parameter check functions do not limit\nthe modulus size when performing the checks.\n\nAn application that calls EVP_PKEY_param_check() or EVP_PKEY_public_check()\nand supplies a key or parameters obtained from an untrusted source could be\nvulnerable to a Denial of Service attack.\n\nThese functions are not called by OpenSSL itself on untrusted DSA keys so\nonly applications that directly call these functions may be vulnerable.\n\nAlso vulnerable are the OpenSSL pkey and pkeyparam command line applications\nwhen using the `-check` option.\n\nThe OpenSSL SSL/TLS implementation is not affected by this issue.\n\nThe OpenSSL 3.0 and 3.1 FIPS providers are affected by this issue.',
-              'diffID':        'sha256:05590cd53e0098af064bffc79d5b76acb8f14b8db4643871eb0a18325fad8005',
-              'fixedVersions': [
-                '3.0.13-r0'
-              ],
-              'installedVersion': '3.0.8-r4',
-              'packageName':      'libcrypto3',
-              'purl':             'pkg:apk/alpine/libcrypto3@3.0.8-r4?arch=x86_64&distro=3.17.3',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2024/05/16/2',
-                'https://access.redhat.com/errata/RHSA-2024:9333',
-                'https://access.redhat.com/security/cve/CVE-2024-4603',
-                'https://bugzilla.redhat.com/2274020',
-                'https://bugzilla.redhat.com/2281029',
-                'https://bugzilla.redhat.com/2283757',
-                'https://bugzilla.redhat.com/2294581',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2274020',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2281029',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2283757',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2294581',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-2511',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-4603',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-4741',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-5535',
-                'https://errata.almalinux.org/9/ALSA-2024-9333.html',
-                'https://errata.rockylinux.org/RLSA-2024:9333',
-                'https://github.com/openssl/openssl/commit/3559e868e58005d15c6013a0c1fd832e51c73397',
-                'https://github.com/openssl/openssl/commit/53ea06486d296b890d565fb971b2764fcd826e7e',
-                'https://github.com/openssl/openssl/commit/9c39b3858091c152f52513c066ff2c5a47969f0d',
-                'https://github.com/openssl/openssl/commit/da343d0605c826ef197aceedc67e8e04f065f740',
-                'https://linux.oracle.com/cve/CVE-2024-4603.html',
-                'https://linux.oracle.com/errata/ELSA-2024-9333.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2024-4603',
-                'https://security.netapp.com/advisory/ntap-20240621-0001/',
-                'https://ubuntu.com/security/notices/USN-6937-1',
-                'https://www.cve.org/CVERecord?id=CVE-2024-4603',
-                'https://www.openssl.org/news/secadv/20240516.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: Excessive time spent checking DSA keys and parameters'
-            },
-            {
-              'cve':  'CVE-2024-4741',
-              'cvss': {
-                'redhat': {
-                  'v3score':  '5.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   'Issue summary: Calling the OpenSSL API function SSL_free_buffers may cause\nmemory to be accessed that was previously freed in some situations\n\nImpact summary: A use after free can have a range of potential consequences such\nas the corruption of valid data, crashes or execution of arbitrary code.\nHowever, only applications that directly call the SSL_free_buffers function are\naffected by this issue. Applications that do not call this function are not\nvulnerable. Our investigations indicate that this function is rarely used by\napplications.\n\nThe SSL_free_buffers function is used to free the internal OpenSSL buffer used\nwhen processing an incoming record from the network. The call is only expected\nto succeed if the buffer is not currently in use. However, two scenarios have\nbeen identified where the buffer is freed even when still in use.\n\nThe first scenario occurs where a record header has been received from the\nnetwork and processed by OpenSSL, but the full record body has not yet arrived.\nIn this case calling SSL_free_buffers will succeed even though a record has only\nbeen partially processed and the buffer is still in use.\n\nThe second scenario occurs where a full record containing application data has\nbeen received and processed by OpenSSL but the application has only read part of\nthis data. Again a call to SSL_free_buffers will succeed even though the buffer\nis still in use.\n\nWhile these scenarios could occur accidentally during normal operation a\nmalicious attacker could attempt to engineer a stituation where this occurs.\nWe are not aware of this issue being actively exploited.\n\nThe FIPS modules in 3.3, 3.2, 3.1 and 3.0 are not affected by this issue.',
-              'diffID':        'sha256:05590cd53e0098af064bffc79d5b76acb8f14b8db4643871eb0a18325fad8005',
-              'fixedVersions': [
-                '3.0.14-r0'
-              ],
-              'installedVersion': '3.0.8-r4',
-              'packageName':      'libcrypto3',
-              'purl':             'pkg:apk/alpine/libcrypto3@3.0.8-r4?arch=x86_64&distro=3.17.3',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2024:9333',
-                'https://access.redhat.com/security/cve/CVE-2024-4741',
-                'https://bugzilla.redhat.com/2274020',
-                'https://bugzilla.redhat.com/2281029',
-                'https://bugzilla.redhat.com/2283757',
-                'https://bugzilla.redhat.com/2294581',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2274020',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2281029',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2283757',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2294581',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-2511',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-4603',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-4741',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-5535',
-                'https://errata.almalinux.org/9/ALSA-2024-9333.html',
-                'https://errata.rockylinux.org/RLSA-2024:9333',
-                'https://github.com/openssl/openssl/commit/704f725b96aa373ee45ecfb23f6abfe8be8d9177',
-                'https://github.com/openssl/openssl/commit/b3f0eb0a295f58f16ba43ba99dad70d4ee5c437d',
-                'https://github.com/openssl/openssl/commit/c88c3de51020c37e8706bf7a682a162593053aac',
-                'https://github.com/openssl/openssl/commit/e5093133c35ca82874ad83697af76f4b0f7e3bd8',
-                'https://github.openssl.org/openssl/extended-releases/commit/f7a045f3143fc6da2ee66bf52d8df04829590dd4',
-                'https://linux.oracle.com/cve/CVE-2024-4741.html',
-                'https://linux.oracle.com/errata/ELSA-2024-9333.html',
-                'https://lists.debian.org/debian-lts-announce/2024/10/msg00033.html',
-                'https://lists.debian.org/debian-lts-announce/2024/11/msg00000.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2024-4741',
-                'https://security.netapp.com/advisory/ntap-20240621-0004/',
-                'https://ubuntu.com/security/notices/USN-6937-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2024-4741',
-                'https://www.openssl.org/news/secadv/20240528.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: Use After Free with SSL_free_buffers'
-            },
-            {
-              'cve':  'CVE-2024-5535',
-              'cvss': {
-                'redhat': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-125'
-              ],
-              'description':   'Issue summary: Calling the OpenSSL API function SSL_select_next_proto with an\nempty supported client protocols buffer may cause a crash or memory contents to\nbe sent to the peer.\n\nImpact summary: A buffer overread can have a range of potential consequences\nsuch as unexpected application beahviour or a crash. In particular this issue\ncould result in up to 255 bytes of arbitrary private data from memory being sent\nto the peer leading to a loss of confidentiality. However, only applications\nthat directly call the SSL_select_next_proto function with a 0 length list of\nsupported client protocols are affected by this issue. This would normally never\nbe a valid scenario and is typically not under attacker control but may occur by\naccident in the case of a configuration or programming error in the calling\napplication.\n\nThe OpenSSL API function SSL_select_next_proto is typically used by TLS\napplications that support ALPN (Application Layer Protocol Negotiation) or NPN\n(Next Protocol Negotiation). NPN is older, was never standardised and\nis deprecated in favour of ALPN. We believe that ALPN is significantly more\nwidely deployed than NPN. The SSL_select_next_proto function accepts a list of\nprotocols from the server and a list of protocols from the client and returns\nthe first protocol that appears in the server list that also appears in the\nclient list. In the case of no overlap between the two lists it returns the\nfirst item in the client list. In either case it will signal whether an overlap\nbetween the two lists was found. In the case where SSL_select_next_proto is\ncalled with a zero length client list it fails to notice this condition and\nreturns the memory immediately following the client list pointer (and reports\nthat there was no overlap in the lists).\n\nThis function is typically called from a server side application callback for\nALPN or a client side application callback for NPN. In the case of ALPN the list\nof protocols supplied by the client is guaranteed by libssl to never be zero in\nlength. The list of server protocols comes from the application and should never\nnormally be expected to be of zero length. In this case if the\nSSL_select_next_proto function has been called as expected (with the list\nsupplied by the client passed in the client/client_len parameters), then the\napplication will not be vulnerable to this issue. If the application has\naccidentally been configured with a zero length server list, and has\naccidentally passed that zero length server list in the client/client_len\nparameters, and has additionally failed to correctly handle a "no overlap"\nresponse (which would normally result in a handshake failure in ALPN) then it\nwill be vulnerable to this problem.\n\nIn the case of NPN, the protocol permits the client to opportunistically select\na protocol when there is no overlap. OpenSSL returns the first client protocol\nin the no overlap case in support of this. The list of client protocols comes\nfrom the application and should never normally be expected to be of zero length.\nHowever if the SSL_select_next_proto function is accidentally called with a\nclient_len of 0 then an invalid memory pointer will be returned instead. If the\napplication uses this output as the opportunistic protocol then the loss of\nconfidentiality will occur.\n\nThis issue has been assessed as Low severity because applications are most\nlikely to be vulnerable if they are using NPN instead of ALPN - but NPN is not\nwidely used. It also requires an application configuration or programming error.\nFinally, this issue would not typically be under attacker control making active\nexploitation unlikely.\n\nThe FIPS modules in 3.3, 3.2, 3.1 and 3.0 are not affected by this issue.\n\nDue to the low severity of this issue we are not issuing new releases of\nOpenSSL at this time. The fix will be included in the next releases when they\nbecome available.',
-              'diffID':        'sha256:05590cd53e0098af064bffc79d5b76acb8f14b8db4643871eb0a18325fad8005',
-              'fixedVersions': [
-                '3.0.14-r0'
-              ],
-              'installedVersion': '3.0.8-r4',
-              'packageName':      'libcrypto3',
-              'purl':             'pkg:apk/alpine/libcrypto3@3.0.8-r4?arch=x86_64&distro=3.17.3',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2024/06/27/1',
-                'http://www.openwall.com/lists/oss-security/2024/06/28/4',
-                'http://www.openwall.com/lists/oss-security/2024/08/15/1',
-                'https://access.redhat.com/errata/RHSA-2025:1671',
-                'https://access.redhat.com/security/cve/CVE-2024-5535',
-                'https://bugzilla.redhat.com/2294581',
-                'https://bugzilla.redhat.com/2294676',
-                'https://bugzilla.redhat.com/2301888',
-                'https://bugzilla.redhat.com/2318857',
-                'https://bugzilla.redhat.com/2318858',
-                'https://bugzilla.redhat.com/2318870',
-                'https://bugzilla.redhat.com/2318873',
-                'https://bugzilla.redhat.com/2318874',
-                'https://bugzilla.redhat.com/2318876',
-                'https://bugzilla.redhat.com/2318882',
-                'https://bugzilla.redhat.com/2318883',
-                'https://bugzilla.redhat.com/2318884',
-                'https://bugzilla.redhat.com/2318885',
-                'https://bugzilla.redhat.com/2318886',
-                'https://bugzilla.redhat.com/2318897',
-                'https://bugzilla.redhat.com/2318900',
-                'https://bugzilla.redhat.com/2318905',
-                'https://bugzilla.redhat.com/2318914',
-                'https://bugzilla.redhat.com/2318922',
-                'https://bugzilla.redhat.com/2318923',
-                'https://bugzilla.redhat.com/2318925',
-                'https://bugzilla.redhat.com/2318926',
-                'https://bugzilla.redhat.com/2318927',
-                'https://bugzilla.redhat.com/2331191',
-                'https://bugzilla.redhat.com/2339218',
-                'https://bugzilla.redhat.com/2339220',
-                'https://bugzilla.redhat.com/2339221',
-                'https://bugzilla.redhat.com/2339226',
-                'https://bugzilla.redhat.com/2339231',
-                'https://bugzilla.redhat.com/2339236',
-                'https://bugzilla.redhat.com/2339238',
-                'https://bugzilla.redhat.com/2339243',
-                'https://bugzilla.redhat.com/2339247',
-                'https://bugzilla.redhat.com/2339252',
-                'https://bugzilla.redhat.com/2339259',
-                'https://bugzilla.redhat.com/2339266',
-                'https://bugzilla.redhat.com/2339270',
-                'https://bugzilla.redhat.com/2339271',
-                'https://bugzilla.redhat.com/2339275',
-                'https://bugzilla.redhat.com/2339277',
-                'https://bugzilla.redhat.com/2339281',
-                'https://bugzilla.redhat.com/2339284',
-                'https://bugzilla.redhat.com/2339291',
-                'https://bugzilla.redhat.com/2339293',
-                'https://bugzilla.redhat.com/2339295',
-                'https://bugzilla.redhat.com/2339299',
-                'https://bugzilla.redhat.com/2339300',
-                'https://bugzilla.redhat.com/2339304',
-                'https://bugzilla.redhat.com/2339305',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2274020',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2281029',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2283757',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2294581',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-2511',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-4603',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-4741',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-5535',
-                'https://errata.almalinux.org/9/ALSA-2025-1671.html',
-                'https://errata.rockylinux.org/RLSA-2024:9333',
-                'https://github.com/openssl/openssl/commit/4ada436a1946cbb24db5ab4ca082b69c1bc10f37',
-                'https://github.com/openssl/openssl/commit/99fb785a5f85315b95288921a321a935ea29a51e',
-                'https://github.com/openssl/openssl/commit/cf6f91f6121f4db167405db2f0de410a456f260c',
-                'https://github.com/openssl/openssl/commit/e86ac436f0bd54d4517745483e2315650fae7b2c',
-                'https://github.openssl.org/openssl/extended-releases/commit/9947251413065a05189a63c9b7a6c1d4e224c21c',
-                'https://github.openssl.org/openssl/extended-releases/commit/b78ec0824da857223486660177d3b1f255c65d87',
-                'https://linux.oracle.com/cve/CVE-2024-5535.html',
-                'https://linux.oracle.com/errata/ELSA-2025-1673.html',
-                'https://lists.debian.org/debian-lts-announce/2024/10/msg00033.html',
-                'https://lists.debian.org/debian-lts-announce/2024/11/msg00000.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2024-5535',
-                'https://openssl.org/news/secadv/20240627.txt',
-                'https://security.netapp.com/advisory/ntap-20240712-0005/',
-                'https://security.netapp.com/advisory/ntap-20241025-0006/',
-                'https://security.netapp.com/advisory/ntap-20241025-0010/',
-                'https://ubuntu.com/security/notices/USN-6937-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2024-5535',
-                'https://www.openssl.org/news/secadv/20240627.txt',
-                'https://www.oracle.com/security-alerts/cpuoct2024.html#AppendixMSQL'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: SSL_select_next_proto buffer overread'
-            },
-            {
-              'cve':  'CVE-2024-2511',
-              'cvss': {
-                'redhat': {
-                  'v3score':  '3.7',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L'
-                }
-              },
-              'cwes': [
-                'CWE-1325'
-              ],
-              'description':   'Issue summary: Some non-default TLS server configurations can cause unbounded\nmemory growth when processing TLSv1.3 sessions\n\nImpact summary: An attacker may exploit certain server configurations to trigger\nunbounded memory growth that would lead to a Denial of Service\n\nThis problem can occur in TLSv1.3 if the non-default SSL_OP_NO_TICKET option is\nbeing used (but not if early_data support is also configured and the default\nanti-replay protection is in use). In this case, under certain conditions, the\nsession cache can get into an incorrect state and it will fail to flush properly\nas it fills. The session cache will continue to grow in an unbounded manner. A\nmalicious client could deliberately create the scenario for this failure to\nforce a Denial of Service. It may also happen by accident in normal operation.\n\nThis issue only affects TLS servers supporting TLSv1.3. It does not affect TLS\nclients.\n\nThe FIPS modules in 3.2, 3.1 and 3.0 are not affected by this issue. OpenSSL\n1.0.2 is also not affected by this issue.',
-              'diffID':        'sha256:05590cd53e0098af064bffc79d5b76acb8f14b8db4643871eb0a18325fad8005',
-              'fixedVersions': [
-                '3.0.12-r5'
-              ],
-              'installedVersion': '3.0.8-r4',
-              'packageName':      'libcrypto3',
-              'purl':             'pkg:apk/alpine/libcrypto3@3.0.8-r4?arch=x86_64&distro=3.17.3',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2024/04/08/5',
-                'https://access.redhat.com/errata/RHSA-2024:9333',
-                'https://access.redhat.com/security/cve/CVE-2024-2511',
-                'https://bugzilla.redhat.com/2274020',
-                'https://bugzilla.redhat.com/2281029',
-                'https://bugzilla.redhat.com/2283757',
-                'https://bugzilla.redhat.com/2294581',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2274020',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2281029',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2283757',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2294581',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-2511',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-4603',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-4741',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-5535',
-                'https://errata.almalinux.org/9/ALSA-2024-9333.html',
-                'https://errata.rockylinux.org/RLSA-2024:9333',
-                'https://github.com/openssl/openssl/commit/7e4d731b1c07201ad9374c1cd9ac5263bdf35bce',
-                'https://github.com/openssl/openssl/commit/b52867a9f618bb955bed2a3ce3db4d4f97ed8e5d',
-                'https://github.com/openssl/openssl/commit/e9d7083e241670332e0443da0f0d4ffb52829f08',
-                'https://github.openssl.org/openssl/extended-releases/commit/5f8d25770ae6437db119dfc951e207271a326640',
-                'https://linux.oracle.com/cve/CVE-2024-2511.html',
-                'https://linux.oracle.com/errata/ELSA-2024-9333.html',
-                'https://lists.debian.org/debian-lts-announce/2024/10/msg00033.html',
-                'https://lists.debian.org/debian-lts-announce/2024/11/msg00000.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2024-2511',
-                'https://security.netapp.com/advisory/ntap-20240503-0013/',
-                'https://ubuntu.com/security/notices/USN-6937-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2024-2511',
-                'https://www.openssl.org/news/secadv/20240408.txt',
-                'https://www.openssl.org/news/vulnerabilities.html'
-              ],
-              'severity':   'LOW',
-              'suppressed': false,
-              'title':      'openssl: Unbounded memory growth with session handling in TLSv1.3'
-            },
-            {
-              'cve':  'CVE-2024-9143',
-              'cvss': {
-                'redhat': {
-                  'v3score':  '3.7',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L'
-                }
-              },
-              'cwes': [
-                'CWE-125',
-                'CWE-787'
-              ],
-              'description':   "Issue summary: Use of the low-level GF(2^m) elliptic curve APIs with untrusted\nexplicit values for the field polynomial can lead to out-of-bounds memory reads\nor writes.\n\nImpact summary: Out of bound memory writes can lead to an application crash or\neven a possibility of a remote code execution, however, in all the protocols\ninvolving Elliptic Curve Cryptography that we're aware of, either only \"named\ncurves\" are supported, or, if explicit curve parameters are supported, they\nspecify an X9.62 encoding of binary (GF(2^m)) curves that can't represent\nproblematic input values. Thus the likelihood of existence of a vulnerable\napplication is low.\n\nIn particular, the X9.62 encoding is used for ECC keys in X.509 certificates,\nso problematic inputs cannot occur in the context of processing X.509\ncertificates.  Any problematic use-cases would have to be using an \"exotic\"\ncurve encoding.\n\nThe affected APIs include: EC_GROUP_new_curve_GF2m(), EC_GROUP_new_from_params(),\nand various supporting BN_GF2m_*() functions.\n\nApplications working with \"exotic\" explicit binary (GF(2^m)) curve parameters,\nthat make it possible to represent invalid field polynomials with a zero\nconstant term, via the above or similar APIs, may terminate abruptly as a\nresult of reading or writing outside of array bounds.  Remote code execution\ncannot easily be ruled out.\n\nThe FIPS modules in 3.3, 3.2, 3.1 and 3.0 are not affected by this issue.",
-              'diffID':        'sha256:05590cd53e0098af064bffc79d5b76acb8f14b8db4643871eb0a18325fad8005',
-              'fixedVersions': [
-                '3.0.15-r1'
-              ],
-              'installedVersion': '3.0.8-r4',
-              'packageName':      'libcrypto3',
-              'purl':             'pkg:apk/alpine/libcrypto3@3.0.8-r4?arch=x86_64&distro=3.17.3',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2024/10/16/1',
-                'http://www.openwall.com/lists/oss-security/2024/10/23/1',
-                'http://www.openwall.com/lists/oss-security/2024/10/24/1',
-                'https://access.redhat.com/security/cve/CVE-2024-9143',
-                'https://github.com/openssl/openssl/commit/72ae83ad214d2eef262461365a1975707f862712',
-                'https://github.com/openssl/openssl/commit/bc7e04d7c8d509fb78fc0e285aa948fb0da04700',
-                'https://github.com/openssl/openssl/commit/c0d3e4d32d2805f49bec30547f225bc4d092e1f4',
-                'https://github.com/openssl/openssl/commit/fdf6723362ca51bd883295efe206cb5b1cfa5154',
-                'https://github.openssl.org/openssl/extended-releases/commit/8efc0cbaa8ebba8e116f7b81a876a4123594d86a',
-                'https://github.openssl.org/openssl/extended-releases/commit/9d576994cec2b7aa37a91740ea7e680810957e41',
-                'https://lists.debian.org/debian-lts-announce/2024/10/msg00033.html',
-                'https://lists.debian.org/debian-lts-announce/2024/11/msg00000.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2024-9143',
-                'https://openssl-library.org/news/secadv/20241016.txt',
-                'https://security.netapp.com/advisory/ntap-20241101-0001/',
-                'https://ubuntu.com/security/notices/USN-7264-1',
-                'https://ubuntu.com/security/notices/USN-7278-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2024-9143'
-              ],
-              'severity':   'LOW',
-              'suppressed': false,
-              'title':      'openssl: Low-level invalid GF(2^m) parameters lead to OOB memory access'
-            },
-            {
-              'cve':  'CVE-2023-5363',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N'
-                },
-                'redhat': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-684'
-              ],
-              'description':   "Issue summary: A bug has been identified in the processing of key and\ninitialisation vector (IV) lengths.  This can lead to potential truncation\nor overruns during the initialisation of some symmetric ciphers.\n\nImpact summary: A truncation in the IV can result in non-uniqueness,\nwhich could result in loss of confidentiality for some cipher modes.\n\nWhen calling EVP_EncryptInit_ex2(), EVP_DecryptInit_ex2() or\nEVP_CipherInit_ex2() the provided OSSL_PARAM array is processed after\nthe key and IV have been established.  Any alterations to the key length,\nvia the \"keylen\" parameter or the IV length, via the \"ivlen\" parameter,\nwithin the OSSL_PARAM array will not take effect as intended, potentially\ncausing truncation or overreading of these values.  The following ciphers\nand cipher modes are impacted: RC2, RC4, RC5, CCM, GCM and OCB.\n\nFor the CCM, GCM and OCB cipher modes, truncation of the IV can result in\nloss of confidentiality.  For example, when following NIST's SP 800-38D\nsection 8.2.1 guidance for constructing a deterministic IV for AES in\nGCM mode, truncation of the counter portion could lead to IV reuse.\n\nBoth truncations and overruns of the key and overruns of the IV will\nproduce incorrect results and could, in some cases, trigger a memory\nexception.  However, these issues are not currently assessed as security\ncritical.\n\nChanging the key and/or IV lengths is not considered to be a common operation\nand the vulnerable API was recently introduced. Furthermore it is likely that\napplication developers will have spotted this problem during testing since\ndecryption would fail unless both peers in the communication were similarly\nvulnerable. For these reasons we expect the probability of an application being\nvulnerable to this to be quite low. However if an application is vulnerable then\nthis issue is considered very serious. For these reasons we have assessed this\nissue as Moderate severity overall.\n\nThe OpenSSL SSL/TLS implementation is not affected by this issue.\n\nThe OpenSSL 3.0 and 3.1 FIPS providers are not affected by this because\nthe issue lies outside of the FIPS provider boundary.\n\nOpenSSL 3.1 and 3.0 are vulnerable to this issue.",
-              'diffID':        'sha256:05590cd53e0098af064bffc79d5b76acb8f14b8db4643871eb0a18325fad8005',
-              'fixedVersions': [
-                '3.0.12-r0'
-              ],
-              'installedVersion': '3.0.8-r4',
-              'packageName':      'libssl3',
-              'purl':             'pkg:apk/alpine/libssl3@3.0.8-r4?arch=x86_64&distro=3.17.3',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2023/10/24/1',
-                'https://access.redhat.com/errata/RHSA-2024:0310',
-                'https://access.redhat.com/security/cve/CVE-2023-5363',
-                'https://bugzilla.redhat.com/2243839',
-                'https://errata.almalinux.org/9/ALSA-2024-0310.html',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=0df40630850fb2740e6be6890bb905d3fc623b2d',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=5f69f5c65e483928c4b28ed16af6e5742929f1ee',
-                'https://linux.oracle.com/cve/CVE-2023-5363.html',
-                'https://linux.oracle.com/errata/ELSA-2024-12093.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-5363',
-                'https://security.netapp.com/advisory/ntap-20231027-0010/',
-                'https://security.netapp.com/advisory/ntap-20240201-0003/',
-                'https://security.netapp.com/advisory/ntap-20240201-0004/',
-                'https://security.netapp.com/advisory/ntap-20241108-0002/',
-                'https://ubuntu.com/security/notices/USN-6450-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-5363',
-                'https://www.debian.org/security/2023/dsa-5532',
-                'https://www.openssl.org/news/secadv/20231024.txt'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: Incorrect cipher key and IV length processing'
-            },
-            {
-              'cve':  'CVE-2024-6119',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-843'
-              ],
-              'description':   "Issue summary: Applications performing certificate name checks (e.g., TLS\nclients checking server certificates) may attempt to read an invalid memory\naddress resulting in abnormal termination of the application process.\n\nImpact summary: Abnormal termination of an application can a cause a denial of\nservice.\n\nApplications performing certificate name checks (e.g., TLS clients checking\nserver certificates) may attempt to read an invalid memory address when\ncomparing the expected name with an `otherName` subject alternative name of an\nX.509 certificate. This may result in an exception that terminates the\napplication program.\n\nNote that basic certificate chain validation (signatures, dates, ...) is not\naffected, the denial of service can occur only when the application also\nspecifies an expected DNS name, Email address or IP address.\n\nTLS servers rarely solicit client certificates, and even when they do, they\ngenerally don't perform a name check against a reference identifier (expected\nidentity), but rather extract the presented identity after checking the\ncertificate chain.  So TLS servers are generally not affected and the severity\nof the issue is Moderate.\n\nThe FIPS modules in 3.3, 3.2, 3.1 and 3.0 are not affected by this issue.",
-              'diffID':        'sha256:05590cd53e0098af064bffc79d5b76acb8f14b8db4643871eb0a18325fad8005',
-              'fixedVersions': [
-                '3.0.15-r0'
-              ],
-              'installedVersion': '3.0.8-r4',
-              'packageName':      'libssl3',
-              'purl':             'pkg:apk/alpine/libssl3@3.0.8-r4?arch=x86_64&distro=3.17.3',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2024/09/03/4',
-                'https://access.redhat.com/errata/RHSA-2024:8935',
-                'https://access.redhat.com/security/cve/CVE-2024-6119',
-                'https://bugzilla.redhat.com/2306158',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2306158',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-6119',
-                'https://errata.almalinux.org/9/ALSA-2024-8935.html',
-                'https://errata.rockylinux.org/RLSA-2024:6783',
-                'https://github.com/openssl/openssl/commit/05f360d9e849a1b277db628f1f13083a7f8dd04f',
-                'https://github.com/openssl/openssl/commit/06d1dc3fa96a2ba5a3e22735a033012aadc9f0d6',
-                'https://github.com/openssl/openssl/commit/621f3729831b05ee828a3203eddb621d014ff2b2',
-                'https://github.com/openssl/openssl/commit/7dfcee2cd2a63b2c64b9b4b0850be64cb695b0a0',
-                'https://github.com/openssl/openssl/security/advisories/GHSA-5qrj-vq78-58fj',
-                'https://linux.oracle.com/cve/CVE-2024-6119.html',
-                'https://linux.oracle.com/errata/ELSA-2024-8935.html',
-                'https://lists.freebsd.org/archives/freebsd-security/2024-September/000303.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2024-6119',
-                'https://openssl-library.org/news/secadv/20240903.txt',
-                'https://security.netapp.com/advisory/ntap-20240912-0001/',
-                'https://ubuntu.com/security/notices/USN-6986-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2024-6119'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: Possible denial of service in X.509 name checks'
-            },
-            {
-              'cve':  'CVE-2023-2650',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '6.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-770'
-              ],
-              'description':   "Issue summary: Processing some specially crafted ASN.1 object identifiers or\ndata containing them may be very slow.\n\nImpact summary: Applications that use OBJ_obj2txt() directly, or use any of\nthe OpenSSL subsystems OCSP, PKCS7/SMIME, CMS, CMP/CRMF or TS with no message\nsize limit may experience notable to very long delays when processing those\nmessages, which may lead to a Denial of Service.\n\nAn OBJECT IDENTIFIER is composed of a series of numbers - sub-identifiers -\nmost of which have no size limit.  OBJ_obj2txt() may be used to translate\nan ASN.1 OBJECT IDENTIFIER given in DER encoding form (using the OpenSSL\ntype ASN1_OBJECT) to its canonical numeric text form, which are the\nsub-identifiers of the OBJECT IDENTIFIER in decimal form, separated by\nperiods.\n\nWhen one of the sub-identifiers in the OBJECT IDENTIFIER is very large\n(these are sizes that are seen as absurdly large, taking up tens or hundreds\nof KiBs), the translation to a decimal number in text may take a very long\ntime.  The time complexity is O(n^2) with 'n' being the size of the\nsub-identifiers in bytes (*).\n\nWith OpenSSL 3.0, support to fetch cryptographic algorithms using names /\nidentifiers in string form was introduced.  This includes using OBJECT\nIDENTIFIERs in canonical numeric text form as identifiers for fetching\nalgorithms.\n\nSuch OBJECT IDENTIFIERs may be received through the ASN.1 structure\nAlgorithmIdentifier, which is commonly used in multiple protocols to specify\nwhat cryptographic algorithm should be used to sign or verify, encrypt or\ndecrypt, or digest passed data.\n\nApplications that call OBJ_obj2txt() directly with untrusted data are\naffected, with any version of OpenSSL.  If the use is for the mere purpose\nof display, the severity is considered low.\n\nIn OpenSSL 3.0 and newer, this affects the subsystems OCSP, PKCS7/SMIME,\nCMS, CMP/CRMF or TS.  It also impacts anything that processes X.509\ncertificates, including simple things like verifying its signature.\n\nThe impact on TLS is relatively low, because all versions of OpenSSL have a\n100KiB limit on the peer's certificate chain.  Additionally, this only\nimpacts clients, or servers that have explicitly enabled client\nauthentication.\n\nIn OpenSSL 1.1.1 and 1.0.2, this only affects displaying diverse objects,\nsuch as X.509 certificates.  This is assumed to not happen in such a way\nthat it would cause a Denial of Service, so these versions are considered\nnot affected by this issue in such a way that it would be cause for concern,\nand the severity is therefore considered low.",
-              'diffID':        'sha256:05590cd53e0098af064bffc79d5b76acb8f14b8db4643871eb0a18325fad8005',
-              'fixedVersions': [
-                '3.0.9-r0'
-              ],
-              'installedVersion': '3.0.8-r4',
-              'packageName':      'libssl3',
-              'purl':             'pkg:apk/alpine/libssl3@3.0.8-r4?arch=x86_64&distro=3.17.3',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2023/05/30/1',
-                'https://access.redhat.com/errata/RHSA-2023:6330',
-                'https://access.redhat.com/security/cve/CVE-2023-2650',
-                'https://bugzilla.redhat.com/1858038',
-                'https://bugzilla.redhat.com/2207947',
-                'https://errata.almalinux.org/9/ALSA-2023-6330.html',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=423a2bc737a908ad0c77bda470b2b59dc879936b',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=853c5e56ee0b8650c73140816bb8b91d6163422c',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=9e209944b35cf82368071f160a744b6178f9b098',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=db779b0e10b047f2585615e0b8f2acdf21f8544a',
-                'https://linux.oracle.com/cve/CVE-2023-2650.html',
-                'https://linux.oracle.com/errata/ELSA-2023-6330.html',
-                'https://lists.debian.org/debian-lts-announce/2023/06/msg00011.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-2650',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0009',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://security.netapp.com/advisory/ntap-20230703-0001/',
-                'https://security.netapp.com/advisory/ntap-20231027-0009/',
-                'https://ubuntu.com/security/notices/USN-6119-1',
-                'https://ubuntu.com/security/notices/USN-6188-1',
-                'https://ubuntu.com/security/notices/USN-6672-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-2650',
-                'https://www.debian.org/security/2023/dsa-5417',
-                'https://www.openssl.org/news/secadv/20230530.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: Possible DoS translating ASN.1 object identifiers'
-            },
-            {
-              'cve':  'CVE-2023-2975',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N'
-                },
-                'redhat': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-354',
-                'CWE-287'
-              ],
-              'description':   'Issue summary: The AES-SIV cipher implementation contains a bug that causes\nit to ignore empty associated data entries which are unauthenticated as\na consequence.\n\nImpact summary: Applications that use the AES-SIV algorithm and want to\nauthenticate empty data entries as associated data can be misled by removing,\nadding or reordering such empty entries as these are ignored by the OpenSSL\nimplementation. We are currently unaware of any such applications.\n\nThe AES-SIV algorithm allows for authentication of multiple associated\ndata entries along with the encryption. To authenticate empty data the\napplication has to call EVP_EncryptUpdate() (or EVP_CipherUpdate()) with\nNULL pointer as the output buffer and 0 as the input buffer length.\nThe AES-SIV implementation in OpenSSL just returns success for such a call\ninstead of performing the associated data authentication operation.\nThe empty data thus will not be authenticated.\n\nAs this issue does not affect non-empty associated data authentication and\nwe expect it to be rare for an application to use empty associated data\nentries this is qualified as Low severity issue.',
-              'diffID':        'sha256:05590cd53e0098af064bffc79d5b76acb8f14b8db4643871eb0a18325fad8005',
-              'fixedVersions': [
-                '3.0.9-r2'
-              ],
-              'installedVersion': '3.0.8-r4',
-              'packageName':      'libssl3',
-              'purl':             'pkg:apk/alpine/libssl3@3.0.8-r4?arch=x86_64&distro=3.17.3',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2023/07/15/1',
-                'http://www.openwall.com/lists/oss-security/2023/07/19/5',
-                'https://access.redhat.com/errata/RHSA-2024:2447',
-                'https://access.redhat.com/security/cve/CVE-2023-2975',
-                'https://bugzilla.redhat.com/2223016',
-                'https://bugzilla.redhat.com/2224962',
-                'https://bugzilla.redhat.com/2227852',
-                'https://bugzilla.redhat.com/2248616',
-                'https://bugzilla.redhat.com/2257571',
-                'https://bugzilla.redhat.com/2258502',
-                'https://bugzilla.redhat.com/2259944',
-                'https://errata.almalinux.org/9/ALSA-2024-2447.html',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=00e2f5eea29994d19293ec4e8c8775ba73678598',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=6a83f0c958811f07e0d11dfc6b5a6a98edfd5bdc',
-                'https://linux.oracle.com/cve/CVE-2023-2975.html',
-                'https://linux.oracle.com/errata/ELSA-2024-2447.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-2975',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://security.netapp.com/advisory/ntap-20230725-0004/',
-                'https://ubuntu.com/security/notices/USN-6450-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-2975',
-                'https://www.openssl.org/news/secadv/20230714.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: AES-SIV cipher implementation contains a bug that causes it to ignore empty associated data entries'
-            },
-            {
-              'cve':  'CVE-2023-3446',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L'
-                },
-                'redhat': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L'
-                }
-              },
-              'cwes': [
-                'CWE-606',
-                'CWE-1333'
-              ],
-              'description':   "Issue summary: Checking excessively long DH keys or parameters may be very slow.\n\nImpact summary: Applications that use the functions DH_check(), DH_check_ex()\nor EVP_PKEY_param_check() to check a DH key or DH parameters may experience long\ndelays. Where the key or parameters that are being checked have been obtained\nfrom an untrusted source this may lead to a Denial of Service.\n\nThe function DH_check() performs various checks on DH parameters. One of those\nchecks confirms that the modulus ('p' parameter) is not too large. Trying to use\na very large modulus is slow and OpenSSL will not normally use a modulus which\nis over 10,000 bits in length.\n\nHowever the DH_check() function checks numerous aspects of the key or parameters\nthat have been supplied. Some of those checks use the supplied modulus value\neven if it has already been found to be too large.\n\nAn application that calls DH_check() and supplies a key or parameters obtained\nfrom an untrusted source could be vulernable to a Denial of Service attack.\n\nThe function DH_check() is itself called by a number of other OpenSSL functions.\nAn application calling any of those other functions may similarly be affected.\nThe other functions affected by this are DH_check_ex() and\nEVP_PKEY_param_check().\n\nAlso vulnerable are the OpenSSL dhparam and pkeyparam command line applications\nwhen using the '-check' option.\n\nThe OpenSSL SSL/TLS implementation is not affected by this issue.\nThe OpenSSL 3.0 and 3.1 FIPS providers are not affected by this issue.",
-              'diffID':        'sha256:05590cd53e0098af064bffc79d5b76acb8f14b8db4643871eb0a18325fad8005',
-              'fixedVersions': [
-                '3.0.9-r3'
-              ],
-              'installedVersion': '3.0.8-r4',
-              'packageName':      'libssl3',
-              'purl':             'pkg:apk/alpine/libssl3@3.0.8-r4?arch=x86_64&distro=3.17.3',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2023/07/19/4',
-                'http://www.openwall.com/lists/oss-security/2023/07/19/5',
-                'http://www.openwall.com/lists/oss-security/2023/07/19/6',
-                'http://www.openwall.com/lists/oss-security/2023/07/31/1',
-                'http://www.openwall.com/lists/oss-security/2024/05/16/1',
-                'https://access.redhat.com/errata/RHSA-2024:2447',
-                'https://access.redhat.com/security/cve/CVE-2023-3446',
-                'https://bugzilla.redhat.com/2223016',
-                'https://bugzilla.redhat.com/2224962',
-                'https://bugzilla.redhat.com/2227852',
-                'https://bugzilla.redhat.com/2248616',
-                'https://bugzilla.redhat.com/2257571',
-                'https://bugzilla.redhat.com/2258502',
-                'https://bugzilla.redhat.com/2259944',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2224962',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2257582',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2257583',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2258677',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2258688',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2258691',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2258694',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2258700',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-36763',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-36764',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3446',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45229',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45231',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45232',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45233',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45235',
-                'https://errata.almalinux.org/9/ALSA-2024-2447.html',
-                'https://errata.rockylinux.org/RLSA-2024:2264',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=1fa20cf2f506113c761777127a38bce5068740eb',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=8780a896543a654e757db1b9396383f9d8095528',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=9a0a4d3c1e7138915563c0df4fe6a3f9377b839c',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=fc9867c1e03c22ebf56943be205202e576aabf23',
-                'https://linux.oracle.com/cve/CVE-2023-3446.html',
-                'https://linux.oracle.com/errata/ELSA-2024-2447.html',
-                'https://lists.debian.org/debian-lts-announce/2023/08/msg00019.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-3446',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://security.netapp.com/advisory/ntap-20230803-0011/',
-                'https://ubuntu.com/security/notices/USN-6435-1',
-                'https://ubuntu.com/security/notices/USN-6435-2',
-                'https://ubuntu.com/security/notices/USN-6450-1',
-                'https://ubuntu.com/security/notices/USN-6709-1',
-                'https://ubuntu.com/security/notices/USN-7018-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-3446',
-                'https://www.openssl.org/news/secadv/20230719.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: Excessive time spent checking DH keys and parameters'
-            },
-            {
-              'cve':  'CVE-2023-3817',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L'
-                },
-                'redhat': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L'
-                }
-              },
-              'cwes': [
-                'CWE-606',
-                'CWE-834'
-              ],
-              'description':   'Issue summary: Checking excessively long DH keys or parameters may be very slow.\n\nImpact summary: Applications that use the functions DH_check(), DH_check_ex()\nor EVP_PKEY_param_check() to check a DH key or DH parameters may experience long\ndelays. Where the key or parameters that are being checked have been obtained\nfrom an untrusted source this may lead to a Denial of Service.\n\nThe function DH_check() performs various checks on DH parameters. After fixing\nCVE-2023-3446 it was discovered that a large q parameter value can also trigger\nan overly long computation during some of these checks. A correct q value,\nif present, cannot be larger than the modulus p parameter, thus it is\nunnecessary to perform these checks if q is larger than p.\n\nAn application that calls DH_check() and supplies a key or parameters obtained\nfrom an untrusted source could be vulnerable to a Denial of Service attack.\n\nThe function DH_check() is itself called by a number of other OpenSSL functions.\nAn application calling any of those other functions may similarly be affected.\nThe other functions affected by this are DH_check_ex() and\nEVP_PKEY_param_check().\n\nAlso vulnerable are the OpenSSL dhparam and pkeyparam command line applications\nwhen using the "-check" option.\n\nThe OpenSSL SSL/TLS implementation is not affected by this issue.\n\nThe OpenSSL 3.0 and 3.1 FIPS providers are not affected by this issue.',
-              'diffID':        'sha256:05590cd53e0098af064bffc79d5b76acb8f14b8db4643871eb0a18325fad8005',
-              'fixedVersions': [
-                '3.0.10-r0'
-              ],
-              'installedVersion': '3.0.8-r4',
-              'packageName':      'libssl3',
-              'purl':             'pkg:apk/alpine/libssl3@3.0.8-r4?arch=x86_64&distro=3.17.3',
-              'references':       [
-                'http://seclists.org/fulldisclosure/2023/Jul/43',
-                'http://www.openwall.com/lists/oss-security/2023/07/31/1',
-                'http://www.openwall.com/lists/oss-security/2023/09/22/11',
-                'http://www.openwall.com/lists/oss-security/2023/09/22/9',
-                'http://www.openwall.com/lists/oss-security/2023/11/06/2',
-                'https://access.redhat.com/errata/RHSA-2024:2447',
-                'https://access.redhat.com/security/cve/CVE-2023-3817',
-                'https://bugzilla.redhat.com/2223016',
-                'https://bugzilla.redhat.com/2224962',
-                'https://bugzilla.redhat.com/2227852',
-                'https://bugzilla.redhat.com/2248616',
-                'https://bugzilla.redhat.com/2257571',
-                'https://bugzilla.redhat.com/2258502',
-                'https://bugzilla.redhat.com/2259944',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2224962',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2227852',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2248616',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2270358',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3446',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3817',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-5678',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-2408',
-                'https://errata.almalinux.org/9/ALSA-2024-2447.html',
-                'https://errata.rockylinux.org/RLSA-2023:7877',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=6a1eb62c29db6cb5eec707f9338aee00f44e26f5',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=869ad69aadd985c7b8ca6f4e5dd0eb274c9f3644',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=9002fd07327a91f35ba6c1307e71fa6fd4409b7f',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=91ddeba0f2269b017dc06c46c993a788974b1aa5',
-                'https://linux.oracle.com/cve/CVE-2023-3817.html',
-                'https://linux.oracle.com/errata/ELSA-2024-2447.html',
-                'https://lists.debian.org/debian-lts-announce/2023/08/msg00019.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-3817',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://security.netapp.com/advisory/ntap-20230818-0014/',
-                'https://security.netapp.com/advisory/ntap-20231027-0008/',
-                'https://security.netapp.com/advisory/ntap-20240621-0006/',
-                'https://ubuntu.com/security/notices/USN-6435-1',
-                'https://ubuntu.com/security/notices/USN-6435-2',
-                'https://ubuntu.com/security/notices/USN-6450-1',
-                'https://ubuntu.com/security/notices/USN-6709-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-3817',
-                'https://www.openssl.org/news/secadv/20230731.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'OpenSSL: Excessive time spent checking DH q parameter value'
-            },
-            {
-              'cve':  'CVE-2023-5678',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L'
-                },
-                'redhat': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L'
-                }
-              },
-              'cwes': [
-                'CWE-606',
-                'CWE-754'
-              ],
-              'description':   "Issue summary: Generating excessively long X9.42 DH keys or checking\nexcessively long X9.42 DH keys or parameters may be very slow.\n\nImpact summary: Applications that use the functions DH_generate_key() to\ngenerate an X9.42 DH key may experience long delays.  Likewise, applications\nthat use DH_check_pub_key(), DH_check_pub_key_ex() or EVP_PKEY_public_check()\nto check an X9.42 DH key or X9.42 DH parameters may experience long delays.\nWhere the key or parameters that are being checked have been obtained from\nan untrusted source this may lead to a Denial of Service.\n\nWhile DH_check() performs all the necessary checks (as of CVE-2023-3817),\nDH_check_pub_key() doesn't make any of these checks, and is therefore\nvulnerable for excessively large P and Q parameters.\n\nLikewise, while DH_generate_key() performs a check for an excessively large\nP, it doesn't check for an excessively large Q.\n\nAn application that calls DH_generate_key() or DH_check_pub_key() and\nsupplies a key or parameters obtained from an untrusted source could be\nvulnerable to a Denial of Service attack.\n\nDH_generate_key() and DH_check_pub_key() are also called by a number of\nother OpenSSL functions.  An application calling any of those other\nfunctions may similarly be affected.  The other functions affected by this\nare DH_check_pub_key_ex(), EVP_PKEY_public_check(), and EVP_PKEY_generate().\n\nAlso vulnerable are the OpenSSL pkey command line application when using the\n\"-pubcheck\" option, as well as the OpenSSL genpkey command line application.\n\nThe OpenSSL SSL/TLS implementation is not affected by this issue.\n\nThe OpenSSL 3.0 and 3.1 FIPS providers are not affected by this issue.",
-              'diffID':        'sha256:05590cd53e0098af064bffc79d5b76acb8f14b8db4643871eb0a18325fad8005',
-              'fixedVersions': [
-                '3.0.12-r1'
-              ],
-              'installedVersion': '3.0.8-r4',
-              'packageName':      'libssl3',
-              'purl':             'pkg:apk/alpine/libssl3@3.0.8-r4?arch=x86_64&distro=3.17.3',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2024/03/11/1',
-                'https://access.redhat.com/errata/RHSA-2024:2447',
-                'https://access.redhat.com/security/cve/CVE-2023-5678',
-                'https://bugzilla.redhat.com/2223016',
-                'https://bugzilla.redhat.com/2224962',
-                'https://bugzilla.redhat.com/2227852',
-                'https://bugzilla.redhat.com/2248616',
-                'https://bugzilla.redhat.com/2257571',
-                'https://bugzilla.redhat.com/2258502',
-                'https://bugzilla.redhat.com/2259944',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2224962',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2227852',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2248616',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2270358',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3446',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3817',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-5678',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-2408',
-                'https://errata.almalinux.org/9/ALSA-2024-2447.html',
-                'https://errata.rockylinux.org/RLSA-2023:7877',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=34efaef6c103d636ab507a0cc34dca4d3aecc055',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=710fee740904b6290fef0dd5536fbcedbc38ff0c',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=db925ae2e65d0d925adef429afc37f75bd1c2017',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=ddeb4b6c6d527e54ce9a99cba785c0f7776e54b6',
-                'https://linux.oracle.com/cve/CVE-2023-5678.html',
-                'https://linux.oracle.com/errata/ELSA-2024-2447.html',
-                'https://lists.debian.org/debian-lts-announce/2024/10/msg00033.html',
-                'https://lists.debian.org/debian-lts-announce/2024/11/msg00000.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-5678',
-                'https://security.netapp.com/advisory/ntap-20231130-0010/',
-                'https://ubuntu.com/security/notices/USN-6622-1',
-                'https://ubuntu.com/security/notices/USN-6632-1',
-                'https://ubuntu.com/security/notices/USN-6709-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-5678',
-                'https://www.openssl.org/news/secadv/20231106.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: Generating excessively long X9.42 DH keys or checking excessively long X9.42 DH keys or parameters may be very slow'
-            },
-            {
-              'cve':  'CVE-2023-6129',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '6.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-440',
-                'CWE-787'
-              ],
-              'description':   'Issue summary: The POLY1305 MAC (message authentication code) implementation\ncontains a bug that might corrupt the internal state of applications running\non PowerPC CPU based platforms if the CPU provides vector instructions.\n\nImpact summary: If an attacker can influence whether the POLY1305 MAC\nalgorithm is used, the application state might be corrupted with various\napplication dependent consequences.\n\nThe POLY1305 MAC (message authentication code) implementation in OpenSSL for\nPowerPC CPUs restores the contents of vector registers in a different order\nthan they are saved. Thus the contents of some of these vector registers\nare corrupted when returning to the caller. The vulnerable code is used only\non newer PowerPC processors supporting the PowerISA 2.07 instructions.\n\nThe consequences of this kind of internal application state corruption can\nbe various - from no consequences, if the calling application does not\ndepend on the contents of non-volatile XMM registers at all, to the worst\nconsequences, where the attacker could get complete control of the application\nprocess. However unless the compiler uses the vector registers for storing\npointers, the most likely consequence, if any, would be an incorrect result\nof some application dependent calculations or a crash leading to a denial of\nservice.\n\nThe POLY1305 MAC algorithm is most frequently used as part of the\nCHACHA20-POLY1305 AEAD (authenticated encryption with associated data)\nalgorithm. The most common usage of this AEAD cipher is with TLS protocol\nversions 1.2 and 1.3. If this cipher is enabled on the server a malicious\nclient can influence whether this AEAD cipher is used. This implies that\nTLS server applications using OpenSSL can be potentially impacted. However\nwe are currently not aware of any concrete application that would be affected\nby this issue therefore we consider this a Low severity security issue.',
-              'diffID':        'sha256:05590cd53e0098af064bffc79d5b76acb8f14b8db4643871eb0a18325fad8005',
-              'fixedVersions': [
-                '3.0.12-r2'
-              ],
-              'installedVersion': '3.0.8-r4',
-              'packageName':      'libssl3',
-              'purl':             'pkg:apk/alpine/libssl3@3.0.8-r4?arch=x86_64&distro=3.17.3',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2024/03/11/1',
-                'https://access.redhat.com/errata/RHSA-2024:9088',
-                'https://access.redhat.com/security/cve/CVE-2023-6129',
-                'https://bugzilla.redhat.com/2257571',
-                'https://bugzilla.redhat.com/2258502',
-                'https://bugzilla.redhat.com/2259944',
-                'https://bugzilla.redhat.com/2284243',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2257571',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2258502',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2259944',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2284243',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-6129',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-6237',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-0727',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-1298',
-                'https://errata.almalinux.org/9/ALSA-2024-9088.html',
-                'https://errata.rockylinux.org/RLSA-2024:9088',
-                'https://github.com/openssl/openssl/commit/050d26383d4e264966fb83428e72d5d48f402d35',
-                'https://github.com/openssl/openssl/commit/5b139f95c9a47a55a0c54100f3837b1eee942b04',
-                'https://github.com/openssl/openssl/commit/f3fc5808fe9ff74042d639839610d03b8fdcc015',
-                'https://linux.oracle.com/cve/CVE-2023-6129.html',
-                'https://linux.oracle.com/errata/ELSA-2024-9088.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-6129',
-                'https://security.netapp.com/advisory/ntap-20240216-0009/',
-                'https://security.netapp.com/advisory/ntap-20240426-0008/',
-                'https://security.netapp.com/advisory/ntap-20240426-0013/',
-                'https://security.netapp.com/advisory/ntap-20240503-0011/',
-                'https://ubuntu.com/security/notices/USN-6622-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-6129',
-                'https://www.openssl.org/news/secadv/20240109.txt',
-                'https://www.openwall.com/lists/oss-security/2024/01/09/1'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: POLY1305 MAC implementation corrupts vector registers on PowerPC'
-            },
-            {
-              'cve':  'CVE-2023-6237',
-              'cvss': {
-                'redhat': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-606'
-              ],
-              'description':   "Issue summary: Checking excessively long invalid RSA public keys may take\na long time.\n\nImpact summary: Applications that use the function EVP_PKEY_public_check()\nto check RSA public keys may experience long delays. Where the key that\nis being checked has been obtained from an untrusted source this may lead\nto a Denial of Service.\n\nWhen function EVP_PKEY_public_check() is called on RSA public keys,\na computation is done to confirm that the RSA modulus, n, is composite.\nFor valid RSA keys, n is a product of two or more large primes and this\ncomputation completes quickly. However, if n is an overly large prime,\nthen this computation would take a long time.\n\nAn application that calls EVP_PKEY_public_check() and supplies an RSA key\nobtained from an untrusted source could be vulnerable to a Denial of Service\nattack.\n\nThe function EVP_PKEY_public_check() is not called from other OpenSSL\nfunctions however it is called from the OpenSSL pkey command line\napplication. For that reason that application is also vulnerable if used\nwith the '-pubin' and '-check' options on untrusted data.\n\nThe OpenSSL SSL/TLS implementation is not affected by this issue.\n\nThe OpenSSL 3.0 and 3.1 FIPS providers are affected by this issue.",
-              'diffID':        'sha256:05590cd53e0098af064bffc79d5b76acb8f14b8db4643871eb0a18325fad8005',
-              'fixedVersions': [
-                '3.0.12-r3'
-              ],
-              'installedVersion': '3.0.8-r4',
-              'packageName':      'libssl3',
-              'purl':             'pkg:apk/alpine/libssl3@3.0.8-r4?arch=x86_64&distro=3.17.3',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2024/03/11/1',
-                'https://access.redhat.com/errata/RHSA-2024:9088',
-                'https://access.redhat.com/security/cve/CVE-2023-6237',
-                'https://bugzilla.redhat.com/2257571',
-                'https://bugzilla.redhat.com/2258502',
-                'https://bugzilla.redhat.com/2259944',
-                'https://bugzilla.redhat.com/2284243',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2257571',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2258502',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2259944',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2284243',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-6129',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-6237',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-0727',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-1298',
-                'https://errata.almalinux.org/9/ALSA-2024-9088.html',
-                'https://errata.rockylinux.org/RLSA-2024:9088',
-                'https://github.com/openssl/openssl/commit/0b0f7abfb37350794a4b8960fafc292cd5d1b84d',
-                'https://github.com/openssl/openssl/commit/18c02492138d1eb8b6548cb26e7b625fb2414a2a',
-                'https://github.com/openssl/openssl/commit/a830f551557d3d66a84bbb18a5b889c640c36294',
-                'https://linux.oracle.com/cve/CVE-2023-6237.html',
-                'https://linux.oracle.com/errata/ELSA-2024-9088.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-6237',
-                'https://security.netapp.com/advisory/ntap-20240531-0007/',
-                'https://ubuntu.com/security/notices/USN-6622-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-6237',
-                'https://www.openssl.org/news/secadv/20240115.txt',
-                'https://www.openwall.com/lists/oss-security/2024/01/15/2'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: Excessive time spent checking invalid RSA public keys'
-            },
-            {
-              'cve':  'CVE-2024-0727',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '5.5',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H'
-                },
-                'nvd': {
-                  'v3score':  '5.5',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '5.5',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-476'
-              ],
-              'description':   'Issue summary: Processing a maliciously formatted PKCS12 file may lead OpenSSL\nto crash leading to a potential Denial of Service attack\n\nImpact summary: Applications loading files in the PKCS12 format from untrusted\nsources might terminate abruptly.\n\nA file in PKCS12 format can contain certificates and keys and may come from an\nuntrusted source. The PKCS12 specification allows certain fields to be NULL, but\nOpenSSL does not correctly check for this case. This can lead to a NULL pointer\ndereference that results in OpenSSL crashing. If an application processes PKCS12\nfiles from an untrusted source using the OpenSSL APIs then that application will\nbe vulnerable to this issue.\n\nOpenSSL APIs that are vulnerable to this are: PKCS12_parse(),\nPKCS12_unpack_p7data(), PKCS12_unpack_p7encdata(), PKCS12_unpack_authsafes()\nand PKCS12_newpass().\n\nWe have also fixed a similar issue in SMIME_write_PKCS7(). However since this\nfunction is related to writing data we do not consider it security significant.\n\nThe FIPS modules in 3.2, 3.1 and 3.0 are not affected by this issue.',
-              'diffID':        'sha256:05590cd53e0098af064bffc79d5b76acb8f14b8db4643871eb0a18325fad8005',
-              'fixedVersions': [
-                '3.0.12-r4'
-              ],
-              'installedVersion': '3.0.8-r4',
-              'packageName':      'libssl3',
-              'purl':             'pkg:apk/alpine/libssl3@3.0.8-r4?arch=x86_64&distro=3.17.3',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2024/03/11/1',
-                'https://access.redhat.com/errata/RHSA-2024:9088',
-                'https://access.redhat.com/security/cve/CVE-2024-0727',
-                'https://bugzilla.redhat.com/2257571',
-                'https://bugzilla.redhat.com/2258502',
-                'https://bugzilla.redhat.com/2259944',
-                'https://bugzilla.redhat.com/2284243',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2257571',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2258502',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2259944',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2284243',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-6129',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-6237',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-0727',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-1298',
-                'https://errata.almalinux.org/9/ALSA-2024-9088.html',
-                'https://errata.rockylinux.org/RLSA-2024:9088',
-                'https://github.com/alexcrichton/openssl-src-rs/commit/add20f73b6b42be7451af2e1044d4e0e778992b2',
-                'https://github.com/github/advisory-database/pull/3472',
-                'https://github.com/openssl/openssl/commit/09df4395b5071217b76dc7d3d2e630eb8c5a79c2',
-                'https://github.com/openssl/openssl/commit/775acfdbd0c6af9ac855f34969cdab0c0c90844a',
-                'https://github.com/openssl/openssl/commit/d135eeab8a5dbf72b3da5240bab9ddb7678dbd2c',
-                'https://github.com/openssl/openssl/pull/23362',
-                'https://github.com/pyca/cryptography/commit/3519591d255d4506fbcd0d04037d45271903c64d',
-                'https://github.openssl.org/openssl/extended-releases/commit/03b3941d60c4bce58fab69a0c22377ab439bc0e8',
-                'https://github.openssl.org/openssl/extended-releases/commit/aebaa5883e31122b404e450732dc833dc9dee539',
-                'https://linux.oracle.com/cve/CVE-2024-0727.html',
-                'https://linux.oracle.com/errata/ELSA-2024-9088.html',
-                'https://lists.debian.org/debian-lts-announce/2024/10/msg00033.html',
-                'https://lists.debian.org/debian-lts-announce/2024/11/msg00000.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2024-0727',
-                'https://security.netapp.com/advisory/ntap-20240208-0006',
-                'https://security.netapp.com/advisory/ntap-20240208-0006/',
-                'https://ubuntu.com/security/notices/USN-6622-1',
-                'https://ubuntu.com/security/notices/USN-6632-1',
-                'https://ubuntu.com/security/notices/USN-6709-1',
-                'https://ubuntu.com/security/notices/USN-7018-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2024-0727',
-                'https://www.openssl.org/news/secadv/20240125.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: denial of service via null dereference'
-            },
-            {
-              'cve':  'CVE-2024-4603',
-              'cvss': {
-                'redhat': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L'
-                }
-              },
-              'cwes': [
-                'CWE-606',
-                'CWE-834'
-              ],
-              'description':   'Issue summary: Checking excessively long DSA keys or parameters may be very\nslow.\n\nImpact summary: Applications that use the functions EVP_PKEY_param_check()\nor EVP_PKEY_public_check() to check a DSA public key or DSA parameters may\nexperience long delays. Where the key or parameters that are being checked\nhave been obtained from an untrusted source this may lead to a Denial of\nService.\n\nThe functions EVP_PKEY_param_check() or EVP_PKEY_public_check() perform\nvarious checks on DSA parameters. Some of those computations take a long time\nif the modulus (`p` parameter) is too large.\n\nTrying to use a very large modulus is slow and OpenSSL will not allow using\npublic keys with a modulus which is over 10,000 bits in length for signature\nverification. However the key and parameter check functions do not limit\nthe modulus size when performing the checks.\n\nAn application that calls EVP_PKEY_param_check() or EVP_PKEY_public_check()\nand supplies a key or parameters obtained from an untrusted source could be\nvulnerable to a Denial of Service attack.\n\nThese functions are not called by OpenSSL itself on untrusted DSA keys so\nonly applications that directly call these functions may be vulnerable.\n\nAlso vulnerable are the OpenSSL pkey and pkeyparam command line applications\nwhen using the `-check` option.\n\nThe OpenSSL SSL/TLS implementation is not affected by this issue.\n\nThe OpenSSL 3.0 and 3.1 FIPS providers are affected by this issue.',
-              'diffID':        'sha256:05590cd53e0098af064bffc79d5b76acb8f14b8db4643871eb0a18325fad8005',
-              'fixedVersions': [
-                '3.0.13-r0'
-              ],
-              'installedVersion': '3.0.8-r4',
-              'packageName':      'libssl3',
-              'purl':             'pkg:apk/alpine/libssl3@3.0.8-r4?arch=x86_64&distro=3.17.3',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2024/05/16/2',
-                'https://access.redhat.com/errata/RHSA-2024:9333',
-                'https://access.redhat.com/security/cve/CVE-2024-4603',
-                'https://bugzilla.redhat.com/2274020',
-                'https://bugzilla.redhat.com/2281029',
-                'https://bugzilla.redhat.com/2283757',
-                'https://bugzilla.redhat.com/2294581',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2274020',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2281029',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2283757',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2294581',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-2511',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-4603',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-4741',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-5535',
-                'https://errata.almalinux.org/9/ALSA-2024-9333.html',
-                'https://errata.rockylinux.org/RLSA-2024:9333',
-                'https://github.com/openssl/openssl/commit/3559e868e58005d15c6013a0c1fd832e51c73397',
-                'https://github.com/openssl/openssl/commit/53ea06486d296b890d565fb971b2764fcd826e7e',
-                'https://github.com/openssl/openssl/commit/9c39b3858091c152f52513c066ff2c5a47969f0d',
-                'https://github.com/openssl/openssl/commit/da343d0605c826ef197aceedc67e8e04f065f740',
-                'https://linux.oracle.com/cve/CVE-2024-4603.html',
-                'https://linux.oracle.com/errata/ELSA-2024-9333.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2024-4603',
-                'https://security.netapp.com/advisory/ntap-20240621-0001/',
-                'https://ubuntu.com/security/notices/USN-6937-1',
-                'https://www.cve.org/CVERecord?id=CVE-2024-4603',
-                'https://www.openssl.org/news/secadv/20240516.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: Excessive time spent checking DSA keys and parameters'
-            },
-            {
-              'cve':  'CVE-2024-4741',
-              'cvss': {
-                'redhat': {
-                  'v3score':  '5.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   'Issue summary: Calling the OpenSSL API function SSL_free_buffers may cause\nmemory to be accessed that was previously freed in some situations\n\nImpact summary: A use after free can have a range of potential consequences such\nas the corruption of valid data, crashes or execution of arbitrary code.\nHowever, only applications that directly call the SSL_free_buffers function are\naffected by this issue. Applications that do not call this function are not\nvulnerable. Our investigations indicate that this function is rarely used by\napplications.\n\nThe SSL_free_buffers function is used to free the internal OpenSSL buffer used\nwhen processing an incoming record from the network. The call is only expected\nto succeed if the buffer is not currently in use. However, two scenarios have\nbeen identified where the buffer is freed even when still in use.\n\nThe first scenario occurs where a record header has been received from the\nnetwork and processed by OpenSSL, but the full record body has not yet arrived.\nIn this case calling SSL_free_buffers will succeed even though a record has only\nbeen partially processed and the buffer is still in use.\n\nThe second scenario occurs where a full record containing application data has\nbeen received and processed by OpenSSL but the application has only read part of\nthis data. Again a call to SSL_free_buffers will succeed even though the buffer\nis still in use.\n\nWhile these scenarios could occur accidentally during normal operation a\nmalicious attacker could attempt to engineer a stituation where this occurs.\nWe are not aware of this issue being actively exploited.\n\nThe FIPS modules in 3.3, 3.2, 3.1 and 3.0 are not affected by this issue.',
-              'diffID':        'sha256:05590cd53e0098af064bffc79d5b76acb8f14b8db4643871eb0a18325fad8005',
-              'fixedVersions': [
-                '3.0.14-r0'
-              ],
-              'installedVersion': '3.0.8-r4',
-              'packageName':      'libssl3',
-              'purl':             'pkg:apk/alpine/libssl3@3.0.8-r4?arch=x86_64&distro=3.17.3',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2024:9333',
-                'https://access.redhat.com/security/cve/CVE-2024-4741',
-                'https://bugzilla.redhat.com/2274020',
-                'https://bugzilla.redhat.com/2281029',
-                'https://bugzilla.redhat.com/2283757',
-                'https://bugzilla.redhat.com/2294581',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2274020',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2281029',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2283757',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2294581',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-2511',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-4603',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-4741',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-5535',
-                'https://errata.almalinux.org/9/ALSA-2024-9333.html',
-                'https://errata.rockylinux.org/RLSA-2024:9333',
-                'https://github.com/openssl/openssl/commit/704f725b96aa373ee45ecfb23f6abfe8be8d9177',
-                'https://github.com/openssl/openssl/commit/b3f0eb0a295f58f16ba43ba99dad70d4ee5c437d',
-                'https://github.com/openssl/openssl/commit/c88c3de51020c37e8706bf7a682a162593053aac',
-                'https://github.com/openssl/openssl/commit/e5093133c35ca82874ad83697af76f4b0f7e3bd8',
-                'https://github.openssl.org/openssl/extended-releases/commit/f7a045f3143fc6da2ee66bf52d8df04829590dd4',
-                'https://linux.oracle.com/cve/CVE-2024-4741.html',
-                'https://linux.oracle.com/errata/ELSA-2024-9333.html',
-                'https://lists.debian.org/debian-lts-announce/2024/10/msg00033.html',
-                'https://lists.debian.org/debian-lts-announce/2024/11/msg00000.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2024-4741',
-                'https://security.netapp.com/advisory/ntap-20240621-0004/',
-                'https://ubuntu.com/security/notices/USN-6937-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2024-4741',
-                'https://www.openssl.org/news/secadv/20240528.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: Use After Free with SSL_free_buffers'
-            },
-            {
-              'cve':  'CVE-2024-5535',
-              'cvss': {
-                'redhat': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-125'
-              ],
-              'description':   'Issue summary: Calling the OpenSSL API function SSL_select_next_proto with an\nempty supported client protocols buffer may cause a crash or memory contents to\nbe sent to the peer.\n\nImpact summary: A buffer overread can have a range of potential consequences\nsuch as unexpected application beahviour or a crash. In particular this issue\ncould result in up to 255 bytes of arbitrary private data from memory being sent\nto the peer leading to a loss of confidentiality. However, only applications\nthat directly call the SSL_select_next_proto function with a 0 length list of\nsupported client protocols are affected by this issue. This would normally never\nbe a valid scenario and is typically not under attacker control but may occur by\naccident in the case of a configuration or programming error in the calling\napplication.\n\nThe OpenSSL API function SSL_select_next_proto is typically used by TLS\napplications that support ALPN (Application Layer Protocol Negotiation) or NPN\n(Next Protocol Negotiation). NPN is older, was never standardised and\nis deprecated in favour of ALPN. We believe that ALPN is significantly more\nwidely deployed than NPN. The SSL_select_next_proto function accepts a list of\nprotocols from the server and a list of protocols from the client and returns\nthe first protocol that appears in the server list that also appears in the\nclient list. In the case of no overlap between the two lists it returns the\nfirst item in the client list. In either case it will signal whether an overlap\nbetween the two lists was found. In the case where SSL_select_next_proto is\ncalled with a zero length client list it fails to notice this condition and\nreturns the memory immediately following the client list pointer (and reports\nthat there was no overlap in the lists).\n\nThis function is typically called from a server side application callback for\nALPN or a client side application callback for NPN. In the case of ALPN the list\nof protocols supplied by the client is guaranteed by libssl to never be zero in\nlength. The list of server protocols comes from the application and should never\nnormally be expected to be of zero length. In this case if the\nSSL_select_next_proto function has been called as expected (with the list\nsupplied by the client passed in the client/client_len parameters), then the\napplication will not be vulnerable to this issue. If the application has\naccidentally been configured with a zero length server list, and has\naccidentally passed that zero length server list in the client/client_len\nparameters, and has additionally failed to correctly handle a "no overlap"\nresponse (which would normally result in a handshake failure in ALPN) then it\nwill be vulnerable to this problem.\n\nIn the case of NPN, the protocol permits the client to opportunistically select\na protocol when there is no overlap. OpenSSL returns the first client protocol\nin the no overlap case in support of this. The list of client protocols comes\nfrom the application and should never normally be expected to be of zero length.\nHowever if the SSL_select_next_proto function is accidentally called with a\nclient_len of 0 then an invalid memory pointer will be returned instead. If the\napplication uses this output as the opportunistic protocol then the loss of\nconfidentiality will occur.\n\nThis issue has been assessed as Low severity because applications are most\nlikely to be vulnerable if they are using NPN instead of ALPN - but NPN is not\nwidely used. It also requires an application configuration or programming error.\nFinally, this issue would not typically be under attacker control making active\nexploitation unlikely.\n\nThe FIPS modules in 3.3, 3.2, 3.1 and 3.0 are not affected by this issue.\n\nDue to the low severity of this issue we are not issuing new releases of\nOpenSSL at this time. The fix will be included in the next releases when they\nbecome available.',
-              'diffID':        'sha256:05590cd53e0098af064bffc79d5b76acb8f14b8db4643871eb0a18325fad8005',
-              'fixedVersions': [
-                '3.0.14-r0'
-              ],
-              'installedVersion': '3.0.8-r4',
-              'packageName':      'libssl3',
-              'purl':             'pkg:apk/alpine/libssl3@3.0.8-r4?arch=x86_64&distro=3.17.3',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2024/06/27/1',
-                'http://www.openwall.com/lists/oss-security/2024/06/28/4',
-                'http://www.openwall.com/lists/oss-security/2024/08/15/1',
-                'https://access.redhat.com/errata/RHSA-2025:1671',
-                'https://access.redhat.com/security/cve/CVE-2024-5535',
-                'https://bugzilla.redhat.com/2294581',
-                'https://bugzilla.redhat.com/2294676',
-                'https://bugzilla.redhat.com/2301888',
-                'https://bugzilla.redhat.com/2318857',
-                'https://bugzilla.redhat.com/2318858',
-                'https://bugzilla.redhat.com/2318870',
-                'https://bugzilla.redhat.com/2318873',
-                'https://bugzilla.redhat.com/2318874',
-                'https://bugzilla.redhat.com/2318876',
-                'https://bugzilla.redhat.com/2318882',
-                'https://bugzilla.redhat.com/2318883',
-                'https://bugzilla.redhat.com/2318884',
-                'https://bugzilla.redhat.com/2318885',
-                'https://bugzilla.redhat.com/2318886',
-                'https://bugzilla.redhat.com/2318897',
-                'https://bugzilla.redhat.com/2318900',
-                'https://bugzilla.redhat.com/2318905',
-                'https://bugzilla.redhat.com/2318914',
-                'https://bugzilla.redhat.com/2318922',
-                'https://bugzilla.redhat.com/2318923',
-                'https://bugzilla.redhat.com/2318925',
-                'https://bugzilla.redhat.com/2318926',
-                'https://bugzilla.redhat.com/2318927',
-                'https://bugzilla.redhat.com/2331191',
-                'https://bugzilla.redhat.com/2339218',
-                'https://bugzilla.redhat.com/2339220',
-                'https://bugzilla.redhat.com/2339221',
-                'https://bugzilla.redhat.com/2339226',
-                'https://bugzilla.redhat.com/2339231',
-                'https://bugzilla.redhat.com/2339236',
-                'https://bugzilla.redhat.com/2339238',
-                'https://bugzilla.redhat.com/2339243',
-                'https://bugzilla.redhat.com/2339247',
-                'https://bugzilla.redhat.com/2339252',
-                'https://bugzilla.redhat.com/2339259',
-                'https://bugzilla.redhat.com/2339266',
-                'https://bugzilla.redhat.com/2339270',
-                'https://bugzilla.redhat.com/2339271',
-                'https://bugzilla.redhat.com/2339275',
-                'https://bugzilla.redhat.com/2339277',
-                'https://bugzilla.redhat.com/2339281',
-                'https://bugzilla.redhat.com/2339284',
-                'https://bugzilla.redhat.com/2339291',
-                'https://bugzilla.redhat.com/2339293',
-                'https://bugzilla.redhat.com/2339295',
-                'https://bugzilla.redhat.com/2339299',
-                'https://bugzilla.redhat.com/2339300',
-                'https://bugzilla.redhat.com/2339304',
-                'https://bugzilla.redhat.com/2339305',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2274020',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2281029',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2283757',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2294581',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-2511',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-4603',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-4741',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-5535',
-                'https://errata.almalinux.org/9/ALSA-2025-1671.html',
-                'https://errata.rockylinux.org/RLSA-2024:9333',
-                'https://github.com/openssl/openssl/commit/4ada436a1946cbb24db5ab4ca082b69c1bc10f37',
-                'https://github.com/openssl/openssl/commit/99fb785a5f85315b95288921a321a935ea29a51e',
-                'https://github.com/openssl/openssl/commit/cf6f91f6121f4db167405db2f0de410a456f260c',
-                'https://github.com/openssl/openssl/commit/e86ac436f0bd54d4517745483e2315650fae7b2c',
-                'https://github.openssl.org/openssl/extended-releases/commit/9947251413065a05189a63c9b7a6c1d4e224c21c',
-                'https://github.openssl.org/openssl/extended-releases/commit/b78ec0824da857223486660177d3b1f255c65d87',
-                'https://linux.oracle.com/cve/CVE-2024-5535.html',
-                'https://linux.oracle.com/errata/ELSA-2025-1673.html',
-                'https://lists.debian.org/debian-lts-announce/2024/10/msg00033.html',
-                'https://lists.debian.org/debian-lts-announce/2024/11/msg00000.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2024-5535',
-                'https://openssl.org/news/secadv/20240627.txt',
-                'https://security.netapp.com/advisory/ntap-20240712-0005/',
-                'https://security.netapp.com/advisory/ntap-20241025-0006/',
-                'https://security.netapp.com/advisory/ntap-20241025-0010/',
-                'https://ubuntu.com/security/notices/USN-6937-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2024-5535',
-                'https://www.openssl.org/news/secadv/20240627.txt',
-                'https://www.oracle.com/security-alerts/cpuoct2024.html#AppendixMSQL'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: SSL_select_next_proto buffer overread'
-            },
-            {
-              'cve':  'CVE-2024-2511',
-              'cvss': {
-                'redhat': {
-                  'v3score':  '3.7',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L'
-                }
-              },
-              'cwes': [
-                'CWE-1325'
-              ],
-              'description':   'Issue summary: Some non-default TLS server configurations can cause unbounded\nmemory growth when processing TLSv1.3 sessions\n\nImpact summary: An attacker may exploit certain server configurations to trigger\nunbounded memory growth that would lead to a Denial of Service\n\nThis problem can occur in TLSv1.3 if the non-default SSL_OP_NO_TICKET option is\nbeing used (but not if early_data support is also configured and the default\nanti-replay protection is in use). In this case, under certain conditions, the\nsession cache can get into an incorrect state and it will fail to flush properly\nas it fills. The session cache will continue to grow in an unbounded manner. A\nmalicious client could deliberately create the scenario for this failure to\nforce a Denial of Service. It may also happen by accident in normal operation.\n\nThis issue only affects TLS servers supporting TLSv1.3. It does not affect TLS\nclients.\n\nThe FIPS modules in 3.2, 3.1 and 3.0 are not affected by this issue. OpenSSL\n1.0.2 is also not affected by this issue.',
-              'diffID':        'sha256:05590cd53e0098af064bffc79d5b76acb8f14b8db4643871eb0a18325fad8005',
-              'fixedVersions': [
-                '3.0.12-r5'
-              ],
-              'installedVersion': '3.0.8-r4',
-              'packageName':      'libssl3',
-              'purl':             'pkg:apk/alpine/libssl3@3.0.8-r4?arch=x86_64&distro=3.17.3',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2024/04/08/5',
-                'https://access.redhat.com/errata/RHSA-2024:9333',
-                'https://access.redhat.com/security/cve/CVE-2024-2511',
-                'https://bugzilla.redhat.com/2274020',
-                'https://bugzilla.redhat.com/2281029',
-                'https://bugzilla.redhat.com/2283757',
-                'https://bugzilla.redhat.com/2294581',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2274020',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2281029',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2283757',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2294581',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-2511',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-4603',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-4741',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-5535',
-                'https://errata.almalinux.org/9/ALSA-2024-9333.html',
-                'https://errata.rockylinux.org/RLSA-2024:9333',
-                'https://github.com/openssl/openssl/commit/7e4d731b1c07201ad9374c1cd9ac5263bdf35bce',
-                'https://github.com/openssl/openssl/commit/b52867a9f618bb955bed2a3ce3db4d4f97ed8e5d',
-                'https://github.com/openssl/openssl/commit/e9d7083e241670332e0443da0f0d4ffb52829f08',
-                'https://github.openssl.org/openssl/extended-releases/commit/5f8d25770ae6437db119dfc951e207271a326640',
-                'https://linux.oracle.com/cve/CVE-2024-2511.html',
-                'https://linux.oracle.com/errata/ELSA-2024-9333.html',
-                'https://lists.debian.org/debian-lts-announce/2024/10/msg00033.html',
-                'https://lists.debian.org/debian-lts-announce/2024/11/msg00000.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2024-2511',
-                'https://security.netapp.com/advisory/ntap-20240503-0013/',
-                'https://ubuntu.com/security/notices/USN-6937-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2024-2511',
-                'https://www.openssl.org/news/secadv/20240408.txt',
-                'https://www.openssl.org/news/vulnerabilities.html'
-              ],
-              'severity':   'LOW',
-              'suppressed': false,
-              'title':      'openssl: Unbounded memory growth with session handling in TLSv1.3'
-            },
-            {
-              'cve':  'CVE-2024-9143',
-              'cvss': {
-                'redhat': {
-                  'v3score':  '3.7',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L'
-                }
-              },
-              'cwes': [
-                'CWE-125',
-                'CWE-787'
-              ],
-              'description':   "Issue summary: Use of the low-level GF(2^m) elliptic curve APIs with untrusted\nexplicit values for the field polynomial can lead to out-of-bounds memory reads\nor writes.\n\nImpact summary: Out of bound memory writes can lead to an application crash or\neven a possibility of a remote code execution, however, in all the protocols\ninvolving Elliptic Curve Cryptography that we're aware of, either only \"named\ncurves\" are supported, or, if explicit curve parameters are supported, they\nspecify an X9.62 encoding of binary (GF(2^m)) curves that can't represent\nproblematic input values. Thus the likelihood of existence of a vulnerable\napplication is low.\n\nIn particular, the X9.62 encoding is used for ECC keys in X.509 certificates,\nso problematic inputs cannot occur in the context of processing X.509\ncertificates.  Any problematic use-cases would have to be using an \"exotic\"\ncurve encoding.\n\nThe affected APIs include: EC_GROUP_new_curve_GF2m(), EC_GROUP_new_from_params(),\nand various supporting BN_GF2m_*() functions.\n\nApplications working with \"exotic\" explicit binary (GF(2^m)) curve parameters,\nthat make it possible to represent invalid field polynomials with a zero\nconstant term, via the above or similar APIs, may terminate abruptly as a\nresult of reading or writing outside of array bounds.  Remote code execution\ncannot easily be ruled out.\n\nThe FIPS modules in 3.3, 3.2, 3.1 and 3.0 are not affected by this issue.",
-              'diffID':        'sha256:05590cd53e0098af064bffc79d5b76acb8f14b8db4643871eb0a18325fad8005',
-              'fixedVersions': [
-                '3.0.15-r1'
-              ],
-              'installedVersion': '3.0.8-r4',
-              'packageName':      'libssl3',
-              'purl':             'pkg:apk/alpine/libssl3@3.0.8-r4?arch=x86_64&distro=3.17.3',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2024/10/16/1',
-                'http://www.openwall.com/lists/oss-security/2024/10/23/1',
-                'http://www.openwall.com/lists/oss-security/2024/10/24/1',
-                'https://access.redhat.com/security/cve/CVE-2024-9143',
-                'https://github.com/openssl/openssl/commit/72ae83ad214d2eef262461365a1975707f862712',
-                'https://github.com/openssl/openssl/commit/bc7e04d7c8d509fb78fc0e285aa948fb0da04700',
-                'https://github.com/openssl/openssl/commit/c0d3e4d32d2805f49bec30547f225bc4d092e1f4',
-                'https://github.com/openssl/openssl/commit/fdf6723362ca51bd883295efe206cb5b1cfa5154',
-                'https://github.openssl.org/openssl/extended-releases/commit/8efc0cbaa8ebba8e116f7b81a876a4123594d86a',
-                'https://github.openssl.org/openssl/extended-releases/commit/9d576994cec2b7aa37a91740ea7e680810957e41',
-                'https://lists.debian.org/debian-lts-announce/2024/10/msg00033.html',
-                'https://lists.debian.org/debian-lts-announce/2024/11/msg00000.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2024-9143',
-                'https://openssl-library.org/news/secadv/20241016.txt',
-                'https://security.netapp.com/advisory/ntap-20241101-0001/',
-                'https://ubuntu.com/security/notices/USN-7264-1',
-                'https://ubuntu.com/security/notices/USN-7278-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2024-9143'
-              ],
-              'severity':   'LOW',
-              'suppressed': false,
-              'title':      'openssl: Low-level invalid GF(2^m) parameters lead to OOB memory access'
-            },
-            {
-              'cve':  'CVE-2025-26519',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-787'
-              ],
-              'description':   'musl libc 0.9.13 through 1.2.5 before 1.2.6 has an out-of-bounds write vulnerability when an attacker can trigger iconv conversion of untrusted EUC-KR text to UTF-8.',
-              'diffID':        'sha256:05590cd53e0098af064bffc79d5b76acb8f14b8db4643871eb0a18325fad8005',
-              'fixedVersions': [
-                '1.2.3-r6'
-              ],
-              'installedVersion': '1.2.3-r5',
-              'packageName':      'musl',
-              'purl':             'pkg:apk/alpine/musl@1.2.3-r5?arch=x86_64&distro=3.17.3',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2025/02/13/2',
-                'http://www.openwall.com/lists/oss-security/2025/02/13/3',
-                'http://www.openwall.com/lists/oss-security/2025/02/13/4',
-                'http://www.openwall.com/lists/oss-security/2025/02/13/5',
-                'http://www.openwall.com/lists/oss-security/2025/02/14/5',
-                'http://www.openwall.com/lists/oss-security/2025/02/14/6',
-                'https://git.musl-libc.org/cgit/musl/commit/?id=c47ad25ea3b484e10326f933e927c0bc8cded3da',
-                'https://git.musl-libc.org/cgit/musl/commit/?id=e5adcd97b5196e29991b524237381a0202a60659',
-                'https://www.openwall.com/lists/oss-security/2025/02/13/2'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'musl libc 0.9.13 through 1.2.5 before 1.2.6 has an out-of-bounds write ...'
-            },
-            {
-              'cve':  'CVE-2025-26519',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-787'
-              ],
-              'description':   'musl libc 0.9.13 through 1.2.5 before 1.2.6 has an out-of-bounds write vulnerability when an attacker can trigger iconv conversion of untrusted EUC-KR text to UTF-8.',
-              'diffID':        'sha256:05590cd53e0098af064bffc79d5b76acb8f14b8db4643871eb0a18325fad8005',
-              'fixedVersions': [
-                '1.2.3-r6'
-              ],
-              'installedVersion': '1.2.3-r5',
-              'packageName':      'musl-utils',
-              'purl':             'pkg:apk/alpine/musl-utils@1.2.3-r5?arch=x86_64&distro=3.17.3',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2025/02/13/2',
-                'http://www.openwall.com/lists/oss-security/2025/02/13/3',
-                'http://www.openwall.com/lists/oss-security/2025/02/13/4',
-                'http://www.openwall.com/lists/oss-security/2025/02/13/5',
-                'http://www.openwall.com/lists/oss-security/2025/02/14/5',
-                'http://www.openwall.com/lists/oss-security/2025/02/14/6',
-                'https://git.musl-libc.org/cgit/musl/commit/?id=c47ad25ea3b484e10326f933e927c0bc8cded3da',
-                'https://git.musl-libc.org/cgit/musl/commit/?id=e5adcd97b5196e29991b524237381a0202a60659',
-                'https://www.openwall.com/lists/oss-security/2025/02/13/2'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'musl libc 0.9.13 through 1.2.5 before 1.2.6 has an out-of-bounds write ...'
-            },
-            {
-              'cve':  'CVE-2023-42363',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.5',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.8',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   'A use-after-free vulnerability was discovered in xasprintf function in xfuncs_printf.c:344 in BusyBox v.1.36.1.',
-              'diffID':        'sha256:f1417ff83b319fbdae6dd9cd6d8c9c88002dcd75ecf6ec201c8c6894681cf2b5',
-              'fixedVersions': [
-                '1.35.0-r31'
-              ],
-              'installedVersion': '1.35.0-r29',
-              'packageName':      'ssl_client',
-              'purl':             'pkg:apk/alpine/ssl_client@1.35.0-r29?arch=x86_64&distro=3.17.3',
-              'references':       [
-                'http://lists.busybox.net/pipermail/busybox/2024-May/090760.html',
-                'https://access.redhat.com/security/cve/CVE-2023-42363',
-                'https://bugs.busybox.net/show_bug.cgi?id=15865',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-42363',
-                'https://ubuntu.com/security/notices/USN-6961-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-42363'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk'
-            },
-            {
-              'cve':  'CVE-2023-42364',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.5',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.8',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   'A use-after-free vulnerability in BusyBox v.1.36.1 allows attackers to cause a denial of service via a crafted awk pattern in the awk.c evaluate function.',
-              'diffID':        'sha256:f1417ff83b319fbdae6dd9cd6d8c9c88002dcd75ecf6ec201c8c6894681cf2b5',
-              'fixedVersions': [
-                '1.35.0-r31'
-              ],
-              'installedVersion': '1.35.0-r29',
-              'packageName':      'ssl_client',
-              'purl':             'pkg:apk/alpine/ssl_client@1.35.0-r29?arch=x86_64&distro=3.17.3',
-              'references':       [
-                'http://lists.busybox.net/pipermail/busybox/2024-May/090762.html',
-                'https://access.redhat.com/security/cve/CVE-2023-42364',
-                'https://bugs.busybox.net/show_bug.cgi?id=15868',
-                'https://gitlab.alpinelinux.org/alpine/aports/-/blob/master/main/busybox/CVE-2023-42364-CVE-2023-42365.patch',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-42364',
-                'https://ubuntu.com/security/notices/USN-6961-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-42364'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'busybox: use-after-free'
-            },
-            {
-              'cve':  'CVE-2023-42365',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.5',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.8',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   'A use-after-free vulnerability was discovered in BusyBox v.1.36.1 via a crafted awk pattern in the awk.c copyvar function.',
-              'diffID':        'sha256:f1417ff83b319fbdae6dd9cd6d8c9c88002dcd75ecf6ec201c8c6894681cf2b5',
-              'fixedVersions': [
-                '1.35.0-r31'
-              ],
-              'installedVersion': '1.35.0-r29',
-              'packageName':      'ssl_client',
-              'purl':             'pkg:apk/alpine/ssl_client@1.35.0-r29?arch=x86_64&distro=3.17.3',
-              'references':       [
-                'http://lists.busybox.net/pipermail/busybox/2024-May/090762.html',
-                'https://access.redhat.com/security/cve/CVE-2023-42365',
-                'https://bugs.busybox.net/show_bug.cgi?id=15871',
-                'https://gitlab.alpinelinux.org/alpine/aports/-/blob/master/main/busybox/CVE-2023-42364-CVE-2023-42365.patch',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-42365',
-                'https://ubuntu.com/security/notices/USN-6961-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-42365'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'busybox: use-after-free'
-            },
-            {
-              'cve':  'CVE-2023-42366',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.5',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.1',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-787'
-              ],
-              'description':   'A heap-buffer-overflow was discovered in BusyBox v.1.36.1 in the next_token function at awk.c:1159.',
-              'diffID':        'sha256:f1417ff83b319fbdae6dd9cd6d8c9c88002dcd75ecf6ec201c8c6894681cf2b5',
-              'fixedVersions': [
-                '1.35.0-r30'
-              ],
-              'installedVersion': '1.35.0-r29',
-              'packageName':      'ssl_client',
-              'purl':             'pkg:apk/alpine/ssl_client@1.35.0-r29?arch=x86_64&distro=3.17.3',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2023-42366',
-                'https://bugs.busybox.net/show_bug.cgi?id=15874',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-42366',
-                'https://security.netapp.com/advisory/ntap-20241206-0007/',
-                'https://www.cve.org/CVERecord?id=CVE-2023-42366'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'busybox: A heap-buffer-overflow'
-            }
-          ]
-        }
-      ],
-      'summary': {
-        'critical':   0,
-        'high':       6,
-        'low':        4,
-        'medium':     34,
-        'suppressed': 0,
-        'unknown':    0
-      }
-    }
-  },
-  {
-    'id':    'default/d67a082d0c98ca3503a818796b14424a98c9aa6a1ef4cd0f9ca6d04d423ded97',
-    'type':  'storage.sbomscanner.kubewarden.io.vulnerabilityreport',
-    'links': {
-      'patch':  'https://localhost:8005/v1/storage.sbomscanner.kubewarden.io.vulnerabilityreports/default/d67a082d0c98ca3503a818796b14424a98c9aa6a1ef4cd0f9ca6d04d423ded97',
-      'remove': 'https://localhost:8005/v1/storage.sbomscanner.kubewarden.io.vulnerabilityreports/default/d67a082d0c98ca3503a818796b14424a98c9aa6a1ef4cd0f9ca6d04d423ded97',
-      'self':   'https://localhost:8005/v1/storage.sbomscanner.kubewarden.io.vulnerabilityreports/default/d67a082d0c98ca3503a818796b14424a98c9aa6a1ef4cd0f9ca6d04d423ded97',
-      'update': 'https://localhost:8005/v1/storage.sbomscanner.kubewarden.io.vulnerabilityreports/default/d67a082d0c98ca3503a818796b14424a98c9aa6a1ef4cd0f9ca6d04d423ded97',
-      'view':   'https://localhost:8005/apis/storage.sbomscanner.kubewarden.io/v1alpha1/namespaces/default/vulnerabilityreports/d67a082d0c98ca3503a818796b14424a98c9aa6a1ef4cd0f9ca6d04d423ded97'
-    },
-    'apiVersion':    'storage.sbomscanner.kubewarden.io/v1alpha1',
-    'imageMetadata': {
-      'digest':      'sha256:69704ef328d05a9f806b6b8502915e6a0a4faa4d72018dc42343f511490daf8a',
-      'platform':    'linux/amd64',
-      'registry':    'lsong-demo1',
-      'registryURI': 'registry-1.docker.io',
-      'repository':  'library/alpine',
-      'tag':         '3.14.2'
-    },
-    'kind':     'VulnerabilityReport',
-    'metadata': {
-      'creationTimestamp': '2026-01-14T15:47:28Z',
-      'fields':            [
-        'd67a082d0c98ca3503a818796b14424a98c9aa6a1ef4cd0f9ca6d04d423ded97',
-        'registry-1.docker.io/library/alpine:3.14.2',
-        'linux/amd64',
-        '43 (0 suppressed)'
-      ],
-      'labels': {
-        'app.kubernetes.io/managed-by':          'sbomscanner',
-        'app.kubernetes.io/part-of':             'sbomscanner',
-        'sbomscanner.kubewarden.io/scanjob-uid': '445c600a-c4b6-40b3-bd71-f2d2140a37d5'
-      },
-      'name':            'd67a082d0c98ca3503a818796b14424a98c9aa6a1ef4cd0f9ca6d04d423ded97',
-      'namespace':       'default',
-      'ownerReferences': [
-        {
-          'apiVersion':         'storage.sbomscanner.kubewarden.io/v1alpha1',
-          'blockOwnerDeletion': true,
-          'controller':         true,
-          'kind':               'SBOM',
-          'name':               'd67a082d0c98ca3503a818796b14424a98c9aa6a1ef4cd0f9ca6d04d423ded97',
-          'uid':                'c04d5de3-0f7c-4b19-9df8-81fcc5cbc2f4'
-        }
-      ],
-      'relationships': [
-        {
-          'fromId':   'default/d67a082d0c98ca3503a818796b14424a98c9aa6a1ef4cd0f9ca6d04d423ded97',
-          'fromType': 'storage.sbomscanner.kubewarden.io.sbom',
-          'rel':      'owner',
-          'state':    'active',
-          'message':  'Resource is current'
-        }
-      ],
-      'resourceVersion': '2',
-      'state':           {
-        'error':         false,
-        'message':       'Resource is current',
-        'name':          'active',
-        'transitioning': false
-      },
-      'uid': '0115419c-450b-408a-9435-3d458cae73f2'
-    },
-    'report': {
-      'results': [
-        {
-          'class':           'os-pkgs',
-          'target':          '/var/run/worker/trivy.sbom.866711587.json (alpine 3.14.2)',
-          'type':            'alpine',
-          'vulnerabilities': [
-            {
-              'cve':  'CVE-2021-42378',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the getvar_i function",
-              'diffID':        'sha256:e2eb06d8af8218cfec8210147357a68b7e13f7c485b991c288c2d01dc228bb68',
-              'fixedVersions': [
-                '1.33.1-r6'
-              ],
-              'installedVersion': '1.33.1-r3',
-              'packageName':      'busybox',
-              'purl':             'pkg:apk/alpine/busybox@1.33.1-r3?arch=x86_64&distro=3.14.2',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42378',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42378',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42378'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the getvar_i()'
-            },
-            {
-              'cve':  'CVE-2021-42379',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the next_input_file function",
-              'diffID':        'sha256:e2eb06d8af8218cfec8210147357a68b7e13f7c485b991c288c2d01dc228bb68',
-              'fixedVersions': [
-                '1.33.1-r6'
-              ],
-              'installedVersion': '1.33.1-r3',
-              'packageName':      'busybox',
-              'purl':             'pkg:apk/alpine/busybox@1.33.1-r3?arch=x86_64&distro=3.14.2',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42379',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42379',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42379'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the next_input_file()'
-            },
-            {
-              'cve':  'CVE-2021-42380',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the clrvar function",
-              'diffID':        'sha256:e2eb06d8af8218cfec8210147357a68b7e13f7c485b991c288c2d01dc228bb68',
-              'fixedVersions': [
-                '1.33.1-r6'
-              ],
-              'installedVersion': '1.33.1-r3',
-              'packageName':      'busybox',
-              'purl':             'pkg:apk/alpine/busybox@1.33.1-r3?arch=x86_64&distro=3.14.2',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42380',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42380',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42380'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the clrvar()'
-            },
-            {
-              'cve':  'CVE-2021-42381',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the hash_init function",
-              'diffID':        'sha256:e2eb06d8af8218cfec8210147357a68b7e13f7c485b991c288c2d01dc228bb68',
-              'fixedVersions': [
-                '1.33.1-r6'
-              ],
-              'installedVersion': '1.33.1-r3',
-              'packageName':      'busybox',
-              'purl':             'pkg:apk/alpine/busybox@1.33.1-r3?arch=x86_64&distro=3.14.2',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42381',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42381',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42381'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the hash_init()'
-            },
-            {
-              'cve':  'CVE-2021-42382',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the getvar_s function",
-              'diffID':        'sha256:e2eb06d8af8218cfec8210147357a68b7e13f7c485b991c288c2d01dc228bb68',
-              'fixedVersions': [
-                '1.33.1-r6'
-              ],
-              'installedVersion': '1.33.1-r3',
-              'packageName':      'busybox',
-              'purl':             'pkg:apk/alpine/busybox@1.33.1-r3?arch=x86_64&distro=3.14.2',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42382',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42382',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42382'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the getvar_s()'
-            },
-            {
-              'cve':  'CVE-2021-42383',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the evaluate function",
-              'diffID':        'sha256:e2eb06d8af8218cfec8210147357a68b7e13f7c485b991c288c2d01dc228bb68',
-              'fixedVersions': [
-                '1.33.1-r6'
-              ],
-              'installedVersion': '1.33.1-r3',
-              'packageName':      'busybox',
-              'purl':             'pkg:apk/alpine/busybox@1.33.1-r3?arch=x86_64&distro=3.14.2',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42383',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42383',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42383'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the evaluate()'
-            },
-            {
-              'cve':  'CVE-2021-42384',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the handle_special function",
-              'diffID':        'sha256:e2eb06d8af8218cfec8210147357a68b7e13f7c485b991c288c2d01dc228bb68',
-              'fixedVersions': [
-                '1.33.1-r6'
-              ],
-              'installedVersion': '1.33.1-r3',
-              'packageName':      'busybox',
-              'purl':             'pkg:apk/alpine/busybox@1.33.1-r3?arch=x86_64&distro=3.14.2',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42384',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42384',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42384'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the handle_special()'
-            },
-            {
-              'cve':  'CVE-2021-42385',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the evaluate function",
-              'diffID':        'sha256:e2eb06d8af8218cfec8210147357a68b7e13f7c485b991c288c2d01dc228bb68',
-              'fixedVersions': [
-                '1.33.1-r6'
-              ],
-              'installedVersion': '1.33.1-r3',
-              'packageName':      'busybox',
-              'purl':             'pkg:apk/alpine/busybox@1.33.1-r3?arch=x86_64&distro=3.14.2',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42385',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42385',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42385'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the evaluate()'
-            },
-            {
-              'cve':  'CVE-2021-42386',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the nvalloc function",
-              'diffID':        'sha256:e2eb06d8af8218cfec8210147357a68b7e13f7c485b991c288c2d01dc228bb68',
-              'fixedVersions': [
-                '1.33.1-r6'
-              ],
-              'installedVersion': '1.33.1-r3',
-              'packageName':      'busybox',
-              'purl':             'pkg:apk/alpine/busybox@1.33.1-r3?arch=x86_64&distro=3.14.2',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42386',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42386',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42386'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the nvalloc()'
-            },
-            {
-              'cve':  'CVE-2022-28391',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '8.8',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-88'
-              ],
-              'description':   "BusyBox through 1.35.0 allows remote attackers to execute arbitrary code if netstat is used to print a DNS PTR record's value to a VT compatible terminal. Alternatively, the attacker could choose to change the terminal's colors.",
-              'diffID':        'sha256:e2eb06d8af8218cfec8210147357a68b7e13f7c485b991c288c2d01dc228bb68',
-              'fixedVersions': [
-                '1.33.1-r7'
-              ],
-              'installedVersion': '1.33.1-r3',
-              'packageName':      'busybox',
-              'purl':             'pkg:apk/alpine/busybox@1.33.1-r3?arch=x86_64&distro=3.14.2',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2022-28391',
-                'https://git.alpinelinux.org/aports/plain/main/busybox/0001-libbb-sockaddr2str-ensure-only-printable-characters-.patch',
-                'https://git.alpinelinux.org/aports/plain/main/busybox/0002-nslookup-sanitize-all-printed-strings-with-printable.patch',
-                'https://gitlab.alpinelinux.org/alpine/aports/-/issues/13661',
-                'https://nvd.nist.gov/vuln/detail/CVE-2022-28391',
-                'https://www.cve.org/CVERecord?id=CVE-2022-28391'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: remote attackers may execute arbitrary code if netstat is used'
-            },
-            {
-              'cve':  'CVE-2021-42374',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '5.7',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-125'
-              ],
-              'description':   "An out-of-bounds heap read in Busybox's unlzma applet leads to information leak and denial of service when crafted LZMA-compressed input is decompressed. This can be triggered by any applet/format that",
-              'diffID':        'sha256:e2eb06d8af8218cfec8210147357a68b7e13f7c485b991c288c2d01dc228bb68',
-              'fixedVersions': [
-                '1.33.1-r4'
-              ],
-              'installedVersion': '1.33.1-r3',
-              'packageName':      'busybox',
-              'purl':             'pkg:apk/alpine/busybox@1.33.1-r3?arch=x86_64&distro=3.14.2',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42374',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42374',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42374'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'busybox: out-of-bounds read in unlzma applet leads to information leak and denial of service when crafted LZMA-compressed input is decompressed'
-            },
-            {
-              'cve':  'CVE-2021-42375',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.5',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '4.1',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-159'
-              ],
-              'description':   "An incorrect handling of a special element in Busybox's ash applet leads to denial of service when processing a crafted shell command, due to the shell mistaking specific characters for reserved characters. This may be used for DoS under rare conditions of filtered command input.",
-              'diffID':        'sha256:e2eb06d8af8218cfec8210147357a68b7e13f7c485b991c288c2d01dc228bb68',
-              'fixedVersions': [
-                '1.33.1-r5'
-              ],
-              'installedVersion': '1.33.1-r3',
-              'packageName':      'busybox',
-              'purl':             'pkg:apk/alpine/busybox@1.33.1-r3?arch=x86_64&distro=3.14.2',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42375',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42375',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42375'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'busybox: incorrect handling of a special element in ash applet leads to denial of service when processing a crafted shell command'
-            },
-            {
-              'cve':  'CVE-2022-0778',
-              'cvss': {
-                'bitnami': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'ghsa': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'nvd': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-835'
-              ],
-              'description':   'The BN_mod_sqrt() function, which computes a modular square root, contains a bug that can cause it to loop forever for non-prime moduli. Internally this function is used when parsing certificates that contain elliptic curve public keys in compressed form or explicit elliptic curve parameters with a base point encoded in compressed form. It is possible to trigger the infinite loop by crafting a certificate that has invalid explicit curve parameters. Since certificate parsing happens prior to verification of the certificate signature, any process that parses an externally supplied certificate may thus be subject to a denial of service attack. The infinite loop can also be reached when parsing crafted private keys as they can contain explicit elliptic curve parameters. Thus vulnerable situations include: - TLS clients consuming server certificates - TLS servers consuming client certificates - Hosting providers taking certificates or private keys from customers - Certificate authorities parsing certification requests from subscribers - Anything else which parses ASN.1 elliptic curve parameters Also any other applications that use the BN_mod_sqrt() where the attacker can control the parameter values are vulnerable to this DoS issue. In the OpenSSL 1.0.2 version the public key is not parsed during initial parsing of the certificate which makes it slightly harder to trigger the infinite loop. However any operation which requires the public key from the certificate will trigger the infinite loop. In particular the attacker can use a self-signed certificate to trigger the loop during verification of the certificate signature. This issue affects OpenSSL versions 1.0.2, 1.1.1 and 3.0. It was addressed in the releases of 1.1.1n and 3.0.2 on the 15th March 2022. Fixed in OpenSSL 3.0.2 (Affected 3.0.0,3.0.1). Fixed in OpenSSL 1.1.1n (Affected 1.1.1-1.1.1m). Fixed in OpenSSL 1.0.2zd (Affected 1.0.2-1.0.2zc).',
-              'diffID':        'sha256:e2eb06d8af8218cfec8210147357a68b7e13f7c485b991c288c2d01dc228bb68',
-              'fixedVersions': [
-                '1.1.1n-r0'
-              ],
-              'installedVersion': '1.1.1l-r0',
-              'packageName':      'libcrypto1.1',
-              'purl':             'pkg:apk/alpine/libcrypto1.1@1.1.1l-r0?arch=x86_64&distro=3.14.2',
-              'references':       [
-                'http://packetstormsecurity.com/files/167344/OpenSSL-1.0.2-1.1.1-3.0-BN_mod_sqrt-Infinite-Loop.html',
-                'http://seclists.org/fulldisclosure/2022/May/33',
-                'http://seclists.org/fulldisclosure/2022/May/35',
-                'http://seclists.org/fulldisclosure/2022/May/38',
-                'https://access.redhat.com/errata/RHSA-2022:5326',
-                'https://access.redhat.com/security/cve/CVE-2022-0778',
-                'https://bugzilla.redhat.com/2062202',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2062202',
-                'https://cert-portal.siemens.com/productcert/pdf/ssa-712929.pdf',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-0778',
-                'https://errata.almalinux.org/8/ALSA-2022-5326.html',
-                'https://errata.rockylinux.org/RLSA-2022:4899',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=3118eb64934499d93db3230748a452351d1d9a65',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=380085481c64de749a6dd25cdf0bcf4360b30f83',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=a466912611aa6cbdf550cd10601390e587451246',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=3118eb64934499d93db3230748a452351d1d9a65',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=380085481c64de749a6dd25cdf0bcf4360b30f83',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=a466912611aa6cbdf550cd10601390e587451246',
-                'https://linux.oracle.com/cve/CVE-2022-0778.html',
-                'https://linux.oracle.com/errata/ELSA-2022-9272.html',
-                'https://lists.debian.org/debian-lts-announce/2022/03/msg00023.html',
-                'https://lists.debian.org/debian-lts-announce/2022/03/msg00024.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/323SNN6ZX7PRJJWP2BUAFLPUAE42XWLZ',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/323SNN6ZX7PRJJWP2BUAFLPUAE42XWLZ/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GDB3GQVJPXJE7X5C5JN6JAA4XUDWD6E6',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GDB3GQVJPXJE7X5C5JN6JAA4XUDWD6E6/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/W6K3PR542DXWLEFFMFIDMME4CWMHJRMG',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/W6K3PR542DXWLEFFMFIDMME4CWMHJRMG/',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/323SNN6ZX7PRJJWP2BUAFLPUAE42XWLZ',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/GDB3GQVJPXJE7X5C5JN6JAA4XUDWD6E6',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/W6K3PR542DXWLEFFMFIDMME4CWMHJRMG',
-                'https://nvd.nist.gov/vuln/detail/CVE-2022-0778',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2022-0002',
-                'https://rustsec.org/advisories/RUSTSEC-2022-0014.html',
-                'https://security.gentoo.org/glsa/202210-02',
-                'https://security.netapp.com/advisory/ntap-20220321-0002',
-                'https://security.netapp.com/advisory/ntap-20220321-0002/',
-                'https://security.netapp.com/advisory/ntap-20220429-0005',
-                'https://security.netapp.com/advisory/ntap-20220429-0005/',
-                'https://security.netapp.com/advisory/ntap-20240621-0006',
-                'https://security.netapp.com/advisory/ntap-20240621-0006/',
-                'https://support.apple.com/kb/HT213255',
-                'https://support.apple.com/kb/HT213256',
-                'https://support.apple.com/kb/HT213257',
-                'https://ubuntu.com/security/notices/USN-5328-1',
-                'https://ubuntu.com/security/notices/USN-5328-2',
-                'https://ubuntu.com/security/notices/USN-6457-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2022-0778',
-                'https://www.debian.org/security/2022/dsa-5103',
-                'https://www.openssl.org/news/secadv/20220315.txt',
-                'https://www.oracle.com/security-alerts/cpuapr2022.html',
-                'https://www.oracle.com/security-alerts/cpujul2022.html',
-                'https://www.tenable.com/security/tns-2022-06',
-                'https://www.tenable.com/security/tns-2022-07',
-                'https://www.tenable.com/security/tns-2022-08',
-                'https://www.tenable.com/security/tns-2022-09'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: Infinite loop in BN_mod_sqrt() reachable when parsing certificates'
-            },
-            {
-              'cve':  'CVE-2022-4450',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'nvd': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-415'
-              ],
-              'description':   'The function PEM_read_bio_ex() reads a PEM file from a BIO and parses and\ndecodes the "name" (e.g. "CERTIFICATE"), any header data and the payload data.\nIf the function succeeds then the "name_out", "header" and "data" arguments are\npopulated with pointers to buffers containing the relevant decoded data. The\ncaller is responsible for freeing those buffers. It is possible to construct a\nPEM file that results in 0 bytes of payload data. In this case PEM_read_bio_ex()\nwill return a failure code but will populate the header argument with a pointer\nto a buffer that has already been freed. If the caller also frees this buffer\nthen a double free will occur. This will most likely lead to a crash. This\ncould be exploited by an attacker who has the ability to supply malicious PEM\nfiles for parsing to achieve a denial of service attack.\n\nThe functions PEM_read_bio() and PEM_read() are simple wrappers around\nPEM_read_bio_ex() and therefore these functions are also directly affected.\n\nThese functions are also called indirectly by a number of other OpenSSL\nfunctions including PEM_X509_INFO_read_bio_ex() and\nSSL_CTX_use_serverinfo_file() which are also vulnerable. Some OpenSSL internal\nuses of these functions are not vulnerable because the caller does not free the\nheader argument if PEM_read_bio_ex() returns a failure code. These locations\ninclude the PEM_read_bio_TYPE() functions as well as the decoders introduced in\nOpenSSL 3.0.\n\nThe OpenSSL asn1parse command line application is also impacted by this issue.',
-              'diffID':        'sha256:e2eb06d8af8218cfec8210147357a68b7e13f7c485b991c288c2d01dc228bb68',
-              'fixedVersions': [
-                '1.1.1t-r0'
-              ],
-              'installedVersion': '1.1.1l-r0',
-              'packageName':      'libcrypto1.1',
-              'purl':             'pkg:apk/alpine/libcrypto1.1@1.1.1l-r0?arch=x86_64&distro=3.14.2',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2023:2165',
-                'https://access.redhat.com/security/cve/CVE-2022-4450',
-                'https://bugzilla.redhat.com/1960321',
-                'https://bugzilla.redhat.com/2164440',
-                'https://bugzilla.redhat.com/2164487',
-                'https://bugzilla.redhat.com/2164492',
-                'https://bugzilla.redhat.com/2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144000',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144003',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144006',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144008',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144010',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144012',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144015',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144017',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144019',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2145170',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2158412',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164440',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164487',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164488',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164492',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164497',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164499',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164500',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4203',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4304',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4450',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0215',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0216',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0217',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0286',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0401',
-                'https://errata.almalinux.org/9/ALSA-2023-2165.html',
-                'https://errata.rockylinux.org/RLSA-2023:0946',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=63bcf189be73a9cc1264059bed6f57974be74a83',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=bbcf509bd046b34cca19c766bbddc31683d0858b',
-                'https://linux.oracle.com/cve/CVE-2022-4450.html',
-                'https://linux.oracle.com/errata/ELSA-2023-32791.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2022-4450',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0003',
-                'https://rustsec.org/advisories/RUSTSEC-2023-0010.html',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://ubuntu.com/security/notices/USN-5844-1',
-                'https://ubuntu.com/security/notices/USN-6564-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2022-4450',
-                'https://www.openssl.org/news/secadv/20230207.txt'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: double free after calling PEM_read_bio_ex'
-            },
-            {
-              'cve':  'CVE-2023-0215',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'nvd': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   'The public API function BIO_new_NDEF is a helper function used for streaming\nASN.1 data via a BIO. It is primarily used internally to OpenSSL to support the\nSMIME, CMS and PKCS7 streaming capabilities, but may also be called directly by\nend user applications.\n\nThe function receives a BIO from the caller, prepends a new BIO_f_asn1 filter\nBIO onto the front of it to form a BIO chain, and then returns the new head of\nthe BIO chain to the caller. Under certain conditions, for example if a CMS\nrecipient public key is invalid, the new filter BIO is freed and the function\nreturns a NULL result indicating a failure. However, in this case, the BIO chain\nis not properly cleaned up and the BIO passed by the caller still retains\ninternal pointers to the previously freed filter BIO. If the caller then goes on\nto call BIO_pop() on the BIO then a use-after-free will occur. This will most\nlikely result in a crash.\n\n\n\nThis scenario occurs directly in the internal function B64_write_ASN1() which\nmay cause BIO_new_NDEF() to be called and will subsequently call BIO_pop() on\nthe BIO. This internal function is in turn called by the public API functions\nPEM_write_bio_ASN1_stream, PEM_write_bio_CMS_stream, PEM_write_bio_PKCS7_stream,\nSMIME_write_ASN1, SMIME_write_CMS and SMIME_write_PKCS7.\n\nOther public API functions that may be impacted by this include\ni2d_ASN1_bio_stream, BIO_new_CMS, BIO_new_PKCS7, i2d_CMS_bio_stream and\ni2d_PKCS7_bio_stream.\n\nThe OpenSSL cms and smime command line applications are similarly affected.',
-              'diffID':        'sha256:e2eb06d8af8218cfec8210147357a68b7e13f7c485b991c288c2d01dc228bb68',
-              'fixedVersions': [
-                '1.1.1t-r0'
-              ],
-              'installedVersion': '1.1.1l-r0',
-              'packageName':      'libcrypto1.1',
-              'purl':             'pkg:apk/alpine/libcrypto1.1@1.1.1l-r0?arch=x86_64&distro=3.14.2',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2023:2165',
-                'https://access.redhat.com/security/cve/CVE-2023-0215',
-                'https://bugzilla.redhat.com/1960321',
-                'https://bugzilla.redhat.com/2164440',
-                'https://bugzilla.redhat.com/2164487',
-                'https://bugzilla.redhat.com/2164492',
-                'https://bugzilla.redhat.com/2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144000',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144003',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144006',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144008',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144010',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144012',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144015',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144017',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144019',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2145170',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2158412',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164440',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164487',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164488',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164492',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164497',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164499',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164500',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4203',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4304',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4450',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0215',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0216',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0217',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0286',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0401',
-                'https://errata.almalinux.org/9/ALSA-2023-2165.html',
-                'https://errata.rockylinux.org/RLSA-2023:0946',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=8818064ce3c3c0f1b740a5aaba2a987e75bfbafd',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=9816136fe31d92ace4037d5da5257f763aeeb4eb',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=c3829dd8825c654652201e16f8a0a0c46ee3f344',
-                'https://linux.oracle.com/cve/CVE-2023-0215.html',
-                'https://linux.oracle.com/errata/ELSA-2023-32791.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-0215',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0003',
-                'https://rustsec.org/advisories/RUSTSEC-2023-0009.html',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://security.netapp.com/advisory/ntap-20230427-0007',
-                'https://security.netapp.com/advisory/ntap-20230427-0007/',
-                'https://security.netapp.com/advisory/ntap-20230427-0009',
-                'https://security.netapp.com/advisory/ntap-20230427-0009/',
-                'https://security.netapp.com/advisory/ntap-20240621-0006',
-                'https://security.netapp.com/advisory/ntap-20240621-0006/',
-                'https://ubuntu.com/security/notices/USN-5844-1',
-                'https://ubuntu.com/security/notices/USN-5845-1',
-                'https://ubuntu.com/security/notices/USN-5845-2',
-                'https://ubuntu.com/security/notices/USN-6564-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-0215',
-                'https://www.openssl.org/news/secadv/20230207.txt'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: use-after-free following BIO_new_NDEF'
-            },
-            {
-              'cve':  'CVE-2023-0286',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '7.4',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H'
-                },
-                'nvd': {
-                  'v3score':  '7.4',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.4',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-843'
-              ],
-              'description':   'There is a type confusion vulnerability relating to X.400 address processing\ninside an X.509 GeneralName. X.400 addresses were parsed as an ASN1_STRING but\nthe public structure definition for GENERAL_NAME incorrectly specified the type\nof the x400Address field as ASN1_TYPE. This field is subsequently interpreted by\nthe OpenSSL function GENERAL_NAME_cmp as an ASN1_TYPE rather than an\nASN1_STRING.\n\nWhen CRL checking is enabled (i.e. the application sets the\nX509_V_FLAG_CRL_CHECK flag), this vulnerability may allow an attacker to pass\narbitrary pointers to a memcmp call, enabling them to read memory contents or\nenact a denial of service. In most cases, the attack requires the attacker to\nprovide both the certificate chain and CRL, neither of which need to have a\nvalid signature. If the attacker only controls one of these inputs, the other\ninput must already contain an X.400 address as a CRL distribution point, which\nis uncommon. As such, this vulnerability is most likely to only affect\napplications which have implemented their own functionality for retrieving CRLs\nover a network.',
-              'diffID':        'sha256:e2eb06d8af8218cfec8210147357a68b7e13f7c485b991c288c2d01dc228bb68',
-              'fixedVersions': [
-                '1.1.1t-r0'
-              ],
-              'installedVersion': '1.1.1l-r0',
-              'packageName':      'libcrypto1.1',
-              'purl':             'pkg:apk/alpine/libcrypto1.1@1.1.1l-r0?arch=x86_64&distro=3.14.2',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2025:7937',
-                'https://access.redhat.com/security/cve/CVE-2023-0286',
-                'https://access.redhat.com/security/cve/cve-2023-0286',
-                'https://bugzilla.redhat.com/2164440',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144000',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144003',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144006',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144008',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144010',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144012',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144015',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144017',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144019',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2145170',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2158412',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164440',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164487',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164488',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164492',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164497',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164499',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164500',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4203',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4304',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4450',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0215',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0216',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0217',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0286',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0401',
-                'https://errata.almalinux.org/9/ALSA-2025-7937.html',
-                'https://errata.rockylinux.org/RLSA-2023:0946',
-                'https://ftp.openbsd.org/pub/OpenBSD/LibreSSL/libressl-3.6.2-relnotes.txt',
-                'https://ftp.openbsd.org/pub/OpenBSD/patches/7.2/common/018_x509.patch.sig',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=2c6c9d439b484e1ba9830d8454a34fa4f80fdfe9',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=2f7530077e0ef79d98718138716bc51ca0cad658',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=fd2af07dc083a350c959147097003a14a5e8ac4d',
-                'https://github.com/pyca/cryptography',
-                'https://github.com/pyca/cryptography/security/advisories/GHSA-x4qr-2fvf-3mr5',
-                'https://linux.oracle.com/cve/CVE-2023-0286.html',
-                'https://linux.oracle.com/errata/ELSA-2025-7937.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-0286',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0003',
-                'https://rustsec.org/advisories/RUSTSEC-2023-0006.html',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://ubuntu.com/security/notices/USN-5844-1',
-                'https://ubuntu.com/security/notices/USN-5845-1',
-                'https://ubuntu.com/security/notices/USN-5845-2',
-                'https://ubuntu.com/security/notices/USN-6564-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-0286',
-                'https://www.openssl.org/news/secadv/20230207.txt'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: X.400 address type confusion in X.509 GeneralName'
-            },
-            {
-              'cve':  'CVE-2023-0464',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-295'
-              ],
-              'description':   "A security vulnerability has been identified in all supported versions\n\nof OpenSSL related to the verification of X.509 certificate chains\nthat include policy constraints.  Attackers may be able to exploit this\nvulnerability by creating a malicious certificate chain that triggers\nexponential use of computational resources, leading to a denial-of-service\n(DoS) attack on affected systems.\n\nPolicy processing is disabled by default but can be enabled by passing\nthe `-policy' argument to the command line utilities or by calling the\n`X509_VERIFY_PARAM_set1_policies()' function.",
-              'diffID':        'sha256:e2eb06d8af8218cfec8210147357a68b7e13f7c485b991c288c2d01dc228bb68',
-              'fixedVersions': [
-                '1.1.1t-r1'
-              ],
-              'installedVersion': '1.1.1l-r0',
-              'packageName':      'libcrypto1.1',
-              'purl':             'pkg:apk/alpine/libcrypto1.1@1.1.1l-r0?arch=x86_64&distro=3.14.2',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2023:3722',
-                'https://access.redhat.com/security/cve/CVE-2023-0464',
-                'https://bugzilla.redhat.com/2181082',
-                'https://bugzilla.redhat.com/2182561',
-                'https://bugzilla.redhat.com/2182565',
-                'https://bugzilla.redhat.com/2188461',
-                'https://bugzilla.redhat.com/2207947',
-                'https://errata.almalinux.org/9/ALSA-2023-3722.html',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=2017771e2db3e2b96f89bbe8766c3209f6a99545',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=2dcd4f1e3115f38cefa43e3efbe9b801c27e642e',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=879f7080d7e141f415c79eaa3a8ac4a3dad0348b',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=959c59c7a0164117e7f8366466a32bb1f8d77ff1',
-                'https://linux.oracle.com/cve/CVE-2023-0464.html',
-                'https://linux.oracle.com/errata/ELSA-2023-3722.html',
-                'https://lists.debian.org/debian-lts-announce/2023/06/msg00011.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-0464',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://security.netapp.com/advisory/ntap-20230406-0006/',
-                'https://security.netapp.com/advisory/ntap-20240621-0006/',
-                'https://ubuntu.com/security/notices/USN-6039-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.couchbase.com/alerts/',
-                'https://www.cve.org/CVERecord?id=CVE-2023-0464',
-                'https://www.debian.org/security/2023/dsa-5417',
-                'https://www.openssl.org/news/secadv/20230322.txt'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: Denial of service by excessive resource usage in verifying X509 policy constraints'
-            },
-            {
-              'cve':  'CVE-2022-2097',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N'
-                },
-                'nvd': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N'
-                },
-                'redhat': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-327'
-              ],
-              'description':   "AES OCB mode for 32-bit x86 platforms using the AES-NI assembly optimised implementation will not encrypt the entirety of the data under some circumstances. This could reveal sixteen bytes of data that was preexisting in the memory that wasn't written. In the special case of \"in place\" encryption, sixteen bytes of the plaintext would be revealed. Since OpenSSL does not support OCB based cipher suites for TLS and DTLS, they are both unaffected. Fixed in OpenSSL 3.0.5 (Affected 3.0.0-3.0.4). Fixed in OpenSSL 1.1.1q (Affected 1.1.1-1.1.1p).",
-              'diffID':        'sha256:e2eb06d8af8218cfec8210147357a68b7e13f7c485b991c288c2d01dc228bb68',
-              'fixedVersions': [
-                '1.1.1q-r0'
-              ],
-              'installedVersion': '1.1.1l-r0',
-              'packageName':      'libcrypto1.1',
-              'purl':             'pkg:apk/alpine/libcrypto1.1@1.1.1l-r0?arch=x86_64&distro=3.14.2',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2022:6224',
-                'https://access.redhat.com/security/cve/CVE-2022-2097',
-                'https://bugzilla.redhat.com/2081494',
-                'https://bugzilla.redhat.com/2087911',
-                'https://bugzilla.redhat.com/2087913',
-                'https://bugzilla.redhat.com/2097310',
-                'https://bugzilla.redhat.com/2104905',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2081494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2097310',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2100554',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2104905',
-                'https://cert-portal.siemens.com/productcert/pdf/ssa-332410.pdf',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-1292',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-2068',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-2097',
-                'https://errata.almalinux.org/9/ALSA-2022-6224.html',
-                'https://errata.rockylinux.org/RLSA-2022:5818',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=919925673d6c9cfed3c1085497f5dfbbed5fc431',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=a98f339ddd7e8f487d6e0088d4a9a42324885a93',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=919925673d6c9cfed3c1085497f5dfbbed5fc431',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=a98f339ddd7e8f487d6e0088d4a9a42324885a93',
-                'https://github.com/alexcrichton/openssl-src-rs',
-                'https://linux.oracle.com/cve/CVE-2022-2097.html',
-                'https://linux.oracle.com/errata/ELSA-2022-9955.html',
-                'https://lists.debian.org/debian-lts-announce/2023/02/msg00019.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/R6CK57NBQFTPUMXAPJURCGXUYT76NQAK',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/R6CK57NBQFTPUMXAPJURCGXUYT76NQAK/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/V6567JERRHHJW2GNGJGKDRNHR7SNPZK7',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/V6567JERRHHJW2GNGJGKDRNHR7SNPZK7/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VCMNWKERPBKOEBNL7CLTTX3ZZCZLH7XA',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VCMNWKERPBKOEBNL7CLTTX3ZZCZLH7XA/',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/R6CK57NBQFTPUMXAPJURCGXUYT76NQAK',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/R6CK57NBQFTPUMXAPJURCGXUYT76NQAK/',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/V6567JERRHHJW2GNGJGKDRNHR7SNPZK7',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/V6567JERRHHJW2GNGJGKDRNHR7SNPZK7/',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/VCMNWKERPBKOEBNL7CLTTX3ZZCZLH7XA',
-                'https://nvd.nist.gov/vuln/detail/CVE-2022-2097',
-                'https://rustsec.org/advisories/RUSTSEC-2022-0032.html',
-                'https://security.gentoo.org/glsa/202210-02',
-                'https://security.netapp.com/advisory/ntap-20220715-0011',
-                'https://security.netapp.com/advisory/ntap-20220715-0011/',
-                'https://security.netapp.com/advisory/ntap-20230420-0008',
-                'https://security.netapp.com/advisory/ntap-20230420-0008/',
-                'https://security.netapp.com/advisory/ntap-20240621-0006',
-                'https://security.netapp.com/advisory/ntap-20240621-0006/',
-                'https://ubuntu.com/security/notices/USN-5502-1',
-                'https://ubuntu.com/security/notices/USN-6457-1',
-                'https://www.cve.org/CVERecord?id=CVE-2022-2097',
-                'https://www.debian.org/security/2023/dsa-5343',
-                'https://www.openssl.org/news/secadv/20220705.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: AES OCB fails to encrypt some bytes'
-            },
-            {
-              'cve':  'CVE-2022-4304',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N'
-                },
-                'nvd': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N'
-                },
-                'redhat': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-203'
-              ],
-              'description':   'A timing based side channel exists in the OpenSSL RSA Decryption implementation\nwhich could be sufficient to recover a plaintext across a network in a\nBleichenbacher style attack. To achieve a successful decryption an attacker\nwould have to be able to send a very large number of trial messages for\ndecryption. The vulnerability affects all RSA padding modes: PKCS#1 v1.5,\nRSA-OEAP and RSASVE.\n\nFor example, in a TLS connection, RSA is commonly used by a client to send an\nencrypted pre-master secret to the server. An attacker that had observed a\ngenuine connection between a client and a server could use this flaw to send\ntrial messages to the server and record the time taken to process them. After a\nsufficiently large number of messages the attacker could recover the pre-master\nsecret used for the original connection and thus be able to decrypt the\napplication data sent over that connection.',
-              'diffID':        'sha256:e2eb06d8af8218cfec8210147357a68b7e13f7c485b991c288c2d01dc228bb68',
-              'fixedVersions': [
-                '1.1.1t-r0'
-              ],
-              'installedVersion': '1.1.1l-r0',
-              'packageName':      'libcrypto1.1',
-              'purl':             'pkg:apk/alpine/libcrypto1.1@1.1.1l-r0?arch=x86_64&distro=3.14.2',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2023:2165',
-                'https://access.redhat.com/security/cve/CVE-2022-4304',
-                'https://bugzilla.redhat.com/1960321',
-                'https://bugzilla.redhat.com/2164440',
-                'https://bugzilla.redhat.com/2164487',
-                'https://bugzilla.redhat.com/2164492',
-                'https://bugzilla.redhat.com/2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144000',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144003',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144006',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144008',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144010',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144012',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144015',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144017',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144019',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2145170',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2158412',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164440',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164487',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164488',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164492',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164497',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164499',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164500',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4203',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4304',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4450',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0215',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0216',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0217',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0286',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0401',
-                'https://errata.almalinux.org/9/ALSA-2023-2165.html',
-                'https://errata.rockylinux.org/RLSA-2023:0946',
-                'https://linux.oracle.com/cve/CVE-2022-4304.html',
-                'https://linux.oracle.com/errata/ELSA-2023-32791.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2022-4304',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0003',
-                'https://rustsec.org/advisories/RUSTSEC-2023-0007.html',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://ubuntu.com/security/notices/USN-5844-1',
-                'https://ubuntu.com/security/notices/USN-6564-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2022-4304',
-                'https://www.openssl.org/news/secadv/20230207.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: timing attack in RSA Decryption implementation'
-            },
-            {
-              'cve':  'CVE-2023-0465',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N'
-                },
-                'redhat': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-295'
-              ],
-              'description':   "Applications that use a non-default option when verifying certificates may be\nvulnerable to an attack from a malicious CA to circumvent certain checks.\n\nInvalid certificate policies in leaf certificates are silently ignored by\nOpenSSL and other certificate policy checks are skipped for that certificate.\nA malicious CA could use this to deliberately assert invalid certificate policies\nin order to circumvent policy checking on the certificate altogether.\n\nPolicy processing is disabled by default but can be enabled by passing\nthe `-policy' argument to the command line utilities or by calling the\n`X509_VERIFY_PARAM_set1_policies()' function.",
-              'diffID':        'sha256:e2eb06d8af8218cfec8210147357a68b7e13f7c485b991c288c2d01dc228bb68',
-              'fixedVersions': [
-                '1.1.1t-r2'
-              ],
-              'installedVersion': '1.1.1l-r0',
-              'packageName':      'libcrypto1.1',
-              'purl':             'pkg:apk/alpine/libcrypto1.1@1.1.1l-r0?arch=x86_64&distro=3.14.2',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2023:3722',
-                'https://access.redhat.com/security/cve/CVE-2023-0465',
-                'https://bugzilla.redhat.com/2181082',
-                'https://bugzilla.redhat.com/2182561',
-                'https://bugzilla.redhat.com/2182565',
-                'https://bugzilla.redhat.com/2188461',
-                'https://bugzilla.redhat.com/2207947',
-                'https://errata.almalinux.org/9/ALSA-2023-3722.html',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=10325176f3d3e98c6e2b3bf5ab1e3b334de6947a',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=1dd43e0709fece299b15208f36cc7c76209ba0bb',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=b013765abfa80036dc779dd0e50602c57bb3bf95',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=facfb1ab745646e97a1920977ae4a9965ea61d5c',
-                'https://linux.oracle.com/cve/CVE-2023-0465.html',
-                'https://linux.oracle.com/errata/ELSA-2023-3722.html',
-                'https://lists.debian.org/debian-lts-announce/2023/06/msg00011.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-0465',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://security.netapp.com/advisory/ntap-20230414-0001/',
-                'https://ubuntu.com/security/notices/USN-6039-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-0465',
-                'https://www.debian.org/security/2023/dsa-5417',
-                'https://www.openssl.org/news/secadv/20230328.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: Invalid certificate policies in leaf certificates are silently ignored'
-            },
-            {
-              'cve':  'CVE-2022-0778',
-              'cvss': {
-                'bitnami': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'ghsa': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'nvd': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-835'
-              ],
-              'description':   'The BN_mod_sqrt() function, which computes a modular square root, contains a bug that can cause it to loop forever for non-prime moduli. Internally this function is used when parsing certificates that contain elliptic curve public keys in compressed form or explicit elliptic curve parameters with a base point encoded in compressed form. It is possible to trigger the infinite loop by crafting a certificate that has invalid explicit curve parameters. Since certificate parsing happens prior to verification of the certificate signature, any process that parses an externally supplied certificate may thus be subject to a denial of service attack. The infinite loop can also be reached when parsing crafted private keys as they can contain explicit elliptic curve parameters. Thus vulnerable situations include: - TLS clients consuming server certificates - TLS servers consuming client certificates - Hosting providers taking certificates or private keys from customers - Certificate authorities parsing certification requests from subscribers - Anything else which parses ASN.1 elliptic curve parameters Also any other applications that use the BN_mod_sqrt() where the attacker can control the parameter values are vulnerable to this DoS issue. In the OpenSSL 1.0.2 version the public key is not parsed during initial parsing of the certificate which makes it slightly harder to trigger the infinite loop. However any operation which requires the public key from the certificate will trigger the infinite loop. In particular the attacker can use a self-signed certificate to trigger the loop during verification of the certificate signature. This issue affects OpenSSL versions 1.0.2, 1.1.1 and 3.0. It was addressed in the releases of 1.1.1n and 3.0.2 on the 15th March 2022. Fixed in OpenSSL 3.0.2 (Affected 3.0.0,3.0.1). Fixed in OpenSSL 1.1.1n (Affected 1.1.1-1.1.1m). Fixed in OpenSSL 1.0.2zd (Affected 1.0.2-1.0.2zc).',
-              'diffID':        'sha256:e2eb06d8af8218cfec8210147357a68b7e13f7c485b991c288c2d01dc228bb68',
-              'fixedVersions': [
-                '3.3.3p1-r3'
-              ],
-              'installedVersion': '3.3.3p1-r2',
-              'packageName':      'libretls',
-              'purl':             'pkg:apk/alpine/libretls@3.3.3p1-r2?arch=x86_64&distro=3.14.2',
-              'references':       [
-                'http://packetstormsecurity.com/files/167344/OpenSSL-1.0.2-1.1.1-3.0-BN_mod_sqrt-Infinite-Loop.html',
-                'http://seclists.org/fulldisclosure/2022/May/33',
-                'http://seclists.org/fulldisclosure/2022/May/35',
-                'http://seclists.org/fulldisclosure/2022/May/38',
-                'https://access.redhat.com/errata/RHSA-2022:5326',
-                'https://access.redhat.com/security/cve/CVE-2022-0778',
-                'https://bugzilla.redhat.com/2062202',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2062202',
-                'https://cert-portal.siemens.com/productcert/pdf/ssa-712929.pdf',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-0778',
-                'https://errata.almalinux.org/8/ALSA-2022-5326.html',
-                'https://errata.rockylinux.org/RLSA-2022:4899',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=3118eb64934499d93db3230748a452351d1d9a65',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=380085481c64de749a6dd25cdf0bcf4360b30f83',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=a466912611aa6cbdf550cd10601390e587451246',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=3118eb64934499d93db3230748a452351d1d9a65',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=380085481c64de749a6dd25cdf0bcf4360b30f83',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=a466912611aa6cbdf550cd10601390e587451246',
-                'https://linux.oracle.com/cve/CVE-2022-0778.html',
-                'https://linux.oracle.com/errata/ELSA-2022-9272.html',
-                'https://lists.debian.org/debian-lts-announce/2022/03/msg00023.html',
-                'https://lists.debian.org/debian-lts-announce/2022/03/msg00024.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/323SNN6ZX7PRJJWP2BUAFLPUAE42XWLZ',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/323SNN6ZX7PRJJWP2BUAFLPUAE42XWLZ/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GDB3GQVJPXJE7X5C5JN6JAA4XUDWD6E6',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GDB3GQVJPXJE7X5C5JN6JAA4XUDWD6E6/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/W6K3PR542DXWLEFFMFIDMME4CWMHJRMG',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/W6K3PR542DXWLEFFMFIDMME4CWMHJRMG/',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/323SNN6ZX7PRJJWP2BUAFLPUAE42XWLZ',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/GDB3GQVJPXJE7X5C5JN6JAA4XUDWD6E6',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/W6K3PR542DXWLEFFMFIDMME4CWMHJRMG',
-                'https://nvd.nist.gov/vuln/detail/CVE-2022-0778',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2022-0002',
-                'https://rustsec.org/advisories/RUSTSEC-2022-0014.html',
-                'https://security.gentoo.org/glsa/202210-02',
-                'https://security.netapp.com/advisory/ntap-20220321-0002',
-                'https://security.netapp.com/advisory/ntap-20220321-0002/',
-                'https://security.netapp.com/advisory/ntap-20220429-0005',
-                'https://security.netapp.com/advisory/ntap-20220429-0005/',
-                'https://security.netapp.com/advisory/ntap-20240621-0006',
-                'https://security.netapp.com/advisory/ntap-20240621-0006/',
-                'https://support.apple.com/kb/HT213255',
-                'https://support.apple.com/kb/HT213256',
-                'https://support.apple.com/kb/HT213257',
-                'https://ubuntu.com/security/notices/USN-5328-1',
-                'https://ubuntu.com/security/notices/USN-5328-2',
-                'https://ubuntu.com/security/notices/USN-6457-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2022-0778',
-                'https://www.debian.org/security/2022/dsa-5103',
-                'https://www.openssl.org/news/secadv/20220315.txt',
-                'https://www.oracle.com/security-alerts/cpuapr2022.html',
-                'https://www.oracle.com/security-alerts/cpujul2022.html',
-                'https://www.tenable.com/security/tns-2022-06',
-                'https://www.tenable.com/security/tns-2022-07',
-                'https://www.tenable.com/security/tns-2022-08',
-                'https://www.tenable.com/security/tns-2022-09'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: Infinite loop in BN_mod_sqrt() reachable when parsing certificates'
-            },
-            {
-              'cve':  'CVE-2022-0778',
-              'cvss': {
-                'bitnami': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'ghsa': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'nvd': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-835'
-              ],
-              'description':   'The BN_mod_sqrt() function, which computes a modular square root, contains a bug that can cause it to loop forever for non-prime moduli. Internally this function is used when parsing certificates that contain elliptic curve public keys in compressed form or explicit elliptic curve parameters with a base point encoded in compressed form. It is possible to trigger the infinite loop by crafting a certificate that has invalid explicit curve parameters. Since certificate parsing happens prior to verification of the certificate signature, any process that parses an externally supplied certificate may thus be subject to a denial of service attack. The infinite loop can also be reached when parsing crafted private keys as they can contain explicit elliptic curve parameters. Thus vulnerable situations include: - TLS clients consuming server certificates - TLS servers consuming client certificates - Hosting providers taking certificates or private keys from customers - Certificate authorities parsing certification requests from subscribers - Anything else which parses ASN.1 elliptic curve parameters Also any other applications that use the BN_mod_sqrt() where the attacker can control the parameter values are vulnerable to this DoS issue. In the OpenSSL 1.0.2 version the public key is not parsed during initial parsing of the certificate which makes it slightly harder to trigger the infinite loop. However any operation which requires the public key from the certificate will trigger the infinite loop. In particular the attacker can use a self-signed certificate to trigger the loop during verification of the certificate signature. This issue affects OpenSSL versions 1.0.2, 1.1.1 and 3.0. It was addressed in the releases of 1.1.1n and 3.0.2 on the 15th March 2022. Fixed in OpenSSL 3.0.2 (Affected 3.0.0,3.0.1). Fixed in OpenSSL 1.1.1n (Affected 1.1.1-1.1.1m). Fixed in OpenSSL 1.0.2zd (Affected 1.0.2-1.0.2zc).',
-              'diffID':        'sha256:e2eb06d8af8218cfec8210147357a68b7e13f7c485b991c288c2d01dc228bb68',
-              'fixedVersions': [
-                '1.1.1n-r0'
-              ],
-              'installedVersion': '1.1.1l-r0',
-              'packageName':      'libssl1.1',
-              'purl':             'pkg:apk/alpine/libssl1.1@1.1.1l-r0?arch=x86_64&distro=3.14.2',
-              'references':       [
-                'http://packetstormsecurity.com/files/167344/OpenSSL-1.0.2-1.1.1-3.0-BN_mod_sqrt-Infinite-Loop.html',
-                'http://seclists.org/fulldisclosure/2022/May/33',
-                'http://seclists.org/fulldisclosure/2022/May/35',
-                'http://seclists.org/fulldisclosure/2022/May/38',
-                'https://access.redhat.com/errata/RHSA-2022:5326',
-                'https://access.redhat.com/security/cve/CVE-2022-0778',
-                'https://bugzilla.redhat.com/2062202',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2062202',
-                'https://cert-portal.siemens.com/productcert/pdf/ssa-712929.pdf',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-0778',
-                'https://errata.almalinux.org/8/ALSA-2022-5326.html',
-                'https://errata.rockylinux.org/RLSA-2022:4899',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=3118eb64934499d93db3230748a452351d1d9a65',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=380085481c64de749a6dd25cdf0bcf4360b30f83',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=a466912611aa6cbdf550cd10601390e587451246',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=3118eb64934499d93db3230748a452351d1d9a65',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=380085481c64de749a6dd25cdf0bcf4360b30f83',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=a466912611aa6cbdf550cd10601390e587451246',
-                'https://linux.oracle.com/cve/CVE-2022-0778.html',
-                'https://linux.oracle.com/errata/ELSA-2022-9272.html',
-                'https://lists.debian.org/debian-lts-announce/2022/03/msg00023.html',
-                'https://lists.debian.org/debian-lts-announce/2022/03/msg00024.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/323SNN6ZX7PRJJWP2BUAFLPUAE42XWLZ',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/323SNN6ZX7PRJJWP2BUAFLPUAE42XWLZ/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GDB3GQVJPXJE7X5C5JN6JAA4XUDWD6E6',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GDB3GQVJPXJE7X5C5JN6JAA4XUDWD6E6/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/W6K3PR542DXWLEFFMFIDMME4CWMHJRMG',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/W6K3PR542DXWLEFFMFIDMME4CWMHJRMG/',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/323SNN6ZX7PRJJWP2BUAFLPUAE42XWLZ',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/GDB3GQVJPXJE7X5C5JN6JAA4XUDWD6E6',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/W6K3PR542DXWLEFFMFIDMME4CWMHJRMG',
-                'https://nvd.nist.gov/vuln/detail/CVE-2022-0778',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2022-0002',
-                'https://rustsec.org/advisories/RUSTSEC-2022-0014.html',
-                'https://security.gentoo.org/glsa/202210-02',
-                'https://security.netapp.com/advisory/ntap-20220321-0002',
-                'https://security.netapp.com/advisory/ntap-20220321-0002/',
-                'https://security.netapp.com/advisory/ntap-20220429-0005',
-                'https://security.netapp.com/advisory/ntap-20220429-0005/',
-                'https://security.netapp.com/advisory/ntap-20240621-0006',
-                'https://security.netapp.com/advisory/ntap-20240621-0006/',
-                'https://support.apple.com/kb/HT213255',
-                'https://support.apple.com/kb/HT213256',
-                'https://support.apple.com/kb/HT213257',
-                'https://ubuntu.com/security/notices/USN-5328-1',
-                'https://ubuntu.com/security/notices/USN-5328-2',
-                'https://ubuntu.com/security/notices/USN-6457-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2022-0778',
-                'https://www.debian.org/security/2022/dsa-5103',
-                'https://www.openssl.org/news/secadv/20220315.txt',
-                'https://www.oracle.com/security-alerts/cpuapr2022.html',
-                'https://www.oracle.com/security-alerts/cpujul2022.html',
-                'https://www.tenable.com/security/tns-2022-06',
-                'https://www.tenable.com/security/tns-2022-07',
-                'https://www.tenable.com/security/tns-2022-08',
-                'https://www.tenable.com/security/tns-2022-09'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: Infinite loop in BN_mod_sqrt() reachable when parsing certificates'
-            },
-            {
-              'cve':  'CVE-2022-4450',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'nvd': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-415'
-              ],
-              'description':   'The function PEM_read_bio_ex() reads a PEM file from a BIO and parses and\ndecodes the "name" (e.g. "CERTIFICATE"), any header data and the payload data.\nIf the function succeeds then the "name_out", "header" and "data" arguments are\npopulated with pointers to buffers containing the relevant decoded data. The\ncaller is responsible for freeing those buffers. It is possible to construct a\nPEM file that results in 0 bytes of payload data. In this case PEM_read_bio_ex()\nwill return a failure code but will populate the header argument with a pointer\nto a buffer that has already been freed. If the caller also frees this buffer\nthen a double free will occur. This will most likely lead to a crash. This\ncould be exploited by an attacker who has the ability to supply malicious PEM\nfiles for parsing to achieve a denial of service attack.\n\nThe functions PEM_read_bio() and PEM_read() are simple wrappers around\nPEM_read_bio_ex() and therefore these functions are also directly affected.\n\nThese functions are also called indirectly by a number of other OpenSSL\nfunctions including PEM_X509_INFO_read_bio_ex() and\nSSL_CTX_use_serverinfo_file() which are also vulnerable. Some OpenSSL internal\nuses of these functions are not vulnerable because the caller does not free the\nheader argument if PEM_read_bio_ex() returns a failure code. These locations\ninclude the PEM_read_bio_TYPE() functions as well as the decoders introduced in\nOpenSSL 3.0.\n\nThe OpenSSL asn1parse command line application is also impacted by this issue.',
-              'diffID':        'sha256:e2eb06d8af8218cfec8210147357a68b7e13f7c485b991c288c2d01dc228bb68',
-              'fixedVersions': [
-                '1.1.1t-r0'
-              ],
-              'installedVersion': '1.1.1l-r0',
-              'packageName':      'libssl1.1',
-              'purl':             'pkg:apk/alpine/libssl1.1@1.1.1l-r0?arch=x86_64&distro=3.14.2',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2023:2165',
-                'https://access.redhat.com/security/cve/CVE-2022-4450',
-                'https://bugzilla.redhat.com/1960321',
-                'https://bugzilla.redhat.com/2164440',
-                'https://bugzilla.redhat.com/2164487',
-                'https://bugzilla.redhat.com/2164492',
-                'https://bugzilla.redhat.com/2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144000',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144003',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144006',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144008',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144010',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144012',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144015',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144017',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144019',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2145170',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2158412',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164440',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164487',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164488',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164492',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164497',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164499',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164500',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4203',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4304',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4450',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0215',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0216',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0217',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0286',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0401',
-                'https://errata.almalinux.org/9/ALSA-2023-2165.html',
-                'https://errata.rockylinux.org/RLSA-2023:0946',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=63bcf189be73a9cc1264059bed6f57974be74a83',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=bbcf509bd046b34cca19c766bbddc31683d0858b',
-                'https://linux.oracle.com/cve/CVE-2022-4450.html',
-                'https://linux.oracle.com/errata/ELSA-2023-32791.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2022-4450',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0003',
-                'https://rustsec.org/advisories/RUSTSEC-2023-0010.html',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://ubuntu.com/security/notices/USN-5844-1',
-                'https://ubuntu.com/security/notices/USN-6564-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2022-4450',
-                'https://www.openssl.org/news/secadv/20230207.txt'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: double free after calling PEM_read_bio_ex'
-            },
-            {
-              'cve':  'CVE-2023-0215',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'nvd': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   'The public API function BIO_new_NDEF is a helper function used for streaming\nASN.1 data via a BIO. It is primarily used internally to OpenSSL to support the\nSMIME, CMS and PKCS7 streaming capabilities, but may also be called directly by\nend user applications.\n\nThe function receives a BIO from the caller, prepends a new BIO_f_asn1 filter\nBIO onto the front of it to form a BIO chain, and then returns the new head of\nthe BIO chain to the caller. Under certain conditions, for example if a CMS\nrecipient public key is invalid, the new filter BIO is freed and the function\nreturns a NULL result indicating a failure. However, in this case, the BIO chain\nis not properly cleaned up and the BIO passed by the caller still retains\ninternal pointers to the previously freed filter BIO. If the caller then goes on\nto call BIO_pop() on the BIO then a use-after-free will occur. This will most\nlikely result in a crash.\n\n\n\nThis scenario occurs directly in the internal function B64_write_ASN1() which\nmay cause BIO_new_NDEF() to be called and will subsequently call BIO_pop() on\nthe BIO. This internal function is in turn called by the public API functions\nPEM_write_bio_ASN1_stream, PEM_write_bio_CMS_stream, PEM_write_bio_PKCS7_stream,\nSMIME_write_ASN1, SMIME_write_CMS and SMIME_write_PKCS7.\n\nOther public API functions that may be impacted by this include\ni2d_ASN1_bio_stream, BIO_new_CMS, BIO_new_PKCS7, i2d_CMS_bio_stream and\ni2d_PKCS7_bio_stream.\n\nThe OpenSSL cms and smime command line applications are similarly affected.',
-              'diffID':        'sha256:e2eb06d8af8218cfec8210147357a68b7e13f7c485b991c288c2d01dc228bb68',
-              'fixedVersions': [
-                '1.1.1t-r0'
-              ],
-              'installedVersion': '1.1.1l-r0',
-              'packageName':      'libssl1.1',
-              'purl':             'pkg:apk/alpine/libssl1.1@1.1.1l-r0?arch=x86_64&distro=3.14.2',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2023:2165',
-                'https://access.redhat.com/security/cve/CVE-2023-0215',
-                'https://bugzilla.redhat.com/1960321',
-                'https://bugzilla.redhat.com/2164440',
-                'https://bugzilla.redhat.com/2164487',
-                'https://bugzilla.redhat.com/2164492',
-                'https://bugzilla.redhat.com/2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144000',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144003',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144006',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144008',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144010',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144012',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144015',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144017',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144019',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2145170',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2158412',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164440',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164487',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164488',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164492',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164497',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164499',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164500',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4203',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4304',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4450',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0215',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0216',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0217',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0286',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0401',
-                'https://errata.almalinux.org/9/ALSA-2023-2165.html',
-                'https://errata.rockylinux.org/RLSA-2023:0946',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=8818064ce3c3c0f1b740a5aaba2a987e75bfbafd',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=9816136fe31d92ace4037d5da5257f763aeeb4eb',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=c3829dd8825c654652201e16f8a0a0c46ee3f344',
-                'https://linux.oracle.com/cve/CVE-2023-0215.html',
-                'https://linux.oracle.com/errata/ELSA-2023-32791.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-0215',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0003',
-                'https://rustsec.org/advisories/RUSTSEC-2023-0009.html',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://security.netapp.com/advisory/ntap-20230427-0007',
-                'https://security.netapp.com/advisory/ntap-20230427-0007/',
-                'https://security.netapp.com/advisory/ntap-20230427-0009',
-                'https://security.netapp.com/advisory/ntap-20230427-0009/',
-                'https://security.netapp.com/advisory/ntap-20240621-0006',
-                'https://security.netapp.com/advisory/ntap-20240621-0006/',
-                'https://ubuntu.com/security/notices/USN-5844-1',
-                'https://ubuntu.com/security/notices/USN-5845-1',
-                'https://ubuntu.com/security/notices/USN-5845-2',
-                'https://ubuntu.com/security/notices/USN-6564-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-0215',
-                'https://www.openssl.org/news/secadv/20230207.txt'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: use-after-free following BIO_new_NDEF'
-            },
-            {
-              'cve':  'CVE-2023-0286',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '7.4',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H'
-                },
-                'nvd': {
-                  'v3score':  '7.4',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.4',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-843'
-              ],
-              'description':   'There is a type confusion vulnerability relating to X.400 address processing\ninside an X.509 GeneralName. X.400 addresses were parsed as an ASN1_STRING but\nthe public structure definition for GENERAL_NAME incorrectly specified the type\nof the x400Address field as ASN1_TYPE. This field is subsequently interpreted by\nthe OpenSSL function GENERAL_NAME_cmp as an ASN1_TYPE rather than an\nASN1_STRING.\n\nWhen CRL checking is enabled (i.e. the application sets the\nX509_V_FLAG_CRL_CHECK flag), this vulnerability may allow an attacker to pass\narbitrary pointers to a memcmp call, enabling them to read memory contents or\nenact a denial of service. In most cases, the attack requires the attacker to\nprovide both the certificate chain and CRL, neither of which need to have a\nvalid signature. If the attacker only controls one of these inputs, the other\ninput must already contain an X.400 address as a CRL distribution point, which\nis uncommon. As such, this vulnerability is most likely to only affect\napplications which have implemented their own functionality for retrieving CRLs\nover a network.',
-              'diffID':        'sha256:e2eb06d8af8218cfec8210147357a68b7e13f7c485b991c288c2d01dc228bb68',
-              'fixedVersions': [
-                '1.1.1t-r0'
-              ],
-              'installedVersion': '1.1.1l-r0',
-              'packageName':      'libssl1.1',
-              'purl':             'pkg:apk/alpine/libssl1.1@1.1.1l-r0?arch=x86_64&distro=3.14.2',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2025:7937',
-                'https://access.redhat.com/security/cve/CVE-2023-0286',
-                'https://access.redhat.com/security/cve/cve-2023-0286',
-                'https://bugzilla.redhat.com/2164440',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144000',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144003',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144006',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144008',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144010',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144012',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144015',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144017',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144019',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2145170',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2158412',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164440',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164487',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164488',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164492',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164497',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164499',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164500',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4203',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4304',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4450',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0215',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0216',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0217',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0286',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0401',
-                'https://errata.almalinux.org/9/ALSA-2025-7937.html',
-                'https://errata.rockylinux.org/RLSA-2023:0946',
-                'https://ftp.openbsd.org/pub/OpenBSD/LibreSSL/libressl-3.6.2-relnotes.txt',
-                'https://ftp.openbsd.org/pub/OpenBSD/patches/7.2/common/018_x509.patch.sig',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=2c6c9d439b484e1ba9830d8454a34fa4f80fdfe9',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=2f7530077e0ef79d98718138716bc51ca0cad658',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=fd2af07dc083a350c959147097003a14a5e8ac4d',
-                'https://github.com/pyca/cryptography',
-                'https://github.com/pyca/cryptography/security/advisories/GHSA-x4qr-2fvf-3mr5',
-                'https://linux.oracle.com/cve/CVE-2023-0286.html',
-                'https://linux.oracle.com/errata/ELSA-2025-7937.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-0286',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0003',
-                'https://rustsec.org/advisories/RUSTSEC-2023-0006.html',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://ubuntu.com/security/notices/USN-5844-1',
-                'https://ubuntu.com/security/notices/USN-5845-1',
-                'https://ubuntu.com/security/notices/USN-5845-2',
-                'https://ubuntu.com/security/notices/USN-6564-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-0286',
-                'https://www.openssl.org/news/secadv/20230207.txt'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: X.400 address type confusion in X.509 GeneralName'
-            },
-            {
-              'cve':  'CVE-2023-0464',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-295'
-              ],
-              'description':   "A security vulnerability has been identified in all supported versions\n\nof OpenSSL related to the verification of X.509 certificate chains\nthat include policy constraints.  Attackers may be able to exploit this\nvulnerability by creating a malicious certificate chain that triggers\nexponential use of computational resources, leading to a denial-of-service\n(DoS) attack on affected systems.\n\nPolicy processing is disabled by default but can be enabled by passing\nthe `-policy' argument to the command line utilities or by calling the\n`X509_VERIFY_PARAM_set1_policies()' function.",
-              'diffID':        'sha256:e2eb06d8af8218cfec8210147357a68b7e13f7c485b991c288c2d01dc228bb68',
-              'fixedVersions': [
-                '1.1.1t-r1'
-              ],
-              'installedVersion': '1.1.1l-r0',
-              'packageName':      'libssl1.1',
-              'purl':             'pkg:apk/alpine/libssl1.1@1.1.1l-r0?arch=x86_64&distro=3.14.2',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2023:3722',
-                'https://access.redhat.com/security/cve/CVE-2023-0464',
-                'https://bugzilla.redhat.com/2181082',
-                'https://bugzilla.redhat.com/2182561',
-                'https://bugzilla.redhat.com/2182565',
-                'https://bugzilla.redhat.com/2188461',
-                'https://bugzilla.redhat.com/2207947',
-                'https://errata.almalinux.org/9/ALSA-2023-3722.html',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=2017771e2db3e2b96f89bbe8766c3209f6a99545',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=2dcd4f1e3115f38cefa43e3efbe9b801c27e642e',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=879f7080d7e141f415c79eaa3a8ac4a3dad0348b',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=959c59c7a0164117e7f8366466a32bb1f8d77ff1',
-                'https://linux.oracle.com/cve/CVE-2023-0464.html',
-                'https://linux.oracle.com/errata/ELSA-2023-3722.html',
-                'https://lists.debian.org/debian-lts-announce/2023/06/msg00011.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-0464',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://security.netapp.com/advisory/ntap-20230406-0006/',
-                'https://security.netapp.com/advisory/ntap-20240621-0006/',
-                'https://ubuntu.com/security/notices/USN-6039-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.couchbase.com/alerts/',
-                'https://www.cve.org/CVERecord?id=CVE-2023-0464',
-                'https://www.debian.org/security/2023/dsa-5417',
-                'https://www.openssl.org/news/secadv/20230322.txt'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: Denial of service by excessive resource usage in verifying X509 policy constraints'
-            },
-            {
-              'cve':  'CVE-2022-2097',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N'
-                },
-                'nvd': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N'
-                },
-                'redhat': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-327'
-              ],
-              'description':   "AES OCB mode for 32-bit x86 platforms using the AES-NI assembly optimised implementation will not encrypt the entirety of the data under some circumstances. This could reveal sixteen bytes of data that was preexisting in the memory that wasn't written. In the special case of \"in place\" encryption, sixteen bytes of the plaintext would be revealed. Since OpenSSL does not support OCB based cipher suites for TLS and DTLS, they are both unaffected. Fixed in OpenSSL 3.0.5 (Affected 3.0.0-3.0.4). Fixed in OpenSSL 1.1.1q (Affected 1.1.1-1.1.1p).",
-              'diffID':        'sha256:e2eb06d8af8218cfec8210147357a68b7e13f7c485b991c288c2d01dc228bb68',
-              'fixedVersions': [
-                '1.1.1q-r0'
-              ],
-              'installedVersion': '1.1.1l-r0',
-              'packageName':      'libssl1.1',
-              'purl':             'pkg:apk/alpine/libssl1.1@1.1.1l-r0?arch=x86_64&distro=3.14.2',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2022:6224',
-                'https://access.redhat.com/security/cve/CVE-2022-2097',
-                'https://bugzilla.redhat.com/2081494',
-                'https://bugzilla.redhat.com/2087911',
-                'https://bugzilla.redhat.com/2087913',
-                'https://bugzilla.redhat.com/2097310',
-                'https://bugzilla.redhat.com/2104905',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2081494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2097310',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2100554',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2104905',
-                'https://cert-portal.siemens.com/productcert/pdf/ssa-332410.pdf',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-1292',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-2068',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-2097',
-                'https://errata.almalinux.org/9/ALSA-2022-6224.html',
-                'https://errata.rockylinux.org/RLSA-2022:5818',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=919925673d6c9cfed3c1085497f5dfbbed5fc431',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=a98f339ddd7e8f487d6e0088d4a9a42324885a93',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=919925673d6c9cfed3c1085497f5dfbbed5fc431',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=a98f339ddd7e8f487d6e0088d4a9a42324885a93',
-                'https://github.com/alexcrichton/openssl-src-rs',
-                'https://linux.oracle.com/cve/CVE-2022-2097.html',
-                'https://linux.oracle.com/errata/ELSA-2022-9955.html',
-                'https://lists.debian.org/debian-lts-announce/2023/02/msg00019.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/R6CK57NBQFTPUMXAPJURCGXUYT76NQAK',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/R6CK57NBQFTPUMXAPJURCGXUYT76NQAK/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/V6567JERRHHJW2GNGJGKDRNHR7SNPZK7',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/V6567JERRHHJW2GNGJGKDRNHR7SNPZK7/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VCMNWKERPBKOEBNL7CLTTX3ZZCZLH7XA',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VCMNWKERPBKOEBNL7CLTTX3ZZCZLH7XA/',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/R6CK57NBQFTPUMXAPJURCGXUYT76NQAK',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/R6CK57NBQFTPUMXAPJURCGXUYT76NQAK/',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/V6567JERRHHJW2GNGJGKDRNHR7SNPZK7',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/V6567JERRHHJW2GNGJGKDRNHR7SNPZK7/',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/VCMNWKERPBKOEBNL7CLTTX3ZZCZLH7XA',
-                'https://nvd.nist.gov/vuln/detail/CVE-2022-2097',
-                'https://rustsec.org/advisories/RUSTSEC-2022-0032.html',
-                'https://security.gentoo.org/glsa/202210-02',
-                'https://security.netapp.com/advisory/ntap-20220715-0011',
-                'https://security.netapp.com/advisory/ntap-20220715-0011/',
-                'https://security.netapp.com/advisory/ntap-20230420-0008',
-                'https://security.netapp.com/advisory/ntap-20230420-0008/',
-                'https://security.netapp.com/advisory/ntap-20240621-0006',
-                'https://security.netapp.com/advisory/ntap-20240621-0006/',
-                'https://ubuntu.com/security/notices/USN-5502-1',
-                'https://ubuntu.com/security/notices/USN-6457-1',
-                'https://www.cve.org/CVERecord?id=CVE-2022-2097',
-                'https://www.debian.org/security/2023/dsa-5343',
-                'https://www.openssl.org/news/secadv/20220705.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: AES OCB fails to encrypt some bytes'
-            },
-            {
-              'cve':  'CVE-2022-4304',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N'
-                },
-                'nvd': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N'
-                },
-                'redhat': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-203'
-              ],
-              'description':   'A timing based side channel exists in the OpenSSL RSA Decryption implementation\nwhich could be sufficient to recover a plaintext across a network in a\nBleichenbacher style attack. To achieve a successful decryption an attacker\nwould have to be able to send a very large number of trial messages for\ndecryption. The vulnerability affects all RSA padding modes: PKCS#1 v1.5,\nRSA-OEAP and RSASVE.\n\nFor example, in a TLS connection, RSA is commonly used by a client to send an\nencrypted pre-master secret to the server. An attacker that had observed a\ngenuine connection between a client and a server could use this flaw to send\ntrial messages to the server and record the time taken to process them. After a\nsufficiently large number of messages the attacker could recover the pre-master\nsecret used for the original connection and thus be able to decrypt the\napplication data sent over that connection.',
-              'diffID':        'sha256:e2eb06d8af8218cfec8210147357a68b7e13f7c485b991c288c2d01dc228bb68',
-              'fixedVersions': [
-                '1.1.1t-r0'
-              ],
-              'installedVersion': '1.1.1l-r0',
-              'packageName':      'libssl1.1',
-              'purl':             'pkg:apk/alpine/libssl1.1@1.1.1l-r0?arch=x86_64&distro=3.14.2',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2023:2165',
-                'https://access.redhat.com/security/cve/CVE-2022-4304',
-                'https://bugzilla.redhat.com/1960321',
-                'https://bugzilla.redhat.com/2164440',
-                'https://bugzilla.redhat.com/2164487',
-                'https://bugzilla.redhat.com/2164492',
-                'https://bugzilla.redhat.com/2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144000',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144003',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144006',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144008',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144010',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144012',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144015',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144017',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144019',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2145170',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2158412',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164440',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164487',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164488',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164492',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164497',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164499',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164500',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4203',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4304',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4450',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0215',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0216',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0217',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0286',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0401',
-                'https://errata.almalinux.org/9/ALSA-2023-2165.html',
-                'https://errata.rockylinux.org/RLSA-2023:0946',
-                'https://linux.oracle.com/cve/CVE-2022-4304.html',
-                'https://linux.oracle.com/errata/ELSA-2023-32791.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2022-4304',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0003',
-                'https://rustsec.org/advisories/RUSTSEC-2023-0007.html',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://ubuntu.com/security/notices/USN-5844-1',
-                'https://ubuntu.com/security/notices/USN-6564-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2022-4304',
-                'https://www.openssl.org/news/secadv/20230207.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: timing attack in RSA Decryption implementation'
-            },
-            {
-              'cve':  'CVE-2023-0465',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N'
-                },
-                'redhat': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-295'
-              ],
-              'description':   "Applications that use a non-default option when verifying certificates may be\nvulnerable to an attack from a malicious CA to circumvent certain checks.\n\nInvalid certificate policies in leaf certificates are silently ignored by\nOpenSSL and other certificate policy checks are skipped for that certificate.\nA malicious CA could use this to deliberately assert invalid certificate policies\nin order to circumvent policy checking on the certificate altogether.\n\nPolicy processing is disabled by default but can be enabled by passing\nthe `-policy' argument to the command line utilities or by calling the\n`X509_VERIFY_PARAM_set1_policies()' function.",
-              'diffID':        'sha256:e2eb06d8af8218cfec8210147357a68b7e13f7c485b991c288c2d01dc228bb68',
-              'fixedVersions': [
-                '1.1.1t-r2'
-              ],
-              'installedVersion': '1.1.1l-r0',
-              'packageName':      'libssl1.1',
-              'purl':             'pkg:apk/alpine/libssl1.1@1.1.1l-r0?arch=x86_64&distro=3.14.2',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2023:3722',
-                'https://access.redhat.com/security/cve/CVE-2023-0465',
-                'https://bugzilla.redhat.com/2181082',
-                'https://bugzilla.redhat.com/2182561',
-                'https://bugzilla.redhat.com/2182565',
-                'https://bugzilla.redhat.com/2188461',
-                'https://bugzilla.redhat.com/2207947',
-                'https://errata.almalinux.org/9/ALSA-2023-3722.html',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=10325176f3d3e98c6e2b3bf5ab1e3b334de6947a',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=1dd43e0709fece299b15208f36cc7c76209ba0bb',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=b013765abfa80036dc779dd0e50602c57bb3bf95',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=facfb1ab745646e97a1920977ae4a9965ea61d5c',
-                'https://linux.oracle.com/cve/CVE-2023-0465.html',
-                'https://linux.oracle.com/errata/ELSA-2023-3722.html',
-                'https://lists.debian.org/debian-lts-announce/2023/06/msg00011.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-0465',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://security.netapp.com/advisory/ntap-20230414-0001/',
-                'https://ubuntu.com/security/notices/USN-6039-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-0465',
-                'https://www.debian.org/security/2023/dsa-5417',
-                'https://www.openssl.org/news/secadv/20230328.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: Invalid certificate policies in leaf certificates are silently ignored'
-            },
-            {
-              'cve':  'CVE-2021-42378',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the getvar_i function",
-              'diffID':        'sha256:e2eb06d8af8218cfec8210147357a68b7e13f7c485b991c288c2d01dc228bb68',
-              'fixedVersions': [
-                '1.33.1-r6'
-              ],
-              'installedVersion': '1.33.1-r3',
-              'packageName':      'ssl_client',
-              'purl':             'pkg:apk/alpine/ssl_client@1.33.1-r3?arch=x86_64&distro=3.14.2',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42378',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42378',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42378'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the getvar_i()'
-            },
-            {
-              'cve':  'CVE-2021-42379',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the next_input_file function",
-              'diffID':        'sha256:e2eb06d8af8218cfec8210147357a68b7e13f7c485b991c288c2d01dc228bb68',
-              'fixedVersions': [
-                '1.33.1-r6'
-              ],
-              'installedVersion': '1.33.1-r3',
-              'packageName':      'ssl_client',
-              'purl':             'pkg:apk/alpine/ssl_client@1.33.1-r3?arch=x86_64&distro=3.14.2',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42379',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42379',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42379'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the next_input_file()'
-            },
-            {
-              'cve':  'CVE-2021-42380',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the clrvar function",
-              'diffID':        'sha256:e2eb06d8af8218cfec8210147357a68b7e13f7c485b991c288c2d01dc228bb68',
-              'fixedVersions': [
-                '1.33.1-r6'
-              ],
-              'installedVersion': '1.33.1-r3',
-              'packageName':      'ssl_client',
-              'purl':             'pkg:apk/alpine/ssl_client@1.33.1-r3?arch=x86_64&distro=3.14.2',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42380',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42380',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42380'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the clrvar()'
-            },
-            {
-              'cve':  'CVE-2021-42381',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the hash_init function",
-              'diffID':        'sha256:e2eb06d8af8218cfec8210147357a68b7e13f7c485b991c288c2d01dc228bb68',
-              'fixedVersions': [
-                '1.33.1-r6'
-              ],
-              'installedVersion': '1.33.1-r3',
-              'packageName':      'ssl_client',
-              'purl':             'pkg:apk/alpine/ssl_client@1.33.1-r3?arch=x86_64&distro=3.14.2',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42381',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42381',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42381'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the hash_init()'
-            },
-            {
-              'cve':  'CVE-2021-42382',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the getvar_s function",
-              'diffID':        'sha256:e2eb06d8af8218cfec8210147357a68b7e13f7c485b991c288c2d01dc228bb68',
-              'fixedVersions': [
-                '1.33.1-r6'
-              ],
-              'installedVersion': '1.33.1-r3',
-              'packageName':      'ssl_client',
-              'purl':             'pkg:apk/alpine/ssl_client@1.33.1-r3?arch=x86_64&distro=3.14.2',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42382',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42382',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42382'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the getvar_s()'
-            },
-            {
-              'cve':  'CVE-2021-42383',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the evaluate function",
-              'diffID':        'sha256:e2eb06d8af8218cfec8210147357a68b7e13f7c485b991c288c2d01dc228bb68',
-              'fixedVersions': [
-                '1.33.1-r6'
-              ],
-              'installedVersion': '1.33.1-r3',
-              'packageName':      'ssl_client',
-              'purl':             'pkg:apk/alpine/ssl_client@1.33.1-r3?arch=x86_64&distro=3.14.2',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42383',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42383',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42383'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the evaluate()'
-            },
-            {
-              'cve':  'CVE-2021-42384',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the handle_special function",
-              'diffID':        'sha256:e2eb06d8af8218cfec8210147357a68b7e13f7c485b991c288c2d01dc228bb68',
-              'fixedVersions': [
-                '1.33.1-r6'
-              ],
-              'installedVersion': '1.33.1-r3',
-              'packageName':      'ssl_client',
-              'purl':             'pkg:apk/alpine/ssl_client@1.33.1-r3?arch=x86_64&distro=3.14.2',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42384',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42384',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42384'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the handle_special()'
-            },
-            {
-              'cve':  'CVE-2021-42385',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the evaluate function",
-              'diffID':        'sha256:e2eb06d8af8218cfec8210147357a68b7e13f7c485b991c288c2d01dc228bb68',
-              'fixedVersions': [
-                '1.33.1-r6'
-              ],
-              'installedVersion': '1.33.1-r3',
-              'packageName':      'ssl_client',
-              'purl':             'pkg:apk/alpine/ssl_client@1.33.1-r3?arch=x86_64&distro=3.14.2',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42385',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42385',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42385'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the evaluate()'
-            },
-            {
-              'cve':  'CVE-2021-42386',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the nvalloc function",
-              'diffID':        'sha256:e2eb06d8af8218cfec8210147357a68b7e13f7c485b991c288c2d01dc228bb68',
-              'fixedVersions': [
-                '1.33.1-r6'
-              ],
-              'installedVersion': '1.33.1-r3',
-              'packageName':      'ssl_client',
-              'purl':             'pkg:apk/alpine/ssl_client@1.33.1-r3?arch=x86_64&distro=3.14.2',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42386',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42386',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42386'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the nvalloc()'
-            },
-            {
-              'cve':  'CVE-2022-28391',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '8.8',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-88'
-              ],
-              'description':   "BusyBox through 1.35.0 allows remote attackers to execute arbitrary code if netstat is used to print a DNS PTR record's value to a VT compatible terminal. Alternatively, the attacker could choose to change the terminal's colors.",
-              'diffID':        'sha256:e2eb06d8af8218cfec8210147357a68b7e13f7c485b991c288c2d01dc228bb68',
-              'fixedVersions': [
-                '1.33.1-r7'
-              ],
-              'installedVersion': '1.33.1-r3',
-              'packageName':      'ssl_client',
-              'purl':             'pkg:apk/alpine/ssl_client@1.33.1-r3?arch=x86_64&distro=3.14.2',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2022-28391',
-                'https://git.alpinelinux.org/aports/plain/main/busybox/0001-libbb-sockaddr2str-ensure-only-printable-characters-.patch',
-                'https://git.alpinelinux.org/aports/plain/main/busybox/0002-nslookup-sanitize-all-printed-strings-with-printable.patch',
-                'https://gitlab.alpinelinux.org/alpine/aports/-/issues/13661',
-                'https://nvd.nist.gov/vuln/detail/CVE-2022-28391',
-                'https://www.cve.org/CVERecord?id=CVE-2022-28391'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: remote attackers may execute arbitrary code if netstat is used'
-            },
-            {
-              'cve':  'CVE-2021-42374',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '5.7',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-125'
-              ],
-              'description':   "An out-of-bounds heap read in Busybox's unlzma applet leads to information leak and denial of service when crafted LZMA-compressed input is decompressed. This can be triggered by any applet/format that",
-              'diffID':        'sha256:e2eb06d8af8218cfec8210147357a68b7e13f7c485b991c288c2d01dc228bb68',
-              'fixedVersions': [
-                '1.33.1-r4'
-              ],
-              'installedVersion': '1.33.1-r3',
-              'packageName':      'ssl_client',
-              'purl':             'pkg:apk/alpine/ssl_client@1.33.1-r3?arch=x86_64&distro=3.14.2',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42374',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42374',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42374'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'busybox: out-of-bounds read in unlzma applet leads to information leak and denial of service when crafted LZMA-compressed input is decompressed'
-            },
-            {
-              'cve':  'CVE-2021-42375',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.5',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '4.1',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-159'
-              ],
-              'description':   "An incorrect handling of a special element in Busybox's ash applet leads to denial of service when processing a crafted shell command, due to the shell mistaking specific characters for reserved characters. This may be used for DoS under rare conditions of filtered command input.",
-              'diffID':        'sha256:e2eb06d8af8218cfec8210147357a68b7e13f7c485b991c288c2d01dc228bb68',
-              'fixedVersions': [
-                '1.33.1-r5'
-              ],
-              'installedVersion': '1.33.1-r3',
-              'packageName':      'ssl_client',
-              'purl':             'pkg:apk/alpine/ssl_client@1.33.1-r3?arch=x86_64&distro=3.14.2',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42375',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42375',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42375'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'busybox: incorrect handling of a special element in ash applet leads to denial of service when processing a crafted shell command'
-            },
-            {
-              'cve':  'CVE-2022-37434',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '9.8',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-787',
-                'CWE-120'
-              ],
-              'description':   'zlib through 1.2.12 has a heap-based buffer over-read or buffer overflow in inflate in inflate.c via a large gzip header extra field. NOTE: only applications that call inflateGetHeader are affected. Some common applications bundle the affected zlib source code but may be unable to call inflateGetHeader (e.g., see the nodejs/node reference).',
-              'diffID':        'sha256:e2eb06d8af8218cfec8210147357a68b7e13f7c485b991c288c2d01dc228bb68',
-              'fixedVersions': [
-                '1.2.12-r2'
-              ],
-              'installedVersion': '1.2.11-r3',
-              'packageName':      'zlib',
-              'purl':             'pkg:apk/alpine/zlib@1.2.11-r3?arch=x86_64&distro=3.14.2',
-              'references':       [
-                'http://seclists.org/fulldisclosure/2022/Oct/37',
-                'http://seclists.org/fulldisclosure/2022/Oct/38',
-                'http://seclists.org/fulldisclosure/2022/Oct/41',
-                'http://seclists.org/fulldisclosure/2022/Oct/42',
-                'http://www.openwall.com/lists/oss-security/2022/08/05/2',
-                'http://www.openwall.com/lists/oss-security/2022/08/09/1',
-                'https://access.redhat.com/errata/RHSA-2022:8291',
-                'https://access.redhat.com/security/cve/CVE-2022-37434',
-                'https://bugzilla.redhat.com/2116639',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2053198',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2077431',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2081296',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2116639',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-37434',
-                'https://errata.almalinux.org/9/ALSA-2022-8291.html',
-                'https://errata.rockylinux.org/RLSA-2022:8291',
-                'https://github.com/curl/curl/issues/9271',
-                'https://github.com/ivd38/zlib_overflow',
-                'https://github.com/madler/zlib/blob/21767c654d31d2dccdde4330529775c6c5fd5389/zlib.h#L1062-L1063',
-                'https://github.com/madler/zlib/commit/1eb7682f845ac9e9bf9ae35bbfb3bad5dacbd91d',
-                'https://github.com/madler/zlib/commit/eff308af425b67093bab25f80f1ae950166bece1',
-                'https://github.com/nodejs/node/blob/75b68c6e4db515f76df73af476eccf382bbcb00a/deps/zlib/inflate.c#L762-L764',
-                'https://linux.oracle.com/cve/CVE-2022-37434.html',
-                'https://linux.oracle.com/errata/ELSA-2023-1095.html',
-                'https://lists.debian.org/debian-lts-announce/2022/09/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JWN4VE3JQR4O2SOUS5TXNLANRPMHWV4I/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NMBOJ77A7T7PQCARMDUK75TE6LLESZ3O/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PAVPQNCG3XRLCLNSQRM3KAN5ZFMVXVTY/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/X5U7OTKZSHY2I3ZFJSR2SHFHW72RKGDK/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YRQAI7H4M4RQZ2IWZUEEXECBE5D56BH2/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2022-37434',
-                'https://security.netapp.com/advisory/ntap-20220901-0005/',
-                'https://security.netapp.com/advisory/ntap-20230427-0007/',
-                'https://support.apple.com/kb/HT213488',
-                'https://support.apple.com/kb/HT213489',
-                'https://support.apple.com/kb/HT213490',
-                'https://support.apple.com/kb/HT213491',
-                'https://support.apple.com/kb/HT213493',
-                'https://support.apple.com/kb/HT213494',
-                'https://ubuntu.com/security/notices/USN-5570-1',
-                'https://ubuntu.com/security/notices/USN-5570-2',
-                'https://ubuntu.com/security/notices/USN-5573-1',
-                'https://ubuntu.com/security/notices/USN-6736-1',
-                'https://ubuntu.com/security/notices/USN-6736-2',
-                'https://www.cve.org/CVERecord?id=CVE-2022-37434',
-                'https://www.debian.org/security/2022/dsa-5218'
-              ],
-              'severity':   'CRITICAL',
-              'suppressed': false,
-              'title':      'zlib: heap-based buffer over-read and overflow in inflate() in inflate.c via a large gzip header extra field'
-            },
-            {
-              'cve':  'CVE-2018-25032',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'nvd': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '8.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-787'
-              ],
-              'description':   'zlib before 1.2.12 allows memory corruption when deflating (i.e., when compressing) if the input has many distant matches.',
-              'diffID':        'sha256:e2eb06d8af8218cfec8210147357a68b7e13f7c485b991c288c2d01dc228bb68',
-              'fixedVersions': [
-                '1.2.12-r0'
-              ],
-              'installedVersion': '1.2.11-r3',
-              'packageName':      'zlib',
-              'purl':             'pkg:apk/alpine/zlib@1.2.11-r3?arch=x86_64&distro=3.14.2',
-              'references':       [
-                'http://seclists.org/fulldisclosure/2022/May/33',
-                'http://seclists.org/fulldisclosure/2022/May/35',
-                'http://seclists.org/fulldisclosure/2022/May/38',
-                'http://www.openwall.com/lists/oss-security/2022/03/25/2',
-                'http://www.openwall.com/lists/oss-security/2022/03/26/1',
-                'https://access.redhat.com/errata/RHSA-2022:8420',
-                'https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-25032.json',
-                'https://access.redhat.com/security/cve/CVE-2018-25032',
-                'https://bugzilla.redhat.com/2067945',
-                'https://cert-portal.siemens.com/productcert/pdf/ssa-333517.pdf',
-                'https://errata.almalinux.org/9/ALSA-2022-8420.html',
-                'https://github.com/advisories/GHSA-jc36-42cf-vqwj',
-                'https://github.com/madler/zlib/commit/5c44459c3b28a9bd3283aaceab7c615f8020c531',
-                'https://github.com/madler/zlib/compare/v1.2.11...v1.2.12',
-                'https://github.com/madler/zlib/issues/605',
-                'https://github.com/rubysec/ruby-advisory-db/blob/master/gems/nokogiri/CVE-2018-25032.yml',
-                'https://github.com/sparklemotion/nokogiri/releases/tag/v1.13.4',
-                'https://github.com/sparklemotion/nokogiri/security/advisories/GHSA-v6gp-9mmm-c6p5',
-                'https://groups.google.com/g/ruby-security-ann/c/vX7qSjsvWis/m/TJWN4oOKBwAJ',
-                'https://linux.oracle.com/cve/CVE-2018-25032.html',
-                'https://linux.oracle.com/errata/ELSA-2022-9565.html',
-                'https://lists.debian.org/debian-lts-announce/2022/04/msg00000.html',
-                'https://lists.debian.org/debian-lts-announce/2022/05/msg00008.html',
-                'https://lists.debian.org/debian-lts-announce/2022/09/msg00023.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DCZFIJBJTZ7CL5QXBFKTQ22Q26VINRUF/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DF62MVMH3QUGMBDCB3DY2ERQ6EBHTADB/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JZZPTWRYQULAOL3AW7RZJNVZ2UONXCV4/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NS2D2GFPFGOJUL4WQ3DUAY7HF4VWQ77F/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VOKNP2L734AEL47NRYGVZIKEFOUBQY5Y/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/XOKFMSNQ5D5WGMALBNBXU3GE442V74WU/',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/DCZFIJBJTZ7CL5QXBFKTQ22Q26VINRUF',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/DCZFIJBJTZ7CL5QXBFKTQ22Q26VINRUF/',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/DF62MVMH3QUGMBDCB3DY2ERQ6EBHTADB',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/DF62MVMH3QUGMBDCB3DY2ERQ6EBHTADB/',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/JZZPTWRYQULAOL3AW7RZJNVZ2UONXCV4',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/JZZPTWRYQULAOL3AW7RZJNVZ2UONXCV4/',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/NS2D2GFPFGOJUL4WQ3DUAY7HF4VWQ77F',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/NS2D2GFPFGOJUL4WQ3DUAY7HF4VWQ77F/',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/VOKNP2L734AEL47NRYGVZIKEFOUBQY5Y',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/VOKNP2L734AEL47NRYGVZIKEFOUBQY5Y/',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/XOKFMSNQ5D5WGMALBNBXU3GE442V74WU',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/XOKFMSNQ5D5WGMALBNBXU3GE442V74WU/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2018-25032',
-                'https://security.gentoo.org/glsa/202210-42',
-                'https://security.netapp.com/advisory/ntap-20220526-0009',
-                'https://security.netapp.com/advisory/ntap-20220526-0009/',
-                'https://security.netapp.com/advisory/ntap-20220729-0004',
-                'https://security.netapp.com/advisory/ntap-20220729-0004/',
-                'https://support.apple.com/kb/HT213255',
-                'https://support.apple.com/kb/HT213256',
-                'https://support.apple.com/kb/HT213257',
-                'https://ubuntu.com/security/notices/USN-5355-1',
-                'https://ubuntu.com/security/notices/USN-5355-2',
-                'https://ubuntu.com/security/notices/USN-5359-1',
-                'https://ubuntu.com/security/notices/USN-5359-2',
-                'https://ubuntu.com/security/notices/USN-5739-1',
-                'https://ubuntu.com/security/notices/USN-6736-1',
-                'https://ubuntu.com/security/notices/USN-6736-2',
-                'https://www.cve.org/CVERecord?id=CVE-2018-25032',
-                'https://www.debian.org/security/2022/dsa-5111',
-                'https://www.openwall.com/lists/oss-security/2022/03/24/1',
-                'https://www.openwall.com/lists/oss-security/2022/03/28/1',
-                'https://www.openwall.com/lists/oss-security/2022/03/28/3',
-                'https://www.oracle.com/security-alerts/cpujul2022.html'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'zlib: A flaw found in zlib when compressing (not decompressing) certain inputs'
-            }
-          ]
-        }
-      ],
-      'summary': {
-        'critical':   1,
-        'high':       32,
-        'low':        0,
-        'medium':     10,
-        'suppressed': 0,
-        'unknown':    0
-      }
-    }
-  },
-  {
-    'id':    'default/de062db4fe0bcc8aba7b9ee7d7e82455e24ceb75f2f573e6eb8dcad35579b2c0',
-    'type':  'storage.sbomscanner.kubewarden.io.vulnerabilityreport',
-    'links': {
-      'patch':  'https://localhost:8005/v1/storage.sbomscanner.kubewarden.io.vulnerabilityreports/default/de062db4fe0bcc8aba7b9ee7d7e82455e24ceb75f2f573e6eb8dcad35579b2c0',
-      'remove': 'https://localhost:8005/v1/storage.sbomscanner.kubewarden.io.vulnerabilityreports/default/de062db4fe0bcc8aba7b9ee7d7e82455e24ceb75f2f573e6eb8dcad35579b2c0',
-      'self':   'https://localhost:8005/v1/storage.sbomscanner.kubewarden.io.vulnerabilityreports/default/de062db4fe0bcc8aba7b9ee7d7e82455e24ceb75f2f573e6eb8dcad35579b2c0',
-      'update': 'https://localhost:8005/v1/storage.sbomscanner.kubewarden.io.vulnerabilityreports/default/de062db4fe0bcc8aba7b9ee7d7e82455e24ceb75f2f573e6eb8dcad35579b2c0',
-      'view':   'https://localhost:8005/apis/storage.sbomscanner.kubewarden.io/v1alpha1/namespaces/default/vulnerabilityreports/de062db4fe0bcc8aba7b9ee7d7e82455e24ceb75f2f573e6eb8dcad35579b2c0'
-    },
-    'apiVersion':    'storage.sbomscanner.kubewarden.io/v1alpha1',
-    'imageMetadata': {
-      'digest':      'sha256:77cbe97593c890eb1c4cadcbca37809ebff2b5f46a036666866c99f08a708967',
-      'platform':    'linux/386',
-      'registry':    'lsong-demo1',
-      'registryURI': 'registry-1.docker.io',
-      'repository':  'library/alpine',
-      'tag':         '3.10.3'
-    },
-    'kind':     'VulnerabilityReport',
-    'metadata': {
-      'creationTimestamp': '2026-01-14T18:51:27Z',
-      'fields':            [
-        'de062db4fe0bcc8aba7b9ee7d7e82455e24ceb75f2f573e6eb8dcad35579b2c0',
-        'registry-1.docker.io/library/alpine:3.10.3',
-        'linux/386',
-        '22 (0 suppressed)'
-      ],
-      'labels': {
-        'app.kubernetes.io/managed-by':          'sbomscanner',
-        'app.kubernetes.io/part-of':             'sbomscanner',
-        'sbomscanner.kubewarden.io/scanjob-uid': '445c600a-c4b6-40b3-bd71-f2d2140a37d5'
-      },
-      'name':            'de062db4fe0bcc8aba7b9ee7d7e82455e24ceb75f2f573e6eb8dcad35579b2c0',
-      'namespace':       'default',
-      'ownerReferences': [
-        {
-          'apiVersion':         'storage.sbomscanner.kubewarden.io/v1alpha1',
-          'blockOwnerDeletion': true,
-          'controller':         true,
-          'kind':               'SBOM',
-          'name':               'de062db4fe0bcc8aba7b9ee7d7e82455e24ceb75f2f573e6eb8dcad35579b2c0',
-          'uid':                '6a967519-68b2-4dff-a65a-e32f63d8d807'
-        }
-      ],
-      'relationships': [
-        {
-          'fromId':   'default/de062db4fe0bcc8aba7b9ee7d7e82455e24ceb75f2f573e6eb8dcad35579b2c0',
-          'fromType': 'storage.sbomscanner.kubewarden.io.sbom',
-          'rel':      'owner',
-          'state':    'active',
-          'message':  'Resource is current'
-        }
-      ],
-      'resourceVersion': '1',
-      'state':           {
-        'error':         false,
-        'message':       'Resource is current',
-        'name':          'active',
-        'transitioning': false
-      },
-      'uid': '22f78c52-a9e8-4f10-8a10-8fc5cca8dd45'
-    },
-    'report': {
-      'results': [
-        {
-          'class':           'os-pkgs',
-          'target':          '/var/run/worker/trivy.sbom.2727428720.json (alpine 3.10.3)',
-          'type':            'alpine',
-          'vulnerabilities': [
-            {
-              'cve':  'CVE-2021-36159',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '9.1',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '9.1',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-125'
-              ],
-              'description':   "libfetch before 2021-07-26, as used in apk-tools, xbps, and other products, mishandles numeric strings for the FTP and HTTP protocols. The FTP passive mode implementation allows an out-of-bounds read because strtol is used to parse the relevant numbers into address bytes. It does not check if the line ends prematurely. If it does, the for-loop condition checks for the '\\0' terminator one byte too late.",
-              'diffID':        'sha256:cd69428324a611416b9db0ed8e3b0849901d5f0de855a18f094784b87ef19683',
-              'fixedVersions': [
-                '2.10.7-r0'
-              ],
-              'installedVersion': '2.10.4-r2',
-              'packageName':      'apk-tools',
-              'purl':             'pkg:apk/alpine/apk-tools@2.10.4-r2?arch=x86&distro=3.10.3',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-36159',
-                'https://github.com/freebsd/freebsd-src/commits/main/lib/libfetch',
-                'https://gitlab.alpinelinux.org/alpine/apk-tools/-/issues/10749',
-                'https://lists.apache.org/thread.html/r61db8e7dcb56dc000a5387a88f7a473bacec5ee01b9ff3f55308aacc%40%3Cdev.kafka.apache.org%3E',
-                'https://lists.apache.org/thread.html/r61db8e7dcb56dc000a5387a88f7a473bacec5ee01b9ff3f55308aacc%40%3Cusers.kafka.apache.org%3E',
-                'https://lists.apache.org/thread.html/rbf4ce74b0d1fa9810dec50ba3ace0caeea677af7c27a97111c06ccb7%40%3Cdev.kafka.apache.org%3E',
-                'https://lists.apache.org/thread.html/rbf4ce74b0d1fa9810dec50ba3ace0caeea677af7c27a97111c06ccb7%40%3Cusers.kafka.apache.org%3E',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-36159',
-                'https://www.cve.org/CVERecord?id=CVE-2021-36159'
-              ],
-              'severity':   'CRITICAL',
-              'suppressed': false,
-              'title':      'libfetch: an out of boundary read while libfetch uses strtol to parse the relevant numbers into address bytes leads to information leak or crash'
-            },
-            {
-              'cve':  'CVE-2021-30139',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-125'
-              ],
-              'description':   'In Alpine Linux apk-tools before 2.12.5, the tarball parser allows a buffer overflow and crash.',
-              'diffID':        'sha256:cd69428324a611416b9db0ed8e3b0849901d5f0de855a18f094784b87ef19683',
-              'fixedVersions': [
-                '2.10.6-r0'
-              ],
-              'installedVersion': '2.10.4-r2',
-              'packageName':      'apk-tools',
-              'purl':             'pkg:apk/alpine/apk-tools@2.10.4-r2?arch=x86&distro=3.10.3',
-              'references':       [
-                'https://gitlab.alpinelinux.org/alpine/apk-tools/-/issues/10741',
-                'https://gitlab.alpinelinux.org/alpine/aports/-/issues/12606'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false
-            },
-            {
-              'cve':  'CVE-2021-28831',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-755'
-              ],
-              'description':   'decompress_gunzip.c in BusyBox through 1.32.1 mishandles the error bit on the huft_build result pointer, with a resultant invalid free or segmentation fault, via malformed gzip data.',
-              'diffID':        'sha256:cd69428324a611416b9db0ed8e3b0849901d5f0de855a18f094784b87ef19683',
-              'fixedVersions': [
-                '1.30.1-r5'
-              ],
-              'installedVersion': '1.30.1-r2',
-              'packageName':      'busybox',
-              'purl':             'pkg:apk/alpine/busybox@1.30.1-r2?arch=x86&distro=3.10.3',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-28831',
-                'https://git.busybox.net/busybox/commit/?id=f25d254dfd4243698c31a4f3153d4ac72aa9e9bd',
-                'https://lists.debian.org/debian-lts-announce/2021/04/msg00001.html',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/3UDQGJRECXFS5EZVDH2OI45FMO436AC4/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/Z7ZIFKPRR32ZYA3WAA2NXFA3QHHOU6FJ/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZASBW7QRRLY5V2R44MQ4QQM4CZIDHM2U/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-28831',
-                'https://security.gentoo.org/glsa/202105-09',
-                'https://security.netapp.com/advisory/ntap-20250509-0005/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://ubuntu.com/security/notices/USN-5179-2',
-                'https://ubuntu.com/security/notices/USN-6335-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-28831'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: invalid free or segmentation fault via malformed gzip data'
-            },
-            {
-              'cve':  'CVE-2020-1967',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'nvd': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-476'
-              ],
-              'description':   'Server or client applications that call the SSL_check_chain() function during or after a TLS 1.3 handshake may crash due to a NULL pointer dereference as a result of incorrect handling of the "signature_algorithms_cert" TLS extension. The crash occurs if an invalid or unrecognised signature algorithm is received from the peer. This could be exploited by a malicious peer in a Denial of Service attack. OpenSSL version 1.1.1d, 1.1.1e, and 1.1.1f are affected by this issue. This issue did not affect OpenSSL versions prior to 1.1.1d. Fixed in OpenSSL 1.1.1g (Affected 1.1.1d-1.1.1f).',
-              'diffID':        'sha256:cd69428324a611416b9db0ed8e3b0849901d5f0de855a18f094784b87ef19683',
-              'fixedVersions': [
-                '1.1.1g-r0'
-              ],
-              'installedVersion': '1.1.1d-r0',
-              'packageName':      'libcrypto1.1',
-              'purl':             'pkg:apk/alpine/libcrypto1.1@1.1.1d-r0?arch=x86&distro=3.10.3',
-              'references':       [
-                'http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00004.html',
-                'http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00011.html',
-                'http://packetstormsecurity.com/files/157527/OpenSSL-signature_algorithms_cert-Denial-Of-Service.html',
-                'http://seclists.org/fulldisclosure/2020/May/5',
-                'http://www.openwall.com/lists/oss-security/2020/04/22/2',
-                'https://access.redhat.com/security/cve/CVE-2020-1967',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=eb563247aef3e83dda7679c43f9649270462e5b1',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=eb563247aef3e83dda7679c43f9649270462e5b1',
-                'https://github.com/irsl/CVE-2020-1967',
-                'https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA44440',
-                'https://lists.apache.org/thread.html/r66ea9c436da150683432db5fbc8beb8ae01886c6459ac30c2cea7345%40%3Cdev.tomcat.apache.org%3E',
-                'https://lists.apache.org/thread.html/r66ea9c436da150683432db5fbc8beb8ae01886c6459ac30c2cea7345@%3Cdev.tomcat.apache.org%3E',
-                'https://lists.apache.org/thread.html/r94d6ac3f010a38fccf4f432b12180a13fa1cf303559bd805648c9064%40%3Cdev.tomcat.apache.org%3E',
-                'https://lists.apache.org/thread.html/r94d6ac3f010a38fccf4f432b12180a13fa1cf303559bd805648c9064@%3Cdev.tomcat.apache.org%3E',
-                'https://lists.apache.org/thread.html/r9a41e304992ce6aec6585a87842b4f2e692604f5c892c37e3b0587ee%40%3Cdev.tomcat.apache.org%3E',
-                'https://lists.apache.org/thread.html/r9a41e304992ce6aec6585a87842b4f2e692604f5c892c37e3b0587ee@%3Cdev.tomcat.apache.org%3E',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DDHOAATPWJCXRNFMJ2SASDBBNU5RJONY/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/EXDDAOWSAIEFQNBHWYE6PPYFV4QXGMCD/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/XVEP3LAK4JSPRXFO4QF4GG2IVXADV3SO/',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/DDHOAATPWJCXRNFMJ2SASDBBNU5RJONY',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/EXDDAOWSAIEFQNBHWYE6PPYFV4QXGMCD',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/XVEP3LAK4JSPRXFO4QF4GG2IVXADV3SO',
-                'https://nvd.nist.gov/vuln/detail/CVE-2020-1967',
-                'https://rustsec.org/advisories/RUSTSEC-2020-0015.html',
-                'https://security.FreeBSD.org/advisories/FreeBSD-SA-20:11.openssl.asc',
-                'https://security.gentoo.org/glsa/202004-10',
-                'https://security.netapp.com/advisory/ntap-20200424-0003',
-                'https://security.netapp.com/advisory/ntap-20200424-0003/',
-                'https://security.netapp.com/advisory/ntap-20200717-0004',
-                'https://security.netapp.com/advisory/ntap-20200717-0004/',
-                'https://www.cve.org/CVERecord?id=CVE-2020-1967',
-                'https://www.debian.org/security/2020/dsa-4661',
-                'https://www.openssl.org/news/secadv/20200421.txt',
-                'https://www.oracle.com//security-alerts/cpujul2021.html',
-                'https://www.oracle.com/security-alerts/cpuApr2021.html',
-                'https://www.oracle.com/security-alerts/cpujan2021.html',
-                'https://www.oracle.com/security-alerts/cpujul2020.html',
-                'https://www.oracle.com/security-alerts/cpuoct2020.html',
-                'https://www.oracle.com/security-alerts/cpuoct2021.html',
-                'https://www.synology.com/security/advisory/Synology_SA_20_05',
-                'https://www.synology.com/security/advisory/Synology_SA_20_05_OpenSSL',
-                'https://www.tenable.com/security/tns-2020-03',
-                'https://www.tenable.com/security/tns-2020-04',
-                'https://www.tenable.com/security/tns-2020-11',
-                'https://www.tenable.com/security/tns-2021-10'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: Segmentation fault in SSL_check_chain causes denial of service'
-            },
-            {
-              'cve':  'CVE-2021-23840',
-              'cvss': {
-                'bitnami': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'ghsa': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'nvd': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-190'
-              ],
-              'description':   'Calls to EVP_CipherUpdate, EVP_EncryptUpdate and EVP_DecryptUpdate may overflow the output length argument in some cases where the input length is close to the maximum permissable length for an integer on the platform. In such cases the return value from the function call will be 1 (indicating success), but the output length value will be negative. This could cause applications to behave incorrectly or crash. OpenSSL versions 1.1.1i and below are affected by this issue. Users of these versions should upgrade to OpenSSL 1.1.1j. OpenSSL versions 1.0.2x and below are affected by this issue. However OpenSSL 1.0.2 is out of support and no longer receiving public updates. Premium support customers of OpenSSL 1.0.2 should upgrade to 1.0.2y. Other users should upgrade to 1.1.1j. Fixed in OpenSSL 1.1.1j (Affected 1.1.1-1.1.1i). Fixed in OpenSSL 1.0.2y (Affected 1.0.2-1.0.2x).',
-              'diffID':        'sha256:cd69428324a611416b9db0ed8e3b0849901d5f0de855a18f094784b87ef19683',
-              'fixedVersions': [
-                '1.1.1j-r0'
-              ],
-              'installedVersion': '1.1.1d-r0',
-              'packageName':      'libcrypto1.1',
-              'purl':             'pkg:apk/alpine/libcrypto1.1@1.1.1d-r0?arch=x86&distro=3.10.3',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-23840',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=1908036',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=1930310',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=1930324',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=1934534',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=1934600',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=1939637',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=1940085',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=1965362',
-                'https://cert-portal.siemens.com/productcert/pdf/ssa-389290.pdf',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-23840',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-23841',
-                'https://errata.rockylinux.org/RLSA-2021:4424',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=6a51b9e1d0cf0bf8515f7201b68fb0a3482b3dc1',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=9b1129239f3ebb1d1c98ce9ed41d5c9476c47cb2',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=6a51b9e1d0cf0bf8515f7201b68fb0a3482b3dc1',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=9b1129239f3ebb1d1c98ce9ed41d5c9476c47cb2',
-                'https://github.com/alexcrichton/openssl-src-rs',
-                'https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA44846',
-                'https://kc.mcafee.com/corporate/index?page=content&id=SB10366',
-                'https://linux.oracle.com/cve/CVE-2021-23840.html',
-                'https://linux.oracle.com/errata/ELSA-2021-9561.html',
-                'https://lists.apache.org/thread.html/r58af02e294bd07f487e2c64ffc0a29b837db5600e33b6e698b9d696b%40%3Cissues.bookkeeper.apache.org%3E',
-                'https://lists.apache.org/thread.html/r58af02e294bd07f487e2c64ffc0a29b837db5600e33b6e698b9d696b@%3Cissues.bookkeeper.apache.org%3E',
-                'https://lists.apache.org/thread.html/rf4c02775860db415b4955778a131c2795223f61cb8c6a450893651e4%40%3Cissues.bookkeeper.apache.org%3E',
-                'https://lists.apache.org/thread.html/rf4c02775860db415b4955778a131c2795223f61cb8c6a450893651e4@%3Cissues.bookkeeper.apache.org%3E',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-23840',
-                'https://rustsec.org/advisories/RUSTSEC-2021-0057.html',
-                'https://security.gentoo.org/glsa/202103-03',
-                'https://security.netapp.com/advisory/ntap-20210219-0009',
-                'https://security.netapp.com/advisory/ntap-20210219-0009/',
-                'https://security.netapp.com/advisory/ntap-20240621-0006/',
-                'https://ubuntu.com/security/notices/USN-4738-1',
-                'https://ubuntu.com/security/notices/USN-5088-1',
-                'https://ubuntu.com/security/notices/USN-7018-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-23840',
-                'https://www.debian.org/security/2021/dsa-4855',
-                'https://www.openssl.org/news/secadv/20210216.txt',
-                'https://www.oracle.com//security-alerts/cpujul2021.html',
-                'https://www.oracle.com/security-alerts/cpuApr2021.html',
-                'https://www.oracle.com/security-alerts/cpuapr2022.html',
-                'https://www.oracle.com/security-alerts/cpujan2022.html',
-                'https://www.oracle.com/security-alerts/cpuoct2021.html',
-                'https://www.tenable.com/security/tns-2021-03',
-                'https://www.tenable.com/security/tns-2021-09',
-                'https://www.tenable.com/security/tns-2021-10'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: integer overflow in CipherUpdate'
-            },
-            {
-              'cve':  'CVE-2021-3450',
-              'cvss': {
-                'bitnami': {
-                  'v3score':  '7.4',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N'
-                },
-                'ghsa': {
-                  'v3score':  '7.4',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N'
-                },
-                'nvd': {
-                  'v3score':  '7.4',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N'
-                },
-                'redhat': {
-                  'v3score':  '7.4',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-295'
-              ],
-              'description':   'The X509_V_FLAG_X509_STRICT flag enables additional security checks of the certificates present in a certificate chain. It is not set by default. Starting from OpenSSL version 1.1.1h a check to disallow certificates in the chain that have explicitly encoded elliptic curve parameters was added as an additional strict check. An error in the implementation of this check meant that the result of a previous check to confirm that certificates in the chain are valid CA certificates was overwritten. This effectively bypasses the check that non-CA certificates must not be able to issue other certificates. If a "purpose" has been configured then there is a subsequent opportunity for checks that the certificate is a valid CA. All of the named "purpose" values implemented in libcrypto perform this check. Therefore, where a purpose is set the certificate chain will still be rejected even when the strict flag has been used. A purpose is set by default in libssl client and server certificate verification routines, but it can be overridden or removed by an application. In order to be affected, an application must explicitly set the X509_V_FLAG_X509_STRICT verification flag and either not set a purpose for the certificate verification or, in the case of TLS client or server applications, override the default purpose. OpenSSL versions 1.1.1h and newer are affected by this issue. Users of these versions should upgrade to OpenSSL 1.1.1k. OpenSSL 1.0.2 is not impacted by this issue. Fixed in OpenSSL 1.1.1k (Affected 1.1.1h-1.1.1j).',
-              'diffID':        'sha256:cd69428324a611416b9db0ed8e3b0849901d5f0de855a18f094784b87ef19683',
-              'fixedVersions': [
-                '1.1.1k-r0'
-              ],
-              'installedVersion': '1.1.1d-r0',
-              'packageName':      'libcrypto1.1',
-              'purl':             'pkg:apk/alpine/libcrypto1.1@1.1.1d-r0?arch=x86&distro=3.10.3',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2021/03/27/1',
-                'http://www.openwall.com/lists/oss-security/2021/03/27/2',
-                'http://www.openwall.com/lists/oss-security/2021/03/28/3',
-                'http://www.openwall.com/lists/oss-security/2021/03/28/4',
-                'https://access.redhat.com/security/cve/CVE-2021-3450',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=1941547',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=1941554',
-                'https://cert-portal.siemens.com/productcert/pdf/ssa-389290.pdf',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-3449',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-3450',
-                'https://errata.rockylinux.org/RLSA-2021:1024',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=2a40b7bc7b94dd7de897a74571e7024f0cf0d63b',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=2a40b7bc7b94dd7de897a74571e7024f0cf0d63b',
-                'https://github.com/alexcrichton/openssl-src-rs',
-                'https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA44845',
-                'https://kc.mcafee.com/corporate/index?page=content&id=SB10356',
-                'https://linux.oracle.com/cve/CVE-2021-3450.html',
-                'https://linux.oracle.com/errata/ELSA-2021-9151.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CCBFLLVQVILIVGZMBJL3IXZGKWQISYNP/',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/CCBFLLVQVILIVGZMBJL3IXZGKWQISYNP',
-                'https://mta.openssl.org/pipermail/openssl-announce/2021-March/000198.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-3450',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2021-0013',
-                'https://rustsec.org/advisories/RUSTSEC-2021-0056.html',
-                'https://security.FreeBSD.org/advisories/FreeBSD-SA-21:07.openssl.asc',
-                'https://security.gentoo.org/glsa/202103-03',
-                'https://security.netapp.com/advisory/ntap-20210326-0006',
-                'https://security.netapp.com/advisory/ntap-20210326-0006/',
-                'https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-openssl-2021-GHY28dJd',
-                'https://www.cve.org/CVERecord?id=CVE-2021-3450',
-                'https://www.openssl.org/news/secadv/20210325.txt',
-                'https://www.oracle.com//security-alerts/cpujul2021.html',
-                'https://www.oracle.com/security-alerts/cpuApr2021.html',
-                'https://www.oracle.com/security-alerts/cpuapr2022.html',
-                'https://www.oracle.com/security-alerts/cpujul2022.html',
-                'https://www.oracle.com/security-alerts/cpuoct2021.html',
-                'https://www.tenable.com/security/tns-2021-05',
-                'https://www.tenable.com/security/tns-2021-08',
-                'https://www.tenable.com/security/tns-2021-09'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: CA certificate check bypass with X509_V_FLAG_X509_STRICT'
-            },
-            {
-              'cve':  'CVE-2019-1551',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N'
-                },
-                'redhat': {
-                  'v3score':  '4.8',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-190'
-              ],
-              'description':   'There is an overflow bug in the x64_64 Montgomery squaring procedure used in exponentiation with 512-bit moduli. No EC algorithms are affected. Analysis suggests that attacks against 2-prime RSA1024, 3-prime RSA1536, and DSA1024 as a result of this defect would be very difficult to perform and are not believed likely. Attacks against DH512 are considered just feasible. However, for an attack the target would have to re-use the DH512 private key, which is not recommended anyway. Also applications directly using the low level API BN_mod_exp may be affected if they use BN_FLG_CONSTTIME. Fixed in OpenSSL 1.1.1e (Affected 1.1.1-1.1.1d). Fixed in OpenSSL 1.0.2u (Affected 1.0.2-1.0.2t).',
-              'diffID':        'sha256:cd69428324a611416b9db0ed8e3b0849901d5f0de855a18f094784b87ef19683',
-              'fixedVersions': [
-                '1.1.1d-r2'
-              ],
-              'installedVersion': '1.1.1d-r0',
-              'packageName':      'libcrypto1.1',
-              'purl':             'pkg:apk/alpine/libcrypto1.1@1.1.1d-r0?arch=x86&distro=3.10.3',
-              'references':       [
-                'http://lists.opensuse.org/opensuse-security-announce/2020-01/msg00030.html',
-                'http://packetstormsecurity.com/files/155754/Slackware-Security-Advisory-openssl-Updates.html',
-                'https://access.redhat.com/security/cve/CVE-2019-1551',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=419102400a2811582a7a3d4a4e317d72e5ce0a8f',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=f1c5eea8a817075d31e43f5876993c6710238c98',
-                'https://github.com/openssl/openssl/pull/10575',
-                'https://linux.oracle.com/cve/CVE-2019-1551.html',
-                'https://linux.oracle.com/errata/ELSA-2020-4514.html',
-                'https://lists.debian.org/debian-lts-announce/2022/03/msg00023.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DDHOAATPWJCXRNFMJ2SASDBBNU5RJONY/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/EXDDAOWSAIEFQNBHWYE6PPYFV4QXGMCD/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/XVEP3LAK4JSPRXFO4QF4GG2IVXADV3SO/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2019-1551',
-                'https://seclists.org/bugtraq/2019/Dec/39',
-                'https://seclists.org/bugtraq/2019/Dec/46',
-                'https://security.gentoo.org/glsa/202004-10',
-                'https://security.netapp.com/advisory/ntap-20191210-0001/',
-                'https://ubuntu.com/security/notices/USN-4376-1',
-                'https://ubuntu.com/security/notices/USN-4504-1',
-                'https://usn.ubuntu.com/4376-1/',
-                'https://usn.ubuntu.com/4504-1/',
-                'https://www.cve.org/CVERecord?id=CVE-2019-1551',
-                'https://www.debian.org/security/2019/dsa-4594',
-                'https://www.debian.org/security/2021/dsa-4855',
-                'https://www.openssl.org/news/secadv/20191206.txt',
-                'https://www.oracle.com/security-alerts/cpuApr2021.html',
-                'https://www.oracle.com/security-alerts/cpujan2021.html',
-                'https://www.oracle.com/security-alerts/cpujul2020.html',
-                'https://www.tenable.com/security/tns-2019-09',
-                'https://www.tenable.com/security/tns-2020-03',
-                'https://www.tenable.com/security/tns-2020-11',
-                'https://www.tenable.com/security/tns-2021-10'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: Integer overflow in RSAZ modular exponentiation on x86_64'
-            },
-            {
-              'cve':  'CVE-2020-1971',
-              'cvss': {
-                'bitnami': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'nvd': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-476'
-              ],
-              'description':   "The X.509 GeneralName type is a generic type for representing different types of names. One of those name types is known as EDIPartyName. OpenSSL provides a function GENERAL_NAME_cmp which compares different instances of a GENERAL_NAME to see if they are equal or not. This function behaves incorrectly when both GENERAL_NAMEs contain an EDIPARTYNAME. A NULL pointer dereference and a crash may occur leading to a possible denial of service attack. OpenSSL itself uses the GENERAL_NAME_cmp function for two purposes: 1) Comparing CRL distribution point names between an available CRL and a CRL distribution point embedded in an X509 certificate 2) When verifying that a timestamp response token signer matches the timestamp authority name (exposed via the API functions TS_RESP_verify_response and TS_RESP_verify_token) If an attacker can control both items being compared then that attacker could trigger a crash. For example if the attacker can trick a client or server into checking a malicious certificate against a malicious CRL then this may occur. Note that some applications automatically download CRLs based on a URL embedded in a certificate. This checking happens prior to the signatures on the certificate and CRL being verified. OpenSSL's s_server, s_client and verify tools have support for the \"-crl_download\" option which implements automatic CRL downloading and this attack has been demonstrated to work against those tools. Note that an unrelated bug means that affected versions of OpenSSL cannot parse or construct correct encodings of EDIPARTYNAME. However it is possible to construct a malformed EDIPARTYNAME that OpenSSL's parser will accept and hence trigger this attack. All OpenSSL 1.1.1 and 1.0.2 versions are affected by this issue. Other OpenSSL releases are out of support and have not been checked. Fixed in OpenSSL 1.1.1i (Affected 1.1.1-1.1.1h). Fixed in OpenSSL 1.0.2x (Affected 1.0.2-1.0.2w).",
-              'diffID':        'sha256:cd69428324a611416b9db0ed8e3b0849901d5f0de855a18f094784b87ef19683',
-              'fixedVersions': [
-                '1.1.1i-r0'
-              ],
-              'installedVersion': '1.1.1d-r0',
-              'packageName':      'libcrypto1.1',
-              'purl':             'pkg:apk/alpine/libcrypto1.1@1.1.1d-r0?arch=x86&distro=3.10.3',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2021/09/14/2',
-                'https://access.redhat.com/security/cve/CVE-2020-1971',
-                'https://cert-portal.siemens.com/productcert/pdf/ssa-389290.pdf',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=2154ab83e14ede338d2ede9bbe5cdfce5d5a6c9e',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=f960d81215ebf3f65e03d4d5d857fb9b666d6920',
-                'https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA44676',
-                'https://linux.oracle.com/cve/CVE-2020-1971.html',
-                'https://linux.oracle.com/errata/ELSA-2021-9150.html',
-                'https://lists.apache.org/thread.html/r63c6f2dd363d9b514d0a4bcf624580616a679898cc14c109a49b750c%40%3Cdev.tomcat.apache.org%3E',
-                'https://lists.apache.org/thread.html/rbb769f771711fb274e0a4acb1b5911c8aab544a6ac5e8c12d40c5143%40%3Ccommits.pulsar.apache.org%3E',
-                'https://lists.debian.org/debian-lts-announce/2020/12/msg00020.html',
-                'https://lists.debian.org/debian-lts-announce/2020/12/msg00021.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DGSI34Y5LQ5RYXN4M2I5ZQT65LFVDOUU/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PWPSSZNZOBJU2YR6Z4TGHXKYW3YP5QG7/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2020-1971',
-                'https://security.FreeBSD.org/advisories/FreeBSD-SA-20:33.openssl.asc',
-                'https://security.gentoo.org/glsa/202012-13',
-                'https://security.netapp.com/advisory/ntap-20201218-0005/',
-                'https://security.netapp.com/advisory/ntap-20210513-0002/',
-                'https://security.netapp.com/advisory/ntap-20240621-0006/',
-                'https://ubuntu.com/security/notices/USN-4662-1',
-                'https://ubuntu.com/security/notices/USN-4745-1',
-                'https://www.cve.org/CVERecord?id=CVE-2020-1971',
-                'https://www.debian.org/security/2020/dsa-4807',
-                'https://www.openssl.org/news/secadv/20201208.txt',
-                'https://www.oracle.com//security-alerts/cpujul2021.html',
-                'https://www.oracle.com/security-alerts/cpuApr2021.html',
-                'https://www.oracle.com/security-alerts/cpuapr2022.html',
-                'https://www.oracle.com/security-alerts/cpujan2021.html',
-                'https://www.oracle.com/security-alerts/cpuoct2021.html',
-                'https://www.tenable.com/security/tns-2020-11',
-                'https://www.tenable.com/security/tns-2021-09',
-                'https://www.tenable.com/security/tns-2021-10'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: EDIPARTYNAME NULL pointer de-reference'
-            },
-            {
-              'cve':  'CVE-2021-23841',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'nvd': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-476'
-              ],
-              'description':   'The OpenSSL public API function X509_issuer_and_serial_hash() attempts to create a unique hash value based on the issuer and serial number data contained within an X509 certificate. However it fails to correctly handle any errors that may occur while parsing the issuer field (which might occur if the issuer field is maliciously constructed). This may subsequently result in a NULL pointer deref and a crash leading to a potential denial of service attack. The function X509_issuer_and_serial_hash() is never directly called by OpenSSL itself so applications are only vulnerable if they use this function directly and they use it on certificates that may have been obtained from untrusted sources. OpenSSL versions 1.1.1i and below are affected by this issue. Users of these versions should upgrade to OpenSSL 1.1.1j. OpenSSL versions 1.0.2x and below are affected by this issue. However OpenSSL 1.0.2 is out of support and no longer receiving public updates. Premium support customers of OpenSSL 1.0.2 should upgrade to 1.0.2y. Other users should upgrade to 1.1.1j. Fixed in OpenSSL 1.1.1j (Affected 1.1.1-1.1.1i). Fixed in OpenSSL 1.0.2y (Affected 1.0.2-1.0.2x).',
-              'diffID':        'sha256:cd69428324a611416b9db0ed8e3b0849901d5f0de855a18f094784b87ef19683',
-              'fixedVersions': [
-                '1.1.1j-r0'
-              ],
-              'installedVersion': '1.1.1d-r0',
-              'packageName':      'libcrypto1.1',
-              'purl':             'pkg:apk/alpine/libcrypto1.1@1.1.1d-r0?arch=x86&distro=3.10.3',
-              'references':       [
-                'http://seclists.org/fulldisclosure/2021/May/67',
-                'http://seclists.org/fulldisclosure/2021/May/68',
-                'http://seclists.org/fulldisclosure/2021/May/70',
-                'https://access.redhat.com/security/cve/CVE-2021-23841',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=1908036',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=1930310',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=1930324',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=1934534',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=1934600',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=1939637',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=1940085',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=1965362',
-                'https://cert-portal.siemens.com/productcert/pdf/ssa-637483.pdf',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-23840',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-23841',
-                'https://errata.rockylinux.org/RLSA-2021:4424',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=122a19ab48091c657f7cb1fb3af9fc07bd557bbf',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=8252ee4d90f3f2004d3d0aeeed003ad49c9a7807',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=122a19ab48091c657f7cb1fb3af9fc07bd557bbf',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=6a51b9e1d0cf0bf8515f7201b68fb0a3482b3dc1',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=8252ee4d90f3f2004d3d0aeeed003ad49c9a7807',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=9b1129239f3ebb1d1c98ce9ed41d5c9476c47cb2',
-                'https://github.com/alexcrichton/openssl-src-rs',
-                'https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA44846',
-                'https://linux.oracle.com/cve/CVE-2021-23841.html',
-                'https://linux.oracle.com/errata/ELSA-2021-9561.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-23841',
-                'https://rustsec.org/advisories/RUSTSEC-2021-0058',
-                'https://rustsec.org/advisories/RUSTSEC-2021-0058.html',
-                'https://security.gentoo.org/glsa/202103-03',
-                'https://security.netapp.com/advisory/ntap-20210219-0009',
-                'https://security.netapp.com/advisory/ntap-20210219-0009/',
-                'https://security.netapp.com/advisory/ntap-20210513-0002',
-                'https://security.netapp.com/advisory/ntap-20210513-0002/',
-                'https://security.netapp.com/advisory/ntap-20240621-0006/',
-                'https://support.apple.com/kb/HT212528',
-                'https://support.apple.com/kb/HT212529',
-                'https://support.apple.com/kb/HT212534',
-                'https://ubuntu.com/security/notices/USN-4738-1',
-                'https://ubuntu.com/security/notices/USN-4745-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-23841',
-                'https://www.debian.org/security/2021/dsa-4855',
-                'https://www.openssl.org/news/secadv/20210216.txt',
-                'https://www.oracle.com//security-alerts/cpujul2021.html',
-                'https://www.oracle.com/security-alerts/cpuApr2021.html',
-                'https://www.oracle.com/security-alerts/cpuapr2022.html',
-                'https://www.oracle.com/security-alerts/cpuoct2021.html',
-                'https://www.tenable.com/security/tns-2021-03',
-                'https://www.tenable.com/security/tns-2021-09'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: NULL pointer dereference in X509_issuer_and_serial_hash()'
-            },
-            {
-              'cve':  'CVE-2021-3449',
-              'cvss': {
-                'bitnami': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'ghsa': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'nvd': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-476'
-              ],
-              'description':   'An OpenSSL TLS server may crash if sent a maliciously crafted renegotiation ClientHello message from a client. If a TLSv1.2 renegotiation ClientHello omits the signature_algorithms extension (where it was present in the initial ClientHello), but includes a signature_algorithms_cert extension then a NULL pointer dereference will result, leading to a crash and a denial of service attack. A server is only vulnerable if it has TLSv1.2 and renegotiation enabled (which is the default configuration). OpenSSL TLS clients are not impacted by this issue. All OpenSSL 1.1.1 versions are affected by this issue. Users of these versions should upgrade to OpenSSL 1.1.1k. OpenSSL 1.0.2 is not impacted by this issue. Fixed in OpenSSL 1.1.1k (Affected 1.1.1-1.1.1j).',
-              'diffID':        'sha256:cd69428324a611416b9db0ed8e3b0849901d5f0de855a18f094784b87ef19683',
-              'fixedVersions': [
-                '1.1.1k-r0'
-              ],
-              'installedVersion': '1.1.1d-r0',
-              'packageName':      'libcrypto1.1',
-              'purl':             'pkg:apk/alpine/libcrypto1.1@1.1.1d-r0?arch=x86&distro=3.10.3',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2021/03/27/1',
-                'http://www.openwall.com/lists/oss-security/2021/03/27/2',
-                'http://www.openwall.com/lists/oss-security/2021/03/28/3',
-                'http://www.openwall.com/lists/oss-security/2021/03/28/4',
-                'https://access.redhat.com/security/cve/CVE-2021-3449',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=1941547',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=1941554',
-                'https://cert-portal.siemens.com/productcert/pdf/ssa-389290.pdf',
-                'https://cert-portal.siemens.com/productcert/pdf/ssa-772220.pdf',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-3449',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-3450',
-                'https://errata.rockylinux.org/RLSA-2021:1024',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=fb9fa6b51defd48157eeb207f52181f735d96148',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=fb9fa6b51defd48157eeb207f52181f735d96148',
-                'https://github.com/alexcrichton/openssl-src-rs',
-                'https://github.com/nodejs/node/pull/38083',
-                'https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA44845',
-                'https://kc.mcafee.com/corporate/index?page=content&id=SB10356',
-                'https://linux.oracle.com/cve/CVE-2021-3449.html',
-                'https://linux.oracle.com/errata/ELSA-2021-9151.html',
-                'https://lists.debian.org/debian-lts-announce/2021/08/msg00029.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CCBFLLVQVILIVGZMBJL3IXZGKWQISYNP/',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/CCBFLLVQVILIVGZMBJL3IXZGKWQISYNP',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-3449',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2021-0013',
-                'https://rustsec.org/advisories/RUSTSEC-2021-0055',
-                'https://rustsec.org/advisories/RUSTSEC-2021-0055.html',
-                'https://security.FreeBSD.org/advisories/FreeBSD-SA-21:07.openssl.asc',
-                'https://security.gentoo.org/glsa/202103-03',
-                'https://security.netapp.com/advisory/ntap-20210326-0006',
-                'https://security.netapp.com/advisory/ntap-20210326-0006/',
-                'https://security.netapp.com/advisory/ntap-20210513-0002',
-                'https://security.netapp.com/advisory/ntap-20210513-0002/',
-                'https://security.netapp.com/advisory/ntap-20240621-0006/',
-                'https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-openssl-2021-GHY28dJd',
-                'https://ubuntu.com/security/notices/USN-4891-1',
-                'https://ubuntu.com/security/notices/USN-5038-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-3449',
-                'https://www.debian.org/security/2021/dsa-4875',
-                'https://www.openssl.org/news/secadv/20210325.txt',
-                'https://www.oracle.com//security-alerts/cpujul2021.html',
-                'https://www.oracle.com/security-alerts/cpuApr2021.html',
-                'https://www.oracle.com/security-alerts/cpuapr2022.html',
-                'https://www.oracle.com/security-alerts/cpujul2022.html',
-                'https://www.oracle.com/security-alerts/cpuoct2021.html',
-                'https://www.tenable.com/security/tns-2021-05',
-                'https://www.tenable.com/security/tns-2021-06',
-                'https://www.tenable.com/security/tns-2021-09',
-                'https://www.tenable.com/security/tns-2021-10'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: NULL pointer dereference in signature_algorithms processing'
-            },
-            {
-              'cve':  'CVE-2021-23839',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '3.7',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N'
-                },
-                'redhat': {
-                  'v3score':  '3.7',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-327'
-              ],
-              'description':   'OpenSSL 1.0.2 supports SSLv2. If a client attempts to negotiate SSLv2 with a server that is configured to support both SSLv2 and more recent SSL and TLS versions then a check is made for a version rollback attack when unpadding an RSA signature. Clients that support SSL or TLS versions greater than SSLv2 are supposed to use a special form of padding. A server that supports greater than SSLv2 is supposed to reject connection attempts from a client where this special form of padding is present, because this indicates that a version rollback has occurred (i.e. both client and server support greater than SSLv2, and yet this is the version that is being requested). The implementation of this padding check inverted the logic so that the connection attempt is accepted if the padding is present, and rejected if it is absent. This means that such as server will accept a connection if a version rollback attack has occurred. Further the server will erroneously reject a connection if a normal SSLv2 connection attempt is made. Only OpenSSL 1.0.2 servers from version 1.0.2s to 1.0.2x are affected by this issue. In order to be vulnerable a 1.0.2 server must: 1) have configured SSLv2 support at compile time (this is off by default), 2) have configured SSLv2 support at runtime (this is off by default), 3) have configured SSLv2 ciphersuites (these are not in the default ciphersuite list) OpenSSL 1.1.1 does not have SSLv2 support and therefore is not vulnerable to this issue. The underlying error is in the implementation of the RSA_padding_check_SSLv23() function. This also affects the RSA_SSLV23_PADDING padding mode used by various other functions. Although 1.1.1 does not support SSLv2 the RSA_padding_check_SSLv23() function still exists, as does the RSA_SSLV23_PADDING padding mode. Applications that directly call that function or use that padding mode will encounter this issue. However since there is no support for the SSLv2 protocol in 1.1.1 this is considered a bug and not a security issue in that version. OpenSSL 1.0.2 is out of support and no longer receiving public updates. Premium support customers of OpenSSL 1.0.2 should upgrade to 1.0.2y. Other users should upgrade to 1.1.1j. Fixed in OpenSSL 1.0.2y (Affected 1.0.2s-1.0.2x).',
-              'diffID':        'sha256:cd69428324a611416b9db0ed8e3b0849901d5f0de855a18f094784b87ef19683',
-              'fixedVersions': [
-                '1.1.1j-r0'
-              ],
-              'installedVersion': '1.1.1d-r0',
-              'packageName':      'libcrypto1.1',
-              'purl':             'pkg:apk/alpine/libcrypto1.1@1.1.1d-r0?arch=x86&distro=3.10.3',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-23839',
-                'https://cert-portal.siemens.com/productcert/pdf/ssa-637483.pdf',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=30919ab80a478f2d81f2e9acdcca3fa4740cd547',
-                'https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA44846',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-23839',
-                'https://security.netapp.com/advisory/ntap-20210219-0009/',
-                'https://security.netapp.com/advisory/ntap-20240621-0006/',
-                'https://www.cve.org/CVERecord?id=CVE-2021-23839',
-                'https://www.openssl.org/news/secadv/20210216.txt',
-                'https://www.oracle.com//security-alerts/cpujul2021.html',
-                'https://www.oracle.com/security-alerts/cpuApr2021.html',
-                'https://www.oracle.com/security-alerts/cpuapr2022.html',
-                'https://www.oracle.com/security-alerts/cpuoct2021.html'
-              ],
-              'severity':   'LOW',
-              'suppressed': false,
-              'title':      'openssl: incorrect SSLv2 rollback protection'
-            },
-            {
-              'cve':  'CVE-2020-1967',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'nvd': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-476'
-              ],
-              'description':   'Server or client applications that call the SSL_check_chain() function during or after a TLS 1.3 handshake may crash due to a NULL pointer dereference as a result of incorrect handling of the "signature_algorithms_cert" TLS extension. The crash occurs if an invalid or unrecognised signature algorithm is received from the peer. This could be exploited by a malicious peer in a Denial of Service attack. OpenSSL version 1.1.1d, 1.1.1e, and 1.1.1f are affected by this issue. This issue did not affect OpenSSL versions prior to 1.1.1d. Fixed in OpenSSL 1.1.1g (Affected 1.1.1d-1.1.1f).',
-              'diffID':        'sha256:cd69428324a611416b9db0ed8e3b0849901d5f0de855a18f094784b87ef19683',
-              'fixedVersions': [
-                '1.1.1g-r0'
-              ],
-              'installedVersion': '1.1.1d-r0',
-              'packageName':      'libssl1.1',
-              'purl':             'pkg:apk/alpine/libssl1.1@1.1.1d-r0?arch=x86&distro=3.10.3',
-              'references':       [
-                'http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00004.html',
-                'http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00011.html',
-                'http://packetstormsecurity.com/files/157527/OpenSSL-signature_algorithms_cert-Denial-Of-Service.html',
-                'http://seclists.org/fulldisclosure/2020/May/5',
-                'http://www.openwall.com/lists/oss-security/2020/04/22/2',
-                'https://access.redhat.com/security/cve/CVE-2020-1967',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=eb563247aef3e83dda7679c43f9649270462e5b1',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=eb563247aef3e83dda7679c43f9649270462e5b1',
-                'https://github.com/irsl/CVE-2020-1967',
-                'https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA44440',
-                'https://lists.apache.org/thread.html/r66ea9c436da150683432db5fbc8beb8ae01886c6459ac30c2cea7345%40%3Cdev.tomcat.apache.org%3E',
-                'https://lists.apache.org/thread.html/r66ea9c436da150683432db5fbc8beb8ae01886c6459ac30c2cea7345@%3Cdev.tomcat.apache.org%3E',
-                'https://lists.apache.org/thread.html/r94d6ac3f010a38fccf4f432b12180a13fa1cf303559bd805648c9064%40%3Cdev.tomcat.apache.org%3E',
-                'https://lists.apache.org/thread.html/r94d6ac3f010a38fccf4f432b12180a13fa1cf303559bd805648c9064@%3Cdev.tomcat.apache.org%3E',
-                'https://lists.apache.org/thread.html/r9a41e304992ce6aec6585a87842b4f2e692604f5c892c37e3b0587ee%40%3Cdev.tomcat.apache.org%3E',
-                'https://lists.apache.org/thread.html/r9a41e304992ce6aec6585a87842b4f2e692604f5c892c37e3b0587ee@%3Cdev.tomcat.apache.org%3E',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DDHOAATPWJCXRNFMJ2SASDBBNU5RJONY/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/EXDDAOWSAIEFQNBHWYE6PPYFV4QXGMCD/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/XVEP3LAK4JSPRXFO4QF4GG2IVXADV3SO/',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/DDHOAATPWJCXRNFMJ2SASDBBNU5RJONY',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/EXDDAOWSAIEFQNBHWYE6PPYFV4QXGMCD',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/XVEP3LAK4JSPRXFO4QF4GG2IVXADV3SO',
-                'https://nvd.nist.gov/vuln/detail/CVE-2020-1967',
-                'https://rustsec.org/advisories/RUSTSEC-2020-0015.html',
-                'https://security.FreeBSD.org/advisories/FreeBSD-SA-20:11.openssl.asc',
-                'https://security.gentoo.org/glsa/202004-10',
-                'https://security.netapp.com/advisory/ntap-20200424-0003',
-                'https://security.netapp.com/advisory/ntap-20200424-0003/',
-                'https://security.netapp.com/advisory/ntap-20200717-0004',
-                'https://security.netapp.com/advisory/ntap-20200717-0004/',
-                'https://www.cve.org/CVERecord?id=CVE-2020-1967',
-                'https://www.debian.org/security/2020/dsa-4661',
-                'https://www.openssl.org/news/secadv/20200421.txt',
-                'https://www.oracle.com//security-alerts/cpujul2021.html',
-                'https://www.oracle.com/security-alerts/cpuApr2021.html',
-                'https://www.oracle.com/security-alerts/cpujan2021.html',
-                'https://www.oracle.com/security-alerts/cpujul2020.html',
-                'https://www.oracle.com/security-alerts/cpuoct2020.html',
-                'https://www.oracle.com/security-alerts/cpuoct2021.html',
-                'https://www.synology.com/security/advisory/Synology_SA_20_05',
-                'https://www.synology.com/security/advisory/Synology_SA_20_05_OpenSSL',
-                'https://www.tenable.com/security/tns-2020-03',
-                'https://www.tenable.com/security/tns-2020-04',
-                'https://www.tenable.com/security/tns-2020-11',
-                'https://www.tenable.com/security/tns-2021-10'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: Segmentation fault in SSL_check_chain causes denial of service'
-            },
-            {
-              'cve':  'CVE-2021-23840',
-              'cvss': {
-                'bitnami': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'ghsa': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'nvd': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-190'
-              ],
-              'description':   'Calls to EVP_CipherUpdate, EVP_EncryptUpdate and EVP_DecryptUpdate may overflow the output length argument in some cases where the input length is close to the maximum permissable length for an integer on the platform. In such cases the return value from the function call will be 1 (indicating success), but the output length value will be negative. This could cause applications to behave incorrectly or crash. OpenSSL versions 1.1.1i and below are affected by this issue. Users of these versions should upgrade to OpenSSL 1.1.1j. OpenSSL versions 1.0.2x and below are affected by this issue. However OpenSSL 1.0.2 is out of support and no longer receiving public updates. Premium support customers of OpenSSL 1.0.2 should upgrade to 1.0.2y. Other users should upgrade to 1.1.1j. Fixed in OpenSSL 1.1.1j (Affected 1.1.1-1.1.1i). Fixed in OpenSSL 1.0.2y (Affected 1.0.2-1.0.2x).',
-              'diffID':        'sha256:cd69428324a611416b9db0ed8e3b0849901d5f0de855a18f094784b87ef19683',
-              'fixedVersions': [
-                '1.1.1j-r0'
-              ],
-              'installedVersion': '1.1.1d-r0',
-              'packageName':      'libssl1.1',
-              'purl':             'pkg:apk/alpine/libssl1.1@1.1.1d-r0?arch=x86&distro=3.10.3',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-23840',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=1908036',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=1930310',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=1930324',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=1934534',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=1934600',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=1939637',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=1940085',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=1965362',
-                'https://cert-portal.siemens.com/productcert/pdf/ssa-389290.pdf',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-23840',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-23841',
-                'https://errata.rockylinux.org/RLSA-2021:4424',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=6a51b9e1d0cf0bf8515f7201b68fb0a3482b3dc1',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=9b1129239f3ebb1d1c98ce9ed41d5c9476c47cb2',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=6a51b9e1d0cf0bf8515f7201b68fb0a3482b3dc1',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=9b1129239f3ebb1d1c98ce9ed41d5c9476c47cb2',
-                'https://github.com/alexcrichton/openssl-src-rs',
-                'https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA44846',
-                'https://kc.mcafee.com/corporate/index?page=content&id=SB10366',
-                'https://linux.oracle.com/cve/CVE-2021-23840.html',
-                'https://linux.oracle.com/errata/ELSA-2021-9561.html',
-                'https://lists.apache.org/thread.html/r58af02e294bd07f487e2c64ffc0a29b837db5600e33b6e698b9d696b%40%3Cissues.bookkeeper.apache.org%3E',
-                'https://lists.apache.org/thread.html/r58af02e294bd07f487e2c64ffc0a29b837db5600e33b6e698b9d696b@%3Cissues.bookkeeper.apache.org%3E',
-                'https://lists.apache.org/thread.html/rf4c02775860db415b4955778a131c2795223f61cb8c6a450893651e4%40%3Cissues.bookkeeper.apache.org%3E',
-                'https://lists.apache.org/thread.html/rf4c02775860db415b4955778a131c2795223f61cb8c6a450893651e4@%3Cissues.bookkeeper.apache.org%3E',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-23840',
-                'https://rustsec.org/advisories/RUSTSEC-2021-0057.html',
-                'https://security.gentoo.org/glsa/202103-03',
-                'https://security.netapp.com/advisory/ntap-20210219-0009',
-                'https://security.netapp.com/advisory/ntap-20210219-0009/',
-                'https://security.netapp.com/advisory/ntap-20240621-0006/',
-                'https://ubuntu.com/security/notices/USN-4738-1',
-                'https://ubuntu.com/security/notices/USN-5088-1',
-                'https://ubuntu.com/security/notices/USN-7018-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-23840',
-                'https://www.debian.org/security/2021/dsa-4855',
-                'https://www.openssl.org/news/secadv/20210216.txt',
-                'https://www.oracle.com//security-alerts/cpujul2021.html',
-                'https://www.oracle.com/security-alerts/cpuApr2021.html',
-                'https://www.oracle.com/security-alerts/cpuapr2022.html',
-                'https://www.oracle.com/security-alerts/cpujan2022.html',
-                'https://www.oracle.com/security-alerts/cpuoct2021.html',
-                'https://www.tenable.com/security/tns-2021-03',
-                'https://www.tenable.com/security/tns-2021-09',
-                'https://www.tenable.com/security/tns-2021-10'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: integer overflow in CipherUpdate'
-            },
-            {
-              'cve':  'CVE-2021-3450',
-              'cvss': {
-                'bitnami': {
-                  'v3score':  '7.4',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N'
-                },
-                'ghsa': {
-                  'v3score':  '7.4',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N'
-                },
-                'nvd': {
-                  'v3score':  '7.4',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N'
-                },
-                'redhat': {
-                  'v3score':  '7.4',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-295'
-              ],
-              'description':   'The X509_V_FLAG_X509_STRICT flag enables additional security checks of the certificates present in a certificate chain. It is not set by default. Starting from OpenSSL version 1.1.1h a check to disallow certificates in the chain that have explicitly encoded elliptic curve parameters was added as an additional strict check. An error in the implementation of this check meant that the result of a previous check to confirm that certificates in the chain are valid CA certificates was overwritten. This effectively bypasses the check that non-CA certificates must not be able to issue other certificates. If a "purpose" has been configured then there is a subsequent opportunity for checks that the certificate is a valid CA. All of the named "purpose" values implemented in libcrypto perform this check. Therefore, where a purpose is set the certificate chain will still be rejected even when the strict flag has been used. A purpose is set by default in libssl client and server certificate verification routines, but it can be overridden or removed by an application. In order to be affected, an application must explicitly set the X509_V_FLAG_X509_STRICT verification flag and either not set a purpose for the certificate verification or, in the case of TLS client or server applications, override the default purpose. OpenSSL versions 1.1.1h and newer are affected by this issue. Users of these versions should upgrade to OpenSSL 1.1.1k. OpenSSL 1.0.2 is not impacted by this issue. Fixed in OpenSSL 1.1.1k (Affected 1.1.1h-1.1.1j).',
-              'diffID':        'sha256:cd69428324a611416b9db0ed8e3b0849901d5f0de855a18f094784b87ef19683',
-              'fixedVersions': [
-                '1.1.1k-r0'
-              ],
-              'installedVersion': '1.1.1d-r0',
-              'packageName':      'libssl1.1',
-              'purl':             'pkg:apk/alpine/libssl1.1@1.1.1d-r0?arch=x86&distro=3.10.3',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2021/03/27/1',
-                'http://www.openwall.com/lists/oss-security/2021/03/27/2',
-                'http://www.openwall.com/lists/oss-security/2021/03/28/3',
-                'http://www.openwall.com/lists/oss-security/2021/03/28/4',
-                'https://access.redhat.com/security/cve/CVE-2021-3450',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=1941547',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=1941554',
-                'https://cert-portal.siemens.com/productcert/pdf/ssa-389290.pdf',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-3449',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-3450',
-                'https://errata.rockylinux.org/RLSA-2021:1024',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=2a40b7bc7b94dd7de897a74571e7024f0cf0d63b',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=2a40b7bc7b94dd7de897a74571e7024f0cf0d63b',
-                'https://github.com/alexcrichton/openssl-src-rs',
-                'https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA44845',
-                'https://kc.mcafee.com/corporate/index?page=content&id=SB10356',
-                'https://linux.oracle.com/cve/CVE-2021-3450.html',
-                'https://linux.oracle.com/errata/ELSA-2021-9151.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CCBFLLVQVILIVGZMBJL3IXZGKWQISYNP/',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/CCBFLLVQVILIVGZMBJL3IXZGKWQISYNP',
-                'https://mta.openssl.org/pipermail/openssl-announce/2021-March/000198.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-3450',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2021-0013',
-                'https://rustsec.org/advisories/RUSTSEC-2021-0056.html',
-                'https://security.FreeBSD.org/advisories/FreeBSD-SA-21:07.openssl.asc',
-                'https://security.gentoo.org/glsa/202103-03',
-                'https://security.netapp.com/advisory/ntap-20210326-0006',
-                'https://security.netapp.com/advisory/ntap-20210326-0006/',
-                'https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-openssl-2021-GHY28dJd',
-                'https://www.cve.org/CVERecord?id=CVE-2021-3450',
-                'https://www.openssl.org/news/secadv/20210325.txt',
-                'https://www.oracle.com//security-alerts/cpujul2021.html',
-                'https://www.oracle.com/security-alerts/cpuApr2021.html',
-                'https://www.oracle.com/security-alerts/cpuapr2022.html',
-                'https://www.oracle.com/security-alerts/cpujul2022.html',
-                'https://www.oracle.com/security-alerts/cpuoct2021.html',
-                'https://www.tenable.com/security/tns-2021-05',
-                'https://www.tenable.com/security/tns-2021-08',
-                'https://www.tenable.com/security/tns-2021-09'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: CA certificate check bypass with X509_V_FLAG_X509_STRICT'
-            },
-            {
-              'cve':  'CVE-2019-1551',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N'
-                },
-                'redhat': {
-                  'v3score':  '4.8',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-190'
-              ],
-              'description':   'There is an overflow bug in the x64_64 Montgomery squaring procedure used in exponentiation with 512-bit moduli. No EC algorithms are affected. Analysis suggests that attacks against 2-prime RSA1024, 3-prime RSA1536, and DSA1024 as a result of this defect would be very difficult to perform and are not believed likely. Attacks against DH512 are considered just feasible. However, for an attack the target would have to re-use the DH512 private key, which is not recommended anyway. Also applications directly using the low level API BN_mod_exp may be affected if they use BN_FLG_CONSTTIME. Fixed in OpenSSL 1.1.1e (Affected 1.1.1-1.1.1d). Fixed in OpenSSL 1.0.2u (Affected 1.0.2-1.0.2t).',
-              'diffID':        'sha256:cd69428324a611416b9db0ed8e3b0849901d5f0de855a18f094784b87ef19683',
-              'fixedVersions': [
-                '1.1.1d-r2'
-              ],
-              'installedVersion': '1.1.1d-r0',
-              'packageName':      'libssl1.1',
-              'purl':             'pkg:apk/alpine/libssl1.1@1.1.1d-r0?arch=x86&distro=3.10.3',
-              'references':       [
-                'http://lists.opensuse.org/opensuse-security-announce/2020-01/msg00030.html',
-                'http://packetstormsecurity.com/files/155754/Slackware-Security-Advisory-openssl-Updates.html',
-                'https://access.redhat.com/security/cve/CVE-2019-1551',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=419102400a2811582a7a3d4a4e317d72e5ce0a8f',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=f1c5eea8a817075d31e43f5876993c6710238c98',
-                'https://github.com/openssl/openssl/pull/10575',
-                'https://linux.oracle.com/cve/CVE-2019-1551.html',
-                'https://linux.oracle.com/errata/ELSA-2020-4514.html',
-                'https://lists.debian.org/debian-lts-announce/2022/03/msg00023.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DDHOAATPWJCXRNFMJ2SASDBBNU5RJONY/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/EXDDAOWSAIEFQNBHWYE6PPYFV4QXGMCD/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/XVEP3LAK4JSPRXFO4QF4GG2IVXADV3SO/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2019-1551',
-                'https://seclists.org/bugtraq/2019/Dec/39',
-                'https://seclists.org/bugtraq/2019/Dec/46',
-                'https://security.gentoo.org/glsa/202004-10',
-                'https://security.netapp.com/advisory/ntap-20191210-0001/',
-                'https://ubuntu.com/security/notices/USN-4376-1',
-                'https://ubuntu.com/security/notices/USN-4504-1',
-                'https://usn.ubuntu.com/4376-1/',
-                'https://usn.ubuntu.com/4504-1/',
-                'https://www.cve.org/CVERecord?id=CVE-2019-1551',
-                'https://www.debian.org/security/2019/dsa-4594',
-                'https://www.debian.org/security/2021/dsa-4855',
-                'https://www.openssl.org/news/secadv/20191206.txt',
-                'https://www.oracle.com/security-alerts/cpuApr2021.html',
-                'https://www.oracle.com/security-alerts/cpujan2021.html',
-                'https://www.oracle.com/security-alerts/cpujul2020.html',
-                'https://www.tenable.com/security/tns-2019-09',
-                'https://www.tenable.com/security/tns-2020-03',
-                'https://www.tenable.com/security/tns-2020-11',
-                'https://www.tenable.com/security/tns-2021-10'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: Integer overflow in RSAZ modular exponentiation on x86_64'
-            },
-            {
-              'cve':  'CVE-2020-1971',
-              'cvss': {
-                'bitnami': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'nvd': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-476'
-              ],
-              'description':   "The X.509 GeneralName type is a generic type for representing different types of names. One of those name types is known as EDIPartyName. OpenSSL provides a function GENERAL_NAME_cmp which compares different instances of a GENERAL_NAME to see if they are equal or not. This function behaves incorrectly when both GENERAL_NAMEs contain an EDIPARTYNAME. A NULL pointer dereference and a crash may occur leading to a possible denial of service attack. OpenSSL itself uses the GENERAL_NAME_cmp function for two purposes: 1) Comparing CRL distribution point names between an available CRL and a CRL distribution point embedded in an X509 certificate 2) When verifying that a timestamp response token signer matches the timestamp authority name (exposed via the API functions TS_RESP_verify_response and TS_RESP_verify_token) If an attacker can control both items being compared then that attacker could trigger a crash. For example if the attacker can trick a client or server into checking a malicious certificate against a malicious CRL then this may occur. Note that some applications automatically download CRLs based on a URL embedded in a certificate. This checking happens prior to the signatures on the certificate and CRL being verified. OpenSSL's s_server, s_client and verify tools have support for the \"-crl_download\" option which implements automatic CRL downloading and this attack has been demonstrated to work against those tools. Note that an unrelated bug means that affected versions of OpenSSL cannot parse or construct correct encodings of EDIPARTYNAME. However it is possible to construct a malformed EDIPARTYNAME that OpenSSL's parser will accept and hence trigger this attack. All OpenSSL 1.1.1 and 1.0.2 versions are affected by this issue. Other OpenSSL releases are out of support and have not been checked. Fixed in OpenSSL 1.1.1i (Affected 1.1.1-1.1.1h). Fixed in OpenSSL 1.0.2x (Affected 1.0.2-1.0.2w).",
-              'diffID':        'sha256:cd69428324a611416b9db0ed8e3b0849901d5f0de855a18f094784b87ef19683',
-              'fixedVersions': [
-                '1.1.1i-r0'
-              ],
-              'installedVersion': '1.1.1d-r0',
-              'packageName':      'libssl1.1',
-              'purl':             'pkg:apk/alpine/libssl1.1@1.1.1d-r0?arch=x86&distro=3.10.3',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2021/09/14/2',
-                'https://access.redhat.com/security/cve/CVE-2020-1971',
-                'https://cert-portal.siemens.com/productcert/pdf/ssa-389290.pdf',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=2154ab83e14ede338d2ede9bbe5cdfce5d5a6c9e',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=f960d81215ebf3f65e03d4d5d857fb9b666d6920',
-                'https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA44676',
-                'https://linux.oracle.com/cve/CVE-2020-1971.html',
-                'https://linux.oracle.com/errata/ELSA-2021-9150.html',
-                'https://lists.apache.org/thread.html/r63c6f2dd363d9b514d0a4bcf624580616a679898cc14c109a49b750c%40%3Cdev.tomcat.apache.org%3E',
-                'https://lists.apache.org/thread.html/rbb769f771711fb274e0a4acb1b5911c8aab544a6ac5e8c12d40c5143%40%3Ccommits.pulsar.apache.org%3E',
-                'https://lists.debian.org/debian-lts-announce/2020/12/msg00020.html',
-                'https://lists.debian.org/debian-lts-announce/2020/12/msg00021.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DGSI34Y5LQ5RYXN4M2I5ZQT65LFVDOUU/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PWPSSZNZOBJU2YR6Z4TGHXKYW3YP5QG7/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2020-1971',
-                'https://security.FreeBSD.org/advisories/FreeBSD-SA-20:33.openssl.asc',
-                'https://security.gentoo.org/glsa/202012-13',
-                'https://security.netapp.com/advisory/ntap-20201218-0005/',
-                'https://security.netapp.com/advisory/ntap-20210513-0002/',
-                'https://security.netapp.com/advisory/ntap-20240621-0006/',
-                'https://ubuntu.com/security/notices/USN-4662-1',
-                'https://ubuntu.com/security/notices/USN-4745-1',
-                'https://www.cve.org/CVERecord?id=CVE-2020-1971',
-                'https://www.debian.org/security/2020/dsa-4807',
-                'https://www.openssl.org/news/secadv/20201208.txt',
-                'https://www.oracle.com//security-alerts/cpujul2021.html',
-                'https://www.oracle.com/security-alerts/cpuApr2021.html',
-                'https://www.oracle.com/security-alerts/cpuapr2022.html',
-                'https://www.oracle.com/security-alerts/cpujan2021.html',
-                'https://www.oracle.com/security-alerts/cpuoct2021.html',
-                'https://www.tenable.com/security/tns-2020-11',
-                'https://www.tenable.com/security/tns-2021-09',
-                'https://www.tenable.com/security/tns-2021-10'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: EDIPARTYNAME NULL pointer de-reference'
-            },
-            {
-              'cve':  'CVE-2021-23841',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'nvd': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-476'
-              ],
-              'description':   'The OpenSSL public API function X509_issuer_and_serial_hash() attempts to create a unique hash value based on the issuer and serial number data contained within an X509 certificate. However it fails to correctly handle any errors that may occur while parsing the issuer field (which might occur if the issuer field is maliciously constructed). This may subsequently result in a NULL pointer deref and a crash leading to a potential denial of service attack. The function X509_issuer_and_serial_hash() is never directly called by OpenSSL itself so applications are only vulnerable if they use this function directly and they use it on certificates that may have been obtained from untrusted sources. OpenSSL versions 1.1.1i and below are affected by this issue. Users of these versions should upgrade to OpenSSL 1.1.1j. OpenSSL versions 1.0.2x and below are affected by this issue. However OpenSSL 1.0.2 is out of support and no longer receiving public updates. Premium support customers of OpenSSL 1.0.2 should upgrade to 1.0.2y. Other users should upgrade to 1.1.1j. Fixed in OpenSSL 1.1.1j (Affected 1.1.1-1.1.1i). Fixed in OpenSSL 1.0.2y (Affected 1.0.2-1.0.2x).',
-              'diffID':        'sha256:cd69428324a611416b9db0ed8e3b0849901d5f0de855a18f094784b87ef19683',
-              'fixedVersions': [
-                '1.1.1j-r0'
-              ],
-              'installedVersion': '1.1.1d-r0',
-              'packageName':      'libssl1.1',
-              'purl':             'pkg:apk/alpine/libssl1.1@1.1.1d-r0?arch=x86&distro=3.10.3',
-              'references':       [
-                'http://seclists.org/fulldisclosure/2021/May/67',
-                'http://seclists.org/fulldisclosure/2021/May/68',
-                'http://seclists.org/fulldisclosure/2021/May/70',
-                'https://access.redhat.com/security/cve/CVE-2021-23841',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=1908036',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=1930310',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=1930324',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=1934534',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=1934600',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=1939637',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=1940085',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=1965362',
-                'https://cert-portal.siemens.com/productcert/pdf/ssa-637483.pdf',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-23840',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-23841',
-                'https://errata.rockylinux.org/RLSA-2021:4424',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=122a19ab48091c657f7cb1fb3af9fc07bd557bbf',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=8252ee4d90f3f2004d3d0aeeed003ad49c9a7807',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=122a19ab48091c657f7cb1fb3af9fc07bd557bbf',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=6a51b9e1d0cf0bf8515f7201b68fb0a3482b3dc1',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=8252ee4d90f3f2004d3d0aeeed003ad49c9a7807',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=9b1129239f3ebb1d1c98ce9ed41d5c9476c47cb2',
-                'https://github.com/alexcrichton/openssl-src-rs',
-                'https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA44846',
-                'https://linux.oracle.com/cve/CVE-2021-23841.html',
-                'https://linux.oracle.com/errata/ELSA-2021-9561.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-23841',
-                'https://rustsec.org/advisories/RUSTSEC-2021-0058',
-                'https://rustsec.org/advisories/RUSTSEC-2021-0058.html',
-                'https://security.gentoo.org/glsa/202103-03',
-                'https://security.netapp.com/advisory/ntap-20210219-0009',
-                'https://security.netapp.com/advisory/ntap-20210219-0009/',
-                'https://security.netapp.com/advisory/ntap-20210513-0002',
-                'https://security.netapp.com/advisory/ntap-20210513-0002/',
-                'https://security.netapp.com/advisory/ntap-20240621-0006/',
-                'https://support.apple.com/kb/HT212528',
-                'https://support.apple.com/kb/HT212529',
-                'https://support.apple.com/kb/HT212534',
-                'https://ubuntu.com/security/notices/USN-4738-1',
-                'https://ubuntu.com/security/notices/USN-4745-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-23841',
-                'https://www.debian.org/security/2021/dsa-4855',
-                'https://www.openssl.org/news/secadv/20210216.txt',
-                'https://www.oracle.com//security-alerts/cpujul2021.html',
-                'https://www.oracle.com/security-alerts/cpuApr2021.html',
-                'https://www.oracle.com/security-alerts/cpuapr2022.html',
-                'https://www.oracle.com/security-alerts/cpuoct2021.html',
-                'https://www.tenable.com/security/tns-2021-03',
-                'https://www.tenable.com/security/tns-2021-09'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: NULL pointer dereference in X509_issuer_and_serial_hash()'
-            },
-            {
-              'cve':  'CVE-2021-3449',
-              'cvss': {
-                'bitnami': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'ghsa': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'nvd': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-476'
-              ],
-              'description':   'An OpenSSL TLS server may crash if sent a maliciously crafted renegotiation ClientHello message from a client. If a TLSv1.2 renegotiation ClientHello omits the signature_algorithms extension (where it was present in the initial ClientHello), but includes a signature_algorithms_cert extension then a NULL pointer dereference will result, leading to a crash and a denial of service attack. A server is only vulnerable if it has TLSv1.2 and renegotiation enabled (which is the default configuration). OpenSSL TLS clients are not impacted by this issue. All OpenSSL 1.1.1 versions are affected by this issue. Users of these versions should upgrade to OpenSSL 1.1.1k. OpenSSL 1.0.2 is not impacted by this issue. Fixed in OpenSSL 1.1.1k (Affected 1.1.1-1.1.1j).',
-              'diffID':        'sha256:cd69428324a611416b9db0ed8e3b0849901d5f0de855a18f094784b87ef19683',
-              'fixedVersions': [
-                '1.1.1k-r0'
-              ],
-              'installedVersion': '1.1.1d-r0',
-              'packageName':      'libssl1.1',
-              'purl':             'pkg:apk/alpine/libssl1.1@1.1.1d-r0?arch=x86&distro=3.10.3',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2021/03/27/1',
-                'http://www.openwall.com/lists/oss-security/2021/03/27/2',
-                'http://www.openwall.com/lists/oss-security/2021/03/28/3',
-                'http://www.openwall.com/lists/oss-security/2021/03/28/4',
-                'https://access.redhat.com/security/cve/CVE-2021-3449',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=1941547',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=1941554',
-                'https://cert-portal.siemens.com/productcert/pdf/ssa-389290.pdf',
-                'https://cert-portal.siemens.com/productcert/pdf/ssa-772220.pdf',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-3449',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-3450',
-                'https://errata.rockylinux.org/RLSA-2021:1024',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=fb9fa6b51defd48157eeb207f52181f735d96148',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=fb9fa6b51defd48157eeb207f52181f735d96148',
-                'https://github.com/alexcrichton/openssl-src-rs',
-                'https://github.com/nodejs/node/pull/38083',
-                'https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA44845',
-                'https://kc.mcafee.com/corporate/index?page=content&id=SB10356',
-                'https://linux.oracle.com/cve/CVE-2021-3449.html',
-                'https://linux.oracle.com/errata/ELSA-2021-9151.html',
-                'https://lists.debian.org/debian-lts-announce/2021/08/msg00029.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CCBFLLVQVILIVGZMBJL3IXZGKWQISYNP/',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/CCBFLLVQVILIVGZMBJL3IXZGKWQISYNP',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-3449',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2021-0013',
-                'https://rustsec.org/advisories/RUSTSEC-2021-0055',
-                'https://rustsec.org/advisories/RUSTSEC-2021-0055.html',
-                'https://security.FreeBSD.org/advisories/FreeBSD-SA-21:07.openssl.asc',
-                'https://security.gentoo.org/glsa/202103-03',
-                'https://security.netapp.com/advisory/ntap-20210326-0006',
-                'https://security.netapp.com/advisory/ntap-20210326-0006/',
-                'https://security.netapp.com/advisory/ntap-20210513-0002',
-                'https://security.netapp.com/advisory/ntap-20210513-0002/',
-                'https://security.netapp.com/advisory/ntap-20240621-0006/',
-                'https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-openssl-2021-GHY28dJd',
-                'https://ubuntu.com/security/notices/USN-4891-1',
-                'https://ubuntu.com/security/notices/USN-5038-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-3449',
-                'https://www.debian.org/security/2021/dsa-4875',
-                'https://www.openssl.org/news/secadv/20210325.txt',
-                'https://www.oracle.com//security-alerts/cpujul2021.html',
-                'https://www.oracle.com/security-alerts/cpuApr2021.html',
-                'https://www.oracle.com/security-alerts/cpuapr2022.html',
-                'https://www.oracle.com/security-alerts/cpujul2022.html',
-                'https://www.oracle.com/security-alerts/cpuoct2021.html',
-                'https://www.tenable.com/security/tns-2021-05',
-                'https://www.tenable.com/security/tns-2021-06',
-                'https://www.tenable.com/security/tns-2021-09',
-                'https://www.tenable.com/security/tns-2021-10'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: NULL pointer dereference in signature_algorithms processing'
-            },
-            {
-              'cve':  'CVE-2021-23839',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '3.7',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N'
-                },
-                'redhat': {
-                  'v3score':  '3.7',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-327'
-              ],
-              'description':   'OpenSSL 1.0.2 supports SSLv2. If a client attempts to negotiate SSLv2 with a server that is configured to support both SSLv2 and more recent SSL and TLS versions then a check is made for a version rollback attack when unpadding an RSA signature. Clients that support SSL or TLS versions greater than SSLv2 are supposed to use a special form of padding. A server that supports greater than SSLv2 is supposed to reject connection attempts from a client where this special form of padding is present, because this indicates that a version rollback has occurred (i.e. both client and server support greater than SSLv2, and yet this is the version that is being requested). The implementation of this padding check inverted the logic so that the connection attempt is accepted if the padding is present, and rejected if it is absent. This means that such as server will accept a connection if a version rollback attack has occurred. Further the server will erroneously reject a connection if a normal SSLv2 connection attempt is made. Only OpenSSL 1.0.2 servers from version 1.0.2s to 1.0.2x are affected by this issue. In order to be vulnerable a 1.0.2 server must: 1) have configured SSLv2 support at compile time (this is off by default), 2) have configured SSLv2 support at runtime (this is off by default), 3) have configured SSLv2 ciphersuites (these are not in the default ciphersuite list) OpenSSL 1.1.1 does not have SSLv2 support and therefore is not vulnerable to this issue. The underlying error is in the implementation of the RSA_padding_check_SSLv23() function. This also affects the RSA_SSLV23_PADDING padding mode used by various other functions. Although 1.1.1 does not support SSLv2 the RSA_padding_check_SSLv23() function still exists, as does the RSA_SSLV23_PADDING padding mode. Applications that directly call that function or use that padding mode will encounter this issue. However since there is no support for the SSLv2 protocol in 1.1.1 this is considered a bug and not a security issue in that version. OpenSSL 1.0.2 is out of support and no longer receiving public updates. Premium support customers of OpenSSL 1.0.2 should upgrade to 1.0.2y. Other users should upgrade to 1.1.1j. Fixed in OpenSSL 1.0.2y (Affected 1.0.2s-1.0.2x).',
-              'diffID':        'sha256:cd69428324a611416b9db0ed8e3b0849901d5f0de855a18f094784b87ef19683',
-              'fixedVersions': [
-                '1.1.1j-r0'
-              ],
-              'installedVersion': '1.1.1d-r0',
-              'packageName':      'libssl1.1',
-              'purl':             'pkg:apk/alpine/libssl1.1@1.1.1d-r0?arch=x86&distro=3.10.3',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-23839',
-                'https://cert-portal.siemens.com/productcert/pdf/ssa-637483.pdf',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=30919ab80a478f2d81f2e9acdcca3fa4740cd547',
-                'https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA44846',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-23839',
-                'https://security.netapp.com/advisory/ntap-20210219-0009/',
-                'https://security.netapp.com/advisory/ntap-20240621-0006/',
-                'https://www.cve.org/CVERecord?id=CVE-2021-23839',
-                'https://www.openssl.org/news/secadv/20210216.txt',
-                'https://www.oracle.com//security-alerts/cpujul2021.html',
-                'https://www.oracle.com/security-alerts/cpuApr2021.html',
-                'https://www.oracle.com/security-alerts/cpuapr2022.html',
-                'https://www.oracle.com/security-alerts/cpuoct2021.html'
-              ],
-              'severity':   'LOW',
-              'suppressed': false,
-              'title':      'openssl: incorrect SSLv2 rollback protection'
-            },
-            {
-              'cve':  'CVE-2020-28928',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.5',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-787'
-              ],
-              'description':   'In musl libc through 1.2.1, wcsnrtombs mishandles particular combinations of destination buffer size and source character limit, as demonstrated by an invalid write access (buffer overflow).',
-              'diffID':        'sha256:cd69428324a611416b9db0ed8e3b0849901d5f0de855a18f094784b87ef19683',
-              'fixedVersions': [
-                '1.1.22-r4'
-              ],
-              'installedVersion': '1.1.22-r3',
-              'packageName':      'musl',
-              'purl':             'pkg:apk/alpine/musl@1.1.22-r3?arch=x86&distro=3.10.3',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2020/11/20/4',
-                'https://lists.apache.org/thread.html/r2134abfe847bea7795f0e53756d10a47e6643f35ab8169df8b8a9eb1%40%3Cnotifications.apisix.apache.org%3E',
-                'https://lists.apache.org/thread.html/r90b60cf49348e515257b4950900c1bd3ab95a960cf2469d919c7264e%40%3Cnotifications.apisix.apache.org%3E',
-                'https://lists.apache.org/thread.html/ra63e8dc5137d952afc55dbbfa63be83304ecf842d1eab1ff3ebb29e2%40%3Cnotifications.apisix.apache.org%3E',
-                'https://lists.debian.org/debian-lts-announce/2020/11/msg00050.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LKQ3RVSMVZNZNO4D65W2CZZ4DMYFZN2Q/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UW27QVY7ERPTSGKS4KAWE5TU7EJWHKVQ/',
-                'https://musl.libc.org/releases.html',
-                'https://ubuntu.com/security/notices/USN-5990-1',
-                'https://www.cve.org/CVERecord?id=CVE-2020-28928',
-                'https://www.openwall.com/lists/oss-security/2020/11/20/4',
-                'https://www.oracle.com//security-alerts/cpujul2021.html',
-                'https://www.oracle.com/security-alerts/cpuoct2021.html'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'In musl libc through 1.2.1, wcsnrtombs mishandles particular combinati ...'
-            },
-            {
-              'cve':  'CVE-2020-28928',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.5',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-787'
-              ],
-              'description':   'In musl libc through 1.2.1, wcsnrtombs mishandles particular combinations of destination buffer size and source character limit, as demonstrated by an invalid write access (buffer overflow).',
-              'diffID':        'sha256:cd69428324a611416b9db0ed8e3b0849901d5f0de855a18f094784b87ef19683',
-              'fixedVersions': [
-                '1.1.22-r4'
-              ],
-              'installedVersion': '1.1.22-r3',
-              'packageName':      'musl-utils',
-              'purl':             'pkg:apk/alpine/musl-utils@1.1.22-r3?arch=x86&distro=3.10.3',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2020/11/20/4',
-                'https://lists.apache.org/thread.html/r2134abfe847bea7795f0e53756d10a47e6643f35ab8169df8b8a9eb1%40%3Cnotifications.apisix.apache.org%3E',
-                'https://lists.apache.org/thread.html/r90b60cf49348e515257b4950900c1bd3ab95a960cf2469d919c7264e%40%3Cnotifications.apisix.apache.org%3E',
-                'https://lists.apache.org/thread.html/ra63e8dc5137d952afc55dbbfa63be83304ecf842d1eab1ff3ebb29e2%40%3Cnotifications.apisix.apache.org%3E',
-                'https://lists.debian.org/debian-lts-announce/2020/11/msg00050.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LKQ3RVSMVZNZNO4D65W2CZZ4DMYFZN2Q/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UW27QVY7ERPTSGKS4KAWE5TU7EJWHKVQ/',
-                'https://musl.libc.org/releases.html',
-                'https://ubuntu.com/security/notices/USN-5990-1',
-                'https://www.cve.org/CVERecord?id=CVE-2020-28928',
-                'https://www.openwall.com/lists/oss-security/2020/11/20/4',
-                'https://www.oracle.com//security-alerts/cpujul2021.html',
-                'https://www.oracle.com/security-alerts/cpuoct2021.html'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'In musl libc through 1.2.1, wcsnrtombs mishandles particular combinati ...'
-            },
-            {
-              'cve':  'CVE-2021-28831',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-755'
-              ],
-              'description':   'decompress_gunzip.c in BusyBox through 1.32.1 mishandles the error bit on the huft_build result pointer, with a resultant invalid free or segmentation fault, via malformed gzip data.',
-              'diffID':        'sha256:cd69428324a611416b9db0ed8e3b0849901d5f0de855a18f094784b87ef19683',
-              'fixedVersions': [
-                '1.30.1-r5'
-              ],
-              'installedVersion': '1.30.1-r2',
-              'packageName':      'ssl_client',
-              'purl':             'pkg:apk/alpine/ssl_client@1.30.1-r2?arch=x86&distro=3.10.3',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-28831',
-                'https://git.busybox.net/busybox/commit/?id=f25d254dfd4243698c31a4f3153d4ac72aa9e9bd',
-                'https://lists.debian.org/debian-lts-announce/2021/04/msg00001.html',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/3UDQGJRECXFS5EZVDH2OI45FMO436AC4/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/Z7ZIFKPRR32ZYA3WAA2NXFA3QHHOU6FJ/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZASBW7QRRLY5V2R44MQ4QQM4CZIDHM2U/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-28831',
-                'https://security.gentoo.org/glsa/202105-09',
-                'https://security.netapp.com/advisory/ntap-20250509-0005/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://ubuntu.com/security/notices/USN-5179-2',
-                'https://ubuntu.com/security/notices/USN-6335-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-28831'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: invalid free or segmentation fault via malformed gzip data'
-            }
-          ]
-        }
-      ],
-      'summary': {
-        'critical':   1,
-        'high':       9,
-        'low':        2,
-        'medium':     10,
-        'suppressed': 0,
-        'unknown':    0
-      }
-    }
-  },
-  {
-    'id':    'default/df3dc4444d33f977b5570e2ffae49ee5adef1dafe6f9a20665f8509cf4f96cd7',
-    'type':  'storage.sbomscanner.kubewarden.io.vulnerabilityreport',
-    'links': {
-      'patch':  'https://localhost:8005/v1/storage.sbomscanner.kubewarden.io.vulnerabilityreports/default/df3dc4444d33f977b5570e2ffae49ee5adef1dafe6f9a20665f8509cf4f96cd7',
-      'remove': 'https://localhost:8005/v1/storage.sbomscanner.kubewarden.io.vulnerabilityreports/default/df3dc4444d33f977b5570e2ffae49ee5adef1dafe6f9a20665f8509cf4f96cd7',
-      'self':   'https://localhost:8005/v1/storage.sbomscanner.kubewarden.io.vulnerabilityreports/default/df3dc4444d33f977b5570e2ffae49ee5adef1dafe6f9a20665f8509cf4f96cd7',
-      'update': 'https://localhost:8005/v1/storage.sbomscanner.kubewarden.io.vulnerabilityreports/default/df3dc4444d33f977b5570e2ffae49ee5adef1dafe6f9a20665f8509cf4f96cd7',
-      'view':   'https://localhost:8005/apis/storage.sbomscanner.kubewarden.io/v1alpha1/namespaces/default/vulnerabilityreports/df3dc4444d33f977b5570e2ffae49ee5adef1dafe6f9a20665f8509cf4f96cd7'
-    },
-    'apiVersion':    'storage.sbomscanner.kubewarden.io/v1alpha1',
-    'imageMetadata': {
-      'digest':      'sha256:fb28db57eff4a87917c5c83325a1ca62adce670a3f6e1da50a3387211d72ba96',
-      'platform':    'linux/arm/v6',
-      'registry':    'lsong-demo1',
-      'registryURI': 'registry-1.docker.io',
-      'repository':  'library/alpine',
-      'tag':         '3.13.6'
-    },
-    'kind':     'VulnerabilityReport',
-    'metadata': {
-      'creationTimestamp': '2026-01-14T18:51:17Z',
-      'fields':            [
-        'df3dc4444d33f977b5570e2ffae49ee5adef1dafe6f9a20665f8509cf4f96cd7',
-        'registry-1.docker.io/library/alpine:3.13.6',
-        'linux/arm/v6',
-        '32 (0 suppressed)'
-      ],
-      'labels': {
-        'app.kubernetes.io/managed-by':          'sbomscanner',
-        'app.kubernetes.io/part-of':             'sbomscanner',
-        'sbomscanner.kubewarden.io/scanjob-uid': '445c600a-c4b6-40b3-bd71-f2d2140a37d5'
-      },
-      'name':            'df3dc4444d33f977b5570e2ffae49ee5adef1dafe6f9a20665f8509cf4f96cd7',
-      'namespace':       'default',
-      'ownerReferences': [
-        {
-          'apiVersion':         'storage.sbomscanner.kubewarden.io/v1alpha1',
-          'blockOwnerDeletion': true,
-          'controller':         true,
-          'kind':               'SBOM',
-          'name':               'df3dc4444d33f977b5570e2ffae49ee5adef1dafe6f9a20665f8509cf4f96cd7',
-          'uid':                '0d257065-7730-40ff-809d-e174f9165aad'
-        }
-      ],
-      'relationships': [
-        {
-          'fromId':   'default/df3dc4444d33f977b5570e2ffae49ee5adef1dafe6f9a20665f8509cf4f96cd7',
-          'fromType': 'storage.sbomscanner.kubewarden.io.sbom',
-          'rel':      'owner',
-          'state':    'active',
-          'message':  'Resource is current'
-        }
-      ],
-      'resourceVersion': '1',
-      'state':           {
-        'error':         false,
-        'message':       'Resource is current',
-        'name':          'active',
-        'transitioning': false
-      },
-      'uid': '95d49368-0ca7-4ee3-b0fe-e3614741d693'
-    },
-    'report': {
-      'results': [
-        {
-          'class':           'os-pkgs',
-          'target':          '/var/run/worker/trivy.sbom.4030325155.json (alpine 3.13.6)',
-          'type':            'alpine',
-          'vulnerabilities': [
-            {
-              'cve':  'CVE-2021-42378',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the getvar_i function",
-              'diffID':        'sha256:1fe762541cd71a8f8edda7ef8237e9134d34bee39d51f61d1fd4f18992c16d50',
-              'fixedVersions': [
-                '1.32.1-r7'
-              ],
-              'installedVersion': '1.32.1-r6',
-              'packageName':      'busybox',
-              'purl':             'pkg:apk/alpine/busybox@1.32.1-r6?arch=armhf&distro=3.13.6',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42378',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42378',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42378'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the getvar_i()'
-            },
-            {
-              'cve':  'CVE-2021-42379',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the next_input_file function",
-              'diffID':        'sha256:1fe762541cd71a8f8edda7ef8237e9134d34bee39d51f61d1fd4f18992c16d50',
-              'fixedVersions': [
-                '1.32.1-r7'
-              ],
-              'installedVersion': '1.32.1-r6',
-              'packageName':      'busybox',
-              'purl':             'pkg:apk/alpine/busybox@1.32.1-r6?arch=armhf&distro=3.13.6',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42379',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42379',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42379'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the next_input_file()'
-            },
-            {
-              'cve':  'CVE-2021-42380',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the clrvar function",
-              'diffID':        'sha256:1fe762541cd71a8f8edda7ef8237e9134d34bee39d51f61d1fd4f18992c16d50',
-              'fixedVersions': [
-                '1.32.1-r7'
-              ],
-              'installedVersion': '1.32.1-r6',
-              'packageName':      'busybox',
-              'purl':             'pkg:apk/alpine/busybox@1.32.1-r6?arch=armhf&distro=3.13.6',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42380',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42380',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42380'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the clrvar()'
-            },
-            {
-              'cve':  'CVE-2021-42381',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the hash_init function",
-              'diffID':        'sha256:1fe762541cd71a8f8edda7ef8237e9134d34bee39d51f61d1fd4f18992c16d50',
-              'fixedVersions': [
-                '1.32.1-r7'
-              ],
-              'installedVersion': '1.32.1-r6',
-              'packageName':      'busybox',
-              'purl':             'pkg:apk/alpine/busybox@1.32.1-r6?arch=armhf&distro=3.13.6',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42381',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42381',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42381'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the hash_init()'
-            },
-            {
-              'cve':  'CVE-2021-42382',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the getvar_s function",
-              'diffID':        'sha256:1fe762541cd71a8f8edda7ef8237e9134d34bee39d51f61d1fd4f18992c16d50',
-              'fixedVersions': [
-                '1.32.1-r7'
-              ],
-              'installedVersion': '1.32.1-r6',
-              'packageName':      'busybox',
-              'purl':             'pkg:apk/alpine/busybox@1.32.1-r6?arch=armhf&distro=3.13.6',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42382',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42382',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42382'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the getvar_s()'
-            },
-            {
-              'cve':  'CVE-2021-42383',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the evaluate function",
-              'diffID':        'sha256:1fe762541cd71a8f8edda7ef8237e9134d34bee39d51f61d1fd4f18992c16d50',
-              'fixedVersions': [
-                '1.32.1-r7'
-              ],
-              'installedVersion': '1.32.1-r6',
-              'packageName':      'busybox',
-              'purl':             'pkg:apk/alpine/busybox@1.32.1-r6?arch=armhf&distro=3.13.6',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42383',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42383',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42383'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the evaluate()'
-            },
-            {
-              'cve':  'CVE-2021-42384',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the handle_special function",
-              'diffID':        'sha256:1fe762541cd71a8f8edda7ef8237e9134d34bee39d51f61d1fd4f18992c16d50',
-              'fixedVersions': [
-                '1.32.1-r7'
-              ],
-              'installedVersion': '1.32.1-r6',
-              'packageName':      'busybox',
-              'purl':             'pkg:apk/alpine/busybox@1.32.1-r6?arch=armhf&distro=3.13.6',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42384',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42384',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42384'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the handle_special()'
-            },
-            {
-              'cve':  'CVE-2021-42385',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the evaluate function",
-              'diffID':        'sha256:1fe762541cd71a8f8edda7ef8237e9134d34bee39d51f61d1fd4f18992c16d50',
-              'fixedVersions': [
-                '1.32.1-r7'
-              ],
-              'installedVersion': '1.32.1-r6',
-              'packageName':      'busybox',
-              'purl':             'pkg:apk/alpine/busybox@1.32.1-r6?arch=armhf&distro=3.13.6',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42385',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42385',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42385'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the evaluate()'
-            },
-            {
-              'cve':  'CVE-2021-42386',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the nvalloc function",
-              'diffID':        'sha256:1fe762541cd71a8f8edda7ef8237e9134d34bee39d51f61d1fd4f18992c16d50',
-              'fixedVersions': [
-                '1.32.1-r7'
-              ],
-              'installedVersion': '1.32.1-r6',
-              'packageName':      'busybox',
-              'purl':             'pkg:apk/alpine/busybox@1.32.1-r6?arch=armhf&distro=3.13.6',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42386',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42386',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42386'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the nvalloc()'
-            },
-            {
-              'cve':  'CVE-2022-28391',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '8.8',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-88'
-              ],
-              'description':   "BusyBox through 1.35.0 allows remote attackers to execute arbitrary code if netstat is used to print a DNS PTR record's value to a VT compatible terminal. Alternatively, the attacker could choose to change the terminal's colors.",
-              'diffID':        'sha256:1fe762541cd71a8f8edda7ef8237e9134d34bee39d51f61d1fd4f18992c16d50',
-              'fixedVersions': [
-                '1.32.1-r8'
-              ],
-              'installedVersion': '1.32.1-r6',
-              'packageName':      'busybox',
-              'purl':             'pkg:apk/alpine/busybox@1.32.1-r6?arch=armhf&distro=3.13.6',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2022-28391',
-                'https://git.alpinelinux.org/aports/plain/main/busybox/0001-libbb-sockaddr2str-ensure-only-printable-characters-.patch',
-                'https://git.alpinelinux.org/aports/plain/main/busybox/0002-nslookup-sanitize-all-printed-strings-with-printable.patch',
-                'https://gitlab.alpinelinux.org/alpine/aports/-/issues/13661',
-                'https://nvd.nist.gov/vuln/detail/CVE-2022-28391',
-                'https://www.cve.org/CVERecord?id=CVE-2022-28391'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: remote attackers may execute arbitrary code if netstat is used'
-            },
-            {
-              'cve':  'CVE-2022-30065',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.8',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.2',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox 1.35-x's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the copyvar function.",
-              'diffID':        'sha256:1fe762541cd71a8f8edda7ef8237e9134d34bee39d51f61d1fd4f18992c16d50',
-              'fixedVersions': [
-                '1.32.1-r9'
-              ],
-              'installedVersion': '1.32.1-r6',
-              'packageName':      'busybox',
-              'purl':             'pkg:apk/alpine/busybox@1.32.1-r6?arch=armhf&distro=3.13.6',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2022-30065',
-                'https://bugs.busybox.net/show_bug.cgi?id=14781',
-                'https://cert-portal.siemens.com/productcert/pdf/ssa-333517.pdf',
-                'https://nvd.nist.gov/vuln/detail/CVE-2022-30065',
-                'https://www.cve.org/CVERecord?id=CVE-2022-30065'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      "busybox: A use-after-free in Busybox's awk applet leads to denial of service"
-            },
-            {
-              'cve':  'CVE-2021-42374',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '5.7',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-125'
-              ],
-              'description':   "An out-of-bounds heap read in Busybox's unlzma applet leads to information leak and denial of service when crafted LZMA-compressed input is decompressed. This can be triggered by any applet/format that",
-              'diffID':        'sha256:1fe762541cd71a8f8edda7ef8237e9134d34bee39d51f61d1fd4f18992c16d50',
-              'fixedVersions': [
-                '1.32.1-r7'
-              ],
-              'installedVersion': '1.32.1-r6',
-              'packageName':      'busybox',
-              'purl':             'pkg:apk/alpine/busybox@1.32.1-r6?arch=armhf&distro=3.13.6',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42374',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42374',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42374'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'busybox: out-of-bounds read in unlzma applet leads to information leak and denial of service when crafted LZMA-compressed input is decompressed'
-            },
-            {
-              'cve':  'CVE-2021-42375',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.5',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '4.1',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-159'
-              ],
-              'description':   "An incorrect handling of a special element in Busybox's ash applet leads to denial of service when processing a crafted shell command, due to the shell mistaking specific characters for reserved characters. This may be used for DoS under rare conditions of filtered command input.",
-              'diffID':        'sha256:1fe762541cd71a8f8edda7ef8237e9134d34bee39d51f61d1fd4f18992c16d50',
-              'fixedVersions': [
-                '1.32.1-r7'
-              ],
-              'installedVersion': '1.32.1-r6',
-              'packageName':      'busybox',
-              'purl':             'pkg:apk/alpine/busybox@1.32.1-r6?arch=armhf&distro=3.13.6',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42375',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42375',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42375'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'busybox: incorrect handling of a special element in ash applet leads to denial of service when processing a crafted shell command'
-            },
-            {
-              'cve':  'CVE-2022-0778',
-              'cvss': {
-                'bitnami': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'ghsa': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'nvd': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-835'
-              ],
-              'description':   'The BN_mod_sqrt() function, which computes a modular square root, contains a bug that can cause it to loop forever for non-prime moduli. Internally this function is used when parsing certificates that contain elliptic curve public keys in compressed form or explicit elliptic curve parameters with a base point encoded in compressed form. It is possible to trigger the infinite loop by crafting a certificate that has invalid explicit curve parameters. Since certificate parsing happens prior to verification of the certificate signature, any process that parses an externally supplied certificate may thus be subject to a denial of service attack. The infinite loop can also be reached when parsing crafted private keys as they can contain explicit elliptic curve parameters. Thus vulnerable situations include: - TLS clients consuming server certificates - TLS servers consuming client certificates - Hosting providers taking certificates or private keys from customers - Certificate authorities parsing certification requests from subscribers - Anything else which parses ASN.1 elliptic curve parameters Also any other applications that use the BN_mod_sqrt() where the attacker can control the parameter values are vulnerable to this DoS issue. In the OpenSSL 1.0.2 version the public key is not parsed during initial parsing of the certificate which makes it slightly harder to trigger the infinite loop. However any operation which requires the public key from the certificate will trigger the infinite loop. In particular the attacker can use a self-signed certificate to trigger the loop during verification of the certificate signature. This issue affects OpenSSL versions 1.0.2, 1.1.1 and 3.0. It was addressed in the releases of 1.1.1n and 3.0.2 on the 15th March 2022. Fixed in OpenSSL 3.0.2 (Affected 3.0.0,3.0.1). Fixed in OpenSSL 1.1.1n (Affected 1.1.1-1.1.1m). Fixed in OpenSSL 1.0.2zd (Affected 1.0.2-1.0.2zc).',
-              'diffID':        'sha256:1fe762541cd71a8f8edda7ef8237e9134d34bee39d51f61d1fd4f18992c16d50',
-              'fixedVersions': [
-                '1.1.1n-r0'
-              ],
-              'installedVersion': '1.1.1l-r0',
-              'packageName':      'libcrypto1.1',
-              'purl':             'pkg:apk/alpine/libcrypto1.1@1.1.1l-r0?arch=armhf&distro=3.13.6',
-              'references':       [
-                'http://packetstormsecurity.com/files/167344/OpenSSL-1.0.2-1.1.1-3.0-BN_mod_sqrt-Infinite-Loop.html',
-                'http://seclists.org/fulldisclosure/2022/May/33',
-                'http://seclists.org/fulldisclosure/2022/May/35',
-                'http://seclists.org/fulldisclosure/2022/May/38',
-                'https://access.redhat.com/errata/RHSA-2022:5326',
-                'https://access.redhat.com/security/cve/CVE-2022-0778',
-                'https://bugzilla.redhat.com/2062202',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2062202',
-                'https://cert-portal.siemens.com/productcert/pdf/ssa-712929.pdf',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-0778',
-                'https://errata.almalinux.org/8/ALSA-2022-5326.html',
-                'https://errata.rockylinux.org/RLSA-2022:4899',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=3118eb64934499d93db3230748a452351d1d9a65',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=380085481c64de749a6dd25cdf0bcf4360b30f83',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=a466912611aa6cbdf550cd10601390e587451246',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=3118eb64934499d93db3230748a452351d1d9a65',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=380085481c64de749a6dd25cdf0bcf4360b30f83',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=a466912611aa6cbdf550cd10601390e587451246',
-                'https://linux.oracle.com/cve/CVE-2022-0778.html',
-                'https://linux.oracle.com/errata/ELSA-2022-9272.html',
-                'https://lists.debian.org/debian-lts-announce/2022/03/msg00023.html',
-                'https://lists.debian.org/debian-lts-announce/2022/03/msg00024.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/323SNN6ZX7PRJJWP2BUAFLPUAE42XWLZ',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/323SNN6ZX7PRJJWP2BUAFLPUAE42XWLZ/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GDB3GQVJPXJE7X5C5JN6JAA4XUDWD6E6',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GDB3GQVJPXJE7X5C5JN6JAA4XUDWD6E6/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/W6K3PR542DXWLEFFMFIDMME4CWMHJRMG',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/W6K3PR542DXWLEFFMFIDMME4CWMHJRMG/',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/323SNN6ZX7PRJJWP2BUAFLPUAE42XWLZ',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/GDB3GQVJPXJE7X5C5JN6JAA4XUDWD6E6',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/W6K3PR542DXWLEFFMFIDMME4CWMHJRMG',
-                'https://nvd.nist.gov/vuln/detail/CVE-2022-0778',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2022-0002',
-                'https://rustsec.org/advisories/RUSTSEC-2022-0014.html',
-                'https://security.gentoo.org/glsa/202210-02',
-                'https://security.netapp.com/advisory/ntap-20220321-0002',
-                'https://security.netapp.com/advisory/ntap-20220321-0002/',
-                'https://security.netapp.com/advisory/ntap-20220429-0005',
-                'https://security.netapp.com/advisory/ntap-20220429-0005/',
-                'https://security.netapp.com/advisory/ntap-20240621-0006',
-                'https://security.netapp.com/advisory/ntap-20240621-0006/',
-                'https://support.apple.com/kb/HT213255',
-                'https://support.apple.com/kb/HT213256',
-                'https://support.apple.com/kb/HT213257',
-                'https://ubuntu.com/security/notices/USN-5328-1',
-                'https://ubuntu.com/security/notices/USN-5328-2',
-                'https://ubuntu.com/security/notices/USN-6457-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2022-0778',
-                'https://www.debian.org/security/2022/dsa-5103',
-                'https://www.openssl.org/news/secadv/20220315.txt',
-                'https://www.oracle.com/security-alerts/cpuapr2022.html',
-                'https://www.oracle.com/security-alerts/cpujul2022.html',
-                'https://www.tenable.com/security/tns-2022-06',
-                'https://www.tenable.com/security/tns-2022-07',
-                'https://www.tenable.com/security/tns-2022-08',
-                'https://www.tenable.com/security/tns-2022-09'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: Infinite loop in BN_mod_sqrt() reachable when parsing certificates'
-            },
-            {
-              'cve':  'CVE-2022-2097',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N'
-                },
-                'nvd': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N'
-                },
-                'redhat': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-327'
-              ],
-              'description':   "AES OCB mode for 32-bit x86 platforms using the AES-NI assembly optimised implementation will not encrypt the entirety of the data under some circumstances. This could reveal sixteen bytes of data that was preexisting in the memory that wasn't written. In the special case of \"in place\" encryption, sixteen bytes of the plaintext would be revealed. Since OpenSSL does not support OCB based cipher suites for TLS and DTLS, they are both unaffected. Fixed in OpenSSL 3.0.5 (Affected 3.0.0-3.0.4). Fixed in OpenSSL 1.1.1q (Affected 1.1.1-1.1.1p).",
-              'diffID':        'sha256:1fe762541cd71a8f8edda7ef8237e9134d34bee39d51f61d1fd4f18992c16d50',
-              'fixedVersions': [
-                '1.1.1q-r0'
-              ],
-              'installedVersion': '1.1.1l-r0',
-              'packageName':      'libcrypto1.1',
-              'purl':             'pkg:apk/alpine/libcrypto1.1@1.1.1l-r0?arch=armhf&distro=3.13.6',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2022:6224',
-                'https://access.redhat.com/security/cve/CVE-2022-2097',
-                'https://bugzilla.redhat.com/2081494',
-                'https://bugzilla.redhat.com/2087911',
-                'https://bugzilla.redhat.com/2087913',
-                'https://bugzilla.redhat.com/2097310',
-                'https://bugzilla.redhat.com/2104905',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2081494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2097310',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2100554',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2104905',
-                'https://cert-portal.siemens.com/productcert/pdf/ssa-332410.pdf',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-1292',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-2068',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-2097',
-                'https://errata.almalinux.org/9/ALSA-2022-6224.html',
-                'https://errata.rockylinux.org/RLSA-2022:5818',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=919925673d6c9cfed3c1085497f5dfbbed5fc431',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=a98f339ddd7e8f487d6e0088d4a9a42324885a93',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=919925673d6c9cfed3c1085497f5dfbbed5fc431',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=a98f339ddd7e8f487d6e0088d4a9a42324885a93',
-                'https://github.com/alexcrichton/openssl-src-rs',
-                'https://linux.oracle.com/cve/CVE-2022-2097.html',
-                'https://linux.oracle.com/errata/ELSA-2022-9955.html',
-                'https://lists.debian.org/debian-lts-announce/2023/02/msg00019.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/R6CK57NBQFTPUMXAPJURCGXUYT76NQAK',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/R6CK57NBQFTPUMXAPJURCGXUYT76NQAK/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/V6567JERRHHJW2GNGJGKDRNHR7SNPZK7',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/V6567JERRHHJW2GNGJGKDRNHR7SNPZK7/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VCMNWKERPBKOEBNL7CLTTX3ZZCZLH7XA',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VCMNWKERPBKOEBNL7CLTTX3ZZCZLH7XA/',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/R6CK57NBQFTPUMXAPJURCGXUYT76NQAK',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/R6CK57NBQFTPUMXAPJURCGXUYT76NQAK/',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/V6567JERRHHJW2GNGJGKDRNHR7SNPZK7',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/V6567JERRHHJW2GNGJGKDRNHR7SNPZK7/',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/VCMNWKERPBKOEBNL7CLTTX3ZZCZLH7XA',
-                'https://nvd.nist.gov/vuln/detail/CVE-2022-2097',
-                'https://rustsec.org/advisories/RUSTSEC-2022-0032.html',
-                'https://security.gentoo.org/glsa/202210-02',
-                'https://security.netapp.com/advisory/ntap-20220715-0011',
-                'https://security.netapp.com/advisory/ntap-20220715-0011/',
-                'https://security.netapp.com/advisory/ntap-20230420-0008',
-                'https://security.netapp.com/advisory/ntap-20230420-0008/',
-                'https://security.netapp.com/advisory/ntap-20240621-0006',
-                'https://security.netapp.com/advisory/ntap-20240621-0006/',
-                'https://ubuntu.com/security/notices/USN-5502-1',
-                'https://ubuntu.com/security/notices/USN-6457-1',
-                'https://www.cve.org/CVERecord?id=CVE-2022-2097',
-                'https://www.debian.org/security/2023/dsa-5343',
-                'https://www.openssl.org/news/secadv/20220705.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: AES OCB fails to encrypt some bytes'
-            },
-            {
-              'cve':  'CVE-2022-0778',
-              'cvss': {
-                'bitnami': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'ghsa': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'nvd': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-835'
-              ],
-              'description':   'The BN_mod_sqrt() function, which computes a modular square root, contains a bug that can cause it to loop forever for non-prime moduli. Internally this function is used when parsing certificates that contain elliptic curve public keys in compressed form or explicit elliptic curve parameters with a base point encoded in compressed form. It is possible to trigger the infinite loop by crafting a certificate that has invalid explicit curve parameters. Since certificate parsing happens prior to verification of the certificate signature, any process that parses an externally supplied certificate may thus be subject to a denial of service attack. The infinite loop can also be reached when parsing crafted private keys as they can contain explicit elliptic curve parameters. Thus vulnerable situations include: - TLS clients consuming server certificates - TLS servers consuming client certificates - Hosting providers taking certificates or private keys from customers - Certificate authorities parsing certification requests from subscribers - Anything else which parses ASN.1 elliptic curve parameters Also any other applications that use the BN_mod_sqrt() where the attacker can control the parameter values are vulnerable to this DoS issue. In the OpenSSL 1.0.2 version the public key is not parsed during initial parsing of the certificate which makes it slightly harder to trigger the infinite loop. However any operation which requires the public key from the certificate will trigger the infinite loop. In particular the attacker can use a self-signed certificate to trigger the loop during verification of the certificate signature. This issue affects OpenSSL versions 1.0.2, 1.1.1 and 3.0. It was addressed in the releases of 1.1.1n and 3.0.2 on the 15th March 2022. Fixed in OpenSSL 3.0.2 (Affected 3.0.0,3.0.1). Fixed in OpenSSL 1.1.1n (Affected 1.1.1-1.1.1m). Fixed in OpenSSL 1.0.2zd (Affected 1.0.2-1.0.2zc).',
-              'diffID':        'sha256:1fe762541cd71a8f8edda7ef8237e9134d34bee39d51f61d1fd4f18992c16d50',
-              'fixedVersions': [
-                '1.1.1n-r0'
-              ],
-              'installedVersion': '1.1.1l-r0',
-              'packageName':      'libssl1.1',
-              'purl':             'pkg:apk/alpine/libssl1.1@1.1.1l-r0?arch=armhf&distro=3.13.6',
-              'references':       [
-                'http://packetstormsecurity.com/files/167344/OpenSSL-1.0.2-1.1.1-3.0-BN_mod_sqrt-Infinite-Loop.html',
-                'http://seclists.org/fulldisclosure/2022/May/33',
-                'http://seclists.org/fulldisclosure/2022/May/35',
-                'http://seclists.org/fulldisclosure/2022/May/38',
-                'https://access.redhat.com/errata/RHSA-2022:5326',
-                'https://access.redhat.com/security/cve/CVE-2022-0778',
-                'https://bugzilla.redhat.com/2062202',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2062202',
-                'https://cert-portal.siemens.com/productcert/pdf/ssa-712929.pdf',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-0778',
-                'https://errata.almalinux.org/8/ALSA-2022-5326.html',
-                'https://errata.rockylinux.org/RLSA-2022:4899',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=3118eb64934499d93db3230748a452351d1d9a65',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=380085481c64de749a6dd25cdf0bcf4360b30f83',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=a466912611aa6cbdf550cd10601390e587451246',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=3118eb64934499d93db3230748a452351d1d9a65',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=380085481c64de749a6dd25cdf0bcf4360b30f83',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=a466912611aa6cbdf550cd10601390e587451246',
-                'https://linux.oracle.com/cve/CVE-2022-0778.html',
-                'https://linux.oracle.com/errata/ELSA-2022-9272.html',
-                'https://lists.debian.org/debian-lts-announce/2022/03/msg00023.html',
-                'https://lists.debian.org/debian-lts-announce/2022/03/msg00024.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/323SNN6ZX7PRJJWP2BUAFLPUAE42XWLZ',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/323SNN6ZX7PRJJWP2BUAFLPUAE42XWLZ/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GDB3GQVJPXJE7X5C5JN6JAA4XUDWD6E6',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GDB3GQVJPXJE7X5C5JN6JAA4XUDWD6E6/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/W6K3PR542DXWLEFFMFIDMME4CWMHJRMG',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/W6K3PR542DXWLEFFMFIDMME4CWMHJRMG/',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/323SNN6ZX7PRJJWP2BUAFLPUAE42XWLZ',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/GDB3GQVJPXJE7X5C5JN6JAA4XUDWD6E6',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/W6K3PR542DXWLEFFMFIDMME4CWMHJRMG',
-                'https://nvd.nist.gov/vuln/detail/CVE-2022-0778',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2022-0002',
-                'https://rustsec.org/advisories/RUSTSEC-2022-0014.html',
-                'https://security.gentoo.org/glsa/202210-02',
-                'https://security.netapp.com/advisory/ntap-20220321-0002',
-                'https://security.netapp.com/advisory/ntap-20220321-0002/',
-                'https://security.netapp.com/advisory/ntap-20220429-0005',
-                'https://security.netapp.com/advisory/ntap-20220429-0005/',
-                'https://security.netapp.com/advisory/ntap-20240621-0006',
-                'https://security.netapp.com/advisory/ntap-20240621-0006/',
-                'https://support.apple.com/kb/HT213255',
-                'https://support.apple.com/kb/HT213256',
-                'https://support.apple.com/kb/HT213257',
-                'https://ubuntu.com/security/notices/USN-5328-1',
-                'https://ubuntu.com/security/notices/USN-5328-2',
-                'https://ubuntu.com/security/notices/USN-6457-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2022-0778',
-                'https://www.debian.org/security/2022/dsa-5103',
-                'https://www.openssl.org/news/secadv/20220315.txt',
-                'https://www.oracle.com/security-alerts/cpuapr2022.html',
-                'https://www.oracle.com/security-alerts/cpujul2022.html',
-                'https://www.tenable.com/security/tns-2022-06',
-                'https://www.tenable.com/security/tns-2022-07',
-                'https://www.tenable.com/security/tns-2022-08',
-                'https://www.tenable.com/security/tns-2022-09'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: Infinite loop in BN_mod_sqrt() reachable when parsing certificates'
-            },
-            {
-              'cve':  'CVE-2022-2097',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N'
-                },
-                'nvd': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N'
-                },
-                'redhat': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-327'
-              ],
-              'description':   "AES OCB mode for 32-bit x86 platforms using the AES-NI assembly optimised implementation will not encrypt the entirety of the data under some circumstances. This could reveal sixteen bytes of data that was preexisting in the memory that wasn't written. In the special case of \"in place\" encryption, sixteen bytes of the plaintext would be revealed. Since OpenSSL does not support OCB based cipher suites for TLS and DTLS, they are both unaffected. Fixed in OpenSSL 3.0.5 (Affected 3.0.0-3.0.4). Fixed in OpenSSL 1.1.1q (Affected 1.1.1-1.1.1p).",
-              'diffID':        'sha256:1fe762541cd71a8f8edda7ef8237e9134d34bee39d51f61d1fd4f18992c16d50',
-              'fixedVersions': [
-                '1.1.1q-r0'
-              ],
-              'installedVersion': '1.1.1l-r0',
-              'packageName':      'libssl1.1',
-              'purl':             'pkg:apk/alpine/libssl1.1@1.1.1l-r0?arch=armhf&distro=3.13.6',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2022:6224',
-                'https://access.redhat.com/security/cve/CVE-2022-2097',
-                'https://bugzilla.redhat.com/2081494',
-                'https://bugzilla.redhat.com/2087911',
-                'https://bugzilla.redhat.com/2087913',
-                'https://bugzilla.redhat.com/2097310',
-                'https://bugzilla.redhat.com/2104905',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2081494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2097310',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2100554',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2104905',
-                'https://cert-portal.siemens.com/productcert/pdf/ssa-332410.pdf',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-1292',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-2068',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-2097',
-                'https://errata.almalinux.org/9/ALSA-2022-6224.html',
-                'https://errata.rockylinux.org/RLSA-2022:5818',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=919925673d6c9cfed3c1085497f5dfbbed5fc431',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=a98f339ddd7e8f487d6e0088d4a9a42324885a93',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=919925673d6c9cfed3c1085497f5dfbbed5fc431',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=a98f339ddd7e8f487d6e0088d4a9a42324885a93',
-                'https://github.com/alexcrichton/openssl-src-rs',
-                'https://linux.oracle.com/cve/CVE-2022-2097.html',
-                'https://linux.oracle.com/errata/ELSA-2022-9955.html',
-                'https://lists.debian.org/debian-lts-announce/2023/02/msg00019.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/R6CK57NBQFTPUMXAPJURCGXUYT76NQAK',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/R6CK57NBQFTPUMXAPJURCGXUYT76NQAK/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/V6567JERRHHJW2GNGJGKDRNHR7SNPZK7',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/V6567JERRHHJW2GNGJGKDRNHR7SNPZK7/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VCMNWKERPBKOEBNL7CLTTX3ZZCZLH7XA',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VCMNWKERPBKOEBNL7CLTTX3ZZCZLH7XA/',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/R6CK57NBQFTPUMXAPJURCGXUYT76NQAK',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/R6CK57NBQFTPUMXAPJURCGXUYT76NQAK/',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/V6567JERRHHJW2GNGJGKDRNHR7SNPZK7',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/V6567JERRHHJW2GNGJGKDRNHR7SNPZK7/',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/VCMNWKERPBKOEBNL7CLTTX3ZZCZLH7XA',
-                'https://nvd.nist.gov/vuln/detail/CVE-2022-2097',
-                'https://rustsec.org/advisories/RUSTSEC-2022-0032.html',
-                'https://security.gentoo.org/glsa/202210-02',
-                'https://security.netapp.com/advisory/ntap-20220715-0011',
-                'https://security.netapp.com/advisory/ntap-20220715-0011/',
-                'https://security.netapp.com/advisory/ntap-20230420-0008',
-                'https://security.netapp.com/advisory/ntap-20230420-0008/',
-                'https://security.netapp.com/advisory/ntap-20240621-0006',
-                'https://security.netapp.com/advisory/ntap-20240621-0006/',
-                'https://ubuntu.com/security/notices/USN-5502-1',
-                'https://ubuntu.com/security/notices/USN-6457-1',
-                'https://www.cve.org/CVERecord?id=CVE-2022-2097',
-                'https://www.debian.org/security/2023/dsa-5343',
-                'https://www.openssl.org/news/secadv/20220705.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: AES OCB fails to encrypt some bytes'
-            },
-            {
-              'cve':  'CVE-2021-42378',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the getvar_i function",
-              'diffID':        'sha256:1fe762541cd71a8f8edda7ef8237e9134d34bee39d51f61d1fd4f18992c16d50',
-              'fixedVersions': [
-                '1.32.1-r7'
-              ],
-              'installedVersion': '1.32.1-r6',
-              'packageName':      'ssl_client',
-              'purl':             'pkg:apk/alpine/ssl_client@1.32.1-r6?arch=armhf&distro=3.13.6',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42378',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42378',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42378'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the getvar_i()'
-            },
-            {
-              'cve':  'CVE-2021-42379',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the next_input_file function",
-              'diffID':        'sha256:1fe762541cd71a8f8edda7ef8237e9134d34bee39d51f61d1fd4f18992c16d50',
-              'fixedVersions': [
-                '1.32.1-r7'
-              ],
-              'installedVersion': '1.32.1-r6',
-              'packageName':      'ssl_client',
-              'purl':             'pkg:apk/alpine/ssl_client@1.32.1-r6?arch=armhf&distro=3.13.6',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42379',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42379',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42379'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the next_input_file()'
-            },
-            {
-              'cve':  'CVE-2021-42380',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the clrvar function",
-              'diffID':        'sha256:1fe762541cd71a8f8edda7ef8237e9134d34bee39d51f61d1fd4f18992c16d50',
-              'fixedVersions': [
-                '1.32.1-r7'
-              ],
-              'installedVersion': '1.32.1-r6',
-              'packageName':      'ssl_client',
-              'purl':             'pkg:apk/alpine/ssl_client@1.32.1-r6?arch=armhf&distro=3.13.6',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42380',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42380',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42380'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the clrvar()'
-            },
-            {
-              'cve':  'CVE-2021-42381',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the hash_init function",
-              'diffID':        'sha256:1fe762541cd71a8f8edda7ef8237e9134d34bee39d51f61d1fd4f18992c16d50',
-              'fixedVersions': [
-                '1.32.1-r7'
-              ],
-              'installedVersion': '1.32.1-r6',
-              'packageName':      'ssl_client',
-              'purl':             'pkg:apk/alpine/ssl_client@1.32.1-r6?arch=armhf&distro=3.13.6',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42381',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42381',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42381'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the hash_init()'
-            },
-            {
-              'cve':  'CVE-2021-42382',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the getvar_s function",
-              'diffID':        'sha256:1fe762541cd71a8f8edda7ef8237e9134d34bee39d51f61d1fd4f18992c16d50',
-              'fixedVersions': [
-                '1.32.1-r7'
-              ],
-              'installedVersion': '1.32.1-r6',
-              'packageName':      'ssl_client',
-              'purl':             'pkg:apk/alpine/ssl_client@1.32.1-r6?arch=armhf&distro=3.13.6',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42382',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42382',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42382'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the getvar_s()'
-            },
-            {
-              'cve':  'CVE-2021-42383',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the evaluate function",
-              'diffID':        'sha256:1fe762541cd71a8f8edda7ef8237e9134d34bee39d51f61d1fd4f18992c16d50',
-              'fixedVersions': [
-                '1.32.1-r7'
-              ],
-              'installedVersion': '1.32.1-r6',
-              'packageName':      'ssl_client',
-              'purl':             'pkg:apk/alpine/ssl_client@1.32.1-r6?arch=armhf&distro=3.13.6',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42383',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42383',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42383'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the evaluate()'
-            },
-            {
-              'cve':  'CVE-2021-42384',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the handle_special function",
-              'diffID':        'sha256:1fe762541cd71a8f8edda7ef8237e9134d34bee39d51f61d1fd4f18992c16d50',
-              'fixedVersions': [
-                '1.32.1-r7'
-              ],
-              'installedVersion': '1.32.1-r6',
-              'packageName':      'ssl_client',
-              'purl':             'pkg:apk/alpine/ssl_client@1.32.1-r6?arch=armhf&distro=3.13.6',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42384',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42384',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42384'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the handle_special()'
-            },
-            {
-              'cve':  'CVE-2021-42385',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the evaluate function",
-              'diffID':        'sha256:1fe762541cd71a8f8edda7ef8237e9134d34bee39d51f61d1fd4f18992c16d50',
-              'fixedVersions': [
-                '1.32.1-r7'
-              ],
-              'installedVersion': '1.32.1-r6',
-              'packageName':      'ssl_client',
-              'purl':             'pkg:apk/alpine/ssl_client@1.32.1-r6?arch=armhf&distro=3.13.6',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42385',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42385',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42385'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the evaluate()'
-            },
-            {
-              'cve':  'CVE-2021-42386',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the nvalloc function",
-              'diffID':        'sha256:1fe762541cd71a8f8edda7ef8237e9134d34bee39d51f61d1fd4f18992c16d50',
-              'fixedVersions': [
-                '1.32.1-r7'
-              ],
-              'installedVersion': '1.32.1-r6',
-              'packageName':      'ssl_client',
-              'purl':             'pkg:apk/alpine/ssl_client@1.32.1-r6?arch=armhf&distro=3.13.6',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42386',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42386',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42386'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the nvalloc()'
-            },
-            {
-              'cve':  'CVE-2022-28391',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '8.8',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-88'
-              ],
-              'description':   "BusyBox through 1.35.0 allows remote attackers to execute arbitrary code if netstat is used to print a DNS PTR record's value to a VT compatible terminal. Alternatively, the attacker could choose to change the terminal's colors.",
-              'diffID':        'sha256:1fe762541cd71a8f8edda7ef8237e9134d34bee39d51f61d1fd4f18992c16d50',
-              'fixedVersions': [
-                '1.32.1-r8'
-              ],
-              'installedVersion': '1.32.1-r6',
-              'packageName':      'ssl_client',
-              'purl':             'pkg:apk/alpine/ssl_client@1.32.1-r6?arch=armhf&distro=3.13.6',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2022-28391',
-                'https://git.alpinelinux.org/aports/plain/main/busybox/0001-libbb-sockaddr2str-ensure-only-printable-characters-.patch',
-                'https://git.alpinelinux.org/aports/plain/main/busybox/0002-nslookup-sanitize-all-printed-strings-with-printable.patch',
-                'https://gitlab.alpinelinux.org/alpine/aports/-/issues/13661',
-                'https://nvd.nist.gov/vuln/detail/CVE-2022-28391',
-                'https://www.cve.org/CVERecord?id=CVE-2022-28391'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: remote attackers may execute arbitrary code if netstat is used'
-            },
-            {
-              'cve':  'CVE-2022-30065',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.8',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.2',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox 1.35-x's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the copyvar function.",
-              'diffID':        'sha256:1fe762541cd71a8f8edda7ef8237e9134d34bee39d51f61d1fd4f18992c16d50',
-              'fixedVersions': [
-                '1.32.1-r9'
-              ],
-              'installedVersion': '1.32.1-r6',
-              'packageName':      'ssl_client',
-              'purl':             'pkg:apk/alpine/ssl_client@1.32.1-r6?arch=armhf&distro=3.13.6',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2022-30065',
-                'https://bugs.busybox.net/show_bug.cgi?id=14781',
-                'https://cert-portal.siemens.com/productcert/pdf/ssa-333517.pdf',
-                'https://nvd.nist.gov/vuln/detail/CVE-2022-30065',
-                'https://www.cve.org/CVERecord?id=CVE-2022-30065'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      "busybox: A use-after-free in Busybox's awk applet leads to denial of service"
-            },
-            {
-              'cve':  'CVE-2021-42374',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '5.7',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-125'
-              ],
-              'description':   "An out-of-bounds heap read in Busybox's unlzma applet leads to information leak and denial of service when crafted LZMA-compressed input is decompressed. This can be triggered by any applet/format that",
-              'diffID':        'sha256:1fe762541cd71a8f8edda7ef8237e9134d34bee39d51f61d1fd4f18992c16d50',
-              'fixedVersions': [
-                '1.32.1-r7'
-              ],
-              'installedVersion': '1.32.1-r6',
-              'packageName':      'ssl_client',
-              'purl':             'pkg:apk/alpine/ssl_client@1.32.1-r6?arch=armhf&distro=3.13.6',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42374',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42374',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42374'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'busybox: out-of-bounds read in unlzma applet leads to information leak and denial of service when crafted LZMA-compressed input is decompressed'
-            },
-            {
-              'cve':  'CVE-2021-42375',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.5',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '4.1',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-159'
-              ],
-              'description':   "An incorrect handling of a special element in Busybox's ash applet leads to denial of service when processing a crafted shell command, due to the shell mistaking specific characters for reserved characters. This may be used for DoS under rare conditions of filtered command input.",
-              'diffID':        'sha256:1fe762541cd71a8f8edda7ef8237e9134d34bee39d51f61d1fd4f18992c16d50',
-              'fixedVersions': [
-                '1.32.1-r7'
-              ],
-              'installedVersion': '1.32.1-r6',
-              'packageName':      'ssl_client',
-              'purl':             'pkg:apk/alpine/ssl_client@1.32.1-r6?arch=armhf&distro=3.13.6',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42375',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42375',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42375'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'busybox: incorrect handling of a special element in ash applet leads to denial of service when processing a crafted shell command'
-            },
-            {
-              'cve':  'CVE-2022-37434',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '9.8',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-787',
-                'CWE-120'
-              ],
-              'description':   'zlib through 1.2.12 has a heap-based buffer over-read or buffer overflow in inflate in inflate.c via a large gzip header extra field. NOTE: only applications that call inflateGetHeader are affected. Some common applications bundle the affected zlib source code but may be unable to call inflateGetHeader (e.g., see the nodejs/node reference).',
-              'diffID':        'sha256:1fe762541cd71a8f8edda7ef8237e9134d34bee39d51f61d1fd4f18992c16d50',
-              'fixedVersions': [
-                '1.2.12-r2'
-              ],
-              'installedVersion': '1.2.11-r3',
-              'packageName':      'zlib',
-              'purl':             'pkg:apk/alpine/zlib@1.2.11-r3?arch=armhf&distro=3.13.6',
-              'references':       [
-                'http://seclists.org/fulldisclosure/2022/Oct/37',
-                'http://seclists.org/fulldisclosure/2022/Oct/38',
-                'http://seclists.org/fulldisclosure/2022/Oct/41',
-                'http://seclists.org/fulldisclosure/2022/Oct/42',
-                'http://www.openwall.com/lists/oss-security/2022/08/05/2',
-                'http://www.openwall.com/lists/oss-security/2022/08/09/1',
-                'https://access.redhat.com/errata/RHSA-2022:8291',
-                'https://access.redhat.com/security/cve/CVE-2022-37434',
-                'https://bugzilla.redhat.com/2116639',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2053198',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2077431',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2081296',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2116639',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-37434',
-                'https://errata.almalinux.org/9/ALSA-2022-8291.html',
-                'https://errata.rockylinux.org/RLSA-2022:8291',
-                'https://github.com/curl/curl/issues/9271',
-                'https://github.com/ivd38/zlib_overflow',
-                'https://github.com/madler/zlib/blob/21767c654d31d2dccdde4330529775c6c5fd5389/zlib.h#L1062-L1063',
-                'https://github.com/madler/zlib/commit/1eb7682f845ac9e9bf9ae35bbfb3bad5dacbd91d',
-                'https://github.com/madler/zlib/commit/eff308af425b67093bab25f80f1ae950166bece1',
-                'https://github.com/nodejs/node/blob/75b68c6e4db515f76df73af476eccf382bbcb00a/deps/zlib/inflate.c#L762-L764',
-                'https://linux.oracle.com/cve/CVE-2022-37434.html',
-                'https://linux.oracle.com/errata/ELSA-2023-1095.html',
-                'https://lists.debian.org/debian-lts-announce/2022/09/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JWN4VE3JQR4O2SOUS5TXNLANRPMHWV4I/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NMBOJ77A7T7PQCARMDUK75TE6LLESZ3O/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PAVPQNCG3XRLCLNSQRM3KAN5ZFMVXVTY/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/X5U7OTKZSHY2I3ZFJSR2SHFHW72RKGDK/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YRQAI7H4M4RQZ2IWZUEEXECBE5D56BH2/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2022-37434',
-                'https://security.netapp.com/advisory/ntap-20220901-0005/',
-                'https://security.netapp.com/advisory/ntap-20230427-0007/',
-                'https://support.apple.com/kb/HT213488',
-                'https://support.apple.com/kb/HT213489',
-                'https://support.apple.com/kb/HT213490',
-                'https://support.apple.com/kb/HT213491',
-                'https://support.apple.com/kb/HT213493',
-                'https://support.apple.com/kb/HT213494',
-                'https://ubuntu.com/security/notices/USN-5570-1',
-                'https://ubuntu.com/security/notices/USN-5570-2',
-                'https://ubuntu.com/security/notices/USN-5573-1',
-                'https://ubuntu.com/security/notices/USN-6736-1',
-                'https://ubuntu.com/security/notices/USN-6736-2',
-                'https://www.cve.org/CVERecord?id=CVE-2022-37434',
-                'https://www.debian.org/security/2022/dsa-5218'
-              ],
-              'severity':   'CRITICAL',
-              'suppressed': false,
-              'title':      'zlib: heap-based buffer over-read and overflow in inflate() in inflate.c via a large gzip header extra field'
-            },
-            {
-              'cve':  'CVE-2018-25032',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'nvd': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '8.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-787'
-              ],
-              'description':   'zlib before 1.2.12 allows memory corruption when deflating (i.e., when compressing) if the input has many distant matches.',
-              'diffID':        'sha256:1fe762541cd71a8f8edda7ef8237e9134d34bee39d51f61d1fd4f18992c16d50',
-              'fixedVersions': [
-                '1.2.12-r0'
-              ],
-              'installedVersion': '1.2.11-r3',
-              'packageName':      'zlib',
-              'purl':             'pkg:apk/alpine/zlib@1.2.11-r3?arch=armhf&distro=3.13.6',
-              'references':       [
-                'http://seclists.org/fulldisclosure/2022/May/33',
-                'http://seclists.org/fulldisclosure/2022/May/35',
-                'http://seclists.org/fulldisclosure/2022/May/38',
-                'http://www.openwall.com/lists/oss-security/2022/03/25/2',
-                'http://www.openwall.com/lists/oss-security/2022/03/26/1',
-                'https://access.redhat.com/errata/RHSA-2022:8420',
-                'https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-25032.json',
-                'https://access.redhat.com/security/cve/CVE-2018-25032',
-                'https://bugzilla.redhat.com/2067945',
-                'https://cert-portal.siemens.com/productcert/pdf/ssa-333517.pdf',
-                'https://errata.almalinux.org/9/ALSA-2022-8420.html',
-                'https://github.com/advisories/GHSA-jc36-42cf-vqwj',
-                'https://github.com/madler/zlib/commit/5c44459c3b28a9bd3283aaceab7c615f8020c531',
-                'https://github.com/madler/zlib/compare/v1.2.11...v1.2.12',
-                'https://github.com/madler/zlib/issues/605',
-                'https://github.com/rubysec/ruby-advisory-db/blob/master/gems/nokogiri/CVE-2018-25032.yml',
-                'https://github.com/sparklemotion/nokogiri/releases/tag/v1.13.4',
-                'https://github.com/sparklemotion/nokogiri/security/advisories/GHSA-v6gp-9mmm-c6p5',
-                'https://groups.google.com/g/ruby-security-ann/c/vX7qSjsvWis/m/TJWN4oOKBwAJ',
-                'https://linux.oracle.com/cve/CVE-2018-25032.html',
-                'https://linux.oracle.com/errata/ELSA-2022-9565.html',
-                'https://lists.debian.org/debian-lts-announce/2022/04/msg00000.html',
-                'https://lists.debian.org/debian-lts-announce/2022/05/msg00008.html',
-                'https://lists.debian.org/debian-lts-announce/2022/09/msg00023.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DCZFIJBJTZ7CL5QXBFKTQ22Q26VINRUF/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DF62MVMH3QUGMBDCB3DY2ERQ6EBHTADB/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JZZPTWRYQULAOL3AW7RZJNVZ2UONXCV4/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NS2D2GFPFGOJUL4WQ3DUAY7HF4VWQ77F/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VOKNP2L734AEL47NRYGVZIKEFOUBQY5Y/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/XOKFMSNQ5D5WGMALBNBXU3GE442V74WU/',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/DCZFIJBJTZ7CL5QXBFKTQ22Q26VINRUF',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/DCZFIJBJTZ7CL5QXBFKTQ22Q26VINRUF/',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/DF62MVMH3QUGMBDCB3DY2ERQ6EBHTADB',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/DF62MVMH3QUGMBDCB3DY2ERQ6EBHTADB/',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/JZZPTWRYQULAOL3AW7RZJNVZ2UONXCV4',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/JZZPTWRYQULAOL3AW7RZJNVZ2UONXCV4/',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/NS2D2GFPFGOJUL4WQ3DUAY7HF4VWQ77F',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/NS2D2GFPFGOJUL4WQ3DUAY7HF4VWQ77F/',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/VOKNP2L734AEL47NRYGVZIKEFOUBQY5Y',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/VOKNP2L734AEL47NRYGVZIKEFOUBQY5Y/',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/XOKFMSNQ5D5WGMALBNBXU3GE442V74WU',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/XOKFMSNQ5D5WGMALBNBXU3GE442V74WU/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2018-25032',
-                'https://security.gentoo.org/glsa/202210-42',
-                'https://security.netapp.com/advisory/ntap-20220526-0009',
-                'https://security.netapp.com/advisory/ntap-20220526-0009/',
-                'https://security.netapp.com/advisory/ntap-20220729-0004',
-                'https://security.netapp.com/advisory/ntap-20220729-0004/',
-                'https://support.apple.com/kb/HT213255',
-                'https://support.apple.com/kb/HT213256',
-                'https://support.apple.com/kb/HT213257',
-                'https://ubuntu.com/security/notices/USN-5355-1',
-                'https://ubuntu.com/security/notices/USN-5355-2',
-                'https://ubuntu.com/security/notices/USN-5359-1',
-                'https://ubuntu.com/security/notices/USN-5359-2',
-                'https://ubuntu.com/security/notices/USN-5739-1',
-                'https://ubuntu.com/security/notices/USN-6736-1',
-                'https://ubuntu.com/security/notices/USN-6736-2',
-                'https://www.cve.org/CVERecord?id=CVE-2018-25032',
-                'https://www.debian.org/security/2022/dsa-5111',
-                'https://www.openwall.com/lists/oss-security/2022/03/24/1',
-                'https://www.openwall.com/lists/oss-security/2022/03/28/1',
-                'https://www.openwall.com/lists/oss-security/2022/03/28/3',
-                'https://www.oracle.com/security-alerts/cpujul2022.html'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'zlib: A flaw found in zlib when compressing (not decompressing) certain inputs'
-            }
-          ]
-        }
-      ],
-      'summary': {
-        'critical':   1,
-        'high':       25,
-        'low':        0,
-        'medium':     6,
-        'suppressed': 0,
-        'unknown':    0
-      }
-    }
-  },
-  {
-    'id':    'default/e4cb468b0599939d8b74053c59227b0eb3b64fe293dc44d3e1a8d3bddf603326',
-    'type':  'storage.sbomscanner.kubewarden.io.vulnerabilityreport',
-    'links': {
-      'patch':  'https://localhost:8005/v1/storage.sbomscanner.kubewarden.io.vulnerabilityreports/default/e4cb468b0599939d8b74053c59227b0eb3b64fe293dc44d3e1a8d3bddf603326',
-      'remove': 'https://localhost:8005/v1/storage.sbomscanner.kubewarden.io.vulnerabilityreports/default/e4cb468b0599939d8b74053c59227b0eb3b64fe293dc44d3e1a8d3bddf603326',
-      'self':   'https://localhost:8005/v1/storage.sbomscanner.kubewarden.io.vulnerabilityreports/default/e4cb468b0599939d8b74053c59227b0eb3b64fe293dc44d3e1a8d3bddf603326',
-      'update': 'https://localhost:8005/v1/storage.sbomscanner.kubewarden.io.vulnerabilityreports/default/e4cb468b0599939d8b74053c59227b0eb3b64fe293dc44d3e1a8d3bddf603326',
-      'view':   'https://localhost:8005/apis/storage.sbomscanner.kubewarden.io/v1alpha1/namespaces/default/vulnerabilityreports/e4cb468b0599939d8b74053c59227b0eb3b64fe293dc44d3e1a8d3bddf603326'
-    },
-    'apiVersion':    'storage.sbomscanner.kubewarden.io/v1alpha1',
-    'imageMetadata': {
-      'digest':      'sha256:169b2750787ff8d4995ba535293bf549958b596067165ce678afa928225d97cc',
-      'platform':    'linux/386',
-      'registry':    'lsong-demo1',
-      'registryURI': 'registry-1.docker.io',
-      'repository':  'library/alpine',
-      'tag':         '3.14.1'
-    },
-    'kind':     'VulnerabilityReport',
-    'metadata': {
-      'creationTimestamp': '2026-01-14T18:52:04Z',
-      'fields':            [
-        'e4cb468b0599939d8b74053c59227b0eb3b64fe293dc44d3e1a8d3bddf603326',
-        'registry-1.docker.io/library/alpine:3.14.1',
-        'linux/386',
-        '47 (0 suppressed)'
-      ],
-      'labels': {
-        'app.kubernetes.io/managed-by':          'sbomscanner',
-        'app.kubernetes.io/part-of':             'sbomscanner',
-        'sbomscanner.kubewarden.io/scanjob-uid': '445c600a-c4b6-40b3-bd71-f2d2140a37d5'
-      },
-      'name':            'e4cb468b0599939d8b74053c59227b0eb3b64fe293dc44d3e1a8d3bddf603326',
-      'namespace':       'default',
-      'ownerReferences': [
-        {
-          'apiVersion':         'storage.sbomscanner.kubewarden.io/v1alpha1',
-          'blockOwnerDeletion': true,
-          'controller':         true,
-          'kind':               'SBOM',
-          'name':               'e4cb468b0599939d8b74053c59227b0eb3b64fe293dc44d3e1a8d3bddf603326',
-          'uid':                'fd364002-3ad2-4da8-9811-04f990a50a44'
-        }
-      ],
-      'relationships': [
-        {
-          'fromId':   'default/e4cb468b0599939d8b74053c59227b0eb3b64fe293dc44d3e1a8d3bddf603326',
-          'fromType': 'storage.sbomscanner.kubewarden.io.sbom',
-          'rel':      'owner',
-          'state':    'active',
-          'message':  'Resource is current'
-        }
-      ],
-      'resourceVersion': '1',
-      'state':           {
-        'error':         false,
-        'message':       'Resource is current',
-        'name':          'active',
-        'transitioning': false
-      },
-      'uid': '8e142967-1950-43b4-85dd-3855bcff9761'
-    },
-    'report': {
-      'results': [
-        {
-          'class':           'os-pkgs',
-          'target':          '/var/run/worker/trivy.sbom.66024621.json (alpine 3.14.1)',
-          'type':            'alpine',
-          'vulnerabilities': [
-            {
-              'cve':  'CVE-2021-42378',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the getvar_i function",
-              'diffID':        'sha256:7db77293ef8b674ab8ab4b6a0cba70d834d60b5190aa0c93c227abb02d3a303e',
-              'fixedVersions': [
-                '1.33.1-r6'
-              ],
-              'installedVersion': '1.33.1-r3',
-              'packageName':      'busybox',
-              'purl':             'pkg:apk/alpine/busybox@1.33.1-r3?arch=x86&distro=3.14.1',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42378',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42378',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42378'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the getvar_i()'
-            },
-            {
-              'cve':  'CVE-2021-42379',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the next_input_file function",
-              'diffID':        'sha256:7db77293ef8b674ab8ab4b6a0cba70d834d60b5190aa0c93c227abb02d3a303e',
-              'fixedVersions': [
-                '1.33.1-r6'
-              ],
-              'installedVersion': '1.33.1-r3',
-              'packageName':      'busybox',
-              'purl':             'pkg:apk/alpine/busybox@1.33.1-r3?arch=x86&distro=3.14.1',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42379',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42379',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42379'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the next_input_file()'
-            },
-            {
-              'cve':  'CVE-2021-42380',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the clrvar function",
-              'diffID':        'sha256:7db77293ef8b674ab8ab4b6a0cba70d834d60b5190aa0c93c227abb02d3a303e',
-              'fixedVersions': [
-                '1.33.1-r6'
-              ],
-              'installedVersion': '1.33.1-r3',
-              'packageName':      'busybox',
-              'purl':             'pkg:apk/alpine/busybox@1.33.1-r3?arch=x86&distro=3.14.1',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42380',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42380',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42380'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the clrvar()'
-            },
-            {
-              'cve':  'CVE-2021-42381',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the hash_init function",
-              'diffID':        'sha256:7db77293ef8b674ab8ab4b6a0cba70d834d60b5190aa0c93c227abb02d3a303e',
-              'fixedVersions': [
-                '1.33.1-r6'
-              ],
-              'installedVersion': '1.33.1-r3',
-              'packageName':      'busybox',
-              'purl':             'pkg:apk/alpine/busybox@1.33.1-r3?arch=x86&distro=3.14.1',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42381',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42381',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42381'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the hash_init()'
-            },
-            {
-              'cve':  'CVE-2021-42382',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the getvar_s function",
-              'diffID':        'sha256:7db77293ef8b674ab8ab4b6a0cba70d834d60b5190aa0c93c227abb02d3a303e',
-              'fixedVersions': [
-                '1.33.1-r6'
-              ],
-              'installedVersion': '1.33.1-r3',
-              'packageName':      'busybox',
-              'purl':             'pkg:apk/alpine/busybox@1.33.1-r3?arch=x86&distro=3.14.1',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42382',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42382',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42382'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the getvar_s()'
-            },
-            {
-              'cve':  'CVE-2021-42383',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the evaluate function",
-              'diffID':        'sha256:7db77293ef8b674ab8ab4b6a0cba70d834d60b5190aa0c93c227abb02d3a303e',
-              'fixedVersions': [
-                '1.33.1-r6'
-              ],
-              'installedVersion': '1.33.1-r3',
-              'packageName':      'busybox',
-              'purl':             'pkg:apk/alpine/busybox@1.33.1-r3?arch=x86&distro=3.14.1',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42383',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42383',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42383'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the evaluate()'
-            },
-            {
-              'cve':  'CVE-2021-42384',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the handle_special function",
-              'diffID':        'sha256:7db77293ef8b674ab8ab4b6a0cba70d834d60b5190aa0c93c227abb02d3a303e',
-              'fixedVersions': [
-                '1.33.1-r6'
-              ],
-              'installedVersion': '1.33.1-r3',
-              'packageName':      'busybox',
-              'purl':             'pkg:apk/alpine/busybox@1.33.1-r3?arch=x86&distro=3.14.1',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42384',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42384',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42384'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the handle_special()'
-            },
-            {
-              'cve':  'CVE-2021-42385',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the evaluate function",
-              'diffID':        'sha256:7db77293ef8b674ab8ab4b6a0cba70d834d60b5190aa0c93c227abb02d3a303e',
-              'fixedVersions': [
-                '1.33.1-r6'
-              ],
-              'installedVersion': '1.33.1-r3',
-              'packageName':      'busybox',
-              'purl':             'pkg:apk/alpine/busybox@1.33.1-r3?arch=x86&distro=3.14.1',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42385',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42385',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42385'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the evaluate()'
-            },
-            {
-              'cve':  'CVE-2021-42386',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the nvalloc function",
-              'diffID':        'sha256:7db77293ef8b674ab8ab4b6a0cba70d834d60b5190aa0c93c227abb02d3a303e',
-              'fixedVersions': [
-                '1.33.1-r6'
-              ],
-              'installedVersion': '1.33.1-r3',
-              'packageName':      'busybox',
-              'purl':             'pkg:apk/alpine/busybox@1.33.1-r3?arch=x86&distro=3.14.1',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42386',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42386',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42386'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the nvalloc()'
-            },
-            {
-              'cve':  'CVE-2022-28391',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '8.8',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-88'
-              ],
-              'description':   "BusyBox through 1.35.0 allows remote attackers to execute arbitrary code if netstat is used to print a DNS PTR record's value to a VT compatible terminal. Alternatively, the attacker could choose to change the terminal's colors.",
-              'diffID':        'sha256:7db77293ef8b674ab8ab4b6a0cba70d834d60b5190aa0c93c227abb02d3a303e',
-              'fixedVersions': [
-                '1.33.1-r7'
-              ],
-              'installedVersion': '1.33.1-r3',
-              'packageName':      'busybox',
-              'purl':             'pkg:apk/alpine/busybox@1.33.1-r3?arch=x86&distro=3.14.1',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2022-28391',
-                'https://git.alpinelinux.org/aports/plain/main/busybox/0001-libbb-sockaddr2str-ensure-only-printable-characters-.patch',
-                'https://git.alpinelinux.org/aports/plain/main/busybox/0002-nslookup-sanitize-all-printed-strings-with-printable.patch',
-                'https://gitlab.alpinelinux.org/alpine/aports/-/issues/13661',
-                'https://nvd.nist.gov/vuln/detail/CVE-2022-28391',
-                'https://www.cve.org/CVERecord?id=CVE-2022-28391'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: remote attackers may execute arbitrary code if netstat is used'
-            },
-            {
-              'cve':  'CVE-2021-42374',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '5.7',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-125'
-              ],
-              'description':   "An out-of-bounds heap read in Busybox's unlzma applet leads to information leak and denial of service when crafted LZMA-compressed input is decompressed. This can be triggered by any applet/format that",
-              'diffID':        'sha256:7db77293ef8b674ab8ab4b6a0cba70d834d60b5190aa0c93c227abb02d3a303e',
-              'fixedVersions': [
-                '1.33.1-r4'
-              ],
-              'installedVersion': '1.33.1-r3',
-              'packageName':      'busybox',
-              'purl':             'pkg:apk/alpine/busybox@1.33.1-r3?arch=x86&distro=3.14.1',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42374',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42374',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42374'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'busybox: out-of-bounds read in unlzma applet leads to information leak and denial of service when crafted LZMA-compressed input is decompressed'
-            },
-            {
-              'cve':  'CVE-2021-42375',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.5',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '4.1',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-159'
-              ],
-              'description':   "An incorrect handling of a special element in Busybox's ash applet leads to denial of service when processing a crafted shell command, due to the shell mistaking specific characters for reserved characters. This may be used for DoS under rare conditions of filtered command input.",
-              'diffID':        'sha256:7db77293ef8b674ab8ab4b6a0cba70d834d60b5190aa0c93c227abb02d3a303e',
-              'fixedVersions': [
-                '1.33.1-r5'
-              ],
-              'installedVersion': '1.33.1-r3',
-              'packageName':      'busybox',
-              'purl':             'pkg:apk/alpine/busybox@1.33.1-r3?arch=x86&distro=3.14.1',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42375',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42375',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42375'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'busybox: incorrect handling of a special element in ash applet leads to denial of service when processing a crafted shell command'
-            },
-            {
-              'cve':  'CVE-2021-3711',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '9.8',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'nvd': {
-                  'v3score':  '9.8',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '9.8',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-120'
-              ],
-              'description':   'In order to decrypt SM2 encrypted data an application is expected to call the API function EVP_PKEY_decrypt(). Typically an application will call this function twice. The first time, on entry, the "out" parameter can be NULL and, on exit, the "outlen" parameter is populated with the buffer size required to hold the decrypted plaintext. The application can then allocate a sufficiently sized buffer and call EVP_PKEY_decrypt() again, but this time passing a non-NULL value for the "out" parameter. A bug in the implementation of the SM2 decryption code means that the calculation of the buffer size required to hold the plaintext returned by the first call to EVP_PKEY_decrypt() can be smaller than the actual size required by the second call. This can lead to a buffer overflow when EVP_PKEY_decrypt() is called by the application a second time with a buffer that is too small. A malicious attacker who is able present SM2 content for decryption to an application could cause attacker chosen data to overflow the buffer by up to a maximum of 62 bytes altering the contents of other data held after the buffer, possibly changing application behaviour or causing the application to crash. The location of the buffer is application dependent but is typically heap allocated. Fixed in OpenSSL 1.1.1l (Affected 1.1.1-1.1.1k).',
-              'diffID':        'sha256:7db77293ef8b674ab8ab4b6a0cba70d834d60b5190aa0c93c227abb02d3a303e',
-              'fixedVersions': [
-                '1.1.1l-r0'
-              ],
-              'installedVersion': '1.1.1k-r0',
-              'packageName':      'libcrypto1.1',
-              'purl':             'pkg:apk/alpine/libcrypto1.1@1.1.1k-r0?arch=x86&distro=3.14.1',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2021/08/26/2',
-                'https://access.redhat.com/security/cve/CVE-2021-3711',
-                'https://cert-portal.siemens.com/productcert/pdf/ssa-389290.pdf',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=59f5e75f3bced8fc0e130d72a3f582cf7b480b46',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=59f5e75f3bced8fc0e130d72a3f582cf7b480b46',
-                'https://lists.apache.org/thread.html/r18995de860f0e63635f3008fd2a6aca82394249476d21691e7c59c9e%40%3Cdev.tomcat.apache.org%3E',
-                'https://lists.apache.org/thread.html/r18995de860f0e63635f3008fd2a6aca82394249476d21691e7c59c9e@%3Cdev.tomcat.apache.org%3E',
-                'https://lists.apache.org/thread.html/rad5d9f83f0d11fb3f8bb148d179b8a9ad7c6a17f18d70e5805a713d1%40%3Cdev.tomcat.apache.org%3E',
-                'https://lists.apache.org/thread.html/rad5d9f83f0d11fb3f8bb148d179b8a9ad7c6a17f18d70e5805a713d1@%3Cdev.tomcat.apache.org%3E',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-3711',
-                'https://rustsec.org/advisories/RUSTSEC-2021-0097.html',
-                'https://security.gentoo.org/glsa/202209-02',
-                'https://security.gentoo.org/glsa/202210-02',
-                'https://security.netapp.com/advisory/ntap-20210827-0010',
-                'https://security.netapp.com/advisory/ntap-20210827-0010/',
-                'https://security.netapp.com/advisory/ntap-20211022-0003',
-                'https://security.netapp.com/advisory/ntap-20211022-0003/',
-                'https://security.netapp.com/advisory/ntap-20240621-0006',
-                'https://security.netapp.com/advisory/ntap-20240621-0006/',
-                'https://ubuntu.com/security/notices/USN-5051-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-3711',
-                'https://www.debian.org/security/2021/dsa-4963',
-                'https://www.openssl.org/news/secadv/20210824.txt',
-                'https://www.oracle.com/security-alerts/cpuapr2022.html',
-                'https://www.oracle.com/security-alerts/cpujan2022.html',
-                'https://www.oracle.com/security-alerts/cpuoct2021.html',
-                'https://www.tenable.com/security/tns-2021-16',
-                'https://www.tenable.com/security/tns-2022-02'
-              ],
-              'severity':   'CRITICAL',
-              'suppressed': false,
-              'title':      'openssl: SM2 Decryption Buffer Overflow'
-            },
-            {
-              'cve':  'CVE-2021-3712',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '7.4',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H'
-                },
-                'nvd': {
-                  'v3score':  '7.4',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.4',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-125'
-              ],
-              'description':   "ASN.1 strings are represented internally within OpenSSL as an ASN1_STRING structure which contains a buffer holding the string data and a field holding the buffer length. This contrasts with normal C strings which are repesented as a buffer for the string data which is terminated with a NUL (0) byte. Although not a strict requirement, ASN.1 strings that are parsed using OpenSSL's own \"d2i\" functions (and other similar parsing functions) as well as any string whose value has been set with the ASN1_STRING_set() function will additionally NUL terminate the byte array in the ASN1_STRING structure. However, it is possible for applications to directly construct valid ASN1_STRING structures which do not NUL terminate the byte array by directly setting the \"data\" and \"length\" fields in the ASN1_STRING array. This can also happen by using the ASN1_STRING_set0() function. Numerous OpenSSL functions that print ASN.1 data have been found to assume that the ASN1_STRING byte array will be NUL terminated, even though this is not guaranteed for strings that have been directly constructed. Where an application requests an ASN.1 structure to be printed, and where that ASN.1 structure contains ASN1_STRINGs that have been directly constructed by the application without NUL terminating the \"data\" field, then a read buffer overrun can occur. The same thing can also occur during name constraints processing of certificates (for example if a certificate has been directly constructed by the application instead of loading it via the OpenSSL parsing functions, and the certificate contains non NUL terminated ASN1_STRING structures). It can also occur in the X509_get1_email(), X509_REQ_get1_email() and X509_get1_ocsp() functions. If a malicious actor can cause an application to directly construct an ASN1_STRING and then process it through one of the affected OpenSSL functions then this issue could be hit. This might result in a crash (causing a Denial of Service attack). It could also result in the disclosure of private memory contents (such as private keys, or sensitive plaintext). Fixed in OpenSSL 1.1.1l (Affected 1.1.1-1.1.1k). Fixed in OpenSSL 1.0.2za (Affected 1.0.2-1.0.2y).",
-              'diffID':        'sha256:7db77293ef8b674ab8ab4b6a0cba70d834d60b5190aa0c93c227abb02d3a303e',
-              'fixedVersions': [
-                '1.1.1l-r0'
-              ],
-              'installedVersion': '1.1.1k-r0',
-              'packageName':      'libcrypto1.1',
-              'purl':             'pkg:apk/alpine/libcrypto1.1@1.1.1k-r0?arch=x86&distro=3.14.1',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2021/08/26/2',
-                'https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2021-3712.json',
-                'https://access.redhat.com/security/cve/CVE-2021-3712',
-                'https://cert-portal.siemens.com/productcert/pdf/ssa-244969.pdf',
-                'https://cert-portal.siemens.com/productcert/pdf/ssa-389290.pdf',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=94d23fcff9b2a7a8368dfe52214d5c2569882c11',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=ccb0a11145ee72b042d10593a64eaf9e8a55ec12',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=94d23fcff9b2a7a8368dfe52214d5c2569882c11',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=ccb0a11145ee72b042d10593a64eaf9e8a55ec12',
-                'https://kc.mcafee.com/corporate/index?page=content&id=SB10366',
-                'https://linux.oracle.com/cve/CVE-2021-3712.html',
-                'https://linux.oracle.com/errata/ELSA-2022-9023.html',
-                'https://lists.apache.org/thread.html/r18995de860f0e63635f3008fd2a6aca82394249476d21691e7c59c9e%40%3Cdev.tomcat.apache.org%3E',
-                'https://lists.apache.org/thread.html/r18995de860f0e63635f3008fd2a6aca82394249476d21691e7c59c9e@%3Cdev.tomcat.apache.org%3E',
-                'https://lists.apache.org/thread.html/rad5d9f83f0d11fb3f8bb148d179b8a9ad7c6a17f18d70e5805a713d1%40%3Cdev.tomcat.apache.org%3E',
-                'https://lists.apache.org/thread.html/rad5d9f83f0d11fb3f8bb148d179b8a9ad7c6a17f18d70e5805a713d1@%3Cdev.tomcat.apache.org%3E',
-                'https://lists.debian.org/debian-lts-announce/2021/09/msg00014.html',
-                'https://lists.debian.org/debian-lts-announce/2021/09/msg00021.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-3712',
-                'https://rustsec.org/advisories/RUSTSEC-2021-0098.html',
-                'https://security.gentoo.org/glsa/202209-02',
-                'https://security.gentoo.org/glsa/202210-02',
-                'https://security.netapp.com/advisory/ntap-20210827-0010',
-                'https://security.netapp.com/advisory/ntap-20210827-0010/',
-                'https://security.netapp.com/advisory/ntap-20240621-0006',
-                'https://security.netapp.com/advisory/ntap-20240621-0006/',
-                'https://ubuntu.com/security/notices/USN-5051-1',
-                'https://ubuntu.com/security/notices/USN-5051-2',
-                'https://ubuntu.com/security/notices/USN-5051-3',
-                'https://ubuntu.com/security/notices/USN-5051-4 (regression only in trusty/esm)',
-                'https://ubuntu.com/security/notices/USN-5088-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-3712',
-                'https://www.debian.org/security/2021/dsa-4963',
-                'https://www.openssl.org/news/secadv/20210824.txt',
-                'https://www.oracle.com/security-alerts/cpuapr2022.html',
-                'https://www.oracle.com/security-alerts/cpujan2022.html',
-                'https://www.oracle.com/security-alerts/cpuoct2021.html',
-                'https://www.tenable.com/security/tns-2021-16',
-                'https://www.tenable.com/security/tns-2022-02'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: Read buffer overruns processing ASN.1 strings'
-            },
-            {
-              'cve':  'CVE-2022-0778',
-              'cvss': {
-                'bitnami': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'ghsa': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'nvd': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-835'
-              ],
-              'description':   'The BN_mod_sqrt() function, which computes a modular square root, contains a bug that can cause it to loop forever for non-prime moduli. Internally this function is used when parsing certificates that contain elliptic curve public keys in compressed form or explicit elliptic curve parameters with a base point encoded in compressed form. It is possible to trigger the infinite loop by crafting a certificate that has invalid explicit curve parameters. Since certificate parsing happens prior to verification of the certificate signature, any process that parses an externally supplied certificate may thus be subject to a denial of service attack. The infinite loop can also be reached when parsing crafted private keys as they can contain explicit elliptic curve parameters. Thus vulnerable situations include: - TLS clients consuming server certificates - TLS servers consuming client certificates - Hosting providers taking certificates or private keys from customers - Certificate authorities parsing certification requests from subscribers - Anything else which parses ASN.1 elliptic curve parameters Also any other applications that use the BN_mod_sqrt() where the attacker can control the parameter values are vulnerable to this DoS issue. In the OpenSSL 1.0.2 version the public key is not parsed during initial parsing of the certificate which makes it slightly harder to trigger the infinite loop. However any operation which requires the public key from the certificate will trigger the infinite loop. In particular the attacker can use a self-signed certificate to trigger the loop during verification of the certificate signature. This issue affects OpenSSL versions 1.0.2, 1.1.1 and 3.0. It was addressed in the releases of 1.1.1n and 3.0.2 on the 15th March 2022. Fixed in OpenSSL 3.0.2 (Affected 3.0.0,3.0.1). Fixed in OpenSSL 1.1.1n (Affected 1.1.1-1.1.1m). Fixed in OpenSSL 1.0.2zd (Affected 1.0.2-1.0.2zc).',
-              'diffID':        'sha256:7db77293ef8b674ab8ab4b6a0cba70d834d60b5190aa0c93c227abb02d3a303e',
-              'fixedVersions': [
-                '1.1.1n-r0'
-              ],
-              'installedVersion': '1.1.1k-r0',
-              'packageName':      'libcrypto1.1',
-              'purl':             'pkg:apk/alpine/libcrypto1.1@1.1.1k-r0?arch=x86&distro=3.14.1',
-              'references':       [
-                'http://packetstormsecurity.com/files/167344/OpenSSL-1.0.2-1.1.1-3.0-BN_mod_sqrt-Infinite-Loop.html',
-                'http://seclists.org/fulldisclosure/2022/May/33',
-                'http://seclists.org/fulldisclosure/2022/May/35',
-                'http://seclists.org/fulldisclosure/2022/May/38',
-                'https://access.redhat.com/errata/RHSA-2022:5326',
-                'https://access.redhat.com/security/cve/CVE-2022-0778',
-                'https://bugzilla.redhat.com/2062202',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2062202',
-                'https://cert-portal.siemens.com/productcert/pdf/ssa-712929.pdf',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-0778',
-                'https://errata.almalinux.org/8/ALSA-2022-5326.html',
-                'https://errata.rockylinux.org/RLSA-2022:4899',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=3118eb64934499d93db3230748a452351d1d9a65',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=380085481c64de749a6dd25cdf0bcf4360b30f83',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=a466912611aa6cbdf550cd10601390e587451246',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=3118eb64934499d93db3230748a452351d1d9a65',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=380085481c64de749a6dd25cdf0bcf4360b30f83',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=a466912611aa6cbdf550cd10601390e587451246',
-                'https://linux.oracle.com/cve/CVE-2022-0778.html',
-                'https://linux.oracle.com/errata/ELSA-2022-9272.html',
-                'https://lists.debian.org/debian-lts-announce/2022/03/msg00023.html',
-                'https://lists.debian.org/debian-lts-announce/2022/03/msg00024.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/323SNN6ZX7PRJJWP2BUAFLPUAE42XWLZ',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/323SNN6ZX7PRJJWP2BUAFLPUAE42XWLZ/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GDB3GQVJPXJE7X5C5JN6JAA4XUDWD6E6',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GDB3GQVJPXJE7X5C5JN6JAA4XUDWD6E6/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/W6K3PR542DXWLEFFMFIDMME4CWMHJRMG',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/W6K3PR542DXWLEFFMFIDMME4CWMHJRMG/',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/323SNN6ZX7PRJJWP2BUAFLPUAE42XWLZ',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/GDB3GQVJPXJE7X5C5JN6JAA4XUDWD6E6',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/W6K3PR542DXWLEFFMFIDMME4CWMHJRMG',
-                'https://nvd.nist.gov/vuln/detail/CVE-2022-0778',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2022-0002',
-                'https://rustsec.org/advisories/RUSTSEC-2022-0014.html',
-                'https://security.gentoo.org/glsa/202210-02',
-                'https://security.netapp.com/advisory/ntap-20220321-0002',
-                'https://security.netapp.com/advisory/ntap-20220321-0002/',
-                'https://security.netapp.com/advisory/ntap-20220429-0005',
-                'https://security.netapp.com/advisory/ntap-20220429-0005/',
-                'https://security.netapp.com/advisory/ntap-20240621-0006',
-                'https://security.netapp.com/advisory/ntap-20240621-0006/',
-                'https://support.apple.com/kb/HT213255',
-                'https://support.apple.com/kb/HT213256',
-                'https://support.apple.com/kb/HT213257',
-                'https://ubuntu.com/security/notices/USN-5328-1',
-                'https://ubuntu.com/security/notices/USN-5328-2',
-                'https://ubuntu.com/security/notices/USN-6457-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2022-0778',
-                'https://www.debian.org/security/2022/dsa-5103',
-                'https://www.openssl.org/news/secadv/20220315.txt',
-                'https://www.oracle.com/security-alerts/cpuapr2022.html',
-                'https://www.oracle.com/security-alerts/cpujul2022.html',
-                'https://www.tenable.com/security/tns-2022-06',
-                'https://www.tenable.com/security/tns-2022-07',
-                'https://www.tenable.com/security/tns-2022-08',
-                'https://www.tenable.com/security/tns-2022-09'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: Infinite loop in BN_mod_sqrt() reachable when parsing certificates'
-            },
-            {
-              'cve':  'CVE-2022-4450',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'nvd': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-415'
-              ],
-              'description':   'The function PEM_read_bio_ex() reads a PEM file from a BIO and parses and\ndecodes the "name" (e.g. "CERTIFICATE"), any header data and the payload data.\nIf the function succeeds then the "name_out", "header" and "data" arguments are\npopulated with pointers to buffers containing the relevant decoded data. The\ncaller is responsible for freeing those buffers. It is possible to construct a\nPEM file that results in 0 bytes of payload data. In this case PEM_read_bio_ex()\nwill return a failure code but will populate the header argument with a pointer\nto a buffer that has already been freed. If the caller also frees this buffer\nthen a double free will occur. This will most likely lead to a crash. This\ncould be exploited by an attacker who has the ability to supply malicious PEM\nfiles for parsing to achieve a denial of service attack.\n\nThe functions PEM_read_bio() and PEM_read() are simple wrappers around\nPEM_read_bio_ex() and therefore these functions are also directly affected.\n\nThese functions are also called indirectly by a number of other OpenSSL\nfunctions including PEM_X509_INFO_read_bio_ex() and\nSSL_CTX_use_serverinfo_file() which are also vulnerable. Some OpenSSL internal\nuses of these functions are not vulnerable because the caller does not free the\nheader argument if PEM_read_bio_ex() returns a failure code. These locations\ninclude the PEM_read_bio_TYPE() functions as well as the decoders introduced in\nOpenSSL 3.0.\n\nThe OpenSSL asn1parse command line application is also impacted by this issue.',
-              'diffID':        'sha256:7db77293ef8b674ab8ab4b6a0cba70d834d60b5190aa0c93c227abb02d3a303e',
-              'fixedVersions': [
-                '1.1.1t-r0'
-              ],
-              'installedVersion': '1.1.1k-r0',
-              'packageName':      'libcrypto1.1',
-              'purl':             'pkg:apk/alpine/libcrypto1.1@1.1.1k-r0?arch=x86&distro=3.14.1',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2023:2165',
-                'https://access.redhat.com/security/cve/CVE-2022-4450',
-                'https://bugzilla.redhat.com/1960321',
-                'https://bugzilla.redhat.com/2164440',
-                'https://bugzilla.redhat.com/2164487',
-                'https://bugzilla.redhat.com/2164492',
-                'https://bugzilla.redhat.com/2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144000',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144003',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144006',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144008',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144010',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144012',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144015',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144017',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144019',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2145170',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2158412',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164440',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164487',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164488',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164492',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164497',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164499',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164500',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4203',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4304',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4450',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0215',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0216',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0217',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0286',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0401',
-                'https://errata.almalinux.org/9/ALSA-2023-2165.html',
-                'https://errata.rockylinux.org/RLSA-2023:0946',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=63bcf189be73a9cc1264059bed6f57974be74a83',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=bbcf509bd046b34cca19c766bbddc31683d0858b',
-                'https://linux.oracle.com/cve/CVE-2022-4450.html',
-                'https://linux.oracle.com/errata/ELSA-2023-32791.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2022-4450',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0003',
-                'https://rustsec.org/advisories/RUSTSEC-2023-0010.html',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://ubuntu.com/security/notices/USN-5844-1',
-                'https://ubuntu.com/security/notices/USN-6564-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2022-4450',
-                'https://www.openssl.org/news/secadv/20230207.txt'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: double free after calling PEM_read_bio_ex'
-            },
-            {
-              'cve':  'CVE-2023-0215',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'nvd': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   'The public API function BIO_new_NDEF is a helper function used for streaming\nASN.1 data via a BIO. It is primarily used internally to OpenSSL to support the\nSMIME, CMS and PKCS7 streaming capabilities, but may also be called directly by\nend user applications.\n\nThe function receives a BIO from the caller, prepends a new BIO_f_asn1 filter\nBIO onto the front of it to form a BIO chain, and then returns the new head of\nthe BIO chain to the caller. Under certain conditions, for example if a CMS\nrecipient public key is invalid, the new filter BIO is freed and the function\nreturns a NULL result indicating a failure. However, in this case, the BIO chain\nis not properly cleaned up and the BIO passed by the caller still retains\ninternal pointers to the previously freed filter BIO. If the caller then goes on\nto call BIO_pop() on the BIO then a use-after-free will occur. This will most\nlikely result in a crash.\n\n\n\nThis scenario occurs directly in the internal function B64_write_ASN1() which\nmay cause BIO_new_NDEF() to be called and will subsequently call BIO_pop() on\nthe BIO. This internal function is in turn called by the public API functions\nPEM_write_bio_ASN1_stream, PEM_write_bio_CMS_stream, PEM_write_bio_PKCS7_stream,\nSMIME_write_ASN1, SMIME_write_CMS and SMIME_write_PKCS7.\n\nOther public API functions that may be impacted by this include\ni2d_ASN1_bio_stream, BIO_new_CMS, BIO_new_PKCS7, i2d_CMS_bio_stream and\ni2d_PKCS7_bio_stream.\n\nThe OpenSSL cms and smime command line applications are similarly affected.',
-              'diffID':        'sha256:7db77293ef8b674ab8ab4b6a0cba70d834d60b5190aa0c93c227abb02d3a303e',
-              'fixedVersions': [
-                '1.1.1t-r0'
-              ],
-              'installedVersion': '1.1.1k-r0',
-              'packageName':      'libcrypto1.1',
-              'purl':             'pkg:apk/alpine/libcrypto1.1@1.1.1k-r0?arch=x86&distro=3.14.1',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2023:2165',
-                'https://access.redhat.com/security/cve/CVE-2023-0215',
-                'https://bugzilla.redhat.com/1960321',
-                'https://bugzilla.redhat.com/2164440',
-                'https://bugzilla.redhat.com/2164487',
-                'https://bugzilla.redhat.com/2164492',
-                'https://bugzilla.redhat.com/2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144000',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144003',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144006',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144008',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144010',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144012',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144015',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144017',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144019',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2145170',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2158412',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164440',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164487',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164488',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164492',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164497',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164499',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164500',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4203',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4304',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4450',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0215',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0216',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0217',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0286',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0401',
-                'https://errata.almalinux.org/9/ALSA-2023-2165.html',
-                'https://errata.rockylinux.org/RLSA-2023:0946',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=8818064ce3c3c0f1b740a5aaba2a987e75bfbafd',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=9816136fe31d92ace4037d5da5257f763aeeb4eb',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=c3829dd8825c654652201e16f8a0a0c46ee3f344',
-                'https://linux.oracle.com/cve/CVE-2023-0215.html',
-                'https://linux.oracle.com/errata/ELSA-2023-32791.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-0215',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0003',
-                'https://rustsec.org/advisories/RUSTSEC-2023-0009.html',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://security.netapp.com/advisory/ntap-20230427-0007',
-                'https://security.netapp.com/advisory/ntap-20230427-0007/',
-                'https://security.netapp.com/advisory/ntap-20230427-0009',
-                'https://security.netapp.com/advisory/ntap-20230427-0009/',
-                'https://security.netapp.com/advisory/ntap-20240621-0006',
-                'https://security.netapp.com/advisory/ntap-20240621-0006/',
-                'https://ubuntu.com/security/notices/USN-5844-1',
-                'https://ubuntu.com/security/notices/USN-5845-1',
-                'https://ubuntu.com/security/notices/USN-5845-2',
-                'https://ubuntu.com/security/notices/USN-6564-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-0215',
-                'https://www.openssl.org/news/secadv/20230207.txt'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: use-after-free following BIO_new_NDEF'
-            },
-            {
-              'cve':  'CVE-2023-0286',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '7.4',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H'
-                },
-                'nvd': {
-                  'v3score':  '7.4',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.4',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-843'
-              ],
-              'description':   'There is a type confusion vulnerability relating to X.400 address processing\ninside an X.509 GeneralName. X.400 addresses were parsed as an ASN1_STRING but\nthe public structure definition for GENERAL_NAME incorrectly specified the type\nof the x400Address field as ASN1_TYPE. This field is subsequently interpreted by\nthe OpenSSL function GENERAL_NAME_cmp as an ASN1_TYPE rather than an\nASN1_STRING.\n\nWhen CRL checking is enabled (i.e. the application sets the\nX509_V_FLAG_CRL_CHECK flag), this vulnerability may allow an attacker to pass\narbitrary pointers to a memcmp call, enabling them to read memory contents or\nenact a denial of service. In most cases, the attack requires the attacker to\nprovide both the certificate chain and CRL, neither of which need to have a\nvalid signature. If the attacker only controls one of these inputs, the other\ninput must already contain an X.400 address as a CRL distribution point, which\nis uncommon. As such, this vulnerability is most likely to only affect\napplications which have implemented their own functionality for retrieving CRLs\nover a network.',
-              'diffID':        'sha256:7db77293ef8b674ab8ab4b6a0cba70d834d60b5190aa0c93c227abb02d3a303e',
-              'fixedVersions': [
-                '1.1.1t-r0'
-              ],
-              'installedVersion': '1.1.1k-r0',
-              'packageName':      'libcrypto1.1',
-              'purl':             'pkg:apk/alpine/libcrypto1.1@1.1.1k-r0?arch=x86&distro=3.14.1',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2025:7937',
-                'https://access.redhat.com/security/cve/CVE-2023-0286',
-                'https://access.redhat.com/security/cve/cve-2023-0286',
-                'https://bugzilla.redhat.com/2164440',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144000',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144003',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144006',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144008',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144010',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144012',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144015',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144017',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144019',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2145170',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2158412',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164440',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164487',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164488',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164492',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164497',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164499',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164500',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4203',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4304',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4450',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0215',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0216',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0217',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0286',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0401',
-                'https://errata.almalinux.org/9/ALSA-2025-7937.html',
-                'https://errata.rockylinux.org/RLSA-2023:0946',
-                'https://ftp.openbsd.org/pub/OpenBSD/LibreSSL/libressl-3.6.2-relnotes.txt',
-                'https://ftp.openbsd.org/pub/OpenBSD/patches/7.2/common/018_x509.patch.sig',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=2c6c9d439b484e1ba9830d8454a34fa4f80fdfe9',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=2f7530077e0ef79d98718138716bc51ca0cad658',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=fd2af07dc083a350c959147097003a14a5e8ac4d',
-                'https://github.com/pyca/cryptography',
-                'https://github.com/pyca/cryptography/security/advisories/GHSA-x4qr-2fvf-3mr5',
-                'https://linux.oracle.com/cve/CVE-2023-0286.html',
-                'https://linux.oracle.com/errata/ELSA-2025-7937.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-0286',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0003',
-                'https://rustsec.org/advisories/RUSTSEC-2023-0006.html',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://ubuntu.com/security/notices/USN-5844-1',
-                'https://ubuntu.com/security/notices/USN-5845-1',
-                'https://ubuntu.com/security/notices/USN-5845-2',
-                'https://ubuntu.com/security/notices/USN-6564-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-0286',
-                'https://www.openssl.org/news/secadv/20230207.txt'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: X.400 address type confusion in X.509 GeneralName'
-            },
-            {
-              'cve':  'CVE-2023-0464',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-295'
-              ],
-              'description':   "A security vulnerability has been identified in all supported versions\n\nof OpenSSL related to the verification of X.509 certificate chains\nthat include policy constraints.  Attackers may be able to exploit this\nvulnerability by creating a malicious certificate chain that triggers\nexponential use of computational resources, leading to a denial-of-service\n(DoS) attack on affected systems.\n\nPolicy processing is disabled by default but can be enabled by passing\nthe `-policy' argument to the command line utilities or by calling the\n`X509_VERIFY_PARAM_set1_policies()' function.",
-              'diffID':        'sha256:7db77293ef8b674ab8ab4b6a0cba70d834d60b5190aa0c93c227abb02d3a303e',
-              'fixedVersions': [
-                '1.1.1t-r1'
-              ],
-              'installedVersion': '1.1.1k-r0',
-              'packageName':      'libcrypto1.1',
-              'purl':             'pkg:apk/alpine/libcrypto1.1@1.1.1k-r0?arch=x86&distro=3.14.1',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2023:3722',
-                'https://access.redhat.com/security/cve/CVE-2023-0464',
-                'https://bugzilla.redhat.com/2181082',
-                'https://bugzilla.redhat.com/2182561',
-                'https://bugzilla.redhat.com/2182565',
-                'https://bugzilla.redhat.com/2188461',
-                'https://bugzilla.redhat.com/2207947',
-                'https://errata.almalinux.org/9/ALSA-2023-3722.html',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=2017771e2db3e2b96f89bbe8766c3209f6a99545',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=2dcd4f1e3115f38cefa43e3efbe9b801c27e642e',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=879f7080d7e141f415c79eaa3a8ac4a3dad0348b',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=959c59c7a0164117e7f8366466a32bb1f8d77ff1',
-                'https://linux.oracle.com/cve/CVE-2023-0464.html',
-                'https://linux.oracle.com/errata/ELSA-2023-3722.html',
-                'https://lists.debian.org/debian-lts-announce/2023/06/msg00011.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-0464',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://security.netapp.com/advisory/ntap-20230406-0006/',
-                'https://security.netapp.com/advisory/ntap-20240621-0006/',
-                'https://ubuntu.com/security/notices/USN-6039-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.couchbase.com/alerts/',
-                'https://www.cve.org/CVERecord?id=CVE-2023-0464',
-                'https://www.debian.org/security/2023/dsa-5417',
-                'https://www.openssl.org/news/secadv/20230322.txt'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: Denial of service by excessive resource usage in verifying X509 policy constraints'
-            },
-            {
-              'cve':  'CVE-2022-2097',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N'
-                },
-                'nvd': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N'
-                },
-                'redhat': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-327'
-              ],
-              'description':   "AES OCB mode for 32-bit x86 platforms using the AES-NI assembly optimised implementation will not encrypt the entirety of the data under some circumstances. This could reveal sixteen bytes of data that was preexisting in the memory that wasn't written. In the special case of \"in place\" encryption, sixteen bytes of the plaintext would be revealed. Since OpenSSL does not support OCB based cipher suites for TLS and DTLS, they are both unaffected. Fixed in OpenSSL 3.0.5 (Affected 3.0.0-3.0.4). Fixed in OpenSSL 1.1.1q (Affected 1.1.1-1.1.1p).",
-              'diffID':        'sha256:7db77293ef8b674ab8ab4b6a0cba70d834d60b5190aa0c93c227abb02d3a303e',
-              'fixedVersions': [
-                '1.1.1q-r0'
-              ],
-              'installedVersion': '1.1.1k-r0',
-              'packageName':      'libcrypto1.1',
-              'purl':             'pkg:apk/alpine/libcrypto1.1@1.1.1k-r0?arch=x86&distro=3.14.1',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2022:6224',
-                'https://access.redhat.com/security/cve/CVE-2022-2097',
-                'https://bugzilla.redhat.com/2081494',
-                'https://bugzilla.redhat.com/2087911',
-                'https://bugzilla.redhat.com/2087913',
-                'https://bugzilla.redhat.com/2097310',
-                'https://bugzilla.redhat.com/2104905',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2081494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2097310',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2100554',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2104905',
-                'https://cert-portal.siemens.com/productcert/pdf/ssa-332410.pdf',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-1292',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-2068',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-2097',
-                'https://errata.almalinux.org/9/ALSA-2022-6224.html',
-                'https://errata.rockylinux.org/RLSA-2022:5818',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=919925673d6c9cfed3c1085497f5dfbbed5fc431',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=a98f339ddd7e8f487d6e0088d4a9a42324885a93',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=919925673d6c9cfed3c1085497f5dfbbed5fc431',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=a98f339ddd7e8f487d6e0088d4a9a42324885a93',
-                'https://github.com/alexcrichton/openssl-src-rs',
-                'https://linux.oracle.com/cve/CVE-2022-2097.html',
-                'https://linux.oracle.com/errata/ELSA-2022-9955.html',
-                'https://lists.debian.org/debian-lts-announce/2023/02/msg00019.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/R6CK57NBQFTPUMXAPJURCGXUYT76NQAK',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/R6CK57NBQFTPUMXAPJURCGXUYT76NQAK/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/V6567JERRHHJW2GNGJGKDRNHR7SNPZK7',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/V6567JERRHHJW2GNGJGKDRNHR7SNPZK7/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VCMNWKERPBKOEBNL7CLTTX3ZZCZLH7XA',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VCMNWKERPBKOEBNL7CLTTX3ZZCZLH7XA/',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/R6CK57NBQFTPUMXAPJURCGXUYT76NQAK',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/R6CK57NBQFTPUMXAPJURCGXUYT76NQAK/',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/V6567JERRHHJW2GNGJGKDRNHR7SNPZK7',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/V6567JERRHHJW2GNGJGKDRNHR7SNPZK7/',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/VCMNWKERPBKOEBNL7CLTTX3ZZCZLH7XA',
-                'https://nvd.nist.gov/vuln/detail/CVE-2022-2097',
-                'https://rustsec.org/advisories/RUSTSEC-2022-0032.html',
-                'https://security.gentoo.org/glsa/202210-02',
-                'https://security.netapp.com/advisory/ntap-20220715-0011',
-                'https://security.netapp.com/advisory/ntap-20220715-0011/',
-                'https://security.netapp.com/advisory/ntap-20230420-0008',
-                'https://security.netapp.com/advisory/ntap-20230420-0008/',
-                'https://security.netapp.com/advisory/ntap-20240621-0006',
-                'https://security.netapp.com/advisory/ntap-20240621-0006/',
-                'https://ubuntu.com/security/notices/USN-5502-1',
-                'https://ubuntu.com/security/notices/USN-6457-1',
-                'https://www.cve.org/CVERecord?id=CVE-2022-2097',
-                'https://www.debian.org/security/2023/dsa-5343',
-                'https://www.openssl.org/news/secadv/20220705.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: AES OCB fails to encrypt some bytes'
-            },
-            {
-              'cve':  'CVE-2022-4304',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N'
-                },
-                'nvd': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N'
-                },
-                'redhat': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-203'
-              ],
-              'description':   'A timing based side channel exists in the OpenSSL RSA Decryption implementation\nwhich could be sufficient to recover a plaintext across a network in a\nBleichenbacher style attack. To achieve a successful decryption an attacker\nwould have to be able to send a very large number of trial messages for\ndecryption. The vulnerability affects all RSA padding modes: PKCS#1 v1.5,\nRSA-OEAP and RSASVE.\n\nFor example, in a TLS connection, RSA is commonly used by a client to send an\nencrypted pre-master secret to the server. An attacker that had observed a\ngenuine connection between a client and a server could use this flaw to send\ntrial messages to the server and record the time taken to process them. After a\nsufficiently large number of messages the attacker could recover the pre-master\nsecret used for the original connection and thus be able to decrypt the\napplication data sent over that connection.',
-              'diffID':        'sha256:7db77293ef8b674ab8ab4b6a0cba70d834d60b5190aa0c93c227abb02d3a303e',
-              'fixedVersions': [
-                '1.1.1t-r0'
-              ],
-              'installedVersion': '1.1.1k-r0',
-              'packageName':      'libcrypto1.1',
-              'purl':             'pkg:apk/alpine/libcrypto1.1@1.1.1k-r0?arch=x86&distro=3.14.1',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2023:2165',
-                'https://access.redhat.com/security/cve/CVE-2022-4304',
-                'https://bugzilla.redhat.com/1960321',
-                'https://bugzilla.redhat.com/2164440',
-                'https://bugzilla.redhat.com/2164487',
-                'https://bugzilla.redhat.com/2164492',
-                'https://bugzilla.redhat.com/2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144000',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144003',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144006',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144008',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144010',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144012',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144015',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144017',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144019',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2145170',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2158412',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164440',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164487',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164488',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164492',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164497',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164499',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164500',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4203',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4304',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4450',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0215',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0216',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0217',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0286',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0401',
-                'https://errata.almalinux.org/9/ALSA-2023-2165.html',
-                'https://errata.rockylinux.org/RLSA-2023:0946',
-                'https://linux.oracle.com/cve/CVE-2022-4304.html',
-                'https://linux.oracle.com/errata/ELSA-2023-32791.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2022-4304',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0003',
-                'https://rustsec.org/advisories/RUSTSEC-2023-0007.html',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://ubuntu.com/security/notices/USN-5844-1',
-                'https://ubuntu.com/security/notices/USN-6564-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2022-4304',
-                'https://www.openssl.org/news/secadv/20230207.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: timing attack in RSA Decryption implementation'
-            },
-            {
-              'cve':  'CVE-2023-0465',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N'
-                },
-                'redhat': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-295'
-              ],
-              'description':   "Applications that use a non-default option when verifying certificates may be\nvulnerable to an attack from a malicious CA to circumvent certain checks.\n\nInvalid certificate policies in leaf certificates are silently ignored by\nOpenSSL and other certificate policy checks are skipped for that certificate.\nA malicious CA could use this to deliberately assert invalid certificate policies\nin order to circumvent policy checking on the certificate altogether.\n\nPolicy processing is disabled by default but can be enabled by passing\nthe `-policy' argument to the command line utilities or by calling the\n`X509_VERIFY_PARAM_set1_policies()' function.",
-              'diffID':        'sha256:7db77293ef8b674ab8ab4b6a0cba70d834d60b5190aa0c93c227abb02d3a303e',
-              'fixedVersions': [
-                '1.1.1t-r2'
-              ],
-              'installedVersion': '1.1.1k-r0',
-              'packageName':      'libcrypto1.1',
-              'purl':             'pkg:apk/alpine/libcrypto1.1@1.1.1k-r0?arch=x86&distro=3.14.1',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2023:3722',
-                'https://access.redhat.com/security/cve/CVE-2023-0465',
-                'https://bugzilla.redhat.com/2181082',
-                'https://bugzilla.redhat.com/2182561',
-                'https://bugzilla.redhat.com/2182565',
-                'https://bugzilla.redhat.com/2188461',
-                'https://bugzilla.redhat.com/2207947',
-                'https://errata.almalinux.org/9/ALSA-2023-3722.html',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=10325176f3d3e98c6e2b3bf5ab1e3b334de6947a',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=1dd43e0709fece299b15208f36cc7c76209ba0bb',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=b013765abfa80036dc779dd0e50602c57bb3bf95',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=facfb1ab745646e97a1920977ae4a9965ea61d5c',
-                'https://linux.oracle.com/cve/CVE-2023-0465.html',
-                'https://linux.oracle.com/errata/ELSA-2023-3722.html',
-                'https://lists.debian.org/debian-lts-announce/2023/06/msg00011.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-0465',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://security.netapp.com/advisory/ntap-20230414-0001/',
-                'https://ubuntu.com/security/notices/USN-6039-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-0465',
-                'https://www.debian.org/security/2023/dsa-5417',
-                'https://www.openssl.org/news/secadv/20230328.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: Invalid certificate policies in leaf certificates are silently ignored'
-            },
-            {
-              'cve':  'CVE-2022-0778',
-              'cvss': {
-                'bitnami': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'ghsa': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'nvd': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-835'
-              ],
-              'description':   'The BN_mod_sqrt() function, which computes a modular square root, contains a bug that can cause it to loop forever for non-prime moduli. Internally this function is used when parsing certificates that contain elliptic curve public keys in compressed form or explicit elliptic curve parameters with a base point encoded in compressed form. It is possible to trigger the infinite loop by crafting a certificate that has invalid explicit curve parameters. Since certificate parsing happens prior to verification of the certificate signature, any process that parses an externally supplied certificate may thus be subject to a denial of service attack. The infinite loop can also be reached when parsing crafted private keys as they can contain explicit elliptic curve parameters. Thus vulnerable situations include: - TLS clients consuming server certificates - TLS servers consuming client certificates - Hosting providers taking certificates or private keys from customers - Certificate authorities parsing certification requests from subscribers - Anything else which parses ASN.1 elliptic curve parameters Also any other applications that use the BN_mod_sqrt() where the attacker can control the parameter values are vulnerable to this DoS issue. In the OpenSSL 1.0.2 version the public key is not parsed during initial parsing of the certificate which makes it slightly harder to trigger the infinite loop. However any operation which requires the public key from the certificate will trigger the infinite loop. In particular the attacker can use a self-signed certificate to trigger the loop during verification of the certificate signature. This issue affects OpenSSL versions 1.0.2, 1.1.1 and 3.0. It was addressed in the releases of 1.1.1n and 3.0.2 on the 15th March 2022. Fixed in OpenSSL 3.0.2 (Affected 3.0.0,3.0.1). Fixed in OpenSSL 1.1.1n (Affected 1.1.1-1.1.1m). Fixed in OpenSSL 1.0.2zd (Affected 1.0.2-1.0.2zc).',
-              'diffID':        'sha256:7db77293ef8b674ab8ab4b6a0cba70d834d60b5190aa0c93c227abb02d3a303e',
-              'fixedVersions': [
-                '3.3.3p1-r3'
-              ],
-              'installedVersion': '3.3.3p1-r2',
-              'packageName':      'libretls',
-              'purl':             'pkg:apk/alpine/libretls@3.3.3p1-r2?arch=x86&distro=3.14.1',
-              'references':       [
-                'http://packetstormsecurity.com/files/167344/OpenSSL-1.0.2-1.1.1-3.0-BN_mod_sqrt-Infinite-Loop.html',
-                'http://seclists.org/fulldisclosure/2022/May/33',
-                'http://seclists.org/fulldisclosure/2022/May/35',
-                'http://seclists.org/fulldisclosure/2022/May/38',
-                'https://access.redhat.com/errata/RHSA-2022:5326',
-                'https://access.redhat.com/security/cve/CVE-2022-0778',
-                'https://bugzilla.redhat.com/2062202',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2062202',
-                'https://cert-portal.siemens.com/productcert/pdf/ssa-712929.pdf',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-0778',
-                'https://errata.almalinux.org/8/ALSA-2022-5326.html',
-                'https://errata.rockylinux.org/RLSA-2022:4899',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=3118eb64934499d93db3230748a452351d1d9a65',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=380085481c64de749a6dd25cdf0bcf4360b30f83',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=a466912611aa6cbdf550cd10601390e587451246',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=3118eb64934499d93db3230748a452351d1d9a65',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=380085481c64de749a6dd25cdf0bcf4360b30f83',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=a466912611aa6cbdf550cd10601390e587451246',
-                'https://linux.oracle.com/cve/CVE-2022-0778.html',
-                'https://linux.oracle.com/errata/ELSA-2022-9272.html',
-                'https://lists.debian.org/debian-lts-announce/2022/03/msg00023.html',
-                'https://lists.debian.org/debian-lts-announce/2022/03/msg00024.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/323SNN6ZX7PRJJWP2BUAFLPUAE42XWLZ',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/323SNN6ZX7PRJJWP2BUAFLPUAE42XWLZ/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GDB3GQVJPXJE7X5C5JN6JAA4XUDWD6E6',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GDB3GQVJPXJE7X5C5JN6JAA4XUDWD6E6/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/W6K3PR542DXWLEFFMFIDMME4CWMHJRMG',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/W6K3PR542DXWLEFFMFIDMME4CWMHJRMG/',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/323SNN6ZX7PRJJWP2BUAFLPUAE42XWLZ',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/GDB3GQVJPXJE7X5C5JN6JAA4XUDWD6E6',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/W6K3PR542DXWLEFFMFIDMME4CWMHJRMG',
-                'https://nvd.nist.gov/vuln/detail/CVE-2022-0778',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2022-0002',
-                'https://rustsec.org/advisories/RUSTSEC-2022-0014.html',
-                'https://security.gentoo.org/glsa/202210-02',
-                'https://security.netapp.com/advisory/ntap-20220321-0002',
-                'https://security.netapp.com/advisory/ntap-20220321-0002/',
-                'https://security.netapp.com/advisory/ntap-20220429-0005',
-                'https://security.netapp.com/advisory/ntap-20220429-0005/',
-                'https://security.netapp.com/advisory/ntap-20240621-0006',
-                'https://security.netapp.com/advisory/ntap-20240621-0006/',
-                'https://support.apple.com/kb/HT213255',
-                'https://support.apple.com/kb/HT213256',
-                'https://support.apple.com/kb/HT213257',
-                'https://ubuntu.com/security/notices/USN-5328-1',
-                'https://ubuntu.com/security/notices/USN-5328-2',
-                'https://ubuntu.com/security/notices/USN-6457-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2022-0778',
-                'https://www.debian.org/security/2022/dsa-5103',
-                'https://www.openssl.org/news/secadv/20220315.txt',
-                'https://www.oracle.com/security-alerts/cpuapr2022.html',
-                'https://www.oracle.com/security-alerts/cpujul2022.html',
-                'https://www.tenable.com/security/tns-2022-06',
-                'https://www.tenable.com/security/tns-2022-07',
-                'https://www.tenable.com/security/tns-2022-08',
-                'https://www.tenable.com/security/tns-2022-09'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: Infinite loop in BN_mod_sqrt() reachable when parsing certificates'
-            },
-            {
-              'cve':  'CVE-2021-3711',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '9.8',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'nvd': {
-                  'v3score':  '9.8',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '9.8',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-120'
-              ],
-              'description':   'In order to decrypt SM2 encrypted data an application is expected to call the API function EVP_PKEY_decrypt(). Typically an application will call this function twice. The first time, on entry, the "out" parameter can be NULL and, on exit, the "outlen" parameter is populated with the buffer size required to hold the decrypted plaintext. The application can then allocate a sufficiently sized buffer and call EVP_PKEY_decrypt() again, but this time passing a non-NULL value for the "out" parameter. A bug in the implementation of the SM2 decryption code means that the calculation of the buffer size required to hold the plaintext returned by the first call to EVP_PKEY_decrypt() can be smaller than the actual size required by the second call. This can lead to a buffer overflow when EVP_PKEY_decrypt() is called by the application a second time with a buffer that is too small. A malicious attacker who is able present SM2 content for decryption to an application could cause attacker chosen data to overflow the buffer by up to a maximum of 62 bytes altering the contents of other data held after the buffer, possibly changing application behaviour or causing the application to crash. The location of the buffer is application dependent but is typically heap allocated. Fixed in OpenSSL 1.1.1l (Affected 1.1.1-1.1.1k).',
-              'diffID':        'sha256:7db77293ef8b674ab8ab4b6a0cba70d834d60b5190aa0c93c227abb02d3a303e',
-              'fixedVersions': [
-                '1.1.1l-r0'
-              ],
-              'installedVersion': '1.1.1k-r0',
-              'packageName':      'libssl1.1',
-              'purl':             'pkg:apk/alpine/libssl1.1@1.1.1k-r0?arch=x86&distro=3.14.1',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2021/08/26/2',
-                'https://access.redhat.com/security/cve/CVE-2021-3711',
-                'https://cert-portal.siemens.com/productcert/pdf/ssa-389290.pdf',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=59f5e75f3bced8fc0e130d72a3f582cf7b480b46',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=59f5e75f3bced8fc0e130d72a3f582cf7b480b46',
-                'https://lists.apache.org/thread.html/r18995de860f0e63635f3008fd2a6aca82394249476d21691e7c59c9e%40%3Cdev.tomcat.apache.org%3E',
-                'https://lists.apache.org/thread.html/r18995de860f0e63635f3008fd2a6aca82394249476d21691e7c59c9e@%3Cdev.tomcat.apache.org%3E',
-                'https://lists.apache.org/thread.html/rad5d9f83f0d11fb3f8bb148d179b8a9ad7c6a17f18d70e5805a713d1%40%3Cdev.tomcat.apache.org%3E',
-                'https://lists.apache.org/thread.html/rad5d9f83f0d11fb3f8bb148d179b8a9ad7c6a17f18d70e5805a713d1@%3Cdev.tomcat.apache.org%3E',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-3711',
-                'https://rustsec.org/advisories/RUSTSEC-2021-0097.html',
-                'https://security.gentoo.org/glsa/202209-02',
-                'https://security.gentoo.org/glsa/202210-02',
-                'https://security.netapp.com/advisory/ntap-20210827-0010',
-                'https://security.netapp.com/advisory/ntap-20210827-0010/',
-                'https://security.netapp.com/advisory/ntap-20211022-0003',
-                'https://security.netapp.com/advisory/ntap-20211022-0003/',
-                'https://security.netapp.com/advisory/ntap-20240621-0006',
-                'https://security.netapp.com/advisory/ntap-20240621-0006/',
-                'https://ubuntu.com/security/notices/USN-5051-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-3711',
-                'https://www.debian.org/security/2021/dsa-4963',
-                'https://www.openssl.org/news/secadv/20210824.txt',
-                'https://www.oracle.com/security-alerts/cpuapr2022.html',
-                'https://www.oracle.com/security-alerts/cpujan2022.html',
-                'https://www.oracle.com/security-alerts/cpuoct2021.html',
-                'https://www.tenable.com/security/tns-2021-16',
-                'https://www.tenable.com/security/tns-2022-02'
-              ],
-              'severity':   'CRITICAL',
-              'suppressed': false,
-              'title':      'openssl: SM2 Decryption Buffer Overflow'
-            },
-            {
-              'cve':  'CVE-2021-3712',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '7.4',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H'
-                },
-                'nvd': {
-                  'v3score':  '7.4',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.4',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-125'
-              ],
-              'description':   "ASN.1 strings are represented internally within OpenSSL as an ASN1_STRING structure which contains a buffer holding the string data and a field holding the buffer length. This contrasts with normal C strings which are repesented as a buffer for the string data which is terminated with a NUL (0) byte. Although not a strict requirement, ASN.1 strings that are parsed using OpenSSL's own \"d2i\" functions (and other similar parsing functions) as well as any string whose value has been set with the ASN1_STRING_set() function will additionally NUL terminate the byte array in the ASN1_STRING structure. However, it is possible for applications to directly construct valid ASN1_STRING structures which do not NUL terminate the byte array by directly setting the \"data\" and \"length\" fields in the ASN1_STRING array. This can also happen by using the ASN1_STRING_set0() function. Numerous OpenSSL functions that print ASN.1 data have been found to assume that the ASN1_STRING byte array will be NUL terminated, even though this is not guaranteed for strings that have been directly constructed. Where an application requests an ASN.1 structure to be printed, and where that ASN.1 structure contains ASN1_STRINGs that have been directly constructed by the application without NUL terminating the \"data\" field, then a read buffer overrun can occur. The same thing can also occur during name constraints processing of certificates (for example if a certificate has been directly constructed by the application instead of loading it via the OpenSSL parsing functions, and the certificate contains non NUL terminated ASN1_STRING structures). It can also occur in the X509_get1_email(), X509_REQ_get1_email() and X509_get1_ocsp() functions. If a malicious actor can cause an application to directly construct an ASN1_STRING and then process it through one of the affected OpenSSL functions then this issue could be hit. This might result in a crash (causing a Denial of Service attack). It could also result in the disclosure of private memory contents (such as private keys, or sensitive plaintext). Fixed in OpenSSL 1.1.1l (Affected 1.1.1-1.1.1k). Fixed in OpenSSL 1.0.2za (Affected 1.0.2-1.0.2y).",
-              'diffID':        'sha256:7db77293ef8b674ab8ab4b6a0cba70d834d60b5190aa0c93c227abb02d3a303e',
-              'fixedVersions': [
-                '1.1.1l-r0'
-              ],
-              'installedVersion': '1.1.1k-r0',
-              'packageName':      'libssl1.1',
-              'purl':             'pkg:apk/alpine/libssl1.1@1.1.1k-r0?arch=x86&distro=3.14.1',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2021/08/26/2',
-                'https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2021-3712.json',
-                'https://access.redhat.com/security/cve/CVE-2021-3712',
-                'https://cert-portal.siemens.com/productcert/pdf/ssa-244969.pdf',
-                'https://cert-portal.siemens.com/productcert/pdf/ssa-389290.pdf',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=94d23fcff9b2a7a8368dfe52214d5c2569882c11',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=ccb0a11145ee72b042d10593a64eaf9e8a55ec12',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=94d23fcff9b2a7a8368dfe52214d5c2569882c11',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=ccb0a11145ee72b042d10593a64eaf9e8a55ec12',
-                'https://kc.mcafee.com/corporate/index?page=content&id=SB10366',
-                'https://linux.oracle.com/cve/CVE-2021-3712.html',
-                'https://linux.oracle.com/errata/ELSA-2022-9023.html',
-                'https://lists.apache.org/thread.html/r18995de860f0e63635f3008fd2a6aca82394249476d21691e7c59c9e%40%3Cdev.tomcat.apache.org%3E',
-                'https://lists.apache.org/thread.html/r18995de860f0e63635f3008fd2a6aca82394249476d21691e7c59c9e@%3Cdev.tomcat.apache.org%3E',
-                'https://lists.apache.org/thread.html/rad5d9f83f0d11fb3f8bb148d179b8a9ad7c6a17f18d70e5805a713d1%40%3Cdev.tomcat.apache.org%3E',
-                'https://lists.apache.org/thread.html/rad5d9f83f0d11fb3f8bb148d179b8a9ad7c6a17f18d70e5805a713d1@%3Cdev.tomcat.apache.org%3E',
-                'https://lists.debian.org/debian-lts-announce/2021/09/msg00014.html',
-                'https://lists.debian.org/debian-lts-announce/2021/09/msg00021.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-3712',
-                'https://rustsec.org/advisories/RUSTSEC-2021-0098.html',
-                'https://security.gentoo.org/glsa/202209-02',
-                'https://security.gentoo.org/glsa/202210-02',
-                'https://security.netapp.com/advisory/ntap-20210827-0010',
-                'https://security.netapp.com/advisory/ntap-20210827-0010/',
-                'https://security.netapp.com/advisory/ntap-20240621-0006',
-                'https://security.netapp.com/advisory/ntap-20240621-0006/',
-                'https://ubuntu.com/security/notices/USN-5051-1',
-                'https://ubuntu.com/security/notices/USN-5051-2',
-                'https://ubuntu.com/security/notices/USN-5051-3',
-                'https://ubuntu.com/security/notices/USN-5051-4 (regression only in trusty/esm)',
-                'https://ubuntu.com/security/notices/USN-5088-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-3712',
-                'https://www.debian.org/security/2021/dsa-4963',
-                'https://www.openssl.org/news/secadv/20210824.txt',
-                'https://www.oracle.com/security-alerts/cpuapr2022.html',
-                'https://www.oracle.com/security-alerts/cpujan2022.html',
-                'https://www.oracle.com/security-alerts/cpuoct2021.html',
-                'https://www.tenable.com/security/tns-2021-16',
-                'https://www.tenable.com/security/tns-2022-02'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: Read buffer overruns processing ASN.1 strings'
-            },
-            {
-              'cve':  'CVE-2022-0778',
-              'cvss': {
-                'bitnami': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'ghsa': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'nvd': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-835'
-              ],
-              'description':   'The BN_mod_sqrt() function, which computes a modular square root, contains a bug that can cause it to loop forever for non-prime moduli. Internally this function is used when parsing certificates that contain elliptic curve public keys in compressed form or explicit elliptic curve parameters with a base point encoded in compressed form. It is possible to trigger the infinite loop by crafting a certificate that has invalid explicit curve parameters. Since certificate parsing happens prior to verification of the certificate signature, any process that parses an externally supplied certificate may thus be subject to a denial of service attack. The infinite loop can also be reached when parsing crafted private keys as they can contain explicit elliptic curve parameters. Thus vulnerable situations include: - TLS clients consuming server certificates - TLS servers consuming client certificates - Hosting providers taking certificates or private keys from customers - Certificate authorities parsing certification requests from subscribers - Anything else which parses ASN.1 elliptic curve parameters Also any other applications that use the BN_mod_sqrt() where the attacker can control the parameter values are vulnerable to this DoS issue. In the OpenSSL 1.0.2 version the public key is not parsed during initial parsing of the certificate which makes it slightly harder to trigger the infinite loop. However any operation which requires the public key from the certificate will trigger the infinite loop. In particular the attacker can use a self-signed certificate to trigger the loop during verification of the certificate signature. This issue affects OpenSSL versions 1.0.2, 1.1.1 and 3.0. It was addressed in the releases of 1.1.1n and 3.0.2 on the 15th March 2022. Fixed in OpenSSL 3.0.2 (Affected 3.0.0,3.0.1). Fixed in OpenSSL 1.1.1n (Affected 1.1.1-1.1.1m). Fixed in OpenSSL 1.0.2zd (Affected 1.0.2-1.0.2zc).',
-              'diffID':        'sha256:7db77293ef8b674ab8ab4b6a0cba70d834d60b5190aa0c93c227abb02d3a303e',
-              'fixedVersions': [
-                '1.1.1n-r0'
-              ],
-              'installedVersion': '1.1.1k-r0',
-              'packageName':      'libssl1.1',
-              'purl':             'pkg:apk/alpine/libssl1.1@1.1.1k-r0?arch=x86&distro=3.14.1',
-              'references':       [
-                'http://packetstormsecurity.com/files/167344/OpenSSL-1.0.2-1.1.1-3.0-BN_mod_sqrt-Infinite-Loop.html',
-                'http://seclists.org/fulldisclosure/2022/May/33',
-                'http://seclists.org/fulldisclosure/2022/May/35',
-                'http://seclists.org/fulldisclosure/2022/May/38',
-                'https://access.redhat.com/errata/RHSA-2022:5326',
-                'https://access.redhat.com/security/cve/CVE-2022-0778',
-                'https://bugzilla.redhat.com/2062202',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2062202',
-                'https://cert-portal.siemens.com/productcert/pdf/ssa-712929.pdf',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-0778',
-                'https://errata.almalinux.org/8/ALSA-2022-5326.html',
-                'https://errata.rockylinux.org/RLSA-2022:4899',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=3118eb64934499d93db3230748a452351d1d9a65',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=380085481c64de749a6dd25cdf0bcf4360b30f83',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=a466912611aa6cbdf550cd10601390e587451246',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=3118eb64934499d93db3230748a452351d1d9a65',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=380085481c64de749a6dd25cdf0bcf4360b30f83',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=a466912611aa6cbdf550cd10601390e587451246',
-                'https://linux.oracle.com/cve/CVE-2022-0778.html',
-                'https://linux.oracle.com/errata/ELSA-2022-9272.html',
-                'https://lists.debian.org/debian-lts-announce/2022/03/msg00023.html',
-                'https://lists.debian.org/debian-lts-announce/2022/03/msg00024.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/323SNN6ZX7PRJJWP2BUAFLPUAE42XWLZ',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/323SNN6ZX7PRJJWP2BUAFLPUAE42XWLZ/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GDB3GQVJPXJE7X5C5JN6JAA4XUDWD6E6',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GDB3GQVJPXJE7X5C5JN6JAA4XUDWD6E6/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/W6K3PR542DXWLEFFMFIDMME4CWMHJRMG',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/W6K3PR542DXWLEFFMFIDMME4CWMHJRMG/',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/323SNN6ZX7PRJJWP2BUAFLPUAE42XWLZ',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/GDB3GQVJPXJE7X5C5JN6JAA4XUDWD6E6',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/W6K3PR542DXWLEFFMFIDMME4CWMHJRMG',
-                'https://nvd.nist.gov/vuln/detail/CVE-2022-0778',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2022-0002',
-                'https://rustsec.org/advisories/RUSTSEC-2022-0014.html',
-                'https://security.gentoo.org/glsa/202210-02',
-                'https://security.netapp.com/advisory/ntap-20220321-0002',
-                'https://security.netapp.com/advisory/ntap-20220321-0002/',
-                'https://security.netapp.com/advisory/ntap-20220429-0005',
-                'https://security.netapp.com/advisory/ntap-20220429-0005/',
-                'https://security.netapp.com/advisory/ntap-20240621-0006',
-                'https://security.netapp.com/advisory/ntap-20240621-0006/',
-                'https://support.apple.com/kb/HT213255',
-                'https://support.apple.com/kb/HT213256',
-                'https://support.apple.com/kb/HT213257',
-                'https://ubuntu.com/security/notices/USN-5328-1',
-                'https://ubuntu.com/security/notices/USN-5328-2',
-                'https://ubuntu.com/security/notices/USN-6457-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2022-0778',
-                'https://www.debian.org/security/2022/dsa-5103',
-                'https://www.openssl.org/news/secadv/20220315.txt',
-                'https://www.oracle.com/security-alerts/cpuapr2022.html',
-                'https://www.oracle.com/security-alerts/cpujul2022.html',
-                'https://www.tenable.com/security/tns-2022-06',
-                'https://www.tenable.com/security/tns-2022-07',
-                'https://www.tenable.com/security/tns-2022-08',
-                'https://www.tenable.com/security/tns-2022-09'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: Infinite loop in BN_mod_sqrt() reachable when parsing certificates'
-            },
-            {
-              'cve':  'CVE-2022-4450',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'nvd': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-415'
-              ],
-              'description':   'The function PEM_read_bio_ex() reads a PEM file from a BIO and parses and\ndecodes the "name" (e.g. "CERTIFICATE"), any header data and the payload data.\nIf the function succeeds then the "name_out", "header" and "data" arguments are\npopulated with pointers to buffers containing the relevant decoded data. The\ncaller is responsible for freeing those buffers. It is possible to construct a\nPEM file that results in 0 bytes of payload data. In this case PEM_read_bio_ex()\nwill return a failure code but will populate the header argument with a pointer\nto a buffer that has already been freed. If the caller also frees this buffer\nthen a double free will occur. This will most likely lead to a crash. This\ncould be exploited by an attacker who has the ability to supply malicious PEM\nfiles for parsing to achieve a denial of service attack.\n\nThe functions PEM_read_bio() and PEM_read() are simple wrappers around\nPEM_read_bio_ex() and therefore these functions are also directly affected.\n\nThese functions are also called indirectly by a number of other OpenSSL\nfunctions including PEM_X509_INFO_read_bio_ex() and\nSSL_CTX_use_serverinfo_file() which are also vulnerable. Some OpenSSL internal\nuses of these functions are not vulnerable because the caller does not free the\nheader argument if PEM_read_bio_ex() returns a failure code. These locations\ninclude the PEM_read_bio_TYPE() functions as well as the decoders introduced in\nOpenSSL 3.0.\n\nThe OpenSSL asn1parse command line application is also impacted by this issue.',
-              'diffID':        'sha256:7db77293ef8b674ab8ab4b6a0cba70d834d60b5190aa0c93c227abb02d3a303e',
-              'fixedVersions': [
-                '1.1.1t-r0'
-              ],
-              'installedVersion': '1.1.1k-r0',
-              'packageName':      'libssl1.1',
-              'purl':             'pkg:apk/alpine/libssl1.1@1.1.1k-r0?arch=x86&distro=3.14.1',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2023:2165',
-                'https://access.redhat.com/security/cve/CVE-2022-4450',
-                'https://bugzilla.redhat.com/1960321',
-                'https://bugzilla.redhat.com/2164440',
-                'https://bugzilla.redhat.com/2164487',
-                'https://bugzilla.redhat.com/2164492',
-                'https://bugzilla.redhat.com/2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144000',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144003',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144006',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144008',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144010',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144012',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144015',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144017',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144019',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2145170',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2158412',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164440',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164487',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164488',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164492',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164497',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164499',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164500',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4203',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4304',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4450',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0215',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0216',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0217',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0286',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0401',
-                'https://errata.almalinux.org/9/ALSA-2023-2165.html',
-                'https://errata.rockylinux.org/RLSA-2023:0946',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=63bcf189be73a9cc1264059bed6f57974be74a83',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=bbcf509bd046b34cca19c766bbddc31683d0858b',
-                'https://linux.oracle.com/cve/CVE-2022-4450.html',
-                'https://linux.oracle.com/errata/ELSA-2023-32791.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2022-4450',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0003',
-                'https://rustsec.org/advisories/RUSTSEC-2023-0010.html',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://ubuntu.com/security/notices/USN-5844-1',
-                'https://ubuntu.com/security/notices/USN-6564-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2022-4450',
-                'https://www.openssl.org/news/secadv/20230207.txt'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: double free after calling PEM_read_bio_ex'
-            },
-            {
-              'cve':  'CVE-2023-0215',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'nvd': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   'The public API function BIO_new_NDEF is a helper function used for streaming\nASN.1 data via a BIO. It is primarily used internally to OpenSSL to support the\nSMIME, CMS and PKCS7 streaming capabilities, but may also be called directly by\nend user applications.\n\nThe function receives a BIO from the caller, prepends a new BIO_f_asn1 filter\nBIO onto the front of it to form a BIO chain, and then returns the new head of\nthe BIO chain to the caller. Under certain conditions, for example if a CMS\nrecipient public key is invalid, the new filter BIO is freed and the function\nreturns a NULL result indicating a failure. However, in this case, the BIO chain\nis not properly cleaned up and the BIO passed by the caller still retains\ninternal pointers to the previously freed filter BIO. If the caller then goes on\nto call BIO_pop() on the BIO then a use-after-free will occur. This will most\nlikely result in a crash.\n\n\n\nThis scenario occurs directly in the internal function B64_write_ASN1() which\nmay cause BIO_new_NDEF() to be called and will subsequently call BIO_pop() on\nthe BIO. This internal function is in turn called by the public API functions\nPEM_write_bio_ASN1_stream, PEM_write_bio_CMS_stream, PEM_write_bio_PKCS7_stream,\nSMIME_write_ASN1, SMIME_write_CMS and SMIME_write_PKCS7.\n\nOther public API functions that may be impacted by this include\ni2d_ASN1_bio_stream, BIO_new_CMS, BIO_new_PKCS7, i2d_CMS_bio_stream and\ni2d_PKCS7_bio_stream.\n\nThe OpenSSL cms and smime command line applications are similarly affected.',
-              'diffID':        'sha256:7db77293ef8b674ab8ab4b6a0cba70d834d60b5190aa0c93c227abb02d3a303e',
-              'fixedVersions': [
-                '1.1.1t-r0'
-              ],
-              'installedVersion': '1.1.1k-r0',
-              'packageName':      'libssl1.1',
-              'purl':             'pkg:apk/alpine/libssl1.1@1.1.1k-r0?arch=x86&distro=3.14.1',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2023:2165',
-                'https://access.redhat.com/security/cve/CVE-2023-0215',
-                'https://bugzilla.redhat.com/1960321',
-                'https://bugzilla.redhat.com/2164440',
-                'https://bugzilla.redhat.com/2164487',
-                'https://bugzilla.redhat.com/2164492',
-                'https://bugzilla.redhat.com/2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144000',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144003',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144006',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144008',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144010',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144012',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144015',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144017',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144019',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2145170',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2158412',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164440',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164487',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164488',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164492',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164497',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164499',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164500',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4203',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4304',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4450',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0215',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0216',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0217',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0286',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0401',
-                'https://errata.almalinux.org/9/ALSA-2023-2165.html',
-                'https://errata.rockylinux.org/RLSA-2023:0946',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=8818064ce3c3c0f1b740a5aaba2a987e75bfbafd',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=9816136fe31d92ace4037d5da5257f763aeeb4eb',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=c3829dd8825c654652201e16f8a0a0c46ee3f344',
-                'https://linux.oracle.com/cve/CVE-2023-0215.html',
-                'https://linux.oracle.com/errata/ELSA-2023-32791.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-0215',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0003',
-                'https://rustsec.org/advisories/RUSTSEC-2023-0009.html',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://security.netapp.com/advisory/ntap-20230427-0007',
-                'https://security.netapp.com/advisory/ntap-20230427-0007/',
-                'https://security.netapp.com/advisory/ntap-20230427-0009',
-                'https://security.netapp.com/advisory/ntap-20230427-0009/',
-                'https://security.netapp.com/advisory/ntap-20240621-0006',
-                'https://security.netapp.com/advisory/ntap-20240621-0006/',
-                'https://ubuntu.com/security/notices/USN-5844-1',
-                'https://ubuntu.com/security/notices/USN-5845-1',
-                'https://ubuntu.com/security/notices/USN-5845-2',
-                'https://ubuntu.com/security/notices/USN-6564-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-0215',
-                'https://www.openssl.org/news/secadv/20230207.txt'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: use-after-free following BIO_new_NDEF'
-            },
-            {
-              'cve':  'CVE-2023-0286',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '7.4',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H'
-                },
-                'nvd': {
-                  'v3score':  '7.4',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.4',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-843'
-              ],
-              'description':   'There is a type confusion vulnerability relating to X.400 address processing\ninside an X.509 GeneralName. X.400 addresses were parsed as an ASN1_STRING but\nthe public structure definition for GENERAL_NAME incorrectly specified the type\nof the x400Address field as ASN1_TYPE. This field is subsequently interpreted by\nthe OpenSSL function GENERAL_NAME_cmp as an ASN1_TYPE rather than an\nASN1_STRING.\n\nWhen CRL checking is enabled (i.e. the application sets the\nX509_V_FLAG_CRL_CHECK flag), this vulnerability may allow an attacker to pass\narbitrary pointers to a memcmp call, enabling them to read memory contents or\nenact a denial of service. In most cases, the attack requires the attacker to\nprovide both the certificate chain and CRL, neither of which need to have a\nvalid signature. If the attacker only controls one of these inputs, the other\ninput must already contain an X.400 address as a CRL distribution point, which\nis uncommon. As such, this vulnerability is most likely to only affect\napplications which have implemented their own functionality for retrieving CRLs\nover a network.',
-              'diffID':        'sha256:7db77293ef8b674ab8ab4b6a0cba70d834d60b5190aa0c93c227abb02d3a303e',
-              'fixedVersions': [
-                '1.1.1t-r0'
-              ],
-              'installedVersion': '1.1.1k-r0',
-              'packageName':      'libssl1.1',
-              'purl':             'pkg:apk/alpine/libssl1.1@1.1.1k-r0?arch=x86&distro=3.14.1',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2025:7937',
-                'https://access.redhat.com/security/cve/CVE-2023-0286',
-                'https://access.redhat.com/security/cve/cve-2023-0286',
-                'https://bugzilla.redhat.com/2164440',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144000',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144003',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144006',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144008',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144010',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144012',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144015',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144017',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144019',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2145170',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2158412',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164440',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164487',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164488',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164492',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164497',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164499',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164500',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4203',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4304',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4450',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0215',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0216',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0217',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0286',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0401',
-                'https://errata.almalinux.org/9/ALSA-2025-7937.html',
-                'https://errata.rockylinux.org/RLSA-2023:0946',
-                'https://ftp.openbsd.org/pub/OpenBSD/LibreSSL/libressl-3.6.2-relnotes.txt',
-                'https://ftp.openbsd.org/pub/OpenBSD/patches/7.2/common/018_x509.patch.sig',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=2c6c9d439b484e1ba9830d8454a34fa4f80fdfe9',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=2f7530077e0ef79d98718138716bc51ca0cad658',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=fd2af07dc083a350c959147097003a14a5e8ac4d',
-                'https://github.com/pyca/cryptography',
-                'https://github.com/pyca/cryptography/security/advisories/GHSA-x4qr-2fvf-3mr5',
-                'https://linux.oracle.com/cve/CVE-2023-0286.html',
-                'https://linux.oracle.com/errata/ELSA-2025-7937.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-0286',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0003',
-                'https://rustsec.org/advisories/RUSTSEC-2023-0006.html',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://ubuntu.com/security/notices/USN-5844-1',
-                'https://ubuntu.com/security/notices/USN-5845-1',
-                'https://ubuntu.com/security/notices/USN-5845-2',
-                'https://ubuntu.com/security/notices/USN-6564-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-0286',
-                'https://www.openssl.org/news/secadv/20230207.txt'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: X.400 address type confusion in X.509 GeneralName'
-            },
-            {
-              'cve':  'CVE-2023-0464',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-295'
-              ],
-              'description':   "A security vulnerability has been identified in all supported versions\n\nof OpenSSL related to the verification of X.509 certificate chains\nthat include policy constraints.  Attackers may be able to exploit this\nvulnerability by creating a malicious certificate chain that triggers\nexponential use of computational resources, leading to a denial-of-service\n(DoS) attack on affected systems.\n\nPolicy processing is disabled by default but can be enabled by passing\nthe `-policy' argument to the command line utilities or by calling the\n`X509_VERIFY_PARAM_set1_policies()' function.",
-              'diffID':        'sha256:7db77293ef8b674ab8ab4b6a0cba70d834d60b5190aa0c93c227abb02d3a303e',
-              'fixedVersions': [
-                '1.1.1t-r1'
-              ],
-              'installedVersion': '1.1.1k-r0',
-              'packageName':      'libssl1.1',
-              'purl':             'pkg:apk/alpine/libssl1.1@1.1.1k-r0?arch=x86&distro=3.14.1',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2023:3722',
-                'https://access.redhat.com/security/cve/CVE-2023-0464',
-                'https://bugzilla.redhat.com/2181082',
-                'https://bugzilla.redhat.com/2182561',
-                'https://bugzilla.redhat.com/2182565',
-                'https://bugzilla.redhat.com/2188461',
-                'https://bugzilla.redhat.com/2207947',
-                'https://errata.almalinux.org/9/ALSA-2023-3722.html',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=2017771e2db3e2b96f89bbe8766c3209f6a99545',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=2dcd4f1e3115f38cefa43e3efbe9b801c27e642e',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=879f7080d7e141f415c79eaa3a8ac4a3dad0348b',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=959c59c7a0164117e7f8366466a32bb1f8d77ff1',
-                'https://linux.oracle.com/cve/CVE-2023-0464.html',
-                'https://linux.oracle.com/errata/ELSA-2023-3722.html',
-                'https://lists.debian.org/debian-lts-announce/2023/06/msg00011.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-0464',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://security.netapp.com/advisory/ntap-20230406-0006/',
-                'https://security.netapp.com/advisory/ntap-20240621-0006/',
-                'https://ubuntu.com/security/notices/USN-6039-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.couchbase.com/alerts/',
-                'https://www.cve.org/CVERecord?id=CVE-2023-0464',
-                'https://www.debian.org/security/2023/dsa-5417',
-                'https://www.openssl.org/news/secadv/20230322.txt'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: Denial of service by excessive resource usage in verifying X509 policy constraints'
-            },
-            {
-              'cve':  'CVE-2022-2097',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N'
-                },
-                'nvd': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N'
-                },
-                'redhat': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-327'
-              ],
-              'description':   "AES OCB mode for 32-bit x86 platforms using the AES-NI assembly optimised implementation will not encrypt the entirety of the data under some circumstances. This could reveal sixteen bytes of data that was preexisting in the memory that wasn't written. In the special case of \"in place\" encryption, sixteen bytes of the plaintext would be revealed. Since OpenSSL does not support OCB based cipher suites for TLS and DTLS, they are both unaffected. Fixed in OpenSSL 3.0.5 (Affected 3.0.0-3.0.4). Fixed in OpenSSL 1.1.1q (Affected 1.1.1-1.1.1p).",
-              'diffID':        'sha256:7db77293ef8b674ab8ab4b6a0cba70d834d60b5190aa0c93c227abb02d3a303e',
-              'fixedVersions': [
-                '1.1.1q-r0'
-              ],
-              'installedVersion': '1.1.1k-r0',
-              'packageName':      'libssl1.1',
-              'purl':             'pkg:apk/alpine/libssl1.1@1.1.1k-r0?arch=x86&distro=3.14.1',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2022:6224',
-                'https://access.redhat.com/security/cve/CVE-2022-2097',
-                'https://bugzilla.redhat.com/2081494',
-                'https://bugzilla.redhat.com/2087911',
-                'https://bugzilla.redhat.com/2087913',
-                'https://bugzilla.redhat.com/2097310',
-                'https://bugzilla.redhat.com/2104905',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2081494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2097310',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2100554',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2104905',
-                'https://cert-portal.siemens.com/productcert/pdf/ssa-332410.pdf',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-1292',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-2068',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-2097',
-                'https://errata.almalinux.org/9/ALSA-2022-6224.html',
-                'https://errata.rockylinux.org/RLSA-2022:5818',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=919925673d6c9cfed3c1085497f5dfbbed5fc431',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=a98f339ddd7e8f487d6e0088d4a9a42324885a93',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=919925673d6c9cfed3c1085497f5dfbbed5fc431',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=a98f339ddd7e8f487d6e0088d4a9a42324885a93',
-                'https://github.com/alexcrichton/openssl-src-rs',
-                'https://linux.oracle.com/cve/CVE-2022-2097.html',
-                'https://linux.oracle.com/errata/ELSA-2022-9955.html',
-                'https://lists.debian.org/debian-lts-announce/2023/02/msg00019.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/R6CK57NBQFTPUMXAPJURCGXUYT76NQAK',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/R6CK57NBQFTPUMXAPJURCGXUYT76NQAK/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/V6567JERRHHJW2GNGJGKDRNHR7SNPZK7',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/V6567JERRHHJW2GNGJGKDRNHR7SNPZK7/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VCMNWKERPBKOEBNL7CLTTX3ZZCZLH7XA',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VCMNWKERPBKOEBNL7CLTTX3ZZCZLH7XA/',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/R6CK57NBQFTPUMXAPJURCGXUYT76NQAK',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/R6CK57NBQFTPUMXAPJURCGXUYT76NQAK/',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/V6567JERRHHJW2GNGJGKDRNHR7SNPZK7',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/V6567JERRHHJW2GNGJGKDRNHR7SNPZK7/',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/VCMNWKERPBKOEBNL7CLTTX3ZZCZLH7XA',
-                'https://nvd.nist.gov/vuln/detail/CVE-2022-2097',
-                'https://rustsec.org/advisories/RUSTSEC-2022-0032.html',
-                'https://security.gentoo.org/glsa/202210-02',
-                'https://security.netapp.com/advisory/ntap-20220715-0011',
-                'https://security.netapp.com/advisory/ntap-20220715-0011/',
-                'https://security.netapp.com/advisory/ntap-20230420-0008',
-                'https://security.netapp.com/advisory/ntap-20230420-0008/',
-                'https://security.netapp.com/advisory/ntap-20240621-0006',
-                'https://security.netapp.com/advisory/ntap-20240621-0006/',
-                'https://ubuntu.com/security/notices/USN-5502-1',
-                'https://ubuntu.com/security/notices/USN-6457-1',
-                'https://www.cve.org/CVERecord?id=CVE-2022-2097',
-                'https://www.debian.org/security/2023/dsa-5343',
-                'https://www.openssl.org/news/secadv/20220705.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: AES OCB fails to encrypt some bytes'
-            },
-            {
-              'cve':  'CVE-2022-4304',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N'
-                },
-                'nvd': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N'
-                },
-                'redhat': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-203'
-              ],
-              'description':   'A timing based side channel exists in the OpenSSL RSA Decryption implementation\nwhich could be sufficient to recover a plaintext across a network in a\nBleichenbacher style attack. To achieve a successful decryption an attacker\nwould have to be able to send a very large number of trial messages for\ndecryption. The vulnerability affects all RSA padding modes: PKCS#1 v1.5,\nRSA-OEAP and RSASVE.\n\nFor example, in a TLS connection, RSA is commonly used by a client to send an\nencrypted pre-master secret to the server. An attacker that had observed a\ngenuine connection between a client and a server could use this flaw to send\ntrial messages to the server and record the time taken to process them. After a\nsufficiently large number of messages the attacker could recover the pre-master\nsecret used for the original connection and thus be able to decrypt the\napplication data sent over that connection.',
-              'diffID':        'sha256:7db77293ef8b674ab8ab4b6a0cba70d834d60b5190aa0c93c227abb02d3a303e',
-              'fixedVersions': [
-                '1.1.1t-r0'
-              ],
-              'installedVersion': '1.1.1k-r0',
-              'packageName':      'libssl1.1',
-              'purl':             'pkg:apk/alpine/libssl1.1@1.1.1k-r0?arch=x86&distro=3.14.1',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2023:2165',
-                'https://access.redhat.com/security/cve/CVE-2022-4304',
-                'https://bugzilla.redhat.com/1960321',
-                'https://bugzilla.redhat.com/2164440',
-                'https://bugzilla.redhat.com/2164487',
-                'https://bugzilla.redhat.com/2164492',
-                'https://bugzilla.redhat.com/2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144000',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144003',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144006',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144008',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144010',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144012',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144015',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144017',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144019',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2145170',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2158412',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164440',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164487',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164488',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164492',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164497',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164499',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164500',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4203',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4304',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4450',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0215',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0216',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0217',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0286',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0401',
-                'https://errata.almalinux.org/9/ALSA-2023-2165.html',
-                'https://errata.rockylinux.org/RLSA-2023:0946',
-                'https://linux.oracle.com/cve/CVE-2022-4304.html',
-                'https://linux.oracle.com/errata/ELSA-2023-32791.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2022-4304',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0003',
-                'https://rustsec.org/advisories/RUSTSEC-2023-0007.html',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://ubuntu.com/security/notices/USN-5844-1',
-                'https://ubuntu.com/security/notices/USN-6564-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2022-4304',
-                'https://www.openssl.org/news/secadv/20230207.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: timing attack in RSA Decryption implementation'
-            },
-            {
-              'cve':  'CVE-2023-0465',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N'
-                },
-                'redhat': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-295'
-              ],
-              'description':   "Applications that use a non-default option when verifying certificates may be\nvulnerable to an attack from a malicious CA to circumvent certain checks.\n\nInvalid certificate policies in leaf certificates are silently ignored by\nOpenSSL and other certificate policy checks are skipped for that certificate.\nA malicious CA could use this to deliberately assert invalid certificate policies\nin order to circumvent policy checking on the certificate altogether.\n\nPolicy processing is disabled by default but can be enabled by passing\nthe `-policy' argument to the command line utilities or by calling the\n`X509_VERIFY_PARAM_set1_policies()' function.",
-              'diffID':        'sha256:7db77293ef8b674ab8ab4b6a0cba70d834d60b5190aa0c93c227abb02d3a303e',
-              'fixedVersions': [
-                '1.1.1t-r2'
-              ],
-              'installedVersion': '1.1.1k-r0',
-              'packageName':      'libssl1.1',
-              'purl':             'pkg:apk/alpine/libssl1.1@1.1.1k-r0?arch=x86&distro=3.14.1',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2023:3722',
-                'https://access.redhat.com/security/cve/CVE-2023-0465',
-                'https://bugzilla.redhat.com/2181082',
-                'https://bugzilla.redhat.com/2182561',
-                'https://bugzilla.redhat.com/2182565',
-                'https://bugzilla.redhat.com/2188461',
-                'https://bugzilla.redhat.com/2207947',
-                'https://errata.almalinux.org/9/ALSA-2023-3722.html',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=10325176f3d3e98c6e2b3bf5ab1e3b334de6947a',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=1dd43e0709fece299b15208f36cc7c76209ba0bb',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=b013765abfa80036dc779dd0e50602c57bb3bf95',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=facfb1ab745646e97a1920977ae4a9965ea61d5c',
-                'https://linux.oracle.com/cve/CVE-2023-0465.html',
-                'https://linux.oracle.com/errata/ELSA-2023-3722.html',
-                'https://lists.debian.org/debian-lts-announce/2023/06/msg00011.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-0465',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://security.netapp.com/advisory/ntap-20230414-0001/',
-                'https://ubuntu.com/security/notices/USN-6039-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-0465',
-                'https://www.debian.org/security/2023/dsa-5417',
-                'https://www.openssl.org/news/secadv/20230328.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: Invalid certificate policies in leaf certificates are silently ignored'
-            },
-            {
-              'cve':  'CVE-2021-42378',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the getvar_i function",
-              'diffID':        'sha256:7db77293ef8b674ab8ab4b6a0cba70d834d60b5190aa0c93c227abb02d3a303e',
-              'fixedVersions': [
-                '1.33.1-r6'
-              ],
-              'installedVersion': '1.33.1-r3',
-              'packageName':      'ssl_client',
-              'purl':             'pkg:apk/alpine/ssl_client@1.33.1-r3?arch=x86&distro=3.14.1',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42378',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42378',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42378'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the getvar_i()'
-            },
-            {
-              'cve':  'CVE-2021-42379',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the next_input_file function",
-              'diffID':        'sha256:7db77293ef8b674ab8ab4b6a0cba70d834d60b5190aa0c93c227abb02d3a303e',
-              'fixedVersions': [
-                '1.33.1-r6'
-              ],
-              'installedVersion': '1.33.1-r3',
-              'packageName':      'ssl_client',
-              'purl':             'pkg:apk/alpine/ssl_client@1.33.1-r3?arch=x86&distro=3.14.1',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42379',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42379',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42379'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the next_input_file()'
-            },
-            {
-              'cve':  'CVE-2021-42380',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the clrvar function",
-              'diffID':        'sha256:7db77293ef8b674ab8ab4b6a0cba70d834d60b5190aa0c93c227abb02d3a303e',
-              'fixedVersions': [
-                '1.33.1-r6'
-              ],
-              'installedVersion': '1.33.1-r3',
-              'packageName':      'ssl_client',
-              'purl':             'pkg:apk/alpine/ssl_client@1.33.1-r3?arch=x86&distro=3.14.1',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42380',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42380',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42380'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the clrvar()'
-            },
-            {
-              'cve':  'CVE-2021-42381',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the hash_init function",
-              'diffID':        'sha256:7db77293ef8b674ab8ab4b6a0cba70d834d60b5190aa0c93c227abb02d3a303e',
-              'fixedVersions': [
-                '1.33.1-r6'
-              ],
-              'installedVersion': '1.33.1-r3',
-              'packageName':      'ssl_client',
-              'purl':             'pkg:apk/alpine/ssl_client@1.33.1-r3?arch=x86&distro=3.14.1',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42381',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42381',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42381'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the hash_init()'
-            },
-            {
-              'cve':  'CVE-2021-42382',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the getvar_s function",
-              'diffID':        'sha256:7db77293ef8b674ab8ab4b6a0cba70d834d60b5190aa0c93c227abb02d3a303e',
-              'fixedVersions': [
-                '1.33.1-r6'
-              ],
-              'installedVersion': '1.33.1-r3',
-              'packageName':      'ssl_client',
-              'purl':             'pkg:apk/alpine/ssl_client@1.33.1-r3?arch=x86&distro=3.14.1',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42382',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42382',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42382'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the getvar_s()'
-            },
-            {
-              'cve':  'CVE-2021-42383',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the evaluate function",
-              'diffID':        'sha256:7db77293ef8b674ab8ab4b6a0cba70d834d60b5190aa0c93c227abb02d3a303e',
-              'fixedVersions': [
-                '1.33.1-r6'
-              ],
-              'installedVersion': '1.33.1-r3',
-              'packageName':      'ssl_client',
-              'purl':             'pkg:apk/alpine/ssl_client@1.33.1-r3?arch=x86&distro=3.14.1',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42383',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42383',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42383'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the evaluate()'
-            },
-            {
-              'cve':  'CVE-2021-42384',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the handle_special function",
-              'diffID':        'sha256:7db77293ef8b674ab8ab4b6a0cba70d834d60b5190aa0c93c227abb02d3a303e',
-              'fixedVersions': [
-                '1.33.1-r6'
-              ],
-              'installedVersion': '1.33.1-r3',
-              'packageName':      'ssl_client',
-              'purl':             'pkg:apk/alpine/ssl_client@1.33.1-r3?arch=x86&distro=3.14.1',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42384',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42384',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42384'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the handle_special()'
-            },
-            {
-              'cve':  'CVE-2021-42385',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the evaluate function",
-              'diffID':        'sha256:7db77293ef8b674ab8ab4b6a0cba70d834d60b5190aa0c93c227abb02d3a303e',
-              'fixedVersions': [
-                '1.33.1-r6'
-              ],
-              'installedVersion': '1.33.1-r3',
-              'packageName':      'ssl_client',
-              'purl':             'pkg:apk/alpine/ssl_client@1.33.1-r3?arch=x86&distro=3.14.1',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42385',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42385',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42385'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the evaluate()'
-            },
-            {
-              'cve':  'CVE-2021-42386',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the nvalloc function",
-              'diffID':        'sha256:7db77293ef8b674ab8ab4b6a0cba70d834d60b5190aa0c93c227abb02d3a303e',
-              'fixedVersions': [
-                '1.33.1-r6'
-              ],
-              'installedVersion': '1.33.1-r3',
-              'packageName':      'ssl_client',
-              'purl':             'pkg:apk/alpine/ssl_client@1.33.1-r3?arch=x86&distro=3.14.1',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42386',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42386',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42386'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the nvalloc()'
-            },
-            {
-              'cve':  'CVE-2022-28391',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '8.8',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-88'
-              ],
-              'description':   "BusyBox through 1.35.0 allows remote attackers to execute arbitrary code if netstat is used to print a DNS PTR record's value to a VT compatible terminal. Alternatively, the attacker could choose to change the terminal's colors.",
-              'diffID':        'sha256:7db77293ef8b674ab8ab4b6a0cba70d834d60b5190aa0c93c227abb02d3a303e',
-              'fixedVersions': [
-                '1.33.1-r7'
-              ],
-              'installedVersion': '1.33.1-r3',
-              'packageName':      'ssl_client',
-              'purl':             'pkg:apk/alpine/ssl_client@1.33.1-r3?arch=x86&distro=3.14.1',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2022-28391',
-                'https://git.alpinelinux.org/aports/plain/main/busybox/0001-libbb-sockaddr2str-ensure-only-printable-characters-.patch',
-                'https://git.alpinelinux.org/aports/plain/main/busybox/0002-nslookup-sanitize-all-printed-strings-with-printable.patch',
-                'https://gitlab.alpinelinux.org/alpine/aports/-/issues/13661',
-                'https://nvd.nist.gov/vuln/detail/CVE-2022-28391',
-                'https://www.cve.org/CVERecord?id=CVE-2022-28391'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: remote attackers may execute arbitrary code if netstat is used'
-            },
-            {
-              'cve':  'CVE-2021-42374',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '5.7',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-125'
-              ],
-              'description':   "An out-of-bounds heap read in Busybox's unlzma applet leads to information leak and denial of service when crafted LZMA-compressed input is decompressed. This can be triggered by any applet/format that",
-              'diffID':        'sha256:7db77293ef8b674ab8ab4b6a0cba70d834d60b5190aa0c93c227abb02d3a303e',
-              'fixedVersions': [
-                '1.33.1-r4'
-              ],
-              'installedVersion': '1.33.1-r3',
-              'packageName':      'ssl_client',
-              'purl':             'pkg:apk/alpine/ssl_client@1.33.1-r3?arch=x86&distro=3.14.1',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42374',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42374',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42374'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'busybox: out-of-bounds read in unlzma applet leads to information leak and denial of service when crafted LZMA-compressed input is decompressed'
-            },
-            {
-              'cve':  'CVE-2021-42375',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.5',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '4.1',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-159'
-              ],
-              'description':   "An incorrect handling of a special element in Busybox's ash applet leads to denial of service when processing a crafted shell command, due to the shell mistaking specific characters for reserved characters. This may be used for DoS under rare conditions of filtered command input.",
-              'diffID':        'sha256:7db77293ef8b674ab8ab4b6a0cba70d834d60b5190aa0c93c227abb02d3a303e',
-              'fixedVersions': [
-                '1.33.1-r5'
-              ],
-              'installedVersion': '1.33.1-r3',
-              'packageName':      'ssl_client',
-              'purl':             'pkg:apk/alpine/ssl_client@1.33.1-r3?arch=x86&distro=3.14.1',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42375',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42375',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42375'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'busybox: incorrect handling of a special element in ash applet leads to denial of service when processing a crafted shell command'
-            },
-            {
-              'cve':  'CVE-2022-37434',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '9.8',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-787',
-                'CWE-120'
-              ],
-              'description':   'zlib through 1.2.12 has a heap-based buffer over-read or buffer overflow in inflate in inflate.c via a large gzip header extra field. NOTE: only applications that call inflateGetHeader are affected. Some common applications bundle the affected zlib source code but may be unable to call inflateGetHeader (e.g., see the nodejs/node reference).',
-              'diffID':        'sha256:7db77293ef8b674ab8ab4b6a0cba70d834d60b5190aa0c93c227abb02d3a303e',
-              'fixedVersions': [
-                '1.2.12-r2'
-              ],
-              'installedVersion': '1.2.11-r3',
-              'packageName':      'zlib',
-              'purl':             'pkg:apk/alpine/zlib@1.2.11-r3?arch=x86&distro=3.14.1',
-              'references':       [
-                'http://seclists.org/fulldisclosure/2022/Oct/37',
-                'http://seclists.org/fulldisclosure/2022/Oct/38',
-                'http://seclists.org/fulldisclosure/2022/Oct/41',
-                'http://seclists.org/fulldisclosure/2022/Oct/42',
-                'http://www.openwall.com/lists/oss-security/2022/08/05/2',
-                'http://www.openwall.com/lists/oss-security/2022/08/09/1',
-                'https://access.redhat.com/errata/RHSA-2022:8291',
-                'https://access.redhat.com/security/cve/CVE-2022-37434',
-                'https://bugzilla.redhat.com/2116639',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2053198',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2077431',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2081296',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2116639',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-37434',
-                'https://errata.almalinux.org/9/ALSA-2022-8291.html',
-                'https://errata.rockylinux.org/RLSA-2022:8291',
-                'https://github.com/curl/curl/issues/9271',
-                'https://github.com/ivd38/zlib_overflow',
-                'https://github.com/madler/zlib/blob/21767c654d31d2dccdde4330529775c6c5fd5389/zlib.h#L1062-L1063',
-                'https://github.com/madler/zlib/commit/1eb7682f845ac9e9bf9ae35bbfb3bad5dacbd91d',
-                'https://github.com/madler/zlib/commit/eff308af425b67093bab25f80f1ae950166bece1',
-                'https://github.com/nodejs/node/blob/75b68c6e4db515f76df73af476eccf382bbcb00a/deps/zlib/inflate.c#L762-L764',
-                'https://linux.oracle.com/cve/CVE-2022-37434.html',
-                'https://linux.oracle.com/errata/ELSA-2023-1095.html',
-                'https://lists.debian.org/debian-lts-announce/2022/09/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JWN4VE3JQR4O2SOUS5TXNLANRPMHWV4I/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NMBOJ77A7T7PQCARMDUK75TE6LLESZ3O/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PAVPQNCG3XRLCLNSQRM3KAN5ZFMVXVTY/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/X5U7OTKZSHY2I3ZFJSR2SHFHW72RKGDK/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YRQAI7H4M4RQZ2IWZUEEXECBE5D56BH2/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2022-37434',
-                'https://security.netapp.com/advisory/ntap-20220901-0005/',
-                'https://security.netapp.com/advisory/ntap-20230427-0007/',
-                'https://support.apple.com/kb/HT213488',
-                'https://support.apple.com/kb/HT213489',
-                'https://support.apple.com/kb/HT213490',
-                'https://support.apple.com/kb/HT213491',
-                'https://support.apple.com/kb/HT213493',
-                'https://support.apple.com/kb/HT213494',
-                'https://ubuntu.com/security/notices/USN-5570-1',
-                'https://ubuntu.com/security/notices/USN-5570-2',
-                'https://ubuntu.com/security/notices/USN-5573-1',
-                'https://ubuntu.com/security/notices/USN-6736-1',
-                'https://ubuntu.com/security/notices/USN-6736-2',
-                'https://www.cve.org/CVERecord?id=CVE-2022-37434',
-                'https://www.debian.org/security/2022/dsa-5218'
-              ],
-              'severity':   'CRITICAL',
-              'suppressed': false,
-              'title':      'zlib: heap-based buffer over-read and overflow in inflate() in inflate.c via a large gzip header extra field'
-            },
-            {
-              'cve':  'CVE-2018-25032',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'nvd': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '8.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-787'
-              ],
-              'description':   'zlib before 1.2.12 allows memory corruption when deflating (i.e., when compressing) if the input has many distant matches.',
-              'diffID':        'sha256:7db77293ef8b674ab8ab4b6a0cba70d834d60b5190aa0c93c227abb02d3a303e',
-              'fixedVersions': [
-                '1.2.12-r0'
-              ],
-              'installedVersion': '1.2.11-r3',
-              'packageName':      'zlib',
-              'purl':             'pkg:apk/alpine/zlib@1.2.11-r3?arch=x86&distro=3.14.1',
-              'references':       [
-                'http://seclists.org/fulldisclosure/2022/May/33',
-                'http://seclists.org/fulldisclosure/2022/May/35',
-                'http://seclists.org/fulldisclosure/2022/May/38',
-                'http://www.openwall.com/lists/oss-security/2022/03/25/2',
-                'http://www.openwall.com/lists/oss-security/2022/03/26/1',
-                'https://access.redhat.com/errata/RHSA-2022:8420',
-                'https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-25032.json',
-                'https://access.redhat.com/security/cve/CVE-2018-25032',
-                'https://bugzilla.redhat.com/2067945',
-                'https://cert-portal.siemens.com/productcert/pdf/ssa-333517.pdf',
-                'https://errata.almalinux.org/9/ALSA-2022-8420.html',
-                'https://github.com/advisories/GHSA-jc36-42cf-vqwj',
-                'https://github.com/madler/zlib/commit/5c44459c3b28a9bd3283aaceab7c615f8020c531',
-                'https://github.com/madler/zlib/compare/v1.2.11...v1.2.12',
-                'https://github.com/madler/zlib/issues/605',
-                'https://github.com/rubysec/ruby-advisory-db/blob/master/gems/nokogiri/CVE-2018-25032.yml',
-                'https://github.com/sparklemotion/nokogiri/releases/tag/v1.13.4',
-                'https://github.com/sparklemotion/nokogiri/security/advisories/GHSA-v6gp-9mmm-c6p5',
-                'https://groups.google.com/g/ruby-security-ann/c/vX7qSjsvWis/m/TJWN4oOKBwAJ',
-                'https://linux.oracle.com/cve/CVE-2018-25032.html',
-                'https://linux.oracle.com/errata/ELSA-2022-9565.html',
-                'https://lists.debian.org/debian-lts-announce/2022/04/msg00000.html',
-                'https://lists.debian.org/debian-lts-announce/2022/05/msg00008.html',
-                'https://lists.debian.org/debian-lts-announce/2022/09/msg00023.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DCZFIJBJTZ7CL5QXBFKTQ22Q26VINRUF/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DF62MVMH3QUGMBDCB3DY2ERQ6EBHTADB/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JZZPTWRYQULAOL3AW7RZJNVZ2UONXCV4/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NS2D2GFPFGOJUL4WQ3DUAY7HF4VWQ77F/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VOKNP2L734AEL47NRYGVZIKEFOUBQY5Y/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/XOKFMSNQ5D5WGMALBNBXU3GE442V74WU/',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/DCZFIJBJTZ7CL5QXBFKTQ22Q26VINRUF',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/DCZFIJBJTZ7CL5QXBFKTQ22Q26VINRUF/',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/DF62MVMH3QUGMBDCB3DY2ERQ6EBHTADB',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/DF62MVMH3QUGMBDCB3DY2ERQ6EBHTADB/',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/JZZPTWRYQULAOL3AW7RZJNVZ2UONXCV4',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/JZZPTWRYQULAOL3AW7RZJNVZ2UONXCV4/',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/NS2D2GFPFGOJUL4WQ3DUAY7HF4VWQ77F',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/NS2D2GFPFGOJUL4WQ3DUAY7HF4VWQ77F/',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/VOKNP2L734AEL47NRYGVZIKEFOUBQY5Y',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/VOKNP2L734AEL47NRYGVZIKEFOUBQY5Y/',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/XOKFMSNQ5D5WGMALBNBXU3GE442V74WU',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/XOKFMSNQ5D5WGMALBNBXU3GE442V74WU/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2018-25032',
-                'https://security.gentoo.org/glsa/202210-42',
-                'https://security.netapp.com/advisory/ntap-20220526-0009',
-                'https://security.netapp.com/advisory/ntap-20220526-0009/',
-                'https://security.netapp.com/advisory/ntap-20220729-0004',
-                'https://security.netapp.com/advisory/ntap-20220729-0004/',
-                'https://support.apple.com/kb/HT213255',
-                'https://support.apple.com/kb/HT213256',
-                'https://support.apple.com/kb/HT213257',
-                'https://ubuntu.com/security/notices/USN-5355-1',
-                'https://ubuntu.com/security/notices/USN-5355-2',
-                'https://ubuntu.com/security/notices/USN-5359-1',
-                'https://ubuntu.com/security/notices/USN-5359-2',
-                'https://ubuntu.com/security/notices/USN-5739-1',
-                'https://ubuntu.com/security/notices/USN-6736-1',
-                'https://ubuntu.com/security/notices/USN-6736-2',
-                'https://www.cve.org/CVERecord?id=CVE-2018-25032',
-                'https://www.debian.org/security/2022/dsa-5111',
-                'https://www.openwall.com/lists/oss-security/2022/03/24/1',
-                'https://www.openwall.com/lists/oss-security/2022/03/28/1',
-                'https://www.openwall.com/lists/oss-security/2022/03/28/3',
-                'https://www.oracle.com/security-alerts/cpujul2022.html'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'zlib: A flaw found in zlib when compressing (not decompressing) certain inputs'
-            }
-          ]
-        }
-      ],
-      'summary': {
-        'critical':   3,
-        'high':       34,
-        'low':        0,
-        'medium':     10,
-        'suppressed': 0,
-        'unknown':    0
-      }
-    }
-  },
-  {
-    'id':    'default/ea1070efc9125020f80520ce86d5bfc0ed2ac468a9b920678582675d2e7ed279',
-    'type':  'storage.sbomscanner.kubewarden.io.vulnerabilityreport',
-    'links': {
-      'patch':  'https://localhost:8005/v1/storage.sbomscanner.kubewarden.io.vulnerabilityreports/default/ea1070efc9125020f80520ce86d5bfc0ed2ac468a9b920678582675d2e7ed279',
-      'remove': 'https://localhost:8005/v1/storage.sbomscanner.kubewarden.io.vulnerabilityreports/default/ea1070efc9125020f80520ce86d5bfc0ed2ac468a9b920678582675d2e7ed279',
-      'self':   'https://localhost:8005/v1/storage.sbomscanner.kubewarden.io.vulnerabilityreports/default/ea1070efc9125020f80520ce86d5bfc0ed2ac468a9b920678582675d2e7ed279',
-      'update': 'https://localhost:8005/v1/storage.sbomscanner.kubewarden.io.vulnerabilityreports/default/ea1070efc9125020f80520ce86d5bfc0ed2ac468a9b920678582675d2e7ed279',
-      'view':   'https://localhost:8005/apis/storage.sbomscanner.kubewarden.io/v1alpha1/namespaces/default/vulnerabilityreports/ea1070efc9125020f80520ce86d5bfc0ed2ac468a9b920678582675d2e7ed279'
-    },
-    'apiVersion':    'storage.sbomscanner.kubewarden.io/v1alpha1',
-    'imageMetadata': {
-      'digest':      'sha256:ae397224603c43cd35bc2e0d863427495c1792a9d72c826d93d4bdef5ee1e094',
-      'platform':    'linux/amd64',
-      'registry':    'demo-02',
-      'registryURI': 'ghcr.io',
-      'repository':  'linuxcontainers/alpine',
-      'tag':         '3.14'
-    },
-    'kind':     'VulnerabilityReport',
-    'metadata': {
-      'creationTimestamp': '2026-01-09T22:46:06Z',
-      'fields':            [
-        'ea1070efc9125020f80520ce86d5bfc0ed2ac468a9b920678582675d2e7ed279',
-        'ghcr.io/linuxcontainers/alpine:3.14',
-        'linux/amd64',
-        '4 (0 suppressed)'
-      ],
-      'labels': {
-        'app.kubernetes.io/managed-by':          'sbomscanner',
-        'app.kubernetes.io/part-of':             'sbomscanner',
-        'sbomscanner.kubewarden.io/scanjob-uid': '42184d01-4b15-466f-98aa-e802d1b6b6b8'
-      },
-      'name':            'ea1070efc9125020f80520ce86d5bfc0ed2ac468a9b920678582675d2e7ed279',
-      'namespace':       'default',
-      'ownerReferences': [
-        {
-          'apiVersion':         'storage.sbomscanner.kubewarden.io/v1alpha1',
-          'blockOwnerDeletion': true,
-          'controller':         true,
-          'kind':               'SBOM',
-          'name':               'ea1070efc9125020f80520ce86d5bfc0ed2ac468a9b920678582675d2e7ed279',
-          'uid':                '5a13fcd4-48fa-4517-85da-c70671c21f83'
-        }
-      ],
-      'relationships': [
-        {
-          'fromId':   'default/ea1070efc9125020f80520ce86d5bfc0ed2ac468a9b920678582675d2e7ed279',
-          'fromType': 'storage.sbomscanner.kubewarden.io.sbom',
-          'rel':      'owner',
-          'state':    'active',
-          'message':  'Resource is current'
-        }
-      ],
-      'resourceVersion': '7',
-      'state':           {
-        'error':         false,
-        'message':       'Resource is current',
-        'name':          'active',
-        'transitioning': false
-      },
-      'uid': '967fff15-0b50-47be-896a-7104817175c7'
-    },
-    'report': {
-      'results': [
-        {
-          'class':           'os-pkgs',
-          'target':          '/var/run/worker/trivy.sbom.3102905468.json (alpine 3.14.9)',
-          'type':            'alpine',
-          'vulnerabilities': [
-            {
-              'cve':  'CVE-2023-0464',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-295'
-              ],
-              'description':   "A security vulnerability has been identified in all supported versions\n\nof OpenSSL related to the verification of X.509 certificate chains\nthat include policy constraints.  Attackers may be able to exploit this\nvulnerability by creating a malicious certificate chain that triggers\nexponential use of computational resources, leading to a denial-of-service\n(DoS) attack on affected systems.\n\nPolicy processing is disabled by default but can be enabled by passing\nthe `-policy' argument to the command line utilities or by calling the\n`X509_VERIFY_PARAM_set1_policies()' function.",
-              'diffID':        'sha256:625523cb9cce7a1bcc1d03e3038de4843a27af3b92d859004bcefb0027291933',
-              'fixedVersions': [
-                '1.1.1t-r1'
-              ],
-              'installedVersion': '1.1.1t-r0',
-              'packageName':      'libcrypto1.1',
-              'purl':             'pkg:apk/alpine/libcrypto1.1@1.1.1t-r0?arch=x86_64&distro=3.14.9',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2023:3722',
-                'https://access.redhat.com/security/cve/CVE-2023-0464',
-                'https://bugzilla.redhat.com/2181082',
-                'https://bugzilla.redhat.com/2182561',
-                'https://bugzilla.redhat.com/2182565',
-                'https://bugzilla.redhat.com/2188461',
-                'https://bugzilla.redhat.com/2207947',
-                'https://errata.almalinux.org/9/ALSA-2023-3722.html',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=2017771e2db3e2b96f89bbe8766c3209f6a99545',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=2dcd4f1e3115f38cefa43e3efbe9b801c27e642e',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=879f7080d7e141f415c79eaa3a8ac4a3dad0348b',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=959c59c7a0164117e7f8366466a32bb1f8d77ff1',
-                'https://linux.oracle.com/cve/CVE-2023-0464.html',
-                'https://linux.oracle.com/errata/ELSA-2023-3722.html',
-                'https://lists.debian.org/debian-lts-announce/2023/06/msg00011.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-0464',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://security.netapp.com/advisory/ntap-20230406-0006/',
-                'https://security.netapp.com/advisory/ntap-20240621-0006/',
-                'https://ubuntu.com/security/notices/USN-6039-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.couchbase.com/alerts/',
-                'https://www.cve.org/CVERecord?id=CVE-2023-0464',
-                'https://www.debian.org/security/2023/dsa-5417',
-                'https://www.openssl.org/news/secadv/20230322.txt'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: Denial of service by excessive resource usage in verifying X509 policy constraints'
-            },
-            {
-              'cve':  'CVE-2023-0465',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N'
-                },
-                'redhat': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-295'
-              ],
-              'description':   "Applications that use a non-default option when verifying certificates may be\nvulnerable to an attack from a malicious CA to circumvent certain checks.\n\nInvalid certificate policies in leaf certificates are silently ignored by\nOpenSSL and other certificate policy checks are skipped for that certificate.\nA malicious CA could use this to deliberately assert invalid certificate policies\nin order to circumvent policy checking on the certificate altogether.\n\nPolicy processing is disabled by default but can be enabled by passing\nthe `-policy' argument to the command line utilities or by calling the\n`X509_VERIFY_PARAM_set1_policies()' function.",
-              'diffID':        'sha256:625523cb9cce7a1bcc1d03e3038de4843a27af3b92d859004bcefb0027291933',
-              'fixedVersions': [
-                '1.1.1t-r2'
-              ],
-              'installedVersion': '1.1.1t-r0',
-              'packageName':      'libcrypto1.1',
-              'purl':             'pkg:apk/alpine/libcrypto1.1@1.1.1t-r0?arch=x86_64&distro=3.14.9',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2023:3722',
-                'https://access.redhat.com/security/cve/CVE-2023-0465',
-                'https://bugzilla.redhat.com/2181082',
-                'https://bugzilla.redhat.com/2182561',
-                'https://bugzilla.redhat.com/2182565',
-                'https://bugzilla.redhat.com/2188461',
-                'https://bugzilla.redhat.com/2207947',
-                'https://errata.almalinux.org/9/ALSA-2023-3722.html',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=10325176f3d3e98c6e2b3bf5ab1e3b334de6947a',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=1dd43e0709fece299b15208f36cc7c76209ba0bb',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=b013765abfa80036dc779dd0e50602c57bb3bf95',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=facfb1ab745646e97a1920977ae4a9965ea61d5c',
-                'https://linux.oracle.com/cve/CVE-2023-0465.html',
-                'https://linux.oracle.com/errata/ELSA-2023-3722.html',
-                'https://lists.debian.org/debian-lts-announce/2023/06/msg00011.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-0465',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://security.netapp.com/advisory/ntap-20230414-0001/',
-                'https://ubuntu.com/security/notices/USN-6039-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-0465',
-                'https://www.debian.org/security/2023/dsa-5417',
-                'https://www.openssl.org/news/secadv/20230328.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: Invalid certificate policies in leaf certificates are silently ignored'
-            },
-            {
-              'cve':  'CVE-2023-0464',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-295'
-              ],
-              'description':   "A security vulnerability has been identified in all supported versions\n\nof OpenSSL related to the verification of X.509 certificate chains\nthat include policy constraints.  Attackers may be able to exploit this\nvulnerability by creating a malicious certificate chain that triggers\nexponential use of computational resources, leading to a denial-of-service\n(DoS) attack on affected systems.\n\nPolicy processing is disabled by default but can be enabled by passing\nthe `-policy' argument to the command line utilities or by calling the\n`X509_VERIFY_PARAM_set1_policies()' function.",
-              'diffID':        'sha256:625523cb9cce7a1bcc1d03e3038de4843a27af3b92d859004bcefb0027291933',
-              'fixedVersions': [
-                '1.1.1t-r1'
-              ],
-              'installedVersion': '1.1.1t-r0',
-              'packageName':      'libssl1.1',
-              'purl':             'pkg:apk/alpine/libssl1.1@1.1.1t-r0?arch=x86_64&distro=3.14.9',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2023:3722',
-                'https://access.redhat.com/security/cve/CVE-2023-0464',
-                'https://bugzilla.redhat.com/2181082',
-                'https://bugzilla.redhat.com/2182561',
-                'https://bugzilla.redhat.com/2182565',
-                'https://bugzilla.redhat.com/2188461',
-                'https://bugzilla.redhat.com/2207947',
-                'https://errata.almalinux.org/9/ALSA-2023-3722.html',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=2017771e2db3e2b96f89bbe8766c3209f6a99545',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=2dcd4f1e3115f38cefa43e3efbe9b801c27e642e',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=879f7080d7e141f415c79eaa3a8ac4a3dad0348b',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=959c59c7a0164117e7f8366466a32bb1f8d77ff1',
-                'https://linux.oracle.com/cve/CVE-2023-0464.html',
-                'https://linux.oracle.com/errata/ELSA-2023-3722.html',
-                'https://lists.debian.org/debian-lts-announce/2023/06/msg00011.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-0464',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://security.netapp.com/advisory/ntap-20230406-0006/',
-                'https://security.netapp.com/advisory/ntap-20240621-0006/',
-                'https://ubuntu.com/security/notices/USN-6039-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.couchbase.com/alerts/',
-                'https://www.cve.org/CVERecord?id=CVE-2023-0464',
-                'https://www.debian.org/security/2023/dsa-5417',
-                'https://www.openssl.org/news/secadv/20230322.txt'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: Denial of service by excessive resource usage in verifying X509 policy constraints'
-            },
-            {
-              'cve':  'CVE-2023-0465',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N'
-                },
-                'redhat': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-295'
-              ],
-              'description':   "Applications that use a non-default option when verifying certificates may be\nvulnerable to an attack from a malicious CA to circumvent certain checks.\n\nInvalid certificate policies in leaf certificates are silently ignored by\nOpenSSL and other certificate policy checks are skipped for that certificate.\nA malicious CA could use this to deliberately assert invalid certificate policies\nin order to circumvent policy checking on the certificate altogether.\n\nPolicy processing is disabled by default but can be enabled by passing\nthe `-policy' argument to the command line utilities or by calling the\n`X509_VERIFY_PARAM_set1_policies()' function.",
-              'diffID':        'sha256:625523cb9cce7a1bcc1d03e3038de4843a27af3b92d859004bcefb0027291933',
-              'fixedVersions': [
-                '1.1.1t-r2'
-              ],
-              'installedVersion': '1.1.1t-r0',
-              'packageName':      'libssl1.1',
-              'purl':             'pkg:apk/alpine/libssl1.1@1.1.1t-r0?arch=x86_64&distro=3.14.9',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2023:3722',
-                'https://access.redhat.com/security/cve/CVE-2023-0465',
-                'https://bugzilla.redhat.com/2181082',
-                'https://bugzilla.redhat.com/2182561',
-                'https://bugzilla.redhat.com/2182565',
-                'https://bugzilla.redhat.com/2188461',
-                'https://bugzilla.redhat.com/2207947',
-                'https://errata.almalinux.org/9/ALSA-2023-3722.html',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=10325176f3d3e98c6e2b3bf5ab1e3b334de6947a',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=1dd43e0709fece299b15208f36cc7c76209ba0bb',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=b013765abfa80036dc779dd0e50602c57bb3bf95',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=facfb1ab745646e97a1920977ae4a9965ea61d5c',
-                'https://linux.oracle.com/cve/CVE-2023-0465.html',
-                'https://linux.oracle.com/errata/ELSA-2023-3722.html',
-                'https://lists.debian.org/debian-lts-announce/2023/06/msg00011.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-0465',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://security.netapp.com/advisory/ntap-20230414-0001/',
-                'https://ubuntu.com/security/notices/USN-6039-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-0465',
-                'https://www.debian.org/security/2023/dsa-5417',
-                'https://www.openssl.org/news/secadv/20230328.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: Invalid certificate policies in leaf certificates are silently ignored'
-            }
-          ]
-        }
-      ],
-      'summary': {
-        'critical':   0,
-        'high':       2,
-        'low':        0,
-        'medium':     2,
-        'suppressed': 0,
-        'unknown':    0
-      }
-    }
-  },
-  {
-    'id':    'default/ea9dc3de235ad93fb5722e159dd2456b26647eac78e6f8a5518903815034f534',
-    'type':  'storage.sbomscanner.kubewarden.io.vulnerabilityreport',
-    'links': {
-      'patch':  'https://localhost:8005/v1/storage.sbomscanner.kubewarden.io.vulnerabilityreports/default/ea9dc3de235ad93fb5722e159dd2456b26647eac78e6f8a5518903815034f534',
-      'remove': 'https://localhost:8005/v1/storage.sbomscanner.kubewarden.io.vulnerabilityreports/default/ea9dc3de235ad93fb5722e159dd2456b26647eac78e6f8a5518903815034f534',
-      'self':   'https://localhost:8005/v1/storage.sbomscanner.kubewarden.io.vulnerabilityreports/default/ea9dc3de235ad93fb5722e159dd2456b26647eac78e6f8a5518903815034f534',
-      'update': 'https://localhost:8005/v1/storage.sbomscanner.kubewarden.io.vulnerabilityreports/default/ea9dc3de235ad93fb5722e159dd2456b26647eac78e6f8a5518903815034f534',
-      'view':   'https://localhost:8005/apis/storage.sbomscanner.kubewarden.io/v1alpha1/namespaces/default/vulnerabilityreports/ea9dc3de235ad93fb5722e159dd2456b26647eac78e6f8a5518903815034f534'
-    },
-    'apiVersion':    'storage.sbomscanner.kubewarden.io/v1alpha1',
-    'imageMetadata': {
-      'digest':      'sha256:7bf024556a224584c0fff680d650b4be2ad560b17f6f627b11e0e2d5beb4b597',
-      'platform':    'linux/arm/v7',
-      'registry':    'lsong-demo1',
-      'registryURI': 'registry-1.docker.io',
-      'repository':  'library/alpine',
-      'tag':         '3.13.6'
-    },
-    'kind':     'VulnerabilityReport',
-    'metadata': {
-      'creationTimestamp': '2026-01-14T18:52:04Z',
-      'fields':            [
-        'ea9dc3de235ad93fb5722e159dd2456b26647eac78e6f8a5518903815034f534',
-        'registry-1.docker.io/library/alpine:3.13.6',
-        'linux/arm/v7',
-        '32 (0 suppressed)'
-      ],
-      'labels': {
-        'app.kubernetes.io/managed-by':          'sbomscanner',
-        'app.kubernetes.io/part-of':             'sbomscanner',
-        'sbomscanner.kubewarden.io/scanjob-uid': '445c600a-c4b6-40b3-bd71-f2d2140a37d5'
-      },
-      'name':            'ea9dc3de235ad93fb5722e159dd2456b26647eac78e6f8a5518903815034f534',
-      'namespace':       'default',
-      'ownerReferences': [
-        {
-          'apiVersion':         'storage.sbomscanner.kubewarden.io/v1alpha1',
-          'blockOwnerDeletion': true,
-          'controller':         true,
-          'kind':               'SBOM',
-          'name':               'ea9dc3de235ad93fb5722e159dd2456b26647eac78e6f8a5518903815034f534',
-          'uid':                '53a530b8-4aca-487b-832a-3aa917802265'
-        }
-      ],
-      'relationships': [
-        {
-          'fromId':   'default/ea9dc3de235ad93fb5722e159dd2456b26647eac78e6f8a5518903815034f534',
-          'fromType': 'storage.sbomscanner.kubewarden.io.sbom',
-          'rel':      'owner',
-          'state':    'active',
-          'message':  'Resource is current'
-        }
-      ],
-      'resourceVersion': '1',
-      'state':           {
-        'error':         false,
-        'message':       'Resource is current',
-        'name':          'active',
-        'transitioning': false
-      },
-      'uid': '658c1ce4-36fc-4972-847e-50fec7c69804'
-    },
-    'report': {
-      'results': [
-        {
-          'class':           'os-pkgs',
-          'target':          '/var/run/worker/trivy.sbom.4046668059.json (alpine 3.13.6)',
-          'type':            'alpine',
-          'vulnerabilities': [
-            {
-              'cve':  'CVE-2021-42378',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the getvar_i function",
-              'diffID':        'sha256:dad0c82871817986d7e75189be90152b131414057efc8821cc248424abff90eb',
-              'fixedVersions': [
-                '1.32.1-r7'
-              ],
-              'installedVersion': '1.32.1-r6',
-              'packageName':      'busybox',
-              'purl':             'pkg:apk/alpine/busybox@1.32.1-r6?arch=armv7&distro=3.13.6',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42378',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42378',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42378'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the getvar_i()'
-            },
-            {
-              'cve':  'CVE-2021-42379',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the next_input_file function",
-              'diffID':        'sha256:dad0c82871817986d7e75189be90152b131414057efc8821cc248424abff90eb',
-              'fixedVersions': [
-                '1.32.1-r7'
-              ],
-              'installedVersion': '1.32.1-r6',
-              'packageName':      'busybox',
-              'purl':             'pkg:apk/alpine/busybox@1.32.1-r6?arch=armv7&distro=3.13.6',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42379',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42379',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42379'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the next_input_file()'
-            },
-            {
-              'cve':  'CVE-2021-42380',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the clrvar function",
-              'diffID':        'sha256:dad0c82871817986d7e75189be90152b131414057efc8821cc248424abff90eb',
-              'fixedVersions': [
-                '1.32.1-r7'
-              ],
-              'installedVersion': '1.32.1-r6',
-              'packageName':      'busybox',
-              'purl':             'pkg:apk/alpine/busybox@1.32.1-r6?arch=armv7&distro=3.13.6',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42380',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42380',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42380'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the clrvar()'
-            },
-            {
-              'cve':  'CVE-2021-42381',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the hash_init function",
-              'diffID':        'sha256:dad0c82871817986d7e75189be90152b131414057efc8821cc248424abff90eb',
-              'fixedVersions': [
-                '1.32.1-r7'
-              ],
-              'installedVersion': '1.32.1-r6',
-              'packageName':      'busybox',
-              'purl':             'pkg:apk/alpine/busybox@1.32.1-r6?arch=armv7&distro=3.13.6',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42381',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42381',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42381'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the hash_init()'
-            },
-            {
-              'cve':  'CVE-2021-42382',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the getvar_s function",
-              'diffID':        'sha256:dad0c82871817986d7e75189be90152b131414057efc8821cc248424abff90eb',
-              'fixedVersions': [
-                '1.32.1-r7'
-              ],
-              'installedVersion': '1.32.1-r6',
-              'packageName':      'busybox',
-              'purl':             'pkg:apk/alpine/busybox@1.32.1-r6?arch=armv7&distro=3.13.6',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42382',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42382',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42382'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the getvar_s()'
-            },
-            {
-              'cve':  'CVE-2021-42383',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the evaluate function",
-              'diffID':        'sha256:dad0c82871817986d7e75189be90152b131414057efc8821cc248424abff90eb',
-              'fixedVersions': [
-                '1.32.1-r7'
-              ],
-              'installedVersion': '1.32.1-r6',
-              'packageName':      'busybox',
-              'purl':             'pkg:apk/alpine/busybox@1.32.1-r6?arch=armv7&distro=3.13.6',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42383',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42383',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42383'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the evaluate()'
-            },
-            {
-              'cve':  'CVE-2021-42384',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the handle_special function",
-              'diffID':        'sha256:dad0c82871817986d7e75189be90152b131414057efc8821cc248424abff90eb',
-              'fixedVersions': [
-                '1.32.1-r7'
-              ],
-              'installedVersion': '1.32.1-r6',
-              'packageName':      'busybox',
-              'purl':             'pkg:apk/alpine/busybox@1.32.1-r6?arch=armv7&distro=3.13.6',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42384',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42384',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42384'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the handle_special()'
-            },
-            {
-              'cve':  'CVE-2021-42385',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the evaluate function",
-              'diffID':        'sha256:dad0c82871817986d7e75189be90152b131414057efc8821cc248424abff90eb',
-              'fixedVersions': [
-                '1.32.1-r7'
-              ],
-              'installedVersion': '1.32.1-r6',
-              'packageName':      'busybox',
-              'purl':             'pkg:apk/alpine/busybox@1.32.1-r6?arch=armv7&distro=3.13.6',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42385',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42385',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42385'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the evaluate()'
-            },
-            {
-              'cve':  'CVE-2021-42386',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the nvalloc function",
-              'diffID':        'sha256:dad0c82871817986d7e75189be90152b131414057efc8821cc248424abff90eb',
-              'fixedVersions': [
-                '1.32.1-r7'
-              ],
-              'installedVersion': '1.32.1-r6',
-              'packageName':      'busybox',
-              'purl':             'pkg:apk/alpine/busybox@1.32.1-r6?arch=armv7&distro=3.13.6',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42386',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42386',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42386'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the nvalloc()'
-            },
-            {
-              'cve':  'CVE-2022-28391',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '8.8',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-88'
-              ],
-              'description':   "BusyBox through 1.35.0 allows remote attackers to execute arbitrary code if netstat is used to print a DNS PTR record's value to a VT compatible terminal. Alternatively, the attacker could choose to change the terminal's colors.",
-              'diffID':        'sha256:dad0c82871817986d7e75189be90152b131414057efc8821cc248424abff90eb',
-              'fixedVersions': [
-                '1.32.1-r8'
-              ],
-              'installedVersion': '1.32.1-r6',
-              'packageName':      'busybox',
-              'purl':             'pkg:apk/alpine/busybox@1.32.1-r6?arch=armv7&distro=3.13.6',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2022-28391',
-                'https://git.alpinelinux.org/aports/plain/main/busybox/0001-libbb-sockaddr2str-ensure-only-printable-characters-.patch',
-                'https://git.alpinelinux.org/aports/plain/main/busybox/0002-nslookup-sanitize-all-printed-strings-with-printable.patch',
-                'https://gitlab.alpinelinux.org/alpine/aports/-/issues/13661',
-                'https://nvd.nist.gov/vuln/detail/CVE-2022-28391',
-                'https://www.cve.org/CVERecord?id=CVE-2022-28391'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: remote attackers may execute arbitrary code if netstat is used'
-            },
-            {
-              'cve':  'CVE-2022-30065',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.8',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.2',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox 1.35-x's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the copyvar function.",
-              'diffID':        'sha256:dad0c82871817986d7e75189be90152b131414057efc8821cc248424abff90eb',
-              'fixedVersions': [
-                '1.32.1-r9'
-              ],
-              'installedVersion': '1.32.1-r6',
-              'packageName':      'busybox',
-              'purl':             'pkg:apk/alpine/busybox@1.32.1-r6?arch=armv7&distro=3.13.6',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2022-30065',
-                'https://bugs.busybox.net/show_bug.cgi?id=14781',
-                'https://cert-portal.siemens.com/productcert/pdf/ssa-333517.pdf',
-                'https://nvd.nist.gov/vuln/detail/CVE-2022-30065',
-                'https://www.cve.org/CVERecord?id=CVE-2022-30065'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      "busybox: A use-after-free in Busybox's awk applet leads to denial of service"
-            },
-            {
-              'cve':  'CVE-2021-42374',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '5.7',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-125'
-              ],
-              'description':   "An out-of-bounds heap read in Busybox's unlzma applet leads to information leak and denial of service when crafted LZMA-compressed input is decompressed. This can be triggered by any applet/format that",
-              'diffID':        'sha256:dad0c82871817986d7e75189be90152b131414057efc8821cc248424abff90eb',
-              'fixedVersions': [
-                '1.32.1-r7'
-              ],
-              'installedVersion': '1.32.1-r6',
-              'packageName':      'busybox',
-              'purl':             'pkg:apk/alpine/busybox@1.32.1-r6?arch=armv7&distro=3.13.6',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42374',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42374',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42374'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'busybox: out-of-bounds read in unlzma applet leads to information leak and denial of service when crafted LZMA-compressed input is decompressed'
-            },
-            {
-              'cve':  'CVE-2021-42375',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.5',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '4.1',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-159'
-              ],
-              'description':   "An incorrect handling of a special element in Busybox's ash applet leads to denial of service when processing a crafted shell command, due to the shell mistaking specific characters for reserved characters. This may be used for DoS under rare conditions of filtered command input.",
-              'diffID':        'sha256:dad0c82871817986d7e75189be90152b131414057efc8821cc248424abff90eb',
-              'fixedVersions': [
-                '1.32.1-r7'
-              ],
-              'installedVersion': '1.32.1-r6',
-              'packageName':      'busybox',
-              'purl':             'pkg:apk/alpine/busybox@1.32.1-r6?arch=armv7&distro=3.13.6',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42375',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42375',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42375'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'busybox: incorrect handling of a special element in ash applet leads to denial of service when processing a crafted shell command'
-            },
-            {
-              'cve':  'CVE-2022-0778',
-              'cvss': {
-                'bitnami': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'ghsa': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'nvd': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-835'
-              ],
-              'description':   'The BN_mod_sqrt() function, which computes a modular square root, contains a bug that can cause it to loop forever for non-prime moduli. Internally this function is used when parsing certificates that contain elliptic curve public keys in compressed form or explicit elliptic curve parameters with a base point encoded in compressed form. It is possible to trigger the infinite loop by crafting a certificate that has invalid explicit curve parameters. Since certificate parsing happens prior to verification of the certificate signature, any process that parses an externally supplied certificate may thus be subject to a denial of service attack. The infinite loop can also be reached when parsing crafted private keys as they can contain explicit elliptic curve parameters. Thus vulnerable situations include: - TLS clients consuming server certificates - TLS servers consuming client certificates - Hosting providers taking certificates or private keys from customers - Certificate authorities parsing certification requests from subscribers - Anything else which parses ASN.1 elliptic curve parameters Also any other applications that use the BN_mod_sqrt() where the attacker can control the parameter values are vulnerable to this DoS issue. In the OpenSSL 1.0.2 version the public key is not parsed during initial parsing of the certificate which makes it slightly harder to trigger the infinite loop. However any operation which requires the public key from the certificate will trigger the infinite loop. In particular the attacker can use a self-signed certificate to trigger the loop during verification of the certificate signature. This issue affects OpenSSL versions 1.0.2, 1.1.1 and 3.0. It was addressed in the releases of 1.1.1n and 3.0.2 on the 15th March 2022. Fixed in OpenSSL 3.0.2 (Affected 3.0.0,3.0.1). Fixed in OpenSSL 1.1.1n (Affected 1.1.1-1.1.1m). Fixed in OpenSSL 1.0.2zd (Affected 1.0.2-1.0.2zc).',
-              'diffID':        'sha256:dad0c82871817986d7e75189be90152b131414057efc8821cc248424abff90eb',
-              'fixedVersions': [
-                '1.1.1n-r0'
-              ],
-              'installedVersion': '1.1.1l-r0',
-              'packageName':      'libcrypto1.1',
-              'purl':             'pkg:apk/alpine/libcrypto1.1@1.1.1l-r0?arch=armv7&distro=3.13.6',
-              'references':       [
-                'http://packetstormsecurity.com/files/167344/OpenSSL-1.0.2-1.1.1-3.0-BN_mod_sqrt-Infinite-Loop.html',
-                'http://seclists.org/fulldisclosure/2022/May/33',
-                'http://seclists.org/fulldisclosure/2022/May/35',
-                'http://seclists.org/fulldisclosure/2022/May/38',
-                'https://access.redhat.com/errata/RHSA-2022:5326',
-                'https://access.redhat.com/security/cve/CVE-2022-0778',
-                'https://bugzilla.redhat.com/2062202',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2062202',
-                'https://cert-portal.siemens.com/productcert/pdf/ssa-712929.pdf',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-0778',
-                'https://errata.almalinux.org/8/ALSA-2022-5326.html',
-                'https://errata.rockylinux.org/RLSA-2022:4899',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=3118eb64934499d93db3230748a452351d1d9a65',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=380085481c64de749a6dd25cdf0bcf4360b30f83',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=a466912611aa6cbdf550cd10601390e587451246',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=3118eb64934499d93db3230748a452351d1d9a65',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=380085481c64de749a6dd25cdf0bcf4360b30f83',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=a466912611aa6cbdf550cd10601390e587451246',
-                'https://linux.oracle.com/cve/CVE-2022-0778.html',
-                'https://linux.oracle.com/errata/ELSA-2022-9272.html',
-                'https://lists.debian.org/debian-lts-announce/2022/03/msg00023.html',
-                'https://lists.debian.org/debian-lts-announce/2022/03/msg00024.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/323SNN6ZX7PRJJWP2BUAFLPUAE42XWLZ',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/323SNN6ZX7PRJJWP2BUAFLPUAE42XWLZ/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GDB3GQVJPXJE7X5C5JN6JAA4XUDWD6E6',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GDB3GQVJPXJE7X5C5JN6JAA4XUDWD6E6/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/W6K3PR542DXWLEFFMFIDMME4CWMHJRMG',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/W6K3PR542DXWLEFFMFIDMME4CWMHJRMG/',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/323SNN6ZX7PRJJWP2BUAFLPUAE42XWLZ',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/GDB3GQVJPXJE7X5C5JN6JAA4XUDWD6E6',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/W6K3PR542DXWLEFFMFIDMME4CWMHJRMG',
-                'https://nvd.nist.gov/vuln/detail/CVE-2022-0778',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2022-0002',
-                'https://rustsec.org/advisories/RUSTSEC-2022-0014.html',
-                'https://security.gentoo.org/glsa/202210-02',
-                'https://security.netapp.com/advisory/ntap-20220321-0002',
-                'https://security.netapp.com/advisory/ntap-20220321-0002/',
-                'https://security.netapp.com/advisory/ntap-20220429-0005',
-                'https://security.netapp.com/advisory/ntap-20220429-0005/',
-                'https://security.netapp.com/advisory/ntap-20240621-0006',
-                'https://security.netapp.com/advisory/ntap-20240621-0006/',
-                'https://support.apple.com/kb/HT213255',
-                'https://support.apple.com/kb/HT213256',
-                'https://support.apple.com/kb/HT213257',
-                'https://ubuntu.com/security/notices/USN-5328-1',
-                'https://ubuntu.com/security/notices/USN-5328-2',
-                'https://ubuntu.com/security/notices/USN-6457-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2022-0778',
-                'https://www.debian.org/security/2022/dsa-5103',
-                'https://www.openssl.org/news/secadv/20220315.txt',
-                'https://www.oracle.com/security-alerts/cpuapr2022.html',
-                'https://www.oracle.com/security-alerts/cpujul2022.html',
-                'https://www.tenable.com/security/tns-2022-06',
-                'https://www.tenable.com/security/tns-2022-07',
-                'https://www.tenable.com/security/tns-2022-08',
-                'https://www.tenable.com/security/tns-2022-09'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: Infinite loop in BN_mod_sqrt() reachable when parsing certificates'
-            },
-            {
-              'cve':  'CVE-2022-2097',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N'
-                },
-                'nvd': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N'
-                },
-                'redhat': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-327'
-              ],
-              'description':   "AES OCB mode for 32-bit x86 platforms using the AES-NI assembly optimised implementation will not encrypt the entirety of the data under some circumstances. This could reveal sixteen bytes of data that was preexisting in the memory that wasn't written. In the special case of \"in place\" encryption, sixteen bytes of the plaintext would be revealed. Since OpenSSL does not support OCB based cipher suites for TLS and DTLS, they are both unaffected. Fixed in OpenSSL 3.0.5 (Affected 3.0.0-3.0.4). Fixed in OpenSSL 1.1.1q (Affected 1.1.1-1.1.1p).",
-              'diffID':        'sha256:dad0c82871817986d7e75189be90152b131414057efc8821cc248424abff90eb',
-              'fixedVersions': [
-                '1.1.1q-r0'
-              ],
-              'installedVersion': '1.1.1l-r0',
-              'packageName':      'libcrypto1.1',
-              'purl':             'pkg:apk/alpine/libcrypto1.1@1.1.1l-r0?arch=armv7&distro=3.13.6',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2022:6224',
-                'https://access.redhat.com/security/cve/CVE-2022-2097',
-                'https://bugzilla.redhat.com/2081494',
-                'https://bugzilla.redhat.com/2087911',
-                'https://bugzilla.redhat.com/2087913',
-                'https://bugzilla.redhat.com/2097310',
-                'https://bugzilla.redhat.com/2104905',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2081494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2097310',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2100554',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2104905',
-                'https://cert-portal.siemens.com/productcert/pdf/ssa-332410.pdf',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-1292',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-2068',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-2097',
-                'https://errata.almalinux.org/9/ALSA-2022-6224.html',
-                'https://errata.rockylinux.org/RLSA-2022:5818',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=919925673d6c9cfed3c1085497f5dfbbed5fc431',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=a98f339ddd7e8f487d6e0088d4a9a42324885a93',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=919925673d6c9cfed3c1085497f5dfbbed5fc431',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=a98f339ddd7e8f487d6e0088d4a9a42324885a93',
-                'https://github.com/alexcrichton/openssl-src-rs',
-                'https://linux.oracle.com/cve/CVE-2022-2097.html',
-                'https://linux.oracle.com/errata/ELSA-2022-9955.html',
-                'https://lists.debian.org/debian-lts-announce/2023/02/msg00019.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/R6CK57NBQFTPUMXAPJURCGXUYT76NQAK',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/R6CK57NBQFTPUMXAPJURCGXUYT76NQAK/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/V6567JERRHHJW2GNGJGKDRNHR7SNPZK7',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/V6567JERRHHJW2GNGJGKDRNHR7SNPZK7/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VCMNWKERPBKOEBNL7CLTTX3ZZCZLH7XA',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VCMNWKERPBKOEBNL7CLTTX3ZZCZLH7XA/',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/R6CK57NBQFTPUMXAPJURCGXUYT76NQAK',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/R6CK57NBQFTPUMXAPJURCGXUYT76NQAK/',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/V6567JERRHHJW2GNGJGKDRNHR7SNPZK7',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/V6567JERRHHJW2GNGJGKDRNHR7SNPZK7/',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/VCMNWKERPBKOEBNL7CLTTX3ZZCZLH7XA',
-                'https://nvd.nist.gov/vuln/detail/CVE-2022-2097',
-                'https://rustsec.org/advisories/RUSTSEC-2022-0032.html',
-                'https://security.gentoo.org/glsa/202210-02',
-                'https://security.netapp.com/advisory/ntap-20220715-0011',
-                'https://security.netapp.com/advisory/ntap-20220715-0011/',
-                'https://security.netapp.com/advisory/ntap-20230420-0008',
-                'https://security.netapp.com/advisory/ntap-20230420-0008/',
-                'https://security.netapp.com/advisory/ntap-20240621-0006',
-                'https://security.netapp.com/advisory/ntap-20240621-0006/',
-                'https://ubuntu.com/security/notices/USN-5502-1',
-                'https://ubuntu.com/security/notices/USN-6457-1',
-                'https://www.cve.org/CVERecord?id=CVE-2022-2097',
-                'https://www.debian.org/security/2023/dsa-5343',
-                'https://www.openssl.org/news/secadv/20220705.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: AES OCB fails to encrypt some bytes'
-            },
-            {
-              'cve':  'CVE-2022-0778',
-              'cvss': {
-                'bitnami': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'ghsa': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'nvd': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-835'
-              ],
-              'description':   'The BN_mod_sqrt() function, which computes a modular square root, contains a bug that can cause it to loop forever for non-prime moduli. Internally this function is used when parsing certificates that contain elliptic curve public keys in compressed form or explicit elliptic curve parameters with a base point encoded in compressed form. It is possible to trigger the infinite loop by crafting a certificate that has invalid explicit curve parameters. Since certificate parsing happens prior to verification of the certificate signature, any process that parses an externally supplied certificate may thus be subject to a denial of service attack. The infinite loop can also be reached when parsing crafted private keys as they can contain explicit elliptic curve parameters. Thus vulnerable situations include: - TLS clients consuming server certificates - TLS servers consuming client certificates - Hosting providers taking certificates or private keys from customers - Certificate authorities parsing certification requests from subscribers - Anything else which parses ASN.1 elliptic curve parameters Also any other applications that use the BN_mod_sqrt() where the attacker can control the parameter values are vulnerable to this DoS issue. In the OpenSSL 1.0.2 version the public key is not parsed during initial parsing of the certificate which makes it slightly harder to trigger the infinite loop. However any operation which requires the public key from the certificate will trigger the infinite loop. In particular the attacker can use a self-signed certificate to trigger the loop during verification of the certificate signature. This issue affects OpenSSL versions 1.0.2, 1.1.1 and 3.0. It was addressed in the releases of 1.1.1n and 3.0.2 on the 15th March 2022. Fixed in OpenSSL 3.0.2 (Affected 3.0.0,3.0.1). Fixed in OpenSSL 1.1.1n (Affected 1.1.1-1.1.1m). Fixed in OpenSSL 1.0.2zd (Affected 1.0.2-1.0.2zc).',
-              'diffID':        'sha256:dad0c82871817986d7e75189be90152b131414057efc8821cc248424abff90eb',
-              'fixedVersions': [
-                '1.1.1n-r0'
-              ],
-              'installedVersion': '1.1.1l-r0',
-              'packageName':      'libssl1.1',
-              'purl':             'pkg:apk/alpine/libssl1.1@1.1.1l-r0?arch=armv7&distro=3.13.6',
-              'references':       [
-                'http://packetstormsecurity.com/files/167344/OpenSSL-1.0.2-1.1.1-3.0-BN_mod_sqrt-Infinite-Loop.html',
-                'http://seclists.org/fulldisclosure/2022/May/33',
-                'http://seclists.org/fulldisclosure/2022/May/35',
-                'http://seclists.org/fulldisclosure/2022/May/38',
-                'https://access.redhat.com/errata/RHSA-2022:5326',
-                'https://access.redhat.com/security/cve/CVE-2022-0778',
-                'https://bugzilla.redhat.com/2062202',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2062202',
-                'https://cert-portal.siemens.com/productcert/pdf/ssa-712929.pdf',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-0778',
-                'https://errata.almalinux.org/8/ALSA-2022-5326.html',
-                'https://errata.rockylinux.org/RLSA-2022:4899',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=3118eb64934499d93db3230748a452351d1d9a65',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=380085481c64de749a6dd25cdf0bcf4360b30f83',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=a466912611aa6cbdf550cd10601390e587451246',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=3118eb64934499d93db3230748a452351d1d9a65',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=380085481c64de749a6dd25cdf0bcf4360b30f83',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=a466912611aa6cbdf550cd10601390e587451246',
-                'https://linux.oracle.com/cve/CVE-2022-0778.html',
-                'https://linux.oracle.com/errata/ELSA-2022-9272.html',
-                'https://lists.debian.org/debian-lts-announce/2022/03/msg00023.html',
-                'https://lists.debian.org/debian-lts-announce/2022/03/msg00024.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/323SNN6ZX7PRJJWP2BUAFLPUAE42XWLZ',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/323SNN6ZX7PRJJWP2BUAFLPUAE42XWLZ/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GDB3GQVJPXJE7X5C5JN6JAA4XUDWD6E6',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GDB3GQVJPXJE7X5C5JN6JAA4XUDWD6E6/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/W6K3PR542DXWLEFFMFIDMME4CWMHJRMG',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/W6K3PR542DXWLEFFMFIDMME4CWMHJRMG/',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/323SNN6ZX7PRJJWP2BUAFLPUAE42XWLZ',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/GDB3GQVJPXJE7X5C5JN6JAA4XUDWD6E6',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/W6K3PR542DXWLEFFMFIDMME4CWMHJRMG',
-                'https://nvd.nist.gov/vuln/detail/CVE-2022-0778',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2022-0002',
-                'https://rustsec.org/advisories/RUSTSEC-2022-0014.html',
-                'https://security.gentoo.org/glsa/202210-02',
-                'https://security.netapp.com/advisory/ntap-20220321-0002',
-                'https://security.netapp.com/advisory/ntap-20220321-0002/',
-                'https://security.netapp.com/advisory/ntap-20220429-0005',
-                'https://security.netapp.com/advisory/ntap-20220429-0005/',
-                'https://security.netapp.com/advisory/ntap-20240621-0006',
-                'https://security.netapp.com/advisory/ntap-20240621-0006/',
-                'https://support.apple.com/kb/HT213255',
-                'https://support.apple.com/kb/HT213256',
-                'https://support.apple.com/kb/HT213257',
-                'https://ubuntu.com/security/notices/USN-5328-1',
-                'https://ubuntu.com/security/notices/USN-5328-2',
-                'https://ubuntu.com/security/notices/USN-6457-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2022-0778',
-                'https://www.debian.org/security/2022/dsa-5103',
-                'https://www.openssl.org/news/secadv/20220315.txt',
-                'https://www.oracle.com/security-alerts/cpuapr2022.html',
-                'https://www.oracle.com/security-alerts/cpujul2022.html',
-                'https://www.tenable.com/security/tns-2022-06',
-                'https://www.tenable.com/security/tns-2022-07',
-                'https://www.tenable.com/security/tns-2022-08',
-                'https://www.tenable.com/security/tns-2022-09'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: Infinite loop in BN_mod_sqrt() reachable when parsing certificates'
-            },
-            {
-              'cve':  'CVE-2022-2097',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N'
-                },
-                'nvd': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N'
-                },
-                'redhat': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-327'
-              ],
-              'description':   "AES OCB mode for 32-bit x86 platforms using the AES-NI assembly optimised implementation will not encrypt the entirety of the data under some circumstances. This could reveal sixteen bytes of data that was preexisting in the memory that wasn't written. In the special case of \"in place\" encryption, sixteen bytes of the plaintext would be revealed. Since OpenSSL does not support OCB based cipher suites for TLS and DTLS, they are both unaffected. Fixed in OpenSSL 3.0.5 (Affected 3.0.0-3.0.4). Fixed in OpenSSL 1.1.1q (Affected 1.1.1-1.1.1p).",
-              'diffID':        'sha256:dad0c82871817986d7e75189be90152b131414057efc8821cc248424abff90eb',
-              'fixedVersions': [
-                '1.1.1q-r0'
-              ],
-              'installedVersion': '1.1.1l-r0',
-              'packageName':      'libssl1.1',
-              'purl':             'pkg:apk/alpine/libssl1.1@1.1.1l-r0?arch=armv7&distro=3.13.6',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2022:6224',
-                'https://access.redhat.com/security/cve/CVE-2022-2097',
-                'https://bugzilla.redhat.com/2081494',
-                'https://bugzilla.redhat.com/2087911',
-                'https://bugzilla.redhat.com/2087913',
-                'https://bugzilla.redhat.com/2097310',
-                'https://bugzilla.redhat.com/2104905',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2081494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2097310',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2100554',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2104905',
-                'https://cert-portal.siemens.com/productcert/pdf/ssa-332410.pdf',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-1292',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-2068',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-2097',
-                'https://errata.almalinux.org/9/ALSA-2022-6224.html',
-                'https://errata.rockylinux.org/RLSA-2022:5818',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=919925673d6c9cfed3c1085497f5dfbbed5fc431',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=a98f339ddd7e8f487d6e0088d4a9a42324885a93',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=919925673d6c9cfed3c1085497f5dfbbed5fc431',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=a98f339ddd7e8f487d6e0088d4a9a42324885a93',
-                'https://github.com/alexcrichton/openssl-src-rs',
-                'https://linux.oracle.com/cve/CVE-2022-2097.html',
-                'https://linux.oracle.com/errata/ELSA-2022-9955.html',
-                'https://lists.debian.org/debian-lts-announce/2023/02/msg00019.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/R6CK57NBQFTPUMXAPJURCGXUYT76NQAK',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/R6CK57NBQFTPUMXAPJURCGXUYT76NQAK/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/V6567JERRHHJW2GNGJGKDRNHR7SNPZK7',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/V6567JERRHHJW2GNGJGKDRNHR7SNPZK7/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VCMNWKERPBKOEBNL7CLTTX3ZZCZLH7XA',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VCMNWKERPBKOEBNL7CLTTX3ZZCZLH7XA/',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/R6CK57NBQFTPUMXAPJURCGXUYT76NQAK',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/R6CK57NBQFTPUMXAPJURCGXUYT76NQAK/',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/V6567JERRHHJW2GNGJGKDRNHR7SNPZK7',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/V6567JERRHHJW2GNGJGKDRNHR7SNPZK7/',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/VCMNWKERPBKOEBNL7CLTTX3ZZCZLH7XA',
-                'https://nvd.nist.gov/vuln/detail/CVE-2022-2097',
-                'https://rustsec.org/advisories/RUSTSEC-2022-0032.html',
-                'https://security.gentoo.org/glsa/202210-02',
-                'https://security.netapp.com/advisory/ntap-20220715-0011',
-                'https://security.netapp.com/advisory/ntap-20220715-0011/',
-                'https://security.netapp.com/advisory/ntap-20230420-0008',
-                'https://security.netapp.com/advisory/ntap-20230420-0008/',
-                'https://security.netapp.com/advisory/ntap-20240621-0006',
-                'https://security.netapp.com/advisory/ntap-20240621-0006/',
-                'https://ubuntu.com/security/notices/USN-5502-1',
-                'https://ubuntu.com/security/notices/USN-6457-1',
-                'https://www.cve.org/CVERecord?id=CVE-2022-2097',
-                'https://www.debian.org/security/2023/dsa-5343',
-                'https://www.openssl.org/news/secadv/20220705.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: AES OCB fails to encrypt some bytes'
-            },
-            {
-              'cve':  'CVE-2021-42378',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the getvar_i function",
-              'diffID':        'sha256:dad0c82871817986d7e75189be90152b131414057efc8821cc248424abff90eb',
-              'fixedVersions': [
-                '1.32.1-r7'
-              ],
-              'installedVersion': '1.32.1-r6',
-              'packageName':      'ssl_client',
-              'purl':             'pkg:apk/alpine/ssl_client@1.32.1-r6?arch=armv7&distro=3.13.6',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42378',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42378',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42378'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the getvar_i()'
-            },
-            {
-              'cve':  'CVE-2021-42379',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the next_input_file function",
-              'diffID':        'sha256:dad0c82871817986d7e75189be90152b131414057efc8821cc248424abff90eb',
-              'fixedVersions': [
-                '1.32.1-r7'
-              ],
-              'installedVersion': '1.32.1-r6',
-              'packageName':      'ssl_client',
-              'purl':             'pkg:apk/alpine/ssl_client@1.32.1-r6?arch=armv7&distro=3.13.6',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42379',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42379',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42379'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the next_input_file()'
-            },
-            {
-              'cve':  'CVE-2021-42380',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the clrvar function",
-              'diffID':        'sha256:dad0c82871817986d7e75189be90152b131414057efc8821cc248424abff90eb',
-              'fixedVersions': [
-                '1.32.1-r7'
-              ],
-              'installedVersion': '1.32.1-r6',
-              'packageName':      'ssl_client',
-              'purl':             'pkg:apk/alpine/ssl_client@1.32.1-r6?arch=armv7&distro=3.13.6',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42380',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42380',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42380'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the clrvar()'
-            },
-            {
-              'cve':  'CVE-2021-42381',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the hash_init function",
-              'diffID':        'sha256:dad0c82871817986d7e75189be90152b131414057efc8821cc248424abff90eb',
-              'fixedVersions': [
-                '1.32.1-r7'
-              ],
-              'installedVersion': '1.32.1-r6',
-              'packageName':      'ssl_client',
-              'purl':             'pkg:apk/alpine/ssl_client@1.32.1-r6?arch=armv7&distro=3.13.6',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42381',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42381',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42381'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the hash_init()'
-            },
-            {
-              'cve':  'CVE-2021-42382',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the getvar_s function",
-              'diffID':        'sha256:dad0c82871817986d7e75189be90152b131414057efc8821cc248424abff90eb',
-              'fixedVersions': [
-                '1.32.1-r7'
-              ],
-              'installedVersion': '1.32.1-r6',
-              'packageName':      'ssl_client',
-              'purl':             'pkg:apk/alpine/ssl_client@1.32.1-r6?arch=armv7&distro=3.13.6',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42382',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42382',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42382'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the getvar_s()'
-            },
-            {
-              'cve':  'CVE-2021-42383',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the evaluate function",
-              'diffID':        'sha256:dad0c82871817986d7e75189be90152b131414057efc8821cc248424abff90eb',
-              'fixedVersions': [
-                '1.32.1-r7'
-              ],
-              'installedVersion': '1.32.1-r6',
-              'packageName':      'ssl_client',
-              'purl':             'pkg:apk/alpine/ssl_client@1.32.1-r6?arch=armv7&distro=3.13.6',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42383',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42383',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42383'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the evaluate()'
-            },
-            {
-              'cve':  'CVE-2021-42384',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the handle_special function",
-              'diffID':        'sha256:dad0c82871817986d7e75189be90152b131414057efc8821cc248424abff90eb',
-              'fixedVersions': [
-                '1.32.1-r7'
-              ],
-              'installedVersion': '1.32.1-r6',
-              'packageName':      'ssl_client',
-              'purl':             'pkg:apk/alpine/ssl_client@1.32.1-r6?arch=armv7&distro=3.13.6',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42384',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42384',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42384'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the handle_special()'
-            },
-            {
-              'cve':  'CVE-2021-42385',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the evaluate function",
-              'diffID':        'sha256:dad0c82871817986d7e75189be90152b131414057efc8821cc248424abff90eb',
-              'fixedVersions': [
-                '1.32.1-r7'
-              ],
-              'installedVersion': '1.32.1-r6',
-              'packageName':      'ssl_client',
-              'purl':             'pkg:apk/alpine/ssl_client@1.32.1-r6?arch=armv7&distro=3.13.6',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42385',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42385',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42385'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the evaluate()'
-            },
-            {
-              'cve':  'CVE-2021-42386',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the nvalloc function",
-              'diffID':        'sha256:dad0c82871817986d7e75189be90152b131414057efc8821cc248424abff90eb',
-              'fixedVersions': [
-                '1.32.1-r7'
-              ],
-              'installedVersion': '1.32.1-r6',
-              'packageName':      'ssl_client',
-              'purl':             'pkg:apk/alpine/ssl_client@1.32.1-r6?arch=armv7&distro=3.13.6',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42386',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42386',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42386'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the nvalloc()'
-            },
-            {
-              'cve':  'CVE-2022-28391',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '8.8',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-88'
-              ],
-              'description':   "BusyBox through 1.35.0 allows remote attackers to execute arbitrary code if netstat is used to print a DNS PTR record's value to a VT compatible terminal. Alternatively, the attacker could choose to change the terminal's colors.",
-              'diffID':        'sha256:dad0c82871817986d7e75189be90152b131414057efc8821cc248424abff90eb',
-              'fixedVersions': [
-                '1.32.1-r8'
-              ],
-              'installedVersion': '1.32.1-r6',
-              'packageName':      'ssl_client',
-              'purl':             'pkg:apk/alpine/ssl_client@1.32.1-r6?arch=armv7&distro=3.13.6',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2022-28391',
-                'https://git.alpinelinux.org/aports/plain/main/busybox/0001-libbb-sockaddr2str-ensure-only-printable-characters-.patch',
-                'https://git.alpinelinux.org/aports/plain/main/busybox/0002-nslookup-sanitize-all-printed-strings-with-printable.patch',
-                'https://gitlab.alpinelinux.org/alpine/aports/-/issues/13661',
-                'https://nvd.nist.gov/vuln/detail/CVE-2022-28391',
-                'https://www.cve.org/CVERecord?id=CVE-2022-28391'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: remote attackers may execute arbitrary code if netstat is used'
-            },
-            {
-              'cve':  'CVE-2022-30065',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.8',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.2',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox 1.35-x's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the copyvar function.",
-              'diffID':        'sha256:dad0c82871817986d7e75189be90152b131414057efc8821cc248424abff90eb',
-              'fixedVersions': [
-                '1.32.1-r9'
-              ],
-              'installedVersion': '1.32.1-r6',
-              'packageName':      'ssl_client',
-              'purl':             'pkg:apk/alpine/ssl_client@1.32.1-r6?arch=armv7&distro=3.13.6',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2022-30065',
-                'https://bugs.busybox.net/show_bug.cgi?id=14781',
-                'https://cert-portal.siemens.com/productcert/pdf/ssa-333517.pdf',
-                'https://nvd.nist.gov/vuln/detail/CVE-2022-30065',
-                'https://www.cve.org/CVERecord?id=CVE-2022-30065'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      "busybox: A use-after-free in Busybox's awk applet leads to denial of service"
-            },
-            {
-              'cve':  'CVE-2021-42374',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '5.7',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-125'
-              ],
-              'description':   "An out-of-bounds heap read in Busybox's unlzma applet leads to information leak and denial of service when crafted LZMA-compressed input is decompressed. This can be triggered by any applet/format that",
-              'diffID':        'sha256:dad0c82871817986d7e75189be90152b131414057efc8821cc248424abff90eb',
-              'fixedVersions': [
-                '1.32.1-r7'
-              ],
-              'installedVersion': '1.32.1-r6',
-              'packageName':      'ssl_client',
-              'purl':             'pkg:apk/alpine/ssl_client@1.32.1-r6?arch=armv7&distro=3.13.6',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42374',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42374',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42374'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'busybox: out-of-bounds read in unlzma applet leads to information leak and denial of service when crafted LZMA-compressed input is decompressed'
-            },
-            {
-              'cve':  'CVE-2021-42375',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.5',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '4.1',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-159'
-              ],
-              'description':   "An incorrect handling of a special element in Busybox's ash applet leads to denial of service when processing a crafted shell command, due to the shell mistaking specific characters for reserved characters. This may be used for DoS under rare conditions of filtered command input.",
-              'diffID':        'sha256:dad0c82871817986d7e75189be90152b131414057efc8821cc248424abff90eb',
-              'fixedVersions': [
-                '1.32.1-r7'
-              ],
-              'installedVersion': '1.32.1-r6',
-              'packageName':      'ssl_client',
-              'purl':             'pkg:apk/alpine/ssl_client@1.32.1-r6?arch=armv7&distro=3.13.6',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42375',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42375',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42375'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'busybox: incorrect handling of a special element in ash applet leads to denial of service when processing a crafted shell command'
-            },
-            {
-              'cve':  'CVE-2022-37434',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '9.8',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-787',
-                'CWE-120'
-              ],
-              'description':   'zlib through 1.2.12 has a heap-based buffer over-read or buffer overflow in inflate in inflate.c via a large gzip header extra field. NOTE: only applications that call inflateGetHeader are affected. Some common applications bundle the affected zlib source code but may be unable to call inflateGetHeader (e.g., see the nodejs/node reference).',
-              'diffID':        'sha256:dad0c82871817986d7e75189be90152b131414057efc8821cc248424abff90eb',
-              'fixedVersions': [
-                '1.2.12-r2'
-              ],
-              'installedVersion': '1.2.11-r3',
-              'packageName':      'zlib',
-              'purl':             'pkg:apk/alpine/zlib@1.2.11-r3?arch=armv7&distro=3.13.6',
-              'references':       [
-                'http://seclists.org/fulldisclosure/2022/Oct/37',
-                'http://seclists.org/fulldisclosure/2022/Oct/38',
-                'http://seclists.org/fulldisclosure/2022/Oct/41',
-                'http://seclists.org/fulldisclosure/2022/Oct/42',
-                'http://www.openwall.com/lists/oss-security/2022/08/05/2',
-                'http://www.openwall.com/lists/oss-security/2022/08/09/1',
-                'https://access.redhat.com/errata/RHSA-2022:8291',
-                'https://access.redhat.com/security/cve/CVE-2022-37434',
-                'https://bugzilla.redhat.com/2116639',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2053198',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2077431',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2081296',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2116639',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-37434',
-                'https://errata.almalinux.org/9/ALSA-2022-8291.html',
-                'https://errata.rockylinux.org/RLSA-2022:8291',
-                'https://github.com/curl/curl/issues/9271',
-                'https://github.com/ivd38/zlib_overflow',
-                'https://github.com/madler/zlib/blob/21767c654d31d2dccdde4330529775c6c5fd5389/zlib.h#L1062-L1063',
-                'https://github.com/madler/zlib/commit/1eb7682f845ac9e9bf9ae35bbfb3bad5dacbd91d',
-                'https://github.com/madler/zlib/commit/eff308af425b67093bab25f80f1ae950166bece1',
-                'https://github.com/nodejs/node/blob/75b68c6e4db515f76df73af476eccf382bbcb00a/deps/zlib/inflate.c#L762-L764',
-                'https://linux.oracle.com/cve/CVE-2022-37434.html',
-                'https://linux.oracle.com/errata/ELSA-2023-1095.html',
-                'https://lists.debian.org/debian-lts-announce/2022/09/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JWN4VE3JQR4O2SOUS5TXNLANRPMHWV4I/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NMBOJ77A7T7PQCARMDUK75TE6LLESZ3O/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PAVPQNCG3XRLCLNSQRM3KAN5ZFMVXVTY/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/X5U7OTKZSHY2I3ZFJSR2SHFHW72RKGDK/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YRQAI7H4M4RQZ2IWZUEEXECBE5D56BH2/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2022-37434',
-                'https://security.netapp.com/advisory/ntap-20220901-0005/',
-                'https://security.netapp.com/advisory/ntap-20230427-0007/',
-                'https://support.apple.com/kb/HT213488',
-                'https://support.apple.com/kb/HT213489',
-                'https://support.apple.com/kb/HT213490',
-                'https://support.apple.com/kb/HT213491',
-                'https://support.apple.com/kb/HT213493',
-                'https://support.apple.com/kb/HT213494',
-                'https://ubuntu.com/security/notices/USN-5570-1',
-                'https://ubuntu.com/security/notices/USN-5570-2',
-                'https://ubuntu.com/security/notices/USN-5573-1',
-                'https://ubuntu.com/security/notices/USN-6736-1',
-                'https://ubuntu.com/security/notices/USN-6736-2',
-                'https://www.cve.org/CVERecord?id=CVE-2022-37434',
-                'https://www.debian.org/security/2022/dsa-5218'
-              ],
-              'severity':   'CRITICAL',
-              'suppressed': false,
-              'title':      'zlib: heap-based buffer over-read and overflow in inflate() in inflate.c via a large gzip header extra field'
-            },
-            {
-              'cve':  'CVE-2018-25032',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'nvd': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '8.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-787'
-              ],
-              'description':   'zlib before 1.2.12 allows memory corruption when deflating (i.e., when compressing) if the input has many distant matches.',
-              'diffID':        'sha256:dad0c82871817986d7e75189be90152b131414057efc8821cc248424abff90eb',
-              'fixedVersions': [
-                '1.2.12-r0'
-              ],
-              'installedVersion': '1.2.11-r3',
-              'packageName':      'zlib',
-              'purl':             'pkg:apk/alpine/zlib@1.2.11-r3?arch=armv7&distro=3.13.6',
-              'references':       [
-                'http://seclists.org/fulldisclosure/2022/May/33',
-                'http://seclists.org/fulldisclosure/2022/May/35',
-                'http://seclists.org/fulldisclosure/2022/May/38',
-                'http://www.openwall.com/lists/oss-security/2022/03/25/2',
-                'http://www.openwall.com/lists/oss-security/2022/03/26/1',
-                'https://access.redhat.com/errata/RHSA-2022:8420',
-                'https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-25032.json',
-                'https://access.redhat.com/security/cve/CVE-2018-25032',
-                'https://bugzilla.redhat.com/2067945',
-                'https://cert-portal.siemens.com/productcert/pdf/ssa-333517.pdf',
-                'https://errata.almalinux.org/9/ALSA-2022-8420.html',
-                'https://github.com/advisories/GHSA-jc36-42cf-vqwj',
-                'https://github.com/madler/zlib/commit/5c44459c3b28a9bd3283aaceab7c615f8020c531',
-                'https://github.com/madler/zlib/compare/v1.2.11...v1.2.12',
-                'https://github.com/madler/zlib/issues/605',
-                'https://github.com/rubysec/ruby-advisory-db/blob/master/gems/nokogiri/CVE-2018-25032.yml',
-                'https://github.com/sparklemotion/nokogiri/releases/tag/v1.13.4',
-                'https://github.com/sparklemotion/nokogiri/security/advisories/GHSA-v6gp-9mmm-c6p5',
-                'https://groups.google.com/g/ruby-security-ann/c/vX7qSjsvWis/m/TJWN4oOKBwAJ',
-                'https://linux.oracle.com/cve/CVE-2018-25032.html',
-                'https://linux.oracle.com/errata/ELSA-2022-9565.html',
-                'https://lists.debian.org/debian-lts-announce/2022/04/msg00000.html',
-                'https://lists.debian.org/debian-lts-announce/2022/05/msg00008.html',
-                'https://lists.debian.org/debian-lts-announce/2022/09/msg00023.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DCZFIJBJTZ7CL5QXBFKTQ22Q26VINRUF/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DF62MVMH3QUGMBDCB3DY2ERQ6EBHTADB/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JZZPTWRYQULAOL3AW7RZJNVZ2UONXCV4/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NS2D2GFPFGOJUL4WQ3DUAY7HF4VWQ77F/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VOKNP2L734AEL47NRYGVZIKEFOUBQY5Y/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/XOKFMSNQ5D5WGMALBNBXU3GE442V74WU/',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/DCZFIJBJTZ7CL5QXBFKTQ22Q26VINRUF',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/DCZFIJBJTZ7CL5QXBFKTQ22Q26VINRUF/',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/DF62MVMH3QUGMBDCB3DY2ERQ6EBHTADB',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/DF62MVMH3QUGMBDCB3DY2ERQ6EBHTADB/',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/JZZPTWRYQULAOL3AW7RZJNVZ2UONXCV4',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/JZZPTWRYQULAOL3AW7RZJNVZ2UONXCV4/',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/NS2D2GFPFGOJUL4WQ3DUAY7HF4VWQ77F',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/NS2D2GFPFGOJUL4WQ3DUAY7HF4VWQ77F/',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/VOKNP2L734AEL47NRYGVZIKEFOUBQY5Y',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/VOKNP2L734AEL47NRYGVZIKEFOUBQY5Y/',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/XOKFMSNQ5D5WGMALBNBXU3GE442V74WU',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/XOKFMSNQ5D5WGMALBNBXU3GE442V74WU/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2018-25032',
-                'https://security.gentoo.org/glsa/202210-42',
-                'https://security.netapp.com/advisory/ntap-20220526-0009',
-                'https://security.netapp.com/advisory/ntap-20220526-0009/',
-                'https://security.netapp.com/advisory/ntap-20220729-0004',
-                'https://security.netapp.com/advisory/ntap-20220729-0004/',
-                'https://support.apple.com/kb/HT213255',
-                'https://support.apple.com/kb/HT213256',
-                'https://support.apple.com/kb/HT213257',
-                'https://ubuntu.com/security/notices/USN-5355-1',
-                'https://ubuntu.com/security/notices/USN-5355-2',
-                'https://ubuntu.com/security/notices/USN-5359-1',
-                'https://ubuntu.com/security/notices/USN-5359-2',
-                'https://ubuntu.com/security/notices/USN-5739-1',
-                'https://ubuntu.com/security/notices/USN-6736-1',
-                'https://ubuntu.com/security/notices/USN-6736-2',
-                'https://www.cve.org/CVERecord?id=CVE-2018-25032',
-                'https://www.debian.org/security/2022/dsa-5111',
-                'https://www.openwall.com/lists/oss-security/2022/03/24/1',
-                'https://www.openwall.com/lists/oss-security/2022/03/28/1',
-                'https://www.openwall.com/lists/oss-security/2022/03/28/3',
-                'https://www.oracle.com/security-alerts/cpujul2022.html'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'zlib: A flaw found in zlib when compressing (not decompressing) certain inputs'
-            }
-          ]
-        }
-      ],
-      'summary': {
-        'critical':   1,
-        'high':       25,
-        'low':        0,
-        'medium':     6,
-        'suppressed': 0,
-        'unknown':    0
-      }
-    }
-  },
-  {
-    'id':    'default/ec0b70ee61b9d633674ebb1d6aa415eb28c703938a6e0ea70edf76265240809f',
-    'type':  'storage.sbomscanner.kubewarden.io.vulnerabilityreport',
-    'links': {
-      'patch':  'https://localhost:8005/v1/storage.sbomscanner.kubewarden.io.vulnerabilityreports/default/ec0b70ee61b9d633674ebb1d6aa415eb28c703938a6e0ea70edf76265240809f',
-      'remove': 'https://localhost:8005/v1/storage.sbomscanner.kubewarden.io.vulnerabilityreports/default/ec0b70ee61b9d633674ebb1d6aa415eb28c703938a6e0ea70edf76265240809f',
-      'self':   'https://localhost:8005/v1/storage.sbomscanner.kubewarden.io.vulnerabilityreports/default/ec0b70ee61b9d633674ebb1d6aa415eb28c703938a6e0ea70edf76265240809f',
-      'update': 'https://localhost:8005/v1/storage.sbomscanner.kubewarden.io.vulnerabilityreports/default/ec0b70ee61b9d633674ebb1d6aa415eb28c703938a6e0ea70edf76265240809f',
-      'view':   'https://localhost:8005/apis/storage.sbomscanner.kubewarden.io/v1alpha1/namespaces/default/vulnerabilityreports/ec0b70ee61b9d633674ebb1d6aa415eb28c703938a6e0ea70edf76265240809f'
-    },
-    'apiVersion':    'storage.sbomscanner.kubewarden.io/v1alpha1',
-    'imageMetadata': {
-      'digest':      'sha256:41d876d4e44348d1c27445fdb0e64592e0eb926d4dbbcf09a3526dee7e628329',
-      'platform':    'linux/arm64/v8',
-      'registry':    'lsong-demo1',
-      'registryURI': 'registry-1.docker.io',
-      'repository':  'library/alpine',
-      'tag':         '3.17.1'
-    },
-    'kind':     'VulnerabilityReport',
-    'metadata': {
-      'creationTimestamp': '2026-01-14T18:51:31Z',
-      'fields':            [
-        'ec0b70ee61b9d633674ebb1d6aa415eb28c703938a6e0ea70edf76265240809f',
-        'registry-1.docker.io/library/alpine:3.17.1',
-        'linux/arm64/v8',
-        '68 (0 suppressed)'
-      ],
-      'labels': {
-        'app.kubernetes.io/managed-by':          'sbomscanner',
-        'app.kubernetes.io/part-of':             'sbomscanner',
-        'sbomscanner.kubewarden.io/scanjob-uid': '445c600a-c4b6-40b3-bd71-f2d2140a37d5'
-      },
-      'name':            'ec0b70ee61b9d633674ebb1d6aa415eb28c703938a6e0ea70edf76265240809f',
-      'namespace':       'default',
-      'ownerReferences': [
-        {
-          'apiVersion':         'storage.sbomscanner.kubewarden.io/v1alpha1',
-          'blockOwnerDeletion': true,
-          'controller':         true,
-          'kind':               'SBOM',
-          'name':               'ec0b70ee61b9d633674ebb1d6aa415eb28c703938a6e0ea70edf76265240809f',
-          'uid':                '002fdc63-886a-471a-a69c-761e5f63e520'
-        }
-      ],
-      'relationships': [
-        {
-          'fromId':   'default/ec0b70ee61b9d633674ebb1d6aa415eb28c703938a6e0ea70edf76265240809f',
-          'fromType': 'storage.sbomscanner.kubewarden.io.sbom',
-          'rel':      'owner',
-          'state':    'active',
-          'message':  'Resource is current'
-        }
-      ],
-      'resourceVersion': '1',
-      'state':           {
-        'error':         false,
-        'message':       'Resource is current',
-        'name':          'active',
-        'transitioning': false
-      },
-      'uid': '1edd7ef0-ee7e-4d0d-b8c6-4207218a29e4'
-    },
-    'report': {
-      'results': [
-        {
-          'class':           'os-pkgs',
-          'target':          '/var/run/worker/trivy.sbom.1423801777.json (alpine 3.17.1)',
-          'type':            'alpine',
-          'vulnerabilities': [
-            {
-              'cve':  'CVE-2023-42363',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.5',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.8',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   'A use-after-free vulnerability was discovered in xasprintf function in xfuncs_printf.c:344 in BusyBox v.1.36.1.',
-              'diffID':        'sha256:0a24540c1e5a47e5a8116c43151cb45c985f7a65afe5d4d65127d9c6fea2ffcf',
-              'fixedVersions': [
-                '1.35.0-r31'
-              ],
-              'installedVersion': '1.35.0-r29',
-              'packageName':      'busybox',
-              'purl':             'pkg:apk/alpine/busybox@1.35.0-r29?arch=aarch64&distro=3.17.1',
-              'references':       [
-                'http://lists.busybox.net/pipermail/busybox/2024-May/090760.html',
-                'https://access.redhat.com/security/cve/CVE-2023-42363',
-                'https://bugs.busybox.net/show_bug.cgi?id=15865',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-42363',
-                'https://ubuntu.com/security/notices/USN-6961-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-42363'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk'
-            },
-            {
-              'cve':  'CVE-2023-42364',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.5',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.8',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   'A use-after-free vulnerability in BusyBox v.1.36.1 allows attackers to cause a denial of service via a crafted awk pattern in the awk.c evaluate function.',
-              'diffID':        'sha256:0a24540c1e5a47e5a8116c43151cb45c985f7a65afe5d4d65127d9c6fea2ffcf',
-              'fixedVersions': [
-                '1.35.0-r31'
-              ],
-              'installedVersion': '1.35.0-r29',
-              'packageName':      'busybox',
-              'purl':             'pkg:apk/alpine/busybox@1.35.0-r29?arch=aarch64&distro=3.17.1',
-              'references':       [
-                'http://lists.busybox.net/pipermail/busybox/2024-May/090762.html',
-                'https://access.redhat.com/security/cve/CVE-2023-42364',
-                'https://bugs.busybox.net/show_bug.cgi?id=15868',
-                'https://gitlab.alpinelinux.org/alpine/aports/-/blob/master/main/busybox/CVE-2023-42364-CVE-2023-42365.patch',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-42364',
-                'https://ubuntu.com/security/notices/USN-6961-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-42364'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'busybox: use-after-free'
-            },
-            {
-              'cve':  'CVE-2023-42365',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.5',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.8',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   'A use-after-free vulnerability was discovered in BusyBox v.1.36.1 via a crafted awk pattern in the awk.c copyvar function.',
-              'diffID':        'sha256:0a24540c1e5a47e5a8116c43151cb45c985f7a65afe5d4d65127d9c6fea2ffcf',
-              'fixedVersions': [
-                '1.35.0-r31'
-              ],
-              'installedVersion': '1.35.0-r29',
-              'packageName':      'busybox',
-              'purl':             'pkg:apk/alpine/busybox@1.35.0-r29?arch=aarch64&distro=3.17.1',
-              'references':       [
-                'http://lists.busybox.net/pipermail/busybox/2024-May/090762.html',
-                'https://access.redhat.com/security/cve/CVE-2023-42365',
-                'https://bugs.busybox.net/show_bug.cgi?id=15871',
-                'https://gitlab.alpinelinux.org/alpine/aports/-/blob/master/main/busybox/CVE-2023-42364-CVE-2023-42365.patch',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-42365',
-                'https://ubuntu.com/security/notices/USN-6961-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-42365'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'busybox: use-after-free'
-            },
-            {
-              'cve':  'CVE-2023-42366',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.5',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.1',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-787'
-              ],
-              'description':   'A heap-buffer-overflow was discovered in BusyBox v.1.36.1 in the next_token function at awk.c:1159.',
-              'diffID':        'sha256:0a24540c1e5a47e5a8116c43151cb45c985f7a65afe5d4d65127d9c6fea2ffcf',
-              'fixedVersions': [
-                '1.35.0-r30'
-              ],
-              'installedVersion': '1.35.0-r29',
-              'packageName':      'busybox',
-              'purl':             'pkg:apk/alpine/busybox@1.35.0-r29?arch=aarch64&distro=3.17.1',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2023-42366',
-                'https://bugs.busybox.net/show_bug.cgi?id=15874',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-42366',
-                'https://security.netapp.com/advisory/ntap-20241206-0007/',
-                'https://www.cve.org/CVERecord?id=CVE-2023-42366'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'busybox: A heap-buffer-overflow'
-            },
-            {
-              'cve':  'CVE-2023-42363',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.5',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.8',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   'A use-after-free vulnerability was discovered in xasprintf function in xfuncs_printf.c:344 in BusyBox v.1.36.1.',
-              'diffID':        'sha256:0a24540c1e5a47e5a8116c43151cb45c985f7a65afe5d4d65127d9c6fea2ffcf',
-              'fixedVersions': [
-                '1.35.0-r31'
-              ],
-              'installedVersion': '1.35.0-r29',
-              'packageName':      'busybox-binsh',
-              'purl':             'pkg:apk/alpine/busybox-binsh@1.35.0-r29?arch=aarch64&distro=3.17.1',
-              'references':       [
-                'http://lists.busybox.net/pipermail/busybox/2024-May/090760.html',
-                'https://access.redhat.com/security/cve/CVE-2023-42363',
-                'https://bugs.busybox.net/show_bug.cgi?id=15865',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-42363',
-                'https://ubuntu.com/security/notices/USN-6961-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-42363'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk'
-            },
-            {
-              'cve':  'CVE-2023-42364',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.5',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.8',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   'A use-after-free vulnerability in BusyBox v.1.36.1 allows attackers to cause a denial of service via a crafted awk pattern in the awk.c evaluate function.',
-              'diffID':        'sha256:0a24540c1e5a47e5a8116c43151cb45c985f7a65afe5d4d65127d9c6fea2ffcf',
-              'fixedVersions': [
-                '1.35.0-r31'
-              ],
-              'installedVersion': '1.35.0-r29',
-              'packageName':      'busybox-binsh',
-              'purl':             'pkg:apk/alpine/busybox-binsh@1.35.0-r29?arch=aarch64&distro=3.17.1',
-              'references':       [
-                'http://lists.busybox.net/pipermail/busybox/2024-May/090762.html',
-                'https://access.redhat.com/security/cve/CVE-2023-42364',
-                'https://bugs.busybox.net/show_bug.cgi?id=15868',
-                'https://gitlab.alpinelinux.org/alpine/aports/-/blob/master/main/busybox/CVE-2023-42364-CVE-2023-42365.patch',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-42364',
-                'https://ubuntu.com/security/notices/USN-6961-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-42364'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'busybox: use-after-free'
-            },
-            {
-              'cve':  'CVE-2023-42365',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.5',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.8',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   'A use-after-free vulnerability was discovered in BusyBox v.1.36.1 via a crafted awk pattern in the awk.c copyvar function.',
-              'diffID':        'sha256:0a24540c1e5a47e5a8116c43151cb45c985f7a65afe5d4d65127d9c6fea2ffcf',
-              'fixedVersions': [
-                '1.35.0-r31'
-              ],
-              'installedVersion': '1.35.0-r29',
-              'packageName':      'busybox-binsh',
-              'purl':             'pkg:apk/alpine/busybox-binsh@1.35.0-r29?arch=aarch64&distro=3.17.1',
-              'references':       [
-                'http://lists.busybox.net/pipermail/busybox/2024-May/090762.html',
-                'https://access.redhat.com/security/cve/CVE-2023-42365',
-                'https://bugs.busybox.net/show_bug.cgi?id=15871',
-                'https://gitlab.alpinelinux.org/alpine/aports/-/blob/master/main/busybox/CVE-2023-42364-CVE-2023-42365.patch',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-42365',
-                'https://ubuntu.com/security/notices/USN-6961-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-42365'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'busybox: use-after-free'
-            },
-            {
-              'cve':  'CVE-2023-42366',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.5',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.1',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-787'
-              ],
-              'description':   'A heap-buffer-overflow was discovered in BusyBox v.1.36.1 in the next_token function at awk.c:1159.',
-              'diffID':        'sha256:0a24540c1e5a47e5a8116c43151cb45c985f7a65afe5d4d65127d9c6fea2ffcf',
-              'fixedVersions': [
-                '1.35.0-r30'
-              ],
-              'installedVersion': '1.35.0-r29',
-              'packageName':      'busybox-binsh',
-              'purl':             'pkg:apk/alpine/busybox-binsh@1.35.0-r29?arch=aarch64&distro=3.17.1',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2023-42366',
-                'https://bugs.busybox.net/show_bug.cgi?id=15874',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-42366',
-                'https://security.netapp.com/advisory/ntap-20241206-0007/',
-                'https://www.cve.org/CVERecord?id=CVE-2023-42366'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'busybox: A heap-buffer-overflow'
-            },
-            {
-              'cve':  'CVE-2022-4450',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'nvd': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-415'
-              ],
-              'description':   'The function PEM_read_bio_ex() reads a PEM file from a BIO and parses and\ndecodes the "name" (e.g. "CERTIFICATE"), any header data and the payload data.\nIf the function succeeds then the "name_out", "header" and "data" arguments are\npopulated with pointers to buffers containing the relevant decoded data. The\ncaller is responsible for freeing those buffers. It is possible to construct a\nPEM file that results in 0 bytes of payload data. In this case PEM_read_bio_ex()\nwill return a failure code but will populate the header argument with a pointer\nto a buffer that has already been freed. If the caller also frees this buffer\nthen a double free will occur. This will most likely lead to a crash. This\ncould be exploited by an attacker who has the ability to supply malicious PEM\nfiles for parsing to achieve a denial of service attack.\n\nThe functions PEM_read_bio() and PEM_read() are simple wrappers around\nPEM_read_bio_ex() and therefore these functions are also directly affected.\n\nThese functions are also called indirectly by a number of other OpenSSL\nfunctions including PEM_X509_INFO_read_bio_ex() and\nSSL_CTX_use_serverinfo_file() which are also vulnerable. Some OpenSSL internal\nuses of these functions are not vulnerable because the caller does not free the\nheader argument if PEM_read_bio_ex() returns a failure code. These locations\ninclude the PEM_read_bio_TYPE() functions as well as the decoders introduced in\nOpenSSL 3.0.\n\nThe OpenSSL asn1parse command line application is also impacted by this issue.',
-              'diffID':        'sha256:0a24540c1e5a47e5a8116c43151cb45c985f7a65afe5d4d65127d9c6fea2ffcf',
-              'fixedVersions': [
-                '3.0.8-r0'
-              ],
-              'installedVersion': '3.0.7-r2',
-              'packageName':      'libcrypto3',
-              'purl':             'pkg:apk/alpine/libcrypto3@3.0.7-r2?arch=aarch64&distro=3.17.1',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2023:2165',
-                'https://access.redhat.com/security/cve/CVE-2022-4450',
-                'https://bugzilla.redhat.com/1960321',
-                'https://bugzilla.redhat.com/2164440',
-                'https://bugzilla.redhat.com/2164487',
-                'https://bugzilla.redhat.com/2164492',
-                'https://bugzilla.redhat.com/2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144000',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144003',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144006',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144008',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144010',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144012',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144015',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144017',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144019',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2145170',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2158412',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164440',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164487',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164488',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164492',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164497',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164499',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164500',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4203',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4304',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4450',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0215',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0216',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0217',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0286',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0401',
-                'https://errata.almalinux.org/9/ALSA-2023-2165.html',
-                'https://errata.rockylinux.org/RLSA-2023:0946',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=63bcf189be73a9cc1264059bed6f57974be74a83',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=bbcf509bd046b34cca19c766bbddc31683d0858b',
-                'https://linux.oracle.com/cve/CVE-2022-4450.html',
-                'https://linux.oracle.com/errata/ELSA-2023-32791.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2022-4450',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0003',
-                'https://rustsec.org/advisories/RUSTSEC-2023-0010.html',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://ubuntu.com/security/notices/USN-5844-1',
-                'https://ubuntu.com/security/notices/USN-6564-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2022-4450',
-                'https://www.openssl.org/news/secadv/20230207.txt'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: double free after calling PEM_read_bio_ex'
-            },
-            {
-              'cve':  'CVE-2023-0215',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'nvd': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   'The public API function BIO_new_NDEF is a helper function used for streaming\nASN.1 data via a BIO. It is primarily used internally to OpenSSL to support the\nSMIME, CMS and PKCS7 streaming capabilities, but may also be called directly by\nend user applications.\n\nThe function receives a BIO from the caller, prepends a new BIO_f_asn1 filter\nBIO onto the front of it to form a BIO chain, and then returns the new head of\nthe BIO chain to the caller. Under certain conditions, for example if a CMS\nrecipient public key is invalid, the new filter BIO is freed and the function\nreturns a NULL result indicating a failure. However, in this case, the BIO chain\nis not properly cleaned up and the BIO passed by the caller still retains\ninternal pointers to the previously freed filter BIO. If the caller then goes on\nto call BIO_pop() on the BIO then a use-after-free will occur. This will most\nlikely result in a crash.\n\n\n\nThis scenario occurs directly in the internal function B64_write_ASN1() which\nmay cause BIO_new_NDEF() to be called and will subsequently call BIO_pop() on\nthe BIO. This internal function is in turn called by the public API functions\nPEM_write_bio_ASN1_stream, PEM_write_bio_CMS_stream, PEM_write_bio_PKCS7_stream,\nSMIME_write_ASN1, SMIME_write_CMS and SMIME_write_PKCS7.\n\nOther public API functions that may be impacted by this include\ni2d_ASN1_bio_stream, BIO_new_CMS, BIO_new_PKCS7, i2d_CMS_bio_stream and\ni2d_PKCS7_bio_stream.\n\nThe OpenSSL cms and smime command line applications are similarly affected.',
-              'diffID':        'sha256:0a24540c1e5a47e5a8116c43151cb45c985f7a65afe5d4d65127d9c6fea2ffcf',
-              'fixedVersions': [
-                '3.0.8-r0'
-              ],
-              'installedVersion': '3.0.7-r2',
-              'packageName':      'libcrypto3',
-              'purl':             'pkg:apk/alpine/libcrypto3@3.0.7-r2?arch=aarch64&distro=3.17.1',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2023:2165',
-                'https://access.redhat.com/security/cve/CVE-2023-0215',
-                'https://bugzilla.redhat.com/1960321',
-                'https://bugzilla.redhat.com/2164440',
-                'https://bugzilla.redhat.com/2164487',
-                'https://bugzilla.redhat.com/2164492',
-                'https://bugzilla.redhat.com/2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144000',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144003',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144006',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144008',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144010',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144012',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144015',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144017',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144019',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2145170',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2158412',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164440',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164487',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164488',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164492',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164497',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164499',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164500',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4203',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4304',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4450',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0215',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0216',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0217',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0286',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0401',
-                'https://errata.almalinux.org/9/ALSA-2023-2165.html',
-                'https://errata.rockylinux.org/RLSA-2023:0946',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=8818064ce3c3c0f1b740a5aaba2a987e75bfbafd',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=9816136fe31d92ace4037d5da5257f763aeeb4eb',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=c3829dd8825c654652201e16f8a0a0c46ee3f344',
-                'https://linux.oracle.com/cve/CVE-2023-0215.html',
-                'https://linux.oracle.com/errata/ELSA-2023-32791.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-0215',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0003',
-                'https://rustsec.org/advisories/RUSTSEC-2023-0009.html',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://security.netapp.com/advisory/ntap-20230427-0007',
-                'https://security.netapp.com/advisory/ntap-20230427-0007/',
-                'https://security.netapp.com/advisory/ntap-20230427-0009',
-                'https://security.netapp.com/advisory/ntap-20230427-0009/',
-                'https://security.netapp.com/advisory/ntap-20240621-0006',
-                'https://security.netapp.com/advisory/ntap-20240621-0006/',
-                'https://ubuntu.com/security/notices/USN-5844-1',
-                'https://ubuntu.com/security/notices/USN-5845-1',
-                'https://ubuntu.com/security/notices/USN-5845-2',
-                'https://ubuntu.com/security/notices/USN-6564-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-0215',
-                'https://www.openssl.org/news/secadv/20230207.txt'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: use-after-free following BIO_new_NDEF'
-            },
-            {
-              'cve':  'CVE-2023-0216',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'nvd': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-476'
-              ],
-              'description':   'An invalid pointer dereference on read can be triggered when an\napplication tries to load malformed PKCS7 data with the\nd2i_PKCS7(), d2i_PKCS7_bio() or d2i_PKCS7_fp() functions.\n\nThe result of the dereference is an application crash which could\nlead to a denial of service attack. The TLS implementation in OpenSSL\ndoes not call this function however third party applications might\ncall these functions on untrusted data.',
-              'diffID':        'sha256:0a24540c1e5a47e5a8116c43151cb45c985f7a65afe5d4d65127d9c6fea2ffcf',
-              'fixedVersions': [
-                '3.0.8-r0'
-              ],
-              'installedVersion': '3.0.7-r2',
-              'packageName':      'libcrypto3',
-              'purl':             'pkg:apk/alpine/libcrypto3@3.0.7-r2?arch=aarch64&distro=3.17.1',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2023:0946',
-                'https://access.redhat.com/security/cve/CVE-2023-0216',
-                'https://bugzilla.redhat.com/2164440',
-                'https://bugzilla.redhat.com/2164487',
-                'https://bugzilla.redhat.com/2164488',
-                'https://bugzilla.redhat.com/2164492',
-                'https://bugzilla.redhat.com/2164494',
-                'https://bugzilla.redhat.com/2164497',
-                'https://bugzilla.redhat.com/2164499',
-                'https://bugzilla.redhat.com/2164500',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144000',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144003',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144006',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144008',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144010',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144012',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144015',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144017',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144019',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2145170',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2158412',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164440',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164487',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164488',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164492',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164497',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164499',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164500',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4203',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4304',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4450',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0215',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0216',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0217',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0286',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0401',
-                'https://errata.almalinux.org/9/ALSA-2023-0946.html',
-                'https://errata.rockylinux.org/RLSA-2023:0946',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=934a04f0e775309cadbef0aa6b9692e1b12a76c6',
-                'https://linux.oracle.com/cve/CVE-2023-0216.html',
-                'https://linux.oracle.com/errata/ELSA-2023-12152.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-0216',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0003',
-                'https://rustsec.org/advisories/RUSTSEC-2023-0011.html',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://ubuntu.com/security/notices/USN-5844-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-0216',
-                'https://www.openssl.org/news/secadv/20230207.txt'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: invalid pointer dereference in d2i_PKCS7 functions'
-            },
-            {
-              'cve':  'CVE-2023-0217',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'nvd': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-476'
-              ],
-              'description':   'An invalid pointer dereference on read can be triggered when an\napplication tries to check a malformed DSA public key by the\nEVP_PKEY_public_check() function. This will most likely lead\nto an application crash. This function can be called on public\nkeys supplied from untrusted sources which could allow an attacker\nto cause a denial of service attack.\n\nThe TLS implementation in OpenSSL does not call this function\nbut applications might call the function if there are additional\nsecurity requirements imposed by standards such as FIPS 140-3.',
-              'diffID':        'sha256:0a24540c1e5a47e5a8116c43151cb45c985f7a65afe5d4d65127d9c6fea2ffcf',
-              'fixedVersions': [
-                '3.0.8-r0'
-              ],
-              'installedVersion': '3.0.7-r2',
-              'packageName':      'libcrypto3',
-              'purl':             'pkg:apk/alpine/libcrypto3@3.0.7-r2?arch=aarch64&distro=3.17.1',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2023:0946',
-                'https://access.redhat.com/security/cve/CVE-2023-0217',
-                'https://bugzilla.redhat.com/2164440',
-                'https://bugzilla.redhat.com/2164487',
-                'https://bugzilla.redhat.com/2164488',
-                'https://bugzilla.redhat.com/2164492',
-                'https://bugzilla.redhat.com/2164494',
-                'https://bugzilla.redhat.com/2164497',
-                'https://bugzilla.redhat.com/2164499',
-                'https://bugzilla.redhat.com/2164500',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144000',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144003',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144006',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144008',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144010',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144012',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144015',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144017',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144019',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2145170',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2158412',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164440',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164487',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164488',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164492',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164497',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164499',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164500',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4203',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4304',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4450',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0215',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0216',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0217',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0286',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0401',
-                'https://errata.almalinux.org/9/ALSA-2023-0946.html',
-                'https://errata.rockylinux.org/RLSA-2023:0946',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=23985bac83fd50c8e29431009302b5442f985096',
-                'https://linux.oracle.com/cve/CVE-2023-0217.html',
-                'https://linux.oracle.com/errata/ELSA-2023-12152.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-0217',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0003',
-                'https://rustsec.org/advisories/RUSTSEC-2023-0012.html',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://ubuntu.com/security/notices/USN-5844-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-0217',
-                'https://www.openssl.org/news/secadv/20230207.txt'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: NULL dereference validating DSA public key'
-            },
-            {
-              'cve':  'CVE-2023-0286',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '7.4',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H'
-                },
-                'nvd': {
-                  'v3score':  '7.4',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.4',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-843'
-              ],
-              'description':   'There is a type confusion vulnerability relating to X.400 address processing\ninside an X.509 GeneralName. X.400 addresses were parsed as an ASN1_STRING but\nthe public structure definition for GENERAL_NAME incorrectly specified the type\nof the x400Address field as ASN1_TYPE. This field is subsequently interpreted by\nthe OpenSSL function GENERAL_NAME_cmp as an ASN1_TYPE rather than an\nASN1_STRING.\n\nWhen CRL checking is enabled (i.e. the application sets the\nX509_V_FLAG_CRL_CHECK flag), this vulnerability may allow an attacker to pass\narbitrary pointers to a memcmp call, enabling them to read memory contents or\nenact a denial of service. In most cases, the attack requires the attacker to\nprovide both the certificate chain and CRL, neither of which need to have a\nvalid signature. If the attacker only controls one of these inputs, the other\ninput must already contain an X.400 address as a CRL distribution point, which\nis uncommon. As such, this vulnerability is most likely to only affect\napplications which have implemented their own functionality for retrieving CRLs\nover a network.',
-              'diffID':        'sha256:0a24540c1e5a47e5a8116c43151cb45c985f7a65afe5d4d65127d9c6fea2ffcf',
-              'fixedVersions': [
-                '3.0.8-r0'
-              ],
-              'installedVersion': '3.0.7-r2',
-              'packageName':      'libcrypto3',
-              'purl':             'pkg:apk/alpine/libcrypto3@3.0.7-r2?arch=aarch64&distro=3.17.1',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2025:7937',
-                'https://access.redhat.com/security/cve/CVE-2023-0286',
-                'https://access.redhat.com/security/cve/cve-2023-0286',
-                'https://bugzilla.redhat.com/2164440',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144000',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144003',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144006',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144008',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144010',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144012',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144015',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144017',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144019',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2145170',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2158412',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164440',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164487',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164488',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164492',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164497',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164499',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164500',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4203',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4304',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4450',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0215',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0216',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0217',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0286',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0401',
-                'https://errata.almalinux.org/9/ALSA-2025-7937.html',
-                'https://errata.rockylinux.org/RLSA-2023:0946',
-                'https://ftp.openbsd.org/pub/OpenBSD/LibreSSL/libressl-3.6.2-relnotes.txt',
-                'https://ftp.openbsd.org/pub/OpenBSD/patches/7.2/common/018_x509.patch.sig',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=2c6c9d439b484e1ba9830d8454a34fa4f80fdfe9',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=2f7530077e0ef79d98718138716bc51ca0cad658',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=fd2af07dc083a350c959147097003a14a5e8ac4d',
-                'https://github.com/pyca/cryptography',
-                'https://github.com/pyca/cryptography/security/advisories/GHSA-x4qr-2fvf-3mr5',
-                'https://linux.oracle.com/cve/CVE-2023-0286.html',
-                'https://linux.oracle.com/errata/ELSA-2025-7937.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-0286',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0003',
-                'https://rustsec.org/advisories/RUSTSEC-2023-0006.html',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://ubuntu.com/security/notices/USN-5844-1',
-                'https://ubuntu.com/security/notices/USN-5845-1',
-                'https://ubuntu.com/security/notices/USN-5845-2',
-                'https://ubuntu.com/security/notices/USN-6564-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-0286',
-                'https://www.openssl.org/news/secadv/20230207.txt'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: X.400 address type confusion in X.509 GeneralName'
-            },
-            {
-              'cve':  'CVE-2023-0401',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'nvd': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-476'
-              ],
-              'description':   'A NULL pointer can be dereferenced when signatures are being\nverified on PKCS7 signed or signedAndEnveloped data. In case the hash\nalgorithm used for the signature is known to the OpenSSL library but\nthe implementation of the hash algorithm is not available the digest\ninitialization will fail. There is a missing check for the return\nvalue from the initialization function which later leads to invalid\nusage of the digest API most likely leading to a crash.\n\nThe unavailability of an algorithm can be caused by using FIPS\nenabled configuration of providers or more commonly by not loading\nthe legacy provider.\n\nPKCS7 data is processed by the SMIME library calls and also by the\ntime stamp (TS) library calls. The TLS implementation in OpenSSL does\nnot call these functions however third party applications would be\naffected if they call these functions to verify signatures on untrusted\ndata.',
-              'diffID':        'sha256:0a24540c1e5a47e5a8116c43151cb45c985f7a65afe5d4d65127d9c6fea2ffcf',
-              'fixedVersions': [
-                '3.0.8-r0'
-              ],
-              'installedVersion': '3.0.7-r2',
-              'packageName':      'libcrypto3',
-              'purl':             'pkg:apk/alpine/libcrypto3@3.0.7-r2?arch=aarch64&distro=3.17.1',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2023:0946',
-                'https://access.redhat.com/security/cve/CVE-2023-0401',
-                'https://bugzilla.redhat.com/2164440',
-                'https://bugzilla.redhat.com/2164487',
-                'https://bugzilla.redhat.com/2164488',
-                'https://bugzilla.redhat.com/2164492',
-                'https://bugzilla.redhat.com/2164494',
-                'https://bugzilla.redhat.com/2164497',
-                'https://bugzilla.redhat.com/2164499',
-                'https://bugzilla.redhat.com/2164500',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144000',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144003',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144006',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144008',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144010',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144012',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144015',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144017',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144019',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2145170',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2158412',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164440',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164487',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164488',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164492',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164497',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164499',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164500',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4203',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4304',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4450',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0215',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0216',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0217',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0286',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0401',
-                'https://errata.almalinux.org/9/ALSA-2023-0946.html',
-                'https://errata.rockylinux.org/RLSA-2023:0946',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=d3b6dfd70db844c4499bec6ad6601623a565e674',
-                'https://github.com/alexcrichton/openssl-src-rs',
-                'https://linux.oracle.com/cve/CVE-2023-0401.html',
-                'https://linux.oracle.com/errata/ELSA-2023-12152.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-0401',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0003',
-                'https://rustsec.org/advisories/RUSTSEC-2023-0013.html',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://ubuntu.com/security/notices/USN-5844-1',
-                'https://ubuntu.com/security/notices/USN-6564-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-0401',
-                'https://www.openssl.org/news/secadv/20230207.txt'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: NULL dereference during PKCS7 data verification'
-            },
-            {
-              'cve':  'CVE-2023-0464',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-295'
-              ],
-              'description':   "A security vulnerability has been identified in all supported versions\n\nof OpenSSL related to the verification of X.509 certificate chains\nthat include policy constraints.  Attackers may be able to exploit this\nvulnerability by creating a malicious certificate chain that triggers\nexponential use of computational resources, leading to a denial-of-service\n(DoS) attack on affected systems.\n\nPolicy processing is disabled by default but can be enabled by passing\nthe `-policy' argument to the command line utilities or by calling the\n`X509_VERIFY_PARAM_set1_policies()' function.",
-              'diffID':        'sha256:0a24540c1e5a47e5a8116c43151cb45c985f7a65afe5d4d65127d9c6fea2ffcf',
-              'fixedVersions': [
-                '3.0.8-r1'
-              ],
-              'installedVersion': '3.0.7-r2',
-              'packageName':      'libcrypto3',
-              'purl':             'pkg:apk/alpine/libcrypto3@3.0.7-r2?arch=aarch64&distro=3.17.1',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2023:3722',
-                'https://access.redhat.com/security/cve/CVE-2023-0464',
-                'https://bugzilla.redhat.com/2181082',
-                'https://bugzilla.redhat.com/2182561',
-                'https://bugzilla.redhat.com/2182565',
-                'https://bugzilla.redhat.com/2188461',
-                'https://bugzilla.redhat.com/2207947',
-                'https://errata.almalinux.org/9/ALSA-2023-3722.html',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=2017771e2db3e2b96f89bbe8766c3209f6a99545',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=2dcd4f1e3115f38cefa43e3efbe9b801c27e642e',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=879f7080d7e141f415c79eaa3a8ac4a3dad0348b',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=959c59c7a0164117e7f8366466a32bb1f8d77ff1',
-                'https://linux.oracle.com/cve/CVE-2023-0464.html',
-                'https://linux.oracle.com/errata/ELSA-2023-3722.html',
-                'https://lists.debian.org/debian-lts-announce/2023/06/msg00011.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-0464',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://security.netapp.com/advisory/ntap-20230406-0006/',
-                'https://security.netapp.com/advisory/ntap-20240621-0006/',
-                'https://ubuntu.com/security/notices/USN-6039-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.couchbase.com/alerts/',
-                'https://www.cve.org/CVERecord?id=CVE-2023-0464',
-                'https://www.debian.org/security/2023/dsa-5417',
-                'https://www.openssl.org/news/secadv/20230322.txt'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: Denial of service by excessive resource usage in verifying X509 policy constraints'
-            },
-            {
-              'cve':  'CVE-2023-5363',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N'
-                },
-                'redhat': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-684'
-              ],
-              'description':   "Issue summary: A bug has been identified in the processing of key and\ninitialisation vector (IV) lengths.  This can lead to potential truncation\nor overruns during the initialisation of some symmetric ciphers.\n\nImpact summary: A truncation in the IV can result in non-uniqueness,\nwhich could result in loss of confidentiality for some cipher modes.\n\nWhen calling EVP_EncryptInit_ex2(), EVP_DecryptInit_ex2() or\nEVP_CipherInit_ex2() the provided OSSL_PARAM array is processed after\nthe key and IV have been established.  Any alterations to the key length,\nvia the \"keylen\" parameter or the IV length, via the \"ivlen\" parameter,\nwithin the OSSL_PARAM array will not take effect as intended, potentially\ncausing truncation or overreading of these values.  The following ciphers\nand cipher modes are impacted: RC2, RC4, RC5, CCM, GCM and OCB.\n\nFor the CCM, GCM and OCB cipher modes, truncation of the IV can result in\nloss of confidentiality.  For example, when following NIST's SP 800-38D\nsection 8.2.1 guidance for constructing a deterministic IV for AES in\nGCM mode, truncation of the counter portion could lead to IV reuse.\n\nBoth truncations and overruns of the key and overruns of the IV will\nproduce incorrect results and could, in some cases, trigger a memory\nexception.  However, these issues are not currently assessed as security\ncritical.\n\nChanging the key and/or IV lengths is not considered to be a common operation\nand the vulnerable API was recently introduced. Furthermore it is likely that\napplication developers will have spotted this problem during testing since\ndecryption would fail unless both peers in the communication were similarly\nvulnerable. For these reasons we expect the probability of an application being\nvulnerable to this to be quite low. However if an application is vulnerable then\nthis issue is considered very serious. For these reasons we have assessed this\nissue as Moderate severity overall.\n\nThe OpenSSL SSL/TLS implementation is not affected by this issue.\n\nThe OpenSSL 3.0 and 3.1 FIPS providers are not affected by this because\nthe issue lies outside of the FIPS provider boundary.\n\nOpenSSL 3.1 and 3.0 are vulnerable to this issue.",
-              'diffID':        'sha256:0a24540c1e5a47e5a8116c43151cb45c985f7a65afe5d4d65127d9c6fea2ffcf',
-              'fixedVersions': [
-                '3.0.12-r0'
-              ],
-              'installedVersion': '3.0.7-r2',
-              'packageName':      'libcrypto3',
-              'purl':             'pkg:apk/alpine/libcrypto3@3.0.7-r2?arch=aarch64&distro=3.17.1',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2023/10/24/1',
-                'https://access.redhat.com/errata/RHSA-2024:0310',
-                'https://access.redhat.com/security/cve/CVE-2023-5363',
-                'https://bugzilla.redhat.com/2243839',
-                'https://errata.almalinux.org/9/ALSA-2024-0310.html',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=0df40630850fb2740e6be6890bb905d3fc623b2d',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=5f69f5c65e483928c4b28ed16af6e5742929f1ee',
-                'https://linux.oracle.com/cve/CVE-2023-5363.html',
-                'https://linux.oracle.com/errata/ELSA-2024-12093.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-5363',
-                'https://security.netapp.com/advisory/ntap-20231027-0010/',
-                'https://security.netapp.com/advisory/ntap-20240201-0003/',
-                'https://security.netapp.com/advisory/ntap-20240201-0004/',
-                'https://security.netapp.com/advisory/ntap-20241108-0002/',
-                'https://ubuntu.com/security/notices/USN-6450-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-5363',
-                'https://www.debian.org/security/2023/dsa-5532',
-                'https://www.openssl.org/news/secadv/20231024.txt'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: Incorrect cipher key and IV length processing'
-            },
-            {
-              'cve':  'CVE-2024-6119',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-843'
-              ],
-              'description':   "Issue summary: Applications performing certificate name checks (e.g., TLS\nclients checking server certificates) may attempt to read an invalid memory\naddress resulting in abnormal termination of the application process.\n\nImpact summary: Abnormal termination of an application can a cause a denial of\nservice.\n\nApplications performing certificate name checks (e.g., TLS clients checking\nserver certificates) may attempt to read an invalid memory address when\ncomparing the expected name with an `otherName` subject alternative name of an\nX.509 certificate. This may result in an exception that terminates the\napplication program.\n\nNote that basic certificate chain validation (signatures, dates, ...) is not\naffected, the denial of service can occur only when the application also\nspecifies an expected DNS name, Email address or IP address.\n\nTLS servers rarely solicit client certificates, and even when they do, they\ngenerally don't perform a name check against a reference identifier (expected\nidentity), but rather extract the presented identity after checking the\ncertificate chain.  So TLS servers are generally not affected and the severity\nof the issue is Moderate.\n\nThe FIPS modules in 3.3, 3.2, 3.1 and 3.0 are not affected by this issue.",
-              'diffID':        'sha256:0a24540c1e5a47e5a8116c43151cb45c985f7a65afe5d4d65127d9c6fea2ffcf',
-              'fixedVersions': [
-                '3.0.15-r0'
-              ],
-              'installedVersion': '3.0.7-r2',
-              'packageName':      'libcrypto3',
-              'purl':             'pkg:apk/alpine/libcrypto3@3.0.7-r2?arch=aarch64&distro=3.17.1',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2024/09/03/4',
-                'https://access.redhat.com/errata/RHSA-2024:8935',
-                'https://access.redhat.com/security/cve/CVE-2024-6119',
-                'https://bugzilla.redhat.com/2306158',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2306158',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-6119',
-                'https://errata.almalinux.org/9/ALSA-2024-8935.html',
-                'https://errata.rockylinux.org/RLSA-2024:6783',
-                'https://github.com/openssl/openssl/commit/05f360d9e849a1b277db628f1f13083a7f8dd04f',
-                'https://github.com/openssl/openssl/commit/06d1dc3fa96a2ba5a3e22735a033012aadc9f0d6',
-                'https://github.com/openssl/openssl/commit/621f3729831b05ee828a3203eddb621d014ff2b2',
-                'https://github.com/openssl/openssl/commit/7dfcee2cd2a63b2c64b9b4b0850be64cb695b0a0',
-                'https://github.com/openssl/openssl/security/advisories/GHSA-5qrj-vq78-58fj',
-                'https://linux.oracle.com/cve/CVE-2024-6119.html',
-                'https://linux.oracle.com/errata/ELSA-2024-8935.html',
-                'https://lists.freebsd.org/archives/freebsd-security/2024-September/000303.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2024-6119',
-                'https://openssl-library.org/news/secadv/20240903.txt',
-                'https://security.netapp.com/advisory/ntap-20240912-0001/',
-                'https://ubuntu.com/security/notices/USN-6986-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2024-6119'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: Possible denial of service in X.509 name checks'
-            },
-            {
-              'cve':  'CVE-2022-4203',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '9.1',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H'
-                },
-                'nvd': {
-                  'v3score':  '4.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '4.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-125'
-              ],
-              'description':   'A read buffer overrun can be triggered in X.509 certificate verification,\nspecifically in name constraint checking. Note that this occurs\nafter certificate chain signature verification and requires either a\nCA to have signed the malicious certificate or for the application to\ncontinue certificate verification despite failure to construct a path\nto a trusted issuer.\n\nThe read buffer overrun might result in a crash which could lead to\na denial of service attack. In theory it could also result in the disclosure\nof private memory contents (such as private keys, or sensitive plaintext)\nalthough we are not aware of any working exploit leading to memory\ncontents disclosure as of the time of release of this advisory.\n\nIn a TLS client, this can be triggered by connecting to a malicious\nserver. In a TLS server, this can be triggered if the server requests\nclient authentication and a malicious client connects.',
-              'diffID':        'sha256:0a24540c1e5a47e5a8116c43151cb45c985f7a65afe5d4d65127d9c6fea2ffcf',
-              'fixedVersions': [
-                '3.0.8-r0'
-              ],
-              'installedVersion': '3.0.7-r2',
-              'packageName':      'libcrypto3',
-              'purl':             'pkg:apk/alpine/libcrypto3@3.0.7-r2?arch=aarch64&distro=3.17.1',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2023:0946',
-                'https://access.redhat.com/security/cve/CVE-2022-4203',
-                'https://bugzilla.redhat.com/2164440',
-                'https://bugzilla.redhat.com/2164487',
-                'https://bugzilla.redhat.com/2164488',
-                'https://bugzilla.redhat.com/2164492',
-                'https://bugzilla.redhat.com/2164494',
-                'https://bugzilla.redhat.com/2164497',
-                'https://bugzilla.redhat.com/2164499',
-                'https://bugzilla.redhat.com/2164500',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144000',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144003',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144006',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144008',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144010',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144012',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144015',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144017',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144019',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2145170',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2158412',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164440',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164487',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164488',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164492',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164497',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164499',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164500',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4203',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4304',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4450',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0215',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0216',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0217',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0286',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0401',
-                'https://errata.almalinux.org/9/ALSA-2023-0946.html',
-                'https://errata.rockylinux.org/RLSA-2023:0946',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=c927a3492698c254637da836762f9b1f86cffabc',
-                'https://linux.oracle.com/cve/CVE-2022-4203.html',
-                'https://linux.oracle.com/errata/ELSA-2023-12152.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2022-4203',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0003',
-                'https://rustsec.org/advisories/RUSTSEC-2023-0008.html',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://ubuntu.com/security/notices/USN-5844-1',
-                'https://www.cve.org/CVERecord?id=CVE-2022-4203',
-                'https://www.openssl.org/news/secadv/20230207.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: read buffer overflow in X.509 certificate verification'
-            },
-            {
-              'cve':  'CVE-2022-4304',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N'
-                },
-                'nvd': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N'
-                },
-                'redhat': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-203'
-              ],
-              'description':   'A timing based side channel exists in the OpenSSL RSA Decryption implementation\nwhich could be sufficient to recover a plaintext across a network in a\nBleichenbacher style attack. To achieve a successful decryption an attacker\nwould have to be able to send a very large number of trial messages for\ndecryption. The vulnerability affects all RSA padding modes: PKCS#1 v1.5,\nRSA-OEAP and RSASVE.\n\nFor example, in a TLS connection, RSA is commonly used by a client to send an\nencrypted pre-master secret to the server. An attacker that had observed a\ngenuine connection between a client and a server could use this flaw to send\ntrial messages to the server and record the time taken to process them. After a\nsufficiently large number of messages the attacker could recover the pre-master\nsecret used for the original connection and thus be able to decrypt the\napplication data sent over that connection.',
-              'diffID':        'sha256:0a24540c1e5a47e5a8116c43151cb45c985f7a65afe5d4d65127d9c6fea2ffcf',
-              'fixedVersions': [
-                '3.0.8-r0'
-              ],
-              'installedVersion': '3.0.7-r2',
-              'packageName':      'libcrypto3',
-              'purl':             'pkg:apk/alpine/libcrypto3@3.0.7-r2?arch=aarch64&distro=3.17.1',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2023:2165',
-                'https://access.redhat.com/security/cve/CVE-2022-4304',
-                'https://bugzilla.redhat.com/1960321',
-                'https://bugzilla.redhat.com/2164440',
-                'https://bugzilla.redhat.com/2164487',
-                'https://bugzilla.redhat.com/2164492',
-                'https://bugzilla.redhat.com/2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144000',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144003',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144006',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144008',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144010',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144012',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144015',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144017',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144019',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2145170',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2158412',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164440',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164487',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164488',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164492',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164497',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164499',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164500',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4203',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4304',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4450',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0215',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0216',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0217',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0286',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0401',
-                'https://errata.almalinux.org/9/ALSA-2023-2165.html',
-                'https://errata.rockylinux.org/RLSA-2023:0946',
-                'https://linux.oracle.com/cve/CVE-2022-4304.html',
-                'https://linux.oracle.com/errata/ELSA-2023-32791.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2022-4304',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0003',
-                'https://rustsec.org/advisories/RUSTSEC-2023-0007.html',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://ubuntu.com/security/notices/USN-5844-1',
-                'https://ubuntu.com/security/notices/USN-6564-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2022-4304',
-                'https://www.openssl.org/news/secadv/20230207.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: timing attack in RSA Decryption implementation'
-            },
-            {
-              'cve':  'CVE-2023-0465',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N'
-                },
-                'redhat': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-295'
-              ],
-              'description':   "Applications that use a non-default option when verifying certificates may be\nvulnerable to an attack from a malicious CA to circumvent certain checks.\n\nInvalid certificate policies in leaf certificates are silently ignored by\nOpenSSL and other certificate policy checks are skipped for that certificate.\nA malicious CA could use this to deliberately assert invalid certificate policies\nin order to circumvent policy checking on the certificate altogether.\n\nPolicy processing is disabled by default but can be enabled by passing\nthe `-policy' argument to the command line utilities or by calling the\n`X509_VERIFY_PARAM_set1_policies()' function.",
-              'diffID':        'sha256:0a24540c1e5a47e5a8116c43151cb45c985f7a65afe5d4d65127d9c6fea2ffcf',
-              'fixedVersions': [
-                '3.0.8-r2'
-              ],
-              'installedVersion': '3.0.7-r2',
-              'packageName':      'libcrypto3',
-              'purl':             'pkg:apk/alpine/libcrypto3@3.0.7-r2?arch=aarch64&distro=3.17.1',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2023:3722',
-                'https://access.redhat.com/security/cve/CVE-2023-0465',
-                'https://bugzilla.redhat.com/2181082',
-                'https://bugzilla.redhat.com/2182561',
-                'https://bugzilla.redhat.com/2182565',
-                'https://bugzilla.redhat.com/2188461',
-                'https://bugzilla.redhat.com/2207947',
-                'https://errata.almalinux.org/9/ALSA-2023-3722.html',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=10325176f3d3e98c6e2b3bf5ab1e3b334de6947a',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=1dd43e0709fece299b15208f36cc7c76209ba0bb',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=b013765abfa80036dc779dd0e50602c57bb3bf95',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=facfb1ab745646e97a1920977ae4a9965ea61d5c',
-                'https://linux.oracle.com/cve/CVE-2023-0465.html',
-                'https://linux.oracle.com/errata/ELSA-2023-3722.html',
-                'https://lists.debian.org/debian-lts-announce/2023/06/msg00011.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-0465',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://security.netapp.com/advisory/ntap-20230414-0001/',
-                'https://ubuntu.com/security/notices/USN-6039-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-0465',
-                'https://www.debian.org/security/2023/dsa-5417',
-                'https://www.openssl.org/news/secadv/20230328.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: Invalid certificate policies in leaf certificates are silently ignored'
-            },
-            {
-              'cve':  'CVE-2023-0466',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N'
-                },
-                'redhat': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-295'
-              ],
-              'description':   'The function X509_VERIFY_PARAM_add0_policy() is documented to\nimplicitly enable the certificate policy check when doing certificate\nverification. However the implementation of the function does not\nenable the check which allows certificates with invalid or incorrect\npolicies to pass the certificate verification.\n\nAs suddenly enabling the policy check could break existing deployments it was\ndecided to keep the existing behavior of the X509_VERIFY_PARAM_add0_policy()\nfunction.\n\nInstead the applications that require OpenSSL to perform certificate\npolicy check need to use X509_VERIFY_PARAM_set1_policies() or explicitly\nenable the policy check by calling X509_VERIFY_PARAM_set_flags() with\nthe X509_V_FLAG_POLICY_CHECK flag argument.\n\nCertificate policy checks are disabled by default in OpenSSL and are not\ncommonly used by applications.',
-              'diffID':        'sha256:0a24540c1e5a47e5a8116c43151cb45c985f7a65afe5d4d65127d9c6fea2ffcf',
-              'fixedVersions': [
-                '3.0.8-r3'
-              ],
-              'installedVersion': '3.0.7-r2',
-              'packageName':      'libcrypto3',
-              'purl':             'pkg:apk/alpine/libcrypto3@3.0.7-r2?arch=aarch64&distro=3.17.1',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2023/09/28/4',
-                'https://access.redhat.com/errata/RHSA-2023:3722',
-                'https://access.redhat.com/security/cve/CVE-2023-0466',
-                'https://bugzilla.redhat.com/2181082',
-                'https://bugzilla.redhat.com/2182561',
-                'https://bugzilla.redhat.com/2182565',
-                'https://bugzilla.redhat.com/2188461',
-                'https://bugzilla.redhat.com/2207947',
-                'https://errata.almalinux.org/9/ALSA-2023-3722.html',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=0d16b7e99aafc0b4a6d729eec65a411a7e025f0a',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=51e8a84ce742db0f6c70510d0159dad8f7825908',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=73398dea26de9899fb4baa94098ad0a61f435c72',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=fc814a30fc4f0bc54fcea7d9a7462f5457aab061',
-                'https://linux.oracle.com/cve/CVE-2023-0466.html',
-                'https://linux.oracle.com/errata/ELSA-2023-3722.html',
-                'https://lists.debian.org/debian-lts-announce/2023/06/msg00011.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-0466',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://security.netapp.com/advisory/ntap-20230414-0001/',
-                'https://ubuntu.com/security/notices/USN-6039-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-0466',
-                'https://www.debian.org/security/2023/dsa-5417',
-                'https://www.openssl.org/news/secadv/20230328.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: Certificate policy check not enabled'
-            },
-            {
-              'cve':  'CVE-2023-1255',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '5.1',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-125'
-              ],
-              'description':   'Issue summary: The AES-XTS cipher decryption implementation for 64 bit ARM\nplatform contains a bug that could cause it to read past the input buffer,\nleading to a crash.\n\nImpact summary: Applications that use the AES-XTS algorithm on the 64 bit ARM\nplatform can crash in rare circumstances. The AES-XTS algorithm is usually\nused for disk encryption.\n\nThe AES-XTS cipher decryption implementation for 64 bit ARM platform will read\npast the end of the ciphertext buffer if the ciphertext size is 4 mod 5 in 16\nbyte blocks, e.g. 144 bytes or 1024 bytes. If the memory after the ciphertext\nbuffer is unmapped, this will trigger a crash which results in a denial of\nservice.\n\nIf an attacker can control the size and location of the ciphertext buffer\nbeing decrypted by an application using AES-XTS on 64 bit ARM, the\napplication is affected. This is fairly unlikely making this issue\na Low severity one.',
-              'diffID':        'sha256:0a24540c1e5a47e5a8116c43151cb45c985f7a65afe5d4d65127d9c6fea2ffcf',
-              'fixedVersions': [
-                '3.0.8-r4'
-              ],
-              'installedVersion': '3.0.7-r2',
-              'packageName':      'libcrypto3',
-              'purl':             'pkg:apk/alpine/libcrypto3@3.0.7-r2?arch=aarch64&distro=3.17.1',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2023:3722',
-                'https://access.redhat.com/security/cve/CVE-2023-1255',
-                'https://bugzilla.redhat.com/2181082',
-                'https://bugzilla.redhat.com/2182561',
-                'https://bugzilla.redhat.com/2182565',
-                'https://bugzilla.redhat.com/2188461',
-                'https://bugzilla.redhat.com/2207947',
-                'https://errata.almalinux.org/9/ALSA-2023-3722.html',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=02ac9c9420275868472f33b01def01218742b8bb',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=bc2f61ad70971869b242fc1cb445b98bad50074a',
-                'https://linux.oracle.com/cve/CVE-2023-1255.html',
-                'https://linux.oracle.com/errata/ELSA-2023-3722.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-1255',
-                'https://security.netapp.com/advisory/ntap-20230908-0006/',
-                'https://ubuntu.com/security/notices/USN-6119-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-1255',
-                'https://www.openssl.org/news/secadv/20230419.txt',
-                'https://www.openssl.org/news/secadv/20230420.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: Input buffer over-read in AES-XTS implementation on 64 bit ARM'
-            },
-            {
-              'cve':  'CVE-2023-2650',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '6.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-770'
-              ],
-              'description':   "Issue summary: Processing some specially crafted ASN.1 object identifiers or\ndata containing them may be very slow.\n\nImpact summary: Applications that use OBJ_obj2txt() directly, or use any of\nthe OpenSSL subsystems OCSP, PKCS7/SMIME, CMS, CMP/CRMF or TS with no message\nsize limit may experience notable to very long delays when processing those\nmessages, which may lead to a Denial of Service.\n\nAn OBJECT IDENTIFIER is composed of a series of numbers - sub-identifiers -\nmost of which have no size limit.  OBJ_obj2txt() may be used to translate\nan ASN.1 OBJECT IDENTIFIER given in DER encoding form (using the OpenSSL\ntype ASN1_OBJECT) to its canonical numeric text form, which are the\nsub-identifiers of the OBJECT IDENTIFIER in decimal form, separated by\nperiods.\n\nWhen one of the sub-identifiers in the OBJECT IDENTIFIER is very large\n(these are sizes that are seen as absurdly large, taking up tens or hundreds\nof KiBs), the translation to a decimal number in text may take a very long\ntime.  The time complexity is O(n^2) with 'n' being the size of the\nsub-identifiers in bytes (*).\n\nWith OpenSSL 3.0, support to fetch cryptographic algorithms using names /\nidentifiers in string form was introduced.  This includes using OBJECT\nIDENTIFIERs in canonical numeric text form as identifiers for fetching\nalgorithms.\n\nSuch OBJECT IDENTIFIERs may be received through the ASN.1 structure\nAlgorithmIdentifier, which is commonly used in multiple protocols to specify\nwhat cryptographic algorithm should be used to sign or verify, encrypt or\ndecrypt, or digest passed data.\n\nApplications that call OBJ_obj2txt() directly with untrusted data are\naffected, with any version of OpenSSL.  If the use is for the mere purpose\nof display, the severity is considered low.\n\nIn OpenSSL 3.0 and newer, this affects the subsystems OCSP, PKCS7/SMIME,\nCMS, CMP/CRMF or TS.  It also impacts anything that processes X.509\ncertificates, including simple things like verifying its signature.\n\nThe impact on TLS is relatively low, because all versions of OpenSSL have a\n100KiB limit on the peer's certificate chain.  Additionally, this only\nimpacts clients, or servers that have explicitly enabled client\nauthentication.\n\nIn OpenSSL 1.1.1 and 1.0.2, this only affects displaying diverse objects,\nsuch as X.509 certificates.  This is assumed to not happen in such a way\nthat it would cause a Denial of Service, so these versions are considered\nnot affected by this issue in such a way that it would be cause for concern,\nand the severity is therefore considered low.",
-              'diffID':        'sha256:0a24540c1e5a47e5a8116c43151cb45c985f7a65afe5d4d65127d9c6fea2ffcf',
-              'fixedVersions': [
-                '3.0.9-r0'
-              ],
-              'installedVersion': '3.0.7-r2',
-              'packageName':      'libcrypto3',
-              'purl':             'pkg:apk/alpine/libcrypto3@3.0.7-r2?arch=aarch64&distro=3.17.1',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2023/05/30/1',
-                'https://access.redhat.com/errata/RHSA-2023:6330',
-                'https://access.redhat.com/security/cve/CVE-2023-2650',
-                'https://bugzilla.redhat.com/1858038',
-                'https://bugzilla.redhat.com/2207947',
-                'https://errata.almalinux.org/9/ALSA-2023-6330.html',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=423a2bc737a908ad0c77bda470b2b59dc879936b',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=853c5e56ee0b8650c73140816bb8b91d6163422c',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=9e209944b35cf82368071f160a744b6178f9b098',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=db779b0e10b047f2585615e0b8f2acdf21f8544a',
-                'https://linux.oracle.com/cve/CVE-2023-2650.html',
-                'https://linux.oracle.com/errata/ELSA-2023-6330.html',
-                'https://lists.debian.org/debian-lts-announce/2023/06/msg00011.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-2650',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0009',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://security.netapp.com/advisory/ntap-20230703-0001/',
-                'https://security.netapp.com/advisory/ntap-20231027-0009/',
-                'https://ubuntu.com/security/notices/USN-6119-1',
-                'https://ubuntu.com/security/notices/USN-6188-1',
-                'https://ubuntu.com/security/notices/USN-6672-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-2650',
-                'https://www.debian.org/security/2023/dsa-5417',
-                'https://www.openssl.org/news/secadv/20230530.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: Possible DoS translating ASN.1 object identifiers'
-            },
-            {
-              'cve':  'CVE-2023-2975',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N'
-                },
-                'redhat': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-354',
-                'CWE-287'
-              ],
-              'description':   'Issue summary: The AES-SIV cipher implementation contains a bug that causes\nit to ignore empty associated data entries which are unauthenticated as\na consequence.\n\nImpact summary: Applications that use the AES-SIV algorithm and want to\nauthenticate empty data entries as associated data can be misled by removing,\nadding or reordering such empty entries as these are ignored by the OpenSSL\nimplementation. We are currently unaware of any such applications.\n\nThe AES-SIV algorithm allows for authentication of multiple associated\ndata entries along with the encryption. To authenticate empty data the\napplication has to call EVP_EncryptUpdate() (or EVP_CipherUpdate()) with\nNULL pointer as the output buffer and 0 as the input buffer length.\nThe AES-SIV implementation in OpenSSL just returns success for such a call\ninstead of performing the associated data authentication operation.\nThe empty data thus will not be authenticated.\n\nAs this issue does not affect non-empty associated data authentication and\nwe expect it to be rare for an application to use empty associated data\nentries this is qualified as Low severity issue.',
-              'diffID':        'sha256:0a24540c1e5a47e5a8116c43151cb45c985f7a65afe5d4d65127d9c6fea2ffcf',
-              'fixedVersions': [
-                '3.0.9-r2'
-              ],
-              'installedVersion': '3.0.7-r2',
-              'packageName':      'libcrypto3',
-              'purl':             'pkg:apk/alpine/libcrypto3@3.0.7-r2?arch=aarch64&distro=3.17.1',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2023/07/15/1',
-                'http://www.openwall.com/lists/oss-security/2023/07/19/5',
-                'https://access.redhat.com/errata/RHSA-2024:2447',
-                'https://access.redhat.com/security/cve/CVE-2023-2975',
-                'https://bugzilla.redhat.com/2223016',
-                'https://bugzilla.redhat.com/2224962',
-                'https://bugzilla.redhat.com/2227852',
-                'https://bugzilla.redhat.com/2248616',
-                'https://bugzilla.redhat.com/2257571',
-                'https://bugzilla.redhat.com/2258502',
-                'https://bugzilla.redhat.com/2259944',
-                'https://errata.almalinux.org/9/ALSA-2024-2447.html',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=00e2f5eea29994d19293ec4e8c8775ba73678598',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=6a83f0c958811f07e0d11dfc6b5a6a98edfd5bdc',
-                'https://linux.oracle.com/cve/CVE-2023-2975.html',
-                'https://linux.oracle.com/errata/ELSA-2024-2447.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-2975',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://security.netapp.com/advisory/ntap-20230725-0004/',
-                'https://ubuntu.com/security/notices/USN-6450-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-2975',
-                'https://www.openssl.org/news/secadv/20230714.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: AES-SIV cipher implementation contains a bug that causes it to ignore empty associated data entries'
-            },
-            {
-              'cve':  'CVE-2023-3446',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L'
-                },
-                'redhat': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L'
-                }
-              },
-              'cwes': [
-                'CWE-606',
-                'CWE-1333'
-              ],
-              'description':   "Issue summary: Checking excessively long DH keys or parameters may be very slow.\n\nImpact summary: Applications that use the functions DH_check(), DH_check_ex()\nor EVP_PKEY_param_check() to check a DH key or DH parameters may experience long\ndelays. Where the key or parameters that are being checked have been obtained\nfrom an untrusted source this may lead to a Denial of Service.\n\nThe function DH_check() performs various checks on DH parameters. One of those\nchecks confirms that the modulus ('p' parameter) is not too large. Trying to use\na very large modulus is slow and OpenSSL will not normally use a modulus which\nis over 10,000 bits in length.\n\nHowever the DH_check() function checks numerous aspects of the key or parameters\nthat have been supplied. Some of those checks use the supplied modulus value\neven if it has already been found to be too large.\n\nAn application that calls DH_check() and supplies a key or parameters obtained\nfrom an untrusted source could be vulernable to a Denial of Service attack.\n\nThe function DH_check() is itself called by a number of other OpenSSL functions.\nAn application calling any of those other functions may similarly be affected.\nThe other functions affected by this are DH_check_ex() and\nEVP_PKEY_param_check().\n\nAlso vulnerable are the OpenSSL dhparam and pkeyparam command line applications\nwhen using the '-check' option.\n\nThe OpenSSL SSL/TLS implementation is not affected by this issue.\nThe OpenSSL 3.0 and 3.1 FIPS providers are not affected by this issue.",
-              'diffID':        'sha256:0a24540c1e5a47e5a8116c43151cb45c985f7a65afe5d4d65127d9c6fea2ffcf',
-              'fixedVersions': [
-                '3.0.9-r3'
-              ],
-              'installedVersion': '3.0.7-r2',
-              'packageName':      'libcrypto3',
-              'purl':             'pkg:apk/alpine/libcrypto3@3.0.7-r2?arch=aarch64&distro=3.17.1',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2023/07/19/4',
-                'http://www.openwall.com/lists/oss-security/2023/07/19/5',
-                'http://www.openwall.com/lists/oss-security/2023/07/19/6',
-                'http://www.openwall.com/lists/oss-security/2023/07/31/1',
-                'http://www.openwall.com/lists/oss-security/2024/05/16/1',
-                'https://access.redhat.com/errata/RHSA-2024:2447',
-                'https://access.redhat.com/security/cve/CVE-2023-3446',
-                'https://bugzilla.redhat.com/2223016',
-                'https://bugzilla.redhat.com/2224962',
-                'https://bugzilla.redhat.com/2227852',
-                'https://bugzilla.redhat.com/2248616',
-                'https://bugzilla.redhat.com/2257571',
-                'https://bugzilla.redhat.com/2258502',
-                'https://bugzilla.redhat.com/2259944',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2224962',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2257582',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2257583',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2258677',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2258688',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2258691',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2258694',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2258700',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-36763',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-36764',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3446',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45229',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45231',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45232',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45233',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45235',
-                'https://errata.almalinux.org/9/ALSA-2024-2447.html',
-                'https://errata.rockylinux.org/RLSA-2024:2264',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=1fa20cf2f506113c761777127a38bce5068740eb',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=8780a896543a654e757db1b9396383f9d8095528',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=9a0a4d3c1e7138915563c0df4fe6a3f9377b839c',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=fc9867c1e03c22ebf56943be205202e576aabf23',
-                'https://linux.oracle.com/cve/CVE-2023-3446.html',
-                'https://linux.oracle.com/errata/ELSA-2024-2447.html',
-                'https://lists.debian.org/debian-lts-announce/2023/08/msg00019.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-3446',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://security.netapp.com/advisory/ntap-20230803-0011/',
-                'https://ubuntu.com/security/notices/USN-6435-1',
-                'https://ubuntu.com/security/notices/USN-6435-2',
-                'https://ubuntu.com/security/notices/USN-6450-1',
-                'https://ubuntu.com/security/notices/USN-6709-1',
-                'https://ubuntu.com/security/notices/USN-7018-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-3446',
-                'https://www.openssl.org/news/secadv/20230719.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: Excessive time spent checking DH keys and parameters'
-            },
-            {
-              'cve':  'CVE-2023-3817',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L'
-                },
-                'redhat': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L'
-                }
-              },
-              'cwes': [
-                'CWE-606',
-                'CWE-834'
-              ],
-              'description':   'Issue summary: Checking excessively long DH keys or parameters may be very slow.\n\nImpact summary: Applications that use the functions DH_check(), DH_check_ex()\nor EVP_PKEY_param_check() to check a DH key or DH parameters may experience long\ndelays. Where the key or parameters that are being checked have been obtained\nfrom an untrusted source this may lead to a Denial of Service.\n\nThe function DH_check() performs various checks on DH parameters. After fixing\nCVE-2023-3446 it was discovered that a large q parameter value can also trigger\nan overly long computation during some of these checks. A correct q value,\nif present, cannot be larger than the modulus p parameter, thus it is\nunnecessary to perform these checks if q is larger than p.\n\nAn application that calls DH_check() and supplies a key or parameters obtained\nfrom an untrusted source could be vulnerable to a Denial of Service attack.\n\nThe function DH_check() is itself called by a number of other OpenSSL functions.\nAn application calling any of those other functions may similarly be affected.\nThe other functions affected by this are DH_check_ex() and\nEVP_PKEY_param_check().\n\nAlso vulnerable are the OpenSSL dhparam and pkeyparam command line applications\nwhen using the "-check" option.\n\nThe OpenSSL SSL/TLS implementation is not affected by this issue.\n\nThe OpenSSL 3.0 and 3.1 FIPS providers are not affected by this issue.',
-              'diffID':        'sha256:0a24540c1e5a47e5a8116c43151cb45c985f7a65afe5d4d65127d9c6fea2ffcf',
-              'fixedVersions': [
-                '3.0.10-r0'
-              ],
-              'installedVersion': '3.0.7-r2',
-              'packageName':      'libcrypto3',
-              'purl':             'pkg:apk/alpine/libcrypto3@3.0.7-r2?arch=aarch64&distro=3.17.1',
-              'references':       [
-                'http://seclists.org/fulldisclosure/2023/Jul/43',
-                'http://www.openwall.com/lists/oss-security/2023/07/31/1',
-                'http://www.openwall.com/lists/oss-security/2023/09/22/11',
-                'http://www.openwall.com/lists/oss-security/2023/09/22/9',
-                'http://www.openwall.com/lists/oss-security/2023/11/06/2',
-                'https://access.redhat.com/errata/RHSA-2024:2447',
-                'https://access.redhat.com/security/cve/CVE-2023-3817',
-                'https://bugzilla.redhat.com/2223016',
-                'https://bugzilla.redhat.com/2224962',
-                'https://bugzilla.redhat.com/2227852',
-                'https://bugzilla.redhat.com/2248616',
-                'https://bugzilla.redhat.com/2257571',
-                'https://bugzilla.redhat.com/2258502',
-                'https://bugzilla.redhat.com/2259944',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2224962',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2227852',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2248616',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2270358',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3446',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3817',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-5678',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-2408',
-                'https://errata.almalinux.org/9/ALSA-2024-2447.html',
-                'https://errata.rockylinux.org/RLSA-2023:7877',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=6a1eb62c29db6cb5eec707f9338aee00f44e26f5',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=869ad69aadd985c7b8ca6f4e5dd0eb274c9f3644',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=9002fd07327a91f35ba6c1307e71fa6fd4409b7f',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=91ddeba0f2269b017dc06c46c993a788974b1aa5',
-                'https://linux.oracle.com/cve/CVE-2023-3817.html',
-                'https://linux.oracle.com/errata/ELSA-2024-2447.html',
-                'https://lists.debian.org/debian-lts-announce/2023/08/msg00019.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-3817',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://security.netapp.com/advisory/ntap-20230818-0014/',
-                'https://security.netapp.com/advisory/ntap-20231027-0008/',
-                'https://security.netapp.com/advisory/ntap-20240621-0006/',
-                'https://ubuntu.com/security/notices/USN-6435-1',
-                'https://ubuntu.com/security/notices/USN-6435-2',
-                'https://ubuntu.com/security/notices/USN-6450-1',
-                'https://ubuntu.com/security/notices/USN-6709-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-3817',
-                'https://www.openssl.org/news/secadv/20230731.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'OpenSSL: Excessive time spent checking DH q parameter value'
-            },
-            {
-              'cve':  'CVE-2023-5678',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L'
-                },
-                'redhat': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L'
-                }
-              },
-              'cwes': [
-                'CWE-606',
-                'CWE-754'
-              ],
-              'description':   "Issue summary: Generating excessively long X9.42 DH keys or checking\nexcessively long X9.42 DH keys or parameters may be very slow.\n\nImpact summary: Applications that use the functions DH_generate_key() to\ngenerate an X9.42 DH key may experience long delays.  Likewise, applications\nthat use DH_check_pub_key(), DH_check_pub_key_ex() or EVP_PKEY_public_check()\nto check an X9.42 DH key or X9.42 DH parameters may experience long delays.\nWhere the key or parameters that are being checked have been obtained from\nan untrusted source this may lead to a Denial of Service.\n\nWhile DH_check() performs all the necessary checks (as of CVE-2023-3817),\nDH_check_pub_key() doesn't make any of these checks, and is therefore\nvulnerable for excessively large P and Q parameters.\n\nLikewise, while DH_generate_key() performs a check for an excessively large\nP, it doesn't check for an excessively large Q.\n\nAn application that calls DH_generate_key() or DH_check_pub_key() and\nsupplies a key or parameters obtained from an untrusted source could be\nvulnerable to a Denial of Service attack.\n\nDH_generate_key() and DH_check_pub_key() are also called by a number of\nother OpenSSL functions.  An application calling any of those other\nfunctions may similarly be affected.  The other functions affected by this\nare DH_check_pub_key_ex(), EVP_PKEY_public_check(), and EVP_PKEY_generate().\n\nAlso vulnerable are the OpenSSL pkey command line application when using the\n\"-pubcheck\" option, as well as the OpenSSL genpkey command line application.\n\nThe OpenSSL SSL/TLS implementation is not affected by this issue.\n\nThe OpenSSL 3.0 and 3.1 FIPS providers are not affected by this issue.",
-              'diffID':        'sha256:0a24540c1e5a47e5a8116c43151cb45c985f7a65afe5d4d65127d9c6fea2ffcf',
-              'fixedVersions': [
-                '3.0.12-r1'
-              ],
-              'installedVersion': '3.0.7-r2',
-              'packageName':      'libcrypto3',
-              'purl':             'pkg:apk/alpine/libcrypto3@3.0.7-r2?arch=aarch64&distro=3.17.1',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2024/03/11/1',
-                'https://access.redhat.com/errata/RHSA-2024:2447',
-                'https://access.redhat.com/security/cve/CVE-2023-5678',
-                'https://bugzilla.redhat.com/2223016',
-                'https://bugzilla.redhat.com/2224962',
-                'https://bugzilla.redhat.com/2227852',
-                'https://bugzilla.redhat.com/2248616',
-                'https://bugzilla.redhat.com/2257571',
-                'https://bugzilla.redhat.com/2258502',
-                'https://bugzilla.redhat.com/2259944',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2224962',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2227852',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2248616',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2270358',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3446',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3817',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-5678',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-2408',
-                'https://errata.almalinux.org/9/ALSA-2024-2447.html',
-                'https://errata.rockylinux.org/RLSA-2023:7877',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=34efaef6c103d636ab507a0cc34dca4d3aecc055',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=710fee740904b6290fef0dd5536fbcedbc38ff0c',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=db925ae2e65d0d925adef429afc37f75bd1c2017',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=ddeb4b6c6d527e54ce9a99cba785c0f7776e54b6',
-                'https://linux.oracle.com/cve/CVE-2023-5678.html',
-                'https://linux.oracle.com/errata/ELSA-2024-2447.html',
-                'https://lists.debian.org/debian-lts-announce/2024/10/msg00033.html',
-                'https://lists.debian.org/debian-lts-announce/2024/11/msg00000.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-5678',
-                'https://security.netapp.com/advisory/ntap-20231130-0010/',
-                'https://ubuntu.com/security/notices/USN-6622-1',
-                'https://ubuntu.com/security/notices/USN-6632-1',
-                'https://ubuntu.com/security/notices/USN-6709-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-5678',
-                'https://www.openssl.org/news/secadv/20231106.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: Generating excessively long X9.42 DH keys or checking excessively long X9.42 DH keys or parameters may be very slow'
-            },
-            {
-              'cve':  'CVE-2023-6129',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '6.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-440',
-                'CWE-787'
-              ],
-              'description':   'Issue summary: The POLY1305 MAC (message authentication code) implementation\ncontains a bug that might corrupt the internal state of applications running\non PowerPC CPU based platforms if the CPU provides vector instructions.\n\nImpact summary: If an attacker can influence whether the POLY1305 MAC\nalgorithm is used, the application state might be corrupted with various\napplication dependent consequences.\n\nThe POLY1305 MAC (message authentication code) implementation in OpenSSL for\nPowerPC CPUs restores the contents of vector registers in a different order\nthan they are saved. Thus the contents of some of these vector registers\nare corrupted when returning to the caller. The vulnerable code is used only\non newer PowerPC processors supporting the PowerISA 2.07 instructions.\n\nThe consequences of this kind of internal application state corruption can\nbe various - from no consequences, if the calling application does not\ndepend on the contents of non-volatile XMM registers at all, to the worst\nconsequences, where the attacker could get complete control of the application\nprocess. However unless the compiler uses the vector registers for storing\npointers, the most likely consequence, if any, would be an incorrect result\nof some application dependent calculations or a crash leading to a denial of\nservice.\n\nThe POLY1305 MAC algorithm is most frequently used as part of the\nCHACHA20-POLY1305 AEAD (authenticated encryption with associated data)\nalgorithm. The most common usage of this AEAD cipher is with TLS protocol\nversions 1.2 and 1.3. If this cipher is enabled on the server a malicious\nclient can influence whether this AEAD cipher is used. This implies that\nTLS server applications using OpenSSL can be potentially impacted. However\nwe are currently not aware of any concrete application that would be affected\nby this issue therefore we consider this a Low severity security issue.',
-              'diffID':        'sha256:0a24540c1e5a47e5a8116c43151cb45c985f7a65afe5d4d65127d9c6fea2ffcf',
-              'fixedVersions': [
-                '3.0.12-r2'
-              ],
-              'installedVersion': '3.0.7-r2',
-              'packageName':      'libcrypto3',
-              'purl':             'pkg:apk/alpine/libcrypto3@3.0.7-r2?arch=aarch64&distro=3.17.1',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2024/03/11/1',
-                'https://access.redhat.com/errata/RHSA-2024:9088',
-                'https://access.redhat.com/security/cve/CVE-2023-6129',
-                'https://bugzilla.redhat.com/2257571',
-                'https://bugzilla.redhat.com/2258502',
-                'https://bugzilla.redhat.com/2259944',
-                'https://bugzilla.redhat.com/2284243',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2257571',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2258502',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2259944',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2284243',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-6129',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-6237',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-0727',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-1298',
-                'https://errata.almalinux.org/9/ALSA-2024-9088.html',
-                'https://errata.rockylinux.org/RLSA-2024:9088',
-                'https://github.com/openssl/openssl/commit/050d26383d4e264966fb83428e72d5d48f402d35',
-                'https://github.com/openssl/openssl/commit/5b139f95c9a47a55a0c54100f3837b1eee942b04',
-                'https://github.com/openssl/openssl/commit/f3fc5808fe9ff74042d639839610d03b8fdcc015',
-                'https://linux.oracle.com/cve/CVE-2023-6129.html',
-                'https://linux.oracle.com/errata/ELSA-2024-9088.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-6129',
-                'https://security.netapp.com/advisory/ntap-20240216-0009/',
-                'https://security.netapp.com/advisory/ntap-20240426-0008/',
-                'https://security.netapp.com/advisory/ntap-20240426-0013/',
-                'https://security.netapp.com/advisory/ntap-20240503-0011/',
-                'https://ubuntu.com/security/notices/USN-6622-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-6129',
-                'https://www.openssl.org/news/secadv/20240109.txt',
-                'https://www.openwall.com/lists/oss-security/2024/01/09/1'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: POLY1305 MAC implementation corrupts vector registers on PowerPC'
-            },
-            {
-              'cve':  'CVE-2023-6237',
-              'cvss': {
-                'redhat': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-606'
-              ],
-              'description':   "Issue summary: Checking excessively long invalid RSA public keys may take\na long time.\n\nImpact summary: Applications that use the function EVP_PKEY_public_check()\nto check RSA public keys may experience long delays. Where the key that\nis being checked has been obtained from an untrusted source this may lead\nto a Denial of Service.\n\nWhen function EVP_PKEY_public_check() is called on RSA public keys,\na computation is done to confirm that the RSA modulus, n, is composite.\nFor valid RSA keys, n is a product of two or more large primes and this\ncomputation completes quickly. However, if n is an overly large prime,\nthen this computation would take a long time.\n\nAn application that calls EVP_PKEY_public_check() and supplies an RSA key\nobtained from an untrusted source could be vulnerable to a Denial of Service\nattack.\n\nThe function EVP_PKEY_public_check() is not called from other OpenSSL\nfunctions however it is called from the OpenSSL pkey command line\napplication. For that reason that application is also vulnerable if used\nwith the '-pubin' and '-check' options on untrusted data.\n\nThe OpenSSL SSL/TLS implementation is not affected by this issue.\n\nThe OpenSSL 3.0 and 3.1 FIPS providers are affected by this issue.",
-              'diffID':        'sha256:0a24540c1e5a47e5a8116c43151cb45c985f7a65afe5d4d65127d9c6fea2ffcf',
-              'fixedVersions': [
-                '3.0.12-r3'
-              ],
-              'installedVersion': '3.0.7-r2',
-              'packageName':      'libcrypto3',
-              'purl':             'pkg:apk/alpine/libcrypto3@3.0.7-r2?arch=aarch64&distro=3.17.1',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2024/03/11/1',
-                'https://access.redhat.com/errata/RHSA-2024:9088',
-                'https://access.redhat.com/security/cve/CVE-2023-6237',
-                'https://bugzilla.redhat.com/2257571',
-                'https://bugzilla.redhat.com/2258502',
-                'https://bugzilla.redhat.com/2259944',
-                'https://bugzilla.redhat.com/2284243',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2257571',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2258502',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2259944',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2284243',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-6129',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-6237',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-0727',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-1298',
-                'https://errata.almalinux.org/9/ALSA-2024-9088.html',
-                'https://errata.rockylinux.org/RLSA-2024:9088',
-                'https://github.com/openssl/openssl/commit/0b0f7abfb37350794a4b8960fafc292cd5d1b84d',
-                'https://github.com/openssl/openssl/commit/18c02492138d1eb8b6548cb26e7b625fb2414a2a',
-                'https://github.com/openssl/openssl/commit/a830f551557d3d66a84bbb18a5b889c640c36294',
-                'https://linux.oracle.com/cve/CVE-2023-6237.html',
-                'https://linux.oracle.com/errata/ELSA-2024-9088.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-6237',
-                'https://security.netapp.com/advisory/ntap-20240531-0007/',
-                'https://ubuntu.com/security/notices/USN-6622-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-6237',
-                'https://www.openssl.org/news/secadv/20240115.txt',
-                'https://www.openwall.com/lists/oss-security/2024/01/15/2'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: Excessive time spent checking invalid RSA public keys'
-            },
-            {
-              'cve':  'CVE-2024-0727',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '5.5',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H'
-                },
-                'nvd': {
-                  'v3score':  '5.5',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '5.5',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-476'
-              ],
-              'description':   'Issue summary: Processing a maliciously formatted PKCS12 file may lead OpenSSL\nto crash leading to a potential Denial of Service attack\n\nImpact summary: Applications loading files in the PKCS12 format from untrusted\nsources might terminate abruptly.\n\nA file in PKCS12 format can contain certificates and keys and may come from an\nuntrusted source. The PKCS12 specification allows certain fields to be NULL, but\nOpenSSL does not correctly check for this case. This can lead to a NULL pointer\ndereference that results in OpenSSL crashing. If an application processes PKCS12\nfiles from an untrusted source using the OpenSSL APIs then that application will\nbe vulnerable to this issue.\n\nOpenSSL APIs that are vulnerable to this are: PKCS12_parse(),\nPKCS12_unpack_p7data(), PKCS12_unpack_p7encdata(), PKCS12_unpack_authsafes()\nand PKCS12_newpass().\n\nWe have also fixed a similar issue in SMIME_write_PKCS7(). However since this\nfunction is related to writing data we do not consider it security significant.\n\nThe FIPS modules in 3.2, 3.1 and 3.0 are not affected by this issue.',
-              'diffID':        'sha256:0a24540c1e5a47e5a8116c43151cb45c985f7a65afe5d4d65127d9c6fea2ffcf',
-              'fixedVersions': [
-                '3.0.12-r4'
-              ],
-              'installedVersion': '3.0.7-r2',
-              'packageName':      'libcrypto3',
-              'purl':             'pkg:apk/alpine/libcrypto3@3.0.7-r2?arch=aarch64&distro=3.17.1',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2024/03/11/1',
-                'https://access.redhat.com/errata/RHSA-2024:9088',
-                'https://access.redhat.com/security/cve/CVE-2024-0727',
-                'https://bugzilla.redhat.com/2257571',
-                'https://bugzilla.redhat.com/2258502',
-                'https://bugzilla.redhat.com/2259944',
-                'https://bugzilla.redhat.com/2284243',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2257571',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2258502',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2259944',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2284243',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-6129',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-6237',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-0727',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-1298',
-                'https://errata.almalinux.org/9/ALSA-2024-9088.html',
-                'https://errata.rockylinux.org/RLSA-2024:9088',
-                'https://github.com/alexcrichton/openssl-src-rs/commit/add20f73b6b42be7451af2e1044d4e0e778992b2',
-                'https://github.com/github/advisory-database/pull/3472',
-                'https://github.com/openssl/openssl/commit/09df4395b5071217b76dc7d3d2e630eb8c5a79c2',
-                'https://github.com/openssl/openssl/commit/775acfdbd0c6af9ac855f34969cdab0c0c90844a',
-                'https://github.com/openssl/openssl/commit/d135eeab8a5dbf72b3da5240bab9ddb7678dbd2c',
-                'https://github.com/openssl/openssl/pull/23362',
-                'https://github.com/pyca/cryptography/commit/3519591d255d4506fbcd0d04037d45271903c64d',
-                'https://github.openssl.org/openssl/extended-releases/commit/03b3941d60c4bce58fab69a0c22377ab439bc0e8',
-                'https://github.openssl.org/openssl/extended-releases/commit/aebaa5883e31122b404e450732dc833dc9dee539',
-                'https://linux.oracle.com/cve/CVE-2024-0727.html',
-                'https://linux.oracle.com/errata/ELSA-2024-9088.html',
-                'https://lists.debian.org/debian-lts-announce/2024/10/msg00033.html',
-                'https://lists.debian.org/debian-lts-announce/2024/11/msg00000.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2024-0727',
-                'https://security.netapp.com/advisory/ntap-20240208-0006',
-                'https://security.netapp.com/advisory/ntap-20240208-0006/',
-                'https://ubuntu.com/security/notices/USN-6622-1',
-                'https://ubuntu.com/security/notices/USN-6632-1',
-                'https://ubuntu.com/security/notices/USN-6709-1',
-                'https://ubuntu.com/security/notices/USN-7018-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2024-0727',
-                'https://www.openssl.org/news/secadv/20240125.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: denial of service via null dereference'
-            },
-            {
-              'cve':  'CVE-2024-4603',
-              'cvss': {
-                'redhat': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L'
-                }
-              },
-              'cwes': [
-                'CWE-606',
-                'CWE-834'
-              ],
-              'description':   'Issue summary: Checking excessively long DSA keys or parameters may be very\nslow.\n\nImpact summary: Applications that use the functions EVP_PKEY_param_check()\nor EVP_PKEY_public_check() to check a DSA public key or DSA parameters may\nexperience long delays. Where the key or parameters that are being checked\nhave been obtained from an untrusted source this may lead to a Denial of\nService.\n\nThe functions EVP_PKEY_param_check() or EVP_PKEY_public_check() perform\nvarious checks on DSA parameters. Some of those computations take a long time\nif the modulus (`p` parameter) is too large.\n\nTrying to use a very large modulus is slow and OpenSSL will not allow using\npublic keys with a modulus which is over 10,000 bits in length for signature\nverification. However the key and parameter check functions do not limit\nthe modulus size when performing the checks.\n\nAn application that calls EVP_PKEY_param_check() or EVP_PKEY_public_check()\nand supplies a key or parameters obtained from an untrusted source could be\nvulnerable to a Denial of Service attack.\n\nThese functions are not called by OpenSSL itself on untrusted DSA keys so\nonly applications that directly call these functions may be vulnerable.\n\nAlso vulnerable are the OpenSSL pkey and pkeyparam command line applications\nwhen using the `-check` option.\n\nThe OpenSSL SSL/TLS implementation is not affected by this issue.\n\nThe OpenSSL 3.0 and 3.1 FIPS providers are affected by this issue.',
-              'diffID':        'sha256:0a24540c1e5a47e5a8116c43151cb45c985f7a65afe5d4d65127d9c6fea2ffcf',
-              'fixedVersions': [
-                '3.0.13-r0'
-              ],
-              'installedVersion': '3.0.7-r2',
-              'packageName':      'libcrypto3',
-              'purl':             'pkg:apk/alpine/libcrypto3@3.0.7-r2?arch=aarch64&distro=3.17.1',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2024/05/16/2',
-                'https://access.redhat.com/errata/RHSA-2024:9333',
-                'https://access.redhat.com/security/cve/CVE-2024-4603',
-                'https://bugzilla.redhat.com/2274020',
-                'https://bugzilla.redhat.com/2281029',
-                'https://bugzilla.redhat.com/2283757',
-                'https://bugzilla.redhat.com/2294581',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2274020',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2281029',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2283757',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2294581',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-2511',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-4603',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-4741',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-5535',
-                'https://errata.almalinux.org/9/ALSA-2024-9333.html',
-                'https://errata.rockylinux.org/RLSA-2024:9333',
-                'https://github.com/openssl/openssl/commit/3559e868e58005d15c6013a0c1fd832e51c73397',
-                'https://github.com/openssl/openssl/commit/53ea06486d296b890d565fb971b2764fcd826e7e',
-                'https://github.com/openssl/openssl/commit/9c39b3858091c152f52513c066ff2c5a47969f0d',
-                'https://github.com/openssl/openssl/commit/da343d0605c826ef197aceedc67e8e04f065f740',
-                'https://linux.oracle.com/cve/CVE-2024-4603.html',
-                'https://linux.oracle.com/errata/ELSA-2024-9333.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2024-4603',
-                'https://security.netapp.com/advisory/ntap-20240621-0001/',
-                'https://ubuntu.com/security/notices/USN-6937-1',
-                'https://www.cve.org/CVERecord?id=CVE-2024-4603',
-                'https://www.openssl.org/news/secadv/20240516.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: Excessive time spent checking DSA keys and parameters'
-            },
-            {
-              'cve':  'CVE-2024-4741',
-              'cvss': {
-                'redhat': {
-                  'v3score':  '5.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   'Issue summary: Calling the OpenSSL API function SSL_free_buffers may cause\nmemory to be accessed that was previously freed in some situations\n\nImpact summary: A use after free can have a range of potential consequences such\nas the corruption of valid data, crashes or execution of arbitrary code.\nHowever, only applications that directly call the SSL_free_buffers function are\naffected by this issue. Applications that do not call this function are not\nvulnerable. Our investigations indicate that this function is rarely used by\napplications.\n\nThe SSL_free_buffers function is used to free the internal OpenSSL buffer used\nwhen processing an incoming record from the network. The call is only expected\nto succeed if the buffer is not currently in use. However, two scenarios have\nbeen identified where the buffer is freed even when still in use.\n\nThe first scenario occurs where a record header has been received from the\nnetwork and processed by OpenSSL, but the full record body has not yet arrived.\nIn this case calling SSL_free_buffers will succeed even though a record has only\nbeen partially processed and the buffer is still in use.\n\nThe second scenario occurs where a full record containing application data has\nbeen received and processed by OpenSSL but the application has only read part of\nthis data. Again a call to SSL_free_buffers will succeed even though the buffer\nis still in use.\n\nWhile these scenarios could occur accidentally during normal operation a\nmalicious attacker could attempt to engineer a stituation where this occurs.\nWe are not aware of this issue being actively exploited.\n\nThe FIPS modules in 3.3, 3.2, 3.1 and 3.0 are not affected by this issue.',
-              'diffID':        'sha256:0a24540c1e5a47e5a8116c43151cb45c985f7a65afe5d4d65127d9c6fea2ffcf',
-              'fixedVersions': [
-                '3.0.14-r0'
-              ],
-              'installedVersion': '3.0.7-r2',
-              'packageName':      'libcrypto3',
-              'purl':             'pkg:apk/alpine/libcrypto3@3.0.7-r2?arch=aarch64&distro=3.17.1',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2024:9333',
-                'https://access.redhat.com/security/cve/CVE-2024-4741',
-                'https://bugzilla.redhat.com/2274020',
-                'https://bugzilla.redhat.com/2281029',
-                'https://bugzilla.redhat.com/2283757',
-                'https://bugzilla.redhat.com/2294581',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2274020',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2281029',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2283757',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2294581',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-2511',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-4603',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-4741',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-5535',
-                'https://errata.almalinux.org/9/ALSA-2024-9333.html',
-                'https://errata.rockylinux.org/RLSA-2024:9333',
-                'https://github.com/openssl/openssl/commit/704f725b96aa373ee45ecfb23f6abfe8be8d9177',
-                'https://github.com/openssl/openssl/commit/b3f0eb0a295f58f16ba43ba99dad70d4ee5c437d',
-                'https://github.com/openssl/openssl/commit/c88c3de51020c37e8706bf7a682a162593053aac',
-                'https://github.com/openssl/openssl/commit/e5093133c35ca82874ad83697af76f4b0f7e3bd8',
-                'https://github.openssl.org/openssl/extended-releases/commit/f7a045f3143fc6da2ee66bf52d8df04829590dd4',
-                'https://linux.oracle.com/cve/CVE-2024-4741.html',
-                'https://linux.oracle.com/errata/ELSA-2024-9333.html',
-                'https://lists.debian.org/debian-lts-announce/2024/10/msg00033.html',
-                'https://lists.debian.org/debian-lts-announce/2024/11/msg00000.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2024-4741',
-                'https://security.netapp.com/advisory/ntap-20240621-0004/',
-                'https://ubuntu.com/security/notices/USN-6937-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2024-4741',
-                'https://www.openssl.org/news/secadv/20240528.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: Use After Free with SSL_free_buffers'
-            },
-            {
-              'cve':  'CVE-2024-5535',
-              'cvss': {
-                'redhat': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-125'
-              ],
-              'description':   'Issue summary: Calling the OpenSSL API function SSL_select_next_proto with an\nempty supported client protocols buffer may cause a crash or memory contents to\nbe sent to the peer.\n\nImpact summary: A buffer overread can have a range of potential consequences\nsuch as unexpected application beahviour or a crash. In particular this issue\ncould result in up to 255 bytes of arbitrary private data from memory being sent\nto the peer leading to a loss of confidentiality. However, only applications\nthat directly call the SSL_select_next_proto function with a 0 length list of\nsupported client protocols are affected by this issue. This would normally never\nbe a valid scenario and is typically not under attacker control but may occur by\naccident in the case of a configuration or programming error in the calling\napplication.\n\nThe OpenSSL API function SSL_select_next_proto is typically used by TLS\napplications that support ALPN (Application Layer Protocol Negotiation) or NPN\n(Next Protocol Negotiation). NPN is older, was never standardised and\nis deprecated in favour of ALPN. We believe that ALPN is significantly more\nwidely deployed than NPN. The SSL_select_next_proto function accepts a list of\nprotocols from the server and a list of protocols from the client and returns\nthe first protocol that appears in the server list that also appears in the\nclient list. In the case of no overlap between the two lists it returns the\nfirst item in the client list. In either case it will signal whether an overlap\nbetween the two lists was found. In the case where SSL_select_next_proto is\ncalled with a zero length client list it fails to notice this condition and\nreturns the memory immediately following the client list pointer (and reports\nthat there was no overlap in the lists).\n\nThis function is typically called from a server side application callback for\nALPN or a client side application callback for NPN. In the case of ALPN the list\nof protocols supplied by the client is guaranteed by libssl to never be zero in\nlength. The list of server protocols comes from the application and should never\nnormally be expected to be of zero length. In this case if the\nSSL_select_next_proto function has been called as expected (with the list\nsupplied by the client passed in the client/client_len parameters), then the\napplication will not be vulnerable to this issue. If the application has\naccidentally been configured with a zero length server list, and has\naccidentally passed that zero length server list in the client/client_len\nparameters, and has additionally failed to correctly handle a "no overlap"\nresponse (which would normally result in a handshake failure in ALPN) then it\nwill be vulnerable to this problem.\n\nIn the case of NPN, the protocol permits the client to opportunistically select\na protocol when there is no overlap. OpenSSL returns the first client protocol\nin the no overlap case in support of this. The list of client protocols comes\nfrom the application and should never normally be expected to be of zero length.\nHowever if the SSL_select_next_proto function is accidentally called with a\nclient_len of 0 then an invalid memory pointer will be returned instead. If the\napplication uses this output as the opportunistic protocol then the loss of\nconfidentiality will occur.\n\nThis issue has been assessed as Low severity because applications are most\nlikely to be vulnerable if they are using NPN instead of ALPN - but NPN is not\nwidely used. It also requires an application configuration or programming error.\nFinally, this issue would not typically be under attacker control making active\nexploitation unlikely.\n\nThe FIPS modules in 3.3, 3.2, 3.1 and 3.0 are not affected by this issue.\n\nDue to the low severity of this issue we are not issuing new releases of\nOpenSSL at this time. The fix will be included in the next releases when they\nbecome available.',
-              'diffID':        'sha256:0a24540c1e5a47e5a8116c43151cb45c985f7a65afe5d4d65127d9c6fea2ffcf',
-              'fixedVersions': [
-                '3.0.14-r0'
-              ],
-              'installedVersion': '3.0.7-r2',
-              'packageName':      'libcrypto3',
-              'purl':             'pkg:apk/alpine/libcrypto3@3.0.7-r2?arch=aarch64&distro=3.17.1',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2024/06/27/1',
-                'http://www.openwall.com/lists/oss-security/2024/06/28/4',
-                'http://www.openwall.com/lists/oss-security/2024/08/15/1',
-                'https://access.redhat.com/errata/RHSA-2025:1671',
-                'https://access.redhat.com/security/cve/CVE-2024-5535',
-                'https://bugzilla.redhat.com/2294581',
-                'https://bugzilla.redhat.com/2294676',
-                'https://bugzilla.redhat.com/2301888',
-                'https://bugzilla.redhat.com/2318857',
-                'https://bugzilla.redhat.com/2318858',
-                'https://bugzilla.redhat.com/2318870',
-                'https://bugzilla.redhat.com/2318873',
-                'https://bugzilla.redhat.com/2318874',
-                'https://bugzilla.redhat.com/2318876',
-                'https://bugzilla.redhat.com/2318882',
-                'https://bugzilla.redhat.com/2318883',
-                'https://bugzilla.redhat.com/2318884',
-                'https://bugzilla.redhat.com/2318885',
-                'https://bugzilla.redhat.com/2318886',
-                'https://bugzilla.redhat.com/2318897',
-                'https://bugzilla.redhat.com/2318900',
-                'https://bugzilla.redhat.com/2318905',
-                'https://bugzilla.redhat.com/2318914',
-                'https://bugzilla.redhat.com/2318922',
-                'https://bugzilla.redhat.com/2318923',
-                'https://bugzilla.redhat.com/2318925',
-                'https://bugzilla.redhat.com/2318926',
-                'https://bugzilla.redhat.com/2318927',
-                'https://bugzilla.redhat.com/2331191',
-                'https://bugzilla.redhat.com/2339218',
-                'https://bugzilla.redhat.com/2339220',
-                'https://bugzilla.redhat.com/2339221',
-                'https://bugzilla.redhat.com/2339226',
-                'https://bugzilla.redhat.com/2339231',
-                'https://bugzilla.redhat.com/2339236',
-                'https://bugzilla.redhat.com/2339238',
-                'https://bugzilla.redhat.com/2339243',
-                'https://bugzilla.redhat.com/2339247',
-                'https://bugzilla.redhat.com/2339252',
-                'https://bugzilla.redhat.com/2339259',
-                'https://bugzilla.redhat.com/2339266',
-                'https://bugzilla.redhat.com/2339270',
-                'https://bugzilla.redhat.com/2339271',
-                'https://bugzilla.redhat.com/2339275',
-                'https://bugzilla.redhat.com/2339277',
-                'https://bugzilla.redhat.com/2339281',
-                'https://bugzilla.redhat.com/2339284',
-                'https://bugzilla.redhat.com/2339291',
-                'https://bugzilla.redhat.com/2339293',
-                'https://bugzilla.redhat.com/2339295',
-                'https://bugzilla.redhat.com/2339299',
-                'https://bugzilla.redhat.com/2339300',
-                'https://bugzilla.redhat.com/2339304',
-                'https://bugzilla.redhat.com/2339305',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2274020',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2281029',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2283757',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2294581',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-2511',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-4603',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-4741',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-5535',
-                'https://errata.almalinux.org/9/ALSA-2025-1671.html',
-                'https://errata.rockylinux.org/RLSA-2024:9333',
-                'https://github.com/openssl/openssl/commit/4ada436a1946cbb24db5ab4ca082b69c1bc10f37',
-                'https://github.com/openssl/openssl/commit/99fb785a5f85315b95288921a321a935ea29a51e',
-                'https://github.com/openssl/openssl/commit/cf6f91f6121f4db167405db2f0de410a456f260c',
-                'https://github.com/openssl/openssl/commit/e86ac436f0bd54d4517745483e2315650fae7b2c',
-                'https://github.openssl.org/openssl/extended-releases/commit/9947251413065a05189a63c9b7a6c1d4e224c21c',
-                'https://github.openssl.org/openssl/extended-releases/commit/b78ec0824da857223486660177d3b1f255c65d87',
-                'https://linux.oracle.com/cve/CVE-2024-5535.html',
-                'https://linux.oracle.com/errata/ELSA-2025-1673.html',
-                'https://lists.debian.org/debian-lts-announce/2024/10/msg00033.html',
-                'https://lists.debian.org/debian-lts-announce/2024/11/msg00000.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2024-5535',
-                'https://openssl.org/news/secadv/20240627.txt',
-                'https://security.netapp.com/advisory/ntap-20240712-0005/',
-                'https://security.netapp.com/advisory/ntap-20241025-0006/',
-                'https://security.netapp.com/advisory/ntap-20241025-0010/',
-                'https://ubuntu.com/security/notices/USN-6937-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2024-5535',
-                'https://www.openssl.org/news/secadv/20240627.txt',
-                'https://www.oracle.com/security-alerts/cpuoct2024.html#AppendixMSQL'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: SSL_select_next_proto buffer overread'
-            },
-            {
-              'cve':  'CVE-2024-2511',
-              'cvss': {
-                'redhat': {
-                  'v3score':  '3.7',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L'
-                }
-              },
-              'cwes': [
-                'CWE-1325'
-              ],
-              'description':   'Issue summary: Some non-default TLS server configurations can cause unbounded\nmemory growth when processing TLSv1.3 sessions\n\nImpact summary: An attacker may exploit certain server configurations to trigger\nunbounded memory growth that would lead to a Denial of Service\n\nThis problem can occur in TLSv1.3 if the non-default SSL_OP_NO_TICKET option is\nbeing used (but not if early_data support is also configured and the default\nanti-replay protection is in use). In this case, under certain conditions, the\nsession cache can get into an incorrect state and it will fail to flush properly\nas it fills. The session cache will continue to grow in an unbounded manner. A\nmalicious client could deliberately create the scenario for this failure to\nforce a Denial of Service. It may also happen by accident in normal operation.\n\nThis issue only affects TLS servers supporting TLSv1.3. It does not affect TLS\nclients.\n\nThe FIPS modules in 3.2, 3.1 and 3.0 are not affected by this issue. OpenSSL\n1.0.2 is also not affected by this issue.',
-              'diffID':        'sha256:0a24540c1e5a47e5a8116c43151cb45c985f7a65afe5d4d65127d9c6fea2ffcf',
-              'fixedVersions': [
-                '3.0.12-r5'
-              ],
-              'installedVersion': '3.0.7-r2',
-              'packageName':      'libcrypto3',
-              'purl':             'pkg:apk/alpine/libcrypto3@3.0.7-r2?arch=aarch64&distro=3.17.1',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2024/04/08/5',
-                'https://access.redhat.com/errata/RHSA-2024:9333',
-                'https://access.redhat.com/security/cve/CVE-2024-2511',
-                'https://bugzilla.redhat.com/2274020',
-                'https://bugzilla.redhat.com/2281029',
-                'https://bugzilla.redhat.com/2283757',
-                'https://bugzilla.redhat.com/2294581',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2274020',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2281029',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2283757',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2294581',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-2511',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-4603',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-4741',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-5535',
-                'https://errata.almalinux.org/9/ALSA-2024-9333.html',
-                'https://errata.rockylinux.org/RLSA-2024:9333',
-                'https://github.com/openssl/openssl/commit/7e4d731b1c07201ad9374c1cd9ac5263bdf35bce',
-                'https://github.com/openssl/openssl/commit/b52867a9f618bb955bed2a3ce3db4d4f97ed8e5d',
-                'https://github.com/openssl/openssl/commit/e9d7083e241670332e0443da0f0d4ffb52829f08',
-                'https://github.openssl.org/openssl/extended-releases/commit/5f8d25770ae6437db119dfc951e207271a326640',
-                'https://linux.oracle.com/cve/CVE-2024-2511.html',
-                'https://linux.oracle.com/errata/ELSA-2024-9333.html',
-                'https://lists.debian.org/debian-lts-announce/2024/10/msg00033.html',
-                'https://lists.debian.org/debian-lts-announce/2024/11/msg00000.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2024-2511',
-                'https://security.netapp.com/advisory/ntap-20240503-0013/',
-                'https://ubuntu.com/security/notices/USN-6937-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2024-2511',
-                'https://www.openssl.org/news/secadv/20240408.txt',
-                'https://www.openssl.org/news/vulnerabilities.html'
-              ],
-              'severity':   'LOW',
-              'suppressed': false,
-              'title':      'openssl: Unbounded memory growth with session handling in TLSv1.3'
-            },
-            {
-              'cve':  'CVE-2024-9143',
-              'cvss': {
-                'redhat': {
-                  'v3score':  '3.7',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L'
-                }
-              },
-              'cwes': [
-                'CWE-125',
-                'CWE-787'
-              ],
-              'description':   "Issue summary: Use of the low-level GF(2^m) elliptic curve APIs with untrusted\nexplicit values for the field polynomial can lead to out-of-bounds memory reads\nor writes.\n\nImpact summary: Out of bound memory writes can lead to an application crash or\neven a possibility of a remote code execution, however, in all the protocols\ninvolving Elliptic Curve Cryptography that we're aware of, either only \"named\ncurves\" are supported, or, if explicit curve parameters are supported, they\nspecify an X9.62 encoding of binary (GF(2^m)) curves that can't represent\nproblematic input values. Thus the likelihood of existence of a vulnerable\napplication is low.\n\nIn particular, the X9.62 encoding is used for ECC keys in X.509 certificates,\nso problematic inputs cannot occur in the context of processing X.509\ncertificates.  Any problematic use-cases would have to be using an \"exotic\"\ncurve encoding.\n\nThe affected APIs include: EC_GROUP_new_curve_GF2m(), EC_GROUP_new_from_params(),\nand various supporting BN_GF2m_*() functions.\n\nApplications working with \"exotic\" explicit binary (GF(2^m)) curve parameters,\nthat make it possible to represent invalid field polynomials with a zero\nconstant term, via the above or similar APIs, may terminate abruptly as a\nresult of reading or writing outside of array bounds.  Remote code execution\ncannot easily be ruled out.\n\nThe FIPS modules in 3.3, 3.2, 3.1 and 3.0 are not affected by this issue.",
-              'diffID':        'sha256:0a24540c1e5a47e5a8116c43151cb45c985f7a65afe5d4d65127d9c6fea2ffcf',
-              'fixedVersions': [
-                '3.0.15-r1'
-              ],
-              'installedVersion': '3.0.7-r2',
-              'packageName':      'libcrypto3',
-              'purl':             'pkg:apk/alpine/libcrypto3@3.0.7-r2?arch=aarch64&distro=3.17.1',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2024/10/16/1',
-                'http://www.openwall.com/lists/oss-security/2024/10/23/1',
-                'http://www.openwall.com/lists/oss-security/2024/10/24/1',
-                'https://access.redhat.com/security/cve/CVE-2024-9143',
-                'https://github.com/openssl/openssl/commit/72ae83ad214d2eef262461365a1975707f862712',
-                'https://github.com/openssl/openssl/commit/bc7e04d7c8d509fb78fc0e285aa948fb0da04700',
-                'https://github.com/openssl/openssl/commit/c0d3e4d32d2805f49bec30547f225bc4d092e1f4',
-                'https://github.com/openssl/openssl/commit/fdf6723362ca51bd883295efe206cb5b1cfa5154',
-                'https://github.openssl.org/openssl/extended-releases/commit/8efc0cbaa8ebba8e116f7b81a876a4123594d86a',
-                'https://github.openssl.org/openssl/extended-releases/commit/9d576994cec2b7aa37a91740ea7e680810957e41',
-                'https://lists.debian.org/debian-lts-announce/2024/10/msg00033.html',
-                'https://lists.debian.org/debian-lts-announce/2024/11/msg00000.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2024-9143',
-                'https://openssl-library.org/news/secadv/20241016.txt',
-                'https://security.netapp.com/advisory/ntap-20241101-0001/',
-                'https://ubuntu.com/security/notices/USN-7264-1',
-                'https://ubuntu.com/security/notices/USN-7278-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2024-9143'
-              ],
-              'severity':   'LOW',
-              'suppressed': false,
-              'title':      'openssl: Low-level invalid GF(2^m) parameters lead to OOB memory access'
-            },
-            {
-              'cve':  'CVE-2022-4450',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'nvd': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-415'
-              ],
-              'description':   'The function PEM_read_bio_ex() reads a PEM file from a BIO and parses and\ndecodes the "name" (e.g. "CERTIFICATE"), any header data and the payload data.\nIf the function succeeds then the "name_out", "header" and "data" arguments are\npopulated with pointers to buffers containing the relevant decoded data. The\ncaller is responsible for freeing those buffers. It is possible to construct a\nPEM file that results in 0 bytes of payload data. In this case PEM_read_bio_ex()\nwill return a failure code but will populate the header argument with a pointer\nto a buffer that has already been freed. If the caller also frees this buffer\nthen a double free will occur. This will most likely lead to a crash. This\ncould be exploited by an attacker who has the ability to supply malicious PEM\nfiles for parsing to achieve a denial of service attack.\n\nThe functions PEM_read_bio() and PEM_read() are simple wrappers around\nPEM_read_bio_ex() and therefore these functions are also directly affected.\n\nThese functions are also called indirectly by a number of other OpenSSL\nfunctions including PEM_X509_INFO_read_bio_ex() and\nSSL_CTX_use_serverinfo_file() which are also vulnerable. Some OpenSSL internal\nuses of these functions are not vulnerable because the caller does not free the\nheader argument if PEM_read_bio_ex() returns a failure code. These locations\ninclude the PEM_read_bio_TYPE() functions as well as the decoders introduced in\nOpenSSL 3.0.\n\nThe OpenSSL asn1parse command line application is also impacted by this issue.',
-              'diffID':        'sha256:0a24540c1e5a47e5a8116c43151cb45c985f7a65afe5d4d65127d9c6fea2ffcf',
-              'fixedVersions': [
-                '3.0.8-r0'
-              ],
-              'installedVersion': '3.0.7-r2',
-              'packageName':      'libssl3',
-              'purl':             'pkg:apk/alpine/libssl3@3.0.7-r2?arch=aarch64&distro=3.17.1',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2023:2165',
-                'https://access.redhat.com/security/cve/CVE-2022-4450',
-                'https://bugzilla.redhat.com/1960321',
-                'https://bugzilla.redhat.com/2164440',
-                'https://bugzilla.redhat.com/2164487',
-                'https://bugzilla.redhat.com/2164492',
-                'https://bugzilla.redhat.com/2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144000',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144003',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144006',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144008',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144010',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144012',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144015',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144017',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144019',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2145170',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2158412',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164440',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164487',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164488',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164492',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164497',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164499',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164500',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4203',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4304',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4450',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0215',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0216',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0217',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0286',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0401',
-                'https://errata.almalinux.org/9/ALSA-2023-2165.html',
-                'https://errata.rockylinux.org/RLSA-2023:0946',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=63bcf189be73a9cc1264059bed6f57974be74a83',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=bbcf509bd046b34cca19c766bbddc31683d0858b',
-                'https://linux.oracle.com/cve/CVE-2022-4450.html',
-                'https://linux.oracle.com/errata/ELSA-2023-32791.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2022-4450',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0003',
-                'https://rustsec.org/advisories/RUSTSEC-2023-0010.html',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://ubuntu.com/security/notices/USN-5844-1',
-                'https://ubuntu.com/security/notices/USN-6564-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2022-4450',
-                'https://www.openssl.org/news/secadv/20230207.txt'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: double free after calling PEM_read_bio_ex'
-            },
-            {
-              'cve':  'CVE-2023-0215',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'nvd': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   'The public API function BIO_new_NDEF is a helper function used for streaming\nASN.1 data via a BIO. It is primarily used internally to OpenSSL to support the\nSMIME, CMS and PKCS7 streaming capabilities, but may also be called directly by\nend user applications.\n\nThe function receives a BIO from the caller, prepends a new BIO_f_asn1 filter\nBIO onto the front of it to form a BIO chain, and then returns the new head of\nthe BIO chain to the caller. Under certain conditions, for example if a CMS\nrecipient public key is invalid, the new filter BIO is freed and the function\nreturns a NULL result indicating a failure. However, in this case, the BIO chain\nis not properly cleaned up and the BIO passed by the caller still retains\ninternal pointers to the previously freed filter BIO. If the caller then goes on\nto call BIO_pop() on the BIO then a use-after-free will occur. This will most\nlikely result in a crash.\n\n\n\nThis scenario occurs directly in the internal function B64_write_ASN1() which\nmay cause BIO_new_NDEF() to be called and will subsequently call BIO_pop() on\nthe BIO. This internal function is in turn called by the public API functions\nPEM_write_bio_ASN1_stream, PEM_write_bio_CMS_stream, PEM_write_bio_PKCS7_stream,\nSMIME_write_ASN1, SMIME_write_CMS and SMIME_write_PKCS7.\n\nOther public API functions that may be impacted by this include\ni2d_ASN1_bio_stream, BIO_new_CMS, BIO_new_PKCS7, i2d_CMS_bio_stream and\ni2d_PKCS7_bio_stream.\n\nThe OpenSSL cms and smime command line applications are similarly affected.',
-              'diffID':        'sha256:0a24540c1e5a47e5a8116c43151cb45c985f7a65afe5d4d65127d9c6fea2ffcf',
-              'fixedVersions': [
-                '3.0.8-r0'
-              ],
-              'installedVersion': '3.0.7-r2',
-              'packageName':      'libssl3',
-              'purl':             'pkg:apk/alpine/libssl3@3.0.7-r2?arch=aarch64&distro=3.17.1',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2023:2165',
-                'https://access.redhat.com/security/cve/CVE-2023-0215',
-                'https://bugzilla.redhat.com/1960321',
-                'https://bugzilla.redhat.com/2164440',
-                'https://bugzilla.redhat.com/2164487',
-                'https://bugzilla.redhat.com/2164492',
-                'https://bugzilla.redhat.com/2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144000',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144003',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144006',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144008',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144010',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144012',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144015',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144017',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144019',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2145170',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2158412',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164440',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164487',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164488',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164492',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164497',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164499',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164500',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4203',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4304',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4450',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0215',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0216',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0217',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0286',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0401',
-                'https://errata.almalinux.org/9/ALSA-2023-2165.html',
-                'https://errata.rockylinux.org/RLSA-2023:0946',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=8818064ce3c3c0f1b740a5aaba2a987e75bfbafd',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=9816136fe31d92ace4037d5da5257f763aeeb4eb',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=c3829dd8825c654652201e16f8a0a0c46ee3f344',
-                'https://linux.oracle.com/cve/CVE-2023-0215.html',
-                'https://linux.oracle.com/errata/ELSA-2023-32791.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-0215',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0003',
-                'https://rustsec.org/advisories/RUSTSEC-2023-0009.html',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://security.netapp.com/advisory/ntap-20230427-0007',
-                'https://security.netapp.com/advisory/ntap-20230427-0007/',
-                'https://security.netapp.com/advisory/ntap-20230427-0009',
-                'https://security.netapp.com/advisory/ntap-20230427-0009/',
-                'https://security.netapp.com/advisory/ntap-20240621-0006',
-                'https://security.netapp.com/advisory/ntap-20240621-0006/',
-                'https://ubuntu.com/security/notices/USN-5844-1',
-                'https://ubuntu.com/security/notices/USN-5845-1',
-                'https://ubuntu.com/security/notices/USN-5845-2',
-                'https://ubuntu.com/security/notices/USN-6564-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-0215',
-                'https://www.openssl.org/news/secadv/20230207.txt'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: use-after-free following BIO_new_NDEF'
-            },
-            {
-              'cve':  'CVE-2023-0216',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'nvd': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-476'
-              ],
-              'description':   'An invalid pointer dereference on read can be triggered when an\napplication tries to load malformed PKCS7 data with the\nd2i_PKCS7(), d2i_PKCS7_bio() or d2i_PKCS7_fp() functions.\n\nThe result of the dereference is an application crash which could\nlead to a denial of service attack. The TLS implementation in OpenSSL\ndoes not call this function however third party applications might\ncall these functions on untrusted data.',
-              'diffID':        'sha256:0a24540c1e5a47e5a8116c43151cb45c985f7a65afe5d4d65127d9c6fea2ffcf',
-              'fixedVersions': [
-                '3.0.8-r0'
-              ],
-              'installedVersion': '3.0.7-r2',
-              'packageName':      'libssl3',
-              'purl':             'pkg:apk/alpine/libssl3@3.0.7-r2?arch=aarch64&distro=3.17.1',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2023:0946',
-                'https://access.redhat.com/security/cve/CVE-2023-0216',
-                'https://bugzilla.redhat.com/2164440',
-                'https://bugzilla.redhat.com/2164487',
-                'https://bugzilla.redhat.com/2164488',
-                'https://bugzilla.redhat.com/2164492',
-                'https://bugzilla.redhat.com/2164494',
-                'https://bugzilla.redhat.com/2164497',
-                'https://bugzilla.redhat.com/2164499',
-                'https://bugzilla.redhat.com/2164500',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144000',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144003',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144006',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144008',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144010',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144012',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144015',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144017',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144019',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2145170',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2158412',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164440',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164487',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164488',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164492',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164497',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164499',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164500',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4203',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4304',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4450',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0215',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0216',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0217',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0286',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0401',
-                'https://errata.almalinux.org/9/ALSA-2023-0946.html',
-                'https://errata.rockylinux.org/RLSA-2023:0946',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=934a04f0e775309cadbef0aa6b9692e1b12a76c6',
-                'https://linux.oracle.com/cve/CVE-2023-0216.html',
-                'https://linux.oracle.com/errata/ELSA-2023-12152.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-0216',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0003',
-                'https://rustsec.org/advisories/RUSTSEC-2023-0011.html',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://ubuntu.com/security/notices/USN-5844-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-0216',
-                'https://www.openssl.org/news/secadv/20230207.txt'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: invalid pointer dereference in d2i_PKCS7 functions'
-            },
-            {
-              'cve':  'CVE-2023-0217',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'nvd': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-476'
-              ],
-              'description':   'An invalid pointer dereference on read can be triggered when an\napplication tries to check a malformed DSA public key by the\nEVP_PKEY_public_check() function. This will most likely lead\nto an application crash. This function can be called on public\nkeys supplied from untrusted sources which could allow an attacker\nto cause a denial of service attack.\n\nThe TLS implementation in OpenSSL does not call this function\nbut applications might call the function if there are additional\nsecurity requirements imposed by standards such as FIPS 140-3.',
-              'diffID':        'sha256:0a24540c1e5a47e5a8116c43151cb45c985f7a65afe5d4d65127d9c6fea2ffcf',
-              'fixedVersions': [
-                '3.0.8-r0'
-              ],
-              'installedVersion': '3.0.7-r2',
-              'packageName':      'libssl3',
-              'purl':             'pkg:apk/alpine/libssl3@3.0.7-r2?arch=aarch64&distro=3.17.1',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2023:0946',
-                'https://access.redhat.com/security/cve/CVE-2023-0217',
-                'https://bugzilla.redhat.com/2164440',
-                'https://bugzilla.redhat.com/2164487',
-                'https://bugzilla.redhat.com/2164488',
-                'https://bugzilla.redhat.com/2164492',
-                'https://bugzilla.redhat.com/2164494',
-                'https://bugzilla.redhat.com/2164497',
-                'https://bugzilla.redhat.com/2164499',
-                'https://bugzilla.redhat.com/2164500',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144000',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144003',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144006',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144008',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144010',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144012',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144015',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144017',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144019',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2145170',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2158412',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164440',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164487',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164488',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164492',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164497',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164499',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164500',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4203',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4304',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4450',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0215',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0216',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0217',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0286',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0401',
-                'https://errata.almalinux.org/9/ALSA-2023-0946.html',
-                'https://errata.rockylinux.org/RLSA-2023:0946',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=23985bac83fd50c8e29431009302b5442f985096',
-                'https://linux.oracle.com/cve/CVE-2023-0217.html',
-                'https://linux.oracle.com/errata/ELSA-2023-12152.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-0217',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0003',
-                'https://rustsec.org/advisories/RUSTSEC-2023-0012.html',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://ubuntu.com/security/notices/USN-5844-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-0217',
-                'https://www.openssl.org/news/secadv/20230207.txt'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: NULL dereference validating DSA public key'
-            },
-            {
-              'cve':  'CVE-2023-0286',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '7.4',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H'
-                },
-                'nvd': {
-                  'v3score':  '7.4',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.4',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-843'
-              ],
-              'description':   'There is a type confusion vulnerability relating to X.400 address processing\ninside an X.509 GeneralName. X.400 addresses were parsed as an ASN1_STRING but\nthe public structure definition for GENERAL_NAME incorrectly specified the type\nof the x400Address field as ASN1_TYPE. This field is subsequently interpreted by\nthe OpenSSL function GENERAL_NAME_cmp as an ASN1_TYPE rather than an\nASN1_STRING.\n\nWhen CRL checking is enabled (i.e. the application sets the\nX509_V_FLAG_CRL_CHECK flag), this vulnerability may allow an attacker to pass\narbitrary pointers to a memcmp call, enabling them to read memory contents or\nenact a denial of service. In most cases, the attack requires the attacker to\nprovide both the certificate chain and CRL, neither of which need to have a\nvalid signature. If the attacker only controls one of these inputs, the other\ninput must already contain an X.400 address as a CRL distribution point, which\nis uncommon. As such, this vulnerability is most likely to only affect\napplications which have implemented their own functionality for retrieving CRLs\nover a network.',
-              'diffID':        'sha256:0a24540c1e5a47e5a8116c43151cb45c985f7a65afe5d4d65127d9c6fea2ffcf',
-              'fixedVersions': [
-                '3.0.8-r0'
-              ],
-              'installedVersion': '3.0.7-r2',
-              'packageName':      'libssl3',
-              'purl':             'pkg:apk/alpine/libssl3@3.0.7-r2?arch=aarch64&distro=3.17.1',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2025:7937',
-                'https://access.redhat.com/security/cve/CVE-2023-0286',
-                'https://access.redhat.com/security/cve/cve-2023-0286',
-                'https://bugzilla.redhat.com/2164440',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144000',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144003',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144006',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144008',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144010',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144012',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144015',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144017',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144019',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2145170',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2158412',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164440',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164487',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164488',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164492',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164497',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164499',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164500',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4203',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4304',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4450',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0215',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0216',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0217',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0286',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0401',
-                'https://errata.almalinux.org/9/ALSA-2025-7937.html',
-                'https://errata.rockylinux.org/RLSA-2023:0946',
-                'https://ftp.openbsd.org/pub/OpenBSD/LibreSSL/libressl-3.6.2-relnotes.txt',
-                'https://ftp.openbsd.org/pub/OpenBSD/patches/7.2/common/018_x509.patch.sig',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=2c6c9d439b484e1ba9830d8454a34fa4f80fdfe9',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=2f7530077e0ef79d98718138716bc51ca0cad658',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=fd2af07dc083a350c959147097003a14a5e8ac4d',
-                'https://github.com/pyca/cryptography',
-                'https://github.com/pyca/cryptography/security/advisories/GHSA-x4qr-2fvf-3mr5',
-                'https://linux.oracle.com/cve/CVE-2023-0286.html',
-                'https://linux.oracle.com/errata/ELSA-2025-7937.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-0286',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0003',
-                'https://rustsec.org/advisories/RUSTSEC-2023-0006.html',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://ubuntu.com/security/notices/USN-5844-1',
-                'https://ubuntu.com/security/notices/USN-5845-1',
-                'https://ubuntu.com/security/notices/USN-5845-2',
-                'https://ubuntu.com/security/notices/USN-6564-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-0286',
-                'https://www.openssl.org/news/secadv/20230207.txt'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: X.400 address type confusion in X.509 GeneralName'
-            },
-            {
-              'cve':  'CVE-2023-0401',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'nvd': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-476'
-              ],
-              'description':   'A NULL pointer can be dereferenced when signatures are being\nverified on PKCS7 signed or signedAndEnveloped data. In case the hash\nalgorithm used for the signature is known to the OpenSSL library but\nthe implementation of the hash algorithm is not available the digest\ninitialization will fail. There is a missing check for the return\nvalue from the initialization function which later leads to invalid\nusage of the digest API most likely leading to a crash.\n\nThe unavailability of an algorithm can be caused by using FIPS\nenabled configuration of providers or more commonly by not loading\nthe legacy provider.\n\nPKCS7 data is processed by the SMIME library calls and also by the\ntime stamp (TS) library calls. The TLS implementation in OpenSSL does\nnot call these functions however third party applications would be\naffected if they call these functions to verify signatures on untrusted\ndata.',
-              'diffID':        'sha256:0a24540c1e5a47e5a8116c43151cb45c985f7a65afe5d4d65127d9c6fea2ffcf',
-              'fixedVersions': [
-                '3.0.8-r0'
-              ],
-              'installedVersion': '3.0.7-r2',
-              'packageName':      'libssl3',
-              'purl':             'pkg:apk/alpine/libssl3@3.0.7-r2?arch=aarch64&distro=3.17.1',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2023:0946',
-                'https://access.redhat.com/security/cve/CVE-2023-0401',
-                'https://bugzilla.redhat.com/2164440',
-                'https://bugzilla.redhat.com/2164487',
-                'https://bugzilla.redhat.com/2164488',
-                'https://bugzilla.redhat.com/2164492',
-                'https://bugzilla.redhat.com/2164494',
-                'https://bugzilla.redhat.com/2164497',
-                'https://bugzilla.redhat.com/2164499',
-                'https://bugzilla.redhat.com/2164500',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144000',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144003',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144006',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144008',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144010',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144012',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144015',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144017',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144019',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2145170',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2158412',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164440',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164487',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164488',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164492',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164497',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164499',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164500',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4203',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4304',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4450',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0215',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0216',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0217',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0286',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0401',
-                'https://errata.almalinux.org/9/ALSA-2023-0946.html',
-                'https://errata.rockylinux.org/RLSA-2023:0946',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=d3b6dfd70db844c4499bec6ad6601623a565e674',
-                'https://github.com/alexcrichton/openssl-src-rs',
-                'https://linux.oracle.com/cve/CVE-2023-0401.html',
-                'https://linux.oracle.com/errata/ELSA-2023-12152.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-0401',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0003',
-                'https://rustsec.org/advisories/RUSTSEC-2023-0013.html',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://ubuntu.com/security/notices/USN-5844-1',
-                'https://ubuntu.com/security/notices/USN-6564-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-0401',
-                'https://www.openssl.org/news/secadv/20230207.txt'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: NULL dereference during PKCS7 data verification'
-            },
-            {
-              'cve':  'CVE-2023-0464',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-295'
-              ],
-              'description':   "A security vulnerability has been identified in all supported versions\n\nof OpenSSL related to the verification of X.509 certificate chains\nthat include policy constraints.  Attackers may be able to exploit this\nvulnerability by creating a malicious certificate chain that triggers\nexponential use of computational resources, leading to a denial-of-service\n(DoS) attack on affected systems.\n\nPolicy processing is disabled by default but can be enabled by passing\nthe `-policy' argument to the command line utilities or by calling the\n`X509_VERIFY_PARAM_set1_policies()' function.",
-              'diffID':        'sha256:0a24540c1e5a47e5a8116c43151cb45c985f7a65afe5d4d65127d9c6fea2ffcf',
-              'fixedVersions': [
-                '3.0.8-r1'
-              ],
-              'installedVersion': '3.0.7-r2',
-              'packageName':      'libssl3',
-              'purl':             'pkg:apk/alpine/libssl3@3.0.7-r2?arch=aarch64&distro=3.17.1',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2023:3722',
-                'https://access.redhat.com/security/cve/CVE-2023-0464',
-                'https://bugzilla.redhat.com/2181082',
-                'https://bugzilla.redhat.com/2182561',
-                'https://bugzilla.redhat.com/2182565',
-                'https://bugzilla.redhat.com/2188461',
-                'https://bugzilla.redhat.com/2207947',
-                'https://errata.almalinux.org/9/ALSA-2023-3722.html',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=2017771e2db3e2b96f89bbe8766c3209f6a99545',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=2dcd4f1e3115f38cefa43e3efbe9b801c27e642e',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=879f7080d7e141f415c79eaa3a8ac4a3dad0348b',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=959c59c7a0164117e7f8366466a32bb1f8d77ff1',
-                'https://linux.oracle.com/cve/CVE-2023-0464.html',
-                'https://linux.oracle.com/errata/ELSA-2023-3722.html',
-                'https://lists.debian.org/debian-lts-announce/2023/06/msg00011.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-0464',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://security.netapp.com/advisory/ntap-20230406-0006/',
-                'https://security.netapp.com/advisory/ntap-20240621-0006/',
-                'https://ubuntu.com/security/notices/USN-6039-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.couchbase.com/alerts/',
-                'https://www.cve.org/CVERecord?id=CVE-2023-0464',
-                'https://www.debian.org/security/2023/dsa-5417',
-                'https://www.openssl.org/news/secadv/20230322.txt'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: Denial of service by excessive resource usage in verifying X509 policy constraints'
-            },
-            {
-              'cve':  'CVE-2023-5363',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N'
-                },
-                'redhat': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-684'
-              ],
-              'description':   "Issue summary: A bug has been identified in the processing of key and\ninitialisation vector (IV) lengths.  This can lead to potential truncation\nor overruns during the initialisation of some symmetric ciphers.\n\nImpact summary: A truncation in the IV can result in non-uniqueness,\nwhich could result in loss of confidentiality for some cipher modes.\n\nWhen calling EVP_EncryptInit_ex2(), EVP_DecryptInit_ex2() or\nEVP_CipherInit_ex2() the provided OSSL_PARAM array is processed after\nthe key and IV have been established.  Any alterations to the key length,\nvia the \"keylen\" parameter or the IV length, via the \"ivlen\" parameter,\nwithin the OSSL_PARAM array will not take effect as intended, potentially\ncausing truncation or overreading of these values.  The following ciphers\nand cipher modes are impacted: RC2, RC4, RC5, CCM, GCM and OCB.\n\nFor the CCM, GCM and OCB cipher modes, truncation of the IV can result in\nloss of confidentiality.  For example, when following NIST's SP 800-38D\nsection 8.2.1 guidance for constructing a deterministic IV for AES in\nGCM mode, truncation of the counter portion could lead to IV reuse.\n\nBoth truncations and overruns of the key and overruns of the IV will\nproduce incorrect results and could, in some cases, trigger a memory\nexception.  However, these issues are not currently assessed as security\ncritical.\n\nChanging the key and/or IV lengths is not considered to be a common operation\nand the vulnerable API was recently introduced. Furthermore it is likely that\napplication developers will have spotted this problem during testing since\ndecryption would fail unless both peers in the communication were similarly\nvulnerable. For these reasons we expect the probability of an application being\nvulnerable to this to be quite low. However if an application is vulnerable then\nthis issue is considered very serious. For these reasons we have assessed this\nissue as Moderate severity overall.\n\nThe OpenSSL SSL/TLS implementation is not affected by this issue.\n\nThe OpenSSL 3.0 and 3.1 FIPS providers are not affected by this because\nthe issue lies outside of the FIPS provider boundary.\n\nOpenSSL 3.1 and 3.0 are vulnerable to this issue.",
-              'diffID':        'sha256:0a24540c1e5a47e5a8116c43151cb45c985f7a65afe5d4d65127d9c6fea2ffcf',
-              'fixedVersions': [
-                '3.0.12-r0'
-              ],
-              'installedVersion': '3.0.7-r2',
-              'packageName':      'libssl3',
-              'purl':             'pkg:apk/alpine/libssl3@3.0.7-r2?arch=aarch64&distro=3.17.1',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2023/10/24/1',
-                'https://access.redhat.com/errata/RHSA-2024:0310',
-                'https://access.redhat.com/security/cve/CVE-2023-5363',
-                'https://bugzilla.redhat.com/2243839',
-                'https://errata.almalinux.org/9/ALSA-2024-0310.html',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=0df40630850fb2740e6be6890bb905d3fc623b2d',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=5f69f5c65e483928c4b28ed16af6e5742929f1ee',
-                'https://linux.oracle.com/cve/CVE-2023-5363.html',
-                'https://linux.oracle.com/errata/ELSA-2024-12093.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-5363',
-                'https://security.netapp.com/advisory/ntap-20231027-0010/',
-                'https://security.netapp.com/advisory/ntap-20240201-0003/',
-                'https://security.netapp.com/advisory/ntap-20240201-0004/',
-                'https://security.netapp.com/advisory/ntap-20241108-0002/',
-                'https://ubuntu.com/security/notices/USN-6450-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-5363',
-                'https://www.debian.org/security/2023/dsa-5532',
-                'https://www.openssl.org/news/secadv/20231024.txt'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: Incorrect cipher key and IV length processing'
-            },
-            {
-              'cve':  'CVE-2024-6119',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-843'
-              ],
-              'description':   "Issue summary: Applications performing certificate name checks (e.g., TLS\nclients checking server certificates) may attempt to read an invalid memory\naddress resulting in abnormal termination of the application process.\n\nImpact summary: Abnormal termination of an application can a cause a denial of\nservice.\n\nApplications performing certificate name checks (e.g., TLS clients checking\nserver certificates) may attempt to read an invalid memory address when\ncomparing the expected name with an `otherName` subject alternative name of an\nX.509 certificate. This may result in an exception that terminates the\napplication program.\n\nNote that basic certificate chain validation (signatures, dates, ...) is not\naffected, the denial of service can occur only when the application also\nspecifies an expected DNS name, Email address or IP address.\n\nTLS servers rarely solicit client certificates, and even when they do, they\ngenerally don't perform a name check against a reference identifier (expected\nidentity), but rather extract the presented identity after checking the\ncertificate chain.  So TLS servers are generally not affected and the severity\nof the issue is Moderate.\n\nThe FIPS modules in 3.3, 3.2, 3.1 and 3.0 are not affected by this issue.",
-              'diffID':        'sha256:0a24540c1e5a47e5a8116c43151cb45c985f7a65afe5d4d65127d9c6fea2ffcf',
-              'fixedVersions': [
-                '3.0.15-r0'
-              ],
-              'installedVersion': '3.0.7-r2',
-              'packageName':      'libssl3',
-              'purl':             'pkg:apk/alpine/libssl3@3.0.7-r2?arch=aarch64&distro=3.17.1',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2024/09/03/4',
-                'https://access.redhat.com/errata/RHSA-2024:8935',
-                'https://access.redhat.com/security/cve/CVE-2024-6119',
-                'https://bugzilla.redhat.com/2306158',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2306158',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-6119',
-                'https://errata.almalinux.org/9/ALSA-2024-8935.html',
-                'https://errata.rockylinux.org/RLSA-2024:6783',
-                'https://github.com/openssl/openssl/commit/05f360d9e849a1b277db628f1f13083a7f8dd04f',
-                'https://github.com/openssl/openssl/commit/06d1dc3fa96a2ba5a3e22735a033012aadc9f0d6',
-                'https://github.com/openssl/openssl/commit/621f3729831b05ee828a3203eddb621d014ff2b2',
-                'https://github.com/openssl/openssl/commit/7dfcee2cd2a63b2c64b9b4b0850be64cb695b0a0',
-                'https://github.com/openssl/openssl/security/advisories/GHSA-5qrj-vq78-58fj',
-                'https://linux.oracle.com/cve/CVE-2024-6119.html',
-                'https://linux.oracle.com/errata/ELSA-2024-8935.html',
-                'https://lists.freebsd.org/archives/freebsd-security/2024-September/000303.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2024-6119',
-                'https://openssl-library.org/news/secadv/20240903.txt',
-                'https://security.netapp.com/advisory/ntap-20240912-0001/',
-                'https://ubuntu.com/security/notices/USN-6986-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2024-6119'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: Possible denial of service in X.509 name checks'
-            },
-            {
-              'cve':  'CVE-2022-4203',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '9.1',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H'
-                },
-                'nvd': {
-                  'v3score':  '4.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '4.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-125'
-              ],
-              'description':   'A read buffer overrun can be triggered in X.509 certificate verification,\nspecifically in name constraint checking. Note that this occurs\nafter certificate chain signature verification and requires either a\nCA to have signed the malicious certificate or for the application to\ncontinue certificate verification despite failure to construct a path\nto a trusted issuer.\n\nThe read buffer overrun might result in a crash which could lead to\na denial of service attack. In theory it could also result in the disclosure\nof private memory contents (such as private keys, or sensitive plaintext)\nalthough we are not aware of any working exploit leading to memory\ncontents disclosure as of the time of release of this advisory.\n\nIn a TLS client, this can be triggered by connecting to a malicious\nserver. In a TLS server, this can be triggered if the server requests\nclient authentication and a malicious client connects.',
-              'diffID':        'sha256:0a24540c1e5a47e5a8116c43151cb45c985f7a65afe5d4d65127d9c6fea2ffcf',
-              'fixedVersions': [
-                '3.0.8-r0'
-              ],
-              'installedVersion': '3.0.7-r2',
-              'packageName':      'libssl3',
-              'purl':             'pkg:apk/alpine/libssl3@3.0.7-r2?arch=aarch64&distro=3.17.1',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2023:0946',
-                'https://access.redhat.com/security/cve/CVE-2022-4203',
-                'https://bugzilla.redhat.com/2164440',
-                'https://bugzilla.redhat.com/2164487',
-                'https://bugzilla.redhat.com/2164488',
-                'https://bugzilla.redhat.com/2164492',
-                'https://bugzilla.redhat.com/2164494',
-                'https://bugzilla.redhat.com/2164497',
-                'https://bugzilla.redhat.com/2164499',
-                'https://bugzilla.redhat.com/2164500',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144000',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144003',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144006',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144008',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144010',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144012',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144015',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144017',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144019',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2145170',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2158412',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164440',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164487',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164488',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164492',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164497',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164499',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164500',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4203',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4304',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4450',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0215',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0216',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0217',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0286',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0401',
-                'https://errata.almalinux.org/9/ALSA-2023-0946.html',
-                'https://errata.rockylinux.org/RLSA-2023:0946',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=c927a3492698c254637da836762f9b1f86cffabc',
-                'https://linux.oracle.com/cve/CVE-2022-4203.html',
-                'https://linux.oracle.com/errata/ELSA-2023-12152.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2022-4203',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0003',
-                'https://rustsec.org/advisories/RUSTSEC-2023-0008.html',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://ubuntu.com/security/notices/USN-5844-1',
-                'https://www.cve.org/CVERecord?id=CVE-2022-4203',
-                'https://www.openssl.org/news/secadv/20230207.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: read buffer overflow in X.509 certificate verification'
-            },
-            {
-              'cve':  'CVE-2022-4304',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N'
-                },
-                'nvd': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N'
-                },
-                'redhat': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-203'
-              ],
-              'description':   'A timing based side channel exists in the OpenSSL RSA Decryption implementation\nwhich could be sufficient to recover a plaintext across a network in a\nBleichenbacher style attack. To achieve a successful decryption an attacker\nwould have to be able to send a very large number of trial messages for\ndecryption. The vulnerability affects all RSA padding modes: PKCS#1 v1.5,\nRSA-OEAP and RSASVE.\n\nFor example, in a TLS connection, RSA is commonly used by a client to send an\nencrypted pre-master secret to the server. An attacker that had observed a\ngenuine connection between a client and a server could use this flaw to send\ntrial messages to the server and record the time taken to process them. After a\nsufficiently large number of messages the attacker could recover the pre-master\nsecret used for the original connection and thus be able to decrypt the\napplication data sent over that connection.',
-              'diffID':        'sha256:0a24540c1e5a47e5a8116c43151cb45c985f7a65afe5d4d65127d9c6fea2ffcf',
-              'fixedVersions': [
-                '3.0.8-r0'
-              ],
-              'installedVersion': '3.0.7-r2',
-              'packageName':      'libssl3',
-              'purl':             'pkg:apk/alpine/libssl3@3.0.7-r2?arch=aarch64&distro=3.17.1',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2023:2165',
-                'https://access.redhat.com/security/cve/CVE-2022-4304',
-                'https://bugzilla.redhat.com/1960321',
-                'https://bugzilla.redhat.com/2164440',
-                'https://bugzilla.redhat.com/2164487',
-                'https://bugzilla.redhat.com/2164492',
-                'https://bugzilla.redhat.com/2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144000',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144003',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144006',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144008',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144010',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144012',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144015',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144017',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144019',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2145170',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2158412',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164440',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164487',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164488',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164492',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164497',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164499',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164500',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4203',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4304',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4450',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0215',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0216',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0217',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0286',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0401',
-                'https://errata.almalinux.org/9/ALSA-2023-2165.html',
-                'https://errata.rockylinux.org/RLSA-2023:0946',
-                'https://linux.oracle.com/cve/CVE-2022-4304.html',
-                'https://linux.oracle.com/errata/ELSA-2023-32791.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2022-4304',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0003',
-                'https://rustsec.org/advisories/RUSTSEC-2023-0007.html',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://ubuntu.com/security/notices/USN-5844-1',
-                'https://ubuntu.com/security/notices/USN-6564-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2022-4304',
-                'https://www.openssl.org/news/secadv/20230207.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: timing attack in RSA Decryption implementation'
-            },
-            {
-              'cve':  'CVE-2023-0465',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N'
-                },
-                'redhat': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-295'
-              ],
-              'description':   "Applications that use a non-default option when verifying certificates may be\nvulnerable to an attack from a malicious CA to circumvent certain checks.\n\nInvalid certificate policies in leaf certificates are silently ignored by\nOpenSSL and other certificate policy checks are skipped for that certificate.\nA malicious CA could use this to deliberately assert invalid certificate policies\nin order to circumvent policy checking on the certificate altogether.\n\nPolicy processing is disabled by default but can be enabled by passing\nthe `-policy' argument to the command line utilities or by calling the\n`X509_VERIFY_PARAM_set1_policies()' function.",
-              'diffID':        'sha256:0a24540c1e5a47e5a8116c43151cb45c985f7a65afe5d4d65127d9c6fea2ffcf',
-              'fixedVersions': [
-                '3.0.8-r2'
-              ],
-              'installedVersion': '3.0.7-r2',
-              'packageName':      'libssl3',
-              'purl':             'pkg:apk/alpine/libssl3@3.0.7-r2?arch=aarch64&distro=3.17.1',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2023:3722',
-                'https://access.redhat.com/security/cve/CVE-2023-0465',
-                'https://bugzilla.redhat.com/2181082',
-                'https://bugzilla.redhat.com/2182561',
-                'https://bugzilla.redhat.com/2182565',
-                'https://bugzilla.redhat.com/2188461',
-                'https://bugzilla.redhat.com/2207947',
-                'https://errata.almalinux.org/9/ALSA-2023-3722.html',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=10325176f3d3e98c6e2b3bf5ab1e3b334de6947a',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=1dd43e0709fece299b15208f36cc7c76209ba0bb',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=b013765abfa80036dc779dd0e50602c57bb3bf95',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=facfb1ab745646e97a1920977ae4a9965ea61d5c',
-                'https://linux.oracle.com/cve/CVE-2023-0465.html',
-                'https://linux.oracle.com/errata/ELSA-2023-3722.html',
-                'https://lists.debian.org/debian-lts-announce/2023/06/msg00011.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-0465',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://security.netapp.com/advisory/ntap-20230414-0001/',
-                'https://ubuntu.com/security/notices/USN-6039-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-0465',
-                'https://www.debian.org/security/2023/dsa-5417',
-                'https://www.openssl.org/news/secadv/20230328.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: Invalid certificate policies in leaf certificates are silently ignored'
-            },
-            {
-              'cve':  'CVE-2023-0466',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N'
-                },
-                'redhat': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-295'
-              ],
-              'description':   'The function X509_VERIFY_PARAM_add0_policy() is documented to\nimplicitly enable the certificate policy check when doing certificate\nverification. However the implementation of the function does not\nenable the check which allows certificates with invalid or incorrect\npolicies to pass the certificate verification.\n\nAs suddenly enabling the policy check could break existing deployments it was\ndecided to keep the existing behavior of the X509_VERIFY_PARAM_add0_policy()\nfunction.\n\nInstead the applications that require OpenSSL to perform certificate\npolicy check need to use X509_VERIFY_PARAM_set1_policies() or explicitly\nenable the policy check by calling X509_VERIFY_PARAM_set_flags() with\nthe X509_V_FLAG_POLICY_CHECK flag argument.\n\nCertificate policy checks are disabled by default in OpenSSL and are not\ncommonly used by applications.',
-              'diffID':        'sha256:0a24540c1e5a47e5a8116c43151cb45c985f7a65afe5d4d65127d9c6fea2ffcf',
-              'fixedVersions': [
-                '3.0.8-r3'
-              ],
-              'installedVersion': '3.0.7-r2',
-              'packageName':      'libssl3',
-              'purl':             'pkg:apk/alpine/libssl3@3.0.7-r2?arch=aarch64&distro=3.17.1',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2023/09/28/4',
-                'https://access.redhat.com/errata/RHSA-2023:3722',
-                'https://access.redhat.com/security/cve/CVE-2023-0466',
-                'https://bugzilla.redhat.com/2181082',
-                'https://bugzilla.redhat.com/2182561',
-                'https://bugzilla.redhat.com/2182565',
-                'https://bugzilla.redhat.com/2188461',
-                'https://bugzilla.redhat.com/2207947',
-                'https://errata.almalinux.org/9/ALSA-2023-3722.html',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=0d16b7e99aafc0b4a6d729eec65a411a7e025f0a',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=51e8a84ce742db0f6c70510d0159dad8f7825908',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=73398dea26de9899fb4baa94098ad0a61f435c72',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=fc814a30fc4f0bc54fcea7d9a7462f5457aab061',
-                'https://linux.oracle.com/cve/CVE-2023-0466.html',
-                'https://linux.oracle.com/errata/ELSA-2023-3722.html',
-                'https://lists.debian.org/debian-lts-announce/2023/06/msg00011.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-0466',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://security.netapp.com/advisory/ntap-20230414-0001/',
-                'https://ubuntu.com/security/notices/USN-6039-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-0466',
-                'https://www.debian.org/security/2023/dsa-5417',
-                'https://www.openssl.org/news/secadv/20230328.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: Certificate policy check not enabled'
-            },
-            {
-              'cve':  'CVE-2023-1255',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '5.1',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-125'
-              ],
-              'description':   'Issue summary: The AES-XTS cipher decryption implementation for 64 bit ARM\nplatform contains a bug that could cause it to read past the input buffer,\nleading to a crash.\n\nImpact summary: Applications that use the AES-XTS algorithm on the 64 bit ARM\nplatform can crash in rare circumstances. The AES-XTS algorithm is usually\nused for disk encryption.\n\nThe AES-XTS cipher decryption implementation for 64 bit ARM platform will read\npast the end of the ciphertext buffer if the ciphertext size is 4 mod 5 in 16\nbyte blocks, e.g. 144 bytes or 1024 bytes. If the memory after the ciphertext\nbuffer is unmapped, this will trigger a crash which results in a denial of\nservice.\n\nIf an attacker can control the size and location of the ciphertext buffer\nbeing decrypted by an application using AES-XTS on 64 bit ARM, the\napplication is affected. This is fairly unlikely making this issue\na Low severity one.',
-              'diffID':        'sha256:0a24540c1e5a47e5a8116c43151cb45c985f7a65afe5d4d65127d9c6fea2ffcf',
-              'fixedVersions': [
-                '3.0.8-r4'
-              ],
-              'installedVersion': '3.0.7-r2',
-              'packageName':      'libssl3',
-              'purl':             'pkg:apk/alpine/libssl3@3.0.7-r2?arch=aarch64&distro=3.17.1',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2023:3722',
-                'https://access.redhat.com/security/cve/CVE-2023-1255',
-                'https://bugzilla.redhat.com/2181082',
-                'https://bugzilla.redhat.com/2182561',
-                'https://bugzilla.redhat.com/2182565',
-                'https://bugzilla.redhat.com/2188461',
-                'https://bugzilla.redhat.com/2207947',
-                'https://errata.almalinux.org/9/ALSA-2023-3722.html',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=02ac9c9420275868472f33b01def01218742b8bb',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=bc2f61ad70971869b242fc1cb445b98bad50074a',
-                'https://linux.oracle.com/cve/CVE-2023-1255.html',
-                'https://linux.oracle.com/errata/ELSA-2023-3722.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-1255',
-                'https://security.netapp.com/advisory/ntap-20230908-0006/',
-                'https://ubuntu.com/security/notices/USN-6119-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-1255',
-                'https://www.openssl.org/news/secadv/20230419.txt',
-                'https://www.openssl.org/news/secadv/20230420.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: Input buffer over-read in AES-XTS implementation on 64 bit ARM'
-            },
-            {
-              'cve':  'CVE-2023-2650',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '6.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-770'
-              ],
-              'description':   "Issue summary: Processing some specially crafted ASN.1 object identifiers or\ndata containing them may be very slow.\n\nImpact summary: Applications that use OBJ_obj2txt() directly, or use any of\nthe OpenSSL subsystems OCSP, PKCS7/SMIME, CMS, CMP/CRMF or TS with no message\nsize limit may experience notable to very long delays when processing those\nmessages, which may lead to a Denial of Service.\n\nAn OBJECT IDENTIFIER is composed of a series of numbers - sub-identifiers -\nmost of which have no size limit.  OBJ_obj2txt() may be used to translate\nan ASN.1 OBJECT IDENTIFIER given in DER encoding form (using the OpenSSL\ntype ASN1_OBJECT) to its canonical numeric text form, which are the\nsub-identifiers of the OBJECT IDENTIFIER in decimal form, separated by\nperiods.\n\nWhen one of the sub-identifiers in the OBJECT IDENTIFIER is very large\n(these are sizes that are seen as absurdly large, taking up tens or hundreds\nof KiBs), the translation to a decimal number in text may take a very long\ntime.  The time complexity is O(n^2) with 'n' being the size of the\nsub-identifiers in bytes (*).\n\nWith OpenSSL 3.0, support to fetch cryptographic algorithms using names /\nidentifiers in string form was introduced.  This includes using OBJECT\nIDENTIFIERs in canonical numeric text form as identifiers for fetching\nalgorithms.\n\nSuch OBJECT IDENTIFIERs may be received through the ASN.1 structure\nAlgorithmIdentifier, which is commonly used in multiple protocols to specify\nwhat cryptographic algorithm should be used to sign or verify, encrypt or\ndecrypt, or digest passed data.\n\nApplications that call OBJ_obj2txt() directly with untrusted data are\naffected, with any version of OpenSSL.  If the use is for the mere purpose\nof display, the severity is considered low.\n\nIn OpenSSL 3.0 and newer, this affects the subsystems OCSP, PKCS7/SMIME,\nCMS, CMP/CRMF or TS.  It also impacts anything that processes X.509\ncertificates, including simple things like verifying its signature.\n\nThe impact on TLS is relatively low, because all versions of OpenSSL have a\n100KiB limit on the peer's certificate chain.  Additionally, this only\nimpacts clients, or servers that have explicitly enabled client\nauthentication.\n\nIn OpenSSL 1.1.1 and 1.0.2, this only affects displaying diverse objects,\nsuch as X.509 certificates.  This is assumed to not happen in such a way\nthat it would cause a Denial of Service, so these versions are considered\nnot affected by this issue in such a way that it would be cause for concern,\nand the severity is therefore considered low.",
-              'diffID':        'sha256:0a24540c1e5a47e5a8116c43151cb45c985f7a65afe5d4d65127d9c6fea2ffcf',
-              'fixedVersions': [
-                '3.0.9-r0'
-              ],
-              'installedVersion': '3.0.7-r2',
-              'packageName':      'libssl3',
-              'purl':             'pkg:apk/alpine/libssl3@3.0.7-r2?arch=aarch64&distro=3.17.1',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2023/05/30/1',
-                'https://access.redhat.com/errata/RHSA-2023:6330',
-                'https://access.redhat.com/security/cve/CVE-2023-2650',
-                'https://bugzilla.redhat.com/1858038',
-                'https://bugzilla.redhat.com/2207947',
-                'https://errata.almalinux.org/9/ALSA-2023-6330.html',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=423a2bc737a908ad0c77bda470b2b59dc879936b',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=853c5e56ee0b8650c73140816bb8b91d6163422c',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=9e209944b35cf82368071f160a744b6178f9b098',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=db779b0e10b047f2585615e0b8f2acdf21f8544a',
-                'https://linux.oracle.com/cve/CVE-2023-2650.html',
-                'https://linux.oracle.com/errata/ELSA-2023-6330.html',
-                'https://lists.debian.org/debian-lts-announce/2023/06/msg00011.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-2650',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0009',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://security.netapp.com/advisory/ntap-20230703-0001/',
-                'https://security.netapp.com/advisory/ntap-20231027-0009/',
-                'https://ubuntu.com/security/notices/USN-6119-1',
-                'https://ubuntu.com/security/notices/USN-6188-1',
-                'https://ubuntu.com/security/notices/USN-6672-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-2650',
-                'https://www.debian.org/security/2023/dsa-5417',
-                'https://www.openssl.org/news/secadv/20230530.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: Possible DoS translating ASN.1 object identifiers'
-            },
-            {
-              'cve':  'CVE-2023-2975',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N'
-                },
-                'redhat': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-354',
-                'CWE-287'
-              ],
-              'description':   'Issue summary: The AES-SIV cipher implementation contains a bug that causes\nit to ignore empty associated data entries which are unauthenticated as\na consequence.\n\nImpact summary: Applications that use the AES-SIV algorithm and want to\nauthenticate empty data entries as associated data can be misled by removing,\nadding or reordering such empty entries as these are ignored by the OpenSSL\nimplementation. We are currently unaware of any such applications.\n\nThe AES-SIV algorithm allows for authentication of multiple associated\ndata entries along with the encryption. To authenticate empty data the\napplication has to call EVP_EncryptUpdate() (or EVP_CipherUpdate()) with\nNULL pointer as the output buffer and 0 as the input buffer length.\nThe AES-SIV implementation in OpenSSL just returns success for such a call\ninstead of performing the associated data authentication operation.\nThe empty data thus will not be authenticated.\n\nAs this issue does not affect non-empty associated data authentication and\nwe expect it to be rare for an application to use empty associated data\nentries this is qualified as Low severity issue.',
-              'diffID':        'sha256:0a24540c1e5a47e5a8116c43151cb45c985f7a65afe5d4d65127d9c6fea2ffcf',
-              'fixedVersions': [
-                '3.0.9-r2'
-              ],
-              'installedVersion': '3.0.7-r2',
-              'packageName':      'libssl3',
-              'purl':             'pkg:apk/alpine/libssl3@3.0.7-r2?arch=aarch64&distro=3.17.1',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2023/07/15/1',
-                'http://www.openwall.com/lists/oss-security/2023/07/19/5',
-                'https://access.redhat.com/errata/RHSA-2024:2447',
-                'https://access.redhat.com/security/cve/CVE-2023-2975',
-                'https://bugzilla.redhat.com/2223016',
-                'https://bugzilla.redhat.com/2224962',
-                'https://bugzilla.redhat.com/2227852',
-                'https://bugzilla.redhat.com/2248616',
-                'https://bugzilla.redhat.com/2257571',
-                'https://bugzilla.redhat.com/2258502',
-                'https://bugzilla.redhat.com/2259944',
-                'https://errata.almalinux.org/9/ALSA-2024-2447.html',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=00e2f5eea29994d19293ec4e8c8775ba73678598',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=6a83f0c958811f07e0d11dfc6b5a6a98edfd5bdc',
-                'https://linux.oracle.com/cve/CVE-2023-2975.html',
-                'https://linux.oracle.com/errata/ELSA-2024-2447.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-2975',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://security.netapp.com/advisory/ntap-20230725-0004/',
-                'https://ubuntu.com/security/notices/USN-6450-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-2975',
-                'https://www.openssl.org/news/secadv/20230714.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: AES-SIV cipher implementation contains a bug that causes it to ignore empty associated data entries'
-            },
-            {
-              'cve':  'CVE-2023-3446',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L'
-                },
-                'redhat': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L'
-                }
-              },
-              'cwes': [
-                'CWE-606',
-                'CWE-1333'
-              ],
-              'description':   "Issue summary: Checking excessively long DH keys or parameters may be very slow.\n\nImpact summary: Applications that use the functions DH_check(), DH_check_ex()\nor EVP_PKEY_param_check() to check a DH key or DH parameters may experience long\ndelays. Where the key or parameters that are being checked have been obtained\nfrom an untrusted source this may lead to a Denial of Service.\n\nThe function DH_check() performs various checks on DH parameters. One of those\nchecks confirms that the modulus ('p' parameter) is not too large. Trying to use\na very large modulus is slow and OpenSSL will not normally use a modulus which\nis over 10,000 bits in length.\n\nHowever the DH_check() function checks numerous aspects of the key or parameters\nthat have been supplied. Some of those checks use the supplied modulus value\neven if it has already been found to be too large.\n\nAn application that calls DH_check() and supplies a key or parameters obtained\nfrom an untrusted source could be vulernable to a Denial of Service attack.\n\nThe function DH_check() is itself called by a number of other OpenSSL functions.\nAn application calling any of those other functions may similarly be affected.\nThe other functions affected by this are DH_check_ex() and\nEVP_PKEY_param_check().\n\nAlso vulnerable are the OpenSSL dhparam and pkeyparam command line applications\nwhen using the '-check' option.\n\nThe OpenSSL SSL/TLS implementation is not affected by this issue.\nThe OpenSSL 3.0 and 3.1 FIPS providers are not affected by this issue.",
-              'diffID':        'sha256:0a24540c1e5a47e5a8116c43151cb45c985f7a65afe5d4d65127d9c6fea2ffcf',
-              'fixedVersions': [
-                '3.0.9-r3'
-              ],
-              'installedVersion': '3.0.7-r2',
-              'packageName':      'libssl3',
-              'purl':             'pkg:apk/alpine/libssl3@3.0.7-r2?arch=aarch64&distro=3.17.1',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2023/07/19/4',
-                'http://www.openwall.com/lists/oss-security/2023/07/19/5',
-                'http://www.openwall.com/lists/oss-security/2023/07/19/6',
-                'http://www.openwall.com/lists/oss-security/2023/07/31/1',
-                'http://www.openwall.com/lists/oss-security/2024/05/16/1',
-                'https://access.redhat.com/errata/RHSA-2024:2447',
-                'https://access.redhat.com/security/cve/CVE-2023-3446',
-                'https://bugzilla.redhat.com/2223016',
-                'https://bugzilla.redhat.com/2224962',
-                'https://bugzilla.redhat.com/2227852',
-                'https://bugzilla.redhat.com/2248616',
-                'https://bugzilla.redhat.com/2257571',
-                'https://bugzilla.redhat.com/2258502',
-                'https://bugzilla.redhat.com/2259944',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2224962',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2257582',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2257583',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2258677',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2258688',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2258691',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2258694',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2258700',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-36763',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-36764',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3446',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45229',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45231',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45232',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45233',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45235',
-                'https://errata.almalinux.org/9/ALSA-2024-2447.html',
-                'https://errata.rockylinux.org/RLSA-2024:2264',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=1fa20cf2f506113c761777127a38bce5068740eb',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=8780a896543a654e757db1b9396383f9d8095528',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=9a0a4d3c1e7138915563c0df4fe6a3f9377b839c',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=fc9867c1e03c22ebf56943be205202e576aabf23',
-                'https://linux.oracle.com/cve/CVE-2023-3446.html',
-                'https://linux.oracle.com/errata/ELSA-2024-2447.html',
-                'https://lists.debian.org/debian-lts-announce/2023/08/msg00019.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-3446',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://security.netapp.com/advisory/ntap-20230803-0011/',
-                'https://ubuntu.com/security/notices/USN-6435-1',
-                'https://ubuntu.com/security/notices/USN-6435-2',
-                'https://ubuntu.com/security/notices/USN-6450-1',
-                'https://ubuntu.com/security/notices/USN-6709-1',
-                'https://ubuntu.com/security/notices/USN-7018-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-3446',
-                'https://www.openssl.org/news/secadv/20230719.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: Excessive time spent checking DH keys and parameters'
-            },
-            {
-              'cve':  'CVE-2023-3817',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L'
-                },
-                'redhat': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L'
-                }
-              },
-              'cwes': [
-                'CWE-606',
-                'CWE-834'
-              ],
-              'description':   'Issue summary: Checking excessively long DH keys or parameters may be very slow.\n\nImpact summary: Applications that use the functions DH_check(), DH_check_ex()\nor EVP_PKEY_param_check() to check a DH key or DH parameters may experience long\ndelays. Where the key or parameters that are being checked have been obtained\nfrom an untrusted source this may lead to a Denial of Service.\n\nThe function DH_check() performs various checks on DH parameters. After fixing\nCVE-2023-3446 it was discovered that a large q parameter value can also trigger\nan overly long computation during some of these checks. A correct q value,\nif present, cannot be larger than the modulus p parameter, thus it is\nunnecessary to perform these checks if q is larger than p.\n\nAn application that calls DH_check() and supplies a key or parameters obtained\nfrom an untrusted source could be vulnerable to a Denial of Service attack.\n\nThe function DH_check() is itself called by a number of other OpenSSL functions.\nAn application calling any of those other functions may similarly be affected.\nThe other functions affected by this are DH_check_ex() and\nEVP_PKEY_param_check().\n\nAlso vulnerable are the OpenSSL dhparam and pkeyparam command line applications\nwhen using the "-check" option.\n\nThe OpenSSL SSL/TLS implementation is not affected by this issue.\n\nThe OpenSSL 3.0 and 3.1 FIPS providers are not affected by this issue.',
-              'diffID':        'sha256:0a24540c1e5a47e5a8116c43151cb45c985f7a65afe5d4d65127d9c6fea2ffcf',
-              'fixedVersions': [
-                '3.0.10-r0'
-              ],
-              'installedVersion': '3.0.7-r2',
-              'packageName':      'libssl3',
-              'purl':             'pkg:apk/alpine/libssl3@3.0.7-r2?arch=aarch64&distro=3.17.1',
-              'references':       [
-                'http://seclists.org/fulldisclosure/2023/Jul/43',
-                'http://www.openwall.com/lists/oss-security/2023/07/31/1',
-                'http://www.openwall.com/lists/oss-security/2023/09/22/11',
-                'http://www.openwall.com/lists/oss-security/2023/09/22/9',
-                'http://www.openwall.com/lists/oss-security/2023/11/06/2',
-                'https://access.redhat.com/errata/RHSA-2024:2447',
-                'https://access.redhat.com/security/cve/CVE-2023-3817',
-                'https://bugzilla.redhat.com/2223016',
-                'https://bugzilla.redhat.com/2224962',
-                'https://bugzilla.redhat.com/2227852',
-                'https://bugzilla.redhat.com/2248616',
-                'https://bugzilla.redhat.com/2257571',
-                'https://bugzilla.redhat.com/2258502',
-                'https://bugzilla.redhat.com/2259944',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2224962',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2227852',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2248616',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2270358',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3446',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3817',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-5678',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-2408',
-                'https://errata.almalinux.org/9/ALSA-2024-2447.html',
-                'https://errata.rockylinux.org/RLSA-2023:7877',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=6a1eb62c29db6cb5eec707f9338aee00f44e26f5',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=869ad69aadd985c7b8ca6f4e5dd0eb274c9f3644',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=9002fd07327a91f35ba6c1307e71fa6fd4409b7f',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=91ddeba0f2269b017dc06c46c993a788974b1aa5',
-                'https://linux.oracle.com/cve/CVE-2023-3817.html',
-                'https://linux.oracle.com/errata/ELSA-2024-2447.html',
-                'https://lists.debian.org/debian-lts-announce/2023/08/msg00019.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-3817',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://security.netapp.com/advisory/ntap-20230818-0014/',
-                'https://security.netapp.com/advisory/ntap-20231027-0008/',
-                'https://security.netapp.com/advisory/ntap-20240621-0006/',
-                'https://ubuntu.com/security/notices/USN-6435-1',
-                'https://ubuntu.com/security/notices/USN-6435-2',
-                'https://ubuntu.com/security/notices/USN-6450-1',
-                'https://ubuntu.com/security/notices/USN-6709-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-3817',
-                'https://www.openssl.org/news/secadv/20230731.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'OpenSSL: Excessive time spent checking DH q parameter value'
-            },
-            {
-              'cve':  'CVE-2023-5678',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L'
-                },
-                'redhat': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L'
-                }
-              },
-              'cwes': [
-                'CWE-606',
-                'CWE-754'
-              ],
-              'description':   "Issue summary: Generating excessively long X9.42 DH keys or checking\nexcessively long X9.42 DH keys or parameters may be very slow.\n\nImpact summary: Applications that use the functions DH_generate_key() to\ngenerate an X9.42 DH key may experience long delays.  Likewise, applications\nthat use DH_check_pub_key(), DH_check_pub_key_ex() or EVP_PKEY_public_check()\nto check an X9.42 DH key or X9.42 DH parameters may experience long delays.\nWhere the key or parameters that are being checked have been obtained from\nan untrusted source this may lead to a Denial of Service.\n\nWhile DH_check() performs all the necessary checks (as of CVE-2023-3817),\nDH_check_pub_key() doesn't make any of these checks, and is therefore\nvulnerable for excessively large P and Q parameters.\n\nLikewise, while DH_generate_key() performs a check for an excessively large\nP, it doesn't check for an excessively large Q.\n\nAn application that calls DH_generate_key() or DH_check_pub_key() and\nsupplies a key or parameters obtained from an untrusted source could be\nvulnerable to a Denial of Service attack.\n\nDH_generate_key() and DH_check_pub_key() are also called by a number of\nother OpenSSL functions.  An application calling any of those other\nfunctions may similarly be affected.  The other functions affected by this\nare DH_check_pub_key_ex(), EVP_PKEY_public_check(), and EVP_PKEY_generate().\n\nAlso vulnerable are the OpenSSL pkey command line application when using the\n\"-pubcheck\" option, as well as the OpenSSL genpkey command line application.\n\nThe OpenSSL SSL/TLS implementation is not affected by this issue.\n\nThe OpenSSL 3.0 and 3.1 FIPS providers are not affected by this issue.",
-              'diffID':        'sha256:0a24540c1e5a47e5a8116c43151cb45c985f7a65afe5d4d65127d9c6fea2ffcf',
-              'fixedVersions': [
-                '3.0.12-r1'
-              ],
-              'installedVersion': '3.0.7-r2',
-              'packageName':      'libssl3',
-              'purl':             'pkg:apk/alpine/libssl3@3.0.7-r2?arch=aarch64&distro=3.17.1',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2024/03/11/1',
-                'https://access.redhat.com/errata/RHSA-2024:2447',
-                'https://access.redhat.com/security/cve/CVE-2023-5678',
-                'https://bugzilla.redhat.com/2223016',
-                'https://bugzilla.redhat.com/2224962',
-                'https://bugzilla.redhat.com/2227852',
-                'https://bugzilla.redhat.com/2248616',
-                'https://bugzilla.redhat.com/2257571',
-                'https://bugzilla.redhat.com/2258502',
-                'https://bugzilla.redhat.com/2259944',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2224962',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2227852',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2248616',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2270358',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3446',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3817',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-5678',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-2408',
-                'https://errata.almalinux.org/9/ALSA-2024-2447.html',
-                'https://errata.rockylinux.org/RLSA-2023:7877',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=34efaef6c103d636ab507a0cc34dca4d3aecc055',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=710fee740904b6290fef0dd5536fbcedbc38ff0c',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=db925ae2e65d0d925adef429afc37f75bd1c2017',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=ddeb4b6c6d527e54ce9a99cba785c0f7776e54b6',
-                'https://linux.oracle.com/cve/CVE-2023-5678.html',
-                'https://linux.oracle.com/errata/ELSA-2024-2447.html',
-                'https://lists.debian.org/debian-lts-announce/2024/10/msg00033.html',
-                'https://lists.debian.org/debian-lts-announce/2024/11/msg00000.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-5678',
-                'https://security.netapp.com/advisory/ntap-20231130-0010/',
-                'https://ubuntu.com/security/notices/USN-6622-1',
-                'https://ubuntu.com/security/notices/USN-6632-1',
-                'https://ubuntu.com/security/notices/USN-6709-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-5678',
-                'https://www.openssl.org/news/secadv/20231106.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: Generating excessively long X9.42 DH keys or checking excessively long X9.42 DH keys or parameters may be very slow'
-            },
-            {
-              'cve':  'CVE-2023-6129',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '6.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-440',
-                'CWE-787'
-              ],
-              'description':   'Issue summary: The POLY1305 MAC (message authentication code) implementation\ncontains a bug that might corrupt the internal state of applications running\non PowerPC CPU based platforms if the CPU provides vector instructions.\n\nImpact summary: If an attacker can influence whether the POLY1305 MAC\nalgorithm is used, the application state might be corrupted with various\napplication dependent consequences.\n\nThe POLY1305 MAC (message authentication code) implementation in OpenSSL for\nPowerPC CPUs restores the contents of vector registers in a different order\nthan they are saved. Thus the contents of some of these vector registers\nare corrupted when returning to the caller. The vulnerable code is used only\non newer PowerPC processors supporting the PowerISA 2.07 instructions.\n\nThe consequences of this kind of internal application state corruption can\nbe various - from no consequences, if the calling application does not\ndepend on the contents of non-volatile XMM registers at all, to the worst\nconsequences, where the attacker could get complete control of the application\nprocess. However unless the compiler uses the vector registers for storing\npointers, the most likely consequence, if any, would be an incorrect result\nof some application dependent calculations or a crash leading to a denial of\nservice.\n\nThe POLY1305 MAC algorithm is most frequently used as part of the\nCHACHA20-POLY1305 AEAD (authenticated encryption with associated data)\nalgorithm. The most common usage of this AEAD cipher is with TLS protocol\nversions 1.2 and 1.3. If this cipher is enabled on the server a malicious\nclient can influence whether this AEAD cipher is used. This implies that\nTLS server applications using OpenSSL can be potentially impacted. However\nwe are currently not aware of any concrete application that would be affected\nby this issue therefore we consider this a Low severity security issue.',
-              'diffID':        'sha256:0a24540c1e5a47e5a8116c43151cb45c985f7a65afe5d4d65127d9c6fea2ffcf',
-              'fixedVersions': [
-                '3.0.12-r2'
-              ],
-              'installedVersion': '3.0.7-r2',
-              'packageName':      'libssl3',
-              'purl':             'pkg:apk/alpine/libssl3@3.0.7-r2?arch=aarch64&distro=3.17.1',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2024/03/11/1',
-                'https://access.redhat.com/errata/RHSA-2024:9088',
-                'https://access.redhat.com/security/cve/CVE-2023-6129',
-                'https://bugzilla.redhat.com/2257571',
-                'https://bugzilla.redhat.com/2258502',
-                'https://bugzilla.redhat.com/2259944',
-                'https://bugzilla.redhat.com/2284243',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2257571',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2258502',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2259944',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2284243',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-6129',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-6237',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-0727',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-1298',
-                'https://errata.almalinux.org/9/ALSA-2024-9088.html',
-                'https://errata.rockylinux.org/RLSA-2024:9088',
-                'https://github.com/openssl/openssl/commit/050d26383d4e264966fb83428e72d5d48f402d35',
-                'https://github.com/openssl/openssl/commit/5b139f95c9a47a55a0c54100f3837b1eee942b04',
-                'https://github.com/openssl/openssl/commit/f3fc5808fe9ff74042d639839610d03b8fdcc015',
-                'https://linux.oracle.com/cve/CVE-2023-6129.html',
-                'https://linux.oracle.com/errata/ELSA-2024-9088.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-6129',
-                'https://security.netapp.com/advisory/ntap-20240216-0009/',
-                'https://security.netapp.com/advisory/ntap-20240426-0008/',
-                'https://security.netapp.com/advisory/ntap-20240426-0013/',
-                'https://security.netapp.com/advisory/ntap-20240503-0011/',
-                'https://ubuntu.com/security/notices/USN-6622-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-6129',
-                'https://www.openssl.org/news/secadv/20240109.txt',
-                'https://www.openwall.com/lists/oss-security/2024/01/09/1'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: POLY1305 MAC implementation corrupts vector registers on PowerPC'
-            },
-            {
-              'cve':  'CVE-2023-6237',
-              'cvss': {
-                'redhat': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-606'
-              ],
-              'description':   "Issue summary: Checking excessively long invalid RSA public keys may take\na long time.\n\nImpact summary: Applications that use the function EVP_PKEY_public_check()\nto check RSA public keys may experience long delays. Where the key that\nis being checked has been obtained from an untrusted source this may lead\nto a Denial of Service.\n\nWhen function EVP_PKEY_public_check() is called on RSA public keys,\na computation is done to confirm that the RSA modulus, n, is composite.\nFor valid RSA keys, n is a product of two or more large primes and this\ncomputation completes quickly. However, if n is an overly large prime,\nthen this computation would take a long time.\n\nAn application that calls EVP_PKEY_public_check() and supplies an RSA key\nobtained from an untrusted source could be vulnerable to a Denial of Service\nattack.\n\nThe function EVP_PKEY_public_check() is not called from other OpenSSL\nfunctions however it is called from the OpenSSL pkey command line\napplication. For that reason that application is also vulnerable if used\nwith the '-pubin' and '-check' options on untrusted data.\n\nThe OpenSSL SSL/TLS implementation is not affected by this issue.\n\nThe OpenSSL 3.0 and 3.1 FIPS providers are affected by this issue.",
-              'diffID':        'sha256:0a24540c1e5a47e5a8116c43151cb45c985f7a65afe5d4d65127d9c6fea2ffcf',
-              'fixedVersions': [
-                '3.0.12-r3'
-              ],
-              'installedVersion': '3.0.7-r2',
-              'packageName':      'libssl3',
-              'purl':             'pkg:apk/alpine/libssl3@3.0.7-r2?arch=aarch64&distro=3.17.1',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2024/03/11/1',
-                'https://access.redhat.com/errata/RHSA-2024:9088',
-                'https://access.redhat.com/security/cve/CVE-2023-6237',
-                'https://bugzilla.redhat.com/2257571',
-                'https://bugzilla.redhat.com/2258502',
-                'https://bugzilla.redhat.com/2259944',
-                'https://bugzilla.redhat.com/2284243',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2257571',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2258502',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2259944',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2284243',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-6129',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-6237',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-0727',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-1298',
-                'https://errata.almalinux.org/9/ALSA-2024-9088.html',
-                'https://errata.rockylinux.org/RLSA-2024:9088',
-                'https://github.com/openssl/openssl/commit/0b0f7abfb37350794a4b8960fafc292cd5d1b84d',
-                'https://github.com/openssl/openssl/commit/18c02492138d1eb8b6548cb26e7b625fb2414a2a',
-                'https://github.com/openssl/openssl/commit/a830f551557d3d66a84bbb18a5b889c640c36294',
-                'https://linux.oracle.com/cve/CVE-2023-6237.html',
-                'https://linux.oracle.com/errata/ELSA-2024-9088.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-6237',
-                'https://security.netapp.com/advisory/ntap-20240531-0007/',
-                'https://ubuntu.com/security/notices/USN-6622-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-6237',
-                'https://www.openssl.org/news/secadv/20240115.txt',
-                'https://www.openwall.com/lists/oss-security/2024/01/15/2'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: Excessive time spent checking invalid RSA public keys'
-            },
-            {
-              'cve':  'CVE-2024-0727',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '5.5',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H'
-                },
-                'nvd': {
-                  'v3score':  '5.5',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '5.5',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-476'
-              ],
-              'description':   'Issue summary: Processing a maliciously formatted PKCS12 file may lead OpenSSL\nto crash leading to a potential Denial of Service attack\n\nImpact summary: Applications loading files in the PKCS12 format from untrusted\nsources might terminate abruptly.\n\nA file in PKCS12 format can contain certificates and keys and may come from an\nuntrusted source. The PKCS12 specification allows certain fields to be NULL, but\nOpenSSL does not correctly check for this case. This can lead to a NULL pointer\ndereference that results in OpenSSL crashing. If an application processes PKCS12\nfiles from an untrusted source using the OpenSSL APIs then that application will\nbe vulnerable to this issue.\n\nOpenSSL APIs that are vulnerable to this are: PKCS12_parse(),\nPKCS12_unpack_p7data(), PKCS12_unpack_p7encdata(), PKCS12_unpack_authsafes()\nand PKCS12_newpass().\n\nWe have also fixed a similar issue in SMIME_write_PKCS7(). However since this\nfunction is related to writing data we do not consider it security significant.\n\nThe FIPS modules in 3.2, 3.1 and 3.0 are not affected by this issue.',
-              'diffID':        'sha256:0a24540c1e5a47e5a8116c43151cb45c985f7a65afe5d4d65127d9c6fea2ffcf',
-              'fixedVersions': [
-                '3.0.12-r4'
-              ],
-              'installedVersion': '3.0.7-r2',
-              'packageName':      'libssl3',
-              'purl':             'pkg:apk/alpine/libssl3@3.0.7-r2?arch=aarch64&distro=3.17.1',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2024/03/11/1',
-                'https://access.redhat.com/errata/RHSA-2024:9088',
-                'https://access.redhat.com/security/cve/CVE-2024-0727',
-                'https://bugzilla.redhat.com/2257571',
-                'https://bugzilla.redhat.com/2258502',
-                'https://bugzilla.redhat.com/2259944',
-                'https://bugzilla.redhat.com/2284243',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2257571',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2258502',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2259944',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2284243',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-6129',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-6237',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-0727',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-1298',
-                'https://errata.almalinux.org/9/ALSA-2024-9088.html',
-                'https://errata.rockylinux.org/RLSA-2024:9088',
-                'https://github.com/alexcrichton/openssl-src-rs/commit/add20f73b6b42be7451af2e1044d4e0e778992b2',
-                'https://github.com/github/advisory-database/pull/3472',
-                'https://github.com/openssl/openssl/commit/09df4395b5071217b76dc7d3d2e630eb8c5a79c2',
-                'https://github.com/openssl/openssl/commit/775acfdbd0c6af9ac855f34969cdab0c0c90844a',
-                'https://github.com/openssl/openssl/commit/d135eeab8a5dbf72b3da5240bab9ddb7678dbd2c',
-                'https://github.com/openssl/openssl/pull/23362',
-                'https://github.com/pyca/cryptography/commit/3519591d255d4506fbcd0d04037d45271903c64d',
-                'https://github.openssl.org/openssl/extended-releases/commit/03b3941d60c4bce58fab69a0c22377ab439bc0e8',
-                'https://github.openssl.org/openssl/extended-releases/commit/aebaa5883e31122b404e450732dc833dc9dee539',
-                'https://linux.oracle.com/cve/CVE-2024-0727.html',
-                'https://linux.oracle.com/errata/ELSA-2024-9088.html',
-                'https://lists.debian.org/debian-lts-announce/2024/10/msg00033.html',
-                'https://lists.debian.org/debian-lts-announce/2024/11/msg00000.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2024-0727',
-                'https://security.netapp.com/advisory/ntap-20240208-0006',
-                'https://security.netapp.com/advisory/ntap-20240208-0006/',
-                'https://ubuntu.com/security/notices/USN-6622-1',
-                'https://ubuntu.com/security/notices/USN-6632-1',
-                'https://ubuntu.com/security/notices/USN-6709-1',
-                'https://ubuntu.com/security/notices/USN-7018-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2024-0727',
-                'https://www.openssl.org/news/secadv/20240125.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: denial of service via null dereference'
-            },
-            {
-              'cve':  'CVE-2024-4603',
-              'cvss': {
-                'redhat': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L'
-                }
-              },
-              'cwes': [
-                'CWE-606',
-                'CWE-834'
-              ],
-              'description':   'Issue summary: Checking excessively long DSA keys or parameters may be very\nslow.\n\nImpact summary: Applications that use the functions EVP_PKEY_param_check()\nor EVP_PKEY_public_check() to check a DSA public key or DSA parameters may\nexperience long delays. Where the key or parameters that are being checked\nhave been obtained from an untrusted source this may lead to a Denial of\nService.\n\nThe functions EVP_PKEY_param_check() or EVP_PKEY_public_check() perform\nvarious checks on DSA parameters. Some of those computations take a long time\nif the modulus (`p` parameter) is too large.\n\nTrying to use a very large modulus is slow and OpenSSL will not allow using\npublic keys with a modulus which is over 10,000 bits in length for signature\nverification. However the key and parameter check functions do not limit\nthe modulus size when performing the checks.\n\nAn application that calls EVP_PKEY_param_check() or EVP_PKEY_public_check()\nand supplies a key or parameters obtained from an untrusted source could be\nvulnerable to a Denial of Service attack.\n\nThese functions are not called by OpenSSL itself on untrusted DSA keys so\nonly applications that directly call these functions may be vulnerable.\n\nAlso vulnerable are the OpenSSL pkey and pkeyparam command line applications\nwhen using the `-check` option.\n\nThe OpenSSL SSL/TLS implementation is not affected by this issue.\n\nThe OpenSSL 3.0 and 3.1 FIPS providers are affected by this issue.',
-              'diffID':        'sha256:0a24540c1e5a47e5a8116c43151cb45c985f7a65afe5d4d65127d9c6fea2ffcf',
-              'fixedVersions': [
-                '3.0.13-r0'
-              ],
-              'installedVersion': '3.0.7-r2',
-              'packageName':      'libssl3',
-              'purl':             'pkg:apk/alpine/libssl3@3.0.7-r2?arch=aarch64&distro=3.17.1',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2024/05/16/2',
-                'https://access.redhat.com/errata/RHSA-2024:9333',
-                'https://access.redhat.com/security/cve/CVE-2024-4603',
-                'https://bugzilla.redhat.com/2274020',
-                'https://bugzilla.redhat.com/2281029',
-                'https://bugzilla.redhat.com/2283757',
-                'https://bugzilla.redhat.com/2294581',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2274020',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2281029',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2283757',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2294581',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-2511',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-4603',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-4741',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-5535',
-                'https://errata.almalinux.org/9/ALSA-2024-9333.html',
-                'https://errata.rockylinux.org/RLSA-2024:9333',
-                'https://github.com/openssl/openssl/commit/3559e868e58005d15c6013a0c1fd832e51c73397',
-                'https://github.com/openssl/openssl/commit/53ea06486d296b890d565fb971b2764fcd826e7e',
-                'https://github.com/openssl/openssl/commit/9c39b3858091c152f52513c066ff2c5a47969f0d',
-                'https://github.com/openssl/openssl/commit/da343d0605c826ef197aceedc67e8e04f065f740',
-                'https://linux.oracle.com/cve/CVE-2024-4603.html',
-                'https://linux.oracle.com/errata/ELSA-2024-9333.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2024-4603',
-                'https://security.netapp.com/advisory/ntap-20240621-0001/',
-                'https://ubuntu.com/security/notices/USN-6937-1',
-                'https://www.cve.org/CVERecord?id=CVE-2024-4603',
-                'https://www.openssl.org/news/secadv/20240516.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: Excessive time spent checking DSA keys and parameters'
-            },
-            {
-              'cve':  'CVE-2024-4741',
-              'cvss': {
-                'redhat': {
-                  'v3score':  '5.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   'Issue summary: Calling the OpenSSL API function SSL_free_buffers may cause\nmemory to be accessed that was previously freed in some situations\n\nImpact summary: A use after free can have a range of potential consequences such\nas the corruption of valid data, crashes or execution of arbitrary code.\nHowever, only applications that directly call the SSL_free_buffers function are\naffected by this issue. Applications that do not call this function are not\nvulnerable. Our investigations indicate that this function is rarely used by\napplications.\n\nThe SSL_free_buffers function is used to free the internal OpenSSL buffer used\nwhen processing an incoming record from the network. The call is only expected\nto succeed if the buffer is not currently in use. However, two scenarios have\nbeen identified where the buffer is freed even when still in use.\n\nThe first scenario occurs where a record header has been received from the\nnetwork and processed by OpenSSL, but the full record body has not yet arrived.\nIn this case calling SSL_free_buffers will succeed even though a record has only\nbeen partially processed and the buffer is still in use.\n\nThe second scenario occurs where a full record containing application data has\nbeen received and processed by OpenSSL but the application has only read part of\nthis data. Again a call to SSL_free_buffers will succeed even though the buffer\nis still in use.\n\nWhile these scenarios could occur accidentally during normal operation a\nmalicious attacker could attempt to engineer a stituation where this occurs.\nWe are not aware of this issue being actively exploited.\n\nThe FIPS modules in 3.3, 3.2, 3.1 and 3.0 are not affected by this issue.',
-              'diffID':        'sha256:0a24540c1e5a47e5a8116c43151cb45c985f7a65afe5d4d65127d9c6fea2ffcf',
-              'fixedVersions': [
-                '3.0.14-r0'
-              ],
-              'installedVersion': '3.0.7-r2',
-              'packageName':      'libssl3',
-              'purl':             'pkg:apk/alpine/libssl3@3.0.7-r2?arch=aarch64&distro=3.17.1',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2024:9333',
-                'https://access.redhat.com/security/cve/CVE-2024-4741',
-                'https://bugzilla.redhat.com/2274020',
-                'https://bugzilla.redhat.com/2281029',
-                'https://bugzilla.redhat.com/2283757',
-                'https://bugzilla.redhat.com/2294581',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2274020',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2281029',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2283757',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2294581',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-2511',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-4603',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-4741',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-5535',
-                'https://errata.almalinux.org/9/ALSA-2024-9333.html',
-                'https://errata.rockylinux.org/RLSA-2024:9333',
-                'https://github.com/openssl/openssl/commit/704f725b96aa373ee45ecfb23f6abfe8be8d9177',
-                'https://github.com/openssl/openssl/commit/b3f0eb0a295f58f16ba43ba99dad70d4ee5c437d',
-                'https://github.com/openssl/openssl/commit/c88c3de51020c37e8706bf7a682a162593053aac',
-                'https://github.com/openssl/openssl/commit/e5093133c35ca82874ad83697af76f4b0f7e3bd8',
-                'https://github.openssl.org/openssl/extended-releases/commit/f7a045f3143fc6da2ee66bf52d8df04829590dd4',
-                'https://linux.oracle.com/cve/CVE-2024-4741.html',
-                'https://linux.oracle.com/errata/ELSA-2024-9333.html',
-                'https://lists.debian.org/debian-lts-announce/2024/10/msg00033.html',
-                'https://lists.debian.org/debian-lts-announce/2024/11/msg00000.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2024-4741',
-                'https://security.netapp.com/advisory/ntap-20240621-0004/',
-                'https://ubuntu.com/security/notices/USN-6937-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2024-4741',
-                'https://www.openssl.org/news/secadv/20240528.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: Use After Free with SSL_free_buffers'
-            },
-            {
-              'cve':  'CVE-2024-5535',
-              'cvss': {
-                'redhat': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-125'
-              ],
-              'description':   'Issue summary: Calling the OpenSSL API function SSL_select_next_proto with an\nempty supported client protocols buffer may cause a crash or memory contents to\nbe sent to the peer.\n\nImpact summary: A buffer overread can have a range of potential consequences\nsuch as unexpected application beahviour or a crash. In particular this issue\ncould result in up to 255 bytes of arbitrary private data from memory being sent\nto the peer leading to a loss of confidentiality. However, only applications\nthat directly call the SSL_select_next_proto function with a 0 length list of\nsupported client protocols are affected by this issue. This would normally never\nbe a valid scenario and is typically not under attacker control but may occur by\naccident in the case of a configuration or programming error in the calling\napplication.\n\nThe OpenSSL API function SSL_select_next_proto is typically used by TLS\napplications that support ALPN (Application Layer Protocol Negotiation) or NPN\n(Next Protocol Negotiation). NPN is older, was never standardised and\nis deprecated in favour of ALPN. We believe that ALPN is significantly more\nwidely deployed than NPN. The SSL_select_next_proto function accepts a list of\nprotocols from the server and a list of protocols from the client and returns\nthe first protocol that appears in the server list that also appears in the\nclient list. In the case of no overlap between the two lists it returns the\nfirst item in the client list. In either case it will signal whether an overlap\nbetween the two lists was found. In the case where SSL_select_next_proto is\ncalled with a zero length client list it fails to notice this condition and\nreturns the memory immediately following the client list pointer (and reports\nthat there was no overlap in the lists).\n\nThis function is typically called from a server side application callback for\nALPN or a client side application callback for NPN. In the case of ALPN the list\nof protocols supplied by the client is guaranteed by libssl to never be zero in\nlength. The list of server protocols comes from the application and should never\nnormally be expected to be of zero length. In this case if the\nSSL_select_next_proto function has been called as expected (with the list\nsupplied by the client passed in the client/client_len parameters), then the\napplication will not be vulnerable to this issue. If the application has\naccidentally been configured with a zero length server list, and has\naccidentally passed that zero length server list in the client/client_len\nparameters, and has additionally failed to correctly handle a "no overlap"\nresponse (which would normally result in a handshake failure in ALPN) then it\nwill be vulnerable to this problem.\n\nIn the case of NPN, the protocol permits the client to opportunistically select\na protocol when there is no overlap. OpenSSL returns the first client protocol\nin the no overlap case in support of this. The list of client protocols comes\nfrom the application and should never normally be expected to be of zero length.\nHowever if the SSL_select_next_proto function is accidentally called with a\nclient_len of 0 then an invalid memory pointer will be returned instead. If the\napplication uses this output as the opportunistic protocol then the loss of\nconfidentiality will occur.\n\nThis issue has been assessed as Low severity because applications are most\nlikely to be vulnerable if they are using NPN instead of ALPN - but NPN is not\nwidely used. It also requires an application configuration or programming error.\nFinally, this issue would not typically be under attacker control making active\nexploitation unlikely.\n\nThe FIPS modules in 3.3, 3.2, 3.1 and 3.0 are not affected by this issue.\n\nDue to the low severity of this issue we are not issuing new releases of\nOpenSSL at this time. The fix will be included in the next releases when they\nbecome available.',
-              'diffID':        'sha256:0a24540c1e5a47e5a8116c43151cb45c985f7a65afe5d4d65127d9c6fea2ffcf',
-              'fixedVersions': [
-                '3.0.14-r0'
-              ],
-              'installedVersion': '3.0.7-r2',
-              'packageName':      'libssl3',
-              'purl':             'pkg:apk/alpine/libssl3@3.0.7-r2?arch=aarch64&distro=3.17.1',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2024/06/27/1',
-                'http://www.openwall.com/lists/oss-security/2024/06/28/4',
-                'http://www.openwall.com/lists/oss-security/2024/08/15/1',
-                'https://access.redhat.com/errata/RHSA-2025:1671',
-                'https://access.redhat.com/security/cve/CVE-2024-5535',
-                'https://bugzilla.redhat.com/2294581',
-                'https://bugzilla.redhat.com/2294676',
-                'https://bugzilla.redhat.com/2301888',
-                'https://bugzilla.redhat.com/2318857',
-                'https://bugzilla.redhat.com/2318858',
-                'https://bugzilla.redhat.com/2318870',
-                'https://bugzilla.redhat.com/2318873',
-                'https://bugzilla.redhat.com/2318874',
-                'https://bugzilla.redhat.com/2318876',
-                'https://bugzilla.redhat.com/2318882',
-                'https://bugzilla.redhat.com/2318883',
-                'https://bugzilla.redhat.com/2318884',
-                'https://bugzilla.redhat.com/2318885',
-                'https://bugzilla.redhat.com/2318886',
-                'https://bugzilla.redhat.com/2318897',
-                'https://bugzilla.redhat.com/2318900',
-                'https://bugzilla.redhat.com/2318905',
-                'https://bugzilla.redhat.com/2318914',
-                'https://bugzilla.redhat.com/2318922',
-                'https://bugzilla.redhat.com/2318923',
-                'https://bugzilla.redhat.com/2318925',
-                'https://bugzilla.redhat.com/2318926',
-                'https://bugzilla.redhat.com/2318927',
-                'https://bugzilla.redhat.com/2331191',
-                'https://bugzilla.redhat.com/2339218',
-                'https://bugzilla.redhat.com/2339220',
-                'https://bugzilla.redhat.com/2339221',
-                'https://bugzilla.redhat.com/2339226',
-                'https://bugzilla.redhat.com/2339231',
-                'https://bugzilla.redhat.com/2339236',
-                'https://bugzilla.redhat.com/2339238',
-                'https://bugzilla.redhat.com/2339243',
-                'https://bugzilla.redhat.com/2339247',
-                'https://bugzilla.redhat.com/2339252',
-                'https://bugzilla.redhat.com/2339259',
-                'https://bugzilla.redhat.com/2339266',
-                'https://bugzilla.redhat.com/2339270',
-                'https://bugzilla.redhat.com/2339271',
-                'https://bugzilla.redhat.com/2339275',
-                'https://bugzilla.redhat.com/2339277',
-                'https://bugzilla.redhat.com/2339281',
-                'https://bugzilla.redhat.com/2339284',
-                'https://bugzilla.redhat.com/2339291',
-                'https://bugzilla.redhat.com/2339293',
-                'https://bugzilla.redhat.com/2339295',
-                'https://bugzilla.redhat.com/2339299',
-                'https://bugzilla.redhat.com/2339300',
-                'https://bugzilla.redhat.com/2339304',
-                'https://bugzilla.redhat.com/2339305',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2274020',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2281029',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2283757',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2294581',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-2511',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-4603',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-4741',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-5535',
-                'https://errata.almalinux.org/9/ALSA-2025-1671.html',
-                'https://errata.rockylinux.org/RLSA-2024:9333',
-                'https://github.com/openssl/openssl/commit/4ada436a1946cbb24db5ab4ca082b69c1bc10f37',
-                'https://github.com/openssl/openssl/commit/99fb785a5f85315b95288921a321a935ea29a51e',
-                'https://github.com/openssl/openssl/commit/cf6f91f6121f4db167405db2f0de410a456f260c',
-                'https://github.com/openssl/openssl/commit/e86ac436f0bd54d4517745483e2315650fae7b2c',
-                'https://github.openssl.org/openssl/extended-releases/commit/9947251413065a05189a63c9b7a6c1d4e224c21c',
-                'https://github.openssl.org/openssl/extended-releases/commit/b78ec0824da857223486660177d3b1f255c65d87',
-                'https://linux.oracle.com/cve/CVE-2024-5535.html',
-                'https://linux.oracle.com/errata/ELSA-2025-1673.html',
-                'https://lists.debian.org/debian-lts-announce/2024/10/msg00033.html',
-                'https://lists.debian.org/debian-lts-announce/2024/11/msg00000.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2024-5535',
-                'https://openssl.org/news/secadv/20240627.txt',
-                'https://security.netapp.com/advisory/ntap-20240712-0005/',
-                'https://security.netapp.com/advisory/ntap-20241025-0006/',
-                'https://security.netapp.com/advisory/ntap-20241025-0010/',
-                'https://ubuntu.com/security/notices/USN-6937-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2024-5535',
-                'https://www.openssl.org/news/secadv/20240627.txt',
-                'https://www.oracle.com/security-alerts/cpuoct2024.html#AppendixMSQL'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: SSL_select_next_proto buffer overread'
-            },
-            {
-              'cve':  'CVE-2024-2511',
-              'cvss': {
-                'redhat': {
-                  'v3score':  '3.7',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L'
-                }
-              },
-              'cwes': [
-                'CWE-1325'
-              ],
-              'description':   'Issue summary: Some non-default TLS server configurations can cause unbounded\nmemory growth when processing TLSv1.3 sessions\n\nImpact summary: An attacker may exploit certain server configurations to trigger\nunbounded memory growth that would lead to a Denial of Service\n\nThis problem can occur in TLSv1.3 if the non-default SSL_OP_NO_TICKET option is\nbeing used (but not if early_data support is also configured and the default\nanti-replay protection is in use). In this case, under certain conditions, the\nsession cache can get into an incorrect state and it will fail to flush properly\nas it fills. The session cache will continue to grow in an unbounded manner. A\nmalicious client could deliberately create the scenario for this failure to\nforce a Denial of Service. It may also happen by accident in normal operation.\n\nThis issue only affects TLS servers supporting TLSv1.3. It does not affect TLS\nclients.\n\nThe FIPS modules in 3.2, 3.1 and 3.0 are not affected by this issue. OpenSSL\n1.0.2 is also not affected by this issue.',
-              'diffID':        'sha256:0a24540c1e5a47e5a8116c43151cb45c985f7a65afe5d4d65127d9c6fea2ffcf',
-              'fixedVersions': [
-                '3.0.12-r5'
-              ],
-              'installedVersion': '3.0.7-r2',
-              'packageName':      'libssl3',
-              'purl':             'pkg:apk/alpine/libssl3@3.0.7-r2?arch=aarch64&distro=3.17.1',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2024/04/08/5',
-                'https://access.redhat.com/errata/RHSA-2024:9333',
-                'https://access.redhat.com/security/cve/CVE-2024-2511',
-                'https://bugzilla.redhat.com/2274020',
-                'https://bugzilla.redhat.com/2281029',
-                'https://bugzilla.redhat.com/2283757',
-                'https://bugzilla.redhat.com/2294581',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2274020',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2281029',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2283757',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2294581',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-2511',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-4603',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-4741',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-5535',
-                'https://errata.almalinux.org/9/ALSA-2024-9333.html',
-                'https://errata.rockylinux.org/RLSA-2024:9333',
-                'https://github.com/openssl/openssl/commit/7e4d731b1c07201ad9374c1cd9ac5263bdf35bce',
-                'https://github.com/openssl/openssl/commit/b52867a9f618bb955bed2a3ce3db4d4f97ed8e5d',
-                'https://github.com/openssl/openssl/commit/e9d7083e241670332e0443da0f0d4ffb52829f08',
-                'https://github.openssl.org/openssl/extended-releases/commit/5f8d25770ae6437db119dfc951e207271a326640',
-                'https://linux.oracle.com/cve/CVE-2024-2511.html',
-                'https://linux.oracle.com/errata/ELSA-2024-9333.html',
-                'https://lists.debian.org/debian-lts-announce/2024/10/msg00033.html',
-                'https://lists.debian.org/debian-lts-announce/2024/11/msg00000.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2024-2511',
-                'https://security.netapp.com/advisory/ntap-20240503-0013/',
-                'https://ubuntu.com/security/notices/USN-6937-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2024-2511',
-                'https://www.openssl.org/news/secadv/20240408.txt',
-                'https://www.openssl.org/news/vulnerabilities.html'
-              ],
-              'severity':   'LOW',
-              'suppressed': false,
-              'title':      'openssl: Unbounded memory growth with session handling in TLSv1.3'
-            },
-            {
-              'cve':  'CVE-2024-9143',
-              'cvss': {
-                'redhat': {
-                  'v3score':  '3.7',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L'
-                }
-              },
-              'cwes': [
-                'CWE-125',
-                'CWE-787'
-              ],
-              'description':   "Issue summary: Use of the low-level GF(2^m) elliptic curve APIs with untrusted\nexplicit values for the field polynomial can lead to out-of-bounds memory reads\nor writes.\n\nImpact summary: Out of bound memory writes can lead to an application crash or\neven a possibility of a remote code execution, however, in all the protocols\ninvolving Elliptic Curve Cryptography that we're aware of, either only \"named\ncurves\" are supported, or, if explicit curve parameters are supported, they\nspecify an X9.62 encoding of binary (GF(2^m)) curves that can't represent\nproblematic input values. Thus the likelihood of existence of a vulnerable\napplication is low.\n\nIn particular, the X9.62 encoding is used for ECC keys in X.509 certificates,\nso problematic inputs cannot occur in the context of processing X.509\ncertificates.  Any problematic use-cases would have to be using an \"exotic\"\ncurve encoding.\n\nThe affected APIs include: EC_GROUP_new_curve_GF2m(), EC_GROUP_new_from_params(),\nand various supporting BN_GF2m_*() functions.\n\nApplications working with \"exotic\" explicit binary (GF(2^m)) curve parameters,\nthat make it possible to represent invalid field polynomials with a zero\nconstant term, via the above or similar APIs, may terminate abruptly as a\nresult of reading or writing outside of array bounds.  Remote code execution\ncannot easily be ruled out.\n\nThe FIPS modules in 3.3, 3.2, 3.1 and 3.0 are not affected by this issue.",
-              'diffID':        'sha256:0a24540c1e5a47e5a8116c43151cb45c985f7a65afe5d4d65127d9c6fea2ffcf',
-              'fixedVersions': [
-                '3.0.15-r1'
-              ],
-              'installedVersion': '3.0.7-r2',
-              'packageName':      'libssl3',
-              'purl':             'pkg:apk/alpine/libssl3@3.0.7-r2?arch=aarch64&distro=3.17.1',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2024/10/16/1',
-                'http://www.openwall.com/lists/oss-security/2024/10/23/1',
-                'http://www.openwall.com/lists/oss-security/2024/10/24/1',
-                'https://access.redhat.com/security/cve/CVE-2024-9143',
-                'https://github.com/openssl/openssl/commit/72ae83ad214d2eef262461365a1975707f862712',
-                'https://github.com/openssl/openssl/commit/bc7e04d7c8d509fb78fc0e285aa948fb0da04700',
-                'https://github.com/openssl/openssl/commit/c0d3e4d32d2805f49bec30547f225bc4d092e1f4',
-                'https://github.com/openssl/openssl/commit/fdf6723362ca51bd883295efe206cb5b1cfa5154',
-                'https://github.openssl.org/openssl/extended-releases/commit/8efc0cbaa8ebba8e116f7b81a876a4123594d86a',
-                'https://github.openssl.org/openssl/extended-releases/commit/9d576994cec2b7aa37a91740ea7e680810957e41',
-                'https://lists.debian.org/debian-lts-announce/2024/10/msg00033.html',
-                'https://lists.debian.org/debian-lts-announce/2024/11/msg00000.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2024-9143',
-                'https://openssl-library.org/news/secadv/20241016.txt',
-                'https://security.netapp.com/advisory/ntap-20241101-0001/',
-                'https://ubuntu.com/security/notices/USN-7264-1',
-                'https://ubuntu.com/security/notices/USN-7278-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2024-9143'
-              ],
-              'severity':   'LOW',
-              'suppressed': false,
-              'title':      'openssl: Low-level invalid GF(2^m) parameters lead to OOB memory access'
-            },
-            {
-              'cve':  'CVE-2025-26519',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-787'
-              ],
-              'description':   'musl libc 0.9.13 through 1.2.5 before 1.2.6 has an out-of-bounds write vulnerability when an attacker can trigger iconv conversion of untrusted EUC-KR text to UTF-8.',
-              'diffID':        'sha256:0a24540c1e5a47e5a8116c43151cb45c985f7a65afe5d4d65127d9c6fea2ffcf',
-              'fixedVersions': [
-                '1.2.3-r6'
-              ],
-              'installedVersion': '1.2.3-r4',
-              'packageName':      'musl',
-              'purl':             'pkg:apk/alpine/musl@1.2.3-r4?arch=aarch64&distro=3.17.1',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2025/02/13/2',
-                'http://www.openwall.com/lists/oss-security/2025/02/13/3',
-                'http://www.openwall.com/lists/oss-security/2025/02/13/4',
-                'http://www.openwall.com/lists/oss-security/2025/02/13/5',
-                'http://www.openwall.com/lists/oss-security/2025/02/14/5',
-                'http://www.openwall.com/lists/oss-security/2025/02/14/6',
-                'https://git.musl-libc.org/cgit/musl/commit/?id=c47ad25ea3b484e10326f933e927c0bc8cded3da',
-                'https://git.musl-libc.org/cgit/musl/commit/?id=e5adcd97b5196e29991b524237381a0202a60659',
-                'https://www.openwall.com/lists/oss-security/2025/02/13/2'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'musl libc 0.9.13 through 1.2.5 before 1.2.6 has an out-of-bounds write ...'
-            },
-            {
-              'cve':  'CVE-2025-26519',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-787'
-              ],
-              'description':   'musl libc 0.9.13 through 1.2.5 before 1.2.6 has an out-of-bounds write vulnerability when an attacker can trigger iconv conversion of untrusted EUC-KR text to UTF-8.',
-              'diffID':        'sha256:0a24540c1e5a47e5a8116c43151cb45c985f7a65afe5d4d65127d9c6fea2ffcf',
-              'fixedVersions': [
-                '1.2.3-r6'
-              ],
-              'installedVersion': '1.2.3-r4',
-              'packageName':      'musl-utils',
-              'purl':             'pkg:apk/alpine/musl-utils@1.2.3-r4?arch=aarch64&distro=3.17.1',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2025/02/13/2',
-                'http://www.openwall.com/lists/oss-security/2025/02/13/3',
-                'http://www.openwall.com/lists/oss-security/2025/02/13/4',
-                'http://www.openwall.com/lists/oss-security/2025/02/13/5',
-                'http://www.openwall.com/lists/oss-security/2025/02/14/5',
-                'http://www.openwall.com/lists/oss-security/2025/02/14/6',
-                'https://git.musl-libc.org/cgit/musl/commit/?id=c47ad25ea3b484e10326f933e927c0bc8cded3da',
-                'https://git.musl-libc.org/cgit/musl/commit/?id=e5adcd97b5196e29991b524237381a0202a60659',
-                'https://www.openwall.com/lists/oss-security/2025/02/13/2'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'musl libc 0.9.13 through 1.2.5 before 1.2.6 has an out-of-bounds write ...'
-            },
-            {
-              'cve':  'CVE-2023-42363',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.5',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.8',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   'A use-after-free vulnerability was discovered in xasprintf function in xfuncs_printf.c:344 in BusyBox v.1.36.1.',
-              'diffID':        'sha256:0a24540c1e5a47e5a8116c43151cb45c985f7a65afe5d4d65127d9c6fea2ffcf',
-              'fixedVersions': [
-                '1.35.0-r31'
-              ],
-              'installedVersion': '1.35.0-r29',
-              'packageName':      'ssl_client',
-              'purl':             'pkg:apk/alpine/ssl_client@1.35.0-r29?arch=aarch64&distro=3.17.1',
-              'references':       [
-                'http://lists.busybox.net/pipermail/busybox/2024-May/090760.html',
-                'https://access.redhat.com/security/cve/CVE-2023-42363',
-                'https://bugs.busybox.net/show_bug.cgi?id=15865',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-42363',
-                'https://ubuntu.com/security/notices/USN-6961-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-42363'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk'
-            },
-            {
-              'cve':  'CVE-2023-42364',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.5',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.8',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   'A use-after-free vulnerability in BusyBox v.1.36.1 allows attackers to cause a denial of service via a crafted awk pattern in the awk.c evaluate function.',
-              'diffID':        'sha256:0a24540c1e5a47e5a8116c43151cb45c985f7a65afe5d4d65127d9c6fea2ffcf',
-              'fixedVersions': [
-                '1.35.0-r31'
-              ],
-              'installedVersion': '1.35.0-r29',
-              'packageName':      'ssl_client',
-              'purl':             'pkg:apk/alpine/ssl_client@1.35.0-r29?arch=aarch64&distro=3.17.1',
-              'references':       [
-                'http://lists.busybox.net/pipermail/busybox/2024-May/090762.html',
-                'https://access.redhat.com/security/cve/CVE-2023-42364',
-                'https://bugs.busybox.net/show_bug.cgi?id=15868',
-                'https://gitlab.alpinelinux.org/alpine/aports/-/blob/master/main/busybox/CVE-2023-42364-CVE-2023-42365.patch',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-42364',
-                'https://ubuntu.com/security/notices/USN-6961-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-42364'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'busybox: use-after-free'
-            },
-            {
-              'cve':  'CVE-2023-42365',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.5',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.8',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   'A use-after-free vulnerability was discovered in BusyBox v.1.36.1 via a crafted awk pattern in the awk.c copyvar function.',
-              'diffID':        'sha256:0a24540c1e5a47e5a8116c43151cb45c985f7a65afe5d4d65127d9c6fea2ffcf',
-              'fixedVersions': [
-                '1.35.0-r31'
-              ],
-              'installedVersion': '1.35.0-r29',
-              'packageName':      'ssl_client',
-              'purl':             'pkg:apk/alpine/ssl_client@1.35.0-r29?arch=aarch64&distro=3.17.1',
-              'references':       [
-                'http://lists.busybox.net/pipermail/busybox/2024-May/090762.html',
-                'https://access.redhat.com/security/cve/CVE-2023-42365',
-                'https://bugs.busybox.net/show_bug.cgi?id=15871',
-                'https://gitlab.alpinelinux.org/alpine/aports/-/blob/master/main/busybox/CVE-2023-42364-CVE-2023-42365.patch',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-42365',
-                'https://ubuntu.com/security/notices/USN-6961-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-42365'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'busybox: use-after-free'
-            },
-            {
-              'cve':  'CVE-2023-42366',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.5',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.1',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-787'
-              ],
-              'description':   'A heap-buffer-overflow was discovered in BusyBox v.1.36.1 in the next_token function at awk.c:1159.',
-              'diffID':        'sha256:0a24540c1e5a47e5a8116c43151cb45c985f7a65afe5d4d65127d9c6fea2ffcf',
-              'fixedVersions': [
-                '1.35.0-r30'
-              ],
-              'installedVersion': '1.35.0-r29',
-              'packageName':      'ssl_client',
-              'purl':             'pkg:apk/alpine/ssl_client@1.35.0-r29?arch=aarch64&distro=3.17.1',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2023-42366',
-                'https://bugs.busybox.net/show_bug.cgi?id=15874',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-42366',
-                'https://security.netapp.com/advisory/ntap-20241206-0007/',
-                'https://www.cve.org/CVERecord?id=CVE-2023-42366'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'busybox: A heap-buffer-overflow'
-            }
-          ]
-        }
-      ],
-      'summary': {
-        'critical':   0,
-        'high':       20,
-        'low':        4,
-        'medium':     44,
-        'suppressed': 0,
-        'unknown':    0
-      }
-    }
-  },
-  {
-    'id':    'default/eca2ea5fa7ab1a7641385b2245af0f940cb571c3361be7ebb898855be5d2c613',
-    'type':  'storage.sbomscanner.kubewarden.io.vulnerabilityreport',
-    'links': {
-      'patch':  'https://localhost:8005/v1/storage.sbomscanner.kubewarden.io.vulnerabilityreports/default/eca2ea5fa7ab1a7641385b2245af0f940cb571c3361be7ebb898855be5d2c613',
-      'remove': 'https://localhost:8005/v1/storage.sbomscanner.kubewarden.io.vulnerabilityreports/default/eca2ea5fa7ab1a7641385b2245af0f940cb571c3361be7ebb898855be5d2c613',
-      'self':   'https://localhost:8005/v1/storage.sbomscanner.kubewarden.io.vulnerabilityreports/default/eca2ea5fa7ab1a7641385b2245af0f940cb571c3361be7ebb898855be5d2c613',
-      'update': 'https://localhost:8005/v1/storage.sbomscanner.kubewarden.io.vulnerabilityreports/default/eca2ea5fa7ab1a7641385b2245af0f940cb571c3361be7ebb898855be5d2c613',
-      'view':   'https://localhost:8005/apis/storage.sbomscanner.kubewarden.io/v1alpha1/namespaces/default/vulnerabilityreports/eca2ea5fa7ab1a7641385b2245af0f940cb571c3361be7ebb898855be5d2c613'
-    },
-    'apiVersion':    'storage.sbomscanner.kubewarden.io/v1alpha1',
-    'imageMetadata': {
-      'digest':      'sha256:bf099748db97b0295fb330b9bcb0c11cd66c1ef408d4621c25990a7e56294bd5',
-      'platform':    'linux/ppc64le',
-      'registry':    'lsong-demo1',
-      'registryURI': 'registry-1.docker.io',
-      'repository':  'library/alpine',
-      'tag':         '3.20.5'
-    },
-    'kind':     'VulnerabilityReport',
-    'metadata': {
-      'creationTimestamp': '2026-01-14T18:51:40Z',
-      'fields':            [
-        'eca2ea5fa7ab1a7641385b2245af0f940cb571c3361be7ebb898855be5d2c613',
-        'registry-1.docker.io/library/alpine:3.20.5',
-        'linux/ppc64le',
-        '18 (0 suppressed)'
-      ],
-      'labels': {
-        'app.kubernetes.io/managed-by':          'sbomscanner',
-        'app.kubernetes.io/part-of':             'sbomscanner',
-        'sbomscanner.kubewarden.io/scanjob-uid': '445c600a-c4b6-40b3-bd71-f2d2140a37d5'
-      },
-      'name':            'eca2ea5fa7ab1a7641385b2245af0f940cb571c3361be7ebb898855be5d2c613',
-      'namespace':       'default',
-      'ownerReferences': [
-        {
-          'apiVersion':         'storage.sbomscanner.kubewarden.io/v1alpha1',
-          'blockOwnerDeletion': true,
-          'controller':         true,
-          'kind':               'SBOM',
-          'name':               'eca2ea5fa7ab1a7641385b2245af0f940cb571c3361be7ebb898855be5d2c613',
-          'uid':                '486bc047-202c-452c-897a-a7f00a913753'
-        }
-      ],
-      'relationships': [
-        {
-          'fromId':   'default/eca2ea5fa7ab1a7641385b2245af0f940cb571c3361be7ebb898855be5d2c613',
-          'fromType': 'storage.sbomscanner.kubewarden.io.sbom',
-          'rel':      'owner',
-          'state':    'active',
-          'message':  'Resource is current'
-        }
-      ],
-      'resourceVersion': '1',
-      'state':           {
-        'error':         false,
-        'message':       'Resource is current',
-        'name':          'active',
-        'transitioning': false
-      },
-      'uid': 'c0e84245-7d67-4e81-a677-f7009f15f0a8'
-    },
-    'report': {
-      'results': [
-        {
-          'class':           'os-pkgs',
-          'target':          '/var/run/worker/trivy.sbom.1015414420.json (alpine 3.20.5)',
-          'type':            'alpine',
-          'vulnerabilities': [
-            {
-              'cve':  'CVE-2024-58251',
-              'cwes': [
-                'CWE-150'
-              ],
-              'description':   'In netstat in BusyBox through 1.37.0, local users can launch of network application with an argv[0] containing an ANSI terminal escape sequence, leading to a denial of service (terminal locked up) when netstat is used by a victim.',
-              'diffID':        'sha256:a8663a64ac6012d90dd0ee7486edef956ab7dffa4f0363a6ef5f36c1b350c14e',
-              'fixedVersions': [
-                '1.36.1-r31'
-              ],
-              'installedVersion': '1.36.1-r29',
-              'packageName':      'busybox',
-              'purl':             'pkg:apk/alpine/busybox@1.36.1-r29?arch=ppc64le&distro=3.20.5',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2025/04/23/6',
-                'https://bugs.busybox.net/show_bug.cgi?id=15922',
-                'https://www.busybox.net',
-                'https://www.busybox.net/downloads/',
-                'https://www.cve.org/CVERecord?id=CVE-2024-58251'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'In netstat in BusyBox through 1.37.0, local users can launch of networ ...'
-            },
-            {
-              'cve':  'CVE-2025-46394',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '3.3',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-451'
-              ],
-              'description':   'In tar in BusyBox through 1.37.0, a TAR archive can have filenames hidden from a listing through the use of terminal escape sequences.',
-              'diffID':        'sha256:a8663a64ac6012d90dd0ee7486edef956ab7dffa4f0363a6ef5f36c1b350c14e',
-              'fixedVersions': [
-                '1.36.1-r31'
-              ],
-              'installedVersion': '1.36.1-r29',
-              'packageName':      'busybox',
-              'purl':             'pkg:apk/alpine/busybox@1.36.1-r29?arch=ppc64le&distro=3.20.5',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2025/04/23/5',
-                'http://www.openwall.com/lists/oss-security/2025/04/24/3',
-                'https://bugs.busybox.net/show_bug.cgi?id=16018',
-                'https://lists.busybox.net/pipermail/busybox/2024-July/090806.html',
-                'https://lists.busybox.net/pipermail/busybox/2024-July/090814.html',
-                'https://www.busybox.net',
-                'https://www.busybox.net/downloads/',
-                'https://www.cve.org/CVERecord?id=CVE-2025-46394',
-                'https://www.openwall.com/lists/oss-security/2025/04/23/1'
-              ],
-              'severity':   'LOW',
-              'suppressed': false,
-              'title':      'In tar in BusyBox through 1.37.0, a TAR archive can have filenames hid ...'
-            },
-            {
-              'cve':  'CVE-2024-58251',
-              'cwes': [
-                'CWE-150'
-              ],
-              'description':   'In netstat in BusyBox through 1.37.0, local users can launch of network application with an argv[0] containing an ANSI terminal escape sequence, leading to a denial of service (terminal locked up) when netstat is used by a victim.',
-              'diffID':        'sha256:a8663a64ac6012d90dd0ee7486edef956ab7dffa4f0363a6ef5f36c1b350c14e',
-              'fixedVersions': [
-                '1.36.1-r31'
-              ],
-              'installedVersion': '1.36.1-r29',
-              'packageName':      'busybox-binsh',
-              'purl':             'pkg:apk/alpine/busybox-binsh@1.36.1-r29?arch=ppc64le&distro=3.20.5',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2025/04/23/6',
-                'https://bugs.busybox.net/show_bug.cgi?id=15922',
-                'https://www.busybox.net',
-                'https://www.busybox.net/downloads/',
-                'https://www.cve.org/CVERecord?id=CVE-2024-58251'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'In netstat in BusyBox through 1.37.0, local users can launch of networ ...'
-            },
-            {
-              'cve':  'CVE-2025-46394',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '3.3',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-451'
-              ],
-              'description':   'In tar in BusyBox through 1.37.0, a TAR archive can have filenames hidden from a listing through the use of terminal escape sequences.',
-              'diffID':        'sha256:a8663a64ac6012d90dd0ee7486edef956ab7dffa4f0363a6ef5f36c1b350c14e',
-              'fixedVersions': [
-                '1.36.1-r31'
-              ],
-              'installedVersion': '1.36.1-r29',
-              'packageName':      'busybox-binsh',
-              'purl':             'pkg:apk/alpine/busybox-binsh@1.36.1-r29?arch=ppc64le&distro=3.20.5',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2025/04/23/5',
-                'http://www.openwall.com/lists/oss-security/2025/04/24/3',
-                'https://bugs.busybox.net/show_bug.cgi?id=16018',
-                'https://lists.busybox.net/pipermail/busybox/2024-July/090806.html',
-                'https://lists.busybox.net/pipermail/busybox/2024-July/090814.html',
-                'https://www.busybox.net',
-                'https://www.busybox.net/downloads/',
-                'https://www.cve.org/CVERecord?id=CVE-2025-46394',
-                'https://www.openwall.com/lists/oss-security/2025/04/23/1'
-              ],
-              'severity':   'LOW',
-              'suppressed': false,
-              'title':      'In tar in BusyBox through 1.37.0, a TAR archive can have filenames hid ...'
-            },
-            {
-              'cve':  'CVE-2024-12797',
-              'cvss': {
-                'redhat': {
-                  'v3score':  '7.4',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-392'
-              ],
-              'description':   "Issue summary: Clients using RFC7250 Raw Public Keys (RPKs) to authenticate a\nserver may fail to notice that the server was not authenticated, because\nhandshakes don't abort as expected when the SSL_VERIFY_PEER verification mode\nis set.\n\nImpact summary: TLS and DTLS connections using raw public keys may be\nvulnerable to man-in-middle attacks when server authentication failure is not\ndetected by clients.\n\nRPKs are disabled by default in both TLS clients and TLS servers.  The issue\nonly arises when TLS clients explicitly enable RPK use by the server, and the\nserver, likewise, enables sending of an RPK instead of an X.509 certificate\nchain.  The affected clients are those that then rely on the handshake to\nfail when the server's RPK fails to match one of the expected public keys,\nby setting the verification mode to SSL_VERIFY_PEER.\n\nClients that enable server-side raw public keys can still find out that raw\npublic key verification failed by calling SSL_get_verify_result(), and those\nthat do, and take appropriate action, are not affected.  This issue was\nintroduced in the initial implementation of RPK support in OpenSSL 3.2.\n\nThe FIPS modules in 3.4, 3.3, 3.2, 3.1 and 3.0 are not affected by this issue.",
-              'diffID':        'sha256:a8663a64ac6012d90dd0ee7486edef956ab7dffa4f0363a6ef5f36c1b350c14e',
-              'fixedVersions': [
-                '3.3.3-r0'
-              ],
-              'installedVersion': '3.3.2-r1',
-              'packageName':      'libcrypto3',
-              'purl':             'pkg:apk/alpine/libcrypto3@3.3.2-r1?arch=ppc64le&distro=3.20.5',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2025/02/11/3',
-                'http://www.openwall.com/lists/oss-security/2025/02/11/4',
-                'https://access.redhat.com/errata/RHSA-2025:1330',
-                'https://access.redhat.com/security/cve/CVE-2024-12797',
-                'https://bugzilla.redhat.com/2342757',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2342757',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-12797',
-                'https://errata.almalinux.org/9/ALSA-2025-1330.html',
-                'https://errata.rockylinux.org/RLSA-2025:1330',
-                'https://github.com/openssl/openssl/commit/738d4f9fdeaad57660dcba50a619fafced3fd5e9',
-                'https://github.com/openssl/openssl/commit/798779d43494549b611233f92652f0da5328fbe7',
-                'https://github.com/openssl/openssl/commit/87ebd203feffcf92ad5889df92f90bb0ee10a699',
-                'https://github.com/pyca/cryptography',
-                'https://github.com/pyca/cryptography/security/advisories/GHSA-79v4-65xg-pq4g',
-                'https://linux.oracle.com/cve/CVE-2024-12797.html',
-                'https://linux.oracle.com/errata/ELSA-2025-1330.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2024-12797',
-                'https://openssl-library.org/news/secadv/20250211.txt',
-                'https://security.netapp.com/advisory/ntap-20250214-0001/',
-                'https://ubuntu.com/security/notices/USN-7264-1',
-                'https://www.cve.org/CVERecord?id=CVE-2024-12797'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      "openssl: RFC7250 handshakes with unauthenticated servers don't abort as expected"
-            },
-            {
-              'cve':  'CVE-2024-13176',
-              'cvss': {
-                'redhat': {
-                  'v3score':  '4.7',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-385'
-              ],
-              'description':   'Issue summary: A timing side-channel which could potentially allow recovering\nthe private key exists in the ECDSA signature computation.\n\nImpact summary: A timing side-channel in ECDSA signature computations\ncould allow recovering the private key by an attacker. However, measuring\nthe timing would require either local access to the signing application or\na very fast network connection with low latency.\n\nThere is a timing signal of around 300 nanoseconds when the top word of\nthe inverted ECDSA nonce value is zero. This can happen with significant\nprobability only for some of the supported elliptic curves. In particular\nthe NIST P-521 curve is affected. To be able to measure this leak, the attacker\nprocess must either be located in the same physical computer or must\nhave a very fast network connection with low latency. For that reason\nthe severity of this vulnerability is Low.\n\nThe FIPS modules in 3.4, 3.3, 3.2, 3.1 and 3.0 are affected by this issue.',
-              'diffID':        'sha256:a8663a64ac6012d90dd0ee7486edef956ab7dffa4f0363a6ef5f36c1b350c14e',
-              'fixedVersions': [
-                '3.3.2-r2'
-              ],
-              'installedVersion': '3.3.2-r1',
-              'packageName':      'libcrypto3',
-              'purl':             'pkg:apk/alpine/libcrypto3@3.3.2-r1?arch=ppc64le&distro=3.20.5',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2025/01/20/2',
-                'https://access.redhat.com/errata/RHSA-2025:16046',
-                'https://access.redhat.com/security/cve/CVE-2024-13176',
-                'https://bugzilla.redhat.com/2359885',
-                'https://bugzilla.redhat.com/2359888',
-                'https://bugzilla.redhat.com/2359892',
-                'https://bugzilla.redhat.com/2359894',
-                'https://bugzilla.redhat.com/2359895',
-                'https://bugzilla.redhat.com/2359899',
-                'https://bugzilla.redhat.com/2359900',
-                'https://bugzilla.redhat.com/2359902',
-                'https://bugzilla.redhat.com/2359903',
-                'https://bugzilla.redhat.com/2359911',
-                'https://bugzilla.redhat.com/2359918',
-                'https://bugzilla.redhat.com/2359920',
-                'https://bugzilla.redhat.com/2359924',
-                'https://bugzilla.redhat.com/2359928',
-                'https://bugzilla.redhat.com/2359930',
-                'https://bugzilla.redhat.com/2359932',
-                'https://bugzilla.redhat.com/2359934',
-                'https://bugzilla.redhat.com/2359938',
-                'https://bugzilla.redhat.com/2359940',
-                'https://bugzilla.redhat.com/2359943',
-                'https://bugzilla.redhat.com/2359944',
-                'https://bugzilla.redhat.com/2359945',
-                'https://bugzilla.redhat.com/2359947',
-                'https://bugzilla.redhat.com/2359950',
-                'https://bugzilla.redhat.com/2359963',
-                'https://bugzilla.redhat.com/2359964',
-                'https://bugzilla.redhat.com/2359972',
-                'https://bugzilla.redhat.com/2370920',
-                'https://bugzilla.redhat.com/2380264',
-                'https://bugzilla.redhat.com/2380273',
-                'https://bugzilla.redhat.com/2380274',
-                'https://bugzilla.redhat.com/2380278',
-                'https://bugzilla.redhat.com/2380280',
-                'https://bugzilla.redhat.com/2380283',
-                'https://bugzilla.redhat.com/2380284',
-                'https://bugzilla.redhat.com/2380290',
-                'https://bugzilla.redhat.com/2380291',
-                'https://bugzilla.redhat.com/2380295',
-                'https://bugzilla.redhat.com/2380298',
-                'https://bugzilla.redhat.com/2380306',
-                'https://bugzilla.redhat.com/2380308',
-                'https://bugzilla.redhat.com/2380309',
-                'https://bugzilla.redhat.com/2380310',
-                'https://bugzilla.redhat.com/2380312',
-                'https://bugzilla.redhat.com/2380313',
-                'https://bugzilla.redhat.com/2380320',
-                'https://bugzilla.redhat.com/2380321',
-                'https://bugzilla.redhat.com/2380322',
-                'https://bugzilla.redhat.com/2380326',
-                'https://bugzilla.redhat.com/2380327',
-                'https://bugzilla.redhat.com/2380334',
-                'https://bugzilla.redhat.com/2380335',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2338999',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359885',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359888',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359892',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359894',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359895',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359899',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359900',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359902',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359903',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359911',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359918',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359920',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359924',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359928',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359930',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359932',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359934',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359938',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359940',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359943',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359944',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359945',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359947',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359950',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359963',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359964',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359972',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2370920',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380264',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380273',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380274',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380278',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380280',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380283',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380284',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380290',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380291',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380295',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380298',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380306',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380308',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380309',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380310',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380312',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380313',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380320',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380321',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380322',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380326',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380327',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380334',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380335',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-13176',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21574',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21575',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21577',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21579',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21580',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21581',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21584',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21585',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21588',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30681',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30682',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30683',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30684',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30685',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30687',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30688',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30689',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30693',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30695',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30696',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30699',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30703',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30704',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30705',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30715',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30721',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30722',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50077',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50078',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50079',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50080',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50081',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50082',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50083',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50084',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50085',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50086',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50087',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50088',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50091',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50092',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50093',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50094',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50096',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50097',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50098',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50099',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50100',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50101',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50102',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50104',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-5399',
-                'https://errata.almalinux.org/9/ALSA-2025-16046.html',
-                'https://errata.rockylinux.org/RLSA-2025:15699',
-                'https://github.com/openssl/openssl/commit/07272b05b04836a762b4baa874958af51d513844',
-                'https://github.com/openssl/openssl/commit/2af62e74fb59bc469506bc37eb2990ea408d9467',
-                'https://github.com/openssl/openssl/commit/392dcb336405a0c94486aa6655057f59fd3a0902',
-                'https://github.com/openssl/openssl/commit/4b1cb94a734a7d4ec363ac0a215a25c181e11f65',
-                'https://github.com/openssl/openssl/commit/77c608f4c8857e63e98e66444e2e761c9627916f',
-                'https://github.openssl.org/openssl/extended-releases/commit/0d5fd1ab987f7571e2c955d8d8b638fc0fb54ded',
-                'https://github.openssl.org/openssl/extended-releases/commit/a2639000db19878d5d89586ae7b725080592ae86',
-                'https://linux.oracle.com/cve/CVE-2024-13176.html',
-                'https://linux.oracle.com/errata/ELSA-2025-16046.html',
-                'https://lists.debian.org/debian-lts-announce/2025/05/msg00028.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2024-13176',
-                'https://openssl-library.org/news/secadv/20250120.txt',
-                'https://security.netapp.com/advisory/ntap-20250124-0005/',
-                'https://security.netapp.com/advisory/ntap-20250418-0010/',
-                'https://security.netapp.com/advisory/ntap-20250502-0006/',
-                'https://ubuntu.com/security/notices/USN-7264-1',
-                'https://ubuntu.com/security/notices/USN-7278-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2024-13176',
-                'https://www.oracle.com/security-alerts/cpuapr2025.html#AppendixMSQL'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: Timing side-channel in ECDSA signature computation'
-            },
-            {
-              'cve':  'CVE-2025-9230',
-              'cvss': {
-                'redhat': {
-                  'v3score':  '5.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L'
-                }
-              },
-              'cwes': [
-                'CWE-125',
-                'CWE-787'
-              ],
-              'description':   'Issue summary: An application trying to decrypt CMS messages encrypted using\npassword based encryption can trigger an out-of-bounds read and write.\n\nImpact summary: This out-of-bounds read may trigger a crash which leads to\nDenial of Service for an application. The out-of-bounds write can cause\na memory corruption which can have various consequences including\na Denial of Service or Execution of attacker-supplied code.\n\nAlthough the consequences of a successful exploit of this vulnerability\ncould be severe, the probability that the attacker would be able to\nperform it is low. Besides, password based (PWRI) encryption support in CMS\nmessages is very rarely used. For that reason the issue was assessed as\nModerate severity according to our Security Policy.\n\nThe FIPS modules in 3.5, 3.4, 3.3, 3.2, 3.1 and 3.0 are not affected by this\nissue, as the CMS implementation is outside the OpenSSL FIPS module\nboundary.',
-              'diffID':        'sha256:a8663a64ac6012d90dd0ee7486edef956ab7dffa4f0363a6ef5f36c1b350c14e',
-              'fixedVersions': [
-                '3.3.5-r0'
-              ],
-              'installedVersion': '3.3.2-r1',
-              'packageName':      'libcrypto3',
-              'purl':             'pkg:apk/alpine/libcrypto3@3.3.2-r1?arch=ppc64le&distro=3.20.5',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2025/09/30/5',
-                'https://access.redhat.com/errata/RHSA-2025:21255',
-                'https://access.redhat.com/security/cve/CVE-2025-9230',
-                'https://bugzilla.redhat.com/2396054',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2396054',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-9230',
-                'https://errata.almalinux.org/9/ALSA-2025-21255.html',
-                'https://errata.rockylinux.org/RLSA-2025:21255',
-                'https://github.com/openssl/openssl/commit/5965ea5dd6960f36d8b7f74f8eac67a8eb8f2b45',
-                'https://github.com/openssl/openssl/commit/9e91358f365dee6c446dcdcdb01c04d2743fd280',
-                'https://github.com/openssl/openssl/commit/a79c4ce559c6a3a8fd4109e9f33c1185d5bf2def',
-                'https://github.com/openssl/openssl/commit/b5282d677551afda7d20e9c00e09561b547b2dfd',
-                'https://github.com/openssl/openssl/commit/bae259a211ada6315dc50900686daaaaaa55f482',
-                'https://github.openssl.org/openssl/extended-releases/commit/c2b96348bfa662f25f4fabf81958ae822063dae3',
-                'https://github.openssl.org/openssl/extended-releases/commit/dfbaf161d8dafc1132dd88cd48ad990ed9b4c8ba',
-                'https://linux.oracle.com/cve/CVE-2025-9230.html',
-                'https://linux.oracle.com/errata/ELSA-2026-0337.html',
-                'https://lists.debian.org/debian-lts-announce/2025/10/msg00001.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2025-9230',
-                'https://openssl-library.org/news/secadv/20250930.txt',
-                'https://ubuntu.com/security/notices/USN-7786-1',
-                'https://www.cve.org/CVERecord?id=CVE-2025-9230'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: Out-of-bounds read & write in RFC 3211 KEK Unwrap'
-            },
-            {
-              'cve':  'CVE-2025-9231',
-              'cvss': {
-                'redhat': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-385'
-              ],
-              'description':   'Issue summary: A timing side-channel which could potentially allow remote\nrecovery of the private key exists in the SM2 algorithm implementation on 64 bit\nARM platforms.\n\nImpact summary: A timing side-channel in SM2 signature computations on 64 bit\nARM platforms could allow recovering the private key by an attacker..\n\nWhile remote key recovery over a network was not attempted by the reporter,\ntiming measurements revealed a timing signal which may allow such an attack.\n\nOpenSSL does not directly support certificates with SM2 keys in TLS, and so\nthis CVE is not relevant in most TLS contexts.  However, given that it is\npossible to add support for such certificates via a custom provider, coupled\nwith the fact that in such a custom provider context the private key may be\nrecoverable via remote timing measurements, we consider this to be a Moderate\nseverity issue.\n\nThe FIPS modules in 3.5, 3.4, 3.3, 3.2, 3.1 and 3.0 are not affected by this\nissue, as SM2 is not an approved algorithm.',
-              'diffID':        'sha256:a8663a64ac6012d90dd0ee7486edef956ab7dffa4f0363a6ef5f36c1b350c14e',
-              'fixedVersions': [
-                '3.3.5-r0'
-              ],
-              'installedVersion': '3.3.2-r1',
-              'packageName':      'libcrypto3',
-              'purl':             'pkg:apk/alpine/libcrypto3@3.3.2-r1?arch=ppc64le&distro=3.20.5',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2025/09/30/5',
-                'https://access.redhat.com/security/cve/CVE-2025-9231',
-                'https://github.com/openssl/openssl/commit/567f64386e43683888212226824b6a179885a0fe',
-                'https://github.com/openssl/openssl/commit/cba616c26ac8e7b37de5e77762e505ba5ca51698',
-                'https://github.com/openssl/openssl/commit/eed5adc9f969d77c94f213767acbb41ff923b6f4',
-                'https://github.com/openssl/openssl/commit/fc47a2ec078912b3e914fab5734535e76c4820c2',
-                'https://nvd.nist.gov/vuln/detail/CVE-2025-9231',
-                'https://openssl-library.org/news/secadv/20250930.txt',
-                'https://ubuntu.com/security/notices/USN-7786-1',
-                'https://www.cve.org/CVERecord?id=CVE-2025-9231'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: Timing side-channel in SM2 algorithm on 64 bit ARM'
-            },
-            {
-              'cve':  'CVE-2025-9232',
-              'cvss': {
-                'redhat': {
-                  'v3score':  '3.1',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L'
-                }
-              },
-              'cwes': [
-                'CWE-125'
-              ],
-              'description':   "Issue summary: An application using the OpenSSL HTTP client API functions may\ntrigger an out-of-bounds read if the 'no_proxy' environment variable is set and\nthe host portion of the authority component of the HTTP URL is an IPv6 address.\n\nImpact summary: An out-of-bounds read can trigger a crash which leads to\nDenial of Service for an application.\n\nThe OpenSSL HTTP client API functions can be used directly by applications\nbut they are also used by the OCSP client functions and CMP (Certificate\nManagement Protocol) client implementation in OpenSSL. However the URLs used\nby these implementations are unlikely to be controlled by an attacker.\n\nIn this vulnerable code the out of bounds read can only trigger a crash.\nFurthermore the vulnerability requires an attacker-controlled URL to be\npassed from an application to the OpenSSL function and the user has to have\na 'no_proxy' environment variable set. For the aforementioned reasons the\nissue was assessed as Low severity.\n\nThe vulnerable code was introduced in the following patch releases:\n3.0.16, 3.1.8, 3.2.4, 3.3.3, 3.4.0 and 3.5.0.\n\nThe FIPS modules in 3.5, 3.4, 3.3, 3.2, 3.1 and 3.0 are not affected by this\nissue, as the HTTP client implementation is outside the OpenSSL FIPS module\nboundary.",
-              'diffID':        'sha256:a8663a64ac6012d90dd0ee7486edef956ab7dffa4f0363a6ef5f36c1b350c14e',
-              'fixedVersions': [
-                '3.3.5-r0'
-              ],
-              'installedVersion': '3.3.2-r1',
-              'packageName':      'libcrypto3',
-              'purl':             'pkg:apk/alpine/libcrypto3@3.3.2-r1?arch=ppc64le&distro=3.20.5',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2025/09/30/5',
-                'https://access.redhat.com/security/cve/CVE-2025-9232',
-                'https://github.com/openssl/openssl/commit/2b4ec20e47959170422922eaff25346d362dcb35',
-                'https://github.com/openssl/openssl/commit/654dc11d23468a74fc8ea4672b702dd3feb7be4b',
-                'https://github.com/openssl/openssl/commit/7cf21a30513c9e43c4bc3836c237cf086e194af3',
-                'https://github.com/openssl/openssl/commit/89e790ac431125a4849992858490bed6b225eadf',
-                'https://github.com/openssl/openssl/commit/bbf38c034cdabd0a13330abcc4855c866f53d2e0',
-                'https://nvd.nist.gov/vuln/detail/CVE-2025-9232',
-                'https://openssl-library.org/news/secadv/20250930.txt',
-                'https://ubuntu.com/security/notices/USN-7786-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2025-9232'
-              ],
-              'severity':   'LOW',
-              'suppressed': false,
-              'title':      'openssl: Out-of-bounds read in HTTP client no_proxy handling'
-            },
-            {
-              'cve':  'CVE-2024-12797',
-              'cvss': {
-                'redhat': {
-                  'v3score':  '7.4',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-392'
-              ],
-              'description':   "Issue summary: Clients using RFC7250 Raw Public Keys (RPKs) to authenticate a\nserver may fail to notice that the server was not authenticated, because\nhandshakes don't abort as expected when the SSL_VERIFY_PEER verification mode\nis set.\n\nImpact summary: TLS and DTLS connections using raw public keys may be\nvulnerable to man-in-middle attacks when server authentication failure is not\ndetected by clients.\n\nRPKs are disabled by default in both TLS clients and TLS servers.  The issue\nonly arises when TLS clients explicitly enable RPK use by the server, and the\nserver, likewise, enables sending of an RPK instead of an X.509 certificate\nchain.  The affected clients are those that then rely on the handshake to\nfail when the server's RPK fails to match one of the expected public keys,\nby setting the verification mode to SSL_VERIFY_PEER.\n\nClients that enable server-side raw public keys can still find out that raw\npublic key verification failed by calling SSL_get_verify_result(), and those\nthat do, and take appropriate action, are not affected.  This issue was\nintroduced in the initial implementation of RPK support in OpenSSL 3.2.\n\nThe FIPS modules in 3.4, 3.3, 3.2, 3.1 and 3.0 are not affected by this issue.",
-              'diffID':        'sha256:a8663a64ac6012d90dd0ee7486edef956ab7dffa4f0363a6ef5f36c1b350c14e',
-              'fixedVersions': [
-                '3.3.3-r0'
-              ],
-              'installedVersion': '3.3.2-r1',
-              'packageName':      'libssl3',
-              'purl':             'pkg:apk/alpine/libssl3@3.3.2-r1?arch=ppc64le&distro=3.20.5',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2025/02/11/3',
-                'http://www.openwall.com/lists/oss-security/2025/02/11/4',
-                'https://access.redhat.com/errata/RHSA-2025:1330',
-                'https://access.redhat.com/security/cve/CVE-2024-12797',
-                'https://bugzilla.redhat.com/2342757',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2342757',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-12797',
-                'https://errata.almalinux.org/9/ALSA-2025-1330.html',
-                'https://errata.rockylinux.org/RLSA-2025:1330',
-                'https://github.com/openssl/openssl/commit/738d4f9fdeaad57660dcba50a619fafced3fd5e9',
-                'https://github.com/openssl/openssl/commit/798779d43494549b611233f92652f0da5328fbe7',
-                'https://github.com/openssl/openssl/commit/87ebd203feffcf92ad5889df92f90bb0ee10a699',
-                'https://github.com/pyca/cryptography',
-                'https://github.com/pyca/cryptography/security/advisories/GHSA-79v4-65xg-pq4g',
-                'https://linux.oracle.com/cve/CVE-2024-12797.html',
-                'https://linux.oracle.com/errata/ELSA-2025-1330.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2024-12797',
-                'https://openssl-library.org/news/secadv/20250211.txt',
-                'https://security.netapp.com/advisory/ntap-20250214-0001/',
-                'https://ubuntu.com/security/notices/USN-7264-1',
-                'https://www.cve.org/CVERecord?id=CVE-2024-12797'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      "openssl: RFC7250 handshakes with unauthenticated servers don't abort as expected"
-            },
-            {
-              'cve':  'CVE-2024-13176',
-              'cvss': {
-                'redhat': {
-                  'v3score':  '4.7',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-385'
-              ],
-              'description':   'Issue summary: A timing side-channel which could potentially allow recovering\nthe private key exists in the ECDSA signature computation.\n\nImpact summary: A timing side-channel in ECDSA signature computations\ncould allow recovering the private key by an attacker. However, measuring\nthe timing would require either local access to the signing application or\na very fast network connection with low latency.\n\nThere is a timing signal of around 300 nanoseconds when the top word of\nthe inverted ECDSA nonce value is zero. This can happen with significant\nprobability only for some of the supported elliptic curves. In particular\nthe NIST P-521 curve is affected. To be able to measure this leak, the attacker\nprocess must either be located in the same physical computer or must\nhave a very fast network connection with low latency. For that reason\nthe severity of this vulnerability is Low.\n\nThe FIPS modules in 3.4, 3.3, 3.2, 3.1 and 3.0 are affected by this issue.',
-              'diffID':        'sha256:a8663a64ac6012d90dd0ee7486edef956ab7dffa4f0363a6ef5f36c1b350c14e',
-              'fixedVersions': [
-                '3.3.2-r2'
-              ],
-              'installedVersion': '3.3.2-r1',
-              'packageName':      'libssl3',
-              'purl':             'pkg:apk/alpine/libssl3@3.3.2-r1?arch=ppc64le&distro=3.20.5',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2025/01/20/2',
-                'https://access.redhat.com/errata/RHSA-2025:16046',
-                'https://access.redhat.com/security/cve/CVE-2024-13176',
-                'https://bugzilla.redhat.com/2359885',
-                'https://bugzilla.redhat.com/2359888',
-                'https://bugzilla.redhat.com/2359892',
-                'https://bugzilla.redhat.com/2359894',
-                'https://bugzilla.redhat.com/2359895',
-                'https://bugzilla.redhat.com/2359899',
-                'https://bugzilla.redhat.com/2359900',
-                'https://bugzilla.redhat.com/2359902',
-                'https://bugzilla.redhat.com/2359903',
-                'https://bugzilla.redhat.com/2359911',
-                'https://bugzilla.redhat.com/2359918',
-                'https://bugzilla.redhat.com/2359920',
-                'https://bugzilla.redhat.com/2359924',
-                'https://bugzilla.redhat.com/2359928',
-                'https://bugzilla.redhat.com/2359930',
-                'https://bugzilla.redhat.com/2359932',
-                'https://bugzilla.redhat.com/2359934',
-                'https://bugzilla.redhat.com/2359938',
-                'https://bugzilla.redhat.com/2359940',
-                'https://bugzilla.redhat.com/2359943',
-                'https://bugzilla.redhat.com/2359944',
-                'https://bugzilla.redhat.com/2359945',
-                'https://bugzilla.redhat.com/2359947',
-                'https://bugzilla.redhat.com/2359950',
-                'https://bugzilla.redhat.com/2359963',
-                'https://bugzilla.redhat.com/2359964',
-                'https://bugzilla.redhat.com/2359972',
-                'https://bugzilla.redhat.com/2370920',
-                'https://bugzilla.redhat.com/2380264',
-                'https://bugzilla.redhat.com/2380273',
-                'https://bugzilla.redhat.com/2380274',
-                'https://bugzilla.redhat.com/2380278',
-                'https://bugzilla.redhat.com/2380280',
-                'https://bugzilla.redhat.com/2380283',
-                'https://bugzilla.redhat.com/2380284',
-                'https://bugzilla.redhat.com/2380290',
-                'https://bugzilla.redhat.com/2380291',
-                'https://bugzilla.redhat.com/2380295',
-                'https://bugzilla.redhat.com/2380298',
-                'https://bugzilla.redhat.com/2380306',
-                'https://bugzilla.redhat.com/2380308',
-                'https://bugzilla.redhat.com/2380309',
-                'https://bugzilla.redhat.com/2380310',
-                'https://bugzilla.redhat.com/2380312',
-                'https://bugzilla.redhat.com/2380313',
-                'https://bugzilla.redhat.com/2380320',
-                'https://bugzilla.redhat.com/2380321',
-                'https://bugzilla.redhat.com/2380322',
-                'https://bugzilla.redhat.com/2380326',
-                'https://bugzilla.redhat.com/2380327',
-                'https://bugzilla.redhat.com/2380334',
-                'https://bugzilla.redhat.com/2380335',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2338999',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359885',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359888',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359892',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359894',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359895',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359899',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359900',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359902',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359903',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359911',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359918',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359920',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359924',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359928',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359930',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359932',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359934',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359938',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359940',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359943',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359944',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359945',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359947',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359950',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359963',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359964',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359972',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2370920',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380264',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380273',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380274',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380278',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380280',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380283',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380284',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380290',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380291',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380295',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380298',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380306',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380308',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380309',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380310',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380312',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380313',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380320',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380321',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380322',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380326',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380327',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380334',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380335',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-13176',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21574',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21575',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21577',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21579',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21580',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21581',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21584',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21585',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21588',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30681',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30682',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30683',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30684',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30685',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30687',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30688',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30689',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30693',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30695',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30696',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30699',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30703',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30704',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30705',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30715',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30721',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30722',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50077',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50078',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50079',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50080',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50081',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50082',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50083',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50084',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50085',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50086',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50087',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50088',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50091',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50092',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50093',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50094',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50096',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50097',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50098',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50099',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50100',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50101',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50102',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50104',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-5399',
-                'https://errata.almalinux.org/9/ALSA-2025-16046.html',
-                'https://errata.rockylinux.org/RLSA-2025:15699',
-                'https://github.com/openssl/openssl/commit/07272b05b04836a762b4baa874958af51d513844',
-                'https://github.com/openssl/openssl/commit/2af62e74fb59bc469506bc37eb2990ea408d9467',
-                'https://github.com/openssl/openssl/commit/392dcb336405a0c94486aa6655057f59fd3a0902',
-                'https://github.com/openssl/openssl/commit/4b1cb94a734a7d4ec363ac0a215a25c181e11f65',
-                'https://github.com/openssl/openssl/commit/77c608f4c8857e63e98e66444e2e761c9627916f',
-                'https://github.openssl.org/openssl/extended-releases/commit/0d5fd1ab987f7571e2c955d8d8b638fc0fb54ded',
-                'https://github.openssl.org/openssl/extended-releases/commit/a2639000db19878d5d89586ae7b725080592ae86',
-                'https://linux.oracle.com/cve/CVE-2024-13176.html',
-                'https://linux.oracle.com/errata/ELSA-2025-16046.html',
-                'https://lists.debian.org/debian-lts-announce/2025/05/msg00028.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2024-13176',
-                'https://openssl-library.org/news/secadv/20250120.txt',
-                'https://security.netapp.com/advisory/ntap-20250124-0005/',
-                'https://security.netapp.com/advisory/ntap-20250418-0010/',
-                'https://security.netapp.com/advisory/ntap-20250502-0006/',
-                'https://ubuntu.com/security/notices/USN-7264-1',
-                'https://ubuntu.com/security/notices/USN-7278-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2024-13176',
-                'https://www.oracle.com/security-alerts/cpuapr2025.html#AppendixMSQL'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: Timing side-channel in ECDSA signature computation'
-            },
-            {
-              'cve':  'CVE-2025-9230',
-              'cvss': {
-                'redhat': {
-                  'v3score':  '5.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L'
-                }
-              },
-              'cwes': [
-                'CWE-125',
-                'CWE-787'
-              ],
-              'description':   'Issue summary: An application trying to decrypt CMS messages encrypted using\npassword based encryption can trigger an out-of-bounds read and write.\n\nImpact summary: This out-of-bounds read may trigger a crash which leads to\nDenial of Service for an application. The out-of-bounds write can cause\na memory corruption which can have various consequences including\na Denial of Service or Execution of attacker-supplied code.\n\nAlthough the consequences of a successful exploit of this vulnerability\ncould be severe, the probability that the attacker would be able to\nperform it is low. Besides, password based (PWRI) encryption support in CMS\nmessages is very rarely used. For that reason the issue was assessed as\nModerate severity according to our Security Policy.\n\nThe FIPS modules in 3.5, 3.4, 3.3, 3.2, 3.1 and 3.0 are not affected by this\nissue, as the CMS implementation is outside the OpenSSL FIPS module\nboundary.',
-              'diffID':        'sha256:a8663a64ac6012d90dd0ee7486edef956ab7dffa4f0363a6ef5f36c1b350c14e',
-              'fixedVersions': [
-                '3.3.5-r0'
-              ],
-              'installedVersion': '3.3.2-r1',
-              'packageName':      'libssl3',
-              'purl':             'pkg:apk/alpine/libssl3@3.3.2-r1?arch=ppc64le&distro=3.20.5',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2025/09/30/5',
-                'https://access.redhat.com/errata/RHSA-2025:21255',
-                'https://access.redhat.com/security/cve/CVE-2025-9230',
-                'https://bugzilla.redhat.com/2396054',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2396054',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-9230',
-                'https://errata.almalinux.org/9/ALSA-2025-21255.html',
-                'https://errata.rockylinux.org/RLSA-2025:21255',
-                'https://github.com/openssl/openssl/commit/5965ea5dd6960f36d8b7f74f8eac67a8eb8f2b45',
-                'https://github.com/openssl/openssl/commit/9e91358f365dee6c446dcdcdb01c04d2743fd280',
-                'https://github.com/openssl/openssl/commit/a79c4ce559c6a3a8fd4109e9f33c1185d5bf2def',
-                'https://github.com/openssl/openssl/commit/b5282d677551afda7d20e9c00e09561b547b2dfd',
-                'https://github.com/openssl/openssl/commit/bae259a211ada6315dc50900686daaaaaa55f482',
-                'https://github.openssl.org/openssl/extended-releases/commit/c2b96348bfa662f25f4fabf81958ae822063dae3',
-                'https://github.openssl.org/openssl/extended-releases/commit/dfbaf161d8dafc1132dd88cd48ad990ed9b4c8ba',
-                'https://linux.oracle.com/cve/CVE-2025-9230.html',
-                'https://linux.oracle.com/errata/ELSA-2026-0337.html',
-                'https://lists.debian.org/debian-lts-announce/2025/10/msg00001.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2025-9230',
-                'https://openssl-library.org/news/secadv/20250930.txt',
-                'https://ubuntu.com/security/notices/USN-7786-1',
-                'https://www.cve.org/CVERecord?id=CVE-2025-9230'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: Out-of-bounds read & write in RFC 3211 KEK Unwrap'
-            },
-            {
-              'cve':  'CVE-2025-9231',
-              'cvss': {
-                'redhat': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-385'
-              ],
-              'description':   'Issue summary: A timing side-channel which could potentially allow remote\nrecovery of the private key exists in the SM2 algorithm implementation on 64 bit\nARM platforms.\n\nImpact summary: A timing side-channel in SM2 signature computations on 64 bit\nARM platforms could allow recovering the private key by an attacker..\n\nWhile remote key recovery over a network was not attempted by the reporter,\ntiming measurements revealed a timing signal which may allow such an attack.\n\nOpenSSL does not directly support certificates with SM2 keys in TLS, and so\nthis CVE is not relevant in most TLS contexts.  However, given that it is\npossible to add support for such certificates via a custom provider, coupled\nwith the fact that in such a custom provider context the private key may be\nrecoverable via remote timing measurements, we consider this to be a Moderate\nseverity issue.\n\nThe FIPS modules in 3.5, 3.4, 3.3, 3.2, 3.1 and 3.0 are not affected by this\nissue, as SM2 is not an approved algorithm.',
-              'diffID':        'sha256:a8663a64ac6012d90dd0ee7486edef956ab7dffa4f0363a6ef5f36c1b350c14e',
-              'fixedVersions': [
-                '3.3.5-r0'
-              ],
-              'installedVersion': '3.3.2-r1',
-              'packageName':      'libssl3',
-              'purl':             'pkg:apk/alpine/libssl3@3.3.2-r1?arch=ppc64le&distro=3.20.5',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2025/09/30/5',
-                'https://access.redhat.com/security/cve/CVE-2025-9231',
-                'https://github.com/openssl/openssl/commit/567f64386e43683888212226824b6a179885a0fe',
-                'https://github.com/openssl/openssl/commit/cba616c26ac8e7b37de5e77762e505ba5ca51698',
-                'https://github.com/openssl/openssl/commit/eed5adc9f969d77c94f213767acbb41ff923b6f4',
-                'https://github.com/openssl/openssl/commit/fc47a2ec078912b3e914fab5734535e76c4820c2',
-                'https://nvd.nist.gov/vuln/detail/CVE-2025-9231',
-                'https://openssl-library.org/news/secadv/20250930.txt',
-                'https://ubuntu.com/security/notices/USN-7786-1',
-                'https://www.cve.org/CVERecord?id=CVE-2025-9231'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: Timing side-channel in SM2 algorithm on 64 bit ARM'
-            },
-            {
-              'cve':  'CVE-2025-9232',
-              'cvss': {
-                'redhat': {
-                  'v3score':  '3.1',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L'
-                }
-              },
-              'cwes': [
-                'CWE-125'
-              ],
-              'description':   "Issue summary: An application using the OpenSSL HTTP client API functions may\ntrigger an out-of-bounds read if the 'no_proxy' environment variable is set and\nthe host portion of the authority component of the HTTP URL is an IPv6 address.\n\nImpact summary: An out-of-bounds read can trigger a crash which leads to\nDenial of Service for an application.\n\nThe OpenSSL HTTP client API functions can be used directly by applications\nbut they are also used by the OCSP client functions and CMP (Certificate\nManagement Protocol) client implementation in OpenSSL. However the URLs used\nby these implementations are unlikely to be controlled by an attacker.\n\nIn this vulnerable code the out of bounds read can only trigger a crash.\nFurthermore the vulnerability requires an attacker-controlled URL to be\npassed from an application to the OpenSSL function and the user has to have\na 'no_proxy' environment variable set. For the aforementioned reasons the\nissue was assessed as Low severity.\n\nThe vulnerable code was introduced in the following patch releases:\n3.0.16, 3.1.8, 3.2.4, 3.3.3, 3.4.0 and 3.5.0.\n\nThe FIPS modules in 3.5, 3.4, 3.3, 3.2, 3.1 and 3.0 are not affected by this\nissue, as the HTTP client implementation is outside the OpenSSL FIPS module\nboundary.",
-              'diffID':        'sha256:a8663a64ac6012d90dd0ee7486edef956ab7dffa4f0363a6ef5f36c1b350c14e',
-              'fixedVersions': [
-                '3.3.5-r0'
-              ],
-              'installedVersion': '3.3.2-r1',
-              'packageName':      'libssl3',
-              'purl':             'pkg:apk/alpine/libssl3@3.3.2-r1?arch=ppc64le&distro=3.20.5',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2025/09/30/5',
-                'https://access.redhat.com/security/cve/CVE-2025-9232',
-                'https://github.com/openssl/openssl/commit/2b4ec20e47959170422922eaff25346d362dcb35',
-                'https://github.com/openssl/openssl/commit/654dc11d23468a74fc8ea4672b702dd3feb7be4b',
-                'https://github.com/openssl/openssl/commit/7cf21a30513c9e43c4bc3836c237cf086e194af3',
-                'https://github.com/openssl/openssl/commit/89e790ac431125a4849992858490bed6b225eadf',
-                'https://github.com/openssl/openssl/commit/bbf38c034cdabd0a13330abcc4855c866f53d2e0',
-                'https://nvd.nist.gov/vuln/detail/CVE-2025-9232',
-                'https://openssl-library.org/news/secadv/20250930.txt',
-                'https://ubuntu.com/security/notices/USN-7786-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2025-9232'
-              ],
-              'severity':   'LOW',
-              'suppressed': false,
-              'title':      'openssl: Out-of-bounds read in HTTP client no_proxy handling'
-            },
-            {
-              'cve':  'CVE-2025-26519',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-787'
-              ],
-              'description':   'musl libc 0.9.13 through 1.2.5 before 1.2.6 has an out-of-bounds write vulnerability when an attacker can trigger iconv conversion of untrusted EUC-KR text to UTF-8.',
-              'diffID':        'sha256:a8663a64ac6012d90dd0ee7486edef956ab7dffa4f0363a6ef5f36c1b350c14e',
-              'fixedVersions': [
-                '1.2.5-r1'
-              ],
-              'installedVersion': '1.2.5-r0',
-              'packageName':      'musl',
-              'purl':             'pkg:apk/alpine/musl@1.2.5-r0?arch=ppc64le&distro=3.20.5',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2025/02/13/2',
-                'http://www.openwall.com/lists/oss-security/2025/02/13/3',
-                'http://www.openwall.com/lists/oss-security/2025/02/13/4',
-                'http://www.openwall.com/lists/oss-security/2025/02/13/5',
-                'http://www.openwall.com/lists/oss-security/2025/02/14/5',
-                'http://www.openwall.com/lists/oss-security/2025/02/14/6',
-                'https://git.musl-libc.org/cgit/musl/commit/?id=c47ad25ea3b484e10326f933e927c0bc8cded3da',
-                'https://git.musl-libc.org/cgit/musl/commit/?id=e5adcd97b5196e29991b524237381a0202a60659',
-                'https://www.openwall.com/lists/oss-security/2025/02/13/2'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'musl libc 0.9.13 through 1.2.5 before 1.2.6 has an out-of-bounds write ...'
-            },
-            {
-              'cve':  'CVE-2025-26519',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-787'
-              ],
-              'description':   'musl libc 0.9.13 through 1.2.5 before 1.2.6 has an out-of-bounds write vulnerability when an attacker can trigger iconv conversion of untrusted EUC-KR text to UTF-8.',
-              'diffID':        'sha256:a8663a64ac6012d90dd0ee7486edef956ab7dffa4f0363a6ef5f36c1b350c14e',
-              'fixedVersions': [
-                '1.2.5-r1'
-              ],
-              'installedVersion': '1.2.5-r0',
-              'packageName':      'musl-utils',
-              'purl':             'pkg:apk/alpine/musl-utils@1.2.5-r0?arch=ppc64le&distro=3.20.5',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2025/02/13/2',
-                'http://www.openwall.com/lists/oss-security/2025/02/13/3',
-                'http://www.openwall.com/lists/oss-security/2025/02/13/4',
-                'http://www.openwall.com/lists/oss-security/2025/02/13/5',
-                'http://www.openwall.com/lists/oss-security/2025/02/14/5',
-                'http://www.openwall.com/lists/oss-security/2025/02/14/6',
-                'https://git.musl-libc.org/cgit/musl/commit/?id=c47ad25ea3b484e10326f933e927c0bc8cded3da',
-                'https://git.musl-libc.org/cgit/musl/commit/?id=e5adcd97b5196e29991b524237381a0202a60659',
-                'https://www.openwall.com/lists/oss-security/2025/02/13/2'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'musl libc 0.9.13 through 1.2.5 before 1.2.6 has an out-of-bounds write ...'
-            },
-            {
-              'cve':  'CVE-2024-58251',
-              'cwes': [
-                'CWE-150'
-              ],
-              'description':   'In netstat in BusyBox through 1.37.0, local users can launch of network application with an argv[0] containing an ANSI terminal escape sequence, leading to a denial of service (terminal locked up) when netstat is used by a victim.',
-              'diffID':        'sha256:a8663a64ac6012d90dd0ee7486edef956ab7dffa4f0363a6ef5f36c1b350c14e',
-              'fixedVersions': [
-                '1.36.1-r31'
-              ],
-              'installedVersion': '1.36.1-r29',
-              'packageName':      'ssl_client',
-              'purl':             'pkg:apk/alpine/ssl_client@1.36.1-r29?arch=ppc64le&distro=3.20.5',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2025/04/23/6',
-                'https://bugs.busybox.net/show_bug.cgi?id=15922',
-                'https://www.busybox.net',
-                'https://www.busybox.net/downloads/',
-                'https://www.cve.org/CVERecord?id=CVE-2024-58251'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'In netstat in BusyBox through 1.37.0, local users can launch of networ ...'
-            },
-            {
-              'cve':  'CVE-2025-46394',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '3.3',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-451'
-              ],
-              'description':   'In tar in BusyBox through 1.37.0, a TAR archive can have filenames hidden from a listing through the use of terminal escape sequences.',
-              'diffID':        'sha256:a8663a64ac6012d90dd0ee7486edef956ab7dffa4f0363a6ef5f36c1b350c14e',
-              'fixedVersions': [
-                '1.36.1-r31'
-              ],
-              'installedVersion': '1.36.1-r29',
-              'packageName':      'ssl_client',
-              'purl':             'pkg:apk/alpine/ssl_client@1.36.1-r29?arch=ppc64le&distro=3.20.5',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2025/04/23/5',
-                'http://www.openwall.com/lists/oss-security/2025/04/24/3',
-                'https://bugs.busybox.net/show_bug.cgi?id=16018',
-                'https://lists.busybox.net/pipermail/busybox/2024-July/090806.html',
-                'https://lists.busybox.net/pipermail/busybox/2024-July/090814.html',
-                'https://www.busybox.net',
-                'https://www.busybox.net/downloads/',
-                'https://www.cve.org/CVERecord?id=CVE-2025-46394',
-                'https://www.openwall.com/lists/oss-security/2025/04/23/1'
-              ],
-              'severity':   'LOW',
-              'suppressed': false,
-              'title':      'In tar in BusyBox through 1.37.0, a TAR archive can have filenames hid ...'
-            }
-          ]
-        }
-      ],
-      'summary': {
-        'critical':   0,
-        'high':       4,
-        'low':        5,
-        'medium':     9,
-        'suppressed': 0,
-        'unknown':    0
-      }
-    }
-  },
-  {
-    'id':    'default/ee4e09b4743431c19845661de103815782e8e4e166a1340d8ae14ab58d58b073',
-    'type':  'storage.sbomscanner.kubewarden.io.vulnerabilityreport',
-    'links': {
-      'patch':  'https://localhost:8005/v1/storage.sbomscanner.kubewarden.io.vulnerabilityreports/default/ee4e09b4743431c19845661de103815782e8e4e166a1340d8ae14ab58d58b073',
-      'remove': 'https://localhost:8005/v1/storage.sbomscanner.kubewarden.io.vulnerabilityreports/default/ee4e09b4743431c19845661de103815782e8e4e166a1340d8ae14ab58d58b073',
-      'self':   'https://localhost:8005/v1/storage.sbomscanner.kubewarden.io.vulnerabilityreports/default/ee4e09b4743431c19845661de103815782e8e4e166a1340d8ae14ab58d58b073',
-      'update': 'https://localhost:8005/v1/storage.sbomscanner.kubewarden.io.vulnerabilityreports/default/ee4e09b4743431c19845661de103815782e8e4e166a1340d8ae14ab58d58b073',
-      'view':   'https://localhost:8005/apis/storage.sbomscanner.kubewarden.io/v1alpha1/namespaces/default/vulnerabilityreports/ee4e09b4743431c19845661de103815782e8e4e166a1340d8ae14ab58d58b073'
-    },
-    'apiVersion':    'storage.sbomscanner.kubewarden.io/v1alpha1',
-    'imageMetadata': {
-      'digest':      'sha256:2c938e2d4c76142f33467f9157c24cb63849e11e0d7540ae70e99ab69f6fbd44',
-      'platform':    'linux/amd64',
-      'registry':    'demo-02',
-      'registryURI': 'ghcr.io',
-      'repository':  'linuxcontainers/alpine',
-      'tag':         '3.18.0'
-    },
-    'kind':     'VulnerabilityReport',
-    'metadata': {
-      'creationTimestamp': '2026-01-09T22:46:08Z',
-      'fields':            [
-        'ee4e09b4743431c19845661de103815782e8e4e166a1340d8ae14ab58d58b073',
-        'ghcr.io/linuxcontainers/alpine:3.18.0',
-        'linux/amd64',
-        '40 (0 suppressed)'
-      ],
-      'labels': {
-        'app.kubernetes.io/managed-by':          'sbomscanner',
-        'app.kubernetes.io/part-of':             'sbomscanner',
-        'sbomscanner.kubewarden.io/scanjob-uid': '42184d01-4b15-466f-98aa-e802d1b6b6b8'
-      },
-      'name':            'ee4e09b4743431c19845661de103815782e8e4e166a1340d8ae14ab58d58b073',
-      'namespace':       'default',
-      'ownerReferences': [
-        {
-          'apiVersion':         'storage.sbomscanner.kubewarden.io/v1alpha1',
-          'blockOwnerDeletion': true,
-          'controller':         true,
-          'kind':               'SBOM',
-          'name':               'ee4e09b4743431c19845661de103815782e8e4e166a1340d8ae14ab58d58b073',
-          'uid':                '519fb208-5da1-48d9-91f1-71dd8b761c21'
-        }
-      ],
-      'relationships': [
-        {
-          'fromId':   'default/ee4e09b4743431c19845661de103815782e8e4e166a1340d8ae14ab58d58b073',
-          'fromType': 'storage.sbomscanner.kubewarden.io.sbom',
-          'rel':      'owner',
-          'state':    'active',
-          'message':  'Resource is current'
-        }
-      ],
-      'resourceVersion': '4',
-      'state':           {
-        'error':         false,
-        'message':       'Resource is current',
-        'name':          'active',
-        'transitioning': false
-      },
-      'uid': 'b4f9d70e-95d2-4060-8357-171237cf067e'
-    },
-    'report': {
-      'results': [
-        {
-          'class':           'os-pkgs',
-          'target':          '/var/run/worker/trivy.sbom.628387740.json (alpine 3.18.0)',
-          'type':            'alpine',
-          'vulnerabilities': [
-            {
-              'cve':  'CVE-2023-42363',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.5',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.8',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   'A use-after-free vulnerability was discovered in xasprintf function in xfuncs_printf.c:344 in BusyBox v.1.36.1.',
-              'diffID':        'sha256:10d47f76a792d77a3508f82b3ed8d1c8e9701d2aa1ece5e74cacd89b30e35b3f',
-              'fixedVersions': [
-                '1.36.1-r7'
-              ],
-              'installedVersion': '1.36.1-r1',
-              'packageName':      'busybox',
-              'purl':             'pkg:apk/alpine/busybox@1.36.1-r1?arch=x86_64&distro=3.18.0',
-              'references':       [
-                'http://lists.busybox.net/pipermail/busybox/2024-May/090760.html',
-                'https://access.redhat.com/security/cve/CVE-2023-42363',
-                'https://bugs.busybox.net/show_bug.cgi?id=15865',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-42363',
-                'https://ubuntu.com/security/notices/USN-6961-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-42363'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk'
-            },
-            {
-              'cve':  'CVE-2023-42364',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.5',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.8',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   'A use-after-free vulnerability in BusyBox v.1.36.1 allows attackers to cause a denial of service via a crafted awk pattern in the awk.c evaluate function.',
-              'diffID':        'sha256:10d47f76a792d77a3508f82b3ed8d1c8e9701d2aa1ece5e74cacd89b30e35b3f',
-              'fixedVersions': [
-                '1.36.1-r7'
-              ],
-              'installedVersion': '1.36.1-r1',
-              'packageName':      'busybox',
-              'purl':             'pkg:apk/alpine/busybox@1.36.1-r1?arch=x86_64&distro=3.18.0',
-              'references':       [
-                'http://lists.busybox.net/pipermail/busybox/2024-May/090762.html',
-                'https://access.redhat.com/security/cve/CVE-2023-42364',
-                'https://bugs.busybox.net/show_bug.cgi?id=15868',
-                'https://gitlab.alpinelinux.org/alpine/aports/-/blob/master/main/busybox/CVE-2023-42364-CVE-2023-42365.patch',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-42364',
-                'https://ubuntu.com/security/notices/USN-6961-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-42364'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'busybox: use-after-free'
-            },
-            {
-              'cve':  'CVE-2023-42365',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.5',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.8',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   'A use-after-free vulnerability was discovered in BusyBox v.1.36.1 via a crafted awk pattern in the awk.c copyvar function.',
-              'diffID':        'sha256:10d47f76a792d77a3508f82b3ed8d1c8e9701d2aa1ece5e74cacd89b30e35b3f',
-              'fixedVersions': [
-                '1.36.1-r7'
-              ],
-              'installedVersion': '1.36.1-r1',
-              'packageName':      'busybox',
-              'purl':             'pkg:apk/alpine/busybox@1.36.1-r1?arch=x86_64&distro=3.18.0',
-              'references':       [
-                'http://lists.busybox.net/pipermail/busybox/2024-May/090762.html',
-                'https://access.redhat.com/security/cve/CVE-2023-42365',
-                'https://bugs.busybox.net/show_bug.cgi?id=15871',
-                'https://gitlab.alpinelinux.org/alpine/aports/-/blob/master/main/busybox/CVE-2023-42364-CVE-2023-42365.patch',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-42365',
-                'https://ubuntu.com/security/notices/USN-6961-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-42365'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'busybox: use-after-free'
-            },
-            {
-              'cve':  'CVE-2023-42366',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.5',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.1',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-787'
-              ],
-              'description':   'A heap-buffer-overflow was discovered in BusyBox v.1.36.1 in the next_token function at awk.c:1159.',
-              'diffID':        'sha256:10d47f76a792d77a3508f82b3ed8d1c8e9701d2aa1ece5e74cacd89b30e35b3f',
-              'fixedVersions': [
-                '1.36.1-r6'
-              ],
-              'installedVersion': '1.36.1-r1',
-              'packageName':      'busybox',
-              'purl':             'pkg:apk/alpine/busybox@1.36.1-r1?arch=x86_64&distro=3.18.0',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2023-42366',
-                'https://bugs.busybox.net/show_bug.cgi?id=15874',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-42366',
-                'https://security.netapp.com/advisory/ntap-20241206-0007/',
-                'https://www.cve.org/CVERecord?id=CVE-2023-42366'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'busybox: A heap-buffer-overflow'
-            },
-            {
-              'cve':  'CVE-2023-42363',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.5',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.8',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   'A use-after-free vulnerability was discovered in xasprintf function in xfuncs_printf.c:344 in BusyBox v.1.36.1.',
-              'diffID':        'sha256:10d47f76a792d77a3508f82b3ed8d1c8e9701d2aa1ece5e74cacd89b30e35b3f',
-              'fixedVersions': [
-                '1.36.1-r7'
-              ],
-              'installedVersion': '1.36.1-r1',
-              'packageName':      'busybox-binsh',
-              'purl':             'pkg:apk/alpine/busybox-binsh@1.36.1-r1?arch=x86_64&distro=3.18.0',
-              'references':       [
-                'http://lists.busybox.net/pipermail/busybox/2024-May/090760.html',
-                'https://access.redhat.com/security/cve/CVE-2023-42363',
-                'https://bugs.busybox.net/show_bug.cgi?id=15865',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-42363',
-                'https://ubuntu.com/security/notices/USN-6961-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-42363'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk'
-            },
-            {
-              'cve':  'CVE-2023-42364',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.5',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.8',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   'A use-after-free vulnerability in BusyBox v.1.36.1 allows attackers to cause a denial of service via a crafted awk pattern in the awk.c evaluate function.',
-              'diffID':        'sha256:10d47f76a792d77a3508f82b3ed8d1c8e9701d2aa1ece5e74cacd89b30e35b3f',
-              'fixedVersions': [
-                '1.36.1-r7'
-              ],
-              'installedVersion': '1.36.1-r1',
-              'packageName':      'busybox-binsh',
-              'purl':             'pkg:apk/alpine/busybox-binsh@1.36.1-r1?arch=x86_64&distro=3.18.0',
-              'references':       [
-                'http://lists.busybox.net/pipermail/busybox/2024-May/090762.html',
-                'https://access.redhat.com/security/cve/CVE-2023-42364',
-                'https://bugs.busybox.net/show_bug.cgi?id=15868',
-                'https://gitlab.alpinelinux.org/alpine/aports/-/blob/master/main/busybox/CVE-2023-42364-CVE-2023-42365.patch',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-42364',
-                'https://ubuntu.com/security/notices/USN-6961-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-42364'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'busybox: use-after-free'
-            },
-            {
-              'cve':  'CVE-2023-42365',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.5',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.8',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   'A use-after-free vulnerability was discovered in BusyBox v.1.36.1 via a crafted awk pattern in the awk.c copyvar function.',
-              'diffID':        'sha256:10d47f76a792d77a3508f82b3ed8d1c8e9701d2aa1ece5e74cacd89b30e35b3f',
-              'fixedVersions': [
-                '1.36.1-r7'
-              ],
-              'installedVersion': '1.36.1-r1',
-              'packageName':      'busybox-binsh',
-              'purl':             'pkg:apk/alpine/busybox-binsh@1.36.1-r1?arch=x86_64&distro=3.18.0',
-              'references':       [
-                'http://lists.busybox.net/pipermail/busybox/2024-May/090762.html',
-                'https://access.redhat.com/security/cve/CVE-2023-42365',
-                'https://bugs.busybox.net/show_bug.cgi?id=15871',
-                'https://gitlab.alpinelinux.org/alpine/aports/-/blob/master/main/busybox/CVE-2023-42364-CVE-2023-42365.patch',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-42365',
-                'https://ubuntu.com/security/notices/USN-6961-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-42365'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'busybox: use-after-free'
-            },
-            {
-              'cve':  'CVE-2023-42366',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.5',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.1',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-787'
-              ],
-              'description':   'A heap-buffer-overflow was discovered in BusyBox v.1.36.1 in the next_token function at awk.c:1159.',
-              'diffID':        'sha256:10d47f76a792d77a3508f82b3ed8d1c8e9701d2aa1ece5e74cacd89b30e35b3f',
-              'fixedVersions': [
-                '1.36.1-r6'
-              ],
-              'installedVersion': '1.36.1-r1',
-              'packageName':      'busybox-binsh',
-              'purl':             'pkg:apk/alpine/busybox-binsh@1.36.1-r1?arch=x86_64&distro=3.18.0',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2023-42366',
-                'https://bugs.busybox.net/show_bug.cgi?id=15874',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-42366',
-                'https://security.netapp.com/advisory/ntap-20241206-0007/',
-                'https://www.cve.org/CVERecord?id=CVE-2023-42366'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'busybox: A heap-buffer-overflow'
-            },
-            {
-              'cve':  'CVE-2023-5363',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N'
-                },
-                'redhat': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-684'
-              ],
-              'description':   "Issue summary: A bug has been identified in the processing of key and\ninitialisation vector (IV) lengths.  This can lead to potential truncation\nor overruns during the initialisation of some symmetric ciphers.\n\nImpact summary: A truncation in the IV can result in non-uniqueness,\nwhich could result in loss of confidentiality for some cipher modes.\n\nWhen calling EVP_EncryptInit_ex2(), EVP_DecryptInit_ex2() or\nEVP_CipherInit_ex2() the provided OSSL_PARAM array is processed after\nthe key and IV have been established.  Any alterations to the key length,\nvia the \"keylen\" parameter or the IV length, via the \"ivlen\" parameter,\nwithin the OSSL_PARAM array will not take effect as intended, potentially\ncausing truncation or overreading of these values.  The following ciphers\nand cipher modes are impacted: RC2, RC4, RC5, CCM, GCM and OCB.\n\nFor the CCM, GCM and OCB cipher modes, truncation of the IV can result in\nloss of confidentiality.  For example, when following NIST's SP 800-38D\nsection 8.2.1 guidance for constructing a deterministic IV for AES in\nGCM mode, truncation of the counter portion could lead to IV reuse.\n\nBoth truncations and overruns of the key and overruns of the IV will\nproduce incorrect results and could, in some cases, trigger a memory\nexception.  However, these issues are not currently assessed as security\ncritical.\n\nChanging the key and/or IV lengths is not considered to be a common operation\nand the vulnerable API was recently introduced. Furthermore it is likely that\napplication developers will have spotted this problem during testing since\ndecryption would fail unless both peers in the communication were similarly\nvulnerable. For these reasons we expect the probability of an application being\nvulnerable to this to be quite low. However if an application is vulnerable then\nthis issue is considered very serious. For these reasons we have assessed this\nissue as Moderate severity overall.\n\nThe OpenSSL SSL/TLS implementation is not affected by this issue.\n\nThe OpenSSL 3.0 and 3.1 FIPS providers are not affected by this because\nthe issue lies outside of the FIPS provider boundary.\n\nOpenSSL 3.1 and 3.0 are vulnerable to this issue.",
-              'diffID':        'sha256:10d47f76a792d77a3508f82b3ed8d1c8e9701d2aa1ece5e74cacd89b30e35b3f',
-              'fixedVersions': [
-                '3.1.4-r0'
-              ],
-              'installedVersion': '3.1.1-r3',
-              'packageName':      'libcrypto3',
-              'purl':             'pkg:apk/alpine/libcrypto3@3.1.1-r3?arch=x86_64&distro=3.18.0',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2023/10/24/1',
-                'https://access.redhat.com/errata/RHSA-2024:0310',
-                'https://access.redhat.com/security/cve/CVE-2023-5363',
-                'https://bugzilla.redhat.com/2243839',
-                'https://errata.almalinux.org/9/ALSA-2024-0310.html',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=0df40630850fb2740e6be6890bb905d3fc623b2d',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=5f69f5c65e483928c4b28ed16af6e5742929f1ee',
-                'https://linux.oracle.com/cve/CVE-2023-5363.html',
-                'https://linux.oracle.com/errata/ELSA-2024-12093.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-5363',
-                'https://security.netapp.com/advisory/ntap-20231027-0010/',
-                'https://security.netapp.com/advisory/ntap-20240201-0003/',
-                'https://security.netapp.com/advisory/ntap-20240201-0004/',
-                'https://security.netapp.com/advisory/ntap-20241108-0002/',
-                'https://ubuntu.com/security/notices/USN-6450-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-5363',
-                'https://www.debian.org/security/2023/dsa-5532',
-                'https://www.openssl.org/news/secadv/20231024.txt'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: Incorrect cipher key and IV length processing'
-            },
-            {
-              'cve':  'CVE-2024-6119',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-843'
-              ],
-              'description':   "Issue summary: Applications performing certificate name checks (e.g., TLS\nclients checking server certificates) may attempt to read an invalid memory\naddress resulting in abnormal termination of the application process.\n\nImpact summary: Abnormal termination of an application can a cause a denial of\nservice.\n\nApplications performing certificate name checks (e.g., TLS clients checking\nserver certificates) may attempt to read an invalid memory address when\ncomparing the expected name with an `otherName` subject alternative name of an\nX.509 certificate. This may result in an exception that terminates the\napplication program.\n\nNote that basic certificate chain validation (signatures, dates, ...) is not\naffected, the denial of service can occur only when the application also\nspecifies an expected DNS name, Email address or IP address.\n\nTLS servers rarely solicit client certificates, and even when they do, they\ngenerally don't perform a name check against a reference identifier (expected\nidentity), but rather extract the presented identity after checking the\ncertificate chain.  So TLS servers are generally not affected and the severity\nof the issue is Moderate.\n\nThe FIPS modules in 3.3, 3.2, 3.1 and 3.0 are not affected by this issue.",
-              'diffID':        'sha256:10d47f76a792d77a3508f82b3ed8d1c8e9701d2aa1ece5e74cacd89b30e35b3f',
-              'fixedVersions': [
-                '3.1.7-r0'
-              ],
-              'installedVersion': '3.1.1-r3',
-              'packageName':      'libcrypto3',
-              'purl':             'pkg:apk/alpine/libcrypto3@3.1.1-r3?arch=x86_64&distro=3.18.0',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2024/09/03/4',
-                'https://access.redhat.com/errata/RHSA-2024:8935',
-                'https://access.redhat.com/security/cve/CVE-2024-6119',
-                'https://bugzilla.redhat.com/2306158',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2306158',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-6119',
-                'https://errata.almalinux.org/9/ALSA-2024-8935.html',
-                'https://errata.rockylinux.org/RLSA-2024:6783',
-                'https://github.com/openssl/openssl/commit/05f360d9e849a1b277db628f1f13083a7f8dd04f',
-                'https://github.com/openssl/openssl/commit/06d1dc3fa96a2ba5a3e22735a033012aadc9f0d6',
-                'https://github.com/openssl/openssl/commit/621f3729831b05ee828a3203eddb621d014ff2b2',
-                'https://github.com/openssl/openssl/commit/7dfcee2cd2a63b2c64b9b4b0850be64cb695b0a0',
-                'https://github.com/openssl/openssl/security/advisories/GHSA-5qrj-vq78-58fj',
-                'https://linux.oracle.com/cve/CVE-2024-6119.html',
-                'https://linux.oracle.com/errata/ELSA-2024-8935.html',
-                'https://lists.freebsd.org/archives/freebsd-security/2024-September/000303.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2024-6119',
-                'https://openssl-library.org/news/secadv/20240903.txt',
-                'https://security.netapp.com/advisory/ntap-20240912-0001/',
-                'https://ubuntu.com/security/notices/USN-6986-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2024-6119'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: Possible denial of service in X.509 name checks'
-            },
-            {
-              'cve':  'CVE-2023-3817',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L'
-                },
-                'redhat': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L'
-                }
-              },
-              'cwes': [
-                'CWE-606',
-                'CWE-834'
-              ],
-              'description':   'Issue summary: Checking excessively long DH keys or parameters may be very slow.\n\nImpact summary: Applications that use the functions DH_check(), DH_check_ex()\nor EVP_PKEY_param_check() to check a DH key or DH parameters may experience long\ndelays. Where the key or parameters that are being checked have been obtained\nfrom an untrusted source this may lead to a Denial of Service.\n\nThe function DH_check() performs various checks on DH parameters. After fixing\nCVE-2023-3446 it was discovered that a large q parameter value can also trigger\nan overly long computation during some of these checks. A correct q value,\nif present, cannot be larger than the modulus p parameter, thus it is\nunnecessary to perform these checks if q is larger than p.\n\nAn application that calls DH_check() and supplies a key or parameters obtained\nfrom an untrusted source could be vulnerable to a Denial of Service attack.\n\nThe function DH_check() is itself called by a number of other OpenSSL functions.\nAn application calling any of those other functions may similarly be affected.\nThe other functions affected by this are DH_check_ex() and\nEVP_PKEY_param_check().\n\nAlso vulnerable are the OpenSSL dhparam and pkeyparam command line applications\nwhen using the "-check" option.\n\nThe OpenSSL SSL/TLS implementation is not affected by this issue.\n\nThe OpenSSL 3.0 and 3.1 FIPS providers are not affected by this issue.',
-              'diffID':        'sha256:10d47f76a792d77a3508f82b3ed8d1c8e9701d2aa1ece5e74cacd89b30e35b3f',
-              'fixedVersions': [
-                '3.1.2-r0'
-              ],
-              'installedVersion': '3.1.1-r3',
-              'packageName':      'libcrypto3',
-              'purl':             'pkg:apk/alpine/libcrypto3@3.1.1-r3?arch=x86_64&distro=3.18.0',
-              'references':       [
-                'http://seclists.org/fulldisclosure/2023/Jul/43',
-                'http://www.openwall.com/lists/oss-security/2023/07/31/1',
-                'http://www.openwall.com/lists/oss-security/2023/09/22/11',
-                'http://www.openwall.com/lists/oss-security/2023/09/22/9',
-                'http://www.openwall.com/lists/oss-security/2023/11/06/2',
-                'https://access.redhat.com/errata/RHSA-2024:2447',
-                'https://access.redhat.com/security/cve/CVE-2023-3817',
-                'https://bugzilla.redhat.com/2223016',
-                'https://bugzilla.redhat.com/2224962',
-                'https://bugzilla.redhat.com/2227852',
-                'https://bugzilla.redhat.com/2248616',
-                'https://bugzilla.redhat.com/2257571',
-                'https://bugzilla.redhat.com/2258502',
-                'https://bugzilla.redhat.com/2259944',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2224962',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2227852',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2248616',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2270358',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3446',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3817',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-5678',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-2408',
-                'https://errata.almalinux.org/9/ALSA-2024-2447.html',
-                'https://errata.rockylinux.org/RLSA-2023:7877',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=6a1eb62c29db6cb5eec707f9338aee00f44e26f5',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=869ad69aadd985c7b8ca6f4e5dd0eb274c9f3644',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=9002fd07327a91f35ba6c1307e71fa6fd4409b7f',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=91ddeba0f2269b017dc06c46c993a788974b1aa5',
-                'https://linux.oracle.com/cve/CVE-2023-3817.html',
-                'https://linux.oracle.com/errata/ELSA-2024-2447.html',
-                'https://lists.debian.org/debian-lts-announce/2023/08/msg00019.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-3817',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://security.netapp.com/advisory/ntap-20230818-0014/',
-                'https://security.netapp.com/advisory/ntap-20231027-0008/',
-                'https://security.netapp.com/advisory/ntap-20240621-0006/',
-                'https://ubuntu.com/security/notices/USN-6435-1',
-                'https://ubuntu.com/security/notices/USN-6435-2',
-                'https://ubuntu.com/security/notices/USN-6450-1',
-                'https://ubuntu.com/security/notices/USN-6709-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-3817',
-                'https://www.openssl.org/news/secadv/20230731.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'OpenSSL: Excessive time spent checking DH q parameter value'
-            },
-            {
-              'cve':  'CVE-2023-5678',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L'
-                },
-                'redhat': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L'
-                }
-              },
-              'cwes': [
-                'CWE-606',
-                'CWE-754'
-              ],
-              'description':   "Issue summary: Generating excessively long X9.42 DH keys or checking\nexcessively long X9.42 DH keys or parameters may be very slow.\n\nImpact summary: Applications that use the functions DH_generate_key() to\ngenerate an X9.42 DH key may experience long delays.  Likewise, applications\nthat use DH_check_pub_key(), DH_check_pub_key_ex() or EVP_PKEY_public_check()\nto check an X9.42 DH key or X9.42 DH parameters may experience long delays.\nWhere the key or parameters that are being checked have been obtained from\nan untrusted source this may lead to a Denial of Service.\n\nWhile DH_check() performs all the necessary checks (as of CVE-2023-3817),\nDH_check_pub_key() doesn't make any of these checks, and is therefore\nvulnerable for excessively large P and Q parameters.\n\nLikewise, while DH_generate_key() performs a check for an excessively large\nP, it doesn't check for an excessively large Q.\n\nAn application that calls DH_generate_key() or DH_check_pub_key() and\nsupplies a key or parameters obtained from an untrusted source could be\nvulnerable to a Denial of Service attack.\n\nDH_generate_key() and DH_check_pub_key() are also called by a number of\nother OpenSSL functions.  An application calling any of those other\nfunctions may similarly be affected.  The other functions affected by this\nare DH_check_pub_key_ex(), EVP_PKEY_public_check(), and EVP_PKEY_generate().\n\nAlso vulnerable are the OpenSSL pkey command line application when using the\n\"-pubcheck\" option, as well as the OpenSSL genpkey command line application.\n\nThe OpenSSL SSL/TLS implementation is not affected by this issue.\n\nThe OpenSSL 3.0 and 3.1 FIPS providers are not affected by this issue.",
-              'diffID':        'sha256:10d47f76a792d77a3508f82b3ed8d1c8e9701d2aa1ece5e74cacd89b30e35b3f',
-              'fixedVersions': [
-                '3.1.4-r1'
-              ],
-              'installedVersion': '3.1.1-r3',
-              'packageName':      'libcrypto3',
-              'purl':             'pkg:apk/alpine/libcrypto3@3.1.1-r3?arch=x86_64&distro=3.18.0',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2024/03/11/1',
-                'https://access.redhat.com/errata/RHSA-2024:2447',
-                'https://access.redhat.com/security/cve/CVE-2023-5678',
-                'https://bugzilla.redhat.com/2223016',
-                'https://bugzilla.redhat.com/2224962',
-                'https://bugzilla.redhat.com/2227852',
-                'https://bugzilla.redhat.com/2248616',
-                'https://bugzilla.redhat.com/2257571',
-                'https://bugzilla.redhat.com/2258502',
-                'https://bugzilla.redhat.com/2259944',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2224962',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2227852',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2248616',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2270358',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3446',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3817',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-5678',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-2408',
-                'https://errata.almalinux.org/9/ALSA-2024-2447.html',
-                'https://errata.rockylinux.org/RLSA-2023:7877',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=34efaef6c103d636ab507a0cc34dca4d3aecc055',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=710fee740904b6290fef0dd5536fbcedbc38ff0c',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=db925ae2e65d0d925adef429afc37f75bd1c2017',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=ddeb4b6c6d527e54ce9a99cba785c0f7776e54b6',
-                'https://linux.oracle.com/cve/CVE-2023-5678.html',
-                'https://linux.oracle.com/errata/ELSA-2024-2447.html',
-                'https://lists.debian.org/debian-lts-announce/2024/10/msg00033.html',
-                'https://lists.debian.org/debian-lts-announce/2024/11/msg00000.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-5678',
-                'https://security.netapp.com/advisory/ntap-20231130-0010/',
-                'https://ubuntu.com/security/notices/USN-6622-1',
-                'https://ubuntu.com/security/notices/USN-6632-1',
-                'https://ubuntu.com/security/notices/USN-6709-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-5678',
-                'https://www.openssl.org/news/secadv/20231106.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: Generating excessively long X9.42 DH keys or checking excessively long X9.42 DH keys or parameters may be very slow'
-            },
-            {
-              'cve':  'CVE-2023-6129',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '6.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-440',
-                'CWE-787'
-              ],
-              'description':   'Issue summary: The POLY1305 MAC (message authentication code) implementation\ncontains a bug that might corrupt the internal state of applications running\non PowerPC CPU based platforms if the CPU provides vector instructions.\n\nImpact summary: If an attacker can influence whether the POLY1305 MAC\nalgorithm is used, the application state might be corrupted with various\napplication dependent consequences.\n\nThe POLY1305 MAC (message authentication code) implementation in OpenSSL for\nPowerPC CPUs restores the contents of vector registers in a different order\nthan they are saved. Thus the contents of some of these vector registers\nare corrupted when returning to the caller. The vulnerable code is used only\non newer PowerPC processors supporting the PowerISA 2.07 instructions.\n\nThe consequences of this kind of internal application state corruption can\nbe various - from no consequences, if the calling application does not\ndepend on the contents of non-volatile XMM registers at all, to the worst\nconsequences, where the attacker could get complete control of the application\nprocess. However unless the compiler uses the vector registers for storing\npointers, the most likely consequence, if any, would be an incorrect result\nof some application dependent calculations or a crash leading to a denial of\nservice.\n\nThe POLY1305 MAC algorithm is most frequently used as part of the\nCHACHA20-POLY1305 AEAD (authenticated encryption with associated data)\nalgorithm. The most common usage of this AEAD cipher is with TLS protocol\nversions 1.2 and 1.3. If this cipher is enabled on the server a malicious\nclient can influence whether this AEAD cipher is used. This implies that\nTLS server applications using OpenSSL can be potentially impacted. However\nwe are currently not aware of any concrete application that would be affected\nby this issue therefore we consider this a Low severity security issue.',
-              'diffID':        'sha256:10d47f76a792d77a3508f82b3ed8d1c8e9701d2aa1ece5e74cacd89b30e35b3f',
-              'fixedVersions': [
-                '3.1.4-r3'
-              ],
-              'installedVersion': '3.1.1-r3',
-              'packageName':      'libcrypto3',
-              'purl':             'pkg:apk/alpine/libcrypto3@3.1.1-r3?arch=x86_64&distro=3.18.0',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2024/03/11/1',
-                'https://access.redhat.com/errata/RHSA-2024:9088',
-                'https://access.redhat.com/security/cve/CVE-2023-6129',
-                'https://bugzilla.redhat.com/2257571',
-                'https://bugzilla.redhat.com/2258502',
-                'https://bugzilla.redhat.com/2259944',
-                'https://bugzilla.redhat.com/2284243',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2257571',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2258502',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2259944',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2284243',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-6129',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-6237',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-0727',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-1298',
-                'https://errata.almalinux.org/9/ALSA-2024-9088.html',
-                'https://errata.rockylinux.org/RLSA-2024:9088',
-                'https://github.com/openssl/openssl/commit/050d26383d4e264966fb83428e72d5d48f402d35',
-                'https://github.com/openssl/openssl/commit/5b139f95c9a47a55a0c54100f3837b1eee942b04',
-                'https://github.com/openssl/openssl/commit/f3fc5808fe9ff74042d639839610d03b8fdcc015',
-                'https://linux.oracle.com/cve/CVE-2023-6129.html',
-                'https://linux.oracle.com/errata/ELSA-2024-9088.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-6129',
-                'https://security.netapp.com/advisory/ntap-20240216-0009/',
-                'https://security.netapp.com/advisory/ntap-20240426-0008/',
-                'https://security.netapp.com/advisory/ntap-20240426-0013/',
-                'https://security.netapp.com/advisory/ntap-20240503-0011/',
-                'https://ubuntu.com/security/notices/USN-6622-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-6129',
-                'https://www.openssl.org/news/secadv/20240109.txt',
-                'https://www.openwall.com/lists/oss-security/2024/01/09/1'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: POLY1305 MAC implementation corrupts vector registers on PowerPC'
-            },
-            {
-              'cve':  'CVE-2023-6237',
-              'cvss': {
-                'redhat': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-606'
-              ],
-              'description':   "Issue summary: Checking excessively long invalid RSA public keys may take\na long time.\n\nImpact summary: Applications that use the function EVP_PKEY_public_check()\nto check RSA public keys may experience long delays. Where the key that\nis being checked has been obtained from an untrusted source this may lead\nto a Denial of Service.\n\nWhen function EVP_PKEY_public_check() is called on RSA public keys,\na computation is done to confirm that the RSA modulus, n, is composite.\nFor valid RSA keys, n is a product of two or more large primes and this\ncomputation completes quickly. However, if n is an overly large prime,\nthen this computation would take a long time.\n\nAn application that calls EVP_PKEY_public_check() and supplies an RSA key\nobtained from an untrusted source could be vulnerable to a Denial of Service\nattack.\n\nThe function EVP_PKEY_public_check() is not called from other OpenSSL\nfunctions however it is called from the OpenSSL pkey command line\napplication. For that reason that application is also vulnerable if used\nwith the '-pubin' and '-check' options on untrusted data.\n\nThe OpenSSL SSL/TLS implementation is not affected by this issue.\n\nThe OpenSSL 3.0 and 3.1 FIPS providers are affected by this issue.",
-              'diffID':        'sha256:10d47f76a792d77a3508f82b3ed8d1c8e9701d2aa1ece5e74cacd89b30e35b3f',
-              'fixedVersions': [
-                '3.1.4-r4'
-              ],
-              'installedVersion': '3.1.1-r3',
-              'packageName':      'libcrypto3',
-              'purl':             'pkg:apk/alpine/libcrypto3@3.1.1-r3?arch=x86_64&distro=3.18.0',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2024/03/11/1',
-                'https://access.redhat.com/errata/RHSA-2024:9088',
-                'https://access.redhat.com/security/cve/CVE-2023-6237',
-                'https://bugzilla.redhat.com/2257571',
-                'https://bugzilla.redhat.com/2258502',
-                'https://bugzilla.redhat.com/2259944',
-                'https://bugzilla.redhat.com/2284243',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2257571',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2258502',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2259944',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2284243',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-6129',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-6237',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-0727',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-1298',
-                'https://errata.almalinux.org/9/ALSA-2024-9088.html',
-                'https://errata.rockylinux.org/RLSA-2024:9088',
-                'https://github.com/openssl/openssl/commit/0b0f7abfb37350794a4b8960fafc292cd5d1b84d',
-                'https://github.com/openssl/openssl/commit/18c02492138d1eb8b6548cb26e7b625fb2414a2a',
-                'https://github.com/openssl/openssl/commit/a830f551557d3d66a84bbb18a5b889c640c36294',
-                'https://linux.oracle.com/cve/CVE-2023-6237.html',
-                'https://linux.oracle.com/errata/ELSA-2024-9088.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-6237',
-                'https://security.netapp.com/advisory/ntap-20240531-0007/',
-                'https://ubuntu.com/security/notices/USN-6622-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-6237',
-                'https://www.openssl.org/news/secadv/20240115.txt',
-                'https://www.openwall.com/lists/oss-security/2024/01/15/2'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: Excessive time spent checking invalid RSA public keys'
-            },
-            {
-              'cve':  'CVE-2024-0727',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '5.5',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H'
-                },
-                'nvd': {
-                  'v3score':  '5.5',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '5.5',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-476'
-              ],
-              'description':   'Issue summary: Processing a maliciously formatted PKCS12 file may lead OpenSSL\nto crash leading to a potential Denial of Service attack\n\nImpact summary: Applications loading files in the PKCS12 format from untrusted\nsources might terminate abruptly.\n\nA file in PKCS12 format can contain certificates and keys and may come from an\nuntrusted source. The PKCS12 specification allows certain fields to be NULL, but\nOpenSSL does not correctly check for this case. This can lead to a NULL pointer\ndereference that results in OpenSSL crashing. If an application processes PKCS12\nfiles from an untrusted source using the OpenSSL APIs then that application will\nbe vulnerable to this issue.\n\nOpenSSL APIs that are vulnerable to this are: PKCS12_parse(),\nPKCS12_unpack_p7data(), PKCS12_unpack_p7encdata(), PKCS12_unpack_authsafes()\nand PKCS12_newpass().\n\nWe have also fixed a similar issue in SMIME_write_PKCS7(). However since this\nfunction is related to writing data we do not consider it security significant.\n\nThe FIPS modules in 3.2, 3.1 and 3.0 are not affected by this issue.',
-              'diffID':        'sha256:10d47f76a792d77a3508f82b3ed8d1c8e9701d2aa1ece5e74cacd89b30e35b3f',
-              'fixedVersions': [
-                '3.1.4-r5'
-              ],
-              'installedVersion': '3.1.1-r3',
-              'packageName':      'libcrypto3',
-              'purl':             'pkg:apk/alpine/libcrypto3@3.1.1-r3?arch=x86_64&distro=3.18.0',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2024/03/11/1',
-                'https://access.redhat.com/errata/RHSA-2024:9088',
-                'https://access.redhat.com/security/cve/CVE-2024-0727',
-                'https://bugzilla.redhat.com/2257571',
-                'https://bugzilla.redhat.com/2258502',
-                'https://bugzilla.redhat.com/2259944',
-                'https://bugzilla.redhat.com/2284243',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2257571',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2258502',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2259944',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2284243',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-6129',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-6237',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-0727',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-1298',
-                'https://errata.almalinux.org/9/ALSA-2024-9088.html',
-                'https://errata.rockylinux.org/RLSA-2024:9088',
-                'https://github.com/alexcrichton/openssl-src-rs/commit/add20f73b6b42be7451af2e1044d4e0e778992b2',
-                'https://github.com/github/advisory-database/pull/3472',
-                'https://github.com/openssl/openssl/commit/09df4395b5071217b76dc7d3d2e630eb8c5a79c2',
-                'https://github.com/openssl/openssl/commit/775acfdbd0c6af9ac855f34969cdab0c0c90844a',
-                'https://github.com/openssl/openssl/commit/d135eeab8a5dbf72b3da5240bab9ddb7678dbd2c',
-                'https://github.com/openssl/openssl/pull/23362',
-                'https://github.com/pyca/cryptography/commit/3519591d255d4506fbcd0d04037d45271903c64d',
-                'https://github.openssl.org/openssl/extended-releases/commit/03b3941d60c4bce58fab69a0c22377ab439bc0e8',
-                'https://github.openssl.org/openssl/extended-releases/commit/aebaa5883e31122b404e450732dc833dc9dee539',
-                'https://linux.oracle.com/cve/CVE-2024-0727.html',
-                'https://linux.oracle.com/errata/ELSA-2024-9088.html',
-                'https://lists.debian.org/debian-lts-announce/2024/10/msg00033.html',
-                'https://lists.debian.org/debian-lts-announce/2024/11/msg00000.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2024-0727',
-                'https://security.netapp.com/advisory/ntap-20240208-0006',
-                'https://security.netapp.com/advisory/ntap-20240208-0006/',
-                'https://ubuntu.com/security/notices/USN-6622-1',
-                'https://ubuntu.com/security/notices/USN-6632-1',
-                'https://ubuntu.com/security/notices/USN-6709-1',
-                'https://ubuntu.com/security/notices/USN-7018-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2024-0727',
-                'https://www.openssl.org/news/secadv/20240125.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: denial of service via null dereference'
-            },
-            {
-              'cve':  'CVE-2024-13176',
-              'cvss': {
-                'redhat': {
-                  'v3score':  '4.7',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-385'
-              ],
-              'description':   'Issue summary: A timing side-channel which could potentially allow recovering\nthe private key exists in the ECDSA signature computation.\n\nImpact summary: A timing side-channel in ECDSA signature computations\ncould allow recovering the private key by an attacker. However, measuring\nthe timing would require either local access to the signing application or\na very fast network connection with low latency.\n\nThere is a timing signal of around 300 nanoseconds when the top word of\nthe inverted ECDSA nonce value is zero. This can happen with significant\nprobability only for some of the supported elliptic curves. In particular\nthe NIST P-521 curve is affected. To be able to measure this leak, the attacker\nprocess must either be located in the same physical computer or must\nhave a very fast network connection with low latency. For that reason\nthe severity of this vulnerability is Low.\n\nThe FIPS modules in 3.4, 3.3, 3.2, 3.1 and 3.0 are affected by this issue.',
-              'diffID':        'sha256:10d47f76a792d77a3508f82b3ed8d1c8e9701d2aa1ece5e74cacd89b30e35b3f',
-              'fixedVersions': [
-                '3.1.8-r0'
-              ],
-              'installedVersion': '3.1.1-r3',
-              'packageName':      'libcrypto3',
-              'purl':             'pkg:apk/alpine/libcrypto3@3.1.1-r3?arch=x86_64&distro=3.18.0',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2025/01/20/2',
-                'https://access.redhat.com/errata/RHSA-2025:16046',
-                'https://access.redhat.com/security/cve/CVE-2024-13176',
-                'https://bugzilla.redhat.com/2359885',
-                'https://bugzilla.redhat.com/2359888',
-                'https://bugzilla.redhat.com/2359892',
-                'https://bugzilla.redhat.com/2359894',
-                'https://bugzilla.redhat.com/2359895',
-                'https://bugzilla.redhat.com/2359899',
-                'https://bugzilla.redhat.com/2359900',
-                'https://bugzilla.redhat.com/2359902',
-                'https://bugzilla.redhat.com/2359903',
-                'https://bugzilla.redhat.com/2359911',
-                'https://bugzilla.redhat.com/2359918',
-                'https://bugzilla.redhat.com/2359920',
-                'https://bugzilla.redhat.com/2359924',
-                'https://bugzilla.redhat.com/2359928',
-                'https://bugzilla.redhat.com/2359930',
-                'https://bugzilla.redhat.com/2359932',
-                'https://bugzilla.redhat.com/2359934',
-                'https://bugzilla.redhat.com/2359938',
-                'https://bugzilla.redhat.com/2359940',
-                'https://bugzilla.redhat.com/2359943',
-                'https://bugzilla.redhat.com/2359944',
-                'https://bugzilla.redhat.com/2359945',
-                'https://bugzilla.redhat.com/2359947',
-                'https://bugzilla.redhat.com/2359950',
-                'https://bugzilla.redhat.com/2359963',
-                'https://bugzilla.redhat.com/2359964',
-                'https://bugzilla.redhat.com/2359972',
-                'https://bugzilla.redhat.com/2370920',
-                'https://bugzilla.redhat.com/2380264',
-                'https://bugzilla.redhat.com/2380273',
-                'https://bugzilla.redhat.com/2380274',
-                'https://bugzilla.redhat.com/2380278',
-                'https://bugzilla.redhat.com/2380280',
-                'https://bugzilla.redhat.com/2380283',
-                'https://bugzilla.redhat.com/2380284',
-                'https://bugzilla.redhat.com/2380290',
-                'https://bugzilla.redhat.com/2380291',
-                'https://bugzilla.redhat.com/2380295',
-                'https://bugzilla.redhat.com/2380298',
-                'https://bugzilla.redhat.com/2380306',
-                'https://bugzilla.redhat.com/2380308',
-                'https://bugzilla.redhat.com/2380309',
-                'https://bugzilla.redhat.com/2380310',
-                'https://bugzilla.redhat.com/2380312',
-                'https://bugzilla.redhat.com/2380313',
-                'https://bugzilla.redhat.com/2380320',
-                'https://bugzilla.redhat.com/2380321',
-                'https://bugzilla.redhat.com/2380322',
-                'https://bugzilla.redhat.com/2380326',
-                'https://bugzilla.redhat.com/2380327',
-                'https://bugzilla.redhat.com/2380334',
-                'https://bugzilla.redhat.com/2380335',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2338999',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359885',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359888',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359892',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359894',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359895',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359899',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359900',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359902',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359903',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359911',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359918',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359920',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359924',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359928',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359930',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359932',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359934',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359938',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359940',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359943',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359944',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359945',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359947',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359950',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359963',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359964',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359972',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2370920',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380264',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380273',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380274',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380278',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380280',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380283',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380284',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380290',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380291',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380295',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380298',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380306',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380308',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380309',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380310',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380312',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380313',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380320',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380321',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380322',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380326',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380327',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380334',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380335',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-13176',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21574',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21575',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21577',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21579',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21580',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21581',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21584',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21585',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21588',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30681',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30682',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30683',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30684',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30685',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30687',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30688',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30689',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30693',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30695',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30696',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30699',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30703',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30704',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30705',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30715',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30721',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30722',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50077',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50078',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50079',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50080',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50081',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50082',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50083',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50084',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50085',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50086',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50087',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50088',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50091',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50092',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50093',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50094',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50096',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50097',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50098',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50099',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50100',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50101',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50102',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50104',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-5399',
-                'https://errata.almalinux.org/9/ALSA-2025-16046.html',
-                'https://errata.rockylinux.org/RLSA-2025:15699',
-                'https://github.com/openssl/openssl/commit/07272b05b04836a762b4baa874958af51d513844',
-                'https://github.com/openssl/openssl/commit/2af62e74fb59bc469506bc37eb2990ea408d9467',
-                'https://github.com/openssl/openssl/commit/392dcb336405a0c94486aa6655057f59fd3a0902',
-                'https://github.com/openssl/openssl/commit/4b1cb94a734a7d4ec363ac0a215a25c181e11f65',
-                'https://github.com/openssl/openssl/commit/77c608f4c8857e63e98e66444e2e761c9627916f',
-                'https://github.openssl.org/openssl/extended-releases/commit/0d5fd1ab987f7571e2c955d8d8b638fc0fb54ded',
-                'https://github.openssl.org/openssl/extended-releases/commit/a2639000db19878d5d89586ae7b725080592ae86',
-                'https://linux.oracle.com/cve/CVE-2024-13176.html',
-                'https://linux.oracle.com/errata/ELSA-2025-16046.html',
-                'https://lists.debian.org/debian-lts-announce/2025/05/msg00028.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2024-13176',
-                'https://openssl-library.org/news/secadv/20250120.txt',
-                'https://security.netapp.com/advisory/ntap-20250124-0005/',
-                'https://security.netapp.com/advisory/ntap-20250418-0010/',
-                'https://security.netapp.com/advisory/ntap-20250502-0006/',
-                'https://ubuntu.com/security/notices/USN-7264-1',
-                'https://ubuntu.com/security/notices/USN-7278-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2024-13176',
-                'https://www.oracle.com/security-alerts/cpuapr2025.html#AppendixMSQL'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: Timing side-channel in ECDSA signature computation'
-            },
-            {
-              'cve':  'CVE-2024-4603',
-              'cvss': {
-                'redhat': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L'
-                }
-              },
-              'cwes': [
-                'CWE-606',
-                'CWE-834'
-              ],
-              'description':   'Issue summary: Checking excessively long DSA keys or parameters may be very\nslow.\n\nImpact summary: Applications that use the functions EVP_PKEY_param_check()\nor EVP_PKEY_public_check() to check a DSA public key or DSA parameters may\nexperience long delays. Where the key or parameters that are being checked\nhave been obtained from an untrusted source this may lead to a Denial of\nService.\n\nThe functions EVP_PKEY_param_check() or EVP_PKEY_public_check() perform\nvarious checks on DSA parameters. Some of those computations take a long time\nif the modulus (`p` parameter) is too large.\n\nTrying to use a very large modulus is slow and OpenSSL will not allow using\npublic keys with a modulus which is over 10,000 bits in length for signature\nverification. However the key and parameter check functions do not limit\nthe modulus size when performing the checks.\n\nAn application that calls EVP_PKEY_param_check() or EVP_PKEY_public_check()\nand supplies a key or parameters obtained from an untrusted source could be\nvulnerable to a Denial of Service attack.\n\nThese functions are not called by OpenSSL itself on untrusted DSA keys so\nonly applications that directly call these functions may be vulnerable.\n\nAlso vulnerable are the OpenSSL pkey and pkeyparam command line applications\nwhen using the `-check` option.\n\nThe OpenSSL SSL/TLS implementation is not affected by this issue.\n\nThe OpenSSL 3.0 and 3.1 FIPS providers are affected by this issue.',
-              'diffID':        'sha256:10d47f76a792d77a3508f82b3ed8d1c8e9701d2aa1ece5e74cacd89b30e35b3f',
-              'fixedVersions': [
-                '3.1.5-r0'
-              ],
-              'installedVersion': '3.1.1-r3',
-              'packageName':      'libcrypto3',
-              'purl':             'pkg:apk/alpine/libcrypto3@3.1.1-r3?arch=x86_64&distro=3.18.0',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2024/05/16/2',
-                'https://access.redhat.com/errata/RHSA-2024:9333',
-                'https://access.redhat.com/security/cve/CVE-2024-4603',
-                'https://bugzilla.redhat.com/2274020',
-                'https://bugzilla.redhat.com/2281029',
-                'https://bugzilla.redhat.com/2283757',
-                'https://bugzilla.redhat.com/2294581',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2274020',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2281029',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2283757',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2294581',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-2511',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-4603',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-4741',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-5535',
-                'https://errata.almalinux.org/9/ALSA-2024-9333.html',
-                'https://errata.rockylinux.org/RLSA-2024:9333',
-                'https://github.com/openssl/openssl/commit/3559e868e58005d15c6013a0c1fd832e51c73397',
-                'https://github.com/openssl/openssl/commit/53ea06486d296b890d565fb971b2764fcd826e7e',
-                'https://github.com/openssl/openssl/commit/9c39b3858091c152f52513c066ff2c5a47969f0d',
-                'https://github.com/openssl/openssl/commit/da343d0605c826ef197aceedc67e8e04f065f740',
-                'https://linux.oracle.com/cve/CVE-2024-4603.html',
-                'https://linux.oracle.com/errata/ELSA-2024-9333.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2024-4603',
-                'https://security.netapp.com/advisory/ntap-20240621-0001/',
-                'https://ubuntu.com/security/notices/USN-6937-1',
-                'https://www.cve.org/CVERecord?id=CVE-2024-4603',
-                'https://www.openssl.org/news/secadv/20240516.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: Excessive time spent checking DSA keys and parameters'
-            },
-            {
-              'cve':  'CVE-2024-4741',
-              'cvss': {
-                'redhat': {
-                  'v3score':  '5.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   'Issue summary: Calling the OpenSSL API function SSL_free_buffers may cause\nmemory to be accessed that was previously freed in some situations\n\nImpact summary: A use after free can have a range of potential consequences such\nas the corruption of valid data, crashes or execution of arbitrary code.\nHowever, only applications that directly call the SSL_free_buffers function are\naffected by this issue. Applications that do not call this function are not\nvulnerable. Our investigations indicate that this function is rarely used by\napplications.\n\nThe SSL_free_buffers function is used to free the internal OpenSSL buffer used\nwhen processing an incoming record from the network. The call is only expected\nto succeed if the buffer is not currently in use. However, two scenarios have\nbeen identified where the buffer is freed even when still in use.\n\nThe first scenario occurs where a record header has been received from the\nnetwork and processed by OpenSSL, but the full record body has not yet arrived.\nIn this case calling SSL_free_buffers will succeed even though a record has only\nbeen partially processed and the buffer is still in use.\n\nThe second scenario occurs where a full record containing application data has\nbeen received and processed by OpenSSL but the application has only read part of\nthis data. Again a call to SSL_free_buffers will succeed even though the buffer\nis still in use.\n\nWhile these scenarios could occur accidentally during normal operation a\nmalicious attacker could attempt to engineer a stituation where this occurs.\nWe are not aware of this issue being actively exploited.\n\nThe FIPS modules in 3.3, 3.2, 3.1 and 3.0 are not affected by this issue.',
-              'diffID':        'sha256:10d47f76a792d77a3508f82b3ed8d1c8e9701d2aa1ece5e74cacd89b30e35b3f',
-              'fixedVersions': [
-                '3.1.6-r0'
-              ],
-              'installedVersion': '3.1.1-r3',
-              'packageName':      'libcrypto3',
-              'purl':             'pkg:apk/alpine/libcrypto3@3.1.1-r3?arch=x86_64&distro=3.18.0',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2024:9333',
-                'https://access.redhat.com/security/cve/CVE-2024-4741',
-                'https://bugzilla.redhat.com/2274020',
-                'https://bugzilla.redhat.com/2281029',
-                'https://bugzilla.redhat.com/2283757',
-                'https://bugzilla.redhat.com/2294581',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2274020',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2281029',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2283757',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2294581',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-2511',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-4603',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-4741',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-5535',
-                'https://errata.almalinux.org/9/ALSA-2024-9333.html',
-                'https://errata.rockylinux.org/RLSA-2024:9333',
-                'https://github.com/openssl/openssl/commit/704f725b96aa373ee45ecfb23f6abfe8be8d9177',
-                'https://github.com/openssl/openssl/commit/b3f0eb0a295f58f16ba43ba99dad70d4ee5c437d',
-                'https://github.com/openssl/openssl/commit/c88c3de51020c37e8706bf7a682a162593053aac',
-                'https://github.com/openssl/openssl/commit/e5093133c35ca82874ad83697af76f4b0f7e3bd8',
-                'https://github.openssl.org/openssl/extended-releases/commit/f7a045f3143fc6da2ee66bf52d8df04829590dd4',
-                'https://linux.oracle.com/cve/CVE-2024-4741.html',
-                'https://linux.oracle.com/errata/ELSA-2024-9333.html',
-                'https://lists.debian.org/debian-lts-announce/2024/10/msg00033.html',
-                'https://lists.debian.org/debian-lts-announce/2024/11/msg00000.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2024-4741',
-                'https://security.netapp.com/advisory/ntap-20240621-0004/',
-                'https://ubuntu.com/security/notices/USN-6937-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2024-4741',
-                'https://www.openssl.org/news/secadv/20240528.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: Use After Free with SSL_free_buffers'
-            },
-            {
-              'cve':  'CVE-2024-5535',
-              'cvss': {
-                'redhat': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-125'
-              ],
-              'description':   'Issue summary: Calling the OpenSSL API function SSL_select_next_proto with an\nempty supported client protocols buffer may cause a crash or memory contents to\nbe sent to the peer.\n\nImpact summary: A buffer overread can have a range of potential consequences\nsuch as unexpected application beahviour or a crash. In particular this issue\ncould result in up to 255 bytes of arbitrary private data from memory being sent\nto the peer leading to a loss of confidentiality. However, only applications\nthat directly call the SSL_select_next_proto function with a 0 length list of\nsupported client protocols are affected by this issue. This would normally never\nbe a valid scenario and is typically not under attacker control but may occur by\naccident in the case of a configuration or programming error in the calling\napplication.\n\nThe OpenSSL API function SSL_select_next_proto is typically used by TLS\napplications that support ALPN (Application Layer Protocol Negotiation) or NPN\n(Next Protocol Negotiation). NPN is older, was never standardised and\nis deprecated in favour of ALPN. We believe that ALPN is significantly more\nwidely deployed than NPN. The SSL_select_next_proto function accepts a list of\nprotocols from the server and a list of protocols from the client and returns\nthe first protocol that appears in the server list that also appears in the\nclient list. In the case of no overlap between the two lists it returns the\nfirst item in the client list. In either case it will signal whether an overlap\nbetween the two lists was found. In the case where SSL_select_next_proto is\ncalled with a zero length client list it fails to notice this condition and\nreturns the memory immediately following the client list pointer (and reports\nthat there was no overlap in the lists).\n\nThis function is typically called from a server side application callback for\nALPN or a client side application callback for NPN. In the case of ALPN the list\nof protocols supplied by the client is guaranteed by libssl to never be zero in\nlength. The list of server protocols comes from the application and should never\nnormally be expected to be of zero length. In this case if the\nSSL_select_next_proto function has been called as expected (with the list\nsupplied by the client passed in the client/client_len parameters), then the\napplication will not be vulnerable to this issue. If the application has\naccidentally been configured with a zero length server list, and has\naccidentally passed that zero length server list in the client/client_len\nparameters, and has additionally failed to correctly handle a "no overlap"\nresponse (which would normally result in a handshake failure in ALPN) then it\nwill be vulnerable to this problem.\n\nIn the case of NPN, the protocol permits the client to opportunistically select\na protocol when there is no overlap. OpenSSL returns the first client protocol\nin the no overlap case in support of this. The list of client protocols comes\nfrom the application and should never normally be expected to be of zero length.\nHowever if the SSL_select_next_proto function is accidentally called with a\nclient_len of 0 then an invalid memory pointer will be returned instead. If the\napplication uses this output as the opportunistic protocol then the loss of\nconfidentiality will occur.\n\nThis issue has been assessed as Low severity because applications are most\nlikely to be vulnerable if they are using NPN instead of ALPN - but NPN is not\nwidely used. It also requires an application configuration or programming error.\nFinally, this issue would not typically be under attacker control making active\nexploitation unlikely.\n\nThe FIPS modules in 3.3, 3.2, 3.1 and 3.0 are not affected by this issue.\n\nDue to the low severity of this issue we are not issuing new releases of\nOpenSSL at this time. The fix will be included in the next releases when they\nbecome available.',
-              'diffID':        'sha256:10d47f76a792d77a3508f82b3ed8d1c8e9701d2aa1ece5e74cacd89b30e35b3f',
-              'fixedVersions': [
-                '3.1.6-r0'
-              ],
-              'installedVersion': '3.1.1-r3',
-              'packageName':      'libcrypto3',
-              'purl':             'pkg:apk/alpine/libcrypto3@3.1.1-r3?arch=x86_64&distro=3.18.0',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2024/06/27/1',
-                'http://www.openwall.com/lists/oss-security/2024/06/28/4',
-                'http://www.openwall.com/lists/oss-security/2024/08/15/1',
-                'https://access.redhat.com/errata/RHSA-2025:1671',
-                'https://access.redhat.com/security/cve/CVE-2024-5535',
-                'https://bugzilla.redhat.com/2294581',
-                'https://bugzilla.redhat.com/2294676',
-                'https://bugzilla.redhat.com/2301888',
-                'https://bugzilla.redhat.com/2318857',
-                'https://bugzilla.redhat.com/2318858',
-                'https://bugzilla.redhat.com/2318870',
-                'https://bugzilla.redhat.com/2318873',
-                'https://bugzilla.redhat.com/2318874',
-                'https://bugzilla.redhat.com/2318876',
-                'https://bugzilla.redhat.com/2318882',
-                'https://bugzilla.redhat.com/2318883',
-                'https://bugzilla.redhat.com/2318884',
-                'https://bugzilla.redhat.com/2318885',
-                'https://bugzilla.redhat.com/2318886',
-                'https://bugzilla.redhat.com/2318897',
-                'https://bugzilla.redhat.com/2318900',
-                'https://bugzilla.redhat.com/2318905',
-                'https://bugzilla.redhat.com/2318914',
-                'https://bugzilla.redhat.com/2318922',
-                'https://bugzilla.redhat.com/2318923',
-                'https://bugzilla.redhat.com/2318925',
-                'https://bugzilla.redhat.com/2318926',
-                'https://bugzilla.redhat.com/2318927',
-                'https://bugzilla.redhat.com/2331191',
-                'https://bugzilla.redhat.com/2339218',
-                'https://bugzilla.redhat.com/2339220',
-                'https://bugzilla.redhat.com/2339221',
-                'https://bugzilla.redhat.com/2339226',
-                'https://bugzilla.redhat.com/2339231',
-                'https://bugzilla.redhat.com/2339236',
-                'https://bugzilla.redhat.com/2339238',
-                'https://bugzilla.redhat.com/2339243',
-                'https://bugzilla.redhat.com/2339247',
-                'https://bugzilla.redhat.com/2339252',
-                'https://bugzilla.redhat.com/2339259',
-                'https://bugzilla.redhat.com/2339266',
-                'https://bugzilla.redhat.com/2339270',
-                'https://bugzilla.redhat.com/2339271',
-                'https://bugzilla.redhat.com/2339275',
-                'https://bugzilla.redhat.com/2339277',
-                'https://bugzilla.redhat.com/2339281',
-                'https://bugzilla.redhat.com/2339284',
-                'https://bugzilla.redhat.com/2339291',
-                'https://bugzilla.redhat.com/2339293',
-                'https://bugzilla.redhat.com/2339295',
-                'https://bugzilla.redhat.com/2339299',
-                'https://bugzilla.redhat.com/2339300',
-                'https://bugzilla.redhat.com/2339304',
-                'https://bugzilla.redhat.com/2339305',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2274020',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2281029',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2283757',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2294581',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-2511',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-4603',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-4741',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-5535',
-                'https://errata.almalinux.org/9/ALSA-2025-1671.html',
-                'https://errata.rockylinux.org/RLSA-2024:9333',
-                'https://github.com/openssl/openssl/commit/4ada436a1946cbb24db5ab4ca082b69c1bc10f37',
-                'https://github.com/openssl/openssl/commit/99fb785a5f85315b95288921a321a935ea29a51e',
-                'https://github.com/openssl/openssl/commit/cf6f91f6121f4db167405db2f0de410a456f260c',
-                'https://github.com/openssl/openssl/commit/e86ac436f0bd54d4517745483e2315650fae7b2c',
-                'https://github.openssl.org/openssl/extended-releases/commit/9947251413065a05189a63c9b7a6c1d4e224c21c',
-                'https://github.openssl.org/openssl/extended-releases/commit/b78ec0824da857223486660177d3b1f255c65d87',
-                'https://linux.oracle.com/cve/CVE-2024-5535.html',
-                'https://linux.oracle.com/errata/ELSA-2025-1673.html',
-                'https://lists.debian.org/debian-lts-announce/2024/10/msg00033.html',
-                'https://lists.debian.org/debian-lts-announce/2024/11/msg00000.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2024-5535',
-                'https://openssl.org/news/secadv/20240627.txt',
-                'https://security.netapp.com/advisory/ntap-20240712-0005/',
-                'https://security.netapp.com/advisory/ntap-20241025-0006/',
-                'https://security.netapp.com/advisory/ntap-20241025-0010/',
-                'https://ubuntu.com/security/notices/USN-6937-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2024-5535',
-                'https://www.openssl.org/news/secadv/20240627.txt',
-                'https://www.oracle.com/security-alerts/cpuoct2024.html#AppendixMSQL'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: SSL_select_next_proto buffer overread'
-            },
-            {
-              'cve':  'CVE-2024-2511',
-              'cvss': {
-                'redhat': {
-                  'v3score':  '3.7',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L'
-                }
-              },
-              'cwes': [
-                'CWE-1325'
-              ],
-              'description':   'Issue summary: Some non-default TLS server configurations can cause unbounded\nmemory growth when processing TLSv1.3 sessions\n\nImpact summary: An attacker may exploit certain server configurations to trigger\nunbounded memory growth that would lead to a Denial of Service\n\nThis problem can occur in TLSv1.3 if the non-default SSL_OP_NO_TICKET option is\nbeing used (but not if early_data support is also configured and the default\nanti-replay protection is in use). In this case, under certain conditions, the\nsession cache can get into an incorrect state and it will fail to flush properly\nas it fills. The session cache will continue to grow in an unbounded manner. A\nmalicious client could deliberately create the scenario for this failure to\nforce a Denial of Service. It may also happen by accident in normal operation.\n\nThis issue only affects TLS servers supporting TLSv1.3. It does not affect TLS\nclients.\n\nThe FIPS modules in 3.2, 3.1 and 3.0 are not affected by this issue. OpenSSL\n1.0.2 is also not affected by this issue.',
-              'diffID':        'sha256:10d47f76a792d77a3508f82b3ed8d1c8e9701d2aa1ece5e74cacd89b30e35b3f',
-              'fixedVersions': [
-                '3.1.4-r6'
-              ],
-              'installedVersion': '3.1.1-r3',
-              'packageName':      'libcrypto3',
-              'purl':             'pkg:apk/alpine/libcrypto3@3.1.1-r3?arch=x86_64&distro=3.18.0',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2024/04/08/5',
-                'https://access.redhat.com/errata/RHSA-2024:9333',
-                'https://access.redhat.com/security/cve/CVE-2024-2511',
-                'https://bugzilla.redhat.com/2274020',
-                'https://bugzilla.redhat.com/2281029',
-                'https://bugzilla.redhat.com/2283757',
-                'https://bugzilla.redhat.com/2294581',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2274020',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2281029',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2283757',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2294581',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-2511',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-4603',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-4741',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-5535',
-                'https://errata.almalinux.org/9/ALSA-2024-9333.html',
-                'https://errata.rockylinux.org/RLSA-2024:9333',
-                'https://github.com/openssl/openssl/commit/7e4d731b1c07201ad9374c1cd9ac5263bdf35bce',
-                'https://github.com/openssl/openssl/commit/b52867a9f618bb955bed2a3ce3db4d4f97ed8e5d',
-                'https://github.com/openssl/openssl/commit/e9d7083e241670332e0443da0f0d4ffb52829f08',
-                'https://github.openssl.org/openssl/extended-releases/commit/5f8d25770ae6437db119dfc951e207271a326640',
-                'https://linux.oracle.com/cve/CVE-2024-2511.html',
-                'https://linux.oracle.com/errata/ELSA-2024-9333.html',
-                'https://lists.debian.org/debian-lts-announce/2024/10/msg00033.html',
-                'https://lists.debian.org/debian-lts-announce/2024/11/msg00000.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2024-2511',
-                'https://security.netapp.com/advisory/ntap-20240503-0013/',
-                'https://ubuntu.com/security/notices/USN-6937-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2024-2511',
-                'https://www.openssl.org/news/secadv/20240408.txt',
-                'https://www.openssl.org/news/vulnerabilities.html'
-              ],
-              'severity':   'LOW',
-              'suppressed': false,
-              'title':      'openssl: Unbounded memory growth with session handling in TLSv1.3'
-            },
-            {
-              'cve':  'CVE-2024-9143',
-              'cvss': {
-                'redhat': {
-                  'v3score':  '3.7',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L'
-                }
-              },
-              'cwes': [
-                'CWE-125',
-                'CWE-787'
-              ],
-              'description':   "Issue summary: Use of the low-level GF(2^m) elliptic curve APIs with untrusted\nexplicit values for the field polynomial can lead to out-of-bounds memory reads\nor writes.\n\nImpact summary: Out of bound memory writes can lead to an application crash or\neven a possibility of a remote code execution, however, in all the protocols\ninvolving Elliptic Curve Cryptography that we're aware of, either only \"named\ncurves\" are supported, or, if explicit curve parameters are supported, they\nspecify an X9.62 encoding of binary (GF(2^m)) curves that can't represent\nproblematic input values. Thus the likelihood of existence of a vulnerable\napplication is low.\n\nIn particular, the X9.62 encoding is used for ECC keys in X.509 certificates,\nso problematic inputs cannot occur in the context of processing X.509\ncertificates.  Any problematic use-cases would have to be using an \"exotic\"\ncurve encoding.\n\nThe affected APIs include: EC_GROUP_new_curve_GF2m(), EC_GROUP_new_from_params(),\nand various supporting BN_GF2m_*() functions.\n\nApplications working with \"exotic\" explicit binary (GF(2^m)) curve parameters,\nthat make it possible to represent invalid field polynomials with a zero\nconstant term, via the above or similar APIs, may terminate abruptly as a\nresult of reading or writing outside of array bounds.  Remote code execution\ncannot easily be ruled out.\n\nThe FIPS modules in 3.3, 3.2, 3.1 and 3.0 are not affected by this issue.",
-              'diffID':        'sha256:10d47f76a792d77a3508f82b3ed8d1c8e9701d2aa1ece5e74cacd89b30e35b3f',
-              'fixedVersions': [
-                '3.1.7-r1'
-              ],
-              'installedVersion': '3.1.1-r3',
-              'packageName':      'libcrypto3',
-              'purl':             'pkg:apk/alpine/libcrypto3@3.1.1-r3?arch=x86_64&distro=3.18.0',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2024/10/16/1',
-                'http://www.openwall.com/lists/oss-security/2024/10/23/1',
-                'http://www.openwall.com/lists/oss-security/2024/10/24/1',
-                'https://access.redhat.com/security/cve/CVE-2024-9143',
-                'https://github.com/openssl/openssl/commit/72ae83ad214d2eef262461365a1975707f862712',
-                'https://github.com/openssl/openssl/commit/bc7e04d7c8d509fb78fc0e285aa948fb0da04700',
-                'https://github.com/openssl/openssl/commit/c0d3e4d32d2805f49bec30547f225bc4d092e1f4',
-                'https://github.com/openssl/openssl/commit/fdf6723362ca51bd883295efe206cb5b1cfa5154',
-                'https://github.openssl.org/openssl/extended-releases/commit/8efc0cbaa8ebba8e116f7b81a876a4123594d86a',
-                'https://github.openssl.org/openssl/extended-releases/commit/9d576994cec2b7aa37a91740ea7e680810957e41',
-                'https://lists.debian.org/debian-lts-announce/2024/10/msg00033.html',
-                'https://lists.debian.org/debian-lts-announce/2024/11/msg00000.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2024-9143',
-                'https://openssl-library.org/news/secadv/20241016.txt',
-                'https://security.netapp.com/advisory/ntap-20241101-0001/',
-                'https://ubuntu.com/security/notices/USN-7264-1',
-                'https://ubuntu.com/security/notices/USN-7278-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2024-9143'
-              ],
-              'severity':   'LOW',
-              'suppressed': false,
-              'title':      'openssl: Low-level invalid GF(2^m) parameters lead to OOB memory access'
-            },
-            {
-              'cve':  'CVE-2023-5363',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N'
-                },
-                'redhat': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-684'
-              ],
-              'description':   "Issue summary: A bug has been identified in the processing of key and\ninitialisation vector (IV) lengths.  This can lead to potential truncation\nor overruns during the initialisation of some symmetric ciphers.\n\nImpact summary: A truncation in the IV can result in non-uniqueness,\nwhich could result in loss of confidentiality for some cipher modes.\n\nWhen calling EVP_EncryptInit_ex2(), EVP_DecryptInit_ex2() or\nEVP_CipherInit_ex2() the provided OSSL_PARAM array is processed after\nthe key and IV have been established.  Any alterations to the key length,\nvia the \"keylen\" parameter or the IV length, via the \"ivlen\" parameter,\nwithin the OSSL_PARAM array will not take effect as intended, potentially\ncausing truncation or overreading of these values.  The following ciphers\nand cipher modes are impacted: RC2, RC4, RC5, CCM, GCM and OCB.\n\nFor the CCM, GCM and OCB cipher modes, truncation of the IV can result in\nloss of confidentiality.  For example, when following NIST's SP 800-38D\nsection 8.2.1 guidance for constructing a deterministic IV for AES in\nGCM mode, truncation of the counter portion could lead to IV reuse.\n\nBoth truncations and overruns of the key and overruns of the IV will\nproduce incorrect results and could, in some cases, trigger a memory\nexception.  However, these issues are not currently assessed as security\ncritical.\n\nChanging the key and/or IV lengths is not considered to be a common operation\nand the vulnerable API was recently introduced. Furthermore it is likely that\napplication developers will have spotted this problem during testing since\ndecryption would fail unless both peers in the communication were similarly\nvulnerable. For these reasons we expect the probability of an application being\nvulnerable to this to be quite low. However if an application is vulnerable then\nthis issue is considered very serious. For these reasons we have assessed this\nissue as Moderate severity overall.\n\nThe OpenSSL SSL/TLS implementation is not affected by this issue.\n\nThe OpenSSL 3.0 and 3.1 FIPS providers are not affected by this because\nthe issue lies outside of the FIPS provider boundary.\n\nOpenSSL 3.1 and 3.0 are vulnerable to this issue.",
-              'diffID':        'sha256:10d47f76a792d77a3508f82b3ed8d1c8e9701d2aa1ece5e74cacd89b30e35b3f',
-              'fixedVersions': [
-                '3.1.4-r0'
-              ],
-              'installedVersion': '3.1.1-r3',
-              'packageName':      'libssl3',
-              'purl':             'pkg:apk/alpine/libssl3@3.1.1-r3?arch=x86_64&distro=3.18.0',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2023/10/24/1',
-                'https://access.redhat.com/errata/RHSA-2024:0310',
-                'https://access.redhat.com/security/cve/CVE-2023-5363',
-                'https://bugzilla.redhat.com/2243839',
-                'https://errata.almalinux.org/9/ALSA-2024-0310.html',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=0df40630850fb2740e6be6890bb905d3fc623b2d',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=5f69f5c65e483928c4b28ed16af6e5742929f1ee',
-                'https://linux.oracle.com/cve/CVE-2023-5363.html',
-                'https://linux.oracle.com/errata/ELSA-2024-12093.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-5363',
-                'https://security.netapp.com/advisory/ntap-20231027-0010/',
-                'https://security.netapp.com/advisory/ntap-20240201-0003/',
-                'https://security.netapp.com/advisory/ntap-20240201-0004/',
-                'https://security.netapp.com/advisory/ntap-20241108-0002/',
-                'https://ubuntu.com/security/notices/USN-6450-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-5363',
-                'https://www.debian.org/security/2023/dsa-5532',
-                'https://www.openssl.org/news/secadv/20231024.txt'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: Incorrect cipher key and IV length processing'
-            },
-            {
-              'cve':  'CVE-2024-6119',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-843'
-              ],
-              'description':   "Issue summary: Applications performing certificate name checks (e.g., TLS\nclients checking server certificates) may attempt to read an invalid memory\naddress resulting in abnormal termination of the application process.\n\nImpact summary: Abnormal termination of an application can a cause a denial of\nservice.\n\nApplications performing certificate name checks (e.g., TLS clients checking\nserver certificates) may attempt to read an invalid memory address when\ncomparing the expected name with an `otherName` subject alternative name of an\nX.509 certificate. This may result in an exception that terminates the\napplication program.\n\nNote that basic certificate chain validation (signatures, dates, ...) is not\naffected, the denial of service can occur only when the application also\nspecifies an expected DNS name, Email address or IP address.\n\nTLS servers rarely solicit client certificates, and even when they do, they\ngenerally don't perform a name check against a reference identifier (expected\nidentity), but rather extract the presented identity after checking the\ncertificate chain.  So TLS servers are generally not affected and the severity\nof the issue is Moderate.\n\nThe FIPS modules in 3.3, 3.2, 3.1 and 3.0 are not affected by this issue.",
-              'diffID':        'sha256:10d47f76a792d77a3508f82b3ed8d1c8e9701d2aa1ece5e74cacd89b30e35b3f',
-              'fixedVersions': [
-                '3.1.7-r0'
-              ],
-              'installedVersion': '3.1.1-r3',
-              'packageName':      'libssl3',
-              'purl':             'pkg:apk/alpine/libssl3@3.1.1-r3?arch=x86_64&distro=3.18.0',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2024/09/03/4',
-                'https://access.redhat.com/errata/RHSA-2024:8935',
-                'https://access.redhat.com/security/cve/CVE-2024-6119',
-                'https://bugzilla.redhat.com/2306158',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2306158',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-6119',
-                'https://errata.almalinux.org/9/ALSA-2024-8935.html',
-                'https://errata.rockylinux.org/RLSA-2024:6783',
-                'https://github.com/openssl/openssl/commit/05f360d9e849a1b277db628f1f13083a7f8dd04f',
-                'https://github.com/openssl/openssl/commit/06d1dc3fa96a2ba5a3e22735a033012aadc9f0d6',
-                'https://github.com/openssl/openssl/commit/621f3729831b05ee828a3203eddb621d014ff2b2',
-                'https://github.com/openssl/openssl/commit/7dfcee2cd2a63b2c64b9b4b0850be64cb695b0a0',
-                'https://github.com/openssl/openssl/security/advisories/GHSA-5qrj-vq78-58fj',
-                'https://linux.oracle.com/cve/CVE-2024-6119.html',
-                'https://linux.oracle.com/errata/ELSA-2024-8935.html',
-                'https://lists.freebsd.org/archives/freebsd-security/2024-September/000303.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2024-6119',
-                'https://openssl-library.org/news/secadv/20240903.txt',
-                'https://security.netapp.com/advisory/ntap-20240912-0001/',
-                'https://ubuntu.com/security/notices/USN-6986-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2024-6119'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: Possible denial of service in X.509 name checks'
-            },
-            {
-              'cve':  'CVE-2023-3817',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L'
-                },
-                'redhat': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L'
-                }
-              },
-              'cwes': [
-                'CWE-606',
-                'CWE-834'
-              ],
-              'description':   'Issue summary: Checking excessively long DH keys or parameters may be very slow.\n\nImpact summary: Applications that use the functions DH_check(), DH_check_ex()\nor EVP_PKEY_param_check() to check a DH key or DH parameters may experience long\ndelays. Where the key or parameters that are being checked have been obtained\nfrom an untrusted source this may lead to a Denial of Service.\n\nThe function DH_check() performs various checks on DH parameters. After fixing\nCVE-2023-3446 it was discovered that a large q parameter value can also trigger\nan overly long computation during some of these checks. A correct q value,\nif present, cannot be larger than the modulus p parameter, thus it is\nunnecessary to perform these checks if q is larger than p.\n\nAn application that calls DH_check() and supplies a key or parameters obtained\nfrom an untrusted source could be vulnerable to a Denial of Service attack.\n\nThe function DH_check() is itself called by a number of other OpenSSL functions.\nAn application calling any of those other functions may similarly be affected.\nThe other functions affected by this are DH_check_ex() and\nEVP_PKEY_param_check().\n\nAlso vulnerable are the OpenSSL dhparam and pkeyparam command line applications\nwhen using the "-check" option.\n\nThe OpenSSL SSL/TLS implementation is not affected by this issue.\n\nThe OpenSSL 3.0 and 3.1 FIPS providers are not affected by this issue.',
-              'diffID':        'sha256:10d47f76a792d77a3508f82b3ed8d1c8e9701d2aa1ece5e74cacd89b30e35b3f',
-              'fixedVersions': [
-                '3.1.2-r0'
-              ],
-              'installedVersion': '3.1.1-r3',
-              'packageName':      'libssl3',
-              'purl':             'pkg:apk/alpine/libssl3@3.1.1-r3?arch=x86_64&distro=3.18.0',
-              'references':       [
-                'http://seclists.org/fulldisclosure/2023/Jul/43',
-                'http://www.openwall.com/lists/oss-security/2023/07/31/1',
-                'http://www.openwall.com/lists/oss-security/2023/09/22/11',
-                'http://www.openwall.com/lists/oss-security/2023/09/22/9',
-                'http://www.openwall.com/lists/oss-security/2023/11/06/2',
-                'https://access.redhat.com/errata/RHSA-2024:2447',
-                'https://access.redhat.com/security/cve/CVE-2023-3817',
-                'https://bugzilla.redhat.com/2223016',
-                'https://bugzilla.redhat.com/2224962',
-                'https://bugzilla.redhat.com/2227852',
-                'https://bugzilla.redhat.com/2248616',
-                'https://bugzilla.redhat.com/2257571',
-                'https://bugzilla.redhat.com/2258502',
-                'https://bugzilla.redhat.com/2259944',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2224962',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2227852',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2248616',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2270358',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3446',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3817',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-5678',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-2408',
-                'https://errata.almalinux.org/9/ALSA-2024-2447.html',
-                'https://errata.rockylinux.org/RLSA-2023:7877',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=6a1eb62c29db6cb5eec707f9338aee00f44e26f5',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=869ad69aadd985c7b8ca6f4e5dd0eb274c9f3644',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=9002fd07327a91f35ba6c1307e71fa6fd4409b7f',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=91ddeba0f2269b017dc06c46c993a788974b1aa5',
-                'https://linux.oracle.com/cve/CVE-2023-3817.html',
-                'https://linux.oracle.com/errata/ELSA-2024-2447.html',
-                'https://lists.debian.org/debian-lts-announce/2023/08/msg00019.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-3817',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://security.netapp.com/advisory/ntap-20230818-0014/',
-                'https://security.netapp.com/advisory/ntap-20231027-0008/',
-                'https://security.netapp.com/advisory/ntap-20240621-0006/',
-                'https://ubuntu.com/security/notices/USN-6435-1',
-                'https://ubuntu.com/security/notices/USN-6435-2',
-                'https://ubuntu.com/security/notices/USN-6450-1',
-                'https://ubuntu.com/security/notices/USN-6709-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-3817',
-                'https://www.openssl.org/news/secadv/20230731.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'OpenSSL: Excessive time spent checking DH q parameter value'
-            },
-            {
-              'cve':  'CVE-2023-5678',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L'
-                },
-                'redhat': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L'
-                }
-              },
-              'cwes': [
-                'CWE-606',
-                'CWE-754'
-              ],
-              'description':   "Issue summary: Generating excessively long X9.42 DH keys or checking\nexcessively long X9.42 DH keys or parameters may be very slow.\n\nImpact summary: Applications that use the functions DH_generate_key() to\ngenerate an X9.42 DH key may experience long delays.  Likewise, applications\nthat use DH_check_pub_key(), DH_check_pub_key_ex() or EVP_PKEY_public_check()\nto check an X9.42 DH key or X9.42 DH parameters may experience long delays.\nWhere the key or parameters that are being checked have been obtained from\nan untrusted source this may lead to a Denial of Service.\n\nWhile DH_check() performs all the necessary checks (as of CVE-2023-3817),\nDH_check_pub_key() doesn't make any of these checks, and is therefore\nvulnerable for excessively large P and Q parameters.\n\nLikewise, while DH_generate_key() performs a check for an excessively large\nP, it doesn't check for an excessively large Q.\n\nAn application that calls DH_generate_key() or DH_check_pub_key() and\nsupplies a key or parameters obtained from an untrusted source could be\nvulnerable to a Denial of Service attack.\n\nDH_generate_key() and DH_check_pub_key() are also called by a number of\nother OpenSSL functions.  An application calling any of those other\nfunctions may similarly be affected.  The other functions affected by this\nare DH_check_pub_key_ex(), EVP_PKEY_public_check(), and EVP_PKEY_generate().\n\nAlso vulnerable are the OpenSSL pkey command line application when using the\n\"-pubcheck\" option, as well as the OpenSSL genpkey command line application.\n\nThe OpenSSL SSL/TLS implementation is not affected by this issue.\n\nThe OpenSSL 3.0 and 3.1 FIPS providers are not affected by this issue.",
-              'diffID':        'sha256:10d47f76a792d77a3508f82b3ed8d1c8e9701d2aa1ece5e74cacd89b30e35b3f',
-              'fixedVersions': [
-                '3.1.4-r1'
-              ],
-              'installedVersion': '3.1.1-r3',
-              'packageName':      'libssl3',
-              'purl':             'pkg:apk/alpine/libssl3@3.1.1-r3?arch=x86_64&distro=3.18.0',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2024/03/11/1',
-                'https://access.redhat.com/errata/RHSA-2024:2447',
-                'https://access.redhat.com/security/cve/CVE-2023-5678',
-                'https://bugzilla.redhat.com/2223016',
-                'https://bugzilla.redhat.com/2224962',
-                'https://bugzilla.redhat.com/2227852',
-                'https://bugzilla.redhat.com/2248616',
-                'https://bugzilla.redhat.com/2257571',
-                'https://bugzilla.redhat.com/2258502',
-                'https://bugzilla.redhat.com/2259944',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2224962',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2227852',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2248616',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2270358',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3446',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3817',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-5678',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-2408',
-                'https://errata.almalinux.org/9/ALSA-2024-2447.html',
-                'https://errata.rockylinux.org/RLSA-2023:7877',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=34efaef6c103d636ab507a0cc34dca4d3aecc055',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=710fee740904b6290fef0dd5536fbcedbc38ff0c',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=db925ae2e65d0d925adef429afc37f75bd1c2017',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=ddeb4b6c6d527e54ce9a99cba785c0f7776e54b6',
-                'https://linux.oracle.com/cve/CVE-2023-5678.html',
-                'https://linux.oracle.com/errata/ELSA-2024-2447.html',
-                'https://lists.debian.org/debian-lts-announce/2024/10/msg00033.html',
-                'https://lists.debian.org/debian-lts-announce/2024/11/msg00000.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-5678',
-                'https://security.netapp.com/advisory/ntap-20231130-0010/',
-                'https://ubuntu.com/security/notices/USN-6622-1',
-                'https://ubuntu.com/security/notices/USN-6632-1',
-                'https://ubuntu.com/security/notices/USN-6709-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-5678',
-                'https://www.openssl.org/news/secadv/20231106.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: Generating excessively long X9.42 DH keys or checking excessively long X9.42 DH keys or parameters may be very slow'
-            },
-            {
-              'cve':  'CVE-2023-6129',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '6.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-440',
-                'CWE-787'
-              ],
-              'description':   'Issue summary: The POLY1305 MAC (message authentication code) implementation\ncontains a bug that might corrupt the internal state of applications running\non PowerPC CPU based platforms if the CPU provides vector instructions.\n\nImpact summary: If an attacker can influence whether the POLY1305 MAC\nalgorithm is used, the application state might be corrupted with various\napplication dependent consequences.\n\nThe POLY1305 MAC (message authentication code) implementation in OpenSSL for\nPowerPC CPUs restores the contents of vector registers in a different order\nthan they are saved. Thus the contents of some of these vector registers\nare corrupted when returning to the caller. The vulnerable code is used only\non newer PowerPC processors supporting the PowerISA 2.07 instructions.\n\nThe consequences of this kind of internal application state corruption can\nbe various - from no consequences, if the calling application does not\ndepend on the contents of non-volatile XMM registers at all, to the worst\nconsequences, where the attacker could get complete control of the application\nprocess. However unless the compiler uses the vector registers for storing\npointers, the most likely consequence, if any, would be an incorrect result\nof some application dependent calculations or a crash leading to a denial of\nservice.\n\nThe POLY1305 MAC algorithm is most frequently used as part of the\nCHACHA20-POLY1305 AEAD (authenticated encryption with associated data)\nalgorithm. The most common usage of this AEAD cipher is with TLS protocol\nversions 1.2 and 1.3. If this cipher is enabled on the server a malicious\nclient can influence whether this AEAD cipher is used. This implies that\nTLS server applications using OpenSSL can be potentially impacted. However\nwe are currently not aware of any concrete application that would be affected\nby this issue therefore we consider this a Low severity security issue.',
-              'diffID':        'sha256:10d47f76a792d77a3508f82b3ed8d1c8e9701d2aa1ece5e74cacd89b30e35b3f',
-              'fixedVersions': [
-                '3.1.4-r3'
-              ],
-              'installedVersion': '3.1.1-r3',
-              'packageName':      'libssl3',
-              'purl':             'pkg:apk/alpine/libssl3@3.1.1-r3?arch=x86_64&distro=3.18.0',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2024/03/11/1',
-                'https://access.redhat.com/errata/RHSA-2024:9088',
-                'https://access.redhat.com/security/cve/CVE-2023-6129',
-                'https://bugzilla.redhat.com/2257571',
-                'https://bugzilla.redhat.com/2258502',
-                'https://bugzilla.redhat.com/2259944',
-                'https://bugzilla.redhat.com/2284243',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2257571',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2258502',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2259944',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2284243',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-6129',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-6237',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-0727',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-1298',
-                'https://errata.almalinux.org/9/ALSA-2024-9088.html',
-                'https://errata.rockylinux.org/RLSA-2024:9088',
-                'https://github.com/openssl/openssl/commit/050d26383d4e264966fb83428e72d5d48f402d35',
-                'https://github.com/openssl/openssl/commit/5b139f95c9a47a55a0c54100f3837b1eee942b04',
-                'https://github.com/openssl/openssl/commit/f3fc5808fe9ff74042d639839610d03b8fdcc015',
-                'https://linux.oracle.com/cve/CVE-2023-6129.html',
-                'https://linux.oracle.com/errata/ELSA-2024-9088.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-6129',
-                'https://security.netapp.com/advisory/ntap-20240216-0009/',
-                'https://security.netapp.com/advisory/ntap-20240426-0008/',
-                'https://security.netapp.com/advisory/ntap-20240426-0013/',
-                'https://security.netapp.com/advisory/ntap-20240503-0011/',
-                'https://ubuntu.com/security/notices/USN-6622-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-6129',
-                'https://www.openssl.org/news/secadv/20240109.txt',
-                'https://www.openwall.com/lists/oss-security/2024/01/09/1'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: POLY1305 MAC implementation corrupts vector registers on PowerPC'
-            },
-            {
-              'cve':  'CVE-2023-6237',
-              'cvss': {
-                'redhat': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-606'
-              ],
-              'description':   "Issue summary: Checking excessively long invalid RSA public keys may take\na long time.\n\nImpact summary: Applications that use the function EVP_PKEY_public_check()\nto check RSA public keys may experience long delays. Where the key that\nis being checked has been obtained from an untrusted source this may lead\nto a Denial of Service.\n\nWhen function EVP_PKEY_public_check() is called on RSA public keys,\na computation is done to confirm that the RSA modulus, n, is composite.\nFor valid RSA keys, n is a product of two or more large primes and this\ncomputation completes quickly. However, if n is an overly large prime,\nthen this computation would take a long time.\n\nAn application that calls EVP_PKEY_public_check() and supplies an RSA key\nobtained from an untrusted source could be vulnerable to a Denial of Service\nattack.\n\nThe function EVP_PKEY_public_check() is not called from other OpenSSL\nfunctions however it is called from the OpenSSL pkey command line\napplication. For that reason that application is also vulnerable if used\nwith the '-pubin' and '-check' options on untrusted data.\n\nThe OpenSSL SSL/TLS implementation is not affected by this issue.\n\nThe OpenSSL 3.0 and 3.1 FIPS providers are affected by this issue.",
-              'diffID':        'sha256:10d47f76a792d77a3508f82b3ed8d1c8e9701d2aa1ece5e74cacd89b30e35b3f',
-              'fixedVersions': [
-                '3.1.4-r4'
-              ],
-              'installedVersion': '3.1.1-r3',
-              'packageName':      'libssl3',
-              'purl':             'pkg:apk/alpine/libssl3@3.1.1-r3?arch=x86_64&distro=3.18.0',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2024/03/11/1',
-                'https://access.redhat.com/errata/RHSA-2024:9088',
-                'https://access.redhat.com/security/cve/CVE-2023-6237',
-                'https://bugzilla.redhat.com/2257571',
-                'https://bugzilla.redhat.com/2258502',
-                'https://bugzilla.redhat.com/2259944',
-                'https://bugzilla.redhat.com/2284243',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2257571',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2258502',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2259944',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2284243',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-6129',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-6237',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-0727',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-1298',
-                'https://errata.almalinux.org/9/ALSA-2024-9088.html',
-                'https://errata.rockylinux.org/RLSA-2024:9088',
-                'https://github.com/openssl/openssl/commit/0b0f7abfb37350794a4b8960fafc292cd5d1b84d',
-                'https://github.com/openssl/openssl/commit/18c02492138d1eb8b6548cb26e7b625fb2414a2a',
-                'https://github.com/openssl/openssl/commit/a830f551557d3d66a84bbb18a5b889c640c36294',
-                'https://linux.oracle.com/cve/CVE-2023-6237.html',
-                'https://linux.oracle.com/errata/ELSA-2024-9088.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-6237',
-                'https://security.netapp.com/advisory/ntap-20240531-0007/',
-                'https://ubuntu.com/security/notices/USN-6622-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-6237',
-                'https://www.openssl.org/news/secadv/20240115.txt',
-                'https://www.openwall.com/lists/oss-security/2024/01/15/2'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: Excessive time spent checking invalid RSA public keys'
-            },
-            {
-              'cve':  'CVE-2024-0727',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '5.5',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H'
-                },
-                'nvd': {
-                  'v3score':  '5.5',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '5.5',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-476'
-              ],
-              'description':   'Issue summary: Processing a maliciously formatted PKCS12 file may lead OpenSSL\nto crash leading to a potential Denial of Service attack\n\nImpact summary: Applications loading files in the PKCS12 format from untrusted\nsources might terminate abruptly.\n\nA file in PKCS12 format can contain certificates and keys and may come from an\nuntrusted source. The PKCS12 specification allows certain fields to be NULL, but\nOpenSSL does not correctly check for this case. This can lead to a NULL pointer\ndereference that results in OpenSSL crashing. If an application processes PKCS12\nfiles from an untrusted source using the OpenSSL APIs then that application will\nbe vulnerable to this issue.\n\nOpenSSL APIs that are vulnerable to this are: PKCS12_parse(),\nPKCS12_unpack_p7data(), PKCS12_unpack_p7encdata(), PKCS12_unpack_authsafes()\nand PKCS12_newpass().\n\nWe have also fixed a similar issue in SMIME_write_PKCS7(). However since this\nfunction is related to writing data we do not consider it security significant.\n\nThe FIPS modules in 3.2, 3.1 and 3.0 are not affected by this issue.',
-              'diffID':        'sha256:10d47f76a792d77a3508f82b3ed8d1c8e9701d2aa1ece5e74cacd89b30e35b3f',
-              'fixedVersions': [
-                '3.1.4-r5'
-              ],
-              'installedVersion': '3.1.1-r3',
-              'packageName':      'libssl3',
-              'purl':             'pkg:apk/alpine/libssl3@3.1.1-r3?arch=x86_64&distro=3.18.0',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2024/03/11/1',
-                'https://access.redhat.com/errata/RHSA-2024:9088',
-                'https://access.redhat.com/security/cve/CVE-2024-0727',
-                'https://bugzilla.redhat.com/2257571',
-                'https://bugzilla.redhat.com/2258502',
-                'https://bugzilla.redhat.com/2259944',
-                'https://bugzilla.redhat.com/2284243',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2257571',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2258502',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2259944',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2284243',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-6129',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-6237',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-0727',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-1298',
-                'https://errata.almalinux.org/9/ALSA-2024-9088.html',
-                'https://errata.rockylinux.org/RLSA-2024:9088',
-                'https://github.com/alexcrichton/openssl-src-rs/commit/add20f73b6b42be7451af2e1044d4e0e778992b2',
-                'https://github.com/github/advisory-database/pull/3472',
-                'https://github.com/openssl/openssl/commit/09df4395b5071217b76dc7d3d2e630eb8c5a79c2',
-                'https://github.com/openssl/openssl/commit/775acfdbd0c6af9ac855f34969cdab0c0c90844a',
-                'https://github.com/openssl/openssl/commit/d135eeab8a5dbf72b3da5240bab9ddb7678dbd2c',
-                'https://github.com/openssl/openssl/pull/23362',
-                'https://github.com/pyca/cryptography/commit/3519591d255d4506fbcd0d04037d45271903c64d',
-                'https://github.openssl.org/openssl/extended-releases/commit/03b3941d60c4bce58fab69a0c22377ab439bc0e8',
-                'https://github.openssl.org/openssl/extended-releases/commit/aebaa5883e31122b404e450732dc833dc9dee539',
-                'https://linux.oracle.com/cve/CVE-2024-0727.html',
-                'https://linux.oracle.com/errata/ELSA-2024-9088.html',
-                'https://lists.debian.org/debian-lts-announce/2024/10/msg00033.html',
-                'https://lists.debian.org/debian-lts-announce/2024/11/msg00000.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2024-0727',
-                'https://security.netapp.com/advisory/ntap-20240208-0006',
-                'https://security.netapp.com/advisory/ntap-20240208-0006/',
-                'https://ubuntu.com/security/notices/USN-6622-1',
-                'https://ubuntu.com/security/notices/USN-6632-1',
-                'https://ubuntu.com/security/notices/USN-6709-1',
-                'https://ubuntu.com/security/notices/USN-7018-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2024-0727',
-                'https://www.openssl.org/news/secadv/20240125.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: denial of service via null dereference'
-            },
-            {
-              'cve':  'CVE-2024-13176',
-              'cvss': {
-                'redhat': {
-                  'v3score':  '4.7',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-385'
-              ],
-              'description':   'Issue summary: A timing side-channel which could potentially allow recovering\nthe private key exists in the ECDSA signature computation.\n\nImpact summary: A timing side-channel in ECDSA signature computations\ncould allow recovering the private key by an attacker. However, measuring\nthe timing would require either local access to the signing application or\na very fast network connection with low latency.\n\nThere is a timing signal of around 300 nanoseconds when the top word of\nthe inverted ECDSA nonce value is zero. This can happen with significant\nprobability only for some of the supported elliptic curves. In particular\nthe NIST P-521 curve is affected. To be able to measure this leak, the attacker\nprocess must either be located in the same physical computer or must\nhave a very fast network connection with low latency. For that reason\nthe severity of this vulnerability is Low.\n\nThe FIPS modules in 3.4, 3.3, 3.2, 3.1 and 3.0 are affected by this issue.',
-              'diffID':        'sha256:10d47f76a792d77a3508f82b3ed8d1c8e9701d2aa1ece5e74cacd89b30e35b3f',
-              'fixedVersions': [
-                '3.1.8-r0'
-              ],
-              'installedVersion': '3.1.1-r3',
-              'packageName':      'libssl3',
-              'purl':             'pkg:apk/alpine/libssl3@3.1.1-r3?arch=x86_64&distro=3.18.0',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2025/01/20/2',
-                'https://access.redhat.com/errata/RHSA-2025:16046',
-                'https://access.redhat.com/security/cve/CVE-2024-13176',
-                'https://bugzilla.redhat.com/2359885',
-                'https://bugzilla.redhat.com/2359888',
-                'https://bugzilla.redhat.com/2359892',
-                'https://bugzilla.redhat.com/2359894',
-                'https://bugzilla.redhat.com/2359895',
-                'https://bugzilla.redhat.com/2359899',
-                'https://bugzilla.redhat.com/2359900',
-                'https://bugzilla.redhat.com/2359902',
-                'https://bugzilla.redhat.com/2359903',
-                'https://bugzilla.redhat.com/2359911',
-                'https://bugzilla.redhat.com/2359918',
-                'https://bugzilla.redhat.com/2359920',
-                'https://bugzilla.redhat.com/2359924',
-                'https://bugzilla.redhat.com/2359928',
-                'https://bugzilla.redhat.com/2359930',
-                'https://bugzilla.redhat.com/2359932',
-                'https://bugzilla.redhat.com/2359934',
-                'https://bugzilla.redhat.com/2359938',
-                'https://bugzilla.redhat.com/2359940',
-                'https://bugzilla.redhat.com/2359943',
-                'https://bugzilla.redhat.com/2359944',
-                'https://bugzilla.redhat.com/2359945',
-                'https://bugzilla.redhat.com/2359947',
-                'https://bugzilla.redhat.com/2359950',
-                'https://bugzilla.redhat.com/2359963',
-                'https://bugzilla.redhat.com/2359964',
-                'https://bugzilla.redhat.com/2359972',
-                'https://bugzilla.redhat.com/2370920',
-                'https://bugzilla.redhat.com/2380264',
-                'https://bugzilla.redhat.com/2380273',
-                'https://bugzilla.redhat.com/2380274',
-                'https://bugzilla.redhat.com/2380278',
-                'https://bugzilla.redhat.com/2380280',
-                'https://bugzilla.redhat.com/2380283',
-                'https://bugzilla.redhat.com/2380284',
-                'https://bugzilla.redhat.com/2380290',
-                'https://bugzilla.redhat.com/2380291',
-                'https://bugzilla.redhat.com/2380295',
-                'https://bugzilla.redhat.com/2380298',
-                'https://bugzilla.redhat.com/2380306',
-                'https://bugzilla.redhat.com/2380308',
-                'https://bugzilla.redhat.com/2380309',
-                'https://bugzilla.redhat.com/2380310',
-                'https://bugzilla.redhat.com/2380312',
-                'https://bugzilla.redhat.com/2380313',
-                'https://bugzilla.redhat.com/2380320',
-                'https://bugzilla.redhat.com/2380321',
-                'https://bugzilla.redhat.com/2380322',
-                'https://bugzilla.redhat.com/2380326',
-                'https://bugzilla.redhat.com/2380327',
-                'https://bugzilla.redhat.com/2380334',
-                'https://bugzilla.redhat.com/2380335',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2338999',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359885',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359888',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359892',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359894',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359895',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359899',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359900',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359902',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359903',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359911',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359918',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359920',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359924',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359928',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359930',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359932',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359934',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359938',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359940',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359943',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359944',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359945',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359947',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359950',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359963',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359964',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2359972',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2370920',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380264',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380273',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380274',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380278',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380280',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380283',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380284',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380290',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380291',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380295',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380298',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380306',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380308',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380309',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380310',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380312',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380313',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380320',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380321',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380322',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380326',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380327',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380334',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2380335',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-13176',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21574',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21575',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21577',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21579',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21580',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21581',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21584',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21585',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21588',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30681',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30682',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30683',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30684',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30685',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30687',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30688',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30689',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30693',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30695',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30696',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30699',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30703',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30704',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30705',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30715',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30721',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30722',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50077',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50078',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50079',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50080',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50081',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50082',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50083',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50084',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50085',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50086',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50087',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50088',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50091',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50092',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50093',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50094',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50096',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50097',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50098',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50099',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50100',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50101',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50102',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50104',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-5399',
-                'https://errata.almalinux.org/9/ALSA-2025-16046.html',
-                'https://errata.rockylinux.org/RLSA-2025:15699',
-                'https://github.com/openssl/openssl/commit/07272b05b04836a762b4baa874958af51d513844',
-                'https://github.com/openssl/openssl/commit/2af62e74fb59bc469506bc37eb2990ea408d9467',
-                'https://github.com/openssl/openssl/commit/392dcb336405a0c94486aa6655057f59fd3a0902',
-                'https://github.com/openssl/openssl/commit/4b1cb94a734a7d4ec363ac0a215a25c181e11f65',
-                'https://github.com/openssl/openssl/commit/77c608f4c8857e63e98e66444e2e761c9627916f',
-                'https://github.openssl.org/openssl/extended-releases/commit/0d5fd1ab987f7571e2c955d8d8b638fc0fb54ded',
-                'https://github.openssl.org/openssl/extended-releases/commit/a2639000db19878d5d89586ae7b725080592ae86',
-                'https://linux.oracle.com/cve/CVE-2024-13176.html',
-                'https://linux.oracle.com/errata/ELSA-2025-16046.html',
-                'https://lists.debian.org/debian-lts-announce/2025/05/msg00028.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2024-13176',
-                'https://openssl-library.org/news/secadv/20250120.txt',
-                'https://security.netapp.com/advisory/ntap-20250124-0005/',
-                'https://security.netapp.com/advisory/ntap-20250418-0010/',
-                'https://security.netapp.com/advisory/ntap-20250502-0006/',
-                'https://ubuntu.com/security/notices/USN-7264-1',
-                'https://ubuntu.com/security/notices/USN-7278-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2024-13176',
-                'https://www.oracle.com/security-alerts/cpuapr2025.html#AppendixMSQL'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: Timing side-channel in ECDSA signature computation'
-            },
-            {
-              'cve':  'CVE-2024-4603',
-              'cvss': {
-                'redhat': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L'
-                }
-              },
-              'cwes': [
-                'CWE-606',
-                'CWE-834'
-              ],
-              'description':   'Issue summary: Checking excessively long DSA keys or parameters may be very\nslow.\n\nImpact summary: Applications that use the functions EVP_PKEY_param_check()\nor EVP_PKEY_public_check() to check a DSA public key or DSA parameters may\nexperience long delays. Where the key or parameters that are being checked\nhave been obtained from an untrusted source this may lead to a Denial of\nService.\n\nThe functions EVP_PKEY_param_check() or EVP_PKEY_public_check() perform\nvarious checks on DSA parameters. Some of those computations take a long time\nif the modulus (`p` parameter) is too large.\n\nTrying to use a very large modulus is slow and OpenSSL will not allow using\npublic keys with a modulus which is over 10,000 bits in length for signature\nverification. However the key and parameter check functions do not limit\nthe modulus size when performing the checks.\n\nAn application that calls EVP_PKEY_param_check() or EVP_PKEY_public_check()\nand supplies a key or parameters obtained from an untrusted source could be\nvulnerable to a Denial of Service attack.\n\nThese functions are not called by OpenSSL itself on untrusted DSA keys so\nonly applications that directly call these functions may be vulnerable.\n\nAlso vulnerable are the OpenSSL pkey and pkeyparam command line applications\nwhen using the `-check` option.\n\nThe OpenSSL SSL/TLS implementation is not affected by this issue.\n\nThe OpenSSL 3.0 and 3.1 FIPS providers are affected by this issue.',
-              'diffID':        'sha256:10d47f76a792d77a3508f82b3ed8d1c8e9701d2aa1ece5e74cacd89b30e35b3f',
-              'fixedVersions': [
-                '3.1.5-r0'
-              ],
-              'installedVersion': '3.1.1-r3',
-              'packageName':      'libssl3',
-              'purl':             'pkg:apk/alpine/libssl3@3.1.1-r3?arch=x86_64&distro=3.18.0',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2024/05/16/2',
-                'https://access.redhat.com/errata/RHSA-2024:9333',
-                'https://access.redhat.com/security/cve/CVE-2024-4603',
-                'https://bugzilla.redhat.com/2274020',
-                'https://bugzilla.redhat.com/2281029',
-                'https://bugzilla.redhat.com/2283757',
-                'https://bugzilla.redhat.com/2294581',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2274020',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2281029',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2283757',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2294581',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-2511',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-4603',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-4741',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-5535',
-                'https://errata.almalinux.org/9/ALSA-2024-9333.html',
-                'https://errata.rockylinux.org/RLSA-2024:9333',
-                'https://github.com/openssl/openssl/commit/3559e868e58005d15c6013a0c1fd832e51c73397',
-                'https://github.com/openssl/openssl/commit/53ea06486d296b890d565fb971b2764fcd826e7e',
-                'https://github.com/openssl/openssl/commit/9c39b3858091c152f52513c066ff2c5a47969f0d',
-                'https://github.com/openssl/openssl/commit/da343d0605c826ef197aceedc67e8e04f065f740',
-                'https://linux.oracle.com/cve/CVE-2024-4603.html',
-                'https://linux.oracle.com/errata/ELSA-2024-9333.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2024-4603',
-                'https://security.netapp.com/advisory/ntap-20240621-0001/',
-                'https://ubuntu.com/security/notices/USN-6937-1',
-                'https://www.cve.org/CVERecord?id=CVE-2024-4603',
-                'https://www.openssl.org/news/secadv/20240516.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: Excessive time spent checking DSA keys and parameters'
-            },
-            {
-              'cve':  'CVE-2024-4741',
-              'cvss': {
-                'redhat': {
-                  'v3score':  '5.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   'Issue summary: Calling the OpenSSL API function SSL_free_buffers may cause\nmemory to be accessed that was previously freed in some situations\n\nImpact summary: A use after free can have a range of potential consequences such\nas the corruption of valid data, crashes or execution of arbitrary code.\nHowever, only applications that directly call the SSL_free_buffers function are\naffected by this issue. Applications that do not call this function are not\nvulnerable. Our investigations indicate that this function is rarely used by\napplications.\n\nThe SSL_free_buffers function is used to free the internal OpenSSL buffer used\nwhen processing an incoming record from the network. The call is only expected\nto succeed if the buffer is not currently in use. However, two scenarios have\nbeen identified where the buffer is freed even when still in use.\n\nThe first scenario occurs where a record header has been received from the\nnetwork and processed by OpenSSL, but the full record body has not yet arrived.\nIn this case calling SSL_free_buffers will succeed even though a record has only\nbeen partially processed and the buffer is still in use.\n\nThe second scenario occurs where a full record containing application data has\nbeen received and processed by OpenSSL but the application has only read part of\nthis data. Again a call to SSL_free_buffers will succeed even though the buffer\nis still in use.\n\nWhile these scenarios could occur accidentally during normal operation a\nmalicious attacker could attempt to engineer a stituation where this occurs.\nWe are not aware of this issue being actively exploited.\n\nThe FIPS modules in 3.3, 3.2, 3.1 and 3.0 are not affected by this issue.',
-              'diffID':        'sha256:10d47f76a792d77a3508f82b3ed8d1c8e9701d2aa1ece5e74cacd89b30e35b3f',
-              'fixedVersions': [
-                '3.1.6-r0'
-              ],
-              'installedVersion': '3.1.1-r3',
-              'packageName':      'libssl3',
-              'purl':             'pkg:apk/alpine/libssl3@3.1.1-r3?arch=x86_64&distro=3.18.0',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2024:9333',
-                'https://access.redhat.com/security/cve/CVE-2024-4741',
-                'https://bugzilla.redhat.com/2274020',
-                'https://bugzilla.redhat.com/2281029',
-                'https://bugzilla.redhat.com/2283757',
-                'https://bugzilla.redhat.com/2294581',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2274020',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2281029',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2283757',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2294581',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-2511',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-4603',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-4741',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-5535',
-                'https://errata.almalinux.org/9/ALSA-2024-9333.html',
-                'https://errata.rockylinux.org/RLSA-2024:9333',
-                'https://github.com/openssl/openssl/commit/704f725b96aa373ee45ecfb23f6abfe8be8d9177',
-                'https://github.com/openssl/openssl/commit/b3f0eb0a295f58f16ba43ba99dad70d4ee5c437d',
-                'https://github.com/openssl/openssl/commit/c88c3de51020c37e8706bf7a682a162593053aac',
-                'https://github.com/openssl/openssl/commit/e5093133c35ca82874ad83697af76f4b0f7e3bd8',
-                'https://github.openssl.org/openssl/extended-releases/commit/f7a045f3143fc6da2ee66bf52d8df04829590dd4',
-                'https://linux.oracle.com/cve/CVE-2024-4741.html',
-                'https://linux.oracle.com/errata/ELSA-2024-9333.html',
-                'https://lists.debian.org/debian-lts-announce/2024/10/msg00033.html',
-                'https://lists.debian.org/debian-lts-announce/2024/11/msg00000.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2024-4741',
-                'https://security.netapp.com/advisory/ntap-20240621-0004/',
-                'https://ubuntu.com/security/notices/USN-6937-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2024-4741',
-                'https://www.openssl.org/news/secadv/20240528.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: Use After Free with SSL_free_buffers'
-            },
-            {
-              'cve':  'CVE-2024-5535',
-              'cvss': {
-                'redhat': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-125'
-              ],
-              'description':   'Issue summary: Calling the OpenSSL API function SSL_select_next_proto with an\nempty supported client protocols buffer may cause a crash or memory contents to\nbe sent to the peer.\n\nImpact summary: A buffer overread can have a range of potential consequences\nsuch as unexpected application beahviour or a crash. In particular this issue\ncould result in up to 255 bytes of arbitrary private data from memory being sent\nto the peer leading to a loss of confidentiality. However, only applications\nthat directly call the SSL_select_next_proto function with a 0 length list of\nsupported client protocols are affected by this issue. This would normally never\nbe a valid scenario and is typically not under attacker control but may occur by\naccident in the case of a configuration or programming error in the calling\napplication.\n\nThe OpenSSL API function SSL_select_next_proto is typically used by TLS\napplications that support ALPN (Application Layer Protocol Negotiation) or NPN\n(Next Protocol Negotiation). NPN is older, was never standardised and\nis deprecated in favour of ALPN. We believe that ALPN is significantly more\nwidely deployed than NPN. The SSL_select_next_proto function accepts a list of\nprotocols from the server and a list of protocols from the client and returns\nthe first protocol that appears in the server list that also appears in the\nclient list. In the case of no overlap between the two lists it returns the\nfirst item in the client list. In either case it will signal whether an overlap\nbetween the two lists was found. In the case where SSL_select_next_proto is\ncalled with a zero length client list it fails to notice this condition and\nreturns the memory immediately following the client list pointer (and reports\nthat there was no overlap in the lists).\n\nThis function is typically called from a server side application callback for\nALPN or a client side application callback for NPN. In the case of ALPN the list\nof protocols supplied by the client is guaranteed by libssl to never be zero in\nlength. The list of server protocols comes from the application and should never\nnormally be expected to be of zero length. In this case if the\nSSL_select_next_proto function has been called as expected (with the list\nsupplied by the client passed in the client/client_len parameters), then the\napplication will not be vulnerable to this issue. If the application has\naccidentally been configured with a zero length server list, and has\naccidentally passed that zero length server list in the client/client_len\nparameters, and has additionally failed to correctly handle a "no overlap"\nresponse (which would normally result in a handshake failure in ALPN) then it\nwill be vulnerable to this problem.\n\nIn the case of NPN, the protocol permits the client to opportunistically select\na protocol when there is no overlap. OpenSSL returns the first client protocol\nin the no overlap case in support of this. The list of client protocols comes\nfrom the application and should never normally be expected to be of zero length.\nHowever if the SSL_select_next_proto function is accidentally called with a\nclient_len of 0 then an invalid memory pointer will be returned instead. If the\napplication uses this output as the opportunistic protocol then the loss of\nconfidentiality will occur.\n\nThis issue has been assessed as Low severity because applications are most\nlikely to be vulnerable if they are using NPN instead of ALPN - but NPN is not\nwidely used. It also requires an application configuration or programming error.\nFinally, this issue would not typically be under attacker control making active\nexploitation unlikely.\n\nThe FIPS modules in 3.3, 3.2, 3.1 and 3.0 are not affected by this issue.\n\nDue to the low severity of this issue we are not issuing new releases of\nOpenSSL at this time. The fix will be included in the next releases when they\nbecome available.',
-              'diffID':        'sha256:10d47f76a792d77a3508f82b3ed8d1c8e9701d2aa1ece5e74cacd89b30e35b3f',
-              'fixedVersions': [
-                '3.1.6-r0'
-              ],
-              'installedVersion': '3.1.1-r3',
-              'packageName':      'libssl3',
-              'purl':             'pkg:apk/alpine/libssl3@3.1.1-r3?arch=x86_64&distro=3.18.0',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2024/06/27/1',
-                'http://www.openwall.com/lists/oss-security/2024/06/28/4',
-                'http://www.openwall.com/lists/oss-security/2024/08/15/1',
-                'https://access.redhat.com/errata/RHSA-2025:1671',
-                'https://access.redhat.com/security/cve/CVE-2024-5535',
-                'https://bugzilla.redhat.com/2294581',
-                'https://bugzilla.redhat.com/2294676',
-                'https://bugzilla.redhat.com/2301888',
-                'https://bugzilla.redhat.com/2318857',
-                'https://bugzilla.redhat.com/2318858',
-                'https://bugzilla.redhat.com/2318870',
-                'https://bugzilla.redhat.com/2318873',
-                'https://bugzilla.redhat.com/2318874',
-                'https://bugzilla.redhat.com/2318876',
-                'https://bugzilla.redhat.com/2318882',
-                'https://bugzilla.redhat.com/2318883',
-                'https://bugzilla.redhat.com/2318884',
-                'https://bugzilla.redhat.com/2318885',
-                'https://bugzilla.redhat.com/2318886',
-                'https://bugzilla.redhat.com/2318897',
-                'https://bugzilla.redhat.com/2318900',
-                'https://bugzilla.redhat.com/2318905',
-                'https://bugzilla.redhat.com/2318914',
-                'https://bugzilla.redhat.com/2318922',
-                'https://bugzilla.redhat.com/2318923',
-                'https://bugzilla.redhat.com/2318925',
-                'https://bugzilla.redhat.com/2318926',
-                'https://bugzilla.redhat.com/2318927',
-                'https://bugzilla.redhat.com/2331191',
-                'https://bugzilla.redhat.com/2339218',
-                'https://bugzilla.redhat.com/2339220',
-                'https://bugzilla.redhat.com/2339221',
-                'https://bugzilla.redhat.com/2339226',
-                'https://bugzilla.redhat.com/2339231',
-                'https://bugzilla.redhat.com/2339236',
-                'https://bugzilla.redhat.com/2339238',
-                'https://bugzilla.redhat.com/2339243',
-                'https://bugzilla.redhat.com/2339247',
-                'https://bugzilla.redhat.com/2339252',
-                'https://bugzilla.redhat.com/2339259',
-                'https://bugzilla.redhat.com/2339266',
-                'https://bugzilla.redhat.com/2339270',
-                'https://bugzilla.redhat.com/2339271',
-                'https://bugzilla.redhat.com/2339275',
-                'https://bugzilla.redhat.com/2339277',
-                'https://bugzilla.redhat.com/2339281',
-                'https://bugzilla.redhat.com/2339284',
-                'https://bugzilla.redhat.com/2339291',
-                'https://bugzilla.redhat.com/2339293',
-                'https://bugzilla.redhat.com/2339295',
-                'https://bugzilla.redhat.com/2339299',
-                'https://bugzilla.redhat.com/2339300',
-                'https://bugzilla.redhat.com/2339304',
-                'https://bugzilla.redhat.com/2339305',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2274020',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2281029',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2283757',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2294581',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-2511',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-4603',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-4741',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-5535',
-                'https://errata.almalinux.org/9/ALSA-2025-1671.html',
-                'https://errata.rockylinux.org/RLSA-2024:9333',
-                'https://github.com/openssl/openssl/commit/4ada436a1946cbb24db5ab4ca082b69c1bc10f37',
-                'https://github.com/openssl/openssl/commit/99fb785a5f85315b95288921a321a935ea29a51e',
-                'https://github.com/openssl/openssl/commit/cf6f91f6121f4db167405db2f0de410a456f260c',
-                'https://github.com/openssl/openssl/commit/e86ac436f0bd54d4517745483e2315650fae7b2c',
-                'https://github.openssl.org/openssl/extended-releases/commit/9947251413065a05189a63c9b7a6c1d4e224c21c',
-                'https://github.openssl.org/openssl/extended-releases/commit/b78ec0824da857223486660177d3b1f255c65d87',
-                'https://linux.oracle.com/cve/CVE-2024-5535.html',
-                'https://linux.oracle.com/errata/ELSA-2025-1673.html',
-                'https://lists.debian.org/debian-lts-announce/2024/10/msg00033.html',
-                'https://lists.debian.org/debian-lts-announce/2024/11/msg00000.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2024-5535',
-                'https://openssl.org/news/secadv/20240627.txt',
-                'https://security.netapp.com/advisory/ntap-20240712-0005/',
-                'https://security.netapp.com/advisory/ntap-20241025-0006/',
-                'https://security.netapp.com/advisory/ntap-20241025-0010/',
-                'https://ubuntu.com/security/notices/USN-6937-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2024-5535',
-                'https://www.openssl.org/news/secadv/20240627.txt',
-                'https://www.oracle.com/security-alerts/cpuoct2024.html#AppendixMSQL'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: SSL_select_next_proto buffer overread'
-            },
-            {
-              'cve':  'CVE-2024-2511',
-              'cvss': {
-                'redhat': {
-                  'v3score':  '3.7',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L'
-                }
-              },
-              'cwes': [
-                'CWE-1325'
-              ],
-              'description':   'Issue summary: Some non-default TLS server configurations can cause unbounded\nmemory growth when processing TLSv1.3 sessions\n\nImpact summary: An attacker may exploit certain server configurations to trigger\nunbounded memory growth that would lead to a Denial of Service\n\nThis problem can occur in TLSv1.3 if the non-default SSL_OP_NO_TICKET option is\nbeing used (but not if early_data support is also configured and the default\nanti-replay protection is in use). In this case, under certain conditions, the\nsession cache can get into an incorrect state and it will fail to flush properly\nas it fills. The session cache will continue to grow in an unbounded manner. A\nmalicious client could deliberately create the scenario for this failure to\nforce a Denial of Service. It may also happen by accident in normal operation.\n\nThis issue only affects TLS servers supporting TLSv1.3. It does not affect TLS\nclients.\n\nThe FIPS modules in 3.2, 3.1 and 3.0 are not affected by this issue. OpenSSL\n1.0.2 is also not affected by this issue.',
-              'diffID':        'sha256:10d47f76a792d77a3508f82b3ed8d1c8e9701d2aa1ece5e74cacd89b30e35b3f',
-              'fixedVersions': [
-                '3.1.4-r6'
-              ],
-              'installedVersion': '3.1.1-r3',
-              'packageName':      'libssl3',
-              'purl':             'pkg:apk/alpine/libssl3@3.1.1-r3?arch=x86_64&distro=3.18.0',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2024/04/08/5',
-                'https://access.redhat.com/errata/RHSA-2024:9333',
-                'https://access.redhat.com/security/cve/CVE-2024-2511',
-                'https://bugzilla.redhat.com/2274020',
-                'https://bugzilla.redhat.com/2281029',
-                'https://bugzilla.redhat.com/2283757',
-                'https://bugzilla.redhat.com/2294581',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2274020',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2281029',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2283757',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2294581',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-2511',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-4603',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-4741',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-5535',
-                'https://errata.almalinux.org/9/ALSA-2024-9333.html',
-                'https://errata.rockylinux.org/RLSA-2024:9333',
-                'https://github.com/openssl/openssl/commit/7e4d731b1c07201ad9374c1cd9ac5263bdf35bce',
-                'https://github.com/openssl/openssl/commit/b52867a9f618bb955bed2a3ce3db4d4f97ed8e5d',
-                'https://github.com/openssl/openssl/commit/e9d7083e241670332e0443da0f0d4ffb52829f08',
-                'https://github.openssl.org/openssl/extended-releases/commit/5f8d25770ae6437db119dfc951e207271a326640',
-                'https://linux.oracle.com/cve/CVE-2024-2511.html',
-                'https://linux.oracle.com/errata/ELSA-2024-9333.html',
-                'https://lists.debian.org/debian-lts-announce/2024/10/msg00033.html',
-                'https://lists.debian.org/debian-lts-announce/2024/11/msg00000.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2024-2511',
-                'https://security.netapp.com/advisory/ntap-20240503-0013/',
-                'https://ubuntu.com/security/notices/USN-6937-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2024-2511',
-                'https://www.openssl.org/news/secadv/20240408.txt',
-                'https://www.openssl.org/news/vulnerabilities.html'
-              ],
-              'severity':   'LOW',
-              'suppressed': false,
-              'title':      'openssl: Unbounded memory growth with session handling in TLSv1.3'
-            },
-            {
-              'cve':  'CVE-2024-9143',
-              'cvss': {
-                'redhat': {
-                  'v3score':  '3.7',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L'
-                }
-              },
-              'cwes': [
-                'CWE-125',
-                'CWE-787'
-              ],
-              'description':   "Issue summary: Use of the low-level GF(2^m) elliptic curve APIs with untrusted\nexplicit values for the field polynomial can lead to out-of-bounds memory reads\nor writes.\n\nImpact summary: Out of bound memory writes can lead to an application crash or\neven a possibility of a remote code execution, however, in all the protocols\ninvolving Elliptic Curve Cryptography that we're aware of, either only \"named\ncurves\" are supported, or, if explicit curve parameters are supported, they\nspecify an X9.62 encoding of binary (GF(2^m)) curves that can't represent\nproblematic input values. Thus the likelihood of existence of a vulnerable\napplication is low.\n\nIn particular, the X9.62 encoding is used for ECC keys in X.509 certificates,\nso problematic inputs cannot occur in the context of processing X.509\ncertificates.  Any problematic use-cases would have to be using an \"exotic\"\ncurve encoding.\n\nThe affected APIs include: EC_GROUP_new_curve_GF2m(), EC_GROUP_new_from_params(),\nand various supporting BN_GF2m_*() functions.\n\nApplications working with \"exotic\" explicit binary (GF(2^m)) curve parameters,\nthat make it possible to represent invalid field polynomials with a zero\nconstant term, via the above or similar APIs, may terminate abruptly as a\nresult of reading or writing outside of array bounds.  Remote code execution\ncannot easily be ruled out.\n\nThe FIPS modules in 3.3, 3.2, 3.1 and 3.0 are not affected by this issue.",
-              'diffID':        'sha256:10d47f76a792d77a3508f82b3ed8d1c8e9701d2aa1ece5e74cacd89b30e35b3f',
-              'fixedVersions': [
-                '3.1.7-r1'
-              ],
-              'installedVersion': '3.1.1-r3',
-              'packageName':      'libssl3',
-              'purl':             'pkg:apk/alpine/libssl3@3.1.1-r3?arch=x86_64&distro=3.18.0',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2024/10/16/1',
-                'http://www.openwall.com/lists/oss-security/2024/10/23/1',
-                'http://www.openwall.com/lists/oss-security/2024/10/24/1',
-                'https://access.redhat.com/security/cve/CVE-2024-9143',
-                'https://github.com/openssl/openssl/commit/72ae83ad214d2eef262461365a1975707f862712',
-                'https://github.com/openssl/openssl/commit/bc7e04d7c8d509fb78fc0e285aa948fb0da04700',
-                'https://github.com/openssl/openssl/commit/c0d3e4d32d2805f49bec30547f225bc4d092e1f4',
-                'https://github.com/openssl/openssl/commit/fdf6723362ca51bd883295efe206cb5b1cfa5154',
-                'https://github.openssl.org/openssl/extended-releases/commit/8efc0cbaa8ebba8e116f7b81a876a4123594d86a',
-                'https://github.openssl.org/openssl/extended-releases/commit/9d576994cec2b7aa37a91740ea7e680810957e41',
-                'https://lists.debian.org/debian-lts-announce/2024/10/msg00033.html',
-                'https://lists.debian.org/debian-lts-announce/2024/11/msg00000.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2024-9143',
-                'https://openssl-library.org/news/secadv/20241016.txt',
-                'https://security.netapp.com/advisory/ntap-20241101-0001/',
-                'https://ubuntu.com/security/notices/USN-7264-1',
-                'https://ubuntu.com/security/notices/USN-7278-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2024-9143'
-              ],
-              'severity':   'LOW',
-              'suppressed': false,
-              'title':      'openssl: Low-level invalid GF(2^m) parameters lead to OOB memory access'
-            },
-            {
-              'cve':  'CVE-2025-26519',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-787'
-              ],
-              'description':   'musl libc 0.9.13 through 1.2.5 before 1.2.6 has an out-of-bounds write vulnerability when an attacker can trigger iconv conversion of untrusted EUC-KR text to UTF-8.',
-              'diffID':        'sha256:bb01bd7e32b58b6694c8c3622c230171f1cec24001a82068a8d30d338f420d6c',
-              'fixedVersions': [
-                '1.2.4-r3'
-              ],
-              'installedVersion': '1.2.4-r0',
-              'packageName':      'musl',
-              'purl':             'pkg:apk/alpine/musl@1.2.4-r0?arch=x86_64&distro=3.18.0',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2025/02/13/2',
-                'http://www.openwall.com/lists/oss-security/2025/02/13/3',
-                'http://www.openwall.com/lists/oss-security/2025/02/13/4',
-                'http://www.openwall.com/lists/oss-security/2025/02/13/5',
-                'http://www.openwall.com/lists/oss-security/2025/02/14/5',
-                'http://www.openwall.com/lists/oss-security/2025/02/14/6',
-                'https://git.musl-libc.org/cgit/musl/commit/?id=c47ad25ea3b484e10326f933e927c0bc8cded3da',
-                'https://git.musl-libc.org/cgit/musl/commit/?id=e5adcd97b5196e29991b524237381a0202a60659',
-                'https://www.openwall.com/lists/oss-security/2025/02/13/2'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'musl libc 0.9.13 through 1.2.5 before 1.2.6 has an out-of-bounds write ...'
-            },
-            {
-              'cve':  'CVE-2025-26519',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-787'
-              ],
-              'description':   'musl libc 0.9.13 through 1.2.5 before 1.2.6 has an out-of-bounds write vulnerability when an attacker can trigger iconv conversion of untrusted EUC-KR text to UTF-8.',
-              'diffID':        'sha256:bb01bd7e32b58b6694c8c3622c230171f1cec24001a82068a8d30d338f420d6c',
-              'fixedVersions': [
-                '1.2.4-r3'
-              ],
-              'installedVersion': '1.2.4-r0',
-              'packageName':      'musl-utils',
-              'purl':             'pkg:apk/alpine/musl-utils@1.2.4-r0?arch=x86_64&distro=3.18.0',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2025/02/13/2',
-                'http://www.openwall.com/lists/oss-security/2025/02/13/3',
-                'http://www.openwall.com/lists/oss-security/2025/02/13/4',
-                'http://www.openwall.com/lists/oss-security/2025/02/13/5',
-                'http://www.openwall.com/lists/oss-security/2025/02/14/5',
-                'http://www.openwall.com/lists/oss-security/2025/02/14/6',
-                'https://git.musl-libc.org/cgit/musl/commit/?id=c47ad25ea3b484e10326f933e927c0bc8cded3da',
-                'https://git.musl-libc.org/cgit/musl/commit/?id=e5adcd97b5196e29991b524237381a0202a60659',
-                'https://www.openwall.com/lists/oss-security/2025/02/13/2'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'musl libc 0.9.13 through 1.2.5 before 1.2.6 has an out-of-bounds write ...'
-            },
-            {
-              'cve':  'CVE-2023-42363',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.5',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.8',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   'A use-after-free vulnerability was discovered in xasprintf function in xfuncs_printf.c:344 in BusyBox v.1.36.1.',
-              'diffID':        'sha256:10d47f76a792d77a3508f82b3ed8d1c8e9701d2aa1ece5e74cacd89b30e35b3f',
-              'fixedVersions': [
-                '1.36.1-r7'
-              ],
-              'installedVersion': '1.36.1-r1',
-              'packageName':      'ssl_client',
-              'purl':             'pkg:apk/alpine/ssl_client@1.36.1-r1?arch=x86_64&distro=3.18.0',
-              'references':       [
-                'http://lists.busybox.net/pipermail/busybox/2024-May/090760.html',
-                'https://access.redhat.com/security/cve/CVE-2023-42363',
-                'https://bugs.busybox.net/show_bug.cgi?id=15865',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-42363',
-                'https://ubuntu.com/security/notices/USN-6961-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-42363'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk'
-            },
-            {
-              'cve':  'CVE-2023-42364',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.5',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.8',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   'A use-after-free vulnerability in BusyBox v.1.36.1 allows attackers to cause a denial of service via a crafted awk pattern in the awk.c evaluate function.',
-              'diffID':        'sha256:10d47f76a792d77a3508f82b3ed8d1c8e9701d2aa1ece5e74cacd89b30e35b3f',
-              'fixedVersions': [
-                '1.36.1-r7'
-              ],
-              'installedVersion': '1.36.1-r1',
-              'packageName':      'ssl_client',
-              'purl':             'pkg:apk/alpine/ssl_client@1.36.1-r1?arch=x86_64&distro=3.18.0',
-              'references':       [
-                'http://lists.busybox.net/pipermail/busybox/2024-May/090762.html',
-                'https://access.redhat.com/security/cve/CVE-2023-42364',
-                'https://bugs.busybox.net/show_bug.cgi?id=15868',
-                'https://gitlab.alpinelinux.org/alpine/aports/-/blob/master/main/busybox/CVE-2023-42364-CVE-2023-42365.patch',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-42364',
-                'https://ubuntu.com/security/notices/USN-6961-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-42364'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'busybox: use-after-free'
-            },
-            {
-              'cve':  'CVE-2023-42365',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.5',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.8',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   'A use-after-free vulnerability was discovered in BusyBox v.1.36.1 via a crafted awk pattern in the awk.c copyvar function.',
-              'diffID':        'sha256:10d47f76a792d77a3508f82b3ed8d1c8e9701d2aa1ece5e74cacd89b30e35b3f',
-              'fixedVersions': [
-                '1.36.1-r7'
-              ],
-              'installedVersion': '1.36.1-r1',
-              'packageName':      'ssl_client',
-              'purl':             'pkg:apk/alpine/ssl_client@1.36.1-r1?arch=x86_64&distro=3.18.0',
-              'references':       [
-                'http://lists.busybox.net/pipermail/busybox/2024-May/090762.html',
-                'https://access.redhat.com/security/cve/CVE-2023-42365',
-                'https://bugs.busybox.net/show_bug.cgi?id=15871',
-                'https://gitlab.alpinelinux.org/alpine/aports/-/blob/master/main/busybox/CVE-2023-42364-CVE-2023-42365.patch',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-42365',
-                'https://ubuntu.com/security/notices/USN-6961-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-42365'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'busybox: use-after-free'
-            },
-            {
-              'cve':  'CVE-2023-42366',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.5',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.1',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-787'
-              ],
-              'description':   'A heap-buffer-overflow was discovered in BusyBox v.1.36.1 in the next_token function at awk.c:1159.',
-              'diffID':        'sha256:10d47f76a792d77a3508f82b3ed8d1c8e9701d2aa1ece5e74cacd89b30e35b3f',
-              'fixedVersions': [
-                '1.36.1-r6'
-              ],
-              'installedVersion': '1.36.1-r1',
-              'packageName':      'ssl_client',
-              'purl':             'pkg:apk/alpine/ssl_client@1.36.1-r1?arch=x86_64&distro=3.18.0',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2023-42366',
-                'https://bugs.busybox.net/show_bug.cgi?id=15874',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-42366',
-                'https://security.netapp.com/advisory/ntap-20241206-0007/',
-                'https://www.cve.org/CVERecord?id=CVE-2023-42366'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'busybox: A heap-buffer-overflow'
-            }
-          ]
-        }
-      ],
-      'summary': {
-        'critical':   0,
-        'high':       6,
-        'low':        4,
-        'medium':     30,
-        'suppressed': 0,
-        'unknown':    0
-      }
-    }
-  },
-  {
-    'id':    'default/eeaea6134edc5a0591ff8cd8c8cd178ca84707bca8175a3f5515c20b42e1734d',
-    'type':  'storage.sbomscanner.kubewarden.io.vulnerabilityreport',
-    'links': {
-      'patch':  'https://localhost:8005/v1/storage.sbomscanner.kubewarden.io.vulnerabilityreports/default/eeaea6134edc5a0591ff8cd8c8cd178ca84707bca8175a3f5515c20b42e1734d',
-      'remove': 'https://localhost:8005/v1/storage.sbomscanner.kubewarden.io.vulnerabilityreports/default/eeaea6134edc5a0591ff8cd8c8cd178ca84707bca8175a3f5515c20b42e1734d',
-      'self':   'https://localhost:8005/v1/storage.sbomscanner.kubewarden.io.vulnerabilityreports/default/eeaea6134edc5a0591ff8cd8c8cd178ca84707bca8175a3f5515c20b42e1734d',
-      'update': 'https://localhost:8005/v1/storage.sbomscanner.kubewarden.io.vulnerabilityreports/default/eeaea6134edc5a0591ff8cd8c8cd178ca84707bca8175a3f5515c20b42e1734d',
-      'view':   'https://localhost:8005/apis/storage.sbomscanner.kubewarden.io/v1alpha1/namespaces/default/vulnerabilityreports/eeaea6134edc5a0591ff8cd8c8cd178ca84707bca8175a3f5515c20b42e1734d'
-    },
-    'apiVersion':    'storage.sbomscanner.kubewarden.io/v1alpha1',
-    'imageMetadata': {
-      'digest':      'sha256:9c2d245b3c01c4d7da0d3319d278e7aa4dd899076721abd205b595b2d3b2383b',
-      'platform':    'linux/arm/v7',
-      'registry':    'lsong-demo1',
-      'registryURI': 'registry-1.docker.io',
-      'repository':  'library/alpine',
-      'tag':         '3.21.3'
-    },
-    'kind':     'VulnerabilityReport',
-    'metadata': {
-      'creationTimestamp': '2026-01-14T18:51:38Z',
-      'fields':            [
-        'eeaea6134edc5a0591ff8cd8c8cd178ca84707bca8175a3f5515c20b42e1734d',
-        'registry-1.docker.io/library/alpine:3.21.3',
-        'linux/arm/v7',
-        '12 (0 suppressed)'
-      ],
-      'labels': {
-        'app.kubernetes.io/managed-by':          'sbomscanner',
-        'app.kubernetes.io/part-of':             'sbomscanner',
-        'sbomscanner.kubewarden.io/scanjob-uid': '445c600a-c4b6-40b3-bd71-f2d2140a37d5'
-      },
-      'name':            'eeaea6134edc5a0591ff8cd8c8cd178ca84707bca8175a3f5515c20b42e1734d',
-      'namespace':       'default',
-      'ownerReferences': [
-        {
-          'apiVersion':         'storage.sbomscanner.kubewarden.io/v1alpha1',
-          'blockOwnerDeletion': true,
-          'controller':         true,
-          'kind':               'SBOM',
-          'name':               'eeaea6134edc5a0591ff8cd8c8cd178ca84707bca8175a3f5515c20b42e1734d',
-          'uid':                'ed11de33-193e-44e1-8070-50639e80becd'
-        }
-      ],
-      'relationships': [
-        {
-          'fromId':   'default/eeaea6134edc5a0591ff8cd8c8cd178ca84707bca8175a3f5515c20b42e1734d',
-          'fromType': 'storage.sbomscanner.kubewarden.io.sbom',
-          'rel':      'owner',
-          'state':    'active',
-          'message':  'Resource is current'
-        }
-      ],
-      'resourceVersion': '1',
-      'state':           {
-        'error':         false,
-        'message':       'Resource is current',
-        'name':          'active',
-        'transitioning': false
-      },
-      'uid': '7222cdfa-7fff-49cf-af54-a83c47e1efac'
-    },
-    'report': {
-      'results': [
-        {
-          'class':           'os-pkgs',
-          'target':          '/var/run/worker/trivy.sbom.3268233749.json (alpine 3.21.3)',
-          'type':            'alpine',
-          'vulnerabilities': [
-            {
-              'cve':  'CVE-2024-58251',
-              'cwes': [
-                'CWE-150'
-              ],
-              'description':   'In netstat in BusyBox through 1.37.0, local users can launch of network application with an argv[0] containing an ANSI terminal escape sequence, leading to a denial of service (terminal locked up) when netstat is used by a victim.',
-              'diffID':        'sha256:0ca1385a6f62aace8757895e557eab55f34e7c2b483061b26b2c9ea5ecc88e72',
-              'fixedVersions': [
-                '1.37.0-r14'
-              ],
-              'installedVersion': '1.37.0-r12',
-              'packageName':      'busybox',
-              'purl':             'pkg:apk/alpine/busybox@1.37.0-r12?arch=armv7&distro=3.21.3',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2025/04/23/6',
-                'https://bugs.busybox.net/show_bug.cgi?id=15922',
-                'https://www.busybox.net',
-                'https://www.busybox.net/downloads/',
-                'https://www.cve.org/CVERecord?id=CVE-2024-58251'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'In netstat in BusyBox through 1.37.0, local users can launch of networ ...'
-            },
-            {
-              'cve':  'CVE-2025-46394',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '3.3',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-451'
-              ],
-              'description':   'In tar in BusyBox through 1.37.0, a TAR archive can have filenames hidden from a listing through the use of terminal escape sequences.',
-              'diffID':        'sha256:0ca1385a6f62aace8757895e557eab55f34e7c2b483061b26b2c9ea5ecc88e72',
-              'fixedVersions': [
-                '1.37.0-r14'
-              ],
-              'installedVersion': '1.37.0-r12',
-              'packageName':      'busybox',
-              'purl':             'pkg:apk/alpine/busybox@1.37.0-r12?arch=armv7&distro=3.21.3',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2025/04/23/5',
-                'http://www.openwall.com/lists/oss-security/2025/04/24/3',
-                'https://bugs.busybox.net/show_bug.cgi?id=16018',
-                'https://lists.busybox.net/pipermail/busybox/2024-July/090806.html',
-                'https://lists.busybox.net/pipermail/busybox/2024-July/090814.html',
-                'https://www.busybox.net',
-                'https://www.busybox.net/downloads/',
-                'https://www.cve.org/CVERecord?id=CVE-2025-46394',
-                'https://www.openwall.com/lists/oss-security/2025/04/23/1'
-              ],
-              'severity':   'LOW',
-              'suppressed': false,
-              'title':      'In tar in BusyBox through 1.37.0, a TAR archive can have filenames hid ...'
-            },
-            {
-              'cve':  'CVE-2024-58251',
-              'cwes': [
-                'CWE-150'
-              ],
-              'description':   'In netstat in BusyBox through 1.37.0, local users can launch of network application with an argv[0] containing an ANSI terminal escape sequence, leading to a denial of service (terminal locked up) when netstat is used by a victim.',
-              'diffID':        'sha256:0ca1385a6f62aace8757895e557eab55f34e7c2b483061b26b2c9ea5ecc88e72',
-              'fixedVersions': [
-                '1.37.0-r14'
-              ],
-              'installedVersion': '1.37.0-r12',
-              'packageName':      'busybox-binsh',
-              'purl':             'pkg:apk/alpine/busybox-binsh@1.37.0-r12?arch=armv7&distro=3.21.3',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2025/04/23/6',
-                'https://bugs.busybox.net/show_bug.cgi?id=15922',
-                'https://www.busybox.net',
-                'https://www.busybox.net/downloads/',
-                'https://www.cve.org/CVERecord?id=CVE-2024-58251'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'In netstat in BusyBox through 1.37.0, local users can launch of networ ...'
-            },
-            {
-              'cve':  'CVE-2025-46394',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '3.3',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-451'
-              ],
-              'description':   'In tar in BusyBox through 1.37.0, a TAR archive can have filenames hidden from a listing through the use of terminal escape sequences.',
-              'diffID':        'sha256:0ca1385a6f62aace8757895e557eab55f34e7c2b483061b26b2c9ea5ecc88e72',
-              'fixedVersions': [
-                '1.37.0-r14'
-              ],
-              'installedVersion': '1.37.0-r12',
-              'packageName':      'busybox-binsh',
-              'purl':             'pkg:apk/alpine/busybox-binsh@1.37.0-r12?arch=armv7&distro=3.21.3',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2025/04/23/5',
-                'http://www.openwall.com/lists/oss-security/2025/04/24/3',
-                'https://bugs.busybox.net/show_bug.cgi?id=16018',
-                'https://lists.busybox.net/pipermail/busybox/2024-July/090806.html',
-                'https://lists.busybox.net/pipermail/busybox/2024-July/090814.html',
-                'https://www.busybox.net',
-                'https://www.busybox.net/downloads/',
-                'https://www.cve.org/CVERecord?id=CVE-2025-46394',
-                'https://www.openwall.com/lists/oss-security/2025/04/23/1'
-              ],
-              'severity':   'LOW',
-              'suppressed': false,
-              'title':      'In tar in BusyBox through 1.37.0, a TAR archive can have filenames hid ...'
-            },
-            {
-              'cve':  'CVE-2025-9230',
-              'cvss': {
-                'redhat': {
-                  'v3score':  '5.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L'
-                }
-              },
-              'cwes': [
-                'CWE-125',
-                'CWE-787'
-              ],
-              'description':   'Issue summary: An application trying to decrypt CMS messages encrypted using\npassword based encryption can trigger an out-of-bounds read and write.\n\nImpact summary: This out-of-bounds read may trigger a crash which leads to\nDenial of Service for an application. The out-of-bounds write can cause\na memory corruption which can have various consequences including\na Denial of Service or Execution of attacker-supplied code.\n\nAlthough the consequences of a successful exploit of this vulnerability\ncould be severe, the probability that the attacker would be able to\nperform it is low. Besides, password based (PWRI) encryption support in CMS\nmessages is very rarely used. For that reason the issue was assessed as\nModerate severity according to our Security Policy.\n\nThe FIPS modules in 3.5, 3.4, 3.3, 3.2, 3.1 and 3.0 are not affected by this\nissue, as the CMS implementation is outside the OpenSSL FIPS module\nboundary.',
-              'diffID':        'sha256:0ca1385a6f62aace8757895e557eab55f34e7c2b483061b26b2c9ea5ecc88e72',
-              'fixedVersions': [
-                '3.3.5-r0'
-              ],
-              'installedVersion': '3.3.3-r0',
-              'packageName':      'libcrypto3',
-              'purl':             'pkg:apk/alpine/libcrypto3@3.3.3-r0?arch=armv7&distro=3.21.3',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2025/09/30/5',
-                'https://access.redhat.com/errata/RHSA-2025:21255',
-                'https://access.redhat.com/security/cve/CVE-2025-9230',
-                'https://bugzilla.redhat.com/2396054',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2396054',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-9230',
-                'https://errata.almalinux.org/9/ALSA-2025-21255.html',
-                'https://errata.rockylinux.org/RLSA-2025:21255',
-                'https://github.com/openssl/openssl/commit/5965ea5dd6960f36d8b7f74f8eac67a8eb8f2b45',
-                'https://github.com/openssl/openssl/commit/9e91358f365dee6c446dcdcdb01c04d2743fd280',
-                'https://github.com/openssl/openssl/commit/a79c4ce559c6a3a8fd4109e9f33c1185d5bf2def',
-                'https://github.com/openssl/openssl/commit/b5282d677551afda7d20e9c00e09561b547b2dfd',
-                'https://github.com/openssl/openssl/commit/bae259a211ada6315dc50900686daaaaaa55f482',
-                'https://github.openssl.org/openssl/extended-releases/commit/c2b96348bfa662f25f4fabf81958ae822063dae3',
-                'https://github.openssl.org/openssl/extended-releases/commit/dfbaf161d8dafc1132dd88cd48ad990ed9b4c8ba',
-                'https://linux.oracle.com/cve/CVE-2025-9230.html',
-                'https://linux.oracle.com/errata/ELSA-2026-0337.html',
-                'https://lists.debian.org/debian-lts-announce/2025/10/msg00001.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2025-9230',
-                'https://openssl-library.org/news/secadv/20250930.txt',
-                'https://ubuntu.com/security/notices/USN-7786-1',
-                'https://www.cve.org/CVERecord?id=CVE-2025-9230'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: Out-of-bounds read & write in RFC 3211 KEK Unwrap'
-            },
-            {
-              'cve':  'CVE-2025-9231',
-              'cvss': {
-                'redhat': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-385'
-              ],
-              'description':   'Issue summary: A timing side-channel which could potentially allow remote\nrecovery of the private key exists in the SM2 algorithm implementation on 64 bit\nARM platforms.\n\nImpact summary: A timing side-channel in SM2 signature computations on 64 bit\nARM platforms could allow recovering the private key by an attacker..\n\nWhile remote key recovery over a network was not attempted by the reporter,\ntiming measurements revealed a timing signal which may allow such an attack.\n\nOpenSSL does not directly support certificates with SM2 keys in TLS, and so\nthis CVE is not relevant in most TLS contexts.  However, given that it is\npossible to add support for such certificates via a custom provider, coupled\nwith the fact that in such a custom provider context the private key may be\nrecoverable via remote timing measurements, we consider this to be a Moderate\nseverity issue.\n\nThe FIPS modules in 3.5, 3.4, 3.3, 3.2, 3.1 and 3.0 are not affected by this\nissue, as SM2 is not an approved algorithm.',
-              'diffID':        'sha256:0ca1385a6f62aace8757895e557eab55f34e7c2b483061b26b2c9ea5ecc88e72',
-              'fixedVersions': [
-                '3.3.5-r0'
-              ],
-              'installedVersion': '3.3.3-r0',
-              'packageName':      'libcrypto3',
-              'purl':             'pkg:apk/alpine/libcrypto3@3.3.3-r0?arch=armv7&distro=3.21.3',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2025/09/30/5',
-                'https://access.redhat.com/security/cve/CVE-2025-9231',
-                'https://github.com/openssl/openssl/commit/567f64386e43683888212226824b6a179885a0fe',
-                'https://github.com/openssl/openssl/commit/cba616c26ac8e7b37de5e77762e505ba5ca51698',
-                'https://github.com/openssl/openssl/commit/eed5adc9f969d77c94f213767acbb41ff923b6f4',
-                'https://github.com/openssl/openssl/commit/fc47a2ec078912b3e914fab5734535e76c4820c2',
-                'https://nvd.nist.gov/vuln/detail/CVE-2025-9231',
-                'https://openssl-library.org/news/secadv/20250930.txt',
-                'https://ubuntu.com/security/notices/USN-7786-1',
-                'https://www.cve.org/CVERecord?id=CVE-2025-9231'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: Timing side-channel in SM2 algorithm on 64 bit ARM'
-            },
-            {
-              'cve':  'CVE-2025-9232',
-              'cvss': {
-                'redhat': {
-                  'v3score':  '3.1',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L'
-                }
-              },
-              'cwes': [
-                'CWE-125'
-              ],
-              'description':   "Issue summary: An application using the OpenSSL HTTP client API functions may\ntrigger an out-of-bounds read if the 'no_proxy' environment variable is set and\nthe host portion of the authority component of the HTTP URL is an IPv6 address.\n\nImpact summary: An out-of-bounds read can trigger a crash which leads to\nDenial of Service for an application.\n\nThe OpenSSL HTTP client API functions can be used directly by applications\nbut they are also used by the OCSP client functions and CMP (Certificate\nManagement Protocol) client implementation in OpenSSL. However the URLs used\nby these implementations are unlikely to be controlled by an attacker.\n\nIn this vulnerable code the out of bounds read can only trigger a crash.\nFurthermore the vulnerability requires an attacker-controlled URL to be\npassed from an application to the OpenSSL function and the user has to have\na 'no_proxy' environment variable set. For the aforementioned reasons the\nissue was assessed as Low severity.\n\nThe vulnerable code was introduced in the following patch releases:\n3.0.16, 3.1.8, 3.2.4, 3.3.3, 3.4.0 and 3.5.0.\n\nThe FIPS modules in 3.5, 3.4, 3.3, 3.2, 3.1 and 3.0 are not affected by this\nissue, as the HTTP client implementation is outside the OpenSSL FIPS module\nboundary.",
-              'diffID':        'sha256:0ca1385a6f62aace8757895e557eab55f34e7c2b483061b26b2c9ea5ecc88e72',
-              'fixedVersions': [
-                '3.3.5-r0'
-              ],
-              'installedVersion': '3.3.3-r0',
-              'packageName':      'libcrypto3',
-              'purl':             'pkg:apk/alpine/libcrypto3@3.3.3-r0?arch=armv7&distro=3.21.3',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2025/09/30/5',
-                'https://access.redhat.com/security/cve/CVE-2025-9232',
-                'https://github.com/openssl/openssl/commit/2b4ec20e47959170422922eaff25346d362dcb35',
-                'https://github.com/openssl/openssl/commit/654dc11d23468a74fc8ea4672b702dd3feb7be4b',
-                'https://github.com/openssl/openssl/commit/7cf21a30513c9e43c4bc3836c237cf086e194af3',
-                'https://github.com/openssl/openssl/commit/89e790ac431125a4849992858490bed6b225eadf',
-                'https://github.com/openssl/openssl/commit/bbf38c034cdabd0a13330abcc4855c866f53d2e0',
-                'https://nvd.nist.gov/vuln/detail/CVE-2025-9232',
-                'https://openssl-library.org/news/secadv/20250930.txt',
-                'https://ubuntu.com/security/notices/USN-7786-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2025-9232'
-              ],
-              'severity':   'LOW',
-              'suppressed': false,
-              'title':      'openssl: Out-of-bounds read in HTTP client no_proxy handling'
-            },
-            {
-              'cve':  'CVE-2025-9230',
-              'cvss': {
-                'redhat': {
-                  'v3score':  '5.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L'
-                }
-              },
-              'cwes': [
-                'CWE-125',
-                'CWE-787'
-              ],
-              'description':   'Issue summary: An application trying to decrypt CMS messages encrypted using\npassword based encryption can trigger an out-of-bounds read and write.\n\nImpact summary: This out-of-bounds read may trigger a crash which leads to\nDenial of Service for an application. The out-of-bounds write can cause\na memory corruption which can have various consequences including\na Denial of Service or Execution of attacker-supplied code.\n\nAlthough the consequences of a successful exploit of this vulnerability\ncould be severe, the probability that the attacker would be able to\nperform it is low. Besides, password based (PWRI) encryption support in CMS\nmessages is very rarely used. For that reason the issue was assessed as\nModerate severity according to our Security Policy.\n\nThe FIPS modules in 3.5, 3.4, 3.3, 3.2, 3.1 and 3.0 are not affected by this\nissue, as the CMS implementation is outside the OpenSSL FIPS module\nboundary.',
-              'diffID':        'sha256:0ca1385a6f62aace8757895e557eab55f34e7c2b483061b26b2c9ea5ecc88e72',
-              'fixedVersions': [
-                '3.3.5-r0'
-              ],
-              'installedVersion': '3.3.3-r0',
-              'packageName':      'libssl3',
-              'purl':             'pkg:apk/alpine/libssl3@3.3.3-r0?arch=armv7&distro=3.21.3',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2025/09/30/5',
-                'https://access.redhat.com/errata/RHSA-2025:21255',
-                'https://access.redhat.com/security/cve/CVE-2025-9230',
-                'https://bugzilla.redhat.com/2396054',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2396054',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-9230',
-                'https://errata.almalinux.org/9/ALSA-2025-21255.html',
-                'https://errata.rockylinux.org/RLSA-2025:21255',
-                'https://github.com/openssl/openssl/commit/5965ea5dd6960f36d8b7f74f8eac67a8eb8f2b45',
-                'https://github.com/openssl/openssl/commit/9e91358f365dee6c446dcdcdb01c04d2743fd280',
-                'https://github.com/openssl/openssl/commit/a79c4ce559c6a3a8fd4109e9f33c1185d5bf2def',
-                'https://github.com/openssl/openssl/commit/b5282d677551afda7d20e9c00e09561b547b2dfd',
-                'https://github.com/openssl/openssl/commit/bae259a211ada6315dc50900686daaaaaa55f482',
-                'https://github.openssl.org/openssl/extended-releases/commit/c2b96348bfa662f25f4fabf81958ae822063dae3',
-                'https://github.openssl.org/openssl/extended-releases/commit/dfbaf161d8dafc1132dd88cd48ad990ed9b4c8ba',
-                'https://linux.oracle.com/cve/CVE-2025-9230.html',
-                'https://linux.oracle.com/errata/ELSA-2026-0337.html',
-                'https://lists.debian.org/debian-lts-announce/2025/10/msg00001.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2025-9230',
-                'https://openssl-library.org/news/secadv/20250930.txt',
-                'https://ubuntu.com/security/notices/USN-7786-1',
-                'https://www.cve.org/CVERecord?id=CVE-2025-9230'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: Out-of-bounds read & write in RFC 3211 KEK Unwrap'
-            },
-            {
-              'cve':  'CVE-2025-9231',
-              'cvss': {
-                'redhat': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-385'
-              ],
-              'description':   'Issue summary: A timing side-channel which could potentially allow remote\nrecovery of the private key exists in the SM2 algorithm implementation on 64 bit\nARM platforms.\n\nImpact summary: A timing side-channel in SM2 signature computations on 64 bit\nARM platforms could allow recovering the private key by an attacker..\n\nWhile remote key recovery over a network was not attempted by the reporter,\ntiming measurements revealed a timing signal which may allow such an attack.\n\nOpenSSL does not directly support certificates with SM2 keys in TLS, and so\nthis CVE is not relevant in most TLS contexts.  However, given that it is\npossible to add support for such certificates via a custom provider, coupled\nwith the fact that in such a custom provider context the private key may be\nrecoverable via remote timing measurements, we consider this to be a Moderate\nseverity issue.\n\nThe FIPS modules in 3.5, 3.4, 3.3, 3.2, 3.1 and 3.0 are not affected by this\nissue, as SM2 is not an approved algorithm.',
-              'diffID':        'sha256:0ca1385a6f62aace8757895e557eab55f34e7c2b483061b26b2c9ea5ecc88e72',
-              'fixedVersions': [
-                '3.3.5-r0'
-              ],
-              'installedVersion': '3.3.3-r0',
-              'packageName':      'libssl3',
-              'purl':             'pkg:apk/alpine/libssl3@3.3.3-r0?arch=armv7&distro=3.21.3',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2025/09/30/5',
-                'https://access.redhat.com/security/cve/CVE-2025-9231',
-                'https://github.com/openssl/openssl/commit/567f64386e43683888212226824b6a179885a0fe',
-                'https://github.com/openssl/openssl/commit/cba616c26ac8e7b37de5e77762e505ba5ca51698',
-                'https://github.com/openssl/openssl/commit/eed5adc9f969d77c94f213767acbb41ff923b6f4',
-                'https://github.com/openssl/openssl/commit/fc47a2ec078912b3e914fab5734535e76c4820c2',
-                'https://nvd.nist.gov/vuln/detail/CVE-2025-9231',
-                'https://openssl-library.org/news/secadv/20250930.txt',
-                'https://ubuntu.com/security/notices/USN-7786-1',
-                'https://www.cve.org/CVERecord?id=CVE-2025-9231'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: Timing side-channel in SM2 algorithm on 64 bit ARM'
-            },
-            {
-              'cve':  'CVE-2025-9232',
-              'cvss': {
-                'redhat': {
-                  'v3score':  '3.1',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L'
-                }
-              },
-              'cwes': [
-                'CWE-125'
-              ],
-              'description':   "Issue summary: An application using the OpenSSL HTTP client API functions may\ntrigger an out-of-bounds read if the 'no_proxy' environment variable is set and\nthe host portion of the authority component of the HTTP URL is an IPv6 address.\n\nImpact summary: An out-of-bounds read can trigger a crash which leads to\nDenial of Service for an application.\n\nThe OpenSSL HTTP client API functions can be used directly by applications\nbut they are also used by the OCSP client functions and CMP (Certificate\nManagement Protocol) client implementation in OpenSSL. However the URLs used\nby these implementations are unlikely to be controlled by an attacker.\n\nIn this vulnerable code the out of bounds read can only trigger a crash.\nFurthermore the vulnerability requires an attacker-controlled URL to be\npassed from an application to the OpenSSL function and the user has to have\na 'no_proxy' environment variable set. For the aforementioned reasons the\nissue was assessed as Low severity.\n\nThe vulnerable code was introduced in the following patch releases:\n3.0.16, 3.1.8, 3.2.4, 3.3.3, 3.4.0 and 3.5.0.\n\nThe FIPS modules in 3.5, 3.4, 3.3, 3.2, 3.1 and 3.0 are not affected by this\nissue, as the HTTP client implementation is outside the OpenSSL FIPS module\nboundary.",
-              'diffID':        'sha256:0ca1385a6f62aace8757895e557eab55f34e7c2b483061b26b2c9ea5ecc88e72',
-              'fixedVersions': [
-                '3.3.5-r0'
-              ],
-              'installedVersion': '3.3.3-r0',
-              'packageName':      'libssl3',
-              'purl':             'pkg:apk/alpine/libssl3@3.3.3-r0?arch=armv7&distro=3.21.3',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2025/09/30/5',
-                'https://access.redhat.com/security/cve/CVE-2025-9232',
-                'https://github.com/openssl/openssl/commit/2b4ec20e47959170422922eaff25346d362dcb35',
-                'https://github.com/openssl/openssl/commit/654dc11d23468a74fc8ea4672b702dd3feb7be4b',
-                'https://github.com/openssl/openssl/commit/7cf21a30513c9e43c4bc3836c237cf086e194af3',
-                'https://github.com/openssl/openssl/commit/89e790ac431125a4849992858490bed6b225eadf',
-                'https://github.com/openssl/openssl/commit/bbf38c034cdabd0a13330abcc4855c866f53d2e0',
-                'https://nvd.nist.gov/vuln/detail/CVE-2025-9232',
-                'https://openssl-library.org/news/secadv/20250930.txt',
-                'https://ubuntu.com/security/notices/USN-7786-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2025-9232'
-              ],
-              'severity':   'LOW',
-              'suppressed': false,
-              'title':      'openssl: Out-of-bounds read in HTTP client no_proxy handling'
-            },
-            {
-              'cve':  'CVE-2024-58251',
-              'cwes': [
-                'CWE-150'
-              ],
-              'description':   'In netstat in BusyBox through 1.37.0, local users can launch of network application with an argv[0] containing an ANSI terminal escape sequence, leading to a denial of service (terminal locked up) when netstat is used by a victim.',
-              'diffID':        'sha256:0ca1385a6f62aace8757895e557eab55f34e7c2b483061b26b2c9ea5ecc88e72',
-              'fixedVersions': [
-                '1.37.0-r14'
-              ],
-              'installedVersion': '1.37.0-r12',
-              'packageName':      'ssl_client',
-              'purl':             'pkg:apk/alpine/ssl_client@1.37.0-r12?arch=armv7&distro=3.21.3',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2025/04/23/6',
-                'https://bugs.busybox.net/show_bug.cgi?id=15922',
-                'https://www.busybox.net',
-                'https://www.busybox.net/downloads/',
-                'https://www.cve.org/CVERecord?id=CVE-2024-58251'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'In netstat in BusyBox through 1.37.0, local users can launch of networ ...'
-            },
-            {
-              'cve':  'CVE-2025-46394',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '3.3',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-451'
-              ],
-              'description':   'In tar in BusyBox through 1.37.0, a TAR archive can have filenames hidden from a listing through the use of terminal escape sequences.',
-              'diffID':        'sha256:0ca1385a6f62aace8757895e557eab55f34e7c2b483061b26b2c9ea5ecc88e72',
-              'fixedVersions': [
-                '1.37.0-r14'
-              ],
-              'installedVersion': '1.37.0-r12',
-              'packageName':      'ssl_client',
-              'purl':             'pkg:apk/alpine/ssl_client@1.37.0-r12?arch=armv7&distro=3.21.3',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2025/04/23/5',
-                'http://www.openwall.com/lists/oss-security/2025/04/24/3',
-                'https://bugs.busybox.net/show_bug.cgi?id=16018',
-                'https://lists.busybox.net/pipermail/busybox/2024-July/090806.html',
-                'https://lists.busybox.net/pipermail/busybox/2024-July/090814.html',
-                'https://www.busybox.net',
-                'https://www.busybox.net/downloads/',
-                'https://www.cve.org/CVERecord?id=CVE-2025-46394',
-                'https://www.openwall.com/lists/oss-security/2025/04/23/1'
-              ],
-              'severity':   'LOW',
-              'suppressed': false,
-              'title':      'In tar in BusyBox through 1.37.0, a TAR archive can have filenames hid ...'
-            }
-          ]
-        }
-      ],
-      'summary': {
-        'critical':   0,
-        'high':       0,
-        'low':        5,
-        'medium':     7,
-        'suppressed': 0,
-        'unknown':    0
-      }
-    }
-  },
-  {
-    'id':    'default/ef7b0de4b0e000d32f9663fa367510d68f462c65ce908d989c945ed848a59453',
-    'type':  'storage.sbomscanner.kubewarden.io.vulnerabilityreport',
-    'links': {
-      'patch':  'https://localhost:8005/v1/storage.sbomscanner.kubewarden.io.vulnerabilityreports/default/ef7b0de4b0e000d32f9663fa367510d68f462c65ce908d989c945ed848a59453',
-      'remove': 'https://localhost:8005/v1/storage.sbomscanner.kubewarden.io.vulnerabilityreports/default/ef7b0de4b0e000d32f9663fa367510d68f462c65ce908d989c945ed848a59453',
-      'self':   'https://localhost:8005/v1/storage.sbomscanner.kubewarden.io.vulnerabilityreports/default/ef7b0de4b0e000d32f9663fa367510d68f462c65ce908d989c945ed848a59453',
-      'update': 'https://localhost:8005/v1/storage.sbomscanner.kubewarden.io.vulnerabilityreports/default/ef7b0de4b0e000d32f9663fa367510d68f462c65ce908d989c945ed848a59453',
-      'view':   'https://localhost:8005/apis/storage.sbomscanner.kubewarden.io/v1alpha1/namespaces/default/vulnerabilityreports/ef7b0de4b0e000d32f9663fa367510d68f462c65ce908d989c945ed848a59453'
-    },
-    'apiVersion':    'storage.sbomscanner.kubewarden.io/v1alpha1',
-    'imageMetadata': {
-      'digest':      'sha256:096ebf69d65b5dcb3756fcfb053e6031a3935542f20cd7a8b7c59e1b3cb71558',
-      'platform':    'linux/arm/v6',
-      'registry':    'lsong-demo1',
-      'registryURI': 'registry-1.docker.io',
-      'repository':  'library/alpine',
-      'tag':         '3.12.3'
-    },
-    'kind':     'VulnerabilityReport',
-    'metadata': {
-      'creationTimestamp': '2026-01-14T18:52:04Z',
-      'fields':            [
-        'ef7b0de4b0e000d32f9663fa367510d68f462c65ce908d989c945ed848a59453',
-        'registry-1.docker.io/library/alpine:3.12.3',
-        'linux/arm/v6',
-        '44 (0 suppressed)'
-      ],
-      'labels': {
-        'app.kubernetes.io/managed-by':          'sbomscanner',
-        'app.kubernetes.io/part-of':             'sbomscanner',
-        'sbomscanner.kubewarden.io/scanjob-uid': '445c600a-c4b6-40b3-bd71-f2d2140a37d5'
-      },
-      'name':            'ef7b0de4b0e000d32f9663fa367510d68f462c65ce908d989c945ed848a59453',
-      'namespace':       'default',
-      'ownerReferences': [
-        {
-          'apiVersion':         'storage.sbomscanner.kubewarden.io/v1alpha1',
-          'blockOwnerDeletion': true,
-          'controller':         true,
-          'kind':               'SBOM',
-          'name':               'ef7b0de4b0e000d32f9663fa367510d68f462c65ce908d989c945ed848a59453',
-          'uid':                '783f3771-4761-4f2b-a2bb-6112b152dea7'
-        }
-      ],
-      'relationships': [
-        {
-          'fromId':   'default/ef7b0de4b0e000d32f9663fa367510d68f462c65ce908d989c945ed848a59453',
-          'fromType': 'storage.sbomscanner.kubewarden.io.sbom',
-          'rel':      'owner',
-          'state':    'active',
-          'message':  'Resource is current'
-        }
-      ],
-      'resourceVersion': '1',
-      'state':           {
-        'error':         false,
-        'message':       'Resource is current',
-        'name':          'active',
-        'transitioning': false
-      },
-      'uid': 'beb0a37e-4b46-42e8-ba2e-93cf0ae22a42'
-    },
-    'report': {
-      'results': [
-        {
-          'class':           'os-pkgs',
-          'target':          '/var/run/worker/trivy.sbom.1083675215.json (alpine 3.12.3)',
-          'type':            'alpine',
-          'vulnerabilities': [
-            {
-              'cve':  'CVE-2021-36159',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '9.1',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '9.1',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-125'
-              ],
-              'description':   "libfetch before 2021-07-26, as used in apk-tools, xbps, and other products, mishandles numeric strings for the FTP and HTTP protocols. The FTP passive mode implementation allows an out-of-bounds read because strtol is used to parse the relevant numbers into address bytes. It does not check if the line ends prematurely. If it does, the for-loop condition checks for the '\\0' terminator one byte too late.",
-              'diffID':        'sha256:a6adc24a4511cef83198c81256dd39d198ce8068e62415ea77d5d96442df74a8',
-              'fixedVersions': [
-                '2.10.7-r0'
-              ],
-              'installedVersion': '2.10.5-r1',
-              'packageName':      'apk-tools',
-              'purl':             'pkg:apk/alpine/apk-tools@2.10.5-r1?arch=armhf&distro=3.12.3',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-36159',
-                'https://github.com/freebsd/freebsd-src/commits/main/lib/libfetch',
-                'https://gitlab.alpinelinux.org/alpine/apk-tools/-/issues/10749',
-                'https://lists.apache.org/thread.html/r61db8e7dcb56dc000a5387a88f7a473bacec5ee01b9ff3f55308aacc%40%3Cdev.kafka.apache.org%3E',
-                'https://lists.apache.org/thread.html/r61db8e7dcb56dc000a5387a88f7a473bacec5ee01b9ff3f55308aacc%40%3Cusers.kafka.apache.org%3E',
-                'https://lists.apache.org/thread.html/rbf4ce74b0d1fa9810dec50ba3ace0caeea677af7c27a97111c06ccb7%40%3Cdev.kafka.apache.org%3E',
-                'https://lists.apache.org/thread.html/rbf4ce74b0d1fa9810dec50ba3ace0caeea677af7c27a97111c06ccb7%40%3Cusers.kafka.apache.org%3E',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-36159',
-                'https://www.cve.org/CVERecord?id=CVE-2021-36159'
-              ],
-              'severity':   'CRITICAL',
-              'suppressed': false,
-              'title':      'libfetch: an out of boundary read while libfetch uses strtol to parse the relevant numbers into address bytes leads to information leak or crash'
-            },
-            {
-              'cve':  'CVE-2021-30139',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-125'
-              ],
-              'description':   'In Alpine Linux apk-tools before 2.12.5, the tarball parser allows a buffer overflow and crash.',
-              'diffID':        'sha256:a6adc24a4511cef83198c81256dd39d198ce8068e62415ea77d5d96442df74a8',
-              'fixedVersions': [
-                '2.10.6-r0'
-              ],
-              'installedVersion': '2.10.5-r1',
-              'packageName':      'apk-tools',
-              'purl':             'pkg:apk/alpine/apk-tools@2.10.5-r1?arch=armhf&distro=3.12.3',
-              'references':       [
-                'https://gitlab.alpinelinux.org/alpine/apk-tools/-/issues/10741',
-                'https://gitlab.alpinelinux.org/alpine/aports/-/issues/12606'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false
-            },
-            {
-              'cve':  'CVE-2021-28831',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-755'
-              ],
-              'description':   'decompress_gunzip.c in BusyBox through 1.32.1 mishandles the error bit on the huft_build result pointer, with a resultant invalid free or segmentation fault, via malformed gzip data.',
-              'diffID':        'sha256:a6adc24a4511cef83198c81256dd39d198ce8068e62415ea77d5d96442df74a8',
-              'fixedVersions': [
-                '1.31.1-r20'
-              ],
-              'installedVersion': '1.31.1-r19',
-              'packageName':      'busybox',
-              'purl':             'pkg:apk/alpine/busybox@1.31.1-r19?arch=armhf&distro=3.12.3',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-28831',
-                'https://git.busybox.net/busybox/commit/?id=f25d254dfd4243698c31a4f3153d4ac72aa9e9bd',
-                'https://lists.debian.org/debian-lts-announce/2021/04/msg00001.html',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/3UDQGJRECXFS5EZVDH2OI45FMO436AC4/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/Z7ZIFKPRR32ZYA3WAA2NXFA3QHHOU6FJ/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZASBW7QRRLY5V2R44MQ4QQM4CZIDHM2U/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-28831',
-                'https://security.gentoo.org/glsa/202105-09',
-                'https://security.netapp.com/advisory/ntap-20250509-0005/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://ubuntu.com/security/notices/USN-5179-2',
-                'https://ubuntu.com/security/notices/USN-6335-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-28831'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: invalid free or segmentation fault via malformed gzip data'
-            },
-            {
-              'cve':  'CVE-2021-42378',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the getvar_i function",
-              'diffID':        'sha256:a6adc24a4511cef83198c81256dd39d198ce8068e62415ea77d5d96442df74a8',
-              'fixedVersions': [
-                '1.31.1-r21'
-              ],
-              'installedVersion': '1.31.1-r19',
-              'packageName':      'busybox',
-              'purl':             'pkg:apk/alpine/busybox@1.31.1-r19?arch=armhf&distro=3.12.3',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42378',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42378',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42378'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the getvar_i()'
-            },
-            {
-              'cve':  'CVE-2021-42379',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the next_input_file function",
-              'diffID':        'sha256:a6adc24a4511cef83198c81256dd39d198ce8068e62415ea77d5d96442df74a8',
-              'fixedVersions': [
-                '1.31.1-r21'
-              ],
-              'installedVersion': '1.31.1-r19',
-              'packageName':      'busybox',
-              'purl':             'pkg:apk/alpine/busybox@1.31.1-r19?arch=armhf&distro=3.12.3',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42379',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42379',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42379'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the next_input_file()'
-            },
-            {
-              'cve':  'CVE-2021-42380',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the clrvar function",
-              'diffID':        'sha256:a6adc24a4511cef83198c81256dd39d198ce8068e62415ea77d5d96442df74a8',
-              'fixedVersions': [
-                '1.31.1-r21'
-              ],
-              'installedVersion': '1.31.1-r19',
-              'packageName':      'busybox',
-              'purl':             'pkg:apk/alpine/busybox@1.31.1-r19?arch=armhf&distro=3.12.3',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42380',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42380',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42380'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the clrvar()'
-            },
-            {
-              'cve':  'CVE-2021-42381',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the hash_init function",
-              'diffID':        'sha256:a6adc24a4511cef83198c81256dd39d198ce8068e62415ea77d5d96442df74a8',
-              'fixedVersions': [
-                '1.31.1-r21'
-              ],
-              'installedVersion': '1.31.1-r19',
-              'packageName':      'busybox',
-              'purl':             'pkg:apk/alpine/busybox@1.31.1-r19?arch=armhf&distro=3.12.3',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42381',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42381',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42381'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the hash_init()'
-            },
-            {
-              'cve':  'CVE-2021-42382',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the getvar_s function",
-              'diffID':        'sha256:a6adc24a4511cef83198c81256dd39d198ce8068e62415ea77d5d96442df74a8',
-              'fixedVersions': [
-                '1.31.1-r21'
-              ],
-              'installedVersion': '1.31.1-r19',
-              'packageName':      'busybox',
-              'purl':             'pkg:apk/alpine/busybox@1.31.1-r19?arch=armhf&distro=3.12.3',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42382',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42382',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42382'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the getvar_s()'
-            },
-            {
-              'cve':  'CVE-2021-42383',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the evaluate function",
-              'diffID':        'sha256:a6adc24a4511cef83198c81256dd39d198ce8068e62415ea77d5d96442df74a8',
-              'fixedVersions': [
-                '1.31.1-r21'
-              ],
-              'installedVersion': '1.31.1-r19',
-              'packageName':      'busybox',
-              'purl':             'pkg:apk/alpine/busybox@1.31.1-r19?arch=armhf&distro=3.12.3',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42383',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42383',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42383'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the evaluate()'
-            },
-            {
-              'cve':  'CVE-2021-42384',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the handle_special function",
-              'diffID':        'sha256:a6adc24a4511cef83198c81256dd39d198ce8068e62415ea77d5d96442df74a8',
-              'fixedVersions': [
-                '1.31.1-r21'
-              ],
-              'installedVersion': '1.31.1-r19',
-              'packageName':      'busybox',
-              'purl':             'pkg:apk/alpine/busybox@1.31.1-r19?arch=armhf&distro=3.12.3',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42384',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42384',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42384'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the handle_special()'
-            },
-            {
-              'cve':  'CVE-2021-42385',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the evaluate function",
-              'diffID':        'sha256:a6adc24a4511cef83198c81256dd39d198ce8068e62415ea77d5d96442df74a8',
-              'fixedVersions': [
-                '1.31.1-r21'
-              ],
-              'installedVersion': '1.31.1-r19',
-              'packageName':      'busybox',
-              'purl':             'pkg:apk/alpine/busybox@1.31.1-r19?arch=armhf&distro=3.12.3',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42385',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42385',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42385'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the evaluate()'
-            },
-            {
-              'cve':  'CVE-2021-42386',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the nvalloc function",
-              'diffID':        'sha256:a6adc24a4511cef83198c81256dd39d198ce8068e62415ea77d5d96442df74a8',
-              'fixedVersions': [
-                '1.31.1-r21'
-              ],
-              'installedVersion': '1.31.1-r19',
-              'packageName':      'busybox',
-              'purl':             'pkg:apk/alpine/busybox@1.31.1-r19?arch=armhf&distro=3.12.3',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42386',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42386',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42386'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the nvalloc()'
-            },
-            {
-              'cve':  'CVE-2022-28391',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '8.8',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-88'
-              ],
-              'description':   "BusyBox through 1.35.0 allows remote attackers to execute arbitrary code if netstat is used to print a DNS PTR record's value to a VT compatible terminal. Alternatively, the attacker could choose to change the terminal's colors.",
-              'diffID':        'sha256:a6adc24a4511cef83198c81256dd39d198ce8068e62415ea77d5d96442df74a8',
-              'fixedVersions': [
-                '1.31.1-r22'
-              ],
-              'installedVersion': '1.31.1-r19',
-              'packageName':      'busybox',
-              'purl':             'pkg:apk/alpine/busybox@1.31.1-r19?arch=armhf&distro=3.12.3',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2022-28391',
-                'https://git.alpinelinux.org/aports/plain/main/busybox/0001-libbb-sockaddr2str-ensure-only-printable-characters-.patch',
-                'https://git.alpinelinux.org/aports/plain/main/busybox/0002-nslookup-sanitize-all-printed-strings-with-printable.patch',
-                'https://gitlab.alpinelinux.org/alpine/aports/-/issues/13661',
-                'https://nvd.nist.gov/vuln/detail/CVE-2022-28391',
-                'https://www.cve.org/CVERecord?id=CVE-2022-28391'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: remote attackers may execute arbitrary code if netstat is used'
-            },
-            {
-              'cve':  'CVE-2021-42374',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '5.7',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-125'
-              ],
-              'description':   "An out-of-bounds heap read in Busybox's unlzma applet leads to information leak and denial of service when crafted LZMA-compressed input is decompressed. This can be triggered by any applet/format that",
-              'diffID':        'sha256:a6adc24a4511cef83198c81256dd39d198ce8068e62415ea77d5d96442df74a8',
-              'fixedVersions': [
-                '1.31.1-r21'
-              ],
-              'installedVersion': '1.31.1-r19',
-              'packageName':      'busybox',
-              'purl':             'pkg:apk/alpine/busybox@1.31.1-r19?arch=armhf&distro=3.12.3',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42374',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42374',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42374'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'busybox: out-of-bounds read in unlzma applet leads to information leak and denial of service when crafted LZMA-compressed input is decompressed'
-            },
-            {
-              'cve':  'CVE-2021-3711',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '9.8',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'nvd': {
-                  'v3score':  '9.8',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '9.8',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-120'
-              ],
-              'description':   'In order to decrypt SM2 encrypted data an application is expected to call the API function EVP_PKEY_decrypt(). Typically an application will call this function twice. The first time, on entry, the "out" parameter can be NULL and, on exit, the "outlen" parameter is populated with the buffer size required to hold the decrypted plaintext. The application can then allocate a sufficiently sized buffer and call EVP_PKEY_decrypt() again, but this time passing a non-NULL value for the "out" parameter. A bug in the implementation of the SM2 decryption code means that the calculation of the buffer size required to hold the plaintext returned by the first call to EVP_PKEY_decrypt() can be smaller than the actual size required by the second call. This can lead to a buffer overflow when EVP_PKEY_decrypt() is called by the application a second time with a buffer that is too small. A malicious attacker who is able present SM2 content for decryption to an application could cause attacker chosen data to overflow the buffer by up to a maximum of 62 bytes altering the contents of other data held after the buffer, possibly changing application behaviour or causing the application to crash. The location of the buffer is application dependent but is typically heap allocated. Fixed in OpenSSL 1.1.1l (Affected 1.1.1-1.1.1k).',
-              'diffID':        'sha256:a6adc24a4511cef83198c81256dd39d198ce8068e62415ea77d5d96442df74a8',
-              'fixedVersions': [
-                '1.1.1l-r0'
-              ],
-              'installedVersion': '1.1.1i-r0',
-              'packageName':      'libcrypto1.1',
-              'purl':             'pkg:apk/alpine/libcrypto1.1@1.1.1i-r0?arch=armhf&distro=3.12.3',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2021/08/26/2',
-                'https://access.redhat.com/security/cve/CVE-2021-3711',
-                'https://cert-portal.siemens.com/productcert/pdf/ssa-389290.pdf',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=59f5e75f3bced8fc0e130d72a3f582cf7b480b46',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=59f5e75f3bced8fc0e130d72a3f582cf7b480b46',
-                'https://lists.apache.org/thread.html/r18995de860f0e63635f3008fd2a6aca82394249476d21691e7c59c9e%40%3Cdev.tomcat.apache.org%3E',
-                'https://lists.apache.org/thread.html/r18995de860f0e63635f3008fd2a6aca82394249476d21691e7c59c9e@%3Cdev.tomcat.apache.org%3E',
-                'https://lists.apache.org/thread.html/rad5d9f83f0d11fb3f8bb148d179b8a9ad7c6a17f18d70e5805a713d1%40%3Cdev.tomcat.apache.org%3E',
-                'https://lists.apache.org/thread.html/rad5d9f83f0d11fb3f8bb148d179b8a9ad7c6a17f18d70e5805a713d1@%3Cdev.tomcat.apache.org%3E',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-3711',
-                'https://rustsec.org/advisories/RUSTSEC-2021-0097.html',
-                'https://security.gentoo.org/glsa/202209-02',
-                'https://security.gentoo.org/glsa/202210-02',
-                'https://security.netapp.com/advisory/ntap-20210827-0010',
-                'https://security.netapp.com/advisory/ntap-20210827-0010/',
-                'https://security.netapp.com/advisory/ntap-20211022-0003',
-                'https://security.netapp.com/advisory/ntap-20211022-0003/',
-                'https://security.netapp.com/advisory/ntap-20240621-0006',
-                'https://security.netapp.com/advisory/ntap-20240621-0006/',
-                'https://ubuntu.com/security/notices/USN-5051-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-3711',
-                'https://www.debian.org/security/2021/dsa-4963',
-                'https://www.openssl.org/news/secadv/20210824.txt',
-                'https://www.oracle.com/security-alerts/cpuapr2022.html',
-                'https://www.oracle.com/security-alerts/cpujan2022.html',
-                'https://www.oracle.com/security-alerts/cpuoct2021.html',
-                'https://www.tenable.com/security/tns-2021-16',
-                'https://www.tenable.com/security/tns-2022-02'
-              ],
-              'severity':   'CRITICAL',
-              'suppressed': false,
-              'title':      'openssl: SM2 Decryption Buffer Overflow'
-            },
-            {
-              'cve':  'CVE-2021-23840',
-              'cvss': {
-                'bitnami': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'ghsa': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'nvd': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-190'
-              ],
-              'description':   'Calls to EVP_CipherUpdate, EVP_EncryptUpdate and EVP_DecryptUpdate may overflow the output length argument in some cases where the input length is close to the maximum permissable length for an integer on the platform. In such cases the return value from the function call will be 1 (indicating success), but the output length value will be negative. This could cause applications to behave incorrectly or crash. OpenSSL versions 1.1.1i and below are affected by this issue. Users of these versions should upgrade to OpenSSL 1.1.1j. OpenSSL versions 1.0.2x and below are affected by this issue. However OpenSSL 1.0.2 is out of support and no longer receiving public updates. Premium support customers of OpenSSL 1.0.2 should upgrade to 1.0.2y. Other users should upgrade to 1.1.1j. Fixed in OpenSSL 1.1.1j (Affected 1.1.1-1.1.1i). Fixed in OpenSSL 1.0.2y (Affected 1.0.2-1.0.2x).',
-              'diffID':        'sha256:a6adc24a4511cef83198c81256dd39d198ce8068e62415ea77d5d96442df74a8',
-              'fixedVersions': [
-                '1.1.1j-r0'
-              ],
-              'installedVersion': '1.1.1i-r0',
-              'packageName':      'libcrypto1.1',
-              'purl':             'pkg:apk/alpine/libcrypto1.1@1.1.1i-r0?arch=armhf&distro=3.12.3',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-23840',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=1908036',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=1930310',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=1930324',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=1934534',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=1934600',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=1939637',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=1940085',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=1965362',
-                'https://cert-portal.siemens.com/productcert/pdf/ssa-389290.pdf',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-23840',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-23841',
-                'https://errata.rockylinux.org/RLSA-2021:4424',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=6a51b9e1d0cf0bf8515f7201b68fb0a3482b3dc1',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=9b1129239f3ebb1d1c98ce9ed41d5c9476c47cb2',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=6a51b9e1d0cf0bf8515f7201b68fb0a3482b3dc1',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=9b1129239f3ebb1d1c98ce9ed41d5c9476c47cb2',
-                'https://github.com/alexcrichton/openssl-src-rs',
-                'https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA44846',
-                'https://kc.mcafee.com/corporate/index?page=content&id=SB10366',
-                'https://linux.oracle.com/cve/CVE-2021-23840.html',
-                'https://linux.oracle.com/errata/ELSA-2021-9561.html',
-                'https://lists.apache.org/thread.html/r58af02e294bd07f487e2c64ffc0a29b837db5600e33b6e698b9d696b%40%3Cissues.bookkeeper.apache.org%3E',
-                'https://lists.apache.org/thread.html/r58af02e294bd07f487e2c64ffc0a29b837db5600e33b6e698b9d696b@%3Cissues.bookkeeper.apache.org%3E',
-                'https://lists.apache.org/thread.html/rf4c02775860db415b4955778a131c2795223f61cb8c6a450893651e4%40%3Cissues.bookkeeper.apache.org%3E',
-                'https://lists.apache.org/thread.html/rf4c02775860db415b4955778a131c2795223f61cb8c6a450893651e4@%3Cissues.bookkeeper.apache.org%3E',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-23840',
-                'https://rustsec.org/advisories/RUSTSEC-2021-0057.html',
-                'https://security.gentoo.org/glsa/202103-03',
-                'https://security.netapp.com/advisory/ntap-20210219-0009',
-                'https://security.netapp.com/advisory/ntap-20210219-0009/',
-                'https://security.netapp.com/advisory/ntap-20240621-0006/',
-                'https://ubuntu.com/security/notices/USN-4738-1',
-                'https://ubuntu.com/security/notices/USN-5088-1',
-                'https://ubuntu.com/security/notices/USN-7018-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-23840',
-                'https://www.debian.org/security/2021/dsa-4855',
-                'https://www.openssl.org/news/secadv/20210216.txt',
-                'https://www.oracle.com//security-alerts/cpujul2021.html',
-                'https://www.oracle.com/security-alerts/cpuApr2021.html',
-                'https://www.oracle.com/security-alerts/cpuapr2022.html',
-                'https://www.oracle.com/security-alerts/cpujan2022.html',
-                'https://www.oracle.com/security-alerts/cpuoct2021.html',
-                'https://www.tenable.com/security/tns-2021-03',
-                'https://www.tenable.com/security/tns-2021-09',
-                'https://www.tenable.com/security/tns-2021-10'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: integer overflow in CipherUpdate'
-            },
-            {
-              'cve':  'CVE-2021-3450',
-              'cvss': {
-                'bitnami': {
-                  'v3score':  '7.4',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N'
-                },
-                'ghsa': {
-                  'v3score':  '7.4',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N'
-                },
-                'nvd': {
-                  'v3score':  '7.4',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N'
-                },
-                'redhat': {
-                  'v3score':  '7.4',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-295'
-              ],
-              'description':   'The X509_V_FLAG_X509_STRICT flag enables additional security checks of the certificates present in a certificate chain. It is not set by default. Starting from OpenSSL version 1.1.1h a check to disallow certificates in the chain that have explicitly encoded elliptic curve parameters was added as an additional strict check. An error in the implementation of this check meant that the result of a previous check to confirm that certificates in the chain are valid CA certificates was overwritten. This effectively bypasses the check that non-CA certificates must not be able to issue other certificates. If a "purpose" has been configured then there is a subsequent opportunity for checks that the certificate is a valid CA. All of the named "purpose" values implemented in libcrypto perform this check. Therefore, where a purpose is set the certificate chain will still be rejected even when the strict flag has been used. A purpose is set by default in libssl client and server certificate verification routines, but it can be overridden or removed by an application. In order to be affected, an application must explicitly set the X509_V_FLAG_X509_STRICT verification flag and either not set a purpose for the certificate verification or, in the case of TLS client or server applications, override the default purpose. OpenSSL versions 1.1.1h and newer are affected by this issue. Users of these versions should upgrade to OpenSSL 1.1.1k. OpenSSL 1.0.2 is not impacted by this issue. Fixed in OpenSSL 1.1.1k (Affected 1.1.1h-1.1.1j).',
-              'diffID':        'sha256:a6adc24a4511cef83198c81256dd39d198ce8068e62415ea77d5d96442df74a8',
-              'fixedVersions': [
-                '1.1.1k-r0'
-              ],
-              'installedVersion': '1.1.1i-r0',
-              'packageName':      'libcrypto1.1',
-              'purl':             'pkg:apk/alpine/libcrypto1.1@1.1.1i-r0?arch=armhf&distro=3.12.3',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2021/03/27/1',
-                'http://www.openwall.com/lists/oss-security/2021/03/27/2',
-                'http://www.openwall.com/lists/oss-security/2021/03/28/3',
-                'http://www.openwall.com/lists/oss-security/2021/03/28/4',
-                'https://access.redhat.com/security/cve/CVE-2021-3450',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=1941547',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=1941554',
-                'https://cert-portal.siemens.com/productcert/pdf/ssa-389290.pdf',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-3449',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-3450',
-                'https://errata.rockylinux.org/RLSA-2021:1024',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=2a40b7bc7b94dd7de897a74571e7024f0cf0d63b',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=2a40b7bc7b94dd7de897a74571e7024f0cf0d63b',
-                'https://github.com/alexcrichton/openssl-src-rs',
-                'https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA44845',
-                'https://kc.mcafee.com/corporate/index?page=content&id=SB10356',
-                'https://linux.oracle.com/cve/CVE-2021-3450.html',
-                'https://linux.oracle.com/errata/ELSA-2021-9151.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CCBFLLVQVILIVGZMBJL3IXZGKWQISYNP/',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/CCBFLLVQVILIVGZMBJL3IXZGKWQISYNP',
-                'https://mta.openssl.org/pipermail/openssl-announce/2021-March/000198.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-3450',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2021-0013',
-                'https://rustsec.org/advisories/RUSTSEC-2021-0056.html',
-                'https://security.FreeBSD.org/advisories/FreeBSD-SA-21:07.openssl.asc',
-                'https://security.gentoo.org/glsa/202103-03',
-                'https://security.netapp.com/advisory/ntap-20210326-0006',
-                'https://security.netapp.com/advisory/ntap-20210326-0006/',
-                'https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-openssl-2021-GHY28dJd',
-                'https://www.cve.org/CVERecord?id=CVE-2021-3450',
-                'https://www.openssl.org/news/secadv/20210325.txt',
-                'https://www.oracle.com//security-alerts/cpujul2021.html',
-                'https://www.oracle.com/security-alerts/cpuApr2021.html',
-                'https://www.oracle.com/security-alerts/cpuapr2022.html',
-                'https://www.oracle.com/security-alerts/cpujul2022.html',
-                'https://www.oracle.com/security-alerts/cpuoct2021.html',
-                'https://www.tenable.com/security/tns-2021-05',
-                'https://www.tenable.com/security/tns-2021-08',
-                'https://www.tenable.com/security/tns-2021-09'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: CA certificate check bypass with X509_V_FLAG_X509_STRICT'
-            },
-            {
-              'cve':  'CVE-2021-3712',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '7.4',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H'
-                },
-                'nvd': {
-                  'v3score':  '7.4',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.4',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-125'
-              ],
-              'description':   "ASN.1 strings are represented internally within OpenSSL as an ASN1_STRING structure which contains a buffer holding the string data and a field holding the buffer length. This contrasts with normal C strings which are repesented as a buffer for the string data which is terminated with a NUL (0) byte. Although not a strict requirement, ASN.1 strings that are parsed using OpenSSL's own \"d2i\" functions (and other similar parsing functions) as well as any string whose value has been set with the ASN1_STRING_set() function will additionally NUL terminate the byte array in the ASN1_STRING structure. However, it is possible for applications to directly construct valid ASN1_STRING structures which do not NUL terminate the byte array by directly setting the \"data\" and \"length\" fields in the ASN1_STRING array. This can also happen by using the ASN1_STRING_set0() function. Numerous OpenSSL functions that print ASN.1 data have been found to assume that the ASN1_STRING byte array will be NUL terminated, even though this is not guaranteed for strings that have been directly constructed. Where an application requests an ASN.1 structure to be printed, and where that ASN.1 structure contains ASN1_STRINGs that have been directly constructed by the application without NUL terminating the \"data\" field, then a read buffer overrun can occur. The same thing can also occur during name constraints processing of certificates (for example if a certificate has been directly constructed by the application instead of loading it via the OpenSSL parsing functions, and the certificate contains non NUL terminated ASN1_STRING structures). It can also occur in the X509_get1_email(), X509_REQ_get1_email() and X509_get1_ocsp() functions. If a malicious actor can cause an application to directly construct an ASN1_STRING and then process it through one of the affected OpenSSL functions then this issue could be hit. This might result in a crash (causing a Denial of Service attack). It could also result in the disclosure of private memory contents (such as private keys, or sensitive plaintext). Fixed in OpenSSL 1.1.1l (Affected 1.1.1-1.1.1k). Fixed in OpenSSL 1.0.2za (Affected 1.0.2-1.0.2y).",
-              'diffID':        'sha256:a6adc24a4511cef83198c81256dd39d198ce8068e62415ea77d5d96442df74a8',
-              'fixedVersions': [
-                '1.1.1l-r0'
-              ],
-              'installedVersion': '1.1.1i-r0',
-              'packageName':      'libcrypto1.1',
-              'purl':             'pkg:apk/alpine/libcrypto1.1@1.1.1i-r0?arch=armhf&distro=3.12.3',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2021/08/26/2',
-                'https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2021-3712.json',
-                'https://access.redhat.com/security/cve/CVE-2021-3712',
-                'https://cert-portal.siemens.com/productcert/pdf/ssa-244969.pdf',
-                'https://cert-portal.siemens.com/productcert/pdf/ssa-389290.pdf',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=94d23fcff9b2a7a8368dfe52214d5c2569882c11',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=ccb0a11145ee72b042d10593a64eaf9e8a55ec12',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=94d23fcff9b2a7a8368dfe52214d5c2569882c11',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=ccb0a11145ee72b042d10593a64eaf9e8a55ec12',
-                'https://kc.mcafee.com/corporate/index?page=content&id=SB10366',
-                'https://linux.oracle.com/cve/CVE-2021-3712.html',
-                'https://linux.oracle.com/errata/ELSA-2022-9023.html',
-                'https://lists.apache.org/thread.html/r18995de860f0e63635f3008fd2a6aca82394249476d21691e7c59c9e%40%3Cdev.tomcat.apache.org%3E',
-                'https://lists.apache.org/thread.html/r18995de860f0e63635f3008fd2a6aca82394249476d21691e7c59c9e@%3Cdev.tomcat.apache.org%3E',
-                'https://lists.apache.org/thread.html/rad5d9f83f0d11fb3f8bb148d179b8a9ad7c6a17f18d70e5805a713d1%40%3Cdev.tomcat.apache.org%3E',
-                'https://lists.apache.org/thread.html/rad5d9f83f0d11fb3f8bb148d179b8a9ad7c6a17f18d70e5805a713d1@%3Cdev.tomcat.apache.org%3E',
-                'https://lists.debian.org/debian-lts-announce/2021/09/msg00014.html',
-                'https://lists.debian.org/debian-lts-announce/2021/09/msg00021.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-3712',
-                'https://rustsec.org/advisories/RUSTSEC-2021-0098.html',
-                'https://security.gentoo.org/glsa/202209-02',
-                'https://security.gentoo.org/glsa/202210-02',
-                'https://security.netapp.com/advisory/ntap-20210827-0010',
-                'https://security.netapp.com/advisory/ntap-20210827-0010/',
-                'https://security.netapp.com/advisory/ntap-20240621-0006',
-                'https://security.netapp.com/advisory/ntap-20240621-0006/',
-                'https://ubuntu.com/security/notices/USN-5051-1',
-                'https://ubuntu.com/security/notices/USN-5051-2',
-                'https://ubuntu.com/security/notices/USN-5051-3',
-                'https://ubuntu.com/security/notices/USN-5051-4 (regression only in trusty/esm)',
-                'https://ubuntu.com/security/notices/USN-5088-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-3712',
-                'https://www.debian.org/security/2021/dsa-4963',
-                'https://www.openssl.org/news/secadv/20210824.txt',
-                'https://www.oracle.com/security-alerts/cpuapr2022.html',
-                'https://www.oracle.com/security-alerts/cpujan2022.html',
-                'https://www.oracle.com/security-alerts/cpuoct2021.html',
-                'https://www.tenable.com/security/tns-2021-16',
-                'https://www.tenable.com/security/tns-2022-02'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: Read buffer overruns processing ASN.1 strings'
-            },
-            {
-              'cve':  'CVE-2022-0778',
-              'cvss': {
-                'bitnami': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'ghsa': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'nvd': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-835'
-              ],
-              'description':   'The BN_mod_sqrt() function, which computes a modular square root, contains a bug that can cause it to loop forever for non-prime moduli. Internally this function is used when parsing certificates that contain elliptic curve public keys in compressed form or explicit elliptic curve parameters with a base point encoded in compressed form. It is possible to trigger the infinite loop by crafting a certificate that has invalid explicit curve parameters. Since certificate parsing happens prior to verification of the certificate signature, any process that parses an externally supplied certificate may thus be subject to a denial of service attack. The infinite loop can also be reached when parsing crafted private keys as they can contain explicit elliptic curve parameters. Thus vulnerable situations include: - TLS clients consuming server certificates - TLS servers consuming client certificates - Hosting providers taking certificates or private keys from customers - Certificate authorities parsing certification requests from subscribers - Anything else which parses ASN.1 elliptic curve parameters Also any other applications that use the BN_mod_sqrt() where the attacker can control the parameter values are vulnerable to this DoS issue. In the OpenSSL 1.0.2 version the public key is not parsed during initial parsing of the certificate which makes it slightly harder to trigger the infinite loop. However any operation which requires the public key from the certificate will trigger the infinite loop. In particular the attacker can use a self-signed certificate to trigger the loop during verification of the certificate signature. This issue affects OpenSSL versions 1.0.2, 1.1.1 and 3.0. It was addressed in the releases of 1.1.1n and 3.0.2 on the 15th March 2022. Fixed in OpenSSL 3.0.2 (Affected 3.0.0,3.0.1). Fixed in OpenSSL 1.1.1n (Affected 1.1.1-1.1.1m). Fixed in OpenSSL 1.0.2zd (Affected 1.0.2-1.0.2zc).',
-              'diffID':        'sha256:a6adc24a4511cef83198c81256dd39d198ce8068e62415ea77d5d96442df74a8',
-              'fixedVersions': [
-                '1.1.1n-r0'
-              ],
-              'installedVersion': '1.1.1i-r0',
-              'packageName':      'libcrypto1.1',
-              'purl':             'pkg:apk/alpine/libcrypto1.1@1.1.1i-r0?arch=armhf&distro=3.12.3',
-              'references':       [
-                'http://packetstormsecurity.com/files/167344/OpenSSL-1.0.2-1.1.1-3.0-BN_mod_sqrt-Infinite-Loop.html',
-                'http://seclists.org/fulldisclosure/2022/May/33',
-                'http://seclists.org/fulldisclosure/2022/May/35',
-                'http://seclists.org/fulldisclosure/2022/May/38',
-                'https://access.redhat.com/errata/RHSA-2022:5326',
-                'https://access.redhat.com/security/cve/CVE-2022-0778',
-                'https://bugzilla.redhat.com/2062202',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2062202',
-                'https://cert-portal.siemens.com/productcert/pdf/ssa-712929.pdf',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-0778',
-                'https://errata.almalinux.org/8/ALSA-2022-5326.html',
-                'https://errata.rockylinux.org/RLSA-2022:4899',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=3118eb64934499d93db3230748a452351d1d9a65',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=380085481c64de749a6dd25cdf0bcf4360b30f83',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=a466912611aa6cbdf550cd10601390e587451246',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=3118eb64934499d93db3230748a452351d1d9a65',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=380085481c64de749a6dd25cdf0bcf4360b30f83',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=a466912611aa6cbdf550cd10601390e587451246',
-                'https://linux.oracle.com/cve/CVE-2022-0778.html',
-                'https://linux.oracle.com/errata/ELSA-2022-9272.html',
-                'https://lists.debian.org/debian-lts-announce/2022/03/msg00023.html',
-                'https://lists.debian.org/debian-lts-announce/2022/03/msg00024.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/323SNN6ZX7PRJJWP2BUAFLPUAE42XWLZ',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/323SNN6ZX7PRJJWP2BUAFLPUAE42XWLZ/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GDB3GQVJPXJE7X5C5JN6JAA4XUDWD6E6',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GDB3GQVJPXJE7X5C5JN6JAA4XUDWD6E6/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/W6K3PR542DXWLEFFMFIDMME4CWMHJRMG',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/W6K3PR542DXWLEFFMFIDMME4CWMHJRMG/',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/323SNN6ZX7PRJJWP2BUAFLPUAE42XWLZ',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/GDB3GQVJPXJE7X5C5JN6JAA4XUDWD6E6',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/W6K3PR542DXWLEFFMFIDMME4CWMHJRMG',
-                'https://nvd.nist.gov/vuln/detail/CVE-2022-0778',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2022-0002',
-                'https://rustsec.org/advisories/RUSTSEC-2022-0014.html',
-                'https://security.gentoo.org/glsa/202210-02',
-                'https://security.netapp.com/advisory/ntap-20220321-0002',
-                'https://security.netapp.com/advisory/ntap-20220321-0002/',
-                'https://security.netapp.com/advisory/ntap-20220429-0005',
-                'https://security.netapp.com/advisory/ntap-20220429-0005/',
-                'https://security.netapp.com/advisory/ntap-20240621-0006',
-                'https://security.netapp.com/advisory/ntap-20240621-0006/',
-                'https://support.apple.com/kb/HT213255',
-                'https://support.apple.com/kb/HT213256',
-                'https://support.apple.com/kb/HT213257',
-                'https://ubuntu.com/security/notices/USN-5328-1',
-                'https://ubuntu.com/security/notices/USN-5328-2',
-                'https://ubuntu.com/security/notices/USN-6457-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2022-0778',
-                'https://www.debian.org/security/2022/dsa-5103',
-                'https://www.openssl.org/news/secadv/20220315.txt',
-                'https://www.oracle.com/security-alerts/cpuapr2022.html',
-                'https://www.oracle.com/security-alerts/cpujul2022.html',
-                'https://www.tenable.com/security/tns-2022-06',
-                'https://www.tenable.com/security/tns-2022-07',
-                'https://www.tenable.com/security/tns-2022-08',
-                'https://www.tenable.com/security/tns-2022-09'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: Infinite loop in BN_mod_sqrt() reachable when parsing certificates'
-            },
-            {
-              'cve':  'CVE-2021-23841',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'nvd': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-476'
-              ],
-              'description':   'The OpenSSL public API function X509_issuer_and_serial_hash() attempts to create a unique hash value based on the issuer and serial number data contained within an X509 certificate. However it fails to correctly handle any errors that may occur while parsing the issuer field (which might occur if the issuer field is maliciously constructed). This may subsequently result in a NULL pointer deref and a crash leading to a potential denial of service attack. The function X509_issuer_and_serial_hash() is never directly called by OpenSSL itself so applications are only vulnerable if they use this function directly and they use it on certificates that may have been obtained from untrusted sources. OpenSSL versions 1.1.1i and below are affected by this issue. Users of these versions should upgrade to OpenSSL 1.1.1j. OpenSSL versions 1.0.2x and below are affected by this issue. However OpenSSL 1.0.2 is out of support and no longer receiving public updates. Premium support customers of OpenSSL 1.0.2 should upgrade to 1.0.2y. Other users should upgrade to 1.1.1j. Fixed in OpenSSL 1.1.1j (Affected 1.1.1-1.1.1i). Fixed in OpenSSL 1.0.2y (Affected 1.0.2-1.0.2x).',
-              'diffID':        'sha256:a6adc24a4511cef83198c81256dd39d198ce8068e62415ea77d5d96442df74a8',
-              'fixedVersions': [
-                '1.1.1j-r0'
-              ],
-              'installedVersion': '1.1.1i-r0',
-              'packageName':      'libcrypto1.1',
-              'purl':             'pkg:apk/alpine/libcrypto1.1@1.1.1i-r0?arch=armhf&distro=3.12.3',
-              'references':       [
-                'http://seclists.org/fulldisclosure/2021/May/67',
-                'http://seclists.org/fulldisclosure/2021/May/68',
-                'http://seclists.org/fulldisclosure/2021/May/70',
-                'https://access.redhat.com/security/cve/CVE-2021-23841',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=1908036',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=1930310',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=1930324',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=1934534',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=1934600',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=1939637',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=1940085',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=1965362',
-                'https://cert-portal.siemens.com/productcert/pdf/ssa-637483.pdf',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-23840',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-23841',
-                'https://errata.rockylinux.org/RLSA-2021:4424',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=122a19ab48091c657f7cb1fb3af9fc07bd557bbf',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=8252ee4d90f3f2004d3d0aeeed003ad49c9a7807',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=122a19ab48091c657f7cb1fb3af9fc07bd557bbf',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=6a51b9e1d0cf0bf8515f7201b68fb0a3482b3dc1',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=8252ee4d90f3f2004d3d0aeeed003ad49c9a7807',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=9b1129239f3ebb1d1c98ce9ed41d5c9476c47cb2',
-                'https://github.com/alexcrichton/openssl-src-rs',
-                'https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA44846',
-                'https://linux.oracle.com/cve/CVE-2021-23841.html',
-                'https://linux.oracle.com/errata/ELSA-2021-9561.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-23841',
-                'https://rustsec.org/advisories/RUSTSEC-2021-0058',
-                'https://rustsec.org/advisories/RUSTSEC-2021-0058.html',
-                'https://security.gentoo.org/glsa/202103-03',
-                'https://security.netapp.com/advisory/ntap-20210219-0009',
-                'https://security.netapp.com/advisory/ntap-20210219-0009/',
-                'https://security.netapp.com/advisory/ntap-20210513-0002',
-                'https://security.netapp.com/advisory/ntap-20210513-0002/',
-                'https://security.netapp.com/advisory/ntap-20240621-0006/',
-                'https://support.apple.com/kb/HT212528',
-                'https://support.apple.com/kb/HT212529',
-                'https://support.apple.com/kb/HT212534',
-                'https://ubuntu.com/security/notices/USN-4738-1',
-                'https://ubuntu.com/security/notices/USN-4745-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-23841',
-                'https://www.debian.org/security/2021/dsa-4855',
-                'https://www.openssl.org/news/secadv/20210216.txt',
-                'https://www.oracle.com//security-alerts/cpujul2021.html',
-                'https://www.oracle.com/security-alerts/cpuApr2021.html',
-                'https://www.oracle.com/security-alerts/cpuapr2022.html',
-                'https://www.oracle.com/security-alerts/cpuoct2021.html',
-                'https://www.tenable.com/security/tns-2021-03',
-                'https://www.tenable.com/security/tns-2021-09'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: NULL pointer dereference in X509_issuer_and_serial_hash()'
-            },
-            {
-              'cve':  'CVE-2021-3449',
-              'cvss': {
-                'bitnami': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'ghsa': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'nvd': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-476'
-              ],
-              'description':   'An OpenSSL TLS server may crash if sent a maliciously crafted renegotiation ClientHello message from a client. If a TLSv1.2 renegotiation ClientHello omits the signature_algorithms extension (where it was present in the initial ClientHello), but includes a signature_algorithms_cert extension then a NULL pointer dereference will result, leading to a crash and a denial of service attack. A server is only vulnerable if it has TLSv1.2 and renegotiation enabled (which is the default configuration). OpenSSL TLS clients are not impacted by this issue. All OpenSSL 1.1.1 versions are affected by this issue. Users of these versions should upgrade to OpenSSL 1.1.1k. OpenSSL 1.0.2 is not impacted by this issue. Fixed in OpenSSL 1.1.1k (Affected 1.1.1-1.1.1j).',
-              'diffID':        'sha256:a6adc24a4511cef83198c81256dd39d198ce8068e62415ea77d5d96442df74a8',
-              'fixedVersions': [
-                '1.1.1k-r0'
-              ],
-              'installedVersion': '1.1.1i-r0',
-              'packageName':      'libcrypto1.1',
-              'purl':             'pkg:apk/alpine/libcrypto1.1@1.1.1i-r0?arch=armhf&distro=3.12.3',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2021/03/27/1',
-                'http://www.openwall.com/lists/oss-security/2021/03/27/2',
-                'http://www.openwall.com/lists/oss-security/2021/03/28/3',
-                'http://www.openwall.com/lists/oss-security/2021/03/28/4',
-                'https://access.redhat.com/security/cve/CVE-2021-3449',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=1941547',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=1941554',
-                'https://cert-portal.siemens.com/productcert/pdf/ssa-389290.pdf',
-                'https://cert-portal.siemens.com/productcert/pdf/ssa-772220.pdf',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-3449',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-3450',
-                'https://errata.rockylinux.org/RLSA-2021:1024',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=fb9fa6b51defd48157eeb207f52181f735d96148',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=fb9fa6b51defd48157eeb207f52181f735d96148',
-                'https://github.com/alexcrichton/openssl-src-rs',
-                'https://github.com/nodejs/node/pull/38083',
-                'https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA44845',
-                'https://kc.mcafee.com/corporate/index?page=content&id=SB10356',
-                'https://linux.oracle.com/cve/CVE-2021-3449.html',
-                'https://linux.oracle.com/errata/ELSA-2021-9151.html',
-                'https://lists.debian.org/debian-lts-announce/2021/08/msg00029.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CCBFLLVQVILIVGZMBJL3IXZGKWQISYNP/',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/CCBFLLVQVILIVGZMBJL3IXZGKWQISYNP',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-3449',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2021-0013',
-                'https://rustsec.org/advisories/RUSTSEC-2021-0055',
-                'https://rustsec.org/advisories/RUSTSEC-2021-0055.html',
-                'https://security.FreeBSD.org/advisories/FreeBSD-SA-21:07.openssl.asc',
-                'https://security.gentoo.org/glsa/202103-03',
-                'https://security.netapp.com/advisory/ntap-20210326-0006',
-                'https://security.netapp.com/advisory/ntap-20210326-0006/',
-                'https://security.netapp.com/advisory/ntap-20210513-0002',
-                'https://security.netapp.com/advisory/ntap-20210513-0002/',
-                'https://security.netapp.com/advisory/ntap-20240621-0006/',
-                'https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-openssl-2021-GHY28dJd',
-                'https://ubuntu.com/security/notices/USN-4891-1',
-                'https://ubuntu.com/security/notices/USN-5038-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-3449',
-                'https://www.debian.org/security/2021/dsa-4875',
-                'https://www.openssl.org/news/secadv/20210325.txt',
-                'https://www.oracle.com//security-alerts/cpujul2021.html',
-                'https://www.oracle.com/security-alerts/cpuApr2021.html',
-                'https://www.oracle.com/security-alerts/cpuapr2022.html',
-                'https://www.oracle.com/security-alerts/cpujul2022.html',
-                'https://www.oracle.com/security-alerts/cpuoct2021.html',
-                'https://www.tenable.com/security/tns-2021-05',
-                'https://www.tenable.com/security/tns-2021-06',
-                'https://www.tenable.com/security/tns-2021-09',
-                'https://www.tenable.com/security/tns-2021-10'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: NULL pointer dereference in signature_algorithms processing'
-            },
-            {
-              'cve':  'CVE-2021-23839',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '3.7',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N'
-                },
-                'redhat': {
-                  'v3score':  '3.7',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-327'
-              ],
-              'description':   'OpenSSL 1.0.2 supports SSLv2. If a client attempts to negotiate SSLv2 with a server that is configured to support both SSLv2 and more recent SSL and TLS versions then a check is made for a version rollback attack when unpadding an RSA signature. Clients that support SSL or TLS versions greater than SSLv2 are supposed to use a special form of padding. A server that supports greater than SSLv2 is supposed to reject connection attempts from a client where this special form of padding is present, because this indicates that a version rollback has occurred (i.e. both client and server support greater than SSLv2, and yet this is the version that is being requested). The implementation of this padding check inverted the logic so that the connection attempt is accepted if the padding is present, and rejected if it is absent. This means that such as server will accept a connection if a version rollback attack has occurred. Further the server will erroneously reject a connection if a normal SSLv2 connection attempt is made. Only OpenSSL 1.0.2 servers from version 1.0.2s to 1.0.2x are affected by this issue. In order to be vulnerable a 1.0.2 server must: 1) have configured SSLv2 support at compile time (this is off by default), 2) have configured SSLv2 support at runtime (this is off by default), 3) have configured SSLv2 ciphersuites (these are not in the default ciphersuite list) OpenSSL 1.1.1 does not have SSLv2 support and therefore is not vulnerable to this issue. The underlying error is in the implementation of the RSA_padding_check_SSLv23() function. This also affects the RSA_SSLV23_PADDING padding mode used by various other functions. Although 1.1.1 does not support SSLv2 the RSA_padding_check_SSLv23() function still exists, as does the RSA_SSLV23_PADDING padding mode. Applications that directly call that function or use that padding mode will encounter this issue. However since there is no support for the SSLv2 protocol in 1.1.1 this is considered a bug and not a security issue in that version. OpenSSL 1.0.2 is out of support and no longer receiving public updates. Premium support customers of OpenSSL 1.0.2 should upgrade to 1.0.2y. Other users should upgrade to 1.1.1j. Fixed in OpenSSL 1.0.2y (Affected 1.0.2s-1.0.2x).',
-              'diffID':        'sha256:a6adc24a4511cef83198c81256dd39d198ce8068e62415ea77d5d96442df74a8',
-              'fixedVersions': [
-                '1.1.1j-r0'
-              ],
-              'installedVersion': '1.1.1i-r0',
-              'packageName':      'libcrypto1.1',
-              'purl':             'pkg:apk/alpine/libcrypto1.1@1.1.1i-r0?arch=armhf&distro=3.12.3',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-23839',
-                'https://cert-portal.siemens.com/productcert/pdf/ssa-637483.pdf',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=30919ab80a478f2d81f2e9acdcca3fa4740cd547',
-                'https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA44846',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-23839',
-                'https://security.netapp.com/advisory/ntap-20210219-0009/',
-                'https://security.netapp.com/advisory/ntap-20240621-0006/',
-                'https://www.cve.org/CVERecord?id=CVE-2021-23839',
-                'https://www.openssl.org/news/secadv/20210216.txt',
-                'https://www.oracle.com//security-alerts/cpujul2021.html',
-                'https://www.oracle.com/security-alerts/cpuApr2021.html',
-                'https://www.oracle.com/security-alerts/cpuapr2022.html',
-                'https://www.oracle.com/security-alerts/cpuoct2021.html'
-              ],
-              'severity':   'LOW',
-              'suppressed': false,
-              'title':      'openssl: incorrect SSLv2 rollback protection'
-            },
-            {
-              'cve':  'CVE-2021-3711',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '9.8',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'nvd': {
-                  'v3score':  '9.8',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '9.8',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-120'
-              ],
-              'description':   'In order to decrypt SM2 encrypted data an application is expected to call the API function EVP_PKEY_decrypt(). Typically an application will call this function twice. The first time, on entry, the "out" parameter can be NULL and, on exit, the "outlen" parameter is populated with the buffer size required to hold the decrypted plaintext. The application can then allocate a sufficiently sized buffer and call EVP_PKEY_decrypt() again, but this time passing a non-NULL value for the "out" parameter. A bug in the implementation of the SM2 decryption code means that the calculation of the buffer size required to hold the plaintext returned by the first call to EVP_PKEY_decrypt() can be smaller than the actual size required by the second call. This can lead to a buffer overflow when EVP_PKEY_decrypt() is called by the application a second time with a buffer that is too small. A malicious attacker who is able present SM2 content for decryption to an application could cause attacker chosen data to overflow the buffer by up to a maximum of 62 bytes altering the contents of other data held after the buffer, possibly changing application behaviour or causing the application to crash. The location of the buffer is application dependent but is typically heap allocated. Fixed in OpenSSL 1.1.1l (Affected 1.1.1-1.1.1k).',
-              'diffID':        'sha256:a6adc24a4511cef83198c81256dd39d198ce8068e62415ea77d5d96442df74a8',
-              'fixedVersions': [
-                '1.1.1l-r0'
-              ],
-              'installedVersion': '1.1.1i-r0',
-              'packageName':      'libssl1.1',
-              'purl':             'pkg:apk/alpine/libssl1.1@1.1.1i-r0?arch=armhf&distro=3.12.3',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2021/08/26/2',
-                'https://access.redhat.com/security/cve/CVE-2021-3711',
-                'https://cert-portal.siemens.com/productcert/pdf/ssa-389290.pdf',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=59f5e75f3bced8fc0e130d72a3f582cf7b480b46',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=59f5e75f3bced8fc0e130d72a3f582cf7b480b46',
-                'https://lists.apache.org/thread.html/r18995de860f0e63635f3008fd2a6aca82394249476d21691e7c59c9e%40%3Cdev.tomcat.apache.org%3E',
-                'https://lists.apache.org/thread.html/r18995de860f0e63635f3008fd2a6aca82394249476d21691e7c59c9e@%3Cdev.tomcat.apache.org%3E',
-                'https://lists.apache.org/thread.html/rad5d9f83f0d11fb3f8bb148d179b8a9ad7c6a17f18d70e5805a713d1%40%3Cdev.tomcat.apache.org%3E',
-                'https://lists.apache.org/thread.html/rad5d9f83f0d11fb3f8bb148d179b8a9ad7c6a17f18d70e5805a713d1@%3Cdev.tomcat.apache.org%3E',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-3711',
-                'https://rustsec.org/advisories/RUSTSEC-2021-0097.html',
-                'https://security.gentoo.org/glsa/202209-02',
-                'https://security.gentoo.org/glsa/202210-02',
-                'https://security.netapp.com/advisory/ntap-20210827-0010',
-                'https://security.netapp.com/advisory/ntap-20210827-0010/',
-                'https://security.netapp.com/advisory/ntap-20211022-0003',
-                'https://security.netapp.com/advisory/ntap-20211022-0003/',
-                'https://security.netapp.com/advisory/ntap-20240621-0006',
-                'https://security.netapp.com/advisory/ntap-20240621-0006/',
-                'https://ubuntu.com/security/notices/USN-5051-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-3711',
-                'https://www.debian.org/security/2021/dsa-4963',
-                'https://www.openssl.org/news/secadv/20210824.txt',
-                'https://www.oracle.com/security-alerts/cpuapr2022.html',
-                'https://www.oracle.com/security-alerts/cpujan2022.html',
-                'https://www.oracle.com/security-alerts/cpuoct2021.html',
-                'https://www.tenable.com/security/tns-2021-16',
-                'https://www.tenable.com/security/tns-2022-02'
-              ],
-              'severity':   'CRITICAL',
-              'suppressed': false,
-              'title':      'openssl: SM2 Decryption Buffer Overflow'
-            },
-            {
-              'cve':  'CVE-2021-23840',
-              'cvss': {
-                'bitnami': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'ghsa': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'nvd': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-190'
-              ],
-              'description':   'Calls to EVP_CipherUpdate, EVP_EncryptUpdate and EVP_DecryptUpdate may overflow the output length argument in some cases where the input length is close to the maximum permissable length for an integer on the platform. In such cases the return value from the function call will be 1 (indicating success), but the output length value will be negative. This could cause applications to behave incorrectly or crash. OpenSSL versions 1.1.1i and below are affected by this issue. Users of these versions should upgrade to OpenSSL 1.1.1j. OpenSSL versions 1.0.2x and below are affected by this issue. However OpenSSL 1.0.2 is out of support and no longer receiving public updates. Premium support customers of OpenSSL 1.0.2 should upgrade to 1.0.2y. Other users should upgrade to 1.1.1j. Fixed in OpenSSL 1.1.1j (Affected 1.1.1-1.1.1i). Fixed in OpenSSL 1.0.2y (Affected 1.0.2-1.0.2x).',
-              'diffID':        'sha256:a6adc24a4511cef83198c81256dd39d198ce8068e62415ea77d5d96442df74a8',
-              'fixedVersions': [
-                '1.1.1j-r0'
-              ],
-              'installedVersion': '1.1.1i-r0',
-              'packageName':      'libssl1.1',
-              'purl':             'pkg:apk/alpine/libssl1.1@1.1.1i-r0?arch=armhf&distro=3.12.3',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-23840',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=1908036',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=1930310',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=1930324',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=1934534',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=1934600',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=1939637',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=1940085',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=1965362',
-                'https://cert-portal.siemens.com/productcert/pdf/ssa-389290.pdf',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-23840',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-23841',
-                'https://errata.rockylinux.org/RLSA-2021:4424',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=6a51b9e1d0cf0bf8515f7201b68fb0a3482b3dc1',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=9b1129239f3ebb1d1c98ce9ed41d5c9476c47cb2',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=6a51b9e1d0cf0bf8515f7201b68fb0a3482b3dc1',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=9b1129239f3ebb1d1c98ce9ed41d5c9476c47cb2',
-                'https://github.com/alexcrichton/openssl-src-rs',
-                'https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA44846',
-                'https://kc.mcafee.com/corporate/index?page=content&id=SB10366',
-                'https://linux.oracle.com/cve/CVE-2021-23840.html',
-                'https://linux.oracle.com/errata/ELSA-2021-9561.html',
-                'https://lists.apache.org/thread.html/r58af02e294bd07f487e2c64ffc0a29b837db5600e33b6e698b9d696b%40%3Cissues.bookkeeper.apache.org%3E',
-                'https://lists.apache.org/thread.html/r58af02e294bd07f487e2c64ffc0a29b837db5600e33b6e698b9d696b@%3Cissues.bookkeeper.apache.org%3E',
-                'https://lists.apache.org/thread.html/rf4c02775860db415b4955778a131c2795223f61cb8c6a450893651e4%40%3Cissues.bookkeeper.apache.org%3E',
-                'https://lists.apache.org/thread.html/rf4c02775860db415b4955778a131c2795223f61cb8c6a450893651e4@%3Cissues.bookkeeper.apache.org%3E',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-23840',
-                'https://rustsec.org/advisories/RUSTSEC-2021-0057.html',
-                'https://security.gentoo.org/glsa/202103-03',
-                'https://security.netapp.com/advisory/ntap-20210219-0009',
-                'https://security.netapp.com/advisory/ntap-20210219-0009/',
-                'https://security.netapp.com/advisory/ntap-20240621-0006/',
-                'https://ubuntu.com/security/notices/USN-4738-1',
-                'https://ubuntu.com/security/notices/USN-5088-1',
-                'https://ubuntu.com/security/notices/USN-7018-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-23840',
-                'https://www.debian.org/security/2021/dsa-4855',
-                'https://www.openssl.org/news/secadv/20210216.txt',
-                'https://www.oracle.com//security-alerts/cpujul2021.html',
-                'https://www.oracle.com/security-alerts/cpuApr2021.html',
-                'https://www.oracle.com/security-alerts/cpuapr2022.html',
-                'https://www.oracle.com/security-alerts/cpujan2022.html',
-                'https://www.oracle.com/security-alerts/cpuoct2021.html',
-                'https://www.tenable.com/security/tns-2021-03',
-                'https://www.tenable.com/security/tns-2021-09',
-                'https://www.tenable.com/security/tns-2021-10'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: integer overflow in CipherUpdate'
-            },
-            {
-              'cve':  'CVE-2021-3450',
-              'cvss': {
-                'bitnami': {
-                  'v3score':  '7.4',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N'
-                },
-                'ghsa': {
-                  'v3score':  '7.4',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N'
-                },
-                'nvd': {
-                  'v3score':  '7.4',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N'
-                },
-                'redhat': {
-                  'v3score':  '7.4',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-295'
-              ],
-              'description':   'The X509_V_FLAG_X509_STRICT flag enables additional security checks of the certificates present in a certificate chain. It is not set by default. Starting from OpenSSL version 1.1.1h a check to disallow certificates in the chain that have explicitly encoded elliptic curve parameters was added as an additional strict check. An error in the implementation of this check meant that the result of a previous check to confirm that certificates in the chain are valid CA certificates was overwritten. This effectively bypasses the check that non-CA certificates must not be able to issue other certificates. If a "purpose" has been configured then there is a subsequent opportunity for checks that the certificate is a valid CA. All of the named "purpose" values implemented in libcrypto perform this check. Therefore, where a purpose is set the certificate chain will still be rejected even when the strict flag has been used. A purpose is set by default in libssl client and server certificate verification routines, but it can be overridden or removed by an application. In order to be affected, an application must explicitly set the X509_V_FLAG_X509_STRICT verification flag and either not set a purpose for the certificate verification or, in the case of TLS client or server applications, override the default purpose. OpenSSL versions 1.1.1h and newer are affected by this issue. Users of these versions should upgrade to OpenSSL 1.1.1k. OpenSSL 1.0.2 is not impacted by this issue. Fixed in OpenSSL 1.1.1k (Affected 1.1.1h-1.1.1j).',
-              'diffID':        'sha256:a6adc24a4511cef83198c81256dd39d198ce8068e62415ea77d5d96442df74a8',
-              'fixedVersions': [
-                '1.1.1k-r0'
-              ],
-              'installedVersion': '1.1.1i-r0',
-              'packageName':      'libssl1.1',
-              'purl':             'pkg:apk/alpine/libssl1.1@1.1.1i-r0?arch=armhf&distro=3.12.3',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2021/03/27/1',
-                'http://www.openwall.com/lists/oss-security/2021/03/27/2',
-                'http://www.openwall.com/lists/oss-security/2021/03/28/3',
-                'http://www.openwall.com/lists/oss-security/2021/03/28/4',
-                'https://access.redhat.com/security/cve/CVE-2021-3450',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=1941547',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=1941554',
-                'https://cert-portal.siemens.com/productcert/pdf/ssa-389290.pdf',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-3449',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-3450',
-                'https://errata.rockylinux.org/RLSA-2021:1024',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=2a40b7bc7b94dd7de897a74571e7024f0cf0d63b',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=2a40b7bc7b94dd7de897a74571e7024f0cf0d63b',
-                'https://github.com/alexcrichton/openssl-src-rs',
-                'https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA44845',
-                'https://kc.mcafee.com/corporate/index?page=content&id=SB10356',
-                'https://linux.oracle.com/cve/CVE-2021-3450.html',
-                'https://linux.oracle.com/errata/ELSA-2021-9151.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CCBFLLVQVILIVGZMBJL3IXZGKWQISYNP/',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/CCBFLLVQVILIVGZMBJL3IXZGKWQISYNP',
-                'https://mta.openssl.org/pipermail/openssl-announce/2021-March/000198.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-3450',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2021-0013',
-                'https://rustsec.org/advisories/RUSTSEC-2021-0056.html',
-                'https://security.FreeBSD.org/advisories/FreeBSD-SA-21:07.openssl.asc',
-                'https://security.gentoo.org/glsa/202103-03',
-                'https://security.netapp.com/advisory/ntap-20210326-0006',
-                'https://security.netapp.com/advisory/ntap-20210326-0006/',
-                'https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-openssl-2021-GHY28dJd',
-                'https://www.cve.org/CVERecord?id=CVE-2021-3450',
-                'https://www.openssl.org/news/secadv/20210325.txt',
-                'https://www.oracle.com//security-alerts/cpujul2021.html',
-                'https://www.oracle.com/security-alerts/cpuApr2021.html',
-                'https://www.oracle.com/security-alerts/cpuapr2022.html',
-                'https://www.oracle.com/security-alerts/cpujul2022.html',
-                'https://www.oracle.com/security-alerts/cpuoct2021.html',
-                'https://www.tenable.com/security/tns-2021-05',
-                'https://www.tenable.com/security/tns-2021-08',
-                'https://www.tenable.com/security/tns-2021-09'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: CA certificate check bypass with X509_V_FLAG_X509_STRICT'
-            },
-            {
-              'cve':  'CVE-2021-3712',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '7.4',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H'
-                },
-                'nvd': {
-                  'v3score':  '7.4',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.4',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-125'
-              ],
-              'description':   "ASN.1 strings are represented internally within OpenSSL as an ASN1_STRING structure which contains a buffer holding the string data and a field holding the buffer length. This contrasts with normal C strings which are repesented as a buffer for the string data which is terminated with a NUL (0) byte. Although not a strict requirement, ASN.1 strings that are parsed using OpenSSL's own \"d2i\" functions (and other similar parsing functions) as well as any string whose value has been set with the ASN1_STRING_set() function will additionally NUL terminate the byte array in the ASN1_STRING structure. However, it is possible for applications to directly construct valid ASN1_STRING structures which do not NUL terminate the byte array by directly setting the \"data\" and \"length\" fields in the ASN1_STRING array. This can also happen by using the ASN1_STRING_set0() function. Numerous OpenSSL functions that print ASN.1 data have been found to assume that the ASN1_STRING byte array will be NUL terminated, even though this is not guaranteed for strings that have been directly constructed. Where an application requests an ASN.1 structure to be printed, and where that ASN.1 structure contains ASN1_STRINGs that have been directly constructed by the application without NUL terminating the \"data\" field, then a read buffer overrun can occur. The same thing can also occur during name constraints processing of certificates (for example if a certificate has been directly constructed by the application instead of loading it via the OpenSSL parsing functions, and the certificate contains non NUL terminated ASN1_STRING structures). It can also occur in the X509_get1_email(), X509_REQ_get1_email() and X509_get1_ocsp() functions. If a malicious actor can cause an application to directly construct an ASN1_STRING and then process it through one of the affected OpenSSL functions then this issue could be hit. This might result in a crash (causing a Denial of Service attack). It could also result in the disclosure of private memory contents (such as private keys, or sensitive plaintext). Fixed in OpenSSL 1.1.1l (Affected 1.1.1-1.1.1k). Fixed in OpenSSL 1.0.2za (Affected 1.0.2-1.0.2y).",
-              'diffID':        'sha256:a6adc24a4511cef83198c81256dd39d198ce8068e62415ea77d5d96442df74a8',
-              'fixedVersions': [
-                '1.1.1l-r0'
-              ],
-              'installedVersion': '1.1.1i-r0',
-              'packageName':      'libssl1.1',
-              'purl':             'pkg:apk/alpine/libssl1.1@1.1.1i-r0?arch=armhf&distro=3.12.3',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2021/08/26/2',
-                'https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2021-3712.json',
-                'https://access.redhat.com/security/cve/CVE-2021-3712',
-                'https://cert-portal.siemens.com/productcert/pdf/ssa-244969.pdf',
-                'https://cert-portal.siemens.com/productcert/pdf/ssa-389290.pdf',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=94d23fcff9b2a7a8368dfe52214d5c2569882c11',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=ccb0a11145ee72b042d10593a64eaf9e8a55ec12',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=94d23fcff9b2a7a8368dfe52214d5c2569882c11',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=ccb0a11145ee72b042d10593a64eaf9e8a55ec12',
-                'https://kc.mcafee.com/corporate/index?page=content&id=SB10366',
-                'https://linux.oracle.com/cve/CVE-2021-3712.html',
-                'https://linux.oracle.com/errata/ELSA-2022-9023.html',
-                'https://lists.apache.org/thread.html/r18995de860f0e63635f3008fd2a6aca82394249476d21691e7c59c9e%40%3Cdev.tomcat.apache.org%3E',
-                'https://lists.apache.org/thread.html/r18995de860f0e63635f3008fd2a6aca82394249476d21691e7c59c9e@%3Cdev.tomcat.apache.org%3E',
-                'https://lists.apache.org/thread.html/rad5d9f83f0d11fb3f8bb148d179b8a9ad7c6a17f18d70e5805a713d1%40%3Cdev.tomcat.apache.org%3E',
-                'https://lists.apache.org/thread.html/rad5d9f83f0d11fb3f8bb148d179b8a9ad7c6a17f18d70e5805a713d1@%3Cdev.tomcat.apache.org%3E',
-                'https://lists.debian.org/debian-lts-announce/2021/09/msg00014.html',
-                'https://lists.debian.org/debian-lts-announce/2021/09/msg00021.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-3712',
-                'https://rustsec.org/advisories/RUSTSEC-2021-0098.html',
-                'https://security.gentoo.org/glsa/202209-02',
-                'https://security.gentoo.org/glsa/202210-02',
-                'https://security.netapp.com/advisory/ntap-20210827-0010',
-                'https://security.netapp.com/advisory/ntap-20210827-0010/',
-                'https://security.netapp.com/advisory/ntap-20240621-0006',
-                'https://security.netapp.com/advisory/ntap-20240621-0006/',
-                'https://ubuntu.com/security/notices/USN-5051-1',
-                'https://ubuntu.com/security/notices/USN-5051-2',
-                'https://ubuntu.com/security/notices/USN-5051-3',
-                'https://ubuntu.com/security/notices/USN-5051-4 (regression only in trusty/esm)',
-                'https://ubuntu.com/security/notices/USN-5088-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-3712',
-                'https://www.debian.org/security/2021/dsa-4963',
-                'https://www.openssl.org/news/secadv/20210824.txt',
-                'https://www.oracle.com/security-alerts/cpuapr2022.html',
-                'https://www.oracle.com/security-alerts/cpujan2022.html',
-                'https://www.oracle.com/security-alerts/cpuoct2021.html',
-                'https://www.tenable.com/security/tns-2021-16',
-                'https://www.tenable.com/security/tns-2022-02'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: Read buffer overruns processing ASN.1 strings'
-            },
-            {
-              'cve':  'CVE-2022-0778',
-              'cvss': {
-                'bitnami': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'ghsa': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'nvd': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-835'
-              ],
-              'description':   'The BN_mod_sqrt() function, which computes a modular square root, contains a bug that can cause it to loop forever for non-prime moduli. Internally this function is used when parsing certificates that contain elliptic curve public keys in compressed form or explicit elliptic curve parameters with a base point encoded in compressed form. It is possible to trigger the infinite loop by crafting a certificate that has invalid explicit curve parameters. Since certificate parsing happens prior to verification of the certificate signature, any process that parses an externally supplied certificate may thus be subject to a denial of service attack. The infinite loop can also be reached when parsing crafted private keys as they can contain explicit elliptic curve parameters. Thus vulnerable situations include: - TLS clients consuming server certificates - TLS servers consuming client certificates - Hosting providers taking certificates or private keys from customers - Certificate authorities parsing certification requests from subscribers - Anything else which parses ASN.1 elliptic curve parameters Also any other applications that use the BN_mod_sqrt() where the attacker can control the parameter values are vulnerable to this DoS issue. In the OpenSSL 1.0.2 version the public key is not parsed during initial parsing of the certificate which makes it slightly harder to trigger the infinite loop. However any operation which requires the public key from the certificate will trigger the infinite loop. In particular the attacker can use a self-signed certificate to trigger the loop during verification of the certificate signature. This issue affects OpenSSL versions 1.0.2, 1.1.1 and 3.0. It was addressed in the releases of 1.1.1n and 3.0.2 on the 15th March 2022. Fixed in OpenSSL 3.0.2 (Affected 3.0.0,3.0.1). Fixed in OpenSSL 1.1.1n (Affected 1.1.1-1.1.1m). Fixed in OpenSSL 1.0.2zd (Affected 1.0.2-1.0.2zc).',
-              'diffID':        'sha256:a6adc24a4511cef83198c81256dd39d198ce8068e62415ea77d5d96442df74a8',
-              'fixedVersions': [
-                '1.1.1n-r0'
-              ],
-              'installedVersion': '1.1.1i-r0',
-              'packageName':      'libssl1.1',
-              'purl':             'pkg:apk/alpine/libssl1.1@1.1.1i-r0?arch=armhf&distro=3.12.3',
-              'references':       [
-                'http://packetstormsecurity.com/files/167344/OpenSSL-1.0.2-1.1.1-3.0-BN_mod_sqrt-Infinite-Loop.html',
-                'http://seclists.org/fulldisclosure/2022/May/33',
-                'http://seclists.org/fulldisclosure/2022/May/35',
-                'http://seclists.org/fulldisclosure/2022/May/38',
-                'https://access.redhat.com/errata/RHSA-2022:5326',
-                'https://access.redhat.com/security/cve/CVE-2022-0778',
-                'https://bugzilla.redhat.com/2062202',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2062202',
-                'https://cert-portal.siemens.com/productcert/pdf/ssa-712929.pdf',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-0778',
-                'https://errata.almalinux.org/8/ALSA-2022-5326.html',
-                'https://errata.rockylinux.org/RLSA-2022:4899',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=3118eb64934499d93db3230748a452351d1d9a65',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=380085481c64de749a6dd25cdf0bcf4360b30f83',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=a466912611aa6cbdf550cd10601390e587451246',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=3118eb64934499d93db3230748a452351d1d9a65',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=380085481c64de749a6dd25cdf0bcf4360b30f83',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=a466912611aa6cbdf550cd10601390e587451246',
-                'https://linux.oracle.com/cve/CVE-2022-0778.html',
-                'https://linux.oracle.com/errata/ELSA-2022-9272.html',
-                'https://lists.debian.org/debian-lts-announce/2022/03/msg00023.html',
-                'https://lists.debian.org/debian-lts-announce/2022/03/msg00024.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/323SNN6ZX7PRJJWP2BUAFLPUAE42XWLZ',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/323SNN6ZX7PRJJWP2BUAFLPUAE42XWLZ/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GDB3GQVJPXJE7X5C5JN6JAA4XUDWD6E6',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GDB3GQVJPXJE7X5C5JN6JAA4XUDWD6E6/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/W6K3PR542DXWLEFFMFIDMME4CWMHJRMG',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/W6K3PR542DXWLEFFMFIDMME4CWMHJRMG/',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/323SNN6ZX7PRJJWP2BUAFLPUAE42XWLZ',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/GDB3GQVJPXJE7X5C5JN6JAA4XUDWD6E6',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/W6K3PR542DXWLEFFMFIDMME4CWMHJRMG',
-                'https://nvd.nist.gov/vuln/detail/CVE-2022-0778',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2022-0002',
-                'https://rustsec.org/advisories/RUSTSEC-2022-0014.html',
-                'https://security.gentoo.org/glsa/202210-02',
-                'https://security.netapp.com/advisory/ntap-20220321-0002',
-                'https://security.netapp.com/advisory/ntap-20220321-0002/',
-                'https://security.netapp.com/advisory/ntap-20220429-0005',
-                'https://security.netapp.com/advisory/ntap-20220429-0005/',
-                'https://security.netapp.com/advisory/ntap-20240621-0006',
-                'https://security.netapp.com/advisory/ntap-20240621-0006/',
-                'https://support.apple.com/kb/HT213255',
-                'https://support.apple.com/kb/HT213256',
-                'https://support.apple.com/kb/HT213257',
-                'https://ubuntu.com/security/notices/USN-5328-1',
-                'https://ubuntu.com/security/notices/USN-5328-2',
-                'https://ubuntu.com/security/notices/USN-6457-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2022-0778',
-                'https://www.debian.org/security/2022/dsa-5103',
-                'https://www.openssl.org/news/secadv/20220315.txt',
-                'https://www.oracle.com/security-alerts/cpuapr2022.html',
-                'https://www.oracle.com/security-alerts/cpujul2022.html',
-                'https://www.tenable.com/security/tns-2022-06',
-                'https://www.tenable.com/security/tns-2022-07',
-                'https://www.tenable.com/security/tns-2022-08',
-                'https://www.tenable.com/security/tns-2022-09'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: Infinite loop in BN_mod_sqrt() reachable when parsing certificates'
-            },
-            {
-              'cve':  'CVE-2021-23841',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'nvd': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-476'
-              ],
-              'description':   'The OpenSSL public API function X509_issuer_and_serial_hash() attempts to create a unique hash value based on the issuer and serial number data contained within an X509 certificate. However it fails to correctly handle any errors that may occur while parsing the issuer field (which might occur if the issuer field is maliciously constructed). This may subsequently result in a NULL pointer deref and a crash leading to a potential denial of service attack. The function X509_issuer_and_serial_hash() is never directly called by OpenSSL itself so applications are only vulnerable if they use this function directly and they use it on certificates that may have been obtained from untrusted sources. OpenSSL versions 1.1.1i and below are affected by this issue. Users of these versions should upgrade to OpenSSL 1.1.1j. OpenSSL versions 1.0.2x and below are affected by this issue. However OpenSSL 1.0.2 is out of support and no longer receiving public updates. Premium support customers of OpenSSL 1.0.2 should upgrade to 1.0.2y. Other users should upgrade to 1.1.1j. Fixed in OpenSSL 1.1.1j (Affected 1.1.1-1.1.1i). Fixed in OpenSSL 1.0.2y (Affected 1.0.2-1.0.2x).',
-              'diffID':        'sha256:a6adc24a4511cef83198c81256dd39d198ce8068e62415ea77d5d96442df74a8',
-              'fixedVersions': [
-                '1.1.1j-r0'
-              ],
-              'installedVersion': '1.1.1i-r0',
-              'packageName':      'libssl1.1',
-              'purl':             'pkg:apk/alpine/libssl1.1@1.1.1i-r0?arch=armhf&distro=3.12.3',
-              'references':       [
-                'http://seclists.org/fulldisclosure/2021/May/67',
-                'http://seclists.org/fulldisclosure/2021/May/68',
-                'http://seclists.org/fulldisclosure/2021/May/70',
-                'https://access.redhat.com/security/cve/CVE-2021-23841',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=1908036',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=1930310',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=1930324',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=1934534',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=1934600',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=1939637',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=1940085',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=1965362',
-                'https://cert-portal.siemens.com/productcert/pdf/ssa-637483.pdf',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-23840',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-23841',
-                'https://errata.rockylinux.org/RLSA-2021:4424',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=122a19ab48091c657f7cb1fb3af9fc07bd557bbf',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=8252ee4d90f3f2004d3d0aeeed003ad49c9a7807',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=122a19ab48091c657f7cb1fb3af9fc07bd557bbf',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=6a51b9e1d0cf0bf8515f7201b68fb0a3482b3dc1',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=8252ee4d90f3f2004d3d0aeeed003ad49c9a7807',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=9b1129239f3ebb1d1c98ce9ed41d5c9476c47cb2',
-                'https://github.com/alexcrichton/openssl-src-rs',
-                'https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA44846',
-                'https://linux.oracle.com/cve/CVE-2021-23841.html',
-                'https://linux.oracle.com/errata/ELSA-2021-9561.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-23841',
-                'https://rustsec.org/advisories/RUSTSEC-2021-0058',
-                'https://rustsec.org/advisories/RUSTSEC-2021-0058.html',
-                'https://security.gentoo.org/glsa/202103-03',
-                'https://security.netapp.com/advisory/ntap-20210219-0009',
-                'https://security.netapp.com/advisory/ntap-20210219-0009/',
-                'https://security.netapp.com/advisory/ntap-20210513-0002',
-                'https://security.netapp.com/advisory/ntap-20210513-0002/',
-                'https://security.netapp.com/advisory/ntap-20240621-0006/',
-                'https://support.apple.com/kb/HT212528',
-                'https://support.apple.com/kb/HT212529',
-                'https://support.apple.com/kb/HT212534',
-                'https://ubuntu.com/security/notices/USN-4738-1',
-                'https://ubuntu.com/security/notices/USN-4745-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-23841',
-                'https://www.debian.org/security/2021/dsa-4855',
-                'https://www.openssl.org/news/secadv/20210216.txt',
-                'https://www.oracle.com//security-alerts/cpujul2021.html',
-                'https://www.oracle.com/security-alerts/cpuApr2021.html',
-                'https://www.oracle.com/security-alerts/cpuapr2022.html',
-                'https://www.oracle.com/security-alerts/cpuoct2021.html',
-                'https://www.tenable.com/security/tns-2021-03',
-                'https://www.tenable.com/security/tns-2021-09'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: NULL pointer dereference in X509_issuer_and_serial_hash()'
-            },
-            {
-              'cve':  'CVE-2021-3449',
-              'cvss': {
-                'bitnami': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'ghsa': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'nvd': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-476'
-              ],
-              'description':   'An OpenSSL TLS server may crash if sent a maliciously crafted renegotiation ClientHello message from a client. If a TLSv1.2 renegotiation ClientHello omits the signature_algorithms extension (where it was present in the initial ClientHello), but includes a signature_algorithms_cert extension then a NULL pointer dereference will result, leading to a crash and a denial of service attack. A server is only vulnerable if it has TLSv1.2 and renegotiation enabled (which is the default configuration). OpenSSL TLS clients are not impacted by this issue. All OpenSSL 1.1.1 versions are affected by this issue. Users of these versions should upgrade to OpenSSL 1.1.1k. OpenSSL 1.0.2 is not impacted by this issue. Fixed in OpenSSL 1.1.1k (Affected 1.1.1-1.1.1j).',
-              'diffID':        'sha256:a6adc24a4511cef83198c81256dd39d198ce8068e62415ea77d5d96442df74a8',
-              'fixedVersions': [
-                '1.1.1k-r0'
-              ],
-              'installedVersion': '1.1.1i-r0',
-              'packageName':      'libssl1.1',
-              'purl':             'pkg:apk/alpine/libssl1.1@1.1.1i-r0?arch=armhf&distro=3.12.3',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2021/03/27/1',
-                'http://www.openwall.com/lists/oss-security/2021/03/27/2',
-                'http://www.openwall.com/lists/oss-security/2021/03/28/3',
-                'http://www.openwall.com/lists/oss-security/2021/03/28/4',
-                'https://access.redhat.com/security/cve/CVE-2021-3449',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=1941547',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=1941554',
-                'https://cert-portal.siemens.com/productcert/pdf/ssa-389290.pdf',
-                'https://cert-portal.siemens.com/productcert/pdf/ssa-772220.pdf',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-3449',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-3450',
-                'https://errata.rockylinux.org/RLSA-2021:1024',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=fb9fa6b51defd48157eeb207f52181f735d96148',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=fb9fa6b51defd48157eeb207f52181f735d96148',
-                'https://github.com/alexcrichton/openssl-src-rs',
-                'https://github.com/nodejs/node/pull/38083',
-                'https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA44845',
-                'https://kc.mcafee.com/corporate/index?page=content&id=SB10356',
-                'https://linux.oracle.com/cve/CVE-2021-3449.html',
-                'https://linux.oracle.com/errata/ELSA-2021-9151.html',
-                'https://lists.debian.org/debian-lts-announce/2021/08/msg00029.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CCBFLLVQVILIVGZMBJL3IXZGKWQISYNP/',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/CCBFLLVQVILIVGZMBJL3IXZGKWQISYNP',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-3449',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2021-0013',
-                'https://rustsec.org/advisories/RUSTSEC-2021-0055',
-                'https://rustsec.org/advisories/RUSTSEC-2021-0055.html',
-                'https://security.FreeBSD.org/advisories/FreeBSD-SA-21:07.openssl.asc',
-                'https://security.gentoo.org/glsa/202103-03',
-                'https://security.netapp.com/advisory/ntap-20210326-0006',
-                'https://security.netapp.com/advisory/ntap-20210326-0006/',
-                'https://security.netapp.com/advisory/ntap-20210513-0002',
-                'https://security.netapp.com/advisory/ntap-20210513-0002/',
-                'https://security.netapp.com/advisory/ntap-20240621-0006/',
-                'https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-openssl-2021-GHY28dJd',
-                'https://ubuntu.com/security/notices/USN-4891-1',
-                'https://ubuntu.com/security/notices/USN-5038-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-3449',
-                'https://www.debian.org/security/2021/dsa-4875',
-                'https://www.openssl.org/news/secadv/20210325.txt',
-                'https://www.oracle.com//security-alerts/cpujul2021.html',
-                'https://www.oracle.com/security-alerts/cpuApr2021.html',
-                'https://www.oracle.com/security-alerts/cpuapr2022.html',
-                'https://www.oracle.com/security-alerts/cpujul2022.html',
-                'https://www.oracle.com/security-alerts/cpuoct2021.html',
-                'https://www.tenable.com/security/tns-2021-05',
-                'https://www.tenable.com/security/tns-2021-06',
-                'https://www.tenable.com/security/tns-2021-09',
-                'https://www.tenable.com/security/tns-2021-10'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: NULL pointer dereference in signature_algorithms processing'
-            },
-            {
-              'cve':  'CVE-2021-23839',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '3.7',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N'
-                },
-                'redhat': {
-                  'v3score':  '3.7',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-327'
-              ],
-              'description':   'OpenSSL 1.0.2 supports SSLv2. If a client attempts to negotiate SSLv2 with a server that is configured to support both SSLv2 and more recent SSL and TLS versions then a check is made for a version rollback attack when unpadding an RSA signature. Clients that support SSL or TLS versions greater than SSLv2 are supposed to use a special form of padding. A server that supports greater than SSLv2 is supposed to reject connection attempts from a client where this special form of padding is present, because this indicates that a version rollback has occurred (i.e. both client and server support greater than SSLv2, and yet this is the version that is being requested). The implementation of this padding check inverted the logic so that the connection attempt is accepted if the padding is present, and rejected if it is absent. This means that such as server will accept a connection if a version rollback attack has occurred. Further the server will erroneously reject a connection if a normal SSLv2 connection attempt is made. Only OpenSSL 1.0.2 servers from version 1.0.2s to 1.0.2x are affected by this issue. In order to be vulnerable a 1.0.2 server must: 1) have configured SSLv2 support at compile time (this is off by default), 2) have configured SSLv2 support at runtime (this is off by default), 3) have configured SSLv2 ciphersuites (these are not in the default ciphersuite list) OpenSSL 1.1.1 does not have SSLv2 support and therefore is not vulnerable to this issue. The underlying error is in the implementation of the RSA_padding_check_SSLv23() function. This also affects the RSA_SSLV23_PADDING padding mode used by various other functions. Although 1.1.1 does not support SSLv2 the RSA_padding_check_SSLv23() function still exists, as does the RSA_SSLV23_PADDING padding mode. Applications that directly call that function or use that padding mode will encounter this issue. However since there is no support for the SSLv2 protocol in 1.1.1 this is considered a bug and not a security issue in that version. OpenSSL 1.0.2 is out of support and no longer receiving public updates. Premium support customers of OpenSSL 1.0.2 should upgrade to 1.0.2y. Other users should upgrade to 1.1.1j. Fixed in OpenSSL 1.0.2y (Affected 1.0.2s-1.0.2x).',
-              'diffID':        'sha256:a6adc24a4511cef83198c81256dd39d198ce8068e62415ea77d5d96442df74a8',
-              'fixedVersions': [
-                '1.1.1j-r0'
-              ],
-              'installedVersion': '1.1.1i-r0',
-              'packageName':      'libssl1.1',
-              'purl':             'pkg:apk/alpine/libssl1.1@1.1.1i-r0?arch=armhf&distro=3.12.3',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-23839',
-                'https://cert-portal.siemens.com/productcert/pdf/ssa-637483.pdf',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=30919ab80a478f2d81f2e9acdcca3fa4740cd547',
-                'https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA44846',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-23839',
-                'https://security.netapp.com/advisory/ntap-20210219-0009/',
-                'https://security.netapp.com/advisory/ntap-20240621-0006/',
-                'https://www.cve.org/CVERecord?id=CVE-2021-23839',
-                'https://www.openssl.org/news/secadv/20210216.txt',
-                'https://www.oracle.com//security-alerts/cpujul2021.html',
-                'https://www.oracle.com/security-alerts/cpuApr2021.html',
-                'https://www.oracle.com/security-alerts/cpuapr2022.html',
-                'https://www.oracle.com/security-alerts/cpuoct2021.html'
-              ],
-              'severity':   'LOW',
-              'suppressed': false,
-              'title':      'openssl: incorrect SSLv2 rollback protection'
-            },
-            {
-              'cve':  'CVE-2021-28831',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-755'
-              ],
-              'description':   'decompress_gunzip.c in BusyBox through 1.32.1 mishandles the error bit on the huft_build result pointer, with a resultant invalid free or segmentation fault, via malformed gzip data.',
-              'diffID':        'sha256:a6adc24a4511cef83198c81256dd39d198ce8068e62415ea77d5d96442df74a8',
-              'fixedVersions': [
-                '1.31.1-r20'
-              ],
-              'installedVersion': '1.31.1-r19',
-              'packageName':      'ssl_client',
-              'purl':             'pkg:apk/alpine/ssl_client@1.31.1-r19?arch=armhf&distro=3.12.3',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-28831',
-                'https://git.busybox.net/busybox/commit/?id=f25d254dfd4243698c31a4f3153d4ac72aa9e9bd',
-                'https://lists.debian.org/debian-lts-announce/2021/04/msg00001.html',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/3UDQGJRECXFS5EZVDH2OI45FMO436AC4/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/Z7ZIFKPRR32ZYA3WAA2NXFA3QHHOU6FJ/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZASBW7QRRLY5V2R44MQ4QQM4CZIDHM2U/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-28831',
-                'https://security.gentoo.org/glsa/202105-09',
-                'https://security.netapp.com/advisory/ntap-20250509-0005/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://ubuntu.com/security/notices/USN-5179-2',
-                'https://ubuntu.com/security/notices/USN-6335-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-28831'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: invalid free or segmentation fault via malformed gzip data'
-            },
-            {
-              'cve':  'CVE-2021-42378',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the getvar_i function",
-              'diffID':        'sha256:a6adc24a4511cef83198c81256dd39d198ce8068e62415ea77d5d96442df74a8',
-              'fixedVersions': [
-                '1.31.1-r21'
-              ],
-              'installedVersion': '1.31.1-r19',
-              'packageName':      'ssl_client',
-              'purl':             'pkg:apk/alpine/ssl_client@1.31.1-r19?arch=armhf&distro=3.12.3',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42378',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42378',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42378'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the getvar_i()'
-            },
-            {
-              'cve':  'CVE-2021-42379',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the next_input_file function",
-              'diffID':        'sha256:a6adc24a4511cef83198c81256dd39d198ce8068e62415ea77d5d96442df74a8',
-              'fixedVersions': [
-                '1.31.1-r21'
-              ],
-              'installedVersion': '1.31.1-r19',
-              'packageName':      'ssl_client',
-              'purl':             'pkg:apk/alpine/ssl_client@1.31.1-r19?arch=armhf&distro=3.12.3',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42379',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42379',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42379'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the next_input_file()'
-            },
-            {
-              'cve':  'CVE-2021-42380',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the clrvar function",
-              'diffID':        'sha256:a6adc24a4511cef83198c81256dd39d198ce8068e62415ea77d5d96442df74a8',
-              'fixedVersions': [
-                '1.31.1-r21'
-              ],
-              'installedVersion': '1.31.1-r19',
-              'packageName':      'ssl_client',
-              'purl':             'pkg:apk/alpine/ssl_client@1.31.1-r19?arch=armhf&distro=3.12.3',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42380',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42380',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42380'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the clrvar()'
-            },
-            {
-              'cve':  'CVE-2021-42381',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the hash_init function",
-              'diffID':        'sha256:a6adc24a4511cef83198c81256dd39d198ce8068e62415ea77d5d96442df74a8',
-              'fixedVersions': [
-                '1.31.1-r21'
-              ],
-              'installedVersion': '1.31.1-r19',
-              'packageName':      'ssl_client',
-              'purl':             'pkg:apk/alpine/ssl_client@1.31.1-r19?arch=armhf&distro=3.12.3',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42381',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42381',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42381'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the hash_init()'
-            },
-            {
-              'cve':  'CVE-2021-42382',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the getvar_s function",
-              'diffID':        'sha256:a6adc24a4511cef83198c81256dd39d198ce8068e62415ea77d5d96442df74a8',
-              'fixedVersions': [
-                '1.31.1-r21'
-              ],
-              'installedVersion': '1.31.1-r19',
-              'packageName':      'ssl_client',
-              'purl':             'pkg:apk/alpine/ssl_client@1.31.1-r19?arch=armhf&distro=3.12.3',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42382',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42382',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42382'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the getvar_s()'
-            },
-            {
-              'cve':  'CVE-2021-42383',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the evaluate function",
-              'diffID':        'sha256:a6adc24a4511cef83198c81256dd39d198ce8068e62415ea77d5d96442df74a8',
-              'fixedVersions': [
-                '1.31.1-r21'
-              ],
-              'installedVersion': '1.31.1-r19',
-              'packageName':      'ssl_client',
-              'purl':             'pkg:apk/alpine/ssl_client@1.31.1-r19?arch=armhf&distro=3.12.3',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42383',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42383',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42383'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the evaluate()'
-            },
-            {
-              'cve':  'CVE-2021-42384',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the handle_special function",
-              'diffID':        'sha256:a6adc24a4511cef83198c81256dd39d198ce8068e62415ea77d5d96442df74a8',
-              'fixedVersions': [
-                '1.31.1-r21'
-              ],
-              'installedVersion': '1.31.1-r19',
-              'packageName':      'ssl_client',
-              'purl':             'pkg:apk/alpine/ssl_client@1.31.1-r19?arch=armhf&distro=3.12.3',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42384',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42384',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42384'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the handle_special()'
-            },
-            {
-              'cve':  'CVE-2021-42385',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the evaluate function",
-              'diffID':        'sha256:a6adc24a4511cef83198c81256dd39d198ce8068e62415ea77d5d96442df74a8',
-              'fixedVersions': [
-                '1.31.1-r21'
-              ],
-              'installedVersion': '1.31.1-r19',
-              'packageName':      'ssl_client',
-              'purl':             'pkg:apk/alpine/ssl_client@1.31.1-r19?arch=armhf&distro=3.12.3',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42385',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42385',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42385'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the evaluate()'
-            },
-            {
-              'cve':  'CVE-2021-42386',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the nvalloc function",
-              'diffID':        'sha256:a6adc24a4511cef83198c81256dd39d198ce8068e62415ea77d5d96442df74a8',
-              'fixedVersions': [
-                '1.31.1-r21'
-              ],
-              'installedVersion': '1.31.1-r19',
-              'packageName':      'ssl_client',
-              'purl':             'pkg:apk/alpine/ssl_client@1.31.1-r19?arch=armhf&distro=3.12.3',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42386',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42386',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42386'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the nvalloc()'
-            },
-            {
-              'cve':  'CVE-2022-28391',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '8.8',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-88'
-              ],
-              'description':   "BusyBox through 1.35.0 allows remote attackers to execute arbitrary code if netstat is used to print a DNS PTR record's value to a VT compatible terminal. Alternatively, the attacker could choose to change the terminal's colors.",
-              'diffID':        'sha256:a6adc24a4511cef83198c81256dd39d198ce8068e62415ea77d5d96442df74a8',
-              'fixedVersions': [
-                '1.31.1-r22'
-              ],
-              'installedVersion': '1.31.1-r19',
-              'packageName':      'ssl_client',
-              'purl':             'pkg:apk/alpine/ssl_client@1.31.1-r19?arch=armhf&distro=3.12.3',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2022-28391',
-                'https://git.alpinelinux.org/aports/plain/main/busybox/0001-libbb-sockaddr2str-ensure-only-printable-characters-.patch',
-                'https://git.alpinelinux.org/aports/plain/main/busybox/0002-nslookup-sanitize-all-printed-strings-with-printable.patch',
-                'https://gitlab.alpinelinux.org/alpine/aports/-/issues/13661',
-                'https://nvd.nist.gov/vuln/detail/CVE-2022-28391',
-                'https://www.cve.org/CVERecord?id=CVE-2022-28391'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: remote attackers may execute arbitrary code if netstat is used'
-            },
-            {
-              'cve':  'CVE-2021-42374',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '5.7',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-125'
-              ],
-              'description':   "An out-of-bounds heap read in Busybox's unlzma applet leads to information leak and denial of service when crafted LZMA-compressed input is decompressed. This can be triggered by any applet/format that",
-              'diffID':        'sha256:a6adc24a4511cef83198c81256dd39d198ce8068e62415ea77d5d96442df74a8',
-              'fixedVersions': [
-                '1.31.1-r21'
-              ],
-              'installedVersion': '1.31.1-r19',
-              'packageName':      'ssl_client',
-              'purl':             'pkg:apk/alpine/ssl_client@1.31.1-r19?arch=armhf&distro=3.12.3',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42374',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42374',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42374'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'busybox: out-of-bounds read in unlzma applet leads to information leak and denial of service when crafted LZMA-compressed input is decompressed'
-            },
-            {
-              'cve':  'CVE-2022-37434',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '9.8',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-787',
-                'CWE-120'
-              ],
-              'description':   'zlib through 1.2.12 has a heap-based buffer over-read or buffer overflow in inflate in inflate.c via a large gzip header extra field. NOTE: only applications that call inflateGetHeader are affected. Some common applications bundle the affected zlib source code but may be unable to call inflateGetHeader (e.g., see the nodejs/node reference).',
-              'diffID':        'sha256:a6adc24a4511cef83198c81256dd39d198ce8068e62415ea77d5d96442df74a8',
-              'fixedVersions': [
-                '1.2.12-r2'
-              ],
-              'installedVersion': '1.2.11-r3',
-              'packageName':      'zlib',
-              'purl':             'pkg:apk/alpine/zlib@1.2.11-r3?arch=armhf&distro=3.12.3',
-              'references':       [
-                'http://seclists.org/fulldisclosure/2022/Oct/37',
-                'http://seclists.org/fulldisclosure/2022/Oct/38',
-                'http://seclists.org/fulldisclosure/2022/Oct/41',
-                'http://seclists.org/fulldisclosure/2022/Oct/42',
-                'http://www.openwall.com/lists/oss-security/2022/08/05/2',
-                'http://www.openwall.com/lists/oss-security/2022/08/09/1',
-                'https://access.redhat.com/errata/RHSA-2022:8291',
-                'https://access.redhat.com/security/cve/CVE-2022-37434',
-                'https://bugzilla.redhat.com/2116639',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2053198',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2077431',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2081296',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2116639',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-37434',
-                'https://errata.almalinux.org/9/ALSA-2022-8291.html',
-                'https://errata.rockylinux.org/RLSA-2022:8291',
-                'https://github.com/curl/curl/issues/9271',
-                'https://github.com/ivd38/zlib_overflow',
-                'https://github.com/madler/zlib/blob/21767c654d31d2dccdde4330529775c6c5fd5389/zlib.h#L1062-L1063',
-                'https://github.com/madler/zlib/commit/1eb7682f845ac9e9bf9ae35bbfb3bad5dacbd91d',
-                'https://github.com/madler/zlib/commit/eff308af425b67093bab25f80f1ae950166bece1',
-                'https://github.com/nodejs/node/blob/75b68c6e4db515f76df73af476eccf382bbcb00a/deps/zlib/inflate.c#L762-L764',
-                'https://linux.oracle.com/cve/CVE-2022-37434.html',
-                'https://linux.oracle.com/errata/ELSA-2023-1095.html',
-                'https://lists.debian.org/debian-lts-announce/2022/09/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JWN4VE3JQR4O2SOUS5TXNLANRPMHWV4I/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NMBOJ77A7T7PQCARMDUK75TE6LLESZ3O/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PAVPQNCG3XRLCLNSQRM3KAN5ZFMVXVTY/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/X5U7OTKZSHY2I3ZFJSR2SHFHW72RKGDK/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YRQAI7H4M4RQZ2IWZUEEXECBE5D56BH2/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2022-37434',
-                'https://security.netapp.com/advisory/ntap-20220901-0005/',
-                'https://security.netapp.com/advisory/ntap-20230427-0007/',
-                'https://support.apple.com/kb/HT213488',
-                'https://support.apple.com/kb/HT213489',
-                'https://support.apple.com/kb/HT213490',
-                'https://support.apple.com/kb/HT213491',
-                'https://support.apple.com/kb/HT213493',
-                'https://support.apple.com/kb/HT213494',
-                'https://ubuntu.com/security/notices/USN-5570-1',
-                'https://ubuntu.com/security/notices/USN-5570-2',
-                'https://ubuntu.com/security/notices/USN-5573-1',
-                'https://ubuntu.com/security/notices/USN-6736-1',
-                'https://ubuntu.com/security/notices/USN-6736-2',
-                'https://www.cve.org/CVERecord?id=CVE-2022-37434',
-                'https://www.debian.org/security/2022/dsa-5218'
-              ],
-              'severity':   'CRITICAL',
-              'suppressed': false,
-              'title':      'zlib: heap-based buffer over-read and overflow in inflate() in inflate.c via a large gzip header extra field'
-            },
-            {
-              'cve':  'CVE-2018-25032',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'nvd': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '8.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-787'
-              ],
-              'description':   'zlib before 1.2.12 allows memory corruption when deflating (i.e., when compressing) if the input has many distant matches.',
-              'diffID':        'sha256:a6adc24a4511cef83198c81256dd39d198ce8068e62415ea77d5d96442df74a8',
-              'fixedVersions': [
-                '1.2.12-r0'
-              ],
-              'installedVersion': '1.2.11-r3',
-              'packageName':      'zlib',
-              'purl':             'pkg:apk/alpine/zlib@1.2.11-r3?arch=armhf&distro=3.12.3',
-              'references':       [
-                'http://seclists.org/fulldisclosure/2022/May/33',
-                'http://seclists.org/fulldisclosure/2022/May/35',
-                'http://seclists.org/fulldisclosure/2022/May/38',
-                'http://www.openwall.com/lists/oss-security/2022/03/25/2',
-                'http://www.openwall.com/lists/oss-security/2022/03/26/1',
-                'https://access.redhat.com/errata/RHSA-2022:8420',
-                'https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-25032.json',
-                'https://access.redhat.com/security/cve/CVE-2018-25032',
-                'https://bugzilla.redhat.com/2067945',
-                'https://cert-portal.siemens.com/productcert/pdf/ssa-333517.pdf',
-                'https://errata.almalinux.org/9/ALSA-2022-8420.html',
-                'https://github.com/advisories/GHSA-jc36-42cf-vqwj',
-                'https://github.com/madler/zlib/commit/5c44459c3b28a9bd3283aaceab7c615f8020c531',
-                'https://github.com/madler/zlib/compare/v1.2.11...v1.2.12',
-                'https://github.com/madler/zlib/issues/605',
-                'https://github.com/rubysec/ruby-advisory-db/blob/master/gems/nokogiri/CVE-2018-25032.yml',
-                'https://github.com/sparklemotion/nokogiri/releases/tag/v1.13.4',
-                'https://github.com/sparklemotion/nokogiri/security/advisories/GHSA-v6gp-9mmm-c6p5',
-                'https://groups.google.com/g/ruby-security-ann/c/vX7qSjsvWis/m/TJWN4oOKBwAJ',
-                'https://linux.oracle.com/cve/CVE-2018-25032.html',
-                'https://linux.oracle.com/errata/ELSA-2022-9565.html',
-                'https://lists.debian.org/debian-lts-announce/2022/04/msg00000.html',
-                'https://lists.debian.org/debian-lts-announce/2022/05/msg00008.html',
-                'https://lists.debian.org/debian-lts-announce/2022/09/msg00023.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DCZFIJBJTZ7CL5QXBFKTQ22Q26VINRUF/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DF62MVMH3QUGMBDCB3DY2ERQ6EBHTADB/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JZZPTWRYQULAOL3AW7RZJNVZ2UONXCV4/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NS2D2GFPFGOJUL4WQ3DUAY7HF4VWQ77F/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VOKNP2L734AEL47NRYGVZIKEFOUBQY5Y/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/XOKFMSNQ5D5WGMALBNBXU3GE442V74WU/',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/DCZFIJBJTZ7CL5QXBFKTQ22Q26VINRUF',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/DCZFIJBJTZ7CL5QXBFKTQ22Q26VINRUF/',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/DF62MVMH3QUGMBDCB3DY2ERQ6EBHTADB',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/DF62MVMH3QUGMBDCB3DY2ERQ6EBHTADB/',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/JZZPTWRYQULAOL3AW7RZJNVZ2UONXCV4',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/JZZPTWRYQULAOL3AW7RZJNVZ2UONXCV4/',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/NS2D2GFPFGOJUL4WQ3DUAY7HF4VWQ77F',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/NS2D2GFPFGOJUL4WQ3DUAY7HF4VWQ77F/',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/VOKNP2L734AEL47NRYGVZIKEFOUBQY5Y',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/VOKNP2L734AEL47NRYGVZIKEFOUBQY5Y/',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/XOKFMSNQ5D5WGMALBNBXU3GE442V74WU',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/XOKFMSNQ5D5WGMALBNBXU3GE442V74WU/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2018-25032',
-                'https://security.gentoo.org/glsa/202210-42',
-                'https://security.netapp.com/advisory/ntap-20220526-0009',
-                'https://security.netapp.com/advisory/ntap-20220526-0009/',
-                'https://security.netapp.com/advisory/ntap-20220729-0004',
-                'https://security.netapp.com/advisory/ntap-20220729-0004/',
-                'https://support.apple.com/kb/HT213255',
-                'https://support.apple.com/kb/HT213256',
-                'https://support.apple.com/kb/HT213257',
-                'https://ubuntu.com/security/notices/USN-5355-1',
-                'https://ubuntu.com/security/notices/USN-5355-2',
-                'https://ubuntu.com/security/notices/USN-5359-1',
-                'https://ubuntu.com/security/notices/USN-5359-2',
-                'https://ubuntu.com/security/notices/USN-5739-1',
-                'https://ubuntu.com/security/notices/USN-6736-1',
-                'https://ubuntu.com/security/notices/USN-6736-2',
-                'https://www.cve.org/CVERecord?id=CVE-2018-25032',
-                'https://www.debian.org/security/2022/dsa-5111',
-                'https://www.openwall.com/lists/oss-security/2022/03/24/1',
-                'https://www.openwall.com/lists/oss-security/2022/03/28/1',
-                'https://www.openwall.com/lists/oss-security/2022/03/28/3',
-                'https://www.oracle.com/security-alerts/cpujul2022.html'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'zlib: A flaw found in zlib when compressing (not decompressing) certain inputs'
-            }
-          ]
-        }
-      ],
-      'summary': {
-        'critical':   4,
-        'high':       32,
-        'low':        2,
-        'medium':     6,
-        'suppressed': 0,
-        'unknown':    0
-      }
-    }
-  },
-  {
-    'id':    'default/f2fd1aa53ac2d9735bfff7e31674cd982df6a8e1c55fdb4cf69d7a78f816d999',
-    'type':  'storage.sbomscanner.kubewarden.io.vulnerabilityreport',
-    'links': {
-      'patch':  'https://localhost:8005/v1/storage.sbomscanner.kubewarden.io.vulnerabilityreports/default/f2fd1aa53ac2d9735bfff7e31674cd982df6a8e1c55fdb4cf69d7a78f816d999',
-      'remove': 'https://localhost:8005/v1/storage.sbomscanner.kubewarden.io.vulnerabilityreports/default/f2fd1aa53ac2d9735bfff7e31674cd982df6a8e1c55fdb4cf69d7a78f816d999',
-      'self':   'https://localhost:8005/v1/storage.sbomscanner.kubewarden.io.vulnerabilityreports/default/f2fd1aa53ac2d9735bfff7e31674cd982df6a8e1c55fdb4cf69d7a78f816d999',
-      'update': 'https://localhost:8005/v1/storage.sbomscanner.kubewarden.io.vulnerabilityreports/default/f2fd1aa53ac2d9735bfff7e31674cd982df6a8e1c55fdb4cf69d7a78f816d999',
-      'view':   'https://localhost:8005/apis/storage.sbomscanner.kubewarden.io/v1alpha1/namespaces/default/vulnerabilityreports/f2fd1aa53ac2d9735bfff7e31674cd982df6a8e1c55fdb4cf69d7a78f816d999'
-    },
-    'apiVersion':    'storage.sbomscanner.kubewarden.io/v1alpha1',
-    'imageMetadata': {
-      'digest':      'sha256:7115517df15dce2c7037137f5b8bffdce95be1535e70676a8026f4541884deed',
-      'platform':    'linux/amd64',
-      'registry':    'demo-02',
-      'registryURI': 'ghcr.io',
-      'repository':  'linuxcontainers/alpine',
-      'tag':         '3.15.3'
-    },
-    'kind':     'VulnerabilityReport',
-    'metadata': {
-      'creationTimestamp': '2026-01-09T22:47:07Z',
-      'fields':            [
-        'f2fd1aa53ac2d9735bfff7e31674cd982df6a8e1c55fdb4cf69d7a78f816d999',
-        'ghcr.io/linuxcontainers/alpine:3.15.3',
-        'linux/amd64',
-        '25 (0 suppressed)'
-      ],
-      'labels': {
-        'app.kubernetes.io/managed-by':          'sbomscanner',
-        'app.kubernetes.io/part-of':             'sbomscanner',
-        'sbomscanner.kubewarden.io/scanjob-uid': '42184d01-4b15-466f-98aa-e802d1b6b6b8'
-      },
-      'name':            'f2fd1aa53ac2d9735bfff7e31674cd982df6a8e1c55fdb4cf69d7a78f816d999',
-      'namespace':       'default',
-      'ownerReferences': [
-        {
-          'apiVersion':         'storage.sbomscanner.kubewarden.io/v1alpha1',
-          'blockOwnerDeletion': true,
-          'controller':         true,
-          'kind':               'SBOM',
-          'name':               'f2fd1aa53ac2d9735bfff7e31674cd982df6a8e1c55fdb4cf69d7a78f816d999',
-          'uid':                '1ef84fd4-1a26-459a-aecd-bb19f67d7cf2'
-        }
-      ],
-      'relationships': [
-        {
-          'fromId':   'default/f2fd1aa53ac2d9735bfff7e31674cd982df6a8e1c55fdb4cf69d7a78f816d999',
-          'fromType': 'storage.sbomscanner.kubewarden.io.sbom',
-          'rel':      'owner',
-          'state':    'active',
-          'message':  'Resource is current'
-        }
-      ],
-      'resourceVersion': '4',
-      'state':           {
-        'error':         false,
-        'message':       'Resource is current',
-        'name':          'active',
-        'transitioning': false
-      },
-      'uid': 'c00c8c08-9c8e-46a2-a30a-25f305ca79e3'
-    },
-    'report': {
-      'results': [
-        {
-          'class':           'os-pkgs',
-          'target':          '/var/run/worker/trivy.sbom.2516391255.json (alpine 3.15.3)',
-          'type':            'alpine',
-          'vulnerabilities': [
-            {
-              'cve':  'CVE-2022-28391',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '8.8',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-88'
-              ],
-              'description':   "BusyBox through 1.35.0 allows remote attackers to execute arbitrary code if netstat is used to print a DNS PTR record's value to a VT compatible terminal. Alternatively, the attacker could choose to change the terminal's colors.",
-              'diffID':        'sha256:a1c01e366b99afb656cec4b16561b6ab299fa471011b4414826407af3a5884f8',
-              'fixedVersions': [
-                '1.34.1-r5'
-              ],
-              'installedVersion': '1.34.1-r4',
-              'packageName':      'busybox',
-              'purl':             'pkg:apk/alpine/busybox@1.34.1-r4?arch=x86_64&distro=3.15.3',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2022-28391',
-                'https://git.alpinelinux.org/aports/plain/main/busybox/0001-libbb-sockaddr2str-ensure-only-printable-characters-.patch',
-                'https://git.alpinelinux.org/aports/plain/main/busybox/0002-nslookup-sanitize-all-printed-strings-with-printable.patch',
-                'https://gitlab.alpinelinux.org/alpine/aports/-/issues/13661',
-                'https://nvd.nist.gov/vuln/detail/CVE-2022-28391',
-                'https://www.cve.org/CVERecord?id=CVE-2022-28391'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: remote attackers may execute arbitrary code if netstat is used'
-            },
-            {
-              'cve':  'CVE-2022-4450',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'nvd': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-415'
-              ],
-              'description':   'The function PEM_read_bio_ex() reads a PEM file from a BIO and parses and\ndecodes the "name" (e.g. "CERTIFICATE"), any header data and the payload data.\nIf the function succeeds then the "name_out", "header" and "data" arguments are\npopulated with pointers to buffers containing the relevant decoded data. The\ncaller is responsible for freeing those buffers. It is possible to construct a\nPEM file that results in 0 bytes of payload data. In this case PEM_read_bio_ex()\nwill return a failure code but will populate the header argument with a pointer\nto a buffer that has already been freed. If the caller also frees this buffer\nthen a double free will occur. This will most likely lead to a crash. This\ncould be exploited by an attacker who has the ability to supply malicious PEM\nfiles for parsing to achieve a denial of service attack.\n\nThe functions PEM_read_bio() and PEM_read() are simple wrappers around\nPEM_read_bio_ex() and therefore these functions are also directly affected.\n\nThese functions are also called indirectly by a number of other OpenSSL\nfunctions including PEM_X509_INFO_read_bio_ex() and\nSSL_CTX_use_serverinfo_file() which are also vulnerable. Some OpenSSL internal\nuses of these functions are not vulnerable because the caller does not free the\nheader argument if PEM_read_bio_ex() returns a failure code. These locations\ninclude the PEM_read_bio_TYPE() functions as well as the decoders introduced in\nOpenSSL 3.0.\n\nThe OpenSSL asn1parse command line application is also impacted by this issue.',
-              'diffID':        'sha256:a1c01e366b99afb656cec4b16561b6ab299fa471011b4414826407af3a5884f8',
-              'fixedVersions': [
-                '1.1.1t-r0'
-              ],
-              'installedVersion': '1.1.1n-r0',
-              'packageName':      'libcrypto1.1',
-              'purl':             'pkg:apk/alpine/libcrypto1.1@1.1.1n-r0?arch=x86_64&distro=3.15.3',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2023:2165',
-                'https://access.redhat.com/security/cve/CVE-2022-4450',
-                'https://bugzilla.redhat.com/1960321',
-                'https://bugzilla.redhat.com/2164440',
-                'https://bugzilla.redhat.com/2164487',
-                'https://bugzilla.redhat.com/2164492',
-                'https://bugzilla.redhat.com/2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144000',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144003',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144006',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144008',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144010',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144012',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144015',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144017',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144019',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2145170',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2158412',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164440',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164487',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164488',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164492',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164497',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164499',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164500',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4203',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4304',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4450',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0215',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0216',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0217',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0286',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0401',
-                'https://errata.almalinux.org/9/ALSA-2023-2165.html',
-                'https://errata.rockylinux.org/RLSA-2023:0946',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=63bcf189be73a9cc1264059bed6f57974be74a83',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=bbcf509bd046b34cca19c766bbddc31683d0858b',
-                'https://linux.oracle.com/cve/CVE-2022-4450.html',
-                'https://linux.oracle.com/errata/ELSA-2023-32791.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2022-4450',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0003',
-                'https://rustsec.org/advisories/RUSTSEC-2023-0010.html',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://ubuntu.com/security/notices/USN-5844-1',
-                'https://ubuntu.com/security/notices/USN-6564-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2022-4450',
-                'https://www.openssl.org/news/secadv/20230207.txt'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: double free after calling PEM_read_bio_ex'
-            },
-            {
-              'cve':  'CVE-2023-0215',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'nvd': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   'The public API function BIO_new_NDEF is a helper function used for streaming\nASN.1 data via a BIO. It is primarily used internally to OpenSSL to support the\nSMIME, CMS and PKCS7 streaming capabilities, but may also be called directly by\nend user applications.\n\nThe function receives a BIO from the caller, prepends a new BIO_f_asn1 filter\nBIO onto the front of it to form a BIO chain, and then returns the new head of\nthe BIO chain to the caller. Under certain conditions, for example if a CMS\nrecipient public key is invalid, the new filter BIO is freed and the function\nreturns a NULL result indicating a failure. However, in this case, the BIO chain\nis not properly cleaned up and the BIO passed by the caller still retains\ninternal pointers to the previously freed filter BIO. If the caller then goes on\nto call BIO_pop() on the BIO then a use-after-free will occur. This will most\nlikely result in a crash.\n\n\n\nThis scenario occurs directly in the internal function B64_write_ASN1() which\nmay cause BIO_new_NDEF() to be called and will subsequently call BIO_pop() on\nthe BIO. This internal function is in turn called by the public API functions\nPEM_write_bio_ASN1_stream, PEM_write_bio_CMS_stream, PEM_write_bio_PKCS7_stream,\nSMIME_write_ASN1, SMIME_write_CMS and SMIME_write_PKCS7.\n\nOther public API functions that may be impacted by this include\ni2d_ASN1_bio_stream, BIO_new_CMS, BIO_new_PKCS7, i2d_CMS_bio_stream and\ni2d_PKCS7_bio_stream.\n\nThe OpenSSL cms and smime command line applications are similarly affected.',
-              'diffID':        'sha256:a1c01e366b99afb656cec4b16561b6ab299fa471011b4414826407af3a5884f8',
-              'fixedVersions': [
-                '1.1.1t-r0'
-              ],
-              'installedVersion': '1.1.1n-r0',
-              'packageName':      'libcrypto1.1',
-              'purl':             'pkg:apk/alpine/libcrypto1.1@1.1.1n-r0?arch=x86_64&distro=3.15.3',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2023:2165',
-                'https://access.redhat.com/security/cve/CVE-2023-0215',
-                'https://bugzilla.redhat.com/1960321',
-                'https://bugzilla.redhat.com/2164440',
-                'https://bugzilla.redhat.com/2164487',
-                'https://bugzilla.redhat.com/2164492',
-                'https://bugzilla.redhat.com/2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144000',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144003',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144006',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144008',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144010',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144012',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144015',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144017',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144019',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2145170',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2158412',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164440',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164487',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164488',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164492',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164497',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164499',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164500',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4203',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4304',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4450',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0215',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0216',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0217',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0286',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0401',
-                'https://errata.almalinux.org/9/ALSA-2023-2165.html',
-                'https://errata.rockylinux.org/RLSA-2023:0946',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=8818064ce3c3c0f1b740a5aaba2a987e75bfbafd',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=9816136fe31d92ace4037d5da5257f763aeeb4eb',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=c3829dd8825c654652201e16f8a0a0c46ee3f344',
-                'https://linux.oracle.com/cve/CVE-2023-0215.html',
-                'https://linux.oracle.com/errata/ELSA-2023-32791.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-0215',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0003',
-                'https://rustsec.org/advisories/RUSTSEC-2023-0009.html',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://security.netapp.com/advisory/ntap-20230427-0007',
-                'https://security.netapp.com/advisory/ntap-20230427-0007/',
-                'https://security.netapp.com/advisory/ntap-20230427-0009',
-                'https://security.netapp.com/advisory/ntap-20230427-0009/',
-                'https://security.netapp.com/advisory/ntap-20240621-0006',
-                'https://security.netapp.com/advisory/ntap-20240621-0006/',
-                'https://ubuntu.com/security/notices/USN-5844-1',
-                'https://ubuntu.com/security/notices/USN-5845-1',
-                'https://ubuntu.com/security/notices/USN-5845-2',
-                'https://ubuntu.com/security/notices/USN-6564-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-0215',
-                'https://www.openssl.org/news/secadv/20230207.txt'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: use-after-free following BIO_new_NDEF'
-            },
-            {
-              'cve':  'CVE-2023-0286',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '7.4',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H'
-                },
-                'nvd': {
-                  'v3score':  '7.4',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.4',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-843'
-              ],
-              'description':   'There is a type confusion vulnerability relating to X.400 address processing\ninside an X.509 GeneralName. X.400 addresses were parsed as an ASN1_STRING but\nthe public structure definition for GENERAL_NAME incorrectly specified the type\nof the x400Address field as ASN1_TYPE. This field is subsequently interpreted by\nthe OpenSSL function GENERAL_NAME_cmp as an ASN1_TYPE rather than an\nASN1_STRING.\n\nWhen CRL checking is enabled (i.e. the application sets the\nX509_V_FLAG_CRL_CHECK flag), this vulnerability may allow an attacker to pass\narbitrary pointers to a memcmp call, enabling them to read memory contents or\nenact a denial of service. In most cases, the attack requires the attacker to\nprovide both the certificate chain and CRL, neither of which need to have a\nvalid signature. If the attacker only controls one of these inputs, the other\ninput must already contain an X.400 address as a CRL distribution point, which\nis uncommon. As such, this vulnerability is most likely to only affect\napplications which have implemented their own functionality for retrieving CRLs\nover a network.',
-              'diffID':        'sha256:a1c01e366b99afb656cec4b16561b6ab299fa471011b4414826407af3a5884f8',
-              'fixedVersions': [
-                '1.1.1t-r0'
-              ],
-              'installedVersion': '1.1.1n-r0',
-              'packageName':      'libcrypto1.1',
-              'purl':             'pkg:apk/alpine/libcrypto1.1@1.1.1n-r0?arch=x86_64&distro=3.15.3',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2025:7937',
-                'https://access.redhat.com/security/cve/CVE-2023-0286',
-                'https://access.redhat.com/security/cve/cve-2023-0286',
-                'https://bugzilla.redhat.com/2164440',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144000',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144003',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144006',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144008',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144010',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144012',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144015',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144017',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144019',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2145170',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2158412',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164440',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164487',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164488',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164492',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164497',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164499',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164500',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4203',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4304',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4450',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0215',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0216',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0217',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0286',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0401',
-                'https://errata.almalinux.org/9/ALSA-2025-7937.html',
-                'https://errata.rockylinux.org/RLSA-2023:0946',
-                'https://ftp.openbsd.org/pub/OpenBSD/LibreSSL/libressl-3.6.2-relnotes.txt',
-                'https://ftp.openbsd.org/pub/OpenBSD/patches/7.2/common/018_x509.patch.sig',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=2c6c9d439b484e1ba9830d8454a34fa4f80fdfe9',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=2f7530077e0ef79d98718138716bc51ca0cad658',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=fd2af07dc083a350c959147097003a14a5e8ac4d',
-                'https://github.com/pyca/cryptography',
-                'https://github.com/pyca/cryptography/security/advisories/GHSA-x4qr-2fvf-3mr5',
-                'https://linux.oracle.com/cve/CVE-2023-0286.html',
-                'https://linux.oracle.com/errata/ELSA-2025-7937.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-0286',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0003',
-                'https://rustsec.org/advisories/RUSTSEC-2023-0006.html',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://ubuntu.com/security/notices/USN-5844-1',
-                'https://ubuntu.com/security/notices/USN-5845-1',
-                'https://ubuntu.com/security/notices/USN-5845-2',
-                'https://ubuntu.com/security/notices/USN-6564-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-0286',
-                'https://www.openssl.org/news/secadv/20230207.txt'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: X.400 address type confusion in X.509 GeneralName'
-            },
-            {
-              'cve':  'CVE-2023-0464',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-295'
-              ],
-              'description':   "A security vulnerability has been identified in all supported versions\n\nof OpenSSL related to the verification of X.509 certificate chains\nthat include policy constraints.  Attackers may be able to exploit this\nvulnerability by creating a malicious certificate chain that triggers\nexponential use of computational resources, leading to a denial-of-service\n(DoS) attack on affected systems.\n\nPolicy processing is disabled by default but can be enabled by passing\nthe `-policy' argument to the command line utilities or by calling the\n`X509_VERIFY_PARAM_set1_policies()' function.",
-              'diffID':        'sha256:a1c01e366b99afb656cec4b16561b6ab299fa471011b4414826407af3a5884f8',
-              'fixedVersions': [
-                '1.1.1t-r2'
-              ],
-              'installedVersion': '1.1.1n-r0',
-              'packageName':      'libcrypto1.1',
-              'purl':             'pkg:apk/alpine/libcrypto1.1@1.1.1n-r0?arch=x86_64&distro=3.15.3',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2023:3722',
-                'https://access.redhat.com/security/cve/CVE-2023-0464',
-                'https://bugzilla.redhat.com/2181082',
-                'https://bugzilla.redhat.com/2182561',
-                'https://bugzilla.redhat.com/2182565',
-                'https://bugzilla.redhat.com/2188461',
-                'https://bugzilla.redhat.com/2207947',
-                'https://errata.almalinux.org/9/ALSA-2023-3722.html',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=2017771e2db3e2b96f89bbe8766c3209f6a99545',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=2dcd4f1e3115f38cefa43e3efbe9b801c27e642e',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=879f7080d7e141f415c79eaa3a8ac4a3dad0348b',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=959c59c7a0164117e7f8366466a32bb1f8d77ff1',
-                'https://linux.oracle.com/cve/CVE-2023-0464.html',
-                'https://linux.oracle.com/errata/ELSA-2023-3722.html',
-                'https://lists.debian.org/debian-lts-announce/2023/06/msg00011.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-0464',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://security.netapp.com/advisory/ntap-20230406-0006/',
-                'https://security.netapp.com/advisory/ntap-20240621-0006/',
-                'https://ubuntu.com/security/notices/USN-6039-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.couchbase.com/alerts/',
-                'https://www.cve.org/CVERecord?id=CVE-2023-0464',
-                'https://www.debian.org/security/2023/dsa-5417',
-                'https://www.openssl.org/news/secadv/20230322.txt'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: Denial of service by excessive resource usage in verifying X509 policy constraints'
-            },
-            {
-              'cve':  'CVE-2022-2097',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N'
-                },
-                'nvd': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N'
-                },
-                'redhat': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-327'
-              ],
-              'description':   "AES OCB mode for 32-bit x86 platforms using the AES-NI assembly optimised implementation will not encrypt the entirety of the data under some circumstances. This could reveal sixteen bytes of data that was preexisting in the memory that wasn't written. In the special case of \"in place\" encryption, sixteen bytes of the plaintext would be revealed. Since OpenSSL does not support OCB based cipher suites for TLS and DTLS, they are both unaffected. Fixed in OpenSSL 3.0.5 (Affected 3.0.0-3.0.4). Fixed in OpenSSL 1.1.1q (Affected 1.1.1-1.1.1p).",
-              'diffID':        'sha256:a1c01e366b99afb656cec4b16561b6ab299fa471011b4414826407af3a5884f8',
-              'fixedVersions': [
-                '1.1.1q-r0'
-              ],
-              'installedVersion': '1.1.1n-r0',
-              'packageName':      'libcrypto1.1',
-              'purl':             'pkg:apk/alpine/libcrypto1.1@1.1.1n-r0?arch=x86_64&distro=3.15.3',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2022:6224',
-                'https://access.redhat.com/security/cve/CVE-2022-2097',
-                'https://bugzilla.redhat.com/2081494',
-                'https://bugzilla.redhat.com/2087911',
-                'https://bugzilla.redhat.com/2087913',
-                'https://bugzilla.redhat.com/2097310',
-                'https://bugzilla.redhat.com/2104905',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2081494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2097310',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2100554',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2104905',
-                'https://cert-portal.siemens.com/productcert/pdf/ssa-332410.pdf',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-1292',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-2068',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-2097',
-                'https://errata.almalinux.org/9/ALSA-2022-6224.html',
-                'https://errata.rockylinux.org/RLSA-2022:5818',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=919925673d6c9cfed3c1085497f5dfbbed5fc431',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=a98f339ddd7e8f487d6e0088d4a9a42324885a93',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=919925673d6c9cfed3c1085497f5dfbbed5fc431',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=a98f339ddd7e8f487d6e0088d4a9a42324885a93',
-                'https://github.com/alexcrichton/openssl-src-rs',
-                'https://linux.oracle.com/cve/CVE-2022-2097.html',
-                'https://linux.oracle.com/errata/ELSA-2022-9955.html',
-                'https://lists.debian.org/debian-lts-announce/2023/02/msg00019.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/R6CK57NBQFTPUMXAPJURCGXUYT76NQAK',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/R6CK57NBQFTPUMXAPJURCGXUYT76NQAK/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/V6567JERRHHJW2GNGJGKDRNHR7SNPZK7',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/V6567JERRHHJW2GNGJGKDRNHR7SNPZK7/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VCMNWKERPBKOEBNL7CLTTX3ZZCZLH7XA',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VCMNWKERPBKOEBNL7CLTTX3ZZCZLH7XA/',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/R6CK57NBQFTPUMXAPJURCGXUYT76NQAK',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/R6CK57NBQFTPUMXAPJURCGXUYT76NQAK/',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/V6567JERRHHJW2GNGJGKDRNHR7SNPZK7',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/V6567JERRHHJW2GNGJGKDRNHR7SNPZK7/',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/VCMNWKERPBKOEBNL7CLTTX3ZZCZLH7XA',
-                'https://nvd.nist.gov/vuln/detail/CVE-2022-2097',
-                'https://rustsec.org/advisories/RUSTSEC-2022-0032.html',
-                'https://security.gentoo.org/glsa/202210-02',
-                'https://security.netapp.com/advisory/ntap-20220715-0011',
-                'https://security.netapp.com/advisory/ntap-20220715-0011/',
-                'https://security.netapp.com/advisory/ntap-20230420-0008',
-                'https://security.netapp.com/advisory/ntap-20230420-0008/',
-                'https://security.netapp.com/advisory/ntap-20240621-0006',
-                'https://security.netapp.com/advisory/ntap-20240621-0006/',
-                'https://ubuntu.com/security/notices/USN-5502-1',
-                'https://ubuntu.com/security/notices/USN-6457-1',
-                'https://www.cve.org/CVERecord?id=CVE-2022-2097',
-                'https://www.debian.org/security/2023/dsa-5343',
-                'https://www.openssl.org/news/secadv/20220705.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: AES OCB fails to encrypt some bytes'
-            },
-            {
-              'cve':  'CVE-2022-4304',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N'
-                },
-                'nvd': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N'
-                },
-                'redhat': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-203'
-              ],
-              'description':   'A timing based side channel exists in the OpenSSL RSA Decryption implementation\nwhich could be sufficient to recover a plaintext across a network in a\nBleichenbacher style attack. To achieve a successful decryption an attacker\nwould have to be able to send a very large number of trial messages for\ndecryption. The vulnerability affects all RSA padding modes: PKCS#1 v1.5,\nRSA-OEAP and RSASVE.\n\nFor example, in a TLS connection, RSA is commonly used by a client to send an\nencrypted pre-master secret to the server. An attacker that had observed a\ngenuine connection between a client and a server could use this flaw to send\ntrial messages to the server and record the time taken to process them. After a\nsufficiently large number of messages the attacker could recover the pre-master\nsecret used for the original connection and thus be able to decrypt the\napplication data sent over that connection.',
-              'diffID':        'sha256:a1c01e366b99afb656cec4b16561b6ab299fa471011b4414826407af3a5884f8',
-              'fixedVersions': [
-                '1.1.1t-r0'
-              ],
-              'installedVersion': '1.1.1n-r0',
-              'packageName':      'libcrypto1.1',
-              'purl':             'pkg:apk/alpine/libcrypto1.1@1.1.1n-r0?arch=x86_64&distro=3.15.3',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2023:2165',
-                'https://access.redhat.com/security/cve/CVE-2022-4304',
-                'https://bugzilla.redhat.com/1960321',
-                'https://bugzilla.redhat.com/2164440',
-                'https://bugzilla.redhat.com/2164487',
-                'https://bugzilla.redhat.com/2164492',
-                'https://bugzilla.redhat.com/2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144000',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144003',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144006',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144008',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144010',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144012',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144015',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144017',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144019',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2145170',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2158412',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164440',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164487',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164488',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164492',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164497',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164499',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164500',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4203',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4304',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4450',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0215',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0216',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0217',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0286',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0401',
-                'https://errata.almalinux.org/9/ALSA-2023-2165.html',
-                'https://errata.rockylinux.org/RLSA-2023:0946',
-                'https://linux.oracle.com/cve/CVE-2022-4304.html',
-                'https://linux.oracle.com/errata/ELSA-2023-32791.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2022-4304',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0003',
-                'https://rustsec.org/advisories/RUSTSEC-2023-0007.html',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://ubuntu.com/security/notices/USN-5844-1',
-                'https://ubuntu.com/security/notices/USN-6564-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2022-4304',
-                'https://www.openssl.org/news/secadv/20230207.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: timing attack in RSA Decryption implementation'
-            },
-            {
-              'cve':  'CVE-2023-0465',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N'
-                },
-                'redhat': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-295'
-              ],
-              'description':   "Applications that use a non-default option when verifying certificates may be\nvulnerable to an attack from a malicious CA to circumvent certain checks.\n\nInvalid certificate policies in leaf certificates are silently ignored by\nOpenSSL and other certificate policy checks are skipped for that certificate.\nA malicious CA could use this to deliberately assert invalid certificate policies\nin order to circumvent policy checking on the certificate altogether.\n\nPolicy processing is disabled by default but can be enabled by passing\nthe `-policy' argument to the command line utilities or by calling the\n`X509_VERIFY_PARAM_set1_policies()' function.",
-              'diffID':        'sha256:a1c01e366b99afb656cec4b16561b6ab299fa471011b4414826407af3a5884f8',
-              'fixedVersions': [
-                '1.1.1t-r2'
-              ],
-              'installedVersion': '1.1.1n-r0',
-              'packageName':      'libcrypto1.1',
-              'purl':             'pkg:apk/alpine/libcrypto1.1@1.1.1n-r0?arch=x86_64&distro=3.15.3',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2023:3722',
-                'https://access.redhat.com/security/cve/CVE-2023-0465',
-                'https://bugzilla.redhat.com/2181082',
-                'https://bugzilla.redhat.com/2182561',
-                'https://bugzilla.redhat.com/2182565',
-                'https://bugzilla.redhat.com/2188461',
-                'https://bugzilla.redhat.com/2207947',
-                'https://errata.almalinux.org/9/ALSA-2023-3722.html',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=10325176f3d3e98c6e2b3bf5ab1e3b334de6947a',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=1dd43e0709fece299b15208f36cc7c76209ba0bb',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=b013765abfa80036dc779dd0e50602c57bb3bf95',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=facfb1ab745646e97a1920977ae4a9965ea61d5c',
-                'https://linux.oracle.com/cve/CVE-2023-0465.html',
-                'https://linux.oracle.com/errata/ELSA-2023-3722.html',
-                'https://lists.debian.org/debian-lts-announce/2023/06/msg00011.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-0465',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://security.netapp.com/advisory/ntap-20230414-0001/',
-                'https://ubuntu.com/security/notices/USN-6039-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-0465',
-                'https://www.debian.org/security/2023/dsa-5417',
-                'https://www.openssl.org/news/secadv/20230328.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: Invalid certificate policies in leaf certificates are silently ignored'
-            },
-            {
-              'cve':  'CVE-2023-2650',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '6.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-770'
-              ],
-              'description':   "Issue summary: Processing some specially crafted ASN.1 object identifiers or\ndata containing them may be very slow.\n\nImpact summary: Applications that use OBJ_obj2txt() directly, or use any of\nthe OpenSSL subsystems OCSP, PKCS7/SMIME, CMS, CMP/CRMF or TS with no message\nsize limit may experience notable to very long delays when processing those\nmessages, which may lead to a Denial of Service.\n\nAn OBJECT IDENTIFIER is composed of a series of numbers - sub-identifiers -\nmost of which have no size limit.  OBJ_obj2txt() may be used to translate\nan ASN.1 OBJECT IDENTIFIER given in DER encoding form (using the OpenSSL\ntype ASN1_OBJECT) to its canonical numeric text form, which are the\nsub-identifiers of the OBJECT IDENTIFIER in decimal form, separated by\nperiods.\n\nWhen one of the sub-identifiers in the OBJECT IDENTIFIER is very large\n(these are sizes that are seen as absurdly large, taking up tens or hundreds\nof KiBs), the translation to a decimal number in text may take a very long\ntime.  The time complexity is O(n^2) with 'n' being the size of the\nsub-identifiers in bytes (*).\n\nWith OpenSSL 3.0, support to fetch cryptographic algorithms using names /\nidentifiers in string form was introduced.  This includes using OBJECT\nIDENTIFIERs in canonical numeric text form as identifiers for fetching\nalgorithms.\n\nSuch OBJECT IDENTIFIERs may be received through the ASN.1 structure\nAlgorithmIdentifier, which is commonly used in multiple protocols to specify\nwhat cryptographic algorithm should be used to sign or verify, encrypt or\ndecrypt, or digest passed data.\n\nApplications that call OBJ_obj2txt() directly with untrusted data are\naffected, with any version of OpenSSL.  If the use is for the mere purpose\nof display, the severity is considered low.\n\nIn OpenSSL 3.0 and newer, this affects the subsystems OCSP, PKCS7/SMIME,\nCMS, CMP/CRMF or TS.  It also impacts anything that processes X.509\ncertificates, including simple things like verifying its signature.\n\nThe impact on TLS is relatively low, because all versions of OpenSSL have a\n100KiB limit on the peer's certificate chain.  Additionally, this only\nimpacts clients, or servers that have explicitly enabled client\nauthentication.\n\nIn OpenSSL 1.1.1 and 1.0.2, this only affects displaying diverse objects,\nsuch as X.509 certificates.  This is assumed to not happen in such a way\nthat it would cause a Denial of Service, so these versions are considered\nnot affected by this issue in such a way that it would be cause for concern,\nand the severity is therefore considered low.",
-              'diffID':        'sha256:a1c01e366b99afb656cec4b16561b6ab299fa471011b4414826407af3a5884f8',
-              'fixedVersions': [
-                '1.1.1u-r0'
-              ],
-              'installedVersion': '1.1.1n-r0',
-              'packageName':      'libcrypto1.1',
-              'purl':             'pkg:apk/alpine/libcrypto1.1@1.1.1n-r0?arch=x86_64&distro=3.15.3',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2023/05/30/1',
-                'https://access.redhat.com/errata/RHSA-2023:6330',
-                'https://access.redhat.com/security/cve/CVE-2023-2650',
-                'https://bugzilla.redhat.com/1858038',
-                'https://bugzilla.redhat.com/2207947',
-                'https://errata.almalinux.org/9/ALSA-2023-6330.html',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=423a2bc737a908ad0c77bda470b2b59dc879936b',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=853c5e56ee0b8650c73140816bb8b91d6163422c',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=9e209944b35cf82368071f160a744b6178f9b098',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=db779b0e10b047f2585615e0b8f2acdf21f8544a',
-                'https://linux.oracle.com/cve/CVE-2023-2650.html',
-                'https://linux.oracle.com/errata/ELSA-2023-6330.html',
-                'https://lists.debian.org/debian-lts-announce/2023/06/msg00011.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-2650',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0009',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://security.netapp.com/advisory/ntap-20230703-0001/',
-                'https://security.netapp.com/advisory/ntap-20231027-0009/',
-                'https://ubuntu.com/security/notices/USN-6119-1',
-                'https://ubuntu.com/security/notices/USN-6188-1',
-                'https://ubuntu.com/security/notices/USN-6672-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-2650',
-                'https://www.debian.org/security/2023/dsa-5417',
-                'https://www.openssl.org/news/secadv/20230530.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: Possible DoS translating ASN.1 object identifiers'
-            },
-            {
-              'cve':  'CVE-2023-3446',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L'
-                },
-                'redhat': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L'
-                }
-              },
-              'cwes': [
-                'CWE-606',
-                'CWE-1333'
-              ],
-              'description':   "Issue summary: Checking excessively long DH keys or parameters may be very slow.\n\nImpact summary: Applications that use the functions DH_check(), DH_check_ex()\nor EVP_PKEY_param_check() to check a DH key or DH parameters may experience long\ndelays. Where the key or parameters that are being checked have been obtained\nfrom an untrusted source this may lead to a Denial of Service.\n\nThe function DH_check() performs various checks on DH parameters. One of those\nchecks confirms that the modulus ('p' parameter) is not too large. Trying to use\na very large modulus is slow and OpenSSL will not normally use a modulus which\nis over 10,000 bits in length.\n\nHowever the DH_check() function checks numerous aspects of the key or parameters\nthat have been supplied. Some of those checks use the supplied modulus value\neven if it has already been found to be too large.\n\nAn application that calls DH_check() and supplies a key or parameters obtained\nfrom an untrusted source could be vulernable to a Denial of Service attack.\n\nThe function DH_check() is itself called by a number of other OpenSSL functions.\nAn application calling any of those other functions may similarly be affected.\nThe other functions affected by this are DH_check_ex() and\nEVP_PKEY_param_check().\n\nAlso vulnerable are the OpenSSL dhparam and pkeyparam command line applications\nwhen using the '-check' option.\n\nThe OpenSSL SSL/TLS implementation is not affected by this issue.\nThe OpenSSL 3.0 and 3.1 FIPS providers are not affected by this issue.",
-              'diffID':        'sha256:a1c01e366b99afb656cec4b16561b6ab299fa471011b4414826407af3a5884f8',
-              'fixedVersions': [
-                '1.1.1u-r2'
-              ],
-              'installedVersion': '1.1.1n-r0',
-              'packageName':      'libcrypto1.1',
-              'purl':             'pkg:apk/alpine/libcrypto1.1@1.1.1n-r0?arch=x86_64&distro=3.15.3',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2023/07/19/4',
-                'http://www.openwall.com/lists/oss-security/2023/07/19/5',
-                'http://www.openwall.com/lists/oss-security/2023/07/19/6',
-                'http://www.openwall.com/lists/oss-security/2023/07/31/1',
-                'http://www.openwall.com/lists/oss-security/2024/05/16/1',
-                'https://access.redhat.com/errata/RHSA-2024:2447',
-                'https://access.redhat.com/security/cve/CVE-2023-3446',
-                'https://bugzilla.redhat.com/2223016',
-                'https://bugzilla.redhat.com/2224962',
-                'https://bugzilla.redhat.com/2227852',
-                'https://bugzilla.redhat.com/2248616',
-                'https://bugzilla.redhat.com/2257571',
-                'https://bugzilla.redhat.com/2258502',
-                'https://bugzilla.redhat.com/2259944',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2224962',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2257582',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2257583',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2258677',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2258688',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2258691',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2258694',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2258700',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-36763',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-36764',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3446',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45229',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45231',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45232',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45233',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45235',
-                'https://errata.almalinux.org/9/ALSA-2024-2447.html',
-                'https://errata.rockylinux.org/RLSA-2024:2264',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=1fa20cf2f506113c761777127a38bce5068740eb',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=8780a896543a654e757db1b9396383f9d8095528',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=9a0a4d3c1e7138915563c0df4fe6a3f9377b839c',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=fc9867c1e03c22ebf56943be205202e576aabf23',
-                'https://linux.oracle.com/cve/CVE-2023-3446.html',
-                'https://linux.oracle.com/errata/ELSA-2024-2447.html',
-                'https://lists.debian.org/debian-lts-announce/2023/08/msg00019.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-3446',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://security.netapp.com/advisory/ntap-20230803-0011/',
-                'https://ubuntu.com/security/notices/USN-6435-1',
-                'https://ubuntu.com/security/notices/USN-6435-2',
-                'https://ubuntu.com/security/notices/USN-6450-1',
-                'https://ubuntu.com/security/notices/USN-6709-1',
-                'https://ubuntu.com/security/notices/USN-7018-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-3446',
-                'https://www.openssl.org/news/secadv/20230719.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: Excessive time spent checking DH keys and parameters'
-            },
-            {
-              'cve':  'CVE-2023-3817',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L'
-                },
-                'redhat': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L'
-                }
-              },
-              'cwes': [
-                'CWE-606',
-                'CWE-834'
-              ],
-              'description':   'Issue summary: Checking excessively long DH keys or parameters may be very slow.\n\nImpact summary: Applications that use the functions DH_check(), DH_check_ex()\nor EVP_PKEY_param_check() to check a DH key or DH parameters may experience long\ndelays. Where the key or parameters that are being checked have been obtained\nfrom an untrusted source this may lead to a Denial of Service.\n\nThe function DH_check() performs various checks on DH parameters. After fixing\nCVE-2023-3446 it was discovered that a large q parameter value can also trigger\nan overly long computation during some of these checks. A correct q value,\nif present, cannot be larger than the modulus p parameter, thus it is\nunnecessary to perform these checks if q is larger than p.\n\nAn application that calls DH_check() and supplies a key or parameters obtained\nfrom an untrusted source could be vulnerable to a Denial of Service attack.\n\nThe function DH_check() is itself called by a number of other OpenSSL functions.\nAn application calling any of those other functions may similarly be affected.\nThe other functions affected by this are DH_check_ex() and\nEVP_PKEY_param_check().\n\nAlso vulnerable are the OpenSSL dhparam and pkeyparam command line applications\nwhen using the "-check" option.\n\nThe OpenSSL SSL/TLS implementation is not affected by this issue.\n\nThe OpenSSL 3.0 and 3.1 FIPS providers are not affected by this issue.',
-              'diffID':        'sha256:a1c01e366b99afb656cec4b16561b6ab299fa471011b4414826407af3a5884f8',
-              'fixedVersions': [
-                '1.1.1v-r0'
-              ],
-              'installedVersion': '1.1.1n-r0',
-              'packageName':      'libcrypto1.1',
-              'purl':             'pkg:apk/alpine/libcrypto1.1@1.1.1n-r0?arch=x86_64&distro=3.15.3',
-              'references':       [
-                'http://seclists.org/fulldisclosure/2023/Jul/43',
-                'http://www.openwall.com/lists/oss-security/2023/07/31/1',
-                'http://www.openwall.com/lists/oss-security/2023/09/22/11',
-                'http://www.openwall.com/lists/oss-security/2023/09/22/9',
-                'http://www.openwall.com/lists/oss-security/2023/11/06/2',
-                'https://access.redhat.com/errata/RHSA-2024:2447',
-                'https://access.redhat.com/security/cve/CVE-2023-3817',
-                'https://bugzilla.redhat.com/2223016',
-                'https://bugzilla.redhat.com/2224962',
-                'https://bugzilla.redhat.com/2227852',
-                'https://bugzilla.redhat.com/2248616',
-                'https://bugzilla.redhat.com/2257571',
-                'https://bugzilla.redhat.com/2258502',
-                'https://bugzilla.redhat.com/2259944',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2224962',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2227852',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2248616',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2270358',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3446',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3817',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-5678',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-2408',
-                'https://errata.almalinux.org/9/ALSA-2024-2447.html',
-                'https://errata.rockylinux.org/RLSA-2023:7877',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=6a1eb62c29db6cb5eec707f9338aee00f44e26f5',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=869ad69aadd985c7b8ca6f4e5dd0eb274c9f3644',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=9002fd07327a91f35ba6c1307e71fa6fd4409b7f',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=91ddeba0f2269b017dc06c46c993a788974b1aa5',
-                'https://linux.oracle.com/cve/CVE-2023-3817.html',
-                'https://linux.oracle.com/errata/ELSA-2024-2447.html',
-                'https://lists.debian.org/debian-lts-announce/2023/08/msg00019.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-3817',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://security.netapp.com/advisory/ntap-20230818-0014/',
-                'https://security.netapp.com/advisory/ntap-20231027-0008/',
-                'https://security.netapp.com/advisory/ntap-20240621-0006/',
-                'https://ubuntu.com/security/notices/USN-6435-1',
-                'https://ubuntu.com/security/notices/USN-6435-2',
-                'https://ubuntu.com/security/notices/USN-6450-1',
-                'https://ubuntu.com/security/notices/USN-6709-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-3817',
-                'https://www.openssl.org/news/secadv/20230731.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'OpenSSL: Excessive time spent checking DH q parameter value'
-            },
-            {
-              'cve':  'CVE-2023-5678',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L'
-                },
-                'redhat': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L'
-                }
-              },
-              'cwes': [
-                'CWE-606',
-                'CWE-754'
-              ],
-              'description':   "Issue summary: Generating excessively long X9.42 DH keys or checking\nexcessively long X9.42 DH keys or parameters may be very slow.\n\nImpact summary: Applications that use the functions DH_generate_key() to\ngenerate an X9.42 DH key may experience long delays.  Likewise, applications\nthat use DH_check_pub_key(), DH_check_pub_key_ex() or EVP_PKEY_public_check()\nto check an X9.42 DH key or X9.42 DH parameters may experience long delays.\nWhere the key or parameters that are being checked have been obtained from\nan untrusted source this may lead to a Denial of Service.\n\nWhile DH_check() performs all the necessary checks (as of CVE-2023-3817),\nDH_check_pub_key() doesn't make any of these checks, and is therefore\nvulnerable for excessively large P and Q parameters.\n\nLikewise, while DH_generate_key() performs a check for an excessively large\nP, it doesn't check for an excessively large Q.\n\nAn application that calls DH_generate_key() or DH_check_pub_key() and\nsupplies a key or parameters obtained from an untrusted source could be\nvulnerable to a Denial of Service attack.\n\nDH_generate_key() and DH_check_pub_key() are also called by a number of\nother OpenSSL functions.  An application calling any of those other\nfunctions may similarly be affected.  The other functions affected by this\nare DH_check_pub_key_ex(), EVP_PKEY_public_check(), and EVP_PKEY_generate().\n\nAlso vulnerable are the OpenSSL pkey command line application when using the\n\"-pubcheck\" option, as well as the OpenSSL genpkey command line application.\n\nThe OpenSSL SSL/TLS implementation is not affected by this issue.\n\nThe OpenSSL 3.0 and 3.1 FIPS providers are not affected by this issue.",
-              'diffID':        'sha256:a1c01e366b99afb656cec4b16561b6ab299fa471011b4414826407af3a5884f8',
-              'fixedVersions': [
-                '1.1.1w-r1'
-              ],
-              'installedVersion': '1.1.1n-r0',
-              'packageName':      'libcrypto1.1',
-              'purl':             'pkg:apk/alpine/libcrypto1.1@1.1.1n-r0?arch=x86_64&distro=3.15.3',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2024/03/11/1',
-                'https://access.redhat.com/errata/RHSA-2024:2447',
-                'https://access.redhat.com/security/cve/CVE-2023-5678',
-                'https://bugzilla.redhat.com/2223016',
-                'https://bugzilla.redhat.com/2224962',
-                'https://bugzilla.redhat.com/2227852',
-                'https://bugzilla.redhat.com/2248616',
-                'https://bugzilla.redhat.com/2257571',
-                'https://bugzilla.redhat.com/2258502',
-                'https://bugzilla.redhat.com/2259944',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2224962',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2227852',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2248616',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2270358',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3446',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3817',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-5678',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-2408',
-                'https://errata.almalinux.org/9/ALSA-2024-2447.html',
-                'https://errata.rockylinux.org/RLSA-2023:7877',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=34efaef6c103d636ab507a0cc34dca4d3aecc055',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=710fee740904b6290fef0dd5536fbcedbc38ff0c',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=db925ae2e65d0d925adef429afc37f75bd1c2017',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=ddeb4b6c6d527e54ce9a99cba785c0f7776e54b6',
-                'https://linux.oracle.com/cve/CVE-2023-5678.html',
-                'https://linux.oracle.com/errata/ELSA-2024-2447.html',
-                'https://lists.debian.org/debian-lts-announce/2024/10/msg00033.html',
-                'https://lists.debian.org/debian-lts-announce/2024/11/msg00000.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-5678',
-                'https://security.netapp.com/advisory/ntap-20231130-0010/',
-                'https://ubuntu.com/security/notices/USN-6622-1',
-                'https://ubuntu.com/security/notices/USN-6632-1',
-                'https://ubuntu.com/security/notices/USN-6709-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-5678',
-                'https://www.openssl.org/news/secadv/20231106.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: Generating excessively long X9.42 DH keys or checking excessively long X9.42 DH keys or parameters may be very slow'
-            },
-            {
-              'cve':  'CVE-2022-4450',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'nvd': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-415'
-              ],
-              'description':   'The function PEM_read_bio_ex() reads a PEM file from a BIO and parses and\ndecodes the "name" (e.g. "CERTIFICATE"), any header data and the payload data.\nIf the function succeeds then the "name_out", "header" and "data" arguments are\npopulated with pointers to buffers containing the relevant decoded data. The\ncaller is responsible for freeing those buffers. It is possible to construct a\nPEM file that results in 0 bytes of payload data. In this case PEM_read_bio_ex()\nwill return a failure code but will populate the header argument with a pointer\nto a buffer that has already been freed. If the caller also frees this buffer\nthen a double free will occur. This will most likely lead to a crash. This\ncould be exploited by an attacker who has the ability to supply malicious PEM\nfiles for parsing to achieve a denial of service attack.\n\nThe functions PEM_read_bio() and PEM_read() are simple wrappers around\nPEM_read_bio_ex() and therefore these functions are also directly affected.\n\nThese functions are also called indirectly by a number of other OpenSSL\nfunctions including PEM_X509_INFO_read_bio_ex() and\nSSL_CTX_use_serverinfo_file() which are also vulnerable. Some OpenSSL internal\nuses of these functions are not vulnerable because the caller does not free the\nheader argument if PEM_read_bio_ex() returns a failure code. These locations\ninclude the PEM_read_bio_TYPE() functions as well as the decoders introduced in\nOpenSSL 3.0.\n\nThe OpenSSL asn1parse command line application is also impacted by this issue.',
-              'diffID':        'sha256:a1c01e366b99afb656cec4b16561b6ab299fa471011b4414826407af3a5884f8',
-              'fixedVersions': [
-                '1.1.1t-r0'
-              ],
-              'installedVersion': '1.1.1n-r0',
-              'packageName':      'libssl1.1',
-              'purl':             'pkg:apk/alpine/libssl1.1@1.1.1n-r0?arch=x86_64&distro=3.15.3',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2023:2165',
-                'https://access.redhat.com/security/cve/CVE-2022-4450',
-                'https://bugzilla.redhat.com/1960321',
-                'https://bugzilla.redhat.com/2164440',
-                'https://bugzilla.redhat.com/2164487',
-                'https://bugzilla.redhat.com/2164492',
-                'https://bugzilla.redhat.com/2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144000',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144003',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144006',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144008',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144010',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144012',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144015',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144017',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144019',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2145170',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2158412',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164440',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164487',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164488',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164492',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164497',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164499',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164500',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4203',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4304',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4450',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0215',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0216',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0217',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0286',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0401',
-                'https://errata.almalinux.org/9/ALSA-2023-2165.html',
-                'https://errata.rockylinux.org/RLSA-2023:0946',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=63bcf189be73a9cc1264059bed6f57974be74a83',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=bbcf509bd046b34cca19c766bbddc31683d0858b',
-                'https://linux.oracle.com/cve/CVE-2022-4450.html',
-                'https://linux.oracle.com/errata/ELSA-2023-32791.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2022-4450',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0003',
-                'https://rustsec.org/advisories/RUSTSEC-2023-0010.html',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://ubuntu.com/security/notices/USN-5844-1',
-                'https://ubuntu.com/security/notices/USN-6564-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2022-4450',
-                'https://www.openssl.org/news/secadv/20230207.txt'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: double free after calling PEM_read_bio_ex'
-            },
-            {
-              'cve':  'CVE-2023-0215',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'nvd': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   'The public API function BIO_new_NDEF is a helper function used for streaming\nASN.1 data via a BIO. It is primarily used internally to OpenSSL to support the\nSMIME, CMS and PKCS7 streaming capabilities, but may also be called directly by\nend user applications.\n\nThe function receives a BIO from the caller, prepends a new BIO_f_asn1 filter\nBIO onto the front of it to form a BIO chain, and then returns the new head of\nthe BIO chain to the caller. Under certain conditions, for example if a CMS\nrecipient public key is invalid, the new filter BIO is freed and the function\nreturns a NULL result indicating a failure. However, in this case, the BIO chain\nis not properly cleaned up and the BIO passed by the caller still retains\ninternal pointers to the previously freed filter BIO. If the caller then goes on\nto call BIO_pop() on the BIO then a use-after-free will occur. This will most\nlikely result in a crash.\n\n\n\nThis scenario occurs directly in the internal function B64_write_ASN1() which\nmay cause BIO_new_NDEF() to be called and will subsequently call BIO_pop() on\nthe BIO. This internal function is in turn called by the public API functions\nPEM_write_bio_ASN1_stream, PEM_write_bio_CMS_stream, PEM_write_bio_PKCS7_stream,\nSMIME_write_ASN1, SMIME_write_CMS and SMIME_write_PKCS7.\n\nOther public API functions that may be impacted by this include\ni2d_ASN1_bio_stream, BIO_new_CMS, BIO_new_PKCS7, i2d_CMS_bio_stream and\ni2d_PKCS7_bio_stream.\n\nThe OpenSSL cms and smime command line applications are similarly affected.',
-              'diffID':        'sha256:a1c01e366b99afb656cec4b16561b6ab299fa471011b4414826407af3a5884f8',
-              'fixedVersions': [
-                '1.1.1t-r0'
-              ],
-              'installedVersion': '1.1.1n-r0',
-              'packageName':      'libssl1.1',
-              'purl':             'pkg:apk/alpine/libssl1.1@1.1.1n-r0?arch=x86_64&distro=3.15.3',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2023:2165',
-                'https://access.redhat.com/security/cve/CVE-2023-0215',
-                'https://bugzilla.redhat.com/1960321',
-                'https://bugzilla.redhat.com/2164440',
-                'https://bugzilla.redhat.com/2164487',
-                'https://bugzilla.redhat.com/2164492',
-                'https://bugzilla.redhat.com/2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144000',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144003',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144006',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144008',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144010',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144012',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144015',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144017',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144019',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2145170',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2158412',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164440',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164487',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164488',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164492',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164497',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164499',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164500',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4203',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4304',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4450',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0215',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0216',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0217',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0286',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0401',
-                'https://errata.almalinux.org/9/ALSA-2023-2165.html',
-                'https://errata.rockylinux.org/RLSA-2023:0946',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=8818064ce3c3c0f1b740a5aaba2a987e75bfbafd',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=9816136fe31d92ace4037d5da5257f763aeeb4eb',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=c3829dd8825c654652201e16f8a0a0c46ee3f344',
-                'https://linux.oracle.com/cve/CVE-2023-0215.html',
-                'https://linux.oracle.com/errata/ELSA-2023-32791.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-0215',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0003',
-                'https://rustsec.org/advisories/RUSTSEC-2023-0009.html',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://security.netapp.com/advisory/ntap-20230427-0007',
-                'https://security.netapp.com/advisory/ntap-20230427-0007/',
-                'https://security.netapp.com/advisory/ntap-20230427-0009',
-                'https://security.netapp.com/advisory/ntap-20230427-0009/',
-                'https://security.netapp.com/advisory/ntap-20240621-0006',
-                'https://security.netapp.com/advisory/ntap-20240621-0006/',
-                'https://ubuntu.com/security/notices/USN-5844-1',
-                'https://ubuntu.com/security/notices/USN-5845-1',
-                'https://ubuntu.com/security/notices/USN-5845-2',
-                'https://ubuntu.com/security/notices/USN-6564-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-0215',
-                'https://www.openssl.org/news/secadv/20230207.txt'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: use-after-free following BIO_new_NDEF'
-            },
-            {
-              'cve':  'CVE-2023-0286',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '7.4',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H'
-                },
-                'nvd': {
-                  'v3score':  '7.4',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.4',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-843'
-              ],
-              'description':   'There is a type confusion vulnerability relating to X.400 address processing\ninside an X.509 GeneralName. X.400 addresses were parsed as an ASN1_STRING but\nthe public structure definition for GENERAL_NAME incorrectly specified the type\nof the x400Address field as ASN1_TYPE. This field is subsequently interpreted by\nthe OpenSSL function GENERAL_NAME_cmp as an ASN1_TYPE rather than an\nASN1_STRING.\n\nWhen CRL checking is enabled (i.e. the application sets the\nX509_V_FLAG_CRL_CHECK flag), this vulnerability may allow an attacker to pass\narbitrary pointers to a memcmp call, enabling them to read memory contents or\nenact a denial of service. In most cases, the attack requires the attacker to\nprovide both the certificate chain and CRL, neither of which need to have a\nvalid signature. If the attacker only controls one of these inputs, the other\ninput must already contain an X.400 address as a CRL distribution point, which\nis uncommon. As such, this vulnerability is most likely to only affect\napplications which have implemented their own functionality for retrieving CRLs\nover a network.',
-              'diffID':        'sha256:a1c01e366b99afb656cec4b16561b6ab299fa471011b4414826407af3a5884f8',
-              'fixedVersions': [
-                '1.1.1t-r0'
-              ],
-              'installedVersion': '1.1.1n-r0',
-              'packageName':      'libssl1.1',
-              'purl':             'pkg:apk/alpine/libssl1.1@1.1.1n-r0?arch=x86_64&distro=3.15.3',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2025:7937',
-                'https://access.redhat.com/security/cve/CVE-2023-0286',
-                'https://access.redhat.com/security/cve/cve-2023-0286',
-                'https://bugzilla.redhat.com/2164440',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144000',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144003',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144006',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144008',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144010',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144012',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144015',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144017',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144019',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2145170',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2158412',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164440',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164487',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164488',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164492',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164497',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164499',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164500',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4203',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4304',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4450',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0215',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0216',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0217',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0286',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0401',
-                'https://errata.almalinux.org/9/ALSA-2025-7937.html',
-                'https://errata.rockylinux.org/RLSA-2023:0946',
-                'https://ftp.openbsd.org/pub/OpenBSD/LibreSSL/libressl-3.6.2-relnotes.txt',
-                'https://ftp.openbsd.org/pub/OpenBSD/patches/7.2/common/018_x509.patch.sig',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=2c6c9d439b484e1ba9830d8454a34fa4f80fdfe9',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=2f7530077e0ef79d98718138716bc51ca0cad658',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=fd2af07dc083a350c959147097003a14a5e8ac4d',
-                'https://github.com/pyca/cryptography',
-                'https://github.com/pyca/cryptography/security/advisories/GHSA-x4qr-2fvf-3mr5',
-                'https://linux.oracle.com/cve/CVE-2023-0286.html',
-                'https://linux.oracle.com/errata/ELSA-2025-7937.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-0286',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0003',
-                'https://rustsec.org/advisories/RUSTSEC-2023-0006.html',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://ubuntu.com/security/notices/USN-5844-1',
-                'https://ubuntu.com/security/notices/USN-5845-1',
-                'https://ubuntu.com/security/notices/USN-5845-2',
-                'https://ubuntu.com/security/notices/USN-6564-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-0286',
-                'https://www.openssl.org/news/secadv/20230207.txt'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: X.400 address type confusion in X.509 GeneralName'
-            },
-            {
-              'cve':  'CVE-2023-0464',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-295'
-              ],
-              'description':   "A security vulnerability has been identified in all supported versions\n\nof OpenSSL related to the verification of X.509 certificate chains\nthat include policy constraints.  Attackers may be able to exploit this\nvulnerability by creating a malicious certificate chain that triggers\nexponential use of computational resources, leading to a denial-of-service\n(DoS) attack on affected systems.\n\nPolicy processing is disabled by default but can be enabled by passing\nthe `-policy' argument to the command line utilities or by calling the\n`X509_VERIFY_PARAM_set1_policies()' function.",
-              'diffID':        'sha256:a1c01e366b99afb656cec4b16561b6ab299fa471011b4414826407af3a5884f8',
-              'fixedVersions': [
-                '1.1.1t-r2'
-              ],
-              'installedVersion': '1.1.1n-r0',
-              'packageName':      'libssl1.1',
-              'purl':             'pkg:apk/alpine/libssl1.1@1.1.1n-r0?arch=x86_64&distro=3.15.3',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2023:3722',
-                'https://access.redhat.com/security/cve/CVE-2023-0464',
-                'https://bugzilla.redhat.com/2181082',
-                'https://bugzilla.redhat.com/2182561',
-                'https://bugzilla.redhat.com/2182565',
-                'https://bugzilla.redhat.com/2188461',
-                'https://bugzilla.redhat.com/2207947',
-                'https://errata.almalinux.org/9/ALSA-2023-3722.html',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=2017771e2db3e2b96f89bbe8766c3209f6a99545',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=2dcd4f1e3115f38cefa43e3efbe9b801c27e642e',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=879f7080d7e141f415c79eaa3a8ac4a3dad0348b',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=959c59c7a0164117e7f8366466a32bb1f8d77ff1',
-                'https://linux.oracle.com/cve/CVE-2023-0464.html',
-                'https://linux.oracle.com/errata/ELSA-2023-3722.html',
-                'https://lists.debian.org/debian-lts-announce/2023/06/msg00011.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-0464',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://security.netapp.com/advisory/ntap-20230406-0006/',
-                'https://security.netapp.com/advisory/ntap-20240621-0006/',
-                'https://ubuntu.com/security/notices/USN-6039-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.couchbase.com/alerts/',
-                'https://www.cve.org/CVERecord?id=CVE-2023-0464',
-                'https://www.debian.org/security/2023/dsa-5417',
-                'https://www.openssl.org/news/secadv/20230322.txt'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: Denial of service by excessive resource usage in verifying X509 policy constraints'
-            },
-            {
-              'cve':  'CVE-2022-2097',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N'
-                },
-                'nvd': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N'
-                },
-                'redhat': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-327'
-              ],
-              'description':   "AES OCB mode for 32-bit x86 platforms using the AES-NI assembly optimised implementation will not encrypt the entirety of the data under some circumstances. This could reveal sixteen bytes of data that was preexisting in the memory that wasn't written. In the special case of \"in place\" encryption, sixteen bytes of the plaintext would be revealed. Since OpenSSL does not support OCB based cipher suites for TLS and DTLS, they are both unaffected. Fixed in OpenSSL 3.0.5 (Affected 3.0.0-3.0.4). Fixed in OpenSSL 1.1.1q (Affected 1.1.1-1.1.1p).",
-              'diffID':        'sha256:a1c01e366b99afb656cec4b16561b6ab299fa471011b4414826407af3a5884f8',
-              'fixedVersions': [
-                '1.1.1q-r0'
-              ],
-              'installedVersion': '1.1.1n-r0',
-              'packageName':      'libssl1.1',
-              'purl':             'pkg:apk/alpine/libssl1.1@1.1.1n-r0?arch=x86_64&distro=3.15.3',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2022:6224',
-                'https://access.redhat.com/security/cve/CVE-2022-2097',
-                'https://bugzilla.redhat.com/2081494',
-                'https://bugzilla.redhat.com/2087911',
-                'https://bugzilla.redhat.com/2087913',
-                'https://bugzilla.redhat.com/2097310',
-                'https://bugzilla.redhat.com/2104905',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2081494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2097310',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2100554',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2104905',
-                'https://cert-portal.siemens.com/productcert/pdf/ssa-332410.pdf',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-1292',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-2068',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-2097',
-                'https://errata.almalinux.org/9/ALSA-2022-6224.html',
-                'https://errata.rockylinux.org/RLSA-2022:5818',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=919925673d6c9cfed3c1085497f5dfbbed5fc431',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=a98f339ddd7e8f487d6e0088d4a9a42324885a93',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=919925673d6c9cfed3c1085497f5dfbbed5fc431',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=a98f339ddd7e8f487d6e0088d4a9a42324885a93',
-                'https://github.com/alexcrichton/openssl-src-rs',
-                'https://linux.oracle.com/cve/CVE-2022-2097.html',
-                'https://linux.oracle.com/errata/ELSA-2022-9955.html',
-                'https://lists.debian.org/debian-lts-announce/2023/02/msg00019.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/R6CK57NBQFTPUMXAPJURCGXUYT76NQAK',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/R6CK57NBQFTPUMXAPJURCGXUYT76NQAK/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/V6567JERRHHJW2GNGJGKDRNHR7SNPZK7',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/V6567JERRHHJW2GNGJGKDRNHR7SNPZK7/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VCMNWKERPBKOEBNL7CLTTX3ZZCZLH7XA',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VCMNWKERPBKOEBNL7CLTTX3ZZCZLH7XA/',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/R6CK57NBQFTPUMXAPJURCGXUYT76NQAK',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/R6CK57NBQFTPUMXAPJURCGXUYT76NQAK/',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/V6567JERRHHJW2GNGJGKDRNHR7SNPZK7',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/V6567JERRHHJW2GNGJGKDRNHR7SNPZK7/',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/VCMNWKERPBKOEBNL7CLTTX3ZZCZLH7XA',
-                'https://nvd.nist.gov/vuln/detail/CVE-2022-2097',
-                'https://rustsec.org/advisories/RUSTSEC-2022-0032.html',
-                'https://security.gentoo.org/glsa/202210-02',
-                'https://security.netapp.com/advisory/ntap-20220715-0011',
-                'https://security.netapp.com/advisory/ntap-20220715-0011/',
-                'https://security.netapp.com/advisory/ntap-20230420-0008',
-                'https://security.netapp.com/advisory/ntap-20230420-0008/',
-                'https://security.netapp.com/advisory/ntap-20240621-0006',
-                'https://security.netapp.com/advisory/ntap-20240621-0006/',
-                'https://ubuntu.com/security/notices/USN-5502-1',
-                'https://ubuntu.com/security/notices/USN-6457-1',
-                'https://www.cve.org/CVERecord?id=CVE-2022-2097',
-                'https://www.debian.org/security/2023/dsa-5343',
-                'https://www.openssl.org/news/secadv/20220705.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: AES OCB fails to encrypt some bytes'
-            },
-            {
-              'cve':  'CVE-2022-4304',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N'
-                },
-                'nvd': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N'
-                },
-                'redhat': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-203'
-              ],
-              'description':   'A timing based side channel exists in the OpenSSL RSA Decryption implementation\nwhich could be sufficient to recover a plaintext across a network in a\nBleichenbacher style attack. To achieve a successful decryption an attacker\nwould have to be able to send a very large number of trial messages for\ndecryption. The vulnerability affects all RSA padding modes: PKCS#1 v1.5,\nRSA-OEAP and RSASVE.\n\nFor example, in a TLS connection, RSA is commonly used by a client to send an\nencrypted pre-master secret to the server. An attacker that had observed a\ngenuine connection between a client and a server could use this flaw to send\ntrial messages to the server and record the time taken to process them. After a\nsufficiently large number of messages the attacker could recover the pre-master\nsecret used for the original connection and thus be able to decrypt the\napplication data sent over that connection.',
-              'diffID':        'sha256:a1c01e366b99afb656cec4b16561b6ab299fa471011b4414826407af3a5884f8',
-              'fixedVersions': [
-                '1.1.1t-r0'
-              ],
-              'installedVersion': '1.1.1n-r0',
-              'packageName':      'libssl1.1',
-              'purl':             'pkg:apk/alpine/libssl1.1@1.1.1n-r0?arch=x86_64&distro=3.15.3',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2023:2165',
-                'https://access.redhat.com/security/cve/CVE-2022-4304',
-                'https://bugzilla.redhat.com/1960321',
-                'https://bugzilla.redhat.com/2164440',
-                'https://bugzilla.redhat.com/2164487',
-                'https://bugzilla.redhat.com/2164492',
-                'https://bugzilla.redhat.com/2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144000',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144003',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144006',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144008',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144010',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144012',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144015',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144017',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144019',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2145170',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2158412',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164440',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164487',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164488',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164492',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164497',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164499',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164500',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4203',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4304',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4450',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0215',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0216',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0217',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0286',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0401',
-                'https://errata.almalinux.org/9/ALSA-2023-2165.html',
-                'https://errata.rockylinux.org/RLSA-2023:0946',
-                'https://linux.oracle.com/cve/CVE-2022-4304.html',
-                'https://linux.oracle.com/errata/ELSA-2023-32791.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2022-4304',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0003',
-                'https://rustsec.org/advisories/RUSTSEC-2023-0007.html',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://ubuntu.com/security/notices/USN-5844-1',
-                'https://ubuntu.com/security/notices/USN-6564-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2022-4304',
-                'https://www.openssl.org/news/secadv/20230207.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: timing attack in RSA Decryption implementation'
-            },
-            {
-              'cve':  'CVE-2023-0465',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N'
-                },
-                'redhat': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-295'
-              ],
-              'description':   "Applications that use a non-default option when verifying certificates may be\nvulnerable to an attack from a malicious CA to circumvent certain checks.\n\nInvalid certificate policies in leaf certificates are silently ignored by\nOpenSSL and other certificate policy checks are skipped for that certificate.\nA malicious CA could use this to deliberately assert invalid certificate policies\nin order to circumvent policy checking on the certificate altogether.\n\nPolicy processing is disabled by default but can be enabled by passing\nthe `-policy' argument to the command line utilities or by calling the\n`X509_VERIFY_PARAM_set1_policies()' function.",
-              'diffID':        'sha256:a1c01e366b99afb656cec4b16561b6ab299fa471011b4414826407af3a5884f8',
-              'fixedVersions': [
-                '1.1.1t-r2'
-              ],
-              'installedVersion': '1.1.1n-r0',
-              'packageName':      'libssl1.1',
-              'purl':             'pkg:apk/alpine/libssl1.1@1.1.1n-r0?arch=x86_64&distro=3.15.3',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2023:3722',
-                'https://access.redhat.com/security/cve/CVE-2023-0465',
-                'https://bugzilla.redhat.com/2181082',
-                'https://bugzilla.redhat.com/2182561',
-                'https://bugzilla.redhat.com/2182565',
-                'https://bugzilla.redhat.com/2188461',
-                'https://bugzilla.redhat.com/2207947',
-                'https://errata.almalinux.org/9/ALSA-2023-3722.html',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=10325176f3d3e98c6e2b3bf5ab1e3b334de6947a',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=1dd43e0709fece299b15208f36cc7c76209ba0bb',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=b013765abfa80036dc779dd0e50602c57bb3bf95',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=facfb1ab745646e97a1920977ae4a9965ea61d5c',
-                'https://linux.oracle.com/cve/CVE-2023-0465.html',
-                'https://linux.oracle.com/errata/ELSA-2023-3722.html',
-                'https://lists.debian.org/debian-lts-announce/2023/06/msg00011.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-0465',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://security.netapp.com/advisory/ntap-20230414-0001/',
-                'https://ubuntu.com/security/notices/USN-6039-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-0465',
-                'https://www.debian.org/security/2023/dsa-5417',
-                'https://www.openssl.org/news/secadv/20230328.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: Invalid certificate policies in leaf certificates are silently ignored'
-            },
-            {
-              'cve':  'CVE-2023-2650',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '6.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-770'
-              ],
-              'description':   "Issue summary: Processing some specially crafted ASN.1 object identifiers or\ndata containing them may be very slow.\n\nImpact summary: Applications that use OBJ_obj2txt() directly, or use any of\nthe OpenSSL subsystems OCSP, PKCS7/SMIME, CMS, CMP/CRMF or TS with no message\nsize limit may experience notable to very long delays when processing those\nmessages, which may lead to a Denial of Service.\n\nAn OBJECT IDENTIFIER is composed of a series of numbers - sub-identifiers -\nmost of which have no size limit.  OBJ_obj2txt() may be used to translate\nan ASN.1 OBJECT IDENTIFIER given in DER encoding form (using the OpenSSL\ntype ASN1_OBJECT) to its canonical numeric text form, which are the\nsub-identifiers of the OBJECT IDENTIFIER in decimal form, separated by\nperiods.\n\nWhen one of the sub-identifiers in the OBJECT IDENTIFIER is very large\n(these are sizes that are seen as absurdly large, taking up tens or hundreds\nof KiBs), the translation to a decimal number in text may take a very long\ntime.  The time complexity is O(n^2) with 'n' being the size of the\nsub-identifiers in bytes (*).\n\nWith OpenSSL 3.0, support to fetch cryptographic algorithms using names /\nidentifiers in string form was introduced.  This includes using OBJECT\nIDENTIFIERs in canonical numeric text form as identifiers for fetching\nalgorithms.\n\nSuch OBJECT IDENTIFIERs may be received through the ASN.1 structure\nAlgorithmIdentifier, which is commonly used in multiple protocols to specify\nwhat cryptographic algorithm should be used to sign or verify, encrypt or\ndecrypt, or digest passed data.\n\nApplications that call OBJ_obj2txt() directly with untrusted data are\naffected, with any version of OpenSSL.  If the use is for the mere purpose\nof display, the severity is considered low.\n\nIn OpenSSL 3.0 and newer, this affects the subsystems OCSP, PKCS7/SMIME,\nCMS, CMP/CRMF or TS.  It also impacts anything that processes X.509\ncertificates, including simple things like verifying its signature.\n\nThe impact on TLS is relatively low, because all versions of OpenSSL have a\n100KiB limit on the peer's certificate chain.  Additionally, this only\nimpacts clients, or servers that have explicitly enabled client\nauthentication.\n\nIn OpenSSL 1.1.1 and 1.0.2, this only affects displaying diverse objects,\nsuch as X.509 certificates.  This is assumed to not happen in such a way\nthat it would cause a Denial of Service, so these versions are considered\nnot affected by this issue in such a way that it would be cause for concern,\nand the severity is therefore considered low.",
-              'diffID':        'sha256:a1c01e366b99afb656cec4b16561b6ab299fa471011b4414826407af3a5884f8',
-              'fixedVersions': [
-                '1.1.1u-r0'
-              ],
-              'installedVersion': '1.1.1n-r0',
-              'packageName':      'libssl1.1',
-              'purl':             'pkg:apk/alpine/libssl1.1@1.1.1n-r0?arch=x86_64&distro=3.15.3',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2023/05/30/1',
-                'https://access.redhat.com/errata/RHSA-2023:6330',
-                'https://access.redhat.com/security/cve/CVE-2023-2650',
-                'https://bugzilla.redhat.com/1858038',
-                'https://bugzilla.redhat.com/2207947',
-                'https://errata.almalinux.org/9/ALSA-2023-6330.html',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=423a2bc737a908ad0c77bda470b2b59dc879936b',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=853c5e56ee0b8650c73140816bb8b91d6163422c',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=9e209944b35cf82368071f160a744b6178f9b098',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=db779b0e10b047f2585615e0b8f2acdf21f8544a',
-                'https://linux.oracle.com/cve/CVE-2023-2650.html',
-                'https://linux.oracle.com/errata/ELSA-2023-6330.html',
-                'https://lists.debian.org/debian-lts-announce/2023/06/msg00011.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-2650',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0009',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://security.netapp.com/advisory/ntap-20230703-0001/',
-                'https://security.netapp.com/advisory/ntap-20231027-0009/',
-                'https://ubuntu.com/security/notices/USN-6119-1',
-                'https://ubuntu.com/security/notices/USN-6188-1',
-                'https://ubuntu.com/security/notices/USN-6672-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-2650',
-                'https://www.debian.org/security/2023/dsa-5417',
-                'https://www.openssl.org/news/secadv/20230530.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: Possible DoS translating ASN.1 object identifiers'
-            },
-            {
-              'cve':  'CVE-2023-3446',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L'
-                },
-                'redhat': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L'
-                }
-              },
-              'cwes': [
-                'CWE-606',
-                'CWE-1333'
-              ],
-              'description':   "Issue summary: Checking excessively long DH keys or parameters may be very slow.\n\nImpact summary: Applications that use the functions DH_check(), DH_check_ex()\nor EVP_PKEY_param_check() to check a DH key or DH parameters may experience long\ndelays. Where the key or parameters that are being checked have been obtained\nfrom an untrusted source this may lead to a Denial of Service.\n\nThe function DH_check() performs various checks on DH parameters. One of those\nchecks confirms that the modulus ('p' parameter) is not too large. Trying to use\na very large modulus is slow and OpenSSL will not normally use a modulus which\nis over 10,000 bits in length.\n\nHowever the DH_check() function checks numerous aspects of the key or parameters\nthat have been supplied. Some of those checks use the supplied modulus value\neven if it has already been found to be too large.\n\nAn application that calls DH_check() and supplies a key or parameters obtained\nfrom an untrusted source could be vulernable to a Denial of Service attack.\n\nThe function DH_check() is itself called by a number of other OpenSSL functions.\nAn application calling any of those other functions may similarly be affected.\nThe other functions affected by this are DH_check_ex() and\nEVP_PKEY_param_check().\n\nAlso vulnerable are the OpenSSL dhparam and pkeyparam command line applications\nwhen using the '-check' option.\n\nThe OpenSSL SSL/TLS implementation is not affected by this issue.\nThe OpenSSL 3.0 and 3.1 FIPS providers are not affected by this issue.",
-              'diffID':        'sha256:a1c01e366b99afb656cec4b16561b6ab299fa471011b4414826407af3a5884f8',
-              'fixedVersions': [
-                '1.1.1u-r2'
-              ],
-              'installedVersion': '1.1.1n-r0',
-              'packageName':      'libssl1.1',
-              'purl':             'pkg:apk/alpine/libssl1.1@1.1.1n-r0?arch=x86_64&distro=3.15.3',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2023/07/19/4',
-                'http://www.openwall.com/lists/oss-security/2023/07/19/5',
-                'http://www.openwall.com/lists/oss-security/2023/07/19/6',
-                'http://www.openwall.com/lists/oss-security/2023/07/31/1',
-                'http://www.openwall.com/lists/oss-security/2024/05/16/1',
-                'https://access.redhat.com/errata/RHSA-2024:2447',
-                'https://access.redhat.com/security/cve/CVE-2023-3446',
-                'https://bugzilla.redhat.com/2223016',
-                'https://bugzilla.redhat.com/2224962',
-                'https://bugzilla.redhat.com/2227852',
-                'https://bugzilla.redhat.com/2248616',
-                'https://bugzilla.redhat.com/2257571',
-                'https://bugzilla.redhat.com/2258502',
-                'https://bugzilla.redhat.com/2259944',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2224962',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2257582',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2257583',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2258677',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2258688',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2258691',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2258694',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2258700',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-36763',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-36764',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3446',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45229',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45231',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45232',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45233',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45235',
-                'https://errata.almalinux.org/9/ALSA-2024-2447.html',
-                'https://errata.rockylinux.org/RLSA-2024:2264',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=1fa20cf2f506113c761777127a38bce5068740eb',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=8780a896543a654e757db1b9396383f9d8095528',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=9a0a4d3c1e7138915563c0df4fe6a3f9377b839c',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=fc9867c1e03c22ebf56943be205202e576aabf23',
-                'https://linux.oracle.com/cve/CVE-2023-3446.html',
-                'https://linux.oracle.com/errata/ELSA-2024-2447.html',
-                'https://lists.debian.org/debian-lts-announce/2023/08/msg00019.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-3446',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://security.netapp.com/advisory/ntap-20230803-0011/',
-                'https://ubuntu.com/security/notices/USN-6435-1',
-                'https://ubuntu.com/security/notices/USN-6435-2',
-                'https://ubuntu.com/security/notices/USN-6450-1',
-                'https://ubuntu.com/security/notices/USN-6709-1',
-                'https://ubuntu.com/security/notices/USN-7018-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-3446',
-                'https://www.openssl.org/news/secadv/20230719.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: Excessive time spent checking DH keys and parameters'
-            },
-            {
-              'cve':  'CVE-2023-3817',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L'
-                },
-                'redhat': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L'
-                }
-              },
-              'cwes': [
-                'CWE-606',
-                'CWE-834'
-              ],
-              'description':   'Issue summary: Checking excessively long DH keys or parameters may be very slow.\n\nImpact summary: Applications that use the functions DH_check(), DH_check_ex()\nor EVP_PKEY_param_check() to check a DH key or DH parameters may experience long\ndelays. Where the key or parameters that are being checked have been obtained\nfrom an untrusted source this may lead to a Denial of Service.\n\nThe function DH_check() performs various checks on DH parameters. After fixing\nCVE-2023-3446 it was discovered that a large q parameter value can also trigger\nan overly long computation during some of these checks. A correct q value,\nif present, cannot be larger than the modulus p parameter, thus it is\nunnecessary to perform these checks if q is larger than p.\n\nAn application that calls DH_check() and supplies a key or parameters obtained\nfrom an untrusted source could be vulnerable to a Denial of Service attack.\n\nThe function DH_check() is itself called by a number of other OpenSSL functions.\nAn application calling any of those other functions may similarly be affected.\nThe other functions affected by this are DH_check_ex() and\nEVP_PKEY_param_check().\n\nAlso vulnerable are the OpenSSL dhparam and pkeyparam command line applications\nwhen using the "-check" option.\n\nThe OpenSSL SSL/TLS implementation is not affected by this issue.\n\nThe OpenSSL 3.0 and 3.1 FIPS providers are not affected by this issue.',
-              'diffID':        'sha256:a1c01e366b99afb656cec4b16561b6ab299fa471011b4414826407af3a5884f8',
-              'fixedVersions': [
-                '1.1.1v-r0'
-              ],
-              'installedVersion': '1.1.1n-r0',
-              'packageName':      'libssl1.1',
-              'purl':             'pkg:apk/alpine/libssl1.1@1.1.1n-r0?arch=x86_64&distro=3.15.3',
-              'references':       [
-                'http://seclists.org/fulldisclosure/2023/Jul/43',
-                'http://www.openwall.com/lists/oss-security/2023/07/31/1',
-                'http://www.openwall.com/lists/oss-security/2023/09/22/11',
-                'http://www.openwall.com/lists/oss-security/2023/09/22/9',
-                'http://www.openwall.com/lists/oss-security/2023/11/06/2',
-                'https://access.redhat.com/errata/RHSA-2024:2447',
-                'https://access.redhat.com/security/cve/CVE-2023-3817',
-                'https://bugzilla.redhat.com/2223016',
-                'https://bugzilla.redhat.com/2224962',
-                'https://bugzilla.redhat.com/2227852',
-                'https://bugzilla.redhat.com/2248616',
-                'https://bugzilla.redhat.com/2257571',
-                'https://bugzilla.redhat.com/2258502',
-                'https://bugzilla.redhat.com/2259944',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2224962',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2227852',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2248616',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2270358',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3446',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3817',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-5678',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-2408',
-                'https://errata.almalinux.org/9/ALSA-2024-2447.html',
-                'https://errata.rockylinux.org/RLSA-2023:7877',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=6a1eb62c29db6cb5eec707f9338aee00f44e26f5',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=869ad69aadd985c7b8ca6f4e5dd0eb274c9f3644',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=9002fd07327a91f35ba6c1307e71fa6fd4409b7f',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=91ddeba0f2269b017dc06c46c993a788974b1aa5',
-                'https://linux.oracle.com/cve/CVE-2023-3817.html',
-                'https://linux.oracle.com/errata/ELSA-2024-2447.html',
-                'https://lists.debian.org/debian-lts-announce/2023/08/msg00019.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-3817',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://security.netapp.com/advisory/ntap-20230818-0014/',
-                'https://security.netapp.com/advisory/ntap-20231027-0008/',
-                'https://security.netapp.com/advisory/ntap-20240621-0006/',
-                'https://ubuntu.com/security/notices/USN-6435-1',
-                'https://ubuntu.com/security/notices/USN-6435-2',
-                'https://ubuntu.com/security/notices/USN-6450-1',
-                'https://ubuntu.com/security/notices/USN-6709-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-3817',
-                'https://www.openssl.org/news/secadv/20230731.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'OpenSSL: Excessive time spent checking DH q parameter value'
-            },
-            {
-              'cve':  'CVE-2023-5678',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L'
-                },
-                'redhat': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L'
-                }
-              },
-              'cwes': [
-                'CWE-606',
-                'CWE-754'
-              ],
-              'description':   "Issue summary: Generating excessively long X9.42 DH keys or checking\nexcessively long X9.42 DH keys or parameters may be very slow.\n\nImpact summary: Applications that use the functions DH_generate_key() to\ngenerate an X9.42 DH key may experience long delays.  Likewise, applications\nthat use DH_check_pub_key(), DH_check_pub_key_ex() or EVP_PKEY_public_check()\nto check an X9.42 DH key or X9.42 DH parameters may experience long delays.\nWhere the key or parameters that are being checked have been obtained from\nan untrusted source this may lead to a Denial of Service.\n\nWhile DH_check() performs all the necessary checks (as of CVE-2023-3817),\nDH_check_pub_key() doesn't make any of these checks, and is therefore\nvulnerable for excessively large P and Q parameters.\n\nLikewise, while DH_generate_key() performs a check for an excessively large\nP, it doesn't check for an excessively large Q.\n\nAn application that calls DH_generate_key() or DH_check_pub_key() and\nsupplies a key or parameters obtained from an untrusted source could be\nvulnerable to a Denial of Service attack.\n\nDH_generate_key() and DH_check_pub_key() are also called by a number of\nother OpenSSL functions.  An application calling any of those other\nfunctions may similarly be affected.  The other functions affected by this\nare DH_check_pub_key_ex(), EVP_PKEY_public_check(), and EVP_PKEY_generate().\n\nAlso vulnerable are the OpenSSL pkey command line application when using the\n\"-pubcheck\" option, as well as the OpenSSL genpkey command line application.\n\nThe OpenSSL SSL/TLS implementation is not affected by this issue.\n\nThe OpenSSL 3.0 and 3.1 FIPS providers are not affected by this issue.",
-              'diffID':        'sha256:a1c01e366b99afb656cec4b16561b6ab299fa471011b4414826407af3a5884f8',
-              'fixedVersions': [
-                '1.1.1w-r1'
-              ],
-              'installedVersion': '1.1.1n-r0',
-              'packageName':      'libssl1.1',
-              'purl':             'pkg:apk/alpine/libssl1.1@1.1.1n-r0?arch=x86_64&distro=3.15.3',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2024/03/11/1',
-                'https://access.redhat.com/errata/RHSA-2024:2447',
-                'https://access.redhat.com/security/cve/CVE-2023-5678',
-                'https://bugzilla.redhat.com/2223016',
-                'https://bugzilla.redhat.com/2224962',
-                'https://bugzilla.redhat.com/2227852',
-                'https://bugzilla.redhat.com/2248616',
-                'https://bugzilla.redhat.com/2257571',
-                'https://bugzilla.redhat.com/2258502',
-                'https://bugzilla.redhat.com/2259944',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2224962',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2227852',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2248616',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2270358',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3446',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3817',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-5678',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-2408',
-                'https://errata.almalinux.org/9/ALSA-2024-2447.html',
-                'https://errata.rockylinux.org/RLSA-2023:7877',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=34efaef6c103d636ab507a0cc34dca4d3aecc055',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=710fee740904b6290fef0dd5536fbcedbc38ff0c',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=db925ae2e65d0d925adef429afc37f75bd1c2017',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=ddeb4b6c6d527e54ce9a99cba785c0f7776e54b6',
-                'https://linux.oracle.com/cve/CVE-2023-5678.html',
-                'https://linux.oracle.com/errata/ELSA-2024-2447.html',
-                'https://lists.debian.org/debian-lts-announce/2024/10/msg00033.html',
-                'https://lists.debian.org/debian-lts-announce/2024/11/msg00000.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-5678',
-                'https://security.netapp.com/advisory/ntap-20231130-0010/',
-                'https://ubuntu.com/security/notices/USN-6622-1',
-                'https://ubuntu.com/security/notices/USN-6632-1',
-                'https://ubuntu.com/security/notices/USN-6709-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-5678',
-                'https://www.openssl.org/news/secadv/20231106.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: Generating excessively long X9.42 DH keys or checking excessively long X9.42 DH keys or parameters may be very slow'
-            },
-            {
-              'cve':  'CVE-2022-28391',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '8.8',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-88'
-              ],
-              'description':   "BusyBox through 1.35.0 allows remote attackers to execute arbitrary code if netstat is used to print a DNS PTR record's value to a VT compatible terminal. Alternatively, the attacker could choose to change the terminal's colors.",
-              'diffID':        'sha256:a1c01e366b99afb656cec4b16561b6ab299fa471011b4414826407af3a5884f8',
-              'fixedVersions': [
-                '1.34.1-r5'
-              ],
-              'installedVersion': '1.34.1-r4',
-              'packageName':      'ssl_client',
-              'purl':             'pkg:apk/alpine/ssl_client@1.34.1-r4?arch=x86_64&distro=3.15.3',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2022-28391',
-                'https://git.alpinelinux.org/aports/plain/main/busybox/0001-libbb-sockaddr2str-ensure-only-printable-characters-.patch',
-                'https://git.alpinelinux.org/aports/plain/main/busybox/0002-nslookup-sanitize-all-printed-strings-with-printable.patch',
-                'https://gitlab.alpinelinux.org/alpine/aports/-/issues/13661',
-                'https://nvd.nist.gov/vuln/detail/CVE-2022-28391',
-                'https://www.cve.org/CVERecord?id=CVE-2022-28391'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: remote attackers may execute arbitrary code if netstat is used'
-            },
-            {
-              'cve':  'CVE-2022-37434',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '9.8',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-787',
-                'CWE-120'
-              ],
-              'description':   'zlib through 1.2.12 has a heap-based buffer over-read or buffer overflow in inflate in inflate.c via a large gzip header extra field. NOTE: only applications that call inflateGetHeader are affected. Some common applications bundle the affected zlib source code but may be unable to call inflateGetHeader (e.g., see the nodejs/node reference).',
-              'diffID':        'sha256:a1c01e366b99afb656cec4b16561b6ab299fa471011b4414826407af3a5884f8',
-              'fixedVersions': [
-                '1.2.12-r2'
-              ],
-              'installedVersion': '1.2.12-r0',
-              'packageName':      'zlib',
-              'purl':             'pkg:apk/alpine/zlib@1.2.12-r0?arch=x86_64&distro=3.15.3',
-              'references':       [
-                'http://seclists.org/fulldisclosure/2022/Oct/37',
-                'http://seclists.org/fulldisclosure/2022/Oct/38',
-                'http://seclists.org/fulldisclosure/2022/Oct/41',
-                'http://seclists.org/fulldisclosure/2022/Oct/42',
-                'http://www.openwall.com/lists/oss-security/2022/08/05/2',
-                'http://www.openwall.com/lists/oss-security/2022/08/09/1',
-                'https://access.redhat.com/errata/RHSA-2022:8291',
-                'https://access.redhat.com/security/cve/CVE-2022-37434',
-                'https://bugzilla.redhat.com/2116639',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2053198',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2077431',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2081296',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2116639',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-37434',
-                'https://errata.almalinux.org/9/ALSA-2022-8291.html',
-                'https://errata.rockylinux.org/RLSA-2022:8291',
-                'https://github.com/curl/curl/issues/9271',
-                'https://github.com/ivd38/zlib_overflow',
-                'https://github.com/madler/zlib/blob/21767c654d31d2dccdde4330529775c6c5fd5389/zlib.h#L1062-L1063',
-                'https://github.com/madler/zlib/commit/1eb7682f845ac9e9bf9ae35bbfb3bad5dacbd91d',
-                'https://github.com/madler/zlib/commit/eff308af425b67093bab25f80f1ae950166bece1',
-                'https://github.com/nodejs/node/blob/75b68c6e4db515f76df73af476eccf382bbcb00a/deps/zlib/inflate.c#L762-L764',
-                'https://linux.oracle.com/cve/CVE-2022-37434.html',
-                'https://linux.oracle.com/errata/ELSA-2023-1095.html',
-                'https://lists.debian.org/debian-lts-announce/2022/09/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JWN4VE3JQR4O2SOUS5TXNLANRPMHWV4I/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NMBOJ77A7T7PQCARMDUK75TE6LLESZ3O/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PAVPQNCG3XRLCLNSQRM3KAN5ZFMVXVTY/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/X5U7OTKZSHY2I3ZFJSR2SHFHW72RKGDK/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YRQAI7H4M4RQZ2IWZUEEXECBE5D56BH2/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2022-37434',
-                'https://security.netapp.com/advisory/ntap-20220901-0005/',
-                'https://security.netapp.com/advisory/ntap-20230427-0007/',
-                'https://support.apple.com/kb/HT213488',
-                'https://support.apple.com/kb/HT213489',
-                'https://support.apple.com/kb/HT213490',
-                'https://support.apple.com/kb/HT213491',
-                'https://support.apple.com/kb/HT213493',
-                'https://support.apple.com/kb/HT213494',
-                'https://ubuntu.com/security/notices/USN-5570-1',
-                'https://ubuntu.com/security/notices/USN-5570-2',
-                'https://ubuntu.com/security/notices/USN-5573-1',
-                'https://ubuntu.com/security/notices/USN-6736-1',
-                'https://ubuntu.com/security/notices/USN-6736-2',
-                'https://www.cve.org/CVERecord?id=CVE-2022-37434',
-                'https://www.debian.org/security/2022/dsa-5218'
-              ],
-              'severity':   'CRITICAL',
-              'suppressed': false,
-              'title':      'zlib: heap-based buffer over-read and overflow in inflate() in inflate.c via a large gzip header extra field'
-            }
-          ]
-        }
-      ],
-      'summary': {
-        'critical':   1,
-        'high':       10,
-        'low':        0,
-        'medium':     14,
-        'suppressed': 0,
-        'unknown':    0
-      }
-    }
-  },
-  {
-    'id':    'default/f3080a453be42c82a8ce5f7ea1e3478828b8bbbf688ae971ca54e6561ee48e68',
-    'type':  'storage.sbomscanner.kubewarden.io.vulnerabilityreport',
-    'links': {
-      'patch':  'https://localhost:8005/v1/storage.sbomscanner.kubewarden.io.vulnerabilityreports/default/f3080a453be42c82a8ce5f7ea1e3478828b8bbbf688ae971ca54e6561ee48e68',
-      'remove': 'https://localhost:8005/v1/storage.sbomscanner.kubewarden.io.vulnerabilityreports/default/f3080a453be42c82a8ce5f7ea1e3478828b8bbbf688ae971ca54e6561ee48e68',
-      'self':   'https://localhost:8005/v1/storage.sbomscanner.kubewarden.io.vulnerabilityreports/default/f3080a453be42c82a8ce5f7ea1e3478828b8bbbf688ae971ca54e6561ee48e68',
-      'update': 'https://localhost:8005/v1/storage.sbomscanner.kubewarden.io.vulnerabilityreports/default/f3080a453be42c82a8ce5f7ea1e3478828b8bbbf688ae971ca54e6561ee48e68',
-      'view':   'https://localhost:8005/apis/storage.sbomscanner.kubewarden.io/v1alpha1/namespaces/default/vulnerabilityreports/f3080a453be42c82a8ce5f7ea1e3478828b8bbbf688ae971ca54e6561ee48e68'
-    },
-    'apiVersion':    'storage.sbomscanner.kubewarden.io/v1alpha1',
-    'imageMetadata': {
-      'digest':      'sha256:1c4eef651f65e2f7daee7ee785882ac164b02b78fb74503052a26dc061c90474',
-      'platform':    'linux/amd64',
-      'registry':    'lsong-demo1',
-      'registryURI': 'registry-1.docker.io',
-      'repository':  'library/alpine',
-      'tag':         '3.21.3'
-    },
-    'kind':     'VulnerabilityReport',
-    'metadata': {
-      'creationTimestamp': '2026-01-14T18:51:37Z',
-      'fields':            [
-        'f3080a453be42c82a8ce5f7ea1e3478828b8bbbf688ae971ca54e6561ee48e68',
-        'registry-1.docker.io/library/alpine:3.21.3',
-        'linux/amd64',
-        '12 (0 suppressed)'
-      ],
-      'labels': {
-        'app.kubernetes.io/managed-by':          'sbomscanner',
-        'app.kubernetes.io/part-of':             'sbomscanner',
-        'sbomscanner.kubewarden.io/scanjob-uid': '445c600a-c4b6-40b3-bd71-f2d2140a37d5'
-      },
-      'name':            'f3080a453be42c82a8ce5f7ea1e3478828b8bbbf688ae971ca54e6561ee48e68',
-      'namespace':       'default',
-      'ownerReferences': [
-        {
-          'apiVersion':         'storage.sbomscanner.kubewarden.io/v1alpha1',
-          'blockOwnerDeletion': true,
-          'controller':         true,
-          'kind':               'SBOM',
-          'name':               'f3080a453be42c82a8ce5f7ea1e3478828b8bbbf688ae971ca54e6561ee48e68',
-          'uid':                'd3586cf0-066b-490d-8642-0adfd81f7337'
-        }
-      ],
-      'relationships': [
-        {
-          'fromId':   'default/f3080a453be42c82a8ce5f7ea1e3478828b8bbbf688ae971ca54e6561ee48e68',
-          'fromType': 'storage.sbomscanner.kubewarden.io.sbom',
-          'rel':      'owner',
-          'state':    'active',
-          'message':  'Resource is current'
-        }
-      ],
-      'resourceVersion': '1',
-      'state':           {
-        'error':         false,
-        'message':       'Resource is current',
-        'name':          'active',
-        'transitioning': false
-      },
-      'uid': 'e9001dd2-9922-4947-b0f5-abf7c12661a0'
-    },
-    'report': {
-      'results': [
-        {
-          'class':           'os-pkgs',
-          'target':          '/var/run/worker/trivy.sbom.3606249569.json (alpine 3.21.3)',
-          'type':            'alpine',
-          'vulnerabilities': [
-            {
-              'cve':  'CVE-2024-58251',
-              'cwes': [
-                'CWE-150'
-              ],
-              'description':   'In netstat in BusyBox through 1.37.0, local users can launch of network application with an argv[0] containing an ANSI terminal escape sequence, leading to a denial of service (terminal locked up) when netstat is used by a victim.',
-              'diffID':        'sha256:08000c18d16dadf9553d747a58cf44023423a9ab010aab96cf263d2216b8b350',
-              'fixedVersions': [
-                '1.37.0-r14'
-              ],
-              'installedVersion': '1.37.0-r12',
-              'packageName':      'busybox',
-              'purl':             'pkg:apk/alpine/busybox@1.37.0-r12?arch=x86_64&distro=3.21.3',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2025/04/23/6',
-                'https://bugs.busybox.net/show_bug.cgi?id=15922',
-                'https://www.busybox.net',
-                'https://www.busybox.net/downloads/',
-                'https://www.cve.org/CVERecord?id=CVE-2024-58251'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'In netstat in BusyBox through 1.37.0, local users can launch of networ ...'
-            },
-            {
-              'cve':  'CVE-2025-46394',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '3.3',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-451'
-              ],
-              'description':   'In tar in BusyBox through 1.37.0, a TAR archive can have filenames hidden from a listing through the use of terminal escape sequences.',
-              'diffID':        'sha256:08000c18d16dadf9553d747a58cf44023423a9ab010aab96cf263d2216b8b350',
-              'fixedVersions': [
-                '1.37.0-r14'
-              ],
-              'installedVersion': '1.37.0-r12',
-              'packageName':      'busybox',
-              'purl':             'pkg:apk/alpine/busybox@1.37.0-r12?arch=x86_64&distro=3.21.3',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2025/04/23/5',
-                'http://www.openwall.com/lists/oss-security/2025/04/24/3',
-                'https://bugs.busybox.net/show_bug.cgi?id=16018',
-                'https://lists.busybox.net/pipermail/busybox/2024-July/090806.html',
-                'https://lists.busybox.net/pipermail/busybox/2024-July/090814.html',
-                'https://www.busybox.net',
-                'https://www.busybox.net/downloads/',
-                'https://www.cve.org/CVERecord?id=CVE-2025-46394',
-                'https://www.openwall.com/lists/oss-security/2025/04/23/1'
-              ],
-              'severity':   'LOW',
-              'suppressed': false,
-              'title':      'In tar in BusyBox through 1.37.0, a TAR archive can have filenames hid ...'
-            },
-            {
-              'cve':  'CVE-2024-58251',
-              'cwes': [
-                'CWE-150'
-              ],
-              'description':   'In netstat in BusyBox through 1.37.0, local users can launch of network application with an argv[0] containing an ANSI terminal escape sequence, leading to a denial of service (terminal locked up) when netstat is used by a victim.',
-              'diffID':        'sha256:08000c18d16dadf9553d747a58cf44023423a9ab010aab96cf263d2216b8b350',
-              'fixedVersions': [
-                '1.37.0-r14'
-              ],
-              'installedVersion': '1.37.0-r12',
-              'packageName':      'busybox-binsh',
-              'purl':             'pkg:apk/alpine/busybox-binsh@1.37.0-r12?arch=x86_64&distro=3.21.3',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2025/04/23/6',
-                'https://bugs.busybox.net/show_bug.cgi?id=15922',
-                'https://www.busybox.net',
-                'https://www.busybox.net/downloads/',
-                'https://www.cve.org/CVERecord?id=CVE-2024-58251'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'In netstat in BusyBox through 1.37.0, local users can launch of networ ...'
-            },
-            {
-              'cve':  'CVE-2025-46394',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '3.3',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-451'
-              ],
-              'description':   'In tar in BusyBox through 1.37.0, a TAR archive can have filenames hidden from a listing through the use of terminal escape sequences.',
-              'diffID':        'sha256:08000c18d16dadf9553d747a58cf44023423a9ab010aab96cf263d2216b8b350',
-              'fixedVersions': [
-                '1.37.0-r14'
-              ],
-              'installedVersion': '1.37.0-r12',
-              'packageName':      'busybox-binsh',
-              'purl':             'pkg:apk/alpine/busybox-binsh@1.37.0-r12?arch=x86_64&distro=3.21.3',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2025/04/23/5',
-                'http://www.openwall.com/lists/oss-security/2025/04/24/3',
-                'https://bugs.busybox.net/show_bug.cgi?id=16018',
-                'https://lists.busybox.net/pipermail/busybox/2024-July/090806.html',
-                'https://lists.busybox.net/pipermail/busybox/2024-July/090814.html',
-                'https://www.busybox.net',
-                'https://www.busybox.net/downloads/',
-                'https://www.cve.org/CVERecord?id=CVE-2025-46394',
-                'https://www.openwall.com/lists/oss-security/2025/04/23/1'
-              ],
-              'severity':   'LOW',
-              'suppressed': false,
-              'title':      'In tar in BusyBox through 1.37.0, a TAR archive can have filenames hid ...'
-            },
-            {
-              'cve':  'CVE-2025-9230',
-              'cvss': {
-                'redhat': {
-                  'v3score':  '5.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L'
-                }
-              },
-              'cwes': [
-                'CWE-125',
-                'CWE-787'
-              ],
-              'description':   'Issue summary: An application trying to decrypt CMS messages encrypted using\npassword based encryption can trigger an out-of-bounds read and write.\n\nImpact summary: This out-of-bounds read may trigger a crash which leads to\nDenial of Service for an application. The out-of-bounds write can cause\na memory corruption which can have various consequences including\na Denial of Service or Execution of attacker-supplied code.\n\nAlthough the consequences of a successful exploit of this vulnerability\ncould be severe, the probability that the attacker would be able to\nperform it is low. Besides, password based (PWRI) encryption support in CMS\nmessages is very rarely used. For that reason the issue was assessed as\nModerate severity according to our Security Policy.\n\nThe FIPS modules in 3.5, 3.4, 3.3, 3.2, 3.1 and 3.0 are not affected by this\nissue, as the CMS implementation is outside the OpenSSL FIPS module\nboundary.',
-              'diffID':        'sha256:08000c18d16dadf9553d747a58cf44023423a9ab010aab96cf263d2216b8b350',
-              'fixedVersions': [
-                '3.3.5-r0'
-              ],
-              'installedVersion': '3.3.3-r0',
-              'packageName':      'libcrypto3',
-              'purl':             'pkg:apk/alpine/libcrypto3@3.3.3-r0?arch=x86_64&distro=3.21.3',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2025/09/30/5',
-                'https://access.redhat.com/errata/RHSA-2025:21255',
-                'https://access.redhat.com/security/cve/CVE-2025-9230',
-                'https://bugzilla.redhat.com/2396054',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2396054',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-9230',
-                'https://errata.almalinux.org/9/ALSA-2025-21255.html',
-                'https://errata.rockylinux.org/RLSA-2025:21255',
-                'https://github.com/openssl/openssl/commit/5965ea5dd6960f36d8b7f74f8eac67a8eb8f2b45',
-                'https://github.com/openssl/openssl/commit/9e91358f365dee6c446dcdcdb01c04d2743fd280',
-                'https://github.com/openssl/openssl/commit/a79c4ce559c6a3a8fd4109e9f33c1185d5bf2def',
-                'https://github.com/openssl/openssl/commit/b5282d677551afda7d20e9c00e09561b547b2dfd',
-                'https://github.com/openssl/openssl/commit/bae259a211ada6315dc50900686daaaaaa55f482',
-                'https://github.openssl.org/openssl/extended-releases/commit/c2b96348bfa662f25f4fabf81958ae822063dae3',
-                'https://github.openssl.org/openssl/extended-releases/commit/dfbaf161d8dafc1132dd88cd48ad990ed9b4c8ba',
-                'https://linux.oracle.com/cve/CVE-2025-9230.html',
-                'https://linux.oracle.com/errata/ELSA-2026-0337.html',
-                'https://lists.debian.org/debian-lts-announce/2025/10/msg00001.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2025-9230',
-                'https://openssl-library.org/news/secadv/20250930.txt',
-                'https://ubuntu.com/security/notices/USN-7786-1',
-                'https://www.cve.org/CVERecord?id=CVE-2025-9230'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: Out-of-bounds read & write in RFC 3211 KEK Unwrap'
-            },
-            {
-              'cve':  'CVE-2025-9231',
-              'cvss': {
-                'redhat': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-385'
-              ],
-              'description':   'Issue summary: A timing side-channel which could potentially allow remote\nrecovery of the private key exists in the SM2 algorithm implementation on 64 bit\nARM platforms.\n\nImpact summary: A timing side-channel in SM2 signature computations on 64 bit\nARM platforms could allow recovering the private key by an attacker..\n\nWhile remote key recovery over a network was not attempted by the reporter,\ntiming measurements revealed a timing signal which may allow such an attack.\n\nOpenSSL does not directly support certificates with SM2 keys in TLS, and so\nthis CVE is not relevant in most TLS contexts.  However, given that it is\npossible to add support for such certificates via a custom provider, coupled\nwith the fact that in such a custom provider context the private key may be\nrecoverable via remote timing measurements, we consider this to be a Moderate\nseverity issue.\n\nThe FIPS modules in 3.5, 3.4, 3.3, 3.2, 3.1 and 3.0 are not affected by this\nissue, as SM2 is not an approved algorithm.',
-              'diffID':        'sha256:08000c18d16dadf9553d747a58cf44023423a9ab010aab96cf263d2216b8b350',
-              'fixedVersions': [
-                '3.3.5-r0'
-              ],
-              'installedVersion': '3.3.3-r0',
-              'packageName':      'libcrypto3',
-              'purl':             'pkg:apk/alpine/libcrypto3@3.3.3-r0?arch=x86_64&distro=3.21.3',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2025/09/30/5',
-                'https://access.redhat.com/security/cve/CVE-2025-9231',
-                'https://github.com/openssl/openssl/commit/567f64386e43683888212226824b6a179885a0fe',
-                'https://github.com/openssl/openssl/commit/cba616c26ac8e7b37de5e77762e505ba5ca51698',
-                'https://github.com/openssl/openssl/commit/eed5adc9f969d77c94f213767acbb41ff923b6f4',
-                'https://github.com/openssl/openssl/commit/fc47a2ec078912b3e914fab5734535e76c4820c2',
-                'https://nvd.nist.gov/vuln/detail/CVE-2025-9231',
-                'https://openssl-library.org/news/secadv/20250930.txt',
-                'https://ubuntu.com/security/notices/USN-7786-1',
-                'https://www.cve.org/CVERecord?id=CVE-2025-9231'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: Timing side-channel in SM2 algorithm on 64 bit ARM'
-            },
-            {
-              'cve':  'CVE-2025-9232',
-              'cvss': {
-                'redhat': {
-                  'v3score':  '3.1',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L'
-                }
-              },
-              'cwes': [
-                'CWE-125'
-              ],
-              'description':   "Issue summary: An application using the OpenSSL HTTP client API functions may\ntrigger an out-of-bounds read if the 'no_proxy' environment variable is set and\nthe host portion of the authority component of the HTTP URL is an IPv6 address.\n\nImpact summary: An out-of-bounds read can trigger a crash which leads to\nDenial of Service for an application.\n\nThe OpenSSL HTTP client API functions can be used directly by applications\nbut they are also used by the OCSP client functions and CMP (Certificate\nManagement Protocol) client implementation in OpenSSL. However the URLs used\nby these implementations are unlikely to be controlled by an attacker.\n\nIn this vulnerable code the out of bounds read can only trigger a crash.\nFurthermore the vulnerability requires an attacker-controlled URL to be\npassed from an application to the OpenSSL function and the user has to have\na 'no_proxy' environment variable set. For the aforementioned reasons the\nissue was assessed as Low severity.\n\nThe vulnerable code was introduced in the following patch releases:\n3.0.16, 3.1.8, 3.2.4, 3.3.3, 3.4.0 and 3.5.0.\n\nThe FIPS modules in 3.5, 3.4, 3.3, 3.2, 3.1 and 3.0 are not affected by this\nissue, as the HTTP client implementation is outside the OpenSSL FIPS module\nboundary.",
-              'diffID':        'sha256:08000c18d16dadf9553d747a58cf44023423a9ab010aab96cf263d2216b8b350',
-              'fixedVersions': [
-                '3.3.5-r0'
-              ],
-              'installedVersion': '3.3.3-r0',
-              'packageName':      'libcrypto3',
-              'purl':             'pkg:apk/alpine/libcrypto3@3.3.3-r0?arch=x86_64&distro=3.21.3',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2025/09/30/5',
-                'https://access.redhat.com/security/cve/CVE-2025-9232',
-                'https://github.com/openssl/openssl/commit/2b4ec20e47959170422922eaff25346d362dcb35',
-                'https://github.com/openssl/openssl/commit/654dc11d23468a74fc8ea4672b702dd3feb7be4b',
-                'https://github.com/openssl/openssl/commit/7cf21a30513c9e43c4bc3836c237cf086e194af3',
-                'https://github.com/openssl/openssl/commit/89e790ac431125a4849992858490bed6b225eadf',
-                'https://github.com/openssl/openssl/commit/bbf38c034cdabd0a13330abcc4855c866f53d2e0',
-                'https://nvd.nist.gov/vuln/detail/CVE-2025-9232',
-                'https://openssl-library.org/news/secadv/20250930.txt',
-                'https://ubuntu.com/security/notices/USN-7786-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2025-9232'
-              ],
-              'severity':   'LOW',
-              'suppressed': false,
-              'title':      'openssl: Out-of-bounds read in HTTP client no_proxy handling'
-            },
-            {
-              'cve':  'CVE-2025-9230',
-              'cvss': {
-                'redhat': {
-                  'v3score':  '5.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L'
-                }
-              },
-              'cwes': [
-                'CWE-125',
-                'CWE-787'
-              ],
-              'description':   'Issue summary: An application trying to decrypt CMS messages encrypted using\npassword based encryption can trigger an out-of-bounds read and write.\n\nImpact summary: This out-of-bounds read may trigger a crash which leads to\nDenial of Service for an application. The out-of-bounds write can cause\na memory corruption which can have various consequences including\na Denial of Service or Execution of attacker-supplied code.\n\nAlthough the consequences of a successful exploit of this vulnerability\ncould be severe, the probability that the attacker would be able to\nperform it is low. Besides, password based (PWRI) encryption support in CMS\nmessages is very rarely used. For that reason the issue was assessed as\nModerate severity according to our Security Policy.\n\nThe FIPS modules in 3.5, 3.4, 3.3, 3.2, 3.1 and 3.0 are not affected by this\nissue, as the CMS implementation is outside the OpenSSL FIPS module\nboundary.',
-              'diffID':        'sha256:08000c18d16dadf9553d747a58cf44023423a9ab010aab96cf263d2216b8b350',
-              'fixedVersions': [
-                '3.3.5-r0'
-              ],
-              'installedVersion': '3.3.3-r0',
-              'packageName':      'libssl3',
-              'purl':             'pkg:apk/alpine/libssl3@3.3.3-r0?arch=x86_64&distro=3.21.3',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2025/09/30/5',
-                'https://access.redhat.com/errata/RHSA-2025:21255',
-                'https://access.redhat.com/security/cve/CVE-2025-9230',
-                'https://bugzilla.redhat.com/2396054',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2396054',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-9230',
-                'https://errata.almalinux.org/9/ALSA-2025-21255.html',
-                'https://errata.rockylinux.org/RLSA-2025:21255',
-                'https://github.com/openssl/openssl/commit/5965ea5dd6960f36d8b7f74f8eac67a8eb8f2b45',
-                'https://github.com/openssl/openssl/commit/9e91358f365dee6c446dcdcdb01c04d2743fd280',
-                'https://github.com/openssl/openssl/commit/a79c4ce559c6a3a8fd4109e9f33c1185d5bf2def',
-                'https://github.com/openssl/openssl/commit/b5282d677551afda7d20e9c00e09561b547b2dfd',
-                'https://github.com/openssl/openssl/commit/bae259a211ada6315dc50900686daaaaaa55f482',
-                'https://github.openssl.org/openssl/extended-releases/commit/c2b96348bfa662f25f4fabf81958ae822063dae3',
-                'https://github.openssl.org/openssl/extended-releases/commit/dfbaf161d8dafc1132dd88cd48ad990ed9b4c8ba',
-                'https://linux.oracle.com/cve/CVE-2025-9230.html',
-                'https://linux.oracle.com/errata/ELSA-2026-0337.html',
-                'https://lists.debian.org/debian-lts-announce/2025/10/msg00001.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2025-9230',
-                'https://openssl-library.org/news/secadv/20250930.txt',
-                'https://ubuntu.com/security/notices/USN-7786-1',
-                'https://www.cve.org/CVERecord?id=CVE-2025-9230'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: Out-of-bounds read & write in RFC 3211 KEK Unwrap'
-            },
-            {
-              'cve':  'CVE-2025-9231',
-              'cvss': {
-                'redhat': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-385'
-              ],
-              'description':   'Issue summary: A timing side-channel which could potentially allow remote\nrecovery of the private key exists in the SM2 algorithm implementation on 64 bit\nARM platforms.\n\nImpact summary: A timing side-channel in SM2 signature computations on 64 bit\nARM platforms could allow recovering the private key by an attacker..\n\nWhile remote key recovery over a network was not attempted by the reporter,\ntiming measurements revealed a timing signal which may allow such an attack.\n\nOpenSSL does not directly support certificates with SM2 keys in TLS, and so\nthis CVE is not relevant in most TLS contexts.  However, given that it is\npossible to add support for such certificates via a custom provider, coupled\nwith the fact that in such a custom provider context the private key may be\nrecoverable via remote timing measurements, we consider this to be a Moderate\nseverity issue.\n\nThe FIPS modules in 3.5, 3.4, 3.3, 3.2, 3.1 and 3.0 are not affected by this\nissue, as SM2 is not an approved algorithm.',
-              'diffID':        'sha256:08000c18d16dadf9553d747a58cf44023423a9ab010aab96cf263d2216b8b350',
-              'fixedVersions': [
-                '3.3.5-r0'
-              ],
-              'installedVersion': '3.3.3-r0',
-              'packageName':      'libssl3',
-              'purl':             'pkg:apk/alpine/libssl3@3.3.3-r0?arch=x86_64&distro=3.21.3',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2025/09/30/5',
-                'https://access.redhat.com/security/cve/CVE-2025-9231',
-                'https://github.com/openssl/openssl/commit/567f64386e43683888212226824b6a179885a0fe',
-                'https://github.com/openssl/openssl/commit/cba616c26ac8e7b37de5e77762e505ba5ca51698',
-                'https://github.com/openssl/openssl/commit/eed5adc9f969d77c94f213767acbb41ff923b6f4',
-                'https://github.com/openssl/openssl/commit/fc47a2ec078912b3e914fab5734535e76c4820c2',
-                'https://nvd.nist.gov/vuln/detail/CVE-2025-9231',
-                'https://openssl-library.org/news/secadv/20250930.txt',
-                'https://ubuntu.com/security/notices/USN-7786-1',
-                'https://www.cve.org/CVERecord?id=CVE-2025-9231'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: Timing side-channel in SM2 algorithm on 64 bit ARM'
-            },
-            {
-              'cve':  'CVE-2025-9232',
-              'cvss': {
-                'redhat': {
-                  'v3score':  '3.1',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L'
-                }
-              },
-              'cwes': [
-                'CWE-125'
-              ],
-              'description':   "Issue summary: An application using the OpenSSL HTTP client API functions may\ntrigger an out-of-bounds read if the 'no_proxy' environment variable is set and\nthe host portion of the authority component of the HTTP URL is an IPv6 address.\n\nImpact summary: An out-of-bounds read can trigger a crash which leads to\nDenial of Service for an application.\n\nThe OpenSSL HTTP client API functions can be used directly by applications\nbut they are also used by the OCSP client functions and CMP (Certificate\nManagement Protocol) client implementation in OpenSSL. However the URLs used\nby these implementations are unlikely to be controlled by an attacker.\n\nIn this vulnerable code the out of bounds read can only trigger a crash.\nFurthermore the vulnerability requires an attacker-controlled URL to be\npassed from an application to the OpenSSL function and the user has to have\na 'no_proxy' environment variable set. For the aforementioned reasons the\nissue was assessed as Low severity.\n\nThe vulnerable code was introduced in the following patch releases:\n3.0.16, 3.1.8, 3.2.4, 3.3.3, 3.4.0 and 3.5.0.\n\nThe FIPS modules in 3.5, 3.4, 3.3, 3.2, 3.1 and 3.0 are not affected by this\nissue, as the HTTP client implementation is outside the OpenSSL FIPS module\nboundary.",
-              'diffID':        'sha256:08000c18d16dadf9553d747a58cf44023423a9ab010aab96cf263d2216b8b350',
-              'fixedVersions': [
-                '3.3.5-r0'
-              ],
-              'installedVersion': '3.3.3-r0',
-              'packageName':      'libssl3',
-              'purl':             'pkg:apk/alpine/libssl3@3.3.3-r0?arch=x86_64&distro=3.21.3',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2025/09/30/5',
-                'https://access.redhat.com/security/cve/CVE-2025-9232',
-                'https://github.com/openssl/openssl/commit/2b4ec20e47959170422922eaff25346d362dcb35',
-                'https://github.com/openssl/openssl/commit/654dc11d23468a74fc8ea4672b702dd3feb7be4b',
-                'https://github.com/openssl/openssl/commit/7cf21a30513c9e43c4bc3836c237cf086e194af3',
-                'https://github.com/openssl/openssl/commit/89e790ac431125a4849992858490bed6b225eadf',
-                'https://github.com/openssl/openssl/commit/bbf38c034cdabd0a13330abcc4855c866f53d2e0',
-                'https://nvd.nist.gov/vuln/detail/CVE-2025-9232',
-                'https://openssl-library.org/news/secadv/20250930.txt',
-                'https://ubuntu.com/security/notices/USN-7786-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2025-9232'
-              ],
-              'severity':   'LOW',
-              'suppressed': false,
-              'title':      'openssl: Out-of-bounds read in HTTP client no_proxy handling'
-            },
-            {
-              'cve':  'CVE-2024-58251',
-              'cwes': [
-                'CWE-150'
-              ],
-              'description':   'In netstat in BusyBox through 1.37.0, local users can launch of network application with an argv[0] containing an ANSI terminal escape sequence, leading to a denial of service (terminal locked up) when netstat is used by a victim.',
-              'diffID':        'sha256:08000c18d16dadf9553d747a58cf44023423a9ab010aab96cf263d2216b8b350',
-              'fixedVersions': [
-                '1.37.0-r14'
-              ],
-              'installedVersion': '1.37.0-r12',
-              'packageName':      'ssl_client',
-              'purl':             'pkg:apk/alpine/ssl_client@1.37.0-r12?arch=x86_64&distro=3.21.3',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2025/04/23/6',
-                'https://bugs.busybox.net/show_bug.cgi?id=15922',
-                'https://www.busybox.net',
-                'https://www.busybox.net/downloads/',
-                'https://www.cve.org/CVERecord?id=CVE-2024-58251'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'In netstat in BusyBox through 1.37.0, local users can launch of networ ...'
-            },
-            {
-              'cve':  'CVE-2025-46394',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '3.3',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-451'
-              ],
-              'description':   'In tar in BusyBox through 1.37.0, a TAR archive can have filenames hidden from a listing through the use of terminal escape sequences.',
-              'diffID':        'sha256:08000c18d16dadf9553d747a58cf44023423a9ab010aab96cf263d2216b8b350',
-              'fixedVersions': [
-                '1.37.0-r14'
-              ],
-              'installedVersion': '1.37.0-r12',
-              'packageName':      'ssl_client',
-              'purl':             'pkg:apk/alpine/ssl_client@1.37.0-r12?arch=x86_64&distro=3.21.3',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2025/04/23/5',
-                'http://www.openwall.com/lists/oss-security/2025/04/24/3',
-                'https://bugs.busybox.net/show_bug.cgi?id=16018',
-                'https://lists.busybox.net/pipermail/busybox/2024-July/090806.html',
-                'https://lists.busybox.net/pipermail/busybox/2024-July/090814.html',
-                'https://www.busybox.net',
-                'https://www.busybox.net/downloads/',
-                'https://www.cve.org/CVERecord?id=CVE-2025-46394',
-                'https://www.openwall.com/lists/oss-security/2025/04/23/1'
-              ],
-              'severity':   'LOW',
-              'suppressed': false,
-              'title':      'In tar in BusyBox through 1.37.0, a TAR archive can have filenames hid ...'
-            }
-          ]
-        }
-      ],
-      'summary': {
-        'critical':   0,
-        'high':       0,
-        'low':        5,
-        'medium':     7,
-        'suppressed': 0,
-        'unknown':    0
-      }
-    }
-  },
-  {
-    'id':    'default/f5da5a8fdcd991ee91a830adbd54c159f6a5d4a7ed9c84375e0d3c625d9ffe04',
-    'type':  'storage.sbomscanner.kubewarden.io.vulnerabilityreport',
-    'links': {
-      'patch':  'https://localhost:8005/v1/storage.sbomscanner.kubewarden.io.vulnerabilityreports/default/f5da5a8fdcd991ee91a830adbd54c159f6a5d4a7ed9c84375e0d3c625d9ffe04',
-      'remove': 'https://localhost:8005/v1/storage.sbomscanner.kubewarden.io.vulnerabilityreports/default/f5da5a8fdcd991ee91a830adbd54c159f6a5d4a7ed9c84375e0d3c625d9ffe04',
-      'self':   'https://localhost:8005/v1/storage.sbomscanner.kubewarden.io.vulnerabilityreports/default/f5da5a8fdcd991ee91a830adbd54c159f6a5d4a7ed9c84375e0d3c625d9ffe04',
-      'update': 'https://localhost:8005/v1/storage.sbomscanner.kubewarden.io.vulnerabilityreports/default/f5da5a8fdcd991ee91a830adbd54c159f6a5d4a7ed9c84375e0d3c625d9ffe04',
-      'view':   'https://localhost:8005/apis/storage.sbomscanner.kubewarden.io/v1alpha1/namespaces/default/vulnerabilityreports/f5da5a8fdcd991ee91a830adbd54c159f6a5d4a7ed9c84375e0d3c625d9ffe04'
-    },
-    'apiVersion':    'storage.sbomscanner.kubewarden.io/v1alpha1',
-    'imageMetadata': {
-      'digest':      'sha256:93d5a28ff72d288d69b5997b8ba47396d2cbb62a72b5d87cd3351094b5d578a0',
-      'platform':    'linux/amd64',
-      'registry':    'lsong-demo1',
-      'registryURI': 'registry-1.docker.io',
-      'repository':  'library/alpine',
-      'tag':         '3.17.1'
-    },
-    'kind':     'VulnerabilityReport',
-    'metadata': {
-      'creationTimestamp': '2026-01-14T18:51:33Z',
-      'fields':            [
-        'f5da5a8fdcd991ee91a830adbd54c159f6a5d4a7ed9c84375e0d3c625d9ffe04',
-        'registry-1.docker.io/library/alpine:3.17.1',
-        'linux/amd64',
-        '68 (0 suppressed)'
-      ],
-      'labels': {
-        'app.kubernetes.io/managed-by':          'sbomscanner',
-        'app.kubernetes.io/part-of':             'sbomscanner',
-        'sbomscanner.kubewarden.io/scanjob-uid': '445c600a-c4b6-40b3-bd71-f2d2140a37d5'
-      },
-      'name':            'f5da5a8fdcd991ee91a830adbd54c159f6a5d4a7ed9c84375e0d3c625d9ffe04',
-      'namespace':       'default',
-      'ownerReferences': [
-        {
-          'apiVersion':         'storage.sbomscanner.kubewarden.io/v1alpha1',
-          'blockOwnerDeletion': true,
-          'controller':         true,
-          'kind':               'SBOM',
-          'name':               'f5da5a8fdcd991ee91a830adbd54c159f6a5d4a7ed9c84375e0d3c625d9ffe04',
-          'uid':                '277275f6-07e1-4004-9e1d-157e7dc2a4bb'
-        }
-      ],
-      'relationships': [
-        {
-          'fromId':   'default/f5da5a8fdcd991ee91a830adbd54c159f6a5d4a7ed9c84375e0d3c625d9ffe04',
-          'fromType': 'storage.sbomscanner.kubewarden.io.sbom',
-          'rel':      'owner',
-          'state':    'active',
-          'message':  'Resource is current'
-        }
-      ],
-      'resourceVersion': '1',
-      'state':           {
-        'error':         false,
-        'message':       'Resource is current',
-        'name':          'active',
-        'transitioning': false
-      },
-      'uid': 'c5591c4b-1221-4754-b082-41a9f8a05d32'
-    },
-    'report': {
-      'results': [
-        {
-          'class':           'os-pkgs',
-          'target':          '/var/run/worker/trivy.sbom.1074037133.json (alpine 3.17.1)',
-          'type':            'alpine',
-          'vulnerabilities': [
-            {
-              'cve':  'CVE-2023-42363',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.5',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.8',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   'A use-after-free vulnerability was discovered in xasprintf function in xfuncs_printf.c:344 in BusyBox v.1.36.1.',
-              'diffID':        'sha256:8e012198eea15b2554b07014081c85fec4967a1b9cc4b65bd9a4bce3ae1c0c88',
-              'fixedVersions': [
-                '1.35.0-r31'
-              ],
-              'installedVersion': '1.35.0-r29',
-              'packageName':      'busybox',
-              'purl':             'pkg:apk/alpine/busybox@1.35.0-r29?arch=x86_64&distro=3.17.1',
-              'references':       [
-                'http://lists.busybox.net/pipermail/busybox/2024-May/090760.html',
-                'https://access.redhat.com/security/cve/CVE-2023-42363',
-                'https://bugs.busybox.net/show_bug.cgi?id=15865',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-42363',
-                'https://ubuntu.com/security/notices/USN-6961-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-42363'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk'
-            },
-            {
-              'cve':  'CVE-2023-42364',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.5',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.8',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   'A use-after-free vulnerability in BusyBox v.1.36.1 allows attackers to cause a denial of service via a crafted awk pattern in the awk.c evaluate function.',
-              'diffID':        'sha256:8e012198eea15b2554b07014081c85fec4967a1b9cc4b65bd9a4bce3ae1c0c88',
-              'fixedVersions': [
-                '1.35.0-r31'
-              ],
-              'installedVersion': '1.35.0-r29',
-              'packageName':      'busybox',
-              'purl':             'pkg:apk/alpine/busybox@1.35.0-r29?arch=x86_64&distro=3.17.1',
-              'references':       [
-                'http://lists.busybox.net/pipermail/busybox/2024-May/090762.html',
-                'https://access.redhat.com/security/cve/CVE-2023-42364',
-                'https://bugs.busybox.net/show_bug.cgi?id=15868',
-                'https://gitlab.alpinelinux.org/alpine/aports/-/blob/master/main/busybox/CVE-2023-42364-CVE-2023-42365.patch',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-42364',
-                'https://ubuntu.com/security/notices/USN-6961-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-42364'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'busybox: use-after-free'
-            },
-            {
-              'cve':  'CVE-2023-42365',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.5',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.8',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   'A use-after-free vulnerability was discovered in BusyBox v.1.36.1 via a crafted awk pattern in the awk.c copyvar function.',
-              'diffID':        'sha256:8e012198eea15b2554b07014081c85fec4967a1b9cc4b65bd9a4bce3ae1c0c88',
-              'fixedVersions': [
-                '1.35.0-r31'
-              ],
-              'installedVersion': '1.35.0-r29',
-              'packageName':      'busybox',
-              'purl':             'pkg:apk/alpine/busybox@1.35.0-r29?arch=x86_64&distro=3.17.1',
-              'references':       [
-                'http://lists.busybox.net/pipermail/busybox/2024-May/090762.html',
-                'https://access.redhat.com/security/cve/CVE-2023-42365',
-                'https://bugs.busybox.net/show_bug.cgi?id=15871',
-                'https://gitlab.alpinelinux.org/alpine/aports/-/blob/master/main/busybox/CVE-2023-42364-CVE-2023-42365.patch',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-42365',
-                'https://ubuntu.com/security/notices/USN-6961-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-42365'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'busybox: use-after-free'
-            },
-            {
-              'cve':  'CVE-2023-42366',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.5',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.1',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-787'
-              ],
-              'description':   'A heap-buffer-overflow was discovered in BusyBox v.1.36.1 in the next_token function at awk.c:1159.',
-              'diffID':        'sha256:8e012198eea15b2554b07014081c85fec4967a1b9cc4b65bd9a4bce3ae1c0c88',
-              'fixedVersions': [
-                '1.35.0-r30'
-              ],
-              'installedVersion': '1.35.0-r29',
-              'packageName':      'busybox',
-              'purl':             'pkg:apk/alpine/busybox@1.35.0-r29?arch=x86_64&distro=3.17.1',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2023-42366',
-                'https://bugs.busybox.net/show_bug.cgi?id=15874',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-42366',
-                'https://security.netapp.com/advisory/ntap-20241206-0007/',
-                'https://www.cve.org/CVERecord?id=CVE-2023-42366'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'busybox: A heap-buffer-overflow'
-            },
-            {
-              'cve':  'CVE-2023-42363',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.5',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.8',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   'A use-after-free vulnerability was discovered in xasprintf function in xfuncs_printf.c:344 in BusyBox v.1.36.1.',
-              'diffID':        'sha256:8e012198eea15b2554b07014081c85fec4967a1b9cc4b65bd9a4bce3ae1c0c88',
-              'fixedVersions': [
-                '1.35.0-r31'
-              ],
-              'installedVersion': '1.35.0-r29',
-              'packageName':      'busybox-binsh',
-              'purl':             'pkg:apk/alpine/busybox-binsh@1.35.0-r29?arch=x86_64&distro=3.17.1',
-              'references':       [
-                'http://lists.busybox.net/pipermail/busybox/2024-May/090760.html',
-                'https://access.redhat.com/security/cve/CVE-2023-42363',
-                'https://bugs.busybox.net/show_bug.cgi?id=15865',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-42363',
-                'https://ubuntu.com/security/notices/USN-6961-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-42363'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk'
-            },
-            {
-              'cve':  'CVE-2023-42364',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.5',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.8',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   'A use-after-free vulnerability in BusyBox v.1.36.1 allows attackers to cause a denial of service via a crafted awk pattern in the awk.c evaluate function.',
-              'diffID':        'sha256:8e012198eea15b2554b07014081c85fec4967a1b9cc4b65bd9a4bce3ae1c0c88',
-              'fixedVersions': [
-                '1.35.0-r31'
-              ],
-              'installedVersion': '1.35.0-r29',
-              'packageName':      'busybox-binsh',
-              'purl':             'pkg:apk/alpine/busybox-binsh@1.35.0-r29?arch=x86_64&distro=3.17.1',
-              'references':       [
-                'http://lists.busybox.net/pipermail/busybox/2024-May/090762.html',
-                'https://access.redhat.com/security/cve/CVE-2023-42364',
-                'https://bugs.busybox.net/show_bug.cgi?id=15868',
-                'https://gitlab.alpinelinux.org/alpine/aports/-/blob/master/main/busybox/CVE-2023-42364-CVE-2023-42365.patch',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-42364',
-                'https://ubuntu.com/security/notices/USN-6961-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-42364'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'busybox: use-after-free'
-            },
-            {
-              'cve':  'CVE-2023-42365',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.5',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.8',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   'A use-after-free vulnerability was discovered in BusyBox v.1.36.1 via a crafted awk pattern in the awk.c copyvar function.',
-              'diffID':        'sha256:8e012198eea15b2554b07014081c85fec4967a1b9cc4b65bd9a4bce3ae1c0c88',
-              'fixedVersions': [
-                '1.35.0-r31'
-              ],
-              'installedVersion': '1.35.0-r29',
-              'packageName':      'busybox-binsh',
-              'purl':             'pkg:apk/alpine/busybox-binsh@1.35.0-r29?arch=x86_64&distro=3.17.1',
-              'references':       [
-                'http://lists.busybox.net/pipermail/busybox/2024-May/090762.html',
-                'https://access.redhat.com/security/cve/CVE-2023-42365',
-                'https://bugs.busybox.net/show_bug.cgi?id=15871',
-                'https://gitlab.alpinelinux.org/alpine/aports/-/blob/master/main/busybox/CVE-2023-42364-CVE-2023-42365.patch',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-42365',
-                'https://ubuntu.com/security/notices/USN-6961-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-42365'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'busybox: use-after-free'
-            },
-            {
-              'cve':  'CVE-2023-42366',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.5',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.1',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-787'
-              ],
-              'description':   'A heap-buffer-overflow was discovered in BusyBox v.1.36.1 in the next_token function at awk.c:1159.',
-              'diffID':        'sha256:8e012198eea15b2554b07014081c85fec4967a1b9cc4b65bd9a4bce3ae1c0c88',
-              'fixedVersions': [
-                '1.35.0-r30'
-              ],
-              'installedVersion': '1.35.0-r29',
-              'packageName':      'busybox-binsh',
-              'purl':             'pkg:apk/alpine/busybox-binsh@1.35.0-r29?arch=x86_64&distro=3.17.1',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2023-42366',
-                'https://bugs.busybox.net/show_bug.cgi?id=15874',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-42366',
-                'https://security.netapp.com/advisory/ntap-20241206-0007/',
-                'https://www.cve.org/CVERecord?id=CVE-2023-42366'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'busybox: A heap-buffer-overflow'
-            },
-            {
-              'cve':  'CVE-2022-4450',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'nvd': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-415'
-              ],
-              'description':   'The function PEM_read_bio_ex() reads a PEM file from a BIO and parses and\ndecodes the "name" (e.g. "CERTIFICATE"), any header data and the payload data.\nIf the function succeeds then the "name_out", "header" and "data" arguments are\npopulated with pointers to buffers containing the relevant decoded data. The\ncaller is responsible for freeing those buffers. It is possible to construct a\nPEM file that results in 0 bytes of payload data. In this case PEM_read_bio_ex()\nwill return a failure code but will populate the header argument with a pointer\nto a buffer that has already been freed. If the caller also frees this buffer\nthen a double free will occur. This will most likely lead to a crash. This\ncould be exploited by an attacker who has the ability to supply malicious PEM\nfiles for parsing to achieve a denial of service attack.\n\nThe functions PEM_read_bio() and PEM_read() are simple wrappers around\nPEM_read_bio_ex() and therefore these functions are also directly affected.\n\nThese functions are also called indirectly by a number of other OpenSSL\nfunctions including PEM_X509_INFO_read_bio_ex() and\nSSL_CTX_use_serverinfo_file() which are also vulnerable. Some OpenSSL internal\nuses of these functions are not vulnerable because the caller does not free the\nheader argument if PEM_read_bio_ex() returns a failure code. These locations\ninclude the PEM_read_bio_TYPE() functions as well as the decoders introduced in\nOpenSSL 3.0.\n\nThe OpenSSL asn1parse command line application is also impacted by this issue.',
-              'diffID':        'sha256:8e012198eea15b2554b07014081c85fec4967a1b9cc4b65bd9a4bce3ae1c0c88',
-              'fixedVersions': [
-                '3.0.8-r0'
-              ],
-              'installedVersion': '3.0.7-r2',
-              'packageName':      'libcrypto3',
-              'purl':             'pkg:apk/alpine/libcrypto3@3.0.7-r2?arch=x86_64&distro=3.17.1',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2023:2165',
-                'https://access.redhat.com/security/cve/CVE-2022-4450',
-                'https://bugzilla.redhat.com/1960321',
-                'https://bugzilla.redhat.com/2164440',
-                'https://bugzilla.redhat.com/2164487',
-                'https://bugzilla.redhat.com/2164492',
-                'https://bugzilla.redhat.com/2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144000',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144003',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144006',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144008',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144010',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144012',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144015',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144017',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144019',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2145170',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2158412',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164440',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164487',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164488',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164492',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164497',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164499',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164500',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4203',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4304',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4450',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0215',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0216',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0217',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0286',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0401',
-                'https://errata.almalinux.org/9/ALSA-2023-2165.html',
-                'https://errata.rockylinux.org/RLSA-2023:0946',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=63bcf189be73a9cc1264059bed6f57974be74a83',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=bbcf509bd046b34cca19c766bbddc31683d0858b',
-                'https://linux.oracle.com/cve/CVE-2022-4450.html',
-                'https://linux.oracle.com/errata/ELSA-2023-32791.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2022-4450',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0003',
-                'https://rustsec.org/advisories/RUSTSEC-2023-0010.html',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://ubuntu.com/security/notices/USN-5844-1',
-                'https://ubuntu.com/security/notices/USN-6564-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2022-4450',
-                'https://www.openssl.org/news/secadv/20230207.txt'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: double free after calling PEM_read_bio_ex'
-            },
-            {
-              'cve':  'CVE-2023-0215',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'nvd': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   'The public API function BIO_new_NDEF is a helper function used for streaming\nASN.1 data via a BIO. It is primarily used internally to OpenSSL to support the\nSMIME, CMS and PKCS7 streaming capabilities, but may also be called directly by\nend user applications.\n\nThe function receives a BIO from the caller, prepends a new BIO_f_asn1 filter\nBIO onto the front of it to form a BIO chain, and then returns the new head of\nthe BIO chain to the caller. Under certain conditions, for example if a CMS\nrecipient public key is invalid, the new filter BIO is freed and the function\nreturns a NULL result indicating a failure. However, in this case, the BIO chain\nis not properly cleaned up and the BIO passed by the caller still retains\ninternal pointers to the previously freed filter BIO. If the caller then goes on\nto call BIO_pop() on the BIO then a use-after-free will occur. This will most\nlikely result in a crash.\n\n\n\nThis scenario occurs directly in the internal function B64_write_ASN1() which\nmay cause BIO_new_NDEF() to be called and will subsequently call BIO_pop() on\nthe BIO. This internal function is in turn called by the public API functions\nPEM_write_bio_ASN1_stream, PEM_write_bio_CMS_stream, PEM_write_bio_PKCS7_stream,\nSMIME_write_ASN1, SMIME_write_CMS and SMIME_write_PKCS7.\n\nOther public API functions that may be impacted by this include\ni2d_ASN1_bio_stream, BIO_new_CMS, BIO_new_PKCS7, i2d_CMS_bio_stream and\ni2d_PKCS7_bio_stream.\n\nThe OpenSSL cms and smime command line applications are similarly affected.',
-              'diffID':        'sha256:8e012198eea15b2554b07014081c85fec4967a1b9cc4b65bd9a4bce3ae1c0c88',
-              'fixedVersions': [
-                '3.0.8-r0'
-              ],
-              'installedVersion': '3.0.7-r2',
-              'packageName':      'libcrypto3',
-              'purl':             'pkg:apk/alpine/libcrypto3@3.0.7-r2?arch=x86_64&distro=3.17.1',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2023:2165',
-                'https://access.redhat.com/security/cve/CVE-2023-0215',
-                'https://bugzilla.redhat.com/1960321',
-                'https://bugzilla.redhat.com/2164440',
-                'https://bugzilla.redhat.com/2164487',
-                'https://bugzilla.redhat.com/2164492',
-                'https://bugzilla.redhat.com/2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144000',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144003',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144006',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144008',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144010',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144012',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144015',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144017',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144019',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2145170',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2158412',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164440',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164487',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164488',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164492',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164497',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164499',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164500',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4203',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4304',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4450',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0215',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0216',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0217',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0286',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0401',
-                'https://errata.almalinux.org/9/ALSA-2023-2165.html',
-                'https://errata.rockylinux.org/RLSA-2023:0946',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=8818064ce3c3c0f1b740a5aaba2a987e75bfbafd',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=9816136fe31d92ace4037d5da5257f763aeeb4eb',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=c3829dd8825c654652201e16f8a0a0c46ee3f344',
-                'https://linux.oracle.com/cve/CVE-2023-0215.html',
-                'https://linux.oracle.com/errata/ELSA-2023-32791.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-0215',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0003',
-                'https://rustsec.org/advisories/RUSTSEC-2023-0009.html',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://security.netapp.com/advisory/ntap-20230427-0007',
-                'https://security.netapp.com/advisory/ntap-20230427-0007/',
-                'https://security.netapp.com/advisory/ntap-20230427-0009',
-                'https://security.netapp.com/advisory/ntap-20230427-0009/',
-                'https://security.netapp.com/advisory/ntap-20240621-0006',
-                'https://security.netapp.com/advisory/ntap-20240621-0006/',
-                'https://ubuntu.com/security/notices/USN-5844-1',
-                'https://ubuntu.com/security/notices/USN-5845-1',
-                'https://ubuntu.com/security/notices/USN-5845-2',
-                'https://ubuntu.com/security/notices/USN-6564-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-0215',
-                'https://www.openssl.org/news/secadv/20230207.txt'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: use-after-free following BIO_new_NDEF'
-            },
-            {
-              'cve':  'CVE-2023-0216',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'nvd': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-476'
-              ],
-              'description':   'An invalid pointer dereference on read can be triggered when an\napplication tries to load malformed PKCS7 data with the\nd2i_PKCS7(), d2i_PKCS7_bio() or d2i_PKCS7_fp() functions.\n\nThe result of the dereference is an application crash which could\nlead to a denial of service attack. The TLS implementation in OpenSSL\ndoes not call this function however third party applications might\ncall these functions on untrusted data.',
-              'diffID':        'sha256:8e012198eea15b2554b07014081c85fec4967a1b9cc4b65bd9a4bce3ae1c0c88',
-              'fixedVersions': [
-                '3.0.8-r0'
-              ],
-              'installedVersion': '3.0.7-r2',
-              'packageName':      'libcrypto3',
-              'purl':             'pkg:apk/alpine/libcrypto3@3.0.7-r2?arch=x86_64&distro=3.17.1',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2023:0946',
-                'https://access.redhat.com/security/cve/CVE-2023-0216',
-                'https://bugzilla.redhat.com/2164440',
-                'https://bugzilla.redhat.com/2164487',
-                'https://bugzilla.redhat.com/2164488',
-                'https://bugzilla.redhat.com/2164492',
-                'https://bugzilla.redhat.com/2164494',
-                'https://bugzilla.redhat.com/2164497',
-                'https://bugzilla.redhat.com/2164499',
-                'https://bugzilla.redhat.com/2164500',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144000',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144003',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144006',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144008',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144010',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144012',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144015',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144017',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144019',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2145170',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2158412',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164440',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164487',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164488',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164492',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164497',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164499',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164500',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4203',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4304',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4450',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0215',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0216',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0217',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0286',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0401',
-                'https://errata.almalinux.org/9/ALSA-2023-0946.html',
-                'https://errata.rockylinux.org/RLSA-2023:0946',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=934a04f0e775309cadbef0aa6b9692e1b12a76c6',
-                'https://linux.oracle.com/cve/CVE-2023-0216.html',
-                'https://linux.oracle.com/errata/ELSA-2023-12152.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-0216',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0003',
-                'https://rustsec.org/advisories/RUSTSEC-2023-0011.html',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://ubuntu.com/security/notices/USN-5844-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-0216',
-                'https://www.openssl.org/news/secadv/20230207.txt'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: invalid pointer dereference in d2i_PKCS7 functions'
-            },
-            {
-              'cve':  'CVE-2023-0217',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'nvd': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-476'
-              ],
-              'description':   'An invalid pointer dereference on read can be triggered when an\napplication tries to check a malformed DSA public key by the\nEVP_PKEY_public_check() function. This will most likely lead\nto an application crash. This function can be called on public\nkeys supplied from untrusted sources which could allow an attacker\nto cause a denial of service attack.\n\nThe TLS implementation in OpenSSL does not call this function\nbut applications might call the function if there are additional\nsecurity requirements imposed by standards such as FIPS 140-3.',
-              'diffID':        'sha256:8e012198eea15b2554b07014081c85fec4967a1b9cc4b65bd9a4bce3ae1c0c88',
-              'fixedVersions': [
-                '3.0.8-r0'
-              ],
-              'installedVersion': '3.0.7-r2',
-              'packageName':      'libcrypto3',
-              'purl':             'pkg:apk/alpine/libcrypto3@3.0.7-r2?arch=x86_64&distro=3.17.1',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2023:0946',
-                'https://access.redhat.com/security/cve/CVE-2023-0217',
-                'https://bugzilla.redhat.com/2164440',
-                'https://bugzilla.redhat.com/2164487',
-                'https://bugzilla.redhat.com/2164488',
-                'https://bugzilla.redhat.com/2164492',
-                'https://bugzilla.redhat.com/2164494',
-                'https://bugzilla.redhat.com/2164497',
-                'https://bugzilla.redhat.com/2164499',
-                'https://bugzilla.redhat.com/2164500',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144000',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144003',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144006',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144008',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144010',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144012',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144015',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144017',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144019',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2145170',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2158412',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164440',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164487',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164488',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164492',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164497',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164499',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164500',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4203',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4304',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4450',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0215',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0216',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0217',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0286',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0401',
-                'https://errata.almalinux.org/9/ALSA-2023-0946.html',
-                'https://errata.rockylinux.org/RLSA-2023:0946',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=23985bac83fd50c8e29431009302b5442f985096',
-                'https://linux.oracle.com/cve/CVE-2023-0217.html',
-                'https://linux.oracle.com/errata/ELSA-2023-12152.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-0217',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0003',
-                'https://rustsec.org/advisories/RUSTSEC-2023-0012.html',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://ubuntu.com/security/notices/USN-5844-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-0217',
-                'https://www.openssl.org/news/secadv/20230207.txt'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: NULL dereference validating DSA public key'
-            },
-            {
-              'cve':  'CVE-2023-0286',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '7.4',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H'
-                },
-                'nvd': {
-                  'v3score':  '7.4',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.4',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-843'
-              ],
-              'description':   'There is a type confusion vulnerability relating to X.400 address processing\ninside an X.509 GeneralName. X.400 addresses were parsed as an ASN1_STRING but\nthe public structure definition for GENERAL_NAME incorrectly specified the type\nof the x400Address field as ASN1_TYPE. This field is subsequently interpreted by\nthe OpenSSL function GENERAL_NAME_cmp as an ASN1_TYPE rather than an\nASN1_STRING.\n\nWhen CRL checking is enabled (i.e. the application sets the\nX509_V_FLAG_CRL_CHECK flag), this vulnerability may allow an attacker to pass\narbitrary pointers to a memcmp call, enabling them to read memory contents or\nenact a denial of service. In most cases, the attack requires the attacker to\nprovide both the certificate chain and CRL, neither of which need to have a\nvalid signature. If the attacker only controls one of these inputs, the other\ninput must already contain an X.400 address as a CRL distribution point, which\nis uncommon. As such, this vulnerability is most likely to only affect\napplications which have implemented their own functionality for retrieving CRLs\nover a network.',
-              'diffID':        'sha256:8e012198eea15b2554b07014081c85fec4967a1b9cc4b65bd9a4bce3ae1c0c88',
-              'fixedVersions': [
-                '3.0.8-r0'
-              ],
-              'installedVersion': '3.0.7-r2',
-              'packageName':      'libcrypto3',
-              'purl':             'pkg:apk/alpine/libcrypto3@3.0.7-r2?arch=x86_64&distro=3.17.1',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2025:7937',
-                'https://access.redhat.com/security/cve/CVE-2023-0286',
-                'https://access.redhat.com/security/cve/cve-2023-0286',
-                'https://bugzilla.redhat.com/2164440',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144000',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144003',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144006',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144008',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144010',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144012',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144015',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144017',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144019',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2145170',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2158412',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164440',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164487',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164488',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164492',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164497',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164499',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164500',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4203',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4304',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4450',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0215',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0216',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0217',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0286',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0401',
-                'https://errata.almalinux.org/9/ALSA-2025-7937.html',
-                'https://errata.rockylinux.org/RLSA-2023:0946',
-                'https://ftp.openbsd.org/pub/OpenBSD/LibreSSL/libressl-3.6.2-relnotes.txt',
-                'https://ftp.openbsd.org/pub/OpenBSD/patches/7.2/common/018_x509.patch.sig',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=2c6c9d439b484e1ba9830d8454a34fa4f80fdfe9',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=2f7530077e0ef79d98718138716bc51ca0cad658',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=fd2af07dc083a350c959147097003a14a5e8ac4d',
-                'https://github.com/pyca/cryptography',
-                'https://github.com/pyca/cryptography/security/advisories/GHSA-x4qr-2fvf-3mr5',
-                'https://linux.oracle.com/cve/CVE-2023-0286.html',
-                'https://linux.oracle.com/errata/ELSA-2025-7937.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-0286',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0003',
-                'https://rustsec.org/advisories/RUSTSEC-2023-0006.html',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://ubuntu.com/security/notices/USN-5844-1',
-                'https://ubuntu.com/security/notices/USN-5845-1',
-                'https://ubuntu.com/security/notices/USN-5845-2',
-                'https://ubuntu.com/security/notices/USN-6564-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-0286',
-                'https://www.openssl.org/news/secadv/20230207.txt'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: X.400 address type confusion in X.509 GeneralName'
-            },
-            {
-              'cve':  'CVE-2023-0401',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'nvd': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-476'
-              ],
-              'description':   'A NULL pointer can be dereferenced when signatures are being\nverified on PKCS7 signed or signedAndEnveloped data. In case the hash\nalgorithm used for the signature is known to the OpenSSL library but\nthe implementation of the hash algorithm is not available the digest\ninitialization will fail. There is a missing check for the return\nvalue from the initialization function which later leads to invalid\nusage of the digest API most likely leading to a crash.\n\nThe unavailability of an algorithm can be caused by using FIPS\nenabled configuration of providers or more commonly by not loading\nthe legacy provider.\n\nPKCS7 data is processed by the SMIME library calls and also by the\ntime stamp (TS) library calls. The TLS implementation in OpenSSL does\nnot call these functions however third party applications would be\naffected if they call these functions to verify signatures on untrusted\ndata.',
-              'diffID':        'sha256:8e012198eea15b2554b07014081c85fec4967a1b9cc4b65bd9a4bce3ae1c0c88',
-              'fixedVersions': [
-                '3.0.8-r0'
-              ],
-              'installedVersion': '3.0.7-r2',
-              'packageName':      'libcrypto3',
-              'purl':             'pkg:apk/alpine/libcrypto3@3.0.7-r2?arch=x86_64&distro=3.17.1',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2023:0946',
-                'https://access.redhat.com/security/cve/CVE-2023-0401',
-                'https://bugzilla.redhat.com/2164440',
-                'https://bugzilla.redhat.com/2164487',
-                'https://bugzilla.redhat.com/2164488',
-                'https://bugzilla.redhat.com/2164492',
-                'https://bugzilla.redhat.com/2164494',
-                'https://bugzilla.redhat.com/2164497',
-                'https://bugzilla.redhat.com/2164499',
-                'https://bugzilla.redhat.com/2164500',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144000',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144003',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144006',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144008',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144010',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144012',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144015',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144017',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144019',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2145170',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2158412',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164440',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164487',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164488',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164492',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164497',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164499',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164500',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4203',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4304',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4450',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0215',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0216',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0217',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0286',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0401',
-                'https://errata.almalinux.org/9/ALSA-2023-0946.html',
-                'https://errata.rockylinux.org/RLSA-2023:0946',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=d3b6dfd70db844c4499bec6ad6601623a565e674',
-                'https://github.com/alexcrichton/openssl-src-rs',
-                'https://linux.oracle.com/cve/CVE-2023-0401.html',
-                'https://linux.oracle.com/errata/ELSA-2023-12152.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-0401',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0003',
-                'https://rustsec.org/advisories/RUSTSEC-2023-0013.html',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://ubuntu.com/security/notices/USN-5844-1',
-                'https://ubuntu.com/security/notices/USN-6564-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-0401',
-                'https://www.openssl.org/news/secadv/20230207.txt'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: NULL dereference during PKCS7 data verification'
-            },
-            {
-              'cve':  'CVE-2023-0464',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-295'
-              ],
-              'description':   "A security vulnerability has been identified in all supported versions\n\nof OpenSSL related to the verification of X.509 certificate chains\nthat include policy constraints.  Attackers may be able to exploit this\nvulnerability by creating a malicious certificate chain that triggers\nexponential use of computational resources, leading to a denial-of-service\n(DoS) attack on affected systems.\n\nPolicy processing is disabled by default but can be enabled by passing\nthe `-policy' argument to the command line utilities or by calling the\n`X509_VERIFY_PARAM_set1_policies()' function.",
-              'diffID':        'sha256:8e012198eea15b2554b07014081c85fec4967a1b9cc4b65bd9a4bce3ae1c0c88',
-              'fixedVersions': [
-                '3.0.8-r1'
-              ],
-              'installedVersion': '3.0.7-r2',
-              'packageName':      'libcrypto3',
-              'purl':             'pkg:apk/alpine/libcrypto3@3.0.7-r2?arch=x86_64&distro=3.17.1',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2023:3722',
-                'https://access.redhat.com/security/cve/CVE-2023-0464',
-                'https://bugzilla.redhat.com/2181082',
-                'https://bugzilla.redhat.com/2182561',
-                'https://bugzilla.redhat.com/2182565',
-                'https://bugzilla.redhat.com/2188461',
-                'https://bugzilla.redhat.com/2207947',
-                'https://errata.almalinux.org/9/ALSA-2023-3722.html',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=2017771e2db3e2b96f89bbe8766c3209f6a99545',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=2dcd4f1e3115f38cefa43e3efbe9b801c27e642e',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=879f7080d7e141f415c79eaa3a8ac4a3dad0348b',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=959c59c7a0164117e7f8366466a32bb1f8d77ff1',
-                'https://linux.oracle.com/cve/CVE-2023-0464.html',
-                'https://linux.oracle.com/errata/ELSA-2023-3722.html',
-                'https://lists.debian.org/debian-lts-announce/2023/06/msg00011.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-0464',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://security.netapp.com/advisory/ntap-20230406-0006/',
-                'https://security.netapp.com/advisory/ntap-20240621-0006/',
-                'https://ubuntu.com/security/notices/USN-6039-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.couchbase.com/alerts/',
-                'https://www.cve.org/CVERecord?id=CVE-2023-0464',
-                'https://www.debian.org/security/2023/dsa-5417',
-                'https://www.openssl.org/news/secadv/20230322.txt'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: Denial of service by excessive resource usage in verifying X509 policy constraints'
-            },
-            {
-              'cve':  'CVE-2023-5363',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N'
-                },
-                'redhat': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-684'
-              ],
-              'description':   "Issue summary: A bug has been identified in the processing of key and\ninitialisation vector (IV) lengths.  This can lead to potential truncation\nor overruns during the initialisation of some symmetric ciphers.\n\nImpact summary: A truncation in the IV can result in non-uniqueness,\nwhich could result in loss of confidentiality for some cipher modes.\n\nWhen calling EVP_EncryptInit_ex2(), EVP_DecryptInit_ex2() or\nEVP_CipherInit_ex2() the provided OSSL_PARAM array is processed after\nthe key and IV have been established.  Any alterations to the key length,\nvia the \"keylen\" parameter or the IV length, via the \"ivlen\" parameter,\nwithin the OSSL_PARAM array will not take effect as intended, potentially\ncausing truncation or overreading of these values.  The following ciphers\nand cipher modes are impacted: RC2, RC4, RC5, CCM, GCM and OCB.\n\nFor the CCM, GCM and OCB cipher modes, truncation of the IV can result in\nloss of confidentiality.  For example, when following NIST's SP 800-38D\nsection 8.2.1 guidance for constructing a deterministic IV for AES in\nGCM mode, truncation of the counter portion could lead to IV reuse.\n\nBoth truncations and overruns of the key and overruns of the IV will\nproduce incorrect results and could, in some cases, trigger a memory\nexception.  However, these issues are not currently assessed as security\ncritical.\n\nChanging the key and/or IV lengths is not considered to be a common operation\nand the vulnerable API was recently introduced. Furthermore it is likely that\napplication developers will have spotted this problem during testing since\ndecryption would fail unless both peers in the communication were similarly\nvulnerable. For these reasons we expect the probability of an application being\nvulnerable to this to be quite low. However if an application is vulnerable then\nthis issue is considered very serious. For these reasons we have assessed this\nissue as Moderate severity overall.\n\nThe OpenSSL SSL/TLS implementation is not affected by this issue.\n\nThe OpenSSL 3.0 and 3.1 FIPS providers are not affected by this because\nthe issue lies outside of the FIPS provider boundary.\n\nOpenSSL 3.1 and 3.0 are vulnerable to this issue.",
-              'diffID':        'sha256:8e012198eea15b2554b07014081c85fec4967a1b9cc4b65bd9a4bce3ae1c0c88',
-              'fixedVersions': [
-                '3.0.12-r0'
-              ],
-              'installedVersion': '3.0.7-r2',
-              'packageName':      'libcrypto3',
-              'purl':             'pkg:apk/alpine/libcrypto3@3.0.7-r2?arch=x86_64&distro=3.17.1',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2023/10/24/1',
-                'https://access.redhat.com/errata/RHSA-2024:0310',
-                'https://access.redhat.com/security/cve/CVE-2023-5363',
-                'https://bugzilla.redhat.com/2243839',
-                'https://errata.almalinux.org/9/ALSA-2024-0310.html',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=0df40630850fb2740e6be6890bb905d3fc623b2d',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=5f69f5c65e483928c4b28ed16af6e5742929f1ee',
-                'https://linux.oracle.com/cve/CVE-2023-5363.html',
-                'https://linux.oracle.com/errata/ELSA-2024-12093.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-5363',
-                'https://security.netapp.com/advisory/ntap-20231027-0010/',
-                'https://security.netapp.com/advisory/ntap-20240201-0003/',
-                'https://security.netapp.com/advisory/ntap-20240201-0004/',
-                'https://security.netapp.com/advisory/ntap-20241108-0002/',
-                'https://ubuntu.com/security/notices/USN-6450-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-5363',
-                'https://www.debian.org/security/2023/dsa-5532',
-                'https://www.openssl.org/news/secadv/20231024.txt'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: Incorrect cipher key and IV length processing'
-            },
-            {
-              'cve':  'CVE-2024-6119',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-843'
-              ],
-              'description':   "Issue summary: Applications performing certificate name checks (e.g., TLS\nclients checking server certificates) may attempt to read an invalid memory\naddress resulting in abnormal termination of the application process.\n\nImpact summary: Abnormal termination of an application can a cause a denial of\nservice.\n\nApplications performing certificate name checks (e.g., TLS clients checking\nserver certificates) may attempt to read an invalid memory address when\ncomparing the expected name with an `otherName` subject alternative name of an\nX.509 certificate. This may result in an exception that terminates the\napplication program.\n\nNote that basic certificate chain validation (signatures, dates, ...) is not\naffected, the denial of service can occur only when the application also\nspecifies an expected DNS name, Email address or IP address.\n\nTLS servers rarely solicit client certificates, and even when they do, they\ngenerally don't perform a name check against a reference identifier (expected\nidentity), but rather extract the presented identity after checking the\ncertificate chain.  So TLS servers are generally not affected and the severity\nof the issue is Moderate.\n\nThe FIPS modules in 3.3, 3.2, 3.1 and 3.0 are not affected by this issue.",
-              'diffID':        'sha256:8e012198eea15b2554b07014081c85fec4967a1b9cc4b65bd9a4bce3ae1c0c88',
-              'fixedVersions': [
-                '3.0.15-r0'
-              ],
-              'installedVersion': '3.0.7-r2',
-              'packageName':      'libcrypto3',
-              'purl':             'pkg:apk/alpine/libcrypto3@3.0.7-r2?arch=x86_64&distro=3.17.1',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2024/09/03/4',
-                'https://access.redhat.com/errata/RHSA-2024:8935',
-                'https://access.redhat.com/security/cve/CVE-2024-6119',
-                'https://bugzilla.redhat.com/2306158',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2306158',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-6119',
-                'https://errata.almalinux.org/9/ALSA-2024-8935.html',
-                'https://errata.rockylinux.org/RLSA-2024:6783',
-                'https://github.com/openssl/openssl/commit/05f360d9e849a1b277db628f1f13083a7f8dd04f',
-                'https://github.com/openssl/openssl/commit/06d1dc3fa96a2ba5a3e22735a033012aadc9f0d6',
-                'https://github.com/openssl/openssl/commit/621f3729831b05ee828a3203eddb621d014ff2b2',
-                'https://github.com/openssl/openssl/commit/7dfcee2cd2a63b2c64b9b4b0850be64cb695b0a0',
-                'https://github.com/openssl/openssl/security/advisories/GHSA-5qrj-vq78-58fj',
-                'https://linux.oracle.com/cve/CVE-2024-6119.html',
-                'https://linux.oracle.com/errata/ELSA-2024-8935.html',
-                'https://lists.freebsd.org/archives/freebsd-security/2024-September/000303.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2024-6119',
-                'https://openssl-library.org/news/secadv/20240903.txt',
-                'https://security.netapp.com/advisory/ntap-20240912-0001/',
-                'https://ubuntu.com/security/notices/USN-6986-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2024-6119'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: Possible denial of service in X.509 name checks'
-            },
-            {
-              'cve':  'CVE-2022-4203',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '9.1',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H'
-                },
-                'nvd': {
-                  'v3score':  '4.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '4.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-125'
-              ],
-              'description':   'A read buffer overrun can be triggered in X.509 certificate verification,\nspecifically in name constraint checking. Note that this occurs\nafter certificate chain signature verification and requires either a\nCA to have signed the malicious certificate or for the application to\ncontinue certificate verification despite failure to construct a path\nto a trusted issuer.\n\nThe read buffer overrun might result in a crash which could lead to\na denial of service attack. In theory it could also result in the disclosure\nof private memory contents (such as private keys, or sensitive plaintext)\nalthough we are not aware of any working exploit leading to memory\ncontents disclosure as of the time of release of this advisory.\n\nIn a TLS client, this can be triggered by connecting to a malicious\nserver. In a TLS server, this can be triggered if the server requests\nclient authentication and a malicious client connects.',
-              'diffID':        'sha256:8e012198eea15b2554b07014081c85fec4967a1b9cc4b65bd9a4bce3ae1c0c88',
-              'fixedVersions': [
-                '3.0.8-r0'
-              ],
-              'installedVersion': '3.0.7-r2',
-              'packageName':      'libcrypto3',
-              'purl':             'pkg:apk/alpine/libcrypto3@3.0.7-r2?arch=x86_64&distro=3.17.1',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2023:0946',
-                'https://access.redhat.com/security/cve/CVE-2022-4203',
-                'https://bugzilla.redhat.com/2164440',
-                'https://bugzilla.redhat.com/2164487',
-                'https://bugzilla.redhat.com/2164488',
-                'https://bugzilla.redhat.com/2164492',
-                'https://bugzilla.redhat.com/2164494',
-                'https://bugzilla.redhat.com/2164497',
-                'https://bugzilla.redhat.com/2164499',
-                'https://bugzilla.redhat.com/2164500',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144000',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144003',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144006',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144008',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144010',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144012',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144015',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144017',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144019',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2145170',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2158412',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164440',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164487',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164488',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164492',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164497',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164499',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164500',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4203',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4304',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4450',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0215',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0216',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0217',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0286',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0401',
-                'https://errata.almalinux.org/9/ALSA-2023-0946.html',
-                'https://errata.rockylinux.org/RLSA-2023:0946',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=c927a3492698c254637da836762f9b1f86cffabc',
-                'https://linux.oracle.com/cve/CVE-2022-4203.html',
-                'https://linux.oracle.com/errata/ELSA-2023-12152.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2022-4203',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0003',
-                'https://rustsec.org/advisories/RUSTSEC-2023-0008.html',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://ubuntu.com/security/notices/USN-5844-1',
-                'https://www.cve.org/CVERecord?id=CVE-2022-4203',
-                'https://www.openssl.org/news/secadv/20230207.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: read buffer overflow in X.509 certificate verification'
-            },
-            {
-              'cve':  'CVE-2022-4304',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N'
-                },
-                'nvd': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N'
-                },
-                'redhat': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-203'
-              ],
-              'description':   'A timing based side channel exists in the OpenSSL RSA Decryption implementation\nwhich could be sufficient to recover a plaintext across a network in a\nBleichenbacher style attack. To achieve a successful decryption an attacker\nwould have to be able to send a very large number of trial messages for\ndecryption. The vulnerability affects all RSA padding modes: PKCS#1 v1.5,\nRSA-OEAP and RSASVE.\n\nFor example, in a TLS connection, RSA is commonly used by a client to send an\nencrypted pre-master secret to the server. An attacker that had observed a\ngenuine connection between a client and a server could use this flaw to send\ntrial messages to the server and record the time taken to process them. After a\nsufficiently large number of messages the attacker could recover the pre-master\nsecret used for the original connection and thus be able to decrypt the\napplication data sent over that connection.',
-              'diffID':        'sha256:8e012198eea15b2554b07014081c85fec4967a1b9cc4b65bd9a4bce3ae1c0c88',
-              'fixedVersions': [
-                '3.0.8-r0'
-              ],
-              'installedVersion': '3.0.7-r2',
-              'packageName':      'libcrypto3',
-              'purl':             'pkg:apk/alpine/libcrypto3@3.0.7-r2?arch=x86_64&distro=3.17.1',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2023:2165',
-                'https://access.redhat.com/security/cve/CVE-2022-4304',
-                'https://bugzilla.redhat.com/1960321',
-                'https://bugzilla.redhat.com/2164440',
-                'https://bugzilla.redhat.com/2164487',
-                'https://bugzilla.redhat.com/2164492',
-                'https://bugzilla.redhat.com/2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144000',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144003',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144006',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144008',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144010',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144012',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144015',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144017',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144019',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2145170',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2158412',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164440',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164487',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164488',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164492',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164497',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164499',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164500',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4203',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4304',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4450',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0215',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0216',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0217',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0286',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0401',
-                'https://errata.almalinux.org/9/ALSA-2023-2165.html',
-                'https://errata.rockylinux.org/RLSA-2023:0946',
-                'https://linux.oracle.com/cve/CVE-2022-4304.html',
-                'https://linux.oracle.com/errata/ELSA-2023-32791.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2022-4304',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0003',
-                'https://rustsec.org/advisories/RUSTSEC-2023-0007.html',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://ubuntu.com/security/notices/USN-5844-1',
-                'https://ubuntu.com/security/notices/USN-6564-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2022-4304',
-                'https://www.openssl.org/news/secadv/20230207.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: timing attack in RSA Decryption implementation'
-            },
-            {
-              'cve':  'CVE-2023-0465',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N'
-                },
-                'redhat': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-295'
-              ],
-              'description':   "Applications that use a non-default option when verifying certificates may be\nvulnerable to an attack from a malicious CA to circumvent certain checks.\n\nInvalid certificate policies in leaf certificates are silently ignored by\nOpenSSL and other certificate policy checks are skipped for that certificate.\nA malicious CA could use this to deliberately assert invalid certificate policies\nin order to circumvent policy checking on the certificate altogether.\n\nPolicy processing is disabled by default but can be enabled by passing\nthe `-policy' argument to the command line utilities or by calling the\n`X509_VERIFY_PARAM_set1_policies()' function.",
-              'diffID':        'sha256:8e012198eea15b2554b07014081c85fec4967a1b9cc4b65bd9a4bce3ae1c0c88',
-              'fixedVersions': [
-                '3.0.8-r2'
-              ],
-              'installedVersion': '3.0.7-r2',
-              'packageName':      'libcrypto3',
-              'purl':             'pkg:apk/alpine/libcrypto3@3.0.7-r2?arch=x86_64&distro=3.17.1',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2023:3722',
-                'https://access.redhat.com/security/cve/CVE-2023-0465',
-                'https://bugzilla.redhat.com/2181082',
-                'https://bugzilla.redhat.com/2182561',
-                'https://bugzilla.redhat.com/2182565',
-                'https://bugzilla.redhat.com/2188461',
-                'https://bugzilla.redhat.com/2207947',
-                'https://errata.almalinux.org/9/ALSA-2023-3722.html',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=10325176f3d3e98c6e2b3bf5ab1e3b334de6947a',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=1dd43e0709fece299b15208f36cc7c76209ba0bb',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=b013765abfa80036dc779dd0e50602c57bb3bf95',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=facfb1ab745646e97a1920977ae4a9965ea61d5c',
-                'https://linux.oracle.com/cve/CVE-2023-0465.html',
-                'https://linux.oracle.com/errata/ELSA-2023-3722.html',
-                'https://lists.debian.org/debian-lts-announce/2023/06/msg00011.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-0465',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://security.netapp.com/advisory/ntap-20230414-0001/',
-                'https://ubuntu.com/security/notices/USN-6039-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-0465',
-                'https://www.debian.org/security/2023/dsa-5417',
-                'https://www.openssl.org/news/secadv/20230328.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: Invalid certificate policies in leaf certificates are silently ignored'
-            },
-            {
-              'cve':  'CVE-2023-0466',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N'
-                },
-                'redhat': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-295'
-              ],
-              'description':   'The function X509_VERIFY_PARAM_add0_policy() is documented to\nimplicitly enable the certificate policy check when doing certificate\nverification. However the implementation of the function does not\nenable the check which allows certificates with invalid or incorrect\npolicies to pass the certificate verification.\n\nAs suddenly enabling the policy check could break existing deployments it was\ndecided to keep the existing behavior of the X509_VERIFY_PARAM_add0_policy()\nfunction.\n\nInstead the applications that require OpenSSL to perform certificate\npolicy check need to use X509_VERIFY_PARAM_set1_policies() or explicitly\nenable the policy check by calling X509_VERIFY_PARAM_set_flags() with\nthe X509_V_FLAG_POLICY_CHECK flag argument.\n\nCertificate policy checks are disabled by default in OpenSSL and are not\ncommonly used by applications.',
-              'diffID':        'sha256:8e012198eea15b2554b07014081c85fec4967a1b9cc4b65bd9a4bce3ae1c0c88',
-              'fixedVersions': [
-                '3.0.8-r3'
-              ],
-              'installedVersion': '3.0.7-r2',
-              'packageName':      'libcrypto3',
-              'purl':             'pkg:apk/alpine/libcrypto3@3.0.7-r2?arch=x86_64&distro=3.17.1',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2023/09/28/4',
-                'https://access.redhat.com/errata/RHSA-2023:3722',
-                'https://access.redhat.com/security/cve/CVE-2023-0466',
-                'https://bugzilla.redhat.com/2181082',
-                'https://bugzilla.redhat.com/2182561',
-                'https://bugzilla.redhat.com/2182565',
-                'https://bugzilla.redhat.com/2188461',
-                'https://bugzilla.redhat.com/2207947',
-                'https://errata.almalinux.org/9/ALSA-2023-3722.html',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=0d16b7e99aafc0b4a6d729eec65a411a7e025f0a',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=51e8a84ce742db0f6c70510d0159dad8f7825908',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=73398dea26de9899fb4baa94098ad0a61f435c72',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=fc814a30fc4f0bc54fcea7d9a7462f5457aab061',
-                'https://linux.oracle.com/cve/CVE-2023-0466.html',
-                'https://linux.oracle.com/errata/ELSA-2023-3722.html',
-                'https://lists.debian.org/debian-lts-announce/2023/06/msg00011.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-0466',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://security.netapp.com/advisory/ntap-20230414-0001/',
-                'https://ubuntu.com/security/notices/USN-6039-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-0466',
-                'https://www.debian.org/security/2023/dsa-5417',
-                'https://www.openssl.org/news/secadv/20230328.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: Certificate policy check not enabled'
-            },
-            {
-              'cve':  'CVE-2023-1255',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '5.1',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-125'
-              ],
-              'description':   'Issue summary: The AES-XTS cipher decryption implementation for 64 bit ARM\nplatform contains a bug that could cause it to read past the input buffer,\nleading to a crash.\n\nImpact summary: Applications that use the AES-XTS algorithm on the 64 bit ARM\nplatform can crash in rare circumstances. The AES-XTS algorithm is usually\nused for disk encryption.\n\nThe AES-XTS cipher decryption implementation for 64 bit ARM platform will read\npast the end of the ciphertext buffer if the ciphertext size is 4 mod 5 in 16\nbyte blocks, e.g. 144 bytes or 1024 bytes. If the memory after the ciphertext\nbuffer is unmapped, this will trigger a crash which results in a denial of\nservice.\n\nIf an attacker can control the size and location of the ciphertext buffer\nbeing decrypted by an application using AES-XTS on 64 bit ARM, the\napplication is affected. This is fairly unlikely making this issue\na Low severity one.',
-              'diffID':        'sha256:8e012198eea15b2554b07014081c85fec4967a1b9cc4b65bd9a4bce3ae1c0c88',
-              'fixedVersions': [
-                '3.0.8-r4'
-              ],
-              'installedVersion': '3.0.7-r2',
-              'packageName':      'libcrypto3',
-              'purl':             'pkg:apk/alpine/libcrypto3@3.0.7-r2?arch=x86_64&distro=3.17.1',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2023:3722',
-                'https://access.redhat.com/security/cve/CVE-2023-1255',
-                'https://bugzilla.redhat.com/2181082',
-                'https://bugzilla.redhat.com/2182561',
-                'https://bugzilla.redhat.com/2182565',
-                'https://bugzilla.redhat.com/2188461',
-                'https://bugzilla.redhat.com/2207947',
-                'https://errata.almalinux.org/9/ALSA-2023-3722.html',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=02ac9c9420275868472f33b01def01218742b8bb',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=bc2f61ad70971869b242fc1cb445b98bad50074a',
-                'https://linux.oracle.com/cve/CVE-2023-1255.html',
-                'https://linux.oracle.com/errata/ELSA-2023-3722.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-1255',
-                'https://security.netapp.com/advisory/ntap-20230908-0006/',
-                'https://ubuntu.com/security/notices/USN-6119-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-1255',
-                'https://www.openssl.org/news/secadv/20230419.txt',
-                'https://www.openssl.org/news/secadv/20230420.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: Input buffer over-read in AES-XTS implementation on 64 bit ARM'
-            },
-            {
-              'cve':  'CVE-2023-2650',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '6.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-770'
-              ],
-              'description':   "Issue summary: Processing some specially crafted ASN.1 object identifiers or\ndata containing them may be very slow.\n\nImpact summary: Applications that use OBJ_obj2txt() directly, or use any of\nthe OpenSSL subsystems OCSP, PKCS7/SMIME, CMS, CMP/CRMF or TS with no message\nsize limit may experience notable to very long delays when processing those\nmessages, which may lead to a Denial of Service.\n\nAn OBJECT IDENTIFIER is composed of a series of numbers - sub-identifiers -\nmost of which have no size limit.  OBJ_obj2txt() may be used to translate\nan ASN.1 OBJECT IDENTIFIER given in DER encoding form (using the OpenSSL\ntype ASN1_OBJECT) to its canonical numeric text form, which are the\nsub-identifiers of the OBJECT IDENTIFIER in decimal form, separated by\nperiods.\n\nWhen one of the sub-identifiers in the OBJECT IDENTIFIER is very large\n(these are sizes that are seen as absurdly large, taking up tens or hundreds\nof KiBs), the translation to a decimal number in text may take a very long\ntime.  The time complexity is O(n^2) with 'n' being the size of the\nsub-identifiers in bytes (*).\n\nWith OpenSSL 3.0, support to fetch cryptographic algorithms using names /\nidentifiers in string form was introduced.  This includes using OBJECT\nIDENTIFIERs in canonical numeric text form as identifiers for fetching\nalgorithms.\n\nSuch OBJECT IDENTIFIERs may be received through the ASN.1 structure\nAlgorithmIdentifier, which is commonly used in multiple protocols to specify\nwhat cryptographic algorithm should be used to sign or verify, encrypt or\ndecrypt, or digest passed data.\n\nApplications that call OBJ_obj2txt() directly with untrusted data are\naffected, with any version of OpenSSL.  If the use is for the mere purpose\nof display, the severity is considered low.\n\nIn OpenSSL 3.0 and newer, this affects the subsystems OCSP, PKCS7/SMIME,\nCMS, CMP/CRMF or TS.  It also impacts anything that processes X.509\ncertificates, including simple things like verifying its signature.\n\nThe impact on TLS is relatively low, because all versions of OpenSSL have a\n100KiB limit on the peer's certificate chain.  Additionally, this only\nimpacts clients, or servers that have explicitly enabled client\nauthentication.\n\nIn OpenSSL 1.1.1 and 1.0.2, this only affects displaying diverse objects,\nsuch as X.509 certificates.  This is assumed to not happen in such a way\nthat it would cause a Denial of Service, so these versions are considered\nnot affected by this issue in such a way that it would be cause for concern,\nand the severity is therefore considered low.",
-              'diffID':        'sha256:8e012198eea15b2554b07014081c85fec4967a1b9cc4b65bd9a4bce3ae1c0c88',
-              'fixedVersions': [
-                '3.0.9-r0'
-              ],
-              'installedVersion': '3.0.7-r2',
-              'packageName':      'libcrypto3',
-              'purl':             'pkg:apk/alpine/libcrypto3@3.0.7-r2?arch=x86_64&distro=3.17.1',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2023/05/30/1',
-                'https://access.redhat.com/errata/RHSA-2023:6330',
-                'https://access.redhat.com/security/cve/CVE-2023-2650',
-                'https://bugzilla.redhat.com/1858038',
-                'https://bugzilla.redhat.com/2207947',
-                'https://errata.almalinux.org/9/ALSA-2023-6330.html',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=423a2bc737a908ad0c77bda470b2b59dc879936b',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=853c5e56ee0b8650c73140816bb8b91d6163422c',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=9e209944b35cf82368071f160a744b6178f9b098',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=db779b0e10b047f2585615e0b8f2acdf21f8544a',
-                'https://linux.oracle.com/cve/CVE-2023-2650.html',
-                'https://linux.oracle.com/errata/ELSA-2023-6330.html',
-                'https://lists.debian.org/debian-lts-announce/2023/06/msg00011.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-2650',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0009',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://security.netapp.com/advisory/ntap-20230703-0001/',
-                'https://security.netapp.com/advisory/ntap-20231027-0009/',
-                'https://ubuntu.com/security/notices/USN-6119-1',
-                'https://ubuntu.com/security/notices/USN-6188-1',
-                'https://ubuntu.com/security/notices/USN-6672-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-2650',
-                'https://www.debian.org/security/2023/dsa-5417',
-                'https://www.openssl.org/news/secadv/20230530.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: Possible DoS translating ASN.1 object identifiers'
-            },
-            {
-              'cve':  'CVE-2023-2975',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N'
-                },
-                'redhat': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-354',
-                'CWE-287'
-              ],
-              'description':   'Issue summary: The AES-SIV cipher implementation contains a bug that causes\nit to ignore empty associated data entries which are unauthenticated as\na consequence.\n\nImpact summary: Applications that use the AES-SIV algorithm and want to\nauthenticate empty data entries as associated data can be misled by removing,\nadding or reordering such empty entries as these are ignored by the OpenSSL\nimplementation. We are currently unaware of any such applications.\n\nThe AES-SIV algorithm allows for authentication of multiple associated\ndata entries along with the encryption. To authenticate empty data the\napplication has to call EVP_EncryptUpdate() (or EVP_CipherUpdate()) with\nNULL pointer as the output buffer and 0 as the input buffer length.\nThe AES-SIV implementation in OpenSSL just returns success for such a call\ninstead of performing the associated data authentication operation.\nThe empty data thus will not be authenticated.\n\nAs this issue does not affect non-empty associated data authentication and\nwe expect it to be rare for an application to use empty associated data\nentries this is qualified as Low severity issue.',
-              'diffID':        'sha256:8e012198eea15b2554b07014081c85fec4967a1b9cc4b65bd9a4bce3ae1c0c88',
-              'fixedVersions': [
-                '3.0.9-r2'
-              ],
-              'installedVersion': '3.0.7-r2',
-              'packageName':      'libcrypto3',
-              'purl':             'pkg:apk/alpine/libcrypto3@3.0.7-r2?arch=x86_64&distro=3.17.1',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2023/07/15/1',
-                'http://www.openwall.com/lists/oss-security/2023/07/19/5',
-                'https://access.redhat.com/errata/RHSA-2024:2447',
-                'https://access.redhat.com/security/cve/CVE-2023-2975',
-                'https://bugzilla.redhat.com/2223016',
-                'https://bugzilla.redhat.com/2224962',
-                'https://bugzilla.redhat.com/2227852',
-                'https://bugzilla.redhat.com/2248616',
-                'https://bugzilla.redhat.com/2257571',
-                'https://bugzilla.redhat.com/2258502',
-                'https://bugzilla.redhat.com/2259944',
-                'https://errata.almalinux.org/9/ALSA-2024-2447.html',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=00e2f5eea29994d19293ec4e8c8775ba73678598',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=6a83f0c958811f07e0d11dfc6b5a6a98edfd5bdc',
-                'https://linux.oracle.com/cve/CVE-2023-2975.html',
-                'https://linux.oracle.com/errata/ELSA-2024-2447.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-2975',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://security.netapp.com/advisory/ntap-20230725-0004/',
-                'https://ubuntu.com/security/notices/USN-6450-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-2975',
-                'https://www.openssl.org/news/secadv/20230714.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: AES-SIV cipher implementation contains a bug that causes it to ignore empty associated data entries'
-            },
-            {
-              'cve':  'CVE-2023-3446',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L'
-                },
-                'redhat': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L'
-                }
-              },
-              'cwes': [
-                'CWE-606',
-                'CWE-1333'
-              ],
-              'description':   "Issue summary: Checking excessively long DH keys or parameters may be very slow.\n\nImpact summary: Applications that use the functions DH_check(), DH_check_ex()\nor EVP_PKEY_param_check() to check a DH key or DH parameters may experience long\ndelays. Where the key or parameters that are being checked have been obtained\nfrom an untrusted source this may lead to a Denial of Service.\n\nThe function DH_check() performs various checks on DH parameters. One of those\nchecks confirms that the modulus ('p' parameter) is not too large. Trying to use\na very large modulus is slow and OpenSSL will not normally use a modulus which\nis over 10,000 bits in length.\n\nHowever the DH_check() function checks numerous aspects of the key or parameters\nthat have been supplied. Some of those checks use the supplied modulus value\neven if it has already been found to be too large.\n\nAn application that calls DH_check() and supplies a key or parameters obtained\nfrom an untrusted source could be vulernable to a Denial of Service attack.\n\nThe function DH_check() is itself called by a number of other OpenSSL functions.\nAn application calling any of those other functions may similarly be affected.\nThe other functions affected by this are DH_check_ex() and\nEVP_PKEY_param_check().\n\nAlso vulnerable are the OpenSSL dhparam and pkeyparam command line applications\nwhen using the '-check' option.\n\nThe OpenSSL SSL/TLS implementation is not affected by this issue.\nThe OpenSSL 3.0 and 3.1 FIPS providers are not affected by this issue.",
-              'diffID':        'sha256:8e012198eea15b2554b07014081c85fec4967a1b9cc4b65bd9a4bce3ae1c0c88',
-              'fixedVersions': [
-                '3.0.9-r3'
-              ],
-              'installedVersion': '3.0.7-r2',
-              'packageName':      'libcrypto3',
-              'purl':             'pkg:apk/alpine/libcrypto3@3.0.7-r2?arch=x86_64&distro=3.17.1',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2023/07/19/4',
-                'http://www.openwall.com/lists/oss-security/2023/07/19/5',
-                'http://www.openwall.com/lists/oss-security/2023/07/19/6',
-                'http://www.openwall.com/lists/oss-security/2023/07/31/1',
-                'http://www.openwall.com/lists/oss-security/2024/05/16/1',
-                'https://access.redhat.com/errata/RHSA-2024:2447',
-                'https://access.redhat.com/security/cve/CVE-2023-3446',
-                'https://bugzilla.redhat.com/2223016',
-                'https://bugzilla.redhat.com/2224962',
-                'https://bugzilla.redhat.com/2227852',
-                'https://bugzilla.redhat.com/2248616',
-                'https://bugzilla.redhat.com/2257571',
-                'https://bugzilla.redhat.com/2258502',
-                'https://bugzilla.redhat.com/2259944',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2224962',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2257582',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2257583',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2258677',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2258688',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2258691',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2258694',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2258700',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-36763',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-36764',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3446',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45229',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45231',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45232',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45233',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45235',
-                'https://errata.almalinux.org/9/ALSA-2024-2447.html',
-                'https://errata.rockylinux.org/RLSA-2024:2264',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=1fa20cf2f506113c761777127a38bce5068740eb',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=8780a896543a654e757db1b9396383f9d8095528',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=9a0a4d3c1e7138915563c0df4fe6a3f9377b839c',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=fc9867c1e03c22ebf56943be205202e576aabf23',
-                'https://linux.oracle.com/cve/CVE-2023-3446.html',
-                'https://linux.oracle.com/errata/ELSA-2024-2447.html',
-                'https://lists.debian.org/debian-lts-announce/2023/08/msg00019.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-3446',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://security.netapp.com/advisory/ntap-20230803-0011/',
-                'https://ubuntu.com/security/notices/USN-6435-1',
-                'https://ubuntu.com/security/notices/USN-6435-2',
-                'https://ubuntu.com/security/notices/USN-6450-1',
-                'https://ubuntu.com/security/notices/USN-6709-1',
-                'https://ubuntu.com/security/notices/USN-7018-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-3446',
-                'https://www.openssl.org/news/secadv/20230719.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: Excessive time spent checking DH keys and parameters'
-            },
-            {
-              'cve':  'CVE-2023-3817',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L'
-                },
-                'redhat': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L'
-                }
-              },
-              'cwes': [
-                'CWE-606',
-                'CWE-834'
-              ],
-              'description':   'Issue summary: Checking excessively long DH keys or parameters may be very slow.\n\nImpact summary: Applications that use the functions DH_check(), DH_check_ex()\nor EVP_PKEY_param_check() to check a DH key or DH parameters may experience long\ndelays. Where the key or parameters that are being checked have been obtained\nfrom an untrusted source this may lead to a Denial of Service.\n\nThe function DH_check() performs various checks on DH parameters. After fixing\nCVE-2023-3446 it was discovered that a large q parameter value can also trigger\nan overly long computation during some of these checks. A correct q value,\nif present, cannot be larger than the modulus p parameter, thus it is\nunnecessary to perform these checks if q is larger than p.\n\nAn application that calls DH_check() and supplies a key or parameters obtained\nfrom an untrusted source could be vulnerable to a Denial of Service attack.\n\nThe function DH_check() is itself called by a number of other OpenSSL functions.\nAn application calling any of those other functions may similarly be affected.\nThe other functions affected by this are DH_check_ex() and\nEVP_PKEY_param_check().\n\nAlso vulnerable are the OpenSSL dhparam and pkeyparam command line applications\nwhen using the "-check" option.\n\nThe OpenSSL SSL/TLS implementation is not affected by this issue.\n\nThe OpenSSL 3.0 and 3.1 FIPS providers are not affected by this issue.',
-              'diffID':        'sha256:8e012198eea15b2554b07014081c85fec4967a1b9cc4b65bd9a4bce3ae1c0c88',
-              'fixedVersions': [
-                '3.0.10-r0'
-              ],
-              'installedVersion': '3.0.7-r2',
-              'packageName':      'libcrypto3',
-              'purl':             'pkg:apk/alpine/libcrypto3@3.0.7-r2?arch=x86_64&distro=3.17.1',
-              'references':       [
-                'http://seclists.org/fulldisclosure/2023/Jul/43',
-                'http://www.openwall.com/lists/oss-security/2023/07/31/1',
-                'http://www.openwall.com/lists/oss-security/2023/09/22/11',
-                'http://www.openwall.com/lists/oss-security/2023/09/22/9',
-                'http://www.openwall.com/lists/oss-security/2023/11/06/2',
-                'https://access.redhat.com/errata/RHSA-2024:2447',
-                'https://access.redhat.com/security/cve/CVE-2023-3817',
-                'https://bugzilla.redhat.com/2223016',
-                'https://bugzilla.redhat.com/2224962',
-                'https://bugzilla.redhat.com/2227852',
-                'https://bugzilla.redhat.com/2248616',
-                'https://bugzilla.redhat.com/2257571',
-                'https://bugzilla.redhat.com/2258502',
-                'https://bugzilla.redhat.com/2259944',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2224962',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2227852',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2248616',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2270358',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3446',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3817',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-5678',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-2408',
-                'https://errata.almalinux.org/9/ALSA-2024-2447.html',
-                'https://errata.rockylinux.org/RLSA-2023:7877',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=6a1eb62c29db6cb5eec707f9338aee00f44e26f5',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=869ad69aadd985c7b8ca6f4e5dd0eb274c9f3644',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=9002fd07327a91f35ba6c1307e71fa6fd4409b7f',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=91ddeba0f2269b017dc06c46c993a788974b1aa5',
-                'https://linux.oracle.com/cve/CVE-2023-3817.html',
-                'https://linux.oracle.com/errata/ELSA-2024-2447.html',
-                'https://lists.debian.org/debian-lts-announce/2023/08/msg00019.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-3817',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://security.netapp.com/advisory/ntap-20230818-0014/',
-                'https://security.netapp.com/advisory/ntap-20231027-0008/',
-                'https://security.netapp.com/advisory/ntap-20240621-0006/',
-                'https://ubuntu.com/security/notices/USN-6435-1',
-                'https://ubuntu.com/security/notices/USN-6435-2',
-                'https://ubuntu.com/security/notices/USN-6450-1',
-                'https://ubuntu.com/security/notices/USN-6709-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-3817',
-                'https://www.openssl.org/news/secadv/20230731.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'OpenSSL: Excessive time spent checking DH q parameter value'
-            },
-            {
-              'cve':  'CVE-2023-5678',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L'
-                },
-                'redhat': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L'
-                }
-              },
-              'cwes': [
-                'CWE-606',
-                'CWE-754'
-              ],
-              'description':   "Issue summary: Generating excessively long X9.42 DH keys or checking\nexcessively long X9.42 DH keys or parameters may be very slow.\n\nImpact summary: Applications that use the functions DH_generate_key() to\ngenerate an X9.42 DH key may experience long delays.  Likewise, applications\nthat use DH_check_pub_key(), DH_check_pub_key_ex() or EVP_PKEY_public_check()\nto check an X9.42 DH key or X9.42 DH parameters may experience long delays.\nWhere the key or parameters that are being checked have been obtained from\nan untrusted source this may lead to a Denial of Service.\n\nWhile DH_check() performs all the necessary checks (as of CVE-2023-3817),\nDH_check_pub_key() doesn't make any of these checks, and is therefore\nvulnerable for excessively large P and Q parameters.\n\nLikewise, while DH_generate_key() performs a check for an excessively large\nP, it doesn't check for an excessively large Q.\n\nAn application that calls DH_generate_key() or DH_check_pub_key() and\nsupplies a key or parameters obtained from an untrusted source could be\nvulnerable to a Denial of Service attack.\n\nDH_generate_key() and DH_check_pub_key() are also called by a number of\nother OpenSSL functions.  An application calling any of those other\nfunctions may similarly be affected.  The other functions affected by this\nare DH_check_pub_key_ex(), EVP_PKEY_public_check(), and EVP_PKEY_generate().\n\nAlso vulnerable are the OpenSSL pkey command line application when using the\n\"-pubcheck\" option, as well as the OpenSSL genpkey command line application.\n\nThe OpenSSL SSL/TLS implementation is not affected by this issue.\n\nThe OpenSSL 3.0 and 3.1 FIPS providers are not affected by this issue.",
-              'diffID':        'sha256:8e012198eea15b2554b07014081c85fec4967a1b9cc4b65bd9a4bce3ae1c0c88',
-              'fixedVersions': [
-                '3.0.12-r1'
-              ],
-              'installedVersion': '3.0.7-r2',
-              'packageName':      'libcrypto3',
-              'purl':             'pkg:apk/alpine/libcrypto3@3.0.7-r2?arch=x86_64&distro=3.17.1',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2024/03/11/1',
-                'https://access.redhat.com/errata/RHSA-2024:2447',
-                'https://access.redhat.com/security/cve/CVE-2023-5678',
-                'https://bugzilla.redhat.com/2223016',
-                'https://bugzilla.redhat.com/2224962',
-                'https://bugzilla.redhat.com/2227852',
-                'https://bugzilla.redhat.com/2248616',
-                'https://bugzilla.redhat.com/2257571',
-                'https://bugzilla.redhat.com/2258502',
-                'https://bugzilla.redhat.com/2259944',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2224962',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2227852',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2248616',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2270358',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3446',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3817',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-5678',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-2408',
-                'https://errata.almalinux.org/9/ALSA-2024-2447.html',
-                'https://errata.rockylinux.org/RLSA-2023:7877',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=34efaef6c103d636ab507a0cc34dca4d3aecc055',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=710fee740904b6290fef0dd5536fbcedbc38ff0c',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=db925ae2e65d0d925adef429afc37f75bd1c2017',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=ddeb4b6c6d527e54ce9a99cba785c0f7776e54b6',
-                'https://linux.oracle.com/cve/CVE-2023-5678.html',
-                'https://linux.oracle.com/errata/ELSA-2024-2447.html',
-                'https://lists.debian.org/debian-lts-announce/2024/10/msg00033.html',
-                'https://lists.debian.org/debian-lts-announce/2024/11/msg00000.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-5678',
-                'https://security.netapp.com/advisory/ntap-20231130-0010/',
-                'https://ubuntu.com/security/notices/USN-6622-1',
-                'https://ubuntu.com/security/notices/USN-6632-1',
-                'https://ubuntu.com/security/notices/USN-6709-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-5678',
-                'https://www.openssl.org/news/secadv/20231106.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: Generating excessively long X9.42 DH keys or checking excessively long X9.42 DH keys or parameters may be very slow'
-            },
-            {
-              'cve':  'CVE-2023-6129',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '6.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-440',
-                'CWE-787'
-              ],
-              'description':   'Issue summary: The POLY1305 MAC (message authentication code) implementation\ncontains a bug that might corrupt the internal state of applications running\non PowerPC CPU based platforms if the CPU provides vector instructions.\n\nImpact summary: If an attacker can influence whether the POLY1305 MAC\nalgorithm is used, the application state might be corrupted with various\napplication dependent consequences.\n\nThe POLY1305 MAC (message authentication code) implementation in OpenSSL for\nPowerPC CPUs restores the contents of vector registers in a different order\nthan they are saved. Thus the contents of some of these vector registers\nare corrupted when returning to the caller. The vulnerable code is used only\non newer PowerPC processors supporting the PowerISA 2.07 instructions.\n\nThe consequences of this kind of internal application state corruption can\nbe various - from no consequences, if the calling application does not\ndepend on the contents of non-volatile XMM registers at all, to the worst\nconsequences, where the attacker could get complete control of the application\nprocess. However unless the compiler uses the vector registers for storing\npointers, the most likely consequence, if any, would be an incorrect result\nof some application dependent calculations or a crash leading to a denial of\nservice.\n\nThe POLY1305 MAC algorithm is most frequently used as part of the\nCHACHA20-POLY1305 AEAD (authenticated encryption with associated data)\nalgorithm. The most common usage of this AEAD cipher is with TLS protocol\nversions 1.2 and 1.3. If this cipher is enabled on the server a malicious\nclient can influence whether this AEAD cipher is used. This implies that\nTLS server applications using OpenSSL can be potentially impacted. However\nwe are currently not aware of any concrete application that would be affected\nby this issue therefore we consider this a Low severity security issue.',
-              'diffID':        'sha256:8e012198eea15b2554b07014081c85fec4967a1b9cc4b65bd9a4bce3ae1c0c88',
-              'fixedVersions': [
-                '3.0.12-r2'
-              ],
-              'installedVersion': '3.0.7-r2',
-              'packageName':      'libcrypto3',
-              'purl':             'pkg:apk/alpine/libcrypto3@3.0.7-r2?arch=x86_64&distro=3.17.1',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2024/03/11/1',
-                'https://access.redhat.com/errata/RHSA-2024:9088',
-                'https://access.redhat.com/security/cve/CVE-2023-6129',
-                'https://bugzilla.redhat.com/2257571',
-                'https://bugzilla.redhat.com/2258502',
-                'https://bugzilla.redhat.com/2259944',
-                'https://bugzilla.redhat.com/2284243',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2257571',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2258502',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2259944',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2284243',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-6129',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-6237',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-0727',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-1298',
-                'https://errata.almalinux.org/9/ALSA-2024-9088.html',
-                'https://errata.rockylinux.org/RLSA-2024:9088',
-                'https://github.com/openssl/openssl/commit/050d26383d4e264966fb83428e72d5d48f402d35',
-                'https://github.com/openssl/openssl/commit/5b139f95c9a47a55a0c54100f3837b1eee942b04',
-                'https://github.com/openssl/openssl/commit/f3fc5808fe9ff74042d639839610d03b8fdcc015',
-                'https://linux.oracle.com/cve/CVE-2023-6129.html',
-                'https://linux.oracle.com/errata/ELSA-2024-9088.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-6129',
-                'https://security.netapp.com/advisory/ntap-20240216-0009/',
-                'https://security.netapp.com/advisory/ntap-20240426-0008/',
-                'https://security.netapp.com/advisory/ntap-20240426-0013/',
-                'https://security.netapp.com/advisory/ntap-20240503-0011/',
-                'https://ubuntu.com/security/notices/USN-6622-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-6129',
-                'https://www.openssl.org/news/secadv/20240109.txt',
-                'https://www.openwall.com/lists/oss-security/2024/01/09/1'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: POLY1305 MAC implementation corrupts vector registers on PowerPC'
-            },
-            {
-              'cve':  'CVE-2023-6237',
-              'cvss': {
-                'redhat': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-606'
-              ],
-              'description':   "Issue summary: Checking excessively long invalid RSA public keys may take\na long time.\n\nImpact summary: Applications that use the function EVP_PKEY_public_check()\nto check RSA public keys may experience long delays. Where the key that\nis being checked has been obtained from an untrusted source this may lead\nto a Denial of Service.\n\nWhen function EVP_PKEY_public_check() is called on RSA public keys,\na computation is done to confirm that the RSA modulus, n, is composite.\nFor valid RSA keys, n is a product of two or more large primes and this\ncomputation completes quickly. However, if n is an overly large prime,\nthen this computation would take a long time.\n\nAn application that calls EVP_PKEY_public_check() and supplies an RSA key\nobtained from an untrusted source could be vulnerable to a Denial of Service\nattack.\n\nThe function EVP_PKEY_public_check() is not called from other OpenSSL\nfunctions however it is called from the OpenSSL pkey command line\napplication. For that reason that application is also vulnerable if used\nwith the '-pubin' and '-check' options on untrusted data.\n\nThe OpenSSL SSL/TLS implementation is not affected by this issue.\n\nThe OpenSSL 3.0 and 3.1 FIPS providers are affected by this issue.",
-              'diffID':        'sha256:8e012198eea15b2554b07014081c85fec4967a1b9cc4b65bd9a4bce3ae1c0c88',
-              'fixedVersions': [
-                '3.0.12-r3'
-              ],
-              'installedVersion': '3.0.7-r2',
-              'packageName':      'libcrypto3',
-              'purl':             'pkg:apk/alpine/libcrypto3@3.0.7-r2?arch=x86_64&distro=3.17.1',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2024/03/11/1',
-                'https://access.redhat.com/errata/RHSA-2024:9088',
-                'https://access.redhat.com/security/cve/CVE-2023-6237',
-                'https://bugzilla.redhat.com/2257571',
-                'https://bugzilla.redhat.com/2258502',
-                'https://bugzilla.redhat.com/2259944',
-                'https://bugzilla.redhat.com/2284243',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2257571',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2258502',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2259944',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2284243',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-6129',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-6237',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-0727',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-1298',
-                'https://errata.almalinux.org/9/ALSA-2024-9088.html',
-                'https://errata.rockylinux.org/RLSA-2024:9088',
-                'https://github.com/openssl/openssl/commit/0b0f7abfb37350794a4b8960fafc292cd5d1b84d',
-                'https://github.com/openssl/openssl/commit/18c02492138d1eb8b6548cb26e7b625fb2414a2a',
-                'https://github.com/openssl/openssl/commit/a830f551557d3d66a84bbb18a5b889c640c36294',
-                'https://linux.oracle.com/cve/CVE-2023-6237.html',
-                'https://linux.oracle.com/errata/ELSA-2024-9088.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-6237',
-                'https://security.netapp.com/advisory/ntap-20240531-0007/',
-                'https://ubuntu.com/security/notices/USN-6622-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-6237',
-                'https://www.openssl.org/news/secadv/20240115.txt',
-                'https://www.openwall.com/lists/oss-security/2024/01/15/2'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: Excessive time spent checking invalid RSA public keys'
-            },
-            {
-              'cve':  'CVE-2024-0727',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '5.5',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H'
-                },
-                'nvd': {
-                  'v3score':  '5.5',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '5.5',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-476'
-              ],
-              'description':   'Issue summary: Processing a maliciously formatted PKCS12 file may lead OpenSSL\nto crash leading to a potential Denial of Service attack\n\nImpact summary: Applications loading files in the PKCS12 format from untrusted\nsources might terminate abruptly.\n\nA file in PKCS12 format can contain certificates and keys and may come from an\nuntrusted source. The PKCS12 specification allows certain fields to be NULL, but\nOpenSSL does not correctly check for this case. This can lead to a NULL pointer\ndereference that results in OpenSSL crashing. If an application processes PKCS12\nfiles from an untrusted source using the OpenSSL APIs then that application will\nbe vulnerable to this issue.\n\nOpenSSL APIs that are vulnerable to this are: PKCS12_parse(),\nPKCS12_unpack_p7data(), PKCS12_unpack_p7encdata(), PKCS12_unpack_authsafes()\nand PKCS12_newpass().\n\nWe have also fixed a similar issue in SMIME_write_PKCS7(). However since this\nfunction is related to writing data we do not consider it security significant.\n\nThe FIPS modules in 3.2, 3.1 and 3.0 are not affected by this issue.',
-              'diffID':        'sha256:8e012198eea15b2554b07014081c85fec4967a1b9cc4b65bd9a4bce3ae1c0c88',
-              'fixedVersions': [
-                '3.0.12-r4'
-              ],
-              'installedVersion': '3.0.7-r2',
-              'packageName':      'libcrypto3',
-              'purl':             'pkg:apk/alpine/libcrypto3@3.0.7-r2?arch=x86_64&distro=3.17.1',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2024/03/11/1',
-                'https://access.redhat.com/errata/RHSA-2024:9088',
-                'https://access.redhat.com/security/cve/CVE-2024-0727',
-                'https://bugzilla.redhat.com/2257571',
-                'https://bugzilla.redhat.com/2258502',
-                'https://bugzilla.redhat.com/2259944',
-                'https://bugzilla.redhat.com/2284243',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2257571',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2258502',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2259944',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2284243',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-6129',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-6237',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-0727',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-1298',
-                'https://errata.almalinux.org/9/ALSA-2024-9088.html',
-                'https://errata.rockylinux.org/RLSA-2024:9088',
-                'https://github.com/alexcrichton/openssl-src-rs/commit/add20f73b6b42be7451af2e1044d4e0e778992b2',
-                'https://github.com/github/advisory-database/pull/3472',
-                'https://github.com/openssl/openssl/commit/09df4395b5071217b76dc7d3d2e630eb8c5a79c2',
-                'https://github.com/openssl/openssl/commit/775acfdbd0c6af9ac855f34969cdab0c0c90844a',
-                'https://github.com/openssl/openssl/commit/d135eeab8a5dbf72b3da5240bab9ddb7678dbd2c',
-                'https://github.com/openssl/openssl/pull/23362',
-                'https://github.com/pyca/cryptography/commit/3519591d255d4506fbcd0d04037d45271903c64d',
-                'https://github.openssl.org/openssl/extended-releases/commit/03b3941d60c4bce58fab69a0c22377ab439bc0e8',
-                'https://github.openssl.org/openssl/extended-releases/commit/aebaa5883e31122b404e450732dc833dc9dee539',
-                'https://linux.oracle.com/cve/CVE-2024-0727.html',
-                'https://linux.oracle.com/errata/ELSA-2024-9088.html',
-                'https://lists.debian.org/debian-lts-announce/2024/10/msg00033.html',
-                'https://lists.debian.org/debian-lts-announce/2024/11/msg00000.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2024-0727',
-                'https://security.netapp.com/advisory/ntap-20240208-0006',
-                'https://security.netapp.com/advisory/ntap-20240208-0006/',
-                'https://ubuntu.com/security/notices/USN-6622-1',
-                'https://ubuntu.com/security/notices/USN-6632-1',
-                'https://ubuntu.com/security/notices/USN-6709-1',
-                'https://ubuntu.com/security/notices/USN-7018-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2024-0727',
-                'https://www.openssl.org/news/secadv/20240125.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: denial of service via null dereference'
-            },
-            {
-              'cve':  'CVE-2024-4603',
-              'cvss': {
-                'redhat': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L'
-                }
-              },
-              'cwes': [
-                'CWE-606',
-                'CWE-834'
-              ],
-              'description':   'Issue summary: Checking excessively long DSA keys or parameters may be very\nslow.\n\nImpact summary: Applications that use the functions EVP_PKEY_param_check()\nor EVP_PKEY_public_check() to check a DSA public key or DSA parameters may\nexperience long delays. Where the key or parameters that are being checked\nhave been obtained from an untrusted source this may lead to a Denial of\nService.\n\nThe functions EVP_PKEY_param_check() or EVP_PKEY_public_check() perform\nvarious checks on DSA parameters. Some of those computations take a long time\nif the modulus (`p` parameter) is too large.\n\nTrying to use a very large modulus is slow and OpenSSL will not allow using\npublic keys with a modulus which is over 10,000 bits in length for signature\nverification. However the key and parameter check functions do not limit\nthe modulus size when performing the checks.\n\nAn application that calls EVP_PKEY_param_check() or EVP_PKEY_public_check()\nand supplies a key or parameters obtained from an untrusted source could be\nvulnerable to a Denial of Service attack.\n\nThese functions are not called by OpenSSL itself on untrusted DSA keys so\nonly applications that directly call these functions may be vulnerable.\n\nAlso vulnerable are the OpenSSL pkey and pkeyparam command line applications\nwhen using the `-check` option.\n\nThe OpenSSL SSL/TLS implementation is not affected by this issue.\n\nThe OpenSSL 3.0 and 3.1 FIPS providers are affected by this issue.',
-              'diffID':        'sha256:8e012198eea15b2554b07014081c85fec4967a1b9cc4b65bd9a4bce3ae1c0c88',
-              'fixedVersions': [
-                '3.0.13-r0'
-              ],
-              'installedVersion': '3.0.7-r2',
-              'packageName':      'libcrypto3',
-              'purl':             'pkg:apk/alpine/libcrypto3@3.0.7-r2?arch=x86_64&distro=3.17.1',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2024/05/16/2',
-                'https://access.redhat.com/errata/RHSA-2024:9333',
-                'https://access.redhat.com/security/cve/CVE-2024-4603',
-                'https://bugzilla.redhat.com/2274020',
-                'https://bugzilla.redhat.com/2281029',
-                'https://bugzilla.redhat.com/2283757',
-                'https://bugzilla.redhat.com/2294581',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2274020',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2281029',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2283757',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2294581',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-2511',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-4603',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-4741',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-5535',
-                'https://errata.almalinux.org/9/ALSA-2024-9333.html',
-                'https://errata.rockylinux.org/RLSA-2024:9333',
-                'https://github.com/openssl/openssl/commit/3559e868e58005d15c6013a0c1fd832e51c73397',
-                'https://github.com/openssl/openssl/commit/53ea06486d296b890d565fb971b2764fcd826e7e',
-                'https://github.com/openssl/openssl/commit/9c39b3858091c152f52513c066ff2c5a47969f0d',
-                'https://github.com/openssl/openssl/commit/da343d0605c826ef197aceedc67e8e04f065f740',
-                'https://linux.oracle.com/cve/CVE-2024-4603.html',
-                'https://linux.oracle.com/errata/ELSA-2024-9333.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2024-4603',
-                'https://security.netapp.com/advisory/ntap-20240621-0001/',
-                'https://ubuntu.com/security/notices/USN-6937-1',
-                'https://www.cve.org/CVERecord?id=CVE-2024-4603',
-                'https://www.openssl.org/news/secadv/20240516.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: Excessive time spent checking DSA keys and parameters'
-            },
-            {
-              'cve':  'CVE-2024-4741',
-              'cvss': {
-                'redhat': {
-                  'v3score':  '5.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   'Issue summary: Calling the OpenSSL API function SSL_free_buffers may cause\nmemory to be accessed that was previously freed in some situations\n\nImpact summary: A use after free can have a range of potential consequences such\nas the corruption of valid data, crashes or execution of arbitrary code.\nHowever, only applications that directly call the SSL_free_buffers function are\naffected by this issue. Applications that do not call this function are not\nvulnerable. Our investigations indicate that this function is rarely used by\napplications.\n\nThe SSL_free_buffers function is used to free the internal OpenSSL buffer used\nwhen processing an incoming record from the network. The call is only expected\nto succeed if the buffer is not currently in use. However, two scenarios have\nbeen identified where the buffer is freed even when still in use.\n\nThe first scenario occurs where a record header has been received from the\nnetwork and processed by OpenSSL, but the full record body has not yet arrived.\nIn this case calling SSL_free_buffers will succeed even though a record has only\nbeen partially processed and the buffer is still in use.\n\nThe second scenario occurs where a full record containing application data has\nbeen received and processed by OpenSSL but the application has only read part of\nthis data. Again a call to SSL_free_buffers will succeed even though the buffer\nis still in use.\n\nWhile these scenarios could occur accidentally during normal operation a\nmalicious attacker could attempt to engineer a stituation where this occurs.\nWe are not aware of this issue being actively exploited.\n\nThe FIPS modules in 3.3, 3.2, 3.1 and 3.0 are not affected by this issue.',
-              'diffID':        'sha256:8e012198eea15b2554b07014081c85fec4967a1b9cc4b65bd9a4bce3ae1c0c88',
-              'fixedVersions': [
-                '3.0.14-r0'
-              ],
-              'installedVersion': '3.0.7-r2',
-              'packageName':      'libcrypto3',
-              'purl':             'pkg:apk/alpine/libcrypto3@3.0.7-r2?arch=x86_64&distro=3.17.1',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2024:9333',
-                'https://access.redhat.com/security/cve/CVE-2024-4741',
-                'https://bugzilla.redhat.com/2274020',
-                'https://bugzilla.redhat.com/2281029',
-                'https://bugzilla.redhat.com/2283757',
-                'https://bugzilla.redhat.com/2294581',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2274020',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2281029',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2283757',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2294581',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-2511',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-4603',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-4741',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-5535',
-                'https://errata.almalinux.org/9/ALSA-2024-9333.html',
-                'https://errata.rockylinux.org/RLSA-2024:9333',
-                'https://github.com/openssl/openssl/commit/704f725b96aa373ee45ecfb23f6abfe8be8d9177',
-                'https://github.com/openssl/openssl/commit/b3f0eb0a295f58f16ba43ba99dad70d4ee5c437d',
-                'https://github.com/openssl/openssl/commit/c88c3de51020c37e8706bf7a682a162593053aac',
-                'https://github.com/openssl/openssl/commit/e5093133c35ca82874ad83697af76f4b0f7e3bd8',
-                'https://github.openssl.org/openssl/extended-releases/commit/f7a045f3143fc6da2ee66bf52d8df04829590dd4',
-                'https://linux.oracle.com/cve/CVE-2024-4741.html',
-                'https://linux.oracle.com/errata/ELSA-2024-9333.html',
-                'https://lists.debian.org/debian-lts-announce/2024/10/msg00033.html',
-                'https://lists.debian.org/debian-lts-announce/2024/11/msg00000.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2024-4741',
-                'https://security.netapp.com/advisory/ntap-20240621-0004/',
-                'https://ubuntu.com/security/notices/USN-6937-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2024-4741',
-                'https://www.openssl.org/news/secadv/20240528.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: Use After Free with SSL_free_buffers'
-            },
-            {
-              'cve':  'CVE-2024-5535',
-              'cvss': {
-                'redhat': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-125'
-              ],
-              'description':   'Issue summary: Calling the OpenSSL API function SSL_select_next_proto with an\nempty supported client protocols buffer may cause a crash or memory contents to\nbe sent to the peer.\n\nImpact summary: A buffer overread can have a range of potential consequences\nsuch as unexpected application beahviour or a crash. In particular this issue\ncould result in up to 255 bytes of arbitrary private data from memory being sent\nto the peer leading to a loss of confidentiality. However, only applications\nthat directly call the SSL_select_next_proto function with a 0 length list of\nsupported client protocols are affected by this issue. This would normally never\nbe a valid scenario and is typically not under attacker control but may occur by\naccident in the case of a configuration or programming error in the calling\napplication.\n\nThe OpenSSL API function SSL_select_next_proto is typically used by TLS\napplications that support ALPN (Application Layer Protocol Negotiation) or NPN\n(Next Protocol Negotiation). NPN is older, was never standardised and\nis deprecated in favour of ALPN. We believe that ALPN is significantly more\nwidely deployed than NPN. The SSL_select_next_proto function accepts a list of\nprotocols from the server and a list of protocols from the client and returns\nthe first protocol that appears in the server list that also appears in the\nclient list. In the case of no overlap between the two lists it returns the\nfirst item in the client list. In either case it will signal whether an overlap\nbetween the two lists was found. In the case where SSL_select_next_proto is\ncalled with a zero length client list it fails to notice this condition and\nreturns the memory immediately following the client list pointer (and reports\nthat there was no overlap in the lists).\n\nThis function is typically called from a server side application callback for\nALPN or a client side application callback for NPN. In the case of ALPN the list\nof protocols supplied by the client is guaranteed by libssl to never be zero in\nlength. The list of server protocols comes from the application and should never\nnormally be expected to be of zero length. In this case if the\nSSL_select_next_proto function has been called as expected (with the list\nsupplied by the client passed in the client/client_len parameters), then the\napplication will not be vulnerable to this issue. If the application has\naccidentally been configured with a zero length server list, and has\naccidentally passed that zero length server list in the client/client_len\nparameters, and has additionally failed to correctly handle a "no overlap"\nresponse (which would normally result in a handshake failure in ALPN) then it\nwill be vulnerable to this problem.\n\nIn the case of NPN, the protocol permits the client to opportunistically select\na protocol when there is no overlap. OpenSSL returns the first client protocol\nin the no overlap case in support of this. The list of client protocols comes\nfrom the application and should never normally be expected to be of zero length.\nHowever if the SSL_select_next_proto function is accidentally called with a\nclient_len of 0 then an invalid memory pointer will be returned instead. If the\napplication uses this output as the opportunistic protocol then the loss of\nconfidentiality will occur.\n\nThis issue has been assessed as Low severity because applications are most\nlikely to be vulnerable if they are using NPN instead of ALPN - but NPN is not\nwidely used. It also requires an application configuration or programming error.\nFinally, this issue would not typically be under attacker control making active\nexploitation unlikely.\n\nThe FIPS modules in 3.3, 3.2, 3.1 and 3.0 are not affected by this issue.\n\nDue to the low severity of this issue we are not issuing new releases of\nOpenSSL at this time. The fix will be included in the next releases when they\nbecome available.',
-              'diffID':        'sha256:8e012198eea15b2554b07014081c85fec4967a1b9cc4b65bd9a4bce3ae1c0c88',
-              'fixedVersions': [
-                '3.0.14-r0'
-              ],
-              'installedVersion': '3.0.7-r2',
-              'packageName':      'libcrypto3',
-              'purl':             'pkg:apk/alpine/libcrypto3@3.0.7-r2?arch=x86_64&distro=3.17.1',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2024/06/27/1',
-                'http://www.openwall.com/lists/oss-security/2024/06/28/4',
-                'http://www.openwall.com/lists/oss-security/2024/08/15/1',
-                'https://access.redhat.com/errata/RHSA-2025:1671',
-                'https://access.redhat.com/security/cve/CVE-2024-5535',
-                'https://bugzilla.redhat.com/2294581',
-                'https://bugzilla.redhat.com/2294676',
-                'https://bugzilla.redhat.com/2301888',
-                'https://bugzilla.redhat.com/2318857',
-                'https://bugzilla.redhat.com/2318858',
-                'https://bugzilla.redhat.com/2318870',
-                'https://bugzilla.redhat.com/2318873',
-                'https://bugzilla.redhat.com/2318874',
-                'https://bugzilla.redhat.com/2318876',
-                'https://bugzilla.redhat.com/2318882',
-                'https://bugzilla.redhat.com/2318883',
-                'https://bugzilla.redhat.com/2318884',
-                'https://bugzilla.redhat.com/2318885',
-                'https://bugzilla.redhat.com/2318886',
-                'https://bugzilla.redhat.com/2318897',
-                'https://bugzilla.redhat.com/2318900',
-                'https://bugzilla.redhat.com/2318905',
-                'https://bugzilla.redhat.com/2318914',
-                'https://bugzilla.redhat.com/2318922',
-                'https://bugzilla.redhat.com/2318923',
-                'https://bugzilla.redhat.com/2318925',
-                'https://bugzilla.redhat.com/2318926',
-                'https://bugzilla.redhat.com/2318927',
-                'https://bugzilla.redhat.com/2331191',
-                'https://bugzilla.redhat.com/2339218',
-                'https://bugzilla.redhat.com/2339220',
-                'https://bugzilla.redhat.com/2339221',
-                'https://bugzilla.redhat.com/2339226',
-                'https://bugzilla.redhat.com/2339231',
-                'https://bugzilla.redhat.com/2339236',
-                'https://bugzilla.redhat.com/2339238',
-                'https://bugzilla.redhat.com/2339243',
-                'https://bugzilla.redhat.com/2339247',
-                'https://bugzilla.redhat.com/2339252',
-                'https://bugzilla.redhat.com/2339259',
-                'https://bugzilla.redhat.com/2339266',
-                'https://bugzilla.redhat.com/2339270',
-                'https://bugzilla.redhat.com/2339271',
-                'https://bugzilla.redhat.com/2339275',
-                'https://bugzilla.redhat.com/2339277',
-                'https://bugzilla.redhat.com/2339281',
-                'https://bugzilla.redhat.com/2339284',
-                'https://bugzilla.redhat.com/2339291',
-                'https://bugzilla.redhat.com/2339293',
-                'https://bugzilla.redhat.com/2339295',
-                'https://bugzilla.redhat.com/2339299',
-                'https://bugzilla.redhat.com/2339300',
-                'https://bugzilla.redhat.com/2339304',
-                'https://bugzilla.redhat.com/2339305',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2274020',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2281029',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2283757',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2294581',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-2511',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-4603',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-4741',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-5535',
-                'https://errata.almalinux.org/9/ALSA-2025-1671.html',
-                'https://errata.rockylinux.org/RLSA-2024:9333',
-                'https://github.com/openssl/openssl/commit/4ada436a1946cbb24db5ab4ca082b69c1bc10f37',
-                'https://github.com/openssl/openssl/commit/99fb785a5f85315b95288921a321a935ea29a51e',
-                'https://github.com/openssl/openssl/commit/cf6f91f6121f4db167405db2f0de410a456f260c',
-                'https://github.com/openssl/openssl/commit/e86ac436f0bd54d4517745483e2315650fae7b2c',
-                'https://github.openssl.org/openssl/extended-releases/commit/9947251413065a05189a63c9b7a6c1d4e224c21c',
-                'https://github.openssl.org/openssl/extended-releases/commit/b78ec0824da857223486660177d3b1f255c65d87',
-                'https://linux.oracle.com/cve/CVE-2024-5535.html',
-                'https://linux.oracle.com/errata/ELSA-2025-1673.html',
-                'https://lists.debian.org/debian-lts-announce/2024/10/msg00033.html',
-                'https://lists.debian.org/debian-lts-announce/2024/11/msg00000.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2024-5535',
-                'https://openssl.org/news/secadv/20240627.txt',
-                'https://security.netapp.com/advisory/ntap-20240712-0005/',
-                'https://security.netapp.com/advisory/ntap-20241025-0006/',
-                'https://security.netapp.com/advisory/ntap-20241025-0010/',
-                'https://ubuntu.com/security/notices/USN-6937-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2024-5535',
-                'https://www.openssl.org/news/secadv/20240627.txt',
-                'https://www.oracle.com/security-alerts/cpuoct2024.html#AppendixMSQL'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: SSL_select_next_proto buffer overread'
-            },
-            {
-              'cve':  'CVE-2024-2511',
-              'cvss': {
-                'redhat': {
-                  'v3score':  '3.7',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L'
-                }
-              },
-              'cwes': [
-                'CWE-1325'
-              ],
-              'description':   'Issue summary: Some non-default TLS server configurations can cause unbounded\nmemory growth when processing TLSv1.3 sessions\n\nImpact summary: An attacker may exploit certain server configurations to trigger\nunbounded memory growth that would lead to a Denial of Service\n\nThis problem can occur in TLSv1.3 if the non-default SSL_OP_NO_TICKET option is\nbeing used (but not if early_data support is also configured and the default\nanti-replay protection is in use). In this case, under certain conditions, the\nsession cache can get into an incorrect state and it will fail to flush properly\nas it fills. The session cache will continue to grow in an unbounded manner. A\nmalicious client could deliberately create the scenario for this failure to\nforce a Denial of Service. It may also happen by accident in normal operation.\n\nThis issue only affects TLS servers supporting TLSv1.3. It does not affect TLS\nclients.\n\nThe FIPS modules in 3.2, 3.1 and 3.0 are not affected by this issue. OpenSSL\n1.0.2 is also not affected by this issue.',
-              'diffID':        'sha256:8e012198eea15b2554b07014081c85fec4967a1b9cc4b65bd9a4bce3ae1c0c88',
-              'fixedVersions': [
-                '3.0.12-r5'
-              ],
-              'installedVersion': '3.0.7-r2',
-              'packageName':      'libcrypto3',
-              'purl':             'pkg:apk/alpine/libcrypto3@3.0.7-r2?arch=x86_64&distro=3.17.1',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2024/04/08/5',
-                'https://access.redhat.com/errata/RHSA-2024:9333',
-                'https://access.redhat.com/security/cve/CVE-2024-2511',
-                'https://bugzilla.redhat.com/2274020',
-                'https://bugzilla.redhat.com/2281029',
-                'https://bugzilla.redhat.com/2283757',
-                'https://bugzilla.redhat.com/2294581',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2274020',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2281029',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2283757',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2294581',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-2511',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-4603',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-4741',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-5535',
-                'https://errata.almalinux.org/9/ALSA-2024-9333.html',
-                'https://errata.rockylinux.org/RLSA-2024:9333',
-                'https://github.com/openssl/openssl/commit/7e4d731b1c07201ad9374c1cd9ac5263bdf35bce',
-                'https://github.com/openssl/openssl/commit/b52867a9f618bb955bed2a3ce3db4d4f97ed8e5d',
-                'https://github.com/openssl/openssl/commit/e9d7083e241670332e0443da0f0d4ffb52829f08',
-                'https://github.openssl.org/openssl/extended-releases/commit/5f8d25770ae6437db119dfc951e207271a326640',
-                'https://linux.oracle.com/cve/CVE-2024-2511.html',
-                'https://linux.oracle.com/errata/ELSA-2024-9333.html',
-                'https://lists.debian.org/debian-lts-announce/2024/10/msg00033.html',
-                'https://lists.debian.org/debian-lts-announce/2024/11/msg00000.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2024-2511',
-                'https://security.netapp.com/advisory/ntap-20240503-0013/',
-                'https://ubuntu.com/security/notices/USN-6937-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2024-2511',
-                'https://www.openssl.org/news/secadv/20240408.txt',
-                'https://www.openssl.org/news/vulnerabilities.html'
-              ],
-              'severity':   'LOW',
-              'suppressed': false,
-              'title':      'openssl: Unbounded memory growth with session handling in TLSv1.3'
-            },
-            {
-              'cve':  'CVE-2024-9143',
-              'cvss': {
-                'redhat': {
-                  'v3score':  '3.7',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L'
-                }
-              },
-              'cwes': [
-                'CWE-125',
-                'CWE-787'
-              ],
-              'description':   "Issue summary: Use of the low-level GF(2^m) elliptic curve APIs with untrusted\nexplicit values for the field polynomial can lead to out-of-bounds memory reads\nor writes.\n\nImpact summary: Out of bound memory writes can lead to an application crash or\neven a possibility of a remote code execution, however, in all the protocols\ninvolving Elliptic Curve Cryptography that we're aware of, either only \"named\ncurves\" are supported, or, if explicit curve parameters are supported, they\nspecify an X9.62 encoding of binary (GF(2^m)) curves that can't represent\nproblematic input values. Thus the likelihood of existence of a vulnerable\napplication is low.\n\nIn particular, the X9.62 encoding is used for ECC keys in X.509 certificates,\nso problematic inputs cannot occur in the context of processing X.509\ncertificates.  Any problematic use-cases would have to be using an \"exotic\"\ncurve encoding.\n\nThe affected APIs include: EC_GROUP_new_curve_GF2m(), EC_GROUP_new_from_params(),\nand various supporting BN_GF2m_*() functions.\n\nApplications working with \"exotic\" explicit binary (GF(2^m)) curve parameters,\nthat make it possible to represent invalid field polynomials with a zero\nconstant term, via the above or similar APIs, may terminate abruptly as a\nresult of reading or writing outside of array bounds.  Remote code execution\ncannot easily be ruled out.\n\nThe FIPS modules in 3.3, 3.2, 3.1 and 3.0 are not affected by this issue.",
-              'diffID':        'sha256:8e012198eea15b2554b07014081c85fec4967a1b9cc4b65bd9a4bce3ae1c0c88',
-              'fixedVersions': [
-                '3.0.15-r1'
-              ],
-              'installedVersion': '3.0.7-r2',
-              'packageName':      'libcrypto3',
-              'purl':             'pkg:apk/alpine/libcrypto3@3.0.7-r2?arch=x86_64&distro=3.17.1',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2024/10/16/1',
-                'http://www.openwall.com/lists/oss-security/2024/10/23/1',
-                'http://www.openwall.com/lists/oss-security/2024/10/24/1',
-                'https://access.redhat.com/security/cve/CVE-2024-9143',
-                'https://github.com/openssl/openssl/commit/72ae83ad214d2eef262461365a1975707f862712',
-                'https://github.com/openssl/openssl/commit/bc7e04d7c8d509fb78fc0e285aa948fb0da04700',
-                'https://github.com/openssl/openssl/commit/c0d3e4d32d2805f49bec30547f225bc4d092e1f4',
-                'https://github.com/openssl/openssl/commit/fdf6723362ca51bd883295efe206cb5b1cfa5154',
-                'https://github.openssl.org/openssl/extended-releases/commit/8efc0cbaa8ebba8e116f7b81a876a4123594d86a',
-                'https://github.openssl.org/openssl/extended-releases/commit/9d576994cec2b7aa37a91740ea7e680810957e41',
-                'https://lists.debian.org/debian-lts-announce/2024/10/msg00033.html',
-                'https://lists.debian.org/debian-lts-announce/2024/11/msg00000.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2024-9143',
-                'https://openssl-library.org/news/secadv/20241016.txt',
-                'https://security.netapp.com/advisory/ntap-20241101-0001/',
-                'https://ubuntu.com/security/notices/USN-7264-1',
-                'https://ubuntu.com/security/notices/USN-7278-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2024-9143'
-              ],
-              'severity':   'LOW',
-              'suppressed': false,
-              'title':      'openssl: Low-level invalid GF(2^m) parameters lead to OOB memory access'
-            },
-            {
-              'cve':  'CVE-2022-4450',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'nvd': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-415'
-              ],
-              'description':   'The function PEM_read_bio_ex() reads a PEM file from a BIO and parses and\ndecodes the "name" (e.g. "CERTIFICATE"), any header data and the payload data.\nIf the function succeeds then the "name_out", "header" and "data" arguments are\npopulated with pointers to buffers containing the relevant decoded data. The\ncaller is responsible for freeing those buffers. It is possible to construct a\nPEM file that results in 0 bytes of payload data. In this case PEM_read_bio_ex()\nwill return a failure code but will populate the header argument with a pointer\nto a buffer that has already been freed. If the caller also frees this buffer\nthen a double free will occur. This will most likely lead to a crash. This\ncould be exploited by an attacker who has the ability to supply malicious PEM\nfiles for parsing to achieve a denial of service attack.\n\nThe functions PEM_read_bio() and PEM_read() are simple wrappers around\nPEM_read_bio_ex() and therefore these functions are also directly affected.\n\nThese functions are also called indirectly by a number of other OpenSSL\nfunctions including PEM_X509_INFO_read_bio_ex() and\nSSL_CTX_use_serverinfo_file() which are also vulnerable. Some OpenSSL internal\nuses of these functions are not vulnerable because the caller does not free the\nheader argument if PEM_read_bio_ex() returns a failure code. These locations\ninclude the PEM_read_bio_TYPE() functions as well as the decoders introduced in\nOpenSSL 3.0.\n\nThe OpenSSL asn1parse command line application is also impacted by this issue.',
-              'diffID':        'sha256:8e012198eea15b2554b07014081c85fec4967a1b9cc4b65bd9a4bce3ae1c0c88',
-              'fixedVersions': [
-                '3.0.8-r0'
-              ],
-              'installedVersion': '3.0.7-r2',
-              'packageName':      'libssl3',
-              'purl':             'pkg:apk/alpine/libssl3@3.0.7-r2?arch=x86_64&distro=3.17.1',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2023:2165',
-                'https://access.redhat.com/security/cve/CVE-2022-4450',
-                'https://bugzilla.redhat.com/1960321',
-                'https://bugzilla.redhat.com/2164440',
-                'https://bugzilla.redhat.com/2164487',
-                'https://bugzilla.redhat.com/2164492',
-                'https://bugzilla.redhat.com/2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144000',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144003',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144006',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144008',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144010',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144012',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144015',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144017',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144019',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2145170',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2158412',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164440',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164487',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164488',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164492',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164497',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164499',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164500',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4203',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4304',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4450',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0215',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0216',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0217',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0286',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0401',
-                'https://errata.almalinux.org/9/ALSA-2023-2165.html',
-                'https://errata.rockylinux.org/RLSA-2023:0946',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=63bcf189be73a9cc1264059bed6f57974be74a83',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=bbcf509bd046b34cca19c766bbddc31683d0858b',
-                'https://linux.oracle.com/cve/CVE-2022-4450.html',
-                'https://linux.oracle.com/errata/ELSA-2023-32791.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2022-4450',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0003',
-                'https://rustsec.org/advisories/RUSTSEC-2023-0010.html',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://ubuntu.com/security/notices/USN-5844-1',
-                'https://ubuntu.com/security/notices/USN-6564-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2022-4450',
-                'https://www.openssl.org/news/secadv/20230207.txt'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: double free after calling PEM_read_bio_ex'
-            },
-            {
-              'cve':  'CVE-2023-0215',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'nvd': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   'The public API function BIO_new_NDEF is a helper function used for streaming\nASN.1 data via a BIO. It is primarily used internally to OpenSSL to support the\nSMIME, CMS and PKCS7 streaming capabilities, but may also be called directly by\nend user applications.\n\nThe function receives a BIO from the caller, prepends a new BIO_f_asn1 filter\nBIO onto the front of it to form a BIO chain, and then returns the new head of\nthe BIO chain to the caller. Under certain conditions, for example if a CMS\nrecipient public key is invalid, the new filter BIO is freed and the function\nreturns a NULL result indicating a failure. However, in this case, the BIO chain\nis not properly cleaned up and the BIO passed by the caller still retains\ninternal pointers to the previously freed filter BIO. If the caller then goes on\nto call BIO_pop() on the BIO then a use-after-free will occur. This will most\nlikely result in a crash.\n\n\n\nThis scenario occurs directly in the internal function B64_write_ASN1() which\nmay cause BIO_new_NDEF() to be called and will subsequently call BIO_pop() on\nthe BIO. This internal function is in turn called by the public API functions\nPEM_write_bio_ASN1_stream, PEM_write_bio_CMS_stream, PEM_write_bio_PKCS7_stream,\nSMIME_write_ASN1, SMIME_write_CMS and SMIME_write_PKCS7.\n\nOther public API functions that may be impacted by this include\ni2d_ASN1_bio_stream, BIO_new_CMS, BIO_new_PKCS7, i2d_CMS_bio_stream and\ni2d_PKCS7_bio_stream.\n\nThe OpenSSL cms and smime command line applications are similarly affected.',
-              'diffID':        'sha256:8e012198eea15b2554b07014081c85fec4967a1b9cc4b65bd9a4bce3ae1c0c88',
-              'fixedVersions': [
-                '3.0.8-r0'
-              ],
-              'installedVersion': '3.0.7-r2',
-              'packageName':      'libssl3',
-              'purl':             'pkg:apk/alpine/libssl3@3.0.7-r2?arch=x86_64&distro=3.17.1',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2023:2165',
-                'https://access.redhat.com/security/cve/CVE-2023-0215',
-                'https://bugzilla.redhat.com/1960321',
-                'https://bugzilla.redhat.com/2164440',
-                'https://bugzilla.redhat.com/2164487',
-                'https://bugzilla.redhat.com/2164492',
-                'https://bugzilla.redhat.com/2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144000',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144003',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144006',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144008',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144010',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144012',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144015',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144017',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144019',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2145170',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2158412',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164440',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164487',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164488',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164492',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164497',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164499',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164500',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4203',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4304',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4450',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0215',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0216',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0217',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0286',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0401',
-                'https://errata.almalinux.org/9/ALSA-2023-2165.html',
-                'https://errata.rockylinux.org/RLSA-2023:0946',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=8818064ce3c3c0f1b740a5aaba2a987e75bfbafd',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=9816136fe31d92ace4037d5da5257f763aeeb4eb',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=c3829dd8825c654652201e16f8a0a0c46ee3f344',
-                'https://linux.oracle.com/cve/CVE-2023-0215.html',
-                'https://linux.oracle.com/errata/ELSA-2023-32791.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-0215',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0003',
-                'https://rustsec.org/advisories/RUSTSEC-2023-0009.html',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://security.netapp.com/advisory/ntap-20230427-0007',
-                'https://security.netapp.com/advisory/ntap-20230427-0007/',
-                'https://security.netapp.com/advisory/ntap-20230427-0009',
-                'https://security.netapp.com/advisory/ntap-20230427-0009/',
-                'https://security.netapp.com/advisory/ntap-20240621-0006',
-                'https://security.netapp.com/advisory/ntap-20240621-0006/',
-                'https://ubuntu.com/security/notices/USN-5844-1',
-                'https://ubuntu.com/security/notices/USN-5845-1',
-                'https://ubuntu.com/security/notices/USN-5845-2',
-                'https://ubuntu.com/security/notices/USN-6564-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-0215',
-                'https://www.openssl.org/news/secadv/20230207.txt'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: use-after-free following BIO_new_NDEF'
-            },
-            {
-              'cve':  'CVE-2023-0216',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'nvd': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-476'
-              ],
-              'description':   'An invalid pointer dereference on read can be triggered when an\napplication tries to load malformed PKCS7 data with the\nd2i_PKCS7(), d2i_PKCS7_bio() or d2i_PKCS7_fp() functions.\n\nThe result of the dereference is an application crash which could\nlead to a denial of service attack. The TLS implementation in OpenSSL\ndoes not call this function however third party applications might\ncall these functions on untrusted data.',
-              'diffID':        'sha256:8e012198eea15b2554b07014081c85fec4967a1b9cc4b65bd9a4bce3ae1c0c88',
-              'fixedVersions': [
-                '3.0.8-r0'
-              ],
-              'installedVersion': '3.0.7-r2',
-              'packageName':      'libssl3',
-              'purl':             'pkg:apk/alpine/libssl3@3.0.7-r2?arch=x86_64&distro=3.17.1',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2023:0946',
-                'https://access.redhat.com/security/cve/CVE-2023-0216',
-                'https://bugzilla.redhat.com/2164440',
-                'https://bugzilla.redhat.com/2164487',
-                'https://bugzilla.redhat.com/2164488',
-                'https://bugzilla.redhat.com/2164492',
-                'https://bugzilla.redhat.com/2164494',
-                'https://bugzilla.redhat.com/2164497',
-                'https://bugzilla.redhat.com/2164499',
-                'https://bugzilla.redhat.com/2164500',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144000',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144003',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144006',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144008',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144010',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144012',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144015',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144017',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144019',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2145170',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2158412',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164440',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164487',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164488',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164492',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164497',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164499',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164500',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4203',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4304',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4450',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0215',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0216',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0217',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0286',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0401',
-                'https://errata.almalinux.org/9/ALSA-2023-0946.html',
-                'https://errata.rockylinux.org/RLSA-2023:0946',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=934a04f0e775309cadbef0aa6b9692e1b12a76c6',
-                'https://linux.oracle.com/cve/CVE-2023-0216.html',
-                'https://linux.oracle.com/errata/ELSA-2023-12152.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-0216',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0003',
-                'https://rustsec.org/advisories/RUSTSEC-2023-0011.html',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://ubuntu.com/security/notices/USN-5844-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-0216',
-                'https://www.openssl.org/news/secadv/20230207.txt'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: invalid pointer dereference in d2i_PKCS7 functions'
-            },
-            {
-              'cve':  'CVE-2023-0217',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'nvd': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-476'
-              ],
-              'description':   'An invalid pointer dereference on read can be triggered when an\napplication tries to check a malformed DSA public key by the\nEVP_PKEY_public_check() function. This will most likely lead\nto an application crash. This function can be called on public\nkeys supplied from untrusted sources which could allow an attacker\nto cause a denial of service attack.\n\nThe TLS implementation in OpenSSL does not call this function\nbut applications might call the function if there are additional\nsecurity requirements imposed by standards such as FIPS 140-3.',
-              'diffID':        'sha256:8e012198eea15b2554b07014081c85fec4967a1b9cc4b65bd9a4bce3ae1c0c88',
-              'fixedVersions': [
-                '3.0.8-r0'
-              ],
-              'installedVersion': '3.0.7-r2',
-              'packageName':      'libssl3',
-              'purl':             'pkg:apk/alpine/libssl3@3.0.7-r2?arch=x86_64&distro=3.17.1',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2023:0946',
-                'https://access.redhat.com/security/cve/CVE-2023-0217',
-                'https://bugzilla.redhat.com/2164440',
-                'https://bugzilla.redhat.com/2164487',
-                'https://bugzilla.redhat.com/2164488',
-                'https://bugzilla.redhat.com/2164492',
-                'https://bugzilla.redhat.com/2164494',
-                'https://bugzilla.redhat.com/2164497',
-                'https://bugzilla.redhat.com/2164499',
-                'https://bugzilla.redhat.com/2164500',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144000',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144003',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144006',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144008',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144010',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144012',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144015',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144017',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144019',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2145170',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2158412',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164440',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164487',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164488',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164492',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164497',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164499',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164500',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4203',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4304',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4450',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0215',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0216',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0217',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0286',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0401',
-                'https://errata.almalinux.org/9/ALSA-2023-0946.html',
-                'https://errata.rockylinux.org/RLSA-2023:0946',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=23985bac83fd50c8e29431009302b5442f985096',
-                'https://linux.oracle.com/cve/CVE-2023-0217.html',
-                'https://linux.oracle.com/errata/ELSA-2023-12152.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-0217',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0003',
-                'https://rustsec.org/advisories/RUSTSEC-2023-0012.html',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://ubuntu.com/security/notices/USN-5844-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-0217',
-                'https://www.openssl.org/news/secadv/20230207.txt'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: NULL dereference validating DSA public key'
-            },
-            {
-              'cve':  'CVE-2023-0286',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '7.4',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H'
-                },
-                'nvd': {
-                  'v3score':  '7.4',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.4',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-843'
-              ],
-              'description':   'There is a type confusion vulnerability relating to X.400 address processing\ninside an X.509 GeneralName. X.400 addresses were parsed as an ASN1_STRING but\nthe public structure definition for GENERAL_NAME incorrectly specified the type\nof the x400Address field as ASN1_TYPE. This field is subsequently interpreted by\nthe OpenSSL function GENERAL_NAME_cmp as an ASN1_TYPE rather than an\nASN1_STRING.\n\nWhen CRL checking is enabled (i.e. the application sets the\nX509_V_FLAG_CRL_CHECK flag), this vulnerability may allow an attacker to pass\narbitrary pointers to a memcmp call, enabling them to read memory contents or\nenact a denial of service. In most cases, the attack requires the attacker to\nprovide both the certificate chain and CRL, neither of which need to have a\nvalid signature. If the attacker only controls one of these inputs, the other\ninput must already contain an X.400 address as a CRL distribution point, which\nis uncommon. As such, this vulnerability is most likely to only affect\napplications which have implemented their own functionality for retrieving CRLs\nover a network.',
-              'diffID':        'sha256:8e012198eea15b2554b07014081c85fec4967a1b9cc4b65bd9a4bce3ae1c0c88',
-              'fixedVersions': [
-                '3.0.8-r0'
-              ],
-              'installedVersion': '3.0.7-r2',
-              'packageName':      'libssl3',
-              'purl':             'pkg:apk/alpine/libssl3@3.0.7-r2?arch=x86_64&distro=3.17.1',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2025:7937',
-                'https://access.redhat.com/security/cve/CVE-2023-0286',
-                'https://access.redhat.com/security/cve/cve-2023-0286',
-                'https://bugzilla.redhat.com/2164440',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144000',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144003',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144006',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144008',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144010',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144012',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144015',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144017',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144019',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2145170',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2158412',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164440',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164487',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164488',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164492',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164497',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164499',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164500',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4203',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4304',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4450',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0215',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0216',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0217',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0286',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0401',
-                'https://errata.almalinux.org/9/ALSA-2025-7937.html',
-                'https://errata.rockylinux.org/RLSA-2023:0946',
-                'https://ftp.openbsd.org/pub/OpenBSD/LibreSSL/libressl-3.6.2-relnotes.txt',
-                'https://ftp.openbsd.org/pub/OpenBSD/patches/7.2/common/018_x509.patch.sig',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=2c6c9d439b484e1ba9830d8454a34fa4f80fdfe9',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=2f7530077e0ef79d98718138716bc51ca0cad658',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=fd2af07dc083a350c959147097003a14a5e8ac4d',
-                'https://github.com/pyca/cryptography',
-                'https://github.com/pyca/cryptography/security/advisories/GHSA-x4qr-2fvf-3mr5',
-                'https://linux.oracle.com/cve/CVE-2023-0286.html',
-                'https://linux.oracle.com/errata/ELSA-2025-7937.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-0286',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0003',
-                'https://rustsec.org/advisories/RUSTSEC-2023-0006.html',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://ubuntu.com/security/notices/USN-5844-1',
-                'https://ubuntu.com/security/notices/USN-5845-1',
-                'https://ubuntu.com/security/notices/USN-5845-2',
-                'https://ubuntu.com/security/notices/USN-6564-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-0286',
-                'https://www.openssl.org/news/secadv/20230207.txt'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: X.400 address type confusion in X.509 GeneralName'
-            },
-            {
-              'cve':  'CVE-2023-0401',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'nvd': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-476'
-              ],
-              'description':   'A NULL pointer can be dereferenced when signatures are being\nverified on PKCS7 signed or signedAndEnveloped data. In case the hash\nalgorithm used for the signature is known to the OpenSSL library but\nthe implementation of the hash algorithm is not available the digest\ninitialization will fail. There is a missing check for the return\nvalue from the initialization function which later leads to invalid\nusage of the digest API most likely leading to a crash.\n\nThe unavailability of an algorithm can be caused by using FIPS\nenabled configuration of providers or more commonly by not loading\nthe legacy provider.\n\nPKCS7 data is processed by the SMIME library calls and also by the\ntime stamp (TS) library calls. The TLS implementation in OpenSSL does\nnot call these functions however third party applications would be\naffected if they call these functions to verify signatures on untrusted\ndata.',
-              'diffID':        'sha256:8e012198eea15b2554b07014081c85fec4967a1b9cc4b65bd9a4bce3ae1c0c88',
-              'fixedVersions': [
-                '3.0.8-r0'
-              ],
-              'installedVersion': '3.0.7-r2',
-              'packageName':      'libssl3',
-              'purl':             'pkg:apk/alpine/libssl3@3.0.7-r2?arch=x86_64&distro=3.17.1',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2023:0946',
-                'https://access.redhat.com/security/cve/CVE-2023-0401',
-                'https://bugzilla.redhat.com/2164440',
-                'https://bugzilla.redhat.com/2164487',
-                'https://bugzilla.redhat.com/2164488',
-                'https://bugzilla.redhat.com/2164492',
-                'https://bugzilla.redhat.com/2164494',
-                'https://bugzilla.redhat.com/2164497',
-                'https://bugzilla.redhat.com/2164499',
-                'https://bugzilla.redhat.com/2164500',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144000',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144003',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144006',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144008',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144010',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144012',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144015',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144017',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144019',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2145170',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2158412',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164440',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164487',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164488',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164492',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164497',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164499',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164500',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4203',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4304',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4450',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0215',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0216',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0217',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0286',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0401',
-                'https://errata.almalinux.org/9/ALSA-2023-0946.html',
-                'https://errata.rockylinux.org/RLSA-2023:0946',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=d3b6dfd70db844c4499bec6ad6601623a565e674',
-                'https://github.com/alexcrichton/openssl-src-rs',
-                'https://linux.oracle.com/cve/CVE-2023-0401.html',
-                'https://linux.oracle.com/errata/ELSA-2023-12152.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-0401',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0003',
-                'https://rustsec.org/advisories/RUSTSEC-2023-0013.html',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://ubuntu.com/security/notices/USN-5844-1',
-                'https://ubuntu.com/security/notices/USN-6564-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-0401',
-                'https://www.openssl.org/news/secadv/20230207.txt'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: NULL dereference during PKCS7 data verification'
-            },
-            {
-              'cve':  'CVE-2023-0464',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-295'
-              ],
-              'description':   "A security vulnerability has been identified in all supported versions\n\nof OpenSSL related to the verification of X.509 certificate chains\nthat include policy constraints.  Attackers may be able to exploit this\nvulnerability by creating a malicious certificate chain that triggers\nexponential use of computational resources, leading to a denial-of-service\n(DoS) attack on affected systems.\n\nPolicy processing is disabled by default but can be enabled by passing\nthe `-policy' argument to the command line utilities or by calling the\n`X509_VERIFY_PARAM_set1_policies()' function.",
-              'diffID':        'sha256:8e012198eea15b2554b07014081c85fec4967a1b9cc4b65bd9a4bce3ae1c0c88',
-              'fixedVersions': [
-                '3.0.8-r1'
-              ],
-              'installedVersion': '3.0.7-r2',
-              'packageName':      'libssl3',
-              'purl':             'pkg:apk/alpine/libssl3@3.0.7-r2?arch=x86_64&distro=3.17.1',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2023:3722',
-                'https://access.redhat.com/security/cve/CVE-2023-0464',
-                'https://bugzilla.redhat.com/2181082',
-                'https://bugzilla.redhat.com/2182561',
-                'https://bugzilla.redhat.com/2182565',
-                'https://bugzilla.redhat.com/2188461',
-                'https://bugzilla.redhat.com/2207947',
-                'https://errata.almalinux.org/9/ALSA-2023-3722.html',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=2017771e2db3e2b96f89bbe8766c3209f6a99545',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=2dcd4f1e3115f38cefa43e3efbe9b801c27e642e',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=879f7080d7e141f415c79eaa3a8ac4a3dad0348b',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=959c59c7a0164117e7f8366466a32bb1f8d77ff1',
-                'https://linux.oracle.com/cve/CVE-2023-0464.html',
-                'https://linux.oracle.com/errata/ELSA-2023-3722.html',
-                'https://lists.debian.org/debian-lts-announce/2023/06/msg00011.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-0464',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://security.netapp.com/advisory/ntap-20230406-0006/',
-                'https://security.netapp.com/advisory/ntap-20240621-0006/',
-                'https://ubuntu.com/security/notices/USN-6039-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.couchbase.com/alerts/',
-                'https://www.cve.org/CVERecord?id=CVE-2023-0464',
-                'https://www.debian.org/security/2023/dsa-5417',
-                'https://www.openssl.org/news/secadv/20230322.txt'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: Denial of service by excessive resource usage in verifying X509 policy constraints'
-            },
-            {
-              'cve':  'CVE-2023-5363',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N'
-                },
-                'redhat': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-684'
-              ],
-              'description':   "Issue summary: A bug has been identified in the processing of key and\ninitialisation vector (IV) lengths.  This can lead to potential truncation\nor overruns during the initialisation of some symmetric ciphers.\n\nImpact summary: A truncation in the IV can result in non-uniqueness,\nwhich could result in loss of confidentiality for some cipher modes.\n\nWhen calling EVP_EncryptInit_ex2(), EVP_DecryptInit_ex2() or\nEVP_CipherInit_ex2() the provided OSSL_PARAM array is processed after\nthe key and IV have been established.  Any alterations to the key length,\nvia the \"keylen\" parameter or the IV length, via the \"ivlen\" parameter,\nwithin the OSSL_PARAM array will not take effect as intended, potentially\ncausing truncation or overreading of these values.  The following ciphers\nand cipher modes are impacted: RC2, RC4, RC5, CCM, GCM and OCB.\n\nFor the CCM, GCM and OCB cipher modes, truncation of the IV can result in\nloss of confidentiality.  For example, when following NIST's SP 800-38D\nsection 8.2.1 guidance for constructing a deterministic IV for AES in\nGCM mode, truncation of the counter portion could lead to IV reuse.\n\nBoth truncations and overruns of the key and overruns of the IV will\nproduce incorrect results and could, in some cases, trigger a memory\nexception.  However, these issues are not currently assessed as security\ncritical.\n\nChanging the key and/or IV lengths is not considered to be a common operation\nand the vulnerable API was recently introduced. Furthermore it is likely that\napplication developers will have spotted this problem during testing since\ndecryption would fail unless both peers in the communication were similarly\nvulnerable. For these reasons we expect the probability of an application being\nvulnerable to this to be quite low. However if an application is vulnerable then\nthis issue is considered very serious. For these reasons we have assessed this\nissue as Moderate severity overall.\n\nThe OpenSSL SSL/TLS implementation is not affected by this issue.\n\nThe OpenSSL 3.0 and 3.1 FIPS providers are not affected by this because\nthe issue lies outside of the FIPS provider boundary.\n\nOpenSSL 3.1 and 3.0 are vulnerable to this issue.",
-              'diffID':        'sha256:8e012198eea15b2554b07014081c85fec4967a1b9cc4b65bd9a4bce3ae1c0c88',
-              'fixedVersions': [
-                '3.0.12-r0'
-              ],
-              'installedVersion': '3.0.7-r2',
-              'packageName':      'libssl3',
-              'purl':             'pkg:apk/alpine/libssl3@3.0.7-r2?arch=x86_64&distro=3.17.1',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2023/10/24/1',
-                'https://access.redhat.com/errata/RHSA-2024:0310',
-                'https://access.redhat.com/security/cve/CVE-2023-5363',
-                'https://bugzilla.redhat.com/2243839',
-                'https://errata.almalinux.org/9/ALSA-2024-0310.html',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=0df40630850fb2740e6be6890bb905d3fc623b2d',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=5f69f5c65e483928c4b28ed16af6e5742929f1ee',
-                'https://linux.oracle.com/cve/CVE-2023-5363.html',
-                'https://linux.oracle.com/errata/ELSA-2024-12093.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-5363',
-                'https://security.netapp.com/advisory/ntap-20231027-0010/',
-                'https://security.netapp.com/advisory/ntap-20240201-0003/',
-                'https://security.netapp.com/advisory/ntap-20240201-0004/',
-                'https://security.netapp.com/advisory/ntap-20241108-0002/',
-                'https://ubuntu.com/security/notices/USN-6450-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-5363',
-                'https://www.debian.org/security/2023/dsa-5532',
-                'https://www.openssl.org/news/secadv/20231024.txt'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: Incorrect cipher key and IV length processing'
-            },
-            {
-              'cve':  'CVE-2024-6119',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-843'
-              ],
-              'description':   "Issue summary: Applications performing certificate name checks (e.g., TLS\nclients checking server certificates) may attempt to read an invalid memory\naddress resulting in abnormal termination of the application process.\n\nImpact summary: Abnormal termination of an application can a cause a denial of\nservice.\n\nApplications performing certificate name checks (e.g., TLS clients checking\nserver certificates) may attempt to read an invalid memory address when\ncomparing the expected name with an `otherName` subject alternative name of an\nX.509 certificate. This may result in an exception that terminates the\napplication program.\n\nNote that basic certificate chain validation (signatures, dates, ...) is not\naffected, the denial of service can occur only when the application also\nspecifies an expected DNS name, Email address or IP address.\n\nTLS servers rarely solicit client certificates, and even when they do, they\ngenerally don't perform a name check against a reference identifier (expected\nidentity), but rather extract the presented identity after checking the\ncertificate chain.  So TLS servers are generally not affected and the severity\nof the issue is Moderate.\n\nThe FIPS modules in 3.3, 3.2, 3.1 and 3.0 are not affected by this issue.",
-              'diffID':        'sha256:8e012198eea15b2554b07014081c85fec4967a1b9cc4b65bd9a4bce3ae1c0c88',
-              'fixedVersions': [
-                '3.0.15-r0'
-              ],
-              'installedVersion': '3.0.7-r2',
-              'packageName':      'libssl3',
-              'purl':             'pkg:apk/alpine/libssl3@3.0.7-r2?arch=x86_64&distro=3.17.1',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2024/09/03/4',
-                'https://access.redhat.com/errata/RHSA-2024:8935',
-                'https://access.redhat.com/security/cve/CVE-2024-6119',
-                'https://bugzilla.redhat.com/2306158',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2306158',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-6119',
-                'https://errata.almalinux.org/9/ALSA-2024-8935.html',
-                'https://errata.rockylinux.org/RLSA-2024:6783',
-                'https://github.com/openssl/openssl/commit/05f360d9e849a1b277db628f1f13083a7f8dd04f',
-                'https://github.com/openssl/openssl/commit/06d1dc3fa96a2ba5a3e22735a033012aadc9f0d6',
-                'https://github.com/openssl/openssl/commit/621f3729831b05ee828a3203eddb621d014ff2b2',
-                'https://github.com/openssl/openssl/commit/7dfcee2cd2a63b2c64b9b4b0850be64cb695b0a0',
-                'https://github.com/openssl/openssl/security/advisories/GHSA-5qrj-vq78-58fj',
-                'https://linux.oracle.com/cve/CVE-2024-6119.html',
-                'https://linux.oracle.com/errata/ELSA-2024-8935.html',
-                'https://lists.freebsd.org/archives/freebsd-security/2024-September/000303.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2024-6119',
-                'https://openssl-library.org/news/secadv/20240903.txt',
-                'https://security.netapp.com/advisory/ntap-20240912-0001/',
-                'https://ubuntu.com/security/notices/USN-6986-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2024-6119'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: Possible denial of service in X.509 name checks'
-            },
-            {
-              'cve':  'CVE-2022-4203',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '9.1',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H'
-                },
-                'nvd': {
-                  'v3score':  '4.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '4.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-125'
-              ],
-              'description':   'A read buffer overrun can be triggered in X.509 certificate verification,\nspecifically in name constraint checking. Note that this occurs\nafter certificate chain signature verification and requires either a\nCA to have signed the malicious certificate or for the application to\ncontinue certificate verification despite failure to construct a path\nto a trusted issuer.\n\nThe read buffer overrun might result in a crash which could lead to\na denial of service attack. In theory it could also result in the disclosure\nof private memory contents (such as private keys, or sensitive plaintext)\nalthough we are not aware of any working exploit leading to memory\ncontents disclosure as of the time of release of this advisory.\n\nIn a TLS client, this can be triggered by connecting to a malicious\nserver. In a TLS server, this can be triggered if the server requests\nclient authentication and a malicious client connects.',
-              'diffID':        'sha256:8e012198eea15b2554b07014081c85fec4967a1b9cc4b65bd9a4bce3ae1c0c88',
-              'fixedVersions': [
-                '3.0.8-r0'
-              ],
-              'installedVersion': '3.0.7-r2',
-              'packageName':      'libssl3',
-              'purl':             'pkg:apk/alpine/libssl3@3.0.7-r2?arch=x86_64&distro=3.17.1',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2023:0946',
-                'https://access.redhat.com/security/cve/CVE-2022-4203',
-                'https://bugzilla.redhat.com/2164440',
-                'https://bugzilla.redhat.com/2164487',
-                'https://bugzilla.redhat.com/2164488',
-                'https://bugzilla.redhat.com/2164492',
-                'https://bugzilla.redhat.com/2164494',
-                'https://bugzilla.redhat.com/2164497',
-                'https://bugzilla.redhat.com/2164499',
-                'https://bugzilla.redhat.com/2164500',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144000',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144003',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144006',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144008',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144010',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144012',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144015',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144017',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144019',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2145170',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2158412',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164440',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164487',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164488',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164492',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164497',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164499',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164500',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4203',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4304',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4450',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0215',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0216',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0217',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0286',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0401',
-                'https://errata.almalinux.org/9/ALSA-2023-0946.html',
-                'https://errata.rockylinux.org/RLSA-2023:0946',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=c927a3492698c254637da836762f9b1f86cffabc',
-                'https://linux.oracle.com/cve/CVE-2022-4203.html',
-                'https://linux.oracle.com/errata/ELSA-2023-12152.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2022-4203',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0003',
-                'https://rustsec.org/advisories/RUSTSEC-2023-0008.html',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://ubuntu.com/security/notices/USN-5844-1',
-                'https://www.cve.org/CVERecord?id=CVE-2022-4203',
-                'https://www.openssl.org/news/secadv/20230207.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: read buffer overflow in X.509 certificate verification'
-            },
-            {
-              'cve':  'CVE-2022-4304',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N'
-                },
-                'nvd': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N'
-                },
-                'redhat': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-203'
-              ],
-              'description':   'A timing based side channel exists in the OpenSSL RSA Decryption implementation\nwhich could be sufficient to recover a plaintext across a network in a\nBleichenbacher style attack. To achieve a successful decryption an attacker\nwould have to be able to send a very large number of trial messages for\ndecryption. The vulnerability affects all RSA padding modes: PKCS#1 v1.5,\nRSA-OEAP and RSASVE.\n\nFor example, in a TLS connection, RSA is commonly used by a client to send an\nencrypted pre-master secret to the server. An attacker that had observed a\ngenuine connection between a client and a server could use this flaw to send\ntrial messages to the server and record the time taken to process them. After a\nsufficiently large number of messages the attacker could recover the pre-master\nsecret used for the original connection and thus be able to decrypt the\napplication data sent over that connection.',
-              'diffID':        'sha256:8e012198eea15b2554b07014081c85fec4967a1b9cc4b65bd9a4bce3ae1c0c88',
-              'fixedVersions': [
-                '3.0.8-r0'
-              ],
-              'installedVersion': '3.0.7-r2',
-              'packageName':      'libssl3',
-              'purl':             'pkg:apk/alpine/libssl3@3.0.7-r2?arch=x86_64&distro=3.17.1',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2023:2165',
-                'https://access.redhat.com/security/cve/CVE-2022-4304',
-                'https://bugzilla.redhat.com/1960321',
-                'https://bugzilla.redhat.com/2164440',
-                'https://bugzilla.redhat.com/2164487',
-                'https://bugzilla.redhat.com/2164492',
-                'https://bugzilla.redhat.com/2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144000',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144003',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144006',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144008',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144010',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144012',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144015',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144017',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144019',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2145170',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2158412',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164440',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164487',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164488',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164492',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164497',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164499',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164500',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4203',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4304',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4450',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0215',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0216',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0217',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0286',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0401',
-                'https://errata.almalinux.org/9/ALSA-2023-2165.html',
-                'https://errata.rockylinux.org/RLSA-2023:0946',
-                'https://linux.oracle.com/cve/CVE-2022-4304.html',
-                'https://linux.oracle.com/errata/ELSA-2023-32791.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2022-4304',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0003',
-                'https://rustsec.org/advisories/RUSTSEC-2023-0007.html',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://ubuntu.com/security/notices/USN-5844-1',
-                'https://ubuntu.com/security/notices/USN-6564-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2022-4304',
-                'https://www.openssl.org/news/secadv/20230207.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: timing attack in RSA Decryption implementation'
-            },
-            {
-              'cve':  'CVE-2023-0465',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N'
-                },
-                'redhat': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-295'
-              ],
-              'description':   "Applications that use a non-default option when verifying certificates may be\nvulnerable to an attack from a malicious CA to circumvent certain checks.\n\nInvalid certificate policies in leaf certificates are silently ignored by\nOpenSSL and other certificate policy checks are skipped for that certificate.\nA malicious CA could use this to deliberately assert invalid certificate policies\nin order to circumvent policy checking on the certificate altogether.\n\nPolicy processing is disabled by default but can be enabled by passing\nthe `-policy' argument to the command line utilities or by calling the\n`X509_VERIFY_PARAM_set1_policies()' function.",
-              'diffID':        'sha256:8e012198eea15b2554b07014081c85fec4967a1b9cc4b65bd9a4bce3ae1c0c88',
-              'fixedVersions': [
-                '3.0.8-r2'
-              ],
-              'installedVersion': '3.0.7-r2',
-              'packageName':      'libssl3',
-              'purl':             'pkg:apk/alpine/libssl3@3.0.7-r2?arch=x86_64&distro=3.17.1',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2023:3722',
-                'https://access.redhat.com/security/cve/CVE-2023-0465',
-                'https://bugzilla.redhat.com/2181082',
-                'https://bugzilla.redhat.com/2182561',
-                'https://bugzilla.redhat.com/2182565',
-                'https://bugzilla.redhat.com/2188461',
-                'https://bugzilla.redhat.com/2207947',
-                'https://errata.almalinux.org/9/ALSA-2023-3722.html',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=10325176f3d3e98c6e2b3bf5ab1e3b334de6947a',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=1dd43e0709fece299b15208f36cc7c76209ba0bb',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=b013765abfa80036dc779dd0e50602c57bb3bf95',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=facfb1ab745646e97a1920977ae4a9965ea61d5c',
-                'https://linux.oracle.com/cve/CVE-2023-0465.html',
-                'https://linux.oracle.com/errata/ELSA-2023-3722.html',
-                'https://lists.debian.org/debian-lts-announce/2023/06/msg00011.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-0465',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://security.netapp.com/advisory/ntap-20230414-0001/',
-                'https://ubuntu.com/security/notices/USN-6039-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-0465',
-                'https://www.debian.org/security/2023/dsa-5417',
-                'https://www.openssl.org/news/secadv/20230328.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: Invalid certificate policies in leaf certificates are silently ignored'
-            },
-            {
-              'cve':  'CVE-2023-0466',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N'
-                },
-                'redhat': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-295'
-              ],
-              'description':   'The function X509_VERIFY_PARAM_add0_policy() is documented to\nimplicitly enable the certificate policy check when doing certificate\nverification. However the implementation of the function does not\nenable the check which allows certificates with invalid or incorrect\npolicies to pass the certificate verification.\n\nAs suddenly enabling the policy check could break existing deployments it was\ndecided to keep the existing behavior of the X509_VERIFY_PARAM_add0_policy()\nfunction.\n\nInstead the applications that require OpenSSL to perform certificate\npolicy check need to use X509_VERIFY_PARAM_set1_policies() or explicitly\nenable the policy check by calling X509_VERIFY_PARAM_set_flags() with\nthe X509_V_FLAG_POLICY_CHECK flag argument.\n\nCertificate policy checks are disabled by default in OpenSSL and are not\ncommonly used by applications.',
-              'diffID':        'sha256:8e012198eea15b2554b07014081c85fec4967a1b9cc4b65bd9a4bce3ae1c0c88',
-              'fixedVersions': [
-                '3.0.8-r3'
-              ],
-              'installedVersion': '3.0.7-r2',
-              'packageName':      'libssl3',
-              'purl':             'pkg:apk/alpine/libssl3@3.0.7-r2?arch=x86_64&distro=3.17.1',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2023/09/28/4',
-                'https://access.redhat.com/errata/RHSA-2023:3722',
-                'https://access.redhat.com/security/cve/CVE-2023-0466',
-                'https://bugzilla.redhat.com/2181082',
-                'https://bugzilla.redhat.com/2182561',
-                'https://bugzilla.redhat.com/2182565',
-                'https://bugzilla.redhat.com/2188461',
-                'https://bugzilla.redhat.com/2207947',
-                'https://errata.almalinux.org/9/ALSA-2023-3722.html',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=0d16b7e99aafc0b4a6d729eec65a411a7e025f0a',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=51e8a84ce742db0f6c70510d0159dad8f7825908',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=73398dea26de9899fb4baa94098ad0a61f435c72',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=fc814a30fc4f0bc54fcea7d9a7462f5457aab061',
-                'https://linux.oracle.com/cve/CVE-2023-0466.html',
-                'https://linux.oracle.com/errata/ELSA-2023-3722.html',
-                'https://lists.debian.org/debian-lts-announce/2023/06/msg00011.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-0466',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://security.netapp.com/advisory/ntap-20230414-0001/',
-                'https://ubuntu.com/security/notices/USN-6039-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-0466',
-                'https://www.debian.org/security/2023/dsa-5417',
-                'https://www.openssl.org/news/secadv/20230328.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: Certificate policy check not enabled'
-            },
-            {
-              'cve':  'CVE-2023-1255',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '5.1',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-125'
-              ],
-              'description':   'Issue summary: The AES-XTS cipher decryption implementation for 64 bit ARM\nplatform contains a bug that could cause it to read past the input buffer,\nleading to a crash.\n\nImpact summary: Applications that use the AES-XTS algorithm on the 64 bit ARM\nplatform can crash in rare circumstances. The AES-XTS algorithm is usually\nused for disk encryption.\n\nThe AES-XTS cipher decryption implementation for 64 bit ARM platform will read\npast the end of the ciphertext buffer if the ciphertext size is 4 mod 5 in 16\nbyte blocks, e.g. 144 bytes or 1024 bytes. If the memory after the ciphertext\nbuffer is unmapped, this will trigger a crash which results in a denial of\nservice.\n\nIf an attacker can control the size and location of the ciphertext buffer\nbeing decrypted by an application using AES-XTS on 64 bit ARM, the\napplication is affected. This is fairly unlikely making this issue\na Low severity one.',
-              'diffID':        'sha256:8e012198eea15b2554b07014081c85fec4967a1b9cc4b65bd9a4bce3ae1c0c88',
-              'fixedVersions': [
-                '3.0.8-r4'
-              ],
-              'installedVersion': '3.0.7-r2',
-              'packageName':      'libssl3',
-              'purl':             'pkg:apk/alpine/libssl3@3.0.7-r2?arch=x86_64&distro=3.17.1',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2023:3722',
-                'https://access.redhat.com/security/cve/CVE-2023-1255',
-                'https://bugzilla.redhat.com/2181082',
-                'https://bugzilla.redhat.com/2182561',
-                'https://bugzilla.redhat.com/2182565',
-                'https://bugzilla.redhat.com/2188461',
-                'https://bugzilla.redhat.com/2207947',
-                'https://errata.almalinux.org/9/ALSA-2023-3722.html',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=02ac9c9420275868472f33b01def01218742b8bb',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=bc2f61ad70971869b242fc1cb445b98bad50074a',
-                'https://linux.oracle.com/cve/CVE-2023-1255.html',
-                'https://linux.oracle.com/errata/ELSA-2023-3722.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-1255',
-                'https://security.netapp.com/advisory/ntap-20230908-0006/',
-                'https://ubuntu.com/security/notices/USN-6119-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-1255',
-                'https://www.openssl.org/news/secadv/20230419.txt',
-                'https://www.openssl.org/news/secadv/20230420.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: Input buffer over-read in AES-XTS implementation on 64 bit ARM'
-            },
-            {
-              'cve':  'CVE-2023-2650',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '6.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-770'
-              ],
-              'description':   "Issue summary: Processing some specially crafted ASN.1 object identifiers or\ndata containing them may be very slow.\n\nImpact summary: Applications that use OBJ_obj2txt() directly, or use any of\nthe OpenSSL subsystems OCSP, PKCS7/SMIME, CMS, CMP/CRMF or TS with no message\nsize limit may experience notable to very long delays when processing those\nmessages, which may lead to a Denial of Service.\n\nAn OBJECT IDENTIFIER is composed of a series of numbers - sub-identifiers -\nmost of which have no size limit.  OBJ_obj2txt() may be used to translate\nan ASN.1 OBJECT IDENTIFIER given in DER encoding form (using the OpenSSL\ntype ASN1_OBJECT) to its canonical numeric text form, which are the\nsub-identifiers of the OBJECT IDENTIFIER in decimal form, separated by\nperiods.\n\nWhen one of the sub-identifiers in the OBJECT IDENTIFIER is very large\n(these are sizes that are seen as absurdly large, taking up tens or hundreds\nof KiBs), the translation to a decimal number in text may take a very long\ntime.  The time complexity is O(n^2) with 'n' being the size of the\nsub-identifiers in bytes (*).\n\nWith OpenSSL 3.0, support to fetch cryptographic algorithms using names /\nidentifiers in string form was introduced.  This includes using OBJECT\nIDENTIFIERs in canonical numeric text form as identifiers for fetching\nalgorithms.\n\nSuch OBJECT IDENTIFIERs may be received through the ASN.1 structure\nAlgorithmIdentifier, which is commonly used in multiple protocols to specify\nwhat cryptographic algorithm should be used to sign or verify, encrypt or\ndecrypt, or digest passed data.\n\nApplications that call OBJ_obj2txt() directly with untrusted data are\naffected, with any version of OpenSSL.  If the use is for the mere purpose\nof display, the severity is considered low.\n\nIn OpenSSL 3.0 and newer, this affects the subsystems OCSP, PKCS7/SMIME,\nCMS, CMP/CRMF or TS.  It also impacts anything that processes X.509\ncertificates, including simple things like verifying its signature.\n\nThe impact on TLS is relatively low, because all versions of OpenSSL have a\n100KiB limit on the peer's certificate chain.  Additionally, this only\nimpacts clients, or servers that have explicitly enabled client\nauthentication.\n\nIn OpenSSL 1.1.1 and 1.0.2, this only affects displaying diverse objects,\nsuch as X.509 certificates.  This is assumed to not happen in such a way\nthat it would cause a Denial of Service, so these versions are considered\nnot affected by this issue in such a way that it would be cause for concern,\nand the severity is therefore considered low.",
-              'diffID':        'sha256:8e012198eea15b2554b07014081c85fec4967a1b9cc4b65bd9a4bce3ae1c0c88',
-              'fixedVersions': [
-                '3.0.9-r0'
-              ],
-              'installedVersion': '3.0.7-r2',
-              'packageName':      'libssl3',
-              'purl':             'pkg:apk/alpine/libssl3@3.0.7-r2?arch=x86_64&distro=3.17.1',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2023/05/30/1',
-                'https://access.redhat.com/errata/RHSA-2023:6330',
-                'https://access.redhat.com/security/cve/CVE-2023-2650',
-                'https://bugzilla.redhat.com/1858038',
-                'https://bugzilla.redhat.com/2207947',
-                'https://errata.almalinux.org/9/ALSA-2023-6330.html',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=423a2bc737a908ad0c77bda470b2b59dc879936b',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=853c5e56ee0b8650c73140816bb8b91d6163422c',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=9e209944b35cf82368071f160a744b6178f9b098',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=db779b0e10b047f2585615e0b8f2acdf21f8544a',
-                'https://linux.oracle.com/cve/CVE-2023-2650.html',
-                'https://linux.oracle.com/errata/ELSA-2023-6330.html',
-                'https://lists.debian.org/debian-lts-announce/2023/06/msg00011.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-2650',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0009',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://security.netapp.com/advisory/ntap-20230703-0001/',
-                'https://security.netapp.com/advisory/ntap-20231027-0009/',
-                'https://ubuntu.com/security/notices/USN-6119-1',
-                'https://ubuntu.com/security/notices/USN-6188-1',
-                'https://ubuntu.com/security/notices/USN-6672-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-2650',
-                'https://www.debian.org/security/2023/dsa-5417',
-                'https://www.openssl.org/news/secadv/20230530.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: Possible DoS translating ASN.1 object identifiers'
-            },
-            {
-              'cve':  'CVE-2023-2975',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N'
-                },
-                'redhat': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-354',
-                'CWE-287'
-              ],
-              'description':   'Issue summary: The AES-SIV cipher implementation contains a bug that causes\nit to ignore empty associated data entries which are unauthenticated as\na consequence.\n\nImpact summary: Applications that use the AES-SIV algorithm and want to\nauthenticate empty data entries as associated data can be misled by removing,\nadding or reordering such empty entries as these are ignored by the OpenSSL\nimplementation. We are currently unaware of any such applications.\n\nThe AES-SIV algorithm allows for authentication of multiple associated\ndata entries along with the encryption. To authenticate empty data the\napplication has to call EVP_EncryptUpdate() (or EVP_CipherUpdate()) with\nNULL pointer as the output buffer and 0 as the input buffer length.\nThe AES-SIV implementation in OpenSSL just returns success for such a call\ninstead of performing the associated data authentication operation.\nThe empty data thus will not be authenticated.\n\nAs this issue does not affect non-empty associated data authentication and\nwe expect it to be rare for an application to use empty associated data\nentries this is qualified as Low severity issue.',
-              'diffID':        'sha256:8e012198eea15b2554b07014081c85fec4967a1b9cc4b65bd9a4bce3ae1c0c88',
-              'fixedVersions': [
-                '3.0.9-r2'
-              ],
-              'installedVersion': '3.0.7-r2',
-              'packageName':      'libssl3',
-              'purl':             'pkg:apk/alpine/libssl3@3.0.7-r2?arch=x86_64&distro=3.17.1',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2023/07/15/1',
-                'http://www.openwall.com/lists/oss-security/2023/07/19/5',
-                'https://access.redhat.com/errata/RHSA-2024:2447',
-                'https://access.redhat.com/security/cve/CVE-2023-2975',
-                'https://bugzilla.redhat.com/2223016',
-                'https://bugzilla.redhat.com/2224962',
-                'https://bugzilla.redhat.com/2227852',
-                'https://bugzilla.redhat.com/2248616',
-                'https://bugzilla.redhat.com/2257571',
-                'https://bugzilla.redhat.com/2258502',
-                'https://bugzilla.redhat.com/2259944',
-                'https://errata.almalinux.org/9/ALSA-2024-2447.html',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=00e2f5eea29994d19293ec4e8c8775ba73678598',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=6a83f0c958811f07e0d11dfc6b5a6a98edfd5bdc',
-                'https://linux.oracle.com/cve/CVE-2023-2975.html',
-                'https://linux.oracle.com/errata/ELSA-2024-2447.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-2975',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://security.netapp.com/advisory/ntap-20230725-0004/',
-                'https://ubuntu.com/security/notices/USN-6450-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-2975',
-                'https://www.openssl.org/news/secadv/20230714.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: AES-SIV cipher implementation contains a bug that causes it to ignore empty associated data entries'
-            },
-            {
-              'cve':  'CVE-2023-3446',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L'
-                },
-                'redhat': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L'
-                }
-              },
-              'cwes': [
-                'CWE-606',
-                'CWE-1333'
-              ],
-              'description':   "Issue summary: Checking excessively long DH keys or parameters may be very slow.\n\nImpact summary: Applications that use the functions DH_check(), DH_check_ex()\nor EVP_PKEY_param_check() to check a DH key or DH parameters may experience long\ndelays. Where the key or parameters that are being checked have been obtained\nfrom an untrusted source this may lead to a Denial of Service.\n\nThe function DH_check() performs various checks on DH parameters. One of those\nchecks confirms that the modulus ('p' parameter) is not too large. Trying to use\na very large modulus is slow and OpenSSL will not normally use a modulus which\nis over 10,000 bits in length.\n\nHowever the DH_check() function checks numerous aspects of the key or parameters\nthat have been supplied. Some of those checks use the supplied modulus value\neven if it has already been found to be too large.\n\nAn application that calls DH_check() and supplies a key or parameters obtained\nfrom an untrusted source could be vulernable to a Denial of Service attack.\n\nThe function DH_check() is itself called by a number of other OpenSSL functions.\nAn application calling any of those other functions may similarly be affected.\nThe other functions affected by this are DH_check_ex() and\nEVP_PKEY_param_check().\n\nAlso vulnerable are the OpenSSL dhparam and pkeyparam command line applications\nwhen using the '-check' option.\n\nThe OpenSSL SSL/TLS implementation is not affected by this issue.\nThe OpenSSL 3.0 and 3.1 FIPS providers are not affected by this issue.",
-              'diffID':        'sha256:8e012198eea15b2554b07014081c85fec4967a1b9cc4b65bd9a4bce3ae1c0c88',
-              'fixedVersions': [
-                '3.0.9-r3'
-              ],
-              'installedVersion': '3.0.7-r2',
-              'packageName':      'libssl3',
-              'purl':             'pkg:apk/alpine/libssl3@3.0.7-r2?arch=x86_64&distro=3.17.1',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2023/07/19/4',
-                'http://www.openwall.com/lists/oss-security/2023/07/19/5',
-                'http://www.openwall.com/lists/oss-security/2023/07/19/6',
-                'http://www.openwall.com/lists/oss-security/2023/07/31/1',
-                'http://www.openwall.com/lists/oss-security/2024/05/16/1',
-                'https://access.redhat.com/errata/RHSA-2024:2447',
-                'https://access.redhat.com/security/cve/CVE-2023-3446',
-                'https://bugzilla.redhat.com/2223016',
-                'https://bugzilla.redhat.com/2224962',
-                'https://bugzilla.redhat.com/2227852',
-                'https://bugzilla.redhat.com/2248616',
-                'https://bugzilla.redhat.com/2257571',
-                'https://bugzilla.redhat.com/2258502',
-                'https://bugzilla.redhat.com/2259944',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2224962',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2257582',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2257583',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2258677',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2258688',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2258691',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2258694',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2258700',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-36763',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-36764',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3446',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45229',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45231',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45232',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45233',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45235',
-                'https://errata.almalinux.org/9/ALSA-2024-2447.html',
-                'https://errata.rockylinux.org/RLSA-2024:2264',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=1fa20cf2f506113c761777127a38bce5068740eb',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=8780a896543a654e757db1b9396383f9d8095528',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=9a0a4d3c1e7138915563c0df4fe6a3f9377b839c',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=fc9867c1e03c22ebf56943be205202e576aabf23',
-                'https://linux.oracle.com/cve/CVE-2023-3446.html',
-                'https://linux.oracle.com/errata/ELSA-2024-2447.html',
-                'https://lists.debian.org/debian-lts-announce/2023/08/msg00019.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-3446',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://security.netapp.com/advisory/ntap-20230803-0011/',
-                'https://ubuntu.com/security/notices/USN-6435-1',
-                'https://ubuntu.com/security/notices/USN-6435-2',
-                'https://ubuntu.com/security/notices/USN-6450-1',
-                'https://ubuntu.com/security/notices/USN-6709-1',
-                'https://ubuntu.com/security/notices/USN-7018-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-3446',
-                'https://www.openssl.org/news/secadv/20230719.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: Excessive time spent checking DH keys and parameters'
-            },
-            {
-              'cve':  'CVE-2023-3817',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L'
-                },
-                'redhat': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L'
-                }
-              },
-              'cwes': [
-                'CWE-606',
-                'CWE-834'
-              ],
-              'description':   'Issue summary: Checking excessively long DH keys or parameters may be very slow.\n\nImpact summary: Applications that use the functions DH_check(), DH_check_ex()\nor EVP_PKEY_param_check() to check a DH key or DH parameters may experience long\ndelays. Where the key or parameters that are being checked have been obtained\nfrom an untrusted source this may lead to a Denial of Service.\n\nThe function DH_check() performs various checks on DH parameters. After fixing\nCVE-2023-3446 it was discovered that a large q parameter value can also trigger\nan overly long computation during some of these checks. A correct q value,\nif present, cannot be larger than the modulus p parameter, thus it is\nunnecessary to perform these checks if q is larger than p.\n\nAn application that calls DH_check() and supplies a key or parameters obtained\nfrom an untrusted source could be vulnerable to a Denial of Service attack.\n\nThe function DH_check() is itself called by a number of other OpenSSL functions.\nAn application calling any of those other functions may similarly be affected.\nThe other functions affected by this are DH_check_ex() and\nEVP_PKEY_param_check().\n\nAlso vulnerable are the OpenSSL dhparam and pkeyparam command line applications\nwhen using the "-check" option.\n\nThe OpenSSL SSL/TLS implementation is not affected by this issue.\n\nThe OpenSSL 3.0 and 3.1 FIPS providers are not affected by this issue.',
-              'diffID':        'sha256:8e012198eea15b2554b07014081c85fec4967a1b9cc4b65bd9a4bce3ae1c0c88',
-              'fixedVersions': [
-                '3.0.10-r0'
-              ],
-              'installedVersion': '3.0.7-r2',
-              'packageName':      'libssl3',
-              'purl':             'pkg:apk/alpine/libssl3@3.0.7-r2?arch=x86_64&distro=3.17.1',
-              'references':       [
-                'http://seclists.org/fulldisclosure/2023/Jul/43',
-                'http://www.openwall.com/lists/oss-security/2023/07/31/1',
-                'http://www.openwall.com/lists/oss-security/2023/09/22/11',
-                'http://www.openwall.com/lists/oss-security/2023/09/22/9',
-                'http://www.openwall.com/lists/oss-security/2023/11/06/2',
-                'https://access.redhat.com/errata/RHSA-2024:2447',
-                'https://access.redhat.com/security/cve/CVE-2023-3817',
-                'https://bugzilla.redhat.com/2223016',
-                'https://bugzilla.redhat.com/2224962',
-                'https://bugzilla.redhat.com/2227852',
-                'https://bugzilla.redhat.com/2248616',
-                'https://bugzilla.redhat.com/2257571',
-                'https://bugzilla.redhat.com/2258502',
-                'https://bugzilla.redhat.com/2259944',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2224962',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2227852',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2248616',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2270358',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3446',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3817',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-5678',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-2408',
-                'https://errata.almalinux.org/9/ALSA-2024-2447.html',
-                'https://errata.rockylinux.org/RLSA-2023:7877',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=6a1eb62c29db6cb5eec707f9338aee00f44e26f5',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=869ad69aadd985c7b8ca6f4e5dd0eb274c9f3644',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=9002fd07327a91f35ba6c1307e71fa6fd4409b7f',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=91ddeba0f2269b017dc06c46c993a788974b1aa5',
-                'https://linux.oracle.com/cve/CVE-2023-3817.html',
-                'https://linux.oracle.com/errata/ELSA-2024-2447.html',
-                'https://lists.debian.org/debian-lts-announce/2023/08/msg00019.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-3817',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://security.netapp.com/advisory/ntap-20230818-0014/',
-                'https://security.netapp.com/advisory/ntap-20231027-0008/',
-                'https://security.netapp.com/advisory/ntap-20240621-0006/',
-                'https://ubuntu.com/security/notices/USN-6435-1',
-                'https://ubuntu.com/security/notices/USN-6435-2',
-                'https://ubuntu.com/security/notices/USN-6450-1',
-                'https://ubuntu.com/security/notices/USN-6709-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-3817',
-                'https://www.openssl.org/news/secadv/20230731.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'OpenSSL: Excessive time spent checking DH q parameter value'
-            },
-            {
-              'cve':  'CVE-2023-5678',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L'
-                },
-                'redhat': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L'
-                }
-              },
-              'cwes': [
-                'CWE-606',
-                'CWE-754'
-              ],
-              'description':   "Issue summary: Generating excessively long X9.42 DH keys or checking\nexcessively long X9.42 DH keys or parameters may be very slow.\n\nImpact summary: Applications that use the functions DH_generate_key() to\ngenerate an X9.42 DH key may experience long delays.  Likewise, applications\nthat use DH_check_pub_key(), DH_check_pub_key_ex() or EVP_PKEY_public_check()\nto check an X9.42 DH key or X9.42 DH parameters may experience long delays.\nWhere the key or parameters that are being checked have been obtained from\nan untrusted source this may lead to a Denial of Service.\n\nWhile DH_check() performs all the necessary checks (as of CVE-2023-3817),\nDH_check_pub_key() doesn't make any of these checks, and is therefore\nvulnerable for excessively large P and Q parameters.\n\nLikewise, while DH_generate_key() performs a check for an excessively large\nP, it doesn't check for an excessively large Q.\n\nAn application that calls DH_generate_key() or DH_check_pub_key() and\nsupplies a key or parameters obtained from an untrusted source could be\nvulnerable to a Denial of Service attack.\n\nDH_generate_key() and DH_check_pub_key() are also called by a number of\nother OpenSSL functions.  An application calling any of those other\nfunctions may similarly be affected.  The other functions affected by this\nare DH_check_pub_key_ex(), EVP_PKEY_public_check(), and EVP_PKEY_generate().\n\nAlso vulnerable are the OpenSSL pkey command line application when using the\n\"-pubcheck\" option, as well as the OpenSSL genpkey command line application.\n\nThe OpenSSL SSL/TLS implementation is not affected by this issue.\n\nThe OpenSSL 3.0 and 3.1 FIPS providers are not affected by this issue.",
-              'diffID':        'sha256:8e012198eea15b2554b07014081c85fec4967a1b9cc4b65bd9a4bce3ae1c0c88',
-              'fixedVersions': [
-                '3.0.12-r1'
-              ],
-              'installedVersion': '3.0.7-r2',
-              'packageName':      'libssl3',
-              'purl':             'pkg:apk/alpine/libssl3@3.0.7-r2?arch=x86_64&distro=3.17.1',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2024/03/11/1',
-                'https://access.redhat.com/errata/RHSA-2024:2447',
-                'https://access.redhat.com/security/cve/CVE-2023-5678',
-                'https://bugzilla.redhat.com/2223016',
-                'https://bugzilla.redhat.com/2224962',
-                'https://bugzilla.redhat.com/2227852',
-                'https://bugzilla.redhat.com/2248616',
-                'https://bugzilla.redhat.com/2257571',
-                'https://bugzilla.redhat.com/2258502',
-                'https://bugzilla.redhat.com/2259944',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2224962',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2227852',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2248616',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2270358',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3446',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3817',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-5678',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-2408',
-                'https://errata.almalinux.org/9/ALSA-2024-2447.html',
-                'https://errata.rockylinux.org/RLSA-2023:7877',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=34efaef6c103d636ab507a0cc34dca4d3aecc055',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=710fee740904b6290fef0dd5536fbcedbc38ff0c',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=db925ae2e65d0d925adef429afc37f75bd1c2017',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=ddeb4b6c6d527e54ce9a99cba785c0f7776e54b6',
-                'https://linux.oracle.com/cve/CVE-2023-5678.html',
-                'https://linux.oracle.com/errata/ELSA-2024-2447.html',
-                'https://lists.debian.org/debian-lts-announce/2024/10/msg00033.html',
-                'https://lists.debian.org/debian-lts-announce/2024/11/msg00000.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-5678',
-                'https://security.netapp.com/advisory/ntap-20231130-0010/',
-                'https://ubuntu.com/security/notices/USN-6622-1',
-                'https://ubuntu.com/security/notices/USN-6632-1',
-                'https://ubuntu.com/security/notices/USN-6709-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-5678',
-                'https://www.openssl.org/news/secadv/20231106.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: Generating excessively long X9.42 DH keys or checking excessively long X9.42 DH keys or parameters may be very slow'
-            },
-            {
-              'cve':  'CVE-2023-6129',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '6.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-440',
-                'CWE-787'
-              ],
-              'description':   'Issue summary: The POLY1305 MAC (message authentication code) implementation\ncontains a bug that might corrupt the internal state of applications running\non PowerPC CPU based platforms if the CPU provides vector instructions.\n\nImpact summary: If an attacker can influence whether the POLY1305 MAC\nalgorithm is used, the application state might be corrupted with various\napplication dependent consequences.\n\nThe POLY1305 MAC (message authentication code) implementation in OpenSSL for\nPowerPC CPUs restores the contents of vector registers in a different order\nthan they are saved. Thus the contents of some of these vector registers\nare corrupted when returning to the caller. The vulnerable code is used only\non newer PowerPC processors supporting the PowerISA 2.07 instructions.\n\nThe consequences of this kind of internal application state corruption can\nbe various - from no consequences, if the calling application does not\ndepend on the contents of non-volatile XMM registers at all, to the worst\nconsequences, where the attacker could get complete control of the application\nprocess. However unless the compiler uses the vector registers for storing\npointers, the most likely consequence, if any, would be an incorrect result\nof some application dependent calculations or a crash leading to a denial of\nservice.\n\nThe POLY1305 MAC algorithm is most frequently used as part of the\nCHACHA20-POLY1305 AEAD (authenticated encryption with associated data)\nalgorithm. The most common usage of this AEAD cipher is with TLS protocol\nversions 1.2 and 1.3. If this cipher is enabled on the server a malicious\nclient can influence whether this AEAD cipher is used. This implies that\nTLS server applications using OpenSSL can be potentially impacted. However\nwe are currently not aware of any concrete application that would be affected\nby this issue therefore we consider this a Low severity security issue.',
-              'diffID':        'sha256:8e012198eea15b2554b07014081c85fec4967a1b9cc4b65bd9a4bce3ae1c0c88',
-              'fixedVersions': [
-                '3.0.12-r2'
-              ],
-              'installedVersion': '3.0.7-r2',
-              'packageName':      'libssl3',
-              'purl':             'pkg:apk/alpine/libssl3@3.0.7-r2?arch=x86_64&distro=3.17.1',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2024/03/11/1',
-                'https://access.redhat.com/errata/RHSA-2024:9088',
-                'https://access.redhat.com/security/cve/CVE-2023-6129',
-                'https://bugzilla.redhat.com/2257571',
-                'https://bugzilla.redhat.com/2258502',
-                'https://bugzilla.redhat.com/2259944',
-                'https://bugzilla.redhat.com/2284243',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2257571',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2258502',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2259944',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2284243',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-6129',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-6237',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-0727',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-1298',
-                'https://errata.almalinux.org/9/ALSA-2024-9088.html',
-                'https://errata.rockylinux.org/RLSA-2024:9088',
-                'https://github.com/openssl/openssl/commit/050d26383d4e264966fb83428e72d5d48f402d35',
-                'https://github.com/openssl/openssl/commit/5b139f95c9a47a55a0c54100f3837b1eee942b04',
-                'https://github.com/openssl/openssl/commit/f3fc5808fe9ff74042d639839610d03b8fdcc015',
-                'https://linux.oracle.com/cve/CVE-2023-6129.html',
-                'https://linux.oracle.com/errata/ELSA-2024-9088.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-6129',
-                'https://security.netapp.com/advisory/ntap-20240216-0009/',
-                'https://security.netapp.com/advisory/ntap-20240426-0008/',
-                'https://security.netapp.com/advisory/ntap-20240426-0013/',
-                'https://security.netapp.com/advisory/ntap-20240503-0011/',
-                'https://ubuntu.com/security/notices/USN-6622-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-6129',
-                'https://www.openssl.org/news/secadv/20240109.txt',
-                'https://www.openwall.com/lists/oss-security/2024/01/09/1'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: POLY1305 MAC implementation corrupts vector registers on PowerPC'
-            },
-            {
-              'cve':  'CVE-2023-6237',
-              'cvss': {
-                'redhat': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-606'
-              ],
-              'description':   "Issue summary: Checking excessively long invalid RSA public keys may take\na long time.\n\nImpact summary: Applications that use the function EVP_PKEY_public_check()\nto check RSA public keys may experience long delays. Where the key that\nis being checked has been obtained from an untrusted source this may lead\nto a Denial of Service.\n\nWhen function EVP_PKEY_public_check() is called on RSA public keys,\na computation is done to confirm that the RSA modulus, n, is composite.\nFor valid RSA keys, n is a product of two or more large primes and this\ncomputation completes quickly. However, if n is an overly large prime,\nthen this computation would take a long time.\n\nAn application that calls EVP_PKEY_public_check() and supplies an RSA key\nobtained from an untrusted source could be vulnerable to a Denial of Service\nattack.\n\nThe function EVP_PKEY_public_check() is not called from other OpenSSL\nfunctions however it is called from the OpenSSL pkey command line\napplication. For that reason that application is also vulnerable if used\nwith the '-pubin' and '-check' options on untrusted data.\n\nThe OpenSSL SSL/TLS implementation is not affected by this issue.\n\nThe OpenSSL 3.0 and 3.1 FIPS providers are affected by this issue.",
-              'diffID':        'sha256:8e012198eea15b2554b07014081c85fec4967a1b9cc4b65bd9a4bce3ae1c0c88',
-              'fixedVersions': [
-                '3.0.12-r3'
-              ],
-              'installedVersion': '3.0.7-r2',
-              'packageName':      'libssl3',
-              'purl':             'pkg:apk/alpine/libssl3@3.0.7-r2?arch=x86_64&distro=3.17.1',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2024/03/11/1',
-                'https://access.redhat.com/errata/RHSA-2024:9088',
-                'https://access.redhat.com/security/cve/CVE-2023-6237',
-                'https://bugzilla.redhat.com/2257571',
-                'https://bugzilla.redhat.com/2258502',
-                'https://bugzilla.redhat.com/2259944',
-                'https://bugzilla.redhat.com/2284243',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2257571',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2258502',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2259944',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2284243',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-6129',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-6237',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-0727',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-1298',
-                'https://errata.almalinux.org/9/ALSA-2024-9088.html',
-                'https://errata.rockylinux.org/RLSA-2024:9088',
-                'https://github.com/openssl/openssl/commit/0b0f7abfb37350794a4b8960fafc292cd5d1b84d',
-                'https://github.com/openssl/openssl/commit/18c02492138d1eb8b6548cb26e7b625fb2414a2a',
-                'https://github.com/openssl/openssl/commit/a830f551557d3d66a84bbb18a5b889c640c36294',
-                'https://linux.oracle.com/cve/CVE-2023-6237.html',
-                'https://linux.oracle.com/errata/ELSA-2024-9088.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-6237',
-                'https://security.netapp.com/advisory/ntap-20240531-0007/',
-                'https://ubuntu.com/security/notices/USN-6622-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-6237',
-                'https://www.openssl.org/news/secadv/20240115.txt',
-                'https://www.openwall.com/lists/oss-security/2024/01/15/2'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: Excessive time spent checking invalid RSA public keys'
-            },
-            {
-              'cve':  'CVE-2024-0727',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '5.5',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H'
-                },
-                'nvd': {
-                  'v3score':  '5.5',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '5.5',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-476'
-              ],
-              'description':   'Issue summary: Processing a maliciously formatted PKCS12 file may lead OpenSSL\nto crash leading to a potential Denial of Service attack\n\nImpact summary: Applications loading files in the PKCS12 format from untrusted\nsources might terminate abruptly.\n\nA file in PKCS12 format can contain certificates and keys and may come from an\nuntrusted source. The PKCS12 specification allows certain fields to be NULL, but\nOpenSSL does not correctly check for this case. This can lead to a NULL pointer\ndereference that results in OpenSSL crashing. If an application processes PKCS12\nfiles from an untrusted source using the OpenSSL APIs then that application will\nbe vulnerable to this issue.\n\nOpenSSL APIs that are vulnerable to this are: PKCS12_parse(),\nPKCS12_unpack_p7data(), PKCS12_unpack_p7encdata(), PKCS12_unpack_authsafes()\nand PKCS12_newpass().\n\nWe have also fixed a similar issue in SMIME_write_PKCS7(). However since this\nfunction is related to writing data we do not consider it security significant.\n\nThe FIPS modules in 3.2, 3.1 and 3.0 are not affected by this issue.',
-              'diffID':        'sha256:8e012198eea15b2554b07014081c85fec4967a1b9cc4b65bd9a4bce3ae1c0c88',
-              'fixedVersions': [
-                '3.0.12-r4'
-              ],
-              'installedVersion': '3.0.7-r2',
-              'packageName':      'libssl3',
-              'purl':             'pkg:apk/alpine/libssl3@3.0.7-r2?arch=x86_64&distro=3.17.1',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2024/03/11/1',
-                'https://access.redhat.com/errata/RHSA-2024:9088',
-                'https://access.redhat.com/security/cve/CVE-2024-0727',
-                'https://bugzilla.redhat.com/2257571',
-                'https://bugzilla.redhat.com/2258502',
-                'https://bugzilla.redhat.com/2259944',
-                'https://bugzilla.redhat.com/2284243',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2257571',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2258502',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2259944',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2284243',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-6129',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-6237',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-0727',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-1298',
-                'https://errata.almalinux.org/9/ALSA-2024-9088.html',
-                'https://errata.rockylinux.org/RLSA-2024:9088',
-                'https://github.com/alexcrichton/openssl-src-rs/commit/add20f73b6b42be7451af2e1044d4e0e778992b2',
-                'https://github.com/github/advisory-database/pull/3472',
-                'https://github.com/openssl/openssl/commit/09df4395b5071217b76dc7d3d2e630eb8c5a79c2',
-                'https://github.com/openssl/openssl/commit/775acfdbd0c6af9ac855f34969cdab0c0c90844a',
-                'https://github.com/openssl/openssl/commit/d135eeab8a5dbf72b3da5240bab9ddb7678dbd2c',
-                'https://github.com/openssl/openssl/pull/23362',
-                'https://github.com/pyca/cryptography/commit/3519591d255d4506fbcd0d04037d45271903c64d',
-                'https://github.openssl.org/openssl/extended-releases/commit/03b3941d60c4bce58fab69a0c22377ab439bc0e8',
-                'https://github.openssl.org/openssl/extended-releases/commit/aebaa5883e31122b404e450732dc833dc9dee539',
-                'https://linux.oracle.com/cve/CVE-2024-0727.html',
-                'https://linux.oracle.com/errata/ELSA-2024-9088.html',
-                'https://lists.debian.org/debian-lts-announce/2024/10/msg00033.html',
-                'https://lists.debian.org/debian-lts-announce/2024/11/msg00000.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2024-0727',
-                'https://security.netapp.com/advisory/ntap-20240208-0006',
-                'https://security.netapp.com/advisory/ntap-20240208-0006/',
-                'https://ubuntu.com/security/notices/USN-6622-1',
-                'https://ubuntu.com/security/notices/USN-6632-1',
-                'https://ubuntu.com/security/notices/USN-6709-1',
-                'https://ubuntu.com/security/notices/USN-7018-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2024-0727',
-                'https://www.openssl.org/news/secadv/20240125.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: denial of service via null dereference'
-            },
-            {
-              'cve':  'CVE-2024-4603',
-              'cvss': {
-                'redhat': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L'
-                }
-              },
-              'cwes': [
-                'CWE-606',
-                'CWE-834'
-              ],
-              'description':   'Issue summary: Checking excessively long DSA keys or parameters may be very\nslow.\n\nImpact summary: Applications that use the functions EVP_PKEY_param_check()\nor EVP_PKEY_public_check() to check a DSA public key or DSA parameters may\nexperience long delays. Where the key or parameters that are being checked\nhave been obtained from an untrusted source this may lead to a Denial of\nService.\n\nThe functions EVP_PKEY_param_check() or EVP_PKEY_public_check() perform\nvarious checks on DSA parameters. Some of those computations take a long time\nif the modulus (`p` parameter) is too large.\n\nTrying to use a very large modulus is slow and OpenSSL will not allow using\npublic keys with a modulus which is over 10,000 bits in length for signature\nverification. However the key and parameter check functions do not limit\nthe modulus size when performing the checks.\n\nAn application that calls EVP_PKEY_param_check() or EVP_PKEY_public_check()\nand supplies a key or parameters obtained from an untrusted source could be\nvulnerable to a Denial of Service attack.\n\nThese functions are not called by OpenSSL itself on untrusted DSA keys so\nonly applications that directly call these functions may be vulnerable.\n\nAlso vulnerable are the OpenSSL pkey and pkeyparam command line applications\nwhen using the `-check` option.\n\nThe OpenSSL SSL/TLS implementation is not affected by this issue.\n\nThe OpenSSL 3.0 and 3.1 FIPS providers are affected by this issue.',
-              'diffID':        'sha256:8e012198eea15b2554b07014081c85fec4967a1b9cc4b65bd9a4bce3ae1c0c88',
-              'fixedVersions': [
-                '3.0.13-r0'
-              ],
-              'installedVersion': '3.0.7-r2',
-              'packageName':      'libssl3',
-              'purl':             'pkg:apk/alpine/libssl3@3.0.7-r2?arch=x86_64&distro=3.17.1',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2024/05/16/2',
-                'https://access.redhat.com/errata/RHSA-2024:9333',
-                'https://access.redhat.com/security/cve/CVE-2024-4603',
-                'https://bugzilla.redhat.com/2274020',
-                'https://bugzilla.redhat.com/2281029',
-                'https://bugzilla.redhat.com/2283757',
-                'https://bugzilla.redhat.com/2294581',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2274020',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2281029',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2283757',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2294581',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-2511',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-4603',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-4741',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-5535',
-                'https://errata.almalinux.org/9/ALSA-2024-9333.html',
-                'https://errata.rockylinux.org/RLSA-2024:9333',
-                'https://github.com/openssl/openssl/commit/3559e868e58005d15c6013a0c1fd832e51c73397',
-                'https://github.com/openssl/openssl/commit/53ea06486d296b890d565fb971b2764fcd826e7e',
-                'https://github.com/openssl/openssl/commit/9c39b3858091c152f52513c066ff2c5a47969f0d',
-                'https://github.com/openssl/openssl/commit/da343d0605c826ef197aceedc67e8e04f065f740',
-                'https://linux.oracle.com/cve/CVE-2024-4603.html',
-                'https://linux.oracle.com/errata/ELSA-2024-9333.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2024-4603',
-                'https://security.netapp.com/advisory/ntap-20240621-0001/',
-                'https://ubuntu.com/security/notices/USN-6937-1',
-                'https://www.cve.org/CVERecord?id=CVE-2024-4603',
-                'https://www.openssl.org/news/secadv/20240516.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: Excessive time spent checking DSA keys and parameters'
-            },
-            {
-              'cve':  'CVE-2024-4741',
-              'cvss': {
-                'redhat': {
-                  'v3score':  '5.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   'Issue summary: Calling the OpenSSL API function SSL_free_buffers may cause\nmemory to be accessed that was previously freed in some situations\n\nImpact summary: A use after free can have a range of potential consequences such\nas the corruption of valid data, crashes or execution of arbitrary code.\nHowever, only applications that directly call the SSL_free_buffers function are\naffected by this issue. Applications that do not call this function are not\nvulnerable. Our investigations indicate that this function is rarely used by\napplications.\n\nThe SSL_free_buffers function is used to free the internal OpenSSL buffer used\nwhen processing an incoming record from the network. The call is only expected\nto succeed if the buffer is not currently in use. However, two scenarios have\nbeen identified where the buffer is freed even when still in use.\n\nThe first scenario occurs where a record header has been received from the\nnetwork and processed by OpenSSL, but the full record body has not yet arrived.\nIn this case calling SSL_free_buffers will succeed even though a record has only\nbeen partially processed and the buffer is still in use.\n\nThe second scenario occurs where a full record containing application data has\nbeen received and processed by OpenSSL but the application has only read part of\nthis data. Again a call to SSL_free_buffers will succeed even though the buffer\nis still in use.\n\nWhile these scenarios could occur accidentally during normal operation a\nmalicious attacker could attempt to engineer a stituation where this occurs.\nWe are not aware of this issue being actively exploited.\n\nThe FIPS modules in 3.3, 3.2, 3.1 and 3.0 are not affected by this issue.',
-              'diffID':        'sha256:8e012198eea15b2554b07014081c85fec4967a1b9cc4b65bd9a4bce3ae1c0c88',
-              'fixedVersions': [
-                '3.0.14-r0'
-              ],
-              'installedVersion': '3.0.7-r2',
-              'packageName':      'libssl3',
-              'purl':             'pkg:apk/alpine/libssl3@3.0.7-r2?arch=x86_64&distro=3.17.1',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2024:9333',
-                'https://access.redhat.com/security/cve/CVE-2024-4741',
-                'https://bugzilla.redhat.com/2274020',
-                'https://bugzilla.redhat.com/2281029',
-                'https://bugzilla.redhat.com/2283757',
-                'https://bugzilla.redhat.com/2294581',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2274020',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2281029',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2283757',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2294581',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-2511',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-4603',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-4741',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-5535',
-                'https://errata.almalinux.org/9/ALSA-2024-9333.html',
-                'https://errata.rockylinux.org/RLSA-2024:9333',
-                'https://github.com/openssl/openssl/commit/704f725b96aa373ee45ecfb23f6abfe8be8d9177',
-                'https://github.com/openssl/openssl/commit/b3f0eb0a295f58f16ba43ba99dad70d4ee5c437d',
-                'https://github.com/openssl/openssl/commit/c88c3de51020c37e8706bf7a682a162593053aac',
-                'https://github.com/openssl/openssl/commit/e5093133c35ca82874ad83697af76f4b0f7e3bd8',
-                'https://github.openssl.org/openssl/extended-releases/commit/f7a045f3143fc6da2ee66bf52d8df04829590dd4',
-                'https://linux.oracle.com/cve/CVE-2024-4741.html',
-                'https://linux.oracle.com/errata/ELSA-2024-9333.html',
-                'https://lists.debian.org/debian-lts-announce/2024/10/msg00033.html',
-                'https://lists.debian.org/debian-lts-announce/2024/11/msg00000.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2024-4741',
-                'https://security.netapp.com/advisory/ntap-20240621-0004/',
-                'https://ubuntu.com/security/notices/USN-6937-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2024-4741',
-                'https://www.openssl.org/news/secadv/20240528.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: Use After Free with SSL_free_buffers'
-            },
-            {
-              'cve':  'CVE-2024-5535',
-              'cvss': {
-                'redhat': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-125'
-              ],
-              'description':   'Issue summary: Calling the OpenSSL API function SSL_select_next_proto with an\nempty supported client protocols buffer may cause a crash or memory contents to\nbe sent to the peer.\n\nImpact summary: A buffer overread can have a range of potential consequences\nsuch as unexpected application beahviour or a crash. In particular this issue\ncould result in up to 255 bytes of arbitrary private data from memory being sent\nto the peer leading to a loss of confidentiality. However, only applications\nthat directly call the SSL_select_next_proto function with a 0 length list of\nsupported client protocols are affected by this issue. This would normally never\nbe a valid scenario and is typically not under attacker control but may occur by\naccident in the case of a configuration or programming error in the calling\napplication.\n\nThe OpenSSL API function SSL_select_next_proto is typically used by TLS\napplications that support ALPN (Application Layer Protocol Negotiation) or NPN\n(Next Protocol Negotiation). NPN is older, was never standardised and\nis deprecated in favour of ALPN. We believe that ALPN is significantly more\nwidely deployed than NPN. The SSL_select_next_proto function accepts a list of\nprotocols from the server and a list of protocols from the client and returns\nthe first protocol that appears in the server list that also appears in the\nclient list. In the case of no overlap between the two lists it returns the\nfirst item in the client list. In either case it will signal whether an overlap\nbetween the two lists was found. In the case where SSL_select_next_proto is\ncalled with a zero length client list it fails to notice this condition and\nreturns the memory immediately following the client list pointer (and reports\nthat there was no overlap in the lists).\n\nThis function is typically called from a server side application callback for\nALPN or a client side application callback for NPN. In the case of ALPN the list\nof protocols supplied by the client is guaranteed by libssl to never be zero in\nlength. The list of server protocols comes from the application and should never\nnormally be expected to be of zero length. In this case if the\nSSL_select_next_proto function has been called as expected (with the list\nsupplied by the client passed in the client/client_len parameters), then the\napplication will not be vulnerable to this issue. If the application has\naccidentally been configured with a zero length server list, and has\naccidentally passed that zero length server list in the client/client_len\nparameters, and has additionally failed to correctly handle a "no overlap"\nresponse (which would normally result in a handshake failure in ALPN) then it\nwill be vulnerable to this problem.\n\nIn the case of NPN, the protocol permits the client to opportunistically select\na protocol when there is no overlap. OpenSSL returns the first client protocol\nin the no overlap case in support of this. The list of client protocols comes\nfrom the application and should never normally be expected to be of zero length.\nHowever if the SSL_select_next_proto function is accidentally called with a\nclient_len of 0 then an invalid memory pointer will be returned instead. If the\napplication uses this output as the opportunistic protocol then the loss of\nconfidentiality will occur.\n\nThis issue has been assessed as Low severity because applications are most\nlikely to be vulnerable if they are using NPN instead of ALPN - but NPN is not\nwidely used. It also requires an application configuration or programming error.\nFinally, this issue would not typically be under attacker control making active\nexploitation unlikely.\n\nThe FIPS modules in 3.3, 3.2, 3.1 and 3.0 are not affected by this issue.\n\nDue to the low severity of this issue we are not issuing new releases of\nOpenSSL at this time. The fix will be included in the next releases when they\nbecome available.',
-              'diffID':        'sha256:8e012198eea15b2554b07014081c85fec4967a1b9cc4b65bd9a4bce3ae1c0c88',
-              'fixedVersions': [
-                '3.0.14-r0'
-              ],
-              'installedVersion': '3.0.7-r2',
-              'packageName':      'libssl3',
-              'purl':             'pkg:apk/alpine/libssl3@3.0.7-r2?arch=x86_64&distro=3.17.1',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2024/06/27/1',
-                'http://www.openwall.com/lists/oss-security/2024/06/28/4',
-                'http://www.openwall.com/lists/oss-security/2024/08/15/1',
-                'https://access.redhat.com/errata/RHSA-2025:1671',
-                'https://access.redhat.com/security/cve/CVE-2024-5535',
-                'https://bugzilla.redhat.com/2294581',
-                'https://bugzilla.redhat.com/2294676',
-                'https://bugzilla.redhat.com/2301888',
-                'https://bugzilla.redhat.com/2318857',
-                'https://bugzilla.redhat.com/2318858',
-                'https://bugzilla.redhat.com/2318870',
-                'https://bugzilla.redhat.com/2318873',
-                'https://bugzilla.redhat.com/2318874',
-                'https://bugzilla.redhat.com/2318876',
-                'https://bugzilla.redhat.com/2318882',
-                'https://bugzilla.redhat.com/2318883',
-                'https://bugzilla.redhat.com/2318884',
-                'https://bugzilla.redhat.com/2318885',
-                'https://bugzilla.redhat.com/2318886',
-                'https://bugzilla.redhat.com/2318897',
-                'https://bugzilla.redhat.com/2318900',
-                'https://bugzilla.redhat.com/2318905',
-                'https://bugzilla.redhat.com/2318914',
-                'https://bugzilla.redhat.com/2318922',
-                'https://bugzilla.redhat.com/2318923',
-                'https://bugzilla.redhat.com/2318925',
-                'https://bugzilla.redhat.com/2318926',
-                'https://bugzilla.redhat.com/2318927',
-                'https://bugzilla.redhat.com/2331191',
-                'https://bugzilla.redhat.com/2339218',
-                'https://bugzilla.redhat.com/2339220',
-                'https://bugzilla.redhat.com/2339221',
-                'https://bugzilla.redhat.com/2339226',
-                'https://bugzilla.redhat.com/2339231',
-                'https://bugzilla.redhat.com/2339236',
-                'https://bugzilla.redhat.com/2339238',
-                'https://bugzilla.redhat.com/2339243',
-                'https://bugzilla.redhat.com/2339247',
-                'https://bugzilla.redhat.com/2339252',
-                'https://bugzilla.redhat.com/2339259',
-                'https://bugzilla.redhat.com/2339266',
-                'https://bugzilla.redhat.com/2339270',
-                'https://bugzilla.redhat.com/2339271',
-                'https://bugzilla.redhat.com/2339275',
-                'https://bugzilla.redhat.com/2339277',
-                'https://bugzilla.redhat.com/2339281',
-                'https://bugzilla.redhat.com/2339284',
-                'https://bugzilla.redhat.com/2339291',
-                'https://bugzilla.redhat.com/2339293',
-                'https://bugzilla.redhat.com/2339295',
-                'https://bugzilla.redhat.com/2339299',
-                'https://bugzilla.redhat.com/2339300',
-                'https://bugzilla.redhat.com/2339304',
-                'https://bugzilla.redhat.com/2339305',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2274020',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2281029',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2283757',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2294581',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-2511',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-4603',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-4741',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-5535',
-                'https://errata.almalinux.org/9/ALSA-2025-1671.html',
-                'https://errata.rockylinux.org/RLSA-2024:9333',
-                'https://github.com/openssl/openssl/commit/4ada436a1946cbb24db5ab4ca082b69c1bc10f37',
-                'https://github.com/openssl/openssl/commit/99fb785a5f85315b95288921a321a935ea29a51e',
-                'https://github.com/openssl/openssl/commit/cf6f91f6121f4db167405db2f0de410a456f260c',
-                'https://github.com/openssl/openssl/commit/e86ac436f0bd54d4517745483e2315650fae7b2c',
-                'https://github.openssl.org/openssl/extended-releases/commit/9947251413065a05189a63c9b7a6c1d4e224c21c',
-                'https://github.openssl.org/openssl/extended-releases/commit/b78ec0824da857223486660177d3b1f255c65d87',
-                'https://linux.oracle.com/cve/CVE-2024-5535.html',
-                'https://linux.oracle.com/errata/ELSA-2025-1673.html',
-                'https://lists.debian.org/debian-lts-announce/2024/10/msg00033.html',
-                'https://lists.debian.org/debian-lts-announce/2024/11/msg00000.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2024-5535',
-                'https://openssl.org/news/secadv/20240627.txt',
-                'https://security.netapp.com/advisory/ntap-20240712-0005/',
-                'https://security.netapp.com/advisory/ntap-20241025-0006/',
-                'https://security.netapp.com/advisory/ntap-20241025-0010/',
-                'https://ubuntu.com/security/notices/USN-6937-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2024-5535',
-                'https://www.openssl.org/news/secadv/20240627.txt',
-                'https://www.oracle.com/security-alerts/cpuoct2024.html#AppendixMSQL'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: SSL_select_next_proto buffer overread'
-            },
-            {
-              'cve':  'CVE-2024-2511',
-              'cvss': {
-                'redhat': {
-                  'v3score':  '3.7',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L'
-                }
-              },
-              'cwes': [
-                'CWE-1325'
-              ],
-              'description':   'Issue summary: Some non-default TLS server configurations can cause unbounded\nmemory growth when processing TLSv1.3 sessions\n\nImpact summary: An attacker may exploit certain server configurations to trigger\nunbounded memory growth that would lead to a Denial of Service\n\nThis problem can occur in TLSv1.3 if the non-default SSL_OP_NO_TICKET option is\nbeing used (but not if early_data support is also configured and the default\nanti-replay protection is in use). In this case, under certain conditions, the\nsession cache can get into an incorrect state and it will fail to flush properly\nas it fills. The session cache will continue to grow in an unbounded manner. A\nmalicious client could deliberately create the scenario for this failure to\nforce a Denial of Service. It may also happen by accident in normal operation.\n\nThis issue only affects TLS servers supporting TLSv1.3. It does not affect TLS\nclients.\n\nThe FIPS modules in 3.2, 3.1 and 3.0 are not affected by this issue. OpenSSL\n1.0.2 is also not affected by this issue.',
-              'diffID':        'sha256:8e012198eea15b2554b07014081c85fec4967a1b9cc4b65bd9a4bce3ae1c0c88',
-              'fixedVersions': [
-                '3.0.12-r5'
-              ],
-              'installedVersion': '3.0.7-r2',
-              'packageName':      'libssl3',
-              'purl':             'pkg:apk/alpine/libssl3@3.0.7-r2?arch=x86_64&distro=3.17.1',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2024/04/08/5',
-                'https://access.redhat.com/errata/RHSA-2024:9333',
-                'https://access.redhat.com/security/cve/CVE-2024-2511',
-                'https://bugzilla.redhat.com/2274020',
-                'https://bugzilla.redhat.com/2281029',
-                'https://bugzilla.redhat.com/2283757',
-                'https://bugzilla.redhat.com/2294581',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2274020',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2281029',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2283757',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2294581',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-2511',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-4603',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-4741',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-5535',
-                'https://errata.almalinux.org/9/ALSA-2024-9333.html',
-                'https://errata.rockylinux.org/RLSA-2024:9333',
-                'https://github.com/openssl/openssl/commit/7e4d731b1c07201ad9374c1cd9ac5263bdf35bce',
-                'https://github.com/openssl/openssl/commit/b52867a9f618bb955bed2a3ce3db4d4f97ed8e5d',
-                'https://github.com/openssl/openssl/commit/e9d7083e241670332e0443da0f0d4ffb52829f08',
-                'https://github.openssl.org/openssl/extended-releases/commit/5f8d25770ae6437db119dfc951e207271a326640',
-                'https://linux.oracle.com/cve/CVE-2024-2511.html',
-                'https://linux.oracle.com/errata/ELSA-2024-9333.html',
-                'https://lists.debian.org/debian-lts-announce/2024/10/msg00033.html',
-                'https://lists.debian.org/debian-lts-announce/2024/11/msg00000.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2024-2511',
-                'https://security.netapp.com/advisory/ntap-20240503-0013/',
-                'https://ubuntu.com/security/notices/USN-6937-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2024-2511',
-                'https://www.openssl.org/news/secadv/20240408.txt',
-                'https://www.openssl.org/news/vulnerabilities.html'
-              ],
-              'severity':   'LOW',
-              'suppressed': false,
-              'title':      'openssl: Unbounded memory growth with session handling in TLSv1.3'
-            },
-            {
-              'cve':  'CVE-2024-9143',
-              'cvss': {
-                'redhat': {
-                  'v3score':  '3.7',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L'
-                }
-              },
-              'cwes': [
-                'CWE-125',
-                'CWE-787'
-              ],
-              'description':   "Issue summary: Use of the low-level GF(2^m) elliptic curve APIs with untrusted\nexplicit values for the field polynomial can lead to out-of-bounds memory reads\nor writes.\n\nImpact summary: Out of bound memory writes can lead to an application crash or\neven a possibility of a remote code execution, however, in all the protocols\ninvolving Elliptic Curve Cryptography that we're aware of, either only \"named\ncurves\" are supported, or, if explicit curve parameters are supported, they\nspecify an X9.62 encoding of binary (GF(2^m)) curves that can't represent\nproblematic input values. Thus the likelihood of existence of a vulnerable\napplication is low.\n\nIn particular, the X9.62 encoding is used for ECC keys in X.509 certificates,\nso problematic inputs cannot occur in the context of processing X.509\ncertificates.  Any problematic use-cases would have to be using an \"exotic\"\ncurve encoding.\n\nThe affected APIs include: EC_GROUP_new_curve_GF2m(), EC_GROUP_new_from_params(),\nand various supporting BN_GF2m_*() functions.\n\nApplications working with \"exotic\" explicit binary (GF(2^m)) curve parameters,\nthat make it possible to represent invalid field polynomials with a zero\nconstant term, via the above or similar APIs, may terminate abruptly as a\nresult of reading or writing outside of array bounds.  Remote code execution\ncannot easily be ruled out.\n\nThe FIPS modules in 3.3, 3.2, 3.1 and 3.0 are not affected by this issue.",
-              'diffID':        'sha256:8e012198eea15b2554b07014081c85fec4967a1b9cc4b65bd9a4bce3ae1c0c88',
-              'fixedVersions': [
-                '3.0.15-r1'
-              ],
-              'installedVersion': '3.0.7-r2',
-              'packageName':      'libssl3',
-              'purl':             'pkg:apk/alpine/libssl3@3.0.7-r2?arch=x86_64&distro=3.17.1',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2024/10/16/1',
-                'http://www.openwall.com/lists/oss-security/2024/10/23/1',
-                'http://www.openwall.com/lists/oss-security/2024/10/24/1',
-                'https://access.redhat.com/security/cve/CVE-2024-9143',
-                'https://github.com/openssl/openssl/commit/72ae83ad214d2eef262461365a1975707f862712',
-                'https://github.com/openssl/openssl/commit/bc7e04d7c8d509fb78fc0e285aa948fb0da04700',
-                'https://github.com/openssl/openssl/commit/c0d3e4d32d2805f49bec30547f225bc4d092e1f4',
-                'https://github.com/openssl/openssl/commit/fdf6723362ca51bd883295efe206cb5b1cfa5154',
-                'https://github.openssl.org/openssl/extended-releases/commit/8efc0cbaa8ebba8e116f7b81a876a4123594d86a',
-                'https://github.openssl.org/openssl/extended-releases/commit/9d576994cec2b7aa37a91740ea7e680810957e41',
-                'https://lists.debian.org/debian-lts-announce/2024/10/msg00033.html',
-                'https://lists.debian.org/debian-lts-announce/2024/11/msg00000.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2024-9143',
-                'https://openssl-library.org/news/secadv/20241016.txt',
-                'https://security.netapp.com/advisory/ntap-20241101-0001/',
-                'https://ubuntu.com/security/notices/USN-7264-1',
-                'https://ubuntu.com/security/notices/USN-7278-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2024-9143'
-              ],
-              'severity':   'LOW',
-              'suppressed': false,
-              'title':      'openssl: Low-level invalid GF(2^m) parameters lead to OOB memory access'
-            },
-            {
-              'cve':  'CVE-2025-26519',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-787'
-              ],
-              'description':   'musl libc 0.9.13 through 1.2.5 before 1.2.6 has an out-of-bounds write vulnerability when an attacker can trigger iconv conversion of untrusted EUC-KR text to UTF-8.',
-              'diffID':        'sha256:8e012198eea15b2554b07014081c85fec4967a1b9cc4b65bd9a4bce3ae1c0c88',
-              'fixedVersions': [
-                '1.2.3-r6'
-              ],
-              'installedVersion': '1.2.3-r4',
-              'packageName':      'musl',
-              'purl':             'pkg:apk/alpine/musl@1.2.3-r4?arch=x86_64&distro=3.17.1',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2025/02/13/2',
-                'http://www.openwall.com/lists/oss-security/2025/02/13/3',
-                'http://www.openwall.com/lists/oss-security/2025/02/13/4',
-                'http://www.openwall.com/lists/oss-security/2025/02/13/5',
-                'http://www.openwall.com/lists/oss-security/2025/02/14/5',
-                'http://www.openwall.com/lists/oss-security/2025/02/14/6',
-                'https://git.musl-libc.org/cgit/musl/commit/?id=c47ad25ea3b484e10326f933e927c0bc8cded3da',
-                'https://git.musl-libc.org/cgit/musl/commit/?id=e5adcd97b5196e29991b524237381a0202a60659',
-                'https://www.openwall.com/lists/oss-security/2025/02/13/2'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'musl libc 0.9.13 through 1.2.5 before 1.2.6 has an out-of-bounds write ...'
-            },
-            {
-              'cve':  'CVE-2025-26519',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-787'
-              ],
-              'description':   'musl libc 0.9.13 through 1.2.5 before 1.2.6 has an out-of-bounds write vulnerability when an attacker can trigger iconv conversion of untrusted EUC-KR text to UTF-8.',
-              'diffID':        'sha256:8e012198eea15b2554b07014081c85fec4967a1b9cc4b65bd9a4bce3ae1c0c88',
-              'fixedVersions': [
-                '1.2.3-r6'
-              ],
-              'installedVersion': '1.2.3-r4',
-              'packageName':      'musl-utils',
-              'purl':             'pkg:apk/alpine/musl-utils@1.2.3-r4?arch=x86_64&distro=3.17.1',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2025/02/13/2',
-                'http://www.openwall.com/lists/oss-security/2025/02/13/3',
-                'http://www.openwall.com/lists/oss-security/2025/02/13/4',
-                'http://www.openwall.com/lists/oss-security/2025/02/13/5',
-                'http://www.openwall.com/lists/oss-security/2025/02/14/5',
-                'http://www.openwall.com/lists/oss-security/2025/02/14/6',
-                'https://git.musl-libc.org/cgit/musl/commit/?id=c47ad25ea3b484e10326f933e927c0bc8cded3da',
-                'https://git.musl-libc.org/cgit/musl/commit/?id=e5adcd97b5196e29991b524237381a0202a60659',
-                'https://www.openwall.com/lists/oss-security/2025/02/13/2'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'musl libc 0.9.13 through 1.2.5 before 1.2.6 has an out-of-bounds write ...'
-            },
-            {
-              'cve':  'CVE-2023-42363',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.5',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.8',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   'A use-after-free vulnerability was discovered in xasprintf function in xfuncs_printf.c:344 in BusyBox v.1.36.1.',
-              'diffID':        'sha256:8e012198eea15b2554b07014081c85fec4967a1b9cc4b65bd9a4bce3ae1c0c88',
-              'fixedVersions': [
-                '1.35.0-r31'
-              ],
-              'installedVersion': '1.35.0-r29',
-              'packageName':      'ssl_client',
-              'purl':             'pkg:apk/alpine/ssl_client@1.35.0-r29?arch=x86_64&distro=3.17.1',
-              'references':       [
-                'http://lists.busybox.net/pipermail/busybox/2024-May/090760.html',
-                'https://access.redhat.com/security/cve/CVE-2023-42363',
-                'https://bugs.busybox.net/show_bug.cgi?id=15865',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-42363',
-                'https://ubuntu.com/security/notices/USN-6961-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-42363'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk'
-            },
-            {
-              'cve':  'CVE-2023-42364',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.5',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.8',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   'A use-after-free vulnerability in BusyBox v.1.36.1 allows attackers to cause a denial of service via a crafted awk pattern in the awk.c evaluate function.',
-              'diffID':        'sha256:8e012198eea15b2554b07014081c85fec4967a1b9cc4b65bd9a4bce3ae1c0c88',
-              'fixedVersions': [
-                '1.35.0-r31'
-              ],
-              'installedVersion': '1.35.0-r29',
-              'packageName':      'ssl_client',
-              'purl':             'pkg:apk/alpine/ssl_client@1.35.0-r29?arch=x86_64&distro=3.17.1',
-              'references':       [
-                'http://lists.busybox.net/pipermail/busybox/2024-May/090762.html',
-                'https://access.redhat.com/security/cve/CVE-2023-42364',
-                'https://bugs.busybox.net/show_bug.cgi?id=15868',
-                'https://gitlab.alpinelinux.org/alpine/aports/-/blob/master/main/busybox/CVE-2023-42364-CVE-2023-42365.patch',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-42364',
-                'https://ubuntu.com/security/notices/USN-6961-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-42364'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'busybox: use-after-free'
-            },
-            {
-              'cve':  'CVE-2023-42365',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.5',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.8',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   'A use-after-free vulnerability was discovered in BusyBox v.1.36.1 via a crafted awk pattern in the awk.c copyvar function.',
-              'diffID':        'sha256:8e012198eea15b2554b07014081c85fec4967a1b9cc4b65bd9a4bce3ae1c0c88',
-              'fixedVersions': [
-                '1.35.0-r31'
-              ],
-              'installedVersion': '1.35.0-r29',
-              'packageName':      'ssl_client',
-              'purl':             'pkg:apk/alpine/ssl_client@1.35.0-r29?arch=x86_64&distro=3.17.1',
-              'references':       [
-                'http://lists.busybox.net/pipermail/busybox/2024-May/090762.html',
-                'https://access.redhat.com/security/cve/CVE-2023-42365',
-                'https://bugs.busybox.net/show_bug.cgi?id=15871',
-                'https://gitlab.alpinelinux.org/alpine/aports/-/blob/master/main/busybox/CVE-2023-42364-CVE-2023-42365.patch',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-42365',
-                'https://ubuntu.com/security/notices/USN-6961-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-42365'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'busybox: use-after-free'
-            },
-            {
-              'cve':  'CVE-2023-42366',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.5',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.1',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-787'
-              ],
-              'description':   'A heap-buffer-overflow was discovered in BusyBox v.1.36.1 in the next_token function at awk.c:1159.',
-              'diffID':        'sha256:8e012198eea15b2554b07014081c85fec4967a1b9cc4b65bd9a4bce3ae1c0c88',
-              'fixedVersions': [
-                '1.35.0-r30'
-              ],
-              'installedVersion': '1.35.0-r29',
-              'packageName':      'ssl_client',
-              'purl':             'pkg:apk/alpine/ssl_client@1.35.0-r29?arch=x86_64&distro=3.17.1',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2023-42366',
-                'https://bugs.busybox.net/show_bug.cgi?id=15874',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-42366',
-                'https://security.netapp.com/advisory/ntap-20241206-0007/',
-                'https://www.cve.org/CVERecord?id=CVE-2023-42366'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'busybox: A heap-buffer-overflow'
-            }
-          ]
-        }
-      ],
-      'summary': {
-        'critical':   0,
-        'high':       20,
-        'low':        4,
-        'medium':     44,
-        'suppressed': 0,
-        'unknown':    0
-      }
-    }
-  },
-  {
-    'id':    'default/fb59dc6c34aa1b83daab041e07942af9f4e8363706cbacde59800cece4855759',
-    'type':  'storage.sbomscanner.kubewarden.io.vulnerabilityreport',
-    'links': {
-      'patch':  'https://localhost:8005/v1/storage.sbomscanner.kubewarden.io.vulnerabilityreports/default/fb59dc6c34aa1b83daab041e07942af9f4e8363706cbacde59800cece4855759',
-      'remove': 'https://localhost:8005/v1/storage.sbomscanner.kubewarden.io.vulnerabilityreports/default/fb59dc6c34aa1b83daab041e07942af9f4e8363706cbacde59800cece4855759',
-      'self':   'https://localhost:8005/v1/storage.sbomscanner.kubewarden.io.vulnerabilityreports/default/fb59dc6c34aa1b83daab041e07942af9f4e8363706cbacde59800cece4855759',
-      'update': 'https://localhost:8005/v1/storage.sbomscanner.kubewarden.io.vulnerabilityreports/default/fb59dc6c34aa1b83daab041e07942af9f4e8363706cbacde59800cece4855759',
-      'view':   'https://localhost:8005/apis/storage.sbomscanner.kubewarden.io/v1alpha1/namespaces/default/vulnerabilityreports/fb59dc6c34aa1b83daab041e07942af9f4e8363706cbacde59800cece4855759'
-    },
-    'apiVersion':    'storage.sbomscanner.kubewarden.io/v1alpha1',
-    'imageMetadata': {
-      'digest':      'sha256:79159ffd2ab6ac960e7241c7fbe3467a9a6f05ad764c892f120c76b4023a818c',
-      'platform':    'linux/amd64',
-      'registry':    'demo-02',
-      'registryURI': 'ghcr.io',
-      'repository':  'linuxcontainers/alpine',
-      'tag':         '3.17.1'
-    },
-    'kind':     'VulnerabilityReport',
-    'metadata': {
-      'creationTimestamp': '2026-01-09T22:46:13Z',
-      'fields':            [
-        'fb59dc6c34aa1b83daab041e07942af9f4e8363706cbacde59800cece4855759',
-        'ghcr.io/linuxcontainers/alpine:3.17.1',
-        'linux/amd64',
-        '52 (0 suppressed)'
-      ],
-      'labels': {
-        'app.kubernetes.io/managed-by':          'sbomscanner',
-        'app.kubernetes.io/part-of':             'sbomscanner',
-        'sbomscanner.kubewarden.io/scanjob-uid': '42184d01-4b15-466f-98aa-e802d1b6b6b8'
-      },
-      'name':            'fb59dc6c34aa1b83daab041e07942af9f4e8363706cbacde59800cece4855759',
-      'namespace':       'default',
-      'ownerReferences': [
-        {
-          'apiVersion':         'storage.sbomscanner.kubewarden.io/v1alpha1',
-          'blockOwnerDeletion': true,
-          'controller':         true,
-          'kind':               'SBOM',
-          'name':               'fb59dc6c34aa1b83daab041e07942af9f4e8363706cbacde59800cece4855759',
-          'uid':                'b09e33c7-5c8d-48ed-b797-a5c2eb0232d7'
-        }
-      ],
-      'relationships': [
-        {
-          'fromId':   'default/fb59dc6c34aa1b83daab041e07942af9f4e8363706cbacde59800cece4855759',
-          'fromType': 'storage.sbomscanner.kubewarden.io.sbom',
-          'rel':      'owner',
-          'state':    'active',
-          'message':  'Resource is current'
-        }
-      ],
-      'resourceVersion': '6',
-      'state':           {
-        'error':         false,
-        'message':       'Resource is current',
-        'name':          'active',
-        'transitioning': false
-      },
-      'uid': '0d16ae08-42b7-4bf9-95fb-5009beb60eb8'
-    },
-    'report': {
-      'results': [
-        {
-          'class':           'os-pkgs',
-          'target':          '/var/run/worker/trivy.sbom.1041852012.json (alpine 3.17.1)',
-          'type':            'alpine',
-          'vulnerabilities': [
-            {
-              'cve':  'CVE-2023-42363',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.5',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.8',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   'A use-after-free vulnerability was discovered in xasprintf function in xfuncs_printf.c:344 in BusyBox v.1.36.1.',
-              'diffID':        'sha256:8e012198eea15b2554b07014081c85fec4967a1b9cc4b65bd9a4bce3ae1c0c88',
-              'fixedVersions': [
-                '1.35.0-r31'
-              ],
-              'installedVersion': '1.35.0-r29',
-              'packageName':      'busybox',
-              'purl':             'pkg:apk/alpine/busybox@1.35.0-r29?arch=x86_64&distro=3.17.1',
-              'references':       [
-                'http://lists.busybox.net/pipermail/busybox/2024-May/090760.html',
-                'https://access.redhat.com/security/cve/CVE-2023-42363',
-                'https://bugs.busybox.net/show_bug.cgi?id=15865',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-42363',
-                'https://ubuntu.com/security/notices/USN-6961-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-42363'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk'
-            },
-            {
-              'cve':  'CVE-2023-42364',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.5',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.8',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   'A use-after-free vulnerability in BusyBox v.1.36.1 allows attackers to cause a denial of service via a crafted awk pattern in the awk.c evaluate function.',
-              'diffID':        'sha256:8e012198eea15b2554b07014081c85fec4967a1b9cc4b65bd9a4bce3ae1c0c88',
-              'fixedVersions': [
-                '1.35.0-r31'
-              ],
-              'installedVersion': '1.35.0-r29',
-              'packageName':      'busybox',
-              'purl':             'pkg:apk/alpine/busybox@1.35.0-r29?arch=x86_64&distro=3.17.1',
-              'references':       [
-                'http://lists.busybox.net/pipermail/busybox/2024-May/090762.html',
-                'https://access.redhat.com/security/cve/CVE-2023-42364',
-                'https://bugs.busybox.net/show_bug.cgi?id=15868',
-                'https://gitlab.alpinelinux.org/alpine/aports/-/blob/master/main/busybox/CVE-2023-42364-CVE-2023-42365.patch',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-42364',
-                'https://ubuntu.com/security/notices/USN-6961-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-42364'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'busybox: use-after-free'
-            },
-            {
-              'cve':  'CVE-2023-42365',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.5',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.8',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   'A use-after-free vulnerability was discovered in BusyBox v.1.36.1 via a crafted awk pattern in the awk.c copyvar function.',
-              'diffID':        'sha256:8e012198eea15b2554b07014081c85fec4967a1b9cc4b65bd9a4bce3ae1c0c88',
-              'fixedVersions': [
-                '1.35.0-r31'
-              ],
-              'installedVersion': '1.35.0-r29',
-              'packageName':      'busybox',
-              'purl':             'pkg:apk/alpine/busybox@1.35.0-r29?arch=x86_64&distro=3.17.1',
-              'references':       [
-                'http://lists.busybox.net/pipermail/busybox/2024-May/090762.html',
-                'https://access.redhat.com/security/cve/CVE-2023-42365',
-                'https://bugs.busybox.net/show_bug.cgi?id=15871',
-                'https://gitlab.alpinelinux.org/alpine/aports/-/blob/master/main/busybox/CVE-2023-42364-CVE-2023-42365.patch',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-42365',
-                'https://ubuntu.com/security/notices/USN-6961-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-42365'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'busybox: use-after-free'
-            },
-            {
-              'cve':  'CVE-2023-42366',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.5',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.1',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-787'
-              ],
-              'description':   'A heap-buffer-overflow was discovered in BusyBox v.1.36.1 in the next_token function at awk.c:1159.',
-              'diffID':        'sha256:8e012198eea15b2554b07014081c85fec4967a1b9cc4b65bd9a4bce3ae1c0c88',
-              'fixedVersions': [
-                '1.35.0-r30'
-              ],
-              'installedVersion': '1.35.0-r29',
-              'packageName':      'busybox',
-              'purl':             'pkg:apk/alpine/busybox@1.35.0-r29?arch=x86_64&distro=3.17.1',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2023-42366',
-                'https://bugs.busybox.net/show_bug.cgi?id=15874',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-42366',
-                'https://security.netapp.com/advisory/ntap-20241206-0007/',
-                'https://www.cve.org/CVERecord?id=CVE-2023-42366'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'busybox: A heap-buffer-overflow'
-            },
-            {
-              'cve':  'CVE-2023-42363',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.5',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.8',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   'A use-after-free vulnerability was discovered in xasprintf function in xfuncs_printf.c:344 in BusyBox v.1.36.1.',
-              'diffID':        'sha256:8e012198eea15b2554b07014081c85fec4967a1b9cc4b65bd9a4bce3ae1c0c88',
-              'fixedVersions': [
-                '1.35.0-r31'
-              ],
-              'installedVersion': '1.35.0-r29',
-              'packageName':      'busybox-binsh',
-              'purl':             'pkg:apk/alpine/busybox-binsh@1.35.0-r29?arch=x86_64&distro=3.17.1',
-              'references':       [
-                'http://lists.busybox.net/pipermail/busybox/2024-May/090760.html',
-                'https://access.redhat.com/security/cve/CVE-2023-42363',
-                'https://bugs.busybox.net/show_bug.cgi?id=15865',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-42363',
-                'https://ubuntu.com/security/notices/USN-6961-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-42363'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk'
-            },
-            {
-              'cve':  'CVE-2023-42364',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.5',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.8',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   'A use-after-free vulnerability in BusyBox v.1.36.1 allows attackers to cause a denial of service via a crafted awk pattern in the awk.c evaluate function.',
-              'diffID':        'sha256:8e012198eea15b2554b07014081c85fec4967a1b9cc4b65bd9a4bce3ae1c0c88',
-              'fixedVersions': [
-                '1.35.0-r31'
-              ],
-              'installedVersion': '1.35.0-r29',
-              'packageName':      'busybox-binsh',
-              'purl':             'pkg:apk/alpine/busybox-binsh@1.35.0-r29?arch=x86_64&distro=3.17.1',
-              'references':       [
-                'http://lists.busybox.net/pipermail/busybox/2024-May/090762.html',
-                'https://access.redhat.com/security/cve/CVE-2023-42364',
-                'https://bugs.busybox.net/show_bug.cgi?id=15868',
-                'https://gitlab.alpinelinux.org/alpine/aports/-/blob/master/main/busybox/CVE-2023-42364-CVE-2023-42365.patch',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-42364',
-                'https://ubuntu.com/security/notices/USN-6961-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-42364'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'busybox: use-after-free'
-            },
-            {
-              'cve':  'CVE-2023-42365',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.5',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.8',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   'A use-after-free vulnerability was discovered in BusyBox v.1.36.1 via a crafted awk pattern in the awk.c copyvar function.',
-              'diffID':        'sha256:8e012198eea15b2554b07014081c85fec4967a1b9cc4b65bd9a4bce3ae1c0c88',
-              'fixedVersions': [
-                '1.35.0-r31'
-              ],
-              'installedVersion': '1.35.0-r29',
-              'packageName':      'busybox-binsh',
-              'purl':             'pkg:apk/alpine/busybox-binsh@1.35.0-r29?arch=x86_64&distro=3.17.1',
-              'references':       [
-                'http://lists.busybox.net/pipermail/busybox/2024-May/090762.html',
-                'https://access.redhat.com/security/cve/CVE-2023-42365',
-                'https://bugs.busybox.net/show_bug.cgi?id=15871',
-                'https://gitlab.alpinelinux.org/alpine/aports/-/blob/master/main/busybox/CVE-2023-42364-CVE-2023-42365.patch',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-42365',
-                'https://ubuntu.com/security/notices/USN-6961-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-42365'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'busybox: use-after-free'
-            },
-            {
-              'cve':  'CVE-2023-42366',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.5',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.1',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-787'
-              ],
-              'description':   'A heap-buffer-overflow was discovered in BusyBox v.1.36.1 in the next_token function at awk.c:1159.',
-              'diffID':        'sha256:8e012198eea15b2554b07014081c85fec4967a1b9cc4b65bd9a4bce3ae1c0c88',
-              'fixedVersions': [
-                '1.35.0-r30'
-              ],
-              'installedVersion': '1.35.0-r29',
-              'packageName':      'busybox-binsh',
-              'purl':             'pkg:apk/alpine/busybox-binsh@1.35.0-r29?arch=x86_64&distro=3.17.1',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2023-42366',
-                'https://bugs.busybox.net/show_bug.cgi?id=15874',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-42366',
-                'https://security.netapp.com/advisory/ntap-20241206-0007/',
-                'https://www.cve.org/CVERecord?id=CVE-2023-42366'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'busybox: A heap-buffer-overflow'
-            },
-            {
-              'cve':  'CVE-2023-0464',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-295'
-              ],
-              'description':   "A security vulnerability has been identified in all supported versions\n\nof OpenSSL related to the verification of X.509 certificate chains\nthat include policy constraints.  Attackers may be able to exploit this\nvulnerability by creating a malicious certificate chain that triggers\nexponential use of computational resources, leading to a denial-of-service\n(DoS) attack on affected systems.\n\nPolicy processing is disabled by default but can be enabled by passing\nthe `-policy' argument to the command line utilities or by calling the\n`X509_VERIFY_PARAM_set1_policies()' function.",
-              'diffID':        'sha256:72310f9c75be031d4b318d43090e229c62eb825b4f016cf4c88b0d26e73bfb80',
-              'fixedVersions': [
-                '3.0.8-r1'
-              ],
-              'installedVersion': '3.0.8-r0',
-              'packageName':      'libcrypto3',
-              'purl':             'pkg:apk/alpine/libcrypto3@3.0.8-r0?arch=x86_64&distro=3.17.1',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2023:3722',
-                'https://access.redhat.com/security/cve/CVE-2023-0464',
-                'https://bugzilla.redhat.com/2181082',
-                'https://bugzilla.redhat.com/2182561',
-                'https://bugzilla.redhat.com/2182565',
-                'https://bugzilla.redhat.com/2188461',
-                'https://bugzilla.redhat.com/2207947',
-                'https://errata.almalinux.org/9/ALSA-2023-3722.html',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=2017771e2db3e2b96f89bbe8766c3209f6a99545',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=2dcd4f1e3115f38cefa43e3efbe9b801c27e642e',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=879f7080d7e141f415c79eaa3a8ac4a3dad0348b',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=959c59c7a0164117e7f8366466a32bb1f8d77ff1',
-                'https://linux.oracle.com/cve/CVE-2023-0464.html',
-                'https://linux.oracle.com/errata/ELSA-2023-3722.html',
-                'https://lists.debian.org/debian-lts-announce/2023/06/msg00011.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-0464',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://security.netapp.com/advisory/ntap-20230406-0006/',
-                'https://security.netapp.com/advisory/ntap-20240621-0006/',
-                'https://ubuntu.com/security/notices/USN-6039-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.couchbase.com/alerts/',
-                'https://www.cve.org/CVERecord?id=CVE-2023-0464',
-                'https://www.debian.org/security/2023/dsa-5417',
-                'https://www.openssl.org/news/secadv/20230322.txt'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: Denial of service by excessive resource usage in verifying X509 policy constraints'
-            },
-            {
-              'cve':  'CVE-2023-5363',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N'
-                },
-                'redhat': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-684'
-              ],
-              'description':   "Issue summary: A bug has been identified in the processing of key and\ninitialisation vector (IV) lengths.  This can lead to potential truncation\nor overruns during the initialisation of some symmetric ciphers.\n\nImpact summary: A truncation in the IV can result in non-uniqueness,\nwhich could result in loss of confidentiality for some cipher modes.\n\nWhen calling EVP_EncryptInit_ex2(), EVP_DecryptInit_ex2() or\nEVP_CipherInit_ex2() the provided OSSL_PARAM array is processed after\nthe key and IV have been established.  Any alterations to the key length,\nvia the \"keylen\" parameter or the IV length, via the \"ivlen\" parameter,\nwithin the OSSL_PARAM array will not take effect as intended, potentially\ncausing truncation or overreading of these values.  The following ciphers\nand cipher modes are impacted: RC2, RC4, RC5, CCM, GCM and OCB.\n\nFor the CCM, GCM and OCB cipher modes, truncation of the IV can result in\nloss of confidentiality.  For example, when following NIST's SP 800-38D\nsection 8.2.1 guidance for constructing a deterministic IV for AES in\nGCM mode, truncation of the counter portion could lead to IV reuse.\n\nBoth truncations and overruns of the key and overruns of the IV will\nproduce incorrect results and could, in some cases, trigger a memory\nexception.  However, these issues are not currently assessed as security\ncritical.\n\nChanging the key and/or IV lengths is not considered to be a common operation\nand the vulnerable API was recently introduced. Furthermore it is likely that\napplication developers will have spotted this problem during testing since\ndecryption would fail unless both peers in the communication were similarly\nvulnerable. For these reasons we expect the probability of an application being\nvulnerable to this to be quite low. However if an application is vulnerable then\nthis issue is considered very serious. For these reasons we have assessed this\nissue as Moderate severity overall.\n\nThe OpenSSL SSL/TLS implementation is not affected by this issue.\n\nThe OpenSSL 3.0 and 3.1 FIPS providers are not affected by this because\nthe issue lies outside of the FIPS provider boundary.\n\nOpenSSL 3.1 and 3.0 are vulnerable to this issue.",
-              'diffID':        'sha256:72310f9c75be031d4b318d43090e229c62eb825b4f016cf4c88b0d26e73bfb80',
-              'fixedVersions': [
-                '3.0.12-r0'
-              ],
-              'installedVersion': '3.0.8-r0',
-              'packageName':      'libcrypto3',
-              'purl':             'pkg:apk/alpine/libcrypto3@3.0.8-r0?arch=x86_64&distro=3.17.1',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2023/10/24/1',
-                'https://access.redhat.com/errata/RHSA-2024:0310',
-                'https://access.redhat.com/security/cve/CVE-2023-5363',
-                'https://bugzilla.redhat.com/2243839',
-                'https://errata.almalinux.org/9/ALSA-2024-0310.html',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=0df40630850fb2740e6be6890bb905d3fc623b2d',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=5f69f5c65e483928c4b28ed16af6e5742929f1ee',
-                'https://linux.oracle.com/cve/CVE-2023-5363.html',
-                'https://linux.oracle.com/errata/ELSA-2024-12093.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-5363',
-                'https://security.netapp.com/advisory/ntap-20231027-0010/',
-                'https://security.netapp.com/advisory/ntap-20240201-0003/',
-                'https://security.netapp.com/advisory/ntap-20240201-0004/',
-                'https://security.netapp.com/advisory/ntap-20241108-0002/',
-                'https://ubuntu.com/security/notices/USN-6450-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-5363',
-                'https://www.debian.org/security/2023/dsa-5532',
-                'https://www.openssl.org/news/secadv/20231024.txt'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: Incorrect cipher key and IV length processing'
-            },
-            {
-              'cve':  'CVE-2024-6119',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-843'
-              ],
-              'description':   "Issue summary: Applications performing certificate name checks (e.g., TLS\nclients checking server certificates) may attempt to read an invalid memory\naddress resulting in abnormal termination of the application process.\n\nImpact summary: Abnormal termination of an application can a cause a denial of\nservice.\n\nApplications performing certificate name checks (e.g., TLS clients checking\nserver certificates) may attempt to read an invalid memory address when\ncomparing the expected name with an `otherName` subject alternative name of an\nX.509 certificate. This may result in an exception that terminates the\napplication program.\n\nNote that basic certificate chain validation (signatures, dates, ...) is not\naffected, the denial of service can occur only when the application also\nspecifies an expected DNS name, Email address or IP address.\n\nTLS servers rarely solicit client certificates, and even when they do, they\ngenerally don't perform a name check against a reference identifier (expected\nidentity), but rather extract the presented identity after checking the\ncertificate chain.  So TLS servers are generally not affected and the severity\nof the issue is Moderate.\n\nThe FIPS modules in 3.3, 3.2, 3.1 and 3.0 are not affected by this issue.",
-              'diffID':        'sha256:72310f9c75be031d4b318d43090e229c62eb825b4f016cf4c88b0d26e73bfb80',
-              'fixedVersions': [
-                '3.0.15-r0'
-              ],
-              'installedVersion': '3.0.8-r0',
-              'packageName':      'libcrypto3',
-              'purl':             'pkg:apk/alpine/libcrypto3@3.0.8-r0?arch=x86_64&distro=3.17.1',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2024/09/03/4',
-                'https://access.redhat.com/errata/RHSA-2024:8935',
-                'https://access.redhat.com/security/cve/CVE-2024-6119',
-                'https://bugzilla.redhat.com/2306158',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2306158',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-6119',
-                'https://errata.almalinux.org/9/ALSA-2024-8935.html',
-                'https://errata.rockylinux.org/RLSA-2024:6783',
-                'https://github.com/openssl/openssl/commit/05f360d9e849a1b277db628f1f13083a7f8dd04f',
-                'https://github.com/openssl/openssl/commit/06d1dc3fa96a2ba5a3e22735a033012aadc9f0d6',
-                'https://github.com/openssl/openssl/commit/621f3729831b05ee828a3203eddb621d014ff2b2',
-                'https://github.com/openssl/openssl/commit/7dfcee2cd2a63b2c64b9b4b0850be64cb695b0a0',
-                'https://github.com/openssl/openssl/security/advisories/GHSA-5qrj-vq78-58fj',
-                'https://linux.oracle.com/cve/CVE-2024-6119.html',
-                'https://linux.oracle.com/errata/ELSA-2024-8935.html',
-                'https://lists.freebsd.org/archives/freebsd-security/2024-September/000303.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2024-6119',
-                'https://openssl-library.org/news/secadv/20240903.txt',
-                'https://security.netapp.com/advisory/ntap-20240912-0001/',
-                'https://ubuntu.com/security/notices/USN-6986-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2024-6119'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: Possible denial of service in X.509 name checks'
-            },
-            {
-              'cve':  'CVE-2023-0465',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N'
-                },
-                'redhat': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-295'
-              ],
-              'description':   "Applications that use a non-default option when verifying certificates may be\nvulnerable to an attack from a malicious CA to circumvent certain checks.\n\nInvalid certificate policies in leaf certificates are silently ignored by\nOpenSSL and other certificate policy checks are skipped for that certificate.\nA malicious CA could use this to deliberately assert invalid certificate policies\nin order to circumvent policy checking on the certificate altogether.\n\nPolicy processing is disabled by default but can be enabled by passing\nthe `-policy' argument to the command line utilities or by calling the\n`X509_VERIFY_PARAM_set1_policies()' function.",
-              'diffID':        'sha256:72310f9c75be031d4b318d43090e229c62eb825b4f016cf4c88b0d26e73bfb80',
-              'fixedVersions': [
-                '3.0.8-r2'
-              ],
-              'installedVersion': '3.0.8-r0',
-              'packageName':      'libcrypto3',
-              'purl':             'pkg:apk/alpine/libcrypto3@3.0.8-r0?arch=x86_64&distro=3.17.1',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2023:3722',
-                'https://access.redhat.com/security/cve/CVE-2023-0465',
-                'https://bugzilla.redhat.com/2181082',
-                'https://bugzilla.redhat.com/2182561',
-                'https://bugzilla.redhat.com/2182565',
-                'https://bugzilla.redhat.com/2188461',
-                'https://bugzilla.redhat.com/2207947',
-                'https://errata.almalinux.org/9/ALSA-2023-3722.html',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=10325176f3d3e98c6e2b3bf5ab1e3b334de6947a',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=1dd43e0709fece299b15208f36cc7c76209ba0bb',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=b013765abfa80036dc779dd0e50602c57bb3bf95',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=facfb1ab745646e97a1920977ae4a9965ea61d5c',
-                'https://linux.oracle.com/cve/CVE-2023-0465.html',
-                'https://linux.oracle.com/errata/ELSA-2023-3722.html',
-                'https://lists.debian.org/debian-lts-announce/2023/06/msg00011.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-0465',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://security.netapp.com/advisory/ntap-20230414-0001/',
-                'https://ubuntu.com/security/notices/USN-6039-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-0465',
-                'https://www.debian.org/security/2023/dsa-5417',
-                'https://www.openssl.org/news/secadv/20230328.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: Invalid certificate policies in leaf certificates are silently ignored'
-            },
-            {
-              'cve':  'CVE-2023-0466',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N'
-                },
-                'redhat': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-295'
-              ],
-              'description':   'The function X509_VERIFY_PARAM_add0_policy() is documented to\nimplicitly enable the certificate policy check when doing certificate\nverification. However the implementation of the function does not\nenable the check which allows certificates with invalid or incorrect\npolicies to pass the certificate verification.\n\nAs suddenly enabling the policy check could break existing deployments it was\ndecided to keep the existing behavior of the X509_VERIFY_PARAM_add0_policy()\nfunction.\n\nInstead the applications that require OpenSSL to perform certificate\npolicy check need to use X509_VERIFY_PARAM_set1_policies() or explicitly\nenable the policy check by calling X509_VERIFY_PARAM_set_flags() with\nthe X509_V_FLAG_POLICY_CHECK flag argument.\n\nCertificate policy checks are disabled by default in OpenSSL and are not\ncommonly used by applications.',
-              'diffID':        'sha256:72310f9c75be031d4b318d43090e229c62eb825b4f016cf4c88b0d26e73bfb80',
-              'fixedVersions': [
-                '3.0.8-r3'
-              ],
-              'installedVersion': '3.0.8-r0',
-              'packageName':      'libcrypto3',
-              'purl':             'pkg:apk/alpine/libcrypto3@3.0.8-r0?arch=x86_64&distro=3.17.1',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2023/09/28/4',
-                'https://access.redhat.com/errata/RHSA-2023:3722',
-                'https://access.redhat.com/security/cve/CVE-2023-0466',
-                'https://bugzilla.redhat.com/2181082',
-                'https://bugzilla.redhat.com/2182561',
-                'https://bugzilla.redhat.com/2182565',
-                'https://bugzilla.redhat.com/2188461',
-                'https://bugzilla.redhat.com/2207947',
-                'https://errata.almalinux.org/9/ALSA-2023-3722.html',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=0d16b7e99aafc0b4a6d729eec65a411a7e025f0a',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=51e8a84ce742db0f6c70510d0159dad8f7825908',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=73398dea26de9899fb4baa94098ad0a61f435c72',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=fc814a30fc4f0bc54fcea7d9a7462f5457aab061',
-                'https://linux.oracle.com/cve/CVE-2023-0466.html',
-                'https://linux.oracle.com/errata/ELSA-2023-3722.html',
-                'https://lists.debian.org/debian-lts-announce/2023/06/msg00011.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-0466',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://security.netapp.com/advisory/ntap-20230414-0001/',
-                'https://ubuntu.com/security/notices/USN-6039-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-0466',
-                'https://www.debian.org/security/2023/dsa-5417',
-                'https://www.openssl.org/news/secadv/20230328.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: Certificate policy check not enabled'
-            },
-            {
-              'cve':  'CVE-2023-1255',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '5.1',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-125'
-              ],
-              'description':   'Issue summary: The AES-XTS cipher decryption implementation for 64 bit ARM\nplatform contains a bug that could cause it to read past the input buffer,\nleading to a crash.\n\nImpact summary: Applications that use the AES-XTS algorithm on the 64 bit ARM\nplatform can crash in rare circumstances. The AES-XTS algorithm is usually\nused for disk encryption.\n\nThe AES-XTS cipher decryption implementation for 64 bit ARM platform will read\npast the end of the ciphertext buffer if the ciphertext size is 4 mod 5 in 16\nbyte blocks, e.g. 144 bytes or 1024 bytes. If the memory after the ciphertext\nbuffer is unmapped, this will trigger a crash which results in a denial of\nservice.\n\nIf an attacker can control the size and location of the ciphertext buffer\nbeing decrypted by an application using AES-XTS on 64 bit ARM, the\napplication is affected. This is fairly unlikely making this issue\na Low severity one.',
-              'diffID':        'sha256:72310f9c75be031d4b318d43090e229c62eb825b4f016cf4c88b0d26e73bfb80',
-              'fixedVersions': [
-                '3.0.8-r4'
-              ],
-              'installedVersion': '3.0.8-r0',
-              'packageName':      'libcrypto3',
-              'purl':             'pkg:apk/alpine/libcrypto3@3.0.8-r0?arch=x86_64&distro=3.17.1',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2023:3722',
-                'https://access.redhat.com/security/cve/CVE-2023-1255',
-                'https://bugzilla.redhat.com/2181082',
-                'https://bugzilla.redhat.com/2182561',
-                'https://bugzilla.redhat.com/2182565',
-                'https://bugzilla.redhat.com/2188461',
-                'https://bugzilla.redhat.com/2207947',
-                'https://errata.almalinux.org/9/ALSA-2023-3722.html',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=02ac9c9420275868472f33b01def01218742b8bb',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=bc2f61ad70971869b242fc1cb445b98bad50074a',
-                'https://linux.oracle.com/cve/CVE-2023-1255.html',
-                'https://linux.oracle.com/errata/ELSA-2023-3722.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-1255',
-                'https://security.netapp.com/advisory/ntap-20230908-0006/',
-                'https://ubuntu.com/security/notices/USN-6119-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-1255',
-                'https://www.openssl.org/news/secadv/20230419.txt',
-                'https://www.openssl.org/news/secadv/20230420.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: Input buffer over-read in AES-XTS implementation on 64 bit ARM'
-            },
-            {
-              'cve':  'CVE-2023-2650',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '6.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-770'
-              ],
-              'description':   "Issue summary: Processing some specially crafted ASN.1 object identifiers or\ndata containing them may be very slow.\n\nImpact summary: Applications that use OBJ_obj2txt() directly, or use any of\nthe OpenSSL subsystems OCSP, PKCS7/SMIME, CMS, CMP/CRMF or TS with no message\nsize limit may experience notable to very long delays when processing those\nmessages, which may lead to a Denial of Service.\n\nAn OBJECT IDENTIFIER is composed of a series of numbers - sub-identifiers -\nmost of which have no size limit.  OBJ_obj2txt() may be used to translate\nan ASN.1 OBJECT IDENTIFIER given in DER encoding form (using the OpenSSL\ntype ASN1_OBJECT) to its canonical numeric text form, which are the\nsub-identifiers of the OBJECT IDENTIFIER in decimal form, separated by\nperiods.\n\nWhen one of the sub-identifiers in the OBJECT IDENTIFIER is very large\n(these are sizes that are seen as absurdly large, taking up tens or hundreds\nof KiBs), the translation to a decimal number in text may take a very long\ntime.  The time complexity is O(n^2) with 'n' being the size of the\nsub-identifiers in bytes (*).\n\nWith OpenSSL 3.0, support to fetch cryptographic algorithms using names /\nidentifiers in string form was introduced.  This includes using OBJECT\nIDENTIFIERs in canonical numeric text form as identifiers for fetching\nalgorithms.\n\nSuch OBJECT IDENTIFIERs may be received through the ASN.1 structure\nAlgorithmIdentifier, which is commonly used in multiple protocols to specify\nwhat cryptographic algorithm should be used to sign or verify, encrypt or\ndecrypt, or digest passed data.\n\nApplications that call OBJ_obj2txt() directly with untrusted data are\naffected, with any version of OpenSSL.  If the use is for the mere purpose\nof display, the severity is considered low.\n\nIn OpenSSL 3.0 and newer, this affects the subsystems OCSP, PKCS7/SMIME,\nCMS, CMP/CRMF or TS.  It also impacts anything that processes X.509\ncertificates, including simple things like verifying its signature.\n\nThe impact on TLS is relatively low, because all versions of OpenSSL have a\n100KiB limit on the peer's certificate chain.  Additionally, this only\nimpacts clients, or servers that have explicitly enabled client\nauthentication.\n\nIn OpenSSL 1.1.1 and 1.0.2, this only affects displaying diverse objects,\nsuch as X.509 certificates.  This is assumed to not happen in such a way\nthat it would cause a Denial of Service, so these versions are considered\nnot affected by this issue in such a way that it would be cause for concern,\nand the severity is therefore considered low.",
-              'diffID':        'sha256:72310f9c75be031d4b318d43090e229c62eb825b4f016cf4c88b0d26e73bfb80',
-              'fixedVersions': [
-                '3.0.9-r0'
-              ],
-              'installedVersion': '3.0.8-r0',
-              'packageName':      'libcrypto3',
-              'purl':             'pkg:apk/alpine/libcrypto3@3.0.8-r0?arch=x86_64&distro=3.17.1',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2023/05/30/1',
-                'https://access.redhat.com/errata/RHSA-2023:6330',
-                'https://access.redhat.com/security/cve/CVE-2023-2650',
-                'https://bugzilla.redhat.com/1858038',
-                'https://bugzilla.redhat.com/2207947',
-                'https://errata.almalinux.org/9/ALSA-2023-6330.html',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=423a2bc737a908ad0c77bda470b2b59dc879936b',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=853c5e56ee0b8650c73140816bb8b91d6163422c',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=9e209944b35cf82368071f160a744b6178f9b098',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=db779b0e10b047f2585615e0b8f2acdf21f8544a',
-                'https://linux.oracle.com/cve/CVE-2023-2650.html',
-                'https://linux.oracle.com/errata/ELSA-2023-6330.html',
-                'https://lists.debian.org/debian-lts-announce/2023/06/msg00011.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-2650',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0009',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://security.netapp.com/advisory/ntap-20230703-0001/',
-                'https://security.netapp.com/advisory/ntap-20231027-0009/',
-                'https://ubuntu.com/security/notices/USN-6119-1',
-                'https://ubuntu.com/security/notices/USN-6188-1',
-                'https://ubuntu.com/security/notices/USN-6672-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-2650',
-                'https://www.debian.org/security/2023/dsa-5417',
-                'https://www.openssl.org/news/secadv/20230530.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: Possible DoS translating ASN.1 object identifiers'
-            },
-            {
-              'cve':  'CVE-2023-2975',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N'
-                },
-                'redhat': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-354',
-                'CWE-287'
-              ],
-              'description':   'Issue summary: The AES-SIV cipher implementation contains a bug that causes\nit to ignore empty associated data entries which are unauthenticated as\na consequence.\n\nImpact summary: Applications that use the AES-SIV algorithm and want to\nauthenticate empty data entries as associated data can be misled by removing,\nadding or reordering such empty entries as these are ignored by the OpenSSL\nimplementation. We are currently unaware of any such applications.\n\nThe AES-SIV algorithm allows for authentication of multiple associated\ndata entries along with the encryption. To authenticate empty data the\napplication has to call EVP_EncryptUpdate() (or EVP_CipherUpdate()) with\nNULL pointer as the output buffer and 0 as the input buffer length.\nThe AES-SIV implementation in OpenSSL just returns success for such a call\ninstead of performing the associated data authentication operation.\nThe empty data thus will not be authenticated.\n\nAs this issue does not affect non-empty associated data authentication and\nwe expect it to be rare for an application to use empty associated data\nentries this is qualified as Low severity issue.',
-              'diffID':        'sha256:72310f9c75be031d4b318d43090e229c62eb825b4f016cf4c88b0d26e73bfb80',
-              'fixedVersions': [
-                '3.0.9-r2'
-              ],
-              'installedVersion': '3.0.8-r0',
-              'packageName':      'libcrypto3',
-              'purl':             'pkg:apk/alpine/libcrypto3@3.0.8-r0?arch=x86_64&distro=3.17.1',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2023/07/15/1',
-                'http://www.openwall.com/lists/oss-security/2023/07/19/5',
-                'https://access.redhat.com/errata/RHSA-2024:2447',
-                'https://access.redhat.com/security/cve/CVE-2023-2975',
-                'https://bugzilla.redhat.com/2223016',
-                'https://bugzilla.redhat.com/2224962',
-                'https://bugzilla.redhat.com/2227852',
-                'https://bugzilla.redhat.com/2248616',
-                'https://bugzilla.redhat.com/2257571',
-                'https://bugzilla.redhat.com/2258502',
-                'https://bugzilla.redhat.com/2259944',
-                'https://errata.almalinux.org/9/ALSA-2024-2447.html',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=00e2f5eea29994d19293ec4e8c8775ba73678598',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=6a83f0c958811f07e0d11dfc6b5a6a98edfd5bdc',
-                'https://linux.oracle.com/cve/CVE-2023-2975.html',
-                'https://linux.oracle.com/errata/ELSA-2024-2447.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-2975',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://security.netapp.com/advisory/ntap-20230725-0004/',
-                'https://ubuntu.com/security/notices/USN-6450-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-2975',
-                'https://www.openssl.org/news/secadv/20230714.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: AES-SIV cipher implementation contains a bug that causes it to ignore empty associated data entries'
-            },
-            {
-              'cve':  'CVE-2023-3446',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L'
-                },
-                'redhat': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L'
-                }
-              },
-              'cwes': [
-                'CWE-606',
-                'CWE-1333'
-              ],
-              'description':   "Issue summary: Checking excessively long DH keys or parameters may be very slow.\n\nImpact summary: Applications that use the functions DH_check(), DH_check_ex()\nor EVP_PKEY_param_check() to check a DH key or DH parameters may experience long\ndelays. Where the key or parameters that are being checked have been obtained\nfrom an untrusted source this may lead to a Denial of Service.\n\nThe function DH_check() performs various checks on DH parameters. One of those\nchecks confirms that the modulus ('p' parameter) is not too large. Trying to use\na very large modulus is slow and OpenSSL will not normally use a modulus which\nis over 10,000 bits in length.\n\nHowever the DH_check() function checks numerous aspects of the key or parameters\nthat have been supplied. Some of those checks use the supplied modulus value\neven if it has already been found to be too large.\n\nAn application that calls DH_check() and supplies a key or parameters obtained\nfrom an untrusted source could be vulernable to a Denial of Service attack.\n\nThe function DH_check() is itself called by a number of other OpenSSL functions.\nAn application calling any of those other functions may similarly be affected.\nThe other functions affected by this are DH_check_ex() and\nEVP_PKEY_param_check().\n\nAlso vulnerable are the OpenSSL dhparam and pkeyparam command line applications\nwhen using the '-check' option.\n\nThe OpenSSL SSL/TLS implementation is not affected by this issue.\nThe OpenSSL 3.0 and 3.1 FIPS providers are not affected by this issue.",
-              'diffID':        'sha256:72310f9c75be031d4b318d43090e229c62eb825b4f016cf4c88b0d26e73bfb80',
-              'fixedVersions': [
-                '3.0.9-r3'
-              ],
-              'installedVersion': '3.0.8-r0',
-              'packageName':      'libcrypto3',
-              'purl':             'pkg:apk/alpine/libcrypto3@3.0.8-r0?arch=x86_64&distro=3.17.1',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2023/07/19/4',
-                'http://www.openwall.com/lists/oss-security/2023/07/19/5',
-                'http://www.openwall.com/lists/oss-security/2023/07/19/6',
-                'http://www.openwall.com/lists/oss-security/2023/07/31/1',
-                'http://www.openwall.com/lists/oss-security/2024/05/16/1',
-                'https://access.redhat.com/errata/RHSA-2024:2447',
-                'https://access.redhat.com/security/cve/CVE-2023-3446',
-                'https://bugzilla.redhat.com/2223016',
-                'https://bugzilla.redhat.com/2224962',
-                'https://bugzilla.redhat.com/2227852',
-                'https://bugzilla.redhat.com/2248616',
-                'https://bugzilla.redhat.com/2257571',
-                'https://bugzilla.redhat.com/2258502',
-                'https://bugzilla.redhat.com/2259944',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2224962',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2257582',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2257583',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2258677',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2258688',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2258691',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2258694',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2258700',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-36763',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-36764',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3446',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45229',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45231',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45232',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45233',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45235',
-                'https://errata.almalinux.org/9/ALSA-2024-2447.html',
-                'https://errata.rockylinux.org/RLSA-2024:2264',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=1fa20cf2f506113c761777127a38bce5068740eb',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=8780a896543a654e757db1b9396383f9d8095528',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=9a0a4d3c1e7138915563c0df4fe6a3f9377b839c',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=fc9867c1e03c22ebf56943be205202e576aabf23',
-                'https://linux.oracle.com/cve/CVE-2023-3446.html',
-                'https://linux.oracle.com/errata/ELSA-2024-2447.html',
-                'https://lists.debian.org/debian-lts-announce/2023/08/msg00019.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-3446',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://security.netapp.com/advisory/ntap-20230803-0011/',
-                'https://ubuntu.com/security/notices/USN-6435-1',
-                'https://ubuntu.com/security/notices/USN-6435-2',
-                'https://ubuntu.com/security/notices/USN-6450-1',
-                'https://ubuntu.com/security/notices/USN-6709-1',
-                'https://ubuntu.com/security/notices/USN-7018-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-3446',
-                'https://www.openssl.org/news/secadv/20230719.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: Excessive time spent checking DH keys and parameters'
-            },
-            {
-              'cve':  'CVE-2023-3817',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L'
-                },
-                'redhat': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L'
-                }
-              },
-              'cwes': [
-                'CWE-606',
-                'CWE-834'
-              ],
-              'description':   'Issue summary: Checking excessively long DH keys or parameters may be very slow.\n\nImpact summary: Applications that use the functions DH_check(), DH_check_ex()\nor EVP_PKEY_param_check() to check a DH key or DH parameters may experience long\ndelays. Where the key or parameters that are being checked have been obtained\nfrom an untrusted source this may lead to a Denial of Service.\n\nThe function DH_check() performs various checks on DH parameters. After fixing\nCVE-2023-3446 it was discovered that a large q parameter value can also trigger\nan overly long computation during some of these checks. A correct q value,\nif present, cannot be larger than the modulus p parameter, thus it is\nunnecessary to perform these checks if q is larger than p.\n\nAn application that calls DH_check() and supplies a key or parameters obtained\nfrom an untrusted source could be vulnerable to a Denial of Service attack.\n\nThe function DH_check() is itself called by a number of other OpenSSL functions.\nAn application calling any of those other functions may similarly be affected.\nThe other functions affected by this are DH_check_ex() and\nEVP_PKEY_param_check().\n\nAlso vulnerable are the OpenSSL dhparam and pkeyparam command line applications\nwhen using the "-check" option.\n\nThe OpenSSL SSL/TLS implementation is not affected by this issue.\n\nThe OpenSSL 3.0 and 3.1 FIPS providers are not affected by this issue.',
-              'diffID':        'sha256:72310f9c75be031d4b318d43090e229c62eb825b4f016cf4c88b0d26e73bfb80',
-              'fixedVersions': [
-                '3.0.10-r0'
-              ],
-              'installedVersion': '3.0.8-r0',
-              'packageName':      'libcrypto3',
-              'purl':             'pkg:apk/alpine/libcrypto3@3.0.8-r0?arch=x86_64&distro=3.17.1',
-              'references':       [
-                'http://seclists.org/fulldisclosure/2023/Jul/43',
-                'http://www.openwall.com/lists/oss-security/2023/07/31/1',
-                'http://www.openwall.com/lists/oss-security/2023/09/22/11',
-                'http://www.openwall.com/lists/oss-security/2023/09/22/9',
-                'http://www.openwall.com/lists/oss-security/2023/11/06/2',
-                'https://access.redhat.com/errata/RHSA-2024:2447',
-                'https://access.redhat.com/security/cve/CVE-2023-3817',
-                'https://bugzilla.redhat.com/2223016',
-                'https://bugzilla.redhat.com/2224962',
-                'https://bugzilla.redhat.com/2227852',
-                'https://bugzilla.redhat.com/2248616',
-                'https://bugzilla.redhat.com/2257571',
-                'https://bugzilla.redhat.com/2258502',
-                'https://bugzilla.redhat.com/2259944',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2224962',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2227852',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2248616',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2270358',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3446',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3817',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-5678',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-2408',
-                'https://errata.almalinux.org/9/ALSA-2024-2447.html',
-                'https://errata.rockylinux.org/RLSA-2023:7877',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=6a1eb62c29db6cb5eec707f9338aee00f44e26f5',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=869ad69aadd985c7b8ca6f4e5dd0eb274c9f3644',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=9002fd07327a91f35ba6c1307e71fa6fd4409b7f',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=91ddeba0f2269b017dc06c46c993a788974b1aa5',
-                'https://linux.oracle.com/cve/CVE-2023-3817.html',
-                'https://linux.oracle.com/errata/ELSA-2024-2447.html',
-                'https://lists.debian.org/debian-lts-announce/2023/08/msg00019.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-3817',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://security.netapp.com/advisory/ntap-20230818-0014/',
-                'https://security.netapp.com/advisory/ntap-20231027-0008/',
-                'https://security.netapp.com/advisory/ntap-20240621-0006/',
-                'https://ubuntu.com/security/notices/USN-6435-1',
-                'https://ubuntu.com/security/notices/USN-6435-2',
-                'https://ubuntu.com/security/notices/USN-6450-1',
-                'https://ubuntu.com/security/notices/USN-6709-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-3817',
-                'https://www.openssl.org/news/secadv/20230731.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'OpenSSL: Excessive time spent checking DH q parameter value'
-            },
-            {
-              'cve':  'CVE-2023-5678',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L'
-                },
-                'redhat': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L'
-                }
-              },
-              'cwes': [
-                'CWE-606',
-                'CWE-754'
-              ],
-              'description':   "Issue summary: Generating excessively long X9.42 DH keys or checking\nexcessively long X9.42 DH keys or parameters may be very slow.\n\nImpact summary: Applications that use the functions DH_generate_key() to\ngenerate an X9.42 DH key may experience long delays.  Likewise, applications\nthat use DH_check_pub_key(), DH_check_pub_key_ex() or EVP_PKEY_public_check()\nto check an X9.42 DH key or X9.42 DH parameters may experience long delays.\nWhere the key or parameters that are being checked have been obtained from\nan untrusted source this may lead to a Denial of Service.\n\nWhile DH_check() performs all the necessary checks (as of CVE-2023-3817),\nDH_check_pub_key() doesn't make any of these checks, and is therefore\nvulnerable for excessively large P and Q parameters.\n\nLikewise, while DH_generate_key() performs a check for an excessively large\nP, it doesn't check for an excessively large Q.\n\nAn application that calls DH_generate_key() or DH_check_pub_key() and\nsupplies a key or parameters obtained from an untrusted source could be\nvulnerable to a Denial of Service attack.\n\nDH_generate_key() and DH_check_pub_key() are also called by a number of\nother OpenSSL functions.  An application calling any of those other\nfunctions may similarly be affected.  The other functions affected by this\nare DH_check_pub_key_ex(), EVP_PKEY_public_check(), and EVP_PKEY_generate().\n\nAlso vulnerable are the OpenSSL pkey command line application when using the\n\"-pubcheck\" option, as well as the OpenSSL genpkey command line application.\n\nThe OpenSSL SSL/TLS implementation is not affected by this issue.\n\nThe OpenSSL 3.0 and 3.1 FIPS providers are not affected by this issue.",
-              'diffID':        'sha256:72310f9c75be031d4b318d43090e229c62eb825b4f016cf4c88b0d26e73bfb80',
-              'fixedVersions': [
-                '3.0.12-r1'
-              ],
-              'installedVersion': '3.0.8-r0',
-              'packageName':      'libcrypto3',
-              'purl':             'pkg:apk/alpine/libcrypto3@3.0.8-r0?arch=x86_64&distro=3.17.1',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2024/03/11/1',
-                'https://access.redhat.com/errata/RHSA-2024:2447',
-                'https://access.redhat.com/security/cve/CVE-2023-5678',
-                'https://bugzilla.redhat.com/2223016',
-                'https://bugzilla.redhat.com/2224962',
-                'https://bugzilla.redhat.com/2227852',
-                'https://bugzilla.redhat.com/2248616',
-                'https://bugzilla.redhat.com/2257571',
-                'https://bugzilla.redhat.com/2258502',
-                'https://bugzilla.redhat.com/2259944',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2224962',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2227852',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2248616',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2270358',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3446',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3817',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-5678',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-2408',
-                'https://errata.almalinux.org/9/ALSA-2024-2447.html',
-                'https://errata.rockylinux.org/RLSA-2023:7877',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=34efaef6c103d636ab507a0cc34dca4d3aecc055',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=710fee740904b6290fef0dd5536fbcedbc38ff0c',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=db925ae2e65d0d925adef429afc37f75bd1c2017',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=ddeb4b6c6d527e54ce9a99cba785c0f7776e54b6',
-                'https://linux.oracle.com/cve/CVE-2023-5678.html',
-                'https://linux.oracle.com/errata/ELSA-2024-2447.html',
-                'https://lists.debian.org/debian-lts-announce/2024/10/msg00033.html',
-                'https://lists.debian.org/debian-lts-announce/2024/11/msg00000.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-5678',
-                'https://security.netapp.com/advisory/ntap-20231130-0010/',
-                'https://ubuntu.com/security/notices/USN-6622-1',
-                'https://ubuntu.com/security/notices/USN-6632-1',
-                'https://ubuntu.com/security/notices/USN-6709-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-5678',
-                'https://www.openssl.org/news/secadv/20231106.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: Generating excessively long X9.42 DH keys or checking excessively long X9.42 DH keys or parameters may be very slow'
-            },
-            {
-              'cve':  'CVE-2023-6129',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '6.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-440',
-                'CWE-787'
-              ],
-              'description':   'Issue summary: The POLY1305 MAC (message authentication code) implementation\ncontains a bug that might corrupt the internal state of applications running\non PowerPC CPU based platforms if the CPU provides vector instructions.\n\nImpact summary: If an attacker can influence whether the POLY1305 MAC\nalgorithm is used, the application state might be corrupted with various\napplication dependent consequences.\n\nThe POLY1305 MAC (message authentication code) implementation in OpenSSL for\nPowerPC CPUs restores the contents of vector registers in a different order\nthan they are saved. Thus the contents of some of these vector registers\nare corrupted when returning to the caller. The vulnerable code is used only\non newer PowerPC processors supporting the PowerISA 2.07 instructions.\n\nThe consequences of this kind of internal application state corruption can\nbe various - from no consequences, if the calling application does not\ndepend on the contents of non-volatile XMM registers at all, to the worst\nconsequences, where the attacker could get complete control of the application\nprocess. However unless the compiler uses the vector registers for storing\npointers, the most likely consequence, if any, would be an incorrect result\nof some application dependent calculations or a crash leading to a denial of\nservice.\n\nThe POLY1305 MAC algorithm is most frequently used as part of the\nCHACHA20-POLY1305 AEAD (authenticated encryption with associated data)\nalgorithm. The most common usage of this AEAD cipher is with TLS protocol\nversions 1.2 and 1.3. If this cipher is enabled on the server a malicious\nclient can influence whether this AEAD cipher is used. This implies that\nTLS server applications using OpenSSL can be potentially impacted. However\nwe are currently not aware of any concrete application that would be affected\nby this issue therefore we consider this a Low severity security issue.',
-              'diffID':        'sha256:72310f9c75be031d4b318d43090e229c62eb825b4f016cf4c88b0d26e73bfb80',
-              'fixedVersions': [
-                '3.0.12-r2'
-              ],
-              'installedVersion': '3.0.8-r0',
-              'packageName':      'libcrypto3',
-              'purl':             'pkg:apk/alpine/libcrypto3@3.0.8-r0?arch=x86_64&distro=3.17.1',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2024/03/11/1',
-                'https://access.redhat.com/errata/RHSA-2024:9088',
-                'https://access.redhat.com/security/cve/CVE-2023-6129',
-                'https://bugzilla.redhat.com/2257571',
-                'https://bugzilla.redhat.com/2258502',
-                'https://bugzilla.redhat.com/2259944',
-                'https://bugzilla.redhat.com/2284243',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2257571',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2258502',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2259944',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2284243',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-6129',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-6237',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-0727',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-1298',
-                'https://errata.almalinux.org/9/ALSA-2024-9088.html',
-                'https://errata.rockylinux.org/RLSA-2024:9088',
-                'https://github.com/openssl/openssl/commit/050d26383d4e264966fb83428e72d5d48f402d35',
-                'https://github.com/openssl/openssl/commit/5b139f95c9a47a55a0c54100f3837b1eee942b04',
-                'https://github.com/openssl/openssl/commit/f3fc5808fe9ff74042d639839610d03b8fdcc015',
-                'https://linux.oracle.com/cve/CVE-2023-6129.html',
-                'https://linux.oracle.com/errata/ELSA-2024-9088.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-6129',
-                'https://security.netapp.com/advisory/ntap-20240216-0009/',
-                'https://security.netapp.com/advisory/ntap-20240426-0008/',
-                'https://security.netapp.com/advisory/ntap-20240426-0013/',
-                'https://security.netapp.com/advisory/ntap-20240503-0011/',
-                'https://ubuntu.com/security/notices/USN-6622-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-6129',
-                'https://www.openssl.org/news/secadv/20240109.txt',
-                'https://www.openwall.com/lists/oss-security/2024/01/09/1'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: POLY1305 MAC implementation corrupts vector registers on PowerPC'
-            },
-            {
-              'cve':  'CVE-2023-6237',
-              'cvss': {
-                'redhat': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-606'
-              ],
-              'description':   "Issue summary: Checking excessively long invalid RSA public keys may take\na long time.\n\nImpact summary: Applications that use the function EVP_PKEY_public_check()\nto check RSA public keys may experience long delays. Where the key that\nis being checked has been obtained from an untrusted source this may lead\nto a Denial of Service.\n\nWhen function EVP_PKEY_public_check() is called on RSA public keys,\na computation is done to confirm that the RSA modulus, n, is composite.\nFor valid RSA keys, n is a product of two or more large primes and this\ncomputation completes quickly. However, if n is an overly large prime,\nthen this computation would take a long time.\n\nAn application that calls EVP_PKEY_public_check() and supplies an RSA key\nobtained from an untrusted source could be vulnerable to a Denial of Service\nattack.\n\nThe function EVP_PKEY_public_check() is not called from other OpenSSL\nfunctions however it is called from the OpenSSL pkey command line\napplication. For that reason that application is also vulnerable if used\nwith the '-pubin' and '-check' options on untrusted data.\n\nThe OpenSSL SSL/TLS implementation is not affected by this issue.\n\nThe OpenSSL 3.0 and 3.1 FIPS providers are affected by this issue.",
-              'diffID':        'sha256:72310f9c75be031d4b318d43090e229c62eb825b4f016cf4c88b0d26e73bfb80',
-              'fixedVersions': [
-                '3.0.12-r3'
-              ],
-              'installedVersion': '3.0.8-r0',
-              'packageName':      'libcrypto3',
-              'purl':             'pkg:apk/alpine/libcrypto3@3.0.8-r0?arch=x86_64&distro=3.17.1',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2024/03/11/1',
-                'https://access.redhat.com/errata/RHSA-2024:9088',
-                'https://access.redhat.com/security/cve/CVE-2023-6237',
-                'https://bugzilla.redhat.com/2257571',
-                'https://bugzilla.redhat.com/2258502',
-                'https://bugzilla.redhat.com/2259944',
-                'https://bugzilla.redhat.com/2284243',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2257571',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2258502',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2259944',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2284243',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-6129',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-6237',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-0727',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-1298',
-                'https://errata.almalinux.org/9/ALSA-2024-9088.html',
-                'https://errata.rockylinux.org/RLSA-2024:9088',
-                'https://github.com/openssl/openssl/commit/0b0f7abfb37350794a4b8960fafc292cd5d1b84d',
-                'https://github.com/openssl/openssl/commit/18c02492138d1eb8b6548cb26e7b625fb2414a2a',
-                'https://github.com/openssl/openssl/commit/a830f551557d3d66a84bbb18a5b889c640c36294',
-                'https://linux.oracle.com/cve/CVE-2023-6237.html',
-                'https://linux.oracle.com/errata/ELSA-2024-9088.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-6237',
-                'https://security.netapp.com/advisory/ntap-20240531-0007/',
-                'https://ubuntu.com/security/notices/USN-6622-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-6237',
-                'https://www.openssl.org/news/secadv/20240115.txt',
-                'https://www.openwall.com/lists/oss-security/2024/01/15/2'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: Excessive time spent checking invalid RSA public keys'
-            },
-            {
-              'cve':  'CVE-2024-0727',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '5.5',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H'
-                },
-                'nvd': {
-                  'v3score':  '5.5',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '5.5',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-476'
-              ],
-              'description':   'Issue summary: Processing a maliciously formatted PKCS12 file may lead OpenSSL\nto crash leading to a potential Denial of Service attack\n\nImpact summary: Applications loading files in the PKCS12 format from untrusted\nsources might terminate abruptly.\n\nA file in PKCS12 format can contain certificates and keys and may come from an\nuntrusted source. The PKCS12 specification allows certain fields to be NULL, but\nOpenSSL does not correctly check for this case. This can lead to a NULL pointer\ndereference that results in OpenSSL crashing. If an application processes PKCS12\nfiles from an untrusted source using the OpenSSL APIs then that application will\nbe vulnerable to this issue.\n\nOpenSSL APIs that are vulnerable to this are: PKCS12_parse(),\nPKCS12_unpack_p7data(), PKCS12_unpack_p7encdata(), PKCS12_unpack_authsafes()\nand PKCS12_newpass().\n\nWe have also fixed a similar issue in SMIME_write_PKCS7(). However since this\nfunction is related to writing data we do not consider it security significant.\n\nThe FIPS modules in 3.2, 3.1 and 3.0 are not affected by this issue.',
-              'diffID':        'sha256:72310f9c75be031d4b318d43090e229c62eb825b4f016cf4c88b0d26e73bfb80',
-              'fixedVersions': [
-                '3.0.12-r4'
-              ],
-              'installedVersion': '3.0.8-r0',
-              'packageName':      'libcrypto3',
-              'purl':             'pkg:apk/alpine/libcrypto3@3.0.8-r0?arch=x86_64&distro=3.17.1',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2024/03/11/1',
-                'https://access.redhat.com/errata/RHSA-2024:9088',
-                'https://access.redhat.com/security/cve/CVE-2024-0727',
-                'https://bugzilla.redhat.com/2257571',
-                'https://bugzilla.redhat.com/2258502',
-                'https://bugzilla.redhat.com/2259944',
-                'https://bugzilla.redhat.com/2284243',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2257571',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2258502',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2259944',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2284243',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-6129',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-6237',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-0727',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-1298',
-                'https://errata.almalinux.org/9/ALSA-2024-9088.html',
-                'https://errata.rockylinux.org/RLSA-2024:9088',
-                'https://github.com/alexcrichton/openssl-src-rs/commit/add20f73b6b42be7451af2e1044d4e0e778992b2',
-                'https://github.com/github/advisory-database/pull/3472',
-                'https://github.com/openssl/openssl/commit/09df4395b5071217b76dc7d3d2e630eb8c5a79c2',
-                'https://github.com/openssl/openssl/commit/775acfdbd0c6af9ac855f34969cdab0c0c90844a',
-                'https://github.com/openssl/openssl/commit/d135eeab8a5dbf72b3da5240bab9ddb7678dbd2c',
-                'https://github.com/openssl/openssl/pull/23362',
-                'https://github.com/pyca/cryptography/commit/3519591d255d4506fbcd0d04037d45271903c64d',
-                'https://github.openssl.org/openssl/extended-releases/commit/03b3941d60c4bce58fab69a0c22377ab439bc0e8',
-                'https://github.openssl.org/openssl/extended-releases/commit/aebaa5883e31122b404e450732dc833dc9dee539',
-                'https://linux.oracle.com/cve/CVE-2024-0727.html',
-                'https://linux.oracle.com/errata/ELSA-2024-9088.html',
-                'https://lists.debian.org/debian-lts-announce/2024/10/msg00033.html',
-                'https://lists.debian.org/debian-lts-announce/2024/11/msg00000.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2024-0727',
-                'https://security.netapp.com/advisory/ntap-20240208-0006',
-                'https://security.netapp.com/advisory/ntap-20240208-0006/',
-                'https://ubuntu.com/security/notices/USN-6622-1',
-                'https://ubuntu.com/security/notices/USN-6632-1',
-                'https://ubuntu.com/security/notices/USN-6709-1',
-                'https://ubuntu.com/security/notices/USN-7018-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2024-0727',
-                'https://www.openssl.org/news/secadv/20240125.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: denial of service via null dereference'
-            },
-            {
-              'cve':  'CVE-2024-4603',
-              'cvss': {
-                'redhat': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L'
-                }
-              },
-              'cwes': [
-                'CWE-606',
-                'CWE-834'
-              ],
-              'description':   'Issue summary: Checking excessively long DSA keys or parameters may be very\nslow.\n\nImpact summary: Applications that use the functions EVP_PKEY_param_check()\nor EVP_PKEY_public_check() to check a DSA public key or DSA parameters may\nexperience long delays. Where the key or parameters that are being checked\nhave been obtained from an untrusted source this may lead to a Denial of\nService.\n\nThe functions EVP_PKEY_param_check() or EVP_PKEY_public_check() perform\nvarious checks on DSA parameters. Some of those computations take a long time\nif the modulus (`p` parameter) is too large.\n\nTrying to use a very large modulus is slow and OpenSSL will not allow using\npublic keys with a modulus which is over 10,000 bits in length for signature\nverification. However the key and parameter check functions do not limit\nthe modulus size when performing the checks.\n\nAn application that calls EVP_PKEY_param_check() or EVP_PKEY_public_check()\nand supplies a key or parameters obtained from an untrusted source could be\nvulnerable to a Denial of Service attack.\n\nThese functions are not called by OpenSSL itself on untrusted DSA keys so\nonly applications that directly call these functions may be vulnerable.\n\nAlso vulnerable are the OpenSSL pkey and pkeyparam command line applications\nwhen using the `-check` option.\n\nThe OpenSSL SSL/TLS implementation is not affected by this issue.\n\nThe OpenSSL 3.0 and 3.1 FIPS providers are affected by this issue.',
-              'diffID':        'sha256:72310f9c75be031d4b318d43090e229c62eb825b4f016cf4c88b0d26e73bfb80',
-              'fixedVersions': [
-                '3.0.13-r0'
-              ],
-              'installedVersion': '3.0.8-r0',
-              'packageName':      'libcrypto3',
-              'purl':             'pkg:apk/alpine/libcrypto3@3.0.8-r0?arch=x86_64&distro=3.17.1',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2024/05/16/2',
-                'https://access.redhat.com/errata/RHSA-2024:9333',
-                'https://access.redhat.com/security/cve/CVE-2024-4603',
-                'https://bugzilla.redhat.com/2274020',
-                'https://bugzilla.redhat.com/2281029',
-                'https://bugzilla.redhat.com/2283757',
-                'https://bugzilla.redhat.com/2294581',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2274020',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2281029',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2283757',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2294581',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-2511',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-4603',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-4741',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-5535',
-                'https://errata.almalinux.org/9/ALSA-2024-9333.html',
-                'https://errata.rockylinux.org/RLSA-2024:9333',
-                'https://github.com/openssl/openssl/commit/3559e868e58005d15c6013a0c1fd832e51c73397',
-                'https://github.com/openssl/openssl/commit/53ea06486d296b890d565fb971b2764fcd826e7e',
-                'https://github.com/openssl/openssl/commit/9c39b3858091c152f52513c066ff2c5a47969f0d',
-                'https://github.com/openssl/openssl/commit/da343d0605c826ef197aceedc67e8e04f065f740',
-                'https://linux.oracle.com/cve/CVE-2024-4603.html',
-                'https://linux.oracle.com/errata/ELSA-2024-9333.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2024-4603',
-                'https://security.netapp.com/advisory/ntap-20240621-0001/',
-                'https://ubuntu.com/security/notices/USN-6937-1',
-                'https://www.cve.org/CVERecord?id=CVE-2024-4603',
-                'https://www.openssl.org/news/secadv/20240516.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: Excessive time spent checking DSA keys and parameters'
-            },
-            {
-              'cve':  'CVE-2024-4741',
-              'cvss': {
-                'redhat': {
-                  'v3score':  '5.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   'Issue summary: Calling the OpenSSL API function SSL_free_buffers may cause\nmemory to be accessed that was previously freed in some situations\n\nImpact summary: A use after free can have a range of potential consequences such\nas the corruption of valid data, crashes or execution of arbitrary code.\nHowever, only applications that directly call the SSL_free_buffers function are\naffected by this issue. Applications that do not call this function are not\nvulnerable. Our investigations indicate that this function is rarely used by\napplications.\n\nThe SSL_free_buffers function is used to free the internal OpenSSL buffer used\nwhen processing an incoming record from the network. The call is only expected\nto succeed if the buffer is not currently in use. However, two scenarios have\nbeen identified where the buffer is freed even when still in use.\n\nThe first scenario occurs where a record header has been received from the\nnetwork and processed by OpenSSL, but the full record body has not yet arrived.\nIn this case calling SSL_free_buffers will succeed even though a record has only\nbeen partially processed and the buffer is still in use.\n\nThe second scenario occurs where a full record containing application data has\nbeen received and processed by OpenSSL but the application has only read part of\nthis data. Again a call to SSL_free_buffers will succeed even though the buffer\nis still in use.\n\nWhile these scenarios could occur accidentally during normal operation a\nmalicious attacker could attempt to engineer a stituation where this occurs.\nWe are not aware of this issue being actively exploited.\n\nThe FIPS modules in 3.3, 3.2, 3.1 and 3.0 are not affected by this issue.',
-              'diffID':        'sha256:72310f9c75be031d4b318d43090e229c62eb825b4f016cf4c88b0d26e73bfb80',
-              'fixedVersions': [
-                '3.0.14-r0'
-              ],
-              'installedVersion': '3.0.8-r0',
-              'packageName':      'libcrypto3',
-              'purl':             'pkg:apk/alpine/libcrypto3@3.0.8-r0?arch=x86_64&distro=3.17.1',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2024:9333',
-                'https://access.redhat.com/security/cve/CVE-2024-4741',
-                'https://bugzilla.redhat.com/2274020',
-                'https://bugzilla.redhat.com/2281029',
-                'https://bugzilla.redhat.com/2283757',
-                'https://bugzilla.redhat.com/2294581',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2274020',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2281029',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2283757',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2294581',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-2511',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-4603',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-4741',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-5535',
-                'https://errata.almalinux.org/9/ALSA-2024-9333.html',
-                'https://errata.rockylinux.org/RLSA-2024:9333',
-                'https://github.com/openssl/openssl/commit/704f725b96aa373ee45ecfb23f6abfe8be8d9177',
-                'https://github.com/openssl/openssl/commit/b3f0eb0a295f58f16ba43ba99dad70d4ee5c437d',
-                'https://github.com/openssl/openssl/commit/c88c3de51020c37e8706bf7a682a162593053aac',
-                'https://github.com/openssl/openssl/commit/e5093133c35ca82874ad83697af76f4b0f7e3bd8',
-                'https://github.openssl.org/openssl/extended-releases/commit/f7a045f3143fc6da2ee66bf52d8df04829590dd4',
-                'https://linux.oracle.com/cve/CVE-2024-4741.html',
-                'https://linux.oracle.com/errata/ELSA-2024-9333.html',
-                'https://lists.debian.org/debian-lts-announce/2024/10/msg00033.html',
-                'https://lists.debian.org/debian-lts-announce/2024/11/msg00000.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2024-4741',
-                'https://security.netapp.com/advisory/ntap-20240621-0004/',
-                'https://ubuntu.com/security/notices/USN-6937-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2024-4741',
-                'https://www.openssl.org/news/secadv/20240528.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: Use After Free with SSL_free_buffers'
-            },
-            {
-              'cve':  'CVE-2024-5535',
-              'cvss': {
-                'redhat': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-125'
-              ],
-              'description':   'Issue summary: Calling the OpenSSL API function SSL_select_next_proto with an\nempty supported client protocols buffer may cause a crash or memory contents to\nbe sent to the peer.\n\nImpact summary: A buffer overread can have a range of potential consequences\nsuch as unexpected application beahviour or a crash. In particular this issue\ncould result in up to 255 bytes of arbitrary private data from memory being sent\nto the peer leading to a loss of confidentiality. However, only applications\nthat directly call the SSL_select_next_proto function with a 0 length list of\nsupported client protocols are affected by this issue. This would normally never\nbe a valid scenario and is typically not under attacker control but may occur by\naccident in the case of a configuration or programming error in the calling\napplication.\n\nThe OpenSSL API function SSL_select_next_proto is typically used by TLS\napplications that support ALPN (Application Layer Protocol Negotiation) or NPN\n(Next Protocol Negotiation). NPN is older, was never standardised and\nis deprecated in favour of ALPN. We believe that ALPN is significantly more\nwidely deployed than NPN. The SSL_select_next_proto function accepts a list of\nprotocols from the server and a list of protocols from the client and returns\nthe first protocol that appears in the server list that also appears in the\nclient list. In the case of no overlap between the two lists it returns the\nfirst item in the client list. In either case it will signal whether an overlap\nbetween the two lists was found. In the case where SSL_select_next_proto is\ncalled with a zero length client list it fails to notice this condition and\nreturns the memory immediately following the client list pointer (and reports\nthat there was no overlap in the lists).\n\nThis function is typically called from a server side application callback for\nALPN or a client side application callback for NPN. In the case of ALPN the list\nof protocols supplied by the client is guaranteed by libssl to never be zero in\nlength. The list of server protocols comes from the application and should never\nnormally be expected to be of zero length. In this case if the\nSSL_select_next_proto function has been called as expected (with the list\nsupplied by the client passed in the client/client_len parameters), then the\napplication will not be vulnerable to this issue. If the application has\naccidentally been configured with a zero length server list, and has\naccidentally passed that zero length server list in the client/client_len\nparameters, and has additionally failed to correctly handle a "no overlap"\nresponse (which would normally result in a handshake failure in ALPN) then it\nwill be vulnerable to this problem.\n\nIn the case of NPN, the protocol permits the client to opportunistically select\na protocol when there is no overlap. OpenSSL returns the first client protocol\nin the no overlap case in support of this. The list of client protocols comes\nfrom the application and should never normally be expected to be of zero length.\nHowever if the SSL_select_next_proto function is accidentally called with a\nclient_len of 0 then an invalid memory pointer will be returned instead. If the\napplication uses this output as the opportunistic protocol then the loss of\nconfidentiality will occur.\n\nThis issue has been assessed as Low severity because applications are most\nlikely to be vulnerable if they are using NPN instead of ALPN - but NPN is not\nwidely used. It also requires an application configuration or programming error.\nFinally, this issue would not typically be under attacker control making active\nexploitation unlikely.\n\nThe FIPS modules in 3.3, 3.2, 3.1 and 3.0 are not affected by this issue.\n\nDue to the low severity of this issue we are not issuing new releases of\nOpenSSL at this time. The fix will be included in the next releases when they\nbecome available.',
-              'diffID':        'sha256:72310f9c75be031d4b318d43090e229c62eb825b4f016cf4c88b0d26e73bfb80',
-              'fixedVersions': [
-                '3.0.14-r0'
-              ],
-              'installedVersion': '3.0.8-r0',
-              'packageName':      'libcrypto3',
-              'purl':             'pkg:apk/alpine/libcrypto3@3.0.8-r0?arch=x86_64&distro=3.17.1',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2024/06/27/1',
-                'http://www.openwall.com/lists/oss-security/2024/06/28/4',
-                'http://www.openwall.com/lists/oss-security/2024/08/15/1',
-                'https://access.redhat.com/errata/RHSA-2025:1671',
-                'https://access.redhat.com/security/cve/CVE-2024-5535',
-                'https://bugzilla.redhat.com/2294581',
-                'https://bugzilla.redhat.com/2294676',
-                'https://bugzilla.redhat.com/2301888',
-                'https://bugzilla.redhat.com/2318857',
-                'https://bugzilla.redhat.com/2318858',
-                'https://bugzilla.redhat.com/2318870',
-                'https://bugzilla.redhat.com/2318873',
-                'https://bugzilla.redhat.com/2318874',
-                'https://bugzilla.redhat.com/2318876',
-                'https://bugzilla.redhat.com/2318882',
-                'https://bugzilla.redhat.com/2318883',
-                'https://bugzilla.redhat.com/2318884',
-                'https://bugzilla.redhat.com/2318885',
-                'https://bugzilla.redhat.com/2318886',
-                'https://bugzilla.redhat.com/2318897',
-                'https://bugzilla.redhat.com/2318900',
-                'https://bugzilla.redhat.com/2318905',
-                'https://bugzilla.redhat.com/2318914',
-                'https://bugzilla.redhat.com/2318922',
-                'https://bugzilla.redhat.com/2318923',
-                'https://bugzilla.redhat.com/2318925',
-                'https://bugzilla.redhat.com/2318926',
-                'https://bugzilla.redhat.com/2318927',
-                'https://bugzilla.redhat.com/2331191',
-                'https://bugzilla.redhat.com/2339218',
-                'https://bugzilla.redhat.com/2339220',
-                'https://bugzilla.redhat.com/2339221',
-                'https://bugzilla.redhat.com/2339226',
-                'https://bugzilla.redhat.com/2339231',
-                'https://bugzilla.redhat.com/2339236',
-                'https://bugzilla.redhat.com/2339238',
-                'https://bugzilla.redhat.com/2339243',
-                'https://bugzilla.redhat.com/2339247',
-                'https://bugzilla.redhat.com/2339252',
-                'https://bugzilla.redhat.com/2339259',
-                'https://bugzilla.redhat.com/2339266',
-                'https://bugzilla.redhat.com/2339270',
-                'https://bugzilla.redhat.com/2339271',
-                'https://bugzilla.redhat.com/2339275',
-                'https://bugzilla.redhat.com/2339277',
-                'https://bugzilla.redhat.com/2339281',
-                'https://bugzilla.redhat.com/2339284',
-                'https://bugzilla.redhat.com/2339291',
-                'https://bugzilla.redhat.com/2339293',
-                'https://bugzilla.redhat.com/2339295',
-                'https://bugzilla.redhat.com/2339299',
-                'https://bugzilla.redhat.com/2339300',
-                'https://bugzilla.redhat.com/2339304',
-                'https://bugzilla.redhat.com/2339305',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2274020',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2281029',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2283757',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2294581',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-2511',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-4603',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-4741',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-5535',
-                'https://errata.almalinux.org/9/ALSA-2025-1671.html',
-                'https://errata.rockylinux.org/RLSA-2024:9333',
-                'https://github.com/openssl/openssl/commit/4ada436a1946cbb24db5ab4ca082b69c1bc10f37',
-                'https://github.com/openssl/openssl/commit/99fb785a5f85315b95288921a321a935ea29a51e',
-                'https://github.com/openssl/openssl/commit/cf6f91f6121f4db167405db2f0de410a456f260c',
-                'https://github.com/openssl/openssl/commit/e86ac436f0bd54d4517745483e2315650fae7b2c',
-                'https://github.openssl.org/openssl/extended-releases/commit/9947251413065a05189a63c9b7a6c1d4e224c21c',
-                'https://github.openssl.org/openssl/extended-releases/commit/b78ec0824da857223486660177d3b1f255c65d87',
-                'https://linux.oracle.com/cve/CVE-2024-5535.html',
-                'https://linux.oracle.com/errata/ELSA-2025-1673.html',
-                'https://lists.debian.org/debian-lts-announce/2024/10/msg00033.html',
-                'https://lists.debian.org/debian-lts-announce/2024/11/msg00000.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2024-5535',
-                'https://openssl.org/news/secadv/20240627.txt',
-                'https://security.netapp.com/advisory/ntap-20240712-0005/',
-                'https://security.netapp.com/advisory/ntap-20241025-0006/',
-                'https://security.netapp.com/advisory/ntap-20241025-0010/',
-                'https://ubuntu.com/security/notices/USN-6937-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2024-5535',
-                'https://www.openssl.org/news/secadv/20240627.txt',
-                'https://www.oracle.com/security-alerts/cpuoct2024.html#AppendixMSQL'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: SSL_select_next_proto buffer overread'
-            },
-            {
-              'cve':  'CVE-2024-2511',
-              'cvss': {
-                'redhat': {
-                  'v3score':  '3.7',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L'
-                }
-              },
-              'cwes': [
-                'CWE-1325'
-              ],
-              'description':   'Issue summary: Some non-default TLS server configurations can cause unbounded\nmemory growth when processing TLSv1.3 sessions\n\nImpact summary: An attacker may exploit certain server configurations to trigger\nunbounded memory growth that would lead to a Denial of Service\n\nThis problem can occur in TLSv1.3 if the non-default SSL_OP_NO_TICKET option is\nbeing used (but not if early_data support is also configured and the default\nanti-replay protection is in use). In this case, under certain conditions, the\nsession cache can get into an incorrect state and it will fail to flush properly\nas it fills. The session cache will continue to grow in an unbounded manner. A\nmalicious client could deliberately create the scenario for this failure to\nforce a Denial of Service. It may also happen by accident in normal operation.\n\nThis issue only affects TLS servers supporting TLSv1.3. It does not affect TLS\nclients.\n\nThe FIPS modules in 3.2, 3.1 and 3.0 are not affected by this issue. OpenSSL\n1.0.2 is also not affected by this issue.',
-              'diffID':        'sha256:72310f9c75be031d4b318d43090e229c62eb825b4f016cf4c88b0d26e73bfb80',
-              'fixedVersions': [
-                '3.0.12-r5'
-              ],
-              'installedVersion': '3.0.8-r0',
-              'packageName':      'libcrypto3',
-              'purl':             'pkg:apk/alpine/libcrypto3@3.0.8-r0?arch=x86_64&distro=3.17.1',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2024/04/08/5',
-                'https://access.redhat.com/errata/RHSA-2024:9333',
-                'https://access.redhat.com/security/cve/CVE-2024-2511',
-                'https://bugzilla.redhat.com/2274020',
-                'https://bugzilla.redhat.com/2281029',
-                'https://bugzilla.redhat.com/2283757',
-                'https://bugzilla.redhat.com/2294581',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2274020',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2281029',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2283757',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2294581',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-2511',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-4603',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-4741',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-5535',
-                'https://errata.almalinux.org/9/ALSA-2024-9333.html',
-                'https://errata.rockylinux.org/RLSA-2024:9333',
-                'https://github.com/openssl/openssl/commit/7e4d731b1c07201ad9374c1cd9ac5263bdf35bce',
-                'https://github.com/openssl/openssl/commit/b52867a9f618bb955bed2a3ce3db4d4f97ed8e5d',
-                'https://github.com/openssl/openssl/commit/e9d7083e241670332e0443da0f0d4ffb52829f08',
-                'https://github.openssl.org/openssl/extended-releases/commit/5f8d25770ae6437db119dfc951e207271a326640',
-                'https://linux.oracle.com/cve/CVE-2024-2511.html',
-                'https://linux.oracle.com/errata/ELSA-2024-9333.html',
-                'https://lists.debian.org/debian-lts-announce/2024/10/msg00033.html',
-                'https://lists.debian.org/debian-lts-announce/2024/11/msg00000.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2024-2511',
-                'https://security.netapp.com/advisory/ntap-20240503-0013/',
-                'https://ubuntu.com/security/notices/USN-6937-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2024-2511',
-                'https://www.openssl.org/news/secadv/20240408.txt',
-                'https://www.openssl.org/news/vulnerabilities.html'
-              ],
-              'severity':   'LOW',
-              'suppressed': false,
-              'title':      'openssl: Unbounded memory growth with session handling in TLSv1.3'
-            },
-            {
-              'cve':  'CVE-2024-9143',
-              'cvss': {
-                'redhat': {
-                  'v3score':  '3.7',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L'
-                }
-              },
-              'cwes': [
-                'CWE-125',
-                'CWE-787'
-              ],
-              'description':   "Issue summary: Use of the low-level GF(2^m) elliptic curve APIs with untrusted\nexplicit values for the field polynomial can lead to out-of-bounds memory reads\nor writes.\n\nImpact summary: Out of bound memory writes can lead to an application crash or\neven a possibility of a remote code execution, however, in all the protocols\ninvolving Elliptic Curve Cryptography that we're aware of, either only \"named\ncurves\" are supported, or, if explicit curve parameters are supported, they\nspecify an X9.62 encoding of binary (GF(2^m)) curves that can't represent\nproblematic input values. Thus the likelihood of existence of a vulnerable\napplication is low.\n\nIn particular, the X9.62 encoding is used for ECC keys in X.509 certificates,\nso problematic inputs cannot occur in the context of processing X.509\ncertificates.  Any problematic use-cases would have to be using an \"exotic\"\ncurve encoding.\n\nThe affected APIs include: EC_GROUP_new_curve_GF2m(), EC_GROUP_new_from_params(),\nand various supporting BN_GF2m_*() functions.\n\nApplications working with \"exotic\" explicit binary (GF(2^m)) curve parameters,\nthat make it possible to represent invalid field polynomials with a zero\nconstant term, via the above or similar APIs, may terminate abruptly as a\nresult of reading or writing outside of array bounds.  Remote code execution\ncannot easily be ruled out.\n\nThe FIPS modules in 3.3, 3.2, 3.1 and 3.0 are not affected by this issue.",
-              'diffID':        'sha256:72310f9c75be031d4b318d43090e229c62eb825b4f016cf4c88b0d26e73bfb80',
-              'fixedVersions': [
-                '3.0.15-r1'
-              ],
-              'installedVersion': '3.0.8-r0',
-              'packageName':      'libcrypto3',
-              'purl':             'pkg:apk/alpine/libcrypto3@3.0.8-r0?arch=x86_64&distro=3.17.1',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2024/10/16/1',
-                'http://www.openwall.com/lists/oss-security/2024/10/23/1',
-                'http://www.openwall.com/lists/oss-security/2024/10/24/1',
-                'https://access.redhat.com/security/cve/CVE-2024-9143',
-                'https://github.com/openssl/openssl/commit/72ae83ad214d2eef262461365a1975707f862712',
-                'https://github.com/openssl/openssl/commit/bc7e04d7c8d509fb78fc0e285aa948fb0da04700',
-                'https://github.com/openssl/openssl/commit/c0d3e4d32d2805f49bec30547f225bc4d092e1f4',
-                'https://github.com/openssl/openssl/commit/fdf6723362ca51bd883295efe206cb5b1cfa5154',
-                'https://github.openssl.org/openssl/extended-releases/commit/8efc0cbaa8ebba8e116f7b81a876a4123594d86a',
-                'https://github.openssl.org/openssl/extended-releases/commit/9d576994cec2b7aa37a91740ea7e680810957e41',
-                'https://lists.debian.org/debian-lts-announce/2024/10/msg00033.html',
-                'https://lists.debian.org/debian-lts-announce/2024/11/msg00000.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2024-9143',
-                'https://openssl-library.org/news/secadv/20241016.txt',
-                'https://security.netapp.com/advisory/ntap-20241101-0001/',
-                'https://ubuntu.com/security/notices/USN-7264-1',
-                'https://ubuntu.com/security/notices/USN-7278-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2024-9143'
-              ],
-              'severity':   'LOW',
-              'suppressed': false,
-              'title':      'openssl: Low-level invalid GF(2^m) parameters lead to OOB memory access'
-            },
-            {
-              'cve':  'CVE-2023-0464',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-295'
-              ],
-              'description':   "A security vulnerability has been identified in all supported versions\n\nof OpenSSL related to the verification of X.509 certificate chains\nthat include policy constraints.  Attackers may be able to exploit this\nvulnerability by creating a malicious certificate chain that triggers\nexponential use of computational resources, leading to a denial-of-service\n(DoS) attack on affected systems.\n\nPolicy processing is disabled by default but can be enabled by passing\nthe `-policy' argument to the command line utilities or by calling the\n`X509_VERIFY_PARAM_set1_policies()' function.",
-              'diffID':        'sha256:72310f9c75be031d4b318d43090e229c62eb825b4f016cf4c88b0d26e73bfb80',
-              'fixedVersions': [
-                '3.0.8-r1'
-              ],
-              'installedVersion': '3.0.8-r0',
-              'packageName':      'libssl3',
-              'purl':             'pkg:apk/alpine/libssl3@3.0.8-r0?arch=x86_64&distro=3.17.1',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2023:3722',
-                'https://access.redhat.com/security/cve/CVE-2023-0464',
-                'https://bugzilla.redhat.com/2181082',
-                'https://bugzilla.redhat.com/2182561',
-                'https://bugzilla.redhat.com/2182565',
-                'https://bugzilla.redhat.com/2188461',
-                'https://bugzilla.redhat.com/2207947',
-                'https://errata.almalinux.org/9/ALSA-2023-3722.html',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=2017771e2db3e2b96f89bbe8766c3209f6a99545',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=2dcd4f1e3115f38cefa43e3efbe9b801c27e642e',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=879f7080d7e141f415c79eaa3a8ac4a3dad0348b',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=959c59c7a0164117e7f8366466a32bb1f8d77ff1',
-                'https://linux.oracle.com/cve/CVE-2023-0464.html',
-                'https://linux.oracle.com/errata/ELSA-2023-3722.html',
-                'https://lists.debian.org/debian-lts-announce/2023/06/msg00011.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-0464',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://security.netapp.com/advisory/ntap-20230406-0006/',
-                'https://security.netapp.com/advisory/ntap-20240621-0006/',
-                'https://ubuntu.com/security/notices/USN-6039-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.couchbase.com/alerts/',
-                'https://www.cve.org/CVERecord?id=CVE-2023-0464',
-                'https://www.debian.org/security/2023/dsa-5417',
-                'https://www.openssl.org/news/secadv/20230322.txt'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: Denial of service by excessive resource usage in verifying X509 policy constraints'
-            },
-            {
-              'cve':  'CVE-2023-5363',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N'
-                },
-                'redhat': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-684'
-              ],
-              'description':   "Issue summary: A bug has been identified in the processing of key and\ninitialisation vector (IV) lengths.  This can lead to potential truncation\nor overruns during the initialisation of some symmetric ciphers.\n\nImpact summary: A truncation in the IV can result in non-uniqueness,\nwhich could result in loss of confidentiality for some cipher modes.\n\nWhen calling EVP_EncryptInit_ex2(), EVP_DecryptInit_ex2() or\nEVP_CipherInit_ex2() the provided OSSL_PARAM array is processed after\nthe key and IV have been established.  Any alterations to the key length,\nvia the \"keylen\" parameter or the IV length, via the \"ivlen\" parameter,\nwithin the OSSL_PARAM array will not take effect as intended, potentially\ncausing truncation or overreading of these values.  The following ciphers\nand cipher modes are impacted: RC2, RC4, RC5, CCM, GCM and OCB.\n\nFor the CCM, GCM and OCB cipher modes, truncation of the IV can result in\nloss of confidentiality.  For example, when following NIST's SP 800-38D\nsection 8.2.1 guidance for constructing a deterministic IV for AES in\nGCM mode, truncation of the counter portion could lead to IV reuse.\n\nBoth truncations and overruns of the key and overruns of the IV will\nproduce incorrect results and could, in some cases, trigger a memory\nexception.  However, these issues are not currently assessed as security\ncritical.\n\nChanging the key and/or IV lengths is not considered to be a common operation\nand the vulnerable API was recently introduced. Furthermore it is likely that\napplication developers will have spotted this problem during testing since\ndecryption would fail unless both peers in the communication were similarly\nvulnerable. For these reasons we expect the probability of an application being\nvulnerable to this to be quite low. However if an application is vulnerable then\nthis issue is considered very serious. For these reasons we have assessed this\nissue as Moderate severity overall.\n\nThe OpenSSL SSL/TLS implementation is not affected by this issue.\n\nThe OpenSSL 3.0 and 3.1 FIPS providers are not affected by this because\nthe issue lies outside of the FIPS provider boundary.\n\nOpenSSL 3.1 and 3.0 are vulnerable to this issue.",
-              'diffID':        'sha256:72310f9c75be031d4b318d43090e229c62eb825b4f016cf4c88b0d26e73bfb80',
-              'fixedVersions': [
-                '3.0.12-r0'
-              ],
-              'installedVersion': '3.0.8-r0',
-              'packageName':      'libssl3',
-              'purl':             'pkg:apk/alpine/libssl3@3.0.8-r0?arch=x86_64&distro=3.17.1',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2023/10/24/1',
-                'https://access.redhat.com/errata/RHSA-2024:0310',
-                'https://access.redhat.com/security/cve/CVE-2023-5363',
-                'https://bugzilla.redhat.com/2243839',
-                'https://errata.almalinux.org/9/ALSA-2024-0310.html',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=0df40630850fb2740e6be6890bb905d3fc623b2d',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=5f69f5c65e483928c4b28ed16af6e5742929f1ee',
-                'https://linux.oracle.com/cve/CVE-2023-5363.html',
-                'https://linux.oracle.com/errata/ELSA-2024-12093.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-5363',
-                'https://security.netapp.com/advisory/ntap-20231027-0010/',
-                'https://security.netapp.com/advisory/ntap-20240201-0003/',
-                'https://security.netapp.com/advisory/ntap-20240201-0004/',
-                'https://security.netapp.com/advisory/ntap-20241108-0002/',
-                'https://ubuntu.com/security/notices/USN-6450-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-5363',
-                'https://www.debian.org/security/2023/dsa-5532',
-                'https://www.openssl.org/news/secadv/20231024.txt'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: Incorrect cipher key and IV length processing'
-            },
-            {
-              'cve':  'CVE-2024-6119',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-843'
-              ],
-              'description':   "Issue summary: Applications performing certificate name checks (e.g., TLS\nclients checking server certificates) may attempt to read an invalid memory\naddress resulting in abnormal termination of the application process.\n\nImpact summary: Abnormal termination of an application can a cause a denial of\nservice.\n\nApplications performing certificate name checks (e.g., TLS clients checking\nserver certificates) may attempt to read an invalid memory address when\ncomparing the expected name with an `otherName` subject alternative name of an\nX.509 certificate. This may result in an exception that terminates the\napplication program.\n\nNote that basic certificate chain validation (signatures, dates, ...) is not\naffected, the denial of service can occur only when the application also\nspecifies an expected DNS name, Email address or IP address.\n\nTLS servers rarely solicit client certificates, and even when they do, they\ngenerally don't perform a name check against a reference identifier (expected\nidentity), but rather extract the presented identity after checking the\ncertificate chain.  So TLS servers are generally not affected and the severity\nof the issue is Moderate.\n\nThe FIPS modules in 3.3, 3.2, 3.1 and 3.0 are not affected by this issue.",
-              'diffID':        'sha256:72310f9c75be031d4b318d43090e229c62eb825b4f016cf4c88b0d26e73bfb80',
-              'fixedVersions': [
-                '3.0.15-r0'
-              ],
-              'installedVersion': '3.0.8-r0',
-              'packageName':      'libssl3',
-              'purl':             'pkg:apk/alpine/libssl3@3.0.8-r0?arch=x86_64&distro=3.17.1',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2024/09/03/4',
-                'https://access.redhat.com/errata/RHSA-2024:8935',
-                'https://access.redhat.com/security/cve/CVE-2024-6119',
-                'https://bugzilla.redhat.com/2306158',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2306158',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-6119',
-                'https://errata.almalinux.org/9/ALSA-2024-8935.html',
-                'https://errata.rockylinux.org/RLSA-2024:6783',
-                'https://github.com/openssl/openssl/commit/05f360d9e849a1b277db628f1f13083a7f8dd04f',
-                'https://github.com/openssl/openssl/commit/06d1dc3fa96a2ba5a3e22735a033012aadc9f0d6',
-                'https://github.com/openssl/openssl/commit/621f3729831b05ee828a3203eddb621d014ff2b2',
-                'https://github.com/openssl/openssl/commit/7dfcee2cd2a63b2c64b9b4b0850be64cb695b0a0',
-                'https://github.com/openssl/openssl/security/advisories/GHSA-5qrj-vq78-58fj',
-                'https://linux.oracle.com/cve/CVE-2024-6119.html',
-                'https://linux.oracle.com/errata/ELSA-2024-8935.html',
-                'https://lists.freebsd.org/archives/freebsd-security/2024-September/000303.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2024-6119',
-                'https://openssl-library.org/news/secadv/20240903.txt',
-                'https://security.netapp.com/advisory/ntap-20240912-0001/',
-                'https://ubuntu.com/security/notices/USN-6986-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2024-6119'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: Possible denial of service in X.509 name checks'
-            },
-            {
-              'cve':  'CVE-2023-0465',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N'
-                },
-                'redhat': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-295'
-              ],
-              'description':   "Applications that use a non-default option when verifying certificates may be\nvulnerable to an attack from a malicious CA to circumvent certain checks.\n\nInvalid certificate policies in leaf certificates are silently ignored by\nOpenSSL and other certificate policy checks are skipped for that certificate.\nA malicious CA could use this to deliberately assert invalid certificate policies\nin order to circumvent policy checking on the certificate altogether.\n\nPolicy processing is disabled by default but can be enabled by passing\nthe `-policy' argument to the command line utilities or by calling the\n`X509_VERIFY_PARAM_set1_policies()' function.",
-              'diffID':        'sha256:72310f9c75be031d4b318d43090e229c62eb825b4f016cf4c88b0d26e73bfb80',
-              'fixedVersions': [
-                '3.0.8-r2'
-              ],
-              'installedVersion': '3.0.8-r0',
-              'packageName':      'libssl3',
-              'purl':             'pkg:apk/alpine/libssl3@3.0.8-r0?arch=x86_64&distro=3.17.1',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2023:3722',
-                'https://access.redhat.com/security/cve/CVE-2023-0465',
-                'https://bugzilla.redhat.com/2181082',
-                'https://bugzilla.redhat.com/2182561',
-                'https://bugzilla.redhat.com/2182565',
-                'https://bugzilla.redhat.com/2188461',
-                'https://bugzilla.redhat.com/2207947',
-                'https://errata.almalinux.org/9/ALSA-2023-3722.html',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=10325176f3d3e98c6e2b3bf5ab1e3b334de6947a',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=1dd43e0709fece299b15208f36cc7c76209ba0bb',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=b013765abfa80036dc779dd0e50602c57bb3bf95',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=facfb1ab745646e97a1920977ae4a9965ea61d5c',
-                'https://linux.oracle.com/cve/CVE-2023-0465.html',
-                'https://linux.oracle.com/errata/ELSA-2023-3722.html',
-                'https://lists.debian.org/debian-lts-announce/2023/06/msg00011.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-0465',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://security.netapp.com/advisory/ntap-20230414-0001/',
-                'https://ubuntu.com/security/notices/USN-6039-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-0465',
-                'https://www.debian.org/security/2023/dsa-5417',
-                'https://www.openssl.org/news/secadv/20230328.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: Invalid certificate policies in leaf certificates are silently ignored'
-            },
-            {
-              'cve':  'CVE-2023-0466',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N'
-                },
-                'redhat': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-295'
-              ],
-              'description':   'The function X509_VERIFY_PARAM_add0_policy() is documented to\nimplicitly enable the certificate policy check when doing certificate\nverification. However the implementation of the function does not\nenable the check which allows certificates with invalid or incorrect\npolicies to pass the certificate verification.\n\nAs suddenly enabling the policy check could break existing deployments it was\ndecided to keep the existing behavior of the X509_VERIFY_PARAM_add0_policy()\nfunction.\n\nInstead the applications that require OpenSSL to perform certificate\npolicy check need to use X509_VERIFY_PARAM_set1_policies() or explicitly\nenable the policy check by calling X509_VERIFY_PARAM_set_flags() with\nthe X509_V_FLAG_POLICY_CHECK flag argument.\n\nCertificate policy checks are disabled by default in OpenSSL and are not\ncommonly used by applications.',
-              'diffID':        'sha256:72310f9c75be031d4b318d43090e229c62eb825b4f016cf4c88b0d26e73bfb80',
-              'fixedVersions': [
-                '3.0.8-r3'
-              ],
-              'installedVersion': '3.0.8-r0',
-              'packageName':      'libssl3',
-              'purl':             'pkg:apk/alpine/libssl3@3.0.8-r0?arch=x86_64&distro=3.17.1',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2023/09/28/4',
-                'https://access.redhat.com/errata/RHSA-2023:3722',
-                'https://access.redhat.com/security/cve/CVE-2023-0466',
-                'https://bugzilla.redhat.com/2181082',
-                'https://bugzilla.redhat.com/2182561',
-                'https://bugzilla.redhat.com/2182565',
-                'https://bugzilla.redhat.com/2188461',
-                'https://bugzilla.redhat.com/2207947',
-                'https://errata.almalinux.org/9/ALSA-2023-3722.html',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=0d16b7e99aafc0b4a6d729eec65a411a7e025f0a',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=51e8a84ce742db0f6c70510d0159dad8f7825908',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=73398dea26de9899fb4baa94098ad0a61f435c72',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=fc814a30fc4f0bc54fcea7d9a7462f5457aab061',
-                'https://linux.oracle.com/cve/CVE-2023-0466.html',
-                'https://linux.oracle.com/errata/ELSA-2023-3722.html',
-                'https://lists.debian.org/debian-lts-announce/2023/06/msg00011.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-0466',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://security.netapp.com/advisory/ntap-20230414-0001/',
-                'https://ubuntu.com/security/notices/USN-6039-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-0466',
-                'https://www.debian.org/security/2023/dsa-5417',
-                'https://www.openssl.org/news/secadv/20230328.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: Certificate policy check not enabled'
-            },
-            {
-              'cve':  'CVE-2023-1255',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '5.1',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-125'
-              ],
-              'description':   'Issue summary: The AES-XTS cipher decryption implementation for 64 bit ARM\nplatform contains a bug that could cause it to read past the input buffer,\nleading to a crash.\n\nImpact summary: Applications that use the AES-XTS algorithm on the 64 bit ARM\nplatform can crash in rare circumstances. The AES-XTS algorithm is usually\nused for disk encryption.\n\nThe AES-XTS cipher decryption implementation for 64 bit ARM platform will read\npast the end of the ciphertext buffer if the ciphertext size is 4 mod 5 in 16\nbyte blocks, e.g. 144 bytes or 1024 bytes. If the memory after the ciphertext\nbuffer is unmapped, this will trigger a crash which results in a denial of\nservice.\n\nIf an attacker can control the size and location of the ciphertext buffer\nbeing decrypted by an application using AES-XTS on 64 bit ARM, the\napplication is affected. This is fairly unlikely making this issue\na Low severity one.',
-              'diffID':        'sha256:72310f9c75be031d4b318d43090e229c62eb825b4f016cf4c88b0d26e73bfb80',
-              'fixedVersions': [
-                '3.0.8-r4'
-              ],
-              'installedVersion': '3.0.8-r0',
-              'packageName':      'libssl3',
-              'purl':             'pkg:apk/alpine/libssl3@3.0.8-r0?arch=x86_64&distro=3.17.1',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2023:3722',
-                'https://access.redhat.com/security/cve/CVE-2023-1255',
-                'https://bugzilla.redhat.com/2181082',
-                'https://bugzilla.redhat.com/2182561',
-                'https://bugzilla.redhat.com/2182565',
-                'https://bugzilla.redhat.com/2188461',
-                'https://bugzilla.redhat.com/2207947',
-                'https://errata.almalinux.org/9/ALSA-2023-3722.html',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=02ac9c9420275868472f33b01def01218742b8bb',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=bc2f61ad70971869b242fc1cb445b98bad50074a',
-                'https://linux.oracle.com/cve/CVE-2023-1255.html',
-                'https://linux.oracle.com/errata/ELSA-2023-3722.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-1255',
-                'https://security.netapp.com/advisory/ntap-20230908-0006/',
-                'https://ubuntu.com/security/notices/USN-6119-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-1255',
-                'https://www.openssl.org/news/secadv/20230419.txt',
-                'https://www.openssl.org/news/secadv/20230420.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: Input buffer over-read in AES-XTS implementation on 64 bit ARM'
-            },
-            {
-              'cve':  'CVE-2023-2650',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '6.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-770'
-              ],
-              'description':   "Issue summary: Processing some specially crafted ASN.1 object identifiers or\ndata containing them may be very slow.\n\nImpact summary: Applications that use OBJ_obj2txt() directly, or use any of\nthe OpenSSL subsystems OCSP, PKCS7/SMIME, CMS, CMP/CRMF or TS with no message\nsize limit may experience notable to very long delays when processing those\nmessages, which may lead to a Denial of Service.\n\nAn OBJECT IDENTIFIER is composed of a series of numbers - sub-identifiers -\nmost of which have no size limit.  OBJ_obj2txt() may be used to translate\nan ASN.1 OBJECT IDENTIFIER given in DER encoding form (using the OpenSSL\ntype ASN1_OBJECT) to its canonical numeric text form, which are the\nsub-identifiers of the OBJECT IDENTIFIER in decimal form, separated by\nperiods.\n\nWhen one of the sub-identifiers in the OBJECT IDENTIFIER is very large\n(these are sizes that are seen as absurdly large, taking up tens or hundreds\nof KiBs), the translation to a decimal number in text may take a very long\ntime.  The time complexity is O(n^2) with 'n' being the size of the\nsub-identifiers in bytes (*).\n\nWith OpenSSL 3.0, support to fetch cryptographic algorithms using names /\nidentifiers in string form was introduced.  This includes using OBJECT\nIDENTIFIERs in canonical numeric text form as identifiers for fetching\nalgorithms.\n\nSuch OBJECT IDENTIFIERs may be received through the ASN.1 structure\nAlgorithmIdentifier, which is commonly used in multiple protocols to specify\nwhat cryptographic algorithm should be used to sign or verify, encrypt or\ndecrypt, or digest passed data.\n\nApplications that call OBJ_obj2txt() directly with untrusted data are\naffected, with any version of OpenSSL.  If the use is for the mere purpose\nof display, the severity is considered low.\n\nIn OpenSSL 3.0 and newer, this affects the subsystems OCSP, PKCS7/SMIME,\nCMS, CMP/CRMF or TS.  It also impacts anything that processes X.509\ncertificates, including simple things like verifying its signature.\n\nThe impact on TLS is relatively low, because all versions of OpenSSL have a\n100KiB limit on the peer's certificate chain.  Additionally, this only\nimpacts clients, or servers that have explicitly enabled client\nauthentication.\n\nIn OpenSSL 1.1.1 and 1.0.2, this only affects displaying diverse objects,\nsuch as X.509 certificates.  This is assumed to not happen in such a way\nthat it would cause a Denial of Service, so these versions are considered\nnot affected by this issue in such a way that it would be cause for concern,\nand the severity is therefore considered low.",
-              'diffID':        'sha256:72310f9c75be031d4b318d43090e229c62eb825b4f016cf4c88b0d26e73bfb80',
-              'fixedVersions': [
-                '3.0.9-r0'
-              ],
-              'installedVersion': '3.0.8-r0',
-              'packageName':      'libssl3',
-              'purl':             'pkg:apk/alpine/libssl3@3.0.8-r0?arch=x86_64&distro=3.17.1',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2023/05/30/1',
-                'https://access.redhat.com/errata/RHSA-2023:6330',
-                'https://access.redhat.com/security/cve/CVE-2023-2650',
-                'https://bugzilla.redhat.com/1858038',
-                'https://bugzilla.redhat.com/2207947',
-                'https://errata.almalinux.org/9/ALSA-2023-6330.html',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=423a2bc737a908ad0c77bda470b2b59dc879936b',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=853c5e56ee0b8650c73140816bb8b91d6163422c',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=9e209944b35cf82368071f160a744b6178f9b098',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=db779b0e10b047f2585615e0b8f2acdf21f8544a',
-                'https://linux.oracle.com/cve/CVE-2023-2650.html',
-                'https://linux.oracle.com/errata/ELSA-2023-6330.html',
-                'https://lists.debian.org/debian-lts-announce/2023/06/msg00011.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-2650',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0009',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://security.netapp.com/advisory/ntap-20230703-0001/',
-                'https://security.netapp.com/advisory/ntap-20231027-0009/',
-                'https://ubuntu.com/security/notices/USN-6119-1',
-                'https://ubuntu.com/security/notices/USN-6188-1',
-                'https://ubuntu.com/security/notices/USN-6672-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-2650',
-                'https://www.debian.org/security/2023/dsa-5417',
-                'https://www.openssl.org/news/secadv/20230530.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: Possible DoS translating ASN.1 object identifiers'
-            },
-            {
-              'cve':  'CVE-2023-2975',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N'
-                },
-                'redhat': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-354',
-                'CWE-287'
-              ],
-              'description':   'Issue summary: The AES-SIV cipher implementation contains a bug that causes\nit to ignore empty associated data entries which are unauthenticated as\na consequence.\n\nImpact summary: Applications that use the AES-SIV algorithm and want to\nauthenticate empty data entries as associated data can be misled by removing,\nadding or reordering such empty entries as these are ignored by the OpenSSL\nimplementation. We are currently unaware of any such applications.\n\nThe AES-SIV algorithm allows for authentication of multiple associated\ndata entries along with the encryption. To authenticate empty data the\napplication has to call EVP_EncryptUpdate() (or EVP_CipherUpdate()) with\nNULL pointer as the output buffer and 0 as the input buffer length.\nThe AES-SIV implementation in OpenSSL just returns success for such a call\ninstead of performing the associated data authentication operation.\nThe empty data thus will not be authenticated.\n\nAs this issue does not affect non-empty associated data authentication and\nwe expect it to be rare for an application to use empty associated data\nentries this is qualified as Low severity issue.',
-              'diffID':        'sha256:72310f9c75be031d4b318d43090e229c62eb825b4f016cf4c88b0d26e73bfb80',
-              'fixedVersions': [
-                '3.0.9-r2'
-              ],
-              'installedVersion': '3.0.8-r0',
-              'packageName':      'libssl3',
-              'purl':             'pkg:apk/alpine/libssl3@3.0.8-r0?arch=x86_64&distro=3.17.1',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2023/07/15/1',
-                'http://www.openwall.com/lists/oss-security/2023/07/19/5',
-                'https://access.redhat.com/errata/RHSA-2024:2447',
-                'https://access.redhat.com/security/cve/CVE-2023-2975',
-                'https://bugzilla.redhat.com/2223016',
-                'https://bugzilla.redhat.com/2224962',
-                'https://bugzilla.redhat.com/2227852',
-                'https://bugzilla.redhat.com/2248616',
-                'https://bugzilla.redhat.com/2257571',
-                'https://bugzilla.redhat.com/2258502',
-                'https://bugzilla.redhat.com/2259944',
-                'https://errata.almalinux.org/9/ALSA-2024-2447.html',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=00e2f5eea29994d19293ec4e8c8775ba73678598',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=6a83f0c958811f07e0d11dfc6b5a6a98edfd5bdc',
-                'https://linux.oracle.com/cve/CVE-2023-2975.html',
-                'https://linux.oracle.com/errata/ELSA-2024-2447.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-2975',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://security.netapp.com/advisory/ntap-20230725-0004/',
-                'https://ubuntu.com/security/notices/USN-6450-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-2975',
-                'https://www.openssl.org/news/secadv/20230714.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: AES-SIV cipher implementation contains a bug that causes it to ignore empty associated data entries'
-            },
-            {
-              'cve':  'CVE-2023-3446',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L'
-                },
-                'redhat': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L'
-                }
-              },
-              'cwes': [
-                'CWE-606',
-                'CWE-1333'
-              ],
-              'description':   "Issue summary: Checking excessively long DH keys or parameters may be very slow.\n\nImpact summary: Applications that use the functions DH_check(), DH_check_ex()\nor EVP_PKEY_param_check() to check a DH key or DH parameters may experience long\ndelays. Where the key or parameters that are being checked have been obtained\nfrom an untrusted source this may lead to a Denial of Service.\n\nThe function DH_check() performs various checks on DH parameters. One of those\nchecks confirms that the modulus ('p' parameter) is not too large. Trying to use\na very large modulus is slow and OpenSSL will not normally use a modulus which\nis over 10,000 bits in length.\n\nHowever the DH_check() function checks numerous aspects of the key or parameters\nthat have been supplied. Some of those checks use the supplied modulus value\neven if it has already been found to be too large.\n\nAn application that calls DH_check() and supplies a key or parameters obtained\nfrom an untrusted source could be vulernable to a Denial of Service attack.\n\nThe function DH_check() is itself called by a number of other OpenSSL functions.\nAn application calling any of those other functions may similarly be affected.\nThe other functions affected by this are DH_check_ex() and\nEVP_PKEY_param_check().\n\nAlso vulnerable are the OpenSSL dhparam and pkeyparam command line applications\nwhen using the '-check' option.\n\nThe OpenSSL SSL/TLS implementation is not affected by this issue.\nThe OpenSSL 3.0 and 3.1 FIPS providers are not affected by this issue.",
-              'diffID':        'sha256:72310f9c75be031d4b318d43090e229c62eb825b4f016cf4c88b0d26e73bfb80',
-              'fixedVersions': [
-                '3.0.9-r3'
-              ],
-              'installedVersion': '3.0.8-r0',
-              'packageName':      'libssl3',
-              'purl':             'pkg:apk/alpine/libssl3@3.0.8-r0?arch=x86_64&distro=3.17.1',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2023/07/19/4',
-                'http://www.openwall.com/lists/oss-security/2023/07/19/5',
-                'http://www.openwall.com/lists/oss-security/2023/07/19/6',
-                'http://www.openwall.com/lists/oss-security/2023/07/31/1',
-                'http://www.openwall.com/lists/oss-security/2024/05/16/1',
-                'https://access.redhat.com/errata/RHSA-2024:2447',
-                'https://access.redhat.com/security/cve/CVE-2023-3446',
-                'https://bugzilla.redhat.com/2223016',
-                'https://bugzilla.redhat.com/2224962',
-                'https://bugzilla.redhat.com/2227852',
-                'https://bugzilla.redhat.com/2248616',
-                'https://bugzilla.redhat.com/2257571',
-                'https://bugzilla.redhat.com/2258502',
-                'https://bugzilla.redhat.com/2259944',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2224962',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2257582',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2257583',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2258677',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2258688',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2258691',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2258694',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2258700',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-36763',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-36764',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3446',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45229',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45231',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45232',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45233',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45235',
-                'https://errata.almalinux.org/9/ALSA-2024-2447.html',
-                'https://errata.rockylinux.org/RLSA-2024:2264',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=1fa20cf2f506113c761777127a38bce5068740eb',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=8780a896543a654e757db1b9396383f9d8095528',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=9a0a4d3c1e7138915563c0df4fe6a3f9377b839c',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=fc9867c1e03c22ebf56943be205202e576aabf23',
-                'https://linux.oracle.com/cve/CVE-2023-3446.html',
-                'https://linux.oracle.com/errata/ELSA-2024-2447.html',
-                'https://lists.debian.org/debian-lts-announce/2023/08/msg00019.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-3446',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://security.netapp.com/advisory/ntap-20230803-0011/',
-                'https://ubuntu.com/security/notices/USN-6435-1',
-                'https://ubuntu.com/security/notices/USN-6435-2',
-                'https://ubuntu.com/security/notices/USN-6450-1',
-                'https://ubuntu.com/security/notices/USN-6709-1',
-                'https://ubuntu.com/security/notices/USN-7018-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-3446',
-                'https://www.openssl.org/news/secadv/20230719.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: Excessive time spent checking DH keys and parameters'
-            },
-            {
-              'cve':  'CVE-2023-3817',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L'
-                },
-                'redhat': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L'
-                }
-              },
-              'cwes': [
-                'CWE-606',
-                'CWE-834'
-              ],
-              'description':   'Issue summary: Checking excessively long DH keys or parameters may be very slow.\n\nImpact summary: Applications that use the functions DH_check(), DH_check_ex()\nor EVP_PKEY_param_check() to check a DH key or DH parameters may experience long\ndelays. Where the key or parameters that are being checked have been obtained\nfrom an untrusted source this may lead to a Denial of Service.\n\nThe function DH_check() performs various checks on DH parameters. After fixing\nCVE-2023-3446 it was discovered that a large q parameter value can also trigger\nan overly long computation during some of these checks. A correct q value,\nif present, cannot be larger than the modulus p parameter, thus it is\nunnecessary to perform these checks if q is larger than p.\n\nAn application that calls DH_check() and supplies a key or parameters obtained\nfrom an untrusted source could be vulnerable to a Denial of Service attack.\n\nThe function DH_check() is itself called by a number of other OpenSSL functions.\nAn application calling any of those other functions may similarly be affected.\nThe other functions affected by this are DH_check_ex() and\nEVP_PKEY_param_check().\n\nAlso vulnerable are the OpenSSL dhparam and pkeyparam command line applications\nwhen using the "-check" option.\n\nThe OpenSSL SSL/TLS implementation is not affected by this issue.\n\nThe OpenSSL 3.0 and 3.1 FIPS providers are not affected by this issue.',
-              'diffID':        'sha256:72310f9c75be031d4b318d43090e229c62eb825b4f016cf4c88b0d26e73bfb80',
-              'fixedVersions': [
-                '3.0.10-r0'
-              ],
-              'installedVersion': '3.0.8-r0',
-              'packageName':      'libssl3',
-              'purl':             'pkg:apk/alpine/libssl3@3.0.8-r0?arch=x86_64&distro=3.17.1',
-              'references':       [
-                'http://seclists.org/fulldisclosure/2023/Jul/43',
-                'http://www.openwall.com/lists/oss-security/2023/07/31/1',
-                'http://www.openwall.com/lists/oss-security/2023/09/22/11',
-                'http://www.openwall.com/lists/oss-security/2023/09/22/9',
-                'http://www.openwall.com/lists/oss-security/2023/11/06/2',
-                'https://access.redhat.com/errata/RHSA-2024:2447',
-                'https://access.redhat.com/security/cve/CVE-2023-3817',
-                'https://bugzilla.redhat.com/2223016',
-                'https://bugzilla.redhat.com/2224962',
-                'https://bugzilla.redhat.com/2227852',
-                'https://bugzilla.redhat.com/2248616',
-                'https://bugzilla.redhat.com/2257571',
-                'https://bugzilla.redhat.com/2258502',
-                'https://bugzilla.redhat.com/2259944',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2224962',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2227852',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2248616',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2270358',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3446',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3817',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-5678',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-2408',
-                'https://errata.almalinux.org/9/ALSA-2024-2447.html',
-                'https://errata.rockylinux.org/RLSA-2023:7877',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=6a1eb62c29db6cb5eec707f9338aee00f44e26f5',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=869ad69aadd985c7b8ca6f4e5dd0eb274c9f3644',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=9002fd07327a91f35ba6c1307e71fa6fd4409b7f',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=91ddeba0f2269b017dc06c46c993a788974b1aa5',
-                'https://linux.oracle.com/cve/CVE-2023-3817.html',
-                'https://linux.oracle.com/errata/ELSA-2024-2447.html',
-                'https://lists.debian.org/debian-lts-announce/2023/08/msg00019.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-3817',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://security.netapp.com/advisory/ntap-20230818-0014/',
-                'https://security.netapp.com/advisory/ntap-20231027-0008/',
-                'https://security.netapp.com/advisory/ntap-20240621-0006/',
-                'https://ubuntu.com/security/notices/USN-6435-1',
-                'https://ubuntu.com/security/notices/USN-6435-2',
-                'https://ubuntu.com/security/notices/USN-6450-1',
-                'https://ubuntu.com/security/notices/USN-6709-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-3817',
-                'https://www.openssl.org/news/secadv/20230731.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'OpenSSL: Excessive time spent checking DH q parameter value'
-            },
-            {
-              'cve':  'CVE-2023-5678',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L'
-                },
-                'redhat': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L'
-                }
-              },
-              'cwes': [
-                'CWE-606',
-                'CWE-754'
-              ],
-              'description':   "Issue summary: Generating excessively long X9.42 DH keys or checking\nexcessively long X9.42 DH keys or parameters may be very slow.\n\nImpact summary: Applications that use the functions DH_generate_key() to\ngenerate an X9.42 DH key may experience long delays.  Likewise, applications\nthat use DH_check_pub_key(), DH_check_pub_key_ex() or EVP_PKEY_public_check()\nto check an X9.42 DH key or X9.42 DH parameters may experience long delays.\nWhere the key or parameters that are being checked have been obtained from\nan untrusted source this may lead to a Denial of Service.\n\nWhile DH_check() performs all the necessary checks (as of CVE-2023-3817),\nDH_check_pub_key() doesn't make any of these checks, and is therefore\nvulnerable for excessively large P and Q parameters.\n\nLikewise, while DH_generate_key() performs a check for an excessively large\nP, it doesn't check for an excessively large Q.\n\nAn application that calls DH_generate_key() or DH_check_pub_key() and\nsupplies a key or parameters obtained from an untrusted source could be\nvulnerable to a Denial of Service attack.\n\nDH_generate_key() and DH_check_pub_key() are also called by a number of\nother OpenSSL functions.  An application calling any of those other\nfunctions may similarly be affected.  The other functions affected by this\nare DH_check_pub_key_ex(), EVP_PKEY_public_check(), and EVP_PKEY_generate().\n\nAlso vulnerable are the OpenSSL pkey command line application when using the\n\"-pubcheck\" option, as well as the OpenSSL genpkey command line application.\n\nThe OpenSSL SSL/TLS implementation is not affected by this issue.\n\nThe OpenSSL 3.0 and 3.1 FIPS providers are not affected by this issue.",
-              'diffID':        'sha256:72310f9c75be031d4b318d43090e229c62eb825b4f016cf4c88b0d26e73bfb80',
-              'fixedVersions': [
-                '3.0.12-r1'
-              ],
-              'installedVersion': '3.0.8-r0',
-              'packageName':      'libssl3',
-              'purl':             'pkg:apk/alpine/libssl3@3.0.8-r0?arch=x86_64&distro=3.17.1',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2024/03/11/1',
-                'https://access.redhat.com/errata/RHSA-2024:2447',
-                'https://access.redhat.com/security/cve/CVE-2023-5678',
-                'https://bugzilla.redhat.com/2223016',
-                'https://bugzilla.redhat.com/2224962',
-                'https://bugzilla.redhat.com/2227852',
-                'https://bugzilla.redhat.com/2248616',
-                'https://bugzilla.redhat.com/2257571',
-                'https://bugzilla.redhat.com/2258502',
-                'https://bugzilla.redhat.com/2259944',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2224962',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2227852',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2248616',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2270358',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3446',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3817',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-5678',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-2408',
-                'https://errata.almalinux.org/9/ALSA-2024-2447.html',
-                'https://errata.rockylinux.org/RLSA-2023:7877',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=34efaef6c103d636ab507a0cc34dca4d3aecc055',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=710fee740904b6290fef0dd5536fbcedbc38ff0c',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=db925ae2e65d0d925adef429afc37f75bd1c2017',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=ddeb4b6c6d527e54ce9a99cba785c0f7776e54b6',
-                'https://linux.oracle.com/cve/CVE-2023-5678.html',
-                'https://linux.oracle.com/errata/ELSA-2024-2447.html',
-                'https://lists.debian.org/debian-lts-announce/2024/10/msg00033.html',
-                'https://lists.debian.org/debian-lts-announce/2024/11/msg00000.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-5678',
-                'https://security.netapp.com/advisory/ntap-20231130-0010/',
-                'https://ubuntu.com/security/notices/USN-6622-1',
-                'https://ubuntu.com/security/notices/USN-6632-1',
-                'https://ubuntu.com/security/notices/USN-6709-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-5678',
-                'https://www.openssl.org/news/secadv/20231106.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: Generating excessively long X9.42 DH keys or checking excessively long X9.42 DH keys or parameters may be very slow'
-            },
-            {
-              'cve':  'CVE-2023-6129',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '6.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-440',
-                'CWE-787'
-              ],
-              'description':   'Issue summary: The POLY1305 MAC (message authentication code) implementation\ncontains a bug that might corrupt the internal state of applications running\non PowerPC CPU based platforms if the CPU provides vector instructions.\n\nImpact summary: If an attacker can influence whether the POLY1305 MAC\nalgorithm is used, the application state might be corrupted with various\napplication dependent consequences.\n\nThe POLY1305 MAC (message authentication code) implementation in OpenSSL for\nPowerPC CPUs restores the contents of vector registers in a different order\nthan they are saved. Thus the contents of some of these vector registers\nare corrupted when returning to the caller. The vulnerable code is used only\non newer PowerPC processors supporting the PowerISA 2.07 instructions.\n\nThe consequences of this kind of internal application state corruption can\nbe various - from no consequences, if the calling application does not\ndepend on the contents of non-volatile XMM registers at all, to the worst\nconsequences, where the attacker could get complete control of the application\nprocess. However unless the compiler uses the vector registers for storing\npointers, the most likely consequence, if any, would be an incorrect result\nof some application dependent calculations or a crash leading to a denial of\nservice.\n\nThe POLY1305 MAC algorithm is most frequently used as part of the\nCHACHA20-POLY1305 AEAD (authenticated encryption with associated data)\nalgorithm. The most common usage of this AEAD cipher is with TLS protocol\nversions 1.2 and 1.3. If this cipher is enabled on the server a malicious\nclient can influence whether this AEAD cipher is used. This implies that\nTLS server applications using OpenSSL can be potentially impacted. However\nwe are currently not aware of any concrete application that would be affected\nby this issue therefore we consider this a Low severity security issue.',
-              'diffID':        'sha256:72310f9c75be031d4b318d43090e229c62eb825b4f016cf4c88b0d26e73bfb80',
-              'fixedVersions': [
-                '3.0.12-r2'
-              ],
-              'installedVersion': '3.0.8-r0',
-              'packageName':      'libssl3',
-              'purl':             'pkg:apk/alpine/libssl3@3.0.8-r0?arch=x86_64&distro=3.17.1',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2024/03/11/1',
-                'https://access.redhat.com/errata/RHSA-2024:9088',
-                'https://access.redhat.com/security/cve/CVE-2023-6129',
-                'https://bugzilla.redhat.com/2257571',
-                'https://bugzilla.redhat.com/2258502',
-                'https://bugzilla.redhat.com/2259944',
-                'https://bugzilla.redhat.com/2284243',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2257571',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2258502',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2259944',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2284243',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-6129',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-6237',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-0727',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-1298',
-                'https://errata.almalinux.org/9/ALSA-2024-9088.html',
-                'https://errata.rockylinux.org/RLSA-2024:9088',
-                'https://github.com/openssl/openssl/commit/050d26383d4e264966fb83428e72d5d48f402d35',
-                'https://github.com/openssl/openssl/commit/5b139f95c9a47a55a0c54100f3837b1eee942b04',
-                'https://github.com/openssl/openssl/commit/f3fc5808fe9ff74042d639839610d03b8fdcc015',
-                'https://linux.oracle.com/cve/CVE-2023-6129.html',
-                'https://linux.oracle.com/errata/ELSA-2024-9088.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-6129',
-                'https://security.netapp.com/advisory/ntap-20240216-0009/',
-                'https://security.netapp.com/advisory/ntap-20240426-0008/',
-                'https://security.netapp.com/advisory/ntap-20240426-0013/',
-                'https://security.netapp.com/advisory/ntap-20240503-0011/',
-                'https://ubuntu.com/security/notices/USN-6622-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-6129',
-                'https://www.openssl.org/news/secadv/20240109.txt',
-                'https://www.openwall.com/lists/oss-security/2024/01/09/1'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: POLY1305 MAC implementation corrupts vector registers on PowerPC'
-            },
-            {
-              'cve':  'CVE-2023-6237',
-              'cvss': {
-                'redhat': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-606'
-              ],
-              'description':   "Issue summary: Checking excessively long invalid RSA public keys may take\na long time.\n\nImpact summary: Applications that use the function EVP_PKEY_public_check()\nto check RSA public keys may experience long delays. Where the key that\nis being checked has been obtained from an untrusted source this may lead\nto a Denial of Service.\n\nWhen function EVP_PKEY_public_check() is called on RSA public keys,\na computation is done to confirm that the RSA modulus, n, is composite.\nFor valid RSA keys, n is a product of two or more large primes and this\ncomputation completes quickly. However, if n is an overly large prime,\nthen this computation would take a long time.\n\nAn application that calls EVP_PKEY_public_check() and supplies an RSA key\nobtained from an untrusted source could be vulnerable to a Denial of Service\nattack.\n\nThe function EVP_PKEY_public_check() is not called from other OpenSSL\nfunctions however it is called from the OpenSSL pkey command line\napplication. For that reason that application is also vulnerable if used\nwith the '-pubin' and '-check' options on untrusted data.\n\nThe OpenSSL SSL/TLS implementation is not affected by this issue.\n\nThe OpenSSL 3.0 and 3.1 FIPS providers are affected by this issue.",
-              'diffID':        'sha256:72310f9c75be031d4b318d43090e229c62eb825b4f016cf4c88b0d26e73bfb80',
-              'fixedVersions': [
-                '3.0.12-r3'
-              ],
-              'installedVersion': '3.0.8-r0',
-              'packageName':      'libssl3',
-              'purl':             'pkg:apk/alpine/libssl3@3.0.8-r0?arch=x86_64&distro=3.17.1',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2024/03/11/1',
-                'https://access.redhat.com/errata/RHSA-2024:9088',
-                'https://access.redhat.com/security/cve/CVE-2023-6237',
-                'https://bugzilla.redhat.com/2257571',
-                'https://bugzilla.redhat.com/2258502',
-                'https://bugzilla.redhat.com/2259944',
-                'https://bugzilla.redhat.com/2284243',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2257571',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2258502',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2259944',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2284243',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-6129',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-6237',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-0727',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-1298',
-                'https://errata.almalinux.org/9/ALSA-2024-9088.html',
-                'https://errata.rockylinux.org/RLSA-2024:9088',
-                'https://github.com/openssl/openssl/commit/0b0f7abfb37350794a4b8960fafc292cd5d1b84d',
-                'https://github.com/openssl/openssl/commit/18c02492138d1eb8b6548cb26e7b625fb2414a2a',
-                'https://github.com/openssl/openssl/commit/a830f551557d3d66a84bbb18a5b889c640c36294',
-                'https://linux.oracle.com/cve/CVE-2023-6237.html',
-                'https://linux.oracle.com/errata/ELSA-2024-9088.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-6237',
-                'https://security.netapp.com/advisory/ntap-20240531-0007/',
-                'https://ubuntu.com/security/notices/USN-6622-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-6237',
-                'https://www.openssl.org/news/secadv/20240115.txt',
-                'https://www.openwall.com/lists/oss-security/2024/01/15/2'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: Excessive time spent checking invalid RSA public keys'
-            },
-            {
-              'cve':  'CVE-2024-0727',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '5.5',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H'
-                },
-                'nvd': {
-                  'v3score':  '5.5',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '5.5',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-476'
-              ],
-              'description':   'Issue summary: Processing a maliciously formatted PKCS12 file may lead OpenSSL\nto crash leading to a potential Denial of Service attack\n\nImpact summary: Applications loading files in the PKCS12 format from untrusted\nsources might terminate abruptly.\n\nA file in PKCS12 format can contain certificates and keys and may come from an\nuntrusted source. The PKCS12 specification allows certain fields to be NULL, but\nOpenSSL does not correctly check for this case. This can lead to a NULL pointer\ndereference that results in OpenSSL crashing. If an application processes PKCS12\nfiles from an untrusted source using the OpenSSL APIs then that application will\nbe vulnerable to this issue.\n\nOpenSSL APIs that are vulnerable to this are: PKCS12_parse(),\nPKCS12_unpack_p7data(), PKCS12_unpack_p7encdata(), PKCS12_unpack_authsafes()\nand PKCS12_newpass().\n\nWe have also fixed a similar issue in SMIME_write_PKCS7(). However since this\nfunction is related to writing data we do not consider it security significant.\n\nThe FIPS modules in 3.2, 3.1 and 3.0 are not affected by this issue.',
-              'diffID':        'sha256:72310f9c75be031d4b318d43090e229c62eb825b4f016cf4c88b0d26e73bfb80',
-              'fixedVersions': [
-                '3.0.12-r4'
-              ],
-              'installedVersion': '3.0.8-r0',
-              'packageName':      'libssl3',
-              'purl':             'pkg:apk/alpine/libssl3@3.0.8-r0?arch=x86_64&distro=3.17.1',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2024/03/11/1',
-                'https://access.redhat.com/errata/RHSA-2024:9088',
-                'https://access.redhat.com/security/cve/CVE-2024-0727',
-                'https://bugzilla.redhat.com/2257571',
-                'https://bugzilla.redhat.com/2258502',
-                'https://bugzilla.redhat.com/2259944',
-                'https://bugzilla.redhat.com/2284243',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2257571',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2258502',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2259944',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2284243',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-6129',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-6237',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-0727',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-1298',
-                'https://errata.almalinux.org/9/ALSA-2024-9088.html',
-                'https://errata.rockylinux.org/RLSA-2024:9088',
-                'https://github.com/alexcrichton/openssl-src-rs/commit/add20f73b6b42be7451af2e1044d4e0e778992b2',
-                'https://github.com/github/advisory-database/pull/3472',
-                'https://github.com/openssl/openssl/commit/09df4395b5071217b76dc7d3d2e630eb8c5a79c2',
-                'https://github.com/openssl/openssl/commit/775acfdbd0c6af9ac855f34969cdab0c0c90844a',
-                'https://github.com/openssl/openssl/commit/d135eeab8a5dbf72b3da5240bab9ddb7678dbd2c',
-                'https://github.com/openssl/openssl/pull/23362',
-                'https://github.com/pyca/cryptography/commit/3519591d255d4506fbcd0d04037d45271903c64d',
-                'https://github.openssl.org/openssl/extended-releases/commit/03b3941d60c4bce58fab69a0c22377ab439bc0e8',
-                'https://github.openssl.org/openssl/extended-releases/commit/aebaa5883e31122b404e450732dc833dc9dee539',
-                'https://linux.oracle.com/cve/CVE-2024-0727.html',
-                'https://linux.oracle.com/errata/ELSA-2024-9088.html',
-                'https://lists.debian.org/debian-lts-announce/2024/10/msg00033.html',
-                'https://lists.debian.org/debian-lts-announce/2024/11/msg00000.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2024-0727',
-                'https://security.netapp.com/advisory/ntap-20240208-0006',
-                'https://security.netapp.com/advisory/ntap-20240208-0006/',
-                'https://ubuntu.com/security/notices/USN-6622-1',
-                'https://ubuntu.com/security/notices/USN-6632-1',
-                'https://ubuntu.com/security/notices/USN-6709-1',
-                'https://ubuntu.com/security/notices/USN-7018-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2024-0727',
-                'https://www.openssl.org/news/secadv/20240125.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: denial of service via null dereference'
-            },
-            {
-              'cve':  'CVE-2024-4603',
-              'cvss': {
-                'redhat': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L'
-                }
-              },
-              'cwes': [
-                'CWE-606',
-                'CWE-834'
-              ],
-              'description':   'Issue summary: Checking excessively long DSA keys or parameters may be very\nslow.\n\nImpact summary: Applications that use the functions EVP_PKEY_param_check()\nor EVP_PKEY_public_check() to check a DSA public key or DSA parameters may\nexperience long delays. Where the key or parameters that are being checked\nhave been obtained from an untrusted source this may lead to a Denial of\nService.\n\nThe functions EVP_PKEY_param_check() or EVP_PKEY_public_check() perform\nvarious checks on DSA parameters. Some of those computations take a long time\nif the modulus (`p` parameter) is too large.\n\nTrying to use a very large modulus is slow and OpenSSL will not allow using\npublic keys with a modulus which is over 10,000 bits in length for signature\nverification. However the key and parameter check functions do not limit\nthe modulus size when performing the checks.\n\nAn application that calls EVP_PKEY_param_check() or EVP_PKEY_public_check()\nand supplies a key or parameters obtained from an untrusted source could be\nvulnerable to a Denial of Service attack.\n\nThese functions are not called by OpenSSL itself on untrusted DSA keys so\nonly applications that directly call these functions may be vulnerable.\n\nAlso vulnerable are the OpenSSL pkey and pkeyparam command line applications\nwhen using the `-check` option.\n\nThe OpenSSL SSL/TLS implementation is not affected by this issue.\n\nThe OpenSSL 3.0 and 3.1 FIPS providers are affected by this issue.',
-              'diffID':        'sha256:72310f9c75be031d4b318d43090e229c62eb825b4f016cf4c88b0d26e73bfb80',
-              'fixedVersions': [
-                '3.0.13-r0'
-              ],
-              'installedVersion': '3.0.8-r0',
-              'packageName':      'libssl3',
-              'purl':             'pkg:apk/alpine/libssl3@3.0.8-r0?arch=x86_64&distro=3.17.1',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2024/05/16/2',
-                'https://access.redhat.com/errata/RHSA-2024:9333',
-                'https://access.redhat.com/security/cve/CVE-2024-4603',
-                'https://bugzilla.redhat.com/2274020',
-                'https://bugzilla.redhat.com/2281029',
-                'https://bugzilla.redhat.com/2283757',
-                'https://bugzilla.redhat.com/2294581',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2274020',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2281029',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2283757',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2294581',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-2511',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-4603',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-4741',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-5535',
-                'https://errata.almalinux.org/9/ALSA-2024-9333.html',
-                'https://errata.rockylinux.org/RLSA-2024:9333',
-                'https://github.com/openssl/openssl/commit/3559e868e58005d15c6013a0c1fd832e51c73397',
-                'https://github.com/openssl/openssl/commit/53ea06486d296b890d565fb971b2764fcd826e7e',
-                'https://github.com/openssl/openssl/commit/9c39b3858091c152f52513c066ff2c5a47969f0d',
-                'https://github.com/openssl/openssl/commit/da343d0605c826ef197aceedc67e8e04f065f740',
-                'https://linux.oracle.com/cve/CVE-2024-4603.html',
-                'https://linux.oracle.com/errata/ELSA-2024-9333.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2024-4603',
-                'https://security.netapp.com/advisory/ntap-20240621-0001/',
-                'https://ubuntu.com/security/notices/USN-6937-1',
-                'https://www.cve.org/CVERecord?id=CVE-2024-4603',
-                'https://www.openssl.org/news/secadv/20240516.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: Excessive time spent checking DSA keys and parameters'
-            },
-            {
-              'cve':  'CVE-2024-4741',
-              'cvss': {
-                'redhat': {
-                  'v3score':  '5.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   'Issue summary: Calling the OpenSSL API function SSL_free_buffers may cause\nmemory to be accessed that was previously freed in some situations\n\nImpact summary: A use after free can have a range of potential consequences such\nas the corruption of valid data, crashes or execution of arbitrary code.\nHowever, only applications that directly call the SSL_free_buffers function are\naffected by this issue. Applications that do not call this function are not\nvulnerable. Our investigations indicate that this function is rarely used by\napplications.\n\nThe SSL_free_buffers function is used to free the internal OpenSSL buffer used\nwhen processing an incoming record from the network. The call is only expected\nto succeed if the buffer is not currently in use. However, two scenarios have\nbeen identified where the buffer is freed even when still in use.\n\nThe first scenario occurs where a record header has been received from the\nnetwork and processed by OpenSSL, but the full record body has not yet arrived.\nIn this case calling SSL_free_buffers will succeed even though a record has only\nbeen partially processed and the buffer is still in use.\n\nThe second scenario occurs where a full record containing application data has\nbeen received and processed by OpenSSL but the application has only read part of\nthis data. Again a call to SSL_free_buffers will succeed even though the buffer\nis still in use.\n\nWhile these scenarios could occur accidentally during normal operation a\nmalicious attacker could attempt to engineer a stituation where this occurs.\nWe are not aware of this issue being actively exploited.\n\nThe FIPS modules in 3.3, 3.2, 3.1 and 3.0 are not affected by this issue.',
-              'diffID':        'sha256:72310f9c75be031d4b318d43090e229c62eb825b4f016cf4c88b0d26e73bfb80',
-              'fixedVersions': [
-                '3.0.14-r0'
-              ],
-              'installedVersion': '3.0.8-r0',
-              'packageName':      'libssl3',
-              'purl':             'pkg:apk/alpine/libssl3@3.0.8-r0?arch=x86_64&distro=3.17.1',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2024:9333',
-                'https://access.redhat.com/security/cve/CVE-2024-4741',
-                'https://bugzilla.redhat.com/2274020',
-                'https://bugzilla.redhat.com/2281029',
-                'https://bugzilla.redhat.com/2283757',
-                'https://bugzilla.redhat.com/2294581',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2274020',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2281029',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2283757',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2294581',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-2511',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-4603',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-4741',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-5535',
-                'https://errata.almalinux.org/9/ALSA-2024-9333.html',
-                'https://errata.rockylinux.org/RLSA-2024:9333',
-                'https://github.com/openssl/openssl/commit/704f725b96aa373ee45ecfb23f6abfe8be8d9177',
-                'https://github.com/openssl/openssl/commit/b3f0eb0a295f58f16ba43ba99dad70d4ee5c437d',
-                'https://github.com/openssl/openssl/commit/c88c3de51020c37e8706bf7a682a162593053aac',
-                'https://github.com/openssl/openssl/commit/e5093133c35ca82874ad83697af76f4b0f7e3bd8',
-                'https://github.openssl.org/openssl/extended-releases/commit/f7a045f3143fc6da2ee66bf52d8df04829590dd4',
-                'https://linux.oracle.com/cve/CVE-2024-4741.html',
-                'https://linux.oracle.com/errata/ELSA-2024-9333.html',
-                'https://lists.debian.org/debian-lts-announce/2024/10/msg00033.html',
-                'https://lists.debian.org/debian-lts-announce/2024/11/msg00000.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2024-4741',
-                'https://security.netapp.com/advisory/ntap-20240621-0004/',
-                'https://ubuntu.com/security/notices/USN-6937-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2024-4741',
-                'https://www.openssl.org/news/secadv/20240528.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: Use After Free with SSL_free_buffers'
-            },
-            {
-              'cve':  'CVE-2024-5535',
-              'cvss': {
-                'redhat': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-125'
-              ],
-              'description':   'Issue summary: Calling the OpenSSL API function SSL_select_next_proto with an\nempty supported client protocols buffer may cause a crash or memory contents to\nbe sent to the peer.\n\nImpact summary: A buffer overread can have a range of potential consequences\nsuch as unexpected application beahviour or a crash. In particular this issue\ncould result in up to 255 bytes of arbitrary private data from memory being sent\nto the peer leading to a loss of confidentiality. However, only applications\nthat directly call the SSL_select_next_proto function with a 0 length list of\nsupported client protocols are affected by this issue. This would normally never\nbe a valid scenario and is typically not under attacker control but may occur by\naccident in the case of a configuration or programming error in the calling\napplication.\n\nThe OpenSSL API function SSL_select_next_proto is typically used by TLS\napplications that support ALPN (Application Layer Protocol Negotiation) or NPN\n(Next Protocol Negotiation). NPN is older, was never standardised and\nis deprecated in favour of ALPN. We believe that ALPN is significantly more\nwidely deployed than NPN. The SSL_select_next_proto function accepts a list of\nprotocols from the server and a list of protocols from the client and returns\nthe first protocol that appears in the server list that also appears in the\nclient list. In the case of no overlap between the two lists it returns the\nfirst item in the client list. In either case it will signal whether an overlap\nbetween the two lists was found. In the case where SSL_select_next_proto is\ncalled with a zero length client list it fails to notice this condition and\nreturns the memory immediately following the client list pointer (and reports\nthat there was no overlap in the lists).\n\nThis function is typically called from a server side application callback for\nALPN or a client side application callback for NPN. In the case of ALPN the list\nof protocols supplied by the client is guaranteed by libssl to never be zero in\nlength. The list of server protocols comes from the application and should never\nnormally be expected to be of zero length. In this case if the\nSSL_select_next_proto function has been called as expected (with the list\nsupplied by the client passed in the client/client_len parameters), then the\napplication will not be vulnerable to this issue. If the application has\naccidentally been configured with a zero length server list, and has\naccidentally passed that zero length server list in the client/client_len\nparameters, and has additionally failed to correctly handle a "no overlap"\nresponse (which would normally result in a handshake failure in ALPN) then it\nwill be vulnerable to this problem.\n\nIn the case of NPN, the protocol permits the client to opportunistically select\na protocol when there is no overlap. OpenSSL returns the first client protocol\nin the no overlap case in support of this. The list of client protocols comes\nfrom the application and should never normally be expected to be of zero length.\nHowever if the SSL_select_next_proto function is accidentally called with a\nclient_len of 0 then an invalid memory pointer will be returned instead. If the\napplication uses this output as the opportunistic protocol then the loss of\nconfidentiality will occur.\n\nThis issue has been assessed as Low severity because applications are most\nlikely to be vulnerable if they are using NPN instead of ALPN - but NPN is not\nwidely used. It also requires an application configuration or programming error.\nFinally, this issue would not typically be under attacker control making active\nexploitation unlikely.\n\nThe FIPS modules in 3.3, 3.2, 3.1 and 3.0 are not affected by this issue.\n\nDue to the low severity of this issue we are not issuing new releases of\nOpenSSL at this time. The fix will be included in the next releases when they\nbecome available.',
-              'diffID':        'sha256:72310f9c75be031d4b318d43090e229c62eb825b4f016cf4c88b0d26e73bfb80',
-              'fixedVersions': [
-                '3.0.14-r0'
-              ],
-              'installedVersion': '3.0.8-r0',
-              'packageName':      'libssl3',
-              'purl':             'pkg:apk/alpine/libssl3@3.0.8-r0?arch=x86_64&distro=3.17.1',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2024/06/27/1',
-                'http://www.openwall.com/lists/oss-security/2024/06/28/4',
-                'http://www.openwall.com/lists/oss-security/2024/08/15/1',
-                'https://access.redhat.com/errata/RHSA-2025:1671',
-                'https://access.redhat.com/security/cve/CVE-2024-5535',
-                'https://bugzilla.redhat.com/2294581',
-                'https://bugzilla.redhat.com/2294676',
-                'https://bugzilla.redhat.com/2301888',
-                'https://bugzilla.redhat.com/2318857',
-                'https://bugzilla.redhat.com/2318858',
-                'https://bugzilla.redhat.com/2318870',
-                'https://bugzilla.redhat.com/2318873',
-                'https://bugzilla.redhat.com/2318874',
-                'https://bugzilla.redhat.com/2318876',
-                'https://bugzilla.redhat.com/2318882',
-                'https://bugzilla.redhat.com/2318883',
-                'https://bugzilla.redhat.com/2318884',
-                'https://bugzilla.redhat.com/2318885',
-                'https://bugzilla.redhat.com/2318886',
-                'https://bugzilla.redhat.com/2318897',
-                'https://bugzilla.redhat.com/2318900',
-                'https://bugzilla.redhat.com/2318905',
-                'https://bugzilla.redhat.com/2318914',
-                'https://bugzilla.redhat.com/2318922',
-                'https://bugzilla.redhat.com/2318923',
-                'https://bugzilla.redhat.com/2318925',
-                'https://bugzilla.redhat.com/2318926',
-                'https://bugzilla.redhat.com/2318927',
-                'https://bugzilla.redhat.com/2331191',
-                'https://bugzilla.redhat.com/2339218',
-                'https://bugzilla.redhat.com/2339220',
-                'https://bugzilla.redhat.com/2339221',
-                'https://bugzilla.redhat.com/2339226',
-                'https://bugzilla.redhat.com/2339231',
-                'https://bugzilla.redhat.com/2339236',
-                'https://bugzilla.redhat.com/2339238',
-                'https://bugzilla.redhat.com/2339243',
-                'https://bugzilla.redhat.com/2339247',
-                'https://bugzilla.redhat.com/2339252',
-                'https://bugzilla.redhat.com/2339259',
-                'https://bugzilla.redhat.com/2339266',
-                'https://bugzilla.redhat.com/2339270',
-                'https://bugzilla.redhat.com/2339271',
-                'https://bugzilla.redhat.com/2339275',
-                'https://bugzilla.redhat.com/2339277',
-                'https://bugzilla.redhat.com/2339281',
-                'https://bugzilla.redhat.com/2339284',
-                'https://bugzilla.redhat.com/2339291',
-                'https://bugzilla.redhat.com/2339293',
-                'https://bugzilla.redhat.com/2339295',
-                'https://bugzilla.redhat.com/2339299',
-                'https://bugzilla.redhat.com/2339300',
-                'https://bugzilla.redhat.com/2339304',
-                'https://bugzilla.redhat.com/2339305',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2274020',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2281029',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2283757',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2294581',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-2511',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-4603',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-4741',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-5535',
-                'https://errata.almalinux.org/9/ALSA-2025-1671.html',
-                'https://errata.rockylinux.org/RLSA-2024:9333',
-                'https://github.com/openssl/openssl/commit/4ada436a1946cbb24db5ab4ca082b69c1bc10f37',
-                'https://github.com/openssl/openssl/commit/99fb785a5f85315b95288921a321a935ea29a51e',
-                'https://github.com/openssl/openssl/commit/cf6f91f6121f4db167405db2f0de410a456f260c',
-                'https://github.com/openssl/openssl/commit/e86ac436f0bd54d4517745483e2315650fae7b2c',
-                'https://github.openssl.org/openssl/extended-releases/commit/9947251413065a05189a63c9b7a6c1d4e224c21c',
-                'https://github.openssl.org/openssl/extended-releases/commit/b78ec0824da857223486660177d3b1f255c65d87',
-                'https://linux.oracle.com/cve/CVE-2024-5535.html',
-                'https://linux.oracle.com/errata/ELSA-2025-1673.html',
-                'https://lists.debian.org/debian-lts-announce/2024/10/msg00033.html',
-                'https://lists.debian.org/debian-lts-announce/2024/11/msg00000.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2024-5535',
-                'https://openssl.org/news/secadv/20240627.txt',
-                'https://security.netapp.com/advisory/ntap-20240712-0005/',
-                'https://security.netapp.com/advisory/ntap-20241025-0006/',
-                'https://security.netapp.com/advisory/ntap-20241025-0010/',
-                'https://ubuntu.com/security/notices/USN-6937-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2024-5535',
-                'https://www.openssl.org/news/secadv/20240627.txt',
-                'https://www.oracle.com/security-alerts/cpuoct2024.html#AppendixMSQL'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: SSL_select_next_proto buffer overread'
-            },
-            {
-              'cve':  'CVE-2024-2511',
-              'cvss': {
-                'redhat': {
-                  'v3score':  '3.7',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L'
-                }
-              },
-              'cwes': [
-                'CWE-1325'
-              ],
-              'description':   'Issue summary: Some non-default TLS server configurations can cause unbounded\nmemory growth when processing TLSv1.3 sessions\n\nImpact summary: An attacker may exploit certain server configurations to trigger\nunbounded memory growth that would lead to a Denial of Service\n\nThis problem can occur in TLSv1.3 if the non-default SSL_OP_NO_TICKET option is\nbeing used (but not if early_data support is also configured and the default\nanti-replay protection is in use). In this case, under certain conditions, the\nsession cache can get into an incorrect state and it will fail to flush properly\nas it fills. The session cache will continue to grow in an unbounded manner. A\nmalicious client could deliberately create the scenario for this failure to\nforce a Denial of Service. It may also happen by accident in normal operation.\n\nThis issue only affects TLS servers supporting TLSv1.3. It does not affect TLS\nclients.\n\nThe FIPS modules in 3.2, 3.1 and 3.0 are not affected by this issue. OpenSSL\n1.0.2 is also not affected by this issue.',
-              'diffID':        'sha256:72310f9c75be031d4b318d43090e229c62eb825b4f016cf4c88b0d26e73bfb80',
-              'fixedVersions': [
-                '3.0.12-r5'
-              ],
-              'installedVersion': '3.0.8-r0',
-              'packageName':      'libssl3',
-              'purl':             'pkg:apk/alpine/libssl3@3.0.8-r0?arch=x86_64&distro=3.17.1',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2024/04/08/5',
-                'https://access.redhat.com/errata/RHSA-2024:9333',
-                'https://access.redhat.com/security/cve/CVE-2024-2511',
-                'https://bugzilla.redhat.com/2274020',
-                'https://bugzilla.redhat.com/2281029',
-                'https://bugzilla.redhat.com/2283757',
-                'https://bugzilla.redhat.com/2294581',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2274020',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2281029',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2283757',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2294581',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-2511',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-4603',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-4741',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-5535',
-                'https://errata.almalinux.org/9/ALSA-2024-9333.html',
-                'https://errata.rockylinux.org/RLSA-2024:9333',
-                'https://github.com/openssl/openssl/commit/7e4d731b1c07201ad9374c1cd9ac5263bdf35bce',
-                'https://github.com/openssl/openssl/commit/b52867a9f618bb955bed2a3ce3db4d4f97ed8e5d',
-                'https://github.com/openssl/openssl/commit/e9d7083e241670332e0443da0f0d4ffb52829f08',
-                'https://github.openssl.org/openssl/extended-releases/commit/5f8d25770ae6437db119dfc951e207271a326640',
-                'https://linux.oracle.com/cve/CVE-2024-2511.html',
-                'https://linux.oracle.com/errata/ELSA-2024-9333.html',
-                'https://lists.debian.org/debian-lts-announce/2024/10/msg00033.html',
-                'https://lists.debian.org/debian-lts-announce/2024/11/msg00000.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2024-2511',
-                'https://security.netapp.com/advisory/ntap-20240503-0013/',
-                'https://ubuntu.com/security/notices/USN-6937-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2024-2511',
-                'https://www.openssl.org/news/secadv/20240408.txt',
-                'https://www.openssl.org/news/vulnerabilities.html'
-              ],
-              'severity':   'LOW',
-              'suppressed': false,
-              'title':      'openssl: Unbounded memory growth with session handling in TLSv1.3'
-            },
-            {
-              'cve':  'CVE-2024-9143',
-              'cvss': {
-                'redhat': {
-                  'v3score':  '3.7',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L'
-                }
-              },
-              'cwes': [
-                'CWE-125',
-                'CWE-787'
-              ],
-              'description':   "Issue summary: Use of the low-level GF(2^m) elliptic curve APIs with untrusted\nexplicit values for the field polynomial can lead to out-of-bounds memory reads\nor writes.\n\nImpact summary: Out of bound memory writes can lead to an application crash or\neven a possibility of a remote code execution, however, in all the protocols\ninvolving Elliptic Curve Cryptography that we're aware of, either only \"named\ncurves\" are supported, or, if explicit curve parameters are supported, they\nspecify an X9.62 encoding of binary (GF(2^m)) curves that can't represent\nproblematic input values. Thus the likelihood of existence of a vulnerable\napplication is low.\n\nIn particular, the X9.62 encoding is used for ECC keys in X.509 certificates,\nso problematic inputs cannot occur in the context of processing X.509\ncertificates.  Any problematic use-cases would have to be using an \"exotic\"\ncurve encoding.\n\nThe affected APIs include: EC_GROUP_new_curve_GF2m(), EC_GROUP_new_from_params(),\nand various supporting BN_GF2m_*() functions.\n\nApplications working with \"exotic\" explicit binary (GF(2^m)) curve parameters,\nthat make it possible to represent invalid field polynomials with a zero\nconstant term, via the above or similar APIs, may terminate abruptly as a\nresult of reading or writing outside of array bounds.  Remote code execution\ncannot easily be ruled out.\n\nThe FIPS modules in 3.3, 3.2, 3.1 and 3.0 are not affected by this issue.",
-              'diffID':        'sha256:72310f9c75be031d4b318d43090e229c62eb825b4f016cf4c88b0d26e73bfb80',
-              'fixedVersions': [
-                '3.0.15-r1'
-              ],
-              'installedVersion': '3.0.8-r0',
-              'packageName':      'libssl3',
-              'purl':             'pkg:apk/alpine/libssl3@3.0.8-r0?arch=x86_64&distro=3.17.1',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2024/10/16/1',
-                'http://www.openwall.com/lists/oss-security/2024/10/23/1',
-                'http://www.openwall.com/lists/oss-security/2024/10/24/1',
-                'https://access.redhat.com/security/cve/CVE-2024-9143',
-                'https://github.com/openssl/openssl/commit/72ae83ad214d2eef262461365a1975707f862712',
-                'https://github.com/openssl/openssl/commit/bc7e04d7c8d509fb78fc0e285aa948fb0da04700',
-                'https://github.com/openssl/openssl/commit/c0d3e4d32d2805f49bec30547f225bc4d092e1f4',
-                'https://github.com/openssl/openssl/commit/fdf6723362ca51bd883295efe206cb5b1cfa5154',
-                'https://github.openssl.org/openssl/extended-releases/commit/8efc0cbaa8ebba8e116f7b81a876a4123594d86a',
-                'https://github.openssl.org/openssl/extended-releases/commit/9d576994cec2b7aa37a91740ea7e680810957e41',
-                'https://lists.debian.org/debian-lts-announce/2024/10/msg00033.html',
-                'https://lists.debian.org/debian-lts-announce/2024/11/msg00000.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2024-9143',
-                'https://openssl-library.org/news/secadv/20241016.txt',
-                'https://security.netapp.com/advisory/ntap-20241101-0001/',
-                'https://ubuntu.com/security/notices/USN-7264-1',
-                'https://ubuntu.com/security/notices/USN-7278-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2024-9143'
-              ],
-              'severity':   'LOW',
-              'suppressed': false,
-              'title':      'openssl: Low-level invalid GF(2^m) parameters lead to OOB memory access'
-            },
-            {
-              'cve':  'CVE-2025-26519',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-787'
-              ],
-              'description':   'musl libc 0.9.13 through 1.2.5 before 1.2.6 has an out-of-bounds write vulnerability when an attacker can trigger iconv conversion of untrusted EUC-KR text to UTF-8.',
-              'diffID':        'sha256:8e012198eea15b2554b07014081c85fec4967a1b9cc4b65bd9a4bce3ae1c0c88',
-              'fixedVersions': [
-                '1.2.3-r6'
-              ],
-              'installedVersion': '1.2.3-r4',
-              'packageName':      'musl',
-              'purl':             'pkg:apk/alpine/musl@1.2.3-r4?arch=x86_64&distro=3.17.1',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2025/02/13/2',
-                'http://www.openwall.com/lists/oss-security/2025/02/13/3',
-                'http://www.openwall.com/lists/oss-security/2025/02/13/4',
-                'http://www.openwall.com/lists/oss-security/2025/02/13/5',
-                'http://www.openwall.com/lists/oss-security/2025/02/14/5',
-                'http://www.openwall.com/lists/oss-security/2025/02/14/6',
-                'https://git.musl-libc.org/cgit/musl/commit/?id=c47ad25ea3b484e10326f933e927c0bc8cded3da',
-                'https://git.musl-libc.org/cgit/musl/commit/?id=e5adcd97b5196e29991b524237381a0202a60659',
-                'https://www.openwall.com/lists/oss-security/2025/02/13/2'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'musl libc 0.9.13 through 1.2.5 before 1.2.6 has an out-of-bounds write ...'
-            },
-            {
-              'cve':  'CVE-2025-26519',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-787'
-              ],
-              'description':   'musl libc 0.9.13 through 1.2.5 before 1.2.6 has an out-of-bounds write vulnerability when an attacker can trigger iconv conversion of untrusted EUC-KR text to UTF-8.',
-              'diffID':        'sha256:8e012198eea15b2554b07014081c85fec4967a1b9cc4b65bd9a4bce3ae1c0c88',
-              'fixedVersions': [
-                '1.2.3-r6'
-              ],
-              'installedVersion': '1.2.3-r4',
-              'packageName':      'musl-utils',
-              'purl':             'pkg:apk/alpine/musl-utils@1.2.3-r4?arch=x86_64&distro=3.17.1',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2025/02/13/2',
-                'http://www.openwall.com/lists/oss-security/2025/02/13/3',
-                'http://www.openwall.com/lists/oss-security/2025/02/13/4',
-                'http://www.openwall.com/lists/oss-security/2025/02/13/5',
-                'http://www.openwall.com/lists/oss-security/2025/02/14/5',
-                'http://www.openwall.com/lists/oss-security/2025/02/14/6',
-                'https://git.musl-libc.org/cgit/musl/commit/?id=c47ad25ea3b484e10326f933e927c0bc8cded3da',
-                'https://git.musl-libc.org/cgit/musl/commit/?id=e5adcd97b5196e29991b524237381a0202a60659',
-                'https://www.openwall.com/lists/oss-security/2025/02/13/2'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'musl libc 0.9.13 through 1.2.5 before 1.2.6 has an out-of-bounds write ...'
-            },
-            {
-              'cve':  'CVE-2023-42363',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.5',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.8',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   'A use-after-free vulnerability was discovered in xasprintf function in xfuncs_printf.c:344 in BusyBox v.1.36.1.',
-              'diffID':        'sha256:8e012198eea15b2554b07014081c85fec4967a1b9cc4b65bd9a4bce3ae1c0c88',
-              'fixedVersions': [
-                '1.35.0-r31'
-              ],
-              'installedVersion': '1.35.0-r29',
-              'packageName':      'ssl_client',
-              'purl':             'pkg:apk/alpine/ssl_client@1.35.0-r29?arch=x86_64&distro=3.17.1',
-              'references':       [
-                'http://lists.busybox.net/pipermail/busybox/2024-May/090760.html',
-                'https://access.redhat.com/security/cve/CVE-2023-42363',
-                'https://bugs.busybox.net/show_bug.cgi?id=15865',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-42363',
-                'https://ubuntu.com/security/notices/USN-6961-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-42363'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk'
-            },
-            {
-              'cve':  'CVE-2023-42364',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.5',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.8',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   'A use-after-free vulnerability in BusyBox v.1.36.1 allows attackers to cause a denial of service via a crafted awk pattern in the awk.c evaluate function.',
-              'diffID':        'sha256:8e012198eea15b2554b07014081c85fec4967a1b9cc4b65bd9a4bce3ae1c0c88',
-              'fixedVersions': [
-                '1.35.0-r31'
-              ],
-              'installedVersion': '1.35.0-r29',
-              'packageName':      'ssl_client',
-              'purl':             'pkg:apk/alpine/ssl_client@1.35.0-r29?arch=x86_64&distro=3.17.1',
-              'references':       [
-                'http://lists.busybox.net/pipermail/busybox/2024-May/090762.html',
-                'https://access.redhat.com/security/cve/CVE-2023-42364',
-                'https://bugs.busybox.net/show_bug.cgi?id=15868',
-                'https://gitlab.alpinelinux.org/alpine/aports/-/blob/master/main/busybox/CVE-2023-42364-CVE-2023-42365.patch',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-42364',
-                'https://ubuntu.com/security/notices/USN-6961-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-42364'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'busybox: use-after-free'
-            },
-            {
-              'cve':  'CVE-2023-42365',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.5',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.8',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   'A use-after-free vulnerability was discovered in BusyBox v.1.36.1 via a crafted awk pattern in the awk.c copyvar function.',
-              'diffID':        'sha256:8e012198eea15b2554b07014081c85fec4967a1b9cc4b65bd9a4bce3ae1c0c88',
-              'fixedVersions': [
-                '1.35.0-r31'
-              ],
-              'installedVersion': '1.35.0-r29',
-              'packageName':      'ssl_client',
-              'purl':             'pkg:apk/alpine/ssl_client@1.35.0-r29?arch=x86_64&distro=3.17.1',
-              'references':       [
-                'http://lists.busybox.net/pipermail/busybox/2024-May/090762.html',
-                'https://access.redhat.com/security/cve/CVE-2023-42365',
-                'https://bugs.busybox.net/show_bug.cgi?id=15871',
-                'https://gitlab.alpinelinux.org/alpine/aports/-/blob/master/main/busybox/CVE-2023-42364-CVE-2023-42365.patch',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-42365',
-                'https://ubuntu.com/security/notices/USN-6961-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-42365'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'busybox: use-after-free'
-            },
-            {
-              'cve':  'CVE-2023-42366',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.5',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.1',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-787'
-              ],
-              'description':   'A heap-buffer-overflow was discovered in BusyBox v.1.36.1 in the next_token function at awk.c:1159.',
-              'diffID':        'sha256:8e012198eea15b2554b07014081c85fec4967a1b9cc4b65bd9a4bce3ae1c0c88',
-              'fixedVersions': [
-                '1.35.0-r30'
-              ],
-              'installedVersion': '1.35.0-r29',
-              'packageName':      'ssl_client',
-              'purl':             'pkg:apk/alpine/ssl_client@1.35.0-r29?arch=x86_64&distro=3.17.1',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2023-42366',
-                'https://bugs.busybox.net/show_bug.cgi?id=15874',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-42366',
-                'https://security.netapp.com/advisory/ntap-20241206-0007/',
-                'https://www.cve.org/CVERecord?id=CVE-2023-42366'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'busybox: A heap-buffer-overflow'
-            }
-          ]
-        }
-      ],
-      'summary': {
-        'critical':   0,
-        'high':       8,
-        'low':        4,
-        'medium':     40,
-        'suppressed': 0,
-        'unknown':    0
-      }
-    }
-  },
-  {
-    'id':    'default/fd53d29baa0134e07943b84ef2a7967fa4cbd17bbacf7835c6885647f9af2c40',
-    'type':  'storage.sbomscanner.kubewarden.io.vulnerabilityreport',
-    'links': {
-      'patch':  'https://localhost:8005/v1/storage.sbomscanner.kubewarden.io.vulnerabilityreports/default/fd53d29baa0134e07943b84ef2a7967fa4cbd17bbacf7835c6885647f9af2c40',
-      'remove': 'https://localhost:8005/v1/storage.sbomscanner.kubewarden.io.vulnerabilityreports/default/fd53d29baa0134e07943b84ef2a7967fa4cbd17bbacf7835c6885647f9af2c40',
-      'self':   'https://localhost:8005/v1/storage.sbomscanner.kubewarden.io.vulnerabilityreports/default/fd53d29baa0134e07943b84ef2a7967fa4cbd17bbacf7835c6885647f9af2c40',
-      'update': 'https://localhost:8005/v1/storage.sbomscanner.kubewarden.io.vulnerabilityreports/default/fd53d29baa0134e07943b84ef2a7967fa4cbd17bbacf7835c6885647f9af2c40',
-      'view':   'https://localhost:8005/apis/storage.sbomscanner.kubewarden.io/v1alpha1/namespaces/default/vulnerabilityreports/fd53d29baa0134e07943b84ef2a7967fa4cbd17bbacf7835c6885647f9af2c40'
-    },
-    'apiVersion':    'storage.sbomscanner.kubewarden.io/v1alpha1',
-    'imageMetadata': {
-      'digest':      'sha256:be9bdc0ef8e96dbc428dc189b31e2e3b05523d96d12ed627c37aa2936653258c',
-      'platform':    'linux/amd64',
-      'registry':    'lsong-demo1',
-      'registryURI': 'registry-1.docker.io',
-      'repository':  'library/alpine',
-      'tag':         '3.14.1'
-    },
-    'kind':     'VulnerabilityReport',
-    'metadata': {
-      'creationTimestamp': '2026-01-14T18:52:04Z',
-      'fields':            [
-        'fd53d29baa0134e07943b84ef2a7967fa4cbd17bbacf7835c6885647f9af2c40',
-        'registry-1.docker.io/library/alpine:3.14.1',
-        'linux/amd64',
-        '47 (0 suppressed)'
-      ],
-      'labels': {
-        'app.kubernetes.io/managed-by':          'sbomscanner',
-        'app.kubernetes.io/part-of':             'sbomscanner',
-        'sbomscanner.kubewarden.io/scanjob-uid': '445c600a-c4b6-40b3-bd71-f2d2140a37d5'
-      },
-      'name':            'fd53d29baa0134e07943b84ef2a7967fa4cbd17bbacf7835c6885647f9af2c40',
-      'namespace':       'default',
-      'ownerReferences': [
-        {
-          'apiVersion':         'storage.sbomscanner.kubewarden.io/v1alpha1',
-          'blockOwnerDeletion': true,
-          'controller':         true,
-          'kind':               'SBOM',
-          'name':               'fd53d29baa0134e07943b84ef2a7967fa4cbd17bbacf7835c6885647f9af2c40',
-          'uid':                '8c1648b9-19b3-46be-81b2-1924464f5d1c'
-        }
-      ],
-      'relationships': [
-        {
-          'fromId':   'default/fd53d29baa0134e07943b84ef2a7967fa4cbd17bbacf7835c6885647f9af2c40',
-          'fromType': 'storage.sbomscanner.kubewarden.io.sbom',
-          'rel':      'owner',
-          'state':    'active',
-          'message':  'Resource is current'
-        }
-      ],
-      'resourceVersion': '1',
-      'state':           {
-        'error':         false,
-        'message':       'Resource is current',
-        'name':          'active',
-        'transitioning': false
-      },
-      'uid': '532baae6-acd4-4663-97b0-0e436261f022'
-    },
-    'report': {
-      'results': [
-        {
-          'class':           'os-pkgs',
-          'target':          '/var/run/worker/trivy.sbom.4245211557.json (alpine 3.14.1)',
-          'type':            'alpine',
-          'vulnerabilities': [
-            {
-              'cve':  'CVE-2021-42378',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the getvar_i function",
-              'diffID':        'sha256:bc276c40b172b1c5467277d36db5308a203a48262d5f278766cf083947d05466',
-              'fixedVersions': [
-                '1.33.1-r6'
-              ],
-              'installedVersion': '1.33.1-r3',
-              'packageName':      'busybox',
-              'purl':             'pkg:apk/alpine/busybox@1.33.1-r3?arch=x86_64&distro=3.14.1',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42378',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42378',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42378'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the getvar_i()'
-            },
-            {
-              'cve':  'CVE-2021-42379',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the next_input_file function",
-              'diffID':        'sha256:bc276c40b172b1c5467277d36db5308a203a48262d5f278766cf083947d05466',
-              'fixedVersions': [
-                '1.33.1-r6'
-              ],
-              'installedVersion': '1.33.1-r3',
-              'packageName':      'busybox',
-              'purl':             'pkg:apk/alpine/busybox@1.33.1-r3?arch=x86_64&distro=3.14.1',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42379',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42379',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42379'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the next_input_file()'
-            },
-            {
-              'cve':  'CVE-2021-42380',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the clrvar function",
-              'diffID':        'sha256:bc276c40b172b1c5467277d36db5308a203a48262d5f278766cf083947d05466',
-              'fixedVersions': [
-                '1.33.1-r6'
-              ],
-              'installedVersion': '1.33.1-r3',
-              'packageName':      'busybox',
-              'purl':             'pkg:apk/alpine/busybox@1.33.1-r3?arch=x86_64&distro=3.14.1',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42380',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42380',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42380'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the clrvar()'
-            },
-            {
-              'cve':  'CVE-2021-42381',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the hash_init function",
-              'diffID':        'sha256:bc276c40b172b1c5467277d36db5308a203a48262d5f278766cf083947d05466',
-              'fixedVersions': [
-                '1.33.1-r6'
-              ],
-              'installedVersion': '1.33.1-r3',
-              'packageName':      'busybox',
-              'purl':             'pkg:apk/alpine/busybox@1.33.1-r3?arch=x86_64&distro=3.14.1',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42381',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42381',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42381'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the hash_init()'
-            },
-            {
-              'cve':  'CVE-2021-42382',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the getvar_s function",
-              'diffID':        'sha256:bc276c40b172b1c5467277d36db5308a203a48262d5f278766cf083947d05466',
-              'fixedVersions': [
-                '1.33.1-r6'
-              ],
-              'installedVersion': '1.33.1-r3',
-              'packageName':      'busybox',
-              'purl':             'pkg:apk/alpine/busybox@1.33.1-r3?arch=x86_64&distro=3.14.1',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42382',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42382',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42382'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the getvar_s()'
-            },
-            {
-              'cve':  'CVE-2021-42383',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the evaluate function",
-              'diffID':        'sha256:bc276c40b172b1c5467277d36db5308a203a48262d5f278766cf083947d05466',
-              'fixedVersions': [
-                '1.33.1-r6'
-              ],
-              'installedVersion': '1.33.1-r3',
-              'packageName':      'busybox',
-              'purl':             'pkg:apk/alpine/busybox@1.33.1-r3?arch=x86_64&distro=3.14.1',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42383',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42383',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42383'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the evaluate()'
-            },
-            {
-              'cve':  'CVE-2021-42384',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the handle_special function",
-              'diffID':        'sha256:bc276c40b172b1c5467277d36db5308a203a48262d5f278766cf083947d05466',
-              'fixedVersions': [
-                '1.33.1-r6'
-              ],
-              'installedVersion': '1.33.1-r3',
-              'packageName':      'busybox',
-              'purl':             'pkg:apk/alpine/busybox@1.33.1-r3?arch=x86_64&distro=3.14.1',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42384',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42384',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42384'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the handle_special()'
-            },
-            {
-              'cve':  'CVE-2021-42385',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the evaluate function",
-              'diffID':        'sha256:bc276c40b172b1c5467277d36db5308a203a48262d5f278766cf083947d05466',
-              'fixedVersions': [
-                '1.33.1-r6'
-              ],
-              'installedVersion': '1.33.1-r3',
-              'packageName':      'busybox',
-              'purl':             'pkg:apk/alpine/busybox@1.33.1-r3?arch=x86_64&distro=3.14.1',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42385',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42385',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42385'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the evaluate()'
-            },
-            {
-              'cve':  'CVE-2021-42386',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the nvalloc function",
-              'diffID':        'sha256:bc276c40b172b1c5467277d36db5308a203a48262d5f278766cf083947d05466',
-              'fixedVersions': [
-                '1.33.1-r6'
-              ],
-              'installedVersion': '1.33.1-r3',
-              'packageName':      'busybox',
-              'purl':             'pkg:apk/alpine/busybox@1.33.1-r3?arch=x86_64&distro=3.14.1',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42386',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42386',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42386'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the nvalloc()'
-            },
-            {
-              'cve':  'CVE-2022-28391',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '8.8',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-88'
-              ],
-              'description':   "BusyBox through 1.35.0 allows remote attackers to execute arbitrary code if netstat is used to print a DNS PTR record's value to a VT compatible terminal. Alternatively, the attacker could choose to change the terminal's colors.",
-              'diffID':        'sha256:bc276c40b172b1c5467277d36db5308a203a48262d5f278766cf083947d05466',
-              'fixedVersions': [
-                '1.33.1-r7'
-              ],
-              'installedVersion': '1.33.1-r3',
-              'packageName':      'busybox',
-              'purl':             'pkg:apk/alpine/busybox@1.33.1-r3?arch=x86_64&distro=3.14.1',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2022-28391',
-                'https://git.alpinelinux.org/aports/plain/main/busybox/0001-libbb-sockaddr2str-ensure-only-printable-characters-.patch',
-                'https://git.alpinelinux.org/aports/plain/main/busybox/0002-nslookup-sanitize-all-printed-strings-with-printable.patch',
-                'https://gitlab.alpinelinux.org/alpine/aports/-/issues/13661',
-                'https://nvd.nist.gov/vuln/detail/CVE-2022-28391',
-                'https://www.cve.org/CVERecord?id=CVE-2022-28391'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: remote attackers may execute arbitrary code if netstat is used'
-            },
-            {
-              'cve':  'CVE-2021-42374',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '5.7',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-125'
-              ],
-              'description':   "An out-of-bounds heap read in Busybox's unlzma applet leads to information leak and denial of service when crafted LZMA-compressed input is decompressed. This can be triggered by any applet/format that",
-              'diffID':        'sha256:bc276c40b172b1c5467277d36db5308a203a48262d5f278766cf083947d05466',
-              'fixedVersions': [
-                '1.33.1-r4'
-              ],
-              'installedVersion': '1.33.1-r3',
-              'packageName':      'busybox',
-              'purl':             'pkg:apk/alpine/busybox@1.33.1-r3?arch=x86_64&distro=3.14.1',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42374',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42374',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42374'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'busybox: out-of-bounds read in unlzma applet leads to information leak and denial of service when crafted LZMA-compressed input is decompressed'
-            },
-            {
-              'cve':  'CVE-2021-42375',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.5',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '4.1',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-159'
-              ],
-              'description':   "An incorrect handling of a special element in Busybox's ash applet leads to denial of service when processing a crafted shell command, due to the shell mistaking specific characters for reserved characters. This may be used for DoS under rare conditions of filtered command input.",
-              'diffID':        'sha256:bc276c40b172b1c5467277d36db5308a203a48262d5f278766cf083947d05466',
-              'fixedVersions': [
-                '1.33.1-r5'
-              ],
-              'installedVersion': '1.33.1-r3',
-              'packageName':      'busybox',
-              'purl':             'pkg:apk/alpine/busybox@1.33.1-r3?arch=x86_64&distro=3.14.1',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42375',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42375',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42375'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'busybox: incorrect handling of a special element in ash applet leads to denial of service when processing a crafted shell command'
-            },
-            {
-              'cve':  'CVE-2021-3711',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '9.8',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'nvd': {
-                  'v3score':  '9.8',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '9.8',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-120'
-              ],
-              'description':   'In order to decrypt SM2 encrypted data an application is expected to call the API function EVP_PKEY_decrypt(). Typically an application will call this function twice. The first time, on entry, the "out" parameter can be NULL and, on exit, the "outlen" parameter is populated with the buffer size required to hold the decrypted plaintext. The application can then allocate a sufficiently sized buffer and call EVP_PKEY_decrypt() again, but this time passing a non-NULL value for the "out" parameter. A bug in the implementation of the SM2 decryption code means that the calculation of the buffer size required to hold the plaintext returned by the first call to EVP_PKEY_decrypt() can be smaller than the actual size required by the second call. This can lead to a buffer overflow when EVP_PKEY_decrypt() is called by the application a second time with a buffer that is too small. A malicious attacker who is able present SM2 content for decryption to an application could cause attacker chosen data to overflow the buffer by up to a maximum of 62 bytes altering the contents of other data held after the buffer, possibly changing application behaviour or causing the application to crash. The location of the buffer is application dependent but is typically heap allocated. Fixed in OpenSSL 1.1.1l (Affected 1.1.1-1.1.1k).',
-              'diffID':        'sha256:bc276c40b172b1c5467277d36db5308a203a48262d5f278766cf083947d05466',
-              'fixedVersions': [
-                '1.1.1l-r0'
-              ],
-              'installedVersion': '1.1.1k-r0',
-              'packageName':      'libcrypto1.1',
-              'purl':             'pkg:apk/alpine/libcrypto1.1@1.1.1k-r0?arch=x86_64&distro=3.14.1',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2021/08/26/2',
-                'https://access.redhat.com/security/cve/CVE-2021-3711',
-                'https://cert-portal.siemens.com/productcert/pdf/ssa-389290.pdf',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=59f5e75f3bced8fc0e130d72a3f582cf7b480b46',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=59f5e75f3bced8fc0e130d72a3f582cf7b480b46',
-                'https://lists.apache.org/thread.html/r18995de860f0e63635f3008fd2a6aca82394249476d21691e7c59c9e%40%3Cdev.tomcat.apache.org%3E',
-                'https://lists.apache.org/thread.html/r18995de860f0e63635f3008fd2a6aca82394249476d21691e7c59c9e@%3Cdev.tomcat.apache.org%3E',
-                'https://lists.apache.org/thread.html/rad5d9f83f0d11fb3f8bb148d179b8a9ad7c6a17f18d70e5805a713d1%40%3Cdev.tomcat.apache.org%3E',
-                'https://lists.apache.org/thread.html/rad5d9f83f0d11fb3f8bb148d179b8a9ad7c6a17f18d70e5805a713d1@%3Cdev.tomcat.apache.org%3E',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-3711',
-                'https://rustsec.org/advisories/RUSTSEC-2021-0097.html',
-                'https://security.gentoo.org/glsa/202209-02',
-                'https://security.gentoo.org/glsa/202210-02',
-                'https://security.netapp.com/advisory/ntap-20210827-0010',
-                'https://security.netapp.com/advisory/ntap-20210827-0010/',
-                'https://security.netapp.com/advisory/ntap-20211022-0003',
-                'https://security.netapp.com/advisory/ntap-20211022-0003/',
-                'https://security.netapp.com/advisory/ntap-20240621-0006',
-                'https://security.netapp.com/advisory/ntap-20240621-0006/',
-                'https://ubuntu.com/security/notices/USN-5051-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-3711',
-                'https://www.debian.org/security/2021/dsa-4963',
-                'https://www.openssl.org/news/secadv/20210824.txt',
-                'https://www.oracle.com/security-alerts/cpuapr2022.html',
-                'https://www.oracle.com/security-alerts/cpujan2022.html',
-                'https://www.oracle.com/security-alerts/cpuoct2021.html',
-                'https://www.tenable.com/security/tns-2021-16',
-                'https://www.tenable.com/security/tns-2022-02'
-              ],
-              'severity':   'CRITICAL',
-              'suppressed': false,
-              'title':      'openssl: SM2 Decryption Buffer Overflow'
-            },
-            {
-              'cve':  'CVE-2021-3712',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '7.4',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H'
-                },
-                'nvd': {
-                  'v3score':  '7.4',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.4',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-125'
-              ],
-              'description':   "ASN.1 strings are represented internally within OpenSSL as an ASN1_STRING structure which contains a buffer holding the string data and a field holding the buffer length. This contrasts with normal C strings which are repesented as a buffer for the string data which is terminated with a NUL (0) byte. Although not a strict requirement, ASN.1 strings that are parsed using OpenSSL's own \"d2i\" functions (and other similar parsing functions) as well as any string whose value has been set with the ASN1_STRING_set() function will additionally NUL terminate the byte array in the ASN1_STRING structure. However, it is possible for applications to directly construct valid ASN1_STRING structures which do not NUL terminate the byte array by directly setting the \"data\" and \"length\" fields in the ASN1_STRING array. This can also happen by using the ASN1_STRING_set0() function. Numerous OpenSSL functions that print ASN.1 data have been found to assume that the ASN1_STRING byte array will be NUL terminated, even though this is not guaranteed for strings that have been directly constructed. Where an application requests an ASN.1 structure to be printed, and where that ASN.1 structure contains ASN1_STRINGs that have been directly constructed by the application without NUL terminating the \"data\" field, then a read buffer overrun can occur. The same thing can also occur during name constraints processing of certificates (for example if a certificate has been directly constructed by the application instead of loading it via the OpenSSL parsing functions, and the certificate contains non NUL terminated ASN1_STRING structures). It can also occur in the X509_get1_email(), X509_REQ_get1_email() and X509_get1_ocsp() functions. If a malicious actor can cause an application to directly construct an ASN1_STRING and then process it through one of the affected OpenSSL functions then this issue could be hit. This might result in a crash (causing a Denial of Service attack). It could also result in the disclosure of private memory contents (such as private keys, or sensitive plaintext). Fixed in OpenSSL 1.1.1l (Affected 1.1.1-1.1.1k). Fixed in OpenSSL 1.0.2za (Affected 1.0.2-1.0.2y).",
-              'diffID':        'sha256:bc276c40b172b1c5467277d36db5308a203a48262d5f278766cf083947d05466',
-              'fixedVersions': [
-                '1.1.1l-r0'
-              ],
-              'installedVersion': '1.1.1k-r0',
-              'packageName':      'libcrypto1.1',
-              'purl':             'pkg:apk/alpine/libcrypto1.1@1.1.1k-r0?arch=x86_64&distro=3.14.1',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2021/08/26/2',
-                'https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2021-3712.json',
-                'https://access.redhat.com/security/cve/CVE-2021-3712',
-                'https://cert-portal.siemens.com/productcert/pdf/ssa-244969.pdf',
-                'https://cert-portal.siemens.com/productcert/pdf/ssa-389290.pdf',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=94d23fcff9b2a7a8368dfe52214d5c2569882c11',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=ccb0a11145ee72b042d10593a64eaf9e8a55ec12',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=94d23fcff9b2a7a8368dfe52214d5c2569882c11',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=ccb0a11145ee72b042d10593a64eaf9e8a55ec12',
-                'https://kc.mcafee.com/corporate/index?page=content&id=SB10366',
-                'https://linux.oracle.com/cve/CVE-2021-3712.html',
-                'https://linux.oracle.com/errata/ELSA-2022-9023.html',
-                'https://lists.apache.org/thread.html/r18995de860f0e63635f3008fd2a6aca82394249476d21691e7c59c9e%40%3Cdev.tomcat.apache.org%3E',
-                'https://lists.apache.org/thread.html/r18995de860f0e63635f3008fd2a6aca82394249476d21691e7c59c9e@%3Cdev.tomcat.apache.org%3E',
-                'https://lists.apache.org/thread.html/rad5d9f83f0d11fb3f8bb148d179b8a9ad7c6a17f18d70e5805a713d1%40%3Cdev.tomcat.apache.org%3E',
-                'https://lists.apache.org/thread.html/rad5d9f83f0d11fb3f8bb148d179b8a9ad7c6a17f18d70e5805a713d1@%3Cdev.tomcat.apache.org%3E',
-                'https://lists.debian.org/debian-lts-announce/2021/09/msg00014.html',
-                'https://lists.debian.org/debian-lts-announce/2021/09/msg00021.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-3712',
-                'https://rustsec.org/advisories/RUSTSEC-2021-0098.html',
-                'https://security.gentoo.org/glsa/202209-02',
-                'https://security.gentoo.org/glsa/202210-02',
-                'https://security.netapp.com/advisory/ntap-20210827-0010',
-                'https://security.netapp.com/advisory/ntap-20210827-0010/',
-                'https://security.netapp.com/advisory/ntap-20240621-0006',
-                'https://security.netapp.com/advisory/ntap-20240621-0006/',
-                'https://ubuntu.com/security/notices/USN-5051-1',
-                'https://ubuntu.com/security/notices/USN-5051-2',
-                'https://ubuntu.com/security/notices/USN-5051-3',
-                'https://ubuntu.com/security/notices/USN-5051-4 (regression only in trusty/esm)',
-                'https://ubuntu.com/security/notices/USN-5088-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-3712',
-                'https://www.debian.org/security/2021/dsa-4963',
-                'https://www.openssl.org/news/secadv/20210824.txt',
-                'https://www.oracle.com/security-alerts/cpuapr2022.html',
-                'https://www.oracle.com/security-alerts/cpujan2022.html',
-                'https://www.oracle.com/security-alerts/cpuoct2021.html',
-                'https://www.tenable.com/security/tns-2021-16',
-                'https://www.tenable.com/security/tns-2022-02'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: Read buffer overruns processing ASN.1 strings'
-            },
-            {
-              'cve':  'CVE-2022-0778',
-              'cvss': {
-                'bitnami': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'ghsa': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'nvd': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-835'
-              ],
-              'description':   'The BN_mod_sqrt() function, which computes a modular square root, contains a bug that can cause it to loop forever for non-prime moduli. Internally this function is used when parsing certificates that contain elliptic curve public keys in compressed form or explicit elliptic curve parameters with a base point encoded in compressed form. It is possible to trigger the infinite loop by crafting a certificate that has invalid explicit curve parameters. Since certificate parsing happens prior to verification of the certificate signature, any process that parses an externally supplied certificate may thus be subject to a denial of service attack. The infinite loop can also be reached when parsing crafted private keys as they can contain explicit elliptic curve parameters. Thus vulnerable situations include: - TLS clients consuming server certificates - TLS servers consuming client certificates - Hosting providers taking certificates or private keys from customers - Certificate authorities parsing certification requests from subscribers - Anything else which parses ASN.1 elliptic curve parameters Also any other applications that use the BN_mod_sqrt() where the attacker can control the parameter values are vulnerable to this DoS issue. In the OpenSSL 1.0.2 version the public key is not parsed during initial parsing of the certificate which makes it slightly harder to trigger the infinite loop. However any operation which requires the public key from the certificate will trigger the infinite loop. In particular the attacker can use a self-signed certificate to trigger the loop during verification of the certificate signature. This issue affects OpenSSL versions 1.0.2, 1.1.1 and 3.0. It was addressed in the releases of 1.1.1n and 3.0.2 on the 15th March 2022. Fixed in OpenSSL 3.0.2 (Affected 3.0.0,3.0.1). Fixed in OpenSSL 1.1.1n (Affected 1.1.1-1.1.1m). Fixed in OpenSSL 1.0.2zd (Affected 1.0.2-1.0.2zc).',
-              'diffID':        'sha256:bc276c40b172b1c5467277d36db5308a203a48262d5f278766cf083947d05466',
-              'fixedVersions': [
-                '1.1.1n-r0'
-              ],
-              'installedVersion': '1.1.1k-r0',
-              'packageName':      'libcrypto1.1',
-              'purl':             'pkg:apk/alpine/libcrypto1.1@1.1.1k-r0?arch=x86_64&distro=3.14.1',
-              'references':       [
-                'http://packetstormsecurity.com/files/167344/OpenSSL-1.0.2-1.1.1-3.0-BN_mod_sqrt-Infinite-Loop.html',
-                'http://seclists.org/fulldisclosure/2022/May/33',
-                'http://seclists.org/fulldisclosure/2022/May/35',
-                'http://seclists.org/fulldisclosure/2022/May/38',
-                'https://access.redhat.com/errata/RHSA-2022:5326',
-                'https://access.redhat.com/security/cve/CVE-2022-0778',
-                'https://bugzilla.redhat.com/2062202',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2062202',
-                'https://cert-portal.siemens.com/productcert/pdf/ssa-712929.pdf',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-0778',
-                'https://errata.almalinux.org/8/ALSA-2022-5326.html',
-                'https://errata.rockylinux.org/RLSA-2022:4899',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=3118eb64934499d93db3230748a452351d1d9a65',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=380085481c64de749a6dd25cdf0bcf4360b30f83',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=a466912611aa6cbdf550cd10601390e587451246',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=3118eb64934499d93db3230748a452351d1d9a65',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=380085481c64de749a6dd25cdf0bcf4360b30f83',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=a466912611aa6cbdf550cd10601390e587451246',
-                'https://linux.oracle.com/cve/CVE-2022-0778.html',
-                'https://linux.oracle.com/errata/ELSA-2022-9272.html',
-                'https://lists.debian.org/debian-lts-announce/2022/03/msg00023.html',
-                'https://lists.debian.org/debian-lts-announce/2022/03/msg00024.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/323SNN6ZX7PRJJWP2BUAFLPUAE42XWLZ',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/323SNN6ZX7PRJJWP2BUAFLPUAE42XWLZ/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GDB3GQVJPXJE7X5C5JN6JAA4XUDWD6E6',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GDB3GQVJPXJE7X5C5JN6JAA4XUDWD6E6/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/W6K3PR542DXWLEFFMFIDMME4CWMHJRMG',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/W6K3PR542DXWLEFFMFIDMME4CWMHJRMG/',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/323SNN6ZX7PRJJWP2BUAFLPUAE42XWLZ',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/GDB3GQVJPXJE7X5C5JN6JAA4XUDWD6E6',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/W6K3PR542DXWLEFFMFIDMME4CWMHJRMG',
-                'https://nvd.nist.gov/vuln/detail/CVE-2022-0778',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2022-0002',
-                'https://rustsec.org/advisories/RUSTSEC-2022-0014.html',
-                'https://security.gentoo.org/glsa/202210-02',
-                'https://security.netapp.com/advisory/ntap-20220321-0002',
-                'https://security.netapp.com/advisory/ntap-20220321-0002/',
-                'https://security.netapp.com/advisory/ntap-20220429-0005',
-                'https://security.netapp.com/advisory/ntap-20220429-0005/',
-                'https://security.netapp.com/advisory/ntap-20240621-0006',
-                'https://security.netapp.com/advisory/ntap-20240621-0006/',
-                'https://support.apple.com/kb/HT213255',
-                'https://support.apple.com/kb/HT213256',
-                'https://support.apple.com/kb/HT213257',
-                'https://ubuntu.com/security/notices/USN-5328-1',
-                'https://ubuntu.com/security/notices/USN-5328-2',
-                'https://ubuntu.com/security/notices/USN-6457-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2022-0778',
-                'https://www.debian.org/security/2022/dsa-5103',
-                'https://www.openssl.org/news/secadv/20220315.txt',
-                'https://www.oracle.com/security-alerts/cpuapr2022.html',
-                'https://www.oracle.com/security-alerts/cpujul2022.html',
-                'https://www.tenable.com/security/tns-2022-06',
-                'https://www.tenable.com/security/tns-2022-07',
-                'https://www.tenable.com/security/tns-2022-08',
-                'https://www.tenable.com/security/tns-2022-09'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: Infinite loop in BN_mod_sqrt() reachable when parsing certificates'
-            },
-            {
-              'cve':  'CVE-2022-4450',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'nvd': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-415'
-              ],
-              'description':   'The function PEM_read_bio_ex() reads a PEM file from a BIO and parses and\ndecodes the "name" (e.g. "CERTIFICATE"), any header data and the payload data.\nIf the function succeeds then the "name_out", "header" and "data" arguments are\npopulated with pointers to buffers containing the relevant decoded data. The\ncaller is responsible for freeing those buffers. It is possible to construct a\nPEM file that results in 0 bytes of payload data. In this case PEM_read_bio_ex()\nwill return a failure code but will populate the header argument with a pointer\nto a buffer that has already been freed. If the caller also frees this buffer\nthen a double free will occur. This will most likely lead to a crash. This\ncould be exploited by an attacker who has the ability to supply malicious PEM\nfiles for parsing to achieve a denial of service attack.\n\nThe functions PEM_read_bio() and PEM_read() are simple wrappers around\nPEM_read_bio_ex() and therefore these functions are also directly affected.\n\nThese functions are also called indirectly by a number of other OpenSSL\nfunctions including PEM_X509_INFO_read_bio_ex() and\nSSL_CTX_use_serverinfo_file() which are also vulnerable. Some OpenSSL internal\nuses of these functions are not vulnerable because the caller does not free the\nheader argument if PEM_read_bio_ex() returns a failure code. These locations\ninclude the PEM_read_bio_TYPE() functions as well as the decoders introduced in\nOpenSSL 3.0.\n\nThe OpenSSL asn1parse command line application is also impacted by this issue.',
-              'diffID':        'sha256:bc276c40b172b1c5467277d36db5308a203a48262d5f278766cf083947d05466',
-              'fixedVersions': [
-                '1.1.1t-r0'
-              ],
-              'installedVersion': '1.1.1k-r0',
-              'packageName':      'libcrypto1.1',
-              'purl':             'pkg:apk/alpine/libcrypto1.1@1.1.1k-r0?arch=x86_64&distro=3.14.1',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2023:2165',
-                'https://access.redhat.com/security/cve/CVE-2022-4450',
-                'https://bugzilla.redhat.com/1960321',
-                'https://bugzilla.redhat.com/2164440',
-                'https://bugzilla.redhat.com/2164487',
-                'https://bugzilla.redhat.com/2164492',
-                'https://bugzilla.redhat.com/2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144000',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144003',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144006',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144008',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144010',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144012',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144015',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144017',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144019',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2145170',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2158412',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164440',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164487',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164488',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164492',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164497',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164499',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164500',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4203',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4304',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4450',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0215',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0216',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0217',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0286',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0401',
-                'https://errata.almalinux.org/9/ALSA-2023-2165.html',
-                'https://errata.rockylinux.org/RLSA-2023:0946',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=63bcf189be73a9cc1264059bed6f57974be74a83',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=bbcf509bd046b34cca19c766bbddc31683d0858b',
-                'https://linux.oracle.com/cve/CVE-2022-4450.html',
-                'https://linux.oracle.com/errata/ELSA-2023-32791.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2022-4450',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0003',
-                'https://rustsec.org/advisories/RUSTSEC-2023-0010.html',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://ubuntu.com/security/notices/USN-5844-1',
-                'https://ubuntu.com/security/notices/USN-6564-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2022-4450',
-                'https://www.openssl.org/news/secadv/20230207.txt'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: double free after calling PEM_read_bio_ex'
-            },
-            {
-              'cve':  'CVE-2023-0215',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'nvd': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   'The public API function BIO_new_NDEF is a helper function used for streaming\nASN.1 data via a BIO. It is primarily used internally to OpenSSL to support the\nSMIME, CMS and PKCS7 streaming capabilities, but may also be called directly by\nend user applications.\n\nThe function receives a BIO from the caller, prepends a new BIO_f_asn1 filter\nBIO onto the front of it to form a BIO chain, and then returns the new head of\nthe BIO chain to the caller. Under certain conditions, for example if a CMS\nrecipient public key is invalid, the new filter BIO is freed and the function\nreturns a NULL result indicating a failure. However, in this case, the BIO chain\nis not properly cleaned up and the BIO passed by the caller still retains\ninternal pointers to the previously freed filter BIO. If the caller then goes on\nto call BIO_pop() on the BIO then a use-after-free will occur. This will most\nlikely result in a crash.\n\n\n\nThis scenario occurs directly in the internal function B64_write_ASN1() which\nmay cause BIO_new_NDEF() to be called and will subsequently call BIO_pop() on\nthe BIO. This internal function is in turn called by the public API functions\nPEM_write_bio_ASN1_stream, PEM_write_bio_CMS_stream, PEM_write_bio_PKCS7_stream,\nSMIME_write_ASN1, SMIME_write_CMS and SMIME_write_PKCS7.\n\nOther public API functions that may be impacted by this include\ni2d_ASN1_bio_stream, BIO_new_CMS, BIO_new_PKCS7, i2d_CMS_bio_stream and\ni2d_PKCS7_bio_stream.\n\nThe OpenSSL cms and smime command line applications are similarly affected.',
-              'diffID':        'sha256:bc276c40b172b1c5467277d36db5308a203a48262d5f278766cf083947d05466',
-              'fixedVersions': [
-                '1.1.1t-r0'
-              ],
-              'installedVersion': '1.1.1k-r0',
-              'packageName':      'libcrypto1.1',
-              'purl':             'pkg:apk/alpine/libcrypto1.1@1.1.1k-r0?arch=x86_64&distro=3.14.1',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2023:2165',
-                'https://access.redhat.com/security/cve/CVE-2023-0215',
-                'https://bugzilla.redhat.com/1960321',
-                'https://bugzilla.redhat.com/2164440',
-                'https://bugzilla.redhat.com/2164487',
-                'https://bugzilla.redhat.com/2164492',
-                'https://bugzilla.redhat.com/2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144000',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144003',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144006',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144008',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144010',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144012',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144015',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144017',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144019',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2145170',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2158412',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164440',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164487',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164488',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164492',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164497',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164499',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164500',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4203',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4304',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4450',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0215',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0216',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0217',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0286',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0401',
-                'https://errata.almalinux.org/9/ALSA-2023-2165.html',
-                'https://errata.rockylinux.org/RLSA-2023:0946',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=8818064ce3c3c0f1b740a5aaba2a987e75bfbafd',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=9816136fe31d92ace4037d5da5257f763aeeb4eb',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=c3829dd8825c654652201e16f8a0a0c46ee3f344',
-                'https://linux.oracle.com/cve/CVE-2023-0215.html',
-                'https://linux.oracle.com/errata/ELSA-2023-32791.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-0215',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0003',
-                'https://rustsec.org/advisories/RUSTSEC-2023-0009.html',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://security.netapp.com/advisory/ntap-20230427-0007',
-                'https://security.netapp.com/advisory/ntap-20230427-0007/',
-                'https://security.netapp.com/advisory/ntap-20230427-0009',
-                'https://security.netapp.com/advisory/ntap-20230427-0009/',
-                'https://security.netapp.com/advisory/ntap-20240621-0006',
-                'https://security.netapp.com/advisory/ntap-20240621-0006/',
-                'https://ubuntu.com/security/notices/USN-5844-1',
-                'https://ubuntu.com/security/notices/USN-5845-1',
-                'https://ubuntu.com/security/notices/USN-5845-2',
-                'https://ubuntu.com/security/notices/USN-6564-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-0215',
-                'https://www.openssl.org/news/secadv/20230207.txt'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: use-after-free following BIO_new_NDEF'
-            },
-            {
-              'cve':  'CVE-2023-0286',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '7.4',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H'
-                },
-                'nvd': {
-                  'v3score':  '7.4',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.4',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-843'
-              ],
-              'description':   'There is a type confusion vulnerability relating to X.400 address processing\ninside an X.509 GeneralName. X.400 addresses were parsed as an ASN1_STRING but\nthe public structure definition for GENERAL_NAME incorrectly specified the type\nof the x400Address field as ASN1_TYPE. This field is subsequently interpreted by\nthe OpenSSL function GENERAL_NAME_cmp as an ASN1_TYPE rather than an\nASN1_STRING.\n\nWhen CRL checking is enabled (i.e. the application sets the\nX509_V_FLAG_CRL_CHECK flag), this vulnerability may allow an attacker to pass\narbitrary pointers to a memcmp call, enabling them to read memory contents or\nenact a denial of service. In most cases, the attack requires the attacker to\nprovide both the certificate chain and CRL, neither of which need to have a\nvalid signature. If the attacker only controls one of these inputs, the other\ninput must already contain an X.400 address as a CRL distribution point, which\nis uncommon. As such, this vulnerability is most likely to only affect\napplications which have implemented their own functionality for retrieving CRLs\nover a network.',
-              'diffID':        'sha256:bc276c40b172b1c5467277d36db5308a203a48262d5f278766cf083947d05466',
-              'fixedVersions': [
-                '1.1.1t-r0'
-              ],
-              'installedVersion': '1.1.1k-r0',
-              'packageName':      'libcrypto1.1',
-              'purl':             'pkg:apk/alpine/libcrypto1.1@1.1.1k-r0?arch=x86_64&distro=3.14.1',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2025:7937',
-                'https://access.redhat.com/security/cve/CVE-2023-0286',
-                'https://access.redhat.com/security/cve/cve-2023-0286',
-                'https://bugzilla.redhat.com/2164440',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144000',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144003',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144006',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144008',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144010',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144012',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144015',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144017',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144019',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2145170',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2158412',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164440',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164487',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164488',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164492',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164497',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164499',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164500',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4203',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4304',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4450',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0215',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0216',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0217',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0286',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0401',
-                'https://errata.almalinux.org/9/ALSA-2025-7937.html',
-                'https://errata.rockylinux.org/RLSA-2023:0946',
-                'https://ftp.openbsd.org/pub/OpenBSD/LibreSSL/libressl-3.6.2-relnotes.txt',
-                'https://ftp.openbsd.org/pub/OpenBSD/patches/7.2/common/018_x509.patch.sig',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=2c6c9d439b484e1ba9830d8454a34fa4f80fdfe9',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=2f7530077e0ef79d98718138716bc51ca0cad658',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=fd2af07dc083a350c959147097003a14a5e8ac4d',
-                'https://github.com/pyca/cryptography',
-                'https://github.com/pyca/cryptography/security/advisories/GHSA-x4qr-2fvf-3mr5',
-                'https://linux.oracle.com/cve/CVE-2023-0286.html',
-                'https://linux.oracle.com/errata/ELSA-2025-7937.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-0286',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0003',
-                'https://rustsec.org/advisories/RUSTSEC-2023-0006.html',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://ubuntu.com/security/notices/USN-5844-1',
-                'https://ubuntu.com/security/notices/USN-5845-1',
-                'https://ubuntu.com/security/notices/USN-5845-2',
-                'https://ubuntu.com/security/notices/USN-6564-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-0286',
-                'https://www.openssl.org/news/secadv/20230207.txt'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: X.400 address type confusion in X.509 GeneralName'
-            },
-            {
-              'cve':  'CVE-2023-0464',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-295'
-              ],
-              'description':   "A security vulnerability has been identified in all supported versions\n\nof OpenSSL related to the verification of X.509 certificate chains\nthat include policy constraints.  Attackers may be able to exploit this\nvulnerability by creating a malicious certificate chain that triggers\nexponential use of computational resources, leading to a denial-of-service\n(DoS) attack on affected systems.\n\nPolicy processing is disabled by default but can be enabled by passing\nthe `-policy' argument to the command line utilities or by calling the\n`X509_VERIFY_PARAM_set1_policies()' function.",
-              'diffID':        'sha256:bc276c40b172b1c5467277d36db5308a203a48262d5f278766cf083947d05466',
-              'fixedVersions': [
-                '1.1.1t-r1'
-              ],
-              'installedVersion': '1.1.1k-r0',
-              'packageName':      'libcrypto1.1',
-              'purl':             'pkg:apk/alpine/libcrypto1.1@1.1.1k-r0?arch=x86_64&distro=3.14.1',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2023:3722',
-                'https://access.redhat.com/security/cve/CVE-2023-0464',
-                'https://bugzilla.redhat.com/2181082',
-                'https://bugzilla.redhat.com/2182561',
-                'https://bugzilla.redhat.com/2182565',
-                'https://bugzilla.redhat.com/2188461',
-                'https://bugzilla.redhat.com/2207947',
-                'https://errata.almalinux.org/9/ALSA-2023-3722.html',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=2017771e2db3e2b96f89bbe8766c3209f6a99545',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=2dcd4f1e3115f38cefa43e3efbe9b801c27e642e',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=879f7080d7e141f415c79eaa3a8ac4a3dad0348b',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=959c59c7a0164117e7f8366466a32bb1f8d77ff1',
-                'https://linux.oracle.com/cve/CVE-2023-0464.html',
-                'https://linux.oracle.com/errata/ELSA-2023-3722.html',
-                'https://lists.debian.org/debian-lts-announce/2023/06/msg00011.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-0464',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://security.netapp.com/advisory/ntap-20230406-0006/',
-                'https://security.netapp.com/advisory/ntap-20240621-0006/',
-                'https://ubuntu.com/security/notices/USN-6039-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.couchbase.com/alerts/',
-                'https://www.cve.org/CVERecord?id=CVE-2023-0464',
-                'https://www.debian.org/security/2023/dsa-5417',
-                'https://www.openssl.org/news/secadv/20230322.txt'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: Denial of service by excessive resource usage in verifying X509 policy constraints'
-            },
-            {
-              'cve':  'CVE-2022-2097',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N'
-                },
-                'nvd': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N'
-                },
-                'redhat': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-327'
-              ],
-              'description':   "AES OCB mode for 32-bit x86 platforms using the AES-NI assembly optimised implementation will not encrypt the entirety of the data under some circumstances. This could reveal sixteen bytes of data that was preexisting in the memory that wasn't written. In the special case of \"in place\" encryption, sixteen bytes of the plaintext would be revealed. Since OpenSSL does not support OCB based cipher suites for TLS and DTLS, they are both unaffected. Fixed in OpenSSL 3.0.5 (Affected 3.0.0-3.0.4). Fixed in OpenSSL 1.1.1q (Affected 1.1.1-1.1.1p).",
-              'diffID':        'sha256:bc276c40b172b1c5467277d36db5308a203a48262d5f278766cf083947d05466',
-              'fixedVersions': [
-                '1.1.1q-r0'
-              ],
-              'installedVersion': '1.1.1k-r0',
-              'packageName':      'libcrypto1.1',
-              'purl':             'pkg:apk/alpine/libcrypto1.1@1.1.1k-r0?arch=x86_64&distro=3.14.1',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2022:6224',
-                'https://access.redhat.com/security/cve/CVE-2022-2097',
-                'https://bugzilla.redhat.com/2081494',
-                'https://bugzilla.redhat.com/2087911',
-                'https://bugzilla.redhat.com/2087913',
-                'https://bugzilla.redhat.com/2097310',
-                'https://bugzilla.redhat.com/2104905',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2081494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2097310',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2100554',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2104905',
-                'https://cert-portal.siemens.com/productcert/pdf/ssa-332410.pdf',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-1292',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-2068',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-2097',
-                'https://errata.almalinux.org/9/ALSA-2022-6224.html',
-                'https://errata.rockylinux.org/RLSA-2022:5818',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=919925673d6c9cfed3c1085497f5dfbbed5fc431',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=a98f339ddd7e8f487d6e0088d4a9a42324885a93',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=919925673d6c9cfed3c1085497f5dfbbed5fc431',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=a98f339ddd7e8f487d6e0088d4a9a42324885a93',
-                'https://github.com/alexcrichton/openssl-src-rs',
-                'https://linux.oracle.com/cve/CVE-2022-2097.html',
-                'https://linux.oracle.com/errata/ELSA-2022-9955.html',
-                'https://lists.debian.org/debian-lts-announce/2023/02/msg00019.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/R6CK57NBQFTPUMXAPJURCGXUYT76NQAK',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/R6CK57NBQFTPUMXAPJURCGXUYT76NQAK/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/V6567JERRHHJW2GNGJGKDRNHR7SNPZK7',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/V6567JERRHHJW2GNGJGKDRNHR7SNPZK7/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VCMNWKERPBKOEBNL7CLTTX3ZZCZLH7XA',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VCMNWKERPBKOEBNL7CLTTX3ZZCZLH7XA/',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/R6CK57NBQFTPUMXAPJURCGXUYT76NQAK',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/R6CK57NBQFTPUMXAPJURCGXUYT76NQAK/',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/V6567JERRHHJW2GNGJGKDRNHR7SNPZK7',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/V6567JERRHHJW2GNGJGKDRNHR7SNPZK7/',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/VCMNWKERPBKOEBNL7CLTTX3ZZCZLH7XA',
-                'https://nvd.nist.gov/vuln/detail/CVE-2022-2097',
-                'https://rustsec.org/advisories/RUSTSEC-2022-0032.html',
-                'https://security.gentoo.org/glsa/202210-02',
-                'https://security.netapp.com/advisory/ntap-20220715-0011',
-                'https://security.netapp.com/advisory/ntap-20220715-0011/',
-                'https://security.netapp.com/advisory/ntap-20230420-0008',
-                'https://security.netapp.com/advisory/ntap-20230420-0008/',
-                'https://security.netapp.com/advisory/ntap-20240621-0006',
-                'https://security.netapp.com/advisory/ntap-20240621-0006/',
-                'https://ubuntu.com/security/notices/USN-5502-1',
-                'https://ubuntu.com/security/notices/USN-6457-1',
-                'https://www.cve.org/CVERecord?id=CVE-2022-2097',
-                'https://www.debian.org/security/2023/dsa-5343',
-                'https://www.openssl.org/news/secadv/20220705.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: AES OCB fails to encrypt some bytes'
-            },
-            {
-              'cve':  'CVE-2022-4304',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N'
-                },
-                'nvd': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N'
-                },
-                'redhat': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-203'
-              ],
-              'description':   'A timing based side channel exists in the OpenSSL RSA Decryption implementation\nwhich could be sufficient to recover a plaintext across a network in a\nBleichenbacher style attack. To achieve a successful decryption an attacker\nwould have to be able to send a very large number of trial messages for\ndecryption. The vulnerability affects all RSA padding modes: PKCS#1 v1.5,\nRSA-OEAP and RSASVE.\n\nFor example, in a TLS connection, RSA is commonly used by a client to send an\nencrypted pre-master secret to the server. An attacker that had observed a\ngenuine connection between a client and a server could use this flaw to send\ntrial messages to the server and record the time taken to process them. After a\nsufficiently large number of messages the attacker could recover the pre-master\nsecret used for the original connection and thus be able to decrypt the\napplication data sent over that connection.',
-              'diffID':        'sha256:bc276c40b172b1c5467277d36db5308a203a48262d5f278766cf083947d05466',
-              'fixedVersions': [
-                '1.1.1t-r0'
-              ],
-              'installedVersion': '1.1.1k-r0',
-              'packageName':      'libcrypto1.1',
-              'purl':             'pkg:apk/alpine/libcrypto1.1@1.1.1k-r0?arch=x86_64&distro=3.14.1',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2023:2165',
-                'https://access.redhat.com/security/cve/CVE-2022-4304',
-                'https://bugzilla.redhat.com/1960321',
-                'https://bugzilla.redhat.com/2164440',
-                'https://bugzilla.redhat.com/2164487',
-                'https://bugzilla.redhat.com/2164492',
-                'https://bugzilla.redhat.com/2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144000',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144003',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144006',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144008',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144010',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144012',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144015',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144017',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144019',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2145170',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2158412',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164440',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164487',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164488',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164492',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164497',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164499',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164500',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4203',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4304',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4450',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0215',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0216',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0217',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0286',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0401',
-                'https://errata.almalinux.org/9/ALSA-2023-2165.html',
-                'https://errata.rockylinux.org/RLSA-2023:0946',
-                'https://linux.oracle.com/cve/CVE-2022-4304.html',
-                'https://linux.oracle.com/errata/ELSA-2023-32791.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2022-4304',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0003',
-                'https://rustsec.org/advisories/RUSTSEC-2023-0007.html',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://ubuntu.com/security/notices/USN-5844-1',
-                'https://ubuntu.com/security/notices/USN-6564-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2022-4304',
-                'https://www.openssl.org/news/secadv/20230207.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: timing attack in RSA Decryption implementation'
-            },
-            {
-              'cve':  'CVE-2023-0465',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N'
-                },
-                'redhat': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-295'
-              ],
-              'description':   "Applications that use a non-default option when verifying certificates may be\nvulnerable to an attack from a malicious CA to circumvent certain checks.\n\nInvalid certificate policies in leaf certificates are silently ignored by\nOpenSSL and other certificate policy checks are skipped for that certificate.\nA malicious CA could use this to deliberately assert invalid certificate policies\nin order to circumvent policy checking on the certificate altogether.\n\nPolicy processing is disabled by default but can be enabled by passing\nthe `-policy' argument to the command line utilities or by calling the\n`X509_VERIFY_PARAM_set1_policies()' function.",
-              'diffID':        'sha256:bc276c40b172b1c5467277d36db5308a203a48262d5f278766cf083947d05466',
-              'fixedVersions': [
-                '1.1.1t-r2'
-              ],
-              'installedVersion': '1.1.1k-r0',
-              'packageName':      'libcrypto1.1',
-              'purl':             'pkg:apk/alpine/libcrypto1.1@1.1.1k-r0?arch=x86_64&distro=3.14.1',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2023:3722',
-                'https://access.redhat.com/security/cve/CVE-2023-0465',
-                'https://bugzilla.redhat.com/2181082',
-                'https://bugzilla.redhat.com/2182561',
-                'https://bugzilla.redhat.com/2182565',
-                'https://bugzilla.redhat.com/2188461',
-                'https://bugzilla.redhat.com/2207947',
-                'https://errata.almalinux.org/9/ALSA-2023-3722.html',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=10325176f3d3e98c6e2b3bf5ab1e3b334de6947a',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=1dd43e0709fece299b15208f36cc7c76209ba0bb',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=b013765abfa80036dc779dd0e50602c57bb3bf95',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=facfb1ab745646e97a1920977ae4a9965ea61d5c',
-                'https://linux.oracle.com/cve/CVE-2023-0465.html',
-                'https://linux.oracle.com/errata/ELSA-2023-3722.html',
-                'https://lists.debian.org/debian-lts-announce/2023/06/msg00011.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-0465',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://security.netapp.com/advisory/ntap-20230414-0001/',
-                'https://ubuntu.com/security/notices/USN-6039-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-0465',
-                'https://www.debian.org/security/2023/dsa-5417',
-                'https://www.openssl.org/news/secadv/20230328.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: Invalid certificate policies in leaf certificates are silently ignored'
-            },
-            {
-              'cve':  'CVE-2022-0778',
-              'cvss': {
-                'bitnami': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'ghsa': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'nvd': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-835'
-              ],
-              'description':   'The BN_mod_sqrt() function, which computes a modular square root, contains a bug that can cause it to loop forever for non-prime moduli. Internally this function is used when parsing certificates that contain elliptic curve public keys in compressed form or explicit elliptic curve parameters with a base point encoded in compressed form. It is possible to trigger the infinite loop by crafting a certificate that has invalid explicit curve parameters. Since certificate parsing happens prior to verification of the certificate signature, any process that parses an externally supplied certificate may thus be subject to a denial of service attack. The infinite loop can also be reached when parsing crafted private keys as they can contain explicit elliptic curve parameters. Thus vulnerable situations include: - TLS clients consuming server certificates - TLS servers consuming client certificates - Hosting providers taking certificates or private keys from customers - Certificate authorities parsing certification requests from subscribers - Anything else which parses ASN.1 elliptic curve parameters Also any other applications that use the BN_mod_sqrt() where the attacker can control the parameter values are vulnerable to this DoS issue. In the OpenSSL 1.0.2 version the public key is not parsed during initial parsing of the certificate which makes it slightly harder to trigger the infinite loop. However any operation which requires the public key from the certificate will trigger the infinite loop. In particular the attacker can use a self-signed certificate to trigger the loop during verification of the certificate signature. This issue affects OpenSSL versions 1.0.2, 1.1.1 and 3.0. It was addressed in the releases of 1.1.1n and 3.0.2 on the 15th March 2022. Fixed in OpenSSL 3.0.2 (Affected 3.0.0,3.0.1). Fixed in OpenSSL 1.1.1n (Affected 1.1.1-1.1.1m). Fixed in OpenSSL 1.0.2zd (Affected 1.0.2-1.0.2zc).',
-              'diffID':        'sha256:bc276c40b172b1c5467277d36db5308a203a48262d5f278766cf083947d05466',
-              'fixedVersions': [
-                '3.3.3p1-r3'
-              ],
-              'installedVersion': '3.3.3p1-r2',
-              'packageName':      'libretls',
-              'purl':             'pkg:apk/alpine/libretls@3.3.3p1-r2?arch=x86_64&distro=3.14.1',
-              'references':       [
-                'http://packetstormsecurity.com/files/167344/OpenSSL-1.0.2-1.1.1-3.0-BN_mod_sqrt-Infinite-Loop.html',
-                'http://seclists.org/fulldisclosure/2022/May/33',
-                'http://seclists.org/fulldisclosure/2022/May/35',
-                'http://seclists.org/fulldisclosure/2022/May/38',
-                'https://access.redhat.com/errata/RHSA-2022:5326',
-                'https://access.redhat.com/security/cve/CVE-2022-0778',
-                'https://bugzilla.redhat.com/2062202',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2062202',
-                'https://cert-portal.siemens.com/productcert/pdf/ssa-712929.pdf',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-0778',
-                'https://errata.almalinux.org/8/ALSA-2022-5326.html',
-                'https://errata.rockylinux.org/RLSA-2022:4899',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=3118eb64934499d93db3230748a452351d1d9a65',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=380085481c64de749a6dd25cdf0bcf4360b30f83',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=a466912611aa6cbdf550cd10601390e587451246',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=3118eb64934499d93db3230748a452351d1d9a65',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=380085481c64de749a6dd25cdf0bcf4360b30f83',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=a466912611aa6cbdf550cd10601390e587451246',
-                'https://linux.oracle.com/cve/CVE-2022-0778.html',
-                'https://linux.oracle.com/errata/ELSA-2022-9272.html',
-                'https://lists.debian.org/debian-lts-announce/2022/03/msg00023.html',
-                'https://lists.debian.org/debian-lts-announce/2022/03/msg00024.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/323SNN6ZX7PRJJWP2BUAFLPUAE42XWLZ',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/323SNN6ZX7PRJJWP2BUAFLPUAE42XWLZ/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GDB3GQVJPXJE7X5C5JN6JAA4XUDWD6E6',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GDB3GQVJPXJE7X5C5JN6JAA4XUDWD6E6/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/W6K3PR542DXWLEFFMFIDMME4CWMHJRMG',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/W6K3PR542DXWLEFFMFIDMME4CWMHJRMG/',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/323SNN6ZX7PRJJWP2BUAFLPUAE42XWLZ',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/GDB3GQVJPXJE7X5C5JN6JAA4XUDWD6E6',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/W6K3PR542DXWLEFFMFIDMME4CWMHJRMG',
-                'https://nvd.nist.gov/vuln/detail/CVE-2022-0778',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2022-0002',
-                'https://rustsec.org/advisories/RUSTSEC-2022-0014.html',
-                'https://security.gentoo.org/glsa/202210-02',
-                'https://security.netapp.com/advisory/ntap-20220321-0002',
-                'https://security.netapp.com/advisory/ntap-20220321-0002/',
-                'https://security.netapp.com/advisory/ntap-20220429-0005',
-                'https://security.netapp.com/advisory/ntap-20220429-0005/',
-                'https://security.netapp.com/advisory/ntap-20240621-0006',
-                'https://security.netapp.com/advisory/ntap-20240621-0006/',
-                'https://support.apple.com/kb/HT213255',
-                'https://support.apple.com/kb/HT213256',
-                'https://support.apple.com/kb/HT213257',
-                'https://ubuntu.com/security/notices/USN-5328-1',
-                'https://ubuntu.com/security/notices/USN-5328-2',
-                'https://ubuntu.com/security/notices/USN-6457-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2022-0778',
-                'https://www.debian.org/security/2022/dsa-5103',
-                'https://www.openssl.org/news/secadv/20220315.txt',
-                'https://www.oracle.com/security-alerts/cpuapr2022.html',
-                'https://www.oracle.com/security-alerts/cpujul2022.html',
-                'https://www.tenable.com/security/tns-2022-06',
-                'https://www.tenable.com/security/tns-2022-07',
-                'https://www.tenable.com/security/tns-2022-08',
-                'https://www.tenable.com/security/tns-2022-09'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: Infinite loop in BN_mod_sqrt() reachable when parsing certificates'
-            },
-            {
-              'cve':  'CVE-2021-3711',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '9.8',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'nvd': {
-                  'v3score':  '9.8',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '9.8',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-120'
-              ],
-              'description':   'In order to decrypt SM2 encrypted data an application is expected to call the API function EVP_PKEY_decrypt(). Typically an application will call this function twice. The first time, on entry, the "out" parameter can be NULL and, on exit, the "outlen" parameter is populated with the buffer size required to hold the decrypted plaintext. The application can then allocate a sufficiently sized buffer and call EVP_PKEY_decrypt() again, but this time passing a non-NULL value for the "out" parameter. A bug in the implementation of the SM2 decryption code means that the calculation of the buffer size required to hold the plaintext returned by the first call to EVP_PKEY_decrypt() can be smaller than the actual size required by the second call. This can lead to a buffer overflow when EVP_PKEY_decrypt() is called by the application a second time with a buffer that is too small. A malicious attacker who is able present SM2 content for decryption to an application could cause attacker chosen data to overflow the buffer by up to a maximum of 62 bytes altering the contents of other data held after the buffer, possibly changing application behaviour or causing the application to crash. The location of the buffer is application dependent but is typically heap allocated. Fixed in OpenSSL 1.1.1l (Affected 1.1.1-1.1.1k).',
-              'diffID':        'sha256:bc276c40b172b1c5467277d36db5308a203a48262d5f278766cf083947d05466',
-              'fixedVersions': [
-                '1.1.1l-r0'
-              ],
-              'installedVersion': '1.1.1k-r0',
-              'packageName':      'libssl1.1',
-              'purl':             'pkg:apk/alpine/libssl1.1@1.1.1k-r0?arch=x86_64&distro=3.14.1',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2021/08/26/2',
-                'https://access.redhat.com/security/cve/CVE-2021-3711',
-                'https://cert-portal.siemens.com/productcert/pdf/ssa-389290.pdf',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=59f5e75f3bced8fc0e130d72a3f582cf7b480b46',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=59f5e75f3bced8fc0e130d72a3f582cf7b480b46',
-                'https://lists.apache.org/thread.html/r18995de860f0e63635f3008fd2a6aca82394249476d21691e7c59c9e%40%3Cdev.tomcat.apache.org%3E',
-                'https://lists.apache.org/thread.html/r18995de860f0e63635f3008fd2a6aca82394249476d21691e7c59c9e@%3Cdev.tomcat.apache.org%3E',
-                'https://lists.apache.org/thread.html/rad5d9f83f0d11fb3f8bb148d179b8a9ad7c6a17f18d70e5805a713d1%40%3Cdev.tomcat.apache.org%3E',
-                'https://lists.apache.org/thread.html/rad5d9f83f0d11fb3f8bb148d179b8a9ad7c6a17f18d70e5805a713d1@%3Cdev.tomcat.apache.org%3E',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-3711',
-                'https://rustsec.org/advisories/RUSTSEC-2021-0097.html',
-                'https://security.gentoo.org/glsa/202209-02',
-                'https://security.gentoo.org/glsa/202210-02',
-                'https://security.netapp.com/advisory/ntap-20210827-0010',
-                'https://security.netapp.com/advisory/ntap-20210827-0010/',
-                'https://security.netapp.com/advisory/ntap-20211022-0003',
-                'https://security.netapp.com/advisory/ntap-20211022-0003/',
-                'https://security.netapp.com/advisory/ntap-20240621-0006',
-                'https://security.netapp.com/advisory/ntap-20240621-0006/',
-                'https://ubuntu.com/security/notices/USN-5051-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-3711',
-                'https://www.debian.org/security/2021/dsa-4963',
-                'https://www.openssl.org/news/secadv/20210824.txt',
-                'https://www.oracle.com/security-alerts/cpuapr2022.html',
-                'https://www.oracle.com/security-alerts/cpujan2022.html',
-                'https://www.oracle.com/security-alerts/cpuoct2021.html',
-                'https://www.tenable.com/security/tns-2021-16',
-                'https://www.tenable.com/security/tns-2022-02'
-              ],
-              'severity':   'CRITICAL',
-              'suppressed': false,
-              'title':      'openssl: SM2 Decryption Buffer Overflow'
-            },
-            {
-              'cve':  'CVE-2021-3712',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '7.4',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H'
-                },
-                'nvd': {
-                  'v3score':  '7.4',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.4',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-125'
-              ],
-              'description':   "ASN.1 strings are represented internally within OpenSSL as an ASN1_STRING structure which contains a buffer holding the string data and a field holding the buffer length. This contrasts with normal C strings which are repesented as a buffer for the string data which is terminated with a NUL (0) byte. Although not a strict requirement, ASN.1 strings that are parsed using OpenSSL's own \"d2i\" functions (and other similar parsing functions) as well as any string whose value has been set with the ASN1_STRING_set() function will additionally NUL terminate the byte array in the ASN1_STRING structure. However, it is possible for applications to directly construct valid ASN1_STRING structures which do not NUL terminate the byte array by directly setting the \"data\" and \"length\" fields in the ASN1_STRING array. This can also happen by using the ASN1_STRING_set0() function. Numerous OpenSSL functions that print ASN.1 data have been found to assume that the ASN1_STRING byte array will be NUL terminated, even though this is not guaranteed for strings that have been directly constructed. Where an application requests an ASN.1 structure to be printed, and where that ASN.1 structure contains ASN1_STRINGs that have been directly constructed by the application without NUL terminating the \"data\" field, then a read buffer overrun can occur. The same thing can also occur during name constraints processing of certificates (for example if a certificate has been directly constructed by the application instead of loading it via the OpenSSL parsing functions, and the certificate contains non NUL terminated ASN1_STRING structures). It can also occur in the X509_get1_email(), X509_REQ_get1_email() and X509_get1_ocsp() functions. If a malicious actor can cause an application to directly construct an ASN1_STRING and then process it through one of the affected OpenSSL functions then this issue could be hit. This might result in a crash (causing a Denial of Service attack). It could also result in the disclosure of private memory contents (such as private keys, or sensitive plaintext). Fixed in OpenSSL 1.1.1l (Affected 1.1.1-1.1.1k). Fixed in OpenSSL 1.0.2za (Affected 1.0.2-1.0.2y).",
-              'diffID':        'sha256:bc276c40b172b1c5467277d36db5308a203a48262d5f278766cf083947d05466',
-              'fixedVersions': [
-                '1.1.1l-r0'
-              ],
-              'installedVersion': '1.1.1k-r0',
-              'packageName':      'libssl1.1',
-              'purl':             'pkg:apk/alpine/libssl1.1@1.1.1k-r0?arch=x86_64&distro=3.14.1',
-              'references':       [
-                'http://www.openwall.com/lists/oss-security/2021/08/26/2',
-                'https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2021-3712.json',
-                'https://access.redhat.com/security/cve/CVE-2021-3712',
-                'https://cert-portal.siemens.com/productcert/pdf/ssa-244969.pdf',
-                'https://cert-portal.siemens.com/productcert/pdf/ssa-389290.pdf',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=94d23fcff9b2a7a8368dfe52214d5c2569882c11',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=ccb0a11145ee72b042d10593a64eaf9e8a55ec12',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=94d23fcff9b2a7a8368dfe52214d5c2569882c11',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=ccb0a11145ee72b042d10593a64eaf9e8a55ec12',
-                'https://kc.mcafee.com/corporate/index?page=content&id=SB10366',
-                'https://linux.oracle.com/cve/CVE-2021-3712.html',
-                'https://linux.oracle.com/errata/ELSA-2022-9023.html',
-                'https://lists.apache.org/thread.html/r18995de860f0e63635f3008fd2a6aca82394249476d21691e7c59c9e%40%3Cdev.tomcat.apache.org%3E',
-                'https://lists.apache.org/thread.html/r18995de860f0e63635f3008fd2a6aca82394249476d21691e7c59c9e@%3Cdev.tomcat.apache.org%3E',
-                'https://lists.apache.org/thread.html/rad5d9f83f0d11fb3f8bb148d179b8a9ad7c6a17f18d70e5805a713d1%40%3Cdev.tomcat.apache.org%3E',
-                'https://lists.apache.org/thread.html/rad5d9f83f0d11fb3f8bb148d179b8a9ad7c6a17f18d70e5805a713d1@%3Cdev.tomcat.apache.org%3E',
-                'https://lists.debian.org/debian-lts-announce/2021/09/msg00014.html',
-                'https://lists.debian.org/debian-lts-announce/2021/09/msg00021.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-3712',
-                'https://rustsec.org/advisories/RUSTSEC-2021-0098.html',
-                'https://security.gentoo.org/glsa/202209-02',
-                'https://security.gentoo.org/glsa/202210-02',
-                'https://security.netapp.com/advisory/ntap-20210827-0010',
-                'https://security.netapp.com/advisory/ntap-20210827-0010/',
-                'https://security.netapp.com/advisory/ntap-20240621-0006',
-                'https://security.netapp.com/advisory/ntap-20240621-0006/',
-                'https://ubuntu.com/security/notices/USN-5051-1',
-                'https://ubuntu.com/security/notices/USN-5051-2',
-                'https://ubuntu.com/security/notices/USN-5051-3',
-                'https://ubuntu.com/security/notices/USN-5051-4 (regression only in trusty/esm)',
-                'https://ubuntu.com/security/notices/USN-5088-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-3712',
-                'https://www.debian.org/security/2021/dsa-4963',
-                'https://www.openssl.org/news/secadv/20210824.txt',
-                'https://www.oracle.com/security-alerts/cpuapr2022.html',
-                'https://www.oracle.com/security-alerts/cpujan2022.html',
-                'https://www.oracle.com/security-alerts/cpuoct2021.html',
-                'https://www.tenable.com/security/tns-2021-16',
-                'https://www.tenable.com/security/tns-2022-02'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: Read buffer overruns processing ASN.1 strings'
-            },
-            {
-              'cve':  'CVE-2022-0778',
-              'cvss': {
-                'bitnami': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'ghsa': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'nvd': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-835'
-              ],
-              'description':   'The BN_mod_sqrt() function, which computes a modular square root, contains a bug that can cause it to loop forever for non-prime moduli. Internally this function is used when parsing certificates that contain elliptic curve public keys in compressed form or explicit elliptic curve parameters with a base point encoded in compressed form. It is possible to trigger the infinite loop by crafting a certificate that has invalid explicit curve parameters. Since certificate parsing happens prior to verification of the certificate signature, any process that parses an externally supplied certificate may thus be subject to a denial of service attack. The infinite loop can also be reached when parsing crafted private keys as they can contain explicit elliptic curve parameters. Thus vulnerable situations include: - TLS clients consuming server certificates - TLS servers consuming client certificates - Hosting providers taking certificates or private keys from customers - Certificate authorities parsing certification requests from subscribers - Anything else which parses ASN.1 elliptic curve parameters Also any other applications that use the BN_mod_sqrt() where the attacker can control the parameter values are vulnerable to this DoS issue. In the OpenSSL 1.0.2 version the public key is not parsed during initial parsing of the certificate which makes it slightly harder to trigger the infinite loop. However any operation which requires the public key from the certificate will trigger the infinite loop. In particular the attacker can use a self-signed certificate to trigger the loop during verification of the certificate signature. This issue affects OpenSSL versions 1.0.2, 1.1.1 and 3.0. It was addressed in the releases of 1.1.1n and 3.0.2 on the 15th March 2022. Fixed in OpenSSL 3.0.2 (Affected 3.0.0,3.0.1). Fixed in OpenSSL 1.1.1n (Affected 1.1.1-1.1.1m). Fixed in OpenSSL 1.0.2zd (Affected 1.0.2-1.0.2zc).',
-              'diffID':        'sha256:bc276c40b172b1c5467277d36db5308a203a48262d5f278766cf083947d05466',
-              'fixedVersions': [
-                '1.1.1n-r0'
-              ],
-              'installedVersion': '1.1.1k-r0',
-              'packageName':      'libssl1.1',
-              'purl':             'pkg:apk/alpine/libssl1.1@1.1.1k-r0?arch=x86_64&distro=3.14.1',
-              'references':       [
-                'http://packetstormsecurity.com/files/167344/OpenSSL-1.0.2-1.1.1-3.0-BN_mod_sqrt-Infinite-Loop.html',
-                'http://seclists.org/fulldisclosure/2022/May/33',
-                'http://seclists.org/fulldisclosure/2022/May/35',
-                'http://seclists.org/fulldisclosure/2022/May/38',
-                'https://access.redhat.com/errata/RHSA-2022:5326',
-                'https://access.redhat.com/security/cve/CVE-2022-0778',
-                'https://bugzilla.redhat.com/2062202',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2062202',
-                'https://cert-portal.siemens.com/productcert/pdf/ssa-712929.pdf',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-0778',
-                'https://errata.almalinux.org/8/ALSA-2022-5326.html',
-                'https://errata.rockylinux.org/RLSA-2022:4899',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=3118eb64934499d93db3230748a452351d1d9a65',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=380085481c64de749a6dd25cdf0bcf4360b30f83',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=a466912611aa6cbdf550cd10601390e587451246',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=3118eb64934499d93db3230748a452351d1d9a65',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=380085481c64de749a6dd25cdf0bcf4360b30f83',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=a466912611aa6cbdf550cd10601390e587451246',
-                'https://linux.oracle.com/cve/CVE-2022-0778.html',
-                'https://linux.oracle.com/errata/ELSA-2022-9272.html',
-                'https://lists.debian.org/debian-lts-announce/2022/03/msg00023.html',
-                'https://lists.debian.org/debian-lts-announce/2022/03/msg00024.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/323SNN6ZX7PRJJWP2BUAFLPUAE42XWLZ',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/323SNN6ZX7PRJJWP2BUAFLPUAE42XWLZ/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GDB3GQVJPXJE7X5C5JN6JAA4XUDWD6E6',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GDB3GQVJPXJE7X5C5JN6JAA4XUDWD6E6/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/W6K3PR542DXWLEFFMFIDMME4CWMHJRMG',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/W6K3PR542DXWLEFFMFIDMME4CWMHJRMG/',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/323SNN6ZX7PRJJWP2BUAFLPUAE42XWLZ',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/GDB3GQVJPXJE7X5C5JN6JAA4XUDWD6E6',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/W6K3PR542DXWLEFFMFIDMME4CWMHJRMG',
-                'https://nvd.nist.gov/vuln/detail/CVE-2022-0778',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2022-0002',
-                'https://rustsec.org/advisories/RUSTSEC-2022-0014.html',
-                'https://security.gentoo.org/glsa/202210-02',
-                'https://security.netapp.com/advisory/ntap-20220321-0002',
-                'https://security.netapp.com/advisory/ntap-20220321-0002/',
-                'https://security.netapp.com/advisory/ntap-20220429-0005',
-                'https://security.netapp.com/advisory/ntap-20220429-0005/',
-                'https://security.netapp.com/advisory/ntap-20240621-0006',
-                'https://security.netapp.com/advisory/ntap-20240621-0006/',
-                'https://support.apple.com/kb/HT213255',
-                'https://support.apple.com/kb/HT213256',
-                'https://support.apple.com/kb/HT213257',
-                'https://ubuntu.com/security/notices/USN-5328-1',
-                'https://ubuntu.com/security/notices/USN-5328-2',
-                'https://ubuntu.com/security/notices/USN-6457-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2022-0778',
-                'https://www.debian.org/security/2022/dsa-5103',
-                'https://www.openssl.org/news/secadv/20220315.txt',
-                'https://www.oracle.com/security-alerts/cpuapr2022.html',
-                'https://www.oracle.com/security-alerts/cpujul2022.html',
-                'https://www.tenable.com/security/tns-2022-06',
-                'https://www.tenable.com/security/tns-2022-07',
-                'https://www.tenable.com/security/tns-2022-08',
-                'https://www.tenable.com/security/tns-2022-09'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: Infinite loop in BN_mod_sqrt() reachable when parsing certificates'
-            },
-            {
-              'cve':  'CVE-2022-4450',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'nvd': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-415'
-              ],
-              'description':   'The function PEM_read_bio_ex() reads a PEM file from a BIO and parses and\ndecodes the "name" (e.g. "CERTIFICATE"), any header data and the payload data.\nIf the function succeeds then the "name_out", "header" and "data" arguments are\npopulated with pointers to buffers containing the relevant decoded data. The\ncaller is responsible for freeing those buffers. It is possible to construct a\nPEM file that results in 0 bytes of payload data. In this case PEM_read_bio_ex()\nwill return a failure code but will populate the header argument with a pointer\nto a buffer that has already been freed. If the caller also frees this buffer\nthen a double free will occur. This will most likely lead to a crash. This\ncould be exploited by an attacker who has the ability to supply malicious PEM\nfiles for parsing to achieve a denial of service attack.\n\nThe functions PEM_read_bio() and PEM_read() are simple wrappers around\nPEM_read_bio_ex() and therefore these functions are also directly affected.\n\nThese functions are also called indirectly by a number of other OpenSSL\nfunctions including PEM_X509_INFO_read_bio_ex() and\nSSL_CTX_use_serverinfo_file() which are also vulnerable. Some OpenSSL internal\nuses of these functions are not vulnerable because the caller does not free the\nheader argument if PEM_read_bio_ex() returns a failure code. These locations\ninclude the PEM_read_bio_TYPE() functions as well as the decoders introduced in\nOpenSSL 3.0.\n\nThe OpenSSL asn1parse command line application is also impacted by this issue.',
-              'diffID':        'sha256:bc276c40b172b1c5467277d36db5308a203a48262d5f278766cf083947d05466',
-              'fixedVersions': [
-                '1.1.1t-r0'
-              ],
-              'installedVersion': '1.1.1k-r0',
-              'packageName':      'libssl1.1',
-              'purl':             'pkg:apk/alpine/libssl1.1@1.1.1k-r0?arch=x86_64&distro=3.14.1',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2023:2165',
-                'https://access.redhat.com/security/cve/CVE-2022-4450',
-                'https://bugzilla.redhat.com/1960321',
-                'https://bugzilla.redhat.com/2164440',
-                'https://bugzilla.redhat.com/2164487',
-                'https://bugzilla.redhat.com/2164492',
-                'https://bugzilla.redhat.com/2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144000',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144003',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144006',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144008',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144010',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144012',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144015',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144017',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144019',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2145170',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2158412',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164440',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164487',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164488',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164492',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164497',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164499',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164500',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4203',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4304',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4450',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0215',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0216',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0217',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0286',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0401',
-                'https://errata.almalinux.org/9/ALSA-2023-2165.html',
-                'https://errata.rockylinux.org/RLSA-2023:0946',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=63bcf189be73a9cc1264059bed6f57974be74a83',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=bbcf509bd046b34cca19c766bbddc31683d0858b',
-                'https://linux.oracle.com/cve/CVE-2022-4450.html',
-                'https://linux.oracle.com/errata/ELSA-2023-32791.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2022-4450',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0003',
-                'https://rustsec.org/advisories/RUSTSEC-2023-0010.html',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://ubuntu.com/security/notices/USN-5844-1',
-                'https://ubuntu.com/security/notices/USN-6564-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2022-4450',
-                'https://www.openssl.org/news/secadv/20230207.txt'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: double free after calling PEM_read_bio_ex'
-            },
-            {
-              'cve':  'CVE-2023-0215',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'nvd': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   'The public API function BIO_new_NDEF is a helper function used for streaming\nASN.1 data via a BIO. It is primarily used internally to OpenSSL to support the\nSMIME, CMS and PKCS7 streaming capabilities, but may also be called directly by\nend user applications.\n\nThe function receives a BIO from the caller, prepends a new BIO_f_asn1 filter\nBIO onto the front of it to form a BIO chain, and then returns the new head of\nthe BIO chain to the caller. Under certain conditions, for example if a CMS\nrecipient public key is invalid, the new filter BIO is freed and the function\nreturns a NULL result indicating a failure. However, in this case, the BIO chain\nis not properly cleaned up and the BIO passed by the caller still retains\ninternal pointers to the previously freed filter BIO. If the caller then goes on\nto call BIO_pop() on the BIO then a use-after-free will occur. This will most\nlikely result in a crash.\n\n\n\nThis scenario occurs directly in the internal function B64_write_ASN1() which\nmay cause BIO_new_NDEF() to be called and will subsequently call BIO_pop() on\nthe BIO. This internal function is in turn called by the public API functions\nPEM_write_bio_ASN1_stream, PEM_write_bio_CMS_stream, PEM_write_bio_PKCS7_stream,\nSMIME_write_ASN1, SMIME_write_CMS and SMIME_write_PKCS7.\n\nOther public API functions that may be impacted by this include\ni2d_ASN1_bio_stream, BIO_new_CMS, BIO_new_PKCS7, i2d_CMS_bio_stream and\ni2d_PKCS7_bio_stream.\n\nThe OpenSSL cms and smime command line applications are similarly affected.',
-              'diffID':        'sha256:bc276c40b172b1c5467277d36db5308a203a48262d5f278766cf083947d05466',
-              'fixedVersions': [
-                '1.1.1t-r0'
-              ],
-              'installedVersion': '1.1.1k-r0',
-              'packageName':      'libssl1.1',
-              'purl':             'pkg:apk/alpine/libssl1.1@1.1.1k-r0?arch=x86_64&distro=3.14.1',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2023:2165',
-                'https://access.redhat.com/security/cve/CVE-2023-0215',
-                'https://bugzilla.redhat.com/1960321',
-                'https://bugzilla.redhat.com/2164440',
-                'https://bugzilla.redhat.com/2164487',
-                'https://bugzilla.redhat.com/2164492',
-                'https://bugzilla.redhat.com/2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144000',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144003',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144006',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144008',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144010',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144012',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144015',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144017',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144019',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2145170',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2158412',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164440',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164487',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164488',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164492',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164497',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164499',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164500',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4203',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4304',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4450',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0215',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0216',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0217',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0286',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0401',
-                'https://errata.almalinux.org/9/ALSA-2023-2165.html',
-                'https://errata.rockylinux.org/RLSA-2023:0946',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=8818064ce3c3c0f1b740a5aaba2a987e75bfbafd',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=9816136fe31d92ace4037d5da5257f763aeeb4eb',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=c3829dd8825c654652201e16f8a0a0c46ee3f344',
-                'https://linux.oracle.com/cve/CVE-2023-0215.html',
-                'https://linux.oracle.com/errata/ELSA-2023-32791.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-0215',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0003',
-                'https://rustsec.org/advisories/RUSTSEC-2023-0009.html',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://security.netapp.com/advisory/ntap-20230427-0007',
-                'https://security.netapp.com/advisory/ntap-20230427-0007/',
-                'https://security.netapp.com/advisory/ntap-20230427-0009',
-                'https://security.netapp.com/advisory/ntap-20230427-0009/',
-                'https://security.netapp.com/advisory/ntap-20240621-0006',
-                'https://security.netapp.com/advisory/ntap-20240621-0006/',
-                'https://ubuntu.com/security/notices/USN-5844-1',
-                'https://ubuntu.com/security/notices/USN-5845-1',
-                'https://ubuntu.com/security/notices/USN-5845-2',
-                'https://ubuntu.com/security/notices/USN-6564-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-0215',
-                'https://www.openssl.org/news/secadv/20230207.txt'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: use-after-free following BIO_new_NDEF'
-            },
-            {
-              'cve':  'CVE-2023-0286',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '7.4',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H'
-                },
-                'nvd': {
-                  'v3score':  '7.4',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7.4',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-843'
-              ],
-              'description':   'There is a type confusion vulnerability relating to X.400 address processing\ninside an X.509 GeneralName. X.400 addresses were parsed as an ASN1_STRING but\nthe public structure definition for GENERAL_NAME incorrectly specified the type\nof the x400Address field as ASN1_TYPE. This field is subsequently interpreted by\nthe OpenSSL function GENERAL_NAME_cmp as an ASN1_TYPE rather than an\nASN1_STRING.\n\nWhen CRL checking is enabled (i.e. the application sets the\nX509_V_FLAG_CRL_CHECK flag), this vulnerability may allow an attacker to pass\narbitrary pointers to a memcmp call, enabling them to read memory contents or\nenact a denial of service. In most cases, the attack requires the attacker to\nprovide both the certificate chain and CRL, neither of which need to have a\nvalid signature. If the attacker only controls one of these inputs, the other\ninput must already contain an X.400 address as a CRL distribution point, which\nis uncommon. As such, this vulnerability is most likely to only affect\napplications which have implemented their own functionality for retrieving CRLs\nover a network.',
-              'diffID':        'sha256:bc276c40b172b1c5467277d36db5308a203a48262d5f278766cf083947d05466',
-              'fixedVersions': [
-                '1.1.1t-r0'
-              ],
-              'installedVersion': '1.1.1k-r0',
-              'packageName':      'libssl1.1',
-              'purl':             'pkg:apk/alpine/libssl1.1@1.1.1k-r0?arch=x86_64&distro=3.14.1',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2025:7937',
-                'https://access.redhat.com/security/cve/CVE-2023-0286',
-                'https://access.redhat.com/security/cve/cve-2023-0286',
-                'https://bugzilla.redhat.com/2164440',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144000',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144003',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144006',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144008',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144010',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144012',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144015',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144017',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144019',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2145170',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2158412',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164440',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164487',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164488',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164492',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164497',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164499',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164500',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4203',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4304',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4450',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0215',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0216',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0217',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0286',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0401',
-                'https://errata.almalinux.org/9/ALSA-2025-7937.html',
-                'https://errata.rockylinux.org/RLSA-2023:0946',
-                'https://ftp.openbsd.org/pub/OpenBSD/LibreSSL/libressl-3.6.2-relnotes.txt',
-                'https://ftp.openbsd.org/pub/OpenBSD/patches/7.2/common/018_x509.patch.sig',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=2c6c9d439b484e1ba9830d8454a34fa4f80fdfe9',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=2f7530077e0ef79d98718138716bc51ca0cad658',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=fd2af07dc083a350c959147097003a14a5e8ac4d',
-                'https://github.com/pyca/cryptography',
-                'https://github.com/pyca/cryptography/security/advisories/GHSA-x4qr-2fvf-3mr5',
-                'https://linux.oracle.com/cve/CVE-2023-0286.html',
-                'https://linux.oracle.com/errata/ELSA-2025-7937.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-0286',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0003',
-                'https://rustsec.org/advisories/RUSTSEC-2023-0006.html',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://ubuntu.com/security/notices/USN-5844-1',
-                'https://ubuntu.com/security/notices/USN-5845-1',
-                'https://ubuntu.com/security/notices/USN-5845-2',
-                'https://ubuntu.com/security/notices/USN-6564-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-0286',
-                'https://www.openssl.org/news/secadv/20230207.txt'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: X.400 address type confusion in X.509 GeneralName'
-            },
-            {
-              'cve':  'CVE-2023-0464',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-295'
-              ],
-              'description':   "A security vulnerability has been identified in all supported versions\n\nof OpenSSL related to the verification of X.509 certificate chains\nthat include policy constraints.  Attackers may be able to exploit this\nvulnerability by creating a malicious certificate chain that triggers\nexponential use of computational resources, leading to a denial-of-service\n(DoS) attack on affected systems.\n\nPolicy processing is disabled by default but can be enabled by passing\nthe `-policy' argument to the command line utilities or by calling the\n`X509_VERIFY_PARAM_set1_policies()' function.",
-              'diffID':        'sha256:bc276c40b172b1c5467277d36db5308a203a48262d5f278766cf083947d05466',
-              'fixedVersions': [
-                '1.1.1t-r1'
-              ],
-              'installedVersion': '1.1.1k-r0',
-              'packageName':      'libssl1.1',
-              'purl':             'pkg:apk/alpine/libssl1.1@1.1.1k-r0?arch=x86_64&distro=3.14.1',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2023:3722',
-                'https://access.redhat.com/security/cve/CVE-2023-0464',
-                'https://bugzilla.redhat.com/2181082',
-                'https://bugzilla.redhat.com/2182561',
-                'https://bugzilla.redhat.com/2182565',
-                'https://bugzilla.redhat.com/2188461',
-                'https://bugzilla.redhat.com/2207947',
-                'https://errata.almalinux.org/9/ALSA-2023-3722.html',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=2017771e2db3e2b96f89bbe8766c3209f6a99545',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=2dcd4f1e3115f38cefa43e3efbe9b801c27e642e',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=879f7080d7e141f415c79eaa3a8ac4a3dad0348b',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=959c59c7a0164117e7f8366466a32bb1f8d77ff1',
-                'https://linux.oracle.com/cve/CVE-2023-0464.html',
-                'https://linux.oracle.com/errata/ELSA-2023-3722.html',
-                'https://lists.debian.org/debian-lts-announce/2023/06/msg00011.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-0464',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://security.netapp.com/advisory/ntap-20230406-0006/',
-                'https://security.netapp.com/advisory/ntap-20240621-0006/',
-                'https://ubuntu.com/security/notices/USN-6039-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.couchbase.com/alerts/',
-                'https://www.cve.org/CVERecord?id=CVE-2023-0464',
-                'https://www.debian.org/security/2023/dsa-5417',
-                'https://www.openssl.org/news/secadv/20230322.txt'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'openssl: Denial of service by excessive resource usage in verifying X509 policy constraints'
-            },
-            {
-              'cve':  'CVE-2022-2097',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N'
-                },
-                'nvd': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N'
-                },
-                'redhat': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-327'
-              ],
-              'description':   "AES OCB mode for 32-bit x86 platforms using the AES-NI assembly optimised implementation will not encrypt the entirety of the data under some circumstances. This could reveal sixteen bytes of data that was preexisting in the memory that wasn't written. In the special case of \"in place\" encryption, sixteen bytes of the plaintext would be revealed. Since OpenSSL does not support OCB based cipher suites for TLS and DTLS, they are both unaffected. Fixed in OpenSSL 3.0.5 (Affected 3.0.0-3.0.4). Fixed in OpenSSL 1.1.1q (Affected 1.1.1-1.1.1p).",
-              'diffID':        'sha256:bc276c40b172b1c5467277d36db5308a203a48262d5f278766cf083947d05466',
-              'fixedVersions': [
-                '1.1.1q-r0'
-              ],
-              'installedVersion': '1.1.1k-r0',
-              'packageName':      'libssl1.1',
-              'purl':             'pkg:apk/alpine/libssl1.1@1.1.1k-r0?arch=x86_64&distro=3.14.1',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2022:6224',
-                'https://access.redhat.com/security/cve/CVE-2022-2097',
-                'https://bugzilla.redhat.com/2081494',
-                'https://bugzilla.redhat.com/2087911',
-                'https://bugzilla.redhat.com/2087913',
-                'https://bugzilla.redhat.com/2097310',
-                'https://bugzilla.redhat.com/2104905',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2081494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2097310',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2100554',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2104905',
-                'https://cert-portal.siemens.com/productcert/pdf/ssa-332410.pdf',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-1292',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-2068',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-2097',
-                'https://errata.almalinux.org/9/ALSA-2022-6224.html',
-                'https://errata.rockylinux.org/RLSA-2022:5818',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=919925673d6c9cfed3c1085497f5dfbbed5fc431',
-                'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=a98f339ddd7e8f487d6e0088d4a9a42324885a93',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=919925673d6c9cfed3c1085497f5dfbbed5fc431',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=a98f339ddd7e8f487d6e0088d4a9a42324885a93',
-                'https://github.com/alexcrichton/openssl-src-rs',
-                'https://linux.oracle.com/cve/CVE-2022-2097.html',
-                'https://linux.oracle.com/errata/ELSA-2022-9955.html',
-                'https://lists.debian.org/debian-lts-announce/2023/02/msg00019.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/R6CK57NBQFTPUMXAPJURCGXUYT76NQAK',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/R6CK57NBQFTPUMXAPJURCGXUYT76NQAK/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/V6567JERRHHJW2GNGJGKDRNHR7SNPZK7',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/V6567JERRHHJW2GNGJGKDRNHR7SNPZK7/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VCMNWKERPBKOEBNL7CLTTX3ZZCZLH7XA',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VCMNWKERPBKOEBNL7CLTTX3ZZCZLH7XA/',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/R6CK57NBQFTPUMXAPJURCGXUYT76NQAK',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/R6CK57NBQFTPUMXAPJURCGXUYT76NQAK/',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/V6567JERRHHJW2GNGJGKDRNHR7SNPZK7',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/V6567JERRHHJW2GNGJGKDRNHR7SNPZK7/',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/VCMNWKERPBKOEBNL7CLTTX3ZZCZLH7XA',
-                'https://nvd.nist.gov/vuln/detail/CVE-2022-2097',
-                'https://rustsec.org/advisories/RUSTSEC-2022-0032.html',
-                'https://security.gentoo.org/glsa/202210-02',
-                'https://security.netapp.com/advisory/ntap-20220715-0011',
-                'https://security.netapp.com/advisory/ntap-20220715-0011/',
-                'https://security.netapp.com/advisory/ntap-20230420-0008',
-                'https://security.netapp.com/advisory/ntap-20230420-0008/',
-                'https://security.netapp.com/advisory/ntap-20240621-0006',
-                'https://security.netapp.com/advisory/ntap-20240621-0006/',
-                'https://ubuntu.com/security/notices/USN-5502-1',
-                'https://ubuntu.com/security/notices/USN-6457-1',
-                'https://www.cve.org/CVERecord?id=CVE-2022-2097',
-                'https://www.debian.org/security/2023/dsa-5343',
-                'https://www.openssl.org/news/secadv/20220705.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: AES OCB fails to encrypt some bytes'
-            },
-            {
-              'cve':  'CVE-2022-4304',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N'
-                },
-                'nvd': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N'
-                },
-                'redhat': {
-                  'v3score':  '5.9',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-203'
-              ],
-              'description':   'A timing based side channel exists in the OpenSSL RSA Decryption implementation\nwhich could be sufficient to recover a plaintext across a network in a\nBleichenbacher style attack. To achieve a successful decryption an attacker\nwould have to be able to send a very large number of trial messages for\ndecryption. The vulnerability affects all RSA padding modes: PKCS#1 v1.5,\nRSA-OEAP and RSASVE.\n\nFor example, in a TLS connection, RSA is commonly used by a client to send an\nencrypted pre-master secret to the server. An attacker that had observed a\ngenuine connection between a client and a server could use this flaw to send\ntrial messages to the server and record the time taken to process them. After a\nsufficiently large number of messages the attacker could recover the pre-master\nsecret used for the original connection and thus be able to decrypt the\napplication data sent over that connection.',
-              'diffID':        'sha256:bc276c40b172b1c5467277d36db5308a203a48262d5f278766cf083947d05466',
-              'fixedVersions': [
-                '1.1.1t-r0'
-              ],
-              'installedVersion': '1.1.1k-r0',
-              'packageName':      'libssl1.1',
-              'purl':             'pkg:apk/alpine/libssl1.1@1.1.1k-r0?arch=x86_64&distro=3.14.1',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2023:2165',
-                'https://access.redhat.com/security/cve/CVE-2022-4304',
-                'https://bugzilla.redhat.com/1960321',
-                'https://bugzilla.redhat.com/2164440',
-                'https://bugzilla.redhat.com/2164487',
-                'https://bugzilla.redhat.com/2164492',
-                'https://bugzilla.redhat.com/2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144000',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144003',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144006',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144008',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144010',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144012',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144015',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144017',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2144019',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2145170',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2158412',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164440',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164487',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164488',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164492',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164494',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164497',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164499',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2164500',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4203',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4304',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4450',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0215',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0216',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0217',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0286',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0401',
-                'https://errata.almalinux.org/9/ALSA-2023-2165.html',
-                'https://errata.rockylinux.org/RLSA-2023:0946',
-                'https://linux.oracle.com/cve/CVE-2022-4304.html',
-                'https://linux.oracle.com/errata/ELSA-2023-32791.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2022-4304',
-                'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0003',
-                'https://rustsec.org/advisories/RUSTSEC-2023-0007.html',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://ubuntu.com/security/notices/USN-5844-1',
-                'https://ubuntu.com/security/notices/USN-6564-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2022-4304',
-                'https://www.openssl.org/news/secadv/20230207.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: timing attack in RSA Decryption implementation'
-            },
-            {
-              'cve':  'CVE-2023-0465',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N'
-                },
-                'redhat': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-295'
-              ],
-              'description':   "Applications that use a non-default option when verifying certificates may be\nvulnerable to an attack from a malicious CA to circumvent certain checks.\n\nInvalid certificate policies in leaf certificates are silently ignored by\nOpenSSL and other certificate policy checks are skipped for that certificate.\nA malicious CA could use this to deliberately assert invalid certificate policies\nin order to circumvent policy checking on the certificate altogether.\n\nPolicy processing is disabled by default but can be enabled by passing\nthe `-policy' argument to the command line utilities or by calling the\n`X509_VERIFY_PARAM_set1_policies()' function.",
-              'diffID':        'sha256:bc276c40b172b1c5467277d36db5308a203a48262d5f278766cf083947d05466',
-              'fixedVersions': [
-                '1.1.1t-r2'
-              ],
-              'installedVersion': '1.1.1k-r0',
-              'packageName':      'libssl1.1',
-              'purl':             'pkg:apk/alpine/libssl1.1@1.1.1k-r0?arch=x86_64&distro=3.14.1',
-              'references':       [
-                'https://access.redhat.com/errata/RHSA-2023:3722',
-                'https://access.redhat.com/security/cve/CVE-2023-0465',
-                'https://bugzilla.redhat.com/2181082',
-                'https://bugzilla.redhat.com/2182561',
-                'https://bugzilla.redhat.com/2182565',
-                'https://bugzilla.redhat.com/2188461',
-                'https://bugzilla.redhat.com/2207947',
-                'https://errata.almalinux.org/9/ALSA-2023-3722.html',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=10325176f3d3e98c6e2b3bf5ab1e3b334de6947a',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=1dd43e0709fece299b15208f36cc7c76209ba0bb',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=b013765abfa80036dc779dd0e50602c57bb3bf95',
-                'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=facfb1ab745646e97a1920977ae4a9965ea61d5c',
-                'https://linux.oracle.com/cve/CVE-2023-0465.html',
-                'https://linux.oracle.com/errata/ELSA-2023-3722.html',
-                'https://lists.debian.org/debian-lts-announce/2023/06/msg00011.html',
-                'https://nvd.nist.gov/vuln/detail/CVE-2023-0465',
-                'https://security.gentoo.org/glsa/202402-08',
-                'https://security.netapp.com/advisory/ntap-20230414-0001/',
-                'https://ubuntu.com/security/notices/USN-6039-1',
-                'https://ubuntu.com/security/notices/USN-7894-1',
-                'https://www.cve.org/CVERecord?id=CVE-2023-0465',
-                'https://www.debian.org/security/2023/dsa-5417',
-                'https://www.openssl.org/news/secadv/20230328.txt'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'openssl: Invalid certificate policies in leaf certificates are silently ignored'
-            },
-            {
-              'cve':  'CVE-2021-42378',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the getvar_i function",
-              'diffID':        'sha256:bc276c40b172b1c5467277d36db5308a203a48262d5f278766cf083947d05466',
-              'fixedVersions': [
-                '1.33.1-r6'
-              ],
-              'installedVersion': '1.33.1-r3',
-              'packageName':      'ssl_client',
-              'purl':             'pkg:apk/alpine/ssl_client@1.33.1-r3?arch=x86_64&distro=3.14.1',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42378',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42378',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42378'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the getvar_i()'
-            },
-            {
-              'cve':  'CVE-2021-42379',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the next_input_file function",
-              'diffID':        'sha256:bc276c40b172b1c5467277d36db5308a203a48262d5f278766cf083947d05466',
-              'fixedVersions': [
-                '1.33.1-r6'
-              ],
-              'installedVersion': '1.33.1-r3',
-              'packageName':      'ssl_client',
-              'purl':             'pkg:apk/alpine/ssl_client@1.33.1-r3?arch=x86_64&distro=3.14.1',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42379',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42379',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42379'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the next_input_file()'
-            },
-            {
-              'cve':  'CVE-2021-42380',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the clrvar function",
-              'diffID':        'sha256:bc276c40b172b1c5467277d36db5308a203a48262d5f278766cf083947d05466',
-              'fixedVersions': [
-                '1.33.1-r6'
-              ],
-              'installedVersion': '1.33.1-r3',
-              'packageName':      'ssl_client',
-              'purl':             'pkg:apk/alpine/ssl_client@1.33.1-r3?arch=x86_64&distro=3.14.1',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42380',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42380',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42380'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the clrvar()'
-            },
-            {
-              'cve':  'CVE-2021-42381',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the hash_init function",
-              'diffID':        'sha256:bc276c40b172b1c5467277d36db5308a203a48262d5f278766cf083947d05466',
-              'fixedVersions': [
-                '1.33.1-r6'
-              ],
-              'installedVersion': '1.33.1-r3',
-              'packageName':      'ssl_client',
-              'purl':             'pkg:apk/alpine/ssl_client@1.33.1-r3?arch=x86_64&distro=3.14.1',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42381',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42381',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42381'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the hash_init()'
-            },
-            {
-              'cve':  'CVE-2021-42382',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the getvar_s function",
-              'diffID':        'sha256:bc276c40b172b1c5467277d36db5308a203a48262d5f278766cf083947d05466',
-              'fixedVersions': [
-                '1.33.1-r6'
-              ],
-              'installedVersion': '1.33.1-r3',
-              'packageName':      'ssl_client',
-              'purl':             'pkg:apk/alpine/ssl_client@1.33.1-r3?arch=x86_64&distro=3.14.1',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42382',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42382',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42382'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the getvar_s()'
-            },
-            {
-              'cve':  'CVE-2021-42383',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the evaluate function",
-              'diffID':        'sha256:bc276c40b172b1c5467277d36db5308a203a48262d5f278766cf083947d05466',
-              'fixedVersions': [
-                '1.33.1-r6'
-              ],
-              'installedVersion': '1.33.1-r3',
-              'packageName':      'ssl_client',
-              'purl':             'pkg:apk/alpine/ssl_client@1.33.1-r3?arch=x86_64&distro=3.14.1',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42383',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42383',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42383'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the evaluate()'
-            },
-            {
-              'cve':  'CVE-2021-42384',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the handle_special function",
-              'diffID':        'sha256:bc276c40b172b1c5467277d36db5308a203a48262d5f278766cf083947d05466',
-              'fixedVersions': [
-                '1.33.1-r6'
-              ],
-              'installedVersion': '1.33.1-r3',
-              'packageName':      'ssl_client',
-              'purl':             'pkg:apk/alpine/ssl_client@1.33.1-r3?arch=x86_64&distro=3.14.1',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42384',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42384',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42384'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the handle_special()'
-            },
-            {
-              'cve':  'CVE-2021-42385',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the evaluate function",
-              'diffID':        'sha256:bc276c40b172b1c5467277d36db5308a203a48262d5f278766cf083947d05466',
-              'fixedVersions': [
-                '1.33.1-r6'
-              ],
-              'installedVersion': '1.33.1-r3',
-              'packageName':      'ssl_client',
-              'purl':             'pkg:apk/alpine/ssl_client@1.33.1-r3?arch=x86_64&distro=3.14.1',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42385',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42385',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42385'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the evaluate()'
-            },
-            {
-              'cve':  'CVE-2021-42386',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '7.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.6',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-416'
-              ],
-              'description':   "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the nvalloc function",
-              'diffID':        'sha256:bc276c40b172b1c5467277d36db5308a203a48262d5f278766cf083947d05466',
-              'fixedVersions': [
-                '1.33.1-r6'
-              ],
-              'installedVersion': '1.33.1-r3',
-              'packageName':      'ssl_client',
-              'purl':             'pkg:apk/alpine/ssl_client@1.33.1-r3?arch=x86_64&distro=3.14.1',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42386',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42386',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42386'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the nvalloc()'
-            },
-            {
-              'cve':  'CVE-2022-28391',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '8.8',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '6.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N'
-                }
-              },
-              'cwes': [
-                'CWE-88'
-              ],
-              'description':   "BusyBox through 1.35.0 allows remote attackers to execute arbitrary code if netstat is used to print a DNS PTR record's value to a VT compatible terminal. Alternatively, the attacker could choose to change the terminal's colors.",
-              'diffID':        'sha256:bc276c40b172b1c5467277d36db5308a203a48262d5f278766cf083947d05466',
-              'fixedVersions': [
-                '1.33.1-r7'
-              ],
-              'installedVersion': '1.33.1-r3',
-              'packageName':      'ssl_client',
-              'purl':             'pkg:apk/alpine/ssl_client@1.33.1-r3?arch=x86_64&distro=3.14.1',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2022-28391',
-                'https://git.alpinelinux.org/aports/plain/main/busybox/0001-libbb-sockaddr2str-ensure-only-printable-characters-.patch',
-                'https://git.alpinelinux.org/aports/plain/main/busybox/0002-nslookup-sanitize-all-printed-strings-with-printable.patch',
-                'https://gitlab.alpinelinux.org/alpine/aports/-/issues/13661',
-                'https://nvd.nist.gov/vuln/detail/CVE-2022-28391',
-                'https://www.cve.org/CVERecord?id=CVE-2022-28391'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'busybox: remote attackers may execute arbitrary code if netstat is used'
-            },
-            {
-              'cve':  'CVE-2021-42374',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.3',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '5.7',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-125'
-              ],
-              'description':   "An out-of-bounds heap read in Busybox's unlzma applet leads to information leak and denial of service when crafted LZMA-compressed input is decompressed. This can be triggered by any applet/format that",
-              'diffID':        'sha256:bc276c40b172b1c5467277d36db5308a203a48262d5f278766cf083947d05466',
-              'fixedVersions': [
-                '1.33.1-r4'
-              ],
-              'installedVersion': '1.33.1-r3',
-              'packageName':      'ssl_client',
-              'purl':             'pkg:apk/alpine/ssl_client@1.33.1-r3?arch=x86_64&distro=3.14.1',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42374',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42374',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://ubuntu.com/security/notices/USN-5179-1',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42374'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'busybox: out-of-bounds read in unlzma applet leads to information leak and denial of service when crafted LZMA-compressed input is decompressed'
-            },
-            {
-              'cve':  'CVE-2021-42375',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '5.5',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '4.1',
-                  'v3vector': 'CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-159'
-              ],
-              'description':   "An incorrect handling of a special element in Busybox's ash applet leads to denial of service when processing a crafted shell command, due to the shell mistaking specific characters for reserved characters. This may be used for DoS under rare conditions of filtered command input.",
-              'diffID':        'sha256:bc276c40b172b1c5467277d36db5308a203a48262d5f278766cf083947d05466',
-              'fixedVersions': [
-                '1.33.1-r5'
-              ],
-              'installedVersion': '1.33.1-r3',
-              'packageName':      'ssl_client',
-              'purl':             'pkg:apk/alpine/ssl_client@1.33.1-r3?arch=x86_64&distro=3.14.1',
-              'references':       [
-                'https://access.redhat.com/security/cve/CVE-2021-42375',
-                'https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog',
-                'https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2021-42375',
-                'https://security.netapp.com/advisory/ntap-20211223-0002/',
-                'https://www.cve.org/CVERecord?id=CVE-2021-42375'
-              ],
-              'severity':   'MEDIUM',
-              'suppressed': false,
-              'title':      'busybox: incorrect handling of a special element in ash applet leads to denial of service when processing a crafted shell command'
-            },
-            {
-              'cve':  'CVE-2022-37434',
-              'cvss': {
-                'nvd': {
-                  'v3score':  '9.8',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H'
-                },
-                'redhat': {
-                  'v3score':  '7',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-787',
-                'CWE-120'
-              ],
-              'description':   'zlib through 1.2.12 has a heap-based buffer over-read or buffer overflow in inflate in inflate.c via a large gzip header extra field. NOTE: only applications that call inflateGetHeader are affected. Some common applications bundle the affected zlib source code but may be unable to call inflateGetHeader (e.g., see the nodejs/node reference).',
-              'diffID':        'sha256:bc276c40b172b1c5467277d36db5308a203a48262d5f278766cf083947d05466',
-              'fixedVersions': [
-                '1.2.12-r2'
-              ],
-              'installedVersion': '1.2.11-r3',
-              'packageName':      'zlib',
-              'purl':             'pkg:apk/alpine/zlib@1.2.11-r3?arch=x86_64&distro=3.14.1',
-              'references':       [
-                'http://seclists.org/fulldisclosure/2022/Oct/37',
-                'http://seclists.org/fulldisclosure/2022/Oct/38',
-                'http://seclists.org/fulldisclosure/2022/Oct/41',
-                'http://seclists.org/fulldisclosure/2022/Oct/42',
-                'http://www.openwall.com/lists/oss-security/2022/08/05/2',
-                'http://www.openwall.com/lists/oss-security/2022/08/09/1',
-                'https://access.redhat.com/errata/RHSA-2022:8291',
-                'https://access.redhat.com/security/cve/CVE-2022-37434',
-                'https://bugzilla.redhat.com/2116639',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2053198',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2077431',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2081296',
-                'https://bugzilla.redhat.com/show_bug.cgi?id=2116639',
-                'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-37434',
-                'https://errata.almalinux.org/9/ALSA-2022-8291.html',
-                'https://errata.rockylinux.org/RLSA-2022:8291',
-                'https://github.com/curl/curl/issues/9271',
-                'https://github.com/ivd38/zlib_overflow',
-                'https://github.com/madler/zlib/blob/21767c654d31d2dccdde4330529775c6c5fd5389/zlib.h#L1062-L1063',
-                'https://github.com/madler/zlib/commit/1eb7682f845ac9e9bf9ae35bbfb3bad5dacbd91d',
-                'https://github.com/madler/zlib/commit/eff308af425b67093bab25f80f1ae950166bece1',
-                'https://github.com/nodejs/node/blob/75b68c6e4db515f76df73af476eccf382bbcb00a/deps/zlib/inflate.c#L762-L764',
-                'https://linux.oracle.com/cve/CVE-2022-37434.html',
-                'https://linux.oracle.com/errata/ELSA-2023-1095.html',
-                'https://lists.debian.org/debian-lts-announce/2022/09/msg00012.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JWN4VE3JQR4O2SOUS5TXNLANRPMHWV4I/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NMBOJ77A7T7PQCARMDUK75TE6LLESZ3O/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PAVPQNCG3XRLCLNSQRM3KAN5ZFMVXVTY/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/X5U7OTKZSHY2I3ZFJSR2SHFHW72RKGDK/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YRQAI7H4M4RQZ2IWZUEEXECBE5D56BH2/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2022-37434',
-                'https://security.netapp.com/advisory/ntap-20220901-0005/',
-                'https://security.netapp.com/advisory/ntap-20230427-0007/',
-                'https://support.apple.com/kb/HT213488',
-                'https://support.apple.com/kb/HT213489',
-                'https://support.apple.com/kb/HT213490',
-                'https://support.apple.com/kb/HT213491',
-                'https://support.apple.com/kb/HT213493',
-                'https://support.apple.com/kb/HT213494',
-                'https://ubuntu.com/security/notices/USN-5570-1',
-                'https://ubuntu.com/security/notices/USN-5570-2',
-                'https://ubuntu.com/security/notices/USN-5573-1',
-                'https://ubuntu.com/security/notices/USN-6736-1',
-                'https://ubuntu.com/security/notices/USN-6736-2',
-                'https://www.cve.org/CVERecord?id=CVE-2022-37434',
-                'https://www.debian.org/security/2022/dsa-5218'
-              ],
-              'severity':   'CRITICAL',
-              'suppressed': false,
-              'title':      'zlib: heap-based buffer over-read and overflow in inflate() in inflate.c via a large gzip header extra field'
-            },
-            {
-              'cve':  'CVE-2018-25032',
-              'cvss': {
-                'ghsa': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'nvd': {
-                  'v3score':  '7.5',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
-                },
-                'redhat': {
-                  'v3score':  '8.2',
-                  'v3vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H'
-                }
-              },
-              'cwes': [
-                'CWE-787'
-              ],
-              'description':   'zlib before 1.2.12 allows memory corruption when deflating (i.e., when compressing) if the input has many distant matches.',
-              'diffID':        'sha256:bc276c40b172b1c5467277d36db5308a203a48262d5f278766cf083947d05466',
-              'fixedVersions': [
-                '1.2.12-r0'
-              ],
-              'installedVersion': '1.2.11-r3',
-              'packageName':      'zlib',
-              'purl':             'pkg:apk/alpine/zlib@1.2.11-r3?arch=x86_64&distro=3.14.1',
-              'references':       [
-                'http://seclists.org/fulldisclosure/2022/May/33',
-                'http://seclists.org/fulldisclosure/2022/May/35',
-                'http://seclists.org/fulldisclosure/2022/May/38',
-                'http://www.openwall.com/lists/oss-security/2022/03/25/2',
-                'http://www.openwall.com/lists/oss-security/2022/03/26/1',
-                'https://access.redhat.com/errata/RHSA-2022:8420',
-                'https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-25032.json',
-                'https://access.redhat.com/security/cve/CVE-2018-25032',
-                'https://bugzilla.redhat.com/2067945',
-                'https://cert-portal.siemens.com/productcert/pdf/ssa-333517.pdf',
-                'https://errata.almalinux.org/9/ALSA-2022-8420.html',
-                'https://github.com/advisories/GHSA-jc36-42cf-vqwj',
-                'https://github.com/madler/zlib/commit/5c44459c3b28a9bd3283aaceab7c615f8020c531',
-                'https://github.com/madler/zlib/compare/v1.2.11...v1.2.12',
-                'https://github.com/madler/zlib/issues/605',
-                'https://github.com/rubysec/ruby-advisory-db/blob/master/gems/nokogiri/CVE-2018-25032.yml',
-                'https://github.com/sparklemotion/nokogiri/releases/tag/v1.13.4',
-                'https://github.com/sparklemotion/nokogiri/security/advisories/GHSA-v6gp-9mmm-c6p5',
-                'https://groups.google.com/g/ruby-security-ann/c/vX7qSjsvWis/m/TJWN4oOKBwAJ',
-                'https://linux.oracle.com/cve/CVE-2018-25032.html',
-                'https://linux.oracle.com/errata/ELSA-2022-9565.html',
-                'https://lists.debian.org/debian-lts-announce/2022/04/msg00000.html',
-                'https://lists.debian.org/debian-lts-announce/2022/05/msg00008.html',
-                'https://lists.debian.org/debian-lts-announce/2022/09/msg00023.html',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DCZFIJBJTZ7CL5QXBFKTQ22Q26VINRUF/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DF62MVMH3QUGMBDCB3DY2ERQ6EBHTADB/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JZZPTWRYQULAOL3AW7RZJNVZ2UONXCV4/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NS2D2GFPFGOJUL4WQ3DUAY7HF4VWQ77F/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VOKNP2L734AEL47NRYGVZIKEFOUBQY5Y/',
-                'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/XOKFMSNQ5D5WGMALBNBXU3GE442V74WU/',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/DCZFIJBJTZ7CL5QXBFKTQ22Q26VINRUF',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/DCZFIJBJTZ7CL5QXBFKTQ22Q26VINRUF/',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/DF62MVMH3QUGMBDCB3DY2ERQ6EBHTADB',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/DF62MVMH3QUGMBDCB3DY2ERQ6EBHTADB/',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/JZZPTWRYQULAOL3AW7RZJNVZ2UONXCV4',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/JZZPTWRYQULAOL3AW7RZJNVZ2UONXCV4/',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/NS2D2GFPFGOJUL4WQ3DUAY7HF4VWQ77F',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/NS2D2GFPFGOJUL4WQ3DUAY7HF4VWQ77F/',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/VOKNP2L734AEL47NRYGVZIKEFOUBQY5Y',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/VOKNP2L734AEL47NRYGVZIKEFOUBQY5Y/',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/XOKFMSNQ5D5WGMALBNBXU3GE442V74WU',
-                'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/XOKFMSNQ5D5WGMALBNBXU3GE442V74WU/',
-                'https://nvd.nist.gov/vuln/detail/CVE-2018-25032',
-                'https://security.gentoo.org/glsa/202210-42',
-                'https://security.netapp.com/advisory/ntap-20220526-0009',
-                'https://security.netapp.com/advisory/ntap-20220526-0009/',
-                'https://security.netapp.com/advisory/ntap-20220729-0004',
-                'https://security.netapp.com/advisory/ntap-20220729-0004/',
-                'https://support.apple.com/kb/HT213255',
-                'https://support.apple.com/kb/HT213256',
-                'https://support.apple.com/kb/HT213257',
-                'https://ubuntu.com/security/notices/USN-5355-1',
-                'https://ubuntu.com/security/notices/USN-5355-2',
-                'https://ubuntu.com/security/notices/USN-5359-1',
-                'https://ubuntu.com/security/notices/USN-5359-2',
-                'https://ubuntu.com/security/notices/USN-5739-1',
-                'https://ubuntu.com/security/notices/USN-6736-1',
-                'https://ubuntu.com/security/notices/USN-6736-2',
-                'https://www.cve.org/CVERecord?id=CVE-2018-25032',
-                'https://www.debian.org/security/2022/dsa-5111',
-                'https://www.openwall.com/lists/oss-security/2022/03/24/1',
-                'https://www.openwall.com/lists/oss-security/2022/03/28/1',
-                'https://www.openwall.com/lists/oss-security/2022/03/28/3',
-                'https://www.oracle.com/security-alerts/cpujul2022.html'
-              ],
-              'severity':   'HIGH',
-              'suppressed': false,
-              'title':      'zlib: A flaw found in zlib when compressing (not decompressing) certain inputs'
-            }
-          ]
-        }
-      ],
-      'summary': {
-        'critical':   3,
-        'high':       34,
-        'low':        0,
-        'medium':     10,
-        'suppressed': 0,
-        'unknown':    0
-      }
-    }
-  }
-];
\ No newline at end of file
diff --git a/pkg/sbomscanner-ui-ext/tmp/imagesByRepository.ts b/pkg/sbomscanner-ui-ext/tmp/imagesByRepository.ts
deleted file mode 100644
index a9b28cb..0000000
--- a/pkg/sbomscanner-ui-ext/tmp/imagesByRepository.ts
+++ /dev/null
@@ -1,2572 +0,0 @@
-export const imagesByRepository = [
-  {
-    'id':           'library/alpine,lsong-demo1',
-    'repository':   'library/alpine',
-    'registry':     'lsong-demo1',
-    'metadata':     { 'namespace': 'default' },
-    'cveCntByRepo': {
-      'critical': 90,
-      'high':     1308,
-      'medium':   922,
-      'low':      180,
-      'unknown':  0
-    },
-    'images': [
-      {
-        'id':            'default/057bac2937699cf9efbc2bce0bd4af115f9299fce80612fedccd02f7149da133',
-        'imageMetadata': {
-          'digest':      'sha256:701eaafb5abd6063d54a424fe49167499dcf35cf2f636be7adac6efb785a9d22',
-          'platform':    'linux/386',
-          'registry':    'lsong-demo1',
-          'registryURI': 'registry-1.docker.io',
-          'repository':  'library/alpine',
-          'tag':         '3.19.2'
-        },
-        'metadata':       { 'name': '057bac2937699cf9efbc2bce0bd4af115f9299fce80612fedccd02f7149da133' },
-        'imageReference': 'registry-1.docker.io/library/alpine:3.19.2',
-        'scanResult':     {
-          'critical': 0,
-          'high':     4,
-          'medium':   11,
-          'low':      7,
-          'unknown':  0
-        }
-      },
-      {
-        'id':            'default/0ce19683a457835b1a65ce5bca7792403bfb8487103bf49b66f3c5acff2579c8',
-        'imageMetadata': {
-          'digest':      'sha256:a243de15b52a44b19c2a02647b11fcf598007ff7f2b07cb8195a0979eff30a0d',
-          'platform':    'linux/ppc64le',
-          'registry':    'lsong-demo1',
-          'registryURI': 'registry-1.docker.io',
-          'repository':  'library/alpine',
-          'tag':         '3.13.6'
-        },
-        'metadata':       { 'name': '0ce19683a457835b1a65ce5bca7792403bfb8487103bf49b66f3c5acff2579c8' },
-        'imageReference': 'registry-1.docker.io/library/alpine:3.13.6',
-        'scanResult':     {
-          'critical': 1,
-          'high':     25,
-          'medium':   6,
-          'low':      0,
-          'unknown':  0
-        }
-      },
-      {
-        'id':            'default/11b6804126b01b05199670eb61ff5f26ad02c3bf4a7af5010f1daa660247b979',
-        'imageMetadata': {
-          'digest':      'sha256:801b48676d597c86ea0f149529e59353afafe1624814e598a973044e8e37db3c',
-          'platform':    'linux/arm/v7',
-          'registry':    'lsong-demo1',
-          'registryURI': 'registry-1.docker.io',
-          'repository':  'library/alpine',
-          'tag':         '3.20.5'
-        },
-        'metadata':       { 'name': '11b6804126b01b05199670eb61ff5f26ad02c3bf4a7af5010f1daa660247b979' },
-        'imageReference': 'registry-1.docker.io/library/alpine:3.20.5',
-        'scanResult':     {
-          'critical': 0,
-          'high':     4,
-          'medium':   9,
-          'low':      5,
-          'unknown':  0
-        }
-      },
-      {
-        'id':            'default/1322c3fb541e6b4a41f216decd057d43d980effd98568ed9cc232f09290db318',
-        'imageMetadata': {
-          'digest':      'sha256:176bc6c6e93528f4b729fae1f8dbd70b73861264dba3a3f64c49c92e1f42a5aa',
-          'platform':    'linux/s390x',
-          'registry':    'lsong-demo1',
-          'registryURI': 'registry-1.docker.io',
-          'repository':  'library/alpine',
-          'tag':         '3.17.1'
-        },
-        'metadata':       { 'name': '1322c3fb541e6b4a41f216decd057d43d980effd98568ed9cc232f09290db318' },
-        'imageReference': 'registry-1.docker.io/library/alpine:3.17.1',
-        'scanResult':     {
-          'critical': 0,
-          'high':     20,
-          'medium':   44,
-          'low':      4,
-          'unknown':  0
-        }
-      },
-      {
-        'id':            'default/13f4ac299b94b0c7b6ad1cd131adfdcceb5ee81ef2446114d7d54bb70fbcec39',
-        'imageMetadata': {
-          'digest':      'sha256:c3d45491770c51da4ef58318e3714da686bc7165338b7ab5ac758e75c7455efb',
-          'platform':    'linux/amd64',
-          'registry':    'lsong-demo1',
-          'registryURI': 'registry-1.docker.io',
-          'repository':  'library/alpine',
-          'tag':         '3.11.12'
-        },
-        'metadata':       { 'name': '13f4ac299b94b0c7b6ad1cd131adfdcceb5ee81ef2446114d7d54bb70fbcec39' },
-        'imageReference': 'registry-1.docker.io/library/alpine:3.11.12',
-        'scanResult':     {
-          'critical': 1,
-          'high':     18,
-          'medium':   2,
-          'low':      0,
-          'unknown':  0
-        }
-      },
-      {
-        'id':            'default/1579ec19943976bfa925404fafce73dfb102a9f0f59185f9d5bfee1e71b99545',
-        'imageMetadata': {
-          'digest':      'sha256:a180ec8e5c7247c920c91508fa4ce86088946cc9e65f4aeb39091038bba88b0b',
-          'platform':    'linux/amd64',
-          'registry':    'lsong-demo1',
-          'registryURI': 'registry-1.docker.io',
-          'repository':  'library/alpine',
-          'tag':         '3.20.5'
-        },
-        'metadata':       { 'name': '1579ec19943976bfa925404fafce73dfb102a9f0f59185f9d5bfee1e71b99545' },
-        'imageReference': 'registry-1.docker.io/library/alpine:3.20.5',
-        'scanResult':     {
-          'critical': 0,
-          'high':     4,
-          'medium':   9,
-          'low':      5,
-          'unknown':  0
-        }
-      },
-      {
-        'id':            'default/1832fe7eb400d5885b0caca99cdfacb07bad4da30f3907a4c6613e17ad95d973',
-        'imageMetadata': {
-          'digest':      'sha256:bd9137c3bb45dbc40cde0f0e19a8b9064c2bc485466221f5e95eb72b0d0cf82e',
-          'platform':    'linux/arm64/v8',
-          'registry':    'lsong-demo1',
-          'registryURI': 'registry-1.docker.io',
-          'repository':  'library/alpine',
-          'tag':         '3.14.1'
-        },
-        'metadata':       { 'name': '1832fe7eb400d5885b0caca99cdfacb07bad4da30f3907a4c6613e17ad95d973' },
-        'imageReference': 'registry-1.docker.io/library/alpine:3.14.1',
-        'scanResult':     {
-          'critical': 3,
-          'high':     34,
-          'medium':   10,
-          'low':      0,
-          'unknown':  0
-        }
-      },
-      {
-        'id':            'default/1af1c7062793c11f61974fe772cde08a50d0f949dc8f433b526c55f3fe81d0e2',
-        'imageMetadata': {
-          'digest':      'sha256:a2c49065a4a5161095f5d60c527f8b8ab3d4a4e0af79333eeccf4dd260aae64d',
-          'platform':    'linux/386',
-          'registry':    'lsong-demo1',
-          'registryURI': 'registry-1.docker.io',
-          'repository':  'library/alpine',
-          'tag':         '3.12.3'
-        },
-        'metadata':       { 'name': '1af1c7062793c11f61974fe772cde08a50d0f949dc8f433b526c55f3fe81d0e2' },
-        'imageReference': 'registry-1.docker.io/library/alpine:3.12.3',
-        'scanResult':     {
-          'critical': 4,
-          'high':     32,
-          'medium':   6,
-          'low':      2,
-          'unknown':  0
-        }
-      },
-      {
-        'id':            'default/1e879d64c75916b36bb2fd98996bb5cc649238615d7dc92efbb82d4310fba4e6',
-        'imageMetadata': {
-          'digest':      'sha256:1f2e2eda6c64b2d73549fa66378f5c3474ba1fad4ef7ed94fd7298ca9e8862fd',
-          'platform':    'linux/ppc64le',
-          'registry':    'lsong-demo1',
-          'registryURI': 'registry-1.docker.io',
-          'repository':  'library/alpine',
-          'tag':         '3.12.3'
-        },
-        'metadata':       { 'name': '1e879d64c75916b36bb2fd98996bb5cc649238615d7dc92efbb82d4310fba4e6' },
-        'imageReference': 'registry-1.docker.io/library/alpine:3.12.3',
-        'scanResult':     {
-          'critical': 4,
-          'high':     32,
-          'medium':   6,
-          'low':      2,
-          'unknown':  0
-        }
-      },
-      {
-        'id':            'default/25916e61565005415d491b6b738605255d9d791a03b4f1fce9f4e10373b83b41',
-        'imageMetadata': {
-          'digest':      'sha256:9bc8f9742a09f8c6be66e0b3b750248bffb70b9da1ea0e68f2e756b14e1564b9',
-          'platform':    'linux/s390x',
-          'registry':    'lsong-demo1',
-          'registryURI': 'registry-1.docker.io',
-          'repository':  'library/alpine',
-          'tag':         '3.19.2'
-        },
-        'metadata':       { 'name': '25916e61565005415d491b6b738605255d9d791a03b4f1fce9f4e10373b83b41' },
-        'imageReference': 'registry-1.docker.io/library/alpine:3.19.2',
-        'scanResult':     {
-          'critical': 0,
-          'high':     4,
-          'medium':   11,
-          'low':      7,
-          'unknown':  0
-        }
-      },
-      {
-        'id':            'default/272781d7060d53cf8d7fd80ecf105bbaaca5c2975f0b0bb139350089226460a1',
-        'imageMetadata': {
-          'digest':      'sha256:343d5883d8019a73bcdb761b82d75124ecef7298534b19e1e581f173113b1755',
-          'platform':    'linux/arm/v6',
-          'registry':    'lsong-demo1',
-          'registryURI': 'registry-1.docker.io',
-          'repository':  'library/alpine',
-          'tag':         '3.6.5'
-        },
-        'metadata':       { 'name': '272781d7060d53cf8d7fd80ecf105bbaaca5c2975f0b0bb139350089226460a1' },
-        'imageReference': 'registry-1.docker.io/library/alpine:3.6.5',
-        'scanResult':     {
-          'critical': 0,
-          'high':     0,
-          'medium':   0,
-          'low':      0,
-          'unknown':  0
-        }
-      },
-      {
-        'id':            'default/28a582adcd262e6977424820bb691000333cf91ca22dd1510417329cbd95d2d0',
-        'imageMetadata': {
-          'digest':      'sha256:09addbcf0db5a11803f29bddbdbfd31adce7e40d68750359f9a4eb4dcc54078f',
-          'platform':    'linux/ppc64le',
-          'registry':    'lsong-demo1',
-          'registryURI': 'registry-1.docker.io',
-          'repository':  'library/alpine',
-          'tag':         '3.15.4'
-        },
-        'metadata':       { 'name': '28a582adcd262e6977424820bb691000333cf91ca22dd1510417329cbd95d2d0' },
-        'imageReference': 'registry-1.docker.io/library/alpine:3.15.4',
-        'scanResult':     {
-          'critical': 1,
-          'high':     8,
-          'medium':   14,
-          'low':      0,
-          'unknown':  0
-        }
-      },
-      {
-        'id':            'default/29f76f12a6597f071ad3b90aded42483fc5825a0d882a35ccd01f000455bb636',
-        'imageMetadata': {
-          'digest':      'sha256:fb9ac82b4cc94c5a6c416a1c656b3ee84df9290ab4106c260eb959997e759e5e',
-          'platform':    'linux/arm/v7',
-          'registry':    'lsong-demo1',
-          'registryURI': 'registry-1.docker.io',
-          'repository':  'library/alpine',
-          'tag':         '3.14.1'
-        },
-        'metadata':       { 'name': '29f76f12a6597f071ad3b90aded42483fc5825a0d882a35ccd01f000455bb636' },
-        'imageReference': 'registry-1.docker.io/library/alpine:3.14.1',
-        'scanResult':     {
-          'critical': 3,
-          'high':     34,
-          'medium':   10,
-          'low':      0,
-          'unknown':  0
-        }
-      },
-      {
-        'id':            'default/2a7b6c92a5e541ce6a4d6427a0139cc0901cc5531dd68b214c228647b0e7eee7',
-        'imageMetadata': {
-          'digest':      'sha256:f3bec467166fd0e38f83ff32fb82447f5e89b5abd13264a04454c75e11f1cdc6',
-          'platform':    'linux/arm64/v8',
-          'registry':    'lsong-demo1',
-          'registryURI': 'registry-1.docker.io',
-          'repository':  'library/alpine',
-          'tag':         '3.15.4'
-        },
-        'metadata':       { 'name': '2a7b6c92a5e541ce6a4d6427a0139cc0901cc5531dd68b214c228647b0e7eee7' },
-        'imageReference': 'registry-1.docker.io/library/alpine:3.15.4',
-        'scanResult':     {
-          'critical': 1,
-          'high':     8,
-          'medium':   14,
-          'low':      0,
-          'unknown':  0
-        }
-      },
-      {
-        'id':            'default/2c41f90997af2e28102fcde622f8ba4472d52f2f2fed949d6f19706dc3b30240',
-        'imageMetadata': {
-          'digest':      'sha256:0a6a2a45b31cd5e28a366a035185eb75020ec28866957c2cb82422ff68fae065',
-          'platform':    'linux/s390x',
-          'registry':    'lsong-demo1',
-          'registryURI': 'registry-1.docker.io',
-          'repository':  'library/alpine',
-          'tag':         '3.15.4'
-        },
-        'metadata':       { 'name': '2c41f90997af2e28102fcde622f8ba4472d52f2f2fed949d6f19706dc3b30240' },
-        'imageReference': 'registry-1.docker.io/library/alpine:3.15.4',
-        'scanResult':     {
-          'critical': 1,
-          'high':     8,
-          'medium':   14,
-          'low':      0,
-          'unknown':  0
-        }
-      },
-      {
-        'id':            'default/357b64c17da3cb976d394e5ad341dd7e7c75d17636ab8cf44e37b58f3b1a27a2',
-        'imageMetadata': {
-          'digest':      'sha256:2cf7f3fb0e13722e181d1cc0ef9d05cdd20e9311ecc2c130de6dcd5e63f37e17',
-          'platform':    'linux/s390x',
-          'registry':    'lsong-demo1',
-          'registryURI': 'registry-1.docker.io',
-          'repository':  'library/alpine',
-          'tag':         '3.20.5'
-        },
-        'metadata':       { 'name': '357b64c17da3cb976d394e5ad341dd7e7c75d17636ab8cf44e37b58f3b1a27a2' },
-        'imageReference': 'registry-1.docker.io/library/alpine:3.20.5',
-        'scanResult':     {
-          'critical': 0,
-          'high':     4,
-          'medium':   9,
-          'low':      5,
-          'unknown':  0
-        }
-      },
-      {
-        'id':            'default/35d348fcce51dc23c1e40f89108a62c21a1c0e2b4d2f91f4ae518738251d8991',
-        'imageMetadata': {
-          'digest':      'sha256:024cea07734079c8314b158b62d95aee704fad739f90cc9a591219a07df45241',
-          'platform':    'linux/ppc64le',
-          'registry':    'lsong-demo1',
-          'registryURI': 'registry-1.docker.io',
-          'repository':  'library/alpine',
-          'tag':         '3.11.12'
-        },
-        'metadata':       { 'name': '35d348fcce51dc23c1e40f89108a62c21a1c0e2b4d2f91f4ae518738251d8991' },
-        'imageReference': 'registry-1.docker.io/library/alpine:3.11.12',
-        'scanResult':     {
-          'critical': 1,
-          'high':     18,
-          'medium':   2,
-          'low':      0,
-          'unknown':  0
-        }
-      },
-      {
-        'id':            'default/392869e7f357179907bb0e80b9464a295d9037e49581f1602bb62ab05a2a246e',
-        'imageMetadata': {
-          'digest':      'sha256:bca31dcfba88843372ec4247783ca2c774fb62d45df9a6394572611b24fa4949',
-          'platform':    'linux/arm64/v8',
-          'registry':    'lsong-demo1',
-          'registryURI': 'registry-1.docker.io',
-          'repository':  'library/alpine',
-          'tag':         '3.6.5'
-        },
-        'metadata':       { 'name': '392869e7f357179907bb0e80b9464a295d9037e49581f1602bb62ab05a2a246e' },
-        'imageReference': 'registry-1.docker.io/library/alpine:3.6.5',
-        'scanResult':     {
-          'critical': 0,
-          'high':     0,
-          'medium':   0,
-          'low':      0,
-          'unknown':  0
-        }
-      },
-      {
-        'id':            'default/3ae56f59ac8192ef00fe603e21abf99d551abcb56756028da4bc4434e37636b5',
-        'imageMetadata': {
-          'digest':      'sha256:074d3636ebda6dd446d0d00304c4454f468237fdacf08fb0eeac90bdbfa1bac7',
-          'platform':    'linux/amd64',
-          'registry':    'lsong-demo1',
-          'registryURI': 'registry-1.docker.io',
-          'repository':  'library/alpine',
-          'tag':         '3.12.3'
-        },
-        'metadata':       { 'name': '3ae56f59ac8192ef00fe603e21abf99d551abcb56756028da4bc4434e37636b5' },
-        'imageReference': 'registry-1.docker.io/library/alpine:3.12.3',
-        'scanResult':     {
-          'critical': 4,
-          'high':     32,
-          'medium':   6,
-          'low':      2,
-          'unknown':  0
-        }
-      },
-      {
-        'id':            'default/3dcddf0a695fb1b6a662a7ac1dd31f9b7378d645aebdf8602ed01cb6c80a69a1',
-        'imageMetadata': {
-          'digest':      'sha256:86d55ea0abdcc98ed0a3652510ff7fda8f36aefcd49aa067a9cc2c817d05f1d8',
-          'platform':    'linux/arm/v6',
-          'registry':    'lsong-demo1',
-          'registryURI': 'registry-1.docker.io',
-          'repository':  'library/alpine',
-          'tag':         '3.11.12'
-        },
-        'metadata':       { 'name': '3dcddf0a695fb1b6a662a7ac1dd31f9b7378d645aebdf8602ed01cb6c80a69a1' },
-        'imageReference': 'registry-1.docker.io/library/alpine:3.11.12',
-        'scanResult':     {
-          'critical': 1,
-          'high':     18,
-          'medium':   2,
-          'low':      0,
-          'unknown':  0
-        }
-      },
-      {
-        'id':            'default/3e9bc184e304d67e2eec06d635b4b3b2083471c5b6a936e2959ef3861337f4c4',
-        'imageMetadata': {
-          'digest':      'sha256:f7d2b5725685826823bc6b154c0de02832e5e6daf7dc25a00ab00f1158fabfc8',
-          'platform':    'linux/amd64',
-          'registry':    'lsong-demo1',
-          'registryURI': 'registry-1.docker.io',
-          'repository':  'library/alpine',
-          'tag':         '3.5'
-        },
-        'metadata':       { 'name': '3e9bc184e304d67e2eec06d635b4b3b2083471c5b6a936e2959ef3861337f4c4' },
-        'imageReference': 'registry-1.docker.io/library/alpine:3.5',
-        'scanResult':     {
-          'critical': 0,
-          'high':     0,
-          'medium':   0,
-          'low':      0,
-          'unknown':  0
-        }
-      },
-      {
-        'id':            'default/3f1d0d2dbabc82e9e17727d62c6c68d01dfd4c027301781cdc71f8c5590b49ee',
-        'imageMetadata': {
-          'digest':      'sha256:e841d0f0881ea22080e84088337646ada15871abbc3ce19b3219e8fc2cb0cc22',
-          'platform':    'linux/s390x',
-          'registry':    'lsong-demo1',
-          'registryURI': 'registry-1.docker.io',
-          'repository':  'library/alpine',
-          'tag':         '3.14.2'
-        },
-        'metadata':       { 'name': '3f1d0d2dbabc82e9e17727d62c6c68d01dfd4c027301781cdc71f8c5590b49ee' },
-        'imageReference': 'registry-1.docker.io/library/alpine:3.14.2',
-        'scanResult':     {
-          'critical': 1,
-          'high':     32,
-          'medium':   10,
-          'low':      0,
-          'unknown':  0
-        }
-      },
-      {
-        'id':            'default/4019d353b28362ff52cc2f82ce1077859e47ab9fe0db800c17c44f5ce17e0b66',
-        'imageMetadata': {
-          'digest':      'sha256:6dff84dbd39db7cb0fc928291e220b3cff846e59334fd66f27ace0bcfd471b75',
-          'platform':    'linux/ppc64le',
-          'registry':    'lsong-demo1',
-          'registryURI': 'registry-1.docker.io',
-          'repository':  'library/alpine',
-          'tag':         '3.10.3'
-        },
-        'metadata':       { 'name': '4019d353b28362ff52cc2f82ce1077859e47ab9fe0db800c17c44f5ce17e0b66' },
-        'imageReference': 'registry-1.docker.io/library/alpine:3.10.3',
-        'scanResult':     {
-          'critical': 1,
-          'high':     9,
-          'medium':   10,
-          'low':      2,
-          'unknown':  0
-        }
-      },
-      {
-        'id':            'default/46f378cf956ce13dacb3285d2a15a4721bf642bb55562d1382ed5c6cedafccf9',
-        'imageMetadata': {
-          'digest':      'sha256:1c34b3cb760a98c23361d919357b99fa497074576c898e7289425d45ef67b46a',
-          'platform':    'linux/arm/v7',
-          'registry':    'lsong-demo1',
-          'registryURI': 'registry-1.docker.io',
-          'repository':  'library/alpine',
-          'tag':         '3.17.1'
-        },
-        'metadata':       { 'name': '46f378cf956ce13dacb3285d2a15a4721bf642bb55562d1382ed5c6cedafccf9' },
-        'imageReference': 'registry-1.docker.io/library/alpine:3.17.1',
-        'scanResult':     {
-          'critical': 0,
-          'high':     20,
-          'medium':   44,
-          'low':      4,
-          'unknown':  0
-        }
-      },
-      {
-        'id':            'default/49b5fb6d5014f68a6221fc88a7342e0dd3da4872390689b04c78c64b5c8ec106',
-        'imageMetadata': {
-          'digest':      'sha256:b06a5cf61b2956088722c4f1b9a6f71dfe95f0b1fe285d44195452b8a1627de7',
-          'platform':    'linux/arm64/v8',
-          'registry':    'lsong-demo1',
-          'registryURI': 'registry-1.docker.io',
-          'repository':  'library/alpine',
-          'tag':         '3.14.2'
-        },
-        'metadata':       { 'name': '49b5fb6d5014f68a6221fc88a7342e0dd3da4872390689b04c78c64b5c8ec106' },
-        'imageReference': 'registry-1.docker.io/library/alpine:3.14.2',
-        'scanResult':     {
-          'critical': 1,
-          'high':     32,
-          'medium':   10,
-          'low':      0,
-          'unknown':  0
-        }
-      },
-      {
-        'id':            'default/4c0342747b3e05aaf3b8f8817472d6a64d1a8dc85c0a7e06f29f5eea45b5db3b',
-        'imageMetadata': {
-          'digest':      'sha256:8621732cdb8c893dccfaacfa22741154123addd7c0e5465056bbe9b0cb4c7737',
-          'platform':    'linux/s390x',
-          'registry':    'lsong-demo1',
-          'registryURI': 'registry-1.docker.io',
-          'repository':  'library/alpine',
-          'tag':         '3.14.1'
-        },
-        'metadata':       { 'name': '4c0342747b3e05aaf3b8f8817472d6a64d1a8dc85c0a7e06f29f5eea45b5db3b' },
-        'imageReference': 'registry-1.docker.io/library/alpine:3.14.1',
-        'scanResult':     {
-          'critical': 3,
-          'high':     34,
-          'medium':   10,
-          'low':      0,
-          'unknown':  0
-        }
-      },
-      {
-        'id':            'default/4d11ed4427d12423f5f99a6a9c8c9d2df3cd7fbec0a554a157ed77eee06f10a4',
-        'imageMetadata': {
-          'digest':      'sha256:a777c9c66ba177ccfea23f2a216ff6721e78a662cd17019488c417135299cd89',
-          'platform':    'linux/amd64',
-          'registry':    'lsong-demo1',
-          'registryURI': 'registry-1.docker.io',
-          'repository':  'library/alpine',
-          'tag':         '3.15.4'
-        },
-        'metadata':       { 'name': '4d11ed4427d12423f5f99a6a9c8c9d2df3cd7fbec0a554a157ed77eee06f10a4' },
-        'imageReference': 'registry-1.docker.io/library/alpine:3.15.4',
-        'scanResult':     {
-          'critical': 1,
-          'high':     8,
-          'medium':   14,
-          'low':      0,
-          'unknown':  0
-        }
-      },
-      {
-        'id':            'default/4d547c5ac4ba6fead13bfbaaa4892f7be1019dfe14100a140cbe898ab708867a',
-        'imageMetadata': {
-          'digest':      'sha256:18c29393a090ba5cde8a5f00926e9e419f47cfcfd206cc3f7f590e91b19adfe9',
-          'platform':    'linux/arm/v6',
-          'registry':    'lsong-demo1',
-          'registryURI': 'registry-1.docker.io',
-          'repository':  'library/alpine',
-          'tag':         '3.14.2'
-        },
-        'metadata':       { 'name': '4d547c5ac4ba6fead13bfbaaa4892f7be1019dfe14100a140cbe898ab708867a' },
-        'imageReference': 'registry-1.docker.io/library/alpine:3.14.2',
-        'scanResult':     {
-          'critical': 1,
-          'high':     32,
-          'medium':   10,
-          'low':      0,
-          'unknown':  0
-        }
-      },
-      {
-        'id':            'default/4d58827a3b779abca47c78c94c2264022a3290f3cce5de85a7a053a1209c1ad7',
-        'imageMetadata': {
-          'digest':      'sha256:cbbabaca3bd3b2617ffff036d987a82bcfe923fd4bf985f338c12e74af1bd081',
-          'platform':    'linux/386',
-          'registry':    'lsong-demo1',
-          'registryURI': 'registry-1.docker.io',
-          'repository':  'library/alpine',
-          'tag':         '3.20.5'
-        },
-        'metadata':       { 'name': '4d58827a3b779abca47c78c94c2264022a3290f3cce5de85a7a053a1209c1ad7' },
-        'imageReference': 'registry-1.docker.io/library/alpine:3.20.5',
-        'scanResult':     {
-          'critical': 0,
-          'high':     4,
-          'medium':   9,
-          'low':      5,
-          'unknown':  0
-        }
-      },
-      {
-        'id':            'default/561c8ba8249708aef2b8db55aaa71a182b2fd3c4d1f2fe0be72f9eb78c3ffb51',
-        'imageMetadata': {
-          'digest':      'sha256:88ca6e719536e0079b6d248f335cd6d33e41ba67db94f460d1a9f5f90ef40cd1',
-          'platform':    'linux/ppc64le',
-          'registry':    'lsong-demo1',
-          'registryURI': 'registry-1.docker.io',
-          'repository':  'library/alpine',
-          'tag':         '3.19.2'
-        },
-        'metadata':       { 'name': '561c8ba8249708aef2b8db55aaa71a182b2fd3c4d1f2fe0be72f9eb78c3ffb51' },
-        'imageReference': 'registry-1.docker.io/library/alpine:3.19.2',
-        'scanResult':     {
-          'critical': 0,
-          'high':     4,
-          'medium':   11,
-          'low':      7,
-          'unknown':  0
-        }
-      },
-      {
-        'id':            'default/57c76bdc96759608f3772a247ec7003511bc840d3f2071e6a62d0d21145b0452',
-        'imageMetadata': {
-          'digest':      'sha256:fe0dcdd1f78341a54b6d08d0f45d91ae93eb212667d970ad15213a3168c410ee',
-          'platform':    'linux/s390x',
-          'registry':    'lsong-demo1',
-          'registryURI': 'registry-1.docker.io',
-          'repository':  'library/alpine',
-          'tag':         '3.21.3'
-        },
-        'metadata':       { 'name': '57c76bdc96759608f3772a247ec7003511bc840d3f2071e6a62d0d21145b0452' },
-        'imageReference': 'registry-1.docker.io/library/alpine:3.21.3',
-        'scanResult':     {
-          'critical': 0,
-          'high':     0,
-          'medium':   7,
-          'low':      5,
-          'unknown':  0
-        }
-      },
-      {
-        'id':            'default/58d159a2db7c0aca3d6f6568626af4918675b0531aedf1b2f34c5158ec74d9a6',
-        'imageMetadata': {
-          'digest':      'sha256:01a4cdaebc9c6af607753cc538c507d0867897cdf9a1caa70bbab2eb1506c964',
-          'platform':    'linux/arm/v6',
-          'registry':    'lsong-demo1',
-          'registryURI': 'registry-1.docker.io',
-          'repository':  'library/alpine',
-          'tag':         '3.17.1'
-        },
-        'metadata':       { 'name': '58d159a2db7c0aca3d6f6568626af4918675b0531aedf1b2f34c5158ec74d9a6' },
-        'imageReference': 'registry-1.docker.io/library/alpine:3.17.1',
-        'scanResult':     {
-          'critical': 0,
-          'high':     20,
-          'medium':   44,
-          'low':      4,
-          'unknown':  0
-        }
-      },
-      {
-        'id':            'default/5f72489ae3e2c5714187201135a8a4a99f3d07307f2e518949048532191ef598',
-        'imageMetadata': {
-          'digest':      'sha256:1d2cfbb29672ce268a77b3b9eca532a96356f4843044d22a9677231e1333e271',
-          'platform':    'linux/arm/v6',
-          'registry':    'lsong-demo1',
-          'registryURI': 'registry-1.docker.io',
-          'repository':  'library/alpine',
-          'tag':         '3.14.1'
-        },
-        'metadata':       { 'name': '5f72489ae3e2c5714187201135a8a4a99f3d07307f2e518949048532191ef598' },
-        'imageReference': 'registry-1.docker.io/library/alpine:3.14.1',
-        'scanResult':     {
-          'critical': 3,
-          'high':     34,
-          'medium':   10,
-          'low':      0,
-          'unknown':  0
-        }
-      },
-      {
-        'id':            'default/641775c4122c880a00503f5304c43d72edd47deebb6f91351951cda712c06afb',
-        'imageMetadata': {
-          'digest':      'sha256:2436f2b3b7d2537f4c5b622d7a820f00aaea1b6bd14c898142472947d5f02abe',
-          'platform':    'linux/386',
-          'registry':    'lsong-demo1',
-          'registryURI': 'registry-1.docker.io',
-          'repository':  'library/alpine',
-          'tag':         '3.21.3'
-        },
-        'metadata':       { 'name': '641775c4122c880a00503f5304c43d72edd47deebb6f91351951cda712c06afb' },
-        'imageReference': 'registry-1.docker.io/library/alpine:3.21.3',
-        'scanResult':     {
-          'critical': 0,
-          'high':     0,
-          'medium':   7,
-          'low':      5,
-          'unknown':  0
-        }
-      },
-      {
-        'id':            'default/64fcc7e3669546d9ec3478c549b71a0960cbcc5019d5e6af74961f8c13e026dd',
-        'imageMetadata': {
-          'digest':      'sha256:36c3a913e62f77a82582eb7ce30d255f805c3d1e11d58e1f805e14d33c2bc5a5',
-          'platform':    'linux/amd64',
-          'registry':    'lsong-demo1',
-          'registryURI': 'registry-1.docker.io',
-          'repository':  'library/alpine',
-          'tag':         '3.6.5'
-        },
-        'metadata':       { 'name': '64fcc7e3669546d9ec3478c549b71a0960cbcc5019d5e6af74961f8c13e026dd' },
-        'imageReference': 'registry-1.docker.io/library/alpine:3.6.5',
-        'scanResult':     {
-          'critical': 0,
-          'high':     0,
-          'medium':   0,
-          'low':      0,
-          'unknown':  0
-        }
-      },
-      {
-        'id':            'default/65fd4ff66550ebf1056428e0bb683a25b7807177cfb8fd7f322e6d3379cd3811',
-        'imageMetadata': {
-          'digest':      'sha256:8a6f8667a8eb87453662f3799ea3768b4c3653a66486ee7c1dd1bed0dfe8c5e7',
-          'platform':    'linux/386',
-          'registry':    'lsong-demo1',
-          'registryURI': 'registry-1.docker.io',
-          'repository':  'library/alpine',
-          'tag':         '3.11.12'
-        },
-        'metadata':       { 'name': '65fd4ff66550ebf1056428e0bb683a25b7807177cfb8fd7f322e6d3379cd3811' },
-        'imageReference': 'registry-1.docker.io/library/alpine:3.11.12',
-        'scanResult':     {
-          'critical': 1,
-          'high':     18,
-          'medium':   2,
-          'low':      0,
-          'unknown':  0
-        }
-      },
-      {
-        'id':            'default/6765b1ec4a0961beff0fbd06b81ee6df412e9259b94910edb4c2bbee05c9cfc0',
-        'imageMetadata': {
-          'digest':      'sha256:549694ea68340c26d1d85c00039aa11ad835be279bfd475ff4284b705f92c24e',
-          'platform':    'linux/arm64/v8',
-          'registry':    'lsong-demo1',
-          'registryURI': 'registry-1.docker.io',
-          'repository':  'library/alpine',
-          'tag':         '3.12.3'
-        },
-        'metadata':       { 'name': '6765b1ec4a0961beff0fbd06b81ee6df412e9259b94910edb4c2bbee05c9cfc0' },
-        'imageReference': 'registry-1.docker.io/library/alpine:3.12.3',
-        'scanResult':     {
-          'critical': 4,
-          'high':     32,
-          'medium':   6,
-          'low':      2,
-          'unknown':  0
-        }
-      },
-      {
-        'id':            'default/7026318997be73a03cf8ba47165ff85425d1c995a437f76be91ab0269eb9a1dd',
-        'imageMetadata': {
-          'digest':      'sha256:9e005b7ce3806b4f3623e16b3f8d9b78fb9dacaa71f6d26129c9c3d405671436',
-          'platform':    'linux/arm/v6',
-          'registry':    'lsong-demo1',
-          'registryURI': 'registry-1.docker.io',
-          'repository':  'library/alpine',
-          'tag':         '3.19.2'
-        },
-        'metadata':       { 'name': '7026318997be73a03cf8ba47165ff85425d1c995a437f76be91ab0269eb9a1dd' },
-        'imageReference': 'registry-1.docker.io/library/alpine:3.19.2',
-        'scanResult':     {
-          'critical': 0,
-          'high':     4,
-          'medium':   11,
-          'low':      7,
-          'unknown':  0
-        }
-      },
-      {
-        'id':            'default/75a3990b9209ec91613785cb3ff3bea269b382f6febd2c80a9349085ad570a5f',
-        'imageMetadata': {
-          'digest':      'sha256:9e334cd6483b43df68504ef67bdaee968c4efb99a791bd941d658f5f534d0486',
-          'platform':    'linux/arm/v6',
-          'registry':    'lsong-demo1',
-          'registryURI': 'registry-1.docker.io',
-          'repository':  'library/alpine',
-          'tag':         '3.20.5'
-        },
-        'metadata':       { 'name': '75a3990b9209ec91613785cb3ff3bea269b382f6febd2c80a9349085ad570a5f' },
-        'imageReference': 'registry-1.docker.io/library/alpine:3.20.5',
-        'scanResult':     {
-          'critical': 0,
-          'high':     4,
-          'medium':   9,
-          'low':      5,
-          'unknown':  0
-        }
-      },
-      {
-        'id':            'default/7791aad173ee872dff6f34f13a757e773568f0b169aec61d3d4886d4d059d8e6',
-        'imageMetadata': {
-          'digest':      'sha256:77d408e9984c7e85d84db11bac01c0df5e55d4f494446eb0bfebcc9f2bf5405c',
-          'platform':    'linux/ppc64le',
-          'registry':    'lsong-demo1',
-          'registryURI': 'registry-1.docker.io',
-          'repository':  'library/alpine',
-          'tag':         '3.6.5'
-        },
-        'metadata':       { 'name': '7791aad173ee872dff6f34f13a757e773568f0b169aec61d3d4886d4d059d8e6' },
-        'imageReference': 'registry-1.docker.io/library/alpine:3.6.5',
-        'scanResult':     {
-          'critical': 0,
-          'high':     0,
-          'medium':   0,
-          'low':      0,
-          'unknown':  0
-        }
-      },
-      {
-        'id':            'default/77be439166f1ce40f0ef33d53b9e51da60cf9474f6add90d1882c8c35a5e9a44',
-        'imageMetadata': {
-          'digest':      'sha256:26a8d1303ea6109122ba2df7fafcfbe77ddc3988a2c34e818398b8ed4a20b03d',
-          'platform':    'linux/386',
-          'registry':    'lsong-demo1',
-          'registryURI': 'registry-1.docker.io',
-          'repository':  'library/alpine',
-          'tag':         '3.8.4'
-        },
-        'metadata':       { 'name': '77be439166f1ce40f0ef33d53b9e51da60cf9474f6add90d1882c8c35a5e9a44' },
-        'imageReference': 'registry-1.docker.io/library/alpine:3.8.4',
-        'scanResult':     {
-          'critical': 2,
-          'high':     0,
-          'medium':   0,
-          'low':      0,
-          'unknown':  0
-        }
-      },
-      {
-        'id':            'default/7949e2b89e134dfd1359e28365917cf1e1083ce5848ea5b5999458c4602af0e2',
-        'imageMetadata': {
-          'digest':      'sha256:0a3b174523eafed2b1276cf957020850fc5305ed4605750d0b88f79d4900465d',
-          'platform':    'linux/arm64/v8',
-          'registry':    'lsong-demo1',
-          'registryURI': 'registry-1.docker.io',
-          'repository':  'library/alpine',
-          'tag':         '3.11.12'
-        },
-        'metadata':       { 'name': '7949e2b89e134dfd1359e28365917cf1e1083ce5848ea5b5999458c4602af0e2' },
-        'imageReference': 'registry-1.docker.io/library/alpine:3.11.12',
-        'scanResult':     {
-          'critical': 1,
-          'high':     18,
-          'medium':   2,
-          'low':      0,
-          'unknown':  0
-        }
-      },
-      {
-        'id':            'default/79992f4a7947389372139cf0d2d95ee75c13acf7413d32351ec815d5319937a7',
-        'imageMetadata': {
-          'digest':      'sha256:f553db2d6ab7f3ba07024cd1181e16242d8fea0a2840dc2ccbd59e9b8c59b478',
-          'platform':    'linux/ppc64le',
-          'registry':    'lsong-demo1',
-          'registryURI': 'registry-1.docker.io',
-          'repository':  'library/alpine',
-          'tag':         '3.14.1'
-        },
-        'metadata':       { 'name': '79992f4a7947389372139cf0d2d95ee75c13acf7413d32351ec815d5319937a7' },
-        'imageReference': 'registry-1.docker.io/library/alpine:3.14.1',
-        'scanResult':     {
-          'critical': 3,
-          'high':     34,
-          'medium':   10,
-          'low':      0,
-          'unknown':  0
-        }
-      },
-      {
-        'id':            'default/7cbb9aa3f0ccdfc960a81bea5f992f4e5265597226cd4199b6f0c8e56d19ce7b',
-        'imageMetadata': {
-          'digest':      'sha256:d8d321ec5eec88dee69aec467a51fe764daebdb92ecff0d1debd09840cbd86c6',
-          'platform':    'linux/s390x',
-          'registry':    'lsong-demo1',
-          'registryURI': 'registry-1.docker.io',
-          'repository':  'library/alpine',
-          'tag':         '3.10.3'
-        },
-        'metadata':       { 'name': '7cbb9aa3f0ccdfc960a81bea5f992f4e5265597226cd4199b6f0c8e56d19ce7b' },
-        'imageReference': 'registry-1.docker.io/library/alpine:3.10.3',
-        'scanResult':     {
-          'critical': 1,
-          'high':     9,
-          'medium':   10,
-          'low':      2,
-          'unknown':  0
-        }
-      },
-      {
-        'id':            'default/81d52e12a37cbecc4b3f281ba3f408db085e010c4968544bef42e4fc03a6dbb9',
-        'imageMetadata': {
-          'digest':      'sha256:e15947432b813e8ffa90165da919953e2ce850bef511a0ad1287d7cb86de84b5',
-          'platform':    'linux/amd64',
-          'registry':    'lsong-demo1',
-          'registryURI': 'registry-1.docker.io',
-          'repository':  'library/alpine',
-          'tag':         '3.13.6'
-        },
-        'metadata':       { 'name': '81d52e12a37cbecc4b3f281ba3f408db085e010c4968544bef42e4fc03a6dbb9' },
-        'imageReference': 'registry-1.docker.io/library/alpine:3.13.6',
-        'scanResult':     {
-          'critical': 1,
-          'high':     25,
-          'medium':   6,
-          'low':      0,
-          'unknown':  0
-        }
-      },
-      {
-        'id':            'default/8a267a9453080a0f8d7fc30be89b861aa83bfbddd764f2f90e46a3d0df45f1c0',
-        'imageMetadata': {
-          'digest':      'sha256:e12ff876f0075740ed3d7bdf788107ae84c1b3dd6dc98b3baea41088aba5236f',
-          'platform':    'linux/arm/v7',
-          'registry':    'lsong-demo1',
-          'registryURI': 'registry-1.docker.io',
-          'repository':  'library/alpine',
-          'tag':         '3.14.2'
-        },
-        'metadata':       { 'name': '8a267a9453080a0f8d7fc30be89b861aa83bfbddd764f2f90e46a3d0df45f1c0' },
-        'imageReference': 'registry-1.docker.io/library/alpine:3.14.2',
-        'scanResult':     {
-          'critical': 1,
-          'high':     32,
-          'medium':   10,
-          'low':      0,
-          'unknown':  0
-        }
-      },
-      {
-        'id':            'default/8b1cf68023e9aaf42b268d29e608da55d9d36de22c9196b3331c5a4714ad145d',
-        'imageMetadata': {
-          'digest':      'sha256:f29c3d10359dd0e6d0c11e4f715735b678c0ab03a7ac4565b4b6c08980f6213b',
-          'platform':    'linux/arm/v6',
-          'registry':    'lsong-demo1',
-          'registryURI': 'registry-1.docker.io',
-          'repository':  'library/alpine',
-          'tag':         '3.8.4'
-        },
-        'metadata':       { 'name': '8b1cf68023e9aaf42b268d29e608da55d9d36de22c9196b3331c5a4714ad145d' },
-        'imageReference': 'registry-1.docker.io/library/alpine:3.8.4',
-        'scanResult':     {
-          'critical': 2,
-          'high':     0,
-          'medium':   0,
-          'low':      0,
-          'unknown':  0
-        }
-      },
-      {
-        'id':            'default/8b32daadfbc5c0c29eefabac6c87af3af4173deecca72314a0a15108f0b9321d',
-        'imageMetadata': {
-          'digest':      'sha256:a77adef9f69751add61080617e15e67aba9aa7a5fd5414b9fae84143210ee0ad',
-          'platform':    'linux/386',
-          'registry':    'lsong-demo1',
-          'registryURI': 'registry-1.docker.io',
-          'repository':  'library/alpine',
-          'tag':         '3.14.2'
-        },
-        'metadata':       { 'name': '8b32daadfbc5c0c29eefabac6c87af3af4173deecca72314a0a15108f0b9321d' },
-        'imageReference': 'registry-1.docker.io/library/alpine:3.14.2',
-        'scanResult':     {
-          'critical': 1,
-          'high':     32,
-          'medium':   10,
-          'low':      0,
-          'unknown':  0
-        }
-      },
-      {
-        'id':            'default/8ccad48ad86ecd44ca8e650a4182fe7d6c474189589bedd4e4d82b3de2d5d3dc',
-        'imageMetadata': {
-          'digest':      'sha256:145b24ad7f65c5368b1cae556cec31da472a135d429b0082a611616579f2752d',
-          'platform':    'linux/ppc64le',
-          'registry':    'lsong-demo1',
-          'registryURI': 'registry-1.docker.io',
-          'repository':  'library/alpine',
-          'tag':         '3.17.1'
-        },
-        'metadata':       { 'name': '8ccad48ad86ecd44ca8e650a4182fe7d6c474189589bedd4e4d82b3de2d5d3dc' },
-        'imageReference': 'registry-1.docker.io/library/alpine:3.17.1',
-        'scanResult':     {
-          'critical': 0,
-          'high':     20,
-          'medium':   44,
-          'low':      4,
-          'unknown':  0
-        }
-      },
-      {
-        'id':            'default/92c38bd7501cc86ada2a0d3fc9812f312fec23b04b497e47c10aae307d52bb2a',
-        'imageMetadata': {
-          'digest':      'sha256:1827be57ca85c28287d18349bbfdb3870419692656cb67c4cd0f5042f0f63aec',
-          'platform':    'linux/arm64/v8',
-          'registry':    'lsong-demo1',
-          'registryURI': 'registry-1.docker.io',
-          'repository':  'library/alpine',
-          'tag':         '3.10.3'
-        },
-        'metadata':       { 'name': '92c38bd7501cc86ada2a0d3fc9812f312fec23b04b497e47c10aae307d52bb2a' },
-        'imageReference': 'registry-1.docker.io/library/alpine:3.10.3',
-        'scanResult':     {
-          'critical': 1,
-          'high':     9,
-          'medium':   10,
-          'low':      2,
-          'unknown':  0
-        }
-      },
-      {
-        'id':            'default/94ecaabd4d0e14b07d9efc1662822f1836b0f325d0fba9cf964c27b867404c5c',
-        'imageMetadata': {
-          'digest':      'sha256:e4355b66995c96b4b468159fc5c7e3540fcef961189ca13fee877798649f531a',
-          'platform':    'linux/amd64',
-          'registry':    'lsong-demo1',
-          'registryURI': 'registry-1.docker.io',
-          'repository':  'library/alpine',
-          'tag':         '3.10.3'
-        },
-        'metadata':       { 'name': '94ecaabd4d0e14b07d9efc1662822f1836b0f325d0fba9cf964c27b867404c5c' },
-        'imageReference': 'registry-1.docker.io/library/alpine:3.10.3',
-        'scanResult':     {
-          'critical': 1,
-          'high':     9,
-          'medium':   10,
-          'low':      2,
-          'unknown':  0
-        }
-      },
-      {
-        'id':            'default/9847f0cc40153cf7a9911d3ed5e3732eec4571c818f95a32cd0fbb03048301c8',
-        'imageMetadata': {
-          'digest':      'sha256:9bea59997a84beb47a8cc7ddb11abc957b141e8160852aa93b4cf60659016b53',
-          'platform':    'linux/ppc64le',
-          'registry':    'lsong-demo1',
-          'registryURI': 'registry-1.docker.io',
-          'repository':  'library/alpine',
-          'tag':         '3.14.2'
-        },
-        'metadata':       { 'name': '9847f0cc40153cf7a9911d3ed5e3732eec4571c818f95a32cd0fbb03048301c8' },
-        'imageReference': 'registry-1.docker.io/library/alpine:3.14.2',
-        'scanResult':     {
-          'critical': 1,
-          'high':     32,
-          'medium':   10,
-          'low':      0,
-          'unknown':  0
-        }
-      },
-      {
-        'id':            'default/986783fa1ddfe2c8776d5827489c083484f60242c12ba42a6680c26592601783',
-        'imageMetadata': {
-          'digest':      'sha256:360e20fc240529450cf378756935230541da805701e3ff895305b72f37ce4d9c',
-          'platform':    'linux/arm64/v8',
-          'registry':    'lsong-demo1',
-          'registryURI': 'registry-1.docker.io',
-          'repository':  'library/alpine',
-          'tag':         '3.8.4'
-        },
-        'metadata':       { 'name': '986783fa1ddfe2c8776d5827489c083484f60242c12ba42a6680c26592601783' },
-        'imageReference': 'registry-1.docker.io/library/alpine:3.8.4',
-        'scanResult':     {
-          'critical': 2,
-          'high':     0,
-          'medium':   0,
-          'low':      0,
-          'unknown':  0
-        }
-      },
-      {
-        'id':            'default/9a7113b4c89ac9f3a0e9cf82f7186514f2c18f53b2fec262776956c671302125',
-        'imageMetadata': {
-          'digest':      'sha256:6cd7a5c868b12cf98a34451468f01a434c31825f8a562f2644a982a4bd0dc797',
-          'platform':    'linux/arm/v7',
-          'registry':    'lsong-demo1',
-          'registryURI': 'registry-1.docker.io',
-          'repository':  'library/alpine',
-          'tag':         '3.19.2'
-        },
-        'metadata':       { 'name': '9a7113b4c89ac9f3a0e9cf82f7186514f2c18f53b2fec262776956c671302125' },
-        'imageReference': 'registry-1.docker.io/library/alpine:3.19.2',
-        'scanResult':     {
-          'critical': 0,
-          'high':     4,
-          'medium':   11,
-          'low':      7,
-          'unknown':  0
-        }
-      },
-      {
-        'id':            'default/9fe8b6190fb94c3690000195e22778342c05c3c11bdc95797223c9ad9341e895',
-        'imageMetadata': {
-          'digest':      'sha256:cc8129666469e0512c44e1c1be9710238b05d07e91401753972d2c3ae1855655',
-          'platform':    'linux/arm64/v8',
-          'registry':    'lsong-demo1',
-          'registryURI': 'registry-1.docker.io',
-          'repository':  'library/alpine',
-          'tag':         '3.19.2'
-        },
-        'metadata':       { 'name': '9fe8b6190fb94c3690000195e22778342c05c3c11bdc95797223c9ad9341e895' },
-        'imageReference': 'registry-1.docker.io/library/alpine:3.19.2',
-        'scanResult':     {
-          'critical': 0,
-          'high':     4,
-          'medium':   11,
-          'low':      7,
-          'unknown':  0
-        }
-      },
-      {
-        'id':            'default/a6dc4c183f1186d12268b4dd4d977dc7964405738677a72024ba7f67b333c405',
-        'imageMetadata': {
-          'digest':      'sha256:5f82c1806d60592b747d6a53d35164b0c8f40e7ccf5425c1d59ae86ec8b3c0bc',
-          'platform':    'linux/s390x',
-          'registry':    'lsong-demo1',
-          'registryURI': 'registry-1.docker.io',
-          'repository':  'library/alpine',
-          'tag':         '3.11.12'
-        },
-        'metadata':       { 'name': 'a6dc4c183f1186d12268b4dd4d977dc7964405738677a72024ba7f67b333c405' },
-        'imageReference': 'registry-1.docker.io/library/alpine:3.11.12',
-        'scanResult':     {
-          'critical': 1,
-          'high':     18,
-          'medium':   2,
-          'low':      0,
-          'unknown':  0
-        }
-      },
-      {
-        'id':            'default/a6fd8406794abf24154c5ac4f03a88eb941ce4b9815fe0f3432911f4d7521a22',
-        'imageMetadata': {
-          'digest':      'sha256:9ed53fd3b83120f78b33685d930ce9bf5aa481f6e2d165c42cbbddbeaa196f6f',
-          'platform':    'linux/ppc64le',
-          'registry':    'lsong-demo1',
-          'registryURI': 'registry-1.docker.io',
-          'repository':  'library/alpine',
-          'tag':         '3.21.3'
-        },
-        'metadata':       { 'name': 'a6fd8406794abf24154c5ac4f03a88eb941ce4b9815fe0f3432911f4d7521a22' },
-        'imageReference': 'registry-1.docker.io/library/alpine:3.21.3',
-        'scanResult':     {
-          'critical': 0,
-          'high':     0,
-          'medium':   7,
-          'low':      5,
-          'unknown':  0
-        }
-      },
-      {
-        'id':            'default/afbcb3020252bb3f083c41a87797af5a86037e2c2660d436ffe8f26b9f57e312',
-        'imageMetadata': {
-          'digest':      'sha256:70dc0b1a6029d999b9bba6b9d8793e077a16c938f5883397944f3bd01f8cd48a',
-          'platform':    'linux/arm/v6',
-          'registry':    'lsong-demo1',
-          'registryURI': 'registry-1.docker.io',
-          'repository':  'library/alpine',
-          'tag':         '3.15.4'
-        },
-        'metadata':       { 'name': 'afbcb3020252bb3f083c41a87797af5a86037e2c2660d436ffe8f26b9f57e312' },
-        'imageReference': 'registry-1.docker.io/library/alpine:3.15.4',
-        'scanResult':     {
-          'critical': 1,
-          'high':     8,
-          'medium':   14,
-          'low':      0,
-          'unknown':  0
-        }
-      },
-      {
-        'id':            'default/b12dc8cd6c65cc2565a40bff88ebb3347892965f947cbe45aa35ebb0b994aef4',
-        'imageMetadata': {
-          'digest':      'sha256:e3eab9c3eca392e368ce5d1ff18735e2ccafae461ba4542ae1a36d1f51f3663e',
-          'platform':    'linux/s390x',
-          'registry':    'lsong-demo1',
-          'registryURI': 'registry-1.docker.io',
-          'repository':  'library/alpine',
-          'tag':         '3.6.5'
-        },
-        'metadata':       { 'name': 'b12dc8cd6c65cc2565a40bff88ebb3347892965f947cbe45aa35ebb0b994aef4' },
-        'imageReference': 'registry-1.docker.io/library/alpine:3.6.5',
-        'scanResult':     {
-          'critical': 0,
-          'high':     0,
-          'medium':   0,
-          'low':      0,
-          'unknown':  0
-        }
-      },
-      {
-        'id':            'default/b453b6e90d4a6db5a3eb2fd9e12f8aa598f676cacafdaefa30af17a4905b623f',
-        'imageMetadata': {
-          'digest':      'sha256:51103b3f2993cbc1b45ff9d941b5d461484002792e02aa29580ec5282de719d4',
-          'platform':    'linux/386',
-          'registry':    'lsong-demo1',
-          'registryURI': 'registry-1.docker.io',
-          'repository':  'library/alpine',
-          'tag':         '3.15.4'
-        },
-        'metadata':       { 'name': 'b453b6e90d4a6db5a3eb2fd9e12f8aa598f676cacafdaefa30af17a4905b623f' },
-        'imageReference': 'registry-1.docker.io/library/alpine:3.15.4',
-        'scanResult':     {
-          'critical': 1,
-          'high':     8,
-          'medium':   14,
-          'low':      0,
-          'unknown':  0
-        }
-      },
-      {
-        'id':            'default/b46389fe27f312ee8741985788f7fe12e59ca414e4a6e37941547153c74b82fa',
-        'imageMetadata': {
-          'digest':      'sha256:dc18010aabc13ce121123c7bb0f4dcb6879ce22b4f7c65669a2c634b5ceecafb',
-          'platform':    'linux/arm/v7',
-          'registry':    'lsong-demo1',
-          'registryURI': 'registry-1.docker.io',
-          'repository':  'library/alpine',
-          'tag':         '3.15.4'
-        },
-        'metadata':       { 'name': 'b46389fe27f312ee8741985788f7fe12e59ca414e4a6e37941547153c74b82fa' },
-        'imageReference': 'registry-1.docker.io/library/alpine:3.15.4',
-        'scanResult':     {
-          'critical': 1,
-          'high':     8,
-          'medium':   14,
-          'low':      0,
-          'unknown':  0
-        }
-      },
-      {
-        'id':            'default/b4a74d02c43c195fbbe594d1e410ef628526de71cbbd467fd35fa37642640f45',
-        'imageMetadata': {
-          'digest':      'sha256:b836e8a5a3ad3a108cdcdad7087a63089b2dd2e2f30bd9121edd8dbc06a3124d',
-          'platform':    'linux/amd64',
-          'registry':    'lsong-demo1',
-          'registryURI': 'registry-1.docker.io',
-          'repository':  'library/alpine',
-          'tag':         '3.19.2'
-        },
-        'metadata':       { 'name': 'b4a74d02c43c195fbbe594d1e410ef628526de71cbbd467fd35fa37642640f45' },
-        'imageReference': 'registry-1.docker.io/library/alpine:3.19.2',
-        'scanResult':     {
-          'critical': 0,
-          'high':     4,
-          'medium':   11,
-          'low':      7,
-          'unknown':  0
-        }
-      },
-      {
-        'id':            'default/b509df27eaab1d0314c74b4bdc0fd39df5f28eef3ea02929c80067225cc6bbbb',
-        'imageMetadata': {
-          'digest':      'sha256:4217ef60b4b11942f76d992798c5904782ebb86f70742800644da32ba3a6f25b',
-          'platform':    'linux/s390x',
-          'registry':    'lsong-demo1',
-          'registryURI': 'registry-1.docker.io',
-          'repository':  'library/alpine',
-          'tag':         '3.12.3'
-        },
-        'metadata':       { 'name': 'b509df27eaab1d0314c74b4bdc0fd39df5f28eef3ea02929c80067225cc6bbbb' },
-        'imageReference': 'registry-1.docker.io/library/alpine:3.12.3',
-        'scanResult':     {
-          'critical': 4,
-          'high':     32,
-          'medium':   6,
-          'low':      2,
-          'unknown':  0
-        }
-      },
-      {
-        'id':            'default/b5816f24b588dd4b3c0c27a3493f15c7377e7f7d25ac012286dcf4b20facefc3',
-        'imageMetadata': {
-          'digest':      'sha256:bc3a56cf7fea030fbf230540ce724c2e5f81434eb2903910c31e7be3918f3890',
-          'platform':    'linux/arm/v7',
-          'registry':    'lsong-demo1',
-          'registryURI': 'registry-1.docker.io',
-          'repository':  'library/alpine',
-          'tag':         '3.11.12'
-        },
-        'metadata':       { 'name': 'b5816f24b588dd4b3c0c27a3493f15c7377e7f7d25ac012286dcf4b20facefc3' },
-        'imageReference': 'registry-1.docker.io/library/alpine:3.11.12',
-        'scanResult':     {
-          'critical': 1,
-          'high':     18,
-          'medium':   2,
-          'low':      0,
-          'unknown':  0
-        }
-      },
-      {
-        'id':            'default/b6f279ffe17823e2097bcaedefa5b6ce75e482e7ed4e989815fc20fe0efa1f6b',
-        'imageMetadata': {
-          'digest':      'sha256:915a0447d045e3b55f84e8456de861571200ee39f38a0ce70a45f91c29491a21',
-          'platform':    'linux/arm/v7',
-          'registry':    'lsong-demo1',
-          'registryURI': 'registry-1.docker.io',
-          'repository':  'library/alpine',
-          'tag':         '3.10.3'
-        },
-        'metadata':       { 'name': 'b6f279ffe17823e2097bcaedefa5b6ce75e482e7ed4e989815fc20fe0efa1f6b' },
-        'imageReference': 'registry-1.docker.io/library/alpine:3.10.3',
-        'scanResult':     {
-          'critical': 1,
-          'high':     9,
-          'medium':   10,
-          'low':      2,
-          'unknown':  0
-        }
-      },
-      {
-        'id':            'default/ba6574671740228b2900c86f095eed5d488c5ea4442aa8e0fb885b443fcf88ef',
-        'imageMetadata': {
-          'digest':      'sha256:17d432b0c16d46b7d978dd82a14084f7bcebe497532baea3e3cd9864eb044406',
-          'platform':    'linux/arm64/v8',
-          'registry':    'lsong-demo1',
-          'registryURI': 'registry-1.docker.io',
-          'repository':  'library/alpine',
-          'tag':         '3.13.6'
-        },
-        'metadata':       { 'name': 'ba6574671740228b2900c86f095eed5d488c5ea4442aa8e0fb885b443fcf88ef' },
-        'imageReference': 'registry-1.docker.io/library/alpine:3.13.6',
-        'scanResult':     {
-          'critical': 1,
-          'high':     25,
-          'medium':   6,
-          'low':      0,
-          'unknown':  0
-        }
-      },
-      {
-        'id':            'default/baefe2a0e210919962d50c2921650e44227d98f02720811bcb51e4852b17d4aa',
-        'imageMetadata': {
-          'digest':      'sha256:299294be8699c1b323c137f972fd0aa5eaa4b95489c213091dcf46ef39b6c810',
-          'platform':    'linux/arm/v7',
-          'registry':    'lsong-demo1',
-          'registryURI': 'registry-1.docker.io',
-          'repository':  'library/alpine',
-          'tag':         '3.12.3'
-        },
-        'metadata':       { 'name': 'baefe2a0e210919962d50c2921650e44227d98f02720811bcb51e4852b17d4aa' },
-        'imageReference': 'registry-1.docker.io/library/alpine:3.12.3',
-        'scanResult':     {
-          'critical': 4,
-          'high':     32,
-          'medium':   6,
-          'low':      2,
-          'unknown':  0
-        }
-      },
-      {
-        'id':            'default/c3a725db65daacd9e6736d67a53aed00e526fe70690e03a1ba4586f32ae1cbed',
-        'imageMetadata': {
-          'digest':      'sha256:d04f568d1401e6bcc2c34bd81ac1035ba1d8fc3a03b92c78e84cec61e028d6ea',
-          'platform':    'linux/s390x',
-          'registry':    'lsong-demo1',
-          'registryURI': 'registry-1.docker.io',
-          'repository':  'library/alpine',
-          'tag':         '3.13.6'
-        },
-        'metadata':       { 'name': 'c3a725db65daacd9e6736d67a53aed00e526fe70690e03a1ba4586f32ae1cbed' },
-        'imageReference': 'registry-1.docker.io/library/alpine:3.13.6',
-        'scanResult':     {
-          'critical': 1,
-          'high':     25,
-          'medium':   6,
-          'low':      0,
-          'unknown':  0
-        }
-      },
-      {
-        'id':            'default/c80cb9ad09128fe9099c8930c063f0026ff0d5866ba1aa0c8e7042b41eb1de26',
-        'imageMetadata': {
-          'digest':      'sha256:903bfe2ae9942c3e1520ef3b4085d3ed0ae7aa04d5b084a6b5f20c3a2bf54d37',
-          'platform':    'linux/arm/v6',
-          'registry':    'lsong-demo1',
-          'registryURI': 'registry-1.docker.io',
-          'repository':  'library/alpine',
-          'tag':         '3.21.3'
-        },
-        'metadata':       { 'name': 'c80cb9ad09128fe9099c8930c063f0026ff0d5866ba1aa0c8e7042b41eb1de26' },
-        'imageReference': 'registry-1.docker.io/library/alpine:3.21.3',
-        'scanResult':     {
-          'critical': 0,
-          'high':     0,
-          'medium':   7,
-          'low':      5,
-          'unknown':  0
-        }
-      },
-      {
-        'id':            'default/cdeb233e7b54d1d0f2ca2a15a63879a8261ca4ae10f095631d728047732d3117',
-        'imageMetadata': {
-          'digest':      'sha256:1de5eb4a9a6735adb46b2c9c88674c0cfba3444dd4ac2341b3babf1261700529',
-          'platform':    'linux/riscv64',
-          'registry':    'lsong-demo1',
-          'registryURI': 'registry-1.docker.io',
-          'repository':  'library/alpine',
-          'tag':         '3.21.3'
-        },
-        'metadata':       { 'name': 'cdeb233e7b54d1d0f2ca2a15a63879a8261ca4ae10f095631d728047732d3117' },
-        'imageReference': 'registry-1.docker.io/library/alpine:3.21.3',
-        'scanResult':     {
-          'critical': 0,
-          'high':     0,
-          'medium':   7,
-          'low':      5,
-          'unknown':  0
-        }
-      },
-      {
-        'id':            'default/d11a4ab92e010af0af50762cce9832e4f54b784f1ded715d44e55f025687a8fe',
-        'imageMetadata': {
-          'digest':      'sha256:0325f4ff0aa8c89a27d1dbe10b29a71a8d4c1a42719a4170e0552a312e22fe88',
-          'platform':    'linux/amd64',
-          'registry':    'lsong-demo1',
-          'registryURI': 'registry-1.docker.io',
-          'repository':  'library/alpine',
-          'tag':         '3.4'
-        },
-        'metadata':       { 'name': 'd11a4ab92e010af0af50762cce9832e4f54b784f1ded715d44e55f025687a8fe' },
-        'imageReference': 'registry-1.docker.io/library/alpine:3.4',
-        'scanResult':     {
-          'critical': 0,
-          'high':     2,
-          'medium':   10,
-          'low':      0,
-          'unknown':  0
-        }
-      },
-      {
-        'id':            'default/d127fcd6e13e6f89db254cbf77930216f8925380218ea4425e4d570ee8496a9f',
-        'imageMetadata': {
-          'digest':      'sha256:f398c8d5c6b54212a0d71bd3d9c6e08b2c2df51210f837187a6eb1280a284fdb',
-          'platform':    'linux/arm64/v8',
-          'registry':    'lsong-demo1',
-          'registryURI': 'registry-1.docker.io',
-          'repository':  'library/alpine',
-          'tag':         '3.20.5'
-        },
-        'metadata':       { 'name': 'd127fcd6e13e6f89db254cbf77930216f8925380218ea4425e4d570ee8496a9f' },
-        'imageReference': 'registry-1.docker.io/library/alpine:3.20.5',
-        'scanResult':     {
-          'critical': 0,
-          'high':     4,
-          'medium':   9,
-          'low':      5,
-          'unknown':  0
-        }
-      },
-      {
-        'id':            'default/d1793b8757aa3af53af988721b4a863d550a5cf8c19016a3df5fb07ad00356e4',
-        'imageMetadata': {
-          'digest':      'sha256:277e770b7532b4c7e0576494f77d20b8cc115b3c517d02f50c3202a6a3bdb5d5',
-          'platform':    'linux/386',
-          'registry':    'lsong-demo1',
-          'registryURI': 'registry-1.docker.io',
-          'repository':  'library/alpine',
-          'tag':         '3.6.5'
-        },
-        'metadata':       { 'name': 'd1793b8757aa3af53af988721b4a863d550a5cf8c19016a3df5fb07ad00356e4' },
-        'imageReference': 'registry-1.docker.io/library/alpine:3.6.5',
-        'scanResult':     {
-          'critical': 0,
-          'high':     0,
-          'medium':   0,
-          'low':      0,
-          'unknown':  0
-        }
-      },
-      {
-        'id':            'default/d2285f7c1af281fbae5e5bd9eadfcc4c3be0e36f6228091406c1715e88b640f0',
-        'imageMetadata': {
-          'digest':      'sha256:4ed1812024ed78962a34727137627e8854a3b414d19e2c35a1dc727a47e16fba',
-          'platform':    'linux/386',
-          'registry':    'lsong-demo1',
-          'registryURI': 'registry-1.docker.io',
-          'repository':  'library/alpine',
-          'tag':         '3.13.6'
-        },
-        'metadata':       { 'name': 'd2285f7c1af281fbae5e5bd9eadfcc4c3be0e36f6228091406c1715e88b640f0' },
-        'imageReference': 'registry-1.docker.io/library/alpine:3.13.6',
-        'scanResult':     {
-          'critical': 1,
-          'high':     25,
-          'medium':   6,
-          'low':      0,
-          'unknown':  0
-        }
-      },
-      {
-        'id':            'default/d316bf9e6db7f3f45bc84da646170acc32017034c6485a14e3623566a7686b79',
-        'imageMetadata': {
-          'digest':      'sha256:47391b9954d5b3de74ecf108a53eced4e63a56dd8a77dfc9a3542dd658055172',
-          'platform':    'linux/riscv64',
-          'registry':    'lsong-demo1',
-          'registryURI': 'registry-1.docker.io',
-          'repository':  'library/alpine',
-          'tag':         '3.20.5'
-        },
-        'metadata':       { 'name': 'd316bf9e6db7f3f45bc84da646170acc32017034c6485a14e3623566a7686b79' },
-        'imageReference': 'registry-1.docker.io/library/alpine:3.20.5',
-        'scanResult':     {
-          'critical': 0,
-          'high':     4,
-          'medium':   9,
-          'low':      5,
-          'unknown':  0
-        }
-      },
-      {
-        'id':            'default/d4492ce7b1e9f250ee3a711a33f4000ea30a188997a0baa0a16c6ec9d95a3c36',
-        'imageMetadata': {
-          'digest':      'sha256:14d4381342be1cab4adc3d5288a279a8a2fc665907363e1dce510bec52f29af3',
-          'platform':    'linux/386',
-          'registry':    'lsong-demo1',
-          'registryURI': 'registry-1.docker.io',
-          'repository':  'library/alpine',
-          'tag':         '3.17.1'
-        },
-        'metadata':       { 'name': 'd4492ce7b1e9f250ee3a711a33f4000ea30a188997a0baa0a16c6ec9d95a3c36' },
-        'imageReference': 'registry-1.docker.io/library/alpine:3.17.1',
-        'scanResult':     {
-          'critical': 0,
-          'high':     20,
-          'medium':   44,
-          'low':      4,
-          'unknown':  0
-        }
-      },
-      {
-        'id':            'default/d487aaacd519c2855283601ba860f991825e36ee36ffd9cb437a0fa98c77e7f5',
-        'imageMetadata': {
-          'digest':      'sha256:29a82d50bdb8dd7814009852c1773fb9bb300d2f655bd1cd9e764e7bb1412be3',
-          'platform':    'linux/arm/v6',
-          'registry':    'lsong-demo1',
-          'registryURI': 'registry-1.docker.io',
-          'repository':  'library/alpine',
-          'tag':         '3.10.3'
-        },
-        'metadata':       { 'name': 'd487aaacd519c2855283601ba860f991825e36ee36ffd9cb437a0fa98c77e7f5' },
-        'imageReference': 'registry-1.docker.io/library/alpine:3.10.3',
-        'scanResult':     {
-          'critical': 1,
-          'high':     9,
-          'medium':   10,
-          'low':      2,
-          'unknown':  0
-        }
-      },
-      {
-        'id':            'default/d67a082d0c98ca3503a818796b14424a98c9aa6a1ef4cd0f9ca6d04d423ded97',
-        'imageMetadata': {
-          'digest':      'sha256:69704ef328d05a9f806b6b8502915e6a0a4faa4d72018dc42343f511490daf8a',
-          'platform':    'linux/amd64',
-          'registry':    'lsong-demo1',
-          'registryURI': 'registry-1.docker.io',
-          'repository':  'library/alpine',
-          'tag':         '3.14.2'
-        },
-        'metadata':       { 'name': 'd67a082d0c98ca3503a818796b14424a98c9aa6a1ef4cd0f9ca6d04d423ded97' },
-        'imageReference': 'registry-1.docker.io/library/alpine:3.14.2',
-        'scanResult':     {
-          'critical': 1,
-          'high':     32,
-          'medium':   10,
-          'low':      0,
-          'unknown':  0
-        }
-      },
-      {
-        'id':            'default/de062db4fe0bcc8aba7b9ee7d7e82455e24ceb75f2f573e6eb8dcad35579b2c0',
-        'imageMetadata': {
-          'digest':      'sha256:77cbe97593c890eb1c4cadcbca37809ebff2b5f46a036666866c99f08a708967',
-          'platform':    'linux/386',
-          'registry':    'lsong-demo1',
-          'registryURI': 'registry-1.docker.io',
-          'repository':  'library/alpine',
-          'tag':         '3.10.3'
-        },
-        'metadata':       { 'name': 'de062db4fe0bcc8aba7b9ee7d7e82455e24ceb75f2f573e6eb8dcad35579b2c0' },
-        'imageReference': 'registry-1.docker.io/library/alpine:3.10.3',
-        'scanResult':     {
-          'critical': 1,
-          'high':     9,
-          'medium':   10,
-          'low':      2,
-          'unknown':  0
-        }
-      },
-      {
-        'id':            'default/df3dc4444d33f977b5570e2ffae49ee5adef1dafe6f9a20665f8509cf4f96cd7',
-        'imageMetadata': {
-          'digest':      'sha256:fb28db57eff4a87917c5c83325a1ca62adce670a3f6e1da50a3387211d72ba96',
-          'platform':    'linux/arm/v6',
-          'registry':    'lsong-demo1',
-          'registryURI': 'registry-1.docker.io',
-          'repository':  'library/alpine',
-          'tag':         '3.13.6'
-        },
-        'metadata':       { 'name': 'df3dc4444d33f977b5570e2ffae49ee5adef1dafe6f9a20665f8509cf4f96cd7' },
-        'imageReference': 'registry-1.docker.io/library/alpine:3.13.6',
-        'scanResult':     {
-          'critical': 1,
-          'high':     25,
-          'medium':   6,
-          'low':      0,
-          'unknown':  0
-        }
-      },
-      {
-        'id':            'default/e4cb468b0599939d8b74053c59227b0eb3b64fe293dc44d3e1a8d3bddf603326',
-        'imageMetadata': {
-          'digest':      'sha256:169b2750787ff8d4995ba535293bf549958b596067165ce678afa928225d97cc',
-          'platform':    'linux/386',
-          'registry':    'lsong-demo1',
-          'registryURI': 'registry-1.docker.io',
-          'repository':  'library/alpine',
-          'tag':         '3.14.1'
-        },
-        'metadata':       { 'name': 'e4cb468b0599939d8b74053c59227b0eb3b64fe293dc44d3e1a8d3bddf603326' },
-        'imageReference': 'registry-1.docker.io/library/alpine:3.14.1',
-        'scanResult':     {
-          'critical': 3,
-          'high':     34,
-          'medium':   10,
-          'low':      0,
-          'unknown':  0
-        }
-      },
-      {
-        'id':            'default/ea9dc3de235ad93fb5722e159dd2456b26647eac78e6f8a5518903815034f534',
-        'imageMetadata': {
-          'digest':      'sha256:7bf024556a224584c0fff680d650b4be2ad560b17f6f627b11e0e2d5beb4b597',
-          'platform':    'linux/arm/v7',
-          'registry':    'lsong-demo1',
-          'registryURI': 'registry-1.docker.io',
-          'repository':  'library/alpine',
-          'tag':         '3.13.6'
-        },
-        'metadata':       { 'name': 'ea9dc3de235ad93fb5722e159dd2456b26647eac78e6f8a5518903815034f534' },
-        'imageReference': 'registry-1.docker.io/library/alpine:3.13.6',
-        'scanResult':     {
-          'critical': 1,
-          'high':     25,
-          'medium':   6,
-          'low':      0,
-          'unknown':  0
-        }
-      },
-      {
-        'id':            'default/ec0b70ee61b9d633674ebb1d6aa415eb28c703938a6e0ea70edf76265240809f',
-        'imageMetadata': {
-          'digest':      'sha256:41d876d4e44348d1c27445fdb0e64592e0eb926d4dbbcf09a3526dee7e628329',
-          'platform':    'linux/arm64/v8',
-          'registry':    'lsong-demo1',
-          'registryURI': 'registry-1.docker.io',
-          'repository':  'library/alpine',
-          'tag':         '3.17.1'
-        },
-        'metadata':       { 'name': 'ec0b70ee61b9d633674ebb1d6aa415eb28c703938a6e0ea70edf76265240809f' },
-        'imageReference': 'registry-1.docker.io/library/alpine:3.17.1',
-        'scanResult':     {
-          'critical': 0,
-          'high':     20,
-          'medium':   44,
-          'low':      4,
-          'unknown':  0
-        }
-      },
-      {
-        'id':            'default/eca2ea5fa7ab1a7641385b2245af0f940cb571c3361be7ebb898855be5d2c613',
-        'imageMetadata': {
-          'digest':      'sha256:bf099748db97b0295fb330b9bcb0c11cd66c1ef408d4621c25990a7e56294bd5',
-          'platform':    'linux/ppc64le',
-          'registry':    'lsong-demo1',
-          'registryURI': 'registry-1.docker.io',
-          'repository':  'library/alpine',
-          'tag':         '3.20.5'
-        },
-        'metadata':       { 'name': 'eca2ea5fa7ab1a7641385b2245af0f940cb571c3361be7ebb898855be5d2c613' },
-        'imageReference': 'registry-1.docker.io/library/alpine:3.20.5',
-        'scanResult':     {
-          'critical': 0,
-          'high':     4,
-          'medium':   9,
-          'low':      5,
-          'unknown':  0
-        }
-      },
-      {
-        'id':            'default/eeaea6134edc5a0591ff8cd8c8cd178ca84707bca8175a3f5515c20b42e1734d',
-        'imageMetadata': {
-          'digest':      'sha256:9c2d245b3c01c4d7da0d3319d278e7aa4dd899076721abd205b595b2d3b2383b',
-          'platform':    'linux/arm/v7',
-          'registry':    'lsong-demo1',
-          'registryURI': 'registry-1.docker.io',
-          'repository':  'library/alpine',
-          'tag':         '3.21.3'
-        },
-        'metadata':       { 'name': 'eeaea6134edc5a0591ff8cd8c8cd178ca84707bca8175a3f5515c20b42e1734d' },
-        'imageReference': 'registry-1.docker.io/library/alpine:3.21.3',
-        'scanResult':     {
-          'critical': 0,
-          'high':     0,
-          'medium':   7,
-          'low':      5,
-          'unknown':  0
-        }
-      },
-      {
-        'id':            'default/ef7b0de4b0e000d32f9663fa367510d68f462c65ce908d989c945ed848a59453',
-        'imageMetadata': {
-          'digest':      'sha256:096ebf69d65b5dcb3756fcfb053e6031a3935542f20cd7a8b7c59e1b3cb71558',
-          'platform':    'linux/arm/v6',
-          'registry':    'lsong-demo1',
-          'registryURI': 'registry-1.docker.io',
-          'repository':  'library/alpine',
-          'tag':         '3.12.3'
-        },
-        'metadata':       { 'name': 'ef7b0de4b0e000d32f9663fa367510d68f462c65ce908d989c945ed848a59453' },
-        'imageReference': 'registry-1.docker.io/library/alpine:3.12.3',
-        'scanResult':     {
-          'critical': 4,
-          'high':     32,
-          'medium':   6,
-          'low':      2,
-          'unknown':  0
-        }
-      },
-      {
-        'id':            'default/f3080a453be42c82a8ce5f7ea1e3478828b8bbbf688ae971ca54e6561ee48e68',
-        'imageMetadata': {
-          'digest':      'sha256:1c4eef651f65e2f7daee7ee785882ac164b02b78fb74503052a26dc061c90474',
-          'platform':    'linux/amd64',
-          'registry':    'lsong-demo1',
-          'registryURI': 'registry-1.docker.io',
-          'repository':  'library/alpine',
-          'tag':         '3.21.3'
-        },
-        'metadata':       { 'name': 'f3080a453be42c82a8ce5f7ea1e3478828b8bbbf688ae971ca54e6561ee48e68' },
-        'imageReference': 'registry-1.docker.io/library/alpine:3.21.3',
-        'scanResult':     {
-          'critical': 0,
-          'high':     0,
-          'medium':   7,
-          'low':      5,
-          'unknown':  0
-        }
-      },
-      {
-        'id':            'default/f5da5a8fdcd991ee91a830adbd54c159f6a5d4a7ed9c84375e0d3c625d9ffe04',
-        'imageMetadata': {
-          'digest':      'sha256:93d5a28ff72d288d69b5997b8ba47396d2cbb62a72b5d87cd3351094b5d578a0',
-          'platform':    'linux/amd64',
-          'registry':    'lsong-demo1',
-          'registryURI': 'registry-1.docker.io',
-          'repository':  'library/alpine',
-          'tag':         '3.17.1'
-        },
-        'metadata':       { 'name': 'f5da5a8fdcd991ee91a830adbd54c159f6a5d4a7ed9c84375e0d3c625d9ffe04' },
-        'imageReference': 'registry-1.docker.io/library/alpine:3.17.1',
-        'scanResult':     {
-          'critical': 0,
-          'high':     20,
-          'medium':   44,
-          'low':      4,
-          'unknown':  0
-        }
-      },
-      {
-        'id':            'default/fd53d29baa0134e07943b84ef2a7967fa4cbd17bbacf7835c6885647f9af2c40',
-        'imageMetadata': {
-          'digest':      'sha256:be9bdc0ef8e96dbc428dc189b31e2e3b05523d96d12ed627c37aa2936653258c',
-          'platform':    'linux/amd64',
-          'registry':    'lsong-demo1',
-          'registryURI': 'registry-1.docker.io',
-          'repository':  'library/alpine',
-          'tag':         '3.14.1'
-        },
-        'metadata':       { 'name': 'fd53d29baa0134e07943b84ef2a7967fa4cbd17bbacf7835c6885647f9af2c40' },
-        'imageReference': 'registry-1.docker.io/library/alpine:3.14.1',
-        'scanResult':     {
-          'critical': 3,
-          'high':     34,
-          'medium':   10,
-          'low':      0,
-          'unknown':  0
-        }
-      }
-    ]
-  },
-  {
-    'id':           'linuxcontainers/alpine,demo-02',
-    'repository':   'linuxcontainers/alpine',
-    'registry':     'demo-02',
-    'metadata':     { 'namespace': 'default' },
-    'cveCntByRepo': {
-      'critical': 21,
-      'high':     268,
-      'medium':   563,
-      'low':      43,
-      'unknown':  0
-    },
-    'images': [
-      {
-        'id':            'default/0c687c3d66f379f40a5196f216524a3c4bfaa836c020f9f5cc969c51fe20da5c',
-        'imageMetadata': {
-          'digest':      'sha256:8f482337efb630a6ee083da36af420c3ca7198aa4b2f159983da32f164d3f9bd',
-          'platform':    'linux/amd64',
-          'registry':    'demo-02',
-          'registryURI': 'ghcr.io',
-          'repository':  'linuxcontainers/alpine',
-          'tag':         '3.14.6'
-        },
-        'metadata':       { 'name': '0c687c3d66f379f40a5196f216524a3c4bfaa836c020f9f5cc969c51fe20da5c' },
-        'imageReference': 'ghcr.io/linuxcontainers/alpine:3.14.6',
-        'scanResult':     {
-          'critical': 1,
-          'high':     8,
-          'medium':   6,
-          'low':      0,
-          'unknown':  0
-        }
-      },
-      {
-        'id':            'default/130314fa8a14333a5adc6074bfb85ab48b004711001f01fe45198eba929d9303',
-        'imageMetadata': {
-          'digest':      'sha256:aa8b9d7cf9278047ce9e75e72aeb7d3499fa9969886671b2c26989ca1e3896a6',
-          'platform':    'linux/amd64',
-          'registry':    'demo-02',
-          'registryURI': 'ghcr.io',
-          'repository':  'linuxcontainers/alpine',
-          'tag':         '3.16.0'
-        },
-        'metadata':       { 'name': '130314fa8a14333a5adc6074bfb85ab48b004711001f01fe45198eba929d9303' },
-        'imageReference': 'ghcr.io/linuxcontainers/alpine:3.16.0',
-        'scanResult':     {
-          'critical': 1,
-          'high':     10,
-          'medium':   14,
-          'low':      0,
-          'unknown':  0
-        }
-      },
-      {
-        'id':            'default/15e1d71b11b9d3869484139a1e15a57266308aca4763b860f49003a8994b1067',
-        'imageMetadata': {
-          'digest':      'sha256:80f691e9e10cd37a21364379cd20481518ef27871941820f5702d8d6486a6c2f',
-          'platform':    'linux/amd64',
-          'registry':    'demo-02',
-          'registryURI': 'ghcr.io',
-          'repository':  'linuxcontainers/alpine',
-          'tag':         '3.15.0'
-        },
-        'metadata':       { 'name': '15e1d71b11b9d3869484139a1e15a57266308aca4763b860f49003a8994b1067' },
-        'imageReference': 'ghcr.io/linuxcontainers/alpine:3.15.0',
-        'scanResult':     {
-          'critical': 1,
-          'high':     14,
-          'medium':   14,
-          'low':      0,
-          'unknown':  0
-        }
-      },
-      {
-        'id':            'default/250c891fe70aea9cfdb139fb30088c8cf567a57dff4fd77d7006e821950f8b0b',
-        'imageMetadata': {
-          'digest':      'sha256:2c3295b9af25b232414bee1f328d29382079a9a559d1f4aaffe0d4eb3cb6cdee',
-          'platform':    'linux/amd64',
-          'registry':    'demo-02',
-          'registryURI': 'ghcr.io',
-          'repository':  'linuxcontainers/alpine',
-          'tag':         '3.15.5'
-        },
-        'metadata':       { 'name': '250c891fe70aea9cfdb139fb30088c8cf567a57dff4fd77d7006e821950f8b0b' },
-        'imageReference': 'ghcr.io/linuxcontainers/alpine:3.15.5',
-        'scanResult':     {
-          'critical': 1,
-          'high':     8,
-          'medium':   12,
-          'low':      0,
-          'unknown':  0
-        }
-      },
-      {
-        'id':            'default/2673ce181bf4517bf24ed8cdf28e2df9e1fbafa59c3897a8b7199a28d4dac1ab',
-        'imageMetadata': {
-          'digest':      'sha256:55e1dc9739c6204f93366d00d75918b9e3e31137ebbbe8063d31828aaa73527c',
-          'platform':    'linux/amd64',
-          'registry':    'demo-02',
-          'registryURI': 'ghcr.io',
-          'repository':  'linuxcontainers/alpine',
-          'tag':         '3.14.5'
-        },
-        'metadata':       { 'name': '2673ce181bf4517bf24ed8cdf28e2df9e1fbafa59c3897a8b7199a28d4dac1ab' },
-        'imageReference': 'ghcr.io/linuxcontainers/alpine:3.14.5',
-        'scanResult':     {
-          'critical': 1,
-          'high':     10,
-          'medium':   6,
-          'low':      0,
-          'unknown':  0
-        }
-      },
-      {
-        'id':            'default/2b6e856efea7d0b08d860475b0e9e05e7929e610583f38f1ba9175c0615856ed',
-        'imageMetadata': {
-          'digest':      'sha256:578b5aa9762dc76d03b6d6489c66821b7ccd1047abd51f37e6475786d0dba3ee',
-          'platform':    'linux/amd64',
-          'registry':    'demo-02',
-          'registryURI': 'ghcr.io',
-          'repository':  'linuxcontainers/alpine',
-          'tag':         '3.15.7'
-        },
-        'metadata':       { 'name': '2b6e856efea7d0b08d860475b0e9e05e7929e610583f38f1ba9175c0615856ed' },
-        'imageReference': 'ghcr.io/linuxcontainers/alpine:3.15.7',
-        'scanResult':     {
-          'critical': 0,
-          'high':     2,
-          'medium':   10,
-          'low':      0,
-          'unknown':  0
-        }
-      },
-      {
-        'id':            'default/2f269949a2004621775541cd579122c59e007b2f96d1f2f3a78f7976e83b9007',
-        'imageMetadata': {
-          'digest':      'sha256:d22cb65d578ea325347d7a6e5645998c3e7310f57504368df2a1a8f4337d1ed6',
-          'platform':    'linux/amd64',
-          'registry':    'demo-02',
-          'registryURI': 'ghcr.io',
-          'repository':  'linuxcontainers/alpine',
-          'tag':         '3'
-        },
-        'metadata':       { 'name': '2f269949a2004621775541cd579122c59e007b2f96d1f2f3a78f7976e83b9007' },
-        'imageReference': 'ghcr.io/linuxcontainers/alpine:3',
-        'scanResult':     {
-          'critical': 2,
-          'high':     2,
-          'medium':   23,
-          'low':      5,
-          'unknown':  0
-        }
-      },
-      {
-        'id':            'default/34341ccfb6dd0b5140720f2cb95e2b4387b55bf44f053d8fbce89c24cf64e51c',
-        'imageMetadata': {
-          'digest':      'sha256:0280c1a478f8c9daf4d60b066e1eb76c94bf90beb5c67a0ce74c50a3f8b48a94',
-          'platform':    'linux/amd64',
-          'registry':    'demo-02',
-          'registryURI': 'ghcr.io',
-          'repository':  'linuxcontainers/alpine',
-          'tag':         '3.17.3'
-        },
-        'metadata':       { 'name': '34341ccfb6dd0b5140720f2cb95e2b4387b55bf44f053d8fbce89c24cf64e51c' },
-        'imageReference': 'ghcr.io/linuxcontainers/alpine:3.17.3',
-        'scanResult':     {
-          'critical': 0,
-          'high':     6,
-          'medium':   34,
-          'low':      4,
-          'unknown':  0
-        }
-      },
-      {
-        'id':            'default/436307a73bb247a940dcf6a1877d11793bbdac9582e5e0cbc5e81aa9c7fb1782',
-        'imageMetadata': {
-          'digest':      'sha256:578b5aa9762dc76d03b6d6489c66821b7ccd1047abd51f37e6475786d0dba3ee',
-          'platform':    'linux/amd64',
-          'registry':    'demo-02',
-          'registryURI': 'ghcr.io',
-          'repository':  'linuxcontainers/alpine',
-          'tag':         '3.15'
-        },
-        'metadata':       { 'name': '436307a73bb247a940dcf6a1877d11793bbdac9582e5e0cbc5e81aa9c7fb1782' },
-        'imageReference': 'ghcr.io/linuxcontainers/alpine:3.15',
-        'scanResult':     {
-          'critical': 0,
-          'high':     2,
-          'medium':   10,
-          'low':      0,
-          'unknown':  0
-        }
-      },
-      {
-        'id':            'default/4ceb377e6eacb4d695c03a6cad5bfa913841630bbb5226fa9e8bab19bfa1b560',
-        'imageMetadata': {
-          'digest':      'sha256:03bef9cd1ac0ceb3fdfc228c19c3237e633fc3086e9e51f8347ae582ccf73bb1',
-          'platform':    'linux/amd64',
-          'registry':    'demo-02',
-          'registryURI': 'ghcr.io',
-          'repository':  'linuxcontainers/alpine',
-          'tag':         '3.16.2'
-        },
-        'metadata':       { 'name': '4ceb377e6eacb4d695c03a6cad5bfa913841630bbb5226fa9e8bab19bfa1b560' },
-        'imageReference': 'ghcr.io/linuxcontainers/alpine:3.16.2',
-        'scanResult':     {
-          'critical': 0,
-          'high':     10,
-          'medium':   14,
-          'low':      0,
-          'unknown':  0
-        }
-      },
-      {
-        'id':            'default/4db7741584aaa33eb7b282fc7e173829cd0986d7a731b510362e1d410d101a30',
-        'imageMetadata': {
-          'digest':      'sha256:f8bf2ce4b4bcd0e65f4880ddec62b1c214be2a3b7ef0f143a5c280474e8e1ba4',
-          'platform':    'linux/amd64',
-          'registry':    'demo-02',
-          'registryURI': 'ghcr.io',
-          'repository':  'linuxcontainers/alpine',
-          'tag':         '3.13'
-        },
-        'metadata':       { 'name': '4db7741584aaa33eb7b282fc7e173829cd0986d7a731b510362e1d410d101a30' },
-        'imageReference': 'ghcr.io/linuxcontainers/alpine:3.13',
-        'scanResult':     {
-          'critical': 0,
-          'high':     0,
-          'medium':   0,
-          'low':      0,
-          'unknown':  0
-        }
-      },
-      {
-        'id':            'default/4f75481c6afac18419619f8e1a825132885cccb57cdaa7941362adf7ada88022',
-        'imageMetadata': {
-          'digest':      'sha256:d22cb65d578ea325347d7a6e5645998c3e7310f57504368df2a1a8f4337d1ed6',
-          'platform':    'linux/amd64',
-          'registry':    'demo-02',
-          'registryURI': 'ghcr.io',
-          'repository':  'linuxcontainers/alpine',
-          'tag':         '3.20'
-        },
-        'metadata':       { 'name': '4f75481c6afac18419619f8e1a825132885cccb57cdaa7941362adf7ada88022' },
-        'imageReference': 'ghcr.io/linuxcontainers/alpine:3.20',
-        'scanResult':     {
-          'critical': 2,
-          'high':     2,
-          'medium':   23,
-          'low':      5,
-          'unknown':  0
-        }
-      },
-      {
-        'id':            'default/51af314d95ed2c5de878a8d70dfd94e663b14d9fd2489e08c53ed6496856c023',
-        'imageMetadata': {
-          'digest':      'sha256:44fcc97281af3a82dc84db7a4c15848e271afd3f3103eb284066d7f6393dcfb1',
-          'platform':    'linux/amd64',
-          'registry':    'demo-02',
-          'registryURI': 'ghcr.io',
-          'repository':  'linuxcontainers/alpine',
-          'tag':         '3.15.6'
-        },
-        'metadata':       { 'name': '51af314d95ed2c5de878a8d70dfd94e663b14d9fd2489e08c53ed6496856c023' },
-        'imageReference': 'ghcr.io/linuxcontainers/alpine:3.15.6',
-        'scanResult':     {
-          'critical': 0,
-          'high':     8,
-          'medium':   12,
-          'low':      0,
-          'unknown':  0
-        }
-      },
-      {
-        'id':            'default/51fb164cb0a10f7348e09e428ea1906dd937e67e9ce229dad80d603a0062cb69',
-        'imageMetadata': {
-          'digest':      'sha256:23fb1c8c9333984d164c7c4ed6d0d4ac7ae149ae0d255a6771d711b0031586c5',
-          'platform':    'linux/amd64',
-          'registry':    'demo-02',
-          'registryURI': 'ghcr.io',
-          'repository':  'linuxcontainers/alpine',
-          'tag':         'main'
-        },
-        'metadata':       { 'name': '51fb164cb0a10f7348e09e428ea1906dd937e67e9ce229dad80d603a0062cb69' },
-        'imageReference': 'ghcr.io/linuxcontainers/alpine:main',
-        'scanResult':     {
-          'critical': 1,
-          'high':     11,
-          'medium':   14,
-          'low':      0,
-          'unknown':  0
-        }
-      },
-      {
-        'id':            'default/55da7ec91b63d23ca3f4aefbc489af030621e53f20274a13156533fad80a2733',
-        'imageMetadata': {
-          'digest':      'sha256:0ec6ba49adccc9188d4ea4df64bf54e4ca68f2f2e4a96aeffa968e0a4dc707e8',
-          'platform':    'linux/amd64',
-          'registry':    'demo-02',
-          'registryURI': 'ghcr.io',
-          'repository':  'linuxcontainers/alpine',
-          'tag':         '3.16.3'
-        },
-        'metadata':       { 'name': '55da7ec91b63d23ca3f4aefbc489af030621e53f20274a13156533fad80a2733' },
-        'imageReference': 'ghcr.io/linuxcontainers/alpine:3.16.3',
-        'scanResult':     {
-          'critical': 0,
-          'high':     10,
-          'medium':   14,
-          'low':      0,
-          'unknown':  0
-        }
-      },
-      {
-        'id':            'default/5aaf15d60b23e9ff493f069f869a708ef6e0e310def0bf5c2d45b41ce0288c04',
-        'imageMetadata': {
-          'digest':      'sha256:2c938e2d4c76142f33467f9157c24cb63849e11e0d7540ae70e99ab69f6fbd44',
-          'platform':    'linux/amd64',
-          'registry':    'demo-02',
-          'registryURI': 'ghcr.io',
-          'repository':  'linuxcontainers/alpine',
-          'tag':         '3.18'
-        },
-        'metadata':       { 'name': '5aaf15d60b23e9ff493f069f869a708ef6e0e310def0bf5c2d45b41ce0288c04' },
-        'imageReference': 'ghcr.io/linuxcontainers/alpine:3.18',
-        'scanResult':     {
-          'critical': 0,
-          'high':     6,
-          'medium':   30,
-          'low':      4,
-          'unknown':  0
-        }
-      },
-      {
-        'id':            'default/5bd807a9eace2b96a765f5b824bb6cf6d5a8eb2e9fe73cd0497b50437b16a7b1',
-        'imageMetadata': {
-          'digest':      'sha256:84b52c534d1441eceb3c269c105386e21fa90c40d61f75762b0f4020e4410187',
-          'platform':    'linux/amd64',
-          'registry':    'demo-02',
-          'registryURI': 'ghcr.io',
-          'repository':  'linuxcontainers/alpine',
-          'tag':         '3.16'
-        },
-        'metadata':       { 'name': '5bd807a9eace2b96a765f5b824bb6cf6d5a8eb2e9fe73cd0497b50437b16a7b1' },
-        'imageReference': 'ghcr.io/linuxcontainers/alpine:3.16',
-        'scanResult':     {
-          'critical': 0,
-          'high':     4,
-          'medium':   12,
-          'low':      0,
-          'unknown':  0
-        }
-      },
-      {
-        'id':            'default/5d445b3db466385b53134a3d8df067cd8b2b9d45a3ec9aaf00527e36b7035522',
-        'imageMetadata': {
-          'digest':      'sha256:d51ff169f082efe0e83ea08108744db1f00a762da93f507ee20c5ae670c89f04',
-          'platform':    'linux/amd64',
-          'registry':    'demo-02',
-          'registryURI': 'ghcr.io',
-          'repository':  'linuxcontainers/alpine',
-          'tag':         '3.15.1'
-        },
-        'metadata':       { 'name': '5d445b3db466385b53134a3d8df067cd8b2b9d45a3ec9aaf00527e36b7035522' },
-        'imageReference': 'ghcr.io/linuxcontainers/alpine:3.15.1',
-        'scanResult':     {
-          'critical': 1,
-          'high':     11,
-          'medium':   14,
-          'low':      0,
-          'unknown':  0
-        }
-      },
-      {
-        'id':            'default/63e5543a384b12d65da56e2bf623ed1e71526bbd896f0b676e01852797a5122f',
-        'imageMetadata': {
-          'digest':      'sha256:4d9a80b2d1c942e604a5b50d0375d1ddfaedbd0db38d56e8b3a0595461781db9',
-          'platform':    'linux/amd64',
-          'registry':    'demo-02',
-          'registryURI': 'ghcr.io',
-          'repository':  'linuxcontainers/alpine',
-          'tag':         '3.15.4'
-        },
-        'metadata':       { 'name': '63e5543a384b12d65da56e2bf623ed1e71526bbd896f0b676e01852797a5122f' },
-        'imageReference': 'ghcr.io/linuxcontainers/alpine:3.15.4',
-        'scanResult':     {
-          'critical': 1,
-          'high':     8,
-          'medium':   14,
-          'low':      0,
-          'unknown':  0
-        }
-      },
-      {
-        'id':            'default/66f3935293c129cc8875bb103ee61f585c6e7518cbcfe8a4af9943d7e5eac676',
-        'imageMetadata': {
-          'digest':      'sha256:26d831226fb27d3b76c7daae0eea90c44a80c53b2cdd94a9a04724cdf3db186d',
-          'platform':    'linux/amd64',
-          'registry':    'demo-02',
-          'registryURI': 'ghcr.io',
-          'repository':  'linuxcontainers/alpine',
-          'tag':         '3.14.8'
-        },
-        'metadata':       { 'name': '66f3935293c129cc8875bb103ee61f585c6e7518cbcfe8a4af9943d7e5eac676' },
-        'imageReference': 'ghcr.io/linuxcontainers/alpine:3.14.8',
-        'scanResult':     {
-          'critical': 0,
-          'high':     8,
-          'medium':   4,
-          'low':      0,
-          'unknown':  0
-        }
-      },
-      {
-        'id':            'default/7095c376169d424910fe1391e27d593df40bd6e5d269711352e31f6ab7b853ac',
-        'imageMetadata': {
-          'digest':      'sha256:84b52c534d1441eceb3c269c105386e21fa90c40d61f75762b0f4020e4410187',
-          'platform':    'linux/amd64',
-          'registry':    'demo-02',
-          'registryURI': 'ghcr.io',
-          'repository':  'linuxcontainers/alpine',
-          'tag':         '3.16.4'
-        },
-        'metadata':       { 'name': '7095c376169d424910fe1391e27d593df40bd6e5d269711352e31f6ab7b853ac' },
-        'imageReference': 'ghcr.io/linuxcontainers/alpine:3.16.4',
-        'scanResult':     {
-          'critical': 0,
-          'high':     4,
-          'medium':   12,
-          'low':      0,
-          'unknown':  0
-        }
-      },
-      {
-        'id':            'default/73c5851937eb59914d87a70e39f645f821f2c8aa0a65d2e999f00d6c4e2934a0',
-        'imageMetadata': {
-          'digest':      'sha256:7ab44b9258071c702f16a5121b4550ed25f2bfce8f93952a9e61a1910803c02c',
-          'platform':    'linux/amd64',
-          'registry':    'demo-02',
-          'registryURI': 'ghcr.io',
-          'repository':  'linuxcontainers/alpine',
-          'tag':         '3.14.4'
-        },
-        'metadata':       { 'name': '73c5851937eb59914d87a70e39f645f821f2c8aa0a65d2e999f00d6c4e2934a0' },
-        'imageReference': 'ghcr.io/linuxcontainers/alpine:3.14.4',
-        'scanResult':     {
-          'critical': 1,
-          'high':     12,
-          'medium':   6,
-          'low':      0,
-          'unknown':  0
-        }
-      },
-      {
-        'id':            'default/8c403756aa4819b8f14d4b0fc83b7d6c0046206b0fa96cae292fa95e782ce57b',
-        'imageMetadata': {
-          'digest':      'sha256:8265dab7fa6e31857b7c90f1fb1a2d9b81ea285de45864171307b575e3c6ef31',
-          'platform':    'linux/amd64',
-          'registry':    'demo-02',
-          'registryURI': 'ghcr.io',
-          'repository':  'linuxcontainers/alpine',
-          'tag':         '3.17.0'
-        },
-        'metadata':       { 'name': '8c403756aa4819b8f14d4b0fc83b7d6c0046206b0fa96cae292fa95e782ce57b' },
-        'imageReference': 'ghcr.io/linuxcontainers/alpine:3.17.0',
-        'scanResult':     {
-          'critical': 0,
-          'high':     20,
-          'medium':   44,
-          'low':      4,
-          'unknown':  0
-        }
-      },
-      {
-        'id':            'default/91714193916d90bc45feff4c3ae3b27c63f75839fa9a5c664daa064a6101acc4',
-        'imageMetadata': {
-          'digest':      'sha256:d96a5642988052dc869a6d881db4f90493626fa05842cc785a8961ed991dc4f5',
-          'platform':    'linux/amd64',
-          'registry':    'demo-02',
-          'registryURI': 'ghcr.io',
-          'repository':  'linuxcontainers/alpine',
-          'tag':         '3.14.3'
-        },
-        'metadata':       { 'name': '91714193916d90bc45feff4c3ae3b27c63f75839fa9a5c664daa064a6101acc4' },
-        'imageReference': 'ghcr.io/linuxcontainers/alpine:3.14.3',
-        'scanResult':     {
-          'critical': 1,
-          'high':     14,
-          'medium':   6,
-          'low':      0,
-          'unknown':  0
-        }
-      },
-      {
-        'id':            'default/9895eadcf452be67f0e22aa381d8a0a38d21354e4493851d07222a913e0bd5de',
-        'imageMetadata': {
-          'digest':      'sha256:0b2e6da2bf1a7f93748e3ba45ba51a0ad76608742605ff29c776c7d7c26df6d1',
-          'platform':    'linux/amd64',
-          'registry':    'demo-02',
-          'registryURI': 'ghcr.io',
-          'repository':  'linuxcontainers/alpine',
-          'tag':         '3.13.7'
-        },
-        'metadata':       { 'name': '9895eadcf452be67f0e22aa381d8a0a38d21354e4493851d07222a913e0bd5de' },
-        'imageReference': 'ghcr.io/linuxcontainers/alpine:3.13.7',
-        'scanResult':     {
-          'critical': 1,
-          'high':     7,
-          'medium':   2,
-          'low':      0,
-          'unknown':  0
-        }
-      },
-      {
-        'id':            'default/9ad39fd0658d9406687ac01362b527e98c3684999c8f8826245375a163e0951c',
-        'imageMetadata': {
-          'digest':      'sha256:e513372a3c66cd89fdbbd8d677b86a2e3a134d46db95558f84169206976313a5',
-          'platform':    'linux/amd64',
-          'registry':    'demo-02',
-          'registryURI': 'ghcr.io',
-          'repository':  'linuxcontainers/alpine',
-          'tag':         '3.15.2'
-        },
-        'metadata':       { 'name': '9ad39fd0658d9406687ac01362b527e98c3684999c8f8826245375a163e0951c' },
-        'imageReference': 'ghcr.io/linuxcontainers/alpine:3.15.2',
-        'scanResult':     {
-          'critical': 1,
-          'high':     11,
-          'medium':   14,
-          'low':      0,
-          'unknown':  0
-        }
-      },
-      {
-        'id':            'default/a16351b9f7f543220aa5bf60ab00b224935ca02744cabf96b7674ae2401b7a85',
-        'imageMetadata': {
-          'digest':      'sha256:6622643e53abb6b11da0128a027eb60969079975d713207618735d3beae6e3c8',
-          'platform':    'linux/amd64',
-          'registry':    'demo-02',
-          'registryURI': 'ghcr.io',
-          'repository':  'linuxcontainers/alpine',
-          'tag':         '3.13.11'
-        },
-        'metadata':       { 'name': 'a16351b9f7f543220aa5bf60ab00b224935ca02744cabf96b7674ae2401b7a85' },
-        'imageReference': 'ghcr.io/linuxcontainers/alpine:3.13.11',
-        'scanResult':     {
-          'critical': 1,
-          'high':     0,
-          'medium':   0,
-          'low':      0,
-          'unknown':  0
-        }
-      },
-      {
-        'id':            'default/a822742e8f05dd4b0f8b265e9b3edcf0834ee1a15cfebf85843eed8066c3b517',
-        'imageMetadata': {
-          'digest':      'sha256:644a9af8e7c8df0984839835cd6638e14861caf5f231adf0f63f9e05dfa9864f',
-          'platform':    'linux/amd64',
-          'registry':    'demo-02',
-          'registryURI': 'ghcr.io',
-          'repository':  'linuxcontainers/alpine',
-          'tag':         '3.17.2'
-        },
-        'metadata':       { 'name': 'a822742e8f05dd4b0f8b265e9b3edcf0834ee1a15cfebf85843eed8066c3b517' },
-        'imageReference': 'ghcr.io/linuxcontainers/alpine:3.17.2',
-        'scanResult':     {
-          'critical': 0,
-          'high':     6,
-          'medium':   36,
-          'low':      4,
-          'unknown':  0
-        }
-      },
-      {
-        'id':            'default/b0823d1382fbad799dab0648c89409d9909ad5f2d1bec4ed17344a4bd2dc6a6a',
-        'imageMetadata': {
-          'digest':      'sha256:ae397224603c43cd35bc2e0d863427495c1792a9d72c826d93d4bdef5ee1e094',
-          'platform':    'linux/amd64',
-          'registry':    'demo-02',
-          'registryURI': 'ghcr.io',
-          'repository':  'linuxcontainers/alpine',
-          'tag':         '3.14.9'
-        },
-        'metadata':       { 'name': 'b0823d1382fbad799dab0648c89409d9909ad5f2d1bec4ed17344a4bd2dc6a6a' },
-        'imageReference': 'ghcr.io/linuxcontainers/alpine:3.14.9',
-        'scanResult':     {
-          'critical': 0,
-          'high':     2,
-          'medium':   2,
-          'low':      0,
-          'unknown':  0
-        }
-      },
-      {
-        'id':            'default/b73e6ef50a60ef02e9edf60b4d345bf475f4a87f8f2a7854a6b91157cbd6ef62',
-        'imageMetadata': {
-          'digest':      'sha256:881d343d0372b8c3b7c0cadd786a51be4a4d778f662e9a096ec30135b86a052f',
-          'platform':    'linux/amd64',
-          'registry':    'demo-02',
-          'registryURI': 'ghcr.io',
-          'repository':  'linuxcontainers/alpine',
-          'tag':         '3.14.7'
-        },
-        'metadata':       { 'name': 'b73e6ef50a60ef02e9edf60b4d345bf475f4a87f8f2a7854a6b91157cbd6ef62' },
-        'imageReference': 'ghcr.io/linuxcontainers/alpine:3.14.7',
-        'scanResult':     {
-          'critical': 1,
-          'high':     8,
-          'medium':   4,
-          'low':      0,
-          'unknown':  0
-        }
-      },
-      {
-        'id':            'default/c80f943a984cc78938fcbef5e806c917dc5595ad17cdebba30da310b7d652ef1',
-        'imageMetadata': {
-          'digest':      'sha256:f8bf2ce4b4bcd0e65f4880ddec62b1c214be2a3b7ef0f143a5c280474e8e1ba4',
-          'platform':    'linux/amd64',
-          'registry':    'demo-02',
-          'registryURI': 'ghcr.io',
-          'repository':  'linuxcontainers/alpine',
-          'tag':         '3.13.12'
-        },
-        'metadata':       { 'name': 'c80f943a984cc78938fcbef5e806c917dc5595ad17cdebba30da310b7d652ef1' },
-        'imageReference': 'ghcr.io/linuxcontainers/alpine:3.13.12',
-        'scanResult':     {
-          'critical': 0,
-          'high':     0,
-          'medium':   0,
-          'low':      0,
-          'unknown':  0
-        }
-      },
-      {
-        'id':            'default/c858bfb44995bee988522f59b5e8e480f79e13b95cf6c69c4b5b487f5febcab5',
-        'imageMetadata': {
-          'digest':      'sha256:d22cb65d578ea325347d7a6e5645998c3e7310f57504368df2a1a8f4337d1ed6',
-          'platform':    'linux/amd64',
-          'registry':    'demo-02',
-          'registryURI': 'ghcr.io',
-          'repository':  'linuxcontainers/alpine',
-          'tag':         'latest'
-        },
-        'metadata':       { 'name': 'c858bfb44995bee988522f59b5e8e480f79e13b95cf6c69c4b5b487f5febcab5' },
-        'imageReference': 'ghcr.io/linuxcontainers/alpine:latest',
-        'scanResult':     {
-          'critical': 2,
-          'high':     2,
-          'medium':   23,
-          'low':      5,
-          'unknown':  0
-        }
-      },
-      {
-        'id':            'default/d34b30700563700be05b190aed10a41e171890826b11b79f840660b0912ec838',
-        'imageMetadata': {
-          'digest':      'sha256:b1429bbe9300c9d5407491acf2a3ccd1ce19f24d6662c1d0d024ad6d8f0f8d5d',
-          'platform':    'linux/amd64',
-          'registry':    'demo-02',
-          'registryURI': 'ghcr.io',
-          'repository':  'linuxcontainers/alpine',
-          'tag':         '3.16.1'
-        },
-        'metadata':       { 'name': 'd34b30700563700be05b190aed10a41e171890826b11b79f840660b0912ec838' },
-        'imageReference': 'ghcr.io/linuxcontainers/alpine:3.16.1',
-        'scanResult':     {
-          'critical': 0,
-          'high':     10,
-          'medium':   14,
-          'low':      0,
-          'unknown':  0
-        }
-      },
-      {
-        'id':            'default/d5db05f79b6b63cc3851164f156b78eda270106d4376b07ae33a5b3bd1ca3181',
-        'imageMetadata': {
-          'digest':      'sha256:0280c1a478f8c9daf4d60b066e1eb76c94bf90beb5c67a0ce74c50a3f8b48a94',
-          'platform':    'linux/amd64',
-          'registry':    'demo-02',
-          'registryURI': 'ghcr.io',
-          'repository':  'linuxcontainers/alpine',
-          'tag':         '3.17'
-        },
-        'metadata':       { 'name': 'd5db05f79b6b63cc3851164f156b78eda270106d4376b07ae33a5b3bd1ca3181' },
-        'imageReference': 'ghcr.io/linuxcontainers/alpine:3.17',
-        'scanResult':     {
-          'critical': 0,
-          'high':     6,
-          'medium':   34,
-          'low':      4,
-          'unknown':  0
-        }
-      },
-      {
-        'id':            'default/ea1070efc9125020f80520ce86d5bfc0ed2ac468a9b920678582675d2e7ed279',
-        'imageMetadata': {
-          'digest':      'sha256:ae397224603c43cd35bc2e0d863427495c1792a9d72c826d93d4bdef5ee1e094',
-          'platform':    'linux/amd64',
-          'registry':    'demo-02',
-          'registryURI': 'ghcr.io',
-          'repository':  'linuxcontainers/alpine',
-          'tag':         '3.14'
-        },
-        'metadata':       { 'name': 'ea1070efc9125020f80520ce86d5bfc0ed2ac468a9b920678582675d2e7ed279' },
-        'imageReference': 'ghcr.io/linuxcontainers/alpine:3.14',
-        'scanResult':     {
-          'critical': 0,
-          'high':     2,
-          'medium':   2,
-          'low':      0,
-          'unknown':  0
-        }
-      },
-      {
-        'id':            'default/ee4e09b4743431c19845661de103815782e8e4e166a1340d8ae14ab58d58b073',
-        'imageMetadata': {
-          'digest':      'sha256:2c938e2d4c76142f33467f9157c24cb63849e11e0d7540ae70e99ab69f6fbd44',
-          'platform':    'linux/amd64',
-          'registry':    'demo-02',
-          'registryURI': 'ghcr.io',
-          'repository':  'linuxcontainers/alpine',
-          'tag':         '3.18.0'
-        },
-        'metadata':       { 'name': 'ee4e09b4743431c19845661de103815782e8e4e166a1340d8ae14ab58d58b073' },
-        'imageReference': 'ghcr.io/linuxcontainers/alpine:3.18.0',
-        'scanResult':     {
-          'critical': 0,
-          'high':     6,
-          'medium':   30,
-          'low':      4,
-          'unknown':  0
-        }
-      },
-      {
-        'id':            'default/f2fd1aa53ac2d9735bfff7e31674cd982df6a8e1c55fdb4cf69d7a78f816d999',
-        'imageMetadata': {
-          'digest':      'sha256:7115517df15dce2c7037137f5b8bffdce95be1535e70676a8026f4541884deed',
-          'platform':    'linux/amd64',
-          'registry':    'demo-02',
-          'registryURI': 'ghcr.io',
-          'repository':  'linuxcontainers/alpine',
-          'tag':         '3.15.3'
-        },
-        'metadata':       { 'name': 'f2fd1aa53ac2d9735bfff7e31674cd982df6a8e1c55fdb4cf69d7a78f816d999' },
-        'imageReference': 'ghcr.io/linuxcontainers/alpine:3.15.3',
-        'scanResult':     {
-          'critical': 1,
-          'high':     10,
-          'medium':   14,
-          'low':      0,
-          'unknown':  0
-        }
-      },
-      {
-        'id':            'default/fb59dc6c34aa1b83daab041e07942af9f4e8363706cbacde59800cece4855759',
-        'imageMetadata': {
-          'digest':      'sha256:79159ffd2ab6ac960e7241c7fbe3467a9a6f05ad764c892f120c76b4023a818c',
-          'platform':    'linux/amd64',
-          'registry':    'demo-02',
-          'registryURI': 'ghcr.io',
-          'repository':  'linuxcontainers/alpine',
-          'tag':         '3.17.1'
-        },
-        'metadata':       { 'name': 'fb59dc6c34aa1b83daab041e07942af9f4e8363706cbacde59800cece4855759' },
-        'imageReference': 'ghcr.io/linuxcontainers/alpine:3.17.1',
-        'scanResult':     {
-          'critical': 0,
-          'high':     8,
-          'medium':   40,
-          'low':      4,
-          'unknown':  0
-        }
-      }
-    ]
-  }
-];
\ No newline at end of file
diff --git a/pkg/sbomscanner-ui-ext/tmp/workloads.ts b/pkg/sbomscanner-ui-ext/tmp/workloads.ts
deleted file mode 100644
index ee6679d..0000000
--- a/pkg/sbomscanner-ui-ext/tmp/workloads.ts
+++ /dev/null
@@ -1,39935 +0,0 @@
-export const workloads = [
-  {
-    "workloadName": "struts-attacher:1.0",
-    "type": "Deployment",
-    "namespace": "default",
-    "imagesUsed": 6,
-    "affectingCVEs": 78,
-    "severity": {
-      "critical": 10,
-      "high": 20,
-      "medium": 18,
-      "low": 10,
-      "unknown": 20
-    }
-  },
-  {
-    "workloadName": "imagemagick4.8.5613",
-    "type": "DaemonSet",
-    "namespace": "kube-system",
-    "imagesUsed": 2,
-    "affectingCVEs": 0,
-    "severity": {
-      "critical": 0,
-      "high": 0,
-      "medium": 0,
-      "low": 0,
-      "unknown": 0
-    }
-  },
-  {
-    "workloadName": "centos7.7.1908",
-    "type": "StatefulSet",
-    "namespace": "kube-public",
-    "imagesUsed": 4,
-    "affectingCVEs": 101,
-    "severity": {
-      "critical": 25,
-      "high": 0,
-      "medium": 33,
-      "low": 0,
-      "unknown": 43
-    }
-  },
-  {
-    "workloadName": "nginx1.19.10",
-    "type": "CronJob",
-    "namespace": "cattle-system",
-    "imagesUsed": 14,
-    "affectingCVEs": 156,
-    "severity": {
-      "critical": 26,
-      "high": 16,
-      "medium": 50,
-      "low": 44,
-      "unknown": 20
-    }
-  },
-  {
-    "workloadName": "docker-compose:1.29.2",
-    "type": "Pod",
-    "namespace": "cattle-fleet-system",
-    "imagesUsed": 23,
-    "affectingCVEs": 19,
-    "severity": {
-      "critical": 1,
-      "high": 3,
-      "medium": 7,
-      "low": 5,
-      "unknown": 3
-    }
-  },
-  {
-    "workloadName": "python3.9.7",
-    "type": "Job",
-    "namespace": "cattle-monitoring-system",
-    "imagesUsed": 1,
-    "affectingCVEs": 222,
-    "severity": {
-      "critical": 70,
-      "high": 10,
-      "medium": 100,
-      "low": 42,
-      "unknown": 0
-    }
-  },
-  {
-    "workloadName": "nodejs14.17.3",
-    "type": "Deployment",
-    "namespace": "ingress-nginx",
-    "imagesUsed": 19,
-    "affectingCVEs": 187,
-    "severity": {
-      "critical": 101,
-      "high": 0,
-      "medium": 57,
-      "low": 12,
-      "unknown": 17
-    }
-  },
-  {
-    "workloadName": "redis5.0.7",
-    "type": "DaemonSet",
-    "namespace": "cert-manager",
-    "imagesUsed": 11,
-    "affectingCVEs": 11,
-    "severity": {
-      "critical": 1,
-      "high": 0,
-      "medium": 1,
-      "low": 0,
-      "unknown": 9
-    }
-  },
-  {
-    "workloadName": "mongodb4.4.1",
-    "type": "StatefulSet",
-    "namespace": "linkerd",
-    "imagesUsed": 2,
-    "affectingCVEs": 234,
-    "severity": {
-      "critical": 50,
-      "high": 10,
-      "medium": 100,
-      "low": 64,
-      "unknown": 10
-    }
-  },
-  {
-    "workloadName": "golang1.16.5",
-    "type": "CronJob",
-    "namespace": "istio-system",
-    "imagesUsed": 8,
-    "affectingCVEs": 89,
-    "severity": {
-      "critical": 22,
-      "high": 3,
-      "medium": 44,
-      "low": 10,
-      "unknown": 10
-    }
-  },
-  {
-    "workloadName": "ruby2.7.3",
-    "type": "Pod",
-    "namespace": "knative-serving",
-    "imagesUsed": 16,
-    "affectingCVEs": 213,
-    "severity": {
-      "critical": 23,
-      "high": 9,
-      "medium": 100,
-      "low": 81,
-      "unknown": 0
-    }
-  },
-  {
-    "workloadName": "elasticsearch7.10.0",
-    "type": "Job",
-    "namespace": "openfaas",
-    "imagesUsed": 21,
-    "affectingCVEs": 45,
-    "severity": {
-      "critical": 10,
-      "high": 0,
-      "medium": 20,
-      "low": 5,
-      "unknown": 10
-    }
-  },
-  {
-    "workloadName": "mysql8.0.25",
-    "type": "Deployment",
-    "namespace": "monitoring",
-    "imagesUsed": 5,
-    "affectingCVEs": 99,
-    "severity": {
-      "critical": 50,
-      "high": 0,
-      "medium": 40,
-      "low": 0,
-      "unknown": 9
-    }
-  },
-  {
-    "workloadName": "php8.0.9",
-    "type": "DaemonSet",
-    "namespace": "logging",
-    "imagesUsed": 13,
-    "affectingCVEs": 250,
-    "severity": {
-      "critical": 100,
-      "high": 25,
-      "medium": 75,
-      "low": 20,
-      "unknown": 30
-    }
-  },
-  {
-    "workloadName": "postgresql13.3",
-    "type": "StatefulSet",
-    "namespace": "gitlab-managed-apps",
-    "imagesUsed": 24,
-    "affectingCVEs": 67,
-    "severity": {
-      "critical": 10,
-      "high": 5,
-      "medium": 30,
-      "low": 10,
-      "unknown": 10
-    }
-  }
-];
-
-export const workloadsVulnerabilityreports = {
-  "apiVersion": "storage.sbomscanner.kubewarden.io/v1alpha1",
-  "containers": [
-    {
-      "name": "init",
-      "vulnerabilityReports": [
-        {
-          "imageMetadata": {
-            "digest": "sha256:eaecad0823f05c6b5b70bd64f3a189dbcc904fdbbe2cb0880676e691061926bf",
-            "indexDigest": "sha256:5419efdda0f7df9d5ad03d5f3da445a931e425ddf15b2acb9a2740d7dc489906",
-            "platform": "linux/amd64",
-            "registry": "workloadscan-ghcr-io",
-            "registryURI": "ghcr.io",
-            "repository": "tarampampam/curl",
-            "tag": "8.14.1-alpine"
-          },
-          "report": {
-            "results": [
-              {
-                "class": "os-pkgs",
-                "target": "/var/run/worker/trivy.sbom.3879881358.json (alpine 3.22.0)",
-                "type": "alpine",
-                "vulnerabilities": [
-                  {
-                    "cve": "CVE-2024-58251",
-                    "cwes": [
-                      "CWE-150"
-                    ],
-                    "description": "In netstat in BusyBox through 1.37.0, local users can launch of network application with an argv[0] containing an ANSI terminal escape sequence, leading to a denial of service (terminal locked up) when netstat is used by a victim.",
-                    "diffID": "sha256:fd2758d7a50e2b78d275ee7d1c218489f2439084449d895fa17eede6c61ab2c4",
-                    "fixedVersions": [
-                      "1.37.0-r20"
-                    ],
-                    "installedVersion": "1.37.0-r18",
-                    "packageName": "busybox",
-                    "purl": "pkg:apk/alpine/busybox@1.37.0-r18?arch=x86_64&distro=3.22.0",
-                    "references": [
-                      "http://www.openwall.com/lists/oss-security/2025/04/23/6",
-                      "https://bugs.busybox.net/show_bug.cgi?id=15922",
-                      "https://www.busybox.net",
-                      "https://www.busybox.net/downloads/",
-                      "https://www.cve.org/CVERecord?id=CVE-2024-58251"
-                    ],
-                    "severity": "MEDIUM",
-                    "suppressed": false,
-                    "title": "In netstat in BusyBox through 1.37.0, local users can launch of networ ..."
-                  },
-                  {
-                    "cve": "CVE-2025-46394",
-                    "cvss": {
-                      "nvd": {
-                        "v3score": "3.3",
-                        "v3vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-451"
-                    ],
-                    "description": "In tar in BusyBox through 1.37.0, a TAR archive can have filenames hidden from a listing through the use of terminal escape sequences.",
-                    "diffID": "sha256:fd2758d7a50e2b78d275ee7d1c218489f2439084449d895fa17eede6c61ab2c4",
-                    "fixedVersions": [
-                      "1.37.0-r20"
-                    ],
-                    "installedVersion": "1.37.0-r18",
-                    "packageName": "busybox",
-                    "purl": "pkg:apk/alpine/busybox@1.37.0-r18?arch=x86_64&distro=3.22.0",
-                    "references": [
-                      "http://www.openwall.com/lists/oss-security/2025/04/23/5",
-                      "http://www.openwall.com/lists/oss-security/2025/04/24/3",
-                      "https://bugs.busybox.net/show_bug.cgi?id=16018",
-                      "https://lists.busybox.net/pipermail/busybox/2024-July/090806.html",
-                      "https://lists.busybox.net/pipermail/busybox/2024-July/090814.html",
-                      "https://www.busybox.net",
-                      "https://www.busybox.net/downloads/",
-                      "https://www.cve.org/CVERecord?id=CVE-2025-46394",
-                      "https://www.openwall.com/lists/oss-security/2025/04/23/1"
-                    ],
-                    "severity": "LOW",
-                    "suppressed": false,
-                    "title": "In tar in BusyBox through 1.37.0, a TAR archive can have filenames hid ..."
-                  },
-                  {
-                    "cve": "CVE-2024-58251",
-                    "cwes": [
-                      "CWE-150"
-                    ],
-                    "description": "In netstat in BusyBox through 1.37.0, local users can launch of network application with an argv[0] containing an ANSI terminal escape sequence, leading to a denial of service (terminal locked up) when netstat is used by a victim.",
-                    "diffID": "sha256:fd2758d7a50e2b78d275ee7d1c218489f2439084449d895fa17eede6c61ab2c4",
-                    "fixedVersions": [
-                      "1.37.0-r20"
-                    ],
-                    "installedVersion": "1.37.0-r18",
-                    "packageName": "busybox-binsh",
-                    "purl": "pkg:apk/alpine/busybox-binsh@1.37.0-r18?arch=x86_64&distro=3.22.0",
-                    "references": [
-                      "http://www.openwall.com/lists/oss-security/2025/04/23/6",
-                      "https://bugs.busybox.net/show_bug.cgi?id=15922",
-                      "https://www.busybox.net",
-                      "https://www.busybox.net/downloads/",
-                      "https://www.cve.org/CVERecord?id=CVE-2024-58251"
-                    ],
-                    "severity": "MEDIUM",
-                    "suppressed": false,
-                    "title": "In netstat in BusyBox through 1.37.0, local users can launch of networ ..."
-                  },
-                  {
-                    "cve": "CVE-2025-46394",
-                    "cvss": {
-                      "nvd": {
-                        "v3score": "3.3",
-                        "v3vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-451"
-                    ],
-                    "description": "In tar in BusyBox through 1.37.0, a TAR archive can have filenames hidden from a listing through the use of terminal escape sequences.",
-                    "diffID": "sha256:fd2758d7a50e2b78d275ee7d1c218489f2439084449d895fa17eede6c61ab2c4",
-                    "fixedVersions": [
-                      "1.37.0-r20"
-                    ],
-                    "installedVersion": "1.37.0-r18",
-                    "packageName": "busybox-binsh",
-                    "purl": "pkg:apk/alpine/busybox-binsh@1.37.0-r18?arch=x86_64&distro=3.22.0",
-                    "references": [
-                      "http://www.openwall.com/lists/oss-security/2025/04/23/5",
-                      "http://www.openwall.com/lists/oss-security/2025/04/24/3",
-                      "https://bugs.busybox.net/show_bug.cgi?id=16018",
-                      "https://lists.busybox.net/pipermail/busybox/2024-July/090806.html",
-                      "https://lists.busybox.net/pipermail/busybox/2024-July/090814.html",
-                      "https://www.busybox.net",
-                      "https://www.busybox.net/downloads/",
-                      "https://www.cve.org/CVERecord?id=CVE-2025-46394",
-                      "https://www.openwall.com/lists/oss-security/2025/04/23/1"
-                    ],
-                    "severity": "LOW",
-                    "suppressed": false,
-                    "title": "In tar in BusyBox through 1.37.0, a TAR archive can have filenames hid ..."
-                  },
-                  {
-                    "cve": "CVE-2025-15467",
-                    "cvss": {
-                      "redhat": {
-                        "v3score": "9.8",
-                        "v3vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-787"
-                    ],
-                    "description": "Issue summary: Parsing CMS AuthEnvelopedData message with maliciously\ncrafted AEAD parameters can trigger a stack buffer overflow.\n\nImpact summary: A stack buffer overflow may lead to a crash, causing Denial\nof Service, or potentially remote code execution.\n\nWhen parsing CMS AuthEnvelopedData structures that use AEAD ciphers such as\nAES-GCM, the IV (Initialization Vector) encoded in the ASN.1 parameters is\ncopied into a fixed-size stack buffer without verifying that its length fits\nthe destination. An attacker can supply a crafted CMS message with an\noversized IV, causing a stack-based out-of-bounds write before any\nauthentication or tag verification occurs.\n\nApplications and services that parse untrusted CMS or PKCS#7 content using\nAEAD ciphers (e.g., S/MIME AuthEnvelopedData with AES-GCM) are vulnerable.\nBecause the overflow occurs prior to authentication, no valid key material\nis required to trigger it. While exploitability to remote code execution\ndepends on platform and toolchain mitigations, the stack-based write\nprimitive represents a severe risk.\n\nThe FIPS modules in 3.6, 3.5, 3.4, 3.3 and 3.0 are not affected by this\nissue, as the CMS implementation is outside the OpenSSL FIPS module\nboundary.\n\nOpenSSL 3.6, 3.5, 3.4, 3.3 and 3.0 are vulnerable to this issue.\n\nOpenSSL 1.1.1 and 1.0.2 are not affected by this issue.",
-                    "diffID": "sha256:fd2758d7a50e2b78d275ee7d1c218489f2439084449d895fa17eede6c61ab2c4",
-                    "fixedVersions": [
-                      "3.5.5-r0"
-                    ],
-                    "installedVersion": "3.5.0-r0",
-                    "packageName": "libcrypto3",
-                    "purl": "pkg:apk/alpine/libcrypto3@3.5.0-r0?arch=x86_64&distro=3.22.0",
-                    "references": [
-                      "http://www.openwall.com/lists/oss-security/2026/01/27/10",
-                      "https://access.redhat.com/errata/RHSA-2026:1472",
-                      "https://access.redhat.com/security/cve/CVE-2025-15467",
-                      "https://bugzilla.redhat.com/2430375",
-                      "https://bugzilla.redhat.com/2430376",
-                      "https://bugzilla.redhat.com/2430377",
-                      "https://bugzilla.redhat.com/2430378",
-                      "https://bugzilla.redhat.com/2430379",
-                      "https://bugzilla.redhat.com/2430380",
-                      "https://bugzilla.redhat.com/2430381",
-                      "https://bugzilla.redhat.com/2430386",
-                      "https://bugzilla.redhat.com/2430387",
-                      "https://bugzilla.redhat.com/2430388",
-                      "https://bugzilla.redhat.com/2430389",
-                      "https://bugzilla.redhat.com/2430390",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430375",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430376",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430377",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430378",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430379",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430380",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430381",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430386",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430387",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430388",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430389",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430390",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-11187",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-15467",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-15468",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-15469",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-66199",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-68160",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-69418",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-69419",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-69420",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-69421",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-22795",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-22796",
-                      "https://errata.almalinux.org/10/ALSA-2026-1472.html",
-                      "https://errata.rockylinux.org/RLSA-2026:1473",
-                      "https://github.com/openssl/openssl/commit/2c8f0e5fa9b6ee5508a0349e4572ddb74db5a703",
-                      "https://github.com/openssl/openssl/commit/5f26d4202f5b89664c5c3f3c62086276026ba9a9",
-                      "https://github.com/openssl/openssl/commit/6ced0fe6b10faa560e410e3ee8d6c82f06c65ea3",
-                      "https://github.com/openssl/openssl/commit/ce39170276daec87f55c39dad1f629b56344429e",
-                      "https://github.com/openssl/openssl/commit/d0071a0799f20cc8101730145349ed4487c268dc",
-                      "https://linux.oracle.com/cve/CVE-2025-15467.html",
-                      "https://linux.oracle.com/errata/ELSA-2026-50081.html",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2025-15467",
-                      "https://openssl-library.org/news/secadv/20260127.txt",
-                      "https://ubuntu.com/security/notices/USN-7980-1",
-                      "https://www.cve.org/CVERecord?id=CVE-2025-15467"
-                    ],
-                    "severity": "CRITICAL",
-                    "suppressed": false,
-                    "title": "openssl: OpenSSL: Remote code execution or Denial of Service via oversized Initialization Vector in CMS parsing"
-                  },
-                  {
-                    "cve": "CVE-2025-69419",
-                    "cvss": {
-                      "redhat": {
-                        "v3score": "7.4",
-                        "v3vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-787"
-                    ],
-                    "description": "Issue summary: Calling PKCS12_get_friendlyname() function on a maliciously\ncrafted PKCS#12 file with a BMPString (UTF-16BE) friendly name containing\nnon-ASCII BMP code point can trigger a one byte write before the allocated\nbuffer.\n\nImpact summary: The out-of-bounds write can cause a memory corruption\nwhich can have various consequences including a Denial of Service.\n\nThe OPENSSL_uni2utf8() function performs a two-pass conversion of a PKCS#12\nBMPString (UTF-16BE) to UTF-8. In the second pass, when emitting UTF-8 bytes,\nthe helper function bmp_to_utf8() incorrectly forwards the remaining UTF-16\nsource byte count as the destination buffer capacity to UTF8_putc(). For BMP\ncode points above U+07FF, UTF-8 requires three bytes, but the forwarded\ncapacity can be just two bytes. UTF8_putc() then returns -1, and this negative\nvalue is added to the output length without validation, causing the\nlength to become negative. The subsequent trailing NUL byte is then written\nat a negative offset, causing write outside of heap allocated buffer.\n\nThe vulnerability is reachable via the public PKCS12_get_friendlyname() API\nwhen parsing attacker-controlled PKCS#12 files. While PKCS12_parse() uses a\ndifferent code path that avoids this issue, PKCS12_get_friendlyname() directly\ninvokes the vulnerable function. Exploitation requires an attacker to provide\na malicious PKCS#12 file to be parsed by the application and the attacker\ncan just trigger a one zero byte write before the allocated buffer.\nFor that reason the issue was assessed as Low severity according to our\nSecurity Policy.\n\nThe FIPS modules in 3.6, 3.5, 3.4, 3.3 and 3.0 are not affected by this issue,\nas the PKCS#12 implementation is outside the OpenSSL FIPS module boundary.\n\nOpenSSL 3.6, 3.5, 3.4, 3.3, 3.0 and 1.1.1 are vulnerable to this issue.\n\nOpenSSL 1.0.2 is not affected by this issue.",
-                    "diffID": "sha256:fd2758d7a50e2b78d275ee7d1c218489f2439084449d895fa17eede6c61ab2c4",
-                    "fixedVersions": [
-                      "3.5.5-r0"
-                    ],
-                    "installedVersion": "3.5.0-r0",
-                    "packageName": "libcrypto3",
-                    "purl": "pkg:apk/alpine/libcrypto3@3.5.0-r0?arch=x86_64&distro=3.22.0",
-                    "references": [
-                      "https://access.redhat.com/errata/RHSA-2026:1472",
-                      "https://access.redhat.com/security/cve/CVE-2025-69419",
-                      "https://bugzilla.redhat.com/2430375",
-                      "https://bugzilla.redhat.com/2430376",
-                      "https://bugzilla.redhat.com/2430377",
-                      "https://bugzilla.redhat.com/2430378",
-                      "https://bugzilla.redhat.com/2430379",
-                      "https://bugzilla.redhat.com/2430380",
-                      "https://bugzilla.redhat.com/2430381",
-                      "https://bugzilla.redhat.com/2430386",
-                      "https://bugzilla.redhat.com/2430387",
-                      "https://bugzilla.redhat.com/2430388",
-                      "https://bugzilla.redhat.com/2430389",
-                      "https://bugzilla.redhat.com/2430390",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430375",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430376",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430377",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430378",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430379",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430380",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430381",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430386",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430387",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430388",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430389",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430390",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-11187",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-15467",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-15468",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-15469",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-66199",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-68160",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-69418",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-69419",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-69420",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-69421",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-22795",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-22796",
-                      "https://errata.almalinux.org/10/ALSA-2026-1472.html",
-                      "https://errata.rockylinux.org/RLSA-2026:1473",
-                      "https://github.com/openssl/openssl/commit/41be0f216404f14457bbf3b9cc488dba60b49296",
-                      "https://github.com/openssl/openssl/commit/7e9cac9832e4705b91987c2474ed06a37a93cecb",
-                      "https://github.com/openssl/openssl/commit/a26a90d38edec3748566129d824e664b54bee2e2",
-                      "https://github.com/openssl/openssl/commit/cda12de3bc0e333ea8d2c6fd15001dbdaf280015",
-                      "https://github.com/openssl/openssl/commit/ff628933755075446bca8307e8417c14d164b535",
-                      "https://linux.oracle.com/cve/CVE-2025-69419.html",
-                      "https://linux.oracle.com/errata/ELSA-2026-50081.html",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2025-69419",
-                      "https://openssl-library.org/news/secadv/20260127.txt",
-                      "https://ubuntu.com/security/notices/USN-7980-1",
-                      "https://ubuntu.com/security/notices/USN-7980-2",
-                      "https://www.cve.org/CVERecord?id=CVE-2025-69419"
-                    ],
-                    "severity": "HIGH",
-                    "suppressed": false,
-                    "title": "openssl: OpenSSL: Arbitrary code execution due to out-of-bounds write in PKCS#12 processing"
-                  },
-                  {
-                    "cve": "CVE-2025-69421",
-                    "cvss": {
-                      "nvd": {
-                        "v3score": "7.5",
-                        "v3vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"
-                      },
-                      "redhat": {
-                        "v3score": "6.5",
-                        "v3vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-476"
-                    ],
-                    "description": "Issue summary: Processing a malformed PKCS#12 file can trigger a NULL pointer\ndereference in the PKCS12_item_decrypt_d2i_ex() function.\n\nImpact summary: A NULL pointer dereference can trigger a crash which leads to\nDenial of Service for an application processing PKCS#12 files.\n\nThe PKCS12_item_decrypt_d2i_ex() function does not check whether the oct\nparameter is NULL before dereferencing it. When called from\nPKCS12_unpack_p7encdata() with a malformed PKCS#12 file, this parameter can\nbe NULL, causing a crash. The vulnerability is limited to Denial of Service\nand cannot be escalated to achieve code execution or memory disclosure.\n\nExploiting this issue requires an attacker to provide a malformed PKCS#12 file\nto an application that processes it. For that reason the issue was assessed as\nLow severity according to our Security Policy.\n\nThe FIPS modules in 3.6, 3.5, 3.4, 3.3 and 3.0 are not affected by this issue,\nas the PKCS#12 implementation is outside the OpenSSL FIPS module boundary.\n\nOpenSSL 3.6, 3.5, 3.4, 3.3, 3.0, 1.1.1 and 1.0.2 are vulnerable to this issue.",
-                    "diffID": "sha256:fd2758d7a50e2b78d275ee7d1c218489f2439084449d895fa17eede6c61ab2c4",
-                    "fixedVersions": [
-                      "3.5.5-r0"
-                    ],
-                    "installedVersion": "3.5.0-r0",
-                    "packageName": "libcrypto3",
-                    "purl": "pkg:apk/alpine/libcrypto3@3.5.0-r0?arch=x86_64&distro=3.22.0",
-                    "references": [
-                      "https://access.redhat.com/errata/RHSA-2026:1472",
-                      "https://access.redhat.com/security/cve/CVE-2025-69421",
-                      "https://bugzilla.redhat.com/2430375",
-                      "https://bugzilla.redhat.com/2430376",
-                      "https://bugzilla.redhat.com/2430377",
-                      "https://bugzilla.redhat.com/2430378",
-                      "https://bugzilla.redhat.com/2430379",
-                      "https://bugzilla.redhat.com/2430380",
-                      "https://bugzilla.redhat.com/2430381",
-                      "https://bugzilla.redhat.com/2430386",
-                      "https://bugzilla.redhat.com/2430387",
-                      "https://bugzilla.redhat.com/2430388",
-                      "https://bugzilla.redhat.com/2430389",
-                      "https://bugzilla.redhat.com/2430390",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430375",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430376",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430377",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430378",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430379",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430380",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430381",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430386",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430387",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430388",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430389",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430390",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-11187",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-15467",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-15468",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-15469",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-66199",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-68160",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-69418",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-69419",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-69420",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-69421",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-22795",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-22796",
-                      "https://errata.almalinux.org/10/ALSA-2026-1472.html",
-                      "https://errata.rockylinux.org/RLSA-2026:1473",
-                      "https://github.com/openssl/openssl/commit/3524a29271f8191b8fd8a5257eb05173982a097b",
-                      "https://github.com/openssl/openssl/commit/36ecb4960872a4ce04bf6f1e1f4e78d75ec0c0c7",
-                      "https://github.com/openssl/openssl/commit/4bbc8d41a72c842ce4077a8a3eccd1109aaf74bd",
-                      "https://github.com/openssl/openssl/commit/643986985cd1c21221f941129d76fe0c2785aeb3",
-                      "https://github.com/openssl/openssl/commit/a2dbc539f0f9cc63832709fa5aa33ad9495eb19c",
-                      "https://linux.oracle.com/cve/CVE-2025-69421.html",
-                      "https://linux.oracle.com/errata/ELSA-2026-50081.html",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2025-69421",
-                      "https://openssl-library.org/news/secadv/20260127.txt",
-                      "https://ubuntu.com/security/notices/USN-7980-1",
-                      "https://ubuntu.com/security/notices/USN-7980-2",
-                      "https://www.cve.org/CVERecord?id=CVE-2025-69421"
-                    ],
-                    "severity": "HIGH",
-                    "suppressed": false,
-                    "title": "openssl: OpenSSL: Denial of Service via malformed PKCS#12 file processing"
-                  },
-                  {
-                    "cve": "CVE-2025-11187",
-                    "cvss": {
-                      "redhat": {
-                        "v3score": "6.1",
-                        "v3vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:H"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-476",
-                      "CWE-787"
-                    ],
-                    "description": "Issue summary: PBMAC1 parameters in PKCS#12 files are missing validation\nwhich can trigger a stack-based buffer overflow, invalid pointer or NULL\npointer dereference during MAC verification.\n\nImpact summary: The stack buffer overflow or NULL pointer dereference may\ncause a crash leading to Denial of Service for an application that parses\nuntrusted PKCS#12 files. The buffer overflow may also potentially enable\ncode execution depending on platform mitigations.\n\nWhen verifying a PKCS#12 file that uses PBMAC1 for the MAC, the PBKDF2\nsalt and keylength parameters from the file are used without validation.\nIf the value of keylength exceeds the size of the fixed stack buffer used\nfor the derived key (64 bytes), the key derivation will overflow the buffer.\nThe overflow length is attacker-controlled. Also, if the salt parameter is\nnot an OCTET STRING type this can lead to invalid or NULL pointer\ndereference.\n\nExploiting this issue requires a user or application to process\na maliciously crafted PKCS#12 file. It is uncommon to accept untrusted\nPKCS#12 files in applications as they are usually used to store private\nkeys which are trusted by definition. For this reason the issue was assessed\nas Moderate severity.\n\nThe FIPS modules in 3.6, 3.5 and 3.4 are not affected by this issue, as\nPKCS#12 processing is outside the OpenSSL FIPS module boundary.\n\nOpenSSL 3.6, 3.5 and 3.4 are vulnerable to this issue.\n\nOpenSSL 3.3, 3.0, 1.1.1 and 1.0.2 are not affected by this issue as they do\nnot support PBMAC1 in PKCS#12.",
-                    "diffID": "sha256:fd2758d7a50e2b78d275ee7d1c218489f2439084449d895fa17eede6c61ab2c4",
-                    "fixedVersions": [
-                      "3.5.5-r0"
-                    ],
-                    "installedVersion": "3.5.0-r0",
-                    "packageName": "libcrypto3",
-                    "purl": "pkg:apk/alpine/libcrypto3@3.5.0-r0?arch=x86_64&distro=3.22.0",
-                    "references": [
-                      "https://access.redhat.com/errata/RHSA-2026:1472",
-                      "https://access.redhat.com/security/cve/CVE-2025-11187",
-                      "https://bugzilla.redhat.com/2430375",
-                      "https://bugzilla.redhat.com/2430376",
-                      "https://bugzilla.redhat.com/2430377",
-                      "https://bugzilla.redhat.com/2430378",
-                      "https://bugzilla.redhat.com/2430379",
-                      "https://bugzilla.redhat.com/2430380",
-                      "https://bugzilla.redhat.com/2430381",
-                      "https://bugzilla.redhat.com/2430386",
-                      "https://bugzilla.redhat.com/2430387",
-                      "https://bugzilla.redhat.com/2430388",
-                      "https://bugzilla.redhat.com/2430389",
-                      "https://bugzilla.redhat.com/2430390",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430375",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430376",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430377",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430378",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430379",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430380",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430381",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430386",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430387",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430388",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430389",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430390",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-11187",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-15467",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-15468",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-15469",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-66199",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-68160",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-69418",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-69419",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-69420",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-69421",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-22795",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-22796",
-                      "https://errata.almalinux.org/10/ALSA-2026-1472.html",
-                      "https://errata.rockylinux.org/RLSA-2026:1473",
-                      "https://github.com/openssl/openssl/commit/205e3a55e16e4bd08c12fdbd3416ab829c0f6206",
-                      "https://github.com/openssl/openssl/commit/8caf359d6e46fb413e8f5f0df765d2e8a51df4e8",
-                      "https://github.com/openssl/openssl/commit/e1079bc17ed93ff16f6b86f33a2fe3336e78817e",
-                      "https://linux.oracle.com/cve/CVE-2025-11187.html",
-                      "https://linux.oracle.com/errata/ELSA-2026-50081.html",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2025-11187",
-                      "https://openssl-library.org/news/secadv/20260127.txt",
-                      "https://ubuntu.com/security/notices/USN-7980-1",
-                      "https://www.cve.org/CVERecord?id=CVE-2025-11187"
-                    ],
-                    "severity": "MEDIUM",
-                    "suppressed": false,
-                    "title": "openssl: OpenSSL: Arbitrary code execution or denial of service through crafted PKCS#12 file"
-                  },
-                  {
-                    "cve": "CVE-2025-15468",
-                    "cvss": {
-                      "redhat": {
-                        "v3score": "5.9",
-                        "v3vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-476"
-                    ],
-                    "description": "Issue summary: If an application using the SSL_CIPHER_find() function in\na QUIC protocol client or server receives an unknown cipher suite from\nthe peer, a NULL dereference occurs.\n\nImpact summary: A NULL pointer dereference leads to abnormal termination of\nthe running process causing Denial of Service.\n\nSome applications call SSL_CIPHER_find() from the client_hello_cb callback\non the cipher ID received from the peer. If this is done with an SSL object\nimplementing the QUIC protocol, NULL pointer dereference will happen if\nthe examined cipher ID is unknown or unsupported.\n\nAs it is not very common to call this function in applications using the QUIC \nprotocol and the worst outcome is Denial of Service, the issue was assessed\nas Low severity.\n\nThe vulnerable code was introduced in the 3.2 version with the addition\nof the QUIC protocol support.\n\nThe FIPS modules in 3.6, 3.5, 3.4 and 3.3 are not affected by this issue,\nas the QUIC implementation is outside the OpenSSL FIPS module boundary.\n\nOpenSSL 3.6, 3.5, 3.4 and 3.3 are vulnerable to this issue.\n\nOpenSSL 3.0, 1.1.1 and 1.0.2 are not affected by this issue.",
-                    "diffID": "sha256:fd2758d7a50e2b78d275ee7d1c218489f2439084449d895fa17eede6c61ab2c4",
-                    "fixedVersions": [
-                      "3.5.5-r0"
-                    ],
-                    "installedVersion": "3.5.0-r0",
-                    "packageName": "libcrypto3",
-                    "purl": "pkg:apk/alpine/libcrypto3@3.5.0-r0?arch=x86_64&distro=3.22.0",
-                    "references": [
-                      "https://access.redhat.com/errata/RHSA-2026:1472",
-                      "https://access.redhat.com/security/cve/CVE-2025-15468",
-                      "https://bugzilla.redhat.com/2430375",
-                      "https://bugzilla.redhat.com/2430376",
-                      "https://bugzilla.redhat.com/2430377",
-                      "https://bugzilla.redhat.com/2430378",
-                      "https://bugzilla.redhat.com/2430379",
-                      "https://bugzilla.redhat.com/2430380",
-                      "https://bugzilla.redhat.com/2430381",
-                      "https://bugzilla.redhat.com/2430386",
-                      "https://bugzilla.redhat.com/2430387",
-                      "https://bugzilla.redhat.com/2430388",
-                      "https://bugzilla.redhat.com/2430389",
-                      "https://bugzilla.redhat.com/2430390",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430375",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430376",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430377",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430378",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430379",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430380",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430381",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430386",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430387",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430388",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430389",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430390",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-11187",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-15467",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-15468",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-15469",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-66199",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-68160",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-69418",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-69419",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-69420",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-69421",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-22795",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-22796",
-                      "https://errata.almalinux.org/10/ALSA-2026-1472.html",
-                      "https://errata.rockylinux.org/RLSA-2026:1473",
-                      "https://github.com/openssl/openssl/commit/1f08e54bad32843044fe8a675948d65e3b4ece65",
-                      "https://github.com/openssl/openssl/commit/7c88376731c589ee5b36116c5a6e32d5ae5f7ae2",
-                      "https://github.com/openssl/openssl/commit/b2539639400288a4580fe2d76247541b976bade4",
-                      "https://github.com/openssl/openssl/commit/d75b309879631d45b972396ce4e5102559c64ac7",
-                      "https://linux.oracle.com/cve/CVE-2025-15468.html",
-                      "https://linux.oracle.com/errata/ELSA-2026-50081.html",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2025-15468",
-                      "https://openssl-library.org/news/secadv/20260127.txt",
-                      "https://ubuntu.com/security/notices/USN-7980-1",
-                      "https://www.cve.org/CVERecord?id=CVE-2025-15468"
-                    ],
-                    "severity": "MEDIUM",
-                    "suppressed": false,
-                    "title": "openssl: OpenSSL: Denial of Service via NULL pointer dereference in QUIC protocol handling"
-                  },
-                  {
-                    "cve": "CVE-2025-15469",
-                    "cvss": {
-                      "redhat": {
-                        "v3score": "5.5",
-                        "v3vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-347"
-                    ],
-                    "description": "Issue summary: The 'openssl dgst' command-line tool silently truncates input\ndata to 16MB when using one-shot signing algorithms and reports success instead\nof an error.\n\nImpact summary: A user signing or verifying files larger than 16MB with\none-shot algorithms (such as Ed25519, Ed448, or ML-DSA) may believe the entire\nfile is authenticated while trailing data beyond 16MB remains unauthenticated.\n\nWhen the 'openssl dgst' command is used with algorithms that only support\none-shot signing (Ed25519, Ed448, ML-DSA-44, ML-DSA-65, ML-DSA-87), the input\nis buffered with a 16MB limit. If the input exceeds this limit, the tool\nsilently truncates to the first 16MB and continues without signaling an error,\ncontrary to what the documentation states. This creates an integrity gap where\ntrailing bytes can be modified without detection if both signing and\nverification are performed using the same affected codepath.\n\nThe issue affects only the command-line tool behavior. Verifiers that process\nthe full message using library APIs will reject the signature, so the risk\nprimarily affects workflows that both sign and verify with the affected\n'openssl dgst' command. Streaming digest algorithms for 'openssl dgst' and\nlibrary users are unaffected.\n\nThe FIPS modules in 3.5 and 3.6 are not affected by this issue, as the\ncommand-line tools are outside the OpenSSL FIPS module boundary.\n\nOpenSSL 3.5 and 3.6 are vulnerable to this issue.\n\nOpenSSL 3.4, 3.3, 3.0, 1.1.1 and 1.0.2 are not affected by this issue.",
-                    "diffID": "sha256:fd2758d7a50e2b78d275ee7d1c218489f2439084449d895fa17eede6c61ab2c4",
-                    "fixedVersions": [
-                      "3.5.5-r0"
-                    ],
-                    "installedVersion": "3.5.0-r0",
-                    "packageName": "libcrypto3",
-                    "purl": "pkg:apk/alpine/libcrypto3@3.5.0-r0?arch=x86_64&distro=3.22.0",
-                    "references": [
-                      "https://access.redhat.com/errata/RHSA-2026:1472",
-                      "https://access.redhat.com/security/cve/CVE-2025-15469",
-                      "https://bugzilla.redhat.com/2430375",
-                      "https://bugzilla.redhat.com/2430376",
-                      "https://bugzilla.redhat.com/2430377",
-                      "https://bugzilla.redhat.com/2430378",
-                      "https://bugzilla.redhat.com/2430379",
-                      "https://bugzilla.redhat.com/2430380",
-                      "https://bugzilla.redhat.com/2430381",
-                      "https://bugzilla.redhat.com/2430386",
-                      "https://bugzilla.redhat.com/2430387",
-                      "https://bugzilla.redhat.com/2430388",
-                      "https://bugzilla.redhat.com/2430389",
-                      "https://bugzilla.redhat.com/2430390",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430375",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430376",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430377",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430378",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430379",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430380",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430381",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430386",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430387",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430388",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430389",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430390",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-11187",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-15467",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-15468",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-15469",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-66199",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-68160",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-69418",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-69419",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-69420",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-69421",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-22795",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-22796",
-                      "https://errata.almalinux.org/10/ALSA-2026-1472.html",
-                      "https://errata.rockylinux.org/RLSA-2026:1473",
-                      "https://github.com/openssl/openssl/commit/310f305eb92ea8040d6b3cb75a5feeba8e6acf2f",
-                      "https://github.com/openssl/openssl/commit/a7936fa4bd23c906e1955a16a0a0ab39a4953a61",
-                      "https://linux.oracle.com/cve/CVE-2025-15469.html",
-                      "https://linux.oracle.com/errata/ELSA-2026-50081.html",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2025-15469",
-                      "https://openssl-library.org/news/secadv/20260127.txt",
-                      "https://ubuntu.com/security/notices/USN-7980-1",
-                      "https://www.cve.org/CVERecord?id=CVE-2025-15469"
-                    ],
-                    "severity": "MEDIUM",
-                    "suppressed": false,
-                    "title": "openssl: OpenSSL: Data integrity bypass in `openssl dgst` command due to silent truncation"
-                  },
-                  {
-                    "cve": "CVE-2025-66199",
-                    "cvss": {
-                      "redhat": {
-                        "v3score": "5.9",
-                        "v3vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-789"
-                    ],
-                    "description": "Issue summary: A TLS 1.3 connection using certificate compression can be\nforced to allocate a large buffer before decompression without checking\nagainst the configured certificate size limit.\n\nImpact summary: An attacker can cause per-connection memory allocations of\nup to approximately 22 MiB and extra CPU work, potentially leading to\nservice degradation or resource exhaustion (Denial of Service).\n\nIn affected configurations, the peer-supplied uncompressed certificate\nlength from a CompressedCertificate message is used to grow a heap buffer\nprior to decompression. This length is not bounded by the max_cert_list\nsetting, which otherwise constrains certificate message sizes. An attacker\ncan exploit this to cause large per-connection allocations followed by\nhandshake failure. No memory corruption or information disclosure occurs.\n\nThis issue only affects builds where TLS 1.3 certificate compression is\ncompiled in (i.e., not OPENSSL_NO_COMP_ALG) and at least one compression\nalgorithm (brotli, zlib, or zstd) is available, and where the compression\nextension is negotiated. Both clients receiving a server CompressedCertificate\nand servers in mutual TLS scenarios receiving a client CompressedCertificate\nare affected. Servers that do not request client certificates are not\nvulnerable to client-initiated attacks.\n\nUsers can mitigate this issue by setting SSL_OP_NO_RX_CERTIFICATE_COMPRESSION\nto disable receiving compressed certificates.\n\nThe FIPS modules in 3.6, 3.5, 3.4 and 3.3 are not affected by this issue,\nas the TLS implementation is outside the OpenSSL FIPS module boundary.\n\nOpenSSL 3.6, 3.5, 3.4 and 3.3 are vulnerable to this issue.\n\nOpenSSL 3.0, 1.1.1 and 1.0.2 are not affected by this issue.",
-                    "diffID": "sha256:fd2758d7a50e2b78d275ee7d1c218489f2439084449d895fa17eede6c61ab2c4",
-                    "fixedVersions": [
-                      "3.5.5-r0"
-                    ],
-                    "installedVersion": "3.5.0-r0",
-                    "packageName": "libcrypto3",
-                    "purl": "pkg:apk/alpine/libcrypto3@3.5.0-r0?arch=x86_64&distro=3.22.0",
-                    "references": [
-                      "https://access.redhat.com/errata/RHSA-2026:1472",
-                      "https://access.redhat.com/security/cve/CVE-2025-66199",
-                      "https://bugzilla.redhat.com/2430375",
-                      "https://bugzilla.redhat.com/2430376",
-                      "https://bugzilla.redhat.com/2430377",
-                      "https://bugzilla.redhat.com/2430378",
-                      "https://bugzilla.redhat.com/2430379",
-                      "https://bugzilla.redhat.com/2430380",
-                      "https://bugzilla.redhat.com/2430381",
-                      "https://bugzilla.redhat.com/2430386",
-                      "https://bugzilla.redhat.com/2430387",
-                      "https://bugzilla.redhat.com/2430388",
-                      "https://bugzilla.redhat.com/2430389",
-                      "https://bugzilla.redhat.com/2430390",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430375",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430376",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430377",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430378",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430379",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430380",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430381",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430386",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430387",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430388",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430389",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430390",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-11187",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-15467",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-15468",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-15469",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-66199",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-68160",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-69418",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-69419",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-69420",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-69421",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-22795",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-22796",
-                      "https://errata.almalinux.org/10/ALSA-2026-1472.html",
-                      "https://errata.rockylinux.org/RLSA-2026:1473",
-                      "https://github.com/openssl/openssl/commit/3ed1f75249932b155eef993a8e66a99cb98bfef4",
-                      "https://github.com/openssl/openssl/commit/6184a4fb08ee6d7bca570d931a4e8bef40b64451",
-                      "https://github.com/openssl/openssl/commit/895150b5e021d16b52fb32b97e1dd12f20448be5",
-                      "https://github.com/openssl/openssl/commit/966a2478046c311ed7dae50c457d0db4cafbf7e4",
-                      "https://linux.oracle.com/cve/CVE-2025-66199.html",
-                      "https://linux.oracle.com/errata/ELSA-2026-50081.html",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2025-66199",
-                      "https://openssl-library.org/news/secadv/20260127.txt",
-                      "https://ubuntu.com/security/notices/USN-7980-1",
-                      "https://www.cve.org/CVERecord?id=CVE-2025-66199"
-                    ],
-                    "severity": "MEDIUM",
-                    "suppressed": false,
-                    "title": "openssl: OpenSSL: Denial of Service due to excessive memory allocation in TLS 1.3 certificate compression"
-                  },
-                  {
-                    "cve": "CVE-2025-68160",
-                    "cvss": {
-                      "redhat": {
-                        "v3score": "4.7",
-                        "v3vector": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-787"
-                    ],
-                    "description": "Issue summary: Writing large, newline-free data into a BIO chain using the\nline-buffering filter where the next BIO performs short writes can trigger\na heap-based out-of-bounds write.\n\nImpact summary: This out-of-bounds write can cause memory corruption which\ntypically results in a crash, leading to Denial of Service for an application.\n\nThe line-buffering BIO filter (BIO_f_linebuffer) is not used by default in\nTLS/SSL data paths. In OpenSSL command-line applications, it is typically\nonly pushed onto stdout/stderr on VMS systems. Third-party applications that\nexplicitly use this filter with a BIO chain that can short-write and that\nwrite large, newline-free data influenced by an attacker would be affected.\nHowever, the circumstances where this could happen are unlikely to be under\nattacker control, and BIO_f_linebuffer is unlikely to be handling non-curated\ndata controlled by an attacker. For that reason the issue was assessed as\nLow severity.\n\nThe FIPS modules in 3.6, 3.5, 3.4, 3.3 and 3.0 are not affected by this issue,\nas the BIO implementation is outside the OpenSSL FIPS module boundary.\n\nOpenSSL 3.6, 3.5, 3.4, 3.3, 3.0, 1.1.1 and 1.0.2 are vulnerable to this issue.",
-                    "diffID": "sha256:fd2758d7a50e2b78d275ee7d1c218489f2439084449d895fa17eede6c61ab2c4",
-                    "fixedVersions": [
-                      "3.5.5-r0"
-                    ],
-                    "installedVersion": "3.5.0-r0",
-                    "packageName": "libcrypto3",
-                    "purl": "pkg:apk/alpine/libcrypto3@3.5.0-r0?arch=x86_64&distro=3.22.0",
-                    "references": [
-                      "https://access.redhat.com/errata/RHSA-2026:1472",
-                      "https://access.redhat.com/security/cve/CVE-2025-68160",
-                      "https://bugzilla.redhat.com/2430375",
-                      "https://bugzilla.redhat.com/2430376",
-                      "https://bugzilla.redhat.com/2430377",
-                      "https://bugzilla.redhat.com/2430378",
-                      "https://bugzilla.redhat.com/2430379",
-                      "https://bugzilla.redhat.com/2430380",
-                      "https://bugzilla.redhat.com/2430381",
-                      "https://bugzilla.redhat.com/2430386",
-                      "https://bugzilla.redhat.com/2430387",
-                      "https://bugzilla.redhat.com/2430388",
-                      "https://bugzilla.redhat.com/2430389",
-                      "https://bugzilla.redhat.com/2430390",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430375",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430376",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430377",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430378",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430379",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430380",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430381",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430386",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430387",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430388",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430389",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430390",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-11187",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-15467",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-15468",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-15469",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-66199",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-68160",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-69418",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-69419",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-69420",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-69421",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-22795",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-22796",
-                      "https://errata.almalinux.org/10/ALSA-2026-1472.html",
-                      "https://errata.rockylinux.org/RLSA-2026:1473",
-                      "https://github.com/openssl/openssl/commit/384011202af92605d926fafe4a0bcd6b65d162ad",
-                      "https://github.com/openssl/openssl/commit/475c466ef2fbd8fc1df6fae1c3eed9c813fc8ff6",
-                      "https://github.com/openssl/openssl/commit/4c96fbba618e1940f038012506ee9e21d32ee12c",
-                      "https://github.com/openssl/openssl/commit/6845c3b6460a98b1ec4e463baa2ea1a63a32d7c0",
-                      "https://github.com/openssl/openssl/commit/68a7cd2e2816c3a02f4d45a2ce43fc04fac97096",
-                      "https://linux.oracle.com/cve/CVE-2025-68160.html",
-                      "https://linux.oracle.com/errata/ELSA-2026-50081.html",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2025-68160",
-                      "https://openssl-library.org/news/secadv/20260127.txt",
-                      "https://ubuntu.com/security/notices/USN-7980-1",
-                      "https://ubuntu.com/security/notices/USN-7980-2",
-                      "https://www.cve.org/CVERecord?id=CVE-2025-68160"
-                    ],
-                    "severity": "MEDIUM",
-                    "suppressed": false,
-                    "title": "openssl: OpenSSL: Denial of Service due to out-of-bounds write in BIO filter"
-                  },
-                  {
-                    "cve": "CVE-2025-69418",
-                    "cvss": {
-                      "redhat": {
-                        "v3score": "4",
-                        "v3vector": "CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-325"
-                    ],
-                    "description": "Issue summary: When using the low-level OCB API directly with AES-NI or<br>other hardware-accelerated code paths, inputs whose length is not a multiple<br>of 16 bytes can leave the final partial block unencrypted and unauthenticated.<br><br>Impact summary: The trailing 1-15 bytes of a message may be exposed in<br>cleartext on encryption and are not covered by the authentication tag,<br>allowing an attacker to read or tamper with those bytes without detection.<br><br>The low-level OCB encrypt and decrypt routines in the hardware-accelerated<br>stream path process full 16-byte blocks but do not advance the input/output<br>pointers. The subsequent tail-handling code then operates on the original<br>base pointers, effectively reprocessing the beginning of the buffer while<br>leaving the actual trailing bytes unprocessed. The authentication checksum<br>also excludes the true tail bytes.<br><br>However, typical OpenSSL consumers using EVP are not affected because the<br>higher-level EVP and provider OCB implementations split inputs so that full<br>blocks and trailing partial blocks are processed in separate calls, avoiding<br>the problematic code path. Additionally, TLS does not use OCB ciphersuites.<br>The vulnerability only affects applications that call the low-level<br>CRYPTO_ocb128_encrypt() or CRYPTO_ocb128_decrypt() functions directly with<br>non-block-aligned lengths in a single call on hardware-accelerated builds.<br>For these reasons the issue was assessed as Low severity.<br><br>The FIPS modules in 3.6, 3.5, 3.4, 3.3, 3.2, 3.1 and 3.0 are not affected<br>by this issue, as OCB mode is not a FIPS-approved algorithm.<br><br>OpenSSL 3.6, 3.5, 3.4, 3.3, 3.0 and 1.1.1 are vulnerable to this issue.<br><br>OpenSSL 1.0.2 is not affected by this issue.",
-                    "diffID": "sha256:fd2758d7a50e2b78d275ee7d1c218489f2439084449d895fa17eede6c61ab2c4",
-                    "fixedVersions": [
-                      "3.5.5-r0"
-                    ],
-                    "installedVersion": "3.5.0-r0",
-                    "packageName": "libcrypto3",
-                    "purl": "pkg:apk/alpine/libcrypto3@3.5.0-r0?arch=x86_64&distro=3.22.0",
-                    "references": [
-                      "https://access.redhat.com/errata/RHSA-2026:1472",
-                      "https://access.redhat.com/security/cve/CVE-2025-69418",
-                      "https://bugzilla.redhat.com/2430375",
-                      "https://bugzilla.redhat.com/2430376",
-                      "https://bugzilla.redhat.com/2430377",
-                      "https://bugzilla.redhat.com/2430378",
-                      "https://bugzilla.redhat.com/2430379",
-                      "https://bugzilla.redhat.com/2430380",
-                      "https://bugzilla.redhat.com/2430381",
-                      "https://bugzilla.redhat.com/2430386",
-                      "https://bugzilla.redhat.com/2430387",
-                      "https://bugzilla.redhat.com/2430388",
-                      "https://bugzilla.redhat.com/2430389",
-                      "https://bugzilla.redhat.com/2430390",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430375",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430376",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430377",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430378",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430379",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430380",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430381",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430386",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430387",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430388",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430389",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430390",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-11187",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-15467",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-15468",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-15469",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-66199",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-68160",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-69418",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-69419",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-69420",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-69421",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-22795",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-22796",
-                      "https://errata.almalinux.org/10/ALSA-2026-1472.html",
-                      "https://errata.rockylinux.org/RLSA-2026:1473",
-                      "https://github.com/openssl/openssl/commit/372fc5c77529695b05b4f5b5187691a57ef5dffc",
-                      "https://github.com/openssl/openssl/commit/4016975d4469cd6b94927c607f7c511385f928d8",
-                      "https://github.com/openssl/openssl/commit/52d23c86a54adab5ee9f80e48b242b52c4cc2347",
-                      "https://github.com/openssl/openssl/commit/a7589230356d908c0eca4b969ec4f62106f4f5ae",
-                      "https://github.com/openssl/openssl/commit/ed40856d7d4ba6cb42779b6770666a65f19cb977",
-                      "https://linux.oracle.com/cve/CVE-2025-69418.html",
-                      "https://linux.oracle.com/errata/ELSA-2026-50081.html",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2025-69418",
-                      "https://openssl-library.org/news/secadv/20260127.txt",
-                      "https://ubuntu.com/security/notices/USN-7980-1",
-                      "https://ubuntu.com/security/notices/USN-7980-2",
-                      "https://www.cve.org/CVERecord?id=CVE-2025-69418"
-                    ],
-                    "severity": "MEDIUM",
-                    "suppressed": false,
-                    "title": "openssl: OpenSSL: Information disclosure and data tampering via specific low-level OCB encryption/decryption calls"
-                  },
-                  {
-                    "cve": "CVE-2025-69420",
-                    "cvss": {
-                      "redhat": {
-                        "v3score": "5.9",
-                        "v3vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-754"
-                    ],
-                    "description": "Issue summary: A type confusion vulnerability exists in the TimeStamp Response\nverification code where an ASN1_TYPE union member is accessed without first\nvalidating the type, causing an invalid or NULL pointer dereference when\nprocessing a malformed TimeStamp Response file.\n\nImpact summary: An application calling TS_RESP_verify_response() with a\nmalformed TimeStamp Response can be caused to dereference an invalid or\nNULL pointer when reading, resulting in a Denial of Service.\n\nThe functions ossl_ess_get_signing_cert() and ossl_ess_get_signing_cert_v2()\naccess the signing cert attribute value without validating its type.\nWhen the type is not V_ASN1_SEQUENCE, this results in accessing invalid memory\nthrough the ASN1_TYPE union, causing a crash.\n\nExploiting this vulnerability requires an attacker to provide a malformed\nTimeStamp Response to an application that verifies timestamp responses. The\nTimeStamp protocol (RFC 3161) is not widely used and the impact of the\nexploit is just a Denial of Service. For these reasons the issue was\nassessed as Low severity.\n\nThe FIPS modules in 3.5, 3.4, 3.3 and 3.0 are not affected by this issue,\nas the TimeStamp Response implementation is outside the OpenSSL FIPS module\nboundary.\n\nOpenSSL 3.6, 3.5, 3.4, 3.3, 3.0 and 1.1.1 are vulnerable to this issue.\n\nOpenSSL 1.0.2 is not affected by this issue.",
-                    "diffID": "sha256:fd2758d7a50e2b78d275ee7d1c218489f2439084449d895fa17eede6c61ab2c4",
-                    "fixedVersions": [
-                      "3.5.5-r0"
-                    ],
-                    "installedVersion": "3.5.0-r0",
-                    "packageName": "libcrypto3",
-                    "purl": "pkg:apk/alpine/libcrypto3@3.5.0-r0?arch=x86_64&distro=3.22.0",
-                    "references": [
-                      "https://access.redhat.com/errata/RHSA-2026:1472",
-                      "https://access.redhat.com/security/cve/CVE-2025-69420",
-                      "https://bugzilla.redhat.com/2430375",
-                      "https://bugzilla.redhat.com/2430376",
-                      "https://bugzilla.redhat.com/2430377",
-                      "https://bugzilla.redhat.com/2430378",
-                      "https://bugzilla.redhat.com/2430379",
-                      "https://bugzilla.redhat.com/2430380",
-                      "https://bugzilla.redhat.com/2430381",
-                      "https://bugzilla.redhat.com/2430386",
-                      "https://bugzilla.redhat.com/2430387",
-                      "https://bugzilla.redhat.com/2430388",
-                      "https://bugzilla.redhat.com/2430389",
-                      "https://bugzilla.redhat.com/2430390",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430375",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430376",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430377",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430378",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430379",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430380",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430381",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430386",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430387",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430388",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430389",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430390",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-11187",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-15467",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-15468",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-15469",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-66199",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-68160",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-69418",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-69419",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-69420",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-69421",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-22795",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-22796",
-                      "https://errata.almalinux.org/10/ALSA-2026-1472.html",
-                      "https://errata.rockylinux.org/RLSA-2026:1473",
-                      "https://github.com/openssl/openssl/commit/27c7012c91cc986a598d7540f3079dfde2416eb9",
-                      "https://github.com/openssl/openssl/commit/4e254b48ad93cc092be3dd62d97015f33f73133a",
-                      "https://github.com/openssl/openssl/commit/564fd9c73787f25693bf9e75faf7bf6bb1305d4e",
-                      "https://github.com/openssl/openssl/commit/5eb0770ffcf11b785cf374ff3c19196245e54f1b",
-                      "https://github.com/openssl/openssl/commit/a99349ebfc519999edc50620abe24d599b9eb085",
-                      "https://linux.oracle.com/cve/CVE-2025-69420.html",
-                      "https://linux.oracle.com/errata/ELSA-2026-50081.html",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2025-69420",
-                      "https://openssl-library.org/news/secadv/20260127.txt",
-                      "https://ubuntu.com/security/notices/USN-7980-1",
-                      "https://ubuntu.com/security/notices/USN-7980-2",
-                      "https://www.cve.org/CVERecord?id=CVE-2025-69420"
-                    ],
-                    "severity": "MEDIUM",
-                    "suppressed": false,
-                    "title": "openssl: OpenSSL: Denial of Service via malformed TimeStamp Response"
-                  },
-                  {
-                    "cve": "CVE-2025-9230",
-                    "cvss": {
-                      "redhat": {
-                        "v3score": "5.6",
-                        "v3vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-125",
-                      "CWE-787"
-                    ],
-                    "description": "Issue summary: An application trying to decrypt CMS messages encrypted using\npassword based encryption can trigger an out-of-bounds read and write.\n\nImpact summary: This out-of-bounds read may trigger a crash which leads to\nDenial of Service for an application. The out-of-bounds write can cause\na memory corruption which can have various consequences including\na Denial of Service or Execution of attacker-supplied code.\n\nAlthough the consequences of a successful exploit of this vulnerability\ncould be severe, the probability that the attacker would be able to\nperform it is low. Besides, password based (PWRI) encryption support in CMS\nmessages is very rarely used. For that reason the issue was assessed as\nModerate severity according to our Security Policy.\n\nThe FIPS modules in 3.5, 3.4, 3.3, 3.2, 3.1 and 3.0 are not affected by this\nissue, as the CMS implementation is outside the OpenSSL FIPS module\nboundary.",
-                    "diffID": "sha256:fd2758d7a50e2b78d275ee7d1c218489f2439084449d895fa17eede6c61ab2c4",
-                    "fixedVersions": [
-                      "3.5.4-r0"
-                    ],
-                    "installedVersion": "3.5.0-r0",
-                    "packageName": "libcrypto3",
-                    "purl": "pkg:apk/alpine/libcrypto3@3.5.0-r0?arch=x86_64&distro=3.22.0",
-                    "references": [
-                      "http://www.openwall.com/lists/oss-security/2025/09/30/5",
-                      "https://access.redhat.com/errata/RHSA-2026:0337",
-                      "https://access.redhat.com/security/cve/CVE-2025-9230",
-                      "https://bugzilla.redhat.com/2396054",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2396054",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-9230",
-                      "https://errata.almalinux.org/8/ALSA-2026-0337.html",
-                      "https://errata.rockylinux.org/RLSA-2025:21255",
-                      "https://github.com/openssl/openssl/commit/5965ea5dd6960f36d8b7f74f8eac67a8eb8f2b45",
-                      "https://github.com/openssl/openssl/commit/9e91358f365dee6c446dcdcdb01c04d2743fd280",
-                      "https://github.com/openssl/openssl/commit/a79c4ce559c6a3a8fd4109e9f33c1185d5bf2def",
-                      "https://github.com/openssl/openssl/commit/b5282d677551afda7d20e9c00e09561b547b2dfd",
-                      "https://github.com/openssl/openssl/commit/bae259a211ada6315dc50900686daaaaaa55f482",
-                      "https://github.openssl.org/openssl/extended-releases/commit/c2b96348bfa662f25f4fabf81958ae822063dae3",
-                      "https://github.openssl.org/openssl/extended-releases/commit/dfbaf161d8dafc1132dd88cd48ad990ed9b4c8ba",
-                      "https://linux.oracle.com/cve/CVE-2025-9230.html",
-                      "https://linux.oracle.com/errata/ELSA-2026-50077.html",
-                      "https://lists.debian.org/debian-lts-announce/2025/10/msg00001.html",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2025-9230",
-                      "https://openssl-library.org/news/secadv/20250930.txt",
-                      "https://ubuntu.com/security/notices/USN-7786-1",
-                      "https://www.cve.org/CVERecord?id=CVE-2025-9230"
-                    ],
-                    "severity": "MEDIUM",
-                    "suppressed": false,
-                    "title": "openssl: Out-of-bounds read & write in RFC 3211 KEK Unwrap"
-                  },
-                  {
-                    "cve": "CVE-2025-9231",
-                    "cvss": {
-                      "redhat": {
-                        "v3score": "5.9",
-                        "v3vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-385"
-                    ],
-                    "description": "Issue summary: A timing side-channel which could potentially allow remote\nrecovery of the private key exists in the SM2 algorithm implementation on 64 bit\nARM platforms.\n\nImpact summary: A timing side-channel in SM2 signature computations on 64 bit\nARM platforms could allow recovering the private key by an attacker..\n\nWhile remote key recovery over a network was not attempted by the reporter,\ntiming measurements revealed a timing signal which may allow such an attack.\n\nOpenSSL does not directly support certificates with SM2 keys in TLS, and so\nthis CVE is not relevant in most TLS contexts.  However, given that it is\npossible to add support for such certificates via a custom provider, coupled\nwith the fact that in such a custom provider context the private key may be\nrecoverable via remote timing measurements, we consider this to be a Moderate\nseverity issue.\n\nThe FIPS modules in 3.5, 3.4, 3.3, 3.2, 3.1 and 3.0 are not affected by this\nissue, as SM2 is not an approved algorithm.",
-                    "diffID": "sha256:fd2758d7a50e2b78d275ee7d1c218489f2439084449d895fa17eede6c61ab2c4",
-                    "fixedVersions": [
-                      "3.5.4-r0"
-                    ],
-                    "installedVersion": "3.5.0-r0",
-                    "packageName": "libcrypto3",
-                    "purl": "pkg:apk/alpine/libcrypto3@3.5.0-r0?arch=x86_64&distro=3.22.0",
-                    "references": [
-                      "http://www.openwall.com/lists/oss-security/2025/09/30/5",
-                      "https://access.redhat.com/security/cve/CVE-2025-9231",
-                      "https://github.com/openssl/openssl/commit/567f64386e43683888212226824b6a179885a0fe",
-                      "https://github.com/openssl/openssl/commit/cba616c26ac8e7b37de5e77762e505ba5ca51698",
-                      "https://github.com/openssl/openssl/commit/eed5adc9f969d77c94f213767acbb41ff923b6f4",
-                      "https://github.com/openssl/openssl/commit/fc47a2ec078912b3e914fab5734535e76c4820c2",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2025-9231",
-                      "https://openssl-library.org/news/secadv/20250930.txt",
-                      "https://ubuntu.com/security/notices/USN-7786-1",
-                      "https://www.cve.org/CVERecord?id=CVE-2025-9231"
-                    ],
-                    "severity": "MEDIUM",
-                    "suppressed": false,
-                    "title": "openssl: Timing side-channel in SM2 algorithm on 64 bit ARM"
-                  },
-                  {
-                    "cve": "CVE-2026-22795",
-                    "cvss": {
-                      "redhat": {
-                        "v3score": "5.5",
-                        "v3vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-754"
-                    ],
-                    "description": "Issue summary: An invalid or NULL pointer dereference can happen in\nan application processing a malformed PKCS#12 file.\n\nImpact summary: An application processing a malformed PKCS#12 file can be\ncaused to dereference an invalid or NULL pointer on memory read, resulting\nin a Denial of Service.\n\nA type confusion vulnerability exists in PKCS#12 parsing code where\nan ASN1_TYPE union member is accessed without first validating the type,\ncausing an invalid pointer read.\n\nThe location is constrained to a 1-byte address space, meaning any\nattempted pointer manipulation can only target addresses between 0x00 and 0xFF.\nThis range corresponds to the zero page, which is unmapped on most modern\noperating systems and will reliably result in a crash, leading only to a\nDenial of Service. Exploiting this issue also requires a user or application\nto process a maliciously crafted PKCS#12 file. It is uncommon to accept\nuntrusted PKCS#12 files in applications as they are usually used to store\nprivate keys which are trusted by definition. For these reasons, the issue\nwas assessed as Low severity.\n\nThe FIPS modules in 3.5, 3.4, 3.3 and 3.0 are not affected by this issue,\nas the PKCS12 implementation is outside the OpenSSL FIPS module boundary.\n\nOpenSSL 3.6, 3.5, 3.4, 3.3, 3.0 and 1.1.1 are vulnerable to this issue.\n\nOpenSSL 1.0.2 is not affected by this issue.",
-                    "diffID": "sha256:fd2758d7a50e2b78d275ee7d1c218489f2439084449d895fa17eede6c61ab2c4",
-                    "fixedVersions": [
-                      "3.5.5-r0"
-                    ],
-                    "installedVersion": "3.5.0-r0",
-                    "packageName": "libcrypto3",
-                    "purl": "pkg:apk/alpine/libcrypto3@3.5.0-r0?arch=x86_64&distro=3.22.0",
-                    "references": [
-                      "https://access.redhat.com/errata/RHSA-2026:1472",
-                      "https://access.redhat.com/security/cve/CVE-2026-22795",
-                      "https://bugzilla.redhat.com/2430375",
-                      "https://bugzilla.redhat.com/2430376",
-                      "https://bugzilla.redhat.com/2430377",
-                      "https://bugzilla.redhat.com/2430378",
-                      "https://bugzilla.redhat.com/2430379",
-                      "https://bugzilla.redhat.com/2430380",
-                      "https://bugzilla.redhat.com/2430381",
-                      "https://bugzilla.redhat.com/2430386",
-                      "https://bugzilla.redhat.com/2430387",
-                      "https://bugzilla.redhat.com/2430388",
-                      "https://bugzilla.redhat.com/2430389",
-                      "https://bugzilla.redhat.com/2430390",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430375",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430376",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430377",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430378",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430379",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430380",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430381",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430386",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430387",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430388",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430389",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430390",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-11187",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-15467",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-15468",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-15469",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-66199",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-68160",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-69418",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-69419",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-69420",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-69421",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-22795",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-22796",
-                      "https://errata.almalinux.org/10/ALSA-2026-1472.html",
-                      "https://errata.rockylinux.org/RLSA-2026:1473",
-                      "https://github.com/openssl/openssl/commit/2502e7b7d4c0cf4f972a881641fe09edc67aeec4",
-                      "https://github.com/openssl/openssl/commit/572844beca95068394c916626a6d3a490f831a49",
-                      "https://github.com/openssl/openssl/commit/7bbca05be55b129651d9df4bdb92becc45002c12",
-                      "https://github.com/openssl/openssl/commit/eeee3cbd4d682095ed431052f00403004596373e",
-                      "https://github.com/openssl/openssl/commit/ef2fb66ec571564d64d1c74a12e388a2a54d05d2",
-                      "https://linux.oracle.com/cve/CVE-2026-22795.html",
-                      "https://linux.oracle.com/errata/ELSA-2026-50081.html",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2026-22795",
-                      "https://openssl-library.org/news/secadv/20260127.txt",
-                      "https://ubuntu.com/security/notices/USN-7980-1",
-                      "https://ubuntu.com/security/notices/USN-7980-2",
-                      "https://www.cve.org/CVERecord?id=CVE-2026-22795"
-                    ],
-                    "severity": "MEDIUM",
-                    "suppressed": false,
-                    "title": "openssl: OpenSSL: Denial of Service due to type confusion in PKCS#12 file processing"
-                  },
-                  {
-                    "cve": "CVE-2026-22796",
-                    "cvss": {
-                      "redhat": {
-                        "v3score": "5.9",
-                        "v3vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-754"
-                    ],
-                    "description": "Issue summary: A type confusion vulnerability exists in the signature\nverification of signed PKCS#7 data where an ASN1_TYPE union member is\naccessed without first validating the type, causing an invalid or NULL\npointer dereference when processing malformed PKCS#7 data.\n\nImpact summary: An application performing signature verification of PKCS#7\ndata or calling directly the PKCS7_digest_from_attributes() function can be\ncaused to dereference an invalid or NULL pointer when reading, resulting in\na Denial of Service.\n\nThe function PKCS7_digest_from_attributes() accesses the message digest attribute\nvalue without validating its type. When the type is not V_ASN1_OCTET_STRING,\nthis results in accessing invalid memory through the ASN1_TYPE union, causing\na crash.\n\nExploiting this vulnerability requires an attacker to provide a malformed\nsigned PKCS#7 to an application that verifies it. The impact of the\nexploit is just a Denial of Service, the PKCS7 API is legacy and applications\nshould be using the CMS API instead. For these reasons the issue was\nassessed as Low severity.\n\nThe FIPS modules in 3.5, 3.4, 3.3 and 3.0 are not affected by this issue,\nas the PKCS#7 parsing implementation is outside the OpenSSL FIPS module\nboundary.\n\nOpenSSL 3.6, 3.5, 3.4, 3.3, 3.0, 1.1.1 and 1.0.2 are vulnerable to this issue.",
-                    "diffID": "sha256:fd2758d7a50e2b78d275ee7d1c218489f2439084449d895fa17eede6c61ab2c4",
-                    "fixedVersions": [
-                      "3.5.5-r0"
-                    ],
-                    "installedVersion": "3.5.0-r0",
-                    "packageName": "libcrypto3",
-                    "purl": "pkg:apk/alpine/libcrypto3@3.5.0-r0?arch=x86_64&distro=3.22.0",
-                    "references": [
-                      "https://access.redhat.com/errata/RHSA-2026:1472",
-                      "https://access.redhat.com/security/cve/CVE-2026-22796",
-                      "https://bugzilla.redhat.com/2430375",
-                      "https://bugzilla.redhat.com/2430376",
-                      "https://bugzilla.redhat.com/2430377",
-                      "https://bugzilla.redhat.com/2430378",
-                      "https://bugzilla.redhat.com/2430379",
-                      "https://bugzilla.redhat.com/2430380",
-                      "https://bugzilla.redhat.com/2430381",
-                      "https://bugzilla.redhat.com/2430386",
-                      "https://bugzilla.redhat.com/2430387",
-                      "https://bugzilla.redhat.com/2430388",
-                      "https://bugzilla.redhat.com/2430389",
-                      "https://bugzilla.redhat.com/2430390",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430375",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430376",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430377",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430378",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430379",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430380",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430381",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430386",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430387",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430388",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430389",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430390",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-11187",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-15467",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-15468",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-15469",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-66199",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-68160",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-69418",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-69419",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-69420",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-69421",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-22795",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-22796",
-                      "https://errata.almalinux.org/10/ALSA-2026-1472.html",
-                      "https://errata.rockylinux.org/RLSA-2026:1473",
-                      "https://github.com/openssl/openssl/commit/2502e7b7d4c0cf4f972a881641fe09edc67aeec4",
-                      "https://github.com/openssl/openssl/commit/572844beca95068394c916626a6d3a490f831a49",
-                      "https://github.com/openssl/openssl/commit/7bbca05be55b129651d9df4bdb92becc45002c12",
-                      "https://github.com/openssl/openssl/commit/eeee3cbd4d682095ed431052f00403004596373e",
-                      "https://github.com/openssl/openssl/commit/ef2fb66ec571564d64d1c74a12e388a2a54d05d2",
-                      "https://linux.oracle.com/cve/CVE-2026-22796.html",
-                      "https://linux.oracle.com/errata/ELSA-2026-50081.html",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2026-22796",
-                      "https://openssl-library.org/news/secadv/20260127.txt",
-                      "https://ubuntu.com/security/notices/USN-7980-1",
-                      "https://ubuntu.com/security/notices/USN-7980-2",
-                      "https://www.cve.org/CVERecord?id=CVE-2026-22796"
-                    ],
-                    "severity": "MEDIUM",
-                    "suppressed": false,
-                    "title": "openssl: OpenSSL: Denial of Service via type confusion in PKCS#7 signature verification"
-                  },
-                  {
-                    "cve": "CVE-2025-9232",
-                    "cvss": {
-                      "redhat": {
-                        "v3score": "3.1",
-                        "v3vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-125"
-                    ],
-                    "description": "Issue summary: An application using the OpenSSL HTTP client API functions may\ntrigger an out-of-bounds read if the 'no_proxy' environment variable is set and\nthe host portion of the authority component of the HTTP URL is an IPv6 address.\n\nImpact summary: An out-of-bounds read can trigger a crash which leads to\nDenial of Service for an application.\n\nThe OpenSSL HTTP client API functions can be used directly by applications\nbut they are also used by the OCSP client functions and CMP (Certificate\nManagement Protocol) client implementation in OpenSSL. However the URLs used\nby these implementations are unlikely to be controlled by an attacker.\n\nIn this vulnerable code the out of bounds read can only trigger a crash.\nFurthermore the vulnerability requires an attacker-controlled URL to be\npassed from an application to the OpenSSL function and the user has to have\na 'no_proxy' environment variable set. For the aforementioned reasons the\nissue was assessed as Low severity.\n\nThe vulnerable code was introduced in the following patch releases:\n3.0.16, 3.1.8, 3.2.4, 3.3.3, 3.4.0 and 3.5.0.\n\nThe FIPS modules in 3.5, 3.4, 3.3, 3.2, 3.1 and 3.0 are not affected by this\nissue, as the HTTP client implementation is outside the OpenSSL FIPS module\nboundary.",
-                    "diffID": "sha256:fd2758d7a50e2b78d275ee7d1c218489f2439084449d895fa17eede6c61ab2c4",
-                    "fixedVersions": [
-                      "3.5.4-r0"
-                    ],
-                    "installedVersion": "3.5.0-r0",
-                    "packageName": "libcrypto3",
-                    "purl": "pkg:apk/alpine/libcrypto3@3.5.0-r0?arch=x86_64&distro=3.22.0",
-                    "references": [
-                      "http://www.openwall.com/lists/oss-security/2025/09/30/5",
-                      "https://access.redhat.com/security/cve/CVE-2025-9232",
-                      "https://github.com/openssl/openssl/commit/2b4ec20e47959170422922eaff25346d362dcb35",
-                      "https://github.com/openssl/openssl/commit/654dc11d23468a74fc8ea4672b702dd3feb7be4b",
-                      "https://github.com/openssl/openssl/commit/7cf21a30513c9e43c4bc3836c237cf086e194af3",
-                      "https://github.com/openssl/openssl/commit/89e790ac431125a4849992858490bed6b225eadf",
-                      "https://github.com/openssl/openssl/commit/bbf38c034cdabd0a13330abcc4855c866f53d2e0",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2025-9232",
-                      "https://openssl-library.org/news/secadv/20250930.txt",
-                      "https://ubuntu.com/security/notices/USN-7786-1",
-                      "https://ubuntu.com/security/notices/USN-7894-1",
-                      "https://www.cve.org/CVERecord?id=CVE-2025-9232"
-                    ],
-                    "severity": "LOW",
-                    "suppressed": false,
-                    "title": "openssl: Out-of-bounds read in HTTP client no_proxy handling"
-                  },
-                  {
-                    "cve": "CVE-2025-4575",
-                    "cwes": [
-                      "CWE-295"
-                    ],
-                    "description": "Issue summary: Use of -addreject option with the openssl x509 application adds\na trusted use instead of a rejected use for a certificate.\n\nImpact summary: If a user intends to make a trusted certificate rejected for\na particular use it will be instead marked as trusted for that use.\n\nA copy & paste error during minor refactoring of the code introduced this\nissue in the OpenSSL 3.5 version. If, for example, a trusted CA certificate\nshould be trusted only for the purpose of authenticating TLS servers but not\nfor CMS signature verification and the CMS signature verification is intended\nto be marked as rejected with the -addreject option, the resulting CA\ncertificate will be trusted for CMS signature verification purpose instead.\n\nOnly users which use the trusted certificate format who use the openssl x509\ncommand line application to add rejected uses are affected by this issue.\nThe issues affecting only the command line application are considered to\nbe Low severity.\n\nThe FIPS modules in 3.5, 3.4, 3.3, 3.2, 3.1 and 3.0 are not affected by this\nissue.\n\nOpenSSL 3.4, 3.3, 3.2, 3.1, 3.0, 1.1.1 and 1.0.2 are also not affected by this\nissue.",
-                    "diffID": "sha256:fd2758d7a50e2b78d275ee7d1c218489f2439084449d895fa17eede6c61ab2c4",
-                    "fixedVersions": [
-                      "3.5.1-r0"
-                    ],
-                    "installedVersion": "3.5.0-r0",
-                    "packageName": "libcrypto3",
-                    "purl": "pkg:apk/alpine/libcrypto3@3.5.0-r0?arch=x86_64&distro=3.22.0",
-                    "references": [
-                      "http://www.openwall.com/lists/oss-security/2025/05/22/1",
-                      "https://github.com/openssl/openssl/commit/e96d22446e633d117e6c9904cb15b4693e956eaa",
-                      "https://openssl-library.org/news/secadv/20250522.txt"
-                    ],
-                    "severity": "UNKNOWN",
-                    "suppressed": false,
-                    "title": "Issue summary: Use of -addreject option with the openssl x509 applicat ..."
-                  },
-                  {
-                    "cve": "CVE-2025-15467",
-                    "cvss": {
-                      "redhat": {
-                        "v3score": "9.8",
-                        "v3vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-787"
-                    ],
-                    "description": "Issue summary: Parsing CMS AuthEnvelopedData message with maliciously\ncrafted AEAD parameters can trigger a stack buffer overflow.\n\nImpact summary: A stack buffer overflow may lead to a crash, causing Denial\nof Service, or potentially remote code execution.\n\nWhen parsing CMS AuthEnvelopedData structures that use AEAD ciphers such as\nAES-GCM, the IV (Initialization Vector) encoded in the ASN.1 parameters is\ncopied into a fixed-size stack buffer without verifying that its length fits\nthe destination. An attacker can supply a crafted CMS message with an\noversized IV, causing a stack-based out-of-bounds write before any\nauthentication or tag verification occurs.\n\nApplications and services that parse untrusted CMS or PKCS#7 content using\nAEAD ciphers (e.g., S/MIME AuthEnvelopedData with AES-GCM) are vulnerable.\nBecause the overflow occurs prior to authentication, no valid key material\nis required to trigger it. While exploitability to remote code execution\ndepends on platform and toolchain mitigations, the stack-based write\nprimitive represents a severe risk.\n\nThe FIPS modules in 3.6, 3.5, 3.4, 3.3 and 3.0 are not affected by this\nissue, as the CMS implementation is outside the OpenSSL FIPS module\nboundary.\n\nOpenSSL 3.6, 3.5, 3.4, 3.3 and 3.0 are vulnerable to this issue.\n\nOpenSSL 1.1.1 and 1.0.2 are not affected by this issue.",
-                    "diffID": "sha256:fd2758d7a50e2b78d275ee7d1c218489f2439084449d895fa17eede6c61ab2c4",
-                    "fixedVersions": [
-                      "3.5.5-r0"
-                    ],
-                    "installedVersion": "3.5.0-r0",
-                    "packageName": "libssl3",
-                    "purl": "pkg:apk/alpine/libssl3@3.5.0-r0?arch=x86_64&distro=3.22.0",
-                    "references": [
-                      "http://www.openwall.com/lists/oss-security/2026/01/27/10",
-                      "https://access.redhat.com/errata/RHSA-2026:1472",
-                      "https://access.redhat.com/security/cve/CVE-2025-15467",
-                      "https://bugzilla.redhat.com/2430375",
-                      "https://bugzilla.redhat.com/2430376",
-                      "https://bugzilla.redhat.com/2430377",
-                      "https://bugzilla.redhat.com/2430378",
-                      "https://bugzilla.redhat.com/2430379",
-                      "https://bugzilla.redhat.com/2430380",
-                      "https://bugzilla.redhat.com/2430381",
-                      "https://bugzilla.redhat.com/2430386",
-                      "https://bugzilla.redhat.com/2430387",
-                      "https://bugzilla.redhat.com/2430388",
-                      "https://bugzilla.redhat.com/2430389",
-                      "https://bugzilla.redhat.com/2430390",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430375",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430376",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430377",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430378",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430379",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430380",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430381",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430386",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430387",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430388",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430389",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430390",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-11187",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-15467",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-15468",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-15469",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-66199",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-68160",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-69418",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-69419",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-69420",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-69421",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-22795",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-22796",
-                      "https://errata.almalinux.org/10/ALSA-2026-1472.html",
-                      "https://errata.rockylinux.org/RLSA-2026:1473",
-                      "https://github.com/openssl/openssl/commit/2c8f0e5fa9b6ee5508a0349e4572ddb74db5a703",
-                      "https://github.com/openssl/openssl/commit/5f26d4202f5b89664c5c3f3c62086276026ba9a9",
-                      "https://github.com/openssl/openssl/commit/6ced0fe6b10faa560e410e3ee8d6c82f06c65ea3",
-                      "https://github.com/openssl/openssl/commit/ce39170276daec87f55c39dad1f629b56344429e",
-                      "https://github.com/openssl/openssl/commit/d0071a0799f20cc8101730145349ed4487c268dc",
-                      "https://linux.oracle.com/cve/CVE-2025-15467.html",
-                      "https://linux.oracle.com/errata/ELSA-2026-50081.html",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2025-15467",
-                      "https://openssl-library.org/news/secadv/20260127.txt",
-                      "https://ubuntu.com/security/notices/USN-7980-1",
-                      "https://www.cve.org/CVERecord?id=CVE-2025-15467"
-                    ],
-                    "severity": "CRITICAL",
-                    "suppressed": false,
-                    "title": "openssl: OpenSSL: Remote code execution or Denial of Service via oversized Initialization Vector in CMS parsing"
-                  },
-                  {
-                    "cve": "CVE-2025-69419",
-                    "cvss": {
-                      "redhat": {
-                        "v3score": "7.4",
-                        "v3vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-787"
-                    ],
-                    "description": "Issue summary: Calling PKCS12_get_friendlyname() function on a maliciously\ncrafted PKCS#12 file with a BMPString (UTF-16BE) friendly name containing\nnon-ASCII BMP code point can trigger a one byte write before the allocated\nbuffer.\n\nImpact summary: The out-of-bounds write can cause a memory corruption\nwhich can have various consequences including a Denial of Service.\n\nThe OPENSSL_uni2utf8() function performs a two-pass conversion of a PKCS#12\nBMPString (UTF-16BE) to UTF-8. In the second pass, when emitting UTF-8 bytes,\nthe helper function bmp_to_utf8() incorrectly forwards the remaining UTF-16\nsource byte count as the destination buffer capacity to UTF8_putc(). For BMP\ncode points above U+07FF, UTF-8 requires three bytes, but the forwarded\ncapacity can be just two bytes. UTF8_putc() then returns -1, and this negative\nvalue is added to the output length without validation, causing the\nlength to become negative. The subsequent trailing NUL byte is then written\nat a negative offset, causing write outside of heap allocated buffer.\n\nThe vulnerability is reachable via the public PKCS12_get_friendlyname() API\nwhen parsing attacker-controlled PKCS#12 files. While PKCS12_parse() uses a\ndifferent code path that avoids this issue, PKCS12_get_friendlyname() directly\ninvokes the vulnerable function. Exploitation requires an attacker to provide\na malicious PKCS#12 file to be parsed by the application and the attacker\ncan just trigger a one zero byte write before the allocated buffer.\nFor that reason the issue was assessed as Low severity according to our\nSecurity Policy.\n\nThe FIPS modules in 3.6, 3.5, 3.4, 3.3 and 3.0 are not affected by this issue,\nas the PKCS#12 implementation is outside the OpenSSL FIPS module boundary.\n\nOpenSSL 3.6, 3.5, 3.4, 3.3, 3.0 and 1.1.1 are vulnerable to this issue.\n\nOpenSSL 1.0.2 is not affected by this issue.",
-                    "diffID": "sha256:fd2758d7a50e2b78d275ee7d1c218489f2439084449d895fa17eede6c61ab2c4",
-                    "fixedVersions": [
-                      "3.5.5-r0"
-                    ],
-                    "installedVersion": "3.5.0-r0",
-                    "packageName": "libssl3",
-                    "purl": "pkg:apk/alpine/libssl3@3.5.0-r0?arch=x86_64&distro=3.22.0",
-                    "references": [
-                      "https://access.redhat.com/errata/RHSA-2026:1472",
-                      "https://access.redhat.com/security/cve/CVE-2025-69419",
-                      "https://bugzilla.redhat.com/2430375",
-                      "https://bugzilla.redhat.com/2430376",
-                      "https://bugzilla.redhat.com/2430377",
-                      "https://bugzilla.redhat.com/2430378",
-                      "https://bugzilla.redhat.com/2430379",
-                      "https://bugzilla.redhat.com/2430380",
-                      "https://bugzilla.redhat.com/2430381",
-                      "https://bugzilla.redhat.com/2430386",
-                      "https://bugzilla.redhat.com/2430387",
-                      "https://bugzilla.redhat.com/2430388",
-                      "https://bugzilla.redhat.com/2430389",
-                      "https://bugzilla.redhat.com/2430390",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430375",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430376",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430377",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430378",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430379",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430380",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430381",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430386",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430387",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430388",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430389",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430390",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-11187",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-15467",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-15468",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-15469",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-66199",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-68160",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-69418",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-69419",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-69420",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-69421",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-22795",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-22796",
-                      "https://errata.almalinux.org/10/ALSA-2026-1472.html",
-                      "https://errata.rockylinux.org/RLSA-2026:1473",
-                      "https://github.com/openssl/openssl/commit/41be0f216404f14457bbf3b9cc488dba60b49296",
-                      "https://github.com/openssl/openssl/commit/7e9cac9832e4705b91987c2474ed06a37a93cecb",
-                      "https://github.com/openssl/openssl/commit/a26a90d38edec3748566129d824e664b54bee2e2",
-                      "https://github.com/openssl/openssl/commit/cda12de3bc0e333ea8d2c6fd15001dbdaf280015",
-                      "https://github.com/openssl/openssl/commit/ff628933755075446bca8307e8417c14d164b535",
-                      "https://linux.oracle.com/cve/CVE-2025-69419.html",
-                      "https://linux.oracle.com/errata/ELSA-2026-50081.html",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2025-69419",
-                      "https://openssl-library.org/news/secadv/20260127.txt",
-                      "https://ubuntu.com/security/notices/USN-7980-1",
-                      "https://ubuntu.com/security/notices/USN-7980-2",
-                      "https://www.cve.org/CVERecord?id=CVE-2025-69419"
-                    ],
-                    "severity": "HIGH",
-                    "suppressed": false,
-                    "title": "openssl: OpenSSL: Arbitrary code execution due to out-of-bounds write in PKCS#12 processing"
-                  },
-                  {
-                    "cve": "CVE-2025-69421",
-                    "cvss": {
-                      "nvd": {
-                        "v3score": "7.5",
-                        "v3vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"
-                      },
-                      "redhat": {
-                        "v3score": "6.5",
-                        "v3vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-476"
-                    ],
-                    "description": "Issue summary: Processing a malformed PKCS#12 file can trigger a NULL pointer\ndereference in the PKCS12_item_decrypt_d2i_ex() function.\n\nImpact summary: A NULL pointer dereference can trigger a crash which leads to\nDenial of Service for an application processing PKCS#12 files.\n\nThe PKCS12_item_decrypt_d2i_ex() function does not check whether the oct\nparameter is NULL before dereferencing it. When called from\nPKCS12_unpack_p7encdata() with a malformed PKCS#12 file, this parameter can\nbe NULL, causing a crash. The vulnerability is limited to Denial of Service\nand cannot be escalated to achieve code execution or memory disclosure.\n\nExploiting this issue requires an attacker to provide a malformed PKCS#12 file\nto an application that processes it. For that reason the issue was assessed as\nLow severity according to our Security Policy.\n\nThe FIPS modules in 3.6, 3.5, 3.4, 3.3 and 3.0 are not affected by this issue,\nas the PKCS#12 implementation is outside the OpenSSL FIPS module boundary.\n\nOpenSSL 3.6, 3.5, 3.4, 3.3, 3.0, 1.1.1 and 1.0.2 are vulnerable to this issue.",
-                    "diffID": "sha256:fd2758d7a50e2b78d275ee7d1c218489f2439084449d895fa17eede6c61ab2c4",
-                    "fixedVersions": [
-                      "3.5.5-r0"
-                    ],
-                    "installedVersion": "3.5.0-r0",
-                    "packageName": "libssl3",
-                    "purl": "pkg:apk/alpine/libssl3@3.5.0-r0?arch=x86_64&distro=3.22.0",
-                    "references": [
-                      "https://access.redhat.com/errata/RHSA-2026:1472",
-                      "https://access.redhat.com/security/cve/CVE-2025-69421",
-                      "https://bugzilla.redhat.com/2430375",
-                      "https://bugzilla.redhat.com/2430376",
-                      "https://bugzilla.redhat.com/2430377",
-                      "https://bugzilla.redhat.com/2430378",
-                      "https://bugzilla.redhat.com/2430379",
-                      "https://bugzilla.redhat.com/2430380",
-                      "https://bugzilla.redhat.com/2430381",
-                      "https://bugzilla.redhat.com/2430386",
-                      "https://bugzilla.redhat.com/2430387",
-                      "https://bugzilla.redhat.com/2430388",
-                      "https://bugzilla.redhat.com/2430389",
-                      "https://bugzilla.redhat.com/2430390",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430375",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430376",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430377",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430378",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430379",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430380",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430381",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430386",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430387",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430388",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430389",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430390",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-11187",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-15467",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-15468",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-15469",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-66199",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-68160",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-69418",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-69419",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-69420",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-69421",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-22795",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-22796",
-                      "https://errata.almalinux.org/10/ALSA-2026-1472.html",
-                      "https://errata.rockylinux.org/RLSA-2026:1473",
-                      "https://github.com/openssl/openssl/commit/3524a29271f8191b8fd8a5257eb05173982a097b",
-                      "https://github.com/openssl/openssl/commit/36ecb4960872a4ce04bf6f1e1f4e78d75ec0c0c7",
-                      "https://github.com/openssl/openssl/commit/4bbc8d41a72c842ce4077a8a3eccd1109aaf74bd",
-                      "https://github.com/openssl/openssl/commit/643986985cd1c21221f941129d76fe0c2785aeb3",
-                      "https://github.com/openssl/openssl/commit/a2dbc539f0f9cc63832709fa5aa33ad9495eb19c",
-                      "https://linux.oracle.com/cve/CVE-2025-69421.html",
-                      "https://linux.oracle.com/errata/ELSA-2026-50081.html",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2025-69421",
-                      "https://openssl-library.org/news/secadv/20260127.txt",
-                      "https://ubuntu.com/security/notices/USN-7980-1",
-                      "https://ubuntu.com/security/notices/USN-7980-2",
-                      "https://www.cve.org/CVERecord?id=CVE-2025-69421"
-                    ],
-                    "severity": "HIGH",
-                    "suppressed": false,
-                    "title": "openssl: OpenSSL: Denial of Service via malformed PKCS#12 file processing"
-                  },
-                  {
-                    "cve": "CVE-2025-11187",
-                    "cvss": {
-                      "redhat": {
-                        "v3score": "6.1",
-                        "v3vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:H"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-476",
-                      "CWE-787"
-                    ],
-                    "description": "Issue summary: PBMAC1 parameters in PKCS#12 files are missing validation\nwhich can trigger a stack-based buffer overflow, invalid pointer or NULL\npointer dereference during MAC verification.\n\nImpact summary: The stack buffer overflow or NULL pointer dereference may\ncause a crash leading to Denial of Service for an application that parses\nuntrusted PKCS#12 files. The buffer overflow may also potentially enable\ncode execution depending on platform mitigations.\n\nWhen verifying a PKCS#12 file that uses PBMAC1 for the MAC, the PBKDF2\nsalt and keylength parameters from the file are used without validation.\nIf the value of keylength exceeds the size of the fixed stack buffer used\nfor the derived key (64 bytes), the key derivation will overflow the buffer.\nThe overflow length is attacker-controlled. Also, if the salt parameter is\nnot an OCTET STRING type this can lead to invalid or NULL pointer\ndereference.\n\nExploiting this issue requires a user or application to process\na maliciously crafted PKCS#12 file. It is uncommon to accept untrusted\nPKCS#12 files in applications as they are usually used to store private\nkeys which are trusted by definition. For this reason the issue was assessed\nas Moderate severity.\n\nThe FIPS modules in 3.6, 3.5 and 3.4 are not affected by this issue, as\nPKCS#12 processing is outside the OpenSSL FIPS module boundary.\n\nOpenSSL 3.6, 3.5 and 3.4 are vulnerable to this issue.\n\nOpenSSL 3.3, 3.0, 1.1.1 and 1.0.2 are not affected by this issue as they do\nnot support PBMAC1 in PKCS#12.",
-                    "diffID": "sha256:fd2758d7a50e2b78d275ee7d1c218489f2439084449d895fa17eede6c61ab2c4",
-                    "fixedVersions": [
-                      "3.5.5-r0"
-                    ],
-                    "installedVersion": "3.5.0-r0",
-                    "packageName": "libssl3",
-                    "purl": "pkg:apk/alpine/libssl3@3.5.0-r0?arch=x86_64&distro=3.22.0",
-                    "references": [
-                      "https://access.redhat.com/errata/RHSA-2026:1472",
-                      "https://access.redhat.com/security/cve/CVE-2025-11187",
-                      "https://bugzilla.redhat.com/2430375",
-                      "https://bugzilla.redhat.com/2430376",
-                      "https://bugzilla.redhat.com/2430377",
-                      "https://bugzilla.redhat.com/2430378",
-                      "https://bugzilla.redhat.com/2430379",
-                      "https://bugzilla.redhat.com/2430380",
-                      "https://bugzilla.redhat.com/2430381",
-                      "https://bugzilla.redhat.com/2430386",
-                      "https://bugzilla.redhat.com/2430387",
-                      "https://bugzilla.redhat.com/2430388",
-                      "https://bugzilla.redhat.com/2430389",
-                      "https://bugzilla.redhat.com/2430390",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430375",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430376",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430377",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430378",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430379",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430380",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430381",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430386",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430387",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430388",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430389",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430390",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-11187",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-15467",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-15468",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-15469",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-66199",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-68160",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-69418",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-69419",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-69420",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-69421",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-22795",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-22796",
-                      "https://errata.almalinux.org/10/ALSA-2026-1472.html",
-                      "https://errata.rockylinux.org/RLSA-2026:1473",
-                      "https://github.com/openssl/openssl/commit/205e3a55e16e4bd08c12fdbd3416ab829c0f6206",
-                      "https://github.com/openssl/openssl/commit/8caf359d6e46fb413e8f5f0df765d2e8a51df4e8",
-                      "https://github.com/openssl/openssl/commit/e1079bc17ed93ff16f6b86f33a2fe3336e78817e",
-                      "https://linux.oracle.com/cve/CVE-2025-11187.html",
-                      "https://linux.oracle.com/errata/ELSA-2026-50081.html",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2025-11187",
-                      "https://openssl-library.org/news/secadv/20260127.txt",
-                      "https://ubuntu.com/security/notices/USN-7980-1",
-                      "https://www.cve.org/CVERecord?id=CVE-2025-11187"
-                    ],
-                    "severity": "MEDIUM",
-                    "suppressed": false,
-                    "title": "openssl: OpenSSL: Arbitrary code execution or denial of service through crafted PKCS#12 file"
-                  },
-                  {
-                    "cve": "CVE-2025-15468",
-                    "cvss": {
-                      "redhat": {
-                        "v3score": "5.9",
-                        "v3vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-476"
-                    ],
-                    "description": "Issue summary: If an application using the SSL_CIPHER_find() function in\na QUIC protocol client or server receives an unknown cipher suite from\nthe peer, a NULL dereference occurs.\n\nImpact summary: A NULL pointer dereference leads to abnormal termination of\nthe running process causing Denial of Service.\n\nSome applications call SSL_CIPHER_find() from the client_hello_cb callback\non the cipher ID received from the peer. If this is done with an SSL object\nimplementing the QUIC protocol, NULL pointer dereference will happen if\nthe examined cipher ID is unknown or unsupported.\n\nAs it is not very common to call this function in applications using the QUIC \nprotocol and the worst outcome is Denial of Service, the issue was assessed\nas Low severity.\n\nThe vulnerable code was introduced in the 3.2 version with the addition\nof the QUIC protocol support.\n\nThe FIPS modules in 3.6, 3.5, 3.4 and 3.3 are not affected by this issue,\nas the QUIC implementation is outside the OpenSSL FIPS module boundary.\n\nOpenSSL 3.6, 3.5, 3.4 and 3.3 are vulnerable to this issue.\n\nOpenSSL 3.0, 1.1.1 and 1.0.2 are not affected by this issue.",
-                    "diffID": "sha256:fd2758d7a50e2b78d275ee7d1c218489f2439084449d895fa17eede6c61ab2c4",
-                    "fixedVersions": [
-                      "3.5.5-r0"
-                    ],
-                    "installedVersion": "3.5.0-r0",
-                    "packageName": "libssl3",
-                    "purl": "pkg:apk/alpine/libssl3@3.5.0-r0?arch=x86_64&distro=3.22.0",
-                    "references": [
-                      "https://access.redhat.com/errata/RHSA-2026:1472",
-                      "https://access.redhat.com/security/cve/CVE-2025-15468",
-                      "https://bugzilla.redhat.com/2430375",
-                      "https://bugzilla.redhat.com/2430376",
-                      "https://bugzilla.redhat.com/2430377",
-                      "https://bugzilla.redhat.com/2430378",
-                      "https://bugzilla.redhat.com/2430379",
-                      "https://bugzilla.redhat.com/2430380",
-                      "https://bugzilla.redhat.com/2430381",
-                      "https://bugzilla.redhat.com/2430386",
-                      "https://bugzilla.redhat.com/2430387",
-                      "https://bugzilla.redhat.com/2430388",
-                      "https://bugzilla.redhat.com/2430389",
-                      "https://bugzilla.redhat.com/2430390",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430375",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430376",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430377",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430378",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430379",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430380",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430381",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430386",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430387",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430388",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430389",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430390",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-11187",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-15467",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-15468",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-15469",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-66199",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-68160",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-69418",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-69419",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-69420",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-69421",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-22795",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-22796",
-                      "https://errata.almalinux.org/10/ALSA-2026-1472.html",
-                      "https://errata.rockylinux.org/RLSA-2026:1473",
-                      "https://github.com/openssl/openssl/commit/1f08e54bad32843044fe8a675948d65e3b4ece65",
-                      "https://github.com/openssl/openssl/commit/7c88376731c589ee5b36116c5a6e32d5ae5f7ae2",
-                      "https://github.com/openssl/openssl/commit/b2539639400288a4580fe2d76247541b976bade4",
-                      "https://github.com/openssl/openssl/commit/d75b309879631d45b972396ce4e5102559c64ac7",
-                      "https://linux.oracle.com/cve/CVE-2025-15468.html",
-                      "https://linux.oracle.com/errata/ELSA-2026-50081.html",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2025-15468",
-                      "https://openssl-library.org/news/secadv/20260127.txt",
-                      "https://ubuntu.com/security/notices/USN-7980-1",
-                      "https://www.cve.org/CVERecord?id=CVE-2025-15468"
-                    ],
-                    "severity": "MEDIUM",
-                    "suppressed": false,
-                    "title": "openssl: OpenSSL: Denial of Service via NULL pointer dereference in QUIC protocol handling"
-                  },
-                  {
-                    "cve": "CVE-2025-15469",
-                    "cvss": {
-                      "redhat": {
-                        "v3score": "5.5",
-                        "v3vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-347"
-                    ],
-                    "description": "Issue summary: The 'openssl dgst' command-line tool silently truncates input\ndata to 16MB when using one-shot signing algorithms and reports success instead\nof an error.\n\nImpact summary: A user signing or verifying files larger than 16MB with\none-shot algorithms (such as Ed25519, Ed448, or ML-DSA) may believe the entire\nfile is authenticated while trailing data beyond 16MB remains unauthenticated.\n\nWhen the 'openssl dgst' command is used with algorithms that only support\none-shot signing (Ed25519, Ed448, ML-DSA-44, ML-DSA-65, ML-DSA-87), the input\nis buffered with a 16MB limit. If the input exceeds this limit, the tool\nsilently truncates to the first 16MB and continues without signaling an error,\ncontrary to what the documentation states. This creates an integrity gap where\ntrailing bytes can be modified without detection if both signing and\nverification are performed using the same affected codepath.\n\nThe issue affects only the command-line tool behavior. Verifiers that process\nthe full message using library APIs will reject the signature, so the risk\nprimarily affects workflows that both sign and verify with the affected\n'openssl dgst' command. Streaming digest algorithms for 'openssl dgst' and\nlibrary users are unaffected.\n\nThe FIPS modules in 3.5 and 3.6 are not affected by this issue, as the\ncommand-line tools are outside the OpenSSL FIPS module boundary.\n\nOpenSSL 3.5 and 3.6 are vulnerable to this issue.\n\nOpenSSL 3.4, 3.3, 3.0, 1.1.1 and 1.0.2 are not affected by this issue.",
-                    "diffID": "sha256:fd2758d7a50e2b78d275ee7d1c218489f2439084449d895fa17eede6c61ab2c4",
-                    "fixedVersions": [
-                      "3.5.5-r0"
-                    ],
-                    "installedVersion": "3.5.0-r0",
-                    "packageName": "libssl3",
-                    "purl": "pkg:apk/alpine/libssl3@3.5.0-r0?arch=x86_64&distro=3.22.0",
-                    "references": [
-                      "https://access.redhat.com/errata/RHSA-2026:1472",
-                      "https://access.redhat.com/security/cve/CVE-2025-15469",
-                      "https://bugzilla.redhat.com/2430375",
-                      "https://bugzilla.redhat.com/2430376",
-                      "https://bugzilla.redhat.com/2430377",
-                      "https://bugzilla.redhat.com/2430378",
-                      "https://bugzilla.redhat.com/2430379",
-                      "https://bugzilla.redhat.com/2430380",
-                      "https://bugzilla.redhat.com/2430381",
-                      "https://bugzilla.redhat.com/2430386",
-                      "https://bugzilla.redhat.com/2430387",
-                      "https://bugzilla.redhat.com/2430388",
-                      "https://bugzilla.redhat.com/2430389",
-                      "https://bugzilla.redhat.com/2430390",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430375",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430376",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430377",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430378",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430379",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430380",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430381",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430386",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430387",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430388",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430389",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430390",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-11187",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-15467",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-15468",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-15469",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-66199",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-68160",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-69418",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-69419",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-69420",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-69421",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-22795",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-22796",
-                      "https://errata.almalinux.org/10/ALSA-2026-1472.html",
-                      "https://errata.rockylinux.org/RLSA-2026:1473",
-                      "https://github.com/openssl/openssl/commit/310f305eb92ea8040d6b3cb75a5feeba8e6acf2f",
-                      "https://github.com/openssl/openssl/commit/a7936fa4bd23c906e1955a16a0a0ab39a4953a61",
-                      "https://linux.oracle.com/cve/CVE-2025-15469.html",
-                      "https://linux.oracle.com/errata/ELSA-2026-50081.html",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2025-15469",
-                      "https://openssl-library.org/news/secadv/20260127.txt",
-                      "https://ubuntu.com/security/notices/USN-7980-1",
-                      "https://www.cve.org/CVERecord?id=CVE-2025-15469"
-                    ],
-                    "severity": "MEDIUM",
-                    "suppressed": false,
-                    "title": "openssl: OpenSSL: Data integrity bypass in `openssl dgst` command due to silent truncation"
-                  },
-                  {
-                    "cve": "CVE-2025-66199",
-                    "cvss": {
-                      "redhat": {
-                        "v3score": "5.9",
-                        "v3vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-789"
-                    ],
-                    "description": "Issue summary: A TLS 1.3 connection using certificate compression can be\nforced to allocate a large buffer before decompression without checking\nagainst the configured certificate size limit.\n\nImpact summary: An attacker can cause per-connection memory allocations of\nup to approximately 22 MiB and extra CPU work, potentially leading to\nservice degradation or resource exhaustion (Denial of Service).\n\nIn affected configurations, the peer-supplied uncompressed certificate\nlength from a CompressedCertificate message is used to grow a heap buffer\nprior to decompression. This length is not bounded by the max_cert_list\nsetting, which otherwise constrains certificate message sizes. An attacker\ncan exploit this to cause large per-connection allocations followed by\nhandshake failure. No memory corruption or information disclosure occurs.\n\nThis issue only affects builds where TLS 1.3 certificate compression is\ncompiled in (i.e., not OPENSSL_NO_COMP_ALG) and at least one compression\nalgorithm (brotli, zlib, or zstd) is available, and where the compression\nextension is negotiated. Both clients receiving a server CompressedCertificate\nand servers in mutual TLS scenarios receiving a client CompressedCertificate\nare affected. Servers that do not request client certificates are not\nvulnerable to client-initiated attacks.\n\nUsers can mitigate this issue by setting SSL_OP_NO_RX_CERTIFICATE_COMPRESSION\nto disable receiving compressed certificates.\n\nThe FIPS modules in 3.6, 3.5, 3.4 and 3.3 are not affected by this issue,\nas the TLS implementation is outside the OpenSSL FIPS module boundary.\n\nOpenSSL 3.6, 3.5, 3.4 and 3.3 are vulnerable to this issue.\n\nOpenSSL 3.0, 1.1.1 and 1.0.2 are not affected by this issue.",
-                    "diffID": "sha256:fd2758d7a50e2b78d275ee7d1c218489f2439084449d895fa17eede6c61ab2c4",
-                    "fixedVersions": [
-                      "3.5.5-r0"
-                    ],
-                    "installedVersion": "3.5.0-r0",
-                    "packageName": "libssl3",
-                    "purl": "pkg:apk/alpine/libssl3@3.5.0-r0?arch=x86_64&distro=3.22.0",
-                    "references": [
-                      "https://access.redhat.com/errata/RHSA-2026:1472",
-                      "https://access.redhat.com/security/cve/CVE-2025-66199",
-                      "https://bugzilla.redhat.com/2430375",
-                      "https://bugzilla.redhat.com/2430376",
-                      "https://bugzilla.redhat.com/2430377",
-                      "https://bugzilla.redhat.com/2430378",
-                      "https://bugzilla.redhat.com/2430379",
-                      "https://bugzilla.redhat.com/2430380",
-                      "https://bugzilla.redhat.com/2430381",
-                      "https://bugzilla.redhat.com/2430386",
-                      "https://bugzilla.redhat.com/2430387",
-                      "https://bugzilla.redhat.com/2430388",
-                      "https://bugzilla.redhat.com/2430389",
-                      "https://bugzilla.redhat.com/2430390",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430375",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430376",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430377",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430378",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430379",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430380",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430381",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430386",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430387",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430388",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430389",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430390",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-11187",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-15467",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-15468",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-15469",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-66199",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-68160",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-69418",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-69419",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-69420",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-69421",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-22795",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-22796",
-                      "https://errata.almalinux.org/10/ALSA-2026-1472.html",
-                      "https://errata.rockylinux.org/RLSA-2026:1473",
-                      "https://github.com/openssl/openssl/commit/3ed1f75249932b155eef993a8e66a99cb98bfef4",
-                      "https://github.com/openssl/openssl/commit/6184a4fb08ee6d7bca570d931a4e8bef40b64451",
-                      "https://github.com/openssl/openssl/commit/895150b5e021d16b52fb32b97e1dd12f20448be5",
-                      "https://github.com/openssl/openssl/commit/966a2478046c311ed7dae50c457d0db4cafbf7e4",
-                      "https://linux.oracle.com/cve/CVE-2025-66199.html",
-                      "https://linux.oracle.com/errata/ELSA-2026-50081.html",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2025-66199",
-                      "https://openssl-library.org/news/secadv/20260127.txt",
-                      "https://ubuntu.com/security/notices/USN-7980-1",
-                      "https://www.cve.org/CVERecord?id=CVE-2025-66199"
-                    ],
-                    "severity": "MEDIUM",
-                    "suppressed": false,
-                    "title": "openssl: OpenSSL: Denial of Service due to excessive memory allocation in TLS 1.3 certificate compression"
-                  },
-                  {
-                    "cve": "CVE-2025-68160",
-                    "cvss": {
-                      "redhat": {
-                        "v3score": "4.7",
-                        "v3vector": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-787"
-                    ],
-                    "description": "Issue summary: Writing large, newline-free data into a BIO chain using the\nline-buffering filter where the next BIO performs short writes can trigger\na heap-based out-of-bounds write.\n\nImpact summary: This out-of-bounds write can cause memory corruption which\ntypically results in a crash, leading to Denial of Service for an application.\n\nThe line-buffering BIO filter (BIO_f_linebuffer) is not used by default in\nTLS/SSL data paths. In OpenSSL command-line applications, it is typically\nonly pushed onto stdout/stderr on VMS systems. Third-party applications that\nexplicitly use this filter with a BIO chain that can short-write and that\nwrite large, newline-free data influenced by an attacker would be affected.\nHowever, the circumstances where this could happen are unlikely to be under\nattacker control, and BIO_f_linebuffer is unlikely to be handling non-curated\ndata controlled by an attacker. For that reason the issue was assessed as\nLow severity.\n\nThe FIPS modules in 3.6, 3.5, 3.4, 3.3 and 3.0 are not affected by this issue,\nas the BIO implementation is outside the OpenSSL FIPS module boundary.\n\nOpenSSL 3.6, 3.5, 3.4, 3.3, 3.0, 1.1.1 and 1.0.2 are vulnerable to this issue.",
-                    "diffID": "sha256:fd2758d7a50e2b78d275ee7d1c218489f2439084449d895fa17eede6c61ab2c4",
-                    "fixedVersions": [
-                      "3.5.5-r0"
-                    ],
-                    "installedVersion": "3.5.0-r0",
-                    "packageName": "libssl3",
-                    "purl": "pkg:apk/alpine/libssl3@3.5.0-r0?arch=x86_64&distro=3.22.0",
-                    "references": [
-                      "https://access.redhat.com/errata/RHSA-2026:1472",
-                      "https://access.redhat.com/security/cve/CVE-2025-68160",
-                      "https://bugzilla.redhat.com/2430375",
-                      "https://bugzilla.redhat.com/2430376",
-                      "https://bugzilla.redhat.com/2430377",
-                      "https://bugzilla.redhat.com/2430378",
-                      "https://bugzilla.redhat.com/2430379",
-                      "https://bugzilla.redhat.com/2430380",
-                      "https://bugzilla.redhat.com/2430381",
-                      "https://bugzilla.redhat.com/2430386",
-                      "https://bugzilla.redhat.com/2430387",
-                      "https://bugzilla.redhat.com/2430388",
-                      "https://bugzilla.redhat.com/2430389",
-                      "https://bugzilla.redhat.com/2430390",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430375",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430376",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430377",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430378",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430379",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430380",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430381",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430386",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430387",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430388",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430389",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430390",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-11187",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-15467",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-15468",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-15469",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-66199",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-68160",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-69418",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-69419",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-69420",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-69421",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-22795",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-22796",
-                      "https://errata.almalinux.org/10/ALSA-2026-1472.html",
-                      "https://errata.rockylinux.org/RLSA-2026:1473",
-                      "https://github.com/openssl/openssl/commit/384011202af92605d926fafe4a0bcd6b65d162ad",
-                      "https://github.com/openssl/openssl/commit/475c466ef2fbd8fc1df6fae1c3eed9c813fc8ff6",
-                      "https://github.com/openssl/openssl/commit/4c96fbba618e1940f038012506ee9e21d32ee12c",
-                      "https://github.com/openssl/openssl/commit/6845c3b6460a98b1ec4e463baa2ea1a63a32d7c0",
-                      "https://github.com/openssl/openssl/commit/68a7cd2e2816c3a02f4d45a2ce43fc04fac97096",
-                      "https://linux.oracle.com/cve/CVE-2025-68160.html",
-                      "https://linux.oracle.com/errata/ELSA-2026-50081.html",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2025-68160",
-                      "https://openssl-library.org/news/secadv/20260127.txt",
-                      "https://ubuntu.com/security/notices/USN-7980-1",
-                      "https://ubuntu.com/security/notices/USN-7980-2",
-                      "https://www.cve.org/CVERecord?id=CVE-2025-68160"
-                    ],
-                    "severity": "MEDIUM",
-                    "suppressed": false,
-                    "title": "openssl: OpenSSL: Denial of Service due to out-of-bounds write in BIO filter"
-                  },
-                  {
-                    "cve": "CVE-2025-69418",
-                    "cvss": {
-                      "redhat": {
-                        "v3score": "4",
-                        "v3vector": "CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-325"
-                    ],
-                    "description": "Issue summary: When using the low-level OCB API directly with AES-NI or<br>other hardware-accelerated code paths, inputs whose length is not a multiple<br>of 16 bytes can leave the final partial block unencrypted and unauthenticated.<br><br>Impact summary: The trailing 1-15 bytes of a message may be exposed in<br>cleartext on encryption and are not covered by the authentication tag,<br>allowing an attacker to read or tamper with those bytes without detection.<br><br>The low-level OCB encrypt and decrypt routines in the hardware-accelerated<br>stream path process full 16-byte blocks but do not advance the input/output<br>pointers. The subsequent tail-handling code then operates on the original<br>base pointers, effectively reprocessing the beginning of the buffer while<br>leaving the actual trailing bytes unprocessed. The authentication checksum<br>also excludes the true tail bytes.<br><br>However, typical OpenSSL consumers using EVP are not affected because the<br>higher-level EVP and provider OCB implementations split inputs so that full<br>blocks and trailing partial blocks are processed in separate calls, avoiding<br>the problematic code path. Additionally, TLS does not use OCB ciphersuites.<br>The vulnerability only affects applications that call the low-level<br>CRYPTO_ocb128_encrypt() or CRYPTO_ocb128_decrypt() functions directly with<br>non-block-aligned lengths in a single call on hardware-accelerated builds.<br>For these reasons the issue was assessed as Low severity.<br><br>The FIPS modules in 3.6, 3.5, 3.4, 3.3, 3.2, 3.1 and 3.0 are not affected<br>by this issue, as OCB mode is not a FIPS-approved algorithm.<br><br>OpenSSL 3.6, 3.5, 3.4, 3.3, 3.0 and 1.1.1 are vulnerable to this issue.<br><br>OpenSSL 1.0.2 is not affected by this issue.",
-                    "diffID": "sha256:fd2758d7a50e2b78d275ee7d1c218489f2439084449d895fa17eede6c61ab2c4",
-                    "fixedVersions": [
-                      "3.5.5-r0"
-                    ],
-                    "installedVersion": "3.5.0-r0",
-                    "packageName": "libssl3",
-                    "purl": "pkg:apk/alpine/libssl3@3.5.0-r0?arch=x86_64&distro=3.22.0",
-                    "references": [
-                      "https://access.redhat.com/errata/RHSA-2026:1472",
-                      "https://access.redhat.com/security/cve/CVE-2025-69418",
-                      "https://bugzilla.redhat.com/2430375",
-                      "https://bugzilla.redhat.com/2430376",
-                      "https://bugzilla.redhat.com/2430377",
-                      "https://bugzilla.redhat.com/2430378",
-                      "https://bugzilla.redhat.com/2430379",
-                      "https://bugzilla.redhat.com/2430380",
-                      "https://bugzilla.redhat.com/2430381",
-                      "https://bugzilla.redhat.com/2430386",
-                      "https://bugzilla.redhat.com/2430387",
-                      "https://bugzilla.redhat.com/2430388",
-                      "https://bugzilla.redhat.com/2430389",
-                      "https://bugzilla.redhat.com/2430390",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430375",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430376",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430377",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430378",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430379",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430380",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430381",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430386",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430387",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430388",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430389",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430390",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-11187",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-15467",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-15468",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-15469",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-66199",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-68160",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-69418",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-69419",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-69420",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-69421",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-22795",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-22796",
-                      "https://errata.almalinux.org/10/ALSA-2026-1472.html",
-                      "https://errata.rockylinux.org/RLSA-2026:1473",
-                      "https://github.com/openssl/openssl/commit/372fc5c77529695b05b4f5b5187691a57ef5dffc",
-                      "https://github.com/openssl/openssl/commit/4016975d4469cd6b94927c607f7c511385f928d8",
-                      "https://github.com/openssl/openssl/commit/52d23c86a54adab5ee9f80e48b242b52c4cc2347",
-                      "https://github.com/openssl/openssl/commit/a7589230356d908c0eca4b969ec4f62106f4f5ae",
-                      "https://github.com/openssl/openssl/commit/ed40856d7d4ba6cb42779b6770666a65f19cb977",
-                      "https://linux.oracle.com/cve/CVE-2025-69418.html",
-                      "https://linux.oracle.com/errata/ELSA-2026-50081.html",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2025-69418",
-                      "https://openssl-library.org/news/secadv/20260127.txt",
-                      "https://ubuntu.com/security/notices/USN-7980-1",
-                      "https://ubuntu.com/security/notices/USN-7980-2",
-                      "https://www.cve.org/CVERecord?id=CVE-2025-69418"
-                    ],
-                    "severity": "MEDIUM",
-                    "suppressed": false,
-                    "title": "openssl: OpenSSL: Information disclosure and data tampering via specific low-level OCB encryption/decryption calls"
-                  },
-                  {
-                    "cve": "CVE-2025-69420",
-                    "cvss": {
-                      "redhat": {
-                        "v3score": "5.9",
-                        "v3vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-754"
-                    ],
-                    "description": "Issue summary: A type confusion vulnerability exists in the TimeStamp Response\nverification code where an ASN1_TYPE union member is accessed without first\nvalidating the type, causing an invalid or NULL pointer dereference when\nprocessing a malformed TimeStamp Response file.\n\nImpact summary: An application calling TS_RESP_verify_response() with a\nmalformed TimeStamp Response can be caused to dereference an invalid or\nNULL pointer when reading, resulting in a Denial of Service.\n\nThe functions ossl_ess_get_signing_cert() and ossl_ess_get_signing_cert_v2()\naccess the signing cert attribute value without validating its type.\nWhen the type is not V_ASN1_SEQUENCE, this results in accessing invalid memory\nthrough the ASN1_TYPE union, causing a crash.\n\nExploiting this vulnerability requires an attacker to provide a malformed\nTimeStamp Response to an application that verifies timestamp responses. The\nTimeStamp protocol (RFC 3161) is not widely used and the impact of the\nexploit is just a Denial of Service. For these reasons the issue was\nassessed as Low severity.\n\nThe FIPS modules in 3.5, 3.4, 3.3 and 3.0 are not affected by this issue,\nas the TimeStamp Response implementation is outside the OpenSSL FIPS module\nboundary.\n\nOpenSSL 3.6, 3.5, 3.4, 3.3, 3.0 and 1.1.1 are vulnerable to this issue.\n\nOpenSSL 1.0.2 is not affected by this issue.",
-                    "diffID": "sha256:fd2758d7a50e2b78d275ee7d1c218489f2439084449d895fa17eede6c61ab2c4",
-                    "fixedVersions": [
-                      "3.5.5-r0"
-                    ],
-                    "installedVersion": "3.5.0-r0",
-                    "packageName": "libssl3",
-                    "purl": "pkg:apk/alpine/libssl3@3.5.0-r0?arch=x86_64&distro=3.22.0",
-                    "references": [
-                      "https://access.redhat.com/errata/RHSA-2026:1472",
-                      "https://access.redhat.com/security/cve/CVE-2025-69420",
-                      "https://bugzilla.redhat.com/2430375",
-                      "https://bugzilla.redhat.com/2430376",
-                      "https://bugzilla.redhat.com/2430377",
-                      "https://bugzilla.redhat.com/2430378",
-                      "https://bugzilla.redhat.com/2430379",
-                      "https://bugzilla.redhat.com/2430380",
-                      "https://bugzilla.redhat.com/2430381",
-                      "https://bugzilla.redhat.com/2430386",
-                      "https://bugzilla.redhat.com/2430387",
-                      "https://bugzilla.redhat.com/2430388",
-                      "https://bugzilla.redhat.com/2430389",
-                      "https://bugzilla.redhat.com/2430390",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430375",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430376",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430377",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430378",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430379",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430380",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430381",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430386",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430387",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430388",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430389",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430390",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-11187",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-15467",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-15468",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-15469",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-66199",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-68160",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-69418",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-69419",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-69420",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-69421",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-22795",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-22796",
-                      "https://errata.almalinux.org/10/ALSA-2026-1472.html",
-                      "https://errata.rockylinux.org/RLSA-2026:1473",
-                      "https://github.com/openssl/openssl/commit/27c7012c91cc986a598d7540f3079dfde2416eb9",
-                      "https://github.com/openssl/openssl/commit/4e254b48ad93cc092be3dd62d97015f33f73133a",
-                      "https://github.com/openssl/openssl/commit/564fd9c73787f25693bf9e75faf7bf6bb1305d4e",
-                      "https://github.com/openssl/openssl/commit/5eb0770ffcf11b785cf374ff3c19196245e54f1b",
-                      "https://github.com/openssl/openssl/commit/a99349ebfc519999edc50620abe24d599b9eb085",
-                      "https://linux.oracle.com/cve/CVE-2025-69420.html",
-                      "https://linux.oracle.com/errata/ELSA-2026-50081.html",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2025-69420",
-                      "https://openssl-library.org/news/secadv/20260127.txt",
-                      "https://ubuntu.com/security/notices/USN-7980-1",
-                      "https://ubuntu.com/security/notices/USN-7980-2",
-                      "https://www.cve.org/CVERecord?id=CVE-2025-69420"
-                    ],
-                    "severity": "MEDIUM",
-                    "suppressed": false,
-                    "title": "openssl: OpenSSL: Denial of Service via malformed TimeStamp Response"
-                  },
-                  {
-                    "cve": "CVE-2025-9230",
-                    "cvss": {
-                      "redhat": {
-                        "v3score": "5.6",
-                        "v3vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-125",
-                      "CWE-787"
-                    ],
-                    "description": "Issue summary: An application trying to decrypt CMS messages encrypted using\npassword based encryption can trigger an out-of-bounds read and write.\n\nImpact summary: This out-of-bounds read may trigger a crash which leads to\nDenial of Service for an application. The out-of-bounds write can cause\na memory corruption which can have various consequences including\na Denial of Service or Execution of attacker-supplied code.\n\nAlthough the consequences of a successful exploit of this vulnerability\ncould be severe, the probability that the attacker would be able to\nperform it is low. Besides, password based (PWRI) encryption support in CMS\nmessages is very rarely used. For that reason the issue was assessed as\nModerate severity according to our Security Policy.\n\nThe FIPS modules in 3.5, 3.4, 3.3, 3.2, 3.1 and 3.0 are not affected by this\nissue, as the CMS implementation is outside the OpenSSL FIPS module\nboundary.",
-                    "diffID": "sha256:fd2758d7a50e2b78d275ee7d1c218489f2439084449d895fa17eede6c61ab2c4",
-                    "fixedVersions": [
-                      "3.5.4-r0"
-                    ],
-                    "installedVersion": "3.5.0-r0",
-                    "packageName": "libssl3",
-                    "purl": "pkg:apk/alpine/libssl3@3.5.0-r0?arch=x86_64&distro=3.22.0",
-                    "references": [
-                      "http://www.openwall.com/lists/oss-security/2025/09/30/5",
-                      "https://access.redhat.com/errata/RHSA-2026:0337",
-                      "https://access.redhat.com/security/cve/CVE-2025-9230",
-                      "https://bugzilla.redhat.com/2396054",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2396054",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-9230",
-                      "https://errata.almalinux.org/8/ALSA-2026-0337.html",
-                      "https://errata.rockylinux.org/RLSA-2025:21255",
-                      "https://github.com/openssl/openssl/commit/5965ea5dd6960f36d8b7f74f8eac67a8eb8f2b45",
-                      "https://github.com/openssl/openssl/commit/9e91358f365dee6c446dcdcdb01c04d2743fd280",
-                      "https://github.com/openssl/openssl/commit/a79c4ce559c6a3a8fd4109e9f33c1185d5bf2def",
-                      "https://github.com/openssl/openssl/commit/b5282d677551afda7d20e9c00e09561b547b2dfd",
-                      "https://github.com/openssl/openssl/commit/bae259a211ada6315dc50900686daaaaaa55f482",
-                      "https://github.openssl.org/openssl/extended-releases/commit/c2b96348bfa662f25f4fabf81958ae822063dae3",
-                      "https://github.openssl.org/openssl/extended-releases/commit/dfbaf161d8dafc1132dd88cd48ad990ed9b4c8ba",
-                      "https://linux.oracle.com/cve/CVE-2025-9230.html",
-                      "https://linux.oracle.com/errata/ELSA-2026-50077.html",
-                      "https://lists.debian.org/debian-lts-announce/2025/10/msg00001.html",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2025-9230",
-                      "https://openssl-library.org/news/secadv/20250930.txt",
-                      "https://ubuntu.com/security/notices/USN-7786-1",
-                      "https://www.cve.org/CVERecord?id=CVE-2025-9230"
-                    ],
-                    "severity": "MEDIUM",
-                    "suppressed": false,
-                    "title": "openssl: Out-of-bounds read & write in RFC 3211 KEK Unwrap"
-                  },
-                  {
-                    "cve": "CVE-2025-9231",
-                    "cvss": {
-                      "redhat": {
-                        "v3score": "5.9",
-                        "v3vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-385"
-                    ],
-                    "description": "Issue summary: A timing side-channel which could potentially allow remote\nrecovery of the private key exists in the SM2 algorithm implementation on 64 bit\nARM platforms.\n\nImpact summary: A timing side-channel in SM2 signature computations on 64 bit\nARM platforms could allow recovering the private key by an attacker..\n\nWhile remote key recovery over a network was not attempted by the reporter,\ntiming measurements revealed a timing signal which may allow such an attack.\n\nOpenSSL does not directly support certificates with SM2 keys in TLS, and so\nthis CVE is not relevant in most TLS contexts.  However, given that it is\npossible to add support for such certificates via a custom provider, coupled\nwith the fact that in such a custom provider context the private key may be\nrecoverable via remote timing measurements, we consider this to be a Moderate\nseverity issue.\n\nThe FIPS modules in 3.5, 3.4, 3.3, 3.2, 3.1 and 3.0 are not affected by this\nissue, as SM2 is not an approved algorithm.",
-                    "diffID": "sha256:fd2758d7a50e2b78d275ee7d1c218489f2439084449d895fa17eede6c61ab2c4",
-                    "fixedVersions": [
-                      "3.5.4-r0"
-                    ],
-                    "installedVersion": "3.5.0-r0",
-                    "packageName": "libssl3",
-                    "purl": "pkg:apk/alpine/libssl3@3.5.0-r0?arch=x86_64&distro=3.22.0",
-                    "references": [
-                      "http://www.openwall.com/lists/oss-security/2025/09/30/5",
-                      "https://access.redhat.com/security/cve/CVE-2025-9231",
-                      "https://github.com/openssl/openssl/commit/567f64386e43683888212226824b6a179885a0fe",
-                      "https://github.com/openssl/openssl/commit/cba616c26ac8e7b37de5e77762e505ba5ca51698",
-                      "https://github.com/openssl/openssl/commit/eed5adc9f969d77c94f213767acbb41ff923b6f4",
-                      "https://github.com/openssl/openssl/commit/fc47a2ec078912b3e914fab5734535e76c4820c2",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2025-9231",
-                      "https://openssl-library.org/news/secadv/20250930.txt",
-                      "https://ubuntu.com/security/notices/USN-7786-1",
-                      "https://www.cve.org/CVERecord?id=CVE-2025-9231"
-                    ],
-                    "severity": "MEDIUM",
-                    "suppressed": false,
-                    "title": "openssl: Timing side-channel in SM2 algorithm on 64 bit ARM"
-                  },
-                  {
-                    "cve": "CVE-2026-22795",
-                    "cvss": {
-                      "redhat": {
-                        "v3score": "5.5",
-                        "v3vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-754"
-                    ],
-                    "description": "Issue summary: An invalid or NULL pointer dereference can happen in\nan application processing a malformed PKCS#12 file.\n\nImpact summary: An application processing a malformed PKCS#12 file can be\ncaused to dereference an invalid or NULL pointer on memory read, resulting\nin a Denial of Service.\n\nA type confusion vulnerability exists in PKCS#12 parsing code where\nan ASN1_TYPE union member is accessed without first validating the type,\ncausing an invalid pointer read.\n\nThe location is constrained to a 1-byte address space, meaning any\nattempted pointer manipulation can only target addresses between 0x00 and 0xFF.\nThis range corresponds to the zero page, which is unmapped on most modern\noperating systems and will reliably result in a crash, leading only to a\nDenial of Service. Exploiting this issue also requires a user or application\nto process a maliciously crafted PKCS#12 file. It is uncommon to accept\nuntrusted PKCS#12 files in applications as they are usually used to store\nprivate keys which are trusted by definition. For these reasons, the issue\nwas assessed as Low severity.\n\nThe FIPS modules in 3.5, 3.4, 3.3 and 3.0 are not affected by this issue,\nas the PKCS12 implementation is outside the OpenSSL FIPS module boundary.\n\nOpenSSL 3.6, 3.5, 3.4, 3.3, 3.0 and 1.1.1 are vulnerable to this issue.\n\nOpenSSL 1.0.2 is not affected by this issue.",
-                    "diffID": "sha256:fd2758d7a50e2b78d275ee7d1c218489f2439084449d895fa17eede6c61ab2c4",
-                    "fixedVersions": [
-                      "3.5.5-r0"
-                    ],
-                    "installedVersion": "3.5.0-r0",
-                    "packageName": "libssl3",
-                    "purl": "pkg:apk/alpine/libssl3@3.5.0-r0?arch=x86_64&distro=3.22.0",
-                    "references": [
-                      "https://access.redhat.com/errata/RHSA-2026:1472",
-                      "https://access.redhat.com/security/cve/CVE-2026-22795",
-                      "https://bugzilla.redhat.com/2430375",
-                      "https://bugzilla.redhat.com/2430376",
-                      "https://bugzilla.redhat.com/2430377",
-                      "https://bugzilla.redhat.com/2430378",
-                      "https://bugzilla.redhat.com/2430379",
-                      "https://bugzilla.redhat.com/2430380",
-                      "https://bugzilla.redhat.com/2430381",
-                      "https://bugzilla.redhat.com/2430386",
-                      "https://bugzilla.redhat.com/2430387",
-                      "https://bugzilla.redhat.com/2430388",
-                      "https://bugzilla.redhat.com/2430389",
-                      "https://bugzilla.redhat.com/2430390",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430375",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430376",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430377",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430378",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430379",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430380",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430381",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430386",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430387",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430388",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430389",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430390",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-11187",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-15467",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-15468",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-15469",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-66199",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-68160",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-69418",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-69419",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-69420",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-69421",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-22795",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-22796",
-                      "https://errata.almalinux.org/10/ALSA-2026-1472.html",
-                      "https://errata.rockylinux.org/RLSA-2026:1473",
-                      "https://github.com/openssl/openssl/commit/2502e7b7d4c0cf4f972a881641fe09edc67aeec4",
-                      "https://github.com/openssl/openssl/commit/572844beca95068394c916626a6d3a490f831a49",
-                      "https://github.com/openssl/openssl/commit/7bbca05be55b129651d9df4bdb92becc45002c12",
-                      "https://github.com/openssl/openssl/commit/eeee3cbd4d682095ed431052f00403004596373e",
-                      "https://github.com/openssl/openssl/commit/ef2fb66ec571564d64d1c74a12e388a2a54d05d2",
-                      "https://linux.oracle.com/cve/CVE-2026-22795.html",
-                      "https://linux.oracle.com/errata/ELSA-2026-50081.html",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2026-22795",
-                      "https://openssl-library.org/news/secadv/20260127.txt",
-                      "https://ubuntu.com/security/notices/USN-7980-1",
-                      "https://ubuntu.com/security/notices/USN-7980-2",
-                      "https://www.cve.org/CVERecord?id=CVE-2026-22795"
-                    ],
-                    "severity": "MEDIUM",
-                    "suppressed": false,
-                    "title": "openssl: OpenSSL: Denial of Service due to type confusion in PKCS#12 file processing"
-                  },
-                  {
-                    "cve": "CVE-2026-22796",
-                    "cvss": {
-                      "redhat": {
-                        "v3score": "5.9",
-                        "v3vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-754"
-                    ],
-                    "description": "Issue summary: A type confusion vulnerability exists in the signature\nverification of signed PKCS#7 data where an ASN1_TYPE union member is\naccessed without first validating the type, causing an invalid or NULL\npointer dereference when processing malformed PKCS#7 data.\n\nImpact summary: An application performing signature verification of PKCS#7\ndata or calling directly the PKCS7_digest_from_attributes() function can be\ncaused to dereference an invalid or NULL pointer when reading, resulting in\na Denial of Service.\n\nThe function PKCS7_digest_from_attributes() accesses the message digest attribute\nvalue without validating its type. When the type is not V_ASN1_OCTET_STRING,\nthis results in accessing invalid memory through the ASN1_TYPE union, causing\na crash.\n\nExploiting this vulnerability requires an attacker to provide a malformed\nsigned PKCS#7 to an application that verifies it. The impact of the\nexploit is just a Denial of Service, the PKCS7 API is legacy and applications\nshould be using the CMS API instead. For these reasons the issue was\nassessed as Low severity.\n\nThe FIPS modules in 3.5, 3.4, 3.3 and 3.0 are not affected by this issue,\nas the PKCS#7 parsing implementation is outside the OpenSSL FIPS module\nboundary.\n\nOpenSSL 3.6, 3.5, 3.4, 3.3, 3.0, 1.1.1 and 1.0.2 are vulnerable to this issue.",
-                    "diffID": "sha256:fd2758d7a50e2b78d275ee7d1c218489f2439084449d895fa17eede6c61ab2c4",
-                    "fixedVersions": [
-                      "3.5.5-r0"
-                    ],
-                    "installedVersion": "3.5.0-r0",
-                    "packageName": "libssl3",
-                    "purl": "pkg:apk/alpine/libssl3@3.5.0-r0?arch=x86_64&distro=3.22.0",
-                    "references": [
-                      "https://access.redhat.com/errata/RHSA-2026:1472",
-                      "https://access.redhat.com/security/cve/CVE-2026-22796",
-                      "https://bugzilla.redhat.com/2430375",
-                      "https://bugzilla.redhat.com/2430376",
-                      "https://bugzilla.redhat.com/2430377",
-                      "https://bugzilla.redhat.com/2430378",
-                      "https://bugzilla.redhat.com/2430379",
-                      "https://bugzilla.redhat.com/2430380",
-                      "https://bugzilla.redhat.com/2430381",
-                      "https://bugzilla.redhat.com/2430386",
-                      "https://bugzilla.redhat.com/2430387",
-                      "https://bugzilla.redhat.com/2430388",
-                      "https://bugzilla.redhat.com/2430389",
-                      "https://bugzilla.redhat.com/2430390",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430375",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430376",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430377",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430378",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430379",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430380",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430381",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430386",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430387",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430388",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430389",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430390",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-11187",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-15467",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-15468",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-15469",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-66199",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-68160",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-69418",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-69419",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-69420",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-69421",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-22795",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-22796",
-                      "https://errata.almalinux.org/10/ALSA-2026-1472.html",
-                      "https://errata.rockylinux.org/RLSA-2026:1473",
-                      "https://github.com/openssl/openssl/commit/2502e7b7d4c0cf4f972a881641fe09edc67aeec4",
-                      "https://github.com/openssl/openssl/commit/572844beca95068394c916626a6d3a490f831a49",
-                      "https://github.com/openssl/openssl/commit/7bbca05be55b129651d9df4bdb92becc45002c12",
-                      "https://github.com/openssl/openssl/commit/eeee3cbd4d682095ed431052f00403004596373e",
-                      "https://github.com/openssl/openssl/commit/ef2fb66ec571564d64d1c74a12e388a2a54d05d2",
-                      "https://linux.oracle.com/cve/CVE-2026-22796.html",
-                      "https://linux.oracle.com/errata/ELSA-2026-50081.html",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2026-22796",
-                      "https://openssl-library.org/news/secadv/20260127.txt",
-                      "https://ubuntu.com/security/notices/USN-7980-1",
-                      "https://ubuntu.com/security/notices/USN-7980-2",
-                      "https://www.cve.org/CVERecord?id=CVE-2026-22796"
-                    ],
-                    "severity": "MEDIUM",
-                    "suppressed": false,
-                    "title": "openssl: OpenSSL: Denial of Service via type confusion in PKCS#7 signature verification"
-                  },
-                  {
-                    "cve": "CVE-2025-9232",
-                    "cvss": {
-                      "redhat": {
-                        "v3score": "3.1",
-                        "v3vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-125"
-                    ],
-                    "description": "Issue summary: An application using the OpenSSL HTTP client API functions may\ntrigger an out-of-bounds read if the 'no_proxy' environment variable is set and\nthe host portion of the authority component of the HTTP URL is an IPv6 address.\n\nImpact summary: An out-of-bounds read can trigger a crash which leads to\nDenial of Service for an application.\n\nThe OpenSSL HTTP client API functions can be used directly by applications\nbut they are also used by the OCSP client functions and CMP (Certificate\nManagement Protocol) client implementation in OpenSSL. However the URLs used\nby these implementations are unlikely to be controlled by an attacker.\n\nIn this vulnerable code the out of bounds read can only trigger a crash.\nFurthermore the vulnerability requires an attacker-controlled URL to be\npassed from an application to the OpenSSL function and the user has to have\na 'no_proxy' environment variable set. For the aforementioned reasons the\nissue was assessed as Low severity.\n\nThe vulnerable code was introduced in the following patch releases:\n3.0.16, 3.1.8, 3.2.4, 3.3.3, 3.4.0 and 3.5.0.\n\nThe FIPS modules in 3.5, 3.4, 3.3, 3.2, 3.1 and 3.0 are not affected by this\nissue, as the HTTP client implementation is outside the OpenSSL FIPS module\nboundary.",
-                    "diffID": "sha256:fd2758d7a50e2b78d275ee7d1c218489f2439084449d895fa17eede6c61ab2c4",
-                    "fixedVersions": [
-                      "3.5.4-r0"
-                    ],
-                    "installedVersion": "3.5.0-r0",
-                    "packageName": "libssl3",
-                    "purl": "pkg:apk/alpine/libssl3@3.5.0-r0?arch=x86_64&distro=3.22.0",
-                    "references": [
-                      "http://www.openwall.com/lists/oss-security/2025/09/30/5",
-                      "https://access.redhat.com/security/cve/CVE-2025-9232",
-                      "https://github.com/openssl/openssl/commit/2b4ec20e47959170422922eaff25346d362dcb35",
-                      "https://github.com/openssl/openssl/commit/654dc11d23468a74fc8ea4672b702dd3feb7be4b",
-                      "https://github.com/openssl/openssl/commit/7cf21a30513c9e43c4bc3836c237cf086e194af3",
-                      "https://github.com/openssl/openssl/commit/89e790ac431125a4849992858490bed6b225eadf",
-                      "https://github.com/openssl/openssl/commit/bbf38c034cdabd0a13330abcc4855c866f53d2e0",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2025-9232",
-                      "https://openssl-library.org/news/secadv/20250930.txt",
-                      "https://ubuntu.com/security/notices/USN-7786-1",
-                      "https://ubuntu.com/security/notices/USN-7894-1",
-                      "https://www.cve.org/CVERecord?id=CVE-2025-9232"
-                    ],
-                    "severity": "LOW",
-                    "suppressed": false,
-                    "title": "openssl: Out-of-bounds read in HTTP client no_proxy handling"
-                  },
-                  {
-                    "cve": "CVE-2025-4575",
-                    "cwes": [
-                      "CWE-295"
-                    ],
-                    "description": "Issue summary: Use of -addreject option with the openssl x509 application adds\na trusted use instead of a rejected use for a certificate.\n\nImpact summary: If a user intends to make a trusted certificate rejected for\na particular use it will be instead marked as trusted for that use.\n\nA copy & paste error during minor refactoring of the code introduced this\nissue in the OpenSSL 3.5 version. If, for example, a trusted CA certificate\nshould be trusted only for the purpose of authenticating TLS servers but not\nfor CMS signature verification and the CMS signature verification is intended\nto be marked as rejected with the -addreject option, the resulting CA\ncertificate will be trusted for CMS signature verification purpose instead.\n\nOnly users which use the trusted certificate format who use the openssl x509\ncommand line application to add rejected uses are affected by this issue.\nThe issues affecting only the command line application are considered to\nbe Low severity.\n\nThe FIPS modules in 3.5, 3.4, 3.3, 3.2, 3.1 and 3.0 are not affected by this\nissue.\n\nOpenSSL 3.4, 3.3, 3.2, 3.1, 3.0, 1.1.1 and 1.0.2 are also not affected by this\nissue.",
-                    "diffID": "sha256:fd2758d7a50e2b78d275ee7d1c218489f2439084449d895fa17eede6c61ab2c4",
-                    "fixedVersions": [
-                      "3.5.1-r0"
-                    ],
-                    "installedVersion": "3.5.0-r0",
-                    "packageName": "libssl3",
-                    "purl": "pkg:apk/alpine/libssl3@3.5.0-r0?arch=x86_64&distro=3.22.0",
-                    "references": [
-                      "http://www.openwall.com/lists/oss-security/2025/05/22/1",
-                      "https://github.com/openssl/openssl/commit/e96d22446e633d117e6c9904cb15b4693e956eaa",
-                      "https://openssl-library.org/news/secadv/20250522.txt"
-                    ],
-                    "severity": "UNKNOWN",
-                    "suppressed": false,
-                    "title": "Issue summary: Use of -addreject option with the openssl x509 applicat ..."
-                  },
-                  {
-                    "cve": "CVE-2024-58251",
-                    "cwes": [
-                      "CWE-150"
-                    ],
-                    "description": "In netstat in BusyBox through 1.37.0, local users can launch of network application with an argv[0] containing an ANSI terminal escape sequence, leading to a denial of service (terminal locked up) when netstat is used by a victim.",
-                    "diffID": "sha256:fd2758d7a50e2b78d275ee7d1c218489f2439084449d895fa17eede6c61ab2c4",
-                    "fixedVersions": [
-                      "1.37.0-r20"
-                    ],
-                    "installedVersion": "1.37.0-r18",
-                    "packageName": "ssl_client",
-                    "purl": "pkg:apk/alpine/ssl_client@1.37.0-r18?arch=x86_64&distro=3.22.0",
-                    "references": [
-                      "http://www.openwall.com/lists/oss-security/2025/04/23/6",
-                      "https://bugs.busybox.net/show_bug.cgi?id=15922",
-                      "https://www.busybox.net",
-                      "https://www.busybox.net/downloads/",
-                      "https://www.cve.org/CVERecord?id=CVE-2024-58251"
-                    ],
-                    "severity": "MEDIUM",
-                    "suppressed": false,
-                    "title": "In netstat in BusyBox through 1.37.0, local users can launch of networ ..."
-                  },
-                  {
-                    "cve": "CVE-2025-46394",
-                    "cvss": {
-                      "nvd": {
-                        "v3score": "3.3",
-                        "v3vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-451"
-                    ],
-                    "description": "In tar in BusyBox through 1.37.0, a TAR archive can have filenames hidden from a listing through the use of terminal escape sequences.",
-                    "diffID": "sha256:fd2758d7a50e2b78d275ee7d1c218489f2439084449d895fa17eede6c61ab2c4",
-                    "fixedVersions": [
-                      "1.37.0-r20"
-                    ],
-                    "installedVersion": "1.37.0-r18",
-                    "packageName": "ssl_client",
-                    "purl": "pkg:apk/alpine/ssl_client@1.37.0-r18?arch=x86_64&distro=3.22.0",
-                    "references": [
-                      "http://www.openwall.com/lists/oss-security/2025/04/23/5",
-                      "http://www.openwall.com/lists/oss-security/2025/04/24/3",
-                      "https://bugs.busybox.net/show_bug.cgi?id=16018",
-                      "https://lists.busybox.net/pipermail/busybox/2024-July/090806.html",
-                      "https://lists.busybox.net/pipermail/busybox/2024-July/090814.html",
-                      "https://www.busybox.net",
-                      "https://www.busybox.net/downloads/",
-                      "https://www.cve.org/CVERecord?id=CVE-2025-46394",
-                      "https://www.openwall.com/lists/oss-security/2025/04/23/1"
-                    ],
-                    "severity": "LOW",
-                    "suppressed": false,
-                    "title": "In tar in BusyBox through 1.37.0, a TAR archive can have filenames hid ..."
-                  }
-                ]
-              }
-            ],
-            "summary": {
-              "critical": 2,
-              "high": 4,
-              "low": 5,
-              "medium": 25,
-              "suppressed": 0,
-              "unknown": 2
-            }
-          }
-        },
-        {
-          "imageMetadata": {
-            "digest": "sha256:4c5f493908c9d0f503319f9f9cbda680bdfd582620bff4d98743d2e836dc965d",
-            "indexDigest": "sha256:5419efdda0f7df9d5ad03d5f3da445a931e425ddf15b2acb9a2740d7dc489906",
-            "platform": "linux/arm64",
-            "registry": "workloadscan-ghcr-io",
-            "registryURI": "ghcr.io",
-            "repository": "tarampampam/curl",
-            "tag": "8.14.1-alpine"
-          },
-          "report": {
-            "results": [
-              {
-                "class": "os-pkgs",
-                "target": "/var/run/worker/trivy.sbom.2287999801.json (alpine 3.22.0)",
-                "type": "alpine",
-                "vulnerabilities": [
-                  {
-                    "cve": "CVE-2024-58251",
-                    "cwes": [
-                      "CWE-150"
-                    ],
-                    "description": "In netstat in BusyBox through 1.37.0, local users can launch of network application with an argv[0] containing an ANSI terminal escape sequence, leading to a denial of service (terminal locked up) when netstat is used by a victim.",
-                    "diffID": "sha256:1231a673589ac9e2f8a98ed916d1fa8301b36a44dd14fc40eba5a05905da69f1",
-                    "fixedVersions": [
-                      "1.37.0-r20"
-                    ],
-                    "installedVersion": "1.37.0-r18",
-                    "packageName": "busybox",
-                    "purl": "pkg:apk/alpine/busybox@1.37.0-r18?arch=aarch64&distro=3.22.0",
-                    "references": [
-                      "http://www.openwall.com/lists/oss-security/2025/04/23/6",
-                      "https://bugs.busybox.net/show_bug.cgi?id=15922",
-                      "https://www.busybox.net",
-                      "https://www.busybox.net/downloads/",
-                      "https://www.cve.org/CVERecord?id=CVE-2024-58251"
-                    ],
-                    "severity": "MEDIUM",
-                    "suppressed": false,
-                    "title": "In netstat in BusyBox through 1.37.0, local users can launch of networ ..."
-                  },
-                  {
-                    "cve": "CVE-2025-46394",
-                    "cvss": {
-                      "nvd": {
-                        "v3score": "3.3",
-                        "v3vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-451"
-                    ],
-                    "description": "In tar in BusyBox through 1.37.0, a TAR archive can have filenames hidden from a listing through the use of terminal escape sequences.",
-                    "diffID": "sha256:1231a673589ac9e2f8a98ed916d1fa8301b36a44dd14fc40eba5a05905da69f1",
-                    "fixedVersions": [
-                      "1.37.0-r20"
-                    ],
-                    "installedVersion": "1.37.0-r18",
-                    "packageName": "busybox",
-                    "purl": "pkg:apk/alpine/busybox@1.37.0-r18?arch=aarch64&distro=3.22.0",
-                    "references": [
-                      "http://www.openwall.com/lists/oss-security/2025/04/23/5",
-                      "http://www.openwall.com/lists/oss-security/2025/04/24/3",
-                      "https://bugs.busybox.net/show_bug.cgi?id=16018",
-                      "https://lists.busybox.net/pipermail/busybox/2024-July/090806.html",
-                      "https://lists.busybox.net/pipermail/busybox/2024-July/090814.html",
-                      "https://www.busybox.net",
-                      "https://www.busybox.net/downloads/",
-                      "https://www.cve.org/CVERecord?id=CVE-2025-46394",
-                      "https://www.openwall.com/lists/oss-security/2025/04/23/1"
-                    ],
-                    "severity": "LOW",
-                    "suppressed": false,
-                    "title": "In tar in BusyBox through 1.37.0, a TAR archive can have filenames hid ..."
-                  },
-                  {
-                    "cve": "CVE-2024-58251",
-                    "cwes": [
-                      "CWE-150"
-                    ],
-                    "description": "In netstat in BusyBox through 1.37.0, local users can launch of network application with an argv[0] containing an ANSI terminal escape sequence, leading to a denial of service (terminal locked up) when netstat is used by a victim.",
-                    "diffID": "sha256:1231a673589ac9e2f8a98ed916d1fa8301b36a44dd14fc40eba5a05905da69f1",
-                    "fixedVersions": [
-                      "1.37.0-r20"
-                    ],
-                    "installedVersion": "1.37.0-r18",
-                    "packageName": "busybox-binsh",
-                    "purl": "pkg:apk/alpine/busybox-binsh@1.37.0-r18?arch=aarch64&distro=3.22.0",
-                    "references": [
-                      "http://www.openwall.com/lists/oss-security/2025/04/23/6",
-                      "https://bugs.busybox.net/show_bug.cgi?id=15922",
-                      "https://www.busybox.net",
-                      "https://www.busybox.net/downloads/",
-                      "https://www.cve.org/CVERecord?id=CVE-2024-58251"
-                    ],
-                    "severity": "MEDIUM",
-                    "suppressed": false,
-                    "title": "In netstat in BusyBox through 1.37.0, local users can launch of networ ..."
-                  },
-                  {
-                    "cve": "CVE-2025-46394",
-                    "cvss": {
-                      "nvd": {
-                        "v3score": "3.3",
-                        "v3vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-451"
-                    ],
-                    "description": "In tar in BusyBox through 1.37.0, a TAR archive can have filenames hidden from a listing through the use of terminal escape sequences.",
-                    "diffID": "sha256:1231a673589ac9e2f8a98ed916d1fa8301b36a44dd14fc40eba5a05905da69f1",
-                    "fixedVersions": [
-                      "1.37.0-r20"
-                    ],
-                    "installedVersion": "1.37.0-r18",
-                    "packageName": "busybox-binsh",
-                    "purl": "pkg:apk/alpine/busybox-binsh@1.37.0-r18?arch=aarch64&distro=3.22.0",
-                    "references": [
-                      "http://www.openwall.com/lists/oss-security/2025/04/23/5",
-                      "http://www.openwall.com/lists/oss-security/2025/04/24/3",
-                      "https://bugs.busybox.net/show_bug.cgi?id=16018",
-                      "https://lists.busybox.net/pipermail/busybox/2024-July/090806.html",
-                      "https://lists.busybox.net/pipermail/busybox/2024-July/090814.html",
-                      "https://www.busybox.net",
-                      "https://www.busybox.net/downloads/",
-                      "https://www.cve.org/CVERecord?id=CVE-2025-46394",
-                      "https://www.openwall.com/lists/oss-security/2025/04/23/1"
-                    ],
-                    "severity": "LOW",
-                    "suppressed": false,
-                    "title": "In tar in BusyBox through 1.37.0, a TAR archive can have filenames hid ..."
-                  },
-                  {
-                    "cve": "CVE-2025-15467",
-                    "cvss": {
-                      "redhat": {
-                        "v3score": "9.8",
-                        "v3vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-787"
-                    ],
-                    "description": "Issue summary: Parsing CMS AuthEnvelopedData message with maliciously\ncrafted AEAD parameters can trigger a stack buffer overflow.\n\nImpact summary: A stack buffer overflow may lead to a crash, causing Denial\nof Service, or potentially remote code execution.\n\nWhen parsing CMS AuthEnvelopedData structures that use AEAD ciphers such as\nAES-GCM, the IV (Initialization Vector) encoded in the ASN.1 parameters is\ncopied into a fixed-size stack buffer without verifying that its length fits\nthe destination. An attacker can supply a crafted CMS message with an\noversized IV, causing a stack-based out-of-bounds write before any\nauthentication or tag verification occurs.\n\nApplications and services that parse untrusted CMS or PKCS#7 content using\nAEAD ciphers (e.g., S/MIME AuthEnvelopedData with AES-GCM) are vulnerable.\nBecause the overflow occurs prior to authentication, no valid key material\nis required to trigger it. While exploitability to remote code execution\ndepends on platform and toolchain mitigations, the stack-based write\nprimitive represents a severe risk.\n\nThe FIPS modules in 3.6, 3.5, 3.4, 3.3 and 3.0 are not affected by this\nissue, as the CMS implementation is outside the OpenSSL FIPS module\nboundary.\n\nOpenSSL 3.6, 3.5, 3.4, 3.3 and 3.0 are vulnerable to this issue.\n\nOpenSSL 1.1.1 and 1.0.2 are not affected by this issue.",
-                    "diffID": "sha256:1231a673589ac9e2f8a98ed916d1fa8301b36a44dd14fc40eba5a05905da69f1",
-                    "fixedVersions": [
-                      "3.5.5-r0"
-                    ],
-                    "installedVersion": "3.5.0-r0",
-                    "packageName": "libcrypto3",
-                    "purl": "pkg:apk/alpine/libcrypto3@3.5.0-r0?arch=aarch64&distro=3.22.0",
-                    "references": [
-                      "http://www.openwall.com/lists/oss-security/2026/01/27/10",
-                      "https://access.redhat.com/errata/RHSA-2026:1472",
-                      "https://access.redhat.com/security/cve/CVE-2025-15467",
-                      "https://bugzilla.redhat.com/2430375",
-                      "https://bugzilla.redhat.com/2430376",
-                      "https://bugzilla.redhat.com/2430377",
-                      "https://bugzilla.redhat.com/2430378",
-                      "https://bugzilla.redhat.com/2430379",
-                      "https://bugzilla.redhat.com/2430380",
-                      "https://bugzilla.redhat.com/2430381",
-                      "https://bugzilla.redhat.com/2430386",
-                      "https://bugzilla.redhat.com/2430387",
-                      "https://bugzilla.redhat.com/2430388",
-                      "https://bugzilla.redhat.com/2430389",
-                      "https://bugzilla.redhat.com/2430390",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430375",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430376",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430377",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430378",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430379",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430380",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430381",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430386",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430387",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430388",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430389",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430390",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-11187",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-15467",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-15468",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-15469",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-66199",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-68160",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-69418",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-69419",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-69420",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-69421",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-22795",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-22796",
-                      "https://errata.almalinux.org/10/ALSA-2026-1472.html",
-                      "https://errata.rockylinux.org/RLSA-2026:1473",
-                      "https://github.com/openssl/openssl/commit/2c8f0e5fa9b6ee5508a0349e4572ddb74db5a703",
-                      "https://github.com/openssl/openssl/commit/5f26d4202f5b89664c5c3f3c62086276026ba9a9",
-                      "https://github.com/openssl/openssl/commit/6ced0fe6b10faa560e410e3ee8d6c82f06c65ea3",
-                      "https://github.com/openssl/openssl/commit/ce39170276daec87f55c39dad1f629b56344429e",
-                      "https://github.com/openssl/openssl/commit/d0071a0799f20cc8101730145349ed4487c268dc",
-                      "https://linux.oracle.com/cve/CVE-2025-15467.html",
-                      "https://linux.oracle.com/errata/ELSA-2026-50081.html",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2025-15467",
-                      "https://openssl-library.org/news/secadv/20260127.txt",
-                      "https://ubuntu.com/security/notices/USN-7980-1",
-                      "https://www.cve.org/CVERecord?id=CVE-2025-15467"
-                    ],
-                    "severity": "CRITICAL",
-                    "suppressed": false,
-                    "title": "openssl: OpenSSL: Remote code execution or Denial of Service via oversized Initialization Vector in CMS parsing"
-                  },
-                  {
-                    "cve": "CVE-2025-69419",
-                    "cvss": {
-                      "redhat": {
-                        "v3score": "7.4",
-                        "v3vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-787"
-                    ],
-                    "description": "Issue summary: Calling PKCS12_get_friendlyname() function on a maliciously\ncrafted PKCS#12 file with a BMPString (UTF-16BE) friendly name containing\nnon-ASCII BMP code point can trigger a one byte write before the allocated\nbuffer.\n\nImpact summary: The out-of-bounds write can cause a memory corruption\nwhich can have various consequences including a Denial of Service.\n\nThe OPENSSL_uni2utf8() function performs a two-pass conversion of a PKCS#12\nBMPString (UTF-16BE) to UTF-8. In the second pass, when emitting UTF-8 bytes,\nthe helper function bmp_to_utf8() incorrectly forwards the remaining UTF-16\nsource byte count as the destination buffer capacity to UTF8_putc(). For BMP\ncode points above U+07FF, UTF-8 requires three bytes, but the forwarded\ncapacity can be just two bytes. UTF8_putc() then returns -1, and this negative\nvalue is added to the output length without validation, causing the\nlength to become negative. The subsequent trailing NUL byte is then written\nat a negative offset, causing write outside of heap allocated buffer.\n\nThe vulnerability is reachable via the public PKCS12_get_friendlyname() API\nwhen parsing attacker-controlled PKCS#12 files. While PKCS12_parse() uses a\ndifferent code path that avoids this issue, PKCS12_get_friendlyname() directly\ninvokes the vulnerable function. Exploitation requires an attacker to provide\na malicious PKCS#12 file to be parsed by the application and the attacker\ncan just trigger a one zero byte write before the allocated buffer.\nFor that reason the issue was assessed as Low severity according to our\nSecurity Policy.\n\nThe FIPS modules in 3.6, 3.5, 3.4, 3.3 and 3.0 are not affected by this issue,\nas the PKCS#12 implementation is outside the OpenSSL FIPS module boundary.\n\nOpenSSL 3.6, 3.5, 3.4, 3.3, 3.0 and 1.1.1 are vulnerable to this issue.\n\nOpenSSL 1.0.2 is not affected by this issue.",
-                    "diffID": "sha256:1231a673589ac9e2f8a98ed916d1fa8301b36a44dd14fc40eba5a05905da69f1",
-                    "fixedVersions": [
-                      "3.5.5-r0"
-                    ],
-                    "installedVersion": "3.5.0-r0",
-                    "packageName": "libcrypto3",
-                    "purl": "pkg:apk/alpine/libcrypto3@3.5.0-r0?arch=aarch64&distro=3.22.0",
-                    "references": [
-                      "https://access.redhat.com/errata/RHSA-2026:1472",
-                      "https://access.redhat.com/security/cve/CVE-2025-69419",
-                      "https://bugzilla.redhat.com/2430375",
-                      "https://bugzilla.redhat.com/2430376",
-                      "https://bugzilla.redhat.com/2430377",
-                      "https://bugzilla.redhat.com/2430378",
-                      "https://bugzilla.redhat.com/2430379",
-                      "https://bugzilla.redhat.com/2430380",
-                      "https://bugzilla.redhat.com/2430381",
-                      "https://bugzilla.redhat.com/2430386",
-                      "https://bugzilla.redhat.com/2430387",
-                      "https://bugzilla.redhat.com/2430388",
-                      "https://bugzilla.redhat.com/2430389",
-                      "https://bugzilla.redhat.com/2430390",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430375",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430376",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430377",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430378",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430379",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430380",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430381",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430386",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430387",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430388",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430389",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430390",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-11187",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-15467",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-15468",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-15469",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-66199",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-68160",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-69418",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-69419",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-69420",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-69421",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-22795",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-22796",
-                      "https://errata.almalinux.org/10/ALSA-2026-1472.html",
-                      "https://errata.rockylinux.org/RLSA-2026:1473",
-                      "https://github.com/openssl/openssl/commit/41be0f216404f14457bbf3b9cc488dba60b49296",
-                      "https://github.com/openssl/openssl/commit/7e9cac9832e4705b91987c2474ed06a37a93cecb",
-                      "https://github.com/openssl/openssl/commit/a26a90d38edec3748566129d824e664b54bee2e2",
-                      "https://github.com/openssl/openssl/commit/cda12de3bc0e333ea8d2c6fd15001dbdaf280015",
-                      "https://github.com/openssl/openssl/commit/ff628933755075446bca8307e8417c14d164b535",
-                      "https://linux.oracle.com/cve/CVE-2025-69419.html",
-                      "https://linux.oracle.com/errata/ELSA-2026-50081.html",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2025-69419",
-                      "https://openssl-library.org/news/secadv/20260127.txt",
-                      "https://ubuntu.com/security/notices/USN-7980-1",
-                      "https://ubuntu.com/security/notices/USN-7980-2",
-                      "https://www.cve.org/CVERecord?id=CVE-2025-69419"
-                    ],
-                    "severity": "HIGH",
-                    "suppressed": false,
-                    "title": "openssl: OpenSSL: Arbitrary code execution due to out-of-bounds write in PKCS#12 processing"
-                  },
-                  {
-                    "cve": "CVE-2025-69421",
-                    "cvss": {
-                      "nvd": {
-                        "v3score": "7.5",
-                        "v3vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"
-                      },
-                      "redhat": {
-                        "v3score": "6.5",
-                        "v3vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-476"
-                    ],
-                    "description": "Issue summary: Processing a malformed PKCS#12 file can trigger a NULL pointer\ndereference in the PKCS12_item_decrypt_d2i_ex() function.\n\nImpact summary: A NULL pointer dereference can trigger a crash which leads to\nDenial of Service for an application processing PKCS#12 files.\n\nThe PKCS12_item_decrypt_d2i_ex() function does not check whether the oct\nparameter is NULL before dereferencing it. When called from\nPKCS12_unpack_p7encdata() with a malformed PKCS#12 file, this parameter can\nbe NULL, causing a crash. The vulnerability is limited to Denial of Service\nand cannot be escalated to achieve code execution or memory disclosure.\n\nExploiting this issue requires an attacker to provide a malformed PKCS#12 file\nto an application that processes it. For that reason the issue was assessed as\nLow severity according to our Security Policy.\n\nThe FIPS modules in 3.6, 3.5, 3.4, 3.3 and 3.0 are not affected by this issue,\nas the PKCS#12 implementation is outside the OpenSSL FIPS module boundary.\n\nOpenSSL 3.6, 3.5, 3.4, 3.3, 3.0, 1.1.1 and 1.0.2 are vulnerable to this issue.",
-                    "diffID": "sha256:1231a673589ac9e2f8a98ed916d1fa8301b36a44dd14fc40eba5a05905da69f1",
-                    "fixedVersions": [
-                      "3.5.5-r0"
-                    ],
-                    "installedVersion": "3.5.0-r0",
-                    "packageName": "libcrypto3",
-                    "purl": "pkg:apk/alpine/libcrypto3@3.5.0-r0?arch=aarch64&distro=3.22.0",
-                    "references": [
-                      "https://access.redhat.com/errata/RHSA-2026:1472",
-                      "https://access.redhat.com/security/cve/CVE-2025-69421",
-                      "https://bugzilla.redhat.com/2430375",
-                      "https://bugzilla.redhat.com/2430376",
-                      "https://bugzilla.redhat.com/2430377",
-                      "https://bugzilla.redhat.com/2430378",
-                      "https://bugzilla.redhat.com/2430379",
-                      "https://bugzilla.redhat.com/2430380",
-                      "https://bugzilla.redhat.com/2430381",
-                      "https://bugzilla.redhat.com/2430386",
-                      "https://bugzilla.redhat.com/2430387",
-                      "https://bugzilla.redhat.com/2430388",
-                      "https://bugzilla.redhat.com/2430389",
-                      "https://bugzilla.redhat.com/2430390",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430375",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430376",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430377",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430378",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430379",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430380",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430381",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430386",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430387",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430388",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430389",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430390",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-11187",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-15467",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-15468",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-15469",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-66199",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-68160",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-69418",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-69419",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-69420",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-69421",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-22795",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-22796",
-                      "https://errata.almalinux.org/10/ALSA-2026-1472.html",
-                      "https://errata.rockylinux.org/RLSA-2026:1473",
-                      "https://github.com/openssl/openssl/commit/3524a29271f8191b8fd8a5257eb05173982a097b",
-                      "https://github.com/openssl/openssl/commit/36ecb4960872a4ce04bf6f1e1f4e78d75ec0c0c7",
-                      "https://github.com/openssl/openssl/commit/4bbc8d41a72c842ce4077a8a3eccd1109aaf74bd",
-                      "https://github.com/openssl/openssl/commit/643986985cd1c21221f941129d76fe0c2785aeb3",
-                      "https://github.com/openssl/openssl/commit/a2dbc539f0f9cc63832709fa5aa33ad9495eb19c",
-                      "https://linux.oracle.com/cve/CVE-2025-69421.html",
-                      "https://linux.oracle.com/errata/ELSA-2026-50081.html",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2025-69421",
-                      "https://openssl-library.org/news/secadv/20260127.txt",
-                      "https://ubuntu.com/security/notices/USN-7980-1",
-                      "https://ubuntu.com/security/notices/USN-7980-2",
-                      "https://www.cve.org/CVERecord?id=CVE-2025-69421"
-                    ],
-                    "severity": "HIGH",
-                    "suppressed": false,
-                    "title": "openssl: OpenSSL: Denial of Service via malformed PKCS#12 file processing"
-                  },
-                  {
-                    "cve": "CVE-2025-11187",
-                    "cvss": {
-                      "redhat": {
-                        "v3score": "6.1",
-                        "v3vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:H"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-476",
-                      "CWE-787"
-                    ],
-                    "description": "Issue summary: PBMAC1 parameters in PKCS#12 files are missing validation\nwhich can trigger a stack-based buffer overflow, invalid pointer or NULL\npointer dereference during MAC verification.\n\nImpact summary: The stack buffer overflow or NULL pointer dereference may\ncause a crash leading to Denial of Service for an application that parses\nuntrusted PKCS#12 files. The buffer overflow may also potentially enable\ncode execution depending on platform mitigations.\n\nWhen verifying a PKCS#12 file that uses PBMAC1 for the MAC, the PBKDF2\nsalt and keylength parameters from the file are used without validation.\nIf the value of keylength exceeds the size of the fixed stack buffer used\nfor the derived key (64 bytes), the key derivation will overflow the buffer.\nThe overflow length is attacker-controlled. Also, if the salt parameter is\nnot an OCTET STRING type this can lead to invalid or NULL pointer\ndereference.\n\nExploiting this issue requires a user or application to process\na maliciously crafted PKCS#12 file. It is uncommon to accept untrusted\nPKCS#12 files in applications as they are usually used to store private\nkeys which are trusted by definition. For this reason the issue was assessed\nas Moderate severity.\n\nThe FIPS modules in 3.6, 3.5 and 3.4 are not affected by this issue, as\nPKCS#12 processing is outside the OpenSSL FIPS module boundary.\n\nOpenSSL 3.6, 3.5 and 3.4 are vulnerable to this issue.\n\nOpenSSL 3.3, 3.0, 1.1.1 and 1.0.2 are not affected by this issue as they do\nnot support PBMAC1 in PKCS#12.",
-                    "diffID": "sha256:1231a673589ac9e2f8a98ed916d1fa8301b36a44dd14fc40eba5a05905da69f1",
-                    "fixedVersions": [
-                      "3.5.5-r0"
-                    ],
-                    "installedVersion": "3.5.0-r0",
-                    "packageName": "libcrypto3",
-                    "purl": "pkg:apk/alpine/libcrypto3@3.5.0-r0?arch=aarch64&distro=3.22.0",
-                    "references": [
-                      "https://access.redhat.com/errata/RHSA-2026:1472",
-                      "https://access.redhat.com/security/cve/CVE-2025-11187",
-                      "https://bugzilla.redhat.com/2430375",
-                      "https://bugzilla.redhat.com/2430376",
-                      "https://bugzilla.redhat.com/2430377",
-                      "https://bugzilla.redhat.com/2430378",
-                      "https://bugzilla.redhat.com/2430379",
-                      "https://bugzilla.redhat.com/2430380",
-                      "https://bugzilla.redhat.com/2430381",
-                      "https://bugzilla.redhat.com/2430386",
-                      "https://bugzilla.redhat.com/2430387",
-                      "https://bugzilla.redhat.com/2430388",
-                      "https://bugzilla.redhat.com/2430389",
-                      "https://bugzilla.redhat.com/2430390",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430375",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430376",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430377",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430378",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430379",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430380",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430381",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430386",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430387",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430388",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430389",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430390",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-11187",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-15467",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-15468",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-15469",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-66199",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-68160",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-69418",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-69419",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-69420",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-69421",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-22795",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-22796",
-                      "https://errata.almalinux.org/10/ALSA-2026-1472.html",
-                      "https://errata.rockylinux.org/RLSA-2026:1473",
-                      "https://github.com/openssl/openssl/commit/205e3a55e16e4bd08c12fdbd3416ab829c0f6206",
-                      "https://github.com/openssl/openssl/commit/8caf359d6e46fb413e8f5f0df765d2e8a51df4e8",
-                      "https://github.com/openssl/openssl/commit/e1079bc17ed93ff16f6b86f33a2fe3336e78817e",
-                      "https://linux.oracle.com/cve/CVE-2025-11187.html",
-                      "https://linux.oracle.com/errata/ELSA-2026-50081.html",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2025-11187",
-                      "https://openssl-library.org/news/secadv/20260127.txt",
-                      "https://ubuntu.com/security/notices/USN-7980-1",
-                      "https://www.cve.org/CVERecord?id=CVE-2025-11187"
-                    ],
-                    "severity": "MEDIUM",
-                    "suppressed": false,
-                    "title": "openssl: OpenSSL: Arbitrary code execution or denial of service through crafted PKCS#12 file"
-                  },
-                  {
-                    "cve": "CVE-2025-15468",
-                    "cvss": {
-                      "redhat": {
-                        "v3score": "5.9",
-                        "v3vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-476"
-                    ],
-                    "description": "Issue summary: If an application using the SSL_CIPHER_find() function in\na QUIC protocol client or server receives an unknown cipher suite from\nthe peer, a NULL dereference occurs.\n\nImpact summary: A NULL pointer dereference leads to abnormal termination of\nthe running process causing Denial of Service.\n\nSome applications call SSL_CIPHER_find() from the client_hello_cb callback\non the cipher ID received from the peer. If this is done with an SSL object\nimplementing the QUIC protocol, NULL pointer dereference will happen if\nthe examined cipher ID is unknown or unsupported.\n\nAs it is not very common to call this function in applications using the QUIC \nprotocol and the worst outcome is Denial of Service, the issue was assessed\nas Low severity.\n\nThe vulnerable code was introduced in the 3.2 version with the addition\nof the QUIC protocol support.\n\nThe FIPS modules in 3.6, 3.5, 3.4 and 3.3 are not affected by this issue,\nas the QUIC implementation is outside the OpenSSL FIPS module boundary.\n\nOpenSSL 3.6, 3.5, 3.4 and 3.3 are vulnerable to this issue.\n\nOpenSSL 3.0, 1.1.1 and 1.0.2 are not affected by this issue.",
-                    "diffID": "sha256:1231a673589ac9e2f8a98ed916d1fa8301b36a44dd14fc40eba5a05905da69f1",
-                    "fixedVersions": [
-                      "3.5.5-r0"
-                    ],
-                    "installedVersion": "3.5.0-r0",
-                    "packageName": "libcrypto3",
-                    "purl": "pkg:apk/alpine/libcrypto3@3.5.0-r0?arch=aarch64&distro=3.22.0",
-                    "references": [
-                      "https://access.redhat.com/errata/RHSA-2026:1472",
-                      "https://access.redhat.com/security/cve/CVE-2025-15468",
-                      "https://bugzilla.redhat.com/2430375",
-                      "https://bugzilla.redhat.com/2430376",
-                      "https://bugzilla.redhat.com/2430377",
-                      "https://bugzilla.redhat.com/2430378",
-                      "https://bugzilla.redhat.com/2430379",
-                      "https://bugzilla.redhat.com/2430380",
-                      "https://bugzilla.redhat.com/2430381",
-                      "https://bugzilla.redhat.com/2430386",
-                      "https://bugzilla.redhat.com/2430387",
-                      "https://bugzilla.redhat.com/2430388",
-                      "https://bugzilla.redhat.com/2430389",
-                      "https://bugzilla.redhat.com/2430390",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430375",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430376",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430377",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430378",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430379",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430380",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430381",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430386",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430387",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430388",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430389",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430390",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-11187",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-15467",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-15468",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-15469",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-66199",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-68160",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-69418",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-69419",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-69420",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-69421",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-22795",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-22796",
-                      "https://errata.almalinux.org/10/ALSA-2026-1472.html",
-                      "https://errata.rockylinux.org/RLSA-2026:1473",
-                      "https://github.com/openssl/openssl/commit/1f08e54bad32843044fe8a675948d65e3b4ece65",
-                      "https://github.com/openssl/openssl/commit/7c88376731c589ee5b36116c5a6e32d5ae5f7ae2",
-                      "https://github.com/openssl/openssl/commit/b2539639400288a4580fe2d76247541b976bade4",
-                      "https://github.com/openssl/openssl/commit/d75b309879631d45b972396ce4e5102559c64ac7",
-                      "https://linux.oracle.com/cve/CVE-2025-15468.html",
-                      "https://linux.oracle.com/errata/ELSA-2026-50081.html",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2025-15468",
-                      "https://openssl-library.org/news/secadv/20260127.txt",
-                      "https://ubuntu.com/security/notices/USN-7980-1",
-                      "https://www.cve.org/CVERecord?id=CVE-2025-15468"
-                    ],
-                    "severity": "MEDIUM",
-                    "suppressed": false,
-                    "title": "openssl: OpenSSL: Denial of Service via NULL pointer dereference in QUIC protocol handling"
-                  },
-                  {
-                    "cve": "CVE-2025-15469",
-                    "cvss": {
-                      "redhat": {
-                        "v3score": "5.5",
-                        "v3vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-347"
-                    ],
-                    "description": "Issue summary: The 'openssl dgst' command-line tool silently truncates input\ndata to 16MB when using one-shot signing algorithms and reports success instead\nof an error.\n\nImpact summary: A user signing or verifying files larger than 16MB with\none-shot algorithms (such as Ed25519, Ed448, or ML-DSA) may believe the entire\nfile is authenticated while trailing data beyond 16MB remains unauthenticated.\n\nWhen the 'openssl dgst' command is used with algorithms that only support\none-shot signing (Ed25519, Ed448, ML-DSA-44, ML-DSA-65, ML-DSA-87), the input\nis buffered with a 16MB limit. If the input exceeds this limit, the tool\nsilently truncates to the first 16MB and continues without signaling an error,\ncontrary to what the documentation states. This creates an integrity gap where\ntrailing bytes can be modified without detection if both signing and\nverification are performed using the same affected codepath.\n\nThe issue affects only the command-line tool behavior. Verifiers that process\nthe full message using library APIs will reject the signature, so the risk\nprimarily affects workflows that both sign and verify with the affected\n'openssl dgst' command. Streaming digest algorithms for 'openssl dgst' and\nlibrary users are unaffected.\n\nThe FIPS modules in 3.5 and 3.6 are not affected by this issue, as the\ncommand-line tools are outside the OpenSSL FIPS module boundary.\n\nOpenSSL 3.5 and 3.6 are vulnerable to this issue.\n\nOpenSSL 3.4, 3.3, 3.0, 1.1.1 and 1.0.2 are not affected by this issue.",
-                    "diffID": "sha256:1231a673589ac9e2f8a98ed916d1fa8301b36a44dd14fc40eba5a05905da69f1",
-                    "fixedVersions": [
-                      "3.5.5-r0"
-                    ],
-                    "installedVersion": "3.5.0-r0",
-                    "packageName": "libcrypto3",
-                    "purl": "pkg:apk/alpine/libcrypto3@3.5.0-r0?arch=aarch64&distro=3.22.0",
-                    "references": [
-                      "https://access.redhat.com/errata/RHSA-2026:1472",
-                      "https://access.redhat.com/security/cve/CVE-2025-15469",
-                      "https://bugzilla.redhat.com/2430375",
-                      "https://bugzilla.redhat.com/2430376",
-                      "https://bugzilla.redhat.com/2430377",
-                      "https://bugzilla.redhat.com/2430378",
-                      "https://bugzilla.redhat.com/2430379",
-                      "https://bugzilla.redhat.com/2430380",
-                      "https://bugzilla.redhat.com/2430381",
-                      "https://bugzilla.redhat.com/2430386",
-                      "https://bugzilla.redhat.com/2430387",
-                      "https://bugzilla.redhat.com/2430388",
-                      "https://bugzilla.redhat.com/2430389",
-                      "https://bugzilla.redhat.com/2430390",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430375",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430376",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430377",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430378",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430379",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430380",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430381",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430386",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430387",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430388",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430389",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430390",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-11187",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-15467",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-15468",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-15469",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-66199",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-68160",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-69418",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-69419",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-69420",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-69421",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-22795",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-22796",
-                      "https://errata.almalinux.org/10/ALSA-2026-1472.html",
-                      "https://errata.rockylinux.org/RLSA-2026:1473",
-                      "https://github.com/openssl/openssl/commit/310f305eb92ea8040d6b3cb75a5feeba8e6acf2f",
-                      "https://github.com/openssl/openssl/commit/a7936fa4bd23c906e1955a16a0a0ab39a4953a61",
-                      "https://linux.oracle.com/cve/CVE-2025-15469.html",
-                      "https://linux.oracle.com/errata/ELSA-2026-50081.html",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2025-15469",
-                      "https://openssl-library.org/news/secadv/20260127.txt",
-                      "https://ubuntu.com/security/notices/USN-7980-1",
-                      "https://www.cve.org/CVERecord?id=CVE-2025-15469"
-                    ],
-                    "severity": "MEDIUM",
-                    "suppressed": false,
-                    "title": "openssl: OpenSSL: Data integrity bypass in `openssl dgst` command due to silent truncation"
-                  },
-                  {
-                    "cve": "CVE-2025-66199",
-                    "cvss": {
-                      "redhat": {
-                        "v3score": "5.9",
-                        "v3vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-789"
-                    ],
-                    "description": "Issue summary: A TLS 1.3 connection using certificate compression can be\nforced to allocate a large buffer before decompression without checking\nagainst the configured certificate size limit.\n\nImpact summary: An attacker can cause per-connection memory allocations of\nup to approximately 22 MiB and extra CPU work, potentially leading to\nservice degradation or resource exhaustion (Denial of Service).\n\nIn affected configurations, the peer-supplied uncompressed certificate\nlength from a CompressedCertificate message is used to grow a heap buffer\nprior to decompression. This length is not bounded by the max_cert_list\nsetting, which otherwise constrains certificate message sizes. An attacker\ncan exploit this to cause large per-connection allocations followed by\nhandshake failure. No memory corruption or information disclosure occurs.\n\nThis issue only affects builds where TLS 1.3 certificate compression is\ncompiled in (i.e., not OPENSSL_NO_COMP_ALG) and at least one compression\nalgorithm (brotli, zlib, or zstd) is available, and where the compression\nextension is negotiated. Both clients receiving a server CompressedCertificate\nand servers in mutual TLS scenarios receiving a client CompressedCertificate\nare affected. Servers that do not request client certificates are not\nvulnerable to client-initiated attacks.\n\nUsers can mitigate this issue by setting SSL_OP_NO_RX_CERTIFICATE_COMPRESSION\nto disable receiving compressed certificates.\n\nThe FIPS modules in 3.6, 3.5, 3.4 and 3.3 are not affected by this issue,\nas the TLS implementation is outside the OpenSSL FIPS module boundary.\n\nOpenSSL 3.6, 3.5, 3.4 and 3.3 are vulnerable to this issue.\n\nOpenSSL 3.0, 1.1.1 and 1.0.2 are not affected by this issue.",
-                    "diffID": "sha256:1231a673589ac9e2f8a98ed916d1fa8301b36a44dd14fc40eba5a05905da69f1",
-                    "fixedVersions": [
-                      "3.5.5-r0"
-                    ],
-                    "installedVersion": "3.5.0-r0",
-                    "packageName": "libcrypto3",
-                    "purl": "pkg:apk/alpine/libcrypto3@3.5.0-r0?arch=aarch64&distro=3.22.0",
-                    "references": [
-                      "https://access.redhat.com/errata/RHSA-2026:1472",
-                      "https://access.redhat.com/security/cve/CVE-2025-66199",
-                      "https://bugzilla.redhat.com/2430375",
-                      "https://bugzilla.redhat.com/2430376",
-                      "https://bugzilla.redhat.com/2430377",
-                      "https://bugzilla.redhat.com/2430378",
-                      "https://bugzilla.redhat.com/2430379",
-                      "https://bugzilla.redhat.com/2430380",
-                      "https://bugzilla.redhat.com/2430381",
-                      "https://bugzilla.redhat.com/2430386",
-                      "https://bugzilla.redhat.com/2430387",
-                      "https://bugzilla.redhat.com/2430388",
-                      "https://bugzilla.redhat.com/2430389",
-                      "https://bugzilla.redhat.com/2430390",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430375",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430376",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430377",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430378",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430379",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430380",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430381",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430386",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430387",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430388",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430389",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430390",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-11187",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-15467",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-15468",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-15469",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-66199",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-68160",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-69418",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-69419",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-69420",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-69421",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-22795",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-22796",
-                      "https://errata.almalinux.org/10/ALSA-2026-1472.html",
-                      "https://errata.rockylinux.org/RLSA-2026:1473",
-                      "https://github.com/openssl/openssl/commit/3ed1f75249932b155eef993a8e66a99cb98bfef4",
-                      "https://github.com/openssl/openssl/commit/6184a4fb08ee6d7bca570d931a4e8bef40b64451",
-                      "https://github.com/openssl/openssl/commit/895150b5e021d16b52fb32b97e1dd12f20448be5",
-                      "https://github.com/openssl/openssl/commit/966a2478046c311ed7dae50c457d0db4cafbf7e4",
-                      "https://linux.oracle.com/cve/CVE-2025-66199.html",
-                      "https://linux.oracle.com/errata/ELSA-2026-50081.html",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2025-66199",
-                      "https://openssl-library.org/news/secadv/20260127.txt",
-                      "https://ubuntu.com/security/notices/USN-7980-1",
-                      "https://www.cve.org/CVERecord?id=CVE-2025-66199"
-                    ],
-                    "severity": "MEDIUM",
-                    "suppressed": false,
-                    "title": "openssl: OpenSSL: Denial of Service due to excessive memory allocation in TLS 1.3 certificate compression"
-                  },
-                  {
-                    "cve": "CVE-2025-68160",
-                    "cvss": {
-                      "redhat": {
-                        "v3score": "4.7",
-                        "v3vector": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-787"
-                    ],
-                    "description": "Issue summary: Writing large, newline-free data into a BIO chain using the\nline-buffering filter where the next BIO performs short writes can trigger\na heap-based out-of-bounds write.\n\nImpact summary: This out-of-bounds write can cause memory corruption which\ntypically results in a crash, leading to Denial of Service for an application.\n\nThe line-buffering BIO filter (BIO_f_linebuffer) is not used by default in\nTLS/SSL data paths. In OpenSSL command-line applications, it is typically\nonly pushed onto stdout/stderr on VMS systems. Third-party applications that\nexplicitly use this filter with a BIO chain that can short-write and that\nwrite large, newline-free data influenced by an attacker would be affected.\nHowever, the circumstances where this could happen are unlikely to be under\nattacker control, and BIO_f_linebuffer is unlikely to be handling non-curated\ndata controlled by an attacker. For that reason the issue was assessed as\nLow severity.\n\nThe FIPS modules in 3.6, 3.5, 3.4, 3.3 and 3.0 are not affected by this issue,\nas the BIO implementation is outside the OpenSSL FIPS module boundary.\n\nOpenSSL 3.6, 3.5, 3.4, 3.3, 3.0, 1.1.1 and 1.0.2 are vulnerable to this issue.",
-                    "diffID": "sha256:1231a673589ac9e2f8a98ed916d1fa8301b36a44dd14fc40eba5a05905da69f1",
-                    "fixedVersions": [
-                      "3.5.5-r0"
-                    ],
-                    "installedVersion": "3.5.0-r0",
-                    "packageName": "libcrypto3",
-                    "purl": "pkg:apk/alpine/libcrypto3@3.5.0-r0?arch=aarch64&distro=3.22.0",
-                    "references": [
-                      "https://access.redhat.com/errata/RHSA-2026:1472",
-                      "https://access.redhat.com/security/cve/CVE-2025-68160",
-                      "https://bugzilla.redhat.com/2430375",
-                      "https://bugzilla.redhat.com/2430376",
-                      "https://bugzilla.redhat.com/2430377",
-                      "https://bugzilla.redhat.com/2430378",
-                      "https://bugzilla.redhat.com/2430379",
-                      "https://bugzilla.redhat.com/2430380",
-                      "https://bugzilla.redhat.com/2430381",
-                      "https://bugzilla.redhat.com/2430386",
-                      "https://bugzilla.redhat.com/2430387",
-                      "https://bugzilla.redhat.com/2430388",
-                      "https://bugzilla.redhat.com/2430389",
-                      "https://bugzilla.redhat.com/2430390",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430375",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430376",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430377",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430378",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430379",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430380",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430381",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430386",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430387",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430388",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430389",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430390",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-11187",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-15467",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-15468",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-15469",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-66199",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-68160",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-69418",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-69419",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-69420",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-69421",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-22795",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-22796",
-                      "https://errata.almalinux.org/10/ALSA-2026-1472.html",
-                      "https://errata.rockylinux.org/RLSA-2026:1473",
-                      "https://github.com/openssl/openssl/commit/384011202af92605d926fafe4a0bcd6b65d162ad",
-                      "https://github.com/openssl/openssl/commit/475c466ef2fbd8fc1df6fae1c3eed9c813fc8ff6",
-                      "https://github.com/openssl/openssl/commit/4c96fbba618e1940f038012506ee9e21d32ee12c",
-                      "https://github.com/openssl/openssl/commit/6845c3b6460a98b1ec4e463baa2ea1a63a32d7c0",
-                      "https://github.com/openssl/openssl/commit/68a7cd2e2816c3a02f4d45a2ce43fc04fac97096",
-                      "https://linux.oracle.com/cve/CVE-2025-68160.html",
-                      "https://linux.oracle.com/errata/ELSA-2026-50081.html",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2025-68160",
-                      "https://openssl-library.org/news/secadv/20260127.txt",
-                      "https://ubuntu.com/security/notices/USN-7980-1",
-                      "https://ubuntu.com/security/notices/USN-7980-2",
-                      "https://www.cve.org/CVERecord?id=CVE-2025-68160"
-                    ],
-                    "severity": "MEDIUM",
-                    "suppressed": false,
-                    "title": "openssl: OpenSSL: Denial of Service due to out-of-bounds write in BIO filter"
-                  },
-                  {
-                    "cve": "CVE-2025-69418",
-                    "cvss": {
-                      "redhat": {
-                        "v3score": "4",
-                        "v3vector": "CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-325"
-                    ],
-                    "description": "Issue summary: When using the low-level OCB API directly with AES-NI or<br>other hardware-accelerated code paths, inputs whose length is not a multiple<br>of 16 bytes can leave the final partial block unencrypted and unauthenticated.<br><br>Impact summary: The trailing 1-15 bytes of a message may be exposed in<br>cleartext on encryption and are not covered by the authentication tag,<br>allowing an attacker to read or tamper with those bytes without detection.<br><br>The low-level OCB encrypt and decrypt routines in the hardware-accelerated<br>stream path process full 16-byte blocks but do not advance the input/output<br>pointers. The subsequent tail-handling code then operates on the original<br>base pointers, effectively reprocessing the beginning of the buffer while<br>leaving the actual trailing bytes unprocessed. The authentication checksum<br>also excludes the true tail bytes.<br><br>However, typical OpenSSL consumers using EVP are not affected because the<br>higher-level EVP and provider OCB implementations split inputs so that full<br>blocks and trailing partial blocks are processed in separate calls, avoiding<br>the problematic code path. Additionally, TLS does not use OCB ciphersuites.<br>The vulnerability only affects applications that call the low-level<br>CRYPTO_ocb128_encrypt() or CRYPTO_ocb128_decrypt() functions directly with<br>non-block-aligned lengths in a single call on hardware-accelerated builds.<br>For these reasons the issue was assessed as Low severity.<br><br>The FIPS modules in 3.6, 3.5, 3.4, 3.3, 3.2, 3.1 and 3.0 are not affected<br>by this issue, as OCB mode is not a FIPS-approved algorithm.<br><br>OpenSSL 3.6, 3.5, 3.4, 3.3, 3.0 and 1.1.1 are vulnerable to this issue.<br><br>OpenSSL 1.0.2 is not affected by this issue.",
-                    "diffID": "sha256:1231a673589ac9e2f8a98ed916d1fa8301b36a44dd14fc40eba5a05905da69f1",
-                    "fixedVersions": [
-                      "3.5.5-r0"
-                    ],
-                    "installedVersion": "3.5.0-r0",
-                    "packageName": "libcrypto3",
-                    "purl": "pkg:apk/alpine/libcrypto3@3.5.0-r0?arch=aarch64&distro=3.22.0",
-                    "references": [
-                      "https://access.redhat.com/errata/RHSA-2026:1472",
-                      "https://access.redhat.com/security/cve/CVE-2025-69418",
-                      "https://bugzilla.redhat.com/2430375",
-                      "https://bugzilla.redhat.com/2430376",
-                      "https://bugzilla.redhat.com/2430377",
-                      "https://bugzilla.redhat.com/2430378",
-                      "https://bugzilla.redhat.com/2430379",
-                      "https://bugzilla.redhat.com/2430380",
-                      "https://bugzilla.redhat.com/2430381",
-                      "https://bugzilla.redhat.com/2430386",
-                      "https://bugzilla.redhat.com/2430387",
-                      "https://bugzilla.redhat.com/2430388",
-                      "https://bugzilla.redhat.com/2430389",
-                      "https://bugzilla.redhat.com/2430390",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430375",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430376",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430377",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430378",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430379",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430380",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430381",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430386",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430387",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430388",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430389",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430390",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-11187",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-15467",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-15468",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-15469",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-66199",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-68160",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-69418",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-69419",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-69420",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-69421",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-22795",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-22796",
-                      "https://errata.almalinux.org/10/ALSA-2026-1472.html",
-                      "https://errata.rockylinux.org/RLSA-2026:1473",
-                      "https://github.com/openssl/openssl/commit/372fc5c77529695b05b4f5b5187691a57ef5dffc",
-                      "https://github.com/openssl/openssl/commit/4016975d4469cd6b94927c607f7c511385f928d8",
-                      "https://github.com/openssl/openssl/commit/52d23c86a54adab5ee9f80e48b242b52c4cc2347",
-                      "https://github.com/openssl/openssl/commit/a7589230356d908c0eca4b969ec4f62106f4f5ae",
-                      "https://github.com/openssl/openssl/commit/ed40856d7d4ba6cb42779b6770666a65f19cb977",
-                      "https://linux.oracle.com/cve/CVE-2025-69418.html",
-                      "https://linux.oracle.com/errata/ELSA-2026-50081.html",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2025-69418",
-                      "https://openssl-library.org/news/secadv/20260127.txt",
-                      "https://ubuntu.com/security/notices/USN-7980-1",
-                      "https://ubuntu.com/security/notices/USN-7980-2",
-                      "https://www.cve.org/CVERecord?id=CVE-2025-69418"
-                    ],
-                    "severity": "MEDIUM",
-                    "suppressed": false,
-                    "title": "openssl: OpenSSL: Information disclosure and data tampering via specific low-level OCB encryption/decryption calls"
-                  },
-                  {
-                    "cve": "CVE-2025-69420",
-                    "cvss": {
-                      "redhat": {
-                        "v3score": "5.9",
-                        "v3vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-754"
-                    ],
-                    "description": "Issue summary: A type confusion vulnerability exists in the TimeStamp Response\nverification code where an ASN1_TYPE union member is accessed without first\nvalidating the type, causing an invalid or NULL pointer dereference when\nprocessing a malformed TimeStamp Response file.\n\nImpact summary: An application calling TS_RESP_verify_response() with a\nmalformed TimeStamp Response can be caused to dereference an invalid or\nNULL pointer when reading, resulting in a Denial of Service.\n\nThe functions ossl_ess_get_signing_cert() and ossl_ess_get_signing_cert_v2()\naccess the signing cert attribute value without validating its type.\nWhen the type is not V_ASN1_SEQUENCE, this results in accessing invalid memory\nthrough the ASN1_TYPE union, causing a crash.\n\nExploiting this vulnerability requires an attacker to provide a malformed\nTimeStamp Response to an application that verifies timestamp responses. The\nTimeStamp protocol (RFC 3161) is not widely used and the impact of the\nexploit is just a Denial of Service. For these reasons the issue was\nassessed as Low severity.\n\nThe FIPS modules in 3.5, 3.4, 3.3 and 3.0 are not affected by this issue,\nas the TimeStamp Response implementation is outside the OpenSSL FIPS module\nboundary.\n\nOpenSSL 3.6, 3.5, 3.4, 3.3, 3.0 and 1.1.1 are vulnerable to this issue.\n\nOpenSSL 1.0.2 is not affected by this issue.",
-                    "diffID": "sha256:1231a673589ac9e2f8a98ed916d1fa8301b36a44dd14fc40eba5a05905da69f1",
-                    "fixedVersions": [
-                      "3.5.5-r0"
-                    ],
-                    "installedVersion": "3.5.0-r0",
-                    "packageName": "libcrypto3",
-                    "purl": "pkg:apk/alpine/libcrypto3@3.5.0-r0?arch=aarch64&distro=3.22.0",
-                    "references": [
-                      "https://access.redhat.com/errata/RHSA-2026:1472",
-                      "https://access.redhat.com/security/cve/CVE-2025-69420",
-                      "https://bugzilla.redhat.com/2430375",
-                      "https://bugzilla.redhat.com/2430376",
-                      "https://bugzilla.redhat.com/2430377",
-                      "https://bugzilla.redhat.com/2430378",
-                      "https://bugzilla.redhat.com/2430379",
-                      "https://bugzilla.redhat.com/2430380",
-                      "https://bugzilla.redhat.com/2430381",
-                      "https://bugzilla.redhat.com/2430386",
-                      "https://bugzilla.redhat.com/2430387",
-                      "https://bugzilla.redhat.com/2430388",
-                      "https://bugzilla.redhat.com/2430389",
-                      "https://bugzilla.redhat.com/2430390",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430375",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430376",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430377",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430378",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430379",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430380",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430381",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430386",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430387",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430388",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430389",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430390",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-11187",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-15467",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-15468",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-15469",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-66199",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-68160",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-69418",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-69419",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-69420",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-69421",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-22795",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-22796",
-                      "https://errata.almalinux.org/10/ALSA-2026-1472.html",
-                      "https://errata.rockylinux.org/RLSA-2026:1473",
-                      "https://github.com/openssl/openssl/commit/27c7012c91cc986a598d7540f3079dfde2416eb9",
-                      "https://github.com/openssl/openssl/commit/4e254b48ad93cc092be3dd62d97015f33f73133a",
-                      "https://github.com/openssl/openssl/commit/564fd9c73787f25693bf9e75faf7bf6bb1305d4e",
-                      "https://github.com/openssl/openssl/commit/5eb0770ffcf11b785cf374ff3c19196245e54f1b",
-                      "https://github.com/openssl/openssl/commit/a99349ebfc519999edc50620abe24d599b9eb085",
-                      "https://linux.oracle.com/cve/CVE-2025-69420.html",
-                      "https://linux.oracle.com/errata/ELSA-2026-50081.html",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2025-69420",
-                      "https://openssl-library.org/news/secadv/20260127.txt",
-                      "https://ubuntu.com/security/notices/USN-7980-1",
-                      "https://ubuntu.com/security/notices/USN-7980-2",
-                      "https://www.cve.org/CVERecord?id=CVE-2025-69420"
-                    ],
-                    "severity": "MEDIUM",
-                    "suppressed": false,
-                    "title": "openssl: OpenSSL: Denial of Service via malformed TimeStamp Response"
-                  },
-                  {
-                    "cve": "CVE-2025-9230",
-                    "cvss": {
-                      "redhat": {
-                        "v3score": "5.6",
-                        "v3vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-125",
-                      "CWE-787"
-                    ],
-                    "description": "Issue summary: An application trying to decrypt CMS messages encrypted using\npassword based encryption can trigger an out-of-bounds read and write.\n\nImpact summary: This out-of-bounds read may trigger a crash which leads to\nDenial of Service for an application. The out-of-bounds write can cause\na memory corruption which can have various consequences including\na Denial of Service or Execution of attacker-supplied code.\n\nAlthough the consequences of a successful exploit of this vulnerability\ncould be severe, the probability that the attacker would be able to\nperform it is low. Besides, password based (PWRI) encryption support in CMS\nmessages is very rarely used. For that reason the issue was assessed as\nModerate severity according to our Security Policy.\n\nThe FIPS modules in 3.5, 3.4, 3.3, 3.2, 3.1 and 3.0 are not affected by this\nissue, as the CMS implementation is outside the OpenSSL FIPS module\nboundary.",
-                    "diffID": "sha256:1231a673589ac9e2f8a98ed916d1fa8301b36a44dd14fc40eba5a05905da69f1",
-                    "fixedVersions": [
-                      "3.5.4-r0"
-                    ],
-                    "installedVersion": "3.5.0-r0",
-                    "packageName": "libcrypto3",
-                    "purl": "pkg:apk/alpine/libcrypto3@3.5.0-r0?arch=aarch64&distro=3.22.0",
-                    "references": [
-                      "http://www.openwall.com/lists/oss-security/2025/09/30/5",
-                      "https://access.redhat.com/errata/RHSA-2026:0337",
-                      "https://access.redhat.com/security/cve/CVE-2025-9230",
-                      "https://bugzilla.redhat.com/2396054",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2396054",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-9230",
-                      "https://errata.almalinux.org/8/ALSA-2026-0337.html",
-                      "https://errata.rockylinux.org/RLSA-2025:21255",
-                      "https://github.com/openssl/openssl/commit/5965ea5dd6960f36d8b7f74f8eac67a8eb8f2b45",
-                      "https://github.com/openssl/openssl/commit/9e91358f365dee6c446dcdcdb01c04d2743fd280",
-                      "https://github.com/openssl/openssl/commit/a79c4ce559c6a3a8fd4109e9f33c1185d5bf2def",
-                      "https://github.com/openssl/openssl/commit/b5282d677551afda7d20e9c00e09561b547b2dfd",
-                      "https://github.com/openssl/openssl/commit/bae259a211ada6315dc50900686daaaaaa55f482",
-                      "https://github.openssl.org/openssl/extended-releases/commit/c2b96348bfa662f25f4fabf81958ae822063dae3",
-                      "https://github.openssl.org/openssl/extended-releases/commit/dfbaf161d8dafc1132dd88cd48ad990ed9b4c8ba",
-                      "https://linux.oracle.com/cve/CVE-2025-9230.html",
-                      "https://linux.oracle.com/errata/ELSA-2026-50077.html",
-                      "https://lists.debian.org/debian-lts-announce/2025/10/msg00001.html",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2025-9230",
-                      "https://openssl-library.org/news/secadv/20250930.txt",
-                      "https://ubuntu.com/security/notices/USN-7786-1",
-                      "https://www.cve.org/CVERecord?id=CVE-2025-9230"
-                    ],
-                    "severity": "MEDIUM",
-                    "suppressed": false,
-                    "title": "openssl: Out-of-bounds read & write in RFC 3211 KEK Unwrap"
-                  },
-                  {
-                    "cve": "CVE-2025-9231",
-                    "cvss": {
-                      "redhat": {
-                        "v3score": "5.9",
-                        "v3vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-385"
-                    ],
-                    "description": "Issue summary: A timing side-channel which could potentially allow remote\nrecovery of the private key exists in the SM2 algorithm implementation on 64 bit\nARM platforms.\n\nImpact summary: A timing side-channel in SM2 signature computations on 64 bit\nARM platforms could allow recovering the private key by an attacker..\n\nWhile remote key recovery over a network was not attempted by the reporter,\ntiming measurements revealed a timing signal which may allow such an attack.\n\nOpenSSL does not directly support certificates with SM2 keys in TLS, and so\nthis CVE is not relevant in most TLS contexts.  However, given that it is\npossible to add support for such certificates via a custom provider, coupled\nwith the fact that in such a custom provider context the private key may be\nrecoverable via remote timing measurements, we consider this to be a Moderate\nseverity issue.\n\nThe FIPS modules in 3.5, 3.4, 3.3, 3.2, 3.1 and 3.0 are not affected by this\nissue, as SM2 is not an approved algorithm.",
-                    "diffID": "sha256:1231a673589ac9e2f8a98ed916d1fa8301b36a44dd14fc40eba5a05905da69f1",
-                    "fixedVersions": [
-                      "3.5.4-r0"
-                    ],
-                    "installedVersion": "3.5.0-r0",
-                    "packageName": "libcrypto3",
-                    "purl": "pkg:apk/alpine/libcrypto3@3.5.0-r0?arch=aarch64&distro=3.22.0",
-                    "references": [
-                      "http://www.openwall.com/lists/oss-security/2025/09/30/5",
-                      "https://access.redhat.com/security/cve/CVE-2025-9231",
-                      "https://github.com/openssl/openssl/commit/567f64386e43683888212226824b6a179885a0fe",
-                      "https://github.com/openssl/openssl/commit/cba616c26ac8e7b37de5e77762e505ba5ca51698",
-                      "https://github.com/openssl/openssl/commit/eed5adc9f969d77c94f213767acbb41ff923b6f4",
-                      "https://github.com/openssl/openssl/commit/fc47a2ec078912b3e914fab5734535e76c4820c2",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2025-9231",
-                      "https://openssl-library.org/news/secadv/20250930.txt",
-                      "https://ubuntu.com/security/notices/USN-7786-1",
-                      "https://www.cve.org/CVERecord?id=CVE-2025-9231"
-                    ],
-                    "severity": "MEDIUM",
-                    "suppressed": false,
-                    "title": "openssl: Timing side-channel in SM2 algorithm on 64 bit ARM"
-                  },
-                  {
-                    "cve": "CVE-2026-22795",
-                    "cvss": {
-                      "redhat": {
-                        "v3score": "5.5",
-                        "v3vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-754"
-                    ],
-                    "description": "Issue summary: An invalid or NULL pointer dereference can happen in\nan application processing a malformed PKCS#12 file.\n\nImpact summary: An application processing a malformed PKCS#12 file can be\ncaused to dereference an invalid or NULL pointer on memory read, resulting\nin a Denial of Service.\n\nA type confusion vulnerability exists in PKCS#12 parsing code where\nan ASN1_TYPE union member is accessed without first validating the type,\ncausing an invalid pointer read.\n\nThe location is constrained to a 1-byte address space, meaning any\nattempted pointer manipulation can only target addresses between 0x00 and 0xFF.\nThis range corresponds to the zero page, which is unmapped on most modern\noperating systems and will reliably result in a crash, leading only to a\nDenial of Service. Exploiting this issue also requires a user or application\nto process a maliciously crafted PKCS#12 file. It is uncommon to accept\nuntrusted PKCS#12 files in applications as they are usually used to store\nprivate keys which are trusted by definition. For these reasons, the issue\nwas assessed as Low severity.\n\nThe FIPS modules in 3.5, 3.4, 3.3 and 3.0 are not affected by this issue,\nas the PKCS12 implementation is outside the OpenSSL FIPS module boundary.\n\nOpenSSL 3.6, 3.5, 3.4, 3.3, 3.0 and 1.1.1 are vulnerable to this issue.\n\nOpenSSL 1.0.2 is not affected by this issue.",
-                    "diffID": "sha256:1231a673589ac9e2f8a98ed916d1fa8301b36a44dd14fc40eba5a05905da69f1",
-                    "fixedVersions": [
-                      "3.5.5-r0"
-                    ],
-                    "installedVersion": "3.5.0-r0",
-                    "packageName": "libcrypto3",
-                    "purl": "pkg:apk/alpine/libcrypto3@3.5.0-r0?arch=aarch64&distro=3.22.0",
-                    "references": [
-                      "https://access.redhat.com/errata/RHSA-2026:1472",
-                      "https://access.redhat.com/security/cve/CVE-2026-22795",
-                      "https://bugzilla.redhat.com/2430375",
-                      "https://bugzilla.redhat.com/2430376",
-                      "https://bugzilla.redhat.com/2430377",
-                      "https://bugzilla.redhat.com/2430378",
-                      "https://bugzilla.redhat.com/2430379",
-                      "https://bugzilla.redhat.com/2430380",
-                      "https://bugzilla.redhat.com/2430381",
-                      "https://bugzilla.redhat.com/2430386",
-                      "https://bugzilla.redhat.com/2430387",
-                      "https://bugzilla.redhat.com/2430388",
-                      "https://bugzilla.redhat.com/2430389",
-                      "https://bugzilla.redhat.com/2430390",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430375",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430376",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430377",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430378",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430379",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430380",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430381",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430386",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430387",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430388",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430389",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430390",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-11187",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-15467",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-15468",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-15469",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-66199",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-68160",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-69418",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-69419",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-69420",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-69421",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-22795",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-22796",
-                      "https://errata.almalinux.org/10/ALSA-2026-1472.html",
-                      "https://errata.rockylinux.org/RLSA-2026:1473",
-                      "https://github.com/openssl/openssl/commit/2502e7b7d4c0cf4f972a881641fe09edc67aeec4",
-                      "https://github.com/openssl/openssl/commit/572844beca95068394c916626a6d3a490f831a49",
-                      "https://github.com/openssl/openssl/commit/7bbca05be55b129651d9df4bdb92becc45002c12",
-                      "https://github.com/openssl/openssl/commit/eeee3cbd4d682095ed431052f00403004596373e",
-                      "https://github.com/openssl/openssl/commit/ef2fb66ec571564d64d1c74a12e388a2a54d05d2",
-                      "https://linux.oracle.com/cve/CVE-2026-22795.html",
-                      "https://linux.oracle.com/errata/ELSA-2026-50081.html",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2026-22795",
-                      "https://openssl-library.org/news/secadv/20260127.txt",
-                      "https://ubuntu.com/security/notices/USN-7980-1",
-                      "https://ubuntu.com/security/notices/USN-7980-2",
-                      "https://www.cve.org/CVERecord?id=CVE-2026-22795"
-                    ],
-                    "severity": "MEDIUM",
-                    "suppressed": false,
-                    "title": "openssl: OpenSSL: Denial of Service due to type confusion in PKCS#12 file processing"
-                  },
-                  {
-                    "cve": "CVE-2026-22796",
-                    "cvss": {
-                      "redhat": {
-                        "v3score": "5.9",
-                        "v3vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-754"
-                    ],
-                    "description": "Issue summary: A type confusion vulnerability exists in the signature\nverification of signed PKCS#7 data where an ASN1_TYPE union member is\naccessed without first validating the type, causing an invalid or NULL\npointer dereference when processing malformed PKCS#7 data.\n\nImpact summary: An application performing signature verification of PKCS#7\ndata or calling directly the PKCS7_digest_from_attributes() function can be\ncaused to dereference an invalid or NULL pointer when reading, resulting in\na Denial of Service.\n\nThe function PKCS7_digest_from_attributes() accesses the message digest attribute\nvalue without validating its type. When the type is not V_ASN1_OCTET_STRING,\nthis results in accessing invalid memory through the ASN1_TYPE union, causing\na crash.\n\nExploiting this vulnerability requires an attacker to provide a malformed\nsigned PKCS#7 to an application that verifies it. The impact of the\nexploit is just a Denial of Service, the PKCS7 API is legacy and applications\nshould be using the CMS API instead. For these reasons the issue was\nassessed as Low severity.\n\nThe FIPS modules in 3.5, 3.4, 3.3 and 3.0 are not affected by this issue,\nas the PKCS#7 parsing implementation is outside the OpenSSL FIPS module\nboundary.\n\nOpenSSL 3.6, 3.5, 3.4, 3.3, 3.0, 1.1.1 and 1.0.2 are vulnerable to this issue.",
-                    "diffID": "sha256:1231a673589ac9e2f8a98ed916d1fa8301b36a44dd14fc40eba5a05905da69f1",
-                    "fixedVersions": [
-                      "3.5.5-r0"
-                    ],
-                    "installedVersion": "3.5.0-r0",
-                    "packageName": "libcrypto3",
-                    "purl": "pkg:apk/alpine/libcrypto3@3.5.0-r0?arch=aarch64&distro=3.22.0",
-                    "references": [
-                      "https://access.redhat.com/errata/RHSA-2026:1472",
-                      "https://access.redhat.com/security/cve/CVE-2026-22796",
-                      "https://bugzilla.redhat.com/2430375",
-                      "https://bugzilla.redhat.com/2430376",
-                      "https://bugzilla.redhat.com/2430377",
-                      "https://bugzilla.redhat.com/2430378",
-                      "https://bugzilla.redhat.com/2430379",
-                      "https://bugzilla.redhat.com/2430380",
-                      "https://bugzilla.redhat.com/2430381",
-                      "https://bugzilla.redhat.com/2430386",
-                      "https://bugzilla.redhat.com/2430387",
-                      "https://bugzilla.redhat.com/2430388",
-                      "https://bugzilla.redhat.com/2430389",
-                      "https://bugzilla.redhat.com/2430390",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430375",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430376",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430377",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430378",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430379",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430380",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430381",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430386",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430387",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430388",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430389",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430390",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-11187",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-15467",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-15468",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-15469",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-66199",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-68160",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-69418",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-69419",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-69420",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-69421",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-22795",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-22796",
-                      "https://errata.almalinux.org/10/ALSA-2026-1472.html",
-                      "https://errata.rockylinux.org/RLSA-2026:1473",
-                      "https://github.com/openssl/openssl/commit/2502e7b7d4c0cf4f972a881641fe09edc67aeec4",
-                      "https://github.com/openssl/openssl/commit/572844beca95068394c916626a6d3a490f831a49",
-                      "https://github.com/openssl/openssl/commit/7bbca05be55b129651d9df4bdb92becc45002c12",
-                      "https://github.com/openssl/openssl/commit/eeee3cbd4d682095ed431052f00403004596373e",
-                      "https://github.com/openssl/openssl/commit/ef2fb66ec571564d64d1c74a12e388a2a54d05d2",
-                      "https://linux.oracle.com/cve/CVE-2026-22796.html",
-                      "https://linux.oracle.com/errata/ELSA-2026-50081.html",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2026-22796",
-                      "https://openssl-library.org/news/secadv/20260127.txt",
-                      "https://ubuntu.com/security/notices/USN-7980-1",
-                      "https://ubuntu.com/security/notices/USN-7980-2",
-                      "https://www.cve.org/CVERecord?id=CVE-2026-22796"
-                    ],
-                    "severity": "MEDIUM",
-                    "suppressed": false,
-                    "title": "openssl: OpenSSL: Denial of Service via type confusion in PKCS#7 signature verification"
-                  },
-                  {
-                    "cve": "CVE-2025-9232",
-                    "cvss": {
-                      "redhat": {
-                        "v3score": "3.1",
-                        "v3vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-125"
-                    ],
-                    "description": "Issue summary: An application using the OpenSSL HTTP client API functions may\ntrigger an out-of-bounds read if the 'no_proxy' environment variable is set and\nthe host portion of the authority component of the HTTP URL is an IPv6 address.\n\nImpact summary: An out-of-bounds read can trigger a crash which leads to\nDenial of Service for an application.\n\nThe OpenSSL HTTP client API functions can be used directly by applications\nbut they are also used by the OCSP client functions and CMP (Certificate\nManagement Protocol) client implementation in OpenSSL. However the URLs used\nby these implementations are unlikely to be controlled by an attacker.\n\nIn this vulnerable code the out of bounds read can only trigger a crash.\nFurthermore the vulnerability requires an attacker-controlled URL to be\npassed from an application to the OpenSSL function and the user has to have\na 'no_proxy' environment variable set. For the aforementioned reasons the\nissue was assessed as Low severity.\n\nThe vulnerable code was introduced in the following patch releases:\n3.0.16, 3.1.8, 3.2.4, 3.3.3, 3.4.0 and 3.5.0.\n\nThe FIPS modules in 3.5, 3.4, 3.3, 3.2, 3.1 and 3.0 are not affected by this\nissue, as the HTTP client implementation is outside the OpenSSL FIPS module\nboundary.",
-                    "diffID": "sha256:1231a673589ac9e2f8a98ed916d1fa8301b36a44dd14fc40eba5a05905da69f1",
-                    "fixedVersions": [
-                      "3.5.4-r0"
-                    ],
-                    "installedVersion": "3.5.0-r0",
-                    "packageName": "libcrypto3",
-                    "purl": "pkg:apk/alpine/libcrypto3@3.5.0-r0?arch=aarch64&distro=3.22.0",
-                    "references": [
-                      "http://www.openwall.com/lists/oss-security/2025/09/30/5",
-                      "https://access.redhat.com/security/cve/CVE-2025-9232",
-                      "https://github.com/openssl/openssl/commit/2b4ec20e47959170422922eaff25346d362dcb35",
-                      "https://github.com/openssl/openssl/commit/654dc11d23468a74fc8ea4672b702dd3feb7be4b",
-                      "https://github.com/openssl/openssl/commit/7cf21a30513c9e43c4bc3836c237cf086e194af3",
-                      "https://github.com/openssl/openssl/commit/89e790ac431125a4849992858490bed6b225eadf",
-                      "https://github.com/openssl/openssl/commit/bbf38c034cdabd0a13330abcc4855c866f53d2e0",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2025-9232",
-                      "https://openssl-library.org/news/secadv/20250930.txt",
-                      "https://ubuntu.com/security/notices/USN-7786-1",
-                      "https://ubuntu.com/security/notices/USN-7894-1",
-                      "https://www.cve.org/CVERecord?id=CVE-2025-9232"
-                    ],
-                    "severity": "LOW",
-                    "suppressed": false,
-                    "title": "openssl: Out-of-bounds read in HTTP client no_proxy handling"
-                  },
-                  {
-                    "cve": "CVE-2025-4575",
-                    "cwes": [
-                      "CWE-295"
-                    ],
-                    "description": "Issue summary: Use of -addreject option with the openssl x509 application adds\na trusted use instead of a rejected use for a certificate.\n\nImpact summary: If a user intends to make a trusted certificate rejected for\na particular use it will be instead marked as trusted for that use.\n\nA copy & paste error during minor refactoring of the code introduced this\nissue in the OpenSSL 3.5 version. If, for example, a trusted CA certificate\nshould be trusted only for the purpose of authenticating TLS servers but not\nfor CMS signature verification and the CMS signature verification is intended\nto be marked as rejected with the -addreject option, the resulting CA\ncertificate will be trusted for CMS signature verification purpose instead.\n\nOnly users which use the trusted certificate format who use the openssl x509\ncommand line application to add rejected uses are affected by this issue.\nThe issues affecting only the command line application are considered to\nbe Low severity.\n\nThe FIPS modules in 3.5, 3.4, 3.3, 3.2, 3.1 and 3.0 are not affected by this\nissue.\n\nOpenSSL 3.4, 3.3, 3.2, 3.1, 3.0, 1.1.1 and 1.0.2 are also not affected by this\nissue.",
-                    "diffID": "sha256:1231a673589ac9e2f8a98ed916d1fa8301b36a44dd14fc40eba5a05905da69f1",
-                    "fixedVersions": [
-                      "3.5.1-r0"
-                    ],
-                    "installedVersion": "3.5.0-r0",
-                    "packageName": "libcrypto3",
-                    "purl": "pkg:apk/alpine/libcrypto3@3.5.0-r0?arch=aarch64&distro=3.22.0",
-                    "references": [
-                      "http://www.openwall.com/lists/oss-security/2025/05/22/1",
-                      "https://github.com/openssl/openssl/commit/e96d22446e633d117e6c9904cb15b4693e956eaa",
-                      "https://openssl-library.org/news/secadv/20250522.txt"
-                    ],
-                    "severity": "UNKNOWN",
-                    "suppressed": false,
-                    "title": "Issue summary: Use of -addreject option with the openssl x509 applicat ..."
-                  },
-                  {
-                    "cve": "CVE-2025-15467",
-                    "cvss": {
-                      "redhat": {
-                        "v3score": "9.8",
-                        "v3vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-787"
-                    ],
-                    "description": "Issue summary: Parsing CMS AuthEnvelopedData message with maliciously\ncrafted AEAD parameters can trigger a stack buffer overflow.\n\nImpact summary: A stack buffer overflow may lead to a crash, causing Denial\nof Service, or potentially remote code execution.\n\nWhen parsing CMS AuthEnvelopedData structures that use AEAD ciphers such as\nAES-GCM, the IV (Initialization Vector) encoded in the ASN.1 parameters is\ncopied into a fixed-size stack buffer without verifying that its length fits\nthe destination. An attacker can supply a crafted CMS message with an\noversized IV, causing a stack-based out-of-bounds write before any\nauthentication or tag verification occurs.\n\nApplications and services that parse untrusted CMS or PKCS#7 content using\nAEAD ciphers (e.g., S/MIME AuthEnvelopedData with AES-GCM) are vulnerable.\nBecause the overflow occurs prior to authentication, no valid key material\nis required to trigger it. While exploitability to remote code execution\ndepends on platform and toolchain mitigations, the stack-based write\nprimitive represents a severe risk.\n\nThe FIPS modules in 3.6, 3.5, 3.4, 3.3 and 3.0 are not affected by this\nissue, as the CMS implementation is outside the OpenSSL FIPS module\nboundary.\n\nOpenSSL 3.6, 3.5, 3.4, 3.3 and 3.0 are vulnerable to this issue.\n\nOpenSSL 1.1.1 and 1.0.2 are not affected by this issue.",
-                    "diffID": "sha256:1231a673589ac9e2f8a98ed916d1fa8301b36a44dd14fc40eba5a05905da69f1",
-                    "fixedVersions": [
-                      "3.5.5-r0"
-                    ],
-                    "installedVersion": "3.5.0-r0",
-                    "packageName": "libssl3",
-                    "purl": "pkg:apk/alpine/libssl3@3.5.0-r0?arch=aarch64&distro=3.22.0",
-                    "references": [
-                      "http://www.openwall.com/lists/oss-security/2026/01/27/10",
-                      "https://access.redhat.com/errata/RHSA-2026:1472",
-                      "https://access.redhat.com/security/cve/CVE-2025-15467",
-                      "https://bugzilla.redhat.com/2430375",
-                      "https://bugzilla.redhat.com/2430376",
-                      "https://bugzilla.redhat.com/2430377",
-                      "https://bugzilla.redhat.com/2430378",
-                      "https://bugzilla.redhat.com/2430379",
-                      "https://bugzilla.redhat.com/2430380",
-                      "https://bugzilla.redhat.com/2430381",
-                      "https://bugzilla.redhat.com/2430386",
-                      "https://bugzilla.redhat.com/2430387",
-                      "https://bugzilla.redhat.com/2430388",
-                      "https://bugzilla.redhat.com/2430389",
-                      "https://bugzilla.redhat.com/2430390",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430375",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430376",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430377",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430378",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430379",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430380",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430381",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430386",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430387",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430388",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430389",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430390",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-11187",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-15467",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-15468",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-15469",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-66199",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-68160",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-69418",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-69419",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-69420",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-69421",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-22795",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-22796",
-                      "https://errata.almalinux.org/10/ALSA-2026-1472.html",
-                      "https://errata.rockylinux.org/RLSA-2026:1473",
-                      "https://github.com/openssl/openssl/commit/2c8f0e5fa9b6ee5508a0349e4572ddb74db5a703",
-                      "https://github.com/openssl/openssl/commit/5f26d4202f5b89664c5c3f3c62086276026ba9a9",
-                      "https://github.com/openssl/openssl/commit/6ced0fe6b10faa560e410e3ee8d6c82f06c65ea3",
-                      "https://github.com/openssl/openssl/commit/ce39170276daec87f55c39dad1f629b56344429e",
-                      "https://github.com/openssl/openssl/commit/d0071a0799f20cc8101730145349ed4487c268dc",
-                      "https://linux.oracle.com/cve/CVE-2025-15467.html",
-                      "https://linux.oracle.com/errata/ELSA-2026-50081.html",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2025-15467",
-                      "https://openssl-library.org/news/secadv/20260127.txt",
-                      "https://ubuntu.com/security/notices/USN-7980-1",
-                      "https://www.cve.org/CVERecord?id=CVE-2025-15467"
-                    ],
-                    "severity": "CRITICAL",
-                    "suppressed": false,
-                    "title": "openssl: OpenSSL: Remote code execution or Denial of Service via oversized Initialization Vector in CMS parsing"
-                  },
-                  {
-                    "cve": "CVE-2025-69419",
-                    "cvss": {
-                      "redhat": {
-                        "v3score": "7.4",
-                        "v3vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-787"
-                    ],
-                    "description": "Issue summary: Calling PKCS12_get_friendlyname() function on a maliciously\ncrafted PKCS#12 file with a BMPString (UTF-16BE) friendly name containing\nnon-ASCII BMP code point can trigger a one byte write before the allocated\nbuffer.\n\nImpact summary: The out-of-bounds write can cause a memory corruption\nwhich can have various consequences including a Denial of Service.\n\nThe OPENSSL_uni2utf8() function performs a two-pass conversion of a PKCS#12\nBMPString (UTF-16BE) to UTF-8. In the second pass, when emitting UTF-8 bytes,\nthe helper function bmp_to_utf8() incorrectly forwards the remaining UTF-16\nsource byte count as the destination buffer capacity to UTF8_putc(). For BMP\ncode points above U+07FF, UTF-8 requires three bytes, but the forwarded\ncapacity can be just two bytes. UTF8_putc() then returns -1, and this negative\nvalue is added to the output length without validation, causing the\nlength to become negative. The subsequent trailing NUL byte is then written\nat a negative offset, causing write outside of heap allocated buffer.\n\nThe vulnerability is reachable via the public PKCS12_get_friendlyname() API\nwhen parsing attacker-controlled PKCS#12 files. While PKCS12_parse() uses a\ndifferent code path that avoids this issue, PKCS12_get_friendlyname() directly\ninvokes the vulnerable function. Exploitation requires an attacker to provide\na malicious PKCS#12 file to be parsed by the application and the attacker\ncan just trigger a one zero byte write before the allocated buffer.\nFor that reason the issue was assessed as Low severity according to our\nSecurity Policy.\n\nThe FIPS modules in 3.6, 3.5, 3.4, 3.3 and 3.0 are not affected by this issue,\nas the PKCS#12 implementation is outside the OpenSSL FIPS module boundary.\n\nOpenSSL 3.6, 3.5, 3.4, 3.3, 3.0 and 1.1.1 are vulnerable to this issue.\n\nOpenSSL 1.0.2 is not affected by this issue.",
-                    "diffID": "sha256:1231a673589ac9e2f8a98ed916d1fa8301b36a44dd14fc40eba5a05905da69f1",
-                    "fixedVersions": [
-                      "3.5.5-r0"
-                    ],
-                    "installedVersion": "3.5.0-r0",
-                    "packageName": "libssl3",
-                    "purl": "pkg:apk/alpine/libssl3@3.5.0-r0?arch=aarch64&distro=3.22.0",
-                    "references": [
-                      "https://access.redhat.com/errata/RHSA-2026:1472",
-                      "https://access.redhat.com/security/cve/CVE-2025-69419",
-                      "https://bugzilla.redhat.com/2430375",
-                      "https://bugzilla.redhat.com/2430376",
-                      "https://bugzilla.redhat.com/2430377",
-                      "https://bugzilla.redhat.com/2430378",
-                      "https://bugzilla.redhat.com/2430379",
-                      "https://bugzilla.redhat.com/2430380",
-                      "https://bugzilla.redhat.com/2430381",
-                      "https://bugzilla.redhat.com/2430386",
-                      "https://bugzilla.redhat.com/2430387",
-                      "https://bugzilla.redhat.com/2430388",
-                      "https://bugzilla.redhat.com/2430389",
-                      "https://bugzilla.redhat.com/2430390",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430375",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430376",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430377",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430378",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430379",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430380",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430381",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430386",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430387",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430388",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430389",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430390",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-11187",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-15467",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-15468",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-15469",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-66199",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-68160",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-69418",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-69419",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-69420",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-69421",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-22795",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-22796",
-                      "https://errata.almalinux.org/10/ALSA-2026-1472.html",
-                      "https://errata.rockylinux.org/RLSA-2026:1473",
-                      "https://github.com/openssl/openssl/commit/41be0f216404f14457bbf3b9cc488dba60b49296",
-                      "https://github.com/openssl/openssl/commit/7e9cac9832e4705b91987c2474ed06a37a93cecb",
-                      "https://github.com/openssl/openssl/commit/a26a90d38edec3748566129d824e664b54bee2e2",
-                      "https://github.com/openssl/openssl/commit/cda12de3bc0e333ea8d2c6fd15001dbdaf280015",
-                      "https://github.com/openssl/openssl/commit/ff628933755075446bca8307e8417c14d164b535",
-                      "https://linux.oracle.com/cve/CVE-2025-69419.html",
-                      "https://linux.oracle.com/errata/ELSA-2026-50081.html",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2025-69419",
-                      "https://openssl-library.org/news/secadv/20260127.txt",
-                      "https://ubuntu.com/security/notices/USN-7980-1",
-                      "https://ubuntu.com/security/notices/USN-7980-2",
-                      "https://www.cve.org/CVERecord?id=CVE-2025-69419"
-                    ],
-                    "severity": "HIGH",
-                    "suppressed": false,
-                    "title": "openssl: OpenSSL: Arbitrary code execution due to out-of-bounds write in PKCS#12 processing"
-                  },
-                  {
-                    "cve": "CVE-2025-69421",
-                    "cvss": {
-                      "nvd": {
-                        "v3score": "7.5",
-                        "v3vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"
-                      },
-                      "redhat": {
-                        "v3score": "6.5",
-                        "v3vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-476"
-                    ],
-                    "description": "Issue summary: Processing a malformed PKCS#12 file can trigger a NULL pointer\ndereference in the PKCS12_item_decrypt_d2i_ex() function.\n\nImpact summary: A NULL pointer dereference can trigger a crash which leads to\nDenial of Service for an application processing PKCS#12 files.\n\nThe PKCS12_item_decrypt_d2i_ex() function does not check whether the oct\nparameter is NULL before dereferencing it. When called from\nPKCS12_unpack_p7encdata() with a malformed PKCS#12 file, this parameter can\nbe NULL, causing a crash. The vulnerability is limited to Denial of Service\nand cannot be escalated to achieve code execution or memory disclosure.\n\nExploiting this issue requires an attacker to provide a malformed PKCS#12 file\nto an application that processes it. For that reason the issue was assessed as\nLow severity according to our Security Policy.\n\nThe FIPS modules in 3.6, 3.5, 3.4, 3.3 and 3.0 are not affected by this issue,\nas the PKCS#12 implementation is outside the OpenSSL FIPS module boundary.\n\nOpenSSL 3.6, 3.5, 3.4, 3.3, 3.0, 1.1.1 and 1.0.2 are vulnerable to this issue.",
-                    "diffID": "sha256:1231a673589ac9e2f8a98ed916d1fa8301b36a44dd14fc40eba5a05905da69f1",
-                    "fixedVersions": [
-                      "3.5.5-r0"
-                    ],
-                    "installedVersion": "3.5.0-r0",
-                    "packageName": "libssl3",
-                    "purl": "pkg:apk/alpine/libssl3@3.5.0-r0?arch=aarch64&distro=3.22.0",
-                    "references": [
-                      "https://access.redhat.com/errata/RHSA-2026:1472",
-                      "https://access.redhat.com/security/cve/CVE-2025-69421",
-                      "https://bugzilla.redhat.com/2430375",
-                      "https://bugzilla.redhat.com/2430376",
-                      "https://bugzilla.redhat.com/2430377",
-                      "https://bugzilla.redhat.com/2430378",
-                      "https://bugzilla.redhat.com/2430379",
-                      "https://bugzilla.redhat.com/2430380",
-                      "https://bugzilla.redhat.com/2430381",
-                      "https://bugzilla.redhat.com/2430386",
-                      "https://bugzilla.redhat.com/2430387",
-                      "https://bugzilla.redhat.com/2430388",
-                      "https://bugzilla.redhat.com/2430389",
-                      "https://bugzilla.redhat.com/2430390",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430375",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430376",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430377",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430378",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430379",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430380",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430381",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430386",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430387",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430388",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430389",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430390",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-11187",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-15467",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-15468",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-15469",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-66199",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-68160",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-69418",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-69419",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-69420",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-69421",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-22795",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-22796",
-                      "https://errata.almalinux.org/10/ALSA-2026-1472.html",
-                      "https://errata.rockylinux.org/RLSA-2026:1473",
-                      "https://github.com/openssl/openssl/commit/3524a29271f8191b8fd8a5257eb05173982a097b",
-                      "https://github.com/openssl/openssl/commit/36ecb4960872a4ce04bf6f1e1f4e78d75ec0c0c7",
-                      "https://github.com/openssl/openssl/commit/4bbc8d41a72c842ce4077a8a3eccd1109aaf74bd",
-                      "https://github.com/openssl/openssl/commit/643986985cd1c21221f941129d76fe0c2785aeb3",
-                      "https://github.com/openssl/openssl/commit/a2dbc539f0f9cc63832709fa5aa33ad9495eb19c",
-                      "https://linux.oracle.com/cve/CVE-2025-69421.html",
-                      "https://linux.oracle.com/errata/ELSA-2026-50081.html",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2025-69421",
-                      "https://openssl-library.org/news/secadv/20260127.txt",
-                      "https://ubuntu.com/security/notices/USN-7980-1",
-                      "https://ubuntu.com/security/notices/USN-7980-2",
-                      "https://www.cve.org/CVERecord?id=CVE-2025-69421"
-                    ],
-                    "severity": "HIGH",
-                    "suppressed": false,
-                    "title": "openssl: OpenSSL: Denial of Service via malformed PKCS#12 file processing"
-                  },
-                  {
-                    "cve": "CVE-2025-11187",
-                    "cvss": {
-                      "redhat": {
-                        "v3score": "6.1",
-                        "v3vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:H"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-476",
-                      "CWE-787"
-                    ],
-                    "description": "Issue summary: PBMAC1 parameters in PKCS#12 files are missing validation\nwhich can trigger a stack-based buffer overflow, invalid pointer or NULL\npointer dereference during MAC verification.\n\nImpact summary: The stack buffer overflow or NULL pointer dereference may\ncause a crash leading to Denial of Service for an application that parses\nuntrusted PKCS#12 files. The buffer overflow may also potentially enable\ncode execution depending on platform mitigations.\n\nWhen verifying a PKCS#12 file that uses PBMAC1 for the MAC, the PBKDF2\nsalt and keylength parameters from the file are used without validation.\nIf the value of keylength exceeds the size of the fixed stack buffer used\nfor the derived key (64 bytes), the key derivation will overflow the buffer.\nThe overflow length is attacker-controlled. Also, if the salt parameter is\nnot an OCTET STRING type this can lead to invalid or NULL pointer\ndereference.\n\nExploiting this issue requires a user or application to process\na maliciously crafted PKCS#12 file. It is uncommon to accept untrusted\nPKCS#12 files in applications as they are usually used to store private\nkeys which are trusted by definition. For this reason the issue was assessed\nas Moderate severity.\n\nThe FIPS modules in 3.6, 3.5 and 3.4 are not affected by this issue, as\nPKCS#12 processing is outside the OpenSSL FIPS module boundary.\n\nOpenSSL 3.6, 3.5 and 3.4 are vulnerable to this issue.\n\nOpenSSL 3.3, 3.0, 1.1.1 and 1.0.2 are not affected by this issue as they do\nnot support PBMAC1 in PKCS#12.",
-                    "diffID": "sha256:1231a673589ac9e2f8a98ed916d1fa8301b36a44dd14fc40eba5a05905da69f1",
-                    "fixedVersions": [
-                      "3.5.5-r0"
-                    ],
-                    "installedVersion": "3.5.0-r0",
-                    "packageName": "libssl3",
-                    "purl": "pkg:apk/alpine/libssl3@3.5.0-r0?arch=aarch64&distro=3.22.0",
-                    "references": [
-                      "https://access.redhat.com/errata/RHSA-2026:1472",
-                      "https://access.redhat.com/security/cve/CVE-2025-11187",
-                      "https://bugzilla.redhat.com/2430375",
-                      "https://bugzilla.redhat.com/2430376",
-                      "https://bugzilla.redhat.com/2430377",
-                      "https://bugzilla.redhat.com/2430378",
-                      "https://bugzilla.redhat.com/2430379",
-                      "https://bugzilla.redhat.com/2430380",
-                      "https://bugzilla.redhat.com/2430381",
-                      "https://bugzilla.redhat.com/2430386",
-                      "https://bugzilla.redhat.com/2430387",
-                      "https://bugzilla.redhat.com/2430388",
-                      "https://bugzilla.redhat.com/2430389",
-                      "https://bugzilla.redhat.com/2430390",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430375",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430376",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430377",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430378",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430379",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430380",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430381",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430386",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430387",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430388",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430389",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430390",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-11187",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-15467",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-15468",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-15469",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-66199",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-68160",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-69418",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-69419",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-69420",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-69421",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-22795",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-22796",
-                      "https://errata.almalinux.org/10/ALSA-2026-1472.html",
-                      "https://errata.rockylinux.org/RLSA-2026:1473",
-                      "https://github.com/openssl/openssl/commit/205e3a55e16e4bd08c12fdbd3416ab829c0f6206",
-                      "https://github.com/openssl/openssl/commit/8caf359d6e46fb413e8f5f0df765d2e8a51df4e8",
-                      "https://github.com/openssl/openssl/commit/e1079bc17ed93ff16f6b86f33a2fe3336e78817e",
-                      "https://linux.oracle.com/cve/CVE-2025-11187.html",
-                      "https://linux.oracle.com/errata/ELSA-2026-50081.html",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2025-11187",
-                      "https://openssl-library.org/news/secadv/20260127.txt",
-                      "https://ubuntu.com/security/notices/USN-7980-1",
-                      "https://www.cve.org/CVERecord?id=CVE-2025-11187"
-                    ],
-                    "severity": "MEDIUM",
-                    "suppressed": false,
-                    "title": "openssl: OpenSSL: Arbitrary code execution or denial of service through crafted PKCS#12 file"
-                  },
-                  {
-                    "cve": "CVE-2025-15468",
-                    "cvss": {
-                      "redhat": {
-                        "v3score": "5.9",
-                        "v3vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-476"
-                    ],
-                    "description": "Issue summary: If an application using the SSL_CIPHER_find() function in\na QUIC protocol client or server receives an unknown cipher suite from\nthe peer, a NULL dereference occurs.\n\nImpact summary: A NULL pointer dereference leads to abnormal termination of\nthe running process causing Denial of Service.\n\nSome applications call SSL_CIPHER_find() from the client_hello_cb callback\non the cipher ID received from the peer. If this is done with an SSL object\nimplementing the QUIC protocol, NULL pointer dereference will happen if\nthe examined cipher ID is unknown or unsupported.\n\nAs it is not very common to call this function in applications using the QUIC \nprotocol and the worst outcome is Denial of Service, the issue was assessed\nas Low severity.\n\nThe vulnerable code was introduced in the 3.2 version with the addition\nof the QUIC protocol support.\n\nThe FIPS modules in 3.6, 3.5, 3.4 and 3.3 are not affected by this issue,\nas the QUIC implementation is outside the OpenSSL FIPS module boundary.\n\nOpenSSL 3.6, 3.5, 3.4 and 3.3 are vulnerable to this issue.\n\nOpenSSL 3.0, 1.1.1 and 1.0.2 are not affected by this issue.",
-                    "diffID": "sha256:1231a673589ac9e2f8a98ed916d1fa8301b36a44dd14fc40eba5a05905da69f1",
-                    "fixedVersions": [
-                      "3.5.5-r0"
-                    ],
-                    "installedVersion": "3.5.0-r0",
-                    "packageName": "libssl3",
-                    "purl": "pkg:apk/alpine/libssl3@3.5.0-r0?arch=aarch64&distro=3.22.0",
-                    "references": [
-                      "https://access.redhat.com/errata/RHSA-2026:1472",
-                      "https://access.redhat.com/security/cve/CVE-2025-15468",
-                      "https://bugzilla.redhat.com/2430375",
-                      "https://bugzilla.redhat.com/2430376",
-                      "https://bugzilla.redhat.com/2430377",
-                      "https://bugzilla.redhat.com/2430378",
-                      "https://bugzilla.redhat.com/2430379",
-                      "https://bugzilla.redhat.com/2430380",
-                      "https://bugzilla.redhat.com/2430381",
-                      "https://bugzilla.redhat.com/2430386",
-                      "https://bugzilla.redhat.com/2430387",
-                      "https://bugzilla.redhat.com/2430388",
-                      "https://bugzilla.redhat.com/2430389",
-                      "https://bugzilla.redhat.com/2430390",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430375",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430376",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430377",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430378",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430379",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430380",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430381",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430386",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430387",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430388",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430389",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430390",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-11187",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-15467",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-15468",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-15469",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-66199",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-68160",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-69418",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-69419",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-69420",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-69421",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-22795",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-22796",
-                      "https://errata.almalinux.org/10/ALSA-2026-1472.html",
-                      "https://errata.rockylinux.org/RLSA-2026:1473",
-                      "https://github.com/openssl/openssl/commit/1f08e54bad32843044fe8a675948d65e3b4ece65",
-                      "https://github.com/openssl/openssl/commit/7c88376731c589ee5b36116c5a6e32d5ae5f7ae2",
-                      "https://github.com/openssl/openssl/commit/b2539639400288a4580fe2d76247541b976bade4",
-                      "https://github.com/openssl/openssl/commit/d75b309879631d45b972396ce4e5102559c64ac7",
-                      "https://linux.oracle.com/cve/CVE-2025-15468.html",
-                      "https://linux.oracle.com/errata/ELSA-2026-50081.html",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2025-15468",
-                      "https://openssl-library.org/news/secadv/20260127.txt",
-                      "https://ubuntu.com/security/notices/USN-7980-1",
-                      "https://www.cve.org/CVERecord?id=CVE-2025-15468"
-                    ],
-                    "severity": "MEDIUM",
-                    "suppressed": false,
-                    "title": "openssl: OpenSSL: Denial of Service via NULL pointer dereference in QUIC protocol handling"
-                  },
-                  {
-                    "cve": "CVE-2025-15469",
-                    "cvss": {
-                      "redhat": {
-                        "v3score": "5.5",
-                        "v3vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-347"
-                    ],
-                    "description": "Issue summary: The 'openssl dgst' command-line tool silently truncates input\ndata to 16MB when using one-shot signing algorithms and reports success instead\nof an error.\n\nImpact summary: A user signing or verifying files larger than 16MB with\none-shot algorithms (such as Ed25519, Ed448, or ML-DSA) may believe the entire\nfile is authenticated while trailing data beyond 16MB remains unauthenticated.\n\nWhen the 'openssl dgst' command is used with algorithms that only support\none-shot signing (Ed25519, Ed448, ML-DSA-44, ML-DSA-65, ML-DSA-87), the input\nis buffered with a 16MB limit. If the input exceeds this limit, the tool\nsilently truncates to the first 16MB and continues without signaling an error,\ncontrary to what the documentation states. This creates an integrity gap where\ntrailing bytes can be modified without detection if both signing and\nverification are performed using the same affected codepath.\n\nThe issue affects only the command-line tool behavior. Verifiers that process\nthe full message using library APIs will reject the signature, so the risk\nprimarily affects workflows that both sign and verify with the affected\n'openssl dgst' command. Streaming digest algorithms for 'openssl dgst' and\nlibrary users are unaffected.\n\nThe FIPS modules in 3.5 and 3.6 are not affected by this issue, as the\ncommand-line tools are outside the OpenSSL FIPS module boundary.\n\nOpenSSL 3.5 and 3.6 are vulnerable to this issue.\n\nOpenSSL 3.4, 3.3, 3.0, 1.1.1 and 1.0.2 are not affected by this issue.",
-                    "diffID": "sha256:1231a673589ac9e2f8a98ed916d1fa8301b36a44dd14fc40eba5a05905da69f1",
-                    "fixedVersions": [
-                      "3.5.5-r0"
-                    ],
-                    "installedVersion": "3.5.0-r0",
-                    "packageName": "libssl3",
-                    "purl": "pkg:apk/alpine/libssl3@3.5.0-r0?arch=aarch64&distro=3.22.0",
-                    "references": [
-                      "https://access.redhat.com/errata/RHSA-2026:1472",
-                      "https://access.redhat.com/security/cve/CVE-2025-15469",
-                      "https://bugzilla.redhat.com/2430375",
-                      "https://bugzilla.redhat.com/2430376",
-                      "https://bugzilla.redhat.com/2430377",
-                      "https://bugzilla.redhat.com/2430378",
-                      "https://bugzilla.redhat.com/2430379",
-                      "https://bugzilla.redhat.com/2430380",
-                      "https://bugzilla.redhat.com/2430381",
-                      "https://bugzilla.redhat.com/2430386",
-                      "https://bugzilla.redhat.com/2430387",
-                      "https://bugzilla.redhat.com/2430388",
-                      "https://bugzilla.redhat.com/2430389",
-                      "https://bugzilla.redhat.com/2430390",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430375",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430376",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430377",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430378",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430379",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430380",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430381",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430386",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430387",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430388",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430389",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430390",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-11187",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-15467",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-15468",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-15469",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-66199",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-68160",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-69418",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-69419",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-69420",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-69421",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-22795",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-22796",
-                      "https://errata.almalinux.org/10/ALSA-2026-1472.html",
-                      "https://errata.rockylinux.org/RLSA-2026:1473",
-                      "https://github.com/openssl/openssl/commit/310f305eb92ea8040d6b3cb75a5feeba8e6acf2f",
-                      "https://github.com/openssl/openssl/commit/a7936fa4bd23c906e1955a16a0a0ab39a4953a61",
-                      "https://linux.oracle.com/cve/CVE-2025-15469.html",
-                      "https://linux.oracle.com/errata/ELSA-2026-50081.html",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2025-15469",
-                      "https://openssl-library.org/news/secadv/20260127.txt",
-                      "https://ubuntu.com/security/notices/USN-7980-1",
-                      "https://www.cve.org/CVERecord?id=CVE-2025-15469"
-                    ],
-                    "severity": "MEDIUM",
-                    "suppressed": false,
-                    "title": "openssl: OpenSSL: Data integrity bypass in `openssl dgst` command due to silent truncation"
-                  },
-                  {
-                    "cve": "CVE-2025-66199",
-                    "cvss": {
-                      "redhat": {
-                        "v3score": "5.9",
-                        "v3vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-789"
-                    ],
-                    "description": "Issue summary: A TLS 1.3 connection using certificate compression can be\nforced to allocate a large buffer before decompression without checking\nagainst the configured certificate size limit.\n\nImpact summary: An attacker can cause per-connection memory allocations of\nup to approximately 22 MiB and extra CPU work, potentially leading to\nservice degradation or resource exhaustion (Denial of Service).\n\nIn affected configurations, the peer-supplied uncompressed certificate\nlength from a CompressedCertificate message is used to grow a heap buffer\nprior to decompression. This length is not bounded by the max_cert_list\nsetting, which otherwise constrains certificate message sizes. An attacker\ncan exploit this to cause large per-connection allocations followed by\nhandshake failure. No memory corruption or information disclosure occurs.\n\nThis issue only affects builds where TLS 1.3 certificate compression is\ncompiled in (i.e., not OPENSSL_NO_COMP_ALG) and at least one compression\nalgorithm (brotli, zlib, or zstd) is available, and where the compression\nextension is negotiated. Both clients receiving a server CompressedCertificate\nand servers in mutual TLS scenarios receiving a client CompressedCertificate\nare affected. Servers that do not request client certificates are not\nvulnerable to client-initiated attacks.\n\nUsers can mitigate this issue by setting SSL_OP_NO_RX_CERTIFICATE_COMPRESSION\nto disable receiving compressed certificates.\n\nThe FIPS modules in 3.6, 3.5, 3.4 and 3.3 are not affected by this issue,\nas the TLS implementation is outside the OpenSSL FIPS module boundary.\n\nOpenSSL 3.6, 3.5, 3.4 and 3.3 are vulnerable to this issue.\n\nOpenSSL 3.0, 1.1.1 and 1.0.2 are not affected by this issue.",
-                    "diffID": "sha256:1231a673589ac9e2f8a98ed916d1fa8301b36a44dd14fc40eba5a05905da69f1",
-                    "fixedVersions": [
-                      "3.5.5-r0"
-                    ],
-                    "installedVersion": "3.5.0-r0",
-                    "packageName": "libssl3",
-                    "purl": "pkg:apk/alpine/libssl3@3.5.0-r0?arch=aarch64&distro=3.22.0",
-                    "references": [
-                      "https://access.redhat.com/errata/RHSA-2026:1472",
-                      "https://access.redhat.com/security/cve/CVE-2025-66199",
-                      "https://bugzilla.redhat.com/2430375",
-                      "https://bugzilla.redhat.com/2430376",
-                      "https://bugzilla.redhat.com/2430377",
-                      "https://bugzilla.redhat.com/2430378",
-                      "https://bugzilla.redhat.com/2430379",
-                      "https://bugzilla.redhat.com/2430380",
-                      "https://bugzilla.redhat.com/2430381",
-                      "https://bugzilla.redhat.com/2430386",
-                      "https://bugzilla.redhat.com/2430387",
-                      "https://bugzilla.redhat.com/2430388",
-                      "https://bugzilla.redhat.com/2430389",
-                      "https://bugzilla.redhat.com/2430390",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430375",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430376",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430377",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430378",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430379",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430380",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430381",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430386",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430387",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430388",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430389",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430390",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-11187",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-15467",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-15468",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-15469",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-66199",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-68160",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-69418",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-69419",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-69420",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-69421",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-22795",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-22796",
-                      "https://errata.almalinux.org/10/ALSA-2026-1472.html",
-                      "https://errata.rockylinux.org/RLSA-2026:1473",
-                      "https://github.com/openssl/openssl/commit/3ed1f75249932b155eef993a8e66a99cb98bfef4",
-                      "https://github.com/openssl/openssl/commit/6184a4fb08ee6d7bca570d931a4e8bef40b64451",
-                      "https://github.com/openssl/openssl/commit/895150b5e021d16b52fb32b97e1dd12f20448be5",
-                      "https://github.com/openssl/openssl/commit/966a2478046c311ed7dae50c457d0db4cafbf7e4",
-                      "https://linux.oracle.com/cve/CVE-2025-66199.html",
-                      "https://linux.oracle.com/errata/ELSA-2026-50081.html",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2025-66199",
-                      "https://openssl-library.org/news/secadv/20260127.txt",
-                      "https://ubuntu.com/security/notices/USN-7980-1",
-                      "https://www.cve.org/CVERecord?id=CVE-2025-66199"
-                    ],
-                    "severity": "MEDIUM",
-                    "suppressed": false,
-                    "title": "openssl: OpenSSL: Denial of Service due to excessive memory allocation in TLS 1.3 certificate compression"
-                  },
-                  {
-                    "cve": "CVE-2025-68160",
-                    "cvss": {
-                      "redhat": {
-                        "v3score": "4.7",
-                        "v3vector": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-787"
-                    ],
-                    "description": "Issue summary: Writing large, newline-free data into a BIO chain using the\nline-buffering filter where the next BIO performs short writes can trigger\na heap-based out-of-bounds write.\n\nImpact summary: This out-of-bounds write can cause memory corruption which\ntypically results in a crash, leading to Denial of Service for an application.\n\nThe line-buffering BIO filter (BIO_f_linebuffer) is not used by default in\nTLS/SSL data paths. In OpenSSL command-line applications, it is typically\nonly pushed onto stdout/stderr on VMS systems. Third-party applications that\nexplicitly use this filter with a BIO chain that can short-write and that\nwrite large, newline-free data influenced by an attacker would be affected.\nHowever, the circumstances where this could happen are unlikely to be under\nattacker control, and BIO_f_linebuffer is unlikely to be handling non-curated\ndata controlled by an attacker. For that reason the issue was assessed as\nLow severity.\n\nThe FIPS modules in 3.6, 3.5, 3.4, 3.3 and 3.0 are not affected by this issue,\nas the BIO implementation is outside the OpenSSL FIPS module boundary.\n\nOpenSSL 3.6, 3.5, 3.4, 3.3, 3.0, 1.1.1 and 1.0.2 are vulnerable to this issue.",
-                    "diffID": "sha256:1231a673589ac9e2f8a98ed916d1fa8301b36a44dd14fc40eba5a05905da69f1",
-                    "fixedVersions": [
-                      "3.5.5-r0"
-                    ],
-                    "installedVersion": "3.5.0-r0",
-                    "packageName": "libssl3",
-                    "purl": "pkg:apk/alpine/libssl3@3.5.0-r0?arch=aarch64&distro=3.22.0",
-                    "references": [
-                      "https://access.redhat.com/errata/RHSA-2026:1472",
-                      "https://access.redhat.com/security/cve/CVE-2025-68160",
-                      "https://bugzilla.redhat.com/2430375",
-                      "https://bugzilla.redhat.com/2430376",
-                      "https://bugzilla.redhat.com/2430377",
-                      "https://bugzilla.redhat.com/2430378",
-                      "https://bugzilla.redhat.com/2430379",
-                      "https://bugzilla.redhat.com/2430380",
-                      "https://bugzilla.redhat.com/2430381",
-                      "https://bugzilla.redhat.com/2430386",
-                      "https://bugzilla.redhat.com/2430387",
-                      "https://bugzilla.redhat.com/2430388",
-                      "https://bugzilla.redhat.com/2430389",
-                      "https://bugzilla.redhat.com/2430390",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430375",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430376",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430377",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430378",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430379",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430380",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430381",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430386",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430387",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430388",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430389",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430390",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-11187",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-15467",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-15468",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-15469",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-66199",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-68160",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-69418",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-69419",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-69420",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-69421",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-22795",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-22796",
-                      "https://errata.almalinux.org/10/ALSA-2026-1472.html",
-                      "https://errata.rockylinux.org/RLSA-2026:1473",
-                      "https://github.com/openssl/openssl/commit/384011202af92605d926fafe4a0bcd6b65d162ad",
-                      "https://github.com/openssl/openssl/commit/475c466ef2fbd8fc1df6fae1c3eed9c813fc8ff6",
-                      "https://github.com/openssl/openssl/commit/4c96fbba618e1940f038012506ee9e21d32ee12c",
-                      "https://github.com/openssl/openssl/commit/6845c3b6460a98b1ec4e463baa2ea1a63a32d7c0",
-                      "https://github.com/openssl/openssl/commit/68a7cd2e2816c3a02f4d45a2ce43fc04fac97096",
-                      "https://linux.oracle.com/cve/CVE-2025-68160.html",
-                      "https://linux.oracle.com/errata/ELSA-2026-50081.html",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2025-68160",
-                      "https://openssl-library.org/news/secadv/20260127.txt",
-                      "https://ubuntu.com/security/notices/USN-7980-1",
-                      "https://ubuntu.com/security/notices/USN-7980-2",
-                      "https://www.cve.org/CVERecord?id=CVE-2025-68160"
-                    ],
-                    "severity": "MEDIUM",
-                    "suppressed": false,
-                    "title": "openssl: OpenSSL: Denial of Service due to out-of-bounds write in BIO filter"
-                  },
-                  {
-                    "cve": "CVE-2025-69418",
-                    "cvss": {
-                      "redhat": {
-                        "v3score": "4",
-                        "v3vector": "CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-325"
-                    ],
-                    "description": "Issue summary: When using the low-level OCB API directly with AES-NI or<br>other hardware-accelerated code paths, inputs whose length is not a multiple<br>of 16 bytes can leave the final partial block unencrypted and unauthenticated.<br><br>Impact summary: The trailing 1-15 bytes of a message may be exposed in<br>cleartext on encryption and are not covered by the authentication tag,<br>allowing an attacker to read or tamper with those bytes without detection.<br><br>The low-level OCB encrypt and decrypt routines in the hardware-accelerated<br>stream path process full 16-byte blocks but do not advance the input/output<br>pointers. The subsequent tail-handling code then operates on the original<br>base pointers, effectively reprocessing the beginning of the buffer while<br>leaving the actual trailing bytes unprocessed. The authentication checksum<br>also excludes the true tail bytes.<br><br>However, typical OpenSSL consumers using EVP are not affected because the<br>higher-level EVP and provider OCB implementations split inputs so that full<br>blocks and trailing partial blocks are processed in separate calls, avoiding<br>the problematic code path. Additionally, TLS does not use OCB ciphersuites.<br>The vulnerability only affects applications that call the low-level<br>CRYPTO_ocb128_encrypt() or CRYPTO_ocb128_decrypt() functions directly with<br>non-block-aligned lengths in a single call on hardware-accelerated builds.<br>For these reasons the issue was assessed as Low severity.<br><br>The FIPS modules in 3.6, 3.5, 3.4, 3.3, 3.2, 3.1 and 3.0 are not affected<br>by this issue, as OCB mode is not a FIPS-approved algorithm.<br><br>OpenSSL 3.6, 3.5, 3.4, 3.3, 3.0 and 1.1.1 are vulnerable to this issue.<br><br>OpenSSL 1.0.2 is not affected by this issue.",
-                    "diffID": "sha256:1231a673589ac9e2f8a98ed916d1fa8301b36a44dd14fc40eba5a05905da69f1",
-                    "fixedVersions": [
-                      "3.5.5-r0"
-                    ],
-                    "installedVersion": "3.5.0-r0",
-                    "packageName": "libssl3",
-                    "purl": "pkg:apk/alpine/libssl3@3.5.0-r0?arch=aarch64&distro=3.22.0",
-                    "references": [
-                      "https://access.redhat.com/errata/RHSA-2026:1472",
-                      "https://access.redhat.com/security/cve/CVE-2025-69418",
-                      "https://bugzilla.redhat.com/2430375",
-                      "https://bugzilla.redhat.com/2430376",
-                      "https://bugzilla.redhat.com/2430377",
-                      "https://bugzilla.redhat.com/2430378",
-                      "https://bugzilla.redhat.com/2430379",
-                      "https://bugzilla.redhat.com/2430380",
-                      "https://bugzilla.redhat.com/2430381",
-                      "https://bugzilla.redhat.com/2430386",
-                      "https://bugzilla.redhat.com/2430387",
-                      "https://bugzilla.redhat.com/2430388",
-                      "https://bugzilla.redhat.com/2430389",
-                      "https://bugzilla.redhat.com/2430390",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430375",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430376",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430377",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430378",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430379",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430380",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430381",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430386",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430387",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430388",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430389",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430390",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-11187",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-15467",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-15468",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-15469",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-66199",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-68160",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-69418",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-69419",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-69420",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-69421",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-22795",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-22796",
-                      "https://errata.almalinux.org/10/ALSA-2026-1472.html",
-                      "https://errata.rockylinux.org/RLSA-2026:1473",
-                      "https://github.com/openssl/openssl/commit/372fc5c77529695b05b4f5b5187691a57ef5dffc",
-                      "https://github.com/openssl/openssl/commit/4016975d4469cd6b94927c607f7c511385f928d8",
-                      "https://github.com/openssl/openssl/commit/52d23c86a54adab5ee9f80e48b242b52c4cc2347",
-                      "https://github.com/openssl/openssl/commit/a7589230356d908c0eca4b969ec4f62106f4f5ae",
-                      "https://github.com/openssl/openssl/commit/ed40856d7d4ba6cb42779b6770666a65f19cb977",
-                      "https://linux.oracle.com/cve/CVE-2025-69418.html",
-                      "https://linux.oracle.com/errata/ELSA-2026-50081.html",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2025-69418",
-                      "https://openssl-library.org/news/secadv/20260127.txt",
-                      "https://ubuntu.com/security/notices/USN-7980-1",
-                      "https://ubuntu.com/security/notices/USN-7980-2",
-                      "https://www.cve.org/CVERecord?id=CVE-2025-69418"
-                    ],
-                    "severity": "MEDIUM",
-                    "suppressed": false,
-                    "title": "openssl: OpenSSL: Information disclosure and data tampering via specific low-level OCB encryption/decryption calls"
-                  },
-                  {
-                    "cve": "CVE-2025-69420",
-                    "cvss": {
-                      "redhat": {
-                        "v3score": "5.9",
-                        "v3vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-754"
-                    ],
-                    "description": "Issue summary: A type confusion vulnerability exists in the TimeStamp Response\nverification code where an ASN1_TYPE union member is accessed without first\nvalidating the type, causing an invalid or NULL pointer dereference when\nprocessing a malformed TimeStamp Response file.\n\nImpact summary: An application calling TS_RESP_verify_response() with a\nmalformed TimeStamp Response can be caused to dereference an invalid or\nNULL pointer when reading, resulting in a Denial of Service.\n\nThe functions ossl_ess_get_signing_cert() and ossl_ess_get_signing_cert_v2()\naccess the signing cert attribute value without validating its type.\nWhen the type is not V_ASN1_SEQUENCE, this results in accessing invalid memory\nthrough the ASN1_TYPE union, causing a crash.\n\nExploiting this vulnerability requires an attacker to provide a malformed\nTimeStamp Response to an application that verifies timestamp responses. The\nTimeStamp protocol (RFC 3161) is not widely used and the impact of the\nexploit is just a Denial of Service. For these reasons the issue was\nassessed as Low severity.\n\nThe FIPS modules in 3.5, 3.4, 3.3 and 3.0 are not affected by this issue,\nas the TimeStamp Response implementation is outside the OpenSSL FIPS module\nboundary.\n\nOpenSSL 3.6, 3.5, 3.4, 3.3, 3.0 and 1.1.1 are vulnerable to this issue.\n\nOpenSSL 1.0.2 is not affected by this issue.",
-                    "diffID": "sha256:1231a673589ac9e2f8a98ed916d1fa8301b36a44dd14fc40eba5a05905da69f1",
-                    "fixedVersions": [
-                      "3.5.5-r0"
-                    ],
-                    "installedVersion": "3.5.0-r0",
-                    "packageName": "libssl3",
-                    "purl": "pkg:apk/alpine/libssl3@3.5.0-r0?arch=aarch64&distro=3.22.0",
-                    "references": [
-                      "https://access.redhat.com/errata/RHSA-2026:1472",
-                      "https://access.redhat.com/security/cve/CVE-2025-69420",
-                      "https://bugzilla.redhat.com/2430375",
-                      "https://bugzilla.redhat.com/2430376",
-                      "https://bugzilla.redhat.com/2430377",
-                      "https://bugzilla.redhat.com/2430378",
-                      "https://bugzilla.redhat.com/2430379",
-                      "https://bugzilla.redhat.com/2430380",
-                      "https://bugzilla.redhat.com/2430381",
-                      "https://bugzilla.redhat.com/2430386",
-                      "https://bugzilla.redhat.com/2430387",
-                      "https://bugzilla.redhat.com/2430388",
-                      "https://bugzilla.redhat.com/2430389",
-                      "https://bugzilla.redhat.com/2430390",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430375",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430376",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430377",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430378",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430379",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430380",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430381",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430386",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430387",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430388",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430389",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430390",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-11187",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-15467",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-15468",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-15469",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-66199",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-68160",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-69418",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-69419",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-69420",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-69421",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-22795",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-22796",
-                      "https://errata.almalinux.org/10/ALSA-2026-1472.html",
-                      "https://errata.rockylinux.org/RLSA-2026:1473",
-                      "https://github.com/openssl/openssl/commit/27c7012c91cc986a598d7540f3079dfde2416eb9",
-                      "https://github.com/openssl/openssl/commit/4e254b48ad93cc092be3dd62d97015f33f73133a",
-                      "https://github.com/openssl/openssl/commit/564fd9c73787f25693bf9e75faf7bf6bb1305d4e",
-                      "https://github.com/openssl/openssl/commit/5eb0770ffcf11b785cf374ff3c19196245e54f1b",
-                      "https://github.com/openssl/openssl/commit/a99349ebfc519999edc50620abe24d599b9eb085",
-                      "https://linux.oracle.com/cve/CVE-2025-69420.html",
-                      "https://linux.oracle.com/errata/ELSA-2026-50081.html",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2025-69420",
-                      "https://openssl-library.org/news/secadv/20260127.txt",
-                      "https://ubuntu.com/security/notices/USN-7980-1",
-                      "https://ubuntu.com/security/notices/USN-7980-2",
-                      "https://www.cve.org/CVERecord?id=CVE-2025-69420"
-                    ],
-                    "severity": "MEDIUM",
-                    "suppressed": false,
-                    "title": "openssl: OpenSSL: Denial of Service via malformed TimeStamp Response"
-                  },
-                  {
-                    "cve": "CVE-2025-9230",
-                    "cvss": {
-                      "redhat": {
-                        "v3score": "5.6",
-                        "v3vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-125",
-                      "CWE-787"
-                    ],
-                    "description": "Issue summary: An application trying to decrypt CMS messages encrypted using\npassword based encryption can trigger an out-of-bounds read and write.\n\nImpact summary: This out-of-bounds read may trigger a crash which leads to\nDenial of Service for an application. The out-of-bounds write can cause\na memory corruption which can have various consequences including\na Denial of Service or Execution of attacker-supplied code.\n\nAlthough the consequences of a successful exploit of this vulnerability\ncould be severe, the probability that the attacker would be able to\nperform it is low. Besides, password based (PWRI) encryption support in CMS\nmessages is very rarely used. For that reason the issue was assessed as\nModerate severity according to our Security Policy.\n\nThe FIPS modules in 3.5, 3.4, 3.3, 3.2, 3.1 and 3.0 are not affected by this\nissue, as the CMS implementation is outside the OpenSSL FIPS module\nboundary.",
-                    "diffID": "sha256:1231a673589ac9e2f8a98ed916d1fa8301b36a44dd14fc40eba5a05905da69f1",
-                    "fixedVersions": [
-                      "3.5.4-r0"
-                    ],
-                    "installedVersion": "3.5.0-r0",
-                    "packageName": "libssl3",
-                    "purl": "pkg:apk/alpine/libssl3@3.5.0-r0?arch=aarch64&distro=3.22.0",
-                    "references": [
-                      "http://www.openwall.com/lists/oss-security/2025/09/30/5",
-                      "https://access.redhat.com/errata/RHSA-2026:0337",
-                      "https://access.redhat.com/security/cve/CVE-2025-9230",
-                      "https://bugzilla.redhat.com/2396054",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2396054",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-9230",
-                      "https://errata.almalinux.org/8/ALSA-2026-0337.html",
-                      "https://errata.rockylinux.org/RLSA-2025:21255",
-                      "https://github.com/openssl/openssl/commit/5965ea5dd6960f36d8b7f74f8eac67a8eb8f2b45",
-                      "https://github.com/openssl/openssl/commit/9e91358f365dee6c446dcdcdb01c04d2743fd280",
-                      "https://github.com/openssl/openssl/commit/a79c4ce559c6a3a8fd4109e9f33c1185d5bf2def",
-                      "https://github.com/openssl/openssl/commit/b5282d677551afda7d20e9c00e09561b547b2dfd",
-                      "https://github.com/openssl/openssl/commit/bae259a211ada6315dc50900686daaaaaa55f482",
-                      "https://github.openssl.org/openssl/extended-releases/commit/c2b96348bfa662f25f4fabf81958ae822063dae3",
-                      "https://github.openssl.org/openssl/extended-releases/commit/dfbaf161d8dafc1132dd88cd48ad990ed9b4c8ba",
-                      "https://linux.oracle.com/cve/CVE-2025-9230.html",
-                      "https://linux.oracle.com/errata/ELSA-2026-50077.html",
-                      "https://lists.debian.org/debian-lts-announce/2025/10/msg00001.html",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2025-9230",
-                      "https://openssl-library.org/news/secadv/20250930.txt",
-                      "https://ubuntu.com/security/notices/USN-7786-1",
-                      "https://www.cve.org/CVERecord?id=CVE-2025-9230"
-                    ],
-                    "severity": "MEDIUM",
-                    "suppressed": false,
-                    "title": "openssl: Out-of-bounds read & write in RFC 3211 KEK Unwrap"
-                  },
-                  {
-                    "cve": "CVE-2025-9231",
-                    "cvss": {
-                      "redhat": {
-                        "v3score": "5.9",
-                        "v3vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-385"
-                    ],
-                    "description": "Issue summary: A timing side-channel which could potentially allow remote\nrecovery of the private key exists in the SM2 algorithm implementation on 64 bit\nARM platforms.\n\nImpact summary: A timing side-channel in SM2 signature computations on 64 bit\nARM platforms could allow recovering the private key by an attacker..\n\nWhile remote key recovery over a network was not attempted by the reporter,\ntiming measurements revealed a timing signal which may allow such an attack.\n\nOpenSSL does not directly support certificates with SM2 keys in TLS, and so\nthis CVE is not relevant in most TLS contexts.  However, given that it is\npossible to add support for such certificates via a custom provider, coupled\nwith the fact that in such a custom provider context the private key may be\nrecoverable via remote timing measurements, we consider this to be a Moderate\nseverity issue.\n\nThe FIPS modules in 3.5, 3.4, 3.3, 3.2, 3.1 and 3.0 are not affected by this\nissue, as SM2 is not an approved algorithm.",
-                    "diffID": "sha256:1231a673589ac9e2f8a98ed916d1fa8301b36a44dd14fc40eba5a05905da69f1",
-                    "fixedVersions": [
-                      "3.5.4-r0"
-                    ],
-                    "installedVersion": "3.5.0-r0",
-                    "packageName": "libssl3",
-                    "purl": "pkg:apk/alpine/libssl3@3.5.0-r0?arch=aarch64&distro=3.22.0",
-                    "references": [
-                      "http://www.openwall.com/lists/oss-security/2025/09/30/5",
-                      "https://access.redhat.com/security/cve/CVE-2025-9231",
-                      "https://github.com/openssl/openssl/commit/567f64386e43683888212226824b6a179885a0fe",
-                      "https://github.com/openssl/openssl/commit/cba616c26ac8e7b37de5e77762e505ba5ca51698",
-                      "https://github.com/openssl/openssl/commit/eed5adc9f969d77c94f213767acbb41ff923b6f4",
-                      "https://github.com/openssl/openssl/commit/fc47a2ec078912b3e914fab5734535e76c4820c2",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2025-9231",
-                      "https://openssl-library.org/news/secadv/20250930.txt",
-                      "https://ubuntu.com/security/notices/USN-7786-1",
-                      "https://www.cve.org/CVERecord?id=CVE-2025-9231"
-                    ],
-                    "severity": "MEDIUM",
-                    "suppressed": false,
-                    "title": "openssl: Timing side-channel in SM2 algorithm on 64 bit ARM"
-                  },
-                  {
-                    "cve": "CVE-2026-22795",
-                    "cvss": {
-                      "redhat": {
-                        "v3score": "5.5",
-                        "v3vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-754"
-                    ],
-                    "description": "Issue summary: An invalid or NULL pointer dereference can happen in\nan application processing a malformed PKCS#12 file.\n\nImpact summary: An application processing a malformed PKCS#12 file can be\ncaused to dereference an invalid or NULL pointer on memory read, resulting\nin a Denial of Service.\n\nA type confusion vulnerability exists in PKCS#12 parsing code where\nan ASN1_TYPE union member is accessed without first validating the type,\ncausing an invalid pointer read.\n\nThe location is constrained to a 1-byte address space, meaning any\nattempted pointer manipulation can only target addresses between 0x00 and 0xFF.\nThis range corresponds to the zero page, which is unmapped on most modern\noperating systems and will reliably result in a crash, leading only to a\nDenial of Service. Exploiting this issue also requires a user or application\nto process a maliciously crafted PKCS#12 file. It is uncommon to accept\nuntrusted PKCS#12 files in applications as they are usually used to store\nprivate keys which are trusted by definition. For these reasons, the issue\nwas assessed as Low severity.\n\nThe FIPS modules in 3.5, 3.4, 3.3 and 3.0 are not affected by this issue,\nas the PKCS12 implementation is outside the OpenSSL FIPS module boundary.\n\nOpenSSL 3.6, 3.5, 3.4, 3.3, 3.0 and 1.1.1 are vulnerable to this issue.\n\nOpenSSL 1.0.2 is not affected by this issue.",
-                    "diffID": "sha256:1231a673589ac9e2f8a98ed916d1fa8301b36a44dd14fc40eba5a05905da69f1",
-                    "fixedVersions": [
-                      "3.5.5-r0"
-                    ],
-                    "installedVersion": "3.5.0-r0",
-                    "packageName": "libssl3",
-                    "purl": "pkg:apk/alpine/libssl3@3.5.0-r0?arch=aarch64&distro=3.22.0",
-                    "references": [
-                      "https://access.redhat.com/errata/RHSA-2026:1472",
-                      "https://access.redhat.com/security/cve/CVE-2026-22795",
-                      "https://bugzilla.redhat.com/2430375",
-                      "https://bugzilla.redhat.com/2430376",
-                      "https://bugzilla.redhat.com/2430377",
-                      "https://bugzilla.redhat.com/2430378",
-                      "https://bugzilla.redhat.com/2430379",
-                      "https://bugzilla.redhat.com/2430380",
-                      "https://bugzilla.redhat.com/2430381",
-                      "https://bugzilla.redhat.com/2430386",
-                      "https://bugzilla.redhat.com/2430387",
-                      "https://bugzilla.redhat.com/2430388",
-                      "https://bugzilla.redhat.com/2430389",
-                      "https://bugzilla.redhat.com/2430390",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430375",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430376",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430377",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430378",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430379",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430380",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430381",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430386",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430387",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430388",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430389",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430390",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-11187",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-15467",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-15468",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-15469",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-66199",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-68160",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-69418",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-69419",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-69420",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-69421",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-22795",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-22796",
-                      "https://errata.almalinux.org/10/ALSA-2026-1472.html",
-                      "https://errata.rockylinux.org/RLSA-2026:1473",
-                      "https://github.com/openssl/openssl/commit/2502e7b7d4c0cf4f972a881641fe09edc67aeec4",
-                      "https://github.com/openssl/openssl/commit/572844beca95068394c916626a6d3a490f831a49",
-                      "https://github.com/openssl/openssl/commit/7bbca05be55b129651d9df4bdb92becc45002c12",
-                      "https://github.com/openssl/openssl/commit/eeee3cbd4d682095ed431052f00403004596373e",
-                      "https://github.com/openssl/openssl/commit/ef2fb66ec571564d64d1c74a12e388a2a54d05d2",
-                      "https://linux.oracle.com/cve/CVE-2026-22795.html",
-                      "https://linux.oracle.com/errata/ELSA-2026-50081.html",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2026-22795",
-                      "https://openssl-library.org/news/secadv/20260127.txt",
-                      "https://ubuntu.com/security/notices/USN-7980-1",
-                      "https://ubuntu.com/security/notices/USN-7980-2",
-                      "https://www.cve.org/CVERecord?id=CVE-2026-22795"
-                    ],
-                    "severity": "MEDIUM",
-                    "suppressed": false,
-                    "title": "openssl: OpenSSL: Denial of Service due to type confusion in PKCS#12 file processing"
-                  },
-                  {
-                    "cve": "CVE-2026-22796",
-                    "cvss": {
-                      "redhat": {
-                        "v3score": "5.9",
-                        "v3vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-754"
-                    ],
-                    "description": "Issue summary: A type confusion vulnerability exists in the signature\nverification of signed PKCS#7 data where an ASN1_TYPE union member is\naccessed without first validating the type, causing an invalid or NULL\npointer dereference when processing malformed PKCS#7 data.\n\nImpact summary: An application performing signature verification of PKCS#7\ndata or calling directly the PKCS7_digest_from_attributes() function can be\ncaused to dereference an invalid or NULL pointer when reading, resulting in\na Denial of Service.\n\nThe function PKCS7_digest_from_attributes() accesses the message digest attribute\nvalue without validating its type. When the type is not V_ASN1_OCTET_STRING,\nthis results in accessing invalid memory through the ASN1_TYPE union, causing\na crash.\n\nExploiting this vulnerability requires an attacker to provide a malformed\nsigned PKCS#7 to an application that verifies it. The impact of the\nexploit is just a Denial of Service, the PKCS7 API is legacy and applications\nshould be using the CMS API instead. For these reasons the issue was\nassessed as Low severity.\n\nThe FIPS modules in 3.5, 3.4, 3.3 and 3.0 are not affected by this issue,\nas the PKCS#7 parsing implementation is outside the OpenSSL FIPS module\nboundary.\n\nOpenSSL 3.6, 3.5, 3.4, 3.3, 3.0, 1.1.1 and 1.0.2 are vulnerable to this issue.",
-                    "diffID": "sha256:1231a673589ac9e2f8a98ed916d1fa8301b36a44dd14fc40eba5a05905da69f1",
-                    "fixedVersions": [
-                      "3.5.5-r0"
-                    ],
-                    "installedVersion": "3.5.0-r0",
-                    "packageName": "libssl3",
-                    "purl": "pkg:apk/alpine/libssl3@3.5.0-r0?arch=aarch64&distro=3.22.0",
-                    "references": [
-                      "https://access.redhat.com/errata/RHSA-2026:1472",
-                      "https://access.redhat.com/security/cve/CVE-2026-22796",
-                      "https://bugzilla.redhat.com/2430375",
-                      "https://bugzilla.redhat.com/2430376",
-                      "https://bugzilla.redhat.com/2430377",
-                      "https://bugzilla.redhat.com/2430378",
-                      "https://bugzilla.redhat.com/2430379",
-                      "https://bugzilla.redhat.com/2430380",
-                      "https://bugzilla.redhat.com/2430381",
-                      "https://bugzilla.redhat.com/2430386",
-                      "https://bugzilla.redhat.com/2430387",
-                      "https://bugzilla.redhat.com/2430388",
-                      "https://bugzilla.redhat.com/2430389",
-                      "https://bugzilla.redhat.com/2430390",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430375",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430376",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430377",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430378",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430379",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430380",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430381",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430386",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430387",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430388",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430389",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430390",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-11187",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-15467",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-15468",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-15469",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-66199",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-68160",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-69418",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-69419",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-69420",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-69421",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-22795",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-22796",
-                      "https://errata.almalinux.org/10/ALSA-2026-1472.html",
-                      "https://errata.rockylinux.org/RLSA-2026:1473",
-                      "https://github.com/openssl/openssl/commit/2502e7b7d4c0cf4f972a881641fe09edc67aeec4",
-                      "https://github.com/openssl/openssl/commit/572844beca95068394c916626a6d3a490f831a49",
-                      "https://github.com/openssl/openssl/commit/7bbca05be55b129651d9df4bdb92becc45002c12",
-                      "https://github.com/openssl/openssl/commit/eeee3cbd4d682095ed431052f00403004596373e",
-                      "https://github.com/openssl/openssl/commit/ef2fb66ec571564d64d1c74a12e388a2a54d05d2",
-                      "https://linux.oracle.com/cve/CVE-2026-22796.html",
-                      "https://linux.oracle.com/errata/ELSA-2026-50081.html",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2026-22796",
-                      "https://openssl-library.org/news/secadv/20260127.txt",
-                      "https://ubuntu.com/security/notices/USN-7980-1",
-                      "https://ubuntu.com/security/notices/USN-7980-2",
-                      "https://www.cve.org/CVERecord?id=CVE-2026-22796"
-                    ],
-                    "severity": "MEDIUM",
-                    "suppressed": false,
-                    "title": "openssl: OpenSSL: Denial of Service via type confusion in PKCS#7 signature verification"
-                  },
-                  {
-                    "cve": "CVE-2025-9232",
-                    "cvss": {
-                      "redhat": {
-                        "v3score": "3.1",
-                        "v3vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-125"
-                    ],
-                    "description": "Issue summary: An application using the OpenSSL HTTP client API functions may\ntrigger an out-of-bounds read if the 'no_proxy' environment variable is set and\nthe host portion of the authority component of the HTTP URL is an IPv6 address.\n\nImpact summary: An out-of-bounds read can trigger a crash which leads to\nDenial of Service for an application.\n\nThe OpenSSL HTTP client API functions can be used directly by applications\nbut they are also used by the OCSP client functions and CMP (Certificate\nManagement Protocol) client implementation in OpenSSL. However the URLs used\nby these implementations are unlikely to be controlled by an attacker.\n\nIn this vulnerable code the out of bounds read can only trigger a crash.\nFurthermore the vulnerability requires an attacker-controlled URL to be\npassed from an application to the OpenSSL function and the user has to have\na 'no_proxy' environment variable set. For the aforementioned reasons the\nissue was assessed as Low severity.\n\nThe vulnerable code was introduced in the following patch releases:\n3.0.16, 3.1.8, 3.2.4, 3.3.3, 3.4.0 and 3.5.0.\n\nThe FIPS modules in 3.5, 3.4, 3.3, 3.2, 3.1 and 3.0 are not affected by this\nissue, as the HTTP client implementation is outside the OpenSSL FIPS module\nboundary.",
-                    "diffID": "sha256:1231a673589ac9e2f8a98ed916d1fa8301b36a44dd14fc40eba5a05905da69f1",
-                    "fixedVersions": [
-                      "3.5.4-r0"
-                    ],
-                    "installedVersion": "3.5.0-r0",
-                    "packageName": "libssl3",
-                    "purl": "pkg:apk/alpine/libssl3@3.5.0-r0?arch=aarch64&distro=3.22.0",
-                    "references": [
-                      "http://www.openwall.com/lists/oss-security/2025/09/30/5",
-                      "https://access.redhat.com/security/cve/CVE-2025-9232",
-                      "https://github.com/openssl/openssl/commit/2b4ec20e47959170422922eaff25346d362dcb35",
-                      "https://github.com/openssl/openssl/commit/654dc11d23468a74fc8ea4672b702dd3feb7be4b",
-                      "https://github.com/openssl/openssl/commit/7cf21a30513c9e43c4bc3836c237cf086e194af3",
-                      "https://github.com/openssl/openssl/commit/89e790ac431125a4849992858490bed6b225eadf",
-                      "https://github.com/openssl/openssl/commit/bbf38c034cdabd0a13330abcc4855c866f53d2e0",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2025-9232",
-                      "https://openssl-library.org/news/secadv/20250930.txt",
-                      "https://ubuntu.com/security/notices/USN-7786-1",
-                      "https://ubuntu.com/security/notices/USN-7894-1",
-                      "https://www.cve.org/CVERecord?id=CVE-2025-9232"
-                    ],
-                    "severity": "LOW",
-                    "suppressed": false,
-                    "title": "openssl: Out-of-bounds read in HTTP client no_proxy handling"
-                  },
-                  {
-                    "cve": "CVE-2025-4575",
-                    "cwes": [
-                      "CWE-295"
-                    ],
-                    "description": "Issue summary: Use of -addreject option with the openssl x509 application adds\na trusted use instead of a rejected use for a certificate.\n\nImpact summary: If a user intends to make a trusted certificate rejected for\na particular use it will be instead marked as trusted for that use.\n\nA copy & paste error during minor refactoring of the code introduced this\nissue in the OpenSSL 3.5 version. If, for example, a trusted CA certificate\nshould be trusted only for the purpose of authenticating TLS servers but not\nfor CMS signature verification and the CMS signature verification is intended\nto be marked as rejected with the -addreject option, the resulting CA\ncertificate will be trusted for CMS signature verification purpose instead.\n\nOnly users which use the trusted certificate format who use the openssl x509\ncommand line application to add rejected uses are affected by this issue.\nThe issues affecting only the command line application are considered to\nbe Low severity.\n\nThe FIPS modules in 3.5, 3.4, 3.3, 3.2, 3.1 and 3.0 are not affected by this\nissue.\n\nOpenSSL 3.4, 3.3, 3.2, 3.1, 3.0, 1.1.1 and 1.0.2 are also not affected by this\nissue.",
-                    "diffID": "sha256:1231a673589ac9e2f8a98ed916d1fa8301b36a44dd14fc40eba5a05905da69f1",
-                    "fixedVersions": [
-                      "3.5.1-r0"
-                    ],
-                    "installedVersion": "3.5.0-r0",
-                    "packageName": "libssl3",
-                    "purl": "pkg:apk/alpine/libssl3@3.5.0-r0?arch=aarch64&distro=3.22.0",
-                    "references": [
-                      "http://www.openwall.com/lists/oss-security/2025/05/22/1",
-                      "https://github.com/openssl/openssl/commit/e96d22446e633d117e6c9904cb15b4693e956eaa",
-                      "https://openssl-library.org/news/secadv/20250522.txt"
-                    ],
-                    "severity": "UNKNOWN",
-                    "suppressed": false,
-                    "title": "Issue summary: Use of -addreject option with the openssl x509 applicat ..."
-                  },
-                  {
-                    "cve": "CVE-2024-58251",
-                    "cwes": [
-                      "CWE-150"
-                    ],
-                    "description": "In netstat in BusyBox through 1.37.0, local users can launch of network application with an argv[0] containing an ANSI terminal escape sequence, leading to a denial of service (terminal locked up) when netstat is used by a victim.",
-                    "diffID": "sha256:1231a673589ac9e2f8a98ed916d1fa8301b36a44dd14fc40eba5a05905da69f1",
-                    "fixedVersions": [
-                      "1.37.0-r20"
-                    ],
-                    "installedVersion": "1.37.0-r18",
-                    "packageName": "ssl_client",
-                    "purl": "pkg:apk/alpine/ssl_client@1.37.0-r18?arch=aarch64&distro=3.22.0",
-                    "references": [
-                      "http://www.openwall.com/lists/oss-security/2025/04/23/6",
-                      "https://bugs.busybox.net/show_bug.cgi?id=15922",
-                      "https://www.busybox.net",
-                      "https://www.busybox.net/downloads/",
-                      "https://www.cve.org/CVERecord?id=CVE-2024-58251"
-                    ],
-                    "severity": "MEDIUM",
-                    "suppressed": false,
-                    "title": "In netstat in BusyBox through 1.37.0, local users can launch of networ ..."
-                  },
-                  {
-                    "cve": "CVE-2025-46394",
-                    "cvss": {
-                      "nvd": {
-                        "v3score": "3.3",
-                        "v3vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-451"
-                    ],
-                    "description": "In tar in BusyBox through 1.37.0, a TAR archive can have filenames hidden from a listing through the use of terminal escape sequences.",
-                    "diffID": "sha256:1231a673589ac9e2f8a98ed916d1fa8301b36a44dd14fc40eba5a05905da69f1",
-                    "fixedVersions": [
-                      "1.37.0-r20"
-                    ],
-                    "installedVersion": "1.37.0-r18",
-                    "packageName": "ssl_client",
-                    "purl": "pkg:apk/alpine/ssl_client@1.37.0-r18?arch=aarch64&distro=3.22.0",
-                    "references": [
-                      "http://www.openwall.com/lists/oss-security/2025/04/23/5",
-                      "http://www.openwall.com/lists/oss-security/2025/04/24/3",
-                      "https://bugs.busybox.net/show_bug.cgi?id=16018",
-                      "https://lists.busybox.net/pipermail/busybox/2024-July/090806.html",
-                      "https://lists.busybox.net/pipermail/busybox/2024-July/090814.html",
-                      "https://www.busybox.net",
-                      "https://www.busybox.net/downloads/",
-                      "https://www.cve.org/CVERecord?id=CVE-2025-46394",
-                      "https://www.openwall.com/lists/oss-security/2025/04/23/1"
-                    ],
-                    "severity": "LOW",
-                    "suppressed": false,
-                    "title": "In tar in BusyBox through 1.37.0, a TAR archive can have filenames hid ..."
-                  }
-                ]
-              }
-            ],
-            "summary": {
-              "critical": 2,
-              "high": 4,
-              "low": 5,
-              "medium": 25,
-              "suppressed": 0,
-              "unknown": 2
-            }
-          }
-        }
-      ]
-    },
-    {
-      "name": "nginx",
-      "vulnerabilityReports": [
-        {
-          "imageMetadata": {
-            "digest": "sha256:c47d5a85f11aec0e4a91e0257e12a778a909e0c1a89b3da6a8c3c369ccba327b",
-            "indexDigest": "sha256:f9dc6a4b27715a9cf0cecf0780c8b84df9a6eb31f18a67ba0d63e4f99cc5c8e9",
-            "platform": "linux/amd64",
-            "registry": "workloadscan-ghcr-io",
-            "registryURI": "ghcr.io",
-            "repository": "nginxinc/nginx-unprivileged",
-            "tag": "1.24"
-          },
-          "report": {
-            "results": [
-              {
-                "class": "os-pkgs",
-                "target": "/var/run/worker/trivy.sbom.1776960825.json (debian 11.9)",
-                "type": "debian",
-                "vulnerabilities": [
-                  {
-                    "cve": "CVE-2011-3374",
-                    "cvss": {
-                      "nvd": {
-                        "v3score": "3.7",
-                        "v3vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-347"
-                    ],
-                    "description": "It was found that apt-key in apt, all versions, do not correctly validate gpg keys with the master keyring, leading to a potential man-in-the-middle attack.",
-                    "diffID": "sha256:420179ad2efafbf953a0c75f68a4c9dfaf38a98643df97d415bce49b179895f7",
-                    "installedVersion": "2.2.4",
-                    "packageName": "apt",
-                    "purl": "pkg:deb/debian/apt@2.2.4?arch=amd64&distro=debian-11.9",
-                    "references": [
-                      "https://access.redhat.com/security/cve/cve-2011-3374",
-                      "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=642480",
-                      "https://people.canonical.com/~ubuntu-security/cve/2011/CVE-2011-3374.html",
-                      "https://seclists.org/fulldisclosure/2011/Sep/221",
-                      "https://security-tracker.debian.org/tracker/CVE-2011-3374",
-                      "https://snyk.io/vuln/SNYK-LINUX-APT-116518",
-                      "https://ubuntu.com/security/CVE-2011-3374"
-                    ],
-                    "severity": "LOW",
-                    "suppressed": false,
-                    "title": "It was found that apt-key in apt, all versions, do not correctly valid ..."
-                  },
-                  {
-                    "cve": "CVE-2022-3715",
-                    "cvss": {
-                      "nvd": {
-                        "v3score": "7.8",
-                        "v3vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"
-                      },
-                      "redhat": {
-                        "v3score": "6.6",
-                        "v3vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-119",
-                      "CWE-787"
-                    ],
-                    "description": "A flaw was found in the bash package, where a heap-buffer overflow can occur in valid parameter_transform. This issue may lead to memory problems.",
-                    "diffID": "sha256:420179ad2efafbf953a0c75f68a4c9dfaf38a98643df97d415bce49b179895f7",
-                    "installedVersion": "5.1-2+deb11u1",
-                    "packageName": "bash",
-                    "purl": "pkg:deb/debian/bash@5.1-2%2Bdeb11u1?arch=amd64&distro=debian-11.9",
-                    "references": [
-                      "https://access.redhat.com/errata/RHSA-2023:0340",
-                      "https://access.redhat.com/security/cve/CVE-2022-3715",
-                      "https://bugzilla.redhat.com/2126720",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2126720",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-3715",
-                      "https://errata.almalinux.org/9/ALSA-2023-0340.html",
-                      "https://errata.rockylinux.org/RLSA-2023:0340",
-                      "https://linux.oracle.com/cve/CVE-2022-3715.html",
-                      "https://linux.oracle.com/errata/ELSA-2023-0340.html",
-                      "https://lists.gnu.org/archive/html/bug-bash/2022-08/msg00147.html",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2022-3715",
-                      "https://security.netapp.com/advisory/ntap-20241108-0002/",
-                      "https://ubuntu.com/security/notices/USN-6697-1",
-                      "https://www.cve.org/CVERecord?id=CVE-2022-3715"
-                    ],
-                    "severity": "HIGH",
-                    "suppressed": false,
-                    "title": "bash: a heap-buffer-overflow in valid_parameter_transform"
-                  },
-                  {
-                    "cve": "TEMP-0841856-B18BAF",
-                    "diffID": "sha256:420179ad2efafbf953a0c75f68a4c9dfaf38a98643df97d415bce49b179895f7",
-                    "installedVersion": "5.1-2+deb11u1",
-                    "packageName": "bash",
-                    "purl": "pkg:deb/debian/bash@5.1-2%2Bdeb11u1?arch=amd64&distro=debian-11.9",
-                    "severity": "LOW",
-                    "suppressed": false,
-                    "title": "[Privilege escalation possible to other user than root]"
-                  },
-                  {
-                    "cve": "CVE-2025-14104",
-                    "cvss": {
-                      "redhat": {
-                        "v3score": "6.1",
-                        "v3vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-125"
-                    ],
-                    "description": "A flaw was found in util-linux. This vulnerability allows a heap buffer overread when processing 256-byte usernames, specifically within the `setpwnam()` function, affecting SUID (Set User ID) login-utils utilities writing to the password database.",
-                    "diffID": "sha256:420179ad2efafbf953a0c75f68a4c9dfaf38a98643df97d415bce49b179895f7",
-                    "installedVersion": "1:2.36.1-8+deb11u2",
-                    "packageName": "bsdutils",
-                    "purl": "pkg:deb/debian/bsdutils@2.36.1-8%2Bdeb11u2?arch=amd64&distro=debian-11.9&epoch=1",
-                    "references": [
-                      "https://access.redhat.com/errata/RHSA-2026:1696",
-                      "https://access.redhat.com/errata/RHSA-2026:1852",
-                      "https://access.redhat.com/errata/RHSA-2026:1913",
-                      "https://access.redhat.com/security/cve/CVE-2025-14104",
-                      "https://bugzilla.redhat.com/2419369",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2419369",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-14104",
-                      "https://errata.almalinux.org/10/ALSA-2026-1696.html",
-                      "https://errata.rockylinux.org/RLSA-2026:1913",
-                      "https://linux.oracle.com/cve/CVE-2025-14104.html",
-                      "https://linux.oracle.com/errata/ELSA-2026-1913.html",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2025-14104",
-                      "https://www.cve.org/CVERecord?id=CVE-2025-14104"
-                    ],
-                    "severity": "MEDIUM",
-                    "suppressed": false,
-                    "title": "util-linux: util-linux: Heap buffer overread in setpwnam() when processing 256-byte usernames"
-                  },
-                  {
-                    "cve": "CVE-2022-0563",
-                    "cvss": {
-                      "nvd": {
-                        "v3score": "5.5",
-                        "v3vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N"
-                      },
-                      "redhat": {
-                        "v3score": "5.5",
-                        "v3vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-209"
-                    ],
-                    "description": "A flaw was found in the util-linux chfn and chsh utilities when compiled with Readline support. The Readline library uses an \"INPUTRC\" environment variable to get a path to the library config file. When the library cannot parse the specified file, it prints an error message containing data from the file. This flaw allows an unprivileged user to read root-owned files, potentially leading to privilege escalation. This flaw affects util-linux versions prior to 2.37.4.",
-                    "diffID": "sha256:420179ad2efafbf953a0c75f68a4c9dfaf38a98643df97d415bce49b179895f7",
-                    "installedVersion": "1:2.36.1-8+deb11u2",
-                    "packageName": "bsdutils",
-                    "purl": "pkg:deb/debian/bsdutils@2.36.1-8%2Bdeb11u2?arch=amd64&distro=debian-11.9&epoch=1",
-                    "references": [
-                      "https://access.redhat.com/security/cve/CVE-2022-0563",
-                      "https://blog.trailofbits.com/2023/02/16/suid-logic-bug-linux-readline/",
-                      "https://lore.kernel.org/util-linux/20220214110609.msiwlm457ngoic6w%40ws.net.home/T/#u",
-                      "https://lore.kernel.org/util-linux/20220214110609.msiwlm457ngoic6w@ws.net.home/T/#u",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2022-0563",
-                      "https://security.gentoo.org/glsa/202401-08",
-                      "https://security.netapp.com/advisory/ntap-20220331-0002/",
-                      "https://www.cve.org/CVERecord?id=CVE-2022-0563"
-                    ],
-                    "severity": "LOW",
-                    "suppressed": false,
-                    "title": "util-linux: partial disclosure of arbitrary files in chfn and chsh when compiled with libreadline"
-                  },
-                  {
-                    "cve": "CVE-2016-2781",
-                    "cvss": {
-                      "nvd": {
-                        "v3score": "6.5",
-                        "v3vector": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:H/A:N"
-                      },
-                      "redhat": {
-                        "v3score": "8.6",
-                        "v3vector": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-20"
-                    ],
-                    "description": "chroot in GNU coreutils, when used with --userspec, allows local users to escape to the parent session via a crafted TIOCSTI ioctl call, which pushes characters to the terminal's input buffer.",
-                    "diffID": "sha256:420179ad2efafbf953a0c75f68a4c9dfaf38a98643df97d415bce49b179895f7",
-                    "installedVersion": "8.32-4+b1",
-                    "packageName": "coreutils",
-                    "purl": "pkg:deb/debian/coreutils@8.32-4%2Bb1?arch=amd64&distro=debian-11.9",
-                    "references": [
-                      "http://seclists.org/oss-sec/2016/q1/452",
-                      "http://www.openwall.com/lists/oss-security/2016/02/28/2",
-                      "http://www.openwall.com/lists/oss-security/2016/02/28/3",
-                      "https://access.redhat.com/security/cve/CVE-2016-2781",
-                      "https://lists.apache.org/thread.html/rf9fa47ab66495c78bb4120b0754dd9531ca2ff0430f6685ac9b07772%40%3Cdev.mina.apache.org%3E",
-                      "https://lore.kernel.org/patchwork/patch/793178/",
-                      "https://mirrors.edge.kernel.org/pub/linux/utils/util-linux/v2.28/v2.28-ReleaseNotes",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2016-2781",
-                      "https://www.cve.org/CVERecord?id=CVE-2016-2781"
-                    ],
-                    "severity": "LOW",
-                    "suppressed": false,
-                    "title": "coreutils: Non-privileged session can escape to the parent session in chroot"
-                  },
-                  {
-                    "cve": "CVE-2017-18018",
-                    "cvss": {
-                      "nvd": {
-                        "v3score": "4.7",
-                        "v3vector": "CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:N"
-                      },
-                      "redhat": {
-                        "v3score": "4.2",
-                        "v3vector": "CVSS:3.0/AV:L/AC:H/PR:L/UI:R/S:U/C:L/I:L/A:L"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-362"
-                    ],
-                    "description": "In GNU Coreutils through 8.29, chown-core.c in chown and chgrp does not prevent replacement of a plain file with a symlink during use of the POSIX \"-R -L\" options, which allows local users to modify the ownership of arbitrary files by leveraging a race condition.",
-                    "diffID": "sha256:420179ad2efafbf953a0c75f68a4c9dfaf38a98643df97d415bce49b179895f7",
-                    "installedVersion": "8.32-4+b1",
-                    "packageName": "coreutils",
-                    "purl": "pkg:deb/debian/coreutils@8.32-4%2Bb1?arch=amd64&distro=debian-11.9",
-                    "references": [
-                      "http://lists.gnu.org/archive/html/coreutils/2017-12/msg00045.html",
-                      "https://access.redhat.com/security/cve/CVE-2017-18018",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2017-18018",
-                      "https://www.cve.org/CVERecord?id=CVE-2017-18018"
-                    ],
-                    "severity": "LOW",
-                    "suppressed": false,
-                    "title": "coreutils: race condition vulnerability in chown and chgrp"
-                  },
-                  {
-                    "cve": "CVE-2025-5278",
-                    "cvss": {
-                      "redhat": {
-                        "v3score": "4.4",
-                        "v3vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-121"
-                    ],
-                    "description": "A flaw was found in GNU Coreutils. The sort utility's begfield() function is vulnerable to a heap buffer under-read. The program may access memory outside the allocated buffer if a user runs a crafted command using the traditional key format. A malicious input could lead to a crash or leak sensitive data.",
-                    "diffID": "sha256:420179ad2efafbf953a0c75f68a4c9dfaf38a98643df97d415bce49b179895f7",
-                    "installedVersion": "8.32-4+b1",
-                    "packageName": "coreutils",
-                    "purl": "pkg:deb/debian/coreutils@8.32-4%2Bb1?arch=amd64&distro=debian-11.9",
-                    "references": [
-                      "http://www.openwall.com/lists/oss-security/2025/05/27/2",
-                      "http://www.openwall.com/lists/oss-security/2025/05/29/1",
-                      "http://www.openwall.com/lists/oss-security/2025/05/29/2",
-                      "https://access.redhat.com/security/cve/CVE-2025-5278",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2368764",
-                      "https://cgit.git.savannah.gnu.org/cgit/coreutils.git/commit/?id=8c9602e3a145e9596dc1a63c6ed67865814b6633",
-                      "https://cgit.git.savannah.gnu.org/cgit/coreutils.git/tree/NEWS?id=8c9602e3a145e9596dc1a63c6ed67865814b6633#n14",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2025-5278",
-                      "https://security-tracker.debian.org/tracker/CVE-2025-5278",
-                      "https://www.cve.org/CVERecord?id=CVE-2025-5278"
-                    ],
-                    "severity": "LOW",
-                    "suppressed": false,
-                    "title": "coreutils: Heap Buffer Under-Read in GNU Coreutils sort via Key Specification"
-                  },
-                  {
-                    "cve": "CVE-2023-23914",
-                    "cvss": {
-                      "nvd": {
-                        "v3score": "9.1",
-                        "v3vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N"
-                      },
-                      "redhat": {
-                        "v3score": "6.5",
-                        "v3vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-319"
-                    ],
-                    "description": "A cleartext transmission of sensitive information vulnerability exists in curl <v7.88.0 that could cause HSTS functionality fail when multiple URLs are requested serially. Using its HSTS support, curl can be instructed to use HTTPS instead of usingan insecure clear-text HTTP step even when HTTP is provided in the URL. ThisHSTS mechanism would however surprisingly be ignored by subsequent transferswhen done on the same command line because the state would not be properlycarried on.",
-                    "diffID": "sha256:9664c8c85da49d2cedf85c6b8af0e128318580b95b277b87593a4f75886148af",
-                    "installedVersion": "7.74.0-1.3+deb11u11",
-                    "packageName": "curl",
-                    "purl": "pkg:deb/debian/curl@7.74.0-1.3%2Bdeb11u11?arch=amd64&distro=debian-11.9",
-                    "references": [
-                      "https://access.redhat.com/security/cve/CVE-2023-23914",
-                      "https://curl.se/docs/CVE-2023-23914.html",
-                      "https://hackerone.com/reports/1813864",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2023-23914",
-                      "https://security.gentoo.org/glsa/202310-12",
-                      "https://security.netapp.com/advisory/ntap-20230309-0006/",
-                      "https://ubuntu.com/security/notices/USN-5891-1",
-                      "https://www.cve.org/CVERecord?id=CVE-2023-23914"
-                    ],
-                    "severity": "CRITICAL",
-                    "suppressed": false,
-                    "title": "curl: HSTS ignored on multiple requests"
-                  },
-                  {
-                    "cve": "CVE-2022-42916",
-                    "cvss": {
-                      "nvd": {
-                        "v3score": "7.5",
-                        "v3vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N"
-                      },
-                      "redhat": {
-                        "v3score": "7.5",
-                        "v3vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-319"
-                    ],
-                    "description": "In curl before 7.86.0, the HSTS check could be bypassed to trick it into staying with HTTP. Using its HSTS support, curl can be instructed to use HTTPS directly (instead of using an insecure cleartext HTTP step) even when HTTP is provided in the URL. This mechanism could be bypassed if the host name in the given URL uses IDN characters that get replaced with ASCII counterparts as part of the IDN conversion, e.g., using the character UTF-8 U+3002 (IDEOGRAPHIC FULL STOP) instead of the common ASCII full stop of U+002E (.). The earliest affected version is 7.77.0 2021-05-26.",
-                    "diffID": "sha256:9664c8c85da49d2cedf85c6b8af0e128318580b95b277b87593a4f75886148af",
-                    "installedVersion": "7.74.0-1.3+deb11u11",
-                    "packageName": "curl",
-                    "purl": "pkg:deb/debian/curl@7.74.0-1.3%2Bdeb11u11?arch=amd64&distro=debian-11.9",
-                    "references": [
-                      "http://seclists.org/fulldisclosure/2023/Jan/19",
-                      "http://seclists.org/fulldisclosure/2023/Jan/20",
-                      "http://www.openwall.com/lists/oss-security/2022/12/21/1",
-                      "https://access.redhat.com/security/cve/CVE-2022-42916",
-                      "https://curl.se/docs/CVE-2022-42916.html",
-                      "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/37YEVVC6NAF6H7UHH6YAUY5QEVY6LIH2/",
-                      "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/HVU3IMZCKR4VE6KJ4GCWRL2ILLC6OV76/",
-                      "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/Q27V5YYMXUVI6PRZQVECON32XPVWTKDK/",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2022-42916",
-                      "https://security.gentoo.org/glsa/202212-01",
-                      "https://security.netapp.com/advisory/ntap-20221209-0010/",
-                      "https://support.apple.com/kb/HT213604",
-                      "https://support.apple.com/kb/HT213605",
-                      "https://ubuntu.com/security/notices/USN-5702-1",
-                      "https://www.cve.org/CVERecord?id=CVE-2022-42916"
-                    ],
-                    "severity": "HIGH",
-                    "suppressed": false,
-                    "title": "curl: HSTS bypass via IDN"
-                  },
-                  {
-                    "cve": "CVE-2022-43551",
-                    "cvss": {
-                      "nvd": {
-                        "v3score": "7.5",
-                        "v3vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N"
-                      },
-                      "redhat": {
-                        "v3score": "7.5",
-                        "v3vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-319"
-                    ],
-                    "description": "A vulnerability exists in curl <7.87.0 HSTS check that could be bypassed to trick it to keep using HTTP. Using its HSTS support, curl can be instructed to use HTTPS instead of using an insecure clear-text HTTP step even when HTTP is provided in the URL. However, the HSTS mechanism could be bypassed if the host name in the given URL first uses IDN characters that get replaced to ASCII counterparts as part of the IDN conversion. Like using the character UTF-8 U+3002 (IDEOGRAPHIC FULL STOP) instead of the common ASCII full stop (U+002E) `.`. Then in a subsequent request, it does not detect the HSTS state and makes a clear text transfer. Because it would store the info IDN encoded but look for it IDN decoded.",
-                    "diffID": "sha256:9664c8c85da49d2cedf85c6b8af0e128318580b95b277b87593a4f75886148af",
-                    "installedVersion": "7.74.0-1.3+deb11u11",
-                    "packageName": "curl",
-                    "purl": "pkg:deb/debian/curl@7.74.0-1.3%2Bdeb11u11?arch=amd64&distro=debian-11.9",
-                    "references": [
-                      "https://access.redhat.com/security/cve/CVE-2022-43551",
-                      "https://curl.se/docs/CVE-2022-43551.html",
-                      "https://hackerone.com/reports/1755083",
-                      "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/TVWZW5CNSJ7UYAF2BGSYAWAEXDJYUBHA/",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2022-43551",
-                      "https://security.gentoo.org/glsa/202310-12",
-                      "https://security.netapp.com/advisory/ntap-20230427-0007/",
-                      "https://ubuntu.com/security/notices/USN-5788-1",
-                      "https://www.cve.org/CVERecord?id=CVE-2022-43551"
-                    ],
-                    "severity": "HIGH",
-                    "suppressed": false,
-                    "title": "curl: HSTS bypass via IDN"
-                  },
-                  {
-                    "cve": "CVE-2024-2398",
-                    "cvss": {
-                      "redhat": {
-                        "v3score": "7.5",
-                        "v3vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-772"
-                    ],
-                    "description": "When an application tells libcurl it wants to allow HTTP/2 server push, and the amount of received headers for the push surpasses the maximum allowed limit (1000), libcurl aborts the server push. When aborting, libcurl inadvertently does not free all the previously allocated headers and instead leaks the memory.  Further, this error condition fails silently and is therefore not easily detected by an application.",
-                    "diffID": "sha256:9664c8c85da49d2cedf85c6b8af0e128318580b95b277b87593a4f75886148af",
-                    "fixedVersions": [
-                      "7.74.0-1.3+deb11u12"
-                    ],
-                    "installedVersion": "7.74.0-1.3+deb11u11",
-                    "packageName": "curl",
-                    "purl": "pkg:deb/debian/curl@7.74.0-1.3%2Bdeb11u11?arch=amd64&distro=debian-11.9",
-                    "references": [
-                      "http://seclists.org/fulldisclosure/2024/Jul/18",
-                      "http://seclists.org/fulldisclosure/2024/Jul/19",
-                      "http://seclists.org/fulldisclosure/2024/Jul/20",
-                      "http://www.openwall.com/lists/oss-security/2024/03/27/3",
-                      "https://access.redhat.com/errata/RHSA-2024:5654",
-                      "https://access.redhat.com/security/cve/CVE-2024-2398",
-                      "https://bugzilla.redhat.com/2270498",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2270498",
-                      "https://curl.se/docs/CVE-2024-2398.html",
-                      "https://curl.se/docs/CVE-2024-2398.json",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-2398",
-                      "https://errata.almalinux.org/8/ALSA-2024-5654.html",
-                      "https://errata.rockylinux.org/RLSA-2024:5654",
-                      "https://hackerone.com/reports/2402845",
-                      "https://linux.oracle.com/cve/CVE-2024-2398.html",
-                      "https://linux.oracle.com/errata/ELSA-2024-5654.html",
-                      "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/2D44YLAUFJU6BZ4XFG2FYV7SBKXB5IZ6/",
-                      "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/GMD6UYKCCRCYETWQZUJ65ZRFULT6SHLI/",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2024-2398",
-                      "https://security.netapp.com/advisory/ntap-20240503-0009/",
-                      "https://support.apple.com/kb/HT214118",
-                      "https://support.apple.com/kb/HT214119",
-                      "https://support.apple.com/kb/HT214120",
-                      "https://ubuntu.com/security/notices/USN-6718-1",
-                      "https://ubuntu.com/security/notices/USN-6718-2",
-                      "https://ubuntu.com/security/notices/USN-6718-3",
-                      "https://www.cve.org/CVERecord?id=CVE-2024-2398"
-                    ],
-                    "severity": "HIGH",
-                    "suppressed": false,
-                    "title": "curl: HTTP/2 push headers memory-leak"
-                  },
-                  {
-                    "cve": "CVE-2023-23915",
-                    "cvss": {
-                      "nvd": {
-                        "v3score": "6.5",
-                        "v3vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N"
-                      },
-                      "redhat": {
-                        "v3score": "4.2",
-                        "v3vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-319"
-                    ],
-                    "description": "A cleartext transmission of sensitive information vulnerability exists in curl <v7.88.0 that could cause HSTS functionality to behave incorrectly when multiple URLs are requested in parallel. Using its HSTS support, curl can be instructed to use HTTPS instead of using an insecure clear-text HTTP step even when HTTP is provided in the URL. This HSTS mechanism would however surprisingly fail when multiple transfers are done in parallel as the HSTS cache file gets overwritten by the most recentlycompleted transfer. A later HTTP-only transfer to the earlier host name would then *not* get upgraded properly to HSTS.",
-                    "diffID": "sha256:9664c8c85da49d2cedf85c6b8af0e128318580b95b277b87593a4f75886148af",
-                    "installedVersion": "7.74.0-1.3+deb11u11",
-                    "packageName": "curl",
-                    "purl": "pkg:deb/debian/curl@7.74.0-1.3%2Bdeb11u11?arch=amd64&distro=debian-11.9",
-                    "references": [
-                      "https://access.redhat.com/security/cve/CVE-2023-23915",
-                      "https://curl.se/docs/CVE-2023-23915.html",
-                      "https://hackerone.com/reports/1826048",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2023-23915",
-                      "https://security.gentoo.org/glsa/202310-12",
-                      "https://security.netapp.com/advisory/ntap-20230309-0006/",
-                      "https://ubuntu.com/security/notices/USN-5891-1",
-                      "https://www.cve.org/CVERecord?id=CVE-2023-23915"
-                    ],
-                    "severity": "MEDIUM",
-                    "suppressed": false,
-                    "title": "curl: HSTS amnesia with --parallel"
-                  },
-                  {
-                    "cve": "CVE-2023-46219",
-                    "cvss": {
-                      "nvd": {
-                        "v3score": "5.3",
-                        "v3vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N"
-                      },
-                      "redhat": {
-                        "v3score": "5.3",
-                        "v3vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-311"
-                    ],
-                    "description": "When saving HSTS data to an excessively long file name, curl could end up\nremoving all contents, making subsequent requests using that file unaware of\nthe HSTS status they should otherwise use.",
-                    "diffID": "sha256:9664c8c85da49d2cedf85c6b8af0e128318580b95b277b87593a4f75886148af",
-                    "installedVersion": "7.74.0-1.3+deb11u11",
-                    "packageName": "curl",
-                    "purl": "pkg:deb/debian/curl@7.74.0-1.3%2Bdeb11u11?arch=amd64&distro=debian-11.9",
-                    "references": [
-                      "https://access.redhat.com/security/cve/CVE-2023-46219",
-                      "https://curl.se/docs/CVE-2023-46219.html",
-                      "https://hackerone.com/reports/2236133",
-                      "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/3ZX3VW67N4ACRAPMV2QS2LVYGD7H2MVE/",
-                      "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/UOGXU25FMMT2X6UUITQ7EZZYMJ42YWWD/",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2023-46219",
-                      "https://security.netapp.com/advisory/ntap-20240119-0007/",
-                      "https://ubuntu.com/security/notices/USN-6535-1",
-                      "https://www.cve.org/CVERecord?id=CVE-2023-46219",
-                      "https://www.debian.org/security/2023/dsa-5587"
-                    ],
-                    "severity": "MEDIUM",
-                    "suppressed": false,
-                    "title": "curl: excessively long file name may lead to unknown HSTS status"
-                  },
-                  {
-                    "cve": "CVE-2024-7264",
-                    "cvss": {
-                      "nvd": {
-                        "v3score": "6.5",
-                        "v3vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H"
-                      },
-                      "redhat": {
-                        "v3score": "5.3",
-                        "v3vector": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:H"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-125"
-                    ],
-                    "description": "libcurl's ASN1 parser code has the `GTime2str()` function, used for parsing an\nASN.1 Generalized Time field. If given an syntactically incorrect field, the\nparser might end up using -1 for the length of the *time fraction*, leading to\na `strlen()` getting performed on a pointer to a heap buffer area that is not\n(purposely) null terminated.\n\nThis flaw most likely leads to a crash, but can also lead to heap contents\ngetting returned to the application when\n[CURLINFO_CERTINFO](https://curl.se/libcurl/c/CURLINFO_CERTINFO.html) is used.",
-                    "diffID": "sha256:9664c8c85da49d2cedf85c6b8af0e128318580b95b277b87593a4f75886148af",
-                    "fixedVersions": [
-                      "7.74.0-1.3+deb11u13"
-                    ],
-                    "installedVersion": "7.74.0-1.3+deb11u11",
-                    "packageName": "curl",
-                    "purl": "pkg:deb/debian/curl@7.74.0-1.3%2Bdeb11u11?arch=amd64&distro=debian-11.9",
-                    "references": [
-                      "http://www.openwall.com/lists/oss-security/2024/07/31/1",
-                      "https://access.redhat.com/errata/RHSA-2025:1673",
-                      "https://access.redhat.com/security/cve/CVE-2024-7264",
-                      "https://bugzilla.redhat.com/2294581",
-                      "https://bugzilla.redhat.com/2294676",
-                      "https://bugzilla.redhat.com/2301888",
-                      "https://bugzilla.redhat.com/2318857",
-                      "https://bugzilla.redhat.com/2318858",
-                      "https://bugzilla.redhat.com/2318870",
-                      "https://bugzilla.redhat.com/2318873",
-                      "https://bugzilla.redhat.com/2318874",
-                      "https://bugzilla.redhat.com/2318876",
-                      "https://bugzilla.redhat.com/2318882",
-                      "https://bugzilla.redhat.com/2318883",
-                      "https://bugzilla.redhat.com/2318884",
-                      "https://bugzilla.redhat.com/2318885",
-                      "https://bugzilla.redhat.com/2318886",
-                      "https://bugzilla.redhat.com/2318897",
-                      "https://bugzilla.redhat.com/2318900",
-                      "https://bugzilla.redhat.com/2318905",
-                      "https://bugzilla.redhat.com/2318914",
-                      "https://bugzilla.redhat.com/2318922",
-                      "https://bugzilla.redhat.com/2318923",
-                      "https://bugzilla.redhat.com/2318925",
-                      "https://bugzilla.redhat.com/2318926",
-                      "https://bugzilla.redhat.com/2318927",
-                      "https://bugzilla.redhat.com/2331191",
-                      "https://bugzilla.redhat.com/2339218",
-                      "https://bugzilla.redhat.com/2339220",
-                      "https://bugzilla.redhat.com/2339221",
-                      "https://bugzilla.redhat.com/2339226",
-                      "https://bugzilla.redhat.com/2339231",
-                      "https://bugzilla.redhat.com/2339236",
-                      "https://bugzilla.redhat.com/2339238",
-                      "https://bugzilla.redhat.com/2339243",
-                      "https://bugzilla.redhat.com/2339247",
-                      "https://bugzilla.redhat.com/2339252",
-                      "https://bugzilla.redhat.com/2339259",
-                      "https://bugzilla.redhat.com/2339266",
-                      "https://bugzilla.redhat.com/2339270",
-                      "https://bugzilla.redhat.com/2339271",
-                      "https://bugzilla.redhat.com/2339275",
-                      "https://bugzilla.redhat.com/2339277",
-                      "https://bugzilla.redhat.com/2339281",
-                      "https://bugzilla.redhat.com/2339284",
-                      "https://bugzilla.redhat.com/2339291",
-                      "https://bugzilla.redhat.com/2339293",
-                      "https://bugzilla.redhat.com/2339295",
-                      "https://bugzilla.redhat.com/2339299",
-                      "https://bugzilla.redhat.com/2339300",
-                      "https://bugzilla.redhat.com/2339304",
-                      "https://bugzilla.redhat.com/2339305",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2294581",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2294676",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2301888",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2318857",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2318858",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2318870",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2318873",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2318874",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2318876",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2318882",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2318883",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2318884",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2318885",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2318886",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2318897",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2318900",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2318905",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2318914",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2318922",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2318923",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2318925",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2318926",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2318927",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2331191",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2339218",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2339220",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2339221",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2339226",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2339231",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2339236",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2339238",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2339243",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2339247",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2339252",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2339259",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2339266",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2339270",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2339271",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2339275",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2339277",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2339281",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2339284",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2339291",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2339293",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2339295",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2339299",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2339300",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2339304",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2339305",
-                      "https://curl.se/docs/CVE-2024-7264.html",
-                      "https://curl.se/docs/CVE-2024-7264.json",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-11053",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-21193",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-21194",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-21196",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-21197",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-21198",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-21199",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-21201",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-21203",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-21212",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-21213",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-21218",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-21219",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-21230",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-21231",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-21236",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-21237",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-21238",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-21239",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-21241",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-21247",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-37371",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-5535",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-7264",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21490",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21491",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21494",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21497",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21500",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21501",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21503",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21504",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21505",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21518",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21519",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21520",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21521",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21522",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21523",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21525",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21529",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21531",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21534",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21536",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21540",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21543",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21546",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21555",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21559",
-                      "https://errata.almalinux.org/8/ALSA-2025-1673.html",
-                      "https://errata.rockylinux.org/RLSA-2025:1671",
-                      "https://github.com/curl/curl/commit/27959ecce75cdb2809c0bdb3286e60e08fadb519",
-                      "https://hackerone.com/reports/2629968",
-                      "https://linux.oracle.com/cve/CVE-2024-7264.html",
-                      "https://linux.oracle.com/errata/ELSA-2025-1673.html",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2024-7264",
-                      "https://security.netapp.com/advisory/ntap-20240828-0008/",
-                      "https://security.netapp.com/advisory/ntap-20241025-0006/",
-                      "https://security.netapp.com/advisory/ntap-20241025-0010/",
-                      "https://ubuntu.com/security/notices/USN-6944-1",
-                      "https://ubuntu.com/security/notices/USN-6944-2",
-                      "https://www.cve.org/CVERecord?id=CVE-2024-7264",
-                      "https://www.oracle.com/security-alerts/cpuoct2024.html#AppendixMSQL"
-                    ],
-                    "severity": "MEDIUM",
-                    "suppressed": false,
-                    "title": "curl: libcurl: ASN.1 date parser overread"
-                  },
-                  {
-                    "cve": "CVE-2024-8096",
-                    "cvss": {
-                      "redhat": {
-                        "v3score": "6.5",
-                        "v3vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-295"
-                    ],
-                    "description": "When curl is told to use the Certificate Status Request TLS extension, often referred to as OCSP stapling, to verify that the server certificate is valid, it might fail to detect some OCSP problems and instead wrongly consider the response as fine.  If the returned status reports another error than 'revoked' (like for example 'unauthorized') it is not treated as a bad certficate.",
-                    "diffID": "sha256:9664c8c85da49d2cedf85c6b8af0e128318580b95b277b87593a4f75886148af",
-                    "fixedVersions": [
-                      "7.74.0-1.3+deb11u14"
-                    ],
-                    "installedVersion": "7.74.0-1.3+deb11u11",
-                    "packageName": "curl",
-                    "purl": "pkg:deb/debian/curl@7.74.0-1.3%2Bdeb11u11?arch=amd64&distro=debian-11.9",
-                    "references": [
-                      "http://www.openwall.com/lists/oss-security/2024/09/11/1",
-                      "https://access.redhat.com/security/cve/CVE-2024-8096",
-                      "https://curl.se/docs/CVE-2024-8096.html",
-                      "https://curl.se/docs/CVE-2024-8096.json",
-                      "https://hackerone.com/reports/2669852",
-                      "https://lists.debian.org/debian-lts-announce/2024/11/msg00008.html",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2024-8096",
-                      "https://security.netapp.com/advisory/ntap-20241011-0005/",
-                      "https://ubuntu.com/security/notices/USN-7012-1",
-                      "https://www.cve.org/CVERecord?id=CVE-2024-8096"
-                    ],
-                    "severity": "MEDIUM",
-                    "suppressed": false,
-                    "title": "curl: OCSP stapling bypass with GnuTLS"
-                  },
-                  {
-                    "cve": "CVE-2024-9681",
-                    "cvss": {
-                      "nvd": {
-                        "v3score": "6.5",
-                        "v3vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:L"
-                      },
-                      "redhat": {
-                        "v3score": "3.9",
-                        "v3vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:L"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-697"
-                    ],
-                    "description": "When curl is asked to use HSTS, the expiry time for a subdomain might\noverwrite a parent domain's cache entry, making it end sooner or later than\notherwise intended.\n\nThis affects curl using applications that enable HSTS and use URLs with the\ninsecure `HTTP://` scheme and perform transfers with hosts like\n`x.example.com` as well as `example.com` where the first host is a subdomain\nof the second host.\n\n(The HSTS cache either needs to have been populated manually or there needs to\nhave been previous HTTPS accesses done as the cache needs to have entries for\nthe domains involved to trigger this problem.)\n\nWhen `x.example.com` responds with `Strict-Transport-Security:` headers, this\nbug can make the subdomain's expiry timeout *bleed over* and get set for the\nparent domain `example.com` in curl's HSTS cache.\n\nThe result of a triggered bug is that HTTP accesses to `example.com` get\nconverted to HTTPS for a different period of time than what was asked for by\nthe origin server. If `example.com` for example stops supporting HTTPS at its\nexpiry time, curl might then fail to access `http://example.com` until the\n(wrongly set) timeout expires. This bug can also expire the parent's entry\n*earlier*, thus making curl inadvertently switch back to insecure HTTP earlier\nthan otherwise intended.",
-                    "diffID": "sha256:9664c8c85da49d2cedf85c6b8af0e128318580b95b277b87593a4f75886148af",
-                    "installedVersion": "7.74.0-1.3+deb11u11",
-                    "packageName": "curl",
-                    "purl": "pkg:deb/debian/curl@7.74.0-1.3%2Bdeb11u11?arch=amd64&distro=debian-11.9",
-                    "references": [
-                      "http://seclists.org/fulldisclosure/2025/Apr/10",
-                      "http://seclists.org/fulldisclosure/2025/Apr/11",
-                      "http://seclists.org/fulldisclosure/2025/Apr/12",
-                      "http://seclists.org/fulldisclosure/2025/Apr/13",
-                      "http://seclists.org/fulldisclosure/2025/Apr/4",
-                      "http://seclists.org/fulldisclosure/2025/Apr/5",
-                      "http://seclists.org/fulldisclosure/2025/Apr/8",
-                      "http://seclists.org/fulldisclosure/2025/Apr/9",
-                      "http://www.openwall.com/lists/oss-security/2024/11/06/2",
-                      "https://access.redhat.com/security/cve/CVE-2024-9681",
-                      "https://curl.se/docs/CVE-2024-9681.html",
-                      "https://curl.se/docs/CVE-2024-9681.json",
-                      "https://hackerone.com/reports/2764830",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2024-9681",
-                      "https://security.netapp.com/advisory/ntap-20241213-0006/",
-                      "https://ubuntu.com/security/notices/USN-7104-1",
-                      "https://www.cve.org/CVERecord?id=CVE-2024-9681"
-                    ],
-                    "severity": "MEDIUM",
-                    "suppressed": false,
-                    "title": "curl: HSTS subdomain overwrites parent cache entry"
-                  },
-                  {
-                    "cve": "CVE-2021-22922",
-                    "cvss": {
-                      "nvd": {
-                        "v3score": "6.5",
-                        "v3vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N"
-                      },
-                      "redhat": {
-                        "v3score": "6.5",
-                        "v3vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-840",
-                      "CWE-755"
-                    ],
-                    "description": "When curl is instructed to download content using the metalink feature, thecontents is verified against a hash provided in the metalink XML file.The metalink XML file points out to the client how to get the same contentfrom a set of different URLs, potentially hosted by different servers and theclient can then download the file from one or several of them. In a serial orparallel manner.If one of the servers hosting the contents has been breached and the contentsof the specific file on that server is replaced with a modified payload, curlshould detect this when the hash of the file mismatches after a completeddownload. It should remove the contents and instead try getting the contentsfrom another URL. This is not done, and instead such a hash mismatch is onlymentioned in text and the potentially malicious content is kept in the file ondisk.",
-                    "diffID": "sha256:9664c8c85da49d2cedf85c6b8af0e128318580b95b277b87593a4f75886148af",
-                    "installedVersion": "7.74.0-1.3+deb11u11",
-                    "packageName": "curl",
-                    "purl": "pkg:deb/debian/curl@7.74.0-1.3%2Bdeb11u11?arch=amd64&distro=debian-11.9",
-                    "references": [
-                      "https://access.redhat.com/security/cve/CVE-2021-22922",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=1981435",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=1981438",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=1981460",
-                      "https://cert-portal.siemens.com/productcert/pdf/ssa-389290.pdf",
-                      "https://curl.se/docs/CVE-2021-22922.html",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-22922",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-22923",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-22924",
-                      "https://errata.rockylinux.org/RLSA-2021:3582",
-                      "https://hackerone.com/reports/1213175",
-                      "https://linux.oracle.com/cve/CVE-2021-22922.html",
-                      "https://linux.oracle.com/errata/ELSA-2021-3582.html",
-                      "https://lists.apache.org/thread.html/r61db8e7dcb56dc000a5387a88f7a473bacec5ee01b9ff3f55308aacc%40%3Cdev.kafka.apache.org%3E",
-                      "https://lists.apache.org/thread.html/r61db8e7dcb56dc000a5387a88f7a473bacec5ee01b9ff3f55308aacc%40%3Cusers.kafka.apache.org%3E",
-                      "https://lists.apache.org/thread.html/rbf4ce74b0d1fa9810dec50ba3ace0caeea677af7c27a97111c06ccb7%40%3Cdev.kafka.apache.org%3E",
-                      "https://lists.apache.org/thread.html/rbf4ce74b0d1fa9810dec50ba3ace0caeea677af7c27a97111c06ccb7%40%3Cusers.kafka.apache.org%3E",
-                      "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FRUCW2UVNYUDZF72DQLFQR4PJEC6CF7V/",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2021-22922",
-                      "https://security.gentoo.org/glsa/202212-01",
-                      "https://security.netapp.com/advisory/ntap-20210902-0003/",
-                      "https://www.cve.org/CVERecord?id=CVE-2021-22922",
-                      "https://www.oracle.com/security-alerts/cpuoct2021.html"
-                    ],
-                    "severity": "LOW",
-                    "suppressed": false,
-                    "title": "curl: Content not matching hash in Metalink is not being discarded"
-                  },
-                  {
-                    "cve": "CVE-2021-22923",
-                    "cvss": {
-                      "nvd": {
-                        "v3score": "5.3",
-                        "v3vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N"
-                      },
-                      "redhat": {
-                        "v3score": "5.7",
-                        "v3vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-319",
-                      "CWE-522"
-                    ],
-                    "description": "When curl is instructed to get content using the metalink feature, and a user name and password are used to download the metalink XML file, those same credentials are then subsequently passed on to each of the servers from which curl will download or try to download the contents from. Often contrary to the user's expectations and intentions and without telling the user it happened.",
-                    "diffID": "sha256:9664c8c85da49d2cedf85c6b8af0e128318580b95b277b87593a4f75886148af",
-                    "installedVersion": "7.74.0-1.3+deb11u11",
-                    "packageName": "curl",
-                    "purl": "pkg:deb/debian/curl@7.74.0-1.3%2Bdeb11u11?arch=amd64&distro=debian-11.9",
-                    "references": [
-                      "https://access.redhat.com/security/cve/CVE-2021-22923",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=1981435",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=1981438",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=1981460",
-                      "https://cert-portal.siemens.com/productcert/pdf/ssa-389290.pdf",
-                      "https://curl.se/docs/CVE-2021-22923.html",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-22922",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-22923",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-22924",
-                      "https://errata.rockylinux.org/RLSA-2021:3582",
-                      "https://hackerone.com/reports/1213181",
-                      "https://linux.oracle.com/cve/CVE-2021-22923.html",
-                      "https://linux.oracle.com/errata/ELSA-2021-3582.html",
-                      "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FRUCW2UVNYUDZF72DQLFQR4PJEC6CF7V/",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2021-22923",
-                      "https://security.gentoo.org/glsa/202212-01",
-                      "https://security.netapp.com/advisory/ntap-20210902-0003/",
-                      "https://www.cve.org/CVERecord?id=CVE-2021-22923",
-                      "https://www.oracle.com/security-alerts/cpuoct2021.html"
-                    ],
-                    "severity": "LOW",
-                    "suppressed": false,
-                    "title": "curl: Metalink download sends credentials"
-                  },
-                  {
-                    "cve": "CVE-2023-28320",
-                    "cvss": {
-                      "nvd": {
-                        "v3score": "5.9",
-                        "v3vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H"
-                      },
-                      "redhat": {
-                        "v3score": "3.7",
-                        "v3vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-400",
-                      "CWE-362"
-                    ],
-                    "description": "A denial of service vulnerability exists in curl <v8.1.0 in the way libcurl provides several different backends for resolving host names, selected at build time. If it is built to use the synchronous resolver, it allows name resolves to time-out slow operations using `alarm()` and `siglongjmp()`. When doing this, libcurl used a global buffer that was not mutex protected and a multi-threaded application might therefore crash or otherwise misbehave.",
-                    "diffID": "sha256:9664c8c85da49d2cedf85c6b8af0e128318580b95b277b87593a4f75886148af",
-                    "installedVersion": "7.74.0-1.3+deb11u11",
-                    "packageName": "curl",
-                    "purl": "pkg:deb/debian/curl@7.74.0-1.3%2Bdeb11u11?arch=amd64&distro=debian-11.9",
-                    "references": [
-                      "http://seclists.org/fulldisclosure/2023/Jul/47",
-                      "http://seclists.org/fulldisclosure/2023/Jul/48",
-                      "http://seclists.org/fulldisclosure/2023/Jul/52",
-                      "https://access.redhat.com/security/cve/CVE-2023-28320",
-                      "https://curl.se/docs/CVE-2023-28320.html",
-                      "https://hackerone.com/reports/1929597",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2023-28320",
-                      "https://security.gentoo.org/glsa/202310-12",
-                      "https://security.netapp.com/advisory/ntap-20230609-0009/",
-                      "https://support.apple.com/kb/HT213843",
-                      "https://support.apple.com/kb/HT213844",
-                      "https://support.apple.com/kb/HT213845",
-                      "https://www.cve.org/CVERecord?id=CVE-2023-28320"
-                    ],
-                    "severity": "LOW",
-                    "suppressed": false,
-                    "title": "curl: siglongjmp race condition may lead to crash"
-                  },
-                  {
-                    "cve": "CVE-2024-2379",
-                    "cvss": {
-                      "redhat": {
-                        "v3score": "5.4",
-                        "v3vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-295"
-                    ],
-                    "description": "libcurl skips the certificate verification for a QUIC connection under certain conditions, when built to use wolfSSL. If told to use an unknown/bad cipher or curve, the error path accidentally skips the verification and returns OK, thus ignoring any certificate problems.",
-                    "diffID": "sha256:9664c8c85da49d2cedf85c6b8af0e128318580b95b277b87593a4f75886148af",
-                    "installedVersion": "7.74.0-1.3+deb11u11",
-                    "packageName": "curl",
-                    "purl": "pkg:deb/debian/curl@7.74.0-1.3%2Bdeb11u11?arch=amd64&distro=debian-11.9",
-                    "references": [
-                      "http://seclists.org/fulldisclosure/2024/Jul/18",
-                      "http://seclists.org/fulldisclosure/2024/Jul/19",
-                      "http://seclists.org/fulldisclosure/2024/Jul/20",
-                      "http://www.openwall.com/lists/oss-security/2024/03/27/2",
-                      "https://access.redhat.com/security/cve/CVE-2024-2379",
-                      "https://curl.se/docs/CVE-2024-2379.html",
-                      "https://curl.se/docs/CVE-2024-2379.json",
-                      "https://hackerone.com/reports/2410774",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2024-2379",
-                      "https://security.netapp.com/advisory/ntap-20240531-0001/",
-                      "https://support.apple.com/kb/HT214118",
-                      "https://support.apple.com/kb/HT214119",
-                      "https://support.apple.com/kb/HT214120",
-                      "https://www.cve.org/CVERecord?id=CVE-2024-2379"
-                    ],
-                    "severity": "LOW",
-                    "suppressed": false,
-                    "title": "curl: QUIC certificate check bypass with wolfSSL"
-                  },
-                  {
-                    "cve": "CVE-2025-0725",
-                    "cvss": {
-                      "redhat": {
-                        "v3score": "4",
-                        "v3vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-120"
-                    ],
-                    "description": "When libcurl is asked to perform automatic gzip decompression of\ncontent-encoded HTTP responses with the `CURLOPT_ACCEPT_ENCODING` option,\n**using zlib 1.2.0.3 or older**, an attacker-controlled integer overflow would\nmake libcurl perform a buffer overflow.",
-                    "diffID": "sha256:9664c8c85da49d2cedf85c6b8af0e128318580b95b277b87593a4f75886148af",
-                    "installedVersion": "7.74.0-1.3+deb11u11",
-                    "packageName": "curl",
-                    "purl": "pkg:deb/debian/curl@7.74.0-1.3%2Bdeb11u11?arch=amd64&distro=debian-11.9",
-                    "references": [
-                      "http://www.openwall.com/lists/oss-security/2025/02/05/3",
-                      "http://www.openwall.com/lists/oss-security/2025/02/06/2",
-                      "http://www.openwall.com/lists/oss-security/2025/02/06/4",
-                      "https://access.redhat.com/security/cve/CVE-2025-0725",
-                      "https://curl.se/docs/CVE-2025-0725.html",
-                      "https://curl.se/docs/CVE-2025-0725.json",
-                      "https://github.com/curl/curl/commit/76f83f0db23846e254d940ec7",
-                      "https://hackerone.com/reports/2956023",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2025-0725",
-                      "https://security.netapp.com/advisory/ntap-20250306-0009/",
-                      "https://www.cve.org/CVERecord?id=CVE-2025-0725"
-                    ],
-                    "severity": "LOW",
-                    "suppressed": false,
-                    "title": "libcurl: Buffer Overflow in libcurl via zlib Integer Overflow"
-                  },
-                  {
-                    "cve": "CVE-2025-10966",
-                    "cvss": {
-                      "redhat": {
-                        "v3score": "5.9",
-                        "v3vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N"
-                      }
-                    },
-                    "description": "curl's code for managing SSH connections when SFTP was done using the wolfSSH\npowered backend was flawed and missed host verification mechanisms.\n\nThis prevents curl from detecting MITM attackers and more.",
-                    "diffID": "sha256:9664c8c85da49d2cedf85c6b8af0e128318580b95b277b87593a4f75886148af",
-                    "installedVersion": "7.74.0-1.3+deb11u11",
-                    "packageName": "curl",
-                    "purl": "pkg:deb/debian/curl@7.74.0-1.3%2Bdeb11u11?arch=amd64&distro=debian-11.9",
-                    "references": [
-                      "http://www.openwall.com/lists/oss-security/2025/11/05/2",
-                      "https://access.redhat.com/security/cve/CVE-2025-10966",
-                      "https://curl.se/docs/CVE-2025-10966.html",
-                      "https://curl.se/docs/CVE-2025-10966.json",
-                      "https://github.com/curl/curl/commit/b011e3fcfb06d6c027859",
-                      "https://hackerone.com/reports/3355218",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2025-10966",
-                      "https://www.cve.org/CVERecord?id=CVE-2025-10966"
-                    ],
-                    "severity": "LOW",
-                    "suppressed": false,
-                    "title": "curl: Curl missing SFTP host verification with wolfSSH backend"
-                  },
-                  {
-                    "cve": "CVE-2025-14017",
-                    "cvss": {
-                      "redhat": {
-                        "v3score": "4.8",
-                        "v3vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N"
-                      }
-                    },
-                    "description": "When doing multi-threaded LDAPS transfers (LDAP over TLS) with libcurl,\nchanging TLS options in one thread would inadvertently change them globally\nand therefore possibly also affect other concurrently setup transfers.\n\nDisabling certificate verification for a specific transfer could\nunintentionally disable the feature for other threads as well.",
-                    "diffID": "sha256:9664c8c85da49d2cedf85c6b8af0e128318580b95b277b87593a4f75886148af",
-                    "installedVersion": "7.74.0-1.3+deb11u11",
-                    "packageName": "curl",
-                    "purl": "pkg:deb/debian/curl@7.74.0-1.3%2Bdeb11u11?arch=amd64&distro=debian-11.9",
-                    "references": [
-                      "http://www.openwall.com/lists/oss-security/2026/01/07/3",
-                      "https://access.redhat.com/security/cve/CVE-2025-14017",
-                      "https://curl.se/docs/CVE-2025-14017.html",
-                      "https://curl.se/docs/CVE-2025-14017.json",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2025-14017",
-                      "https://www.cve.org/CVERecord?id=CVE-2025-14017"
-                    ],
-                    "severity": "LOW",
-                    "suppressed": false,
-                    "title": "curl: curl: Security bypass due to global TLS option changes in multi-threaded LDAPS transfers"
-                  },
-                  {
-                    "cve": "CVE-2025-14524",
-                    "cwes": [
-                      "CWE-601"
-                    ],
-                    "description": "When an OAuth2 bearer token is used for an HTTP(S) transfer, and that transfer\nperforms a cross-protocol redirect to a second URL that uses an IMAP, LDAP,\nPOP3 or SMTP scheme, curl might wrongly pass on the bearer token to the new\ntarget host.",
-                    "diffID": "sha256:9664c8c85da49d2cedf85c6b8af0e128318580b95b277b87593a4f75886148af",
-                    "installedVersion": "7.74.0-1.3+deb11u11",
-                    "packageName": "curl",
-                    "purl": "pkg:deb/debian/curl@7.74.0-1.3%2Bdeb11u11?arch=amd64&distro=debian-11.9",
-                    "references": [
-                      "http://www.openwall.com/lists/oss-security/2026/01/07/4",
-                      "https://curl.se/docs/CVE-2025-14524.html",
-                      "https://curl.se/docs/CVE-2025-14524.json",
-                      "https://hackerone.com/reports/3459417",
-                      "https://www.cve.org/CVERecord?id=CVE-2025-14524"
-                    ],
-                    "severity": "LOW",
-                    "suppressed": false,
-                    "title": "When an OAuth2 bearer token is used for an HTTP(S) transfer, and that  ..."
-                  },
-                  {
-                    "cve": "CVE-2025-15079",
-                    "cwes": [
-                      "CWE-297"
-                    ],
-                    "description": "When doing SSH-based transfers using either SCP or SFTP, and setting the\nknown_hosts file, libcurl could still mistakenly accept connecting to hosts\n*not present* in the specified file if they were added as recognized in the\nlibssh *global* known_hosts file.",
-                    "diffID": "sha256:9664c8c85da49d2cedf85c6b8af0e128318580b95b277b87593a4f75886148af",
-                    "installedVersion": "7.74.0-1.3+deb11u11",
-                    "packageName": "curl",
-                    "purl": "pkg:deb/debian/curl@7.74.0-1.3%2Bdeb11u11?arch=amd64&distro=debian-11.9",
-                    "references": [
-                      "http://www.openwall.com/lists/oss-security/2026/01/07/6",
-                      "https://curl.se/docs/CVE-2025-15079.html",
-                      "https://curl.se/docs/CVE-2025-15079.json",
-                      "https://hackerone.com/reports/3477116",
-                      "https://www.cve.org/CVERecord?id=CVE-2025-15079"
-                    ],
-                    "severity": "LOW",
-                    "suppressed": false,
-                    "title": "When doing SSH-based transfers using either SCP or SFTP, and setting t ..."
-                  },
-                  {
-                    "cve": "CVE-2025-15224",
-                    "cwes": [
-                      "CWE-287"
-                    ],
-                    "description": "When doing SSH-based transfers using either SCP or SFTP, and asked to do\npublic key authentication, curl would wrongly still ask and authenticate using\na locally running SSH agent.",
-                    "diffID": "sha256:9664c8c85da49d2cedf85c6b8af0e128318580b95b277b87593a4f75886148af",
-                    "installedVersion": "7.74.0-1.3+deb11u11",
-                    "packageName": "curl",
-                    "purl": "pkg:deb/debian/curl@7.74.0-1.3%2Bdeb11u11?arch=amd64&distro=debian-11.9",
-                    "references": [
-                      "http://www.openwall.com/lists/oss-security/2026/01/07/7",
-                      "https://curl.se/docs/CVE-2025-15224.html",
-                      "https://curl.se/docs/CVE-2025-15224.json",
-                      "https://hackerone.com/reports/3480925",
-                      "https://www.cve.org/CVERecord?id=CVE-2025-15224"
-                    ],
-                    "severity": "LOW",
-                    "suppressed": false,
-                    "title": "When doing SSH-based transfers using either SCP or SFTP, and asked to  ..."
-                  },
-                  {
-                    "cve": "DLA-4213-1",
-                    "diffID": "sha256:9664c8c85da49d2cedf85c6b8af0e128318580b95b277b87593a4f75886148af",
-                    "fixedVersions": [
-                      "7.74.0-1.3+deb11u15"
-                    ],
-                    "installedVersion": "7.74.0-1.3+deb11u11",
-                    "packageName": "curl",
-                    "purl": "pkg:deb/debian/curl@7.74.0-1.3%2Bdeb11u11?arch=amd64&distro=debian-11.9",
-                    "severity": "UNKNOWN",
-                    "suppressed": false,
-                    "title": "curl - regression update"
-                  },
-                  {
-                    "cve": "DLA-4432-1",
-                    "diffID": "sha256:9664c8c85da49d2cedf85c6b8af0e128318580b95b277b87593a4f75886148af",
-                    "fixedVersions": [
-                      "7.74.0-1.3+deb11u16"
-                    ],
-                    "installedVersion": "7.74.0-1.3+deb11u11",
-                    "packageName": "curl",
-                    "purl": "pkg:deb/debian/curl@7.74.0-1.3%2Bdeb11u11?arch=amd64&distro=debian-11.9",
-                    "severity": "UNKNOWN",
-                    "suppressed": false,
-                    "title": "curl - security update"
-                  },
-                  {
-                    "cve": "CVE-2025-6297",
-                    "cwes": [
-                      "CWE-400",
-                      "CWE-732"
-                    ],
-                    "description": "It was discovered that dpkg-deb does not properly sanitize directory permissions when extracting a control member into a temporary directory, which is\ndocumented as being a safe operation even on untrusted data. This may result in leaving temporary files behind on cleanup. Given automated and repeated execution of dpkg-deb commands on\nadversarial .deb packages or with well compressible files, placed\ninside a directory with permissions not allowing removal by a non-root\nuser, this can end up in a DoS scenario due to causing disk quota\nexhaustion or disk full conditions.",
-                    "diffID": "sha256:420179ad2efafbf953a0c75f68a4c9dfaf38a98643df97d415bce49b179895f7",
-                    "installedVersion": "1.20.13",
-                    "packageName": "dpkg",
-                    "purl": "pkg:deb/debian/dpkg@1.20.13?arch=amd64&distro=debian-11.9",
-                    "references": [
-                      "https://git.dpkg.org/cgit/dpkg/dpkg.git/commit/?id=ed6bbd445dd8800308c67236ba35d08004c98e82",
-                      "https://ubuntu.com/security/notices/USN-7768-1",
-                      "https://www.cve.org/CVERecord?id=CVE-2025-6297"
-                    ],
-                    "severity": "LOW",
-                    "suppressed": false,
-                    "title": "It was discovered that dpkg-deb does not properly sanitize directory p ..."
-                  },
-                  {
-                    "cve": "CVE-2022-1304",
-                    "cvss": {
-                      "nvd": {
-                        "v3score": "7.8",
-                        "v3vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H"
-                      },
-                      "redhat": {
-                        "v3score": "5.8",
-                        "v3vector": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:H"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-125",
-                      "CWE-787"
-                    ],
-                    "description": "An out-of-bounds read/write vulnerability was found in e2fsprogs 1.46.5. This issue leads to a segmentation fault and possibly arbitrary code execution via a specially crafted filesystem.",
-                    "diffID": "sha256:420179ad2efafbf953a0c75f68a4c9dfaf38a98643df97d415bce49b179895f7",
-                    "fixedVersions": [
-                      "1.46.2-2+deb11u1"
-                    ],
-                    "installedVersion": "1.46.2-2",
-                    "packageName": "e2fsprogs",
-                    "purl": "pkg:deb/debian/e2fsprogs@1.46.2-2?arch=amd64&distro=debian-11.9",
-                    "references": [
-                      "https://access.redhat.com/errata/RHSA-2022:7720",
-                      "https://access.redhat.com/security/cve/CVE-2022-1304",
-                      "https://bugzilla.redhat.com/2069726",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2069726",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-1304",
-                      "https://errata.almalinux.org/8/ALSA-2022-7720.html",
-                      "https://errata.rockylinux.org/RLSA-2022:8361",
-                      "https://linux.oracle.com/cve/CVE-2022-1304.html",
-                      "https://linux.oracle.com/errata/ELSA-2024-12731.html",
-                      "https://lists.debian.org/debian-lts-announce/2024/10/msg00001.html",
-                      "https://marc.info/?l=linux-ext4&m=165056234501732&w=2",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2022-1304",
-                      "https://security.netapp.com/advisory/ntap-20241122-0010/",
-                      "https://ubuntu.com/security/notices/USN-5464-1",
-                      "https://www.cve.org/CVERecord?id=CVE-2022-1304"
-                    ],
-                    "severity": "HIGH",
-                    "suppressed": false,
-                    "title": "e2fsprogs: out-of-bounds read/write via crafted filesystem"
-                  },
-                  {
-                    "cve": "CVE-2023-4039",
-                    "cvss": {
-                      "nvd": {
-                        "v3score": "4.8",
-                        "v3vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-693"
-                    ],
-                    "description": "**DISPUTED**A failure in the -fstack-protector feature in GCC-based toolchains \nthat target AArch64 allows an attacker to exploit an existing buffer \noverflow in dynamically-sized local variables in your application \nwithout this being detected. This stack-protector failure only applies \nto C99-style dynamically-sized local variables or those created using \nalloca(). The stack-protector operates as intended for statically-sized \nlocal variables.\n\nThe default behavior when the stack-protector \ndetects an overflow is to terminate your application, resulting in \ncontrolled loss of availability. An attacker who can exploit a buffer \noverflow without triggering the stack-protector might be able to change \nprogram flow control to cause an uncontrolled loss of availability or to\n go further and affect confidentiality or integrity. NOTE: The GCC project argues that this is a missed hardening bug and not a vulnerability by itself.",
-                    "diffID": "sha256:420179ad2efafbf953a0c75f68a4c9dfaf38a98643df97d415bce49b179895f7",
-                    "installedVersion": "10.2.1-6",
-                    "packageName": "gcc-10-base",
-                    "purl": "pkg:deb/debian/gcc-10-base@10.2.1-6?arch=amd64&distro=debian-11.9",
-                    "references": [
-                      "https://access.redhat.com/security/cve/CVE-2023-4039",
-                      "https://developer.arm.com/Arm%20Security%20Center/GCC%20Stack%20Protector%20Vulnerability%20AArch64",
-                      "https://gcc.gnu.org/git/?p=gcc.git;a=blob_plain;f=SECURITY.txt",
-                      "https://gcc.gnu.org/pipermail/gcc-patches/2023-October/634066.html",
-                      "https://github.com/metaredteam/external-disclosures/security/advisories/GHSA-x7ch-h5rf-w2mf",
-                      "https://inbox.sourceware.org/gcc-patches/46cfa37b-56eb-344d-0745-e0d35393392d@gotplt.org",
-                      "https://linux.oracle.com/cve/CVE-2023-4039.html",
-                      "https://linux.oracle.com/errata/ELSA-2023-28766.html",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2023-4039",
-                      "https://rtx.meta.security/mitigation/2023/09/12/CVE-2023-4039.html",
-                      "https://ubuntu.com/security/notices/USN-7700-1",
-                      "https://www.cve.org/CVERecord?id=CVE-2023-4039"
-                    ],
-                    "severity": "LOW",
-                    "suppressed": false,
-                    "title": "gcc: -fstack-protector fails to guard dynamic stack allocations on ARM64"
-                  },
-                  {
-                    "cve": "CVE-2023-4039",
-                    "cvss": {
-                      "nvd": {
-                        "v3score": "4.8",
-                        "v3vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-693"
-                    ],
-                    "description": "**DISPUTED**A failure in the -fstack-protector feature in GCC-based toolchains \nthat target AArch64 allows an attacker to exploit an existing buffer \noverflow in dynamically-sized local variables in your application \nwithout this being detected. This stack-protector failure only applies \nto C99-style dynamically-sized local variables or those created using \nalloca(). The stack-protector operates as intended for statically-sized \nlocal variables.\n\nThe default behavior when the stack-protector \ndetects an overflow is to terminate your application, resulting in \ncontrolled loss of availability. An attacker who can exploit a buffer \noverflow without triggering the stack-protector might be able to change \nprogram flow control to cause an uncontrolled loss of availability or to\n go further and affect confidentiality or integrity. NOTE: The GCC project argues that this is a missed hardening bug and not a vulnerability by itself.",
-                    "diffID": "sha256:420179ad2efafbf953a0c75f68a4c9dfaf38a98643df97d415bce49b179895f7",
-                    "installedVersion": "9.3.0-22",
-                    "packageName": "gcc-9-base",
-                    "purl": "pkg:deb/debian/gcc-9-base@9.3.0-22?arch=amd64&distro=debian-11.9",
-                    "references": [
-                      "https://access.redhat.com/security/cve/CVE-2023-4039",
-                      "https://developer.arm.com/Arm%20Security%20Center/GCC%20Stack%20Protector%20Vulnerability%20AArch64",
-                      "https://gcc.gnu.org/git/?p=gcc.git;a=blob_plain;f=SECURITY.txt",
-                      "https://gcc.gnu.org/pipermail/gcc-patches/2023-October/634066.html",
-                      "https://github.com/metaredteam/external-disclosures/security/advisories/GHSA-x7ch-h5rf-w2mf",
-                      "https://inbox.sourceware.org/gcc-patches/46cfa37b-56eb-344d-0745-e0d35393392d@gotplt.org",
-                      "https://linux.oracle.com/cve/CVE-2023-4039.html",
-                      "https://linux.oracle.com/errata/ELSA-2023-28766.html",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2023-4039",
-                      "https://rtx.meta.security/mitigation/2023/09/12/CVE-2023-4039.html",
-                      "https://ubuntu.com/security/notices/USN-7700-1",
-                      "https://www.cve.org/CVERecord?id=CVE-2023-4039"
-                    ],
-                    "severity": "LOW",
-                    "suppressed": false,
-                    "title": "gcc: -fstack-protector fails to guard dynamic stack allocations on ARM64"
-                  },
-                  {
-                    "cve": "CVE-2025-68973",
-                    "cvss": {
-                      "nvd": {
-                        "v3score": "7",
-                        "v3vector": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H"
-                      },
-                      "redhat": {
-                        "v3score": "7.8",
-                        "v3vector": "CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:N"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-675",
-                      "CWE-787"
-                    ],
-                    "description": "In GnuPG before 2.4.9, armor_filter in g10/armor.c has two increments of an index variable where one is intended, leading to an out-of-bounds write for crafted input. (For ExtendedLTS, 2.2.51 and later are fixed versions.)",
-                    "diffID": "sha256:420179ad2efafbf953a0c75f68a4c9dfaf38a98643df97d415bce49b179895f7",
-                    "fixedVersions": [
-                      "2.2.27-2+deb11u3"
-                    ],
-                    "installedVersion": "2.2.27-2+deb11u2",
-                    "packageName": "gpgv",
-                    "purl": "pkg:deb/debian/gpgv@2.2.27-2%2Bdeb11u2?arch=amd64&distro=debian-11.9",
-                    "references": [
-                      "http://www.openwall.com/lists/oss-security/2025/12/29/11",
-                      "https://access.redhat.com/errata/RHSA-2026:0728",
-                      "https://access.redhat.com/security/cve/CVE-2025-68973",
-                      "https://bugzilla.redhat.com/2425966",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2425966",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-68973",
-                      "https://dev.gnupg.org/T7906",
-                      "https://dev.gnupg.org/T8001",
-                      "https://errata.almalinux.org/8/ALSA-2026-0728.html",
-                      "https://errata.rockylinux.org/RLSA-2026:0719",
-                      "https://github.com/gpg/gnupg/blob/ff30683418695f5d2cc9e6cf8c9418e09378ebe4/g10/armor.c#L1305-L1306",
-                      "https://github.com/gpg/gnupg/commit/115d138ba599328005c5321c0ef9f00355838ca9",
-                      "https://github.com/gpg/gnupg/commit/115d138ba599328005c5321c0ef9f00355838ca9 (gnupg-2.5.14)",
-                      "https://github.com/gpg/gnupg/commit/1e929abd20fa2e4be3797a137caca63a971d5372 (gnupg-2.2.51)",
-                      "https://github.com/gpg/gnupg/commit/4ecc5122f20e10c17172ed72f4fa46c784b5fb48 (gnupg-2.4.9)",
-                      "https://github.com/gpg/gnupg/compare/gnupg-2.2.50...gnupg-2.2.51",
-                      "https://gpg.fail/memcpy",
-                      "https://linux.oracle.com/cve/CVE-2025-68973.html",
-                      "https://linux.oracle.com/errata/ELSA-2026-0728.html",
-                      "https://lists.debian.org/debian-lts-announce/2026/01/msg00008.html",
-                      "https://media.ccc.de/v/39c3-to-sign-or-not-to-sign-practical-vulnerabilities-i",
-                      "https://news.ycombinator.com/item?id=46403200",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2025-68973",
-                      "https://ubuntu.com/security/notices/USN-7946-1",
-                      "https://ubuntu.com/security/notices/USN-7946-2",
-                      "https://www.cve.org/CVERecord?id=CVE-2025-68973",
-                      "https://www.openwall.com/lists/oss-security/2025/12/28/5"
-                    ],
-                    "severity": "HIGH",
-                    "suppressed": false,
-                    "title": "GnuPG: GnuPG: Information disclosure and potential arbitrary code execution via out-of-bounds write"
-                  },
-                  {
-                    "cve": "CVE-2025-30258",
-                    "cvss": {
-                      "nvd": {
-                        "v3score": "4.7",
-                        "v3vector": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H"
-                      },
-                      "redhat": {
-                        "v3score": "2.7",
-                        "v3vector": "CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:C/C:N/I:N/A:L"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-754"
-                    ],
-                    "description": "In GnuPG before 2.5.5, if a user chooses to import a certificate with certain crafted subkey data that lacks a valid backsig or that has incorrect usage flags, the user loses the ability to verify signatures made from certain other signing keys, aka a \"verification DoS.\"",
-                    "diffID": "sha256:420179ad2efafbf953a0c75f68a4c9dfaf38a98643df97d415bce49b179895f7",
-                    "installedVersion": "2.2.27-2+deb11u2",
-                    "packageName": "gpgv",
-                    "purl": "pkg:deb/debian/gpgv@2.2.27-2%2Bdeb11u2?arch=amd64&distro=debian-11.9",
-                    "references": [
-                      "https://access.redhat.com/security/cve/CVE-2025-30258",
-                      "https://dev.gnupg.org/T7527",
-                      "https://dev.gnupg.org/rG48978ccb4e20866472ef18436a32744350a65158",
-                      "https://lists.gnupg.org/pipermail/gnupg-announce/2025q1/000491.html",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2025-30258",
-                      "https://ubuntu.com/security/notices/USN-7412-1",
-                      "https://ubuntu.com/security/notices/USN-7412-3",
-                      "https://www.cve.org/CVERecord?id=CVE-2025-30258"
-                    ],
-                    "severity": "MEDIUM",
-                    "suppressed": false,
-                    "title": "gnupg: verification DoS due to a malicious subkey in the keyring"
-                  },
-                  {
-                    "cve": "CVE-2025-68972",
-                    "cvss": {
-                      "nvd": {
-                        "v3score": "4.7",
-                        "v3vector": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:N"
-                      },
-                      "redhat": {
-                        "v3score": "5.9",
-                        "v3vector": "CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:N/I:H/A:N"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-347"
-                    ],
-                    "description": "In GnuPG through 2.4.8, if a signed message has \\f at the end of a plaintext line, an adversary can construct a modified message that places additional text after the signed material, such that signature verification of the modified message succeeds (although an \"invalid armor\" message is printed during verification). This is related to use of \\f as a marker to denote truncation of a long plaintext line.",
-                    "diffID": "sha256:420179ad2efafbf953a0c75f68a4c9dfaf38a98643df97d415bce49b179895f7",
-                    "installedVersion": "2.2.27-2+deb11u2",
-                    "packageName": "gpgv",
-                    "purl": "pkg:deb/debian/gpgv@2.2.27-2%2Bdeb11u2?arch=amd64&distro=debian-11.9",
-                    "references": [
-                      "https://access.redhat.com/security/cve/CVE-2025-68972",
-                      "https://gpg.fail/formfeed",
-                      "https://media.ccc.de/v/39c3-to-sign-or-not-to-sign-practical-vulnerabilities-i",
-                      "https://news.ycombinator.com/item?id=46404339",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2025-68972",
-                      "https://www.cve.org/CVERecord?id=CVE-2025-68972"
-                    ],
-                    "severity": "MEDIUM",
-                    "suppressed": false,
-                    "title": "gnupg: GnuPG: Signature bypass via form feed character in signed messages"
-                  },
-                  {
-                    "cve": "CVE-2022-3219",
-                    "cvss": {
-                      "nvd": {
-                        "v3score": "3.3",
-                        "v3vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L"
-                      },
-                      "redhat": {
-                        "v3score": "6.2",
-                        "v3vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-787"
-                    ],
-                    "description": "GnuPG can be made to spin on a relatively small input by (for example) crafting a public key with thousands of signatures attached, compressed down to just a few KB.",
-                    "diffID": "sha256:420179ad2efafbf953a0c75f68a4c9dfaf38a98643df97d415bce49b179895f7",
-                    "installedVersion": "2.2.27-2+deb11u2",
-                    "packageName": "gpgv",
-                    "purl": "pkg:deb/debian/gpgv@2.2.27-2%2Bdeb11u2?arch=amd64&distro=debian-11.9",
-                    "references": [
-                      "https://access.redhat.com/security/cve/CVE-2022-3219",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2127010",
-                      "https://dev.gnupg.org/D556",
-                      "https://dev.gnupg.org/T5993",
-                      "https://marc.info/?l=oss-security&m=165696590211434&w=4",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2022-3219",
-                      "https://security.netapp.com/advisory/ntap-20230324-0001/",
-                      "https://www.cve.org/CVERecord?id=CVE-2022-3219"
-                    ],
-                    "severity": "LOW",
-                    "suppressed": false,
-                    "title": "gnupg: denial of service issue (resource consumption) using compressed packets"
-                  },
-                  {
-                    "cve": "CVE-2011-3374",
-                    "cvss": {
-                      "nvd": {
-                        "v3score": "3.7",
-                        "v3vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-347"
-                    ],
-                    "description": "It was found that apt-key in apt, all versions, do not correctly validate gpg keys with the master keyring, leading to a potential man-in-the-middle attack.",
-                    "diffID": "sha256:420179ad2efafbf953a0c75f68a4c9dfaf38a98643df97d415bce49b179895f7",
-                    "installedVersion": "2.2.4",
-                    "packageName": "libapt-pkg6.0",
-                    "purl": "pkg:deb/debian/libapt-pkg6.0@2.2.4?arch=amd64&distro=debian-11.9",
-                    "references": [
-                      "https://access.redhat.com/security/cve/cve-2011-3374",
-                      "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=642480",
-                      "https://people.canonical.com/~ubuntu-security/cve/2011/CVE-2011-3374.html",
-                      "https://seclists.org/fulldisclosure/2011/Sep/221",
-                      "https://security-tracker.debian.org/tracker/CVE-2011-3374",
-                      "https://snyk.io/vuln/SNYK-LINUX-APT-116518",
-                      "https://ubuntu.com/security/CVE-2011-3374"
-                    ],
-                    "severity": "LOW",
-                    "suppressed": false,
-                    "title": "It was found that apt-key in apt, all versions, do not correctly valid ..."
-                  },
-                  {
-                    "cve": "CVE-2025-14104",
-                    "cvss": {
-                      "redhat": {
-                        "v3score": "6.1",
-                        "v3vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-125"
-                    ],
-                    "description": "A flaw was found in util-linux. This vulnerability allows a heap buffer overread when processing 256-byte usernames, specifically within the `setpwnam()` function, affecting SUID (Set User ID) login-utils utilities writing to the password database.",
-                    "diffID": "sha256:420179ad2efafbf953a0c75f68a4c9dfaf38a98643df97d415bce49b179895f7",
-                    "installedVersion": "2.36.1-8+deb11u2",
-                    "packageName": "libblkid1",
-                    "purl": "pkg:deb/debian/libblkid1@2.36.1-8%2Bdeb11u2?arch=amd64&distro=debian-11.9",
-                    "references": [
-                      "https://access.redhat.com/errata/RHSA-2026:1696",
-                      "https://access.redhat.com/errata/RHSA-2026:1852",
-                      "https://access.redhat.com/errata/RHSA-2026:1913",
-                      "https://access.redhat.com/security/cve/CVE-2025-14104",
-                      "https://bugzilla.redhat.com/2419369",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2419369",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-14104",
-                      "https://errata.almalinux.org/10/ALSA-2026-1696.html",
-                      "https://errata.rockylinux.org/RLSA-2026:1913",
-                      "https://linux.oracle.com/cve/CVE-2025-14104.html",
-                      "https://linux.oracle.com/errata/ELSA-2026-1913.html",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2025-14104",
-                      "https://www.cve.org/CVERecord?id=CVE-2025-14104"
-                    ],
-                    "severity": "MEDIUM",
-                    "suppressed": false,
-                    "title": "util-linux: util-linux: Heap buffer overread in setpwnam() when processing 256-byte usernames"
-                  },
-                  {
-                    "cve": "CVE-2022-0563",
-                    "cvss": {
-                      "nvd": {
-                        "v3score": "5.5",
-                        "v3vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N"
-                      },
-                      "redhat": {
-                        "v3score": "5.5",
-                        "v3vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-209"
-                    ],
-                    "description": "A flaw was found in the util-linux chfn and chsh utilities when compiled with Readline support. The Readline library uses an \"INPUTRC\" environment variable to get a path to the library config file. When the library cannot parse the specified file, it prints an error message containing data from the file. This flaw allows an unprivileged user to read root-owned files, potentially leading to privilege escalation. This flaw affects util-linux versions prior to 2.37.4.",
-                    "diffID": "sha256:420179ad2efafbf953a0c75f68a4c9dfaf38a98643df97d415bce49b179895f7",
-                    "installedVersion": "2.36.1-8+deb11u2",
-                    "packageName": "libblkid1",
-                    "purl": "pkg:deb/debian/libblkid1@2.36.1-8%2Bdeb11u2?arch=amd64&distro=debian-11.9",
-                    "references": [
-                      "https://access.redhat.com/security/cve/CVE-2022-0563",
-                      "https://blog.trailofbits.com/2023/02/16/suid-logic-bug-linux-readline/",
-                      "https://lore.kernel.org/util-linux/20220214110609.msiwlm457ngoic6w%40ws.net.home/T/#u",
-                      "https://lore.kernel.org/util-linux/20220214110609.msiwlm457ngoic6w@ws.net.home/T/#u",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2022-0563",
-                      "https://security.gentoo.org/glsa/202401-08",
-                      "https://security.netapp.com/advisory/ntap-20220331-0002/",
-                      "https://www.cve.org/CVERecord?id=CVE-2022-0563"
-                    ],
-                    "severity": "LOW",
-                    "suppressed": false,
-                    "title": "util-linux: partial disclosure of arbitrary files in chfn and chsh when compiled with libreadline"
-                  },
-                  {
-                    "cve": "CVE-2024-2961",
-                    "cvss": {
-                      "redhat": {
-                        "v3score": "8.8",
-                        "v3vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-787"
-                    ],
-                    "description": "The iconv() function in the GNU C Library versions 2.39 and older may overflow the output buffer passed to it by up to 4 bytes when converting strings to the ISO-2022-CN-EXT character set, which may be used to crash an application or overwrite a neighbouring variable.",
-                    "diffID": "sha256:420179ad2efafbf953a0c75f68a4c9dfaf38a98643df97d415bce49b179895f7",
-                    "fixedVersions": [
-                      "2.31-13+deb11u9"
-                    ],
-                    "installedVersion": "2.31-13+deb11u8",
-                    "packageName": "libc-bin",
-                    "purl": "pkg:deb/debian/libc-bin@2.31-13%2Bdeb11u8?arch=amd64&distro=debian-11.9",
-                    "references": [
-                      "http://www.openwall.com/lists/oss-security/2024/04/17/9",
-                      "http://www.openwall.com/lists/oss-security/2024/04/18/4",
-                      "http://www.openwall.com/lists/oss-security/2024/04/24/2",
-                      "http://www.openwall.com/lists/oss-security/2024/05/27/1",
-                      "http://www.openwall.com/lists/oss-security/2024/05/27/2",
-                      "http://www.openwall.com/lists/oss-security/2024/05/27/3",
-                      "http://www.openwall.com/lists/oss-security/2024/05/27/4",
-                      "http://www.openwall.com/lists/oss-security/2024/05/27/5",
-                      "http://www.openwall.com/lists/oss-security/2024/05/27/6",
-                      "http://www.openwall.com/lists/oss-security/2024/07/22/5",
-                      "https://access.redhat.com/errata/RHSA-2024:3269",
-                      "https://access.redhat.com/security/cve/CVE-2024-2961",
-                      "https://bugzilla.redhat.com/2273404",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2273404",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2277202",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2277204",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2277205",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2277206",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-2961",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-33599",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-33600",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-33601",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-33602",
-                      "https://errata.almalinux.org/8/ALSA-2024-3269.html",
-                      "https://errata.rockylinux.org/RLSA-2024:3339",
-                      "https://linux.oracle.com/cve/CVE-2024-2961.html",
-                      "https://linux.oracle.com/errata/ELSA-2024-3588.html",
-                      "https://lists.debian.org/debian-lts-announce/2024/05/msg00001.html",
-                      "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/BTJFBGHDYG5PEIFD5WSSSKSFZ2AZWC5N/",
-                      "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/P3I4KYS6EU6S7QZ47WFNTPVAHFIUQNEL/",
-                      "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/YAMJQI3Y6BHWV3CUTYBXOZONCUJNOB2Z/",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2024-2961",
-                      "https://security.netapp.com/advisory/ntap-20240531-0002/",
-                      "https://sourceware.org/git/?p=glibc.git;a=blob;f=advisories/GLIBC-SA-2024-0004",
-                      "https://ubuntu.com/security/notices/USN-6737-1",
-                      "https://ubuntu.com/security/notices/USN-6737-2",
-                      "https://ubuntu.com/security/notices/USN-6762-1",
-                      "https://www.ambionics.io/blog/iconv-cve-2024-2961-p1",
-                      "https://www.ambionics.io/blog/iconv-cve-2024-2961-p2",
-                      "https://www.ambionics.io/blog/iconv-cve-2024-2961-p3",
-                      "https://www.cve.org/CVERecord?id=CVE-2024-2961",
-                      "https://www.openwall.com/lists/oss-security/2024/04/17/9"
-                    ],
-                    "severity": "HIGH",
-                    "suppressed": false,
-                    "title": "glibc: Out of bounds write in iconv may lead to remote code execution"
-                  },
-                  {
-                    "cve": "CVE-2024-33599",
-                    "cvss": {
-                      "redhat": {
-                        "v3score": "7.6",
-                        "v3vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-121"
-                    ],
-                    "description": "nscd: Stack-based buffer overflow in netgroup cache\n\nIf the Name Service Cache Daemon's (nscd) fixed size cache is exhausted\nby client requests then a subsequent client request for netgroup data\nmay result in a stack-based buffer overflow.  This flaw was introduced\nin glibc 2.15 when the cache was added to nscd.\n\nThis vulnerability is only present in the nscd binary.",
-                    "diffID": "sha256:420179ad2efafbf953a0c75f68a4c9dfaf38a98643df97d415bce49b179895f7",
-                    "fixedVersions": [
-                      "2.31-13+deb11u10"
-                    ],
-                    "installedVersion": "2.31-13+deb11u8",
-                    "packageName": "libc-bin",
-                    "purl": "pkg:deb/debian/libc-bin@2.31-13%2Bdeb11u8?arch=amd64&distro=debian-11.9",
-                    "references": [
-                      "http://www.openwall.com/lists/oss-security/2024/07/22/5",
-                      "https://access.redhat.com/errata/RHSA-2024:3344",
-                      "https://access.redhat.com/security/cve/CVE-2024-33599",
-                      "https://bugzilla.redhat.com/2277202",
-                      "https://bugzilla.redhat.com/2277204",
-                      "https://bugzilla.redhat.com/2277205",
-                      "https://bugzilla.redhat.com/2277206",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2273404",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2277202",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2277204",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2277205",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2277206",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-2961",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-33599",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-33600",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-33601",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-33602",
-                      "https://errata.almalinux.org/8/ALSA-2024-3344.html",
-                      "https://errata.rockylinux.org/RLSA-2024:3339",
-                      "https://inbox.sourceware.org/libc-alpha/cover.1713974801.git.fweimer@redhat.com/",
-                      "https://linux.oracle.com/cve/CVE-2024-33599.html",
-                      "https://linux.oracle.com/errata/ELSA-2024-3588.html",
-                      "https://lists.debian.org/debian-lts-announce/2024/06/msg00026.html",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2024-33599",
-                      "https://security.netapp.com/advisory/ntap-20240524-0011/",
-                      "https://sourceware.org/git/?p=glibc.git;a=blob;f=advisories/GLIBC-SA-2024-0005",
-                      "https://ubuntu.com/security/notices/USN-6804-1",
-                      "https://www.cve.org/CVERecord?id=CVE-2024-33599",
-                      "https://www.openwall.com/lists/oss-security/2024/04/24/2"
-                    ],
-                    "severity": "HIGH",
-                    "suppressed": false,
-                    "title": "glibc: stack-based buffer overflow in netgroup cache"
-                  },
-                  {
-                    "cve": "CVE-2025-4802",
-                    "cvss": {
-                      "redhat": {
-                        "v3score": "7",
-                        "v3vector": "CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-426"
-                    ],
-                    "description": "Untrusted LD_LIBRARY_PATH environment variable vulnerability in the GNU C Library version 2.27 to 2.38 allows attacker controlled loading of dynamically shared library in statically compiled setuid binaries that call dlopen (including internal dlopen calls after setlocale or calls to NSS functions such as getaddrinfo).",
-                    "diffID": "sha256:420179ad2efafbf953a0c75f68a4c9dfaf38a98643df97d415bce49b179895f7",
-                    "fixedVersions": [
-                      "2.31-13+deb11u13"
-                    ],
-                    "installedVersion": "2.31-13+deb11u8",
-                    "packageName": "libc-bin",
-                    "purl": "pkg:deb/debian/libc-bin@2.31-13%2Bdeb11u8?arch=amd64&distro=debian-11.9",
-                    "references": [
-                      "http://www.openwall.com/lists/oss-security/2025/05/16/7",
-                      "http://www.openwall.com/lists/oss-security/2025/05/17/2",
-                      "https://access.redhat.com/errata/RHSA-2025:8686",
-                      "https://access.redhat.com/security/cve/CVE-2025-4802",
-                      "https://bugzilla.redhat.com/2367468",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2367468",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-4802",
-                      "https://errata.almalinux.org/8/ALSA-2025-8686.html",
-                      "https://errata.rockylinux.org/RLSA-2025:8655",
-                      "https://linux.oracle.com/cve/CVE-2025-4802.html",
-                      "https://linux.oracle.com/errata/ELSA-2025-8686.html",
-                      "https://lists.debian.org/debian-lts-announce/2025/05/msg00033.html",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2025-4802",
-                      "https://sourceware.org/bugzilla/show_bug.cgi?id=32976",
-                      "https://sourceware.org/cgit/glibc/commit/?id=1e18586c5820e329f741d5c710275e165581380e",
-                      "https://sourceware.org/cgit/glibc/commit/?id=5451fa962cd0a90a0e2ec1d8910a559ace02bba0",
-                      "https://ubuntu.com/security/notices/USN-7541-1",
-                      "https://www.cve.org/CVERecord?id=CVE-2025-4802",
-                      "https://www.openwall.com/lists/oss-security/2025/05/16/7",
-                      "https://www.openwall.com/lists/oss-security/2025/05/17/2"
-                    ],
-                    "severity": "HIGH",
-                    "suppressed": false,
-                    "title": "glibc: static setuid binary dlopen may incorrectly search LD_LIBRARY_PATH"
-                  },
-                  {
-                    "cve": "CVE-2026-0861",
-                    "cvss": {
-                      "redhat": {
-                        "v3score": "8.1",
-                        "v3vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-190"
-                    ],
-                    "description": "Passing too large an alignment to the memalign suite of functions (memalign, posix_memalign, aligned_alloc) in the GNU C Library version 2.30 to 2.42 may result in an integer overflow, which could consequently result in a heap corruption.\n\nNote that the attacker must have control over both, the size as well as the alignment arguments of the memalign function to be able to exploit this.  The size parameter must be close enough to PTRDIFF_MAX so as to overflow size_t along with the large alignment argument.  This limits the malicious inputs for the alignment for memalign to the range [1<<62+ 1, 1<<63] and exactly 1<<63 for posix_memalign and aligned_alloc.\n\nTypically the alignment argument passed to such functions is a known constrained quantity (e.g. page size, block size, struct sizes) and is not attacker controlled, because of which this may not be easily exploitable in practice.  An application bug could potentially result in the input alignment being too large, e.g. due to a different buffer overflow or integer overflow in the application or its dependent libraries, but that is again an uncommon usage pattern given typical sources of alignments.",
-                    "diffID": "sha256:420179ad2efafbf953a0c75f68a4c9dfaf38a98643df97d415bce49b179895f7",
-                    "installedVersion": "2.31-13+deb11u8",
-                    "packageName": "libc-bin",
-                    "purl": "pkg:deb/debian/libc-bin@2.31-13%2Bdeb11u8?arch=amd64&distro=debian-11.9",
-                    "references": [
-                      "http://www.openwall.com/lists/oss-security/2026/01/16/5",
-                      "https://access.redhat.com/errata/RHSA-2026:1334",
-                      "https://access.redhat.com/security/cve/CVE-2026-0861",
-                      "https://bugzilla.redhat.com/2429771",
-                      "https://bugzilla.redhat.com/2430201",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2429771",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430201",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-0861",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-0915",
-                      "https://errata.almalinux.org/10/ALSA-2026-1334.html",
-                      "https://errata.rockylinux.org/RLSA-2026:1334",
-                      "https://linux.oracle.com/cve/CVE-2026-0861.html",
-                      "https://linux.oracle.com/errata/ELSA-2026-50078.html",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2026-0861",
-                      "https://sourceware.org/bugzilla/show_bug.cgi?id=33796",
-                      "https://sourceware.org/git/?p=glibc.git;a=blob_plain;f=advisories/GLIBC-SA-2026-0001",
-                      "https://ubuntu.com/security/notices/USN-8005-1",
-                      "https://www.cve.org/CVERecord?id=CVE-2026-0861"
-                    ],
-                    "severity": "HIGH",
-                    "suppressed": false,
-                    "title": "glibc: Integer overflow in memalign leads to heap corruption"
-                  },
-                  {
-                    "cve": "CVE-2023-4806",
-                    "cvss": {
-                      "nvd": {
-                        "v3score": "5.9",
-                        "v3vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H"
-                      },
-                      "redhat": {
-                        "v3score": "5.9",
-                        "v3vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-416"
-                    ],
-                    "description": "A flaw has been identified in glibc. In an extremely rare situation, the getaddrinfo function may access memory that has been freed, resulting in an application crash. This issue is only exploitable when a NSS module implements only the _nss_*_gethostbyname2_r and _nss_*_getcanonname_r hooks without implementing the _nss_*_gethostbyname3_r hook. The resolved name should return a large number of IPv6 and IPv4, and the call to the getaddrinfo function should have the AF_INET6 address family with AI_CANONNAME, AI_ALL and AI_V4MAPPED as flags.",
-                    "diffID": "sha256:420179ad2efafbf953a0c75f68a4c9dfaf38a98643df97d415bce49b179895f7",
-                    "installedVersion": "2.31-13+deb11u8",
-                    "packageName": "libc-bin",
-                    "purl": "pkg:deb/debian/libc-bin@2.31-13%2Bdeb11u8?arch=amd64&distro=debian-11.9",
-                    "references": [
-                      "http://www.openwall.com/lists/oss-security/2023/10/03/4",
-                      "http://www.openwall.com/lists/oss-security/2023/10/03/5",
-                      "http://www.openwall.com/lists/oss-security/2023/10/03/6",
-                      "http://www.openwall.com/lists/oss-security/2023/10/03/8",
-                      "https://access.redhat.com/errata/RHBA-2024:2413",
-                      "https://access.redhat.com/errata/RHSA-2023:5453",
-                      "https://access.redhat.com/errata/RHSA-2023:5455",
-                      "https://access.redhat.com/errata/RHSA-2023:7409",
-                      "https://access.redhat.com/security/cve/CVE-2023-4806",
-                      "https://bugzilla.redhat.com/2234712",
-                      "https://bugzilla.redhat.com/2237782",
-                      "https://bugzilla.redhat.com/2237798",
-                      "https://bugzilla.redhat.com/2238352",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2234712",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2237782",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2237798",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2238352",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-4527",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-4806",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-4813",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-4911",
-                      "https://errata.almalinux.org/8/ALSA-2023-5455.html",
-                      "https://errata.rockylinux.org/RLSA-2023:5455",
-                      "https://linux.oracle.com/cve/CVE-2023-4806.html",
-                      "https://linux.oracle.com/errata/ELSA-2023-5455.html",
-                      "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/4DBUQRRPB47TC3NJOUIBVWUGFHBJAFDL/",
-                      "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/DFG4P76UHHZEWQ26FWBXG76N2QLKKPZA/",
-                      "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/NDAQWHTSVOCOZ5K6KPIWKRT3JX4RTZUR/",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2023-4806",
-                      "https://security.gentoo.org/glsa/202310-03",
-                      "https://security.netapp.com/advisory/ntap-20240125-0008/",
-                      "https://ubuntu.com/security/notices/USN-6541-1",
-                      "https://ubuntu.com/security/notices/USN-6541-2",
-                      "https://www.cve.org/CVERecord?id=CVE-2023-4806"
-                    ],
-                    "severity": "MEDIUM",
-                    "suppressed": false,
-                    "title": "glibc: potential use-after-free in getaddrinfo()"
-                  },
-                  {
-                    "cve": "CVE-2023-4813",
-                    "cvss": {
-                      "nvd": {
-                        "v3score": "5.9",
-                        "v3vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H"
-                      },
-                      "redhat": {
-                        "v3score": "5.9",
-                        "v3vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-416"
-                    ],
-                    "description": "A flaw has been identified in glibc. In an uncommon situation, the gaih_inet function may use memory that has been freed, resulting in an application crash. This issue is only exploitable when the getaddrinfo function is called and the hosts database in /etc/nsswitch.conf is configured with SUCCESS=continue or SUCCESS=merge.",
-                    "diffID": "sha256:420179ad2efafbf953a0c75f68a4c9dfaf38a98643df97d415bce49b179895f7",
-                    "installedVersion": "2.31-13+deb11u8",
-                    "packageName": "libc-bin",
-                    "purl": "pkg:deb/debian/libc-bin@2.31-13%2Bdeb11u8?arch=amd64&distro=debian-11.9",
-                    "references": [
-                      "http://www.openwall.com/lists/oss-security/2023/10/03/8",
-                      "https://access.redhat.com/errata/RHBA-2024:2413",
-                      "https://access.redhat.com/errata/RHSA-2023:5453",
-                      "https://access.redhat.com/errata/RHSA-2023:5455",
-                      "https://access.redhat.com/errata/RHSA-2023:7409",
-                      "https://access.redhat.com/security/cve/CVE-2023-4813",
-                      "https://bugzilla.redhat.com/2234712",
-                      "https://bugzilla.redhat.com/2237782",
-                      "https://bugzilla.redhat.com/2237798",
-                      "https://bugzilla.redhat.com/2238352",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2234712",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2237782",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2237798",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2238352",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-4527",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-4806",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-4813",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-4911",
-                      "https://errata.almalinux.org/8/ALSA-2023-5455.html",
-                      "https://errata.rockylinux.org/RLSA-2023:5455",
-                      "https://linux.oracle.com/cve/CVE-2023-4813.html",
-                      "https://linux.oracle.com/errata/ELSA-2023-5455.html",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2023-4813",
-                      "https://security.netapp.com/advisory/ntap-20231110-0003/",
-                      "https://ubuntu.com/security/notices/USN-6541-1",
-                      "https://ubuntu.com/security/notices/USN-6541-2",
-                      "https://www.cve.org/CVERecord?id=CVE-2023-4813"
-                    ],
-                    "severity": "MEDIUM",
-                    "suppressed": false,
-                    "title": "glibc: potential use-after-free in gaih_inet()"
-                  },
-                  {
-                    "cve": "CVE-2024-33600",
-                    "cvss": {
-                      "redhat": {
-                        "v3score": "5.3",
-                        "v3vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-476"
-                    ],
-                    "description": "nscd: Null pointer crashes after notfound response\n\nIf the Name Service Cache Daemon's (nscd) cache fails to add a not-found\nnetgroup response to the cache, the client request can result in a null\npointer dereference.  This flaw was introduced in glibc 2.15 when the\ncache was added to nscd.\n\nThis vulnerability is only present in the nscd binary.",
-                    "diffID": "sha256:420179ad2efafbf953a0c75f68a4c9dfaf38a98643df97d415bce49b179895f7",
-                    "fixedVersions": [
-                      "2.31-13+deb11u10"
-                    ],
-                    "installedVersion": "2.31-13+deb11u8",
-                    "packageName": "libc-bin",
-                    "purl": "pkg:deb/debian/libc-bin@2.31-13%2Bdeb11u8?arch=amd64&distro=debian-11.9",
-                    "references": [
-                      "http://www.openwall.com/lists/oss-security/2024/07/22/5",
-                      "https://access.redhat.com/errata/RHSA-2024:3344",
-                      "https://access.redhat.com/security/cve/CVE-2024-33600",
-                      "https://bugzilla.redhat.com/2277202",
-                      "https://bugzilla.redhat.com/2277204",
-                      "https://bugzilla.redhat.com/2277205",
-                      "https://bugzilla.redhat.com/2277206",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2273404",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2277202",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2277204",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2277205",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2277206",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-2961",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-33599",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-33600",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-33601",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-33602",
-                      "https://errata.almalinux.org/8/ALSA-2024-3344.html",
-                      "https://errata.rockylinux.org/RLSA-2024:3339",
-                      "https://inbox.sourceware.org/libc-alpha/cover.1713974801.git.fweimer@redhat.com/",
-                      "https://linux.oracle.com/cve/CVE-2024-33600.html",
-                      "https://linux.oracle.com/errata/ELSA-2024-3588.html",
-                      "https://lists.debian.org/debian-lts-announce/2024/06/msg00026.html",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2024-33600",
-                      "https://security.netapp.com/advisory/ntap-20240524-0013/",
-                      "https://sourceware.org/git/?p=glibc.git;a=blob;f=advisories/GLIBC-SA-2024-0006",
-                      "https://ubuntu.com/security/notices/USN-6804-1",
-                      "https://www.cve.org/CVERecord?id=CVE-2024-33600",
-                      "https://www.openwall.com/lists/oss-security/2024/04/24/2"
-                    ],
-                    "severity": "MEDIUM",
-                    "suppressed": false,
-                    "title": "glibc: null pointer dereferences after failed netgroup cache insertion"
-                  },
-                  {
-                    "cve": "CVE-2024-33601",
-                    "cvss": {
-                      "redhat": {
-                        "v3score": "4",
-                        "v3vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-617"
-                    ],
-                    "description": "nscd: netgroup cache may terminate daemon on memory allocation failure\n\nThe Name Service Cache Daemon's (nscd) netgroup cache uses xmalloc or\nxrealloc and these functions may terminate the process due to a memory\nallocation failure resulting in a denial of service to the clients.  The\nflaw was introduced in glibc 2.15 when the cache was added to nscd.\n\nThis vulnerability is only present in the nscd binary.",
-                    "diffID": "sha256:420179ad2efafbf953a0c75f68a4c9dfaf38a98643df97d415bce49b179895f7",
-                    "fixedVersions": [
-                      "2.31-13+deb11u10"
-                    ],
-                    "installedVersion": "2.31-13+deb11u8",
-                    "packageName": "libc-bin",
-                    "purl": "pkg:deb/debian/libc-bin@2.31-13%2Bdeb11u8?arch=amd64&distro=debian-11.9",
-                    "references": [
-                      "http://www.openwall.com/lists/oss-security/2024/07/22/5",
-                      "https://access.redhat.com/errata/RHSA-2024:3344",
-                      "https://access.redhat.com/security/cve/CVE-2024-33601",
-                      "https://bugzilla.redhat.com/2277202",
-                      "https://bugzilla.redhat.com/2277204",
-                      "https://bugzilla.redhat.com/2277205",
-                      "https://bugzilla.redhat.com/2277206",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2273404",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2277202",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2277204",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2277205",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2277206",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-2961",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-33599",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-33600",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-33601",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-33602",
-                      "https://errata.almalinux.org/8/ALSA-2024-3344.html",
-                      "https://errata.rockylinux.org/RLSA-2024:3339",
-                      "https://inbox.sourceware.org/libc-alpha/cover.1713974801.git.fweimer@redhat.com/",
-                      "https://linux.oracle.com/cve/CVE-2024-33601.html",
-                      "https://linux.oracle.com/errata/ELSA-2024-3588.html",
-                      "https://lists.debian.org/debian-lts-announce/2024/06/msg00026.html",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2024-33601",
-                      "https://security.netapp.com/advisory/ntap-20240524-0014/",
-                      "https://sourceware.org/git/?p=glibc.git;a=blob;f=advisories/GLIBC-SA-2024-0007",
-                      "https://ubuntu.com/security/notices/USN-6804-1",
-                      "https://www.cve.org/CVERecord?id=CVE-2024-33601",
-                      "https://www.openwall.com/lists/oss-security/2024/04/24/2"
-                    ],
-                    "severity": "MEDIUM",
-                    "suppressed": false,
-                    "title": "glibc: netgroup cache may terminate daemon on memory allocation failure"
-                  },
-                  {
-                    "cve": "CVE-2024-33602",
-                    "cvss": {
-                      "redhat": {
-                        "v3score": "4",
-                        "v3vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-466"
-                    ],
-                    "description": "nscd: netgroup cache assumes NSS callback uses in-buffer strings\n\nThe Name Service Cache Daemon's (nscd) netgroup cache can corrupt memory\nwhen the NSS callback does not store all strings in the provided buffer.\nThe flaw was introduced in glibc 2.15 when the cache was added to nscd.\n\nThis vulnerability is only present in the nscd binary.",
-                    "diffID": "sha256:420179ad2efafbf953a0c75f68a4c9dfaf38a98643df97d415bce49b179895f7",
-                    "fixedVersions": [
-                      "2.31-13+deb11u10"
-                    ],
-                    "installedVersion": "2.31-13+deb11u8",
-                    "packageName": "libc-bin",
-                    "purl": "pkg:deb/debian/libc-bin@2.31-13%2Bdeb11u8?arch=amd64&distro=debian-11.9",
-                    "references": [
-                      "http://www.openwall.com/lists/oss-security/2024/07/22/5",
-                      "https://access.redhat.com/errata/RHSA-2024:3344",
-                      "https://access.redhat.com/security/cve/CVE-2024-33602",
-                      "https://bugzilla.redhat.com/2277202",
-                      "https://bugzilla.redhat.com/2277204",
-                      "https://bugzilla.redhat.com/2277205",
-                      "https://bugzilla.redhat.com/2277206",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2273404",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2277202",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2277204",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2277205",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2277206",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-2961",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-33599",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-33600",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-33601",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-33602",
-                      "https://errata.almalinux.org/8/ALSA-2024-3344.html",
-                      "https://errata.rockylinux.org/RLSA-2024:3339",
-                      "https://inbox.sourceware.org/libc-alpha/cover.1713974801.git.fweimer@redhat.com/",
-                      "https://linux.oracle.com/cve/CVE-2024-33602.html",
-                      "https://linux.oracle.com/errata/ELSA-2024-3588.html",
-                      "https://lists.debian.org/debian-lts-announce/2024/06/msg00026.html",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2024-33602",
-                      "https://security.netapp.com/advisory/ntap-20240524-0012/",
-                      "https://sourceware.org/bugzilla/show_bug.cgi?id=31680",
-                      "https://sourceware.org/git/?p=glibc.git;a=blob;f=advisories/GLIBC-SA-2024-0008",
-                      "https://ubuntu.com/security/notices/USN-6804-1",
-                      "https://www.cve.org/CVERecord?id=CVE-2024-33602",
-                      "https://www.openwall.com/lists/oss-security/2024/04/24/2"
-                    ],
-                    "severity": "MEDIUM",
-                    "suppressed": false,
-                    "title": "glibc: netgroup cache assumes NSS callback uses in-buffer strings"
-                  },
-                  {
-                    "cve": "CVE-2025-0395",
-                    "cvss": {
-                      "redhat": {
-                        "v3score": "5.5",
-                        "v3vector": "CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:L/I:L/A:H"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-131"
-                    ],
-                    "description": "When the assert() function in the GNU C Library versions 2.13 to 2.40 fails, it does not allocate enough space for the assertion failure message string and size information, which may lead to a buffer overflow if the message string size aligns to page size.",
-                    "diffID": "sha256:420179ad2efafbf953a0c75f68a4c9dfaf38a98643df97d415bce49b179895f7",
-                    "fixedVersions": [
-                      "2.31-13+deb11u12"
-                    ],
-                    "installedVersion": "2.31-13+deb11u8",
-                    "packageName": "libc-bin",
-                    "purl": "pkg:deb/debian/libc-bin@2.31-13%2Bdeb11u8?arch=amd64&distro=debian-11.9",
-                    "references": [
-                      "http://www.openwall.com/lists/oss-security/2025/01/22/4",
-                      "http://www.openwall.com/lists/oss-security/2025/01/23/2",
-                      "http://www.openwall.com/lists/oss-security/2025/04/13/1",
-                      "http://www.openwall.com/lists/oss-security/2025/04/24/7",
-                      "https://access.redhat.com/errata/RHSA-2025:3828",
-                      "https://access.redhat.com/security/cve/CVE-2025-0395",
-                      "https://bugzilla.redhat.com/2339460",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2339460",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-0395",
-                      "https://errata.almalinux.org/8/ALSA-2025-3828.html",
-                      "https://errata.rockylinux.org/RLSA-2025:4244",
-                      "https://linux.oracle.com/cve/CVE-2025-0395.html",
-                      "https://linux.oracle.com/errata/ELSA-2025-4244.html",
-                      "https://lists.debian.org/debian-lts-announce/2025/04/msg00039.html",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2025-0395",
-                      "https://security.netapp.com/advisory/ntap-20250228-0006/",
-                      "https://sourceware.org/bugzilla/show_bug.cgi?id=32582",
-                      "https://sourceware.org/git/?p=glibc.git;a=blob;f=advisories/GLIBC-SA-2025-0001",
-                      "https://sourceware.org/pipermail/libc-announce/2025/000044.html",
-                      "https://ubuntu.com/security/notices/USN-7259-1",
-                      "https://ubuntu.com/security/notices/USN-7259-2",
-                      "https://ubuntu.com/security/notices/USN-7259-3",
-                      "https://www.cve.org/CVERecord?id=CVE-2025-0395",
-                      "https://www.openwall.com/lists/oss-security/2025/01/22/4"
-                    ],
-                    "severity": "MEDIUM",
-                    "suppressed": false,
-                    "title": "glibc: buffer overflow in the GNU C Library's assert()"
-                  },
-                  {
-                    "cve": "CVE-2025-15281",
-                    "cvss": {
-                      "redhat": {
-                        "v3score": "5.9",
-                        "v3vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-908"
-                    ],
-                    "description": "Calling wordexp with WRDE_REUSE in conjunction with WRDE_APPEND in the GNU C Library version 2.0 to version 2.42 may cause the interface to return uninitialized memory in the we_wordv member, which on subsequent calls to wordfree may abort the process.",
-                    "diffID": "sha256:420179ad2efafbf953a0c75f68a4c9dfaf38a98643df97d415bce49b179895f7",
-                    "installedVersion": "2.31-13+deb11u8",
-                    "packageName": "libc-bin",
-                    "purl": "pkg:deb/debian/libc-bin@2.31-13%2Bdeb11u8?arch=amd64&distro=debian-11.9",
-                    "references": [
-                      "http://www.openwall.com/lists/oss-security/2026/01/20/3",
-                      "https://access.redhat.com/security/cve/CVE-2025-15281",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2025-15281",
-                      "https://sourceware.org/bugzilla/show_bug.cgi?id=33814",
-                      "https://ubuntu.com/security/notices/USN-8005-1",
-                      "https://www.cve.org/CVERecord?id=CVE-2025-15281",
-                      "https://www.openwall.com/lists/oss-security/2026/01/20/3"
-                    ],
-                    "severity": "MEDIUM",
-                    "suppressed": false,
-                    "title": "glibc: wordexp with WRDE_REUSE and WRDE_APPEND may return uninitialized memory"
-                  },
-                  {
-                    "cve": "CVE-2025-8058",
-                    "cvss": {
-                      "redhat": {
-                        "v3score": "4.2",
-                        "v3vector": "CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:L/I:L/A:L"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-415"
-                    ],
-                    "description": "The regcomp function in the GNU C library version from 2.4 to 2.41 is \nsubject to a double free if some previous allocation fails. It can be \naccomplished either by a malloc failure or by using an interposed malloc\n that injects random malloc failures. The double free can allow buffer \nmanipulation depending of how the regex is constructed. This issue \naffects all architectures and ABIs supported by the GNU C library.",
-                    "diffID": "sha256:420179ad2efafbf953a0c75f68a4c9dfaf38a98643df97d415bce49b179895f7",
-                    "installedVersion": "2.31-13+deb11u8",
-                    "packageName": "libc-bin",
-                    "purl": "pkg:deb/debian/libc-bin@2.31-13%2Bdeb11u8?arch=amd64&distro=debian-11.9",
-                    "references": [
-                      "http://www.openwall.com/lists/oss-security/2025/07/23/1",
-                      "https://access.redhat.com/errata/RHSA-2025:12980",
-                      "https://access.redhat.com/security/cve/CVE-2025-8058",
-                      "https://bugzilla.redhat.com/2383146",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2383146",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-8058",
-                      "https://errata.almalinux.org/8/ALSA-2025-12980.html",
-                      "https://errata.rockylinux.org/RLSA-2025:12748",
-                      "https://linux.oracle.com/cve/CVE-2025-8058.html",
-                      "https://linux.oracle.com/errata/ELSA-2025-28054.html",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2025-8058",
-                      "https://sourceware.org/bugzilla/show_bug.cgi?id=33185",
-                      "https://sourceware.org/git/?p=glibc.git;a=blob_plain;f=advisories/GLIBC-SA-2025-0005",
-                      "https://sourceware.org/git/?p=glibc.git;a=commit;h=3ff17af18c38727b88d9115e536c069e6b5d601f",
-                      "https://ubuntu.com/security/notices/USN-7760-1",
-                      "https://ubuntu.com/security/notices/USN-8005-1",
-                      "https://www.cve.org/CVERecord?id=CVE-2025-8058"
-                    ],
-                    "severity": "MEDIUM",
-                    "suppressed": false,
-                    "title": "glibc: Double free in glibc"
-                  },
-                  {
-                    "cve": "CVE-2026-0915",
-                    "cvss": {
-                      "redhat": {
-                        "v3score": "5.3",
-                        "v3vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-908"
-                    ],
-                    "description": "Calling getnetbyaddr or getnetbyaddr_r with a configured nsswitch.conf that specifies the library's DNS backend for networks and queries for a zero-valued network in the GNU C Library version 2.0 to version 2.42 can leak stack contents to the configured DNS resolver.",
-                    "diffID": "sha256:420179ad2efafbf953a0c75f68a4c9dfaf38a98643df97d415bce49b179895f7",
-                    "installedVersion": "2.31-13+deb11u8",
-                    "packageName": "libc-bin",
-                    "purl": "pkg:deb/debian/libc-bin@2.31-13%2Bdeb11u8?arch=amd64&distro=debian-11.9",
-                    "references": [
-                      "http://www.openwall.com/lists/oss-security/2026/01/16/6",
-                      "https://access.redhat.com/errata/RHSA-2026:1334",
-                      "https://access.redhat.com/security/cve/CVE-2026-0915",
-                      "https://bugzilla.redhat.com/2429771",
-                      "https://bugzilla.redhat.com/2430201",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2429771",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430201",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-0861",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-0915",
-                      "https://errata.almalinux.org/10/ALSA-2026-1334.html",
-                      "https://errata.rockylinux.org/RLSA-2026:1334",
-                      "https://linux.oracle.com/cve/CVE-2026-0915.html",
-                      "https://linux.oracle.com/errata/ELSA-2026-50078.html",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2026-0915",
-                      "https://sourceware.org/bugzilla/show_bug.cgi?id=33802",
-                      "https://ubuntu.com/security/notices/USN-8005-1",
-                      "https://www.cve.org/CVERecord?id=CVE-2026-0915",
-                      "https://www.openwall.com/lists/oss-security/2026/01/16/6"
-                    ],
-                    "severity": "MEDIUM",
-                    "suppressed": false,
-                    "title": "glibc: glibc: Information disclosure via zero-valued network query"
-                  },
-                  {
-                    "cve": "CVE-2010-4756",
-                    "cvss": {
-                      "nvd": {
-                        "v3score": "0",
-                        "v3vector": ""
-                      },
-                      "redhat": {
-                        "v3score": "0",
-                        "v3vector": ""
-                      }
-                    },
-                    "cwes": [
-                      "CWE-399"
-                    ],
-                    "description": "The glob implementation in the GNU C Library (aka glibc or libc6) allows remote authenticated users to cause a denial of service (CPU and memory consumption) via crafted glob expressions that do not match any pathnames, as demonstrated by glob expressions in STAT commands to an FTP daemon, a different vulnerability than CVE-2010-2632.",
-                    "diffID": "sha256:420179ad2efafbf953a0c75f68a4c9dfaf38a98643df97d415bce49b179895f7",
-                    "installedVersion": "2.31-13+deb11u8",
-                    "packageName": "libc-bin",
-                    "purl": "pkg:deb/debian/libc-bin@2.31-13%2Bdeb11u8?arch=amd64&distro=debian-11.9",
-                    "references": [
-                      "http://cxib.net/stuff/glob-0day.c",
-                      "http://securityreason.com/achievement_securityalert/89",
-                      "http://securityreason.com/exploitalert/9223",
-                      "https://access.redhat.com/security/cve/CVE-2010-4756",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=681681",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2010-4756",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2010-4756",
-                      "https://security.netapp.com/advisory/ntap-20241108-0002/",
-                      "https://www.cve.org/CVERecord?id=CVE-2010-4756"
-                    ],
-                    "severity": "LOW",
-                    "suppressed": false,
-                    "title": "glibc: glob implementation can cause excessive CPU and memory consumption due to crafted glob expressions"
-                  },
-                  {
-                    "cve": "CVE-2018-20796",
-                    "cvss": {
-                      "nvd": {
-                        "v3score": "7.5",
-                        "v3vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"
-                      },
-                      "redhat": {
-                        "v3score": "5.3",
-                        "v3vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-674"
-                    ],
-                    "description": "In the GNU C Library (aka glibc or libc6) through 2.29, check_dst_limits_calc_pos_1 in posix/regexec.c has Uncontrolled Recursion, as demonstrated by '(\\227|)(\\\\1\\\\1|t1|\\\\\\2537)+' in grep.",
-                    "diffID": "sha256:420179ad2efafbf953a0c75f68a4c9dfaf38a98643df97d415bce49b179895f7",
-                    "installedVersion": "2.31-13+deb11u8",
-                    "packageName": "libc-bin",
-                    "purl": "pkg:deb/debian/libc-bin@2.31-13%2Bdeb11u8?arch=amd64&distro=debian-11.9",
-                    "references": [
-                      "http://www.securityfocus.com/bid/107160",
-                      "https://access.redhat.com/security/cve/CVE-2018-20796",
-                      "https://debbugs.gnu.org/cgi/bugreport.cgi?bug=34141",
-                      "https://lists.gnu.org/archive/html/bug-gnulib/2019-01/msg00108.html",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2018-20796",
-                      "https://security.netapp.com/advisory/ntap-20190315-0002/",
-                      "https://support.f5.com/csp/article/K26346590?utm_source=f5support&amp%3Butm_medium=RSS",
-                      "https://www.cve.org/CVERecord?id=CVE-2018-20796"
-                    ],
-                    "severity": "LOW",
-                    "suppressed": false,
-                    "title": "glibc: uncontrolled recursion in function check_dst_limits_calc_pos_1 in posix/regexec.c"
-                  },
-                  {
-                    "cve": "CVE-2019-1010022",
-                    "cvss": {
-                      "nvd": {
-                        "v3score": "9.8",
-                        "v3vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-119"
-                    ],
-                    "description": "GNU Libc current is affected by: Mitigation bypass. The impact is: Attacker may bypass stack guard protection. The component is: nptl. The attack vector is: Exploit stack buffer overflow vulnerability and use this bypass vulnerability to bypass stack guard. NOTE: Upstream comments indicate \"this is being treated as a non-security bug and no real threat.",
-                    "diffID": "sha256:420179ad2efafbf953a0c75f68a4c9dfaf38a98643df97d415bce49b179895f7",
-                    "installedVersion": "2.31-13+deb11u8",
-                    "packageName": "libc-bin",
-                    "purl": "pkg:deb/debian/libc-bin@2.31-13%2Bdeb11u8?arch=amd64&distro=debian-11.9",
-                    "references": [
-                      "https://access.redhat.com/security/cve/CVE-2019-1010022",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2019-1010022",
-                      "https://security-tracker.debian.org/tracker/CVE-2019-1010022",
-                      "https://sourceware.org/bugzilla/show_bug.cgi?id=22850",
-                      "https://sourceware.org/bugzilla/show_bug.cgi?id=22850#c3",
-                      "https://ubuntu.com/security/CVE-2019-1010022",
-                      "https://www.cve.org/CVERecord?id=CVE-2019-1010022"
-                    ],
-                    "severity": "LOW",
-                    "suppressed": false,
-                    "title": "glibc: stack guard protection bypass"
-                  },
-                  {
-                    "cve": "CVE-2019-1010023",
-                    "cvss": {
-                      "nvd": {
-                        "v3score": "8.8",
-                        "v3vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H"
-                      },
-                      "redhat": {
-                        "v3score": "7.8",
-                        "v3vector": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H"
-                      }
-                    },
-                    "description": "GNU Libc current is affected by: Re-mapping current loaded library with malicious ELF file. The impact is: In worst case attacker may evaluate privileges. The component is: libld. The attack vector is: Attacker sends 2 ELF files to victim and asks to run ldd on it. ldd execute code. NOTE: Upstream comments indicate \"this is being treated as a non-security bug and no real threat.",
-                    "diffID": "sha256:420179ad2efafbf953a0c75f68a4c9dfaf38a98643df97d415bce49b179895f7",
-                    "installedVersion": "2.31-13+deb11u8",
-                    "packageName": "libc-bin",
-                    "purl": "pkg:deb/debian/libc-bin@2.31-13%2Bdeb11u8?arch=amd64&distro=debian-11.9",
-                    "references": [
-                      "http://www.securityfocus.com/bid/109167",
-                      "https://access.redhat.com/security/cve/CVE-2019-1010023",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2019-1010023",
-                      "https://security-tracker.debian.org/tracker/CVE-2019-1010023",
-                      "https://sourceware.org/bugzilla/show_bug.cgi?id=22851",
-                      "https://support.f5.com/csp/article/K11932200?utm_source=f5support&amp%3Butm_medium=RSS",
-                      "https://ubuntu.com/security/CVE-2019-1010023",
-                      "https://www.cve.org/CVERecord?id=CVE-2019-1010023"
-                    ],
-                    "severity": "LOW",
-                    "suppressed": false,
-                    "title": "glibc: running ldd on malicious ELF leads to code execution because of wrong size computation"
-                  },
-                  {
-                    "cve": "CVE-2019-1010024",
-                    "cvss": {
-                      "nvd": {
-                        "v3score": "5.3",
-                        "v3vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N"
-                      },
-                      "redhat": {
-                        "v3score": "5.3",
-                        "v3vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-200"
-                    ],
-                    "description": "GNU Libc current is affected by: Mitigation bypass. The impact is: Attacker may bypass ASLR using cache of thread stack and heap. The component is: glibc. NOTE: Upstream comments indicate \"this is being treated as a non-security bug and no real threat.",
-                    "diffID": "sha256:420179ad2efafbf953a0c75f68a4c9dfaf38a98643df97d415bce49b179895f7",
-                    "installedVersion": "2.31-13+deb11u8",
-                    "packageName": "libc-bin",
-                    "purl": "pkg:deb/debian/libc-bin@2.31-13%2Bdeb11u8?arch=amd64&distro=debian-11.9",
-                    "references": [
-                      "http://www.securityfocus.com/bid/109162",
-                      "https://access.redhat.com/security/cve/CVE-2019-1010024",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2019-1010024",
-                      "https://security-tracker.debian.org/tracker/CVE-2019-1010024",
-                      "https://sourceware.org/bugzilla/show_bug.cgi?id=22852",
-                      "https://support.f5.com/csp/article/K06046097",
-                      "https://support.f5.com/csp/article/K06046097?utm_source=f5support&amp%3Butm_medium=RSS",
-                      "https://ubuntu.com/security/CVE-2019-1010024",
-                      "https://www.cve.org/CVERecord?id=CVE-2019-1010024"
-                    ],
-                    "severity": "LOW",
-                    "suppressed": false,
-                    "title": "glibc: ASLR bypass using cache of thread stack and heap"
-                  },
-                  {
-                    "cve": "CVE-2019-1010025",
-                    "cvss": {
-                      "nvd": {
-                        "v3score": "5.3",
-                        "v3vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N"
-                      },
-                      "redhat": {
-                        "v3score": "2.9",
-                        "v3vector": "CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-330"
-                    ],
-                    "description": "GNU Libc current is affected by: Mitigation bypass. The impact is: Attacker may guess the heap addresses of pthread_created thread. The component is: glibc. NOTE: the vendor's position is \"ASLR bypass itself is not a vulnerability.",
-                    "diffID": "sha256:420179ad2efafbf953a0c75f68a4c9dfaf38a98643df97d415bce49b179895f7",
-                    "installedVersion": "2.31-13+deb11u8",
-                    "packageName": "libc-bin",
-                    "purl": "pkg:deb/debian/libc-bin@2.31-13%2Bdeb11u8?arch=amd64&distro=debian-11.9",
-                    "references": [
-                      "https://access.redhat.com/security/cve/CVE-2019-1010025",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2019-1010025",
-                      "https://security-tracker.debian.org/tracker/CVE-2019-1010025",
-                      "https://sourceware.org/bugzilla/show_bug.cgi?id=22853",
-                      "https://support.f5.com/csp/article/K06046097",
-                      "https://support.f5.com/csp/article/K06046097?utm_source=f5support&amp%3Butm_medium=RSS",
-                      "https://ubuntu.com/security/CVE-2019-1010025",
-                      "https://www.cve.org/CVERecord?id=CVE-2019-1010025"
-                    ],
-                    "severity": "LOW",
-                    "suppressed": false,
-                    "title": "glibc: information disclosure of heap addresses of pthread_created thread"
-                  },
-                  {
-                    "cve": "CVE-2019-9192",
-                    "cvss": {
-                      "nvd": {
-                        "v3score": "7.5",
-                        "v3vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"
-                      },
-                      "redhat": {
-                        "v3score": "2.8",
-                        "v3vector": "CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:L"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-674"
-                    ],
-                    "description": "In the GNU C Library (aka glibc or libc6) through 2.29, check_dst_limits_calc_pos_1 in posix/regexec.c has Uncontrolled Recursion, as demonstrated by '(|)(\\\\1\\\\1)*' in grep, a different issue than CVE-2018-20796. NOTE: the software maintainer disputes that this is a vulnerability because the behavior occurs only with a crafted pattern",
-                    "diffID": "sha256:420179ad2efafbf953a0c75f68a4c9dfaf38a98643df97d415bce49b179895f7",
-                    "installedVersion": "2.31-13+deb11u8",
-                    "packageName": "libc-bin",
-                    "purl": "pkg:deb/debian/libc-bin@2.31-13%2Bdeb11u8?arch=amd64&distro=debian-11.9",
-                    "references": [
-                      "https://access.redhat.com/security/cve/CVE-2019-9192",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2019-9192",
-                      "https://sourceware.org/bugzilla/show_bug.cgi?id=24269",
-                      "https://support.f5.com/csp/article/K26346590?utm_source=f5support&amp%3Butm_medium=RSS",
-                      "https://www.cve.org/CVERecord?id=CVE-2019-9192"
-                    ],
-                    "severity": "LOW",
-                    "suppressed": false,
-                    "title": "glibc: uncontrolled recursion in function check_dst_limits_calc_pos_1 in posix/regexec.c"
-                  },
-                  {
-                    "cve": "CVE-2024-2961",
-                    "cvss": {
-                      "redhat": {
-                        "v3score": "8.8",
-                        "v3vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-787"
-                    ],
-                    "description": "The iconv() function in the GNU C Library versions 2.39 and older may overflow the output buffer passed to it by up to 4 bytes when converting strings to the ISO-2022-CN-EXT character set, which may be used to crash an application or overwrite a neighbouring variable.",
-                    "diffID": "sha256:420179ad2efafbf953a0c75f68a4c9dfaf38a98643df97d415bce49b179895f7",
-                    "fixedVersions": [
-                      "2.31-13+deb11u9"
-                    ],
-                    "installedVersion": "2.31-13+deb11u8",
-                    "packageName": "libc6",
-                    "purl": "pkg:deb/debian/libc6@2.31-13%2Bdeb11u8?arch=amd64&distro=debian-11.9",
-                    "references": [
-                      "http://www.openwall.com/lists/oss-security/2024/04/17/9",
-                      "http://www.openwall.com/lists/oss-security/2024/04/18/4",
-                      "http://www.openwall.com/lists/oss-security/2024/04/24/2",
-                      "http://www.openwall.com/lists/oss-security/2024/05/27/1",
-                      "http://www.openwall.com/lists/oss-security/2024/05/27/2",
-                      "http://www.openwall.com/lists/oss-security/2024/05/27/3",
-                      "http://www.openwall.com/lists/oss-security/2024/05/27/4",
-                      "http://www.openwall.com/lists/oss-security/2024/05/27/5",
-                      "http://www.openwall.com/lists/oss-security/2024/05/27/6",
-                      "http://www.openwall.com/lists/oss-security/2024/07/22/5",
-                      "https://access.redhat.com/errata/RHSA-2024:3269",
-                      "https://access.redhat.com/security/cve/CVE-2024-2961",
-                      "https://bugzilla.redhat.com/2273404",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2273404",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2277202",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2277204",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2277205",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2277206",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-2961",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-33599",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-33600",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-33601",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-33602",
-                      "https://errata.almalinux.org/8/ALSA-2024-3269.html",
-                      "https://errata.rockylinux.org/RLSA-2024:3339",
-                      "https://linux.oracle.com/cve/CVE-2024-2961.html",
-                      "https://linux.oracle.com/errata/ELSA-2024-3588.html",
-                      "https://lists.debian.org/debian-lts-announce/2024/05/msg00001.html",
-                      "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/BTJFBGHDYG5PEIFD5WSSSKSFZ2AZWC5N/",
-                      "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/P3I4KYS6EU6S7QZ47WFNTPVAHFIUQNEL/",
-                      "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/YAMJQI3Y6BHWV3CUTYBXOZONCUJNOB2Z/",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2024-2961",
-                      "https://security.netapp.com/advisory/ntap-20240531-0002/",
-                      "https://sourceware.org/git/?p=glibc.git;a=blob;f=advisories/GLIBC-SA-2024-0004",
-                      "https://ubuntu.com/security/notices/USN-6737-1",
-                      "https://ubuntu.com/security/notices/USN-6737-2",
-                      "https://ubuntu.com/security/notices/USN-6762-1",
-                      "https://www.ambionics.io/blog/iconv-cve-2024-2961-p1",
-                      "https://www.ambionics.io/blog/iconv-cve-2024-2961-p2",
-                      "https://www.ambionics.io/blog/iconv-cve-2024-2961-p3",
-                      "https://www.cve.org/CVERecord?id=CVE-2024-2961",
-                      "https://www.openwall.com/lists/oss-security/2024/04/17/9"
-                    ],
-                    "severity": "HIGH",
-                    "suppressed": false,
-                    "title": "glibc: Out of bounds write in iconv may lead to remote code execution"
-                  },
-                  {
-                    "cve": "CVE-2024-33599",
-                    "cvss": {
-                      "redhat": {
-                        "v3score": "7.6",
-                        "v3vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-121"
-                    ],
-                    "description": "nscd: Stack-based buffer overflow in netgroup cache\n\nIf the Name Service Cache Daemon's (nscd) fixed size cache is exhausted\nby client requests then a subsequent client request for netgroup data\nmay result in a stack-based buffer overflow.  This flaw was introduced\nin glibc 2.15 when the cache was added to nscd.\n\nThis vulnerability is only present in the nscd binary.",
-                    "diffID": "sha256:420179ad2efafbf953a0c75f68a4c9dfaf38a98643df97d415bce49b179895f7",
-                    "fixedVersions": [
-                      "2.31-13+deb11u10"
-                    ],
-                    "installedVersion": "2.31-13+deb11u8",
-                    "packageName": "libc6",
-                    "purl": "pkg:deb/debian/libc6@2.31-13%2Bdeb11u8?arch=amd64&distro=debian-11.9",
-                    "references": [
-                      "http://www.openwall.com/lists/oss-security/2024/07/22/5",
-                      "https://access.redhat.com/errata/RHSA-2024:3344",
-                      "https://access.redhat.com/security/cve/CVE-2024-33599",
-                      "https://bugzilla.redhat.com/2277202",
-                      "https://bugzilla.redhat.com/2277204",
-                      "https://bugzilla.redhat.com/2277205",
-                      "https://bugzilla.redhat.com/2277206",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2273404",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2277202",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2277204",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2277205",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2277206",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-2961",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-33599",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-33600",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-33601",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-33602",
-                      "https://errata.almalinux.org/8/ALSA-2024-3344.html",
-                      "https://errata.rockylinux.org/RLSA-2024:3339",
-                      "https://inbox.sourceware.org/libc-alpha/cover.1713974801.git.fweimer@redhat.com/",
-                      "https://linux.oracle.com/cve/CVE-2024-33599.html",
-                      "https://linux.oracle.com/errata/ELSA-2024-3588.html",
-                      "https://lists.debian.org/debian-lts-announce/2024/06/msg00026.html",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2024-33599",
-                      "https://security.netapp.com/advisory/ntap-20240524-0011/",
-                      "https://sourceware.org/git/?p=glibc.git;a=blob;f=advisories/GLIBC-SA-2024-0005",
-                      "https://ubuntu.com/security/notices/USN-6804-1",
-                      "https://www.cve.org/CVERecord?id=CVE-2024-33599",
-                      "https://www.openwall.com/lists/oss-security/2024/04/24/2"
-                    ],
-                    "severity": "HIGH",
-                    "suppressed": false,
-                    "title": "glibc: stack-based buffer overflow in netgroup cache"
-                  },
-                  {
-                    "cve": "CVE-2025-4802",
-                    "cvss": {
-                      "redhat": {
-                        "v3score": "7",
-                        "v3vector": "CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-426"
-                    ],
-                    "description": "Untrusted LD_LIBRARY_PATH environment variable vulnerability in the GNU C Library version 2.27 to 2.38 allows attacker controlled loading of dynamically shared library in statically compiled setuid binaries that call dlopen (including internal dlopen calls after setlocale or calls to NSS functions such as getaddrinfo).",
-                    "diffID": "sha256:420179ad2efafbf953a0c75f68a4c9dfaf38a98643df97d415bce49b179895f7",
-                    "fixedVersions": [
-                      "2.31-13+deb11u13"
-                    ],
-                    "installedVersion": "2.31-13+deb11u8",
-                    "packageName": "libc6",
-                    "purl": "pkg:deb/debian/libc6@2.31-13%2Bdeb11u8?arch=amd64&distro=debian-11.9",
-                    "references": [
-                      "http://www.openwall.com/lists/oss-security/2025/05/16/7",
-                      "http://www.openwall.com/lists/oss-security/2025/05/17/2",
-                      "https://access.redhat.com/errata/RHSA-2025:8686",
-                      "https://access.redhat.com/security/cve/CVE-2025-4802",
-                      "https://bugzilla.redhat.com/2367468",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2367468",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-4802",
-                      "https://errata.almalinux.org/8/ALSA-2025-8686.html",
-                      "https://errata.rockylinux.org/RLSA-2025:8655",
-                      "https://linux.oracle.com/cve/CVE-2025-4802.html",
-                      "https://linux.oracle.com/errata/ELSA-2025-8686.html",
-                      "https://lists.debian.org/debian-lts-announce/2025/05/msg00033.html",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2025-4802",
-                      "https://sourceware.org/bugzilla/show_bug.cgi?id=32976",
-                      "https://sourceware.org/cgit/glibc/commit/?id=1e18586c5820e329f741d5c710275e165581380e",
-                      "https://sourceware.org/cgit/glibc/commit/?id=5451fa962cd0a90a0e2ec1d8910a559ace02bba0",
-                      "https://ubuntu.com/security/notices/USN-7541-1",
-                      "https://www.cve.org/CVERecord?id=CVE-2025-4802",
-                      "https://www.openwall.com/lists/oss-security/2025/05/16/7",
-                      "https://www.openwall.com/lists/oss-security/2025/05/17/2"
-                    ],
-                    "severity": "HIGH",
-                    "suppressed": false,
-                    "title": "glibc: static setuid binary dlopen may incorrectly search LD_LIBRARY_PATH"
-                  },
-                  {
-                    "cve": "CVE-2026-0861",
-                    "cvss": {
-                      "redhat": {
-                        "v3score": "8.1",
-                        "v3vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-190"
-                    ],
-                    "description": "Passing too large an alignment to the memalign suite of functions (memalign, posix_memalign, aligned_alloc) in the GNU C Library version 2.30 to 2.42 may result in an integer overflow, which could consequently result in a heap corruption.\n\nNote that the attacker must have control over both, the size as well as the alignment arguments of the memalign function to be able to exploit this.  The size parameter must be close enough to PTRDIFF_MAX so as to overflow size_t along with the large alignment argument.  This limits the malicious inputs for the alignment for memalign to the range [1<<62+ 1, 1<<63] and exactly 1<<63 for posix_memalign and aligned_alloc.\n\nTypically the alignment argument passed to such functions is a known constrained quantity (e.g. page size, block size, struct sizes) and is not attacker controlled, because of which this may not be easily exploitable in practice.  An application bug could potentially result in the input alignment being too large, e.g. due to a different buffer overflow or integer overflow in the application or its dependent libraries, but that is again an uncommon usage pattern given typical sources of alignments.",
-                    "diffID": "sha256:420179ad2efafbf953a0c75f68a4c9dfaf38a98643df97d415bce49b179895f7",
-                    "installedVersion": "2.31-13+deb11u8",
-                    "packageName": "libc6",
-                    "purl": "pkg:deb/debian/libc6@2.31-13%2Bdeb11u8?arch=amd64&distro=debian-11.9",
-                    "references": [
-                      "http://www.openwall.com/lists/oss-security/2026/01/16/5",
-                      "https://access.redhat.com/errata/RHSA-2026:1334",
-                      "https://access.redhat.com/security/cve/CVE-2026-0861",
-                      "https://bugzilla.redhat.com/2429771",
-                      "https://bugzilla.redhat.com/2430201",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2429771",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430201",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-0861",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-0915",
-                      "https://errata.almalinux.org/10/ALSA-2026-1334.html",
-                      "https://errata.rockylinux.org/RLSA-2026:1334",
-                      "https://linux.oracle.com/cve/CVE-2026-0861.html",
-                      "https://linux.oracle.com/errata/ELSA-2026-50078.html",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2026-0861",
-                      "https://sourceware.org/bugzilla/show_bug.cgi?id=33796",
-                      "https://sourceware.org/git/?p=glibc.git;a=blob_plain;f=advisories/GLIBC-SA-2026-0001",
-                      "https://ubuntu.com/security/notices/USN-8005-1",
-                      "https://www.cve.org/CVERecord?id=CVE-2026-0861"
-                    ],
-                    "severity": "HIGH",
-                    "suppressed": false,
-                    "title": "glibc: Integer overflow in memalign leads to heap corruption"
-                  },
-                  {
-                    "cve": "CVE-2023-4806",
-                    "cvss": {
-                      "nvd": {
-                        "v3score": "5.9",
-                        "v3vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H"
-                      },
-                      "redhat": {
-                        "v3score": "5.9",
-                        "v3vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-416"
-                    ],
-                    "description": "A flaw has been identified in glibc. In an extremely rare situation, the getaddrinfo function may access memory that has been freed, resulting in an application crash. This issue is only exploitable when a NSS module implements only the _nss_*_gethostbyname2_r and _nss_*_getcanonname_r hooks without implementing the _nss_*_gethostbyname3_r hook. The resolved name should return a large number of IPv6 and IPv4, and the call to the getaddrinfo function should have the AF_INET6 address family with AI_CANONNAME, AI_ALL and AI_V4MAPPED as flags.",
-                    "diffID": "sha256:420179ad2efafbf953a0c75f68a4c9dfaf38a98643df97d415bce49b179895f7",
-                    "installedVersion": "2.31-13+deb11u8",
-                    "packageName": "libc6",
-                    "purl": "pkg:deb/debian/libc6@2.31-13%2Bdeb11u8?arch=amd64&distro=debian-11.9",
-                    "references": [
-                      "http://www.openwall.com/lists/oss-security/2023/10/03/4",
-                      "http://www.openwall.com/lists/oss-security/2023/10/03/5",
-                      "http://www.openwall.com/lists/oss-security/2023/10/03/6",
-                      "http://www.openwall.com/lists/oss-security/2023/10/03/8",
-                      "https://access.redhat.com/errata/RHBA-2024:2413",
-                      "https://access.redhat.com/errata/RHSA-2023:5453",
-                      "https://access.redhat.com/errata/RHSA-2023:5455",
-                      "https://access.redhat.com/errata/RHSA-2023:7409",
-                      "https://access.redhat.com/security/cve/CVE-2023-4806",
-                      "https://bugzilla.redhat.com/2234712",
-                      "https://bugzilla.redhat.com/2237782",
-                      "https://bugzilla.redhat.com/2237798",
-                      "https://bugzilla.redhat.com/2238352",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2234712",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2237782",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2237798",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2238352",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-4527",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-4806",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-4813",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-4911",
-                      "https://errata.almalinux.org/8/ALSA-2023-5455.html",
-                      "https://errata.rockylinux.org/RLSA-2023:5455",
-                      "https://linux.oracle.com/cve/CVE-2023-4806.html",
-                      "https://linux.oracle.com/errata/ELSA-2023-5455.html",
-                      "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/4DBUQRRPB47TC3NJOUIBVWUGFHBJAFDL/",
-                      "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/DFG4P76UHHZEWQ26FWBXG76N2QLKKPZA/",
-                      "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/NDAQWHTSVOCOZ5K6KPIWKRT3JX4RTZUR/",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2023-4806",
-                      "https://security.gentoo.org/glsa/202310-03",
-                      "https://security.netapp.com/advisory/ntap-20240125-0008/",
-                      "https://ubuntu.com/security/notices/USN-6541-1",
-                      "https://ubuntu.com/security/notices/USN-6541-2",
-                      "https://www.cve.org/CVERecord?id=CVE-2023-4806"
-                    ],
-                    "severity": "MEDIUM",
-                    "suppressed": false,
-                    "title": "glibc: potential use-after-free in getaddrinfo()"
-                  },
-                  {
-                    "cve": "CVE-2023-4813",
-                    "cvss": {
-                      "nvd": {
-                        "v3score": "5.9",
-                        "v3vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H"
-                      },
-                      "redhat": {
-                        "v3score": "5.9",
-                        "v3vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-416"
-                    ],
-                    "description": "A flaw has been identified in glibc. In an uncommon situation, the gaih_inet function may use memory that has been freed, resulting in an application crash. This issue is only exploitable when the getaddrinfo function is called and the hosts database in /etc/nsswitch.conf is configured with SUCCESS=continue or SUCCESS=merge.",
-                    "diffID": "sha256:420179ad2efafbf953a0c75f68a4c9dfaf38a98643df97d415bce49b179895f7",
-                    "installedVersion": "2.31-13+deb11u8",
-                    "packageName": "libc6",
-                    "purl": "pkg:deb/debian/libc6@2.31-13%2Bdeb11u8?arch=amd64&distro=debian-11.9",
-                    "references": [
-                      "http://www.openwall.com/lists/oss-security/2023/10/03/8",
-                      "https://access.redhat.com/errata/RHBA-2024:2413",
-                      "https://access.redhat.com/errata/RHSA-2023:5453",
-                      "https://access.redhat.com/errata/RHSA-2023:5455",
-                      "https://access.redhat.com/errata/RHSA-2023:7409",
-                      "https://access.redhat.com/security/cve/CVE-2023-4813",
-                      "https://bugzilla.redhat.com/2234712",
-                      "https://bugzilla.redhat.com/2237782",
-                      "https://bugzilla.redhat.com/2237798",
-                      "https://bugzilla.redhat.com/2238352",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2234712",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2237782",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2237798",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2238352",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-4527",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-4806",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-4813",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-4911",
-                      "https://errata.almalinux.org/8/ALSA-2023-5455.html",
-                      "https://errata.rockylinux.org/RLSA-2023:5455",
-                      "https://linux.oracle.com/cve/CVE-2023-4813.html",
-                      "https://linux.oracle.com/errata/ELSA-2023-5455.html",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2023-4813",
-                      "https://security.netapp.com/advisory/ntap-20231110-0003/",
-                      "https://ubuntu.com/security/notices/USN-6541-1",
-                      "https://ubuntu.com/security/notices/USN-6541-2",
-                      "https://www.cve.org/CVERecord?id=CVE-2023-4813"
-                    ],
-                    "severity": "MEDIUM",
-                    "suppressed": false,
-                    "title": "glibc: potential use-after-free in gaih_inet()"
-                  },
-                  {
-                    "cve": "CVE-2024-33600",
-                    "cvss": {
-                      "redhat": {
-                        "v3score": "5.3",
-                        "v3vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-476"
-                    ],
-                    "description": "nscd: Null pointer crashes after notfound response\n\nIf the Name Service Cache Daemon's (nscd) cache fails to add a not-found\nnetgroup response to the cache, the client request can result in a null\npointer dereference.  This flaw was introduced in glibc 2.15 when the\ncache was added to nscd.\n\nThis vulnerability is only present in the nscd binary.",
-                    "diffID": "sha256:420179ad2efafbf953a0c75f68a4c9dfaf38a98643df97d415bce49b179895f7",
-                    "fixedVersions": [
-                      "2.31-13+deb11u10"
-                    ],
-                    "installedVersion": "2.31-13+deb11u8",
-                    "packageName": "libc6",
-                    "purl": "pkg:deb/debian/libc6@2.31-13%2Bdeb11u8?arch=amd64&distro=debian-11.9",
-                    "references": [
-                      "http://www.openwall.com/lists/oss-security/2024/07/22/5",
-                      "https://access.redhat.com/errata/RHSA-2024:3344",
-                      "https://access.redhat.com/security/cve/CVE-2024-33600",
-                      "https://bugzilla.redhat.com/2277202",
-                      "https://bugzilla.redhat.com/2277204",
-                      "https://bugzilla.redhat.com/2277205",
-                      "https://bugzilla.redhat.com/2277206",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2273404",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2277202",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2277204",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2277205",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2277206",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-2961",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-33599",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-33600",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-33601",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-33602",
-                      "https://errata.almalinux.org/8/ALSA-2024-3344.html",
-                      "https://errata.rockylinux.org/RLSA-2024:3339",
-                      "https://inbox.sourceware.org/libc-alpha/cover.1713974801.git.fweimer@redhat.com/",
-                      "https://linux.oracle.com/cve/CVE-2024-33600.html",
-                      "https://linux.oracle.com/errata/ELSA-2024-3588.html",
-                      "https://lists.debian.org/debian-lts-announce/2024/06/msg00026.html",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2024-33600",
-                      "https://security.netapp.com/advisory/ntap-20240524-0013/",
-                      "https://sourceware.org/git/?p=glibc.git;a=blob;f=advisories/GLIBC-SA-2024-0006",
-                      "https://ubuntu.com/security/notices/USN-6804-1",
-                      "https://www.cve.org/CVERecord?id=CVE-2024-33600",
-                      "https://www.openwall.com/lists/oss-security/2024/04/24/2"
-                    ],
-                    "severity": "MEDIUM",
-                    "suppressed": false,
-                    "title": "glibc: null pointer dereferences after failed netgroup cache insertion"
-                  },
-                  {
-                    "cve": "CVE-2024-33601",
-                    "cvss": {
-                      "redhat": {
-                        "v3score": "4",
-                        "v3vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-617"
-                    ],
-                    "description": "nscd: netgroup cache may terminate daemon on memory allocation failure\n\nThe Name Service Cache Daemon's (nscd) netgroup cache uses xmalloc or\nxrealloc and these functions may terminate the process due to a memory\nallocation failure resulting in a denial of service to the clients.  The\nflaw was introduced in glibc 2.15 when the cache was added to nscd.\n\nThis vulnerability is only present in the nscd binary.",
-                    "diffID": "sha256:420179ad2efafbf953a0c75f68a4c9dfaf38a98643df97d415bce49b179895f7",
-                    "fixedVersions": [
-                      "2.31-13+deb11u10"
-                    ],
-                    "installedVersion": "2.31-13+deb11u8",
-                    "packageName": "libc6",
-                    "purl": "pkg:deb/debian/libc6@2.31-13%2Bdeb11u8?arch=amd64&distro=debian-11.9",
-                    "references": [
-                      "http://www.openwall.com/lists/oss-security/2024/07/22/5",
-                      "https://access.redhat.com/errata/RHSA-2024:3344",
-                      "https://access.redhat.com/security/cve/CVE-2024-33601",
-                      "https://bugzilla.redhat.com/2277202",
-                      "https://bugzilla.redhat.com/2277204",
-                      "https://bugzilla.redhat.com/2277205",
-                      "https://bugzilla.redhat.com/2277206",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2273404",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2277202",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2277204",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2277205",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2277206",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-2961",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-33599",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-33600",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-33601",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-33602",
-                      "https://errata.almalinux.org/8/ALSA-2024-3344.html",
-                      "https://errata.rockylinux.org/RLSA-2024:3339",
-                      "https://inbox.sourceware.org/libc-alpha/cover.1713974801.git.fweimer@redhat.com/",
-                      "https://linux.oracle.com/cve/CVE-2024-33601.html",
-                      "https://linux.oracle.com/errata/ELSA-2024-3588.html",
-                      "https://lists.debian.org/debian-lts-announce/2024/06/msg00026.html",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2024-33601",
-                      "https://security.netapp.com/advisory/ntap-20240524-0014/",
-                      "https://sourceware.org/git/?p=glibc.git;a=blob;f=advisories/GLIBC-SA-2024-0007",
-                      "https://ubuntu.com/security/notices/USN-6804-1",
-                      "https://www.cve.org/CVERecord?id=CVE-2024-33601",
-                      "https://www.openwall.com/lists/oss-security/2024/04/24/2"
-                    ],
-                    "severity": "MEDIUM",
-                    "suppressed": false,
-                    "title": "glibc: netgroup cache may terminate daemon on memory allocation failure"
-                  },
-                  {
-                    "cve": "CVE-2024-33602",
-                    "cvss": {
-                      "redhat": {
-                        "v3score": "4",
-                        "v3vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-466"
-                    ],
-                    "description": "nscd: netgroup cache assumes NSS callback uses in-buffer strings\n\nThe Name Service Cache Daemon's (nscd) netgroup cache can corrupt memory\nwhen the NSS callback does not store all strings in the provided buffer.\nThe flaw was introduced in glibc 2.15 when the cache was added to nscd.\n\nThis vulnerability is only present in the nscd binary.",
-                    "diffID": "sha256:420179ad2efafbf953a0c75f68a4c9dfaf38a98643df97d415bce49b179895f7",
-                    "fixedVersions": [
-                      "2.31-13+deb11u10"
-                    ],
-                    "installedVersion": "2.31-13+deb11u8",
-                    "packageName": "libc6",
-                    "purl": "pkg:deb/debian/libc6@2.31-13%2Bdeb11u8?arch=amd64&distro=debian-11.9",
-                    "references": [
-                      "http://www.openwall.com/lists/oss-security/2024/07/22/5",
-                      "https://access.redhat.com/errata/RHSA-2024:3344",
-                      "https://access.redhat.com/security/cve/CVE-2024-33602",
-                      "https://bugzilla.redhat.com/2277202",
-                      "https://bugzilla.redhat.com/2277204",
-                      "https://bugzilla.redhat.com/2277205",
-                      "https://bugzilla.redhat.com/2277206",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2273404",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2277202",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2277204",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2277205",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2277206",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-2961",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-33599",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-33600",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-33601",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-33602",
-                      "https://errata.almalinux.org/8/ALSA-2024-3344.html",
-                      "https://errata.rockylinux.org/RLSA-2024:3339",
-                      "https://inbox.sourceware.org/libc-alpha/cover.1713974801.git.fweimer@redhat.com/",
-                      "https://linux.oracle.com/cve/CVE-2024-33602.html",
-                      "https://linux.oracle.com/errata/ELSA-2024-3588.html",
-                      "https://lists.debian.org/debian-lts-announce/2024/06/msg00026.html",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2024-33602",
-                      "https://security.netapp.com/advisory/ntap-20240524-0012/",
-                      "https://sourceware.org/bugzilla/show_bug.cgi?id=31680",
-                      "https://sourceware.org/git/?p=glibc.git;a=blob;f=advisories/GLIBC-SA-2024-0008",
-                      "https://ubuntu.com/security/notices/USN-6804-1",
-                      "https://www.cve.org/CVERecord?id=CVE-2024-33602",
-                      "https://www.openwall.com/lists/oss-security/2024/04/24/2"
-                    ],
-                    "severity": "MEDIUM",
-                    "suppressed": false,
-                    "title": "glibc: netgroup cache assumes NSS callback uses in-buffer strings"
-                  },
-                  {
-                    "cve": "CVE-2025-0395",
-                    "cvss": {
-                      "redhat": {
-                        "v3score": "5.5",
-                        "v3vector": "CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:L/I:L/A:H"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-131"
-                    ],
-                    "description": "When the assert() function in the GNU C Library versions 2.13 to 2.40 fails, it does not allocate enough space for the assertion failure message string and size information, which may lead to a buffer overflow if the message string size aligns to page size.",
-                    "diffID": "sha256:420179ad2efafbf953a0c75f68a4c9dfaf38a98643df97d415bce49b179895f7",
-                    "fixedVersions": [
-                      "2.31-13+deb11u12"
-                    ],
-                    "installedVersion": "2.31-13+deb11u8",
-                    "packageName": "libc6",
-                    "purl": "pkg:deb/debian/libc6@2.31-13%2Bdeb11u8?arch=amd64&distro=debian-11.9",
-                    "references": [
-                      "http://www.openwall.com/lists/oss-security/2025/01/22/4",
-                      "http://www.openwall.com/lists/oss-security/2025/01/23/2",
-                      "http://www.openwall.com/lists/oss-security/2025/04/13/1",
-                      "http://www.openwall.com/lists/oss-security/2025/04/24/7",
-                      "https://access.redhat.com/errata/RHSA-2025:3828",
-                      "https://access.redhat.com/security/cve/CVE-2025-0395",
-                      "https://bugzilla.redhat.com/2339460",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2339460",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-0395",
-                      "https://errata.almalinux.org/8/ALSA-2025-3828.html",
-                      "https://errata.rockylinux.org/RLSA-2025:4244",
-                      "https://linux.oracle.com/cve/CVE-2025-0395.html",
-                      "https://linux.oracle.com/errata/ELSA-2025-4244.html",
-                      "https://lists.debian.org/debian-lts-announce/2025/04/msg00039.html",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2025-0395",
-                      "https://security.netapp.com/advisory/ntap-20250228-0006/",
-                      "https://sourceware.org/bugzilla/show_bug.cgi?id=32582",
-                      "https://sourceware.org/git/?p=glibc.git;a=blob;f=advisories/GLIBC-SA-2025-0001",
-                      "https://sourceware.org/pipermail/libc-announce/2025/000044.html",
-                      "https://ubuntu.com/security/notices/USN-7259-1",
-                      "https://ubuntu.com/security/notices/USN-7259-2",
-                      "https://ubuntu.com/security/notices/USN-7259-3",
-                      "https://www.cve.org/CVERecord?id=CVE-2025-0395",
-                      "https://www.openwall.com/lists/oss-security/2025/01/22/4"
-                    ],
-                    "severity": "MEDIUM",
-                    "suppressed": false,
-                    "title": "glibc: buffer overflow in the GNU C Library's assert()"
-                  },
-                  {
-                    "cve": "CVE-2025-15281",
-                    "cvss": {
-                      "redhat": {
-                        "v3score": "5.9",
-                        "v3vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-908"
-                    ],
-                    "description": "Calling wordexp with WRDE_REUSE in conjunction with WRDE_APPEND in the GNU C Library version 2.0 to version 2.42 may cause the interface to return uninitialized memory in the we_wordv member, which on subsequent calls to wordfree may abort the process.",
-                    "diffID": "sha256:420179ad2efafbf953a0c75f68a4c9dfaf38a98643df97d415bce49b179895f7",
-                    "installedVersion": "2.31-13+deb11u8",
-                    "packageName": "libc6",
-                    "purl": "pkg:deb/debian/libc6@2.31-13%2Bdeb11u8?arch=amd64&distro=debian-11.9",
-                    "references": [
-                      "http://www.openwall.com/lists/oss-security/2026/01/20/3",
-                      "https://access.redhat.com/security/cve/CVE-2025-15281",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2025-15281",
-                      "https://sourceware.org/bugzilla/show_bug.cgi?id=33814",
-                      "https://ubuntu.com/security/notices/USN-8005-1",
-                      "https://www.cve.org/CVERecord?id=CVE-2025-15281",
-                      "https://www.openwall.com/lists/oss-security/2026/01/20/3"
-                    ],
-                    "severity": "MEDIUM",
-                    "suppressed": false,
-                    "title": "glibc: wordexp with WRDE_REUSE and WRDE_APPEND may return uninitialized memory"
-                  },
-                  {
-                    "cve": "CVE-2025-8058",
-                    "cvss": {
-                      "redhat": {
-                        "v3score": "4.2",
-                        "v3vector": "CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:L/I:L/A:L"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-415"
-                    ],
-                    "description": "The regcomp function in the GNU C library version from 2.4 to 2.41 is \nsubject to a double free if some previous allocation fails. It can be \naccomplished either by a malloc failure or by using an interposed malloc\n that injects random malloc failures. The double free can allow buffer \nmanipulation depending of how the regex is constructed. This issue \naffects all architectures and ABIs supported by the GNU C library.",
-                    "diffID": "sha256:420179ad2efafbf953a0c75f68a4c9dfaf38a98643df97d415bce49b179895f7",
-                    "installedVersion": "2.31-13+deb11u8",
-                    "packageName": "libc6",
-                    "purl": "pkg:deb/debian/libc6@2.31-13%2Bdeb11u8?arch=amd64&distro=debian-11.9",
-                    "references": [
-                      "http://www.openwall.com/lists/oss-security/2025/07/23/1",
-                      "https://access.redhat.com/errata/RHSA-2025:12980",
-                      "https://access.redhat.com/security/cve/CVE-2025-8058",
-                      "https://bugzilla.redhat.com/2383146",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2383146",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-8058",
-                      "https://errata.almalinux.org/8/ALSA-2025-12980.html",
-                      "https://errata.rockylinux.org/RLSA-2025:12748",
-                      "https://linux.oracle.com/cve/CVE-2025-8058.html",
-                      "https://linux.oracle.com/errata/ELSA-2025-28054.html",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2025-8058",
-                      "https://sourceware.org/bugzilla/show_bug.cgi?id=33185",
-                      "https://sourceware.org/git/?p=glibc.git;a=blob_plain;f=advisories/GLIBC-SA-2025-0005",
-                      "https://sourceware.org/git/?p=glibc.git;a=commit;h=3ff17af18c38727b88d9115e536c069e6b5d601f",
-                      "https://ubuntu.com/security/notices/USN-7760-1",
-                      "https://ubuntu.com/security/notices/USN-8005-1",
-                      "https://www.cve.org/CVERecord?id=CVE-2025-8058"
-                    ],
-                    "severity": "MEDIUM",
-                    "suppressed": false,
-                    "title": "glibc: Double free in glibc"
-                  },
-                  {
-                    "cve": "CVE-2026-0915",
-                    "cvss": {
-                      "redhat": {
-                        "v3score": "5.3",
-                        "v3vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-908"
-                    ],
-                    "description": "Calling getnetbyaddr or getnetbyaddr_r with a configured nsswitch.conf that specifies the library's DNS backend for networks and queries for a zero-valued network in the GNU C Library version 2.0 to version 2.42 can leak stack contents to the configured DNS resolver.",
-                    "diffID": "sha256:420179ad2efafbf953a0c75f68a4c9dfaf38a98643df97d415bce49b179895f7",
-                    "installedVersion": "2.31-13+deb11u8",
-                    "packageName": "libc6",
-                    "purl": "pkg:deb/debian/libc6@2.31-13%2Bdeb11u8?arch=amd64&distro=debian-11.9",
-                    "references": [
-                      "http://www.openwall.com/lists/oss-security/2026/01/16/6",
-                      "https://access.redhat.com/errata/RHSA-2026:1334",
-                      "https://access.redhat.com/security/cve/CVE-2026-0915",
-                      "https://bugzilla.redhat.com/2429771",
-                      "https://bugzilla.redhat.com/2430201",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2429771",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430201",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-0861",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-0915",
-                      "https://errata.almalinux.org/10/ALSA-2026-1334.html",
-                      "https://errata.rockylinux.org/RLSA-2026:1334",
-                      "https://linux.oracle.com/cve/CVE-2026-0915.html",
-                      "https://linux.oracle.com/errata/ELSA-2026-50078.html",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2026-0915",
-                      "https://sourceware.org/bugzilla/show_bug.cgi?id=33802",
-                      "https://ubuntu.com/security/notices/USN-8005-1",
-                      "https://www.cve.org/CVERecord?id=CVE-2026-0915",
-                      "https://www.openwall.com/lists/oss-security/2026/01/16/6"
-                    ],
-                    "severity": "MEDIUM",
-                    "suppressed": false,
-                    "title": "glibc: glibc: Information disclosure via zero-valued network query"
-                  },
-                  {
-                    "cve": "CVE-2010-4756",
-                    "cvss": {
-                      "nvd": {
-                        "v3score": "0",
-                        "v3vector": ""
-                      },
-                      "redhat": {
-                        "v3score": "0",
-                        "v3vector": ""
-                      }
-                    },
-                    "cwes": [
-                      "CWE-399"
-                    ],
-                    "description": "The glob implementation in the GNU C Library (aka glibc or libc6) allows remote authenticated users to cause a denial of service (CPU and memory consumption) via crafted glob expressions that do not match any pathnames, as demonstrated by glob expressions in STAT commands to an FTP daemon, a different vulnerability than CVE-2010-2632.",
-                    "diffID": "sha256:420179ad2efafbf953a0c75f68a4c9dfaf38a98643df97d415bce49b179895f7",
-                    "installedVersion": "2.31-13+deb11u8",
-                    "packageName": "libc6",
-                    "purl": "pkg:deb/debian/libc6@2.31-13%2Bdeb11u8?arch=amd64&distro=debian-11.9",
-                    "references": [
-                      "http://cxib.net/stuff/glob-0day.c",
-                      "http://securityreason.com/achievement_securityalert/89",
-                      "http://securityreason.com/exploitalert/9223",
-                      "https://access.redhat.com/security/cve/CVE-2010-4756",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=681681",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2010-4756",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2010-4756",
-                      "https://security.netapp.com/advisory/ntap-20241108-0002/",
-                      "https://www.cve.org/CVERecord?id=CVE-2010-4756"
-                    ],
-                    "severity": "LOW",
-                    "suppressed": false,
-                    "title": "glibc: glob implementation can cause excessive CPU and memory consumption due to crafted glob expressions"
-                  },
-                  {
-                    "cve": "CVE-2018-20796",
-                    "cvss": {
-                      "nvd": {
-                        "v3score": "7.5",
-                        "v3vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"
-                      },
-                      "redhat": {
-                        "v3score": "5.3",
-                        "v3vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-674"
-                    ],
-                    "description": "In the GNU C Library (aka glibc or libc6) through 2.29, check_dst_limits_calc_pos_1 in posix/regexec.c has Uncontrolled Recursion, as demonstrated by '(\\227|)(\\\\1\\\\1|t1|\\\\\\2537)+' in grep.",
-                    "diffID": "sha256:420179ad2efafbf953a0c75f68a4c9dfaf38a98643df97d415bce49b179895f7",
-                    "installedVersion": "2.31-13+deb11u8",
-                    "packageName": "libc6",
-                    "purl": "pkg:deb/debian/libc6@2.31-13%2Bdeb11u8?arch=amd64&distro=debian-11.9",
-                    "references": [
-                      "http://www.securityfocus.com/bid/107160",
-                      "https://access.redhat.com/security/cve/CVE-2018-20796",
-                      "https://debbugs.gnu.org/cgi/bugreport.cgi?bug=34141",
-                      "https://lists.gnu.org/archive/html/bug-gnulib/2019-01/msg00108.html",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2018-20796",
-                      "https://security.netapp.com/advisory/ntap-20190315-0002/",
-                      "https://support.f5.com/csp/article/K26346590?utm_source=f5support&amp%3Butm_medium=RSS",
-                      "https://www.cve.org/CVERecord?id=CVE-2018-20796"
-                    ],
-                    "severity": "LOW",
-                    "suppressed": false,
-                    "title": "glibc: uncontrolled recursion in function check_dst_limits_calc_pos_1 in posix/regexec.c"
-                  },
-                  {
-                    "cve": "CVE-2019-1010022",
-                    "cvss": {
-                      "nvd": {
-                        "v3score": "9.8",
-                        "v3vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-119"
-                    ],
-                    "description": "GNU Libc current is affected by: Mitigation bypass. The impact is: Attacker may bypass stack guard protection. The component is: nptl. The attack vector is: Exploit stack buffer overflow vulnerability and use this bypass vulnerability to bypass stack guard. NOTE: Upstream comments indicate \"this is being treated as a non-security bug and no real threat.",
-                    "diffID": "sha256:420179ad2efafbf953a0c75f68a4c9dfaf38a98643df97d415bce49b179895f7",
-                    "installedVersion": "2.31-13+deb11u8",
-                    "packageName": "libc6",
-                    "purl": "pkg:deb/debian/libc6@2.31-13%2Bdeb11u8?arch=amd64&distro=debian-11.9",
-                    "references": [
-                      "https://access.redhat.com/security/cve/CVE-2019-1010022",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2019-1010022",
-                      "https://security-tracker.debian.org/tracker/CVE-2019-1010022",
-                      "https://sourceware.org/bugzilla/show_bug.cgi?id=22850",
-                      "https://sourceware.org/bugzilla/show_bug.cgi?id=22850#c3",
-                      "https://ubuntu.com/security/CVE-2019-1010022",
-                      "https://www.cve.org/CVERecord?id=CVE-2019-1010022"
-                    ],
-                    "severity": "LOW",
-                    "suppressed": false,
-                    "title": "glibc: stack guard protection bypass"
-                  },
-                  {
-                    "cve": "CVE-2019-1010023",
-                    "cvss": {
-                      "nvd": {
-                        "v3score": "8.8",
-                        "v3vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H"
-                      },
-                      "redhat": {
-                        "v3score": "7.8",
-                        "v3vector": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H"
-                      }
-                    },
-                    "description": "GNU Libc current is affected by: Re-mapping current loaded library with malicious ELF file. The impact is: In worst case attacker may evaluate privileges. The component is: libld. The attack vector is: Attacker sends 2 ELF files to victim and asks to run ldd on it. ldd execute code. NOTE: Upstream comments indicate \"this is being treated as a non-security bug and no real threat.",
-                    "diffID": "sha256:420179ad2efafbf953a0c75f68a4c9dfaf38a98643df97d415bce49b179895f7",
-                    "installedVersion": "2.31-13+deb11u8",
-                    "packageName": "libc6",
-                    "purl": "pkg:deb/debian/libc6@2.31-13%2Bdeb11u8?arch=amd64&distro=debian-11.9",
-                    "references": [
-                      "http://www.securityfocus.com/bid/109167",
-                      "https://access.redhat.com/security/cve/CVE-2019-1010023",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2019-1010023",
-                      "https://security-tracker.debian.org/tracker/CVE-2019-1010023",
-                      "https://sourceware.org/bugzilla/show_bug.cgi?id=22851",
-                      "https://support.f5.com/csp/article/K11932200?utm_source=f5support&amp%3Butm_medium=RSS",
-                      "https://ubuntu.com/security/CVE-2019-1010023",
-                      "https://www.cve.org/CVERecord?id=CVE-2019-1010023"
-                    ],
-                    "severity": "LOW",
-                    "suppressed": false,
-                    "title": "glibc: running ldd on malicious ELF leads to code execution because of wrong size computation"
-                  },
-                  {
-                    "cve": "CVE-2019-1010024",
-                    "cvss": {
-                      "nvd": {
-                        "v3score": "5.3",
-                        "v3vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N"
-                      },
-                      "redhat": {
-                        "v3score": "5.3",
-                        "v3vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-200"
-                    ],
-                    "description": "GNU Libc current is affected by: Mitigation bypass. The impact is: Attacker may bypass ASLR using cache of thread stack and heap. The component is: glibc. NOTE: Upstream comments indicate \"this is being treated as a non-security bug and no real threat.",
-                    "diffID": "sha256:420179ad2efafbf953a0c75f68a4c9dfaf38a98643df97d415bce49b179895f7",
-                    "installedVersion": "2.31-13+deb11u8",
-                    "packageName": "libc6",
-                    "purl": "pkg:deb/debian/libc6@2.31-13%2Bdeb11u8?arch=amd64&distro=debian-11.9",
-                    "references": [
-                      "http://www.securityfocus.com/bid/109162",
-                      "https://access.redhat.com/security/cve/CVE-2019-1010024",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2019-1010024",
-                      "https://security-tracker.debian.org/tracker/CVE-2019-1010024",
-                      "https://sourceware.org/bugzilla/show_bug.cgi?id=22852",
-                      "https://support.f5.com/csp/article/K06046097",
-                      "https://support.f5.com/csp/article/K06046097?utm_source=f5support&amp%3Butm_medium=RSS",
-                      "https://ubuntu.com/security/CVE-2019-1010024",
-                      "https://www.cve.org/CVERecord?id=CVE-2019-1010024"
-                    ],
-                    "severity": "LOW",
-                    "suppressed": false,
-                    "title": "glibc: ASLR bypass using cache of thread stack and heap"
-                  },
-                  {
-                    "cve": "CVE-2019-1010025",
-                    "cvss": {
-                      "nvd": {
-                        "v3score": "5.3",
-                        "v3vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N"
-                      },
-                      "redhat": {
-                        "v3score": "2.9",
-                        "v3vector": "CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-330"
-                    ],
-                    "description": "GNU Libc current is affected by: Mitigation bypass. The impact is: Attacker may guess the heap addresses of pthread_created thread. The component is: glibc. NOTE: the vendor's position is \"ASLR bypass itself is not a vulnerability.",
-                    "diffID": "sha256:420179ad2efafbf953a0c75f68a4c9dfaf38a98643df97d415bce49b179895f7",
-                    "installedVersion": "2.31-13+deb11u8",
-                    "packageName": "libc6",
-                    "purl": "pkg:deb/debian/libc6@2.31-13%2Bdeb11u8?arch=amd64&distro=debian-11.9",
-                    "references": [
-                      "https://access.redhat.com/security/cve/CVE-2019-1010025",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2019-1010025",
-                      "https://security-tracker.debian.org/tracker/CVE-2019-1010025",
-                      "https://sourceware.org/bugzilla/show_bug.cgi?id=22853",
-                      "https://support.f5.com/csp/article/K06046097",
-                      "https://support.f5.com/csp/article/K06046097?utm_source=f5support&amp%3Butm_medium=RSS",
-                      "https://ubuntu.com/security/CVE-2019-1010025",
-                      "https://www.cve.org/CVERecord?id=CVE-2019-1010025"
-                    ],
-                    "severity": "LOW",
-                    "suppressed": false,
-                    "title": "glibc: information disclosure of heap addresses of pthread_created thread"
-                  },
-                  {
-                    "cve": "CVE-2019-9192",
-                    "cvss": {
-                      "nvd": {
-                        "v3score": "7.5",
-                        "v3vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"
-                      },
-                      "redhat": {
-                        "v3score": "2.8",
-                        "v3vector": "CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:L"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-674"
-                    ],
-                    "description": "In the GNU C Library (aka glibc or libc6) through 2.29, check_dst_limits_calc_pos_1 in posix/regexec.c has Uncontrolled Recursion, as demonstrated by '(|)(\\\\1\\\\1)*' in grep, a different issue than CVE-2018-20796. NOTE: the software maintainer disputes that this is a vulnerability because the behavior occurs only with a crafted pattern",
-                    "diffID": "sha256:420179ad2efafbf953a0c75f68a4c9dfaf38a98643df97d415bce49b179895f7",
-                    "installedVersion": "2.31-13+deb11u8",
-                    "packageName": "libc6",
-                    "purl": "pkg:deb/debian/libc6@2.31-13%2Bdeb11u8?arch=amd64&distro=debian-11.9",
-                    "references": [
-                      "https://access.redhat.com/security/cve/CVE-2019-9192",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2019-9192",
-                      "https://sourceware.org/bugzilla/show_bug.cgi?id=24269",
-                      "https://support.f5.com/csp/article/K26346590?utm_source=f5support&amp%3Butm_medium=RSS",
-                      "https://www.cve.org/CVERecord?id=CVE-2019-9192"
-                    ],
-                    "severity": "LOW",
-                    "suppressed": false,
-                    "title": "glibc: uncontrolled recursion in function check_dst_limits_calc_pos_1 in posix/regexec.c"
-                  },
-                  {
-                    "cve": "CVE-2022-1304",
-                    "cvss": {
-                      "nvd": {
-                        "v3score": "7.8",
-                        "v3vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H"
-                      },
-                      "redhat": {
-                        "v3score": "5.8",
-                        "v3vector": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:H"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-125",
-                      "CWE-787"
-                    ],
-                    "description": "An out-of-bounds read/write vulnerability was found in e2fsprogs 1.46.5. This issue leads to a segmentation fault and possibly arbitrary code execution via a specially crafted filesystem.",
-                    "diffID": "sha256:420179ad2efafbf953a0c75f68a4c9dfaf38a98643df97d415bce49b179895f7",
-                    "fixedVersions": [
-                      "1.46.2-2+deb11u1"
-                    ],
-                    "installedVersion": "1.46.2-2",
-                    "packageName": "libcom-err2",
-                    "purl": "pkg:deb/debian/libcom-err2@1.46.2-2?arch=amd64&distro=debian-11.9",
-                    "references": [
-                      "https://access.redhat.com/errata/RHSA-2022:7720",
-                      "https://access.redhat.com/security/cve/CVE-2022-1304",
-                      "https://bugzilla.redhat.com/2069726",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2069726",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-1304",
-                      "https://errata.almalinux.org/8/ALSA-2022-7720.html",
-                      "https://errata.rockylinux.org/RLSA-2022:8361",
-                      "https://linux.oracle.com/cve/CVE-2022-1304.html",
-                      "https://linux.oracle.com/errata/ELSA-2024-12731.html",
-                      "https://lists.debian.org/debian-lts-announce/2024/10/msg00001.html",
-                      "https://marc.info/?l=linux-ext4&m=165056234501732&w=2",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2022-1304",
-                      "https://security.netapp.com/advisory/ntap-20241122-0010/",
-                      "https://ubuntu.com/security/notices/USN-5464-1",
-                      "https://www.cve.org/CVERecord?id=CVE-2022-1304"
-                    ],
-                    "severity": "HIGH",
-                    "suppressed": false,
-                    "title": "e2fsprogs: out-of-bounds read/write via crafted filesystem"
-                  },
-                  {
-                    "cve": "CVE-2023-23914",
-                    "cvss": {
-                      "nvd": {
-                        "v3score": "9.1",
-                        "v3vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N"
-                      },
-                      "redhat": {
-                        "v3score": "6.5",
-                        "v3vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-319"
-                    ],
-                    "description": "A cleartext transmission of sensitive information vulnerability exists in curl <v7.88.0 that could cause HSTS functionality fail when multiple URLs are requested serially. Using its HSTS support, curl can be instructed to use HTTPS instead of usingan insecure clear-text HTTP step even when HTTP is provided in the URL. ThisHSTS mechanism would however surprisingly be ignored by subsequent transferswhen done on the same command line because the state would not be properlycarried on.",
-                    "diffID": "sha256:9664c8c85da49d2cedf85c6b8af0e128318580b95b277b87593a4f75886148af",
-                    "installedVersion": "7.74.0-1.3+deb11u11",
-                    "packageName": "libcurl4",
-                    "purl": "pkg:deb/debian/libcurl4@7.74.0-1.3%2Bdeb11u11?arch=amd64&distro=debian-11.9",
-                    "references": [
-                      "https://access.redhat.com/security/cve/CVE-2023-23914",
-                      "https://curl.se/docs/CVE-2023-23914.html",
-                      "https://hackerone.com/reports/1813864",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2023-23914",
-                      "https://security.gentoo.org/glsa/202310-12",
-                      "https://security.netapp.com/advisory/ntap-20230309-0006/",
-                      "https://ubuntu.com/security/notices/USN-5891-1",
-                      "https://www.cve.org/CVERecord?id=CVE-2023-23914"
-                    ],
-                    "severity": "CRITICAL",
-                    "suppressed": false,
-                    "title": "curl: HSTS ignored on multiple requests"
-                  },
-                  {
-                    "cve": "CVE-2022-42916",
-                    "cvss": {
-                      "nvd": {
-                        "v3score": "7.5",
-                        "v3vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N"
-                      },
-                      "redhat": {
-                        "v3score": "7.5",
-                        "v3vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-319"
-                    ],
-                    "description": "In curl before 7.86.0, the HSTS check could be bypassed to trick it into staying with HTTP. Using its HSTS support, curl can be instructed to use HTTPS directly (instead of using an insecure cleartext HTTP step) even when HTTP is provided in the URL. This mechanism could be bypassed if the host name in the given URL uses IDN characters that get replaced with ASCII counterparts as part of the IDN conversion, e.g., using the character UTF-8 U+3002 (IDEOGRAPHIC FULL STOP) instead of the common ASCII full stop of U+002E (.). The earliest affected version is 7.77.0 2021-05-26.",
-                    "diffID": "sha256:9664c8c85da49d2cedf85c6b8af0e128318580b95b277b87593a4f75886148af",
-                    "installedVersion": "7.74.0-1.3+deb11u11",
-                    "packageName": "libcurl4",
-                    "purl": "pkg:deb/debian/libcurl4@7.74.0-1.3%2Bdeb11u11?arch=amd64&distro=debian-11.9",
-                    "references": [
-                      "http://seclists.org/fulldisclosure/2023/Jan/19",
-                      "http://seclists.org/fulldisclosure/2023/Jan/20",
-                      "http://www.openwall.com/lists/oss-security/2022/12/21/1",
-                      "https://access.redhat.com/security/cve/CVE-2022-42916",
-                      "https://curl.se/docs/CVE-2022-42916.html",
-                      "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/37YEVVC6NAF6H7UHH6YAUY5QEVY6LIH2/",
-                      "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/HVU3IMZCKR4VE6KJ4GCWRL2ILLC6OV76/",
-                      "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/Q27V5YYMXUVI6PRZQVECON32XPVWTKDK/",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2022-42916",
-                      "https://security.gentoo.org/glsa/202212-01",
-                      "https://security.netapp.com/advisory/ntap-20221209-0010/",
-                      "https://support.apple.com/kb/HT213604",
-                      "https://support.apple.com/kb/HT213605",
-                      "https://ubuntu.com/security/notices/USN-5702-1",
-                      "https://www.cve.org/CVERecord?id=CVE-2022-42916"
-                    ],
-                    "severity": "HIGH",
-                    "suppressed": false,
-                    "title": "curl: HSTS bypass via IDN"
-                  },
-                  {
-                    "cve": "CVE-2022-43551",
-                    "cvss": {
-                      "nvd": {
-                        "v3score": "7.5",
-                        "v3vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N"
-                      },
-                      "redhat": {
-                        "v3score": "7.5",
-                        "v3vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-319"
-                    ],
-                    "description": "A vulnerability exists in curl <7.87.0 HSTS check that could be bypassed to trick it to keep using HTTP. Using its HSTS support, curl can be instructed to use HTTPS instead of using an insecure clear-text HTTP step even when HTTP is provided in the URL. However, the HSTS mechanism could be bypassed if the host name in the given URL first uses IDN characters that get replaced to ASCII counterparts as part of the IDN conversion. Like using the character UTF-8 U+3002 (IDEOGRAPHIC FULL STOP) instead of the common ASCII full stop (U+002E) `.`. Then in a subsequent request, it does not detect the HSTS state and makes a clear text transfer. Because it would store the info IDN encoded but look for it IDN decoded.",
-                    "diffID": "sha256:9664c8c85da49d2cedf85c6b8af0e128318580b95b277b87593a4f75886148af",
-                    "installedVersion": "7.74.0-1.3+deb11u11",
-                    "packageName": "libcurl4",
-                    "purl": "pkg:deb/debian/libcurl4@7.74.0-1.3%2Bdeb11u11?arch=amd64&distro=debian-11.9",
-                    "references": [
-                      "https://access.redhat.com/security/cve/CVE-2022-43551",
-                      "https://curl.se/docs/CVE-2022-43551.html",
-                      "https://hackerone.com/reports/1755083",
-                      "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/TVWZW5CNSJ7UYAF2BGSYAWAEXDJYUBHA/",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2022-43551",
-                      "https://security.gentoo.org/glsa/202310-12",
-                      "https://security.netapp.com/advisory/ntap-20230427-0007/",
-                      "https://ubuntu.com/security/notices/USN-5788-1",
-                      "https://www.cve.org/CVERecord?id=CVE-2022-43551"
-                    ],
-                    "severity": "HIGH",
-                    "suppressed": false,
-                    "title": "curl: HSTS bypass via IDN"
-                  },
-                  {
-                    "cve": "CVE-2024-2398",
-                    "cvss": {
-                      "redhat": {
-                        "v3score": "7.5",
-                        "v3vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-772"
-                    ],
-                    "description": "When an application tells libcurl it wants to allow HTTP/2 server push, and the amount of received headers for the push surpasses the maximum allowed limit (1000), libcurl aborts the server push. When aborting, libcurl inadvertently does not free all the previously allocated headers and instead leaks the memory.  Further, this error condition fails silently and is therefore not easily detected by an application.",
-                    "diffID": "sha256:9664c8c85da49d2cedf85c6b8af0e128318580b95b277b87593a4f75886148af",
-                    "fixedVersions": [
-                      "7.74.0-1.3+deb11u12"
-                    ],
-                    "installedVersion": "7.74.0-1.3+deb11u11",
-                    "packageName": "libcurl4",
-                    "purl": "pkg:deb/debian/libcurl4@7.74.0-1.3%2Bdeb11u11?arch=amd64&distro=debian-11.9",
-                    "references": [
-                      "http://seclists.org/fulldisclosure/2024/Jul/18",
-                      "http://seclists.org/fulldisclosure/2024/Jul/19",
-                      "http://seclists.org/fulldisclosure/2024/Jul/20",
-                      "http://www.openwall.com/lists/oss-security/2024/03/27/3",
-                      "https://access.redhat.com/errata/RHSA-2024:5654",
-                      "https://access.redhat.com/security/cve/CVE-2024-2398",
-                      "https://bugzilla.redhat.com/2270498",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2270498",
-                      "https://curl.se/docs/CVE-2024-2398.html",
-                      "https://curl.se/docs/CVE-2024-2398.json",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-2398",
-                      "https://errata.almalinux.org/8/ALSA-2024-5654.html",
-                      "https://errata.rockylinux.org/RLSA-2024:5654",
-                      "https://hackerone.com/reports/2402845",
-                      "https://linux.oracle.com/cve/CVE-2024-2398.html",
-                      "https://linux.oracle.com/errata/ELSA-2024-5654.html",
-                      "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/2D44YLAUFJU6BZ4XFG2FYV7SBKXB5IZ6/",
-                      "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/GMD6UYKCCRCYETWQZUJ65ZRFULT6SHLI/",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2024-2398",
-                      "https://security.netapp.com/advisory/ntap-20240503-0009/",
-                      "https://support.apple.com/kb/HT214118",
-                      "https://support.apple.com/kb/HT214119",
-                      "https://support.apple.com/kb/HT214120",
-                      "https://ubuntu.com/security/notices/USN-6718-1",
-                      "https://ubuntu.com/security/notices/USN-6718-2",
-                      "https://ubuntu.com/security/notices/USN-6718-3",
-                      "https://www.cve.org/CVERecord?id=CVE-2024-2398"
-                    ],
-                    "severity": "HIGH",
-                    "suppressed": false,
-                    "title": "curl: HTTP/2 push headers memory-leak"
-                  },
-                  {
-                    "cve": "CVE-2023-23915",
-                    "cvss": {
-                      "nvd": {
-                        "v3score": "6.5",
-                        "v3vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N"
-                      },
-                      "redhat": {
-                        "v3score": "4.2",
-                        "v3vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-319"
-                    ],
-                    "description": "A cleartext transmission of sensitive information vulnerability exists in curl <v7.88.0 that could cause HSTS functionality to behave incorrectly when multiple URLs are requested in parallel. Using its HSTS support, curl can be instructed to use HTTPS instead of using an insecure clear-text HTTP step even when HTTP is provided in the URL. This HSTS mechanism would however surprisingly fail when multiple transfers are done in parallel as the HSTS cache file gets overwritten by the most recentlycompleted transfer. A later HTTP-only transfer to the earlier host name would then *not* get upgraded properly to HSTS.",
-                    "diffID": "sha256:9664c8c85da49d2cedf85c6b8af0e128318580b95b277b87593a4f75886148af",
-                    "installedVersion": "7.74.0-1.3+deb11u11",
-                    "packageName": "libcurl4",
-                    "purl": "pkg:deb/debian/libcurl4@7.74.0-1.3%2Bdeb11u11?arch=amd64&distro=debian-11.9",
-                    "references": [
-                      "https://access.redhat.com/security/cve/CVE-2023-23915",
-                      "https://curl.se/docs/CVE-2023-23915.html",
-                      "https://hackerone.com/reports/1826048",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2023-23915",
-                      "https://security.gentoo.org/glsa/202310-12",
-                      "https://security.netapp.com/advisory/ntap-20230309-0006/",
-                      "https://ubuntu.com/security/notices/USN-5891-1",
-                      "https://www.cve.org/CVERecord?id=CVE-2023-23915"
-                    ],
-                    "severity": "MEDIUM",
-                    "suppressed": false,
-                    "title": "curl: HSTS amnesia with --parallel"
-                  },
-                  {
-                    "cve": "CVE-2023-46219",
-                    "cvss": {
-                      "nvd": {
-                        "v3score": "5.3",
-                        "v3vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N"
-                      },
-                      "redhat": {
-                        "v3score": "5.3",
-                        "v3vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-311"
-                    ],
-                    "description": "When saving HSTS data to an excessively long file name, curl could end up\nremoving all contents, making subsequent requests using that file unaware of\nthe HSTS status they should otherwise use.",
-                    "diffID": "sha256:9664c8c85da49d2cedf85c6b8af0e128318580b95b277b87593a4f75886148af",
-                    "installedVersion": "7.74.0-1.3+deb11u11",
-                    "packageName": "libcurl4",
-                    "purl": "pkg:deb/debian/libcurl4@7.74.0-1.3%2Bdeb11u11?arch=amd64&distro=debian-11.9",
-                    "references": [
-                      "https://access.redhat.com/security/cve/CVE-2023-46219",
-                      "https://curl.se/docs/CVE-2023-46219.html",
-                      "https://hackerone.com/reports/2236133",
-                      "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/3ZX3VW67N4ACRAPMV2QS2LVYGD7H2MVE/",
-                      "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/UOGXU25FMMT2X6UUITQ7EZZYMJ42YWWD/",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2023-46219",
-                      "https://security.netapp.com/advisory/ntap-20240119-0007/",
-                      "https://ubuntu.com/security/notices/USN-6535-1",
-                      "https://www.cve.org/CVERecord?id=CVE-2023-46219",
-                      "https://www.debian.org/security/2023/dsa-5587"
-                    ],
-                    "severity": "MEDIUM",
-                    "suppressed": false,
-                    "title": "curl: excessively long file name may lead to unknown HSTS status"
-                  },
-                  {
-                    "cve": "CVE-2024-7264",
-                    "cvss": {
-                      "nvd": {
-                        "v3score": "6.5",
-                        "v3vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H"
-                      },
-                      "redhat": {
-                        "v3score": "5.3",
-                        "v3vector": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:H"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-125"
-                    ],
-                    "description": "libcurl's ASN1 parser code has the `GTime2str()` function, used for parsing an\nASN.1 Generalized Time field. If given an syntactically incorrect field, the\nparser might end up using -1 for the length of the *time fraction*, leading to\na `strlen()` getting performed on a pointer to a heap buffer area that is not\n(purposely) null terminated.\n\nThis flaw most likely leads to a crash, but can also lead to heap contents\ngetting returned to the application when\n[CURLINFO_CERTINFO](https://curl.se/libcurl/c/CURLINFO_CERTINFO.html) is used.",
-                    "diffID": "sha256:9664c8c85da49d2cedf85c6b8af0e128318580b95b277b87593a4f75886148af",
-                    "fixedVersions": [
-                      "7.74.0-1.3+deb11u13"
-                    ],
-                    "installedVersion": "7.74.0-1.3+deb11u11",
-                    "packageName": "libcurl4",
-                    "purl": "pkg:deb/debian/libcurl4@7.74.0-1.3%2Bdeb11u11?arch=amd64&distro=debian-11.9",
-                    "references": [
-                      "http://www.openwall.com/lists/oss-security/2024/07/31/1",
-                      "https://access.redhat.com/errata/RHSA-2025:1673",
-                      "https://access.redhat.com/security/cve/CVE-2024-7264",
-                      "https://bugzilla.redhat.com/2294581",
-                      "https://bugzilla.redhat.com/2294676",
-                      "https://bugzilla.redhat.com/2301888",
-                      "https://bugzilla.redhat.com/2318857",
-                      "https://bugzilla.redhat.com/2318858",
-                      "https://bugzilla.redhat.com/2318870",
-                      "https://bugzilla.redhat.com/2318873",
-                      "https://bugzilla.redhat.com/2318874",
-                      "https://bugzilla.redhat.com/2318876",
-                      "https://bugzilla.redhat.com/2318882",
-                      "https://bugzilla.redhat.com/2318883",
-                      "https://bugzilla.redhat.com/2318884",
-                      "https://bugzilla.redhat.com/2318885",
-                      "https://bugzilla.redhat.com/2318886",
-                      "https://bugzilla.redhat.com/2318897",
-                      "https://bugzilla.redhat.com/2318900",
-                      "https://bugzilla.redhat.com/2318905",
-                      "https://bugzilla.redhat.com/2318914",
-                      "https://bugzilla.redhat.com/2318922",
-                      "https://bugzilla.redhat.com/2318923",
-                      "https://bugzilla.redhat.com/2318925",
-                      "https://bugzilla.redhat.com/2318926",
-                      "https://bugzilla.redhat.com/2318927",
-                      "https://bugzilla.redhat.com/2331191",
-                      "https://bugzilla.redhat.com/2339218",
-                      "https://bugzilla.redhat.com/2339220",
-                      "https://bugzilla.redhat.com/2339221",
-                      "https://bugzilla.redhat.com/2339226",
-                      "https://bugzilla.redhat.com/2339231",
-                      "https://bugzilla.redhat.com/2339236",
-                      "https://bugzilla.redhat.com/2339238",
-                      "https://bugzilla.redhat.com/2339243",
-                      "https://bugzilla.redhat.com/2339247",
-                      "https://bugzilla.redhat.com/2339252",
-                      "https://bugzilla.redhat.com/2339259",
-                      "https://bugzilla.redhat.com/2339266",
-                      "https://bugzilla.redhat.com/2339270",
-                      "https://bugzilla.redhat.com/2339271",
-                      "https://bugzilla.redhat.com/2339275",
-                      "https://bugzilla.redhat.com/2339277",
-                      "https://bugzilla.redhat.com/2339281",
-                      "https://bugzilla.redhat.com/2339284",
-                      "https://bugzilla.redhat.com/2339291",
-                      "https://bugzilla.redhat.com/2339293",
-                      "https://bugzilla.redhat.com/2339295",
-                      "https://bugzilla.redhat.com/2339299",
-                      "https://bugzilla.redhat.com/2339300",
-                      "https://bugzilla.redhat.com/2339304",
-                      "https://bugzilla.redhat.com/2339305",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2294581",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2294676",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2301888",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2318857",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2318858",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2318870",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2318873",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2318874",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2318876",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2318882",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2318883",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2318884",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2318885",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2318886",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2318897",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2318900",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2318905",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2318914",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2318922",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2318923",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2318925",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2318926",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2318927",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2331191",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2339218",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2339220",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2339221",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2339226",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2339231",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2339236",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2339238",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2339243",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2339247",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2339252",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2339259",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2339266",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2339270",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2339271",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2339275",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2339277",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2339281",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2339284",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2339291",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2339293",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2339295",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2339299",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2339300",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2339304",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2339305",
-                      "https://curl.se/docs/CVE-2024-7264.html",
-                      "https://curl.se/docs/CVE-2024-7264.json",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-11053",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-21193",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-21194",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-21196",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-21197",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-21198",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-21199",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-21201",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-21203",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-21212",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-21213",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-21218",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-21219",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-21230",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-21231",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-21236",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-21237",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-21238",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-21239",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-21241",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-21247",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-37371",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-5535",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-7264",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21490",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21491",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21494",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21497",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21500",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21501",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21503",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21504",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21505",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21518",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21519",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21520",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21521",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21522",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21523",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21525",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21529",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21531",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21534",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21536",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21540",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21543",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21546",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21555",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21559",
-                      "https://errata.almalinux.org/8/ALSA-2025-1673.html",
-                      "https://errata.rockylinux.org/RLSA-2025:1671",
-                      "https://github.com/curl/curl/commit/27959ecce75cdb2809c0bdb3286e60e08fadb519",
-                      "https://hackerone.com/reports/2629968",
-                      "https://linux.oracle.com/cve/CVE-2024-7264.html",
-                      "https://linux.oracle.com/errata/ELSA-2025-1673.html",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2024-7264",
-                      "https://security.netapp.com/advisory/ntap-20240828-0008/",
-                      "https://security.netapp.com/advisory/ntap-20241025-0006/",
-                      "https://security.netapp.com/advisory/ntap-20241025-0010/",
-                      "https://ubuntu.com/security/notices/USN-6944-1",
-                      "https://ubuntu.com/security/notices/USN-6944-2",
-                      "https://www.cve.org/CVERecord?id=CVE-2024-7264",
-                      "https://www.oracle.com/security-alerts/cpuoct2024.html#AppendixMSQL"
-                    ],
-                    "severity": "MEDIUM",
-                    "suppressed": false,
-                    "title": "curl: libcurl: ASN.1 date parser overread"
-                  },
-                  {
-                    "cve": "CVE-2024-8096",
-                    "cvss": {
-                      "redhat": {
-                        "v3score": "6.5",
-                        "v3vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-295"
-                    ],
-                    "description": "When curl is told to use the Certificate Status Request TLS extension, often referred to as OCSP stapling, to verify that the server certificate is valid, it might fail to detect some OCSP problems and instead wrongly consider the response as fine.  If the returned status reports another error than 'revoked' (like for example 'unauthorized') it is not treated as a bad certficate.",
-                    "diffID": "sha256:9664c8c85da49d2cedf85c6b8af0e128318580b95b277b87593a4f75886148af",
-                    "fixedVersions": [
-                      "7.74.0-1.3+deb11u14"
-                    ],
-                    "installedVersion": "7.74.0-1.3+deb11u11",
-                    "packageName": "libcurl4",
-                    "purl": "pkg:deb/debian/libcurl4@7.74.0-1.3%2Bdeb11u11?arch=amd64&distro=debian-11.9",
-                    "references": [
-                      "http://www.openwall.com/lists/oss-security/2024/09/11/1",
-                      "https://access.redhat.com/security/cve/CVE-2024-8096",
-                      "https://curl.se/docs/CVE-2024-8096.html",
-                      "https://curl.se/docs/CVE-2024-8096.json",
-                      "https://hackerone.com/reports/2669852",
-                      "https://lists.debian.org/debian-lts-announce/2024/11/msg00008.html",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2024-8096",
-                      "https://security.netapp.com/advisory/ntap-20241011-0005/",
-                      "https://ubuntu.com/security/notices/USN-7012-1",
-                      "https://www.cve.org/CVERecord?id=CVE-2024-8096"
-                    ],
-                    "severity": "MEDIUM",
-                    "suppressed": false,
-                    "title": "curl: OCSP stapling bypass with GnuTLS"
-                  },
-                  {
-                    "cve": "CVE-2024-9681",
-                    "cvss": {
-                      "nvd": {
-                        "v3score": "6.5",
-                        "v3vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:L"
-                      },
-                      "redhat": {
-                        "v3score": "3.9",
-                        "v3vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:L"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-697"
-                    ],
-                    "description": "When curl is asked to use HSTS, the expiry time for a subdomain might\noverwrite a parent domain's cache entry, making it end sooner or later than\notherwise intended.\n\nThis affects curl using applications that enable HSTS and use URLs with the\ninsecure `HTTP://` scheme and perform transfers with hosts like\n`x.example.com` as well as `example.com` where the first host is a subdomain\nof the second host.\n\n(The HSTS cache either needs to have been populated manually or there needs to\nhave been previous HTTPS accesses done as the cache needs to have entries for\nthe domains involved to trigger this problem.)\n\nWhen `x.example.com` responds with `Strict-Transport-Security:` headers, this\nbug can make the subdomain's expiry timeout *bleed over* and get set for the\nparent domain `example.com` in curl's HSTS cache.\n\nThe result of a triggered bug is that HTTP accesses to `example.com` get\nconverted to HTTPS for a different period of time than what was asked for by\nthe origin server. If `example.com` for example stops supporting HTTPS at its\nexpiry time, curl might then fail to access `http://example.com` until the\n(wrongly set) timeout expires. This bug can also expire the parent's entry\n*earlier*, thus making curl inadvertently switch back to insecure HTTP earlier\nthan otherwise intended.",
-                    "diffID": "sha256:9664c8c85da49d2cedf85c6b8af0e128318580b95b277b87593a4f75886148af",
-                    "installedVersion": "7.74.0-1.3+deb11u11",
-                    "packageName": "libcurl4",
-                    "purl": "pkg:deb/debian/libcurl4@7.74.0-1.3%2Bdeb11u11?arch=amd64&distro=debian-11.9",
-                    "references": [
-                      "http://seclists.org/fulldisclosure/2025/Apr/10",
-                      "http://seclists.org/fulldisclosure/2025/Apr/11",
-                      "http://seclists.org/fulldisclosure/2025/Apr/12",
-                      "http://seclists.org/fulldisclosure/2025/Apr/13",
-                      "http://seclists.org/fulldisclosure/2025/Apr/4",
-                      "http://seclists.org/fulldisclosure/2025/Apr/5",
-                      "http://seclists.org/fulldisclosure/2025/Apr/8",
-                      "http://seclists.org/fulldisclosure/2025/Apr/9",
-                      "http://www.openwall.com/lists/oss-security/2024/11/06/2",
-                      "https://access.redhat.com/security/cve/CVE-2024-9681",
-                      "https://curl.se/docs/CVE-2024-9681.html",
-                      "https://curl.se/docs/CVE-2024-9681.json",
-                      "https://hackerone.com/reports/2764830",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2024-9681",
-                      "https://security.netapp.com/advisory/ntap-20241213-0006/",
-                      "https://ubuntu.com/security/notices/USN-7104-1",
-                      "https://www.cve.org/CVERecord?id=CVE-2024-9681"
-                    ],
-                    "severity": "MEDIUM",
-                    "suppressed": false,
-                    "title": "curl: HSTS subdomain overwrites parent cache entry"
-                  },
-                  {
-                    "cve": "CVE-2021-22922",
-                    "cvss": {
-                      "nvd": {
-                        "v3score": "6.5",
-                        "v3vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N"
-                      },
-                      "redhat": {
-                        "v3score": "6.5",
-                        "v3vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-840",
-                      "CWE-755"
-                    ],
-                    "description": "When curl is instructed to download content using the metalink feature, thecontents is verified against a hash provided in the metalink XML file.The metalink XML file points out to the client how to get the same contentfrom a set of different URLs, potentially hosted by different servers and theclient can then download the file from one or several of them. In a serial orparallel manner.If one of the servers hosting the contents has been breached and the contentsof the specific file on that server is replaced with a modified payload, curlshould detect this when the hash of the file mismatches after a completeddownload. It should remove the contents and instead try getting the contentsfrom another URL. This is not done, and instead such a hash mismatch is onlymentioned in text and the potentially malicious content is kept in the file ondisk.",
-                    "diffID": "sha256:9664c8c85da49d2cedf85c6b8af0e128318580b95b277b87593a4f75886148af",
-                    "installedVersion": "7.74.0-1.3+deb11u11",
-                    "packageName": "libcurl4",
-                    "purl": "pkg:deb/debian/libcurl4@7.74.0-1.3%2Bdeb11u11?arch=amd64&distro=debian-11.9",
-                    "references": [
-                      "https://access.redhat.com/security/cve/CVE-2021-22922",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=1981435",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=1981438",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=1981460",
-                      "https://cert-portal.siemens.com/productcert/pdf/ssa-389290.pdf",
-                      "https://curl.se/docs/CVE-2021-22922.html",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-22922",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-22923",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-22924",
-                      "https://errata.rockylinux.org/RLSA-2021:3582",
-                      "https://hackerone.com/reports/1213175",
-                      "https://linux.oracle.com/cve/CVE-2021-22922.html",
-                      "https://linux.oracle.com/errata/ELSA-2021-3582.html",
-                      "https://lists.apache.org/thread.html/r61db8e7dcb56dc000a5387a88f7a473bacec5ee01b9ff3f55308aacc%40%3Cdev.kafka.apache.org%3E",
-                      "https://lists.apache.org/thread.html/r61db8e7dcb56dc000a5387a88f7a473bacec5ee01b9ff3f55308aacc%40%3Cusers.kafka.apache.org%3E",
-                      "https://lists.apache.org/thread.html/rbf4ce74b0d1fa9810dec50ba3ace0caeea677af7c27a97111c06ccb7%40%3Cdev.kafka.apache.org%3E",
-                      "https://lists.apache.org/thread.html/rbf4ce74b0d1fa9810dec50ba3ace0caeea677af7c27a97111c06ccb7%40%3Cusers.kafka.apache.org%3E",
-                      "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FRUCW2UVNYUDZF72DQLFQR4PJEC6CF7V/",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2021-22922",
-                      "https://security.gentoo.org/glsa/202212-01",
-                      "https://security.netapp.com/advisory/ntap-20210902-0003/",
-                      "https://www.cve.org/CVERecord?id=CVE-2021-22922",
-                      "https://www.oracle.com/security-alerts/cpuoct2021.html"
-                    ],
-                    "severity": "LOW",
-                    "suppressed": false,
-                    "title": "curl: Content not matching hash in Metalink is not being discarded"
-                  },
-                  {
-                    "cve": "CVE-2021-22923",
-                    "cvss": {
-                      "nvd": {
-                        "v3score": "5.3",
-                        "v3vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N"
-                      },
-                      "redhat": {
-                        "v3score": "5.7",
-                        "v3vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-319",
-                      "CWE-522"
-                    ],
-                    "description": "When curl is instructed to get content using the metalink feature, and a user name and password are used to download the metalink XML file, those same credentials are then subsequently passed on to each of the servers from which curl will download or try to download the contents from. Often contrary to the user's expectations and intentions and without telling the user it happened.",
-                    "diffID": "sha256:9664c8c85da49d2cedf85c6b8af0e128318580b95b277b87593a4f75886148af",
-                    "installedVersion": "7.74.0-1.3+deb11u11",
-                    "packageName": "libcurl4",
-                    "purl": "pkg:deb/debian/libcurl4@7.74.0-1.3%2Bdeb11u11?arch=amd64&distro=debian-11.9",
-                    "references": [
-                      "https://access.redhat.com/security/cve/CVE-2021-22923",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=1981435",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=1981438",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=1981460",
-                      "https://cert-portal.siemens.com/productcert/pdf/ssa-389290.pdf",
-                      "https://curl.se/docs/CVE-2021-22923.html",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-22922",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-22923",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-22924",
-                      "https://errata.rockylinux.org/RLSA-2021:3582",
-                      "https://hackerone.com/reports/1213181",
-                      "https://linux.oracle.com/cve/CVE-2021-22923.html",
-                      "https://linux.oracle.com/errata/ELSA-2021-3582.html",
-                      "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FRUCW2UVNYUDZF72DQLFQR4PJEC6CF7V/",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2021-22923",
-                      "https://security.gentoo.org/glsa/202212-01",
-                      "https://security.netapp.com/advisory/ntap-20210902-0003/",
-                      "https://www.cve.org/CVERecord?id=CVE-2021-22923",
-                      "https://www.oracle.com/security-alerts/cpuoct2021.html"
-                    ],
-                    "severity": "LOW",
-                    "suppressed": false,
-                    "title": "curl: Metalink download sends credentials"
-                  },
-                  {
-                    "cve": "CVE-2023-28320",
-                    "cvss": {
-                      "nvd": {
-                        "v3score": "5.9",
-                        "v3vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H"
-                      },
-                      "redhat": {
-                        "v3score": "3.7",
-                        "v3vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-400",
-                      "CWE-362"
-                    ],
-                    "description": "A denial of service vulnerability exists in curl <v8.1.0 in the way libcurl provides several different backends for resolving host names, selected at build time. If it is built to use the synchronous resolver, it allows name resolves to time-out slow operations using `alarm()` and `siglongjmp()`. When doing this, libcurl used a global buffer that was not mutex protected and a multi-threaded application might therefore crash or otherwise misbehave.",
-                    "diffID": "sha256:9664c8c85da49d2cedf85c6b8af0e128318580b95b277b87593a4f75886148af",
-                    "installedVersion": "7.74.0-1.3+deb11u11",
-                    "packageName": "libcurl4",
-                    "purl": "pkg:deb/debian/libcurl4@7.74.0-1.3%2Bdeb11u11?arch=amd64&distro=debian-11.9",
-                    "references": [
-                      "http://seclists.org/fulldisclosure/2023/Jul/47",
-                      "http://seclists.org/fulldisclosure/2023/Jul/48",
-                      "http://seclists.org/fulldisclosure/2023/Jul/52",
-                      "https://access.redhat.com/security/cve/CVE-2023-28320",
-                      "https://curl.se/docs/CVE-2023-28320.html",
-                      "https://hackerone.com/reports/1929597",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2023-28320",
-                      "https://security.gentoo.org/glsa/202310-12",
-                      "https://security.netapp.com/advisory/ntap-20230609-0009/",
-                      "https://support.apple.com/kb/HT213843",
-                      "https://support.apple.com/kb/HT213844",
-                      "https://support.apple.com/kb/HT213845",
-                      "https://www.cve.org/CVERecord?id=CVE-2023-28320"
-                    ],
-                    "severity": "LOW",
-                    "suppressed": false,
-                    "title": "curl: siglongjmp race condition may lead to crash"
-                  },
-                  {
-                    "cve": "CVE-2024-2379",
-                    "cvss": {
-                      "redhat": {
-                        "v3score": "5.4",
-                        "v3vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-295"
-                    ],
-                    "description": "libcurl skips the certificate verification for a QUIC connection under certain conditions, when built to use wolfSSL. If told to use an unknown/bad cipher or curve, the error path accidentally skips the verification and returns OK, thus ignoring any certificate problems.",
-                    "diffID": "sha256:9664c8c85da49d2cedf85c6b8af0e128318580b95b277b87593a4f75886148af",
-                    "installedVersion": "7.74.0-1.3+deb11u11",
-                    "packageName": "libcurl4",
-                    "purl": "pkg:deb/debian/libcurl4@7.74.0-1.3%2Bdeb11u11?arch=amd64&distro=debian-11.9",
-                    "references": [
-                      "http://seclists.org/fulldisclosure/2024/Jul/18",
-                      "http://seclists.org/fulldisclosure/2024/Jul/19",
-                      "http://seclists.org/fulldisclosure/2024/Jul/20",
-                      "http://www.openwall.com/lists/oss-security/2024/03/27/2",
-                      "https://access.redhat.com/security/cve/CVE-2024-2379",
-                      "https://curl.se/docs/CVE-2024-2379.html",
-                      "https://curl.se/docs/CVE-2024-2379.json",
-                      "https://hackerone.com/reports/2410774",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2024-2379",
-                      "https://security.netapp.com/advisory/ntap-20240531-0001/",
-                      "https://support.apple.com/kb/HT214118",
-                      "https://support.apple.com/kb/HT214119",
-                      "https://support.apple.com/kb/HT214120",
-                      "https://www.cve.org/CVERecord?id=CVE-2024-2379"
-                    ],
-                    "severity": "LOW",
-                    "suppressed": false,
-                    "title": "curl: QUIC certificate check bypass with wolfSSL"
-                  },
-                  {
-                    "cve": "CVE-2025-0725",
-                    "cvss": {
-                      "redhat": {
-                        "v3score": "4",
-                        "v3vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-120"
-                    ],
-                    "description": "When libcurl is asked to perform automatic gzip decompression of\ncontent-encoded HTTP responses with the `CURLOPT_ACCEPT_ENCODING` option,\n**using zlib 1.2.0.3 or older**, an attacker-controlled integer overflow would\nmake libcurl perform a buffer overflow.",
-                    "diffID": "sha256:9664c8c85da49d2cedf85c6b8af0e128318580b95b277b87593a4f75886148af",
-                    "installedVersion": "7.74.0-1.3+deb11u11",
-                    "packageName": "libcurl4",
-                    "purl": "pkg:deb/debian/libcurl4@7.74.0-1.3%2Bdeb11u11?arch=amd64&distro=debian-11.9",
-                    "references": [
-                      "http://www.openwall.com/lists/oss-security/2025/02/05/3",
-                      "http://www.openwall.com/lists/oss-security/2025/02/06/2",
-                      "http://www.openwall.com/lists/oss-security/2025/02/06/4",
-                      "https://access.redhat.com/security/cve/CVE-2025-0725",
-                      "https://curl.se/docs/CVE-2025-0725.html",
-                      "https://curl.se/docs/CVE-2025-0725.json",
-                      "https://github.com/curl/curl/commit/76f83f0db23846e254d940ec7",
-                      "https://hackerone.com/reports/2956023",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2025-0725",
-                      "https://security.netapp.com/advisory/ntap-20250306-0009/",
-                      "https://www.cve.org/CVERecord?id=CVE-2025-0725"
-                    ],
-                    "severity": "LOW",
-                    "suppressed": false,
-                    "title": "libcurl: Buffer Overflow in libcurl via zlib Integer Overflow"
-                  },
-                  {
-                    "cve": "CVE-2025-10966",
-                    "cvss": {
-                      "redhat": {
-                        "v3score": "5.9",
-                        "v3vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N"
-                      }
-                    },
-                    "description": "curl's code for managing SSH connections when SFTP was done using the wolfSSH\npowered backend was flawed and missed host verification mechanisms.\n\nThis prevents curl from detecting MITM attackers and more.",
-                    "diffID": "sha256:9664c8c85da49d2cedf85c6b8af0e128318580b95b277b87593a4f75886148af",
-                    "installedVersion": "7.74.0-1.3+deb11u11",
-                    "packageName": "libcurl4",
-                    "purl": "pkg:deb/debian/libcurl4@7.74.0-1.3%2Bdeb11u11?arch=amd64&distro=debian-11.9",
-                    "references": [
-                      "http://www.openwall.com/lists/oss-security/2025/11/05/2",
-                      "https://access.redhat.com/security/cve/CVE-2025-10966",
-                      "https://curl.se/docs/CVE-2025-10966.html",
-                      "https://curl.se/docs/CVE-2025-10966.json",
-                      "https://github.com/curl/curl/commit/b011e3fcfb06d6c027859",
-                      "https://hackerone.com/reports/3355218",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2025-10966",
-                      "https://www.cve.org/CVERecord?id=CVE-2025-10966"
-                    ],
-                    "severity": "LOW",
-                    "suppressed": false,
-                    "title": "curl: Curl missing SFTP host verification with wolfSSH backend"
-                  },
-                  {
-                    "cve": "CVE-2025-14017",
-                    "cvss": {
-                      "redhat": {
-                        "v3score": "4.8",
-                        "v3vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N"
-                      }
-                    },
-                    "description": "When doing multi-threaded LDAPS transfers (LDAP over TLS) with libcurl,\nchanging TLS options in one thread would inadvertently change them globally\nand therefore possibly also affect other concurrently setup transfers.\n\nDisabling certificate verification for a specific transfer could\nunintentionally disable the feature for other threads as well.",
-                    "diffID": "sha256:9664c8c85da49d2cedf85c6b8af0e128318580b95b277b87593a4f75886148af",
-                    "installedVersion": "7.74.0-1.3+deb11u11",
-                    "packageName": "libcurl4",
-                    "purl": "pkg:deb/debian/libcurl4@7.74.0-1.3%2Bdeb11u11?arch=amd64&distro=debian-11.9",
-                    "references": [
-                      "http://www.openwall.com/lists/oss-security/2026/01/07/3",
-                      "https://access.redhat.com/security/cve/CVE-2025-14017",
-                      "https://curl.se/docs/CVE-2025-14017.html",
-                      "https://curl.se/docs/CVE-2025-14017.json",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2025-14017",
-                      "https://www.cve.org/CVERecord?id=CVE-2025-14017"
-                    ],
-                    "severity": "LOW",
-                    "suppressed": false,
-                    "title": "curl: curl: Security bypass due to global TLS option changes in multi-threaded LDAPS transfers"
-                  },
-                  {
-                    "cve": "CVE-2025-14524",
-                    "cwes": [
-                      "CWE-601"
-                    ],
-                    "description": "When an OAuth2 bearer token is used for an HTTP(S) transfer, and that transfer\nperforms a cross-protocol redirect to a second URL that uses an IMAP, LDAP,\nPOP3 or SMTP scheme, curl might wrongly pass on the bearer token to the new\ntarget host.",
-                    "diffID": "sha256:9664c8c85da49d2cedf85c6b8af0e128318580b95b277b87593a4f75886148af",
-                    "installedVersion": "7.74.0-1.3+deb11u11",
-                    "packageName": "libcurl4",
-                    "purl": "pkg:deb/debian/libcurl4@7.74.0-1.3%2Bdeb11u11?arch=amd64&distro=debian-11.9",
-                    "references": [
-                      "http://www.openwall.com/lists/oss-security/2026/01/07/4",
-                      "https://curl.se/docs/CVE-2025-14524.html",
-                      "https://curl.se/docs/CVE-2025-14524.json",
-                      "https://hackerone.com/reports/3459417",
-                      "https://www.cve.org/CVERecord?id=CVE-2025-14524"
-                    ],
-                    "severity": "LOW",
-                    "suppressed": false,
-                    "title": "When an OAuth2 bearer token is used for an HTTP(S) transfer, and that  ..."
-                  },
-                  {
-                    "cve": "CVE-2025-15079",
-                    "cwes": [
-                      "CWE-297"
-                    ],
-                    "description": "When doing SSH-based transfers using either SCP or SFTP, and setting the\nknown_hosts file, libcurl could still mistakenly accept connecting to hosts\n*not present* in the specified file if they were added as recognized in the\nlibssh *global* known_hosts file.",
-                    "diffID": "sha256:9664c8c85da49d2cedf85c6b8af0e128318580b95b277b87593a4f75886148af",
-                    "installedVersion": "7.74.0-1.3+deb11u11",
-                    "packageName": "libcurl4",
-                    "purl": "pkg:deb/debian/libcurl4@7.74.0-1.3%2Bdeb11u11?arch=amd64&distro=debian-11.9",
-                    "references": [
-                      "http://www.openwall.com/lists/oss-security/2026/01/07/6",
-                      "https://curl.se/docs/CVE-2025-15079.html",
-                      "https://curl.se/docs/CVE-2025-15079.json",
-                      "https://hackerone.com/reports/3477116",
-                      "https://www.cve.org/CVERecord?id=CVE-2025-15079"
-                    ],
-                    "severity": "LOW",
-                    "suppressed": false,
-                    "title": "When doing SSH-based transfers using either SCP or SFTP, and setting t ..."
-                  },
-                  {
-                    "cve": "CVE-2025-15224",
-                    "cwes": [
-                      "CWE-287"
-                    ],
-                    "description": "When doing SSH-based transfers using either SCP or SFTP, and asked to do\npublic key authentication, curl would wrongly still ask and authenticate using\na locally running SSH agent.",
-                    "diffID": "sha256:9664c8c85da49d2cedf85c6b8af0e128318580b95b277b87593a4f75886148af",
-                    "installedVersion": "7.74.0-1.3+deb11u11",
-                    "packageName": "libcurl4",
-                    "purl": "pkg:deb/debian/libcurl4@7.74.0-1.3%2Bdeb11u11?arch=amd64&distro=debian-11.9",
-                    "references": [
-                      "http://www.openwall.com/lists/oss-security/2026/01/07/7",
-                      "https://curl.se/docs/CVE-2025-15224.html",
-                      "https://curl.se/docs/CVE-2025-15224.json",
-                      "https://hackerone.com/reports/3480925",
-                      "https://www.cve.org/CVERecord?id=CVE-2025-15224"
-                    ],
-                    "severity": "LOW",
-                    "suppressed": false,
-                    "title": "When doing SSH-based transfers using either SCP or SFTP, and asked to  ..."
-                  },
-                  {
-                    "cve": "DLA-4213-1",
-                    "diffID": "sha256:9664c8c85da49d2cedf85c6b8af0e128318580b95b277b87593a4f75886148af",
-                    "fixedVersions": [
-                      "7.74.0-1.3+deb11u15"
-                    ],
-                    "installedVersion": "7.74.0-1.3+deb11u11",
-                    "packageName": "libcurl4",
-                    "purl": "pkg:deb/debian/libcurl4@7.74.0-1.3%2Bdeb11u11?arch=amd64&distro=debian-11.9",
-                    "severity": "UNKNOWN",
-                    "suppressed": false,
-                    "title": "curl - regression update"
-                  },
-                  {
-                    "cve": "DLA-4432-1",
-                    "diffID": "sha256:9664c8c85da49d2cedf85c6b8af0e128318580b95b277b87593a4f75886148af",
-                    "fixedVersions": [
-                      "7.74.0-1.3+deb11u16"
-                    ],
-                    "installedVersion": "7.74.0-1.3+deb11u11",
-                    "packageName": "libcurl4",
-                    "purl": "pkg:deb/debian/libcurl4@7.74.0-1.3%2Bdeb11u11?arch=amd64&distro=debian-11.9",
-                    "severity": "UNKNOWN",
-                    "suppressed": false,
-                    "title": "curl - security update"
-                  },
-                  {
-                    "cve": "CVE-2019-8457",
-                    "cvss": {
-                      "nvd": {
-                        "v3score": "9.8",
-                        "v3vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"
-                      },
-                      "redhat": {
-                        "v3score": "7.5",
-                        "v3vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-125"
-                    ],
-                    "description": "SQLite3 from 3.6.0 to and including 3.27.2 is vulnerable to heap out-of-bound read in the rtreenode() function when handling invalid rtree tables.",
-                    "diffID": "sha256:420179ad2efafbf953a0c75f68a4c9dfaf38a98643df97d415bce49b179895f7",
-                    "installedVersion": "5.3.28+dfsg1-0.8",
-                    "packageName": "libdb5.3",
-                    "purl": "pkg:deb/debian/libdb5.3@5.3.28%2Bdfsg1-0.8?arch=amd64&distro=debian-11.9",
-                    "references": [
-                      "http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00074.html",
-                      "https://access.redhat.com/security/cve/CVE-2019-8457",
-                      "https://kc.mcafee.com/corporate/index?page=content&id=SB10365",
-                      "https://linux.oracle.com/cve/CVE-2019-8457.html",
-                      "https://linux.oracle.com/errata/ELSA-2020-1810.html",
-                      "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/OPKYSWCOM3CL66RI76TYVIG6TJ263RXH/",
-                      "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/SJPFGA45DI4F5MCF2OAACGH3HQOF4G3M/",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2019-8457",
-                      "https://security.netapp.com/advisory/ntap-20190606-0002/",
-                      "https://ubuntu.com/security/notices/USN-4004-1",
-                      "https://ubuntu.com/security/notices/USN-4004-2",
-                      "https://ubuntu.com/security/notices/USN-4019-1",
-                      "https://ubuntu.com/security/notices/USN-4019-2",
-                      "https://usn.ubuntu.com/4004-1/",
-                      "https://usn.ubuntu.com/4004-2/",
-                      "https://usn.ubuntu.com/4019-1/",
-                      "https://usn.ubuntu.com/4019-2/",
-                      "https://www.cve.org/CVERecord?id=CVE-2019-8457",
-                      "https://www.oracle.com/security-alerts/cpuapr2020.html",
-                      "https://www.oracle.com/security-alerts/cpujan2020.html",
-                      "https://www.oracle.com/security-alerts/cpujul2020.html",
-                      "https://www.oracle.com/technetwork/security-advisory/cpuoct2019-5072832.html",
-                      "https://www.sqlite.org/releaselog/3_28_0.html",
-                      "https://www.sqlite.org/src/info/90acdbfce9c08858"
-                    ],
-                    "severity": "CRITICAL",
-                    "suppressed": false,
-                    "title": "sqlite: heap out-of-bound read in function rtreenode()"
-                  },
-                  {
-                    "cve": "CVE-2024-45491",
-                    "cvss": {
-                      "nvd": {
-                        "v3score": "9.8",
-                        "v3vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"
-                      },
-                      "redhat": {
-                        "v3score": "7.5",
-                        "v3vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-190"
-                    ],
-                    "description": "An issue was discovered in libexpat before 2.6.3. dtdCopy in xmlparse.c can have an integer overflow for nDefaultAtts on 32-bit platforms (where UINT_MAX equals SIZE_MAX).",
-                    "diffID": "sha256:9664c8c85da49d2cedf85c6b8af0e128318580b95b277b87593a4f75886148af",
-                    "fixedVersions": [
-                      "2.2.10-2+deb11u6"
-                    ],
-                    "installedVersion": "2.2.10-2+deb11u5",
-                    "packageName": "libexpat1",
-                    "purl": "pkg:deb/debian/libexpat1@2.2.10-2%2Bdeb11u5?arch=amd64&distro=debian-11.9",
-                    "references": [
-                      "https://access.redhat.com/errata/RHSA-2024:8859",
-                      "https://access.redhat.com/security/cve/CVE-2024-45491",
-                      "https://bugzilla.redhat.com/2308616",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2308615",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2308616",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2308617",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-45490",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-45491",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-45492",
-                      "https://errata.almalinux.org/8/ALSA-2024-8859.html",
-                      "https://errata.rockylinux.org/RLSA-2024:6754",
-                      "https://github.com/libexpat/libexpat/blob/R_2_6_3/expat/Changes",
-                      "https://github.com/libexpat/libexpat/issues/888",
-                      "https://github.com/libexpat/libexpat/pull/891",
-                      "https://linux.oracle.com/cve/CVE-2024-45491.html",
-                      "https://linux.oracle.com/errata/ELSA-2024-8859.html",
-                      "https://lists.debian.org/debian-lts-announce/2024/09/msg00036.html",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2024-45491",
-                      "https://security.netapp.com/advisory/ntap-20241018-0003/",
-                      "https://ubuntu.com/security/notices/USN-7000-1",
-                      "https://ubuntu.com/security/notices/USN-7000-2",
-                      "https://ubuntu.com/security/notices/USN-7001-1",
-                      "https://ubuntu.com/security/notices/USN-7001-2",
-                      "https://www.cve.org/CVERecord?id=CVE-2024-45491"
-                    ],
-                    "severity": "CRITICAL",
-                    "suppressed": false,
-                    "title": "libexpat: Integer Overflow or Wraparound"
-                  },
-                  {
-                    "cve": "CVE-2024-45492",
-                    "cvss": {
-                      "nvd": {
-                        "v3score": "9.8",
-                        "v3vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"
-                      },
-                      "redhat": {
-                        "v3score": "6.2",
-                        "v3vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-190"
-                    ],
-                    "description": "An issue was discovered in libexpat before 2.6.3. nextScaffoldPart in xmlparse.c can have an integer overflow for m_groupSize on 32-bit platforms (where UINT_MAX equals SIZE_MAX).",
-                    "diffID": "sha256:9664c8c85da49d2cedf85c6b8af0e128318580b95b277b87593a4f75886148af",
-                    "fixedVersions": [
-                      "2.2.10-2+deb11u6"
-                    ],
-                    "installedVersion": "2.2.10-2+deb11u5",
-                    "packageName": "libexpat1",
-                    "purl": "pkg:deb/debian/libexpat1@2.2.10-2%2Bdeb11u5?arch=amd64&distro=debian-11.9",
-                    "references": [
-                      "https://access.redhat.com/errata/RHSA-2024:6989",
-                      "https://access.redhat.com/security/cve/CVE-2024-45492",
-                      "https://bugzilla.redhat.com/2308615",
-                      "https://bugzilla.redhat.com/2308616",
-                      "https://bugzilla.redhat.com/2308617",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2308615",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2308616",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2308617",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-45490",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-45491",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-45492",
-                      "https://errata.almalinux.org/8/ALSA-2024-6989.html",
-                      "https://errata.rockylinux.org/RLSA-2024:6754",
-                      "https://github.com/libexpat/libexpat/blob/R_2_6_3/expat/Changes",
-                      "https://github.com/libexpat/libexpat/issues/889",
-                      "https://github.com/libexpat/libexpat/pull/892",
-                      "https://linux.oracle.com/cve/CVE-2024-45492.html",
-                      "https://linux.oracle.com/errata/ELSA-2024-6989.html",
-                      "https://lists.debian.org/debian-lts-announce/2024/09/msg00036.html",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2024-45492",
-                      "https://security.netapp.com/advisory/ntap-20241018-0005/",
-                      "https://ubuntu.com/security/notices/USN-7000-1",
-                      "https://ubuntu.com/security/notices/USN-7000-2",
-                      "https://www.cve.org/CVERecord?id=CVE-2024-45492"
-                    ],
-                    "severity": "CRITICAL",
-                    "suppressed": false,
-                    "title": "libexpat: integer overflow"
-                  },
-                  {
-                    "cve": "CVE-2023-52425",
-                    "cvss": {
-                      "nvd": {
-                        "v3score": "7.5",
-                        "v3vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"
-                      },
-                      "redhat": {
-                        "v3score": "7.5",
-                        "v3vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-400"
-                    ],
-                    "description": "libexpat through 2.5.0 allows a denial of service (resource consumption) because many full reparsings are required in the case of a large token for which multiple buffer fills are needed.",
-                    "diffID": "sha256:9664c8c85da49d2cedf85c6b8af0e128318580b95b277b87593a4f75886148af",
-                    "fixedVersions": [
-                      "2.2.10-2+deb11u6"
-                    ],
-                    "installedVersion": "2.2.10-2+deb11u5",
-                    "packageName": "libexpat1",
-                    "purl": "pkg:deb/debian/libexpat1@2.2.10-2%2Bdeb11u5?arch=amd64&distro=debian-11.9",
-                    "references": [
-                      "http://www.openwall.com/lists/oss-security/2024/03/20/5",
-                      "https://access.redhat.com/errata/RHSA-2024:4259",
-                      "https://access.redhat.com/security/cve/CVE-2023-52425",
-                      "https://bugzilla.redhat.com/2262877",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2262877",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52425",
-                      "https://errata.almalinux.org/8/ALSA-2024-4259.html",
-                      "https://errata.rockylinux.org/RLSA-2024:1615",
-                      "https://github.com/libexpat/libexpat/pull/789",
-                      "https://linux.oracle.com/cve/CVE-2023-52425.html",
-                      "https://linux.oracle.com/errata/ELSA-2024-4259.html",
-                      "https://lists.debian.org/debian-lts-announce/2024/04/msg00006.html",
-                      "https://lists.debian.org/debian-lts-announce/2024/09/msg00036.html",
-                      "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PNRIHC7DVVRAIWFRGV23Y6UZXFBXSQDB/",
-                      "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WNUBSGZFEZOBHJFTAD42SAN4ATW2VEMV/",
-                      "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/PNRIHC7DVVRAIWFRGV23Y6UZXFBXSQDB/",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2023-52425",
-                      "https://security.netapp.com/advisory/ntap-20240614-0003/",
-                      "https://ubuntu.com/security/notices/USN-6694-1",
-                      "https://www.cve.org/CVERecord?id=CVE-2023-52425"
-                    ],
-                    "severity": "HIGH",
-                    "suppressed": false,
-                    "title": "expat: parsing large tokens can trigger a denial of service"
-                  },
-                  {
-                    "cve": "CVE-2024-45490",
-                    "cvss": {
-                      "nvd": {
-                        "v3score": "7.5",
-                        "v3vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"
-                      },
-                      "redhat": {
-                        "v3score": "7.5",
-                        "v3vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-611",
-                      "CWE-190"
-                    ],
-                    "description": "An issue was discovered in libexpat before 2.6.3. xmlparse.c does not reject a negative length for XML_ParseBuffer.",
-                    "diffID": "sha256:9664c8c85da49d2cedf85c6b8af0e128318580b95b277b87593a4f75886148af",
-                    "fixedVersions": [
-                      "2.2.10-2+deb11u6"
-                    ],
-                    "installedVersion": "2.2.10-2+deb11u5",
-                    "packageName": "libexpat1",
-                    "purl": "pkg:deb/debian/libexpat1@2.2.10-2%2Bdeb11u5?arch=amd64&distro=debian-11.9",
-                    "references": [
-                      "http://seclists.org/fulldisclosure/2024/Dec/10",
-                      "http://seclists.org/fulldisclosure/2024/Dec/12",
-                      "http://seclists.org/fulldisclosure/2024/Dec/6",
-                      "http://seclists.org/fulldisclosure/2024/Dec/7",
-                      "http://seclists.org/fulldisclosure/2024/Dec/8",
-                      "https://access.redhat.com/errata/RHSA-2024:6989",
-                      "https://access.redhat.com/security/cve/CVE-2024-45490",
-                      "https://bugzilla.redhat.com/2308615",
-                      "https://bugzilla.redhat.com/2308616",
-                      "https://bugzilla.redhat.com/2308617",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2308615",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2308616",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2308617",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-45490",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-45491",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-45492",
-                      "https://errata.almalinux.org/8/ALSA-2024-6989.html",
-                      "https://errata.rockylinux.org/RLSA-2024:6754",
-                      "https://github.com/libexpat/libexpat/blob/R_2_6_3/expat/Changes",
-                      "https://github.com/libexpat/libexpat/issues/887",
-                      "https://github.com/libexpat/libexpat/pull/890",
-                      "https://linux.oracle.com/cve/CVE-2024-45490.html",
-                      "https://linux.oracle.com/errata/ELSA-2024-6989.html",
-                      "https://lists.debian.org/debian-lts-announce/2024/09/msg00036.html",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2024-45490",
-                      "https://security.netapp.com/advisory/ntap-20241018-0004/",
-                      "https://ubuntu.com/security/notices/USN-7000-1",
-                      "https://ubuntu.com/security/notices/USN-7000-2",
-                      "https://ubuntu.com/security/notices/USN-7001-1",
-                      "https://ubuntu.com/security/notices/USN-7001-2",
-                      "https://www.cve.org/CVERecord?id=CVE-2024-45490"
-                    ],
-                    "severity": "HIGH",
-                    "suppressed": false,
-                    "title": "libexpat: Negative Length Parsing Vulnerability in libexpat"
-                  },
-                  {
-                    "cve": "CVE-2024-8176",
-                    "cvss": {
-                      "redhat": {
-                        "v3score": "7.5",
-                        "v3vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-674"
-                    ],
-                    "description": "A stack overflow vulnerability exists in the libexpat library due to the way it handles recursive entity expansion in XML documents. When parsing an XML document with deeply nested entity references, libexpat can be forced to recurse indefinitely, exhausting the stack space and causing a crash. This issue could lead to denial of service (DoS) or, in some cases, exploitable memory corruption, depending on the environment and library usage.",
-                    "diffID": "sha256:9664c8c85da49d2cedf85c6b8af0e128318580b95b277b87593a4f75886148af",
-                    "installedVersion": "2.2.10-2+deb11u5",
-                    "packageName": "libexpat1",
-                    "purl": "pkg:deb/debian/libexpat1@2.2.10-2%2Bdeb11u5?arch=amd64&distro=debian-11.9",
-                    "references": [
-                      "http://seclists.org/fulldisclosure/2025/May/10",
-                      "http://seclists.org/fulldisclosure/2025/May/11",
-                      "http://seclists.org/fulldisclosure/2025/May/12",
-                      "http://seclists.org/fulldisclosure/2025/May/6",
-                      "http://seclists.org/fulldisclosure/2025/May/7",
-                      "http://seclists.org/fulldisclosure/2025/May/8",
-                      "http://www.openwall.com/lists/oss-security/2025/03/15/1",
-                      "http://www.openwall.com/lists/oss-security/2025/09/24/11",
-                      "https://access.redhat.com/errata/RHSA-2025:13681",
-                      "https://access.redhat.com/errata/RHSA-2025:22033",
-                      "https://access.redhat.com/errata/RHSA-2025:22034",
-                      "https://access.redhat.com/errata/RHSA-2025:22035",
-                      "https://access.redhat.com/errata/RHSA-2025:22607",
-                      "https://access.redhat.com/errata/RHSA-2025:22785",
-                      "https://access.redhat.com/errata/RHSA-2025:22842",
-                      "https://access.redhat.com/errata/RHSA-2025:22871",
-                      "https://access.redhat.com/errata/RHSA-2025:3531",
-                      "https://access.redhat.com/errata/RHSA-2025:3734",
-                      "https://access.redhat.com/errata/RHSA-2025:3913",
-                      "https://access.redhat.com/errata/RHSA-2025:4048",
-                      "https://access.redhat.com/errata/RHSA-2025:4446",
-                      "https://access.redhat.com/errata/RHSA-2025:4447",
-                      "https://access.redhat.com/errata/RHSA-2025:4448",
-                      "https://access.redhat.com/errata/RHSA-2025:4449",
-                      "https://access.redhat.com/errata/RHSA-2025:7444",
-                      "https://access.redhat.com/errata/RHSA-2025:7512",
-                      "https://access.redhat.com/errata/RHSA-2025:8385",
-                      "https://access.redhat.com/security/cve/CVE-2024-8176",
-                      "https://blog.hartwork.org/posts/expat-2-7-0-released/",
-                      "https://bugzilla.redhat.com/2310137",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2310137",
-                      "https://bugzilla.suse.com/show_bug.cgi?id=1239618",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-8176",
-                      "https://errata.almalinux.org/8/ALSA-2025-3913.html",
-                      "https://errata.rockylinux.org/RLSA-2025:7444",
-                      "https://github.com/libexpat/libexpat/blob/R_2_7_0/expat/Changes#L40-L52",
-                      "https://github.com/libexpat/libexpat/issues/893",
-                      "https://gitlab.alpinelinux.org/alpine/aports/-/commit/d068c3ff36fc6f4789988a09c69b434db757db53",
-                      "https://linux.oracle.com/cve/CVE-2024-8176.html",
-                      "https://linux.oracle.com/errata/ELSA-2025-7512.html",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2024-8176",
-                      "https://security-tracker.debian.org/tracker/CVE-2024-8176",
-                      "https://security.netapp.com/advisory/ntap-20250328-0009/",
-                      "https://ubuntu.com/security/CVE-2024-8176",
-                      "https://ubuntu.com/security/notices/USN-7424-1",
-                      "https://www.cve.org/CVERecord?id=CVE-2024-8176",
-                      "https://www.kb.cert.org/vuls/id/760160"
-                    ],
-                    "severity": "HIGH",
-                    "suppressed": false,
-                    "title": "libexpat: expat: Improper Restriction of XML Entity Expansion Depth in libexpat"
-                  },
-                  {
-                    "cve": "CVE-2024-50602",
-                    "cvss": {
-                      "bitnami": {
-                        "v3score": "5.9",
-                        "v3vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H"
-                      },
-                      "redhat": {
-                        "v3score": "5.9",
-                        "v3vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-754"
-                    ],
-                    "description": "An issue was discovered in libexpat before 2.6.4. There is a crash within the XML_ResumeParser function because XML_StopParser can stop/suspend an unstarted parser.",
-                    "diffID": "sha256:9664c8c85da49d2cedf85c6b8af0e128318580b95b277b87593a4f75886148af",
-                    "fixedVersions": [
-                      "2.2.10-2+deb11u7"
-                    ],
-                    "installedVersion": "2.2.10-2+deb11u5",
-                    "packageName": "libexpat1",
-                    "purl": "pkg:deb/debian/libexpat1@2.2.10-2%2Bdeb11u5?arch=amd64&distro=debian-11.9",
-                    "references": [
-                      "https://access.redhat.com/errata/RHSA-2024:9502",
-                      "https://access.redhat.com/security/cve/CVE-2024-50602",
-                      "https://bugzilla.redhat.com/2321987",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2321987",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-50602",
-                      "https://errata.almalinux.org/8/ALSA-2024-9502.html",
-                      "https://errata.rockylinux.org/RLSA-2024:9502",
-                      "https://github.com/libexpat/libexpat/pull/915",
-                      "https://linux.oracle.com/cve/CVE-2024-50602.html",
-                      "https://linux.oracle.com/errata/ELSA-2024-9541.html",
-                      "https://lists.debian.org/debian-lts-announce/2025/04/msg00040.html",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2024-50602",
-                      "https://security.netapp.com/advisory/ntap-20250404-0008/",
-                      "https://ubuntu.com/security/notices/USN-7145-1",
-                      "https://www.cve.org/CVERecord?id=CVE-2024-50602"
-                    ],
-                    "severity": "MEDIUM",
-                    "suppressed": false,
-                    "title": "libexpat: expat: DoS via XML_ResumeParser"
-                  },
-                  {
-                    "cve": "CVE-2025-59375",
-                    "cvss": {
-                      "redhat": {
-                        "v3score": "5.3",
-                        "v3vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-770"
-                    ],
-                    "description": "libexpat in Expat before 2.7.2 allows attackers to trigger large dynamic memory allocations via a small document that is submitted for parsing.",
-                    "diffID": "sha256:9664c8c85da49d2cedf85c6b8af0e128318580b95b277b87593a4f75886148af",
-                    "installedVersion": "2.2.10-2+deb11u5",
-                    "packageName": "libexpat1",
-                    "purl": "pkg:deb/debian/libexpat1@2.2.10-2%2Bdeb11u5?arch=amd64&distro=debian-11.9",
-                    "references": [
-                      "http://www.openwall.com/lists/oss-security/2025/09/16/2",
-                      "https://access.redhat.com/errata/RHSA-2025:21974",
-                      "https://access.redhat.com/security/cve/CVE-2025-59375",
-                      "https://bugzilla.redhat.com/2395108",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2395108",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-59375",
-                      "https://errata.almalinux.org/8/ALSA-2025-21974.html",
-                      "https://errata.rockylinux.org/RLSA-2025:22175",
-                      "https://github.com/libexpat/libexpat/blob/676a4c531ec768732fac215da9730b5f50fbd2bf/expat/Changes#L45-L74",
-                      "https://github.com/libexpat/libexpat/blob/R_2_7_2/expat/Changes",
-                      "https://github.com/libexpat/libexpat/issues/1018",
-                      "https://github.com/libexpat/libexpat/pull/1034",
-                      "https://issues.oss-fuzz.com/issues/439133977",
-                      "https://linux.oracle.com/cve/CVE-2025-59375.html",
-                      "https://linux.oracle.com/errata/ELSA-2025-22175.html",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2025-59375",
-                      "https://www.cve.org/CVERecord?id=CVE-2025-59375"
-                    ],
-                    "severity": "MEDIUM",
-                    "suppressed": false,
-                    "title": "expat: libexpat in Expat allows attackers to trigger large dynamic memory allocations via a small document that is submitted for parsing"
-                  },
-                  {
-                    "cve": "CVE-2025-66382",
-                    "cvss": {
-                      "nvd": {
-                        "v3score": "5.5",
-                        "v3vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H"
-                      },
-                      "redhat": {
-                        "v3score": "2.9",
-                        "v3vector": "CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-407"
-                    ],
-                    "description": "In libexpat through 2.7.3, a crafted file with an approximate size of 2 MiB can lead to dozens of seconds of processing time.",
-                    "diffID": "sha256:9664c8c85da49d2cedf85c6b8af0e128318580b95b277b87593a4f75886148af",
-                    "installedVersion": "2.2.10-2+deb11u5",
-                    "packageName": "libexpat1",
-                    "purl": "pkg:deb/debian/libexpat1@2.2.10-2%2Bdeb11u5?arch=amd64&distro=debian-11.9",
-                    "references": [
-                      "http://www.openwall.com/lists/oss-security/2025/12/02/1",
-                      "https://access.redhat.com/security/cve/CVE-2025-66382",
-                      "https://github.com/libexpat/libexpat/issues/1076",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2025-66382",
-                      "https://www.cve.org/CVERecord?id=CVE-2025-66382"
-                    ],
-                    "severity": "MEDIUM",
-                    "suppressed": false,
-                    "title": "libexpat: libexpat: Denial of service via crafted file processing"
-                  },
-                  {
-                    "cve": "CVE-2026-25210",
-                    "cvss": {
-                      "redhat": {
-                        "v3score": "6.9",
-                        "v3vector": "CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-190"
-                    ],
-                    "description": "In libexpat before 2.7.4, the doContent function does not properly determine the buffer size bufSize because there is no integer overflow check for tag buffer reallocation.",
-                    "diffID": "sha256:9664c8c85da49d2cedf85c6b8af0e128318580b95b277b87593a4f75886148af",
-                    "installedVersion": "2.2.10-2+deb11u5",
-                    "packageName": "libexpat1",
-                    "purl": "pkg:deb/debian/libexpat1@2.2.10-2%2Bdeb11u5?arch=amd64&distro=debian-11.9",
-                    "references": [
-                      "https://access.redhat.com/security/cve/CVE-2026-25210",
-                      "https://github.com/libexpat/libexpat/pull/1075",
-                      "https://github.com/libexpat/libexpat/pull/1075/commits/9c2d990389e6abe2e44527eeaa8b39f16fe859c7",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2026-25210",
-                      "https://www.cve.org/CVERecord?id=CVE-2026-25210"
-                    ],
-                    "severity": "MEDIUM",
-                    "suppressed": false,
-                    "title": "libexpat: libexpat: Information disclosure and data integrity issues due to integer overflow in buffer reallocation"
-                  },
-                  {
-                    "cve": "CVE-2013-0340",
-                    "cvss": {
-                      "nvd": {
-                        "v3score": "0",
-                        "v3vector": ""
-                      },
-                      "redhat": {
-                        "v3score": "0",
-                        "v3vector": ""
-                      }
-                    },
-                    "cwes": [
-                      "CWE-611"
-                    ],
-                    "description": "expat before version 2.4.0 does not properly handle entities expansion unless an application developer uses the XML_SetEntityDeclHandler function, which allows remote attackers to cause a denial of service (resource consumption), send HTTP requests to intranet servers, or read arbitrary files via a crafted XML document, aka an XML External Entity (XXE) issue.  NOTE: it could be argued that because expat already provides the ability to disable external entity expansion, the responsibility for resolving this issue lies with application developers; according to this argument, this entry should be REJECTed, and each affected application would need its own CVE.",
-                    "diffID": "sha256:9664c8c85da49d2cedf85c6b8af0e128318580b95b277b87593a4f75886148af",
-                    "installedVersion": "2.2.10-2+deb11u5",
-                    "packageName": "libexpat1",
-                    "purl": "pkg:deb/debian/libexpat1@2.2.10-2%2Bdeb11u5?arch=amd64&distro=debian-11.9",
-                    "references": [
-                      "http://openwall.com/lists/oss-security/2013/02/22/3",
-                      "http://seclists.org/fulldisclosure/2021/Oct/61",
-                      "http://seclists.org/fulldisclosure/2021/Oct/62",
-                      "http://seclists.org/fulldisclosure/2021/Oct/63",
-                      "http://seclists.org/fulldisclosure/2021/Sep/33",
-                      "http://seclists.org/fulldisclosure/2021/Sep/34",
-                      "http://seclists.org/fulldisclosure/2021/Sep/35",
-                      "http://seclists.org/fulldisclosure/2021/Sep/38",
-                      "http://seclists.org/fulldisclosure/2021/Sep/39",
-                      "http://seclists.org/fulldisclosure/2021/Sep/40",
-                      "http://securitytracker.com/id?1028213",
-                      "http://www.openwall.com/lists/oss-security/2013/04/12/6",
-                      "http://www.openwall.com/lists/oss-security/2021/10/07/4",
-                      "http://www.osvdb.org/90634",
-                      "http://www.securityfocus.com/bid/58233",
-                      "https://access.redhat.com/security/cve/CVE-2013-0340",
-                      "https://github.com/libexpat/libexpat/blob/R_2_4_1/expat/Changes",
-                      "https://lists.apache.org/thread.html/r41eca5f4f09e74436cbb05dec450fc2bef37b5d3e966aa7cc5fada6d%40%3Cannounce.apache.org%3E",
-                      "https://lists.apache.org/thread.html/rfb2c193360436e230b85547e85a41bea0916916f96c501f5b6fc4702%40%3Cusers.openoffice.apache.org%3E",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2013-0340",
-                      "https://security.gentoo.org/glsa/201701-21",
-                      "https://support.apple.com/kb/HT212804",
-                      "https://support.apple.com/kb/HT212805",
-                      "https://support.apple.com/kb/HT212807",
-                      "https://support.apple.com/kb/HT212814",
-                      "https://support.apple.com/kb/HT212815",
-                      "https://support.apple.com/kb/HT212819",
-                      "https://www.cve.org/CVERecord?id=CVE-2013-0340"
-                    ],
-                    "severity": "LOW",
-                    "suppressed": false,
-                    "title": "expat: internal entity expansion"
-                  },
-                  {
-                    "cve": "CVE-2023-52426",
-                    "cvss": {
-                      "nvd": {
-                        "v3score": "5.5",
-                        "v3vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H"
-                      },
-                      "redhat": {
-                        "v3score": "5.5",
-                        "v3vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-776"
-                    ],
-                    "description": "libexpat through 2.5.0 allows recursive XML Entity Expansion if XML_DTD is undefined at compile time.",
-                    "diffID": "sha256:9664c8c85da49d2cedf85c6b8af0e128318580b95b277b87593a4f75886148af",
-                    "installedVersion": "2.2.10-2+deb11u5",
-                    "packageName": "libexpat1",
-                    "purl": "pkg:deb/debian/libexpat1@2.2.10-2%2Bdeb11u5?arch=amd64&distro=debian-11.9",
-                    "references": [
-                      "https://access.redhat.com/security/cve/CVE-2023-52426",
-                      "https://cwe.mitre.org/data/definitions/776.html",
-                      "https://github.com/libexpat/libexpat/commit/0f075ec8ecb5e43f8fdca5182f8cca4703da0404",
-                      "https://github.com/libexpat/libexpat/pull/777",
-                      "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PNRIHC7DVVRAIWFRGV23Y6UZXFBXSQDB/",
-                      "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WNUBSGZFEZOBHJFTAD42SAN4ATW2VEMV/",
-                      "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/PNRIHC7DVVRAIWFRGV23Y6UZXFBXSQDB/",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2023-52426",
-                      "https://security.netapp.com/advisory/ntap-20240307-0005/",
-                      "https://www.cve.org/CVERecord?id=CVE-2023-52426"
-                    ],
-                    "severity": "LOW",
-                    "suppressed": false,
-                    "title": "expat: recursive XML entity expansion vulnerability"
-                  },
-                  {
-                    "cve": "CVE-2024-28757",
-                    "cvss": {
-                      "nvd": {
-                        "v3score": "7.5",
-                        "v3vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"
-                      },
-                      "redhat": {
-                        "v3score": "7.5",
-                        "v3vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-776"
-                    ],
-                    "description": "libexpat through 2.6.1 allows an XML Entity Expansion attack when there is isolated use of external parsers (created via XML_ExternalEntityParserCreate).",
-                    "diffID": "sha256:9664c8c85da49d2cedf85c6b8af0e128318580b95b277b87593a4f75886148af",
-                    "installedVersion": "2.2.10-2+deb11u5",
-                    "packageName": "libexpat1",
-                    "purl": "pkg:deb/debian/libexpat1@2.2.10-2%2Bdeb11u5?arch=amd64&distro=debian-11.9",
-                    "references": [
-                      "http://www.openwall.com/lists/oss-security/2024/03/15/1",
-                      "https://access.redhat.com/errata/RHSA-2024:1530",
-                      "https://access.redhat.com/security/cve/CVE-2024-28757",
-                      "https://bugzilla.redhat.com/2262877",
-                      "https://bugzilla.redhat.com/2268766",
-                      "https://errata.almalinux.org/9/ALSA-2024-1530.html",
-                      "https://github.com/libexpat/libexpat/issues/839",
-                      "https://github.com/libexpat/libexpat/pull/842",
-                      "https://linux.oracle.com/cve/CVE-2024-28757.html",
-                      "https://linux.oracle.com/errata/ELSA-2024-1530.html",
-                      "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FPLC6WDSRDUYS7F7JWAOVOHFNOUQ43DD/",
-                      "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LKJ7V5F6LJCEQJXDBWGT27J7NAP3E3N7/",
-                      "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VK2O34GH43NTHBZBN7G5Y6YKJKPUCTBE/",
-                      "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/FPLC6WDSRDUYS7F7JWAOVOHFNOUQ43DD/",
-                      "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/LKJ7V5F6LJCEQJXDBWGT27J7NAP3E3N7/",
-                      "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/VK2O34GH43NTHBZBN7G5Y6YKJKPUCTBE/",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2024-28757",
-                      "https://security.netapp.com/advisory/ntap-20240322-0001/",
-                      "https://ubuntu.com/security/notices/USN-6694-1",
-                      "https://www.cve.org/CVERecord?id=CVE-2024-28757"
-                    ],
-                    "severity": "LOW",
-                    "suppressed": false,
-                    "title": "expat: XML Entity Expansion"
-                  },
-                  {
-                    "cve": "CVE-2026-24515",
-                    "cvss": {
-                      "nvd": {
-                        "v3score": "2.5",
-                        "v3vector": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L"
-                      },
-                      "redhat": {
-                        "v3score": "2.9",
-                        "v3vector": "CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-476"
-                    ],
-                    "description": "In libexpat before 2.7.4, XML_ExternalEntityParserCreate does not copy unknown encoding handler user data.",
-                    "diffID": "sha256:9664c8c85da49d2cedf85c6b8af0e128318580b95b277b87593a4f75886148af",
-                    "installedVersion": "2.2.10-2+deb11u5",
-                    "packageName": "libexpat1",
-                    "purl": "pkg:deb/debian/libexpat1@2.2.10-2%2Bdeb11u5?arch=amd64&distro=debian-11.9",
-                    "references": [
-                      "https://access.redhat.com/security/cve/CVE-2026-24515",
-                      "https://github.com/libexpat/libexpat/pull/1131",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2026-24515",
-                      "https://www.cve.org/CVERecord?id=CVE-2026-24515"
-                    ],
-                    "severity": "LOW",
-                    "suppressed": false,
-                    "title": "libexpat: libexpat null pointer dereference"
-                  },
-                  {
-                    "cve": "CVE-2022-1304",
-                    "cvss": {
-                      "nvd": {
-                        "v3score": "7.8",
-                        "v3vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H"
-                      },
-                      "redhat": {
-                        "v3score": "5.8",
-                        "v3vector": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:H"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-125",
-                      "CWE-787"
-                    ],
-                    "description": "An out-of-bounds read/write vulnerability was found in e2fsprogs 1.46.5. This issue leads to a segmentation fault and possibly arbitrary code execution via a specially crafted filesystem.",
-                    "diffID": "sha256:420179ad2efafbf953a0c75f68a4c9dfaf38a98643df97d415bce49b179895f7",
-                    "fixedVersions": [
-                      "1.46.2-2+deb11u1"
-                    ],
-                    "installedVersion": "1.46.2-2",
-                    "packageName": "libext2fs2",
-                    "purl": "pkg:deb/debian/libext2fs2@1.46.2-2?arch=amd64&distro=debian-11.9",
-                    "references": [
-                      "https://access.redhat.com/errata/RHSA-2022:7720",
-                      "https://access.redhat.com/security/cve/CVE-2022-1304",
-                      "https://bugzilla.redhat.com/2069726",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2069726",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-1304",
-                      "https://errata.almalinux.org/8/ALSA-2022-7720.html",
-                      "https://errata.rockylinux.org/RLSA-2022:8361",
-                      "https://linux.oracle.com/cve/CVE-2022-1304.html",
-                      "https://linux.oracle.com/errata/ELSA-2024-12731.html",
-                      "https://lists.debian.org/debian-lts-announce/2024/10/msg00001.html",
-                      "https://marc.info/?l=linux-ext4&m=165056234501732&w=2",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2022-1304",
-                      "https://security.netapp.com/advisory/ntap-20241122-0010/",
-                      "https://ubuntu.com/security/notices/USN-5464-1",
-                      "https://www.cve.org/CVERecord?id=CVE-2022-1304"
-                    ],
-                    "severity": "HIGH",
-                    "suppressed": false,
-                    "title": "e2fsprogs: out-of-bounds read/write via crafted filesystem"
-                  },
-                  {
-                    "cve": "CVE-2025-27363",
-                    "cvss": {
-                      "nvd": {
-                        "v3score": "8.1",
-                        "v3vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H"
-                      },
-                      "redhat": {
-                        "v3score": "8.1",
-                        "v3vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-787"
-                    ],
-                    "description": "An out of bounds write exists in FreeType versions 2.13.0 and below (newer versions of FreeType are not vulnerable) when attempting to parse font subglyph structures related to TrueType GX and variable font files. The vulnerable code assigns a signed short value to an unsigned long and then adds a static value causing it to wrap around and allocate too small of a heap buffer. The code then writes up to 6 signed long integers out of bounds relative to this buffer. This may result in arbitrary code execution. This vulnerability may have been exploited in the wild.",
-                    "diffID": "sha256:9664c8c85da49d2cedf85c6b8af0e128318580b95b277b87593a4f75886148af",
-                    "fixedVersions": [
-                      "2.10.4+dfsg-1+deb11u2"
-                    ],
-                    "installedVersion": "2.10.4+dfsg-1+deb11u1",
-                    "packageName": "libfreetype6",
-                    "purl": "pkg:deb/debian/libfreetype6@2.10.4%2Bdfsg-1%2Bdeb11u1?arch=amd64&distro=debian-11.9",
-                    "references": [
-                      "http://www.openwall.com/lists/oss-security/2025/03/13/1",
-                      "http://www.openwall.com/lists/oss-security/2025/03/13/11",
-                      "http://www.openwall.com/lists/oss-security/2025/03/13/12",
-                      "http://www.openwall.com/lists/oss-security/2025/03/13/2",
-                      "http://www.openwall.com/lists/oss-security/2025/03/13/3",
-                      "http://www.openwall.com/lists/oss-security/2025/03/13/8",
-                      "http://www.openwall.com/lists/oss-security/2025/03/14/1",
-                      "http://www.openwall.com/lists/oss-security/2025/03/14/2",
-                      "http://www.openwall.com/lists/oss-security/2025/03/14/3",
-                      "http://www.openwall.com/lists/oss-security/2025/03/14/4",
-                      "http://www.openwall.com/lists/oss-security/2025/05/06/3",
-                      "https://access.redhat.com/errata/RHSA-2025:8292",
-                      "https://access.redhat.com/security/cve/CVE-2025-27363",
-                      "https://bugzilla.redhat.com/2351357",
-                      "https://bugzilla.redhat.com/2357067",
-                      "https://bugzilla.redhat.com/2357069",
-                      "https://bugzilla.redhat.com/2357070",
-                      "https://bugzilla.redhat.com/2359341",
-                      "https://bugzilla.redhat.com/2359342",
-                      "https://bugzilla.redhat.com/2359353",
-                      "https://bugzilla.redhat.com/2359354",
-                      "https://bugzilla.redhat.com/2359355",
-                      "https://bugzilla.redhat.com/2359357",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2351357",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-27363",
-                      "https://errata.almalinux.org/8/ALSA-2025-8292.html",
-                      "https://errata.rockylinux.org/RLSA-2025:3407",
-                      "https://linux.oracle.com/cve/CVE-2025-27363.html",
-                      "https://linux.oracle.com/errata/ELSA-2025-8292.html",
-                      "https://lists.debian.org/debian-lts-announce/2025/03/msg00030.html",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2025-27363",
-                      "https://source.android.com/docs/security/bulletin/2025-05-01",
-                      "https://ubuntu.com/security/notices/USN-7352-1",
-                      "https://ubuntu.com/security/notices/USN-7352-2",
-                      "https://www.cisa.gov/known-exploited-vulnerabilities-catalog",
-                      "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2025-27363",
-                      "https://www.cve.org/CVERecord?id=CVE-2025-27363",
-                      "https://www.facebook.com/security/advisories/cve-2025-27363"
-                    ],
-                    "severity": "HIGH",
-                    "suppressed": false,
-                    "title": "freetype: OOB write when attempting to parse font subglyph structures related to TrueType GX and variable font files"
-                  },
-                  {
-                    "cve": "CVE-2022-31782",
-                    "cvss": {
-                      "nvd": {
-                        "v3score": "7.8",
-                        "v3vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-787"
-                    ],
-                    "description": "ftbench.c in FreeType Demo Programs through 2.12.1 has a heap-based buffer overflow.",
-                    "diffID": "sha256:9664c8c85da49d2cedf85c6b8af0e128318580b95b277b87593a4f75886148af",
-                    "installedVersion": "2.10.4+dfsg-1+deb11u1",
-                    "packageName": "libfreetype6",
-                    "purl": "pkg:deb/debian/libfreetype6@2.10.4%2Bdfsg-1%2Bdeb11u1?arch=amd64&distro=debian-11.9",
-                    "references": [
-                      "https://gitlab.freedesktop.org/freetype/freetype-demos/-/issues/8",
-                      "https://ubuntu.com/security/notices/USN-5528-1",
-                      "https://www.cve.org/CVERecord?id=CVE-2022-31782"
-                    ],
-                    "severity": "LOW",
-                    "suppressed": false,
-                    "title": "ftbench.c in FreeType Demo Programs through 2.12.1 has a heap-based bu ..."
-                  },
-                  {
-                    "cve": "CVE-2023-4039",
-                    "cvss": {
-                      "nvd": {
-                        "v3score": "4.8",
-                        "v3vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-693"
-                    ],
-                    "description": "**DISPUTED**A failure in the -fstack-protector feature in GCC-based toolchains \nthat target AArch64 allows an attacker to exploit an existing buffer \noverflow in dynamically-sized local variables in your application \nwithout this being detected. This stack-protector failure only applies \nto C99-style dynamically-sized local variables or those created using \nalloca(). The stack-protector operates as intended for statically-sized \nlocal variables.\n\nThe default behavior when the stack-protector \ndetects an overflow is to terminate your application, resulting in \ncontrolled loss of availability. An attacker who can exploit a buffer \noverflow without triggering the stack-protector might be able to change \nprogram flow control to cause an uncontrolled loss of availability or to\n go further and affect confidentiality or integrity. NOTE: The GCC project argues that this is a missed hardening bug and not a vulnerability by itself.",
-                    "diffID": "sha256:420179ad2efafbf953a0c75f68a4c9dfaf38a98643df97d415bce49b179895f7",
-                    "installedVersion": "10.2.1-6",
-                    "packageName": "libgcc-s1",
-                    "purl": "pkg:deb/debian/libgcc-s1@10.2.1-6?arch=amd64&distro=debian-11.9",
-                    "references": [
-                      "https://access.redhat.com/security/cve/CVE-2023-4039",
-                      "https://developer.arm.com/Arm%20Security%20Center/GCC%20Stack%20Protector%20Vulnerability%20AArch64",
-                      "https://gcc.gnu.org/git/?p=gcc.git;a=blob_plain;f=SECURITY.txt",
-                      "https://gcc.gnu.org/pipermail/gcc-patches/2023-October/634066.html",
-                      "https://github.com/metaredteam/external-disclosures/security/advisories/GHSA-x7ch-h5rf-w2mf",
-                      "https://inbox.sourceware.org/gcc-patches/46cfa37b-56eb-344d-0745-e0d35393392d@gotplt.org",
-                      "https://linux.oracle.com/cve/CVE-2023-4039.html",
-                      "https://linux.oracle.com/errata/ELSA-2023-28766.html",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2023-4039",
-                      "https://rtx.meta.security/mitigation/2023/09/12/CVE-2023-4039.html",
-                      "https://ubuntu.com/security/notices/USN-7700-1",
-                      "https://www.cve.org/CVERecord?id=CVE-2023-4039"
-                    ],
-                    "severity": "LOW",
-                    "suppressed": false,
-                    "title": "gcc: -fstack-protector fails to guard dynamic stack allocations on ARM64"
-                  },
-                  {
-                    "cve": "CVE-2021-33560",
-                    "cvss": {
-                      "nvd": {
-                        "v3score": "7.5",
-                        "v3vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N"
-                      },
-                      "redhat": {
-                        "v3score": "7.5",
-                        "v3vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-203",
-                      "CWE-325"
-                    ],
-                    "description": "Libgcrypt before 1.8.8 and 1.9.x before 1.9.3 mishandles ElGamal encryption because it lacks exponent blinding to address a side-channel attack against mpi_powm, and the window size is not chosen appropriately. This, for example, affects use of ElGamal in OpenPGP.",
-                    "diffID": "sha256:420179ad2efafbf953a0c75f68a4c9dfaf38a98643df97d415bce49b179895f7",
-                    "installedVersion": "1.8.7-6",
-                    "packageName": "libgcrypt20",
-                    "purl": "pkg:deb/debian/libgcrypt20@1.8.7-6?arch=amd64&distro=debian-11.9",
-                    "references": [
-                      "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2021-33560.json",
-                      "https://access.redhat.com/security/cve/CVE-2021-33560",
-                      "https://dev.gnupg.org/T5305",
-                      "https://dev.gnupg.org/T5328",
-                      "https://dev.gnupg.org/T5466",
-                      "https://dev.gnupg.org/rCe8b7f10be275bcedb5fc05ed4837a89bfd605c61",
-                      "https://eprint.iacr.org/2021/923",
-                      "https://errata.almalinux.org/8/ALSA-2021-4409.html",
-                      "https://linux.oracle.com/cve/CVE-2021-33560.html",
-                      "https://linux.oracle.com/errata/ELSA-2022-9263.html",
-                      "https://lists.debian.org/debian-lts-announce/2021/06/msg00021.html",
-                      "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BKKTOIGFW2SGN3DO2UHHVZ7MJSYN4AAB/",
-                      "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/R7OAPCUGPF3VLA7QAJUQSL255D4ITVTL/",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2021-33560",
-                      "https://security.gentoo.org/glsa/202210-13",
-                      "https://ubuntu.com/security/notices/USN-5080-1",
-                      "https://ubuntu.com/security/notices/USN-5080-2",
-                      "https://www.cve.org/CVERecord?id=CVE-2021-33560",
-                      "https://www.oracle.com/security-alerts/cpuapr2022.html",
-                      "https://www.oracle.com/security-alerts/cpujan2022.html",
-                      "https://www.oracle.com/security-alerts/cpujul2022.html",
-                      "https://www.oracle.com/security-alerts/cpuoct2021.html"
-                    ],
-                    "severity": "HIGH",
-                    "suppressed": false,
-                    "title": "libgcrypt: mishandles ElGamal encryption because it lacks exponent blinding to address a side-channel attack against mpi_powm"
-                  },
-                  {
-                    "cve": "CVE-2018-6829",
-                    "cvss": {
-                      "nvd": {
-                        "v3score": "7.5",
-                        "v3vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N"
-                      },
-                      "redhat": {
-                        "v3score": "5.3",
-                        "v3vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-327"
-                    ],
-                    "description": "cipher/elgamal.c in Libgcrypt through 1.8.2, when used to encrypt messages directly, improperly encodes plaintexts, which allows attackers to obtain sensitive information by reading ciphertext data (i.e., it does not have semantic security in face of a ciphertext-only attack). The Decisional Diffie-Hellman (DDH) assumption does not hold for Libgcrypt's ElGamal implementation.",
-                    "diffID": "sha256:420179ad2efafbf953a0c75f68a4c9dfaf38a98643df97d415bce49b179895f7",
-                    "installedVersion": "1.8.7-6",
-                    "packageName": "libgcrypt20",
-                    "purl": "pkg:deb/debian/libgcrypt20@1.8.7-6?arch=amd64&distro=debian-11.9",
-                    "references": [
-                      "https://access.redhat.com/security/cve/CVE-2018-6829",
-                      "https://github.com/weikengchen/attack-on-libgcrypt-elgamal",
-                      "https://github.com/weikengchen/attack-on-libgcrypt-elgamal/wiki",
-                      "https://lists.gnupg.org/pipermail/gcrypt-devel/2018-February/004394.html",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2018-6829",
-                      "https://www.cve.org/CVERecord?id=CVE-2018-6829",
-                      "https://www.oracle.com/security-alerts/cpujan2020.html"
-                    ],
-                    "severity": "LOW",
-                    "suppressed": false,
-                    "title": "libgcrypt: ElGamal implementation doesn't have semantic security due to incorrectly encoded plaintexts possibly allowing to obtain sensitive information"
-                  },
-                  {
-                    "cve": "CVE-2024-2236",
-                    "cvss": {
-                      "redhat": {
-                        "v3score": "5.9",
-                        "v3vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-208"
-                    ],
-                    "description": "A timing-based side-channel flaw was found in libgcrypt's RSA implementation. This issue may allow a remote attacker to initiate a Bleichenbacher-style attack, which can lead to the decryption of RSA ciphertexts.",
-                    "diffID": "sha256:420179ad2efafbf953a0c75f68a4c9dfaf38a98643df97d415bce49b179895f7",
-                    "installedVersion": "1.8.7-6",
-                    "packageName": "libgcrypt20",
-                    "purl": "pkg:deb/debian/libgcrypt20@1.8.7-6?arch=amd64&distro=debian-11.9",
-                    "references": [
-                      "https://access.redhat.com/errata/RHSA-2024:9404",
-                      "https://access.redhat.com/errata/RHSA-2025:3530",
-                      "https://access.redhat.com/errata/RHSA-2025:3534",
-                      "https://access.redhat.com/security/cve/CVE-2024-2236",
-                      "https://bugzilla.redhat.com/2245218",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2245218",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2268268",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-2236",
-                      "https://dev.gnupg.org/T7136",
-                      "https://errata.almalinux.org/9/ALSA-2024-9404.html",
-                      "https://errata.rockylinux.org/RLSA-2024:9404",
-                      "https://github.com/tomato42/marvin-toolkit/tree/master/example/libgcrypt",
-                      "https://gitlab.com/redhat-crypto/libgcrypt/libgcrypt-mirror/-/merge_requests/17",
-                      "https://linux.oracle.com/cve/CVE-2024-2236.html",
-                      "https://linux.oracle.com/errata/ELSA-2024-9404.html",
-                      "https://lists.gnupg.org/pipermail/gcrypt-devel/2024-March/005607.html",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2024-2236",
-                      "https://www.cve.org/CVERecord?id=CVE-2024-2236"
-                    ],
-                    "severity": "LOW",
-                    "suppressed": false,
-                    "title": "libgcrypt: vulnerable to Marvin Attack"
-                  },
-                  {
-                    "cve": "CVE-2021-40145",
-                    "cvss": {
-                      "nvd": {
-                        "v3score": "7.5",
-                        "v3vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-415"
-                    ],
-                    "description": "gdImageGd2Ptr in gd_gd2.c in the GD Graphics Library (aka LibGD) through 2.3.2 has a double free. NOTE: the vendor's position is \"The GD2 image format is a proprietary image format of libgd. It has to be regarded as being obsolete, and should only be used for development and testing purposes.",
-                    "diffID": "sha256:9664c8c85da49d2cedf85c6b8af0e128318580b95b277b87593a4f75886148af",
-                    "fixedVersions": [
-                      "2.3.0-2+deb11u1"
-                    ],
-                    "installedVersion": "2.3.0-2",
-                    "packageName": "libgd3",
-                    "purl": "pkg:deb/debian/libgd3@2.3.0-2?arch=amd64&distro=debian-11.9",
-                    "references": [
-                      "https://github.com/libgd/libgd/commit/c5fd25ce0e48fd5618a972ca9f5e28d6d62006af",
-                      "https://github.com/libgd/libgd/issues/700",
-                      "https://github.com/libgd/libgd/pull/713",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2021-40145",
-                      "https://ubuntu.com/security/notices/USN-5068-1",
-                      "https://www.cve.org/CVERecord?id=CVE-2021-40145"
-                    ],
-                    "severity": "HIGH",
-                    "suppressed": false,
-                    "title": "gdImageGd2Ptr in gd_gd2.c in the GD Graphics Library (aka LibGD) throu ..."
-                  },
-                  {
-                    "cve": "CVE-2021-38115",
-                    "cvss": {
-                      "nvd": {
-                        "v3score": "6.5",
-                        "v3vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-125"
-                    ],
-                    "description": "read_header_tga in gd_tga.c in the GD Graphics Library (aka LibGD) through 2.3.2 allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted TGA file.",
-                    "diffID": "sha256:9664c8c85da49d2cedf85c6b8af0e128318580b95b277b87593a4f75886148af",
-                    "fixedVersions": [
-                      "2.3.0-2+deb11u1"
-                    ],
-                    "installedVersion": "2.3.0-2",
-                    "packageName": "libgd3",
-                    "purl": "pkg:deb/debian/libgd3@2.3.0-2?arch=amd64&distro=debian-11.9",
-                    "references": [
-                      "https://github.com/libgd/libgd/commit/8b111b2b4a4842179be66db68d84dda91a246032",
-                      "https://github.com/libgd/libgd/issues/697",
-                      "https://github.com/libgd/libgd/pull/711/commits/8b111b2b4a4842179be66db68d84dda91a246032",
-                      "https://lists.debian.org/debian-lts-announce/2024/04/msg00003.html",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2021-38115",
-                      "https://ubuntu.com/security/notices/USN-5068-1",
-                      "https://www.cve.org/CVERecord?id=CVE-2021-38115"
-                    ],
-                    "severity": "MEDIUM",
-                    "suppressed": false,
-                    "title": "read_header_tga in gd_tga.c in the GD Graphics Library (aka LibGD) thr ..."
-                  },
-                  {
-                    "cve": "CVE-2021-40812",
-                    "cvss": {
-                      "nvd": {
-                        "v3score": "6.5",
-                        "v3vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-125"
-                    ],
-                    "description": "The GD Graphics Library (aka LibGD) through 2.3.2 has an out-of-bounds read because of the lack of certain gdGetBuf and gdPutBuf return value checks.",
-                    "diffID": "sha256:9664c8c85da49d2cedf85c6b8af0e128318580b95b277b87593a4f75886148af",
-                    "fixedVersions": [
-                      "2.3.0-2+deb11u1"
-                    ],
-                    "installedVersion": "2.3.0-2",
-                    "packageName": "libgd3",
-                    "purl": "pkg:deb/debian/libgd3@2.3.0-2?arch=amd64&distro=debian-11.9",
-                    "references": [
-                      "https://github.com/libgd/libgd/commit/6f5136821be86e7068fcdf651ae9420b5d42e9a9",
-                      "https://github.com/libgd/libgd/issues/750#issuecomment-914872385",
-                      "https://lists.debian.org/debian-lts-announce/2024/04/msg00003.html",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2021-40812",
-                      "https://ubuntu.com/security/notices/USN-7112-1",
-                      "https://www.cve.org/CVERecord?id=CVE-2021-40812"
-                    ],
-                    "severity": "MEDIUM",
-                    "suppressed": false,
-                    "title": "The GD Graphics Library (aka LibGD) through 2.3.2 has an out-of-bounds ..."
-                  },
-                  {
-                    "cve": "CVE-2024-0553",
-                    "cvss": {
-                      "nvd": {
-                        "v3score": "7.5",
-                        "v3vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N"
-                      },
-                      "redhat": {
-                        "v3score": "7.5",
-                        "v3vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-203"
-                    ],
-                    "description": "A vulnerability was found in GnuTLS. The response times to malformed ciphertexts in RSA-PSK ClientKeyExchange differ from the response times of ciphertexts with correct PKCS#1 v1.5 padding. This issue may allow a remote attacker to perform a timing side-channel attack in the RSA-PSK key exchange, potentially leading to the leakage of sensitive data. CVE-2024-0553 is designated as an incomplete resolution for CVE-2023-5981.",
-                    "diffID": "sha256:420179ad2efafbf953a0c75f68a4c9dfaf38a98643df97d415bce49b179895f7",
-                    "fixedVersions": [
-                      "3.7.1-5+deb11u5"
-                    ],
-                    "installedVersion": "3.7.1-5+deb11u4",
-                    "packageName": "libgnutls30",
-                    "purl": "pkg:deb/debian/libgnutls30@3.7.1-5%2Bdeb11u4?arch=amd64&distro=debian-11.9",
-                    "references": [
-                      "http://www.openwall.com/lists/oss-security/2024/01/19/3",
-                      "https://access.redhat.com/errata/RHSA-2024:0533",
-                      "https://access.redhat.com/errata/RHSA-2024:0627",
-                      "https://access.redhat.com/errata/RHSA-2024:0796",
-                      "https://access.redhat.com/errata/RHSA-2024:1082",
-                      "https://access.redhat.com/errata/RHSA-2024:1108",
-                      "https://access.redhat.com/errata/RHSA-2024:1383",
-                      "https://access.redhat.com/errata/RHSA-2024:2094",
-                      "https://access.redhat.com/security/cve/CVE-2024-0553",
-                      "https://bugzilla.redhat.com/2258412",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2258412",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-0553",
-                      "https://errata.almalinux.org/8/ALSA-2024-0627.html",
-                      "https://errata.rockylinux.org/RLSA-2024:0627",
-                      "https://gitlab.com/gnutls/gnutls/-/issues/1522",
-                      "https://gnutls.org/security-new.html#GNUTLS-SA-2024-01-14",
-                      "https://linux.oracle.com/cve/CVE-2024-0553.html",
-                      "https://linux.oracle.com/errata/ELSA-2024-12336.html",
-                      "https://lists.debian.org/debian-lts-announce/2024/02/msg00010.html",
-                      "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/7ZEIOLORQ7N6WRPFXZSYDL2MC4LP7VFV/",
-                      "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/GNXKVR5YNUEBNHAHM5GSYKBZX4W2HMN2/",
-                      "https://lists.gnupg.org/pipermail/gnutls-help/2024-January/004841.html",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2024-0553",
-                      "https://security.netapp.com/advisory/ntap-20240202-0011/",
-                      "https://ubuntu.com/security/notices/USN-6593-1",
-                      "https://www.cve.org/CVERecord?id=CVE-2024-0553"
-                    ],
-                    "severity": "HIGH",
-                    "suppressed": false,
-                    "title": "gnutls: incomplete fix for CVE-2023-5981"
-                  },
-                  {
-                    "cve": "CVE-2024-0567",
-                    "cvss": {
-                      "nvd": {
-                        "v3score": "7.5",
-                        "v3vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"
-                      },
-                      "redhat": {
-                        "v3score": "7.5",
-                        "v3vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-347"
-                    ],
-                    "description": "A vulnerability was found in GnuTLS, where a cockpit (which uses gnuTLS) rejects a certificate chain with distributed trust. This issue occurs when validating a certificate chain with cockpit-certificate-ensure. This flaw allows an unauthenticated, remote client or attacker to initiate a denial of service attack.",
-                    "diffID": "sha256:420179ad2efafbf953a0c75f68a4c9dfaf38a98643df97d415bce49b179895f7",
-                    "fixedVersions": [
-                      "3.7.1-5+deb11u5"
-                    ],
-                    "installedVersion": "3.7.1-5+deb11u4",
-                    "packageName": "libgnutls30",
-                    "purl": "pkg:deb/debian/libgnutls30@3.7.1-5%2Bdeb11u4?arch=amd64&distro=debian-11.9",
-                    "references": [
-                      "http://www.openwall.com/lists/oss-security/2024/01/19/3",
-                      "https://access.redhat.com/errata/RHSA-2024:0533",
-                      "https://access.redhat.com/errata/RHSA-2024:1082",
-                      "https://access.redhat.com/errata/RHSA-2024:1383",
-                      "https://access.redhat.com/errata/RHSA-2024:2094",
-                      "https://access.redhat.com/security/cve/CVE-2024-0567",
-                      "https://bugzilla.redhat.com/2248445",
-                      "https://bugzilla.redhat.com/2258412",
-                      "https://bugzilla.redhat.com/2258544",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2258544",
-                      "https://errata.almalinux.org/9/ALSA-2024-0533.html",
-                      "https://gitlab.com/gnutls/gnutls/-/issues/1521",
-                      "https://gnutls.org/security-new.html#GNUTLS-SA-2024-01-09",
-                      "https://linux.oracle.com/cve/CVE-2024-0567.html",
-                      "https://linux.oracle.com/errata/ELSA-2024-12336.html",
-                      "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/7ZEIOLORQ7N6WRPFXZSYDL2MC4LP7VFV/",
-                      "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/GNXKVR5YNUEBNHAHM5GSYKBZX4W2HMN2/",
-                      "https://lists.gnupg.org/pipermail/gnutls-help/2024-January/004841.html",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2024-0567",
-                      "https://security.netapp.com/advisory/ntap-20240202-0011/",
-                      "https://ubuntu.com/security/notices/USN-6593-1",
-                      "https://www.cve.org/CVERecord?id=CVE-2024-0567"
-                    ],
-                    "severity": "HIGH",
-                    "suppressed": false,
-                    "title": "gnutls: rejects certificate chain with distributed trust"
-                  },
-                  {
-                    "cve": "CVE-2025-32988",
-                    "cvss": {
-                      "nvd": {
-                        "v3score": "8.2",
-                        "v3vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H"
-                      },
-                      "redhat": {
-                        "v3score": "6.5",
-                        "v3vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-415"
-                    ],
-                    "description": "A flaw was found in GnuTLS. A double-free vulnerability exists in GnuTLS due to incorrect ownership handling in the export logic of Subject Alternative Name (SAN) entries containing an otherName. If the type-id OID is invalid or malformed, GnuTLS will call asn1_delete_structure() on an ASN.1 node it does not own, leading to a double-free condition when the parent function or caller later attempts to free the same structure.\n\nThis vulnerability can be triggered using only public GnuTLS APIs and may result in denial of service or memory corruption, depending on allocator behavior.",
-                    "diffID": "sha256:420179ad2efafbf953a0c75f68a4c9dfaf38a98643df97d415bce49b179895f7",
-                    "fixedVersions": [
-                      "3.7.1-5+deb11u8"
-                    ],
-                    "installedVersion": "3.7.1-5+deb11u4",
-                    "packageName": "libgnutls30",
-                    "purl": "pkg:deb/debian/libgnutls30@3.7.1-5%2Bdeb11u4?arch=amd64&distro=debian-11.9",
-                    "references": [
-                      "http://www.openwall.com/lists/oss-security/2025/07/11/3",
-                      "https://access.redhat.com/errata/RHSA-2025:16115",
-                      "https://access.redhat.com/errata/RHSA-2025:16116",
-                      "https://access.redhat.com/errata/RHSA-2025:17181",
-                      "https://access.redhat.com/errata/RHSA-2025:17348",
-                      "https://access.redhat.com/errata/RHSA-2025:17361",
-                      "https://access.redhat.com/errata/RHSA-2025:17415",
-                      "https://access.redhat.com/errata/RHSA-2025:19088",
-                      "https://access.redhat.com/errata/RHSA-2025:22529",
-                      "https://access.redhat.com/security/cve/CVE-2025-32988",
-                      "https://bugzilla.redhat.com/2359620",
-                      "https://bugzilla.redhat.com/2359622",
-                      "https://bugzilla.redhat.com/2376755",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2359620",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2359621",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2359622",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2376755",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-32988",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-32989",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-32990",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-6395",
-                      "https://errata.almalinux.org/8/ALSA-2025-17415.html",
-                      "https://errata.rockylinux.org/RLSA-2025:16116",
-                      "https://linux.oracle.com/cve/CVE-2025-32988.html",
-                      "https://linux.oracle.com/errata/ELSA-2025-20606.html",
-                      "https://lists.debian.org/debian-lts-announce/2025/08/msg00005.html",
-                      "https://lists.gnupg.org/pipermail/gnutls-help/2025-July/004883.html",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2025-32988",
-                      "https://ubuntu.com/security/notices/USN-7635-1",
-                      "https://ubuntu.com/security/notices/USN-7742-1",
-                      "https://www.cve.org/CVERecord?id=CVE-2025-32988"
-                    ],
-                    "severity": "HIGH",
-                    "suppressed": false,
-                    "title": "gnutls: Vulnerability in GnuTLS otherName SAN export"
-                  },
-                  {
-                    "cve": "CVE-2025-32990",
-                    "cvss": {
-                      "nvd": {
-                        "v3score": "8.2",
-                        "v3vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H"
-                      },
-                      "redhat": {
-                        "v3score": "6.5",
-                        "v3vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-122"
-                    ],
-                    "description": "A heap-buffer-overflow (off-by-one) flaw was found in the GnuTLS software in the template parsing logic within the certtool utility. When it reads certain settings from a template file, it allows an attacker to cause an out-of-bounds (OOB) NULL pointer write, resulting in memory corruption and a denial-of-service (DoS) that could potentially crash the system.",
-                    "diffID": "sha256:420179ad2efafbf953a0c75f68a4c9dfaf38a98643df97d415bce49b179895f7",
-                    "fixedVersions": [
-                      "3.7.1-5+deb11u8"
-                    ],
-                    "installedVersion": "3.7.1-5+deb11u4",
-                    "packageName": "libgnutls30",
-                    "purl": "pkg:deb/debian/libgnutls30@3.7.1-5%2Bdeb11u4?arch=amd64&distro=debian-11.9",
-                    "references": [
-                      "http://www.openwall.com/lists/oss-security/2025/07/11/3",
-                      "https://access.redhat.com/errata/RHSA-2025:16115",
-                      "https://access.redhat.com/errata/RHSA-2025:16116",
-                      "https://access.redhat.com/errata/RHSA-2025:17181",
-                      "https://access.redhat.com/errata/RHSA-2025:17348",
-                      "https://access.redhat.com/errata/RHSA-2025:17361",
-                      "https://access.redhat.com/errata/RHSA-2025:17415",
-                      "https://access.redhat.com/errata/RHSA-2025:19088",
-                      "https://access.redhat.com/errata/RHSA-2025:22529",
-                      "https://access.redhat.com/security/cve/CVE-2025-32990",
-                      "https://bugzilla.redhat.com/2359620",
-                      "https://bugzilla.redhat.com/2359622",
-                      "https://bugzilla.redhat.com/2376755",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2359620",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2359621",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2359622",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2376755",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-32988",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-32989",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-32990",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-6395",
-                      "https://errata.almalinux.org/8/ALSA-2025-17415.html",
-                      "https://errata.rockylinux.org/RLSA-2025:16116",
-                      "https://linux.oracle.com/cve/CVE-2025-32990.html",
-                      "https://linux.oracle.com/errata/ELSA-2025-20606.html",
-                      "https://lists.debian.org/debian-lts-announce/2025/08/msg00005.html",
-                      "https://lists.gnupg.org/pipermail/gnutls-help/2025-July/004883.html",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2025-32990",
-                      "https://ubuntu.com/security/notices/USN-7635-1",
-                      "https://ubuntu.com/security/notices/USN-7742-1",
-                      "https://www.cve.org/CVERecord?id=CVE-2025-32990"
-                    ],
-                    "severity": "HIGH",
-                    "suppressed": false,
-                    "title": "gnutls: Vulnerability in GnuTLS certtool template parsing"
-                  },
-                  {
-                    "cve": "CVE-2024-12243",
-                    "cvss": {
-                      "redhat": {
-                        "v3score": "5.3",
-                        "v3vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-407"
-                    ],
-                    "description": "A flaw was found in GnuTLS, which relies on libtasn1 for ASN.1 data processing. Due to an inefficient algorithm in libtasn1, decoding certain DER-encoded certificate data can take excessive time, leading to increased resource consumption. This flaw allows a remote attacker to send a specially crafted certificate, causing GnuTLS to become unresponsive or slow, resulting in a denial-of-service condition.",
-                    "diffID": "sha256:420179ad2efafbf953a0c75f68a4c9dfaf38a98643df97d415bce49b179895f7",
-                    "fixedVersions": [
-                      "3.7.1-5+deb11u7"
-                    ],
-                    "installedVersion": "3.7.1-5+deb11u4",
-                    "packageName": "libgnutls30",
-                    "purl": "pkg:deb/debian/libgnutls30@3.7.1-5%2Bdeb11u4?arch=amd64&distro=debian-11.9",
-                    "references": [
-                      "https://access.redhat.com/errata/RHSA-2025:17361",
-                      "https://access.redhat.com/errata/RHSA-2025:4051",
-                      "https://access.redhat.com/errata/RHSA-2025:7076",
-                      "https://access.redhat.com/errata/RHSA-2025:8020",
-                      "https://access.redhat.com/errata/RHSA-2025:8385",
-                      "https://access.redhat.com/security/cve/CVE-2024-12243",
-                      "https://bugzilla.redhat.com/2344615",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2344615",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-12243",
-                      "https://errata.almalinux.org/8/ALSA-2025-4051.html",
-                      "https://errata.rockylinux.org/RLSA-2025:7076",
-                      "https://gitlab.com/gnutls/libtasn1/-/issues/52",
-                      "https://linux.oracle.com/cve/CVE-2024-12243.html",
-                      "https://linux.oracle.com/errata/ELSA-2025-7076.html",
-                      "https://lists.debian.org/debian-lts-announce/2025/02/msg00027.html",
-                      "https://lists.gnupg.org/pipermail/gnutls-help/2025-February/004875.html",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2024-12243",
-                      "https://security.netapp.com/advisory/ntap-20250523-0002/",
-                      "https://ubuntu.com/security/notices/USN-7281-1",
-                      "https://www.cve.org/CVERecord?id=CVE-2024-12243",
-                      "https://www.gnutls.org/security-new.html#GNUTLS-SA-2025-02-07"
-                    ],
-                    "severity": "MEDIUM",
-                    "suppressed": false,
-                    "title": "gnutls: GnuTLS Impacted by Inefficient DER Decoding in libtasn1 Leading to Remote DoS"
-                  },
-                  {
-                    "cve": "CVE-2024-28834",
-                    "cvss": {
-                      "redhat": {
-                        "v3score": "5.3",
-                        "v3vector": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-327"
-                    ],
-                    "description": "A flaw was found in GnuTLS. The Minerva attack is a cryptographic vulnerability that exploits deterministic behavior in systems like GnuTLS, leading to side-channel leaks. In specific scenarios, such as when using the GNUTLS_PRIVKEY_FLAG_REPRODUCIBLE flag, it can result in a noticeable step in nonce size from 513 to 512 bits, exposing a potential timing side-channel.",
-                    "diffID": "sha256:420179ad2efafbf953a0c75f68a4c9dfaf38a98643df97d415bce49b179895f7",
-                    "fixedVersions": [
-                      "3.7.1-5+deb11u6"
-                    ],
-                    "installedVersion": "3.7.1-5+deb11u4",
-                    "packageName": "libgnutls30",
-                    "purl": "pkg:deb/debian/libgnutls30@3.7.1-5%2Bdeb11u4?arch=amd64&distro=debian-11.9",
-                    "references": [
-                      "http://www.openwall.com/lists/oss-security/2024/03/22/1",
-                      "http://www.openwall.com/lists/oss-security/2024/03/22/2",
-                      "https://access.redhat.com/errata/RHSA-2024:1784",
-                      "https://access.redhat.com/errata/RHSA-2024:1879",
-                      "https://access.redhat.com/errata/RHSA-2024:1997",
-                      "https://access.redhat.com/errata/RHSA-2024:2044",
-                      "https://access.redhat.com/errata/RHSA-2024:2570",
-                      "https://access.redhat.com/errata/RHSA-2024:2889",
-                      "https://access.redhat.com/security/cve/CVE-2024-28834",
-                      "https://bugzilla.redhat.com/2269228",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2269084",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2269228",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-28834",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-28835",
-                      "https://errata.almalinux.org/8/ALSA-2024-1784.html",
-                      "https://errata.rockylinux.org/RLSA-2024:2570",
-                      "https://linux.oracle.com/cve/CVE-2024-28834.html",
-                      "https://linux.oracle.com/errata/ELSA-2024-2570.html",
-                      "https://lists.debian.org/debian-lts-announce/2024/09/msg00019.html",
-                      "https://lists.gnupg.org/pipermail/gnutls-help/2024-March/004845.html",
-                      "https://minerva.crocs.fi.muni.cz/",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2024-28834",
-                      "https://people.redhat.com/~hkario/marvin/",
-                      "https://security.netapp.com/advisory/ntap-20240524-0004/",
-                      "https://ubuntu.com/security/notices/USN-6733-1",
-                      "https://ubuntu.com/security/notices/USN-6733-2",
-                      "https://www.cve.org/CVERecord?id=CVE-2024-28834",
-                      "https://www.gnutls.org/security-new.html#GNUTLS-SA-2023-12-04"
-                    ],
-                    "severity": "MEDIUM",
-                    "suppressed": false,
-                    "title": "gnutls: vulnerable to Minerva side-channel information leak"
-                  },
-                  {
-                    "cve": "CVE-2024-28835",
-                    "cvss": {
-                      "redhat": {
-                        "v3score": "5",
-                        "v3vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:H"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-248"
-                    ],
-                    "description": "A flaw has been discovered in GnuTLS where an application crash can be induced when attempting to verify a specially crafted .pem bundle using the \"certtool --verify-chain\" command.",
-                    "diffID": "sha256:420179ad2efafbf953a0c75f68a4c9dfaf38a98643df97d415bce49b179895f7",
-                    "fixedVersions": [
-                      "3.7.1-5+deb11u6"
-                    ],
-                    "installedVersion": "3.7.1-5+deb11u4",
-                    "packageName": "libgnutls30",
-                    "purl": "pkg:deb/debian/libgnutls30@3.7.1-5%2Bdeb11u4?arch=amd64&distro=debian-11.9",
-                    "references": [
-                      "http://www.openwall.com/lists/oss-security/2024/03/22/1",
-                      "http://www.openwall.com/lists/oss-security/2024/03/22/2",
-                      "https://access.redhat.com/errata/RHSA-2024:1879",
-                      "https://access.redhat.com/errata/RHSA-2024:2570",
-                      "https://access.redhat.com/errata/RHSA-2024:2889",
-                      "https://access.redhat.com/security/cve/CVE-2024-28835",
-                      "https://bugzilla.redhat.com/2269084",
-                      "https://bugzilla.redhat.com/2269228",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2269084",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-28834",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-28835",
-                      "https://errata.almalinux.org/9/ALSA-2024-2570.html",
-                      "https://errata.rockylinux.org/RLSA-2024:2570",
-                      "https://linux.oracle.com/cve/CVE-2024-28835.html",
-                      "https://linux.oracle.com/errata/ELSA-2024-2570.html",
-                      "https://lists.debian.org/debian-lts-announce/2024/09/msg00019.html",
-                      "https://lists.gnupg.org/pipermail/gnutls-help/2024-March/004845.html",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2024-28835",
-                      "https://security.netapp.com/advisory/ntap-20241122-0009/",
-                      "https://ubuntu.com/security/notices/USN-6733-1",
-                      "https://ubuntu.com/security/notices/USN-6733-2",
-                      "https://www.cve.org/CVERecord?id=CVE-2024-28835",
-                      "https://www.gnutls.org/security-new.html#GNUTLS-SA-2024-01-23"
-                    ],
-                    "severity": "MEDIUM",
-                    "suppressed": false,
-                    "title": "gnutls: potential crash during chain building/verification"
-                  },
-                  {
-                    "cve": "CVE-2025-6395",
-                    "cvss": {
-                      "redhat": {
-                        "v3score": "6.5",
-                        "v3vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-476"
-                    ],
-                    "description": "A NULL pointer dereference flaw was found in the GnuTLS software in _gnutls_figure_common_ciphersuite().",
-                    "diffID": "sha256:420179ad2efafbf953a0c75f68a4c9dfaf38a98643df97d415bce49b179895f7",
-                    "fixedVersions": [
-                      "3.7.1-5+deb11u8"
-                    ],
-                    "installedVersion": "3.7.1-5+deb11u4",
-                    "packageName": "libgnutls30",
-                    "purl": "pkg:deb/debian/libgnutls30@3.7.1-5%2Bdeb11u4?arch=amd64&distro=debian-11.9",
-                    "references": [
-                      "http://www.openwall.com/lists/oss-security/2025/07/11/3",
-                      "https://access.redhat.com/errata/RHSA-2025:16115",
-                      "https://access.redhat.com/errata/RHSA-2025:16116",
-                      "https://access.redhat.com/errata/RHSA-2025:17181",
-                      "https://access.redhat.com/errata/RHSA-2025:17348",
-                      "https://access.redhat.com/errata/RHSA-2025:17361",
-                      "https://access.redhat.com/errata/RHSA-2025:17415",
-                      "https://access.redhat.com/errata/RHSA-2025:19088",
-                      "https://access.redhat.com/errata/RHSA-2025:22529",
-                      "https://access.redhat.com/security/cve/CVE-2025-6395",
-                      "https://bugzilla.redhat.com/2359620",
-                      "https://bugzilla.redhat.com/2359622",
-                      "https://bugzilla.redhat.com/2376755",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2359620",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2359621",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2359622",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2376755",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-32988",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-32989",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-32990",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-6395",
-                      "https://errata.almalinux.org/8/ALSA-2025-17415.html",
-                      "https://errata.rockylinux.org/RLSA-2025:16116",
-                      "https://linux.oracle.com/cve/CVE-2025-6395.html",
-                      "https://linux.oracle.com/errata/ELSA-2025-20606.html",
-                      "https://lists.debian.org/debian-lts-announce/2025/08/msg00005.html",
-                      "https://lists.gnupg.org/pipermail/gnutls-help/2025-July/004883.html",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2025-6395",
-                      "https://ubuntu.com/security/notices/USN-7635-1",
-                      "https://ubuntu.com/security/notices/USN-7742-1",
-                      "https://www.cve.org/CVERecord?id=CVE-2025-6395"
-                    ],
-                    "severity": "MEDIUM",
-                    "suppressed": false,
-                    "title": "gnutls: NULL pointer dereference in _gnutls_figure_common_ciphersuite()"
-                  },
-                  {
-                    "cve": "CVE-2025-9820",
-                    "cvss": {
-                      "redhat": {
-                        "v3score": "4",
-                        "v3vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-121"
-                    ],
-                    "description": "A flaw was found in the GnuTLS library, specifically in the gnutls_pkcs11_token_init() function that handles PKCS#11 token initialization. When a token label longer than expected is processed, the function writes past the end of a fixed-size stack buffer. This programming error can cause the application using GnuTLS to crash or, in certain conditions, be exploited for code execution. As a result, systems or applications relying on GnuTLS may be vulnerable to a denial of service or local privilege escalation attacks.",
-                    "diffID": "sha256:420179ad2efafbf953a0c75f68a4c9dfaf38a98643df97d415bce49b179895f7",
-                    "installedVersion": "3.7.1-5+deb11u4",
-                    "packageName": "libgnutls30",
-                    "purl": "pkg:deb/debian/libgnutls30@3.7.1-5%2Bdeb11u4?arch=amd64&distro=debian-11.9",
-                    "references": [
-                      "http://www.openwall.com/lists/oss-security/2025/11/20/2",
-                      "https://access.redhat.com/security/cve/CVE-2025-9820",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2392528",
-                      "https://gitlab.com/gnutls/gnutls/-/commit/1d56f96f6ab5034d677136b9d50b5a75dff0faf5",
-                      "https://gitlab.com/gnutls/gnutls/-/issues/1732",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2025-9820",
-                      "https://www.cve.org/CVERecord?id=CVE-2025-9820",
-                      "https://www.gnutls.org/security-new.html#GNUTLS-SA-2025-11-18"
-                    ],
-                    "severity": "MEDIUM",
-                    "suppressed": false,
-                    "title": "gnutls: Stack-based Buffer Overflow in gnutls_pkcs11_token_init() Function"
-                  },
-                  {
-                    "cve": "CVE-2011-3389",
-                    "cvss": {
-                      "nvd": {
-                        "v3score": "0",
-                        "v3vector": ""
-                      },
-                      "redhat": {
-                        "v3score": "0",
-                        "v3vector": ""
-                      }
-                    },
-                    "cwes": [
-                      "CWE-326"
-                    ],
-                    "description": "The SSL protocol, as used in certain configurations in Microsoft Windows and Microsoft Internet Explorer, Mozilla Firefox, Google Chrome, Opera, and other products, encrypts data by using CBC mode with chained initialization vectors, which allows man-in-the-middle attackers to obtain plaintext HTTP headers via a blockwise chosen-boundary attack (BCBA) on an HTTPS session, in conjunction with JavaScript code that uses (1) the HTML5 WebSocket API, (2) the Java URLConnection API, or (3) the Silverlight WebClient API, aka a \"BEAST\" attack.",
-                    "diffID": "sha256:420179ad2efafbf953a0c75f68a4c9dfaf38a98643df97d415bce49b179895f7",
-                    "installedVersion": "3.7.1-5+deb11u4",
-                    "packageName": "libgnutls30",
-                    "purl": "pkg:deb/debian/libgnutls30@3.7.1-5%2Bdeb11u4?arch=amd64&distro=debian-11.9",
-                    "references": [
-                      "http://arcticdog.wordpress.com/2012/08/29/beast-openssl-and-apache/",
-                      "http://blog.mozilla.com/security/2011/09/27/attack-against-tls-protected-communications/",
-                      "http://blogs.technet.com/b/msrc/archive/2011/09/26/microsoft-releases-security-advisory-2588513.aspx",
-                      "http://blogs.technet.com/b/srd/archive/2011/09/26/is-ssl-broken-more-about-security-advisory-2588513.aspx",
-                      "http://curl.haxx.se/docs/adv_20120124B.html",
-                      "http://downloads.asterisk.org/pub/security/AST-2016-001.html",
-                      "http://ekoparty.org/2011/juliano-rizzo.php",
-                      "http://eprint.iacr.org/2004/111",
-                      "http://eprint.iacr.org/2006/136",
-                      "http://googlechromereleases.blogspot.com/2011/10/chrome-stable-release.html",
-                      "http://isc.sans.edu/diary/SSL+TLS+part+3+/11635",
-                      "http://lists.apple.com/archives/Security-announce/2011//Oct/msg00001.html",
-                      "http://lists.apple.com/archives/Security-announce/2011//Oct/msg00002.html",
-                      "http://lists.apple.com/archives/security-announce/2012/Feb/msg00000.html",
-                      "http://lists.apple.com/archives/security-announce/2012/Jul/msg00001.html",
-                      "http://lists.apple.com/archives/security-announce/2012/May/msg00001.html",
-                      "http://lists.apple.com/archives/security-announce/2012/Sep/msg00004.html",
-                      "http://lists.apple.com/archives/security-announce/2013/Oct/msg00004.html",
-                      "http://lists.opensuse.org/opensuse-security-announce/2012-01/msg00049.html",
-                      "http://lists.opensuse.org/opensuse-security-announce/2012-01/msg00051.html",
-                      "http://lists.opensuse.org/opensuse-security-announce/2012-05/msg00009.html",
-                      "http://lists.opensuse.org/opensuse-security-announce/2020-01/msg00040.html",
-                      "http://marc.info/?l=bugtraq&m=132750579901589&w=2",
-                      "http://marc.info/?l=bugtraq&m=132872385320240&w=2",
-                      "http://marc.info/?l=bugtraq&m=133365109612558&w=2",
-                      "http://marc.info/?l=bugtraq&m=133728004526190&w=2",
-                      "http://marc.info/?l=bugtraq&m=134254866602253&w=2",
-                      "http://marc.info/?l=bugtraq&m=134254957702612&w=2",
-                      "http://my.opera.com/securitygroup/blog/2011/09/28/the-beast-ssl-tls-issue",
-                      "http://osvdb.org/74829",
-                      "http://rhn.redhat.com/errata/RHSA-2012-0508.html",
-                      "http://rhn.redhat.com/errata/RHSA-2013-1455.html",
-                      "http://secunia.com/advisories/45791",
-                      "http://secunia.com/advisories/47998",
-                      "http://secunia.com/advisories/48256",
-                      "http://secunia.com/advisories/48692",
-                      "http://secunia.com/advisories/48915",
-                      "http://secunia.com/advisories/48948",
-                      "http://secunia.com/advisories/49198",
-                      "http://secunia.com/advisories/55322",
-                      "http://secunia.com/advisories/55350",
-                      "http://secunia.com/advisories/55351",
-                      "http://security.gentoo.org/glsa/glsa-201203-02.xml",
-                      "http://security.gentoo.org/glsa/glsa-201406-32.xml",
-                      "http://support.apple.com/kb/HT4999",
-                      "http://support.apple.com/kb/HT5001",
-                      "http://support.apple.com/kb/HT5130",
-                      "http://support.apple.com/kb/HT5281",
-                      "http://support.apple.com/kb/HT5501",
-                      "http://support.apple.com/kb/HT6150",
-                      "http://technet.microsoft.com/security/advisory/2588513",
-                      "http://vnhacker.blogspot.com/2011/09/beast.html",
-                      "http://www.apcmedia.com/salestools/SJHN-7RKGNM/SJHN-7RKGNM_R4_EN.pdf",
-                      "http://www.debian.org/security/2012/dsa-2398",
-                      "http://www.educatedguesswork.org/2011/09/security_impact_of_the_rizzodu.html",
-                      "http://www.ibm.com/developerworks/java/jdk/alerts/",
-                      "http://www.imperialviolet.org/2011/09/23/chromeandbeast.html",
-                      "http://www.insecure.cl/Beast-SSL.rar",
-                      "http://www.kb.cert.org/vuls/id/864643",
-                      "http://www.mandriva.com/security/advisories?name=MDVSA-2012:058",
-                      "http://www.opera.com/docs/changelogs/mac/1151/",
-                      "http://www.opera.com/docs/changelogs/mac/1160/",
-                      "http://www.opera.com/docs/changelogs/unix/1151/",
-                      "http://www.opera.com/docs/changelogs/unix/1160/",
-                      "http://www.opera.com/docs/changelogs/windows/1151/",
-                      "http://www.opera.com/docs/changelogs/windows/1160/",
-                      "http://www.opera.com/support/kb/view/1004/",
-                      "http://www.oracle.com/technetwork/topics/security/cpujan2015-1972971.html",
-                      "http://www.oracle.com/technetwork/topics/security/cpujul2015-2367936.html",
-                      "http://www.oracle.com/technetwork/topics/security/javacpuoct2011-443431.html",
-                      "http://www.redhat.com/support/errata/RHSA-2011-1384.html",
-                      "http://www.redhat.com/support/errata/RHSA-2012-0006.html",
-                      "http://www.securityfocus.com/bid/49388",
-                      "http://www.securityfocus.com/bid/49778",
-                      "http://www.securitytracker.com/id/1029190",
-                      "http://www.securitytracker.com/id?1025997",
-                      "http://www.securitytracker.com/id?1026103",
-                      "http://www.securitytracker.com/id?1026704",
-                      "http://www.ubuntu.com/usn/USN-1263-1",
-                      "http://www.us-cert.gov/cas/techalerts/TA12-010A.html",
-                      "https://access.redhat.com/security/cve/CVE-2011-3389",
-                      "https://blogs.oracle.com/sunsecurity/entry/multiple_vulnerabilities_in_fetchmail",
-                      "https://bugzilla.novell.com/show_bug.cgi?id=719047",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=737506",
-                      "https://cert-portal.siemens.com/productcert/pdf/ssa-556833.pdf",
-                      "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2012/ms12-006",
-                      "https://h20564.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c03839862",
-                      "https://hermes.opensuse.org/messages/13154861",
-                      "https://hermes.opensuse.org/messages/13155432",
-                      "https://ics-cert.us-cert.gov/advisories/ICSMA-18-058-02",
-                      "https://linux.oracle.com/cve/CVE-2011-3389.html",
-                      "https://linux.oracle.com/errata/ELSA-2011-1380.html",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2011-3389",
-                      "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14752",
-                      "https://ubuntu.com/security/notices/USN-1263-1",
-                      "https://www.cve.org/CVERecord?id=CVE-2011-3389"
-                    ],
-                    "severity": "LOW",
-                    "suppressed": false,
-                    "title": "HTTPS: block-wise chosen-plaintext attack against SSL/TLS (BEAST)"
-                  },
-                  {
-                    "cve": "CVE-2024-37371",
-                    "cvss": {
-                      "nvd": {
-                        "v3score": "9.1",
-                        "v3vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H"
-                      },
-                      "redhat": {
-                        "v3score": "6.5",
-                        "v3vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-125"
-                    ],
-                    "description": "In MIT Kerberos 5 (aka krb5) before 1.21.3, an attacker can cause invalid memory reads during GSS message token handling by sending message tokens with invalid length fields.",
-                    "diffID": "sha256:420179ad2efafbf953a0c75f68a4c9dfaf38a98643df97d415bce49b179895f7",
-                    "fixedVersions": [
-                      "1.18.3-6+deb11u5"
-                    ],
-                    "installedVersion": "1.18.3-6+deb11u4",
-                    "packageName": "libgssapi-krb5-2",
-                    "purl": "pkg:deb/debian/libgssapi-krb5-2@1.18.3-6%2Bdeb11u4?arch=amd64&distro=debian-11.9",
-                    "references": [
-                      "https://access.redhat.com/errata/RHSA-2025:1673",
-                      "https://access.redhat.com/security/cve/CVE-2024-37371",
-                      "https://bugzilla.redhat.com/2294581",
-                      "https://bugzilla.redhat.com/2294676",
-                      "https://bugzilla.redhat.com/2301888",
-                      "https://bugzilla.redhat.com/2318857",
-                      "https://bugzilla.redhat.com/2318858",
-                      "https://bugzilla.redhat.com/2318870",
-                      "https://bugzilla.redhat.com/2318873",
-                      "https://bugzilla.redhat.com/2318874",
-                      "https://bugzilla.redhat.com/2318876",
-                      "https://bugzilla.redhat.com/2318882",
-                      "https://bugzilla.redhat.com/2318883",
-                      "https://bugzilla.redhat.com/2318884",
-                      "https://bugzilla.redhat.com/2318885",
-                      "https://bugzilla.redhat.com/2318886",
-                      "https://bugzilla.redhat.com/2318897",
-                      "https://bugzilla.redhat.com/2318900",
-                      "https://bugzilla.redhat.com/2318905",
-                      "https://bugzilla.redhat.com/2318914",
-                      "https://bugzilla.redhat.com/2318922",
-                      "https://bugzilla.redhat.com/2318923",
-                      "https://bugzilla.redhat.com/2318925",
-                      "https://bugzilla.redhat.com/2318926",
-                      "https://bugzilla.redhat.com/2318927",
-                      "https://bugzilla.redhat.com/2331191",
-                      "https://bugzilla.redhat.com/2339218",
-                      "https://bugzilla.redhat.com/2339220",
-                      "https://bugzilla.redhat.com/2339221",
-                      "https://bugzilla.redhat.com/2339226",
-                      "https://bugzilla.redhat.com/2339231",
-                      "https://bugzilla.redhat.com/2339236",
-                      "https://bugzilla.redhat.com/2339238",
-                      "https://bugzilla.redhat.com/2339243",
-                      "https://bugzilla.redhat.com/2339247",
-                      "https://bugzilla.redhat.com/2339252",
-                      "https://bugzilla.redhat.com/2339259",
-                      "https://bugzilla.redhat.com/2339266",
-                      "https://bugzilla.redhat.com/2339270",
-                      "https://bugzilla.redhat.com/2339271",
-                      "https://bugzilla.redhat.com/2339275",
-                      "https://bugzilla.redhat.com/2339277",
-                      "https://bugzilla.redhat.com/2339281",
-                      "https://bugzilla.redhat.com/2339284",
-                      "https://bugzilla.redhat.com/2339291",
-                      "https://bugzilla.redhat.com/2339293",
-                      "https://bugzilla.redhat.com/2339295",
-                      "https://bugzilla.redhat.com/2339299",
-                      "https://bugzilla.redhat.com/2339300",
-                      "https://bugzilla.redhat.com/2339304",
-                      "https://bugzilla.redhat.com/2339305",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2294581",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2294676",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2301888",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2318857",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2318858",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2318870",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2318873",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2318874",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2318876",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2318882",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2318883",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2318884",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2318885",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2318886",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2318897",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2318900",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2318905",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2318914",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2318922",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2318923",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2318925",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2318926",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2318927",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2331191",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2339218",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2339220",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2339221",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2339226",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2339231",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2339236",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2339238",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2339243",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2339247",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2339252",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2339259",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2339266",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2339270",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2339271",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2339275",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2339277",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2339281",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2339284",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2339291",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2339293",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2339295",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2339299",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2339300",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2339304",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2339305",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-11053",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-21193",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-21194",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-21196",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-21197",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-21198",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-21199",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-21201",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-21203",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-21212",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-21213",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-21218",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-21219",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-21230",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-21231",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-21236",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-21237",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-21238",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-21239",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-21241",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-21247",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-37371",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-5535",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-7264",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21490",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21491",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21494",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21497",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21500",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21501",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21503",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21504",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21505",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21518",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21519",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21520",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21521",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21522",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21523",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21525",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21529",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21531",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21534",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21536",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21540",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21543",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21546",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21555",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21559",
-                      "https://errata.almalinux.org/8/ALSA-2025-1673.html",
-                      "https://errata.rockylinux.org/RLSA-2025:1671",
-                      "https://github.com/krb5/krb5/commit/55fbf435edbe2e92dd8101669b1ce7144bc96fef",
-                      "https://linux.oracle.com/cve/CVE-2024-37371.html",
-                      "https://linux.oracle.com/errata/ELSA-2025-1673.html",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2024-37371",
-                      "https://security.netapp.com/advisory/ntap-20241108-0009/",
-                      "https://security.netapp.com/advisory/ntap-20250124-0010/",
-                      "https://ubuntu.com/security/notices/USN-6947-1",
-                      "https://web.mit.edu/kerberos/www/advisories/",
-                      "https://web.mit.edu/kerberos/www/krb5-1.21/",
-                      "https://www.cve.org/CVERecord?id=CVE-2024-37371",
-                      "https://www.oracle.com/security-alerts/cpujan2025.html#AppendixMSQL"
-                    ],
-                    "severity": "CRITICAL",
-                    "suppressed": false,
-                    "title": "krb5: GSS message token handling"
-                  },
-                  {
-                    "cve": "CVE-2024-37370",
-                    "cvss": {
-                      "nvd": {
-                        "v3score": "7.5",
-                        "v3vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N"
-                      },
-                      "redhat": {
-                        "v3score": "7.5",
-                        "v3vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-345"
-                    ],
-                    "description": "In MIT Kerberos 5 (aka krb5) before 1.21.3, an attacker can modify the plaintext Extra Count field of a confidential GSS krb5 wrap token, causing the unwrapped token to appear truncated to the application.",
-                    "diffID": "sha256:420179ad2efafbf953a0c75f68a4c9dfaf38a98643df97d415bce49b179895f7",
-                    "fixedVersions": [
-                      "1.18.3-6+deb11u5"
-                    ],
-                    "installedVersion": "1.18.3-6+deb11u4",
-                    "packageName": "libgssapi-krb5-2",
-                    "purl": "pkg:deb/debian/libgssapi-krb5-2@1.18.3-6%2Bdeb11u4?arch=amd64&distro=debian-11.9",
-                    "references": [
-                      "https://access.redhat.com/errata/RHSA-2024:5312",
-                      "https://access.redhat.com/security/cve/CVE-2024-37370",
-                      "https://bugzilla.redhat.com/2294676",
-                      "https://bugzilla.redhat.com/2294677",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2294676",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2294677",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-37370",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-37371",
-                      "https://errata.almalinux.org/8/ALSA-2024-5312.html",
-                      "https://errata.rockylinux.org/RLSA-2024:5312",
-                      "https://github.com/krb5/krb5/commit/55fbf435edbe2e92dd8101669b1ce7144bc96fef",
-                      "https://linux.oracle.com/cve/CVE-2024-37370.html",
-                      "https://linux.oracle.com/errata/ELSA-2024-6166.html",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2024-37370",
-                      "https://security.netapp.com/advisory/ntap-20241108-0007/",
-                      "https://ubuntu.com/security/notices/USN-6947-1",
-                      "https://web.mit.edu/kerberos/www/advisories/",
-                      "https://web.mit.edu/kerberos/www/krb5-1.21/",
-                      "https://www.cve.org/CVERecord?id=CVE-2024-37370"
-                    ],
-                    "severity": "HIGH",
-                    "suppressed": false,
-                    "title": "krb5: GSS message token handling"
-                  },
-                  {
-                    "cve": "CVE-2025-24528",
-                    "cvss": {
-                      "redhat": {
-                        "v3score": "6.5",
-                        "v3vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-190"
-                    ],
-                    "description": "In MIT Kerberos 5 (aka krb5) before 1.22 (with incremental propagation), there is an integer overflow for a large update size to resize() in kdb_log.c. An authenticated attacker can cause an out-of-bounds write and kadmind daemon crash.",
-                    "diffID": "sha256:420179ad2efafbf953a0c75f68a4c9dfaf38a98643df97d415bce49b179895f7",
-                    "fixedVersions": [
-                      "1.18.3-6+deb11u6"
-                    ],
-                    "installedVersion": "1.18.3-6+deb11u4",
-                    "packageName": "libgssapi-krb5-2",
-                    "purl": "pkg:deb/debian/libgssapi-krb5-2@1.18.3-6%2Bdeb11u4?arch=amd64&distro=debian-11.9",
-                    "references": [
-                      "https://access.redhat.com/errata/RHSA-2025:2722",
-                      "https://access.redhat.com/security/cve/CVE-2025-24528",
-                      "https://bugzilla.redhat.com/2342796",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2342796",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-24528",
-                      "https://errata.almalinux.org/8/ALSA-2025-2722.html",
-                      "https://errata.rockylinux.org/RLSA-2025:7067",
-                      "https://github.com/krb5/krb5/commit/78ceba024b64d49612375be4a12d1c066b0bfbd0",
-                      "https://github.com/krb5/krb5/compare/krb5-1.21.3-final...krb5-1.22-final",
-                      "https://linux.oracle.com/cve/CVE-2025-24528.html",
-                      "https://linux.oracle.com/errata/ELSA-2025-7067.html",
-                      "https://lists.debian.org/debian-lts-announce/2025/02/msg00029.html",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2025-24528",
-                      "https://ubuntu.com/security/notices/USN-7314-1",
-                      "https://www.cve.org/CVERecord?id=CVE-2025-24528"
-                    ],
-                    "severity": "MEDIUM",
-                    "suppressed": false,
-                    "title": "krb5: overflow when calculating ulog block size"
-                  },
-                  {
-                    "cve": "CVE-2025-3576",
-                    "cvss": {
-                      "redhat": {
-                        "v3score": "5.9",
-                        "v3vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-328"
-                    ],
-                    "description": "A vulnerability in the MIT Kerberos implementation allows GSSAPI-protected messages using RC4-HMAC-MD5 to be spoofed due to weaknesses in the MD5 checksum design. If RC4 is preferred over stronger encryption types, an attacker could exploit MD5 collisions to forge message integrity codes. This may lead to unauthorized message tampering.",
-                    "diffID": "sha256:420179ad2efafbf953a0c75f68a4c9dfaf38a98643df97d415bce49b179895f7",
-                    "fixedVersions": [
-                      "1.18.3-6+deb11u7"
-                    ],
-                    "installedVersion": "1.18.3-6+deb11u4",
-                    "packageName": "libgssapi-krb5-2",
-                    "purl": "pkg:deb/debian/libgssapi-krb5-2@1.18.3-6%2Bdeb11u4?arch=amd64&distro=debian-11.9",
-                    "references": [
-                      "https://access.redhat.com/errata/RHSA-2025:11487",
-                      "https://access.redhat.com/errata/RHSA-2025:13664",
-                      "https://access.redhat.com/errata/RHSA-2025:13777",
-                      "https://access.redhat.com/errata/RHSA-2025:15000",
-                      "https://access.redhat.com/errata/RHSA-2025:15001",
-                      "https://access.redhat.com/errata/RHSA-2025:15002",
-                      "https://access.redhat.com/errata/RHSA-2025:15003",
-                      "https://access.redhat.com/errata/RHSA-2025:15004",
-                      "https://access.redhat.com/errata/RHSA-2025:8411",
-                      "https://access.redhat.com/errata/RHSA-2025:9418",
-                      "https://access.redhat.com/errata/RHSA-2025:9430",
-                      "https://access.redhat.com/security/cve/CVE-2025-3576",
-                      "https://bugzilla.redhat.com/2359465",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2359465",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-3576",
-                      "https://errata.almalinux.org/8/ALSA-2025-8411.html",
-                      "https://errata.rockylinux.org/RLSA-2025:9430",
-                      "https://linux.oracle.com/cve/CVE-2025-3576.html",
-                      "https://linux.oracle.com/errata/ELSA-2025-9430.html",
-                      "https://lists.debian.org/debian-lts-announce/2025/05/msg00047.html",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2025-3576",
-                      "https://ubuntu.com/security/notices/USN-7542-1",
-                      "https://web.mit.edu/kerberos/krb5-1.22/krb5-1.22.html",
-                      "https://www.cve.org/CVERecord?id=CVE-2025-3576"
-                    ],
-                    "severity": "MEDIUM",
-                    "suppressed": false,
-                    "title": "krb5: Kerberos RC4-HMAC-MD5 Checksum Vulnerability Enabling Message Spoofing via MD5 Collisions"
-                  },
-                  {
-                    "cve": "CVE-2018-5709",
-                    "cvss": {
-                      "nvd": {
-                        "v3score": "7.5",
-                        "v3vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N"
-                      },
-                      "redhat": {
-                        "v3score": "6.3",
-                        "v3vector": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-190"
-                    ],
-                    "description": "An issue was discovered in MIT Kerberos 5 (aka krb5) through 1.16. There is a variable \"dbentry->n_key_data\" in kadmin/dbutil/dump.c that can store 16-bit data but unknowingly the developer has assigned a \"u4\" variable to it, which is for 32-bit data. An attacker can use this vulnerability to affect other artifacts of the database as we know that a Kerberos database dump file contains trusted data.",
-                    "diffID": "sha256:420179ad2efafbf953a0c75f68a4c9dfaf38a98643df97d415bce49b179895f7",
-                    "installedVersion": "1.18.3-6+deb11u4",
-                    "packageName": "libgssapi-krb5-2",
-                    "purl": "pkg:deb/debian/libgssapi-krb5-2@1.18.3-6%2Bdeb11u4?arch=amd64&distro=debian-11.9",
-                    "references": [
-                      "https://access.redhat.com/security/cve/CVE-2018-5709",
-                      "https://github.com/poojamnit/Kerberos-V5-1.16-Vulnerabilities/tree/master/Integer%20Overflow",
-                      "https://lists.apache.org/thread.html/rf9fa47ab66495c78bb4120b0754dd9531ca2ff0430f6685ac9b07772%40%3Cdev.mina.apache.org%3E",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2018-5709",
-                      "https://www.cve.org/CVERecord?id=CVE-2018-5709"
-                    ],
-                    "severity": "LOW",
-                    "suppressed": false,
-                    "title": "krb5: integer overflow in dbentry->n_key_data in kadmin/dbutil/dump.c"
-                  },
-                  {
-                    "cve": "CVE-2024-26458",
-                    "cvss": {
-                      "redhat": {
-                        "v3score": "5.9",
-                        "v3vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-401"
-                    ],
-                    "description": "Kerberos 5 (aka krb5) 1.21.2 contains a memory leak in /krb5/src/lib/rpc/pmap_rmt.c.",
-                    "diffID": "sha256:420179ad2efafbf953a0c75f68a4c9dfaf38a98643df97d415bce49b179895f7",
-                    "installedVersion": "1.18.3-6+deb11u4",
-                    "packageName": "libgssapi-krb5-2",
-                    "purl": "pkg:deb/debian/libgssapi-krb5-2@1.18.3-6%2Bdeb11u4?arch=amd64&distro=debian-11.9",
-                    "references": [
-                      "https://access.redhat.com/errata/RHSA-2024:3268",
-                      "https://access.redhat.com/security/cve/CVE-2024-26458",
-                      "https://bugzilla.redhat.com/2266731",
-                      "https://bugzilla.redhat.com/2266740",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2266731",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2266740",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26458",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26461",
-                      "https://errata.almalinux.org/8/ALSA-2024-3268.html",
-                      "https://errata.rockylinux.org/RLSA-2024:3268",
-                      "https://github.com/LuMingYinDetect/krb5_defects/blob/main/krb5_detect_1.md",
-                      "https://linux.oracle.com/cve/CVE-2024-26458.html",
-                      "https://linux.oracle.com/errata/ELSA-2024-9331.html",
-                      "https://mailman.mit.edu/pipermail/kerberos/2024-March/023095.html",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2024-26458",
-                      "https://security.netapp.com/advisory/ntap-20240415-0010/",
-                      "https://ubuntu.com/security/notices/USN-7314-1",
-                      "https://www.cve.org/CVERecord?id=CVE-2024-26458"
-                    ],
-                    "severity": "LOW",
-                    "suppressed": false,
-                    "title": "krb5: Memory leak at /krb5/src/lib/rpc/pmap_rmt.c"
-                  },
-                  {
-                    "cve": "CVE-2024-26461",
-                    "cvss": {
-                      "redhat": {
-                        "v3score": "5.9",
-                        "v3vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-770"
-                    ],
-                    "description": "Kerberos 5 (aka krb5) 1.21.2 contains a memory leak vulnerability in /krb5/src/lib/gssapi/krb5/k5sealv3.c.",
-                    "diffID": "sha256:420179ad2efafbf953a0c75f68a4c9dfaf38a98643df97d415bce49b179895f7",
-                    "installedVersion": "1.18.3-6+deb11u4",
-                    "packageName": "libgssapi-krb5-2",
-                    "purl": "pkg:deb/debian/libgssapi-krb5-2@1.18.3-6%2Bdeb11u4?arch=amd64&distro=debian-11.9",
-                    "references": [
-                      "https://access.redhat.com/errata/RHSA-2024:3268",
-                      "https://access.redhat.com/security/cve/CVE-2024-26461",
-                      "https://bugzilla.redhat.com/2266731",
-                      "https://bugzilla.redhat.com/2266740",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2266731",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2266740",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26458",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26461",
-                      "https://errata.almalinux.org/8/ALSA-2024-3268.html",
-                      "https://errata.rockylinux.org/RLSA-2024:3268",
-                      "https://github.com/LuMingYinDetect/krb5_defects/blob/main/krb5_detect_2.md",
-                      "https://linux.oracle.com/cve/CVE-2024-26461.html",
-                      "https://linux.oracle.com/errata/ELSA-2024-9331.html",
-                      "https://mailman.mit.edu/pipermail/kerberos/2024-March/023095.html",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2024-26461",
-                      "https://security.netapp.com/advisory/ntap-20240415-0011/",
-                      "https://ubuntu.com/security/notices/USN-7314-1",
-                      "https://www.cve.org/CVERecord?id=CVE-2024-26461"
-                    ],
-                    "severity": "LOW",
-                    "suppressed": false,
-                    "title": "krb5: Memory leak at /krb5/src/lib/gssapi/krb5/k5sealv3.c"
-                  },
-                  {
-                    "cve": "CVE-2025-5222",
-                    "cvss": {
-                      "redhat": {
-                        "v3score": "7",
-                        "v3vector": "CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-120"
-                    ],
-                    "description": "A stack buffer overflow was found in Internationl components for unicode (ICU ). While running the genrb binary, the 'subtag' struct overflowed at the SRBRoot::addTag function. This issue may lead to memory corruption and local arbitrary code execution.",
-                    "diffID": "sha256:9664c8c85da49d2cedf85c6b8af0e128318580b95b277b87593a4f75886148af",
-                    "fixedVersions": [
-                      "67.1-7+deb11u1"
-                    ],
-                    "installedVersion": "67.1-7",
-                    "packageName": "libicu67",
-                    "purl": "pkg:deb/debian/libicu67@67.1-7?arch=amd64&distro=debian-11.9",
-                    "references": [
-                      "https://access.redhat.com/errata/RHSA-2025:11888",
-                      "https://access.redhat.com/errata/RHSA-2025:12083",
-                      "https://access.redhat.com/errata/RHSA-2025:12331",
-                      "https://access.redhat.com/errata/RHSA-2025:12332",
-                      "https://access.redhat.com/errata/RHSA-2025:12333",
-                      "https://access.redhat.com/security/cve/CVE-2025-5222",
-                      "https://bugzilla.redhat.com/2368600",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2368600",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-5222",
-                      "https://errata.almalinux.org/9/ALSA-2025-12083.html",
-                      "https://errata.rockylinux.org/RLSA-2025:12083",
-                      "https://linux.oracle.com/cve/CVE-2025-5222.html",
-                      "https://linux.oracle.com/errata/ELSA-2025-12083.html",
-                      "https://lists.debian.org/debian-lts-announce/2025/06/msg00015.html",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2025-5222",
-                      "https://www.cve.org/CVERecord?id=CVE-2025-5222"
-                    ],
-                    "severity": "HIGH",
-                    "suppressed": false,
-                    "title": "icu: Stack buffer overflow in the SRBRoot::addTag function"
-                  },
-                  {
-                    "cve": "CVE-2017-9937",
-                    "cvss": {
-                      "nvd": {
-                        "v3score": "6.5",
-                        "v3vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H"
-                      },
-                      "redhat": {
-                        "v3score": "3.3",
-                        "v3vector": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-119"
-                    ],
-                    "description": "In LibTIFF 4.0.8, there is a memory malloc failure in tif_jbig.c. A crafted TIFF document can lead to an abort resulting in a remote denial of service attack.",
-                    "diffID": "sha256:9664c8c85da49d2cedf85c6b8af0e128318580b95b277b87593a4f75886148af",
-                    "installedVersion": "2.1-3.1+b2",
-                    "packageName": "libjbig0",
-                    "purl": "pkg:deb/debian/libjbig0@2.1-3.1%2Bb2?arch=amd64&distro=debian-11.9",
-                    "references": [
-                      "http://bugzilla.maptools.org/show_bug.cgi?id=2707",
-                      "http://www.securityfocus.com/bid/99304",
-                      "https://access.redhat.com/security/cve/CVE-2017-9937",
-                      "https://lists.apache.org/thread.html/rf9fa47ab66495c78bb4120b0754dd9531ca2ff0430f6685ac9b07772%40%3Cdev.mina.apache.org%3E",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2017-9937",
-                      "https://ubuntu.com/security/notices/USN-5742-1",
-                      "https://www.cve.org/CVERecord?id=CVE-2017-9937"
-                    ],
-                    "severity": "LOW",
-                    "suppressed": false,
-                    "title": "libtiff: memory malloc failure in tif_jbig.c could cause DOS."
-                  },
-                  {
-                    "cve": "CVE-2021-46822",
-                    "cvss": {
-                      "nvd": {
-                        "v3score": "5.5",
-                        "v3vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H"
-                      },
-                      "redhat": {
-                        "v3score": "5.5",
-                        "v3vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-787"
-                    ],
-                    "description": "The PPM reader in libjpeg-turbo through 2.0.90 mishandles use of tjLoadImage for loading a 16-bit binary PPM file into a grayscale buffer and loading a 16-bit binary PGM file into an RGB buffer. This is related to a heap-based buffer overflow in the get_word_rgb_row function in rdppm.c.",
-                    "diffID": "sha256:9664c8c85da49d2cedf85c6b8af0e128318580b95b277b87593a4f75886148af",
-                    "installedVersion": "1:2.0.6-4",
-                    "packageName": "libjpeg62-turbo",
-                    "purl": "pkg:deb/debian/libjpeg62-turbo@2.0.6-4?arch=amd64&distro=debian-11.9&epoch=1",
-                    "references": [
-                      "https://access.redhat.com/errata/RHSA-2023:1068",
-                      "https://access.redhat.com/security/cve/CVE-2021-46822",
-                      "https://bugzilla.redhat.com/2100044",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2100044",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-46822",
-                      "https://errata.almalinux.org/9/ALSA-2023-1068.html",
-                      "https://errata.rockylinux.org/RLSA-2023:1068",
-                      "https://exchange.xforce.ibmcloud.com/vulnerabilities/221567",
-                      "https://github.com/libjpeg-turbo/libjpeg-turbo/commit/f35fd27ec641c42d6b115bfa595e483ec58188d2",
-                      "https://linux.oracle.com/cve/CVE-2021-46822.html",
-                      "https://linux.oracle.com/errata/ELSA-2023-1068.html",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2021-46822",
-                      "https://ubuntu.com/security/notices/USN-5631-1",
-                      "https://www.cve.org/CVERecord?id=CVE-2021-46822"
-                    ],
-                    "severity": "MEDIUM",
-                    "suppressed": false,
-                    "title": "libjpeg-turbo: heap buffer overflow in get_word_rgb_row() in rdppm.c"
-                  },
-                  {
-                    "cve": "CVE-2024-37371",
-                    "cvss": {
-                      "nvd": {
-                        "v3score": "9.1",
-                        "v3vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H"
-                      },
-                      "redhat": {
-                        "v3score": "6.5",
-                        "v3vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-125"
-                    ],
-                    "description": "In MIT Kerberos 5 (aka krb5) before 1.21.3, an attacker can cause invalid memory reads during GSS message token handling by sending message tokens with invalid length fields.",
-                    "diffID": "sha256:420179ad2efafbf953a0c75f68a4c9dfaf38a98643df97d415bce49b179895f7",
-                    "fixedVersions": [
-                      "1.18.3-6+deb11u5"
-                    ],
-                    "installedVersion": "1.18.3-6+deb11u4",
-                    "packageName": "libk5crypto3",
-                    "purl": "pkg:deb/debian/libk5crypto3@1.18.3-6%2Bdeb11u4?arch=amd64&distro=debian-11.9",
-                    "references": [
-                      "https://access.redhat.com/errata/RHSA-2025:1673",
-                      "https://access.redhat.com/security/cve/CVE-2024-37371",
-                      "https://bugzilla.redhat.com/2294581",
-                      "https://bugzilla.redhat.com/2294676",
-                      "https://bugzilla.redhat.com/2301888",
-                      "https://bugzilla.redhat.com/2318857",
-                      "https://bugzilla.redhat.com/2318858",
-                      "https://bugzilla.redhat.com/2318870",
-                      "https://bugzilla.redhat.com/2318873",
-                      "https://bugzilla.redhat.com/2318874",
-                      "https://bugzilla.redhat.com/2318876",
-                      "https://bugzilla.redhat.com/2318882",
-                      "https://bugzilla.redhat.com/2318883",
-                      "https://bugzilla.redhat.com/2318884",
-                      "https://bugzilla.redhat.com/2318885",
-                      "https://bugzilla.redhat.com/2318886",
-                      "https://bugzilla.redhat.com/2318897",
-                      "https://bugzilla.redhat.com/2318900",
-                      "https://bugzilla.redhat.com/2318905",
-                      "https://bugzilla.redhat.com/2318914",
-                      "https://bugzilla.redhat.com/2318922",
-                      "https://bugzilla.redhat.com/2318923",
-                      "https://bugzilla.redhat.com/2318925",
-                      "https://bugzilla.redhat.com/2318926",
-                      "https://bugzilla.redhat.com/2318927",
-                      "https://bugzilla.redhat.com/2331191",
-                      "https://bugzilla.redhat.com/2339218",
-                      "https://bugzilla.redhat.com/2339220",
-                      "https://bugzilla.redhat.com/2339221",
-                      "https://bugzilla.redhat.com/2339226",
-                      "https://bugzilla.redhat.com/2339231",
-                      "https://bugzilla.redhat.com/2339236",
-                      "https://bugzilla.redhat.com/2339238",
-                      "https://bugzilla.redhat.com/2339243",
-                      "https://bugzilla.redhat.com/2339247",
-                      "https://bugzilla.redhat.com/2339252",
-                      "https://bugzilla.redhat.com/2339259",
-                      "https://bugzilla.redhat.com/2339266",
-                      "https://bugzilla.redhat.com/2339270",
-                      "https://bugzilla.redhat.com/2339271",
-                      "https://bugzilla.redhat.com/2339275",
-                      "https://bugzilla.redhat.com/2339277",
-                      "https://bugzilla.redhat.com/2339281",
-                      "https://bugzilla.redhat.com/2339284",
-                      "https://bugzilla.redhat.com/2339291",
-                      "https://bugzilla.redhat.com/2339293",
-                      "https://bugzilla.redhat.com/2339295",
-                      "https://bugzilla.redhat.com/2339299",
-                      "https://bugzilla.redhat.com/2339300",
-                      "https://bugzilla.redhat.com/2339304",
-                      "https://bugzilla.redhat.com/2339305",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2294581",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2294676",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2301888",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2318857",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2318858",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2318870",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2318873",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2318874",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2318876",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2318882",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2318883",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2318884",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2318885",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2318886",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2318897",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2318900",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2318905",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2318914",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2318922",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2318923",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2318925",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2318926",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2318927",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2331191",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2339218",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2339220",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2339221",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2339226",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2339231",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2339236",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2339238",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2339243",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2339247",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2339252",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2339259",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2339266",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2339270",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2339271",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2339275",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2339277",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2339281",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2339284",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2339291",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2339293",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2339295",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2339299",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2339300",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2339304",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2339305",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-11053",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-21193",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-21194",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-21196",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-21197",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-21198",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-21199",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-21201",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-21203",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-21212",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-21213",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-21218",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-21219",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-21230",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-21231",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-21236",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-21237",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-21238",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-21239",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-21241",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-21247",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-37371",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-5535",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-7264",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21490",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21491",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21494",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21497",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21500",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21501",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21503",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21504",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21505",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21518",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21519",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21520",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21521",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21522",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21523",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21525",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21529",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21531",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21534",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21536",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21540",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21543",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21546",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21555",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21559",
-                      "https://errata.almalinux.org/8/ALSA-2025-1673.html",
-                      "https://errata.rockylinux.org/RLSA-2025:1671",
-                      "https://github.com/krb5/krb5/commit/55fbf435edbe2e92dd8101669b1ce7144bc96fef",
-                      "https://linux.oracle.com/cve/CVE-2024-37371.html",
-                      "https://linux.oracle.com/errata/ELSA-2025-1673.html",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2024-37371",
-                      "https://security.netapp.com/advisory/ntap-20241108-0009/",
-                      "https://security.netapp.com/advisory/ntap-20250124-0010/",
-                      "https://ubuntu.com/security/notices/USN-6947-1",
-                      "https://web.mit.edu/kerberos/www/advisories/",
-                      "https://web.mit.edu/kerberos/www/krb5-1.21/",
-                      "https://www.cve.org/CVERecord?id=CVE-2024-37371",
-                      "https://www.oracle.com/security-alerts/cpujan2025.html#AppendixMSQL"
-                    ],
-                    "severity": "CRITICAL",
-                    "suppressed": false,
-                    "title": "krb5: GSS message token handling"
-                  },
-                  {
-                    "cve": "CVE-2024-37370",
-                    "cvss": {
-                      "nvd": {
-                        "v3score": "7.5",
-                        "v3vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N"
-                      },
-                      "redhat": {
-                        "v3score": "7.5",
-                        "v3vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-345"
-                    ],
-                    "description": "In MIT Kerberos 5 (aka krb5) before 1.21.3, an attacker can modify the plaintext Extra Count field of a confidential GSS krb5 wrap token, causing the unwrapped token to appear truncated to the application.",
-                    "diffID": "sha256:420179ad2efafbf953a0c75f68a4c9dfaf38a98643df97d415bce49b179895f7",
-                    "fixedVersions": [
-                      "1.18.3-6+deb11u5"
-                    ],
-                    "installedVersion": "1.18.3-6+deb11u4",
-                    "packageName": "libk5crypto3",
-                    "purl": "pkg:deb/debian/libk5crypto3@1.18.3-6%2Bdeb11u4?arch=amd64&distro=debian-11.9",
-                    "references": [
-                      "https://access.redhat.com/errata/RHSA-2024:5312",
-                      "https://access.redhat.com/security/cve/CVE-2024-37370",
-                      "https://bugzilla.redhat.com/2294676",
-                      "https://bugzilla.redhat.com/2294677",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2294676",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2294677",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-37370",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-37371",
-                      "https://errata.almalinux.org/8/ALSA-2024-5312.html",
-                      "https://errata.rockylinux.org/RLSA-2024:5312",
-                      "https://github.com/krb5/krb5/commit/55fbf435edbe2e92dd8101669b1ce7144bc96fef",
-                      "https://linux.oracle.com/cve/CVE-2024-37370.html",
-                      "https://linux.oracle.com/errata/ELSA-2024-6166.html",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2024-37370",
-                      "https://security.netapp.com/advisory/ntap-20241108-0007/",
-                      "https://ubuntu.com/security/notices/USN-6947-1",
-                      "https://web.mit.edu/kerberos/www/advisories/",
-                      "https://web.mit.edu/kerberos/www/krb5-1.21/",
-                      "https://www.cve.org/CVERecord?id=CVE-2024-37370"
-                    ],
-                    "severity": "HIGH",
-                    "suppressed": false,
-                    "title": "krb5: GSS message token handling"
-                  },
-                  {
-                    "cve": "CVE-2025-24528",
-                    "cvss": {
-                      "redhat": {
-                        "v3score": "6.5",
-                        "v3vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-190"
-                    ],
-                    "description": "In MIT Kerberos 5 (aka krb5) before 1.22 (with incremental propagation), there is an integer overflow for a large update size to resize() in kdb_log.c. An authenticated attacker can cause an out-of-bounds write and kadmind daemon crash.",
-                    "diffID": "sha256:420179ad2efafbf953a0c75f68a4c9dfaf38a98643df97d415bce49b179895f7",
-                    "fixedVersions": [
-                      "1.18.3-6+deb11u6"
-                    ],
-                    "installedVersion": "1.18.3-6+deb11u4",
-                    "packageName": "libk5crypto3",
-                    "purl": "pkg:deb/debian/libk5crypto3@1.18.3-6%2Bdeb11u4?arch=amd64&distro=debian-11.9",
-                    "references": [
-                      "https://access.redhat.com/errata/RHSA-2025:2722",
-                      "https://access.redhat.com/security/cve/CVE-2025-24528",
-                      "https://bugzilla.redhat.com/2342796",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2342796",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-24528",
-                      "https://errata.almalinux.org/8/ALSA-2025-2722.html",
-                      "https://errata.rockylinux.org/RLSA-2025:7067",
-                      "https://github.com/krb5/krb5/commit/78ceba024b64d49612375be4a12d1c066b0bfbd0",
-                      "https://github.com/krb5/krb5/compare/krb5-1.21.3-final...krb5-1.22-final",
-                      "https://linux.oracle.com/cve/CVE-2025-24528.html",
-                      "https://linux.oracle.com/errata/ELSA-2025-7067.html",
-                      "https://lists.debian.org/debian-lts-announce/2025/02/msg00029.html",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2025-24528",
-                      "https://ubuntu.com/security/notices/USN-7314-1",
-                      "https://www.cve.org/CVERecord?id=CVE-2025-24528"
-                    ],
-                    "severity": "MEDIUM",
-                    "suppressed": false,
-                    "title": "krb5: overflow when calculating ulog block size"
-                  },
-                  {
-                    "cve": "CVE-2025-3576",
-                    "cvss": {
-                      "redhat": {
-                        "v3score": "5.9",
-                        "v3vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-328"
-                    ],
-                    "description": "A vulnerability in the MIT Kerberos implementation allows GSSAPI-protected messages using RC4-HMAC-MD5 to be spoofed due to weaknesses in the MD5 checksum design. If RC4 is preferred over stronger encryption types, an attacker could exploit MD5 collisions to forge message integrity codes. This may lead to unauthorized message tampering.",
-                    "diffID": "sha256:420179ad2efafbf953a0c75f68a4c9dfaf38a98643df97d415bce49b179895f7",
-                    "fixedVersions": [
-                      "1.18.3-6+deb11u7"
-                    ],
-                    "installedVersion": "1.18.3-6+deb11u4",
-                    "packageName": "libk5crypto3",
-                    "purl": "pkg:deb/debian/libk5crypto3@1.18.3-6%2Bdeb11u4?arch=amd64&distro=debian-11.9",
-                    "references": [
-                      "https://access.redhat.com/errata/RHSA-2025:11487",
-                      "https://access.redhat.com/errata/RHSA-2025:13664",
-                      "https://access.redhat.com/errata/RHSA-2025:13777",
-                      "https://access.redhat.com/errata/RHSA-2025:15000",
-                      "https://access.redhat.com/errata/RHSA-2025:15001",
-                      "https://access.redhat.com/errata/RHSA-2025:15002",
-                      "https://access.redhat.com/errata/RHSA-2025:15003",
-                      "https://access.redhat.com/errata/RHSA-2025:15004",
-                      "https://access.redhat.com/errata/RHSA-2025:8411",
-                      "https://access.redhat.com/errata/RHSA-2025:9418",
-                      "https://access.redhat.com/errata/RHSA-2025:9430",
-                      "https://access.redhat.com/security/cve/CVE-2025-3576",
-                      "https://bugzilla.redhat.com/2359465",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2359465",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-3576",
-                      "https://errata.almalinux.org/8/ALSA-2025-8411.html",
-                      "https://errata.rockylinux.org/RLSA-2025:9430",
-                      "https://linux.oracle.com/cve/CVE-2025-3576.html",
-                      "https://linux.oracle.com/errata/ELSA-2025-9430.html",
-                      "https://lists.debian.org/debian-lts-announce/2025/05/msg00047.html",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2025-3576",
-                      "https://ubuntu.com/security/notices/USN-7542-1",
-                      "https://web.mit.edu/kerberos/krb5-1.22/krb5-1.22.html",
-                      "https://www.cve.org/CVERecord?id=CVE-2025-3576"
-                    ],
-                    "severity": "MEDIUM",
-                    "suppressed": false,
-                    "title": "krb5: Kerberos RC4-HMAC-MD5 Checksum Vulnerability Enabling Message Spoofing via MD5 Collisions"
-                  },
-                  {
-                    "cve": "CVE-2018-5709",
-                    "cvss": {
-                      "nvd": {
-                        "v3score": "7.5",
-                        "v3vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N"
-                      },
-                      "redhat": {
-                        "v3score": "6.3",
-                        "v3vector": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-190"
-                    ],
-                    "description": "An issue was discovered in MIT Kerberos 5 (aka krb5) through 1.16. There is a variable \"dbentry->n_key_data\" in kadmin/dbutil/dump.c that can store 16-bit data but unknowingly the developer has assigned a \"u4\" variable to it, which is for 32-bit data. An attacker can use this vulnerability to affect other artifacts of the database as we know that a Kerberos database dump file contains trusted data.",
-                    "diffID": "sha256:420179ad2efafbf953a0c75f68a4c9dfaf38a98643df97d415bce49b179895f7",
-                    "installedVersion": "1.18.3-6+deb11u4",
-                    "packageName": "libk5crypto3",
-                    "purl": "pkg:deb/debian/libk5crypto3@1.18.3-6%2Bdeb11u4?arch=amd64&distro=debian-11.9",
-                    "references": [
-                      "https://access.redhat.com/security/cve/CVE-2018-5709",
-                      "https://github.com/poojamnit/Kerberos-V5-1.16-Vulnerabilities/tree/master/Integer%20Overflow",
-                      "https://lists.apache.org/thread.html/rf9fa47ab66495c78bb4120b0754dd9531ca2ff0430f6685ac9b07772%40%3Cdev.mina.apache.org%3E",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2018-5709",
-                      "https://www.cve.org/CVERecord?id=CVE-2018-5709"
-                    ],
-                    "severity": "LOW",
-                    "suppressed": false,
-                    "title": "krb5: integer overflow in dbentry->n_key_data in kadmin/dbutil/dump.c"
-                  },
-                  {
-                    "cve": "CVE-2024-26458",
-                    "cvss": {
-                      "redhat": {
-                        "v3score": "5.9",
-                        "v3vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-401"
-                    ],
-                    "description": "Kerberos 5 (aka krb5) 1.21.2 contains a memory leak in /krb5/src/lib/rpc/pmap_rmt.c.",
-                    "diffID": "sha256:420179ad2efafbf953a0c75f68a4c9dfaf38a98643df97d415bce49b179895f7",
-                    "installedVersion": "1.18.3-6+deb11u4",
-                    "packageName": "libk5crypto3",
-                    "purl": "pkg:deb/debian/libk5crypto3@1.18.3-6%2Bdeb11u4?arch=amd64&distro=debian-11.9",
-                    "references": [
-                      "https://access.redhat.com/errata/RHSA-2024:3268",
-                      "https://access.redhat.com/security/cve/CVE-2024-26458",
-                      "https://bugzilla.redhat.com/2266731",
-                      "https://bugzilla.redhat.com/2266740",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2266731",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2266740",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26458",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26461",
-                      "https://errata.almalinux.org/8/ALSA-2024-3268.html",
-                      "https://errata.rockylinux.org/RLSA-2024:3268",
-                      "https://github.com/LuMingYinDetect/krb5_defects/blob/main/krb5_detect_1.md",
-                      "https://linux.oracle.com/cve/CVE-2024-26458.html",
-                      "https://linux.oracle.com/errata/ELSA-2024-9331.html",
-                      "https://mailman.mit.edu/pipermail/kerberos/2024-March/023095.html",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2024-26458",
-                      "https://security.netapp.com/advisory/ntap-20240415-0010/",
-                      "https://ubuntu.com/security/notices/USN-7314-1",
-                      "https://www.cve.org/CVERecord?id=CVE-2024-26458"
-                    ],
-                    "severity": "LOW",
-                    "suppressed": false,
-                    "title": "krb5: Memory leak at /krb5/src/lib/rpc/pmap_rmt.c"
-                  },
-                  {
-                    "cve": "CVE-2024-26461",
-                    "cvss": {
-                      "redhat": {
-                        "v3score": "5.9",
-                        "v3vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-770"
-                    ],
-                    "description": "Kerberos 5 (aka krb5) 1.21.2 contains a memory leak vulnerability in /krb5/src/lib/gssapi/krb5/k5sealv3.c.",
-                    "diffID": "sha256:420179ad2efafbf953a0c75f68a4c9dfaf38a98643df97d415bce49b179895f7",
-                    "installedVersion": "1.18.3-6+deb11u4",
-                    "packageName": "libk5crypto3",
-                    "purl": "pkg:deb/debian/libk5crypto3@1.18.3-6%2Bdeb11u4?arch=amd64&distro=debian-11.9",
-                    "references": [
-                      "https://access.redhat.com/errata/RHSA-2024:3268",
-                      "https://access.redhat.com/security/cve/CVE-2024-26461",
-                      "https://bugzilla.redhat.com/2266731",
-                      "https://bugzilla.redhat.com/2266740",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2266731",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2266740",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26458",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26461",
-                      "https://errata.almalinux.org/8/ALSA-2024-3268.html",
-                      "https://errata.rockylinux.org/RLSA-2024:3268",
-                      "https://github.com/LuMingYinDetect/krb5_defects/blob/main/krb5_detect_2.md",
-                      "https://linux.oracle.com/cve/CVE-2024-26461.html",
-                      "https://linux.oracle.com/errata/ELSA-2024-9331.html",
-                      "https://mailman.mit.edu/pipermail/kerberos/2024-March/023095.html",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2024-26461",
-                      "https://security.netapp.com/advisory/ntap-20240415-0011/",
-                      "https://ubuntu.com/security/notices/USN-7314-1",
-                      "https://www.cve.org/CVERecord?id=CVE-2024-26461"
-                    ],
-                    "severity": "LOW",
-                    "suppressed": false,
-                    "title": "krb5: Memory leak at /krb5/src/lib/gssapi/krb5/k5sealv3.c"
-                  },
-                  {
-                    "cve": "CVE-2024-37371",
-                    "cvss": {
-                      "nvd": {
-                        "v3score": "9.1",
-                        "v3vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H"
-                      },
-                      "redhat": {
-                        "v3score": "6.5",
-                        "v3vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-125"
-                    ],
-                    "description": "In MIT Kerberos 5 (aka krb5) before 1.21.3, an attacker can cause invalid memory reads during GSS message token handling by sending message tokens with invalid length fields.",
-                    "diffID": "sha256:420179ad2efafbf953a0c75f68a4c9dfaf38a98643df97d415bce49b179895f7",
-                    "fixedVersions": [
-                      "1.18.3-6+deb11u5"
-                    ],
-                    "installedVersion": "1.18.3-6+deb11u4",
-                    "packageName": "libkrb5-3",
-                    "purl": "pkg:deb/debian/libkrb5-3@1.18.3-6%2Bdeb11u4?arch=amd64&distro=debian-11.9",
-                    "references": [
-                      "https://access.redhat.com/errata/RHSA-2025:1673",
-                      "https://access.redhat.com/security/cve/CVE-2024-37371",
-                      "https://bugzilla.redhat.com/2294581",
-                      "https://bugzilla.redhat.com/2294676",
-                      "https://bugzilla.redhat.com/2301888",
-                      "https://bugzilla.redhat.com/2318857",
-                      "https://bugzilla.redhat.com/2318858",
-                      "https://bugzilla.redhat.com/2318870",
-                      "https://bugzilla.redhat.com/2318873",
-                      "https://bugzilla.redhat.com/2318874",
-                      "https://bugzilla.redhat.com/2318876",
-                      "https://bugzilla.redhat.com/2318882",
-                      "https://bugzilla.redhat.com/2318883",
-                      "https://bugzilla.redhat.com/2318884",
-                      "https://bugzilla.redhat.com/2318885",
-                      "https://bugzilla.redhat.com/2318886",
-                      "https://bugzilla.redhat.com/2318897",
-                      "https://bugzilla.redhat.com/2318900",
-                      "https://bugzilla.redhat.com/2318905",
-                      "https://bugzilla.redhat.com/2318914",
-                      "https://bugzilla.redhat.com/2318922",
-                      "https://bugzilla.redhat.com/2318923",
-                      "https://bugzilla.redhat.com/2318925",
-                      "https://bugzilla.redhat.com/2318926",
-                      "https://bugzilla.redhat.com/2318927",
-                      "https://bugzilla.redhat.com/2331191",
-                      "https://bugzilla.redhat.com/2339218",
-                      "https://bugzilla.redhat.com/2339220",
-                      "https://bugzilla.redhat.com/2339221",
-                      "https://bugzilla.redhat.com/2339226",
-                      "https://bugzilla.redhat.com/2339231",
-                      "https://bugzilla.redhat.com/2339236",
-                      "https://bugzilla.redhat.com/2339238",
-                      "https://bugzilla.redhat.com/2339243",
-                      "https://bugzilla.redhat.com/2339247",
-                      "https://bugzilla.redhat.com/2339252",
-                      "https://bugzilla.redhat.com/2339259",
-                      "https://bugzilla.redhat.com/2339266",
-                      "https://bugzilla.redhat.com/2339270",
-                      "https://bugzilla.redhat.com/2339271",
-                      "https://bugzilla.redhat.com/2339275",
-                      "https://bugzilla.redhat.com/2339277",
-                      "https://bugzilla.redhat.com/2339281",
-                      "https://bugzilla.redhat.com/2339284",
-                      "https://bugzilla.redhat.com/2339291",
-                      "https://bugzilla.redhat.com/2339293",
-                      "https://bugzilla.redhat.com/2339295",
-                      "https://bugzilla.redhat.com/2339299",
-                      "https://bugzilla.redhat.com/2339300",
-                      "https://bugzilla.redhat.com/2339304",
-                      "https://bugzilla.redhat.com/2339305",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2294581",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2294676",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2301888",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2318857",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2318858",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2318870",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2318873",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2318874",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2318876",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2318882",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2318883",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2318884",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2318885",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2318886",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2318897",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2318900",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2318905",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2318914",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2318922",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2318923",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2318925",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2318926",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2318927",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2331191",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2339218",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2339220",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2339221",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2339226",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2339231",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2339236",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2339238",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2339243",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2339247",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2339252",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2339259",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2339266",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2339270",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2339271",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2339275",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2339277",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2339281",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2339284",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2339291",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2339293",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2339295",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2339299",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2339300",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2339304",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2339305",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-11053",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-21193",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-21194",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-21196",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-21197",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-21198",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-21199",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-21201",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-21203",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-21212",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-21213",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-21218",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-21219",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-21230",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-21231",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-21236",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-21237",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-21238",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-21239",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-21241",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-21247",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-37371",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-5535",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-7264",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21490",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21491",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21494",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21497",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21500",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21501",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21503",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21504",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21505",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21518",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21519",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21520",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21521",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21522",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21523",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21525",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21529",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21531",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21534",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21536",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21540",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21543",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21546",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21555",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21559",
-                      "https://errata.almalinux.org/8/ALSA-2025-1673.html",
-                      "https://errata.rockylinux.org/RLSA-2025:1671",
-                      "https://github.com/krb5/krb5/commit/55fbf435edbe2e92dd8101669b1ce7144bc96fef",
-                      "https://linux.oracle.com/cve/CVE-2024-37371.html",
-                      "https://linux.oracle.com/errata/ELSA-2025-1673.html",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2024-37371",
-                      "https://security.netapp.com/advisory/ntap-20241108-0009/",
-                      "https://security.netapp.com/advisory/ntap-20250124-0010/",
-                      "https://ubuntu.com/security/notices/USN-6947-1",
-                      "https://web.mit.edu/kerberos/www/advisories/",
-                      "https://web.mit.edu/kerberos/www/krb5-1.21/",
-                      "https://www.cve.org/CVERecord?id=CVE-2024-37371",
-                      "https://www.oracle.com/security-alerts/cpujan2025.html#AppendixMSQL"
-                    ],
-                    "severity": "CRITICAL",
-                    "suppressed": false,
-                    "title": "krb5: GSS message token handling"
-                  },
-                  {
-                    "cve": "CVE-2024-37370",
-                    "cvss": {
-                      "nvd": {
-                        "v3score": "7.5",
-                        "v3vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N"
-                      },
-                      "redhat": {
-                        "v3score": "7.5",
-                        "v3vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-345"
-                    ],
-                    "description": "In MIT Kerberos 5 (aka krb5) before 1.21.3, an attacker can modify the plaintext Extra Count field of a confidential GSS krb5 wrap token, causing the unwrapped token to appear truncated to the application.",
-                    "diffID": "sha256:420179ad2efafbf953a0c75f68a4c9dfaf38a98643df97d415bce49b179895f7",
-                    "fixedVersions": [
-                      "1.18.3-6+deb11u5"
-                    ],
-                    "installedVersion": "1.18.3-6+deb11u4",
-                    "packageName": "libkrb5-3",
-                    "purl": "pkg:deb/debian/libkrb5-3@1.18.3-6%2Bdeb11u4?arch=amd64&distro=debian-11.9",
-                    "references": [
-                      "https://access.redhat.com/errata/RHSA-2024:5312",
-                      "https://access.redhat.com/security/cve/CVE-2024-37370",
-                      "https://bugzilla.redhat.com/2294676",
-                      "https://bugzilla.redhat.com/2294677",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2294676",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2294677",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-37370",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-37371",
-                      "https://errata.almalinux.org/8/ALSA-2024-5312.html",
-                      "https://errata.rockylinux.org/RLSA-2024:5312",
-                      "https://github.com/krb5/krb5/commit/55fbf435edbe2e92dd8101669b1ce7144bc96fef",
-                      "https://linux.oracle.com/cve/CVE-2024-37370.html",
-                      "https://linux.oracle.com/errata/ELSA-2024-6166.html",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2024-37370",
-                      "https://security.netapp.com/advisory/ntap-20241108-0007/",
-                      "https://ubuntu.com/security/notices/USN-6947-1",
-                      "https://web.mit.edu/kerberos/www/advisories/",
-                      "https://web.mit.edu/kerberos/www/krb5-1.21/",
-                      "https://www.cve.org/CVERecord?id=CVE-2024-37370"
-                    ],
-                    "severity": "HIGH",
-                    "suppressed": false,
-                    "title": "krb5: GSS message token handling"
-                  },
-                  {
-                    "cve": "CVE-2025-24528",
-                    "cvss": {
-                      "redhat": {
-                        "v3score": "6.5",
-                        "v3vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-190"
-                    ],
-                    "description": "In MIT Kerberos 5 (aka krb5) before 1.22 (with incremental propagation), there is an integer overflow for a large update size to resize() in kdb_log.c. An authenticated attacker can cause an out-of-bounds write and kadmind daemon crash.",
-                    "diffID": "sha256:420179ad2efafbf953a0c75f68a4c9dfaf38a98643df97d415bce49b179895f7",
-                    "fixedVersions": [
-                      "1.18.3-6+deb11u6"
-                    ],
-                    "installedVersion": "1.18.3-6+deb11u4",
-                    "packageName": "libkrb5-3",
-                    "purl": "pkg:deb/debian/libkrb5-3@1.18.3-6%2Bdeb11u4?arch=amd64&distro=debian-11.9",
-                    "references": [
-                      "https://access.redhat.com/errata/RHSA-2025:2722",
-                      "https://access.redhat.com/security/cve/CVE-2025-24528",
-                      "https://bugzilla.redhat.com/2342796",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2342796",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-24528",
-                      "https://errata.almalinux.org/8/ALSA-2025-2722.html",
-                      "https://errata.rockylinux.org/RLSA-2025:7067",
-                      "https://github.com/krb5/krb5/commit/78ceba024b64d49612375be4a12d1c066b0bfbd0",
-                      "https://github.com/krb5/krb5/compare/krb5-1.21.3-final...krb5-1.22-final",
-                      "https://linux.oracle.com/cve/CVE-2025-24528.html",
-                      "https://linux.oracle.com/errata/ELSA-2025-7067.html",
-                      "https://lists.debian.org/debian-lts-announce/2025/02/msg00029.html",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2025-24528",
-                      "https://ubuntu.com/security/notices/USN-7314-1",
-                      "https://www.cve.org/CVERecord?id=CVE-2025-24528"
-                    ],
-                    "severity": "MEDIUM",
-                    "suppressed": false,
-                    "title": "krb5: overflow when calculating ulog block size"
-                  },
-                  {
-                    "cve": "CVE-2025-3576",
-                    "cvss": {
-                      "redhat": {
-                        "v3score": "5.9",
-                        "v3vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-328"
-                    ],
-                    "description": "A vulnerability in the MIT Kerberos implementation allows GSSAPI-protected messages using RC4-HMAC-MD5 to be spoofed due to weaknesses in the MD5 checksum design. If RC4 is preferred over stronger encryption types, an attacker could exploit MD5 collisions to forge message integrity codes. This may lead to unauthorized message tampering.",
-                    "diffID": "sha256:420179ad2efafbf953a0c75f68a4c9dfaf38a98643df97d415bce49b179895f7",
-                    "fixedVersions": [
-                      "1.18.3-6+deb11u7"
-                    ],
-                    "installedVersion": "1.18.3-6+deb11u4",
-                    "packageName": "libkrb5-3",
-                    "purl": "pkg:deb/debian/libkrb5-3@1.18.3-6%2Bdeb11u4?arch=amd64&distro=debian-11.9",
-                    "references": [
-                      "https://access.redhat.com/errata/RHSA-2025:11487",
-                      "https://access.redhat.com/errata/RHSA-2025:13664",
-                      "https://access.redhat.com/errata/RHSA-2025:13777",
-                      "https://access.redhat.com/errata/RHSA-2025:15000",
-                      "https://access.redhat.com/errata/RHSA-2025:15001",
-                      "https://access.redhat.com/errata/RHSA-2025:15002",
-                      "https://access.redhat.com/errata/RHSA-2025:15003",
-                      "https://access.redhat.com/errata/RHSA-2025:15004",
-                      "https://access.redhat.com/errata/RHSA-2025:8411",
-                      "https://access.redhat.com/errata/RHSA-2025:9418",
-                      "https://access.redhat.com/errata/RHSA-2025:9430",
-                      "https://access.redhat.com/security/cve/CVE-2025-3576",
-                      "https://bugzilla.redhat.com/2359465",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2359465",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-3576",
-                      "https://errata.almalinux.org/8/ALSA-2025-8411.html",
-                      "https://errata.rockylinux.org/RLSA-2025:9430",
-                      "https://linux.oracle.com/cve/CVE-2025-3576.html",
-                      "https://linux.oracle.com/errata/ELSA-2025-9430.html",
-                      "https://lists.debian.org/debian-lts-announce/2025/05/msg00047.html",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2025-3576",
-                      "https://ubuntu.com/security/notices/USN-7542-1",
-                      "https://web.mit.edu/kerberos/krb5-1.22/krb5-1.22.html",
-                      "https://www.cve.org/CVERecord?id=CVE-2025-3576"
-                    ],
-                    "severity": "MEDIUM",
-                    "suppressed": false,
-                    "title": "krb5: Kerberos RC4-HMAC-MD5 Checksum Vulnerability Enabling Message Spoofing via MD5 Collisions"
-                  },
-                  {
-                    "cve": "CVE-2018-5709",
-                    "cvss": {
-                      "nvd": {
-                        "v3score": "7.5",
-                        "v3vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N"
-                      },
-                      "redhat": {
-                        "v3score": "6.3",
-                        "v3vector": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-190"
-                    ],
-                    "description": "An issue was discovered in MIT Kerberos 5 (aka krb5) through 1.16. There is a variable \"dbentry->n_key_data\" in kadmin/dbutil/dump.c that can store 16-bit data but unknowingly the developer has assigned a \"u4\" variable to it, which is for 32-bit data. An attacker can use this vulnerability to affect other artifacts of the database as we know that a Kerberos database dump file contains trusted data.",
-                    "diffID": "sha256:420179ad2efafbf953a0c75f68a4c9dfaf38a98643df97d415bce49b179895f7",
-                    "installedVersion": "1.18.3-6+deb11u4",
-                    "packageName": "libkrb5-3",
-                    "purl": "pkg:deb/debian/libkrb5-3@1.18.3-6%2Bdeb11u4?arch=amd64&distro=debian-11.9",
-                    "references": [
-                      "https://access.redhat.com/security/cve/CVE-2018-5709",
-                      "https://github.com/poojamnit/Kerberos-V5-1.16-Vulnerabilities/tree/master/Integer%20Overflow",
-                      "https://lists.apache.org/thread.html/rf9fa47ab66495c78bb4120b0754dd9531ca2ff0430f6685ac9b07772%40%3Cdev.mina.apache.org%3E",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2018-5709",
-                      "https://www.cve.org/CVERecord?id=CVE-2018-5709"
-                    ],
-                    "severity": "LOW",
-                    "suppressed": false,
-                    "title": "krb5: integer overflow in dbentry->n_key_data in kadmin/dbutil/dump.c"
-                  },
-                  {
-                    "cve": "CVE-2024-26458",
-                    "cvss": {
-                      "redhat": {
-                        "v3score": "5.9",
-                        "v3vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-401"
-                    ],
-                    "description": "Kerberos 5 (aka krb5) 1.21.2 contains a memory leak in /krb5/src/lib/rpc/pmap_rmt.c.",
-                    "diffID": "sha256:420179ad2efafbf953a0c75f68a4c9dfaf38a98643df97d415bce49b179895f7",
-                    "installedVersion": "1.18.3-6+deb11u4",
-                    "packageName": "libkrb5-3",
-                    "purl": "pkg:deb/debian/libkrb5-3@1.18.3-6%2Bdeb11u4?arch=amd64&distro=debian-11.9",
-                    "references": [
-                      "https://access.redhat.com/errata/RHSA-2024:3268",
-                      "https://access.redhat.com/security/cve/CVE-2024-26458",
-                      "https://bugzilla.redhat.com/2266731",
-                      "https://bugzilla.redhat.com/2266740",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2266731",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2266740",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26458",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26461",
-                      "https://errata.almalinux.org/8/ALSA-2024-3268.html",
-                      "https://errata.rockylinux.org/RLSA-2024:3268",
-                      "https://github.com/LuMingYinDetect/krb5_defects/blob/main/krb5_detect_1.md",
-                      "https://linux.oracle.com/cve/CVE-2024-26458.html",
-                      "https://linux.oracle.com/errata/ELSA-2024-9331.html",
-                      "https://mailman.mit.edu/pipermail/kerberos/2024-March/023095.html",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2024-26458",
-                      "https://security.netapp.com/advisory/ntap-20240415-0010/",
-                      "https://ubuntu.com/security/notices/USN-7314-1",
-                      "https://www.cve.org/CVERecord?id=CVE-2024-26458"
-                    ],
-                    "severity": "LOW",
-                    "suppressed": false,
-                    "title": "krb5: Memory leak at /krb5/src/lib/rpc/pmap_rmt.c"
-                  },
-                  {
-                    "cve": "CVE-2024-26461",
-                    "cvss": {
-                      "redhat": {
-                        "v3score": "5.9",
-                        "v3vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-770"
-                    ],
-                    "description": "Kerberos 5 (aka krb5) 1.21.2 contains a memory leak vulnerability in /krb5/src/lib/gssapi/krb5/k5sealv3.c.",
-                    "diffID": "sha256:420179ad2efafbf953a0c75f68a4c9dfaf38a98643df97d415bce49b179895f7",
-                    "installedVersion": "1.18.3-6+deb11u4",
-                    "packageName": "libkrb5-3",
-                    "purl": "pkg:deb/debian/libkrb5-3@1.18.3-6%2Bdeb11u4?arch=amd64&distro=debian-11.9",
-                    "references": [
-                      "https://access.redhat.com/errata/RHSA-2024:3268",
-                      "https://access.redhat.com/security/cve/CVE-2024-26461",
-                      "https://bugzilla.redhat.com/2266731",
-                      "https://bugzilla.redhat.com/2266740",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2266731",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2266740",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26458",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26461",
-                      "https://errata.almalinux.org/8/ALSA-2024-3268.html",
-                      "https://errata.rockylinux.org/RLSA-2024:3268",
-                      "https://github.com/LuMingYinDetect/krb5_defects/blob/main/krb5_detect_2.md",
-                      "https://linux.oracle.com/cve/CVE-2024-26461.html",
-                      "https://linux.oracle.com/errata/ELSA-2024-9331.html",
-                      "https://mailman.mit.edu/pipermail/kerberos/2024-March/023095.html",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2024-26461",
-                      "https://security.netapp.com/advisory/ntap-20240415-0011/",
-                      "https://ubuntu.com/security/notices/USN-7314-1",
-                      "https://www.cve.org/CVERecord?id=CVE-2024-26461"
-                    ],
-                    "severity": "LOW",
-                    "suppressed": false,
-                    "title": "krb5: Memory leak at /krb5/src/lib/gssapi/krb5/k5sealv3.c"
-                  },
-                  {
-                    "cve": "CVE-2024-37371",
-                    "cvss": {
-                      "nvd": {
-                        "v3score": "9.1",
-                        "v3vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H"
-                      },
-                      "redhat": {
-                        "v3score": "6.5",
-                        "v3vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-125"
-                    ],
-                    "description": "In MIT Kerberos 5 (aka krb5) before 1.21.3, an attacker can cause invalid memory reads during GSS message token handling by sending message tokens with invalid length fields.",
-                    "diffID": "sha256:420179ad2efafbf953a0c75f68a4c9dfaf38a98643df97d415bce49b179895f7",
-                    "fixedVersions": [
-                      "1.18.3-6+deb11u5"
-                    ],
-                    "installedVersion": "1.18.3-6+deb11u4",
-                    "packageName": "libkrb5support0",
-                    "purl": "pkg:deb/debian/libkrb5support0@1.18.3-6%2Bdeb11u4?arch=amd64&distro=debian-11.9",
-                    "references": [
-                      "https://access.redhat.com/errata/RHSA-2025:1673",
-                      "https://access.redhat.com/security/cve/CVE-2024-37371",
-                      "https://bugzilla.redhat.com/2294581",
-                      "https://bugzilla.redhat.com/2294676",
-                      "https://bugzilla.redhat.com/2301888",
-                      "https://bugzilla.redhat.com/2318857",
-                      "https://bugzilla.redhat.com/2318858",
-                      "https://bugzilla.redhat.com/2318870",
-                      "https://bugzilla.redhat.com/2318873",
-                      "https://bugzilla.redhat.com/2318874",
-                      "https://bugzilla.redhat.com/2318876",
-                      "https://bugzilla.redhat.com/2318882",
-                      "https://bugzilla.redhat.com/2318883",
-                      "https://bugzilla.redhat.com/2318884",
-                      "https://bugzilla.redhat.com/2318885",
-                      "https://bugzilla.redhat.com/2318886",
-                      "https://bugzilla.redhat.com/2318897",
-                      "https://bugzilla.redhat.com/2318900",
-                      "https://bugzilla.redhat.com/2318905",
-                      "https://bugzilla.redhat.com/2318914",
-                      "https://bugzilla.redhat.com/2318922",
-                      "https://bugzilla.redhat.com/2318923",
-                      "https://bugzilla.redhat.com/2318925",
-                      "https://bugzilla.redhat.com/2318926",
-                      "https://bugzilla.redhat.com/2318927",
-                      "https://bugzilla.redhat.com/2331191",
-                      "https://bugzilla.redhat.com/2339218",
-                      "https://bugzilla.redhat.com/2339220",
-                      "https://bugzilla.redhat.com/2339221",
-                      "https://bugzilla.redhat.com/2339226",
-                      "https://bugzilla.redhat.com/2339231",
-                      "https://bugzilla.redhat.com/2339236",
-                      "https://bugzilla.redhat.com/2339238",
-                      "https://bugzilla.redhat.com/2339243",
-                      "https://bugzilla.redhat.com/2339247",
-                      "https://bugzilla.redhat.com/2339252",
-                      "https://bugzilla.redhat.com/2339259",
-                      "https://bugzilla.redhat.com/2339266",
-                      "https://bugzilla.redhat.com/2339270",
-                      "https://bugzilla.redhat.com/2339271",
-                      "https://bugzilla.redhat.com/2339275",
-                      "https://bugzilla.redhat.com/2339277",
-                      "https://bugzilla.redhat.com/2339281",
-                      "https://bugzilla.redhat.com/2339284",
-                      "https://bugzilla.redhat.com/2339291",
-                      "https://bugzilla.redhat.com/2339293",
-                      "https://bugzilla.redhat.com/2339295",
-                      "https://bugzilla.redhat.com/2339299",
-                      "https://bugzilla.redhat.com/2339300",
-                      "https://bugzilla.redhat.com/2339304",
-                      "https://bugzilla.redhat.com/2339305",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2294581",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2294676",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2301888",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2318857",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2318858",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2318870",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2318873",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2318874",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2318876",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2318882",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2318883",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2318884",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2318885",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2318886",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2318897",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2318900",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2318905",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2318914",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2318922",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2318923",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2318925",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2318926",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2318927",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2331191",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2339218",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2339220",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2339221",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2339226",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2339231",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2339236",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2339238",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2339243",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2339247",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2339252",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2339259",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2339266",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2339270",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2339271",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2339275",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2339277",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2339281",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2339284",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2339291",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2339293",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2339295",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2339299",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2339300",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2339304",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2339305",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-11053",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-21193",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-21194",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-21196",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-21197",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-21198",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-21199",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-21201",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-21203",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-21212",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-21213",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-21218",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-21219",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-21230",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-21231",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-21236",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-21237",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-21238",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-21239",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-21241",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-21247",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-37371",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-5535",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-7264",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21490",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21491",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21494",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21497",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21500",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21501",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21503",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21504",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21505",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21518",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21519",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21520",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21521",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21522",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21523",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21525",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21529",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21531",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21534",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21536",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21540",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21543",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21546",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21555",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21559",
-                      "https://errata.almalinux.org/8/ALSA-2025-1673.html",
-                      "https://errata.rockylinux.org/RLSA-2025:1671",
-                      "https://github.com/krb5/krb5/commit/55fbf435edbe2e92dd8101669b1ce7144bc96fef",
-                      "https://linux.oracle.com/cve/CVE-2024-37371.html",
-                      "https://linux.oracle.com/errata/ELSA-2025-1673.html",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2024-37371",
-                      "https://security.netapp.com/advisory/ntap-20241108-0009/",
-                      "https://security.netapp.com/advisory/ntap-20250124-0010/",
-                      "https://ubuntu.com/security/notices/USN-6947-1",
-                      "https://web.mit.edu/kerberos/www/advisories/",
-                      "https://web.mit.edu/kerberos/www/krb5-1.21/",
-                      "https://www.cve.org/CVERecord?id=CVE-2024-37371",
-                      "https://www.oracle.com/security-alerts/cpujan2025.html#AppendixMSQL"
-                    ],
-                    "severity": "CRITICAL",
-                    "suppressed": false,
-                    "title": "krb5: GSS message token handling"
-                  },
-                  {
-                    "cve": "CVE-2024-37370",
-                    "cvss": {
-                      "nvd": {
-                        "v3score": "7.5",
-                        "v3vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N"
-                      },
-                      "redhat": {
-                        "v3score": "7.5",
-                        "v3vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-345"
-                    ],
-                    "description": "In MIT Kerberos 5 (aka krb5) before 1.21.3, an attacker can modify the plaintext Extra Count field of a confidential GSS krb5 wrap token, causing the unwrapped token to appear truncated to the application.",
-                    "diffID": "sha256:420179ad2efafbf953a0c75f68a4c9dfaf38a98643df97d415bce49b179895f7",
-                    "fixedVersions": [
-                      "1.18.3-6+deb11u5"
-                    ],
-                    "installedVersion": "1.18.3-6+deb11u4",
-                    "packageName": "libkrb5support0",
-                    "purl": "pkg:deb/debian/libkrb5support0@1.18.3-6%2Bdeb11u4?arch=amd64&distro=debian-11.9",
-                    "references": [
-                      "https://access.redhat.com/errata/RHSA-2024:5312",
-                      "https://access.redhat.com/security/cve/CVE-2024-37370",
-                      "https://bugzilla.redhat.com/2294676",
-                      "https://bugzilla.redhat.com/2294677",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2294676",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2294677",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-37370",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-37371",
-                      "https://errata.almalinux.org/8/ALSA-2024-5312.html",
-                      "https://errata.rockylinux.org/RLSA-2024:5312",
-                      "https://github.com/krb5/krb5/commit/55fbf435edbe2e92dd8101669b1ce7144bc96fef",
-                      "https://linux.oracle.com/cve/CVE-2024-37370.html",
-                      "https://linux.oracle.com/errata/ELSA-2024-6166.html",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2024-37370",
-                      "https://security.netapp.com/advisory/ntap-20241108-0007/",
-                      "https://ubuntu.com/security/notices/USN-6947-1",
-                      "https://web.mit.edu/kerberos/www/advisories/",
-                      "https://web.mit.edu/kerberos/www/krb5-1.21/",
-                      "https://www.cve.org/CVERecord?id=CVE-2024-37370"
-                    ],
-                    "severity": "HIGH",
-                    "suppressed": false,
-                    "title": "krb5: GSS message token handling"
-                  },
-                  {
-                    "cve": "CVE-2025-24528",
-                    "cvss": {
-                      "redhat": {
-                        "v3score": "6.5",
-                        "v3vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-190"
-                    ],
-                    "description": "In MIT Kerberos 5 (aka krb5) before 1.22 (with incremental propagation), there is an integer overflow for a large update size to resize() in kdb_log.c. An authenticated attacker can cause an out-of-bounds write and kadmind daemon crash.",
-                    "diffID": "sha256:420179ad2efafbf953a0c75f68a4c9dfaf38a98643df97d415bce49b179895f7",
-                    "fixedVersions": [
-                      "1.18.3-6+deb11u6"
-                    ],
-                    "installedVersion": "1.18.3-6+deb11u4",
-                    "packageName": "libkrb5support0",
-                    "purl": "pkg:deb/debian/libkrb5support0@1.18.3-6%2Bdeb11u4?arch=amd64&distro=debian-11.9",
-                    "references": [
-                      "https://access.redhat.com/errata/RHSA-2025:2722",
-                      "https://access.redhat.com/security/cve/CVE-2025-24528",
-                      "https://bugzilla.redhat.com/2342796",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2342796",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-24528",
-                      "https://errata.almalinux.org/8/ALSA-2025-2722.html",
-                      "https://errata.rockylinux.org/RLSA-2025:7067",
-                      "https://github.com/krb5/krb5/commit/78ceba024b64d49612375be4a12d1c066b0bfbd0",
-                      "https://github.com/krb5/krb5/compare/krb5-1.21.3-final...krb5-1.22-final",
-                      "https://linux.oracle.com/cve/CVE-2025-24528.html",
-                      "https://linux.oracle.com/errata/ELSA-2025-7067.html",
-                      "https://lists.debian.org/debian-lts-announce/2025/02/msg00029.html",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2025-24528",
-                      "https://ubuntu.com/security/notices/USN-7314-1",
-                      "https://www.cve.org/CVERecord?id=CVE-2025-24528"
-                    ],
-                    "severity": "MEDIUM",
-                    "suppressed": false,
-                    "title": "krb5: overflow when calculating ulog block size"
-                  },
-                  {
-                    "cve": "CVE-2025-3576",
-                    "cvss": {
-                      "redhat": {
-                        "v3score": "5.9",
-                        "v3vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-328"
-                    ],
-                    "description": "A vulnerability in the MIT Kerberos implementation allows GSSAPI-protected messages using RC4-HMAC-MD5 to be spoofed due to weaknesses in the MD5 checksum design. If RC4 is preferred over stronger encryption types, an attacker could exploit MD5 collisions to forge message integrity codes. This may lead to unauthorized message tampering.",
-                    "diffID": "sha256:420179ad2efafbf953a0c75f68a4c9dfaf38a98643df97d415bce49b179895f7",
-                    "fixedVersions": [
-                      "1.18.3-6+deb11u7"
-                    ],
-                    "installedVersion": "1.18.3-6+deb11u4",
-                    "packageName": "libkrb5support0",
-                    "purl": "pkg:deb/debian/libkrb5support0@1.18.3-6%2Bdeb11u4?arch=amd64&distro=debian-11.9",
-                    "references": [
-                      "https://access.redhat.com/errata/RHSA-2025:11487",
-                      "https://access.redhat.com/errata/RHSA-2025:13664",
-                      "https://access.redhat.com/errata/RHSA-2025:13777",
-                      "https://access.redhat.com/errata/RHSA-2025:15000",
-                      "https://access.redhat.com/errata/RHSA-2025:15001",
-                      "https://access.redhat.com/errata/RHSA-2025:15002",
-                      "https://access.redhat.com/errata/RHSA-2025:15003",
-                      "https://access.redhat.com/errata/RHSA-2025:15004",
-                      "https://access.redhat.com/errata/RHSA-2025:8411",
-                      "https://access.redhat.com/errata/RHSA-2025:9418",
-                      "https://access.redhat.com/errata/RHSA-2025:9430",
-                      "https://access.redhat.com/security/cve/CVE-2025-3576",
-                      "https://bugzilla.redhat.com/2359465",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2359465",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-3576",
-                      "https://errata.almalinux.org/8/ALSA-2025-8411.html",
-                      "https://errata.rockylinux.org/RLSA-2025:9430",
-                      "https://linux.oracle.com/cve/CVE-2025-3576.html",
-                      "https://linux.oracle.com/errata/ELSA-2025-9430.html",
-                      "https://lists.debian.org/debian-lts-announce/2025/05/msg00047.html",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2025-3576",
-                      "https://ubuntu.com/security/notices/USN-7542-1",
-                      "https://web.mit.edu/kerberos/krb5-1.22/krb5-1.22.html",
-                      "https://www.cve.org/CVERecord?id=CVE-2025-3576"
-                    ],
-                    "severity": "MEDIUM",
-                    "suppressed": false,
-                    "title": "krb5: Kerberos RC4-HMAC-MD5 Checksum Vulnerability Enabling Message Spoofing via MD5 Collisions"
-                  },
-                  {
-                    "cve": "CVE-2018-5709",
-                    "cvss": {
-                      "nvd": {
-                        "v3score": "7.5",
-                        "v3vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N"
-                      },
-                      "redhat": {
-                        "v3score": "6.3",
-                        "v3vector": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-190"
-                    ],
-                    "description": "An issue was discovered in MIT Kerberos 5 (aka krb5) through 1.16. There is a variable \"dbentry->n_key_data\" in kadmin/dbutil/dump.c that can store 16-bit data but unknowingly the developer has assigned a \"u4\" variable to it, which is for 32-bit data. An attacker can use this vulnerability to affect other artifacts of the database as we know that a Kerberos database dump file contains trusted data.",
-                    "diffID": "sha256:420179ad2efafbf953a0c75f68a4c9dfaf38a98643df97d415bce49b179895f7",
-                    "installedVersion": "1.18.3-6+deb11u4",
-                    "packageName": "libkrb5support0",
-                    "purl": "pkg:deb/debian/libkrb5support0@1.18.3-6%2Bdeb11u4?arch=amd64&distro=debian-11.9",
-                    "references": [
-                      "https://access.redhat.com/security/cve/CVE-2018-5709",
-                      "https://github.com/poojamnit/Kerberos-V5-1.16-Vulnerabilities/tree/master/Integer%20Overflow",
-                      "https://lists.apache.org/thread.html/rf9fa47ab66495c78bb4120b0754dd9531ca2ff0430f6685ac9b07772%40%3Cdev.mina.apache.org%3E",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2018-5709",
-                      "https://www.cve.org/CVERecord?id=CVE-2018-5709"
-                    ],
-                    "severity": "LOW",
-                    "suppressed": false,
-                    "title": "krb5: integer overflow in dbentry->n_key_data in kadmin/dbutil/dump.c"
-                  },
-                  {
-                    "cve": "CVE-2024-26458",
-                    "cvss": {
-                      "redhat": {
-                        "v3score": "5.9",
-                        "v3vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-401"
-                    ],
-                    "description": "Kerberos 5 (aka krb5) 1.21.2 contains a memory leak in /krb5/src/lib/rpc/pmap_rmt.c.",
-                    "diffID": "sha256:420179ad2efafbf953a0c75f68a4c9dfaf38a98643df97d415bce49b179895f7",
-                    "installedVersion": "1.18.3-6+deb11u4",
-                    "packageName": "libkrb5support0",
-                    "purl": "pkg:deb/debian/libkrb5support0@1.18.3-6%2Bdeb11u4?arch=amd64&distro=debian-11.9",
-                    "references": [
-                      "https://access.redhat.com/errata/RHSA-2024:3268",
-                      "https://access.redhat.com/security/cve/CVE-2024-26458",
-                      "https://bugzilla.redhat.com/2266731",
-                      "https://bugzilla.redhat.com/2266740",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2266731",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2266740",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26458",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26461",
-                      "https://errata.almalinux.org/8/ALSA-2024-3268.html",
-                      "https://errata.rockylinux.org/RLSA-2024:3268",
-                      "https://github.com/LuMingYinDetect/krb5_defects/blob/main/krb5_detect_1.md",
-                      "https://linux.oracle.com/cve/CVE-2024-26458.html",
-                      "https://linux.oracle.com/errata/ELSA-2024-9331.html",
-                      "https://mailman.mit.edu/pipermail/kerberos/2024-March/023095.html",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2024-26458",
-                      "https://security.netapp.com/advisory/ntap-20240415-0010/",
-                      "https://ubuntu.com/security/notices/USN-7314-1",
-                      "https://www.cve.org/CVERecord?id=CVE-2024-26458"
-                    ],
-                    "severity": "LOW",
-                    "suppressed": false,
-                    "title": "krb5: Memory leak at /krb5/src/lib/rpc/pmap_rmt.c"
-                  },
-                  {
-                    "cve": "CVE-2024-26461",
-                    "cvss": {
-                      "redhat": {
-                        "v3score": "5.9",
-                        "v3vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-770"
-                    ],
-                    "description": "Kerberos 5 (aka krb5) 1.21.2 contains a memory leak vulnerability in /krb5/src/lib/gssapi/krb5/k5sealv3.c.",
-                    "diffID": "sha256:420179ad2efafbf953a0c75f68a4c9dfaf38a98643df97d415bce49b179895f7",
-                    "installedVersion": "1.18.3-6+deb11u4",
-                    "packageName": "libkrb5support0",
-                    "purl": "pkg:deb/debian/libkrb5support0@1.18.3-6%2Bdeb11u4?arch=amd64&distro=debian-11.9",
-                    "references": [
-                      "https://access.redhat.com/errata/RHSA-2024:3268",
-                      "https://access.redhat.com/security/cve/CVE-2024-26461",
-                      "https://bugzilla.redhat.com/2266731",
-                      "https://bugzilla.redhat.com/2266740",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2266731",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2266740",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26458",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26461",
-                      "https://errata.almalinux.org/8/ALSA-2024-3268.html",
-                      "https://errata.rockylinux.org/RLSA-2024:3268",
-                      "https://github.com/LuMingYinDetect/krb5_defects/blob/main/krb5_detect_2.md",
-                      "https://linux.oracle.com/cve/CVE-2024-26461.html",
-                      "https://linux.oracle.com/errata/ELSA-2024-9331.html",
-                      "https://mailman.mit.edu/pipermail/kerberos/2024-March/023095.html",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2024-26461",
-                      "https://security.netapp.com/advisory/ntap-20240415-0011/",
-                      "https://ubuntu.com/security/notices/USN-7314-1",
-                      "https://www.cve.org/CVERecord?id=CVE-2024-26461"
-                    ],
-                    "severity": "LOW",
-                    "suppressed": false,
-                    "title": "krb5: Memory leak at /krb5/src/lib/gssapi/krb5/k5sealv3.c"
-                  },
-                  {
-                    "cve": "CVE-2023-2953",
-                    "cvss": {
-                      "bitnami": {
-                        "v3score": "7.5",
-                        "v3vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"
-                      },
-                      "nvd": {
-                        "v3score": "7.5",
-                        "v3vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"
-                      },
-                      "redhat": {
-                        "v3score": "7.1",
-                        "v3vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:H"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-476"
-                    ],
-                    "description": "A vulnerability was found in openldap. This security flaw causes a null pointer dereference in ber_memalloc_x() function.",
-                    "diffID": "sha256:9664c8c85da49d2cedf85c6b8af0e128318580b95b277b87593a4f75886148af",
-                    "installedVersion": "2.4.57+dfsg-3+deb11u1",
-                    "packageName": "libldap-2.4-2",
-                    "purl": "pkg:deb/debian/libldap-2.4-2@2.4.57%2Bdfsg-3%2Bdeb11u1?arch=amd64&distro=debian-11.9",
-                    "references": [
-                      "http://seclists.org/fulldisclosure/2023/Jul/47",
-                      "http://seclists.org/fulldisclosure/2023/Jul/48",
-                      "http://seclists.org/fulldisclosure/2023/Jul/52",
-                      "https://access.redhat.com/errata/RHSA-2024:4264",
-                      "https://access.redhat.com/security/cve/CVE-2023-2953",
-                      "https://bugs.openldap.org/show_bug.cgi?id=9904",
-                      "https://bugzilla.redhat.com/2210651",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2210651",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-2953",
-                      "https://errata.almalinux.org/8/ALSA-2024-4264.html",
-                      "https://errata.rockylinux.org/RLSA-2024:4264",
-                      "https://linux.oracle.com/cve/CVE-2023-2953.html",
-                      "https://linux.oracle.com/errata/ELSA-2024-4264.html",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2023-2953",
-                      "https://security.netapp.com/advisory/ntap-20230703-0005/",
-                      "https://support.apple.com/kb/HT213843",
-                      "https://support.apple.com/kb/HT213844",
-                      "https://support.apple.com/kb/HT213845",
-                      "https://ubuntu.com/security/notices/USN-6197-1",
-                      "https://ubuntu.com/security/notices/USN-6616-1",
-                      "https://www.cve.org/CVERecord?id=CVE-2023-2953"
-                    ],
-                    "severity": "HIGH",
-                    "suppressed": false,
-                    "title": "openldap: null pointer dereference in  ber_memalloc_x  function"
-                  },
-                  {
-                    "cve": "CVE-2015-3276",
-                    "cvss": {
-                      "nvd": {
-                        "v3score": "7.5",
-                        "v3vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N"
-                      },
-                      "redhat": {
-                        "v3score": "0",
-                        "v3vector": ""
-                      }
-                    },
-                    "description": "The nss_parse_ciphers function in libraries/libldap/tls_m.c in OpenLDAP does not properly parse OpenSSL-style multi-keyword mode cipher strings, which might cause a weaker than intended cipher to be used and allow remote attackers to have unspecified impact via unknown vectors.",
-                    "diffID": "sha256:9664c8c85da49d2cedf85c6b8af0e128318580b95b277b87593a4f75886148af",
-                    "installedVersion": "2.4.57+dfsg-3+deb11u1",
-                    "packageName": "libldap-2.4-2",
-                    "purl": "pkg:deb/debian/libldap-2.4-2@2.4.57%2Bdfsg-3%2Bdeb11u1?arch=amd64&distro=debian-11.9",
-                    "references": [
-                      "http://rhn.redhat.com/errata/RHSA-2015-2131.html",
-                      "http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html",
-                      "http://www.securitytracker.com/id/1034221",
-                      "https://access.redhat.com/security/cve/CVE-2015-3276",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=1238322",
-                      "https://linux.oracle.com/cve/CVE-2015-3276.html",
-                      "https://linux.oracle.com/errata/ELSA-2015-2131.html",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2015-3276",
-                      "https://www.cve.org/CVERecord?id=CVE-2015-3276"
-                    ],
-                    "severity": "LOW",
-                    "suppressed": false,
-                    "title": "openldap: incorrect multi-keyword mode cipherstring parsing"
-                  },
-                  {
-                    "cve": "CVE-2017-14159",
-                    "cvss": {
-                      "nvd": {
-                        "v3score": "4.7",
-                        "v3vector": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H"
-                      },
-                      "redhat": {
-                        "v3score": "4.4",
-                        "v3vector": "CVSS:3.0/AV:L/AC:H/PR:L/UI:R/S:U/C:N/I:N/A:H"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-665"
-                    ],
-                    "description": "slapd in OpenLDAP 2.4.45 and earlier creates a PID file after dropping privileges to a non-root account, which might allow local users to kill arbitrary processes by leveraging access to this non-root account for PID file modification before a root script executes a \"kill `cat /pathname`\" command, as demonstrated by openldap-initscript.",
-                    "diffID": "sha256:9664c8c85da49d2cedf85c6b8af0e128318580b95b277b87593a4f75886148af",
-                    "installedVersion": "2.4.57+dfsg-3+deb11u1",
-                    "packageName": "libldap-2.4-2",
-                    "purl": "pkg:deb/debian/libldap-2.4-2@2.4.57%2Bdfsg-3%2Bdeb11u1?arch=amd64&distro=debian-11.9",
-                    "references": [
-                      "http://www.openldap.org/its/index.cgi?findid=8703",
-                      "https://access.redhat.com/security/cve/CVE-2017-14159",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2017-14159",
-                      "https://www.cve.org/CVERecord?id=CVE-2017-14159",
-                      "https://www.oracle.com/security-alerts/cpuapr2022.html"
-                    ],
-                    "severity": "LOW",
-                    "suppressed": false,
-                    "title": "openldap: Privilege escalation via PID file manipulation"
-                  },
-                  {
-                    "cve": "CVE-2017-17740",
-                    "cvss": {
-                      "nvd": {
-                        "v3score": "7.5",
-                        "v3vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"
-                      },
-                      "redhat": {
-                        "v3score": "5.9",
-                        "v3vector": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-119"
-                    ],
-                    "description": "contrib/slapd-modules/nops/nops.c in OpenLDAP through 2.4.45, when both the nops module and the memberof overlay are enabled, attempts to free a buffer that was allocated on the stack, which allows remote attackers to cause a denial of service (slapd crash) via a member MODDN operation.",
-                    "diffID": "sha256:9664c8c85da49d2cedf85c6b8af0e128318580b95b277b87593a4f75886148af",
-                    "installedVersion": "2.4.57+dfsg-3+deb11u1",
-                    "packageName": "libldap-2.4-2",
-                    "purl": "pkg:deb/debian/libldap-2.4-2@2.4.57%2Bdfsg-3%2Bdeb11u1?arch=amd64&distro=debian-11.9",
-                    "references": [
-                      "http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00053.html",
-                      "http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00058.html",
-                      "http://www.openldap.org/its/index.cgi/Incoming?id=8759",
-                      "https://access.redhat.com/security/cve/CVE-2017-17740",
-                      "https://kc.mcafee.com/corporate/index?page=content&id=SB10365",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2017-17740",
-                      "https://www.cve.org/CVERecord?id=CVE-2017-17740",
-                      "https://www.oracle.com/security-alerts/cpuapr2022.html"
-                    ],
-                    "severity": "LOW",
-                    "suppressed": false,
-                    "title": "openldap: contrib/slapd-modules/nops/nops.c attempts to free stack buffer allowing remote attackers to cause a denial of service"
-                  },
-                  {
-                    "cve": "CVE-2020-15719",
-                    "cvss": {
-                      "bitnami": {
-                        "v3score": "4.2",
-                        "v3vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N"
-                      },
-                      "nvd": {
-                        "v3score": "4.2",
-                        "v3vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N"
-                      },
-                      "redhat": {
-                        "v3score": "4.2",
-                        "v3vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-295"
-                    ],
-                    "description": "libldap in certain third-party OpenLDAP packages has a certificate-validation flaw when the third-party package is asserting RFC6125 support. It considers CN even when there is a non-matching subjectAltName (SAN). This is fixed in, for example, openldap-2.4.46-10.el8 in Red Hat Enterprise Linux.",
-                    "diffID": "sha256:9664c8c85da49d2cedf85c6b8af0e128318580b95b277b87593a4f75886148af",
-                    "installedVersion": "2.4.57+dfsg-3+deb11u1",
-                    "packageName": "libldap-2.4-2",
-                    "purl": "pkg:deb/debian/libldap-2.4-2@2.4.57%2Bdfsg-3%2Bdeb11u1?arch=amd64&distro=debian-11.9",
-                    "references": [
-                      "http://lists.opensuse.org/opensuse-security-announce/2020-09/msg00033.html",
-                      "http://lists.opensuse.org/opensuse-security-announce/2020-09/msg00059.html",
-                      "https://access.redhat.com/errata/RHBA-2019:3674",
-                      "https://access.redhat.com/security/cve/CVE-2020-15719",
-                      "https://bugs.openldap.org/show_bug.cgi?id=9266",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=1740070",
-                      "https://kc.mcafee.com/corporate/index?page=content&id=SB10365",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2020-15719",
-                      "https://www.cve.org/CVERecord?id=CVE-2020-15719",
-                      "https://www.oracle.com/security-alerts/cpuapr2022.html"
-                    ],
-                    "severity": "LOW",
-                    "suppressed": false,
-                    "title": "openldap: Certificate validation incorrectly matches name against CN-ID"
-                  },
-                  {
-                    "cve": "CVE-2026-22185",
-                    "cvss": {
-                      "redhat": {
-                        "v3score": "6.8",
-                        "v3vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-125",
-                      "CWE-191"
-                    ],
-                    "description": "OpenLDAP Lightning Memory-Mapped Database (LMDB) versions up to and including 0.9.14, prior to commit 8e1fda8, contain a heap buffer underflow in the readline() function of mdb_load. When processing malformed input containing an embedded NUL byte, an unsigned offset calculation can underflow and cause an out-of-bounds read of one byte before the allocated heap buffer. This can cause mdb_load to crash, leading to a limited denial-of-service condition.",
-                    "diffID": "sha256:9664c8c85da49d2cedf85c6b8af0e128318580b95b277b87593a4f75886148af",
-                    "installedVersion": "2.4.57+dfsg-3+deb11u1",
-                    "packageName": "libldap-2.4-2",
-                    "purl": "pkg:deb/debian/libldap-2.4-2@2.4.57%2Bdfsg-3%2Bdeb11u1?arch=amd64&distro=debian-11.9",
-                    "references": [
-                      "https://access.redhat.com/security/cve/CVE-2026-22185",
-                      "https://bugs.openldap.org/show_bug.cgi?id=10421",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2026-22185",
-                      "https://seclists.org/fulldisclosure/2026/Jan/5",
-                      "https://seclists.org/fulldisclosure/2026/Jan/8",
-                      "https://www.cve.org/CVERecord?id=CVE-2026-22185",
-                      "https://www.openldap.org/",
-                      "https://www.vulncheck.com/advisories/openldap-lmdb-mdb-load-heap-buffer-underflow-in-readline"
-                    ],
-                    "severity": "LOW",
-                    "suppressed": false,
-                    "title": "OpenLDAP: OpenLDAP LMDB: Denial of Service and Information Disclosure via Heap Buffer Underflow"
-                  },
-                  {
-                    "cve": "CVE-2025-14104",
-                    "cvss": {
-                      "redhat": {
-                        "v3score": "6.1",
-                        "v3vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-125"
-                    ],
-                    "description": "A flaw was found in util-linux. This vulnerability allows a heap buffer overread when processing 256-byte usernames, specifically within the `setpwnam()` function, affecting SUID (Set User ID) login-utils utilities writing to the password database.",
-                    "diffID": "sha256:420179ad2efafbf953a0c75f68a4c9dfaf38a98643df97d415bce49b179895f7",
-                    "installedVersion": "2.36.1-8+deb11u2",
-                    "packageName": "libmount1",
-                    "purl": "pkg:deb/debian/libmount1@2.36.1-8%2Bdeb11u2?arch=amd64&distro=debian-11.9",
-                    "references": [
-                      "https://access.redhat.com/errata/RHSA-2026:1696",
-                      "https://access.redhat.com/errata/RHSA-2026:1852",
-                      "https://access.redhat.com/errata/RHSA-2026:1913",
-                      "https://access.redhat.com/security/cve/CVE-2025-14104",
-                      "https://bugzilla.redhat.com/2419369",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2419369",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-14104",
-                      "https://errata.almalinux.org/10/ALSA-2026-1696.html",
-                      "https://errata.rockylinux.org/RLSA-2026:1913",
-                      "https://linux.oracle.com/cve/CVE-2025-14104.html",
-                      "https://linux.oracle.com/errata/ELSA-2026-1913.html",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2025-14104",
-                      "https://www.cve.org/CVERecord?id=CVE-2025-14104"
-                    ],
-                    "severity": "MEDIUM",
-                    "suppressed": false,
-                    "title": "util-linux: util-linux: Heap buffer overread in setpwnam() when processing 256-byte usernames"
-                  },
-                  {
-                    "cve": "CVE-2022-0563",
-                    "cvss": {
-                      "nvd": {
-                        "v3score": "5.5",
-                        "v3vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N"
-                      },
-                      "redhat": {
-                        "v3score": "5.5",
-                        "v3vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-209"
-                    ],
-                    "description": "A flaw was found in the util-linux chfn and chsh utilities when compiled with Readline support. The Readline library uses an \"INPUTRC\" environment variable to get a path to the library config file. When the library cannot parse the specified file, it prints an error message containing data from the file. This flaw allows an unprivileged user to read root-owned files, potentially leading to privilege escalation. This flaw affects util-linux versions prior to 2.37.4.",
-                    "diffID": "sha256:420179ad2efafbf953a0c75f68a4c9dfaf38a98643df97d415bce49b179895f7",
-                    "installedVersion": "2.36.1-8+deb11u2",
-                    "packageName": "libmount1",
-                    "purl": "pkg:deb/debian/libmount1@2.36.1-8%2Bdeb11u2?arch=amd64&distro=debian-11.9",
-                    "references": [
-                      "https://access.redhat.com/security/cve/CVE-2022-0563",
-                      "https://blog.trailofbits.com/2023/02/16/suid-logic-bug-linux-readline/",
-                      "https://lore.kernel.org/util-linux/20220214110609.msiwlm457ngoic6w%40ws.net.home/T/#u",
-                      "https://lore.kernel.org/util-linux/20220214110609.msiwlm457ngoic6w@ws.net.home/T/#u",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2022-0563",
-                      "https://security.gentoo.org/glsa/202401-08",
-                      "https://security.netapp.com/advisory/ntap-20220331-0002/",
-                      "https://www.cve.org/CVERecord?id=CVE-2022-0563"
-                    ],
-                    "severity": "LOW",
-                    "suppressed": false,
-                    "title": "util-linux: partial disclosure of arbitrary files in chfn and chsh when compiled with libreadline"
-                  },
-                  {
-                    "cve": "CVE-2024-28182",
-                    "cvss": {
-                      "redhat": {
-                        "v3score": "5.3",
-                        "v3vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-770"
-                    ],
-                    "description": "nghttp2 is an implementation of the Hypertext Transfer Protocol version 2 in C. The nghttp2 library prior to version 1.61.0 keeps reading the unbounded number of HTTP/2 CONTINUATION frames even after a stream is reset to keep HPACK context in sync.  This causes excessive CPU usage to decode HPACK stream. nghttp2 v1.61.0 mitigates this vulnerability by limiting the number of CONTINUATION frames it accepts per stream. There is no workaround for this vulnerability.",
-                    "diffID": "sha256:9664c8c85da49d2cedf85c6b8af0e128318580b95b277b87593a4f75886148af",
-                    "fixedVersions": [
-                      "1.43.0-1+deb11u2"
-                    ],
-                    "installedVersion": "1.43.0-1+deb11u1",
-                    "packageName": "libnghttp2-14",
-                    "purl": "pkg:deb/debian/libnghttp2-14@1.43.0-1%2Bdeb11u1?arch=amd64&distro=debian-11.9",
-                    "references": [
-                      "http://www.openwall.com/lists/oss-security/2024/04/03/16",
-                      "https://access.redhat.com/errata/RHSA-2024:4252",
-                      "https://access.redhat.com/security/cve/CVE-2024-28182",
-                      "https://bugzilla.redhat.com/2268639",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2268639",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-28182",
-                      "https://errata.almalinux.org/8/ALSA-2024-4252.html",
-                      "https://errata.rockylinux.org/RLSA-2024:3501",
-                      "https://github.com/nghttp2/nghttp2/commit/00201ecd8f982da3b67d4f6868af72a1b03b14e0",
-                      "https://github.com/nghttp2/nghttp2/commit/d71a4668c6bead55805d18810d633fbb98315af9",
-                      "https://github.com/nghttp2/nghttp2/security/advisories/GHSA-x6x3-gv8h-m57q",
-                      "https://linux.oracle.com/cve/CVE-2024-28182.html",
-                      "https://linux.oracle.com/errata/ELSA-2024-4252.html",
-                      "https://lists.debian.org/debian-lts-announce/2024/04/msg00026.html",
-                      "https://lists.debian.org/debian-lts-announce/2024/09/msg00041.html",
-                      "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/AGOME6ZXJG7664IPQNVE3DL67E3YP3HY/",
-                      "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/J6ZMXUGB66VAXDW5J6QSTHM5ET25FGSA/",
-                      "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/PXJO2EASHM2OQQLGVDY5ZSO7UVDVHTDK/",
-                      "https://nowotarski.info/http2-continuation-flood/",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2024-28182",
-                      "https://ubuntu.com/security/notices/USN-6754-1",
-                      "https://ubuntu.com/security/notices/USN-6754-2",
-                      "https://www.cve.org/CVERecord?id=CVE-2024-28182",
-                      "https://www.kb.cert.org/vuls/id/421644"
-                    ],
-                    "severity": "MEDIUM",
-                    "suppressed": false,
-                    "title": "nghttp2: CONTINUATION frames DoS"
-                  },
-                  {
-                    "cve": "CVE-2025-6020",
-                    "cvss": {
-                      "redhat": {
-                        "v3score": "7.8",
-                        "v3vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-22"
-                    ],
-                    "description": "A flaw was found in linux-pam. The module pam_namespace may use access user-controlled paths without proper protection, allowing local users to elevate their privileges to root via multiple symlink attacks and race conditions.",
-                    "diffID": "sha256:420179ad2efafbf953a0c75f68a4c9dfaf38a98643df97d415bce49b179895f7",
-                    "fixedVersions": [
-                      "1.4.0-9+deb11u2"
-                    ],
-                    "installedVersion": "1.4.0-9+deb11u1",
-                    "packageName": "libpam-modules",
-                    "purl": "pkg:deb/debian/libpam-modules@1.4.0-9%2Bdeb11u1?arch=amd64&distro=debian-11.9",
-                    "references": [
-                      "http://www.openwall.com/lists/oss-security/2025/06/17/1",
-                      "https://access.redhat.com/errata/RHSA-2025:10024",
-                      "https://access.redhat.com/errata/RHSA-2025:10027",
-                      "https://access.redhat.com/errata/RHSA-2025:10180",
-                      "https://access.redhat.com/errata/RHSA-2025:10354",
-                      "https://access.redhat.com/errata/RHSA-2025:10357",
-                      "https://access.redhat.com/errata/RHSA-2025:10358",
-                      "https://access.redhat.com/errata/RHSA-2025:10359",
-                      "https://access.redhat.com/errata/RHSA-2025:10361",
-                      "https://access.redhat.com/errata/RHSA-2025:10362",
-                      "https://access.redhat.com/errata/RHSA-2025:10735",
-                      "https://access.redhat.com/errata/RHSA-2025:10823",
-                      "https://access.redhat.com/errata/RHSA-2025:11386",
-                      "https://access.redhat.com/errata/RHSA-2025:11487",
-                      "https://access.redhat.com/errata/RHSA-2025:14557",
-                      "https://access.redhat.com/errata/RHSA-2025:15099",
-                      "https://access.redhat.com/errata/RHSA-2025:15709",
-                      "https://access.redhat.com/errata/RHSA-2025:15827",
-                      "https://access.redhat.com/errata/RHSA-2025:15828",
-                      "https://access.redhat.com/errata/RHSA-2025:16524",
-                      "https://access.redhat.com/errata/RHSA-2025:17181",
-                      "https://access.redhat.com/errata/RHSA-2025:18219",
-                      "https://access.redhat.com/errata/RHSA-2025:20181",
-                      "https://access.redhat.com/errata/RHSA-2025:21885",
-                      "https://access.redhat.com/errata/RHSA-2025:22019",
-                      "https://access.redhat.com/errata/RHSA-2025:9526",
-                      "https://access.redhat.com/errata/RHSA-2026:0934",
-                      "https://access.redhat.com/security/cve/CVE-2025-6020",
-                      "https://bugzilla.redhat.com/2372512",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2372512",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-6020",
-                      "https://errata.almalinux.org/8/ALSA-2025-14557.html",
-                      "https://errata.rockylinux.org/RLSA-2025:9526",
-                      "https://linux.oracle.com/cve/CVE-2025-6020.html",
-                      "https://linux.oracle.com/errata/ELSA-2025-9526.html",
-                      "https://lists.debian.org/debian-lts-announce/2025/09/msg00021.html",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2025-6020",
-                      "https://ubuntu.com/security/notices/USN-7580-1",
-                      "https://www.cve.org/CVERecord?id=CVE-2025-6020",
-                      "https://www.openwall.com/lists/oss-security/2025/06/17/1"
-                    ],
-                    "severity": "HIGH",
-                    "suppressed": false,
-                    "title": "linux-pam: Linux-pam directory Traversal"
-                  },
-                  {
-                    "cve": "CVE-2024-10041",
-                    "cvss": {
-                      "redhat": {
-                        "v3score": "4.7",
-                        "v3vector": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-922"
-                    ],
-                    "description": "A vulnerability was found in PAM. The secret information is stored in memory, where the attacker can trigger the victim program to execute by sending characters to its standard input (stdin). As this occurs, the attacker can train the branch predictor to execute an ROP chain speculatively. This flaw could result in leaked passwords, such as those found in /etc/shadow while performing authentications.",
-                    "diffID": "sha256:420179ad2efafbf953a0c75f68a4c9dfaf38a98643df97d415bce49b179895f7",
-                    "installedVersion": "1.4.0-9+deb11u1",
-                    "packageName": "libpam-modules",
-                    "purl": "pkg:deb/debian/libpam-modules@1.4.0-9%2Bdeb11u1?arch=amd64&distro=debian-11.9",
-                    "references": [
-                      "https://access.redhat.com/errata/RHSA-2024:10379",
-                      "https://access.redhat.com/errata/RHSA-2024:11250",
-                      "https://access.redhat.com/errata/RHSA-2024:9941",
-                      "https://access.redhat.com/security/cve/CVE-2024-10041",
-                      "https://bugzilla.redhat.com/2319212",
-                      "https://bugzilla.redhat.com/2324291",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2319212",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2324291",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-10041",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-10963",
-                      "https://errata.almalinux.org/8/ALSA-2024-10379.html",
-                      "https://errata.rockylinux.org/RLSA-2024:10379",
-                      "https://linux.oracle.com/cve/CVE-2024-10041.html",
-                      "https://linux.oracle.com/errata/ELSA-2024-11250.html",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2024-10041",
-                      "https://www.cve.org/CVERecord?id=CVE-2024-10041"
-                    ],
-                    "severity": "MEDIUM",
-                    "suppressed": false,
-                    "title": "pam: libpam: Libpam vulnerable to read hashed password"
-                  },
-                  {
-                    "cve": "CVE-2024-22365",
-                    "cvss": {
-                      "nvd": {
-                        "v3score": "5.5",
-                        "v3vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H"
-                      },
-                      "redhat": {
-                        "v3score": "5.5",
-                        "v3vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-664"
-                    ],
-                    "description": "linux-pam (aka Linux PAM) before 1.6.0 allows attackers to cause a denial of service (blocked login process) via mkfifo because the openat call (for protect_dir) lacks O_DIRECTORY.",
-                    "diffID": "sha256:420179ad2efafbf953a0c75f68a4c9dfaf38a98643df97d415bce49b179895f7",
-                    "fixedVersions": [
-                      "1.4.0-9+deb11u2"
-                    ],
-                    "installedVersion": "1.4.0-9+deb11u1",
-                    "packageName": "libpam-modules",
-                    "purl": "pkg:deb/debian/libpam-modules@1.4.0-9%2Bdeb11u1?arch=amd64&distro=debian-11.9",
-                    "references": [
-                      "http://www.openwall.com/lists/oss-security/2024/01/18/3",
-                      "https://access.redhat.com/errata/RHSA-2024:3163",
-                      "https://access.redhat.com/security/cve/CVE-2024-22365",
-                      "https://bugzilla.redhat.com/2257722",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2257722",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-22365",
-                      "https://errata.almalinux.org/8/ALSA-2024-3163.html",
-                      "https://errata.rockylinux.org/RLSA-2024:3163",
-                      "https://github.com/linux-pam/linux-pam",
-                      "https://github.com/linux-pam/linux-pam/commit/031bb5a5d0d950253b68138b498dc93be69a64cb",
-                      "https://github.com/linux-pam/linux-pam/releases/tag/v1.6.0",
-                      "https://linux.oracle.com/cve/CVE-2024-22365.html",
-                      "https://linux.oracle.com/errata/ELSA-2024-3163.html",
-                      "https://lists.debian.org/debian-lts-announce/2025/09/msg00021.html",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2024-22365",
-                      "https://ubuntu.com/security/notices/USN-6588-1",
-                      "https://ubuntu.com/security/notices/USN-6588-2",
-                      "https://www.cve.org/CVERecord?id=CVE-2024-22365",
-                      "https://www.openwall.com/lists/oss-security/2024/01/18/3"
-                    ],
-                    "severity": "MEDIUM",
-                    "suppressed": false,
-                    "title": "pam: allowing unprivileged user to block another user namespace"
-                  },
-                  {
-                    "cve": "CVE-2025-6020",
-                    "cvss": {
-                      "redhat": {
-                        "v3score": "7.8",
-                        "v3vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-22"
-                    ],
-                    "description": "A flaw was found in linux-pam. The module pam_namespace may use access user-controlled paths without proper protection, allowing local users to elevate their privileges to root via multiple symlink attacks and race conditions.",
-                    "diffID": "sha256:420179ad2efafbf953a0c75f68a4c9dfaf38a98643df97d415bce49b179895f7",
-                    "fixedVersions": [
-                      "1.4.0-9+deb11u2"
-                    ],
-                    "installedVersion": "1.4.0-9+deb11u1",
-                    "packageName": "libpam-modules-bin",
-                    "purl": "pkg:deb/debian/libpam-modules-bin@1.4.0-9%2Bdeb11u1?arch=amd64&distro=debian-11.9",
-                    "references": [
-                      "http://www.openwall.com/lists/oss-security/2025/06/17/1",
-                      "https://access.redhat.com/errata/RHSA-2025:10024",
-                      "https://access.redhat.com/errata/RHSA-2025:10027",
-                      "https://access.redhat.com/errata/RHSA-2025:10180",
-                      "https://access.redhat.com/errata/RHSA-2025:10354",
-                      "https://access.redhat.com/errata/RHSA-2025:10357",
-                      "https://access.redhat.com/errata/RHSA-2025:10358",
-                      "https://access.redhat.com/errata/RHSA-2025:10359",
-                      "https://access.redhat.com/errata/RHSA-2025:10361",
-                      "https://access.redhat.com/errata/RHSA-2025:10362",
-                      "https://access.redhat.com/errata/RHSA-2025:10735",
-                      "https://access.redhat.com/errata/RHSA-2025:10823",
-                      "https://access.redhat.com/errata/RHSA-2025:11386",
-                      "https://access.redhat.com/errata/RHSA-2025:11487",
-                      "https://access.redhat.com/errata/RHSA-2025:14557",
-                      "https://access.redhat.com/errata/RHSA-2025:15099",
-                      "https://access.redhat.com/errata/RHSA-2025:15709",
-                      "https://access.redhat.com/errata/RHSA-2025:15827",
-                      "https://access.redhat.com/errata/RHSA-2025:15828",
-                      "https://access.redhat.com/errata/RHSA-2025:16524",
-                      "https://access.redhat.com/errata/RHSA-2025:17181",
-                      "https://access.redhat.com/errata/RHSA-2025:18219",
-                      "https://access.redhat.com/errata/RHSA-2025:20181",
-                      "https://access.redhat.com/errata/RHSA-2025:21885",
-                      "https://access.redhat.com/errata/RHSA-2025:22019",
-                      "https://access.redhat.com/errata/RHSA-2025:9526",
-                      "https://access.redhat.com/errata/RHSA-2026:0934",
-                      "https://access.redhat.com/security/cve/CVE-2025-6020",
-                      "https://bugzilla.redhat.com/2372512",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2372512",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-6020",
-                      "https://errata.almalinux.org/8/ALSA-2025-14557.html",
-                      "https://errata.rockylinux.org/RLSA-2025:9526",
-                      "https://linux.oracle.com/cve/CVE-2025-6020.html",
-                      "https://linux.oracle.com/errata/ELSA-2025-9526.html",
-                      "https://lists.debian.org/debian-lts-announce/2025/09/msg00021.html",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2025-6020",
-                      "https://ubuntu.com/security/notices/USN-7580-1",
-                      "https://www.cve.org/CVERecord?id=CVE-2025-6020",
-                      "https://www.openwall.com/lists/oss-security/2025/06/17/1"
-                    ],
-                    "severity": "HIGH",
-                    "suppressed": false,
-                    "title": "linux-pam: Linux-pam directory Traversal"
-                  },
-                  {
-                    "cve": "CVE-2024-10041",
-                    "cvss": {
-                      "redhat": {
-                        "v3score": "4.7",
-                        "v3vector": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-922"
-                    ],
-                    "description": "A vulnerability was found in PAM. The secret information is stored in memory, where the attacker can trigger the victim program to execute by sending characters to its standard input (stdin). As this occurs, the attacker can train the branch predictor to execute an ROP chain speculatively. This flaw could result in leaked passwords, such as those found in /etc/shadow while performing authentications.",
-                    "diffID": "sha256:420179ad2efafbf953a0c75f68a4c9dfaf38a98643df97d415bce49b179895f7",
-                    "installedVersion": "1.4.0-9+deb11u1",
-                    "packageName": "libpam-modules-bin",
-                    "purl": "pkg:deb/debian/libpam-modules-bin@1.4.0-9%2Bdeb11u1?arch=amd64&distro=debian-11.9",
-                    "references": [
-                      "https://access.redhat.com/errata/RHSA-2024:10379",
-                      "https://access.redhat.com/errata/RHSA-2024:11250",
-                      "https://access.redhat.com/errata/RHSA-2024:9941",
-                      "https://access.redhat.com/security/cve/CVE-2024-10041",
-                      "https://bugzilla.redhat.com/2319212",
-                      "https://bugzilla.redhat.com/2324291",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2319212",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2324291",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-10041",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-10963",
-                      "https://errata.almalinux.org/8/ALSA-2024-10379.html",
-                      "https://errata.rockylinux.org/RLSA-2024:10379",
-                      "https://linux.oracle.com/cve/CVE-2024-10041.html",
-                      "https://linux.oracle.com/errata/ELSA-2024-11250.html",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2024-10041",
-                      "https://www.cve.org/CVERecord?id=CVE-2024-10041"
-                    ],
-                    "severity": "MEDIUM",
-                    "suppressed": false,
-                    "title": "pam: libpam: Libpam vulnerable to read hashed password"
-                  },
-                  {
-                    "cve": "CVE-2024-22365",
-                    "cvss": {
-                      "nvd": {
-                        "v3score": "5.5",
-                        "v3vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H"
-                      },
-                      "redhat": {
-                        "v3score": "5.5",
-                        "v3vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-664"
-                    ],
-                    "description": "linux-pam (aka Linux PAM) before 1.6.0 allows attackers to cause a denial of service (blocked login process) via mkfifo because the openat call (for protect_dir) lacks O_DIRECTORY.",
-                    "diffID": "sha256:420179ad2efafbf953a0c75f68a4c9dfaf38a98643df97d415bce49b179895f7",
-                    "fixedVersions": [
-                      "1.4.0-9+deb11u2"
-                    ],
-                    "installedVersion": "1.4.0-9+deb11u1",
-                    "packageName": "libpam-modules-bin",
-                    "purl": "pkg:deb/debian/libpam-modules-bin@1.4.0-9%2Bdeb11u1?arch=amd64&distro=debian-11.9",
-                    "references": [
-                      "http://www.openwall.com/lists/oss-security/2024/01/18/3",
-                      "https://access.redhat.com/errata/RHSA-2024:3163",
-                      "https://access.redhat.com/security/cve/CVE-2024-22365",
-                      "https://bugzilla.redhat.com/2257722",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2257722",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-22365",
-                      "https://errata.almalinux.org/8/ALSA-2024-3163.html",
-                      "https://errata.rockylinux.org/RLSA-2024:3163",
-                      "https://github.com/linux-pam/linux-pam",
-                      "https://github.com/linux-pam/linux-pam/commit/031bb5a5d0d950253b68138b498dc93be69a64cb",
-                      "https://github.com/linux-pam/linux-pam/releases/tag/v1.6.0",
-                      "https://linux.oracle.com/cve/CVE-2024-22365.html",
-                      "https://linux.oracle.com/errata/ELSA-2024-3163.html",
-                      "https://lists.debian.org/debian-lts-announce/2025/09/msg00021.html",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2024-22365",
-                      "https://ubuntu.com/security/notices/USN-6588-1",
-                      "https://ubuntu.com/security/notices/USN-6588-2",
-                      "https://www.cve.org/CVERecord?id=CVE-2024-22365",
-                      "https://www.openwall.com/lists/oss-security/2024/01/18/3"
-                    ],
-                    "severity": "MEDIUM",
-                    "suppressed": false,
-                    "title": "pam: allowing unprivileged user to block another user namespace"
-                  },
-                  {
-                    "cve": "CVE-2025-6020",
-                    "cvss": {
-                      "redhat": {
-                        "v3score": "7.8",
-                        "v3vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-22"
-                    ],
-                    "description": "A flaw was found in linux-pam. The module pam_namespace may use access user-controlled paths without proper protection, allowing local users to elevate their privileges to root via multiple symlink attacks and race conditions.",
-                    "diffID": "sha256:420179ad2efafbf953a0c75f68a4c9dfaf38a98643df97d415bce49b179895f7",
-                    "fixedVersions": [
-                      "1.4.0-9+deb11u2"
-                    ],
-                    "installedVersion": "1.4.0-9+deb11u1",
-                    "packageName": "libpam-runtime",
-                    "purl": "pkg:deb/debian/libpam-runtime@1.4.0-9%2Bdeb11u1?arch=all&distro=debian-11.9",
-                    "references": [
-                      "http://www.openwall.com/lists/oss-security/2025/06/17/1",
-                      "https://access.redhat.com/errata/RHSA-2025:10024",
-                      "https://access.redhat.com/errata/RHSA-2025:10027",
-                      "https://access.redhat.com/errata/RHSA-2025:10180",
-                      "https://access.redhat.com/errata/RHSA-2025:10354",
-                      "https://access.redhat.com/errata/RHSA-2025:10357",
-                      "https://access.redhat.com/errata/RHSA-2025:10358",
-                      "https://access.redhat.com/errata/RHSA-2025:10359",
-                      "https://access.redhat.com/errata/RHSA-2025:10361",
-                      "https://access.redhat.com/errata/RHSA-2025:10362",
-                      "https://access.redhat.com/errata/RHSA-2025:10735",
-                      "https://access.redhat.com/errata/RHSA-2025:10823",
-                      "https://access.redhat.com/errata/RHSA-2025:11386",
-                      "https://access.redhat.com/errata/RHSA-2025:11487",
-                      "https://access.redhat.com/errata/RHSA-2025:14557",
-                      "https://access.redhat.com/errata/RHSA-2025:15099",
-                      "https://access.redhat.com/errata/RHSA-2025:15709",
-                      "https://access.redhat.com/errata/RHSA-2025:15827",
-                      "https://access.redhat.com/errata/RHSA-2025:15828",
-                      "https://access.redhat.com/errata/RHSA-2025:16524",
-                      "https://access.redhat.com/errata/RHSA-2025:17181",
-                      "https://access.redhat.com/errata/RHSA-2025:18219",
-                      "https://access.redhat.com/errata/RHSA-2025:20181",
-                      "https://access.redhat.com/errata/RHSA-2025:21885",
-                      "https://access.redhat.com/errata/RHSA-2025:22019",
-                      "https://access.redhat.com/errata/RHSA-2025:9526",
-                      "https://access.redhat.com/errata/RHSA-2026:0934",
-                      "https://access.redhat.com/security/cve/CVE-2025-6020",
-                      "https://bugzilla.redhat.com/2372512",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2372512",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-6020",
-                      "https://errata.almalinux.org/8/ALSA-2025-14557.html",
-                      "https://errata.rockylinux.org/RLSA-2025:9526",
-                      "https://linux.oracle.com/cve/CVE-2025-6020.html",
-                      "https://linux.oracle.com/errata/ELSA-2025-9526.html",
-                      "https://lists.debian.org/debian-lts-announce/2025/09/msg00021.html",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2025-6020",
-                      "https://ubuntu.com/security/notices/USN-7580-1",
-                      "https://www.cve.org/CVERecord?id=CVE-2025-6020",
-                      "https://www.openwall.com/lists/oss-security/2025/06/17/1"
-                    ],
-                    "severity": "HIGH",
-                    "suppressed": false,
-                    "title": "linux-pam: Linux-pam directory Traversal"
-                  },
-                  {
-                    "cve": "CVE-2024-10041",
-                    "cvss": {
-                      "redhat": {
-                        "v3score": "4.7",
-                        "v3vector": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-922"
-                    ],
-                    "description": "A vulnerability was found in PAM. The secret information is stored in memory, where the attacker can trigger the victim program to execute by sending characters to its standard input (stdin). As this occurs, the attacker can train the branch predictor to execute an ROP chain speculatively. This flaw could result in leaked passwords, such as those found in /etc/shadow while performing authentications.",
-                    "diffID": "sha256:420179ad2efafbf953a0c75f68a4c9dfaf38a98643df97d415bce49b179895f7",
-                    "installedVersion": "1.4.0-9+deb11u1",
-                    "packageName": "libpam-runtime",
-                    "purl": "pkg:deb/debian/libpam-runtime@1.4.0-9%2Bdeb11u1?arch=all&distro=debian-11.9",
-                    "references": [
-                      "https://access.redhat.com/errata/RHSA-2024:10379",
-                      "https://access.redhat.com/errata/RHSA-2024:11250",
-                      "https://access.redhat.com/errata/RHSA-2024:9941",
-                      "https://access.redhat.com/security/cve/CVE-2024-10041",
-                      "https://bugzilla.redhat.com/2319212",
-                      "https://bugzilla.redhat.com/2324291",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2319212",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2324291",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-10041",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-10963",
-                      "https://errata.almalinux.org/8/ALSA-2024-10379.html",
-                      "https://errata.rockylinux.org/RLSA-2024:10379",
-                      "https://linux.oracle.com/cve/CVE-2024-10041.html",
-                      "https://linux.oracle.com/errata/ELSA-2024-11250.html",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2024-10041",
-                      "https://www.cve.org/CVERecord?id=CVE-2024-10041"
-                    ],
-                    "severity": "MEDIUM",
-                    "suppressed": false,
-                    "title": "pam: libpam: Libpam vulnerable to read hashed password"
-                  },
-                  {
-                    "cve": "CVE-2024-22365",
-                    "cvss": {
-                      "nvd": {
-                        "v3score": "5.5",
-                        "v3vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H"
-                      },
-                      "redhat": {
-                        "v3score": "5.5",
-                        "v3vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-664"
-                    ],
-                    "description": "linux-pam (aka Linux PAM) before 1.6.0 allows attackers to cause a denial of service (blocked login process) via mkfifo because the openat call (for protect_dir) lacks O_DIRECTORY.",
-                    "diffID": "sha256:420179ad2efafbf953a0c75f68a4c9dfaf38a98643df97d415bce49b179895f7",
-                    "fixedVersions": [
-                      "1.4.0-9+deb11u2"
-                    ],
-                    "installedVersion": "1.4.0-9+deb11u1",
-                    "packageName": "libpam-runtime",
-                    "purl": "pkg:deb/debian/libpam-runtime@1.4.0-9%2Bdeb11u1?arch=all&distro=debian-11.9",
-                    "references": [
-                      "http://www.openwall.com/lists/oss-security/2024/01/18/3",
-                      "https://access.redhat.com/errata/RHSA-2024:3163",
-                      "https://access.redhat.com/security/cve/CVE-2024-22365",
-                      "https://bugzilla.redhat.com/2257722",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2257722",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-22365",
-                      "https://errata.almalinux.org/8/ALSA-2024-3163.html",
-                      "https://errata.rockylinux.org/RLSA-2024:3163",
-                      "https://github.com/linux-pam/linux-pam",
-                      "https://github.com/linux-pam/linux-pam/commit/031bb5a5d0d950253b68138b498dc93be69a64cb",
-                      "https://github.com/linux-pam/linux-pam/releases/tag/v1.6.0",
-                      "https://linux.oracle.com/cve/CVE-2024-22365.html",
-                      "https://linux.oracle.com/errata/ELSA-2024-3163.html",
-                      "https://lists.debian.org/debian-lts-announce/2025/09/msg00021.html",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2024-22365",
-                      "https://ubuntu.com/security/notices/USN-6588-1",
-                      "https://ubuntu.com/security/notices/USN-6588-2",
-                      "https://www.cve.org/CVERecord?id=CVE-2024-22365",
-                      "https://www.openwall.com/lists/oss-security/2024/01/18/3"
-                    ],
-                    "severity": "MEDIUM",
-                    "suppressed": false,
-                    "title": "pam: allowing unprivileged user to block another user namespace"
-                  },
-                  {
-                    "cve": "CVE-2025-6020",
-                    "cvss": {
-                      "redhat": {
-                        "v3score": "7.8",
-                        "v3vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-22"
-                    ],
-                    "description": "A flaw was found in linux-pam. The module pam_namespace may use access user-controlled paths without proper protection, allowing local users to elevate their privileges to root via multiple symlink attacks and race conditions.",
-                    "diffID": "sha256:420179ad2efafbf953a0c75f68a4c9dfaf38a98643df97d415bce49b179895f7",
-                    "fixedVersions": [
-                      "1.4.0-9+deb11u2"
-                    ],
-                    "installedVersion": "1.4.0-9+deb11u1",
-                    "packageName": "libpam0g",
-                    "purl": "pkg:deb/debian/libpam0g@1.4.0-9%2Bdeb11u1?arch=amd64&distro=debian-11.9",
-                    "references": [
-                      "http://www.openwall.com/lists/oss-security/2025/06/17/1",
-                      "https://access.redhat.com/errata/RHSA-2025:10024",
-                      "https://access.redhat.com/errata/RHSA-2025:10027",
-                      "https://access.redhat.com/errata/RHSA-2025:10180",
-                      "https://access.redhat.com/errata/RHSA-2025:10354",
-                      "https://access.redhat.com/errata/RHSA-2025:10357",
-                      "https://access.redhat.com/errata/RHSA-2025:10358",
-                      "https://access.redhat.com/errata/RHSA-2025:10359",
-                      "https://access.redhat.com/errata/RHSA-2025:10361",
-                      "https://access.redhat.com/errata/RHSA-2025:10362",
-                      "https://access.redhat.com/errata/RHSA-2025:10735",
-                      "https://access.redhat.com/errata/RHSA-2025:10823",
-                      "https://access.redhat.com/errata/RHSA-2025:11386",
-                      "https://access.redhat.com/errata/RHSA-2025:11487",
-                      "https://access.redhat.com/errata/RHSA-2025:14557",
-                      "https://access.redhat.com/errata/RHSA-2025:15099",
-                      "https://access.redhat.com/errata/RHSA-2025:15709",
-                      "https://access.redhat.com/errata/RHSA-2025:15827",
-                      "https://access.redhat.com/errata/RHSA-2025:15828",
-                      "https://access.redhat.com/errata/RHSA-2025:16524",
-                      "https://access.redhat.com/errata/RHSA-2025:17181",
-                      "https://access.redhat.com/errata/RHSA-2025:18219",
-                      "https://access.redhat.com/errata/RHSA-2025:20181",
-                      "https://access.redhat.com/errata/RHSA-2025:21885",
-                      "https://access.redhat.com/errata/RHSA-2025:22019",
-                      "https://access.redhat.com/errata/RHSA-2025:9526",
-                      "https://access.redhat.com/errata/RHSA-2026:0934",
-                      "https://access.redhat.com/security/cve/CVE-2025-6020",
-                      "https://bugzilla.redhat.com/2372512",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2372512",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-6020",
-                      "https://errata.almalinux.org/8/ALSA-2025-14557.html",
-                      "https://errata.rockylinux.org/RLSA-2025:9526",
-                      "https://linux.oracle.com/cve/CVE-2025-6020.html",
-                      "https://linux.oracle.com/errata/ELSA-2025-9526.html",
-                      "https://lists.debian.org/debian-lts-announce/2025/09/msg00021.html",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2025-6020",
-                      "https://ubuntu.com/security/notices/USN-7580-1",
-                      "https://www.cve.org/CVERecord?id=CVE-2025-6020",
-                      "https://www.openwall.com/lists/oss-security/2025/06/17/1"
-                    ],
-                    "severity": "HIGH",
-                    "suppressed": false,
-                    "title": "linux-pam: Linux-pam directory Traversal"
-                  },
-                  {
-                    "cve": "CVE-2024-10041",
-                    "cvss": {
-                      "redhat": {
-                        "v3score": "4.7",
-                        "v3vector": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-922"
-                    ],
-                    "description": "A vulnerability was found in PAM. The secret information is stored in memory, where the attacker can trigger the victim program to execute by sending characters to its standard input (stdin). As this occurs, the attacker can train the branch predictor to execute an ROP chain speculatively. This flaw could result in leaked passwords, such as those found in /etc/shadow while performing authentications.",
-                    "diffID": "sha256:420179ad2efafbf953a0c75f68a4c9dfaf38a98643df97d415bce49b179895f7",
-                    "installedVersion": "1.4.0-9+deb11u1",
-                    "packageName": "libpam0g",
-                    "purl": "pkg:deb/debian/libpam0g@1.4.0-9%2Bdeb11u1?arch=amd64&distro=debian-11.9",
-                    "references": [
-                      "https://access.redhat.com/errata/RHSA-2024:10379",
-                      "https://access.redhat.com/errata/RHSA-2024:11250",
-                      "https://access.redhat.com/errata/RHSA-2024:9941",
-                      "https://access.redhat.com/security/cve/CVE-2024-10041",
-                      "https://bugzilla.redhat.com/2319212",
-                      "https://bugzilla.redhat.com/2324291",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2319212",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2324291",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-10041",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-10963",
-                      "https://errata.almalinux.org/8/ALSA-2024-10379.html",
-                      "https://errata.rockylinux.org/RLSA-2024:10379",
-                      "https://linux.oracle.com/cve/CVE-2024-10041.html",
-                      "https://linux.oracle.com/errata/ELSA-2024-11250.html",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2024-10041",
-                      "https://www.cve.org/CVERecord?id=CVE-2024-10041"
-                    ],
-                    "severity": "MEDIUM",
-                    "suppressed": false,
-                    "title": "pam: libpam: Libpam vulnerable to read hashed password"
-                  },
-                  {
-                    "cve": "CVE-2024-22365",
-                    "cvss": {
-                      "nvd": {
-                        "v3score": "5.5",
-                        "v3vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H"
-                      },
-                      "redhat": {
-                        "v3score": "5.5",
-                        "v3vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-664"
-                    ],
-                    "description": "linux-pam (aka Linux PAM) before 1.6.0 allows attackers to cause a denial of service (blocked login process) via mkfifo because the openat call (for protect_dir) lacks O_DIRECTORY.",
-                    "diffID": "sha256:420179ad2efafbf953a0c75f68a4c9dfaf38a98643df97d415bce49b179895f7",
-                    "fixedVersions": [
-                      "1.4.0-9+deb11u2"
-                    ],
-                    "installedVersion": "1.4.0-9+deb11u1",
-                    "packageName": "libpam0g",
-                    "purl": "pkg:deb/debian/libpam0g@1.4.0-9%2Bdeb11u1?arch=amd64&distro=debian-11.9",
-                    "references": [
-                      "http://www.openwall.com/lists/oss-security/2024/01/18/3",
-                      "https://access.redhat.com/errata/RHSA-2024:3163",
-                      "https://access.redhat.com/security/cve/CVE-2024-22365",
-                      "https://bugzilla.redhat.com/2257722",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2257722",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-22365",
-                      "https://errata.almalinux.org/8/ALSA-2024-3163.html",
-                      "https://errata.rockylinux.org/RLSA-2024:3163",
-                      "https://github.com/linux-pam/linux-pam",
-                      "https://github.com/linux-pam/linux-pam/commit/031bb5a5d0d950253b68138b498dc93be69a64cb",
-                      "https://github.com/linux-pam/linux-pam/releases/tag/v1.6.0",
-                      "https://linux.oracle.com/cve/CVE-2024-22365.html",
-                      "https://linux.oracle.com/errata/ELSA-2024-3163.html",
-                      "https://lists.debian.org/debian-lts-announce/2025/09/msg00021.html",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2024-22365",
-                      "https://ubuntu.com/security/notices/USN-6588-1",
-                      "https://ubuntu.com/security/notices/USN-6588-2",
-                      "https://www.cve.org/CVERecord?id=CVE-2024-22365",
-                      "https://www.openwall.com/lists/oss-security/2024/01/18/3"
-                    ],
-                    "severity": "MEDIUM",
-                    "suppressed": false,
-                    "title": "pam: allowing unprivileged user to block another user namespace"
-                  },
-                  {
-                    "cve": "CVE-2022-41409",
-                    "cvss": {
-                      "nvd": {
-                        "v3score": "7.5",
-                        "v3vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"
-                      },
-                      "redhat": {
-                        "v3score": "5.3",
-                        "v3vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-190"
-                    ],
-                    "description": "Integer overflow vulnerability in pcre2test before 10.41 allows attackers to cause a denial of service or other unspecified impacts via negative input.",
-                    "diffID": "sha256:420179ad2efafbf953a0c75f68a4c9dfaf38a98643df97d415bce49b179895f7",
-                    "installedVersion": "10.36-2+deb11u1",
-                    "packageName": "libpcre2-8-0",
-                    "purl": "pkg:deb/debian/libpcre2-8-0@10.36-2%2Bdeb11u1?arch=amd64&distro=debian-11.9",
-                    "references": [
-                      "https://access.redhat.com/security/cve/CVE-2022-41409",
-                      "https://github.com/PCRE2Project/pcre2/commit/94e1c001761373b7d9450768aa15d04c25547a35",
-                      "https://github.com/PCRE2Project/pcre2/issues/141",
-                      "https://github.com/advisories/GHSA-4qfx-v7wh-3q4j",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2022-41409",
-                      "https://www.cve.org/CVERecord?id=CVE-2022-41409"
-                    ],
-                    "severity": "LOW",
-                    "suppressed": false,
-                    "title": "pcre2: negative repeat value in a pcre2test subject line leads to inifinite loop"
-                  },
-                  {
-                    "cve": "CVE-2017-11164",
-                    "cvss": {
-                      "nvd": {
-                        "v3score": "7.5",
-                        "v3vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"
-                      },
-                      "redhat": {
-                        "v3score": "3.3",
-                        "v3vector": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-674"
-                    ],
-                    "description": "In PCRE 8.41, the OP_KETRMAX feature in the match function in pcre_exec.c allows stack exhaustion (uncontrolled recursion) when processing a crafted regular expression.",
-                    "diffID": "sha256:420179ad2efafbf953a0c75f68a4c9dfaf38a98643df97d415bce49b179895f7",
-                    "installedVersion": "2:8.39-13",
-                    "packageName": "libpcre3",
-                    "purl": "pkg:deb/debian/libpcre3@8.39-13?arch=amd64&distro=debian-11.9&epoch=2",
-                    "references": [
-                      "http://openwall.com/lists/oss-security/2017/07/11/3",
-                      "http://www.openwall.com/lists/oss-security/2023/04/11/1",
-                      "http://www.openwall.com/lists/oss-security/2023/04/12/1",
-                      "http://www.securityfocus.com/bid/99575",
-                      "https://access.redhat.com/security/cve/CVE-2017-11164",
-                      "https://lists.apache.org/thread.html/rf9fa47ab66495c78bb4120b0754dd9531ca2ff0430f6685ac9b07772%40%3Cdev.mina.apache.org%3E",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2017-11164",
-                      "https://www.cve.org/CVERecord?id=CVE-2017-11164"
-                    ],
-                    "severity": "LOW",
-                    "suppressed": false,
-                    "title": "pcre: OP_KETRMAX feature in the match function in pcre_exec.c"
-                  },
-                  {
-                    "cve": "CVE-2017-16231",
-                    "cvss": {
-                      "nvd": {
-                        "v3score": "5.5",
-                        "v3vector": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H"
-                      },
-                      "redhat": {
-                        "v3score": "5.5",
-                        "v3vector": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-119"
-                    ],
-                    "description": "In PCRE 8.41, after compiling, a pcretest load test PoC produces a crash overflow in the function match() in pcre_exec.c because of a self-recursive call. NOTE: third parties dispute the relevance of this report, noting that there are options that can be used to limit the amount of stack that is used",
-                    "diffID": "sha256:420179ad2efafbf953a0c75f68a4c9dfaf38a98643df97d415bce49b179895f7",
-                    "installedVersion": "2:8.39-13",
-                    "packageName": "libpcre3",
-                    "purl": "pkg:deb/debian/libpcre3@8.39-13?arch=amd64&distro=debian-11.9&epoch=2",
-                    "references": [
-                      "http://packetstormsecurity.com/files/150897/PCRE-8.41-Buffer-Overflow.html",
-                      "http://seclists.org/fulldisclosure/2018/Dec/33",
-                      "http://www.openwall.com/lists/oss-security/2017/11/01/11",
-                      "http://www.openwall.com/lists/oss-security/2017/11/01/3",
-                      "http://www.openwall.com/lists/oss-security/2017/11/01/7",
-                      "http://www.openwall.com/lists/oss-security/2017/11/01/8",
-                      "http://www.securityfocus.com/bid/101688",
-                      "https://access.redhat.com/security/cve/CVE-2017-16231",
-                      "https://bugs.exim.org/show_bug.cgi?id=2047",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2017-16231",
-                      "https://www.cve.org/CVERecord?id=CVE-2017-16231"
-                    ],
-                    "severity": "LOW",
-                    "suppressed": false,
-                    "title": "pcre: self-recursive call in match() in pcre_exec.c leads to denial of service"
-                  },
-                  {
-                    "cve": "CVE-2017-7245",
-                    "cvss": {
-                      "nvd": {
-                        "v3score": "7.8",
-                        "v3vector": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H"
-                      },
-                      "redhat": {
-                        "v3score": "3.7",
-                        "v3vector": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-119"
-                    ],
-                    "description": "Stack-based buffer overflow in the pcre32_copy_substring function in pcre_get.c in libpcre1 in PCRE 8.40 allows remote attackers to cause a denial of service (WRITE of size 4) or possibly have unspecified other impact via a crafted file.",
-                    "diffID": "sha256:420179ad2efafbf953a0c75f68a4c9dfaf38a98643df97d415bce49b179895f7",
-                    "installedVersion": "2:8.39-13",
-                    "packageName": "libpcre3",
-                    "purl": "pkg:deb/debian/libpcre3@8.39-13?arch=amd64&distro=debian-11.9&epoch=2",
-                    "references": [
-                      "http://www.securityfocus.com/bid/97067",
-                      "https://access.redhat.com/errata/RHSA-2018:2486",
-                      "https://access.redhat.com/security/cve/CVE-2017-7245",
-                      "https://blogs.gentoo.org/ago/2017/03/20/libpcre-two-stack-based-buffer-overflow-write-in-pcre32_copy_substring-pcre_get-c/",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2017-7245",
-                      "https://security.gentoo.org/glsa/201710-25",
-                      "https://www.cve.org/CVERecord?id=CVE-2017-7245"
-                    ],
-                    "severity": "LOW",
-                    "suppressed": false,
-                    "title": "pcre: stack-based buffer overflow write in pcre32_copy_substring"
-                  },
-                  {
-                    "cve": "CVE-2017-7246",
-                    "cvss": {
-                      "nvd": {
-                        "v3score": "7.8",
-                        "v3vector": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H"
-                      },
-                      "redhat": {
-                        "v3score": "3.7",
-                        "v3vector": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-119"
-                    ],
-                    "description": "Stack-based buffer overflow in the pcre32_copy_substring function in pcre_get.c in libpcre1 in PCRE 8.40 allows remote attackers to cause a denial of service (WRITE of size 268) or possibly have unspecified other impact via a crafted file.",
-                    "diffID": "sha256:420179ad2efafbf953a0c75f68a4c9dfaf38a98643df97d415bce49b179895f7",
-                    "installedVersion": "2:8.39-13",
-                    "packageName": "libpcre3",
-                    "purl": "pkg:deb/debian/libpcre3@8.39-13?arch=amd64&distro=debian-11.9&epoch=2",
-                    "references": [
-                      "http://www.securityfocus.com/bid/97067",
-                      "https://access.redhat.com/errata/RHSA-2018:2486",
-                      "https://access.redhat.com/security/cve/CVE-2017-7246",
-                      "https://blogs.gentoo.org/ago/2017/03/20/libpcre-two-stack-based-buffer-overflow-write-in-pcre32_copy_substring-pcre_get-c/",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2017-7246",
-                      "https://security.gentoo.org/glsa/201710-25",
-                      "https://www.cve.org/CVERecord?id=CVE-2017-7246"
-                    ],
-                    "severity": "LOW",
-                    "suppressed": false,
-                    "title": "pcre: stack-based buffer overflow write in pcre32_copy_substring"
-                  },
-                  {
-                    "cve": "CVE-2019-20838",
-                    "cvss": {
-                      "nvd": {
-                        "v3score": "7.5",
-                        "v3vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"
-                      },
-                      "redhat": {
-                        "v3score": "7.5",
-                        "v3vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-125"
-                    ],
-                    "description": "libpcre in PCRE before 8.43 allows a subject buffer over-read in JIT when UTF is disabled, and \\X or \\R has more than one fixed quantifier, a related issue to CVE-2019-20454.",
-                    "diffID": "sha256:420179ad2efafbf953a0c75f68a4c9dfaf38a98643df97d415bce49b179895f7",
-                    "installedVersion": "2:8.39-13",
-                    "packageName": "libpcre3",
-                    "purl": "pkg:deb/debian/libpcre3@8.39-13?arch=amd64&distro=debian-11.9&epoch=2",
-                    "references": [
-                      "http://seclists.org/fulldisclosure/2020/Dec/32",
-                      "http://seclists.org/fulldisclosure/2021/Feb/14",
-                      "https://access.redhat.com/security/cve/CVE-2019-20838",
-                      "https://bugs.gentoo.org/717920",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=1848436",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=1848444",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-20838",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-14155",
-                      "https://errata.almalinux.org/8/ALSA-2021-4373.html",
-                      "https://errata.rockylinux.org/RLSA-2021:4373",
-                      "https://linux.oracle.com/cve/CVE-2019-20838.html",
-                      "https://linux.oracle.com/errata/ELSA-2021-4373.html",
-                      "https://lists.apache.org/thread.html/rf9fa47ab66495c78bb4120b0754dd9531ca2ff0430f6685ac9b07772%40%3Cdev.mina.apache.org%3E",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2019-20838",
-                      "https://support.apple.com/kb/HT211931",
-                      "https://support.apple.com/kb/HT212147",
-                      "https://ubuntu.com/security/notices/USN-5425-1",
-                      "https://www.cve.org/CVERecord?id=CVE-2019-20838",
-                      "https://www.pcre.org/original/changelog.txt"
-                    ],
-                    "severity": "LOW",
-                    "suppressed": false,
-                    "title": "pcre: Buffer over-read in JIT when UTF is disabled and \\X or \\R has fixed quantifier greater than 1"
-                  },
-                  {
-                    "cve": "CVE-2025-64720",
-                    "cvss": {
-                      "redhat": {
-                        "v3score": "7.1",
-                        "v3vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:H"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-125"
-                    ],
-                    "description": "LIBPNG is a reference library for use in applications that read, create, and manipulate PNG (Portable Network Graphics) raster image files. From version 1.6.0 to before 1.6.51, an out-of-bounds read vulnerability exists in png_image_read_composite when processing palette images with PNG_FLAG_OPTIMIZE_ALPHA enabled. The palette compositing code in png_init_read_transformations incorrectly applies background compositing during premultiplication, violating the invariant component \u2264 alpha \u00d7 257 required by the simplified PNG API. This issue has been patched in version 1.6.51.",
-                    "diffID": "sha256:9664c8c85da49d2cedf85c6b8af0e128318580b95b277b87593a4f75886148af",
-                    "fixedVersions": [
-                      "1.6.37-3+deb11u1"
-                    ],
-                    "installedVersion": "1.6.37-3",
-                    "packageName": "libpng16-16",
-                    "purl": "pkg:deb/debian/libpng16-16@1.6.37-3?arch=amd64&distro=debian-11.9",
-                    "references": [
-                      "https://access.redhat.com/errata/RHSA-2026:0932",
-                      "https://access.redhat.com/security/cve/CVE-2025-64720",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2416904",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2416907",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2418711",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-64720",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-65018",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-66293",
-                      "https://errata.almalinux.org/8/ALSA-2026-0932.html",
-                      "https://errata.rockylinux.org/RLSA-2026:0238",
-                      "https://github.com/pnggroup/libpng/commit/08da33b4c88cfcd36e5a706558a8d7e0e4773643",
-                      "https://github.com/pnggroup/libpng/commit/08da33b4c88cfcd36e5a706558a8d7e0e4773643 (v1.6.51)",
-                      "https://github.com/pnggroup/libpng/issues/686",
-                      "https://github.com/pnggroup/libpng/pull/751",
-                      "https://github.com/pnggroup/libpng/security/advisories/GHSA-hfc7-ph9c-wcww",
-                      "https://linux.oracle.com/cve/CVE-2025-64720.html",
-                      "https://linux.oracle.com/errata/ELSA-2026-0932.html",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2025-64720",
-                      "https://ubuntu.com/security/notices/USN-7924-1",
-                      "https://www.cve.org/CVERecord?id=CVE-2025-64720",
-                      "https://www.openwall.com/lists/oss-security/2025/11/22/1"
-                    ],
-                    "severity": "HIGH",
-                    "suppressed": false,
-                    "title": "libpng: LIBPNG buffer overflow"
-                  },
-                  {
-                    "cve": "CVE-2025-65018",
-                    "cvss": {
-                      "redhat": {
-                        "v3score": "7.1",
-                        "v3vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:H"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-122",
-                      "CWE-787"
-                    ],
-                    "description": "LIBPNG is a reference library for use in applications that read, create, and manipulate PNG (Portable Network Graphics) raster image files. From version 1.6.0 to before 1.6.51, there is a heap buffer overflow vulnerability in the libpng simplified API function png_image_finish_read when processing 16-bit interlaced PNGs with 8-bit output format. Attacker-crafted interlaced PNG files cause heap writes beyond allocated buffer bounds. This issue has been patched in version 1.6.51.",
-                    "diffID": "sha256:9664c8c85da49d2cedf85c6b8af0e128318580b95b277b87593a4f75886148af",
-                    "fixedVersions": [
-                      "1.6.37-3+deb11u1"
-                    ],
-                    "installedVersion": "1.6.37-3",
-                    "packageName": "libpng16-16",
-                    "purl": "pkg:deb/debian/libpng16-16@1.6.37-3?arch=amd64&distro=debian-11.9",
-                    "references": [
-                      "https://access.redhat.com/errata/RHSA-2026:0932",
-                      "https://access.redhat.com/security/cve/CVE-2025-65018",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2416904",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2416907",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2418711",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-64720",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-65018",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-66293",
-                      "https://errata.almalinux.org/8/ALSA-2026-0932.html",
-                      "https://errata.rockylinux.org/RLSA-2026:0238",
-                      "https://github.com/pnggroup/libpng/commit/16b5e3823918840aae65c0a6da57c78a5a496a4d",
-                      "https://github.com/pnggroup/libpng/commit/16b5e3823918840aae65c0a6da57c78a5a496a4d (v1.6.51)",
-                      "https://github.com/pnggroup/libpng/commit/218612ddd6b17944e21eda56caf8b4bf7779d1ea",
-                      "https://github.com/pnggroup/libpng/commit/218612ddd6b17944e21eda56caf8b4bf7779d1ea (v1.6.51)",
-                      "https://github.com/pnggroup/libpng/issues/755",
-                      "https://github.com/pnggroup/libpng/pull/757",
-                      "https://github.com/pnggroup/libpng/security/advisories/GHSA-7wv6-48j4-hj3g",
-                      "https://linux.oracle.com/cve/CVE-2025-65018.html",
-                      "https://linux.oracle.com/errata/ELSA-2026-0932.html",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2025-65018",
-                      "https://ubuntu.com/security/notices/USN-7924-1",
-                      "https://www.cve.org/CVERecord?id=CVE-2025-65018",
-                      "https://www.openwall.com/lists/oss-security/2025/11/22/1"
-                    ],
-                    "severity": "HIGH",
-                    "suppressed": false,
-                    "title": "libpng: LIBPNG heap buffer overflow"
-                  },
-                  {
-                    "cve": "CVE-2025-66293",
-                    "cvss": {
-                      "redhat": {
-                        "v3score": "7.1",
-                        "v3vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:H"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-125"
-                    ],
-                    "description": "LIBPNG is a reference library for use in applications that read, create, and manipulate PNG (Portable Network Graphics) raster image files. Prior to 1.6.52, an out-of-bounds read vulnerability in libpng's simplified API allows reading up to 1012 bytes beyond the png_sRGB_base[512] array when processing valid palette PNG images with partial transparency and gamma correction. The PNG files that trigger this vulnerability are valid per the PNG specification; the bug is in libpng's internal state management. Upgrade to libpng 1.6.52 or later.",
-                    "diffID": "sha256:9664c8c85da49d2cedf85c6b8af0e128318580b95b277b87593a4f75886148af",
-                    "fixedVersions": [
-                      "1.6.37-3+deb11u1"
-                    ],
-                    "installedVersion": "1.6.37-3",
-                    "packageName": "libpng16-16",
-                    "purl": "pkg:deb/debian/libpng16-16@1.6.37-3?arch=amd64&distro=debian-11.9",
-                    "references": [
-                      "http://www.openwall.com/lists/oss-security/2025/12/03/6",
-                      "http://www.openwall.com/lists/oss-security/2025/12/03/7",
-                      "http://www.openwall.com/lists/oss-security/2025/12/03/8",
-                      "https://access.redhat.com/errata/RHSA-2026:0241",
-                      "https://access.redhat.com/security/cve/CVE-2025-66293",
-                      "https://bugzilla.redhat.com/2416904",
-                      "https://bugzilla.redhat.com/2416907",
-                      "https://bugzilla.redhat.com/2418711",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2416904",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2416907",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2418711",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-64720",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-65018",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-66293",
-                      "https://errata.almalinux.org/8/ALSA-2026-0241.html",
-                      "https://errata.rockylinux.org/RLSA-2026:0238",
-                      "https://github.com/pnggroup/libpng/commit/788a624d7387a758ffd5c7ab010f1870dea753a1",
-                      "https://github.com/pnggroup/libpng/commit/a05a48b756de63e3234ea6b3b938b8f5f862484a",
-                      "https://github.com/pnggroup/libpng/issues/764",
-                      "https://github.com/pnggroup/libpng/security/advisories/GHSA-9mpm-9pxh-mg4f",
-                      "https://linux.oracle.com/cve/CVE-2025-66293.html",
-                      "https://linux.oracle.com/errata/ELSA-2026-0241.html",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2025-66293",
-                      "https://ubuntu.com/security/notices/USN-7963-1",
-                      "https://www.cve.org/CVERecord?id=CVE-2025-66293"
-                    ],
-                    "severity": "HIGH",
-                    "suppressed": false,
-                    "title": "libpng: LIBPNG out-of-bounds read in png_image_read_composite"
-                  },
-                  {
-                    "cve": "CVE-2026-22695",
-                    "cvss": {
-                      "nvd": {
-                        "v3score": "7.1",
-                        "v3vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H"
-                      },
-                      "redhat": {
-                        "v3score": "6.1",
-                        "v3vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:H"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-125"
-                    ],
-                    "description": "LIBPNG is a reference library for use in applications that read, create, and manipulate PNG (Portable Network Graphics) raster image files. From 1.6.51 to 1.6.53, there is a heap buffer over-read in the libpng simplified API function png_image_finish_read when processing interlaced 16-bit PNGs with 8-bit output format and non-minimal row stride. This is a regression introduced by the fix for CVE-2025-65018. This vulnerability is fixed in 1.6.54.",
-                    "diffID": "sha256:9664c8c85da49d2cedf85c6b8af0e128318580b95b277b87593a4f75886148af",
-                    "installedVersion": "1.6.37-3",
-                    "packageName": "libpng16-16",
-                    "purl": "pkg:deb/debian/libpng16-16@1.6.37-3?arch=amd64&distro=debian-11.9",
-                    "references": [
-                      "https://access.redhat.com/security/cve/CVE-2026-22695",
-                      "https://github.com/pnggroup/libpng/commit/218612ddd6b17944e21eda56caf8b4bf7779d1ea",
-                      "https://github.com/pnggroup/libpng/commit/e4f7ad4ea2",
-                      "https://github.com/pnggroup/libpng/issues/778",
-                      "https://github.com/pnggroup/libpng/security/advisories/GHSA-mmq5-27w3-rxpp",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2026-22695",
-                      "https://ubuntu.com/security/notices/USN-7963-1",
-                      "https://www.cve.org/CVERecord?id=CVE-2026-22695",
-                      "https://www.openwall.com/lists/oss-security/2026/01/12/7"
-                    ],
-                    "severity": "HIGH",
-                    "suppressed": false,
-                    "title": "libpng: libpng: Denial of service and information disclosure via heap buffer over-read in png_image_finish_read"
-                  },
-                  {
-                    "cve": "CVE-2026-22801",
-                    "cvss": {
-                      "nvd": {
-                        "v3score": "7.8",
-                        "v3vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"
-                      },
-                      "redhat": {
-                        "v3score": "6.8",
-                        "v3vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-125",
-                      "CWE-190"
-                    ],
-                    "description": "LIBPNG is a reference library for use in applications that read, create, and manipulate PNG (Portable Network Graphics) raster image files. From 1.6.26 to 1.6.53, there is an integer truncation in the libpng simplified write API functions png_write_image_16bit and png_write_image_8bit causes heap buffer over-read when the caller provides a negative row stride (for bottom-up image layouts) or a stride exceeding 65535 bytes. The bug was introduced in libpng 1.6.26 (October 2016) by casts added to silence compiler warnings on 16-bit systems. This vulnerability is fixed in 1.6.54.",
-                    "diffID": "sha256:9664c8c85da49d2cedf85c6b8af0e128318580b95b277b87593a4f75886148af",
-                    "installedVersion": "1.6.37-3",
-                    "packageName": "libpng16-16",
-                    "purl": "pkg:deb/debian/libpng16-16@1.6.37-3?arch=amd64&distro=debian-11.9",
-                    "references": [
-                      "https://access.redhat.com/security/cve/CVE-2026-22801",
-                      "https://github.com/pnggroup/libpng/security/advisories/GHSA-vgjq-8cw5-ggw8",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2026-22801",
-                      "https://ubuntu.com/security/notices/USN-7963-1",
-                      "https://www.cve.org/CVERecord?id=CVE-2026-22801",
-                      "https://www.openwall.com/lists/oss-security/2026/01/12/7"
-                    ],
-                    "severity": "HIGH",
-                    "suppressed": false,
-                    "title": "libpng: libpng: Information disclosure and denial of service via integer truncation in simplified write API"
-                  },
-                  {
-                    "cve": "CVE-2025-64505",
-                    "cvss": {
-                      "redhat": {
-                        "v3score": "4.4",
-                        "v3vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-125"
-                    ],
-                    "description": "LIBPNG is a reference library for use in applications that read, create, and manipulate PNG (Portable Network Graphics) raster image files. Prior to version 1.6.51, a heap buffer over-read vulnerability exists in libpng's png_do_quantize function when processing PNG files with malformed palette indices. The vulnerability occurs when palette_lookup array bounds are not validated against externally-supplied image data, allowing an attacker to craft a PNG file with out-of-range palette indices that trigger out-of-bounds memory access. This issue has been patched in version 1.6.51.",
-                    "diffID": "sha256:9664c8c85da49d2cedf85c6b8af0e128318580b95b277b87593a4f75886148af",
-                    "fixedVersions": [
-                      "1.6.37-3+deb11u1"
-                    ],
-                    "installedVersion": "1.6.37-3",
-                    "packageName": "libpng16-16",
-                    "purl": "pkg:deb/debian/libpng16-16@1.6.37-3?arch=amd64&distro=debian-11.9",
-                    "references": [
-                      "https://access.redhat.com/security/cve/CVE-2025-64505",
-                      "https://github.com/pnggroup/libpng/commit/6a528eb5fd0dd7f6de1c39d30de0e41473431c37",
-                      "https://github.com/pnggroup/libpng/commit/6a528eb5fd0dd7f6de1c39d30de0e41473431c37 (v1.6.51)",
-                      "https://github.com/pnggroup/libpng/pull/748",
-                      "https://github.com/pnggroup/libpng/security/advisories/GHSA-4952-h5wq-4m42",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2025-64505",
-                      "https://ubuntu.com/security/notices/USN-7924-1",
-                      "https://www.cve.org/CVERecord?id=CVE-2025-64505",
-                      "https://www.openwall.com/lists/oss-security/2025/11/22/1"
-                    ],
-                    "severity": "MEDIUM",
-                    "suppressed": false,
-                    "title": "libpng: LIBPNG heap buffer overflow via malformed palette index"
-                  },
-                  {
-                    "cve": "CVE-2025-64506",
-                    "cvss": {
-                      "redhat": {
-                        "v3score": "6.1",
-                        "v3vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:H"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-125"
-                    ],
-                    "description": "LIBPNG is a reference library for use in applications that read, create, and manipulate PNG (Portable Network Graphics) raster image files. From version 1.6.0 to before 1.6.51, a heap buffer over-read vulnerability exists in libpng's png_write_image_8bit function when processing 8-bit images through the simplified write API with convert_to_8bit enabled. The vulnerability affects 8-bit grayscale+alpha, RGB/RGBA, and images with incomplete row data. A conditional guard incorrectly allows 8-bit input to enter code expecting 16-bit input, causing reads up to 2 bytes beyond allocated buffer boundaries. This issue has been patched in version 1.6.51.",
-                    "diffID": "sha256:9664c8c85da49d2cedf85c6b8af0e128318580b95b277b87593a4f75886148af",
-                    "fixedVersions": [
-                      "1.6.37-3+deb11u1"
-                    ],
-                    "installedVersion": "1.6.37-3",
-                    "packageName": "libpng16-16",
-                    "purl": "pkg:deb/debian/libpng16-16@1.6.37-3?arch=amd64&distro=debian-11.9",
-                    "references": [
-                      "https://access.redhat.com/security/cve/CVE-2025-64506",
-                      "https://github.com/pnggroup/libpng/commit/2bd84c019c300b78e811743fbcddb67c9d9bf821",
-                      "https://github.com/pnggroup/libpng/commit/2bd84c019c300b78e811743fbcddb67c9d9bf821 (v1.6.51)",
-                      "https://github.com/pnggroup/libpng/pull/749",
-                      "https://github.com/pnggroup/libpng/security/advisories/GHSA-qpr4-xm66-hww6",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2025-64506",
-                      "https://ubuntu.com/security/notices/USN-7924-1",
-                      "https://www.cve.org/CVERecord?id=CVE-2025-64506",
-                      "https://www.openwall.com/lists/oss-security/2025/11/22/1"
-                    ],
-                    "severity": "MEDIUM",
-                    "suppressed": false,
-                    "title": "libpng: LIBPNG heap buffer over-read"
-                  },
-                  {
-                    "cve": "CVE-2019-6129",
-                    "cvss": {
-                      "nvd": {
-                        "v3score": "6.5",
-                        "v3vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H"
-                      },
-                      "redhat": {
-                        "v3score": "3.3",
-                        "v3vector": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-401"
-                    ],
-                    "description": "png_create_info_struct in png.c in libpng 1.6.36 has a memory leak, as demonstrated by pngcp. NOTE: a third party has stated \"I don't think it is libpng's job to free this buffer.",
-                    "diffID": "sha256:9664c8c85da49d2cedf85c6b8af0e128318580b95b277b87593a4f75886148af",
-                    "installedVersion": "1.6.37-3",
-                    "packageName": "libpng16-16",
-                    "purl": "pkg:deb/debian/libpng16-16@1.6.37-3?arch=amd64&distro=debian-11.9",
-                    "references": [
-                      "https://access.redhat.com/security/cve/CVE-2019-6129",
-                      "https://github.com/glennrp/libpng/issues/269",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2019-6129",
-                      "https://www.cve.org/CVERecord?id=CVE-2019-6129",
-                      "https://www.oracle.com/technetwork/security-advisory/cpujul2019-5072835.html"
-                    ],
-                    "severity": "LOW",
-                    "suppressed": false,
-                    "title": "libpng: memory leak of png_info struct in pngcp.c"
-                  },
-                  {
-                    "cve": "CVE-2021-4214",
-                    "cvss": {
-                      "nvd": {
-                        "v3score": "5.5",
-                        "v3vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H"
-                      },
-                      "redhat": {
-                        "v3score": "5.5",
-                        "v3vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-120",
-                      "CWE-787"
-                    ],
-                    "description": "A heap overflow flaw was found in libpngs' pngimage.c program. This flaw allows an attacker with local network access to pass a specially crafted PNG file to the pngimage utility, causing an application to crash, leading to a denial of service.",
-                    "diffID": "sha256:9664c8c85da49d2cedf85c6b8af0e128318580b95b277b87593a4f75886148af",
-                    "installedVersion": "1.6.37-3",
-                    "packageName": "libpng16-16",
-                    "purl": "pkg:deb/debian/libpng16-16@1.6.37-3?arch=amd64&distro=debian-11.9",
-                    "references": [
-                      "https://access.redhat.com/security/cve/CVE-2021-4214",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2043393",
-                      "https://github.com/glennrp/libpng/issues/302",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2021-4214",
-                      "https://security-tracker.debian.org/tracker/CVE-2021-4214",
-                      "https://security.netapp.com/advisory/ntap-20221020-0001/",
-                      "https://www.cve.org/CVERecord?id=CVE-2021-4214"
-                    ],
-                    "severity": "LOW",
-                    "suppressed": false,
-                    "title": "libpng: hardcoded value leads to heap-overflow"
-                  },
-                  {
-                    "cve": "CVE-2025-28162",
-                    "cvss": {
-                      "redhat": {
-                        "v3score": "6.2",
-                        "v3vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-120"
-                    ],
-                    "description": "Buffer Overflow vulnerability in libpng 1.6.43-1.6.46 allows a local attacker to cause a denial of service via the pngimage with AddressSanitizer (ASan), the program leaks memory in various locations, eventually leading to high memory usage and causing the program to become unresponsive",
-                    "diffID": "sha256:9664c8c85da49d2cedf85c6b8af0e128318580b95b277b87593a4f75886148af",
-                    "installedVersion": "1.6.37-3",
-                    "packageName": "libpng16-16",
-                    "purl": "pkg:deb/debian/libpng16-16@1.6.37-3?arch=amd64&distro=debian-11.9",
-                    "references": [
-                      "https://access.redhat.com/security/cve/CVE-2025-28162",
-                      "https://gist.github.com/kittener/fbfdb9b5610c6b3db0d5dea045a07c60",
-                      "https://github.com/pnggroup/libpng/issues/656",
-                      "https://github.com/pnggroup/libpng/pull/657",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2025-28162",
-                      "https://ubuntu.com/security/notices/USN-7993-1",
-                      "https://www.cve.org/CVERecord?id=CVE-2025-28162"
-                    ],
-                    "severity": "LOW",
-                    "suppressed": false,
-                    "title": "libpng: libpng: Denial of Service via buffer overflow in pngimage utility"
-                  },
-                  {
-                    "cve": "CVE-2025-28164",
-                    "cvss": {
-                      "redhat": {
-                        "v3score": "5",
-                        "v3vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:H"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-120"
-                    ],
-                    "description": "Buffer Overflow vulnerability in libpng 1.6.43-1.6.46 allows a local attacker to cause a denial of service via png_create_read_struct() function.",
-                    "diffID": "sha256:9664c8c85da49d2cedf85c6b8af0e128318580b95b277b87593a4f75886148af",
-                    "installedVersion": "1.6.37-3",
-                    "packageName": "libpng16-16",
-                    "purl": "pkg:deb/debian/libpng16-16@1.6.37-3?arch=amd64&distro=debian-11.9",
-                    "references": [
-                      "https://access.redhat.com/security/cve/CVE-2025-28164",
-                      "https://gist.github.com/kittener/506516f8c22178005b4379c8b2a7de20",
-                      "https://github.com/pnggroup/libpng/issues/655",
-                      "https://github.com/pnggroup/libpng/pull/657",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2025-28164",
-                      "https://ubuntu.com/security/notices/USN-7993-1",
-                      "https://www.cve.org/CVERecord?id=CVE-2025-28164"
-                    ],
-                    "severity": "LOW",
-                    "suppressed": false,
-                    "title": "libpng: libpng: Denial of Service via buffer overflow in png_create_read_struct() function"
-                  },
-                  {
-                    "cve": "CVE-2021-36084",
-                    "cvss": {
-                      "nvd": {
-                        "v3score": "3.3",
-                        "v3vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L"
-                      },
-                      "redhat": {
-                        "v3score": "3.3",
-                        "v3vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-416"
-                    ],
-                    "description": "The CIL compiler in SELinux 3.2 has a use-after-free in __cil_verify_classperms (called from __cil_verify_classpermission and __cil_pre_verify_helper).",
-                    "diffID": "sha256:420179ad2efafbf953a0c75f68a4c9dfaf38a98643df97d415bce49b179895f7",
-                    "fixedVersions": [
-                      "3.1-1+deb11u1"
-                    ],
-                    "installedVersion": "3.1-1",
-                    "packageName": "libsepol1",
-                    "purl": "pkg:deb/debian/libsepol1@3.1-1?arch=amd64&distro=debian-11.9",
-                    "references": [
-                      "https://access.redhat.com/security/cve/CVE-2021-36084",
-                      "https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=31065",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=1979662",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=1979664",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=1979666",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=1979668",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-36084",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-36085",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-36086",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-36087",
-                      "https://errata.almalinux.org/8/ALSA-2021-4513.html",
-                      "https://errata.rockylinux.org/RLSA-2021:4513",
-                      "https://github.com/SELinuxProject/selinux/commit/f34d3d30c8325e4847a6b696fe7a3936a8a361f3",
-                      "https://github.com/google/oss-fuzz-vulns/blob/main/vulns/selinux/OSV-2021-417.yaml",
-                      "https://linux.oracle.com/cve/CVE-2021-36084.html",
-                      "https://linux.oracle.com/errata/ELSA-2021-4513.html",
-                      "https://lists.debian.org/debian-lts-announce/2024/10/msg00021.html",
-                      "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/U7ZYR3PIJ75N6U2IONJWCKZ5L2NKJTGR/",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2021-36084",
-                      "https://security.netapp.com/advisory/ntap-20250207-0004/",
-                      "https://ubuntu.com/security/notices/USN-5391-1",
-                      "https://www.cve.org/CVERecord?id=CVE-2021-36084"
-                    ],
-                    "severity": "LOW",
-                    "suppressed": false,
-                    "title": "libsepol: use-after-free in __cil_verify_classperms()"
-                  },
-                  {
-                    "cve": "CVE-2021-36085",
-                    "cvss": {
-                      "nvd": {
-                        "v3score": "3.3",
-                        "v3vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L"
-                      },
-                      "redhat": {
-                        "v3score": "3.3",
-                        "v3vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-416"
-                    ],
-                    "description": "The CIL compiler in SELinux 3.2 has a use-after-free in __cil_verify_classperms (called from __verify_map_perm_classperms and hashtab_map).",
-                    "diffID": "sha256:420179ad2efafbf953a0c75f68a4c9dfaf38a98643df97d415bce49b179895f7",
-                    "fixedVersions": [
-                      "3.1-1+deb11u1"
-                    ],
-                    "installedVersion": "3.1-1",
-                    "packageName": "libsepol1",
-                    "purl": "pkg:deb/debian/libsepol1@3.1-1?arch=amd64&distro=debian-11.9",
-                    "references": [
-                      "https://access.redhat.com/security/cve/CVE-2021-36085",
-                      "https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=31124",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=1979662",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=1979664",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=1979666",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=1979668",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-36084",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-36085",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-36086",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-36087",
-                      "https://errata.almalinux.org/8/ALSA-2021-4513.html",
-                      "https://errata.rockylinux.org/RLSA-2021:4513",
-                      "https://github.com/SELinuxProject/selinux/commit/2d35fcc7e9e976a2346b1de20e54f8663e8a6cba",
-                      "https://github.com/google/oss-fuzz-vulns/blob/main/vulns/selinux/OSV-2021-421.yaml",
-                      "https://linux.oracle.com/cve/CVE-2021-36085.html",
-                      "https://linux.oracle.com/errata/ELSA-2021-4513.html",
-                      "https://lists.debian.org/debian-lts-announce/2024/10/msg00021.html",
-                      "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/U7ZYR3PIJ75N6U2IONJWCKZ5L2NKJTGR/",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2021-36085",
-                      "https://security.netapp.com/advisory/ntap-20250207-0004/",
-                      "https://ubuntu.com/security/notices/USN-5391-1",
-                      "https://www.cve.org/CVERecord?id=CVE-2021-36085"
-                    ],
-                    "severity": "LOW",
-                    "suppressed": false,
-                    "title": "libsepol: use-after-free in __cil_verify_classperms()"
-                  },
-                  {
-                    "cve": "CVE-2021-36086",
-                    "cvss": {
-                      "nvd": {
-                        "v3score": "3.3",
-                        "v3vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L"
-                      },
-                      "redhat": {
-                        "v3score": "3.3",
-                        "v3vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-416"
-                    ],
-                    "description": "The CIL compiler in SELinux 3.2 has a use-after-free in cil_reset_classpermission (called from cil_reset_classperms_set and cil_reset_classperms_list).",
-                    "diffID": "sha256:420179ad2efafbf953a0c75f68a4c9dfaf38a98643df97d415bce49b179895f7",
-                    "fixedVersions": [
-                      "3.1-1+deb11u1"
-                    ],
-                    "installedVersion": "3.1-1",
-                    "packageName": "libsepol1",
-                    "purl": "pkg:deb/debian/libsepol1@3.1-1?arch=amd64&distro=debian-11.9",
-                    "references": [
-                      "https://access.redhat.com/security/cve/CVE-2021-36086",
-                      "https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=32177",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=1979662",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=1979664",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=1979666",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=1979668",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-36084",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-36085",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-36086",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-36087",
-                      "https://errata.almalinux.org/8/ALSA-2021-4513.html",
-                      "https://errata.rockylinux.org/RLSA-2021:4513",
-                      "https://github.com/SELinuxProject/selinux/commit/c49a8ea09501ad66e799ea41b8154b6770fec2c8",
-                      "https://github.com/google/oss-fuzz-vulns/blob/main/vulns/selinux/OSV-2021-536.yaml",
-                      "https://linux.oracle.com/cve/CVE-2021-36086.html",
-                      "https://linux.oracle.com/errata/ELSA-2021-4513.html",
-                      "https://lists.debian.org/debian-lts-announce/2024/10/msg00021.html",
-                      "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/U7ZYR3PIJ75N6U2IONJWCKZ5L2NKJTGR/",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2021-36086",
-                      "https://security.netapp.com/advisory/ntap-20250207-0004/",
-                      "https://ubuntu.com/security/notices/USN-5391-1",
-                      "https://www.cve.org/CVERecord?id=CVE-2021-36086"
-                    ],
-                    "severity": "LOW",
-                    "suppressed": false,
-                    "title": "libsepol: use-after-free in cil_reset_classpermission()"
-                  },
-                  {
-                    "cve": "CVE-2021-36087",
-                    "cvss": {
-                      "nvd": {
-                        "v3score": "3.3",
-                        "v3vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L"
-                      },
-                      "redhat": {
-                        "v3score": "3.3",
-                        "v3vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-125"
-                    ],
-                    "description": "The CIL compiler in SELinux 3.2 has a heap-based buffer over-read in ebitmap_match_any (called indirectly from cil_check_neverallow). This occurs because there is sometimes a lack of checks for invalid statements in an optional block.",
-                    "diffID": "sha256:420179ad2efafbf953a0c75f68a4c9dfaf38a98643df97d415bce49b179895f7",
-                    "fixedVersions": [
-                      "3.1-1+deb11u1"
-                    ],
-                    "installedVersion": "3.1-1",
-                    "packageName": "libsepol1",
-                    "purl": "pkg:deb/debian/libsepol1@3.1-1?arch=amd64&distro=debian-11.9",
-                    "references": [
-                      "https://access.redhat.com/security/cve/CVE-2021-36087",
-                      "https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=32675",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=1979662",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=1979664",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=1979666",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=1979668",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-36084",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-36085",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-36086",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-36087",
-                      "https://errata.almalinux.org/8/ALSA-2021-4513.html",
-                      "https://errata.rockylinux.org/RLSA-2021:4513",
-                      "https://github.com/SELinuxProject/selinux/commit/340f0eb7f3673e8aacaf0a96cbfcd4d12a405521",
-                      "https://github.com/google/oss-fuzz-vulns/blob/main/vulns/selinux/OSV-2021-585.yaml",
-                      "https://linux.oracle.com/cve/CVE-2021-36087.html",
-                      "https://linux.oracle.com/errata/ELSA-2021-4513.html",
-                      "https://lists.debian.org/debian-lts-announce/2024/10/msg00021.html",
-                      "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/U7ZYR3PIJ75N6U2IONJWCKZ5L2NKJTGR/",
-                      "https://lore.kernel.org/selinux/CAEN2sdqJKHvDzPnxS-J8grU8fSf32DDtx=kyh84OsCq_Vm+yaQ%40mail.gmail.com/T/",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2021-36087",
-                      "https://security.netapp.com/advisory/ntap-20250207-0004/",
-                      "https://ubuntu.com/security/notices/USN-5391-1",
-                      "https://www.cve.org/CVERecord?id=CVE-2021-36087"
-                    ],
-                    "severity": "LOW",
-                    "suppressed": false,
-                    "title": "libsepol: heap-based buffer overflow in ebitmap_match_any()"
-                  },
-                  {
-                    "cve": "CVE-2025-14104",
-                    "cvss": {
-                      "redhat": {
-                        "v3score": "6.1",
-                        "v3vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-125"
-                    ],
-                    "description": "A flaw was found in util-linux. This vulnerability allows a heap buffer overread when processing 256-byte usernames, specifically within the `setpwnam()` function, affecting SUID (Set User ID) login-utils utilities writing to the password database.",
-                    "diffID": "sha256:420179ad2efafbf953a0c75f68a4c9dfaf38a98643df97d415bce49b179895f7",
-                    "installedVersion": "2.36.1-8+deb11u2",
-                    "packageName": "libsmartcols1",
-                    "purl": "pkg:deb/debian/libsmartcols1@2.36.1-8%2Bdeb11u2?arch=amd64&distro=debian-11.9",
-                    "references": [
-                      "https://access.redhat.com/errata/RHSA-2026:1696",
-                      "https://access.redhat.com/errata/RHSA-2026:1852",
-                      "https://access.redhat.com/errata/RHSA-2026:1913",
-                      "https://access.redhat.com/security/cve/CVE-2025-14104",
-                      "https://bugzilla.redhat.com/2419369",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2419369",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-14104",
-                      "https://errata.almalinux.org/10/ALSA-2026-1696.html",
-                      "https://errata.rockylinux.org/RLSA-2026:1913",
-                      "https://linux.oracle.com/cve/CVE-2025-14104.html",
-                      "https://linux.oracle.com/errata/ELSA-2026-1913.html",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2025-14104",
-                      "https://www.cve.org/CVERecord?id=CVE-2025-14104"
-                    ],
-                    "severity": "MEDIUM",
-                    "suppressed": false,
-                    "title": "util-linux: util-linux: Heap buffer overread in setpwnam() when processing 256-byte usernames"
-                  },
-                  {
-                    "cve": "CVE-2022-0563",
-                    "cvss": {
-                      "nvd": {
-                        "v3score": "5.5",
-                        "v3vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N"
-                      },
-                      "redhat": {
-                        "v3score": "5.5",
-                        "v3vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-209"
-                    ],
-                    "description": "A flaw was found in the util-linux chfn and chsh utilities when compiled with Readline support. The Readline library uses an \"INPUTRC\" environment variable to get a path to the library config file. When the library cannot parse the specified file, it prints an error message containing data from the file. This flaw allows an unprivileged user to read root-owned files, potentially leading to privilege escalation. This flaw affects util-linux versions prior to 2.37.4.",
-                    "diffID": "sha256:420179ad2efafbf953a0c75f68a4c9dfaf38a98643df97d415bce49b179895f7",
-                    "installedVersion": "2.36.1-8+deb11u2",
-                    "packageName": "libsmartcols1",
-                    "purl": "pkg:deb/debian/libsmartcols1@2.36.1-8%2Bdeb11u2?arch=amd64&distro=debian-11.9",
-                    "references": [
-                      "https://access.redhat.com/security/cve/CVE-2022-0563",
-                      "https://blog.trailofbits.com/2023/02/16/suid-logic-bug-linux-readline/",
-                      "https://lore.kernel.org/util-linux/20220214110609.msiwlm457ngoic6w%40ws.net.home/T/#u",
-                      "https://lore.kernel.org/util-linux/20220214110609.msiwlm457ngoic6w@ws.net.home/T/#u",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2022-0563",
-                      "https://security.gentoo.org/glsa/202401-08",
-                      "https://security.netapp.com/advisory/ntap-20220331-0002/",
-                      "https://www.cve.org/CVERecord?id=CVE-2022-0563"
-                    ],
-                    "severity": "LOW",
-                    "suppressed": false,
-                    "title": "util-linux: partial disclosure of arbitrary files in chfn and chsh when compiled with libreadline"
-                  },
-                  {
-                    "cve": "CVE-2022-1304",
-                    "cvss": {
-                      "nvd": {
-                        "v3score": "7.8",
-                        "v3vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H"
-                      },
-                      "redhat": {
-                        "v3score": "5.8",
-                        "v3vector": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:H"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-125",
-                      "CWE-787"
-                    ],
-                    "description": "An out-of-bounds read/write vulnerability was found in e2fsprogs 1.46.5. This issue leads to a segmentation fault and possibly arbitrary code execution via a specially crafted filesystem.",
-                    "diffID": "sha256:420179ad2efafbf953a0c75f68a4c9dfaf38a98643df97d415bce49b179895f7",
-                    "fixedVersions": [
-                      "1.46.2-2+deb11u1"
-                    ],
-                    "installedVersion": "1.46.2-2",
-                    "packageName": "libss2",
-                    "purl": "pkg:deb/debian/libss2@1.46.2-2?arch=amd64&distro=debian-11.9",
-                    "references": [
-                      "https://access.redhat.com/errata/RHSA-2022:7720",
-                      "https://access.redhat.com/security/cve/CVE-2022-1304",
-                      "https://bugzilla.redhat.com/2069726",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2069726",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-1304",
-                      "https://errata.almalinux.org/8/ALSA-2022-7720.html",
-                      "https://errata.rockylinux.org/RLSA-2022:8361",
-                      "https://linux.oracle.com/cve/CVE-2022-1304.html",
-                      "https://linux.oracle.com/errata/ELSA-2024-12731.html",
-                      "https://lists.debian.org/debian-lts-announce/2024/10/msg00001.html",
-                      "https://marc.info/?l=linux-ext4&m=165056234501732&w=2",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2022-1304",
-                      "https://security.netapp.com/advisory/ntap-20241122-0010/",
-                      "https://ubuntu.com/security/notices/USN-5464-1",
-                      "https://www.cve.org/CVERecord?id=CVE-2022-1304"
-                    ],
-                    "severity": "HIGH",
-                    "suppressed": false,
-                    "title": "e2fsprogs: out-of-bounds read/write via crafted filesystem"
-                  },
-                  {
-                    "cve": "CVE-2020-22218",
-                    "cvss": {
-                      "nvd": {
-                        "v3score": "7.5",
-                        "v3vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"
-                      },
-                      "redhat": {
-                        "v3score": "7.5",
-                        "v3vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-787"
-                    ],
-                    "description": "An issue was discovered in function _libssh2_packet_add in libssh2 1.10.0 allows attackers to access out of bounds memory.",
-                    "diffID": "sha256:9664c8c85da49d2cedf85c6b8af0e128318580b95b277b87593a4f75886148af",
-                    "fixedVersions": [
-                      "1.9.0-2+deb11u1"
-                    ],
-                    "installedVersion": "1.9.0-2",
-                    "packageName": "libssh2-1",
-                    "purl": "pkg:deb/debian/libssh2-1@1.9.0-2?arch=amd64&distro=debian-11.9",
-                    "references": [
-                      "https://access.redhat.com/security/cve/CVE-2020-22218",
-                      "https://github.com/libssh2/libssh2/pull/476",
-                      "https://linux.oracle.com/cve/CVE-2020-22218.html",
-                      "https://linux.oracle.com/errata/ELSA-2023-5615.html",
-                      "https://lists.debian.org/debian-lts-announce/2023/09/msg00006.html",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2020-22218",
-                      "https://security.netapp.com/advisory/ntap-20231006-0002/",
-                      "https://ubuntu.com/security/notices/USN-6371-1",
-                      "https://www.cve.org/CVERecord?id=CVE-2020-22218"
-                    ],
-                    "severity": "HIGH",
-                    "suppressed": false,
-                    "title": "libssh2: use-of-uninitialized-value in _libssh2_transport_read"
-                  },
-                  {
-                    "cve": "CVE-2025-69419",
-                    "cvss": {
-                      "redhat": {
-                        "v3score": "7.4",
-                        "v3vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-787"
-                    ],
-                    "description": "Issue summary: Calling PKCS12_get_friendlyname() function on a maliciously\ncrafted PKCS#12 file with a BMPString (UTF-16BE) friendly name containing\nnon-ASCII BMP code point can trigger a one byte write before the allocated\nbuffer.\n\nImpact summary: The out-of-bounds write can cause a memory corruption\nwhich can have various consequences including a Denial of Service.\n\nThe OPENSSL_uni2utf8() function performs a two-pass conversion of a PKCS#12\nBMPString (UTF-16BE) to UTF-8. In the second pass, when emitting UTF-8 bytes,\nthe helper function bmp_to_utf8() incorrectly forwards the remaining UTF-16\nsource byte count as the destination buffer capacity to UTF8_putc(). For BMP\ncode points above U+07FF, UTF-8 requires three bytes, but the forwarded\ncapacity can be just two bytes. UTF8_putc() then returns -1, and this negative\nvalue is added to the output length without validation, causing the\nlength to become negative. The subsequent trailing NUL byte is then written\nat a negative offset, causing write outside of heap allocated buffer.\n\nThe vulnerability is reachable via the public PKCS12_get_friendlyname() API\nwhen parsing attacker-controlled PKCS#12 files. While PKCS12_parse() uses a\ndifferent code path that avoids this issue, PKCS12_get_friendlyname() directly\ninvokes the vulnerable function. Exploitation requires an attacker to provide\na malicious PKCS#12 file to be parsed by the application and the attacker\ncan just trigger a one zero byte write before the allocated buffer.\nFor that reason the issue was assessed as Low severity according to our\nSecurity Policy.\n\nThe FIPS modules in 3.6, 3.5, 3.4, 3.3 and 3.0 are not affected by this issue,\nas the PKCS#12 implementation is outside the OpenSSL FIPS module boundary.\n\nOpenSSL 3.6, 3.5, 3.4, 3.3, 3.0 and 1.1.1 are vulnerable to this issue.\n\nOpenSSL 1.0.2 is not affected by this issue.",
-                    "diffID": "sha256:420179ad2efafbf953a0c75f68a4c9dfaf38a98643df97d415bce49b179895f7",
-                    "installedVersion": "1.1.1w-0+deb11u1",
-                    "packageName": "libssl1.1",
-                    "purl": "pkg:deb/debian/libssl1.1@1.1.1w-0%2Bdeb11u1?arch=amd64&distro=debian-11.9",
-                    "references": [
-                      "https://access.redhat.com/errata/RHSA-2026:1472",
-                      "https://access.redhat.com/security/cve/CVE-2025-69419",
-                      "https://bugzilla.redhat.com/2430375",
-                      "https://bugzilla.redhat.com/2430376",
-                      "https://bugzilla.redhat.com/2430377",
-                      "https://bugzilla.redhat.com/2430378",
-                      "https://bugzilla.redhat.com/2430379",
-                      "https://bugzilla.redhat.com/2430380",
-                      "https://bugzilla.redhat.com/2430381",
-                      "https://bugzilla.redhat.com/2430386",
-                      "https://bugzilla.redhat.com/2430387",
-                      "https://bugzilla.redhat.com/2430388",
-                      "https://bugzilla.redhat.com/2430389",
-                      "https://bugzilla.redhat.com/2430390",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430375",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430376",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430377",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430378",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430379",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430380",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430381",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430386",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430387",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430388",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430389",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430390",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-11187",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-15467",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-15468",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-15469",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-66199",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-68160",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-69418",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-69419",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-69420",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-69421",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-22795",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-22796",
-                      "https://errata.almalinux.org/10/ALSA-2026-1472.html",
-                      "https://errata.rockylinux.org/RLSA-2026:1473",
-                      "https://github.com/openssl/openssl/commit/41be0f216404f14457bbf3b9cc488dba60b49296",
-                      "https://github.com/openssl/openssl/commit/7e9cac9832e4705b91987c2474ed06a37a93cecb",
-                      "https://github.com/openssl/openssl/commit/a26a90d38edec3748566129d824e664b54bee2e2",
-                      "https://github.com/openssl/openssl/commit/cda12de3bc0e333ea8d2c6fd15001dbdaf280015",
-                      "https://github.com/openssl/openssl/commit/ff628933755075446bca8307e8417c14d164b535",
-                      "https://linux.oracle.com/cve/CVE-2025-69419.html",
-                      "https://linux.oracle.com/errata/ELSA-2026-50081.html",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2025-69419",
-                      "https://openssl-library.org/news/secadv/20260127.txt",
-                      "https://ubuntu.com/security/notices/USN-7980-1",
-                      "https://ubuntu.com/security/notices/USN-7980-2",
-                      "https://www.cve.org/CVERecord?id=CVE-2025-69419"
-                    ],
-                    "severity": "HIGH",
-                    "suppressed": false,
-                    "title": "openssl: OpenSSL: Arbitrary code execution due to out-of-bounds write in PKCS#12 processing"
-                  },
-                  {
-                    "cve": "CVE-2025-69421",
-                    "cvss": {
-                      "nvd": {
-                        "v3score": "7.5",
-                        "v3vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"
-                      },
-                      "redhat": {
-                        "v3score": "6.5",
-                        "v3vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-476"
-                    ],
-                    "description": "Issue summary: Processing a malformed PKCS#12 file can trigger a NULL pointer\ndereference in the PKCS12_item_decrypt_d2i_ex() function.\n\nImpact summary: A NULL pointer dereference can trigger a crash which leads to\nDenial of Service for an application processing PKCS#12 files.\n\nThe PKCS12_item_decrypt_d2i_ex() function does not check whether the oct\nparameter is NULL before dereferencing it. When called from\nPKCS12_unpack_p7encdata() with a malformed PKCS#12 file, this parameter can\nbe NULL, causing a crash. The vulnerability is limited to Denial of Service\nand cannot be escalated to achieve code execution or memory disclosure.\n\nExploiting this issue requires an attacker to provide a malformed PKCS#12 file\nto an application that processes it. For that reason the issue was assessed as\nLow severity according to our Security Policy.\n\nThe FIPS modules in 3.6, 3.5, 3.4, 3.3 and 3.0 are not affected by this issue,\nas the PKCS#12 implementation is outside the OpenSSL FIPS module boundary.\n\nOpenSSL 3.6, 3.5, 3.4, 3.3, 3.0, 1.1.1 and 1.0.2 are vulnerable to this issue.",
-                    "diffID": "sha256:420179ad2efafbf953a0c75f68a4c9dfaf38a98643df97d415bce49b179895f7",
-                    "installedVersion": "1.1.1w-0+deb11u1",
-                    "packageName": "libssl1.1",
-                    "purl": "pkg:deb/debian/libssl1.1@1.1.1w-0%2Bdeb11u1?arch=amd64&distro=debian-11.9",
-                    "references": [
-                      "https://access.redhat.com/errata/RHSA-2026:1472",
-                      "https://access.redhat.com/security/cve/CVE-2025-69421",
-                      "https://bugzilla.redhat.com/2430375",
-                      "https://bugzilla.redhat.com/2430376",
-                      "https://bugzilla.redhat.com/2430377",
-                      "https://bugzilla.redhat.com/2430378",
-                      "https://bugzilla.redhat.com/2430379",
-                      "https://bugzilla.redhat.com/2430380",
-                      "https://bugzilla.redhat.com/2430381",
-                      "https://bugzilla.redhat.com/2430386",
-                      "https://bugzilla.redhat.com/2430387",
-                      "https://bugzilla.redhat.com/2430388",
-                      "https://bugzilla.redhat.com/2430389",
-                      "https://bugzilla.redhat.com/2430390",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430375",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430376",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430377",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430378",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430379",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430380",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430381",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430386",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430387",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430388",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430389",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430390",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-11187",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-15467",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-15468",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-15469",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-66199",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-68160",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-69418",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-69419",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-69420",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-69421",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-22795",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-22796",
-                      "https://errata.almalinux.org/10/ALSA-2026-1472.html",
-                      "https://errata.rockylinux.org/RLSA-2026:1473",
-                      "https://github.com/openssl/openssl/commit/3524a29271f8191b8fd8a5257eb05173982a097b",
-                      "https://github.com/openssl/openssl/commit/36ecb4960872a4ce04bf6f1e1f4e78d75ec0c0c7",
-                      "https://github.com/openssl/openssl/commit/4bbc8d41a72c842ce4077a8a3eccd1109aaf74bd",
-                      "https://github.com/openssl/openssl/commit/643986985cd1c21221f941129d76fe0c2785aeb3",
-                      "https://github.com/openssl/openssl/commit/a2dbc539f0f9cc63832709fa5aa33ad9495eb19c",
-                      "https://linux.oracle.com/cve/CVE-2025-69421.html",
-                      "https://linux.oracle.com/errata/ELSA-2026-50081.html",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2025-69421",
-                      "https://openssl-library.org/news/secadv/20260127.txt",
-                      "https://ubuntu.com/security/notices/USN-7980-1",
-                      "https://ubuntu.com/security/notices/USN-7980-2",
-                      "https://www.cve.org/CVERecord?id=CVE-2025-69421"
-                    ],
-                    "severity": "HIGH",
-                    "suppressed": false,
-                    "title": "openssl: OpenSSL: Denial of Service via malformed PKCS#12 file processing"
-                  },
-                  {
-                    "cve": "CVE-2023-5678",
-                    "cvss": {
-                      "nvd": {
-                        "v3score": "5.3",
-                        "v3vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L"
-                      },
-                      "redhat": {
-                        "v3score": "5.3",
-                        "v3vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-606",
-                      "CWE-754"
-                    ],
-                    "description": "Issue summary: Generating excessively long X9.42 DH keys or checking\nexcessively long X9.42 DH keys or parameters may be very slow.\n\nImpact summary: Applications that use the functions DH_generate_key() to\ngenerate an X9.42 DH key may experience long delays.  Likewise, applications\nthat use DH_check_pub_key(), DH_check_pub_key_ex() or EVP_PKEY_public_check()\nto check an X9.42 DH key or X9.42 DH parameters may experience long delays.\nWhere the key or parameters that are being checked have been obtained from\nan untrusted source this may lead to a Denial of Service.\n\nWhile DH_check() performs all the necessary checks (as of CVE-2023-3817),\nDH_check_pub_key() doesn't make any of these checks, and is therefore\nvulnerable for excessively large P and Q parameters.\n\nLikewise, while DH_generate_key() performs a check for an excessively large\nP, it doesn't check for an excessively large Q.\n\nAn application that calls DH_generate_key() or DH_check_pub_key() and\nsupplies a key or parameters obtained from an untrusted source could be\nvulnerable to a Denial of Service attack.\n\nDH_generate_key() and DH_check_pub_key() are also called by a number of\nother OpenSSL functions.  An application calling any of those other\nfunctions may similarly be affected.  The other functions affected by this\nare DH_check_pub_key_ex(), EVP_PKEY_public_check(), and EVP_PKEY_generate().\n\nAlso vulnerable are the OpenSSL pkey command line application when using the\n\"-pubcheck\" option, as well as the OpenSSL genpkey command line application.\n\nThe OpenSSL SSL/TLS implementation is not affected by this issue.\n\nThe OpenSSL 3.0 and 3.1 FIPS providers are not affected by this issue.",
-                    "diffID": "sha256:420179ad2efafbf953a0c75f68a4c9dfaf38a98643df97d415bce49b179895f7",
-                    "fixedVersions": [
-                      "1.1.1w-0+deb11u2"
-                    ],
-                    "installedVersion": "1.1.1w-0+deb11u1",
-                    "packageName": "libssl1.1",
-                    "purl": "pkg:deb/debian/libssl1.1@1.1.1w-0%2Bdeb11u1?arch=amd64&distro=debian-11.9",
-                    "references": [
-                      "http://www.openwall.com/lists/oss-security/2024/03/11/1",
-                      "https://access.redhat.com/errata/RHSA-2023:7877",
-                      "https://access.redhat.com/security/cve/CVE-2023-5678",
-                      "https://bugzilla.redhat.com/2224962",
-                      "https://bugzilla.redhat.com/2227852",
-                      "https://bugzilla.redhat.com/2248616",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2224962",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2227852",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2248616",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2270358",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3446",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3817",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-5678",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-2408",
-                      "https://errata.almalinux.org/8/ALSA-2023-7877.html",
-                      "https://errata.rockylinux.org/RLSA-2023:7877",
-                      "https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=34efaef6c103d636ab507a0cc34dca4d3aecc055",
-                      "https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=710fee740904b6290fef0dd5536fbcedbc38ff0c",
-                      "https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=db925ae2e65d0d925adef429afc37f75bd1c2017",
-                      "https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=ddeb4b6c6d527e54ce9a99cba785c0f7776e54b6",
-                      "https://linux.oracle.com/cve/CVE-2023-5678.html",
-                      "https://linux.oracle.com/errata/ELSA-2024-2447.html",
-                      "https://lists.debian.org/debian-lts-announce/2024/10/msg00033.html",
-                      "https://lists.debian.org/debian-lts-announce/2024/11/msg00000.html",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2023-5678",
-                      "https://security.netapp.com/advisory/ntap-20231130-0010/",
-                      "https://ubuntu.com/security/notices/USN-6622-1",
-                      "https://ubuntu.com/security/notices/USN-6632-1",
-                      "https://ubuntu.com/security/notices/USN-6709-1",
-                      "https://ubuntu.com/security/notices/USN-7894-1",
-                      "https://www.cve.org/CVERecord?id=CVE-2023-5678",
-                      "https://www.openssl.org/news/secadv/20231106.txt"
-                    ],
-                    "severity": "MEDIUM",
-                    "suppressed": false,
-                    "title": "openssl: Generating excessively long X9.42 DH keys or checking excessively long X9.42 DH keys or parameters may be very slow"
-                  },
-                  {
-                    "cve": "CVE-2024-0727",
-                    "cvss": {
-                      "ghsa": {
-                        "v3score": "5.5",
-                        "v3vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H"
-                      },
-                      "nvd": {
-                        "v3score": "5.5",
-                        "v3vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H"
-                      },
-                      "redhat": {
-                        "v3score": "5.5",
-                        "v3vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-476"
-                    ],
-                    "description": "Issue summary: Processing a maliciously formatted PKCS12 file may lead OpenSSL\nto crash leading to a potential Denial of Service attack\n\nImpact summary: Applications loading files in the PKCS12 format from untrusted\nsources might terminate abruptly.\n\nA file in PKCS12 format can contain certificates and keys and may come from an\nuntrusted source. The PKCS12 specification allows certain fields to be NULL, but\nOpenSSL does not correctly check for this case. This can lead to a NULL pointer\ndereference that results in OpenSSL crashing. If an application processes PKCS12\nfiles from an untrusted source using the OpenSSL APIs then that application will\nbe vulnerable to this issue.\n\nOpenSSL APIs that are vulnerable to this are: PKCS12_parse(),\nPKCS12_unpack_p7data(), PKCS12_unpack_p7encdata(), PKCS12_unpack_authsafes()\nand PKCS12_newpass().\n\nWe have also fixed a similar issue in SMIME_write_PKCS7(). However since this\nfunction is related to writing data we do not consider it security significant.\n\nThe FIPS modules in 3.2, 3.1 and 3.0 are not affected by this issue.",
-                    "diffID": "sha256:420179ad2efafbf953a0c75f68a4c9dfaf38a98643df97d415bce49b179895f7",
-                    "fixedVersions": [
-                      "1.1.1w-0+deb11u2"
-                    ],
-                    "installedVersion": "1.1.1w-0+deb11u1",
-                    "packageName": "libssl1.1",
-                    "purl": "pkg:deb/debian/libssl1.1@1.1.1w-0%2Bdeb11u1?arch=amd64&distro=debian-11.9",
-                    "references": [
-                      "http://www.openwall.com/lists/oss-security/2024/03/11/1",
-                      "https://access.redhat.com/errata/RHSA-2024:9088",
-                      "https://access.redhat.com/security/cve/CVE-2024-0727",
-                      "https://bugzilla.redhat.com/2257571",
-                      "https://bugzilla.redhat.com/2258502",
-                      "https://bugzilla.redhat.com/2259944",
-                      "https://bugzilla.redhat.com/2284243",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2257571",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2258502",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2259944",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2284243",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-6129",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-6237",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-0727",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-1298",
-                      "https://errata.almalinux.org/9/ALSA-2024-9088.html",
-                      "https://errata.rockylinux.org/RLSA-2024:9088",
-                      "https://github.com/alexcrichton/openssl-src-rs/commit/add20f73b6b42be7451af2e1044d4e0e778992b2",
-                      "https://github.com/github/advisory-database/pull/3472",
-                      "https://github.com/openssl/openssl/commit/09df4395b5071217b76dc7d3d2e630eb8c5a79c2",
-                      "https://github.com/openssl/openssl/commit/775acfdbd0c6af9ac855f34969cdab0c0c90844a",
-                      "https://github.com/openssl/openssl/commit/d135eeab8a5dbf72b3da5240bab9ddb7678dbd2c",
-                      "https://github.com/openssl/openssl/pull/23362",
-                      "https://github.com/pyca/cryptography/commit/3519591d255d4506fbcd0d04037d45271903c64d",
-                      "https://github.openssl.org/openssl/extended-releases/commit/03b3941d60c4bce58fab69a0c22377ab439bc0e8",
-                      "https://github.openssl.org/openssl/extended-releases/commit/aebaa5883e31122b404e450732dc833dc9dee539",
-                      "https://linux.oracle.com/cve/CVE-2024-0727.html",
-                      "https://linux.oracle.com/errata/ELSA-2024-9088.html",
-                      "https://lists.debian.org/debian-lts-announce/2024/10/msg00033.html",
-                      "https://lists.debian.org/debian-lts-announce/2024/11/msg00000.html",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2024-0727",
-                      "https://security.netapp.com/advisory/ntap-20240208-0006",
-                      "https://security.netapp.com/advisory/ntap-20240208-0006/",
-                      "https://ubuntu.com/security/notices/USN-6622-1",
-                      "https://ubuntu.com/security/notices/USN-6632-1",
-                      "https://ubuntu.com/security/notices/USN-6709-1",
-                      "https://ubuntu.com/security/notices/USN-7018-1",
-                      "https://ubuntu.com/security/notices/USN-7894-1",
-                      "https://www.cve.org/CVERecord?id=CVE-2024-0727",
-                      "https://www.openssl.org/news/secadv/20240125.txt"
-                    ],
-                    "severity": "MEDIUM",
-                    "suppressed": false,
-                    "title": "openssl: denial of service via null dereference"
-                  },
-                  {
-                    "cve": "CVE-2024-13176",
-                    "cvss": {
-                      "redhat": {
-                        "v3score": "4.7",
-                        "v3vector": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-385"
-                    ],
-                    "description": "Issue summary: A timing side-channel which could potentially allow recovering\nthe private key exists in the ECDSA signature computation.\n\nImpact summary: A timing side-channel in ECDSA signature computations\ncould allow recovering the private key by an attacker. However, measuring\nthe timing would require either local access to the signing application or\na very fast network connection with low latency.\n\nThere is a timing signal of around 300 nanoseconds when the top word of\nthe inverted ECDSA nonce value is zero. This can happen with significant\nprobability only for some of the supported elliptic curves. In particular\nthe NIST P-521 curve is affected. To be able to measure this leak, the attacker\nprocess must either be located in the same physical computer or must\nhave a very fast network connection with low latency. For that reason\nthe severity of this vulnerability is Low.\n\nThe FIPS modules in 3.4, 3.3, 3.2, 3.1 and 3.0 are affected by this issue.",
-                    "diffID": "sha256:420179ad2efafbf953a0c75f68a4c9dfaf38a98643df97d415bce49b179895f7",
-                    "fixedVersions": [
-                      "1.1.1w-0+deb11u3"
-                    ],
-                    "installedVersion": "1.1.1w-0+deb11u1",
-                    "packageName": "libssl1.1",
-                    "purl": "pkg:deb/debian/libssl1.1@1.1.1w-0%2Bdeb11u1?arch=amd64&distro=debian-11.9",
-                    "references": [
-                      "http://www.openwall.com/lists/oss-security/2025/01/20/2",
-                      "https://access.redhat.com/errata/RHSA-2025:15699",
-                      "https://access.redhat.com/security/cve/CVE-2024-13176",
-                      "https://bugzilla.redhat.com/2359885",
-                      "https://bugzilla.redhat.com/2359888",
-                      "https://bugzilla.redhat.com/2359892",
-                      "https://bugzilla.redhat.com/2359894",
-                      "https://bugzilla.redhat.com/2359895",
-                      "https://bugzilla.redhat.com/2359899",
-                      "https://bugzilla.redhat.com/2359900",
-                      "https://bugzilla.redhat.com/2359902",
-                      "https://bugzilla.redhat.com/2359903",
-                      "https://bugzilla.redhat.com/2359911",
-                      "https://bugzilla.redhat.com/2359918",
-                      "https://bugzilla.redhat.com/2359920",
-                      "https://bugzilla.redhat.com/2359924",
-                      "https://bugzilla.redhat.com/2359928",
-                      "https://bugzilla.redhat.com/2359930",
-                      "https://bugzilla.redhat.com/2359932",
-                      "https://bugzilla.redhat.com/2359934",
-                      "https://bugzilla.redhat.com/2359938",
-                      "https://bugzilla.redhat.com/2359940",
-                      "https://bugzilla.redhat.com/2359943",
-                      "https://bugzilla.redhat.com/2359944",
-                      "https://bugzilla.redhat.com/2359945",
-                      "https://bugzilla.redhat.com/2359947",
-                      "https://bugzilla.redhat.com/2359950",
-                      "https://bugzilla.redhat.com/2359963",
-                      "https://bugzilla.redhat.com/2359964",
-                      "https://bugzilla.redhat.com/2359972",
-                      "https://bugzilla.redhat.com/2370920",
-                      "https://bugzilla.redhat.com/2380264",
-                      "https://bugzilla.redhat.com/2380273",
-                      "https://bugzilla.redhat.com/2380274",
-                      "https://bugzilla.redhat.com/2380278",
-                      "https://bugzilla.redhat.com/2380280",
-                      "https://bugzilla.redhat.com/2380283",
-                      "https://bugzilla.redhat.com/2380284",
-                      "https://bugzilla.redhat.com/2380290",
-                      "https://bugzilla.redhat.com/2380291",
-                      "https://bugzilla.redhat.com/2380295",
-                      "https://bugzilla.redhat.com/2380298",
-                      "https://bugzilla.redhat.com/2380306",
-                      "https://bugzilla.redhat.com/2380308",
-                      "https://bugzilla.redhat.com/2380309",
-                      "https://bugzilla.redhat.com/2380310",
-                      "https://bugzilla.redhat.com/2380312",
-                      "https://bugzilla.redhat.com/2380313",
-                      "https://bugzilla.redhat.com/2380320",
-                      "https://bugzilla.redhat.com/2380321",
-                      "https://bugzilla.redhat.com/2380322",
-                      "https://bugzilla.redhat.com/2380326",
-                      "https://bugzilla.redhat.com/2380327",
-                      "https://bugzilla.redhat.com/2380334",
-                      "https://bugzilla.redhat.com/2380335",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2338999",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2359885",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2359888",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2359892",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2359894",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2359895",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2359899",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2359900",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2359902",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2359903",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2359911",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2359918",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2359920",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2359924",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2359928",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2359930",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2359932",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2359934",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2359938",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2359940",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2359943",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2359944",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2359945",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2359947",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2359950",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2359963",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2359964",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2359972",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2370920",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2380264",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2380273",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2380274",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2380278",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2380280",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2380283",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2380284",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2380290",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2380291",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2380295",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2380298",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2380306",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2380308",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2380309",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2380310",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2380312",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2380313",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2380320",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2380321",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2380322",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2380326",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2380327",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2380334",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2380335",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-13176",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21574",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21575",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21577",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21579",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21580",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21581",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21584",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21585",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21588",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30681",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30682",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30683",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30684",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30685",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30687",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30688",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30689",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30693",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30695",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30696",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30699",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30703",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30704",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30705",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30715",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30721",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30722",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50077",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50078",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50079",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50080",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50081",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50082",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50083",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50084",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50085",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50086",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50087",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50088",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50091",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50092",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50093",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50094",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50096",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50097",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50098",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50099",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50100",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50101",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50102",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50104",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-5399",
-                      "https://errata.almalinux.org/10/ALSA-2025-15699.html",
-                      "https://errata.rockylinux.org/RLSA-2025:15699",
-                      "https://github.com/openssl/openssl/commit/07272b05b04836a762b4baa874958af51d513844",
-                      "https://github.com/openssl/openssl/commit/2af62e74fb59bc469506bc37eb2990ea408d9467",
-                      "https://github.com/openssl/openssl/commit/392dcb336405a0c94486aa6655057f59fd3a0902",
-                      "https://github.com/openssl/openssl/commit/4b1cb94a734a7d4ec363ac0a215a25c181e11f65",
-                      "https://github.com/openssl/openssl/commit/77c608f4c8857e63e98e66444e2e761c9627916f",
-                      "https://github.openssl.org/openssl/extended-releases/commit/0d5fd1ab987f7571e2c955d8d8b638fc0fb54ded",
-                      "https://github.openssl.org/openssl/extended-releases/commit/a2639000db19878d5d89586ae7b725080592ae86",
-                      "https://linux.oracle.com/cve/CVE-2024-13176.html",
-                      "https://linux.oracle.com/errata/ELSA-2025-16046.html",
-                      "https://lists.debian.org/debian-lts-announce/2025/05/msg00028.html",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2024-13176",
-                      "https://openssl-library.org/news/secadv/20250120.txt",
-                      "https://security.netapp.com/advisory/ntap-20250124-0005/",
-                      "https://security.netapp.com/advisory/ntap-20250418-0010/",
-                      "https://security.netapp.com/advisory/ntap-20250502-0006/",
-                      "https://ubuntu.com/security/notices/USN-7264-1",
-                      "https://ubuntu.com/security/notices/USN-7278-1",
-                      "https://ubuntu.com/security/notices/USN-7894-1",
-                      "https://www.cve.org/CVERecord?id=CVE-2024-13176",
-                      "https://www.oracle.com/security-alerts/cpuapr2025.html#AppendixMSQL"
-                    ],
-                    "severity": "MEDIUM",
-                    "suppressed": false,
-                    "title": "openssl: Timing side-channel in ECDSA signature computation"
-                  },
-                  {
-                    "cve": "CVE-2024-4741",
-                    "cvss": {
-                      "redhat": {
-                        "v3score": "5.6",
-                        "v3vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-416"
-                    ],
-                    "description": "Issue summary: Calling the OpenSSL API function SSL_free_buffers may cause\nmemory to be accessed that was previously freed in some situations\n\nImpact summary: A use after free can have a range of potential consequences such\nas the corruption of valid data, crashes or execution of arbitrary code.\nHowever, only applications that directly call the SSL_free_buffers function are\naffected by this issue. Applications that do not call this function are not\nvulnerable. Our investigations indicate that this function is rarely used by\napplications.\n\nThe SSL_free_buffers function is used to free the internal OpenSSL buffer used\nwhen processing an incoming record from the network. The call is only expected\nto succeed if the buffer is not currently in use. However, two scenarios have\nbeen identified where the buffer is freed even when still in use.\n\nThe first scenario occurs where a record header has been received from the\nnetwork and processed by OpenSSL, but the full record body has not yet arrived.\nIn this case calling SSL_free_buffers will succeed even though a record has only\nbeen partially processed and the buffer is still in use.\n\nThe second scenario occurs where a full record containing application data has\nbeen received and processed by OpenSSL but the application has only read part of\nthis data. Again a call to SSL_free_buffers will succeed even though the buffer\nis still in use.\n\nWhile these scenarios could occur accidentally during normal operation a\nmalicious attacker could attempt to engineer a stituation where this occurs.\nWe are not aware of this issue being actively exploited.\n\nThe FIPS modules in 3.3, 3.2, 3.1 and 3.0 are not affected by this issue.",
-                    "diffID": "sha256:420179ad2efafbf953a0c75f68a4c9dfaf38a98643df97d415bce49b179895f7",
-                    "fixedVersions": [
-                      "1.1.1w-0+deb11u2"
-                    ],
-                    "installedVersion": "1.1.1w-0+deb11u1",
-                    "packageName": "libssl1.1",
-                    "purl": "pkg:deb/debian/libssl1.1@1.1.1w-0%2Bdeb11u1?arch=amd64&distro=debian-11.9",
-                    "references": [
-                      "https://access.redhat.com/errata/RHSA-2024:9333",
-                      "https://access.redhat.com/security/cve/CVE-2024-4741",
-                      "https://bugzilla.redhat.com/2274020",
-                      "https://bugzilla.redhat.com/2281029",
-                      "https://bugzilla.redhat.com/2283757",
-                      "https://bugzilla.redhat.com/2294581",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2274020",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2281029",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2283757",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2294581",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-2511",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-4603",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-4741",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-5535",
-                      "https://errata.almalinux.org/9/ALSA-2024-9333.html",
-                      "https://errata.rockylinux.org/RLSA-2024:9333",
-                      "https://github.com/openssl/openssl/commit/704f725b96aa373ee45ecfb23f6abfe8be8d9177",
-                      "https://github.com/openssl/openssl/commit/b3f0eb0a295f58f16ba43ba99dad70d4ee5c437d",
-                      "https://github.com/openssl/openssl/commit/c88c3de51020c37e8706bf7a682a162593053aac",
-                      "https://github.com/openssl/openssl/commit/e5093133c35ca82874ad83697af76f4b0f7e3bd8",
-                      "https://github.openssl.org/openssl/extended-releases/commit/f7a045f3143fc6da2ee66bf52d8df04829590dd4",
-                      "https://linux.oracle.com/cve/CVE-2024-4741.html",
-                      "https://linux.oracle.com/errata/ELSA-2024-9333.html",
-                      "https://lists.debian.org/debian-lts-announce/2024/10/msg00033.html",
-                      "https://lists.debian.org/debian-lts-announce/2024/11/msg00000.html",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2024-4741",
-                      "https://security.netapp.com/advisory/ntap-20240621-0004/",
-                      "https://ubuntu.com/security/notices/USN-6937-1",
-                      "https://ubuntu.com/security/notices/USN-7894-1",
-                      "https://www.cve.org/CVERecord?id=CVE-2024-4741",
-                      "https://www.openssl.org/news/secadv/20240528.txt"
-                    ],
-                    "severity": "MEDIUM",
-                    "suppressed": false,
-                    "title": "openssl: Use After Free with SSL_free_buffers"
-                  },
-                  {
-                    "cve": "CVE-2024-5535",
-                    "cvss": {
-                      "redhat": {
-                        "v3score": "5.9",
-                        "v3vector": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-125"
-                    ],
-                    "description": "Issue summary: Calling the OpenSSL API function SSL_select_next_proto with an\nempty supported client protocols buffer may cause a crash or memory contents to\nbe sent to the peer.\n\nImpact summary: A buffer overread can have a range of potential consequences\nsuch as unexpected application beahviour or a crash. In particular this issue\ncould result in up to 255 bytes of arbitrary private data from memory being sent\nto the peer leading to a loss of confidentiality. However, only applications\nthat directly call the SSL_select_next_proto function with a 0 length list of\nsupported client protocols are affected by this issue. This would normally never\nbe a valid scenario and is typically not under attacker control but may occur by\naccident in the case of a configuration or programming error in the calling\napplication.\n\nThe OpenSSL API function SSL_select_next_proto is typically used by TLS\napplications that support ALPN (Application Layer Protocol Negotiation) or NPN\n(Next Protocol Negotiation). NPN is older, was never standardised and\nis deprecated in favour of ALPN. We believe that ALPN is significantly more\nwidely deployed than NPN. The SSL_select_next_proto function accepts a list of\nprotocols from the server and a list of protocols from the client and returns\nthe first protocol that appears in the server list that also appears in the\nclient list. In the case of no overlap between the two lists it returns the\nfirst item in the client list. In either case it will signal whether an overlap\nbetween the two lists was found. In the case where SSL_select_next_proto is\ncalled with a zero length client list it fails to notice this condition and\nreturns the memory immediately following the client list pointer (and reports\nthat there was no overlap in the lists).\n\nThis function is typically called from a server side application callback for\nALPN or a client side application callback for NPN. In the case of ALPN the list\nof protocols supplied by the client is guaranteed by libssl to never be zero in\nlength. The list of server protocols comes from the application and should never\nnormally be expected to be of zero length. In this case if the\nSSL_select_next_proto function has been called as expected (with the list\nsupplied by the client passed in the client/client_len parameters), then the\napplication will not be vulnerable to this issue. If the application has\naccidentally been configured with a zero length server list, and has\naccidentally passed that zero length server list in the client/client_len\nparameters, and has additionally failed to correctly handle a \"no overlap\"\nresponse (which would normally result in a handshake failure in ALPN) then it\nwill be vulnerable to this problem.\n\nIn the case of NPN, the protocol permits the client to opportunistically select\na protocol when there is no overlap. OpenSSL returns the first client protocol\nin the no overlap case in support of this. The list of client protocols comes\nfrom the application and should never normally be expected to be of zero length.\nHowever if the SSL_select_next_proto function is accidentally called with a\nclient_len of 0 then an invalid memory pointer will be returned instead. If the\napplication uses this output as the opportunistic protocol then the loss of\nconfidentiality will occur.\n\nThis issue has been assessed as Low severity because applications are most\nlikely to be vulnerable if they are using NPN instead of ALPN - but NPN is not\nwidely used. It also requires an application configuration or programming error.\nFinally, this issue would not typically be under attacker control making active\nexploitation unlikely.\n\nThe FIPS modules in 3.3, 3.2, 3.1 and 3.0 are not affected by this issue.\n\nDue to the low severity of this issue we are not issuing new releases of\nOpenSSL at this time. The fix will be included in the next releases when they\nbecome available.",
-                    "diffID": "sha256:420179ad2efafbf953a0c75f68a4c9dfaf38a98643df97d415bce49b179895f7",
-                    "fixedVersions": [
-                      "1.1.1w-0+deb11u2"
-                    ],
-                    "installedVersion": "1.1.1w-0+deb11u1",
-                    "packageName": "libssl1.1",
-                    "purl": "pkg:deb/debian/libssl1.1@1.1.1w-0%2Bdeb11u1?arch=amd64&distro=debian-11.9",
-                    "references": [
-                      "http://www.openwall.com/lists/oss-security/2024/06/27/1",
-                      "http://www.openwall.com/lists/oss-security/2024/06/28/4",
-                      "http://www.openwall.com/lists/oss-security/2024/08/15/1",
-                      "https://access.redhat.com/errata/RHSA-2025:1673",
-                      "https://access.redhat.com/security/cve/CVE-2024-5535",
-                      "https://bugzilla.redhat.com/2294581",
-                      "https://bugzilla.redhat.com/2294676",
-                      "https://bugzilla.redhat.com/2301888",
-                      "https://bugzilla.redhat.com/2318857",
-                      "https://bugzilla.redhat.com/2318858",
-                      "https://bugzilla.redhat.com/2318870",
-                      "https://bugzilla.redhat.com/2318873",
-                      "https://bugzilla.redhat.com/2318874",
-                      "https://bugzilla.redhat.com/2318876",
-                      "https://bugzilla.redhat.com/2318882",
-                      "https://bugzilla.redhat.com/2318883",
-                      "https://bugzilla.redhat.com/2318884",
-                      "https://bugzilla.redhat.com/2318885",
-                      "https://bugzilla.redhat.com/2318886",
-                      "https://bugzilla.redhat.com/2318897",
-                      "https://bugzilla.redhat.com/2318900",
-                      "https://bugzilla.redhat.com/2318905",
-                      "https://bugzilla.redhat.com/2318914",
-                      "https://bugzilla.redhat.com/2318922",
-                      "https://bugzilla.redhat.com/2318923",
-                      "https://bugzilla.redhat.com/2318925",
-                      "https://bugzilla.redhat.com/2318926",
-                      "https://bugzilla.redhat.com/2318927",
-                      "https://bugzilla.redhat.com/2331191",
-                      "https://bugzilla.redhat.com/2339218",
-                      "https://bugzilla.redhat.com/2339220",
-                      "https://bugzilla.redhat.com/2339221",
-                      "https://bugzilla.redhat.com/2339226",
-                      "https://bugzilla.redhat.com/2339231",
-                      "https://bugzilla.redhat.com/2339236",
-                      "https://bugzilla.redhat.com/2339238",
-                      "https://bugzilla.redhat.com/2339243",
-                      "https://bugzilla.redhat.com/2339247",
-                      "https://bugzilla.redhat.com/2339252",
-                      "https://bugzilla.redhat.com/2339259",
-                      "https://bugzilla.redhat.com/2339266",
-                      "https://bugzilla.redhat.com/2339270",
-                      "https://bugzilla.redhat.com/2339271",
-                      "https://bugzilla.redhat.com/2339275",
-                      "https://bugzilla.redhat.com/2339277",
-                      "https://bugzilla.redhat.com/2339281",
-                      "https://bugzilla.redhat.com/2339284",
-                      "https://bugzilla.redhat.com/2339291",
-                      "https://bugzilla.redhat.com/2339293",
-                      "https://bugzilla.redhat.com/2339295",
-                      "https://bugzilla.redhat.com/2339299",
-                      "https://bugzilla.redhat.com/2339300",
-                      "https://bugzilla.redhat.com/2339304",
-                      "https://bugzilla.redhat.com/2339305",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2274020",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2281029",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2283757",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2294581",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-2511",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-4603",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-4741",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-5535",
-                      "https://errata.almalinux.org/8/ALSA-2025-1673.html",
-                      "https://errata.rockylinux.org/RLSA-2024:9333",
-                      "https://github.com/openssl/openssl/commit/4ada436a1946cbb24db5ab4ca082b69c1bc10f37",
-                      "https://github.com/openssl/openssl/commit/99fb785a5f85315b95288921a321a935ea29a51e",
-                      "https://github.com/openssl/openssl/commit/cf6f91f6121f4db167405db2f0de410a456f260c",
-                      "https://github.com/openssl/openssl/commit/e86ac436f0bd54d4517745483e2315650fae7b2c",
-                      "https://github.openssl.org/openssl/extended-releases/commit/9947251413065a05189a63c9b7a6c1d4e224c21c",
-                      "https://github.openssl.org/openssl/extended-releases/commit/b78ec0824da857223486660177d3b1f255c65d87",
-                      "https://linux.oracle.com/cve/CVE-2024-5535.html",
-                      "https://linux.oracle.com/errata/ELSA-2025-1673.html",
-                      "https://lists.debian.org/debian-lts-announce/2024/10/msg00033.html",
-                      "https://lists.debian.org/debian-lts-announce/2024/11/msg00000.html",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2024-5535",
-                      "https://openssl.org/news/secadv/20240627.txt",
-                      "https://security.netapp.com/advisory/ntap-20240712-0005/",
-                      "https://security.netapp.com/advisory/ntap-20241025-0006/",
-                      "https://security.netapp.com/advisory/ntap-20241025-0010/",
-                      "https://ubuntu.com/security/notices/USN-6937-1",
-                      "https://ubuntu.com/security/notices/USN-7894-1",
-                      "https://www.cve.org/CVERecord?id=CVE-2024-5535",
-                      "https://www.openssl.org/news/secadv/20240627.txt",
-                      "https://www.oracle.com/security-alerts/cpuoct2024.html#AppendixMSQL"
-                    ],
-                    "severity": "MEDIUM",
-                    "suppressed": false,
-                    "title": "openssl: SSL_select_next_proto buffer overread"
-                  },
-                  {
-                    "cve": "CVE-2025-68160",
-                    "cvss": {
-                      "redhat": {
-                        "v3score": "4.7",
-                        "v3vector": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-787"
-                    ],
-                    "description": "Issue summary: Writing large, newline-free data into a BIO chain using the\nline-buffering filter where the next BIO performs short writes can trigger\na heap-based out-of-bounds write.\n\nImpact summary: This out-of-bounds write can cause memory corruption which\ntypically results in a crash, leading to Denial of Service for an application.\n\nThe line-buffering BIO filter (BIO_f_linebuffer) is not used by default in\nTLS/SSL data paths. In OpenSSL command-line applications, it is typically\nonly pushed onto stdout/stderr on VMS systems. Third-party applications that\nexplicitly use this filter with a BIO chain that can short-write and that\nwrite large, newline-free data influenced by an attacker would be affected.\nHowever, the circumstances where this could happen are unlikely to be under\nattacker control, and BIO_f_linebuffer is unlikely to be handling non-curated\ndata controlled by an attacker. For that reason the issue was assessed as\nLow severity.\n\nThe FIPS modules in 3.6, 3.5, 3.4, 3.3 and 3.0 are not affected by this issue,\nas the BIO implementation is outside the OpenSSL FIPS module boundary.\n\nOpenSSL 3.6, 3.5, 3.4, 3.3, 3.0, 1.1.1 and 1.0.2 are vulnerable to this issue.",
-                    "diffID": "sha256:420179ad2efafbf953a0c75f68a4c9dfaf38a98643df97d415bce49b179895f7",
-                    "installedVersion": "1.1.1w-0+deb11u1",
-                    "packageName": "libssl1.1",
-                    "purl": "pkg:deb/debian/libssl1.1@1.1.1w-0%2Bdeb11u1?arch=amd64&distro=debian-11.9",
-                    "references": [
-                      "https://access.redhat.com/errata/RHSA-2026:1472",
-                      "https://access.redhat.com/security/cve/CVE-2025-68160",
-                      "https://bugzilla.redhat.com/2430375",
-                      "https://bugzilla.redhat.com/2430376",
-                      "https://bugzilla.redhat.com/2430377",
-                      "https://bugzilla.redhat.com/2430378",
-                      "https://bugzilla.redhat.com/2430379",
-                      "https://bugzilla.redhat.com/2430380",
-                      "https://bugzilla.redhat.com/2430381",
-                      "https://bugzilla.redhat.com/2430386",
-                      "https://bugzilla.redhat.com/2430387",
-                      "https://bugzilla.redhat.com/2430388",
-                      "https://bugzilla.redhat.com/2430389",
-                      "https://bugzilla.redhat.com/2430390",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430375",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430376",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430377",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430378",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430379",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430380",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430381",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430386",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430387",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430388",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430389",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430390",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-11187",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-15467",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-15468",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-15469",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-66199",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-68160",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-69418",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-69419",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-69420",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-69421",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-22795",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-22796",
-                      "https://errata.almalinux.org/10/ALSA-2026-1472.html",
-                      "https://errata.rockylinux.org/RLSA-2026:1473",
-                      "https://github.com/openssl/openssl/commit/384011202af92605d926fafe4a0bcd6b65d162ad",
-                      "https://github.com/openssl/openssl/commit/475c466ef2fbd8fc1df6fae1c3eed9c813fc8ff6",
-                      "https://github.com/openssl/openssl/commit/4c96fbba618e1940f038012506ee9e21d32ee12c",
-                      "https://github.com/openssl/openssl/commit/6845c3b6460a98b1ec4e463baa2ea1a63a32d7c0",
-                      "https://github.com/openssl/openssl/commit/68a7cd2e2816c3a02f4d45a2ce43fc04fac97096",
-                      "https://linux.oracle.com/cve/CVE-2025-68160.html",
-                      "https://linux.oracle.com/errata/ELSA-2026-50081.html",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2025-68160",
-                      "https://openssl-library.org/news/secadv/20260127.txt",
-                      "https://ubuntu.com/security/notices/USN-7980-1",
-                      "https://ubuntu.com/security/notices/USN-7980-2",
-                      "https://www.cve.org/CVERecord?id=CVE-2025-68160"
-                    ],
-                    "severity": "MEDIUM",
-                    "suppressed": false,
-                    "title": "openssl: OpenSSL: Denial of Service due to out-of-bounds write in BIO filter"
-                  },
-                  {
-                    "cve": "CVE-2025-69418",
-                    "cvss": {
-                      "redhat": {
-                        "v3score": "4",
-                        "v3vector": "CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-325"
-                    ],
-                    "description": "Issue summary: When using the low-level OCB API directly with AES-NI or<br>other hardware-accelerated code paths, inputs whose length is not a multiple<br>of 16 bytes can leave the final partial block unencrypted and unauthenticated.<br><br>Impact summary: The trailing 1-15 bytes of a message may be exposed in<br>cleartext on encryption and are not covered by the authentication tag,<br>allowing an attacker to read or tamper with those bytes without detection.<br><br>The low-level OCB encrypt and decrypt routines in the hardware-accelerated<br>stream path process full 16-byte blocks but do not advance the input/output<br>pointers. The subsequent tail-handling code then operates on the original<br>base pointers, effectively reprocessing the beginning of the buffer while<br>leaving the actual trailing bytes unprocessed. The authentication checksum<br>also excludes the true tail bytes.<br><br>However, typical OpenSSL consumers using EVP are not affected because the<br>higher-level EVP and provider OCB implementations split inputs so that full<br>blocks and trailing partial blocks are processed in separate calls, avoiding<br>the problematic code path. Additionally, TLS does not use OCB ciphersuites.<br>The vulnerability only affects applications that call the low-level<br>CRYPTO_ocb128_encrypt() or CRYPTO_ocb128_decrypt() functions directly with<br>non-block-aligned lengths in a single call on hardware-accelerated builds.<br>For these reasons the issue was assessed as Low severity.<br><br>The FIPS modules in 3.6, 3.5, 3.4, 3.3, 3.2, 3.1 and 3.0 are not affected<br>by this issue, as OCB mode is not a FIPS-approved algorithm.<br><br>OpenSSL 3.6, 3.5, 3.4, 3.3, 3.0 and 1.1.1 are vulnerable to this issue.<br><br>OpenSSL 1.0.2 is not affected by this issue.",
-                    "diffID": "sha256:420179ad2efafbf953a0c75f68a4c9dfaf38a98643df97d415bce49b179895f7",
-                    "installedVersion": "1.1.1w-0+deb11u1",
-                    "packageName": "libssl1.1",
-                    "purl": "pkg:deb/debian/libssl1.1@1.1.1w-0%2Bdeb11u1?arch=amd64&distro=debian-11.9",
-                    "references": [
-                      "https://access.redhat.com/errata/RHSA-2026:1472",
-                      "https://access.redhat.com/security/cve/CVE-2025-69418",
-                      "https://bugzilla.redhat.com/2430375",
-                      "https://bugzilla.redhat.com/2430376",
-                      "https://bugzilla.redhat.com/2430377",
-                      "https://bugzilla.redhat.com/2430378",
-                      "https://bugzilla.redhat.com/2430379",
-                      "https://bugzilla.redhat.com/2430380",
-                      "https://bugzilla.redhat.com/2430381",
-                      "https://bugzilla.redhat.com/2430386",
-                      "https://bugzilla.redhat.com/2430387",
-                      "https://bugzilla.redhat.com/2430388",
-                      "https://bugzilla.redhat.com/2430389",
-                      "https://bugzilla.redhat.com/2430390",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430375",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430376",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430377",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430378",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430379",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430380",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430381",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430386",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430387",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430388",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430389",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430390",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-11187",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-15467",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-15468",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-15469",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-66199",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-68160",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-69418",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-69419",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-69420",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-69421",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-22795",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-22796",
-                      "https://errata.almalinux.org/10/ALSA-2026-1472.html",
-                      "https://errata.rockylinux.org/RLSA-2026:1473",
-                      "https://github.com/openssl/openssl/commit/372fc5c77529695b05b4f5b5187691a57ef5dffc",
-                      "https://github.com/openssl/openssl/commit/4016975d4469cd6b94927c607f7c511385f928d8",
-                      "https://github.com/openssl/openssl/commit/52d23c86a54adab5ee9f80e48b242b52c4cc2347",
-                      "https://github.com/openssl/openssl/commit/a7589230356d908c0eca4b969ec4f62106f4f5ae",
-                      "https://github.com/openssl/openssl/commit/ed40856d7d4ba6cb42779b6770666a65f19cb977",
-                      "https://linux.oracle.com/cve/CVE-2025-69418.html",
-                      "https://linux.oracle.com/errata/ELSA-2026-50081.html",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2025-69418",
-                      "https://openssl-library.org/news/secadv/20260127.txt",
-                      "https://ubuntu.com/security/notices/USN-7980-1",
-                      "https://ubuntu.com/security/notices/USN-7980-2",
-                      "https://www.cve.org/CVERecord?id=CVE-2025-69418"
-                    ],
-                    "severity": "MEDIUM",
-                    "suppressed": false,
-                    "title": "openssl: OpenSSL: Information disclosure and data tampering via specific low-level OCB encryption/decryption calls"
-                  },
-                  {
-                    "cve": "CVE-2025-69420",
-                    "cvss": {
-                      "redhat": {
-                        "v3score": "5.9",
-                        "v3vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-754"
-                    ],
-                    "description": "Issue summary: A type confusion vulnerability exists in the TimeStamp Response\nverification code where an ASN1_TYPE union member is accessed without first\nvalidating the type, causing an invalid or NULL pointer dereference when\nprocessing a malformed TimeStamp Response file.\n\nImpact summary: An application calling TS_RESP_verify_response() with a\nmalformed TimeStamp Response can be caused to dereference an invalid or\nNULL pointer when reading, resulting in a Denial of Service.\n\nThe functions ossl_ess_get_signing_cert() and ossl_ess_get_signing_cert_v2()\naccess the signing cert attribute value without validating its type.\nWhen the type is not V_ASN1_SEQUENCE, this results in accessing invalid memory\nthrough the ASN1_TYPE union, causing a crash.\n\nExploiting this vulnerability requires an attacker to provide a malformed\nTimeStamp Response to an application that verifies timestamp responses. The\nTimeStamp protocol (RFC 3161) is not widely used and the impact of the\nexploit is just a Denial of Service. For these reasons the issue was\nassessed as Low severity.\n\nThe FIPS modules in 3.5, 3.4, 3.3 and 3.0 are not affected by this issue,\nas the TimeStamp Response implementation is outside the OpenSSL FIPS module\nboundary.\n\nOpenSSL 3.6, 3.5, 3.4, 3.3, 3.0 and 1.1.1 are vulnerable to this issue.\n\nOpenSSL 1.0.2 is not affected by this issue.",
-                    "diffID": "sha256:420179ad2efafbf953a0c75f68a4c9dfaf38a98643df97d415bce49b179895f7",
-                    "installedVersion": "1.1.1w-0+deb11u1",
-                    "packageName": "libssl1.1",
-                    "purl": "pkg:deb/debian/libssl1.1@1.1.1w-0%2Bdeb11u1?arch=amd64&distro=debian-11.9",
-                    "references": [
-                      "https://access.redhat.com/errata/RHSA-2026:1472",
-                      "https://access.redhat.com/security/cve/CVE-2025-69420",
-                      "https://bugzilla.redhat.com/2430375",
-                      "https://bugzilla.redhat.com/2430376",
-                      "https://bugzilla.redhat.com/2430377",
-                      "https://bugzilla.redhat.com/2430378",
-                      "https://bugzilla.redhat.com/2430379",
-                      "https://bugzilla.redhat.com/2430380",
-                      "https://bugzilla.redhat.com/2430381",
-                      "https://bugzilla.redhat.com/2430386",
-                      "https://bugzilla.redhat.com/2430387",
-                      "https://bugzilla.redhat.com/2430388",
-                      "https://bugzilla.redhat.com/2430389",
-                      "https://bugzilla.redhat.com/2430390",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430375",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430376",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430377",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430378",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430379",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430380",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430381",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430386",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430387",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430388",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430389",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430390",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-11187",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-15467",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-15468",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-15469",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-66199",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-68160",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-69418",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-69419",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-69420",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-69421",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-22795",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-22796",
-                      "https://errata.almalinux.org/10/ALSA-2026-1472.html",
-                      "https://errata.rockylinux.org/RLSA-2026:1473",
-                      "https://github.com/openssl/openssl/commit/27c7012c91cc986a598d7540f3079dfde2416eb9",
-                      "https://github.com/openssl/openssl/commit/4e254b48ad93cc092be3dd62d97015f33f73133a",
-                      "https://github.com/openssl/openssl/commit/564fd9c73787f25693bf9e75faf7bf6bb1305d4e",
-                      "https://github.com/openssl/openssl/commit/5eb0770ffcf11b785cf374ff3c19196245e54f1b",
-                      "https://github.com/openssl/openssl/commit/a99349ebfc519999edc50620abe24d599b9eb085",
-                      "https://linux.oracle.com/cve/CVE-2025-69420.html",
-                      "https://linux.oracle.com/errata/ELSA-2026-50081.html",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2025-69420",
-                      "https://openssl-library.org/news/secadv/20260127.txt",
-                      "https://ubuntu.com/security/notices/USN-7980-1",
-                      "https://ubuntu.com/security/notices/USN-7980-2",
-                      "https://www.cve.org/CVERecord?id=CVE-2025-69420"
-                    ],
-                    "severity": "MEDIUM",
-                    "suppressed": false,
-                    "title": "openssl: OpenSSL: Denial of Service via malformed TimeStamp Response"
-                  },
-                  {
-                    "cve": "CVE-2025-9230",
-                    "cvss": {
-                      "redhat": {
-                        "v3score": "5.6",
-                        "v3vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-125",
-                      "CWE-787"
-                    ],
-                    "description": "Issue summary: An application trying to decrypt CMS messages encrypted using\npassword based encryption can trigger an out-of-bounds read and write.\n\nImpact summary: This out-of-bounds read may trigger a crash which leads to\nDenial of Service for an application. The out-of-bounds write can cause\na memory corruption which can have various consequences including\na Denial of Service or Execution of attacker-supplied code.\n\nAlthough the consequences of a successful exploit of this vulnerability\ncould be severe, the probability that the attacker would be able to\nperform it is low. Besides, password based (PWRI) encryption support in CMS\nmessages is very rarely used. For that reason the issue was assessed as\nModerate severity according to our Security Policy.\n\nThe FIPS modules in 3.5, 3.4, 3.3, 3.2, 3.1 and 3.0 are not affected by this\nissue, as the CMS implementation is outside the OpenSSL FIPS module\nboundary.",
-                    "diffID": "sha256:420179ad2efafbf953a0c75f68a4c9dfaf38a98643df97d415bce49b179895f7",
-                    "fixedVersions": [
-                      "1.1.1w-0+deb11u4"
-                    ],
-                    "installedVersion": "1.1.1w-0+deb11u1",
-                    "packageName": "libssl1.1",
-                    "purl": "pkg:deb/debian/libssl1.1@1.1.1w-0%2Bdeb11u1?arch=amd64&distro=debian-11.9",
-                    "references": [
-                      "http://www.openwall.com/lists/oss-security/2025/09/30/5",
-                      "https://access.redhat.com/errata/RHSA-2026:0337",
-                      "https://access.redhat.com/security/cve/CVE-2025-9230",
-                      "https://bugzilla.redhat.com/2396054",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2396054",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-9230",
-                      "https://errata.almalinux.org/8/ALSA-2026-0337.html",
-                      "https://errata.rockylinux.org/RLSA-2025:21255",
-                      "https://github.com/openssl/openssl/commit/5965ea5dd6960f36d8b7f74f8eac67a8eb8f2b45",
-                      "https://github.com/openssl/openssl/commit/9e91358f365dee6c446dcdcdb01c04d2743fd280",
-                      "https://github.com/openssl/openssl/commit/a79c4ce559c6a3a8fd4109e9f33c1185d5bf2def",
-                      "https://github.com/openssl/openssl/commit/b5282d677551afda7d20e9c00e09561b547b2dfd",
-                      "https://github.com/openssl/openssl/commit/bae259a211ada6315dc50900686daaaaaa55f482",
-                      "https://github.openssl.org/openssl/extended-releases/commit/c2b96348bfa662f25f4fabf81958ae822063dae3",
-                      "https://github.openssl.org/openssl/extended-releases/commit/dfbaf161d8dafc1132dd88cd48ad990ed9b4c8ba",
-                      "https://linux.oracle.com/cve/CVE-2025-9230.html",
-                      "https://linux.oracle.com/errata/ELSA-2026-50077.html",
-                      "https://lists.debian.org/debian-lts-announce/2025/10/msg00001.html",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2025-9230",
-                      "https://openssl-library.org/news/secadv/20250930.txt",
-                      "https://ubuntu.com/security/notices/USN-7786-1",
-                      "https://www.cve.org/CVERecord?id=CVE-2025-9230"
-                    ],
-                    "severity": "MEDIUM",
-                    "suppressed": false,
-                    "title": "openssl: Out-of-bounds read & write in RFC 3211 KEK Unwrap"
-                  },
-                  {
-                    "cve": "CVE-2026-22795",
-                    "cvss": {
-                      "redhat": {
-                        "v3score": "5.5",
-                        "v3vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-754"
-                    ],
-                    "description": "Issue summary: An invalid or NULL pointer dereference can happen in\nan application processing a malformed PKCS#12 file.\n\nImpact summary: An application processing a malformed PKCS#12 file can be\ncaused to dereference an invalid or NULL pointer on memory read, resulting\nin a Denial of Service.\n\nA type confusion vulnerability exists in PKCS#12 parsing code where\nan ASN1_TYPE union member is accessed without first validating the type,\ncausing an invalid pointer read.\n\nThe location is constrained to a 1-byte address space, meaning any\nattempted pointer manipulation can only target addresses between 0x00 and 0xFF.\nThis range corresponds to the zero page, which is unmapped on most modern\noperating systems and will reliably result in a crash, leading only to a\nDenial of Service. Exploiting this issue also requires a user or application\nto process a maliciously crafted PKCS#12 file. It is uncommon to accept\nuntrusted PKCS#12 files in applications as they are usually used to store\nprivate keys which are trusted by definition. For these reasons, the issue\nwas assessed as Low severity.\n\nThe FIPS modules in 3.5, 3.4, 3.3 and 3.0 are not affected by this issue,\nas the PKCS12 implementation is outside the OpenSSL FIPS module boundary.\n\nOpenSSL 3.6, 3.5, 3.4, 3.3, 3.0 and 1.1.1 are vulnerable to this issue.\n\nOpenSSL 1.0.2 is not affected by this issue.",
-                    "diffID": "sha256:420179ad2efafbf953a0c75f68a4c9dfaf38a98643df97d415bce49b179895f7",
-                    "installedVersion": "1.1.1w-0+deb11u1",
-                    "packageName": "libssl1.1",
-                    "purl": "pkg:deb/debian/libssl1.1@1.1.1w-0%2Bdeb11u1?arch=amd64&distro=debian-11.9",
-                    "references": [
-                      "https://access.redhat.com/errata/RHSA-2026:1472",
-                      "https://access.redhat.com/security/cve/CVE-2026-22795",
-                      "https://bugzilla.redhat.com/2430375",
-                      "https://bugzilla.redhat.com/2430376",
-                      "https://bugzilla.redhat.com/2430377",
-                      "https://bugzilla.redhat.com/2430378",
-                      "https://bugzilla.redhat.com/2430379",
-                      "https://bugzilla.redhat.com/2430380",
-                      "https://bugzilla.redhat.com/2430381",
-                      "https://bugzilla.redhat.com/2430386",
-                      "https://bugzilla.redhat.com/2430387",
-                      "https://bugzilla.redhat.com/2430388",
-                      "https://bugzilla.redhat.com/2430389",
-                      "https://bugzilla.redhat.com/2430390",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430375",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430376",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430377",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430378",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430379",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430380",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430381",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430386",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430387",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430388",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430389",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430390",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-11187",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-15467",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-15468",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-15469",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-66199",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-68160",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-69418",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-69419",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-69420",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-69421",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-22795",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-22796",
-                      "https://errata.almalinux.org/10/ALSA-2026-1472.html",
-                      "https://errata.rockylinux.org/RLSA-2026:1473",
-                      "https://github.com/openssl/openssl/commit/2502e7b7d4c0cf4f972a881641fe09edc67aeec4",
-                      "https://github.com/openssl/openssl/commit/572844beca95068394c916626a6d3a490f831a49",
-                      "https://github.com/openssl/openssl/commit/7bbca05be55b129651d9df4bdb92becc45002c12",
-                      "https://github.com/openssl/openssl/commit/eeee3cbd4d682095ed431052f00403004596373e",
-                      "https://github.com/openssl/openssl/commit/ef2fb66ec571564d64d1c74a12e388a2a54d05d2",
-                      "https://linux.oracle.com/cve/CVE-2026-22795.html",
-                      "https://linux.oracle.com/errata/ELSA-2026-50081.html",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2026-22795",
-                      "https://openssl-library.org/news/secadv/20260127.txt",
-                      "https://ubuntu.com/security/notices/USN-7980-1",
-                      "https://ubuntu.com/security/notices/USN-7980-2",
-                      "https://www.cve.org/CVERecord?id=CVE-2026-22795"
-                    ],
-                    "severity": "MEDIUM",
-                    "suppressed": false,
-                    "title": "openssl: OpenSSL: Denial of Service due to type confusion in PKCS#12 file processing"
-                  },
-                  {
-                    "cve": "CVE-2026-22796",
-                    "cvss": {
-                      "redhat": {
-                        "v3score": "5.9",
-                        "v3vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-754"
-                    ],
-                    "description": "Issue summary: A type confusion vulnerability exists in the signature\nverification of signed PKCS#7 data where an ASN1_TYPE union member is\naccessed without first validating the type, causing an invalid or NULL\npointer dereference when processing malformed PKCS#7 data.\n\nImpact summary: An application performing signature verification of PKCS#7\ndata or calling directly the PKCS7_digest_from_attributes() function can be\ncaused to dereference an invalid or NULL pointer when reading, resulting in\na Denial of Service.\n\nThe function PKCS7_digest_from_attributes() accesses the message digest attribute\nvalue without validating its type. When the type is not V_ASN1_OCTET_STRING,\nthis results in accessing invalid memory through the ASN1_TYPE union, causing\na crash.\n\nExploiting this vulnerability requires an attacker to provide a malformed\nsigned PKCS#7 to an application that verifies it. The impact of the\nexploit is just a Denial of Service, the PKCS7 API is legacy and applications\nshould be using the CMS API instead. For these reasons the issue was\nassessed as Low severity.\n\nThe FIPS modules in 3.5, 3.4, 3.3 and 3.0 are not affected by this issue,\nas the PKCS#7 parsing implementation is outside the OpenSSL FIPS module\nboundary.\n\nOpenSSL 3.6, 3.5, 3.4, 3.3, 3.0, 1.1.1 and 1.0.2 are vulnerable to this issue.",
-                    "diffID": "sha256:420179ad2efafbf953a0c75f68a4c9dfaf38a98643df97d415bce49b179895f7",
-                    "installedVersion": "1.1.1w-0+deb11u1",
-                    "packageName": "libssl1.1",
-                    "purl": "pkg:deb/debian/libssl1.1@1.1.1w-0%2Bdeb11u1?arch=amd64&distro=debian-11.9",
-                    "references": [
-                      "https://access.redhat.com/errata/RHSA-2026:1472",
-                      "https://access.redhat.com/security/cve/CVE-2026-22796",
-                      "https://bugzilla.redhat.com/2430375",
-                      "https://bugzilla.redhat.com/2430376",
-                      "https://bugzilla.redhat.com/2430377",
-                      "https://bugzilla.redhat.com/2430378",
-                      "https://bugzilla.redhat.com/2430379",
-                      "https://bugzilla.redhat.com/2430380",
-                      "https://bugzilla.redhat.com/2430381",
-                      "https://bugzilla.redhat.com/2430386",
-                      "https://bugzilla.redhat.com/2430387",
-                      "https://bugzilla.redhat.com/2430388",
-                      "https://bugzilla.redhat.com/2430389",
-                      "https://bugzilla.redhat.com/2430390",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430375",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430376",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430377",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430378",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430379",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430380",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430381",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430386",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430387",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430388",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430389",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430390",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-11187",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-15467",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-15468",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-15469",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-66199",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-68160",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-69418",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-69419",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-69420",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-69421",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-22795",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-22796",
-                      "https://errata.almalinux.org/10/ALSA-2026-1472.html",
-                      "https://errata.rockylinux.org/RLSA-2026:1473",
-                      "https://github.com/openssl/openssl/commit/2502e7b7d4c0cf4f972a881641fe09edc67aeec4",
-                      "https://github.com/openssl/openssl/commit/572844beca95068394c916626a6d3a490f831a49",
-                      "https://github.com/openssl/openssl/commit/7bbca05be55b129651d9df4bdb92becc45002c12",
-                      "https://github.com/openssl/openssl/commit/eeee3cbd4d682095ed431052f00403004596373e",
-                      "https://github.com/openssl/openssl/commit/ef2fb66ec571564d64d1c74a12e388a2a54d05d2",
-                      "https://linux.oracle.com/cve/CVE-2026-22796.html",
-                      "https://linux.oracle.com/errata/ELSA-2026-50081.html",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2026-22796",
-                      "https://openssl-library.org/news/secadv/20260127.txt",
-                      "https://ubuntu.com/security/notices/USN-7980-1",
-                      "https://ubuntu.com/security/notices/USN-7980-2",
-                      "https://www.cve.org/CVERecord?id=CVE-2026-22796"
-                    ],
-                    "severity": "MEDIUM",
-                    "suppressed": false,
-                    "title": "openssl: OpenSSL: Denial of Service via type confusion in PKCS#7 signature verification"
-                  },
-                  {
-                    "cve": "CVE-2024-2511",
-                    "cvss": {
-                      "redhat": {
-                        "v3score": "3.7",
-                        "v3vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-1325"
-                    ],
-                    "description": "Issue summary: Some non-default TLS server configurations can cause unbounded\nmemory growth when processing TLSv1.3 sessions\n\nImpact summary: An attacker may exploit certain server configurations to trigger\nunbounded memory growth that would lead to a Denial of Service\n\nThis problem can occur in TLSv1.3 if the non-default SSL_OP_NO_TICKET option is\nbeing used (but not if early_data support is also configured and the default\nanti-replay protection is in use). In this case, under certain conditions, the\nsession cache can get into an incorrect state and it will fail to flush properly\nas it fills. The session cache will continue to grow in an unbounded manner. A\nmalicious client could deliberately create the scenario for this failure to\nforce a Denial of Service. It may also happen by accident in normal operation.\n\nThis issue only affects TLS servers supporting TLSv1.3. It does not affect TLS\nclients.\n\nThe FIPS modules in 3.2, 3.1 and 3.0 are not affected by this issue. OpenSSL\n1.0.2 is also not affected by this issue.",
-                    "diffID": "sha256:420179ad2efafbf953a0c75f68a4c9dfaf38a98643df97d415bce49b179895f7",
-                    "fixedVersions": [
-                      "1.1.1w-0+deb11u2"
-                    ],
-                    "installedVersion": "1.1.1w-0+deb11u1",
-                    "packageName": "libssl1.1",
-                    "purl": "pkg:deb/debian/libssl1.1@1.1.1w-0%2Bdeb11u1?arch=amd64&distro=debian-11.9",
-                    "references": [
-                      "http://www.openwall.com/lists/oss-security/2024/04/08/5",
-                      "https://access.redhat.com/errata/RHSA-2024:9333",
-                      "https://access.redhat.com/security/cve/CVE-2024-2511",
-                      "https://bugzilla.redhat.com/2274020",
-                      "https://bugzilla.redhat.com/2281029",
-                      "https://bugzilla.redhat.com/2283757",
-                      "https://bugzilla.redhat.com/2294581",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2274020",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2281029",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2283757",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2294581",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-2511",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-4603",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-4741",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-5535",
-                      "https://errata.almalinux.org/9/ALSA-2024-9333.html",
-                      "https://errata.rockylinux.org/RLSA-2024:9333",
-                      "https://github.com/openssl/openssl/commit/7e4d731b1c07201ad9374c1cd9ac5263bdf35bce",
-                      "https://github.com/openssl/openssl/commit/b52867a9f618bb955bed2a3ce3db4d4f97ed8e5d",
-                      "https://github.com/openssl/openssl/commit/e9d7083e241670332e0443da0f0d4ffb52829f08",
-                      "https://github.openssl.org/openssl/extended-releases/commit/5f8d25770ae6437db119dfc951e207271a326640",
-                      "https://linux.oracle.com/cve/CVE-2024-2511.html",
-                      "https://linux.oracle.com/errata/ELSA-2024-9333.html",
-                      "https://lists.debian.org/debian-lts-announce/2024/10/msg00033.html",
-                      "https://lists.debian.org/debian-lts-announce/2024/11/msg00000.html",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2024-2511",
-                      "https://security.netapp.com/advisory/ntap-20240503-0013/",
-                      "https://ubuntu.com/security/notices/USN-6937-1",
-                      "https://ubuntu.com/security/notices/USN-7894-1",
-                      "https://www.cve.org/CVERecord?id=CVE-2024-2511",
-                      "https://www.openssl.org/news/secadv/20240408.txt",
-                      "https://www.openssl.org/news/vulnerabilities.html"
-                    ],
-                    "severity": "LOW",
-                    "suppressed": false,
-                    "title": "openssl: Unbounded memory growth with session handling in TLSv1.3"
-                  },
-                  {
-                    "cve": "CVE-2024-9143",
-                    "cvss": {
-                      "redhat": {
-                        "v3score": "3.7",
-                        "v3vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-125",
-                      "CWE-787"
-                    ],
-                    "description": "Issue summary: Use of the low-level GF(2^m) elliptic curve APIs with untrusted\nexplicit values for the field polynomial can lead to out-of-bounds memory reads\nor writes.\n\nImpact summary: Out of bound memory writes can lead to an application crash or\neven a possibility of a remote code execution, however, in all the protocols\ninvolving Elliptic Curve Cryptography that we're aware of, either only \"named\ncurves\" are supported, or, if explicit curve parameters are supported, they\nspecify an X9.62 encoding of binary (GF(2^m)) curves that can't represent\nproblematic input values. Thus the likelihood of existence of a vulnerable\napplication is low.\n\nIn particular, the X9.62 encoding is used for ECC keys in X.509 certificates,\nso problematic inputs cannot occur in the context of processing X.509\ncertificates.  Any problematic use-cases would have to be using an \"exotic\"\ncurve encoding.\n\nThe affected APIs include: EC_GROUP_new_curve_GF2m(), EC_GROUP_new_from_params(),\nand various supporting BN_GF2m_*() functions.\n\nApplications working with \"exotic\" explicit binary (GF(2^m)) curve parameters,\nthat make it possible to represent invalid field polynomials with a zero\nconstant term, via the above or similar APIs, may terminate abruptly as a\nresult of reading or writing outside of array bounds.  Remote code execution\ncannot easily be ruled out.\n\nThe FIPS modules in 3.3, 3.2, 3.1 and 3.0 are not affected by this issue.",
-                    "diffID": "sha256:420179ad2efafbf953a0c75f68a4c9dfaf38a98643df97d415bce49b179895f7",
-                    "fixedVersions": [
-                      "1.1.1w-0+deb11u2"
-                    ],
-                    "installedVersion": "1.1.1w-0+deb11u1",
-                    "packageName": "libssl1.1",
-                    "purl": "pkg:deb/debian/libssl1.1@1.1.1w-0%2Bdeb11u1?arch=amd64&distro=debian-11.9",
-                    "references": [
-                      "http://www.openwall.com/lists/oss-security/2024/10/16/1",
-                      "http://www.openwall.com/lists/oss-security/2024/10/23/1",
-                      "http://www.openwall.com/lists/oss-security/2024/10/24/1",
-                      "https://access.redhat.com/security/cve/CVE-2024-9143",
-                      "https://github.com/openssl/openssl/commit/72ae83ad214d2eef262461365a1975707f862712",
-                      "https://github.com/openssl/openssl/commit/bc7e04d7c8d509fb78fc0e285aa948fb0da04700",
-                      "https://github.com/openssl/openssl/commit/c0d3e4d32d2805f49bec30547f225bc4d092e1f4",
-                      "https://github.com/openssl/openssl/commit/fdf6723362ca51bd883295efe206cb5b1cfa5154",
-                      "https://github.openssl.org/openssl/extended-releases/commit/8efc0cbaa8ebba8e116f7b81a876a4123594d86a",
-                      "https://github.openssl.org/openssl/extended-releases/commit/9d576994cec2b7aa37a91740ea7e680810957e41",
-                      "https://lists.debian.org/debian-lts-announce/2024/10/msg00033.html",
-                      "https://lists.debian.org/debian-lts-announce/2024/11/msg00000.html",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2024-9143",
-                      "https://openssl-library.org/news/secadv/20241016.txt",
-                      "https://security.netapp.com/advisory/ntap-20241101-0001/",
-                      "https://ubuntu.com/security/notices/USN-7264-1",
-                      "https://ubuntu.com/security/notices/USN-7278-1",
-                      "https://ubuntu.com/security/notices/USN-7894-1",
-                      "https://www.cve.org/CVERecord?id=CVE-2024-9143"
-                    ],
-                    "severity": "LOW",
-                    "suppressed": false,
-                    "title": "openssl: Low-level invalid GF(2^m) parameters lead to OOB memory access"
-                  },
-                  {
-                    "cve": "CVE-2025-27587",
-                    "cwes": [
-                      "CWE-385"
-                    ],
-                    "description": "OpenSSL 3.0.0 through 3.3.2 on the PowerPC architecture is vulnerable to a Minerva attack, exploitable by measuring the time of signing of random messages using the EVP_DigestSign API, and then using the private key to extract the K value (nonce) from the signatures. Next, based on the bit size of the extracted nonce, one can compare the signing time of full-sized nonces to signatures that used smaller nonces, via statistical tests. There is a side-channel in the P-364 curve that allows private key extraction (also, there is a dependency between the bit size of K and the size of the side channel). NOTE: This CVE is disputed because the OpenSSL security policy explicitly notes that any side channels which require same physical system to be detected are outside of the threat model for the software. The timing signal is so small that it is infeasible to be detected without having the attacking process running on the same physical system.",
-                    "diffID": "sha256:420179ad2efafbf953a0c75f68a4c9dfaf38a98643df97d415bce49b179895f7",
-                    "installedVersion": "1.1.1w-0+deb11u1",
-                    "packageName": "libssl1.1",
-                    "purl": "pkg:deb/debian/libssl1.1@1.1.1w-0%2Bdeb11u1?arch=amd64&distro=debian-11.9",
-                    "references": [
-                      "https://github.com/openssl/openssl/issues/24253",
-                      "https://minerva.crocs.fi.muni.cz"
-                    ],
-                    "severity": "LOW",
-                    "suppressed": false,
-                    "title": "OpenSSL 3.0.0 through 3.3.2 on the PowerPC architecture is vulnerable  ..."
-                  },
-                  {
-                    "cve": "CVE-2023-4039",
-                    "cvss": {
-                      "nvd": {
-                        "v3score": "4.8",
-                        "v3vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-693"
-                    ],
-                    "description": "**DISPUTED**A failure in the -fstack-protector feature in GCC-based toolchains \nthat target AArch64 allows an attacker to exploit an existing buffer \noverflow in dynamically-sized local variables in your application \nwithout this being detected. This stack-protector failure only applies \nto C99-style dynamically-sized local variables or those created using \nalloca(). The stack-protector operates as intended for statically-sized \nlocal variables.\n\nThe default behavior when the stack-protector \ndetects an overflow is to terminate your application, resulting in \ncontrolled loss of availability. An attacker who can exploit a buffer \noverflow without triggering the stack-protector might be able to change \nprogram flow control to cause an uncontrolled loss of availability or to\n go further and affect confidentiality or integrity. NOTE: The GCC project argues that this is a missed hardening bug and not a vulnerability by itself.",
-                    "diffID": "sha256:420179ad2efafbf953a0c75f68a4c9dfaf38a98643df97d415bce49b179895f7",
-                    "installedVersion": "10.2.1-6",
-                    "packageName": "libstdc++6",
-                    "purl": "pkg:deb/debian/libstdc%2B%2B6@10.2.1-6?arch=amd64&distro=debian-11.9",
-                    "references": [
-                      "https://access.redhat.com/security/cve/CVE-2023-4039",
-                      "https://developer.arm.com/Arm%20Security%20Center/GCC%20Stack%20Protector%20Vulnerability%20AArch64",
-                      "https://gcc.gnu.org/git/?p=gcc.git;a=blob_plain;f=SECURITY.txt",
-                      "https://gcc.gnu.org/pipermail/gcc-patches/2023-October/634066.html",
-                      "https://github.com/metaredteam/external-disclosures/security/advisories/GHSA-x7ch-h5rf-w2mf",
-                      "https://inbox.sourceware.org/gcc-patches/46cfa37b-56eb-344d-0745-e0d35393392d@gotplt.org",
-                      "https://linux.oracle.com/cve/CVE-2023-4039.html",
-                      "https://linux.oracle.com/errata/ELSA-2023-28766.html",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2023-4039",
-                      "https://rtx.meta.security/mitigation/2023/09/12/CVE-2023-4039.html",
-                      "https://ubuntu.com/security/notices/USN-7700-1",
-                      "https://www.cve.org/CVERecord?id=CVE-2023-4039"
-                    ],
-                    "severity": "LOW",
-                    "suppressed": false,
-                    "title": "gcc: -fstack-protector fails to guard dynamic stack allocations on ARM64"
-                  },
-                  {
-                    "cve": "CVE-2023-50387",
-                    "cvss": {
-                      "nvd": {
-                        "v3score": "7.5",
-                        "v3vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"
-                      },
-                      "redhat": {
-                        "v3score": "7.5",
-                        "v3vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-770"
-                    ],
-                    "description": "Certain DNSSEC aspects of the DNS protocol (in RFC 4033, 4034, 4035, 6840, and related RFCs) allow remote attackers to cause a denial of service (CPU consumption) via one or more DNSSEC responses, aka the \"KeyTrap\" issue. One of the concerns is that, when there is a zone with many DNSKEY and RRSIG records, the protocol specification implies that an algorithm must evaluate all combinations of DNSKEY and RRSIG records.",
-                    "diffID": "sha256:420179ad2efafbf953a0c75f68a4c9dfaf38a98643df97d415bce49b179895f7",
-                    "fixedVersions": [
-                      "247.3-7+deb11u6"
-                    ],
-                    "installedVersion": "247.3-7+deb11u4",
-                    "packageName": "libsystemd0",
-                    "purl": "pkg:deb/debian/libsystemd0@247.3-7%2Bdeb11u4?arch=amd64&distro=debian-11.9",
-                    "references": [
-                      "http://www.openwall.com/lists/oss-security/2024/02/16/2",
-                      "http://www.openwall.com/lists/oss-security/2024/02/16/3",
-                      "https://access.redhat.com/errata/RHSA-2024:3271",
-                      "https://access.redhat.com/security/cve/CVE-2023-50387",
-                      "https://blog.powerdns.com/2024/02/13/powerdns-recursor-4-8-6-4-9-3-5-0-2-released",
-                      "https://bugzilla.redhat.com/2263896",
-                      "https://bugzilla.redhat.com/2263914",
-                      "https://bugzilla.redhat.com/2263917",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2263896",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2263897",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2263909",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2263911",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2263914",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2263917",
-                      "https://bugzilla.suse.com/show_bug.cgi?id=1219823",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-4408",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-50387",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-50868",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-5517",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-5679",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-6516",
-                      "https://docs.powerdns.com/recursor/security-advisories/powerdns-advisory-2024-01.html",
-                      "https://errata.almalinux.org/8/ALSA-2024-3271.html",
-                      "https://errata.rockylinux.org/RLSA-2024:2551",
-                      "https://gitlab.nic.cz/knot/knot-resolver/-/releases/v5.7.1",
-                      "https://kb.isc.org/docs/cve-2023-50387",
-                      "https://linux.oracle.com/cve/CVE-2023-50387.html",
-                      "https://linux.oracle.com/errata/ELSA-2024-3741.html",
-                      "https://lists.debian.org/debian-lts-announce/2024/02/msg00006.html",
-                      "https://lists.debian.org/debian-lts-announce/2024/05/msg00011.html",
-                      "https://lists.debian.org/debian-lts-announce/2024/09/msg00001.html",
-                      "https://lists.debian.org/debian-lts-announce/2024/11/msg00035.html",
-                      "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6FV5O347JTX7P5OZA6NGO4MKTXRXMKOZ/",
-                      "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BUIP7T7Z4T3UHLXFWG6XIVDP4GYPD3AI/",
-                      "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/HVRDSJVZKMCXKKPP6PNR62T7RWZ3YSDZ/",
-                      "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/IGSLGKUAQTW5JPPZCMF5YPEYALLRUZZ6/",
-                      "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PNNHZSZPG2E7NBMBNYPGHCFI4V4XRWNQ/",
-                      "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/RGS7JN6FZXUSTC2XKQHH27574XOULYYJ/",
-                      "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/SVYA42BLXUCIDLD35YIJPJSHDIADNYMP/",
-                      "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/TEXGOYGW7DBS3N2QSSQONZ4ENIRQEAPG/",
-                      "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQESRWMJCF4JEYJEAKLRM6CT55GLJAB7/",
-                      "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZDZFMEKQTZ4L7RY46FCENWFB5MDT263R/",
-                      "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/BUIP7T7Z4T3UHLXFWG6XIVDP4GYPD3AI/",
-                      "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/HVRDSJVZKMCXKKPP6PNR62T7RWZ3YSDZ/",
-                      "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/RGS7JN6FZXUSTC2XKQHH27574XOULYYJ/",
-                      "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ZDZFMEKQTZ4L7RY46FCENWFB5MDT263R/",
-                      "https://lists.thekelleys.org.uk/pipermail/dnsmasq-discuss/2024q1/017430.html",
-                      "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-50387",
-                      "https://news.ycombinator.com/item?id=39367411",
-                      "https://news.ycombinator.com/item?id=39372384",
-                      "https://nlnetlabs.nl/downloads/unbound/CVE-2023-50387_CVE-2023-50868.txt",
-                      "https://nlnetlabs.nl/news/2024/Feb/13/unbound-1.19.1-released/",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2023-50387",
-                      "https://security.netapp.com/advisory/ntap-20240307-0007/",
-                      "https://ubuntu.com/security/notices/USN-6633-1",
-                      "https://ubuntu.com/security/notices/USN-6642-1",
-                      "https://ubuntu.com/security/notices/USN-6657-1",
-                      "https://ubuntu.com/security/notices/USN-6657-2",
-                      "https://ubuntu.com/security/notices/USN-6665-1",
-                      "https://ubuntu.com/security/notices/USN-6723-1",
-                      "https://www.athene-center.de/aktuelles/key-trap",
-                      "https://www.athene-center.de/fileadmin/content/PDF/Technical_Report_KeyTrap.pdf",
-                      "https://www.cve.org/CVERecord?id=CVE-2023-50387",
-                      "https://www.isc.org/blogs/2024-bind-security-release/",
-                      "https://www.knot-resolver.cz/2024-02-13-knot-resolver-5.7.1.html",
-                      "https://www.securityweek.com/keytrap-dns-attack-could-disable-large-parts-of-internet-researchers/",
-                      "https://www.theregister.com/2024/02/13/dnssec_vulnerability_internet/"
-                    ],
-                    "severity": "HIGH",
-                    "suppressed": false,
-                    "title": "bind9: KeyTrap - Extreme CPU consumption in DNSSEC validator"
-                  },
-                  {
-                    "cve": "CVE-2023-50868",
-                    "cvss": {
-                      "nvd": {
-                        "v3score": "7.5",
-                        "v3vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"
-                      },
-                      "redhat": {
-                        "v3score": "7.5",
-                        "v3vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-400"
-                    ],
-                    "description": "The Closest Encloser Proof aspect of the DNS protocol (in RFC 5155 when RFC 9276 guidance is skipped) allows remote attackers to cause a denial of service (CPU consumption for SHA-1 computations) via DNSSEC responses in a random subdomain attack, aka the \"NSEC3\" issue. The RFC 5155 specification implies that an algorithm must perform thousands of iterations of a hash function in certain situations.",
-                    "diffID": "sha256:420179ad2efafbf953a0c75f68a4c9dfaf38a98643df97d415bce49b179895f7",
-                    "fixedVersions": [
-                      "247.3-7+deb11u6"
-                    ],
-                    "installedVersion": "247.3-7+deb11u4",
-                    "packageName": "libsystemd0",
-                    "purl": "pkg:deb/debian/libsystemd0@247.3-7%2Bdeb11u4?arch=amd64&distro=debian-11.9",
-                    "references": [
-                      "http://www.openwall.com/lists/oss-security/2024/02/16/2",
-                      "http://www.openwall.com/lists/oss-security/2024/02/16/3",
-                      "https://access.redhat.com/errata/RHSA-2024:3271",
-                      "https://access.redhat.com/security/cve/CVE-2023-50868",
-                      "https://blog.powerdns.com/2024/02/13/powerdns-recursor-4-8-6-4-9-3-5-0-2-released",
-                      "https://bugzilla.redhat.com/2263896",
-                      "https://bugzilla.redhat.com/2263914",
-                      "https://bugzilla.redhat.com/2263917",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2263896",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2263897",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2263909",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2263911",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2263914",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2263917",
-                      "https://bugzilla.suse.com/show_bug.cgi?id=1219826",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-4408",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-50387",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-50868",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-5517",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-5679",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-6516",
-                      "https://datatracker.ietf.org/doc/html/rfc5155",
-                      "https://docs.powerdns.com/recursor/security-advisories/powerdns-advisory-2024-01.html",
-                      "https://errata.almalinux.org/8/ALSA-2024-3271.html",
-                      "https://errata.rockylinux.org/RLSA-2024:2551",
-                      "https://gitlab.nic.cz/knot/knot-resolver/-/releases/v5.7.1",
-                      "https://kb.isc.org/docs/cve-2023-50868",
-                      "https://linux.oracle.com/cve/CVE-2023-50868.html",
-                      "https://linux.oracle.com/errata/ELSA-2024-3741.html",
-                      "https://lists.debian.org/debian-lts-announce/2024/02/msg00006.html",
-                      "https://lists.debian.org/debian-lts-announce/2024/05/msg00011.html",
-                      "https://lists.debian.org/debian-lts-announce/2024/09/msg00001.html",
-                      "https://lists.debian.org/debian-lts-announce/2024/11/msg00035.html",
-                      "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6FV5O347JTX7P5OZA6NGO4MKTXRXMKOZ/",
-                      "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BUIP7T7Z4T3UHLXFWG6XIVDP4GYPD3AI/",
-                      "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/HVRDSJVZKMCXKKPP6PNR62T7RWZ3YSDZ/",
-                      "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/IGSLGKUAQTW5JPPZCMF5YPEYALLRUZZ6/",
-                      "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PNNHZSZPG2E7NBMBNYPGHCFI4V4XRWNQ/",
-                      "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/RGS7JN6FZXUSTC2XKQHH27574XOULYYJ/",
-                      "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/SVYA42BLXUCIDLD35YIJPJSHDIADNYMP/",
-                      "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/TEXGOYGW7DBS3N2QSSQONZ4ENIRQEAPG/",
-                      "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQESRWMJCF4JEYJEAKLRM6CT55GLJAB7/",
-                      "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZDZFMEKQTZ4L7RY46FCENWFB5MDT263R/",
-                      "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/BUIP7T7Z4T3UHLXFWG6XIVDP4GYPD3AI/",
-                      "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/HVRDSJVZKMCXKKPP6PNR62T7RWZ3YSDZ/",
-                      "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ZDZFMEKQTZ4L7RY46FCENWFB5MDT263R/",
-                      "https://lists.thekelleys.org.uk/pipermail/dnsmasq-discuss/2024q1/017430.html",
-                      "https://nlnetlabs.nl/downloads/unbound/CVE-2023-50387_CVE-2023-50868.txt",
-                      "https://nlnetlabs.nl/news/2024/Feb/13/unbound-1.19.1-released/",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2023-50868",
-                      "https://security.netapp.com/advisory/ntap-20240307-0008/",
-                      "https://ubuntu.com/security/notices/USN-6633-1",
-                      "https://ubuntu.com/security/notices/USN-6642-1",
-                      "https://ubuntu.com/security/notices/USN-6657-1",
-                      "https://ubuntu.com/security/notices/USN-6657-2",
-                      "https://ubuntu.com/security/notices/USN-6665-1",
-                      "https://ubuntu.com/security/notices/USN-6723-1",
-                      "https://www.cve.org/CVERecord?id=CVE-2023-50868",
-                      "https://www.isc.org/blogs/2024-bind-security-release/",
-                      "https://www.knot-resolver.cz/2024-02-13-knot-resolver-5.7.1.html"
-                    ],
-                    "severity": "HIGH",
-                    "suppressed": false,
-                    "title": "bind9: Preparing an NSEC3 closest encloser proof can exhaust CPU resources"
-                  },
-                  {
-                    "cve": "CVE-2023-7008",
-                    "cvss": {
-                      "nvd": {
-                        "v3score": "5.9",
-                        "v3vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N"
-                      },
-                      "redhat": {
-                        "v3score": "5.9",
-                        "v3vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-300"
-                    ],
-                    "description": "A vulnerability was found in systemd-resolved. This issue may allow systemd-resolved to accept records of DNSSEC-signed domains even when they have no signature, allowing man-in-the-middles (or the upstream DNS resolver) to manipulate records.",
-                    "diffID": "sha256:420179ad2efafbf953a0c75f68a4c9dfaf38a98643df97d415bce49b179895f7",
-                    "fixedVersions": [
-                      "247.3-7+deb11u6"
-                    ],
-                    "installedVersion": "247.3-7+deb11u4",
-                    "packageName": "libsystemd0",
-                    "purl": "pkg:deb/debian/libsystemd0@247.3-7%2Bdeb11u4?arch=amd64&distro=debian-11.9",
-                    "references": [
-                      "https://access.redhat.com/errata/RHSA-2024:2463",
-                      "https://access.redhat.com/errata/RHSA-2024:3203",
-                      "https://access.redhat.com/security/cve/CVE-2023-7008",
-                      "https://bugzilla.redhat.com/2222672",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2222261",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2222672",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-7008",
-                      "https://errata.almalinux.org/8/ALSA-2024-3203.html",
-                      "https://errata.rockylinux.org/RLSA-2024:2463",
-                      "https://github.com/systemd/systemd/issues/25676",
-                      "https://linux.oracle.com/cve/CVE-2023-7008.html",
-                      "https://linux.oracle.com/errata/ELSA-2024-3203.html",
-                      "https://lists.debian.org/debian-lts-announce/2024/09/msg00001.html",
-                      "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/4GMDEG5PKONWNHOEYSUDRT6JEOISRMN2/",
-                      "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/QHNBXGKJWISJETTTDTZKTBFIBJUOSLKL/",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2023-7008",
-                      "https://security.netapp.com/advisory/ntap-20241122-0004/",
-                      "https://www.cve.org/CVERecord?id=CVE-2023-7008"
-                    ],
-                    "severity": "MEDIUM",
-                    "suppressed": false,
-                    "title": "systemd-resolved: Unsigned name response in signed zone is not refused when DNSSEC=yes"
-                  },
-                  {
-                    "cve": "CVE-2025-4598",
-                    "cvss": {
-                      "redhat": {
-                        "v3score": "4.7",
-                        "v3vector": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-364"
-                    ],
-                    "description": "A vulnerability was found in systemd-coredump. This flaw allows an attacker to force a SUID process to crash and replace it with a non-SUID binary to access the original's privileged process coredump, allowing the attacker to read sensitive data, such as /etc/shadow content, loaded by the original process.\n\nA SUID binary or process has a special type of permission, which allows the process to run with the file owner's permissions, regardless of the user executing the binary. This allows the process to access more restricted data than unprivileged users or processes would be able to. An attacker can leverage this flaw by forcing a SUID process to crash and force the Linux kernel to recycle the process PID before systemd-coredump can analyze the /proc/pid/auxv file. If the attacker wins the race condition, they gain access to the original's SUID process coredump file. They can read sensitive content loaded into memory by the original binary, affecting data confidentiality.",
-                    "diffID": "sha256:420179ad2efafbf953a0c75f68a4c9dfaf38a98643df97d415bce49b179895f7",
-                    "fixedVersions": [
-                      "247.3-7+deb11u7"
-                    ],
-                    "installedVersion": "247.3-7+deb11u4",
-                    "packageName": "libsystemd0",
-                    "purl": "pkg:deb/debian/libsystemd0@247.3-7%2Bdeb11u4?arch=amd64&distro=debian-11.9",
-                    "references": [
-                      "http://seclists.org/fulldisclosure/2025/Jun/9",
-                      "http://www.openwall.com/lists/oss-security/2025/06/05/1",
-                      "http://www.openwall.com/lists/oss-security/2025/06/05/3",
-                      "http://www.openwall.com/lists/oss-security/2025/08/18/3",
-                      "https://access.redhat.com/errata/RHSA-2025:22660",
-                      "https://access.redhat.com/errata/RHSA-2025:22868",
-                      "https://access.redhat.com/errata/RHSA-2025:23227",
-                      "https://access.redhat.com/errata/RHSA-2025:23234",
-                      "https://access.redhat.com/errata/RHSA-2026:0414",
-                      "https://access.redhat.com/errata/RHSA-2026:1652",
-                      "https://access.redhat.com/security/cve/CVE-2025-4598",
-                      "https://blogs.oracle.com/linux/post/analysis-of-cve-2025-4598",
-                      "https://bugzilla.redhat.com/2369242",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2369242",
-                      "https://ciq.com/blog/the-real-danger-of-systemd-coredump-cve-2025-4598/",
-                      "https://errata.almalinux.org/9/ALSA-2025-22660.html",
-                      "https://git.kernel.org/linus/b5325b2a270fcaf7b2a9a0f23d422ca8a5a8bdea",
-                      "https://github.com/systemd/systemd/commit/0c49e0049b7665bb7769a13ef346fef92e1ad4d6 (main)",
-                      "https://github.com/systemd/systemd/commit/13902e025321242b1d95c6d8b4e482b37f58cdef (main)",
-                      "https://github.com/systemd/systemd/commit/49f1f2d4a7612bbed5211a73d11d6a94fbe3bb69 (main)",
-                      "https://github.com/systemd/systemd/commit/76e0ab49c47965877c19772a2b3bf55f6417ca39 (main)",
-                      "https://github.com/systemd/systemd/commit/868d95577ec9f862580ad365726515459be582fc (main)",
-                      "https://github.com/systemd/systemd/commit/8fc7b2a211eb13ef1a94250b28e1c79cab8bdcb9 (main)",
-                      "https://github.com/systemd/systemd/commit/9ce8e3e449def92c75ada41b7d10c5bc3946be77 (main)",
-                      "https://github.com/systemd/systemd/commit/e6a8687b939ab21854f12f59a3cce703e32768cf (main)",
-                      "https://linux.oracle.com/cve/CVE-2025-4598.html",
-                      "https://linux.oracle.com/errata/ELSA-2025-22660.html",
-                      "https://lists.debian.org/debian-lts-announce/2025/07/msg00022.html",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2025-4598",
-                      "https://ubuntu.com/security/notices/USN-7559-1",
-                      "https://www.cve.org/CVERecord?id=CVE-2025-4598",
-                      "https://www.openwall.com/lists/oss-security/2025/05/29/3",
-                      "https://www.openwall.com/lists/oss-security/2025/08/18/3",
-                      "https://www.qualys.com/2025/05/29/apport-coredump/apport-coredump.txt"
-                    ],
-                    "severity": "MEDIUM",
-                    "suppressed": false,
-                    "title": "systemd-coredump: race condition that allows a local attacker to crash a SUID program and gain read access to the resulting core dump"
-                  },
-                  {
-                    "cve": "CVE-2013-4392",
-                    "cvss": {
-                      "nvd": {
-                        "v3score": "0",
-                        "v3vector": ""
-                      },
-                      "redhat": {
-                        "v3score": "0",
-                        "v3vector": ""
-                      }
-                    },
-                    "cwes": [
-                      "CWE-59"
-                    ],
-                    "description": "systemd, when updating file permissions, allows local users to change the permissions and SELinux security contexts for arbitrary files via a symlink attack on unspecified files.",
-                    "diffID": "sha256:420179ad2efafbf953a0c75f68a4c9dfaf38a98643df97d415bce49b179895f7",
-                    "installedVersion": "247.3-7+deb11u4",
-                    "packageName": "libsystemd0",
-                    "purl": "pkg:deb/debian/libsystemd0@247.3-7%2Bdeb11u4?arch=amd64&distro=debian-11.9",
-                    "references": [
-                      "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=725357",
-                      "http://www.openwall.com/lists/oss-security/2013/10/01/9",
-                      "https://access.redhat.com/security/cve/CVE-2013-4392",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=859060",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2013-4392",
-                      "https://www.cve.org/CVERecord?id=CVE-2013-4392"
-                    ],
-                    "severity": "LOW",
-                    "suppressed": false,
-                    "title": "systemd: TOCTOU race condition when updating file permissions and SELinux security contexts"
-                  },
-                  {
-                    "cve": "CVE-2020-13529",
-                    "cvss": {
-                      "nvd": {
-                        "v3score": "6.1",
-                        "v3vector": "CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:C/C:N/I:N/A:H"
-                      },
-                      "redhat": {
-                        "v3score": "6.1",
-                        "v3vector": "CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:C/C:N/I:N/A:H"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-290"
-                    ],
-                    "description": "An exploitable denial-of-service vulnerability exists in Systemd 245. A specially crafted DHCP FORCERENEW packet can cause a server running the DHCP client to be vulnerable to a DHCP ACK spoofing attack. An attacker can forge a pair of FORCERENEW and DCHP ACK packets to reconfigure the server.",
-                    "diffID": "sha256:420179ad2efafbf953a0c75f68a4c9dfaf38a98643df97d415bce49b179895f7",
-                    "installedVersion": "247.3-7+deb11u4",
-                    "packageName": "libsystemd0",
-                    "purl": "pkg:deb/debian/libsystemd0@247.3-7%2Bdeb11u4?arch=amd64&distro=debian-11.9",
-                    "references": [
-                      "http://www.openwall.com/lists/oss-security/2021/08/04/2",
-                      "http://www.openwall.com/lists/oss-security/2021/08/17/3",
-                      "http://www.openwall.com/lists/oss-security/2021/09/07/3",
-                      "https://access.redhat.com/security/cve/CVE-2020-13529",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=1791212",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=1820770",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=1825666",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=1832112",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=1832273",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=1847125",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=1847894",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=1852317",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=1890234",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=1899372",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=1907960",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=1912236",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=1912423",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=1915276",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=1915278",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=1928078",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=1933719",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=1934122",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=1934291",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=1934465",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=1935842",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=1936610",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=1940435",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=1940504",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=1940934",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=1942331",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=1945282",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=1955101",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=1959397",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=1959461",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=1959934",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=1959961",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=1970335",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=1971527",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=1973199",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=1977984",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=1979192",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=1979387",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=1982403",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=1988751",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2004212",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-13529",
-                      "https://errata.rockylinux.org/RLSA-2021:4361",
-                      "https://linux.oracle.com/cve/CVE-2020-13529.html",
-                      "https://linux.oracle.com/errata/ELSA-2021-4361.html",
-                      "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/42TMJVNYRY65B4QCJICBYOEIVZV3KUYI/",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2020-13529",
-                      "https://security.gentoo.org/glsa/202107-48",
-                      "https://security.netapp.com/advisory/ntap-20210625-0005/",
-                      "https://talosintelligence.com/vulnerability_reports/TALOS-2020-1142",
-                      "https://ubuntu.com/security/notices/USN-5013-1",
-                      "https://ubuntu.com/security/notices/USN-5013-2",
-                      "https://www.cve.org/CVERecord?id=CVE-2020-13529"
-                    ],
-                    "severity": "LOW",
-                    "suppressed": false,
-                    "title": "systemd: DHCP FORCERENEW authentication not implemented can cause a system running the DHCP client to have its network reconfigured"
-                  },
-                  {
-                    "cve": "CVE-2023-31437",
-                    "cvss": {
-                      "nvd": {
-                        "v3score": "5.3",
-                        "v3vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-354"
-                    ],
-                    "description": "An issue was discovered in systemd 253. An attacker can modify a sealed log file such that, in some views, not all existing and sealed log messages are displayed. NOTE: the vendor reportedly sent \"a reply denying that any of the finding was a security vulnerability.\"",
-                    "diffID": "sha256:420179ad2efafbf953a0c75f68a4c9dfaf38a98643df97d415bce49b179895f7",
-                    "installedVersion": "247.3-7+deb11u4",
-                    "packageName": "libsystemd0",
-                    "purl": "pkg:deb/debian/libsystemd0@247.3-7%2Bdeb11u4?arch=amd64&distro=debian-11.9",
-                    "references": [
-                      "https://github.com/kastel-security/Journald",
-                      "https://github.com/kastel-security/Journald/blob/main/journald-publication.pdf",
-                      "https://github.com/systemd/systemd/releases"
-                    ],
-                    "severity": "LOW",
-                    "suppressed": false,
-                    "title": "An issue was discovered in systemd 253. An attacker can modify a seale ..."
-                  },
-                  {
-                    "cve": "CVE-2023-31438",
-                    "cvss": {
-                      "nvd": {
-                        "v3score": "5.3",
-                        "v3vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-354"
-                    ],
-                    "description": "An issue was discovered in systemd 253. An attacker can truncate a sealed log file and then resume log sealing such that checking the integrity shows no error, despite modifications. NOTE: the vendor reportedly sent \"a reply denying that any of the finding was a security vulnerability.\"",
-                    "diffID": "sha256:420179ad2efafbf953a0c75f68a4c9dfaf38a98643df97d415bce49b179895f7",
-                    "installedVersion": "247.3-7+deb11u4",
-                    "packageName": "libsystemd0",
-                    "purl": "pkg:deb/debian/libsystemd0@247.3-7%2Bdeb11u4?arch=amd64&distro=debian-11.9",
-                    "references": [
-                      "https://github.com/kastel-security/Journald",
-                      "https://github.com/kastel-security/Journald/blob/main/journald-publication.pdf",
-                      "https://github.com/systemd/systemd/pull/28886",
-                      "https://github.com/systemd/systemd/releases"
-                    ],
-                    "severity": "LOW",
-                    "suppressed": false,
-                    "title": "An issue was discovered in systemd 253. An attacker can truncate a sea ..."
-                  },
-                  {
-                    "cve": "CVE-2023-31439",
-                    "cvss": {
-                      "nvd": {
-                        "v3score": "5.3",
-                        "v3vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-354"
-                    ],
-                    "description": "An issue was discovered in systemd 253. An attacker can modify the contents of past events in a sealed log file and then adjust the file such that checking the integrity shows no error, despite modifications. NOTE: the vendor reportedly sent \"a reply denying that any of the finding was a security vulnerability.\"",
-                    "diffID": "sha256:420179ad2efafbf953a0c75f68a4c9dfaf38a98643df97d415bce49b179895f7",
-                    "installedVersion": "247.3-7+deb11u4",
-                    "packageName": "libsystemd0",
-                    "purl": "pkg:deb/debian/libsystemd0@247.3-7%2Bdeb11u4?arch=amd64&distro=debian-11.9",
-                    "references": [
-                      "https://github.com/kastel-security/Journald",
-                      "https://github.com/kastel-security/Journald/blob/main/journald-publication.pdf",
-                      "https://github.com/systemd/systemd/pull/28885",
-                      "https://github.com/systemd/systemd/releases"
-                    ],
-                    "severity": "LOW",
-                    "suppressed": false,
-                    "title": "An issue was discovered in systemd 253. An attacker can modify the con ..."
-                  },
-                  {
-                    "cve": "CVE-2024-12133",
-                    "cvss": {
-                      "redhat": {
-                        "v3score": "5.3",
-                        "v3vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-407"
-                    ],
-                    "description": "A flaw in libtasn1 causes inefficient handling of specific certificate data. When processing a large number of elements in a certificate, libtasn1 takes much longer than expected, which can slow down or even crash the system. This flaw allows an attacker to send a specially crafted certificate, causing a denial of service attack.",
-                    "diffID": "sha256:420179ad2efafbf953a0c75f68a4c9dfaf38a98643df97d415bce49b179895f7",
-                    "fixedVersions": [
-                      "4.16.0-2+deb11u2"
-                    ],
-                    "installedVersion": "4.16.0-2+deb11u1",
-                    "packageName": "libtasn1-6",
-                    "purl": "pkg:deb/debian/libtasn1-6@4.16.0-2%2Bdeb11u1?arch=amd64&distro=debian-11.9",
-                    "references": [
-                      "http://www.openwall.com/lists/oss-security/2025/02/06/6",
-                      "https://access.redhat.com/errata/RHSA-2025:17347",
-                      "https://access.redhat.com/errata/RHSA-2025:4049",
-                      "https://access.redhat.com/errata/RHSA-2025:7077",
-                      "https://access.redhat.com/errata/RHSA-2025:8021",
-                      "https://access.redhat.com/errata/RHSA-2025:8385",
-                      "https://access.redhat.com/security/cve/CVE-2024-12133",
-                      "https://bugzilla.redhat.com/2344611",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2344611",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-12133",
-                      "https://errata.almalinux.org/9/ALSA-2025-7077.html",
-                      "https://errata.rockylinux.org/RLSA-2025:7077",
-                      "https://gitlab.com/gnutls/libtasn1/-/blob/master/doc/security/CVE-2024-12133.md?ref_type=heads",
-                      "https://gitlab.com/gnutls/libtasn1/-/issues/52",
-                      "https://linux.oracle.com/cve/CVE-2024-12133.html",
-                      "https://linux.oracle.com/errata/ELSA-2025-7077.html",
-                      "https://lists.debian.org/debian-lts-announce/2025/02/msg00025.html",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2024-12133",
-                      "https://security.netapp.com/advisory/ntap-20250523-0003/",
-                      "https://ubuntu.com/security/notices/USN-7275-1",
-                      "https://ubuntu.com/security/notices/USN-7275-2",
-                      "https://www.cve.org/CVERecord?id=CVE-2024-12133"
-                    ],
-                    "severity": "MEDIUM",
-                    "suppressed": false,
-                    "title": "libtasn1: Inefficient DER Decoding in libtasn1 Leading to Potential Remote DoS"
-                  },
-                  {
-                    "cve": "CVE-2025-13151",
-                    "cvss": {
-                      "redhat": {
-                        "v3score": "5.9",
-                        "v3vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-787"
-                    ],
-                    "description": "Stack-based buffer overflow in libtasn1 version: v4.20.0. The function fails to validate the size of input data resulting in a buffer overflow in asn1_expend_octet_string.",
-                    "diffID": "sha256:420179ad2efafbf953a0c75f68a4c9dfaf38a98643df97d415bce49b179895f7",
-                    "installedVersion": "4.16.0-2+deb11u1",
-                    "packageName": "libtasn1-6",
-                    "purl": "pkg:deb/debian/libtasn1-6@4.16.0-2%2Bdeb11u1?arch=amd64&distro=debian-11.9",
-                    "references": [
-                      "http://www.openwall.com/lists/oss-security/2026/01/08/5",
-                      "https://access.redhat.com/security/cve/CVE-2025-13151",
-                      "https://gitlab.com/gnutls/libtasn1",
-                      "https://gitlab.com/gnutls/libtasn1/-/merge_requests/121",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2025-13151",
-                      "https://ubuntu.com/security/notices/USN-7954-1",
-                      "https://www.cve.org/CVERecord?id=CVE-2025-13151",
-                      "https://www.kb.cert.org/vuls/id/271649"
-                    ],
-                    "severity": "MEDIUM",
-                    "suppressed": false,
-                    "title": "libtasn1: libtasn1: Denial of Service via stack-based buffer overflow in asn1_expend_octet_string"
-                  },
-                  {
-                    "cve": "CVE-2023-52355",
-                    "cvss": {
-                      "nvd": {
-                        "v3score": "7.5",
-                        "v3vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"
-                      },
-                      "redhat": {
-                        "v3score": "7.5",
-                        "v3vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-787"
-                    ],
-                    "description": "An out-of-memory flaw was found in libtiff that could be triggered by passing a crafted tiff file to the TIFFRasterScanlineSize64() API. This flaw allows a remote attacker to cause a denial of service via a crafted input with a size smaller than 379 KB.",
-                    "diffID": "sha256:9664c8c85da49d2cedf85c6b8af0e128318580b95b277b87593a4f75886148af",
-                    "installedVersion": "4.2.0-1+deb11u5",
-                    "packageName": "libtiff5",
-                    "purl": "pkg:deb/debian/libtiff5@4.2.0-1%2Bdeb11u5?arch=amd64&distro=debian-11.9",
-                    "references": [
-                      "https://access.redhat.com/errata/RHSA-2025:20801",
-                      "https://access.redhat.com/errata/RHSA-2025:21994",
-                      "https://access.redhat.com/errata/RHSA-2025:23078",
-                      "https://access.redhat.com/errata/RHSA-2025:23079",
-                      "https://access.redhat.com/errata/RHSA-2025:23080",
-                      "https://access.redhat.com/security/cve/CVE-2023-52355",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2251326",
-                      "https://gitlab.com/libtiff/libtiff/-/issues/621",
-                      "https://linux.oracle.com/cve/CVE-2023-52355.html",
-                      "https://linux.oracle.com/errata/ELSA-2025-20801.html",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2023-52355",
-                      "https://www.cve.org/CVERecord?id=CVE-2023-52355"
-                    ],
-                    "severity": "HIGH",
-                    "suppressed": false,
-                    "title": "libtiff: TIFFRasterScanlineSize64 produce too-big size and could cause OOM"
-                  },
-                  {
-                    "cve": "CVE-2023-52356",
-                    "cvss": {
-                      "nvd": {
-                        "v3score": "7.5",
-                        "v3vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"
-                      },
-                      "redhat": {
-                        "v3score": "7.5",
-                        "v3vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-122",
-                      "CWE-787"
-                    ],
-                    "description": "A segment fault (SEGV) flaw was found in libtiff that could be triggered by passing a crafted tiff file to the TIFFReadRGBATileExt() API. This flaw allows a remote attacker to cause a heap-buffer overflow, leading to a denial of service.",
-                    "diffID": "sha256:9664c8c85da49d2cedf85c6b8af0e128318580b95b277b87593a4f75886148af",
-                    "fixedVersions": [
-                      "4.2.0-1+deb11u6"
-                    ],
-                    "installedVersion": "4.2.0-1+deb11u5",
-                    "packageName": "libtiff5",
-                    "purl": "pkg:deb/debian/libtiff5@4.2.0-1%2Bdeb11u5?arch=amd64&distro=debian-11.9",
-                    "references": [
-                      "http://seclists.org/fulldisclosure/2024/Jul/16",
-                      "http://seclists.org/fulldisclosure/2024/Jul/17",
-                      "http://seclists.org/fulldisclosure/2024/Jul/18",
-                      "http://seclists.org/fulldisclosure/2024/Jul/19",
-                      "http://seclists.org/fulldisclosure/2024/Jul/20",
-                      "http://seclists.org/fulldisclosure/2024/Jul/21",
-                      "http://seclists.org/fulldisclosure/2024/Jul/22",
-                      "http://seclists.org/fulldisclosure/2024/Jul/23",
-                      "https://access.redhat.com/errata/RHSA-2024:5079",
-                      "https://access.redhat.com/errata/RHSA-2025:20801",
-                      "https://access.redhat.com/errata/RHSA-2025:21994",
-                      "https://access.redhat.com/errata/RHSA-2025:23078",
-                      "https://access.redhat.com/errata/RHSA-2025:23079",
-                      "https://access.redhat.com/errata/RHSA-2025:23080",
-                      "https://access.redhat.com/security/cve/CVE-2023-52356",
-                      "https://bugzilla.redhat.com/1614051",
-                      "https://bugzilla.redhat.com/2218744",
-                      "https://bugzilla.redhat.com/2240995",
-                      "https://bugzilla.redhat.com/2251344",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=1614051",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2218744",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2240995",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2251344",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-15209",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-25433",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52356",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-6228",
-                      "https://errata.almalinux.org/8/ALSA-2024-5079.html",
-                      "https://errata.rockylinux.org/RLSA-2024:5079",
-                      "https://gitlab.com/libtiff/libtiff/-/issues/622",
-                      "https://gitlab.com/libtiff/libtiff/-/merge_requests/546",
-                      "https://linux.oracle.com/cve/CVE-2023-52356.html",
-                      "https://linux.oracle.com/errata/ELSA-2025-20801.html",
-                      "https://lists.debian.org/debian-lts-announce/2024/03/msg00011.html",
-                      "https://lists.debian.org/debian-lts-announce/2025/01/msg00019.html",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2023-52356",
-                      "https://support.apple.com/kb/HT214116",
-                      "https://support.apple.com/kb/HT214117",
-                      "https://support.apple.com/kb/HT214118",
-                      "https://support.apple.com/kb/HT214119",
-                      "https://support.apple.com/kb/HT214120",
-                      "https://support.apple.com/kb/HT214122",
-                      "https://support.apple.com/kb/HT214123",
-                      "https://support.apple.com/kb/HT214124",
-                      "https://ubuntu.com/security/notices/USN-6644-1",
-                      "https://ubuntu.com/security/notices/USN-6644-2",
-                      "https://www.cve.org/CVERecord?id=CVE-2023-52356"
-                    ],
-                    "severity": "HIGH",
-                    "suppressed": false,
-                    "title": "libtiff: Segment fault in libtiff  in TIFFReadRGBATileExt() leading to denial of service"
-                  },
-                  {
-                    "cve": "CVE-2024-7006",
-                    "cvss": {
-                      "nvd": {
-                        "v3score": "7.5",
-                        "v3vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"
-                      },
-                      "redhat": {
-                        "v3score": "7.5",
-                        "v3vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-476"
-                    ],
-                    "description": "A null pointer dereference flaw was found in Libtiff via `tif_dirinfo.c`. This issue may allow an attacker to trigger memory allocation failures through certain means, such as restricting the heap space size or injecting faults, causing a segmentation fault. This can cause an application crash, eventually leading to a denial of service.",
-                    "diffID": "sha256:9664c8c85da49d2cedf85c6b8af0e128318580b95b277b87593a4f75886148af",
-                    "fixedVersions": [
-                      "4.2.0-1+deb11u6"
-                    ],
-                    "installedVersion": "4.2.0-1+deb11u5",
-                    "packageName": "libtiff5",
-                    "purl": "pkg:deb/debian/libtiff5@4.2.0-1%2Bdeb11u5?arch=amd64&distro=debian-11.9",
-                    "references": [
-                      "https://access.redhat.com/errata/RHSA-2024:6360",
-                      "https://access.redhat.com/errata/RHSA-2024:8833",
-                      "https://access.redhat.com/errata/RHSA-2024:8914",
-                      "https://access.redhat.com/security/cve/CVE-2024-7006",
-                      "https://bugzilla.redhat.com/2302996",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2302996",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-7006",
-                      "https://errata.almalinux.org/8/ALSA-2024-8833.html",
-                      "https://errata.rockylinux.org/RLSA-2024:8914",
-                      "https://gitlab.com/libtiff/libtiff/-/merge_requests/559",
-                      "https://linux.oracle.com/cve/CVE-2024-7006.html",
-                      "https://linux.oracle.com/errata/ELSA-2024-8914.html",
-                      "https://lists.debian.org/debian-lts-announce/2025/01/msg00019.html",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2024-7006",
-                      "https://security.netapp.com/advisory/ntap-20240920-0001/",
-                      "https://ubuntu.com/security/notices/USN-6997-1",
-                      "https://ubuntu.com/security/notices/USN-6997-2",
-                      "https://www.cve.org/CVERecord?id=CVE-2024-7006"
-                    ],
-                    "severity": "HIGH",
-                    "suppressed": false,
-                    "title": "libtiff: NULL pointer dereference in tif_dirinfo.c"
-                  },
-                  {
-                    "cve": "CVE-2025-9900",
-                    "cvss": {
-                      "redhat": {
-                        "v3score": "8.8",
-                        "v3vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-123"
-                    ],
-                    "description": "A flaw was found in Libtiff. This vulnerability is a \"write-what-where\" condition, triggered when the library processes a specially crafted TIFF image file.\n\nBy providing an abnormally large image height value in the file's metadata, an attacker can trick the library into writing attacker-controlled color data to an arbitrary memory location. This memory corruption can be exploited to cause a denial of service (application crash) or to achieve arbitrary code execution with the permissions of the user.",
-                    "diffID": "sha256:9664c8c85da49d2cedf85c6b8af0e128318580b95b277b87593a4f75886148af",
-                    "fixedVersions": [
-                      "4.2.0-1+deb11u7"
-                    ],
-                    "installedVersion": "4.2.0-1+deb11u5",
-                    "packageName": "libtiff5",
-                    "purl": "pkg:deb/debian/libtiff5@4.2.0-1%2Bdeb11u5?arch=amd64&distro=debian-11.9",
-                    "references": [
-                      "http://www.openwall.com/lists/oss-security/2025/09/26/3",
-                      "https://access.redhat.com/errata/RHSA-2025:17651",
-                      "https://access.redhat.com/errata/RHSA-2025:17675",
-                      "https://access.redhat.com/errata/RHSA-2025:17710",
-                      "https://access.redhat.com/errata/RHSA-2025:17738",
-                      "https://access.redhat.com/errata/RHSA-2025:17739",
-                      "https://access.redhat.com/errata/RHSA-2025:17740",
-                      "https://access.redhat.com/errata/RHSA-2025:19113",
-                      "https://access.redhat.com/errata/RHSA-2025:19156",
-                      "https://access.redhat.com/errata/RHSA-2025:19276",
-                      "https://access.redhat.com/errata/RHSA-2025:19906",
-                      "https://access.redhat.com/errata/RHSA-2025:19947",
-                      "https://access.redhat.com/errata/RHSA-2025:20956",
-                      "https://access.redhat.com/errata/RHSA-2025:20998",
-                      "https://access.redhat.com/errata/RHSA-2025:21060",
-                      "https://access.redhat.com/errata/RHSA-2025:21061",
-                      "https://access.redhat.com/errata/RHSA-2025:21062",
-                      "https://access.redhat.com/errata/RHSA-2025:21407",
-                      "https://access.redhat.com/errata/RHSA-2025:21506",
-                      "https://access.redhat.com/errata/RHSA-2025:21507",
-                      "https://access.redhat.com/errata/RHSA-2025:21508",
-                      "https://access.redhat.com/errata/RHSA-2025:21994",
-                      "https://access.redhat.com/errata/RHSA-2025:23078",
-                      "https://access.redhat.com/errata/RHSA-2025:23079",
-                      "https://access.redhat.com/errata/RHSA-2025:23080",
-                      "https://access.redhat.com/errata/RHSA-2026:0001",
-                      "https://access.redhat.com/errata/RHSA-2026:0076",
-                      "https://access.redhat.com/errata/RHSA-2026:0077",
-                      "https://access.redhat.com/errata/RHSA-2026:0078",
-                      "https://access.redhat.com/security/cve/CVE-2025-9900",
-                      "https://bugzilla.redhat.com/2383598",
-                      "https://bugzilla.redhat.com/2392784",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2383598",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2392784",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-8176",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-9900",
-                      "https://errata.almalinux.org/8/ALSA-2025-19906.html",
-                      "https://errata.rockylinux.org/RLSA-2025:19113",
-                      "https://github.com/SexyShoelessGodofWar/LibTiff-4.7.0-Write-What-Where?tab=readme-ov-file",
-                      "https://gitlab.com/libtiff/libtiff/-/commit/3e0dcf0ec651638b2bd849b2e6f3124b36890d99 (v4.7.1rc1)",
-                      "https://gitlab.com/libtiff/libtiff/-/issues/704",
-                      "https://gitlab.com/libtiff/libtiff/-/merge_requests/732",
-                      "https://libtiff.gitlab.io/libtiff/releases/v4.7.1.html",
-                      "https://linux.oracle.com/cve/CVE-2025-9900.html",
-                      "https://linux.oracle.com/errata/ELSA-2025-21407.html",
-                      "https://lists.debian.org/debian-lts-announce/2025/09/msg00031.html",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2025-9900",
-                      "https://ubuntu.com/security/notices/USN-7783-1",
-                      "https://www.cve.org/CVERecord?id=CVE-2025-9900"
-                    ],
-                    "severity": "HIGH",
-                    "suppressed": false,
-                    "title": "libtiff: Libtiff Write-What-Where"
-                  },
-                  {
-                    "cve": "CVE-2022-40090",
-                    "cvss": {
-                      "nvd": {
-                        "v3score": "6.5",
-                        "v3vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H"
-                      },
-                      "redhat": {
-                        "v3score": "6.5",
-                        "v3vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-835"
-                    ],
-                    "description": "An issue was discovered in function TIFFReadDirectory libtiff before 4.4.0 allows attackers to cause a denial of service via crafted TIFF file.",
-                    "diffID": "sha256:9664c8c85da49d2cedf85c6b8af0e128318580b95b277b87593a4f75886148af",
-                    "installedVersion": "4.2.0-1+deb11u5",
-                    "packageName": "libtiff5",
-                    "purl": "pkg:deb/debian/libtiff5@4.2.0-1%2Bdeb11u5?arch=amd64&distro=debian-11.9",
-                    "references": [
-                      "https://access.redhat.com/errata/RHSA-2024:2289",
-                      "https://access.redhat.com/security/cve/CVE-2022-40090",
-                      "https://bugzilla.redhat.com/2215865",
-                      "https://bugzilla.redhat.com/2234970",
-                      "https://bugzilla.redhat.com/2235264",
-                      "https://bugzilla.redhat.com/2235265",
-                      "https://bugzilla.redhat.com/2240995",
-                      "https://errata.almalinux.org/9/ALSA-2024-2289.html",
-                      "https://gitlab.com/libtiff/libtiff/-/commit/d093eb5d961e21ba51420bc22382c514683a4d91 (v4.5.0rc1)",
-                      "https://gitlab.com/libtiff/libtiff/-/issues/455",
-                      "https://gitlab.com/libtiff/libtiff/-/merge_requests/386",
-                      "https://linux.oracle.com/cve/CVE-2022-40090.html",
-                      "https://linux.oracle.com/errata/ELSA-2024-2289.html",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2022-40090",
-                      "https://ubuntu.com/security/notices/USN-6512-1",
-                      "https://www.cve.org/CVERecord?id=CVE-2022-40090"
-                    ],
-                    "severity": "MEDIUM",
-                    "suppressed": false,
-                    "title": "libtiff: infinite loop via a crafted TIFF file"
-                  },
-                  {
-                    "cve": "CVE-2023-25433",
-                    "cvss": {
-                      "nvd": {
-                        "v3score": "5.5",
-                        "v3vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H"
-                      },
-                      "redhat": {
-                        "v3score": "5.5",
-                        "v3vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-120"
-                    ],
-                    "description": "libtiff 4.5.0 is vulnerable to Buffer Overflow via /libtiff/tools/tiffcrop.c:8499. Incorrect updating of buffer size after rotateImage() in tiffcrop cause heap-buffer-overflow and SEGV.",
-                    "diffID": "sha256:9664c8c85da49d2cedf85c6b8af0e128318580b95b277b87593a4f75886148af",
-                    "fixedVersions": [
-                      "4.2.0-1+deb11u6"
-                    ],
-                    "installedVersion": "4.2.0-1+deb11u5",
-                    "packageName": "libtiff5",
-                    "purl": "pkg:deb/debian/libtiff5@4.2.0-1%2Bdeb11u5?arch=amd64&distro=debian-11.9",
-                    "references": [
-                      "https://access.redhat.com/errata/RHSA-2024:5079",
-                      "https://access.redhat.com/security/cve/CVE-2023-25433",
-                      "https://bugzilla.redhat.com/1614051",
-                      "https://bugzilla.redhat.com/2218744",
-                      "https://bugzilla.redhat.com/2240995",
-                      "https://bugzilla.redhat.com/2251344",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=1614051",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2218744",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2240995",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2251344",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-15209",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-25433",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52356",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-6228",
-                      "https://errata.almalinux.org/8/ALSA-2024-5079.html",
-                      "https://errata.rockylinux.org/RLSA-2024:5079",
-                      "https://gitlab.com/libtiff/libtiff/-/issues/520",
-                      "https://gitlab.com/libtiff/libtiff/-/merge_requests/467",
-                      "https://linux.oracle.com/cve/CVE-2023-25433.html",
-                      "https://linux.oracle.com/errata/ELSA-2024-5079.html",
-                      "https://lists.debian.org/debian-lts-announce/2023/07/msg00034.html",
-                      "https://lists.debian.org/debian-lts-announce/2025/01/msg00019.html",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2023-25433",
-                      "https://ubuntu.com/security/notices/USN-6229-1",
-                      "https://ubuntu.com/security/notices/USN-6290-1",
-                      "https://www.cve.org/CVERecord?id=CVE-2023-25433"
-                    ],
-                    "severity": "MEDIUM",
-                    "suppressed": false,
-                    "title": "libtiff: Buffer Overflow via /libtiff/tools/tiffcrop.c"
-                  },
-                  {
-                    "cve": "CVE-2023-26965",
-                    "cvss": {
-                      "nvd": {
-                        "v3score": "5.5",
-                        "v3vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H"
-                      },
-                      "redhat": {
-                        "v3score": "5.5",
-                        "v3vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-787"
-                    ],
-                    "description": "loadImage() in tools/tiffcrop.c in LibTIFF through 4.5.0 has a heap-based use after free via a crafted TIFF image.",
-                    "diffID": "sha256:9664c8c85da49d2cedf85c6b8af0e128318580b95b277b87593a4f75886148af",
-                    "fixedVersions": [
-                      "4.2.0-1+deb11u6"
-                    ],
-                    "installedVersion": "4.2.0-1+deb11u5",
-                    "packageName": "libtiff5",
-                    "purl": "pkg:deb/debian/libtiff5@4.2.0-1%2Bdeb11u5?arch=amd64&distro=debian-11.9",
-                    "references": [
-                      "https://access.redhat.com/errata/RHSA-2023:6575",
-                      "https://access.redhat.com/security/cve/CVE-2023-26965",
-                      "https://bugzilla.redhat.com/2207635",
-                      "https://bugzilla.redhat.com/2215206",
-                      "https://bugzilla.redhat.com/2216080",
-                      "https://bugzilla.redhat.com/2218749",
-                      "https://bugzilla.redhat.com/2219340",
-                      "https://errata.almalinux.org/9/ALSA-2023-6575.html",
-                      "https://gitlab.com/libtiff/libtiff/-/merge_requests/472",
-                      "https://linux.oracle.com/cve/CVE-2023-26965.html",
-                      "https://linux.oracle.com/errata/ELSA-2023-6575.html",
-                      "https://lists.debian.org/debian-lts-announce/2023/07/msg00034.html",
-                      "https://lists.debian.org/debian-lts-announce/2025/01/msg00019.html",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2023-26965",
-                      "https://security.netapp.com/advisory/ntap-20230706-0009/",
-                      "https://ubuntu.com/security/notices/USN-6229-1",
-                      "https://ubuntu.com/security/notices/USN-6290-1",
-                      "https://www.cve.org/CVERecord?id=CVE-2023-26965"
-                    ],
-                    "severity": "MEDIUM",
-                    "suppressed": false,
-                    "title": "libtiff: heap-based use after free via a crafted TIFF image in loadImage() in tiffcrop.c"
-                  },
-                  {
-                    "cve": "CVE-2023-26966",
-                    "cvss": {
-                      "nvd": {
-                        "v3score": "5.5",
-                        "v3vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H"
-                      },
-                      "redhat": {
-                        "v3score": "5.5",
-                        "v3vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-120"
-                    ],
-                    "description": "libtiff 4.5.0 is vulnerable to Buffer Overflow in uv_encode() when libtiff reads a corrupted little-endian TIFF file and specifies the output to be big-endian.",
-                    "diffID": "sha256:9664c8c85da49d2cedf85c6b8af0e128318580b95b277b87593a4f75886148af",
-                    "fixedVersions": [
-                      "4.2.0-1+deb11u6"
-                    ],
-                    "installedVersion": "4.2.0-1+deb11u5",
-                    "packageName": "libtiff5",
-                    "purl": "pkg:deb/debian/libtiff5@4.2.0-1%2Bdeb11u5?arch=amd64&distro=debian-11.9",
-                    "references": [
-                      "https://access.redhat.com/errata/RHSA-2023:6575",
-                      "https://access.redhat.com/security/cve/CVE-2023-26966",
-                      "https://bugzilla.redhat.com/2207635",
-                      "https://bugzilla.redhat.com/2215206",
-                      "https://bugzilla.redhat.com/2216080",
-                      "https://bugzilla.redhat.com/2218749",
-                      "https://bugzilla.redhat.com/2219340",
-                      "https://errata.almalinux.org/9/ALSA-2023-6575.html",
-                      "https://gitlab.com/libtiff/libtiff/-/commit/b0e1c25dd1d065200c8d8f59ad0afe014861a1b9 (v4.5.1rc1)",
-                      "https://gitlab.com/libtiff/libtiff/-/issues/530",
-                      "https://gitlab.com/libtiff/libtiff/-/merge_requests/473",
-                      "https://linux.oracle.com/cve/CVE-2023-26966.html",
-                      "https://linux.oracle.com/errata/ELSA-2023-6575.html",
-                      "https://lists.debian.org/debian-lts-announce/2023/07/msg00034.html",
-                      "https://lists.debian.org/debian-lts-announce/2025/01/msg00019.html",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2023-26966",
-                      "https://ubuntu.com/security/notices/USN-6229-1",
-                      "https://ubuntu.com/security/notices/USN-6290-1",
-                      "https://www.cve.org/CVERecord?id=CVE-2023-26966"
-                    ],
-                    "severity": "MEDIUM",
-                    "suppressed": false,
-                    "title": "libtiff: Buffer Overflow in uv_encode()"
-                  },
-                  {
-                    "cve": "CVE-2023-2908",
-                    "cvss": {
-                      "nvd": {
-                        "v3score": "5.5",
-                        "v3vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H"
-                      },
-                      "redhat": {
-                        "v3score": "5.5",
-                        "v3vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-476"
-                    ],
-                    "description": "A null pointer dereference issue was found in Libtiff's tif_dir.c file. This issue may allow an attacker to pass a crafted TIFF image file to the tiffcp utility which triggers a runtime error that causes undefined behavior. This will result in an application crash, eventually leading to a denial of service.",
-                    "diffID": "sha256:9664c8c85da49d2cedf85c6b8af0e128318580b95b277b87593a4f75886148af",
-                    "fixedVersions": [
-                      "4.2.0-1+deb11u6"
-                    ],
-                    "installedVersion": "4.2.0-1+deb11u5",
-                    "packageName": "libtiff5",
-                    "purl": "pkg:deb/debian/libtiff5@4.2.0-1%2Bdeb11u5?arch=amd64&distro=debian-11.9",
-                    "references": [
-                      "https://access.redhat.com/security/cve/CVE-2023-2908",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2218830",
-                      "https://gitlab.com/libtiff/libtiff/-/commit/9bd48f0dbd64fb94dc2b5b05238fde0bfdd4ff3f",
-                      "https://gitlab.com/libtiff/libtiff/-/merge_requests/479",
-                      "https://lists.debian.org/debian-lts-announce/2023/07/msg00034.html",
-                      "https://lists.debian.org/debian-lts-announce/2025/01/msg00019.html",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2023-2908",
-                      "https://security.netapp.com/advisory/ntap-20230731-0004/",
-                      "https://ubuntu.com/security/notices/USN-6290-1",
-                      "https://www.cve.org/CVERecord?id=CVE-2023-2908"
-                    ],
-                    "severity": "MEDIUM",
-                    "suppressed": false,
-                    "title": "libtiff: null pointer dereference in tif_dir.c"
-                  },
-                  {
-                    "cve": "CVE-2023-3316",
-                    "cvss": {
-                      "nvd": {
-                        "v3score": "6.5",
-                        "v3vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H"
-                      },
-                      "redhat": {
-                        "v3score": "5.5",
-                        "v3vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-476"
-                    ],
-                    "description": "A NULL pointer dereference in TIFFClose() is caused by a failure to open an output file (non-existent path or a path that requires permissions like /dev/null) while specifying zones.",
-                    "diffID": "sha256:9664c8c85da49d2cedf85c6b8af0e128318580b95b277b87593a4f75886148af",
-                    "fixedVersions": [
-                      "4.2.0-1+deb11u6"
-                    ],
-                    "installedVersion": "4.2.0-1+deb11u5",
-                    "packageName": "libtiff5",
-                    "purl": "pkg:deb/debian/libtiff5@4.2.0-1%2Bdeb11u5?arch=amd64&distro=debian-11.9",
-                    "references": [
-                      "https://access.redhat.com/errata/RHSA-2023:6575",
-                      "https://access.redhat.com/security/cve/CVE-2023-3316",
-                      "https://bugzilla.redhat.com/2207635",
-                      "https://bugzilla.redhat.com/2215206",
-                      "https://bugzilla.redhat.com/2216080",
-                      "https://bugzilla.redhat.com/2218749",
-                      "https://bugzilla.redhat.com/2219340",
-                      "https://errata.almalinux.org/9/ALSA-2023-6575.html",
-                      "https://gitlab.com/libtiff/libtiff/-/issues/515",
-                      "https://gitlab.com/libtiff/libtiff/-/merge_requests/468",
-                      "https://linux.oracle.com/cve/CVE-2023-3316.html",
-                      "https://linux.oracle.com/errata/ELSA-2023-6575.html",
-                      "https://lists.debian.org/debian-lts-announce/2023/07/msg00034.html",
-                      "https://lists.debian.org/debian-lts-announce/2025/01/msg00019.html",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2023-3316",
-                      "https://research.jfrog.com/vulnerabilities/libtiff-nullderef-dos-xray-522144/",
-                      "https://ubuntu.com/security/notices/USN-6229-1",
-                      "https://ubuntu.com/security/notices/USN-6290-1",
-                      "https://www.cve.org/CVERecord?id=CVE-2023-3316"
-                    ],
-                    "severity": "MEDIUM",
-                    "suppressed": false,
-                    "title": "libtiff: tiffcrop: null pointer dereference in TIFFClose()"
-                  },
-                  {
-                    "cve": "CVE-2023-3618",
-                    "cvss": {
-                      "nvd": {
-                        "v3score": "6.5",
-                        "v3vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H"
-                      },
-                      "redhat": {
-                        "v3score": "6.5",
-                        "v3vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-120"
-                    ],
-                    "description": "A flaw was found in libtiff. A specially crafted tiff file can lead to a segmentation fault due to a buffer overflow in the Fax3Encode function in libtiff/tif_fax3.c, resulting in a denial of service.",
-                    "diffID": "sha256:9664c8c85da49d2cedf85c6b8af0e128318580b95b277b87593a4f75886148af",
-                    "fixedVersions": [
-                      "4.2.0-1+deb11u6"
-                    ],
-                    "installedVersion": "4.2.0-1+deb11u5",
-                    "packageName": "libtiff5",
-                    "purl": "pkg:deb/debian/libtiff5@4.2.0-1%2Bdeb11u5?arch=amd64&distro=debian-11.9",
-                    "references": [
-                      "https://access.redhat.com/errata/RHSA-2024:2289",
-                      "https://access.redhat.com/security/cve/CVE-2023-3618",
-                      "https://bugzilla.redhat.com/2215865",
-                      "https://bugzilla.redhat.com/2234970",
-                      "https://bugzilla.redhat.com/2235264",
-                      "https://bugzilla.redhat.com/2235265",
-                      "https://bugzilla.redhat.com/2240995",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2215865",
-                      "https://errata.almalinux.org/9/ALSA-2024-2289.html",
-                      "https://gitlab.com/libtiff/libtiff/-/commit/8a4f6b587be4fa7bb39fe17f5f9dec52182ab26e",
-                      "https://gitlab.com/libtiff/libtiff/-/issues/529",
-                      "https://linux.oracle.com/cve/CVE-2023-3618.html",
-                      "https://linux.oracle.com/errata/ELSA-2024-2289.html",
-                      "https://lists.debian.org/debian-lts-announce/2023/07/msg00034.html",
-                      "https://lists.debian.org/debian-lts-announce/2025/01/msg00019.html",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2023-3618",
-                      "https://security.netapp.com/advisory/ntap-20230824-0012/",
-                      "https://support.apple.com/kb/HT214036",
-                      "https://support.apple.com/kb/HT214037",
-                      "https://support.apple.com/kb/HT214038",
-                      "https://ubuntu.com/security/notices/USN-6290-1",
-                      "https://www.cve.org/CVERecord?id=CVE-2023-3618"
-                    ],
-                    "severity": "MEDIUM",
-                    "suppressed": false,
-                    "title": "libtiff: segmentation fault in Fax3Encode in libtiff/tif_fax3.c"
-                  },
-                  {
-                    "cve": "CVE-2023-6277",
-                    "cvss": {
-                      "nvd": {
-                        "v3score": "6.5",
-                        "v3vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H"
-                      },
-                      "redhat": {
-                        "v3score": "6.5",
-                        "v3vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-400"
-                    ],
-                    "description": "An out-of-memory flaw was found in libtiff. Passing a crafted tiff file to TIFFOpen() API may allow a remote attacker to cause a denial of service via a craft input with size smaller than 379 KB.",
-                    "diffID": "sha256:9664c8c85da49d2cedf85c6b8af0e128318580b95b277b87593a4f75886148af",
-                    "installedVersion": "4.2.0-1+deb11u5",
-                    "packageName": "libtiff5",
-                    "purl": "pkg:deb/debian/libtiff5@4.2.0-1%2Bdeb11u5?arch=amd64&distro=debian-11.9",
-                    "references": [
-                      "http://seclists.org/fulldisclosure/2024/Jul/16",
-                      "http://seclists.org/fulldisclosure/2024/Jul/17",
-                      "http://seclists.org/fulldisclosure/2024/Jul/18",
-                      "http://seclists.org/fulldisclosure/2024/Jul/19",
-                      "http://seclists.org/fulldisclosure/2024/Jul/20",
-                      "http://seclists.org/fulldisclosure/2024/Jul/21",
-                      "http://seclists.org/fulldisclosure/2024/Jul/22",
-                      "http://seclists.org/fulldisclosure/2024/Jul/23",
-                      "https://access.redhat.com/security/cve/CVE-2023-6277",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2251311",
-                      "https://gitlab.com/libtiff/libtiff/-/issues/614",
-                      "https://gitlab.com/libtiff/libtiff/-/merge_requests/545",
-                      "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/WJIN6DTSL3VODZUGWEUXLEL5DR53EZMV/",
-                      "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/Y7ZGN2MZXJ6E57W3L4YBM3ZPAU3T7T5C/",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2023-6277",
-                      "https://security.netapp.com/advisory/ntap-20240119-0002/",
-                      "https://support.apple.com/kb/HT214116",
-                      "https://support.apple.com/kb/HT214117",
-                      "https://support.apple.com/kb/HT214118",
-                      "https://support.apple.com/kb/HT214119",
-                      "https://support.apple.com/kb/HT214120",
-                      "https://support.apple.com/kb/HT214122",
-                      "https://support.apple.com/kb/HT214123",
-                      "https://support.apple.com/kb/HT214124",
-                      "https://ubuntu.com/security/notices/USN-6644-1",
-                      "https://ubuntu.com/security/notices/USN-6644-2",
-                      "https://www.cve.org/CVERecord?id=CVE-2023-6277"
-                    ],
-                    "severity": "MEDIUM",
-                    "suppressed": false,
-                    "title": "libtiff: Out-of-memory in TIFFOpen via a craft file"
-                  },
-                  {
-                    "cve": "CVE-2017-16232",
-                    "cvss": {
-                      "nvd": {
-                        "v3score": "7.5",
-                        "v3vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"
-                      },
-                      "redhat": {
-                        "v3score": "3.3",
-                        "v3vector": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-772"
-                    ],
-                    "description": "LibTIFF 4.0.8 has multiple memory leak vulnerabilities, which allow attackers to cause a denial of service (memory consumption), as demonstrated by tif_open.c, tif_lzw.c, and tif_aux.c. NOTE: Third parties were unable to reproduce the issue",
-                    "diffID": "sha256:9664c8c85da49d2cedf85c6b8af0e128318580b95b277b87593a4f75886148af",
-                    "installedVersion": "4.2.0-1+deb11u5",
-                    "packageName": "libtiff5",
-                    "purl": "pkg:deb/debian/libtiff5@4.2.0-1%2Bdeb11u5?arch=amd64&distro=debian-11.9",
-                    "references": [
-                      "http://lists.opensuse.org/opensuse-security-announce/2018-01/msg00036.html",
-                      "http://lists.opensuse.org/opensuse-security-announce/2018-01/msg00041.html",
-                      "http://packetstormsecurity.com/files/150896/LibTIFF-4.0.8-Memory-Leak.html",
-                      "http://seclists.org/fulldisclosure/2018/Dec/32",
-                      "http://seclists.org/fulldisclosure/2018/Dec/47",
-                      "http://www.openwall.com/lists/oss-security/2017/11/01/11",
-                      "http://www.openwall.com/lists/oss-security/2017/11/01/3",
-                      "http://www.openwall.com/lists/oss-security/2017/11/01/7",
-                      "http://www.openwall.com/lists/oss-security/2017/11/01/8",
-                      "http://www.securityfocus.com/bid/101696",
-                      "https://access.redhat.com/security/cve/CVE-2017-16232",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2017-16232",
-                      "https://www.cve.org/CVERecord?id=CVE-2017-16232"
-                    ],
-                    "severity": "LOW",
-                    "suppressed": false,
-                    "title": "libtiff: Memory leaks in tif_open.c, tif_lzw.c, and tif_aux.c"
-                  },
-                  {
-                    "cve": "CVE-2018-10126",
-                    "cvss": {
-                      "nvd": {
-                        "v3score": "6.5",
-                        "v3vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H"
-                      },
-                      "redhat": {
-                        "v3score": "3.3",
-                        "v3vector": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-476"
-                    ],
-                    "description": "ijg-libjpeg before 9d, as used in tiff2pdf (from LibTIFF) and other products, does not check for a NULL pointer at a certain place in jpeg_fdct_16x16 in jfdctint.c.",
-                    "diffID": "sha256:9664c8c85da49d2cedf85c6b8af0e128318580b95b277b87593a4f75886148af",
-                    "installedVersion": "4.2.0-1+deb11u5",
-                    "packageName": "libtiff5",
-                    "purl": "pkg:deb/debian/libtiff5@4.2.0-1%2Bdeb11u5?arch=amd64&distro=debian-11.9",
-                    "references": [
-                      "http://bugzilla.maptools.org/show_bug.cgi?id=2786",
-                      "https://access.redhat.com/security/cve/CVE-2018-10126",
-                      "https://gitlab.com/libtiff/libtiff/-/issues/128",
-                      "https://lists.apache.org/thread.html/rf9fa47ab66495c78bb4120b0754dd9531ca2ff0430f6685ac9b07772%40%3Cdev.mina.apache.org%3E",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2018-10126",
-                      "https://www.cve.org/CVERecord?id=CVE-2018-10126"
-                    ],
-                    "severity": "LOW",
-                    "suppressed": false,
-                    "title": "libtiff: NULL pointer dereference in the jpeg_fdct_16x16 function in jfdctint.c"
-                  },
-                  {
-                    "cve": "CVE-2022-1056",
-                    "cvss": {
-                      "nvd": {
-                        "v3score": "5.5",
-                        "v3vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H"
-                      },
-                      "redhat": {
-                        "v3score": "5.5",
-                        "v3vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-125"
-                    ],
-                    "description": "Out-of-bounds Read error in tiffcrop in libtiff 4.3.0 allows attackers to cause a denial-of-service via a crafted tiff file. For users that compile libtiff from sources, the fix is available with commit 46dc8fcd.",
-                    "diffID": "sha256:9664c8c85da49d2cedf85c6b8af0e128318580b95b277b87593a4f75886148af",
-                    "installedVersion": "4.2.0-1+deb11u5",
-                    "packageName": "libtiff5",
-                    "purl": "pkg:deb/debian/libtiff5@4.2.0-1%2Bdeb11u5?arch=amd64&distro=debian-11.9",
-                    "references": [
-                      "https://access.redhat.com/security/cve/CVE-2022-1056",
-                      "https://gitlab.com/gitlab-org/cves/-/blob/master/2022/CVE-2022-1056.json",
-                      "https://gitlab.com/libtiff/libtiff/-/commit/232282fd8f9c21eefe8d2d2b96cdbbb172fe7b7c",
-                      "https://gitlab.com/libtiff/libtiff/-/issues/391",
-                      "https://gitlab.com/libtiff/libtiff/-/merge_requests/307",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2022-1056",
-                      "https://security.gentoo.org/glsa/202210-10",
-                      "https://security.netapp.com/advisory/ntap-20221228-0008/",
-                      "https://www.cve.org/CVERecord?id=CVE-2022-1056"
-                    ],
-                    "severity": "LOW",
-                    "suppressed": false,
-                    "title": "libtiff: heap-based buffer overflow in _TIFFmemcpy() in tif_unix.c"
-                  },
-                  {
-                    "cve": "CVE-2022-1210",
-                    "cvss": {
-                      "nvd": {
-                        "v3score": "6.5",
-                        "v3vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H"
-                      },
-                      "redhat": {
-                        "v3score": "4.3",
-                        "v3vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-400",
-                      "CWE-404"
-                    ],
-                    "description": "A vulnerability classified as problematic was found in LibTIFF 4.3.0. Affected by this vulnerability is the TIFF File Handler of tiff2ps. Opening a malicious file leads to a denial of service. The attack can be launched remotely but requires user interaction. The exploit has been disclosed to the public and may be used.",
-                    "diffID": "sha256:9664c8c85da49d2cedf85c6b8af0e128318580b95b277b87593a4f75886148af",
-                    "installedVersion": "4.2.0-1+deb11u5",
-                    "packageName": "libtiff5",
-                    "purl": "pkg:deb/debian/libtiff5@4.2.0-1%2Bdeb11u5?arch=amd64&distro=debian-11.9",
-                    "references": [
-                      "https://access.redhat.com/security/cve/CVE-2022-1210",
-                      "https://gitlab.com/libtiff/libtiff/-/issues/402",
-                      "https://gitlab.com/libtiff/libtiff/uploads/c3da94e53cf1e1e8e6d4d3780dc8c42f/example.tiff",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2022-1210",
-                      "https://security.gentoo.org/glsa/202210-10",
-                      "https://security.netapp.com/advisory/ntap-20220513-0005/",
-                      "https://vuldb.com/?id.196363",
-                      "https://www.cve.org/CVERecord?id=CVE-2022-1210"
-                    ],
-                    "severity": "LOW",
-                    "suppressed": false,
-                    "title": "tiff: Malicious file leads to a denial of service in TIFF File Handler"
-                  },
-                  {
-                    "cve": "CVE-2023-1916",
-                    "cvss": {
-                      "nvd": {
-                        "v3score": "6.1",
-                        "v3vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:H"
-                      },
-                      "redhat": {
-                        "v3score": "6.1",
-                        "v3vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:H"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-125"
-                    ],
-                    "description": "A flaw was found in tiffcrop, a program distributed by the libtiff package. A specially crafted tiff file can lead to an out-of-bounds read in the extractImageSection function in tools/tiffcrop.c, resulting in a denial of service and limited information disclosure. This issue affects libtiff versions 4.x.",
-                    "diffID": "sha256:9664c8c85da49d2cedf85c6b8af0e128318580b95b277b87593a4f75886148af",
-                    "installedVersion": "4.2.0-1+deb11u5",
-                    "packageName": "libtiff5",
-                    "purl": "pkg:deb/debian/libtiff5@4.2.0-1%2Bdeb11u5?arch=amd64&distro=debian-11.9",
-                    "references": [
-                      "https://access.redhat.com/security/cve/CVE-2023-1916",
-                      "https://gitlab.com/libtiff/libtiff/-/issues/536",
-                      "https://gitlab.com/libtiff/libtiff/-/issues/536%2C",
-                      "https://gitlab.com/libtiff/libtiff/-/issues/536,",
-                      "https://gitlab.com/libtiff/libtiff/-/issues/537",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2023-1916",
-                      "https://support.apple.com/kb/HT213844",
-                      "https://ubuntu.com/security/notices/USN-6428-1",
-                      "https://www.cve.org/CVERecord?id=CVE-2023-1916"
-                    ],
-                    "severity": "LOW",
-                    "suppressed": false,
-                    "title": "libtiff: out-of-bounds read in extractImageSection() in tools/tiffcrop.c"
-                  },
-                  {
-                    "cve": "CVE-2023-30775",
-                    "cvss": {
-                      "nvd": {
-                        "v3score": "5.5",
-                        "v3vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H"
-                      },
-                      "redhat": {
-                        "v3score": "6.2",
-                        "v3vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-119",
-                      "CWE-787"
-                    ],
-                    "description": "A vulnerability was found in the libtiff library. This security flaw causes a heap buffer overflow in extractContigSamples32bits, tiffcrop.c.",
-                    "diffID": "sha256:9664c8c85da49d2cedf85c6b8af0e128318580b95b277b87593a4f75886148af",
-                    "installedVersion": "4.2.0-1+deb11u5",
-                    "packageName": "libtiff5",
-                    "purl": "pkg:deb/debian/libtiff5@4.2.0-1%2Bdeb11u5?arch=amd64&distro=debian-11.9",
-                    "references": [
-                      "https://access.redhat.com/errata/RHSA-2023:2340",
-                      "https://access.redhat.com/security/cve/CVE-2023-30775",
-                      "https://bugzilla.redhat.com/2142734",
-                      "https://bugzilla.redhat.com/2142736",
-                      "https://bugzilla.redhat.com/2142738",
-                      "https://bugzilla.redhat.com/2142740",
-                      "https://bugzilla.redhat.com/2142741",
-                      "https://bugzilla.redhat.com/2142742",
-                      "https://bugzilla.redhat.com/2148918",
-                      "https://bugzilla.redhat.com/2176220",
-                      "https://bugzilla.redhat.com/2187139",
-                      "https://bugzilla.redhat.com/2187141",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2187141",
-                      "https://errata.almalinux.org/9/ALSA-2023-2340.html",
-                      "https://gitlab.com/libtiff/libtiff/-/commit/afd7086090dafd3949afd172822cbcec4ed17d56 (v4.5.0rc1)",
-                      "https://gitlab.com/libtiff/libtiff/-/issues/464",
-                      "https://linux.oracle.com/cve/CVE-2023-30775.html",
-                      "https://linux.oracle.com/errata/ELSA-2023-2340.html",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2023-30775",
-                      "https://security.netapp.com/advisory/ntap-20230703-0002/",
-                      "https://www.cve.org/CVERecord?id=CVE-2023-30775"
-                    ],
-                    "severity": "LOW",
-                    "suppressed": false,
-                    "title": "libtiff: Heap buffer overflow in extractContigSamples32bits, tiffcrop.c"
-                  },
-                  {
-                    "cve": "CVE-2023-3164",
-                    "cvss": {
-                      "nvd": {
-                        "v3score": "5.5",
-                        "v3vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H"
-                      },
-                      "redhat": {
-                        "v3score": "5.5",
-                        "v3vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-120",
-                      "CWE-787"
-                    ],
-                    "description": "A heap-buffer-overflow vulnerability was found in LibTIFF, in extractImageSection() at tools/tiffcrop.c:7916 and tools/tiffcrop.c:7801. This flaw allows attackers to cause a denial of service via a crafted tiff file.",
-                    "diffID": "sha256:9664c8c85da49d2cedf85c6b8af0e128318580b95b277b87593a4f75886148af",
-                    "installedVersion": "4.2.0-1+deb11u5",
-                    "packageName": "libtiff5",
-                    "purl": "pkg:deb/debian/libtiff5@4.2.0-1%2Bdeb11u5?arch=amd64&distro=debian-11.9",
-                    "references": [
-                      "https://access.redhat.com/security/cve/CVE-2023-3164",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2213531",
-                      "https://gitlab.com/libtiff/libtiff/-/issues/542",
-                      "https://gitlab.com/libtiff/libtiff/-/merge_requests/595",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2023-3164",
-                      "https://ubuntu.com/security/notices/USN-6827-1",
-                      "https://www.cve.org/CVERecord?id=CVE-2023-3164"
-                    ],
-                    "severity": "LOW",
-                    "suppressed": false,
-                    "title": "libtiff: heap-buffer-overflow in extractImageSection()"
-                  },
-                  {
-                    "cve": "CVE-2023-6228",
-                    "cvss": {
-                      "nvd": {
-                        "v3score": "5.5",
-                        "v3vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H"
-                      },
-                      "redhat": {
-                        "v3score": "3.3",
-                        "v3vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-787"
-                    ],
-                    "description": "An issue was found in the tiffcp utility distributed by the libtiff package where a crafted TIFF file on processing may cause a heap-based buffer overflow leads to an application crash.",
-                    "diffID": "sha256:9664c8c85da49d2cedf85c6b8af0e128318580b95b277b87593a4f75886148af",
-                    "installedVersion": "4.2.0-1+deb11u5",
-                    "packageName": "libtiff5",
-                    "purl": "pkg:deb/debian/libtiff5@4.2.0-1%2Bdeb11u5?arch=amd64&distro=debian-11.9",
-                    "references": [
-                      "https://access.redhat.com/errata/RHSA-2024:2289",
-                      "https://access.redhat.com/errata/RHSA-2024:5079",
-                      "https://access.redhat.com/security/cve/CVE-2023-6228",
-                      "https://bugzilla.redhat.com/1614051",
-                      "https://bugzilla.redhat.com/2218744",
-                      "https://bugzilla.redhat.com/2240995",
-                      "https://bugzilla.redhat.com/2251344",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=1614051",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2218744",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2240995",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2251344",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-15209",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-25433",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52356",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-6228",
-                      "https://errata.almalinux.org/8/ALSA-2024-5079.html",
-                      "https://errata.rockylinux.org/RLSA-2024:5079",
-                      "https://linux.oracle.com/cve/CVE-2023-6228.html",
-                      "https://linux.oracle.com/errata/ELSA-2024-5079.html",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2023-6228",
-                      "https://ubuntu.com/security/notices/USN-6644-1",
-                      "https://ubuntu.com/security/notices/USN-6644-2",
-                      "https://www.cve.org/CVERecord?id=CVE-2023-6228"
-                    ],
-                    "severity": "LOW",
-                    "suppressed": false,
-                    "title": "libtiff: heap-based buffer overflow in cpStripToTile() in tools/tiffcp.c"
-                  },
-                  {
-                    "cve": "CVE-2024-13978",
-                    "cvss": {
-                      "redhat": {
-                        "v3score": "2.5",
-                        "v3vector": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-404",
-                      "CWE-476"
-                    ],
-                    "description": "A vulnerability was found in LibTIFF up to 4.7.0. It has been declared as problematic. Affected by this vulnerability is the function t2p_read_tiff_init of the file tools/tiff2pdf.c of the component fax2ps. The manipulation leads to null pointer dereference. The attack needs to be approached locally. The complexity of an attack is rather high. The exploitation appears to be difficult. The patch is named 2ebfffb0e8836bfb1cd7d85c059cd285c59761a4. It is recommended to apply a patch to fix this issue.",
-                    "diffID": "sha256:9664c8c85da49d2cedf85c6b8af0e128318580b95b277b87593a4f75886148af",
-                    "fixedVersions": [
-                      "4.2.0-1+deb11u7"
-                    ],
-                    "installedVersion": "4.2.0-1+deb11u5",
-                    "packageName": "libtiff5",
-                    "purl": "pkg:deb/debian/libtiff5@4.2.0-1%2Bdeb11u5?arch=amd64&distro=debian-11.9",
-                    "references": [
-                      "http://www.libtiff.org/",
-                      "https://access.redhat.com/security/cve/CVE-2024-13978",
-                      "https://gitlab.com/libtiff/libtiff/-/commit/2ebfffb0e8836bfb1cd7d85c059cd285c59761a4",
-                      "https://gitlab.com/libtiff/libtiff/-/issues/649",
-                      "https://gitlab.com/libtiff/libtiff/-/merge_requests/667",
-                      "https://lists.debian.org/debian-lts-announce/2025/09/msg00031.html",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2024-13978",
-                      "https://vuldb.com/?ctiid.318355",
-                      "https://vuldb.com/?id.318355",
-                      "https://vuldb.com/?submit.624562",
-                      "https://www.cve.org/CVERecord?id=CVE-2024-13978"
-                    ],
-                    "severity": "LOW",
-                    "suppressed": false,
-                    "title": "libtiff: LibTIFF Null Pointer Dereference"
-                  },
-                  {
-                    "cve": "CVE-2025-8176",
-                    "cvss": {
-                      "nvd": {
-                        "v3score": "7.8",
-                        "v3vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"
-                      },
-                      "redhat": {
-                        "v3score": "7.8",
-                        "v3vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-119",
-                      "CWE-416"
-                    ],
-                    "description": "A vulnerability was found in LibTIFF up to 4.7.0. It has been declared as critical. This vulnerability affects the function get_histogram of the file tools/tiffmedian.c. The manipulation leads to use after free. The attack needs to be approached locally. The exploit has been disclosed to the public and may be used. The patch is identified as fe10872e53efba9cc36c66ac4ab3b41a839d5172. It is recommended to apply a patch to fix this issue.",
-                    "diffID": "sha256:9664c8c85da49d2cedf85c6b8af0e128318580b95b277b87593a4f75886148af",
-                    "installedVersion": "4.2.0-1+deb11u5",
-                    "packageName": "libtiff5",
-                    "purl": "pkg:deb/debian/libtiff5@4.2.0-1%2Bdeb11u5?arch=amd64&distro=debian-11.9",
-                    "references": [
-                      "http://www.libtiff.org/",
-                      "https://access.redhat.com/errata/RHSA-2025:20034",
-                      "https://access.redhat.com/security/cve/CVE-2025-8176",
-                      "https://bugzilla.redhat.com/2383598",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2383598",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2392784",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-8176",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-9900",
-                      "https://errata.almalinux.org/8/ALSA-2025-20034.html",
-                      "https://errata.rockylinux.org/RLSA-2025:19113",
-                      "https://gitlab.com/libtiff/libtiff/-/commit/fe10872e53efba9cc36c66ac4ab3b41a839d5172",
-                      "https://gitlab.com/libtiff/libtiff/-/issues/707",
-                      "https://gitlab.com/libtiff/libtiff/-/merge_requests/727",
-                      "https://linux.oracle.com/cve/CVE-2025-8176.html",
-                      "https://linux.oracle.com/errata/ELSA-2025-21407.html",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2025-8176",
-                      "https://ubuntu.com/security/notices/USN-7707-1",
-                      "https://vuldb.com/?ctiid.317590",
-                      "https://vuldb.com/?id.317590",
-                      "https://vuldb.com/?submit.621796",
-                      "https://www.cve.org/CVERecord?id=CVE-2025-8176"
-                    ],
-                    "severity": "LOW",
-                    "suppressed": false,
-                    "title": "libtiff: LibTIFF Use-After-Free Vulnerability"
-                  },
-                  {
-                    "cve": "CVE-2025-8177",
-                    "cvss": {
-                      "nvd": {
-                        "v3score": "7.8",
-                        "v3vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"
-                      },
-                      "redhat": {
-                        "v3score": "7.8",
-                        "v3vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-119",
-                      "CWE-120"
-                    ],
-                    "description": "A vulnerability was found in LibTIFF up to 4.7.0. It has been rated as critical. This issue affects the function setrow of the file tools/thumbnail.c. The manipulation leads to buffer overflow. An attack has to be approached locally. The patch is named e8c9d6c616b19438695fd829e58ae4fde5bfbc22. It is recommended to apply a patch to fix this issue. This vulnerability only affects products that are no longer supported by the maintainer.",
-                    "diffID": "sha256:9664c8c85da49d2cedf85c6b8af0e128318580b95b277b87593a4f75886148af",
-                    "installedVersion": "4.2.0-1+deb11u5",
-                    "packageName": "libtiff5",
-                    "purl": "pkg:deb/debian/libtiff5@4.2.0-1%2Bdeb11u5?arch=amd64&distro=debian-11.9",
-                    "references": [
-                      "http://www.libtiff.org/",
-                      "https://access.redhat.com/security/cve/CVE-2025-8177",
-                      "https://gitlab.com/libtiff/libtiff/-/commit/e8c9d6c616b19438695fd829e58ae4fde5bfbc22",
-                      "https://gitlab.com/libtiff/libtiff/-/issues/715",
-                      "https://gitlab.com/libtiff/libtiff/-/merge_requests/737",
-                      "https://linux.oracle.com/cve/CVE-2025-8177.html",
-                      "https://linux.oracle.com/errata/ELSA-2025-21407.html",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2025-8177",
-                      "https://ubuntu.com/security/notices/USN-7707-1",
-                      "https://vuldb.com/?ctiid.317591",
-                      "https://vuldb.com/?id.317591",
-                      "https://vuldb.com/?submit.621797",
-                      "https://www.cve.org/CVERecord?id=CVE-2025-8177"
-                    ],
-                    "severity": "LOW",
-                    "suppressed": false,
-                    "title": "libtiff: LibTIFF Buffer Overflow"
-                  },
-                  {
-                    "cve": "CVE-2025-8534",
-                    "cvss": {
-                      "redhat": {
-                        "v3score": "2.5",
-                        "v3vector": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-404",
-                      "CWE-476"
-                    ],
-                    "description": "A vulnerability classified as problematic was found in libtiff 4.6.0. This vulnerability affects the function PS_Lvl2page of the file tools/tiff2ps.c of the component tiff2ps. The manipulation leads to null pointer dereference. It is possible to launch the attack on the local host. The complexity of an attack is rather high. The exploitation appears to be difficult. The exploit has been disclosed to the public and may be used. The name of the patch is 6ba36f159fd396ad11bf6b7874554197736ecc8b. It is recommended to apply a patch to fix this issue. One of the maintainers explains, that \"[t]his error only occurs if DEFER_STRILE_LOAD (defer-strile-load:BOOL=ON) or TIFFOpen( .. \"rD\") option is used.\"",
-                    "diffID": "sha256:9664c8c85da49d2cedf85c6b8af0e128318580b95b277b87593a4f75886148af",
-                    "installedVersion": "4.2.0-1+deb11u5",
-                    "packageName": "libtiff5",
-                    "purl": "pkg:deb/debian/libtiff5@4.2.0-1%2Bdeb11u5?arch=amd64&distro=debian-11.9",
-                    "references": [
-                      "http://www.libtiff.org/",
-                      "https://access.redhat.com/security/cve/CVE-2025-8534",
-                      "https://drive.google.com/file/d/15JPA3kLYiYD-nRNJ8y8HmnYjhv9NE7k6/view?usp=drive_link",
-                      "https://gitlab.com/libtiff/libtiff/-/commit/6ba36f159fd396ad11bf6b7874554197736ecc8b",
-                      "https://gitlab.com/libtiff/libtiff/-/issues/718",
-                      "https://gitlab.com/libtiff/libtiff/-/merge_requests/746",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2025-8534",
-                      "https://ubuntu.com/security/notices/USN-7707-1",
-                      "https://vuldb.com/?ctiid.318664",
-                      "https://vuldb.com/?id.318664",
-                      "https://vuldb.com/?submit.617831",
-                      "https://www.cve.org/CVERecord?id=CVE-2025-8534"
-                    ],
-                    "severity": "LOW",
-                    "suppressed": false,
-                    "title": "libtiff: Libtiff Null Pointer Dereference Vulnerability"
-                  },
-                  {
-                    "cve": "CVE-2025-8851",
-                    "cvss": {
-                      "redhat": {
-                        "v3score": "5.3",
-                        "v3vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-119",
-                      "CWE-121"
-                    ],
-                    "description": "A vulnerability was determined in LibTIFF up to 4.5.1. Affected by this issue is the function readSeparateStripsetoBuffer of the file tools/tiffcrop.c of the component tiffcrop. The manipulation leads to stack-based buffer overflow. Local access is required to approach this attack. The patch is identified as 8a7a48d7a645992ca83062b3a1873c951661e2b3. It is recommended to apply a patch to fix this issue.",
-                    "diffID": "sha256:9664c8c85da49d2cedf85c6b8af0e128318580b95b277b87593a4f75886148af",
-                    "installedVersion": "4.2.0-1+deb11u5",
-                    "packageName": "libtiff5",
-                    "purl": "pkg:deb/debian/libtiff5@4.2.0-1%2Bdeb11u5?arch=amd64&distro=debian-11.9",
-                    "references": [
-                      "http://www.libtiff.org/",
-                      "https://access.redhat.com/security/cve/CVE-2025-8851",
-                      "https://gitlab.com/libtiff/libtiff/-/commit/8a7a48d7a645992ca83062b3a1873c951661e2b3",
-                      "https://gitlab.com/libtiff/libtiff/-/commit/8a7a48d7a645992ca83062b3a1873c951661e2b3 (v4.7.0rc1)",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2025-8851",
-                      "https://ubuntu.com/security/notices/USN-7707-1",
-                      "https://vuldb.com/?ctiid.319382",
-                      "https://vuldb.com/?id.319382",
-                      "https://vuldb.com/?submit.624604",
-                      "https://www.cve.org/CVERecord?id=CVE-2025-8851"
-                    ],
-                    "severity": "LOW",
-                    "suppressed": false,
-                    "title": "libtiff: LibTIFF Stack-based buffer overflow"
-                  },
-                  {
-                    "cve": "CVE-2025-8961",
-                    "cvss": {
-                      "redhat": {
-                        "v3score": "3.3",
-                        "v3vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-119"
-                    ],
-                    "description": "A weakness has been identified in LibTIFF 4.7.0. This affects the function main of the file tiffcrop.c of the component tiffcrop. Executing manipulation can lead to memory corruption. The attack can only be executed locally. The exploit has been made available to the public and could be exploited.",
-                    "diffID": "sha256:9664c8c85da49d2cedf85c6b8af0e128318580b95b277b87593a4f75886148af",
-                    "installedVersion": "4.2.0-1+deb11u5",
-                    "packageName": "libtiff5",
-                    "purl": "pkg:deb/debian/libtiff5@4.2.0-1%2Bdeb11u5?arch=amd64&distro=debian-11.9",
-                    "references": [
-                      "http://www.libtiff.org/",
-                      "https://access.redhat.com/security/cve/CVE-2025-8961",
-                      "https://drive.google.com/file/d/15L4q2eD8GX3Aj3z6SWC3_FbqaM1ChUx2/view?usp=sharing",
-                      "https://gitlab.com/libtiff/libtiff/-/issues/721",
-                      "https://gitlab.com/libtiff/libtiff/-/issues/721#note_2670686960",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2025-8961",
-                      "https://ubuntu.com/security/notices/USN-7783-1",
-                      "https://vuldb.com/?ctiid.319955",
-                      "https://vuldb.com/?id.319955",
-                      "https://vuldb.com/?submit.627957",
-                      "https://www.cve.org/CVERecord?id=CVE-2025-8961"
-                    ],
-                    "severity": "LOW",
-                    "suppressed": false,
-                    "title": "libtiff: LibTIFF memory corruption"
-                  },
-                  {
-                    "cve": "CVE-2025-9165",
-                    "cvss": {
-                      "redhat": {
-                        "v3score": "3.3",
-                        "v3vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-401",
-                      "CWE-404"
-                    ],
-                    "description": "A flaw has been found in LibTIFF 4.7.0. This affects the function _TIFFmallocExt/_TIFFCheckRealloc/TIFFHashSetNew/InitCCITTFax3 of the file tools/tiffcmp.c of the component tiffcmp. Executing manipulation can lead to memory leak. The attack is restricted to local execution. This attack is characterized by high complexity. It is indicated that the exploitability is difficult. The exploit has been published and may be used. There is ongoing doubt regarding the real existence of this vulnerability. This patch is called ed141286a37f6e5ddafb5069347ff5d587e7a4e0. It is best practice to apply a patch to resolve this issue. A researcher disputes the security impact of this issue, because \"this is a memory leak on a command line tool that is about to exit anyway\". In the reply the project maintainer declares this issue as \"a simple 'bug' when leaving the command line tool and (...) not a security issue at all\".",
-                    "diffID": "sha256:9664c8c85da49d2cedf85c6b8af0e128318580b95b277b87593a4f75886148af",
-                    "installedVersion": "4.2.0-1+deb11u5",
-                    "packageName": "libtiff5",
-                    "purl": "pkg:deb/debian/libtiff5@4.2.0-1%2Bdeb11u5?arch=amd64&distro=debian-11.9",
-                    "references": [
-                      "http://www.libtiff.org/",
-                      "https://access.redhat.com/security/cve/CVE-2025-9165",
-                      "https://drive.google.com/file/d/1FWhmkzksH8-qU0ZM6seBzGNB3aPnX3G8/view?usp=sharing",
-                      "https://gitlab.com/libtiff/libtiff/-/commit/ed141286a37f6e5ddafb5069347ff5d587e7a4e0",
-                      "https://gitlab.com/libtiff/libtiff/-/issues/728",
-                      "https://gitlab.com/libtiff/libtiff/-/issues/728#note_2709263214",
-                      "https://gitlab.com/libtiff/libtiff/-/merge_requests/747",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2025-9165",
-                      "https://ubuntu.com/security/notices/USN-7783-1",
-                      "https://vuldb.com/?ctiid.320543",
-                      "https://vuldb.com/?id.320543",
-                      "https://vuldb.com/?submit.630506",
-                      "https://vuldb.com/?submit.630507",
-                      "https://www.cve.org/CVERecord?id=CVE-2025-9165"
-                    ],
-                    "severity": "LOW",
-                    "suppressed": false,
-                    "title": "libtiff: LibTIFF memory leak"
-                  },
-                  {
-                    "cve": "CVE-2023-50495",
-                    "cvss": {
-                      "nvd": {
-                        "v3score": "6.5",
-                        "v3vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H"
-                      },
-                      "redhat": {
-                        "v3score": "6.5",
-                        "v3vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H"
-                      }
-                    },
-                    "description": "NCurse v6.4-20230418 was discovered to contain a segmentation fault via the component _nc_wrap_entry().",
-                    "diffID": "sha256:420179ad2efafbf953a0c75f68a4c9dfaf38a98643df97d415bce49b179895f7",
-                    "installedVersion": "6.2+20201114-2+deb11u2",
-                    "packageName": "libtinfo6",
-                    "purl": "pkg:deb/debian/libtinfo6@6.2%2B20201114-2%2Bdeb11u2?arch=amd64&distro=debian-11.9",
-                    "references": [
-                      "https://access.redhat.com/security/cve/CVE-2023-50495",
-                      "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LU4MYMKFEZQ5VSCVLRIZGDQOUW3T44GT/",
-                      "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/LU4MYMKFEZQ5VSCVLRIZGDQOUW3T44GT/",
-                      "https://lists.gnu.org/archive/html/bug-ncurses/2023-04/msg00020.html",
-                      "https://lists.gnu.org/archive/html/bug-ncurses/2023-04/msg00029.html",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2023-50495",
-                      "https://security.netapp.com/advisory/ntap-20240119-0008/",
-                      "https://ubuntu.com/security/notices/USN-6684-1",
-                      "https://www.cve.org/CVERecord?id=CVE-2023-50495"
-                    ],
-                    "severity": "MEDIUM",
-                    "suppressed": false,
-                    "title": "ncurses: segmentation fault via _nc_wrap_entry()"
-                  },
-                  {
-                    "cve": "CVE-2025-6141",
-                    "cvss": {
-                      "redhat": {
-                        "v3score": "3.3",
-                        "v3vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-119",
-                      "CWE-121"
-                    ],
-                    "description": "A vulnerability has been found in GNU ncurses up to 6.5-20250322 and classified as problematic. This vulnerability affects the function postprocess_termcap of the file tinfo/parse_entry.c. The manipulation leads to stack-based buffer overflow. The attack needs to be approached locally. Upgrading to version 6.5-20250329 is able to address this issue. It is recommended to upgrade the affected component.",
-                    "diffID": "sha256:420179ad2efafbf953a0c75f68a4c9dfaf38a98643df97d415bce49b179895f7",
-                    "installedVersion": "6.2+20201114-2+deb11u2",
-                    "packageName": "libtinfo6",
-                    "purl": "pkg:deb/debian/libtinfo6@6.2%2B20201114-2%2Bdeb11u2?arch=amd64&distro=debian-11.9",
-                    "references": [
-                      "https://access.redhat.com/security/cve/CVE-2025-6141",
-                      "https://invisible-island.net/ncurses/NEWS.html#index-t20250329",
-                      "https://lists.gnu.org/archive/html/bug-ncurses/2025-03/msg00107.html",
-                      "https://lists.gnu.org/archive/html/bug-ncurses/2025-03/msg00109.html",
-                      "https://lists.gnu.org/archive/html/bug-ncurses/2025-03/msg00114.html",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2025-6141",
-                      "https://vuldb.com/?ctiid.312610",
-                      "https://vuldb.com/?id.312610",
-                      "https://vuldb.com/?submit.593000",
-                      "https://www.cve.org/CVERecord?id=CVE-2025-6141",
-                      "https://www.gnu.org/"
-                    ],
-                    "severity": "LOW",
-                    "suppressed": false,
-                    "title": "gnu-ncurses: ncurses Stack Buffer Overflow"
-                  },
-                  {
-                    "cve": "CVE-2023-50387",
-                    "cvss": {
-                      "nvd": {
-                        "v3score": "7.5",
-                        "v3vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"
-                      },
-                      "redhat": {
-                        "v3score": "7.5",
-                        "v3vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-770"
-                    ],
-                    "description": "Certain DNSSEC aspects of the DNS protocol (in RFC 4033, 4034, 4035, 6840, and related RFCs) allow remote attackers to cause a denial of service (CPU consumption) via one or more DNSSEC responses, aka the \"KeyTrap\" issue. One of the concerns is that, when there is a zone with many DNSKEY and RRSIG records, the protocol specification implies that an algorithm must evaluate all combinations of DNSKEY and RRSIG records.",
-                    "diffID": "sha256:420179ad2efafbf953a0c75f68a4c9dfaf38a98643df97d415bce49b179895f7",
-                    "fixedVersions": [
-                      "247.3-7+deb11u6"
-                    ],
-                    "installedVersion": "247.3-7+deb11u4",
-                    "packageName": "libudev1",
-                    "purl": "pkg:deb/debian/libudev1@247.3-7%2Bdeb11u4?arch=amd64&distro=debian-11.9",
-                    "references": [
-                      "http://www.openwall.com/lists/oss-security/2024/02/16/2",
-                      "http://www.openwall.com/lists/oss-security/2024/02/16/3",
-                      "https://access.redhat.com/errata/RHSA-2024:3271",
-                      "https://access.redhat.com/security/cve/CVE-2023-50387",
-                      "https://blog.powerdns.com/2024/02/13/powerdns-recursor-4-8-6-4-9-3-5-0-2-released",
-                      "https://bugzilla.redhat.com/2263896",
-                      "https://bugzilla.redhat.com/2263914",
-                      "https://bugzilla.redhat.com/2263917",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2263896",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2263897",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2263909",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2263911",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2263914",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2263917",
-                      "https://bugzilla.suse.com/show_bug.cgi?id=1219823",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-4408",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-50387",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-50868",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-5517",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-5679",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-6516",
-                      "https://docs.powerdns.com/recursor/security-advisories/powerdns-advisory-2024-01.html",
-                      "https://errata.almalinux.org/8/ALSA-2024-3271.html",
-                      "https://errata.rockylinux.org/RLSA-2024:2551",
-                      "https://gitlab.nic.cz/knot/knot-resolver/-/releases/v5.7.1",
-                      "https://kb.isc.org/docs/cve-2023-50387",
-                      "https://linux.oracle.com/cve/CVE-2023-50387.html",
-                      "https://linux.oracle.com/errata/ELSA-2024-3741.html",
-                      "https://lists.debian.org/debian-lts-announce/2024/02/msg00006.html",
-                      "https://lists.debian.org/debian-lts-announce/2024/05/msg00011.html",
-                      "https://lists.debian.org/debian-lts-announce/2024/09/msg00001.html",
-                      "https://lists.debian.org/debian-lts-announce/2024/11/msg00035.html",
-                      "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6FV5O347JTX7P5OZA6NGO4MKTXRXMKOZ/",
-                      "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BUIP7T7Z4T3UHLXFWG6XIVDP4GYPD3AI/",
-                      "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/HVRDSJVZKMCXKKPP6PNR62T7RWZ3YSDZ/",
-                      "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/IGSLGKUAQTW5JPPZCMF5YPEYALLRUZZ6/",
-                      "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PNNHZSZPG2E7NBMBNYPGHCFI4V4XRWNQ/",
-                      "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/RGS7JN6FZXUSTC2XKQHH27574XOULYYJ/",
-                      "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/SVYA42BLXUCIDLD35YIJPJSHDIADNYMP/",
-                      "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/TEXGOYGW7DBS3N2QSSQONZ4ENIRQEAPG/",
-                      "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQESRWMJCF4JEYJEAKLRM6CT55GLJAB7/",
-                      "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZDZFMEKQTZ4L7RY46FCENWFB5MDT263R/",
-                      "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/BUIP7T7Z4T3UHLXFWG6XIVDP4GYPD3AI/",
-                      "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/HVRDSJVZKMCXKKPP6PNR62T7RWZ3YSDZ/",
-                      "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/RGS7JN6FZXUSTC2XKQHH27574XOULYYJ/",
-                      "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ZDZFMEKQTZ4L7RY46FCENWFB5MDT263R/",
-                      "https://lists.thekelleys.org.uk/pipermail/dnsmasq-discuss/2024q1/017430.html",
-                      "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-50387",
-                      "https://news.ycombinator.com/item?id=39367411",
-                      "https://news.ycombinator.com/item?id=39372384",
-                      "https://nlnetlabs.nl/downloads/unbound/CVE-2023-50387_CVE-2023-50868.txt",
-                      "https://nlnetlabs.nl/news/2024/Feb/13/unbound-1.19.1-released/",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2023-50387",
-                      "https://security.netapp.com/advisory/ntap-20240307-0007/",
-                      "https://ubuntu.com/security/notices/USN-6633-1",
-                      "https://ubuntu.com/security/notices/USN-6642-1",
-                      "https://ubuntu.com/security/notices/USN-6657-1",
-                      "https://ubuntu.com/security/notices/USN-6657-2",
-                      "https://ubuntu.com/security/notices/USN-6665-1",
-                      "https://ubuntu.com/security/notices/USN-6723-1",
-                      "https://www.athene-center.de/aktuelles/key-trap",
-                      "https://www.athene-center.de/fileadmin/content/PDF/Technical_Report_KeyTrap.pdf",
-                      "https://www.cve.org/CVERecord?id=CVE-2023-50387",
-                      "https://www.isc.org/blogs/2024-bind-security-release/",
-                      "https://www.knot-resolver.cz/2024-02-13-knot-resolver-5.7.1.html",
-                      "https://www.securityweek.com/keytrap-dns-attack-could-disable-large-parts-of-internet-researchers/",
-                      "https://www.theregister.com/2024/02/13/dnssec_vulnerability_internet/"
-                    ],
-                    "severity": "HIGH",
-                    "suppressed": false,
-                    "title": "bind9: KeyTrap - Extreme CPU consumption in DNSSEC validator"
-                  },
-                  {
-                    "cve": "CVE-2023-50868",
-                    "cvss": {
-                      "nvd": {
-                        "v3score": "7.5",
-                        "v3vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"
-                      },
-                      "redhat": {
-                        "v3score": "7.5",
-                        "v3vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-400"
-                    ],
-                    "description": "The Closest Encloser Proof aspect of the DNS protocol (in RFC 5155 when RFC 9276 guidance is skipped) allows remote attackers to cause a denial of service (CPU consumption for SHA-1 computations) via DNSSEC responses in a random subdomain attack, aka the \"NSEC3\" issue. The RFC 5155 specification implies that an algorithm must perform thousands of iterations of a hash function in certain situations.",
-                    "diffID": "sha256:420179ad2efafbf953a0c75f68a4c9dfaf38a98643df97d415bce49b179895f7",
-                    "fixedVersions": [
-                      "247.3-7+deb11u6"
-                    ],
-                    "installedVersion": "247.3-7+deb11u4",
-                    "packageName": "libudev1",
-                    "purl": "pkg:deb/debian/libudev1@247.3-7%2Bdeb11u4?arch=amd64&distro=debian-11.9",
-                    "references": [
-                      "http://www.openwall.com/lists/oss-security/2024/02/16/2",
-                      "http://www.openwall.com/lists/oss-security/2024/02/16/3",
-                      "https://access.redhat.com/errata/RHSA-2024:3271",
-                      "https://access.redhat.com/security/cve/CVE-2023-50868",
-                      "https://blog.powerdns.com/2024/02/13/powerdns-recursor-4-8-6-4-9-3-5-0-2-released",
-                      "https://bugzilla.redhat.com/2263896",
-                      "https://bugzilla.redhat.com/2263914",
-                      "https://bugzilla.redhat.com/2263917",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2263896",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2263897",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2263909",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2263911",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2263914",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2263917",
-                      "https://bugzilla.suse.com/show_bug.cgi?id=1219826",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-4408",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-50387",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-50868",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-5517",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-5679",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-6516",
-                      "https://datatracker.ietf.org/doc/html/rfc5155",
-                      "https://docs.powerdns.com/recursor/security-advisories/powerdns-advisory-2024-01.html",
-                      "https://errata.almalinux.org/8/ALSA-2024-3271.html",
-                      "https://errata.rockylinux.org/RLSA-2024:2551",
-                      "https://gitlab.nic.cz/knot/knot-resolver/-/releases/v5.7.1",
-                      "https://kb.isc.org/docs/cve-2023-50868",
-                      "https://linux.oracle.com/cve/CVE-2023-50868.html",
-                      "https://linux.oracle.com/errata/ELSA-2024-3741.html",
-                      "https://lists.debian.org/debian-lts-announce/2024/02/msg00006.html",
-                      "https://lists.debian.org/debian-lts-announce/2024/05/msg00011.html",
-                      "https://lists.debian.org/debian-lts-announce/2024/09/msg00001.html",
-                      "https://lists.debian.org/debian-lts-announce/2024/11/msg00035.html",
-                      "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6FV5O347JTX7P5OZA6NGO4MKTXRXMKOZ/",
-                      "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BUIP7T7Z4T3UHLXFWG6XIVDP4GYPD3AI/",
-                      "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/HVRDSJVZKMCXKKPP6PNR62T7RWZ3YSDZ/",
-                      "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/IGSLGKUAQTW5JPPZCMF5YPEYALLRUZZ6/",
-                      "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PNNHZSZPG2E7NBMBNYPGHCFI4V4XRWNQ/",
-                      "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/RGS7JN6FZXUSTC2XKQHH27574XOULYYJ/",
-                      "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/SVYA42BLXUCIDLD35YIJPJSHDIADNYMP/",
-                      "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/TEXGOYGW7DBS3N2QSSQONZ4ENIRQEAPG/",
-                      "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQESRWMJCF4JEYJEAKLRM6CT55GLJAB7/",
-                      "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZDZFMEKQTZ4L7RY46FCENWFB5MDT263R/",
-                      "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/BUIP7T7Z4T3UHLXFWG6XIVDP4GYPD3AI/",
-                      "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/HVRDSJVZKMCXKKPP6PNR62T7RWZ3YSDZ/",
-                      "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ZDZFMEKQTZ4L7RY46FCENWFB5MDT263R/",
-                      "https://lists.thekelleys.org.uk/pipermail/dnsmasq-discuss/2024q1/017430.html",
-                      "https://nlnetlabs.nl/downloads/unbound/CVE-2023-50387_CVE-2023-50868.txt",
-                      "https://nlnetlabs.nl/news/2024/Feb/13/unbound-1.19.1-released/",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2023-50868",
-                      "https://security.netapp.com/advisory/ntap-20240307-0008/",
-                      "https://ubuntu.com/security/notices/USN-6633-1",
-                      "https://ubuntu.com/security/notices/USN-6642-1",
-                      "https://ubuntu.com/security/notices/USN-6657-1",
-                      "https://ubuntu.com/security/notices/USN-6657-2",
-                      "https://ubuntu.com/security/notices/USN-6665-1",
-                      "https://ubuntu.com/security/notices/USN-6723-1",
-                      "https://www.cve.org/CVERecord?id=CVE-2023-50868",
-                      "https://www.isc.org/blogs/2024-bind-security-release/",
-                      "https://www.knot-resolver.cz/2024-02-13-knot-resolver-5.7.1.html"
-                    ],
-                    "severity": "HIGH",
-                    "suppressed": false,
-                    "title": "bind9: Preparing an NSEC3 closest encloser proof can exhaust CPU resources"
-                  },
-                  {
-                    "cve": "CVE-2023-7008",
-                    "cvss": {
-                      "nvd": {
-                        "v3score": "5.9",
-                        "v3vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N"
-                      },
-                      "redhat": {
-                        "v3score": "5.9",
-                        "v3vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-300"
-                    ],
-                    "description": "A vulnerability was found in systemd-resolved. This issue may allow systemd-resolved to accept records of DNSSEC-signed domains even when they have no signature, allowing man-in-the-middles (or the upstream DNS resolver) to manipulate records.",
-                    "diffID": "sha256:420179ad2efafbf953a0c75f68a4c9dfaf38a98643df97d415bce49b179895f7",
-                    "fixedVersions": [
-                      "247.3-7+deb11u6"
-                    ],
-                    "installedVersion": "247.3-7+deb11u4",
-                    "packageName": "libudev1",
-                    "purl": "pkg:deb/debian/libudev1@247.3-7%2Bdeb11u4?arch=amd64&distro=debian-11.9",
-                    "references": [
-                      "https://access.redhat.com/errata/RHSA-2024:2463",
-                      "https://access.redhat.com/errata/RHSA-2024:3203",
-                      "https://access.redhat.com/security/cve/CVE-2023-7008",
-                      "https://bugzilla.redhat.com/2222672",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2222261",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2222672",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-7008",
-                      "https://errata.almalinux.org/8/ALSA-2024-3203.html",
-                      "https://errata.rockylinux.org/RLSA-2024:2463",
-                      "https://github.com/systemd/systemd/issues/25676",
-                      "https://linux.oracle.com/cve/CVE-2023-7008.html",
-                      "https://linux.oracle.com/errata/ELSA-2024-3203.html",
-                      "https://lists.debian.org/debian-lts-announce/2024/09/msg00001.html",
-                      "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/4GMDEG5PKONWNHOEYSUDRT6JEOISRMN2/",
-                      "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/QHNBXGKJWISJETTTDTZKTBFIBJUOSLKL/",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2023-7008",
-                      "https://security.netapp.com/advisory/ntap-20241122-0004/",
-                      "https://www.cve.org/CVERecord?id=CVE-2023-7008"
-                    ],
-                    "severity": "MEDIUM",
-                    "suppressed": false,
-                    "title": "systemd-resolved: Unsigned name response in signed zone is not refused when DNSSEC=yes"
-                  },
-                  {
-                    "cve": "CVE-2025-4598",
-                    "cvss": {
-                      "redhat": {
-                        "v3score": "4.7",
-                        "v3vector": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-364"
-                    ],
-                    "description": "A vulnerability was found in systemd-coredump. This flaw allows an attacker to force a SUID process to crash and replace it with a non-SUID binary to access the original's privileged process coredump, allowing the attacker to read sensitive data, such as /etc/shadow content, loaded by the original process.\n\nA SUID binary or process has a special type of permission, which allows the process to run with the file owner's permissions, regardless of the user executing the binary. This allows the process to access more restricted data than unprivileged users or processes would be able to. An attacker can leverage this flaw by forcing a SUID process to crash and force the Linux kernel to recycle the process PID before systemd-coredump can analyze the /proc/pid/auxv file. If the attacker wins the race condition, they gain access to the original's SUID process coredump file. They can read sensitive content loaded into memory by the original binary, affecting data confidentiality.",
-                    "diffID": "sha256:420179ad2efafbf953a0c75f68a4c9dfaf38a98643df97d415bce49b179895f7",
-                    "fixedVersions": [
-                      "247.3-7+deb11u7"
-                    ],
-                    "installedVersion": "247.3-7+deb11u4",
-                    "packageName": "libudev1",
-                    "purl": "pkg:deb/debian/libudev1@247.3-7%2Bdeb11u4?arch=amd64&distro=debian-11.9",
-                    "references": [
-                      "http://seclists.org/fulldisclosure/2025/Jun/9",
-                      "http://www.openwall.com/lists/oss-security/2025/06/05/1",
-                      "http://www.openwall.com/lists/oss-security/2025/06/05/3",
-                      "http://www.openwall.com/lists/oss-security/2025/08/18/3",
-                      "https://access.redhat.com/errata/RHSA-2025:22660",
-                      "https://access.redhat.com/errata/RHSA-2025:22868",
-                      "https://access.redhat.com/errata/RHSA-2025:23227",
-                      "https://access.redhat.com/errata/RHSA-2025:23234",
-                      "https://access.redhat.com/errata/RHSA-2026:0414",
-                      "https://access.redhat.com/errata/RHSA-2026:1652",
-                      "https://access.redhat.com/security/cve/CVE-2025-4598",
-                      "https://blogs.oracle.com/linux/post/analysis-of-cve-2025-4598",
-                      "https://bugzilla.redhat.com/2369242",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2369242",
-                      "https://ciq.com/blog/the-real-danger-of-systemd-coredump-cve-2025-4598/",
-                      "https://errata.almalinux.org/9/ALSA-2025-22660.html",
-                      "https://git.kernel.org/linus/b5325b2a270fcaf7b2a9a0f23d422ca8a5a8bdea",
-                      "https://github.com/systemd/systemd/commit/0c49e0049b7665bb7769a13ef346fef92e1ad4d6 (main)",
-                      "https://github.com/systemd/systemd/commit/13902e025321242b1d95c6d8b4e482b37f58cdef (main)",
-                      "https://github.com/systemd/systemd/commit/49f1f2d4a7612bbed5211a73d11d6a94fbe3bb69 (main)",
-                      "https://github.com/systemd/systemd/commit/76e0ab49c47965877c19772a2b3bf55f6417ca39 (main)",
-                      "https://github.com/systemd/systemd/commit/868d95577ec9f862580ad365726515459be582fc (main)",
-                      "https://github.com/systemd/systemd/commit/8fc7b2a211eb13ef1a94250b28e1c79cab8bdcb9 (main)",
-                      "https://github.com/systemd/systemd/commit/9ce8e3e449def92c75ada41b7d10c5bc3946be77 (main)",
-                      "https://github.com/systemd/systemd/commit/e6a8687b939ab21854f12f59a3cce703e32768cf (main)",
-                      "https://linux.oracle.com/cve/CVE-2025-4598.html",
-                      "https://linux.oracle.com/errata/ELSA-2025-22660.html",
-                      "https://lists.debian.org/debian-lts-announce/2025/07/msg00022.html",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2025-4598",
-                      "https://ubuntu.com/security/notices/USN-7559-1",
-                      "https://www.cve.org/CVERecord?id=CVE-2025-4598",
-                      "https://www.openwall.com/lists/oss-security/2025/05/29/3",
-                      "https://www.openwall.com/lists/oss-security/2025/08/18/3",
-                      "https://www.qualys.com/2025/05/29/apport-coredump/apport-coredump.txt"
-                    ],
-                    "severity": "MEDIUM",
-                    "suppressed": false,
-                    "title": "systemd-coredump: race condition that allows a local attacker to crash a SUID program and gain read access to the resulting core dump"
-                  },
-                  {
-                    "cve": "CVE-2013-4392",
-                    "cvss": {
-                      "nvd": {
-                        "v3score": "0",
-                        "v3vector": ""
-                      },
-                      "redhat": {
-                        "v3score": "0",
-                        "v3vector": ""
-                      }
-                    },
-                    "cwes": [
-                      "CWE-59"
-                    ],
-                    "description": "systemd, when updating file permissions, allows local users to change the permissions and SELinux security contexts for arbitrary files via a symlink attack on unspecified files.",
-                    "diffID": "sha256:420179ad2efafbf953a0c75f68a4c9dfaf38a98643df97d415bce49b179895f7",
-                    "installedVersion": "247.3-7+deb11u4",
-                    "packageName": "libudev1",
-                    "purl": "pkg:deb/debian/libudev1@247.3-7%2Bdeb11u4?arch=amd64&distro=debian-11.9",
-                    "references": [
-                      "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=725357",
-                      "http://www.openwall.com/lists/oss-security/2013/10/01/9",
-                      "https://access.redhat.com/security/cve/CVE-2013-4392",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=859060",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2013-4392",
-                      "https://www.cve.org/CVERecord?id=CVE-2013-4392"
-                    ],
-                    "severity": "LOW",
-                    "suppressed": false,
-                    "title": "systemd: TOCTOU race condition when updating file permissions and SELinux security contexts"
-                  },
-                  {
-                    "cve": "CVE-2020-13529",
-                    "cvss": {
-                      "nvd": {
-                        "v3score": "6.1",
-                        "v3vector": "CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:C/C:N/I:N/A:H"
-                      },
-                      "redhat": {
-                        "v3score": "6.1",
-                        "v3vector": "CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:C/C:N/I:N/A:H"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-290"
-                    ],
-                    "description": "An exploitable denial-of-service vulnerability exists in Systemd 245. A specially crafted DHCP FORCERENEW packet can cause a server running the DHCP client to be vulnerable to a DHCP ACK spoofing attack. An attacker can forge a pair of FORCERENEW and DCHP ACK packets to reconfigure the server.",
-                    "diffID": "sha256:420179ad2efafbf953a0c75f68a4c9dfaf38a98643df97d415bce49b179895f7",
-                    "installedVersion": "247.3-7+deb11u4",
-                    "packageName": "libudev1",
-                    "purl": "pkg:deb/debian/libudev1@247.3-7%2Bdeb11u4?arch=amd64&distro=debian-11.9",
-                    "references": [
-                      "http://www.openwall.com/lists/oss-security/2021/08/04/2",
-                      "http://www.openwall.com/lists/oss-security/2021/08/17/3",
-                      "http://www.openwall.com/lists/oss-security/2021/09/07/3",
-                      "https://access.redhat.com/security/cve/CVE-2020-13529",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=1791212",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=1820770",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=1825666",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=1832112",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=1832273",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=1847125",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=1847894",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=1852317",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=1890234",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=1899372",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=1907960",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=1912236",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=1912423",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=1915276",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=1915278",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=1928078",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=1933719",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=1934122",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=1934291",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=1934465",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=1935842",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=1936610",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=1940435",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=1940504",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=1940934",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=1942331",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=1945282",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=1955101",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=1959397",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=1959461",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=1959934",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=1959961",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=1970335",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=1971527",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=1973199",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=1977984",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=1979192",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=1979387",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=1982403",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=1988751",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2004212",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-13529",
-                      "https://errata.rockylinux.org/RLSA-2021:4361",
-                      "https://linux.oracle.com/cve/CVE-2020-13529.html",
-                      "https://linux.oracle.com/errata/ELSA-2021-4361.html",
-                      "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/42TMJVNYRY65B4QCJICBYOEIVZV3KUYI/",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2020-13529",
-                      "https://security.gentoo.org/glsa/202107-48",
-                      "https://security.netapp.com/advisory/ntap-20210625-0005/",
-                      "https://talosintelligence.com/vulnerability_reports/TALOS-2020-1142",
-                      "https://ubuntu.com/security/notices/USN-5013-1",
-                      "https://ubuntu.com/security/notices/USN-5013-2",
-                      "https://www.cve.org/CVERecord?id=CVE-2020-13529"
-                    ],
-                    "severity": "LOW",
-                    "suppressed": false,
-                    "title": "systemd: DHCP FORCERENEW authentication not implemented can cause a system running the DHCP client to have its network reconfigured"
-                  },
-                  {
-                    "cve": "CVE-2023-31437",
-                    "cvss": {
-                      "nvd": {
-                        "v3score": "5.3",
-                        "v3vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-354"
-                    ],
-                    "description": "An issue was discovered in systemd 253. An attacker can modify a sealed log file such that, in some views, not all existing and sealed log messages are displayed. NOTE: the vendor reportedly sent \"a reply denying that any of the finding was a security vulnerability.\"",
-                    "diffID": "sha256:420179ad2efafbf953a0c75f68a4c9dfaf38a98643df97d415bce49b179895f7",
-                    "installedVersion": "247.3-7+deb11u4",
-                    "packageName": "libudev1",
-                    "purl": "pkg:deb/debian/libudev1@247.3-7%2Bdeb11u4?arch=amd64&distro=debian-11.9",
-                    "references": [
-                      "https://github.com/kastel-security/Journald",
-                      "https://github.com/kastel-security/Journald/blob/main/journald-publication.pdf",
-                      "https://github.com/systemd/systemd/releases"
-                    ],
-                    "severity": "LOW",
-                    "suppressed": false,
-                    "title": "An issue was discovered in systemd 253. An attacker can modify a seale ..."
-                  },
-                  {
-                    "cve": "CVE-2023-31438",
-                    "cvss": {
-                      "nvd": {
-                        "v3score": "5.3",
-                        "v3vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-354"
-                    ],
-                    "description": "An issue was discovered in systemd 253. An attacker can truncate a sealed log file and then resume log sealing such that checking the integrity shows no error, despite modifications. NOTE: the vendor reportedly sent \"a reply denying that any of the finding was a security vulnerability.\"",
-                    "diffID": "sha256:420179ad2efafbf953a0c75f68a4c9dfaf38a98643df97d415bce49b179895f7",
-                    "installedVersion": "247.3-7+deb11u4",
-                    "packageName": "libudev1",
-                    "purl": "pkg:deb/debian/libudev1@247.3-7%2Bdeb11u4?arch=amd64&distro=debian-11.9",
-                    "references": [
-                      "https://github.com/kastel-security/Journald",
-                      "https://github.com/kastel-security/Journald/blob/main/journald-publication.pdf",
-                      "https://github.com/systemd/systemd/pull/28886",
-                      "https://github.com/systemd/systemd/releases"
-                    ],
-                    "severity": "LOW",
-                    "suppressed": false,
-                    "title": "An issue was discovered in systemd 253. An attacker can truncate a sea ..."
-                  },
-                  {
-                    "cve": "CVE-2023-31439",
-                    "cvss": {
-                      "nvd": {
-                        "v3score": "5.3",
-                        "v3vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-354"
-                    ],
-                    "description": "An issue was discovered in systemd 253. An attacker can modify the contents of past events in a sealed log file and then adjust the file such that checking the integrity shows no error, despite modifications. NOTE: the vendor reportedly sent \"a reply denying that any of the finding was a security vulnerability.\"",
-                    "diffID": "sha256:420179ad2efafbf953a0c75f68a4c9dfaf38a98643df97d415bce49b179895f7",
-                    "installedVersion": "247.3-7+deb11u4",
-                    "packageName": "libudev1",
-                    "purl": "pkg:deb/debian/libudev1@247.3-7%2Bdeb11u4?arch=amd64&distro=debian-11.9",
-                    "references": [
-                      "https://github.com/kastel-security/Journald",
-                      "https://github.com/kastel-security/Journald/blob/main/journald-publication.pdf",
-                      "https://github.com/systemd/systemd/pull/28885",
-                      "https://github.com/systemd/systemd/releases"
-                    ],
-                    "severity": "LOW",
-                    "suppressed": false,
-                    "title": "An issue was discovered in systemd 253. An attacker can modify the con ..."
-                  },
-                  {
-                    "cve": "CVE-2025-14104",
-                    "cvss": {
-                      "redhat": {
-                        "v3score": "6.1",
-                        "v3vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-125"
-                    ],
-                    "description": "A flaw was found in util-linux. This vulnerability allows a heap buffer overread when processing 256-byte usernames, specifically within the `setpwnam()` function, affecting SUID (Set User ID) login-utils utilities writing to the password database.",
-                    "diffID": "sha256:420179ad2efafbf953a0c75f68a4c9dfaf38a98643df97d415bce49b179895f7",
-                    "installedVersion": "2.36.1-8+deb11u2",
-                    "packageName": "libuuid1",
-                    "purl": "pkg:deb/debian/libuuid1@2.36.1-8%2Bdeb11u2?arch=amd64&distro=debian-11.9",
-                    "references": [
-                      "https://access.redhat.com/errata/RHSA-2026:1696",
-                      "https://access.redhat.com/errata/RHSA-2026:1852",
-                      "https://access.redhat.com/errata/RHSA-2026:1913",
-                      "https://access.redhat.com/security/cve/CVE-2025-14104",
-                      "https://bugzilla.redhat.com/2419369",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2419369",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-14104",
-                      "https://errata.almalinux.org/10/ALSA-2026-1696.html",
-                      "https://errata.rockylinux.org/RLSA-2026:1913",
-                      "https://linux.oracle.com/cve/CVE-2025-14104.html",
-                      "https://linux.oracle.com/errata/ELSA-2026-1913.html",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2025-14104",
-                      "https://www.cve.org/CVERecord?id=CVE-2025-14104"
-                    ],
-                    "severity": "MEDIUM",
-                    "suppressed": false,
-                    "title": "util-linux: util-linux: Heap buffer overread in setpwnam() when processing 256-byte usernames"
-                  },
-                  {
-                    "cve": "CVE-2022-0563",
-                    "cvss": {
-                      "nvd": {
-                        "v3score": "5.5",
-                        "v3vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N"
-                      },
-                      "redhat": {
-                        "v3score": "5.5",
-                        "v3vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-209"
-                    ],
-                    "description": "A flaw was found in the util-linux chfn and chsh utilities when compiled with Readline support. The Readline library uses an \"INPUTRC\" environment variable to get a path to the library config file. When the library cannot parse the specified file, it prints an error message containing data from the file. This flaw allows an unprivileged user to read root-owned files, potentially leading to privilege escalation. This flaw affects util-linux versions prior to 2.37.4.",
-                    "diffID": "sha256:420179ad2efafbf953a0c75f68a4c9dfaf38a98643df97d415bce49b179895f7",
-                    "installedVersion": "2.36.1-8+deb11u2",
-                    "packageName": "libuuid1",
-                    "purl": "pkg:deb/debian/libuuid1@2.36.1-8%2Bdeb11u2?arch=amd64&distro=debian-11.9",
-                    "references": [
-                      "https://access.redhat.com/security/cve/CVE-2022-0563",
-                      "https://blog.trailofbits.com/2023/02/16/suid-logic-bug-linux-readline/",
-                      "https://lore.kernel.org/util-linux/20220214110609.msiwlm457ngoic6w%40ws.net.home/T/#u",
-                      "https://lore.kernel.org/util-linux/20220214110609.msiwlm457ngoic6w@ws.net.home/T/#u",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2022-0563",
-                      "https://security.gentoo.org/glsa/202401-08",
-                      "https://security.netapp.com/advisory/ntap-20220331-0002/",
-                      "https://www.cve.org/CVERecord?id=CVE-2022-0563"
-                    ],
-                    "severity": "LOW",
-                    "suppressed": false,
-                    "title": "util-linux: partial disclosure of arbitrary files in chfn and chsh when compiled with libreadline"
-                  },
-                  {
-                    "cve": "CVE-2024-56171",
-                    "cvss": {
-                      "nvd": {
-                        "v3score": "9.8",
-                        "v3vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"
-                      },
-                      "redhat": {
-                        "v3score": "8.1",
-                        "v3vector": "CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-416"
-                    ],
-                    "description": "libxml2 before 2.12.10 and 2.13.x before 2.13.6 has a use-after-free in xmlSchemaIDCFillNodeTables and xmlSchemaBubbleIDCNodeTables in xmlschemas.c. To exploit this, a crafted XML document must be validated against an XML schema with certain identity constraints, or a crafted XML schema must be used.",
-                    "diffID": "sha256:9664c8c85da49d2cedf85c6b8af0e128318580b95b277b87593a4f75886148af",
-                    "fixedVersions": [
-                      "2.9.10+dfsg-6.7+deb11u6"
-                    ],
-                    "installedVersion": "2.9.10+dfsg-6.7+deb11u4",
-                    "packageName": "libxml2",
-                    "purl": "pkg:deb/debian/libxml2@2.9.10%2Bdfsg-6.7%2Bdeb11u4?arch=amd64&distro=debian-11.9",
-                    "references": [
-                      "http://seclists.org/fulldisclosure/2025/Apr/10",
-                      "http://seclists.org/fulldisclosure/2025/Apr/11",
-                      "http://seclists.org/fulldisclosure/2025/Apr/12",
-                      "http://seclists.org/fulldisclosure/2025/Apr/13",
-                      "http://seclists.org/fulldisclosure/2025/Apr/4",
-                      "http://seclists.org/fulldisclosure/2025/Apr/5",
-                      "http://seclists.org/fulldisclosure/2025/Apr/8",
-                      "http://seclists.org/fulldisclosure/2025/Apr/9",
-                      "https://access.redhat.com/errata/RHSA-2025:2686",
-                      "https://access.redhat.com/security/cve/CVE-2024-56171",
-                      "https://bugzilla.redhat.com/2346416",
-                      "https://bugzilla.redhat.com/2346421",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2346416",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2346421",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-56171",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-24928",
-                      "https://errata.almalinux.org/8/ALSA-2025-2686.html",
-                      "https://errata.rockylinux.org/RLSA-2025:2679",
-                      "https://gitlab.gnome.org/GNOME/libxml2/-/issues/828",
-                      "https://linux.oracle.com/cve/CVE-2024-56171.html",
-                      "https://linux.oracle.com/errata/ELSA-2025-2686.html",
-                      "https://lists.debian.org/debian-lts-announce/2025/02/msg00028.html",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2024-56171",
-                      "https://security.netapp.com/advisory/ntap-20250328-0010/",
-                      "https://ubuntu.com/security/notices/USN-7302-1",
-                      "https://www.cve.org/CVERecord?id=CVE-2024-56171",
-                      "https://www.openwall.com/lists/oss-security/2025/02/18/2"
-                    ],
-                    "severity": "CRITICAL",
-                    "suppressed": false,
-                    "title": "libxml2: Use-After-Free in libxml2"
-                  },
-                  {
-                    "cve": "CVE-2025-49794",
-                    "cvss": {
-                      "redhat": {
-                        "v3score": "9.1",
-                        "v3vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-825"
-                    ],
-                    "description": "A use-after-free vulnerability was found in libxml2. This issue occurs when parsing XPath elements under certain circumstances when the XML schematron has the <sch:name path=\"...\"/> schema elements. This flaw allows a malicious actor to craft a malicious XML document used as input for libxml, resulting in the program's crash using libxml or other possible undefined behaviors.",
-                    "diffID": "sha256:9664c8c85da49d2cedf85c6b8af0e128318580b95b277b87593a4f75886148af",
-                    "fixedVersions": [
-                      "2.9.10+dfsg-6.7+deb11u8"
-                    ],
-                    "installedVersion": "2.9.10+dfsg-6.7+deb11u4",
-                    "packageName": "libxml2",
-                    "purl": "pkg:deb/debian/libxml2@2.9.10%2Bdfsg-6.7%2Bdeb11u4?arch=amd64&distro=debian-11.9",
-                    "references": [
-                      "https://access.redhat.com/errata/RHSA-2025:10630",
-                      "https://access.redhat.com/errata/RHSA-2025:10698",
-                      "https://access.redhat.com/errata/RHSA-2025:10699",
-                      "https://access.redhat.com/errata/RHSA-2025:11580",
-                      "https://access.redhat.com/errata/RHSA-2025:12098",
-                      "https://access.redhat.com/errata/RHSA-2025:12099",
-                      "https://access.redhat.com/errata/RHSA-2025:12199",
-                      "https://access.redhat.com/errata/RHSA-2025:12237",
-                      "https://access.redhat.com/errata/RHSA-2025:12239",
-                      "https://access.redhat.com/errata/RHSA-2025:12240",
-                      "https://access.redhat.com/errata/RHSA-2025:12241",
-                      "https://access.redhat.com/errata/RHSA-2025:13335",
-                      "https://access.redhat.com/errata/RHSA-2025:15397",
-                      "https://access.redhat.com/errata/RHSA-2025:15827",
-                      "https://access.redhat.com/errata/RHSA-2025:15828",
-                      "https://access.redhat.com/errata/RHSA-2025:18217",
-                      "https://access.redhat.com/errata/RHSA-2025:18218",
-                      "https://access.redhat.com/errata/RHSA-2025:18219",
-                      "https://access.redhat.com/errata/RHSA-2025:18240",
-                      "https://access.redhat.com/errata/RHSA-2025:19020",
-                      "https://access.redhat.com/errata/RHSA-2025:19041",
-                      "https://access.redhat.com/errata/RHSA-2025:19046",
-                      "https://access.redhat.com/errata/RHSA-2025:19894",
-                      "https://access.redhat.com/errata/RHSA-2025:21913",
-                      "https://access.redhat.com/errata/RHSA-2026:0934",
-                      "https://access.redhat.com/security/cve/CVE-2025-49794",
-                      "https://bugzilla.redhat.com/2372373",
-                      "https://bugzilla.redhat.com/2372385",
-                      "https://bugzilla.redhat.com/2372406",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2372373",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2372385",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2372406",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-49794",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-49796",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-6021",
-                      "https://errata.almalinux.org/8/ALSA-2025-10698.html",
-                      "https://errata.rockylinux.org/RLSA-2025:10699",
-                      "https://gitlab.gnome.org/GNOME/libxml2/-/issues/931",
-                      "https://linux.oracle.com/cve/CVE-2025-49794.html",
-                      "https://linux.oracle.com/errata/ELSA-2025-12240.html",
-                      "https://lists.debian.org/debian-lts-announce/2025/07/msg00014.html",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2025-49794",
-                      "https://ubuntu.com/security/notices/USN-7694-1",
-                      "https://www.cve.org/CVERecord?id=CVE-2025-49794"
-                    ],
-                    "severity": "CRITICAL",
-                    "suppressed": false,
-                    "title": "libxml: Heap use after free (UAF) leads to Denial of service (DoS)"
-                  },
-                  {
-                    "cve": "CVE-2025-49796",
-                    "cvss": {
-                      "redhat": {
-                        "v3score": "9.1",
-                        "v3vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-125"
-                    ],
-                    "description": "A vulnerability was found in libxml2. Processing certain sch:name elements from the input XML file can trigger a memory corruption issue. This flaw allows an attacker to craft a malicious XML input file that can lead libxml to crash, resulting in a denial of service or other possible undefined behavior due to sensitive data being corrupted in memory.",
-                    "diffID": "sha256:9664c8c85da49d2cedf85c6b8af0e128318580b95b277b87593a4f75886148af",
-                    "fixedVersions": [
-                      "2.9.10+dfsg-6.7+deb11u8"
-                    ],
-                    "installedVersion": "2.9.10+dfsg-6.7+deb11u4",
-                    "packageName": "libxml2",
-                    "purl": "pkg:deb/debian/libxml2@2.9.10%2Bdfsg-6.7%2Bdeb11u4?arch=amd64&distro=debian-11.9",
-                    "references": [
-                      "https://access.redhat.com/errata/RHSA-2025:10630",
-                      "https://access.redhat.com/errata/RHSA-2025:10698",
-                      "https://access.redhat.com/errata/RHSA-2025:10699",
-                      "https://access.redhat.com/errata/RHSA-2025:11580",
-                      "https://access.redhat.com/errata/RHSA-2025:12098",
-                      "https://access.redhat.com/errata/RHSA-2025:12099",
-                      "https://access.redhat.com/errata/RHSA-2025:12199",
-                      "https://access.redhat.com/errata/RHSA-2025:12237",
-                      "https://access.redhat.com/errata/RHSA-2025:12239",
-                      "https://access.redhat.com/errata/RHSA-2025:12240",
-                      "https://access.redhat.com/errata/RHSA-2025:12241",
-                      "https://access.redhat.com/errata/RHSA-2025:13267",
-                      "https://access.redhat.com/errata/RHSA-2025:13335",
-                      "https://access.redhat.com/errata/RHSA-2025:15397",
-                      "https://access.redhat.com/errata/RHSA-2025:15827",
-                      "https://access.redhat.com/errata/RHSA-2025:15828",
-                      "https://access.redhat.com/errata/RHSA-2025:18217",
-                      "https://access.redhat.com/errata/RHSA-2025:18218",
-                      "https://access.redhat.com/errata/RHSA-2025:18219",
-                      "https://access.redhat.com/errata/RHSA-2025:18240",
-                      "https://access.redhat.com/errata/RHSA-2025:19020",
-                      "https://access.redhat.com/errata/RHSA-2025:19041",
-                      "https://access.redhat.com/errata/RHSA-2025:19046",
-                      "https://access.redhat.com/errata/RHSA-2025:19894",
-                      "https://access.redhat.com/errata/RHSA-2025:21913",
-                      "https://access.redhat.com/errata/RHSA-2026:0934",
-                      "https://access.redhat.com/security/cve/CVE-2025-49796",
-                      "https://bugzilla.redhat.com/2372373",
-                      "https://bugzilla.redhat.com/2372385",
-                      "https://bugzilla.redhat.com/2372406",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2372373",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2372385",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2372406",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-49794",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-49796",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-6021",
-                      "https://errata.almalinux.org/8/ALSA-2025-10698.html",
-                      "https://errata.rockylinux.org/RLSA-2025:10699",
-                      "https://gitlab.gnome.org/GNOME/libxml2/-/issues/933",
-                      "https://linux.oracle.com/cve/CVE-2025-49796.html",
-                      "https://linux.oracle.com/errata/ELSA-2025-12240.html",
-                      "https://lists.debian.org/debian-lts-announce/2025/07/msg00014.html",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2025-49796",
-                      "https://ubuntu.com/security/notices/USN-7694-1",
-                      "https://www.cve.org/CVERecord?id=CVE-2025-49796"
-                    ],
-                    "severity": "CRITICAL",
-                    "suppressed": false,
-                    "title": "libxml: Type confusion leads to Denial of service (DoS)"
-                  },
-                  {
-                    "cve": "CVE-2022-2309",
-                    "cvss": {
-                      "ghsa": {
-                        "v3score": "5.3",
-                        "v3vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L"
-                      },
-                      "nvd": {
-                        "v3score": "7.5",
-                        "v3vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"
-                      },
-                      "redhat": {
-                        "v3score": "7.5",
-                        "v3vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-476"
-                    ],
-                    "description": "NULL Pointer Dereference allows attackers to cause a denial of service (or application crash). This only applies when lxml is used together with libxml2 2.9.10 through 2.9.14. libxml2 2.9.9 and earlier are not affected. It allows triggering crashes through forged input data, given a vulnerable code sequence in the application. The vulnerability is caused by the iterwalk function (also used by the canonicalize function). Such code shouldn't be in wide-spread use, given that parsing + iterwalk would usually be replaced with the more efficient iterparse function. However, an XML converter that serialises to C14N would also be vulnerable, for example, and there are legitimate use cases for this code sequence. If untrusted input is received (also remotely) and processed via iterwalk function, a crash can be triggered.",
-                    "diffID": "sha256:9664c8c85da49d2cedf85c6b8af0e128318580b95b277b87593a4f75886148af",
-                    "fixedVersions": [
-                      "2.9.10+dfsg-6.7+deb11u5"
-                    ],
-                    "installedVersion": "2.9.10+dfsg-6.7+deb11u4",
-                    "packageName": "libxml2",
-                    "purl": "pkg:deb/debian/libxml2@2.9.10%2Bdfsg-6.7%2Bdeb11u4?arch=amd64&distro=debian-11.9",
-                    "references": [
-                      "https://access.redhat.com/errata/RHSA-2022:8226",
-                      "https://access.redhat.com/security/cve/CVE-2022-2309",
-                      "https://bugzilla.redhat.com/2107571",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2107571",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-2309",
-                      "https://errata.almalinux.org/9/ALSA-2022-8226.html",
-                      "https://errata.rockylinux.org/RLSA-2022:8226",
-                      "https://github.com/advisories/GHSA-wrxv-2j5q-m38w",
-                      "https://github.com/lxml/lxml",
-                      "https://github.com/lxml/lxml/blob/master/CHANGES.txt",
-                      "https://github.com/lxml/lxml/commit/86368e9cf70a0ad23cccd5ee32de847149af0c6f",
-                      "https://github.com/lxml/lxml/commit/86368e9cf70a0ad23cccd5ee32de847149af0c6f (lxml-4.9.1)",
-                      "https://github.com/pypa/advisory-database/tree/main/vulns/lxml/PYSEC-2022-230.yaml",
-                      "https://gitlab.gnome.org/GNOME/libxml2/-/issues/378",
-                      "https://huntr.dev/bounties/8264e74f-edda-4c40-9956-49de635105ba",
-                      "https://huntr.dev/bounties/8264e74f-edda-4c40-9956-49de635105ba/",
-                      "https://linux.oracle.com/cve/CVE-2022-2309.html",
-                      "https://linux.oracle.com/errata/ELSA-2022-8226.html",
-                      "https://lists.debian.org/debian-lts-announce/2024/09/msg00021.html",
-                      "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/HGYC6L7ENH5VEGN3YWFBYMGKX6WNS7HZ",
-                      "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/HGYC6L7ENH5VEGN3YWFBYMGKX6WNS7HZ/",
-                      "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/URHHSIBTPTALXMECRLAC2EVDNAFSR5NO",
-                      "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/URHHSIBTPTALXMECRLAC2EVDNAFSR5NO/",
-                      "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/HGYC6L7ENH5VEGN3YWFBYMGKX6WNS7HZ",
-                      "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/URHHSIBTPTALXMECRLAC2EVDNAFSR5NO",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2022-2309",
-                      "https://security.gentoo.org/glsa/202208-06",
-                      "https://security.netapp.com/advisory/ntap-20220915-0006",
-                      "https://security.netapp.com/advisory/ntap-20220915-0006/",
-                      "https://ubuntu.com/security/notices/USN-5760-1",
-                      "https://ubuntu.com/security/notices/USN-6028-2",
-                      "https://www.cve.org/CVERecord?id=CVE-2022-2309"
-                    ],
-                    "severity": "HIGH",
-                    "suppressed": false,
-                    "title": "lxml: NULL Pointer Dereference in lxml"
-                  },
-                  {
-                    "cve": "CVE-2022-49043",
-                    "cvss": {
-                      "nvd": {
-                        "v3score": "7.8",
-                        "v3vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"
-                      },
-                      "redhat": {
-                        "v3score": "5.9",
-                        "v3vector": "CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:N/I:N/A:H"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-416"
-                    ],
-                    "description": "xmlXIncludeAddNode in xinclude.c in libxml2 before 2.11.0 has a use-after-free.",
-                    "diffID": "sha256:9664c8c85da49d2cedf85c6b8af0e128318580b95b277b87593a4f75886148af",
-                    "fixedVersions": [
-                      "2.9.10+dfsg-6.7+deb11u6"
-                    ],
-                    "installedVersion": "2.9.10+dfsg-6.7+deb11u4",
-                    "packageName": "libxml2",
-                    "purl": "pkg:deb/debian/libxml2@2.9.10%2Bdfsg-6.7%2Bdeb11u4?arch=amd64&distro=debian-11.9",
-                    "references": [
-                      "https://access.redhat.com/errata/RHSA-2025:1517",
-                      "https://access.redhat.com/security/cve/CVE-2022-49043",
-                      "https://bugzilla.redhat.com/2342118",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2342118",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-49043",
-                      "https://errata.almalinux.org/8/ALSA-2025-1517.html",
-                      "https://errata.rockylinux.org/RLSA-2025:1517",
-                      "https://github.com/php/php-src/issues/17467",
-                      "https://gitlab.gnome.org/GNOME/libxml2/-/commit/5a19e21605398cef6a8b1452477a8705cb41562b",
-                      "https://linux.oracle.com/cve/CVE-2022-49043.html",
-                      "https://linux.oracle.com/errata/ELSA-2025-1517.html",
-                      "https://lists.debian.org/debian-lts-announce/2025/02/msg00028.html",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2022-49043",
-                      "https://ubuntu.com/security/notices/USN-7240-1",
-                      "https://ubuntu.com/security/notices/USN-7302-1",
-                      "https://www.cve.org/CVERecord?id=CVE-2022-49043"
-                    ],
-                    "severity": "HIGH",
-                    "suppressed": false,
-                    "title": "libxml: use-after-free in xmlXIncludeAddNode"
-                  },
-                  {
-                    "cve": "CVE-2024-25062",
-                    "cvss": {
-                      "nvd": {
-                        "v3score": "7.5",
-                        "v3vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"
-                      },
-                      "redhat": {
-                        "v3score": "7.5",
-                        "v3vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-416"
-                    ],
-                    "description": "An issue was discovered in libxml2 before 2.11.7 and 2.12.x before 2.12.5. When using the XML Reader interface with DTD validation and XInclude expansion enabled, processing crafted XML documents can lead to an xmlValidatePopElement use-after-free.",
-                    "diffID": "sha256:9664c8c85da49d2cedf85c6b8af0e128318580b95b277b87593a4f75886148af",
-                    "fixedVersions": [
-                      "2.9.10+dfsg-6.7+deb11u6"
-                    ],
-                    "installedVersion": "2.9.10+dfsg-6.7+deb11u4",
-                    "packageName": "libxml2",
-                    "purl": "pkg:deb/debian/libxml2@2.9.10%2Bdfsg-6.7%2Bdeb11u4?arch=amd64&distro=debian-11.9",
-                    "references": [
-                      "https://access.redhat.com/errata/RHSA-2024:3626",
-                      "https://access.redhat.com/security/cve/CVE-2024-25062",
-                      "https://bugzilla.redhat.com/2262726",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2262726",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-25062",
-                      "https://errata.almalinux.org/8/ALSA-2024-3626.html",
-                      "https://errata.rockylinux.org/RLSA-2024:2679",
-                      "https://gitlab.gnome.org/GNOME/libxml2/-/issues/604",
-                      "https://gitlab.gnome.org/GNOME/libxml2/-/tags",
-                      "https://linux.oracle.com/cve/CVE-2024-25062.html",
-                      "https://linux.oracle.com/errata/ELSA-2024-3626.html",
-                      "https://lists.debian.org/debian-lts-announce/2025/02/msg00028.html",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2024-25062",
-                      "https://security.netapp.com/advisory/ntap-20241018-0009/",
-                      "https://ubuntu.com/security/notices/USN-6658-1",
-                      "https://ubuntu.com/security/notices/USN-6658-2",
-                      "https://www.cve.org/CVERecord?id=CVE-2024-25062"
-                    ],
-                    "severity": "HIGH",
-                    "suppressed": false,
-                    "title": "libxml2: use-after-free in XMLReader"
-                  },
-                  {
-                    "cve": "CVE-2025-24928",
-                    "cvss": {
-                      "nvd": {
-                        "v3score": "7.7",
-                        "v3vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N"
-                      },
-                      "redhat": {
-                        "v3score": "7.8",
-                        "v3vector": "CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:N"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-121"
-                    ],
-                    "description": "libxml2 before 2.12.10 and 2.13.x before 2.13.6 has a stack-based buffer overflow in xmlSnprintfElements in valid.c. To exploit this, DTD validation must occur for an untrusted document or untrusted DTD. NOTE: this is similar to CVE-2017-9047.",
-                    "diffID": "sha256:9664c8c85da49d2cedf85c6b8af0e128318580b95b277b87593a4f75886148af",
-                    "fixedVersions": [
-                      "2.9.10+dfsg-6.7+deb11u6"
-                    ],
-                    "installedVersion": "2.9.10+dfsg-6.7+deb11u4",
-                    "packageName": "libxml2",
-                    "purl": "pkg:deb/debian/libxml2@2.9.10%2Bdfsg-6.7%2Bdeb11u4?arch=amd64&distro=debian-11.9",
-                    "references": [
-                      "https://access.redhat.com/errata/RHSA-2025:2686",
-                      "https://access.redhat.com/security/cve/CVE-2025-24928",
-                      "https://bugzilla.redhat.com/2346416",
-                      "https://bugzilla.redhat.com/2346421",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2346416",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2346421",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-56171",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-24928",
-                      "https://errata.almalinux.org/8/ALSA-2025-2686.html",
-                      "https://errata.rockylinux.org/RLSA-2025:2679",
-                      "https://gitlab.gnome.org/GNOME/libxml2/-/issues/847",
-                      "https://issues.oss-fuzz.com/issues/392687022",
-                      "https://linux.oracle.com/cve/CVE-2025-24928.html",
-                      "https://linux.oracle.com/errata/ELSA-2025-2686.html",
-                      "https://lists.debian.org/debian-lts-announce/2025/02/msg00028.html",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2025-24928",
-                      "https://security.netapp.com/advisory/ntap-20250321-0006/",
-                      "https://ubuntu.com/security/notices/USN-7302-1",
-                      "https://www.cve.org/CVERecord?id=CVE-2025-24928",
-                      "https://www.openwall.com/lists/oss-security/2025/02/18/2"
-                    ],
-                    "severity": "HIGH",
-                    "suppressed": false,
-                    "title": "libxml2: Stack-based buffer overflow in xmlSnprintfElements of libxml2"
-                  },
-                  {
-                    "cve": "CVE-2025-27113",
-                    "cvss": {
-                      "nvd": {
-                        "v3score": "7.5",
-                        "v3vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"
-                      },
-                      "redhat": {
-                        "v3score": "3.1",
-                        "v3vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-476"
-                    ],
-                    "description": "libxml2 before 2.12.10 and 2.13.x before 2.13.6 has a NULL pointer dereference in xmlPatMatch in pattern.c.",
-                    "diffID": "sha256:9664c8c85da49d2cedf85c6b8af0e128318580b95b277b87593a4f75886148af",
-                    "fixedVersions": [
-                      "2.9.10+dfsg-6.7+deb11u6"
-                    ],
-                    "installedVersion": "2.9.10+dfsg-6.7+deb11u4",
-                    "packageName": "libxml2",
-                    "purl": "pkg:deb/debian/libxml2@2.9.10%2Bdfsg-6.7%2Bdeb11u4?arch=amd64&distro=debian-11.9",
-                    "references": [
-                      "http://seclists.org/fulldisclosure/2025/Apr/10",
-                      "http://seclists.org/fulldisclosure/2025/Apr/11",
-                      "http://seclists.org/fulldisclosure/2025/Apr/12",
-                      "http://seclists.org/fulldisclosure/2025/Apr/13",
-                      "http://seclists.org/fulldisclosure/2025/Apr/4",
-                      "http://seclists.org/fulldisclosure/2025/Apr/5",
-                      "http://seclists.org/fulldisclosure/2025/Apr/8",
-                      "http://seclists.org/fulldisclosure/2025/Apr/9",
-                      "https://access.redhat.com/security/cve/CVE-2025-27113",
-                      "https://gitlab.gnome.org/GNOME/libxml2/-/issues/861",
-                      "https://lists.debian.org/debian-lts-announce/2025/02/msg00028.html",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2025-27113",
-                      "https://security.netapp.com/advisory/ntap-20250306-0004/",
-                      "https://ubuntu.com/security/notices/USN-7302-1",
-                      "https://www.cve.org/CVERecord?id=CVE-2025-27113",
-                      "https://www.openwall.com/lists/oss-security/2025/02/18/2"
-                    ],
-                    "severity": "HIGH",
-                    "suppressed": false,
-                    "title": "libxml2: NULL Pointer Dereference in libxml2 xmlPatMatch"
-                  },
-                  {
-                    "cve": "CVE-2025-32414",
-                    "cvss": {
-                      "nvd": {
-                        "v3score": "7.5",
-                        "v3vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"
-                      },
-                      "redhat": {
-                        "v3score": "5.6",
-                        "v3vector": "CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:L/I:L/A:L"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-393",
-                      "CWE-252"
-                    ],
-                    "description": "In libxml2 before 2.13.8 and 2.14.x before 2.14.2, out-of-bounds memory access can occur in the Python API (Python bindings) because of an incorrect return value. This occurs in xmlPythonFileRead and xmlPythonFileReadRaw because of a difference between bytes and characters.",
-                    "diffID": "sha256:9664c8c85da49d2cedf85c6b8af0e128318580b95b277b87593a4f75886148af",
-                    "fixedVersions": [
-                      "2.9.10+dfsg-6.7+deb11u7"
-                    ],
-                    "installedVersion": "2.9.10+dfsg-6.7+deb11u4",
-                    "packageName": "libxml2",
-                    "purl": "pkg:deb/debian/libxml2@2.9.10%2Bdfsg-6.7%2Bdeb11u4?arch=amd64&distro=debian-11.9",
-                    "references": [
-                      "https://access.redhat.com/errata/RHSA-2025:8958",
-                      "https://access.redhat.com/security/cve/CVE-2025-32414",
-                      "https://bugzilla.redhat.com/2358121",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2358121",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2360768",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-32414",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-32415",
-                      "https://errata.almalinux.org/8/ALSA-2025-8958.html",
-                      "https://errata.rockylinux.org/RLSA-2025:13428",
-                      "https://gitlab.gnome.org/GNOME/libxml2/-/issues/889",
-                      "https://linux.oracle.com/cve/CVE-2025-32414.html",
-                      "https://linux.oracle.com/errata/ELSA-2025-8958.html",
-                      "https://lists.debian.org/debian-lts-announce/2025/04/msg00041.html",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2025-32414",
-                      "https://ubuntu.com/security/notices/USN-7467-1",
-                      "https://ubuntu.com/security/notices/USN-7467-2",
-                      "https://ubuntu.com/security/notices/USN-7896-1",
-                      "https://www.cve.org/CVERecord?id=CVE-2025-32414"
-                    ],
-                    "severity": "HIGH",
-                    "suppressed": false,
-                    "title": "libxml2: Out-of-Bounds Read in libxml2"
-                  },
-                  {
-                    "cve": "CVE-2025-32415",
-                    "cvss": {
-                      "nvd": {
-                        "v3score": "7.5",
-                        "v3vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"
-                      },
-                      "redhat": {
-                        "v3score": "7.5",
-                        "v3vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-1284",
-                      "CWE-125"
-                    ],
-                    "description": "In libxml2 before 2.13.8 and 2.14.x before 2.14.2, xmlSchemaIDCFillNodeTables in xmlschemas.c has a heap-based buffer under-read. To exploit this, a crafted XML document must be validated against an XML schema with certain identity constraints, or a crafted XML schema must be used.",
-                    "diffID": "sha256:9664c8c85da49d2cedf85c6b8af0e128318580b95b277b87593a4f75886148af",
-                    "fixedVersions": [
-                      "2.9.10+dfsg-6.7+deb11u7"
-                    ],
-                    "installedVersion": "2.9.10+dfsg-6.7+deb11u4",
-                    "packageName": "libxml2",
-                    "purl": "pkg:deb/debian/libxml2@2.9.10%2Bdfsg-6.7%2Bdeb11u4?arch=amd64&distro=debian-11.9",
-                    "references": [
-                      "https://access.redhat.com/errata/RHSA-2025:13203",
-                      "https://access.redhat.com/security/cve/CVE-2025-32415",
-                      "https://bugzilla.redhat.com/2360768",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2358121",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2360768",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-32414",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-32415",
-                      "https://errata.almalinux.org/8/ALSA-2025-13203.html",
-                      "https://errata.rockylinux.org/RLSA-2025:13428",
-                      "https://gitlab.gnome.org/GNOME/libxml2/-/issues/890",
-                      "https://linux.oracle.com/cve/CVE-2025-32415.html",
-                      "https://linux.oracle.com/errata/ELSA-2025-13789.html",
-                      "https://lists.debian.org/debian-lts-announce/2025/04/msg00041.html",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2025-32415",
-                      "https://ubuntu.com/security/notices/USN-7467-1",
-                      "https://ubuntu.com/security/notices/USN-7467-2",
-                      "https://ubuntu.com/security/notices/USN-7896-1",
-                      "https://www.cve.org/CVERecord?id=CVE-2025-32415"
-                    ],
-                    "severity": "HIGH",
-                    "suppressed": false,
-                    "title": "libxml2: Out-of-bounds Read in xmlSchemaIDCFillNodeTables"
-                  },
-                  {
-                    "cve": "CVE-2025-6021",
-                    "cvss": {
-                      "redhat": {
-                        "v3score": "7.5",
-                        "v3vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-190",
-                      "CWE-787"
-                    ],
-                    "description": "A flaw was found in libxml2's xmlBuildQName function, where integer overflows in buffer size calculations can lead to a stack-based buffer overflow. This issue can result in memory corruption or a denial of service when processing crafted input.",
-                    "diffID": "sha256:9664c8c85da49d2cedf85c6b8af0e128318580b95b277b87593a4f75886148af",
-                    "fixedVersions": [
-                      "2.9.10+dfsg-6.7+deb11u8"
-                    ],
-                    "installedVersion": "2.9.10+dfsg-6.7+deb11u4",
-                    "packageName": "libxml2",
-                    "purl": "pkg:deb/debian/libxml2@2.9.10%2Bdfsg-6.7%2Bdeb11u4?arch=amd64&distro=debian-11.9",
-                    "references": [
-                      "https://access.redhat.com/errata/RHSA-2025:10630",
-                      "https://access.redhat.com/errata/RHSA-2025:10698",
-                      "https://access.redhat.com/errata/RHSA-2025:10699",
-                      "https://access.redhat.com/errata/RHSA-2025:11580",
-                      "https://access.redhat.com/errata/RHSA-2025:11673",
-                      "https://access.redhat.com/errata/RHSA-2025:12098",
-                      "https://access.redhat.com/errata/RHSA-2025:12099",
-                      "https://access.redhat.com/errata/RHSA-2025:12199",
-                      "https://access.redhat.com/errata/RHSA-2025:12237",
-                      "https://access.redhat.com/errata/RHSA-2025:12239",
-                      "https://access.redhat.com/errata/RHSA-2025:12240",
-                      "https://access.redhat.com/errata/RHSA-2025:12241",
-                      "https://access.redhat.com/errata/RHSA-2025:13267",
-                      "https://access.redhat.com/errata/RHSA-2025:13289",
-                      "https://access.redhat.com/errata/RHSA-2025:13325",
-                      "https://access.redhat.com/errata/RHSA-2025:13335",
-                      "https://access.redhat.com/errata/RHSA-2025:13336",
-                      "https://access.redhat.com/errata/RHSA-2025:14059",
-                      "https://access.redhat.com/errata/RHSA-2025:14396",
-                      "https://access.redhat.com/errata/RHSA-2025:15308",
-                      "https://access.redhat.com/errata/RHSA-2025:15672",
-                      "https://access.redhat.com/errata/RHSA-2025:19020",
-                      "https://access.redhat.com/security/cve/CVE-2025-6021",
-                      "https://bugzilla.redhat.com/2372373",
-                      "https://bugzilla.redhat.com/2372385",
-                      "https://bugzilla.redhat.com/2372406",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2372373",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2372385",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2372406",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-49794",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-49796",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-6021",
-                      "https://errata.almalinux.org/8/ALSA-2025-10698.html",
-                      "https://errata.rockylinux.org/RLSA-2025:10699",
-                      "https://gitlab.gnome.org/GNOME/libxml2/-/issues/926",
-                      "https://linux.oracle.com/cve/CVE-2025-6021.html",
-                      "https://linux.oracle.com/errata/ELSA-2025-12240.html",
-                      "https://lists.debian.org/debian-lts-announce/2025/07/msg00014.html",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2025-6021",
-                      "https://ubuntu.com/security/notices/USN-7694-1",
-                      "https://www.cve.org/CVERecord?id=CVE-2025-6021"
-                    ],
-                    "severity": "HIGH",
-                    "suppressed": false,
-                    "title": "libxml2: Integer Overflow in xmlBuildQName() Leads to Stack Buffer Overflow in libxml2"
-                  },
-                  {
-                    "cve": "CVE-2016-3709",
-                    "cvss": {
-                      "nvd": {
-                        "v3score": "6.1",
-                        "v3vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N"
-                      },
-                      "redhat": {
-                        "v3score": "6.1",
-                        "v3vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-79"
-                    ],
-                    "description": "Possible cross-site scripting vulnerability in libxml after commit 960f0e2.",
-                    "diffID": "sha256:9664c8c85da49d2cedf85c6b8af0e128318580b95b277b87593a4f75886148af",
-                    "fixedVersions": [
-                      "2.9.10+dfsg-6.7+deb11u5"
-                    ],
-                    "installedVersion": "2.9.10+dfsg-6.7+deb11u4",
-                    "packageName": "libxml2",
-                    "purl": "pkg:deb/debian/libxml2@2.9.10%2Bdfsg-6.7%2Bdeb11u4?arch=amd64&distro=debian-11.9",
-                    "references": [
-                      "https://access.redhat.com/errata/RHSA-2022:7715",
-                      "https://access.redhat.com/security/cve/CVE-2016-3709",
-                      "https://bugzilla.redhat.com/2112766",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2112766",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-3709",
-                      "https://errata.almalinux.org/8/ALSA-2022-7715.html",
-                      "https://errata.rockylinux.org/RLSA-2022:7715",
-                      "https://linux.oracle.com/cve/CVE-2016-3709.html",
-                      "https://linux.oracle.com/errata/ELSA-2022-7715.html",
-                      "https://lists.debian.org/debian-lts-announce/2024/09/msg00021.html",
-                      "https://mail.gnome.org/archives/xml/2018-January/msg00010.html",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2016-3709",
-                      "https://ubuntu.com/security/notices/USN-5548-1",
-                      "https://www.cve.org/CVERecord?id=CVE-2016-3709"
-                    ],
-                    "severity": "MEDIUM",
-                    "suppressed": false,
-                    "title": "libxml2: Incorrect server side include parsing can lead to XSS"
-                  },
-                  {
-                    "cve": "CVE-2023-39615",
-                    "cvss": {
-                      "nvd": {
-                        "v3score": "6.5",
-                        "v3vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H"
-                      },
-                      "redhat": {
-                        "v3score": "6.5",
-                        "v3vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-119"
-                    ],
-                    "description": "Xmlsoft Libxml2 v2.11.0 was discovered to contain an out-of-bounds read via the xmlSAX2StartElement() function at /libxml2/SAX2.c. This vulnerability allows attackers to cause a Denial of Service (DoS) via supplying a crafted XML file. NOTE: the vendor's position is that the product does not support the legacy SAX1 interface with custom callbacks; there is a crash even without crafted input.",
-                    "diffID": "sha256:9664c8c85da49d2cedf85c6b8af0e128318580b95b277b87593a4f75886148af",
-                    "fixedVersions": [
-                      "2.9.10+dfsg-6.7+deb11u6"
-                    ],
-                    "installedVersion": "2.9.10+dfsg-6.7+deb11u4",
-                    "packageName": "libxml2",
-                    "purl": "pkg:deb/debian/libxml2@2.9.10%2Bdfsg-6.7%2Bdeb11u4?arch=amd64&distro=debian-11.9",
-                    "references": [
-                      "https://access.redhat.com/errata/RHSA-2024:0119",
-                      "https://access.redhat.com/security/cve/CVE-2023-39615",
-                      "https://bugzilla.redhat.com/2235864",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2235864",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-39615",
-                      "https://errata.almalinux.org/8/ALSA-2024-0119.html",
-                      "https://errata.rockylinux.org/RLSA-2024:0119",
-                      "https://gitlab.gnome.org/GNOME/libxml2/-/issues/535",
-                      "https://linux.oracle.com/cve/CVE-2023-39615.html",
-                      "https://linux.oracle.com/errata/ELSA-2024-0119.html",
-                      "https://lists.debian.org/debian-lts-announce/2025/02/msg00028.html",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2023-39615",
-                      "https://www.cve.org/CVERecord?id=CVE-2023-39615"
-                    ],
-                    "severity": "MEDIUM",
-                    "suppressed": false,
-                    "title": "libxml2: crafted xml can cause global buffer overflow"
-                  },
-                  {
-                    "cve": "CVE-2023-45322",
-                    "cvss": {
-                      "nvd": {
-                        "v3score": "6.5",
-                        "v3vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H"
-                      },
-                      "redhat": {
-                        "v3score": "5.9",
-                        "v3vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-416"
-                    ],
-                    "description": "libxml2 through 2.11.5 has a use-after-free that can only occur after a certain memory allocation fails. This occurs in xmlUnlinkNode in tree.c. NOTE: the vendor's position is \"I don't think these issues are critical enough to warrant a CVE ID ... because an attacker typically can't control when memory allocations fail.\"",
-                    "diffID": "sha256:9664c8c85da49d2cedf85c6b8af0e128318580b95b277b87593a4f75886148af",
-                    "fixedVersions": [
-                      "2.9.10+dfsg-6.7+deb11u6"
-                    ],
-                    "installedVersion": "2.9.10+dfsg-6.7+deb11u4",
-                    "packageName": "libxml2",
-                    "purl": "pkg:deb/debian/libxml2@2.9.10%2Bdfsg-6.7%2Bdeb11u4?arch=amd64&distro=debian-11.9",
-                    "references": [
-                      "http://www.openwall.com/lists/oss-security/2023/10/06/5",
-                      "https://access.redhat.com/security/cve/CVE-2023-45322",
-                      "https://gitlab.gnome.org/GNOME/libxml2/-/issues/344",
-                      "https://gitlab.gnome.org/GNOME/libxml2/-/issues/583",
-                      "https://lists.debian.org/debian-lts-announce/2025/02/msg00028.html",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2023-45322",
-                      "https://www.cve.org/CVERecord?id=CVE-2023-45322"
-                    ],
-                    "severity": "MEDIUM",
-                    "suppressed": false,
-                    "title": "libxml2: use-after-free in xmlUnlinkNode() in tree.c"
-                  },
-                  {
-                    "cve": "CVE-2024-34459",
-                    "cvss": {
-                      "redhat": {
-                        "v3score": "5.5",
-                        "v3vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-122"
-                    ],
-                    "description": "An issue was discovered in xmllint (from libxml2) before 2.11.8 and 2.12.x before 2.12.7. Formatting error messages with xmllint --htmlout can result in a buffer over-read in xmlHTMLPrintFileContext in xmllint.c.",
-                    "diffID": "sha256:9664c8c85da49d2cedf85c6b8af0e128318580b95b277b87593a4f75886148af",
-                    "fixedVersions": [
-                      "2.9.10+dfsg-6.7+deb11u8"
-                    ],
-                    "installedVersion": "2.9.10+dfsg-6.7+deb11u4",
-                    "packageName": "libxml2",
-                    "purl": "pkg:deb/debian/libxml2@2.9.10%2Bdfsg-6.7%2Bdeb11u4?arch=amd64&distro=debian-11.9",
-                    "references": [
-                      "https://access.redhat.com/security/cve/CVE-2024-34459",
-                      "https://gitlab.gnome.org/GNOME/libxml2/-/issues/720",
-                      "https://gitlab.gnome.org/GNOME/libxml2/-/releases/v2.11.8",
-                      "https://gitlab.gnome.org/GNOME/libxml2/-/releases/v2.12.7",
-                      "https://lists.debian.org/debian-lts-announce/2025/07/msg00014.html",
-                      "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/5HVUXKYTBWT3G5DEEQX62STJQBY367NL/",
-                      "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/INKSSLW5VMZIXHRPZBAW4TJUX5SQKARG/",
-                      "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VRDJCNQP32LV56KESUQ5SNZKAJWSZZRI/",
-                      "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/5HVUXKYTBWT3G5DEEQX62STJQBY367NL/",
-                      "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/INKSSLW5VMZIXHRPZBAW4TJUX5SQKARG/",
-                      "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/VRDJCNQP32LV56KESUQ5SNZKAJWSZZRI/",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2024-34459",
-                      "https://ubuntu.com/security/notices/USN-7240-1",
-                      "https://ubuntu.com/security/notices/USN-7302-1",
-                      "https://www.cve.org/CVERecord?id=CVE-2024-34459"
-                    ],
-                    "severity": "MEDIUM",
-                    "suppressed": false,
-                    "title": "libxml2: buffer over-read in xmlHTMLPrintFileContext in xmllint.c"
-                  },
-                  {
-                    "cve": "CVE-2025-9714",
-                    "cvss": {
-                      "nvd": {
-                        "v3score": "5.5",
-                        "v3vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H"
-                      },
-                      "redhat": {
-                        "v3score": "6.2",
-                        "v3vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-674"
-                    ],
-                    "description": "Uncontrolled recursion in XPath evaluation in libxml2 up to and including version 2.9.14 allows a local attacker to cause a stack overflow via crafted expressions. XPath processing functions `xmlXPathRunEval`, `xmlXPathCtxtCompile`, and `xmlXPathEvalExpr` were resetting recursion depth to zero before making potentially recursive calls. When such functions were called recursively this could allow for uncontrolled recursion and lead to a stack overflow. These functions now preserve recursion depth across recursive calls, allowing recursion depth to be controlled.",
-                    "diffID": "sha256:9664c8c85da49d2cedf85c6b8af0e128318580b95b277b87593a4f75886148af",
-                    "fixedVersions": [
-                      "2.9.10+dfsg-6.7+deb11u9"
-                    ],
-                    "installedVersion": "2.9.10+dfsg-6.7+deb11u4",
-                    "packageName": "libxml2",
-                    "purl": "pkg:deb/debian/libxml2@2.9.10%2Bdfsg-6.7%2Bdeb11u4?arch=amd64&distro=debian-11.9",
-                    "references": [
-                      "https://access.redhat.com/errata/RHSA-2025:22376",
-                      "https://access.redhat.com/security/cve/CVE-2025-9714",
-                      "https://bugzilla.redhat.com/2392605",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2392605",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-9714",
-                      "https://errata.almalinux.org/9/ALSA-2025-22376.html",
-                      "https://errata.rockylinux.org/RLSA-2025:22376",
-                      "https://gitlab.gnome.org/GNOME/libxml2/-/commit/677a42645ef22b5a50741bad5facf9d8a8bc6d21",
-                      "https://gitlab.gnome.org/GNOME/libxslt/-/issues/148",
-                      "https://linux.oracle.com/cve/CVE-2025-9714.html",
-                      "https://linux.oracle.com/errata/ELSA-2025-22376.html",
-                      "https://lists.debian.org/debian-lts-announce/2025/09/msg00035.html",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2025-9714",
-                      "https://ubuntu.com/security/notices/USN-7743-1",
-                      "https://www.cve.org/CVERecord?id=CVE-2025-9714"
-                    ],
-                    "severity": "MEDIUM",
-                    "suppressed": false,
-                    "title": "libxslt: libxml2: Inifinite recursion at exsltDynMapFunction function in libexslt/dynamic.c"
-                  },
-                  {
-                    "cve": "CVE-2026-0990",
-                    "cvss": {
-                      "redhat": {
-                        "v3score": "5.9",
-                        "v3vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-674"
-                    ],
-                    "description": "A flaw was found in libxml2, an XML parsing library. This uncontrolled recursion vulnerability occurs in the xmlCatalogXMLResolveURI function when an XML catalog contains a delegate URI entry that references itself. A remote attacker could exploit this configuration-dependent issue by providing a specially crafted XML catalog, leading to infinite recursion and call stack exhaustion. This ultimately results in a segmentation fault, causing a Denial of Service (DoS) by crashing affected applications.",
-                    "diffID": "sha256:9664c8c85da49d2cedf85c6b8af0e128318580b95b277b87593a4f75886148af",
-                    "installedVersion": "2.9.10+dfsg-6.7+deb11u4",
-                    "packageName": "libxml2",
-                    "purl": "pkg:deb/debian/libxml2@2.9.10%2Bdfsg-6.7%2Bdeb11u4?arch=amd64&distro=debian-11.9",
-                    "references": [
-                      "https://access.redhat.com/security/cve/CVE-2026-0990",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2429959",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2026-0990",
-                      "https://ubuntu.com/security/notices/USN-7974-1",
-                      "https://www.cve.org/CVERecord?id=CVE-2026-0990"
-                    ],
-                    "severity": "MEDIUM",
-                    "suppressed": false,
-                    "title": "libxml2: libxml2: Denial of Service via uncontrolled recursion in XML catalog processing"
-                  },
-                  {
-                    "cve": "CVE-2025-6170",
-                    "cvss": {
-                      "nvd": {
-                        "v3score": "2.5",
-                        "v3vector": "CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L"
-                      },
-                      "redhat": {
-                        "v3score": "2.5",
-                        "v3vector": "CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-121"
-                    ],
-                    "description": "A flaw was found in the interactive shell of the xmllint command-line tool, used for parsing XML files. When a user inputs an overly long command, the program does not check the input size properly, which can cause it to crash. This issue might allow attackers to run harmful code in rare configurations without modern protections.",
-                    "diffID": "sha256:9664c8c85da49d2cedf85c6b8af0e128318580b95b277b87593a4f75886148af",
-                    "fixedVersions": [
-                      "2.9.10+dfsg-6.7+deb11u8"
-                    ],
-                    "installedVersion": "2.9.10+dfsg-6.7+deb11u4",
-                    "packageName": "libxml2",
-                    "purl": "pkg:deb/debian/libxml2@2.9.10%2Bdfsg-6.7%2Bdeb11u4?arch=amd64&distro=debian-11.9",
-                    "references": [
-                      "https://access.redhat.com/security/cve/CVE-2025-6170",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2372952",
-                      "https://gitlab.gnome.org/GNOME/libxml2/-/issues/941",
-                      "https://lists.debian.org/debian-lts-announce/2025/07/msg00014.html",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2025-6170",
-                      "https://ubuntu.com/security/notices/USN-7694-1",
-                      "https://www.cve.org/CVERecord?id=CVE-2025-6170"
-                    ],
-                    "severity": "LOW",
-                    "suppressed": false,
-                    "title": "libxml2: Stack Buffer Overflow in xmllint Interactive Shell Command Handling"
-                  },
-                  {
-                    "cve": "CVE-2025-8732",
-                    "cvss": {
-                      "redhat": {
-                        "v3score": "3.3",
-                        "v3vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-404",
-                      "CWE-674"
-                    ],
-                    "description": "A vulnerability was found in libxml2 up to 2.14.5. It has been declared as problematic. This vulnerability affects the function xmlParseSGMLCatalog of the component xmlcatalog. The manipulation leads to uncontrolled recursion. Attacking locally is a requirement. The exploit has been disclosed to the public and may be used. The real existence of this vulnerability is still doubted at the moment. The code maintainer explains, that \"[t]he issue can only be triggered with untrusted SGML catalogs and it makes absolutely no sense to use untrusted catalogs. I also doubt that anyone is still using SGML catalogs at all.\"",
-                    "diffID": "sha256:9664c8c85da49d2cedf85c6b8af0e128318580b95b277b87593a4f75886148af",
-                    "installedVersion": "2.9.10+dfsg-6.7+deb11u4",
-                    "packageName": "libxml2",
-                    "purl": "pkg:deb/debian/libxml2@2.9.10%2Bdfsg-6.7%2Bdeb11u4?arch=amd64&distro=debian-11.9",
-                    "references": [
-                      "https://access.redhat.com/security/cve/CVE-2025-8732",
-                      "https://drive.google.com/file/d/1woIeYVcSQB_NwfEhaVnX6MedpWJ_nqWl/view?usp=drive_link",
-                      "https://gitlab.gnome.org/GNOME/libxml2/-/issues/958",
-                      "https://gitlab.gnome.org/GNOME/libxml2/-/issues/958#note_2505853",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2025-8732",
-                      "https://ubuntu.com/security/notices/USN-7974-1",
-                      "https://vuldb.com/?ctiid.319228",
-                      "https://vuldb.com/?id.319228",
-                      "https://vuldb.com/?submit.622285",
-                      "https://www.cve.org/CVERecord?id=CVE-2025-8732"
-                    ],
-                    "severity": "LOW",
-                    "suppressed": false,
-                    "title": "libxml2: libxml2: Uncontrolled Recursion Vulnerability"
-                  },
-                  {
-                    "cve": "CVE-2026-0989",
-                    "cvss": {
-                      "redhat": {
-                        "v3score": "3.7",
-                        "v3vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-674"
-                    ],
-                    "description": "A flaw was identified in the RelaxNG parser of libxml2 related to how external schema inclusions are handled. The parser does not enforce a limit on inclusion depth when resolving nested <include> directives. Specially crafted or overly complex schemas can cause excessive recursion during parsing. This may lead to stack exhaustion and application crashes, creating a denial-of-service risk.",
-                    "diffID": "sha256:9664c8c85da49d2cedf85c6b8af0e128318580b95b277b87593a4f75886148af",
-                    "installedVersion": "2.9.10+dfsg-6.7+deb11u4",
-                    "packageName": "libxml2",
-                    "purl": "pkg:deb/debian/libxml2@2.9.10%2Bdfsg-6.7%2Bdeb11u4?arch=amd64&distro=debian-11.9",
-                    "references": [
-                      "https://access.redhat.com/security/cve/CVE-2026-0989",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2429933",
-                      "https://gitlab.gnome.org/GNOME/libxml2/-/merge_requests/374",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2026-0989",
-                      "https://ubuntu.com/security/notices/USN-7974-1",
-                      "https://www.cve.org/CVERecord?id=CVE-2026-0989"
-                    ],
-                    "severity": "LOW",
-                    "suppressed": false,
-                    "title": "libxml2: Unbounded RelaxNG Include Recursion Leading to Stack Overflow"
-                  },
-                  {
-                    "cve": "CVE-2026-0992",
-                    "cvss": {
-                      "redhat": {
-                        "v3score": "2.9",
-                        "v3vector": "CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-400"
-                    ],
-                    "description": "A flaw was found in the libxml2 library. This uncontrolled resource consumption vulnerability occurs when processing XML catalogs that contain repeated <nextCatalog> elements pointing to the same downstream catalog. A remote attacker can exploit this by supplying crafted catalogs, causing the parser to redundantly traverse catalog chains. This leads to excessive CPU consumption and degrades application availability, resulting in a denial-of-service condition.",
-                    "diffID": "sha256:9664c8c85da49d2cedf85c6b8af0e128318580b95b277b87593a4f75886148af",
-                    "installedVersion": "2.9.10+dfsg-6.7+deb11u4",
-                    "packageName": "libxml2",
-                    "purl": "pkg:deb/debian/libxml2@2.9.10%2Bdfsg-6.7%2Bdeb11u4?arch=amd64&distro=debian-11.9",
-                    "references": [
-                      "https://access.redhat.com/security/cve/CVE-2026-0992",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2429975",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2026-0992",
-                      "https://ubuntu.com/security/notices/USN-7974-1",
-                      "https://www.cve.org/CVERecord?id=CVE-2026-0992"
-                    ],
-                    "severity": "LOW",
-                    "suppressed": false,
-                    "title": "libxml2: libxml2: Denial of Service via crafted XML catalogs"
-                  },
-                  {
-                    "cve": "CVE-2026-1757",
-                    "cvss": {
-                      "redhat": {
-                        "v3score": "6.2",
-                        "v3vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-401"
-                    ],
-                    "description": "A flaw was identified in the interactive shell of the xmllint utility, part of the libxml2 project, where memory allocated for user input is not properly released under certain conditions. When a user submits input consisting only of whitespace, the program skips command execution but fails to free the allocated buffer. Repeating this action causes memory to continuously accumulate. Over time, this can exhaust system memory and terminate the xmllint process, creating a denial-of-service condition on the local system.",
-                    "diffID": "sha256:9664c8c85da49d2cedf85c6b8af0e128318580b95b277b87593a4f75886148af",
-                    "installedVersion": "2.9.10+dfsg-6.7+deb11u4",
-                    "packageName": "libxml2",
-                    "purl": "pkg:deb/debian/libxml2@2.9.10%2Bdfsg-6.7%2Bdeb11u4?arch=amd64&distro=debian-11.9",
-                    "references": [
-                      "https://access.redhat.com/security/cve/CVE-2026-1757",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2435940",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2026-1757",
-                      "https://www.cve.org/CVERecord?id=CVE-2026-1757"
-                    ],
-                    "severity": "LOW",
-                    "suppressed": false,
-                    "title": "libxml2: Memory Leak Leading to Local Denial of Service in xmllint Interactive Shell"
-                  },
-                  {
-                    "cve": "CVE-2024-55549",
-                    "cvss": {
-                      "nvd": {
-                        "v3score": "7.8",
-                        "v3vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"
-                      },
-                      "redhat": {
-                        "v3score": "7.8",
-                        "v3vector": "CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:N/I:H/A:H"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-416"
-                    ],
-                    "description": "xsltGetInheritedNsList in libxslt before 1.1.43 has a use-after-free issue related to exclusion of result prefixes.",
-                    "diffID": "sha256:9664c8c85da49d2cedf85c6b8af0e128318580b95b277b87593a4f75886148af",
-                    "fixedVersions": [
-                      "1.1.34-4+deb11u2"
-                    ],
-                    "installedVersion": "1.1.34-4+deb11u1",
-                    "packageName": "libxslt1.1",
-                    "purl": "pkg:deb/debian/libxslt1.1@1.1.34-4%2Bdeb11u1?arch=amd64&distro=debian-11.9",
-                    "references": [
-                      "https://access.redhat.com/errata/RHSA-2025:3615",
-                      "https://access.redhat.com/security/cve/CVE-2024-55549",
-                      "https://bugzilla.redhat.com/2352483",
-                      "https://bugzilla.redhat.com/2352484",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2352484",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-55549",
-                      "https://errata.almalinux.org/8/ALSA-2025-3615.html",
-                      "https://errata.rockylinux.org/RLSA-2025:7410",
-                      "https://gitlab.gnome.org/GNOME/libxslt/-/issues/127",
-                      "https://linux.oracle.com/cve/CVE-2024-55549.html",
-                      "https://linux.oracle.com/errata/ELSA-2025-7496.html",
-                      "https://lists.debian.org/debian-lts-announce/2025/03/msg00015.html",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2024-55549",
-                      "https://ubuntu.com/security/notices/USN-7357-1",
-                      "https://ubuntu.com/security/notices/USN-7787-1",
-                      "https://www.cve.org/CVERecord?id=CVE-2024-55549"
-                    ],
-                    "severity": "HIGH",
-                    "suppressed": false,
-                    "title": "libxslt: Use-After-Free in libxslt (xsltGetInheritedNsList)"
-                  },
-                  {
-                    "cve": "CVE-2025-24855",
-                    "cvss": {
-                      "nvd": {
-                        "v3score": "7.8",
-                        "v3vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"
-                      },
-                      "redhat": {
-                        "v3score": "7.8",
-                        "v3vector": "CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:N/I:H/A:H"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-416"
-                    ],
-                    "description": "numbers.c in libxslt before 1.1.43 has a use-after-free because, in nested XPath evaluations, an XPath context node can be modified but never restored. This is related to xsltNumberFormatGetValue, xsltEvalXPathPredicate, xsltEvalXPathStringNs, and xsltComputeSortResultInternal.",
-                    "diffID": "sha256:9664c8c85da49d2cedf85c6b8af0e128318580b95b277b87593a4f75886148af",
-                    "fixedVersions": [
-                      "1.1.34-4+deb11u2"
-                    ],
-                    "installedVersion": "1.1.34-4+deb11u1",
-                    "packageName": "libxslt1.1",
-                    "purl": "pkg:deb/debian/libxslt1.1@1.1.34-4%2Bdeb11u1?arch=amd64&distro=debian-11.9",
-                    "references": [
-                      "https://access.redhat.com/errata/RHSA-2025:3615",
-                      "https://access.redhat.com/security/cve/CVE-2025-24855",
-                      "https://bugzilla.redhat.com/2352483",
-                      "https://bugzilla.redhat.com/2352484",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2352483",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2352484",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-55549",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-24855",
-                      "https://errata.almalinux.org/8/ALSA-2025-3615.html",
-                      "https://errata.rockylinux.org/RLSA-2025:3615",
-                      "https://gitlab.gnome.org/GNOME/libxslt/-/issues/128",
-                      "https://linux.oracle.com/cve/CVE-2025-24855.html",
-                      "https://linux.oracle.com/errata/ELSA-2025-7496.html",
-                      "https://lists.debian.org/debian-lts-announce/2025/03/msg00015.html",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2025-24855",
-                      "https://ubuntu.com/security/notices/USN-7361-1",
-                      "https://ubuntu.com/security/notices/USN-7787-1",
-                      "https://www.cve.org/CVERecord?id=CVE-2025-24855"
-                    ],
-                    "severity": "HIGH",
-                    "suppressed": false,
-                    "title": "libxslt: Use-After-Free in libxslt numbers.c"
-                  },
-                  {
-                    "cve": "CVE-2025-7424",
-                    "cvss": {
-                      "nvd": {
-                        "v3score": "7.5",
-                        "v3vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"
-                      },
-                      "redhat": {
-                        "v3score": "7.5",
-                        "v3vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-843"
-                    ],
-                    "description": "A flaw was found in the libxslt library. The same memory field, psvi, is used for both stylesheet and input data, which can lead to type confusion during XML transformations. This vulnerability allows an attacker to crash the application or corrupt memory. In some cases, it may lead to denial of service or unexpected behavior.",
-                    "diffID": "sha256:9664c8c85da49d2cedf85c6b8af0e128318580b95b277b87593a4f75886148af",
-                    "fixedVersions": [
-                      "1.1.34-4+deb11u3"
-                    ],
-                    "installedVersion": "1.1.34-4+deb11u1",
-                    "packageName": "libxslt1.1",
-                    "purl": "pkg:deb/debian/libxslt1.1@1.1.34-4%2Bdeb11u1?arch=amd64&distro=debian-11.9",
-                    "references": [
-                      "http://seclists.org/fulldisclosure/2025/Aug/0",
-                      "http://seclists.org/fulldisclosure/2025/Jul/30",
-                      "http://seclists.org/fulldisclosure/2025/Jul/32",
-                      "http://seclists.org/fulldisclosure/2025/Jul/33",
-                      "http://seclists.org/fulldisclosure/2025/Jul/35",
-                      "http://seclists.org/fulldisclosure/2025/Jul/37",
-                      "http://www.openwall.com/lists/oss-security/2025/07/11/2",
-                      "https://access.redhat.com/security/cve/CVE-2025-7424",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2379228",
-                      "https://lists.debian.org/debian-lts-announce/2025/09/msg00024.html",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2025-7424",
-                      "https://ubuntu.com/security/notices/USN-7945-1",
-                      "https://www.cve.org/CVERecord?id=CVE-2025-7424"
-                    ],
-                    "severity": "HIGH",
-                    "suppressed": false,
-                    "title": "libxslt: Type confusion in xmlNode.psvi between stylesheet and source nodes"
-                  },
-                  {
-                    "cve": "CVE-2025-7425",
-                    "cvss": {
-                      "redhat": {
-                        "v3score": "7.8",
-                        "v3vector": "CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:N/I:H/A:H"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-416"
-                    ],
-                    "description": "A flaw was found in libxslt where the attribute type, atype, flags are modified in a way that corrupts internal memory management. When XSLT functions, such as the key() process, result in tree fragments, this corruption prevents the proper cleanup of ID attributes. As a result, the system may access freed memory, causing crashes or enabling attackers to trigger heap corruption.",
-                    "diffID": "sha256:9664c8c85da49d2cedf85c6b8af0e128318580b95b277b87593a4f75886148af",
-                    "installedVersion": "1.1.34-4+deb11u1",
-                    "packageName": "libxslt1.1",
-                    "purl": "pkg:deb/debian/libxslt1.1@1.1.34-4%2Bdeb11u1?arch=amd64&distro=debian-11.9",
-                    "references": [
-                      "http://seclists.org/fulldisclosure/2025/Aug/0",
-                      "http://seclists.org/fulldisclosure/2025/Jul/30",
-                      "http://seclists.org/fulldisclosure/2025/Jul/32",
-                      "http://seclists.org/fulldisclosure/2025/Jul/35",
-                      "http://seclists.org/fulldisclosure/2025/Jul/37",
-                      "http://www.openwall.com/lists/oss-security/2025/07/11/2",
-                      "https://access.redhat.com/errata/RHSA-2025:12447",
-                      "https://access.redhat.com/errata/RHSA-2025:12450",
-                      "https://access.redhat.com/errata/RHSA-2025:13267",
-                      "https://access.redhat.com/errata/RHSA-2025:13308",
-                      "https://access.redhat.com/errata/RHSA-2025:13309",
-                      "https://access.redhat.com/errata/RHSA-2025:13310",
-                      "https://access.redhat.com/errata/RHSA-2025:13311",
-                      "https://access.redhat.com/errata/RHSA-2025:13312",
-                      "https://access.redhat.com/errata/RHSA-2025:13313",
-                      "https://access.redhat.com/errata/RHSA-2025:13314",
-                      "https://access.redhat.com/errata/RHSA-2025:13335",
-                      "https://access.redhat.com/errata/RHSA-2025:13464",
-                      "https://access.redhat.com/errata/RHSA-2025:13622",
-                      "https://access.redhat.com/errata/RHSA-2025:14059",
-                      "https://access.redhat.com/errata/RHSA-2025:14396",
-                      "https://access.redhat.com/errata/RHSA-2025:14818",
-                      "https://access.redhat.com/errata/RHSA-2025:14819",
-                      "https://access.redhat.com/errata/RHSA-2025:14853",
-                      "https://access.redhat.com/errata/RHSA-2025:14858",
-                      "https://access.redhat.com/errata/RHSA-2025:15308",
-                      "https://access.redhat.com/errata/RHSA-2025:15672",
-                      "https://access.redhat.com/errata/RHSA-2025:15827",
-                      "https://access.redhat.com/errata/RHSA-2025:15828",
-                      "https://access.redhat.com/errata/RHSA-2025:18219",
-                      "https://access.redhat.com/errata/RHSA-2025:21885",
-                      "https://access.redhat.com/errata/RHSA-2025:21913",
-                      "https://access.redhat.com/errata/RHSA-2026:0934",
-                      "https://access.redhat.com/security/cve/CVE-2025-7425",
-                      "https://bugzilla.redhat.com/2379274",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2379274",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-7425",
-                      "https://errata.almalinux.org/8/ALSA-2025-12450.html",
-                      "https://errata.rockylinux.org/RLSA-2025:12447",
-                      "https://gitlab.gnome.org/GNOME/libxslt/-/issues/140",
-                      "https://linux.oracle.com/cve/CVE-2025-7425.html",
-                      "https://linux.oracle.com/errata/ELSA-2025-13464.html",
-                      "https://lists.debian.org/debian-lts-announce/2025/09/msg00035.html",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2025-7425",
-                      "https://ubuntu.com/security/notices/USN-7852-1",
-                      "https://ubuntu.com/security/notices/USN-7852-2",
-                      "https://ubuntu.com/security/notices/USN-7896-1",
-                      "https://www.cve.org/CVERecord?id=CVE-2025-7425"
-                    ],
-                    "severity": "HIGH",
-                    "suppressed": false,
-                    "title": "libxslt: Heap Use-After-Free in libxslt caused by atype corruption in xmlAttrPtr"
-                  },
-                  {
-                    "cve": "CVE-2023-40403",
-                    "cvss": {
-                      "nvd": {
-                        "v3score": "6.5",
-                        "v3vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N"
-                      },
-                      "redhat": {
-                        "v3score": "6.5",
-                        "v3vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N"
-                      }
-                    },
-                    "description": "The issue was addressed with improved memory handling. This issue is fixed in macOS Ventura 13.6, tvOS 17, iOS 16.7 and iPadOS 16.7, macOS Monterey 12.7, watchOS 10, iOS 17 and iPadOS 17, macOS Sonoma 14. Processing web content may disclose sensitive information.",
-                    "diffID": "sha256:9664c8c85da49d2cedf85c6b8af0e128318580b95b277b87593a4f75886148af",
-                    "fixedVersions": [
-                      "1.1.34-4+deb11u3"
-                    ],
-                    "installedVersion": "1.1.34-4+deb11u1",
-                    "packageName": "libxslt1.1",
-                    "purl": "pkg:deb/debian/libxslt1.1@1.1.34-4%2Bdeb11u1?arch=amd64&distro=debian-11.9",
-                    "references": [
-                      "http://seclists.org/fulldisclosure/2023/Oct/10",
-                      "http://seclists.org/fulldisclosure/2023/Oct/3",
-                      "http://seclists.org/fulldisclosure/2023/Oct/4",
-                      "http://seclists.org/fulldisclosure/2023/Oct/5",
-                      "http://seclists.org/fulldisclosure/2023/Oct/6",
-                      "http://seclists.org/fulldisclosure/2023/Oct/8",
-                      "http://seclists.org/fulldisclosure/2023/Oct/9",
-                      "https://access.redhat.com/errata/RHSA-2025:8676",
-                      "https://access.redhat.com/security/cve/CVE-2023-40403",
-                      "https://bugs.chromium.org/p/chromium/issues/detail?id=1356211",
-                      "https://bugzilla.gnome.org/show_bug.cgi?id=751621",
-                      "https://bugzilla.redhat.com/2349766",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2349766",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-40403",
-                      "https://errata.almalinux.org/8/ALSA-2025-8676.html",
-                      "https://errata.rockylinux.org/RLSA-2025:8676",
-                      "https://gitlab.gnome.org/GNOME/libxslt/-/issues/94",
-                      "https://linux.oracle.com/cve/CVE-2023-40403.html",
-                      "https://linux.oracle.com/errata/ELSA-2025-8676.html",
-                      "https://lists.debian.org/debian-lts-announce/2025/09/msg00024.html",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2023-40403",
-                      "https://support.apple.com/en-us/HT213927",
-                      "https://support.apple.com/en-us/HT213931",
-                      "https://support.apple.com/en-us/HT213932",
-                      "https://support.apple.com/en-us/HT213936",
-                      "https://support.apple.com/en-us/HT213937",
-                      "https://support.apple.com/en-us/HT213938",
-                      "https://support.apple.com/en-us/HT213940",
-                      "https://support.apple.com/kb/HT213931",
-                      "https://support.apple.com/kb/HT213932",
-                      "https://support.apple.com/kb/HT213936",
-                      "https://support.apple.com/kb/HT213937",
-                      "https://support.apple.com/kb/HT213938",
-                      "https://support.apple.com/kb/HT213940",
-                      "https://ubuntu.com/security/notices/USN-7600-1",
-                      "https://www.cve.org/CVERecord?id=CVE-2023-40403"
-                    ],
-                    "severity": "MEDIUM",
-                    "suppressed": false,
-                    "title": "libxslt: Processing web content may disclose sensitive information"
-                  },
-                  {
-                    "cve": "CVE-2025-10911",
-                    "cvss": {
-                      "redhat": {
-                        "v3score": "5.5",
-                        "v3vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-825"
-                    ],
-                    "description": "A use-after-free vulnerability was found in libxslt while parsing xsl nodes that may lead to the dereference of expired pointers and application crash.",
-                    "diffID": "sha256:9664c8c85da49d2cedf85c6b8af0e128318580b95b277b87593a4f75886148af",
-                    "installedVersion": "1.1.34-4+deb11u1",
-                    "packageName": "libxslt1.1",
-                    "purl": "pkg:deb/debian/libxslt1.1@1.1.34-4%2Bdeb11u1?arch=amd64&distro=debian-11.9",
-                    "references": [
-                      "https://access.redhat.com/security/cve/CVE-2025-10911",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2397838",
-                      "https://gitlab.gnome.org/GNOME/libxslt/-/issues/144",
-                      "https://gitlab.gnome.org/GNOME/libxslt/-/merge_requests/77",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2025-10911",
-                      "https://www.cve.org/CVERecord?id=CVE-2025-10911"
-                    ],
-                    "severity": "MEDIUM",
-                    "suppressed": false,
-                    "title": "libxslt: use-after-free with key data stored cross-RVT"
-                  },
-                  {
-                    "cve": "CVE-2015-9019",
-                    "cvss": {
-                      "nvd": {
-                        "v3score": "5.3",
-                        "v3vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N"
-                      },
-                      "redhat": {
-                        "v3score": "4",
-                        "v3vector": "CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-330"
-                    ],
-                    "description": "In libxslt 1.1.29 and earlier, the EXSLT math.random function was not initialized with a random seed during startup, which could cause usage of this function to produce predictable outputs.",
-                    "diffID": "sha256:9664c8c85da49d2cedf85c6b8af0e128318580b95b277b87593a4f75886148af",
-                    "installedVersion": "1.1.34-4+deb11u1",
-                    "packageName": "libxslt1.1",
-                    "purl": "pkg:deb/debian/libxslt1.1@1.1.34-4%2Bdeb11u1?arch=amd64&distro=debian-11.9",
-                    "references": [
-                      "https://access.redhat.com/security/cve/CVE-2015-9019",
-                      "https://bugzilla.gnome.org/show_bug.cgi?id=758400",
-                      "https://bugzilla.suse.com/show_bug.cgi?id=934119",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2015-9019",
-                      "https://www.cve.org/CVERecord?id=CVE-2015-9019"
-                    ],
-                    "severity": "LOW",
-                    "suppressed": false,
-                    "title": "libxslt: math.random() in xslt uses unseeded randomness"
-                  },
-                  {
-                    "cve": "CVE-2025-11731",
-                    "cvss": {
-                      "redhat": {
-                        "v3score": "3.1",
-                        "v3vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-843"
-                    ],
-                    "description": "A flaw was found in the exsltFuncResultComp() function of libxslt, which handles EXSLT <func:result> elements during stylesheet parsing. Due to improper type handling, the function may treat an XML document node as a regular XML element node, resulting in a type confusion. This can cause unexpected memory reads and potential crashes. While difficult to exploit, the flaw could lead to application instability or denial of service.",
-                    "diffID": "sha256:9664c8c85da49d2cedf85c6b8af0e128318580b95b277b87593a4f75886148af",
-                    "installedVersion": "1.1.34-4+deb11u1",
-                    "packageName": "libxslt1.1",
-                    "purl": "pkg:deb/debian/libxslt1.1@1.1.34-4%2Bdeb11u1?arch=amd64&distro=debian-11.9",
-                    "references": [
-                      "https://access.redhat.com/security/cve/CVE-2025-11731",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2403688",
-                      "https://gitlab.gnome.org/GNOME/libxslt/-/merge_requests/78",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2025-11731",
-                      "https://www.cve.org/CVERecord?id=CVE-2025-11731"
-                    ],
-                    "severity": "LOW",
-                    "suppressed": false,
-                    "title": "libxslt: Type Confusion in exsltFuncResultCompfunction of libxslt"
-                  },
-                  {
-                    "cve": "CVE-2022-4899",
-                    "cvss": {
-                      "ghsa": {
-                        "v3score": "7.5",
-                        "v3vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"
-                      },
-                      "nvd": {
-                        "v3score": "7.5",
-                        "v3vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"
-                      },
-                      "redhat": {
-                        "v3score": "7.5",
-                        "v3vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-400"
-                    ],
-                    "description": "A vulnerability was found in zstd v1.4.10, where an attacker can supply empty string as an argument to the command line tool to cause buffer overrun.",
-                    "diffID": "sha256:420179ad2efafbf953a0c75f68a4c9dfaf38a98643df97d415bce49b179895f7",
-                    "installedVersion": "1.4.8+dfsg-2.1",
-                    "packageName": "libzstd1",
-                    "purl": "pkg:deb/debian/libzstd1@1.4.8%2Bdfsg-2.1?arch=amd64&distro=debian-11.9",
-                    "references": [
-                      "https://access.redhat.com/errata/RHSA-2024:0894",
-                      "https://access.redhat.com/security/cve/CVE-2022-4899",
-                      "https://bugzilla.redhat.com/2179864",
-                      "https://bugzilla.redhat.com/2188109",
-                      "https://bugzilla.redhat.com/2188113",
-                      "https://bugzilla.redhat.com/2188115",
-                      "https://bugzilla.redhat.com/2188116",
-                      "https://bugzilla.redhat.com/2188117",
-                      "https://bugzilla.redhat.com/2188118",
-                      "https://bugzilla.redhat.com/2188119",
-                      "https://bugzilla.redhat.com/2188120",
-                      "https://bugzilla.redhat.com/2188121",
-                      "https://bugzilla.redhat.com/2188122",
-                      "https://bugzilla.redhat.com/2188123",
-                      "https://bugzilla.redhat.com/2188124",
-                      "https://bugzilla.redhat.com/2188125",
-                      "https://bugzilla.redhat.com/2188127",
-                      "https://bugzilla.redhat.com/2188128",
-                      "https://bugzilla.redhat.com/2188129",
-                      "https://bugzilla.redhat.com/2188130",
-                      "https://bugzilla.redhat.com/2188131",
-                      "https://bugzilla.redhat.com/2188132",
-                      "https://bugzilla.redhat.com/2224211",
-                      "https://bugzilla.redhat.com/2224212",
-                      "https://bugzilla.redhat.com/2224213",
-                      "https://bugzilla.redhat.com/2224214",
-                      "https://bugzilla.redhat.com/2224215",
-                      "https://bugzilla.redhat.com/2224216",
-                      "https://bugzilla.redhat.com/2224217",
-                      "https://bugzilla.redhat.com/2224218",
-                      "https://bugzilla.redhat.com/2224219",
-                      "https://bugzilla.redhat.com/2224220",
-                      "https://bugzilla.redhat.com/2224221",
-                      "https://bugzilla.redhat.com/2224222",
-                      "https://bugzilla.redhat.com/2245014",
-                      "https://bugzilla.redhat.com/2245015",
-                      "https://bugzilla.redhat.com/2245016",
-                      "https://bugzilla.redhat.com/2245017",
-                      "https://bugzilla.redhat.com/2245018",
-                      "https://bugzilla.redhat.com/2245019",
-                      "https://bugzilla.redhat.com/2245020",
-                      "https://bugzilla.redhat.com/2245021",
-                      "https://bugzilla.redhat.com/2245022",
-                      "https://bugzilla.redhat.com/2245023",
-                      "https://bugzilla.redhat.com/2245024",
-                      "https://bugzilla.redhat.com/2245026",
-                      "https://bugzilla.redhat.com/2245027",
-                      "https://bugzilla.redhat.com/2245028",
-                      "https://bugzilla.redhat.com/2245029",
-                      "https://bugzilla.redhat.com/2245030",
-                      "https://bugzilla.redhat.com/2245031",
-                      "https://bugzilla.redhat.com/2245032",
-                      "https://bugzilla.redhat.com/2245033",
-                      "https://bugzilla.redhat.com/2245034",
-                      "https://bugzilla.redhat.com/2258771",
-                      "https://bugzilla.redhat.com/2258772",
-                      "https://bugzilla.redhat.com/2258773",
-                      "https://bugzilla.redhat.com/2258774",
-                      "https://bugzilla.redhat.com/2258775",
-                      "https://bugzilla.redhat.com/2258776",
-                      "https://bugzilla.redhat.com/2258777",
-                      "https://bugzilla.redhat.com/2258778",
-                      "https://bugzilla.redhat.com/2258779",
-                      "https://bugzilla.redhat.com/2258780",
-                      "https://bugzilla.redhat.com/2258781",
-                      "https://bugzilla.redhat.com/2258782",
-                      "https://bugzilla.redhat.com/2258783",
-                      "https://bugzilla.redhat.com/2258784",
-                      "https://bugzilla.redhat.com/2258785",
-                      "https://bugzilla.redhat.com/2258787",
-                      "https://bugzilla.redhat.com/2258788",
-                      "https://bugzilla.redhat.com/2258789",
-                      "https://bugzilla.redhat.com/2258790",
-                      "https://bugzilla.redhat.com/2258791",
-                      "https://bugzilla.redhat.com/2258792",
-                      "https://bugzilla.redhat.com/2258793",
-                      "https://bugzilla.redhat.com/2258794",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2179864",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2188109",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2188113",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2188115",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2188116",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2188117",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2188118",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2188119",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2188120",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2188121",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2188122",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2188123",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2188124",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2188125",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2188127",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2188128",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2188129",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2188130",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2188131",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2188132",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2224211",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2224212",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2224213",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2224214",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2224215",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2224216",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2224217",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2224218",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2224219",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2224220",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2224221",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2224222",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2245014",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2245015",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2245016",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2245017",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2245018",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2245019",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2245020",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2245021",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2245022",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2245023",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2245024",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2245026",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2245027",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2245028",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2245029",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2245030",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2245031",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2245032",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2245033",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2245034",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2258771",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2258772",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2258773",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2258774",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2258775",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2258776",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2258777",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2258778",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2258779",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2258780",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2258781",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2258782",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2258783",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2258784",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2258785",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2258787",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2258788",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2258789",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2258790",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2258791",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2258792",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2258793",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2258794",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4899",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-21911",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-21919",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-21920",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-21929",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-21933",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-21935",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-21940",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-21945",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-21946",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-21947",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-21953",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-21955",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-21962",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-21966",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-21972",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-21976",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-21977",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-21980",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-21982",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-22005",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-22007",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-22008",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-22032",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-22033",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-22038",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-22046",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-22048",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-22053",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-22054",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-22056",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-22057",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-22058",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-22059",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-22064",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-22065",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-22066",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-22068",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-22070",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-22078",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-22079",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-22084",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-22092",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-22097",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-22103",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-22104",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-22110",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-22111",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-22112",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-22113",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-22114",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-22115",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-20960",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-20961",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-20962",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-20963",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-20964",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-20965",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-20966",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-20967",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-20968",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-20969",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-20970",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-20971",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-20972",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-20973",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-20974",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-20976",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-20977",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-20978",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-20981",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-20982",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-20983",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-20984",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-20985",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-20993",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-21049",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-21050",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-21051",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-21052",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-21053",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-21055",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-21056",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-21057",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-21061",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-21137",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-21200",
-                      "https://errata.almalinux.org/8/ALSA-2024-0894.html",
-                      "https://errata.rockylinux.org/RLSA-2024:0894",
-                      "https://github.com/facebook/zstd",
-                      "https://github.com/facebook/zstd/issues/3200",
-                      "https://github.com/facebook/zstd/pull/3220",
-                      "https://github.com/pypa/advisory-database/tree/main/vulns/zstd/PYSEC-2023-121.yaml",
-                      "https://github.com/sergey-dryabzhinsky/python-zstd/commit/c8a619aebdbd6b838fbfef6e19325a70f631a4c6",
-                      "https://linux.oracle.com/cve/CVE-2022-4899.html",
-                      "https://linux.oracle.com/errata/ELSA-2024-1141.html",
-                      "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/C63HAGVLQA6FJNDCHR7CNZZL6VSLILB2/",
-                      "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JEHRBBYYTPA4DETOM5XAKGCP37NUTLOA/",
-                      "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/QYLDK6ODVC4LJSDULLX6Q2YHTFOWABCN/",
-                      "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/C63HAGVLQA6FJNDCHR7CNZZL6VSLILB2",
-                      "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/JEHRBBYYTPA4DETOM5XAKGCP37NUTLOA",
-                      "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/QYLDK6ODVC4LJSDULLX6Q2YHTFOWABCN",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2022-4899",
-                      "https://security.netapp.com/advisory/ntap-20230725-0005",
-                      "https://security.netapp.com/advisory/ntap-20230725-0005/",
-                      "https://www.cve.org/CVERecord?id=CVE-2022-4899"
-                    ],
-                    "severity": "HIGH",
-                    "suppressed": false,
-                    "title": "zstd: mysql: buffer overrun in util.c"
-                  },
-                  {
-                    "cve": "CVE-2023-4641",
-                    "cvss": {
-                      "nvd": {
-                        "v3score": "5.5",
-                        "v3vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N"
-                      },
-                      "redhat": {
-                        "v3score": "4.7",
-                        "v3vector": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-303",
-                      "CWE-287"
-                    ],
-                    "description": "A flaw was found in shadow-utils. When asking for a new password, shadow-utils asks the password twice. If the password fails on the second attempt, shadow-utils fails in cleaning the buffer used to store the first entry. This may allow an attacker with enough access to retrieve the password from the memory.",
-                    "diffID": "sha256:420179ad2efafbf953a0c75f68a4c9dfaf38a98643df97d415bce49b179895f7",
-                    "fixedVersions": [
-                      "1:4.8.1-1+deb11u1"
-                    ],
-                    "installedVersion": "1:4.8.1-1",
-                    "packageName": "login",
-                    "purl": "pkg:deb/debian/login@4.8.1-1?arch=amd64&distro=debian-11.9&epoch=1",
-                    "references": [
-                      "https://access.redhat.com/errata/RHSA-2023:6632",
-                      "https://access.redhat.com/errata/RHSA-2023:7112",
-                      "https://access.redhat.com/errata/RHSA-2024:0417",
-                      "https://access.redhat.com/errata/RHSA-2024:2577",
-                      "https://access.redhat.com/security/cve/CVE-2023-4641",
-                      "https://bugzilla.redhat.com/2215945",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2215945",
-                      "https://errata.almalinux.org/8/ALSA-2023-7112.html",
-                      "https://linux.oracle.com/cve/CVE-2023-4641.html",
-                      "https://linux.oracle.com/errata/ELSA-2023-7112.html",
-                      "https://lists.debian.org/debian-lts-announce/2025/04/msg00026.html",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2023-4641",
-                      "https://ubuntu.com/security/notices/USN-6640-1",
-                      "https://www.cve.org/CVERecord?id=CVE-2023-4641"
-                    ],
-                    "severity": "MEDIUM",
-                    "suppressed": false,
-                    "title": "shadow-utils: possible password leak during passwd(1) change"
-                  },
-                  {
-                    "cve": "CVE-2007-5686",
-                    "cvss": {
-                      "nvd": {
-                        "v3score": "0",
-                        "v3vector": ""
-                      }
-                    },
-                    "cwes": [
-                      "CWE-264"
-                    ],
-                    "description": "initscripts in rPath Linux 1 sets insecure permissions for the /var/log/btmp file, which allows local users to obtain sensitive information regarding authentication attempts.  NOTE: because sshd detects the insecure permissions and does not log certain events, this also prevents sshd from logging failed authentication attempts by remote attackers.",
-                    "diffID": "sha256:420179ad2efafbf953a0c75f68a4c9dfaf38a98643df97d415bce49b179895f7",
-                    "installedVersion": "1:4.8.1-1",
-                    "packageName": "login",
-                    "purl": "pkg:deb/debian/login@4.8.1-1?arch=amd64&distro=debian-11.9&epoch=1",
-                    "references": [
-                      "http://secunia.com/advisories/27215",
-                      "http://www.securityfocus.com/archive/1/482129/100/100/threaded",
-                      "http://www.securityfocus.com/archive/1/482857/100/0/threaded",
-                      "http://www.securityfocus.com/bid/26048",
-                      "http://www.vupen.com/english/advisories/2007/3474",
-                      "https://issues.rpath.com/browse/RPL-1825"
-                    ],
-                    "severity": "LOW",
-                    "suppressed": false,
-                    "title": "initscripts in rPath Linux 1 sets insecure permissions for the /var/lo ..."
-                  },
-                  {
-                    "cve": "CVE-2013-4235",
-                    "cvss": {
-                      "nvd": {
-                        "v3score": "4.7",
-                        "v3vector": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:N"
-                      },
-                      "redhat": {
-                        "v3score": "4.4",
-                        "v3vector": "CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:N/I:H/A:N"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-367"
-                    ],
-                    "description": "shadow: TOCTOU (time-of-check time-of-use) race condition when copying and removing directory trees",
-                    "diffID": "sha256:420179ad2efafbf953a0c75f68a4c9dfaf38a98643df97d415bce49b179895f7",
-                    "installedVersion": "1:4.8.1-1",
-                    "packageName": "login",
-                    "purl": "pkg:deb/debian/login@4.8.1-1?arch=amd64&distro=debian-11.9&epoch=1",
-                    "references": [
-                      "https://access.redhat.com/security/cve/CVE-2013-4235",
-                      "https://access.redhat.com/security/cve/cve-2013-4235",
-                      "https://bugs.launchpad.net/ubuntu/+source/shadow/+bug/1998169",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2013-4235",
-                      "https://github.com/shadow-maint/shadow/issues/317",
-                      "https://github.com/shadow-maint/shadow/pull/545",
-                      "https://lists.apache.org/thread.html/rf9fa47ab66495c78bb4120b0754dd9531ca2ff0430f6685ac9b07772%40%3Cdev.mina.apache.org%3E",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2013-4235",
-                      "https://security-tracker.debian.org/tracker/CVE-2013-4235",
-                      "https://security.gentoo.org/glsa/202210-26",
-                      "https://ubuntu.com/security/notices/USN-5745-1",
-                      "https://ubuntu.com/security/notices/USN-5745-2",
-                      "https://www.cve.org/CVERecord?id=CVE-2013-4235"
-                    ],
-                    "severity": "LOW",
-                    "suppressed": false,
-                    "title": "shadow-utils: TOCTOU race conditions by copying and removing directory trees"
-                  },
-                  {
-                    "cve": "CVE-2023-29383",
-                    "cvss": {
-                      "nvd": {
-                        "v3score": "3.3",
-                        "v3vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N"
-                      },
-                      "redhat": {
-                        "v3score": "5.5",
-                        "v3vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-74",
-                      "CWE-125"
-                    ],
-                    "description": "In Shadow 4.13, it is possible to inject control characters into fields provided to the SUID program chfn (change finger). Although it is not possible to exploit this directly (e.g., adding a new user fails because \\n is in the block list), it is possible to misrepresent the /etc/passwd file when viewed. Use of \\r manipulations and Unicode characters to work around blocking of the : character make it possible to give the impression that a new user has been added. In other words, an adversary may be able to convince a system administrator to take the system offline (an indirect, social-engineered denial of service) by demonstrating that \"cat /etc/passwd\" shows a rogue user account.",
-                    "diffID": "sha256:420179ad2efafbf953a0c75f68a4c9dfaf38a98643df97d415bce49b179895f7",
-                    "fixedVersions": [
-                      "1:4.8.1-1+deb11u1"
-                    ],
-                    "installedVersion": "1:4.8.1-1",
-                    "packageName": "login",
-                    "purl": "pkg:deb/debian/login@4.8.1-1?arch=amd64&distro=debian-11.9&epoch=1",
-                    "references": [
-                      "https://access.redhat.com/security/cve/CVE-2023-29383",
-                      "https://github.com/shadow-maint/shadow/commit/e5905c4b84d4fb90aefcd96ee618411ebfac663d",
-                      "https://github.com/shadow-maint/shadow/pull/687",
-                      "https://lists.debian.org/debian-lts-announce/2025/04/msg00026.html",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2023-29383",
-                      "https://www.cve.org/CVERecord?id=CVE-2023-29383",
-                      "https://www.trustwave.com/en-us/resources/blogs/spiderlabs-blog/cve-2023-29383-abusing-linux-chfn-to-misrepresent-etc-passwd/",
-                      "https://www.trustwave.com/en-us/resources/security-resources/security-advisories/?fid=31797"
-                    ],
-                    "severity": "LOW",
-                    "suppressed": false,
-                    "title": "shadow: Improper input validation in shadow-utils package utility chfn"
-                  },
-                  {
-                    "cve": "CVE-2024-56433",
-                    "cvss": {
-                      "redhat": {
-                        "v3score": "3.6",
-                        "v3vector": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:N"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-1188"
-                    ],
-                    "description": "shadow-utils (aka shadow) 4.4 through 4.17.0 establishes a default /etc/subuid behavior (e.g., uid 100000 through 165535 for the first user account) that can realistically conflict with the uids of users defined on locally administered networks, potentially leading to account takeover, e.g., by leveraging newuidmap for access to an NFS home directory (or same-host resources in the case of remote logins by these local network users). NOTE: it may also be argued that system administrators should not have assigned uids, within local networks, that are within the range that can occur in /etc/subuid.",
-                    "diffID": "sha256:420179ad2efafbf953a0c75f68a4c9dfaf38a98643df97d415bce49b179895f7",
-                    "installedVersion": "1:4.8.1-1",
-                    "packageName": "login",
-                    "purl": "pkg:deb/debian/login@4.8.1-1?arch=amd64&distro=debian-11.9&epoch=1",
-                    "references": [
-                      "https://access.redhat.com/errata/RHSA-2025:20145",
-                      "https://access.redhat.com/security/cve/CVE-2024-56433",
-                      "https://bugzilla.redhat.com/2334165",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2334165",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-56433",
-                      "https://errata.almalinux.org/10/ALSA-2025-20145.html",
-                      "https://errata.rockylinux.org/RLSA-2025:20559",
-                      "https://github.com/shadow-maint/shadow/blob/e2512d5741d4a44bdd81a8c2d0029b6222728cf0/etc/login.defs#L238-L241",
-                      "https://github.com/shadow-maint/shadow/issues/1157",
-                      "https://github.com/shadow-maint/shadow/releases/tag/4.4",
-                      "https://linux.oracle.com/cve/CVE-2024-56433.html",
-                      "https://linux.oracle.com/errata/ELSA-2025-20559-0.html",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2024-56433",
-                      "https://www.cve.org/CVERecord?id=CVE-2024-56433"
-                    ],
-                    "severity": "LOW",
-                    "suppressed": false,
-                    "title": "shadow-utils: Default subordinate ID configuration in /etc/login.defs could lead to compromise"
-                  },
-                  {
-                    "cve": "TEMP-0628843-DBAD28",
-                    "diffID": "sha256:420179ad2efafbf953a0c75f68a4c9dfaf38a98643df97d415bce49b179895f7",
-                    "installedVersion": "1:4.8.1-1",
-                    "packageName": "login",
-                    "purl": "pkg:deb/debian/login@4.8.1-1?arch=amd64&distro=debian-11.9&epoch=1",
-                    "severity": "LOW",
-                    "suppressed": false,
-                    "title": "[more related to CVE-2005-4890]"
-                  },
-                  {
-                    "cve": "CVE-2022-1304",
-                    "cvss": {
-                      "nvd": {
-                        "v3score": "7.8",
-                        "v3vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H"
-                      },
-                      "redhat": {
-                        "v3score": "5.8",
-                        "v3vector": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:H"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-125",
-                      "CWE-787"
-                    ],
-                    "description": "An out-of-bounds read/write vulnerability was found in e2fsprogs 1.46.5. This issue leads to a segmentation fault and possibly arbitrary code execution via a specially crafted filesystem.",
-                    "diffID": "sha256:420179ad2efafbf953a0c75f68a4c9dfaf38a98643df97d415bce49b179895f7",
-                    "fixedVersions": [
-                      "1.46.2-2+deb11u1"
-                    ],
-                    "installedVersion": "1.46.2-2",
-                    "packageName": "logsave",
-                    "purl": "pkg:deb/debian/logsave@1.46.2-2?arch=amd64&distro=debian-11.9",
-                    "references": [
-                      "https://access.redhat.com/errata/RHSA-2022:7720",
-                      "https://access.redhat.com/security/cve/CVE-2022-1304",
-                      "https://bugzilla.redhat.com/2069726",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2069726",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-1304",
-                      "https://errata.almalinux.org/8/ALSA-2022-7720.html",
-                      "https://errata.rockylinux.org/RLSA-2022:8361",
-                      "https://linux.oracle.com/cve/CVE-2022-1304.html",
-                      "https://linux.oracle.com/errata/ELSA-2024-12731.html",
-                      "https://lists.debian.org/debian-lts-announce/2024/10/msg00001.html",
-                      "https://marc.info/?l=linux-ext4&m=165056234501732&w=2",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2022-1304",
-                      "https://security.netapp.com/advisory/ntap-20241122-0010/",
-                      "https://ubuntu.com/security/notices/USN-5464-1",
-                      "https://www.cve.org/CVERecord?id=CVE-2022-1304"
-                    ],
-                    "severity": "HIGH",
-                    "suppressed": false,
-                    "title": "e2fsprogs: out-of-bounds read/write via crafted filesystem"
-                  },
-                  {
-                    "cve": "CVE-2025-14104",
-                    "cvss": {
-                      "redhat": {
-                        "v3score": "6.1",
-                        "v3vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-125"
-                    ],
-                    "description": "A flaw was found in util-linux. This vulnerability allows a heap buffer overread when processing 256-byte usernames, specifically within the `setpwnam()` function, affecting SUID (Set User ID) login-utils utilities writing to the password database.",
-                    "diffID": "sha256:420179ad2efafbf953a0c75f68a4c9dfaf38a98643df97d415bce49b179895f7",
-                    "installedVersion": "2.36.1-8+deb11u2",
-                    "packageName": "mount",
-                    "purl": "pkg:deb/debian/mount@2.36.1-8%2Bdeb11u2?arch=amd64&distro=debian-11.9",
-                    "references": [
-                      "https://access.redhat.com/errata/RHSA-2026:1696",
-                      "https://access.redhat.com/errata/RHSA-2026:1852",
-                      "https://access.redhat.com/errata/RHSA-2026:1913",
-                      "https://access.redhat.com/security/cve/CVE-2025-14104",
-                      "https://bugzilla.redhat.com/2419369",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2419369",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-14104",
-                      "https://errata.almalinux.org/10/ALSA-2026-1696.html",
-                      "https://errata.rockylinux.org/RLSA-2026:1913",
-                      "https://linux.oracle.com/cve/CVE-2025-14104.html",
-                      "https://linux.oracle.com/errata/ELSA-2026-1913.html",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2025-14104",
-                      "https://www.cve.org/CVERecord?id=CVE-2025-14104"
-                    ],
-                    "severity": "MEDIUM",
-                    "suppressed": false,
-                    "title": "util-linux: util-linux: Heap buffer overread in setpwnam() when processing 256-byte usernames"
-                  },
-                  {
-                    "cve": "CVE-2022-0563",
-                    "cvss": {
-                      "nvd": {
-                        "v3score": "5.5",
-                        "v3vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N"
-                      },
-                      "redhat": {
-                        "v3score": "5.5",
-                        "v3vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-209"
-                    ],
-                    "description": "A flaw was found in the util-linux chfn and chsh utilities when compiled with Readline support. The Readline library uses an \"INPUTRC\" environment variable to get a path to the library config file. When the library cannot parse the specified file, it prints an error message containing data from the file. This flaw allows an unprivileged user to read root-owned files, potentially leading to privilege escalation. This flaw affects util-linux versions prior to 2.37.4.",
-                    "diffID": "sha256:420179ad2efafbf953a0c75f68a4c9dfaf38a98643df97d415bce49b179895f7",
-                    "installedVersion": "2.36.1-8+deb11u2",
-                    "packageName": "mount",
-                    "purl": "pkg:deb/debian/mount@2.36.1-8%2Bdeb11u2?arch=amd64&distro=debian-11.9",
-                    "references": [
-                      "https://access.redhat.com/security/cve/CVE-2022-0563",
-                      "https://blog.trailofbits.com/2023/02/16/suid-logic-bug-linux-readline/",
-                      "https://lore.kernel.org/util-linux/20220214110609.msiwlm457ngoic6w%40ws.net.home/T/#u",
-                      "https://lore.kernel.org/util-linux/20220214110609.msiwlm457ngoic6w@ws.net.home/T/#u",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2022-0563",
-                      "https://security.gentoo.org/glsa/202401-08",
-                      "https://security.netapp.com/advisory/ntap-20220331-0002/",
-                      "https://www.cve.org/CVERecord?id=CVE-2022-0563"
-                    ],
-                    "severity": "LOW",
-                    "suppressed": false,
-                    "title": "util-linux: partial disclosure of arbitrary files in chfn and chsh when compiled with libreadline"
-                  },
-                  {
-                    "cve": "CVE-2023-50495",
-                    "cvss": {
-                      "nvd": {
-                        "v3score": "6.5",
-                        "v3vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H"
-                      },
-                      "redhat": {
-                        "v3score": "6.5",
-                        "v3vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H"
-                      }
-                    },
-                    "description": "NCurse v6.4-20230418 was discovered to contain a segmentation fault via the component _nc_wrap_entry().",
-                    "diffID": "sha256:420179ad2efafbf953a0c75f68a4c9dfaf38a98643df97d415bce49b179895f7",
-                    "installedVersion": "6.2+20201114-2+deb11u2",
-                    "packageName": "ncurses-base",
-                    "purl": "pkg:deb/debian/ncurses-base@6.2%2B20201114-2%2Bdeb11u2?arch=all&distro=debian-11.9",
-                    "references": [
-                      "https://access.redhat.com/security/cve/CVE-2023-50495",
-                      "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LU4MYMKFEZQ5VSCVLRIZGDQOUW3T44GT/",
-                      "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/LU4MYMKFEZQ5VSCVLRIZGDQOUW3T44GT/",
-                      "https://lists.gnu.org/archive/html/bug-ncurses/2023-04/msg00020.html",
-                      "https://lists.gnu.org/archive/html/bug-ncurses/2023-04/msg00029.html",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2023-50495",
-                      "https://security.netapp.com/advisory/ntap-20240119-0008/",
-                      "https://ubuntu.com/security/notices/USN-6684-1",
-                      "https://www.cve.org/CVERecord?id=CVE-2023-50495"
-                    ],
-                    "severity": "MEDIUM",
-                    "suppressed": false,
-                    "title": "ncurses: segmentation fault via _nc_wrap_entry()"
-                  },
-                  {
-                    "cve": "CVE-2025-6141",
-                    "cvss": {
-                      "redhat": {
-                        "v3score": "3.3",
-                        "v3vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-119",
-                      "CWE-121"
-                    ],
-                    "description": "A vulnerability has been found in GNU ncurses up to 6.5-20250322 and classified as problematic. This vulnerability affects the function postprocess_termcap of the file tinfo/parse_entry.c. The manipulation leads to stack-based buffer overflow. The attack needs to be approached locally. Upgrading to version 6.5-20250329 is able to address this issue. It is recommended to upgrade the affected component.",
-                    "diffID": "sha256:420179ad2efafbf953a0c75f68a4c9dfaf38a98643df97d415bce49b179895f7",
-                    "installedVersion": "6.2+20201114-2+deb11u2",
-                    "packageName": "ncurses-base",
-                    "purl": "pkg:deb/debian/ncurses-base@6.2%2B20201114-2%2Bdeb11u2?arch=all&distro=debian-11.9",
-                    "references": [
-                      "https://access.redhat.com/security/cve/CVE-2025-6141",
-                      "https://invisible-island.net/ncurses/NEWS.html#index-t20250329",
-                      "https://lists.gnu.org/archive/html/bug-ncurses/2025-03/msg00107.html",
-                      "https://lists.gnu.org/archive/html/bug-ncurses/2025-03/msg00109.html",
-                      "https://lists.gnu.org/archive/html/bug-ncurses/2025-03/msg00114.html",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2025-6141",
-                      "https://vuldb.com/?ctiid.312610",
-                      "https://vuldb.com/?id.312610",
-                      "https://vuldb.com/?submit.593000",
-                      "https://www.cve.org/CVERecord?id=CVE-2025-6141",
-                      "https://www.gnu.org/"
-                    ],
-                    "severity": "LOW",
-                    "suppressed": false,
-                    "title": "gnu-ncurses: ncurses Stack Buffer Overflow"
-                  },
-                  {
-                    "cve": "CVE-2023-50495",
-                    "cvss": {
-                      "nvd": {
-                        "v3score": "6.5",
-                        "v3vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H"
-                      },
-                      "redhat": {
-                        "v3score": "6.5",
-                        "v3vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H"
-                      }
-                    },
-                    "description": "NCurse v6.4-20230418 was discovered to contain a segmentation fault via the component _nc_wrap_entry().",
-                    "diffID": "sha256:420179ad2efafbf953a0c75f68a4c9dfaf38a98643df97d415bce49b179895f7",
-                    "installedVersion": "6.2+20201114-2+deb11u2",
-                    "packageName": "ncurses-bin",
-                    "purl": "pkg:deb/debian/ncurses-bin@6.2%2B20201114-2%2Bdeb11u2?arch=amd64&distro=debian-11.9",
-                    "references": [
-                      "https://access.redhat.com/security/cve/CVE-2023-50495",
-                      "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LU4MYMKFEZQ5VSCVLRIZGDQOUW3T44GT/",
-                      "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/LU4MYMKFEZQ5VSCVLRIZGDQOUW3T44GT/",
-                      "https://lists.gnu.org/archive/html/bug-ncurses/2023-04/msg00020.html",
-                      "https://lists.gnu.org/archive/html/bug-ncurses/2023-04/msg00029.html",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2023-50495",
-                      "https://security.netapp.com/advisory/ntap-20240119-0008/",
-                      "https://ubuntu.com/security/notices/USN-6684-1",
-                      "https://www.cve.org/CVERecord?id=CVE-2023-50495"
-                    ],
-                    "severity": "MEDIUM",
-                    "suppressed": false,
-                    "title": "ncurses: segmentation fault via _nc_wrap_entry()"
-                  },
-                  {
-                    "cve": "CVE-2025-6141",
-                    "cvss": {
-                      "redhat": {
-                        "v3score": "3.3",
-                        "v3vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-119",
-                      "CWE-121"
-                    ],
-                    "description": "A vulnerability has been found in GNU ncurses up to 6.5-20250322 and classified as problematic. This vulnerability affects the function postprocess_termcap of the file tinfo/parse_entry.c. The manipulation leads to stack-based buffer overflow. The attack needs to be approached locally. Upgrading to version 6.5-20250329 is able to address this issue. It is recommended to upgrade the affected component.",
-                    "diffID": "sha256:420179ad2efafbf953a0c75f68a4c9dfaf38a98643df97d415bce49b179895f7",
-                    "installedVersion": "6.2+20201114-2+deb11u2",
-                    "packageName": "ncurses-bin",
-                    "purl": "pkg:deb/debian/ncurses-bin@6.2%2B20201114-2%2Bdeb11u2?arch=amd64&distro=debian-11.9",
-                    "references": [
-                      "https://access.redhat.com/security/cve/CVE-2025-6141",
-                      "https://invisible-island.net/ncurses/NEWS.html#index-t20250329",
-                      "https://lists.gnu.org/archive/html/bug-ncurses/2025-03/msg00107.html",
-                      "https://lists.gnu.org/archive/html/bug-ncurses/2025-03/msg00109.html",
-                      "https://lists.gnu.org/archive/html/bug-ncurses/2025-03/msg00114.html",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2025-6141",
-                      "https://vuldb.com/?ctiid.312610",
-                      "https://vuldb.com/?id.312610",
-                      "https://vuldb.com/?submit.593000",
-                      "https://www.cve.org/CVERecord?id=CVE-2025-6141",
-                      "https://www.gnu.org/"
-                    ],
-                    "severity": "LOW",
-                    "suppressed": false,
-                    "title": "gnu-ncurses: ncurses Stack Buffer Overflow"
-                  },
-                  {
-                    "cve": "CVE-2026-1642",
-                    "cvss": {
-                      "redhat": {
-                        "v3score": "5.9",
-                        "v3vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-349"
-                    ],
-                    "description": "A vulnerability exists in NGINX OSS and NGINX Plus when configured to proxy to upstream Transport Layer Security (TLS) servers. An attacker with a man-in-the-middle (MITM) position on the upstream server side\u2014along with conditions beyond the attacker's control\u2014may be able to inject plain text data into the response from an upstream proxied server.  Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.",
-                    "diffID": "sha256:9664c8c85da49d2cedf85c6b8af0e128318580b95b277b87593a4f75886148af",
-                    "installedVersion": "1.24.0-1~bullseye",
-                    "packageName": "nginx",
-                    "purl": "pkg:deb/debian/nginx@1.24.0-1~bullseye?arch=amd64&distro=debian-11.9",
-                    "references": [
-                      "http://www.openwall.com/lists/oss-security/2026/02/05/1",
-                      "https://access.redhat.com/security/cve/CVE-2026-1642",
-                      "https://my.f5.com/manage/s/article/K000159824",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2026-1642",
-                      "https://www.cve.org/CVERecord?id=CVE-2026-1642"
-                    ],
-                    "severity": "MEDIUM",
-                    "suppressed": false,
-                    "title": "nginx: NGINX: Data injection via man-in-the-middle attack on TLS proxied connections"
-                  },
-                  {
-                    "cve": "CVE-2009-4487",
-                    "cvss": {
-                      "nvd": {
-                        "v3score": "0",
-                        "v3vector": ""
-                      },
-                      "redhat": {
-                        "v3score": "0",
-                        "v3vector": ""
-                      }
-                    },
-                    "description": "nginx 0.7.64 writes data to a log file without sanitizing non-printable characters, which might allow remote attackers to modify a window's title, or possibly execute arbitrary commands or overwrite files, via an HTTP request containing an escape sequence for a terminal emulator.",
-                    "diffID": "sha256:9664c8c85da49d2cedf85c6b8af0e128318580b95b277b87593a4f75886148af",
-                    "installedVersion": "1.24.0-1~bullseye",
-                    "packageName": "nginx",
-                    "purl": "pkg:deb/debian/nginx@1.24.0-1~bullseye?arch=amd64&distro=debian-11.9",
-                    "references": [
-                      "http://www.securityfocus.com/archive/1/508830/100/0/threaded",
-                      "http://www.securityfocus.com/bid/37711",
-                      "http://www.ush.it/team/ush/hack_httpd_escape/adv.txt",
-                      "https://access.redhat.com/security/cve/CVE-2009-4487",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2009-4487",
-                      "https://www.cve.org/CVERecord?id=CVE-2009-4487"
-                    ],
-                    "severity": "LOW",
-                    "suppressed": false,
-                    "title": "nginx: Absent sanitation of escape sequences in web server log"
-                  },
-                  {
-                    "cve": "CVE-2013-0337",
-                    "cvss": {
-                      "nvd": {
-                        "v3score": "0",
-                        "v3vector": ""
-                      }
-                    },
-                    "cwes": [
-                      "CWE-264"
-                    ],
-                    "description": "The default configuration of nginx, possibly 1.3.13 and earlier, uses world-readable permissions for the (1) access.log and (2) error.log files, which allows local users to obtain sensitive information by reading the files.",
-                    "diffID": "sha256:9664c8c85da49d2cedf85c6b8af0e128318580b95b277b87593a4f75886148af",
-                    "installedVersion": "1.24.0-1~bullseye",
-                    "packageName": "nginx",
-                    "purl": "pkg:deb/debian/nginx@1.24.0-1~bullseye?arch=amd64&distro=debian-11.9",
-                    "references": [
-                      "http://secunia.com/advisories/55181",
-                      "http://security.gentoo.org/glsa/glsa-201310-04.xml",
-                      "http://www.openwall.com/lists/oss-security/2013/02/21/15",
-                      "http://www.openwall.com/lists/oss-security/2013/02/22/1",
-                      "http://www.openwall.com/lists/oss-security/2013/02/24/1"
-                    ],
-                    "severity": "LOW",
-                    "suppressed": false,
-                    "title": "The default configuration of nginx, possibly 1.3.13 and earlier, uses  ..."
-                  },
-                  {
-                    "cve": "CVE-2023-44487",
-                    "cvss": {
-                      "bitnami": {
-                        "v3score": "7.5",
-                        "v3vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"
-                      },
-                      "ghsa": {
-                        "v3score": "5.3",
-                        "v3vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L/E:H"
-                      },
-                      "nvd": {
-                        "v3score": "7.5",
-                        "v3vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"
-                      },
-                      "redhat": {
-                        "v3score": "7.5",
-                        "v3vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-400"
-                    ],
-                    "description": "The HTTP/2 protocol allows a denial of service (server resource consumption) because request cancellation can reset many streams quickly, as exploited in the wild in August through October 2023.",
-                    "diffID": "sha256:9664c8c85da49d2cedf85c6b8af0e128318580b95b277b87593a4f75886148af",
-                    "installedVersion": "1.24.0-1~bullseye",
-                    "packageName": "nginx",
-                    "purl": "pkg:deb/debian/nginx@1.24.0-1~bullseye?arch=amd64&distro=debian-11.9",
-                    "references": [
-                      "http://www.openwall.com/lists/oss-security/2023/10/10/6",
-                      "http://www.openwall.com/lists/oss-security/2023/10/10/7",
-                      "http://www.openwall.com/lists/oss-security/2023/10/13/4",
-                      "http://www.openwall.com/lists/oss-security/2023/10/13/9",
-                      "http://www.openwall.com/lists/oss-security/2023/10/18/4",
-                      "http://www.openwall.com/lists/oss-security/2023/10/18/8",
-                      "http://www.openwall.com/lists/oss-security/2023/10/19/6",
-                      "http://www.openwall.com/lists/oss-security/2023/10/20/8",
-                      "http://www.openwall.com/lists/oss-security/2025/08/13/6",
-                      "https://access.redhat.com/errata/RHSA-2024:1444",
-                      "https://access.redhat.com/security/cve/CVE-2023-44487",
-                      "https://access.redhat.com/security/cve/cve-2023-44487",
-                      "https://akka.io/security/akka-http-cve-2023-44487.html",
-                      "https://arstechnica.com/security/2023/10/how-ddosers-used-the-http-2-protocol-to-deliver-attacks-of-unprecedented-size",
-                      "https://arstechnica.com/security/2023/10/how-ddosers-used-the-http-2-protocol-to-deliver-attacks-of-unprecedented-size/",
-                      "https://aws.amazon.com/security/security-bulletins/AWS-2023-011",
-                      "https://aws.amazon.com/security/security-bulletins/AWS-2023-011/",
-                      "https://blog.cloudflare.com/technical-breakdown-http2-rapid-reset-ddos-attack",
-                      "https://blog.cloudflare.com/technical-breakdown-http2-rapid-reset-ddos-attack/",
-                      "https://blog.cloudflare.com/zero-day-rapid-reset-http2-record-breaking-ddos-attack",
-                      "https://blog.cloudflare.com/zero-day-rapid-reset-http2-record-breaking-ddos-attack/",
-                      "https://blog.litespeedtech.com/2023/10/11/rapid-reset-http-2-vulnerablilty",
-                      "https://blog.litespeedtech.com/2023/10/11/rapid-reset-http-2-vulnerablilty/",
-                      "https://blog.powerdns.com/2024/02/16/powerdns-dnsdist-1.9.0-released",
-                      "https://blog.qualys.com/vulnerabilities-threat-research/2023/10/10/cve-2023-44487-http-2-rapid-reset-attack",
-                      "https://blog.vespa.ai/cve-2023-44487",
-                      "https://blog.vespa.ai/cve-2023-44487/",
-                      "https://bugzilla.proxmox.com/show_bug.cgi?id=4988",
-                      "https://bugzilla.redhat.com/2242803",
-                      "https://bugzilla.redhat.com/2264574",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2242803",
-                      "https://bugzilla.suse.com/show_bug.cgi?id=1216123",
-                      "https://cgit.freebsd.org/ports/commit/?id=c64c329c2c1752f46b73e3e6ce9f4329be6629f9",
-                      "https://chaos.social/@icing/111210915918780532",
-                      "https://cloud.google.com/blog/products/identity-security/google-cloud-mitigated-largest-ddos-attack-peaking-above-398-million-rps",
-                      "https://cloud.google.com/blog/products/identity-security/google-cloud-mitigated-largest-ddos-attack-peaking-above-398-million-rps/",
-                      "https://cloud.google.com/blog/products/identity-security/how-it-works-the-novel-http2-rapid-reset-ddos-attack",
-                      "https://community.traefik.io/t/is-traefik-vulnerable-to-cve-2023-44487/20125",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-44487",
-                      "https://devblogs.microsoft.com/dotnet/october-2023-updates/",
-                      "https://discuss.hashicorp.com/t/hcsec-2023-32-vault-consul-and-boundary-affected-by-http-2-rapid-reset-denial-of-service-vulnerability-cve-2023-44487/59715",
-                      "https://edg.io/lp/blog/resets-leaks-ddos-and-the-tale-of-a-hidden-cve",
-                      "https://errata.almalinux.org/8/ALSA-2024-1444.html",
-                      "https://errata.rockylinux.org/RLSA-2023:5838",
-                      "https://forums.swift.org/t/swift-nio-http2-security-update-cve-2023-44487-http-2-dos/67764",
-                      "https://gist.github.com/adulau/7c2bfb8e9cdbe4b35a5e131c66a0c088",
-                      "https://github.com/Azure/AKS/issues/3947",
-                      "https://github.com/Kong/kong/discussions/11741",
-                      "https://github.com/advisories/GHSA-qppj-fm5r-hxr3",
-                      "https://github.com/advisories/GHSA-vx74-f528-fxqg",
-                      "https://github.com/advisories/GHSA-xpw8-rcwv-8f8p",
-                      "https://github.com/akka/akka-http/issues/4323",
-                      "https://github.com/akka/akka-http/pull/4324",
-                      "https://github.com/akka/akka-http/pull/4325",
-                      "https://github.com/alibaba/tengine/issues/1872",
-                      "https://github.com/apache/apisix/issues/10320",
-                      "https://github.com/apache/httpd-site/pull/10",
-                      "https://github.com/apache/httpd/blob/afcdbeebbff4b0c50ea26cdd16e178c0d1f24152/modules/http2/h2_mplx.c#L1101-L1113",
-                      "https://github.com/apache/tomcat/commit/944332bb15bd2f3bf76ec2caeb1ff0a58a3bc628",
-                      "https://github.com/apache/tomcat/tree/main/java/org/apache/coyote/http2",
-                      "https://github.com/apache/trafficserver/pull/10564",
-                      "https://github.com/apple/swift-nio-http2",
-                      "https://github.com/apple/swift-nio-http2/security/advisories/GHSA-qppj-fm5r-hxr3",
-                      "https://github.com/arkrwn/PoC/tree/main/CVE-2023-44487",
-                      "https://github.com/bcdannyboy/CVE-2023-44487",
-                      "https://github.com/caddyserver/caddy/issues/5877",
-                      "https://github.com/caddyserver/caddy/releases/tag/v2.7.5",
-                      "https://github.com/dotnet/announcements/issues/277",
-                      "https://github.com/dotnet/core/blob/e4613450ea0da7fd2fc6b61dfb2c1c1dec1ce9ec/release-notes/6.0/6.0.23/6.0.23.md?plain=1#L73",
-                      "https://github.com/eclipse/jetty.project/issues/10679",
-                      "https://github.com/envoyproxy/envoy/pull/30055",
-                      "https://github.com/etcd-io/etcd/issues/16740",
-                      "https://github.com/facebook/proxygen/pull/466",
-                      "https://github.com/golang/go/issues/63417",
-                      "https://github.com/grpc/grpc-go/pull/6703",
-                      "https://github.com/grpc/grpc-go/releases",
-                      "https://github.com/grpc/grpc/releases/tag/v1.59.2",
-                      "https://github.com/h2o/h2o/pull/3291",
-                      "https://github.com/h2o/h2o/security/advisories/GHSA-2m7v-gc89-fjqf",
-                      "https://github.com/haproxy/haproxy/issues/2312",
-                      "https://github.com/hyperium/hyper/issues/3337",
-                      "https://github.com/icing/mod_h2/blob/0a864782af0a942aa2ad4ed960a6b32cd35bcf0a/mod_http2/README.md?plain=1#L239-L244",
-                      "https://github.com/junkurihara/rust-rpxy/issues/97",
-                      "https://github.com/kazu-yamamoto/http2/commit/f61d41a502bd0f60eb24e1ce14edc7b6df6722a1",
-                      "https://github.com/kazu-yamamoto/http2/issues/93",
-                      "https://github.com/kubernetes/kubernetes/pull/121120",
-                      "https://github.com/line/armeria/pull/5232",
-                      "https://github.com/linkerd/website/pull/1695/commits/4b9c6836471bc8270ab48aae6fd2181bc73fd632",
-                      "https://github.com/micrictor/http2-rst-stream",
-                      "https://github.com/microsoft/CBL-Mariner/pull/6381",
-                      "https://github.com/netty/netty/commit/58f75f665aa81a8cbcf6ffa74820042a285c5e61",
-                      "https://github.com/nghttp2/nghttp2/pull/1961",
-                      "https://github.com/nghttp2/nghttp2/releases/tag/v1.57.0",
-                      "https://github.com/ninenines/cowboy/issues/1615",
-                      "https://github.com/nodejs/node/pull/50121",
-                      "https://github.com/openresty/openresty/issues/930",
-                      "https://github.com/opensearch-project/data-prepper/issues/3474",
-                      "https://github.com/oqtane/oqtane.framework/discussions/3367",
-                      "https://github.com/projectcontour/contour/pull/5826",
-                      "https://github.com/tempesta-tech/tempesta/issues/1986",
-                      "https://github.com/varnishcache/varnish-cache/issues/3996",
-                      "https://go.dev/cl/534215",
-                      "https://go.dev/cl/534235",
-                      "https://go.dev/issue/63417",
-                      "https://groups.google.com/g/golang-announce/c/iNNxDTCjZvo",
-                      "https://groups.google.com/g/golang-announce/c/iNNxDTCjZvo/m/UDd7VKQuAAAJ",
-                      "https://istio.io/latest/news/security/istio-security-2023-004",
-                      "https://istio.io/latest/news/security/istio-security-2023-004/",
-                      "https://linkerd.io/2023/10/12/linkerd-cve-2023-44487",
-                      "https://linkerd.io/2023/10/12/linkerd-cve-2023-44487/",
-                      "https://linux.oracle.com/cve/CVE-2023-44487.html",
-                      "https://linux.oracle.com/errata/ELSA-2024-1444.html",
-                      "https://lists.apache.org/thread/5py8h42mxfsn8l1wy6o41xwhsjlsd87q",
-                      "https://lists.debian.org/debian-lts-announce/2023/10/msg00020.html",
-                      "https://lists.debian.org/debian-lts-announce/2023/10/msg00023.html",
-                      "https://lists.debian.org/debian-lts-announce/2023/10/msg00024.html",
-                      "https://lists.debian.org/debian-lts-announce/2023/10/msg00045.html",
-                      "https://lists.debian.org/debian-lts-announce/2023/10/msg00047.html",
-                      "https://lists.debian.org/debian-lts-announce/2023/11/msg00001.html",
-                      "https://lists.debian.org/debian-lts-announce/2023/11/msg00012.html",
-                      "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/2MBEPPC36UBVOZZNAXFHKLFGSLCMN5LI",
-                      "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/2MBEPPC36UBVOZZNAXFHKLFGSLCMN5LI/",
-                      "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/3N4NJ7FR4X4FPZUGNTQAPSTVB2HB2Y4A",
-                      "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/3N4NJ7FR4X4FPZUGNTQAPSTVB2HB2Y4A/",
-                      "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BFQD3KUEMFBHPAPBGLWQC34L4OWL5HAZ",
-                      "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BFQD3KUEMFBHPAPBGLWQC34L4OWL5HAZ/",
-                      "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CLB4TW7KALB3EEQWNWCN7OUIWWVWWCG2",
-                      "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CLB4TW7KALB3EEQWNWCN7OUIWWVWWCG2/",
-                      "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/E72T67UPDRXHIDLO3OROR25YAMN4GGW5",
-                      "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/E72T67UPDRXHIDLO3OROR25YAMN4GGW5/",
-                      "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FNA62Q767CFAFHBCDKYNPBMZWB7TWYVU",
-                      "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FNA62Q767CFAFHBCDKYNPBMZWB7TWYVU/",
-                      "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/HT7T2R4MQKLIF4ODV4BDLPARWFPCJ5CZ",
-                      "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/HT7T2R4MQKLIF4ODV4BDLPARWFPCJ5CZ/",
-                      "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JIZSEFC3YKCGABA2BZW6ZJRMDZJMB7PJ",
-                      "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JIZSEFC3YKCGABA2BZW6ZJRMDZJMB7PJ/",
-                      "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JMEXY22BFG5Q64HQCM5CK2Q7KDKVV4TY",
-                      "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JMEXY22BFG5Q64HQCM5CK2Q7KDKVV4TY/",
-                      "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/KSEGD2IWKNUO3DWY4KQGUQM5BISRWHQE",
-                      "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/KSEGD2IWKNUO3DWY4KQGUQM5BISRWHQE/",
-                      "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LKYHSZQFDNR7RSA7LHVLLIAQMVYCUGBG",
-                      "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LKYHSZQFDNR7RSA7LHVLLIAQMVYCUGBG/",
-                      "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LNMZJCDHGLJJLXO4OXWJMTVQRNWOC7UL",
-                      "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LNMZJCDHGLJJLXO4OXWJMTVQRNWOC7UL/",
-                      "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VHUHTSXLXGXS7JYKBXTA3VINUPHTNGVU",
-                      "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VHUHTSXLXGXS7JYKBXTA3VINUPHTNGVU/",
-                      "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VSRDIV77HNKUSM7SJC5BKE5JSHLHU2NK",
-                      "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VSRDIV77HNKUSM7SJC5BKE5JSHLHU2NK/",
-                      "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WE2I52RHNNU42PX6NZ2RBUHSFFJ2LVZX",
-                      "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WE2I52RHNNU42PX6NZ2RBUHSFFJ2LVZX/",
-                      "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WLPRQ5TWUQQXYWBJM7ECYDAIL2YVKIUH",
-                      "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WLPRQ5TWUQQXYWBJM7ECYDAIL2YVKIUH/",
-                      "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/X6QXN4ORIVF6XBW4WWFE7VNPVC74S45Y",
-                      "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/X6QXN4ORIVF6XBW4WWFE7VNPVC74S45Y/",
-                      "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/XFOIBB4YFICHDM7IBOP7PWXW3FX4HLL2",
-                      "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/XFOIBB4YFICHDM7IBOP7PWXW3FX4HLL2/",
-                      "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZB43REMKRQR62NJEI7I5NQ4FSXNLBKRT",
-                      "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZB43REMKRQR62NJEI7I5NQ4FSXNLBKRT/",
-                      "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZKQSIKIAT5TJ3WSLU3RDBQ35YX4GY4V3",
-                      "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZKQSIKIAT5TJ3WSLU3RDBQ35YX4GY4V3/",
-                      "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZLU6U2R2IC2K64NDPNMV55AUAO65MAF4",
-                      "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZLU6U2R2IC2K64NDPNMV55AUAO65MAF4/",
-                      "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/2MBEPPC36UBVOZZNAXFHKLFGSLCMN5LI",
-                      "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/2MBEPPC36UBVOZZNAXFHKLFGSLCMN5LI/",
-                      "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/3N4NJ7FR4X4FPZUGNTQAPSTVB2HB2Y4A",
-                      "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/3N4NJ7FR4X4FPZUGNTQAPSTVB2HB2Y4A/",
-                      "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/BFQD3KUEMFBHPAPBGLWQC34L4OWL5HAZ",
-                      "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/BFQD3KUEMFBHPAPBGLWQC34L4OWL5HAZ/",
-                      "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/CLB4TW7KALB3EEQWNWCN7OUIWWVWWCG2",
-                      "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/CLB4TW7KALB3EEQWNWCN7OUIWWVWWCG2/",
-                      "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/E72T67UPDRXHIDLO3OROR25YAMN4GGW5",
-                      "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/E72T67UPDRXHIDLO3OROR25YAMN4GGW5/",
-                      "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/FNA62Q767CFAFHBCDKYNPBMZWB7TWYVU",
-                      "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/FNA62Q767CFAFHBCDKYNPBMZWB7TWYVU/",
-                      "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/HT7T2R4MQKLIF4ODV4BDLPARWFPCJ5CZ",
-                      "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/HT7T2R4MQKLIF4ODV4BDLPARWFPCJ5CZ/",
-                      "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/JIZSEFC3YKCGABA2BZW6ZJRMDZJMB7PJ",
-                      "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/JIZSEFC3YKCGABA2BZW6ZJRMDZJMB7PJ/",
-                      "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/JMEXY22BFG5Q64HQCM5CK2Q7KDKVV4TY",
-                      "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/JMEXY22BFG5Q64HQCM5CK2Q7KDKVV4TY/",
-                      "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/KSEGD2IWKNUO3DWY4KQGUQM5BISRWHQE",
-                      "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/KSEGD2IWKNUO3DWY4KQGUQM5BISRWHQE/",
-                      "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/LKYHSZQFDNR7RSA7LHVLLIAQMVYCUGBG",
-                      "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/LKYHSZQFDNR7RSA7LHVLLIAQMVYCUGBG/",
-                      "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/LNMZJCDHGLJJLXO4OXWJMTVQRNWOC7UL",
-                      "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/LNMZJCDHGLJJLXO4OXWJMTVQRNWOC7UL/",
-                      "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/VHUHTSXLXGXS7JYKBXTA3VINUPHTNGVU",
-                      "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/VHUHTSXLXGXS7JYKBXTA3VINUPHTNGVU/",
-                      "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/VSRDIV77HNKUSM7SJC5BKE5JSHLHU2NK",
-                      "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/VSRDIV77HNKUSM7SJC5BKE5JSHLHU2NK/",
-                      "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/WE2I52RHNNU42PX6NZ2RBUHSFFJ2LVZX",
-                      "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/WE2I52RHNNU42PX6NZ2RBUHSFFJ2LVZX/",
-                      "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/WLPRQ5TWUQQXYWBJM7ECYDAIL2YVKIUH",
-                      "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/WLPRQ5TWUQQXYWBJM7ECYDAIL2YVKIUH/",
-                      "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/X6QXN4ORIVF6XBW4WWFE7VNPVC74S45Y",
-                      "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/X6QXN4ORIVF6XBW4WWFE7VNPVC74S45Y/",
-                      "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/XFOIBB4YFICHDM7IBOP7PWXW3FX4HLL2",
-                      "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/XFOIBB4YFICHDM7IBOP7PWXW3FX4HLL2/",
-                      "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ZB43REMKRQR62NJEI7I5NQ4FSXNLBKRT",
-                      "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ZB43REMKRQR62NJEI7I5NQ4FSXNLBKRT/",
-                      "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ZKQSIKIAT5TJ3WSLU3RDBQ35YX4GY4V3",
-                      "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ZKQSIKIAT5TJ3WSLU3RDBQ35YX4GY4V3/",
-                      "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ZLU6U2R2IC2K64NDPNMV55AUAO65MAF4",
-                      "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ZLU6U2R2IC2K64NDPNMV55AUAO65MAF4/",
-                      "https://lists.w3.org/Archives/Public/ietf-http-wg/2023OctDec/0025.html",
-                      "https://mailman.nginx.org/pipermail/nginx-devel/2023-October/S36Q5HBXR7CAIMPLLPRSSSYR4PCMWILK.html",
-                      "https://mailman.powerdns.com/pipermail/dnsdist/2023-October/001409.html",
-                      "https://martinthomson.github.io/h2-stream-limits/draft-thomson-httpbis-h2-stream-limits.html",
-                      "https://msrc.microsoft.com/blog/2023/10/microsoft-response-to-distributed-denial-of-service-ddos-attacks-against-http/2",
-                      "https://msrc.microsoft.com/blog/2023/10/microsoft-response-to-distributed-denial-of-service-ddos-attacks-against-http/2/",
-                      "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-44487",
-                      "https://my.f5.com/manage/s/article/K000137106",
-                      "https://netty.io/news/2023/10/10/4-1-100-Final.html",
-                      "https://news.ycombinator.com/item?id=37830987",
-                      "https://news.ycombinator.com/item?id=37830998",
-                      "https://news.ycombinator.com/item?id=37831062",
-                      "https://news.ycombinator.com/item?id=37837043",
-                      "https://nodejs.org/en/blog/vulnerability/october-2023-security-releases",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2023-44487",
-                      "https://openssf.org/blog/2023/10/10/http-2-rapid-reset-vulnerability-highlights-need-for-rapid-response",
-                      "https://openssf.org/blog/2023/10/10/http-2-rapid-reset-vulnerability-highlights-need-for-rapid-response/",
-                      "https://pkg.go.dev/vuln/GO-2023-2102",
-                      "https://seanmonstar.com/post/730794151136935936/hyper-http2-rapid-reset-unaffected",
-                      "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-http2-reset-d8Kf32vZ",
-                      "https://security.gentoo.org/glsa/202311-09",
-                      "https://security.netapp.com/advisory/ntap-20231016-0001",
-                      "https://security.netapp.com/advisory/ntap-20231016-0001/",
-                      "https://security.netapp.com/advisory/ntap-20240426-0007",
-                      "https://security.netapp.com/advisory/ntap-20240426-0007/",
-                      "https://security.netapp.com/advisory/ntap-20240621-0006",
-                      "https://security.netapp.com/advisory/ntap-20240621-0006/",
-                      "https://security.netapp.com/advisory/ntap-20240621-0007",
-                      "https://security.netapp.com/advisory/ntap-20240621-0007/",
-                      "https://security.paloaltonetworks.com/CVE-2023-44487",
-                      "https://tomcat.apache.org/security-10.html#Fixed_in_Apache_Tomcat_10.1.14",
-                      "https://tomcat.apache.org/security-11.html#Fixed_in_Apache_Tomcat_11.0.0-M12",
-                      "https://tomcat.apache.org/security-8.html",
-                      "https://tomcat.apache.org/security-8.html#Fixed_in_Apache_Tomcat_8.5.94",
-                      "https://tomcat.apache.org/security-9.html#Fixed_in_Apache_Tomcat_9.0.81",
-                      "https://ubuntu.com/security/CVE-2023-44487",
-                      "https://ubuntu.com/security/notices/USN-6427-1",
-                      "https://ubuntu.com/security/notices/USN-6427-2",
-                      "https://ubuntu.com/security/notices/USN-6438-1",
-                      "https://ubuntu.com/security/notices/USN-6505-1",
-                      "https://ubuntu.com/security/notices/USN-6574-1",
-                      "https://ubuntu.com/security/notices/USN-6754-1",
-                      "https://ubuntu.com/security/notices/USN-6994-1",
-                      "https://ubuntu.com/security/notices/USN-7067-1",
-                      "https://ubuntu.com/security/notices/USN-7410-1",
-                      "https://ubuntu.com/security/notices/USN-7469-1",
-                      "https://ubuntu.com/security/notices/USN-7469-2",
-                      "https://ubuntu.com/security/notices/USN-7469-3",
-                      "https://ubuntu.com/security/notices/USN-7469-4",
-                      "https://ubuntu.com/security/notices/USN-7892-1",
-                      "https://www.bleepingcomputer.com/news/security/new-http-2-rapid-reset-zero-day-attack-breaks-ddos-records",
-                      "https://www.bleepingcomputer.com/news/security/new-http-2-rapid-reset-zero-day-attack-breaks-ddos-records/",
-                      "https://www.cisa.gov/known-exploited-vulnerabilities-catalog",
-                      "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2023-44487",
-                      "https://www.cisa.gov/news-events/alerts/2023/10/10/http2-rapid-reset-vulnerability-cve-2023-44487",
-                      "https://www.cve.org/CVERecord?id=CVE-2023-44487",
-                      "https://www.darkreading.com/cloud/internet-wide-zero-day-bug-fuels-largest-ever-ddos-event",
-                      "https://www.debian.org/security/2023/dsa-5521",
-                      "https://www.debian.org/security/2023/dsa-5522",
-                      "https://www.debian.org/security/2023/dsa-5540",
-                      "https://www.debian.org/security/2023/dsa-5549",
-                      "https://www.debian.org/security/2023/dsa-5558",
-                      "https://www.debian.org/security/2023/dsa-5570",
-                      "https://www.eclipse.org/lists/jetty-announce/msg00181.html",
-                      "https://www.haproxy.com/blog/haproxy-is-not-affected-by-the-http-2-rapid-reset-attack-cve-2023-44487",
-                      "https://www.mail-archive.com/haproxy@formilux.org/msg44134.html",
-                      "https://www.netlify.com/blog/netlify-successfully-mitigates-cve-2023-44487",
-                      "https://www.netlify.com/blog/netlify-successfully-mitigates-cve-2023-44487/",
-                      "https://www.nginx.com/blog/http-2-rapid-reset-attack-impacting-f5-nginx-products",
-                      "https://www.nginx.com/blog/http-2-rapid-reset-attack-impacting-f5-nginx-products/",
-                      "https://www.openwall.com/lists/oss-security/2023/10/10/6",
-                      "https://www.phoronix.com/news/HTTP2-Rapid-Reset-Attack",
-                      "https://www.theregister.com/2023/10/10/http2_rapid_reset_zeroday",
-                      "https://www.theregister.com/2023/10/10/http2_rapid_reset_zeroday/",
-                      "https://www.vicarius.io/vsociety/posts/rapid-reset-cve-2023-44487-dos-in-http2-understanding-the-root-cause"
-                    ],
-                    "severity": "LOW",
-                    "suppressed": false,
-                    "title": "HTTP/2: Multiple HTTP/2 enabled web servers are vulnerable to a DDoS attack (Rapid Reset Attack)"
-                  },
-                  {
-                    "cve": "CVE-2025-53859",
-                    "cvss": {
-                      "redhat": {
-                        "v3score": "3.7",
-                        "v3vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-125"
-                    ],
-                    "description": "NGINX Open Source and NGINX Plus have a vulnerability in the ngx_mail_smtp_module that might allow an unauthenticated attacker to over-read NGINX SMTP authentication process memory; as a result, the server side may leak arbitrary bytes sent in a request to the authentication server. This issue happens during the NGINX SMTP authentication process and requires the attacker to make preparations against the target system to extract the leaked data. The issue affects NGINX only if (1) it is built with the ngx_mail_smtp_module, (2) the smtp_auth directive is configured with method \"none,\" and (3) the authentication server returns the \"Auth-Wait\" response header.\n\n\n\n\nNote: Software versions which have reached End of Technical Support (EoTS) are not evaluated.",
-                    "diffID": "sha256:9664c8c85da49d2cedf85c6b8af0e128318580b95b277b87593a4f75886148af",
-                    "installedVersion": "1.24.0-1~bullseye",
-                    "packageName": "nginx",
-                    "purl": "pkg:deb/debian/nginx@1.24.0-1~bullseye?arch=amd64&distro=debian-11.9",
-                    "references": [
-                      "http://www.openwall.com/lists/oss-security/2025/08/13/5",
-                      "https://access.redhat.com/security/cve/CVE-2025-53859",
-                      "https://my.f5.com/manage/s/article/K000152786",
-                      "https://nginx.org/download/patch.2025.smtp.txt",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2025-53859",
-                      "https://ubuntu.com/security/notices/USN-7715-1",
-                      "https://www.cve.org/CVERecord?id=CVE-2025-53859",
-                      "https://www.openwall.com/lists/oss-security/2025/08/13/5"
-                    ],
-                    "severity": "LOW",
-                    "suppressed": false,
-                    "title": "nginx: NGINX ngx_mail_smtp_module vulnerability"
-                  },
-                  {
-                    "cve": "CVE-2025-69419",
-                    "cvss": {
-                      "redhat": {
-                        "v3score": "7.4",
-                        "v3vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-787"
-                    ],
-                    "description": "Issue summary: Calling PKCS12_get_friendlyname() function on a maliciously\ncrafted PKCS#12 file with a BMPString (UTF-16BE) friendly name containing\nnon-ASCII BMP code point can trigger a one byte write before the allocated\nbuffer.\n\nImpact summary: The out-of-bounds write can cause a memory corruption\nwhich can have various consequences including a Denial of Service.\n\nThe OPENSSL_uni2utf8() function performs a two-pass conversion of a PKCS#12\nBMPString (UTF-16BE) to UTF-8. In the second pass, when emitting UTF-8 bytes,\nthe helper function bmp_to_utf8() incorrectly forwards the remaining UTF-16\nsource byte count as the destination buffer capacity to UTF8_putc(). For BMP\ncode points above U+07FF, UTF-8 requires three bytes, but the forwarded\ncapacity can be just two bytes. UTF8_putc() then returns -1, and this negative\nvalue is added to the output length without validation, causing the\nlength to become negative. The subsequent trailing NUL byte is then written\nat a negative offset, causing write outside of heap allocated buffer.\n\nThe vulnerability is reachable via the public PKCS12_get_friendlyname() API\nwhen parsing attacker-controlled PKCS#12 files. While PKCS12_parse() uses a\ndifferent code path that avoids this issue, PKCS12_get_friendlyname() directly\ninvokes the vulnerable function. Exploitation requires an attacker to provide\na malicious PKCS#12 file to be parsed by the application and the attacker\ncan just trigger a one zero byte write before the allocated buffer.\nFor that reason the issue was assessed as Low severity according to our\nSecurity Policy.\n\nThe FIPS modules in 3.6, 3.5, 3.4, 3.3 and 3.0 are not affected by this issue,\nas the PKCS#12 implementation is outside the OpenSSL FIPS module boundary.\n\nOpenSSL 3.6, 3.5, 3.4, 3.3, 3.0 and 1.1.1 are vulnerable to this issue.\n\nOpenSSL 1.0.2 is not affected by this issue.",
-                    "diffID": "sha256:9664c8c85da49d2cedf85c6b8af0e128318580b95b277b87593a4f75886148af",
-                    "installedVersion": "1.1.1w-0+deb11u1",
-                    "packageName": "openssl",
-                    "purl": "pkg:deb/debian/openssl@1.1.1w-0%2Bdeb11u1?arch=amd64&distro=debian-11.9",
-                    "references": [
-                      "https://access.redhat.com/errata/RHSA-2026:1472",
-                      "https://access.redhat.com/security/cve/CVE-2025-69419",
-                      "https://bugzilla.redhat.com/2430375",
-                      "https://bugzilla.redhat.com/2430376",
-                      "https://bugzilla.redhat.com/2430377",
-                      "https://bugzilla.redhat.com/2430378",
-                      "https://bugzilla.redhat.com/2430379",
-                      "https://bugzilla.redhat.com/2430380",
-                      "https://bugzilla.redhat.com/2430381",
-                      "https://bugzilla.redhat.com/2430386",
-                      "https://bugzilla.redhat.com/2430387",
-                      "https://bugzilla.redhat.com/2430388",
-                      "https://bugzilla.redhat.com/2430389",
-                      "https://bugzilla.redhat.com/2430390",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430375",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430376",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430377",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430378",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430379",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430380",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430381",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430386",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430387",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430388",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430389",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430390",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-11187",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-15467",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-15468",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-15469",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-66199",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-68160",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-69418",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-69419",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-69420",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-69421",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-22795",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-22796",
-                      "https://errata.almalinux.org/10/ALSA-2026-1472.html",
-                      "https://errata.rockylinux.org/RLSA-2026:1473",
-                      "https://github.com/openssl/openssl/commit/41be0f216404f14457bbf3b9cc488dba60b49296",
-                      "https://github.com/openssl/openssl/commit/7e9cac9832e4705b91987c2474ed06a37a93cecb",
-                      "https://github.com/openssl/openssl/commit/a26a90d38edec3748566129d824e664b54bee2e2",
-                      "https://github.com/openssl/openssl/commit/cda12de3bc0e333ea8d2c6fd15001dbdaf280015",
-                      "https://github.com/openssl/openssl/commit/ff628933755075446bca8307e8417c14d164b535",
-                      "https://linux.oracle.com/cve/CVE-2025-69419.html",
-                      "https://linux.oracle.com/errata/ELSA-2026-50081.html",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2025-69419",
-                      "https://openssl-library.org/news/secadv/20260127.txt",
-                      "https://ubuntu.com/security/notices/USN-7980-1",
-                      "https://ubuntu.com/security/notices/USN-7980-2",
-                      "https://www.cve.org/CVERecord?id=CVE-2025-69419"
-                    ],
-                    "severity": "HIGH",
-                    "suppressed": false,
-                    "title": "openssl: OpenSSL: Arbitrary code execution due to out-of-bounds write in PKCS#12 processing"
-                  },
-                  {
-                    "cve": "CVE-2025-69421",
-                    "cvss": {
-                      "nvd": {
-                        "v3score": "7.5",
-                        "v3vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"
-                      },
-                      "redhat": {
-                        "v3score": "6.5",
-                        "v3vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-476"
-                    ],
-                    "description": "Issue summary: Processing a malformed PKCS#12 file can trigger a NULL pointer\ndereference in the PKCS12_item_decrypt_d2i_ex() function.\n\nImpact summary: A NULL pointer dereference can trigger a crash which leads to\nDenial of Service for an application processing PKCS#12 files.\n\nThe PKCS12_item_decrypt_d2i_ex() function does not check whether the oct\nparameter is NULL before dereferencing it. When called from\nPKCS12_unpack_p7encdata() with a malformed PKCS#12 file, this parameter can\nbe NULL, causing a crash. The vulnerability is limited to Denial of Service\nand cannot be escalated to achieve code execution or memory disclosure.\n\nExploiting this issue requires an attacker to provide a malformed PKCS#12 file\nto an application that processes it. For that reason the issue was assessed as\nLow severity according to our Security Policy.\n\nThe FIPS modules in 3.6, 3.5, 3.4, 3.3 and 3.0 are not affected by this issue,\nas the PKCS#12 implementation is outside the OpenSSL FIPS module boundary.\n\nOpenSSL 3.6, 3.5, 3.4, 3.3, 3.0, 1.1.1 and 1.0.2 are vulnerable to this issue.",
-                    "diffID": "sha256:9664c8c85da49d2cedf85c6b8af0e128318580b95b277b87593a4f75886148af",
-                    "installedVersion": "1.1.1w-0+deb11u1",
-                    "packageName": "openssl",
-                    "purl": "pkg:deb/debian/openssl@1.1.1w-0%2Bdeb11u1?arch=amd64&distro=debian-11.9",
-                    "references": [
-                      "https://access.redhat.com/errata/RHSA-2026:1472",
-                      "https://access.redhat.com/security/cve/CVE-2025-69421",
-                      "https://bugzilla.redhat.com/2430375",
-                      "https://bugzilla.redhat.com/2430376",
-                      "https://bugzilla.redhat.com/2430377",
-                      "https://bugzilla.redhat.com/2430378",
-                      "https://bugzilla.redhat.com/2430379",
-                      "https://bugzilla.redhat.com/2430380",
-                      "https://bugzilla.redhat.com/2430381",
-                      "https://bugzilla.redhat.com/2430386",
-                      "https://bugzilla.redhat.com/2430387",
-                      "https://bugzilla.redhat.com/2430388",
-                      "https://bugzilla.redhat.com/2430389",
-                      "https://bugzilla.redhat.com/2430390",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430375",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430376",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430377",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430378",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430379",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430380",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430381",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430386",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430387",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430388",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430389",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430390",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-11187",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-15467",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-15468",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-15469",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-66199",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-68160",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-69418",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-69419",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-69420",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-69421",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-22795",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-22796",
-                      "https://errata.almalinux.org/10/ALSA-2026-1472.html",
-                      "https://errata.rockylinux.org/RLSA-2026:1473",
-                      "https://github.com/openssl/openssl/commit/3524a29271f8191b8fd8a5257eb05173982a097b",
-                      "https://github.com/openssl/openssl/commit/36ecb4960872a4ce04bf6f1e1f4e78d75ec0c0c7",
-                      "https://github.com/openssl/openssl/commit/4bbc8d41a72c842ce4077a8a3eccd1109aaf74bd",
-                      "https://github.com/openssl/openssl/commit/643986985cd1c21221f941129d76fe0c2785aeb3",
-                      "https://github.com/openssl/openssl/commit/a2dbc539f0f9cc63832709fa5aa33ad9495eb19c",
-                      "https://linux.oracle.com/cve/CVE-2025-69421.html",
-                      "https://linux.oracle.com/errata/ELSA-2026-50081.html",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2025-69421",
-                      "https://openssl-library.org/news/secadv/20260127.txt",
-                      "https://ubuntu.com/security/notices/USN-7980-1",
-                      "https://ubuntu.com/security/notices/USN-7980-2",
-                      "https://www.cve.org/CVERecord?id=CVE-2025-69421"
-                    ],
-                    "severity": "HIGH",
-                    "suppressed": false,
-                    "title": "openssl: OpenSSL: Denial of Service via malformed PKCS#12 file processing"
-                  },
-                  {
-                    "cve": "CVE-2023-5678",
-                    "cvss": {
-                      "nvd": {
-                        "v3score": "5.3",
-                        "v3vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L"
-                      },
-                      "redhat": {
-                        "v3score": "5.3",
-                        "v3vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-606",
-                      "CWE-754"
-                    ],
-                    "description": "Issue summary: Generating excessively long X9.42 DH keys or checking\nexcessively long X9.42 DH keys or parameters may be very slow.\n\nImpact summary: Applications that use the functions DH_generate_key() to\ngenerate an X9.42 DH key may experience long delays.  Likewise, applications\nthat use DH_check_pub_key(), DH_check_pub_key_ex() or EVP_PKEY_public_check()\nto check an X9.42 DH key or X9.42 DH parameters may experience long delays.\nWhere the key or parameters that are being checked have been obtained from\nan untrusted source this may lead to a Denial of Service.\n\nWhile DH_check() performs all the necessary checks (as of CVE-2023-3817),\nDH_check_pub_key() doesn't make any of these checks, and is therefore\nvulnerable for excessively large P and Q parameters.\n\nLikewise, while DH_generate_key() performs a check for an excessively large\nP, it doesn't check for an excessively large Q.\n\nAn application that calls DH_generate_key() or DH_check_pub_key() and\nsupplies a key or parameters obtained from an untrusted source could be\nvulnerable to a Denial of Service attack.\n\nDH_generate_key() and DH_check_pub_key() are also called by a number of\nother OpenSSL functions.  An application calling any of those other\nfunctions may similarly be affected.  The other functions affected by this\nare DH_check_pub_key_ex(), EVP_PKEY_public_check(), and EVP_PKEY_generate().\n\nAlso vulnerable are the OpenSSL pkey command line application when using the\n\"-pubcheck\" option, as well as the OpenSSL genpkey command line application.\n\nThe OpenSSL SSL/TLS implementation is not affected by this issue.\n\nThe OpenSSL 3.0 and 3.1 FIPS providers are not affected by this issue.",
-                    "diffID": "sha256:9664c8c85da49d2cedf85c6b8af0e128318580b95b277b87593a4f75886148af",
-                    "fixedVersions": [
-                      "1.1.1w-0+deb11u2"
-                    ],
-                    "installedVersion": "1.1.1w-0+deb11u1",
-                    "packageName": "openssl",
-                    "purl": "pkg:deb/debian/openssl@1.1.1w-0%2Bdeb11u1?arch=amd64&distro=debian-11.9",
-                    "references": [
-                      "http://www.openwall.com/lists/oss-security/2024/03/11/1",
-                      "https://access.redhat.com/errata/RHSA-2023:7877",
-                      "https://access.redhat.com/security/cve/CVE-2023-5678",
-                      "https://bugzilla.redhat.com/2224962",
-                      "https://bugzilla.redhat.com/2227852",
-                      "https://bugzilla.redhat.com/2248616",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2224962",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2227852",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2248616",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2270358",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3446",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3817",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-5678",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-2408",
-                      "https://errata.almalinux.org/8/ALSA-2023-7877.html",
-                      "https://errata.rockylinux.org/RLSA-2023:7877",
-                      "https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=34efaef6c103d636ab507a0cc34dca4d3aecc055",
-                      "https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=710fee740904b6290fef0dd5536fbcedbc38ff0c",
-                      "https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=db925ae2e65d0d925adef429afc37f75bd1c2017",
-                      "https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=ddeb4b6c6d527e54ce9a99cba785c0f7776e54b6",
-                      "https://linux.oracle.com/cve/CVE-2023-5678.html",
-                      "https://linux.oracle.com/errata/ELSA-2024-2447.html",
-                      "https://lists.debian.org/debian-lts-announce/2024/10/msg00033.html",
-                      "https://lists.debian.org/debian-lts-announce/2024/11/msg00000.html",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2023-5678",
-                      "https://security.netapp.com/advisory/ntap-20231130-0010/",
-                      "https://ubuntu.com/security/notices/USN-6622-1",
-                      "https://ubuntu.com/security/notices/USN-6632-1",
-                      "https://ubuntu.com/security/notices/USN-6709-1",
-                      "https://ubuntu.com/security/notices/USN-7894-1",
-                      "https://www.cve.org/CVERecord?id=CVE-2023-5678",
-                      "https://www.openssl.org/news/secadv/20231106.txt"
-                    ],
-                    "severity": "MEDIUM",
-                    "suppressed": false,
-                    "title": "openssl: Generating excessively long X9.42 DH keys or checking excessively long X9.42 DH keys or parameters may be very slow"
-                  },
-                  {
-                    "cve": "CVE-2024-0727",
-                    "cvss": {
-                      "ghsa": {
-                        "v3score": "5.5",
-                        "v3vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H"
-                      },
-                      "nvd": {
-                        "v3score": "5.5",
-                        "v3vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H"
-                      },
-                      "redhat": {
-                        "v3score": "5.5",
-                        "v3vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-476"
-                    ],
-                    "description": "Issue summary: Processing a maliciously formatted PKCS12 file may lead OpenSSL\nto crash leading to a potential Denial of Service attack\n\nImpact summary: Applications loading files in the PKCS12 format from untrusted\nsources might terminate abruptly.\n\nA file in PKCS12 format can contain certificates and keys and may come from an\nuntrusted source. The PKCS12 specification allows certain fields to be NULL, but\nOpenSSL does not correctly check for this case. This can lead to a NULL pointer\ndereference that results in OpenSSL crashing. If an application processes PKCS12\nfiles from an untrusted source using the OpenSSL APIs then that application will\nbe vulnerable to this issue.\n\nOpenSSL APIs that are vulnerable to this are: PKCS12_parse(),\nPKCS12_unpack_p7data(), PKCS12_unpack_p7encdata(), PKCS12_unpack_authsafes()\nand PKCS12_newpass().\n\nWe have also fixed a similar issue in SMIME_write_PKCS7(). However since this\nfunction is related to writing data we do not consider it security significant.\n\nThe FIPS modules in 3.2, 3.1 and 3.0 are not affected by this issue.",
-                    "diffID": "sha256:9664c8c85da49d2cedf85c6b8af0e128318580b95b277b87593a4f75886148af",
-                    "fixedVersions": [
-                      "1.1.1w-0+deb11u2"
-                    ],
-                    "installedVersion": "1.1.1w-0+deb11u1",
-                    "packageName": "openssl",
-                    "purl": "pkg:deb/debian/openssl@1.1.1w-0%2Bdeb11u1?arch=amd64&distro=debian-11.9",
-                    "references": [
-                      "http://www.openwall.com/lists/oss-security/2024/03/11/1",
-                      "https://access.redhat.com/errata/RHSA-2024:9088",
-                      "https://access.redhat.com/security/cve/CVE-2024-0727",
-                      "https://bugzilla.redhat.com/2257571",
-                      "https://bugzilla.redhat.com/2258502",
-                      "https://bugzilla.redhat.com/2259944",
-                      "https://bugzilla.redhat.com/2284243",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2257571",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2258502",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2259944",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2284243",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-6129",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-6237",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-0727",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-1298",
-                      "https://errata.almalinux.org/9/ALSA-2024-9088.html",
-                      "https://errata.rockylinux.org/RLSA-2024:9088",
-                      "https://github.com/alexcrichton/openssl-src-rs/commit/add20f73b6b42be7451af2e1044d4e0e778992b2",
-                      "https://github.com/github/advisory-database/pull/3472",
-                      "https://github.com/openssl/openssl/commit/09df4395b5071217b76dc7d3d2e630eb8c5a79c2",
-                      "https://github.com/openssl/openssl/commit/775acfdbd0c6af9ac855f34969cdab0c0c90844a",
-                      "https://github.com/openssl/openssl/commit/d135eeab8a5dbf72b3da5240bab9ddb7678dbd2c",
-                      "https://github.com/openssl/openssl/pull/23362",
-                      "https://github.com/pyca/cryptography/commit/3519591d255d4506fbcd0d04037d45271903c64d",
-                      "https://github.openssl.org/openssl/extended-releases/commit/03b3941d60c4bce58fab69a0c22377ab439bc0e8",
-                      "https://github.openssl.org/openssl/extended-releases/commit/aebaa5883e31122b404e450732dc833dc9dee539",
-                      "https://linux.oracle.com/cve/CVE-2024-0727.html",
-                      "https://linux.oracle.com/errata/ELSA-2024-9088.html",
-                      "https://lists.debian.org/debian-lts-announce/2024/10/msg00033.html",
-                      "https://lists.debian.org/debian-lts-announce/2024/11/msg00000.html",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2024-0727",
-                      "https://security.netapp.com/advisory/ntap-20240208-0006",
-                      "https://security.netapp.com/advisory/ntap-20240208-0006/",
-                      "https://ubuntu.com/security/notices/USN-6622-1",
-                      "https://ubuntu.com/security/notices/USN-6632-1",
-                      "https://ubuntu.com/security/notices/USN-6709-1",
-                      "https://ubuntu.com/security/notices/USN-7018-1",
-                      "https://ubuntu.com/security/notices/USN-7894-1",
-                      "https://www.cve.org/CVERecord?id=CVE-2024-0727",
-                      "https://www.openssl.org/news/secadv/20240125.txt"
-                    ],
-                    "severity": "MEDIUM",
-                    "suppressed": false,
-                    "title": "openssl: denial of service via null dereference"
-                  },
-                  {
-                    "cve": "CVE-2024-13176",
-                    "cvss": {
-                      "redhat": {
-                        "v3score": "4.7",
-                        "v3vector": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-385"
-                    ],
-                    "description": "Issue summary: A timing side-channel which could potentially allow recovering\nthe private key exists in the ECDSA signature computation.\n\nImpact summary: A timing side-channel in ECDSA signature computations\ncould allow recovering the private key by an attacker. However, measuring\nthe timing would require either local access to the signing application or\na very fast network connection with low latency.\n\nThere is a timing signal of around 300 nanoseconds when the top word of\nthe inverted ECDSA nonce value is zero. This can happen with significant\nprobability only for some of the supported elliptic curves. In particular\nthe NIST P-521 curve is affected. To be able to measure this leak, the attacker\nprocess must either be located in the same physical computer or must\nhave a very fast network connection with low latency. For that reason\nthe severity of this vulnerability is Low.\n\nThe FIPS modules in 3.4, 3.3, 3.2, 3.1 and 3.0 are affected by this issue.",
-                    "diffID": "sha256:9664c8c85da49d2cedf85c6b8af0e128318580b95b277b87593a4f75886148af",
-                    "fixedVersions": [
-                      "1.1.1w-0+deb11u3"
-                    ],
-                    "installedVersion": "1.1.1w-0+deb11u1",
-                    "packageName": "openssl",
-                    "purl": "pkg:deb/debian/openssl@1.1.1w-0%2Bdeb11u1?arch=amd64&distro=debian-11.9",
-                    "references": [
-                      "http://www.openwall.com/lists/oss-security/2025/01/20/2",
-                      "https://access.redhat.com/errata/RHSA-2025:15699",
-                      "https://access.redhat.com/security/cve/CVE-2024-13176",
-                      "https://bugzilla.redhat.com/2359885",
-                      "https://bugzilla.redhat.com/2359888",
-                      "https://bugzilla.redhat.com/2359892",
-                      "https://bugzilla.redhat.com/2359894",
-                      "https://bugzilla.redhat.com/2359895",
-                      "https://bugzilla.redhat.com/2359899",
-                      "https://bugzilla.redhat.com/2359900",
-                      "https://bugzilla.redhat.com/2359902",
-                      "https://bugzilla.redhat.com/2359903",
-                      "https://bugzilla.redhat.com/2359911",
-                      "https://bugzilla.redhat.com/2359918",
-                      "https://bugzilla.redhat.com/2359920",
-                      "https://bugzilla.redhat.com/2359924",
-                      "https://bugzilla.redhat.com/2359928",
-                      "https://bugzilla.redhat.com/2359930",
-                      "https://bugzilla.redhat.com/2359932",
-                      "https://bugzilla.redhat.com/2359934",
-                      "https://bugzilla.redhat.com/2359938",
-                      "https://bugzilla.redhat.com/2359940",
-                      "https://bugzilla.redhat.com/2359943",
-                      "https://bugzilla.redhat.com/2359944",
-                      "https://bugzilla.redhat.com/2359945",
-                      "https://bugzilla.redhat.com/2359947",
-                      "https://bugzilla.redhat.com/2359950",
-                      "https://bugzilla.redhat.com/2359963",
-                      "https://bugzilla.redhat.com/2359964",
-                      "https://bugzilla.redhat.com/2359972",
-                      "https://bugzilla.redhat.com/2370920",
-                      "https://bugzilla.redhat.com/2380264",
-                      "https://bugzilla.redhat.com/2380273",
-                      "https://bugzilla.redhat.com/2380274",
-                      "https://bugzilla.redhat.com/2380278",
-                      "https://bugzilla.redhat.com/2380280",
-                      "https://bugzilla.redhat.com/2380283",
-                      "https://bugzilla.redhat.com/2380284",
-                      "https://bugzilla.redhat.com/2380290",
-                      "https://bugzilla.redhat.com/2380291",
-                      "https://bugzilla.redhat.com/2380295",
-                      "https://bugzilla.redhat.com/2380298",
-                      "https://bugzilla.redhat.com/2380306",
-                      "https://bugzilla.redhat.com/2380308",
-                      "https://bugzilla.redhat.com/2380309",
-                      "https://bugzilla.redhat.com/2380310",
-                      "https://bugzilla.redhat.com/2380312",
-                      "https://bugzilla.redhat.com/2380313",
-                      "https://bugzilla.redhat.com/2380320",
-                      "https://bugzilla.redhat.com/2380321",
-                      "https://bugzilla.redhat.com/2380322",
-                      "https://bugzilla.redhat.com/2380326",
-                      "https://bugzilla.redhat.com/2380327",
-                      "https://bugzilla.redhat.com/2380334",
-                      "https://bugzilla.redhat.com/2380335",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2338999",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2359885",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2359888",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2359892",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2359894",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2359895",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2359899",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2359900",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2359902",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2359903",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2359911",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2359918",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2359920",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2359924",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2359928",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2359930",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2359932",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2359934",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2359938",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2359940",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2359943",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2359944",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2359945",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2359947",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2359950",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2359963",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2359964",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2359972",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2370920",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2380264",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2380273",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2380274",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2380278",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2380280",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2380283",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2380284",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2380290",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2380291",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2380295",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2380298",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2380306",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2380308",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2380309",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2380310",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2380312",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2380313",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2380320",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2380321",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2380322",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2380326",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2380327",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2380334",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2380335",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-13176",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21574",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21575",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21577",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21579",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21580",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21581",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21584",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21585",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21588",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30681",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30682",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30683",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30684",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30685",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30687",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30688",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30689",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30693",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30695",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30696",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30699",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30703",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30704",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30705",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30715",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30721",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30722",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50077",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50078",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50079",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50080",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50081",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50082",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50083",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50084",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50085",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50086",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50087",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50088",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50091",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50092",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50093",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50094",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50096",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50097",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50098",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50099",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50100",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50101",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50102",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50104",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-5399",
-                      "https://errata.almalinux.org/10/ALSA-2025-15699.html",
-                      "https://errata.rockylinux.org/RLSA-2025:15699",
-                      "https://github.com/openssl/openssl/commit/07272b05b04836a762b4baa874958af51d513844",
-                      "https://github.com/openssl/openssl/commit/2af62e74fb59bc469506bc37eb2990ea408d9467",
-                      "https://github.com/openssl/openssl/commit/392dcb336405a0c94486aa6655057f59fd3a0902",
-                      "https://github.com/openssl/openssl/commit/4b1cb94a734a7d4ec363ac0a215a25c181e11f65",
-                      "https://github.com/openssl/openssl/commit/77c608f4c8857e63e98e66444e2e761c9627916f",
-                      "https://github.openssl.org/openssl/extended-releases/commit/0d5fd1ab987f7571e2c955d8d8b638fc0fb54ded",
-                      "https://github.openssl.org/openssl/extended-releases/commit/a2639000db19878d5d89586ae7b725080592ae86",
-                      "https://linux.oracle.com/cve/CVE-2024-13176.html",
-                      "https://linux.oracle.com/errata/ELSA-2025-16046.html",
-                      "https://lists.debian.org/debian-lts-announce/2025/05/msg00028.html",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2024-13176",
-                      "https://openssl-library.org/news/secadv/20250120.txt",
-                      "https://security.netapp.com/advisory/ntap-20250124-0005/",
-                      "https://security.netapp.com/advisory/ntap-20250418-0010/",
-                      "https://security.netapp.com/advisory/ntap-20250502-0006/",
-                      "https://ubuntu.com/security/notices/USN-7264-1",
-                      "https://ubuntu.com/security/notices/USN-7278-1",
-                      "https://ubuntu.com/security/notices/USN-7894-1",
-                      "https://www.cve.org/CVERecord?id=CVE-2024-13176",
-                      "https://www.oracle.com/security-alerts/cpuapr2025.html#AppendixMSQL"
-                    ],
-                    "severity": "MEDIUM",
-                    "suppressed": false,
-                    "title": "openssl: Timing side-channel in ECDSA signature computation"
-                  },
-                  {
-                    "cve": "CVE-2024-4741",
-                    "cvss": {
-                      "redhat": {
-                        "v3score": "5.6",
-                        "v3vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-416"
-                    ],
-                    "description": "Issue summary: Calling the OpenSSL API function SSL_free_buffers may cause\nmemory to be accessed that was previously freed in some situations\n\nImpact summary: A use after free can have a range of potential consequences such\nas the corruption of valid data, crashes or execution of arbitrary code.\nHowever, only applications that directly call the SSL_free_buffers function are\naffected by this issue. Applications that do not call this function are not\nvulnerable. Our investigations indicate that this function is rarely used by\napplications.\n\nThe SSL_free_buffers function is used to free the internal OpenSSL buffer used\nwhen processing an incoming record from the network. The call is only expected\nto succeed if the buffer is not currently in use. However, two scenarios have\nbeen identified where the buffer is freed even when still in use.\n\nThe first scenario occurs where a record header has been received from the\nnetwork and processed by OpenSSL, but the full record body has not yet arrived.\nIn this case calling SSL_free_buffers will succeed even though a record has only\nbeen partially processed and the buffer is still in use.\n\nThe second scenario occurs where a full record containing application data has\nbeen received and processed by OpenSSL but the application has only read part of\nthis data. Again a call to SSL_free_buffers will succeed even though the buffer\nis still in use.\n\nWhile these scenarios could occur accidentally during normal operation a\nmalicious attacker could attempt to engineer a stituation where this occurs.\nWe are not aware of this issue being actively exploited.\n\nThe FIPS modules in 3.3, 3.2, 3.1 and 3.0 are not affected by this issue.",
-                    "diffID": "sha256:9664c8c85da49d2cedf85c6b8af0e128318580b95b277b87593a4f75886148af",
-                    "fixedVersions": [
-                      "1.1.1w-0+deb11u2"
-                    ],
-                    "installedVersion": "1.1.1w-0+deb11u1",
-                    "packageName": "openssl",
-                    "purl": "pkg:deb/debian/openssl@1.1.1w-0%2Bdeb11u1?arch=amd64&distro=debian-11.9",
-                    "references": [
-                      "https://access.redhat.com/errata/RHSA-2024:9333",
-                      "https://access.redhat.com/security/cve/CVE-2024-4741",
-                      "https://bugzilla.redhat.com/2274020",
-                      "https://bugzilla.redhat.com/2281029",
-                      "https://bugzilla.redhat.com/2283757",
-                      "https://bugzilla.redhat.com/2294581",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2274020",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2281029",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2283757",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2294581",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-2511",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-4603",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-4741",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-5535",
-                      "https://errata.almalinux.org/9/ALSA-2024-9333.html",
-                      "https://errata.rockylinux.org/RLSA-2024:9333",
-                      "https://github.com/openssl/openssl/commit/704f725b96aa373ee45ecfb23f6abfe8be8d9177",
-                      "https://github.com/openssl/openssl/commit/b3f0eb0a295f58f16ba43ba99dad70d4ee5c437d",
-                      "https://github.com/openssl/openssl/commit/c88c3de51020c37e8706bf7a682a162593053aac",
-                      "https://github.com/openssl/openssl/commit/e5093133c35ca82874ad83697af76f4b0f7e3bd8",
-                      "https://github.openssl.org/openssl/extended-releases/commit/f7a045f3143fc6da2ee66bf52d8df04829590dd4",
-                      "https://linux.oracle.com/cve/CVE-2024-4741.html",
-                      "https://linux.oracle.com/errata/ELSA-2024-9333.html",
-                      "https://lists.debian.org/debian-lts-announce/2024/10/msg00033.html",
-                      "https://lists.debian.org/debian-lts-announce/2024/11/msg00000.html",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2024-4741",
-                      "https://security.netapp.com/advisory/ntap-20240621-0004/",
-                      "https://ubuntu.com/security/notices/USN-6937-1",
-                      "https://ubuntu.com/security/notices/USN-7894-1",
-                      "https://www.cve.org/CVERecord?id=CVE-2024-4741",
-                      "https://www.openssl.org/news/secadv/20240528.txt"
-                    ],
-                    "severity": "MEDIUM",
-                    "suppressed": false,
-                    "title": "openssl: Use After Free with SSL_free_buffers"
-                  },
-                  {
-                    "cve": "CVE-2024-5535",
-                    "cvss": {
-                      "redhat": {
-                        "v3score": "5.9",
-                        "v3vector": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-125"
-                    ],
-                    "description": "Issue summary: Calling the OpenSSL API function SSL_select_next_proto with an\nempty supported client protocols buffer may cause a crash or memory contents to\nbe sent to the peer.\n\nImpact summary: A buffer overread can have a range of potential consequences\nsuch as unexpected application beahviour or a crash. In particular this issue\ncould result in up to 255 bytes of arbitrary private data from memory being sent\nto the peer leading to a loss of confidentiality. However, only applications\nthat directly call the SSL_select_next_proto function with a 0 length list of\nsupported client protocols are affected by this issue. This would normally never\nbe a valid scenario and is typically not under attacker control but may occur by\naccident in the case of a configuration or programming error in the calling\napplication.\n\nThe OpenSSL API function SSL_select_next_proto is typically used by TLS\napplications that support ALPN (Application Layer Protocol Negotiation) or NPN\n(Next Protocol Negotiation). NPN is older, was never standardised and\nis deprecated in favour of ALPN. We believe that ALPN is significantly more\nwidely deployed than NPN. The SSL_select_next_proto function accepts a list of\nprotocols from the server and a list of protocols from the client and returns\nthe first protocol that appears in the server list that also appears in the\nclient list. In the case of no overlap between the two lists it returns the\nfirst item in the client list. In either case it will signal whether an overlap\nbetween the two lists was found. In the case where SSL_select_next_proto is\ncalled with a zero length client list it fails to notice this condition and\nreturns the memory immediately following the client list pointer (and reports\nthat there was no overlap in the lists).\n\nThis function is typically called from a server side application callback for\nALPN or a client side application callback for NPN. In the case of ALPN the list\nof protocols supplied by the client is guaranteed by libssl to never be zero in\nlength. The list of server protocols comes from the application and should never\nnormally be expected to be of zero length. In this case if the\nSSL_select_next_proto function has been called as expected (with the list\nsupplied by the client passed in the client/client_len parameters), then the\napplication will not be vulnerable to this issue. If the application has\naccidentally been configured with a zero length server list, and has\naccidentally passed that zero length server list in the client/client_len\nparameters, and has additionally failed to correctly handle a \"no overlap\"\nresponse (which would normally result in a handshake failure in ALPN) then it\nwill be vulnerable to this problem.\n\nIn the case of NPN, the protocol permits the client to opportunistically select\na protocol when there is no overlap. OpenSSL returns the first client protocol\nin the no overlap case in support of this. The list of client protocols comes\nfrom the application and should never normally be expected to be of zero length.\nHowever if the SSL_select_next_proto function is accidentally called with a\nclient_len of 0 then an invalid memory pointer will be returned instead. If the\napplication uses this output as the opportunistic protocol then the loss of\nconfidentiality will occur.\n\nThis issue has been assessed as Low severity because applications are most\nlikely to be vulnerable if they are using NPN instead of ALPN - but NPN is not\nwidely used. It also requires an application configuration or programming error.\nFinally, this issue would not typically be under attacker control making active\nexploitation unlikely.\n\nThe FIPS modules in 3.3, 3.2, 3.1 and 3.0 are not affected by this issue.\n\nDue to the low severity of this issue we are not issuing new releases of\nOpenSSL at this time. The fix will be included in the next releases when they\nbecome available.",
-                    "diffID": "sha256:9664c8c85da49d2cedf85c6b8af0e128318580b95b277b87593a4f75886148af",
-                    "fixedVersions": [
-                      "1.1.1w-0+deb11u2"
-                    ],
-                    "installedVersion": "1.1.1w-0+deb11u1",
-                    "packageName": "openssl",
-                    "purl": "pkg:deb/debian/openssl@1.1.1w-0%2Bdeb11u1?arch=amd64&distro=debian-11.9",
-                    "references": [
-                      "http://www.openwall.com/lists/oss-security/2024/06/27/1",
-                      "http://www.openwall.com/lists/oss-security/2024/06/28/4",
-                      "http://www.openwall.com/lists/oss-security/2024/08/15/1",
-                      "https://access.redhat.com/errata/RHSA-2025:1673",
-                      "https://access.redhat.com/security/cve/CVE-2024-5535",
-                      "https://bugzilla.redhat.com/2294581",
-                      "https://bugzilla.redhat.com/2294676",
-                      "https://bugzilla.redhat.com/2301888",
-                      "https://bugzilla.redhat.com/2318857",
-                      "https://bugzilla.redhat.com/2318858",
-                      "https://bugzilla.redhat.com/2318870",
-                      "https://bugzilla.redhat.com/2318873",
-                      "https://bugzilla.redhat.com/2318874",
-                      "https://bugzilla.redhat.com/2318876",
-                      "https://bugzilla.redhat.com/2318882",
-                      "https://bugzilla.redhat.com/2318883",
-                      "https://bugzilla.redhat.com/2318884",
-                      "https://bugzilla.redhat.com/2318885",
-                      "https://bugzilla.redhat.com/2318886",
-                      "https://bugzilla.redhat.com/2318897",
-                      "https://bugzilla.redhat.com/2318900",
-                      "https://bugzilla.redhat.com/2318905",
-                      "https://bugzilla.redhat.com/2318914",
-                      "https://bugzilla.redhat.com/2318922",
-                      "https://bugzilla.redhat.com/2318923",
-                      "https://bugzilla.redhat.com/2318925",
-                      "https://bugzilla.redhat.com/2318926",
-                      "https://bugzilla.redhat.com/2318927",
-                      "https://bugzilla.redhat.com/2331191",
-                      "https://bugzilla.redhat.com/2339218",
-                      "https://bugzilla.redhat.com/2339220",
-                      "https://bugzilla.redhat.com/2339221",
-                      "https://bugzilla.redhat.com/2339226",
-                      "https://bugzilla.redhat.com/2339231",
-                      "https://bugzilla.redhat.com/2339236",
-                      "https://bugzilla.redhat.com/2339238",
-                      "https://bugzilla.redhat.com/2339243",
-                      "https://bugzilla.redhat.com/2339247",
-                      "https://bugzilla.redhat.com/2339252",
-                      "https://bugzilla.redhat.com/2339259",
-                      "https://bugzilla.redhat.com/2339266",
-                      "https://bugzilla.redhat.com/2339270",
-                      "https://bugzilla.redhat.com/2339271",
-                      "https://bugzilla.redhat.com/2339275",
-                      "https://bugzilla.redhat.com/2339277",
-                      "https://bugzilla.redhat.com/2339281",
-                      "https://bugzilla.redhat.com/2339284",
-                      "https://bugzilla.redhat.com/2339291",
-                      "https://bugzilla.redhat.com/2339293",
-                      "https://bugzilla.redhat.com/2339295",
-                      "https://bugzilla.redhat.com/2339299",
-                      "https://bugzilla.redhat.com/2339300",
-                      "https://bugzilla.redhat.com/2339304",
-                      "https://bugzilla.redhat.com/2339305",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2274020",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2281029",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2283757",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2294581",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-2511",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-4603",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-4741",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-5535",
-                      "https://errata.almalinux.org/8/ALSA-2025-1673.html",
-                      "https://errata.rockylinux.org/RLSA-2024:9333",
-                      "https://github.com/openssl/openssl/commit/4ada436a1946cbb24db5ab4ca082b69c1bc10f37",
-                      "https://github.com/openssl/openssl/commit/99fb785a5f85315b95288921a321a935ea29a51e",
-                      "https://github.com/openssl/openssl/commit/cf6f91f6121f4db167405db2f0de410a456f260c",
-                      "https://github.com/openssl/openssl/commit/e86ac436f0bd54d4517745483e2315650fae7b2c",
-                      "https://github.openssl.org/openssl/extended-releases/commit/9947251413065a05189a63c9b7a6c1d4e224c21c",
-                      "https://github.openssl.org/openssl/extended-releases/commit/b78ec0824da857223486660177d3b1f255c65d87",
-                      "https://linux.oracle.com/cve/CVE-2024-5535.html",
-                      "https://linux.oracle.com/errata/ELSA-2025-1673.html",
-                      "https://lists.debian.org/debian-lts-announce/2024/10/msg00033.html",
-                      "https://lists.debian.org/debian-lts-announce/2024/11/msg00000.html",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2024-5535",
-                      "https://openssl.org/news/secadv/20240627.txt",
-                      "https://security.netapp.com/advisory/ntap-20240712-0005/",
-                      "https://security.netapp.com/advisory/ntap-20241025-0006/",
-                      "https://security.netapp.com/advisory/ntap-20241025-0010/",
-                      "https://ubuntu.com/security/notices/USN-6937-1",
-                      "https://ubuntu.com/security/notices/USN-7894-1",
-                      "https://www.cve.org/CVERecord?id=CVE-2024-5535",
-                      "https://www.openssl.org/news/secadv/20240627.txt",
-                      "https://www.oracle.com/security-alerts/cpuoct2024.html#AppendixMSQL"
-                    ],
-                    "severity": "MEDIUM",
-                    "suppressed": false,
-                    "title": "openssl: SSL_select_next_proto buffer overread"
-                  },
-                  {
-                    "cve": "CVE-2025-68160",
-                    "cvss": {
-                      "redhat": {
-                        "v3score": "4.7",
-                        "v3vector": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-787"
-                    ],
-                    "description": "Issue summary: Writing large, newline-free data into a BIO chain using the\nline-buffering filter where the next BIO performs short writes can trigger\na heap-based out-of-bounds write.\n\nImpact summary: This out-of-bounds write can cause memory corruption which\ntypically results in a crash, leading to Denial of Service for an application.\n\nThe line-buffering BIO filter (BIO_f_linebuffer) is not used by default in\nTLS/SSL data paths. In OpenSSL command-line applications, it is typically\nonly pushed onto stdout/stderr on VMS systems. Third-party applications that\nexplicitly use this filter with a BIO chain that can short-write and that\nwrite large, newline-free data influenced by an attacker would be affected.\nHowever, the circumstances where this could happen are unlikely to be under\nattacker control, and BIO_f_linebuffer is unlikely to be handling non-curated\ndata controlled by an attacker. For that reason the issue was assessed as\nLow severity.\n\nThe FIPS modules in 3.6, 3.5, 3.4, 3.3 and 3.0 are not affected by this issue,\nas the BIO implementation is outside the OpenSSL FIPS module boundary.\n\nOpenSSL 3.6, 3.5, 3.4, 3.3, 3.0, 1.1.1 and 1.0.2 are vulnerable to this issue.",
-                    "diffID": "sha256:9664c8c85da49d2cedf85c6b8af0e128318580b95b277b87593a4f75886148af",
-                    "installedVersion": "1.1.1w-0+deb11u1",
-                    "packageName": "openssl",
-                    "purl": "pkg:deb/debian/openssl@1.1.1w-0%2Bdeb11u1?arch=amd64&distro=debian-11.9",
-                    "references": [
-                      "https://access.redhat.com/errata/RHSA-2026:1472",
-                      "https://access.redhat.com/security/cve/CVE-2025-68160",
-                      "https://bugzilla.redhat.com/2430375",
-                      "https://bugzilla.redhat.com/2430376",
-                      "https://bugzilla.redhat.com/2430377",
-                      "https://bugzilla.redhat.com/2430378",
-                      "https://bugzilla.redhat.com/2430379",
-                      "https://bugzilla.redhat.com/2430380",
-                      "https://bugzilla.redhat.com/2430381",
-                      "https://bugzilla.redhat.com/2430386",
-                      "https://bugzilla.redhat.com/2430387",
-                      "https://bugzilla.redhat.com/2430388",
-                      "https://bugzilla.redhat.com/2430389",
-                      "https://bugzilla.redhat.com/2430390",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430375",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430376",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430377",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430378",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430379",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430380",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430381",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430386",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430387",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430388",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430389",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430390",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-11187",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-15467",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-15468",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-15469",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-66199",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-68160",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-69418",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-69419",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-69420",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-69421",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-22795",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-22796",
-                      "https://errata.almalinux.org/10/ALSA-2026-1472.html",
-                      "https://errata.rockylinux.org/RLSA-2026:1473",
-                      "https://github.com/openssl/openssl/commit/384011202af92605d926fafe4a0bcd6b65d162ad",
-                      "https://github.com/openssl/openssl/commit/475c466ef2fbd8fc1df6fae1c3eed9c813fc8ff6",
-                      "https://github.com/openssl/openssl/commit/4c96fbba618e1940f038012506ee9e21d32ee12c",
-                      "https://github.com/openssl/openssl/commit/6845c3b6460a98b1ec4e463baa2ea1a63a32d7c0",
-                      "https://github.com/openssl/openssl/commit/68a7cd2e2816c3a02f4d45a2ce43fc04fac97096",
-                      "https://linux.oracle.com/cve/CVE-2025-68160.html",
-                      "https://linux.oracle.com/errata/ELSA-2026-50081.html",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2025-68160",
-                      "https://openssl-library.org/news/secadv/20260127.txt",
-                      "https://ubuntu.com/security/notices/USN-7980-1",
-                      "https://ubuntu.com/security/notices/USN-7980-2",
-                      "https://www.cve.org/CVERecord?id=CVE-2025-68160"
-                    ],
-                    "severity": "MEDIUM",
-                    "suppressed": false,
-                    "title": "openssl: OpenSSL: Denial of Service due to out-of-bounds write in BIO filter"
-                  },
-                  {
-                    "cve": "CVE-2025-69418",
-                    "cvss": {
-                      "redhat": {
-                        "v3score": "4",
-                        "v3vector": "CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-325"
-                    ],
-                    "description": "Issue summary: When using the low-level OCB API directly with AES-NI or<br>other hardware-accelerated code paths, inputs whose length is not a multiple<br>of 16 bytes can leave the final partial block unencrypted and unauthenticated.<br><br>Impact summary: The trailing 1-15 bytes of a message may be exposed in<br>cleartext on encryption and are not covered by the authentication tag,<br>allowing an attacker to read or tamper with those bytes without detection.<br><br>The low-level OCB encrypt and decrypt routines in the hardware-accelerated<br>stream path process full 16-byte blocks but do not advance the input/output<br>pointers. The subsequent tail-handling code then operates on the original<br>base pointers, effectively reprocessing the beginning of the buffer while<br>leaving the actual trailing bytes unprocessed. The authentication checksum<br>also excludes the true tail bytes.<br><br>However, typical OpenSSL consumers using EVP are not affected because the<br>higher-level EVP and provider OCB implementations split inputs so that full<br>blocks and trailing partial blocks are processed in separate calls, avoiding<br>the problematic code path. Additionally, TLS does not use OCB ciphersuites.<br>The vulnerability only affects applications that call the low-level<br>CRYPTO_ocb128_encrypt() or CRYPTO_ocb128_decrypt() functions directly with<br>non-block-aligned lengths in a single call on hardware-accelerated builds.<br>For these reasons the issue was assessed as Low severity.<br><br>The FIPS modules in 3.6, 3.5, 3.4, 3.3, 3.2, 3.1 and 3.0 are not affected<br>by this issue, as OCB mode is not a FIPS-approved algorithm.<br><br>OpenSSL 3.6, 3.5, 3.4, 3.3, 3.0 and 1.1.1 are vulnerable to this issue.<br><br>OpenSSL 1.0.2 is not affected by this issue.",
-                    "diffID": "sha256:9664c8c85da49d2cedf85c6b8af0e128318580b95b277b87593a4f75886148af",
-                    "installedVersion": "1.1.1w-0+deb11u1",
-                    "packageName": "openssl",
-                    "purl": "pkg:deb/debian/openssl@1.1.1w-0%2Bdeb11u1?arch=amd64&distro=debian-11.9",
-                    "references": [
-                      "https://access.redhat.com/errata/RHSA-2026:1472",
-                      "https://access.redhat.com/security/cve/CVE-2025-69418",
-                      "https://bugzilla.redhat.com/2430375",
-                      "https://bugzilla.redhat.com/2430376",
-                      "https://bugzilla.redhat.com/2430377",
-                      "https://bugzilla.redhat.com/2430378",
-                      "https://bugzilla.redhat.com/2430379",
-                      "https://bugzilla.redhat.com/2430380",
-                      "https://bugzilla.redhat.com/2430381",
-                      "https://bugzilla.redhat.com/2430386",
-                      "https://bugzilla.redhat.com/2430387",
-                      "https://bugzilla.redhat.com/2430388",
-                      "https://bugzilla.redhat.com/2430389",
-                      "https://bugzilla.redhat.com/2430390",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430375",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430376",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430377",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430378",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430379",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430380",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430381",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430386",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430387",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430388",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430389",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430390",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-11187",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-15467",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-15468",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-15469",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-66199",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-68160",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-69418",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-69419",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-69420",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-69421",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-22795",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-22796",
-                      "https://errata.almalinux.org/10/ALSA-2026-1472.html",
-                      "https://errata.rockylinux.org/RLSA-2026:1473",
-                      "https://github.com/openssl/openssl/commit/372fc5c77529695b05b4f5b5187691a57ef5dffc",
-                      "https://github.com/openssl/openssl/commit/4016975d4469cd6b94927c607f7c511385f928d8",
-                      "https://github.com/openssl/openssl/commit/52d23c86a54adab5ee9f80e48b242b52c4cc2347",
-                      "https://github.com/openssl/openssl/commit/a7589230356d908c0eca4b969ec4f62106f4f5ae",
-                      "https://github.com/openssl/openssl/commit/ed40856d7d4ba6cb42779b6770666a65f19cb977",
-                      "https://linux.oracle.com/cve/CVE-2025-69418.html",
-                      "https://linux.oracle.com/errata/ELSA-2026-50081.html",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2025-69418",
-                      "https://openssl-library.org/news/secadv/20260127.txt",
-                      "https://ubuntu.com/security/notices/USN-7980-1",
-                      "https://ubuntu.com/security/notices/USN-7980-2",
-                      "https://www.cve.org/CVERecord?id=CVE-2025-69418"
-                    ],
-                    "severity": "MEDIUM",
-                    "suppressed": false,
-                    "title": "openssl: OpenSSL: Information disclosure and data tampering via specific low-level OCB encryption/decryption calls"
-                  },
-                  {
-                    "cve": "CVE-2025-69420",
-                    "cvss": {
-                      "redhat": {
-                        "v3score": "5.9",
-                        "v3vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-754"
-                    ],
-                    "description": "Issue summary: A type confusion vulnerability exists in the TimeStamp Response\nverification code where an ASN1_TYPE union member is accessed without first\nvalidating the type, causing an invalid or NULL pointer dereference when\nprocessing a malformed TimeStamp Response file.\n\nImpact summary: An application calling TS_RESP_verify_response() with a\nmalformed TimeStamp Response can be caused to dereference an invalid or\nNULL pointer when reading, resulting in a Denial of Service.\n\nThe functions ossl_ess_get_signing_cert() and ossl_ess_get_signing_cert_v2()\naccess the signing cert attribute value without validating its type.\nWhen the type is not V_ASN1_SEQUENCE, this results in accessing invalid memory\nthrough the ASN1_TYPE union, causing a crash.\n\nExploiting this vulnerability requires an attacker to provide a malformed\nTimeStamp Response to an application that verifies timestamp responses. The\nTimeStamp protocol (RFC 3161) is not widely used and the impact of the\nexploit is just a Denial of Service. For these reasons the issue was\nassessed as Low severity.\n\nThe FIPS modules in 3.5, 3.4, 3.3 and 3.0 are not affected by this issue,\nas the TimeStamp Response implementation is outside the OpenSSL FIPS module\nboundary.\n\nOpenSSL 3.6, 3.5, 3.4, 3.3, 3.0 and 1.1.1 are vulnerable to this issue.\n\nOpenSSL 1.0.2 is not affected by this issue.",
-                    "diffID": "sha256:9664c8c85da49d2cedf85c6b8af0e128318580b95b277b87593a4f75886148af",
-                    "installedVersion": "1.1.1w-0+deb11u1",
-                    "packageName": "openssl",
-                    "purl": "pkg:deb/debian/openssl@1.1.1w-0%2Bdeb11u1?arch=amd64&distro=debian-11.9",
-                    "references": [
-                      "https://access.redhat.com/errata/RHSA-2026:1472",
-                      "https://access.redhat.com/security/cve/CVE-2025-69420",
-                      "https://bugzilla.redhat.com/2430375",
-                      "https://bugzilla.redhat.com/2430376",
-                      "https://bugzilla.redhat.com/2430377",
-                      "https://bugzilla.redhat.com/2430378",
-                      "https://bugzilla.redhat.com/2430379",
-                      "https://bugzilla.redhat.com/2430380",
-                      "https://bugzilla.redhat.com/2430381",
-                      "https://bugzilla.redhat.com/2430386",
-                      "https://bugzilla.redhat.com/2430387",
-                      "https://bugzilla.redhat.com/2430388",
-                      "https://bugzilla.redhat.com/2430389",
-                      "https://bugzilla.redhat.com/2430390",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430375",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430376",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430377",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430378",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430379",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430380",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430381",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430386",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430387",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430388",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430389",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430390",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-11187",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-15467",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-15468",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-15469",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-66199",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-68160",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-69418",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-69419",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-69420",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-69421",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-22795",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-22796",
-                      "https://errata.almalinux.org/10/ALSA-2026-1472.html",
-                      "https://errata.rockylinux.org/RLSA-2026:1473",
-                      "https://github.com/openssl/openssl/commit/27c7012c91cc986a598d7540f3079dfde2416eb9",
-                      "https://github.com/openssl/openssl/commit/4e254b48ad93cc092be3dd62d97015f33f73133a",
-                      "https://github.com/openssl/openssl/commit/564fd9c73787f25693bf9e75faf7bf6bb1305d4e",
-                      "https://github.com/openssl/openssl/commit/5eb0770ffcf11b785cf374ff3c19196245e54f1b",
-                      "https://github.com/openssl/openssl/commit/a99349ebfc519999edc50620abe24d599b9eb085",
-                      "https://linux.oracle.com/cve/CVE-2025-69420.html",
-                      "https://linux.oracle.com/errata/ELSA-2026-50081.html",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2025-69420",
-                      "https://openssl-library.org/news/secadv/20260127.txt",
-                      "https://ubuntu.com/security/notices/USN-7980-1",
-                      "https://ubuntu.com/security/notices/USN-7980-2",
-                      "https://www.cve.org/CVERecord?id=CVE-2025-69420"
-                    ],
-                    "severity": "MEDIUM",
-                    "suppressed": false,
-                    "title": "openssl: OpenSSL: Denial of Service via malformed TimeStamp Response"
-                  },
-                  {
-                    "cve": "CVE-2025-9230",
-                    "cvss": {
-                      "redhat": {
-                        "v3score": "5.6",
-                        "v3vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-125",
-                      "CWE-787"
-                    ],
-                    "description": "Issue summary: An application trying to decrypt CMS messages encrypted using\npassword based encryption can trigger an out-of-bounds read and write.\n\nImpact summary: This out-of-bounds read may trigger a crash which leads to\nDenial of Service for an application. The out-of-bounds write can cause\na memory corruption which can have various consequences including\na Denial of Service or Execution of attacker-supplied code.\n\nAlthough the consequences of a successful exploit of this vulnerability\ncould be severe, the probability that the attacker would be able to\nperform it is low. Besides, password based (PWRI) encryption support in CMS\nmessages is very rarely used. For that reason the issue was assessed as\nModerate severity according to our Security Policy.\n\nThe FIPS modules in 3.5, 3.4, 3.3, 3.2, 3.1 and 3.0 are not affected by this\nissue, as the CMS implementation is outside the OpenSSL FIPS module\nboundary.",
-                    "diffID": "sha256:9664c8c85da49d2cedf85c6b8af0e128318580b95b277b87593a4f75886148af",
-                    "fixedVersions": [
-                      "1.1.1w-0+deb11u4"
-                    ],
-                    "installedVersion": "1.1.1w-0+deb11u1",
-                    "packageName": "openssl",
-                    "purl": "pkg:deb/debian/openssl@1.1.1w-0%2Bdeb11u1?arch=amd64&distro=debian-11.9",
-                    "references": [
-                      "http://www.openwall.com/lists/oss-security/2025/09/30/5",
-                      "https://access.redhat.com/errata/RHSA-2026:0337",
-                      "https://access.redhat.com/security/cve/CVE-2025-9230",
-                      "https://bugzilla.redhat.com/2396054",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2396054",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-9230",
-                      "https://errata.almalinux.org/8/ALSA-2026-0337.html",
-                      "https://errata.rockylinux.org/RLSA-2025:21255",
-                      "https://github.com/openssl/openssl/commit/5965ea5dd6960f36d8b7f74f8eac67a8eb8f2b45",
-                      "https://github.com/openssl/openssl/commit/9e91358f365dee6c446dcdcdb01c04d2743fd280",
-                      "https://github.com/openssl/openssl/commit/a79c4ce559c6a3a8fd4109e9f33c1185d5bf2def",
-                      "https://github.com/openssl/openssl/commit/b5282d677551afda7d20e9c00e09561b547b2dfd",
-                      "https://github.com/openssl/openssl/commit/bae259a211ada6315dc50900686daaaaaa55f482",
-                      "https://github.openssl.org/openssl/extended-releases/commit/c2b96348bfa662f25f4fabf81958ae822063dae3",
-                      "https://github.openssl.org/openssl/extended-releases/commit/dfbaf161d8dafc1132dd88cd48ad990ed9b4c8ba",
-                      "https://linux.oracle.com/cve/CVE-2025-9230.html",
-                      "https://linux.oracle.com/errata/ELSA-2026-50077.html",
-                      "https://lists.debian.org/debian-lts-announce/2025/10/msg00001.html",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2025-9230",
-                      "https://openssl-library.org/news/secadv/20250930.txt",
-                      "https://ubuntu.com/security/notices/USN-7786-1",
-                      "https://www.cve.org/CVERecord?id=CVE-2025-9230"
-                    ],
-                    "severity": "MEDIUM",
-                    "suppressed": false,
-                    "title": "openssl: Out-of-bounds read & write in RFC 3211 KEK Unwrap"
-                  },
-                  {
-                    "cve": "CVE-2026-22795",
-                    "cvss": {
-                      "redhat": {
-                        "v3score": "5.5",
-                        "v3vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-754"
-                    ],
-                    "description": "Issue summary: An invalid or NULL pointer dereference can happen in\nan application processing a malformed PKCS#12 file.\n\nImpact summary: An application processing a malformed PKCS#12 file can be\ncaused to dereference an invalid or NULL pointer on memory read, resulting\nin a Denial of Service.\n\nA type confusion vulnerability exists in PKCS#12 parsing code where\nan ASN1_TYPE union member is accessed without first validating the type,\ncausing an invalid pointer read.\n\nThe location is constrained to a 1-byte address space, meaning any\nattempted pointer manipulation can only target addresses between 0x00 and 0xFF.\nThis range corresponds to the zero page, which is unmapped on most modern\noperating systems and will reliably result in a crash, leading only to a\nDenial of Service. Exploiting this issue also requires a user or application\nto process a maliciously crafted PKCS#12 file. It is uncommon to accept\nuntrusted PKCS#12 files in applications as they are usually used to store\nprivate keys which are trusted by definition. For these reasons, the issue\nwas assessed as Low severity.\n\nThe FIPS modules in 3.5, 3.4, 3.3 and 3.0 are not affected by this issue,\nas the PKCS12 implementation is outside the OpenSSL FIPS module boundary.\n\nOpenSSL 3.6, 3.5, 3.4, 3.3, 3.0 and 1.1.1 are vulnerable to this issue.\n\nOpenSSL 1.0.2 is not affected by this issue.",
-                    "diffID": "sha256:9664c8c85da49d2cedf85c6b8af0e128318580b95b277b87593a4f75886148af",
-                    "installedVersion": "1.1.1w-0+deb11u1",
-                    "packageName": "openssl",
-                    "purl": "pkg:deb/debian/openssl@1.1.1w-0%2Bdeb11u1?arch=amd64&distro=debian-11.9",
-                    "references": [
-                      "https://access.redhat.com/errata/RHSA-2026:1472",
-                      "https://access.redhat.com/security/cve/CVE-2026-22795",
-                      "https://bugzilla.redhat.com/2430375",
-                      "https://bugzilla.redhat.com/2430376",
-                      "https://bugzilla.redhat.com/2430377",
-                      "https://bugzilla.redhat.com/2430378",
-                      "https://bugzilla.redhat.com/2430379",
-                      "https://bugzilla.redhat.com/2430380",
-                      "https://bugzilla.redhat.com/2430381",
-                      "https://bugzilla.redhat.com/2430386",
-                      "https://bugzilla.redhat.com/2430387",
-                      "https://bugzilla.redhat.com/2430388",
-                      "https://bugzilla.redhat.com/2430389",
-                      "https://bugzilla.redhat.com/2430390",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430375",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430376",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430377",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430378",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430379",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430380",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430381",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430386",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430387",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430388",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430389",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430390",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-11187",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-15467",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-15468",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-15469",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-66199",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-68160",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-69418",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-69419",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-69420",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-69421",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-22795",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-22796",
-                      "https://errata.almalinux.org/10/ALSA-2026-1472.html",
-                      "https://errata.rockylinux.org/RLSA-2026:1473",
-                      "https://github.com/openssl/openssl/commit/2502e7b7d4c0cf4f972a881641fe09edc67aeec4",
-                      "https://github.com/openssl/openssl/commit/572844beca95068394c916626a6d3a490f831a49",
-                      "https://github.com/openssl/openssl/commit/7bbca05be55b129651d9df4bdb92becc45002c12",
-                      "https://github.com/openssl/openssl/commit/eeee3cbd4d682095ed431052f00403004596373e",
-                      "https://github.com/openssl/openssl/commit/ef2fb66ec571564d64d1c74a12e388a2a54d05d2",
-                      "https://linux.oracle.com/cve/CVE-2026-22795.html",
-                      "https://linux.oracle.com/errata/ELSA-2026-50081.html",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2026-22795",
-                      "https://openssl-library.org/news/secadv/20260127.txt",
-                      "https://ubuntu.com/security/notices/USN-7980-1",
-                      "https://ubuntu.com/security/notices/USN-7980-2",
-                      "https://www.cve.org/CVERecord?id=CVE-2026-22795"
-                    ],
-                    "severity": "MEDIUM",
-                    "suppressed": false,
-                    "title": "openssl: OpenSSL: Denial of Service due to type confusion in PKCS#12 file processing"
-                  },
-                  {
-                    "cve": "CVE-2026-22796",
-                    "cvss": {
-                      "redhat": {
-                        "v3score": "5.9",
-                        "v3vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-754"
-                    ],
-                    "description": "Issue summary: A type confusion vulnerability exists in the signature\nverification of signed PKCS#7 data where an ASN1_TYPE union member is\naccessed without first validating the type, causing an invalid or NULL\npointer dereference when processing malformed PKCS#7 data.\n\nImpact summary: An application performing signature verification of PKCS#7\ndata or calling directly the PKCS7_digest_from_attributes() function can be\ncaused to dereference an invalid or NULL pointer when reading, resulting in\na Denial of Service.\n\nThe function PKCS7_digest_from_attributes() accesses the message digest attribute\nvalue without validating its type. When the type is not V_ASN1_OCTET_STRING,\nthis results in accessing invalid memory through the ASN1_TYPE union, causing\na crash.\n\nExploiting this vulnerability requires an attacker to provide a malformed\nsigned PKCS#7 to an application that verifies it. The impact of the\nexploit is just a Denial of Service, the PKCS7 API is legacy and applications\nshould be using the CMS API instead. For these reasons the issue was\nassessed as Low severity.\n\nThe FIPS modules in 3.5, 3.4, 3.3 and 3.0 are not affected by this issue,\nas the PKCS#7 parsing implementation is outside the OpenSSL FIPS module\nboundary.\n\nOpenSSL 3.6, 3.5, 3.4, 3.3, 3.0, 1.1.1 and 1.0.2 are vulnerable to this issue.",
-                    "diffID": "sha256:9664c8c85da49d2cedf85c6b8af0e128318580b95b277b87593a4f75886148af",
-                    "installedVersion": "1.1.1w-0+deb11u1",
-                    "packageName": "openssl",
-                    "purl": "pkg:deb/debian/openssl@1.1.1w-0%2Bdeb11u1?arch=amd64&distro=debian-11.9",
-                    "references": [
-                      "https://access.redhat.com/errata/RHSA-2026:1472",
-                      "https://access.redhat.com/security/cve/CVE-2026-22796",
-                      "https://bugzilla.redhat.com/2430375",
-                      "https://bugzilla.redhat.com/2430376",
-                      "https://bugzilla.redhat.com/2430377",
-                      "https://bugzilla.redhat.com/2430378",
-                      "https://bugzilla.redhat.com/2430379",
-                      "https://bugzilla.redhat.com/2430380",
-                      "https://bugzilla.redhat.com/2430381",
-                      "https://bugzilla.redhat.com/2430386",
-                      "https://bugzilla.redhat.com/2430387",
-                      "https://bugzilla.redhat.com/2430388",
-                      "https://bugzilla.redhat.com/2430389",
-                      "https://bugzilla.redhat.com/2430390",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430375",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430376",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430377",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430378",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430379",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430380",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430381",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430386",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430387",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430388",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430389",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430390",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-11187",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-15467",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-15468",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-15469",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-66199",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-68160",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-69418",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-69419",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-69420",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-69421",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-22795",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-22796",
-                      "https://errata.almalinux.org/10/ALSA-2026-1472.html",
-                      "https://errata.rockylinux.org/RLSA-2026:1473",
-                      "https://github.com/openssl/openssl/commit/2502e7b7d4c0cf4f972a881641fe09edc67aeec4",
-                      "https://github.com/openssl/openssl/commit/572844beca95068394c916626a6d3a490f831a49",
-                      "https://github.com/openssl/openssl/commit/7bbca05be55b129651d9df4bdb92becc45002c12",
-                      "https://github.com/openssl/openssl/commit/eeee3cbd4d682095ed431052f00403004596373e",
-                      "https://github.com/openssl/openssl/commit/ef2fb66ec571564d64d1c74a12e388a2a54d05d2",
-                      "https://linux.oracle.com/cve/CVE-2026-22796.html",
-                      "https://linux.oracle.com/errata/ELSA-2026-50081.html",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2026-22796",
-                      "https://openssl-library.org/news/secadv/20260127.txt",
-                      "https://ubuntu.com/security/notices/USN-7980-1",
-                      "https://ubuntu.com/security/notices/USN-7980-2",
-                      "https://www.cve.org/CVERecord?id=CVE-2026-22796"
-                    ],
-                    "severity": "MEDIUM",
-                    "suppressed": false,
-                    "title": "openssl: OpenSSL: Denial of Service via type confusion in PKCS#7 signature verification"
-                  },
-                  {
-                    "cve": "CVE-2024-2511",
-                    "cvss": {
-                      "redhat": {
-                        "v3score": "3.7",
-                        "v3vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-1325"
-                    ],
-                    "description": "Issue summary: Some non-default TLS server configurations can cause unbounded\nmemory growth when processing TLSv1.3 sessions\n\nImpact summary: An attacker may exploit certain server configurations to trigger\nunbounded memory growth that would lead to a Denial of Service\n\nThis problem can occur in TLSv1.3 if the non-default SSL_OP_NO_TICKET option is\nbeing used (but not if early_data support is also configured and the default\nanti-replay protection is in use). In this case, under certain conditions, the\nsession cache can get into an incorrect state and it will fail to flush properly\nas it fills. The session cache will continue to grow in an unbounded manner. A\nmalicious client could deliberately create the scenario for this failure to\nforce a Denial of Service. It may also happen by accident in normal operation.\n\nThis issue only affects TLS servers supporting TLSv1.3. It does not affect TLS\nclients.\n\nThe FIPS modules in 3.2, 3.1 and 3.0 are not affected by this issue. OpenSSL\n1.0.2 is also not affected by this issue.",
-                    "diffID": "sha256:9664c8c85da49d2cedf85c6b8af0e128318580b95b277b87593a4f75886148af",
-                    "fixedVersions": [
-                      "1.1.1w-0+deb11u2"
-                    ],
-                    "installedVersion": "1.1.1w-0+deb11u1",
-                    "packageName": "openssl",
-                    "purl": "pkg:deb/debian/openssl@1.1.1w-0%2Bdeb11u1?arch=amd64&distro=debian-11.9",
-                    "references": [
-                      "http://www.openwall.com/lists/oss-security/2024/04/08/5",
-                      "https://access.redhat.com/errata/RHSA-2024:9333",
-                      "https://access.redhat.com/security/cve/CVE-2024-2511",
-                      "https://bugzilla.redhat.com/2274020",
-                      "https://bugzilla.redhat.com/2281029",
-                      "https://bugzilla.redhat.com/2283757",
-                      "https://bugzilla.redhat.com/2294581",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2274020",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2281029",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2283757",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2294581",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-2511",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-4603",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-4741",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-5535",
-                      "https://errata.almalinux.org/9/ALSA-2024-9333.html",
-                      "https://errata.rockylinux.org/RLSA-2024:9333",
-                      "https://github.com/openssl/openssl/commit/7e4d731b1c07201ad9374c1cd9ac5263bdf35bce",
-                      "https://github.com/openssl/openssl/commit/b52867a9f618bb955bed2a3ce3db4d4f97ed8e5d",
-                      "https://github.com/openssl/openssl/commit/e9d7083e241670332e0443da0f0d4ffb52829f08",
-                      "https://github.openssl.org/openssl/extended-releases/commit/5f8d25770ae6437db119dfc951e207271a326640",
-                      "https://linux.oracle.com/cve/CVE-2024-2511.html",
-                      "https://linux.oracle.com/errata/ELSA-2024-9333.html",
-                      "https://lists.debian.org/debian-lts-announce/2024/10/msg00033.html",
-                      "https://lists.debian.org/debian-lts-announce/2024/11/msg00000.html",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2024-2511",
-                      "https://security.netapp.com/advisory/ntap-20240503-0013/",
-                      "https://ubuntu.com/security/notices/USN-6937-1",
-                      "https://ubuntu.com/security/notices/USN-7894-1",
-                      "https://www.cve.org/CVERecord?id=CVE-2024-2511",
-                      "https://www.openssl.org/news/secadv/20240408.txt",
-                      "https://www.openssl.org/news/vulnerabilities.html"
-                    ],
-                    "severity": "LOW",
-                    "suppressed": false,
-                    "title": "openssl: Unbounded memory growth with session handling in TLSv1.3"
-                  },
-                  {
-                    "cve": "CVE-2024-9143",
-                    "cvss": {
-                      "redhat": {
-                        "v3score": "3.7",
-                        "v3vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-125",
-                      "CWE-787"
-                    ],
-                    "description": "Issue summary: Use of the low-level GF(2^m) elliptic curve APIs with untrusted\nexplicit values for the field polynomial can lead to out-of-bounds memory reads\nor writes.\n\nImpact summary: Out of bound memory writes can lead to an application crash or\neven a possibility of a remote code execution, however, in all the protocols\ninvolving Elliptic Curve Cryptography that we're aware of, either only \"named\ncurves\" are supported, or, if explicit curve parameters are supported, they\nspecify an X9.62 encoding of binary (GF(2^m)) curves that can't represent\nproblematic input values. Thus the likelihood of existence of a vulnerable\napplication is low.\n\nIn particular, the X9.62 encoding is used for ECC keys in X.509 certificates,\nso problematic inputs cannot occur in the context of processing X.509\ncertificates.  Any problematic use-cases would have to be using an \"exotic\"\ncurve encoding.\n\nThe affected APIs include: EC_GROUP_new_curve_GF2m(), EC_GROUP_new_from_params(),\nand various supporting BN_GF2m_*() functions.\n\nApplications working with \"exotic\" explicit binary (GF(2^m)) curve parameters,\nthat make it possible to represent invalid field polynomials with a zero\nconstant term, via the above or similar APIs, may terminate abruptly as a\nresult of reading or writing outside of array bounds.  Remote code execution\ncannot easily be ruled out.\n\nThe FIPS modules in 3.3, 3.2, 3.1 and 3.0 are not affected by this issue.",
-                    "diffID": "sha256:9664c8c85da49d2cedf85c6b8af0e128318580b95b277b87593a4f75886148af",
-                    "fixedVersions": [
-                      "1.1.1w-0+deb11u2"
-                    ],
-                    "installedVersion": "1.1.1w-0+deb11u1",
-                    "packageName": "openssl",
-                    "purl": "pkg:deb/debian/openssl@1.1.1w-0%2Bdeb11u1?arch=amd64&distro=debian-11.9",
-                    "references": [
-                      "http://www.openwall.com/lists/oss-security/2024/10/16/1",
-                      "http://www.openwall.com/lists/oss-security/2024/10/23/1",
-                      "http://www.openwall.com/lists/oss-security/2024/10/24/1",
-                      "https://access.redhat.com/security/cve/CVE-2024-9143",
-                      "https://github.com/openssl/openssl/commit/72ae83ad214d2eef262461365a1975707f862712",
-                      "https://github.com/openssl/openssl/commit/bc7e04d7c8d509fb78fc0e285aa948fb0da04700",
-                      "https://github.com/openssl/openssl/commit/c0d3e4d32d2805f49bec30547f225bc4d092e1f4",
-                      "https://github.com/openssl/openssl/commit/fdf6723362ca51bd883295efe206cb5b1cfa5154",
-                      "https://github.openssl.org/openssl/extended-releases/commit/8efc0cbaa8ebba8e116f7b81a876a4123594d86a",
-                      "https://github.openssl.org/openssl/extended-releases/commit/9d576994cec2b7aa37a91740ea7e680810957e41",
-                      "https://lists.debian.org/debian-lts-announce/2024/10/msg00033.html",
-                      "https://lists.debian.org/debian-lts-announce/2024/11/msg00000.html",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2024-9143",
-                      "https://openssl-library.org/news/secadv/20241016.txt",
-                      "https://security.netapp.com/advisory/ntap-20241101-0001/",
-                      "https://ubuntu.com/security/notices/USN-7264-1",
-                      "https://ubuntu.com/security/notices/USN-7278-1",
-                      "https://ubuntu.com/security/notices/USN-7894-1",
-                      "https://www.cve.org/CVERecord?id=CVE-2024-9143"
-                    ],
-                    "severity": "LOW",
-                    "suppressed": false,
-                    "title": "openssl: Low-level invalid GF(2^m) parameters lead to OOB memory access"
-                  },
-                  {
-                    "cve": "CVE-2025-27587",
-                    "cwes": [
-                      "CWE-385"
-                    ],
-                    "description": "OpenSSL 3.0.0 through 3.3.2 on the PowerPC architecture is vulnerable to a Minerva attack, exploitable by measuring the time of signing of random messages using the EVP_DigestSign API, and then using the private key to extract the K value (nonce) from the signatures. Next, based on the bit size of the extracted nonce, one can compare the signing time of full-sized nonces to signatures that used smaller nonces, via statistical tests. There is a side-channel in the P-364 curve that allows private key extraction (also, there is a dependency between the bit size of K and the size of the side channel). NOTE: This CVE is disputed because the OpenSSL security policy explicitly notes that any side channels which require same physical system to be detected are outside of the threat model for the software. The timing signal is so small that it is infeasible to be detected without having the attacking process running on the same physical system.",
-                    "diffID": "sha256:9664c8c85da49d2cedf85c6b8af0e128318580b95b277b87593a4f75886148af",
-                    "installedVersion": "1.1.1w-0+deb11u1",
-                    "packageName": "openssl",
-                    "purl": "pkg:deb/debian/openssl@1.1.1w-0%2Bdeb11u1?arch=amd64&distro=debian-11.9",
-                    "references": [
-                      "https://github.com/openssl/openssl/issues/24253",
-                      "https://minerva.crocs.fi.muni.cz"
-                    ],
-                    "severity": "LOW",
-                    "suppressed": false,
-                    "title": "OpenSSL 3.0.0 through 3.3.2 on the PowerPC architecture is vulnerable  ..."
-                  },
-                  {
-                    "cve": "CVE-2023-4641",
-                    "cvss": {
-                      "nvd": {
-                        "v3score": "5.5",
-                        "v3vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N"
-                      },
-                      "redhat": {
-                        "v3score": "4.7",
-                        "v3vector": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-303",
-                      "CWE-287"
-                    ],
-                    "description": "A flaw was found in shadow-utils. When asking for a new password, shadow-utils asks the password twice. If the password fails on the second attempt, shadow-utils fails in cleaning the buffer used to store the first entry. This may allow an attacker with enough access to retrieve the password from the memory.",
-                    "diffID": "sha256:420179ad2efafbf953a0c75f68a4c9dfaf38a98643df97d415bce49b179895f7",
-                    "fixedVersions": [
-                      "1:4.8.1-1+deb11u1"
-                    ],
-                    "installedVersion": "1:4.8.1-1",
-                    "packageName": "passwd",
-                    "purl": "pkg:deb/debian/passwd@4.8.1-1?arch=amd64&distro=debian-11.9&epoch=1",
-                    "references": [
-                      "https://access.redhat.com/errata/RHSA-2023:6632",
-                      "https://access.redhat.com/errata/RHSA-2023:7112",
-                      "https://access.redhat.com/errata/RHSA-2024:0417",
-                      "https://access.redhat.com/errata/RHSA-2024:2577",
-                      "https://access.redhat.com/security/cve/CVE-2023-4641",
-                      "https://bugzilla.redhat.com/2215945",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2215945",
-                      "https://errata.almalinux.org/8/ALSA-2023-7112.html",
-                      "https://linux.oracle.com/cve/CVE-2023-4641.html",
-                      "https://linux.oracle.com/errata/ELSA-2023-7112.html",
-                      "https://lists.debian.org/debian-lts-announce/2025/04/msg00026.html",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2023-4641",
-                      "https://ubuntu.com/security/notices/USN-6640-1",
-                      "https://www.cve.org/CVERecord?id=CVE-2023-4641"
-                    ],
-                    "severity": "MEDIUM",
-                    "suppressed": false,
-                    "title": "shadow-utils: possible password leak during passwd(1) change"
-                  },
-                  {
-                    "cve": "CVE-2007-5686",
-                    "cvss": {
-                      "nvd": {
-                        "v3score": "0",
-                        "v3vector": ""
-                      }
-                    },
-                    "cwes": [
-                      "CWE-264"
-                    ],
-                    "description": "initscripts in rPath Linux 1 sets insecure permissions for the /var/log/btmp file, which allows local users to obtain sensitive information regarding authentication attempts.  NOTE: because sshd detects the insecure permissions and does not log certain events, this also prevents sshd from logging failed authentication attempts by remote attackers.",
-                    "diffID": "sha256:420179ad2efafbf953a0c75f68a4c9dfaf38a98643df97d415bce49b179895f7",
-                    "installedVersion": "1:4.8.1-1",
-                    "packageName": "passwd",
-                    "purl": "pkg:deb/debian/passwd@4.8.1-1?arch=amd64&distro=debian-11.9&epoch=1",
-                    "references": [
-                      "http://secunia.com/advisories/27215",
-                      "http://www.securityfocus.com/archive/1/482129/100/100/threaded",
-                      "http://www.securityfocus.com/archive/1/482857/100/0/threaded",
-                      "http://www.securityfocus.com/bid/26048",
-                      "http://www.vupen.com/english/advisories/2007/3474",
-                      "https://issues.rpath.com/browse/RPL-1825"
-                    ],
-                    "severity": "LOW",
-                    "suppressed": false,
-                    "title": "initscripts in rPath Linux 1 sets insecure permissions for the /var/lo ..."
-                  },
-                  {
-                    "cve": "CVE-2013-4235",
-                    "cvss": {
-                      "nvd": {
-                        "v3score": "4.7",
-                        "v3vector": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:N"
-                      },
-                      "redhat": {
-                        "v3score": "4.4",
-                        "v3vector": "CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:N/I:H/A:N"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-367"
-                    ],
-                    "description": "shadow: TOCTOU (time-of-check time-of-use) race condition when copying and removing directory trees",
-                    "diffID": "sha256:420179ad2efafbf953a0c75f68a4c9dfaf38a98643df97d415bce49b179895f7",
-                    "installedVersion": "1:4.8.1-1",
-                    "packageName": "passwd",
-                    "purl": "pkg:deb/debian/passwd@4.8.1-1?arch=amd64&distro=debian-11.9&epoch=1",
-                    "references": [
-                      "https://access.redhat.com/security/cve/CVE-2013-4235",
-                      "https://access.redhat.com/security/cve/cve-2013-4235",
-                      "https://bugs.launchpad.net/ubuntu/+source/shadow/+bug/1998169",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2013-4235",
-                      "https://github.com/shadow-maint/shadow/issues/317",
-                      "https://github.com/shadow-maint/shadow/pull/545",
-                      "https://lists.apache.org/thread.html/rf9fa47ab66495c78bb4120b0754dd9531ca2ff0430f6685ac9b07772%40%3Cdev.mina.apache.org%3E",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2013-4235",
-                      "https://security-tracker.debian.org/tracker/CVE-2013-4235",
-                      "https://security.gentoo.org/glsa/202210-26",
-                      "https://ubuntu.com/security/notices/USN-5745-1",
-                      "https://ubuntu.com/security/notices/USN-5745-2",
-                      "https://www.cve.org/CVERecord?id=CVE-2013-4235"
-                    ],
-                    "severity": "LOW",
-                    "suppressed": false,
-                    "title": "shadow-utils: TOCTOU race conditions by copying and removing directory trees"
-                  },
-                  {
-                    "cve": "CVE-2023-29383",
-                    "cvss": {
-                      "nvd": {
-                        "v3score": "3.3",
-                        "v3vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N"
-                      },
-                      "redhat": {
-                        "v3score": "5.5",
-                        "v3vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-74",
-                      "CWE-125"
-                    ],
-                    "description": "In Shadow 4.13, it is possible to inject control characters into fields provided to the SUID program chfn (change finger). Although it is not possible to exploit this directly (e.g., adding a new user fails because \\n is in the block list), it is possible to misrepresent the /etc/passwd file when viewed. Use of \\r manipulations and Unicode characters to work around blocking of the : character make it possible to give the impression that a new user has been added. In other words, an adversary may be able to convince a system administrator to take the system offline (an indirect, social-engineered denial of service) by demonstrating that \"cat /etc/passwd\" shows a rogue user account.",
-                    "diffID": "sha256:420179ad2efafbf953a0c75f68a4c9dfaf38a98643df97d415bce49b179895f7",
-                    "fixedVersions": [
-                      "1:4.8.1-1+deb11u1"
-                    ],
-                    "installedVersion": "1:4.8.1-1",
-                    "packageName": "passwd",
-                    "purl": "pkg:deb/debian/passwd@4.8.1-1?arch=amd64&distro=debian-11.9&epoch=1",
-                    "references": [
-                      "https://access.redhat.com/security/cve/CVE-2023-29383",
-                      "https://github.com/shadow-maint/shadow/commit/e5905c4b84d4fb90aefcd96ee618411ebfac663d",
-                      "https://github.com/shadow-maint/shadow/pull/687",
-                      "https://lists.debian.org/debian-lts-announce/2025/04/msg00026.html",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2023-29383",
-                      "https://www.cve.org/CVERecord?id=CVE-2023-29383",
-                      "https://www.trustwave.com/en-us/resources/blogs/spiderlabs-blog/cve-2023-29383-abusing-linux-chfn-to-misrepresent-etc-passwd/",
-                      "https://www.trustwave.com/en-us/resources/security-resources/security-advisories/?fid=31797"
-                    ],
-                    "severity": "LOW",
-                    "suppressed": false,
-                    "title": "shadow: Improper input validation in shadow-utils package utility chfn"
-                  },
-                  {
-                    "cve": "CVE-2024-56433",
-                    "cvss": {
-                      "redhat": {
-                        "v3score": "3.6",
-                        "v3vector": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:N"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-1188"
-                    ],
-                    "description": "shadow-utils (aka shadow) 4.4 through 4.17.0 establishes a default /etc/subuid behavior (e.g., uid 100000 through 165535 for the first user account) that can realistically conflict with the uids of users defined on locally administered networks, potentially leading to account takeover, e.g., by leveraging newuidmap for access to an NFS home directory (or same-host resources in the case of remote logins by these local network users). NOTE: it may also be argued that system administrators should not have assigned uids, within local networks, that are within the range that can occur in /etc/subuid.",
-                    "diffID": "sha256:420179ad2efafbf953a0c75f68a4c9dfaf38a98643df97d415bce49b179895f7",
-                    "installedVersion": "1:4.8.1-1",
-                    "packageName": "passwd",
-                    "purl": "pkg:deb/debian/passwd@4.8.1-1?arch=amd64&distro=debian-11.9&epoch=1",
-                    "references": [
-                      "https://access.redhat.com/errata/RHSA-2025:20145",
-                      "https://access.redhat.com/security/cve/CVE-2024-56433",
-                      "https://bugzilla.redhat.com/2334165",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2334165",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-56433",
-                      "https://errata.almalinux.org/10/ALSA-2025-20145.html",
-                      "https://errata.rockylinux.org/RLSA-2025:20559",
-                      "https://github.com/shadow-maint/shadow/blob/e2512d5741d4a44bdd81a8c2d0029b6222728cf0/etc/login.defs#L238-L241",
-                      "https://github.com/shadow-maint/shadow/issues/1157",
-                      "https://github.com/shadow-maint/shadow/releases/tag/4.4",
-                      "https://linux.oracle.com/cve/CVE-2024-56433.html",
-                      "https://linux.oracle.com/errata/ELSA-2025-20559-0.html",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2024-56433",
-                      "https://www.cve.org/CVERecord?id=CVE-2024-56433"
-                    ],
-                    "severity": "LOW",
-                    "suppressed": false,
-                    "title": "shadow-utils: Default subordinate ID configuration in /etc/login.defs could lead to compromise"
-                  },
-                  {
-                    "cve": "TEMP-0628843-DBAD28",
-                    "diffID": "sha256:420179ad2efafbf953a0c75f68a4c9dfaf38a98643df97d415bce49b179895f7",
-                    "installedVersion": "1:4.8.1-1",
-                    "packageName": "passwd",
-                    "purl": "pkg:deb/debian/passwd@4.8.1-1?arch=amd64&distro=debian-11.9&epoch=1",
-                    "severity": "LOW",
-                    "suppressed": false,
-                    "title": "[more related to CVE-2005-4890]"
-                  },
-                  {
-                    "cve": "CVE-2020-16156",
-                    "cvss": {
-                      "nvd": {
-                        "v3score": "7.8",
-                        "v3vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H"
-                      },
-                      "redhat": {
-                        "v3score": "7.8",
-                        "v3vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-347"
-                    ],
-                    "description": "CPAN 2.28 allows Signature Verification Bypass.",
-                    "diffID": "sha256:420179ad2efafbf953a0c75f68a4c9dfaf38a98643df97d415bce49b179895f7",
-                    "fixedVersions": [
-                      "5.32.1-4+deb11u4"
-                    ],
-                    "installedVersion": "5.32.1-4+deb11u3",
-                    "packageName": "perl-base",
-                    "purl": "pkg:deb/debian/perl-base@5.32.1-4%2Bdeb11u3?arch=amd64&distro=debian-11.9",
-                    "references": [
-                      "http://blogs.perl.org/users/neilb/2021/11/addressing-cpan-vulnerabilities-related-to-checksums.html",
-                      "https://access.redhat.com/errata/RHSA-2025:8432",
-                      "https://access.redhat.com/security/cve/CVE-2020-16156",
-                      "https://blog.hackeriet.no/cpan-signature-verification-vulnerabilities/",
-                      "https://bugzilla.redhat.com/2035273",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2035273",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-16156",
-                      "https://errata.almalinux.org/8/ALSA-2025-8432.html",
-                      "https://errata.rockylinux.org/RLSA-2025:8432",
-                      "https://linux.oracle.com/cve/CVE-2020-16156.html",
-                      "https://linux.oracle.com/errata/ELSA-2025-8432.html",
-                      "https://lists.debian.org/debian-lts-announce/2024/10/msg00017.html",
-                      "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/SD6RYOJII7HRJ6WVORFNVTYNOFY5JDXN/",
-                      "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/SZ32AJIV4RHJMLWLU5QULGKMMIHYOMDC/",
-                      "https://metacpan.org/pod/distribution/CPAN/scripts/cpan",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2020-16156",
-                      "https://ubuntu.com/security/notices/USN-5689-1",
-                      "https://ubuntu.com/security/notices/USN-5689-2",
-                      "https://www.cve.org/CVERecord?id=CVE-2020-16156"
-                    ],
-                    "severity": "HIGH",
-                    "suppressed": false,
-                    "title": "perl-CPAN: Bypass of verification of signatures in CHECKSUMS files"
-                  },
-                  {
-                    "cve": "CVE-2023-31484",
-                    "cvss": {
-                      "nvd": {
-                        "v3score": "8.1",
-                        "v3vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H"
-                      },
-                      "redhat": {
-                        "v3score": "7.4",
-                        "v3vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-295"
-                    ],
-                    "description": "CPAN.pm before 2.35 does not verify TLS certificates when downloading distributions over HTTPS.",
-                    "diffID": "sha256:420179ad2efafbf953a0c75f68a4c9dfaf38a98643df97d415bce49b179895f7",
-                    "fixedVersions": [
-                      "5.32.1-4+deb11u4"
-                    ],
-                    "installedVersion": "5.32.1-4+deb11u3",
-                    "packageName": "perl-base",
-                    "purl": "pkg:deb/debian/perl-base@5.32.1-4%2Bdeb11u3?arch=amd64&distro=debian-11.9",
-                    "references": [
-                      "http://www.openwall.com/lists/oss-security/2023/04/29/1",
-                      "http://www.openwall.com/lists/oss-security/2023/05/03/3",
-                      "http://www.openwall.com/lists/oss-security/2023/05/03/5",
-                      "http://www.openwall.com/lists/oss-security/2023/05/07/2",
-                      "https://access.redhat.com/errata/RHSA-2024:3094",
-                      "https://access.redhat.com/security/cve/CVE-2023-31484",
-                      "https://blog.hackeriet.no/perl-http-tiny-insecure-tls-default-affects-cpan-modules/",
-                      "https://bugzilla.redhat.com/2218667",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2218667",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-31484",
-                      "https://errata.almalinux.org/8/ALSA-2024-3094.html",
-                      "https://errata.rockylinux.org/RLSA-2023:6539",
-                      "https://github.com/andk/cpanpm/commit/9c98370287f4e709924aee7c58ef21c85289a7f0 (2.35-TRIAL)",
-                      "https://github.com/andk/cpanpm/pull/175",
-                      "https://linux.oracle.com/cve/CVE-2023-31484.html",
-                      "https://linux.oracle.com/errata/ELSA-2026-0079.html",
-                      "https://lists.debian.org/debian-lts-announce/2024/10/msg00017.html",
-                      "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BM6UW55CNFUTNGD5ZRKGUKKKFDJGMFHL/",
-                      "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LEGCEOKFJVBJ2QQ6S2H4NAEWTUERC7SB/",
-                      "https://metacpan.org/dist/CPAN/changes",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2023-31484",
-                      "https://security.netapp.com/advisory/ntap-20240621-0007/",
-                      "https://ubuntu.com/security/notices/USN-6112-1",
-                      "https://ubuntu.com/security/notices/USN-6112-2",
-                      "https://www.cve.org/CVERecord?id=CVE-2023-31484",
-                      "https://www.openwall.com/lists/oss-security/2023/04/18/14"
-                    ],
-                    "severity": "HIGH",
-                    "suppressed": false,
-                    "title": "perl: CPAN.pm does not verify TLS certificates when downloading distributions over HTTPS"
-                  },
-                  {
-                    "cve": "CVE-2025-40909",
-                    "cvss": {
-                      "redhat": {
-                        "v3score": "5.9",
-                        "v3vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-426",
-                      "CWE-689"
-                    ],
-                    "description": "Perl threads have a working directory race condition where file operations may target unintended paths.\n\nIf a directory handle is open at thread creation, the process-wide current working directory is temporarily changed in order to clone that handle for the new thread, which is visible from any third (or more) thread already running. \n\nThis may lead to unintended operations such as loading code or accessing files from unexpected locations, which a local attacker may be able to exploit.\n\nThe bug was introduced in commit 11a11ecf4bea72b17d250cfb43c897be1341861e and released in Perl version 5.13.6",
-                    "diffID": "sha256:420179ad2efafbf953a0c75f68a4c9dfaf38a98643df97d415bce49b179895f7",
-                    "installedVersion": "5.32.1-4+deb11u3",
-                    "packageName": "perl-base",
-                    "purl": "pkg:deb/debian/perl-base@5.32.1-4%2Bdeb11u3?arch=amd64&distro=debian-11.9",
-                    "references": [
-                      "http://seclists.org/fulldisclosure/2025/Sep/53",
-                      "http://seclists.org/fulldisclosure/2025/Sep/54",
-                      "http://seclists.org/fulldisclosure/2025/Sep/55",
-                      "http://www.openwall.com/lists/oss-security/2025/05/23/1",
-                      "http://www.openwall.com/lists/oss-security/2025/05/30/4",
-                      "http://www.openwall.com/lists/oss-security/2025/06/02/2",
-                      "http://www.openwall.com/lists/oss-security/2025/06/02/5",
-                      "http://www.openwall.com/lists/oss-security/2025/06/02/6",
-                      "http://www.openwall.com/lists/oss-security/2025/06/02/7",
-                      "http://www.openwall.com/lists/oss-security/2025/06/03/1",
-                      "https://access.redhat.com/errata/RHSA-2025:11805",
-                      "https://access.redhat.com/security/cve/CVE-2025-40909",
-                      "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1098226",
-                      "https://bugzilla.redhat.com/2369407",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2369407",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-40909",
-                      "https://errata.almalinux.org/8/ALSA-2025-11805.html",
-                      "https://errata.rockylinux.org/RLSA-2025:11804",
-                      "https://github.com/Perl/perl5/commit/11a11ecf4bea72b17d250cfb43c897be1341861e",
-                      "https://github.com/Perl/perl5/commit/918bfff86ca8d6d4e4ec5b30994451e0bd74aba9.patch",
-                      "https://github.com/Perl/perl5/issues/10387",
-                      "https://github.com/Perl/perl5/issues/23010",
-                      "https://linux.oracle.com/cve/CVE-2025-40909.html",
-                      "https://linux.oracle.com/errata/ELSA-2025-12056.html",
-                      "https://lists.security.metacpan.org/cve-announce/msg/30017499/",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2025-40909",
-                      "https://perldoc.perl.org/5.14.0/perl5136delta#Directory-handles-not-copied-to-threads",
-                      "https://ubuntu.com/security/notices/USN-7678-1",
-                      "https://www.cve.org/CVERecord?id=CVE-2025-40909",
-                      "https://www.openwall.com/lists/oss-security/2025/05/22/2"
-                    ],
-                    "severity": "MEDIUM",
-                    "suppressed": false,
-                    "title": "perl: Perl threads have a working directory race condition where file operations may target unintended paths"
-                  },
-                  {
-                    "cve": "CVE-2011-4116",
-                    "cvss": {
-                      "nvd": {
-                        "v3score": "3.3",
-                        "v3vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N"
-                      },
-                      "redhat": {
-                        "v3score": "0",
-                        "v3vector": ""
-                      }
-                    },
-                    "cwes": [
-                      "CWE-59"
-                    ],
-                    "description": "_is_safe in the File::Temp module for Perl does not properly handle symlinks.",
-                    "diffID": "sha256:420179ad2efafbf953a0c75f68a4c9dfaf38a98643df97d415bce49b179895f7",
-                    "installedVersion": "5.32.1-4+deb11u3",
-                    "packageName": "perl-base",
-                    "purl": "pkg:deb/debian/perl-base@5.32.1-4%2Bdeb11u3?arch=amd64&distro=debian-11.9",
-                    "references": [
-                      "http://www.openwall.com/lists/oss-security/2011/11/04/2",
-                      "http://www.openwall.com/lists/oss-security/2011/11/04/4",
-                      "https://access.redhat.com/security/cve/CVE-2011-4116",
-                      "https://github.com/Perl-Toolchain-Gang/File-Temp/issues/14",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2011-4116",
-                      "https://rt.cpan.org/Public/Bug/Display.html?id=69106",
-                      "https://seclists.org/oss-sec/2011/q4/238",
-                      "https://www.cve.org/CVERecord?id=CVE-2011-4116"
-                    ],
-                    "severity": "LOW",
-                    "suppressed": false,
-                    "title": "perl: File:: Temp insecure temporary file handling"
-                  },
-                  {
-                    "cve": "CVE-2023-31486",
-                    "cvss": {
-                      "nvd": {
-                        "v3score": "8.1",
-                        "v3vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H"
-                      },
-                      "redhat": {
-                        "v3score": "8.1",
-                        "v3vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-295"
-                    ],
-                    "description": "HTTP::Tiny before 0.083, a Perl core module since 5.13.9 and available standalone on CPAN, has an insecure default TLS configuration where users must opt in to verify certificates.",
-                    "diffID": "sha256:420179ad2efafbf953a0c75f68a4c9dfaf38a98643df97d415bce49b179895f7",
-                    "installedVersion": "5.32.1-4+deb11u3",
-                    "packageName": "perl-base",
-                    "purl": "pkg:deb/debian/perl-base@5.32.1-4%2Bdeb11u3?arch=amd64&distro=debian-11.9",
-                    "references": [
-                      "http://www.openwall.com/lists/oss-security/2023/04/29/1",
-                      "http://www.openwall.com/lists/oss-security/2023/05/03/3",
-                      "http://www.openwall.com/lists/oss-security/2023/05/03/5",
-                      "http://www.openwall.com/lists/oss-security/2023/05/07/2",
-                      "https://access.redhat.com/errata/RHSA-2023:7174",
-                      "https://access.redhat.com/security/cve/CVE-2023-31486",
-                      "https://blog.hackeriet.no/perl-http-tiny-insecure-tls-default-affects-cpan-modules/",
-                      "https://bugzilla.redhat.com/2228392",
-                      "https://errata.almalinux.org/8/ALSA-2023-7174.html",
-                      "https://github.com/chansen/p5-http-tiny/pull/153",
-                      "https://hackeriet.github.io/cpan-http-tiny-overview/",
-                      "https://linux.oracle.com/cve/CVE-2023-31486.html",
-                      "https://linux.oracle.com/errata/ELSA-2023-7174.html",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2023-31486",
-                      "https://security.netapp.com/advisory/ntap-20241129-0011/",
-                      "https://www.cve.org/CVERecord?id=CVE-2023-31486",
-                      "https://www.openwall.com/lists/oss-security/2023/04/18/14",
-                      "https://www.openwall.com/lists/oss-security/2023/05/03/4",
-                      "https://www.reddit.com/r/perl/comments/111tadi/psa_httptiny_disabled_ssl_verification_by_default/"
-                    ],
-                    "severity": "LOW",
-                    "suppressed": false,
-                    "title": "http-tiny: insecure TLS cert default"
-                  },
-                  {
-                    "cve": "TEMP-0517018-A83CE6",
-                    "diffID": "sha256:420179ad2efafbf953a0c75f68a4c9dfaf38a98643df97d415bce49b179895f7",
-                    "installedVersion": "2.96-7+deb11u1",
-                    "packageName": "sysvinit-utils",
-                    "purl": "pkg:deb/debian/sysvinit-utils@2.96-7%2Bdeb11u1?arch=amd64&distro=debian-11.9",
-                    "severity": "LOW",
-                    "suppressed": false,
-                    "title": "[sysvinit: no-root option in expert installer exposes locally exploitable security flaw]"
-                  },
-                  {
-                    "cve": "CVE-2005-2541",
-                    "cvss": {
-                      "nvd": {
-                        "v3score": "0",
-                        "v3vector": ""
-                      },
-                      "redhat": {
-                        "v3score": "7",
-                        "v3vector": "CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H"
-                      }
-                    },
-                    "description": "Tar 1.15.1 does not properly warn the user when extracting setuid or setgid files, which may allow local users or remote attackers to gain privileges.",
-                    "diffID": "sha256:420179ad2efafbf953a0c75f68a4c9dfaf38a98643df97d415bce49b179895f7",
-                    "installedVersion": "1.34+dfsg-1+deb11u1",
-                    "packageName": "tar",
-                    "purl": "pkg:deb/debian/tar@1.34%2Bdfsg-1%2Bdeb11u1?arch=amd64&distro=debian-11.9",
-                    "references": [
-                      "http://marc.info/?l=bugtraq&m=112327628230258&w=2",
-                      "https://access.redhat.com/security/cve/CVE-2005-2541",
-                      "https://lists.apache.org/thread.html/rc713534b10f9daeee2e0990239fa407e2118e4aa9e88a7041177497c%40%3Cissues.guacamole.apache.org%3E",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2005-2541",
-                      "https://www.cve.org/CVERecord?id=CVE-2005-2541"
-                    ],
-                    "severity": "LOW",
-                    "suppressed": false,
-                    "title": "tar: does not properly warn the user when extracting setuid or setgid files"
-                  },
-                  {
-                    "cve": "TEMP-0290435-0B57B5",
-                    "diffID": "sha256:420179ad2efafbf953a0c75f68a4c9dfaf38a98643df97d415bce49b179895f7",
-                    "installedVersion": "1.34+dfsg-1+deb11u1",
-                    "packageName": "tar",
-                    "purl": "pkg:deb/debian/tar@1.34%2Bdfsg-1%2Bdeb11u1?arch=amd64&distro=debian-11.9",
-                    "severity": "LOW",
-                    "suppressed": false,
-                    "title": "[tar's rmt command may have undesired side effects]"
-                  },
-                  {
-                    "cve": "DLA-3972-1",
-                    "diffID": "sha256:420179ad2efafbf953a0c75f68a4c9dfaf38a98643df97d415bce49b179895f7",
-                    "fixedVersions": [
-                      "2024b-0+deb11u1"
-                    ],
-                    "installedVersion": "2024a-0+deb11u1",
-                    "packageName": "tzdata",
-                    "purl": "pkg:deb/debian/tzdata@2024a-0%2Bdeb11u1?arch=all&distro=debian-11.9",
-                    "severity": "UNKNOWN",
-                    "suppressed": false,
-                    "title": "tzdata - new timezone database"
-                  },
-                  {
-                    "cve": "DLA-4085-1",
-                    "diffID": "sha256:420179ad2efafbf953a0c75f68a4c9dfaf38a98643df97d415bce49b179895f7",
-                    "fixedVersions": [
-                      "2025a-0+deb11u1"
-                    ],
-                    "installedVersion": "2024a-0+deb11u1",
-                    "packageName": "tzdata",
-                    "purl": "pkg:deb/debian/tzdata@2024a-0%2Bdeb11u1?arch=all&distro=debian-11.9",
-                    "severity": "UNKNOWN",
-                    "suppressed": false,
-                    "title": "tzdata - new timezone database"
-                  },
-                  {
-                    "cve": "DLA-4105-1",
-                    "diffID": "sha256:420179ad2efafbf953a0c75f68a4c9dfaf38a98643df97d415bce49b179895f7",
-                    "fixedVersions": [
-                      "2025b-0+deb11u1"
-                    ],
-                    "installedVersion": "2024a-0+deb11u1",
-                    "packageName": "tzdata",
-                    "purl": "pkg:deb/debian/tzdata@2024a-0%2Bdeb11u1?arch=all&distro=debian-11.9",
-                    "severity": "UNKNOWN",
-                    "suppressed": false,
-                    "title": "tzdata - new timezone database"
-                  },
-                  {
-                    "cve": "DLA-4403-1",
-                    "diffID": "sha256:420179ad2efafbf953a0c75f68a4c9dfaf38a98643df97d415bce49b179895f7",
-                    "fixedVersions": [
-                      "2025b-0+deb11u2"
-                    ],
-                    "installedVersion": "2024a-0+deb11u1",
-                    "packageName": "tzdata",
-                    "purl": "pkg:deb/debian/tzdata@2024a-0%2Bdeb11u1?arch=all&distro=debian-11.9",
-                    "severity": "UNKNOWN",
-                    "suppressed": false,
-                    "title": "tzdata - new timezone database"
-                  },
-                  {
-                    "cve": "DLA-4016-1",
-                    "diffID": "sha256:9664c8c85da49d2cedf85c6b8af0e128318580b95b277b87593a4f75886148af",
-                    "fixedVersions": [
-                      "3.0043+deb11u2"
-                    ],
-                    "installedVersion": "3.0043",
-                    "packageName": "ucf",
-                    "purl": "pkg:deb/debian/ucf@3.0043?arch=all&distro=debian-11.9",
-                    "severity": "UNKNOWN",
-                    "suppressed": false,
-                    "title": "ucf - security update"
-                  },
-                  {
-                    "cve": "CVE-2025-14104",
-                    "cvss": {
-                      "redhat": {
-                        "v3score": "6.1",
-                        "v3vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-125"
-                    ],
-                    "description": "A flaw was found in util-linux. This vulnerability allows a heap buffer overread when processing 256-byte usernames, specifically within the `setpwnam()` function, affecting SUID (Set User ID) login-utils utilities writing to the password database.",
-                    "diffID": "sha256:420179ad2efafbf953a0c75f68a4c9dfaf38a98643df97d415bce49b179895f7",
-                    "installedVersion": "2.36.1-8+deb11u2",
-                    "packageName": "util-linux",
-                    "purl": "pkg:deb/debian/util-linux@2.36.1-8%2Bdeb11u2?arch=amd64&distro=debian-11.9",
-                    "references": [
-                      "https://access.redhat.com/errata/RHSA-2026:1696",
-                      "https://access.redhat.com/errata/RHSA-2026:1852",
-                      "https://access.redhat.com/errata/RHSA-2026:1913",
-                      "https://access.redhat.com/security/cve/CVE-2025-14104",
-                      "https://bugzilla.redhat.com/2419369",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2419369",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-14104",
-                      "https://errata.almalinux.org/10/ALSA-2026-1696.html",
-                      "https://errata.rockylinux.org/RLSA-2026:1913",
-                      "https://linux.oracle.com/cve/CVE-2025-14104.html",
-                      "https://linux.oracle.com/errata/ELSA-2026-1913.html",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2025-14104",
-                      "https://www.cve.org/CVERecord?id=CVE-2025-14104"
-                    ],
-                    "severity": "MEDIUM",
-                    "suppressed": false,
-                    "title": "util-linux: util-linux: Heap buffer overread in setpwnam() when processing 256-byte usernames"
-                  },
-                  {
-                    "cve": "CVE-2022-0563",
-                    "cvss": {
-                      "nvd": {
-                        "v3score": "5.5",
-                        "v3vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N"
-                      },
-                      "redhat": {
-                        "v3score": "5.5",
-                        "v3vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-209"
-                    ],
-                    "description": "A flaw was found in the util-linux chfn and chsh utilities when compiled with Readline support. The Readline library uses an \"INPUTRC\" environment variable to get a path to the library config file. When the library cannot parse the specified file, it prints an error message containing data from the file. This flaw allows an unprivileged user to read root-owned files, potentially leading to privilege escalation. This flaw affects util-linux versions prior to 2.37.4.",
-                    "diffID": "sha256:420179ad2efafbf953a0c75f68a4c9dfaf38a98643df97d415bce49b179895f7",
-                    "installedVersion": "2.36.1-8+deb11u2",
-                    "packageName": "util-linux",
-                    "purl": "pkg:deb/debian/util-linux@2.36.1-8%2Bdeb11u2?arch=amd64&distro=debian-11.9",
-                    "references": [
-                      "https://access.redhat.com/security/cve/CVE-2022-0563",
-                      "https://blog.trailofbits.com/2023/02/16/suid-logic-bug-linux-readline/",
-                      "https://lore.kernel.org/util-linux/20220214110609.msiwlm457ngoic6w%40ws.net.home/T/#u",
-                      "https://lore.kernel.org/util-linux/20220214110609.msiwlm457ngoic6w@ws.net.home/T/#u",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2022-0563",
-                      "https://security.gentoo.org/glsa/202401-08",
-                      "https://security.netapp.com/advisory/ntap-20220331-0002/",
-                      "https://www.cve.org/CVERecord?id=CVE-2022-0563"
-                    ],
-                    "severity": "LOW",
-                    "suppressed": false,
-                    "title": "util-linux: partial disclosure of arbitrary files in chfn and chsh when compiled with libreadline"
-                  },
-                  {
-                    "cve": "CVE-2023-45853",
-                    "cvss": {
-                      "ghsa": {
-                        "v3score": "9.8",
-                        "v3vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"
-                      },
-                      "nvd": {
-                        "v3score": "9.8",
-                        "v3vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"
-                      },
-                      "redhat": {
-                        "v3score": "5.3",
-                        "v3vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-190"
-                    ],
-                    "description": "MiniZip in zlib through 1.3 has an integer overflow and resultant heap-based buffer overflow in zipOpenNewFileInZip4_64 via a long filename, comment, or extra field. NOTE: MiniZip is not a supported part of the zlib product. NOTE: pyminizip through 0.2.6 is also vulnerable because it bundles an affected zlib version, and exposes the applicable MiniZip code through its compress API.",
-                    "diffID": "sha256:420179ad2efafbf953a0c75f68a4c9dfaf38a98643df97d415bce49b179895f7",
-                    "installedVersion": "1:1.2.11.dfsg-2+deb11u2",
-                    "packageName": "zlib1g",
-                    "purl": "pkg:deb/debian/zlib1g@1.2.11.dfsg-2%2Bdeb11u2?arch=amd64&distro=debian-11.9&epoch=1",
-                    "references": [
-                      "http://www.openwall.com/lists/oss-security/2023/10/20/9",
-                      "http://www.openwall.com/lists/oss-security/2024/01/24/10",
-                      "https://access.redhat.com/security/cve/CVE-2023-45853",
-                      "https://chromium.googlesource.com/chromium/src/+/d709fb23806858847131027da95ef4c548813356",
-                      "https://chromium.googlesource.com/chromium/src/+/de29dd6c7151d3cd37cb4cf0036800ddfb1d8b61",
-                      "https://github.com/madler/zlib/blob/ac8f12c97d1afd9bafa9c710f827d40a407d3266/contrib/README.contrib#L1-L4",
-                      "https://github.com/madler/zlib/commit/73331a6a0481067628f065ffe87bb1d8f787d10c",
-                      "https://github.com/madler/zlib/pull/843",
-                      "https://github.com/smihica/pyminizip",
-                      "https://github.com/smihica/pyminizip/blob/master/zlib-1.2.11/contrib/minizip/zip.c",
-                      "https://lists.debian.org/debian-lts-announce/2023/11/msg00026.html",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2023-45853",
-                      "https://pypi.org/project/pyminizip/#history",
-                      "https://security.gentoo.org/glsa/202401-18",
-                      "https://security.netapp.com/advisory/ntap-20231130-0009",
-                      "https://security.netapp.com/advisory/ntap-20231130-0009/",
-                      "https://ubuntu.com/security/notices/USN-7107-1",
-                      "https://www.cve.org/CVERecord?id=CVE-2023-45853",
-                      "https://www.winimage.com/zLibDll/minizip.html"
-                    ],
-                    "severity": "CRITICAL",
-                    "suppressed": false,
-                    "title": "zlib: integer overflow and resultant heap-based buffer overflow in zipOpenNewFileInZip4_6"
-                  }
-                ]
-              }
-            ],
-            "summary": {
-              "critical": 13,
-              "high": 74,
-              "low": 153,
-              "medium": 119,
-              "suppressed": 0,
-              "unknown": 9
-            }
-          }
-        },
-        {
-          "imageMetadata": {
-            "digest": "sha256:751cca0f6046a4eb2abd4a16d92988dbab3624d8c4624c0393be5839b434e06f",
-            "indexDigest": "sha256:f9dc6a4b27715a9cf0cecf0780c8b84df9a6eb31f18a67ba0d63e4f99cc5c8e9",
-            "platform": "linux/arm64",
-            "registry": "workloadscan-ghcr-io",
-            "registryURI": "ghcr.io",
-            "repository": "nginxinc/nginx-unprivileged",
-            "tag": "1.24"
-          },
-          "report": {
-            "results": [
-              {
-                "class": "os-pkgs",
-                "target": "/var/run/worker/trivy.sbom.2574159834.json (debian 11.9)",
-                "type": "debian",
-                "vulnerabilities": [
-                  {
-                    "cve": "CVE-2011-3374",
-                    "cvss": {
-                      "nvd": {
-                        "v3score": "3.7",
-                        "v3vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-347"
-                    ],
-                    "description": "It was found that apt-key in apt, all versions, do not correctly validate gpg keys with the master keyring, leading to a potential man-in-the-middle attack.",
-                    "diffID": "sha256:a499da141b419b2e97ed40192951a05fc37fadec129a55e1de03773e23fff97b",
-                    "installedVersion": "2.2.4",
-                    "packageName": "apt",
-                    "purl": "pkg:deb/debian/apt@2.2.4?arch=arm64&distro=debian-11.9",
-                    "references": [
-                      "https://access.redhat.com/security/cve/cve-2011-3374",
-                      "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=642480",
-                      "https://people.canonical.com/~ubuntu-security/cve/2011/CVE-2011-3374.html",
-                      "https://seclists.org/fulldisclosure/2011/Sep/221",
-                      "https://security-tracker.debian.org/tracker/CVE-2011-3374",
-                      "https://snyk.io/vuln/SNYK-LINUX-APT-116518",
-                      "https://ubuntu.com/security/CVE-2011-3374"
-                    ],
-                    "severity": "LOW",
-                    "suppressed": false,
-                    "title": "It was found that apt-key in apt, all versions, do not correctly valid ..."
-                  },
-                  {
-                    "cve": "CVE-2022-3715",
-                    "cvss": {
-                      "nvd": {
-                        "v3score": "7.8",
-                        "v3vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"
-                      },
-                      "redhat": {
-                        "v3score": "6.6",
-                        "v3vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-119",
-                      "CWE-787"
-                    ],
-                    "description": "A flaw was found in the bash package, where a heap-buffer overflow can occur in valid parameter_transform. This issue may lead to memory problems.",
-                    "diffID": "sha256:a499da141b419b2e97ed40192951a05fc37fadec129a55e1de03773e23fff97b",
-                    "installedVersion": "5.1-2+deb11u1",
-                    "packageName": "bash",
-                    "purl": "pkg:deb/debian/bash@5.1-2%2Bdeb11u1?arch=arm64&distro=debian-11.9",
-                    "references": [
-                      "https://access.redhat.com/errata/RHSA-2023:0340",
-                      "https://access.redhat.com/security/cve/CVE-2022-3715",
-                      "https://bugzilla.redhat.com/2126720",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2126720",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-3715",
-                      "https://errata.almalinux.org/9/ALSA-2023-0340.html",
-                      "https://errata.rockylinux.org/RLSA-2023:0340",
-                      "https://linux.oracle.com/cve/CVE-2022-3715.html",
-                      "https://linux.oracle.com/errata/ELSA-2023-0340.html",
-                      "https://lists.gnu.org/archive/html/bug-bash/2022-08/msg00147.html",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2022-3715",
-                      "https://security.netapp.com/advisory/ntap-20241108-0002/",
-                      "https://ubuntu.com/security/notices/USN-6697-1",
-                      "https://www.cve.org/CVERecord?id=CVE-2022-3715"
-                    ],
-                    "severity": "HIGH",
-                    "suppressed": false,
-                    "title": "bash: a heap-buffer-overflow in valid_parameter_transform"
-                  },
-                  {
-                    "cve": "TEMP-0841856-B18BAF",
-                    "diffID": "sha256:a499da141b419b2e97ed40192951a05fc37fadec129a55e1de03773e23fff97b",
-                    "installedVersion": "5.1-2+deb11u1",
-                    "packageName": "bash",
-                    "purl": "pkg:deb/debian/bash@5.1-2%2Bdeb11u1?arch=arm64&distro=debian-11.9",
-                    "severity": "LOW",
-                    "suppressed": false,
-                    "title": "[Privilege escalation possible to other user than root]"
-                  },
-                  {
-                    "cve": "CVE-2025-14104",
-                    "cvss": {
-                      "redhat": {
-                        "v3score": "6.1",
-                        "v3vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-125"
-                    ],
-                    "description": "A flaw was found in util-linux. This vulnerability allows a heap buffer overread when processing 256-byte usernames, specifically within the `setpwnam()` function, affecting SUID (Set User ID) login-utils utilities writing to the password database.",
-                    "diffID": "sha256:a499da141b419b2e97ed40192951a05fc37fadec129a55e1de03773e23fff97b",
-                    "installedVersion": "1:2.36.1-8+deb11u2",
-                    "packageName": "bsdutils",
-                    "purl": "pkg:deb/debian/bsdutils@2.36.1-8%2Bdeb11u2?arch=arm64&distro=debian-11.9&epoch=1",
-                    "references": [
-                      "https://access.redhat.com/errata/RHSA-2026:1696",
-                      "https://access.redhat.com/errata/RHSA-2026:1852",
-                      "https://access.redhat.com/errata/RHSA-2026:1913",
-                      "https://access.redhat.com/security/cve/CVE-2025-14104",
-                      "https://bugzilla.redhat.com/2419369",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2419369",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-14104",
-                      "https://errata.almalinux.org/10/ALSA-2026-1696.html",
-                      "https://errata.rockylinux.org/RLSA-2026:1913",
-                      "https://linux.oracle.com/cve/CVE-2025-14104.html",
-                      "https://linux.oracle.com/errata/ELSA-2026-1913.html",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2025-14104",
-                      "https://www.cve.org/CVERecord?id=CVE-2025-14104"
-                    ],
-                    "severity": "MEDIUM",
-                    "suppressed": false,
-                    "title": "util-linux: util-linux: Heap buffer overread in setpwnam() when processing 256-byte usernames"
-                  },
-                  {
-                    "cve": "CVE-2022-0563",
-                    "cvss": {
-                      "nvd": {
-                        "v3score": "5.5",
-                        "v3vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N"
-                      },
-                      "redhat": {
-                        "v3score": "5.5",
-                        "v3vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-209"
-                    ],
-                    "description": "A flaw was found in the util-linux chfn and chsh utilities when compiled with Readline support. The Readline library uses an \"INPUTRC\" environment variable to get a path to the library config file. When the library cannot parse the specified file, it prints an error message containing data from the file. This flaw allows an unprivileged user to read root-owned files, potentially leading to privilege escalation. This flaw affects util-linux versions prior to 2.37.4.",
-                    "diffID": "sha256:a499da141b419b2e97ed40192951a05fc37fadec129a55e1de03773e23fff97b",
-                    "installedVersion": "1:2.36.1-8+deb11u2",
-                    "packageName": "bsdutils",
-                    "purl": "pkg:deb/debian/bsdutils@2.36.1-8%2Bdeb11u2?arch=arm64&distro=debian-11.9&epoch=1",
-                    "references": [
-                      "https://access.redhat.com/security/cve/CVE-2022-0563",
-                      "https://blog.trailofbits.com/2023/02/16/suid-logic-bug-linux-readline/",
-                      "https://lore.kernel.org/util-linux/20220214110609.msiwlm457ngoic6w%40ws.net.home/T/#u",
-                      "https://lore.kernel.org/util-linux/20220214110609.msiwlm457ngoic6w@ws.net.home/T/#u",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2022-0563",
-                      "https://security.gentoo.org/glsa/202401-08",
-                      "https://security.netapp.com/advisory/ntap-20220331-0002/",
-                      "https://www.cve.org/CVERecord?id=CVE-2022-0563"
-                    ],
-                    "severity": "LOW",
-                    "suppressed": false,
-                    "title": "util-linux: partial disclosure of arbitrary files in chfn and chsh when compiled with libreadline"
-                  },
-                  {
-                    "cve": "CVE-2016-2781",
-                    "cvss": {
-                      "nvd": {
-                        "v3score": "6.5",
-                        "v3vector": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:H/A:N"
-                      },
-                      "redhat": {
-                        "v3score": "8.6",
-                        "v3vector": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-20"
-                    ],
-                    "description": "chroot in GNU coreutils, when used with --userspec, allows local users to escape to the parent session via a crafted TIOCSTI ioctl call, which pushes characters to the terminal's input buffer.",
-                    "diffID": "sha256:a499da141b419b2e97ed40192951a05fc37fadec129a55e1de03773e23fff97b",
-                    "installedVersion": "8.32-4",
-                    "packageName": "coreutils",
-                    "purl": "pkg:deb/debian/coreutils@8.32-4?arch=arm64&distro=debian-11.9",
-                    "references": [
-                      "http://seclists.org/oss-sec/2016/q1/452",
-                      "http://www.openwall.com/lists/oss-security/2016/02/28/2",
-                      "http://www.openwall.com/lists/oss-security/2016/02/28/3",
-                      "https://access.redhat.com/security/cve/CVE-2016-2781",
-                      "https://lists.apache.org/thread.html/rf9fa47ab66495c78bb4120b0754dd9531ca2ff0430f6685ac9b07772%40%3Cdev.mina.apache.org%3E",
-                      "https://lore.kernel.org/patchwork/patch/793178/",
-                      "https://mirrors.edge.kernel.org/pub/linux/utils/util-linux/v2.28/v2.28-ReleaseNotes",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2016-2781",
-                      "https://www.cve.org/CVERecord?id=CVE-2016-2781"
-                    ],
-                    "severity": "LOW",
-                    "suppressed": false,
-                    "title": "coreutils: Non-privileged session can escape to the parent session in chroot"
-                  },
-                  {
-                    "cve": "CVE-2017-18018",
-                    "cvss": {
-                      "nvd": {
-                        "v3score": "4.7",
-                        "v3vector": "CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:N"
-                      },
-                      "redhat": {
-                        "v3score": "4.2",
-                        "v3vector": "CVSS:3.0/AV:L/AC:H/PR:L/UI:R/S:U/C:L/I:L/A:L"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-362"
-                    ],
-                    "description": "In GNU Coreutils through 8.29, chown-core.c in chown and chgrp does not prevent replacement of a plain file with a symlink during use of the POSIX \"-R -L\" options, which allows local users to modify the ownership of arbitrary files by leveraging a race condition.",
-                    "diffID": "sha256:a499da141b419b2e97ed40192951a05fc37fadec129a55e1de03773e23fff97b",
-                    "installedVersion": "8.32-4",
-                    "packageName": "coreutils",
-                    "purl": "pkg:deb/debian/coreutils@8.32-4?arch=arm64&distro=debian-11.9",
-                    "references": [
-                      "http://lists.gnu.org/archive/html/coreutils/2017-12/msg00045.html",
-                      "https://access.redhat.com/security/cve/CVE-2017-18018",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2017-18018",
-                      "https://www.cve.org/CVERecord?id=CVE-2017-18018"
-                    ],
-                    "severity": "LOW",
-                    "suppressed": false,
-                    "title": "coreutils: race condition vulnerability in chown and chgrp"
-                  },
-                  {
-                    "cve": "CVE-2025-5278",
-                    "cvss": {
-                      "redhat": {
-                        "v3score": "4.4",
-                        "v3vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-121"
-                    ],
-                    "description": "A flaw was found in GNU Coreutils. The sort utility's begfield() function is vulnerable to a heap buffer under-read. The program may access memory outside the allocated buffer if a user runs a crafted command using the traditional key format. A malicious input could lead to a crash or leak sensitive data.",
-                    "diffID": "sha256:a499da141b419b2e97ed40192951a05fc37fadec129a55e1de03773e23fff97b",
-                    "installedVersion": "8.32-4",
-                    "packageName": "coreutils",
-                    "purl": "pkg:deb/debian/coreutils@8.32-4?arch=arm64&distro=debian-11.9",
-                    "references": [
-                      "http://www.openwall.com/lists/oss-security/2025/05/27/2",
-                      "http://www.openwall.com/lists/oss-security/2025/05/29/1",
-                      "http://www.openwall.com/lists/oss-security/2025/05/29/2",
-                      "https://access.redhat.com/security/cve/CVE-2025-5278",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2368764",
-                      "https://cgit.git.savannah.gnu.org/cgit/coreutils.git/commit/?id=8c9602e3a145e9596dc1a63c6ed67865814b6633",
-                      "https://cgit.git.savannah.gnu.org/cgit/coreutils.git/tree/NEWS?id=8c9602e3a145e9596dc1a63c6ed67865814b6633#n14",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2025-5278",
-                      "https://security-tracker.debian.org/tracker/CVE-2025-5278",
-                      "https://www.cve.org/CVERecord?id=CVE-2025-5278"
-                    ],
-                    "severity": "LOW",
-                    "suppressed": false,
-                    "title": "coreutils: Heap Buffer Under-Read in GNU Coreutils sort via Key Specification"
-                  },
-                  {
-                    "cve": "CVE-2023-23914",
-                    "cvss": {
-                      "nvd": {
-                        "v3score": "9.1",
-                        "v3vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N"
-                      },
-                      "redhat": {
-                        "v3score": "6.5",
-                        "v3vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-319"
-                    ],
-                    "description": "A cleartext transmission of sensitive information vulnerability exists in curl <v7.88.0 that could cause HSTS functionality fail when multiple URLs are requested serially. Using its HSTS support, curl can be instructed to use HTTPS instead of usingan insecure clear-text HTTP step even when HTTP is provided in the URL. ThisHSTS mechanism would however surprisingly be ignored by subsequent transferswhen done on the same command line because the state would not be properlycarried on.",
-                    "diffID": "sha256:2f458857553769636f3c149c0c8d41acc63c9e24282823b0ea26869a635e9f48",
-                    "installedVersion": "7.74.0-1.3+deb11u11",
-                    "packageName": "curl",
-                    "purl": "pkg:deb/debian/curl@7.74.0-1.3%2Bdeb11u11?arch=arm64&distro=debian-11.9",
-                    "references": [
-                      "https://access.redhat.com/security/cve/CVE-2023-23914",
-                      "https://curl.se/docs/CVE-2023-23914.html",
-                      "https://hackerone.com/reports/1813864",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2023-23914",
-                      "https://security.gentoo.org/glsa/202310-12",
-                      "https://security.netapp.com/advisory/ntap-20230309-0006/",
-                      "https://ubuntu.com/security/notices/USN-5891-1",
-                      "https://www.cve.org/CVERecord?id=CVE-2023-23914"
-                    ],
-                    "severity": "CRITICAL",
-                    "suppressed": false,
-                    "title": "curl: HSTS ignored on multiple requests"
-                  },
-                  {
-                    "cve": "CVE-2022-42916",
-                    "cvss": {
-                      "nvd": {
-                        "v3score": "7.5",
-                        "v3vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N"
-                      },
-                      "redhat": {
-                        "v3score": "7.5",
-                        "v3vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-319"
-                    ],
-                    "description": "In curl before 7.86.0, the HSTS check could be bypassed to trick it into staying with HTTP. Using its HSTS support, curl can be instructed to use HTTPS directly (instead of using an insecure cleartext HTTP step) even when HTTP is provided in the URL. This mechanism could be bypassed if the host name in the given URL uses IDN characters that get replaced with ASCII counterparts as part of the IDN conversion, e.g., using the character UTF-8 U+3002 (IDEOGRAPHIC FULL STOP) instead of the common ASCII full stop of U+002E (.). The earliest affected version is 7.77.0 2021-05-26.",
-                    "diffID": "sha256:2f458857553769636f3c149c0c8d41acc63c9e24282823b0ea26869a635e9f48",
-                    "installedVersion": "7.74.0-1.3+deb11u11",
-                    "packageName": "curl",
-                    "purl": "pkg:deb/debian/curl@7.74.0-1.3%2Bdeb11u11?arch=arm64&distro=debian-11.9",
-                    "references": [
-                      "http://seclists.org/fulldisclosure/2023/Jan/19",
-                      "http://seclists.org/fulldisclosure/2023/Jan/20",
-                      "http://www.openwall.com/lists/oss-security/2022/12/21/1",
-                      "https://access.redhat.com/security/cve/CVE-2022-42916",
-                      "https://curl.se/docs/CVE-2022-42916.html",
-                      "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/37YEVVC6NAF6H7UHH6YAUY5QEVY6LIH2/",
-                      "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/HVU3IMZCKR4VE6KJ4GCWRL2ILLC6OV76/",
-                      "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/Q27V5YYMXUVI6PRZQVECON32XPVWTKDK/",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2022-42916",
-                      "https://security.gentoo.org/glsa/202212-01",
-                      "https://security.netapp.com/advisory/ntap-20221209-0010/",
-                      "https://support.apple.com/kb/HT213604",
-                      "https://support.apple.com/kb/HT213605",
-                      "https://ubuntu.com/security/notices/USN-5702-1",
-                      "https://www.cve.org/CVERecord?id=CVE-2022-42916"
-                    ],
-                    "severity": "HIGH",
-                    "suppressed": false,
-                    "title": "curl: HSTS bypass via IDN"
-                  },
-                  {
-                    "cve": "CVE-2022-43551",
-                    "cvss": {
-                      "nvd": {
-                        "v3score": "7.5",
-                        "v3vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N"
-                      },
-                      "redhat": {
-                        "v3score": "7.5",
-                        "v3vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-319"
-                    ],
-                    "description": "A vulnerability exists in curl <7.87.0 HSTS check that could be bypassed to trick it to keep using HTTP. Using its HSTS support, curl can be instructed to use HTTPS instead of using an insecure clear-text HTTP step even when HTTP is provided in the URL. However, the HSTS mechanism could be bypassed if the host name in the given URL first uses IDN characters that get replaced to ASCII counterparts as part of the IDN conversion. Like using the character UTF-8 U+3002 (IDEOGRAPHIC FULL STOP) instead of the common ASCII full stop (U+002E) `.`. Then in a subsequent request, it does not detect the HSTS state and makes a clear text transfer. Because it would store the info IDN encoded but look for it IDN decoded.",
-                    "diffID": "sha256:2f458857553769636f3c149c0c8d41acc63c9e24282823b0ea26869a635e9f48",
-                    "installedVersion": "7.74.0-1.3+deb11u11",
-                    "packageName": "curl",
-                    "purl": "pkg:deb/debian/curl@7.74.0-1.3%2Bdeb11u11?arch=arm64&distro=debian-11.9",
-                    "references": [
-                      "https://access.redhat.com/security/cve/CVE-2022-43551",
-                      "https://curl.se/docs/CVE-2022-43551.html",
-                      "https://hackerone.com/reports/1755083",
-                      "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/TVWZW5CNSJ7UYAF2BGSYAWAEXDJYUBHA/",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2022-43551",
-                      "https://security.gentoo.org/glsa/202310-12",
-                      "https://security.netapp.com/advisory/ntap-20230427-0007/",
-                      "https://ubuntu.com/security/notices/USN-5788-1",
-                      "https://www.cve.org/CVERecord?id=CVE-2022-43551"
-                    ],
-                    "severity": "HIGH",
-                    "suppressed": false,
-                    "title": "curl: HSTS bypass via IDN"
-                  },
-                  {
-                    "cve": "CVE-2024-2398",
-                    "cvss": {
-                      "redhat": {
-                        "v3score": "7.5",
-                        "v3vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-772"
-                    ],
-                    "description": "When an application tells libcurl it wants to allow HTTP/2 server push, and the amount of received headers for the push surpasses the maximum allowed limit (1000), libcurl aborts the server push. When aborting, libcurl inadvertently does not free all the previously allocated headers and instead leaks the memory.  Further, this error condition fails silently and is therefore not easily detected by an application.",
-                    "diffID": "sha256:2f458857553769636f3c149c0c8d41acc63c9e24282823b0ea26869a635e9f48",
-                    "fixedVersions": [
-                      "7.74.0-1.3+deb11u12"
-                    ],
-                    "installedVersion": "7.74.0-1.3+deb11u11",
-                    "packageName": "curl",
-                    "purl": "pkg:deb/debian/curl@7.74.0-1.3%2Bdeb11u11?arch=arm64&distro=debian-11.9",
-                    "references": [
-                      "http://seclists.org/fulldisclosure/2024/Jul/18",
-                      "http://seclists.org/fulldisclosure/2024/Jul/19",
-                      "http://seclists.org/fulldisclosure/2024/Jul/20",
-                      "http://www.openwall.com/lists/oss-security/2024/03/27/3",
-                      "https://access.redhat.com/errata/RHSA-2024:5654",
-                      "https://access.redhat.com/security/cve/CVE-2024-2398",
-                      "https://bugzilla.redhat.com/2270498",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2270498",
-                      "https://curl.se/docs/CVE-2024-2398.html",
-                      "https://curl.se/docs/CVE-2024-2398.json",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-2398",
-                      "https://errata.almalinux.org/8/ALSA-2024-5654.html",
-                      "https://errata.rockylinux.org/RLSA-2024:5654",
-                      "https://hackerone.com/reports/2402845",
-                      "https://linux.oracle.com/cve/CVE-2024-2398.html",
-                      "https://linux.oracle.com/errata/ELSA-2024-5654.html",
-                      "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/2D44YLAUFJU6BZ4XFG2FYV7SBKXB5IZ6/",
-                      "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/GMD6UYKCCRCYETWQZUJ65ZRFULT6SHLI/",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2024-2398",
-                      "https://security.netapp.com/advisory/ntap-20240503-0009/",
-                      "https://support.apple.com/kb/HT214118",
-                      "https://support.apple.com/kb/HT214119",
-                      "https://support.apple.com/kb/HT214120",
-                      "https://ubuntu.com/security/notices/USN-6718-1",
-                      "https://ubuntu.com/security/notices/USN-6718-2",
-                      "https://ubuntu.com/security/notices/USN-6718-3",
-                      "https://www.cve.org/CVERecord?id=CVE-2024-2398"
-                    ],
-                    "severity": "HIGH",
-                    "suppressed": false,
-                    "title": "curl: HTTP/2 push headers memory-leak"
-                  },
-                  {
-                    "cve": "CVE-2023-23915",
-                    "cvss": {
-                      "nvd": {
-                        "v3score": "6.5",
-                        "v3vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N"
-                      },
-                      "redhat": {
-                        "v3score": "4.2",
-                        "v3vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-319"
-                    ],
-                    "description": "A cleartext transmission of sensitive information vulnerability exists in curl <v7.88.0 that could cause HSTS functionality to behave incorrectly when multiple URLs are requested in parallel. Using its HSTS support, curl can be instructed to use HTTPS instead of using an insecure clear-text HTTP step even when HTTP is provided in the URL. This HSTS mechanism would however surprisingly fail when multiple transfers are done in parallel as the HSTS cache file gets overwritten by the most recentlycompleted transfer. A later HTTP-only transfer to the earlier host name would then *not* get upgraded properly to HSTS.",
-                    "diffID": "sha256:2f458857553769636f3c149c0c8d41acc63c9e24282823b0ea26869a635e9f48",
-                    "installedVersion": "7.74.0-1.3+deb11u11",
-                    "packageName": "curl",
-                    "purl": "pkg:deb/debian/curl@7.74.0-1.3%2Bdeb11u11?arch=arm64&distro=debian-11.9",
-                    "references": [
-                      "https://access.redhat.com/security/cve/CVE-2023-23915",
-                      "https://curl.se/docs/CVE-2023-23915.html",
-                      "https://hackerone.com/reports/1826048",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2023-23915",
-                      "https://security.gentoo.org/glsa/202310-12",
-                      "https://security.netapp.com/advisory/ntap-20230309-0006/",
-                      "https://ubuntu.com/security/notices/USN-5891-1",
-                      "https://www.cve.org/CVERecord?id=CVE-2023-23915"
-                    ],
-                    "severity": "MEDIUM",
-                    "suppressed": false,
-                    "title": "curl: HSTS amnesia with --parallel"
-                  },
-                  {
-                    "cve": "CVE-2023-46219",
-                    "cvss": {
-                      "nvd": {
-                        "v3score": "5.3",
-                        "v3vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N"
-                      },
-                      "redhat": {
-                        "v3score": "5.3",
-                        "v3vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-311"
-                    ],
-                    "description": "When saving HSTS data to an excessively long file name, curl could end up\nremoving all contents, making subsequent requests using that file unaware of\nthe HSTS status they should otherwise use.",
-                    "diffID": "sha256:2f458857553769636f3c149c0c8d41acc63c9e24282823b0ea26869a635e9f48",
-                    "installedVersion": "7.74.0-1.3+deb11u11",
-                    "packageName": "curl",
-                    "purl": "pkg:deb/debian/curl@7.74.0-1.3%2Bdeb11u11?arch=arm64&distro=debian-11.9",
-                    "references": [
-                      "https://access.redhat.com/security/cve/CVE-2023-46219",
-                      "https://curl.se/docs/CVE-2023-46219.html",
-                      "https://hackerone.com/reports/2236133",
-                      "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/3ZX3VW67N4ACRAPMV2QS2LVYGD7H2MVE/",
-                      "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/UOGXU25FMMT2X6UUITQ7EZZYMJ42YWWD/",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2023-46219",
-                      "https://security.netapp.com/advisory/ntap-20240119-0007/",
-                      "https://ubuntu.com/security/notices/USN-6535-1",
-                      "https://www.cve.org/CVERecord?id=CVE-2023-46219",
-                      "https://www.debian.org/security/2023/dsa-5587"
-                    ],
-                    "severity": "MEDIUM",
-                    "suppressed": false,
-                    "title": "curl: excessively long file name may lead to unknown HSTS status"
-                  },
-                  {
-                    "cve": "CVE-2024-7264",
-                    "cvss": {
-                      "nvd": {
-                        "v3score": "6.5",
-                        "v3vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H"
-                      },
-                      "redhat": {
-                        "v3score": "5.3",
-                        "v3vector": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:H"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-125"
-                    ],
-                    "description": "libcurl's ASN1 parser code has the `GTime2str()` function, used for parsing an\nASN.1 Generalized Time field. If given an syntactically incorrect field, the\nparser might end up using -1 for the length of the *time fraction*, leading to\na `strlen()` getting performed on a pointer to a heap buffer area that is not\n(purposely) null terminated.\n\nThis flaw most likely leads to a crash, but can also lead to heap contents\ngetting returned to the application when\n[CURLINFO_CERTINFO](https://curl.se/libcurl/c/CURLINFO_CERTINFO.html) is used.",
-                    "diffID": "sha256:2f458857553769636f3c149c0c8d41acc63c9e24282823b0ea26869a635e9f48",
-                    "fixedVersions": [
-                      "7.74.0-1.3+deb11u13"
-                    ],
-                    "installedVersion": "7.74.0-1.3+deb11u11",
-                    "packageName": "curl",
-                    "purl": "pkg:deb/debian/curl@7.74.0-1.3%2Bdeb11u11?arch=arm64&distro=debian-11.9",
-                    "references": [
-                      "http://www.openwall.com/lists/oss-security/2024/07/31/1",
-                      "https://access.redhat.com/errata/RHSA-2025:1673",
-                      "https://access.redhat.com/security/cve/CVE-2024-7264",
-                      "https://bugzilla.redhat.com/2294581",
-                      "https://bugzilla.redhat.com/2294676",
-                      "https://bugzilla.redhat.com/2301888",
-                      "https://bugzilla.redhat.com/2318857",
-                      "https://bugzilla.redhat.com/2318858",
-                      "https://bugzilla.redhat.com/2318870",
-                      "https://bugzilla.redhat.com/2318873",
-                      "https://bugzilla.redhat.com/2318874",
-                      "https://bugzilla.redhat.com/2318876",
-                      "https://bugzilla.redhat.com/2318882",
-                      "https://bugzilla.redhat.com/2318883",
-                      "https://bugzilla.redhat.com/2318884",
-                      "https://bugzilla.redhat.com/2318885",
-                      "https://bugzilla.redhat.com/2318886",
-                      "https://bugzilla.redhat.com/2318897",
-                      "https://bugzilla.redhat.com/2318900",
-                      "https://bugzilla.redhat.com/2318905",
-                      "https://bugzilla.redhat.com/2318914",
-                      "https://bugzilla.redhat.com/2318922",
-                      "https://bugzilla.redhat.com/2318923",
-                      "https://bugzilla.redhat.com/2318925",
-                      "https://bugzilla.redhat.com/2318926",
-                      "https://bugzilla.redhat.com/2318927",
-                      "https://bugzilla.redhat.com/2331191",
-                      "https://bugzilla.redhat.com/2339218",
-                      "https://bugzilla.redhat.com/2339220",
-                      "https://bugzilla.redhat.com/2339221",
-                      "https://bugzilla.redhat.com/2339226",
-                      "https://bugzilla.redhat.com/2339231",
-                      "https://bugzilla.redhat.com/2339236",
-                      "https://bugzilla.redhat.com/2339238",
-                      "https://bugzilla.redhat.com/2339243",
-                      "https://bugzilla.redhat.com/2339247",
-                      "https://bugzilla.redhat.com/2339252",
-                      "https://bugzilla.redhat.com/2339259",
-                      "https://bugzilla.redhat.com/2339266",
-                      "https://bugzilla.redhat.com/2339270",
-                      "https://bugzilla.redhat.com/2339271",
-                      "https://bugzilla.redhat.com/2339275",
-                      "https://bugzilla.redhat.com/2339277",
-                      "https://bugzilla.redhat.com/2339281",
-                      "https://bugzilla.redhat.com/2339284",
-                      "https://bugzilla.redhat.com/2339291",
-                      "https://bugzilla.redhat.com/2339293",
-                      "https://bugzilla.redhat.com/2339295",
-                      "https://bugzilla.redhat.com/2339299",
-                      "https://bugzilla.redhat.com/2339300",
-                      "https://bugzilla.redhat.com/2339304",
-                      "https://bugzilla.redhat.com/2339305",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2294581",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2294676",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2301888",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2318857",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2318858",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2318870",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2318873",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2318874",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2318876",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2318882",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2318883",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2318884",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2318885",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2318886",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2318897",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2318900",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2318905",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2318914",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2318922",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2318923",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2318925",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2318926",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2318927",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2331191",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2339218",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2339220",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2339221",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2339226",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2339231",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2339236",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2339238",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2339243",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2339247",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2339252",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2339259",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2339266",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2339270",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2339271",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2339275",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2339277",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2339281",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2339284",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2339291",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2339293",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2339295",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2339299",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2339300",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2339304",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2339305",
-                      "https://curl.se/docs/CVE-2024-7264.html",
-                      "https://curl.se/docs/CVE-2024-7264.json",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-11053",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-21193",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-21194",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-21196",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-21197",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-21198",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-21199",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-21201",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-21203",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-21212",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-21213",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-21218",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-21219",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-21230",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-21231",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-21236",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-21237",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-21238",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-21239",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-21241",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-21247",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-37371",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-5535",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-7264",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21490",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21491",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21494",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21497",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21500",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21501",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21503",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21504",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21505",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21518",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21519",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21520",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21521",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21522",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21523",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21525",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21529",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21531",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21534",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21536",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21540",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21543",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21546",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21555",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21559",
-                      "https://errata.almalinux.org/8/ALSA-2025-1673.html",
-                      "https://errata.rockylinux.org/RLSA-2025:1671",
-                      "https://github.com/curl/curl/commit/27959ecce75cdb2809c0bdb3286e60e08fadb519",
-                      "https://hackerone.com/reports/2629968",
-                      "https://linux.oracle.com/cve/CVE-2024-7264.html",
-                      "https://linux.oracle.com/errata/ELSA-2025-1673.html",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2024-7264",
-                      "https://security.netapp.com/advisory/ntap-20240828-0008/",
-                      "https://security.netapp.com/advisory/ntap-20241025-0006/",
-                      "https://security.netapp.com/advisory/ntap-20241025-0010/",
-                      "https://ubuntu.com/security/notices/USN-6944-1",
-                      "https://ubuntu.com/security/notices/USN-6944-2",
-                      "https://www.cve.org/CVERecord?id=CVE-2024-7264",
-                      "https://www.oracle.com/security-alerts/cpuoct2024.html#AppendixMSQL"
-                    ],
-                    "severity": "MEDIUM",
-                    "suppressed": false,
-                    "title": "curl: libcurl: ASN.1 date parser overread"
-                  },
-                  {
-                    "cve": "CVE-2024-8096",
-                    "cvss": {
-                      "redhat": {
-                        "v3score": "6.5",
-                        "v3vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-295"
-                    ],
-                    "description": "When curl is told to use the Certificate Status Request TLS extension, often referred to as OCSP stapling, to verify that the server certificate is valid, it might fail to detect some OCSP problems and instead wrongly consider the response as fine.  If the returned status reports another error than 'revoked' (like for example 'unauthorized') it is not treated as a bad certficate.",
-                    "diffID": "sha256:2f458857553769636f3c149c0c8d41acc63c9e24282823b0ea26869a635e9f48",
-                    "fixedVersions": [
-                      "7.74.0-1.3+deb11u14"
-                    ],
-                    "installedVersion": "7.74.0-1.3+deb11u11",
-                    "packageName": "curl",
-                    "purl": "pkg:deb/debian/curl@7.74.0-1.3%2Bdeb11u11?arch=arm64&distro=debian-11.9",
-                    "references": [
-                      "http://www.openwall.com/lists/oss-security/2024/09/11/1",
-                      "https://access.redhat.com/security/cve/CVE-2024-8096",
-                      "https://curl.se/docs/CVE-2024-8096.html",
-                      "https://curl.se/docs/CVE-2024-8096.json",
-                      "https://hackerone.com/reports/2669852",
-                      "https://lists.debian.org/debian-lts-announce/2024/11/msg00008.html",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2024-8096",
-                      "https://security.netapp.com/advisory/ntap-20241011-0005/",
-                      "https://ubuntu.com/security/notices/USN-7012-1",
-                      "https://www.cve.org/CVERecord?id=CVE-2024-8096"
-                    ],
-                    "severity": "MEDIUM",
-                    "suppressed": false,
-                    "title": "curl: OCSP stapling bypass with GnuTLS"
-                  },
-                  {
-                    "cve": "CVE-2024-9681",
-                    "cvss": {
-                      "nvd": {
-                        "v3score": "6.5",
-                        "v3vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:L"
-                      },
-                      "redhat": {
-                        "v3score": "3.9",
-                        "v3vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:L"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-697"
-                    ],
-                    "description": "When curl is asked to use HSTS, the expiry time for a subdomain might\noverwrite a parent domain's cache entry, making it end sooner or later than\notherwise intended.\n\nThis affects curl using applications that enable HSTS and use URLs with the\ninsecure `HTTP://` scheme and perform transfers with hosts like\n`x.example.com` as well as `example.com` where the first host is a subdomain\nof the second host.\n\n(The HSTS cache either needs to have been populated manually or there needs to\nhave been previous HTTPS accesses done as the cache needs to have entries for\nthe domains involved to trigger this problem.)\n\nWhen `x.example.com` responds with `Strict-Transport-Security:` headers, this\nbug can make the subdomain's expiry timeout *bleed over* and get set for the\nparent domain `example.com` in curl's HSTS cache.\n\nThe result of a triggered bug is that HTTP accesses to `example.com` get\nconverted to HTTPS for a different period of time than what was asked for by\nthe origin server. If `example.com` for example stops supporting HTTPS at its\nexpiry time, curl might then fail to access `http://example.com` until the\n(wrongly set) timeout expires. This bug can also expire the parent's entry\n*earlier*, thus making curl inadvertently switch back to insecure HTTP earlier\nthan otherwise intended.",
-                    "diffID": "sha256:2f458857553769636f3c149c0c8d41acc63c9e24282823b0ea26869a635e9f48",
-                    "installedVersion": "7.74.0-1.3+deb11u11",
-                    "packageName": "curl",
-                    "purl": "pkg:deb/debian/curl@7.74.0-1.3%2Bdeb11u11?arch=arm64&distro=debian-11.9",
-                    "references": [
-                      "http://seclists.org/fulldisclosure/2025/Apr/10",
-                      "http://seclists.org/fulldisclosure/2025/Apr/11",
-                      "http://seclists.org/fulldisclosure/2025/Apr/12",
-                      "http://seclists.org/fulldisclosure/2025/Apr/13",
-                      "http://seclists.org/fulldisclosure/2025/Apr/4",
-                      "http://seclists.org/fulldisclosure/2025/Apr/5",
-                      "http://seclists.org/fulldisclosure/2025/Apr/8",
-                      "http://seclists.org/fulldisclosure/2025/Apr/9",
-                      "http://www.openwall.com/lists/oss-security/2024/11/06/2",
-                      "https://access.redhat.com/security/cve/CVE-2024-9681",
-                      "https://curl.se/docs/CVE-2024-9681.html",
-                      "https://curl.se/docs/CVE-2024-9681.json",
-                      "https://hackerone.com/reports/2764830",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2024-9681",
-                      "https://security.netapp.com/advisory/ntap-20241213-0006/",
-                      "https://ubuntu.com/security/notices/USN-7104-1",
-                      "https://www.cve.org/CVERecord?id=CVE-2024-9681"
-                    ],
-                    "severity": "MEDIUM",
-                    "suppressed": false,
-                    "title": "curl: HSTS subdomain overwrites parent cache entry"
-                  },
-                  {
-                    "cve": "CVE-2021-22922",
-                    "cvss": {
-                      "nvd": {
-                        "v3score": "6.5",
-                        "v3vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N"
-                      },
-                      "redhat": {
-                        "v3score": "6.5",
-                        "v3vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-840",
-                      "CWE-755"
-                    ],
-                    "description": "When curl is instructed to download content using the metalink feature, thecontents is verified against a hash provided in the metalink XML file.The metalink XML file points out to the client how to get the same contentfrom a set of different URLs, potentially hosted by different servers and theclient can then download the file from one or several of them. In a serial orparallel manner.If one of the servers hosting the contents has been breached and the contentsof the specific file on that server is replaced with a modified payload, curlshould detect this when the hash of the file mismatches after a completeddownload. It should remove the contents and instead try getting the contentsfrom another URL. This is not done, and instead such a hash mismatch is onlymentioned in text and the potentially malicious content is kept in the file ondisk.",
-                    "diffID": "sha256:2f458857553769636f3c149c0c8d41acc63c9e24282823b0ea26869a635e9f48",
-                    "installedVersion": "7.74.0-1.3+deb11u11",
-                    "packageName": "curl",
-                    "purl": "pkg:deb/debian/curl@7.74.0-1.3%2Bdeb11u11?arch=arm64&distro=debian-11.9",
-                    "references": [
-                      "https://access.redhat.com/security/cve/CVE-2021-22922",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=1981435",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=1981438",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=1981460",
-                      "https://cert-portal.siemens.com/productcert/pdf/ssa-389290.pdf",
-                      "https://curl.se/docs/CVE-2021-22922.html",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-22922",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-22923",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-22924",
-                      "https://errata.rockylinux.org/RLSA-2021:3582",
-                      "https://hackerone.com/reports/1213175",
-                      "https://linux.oracle.com/cve/CVE-2021-22922.html",
-                      "https://linux.oracle.com/errata/ELSA-2021-3582.html",
-                      "https://lists.apache.org/thread.html/r61db8e7dcb56dc000a5387a88f7a473bacec5ee01b9ff3f55308aacc%40%3Cdev.kafka.apache.org%3E",
-                      "https://lists.apache.org/thread.html/r61db8e7dcb56dc000a5387a88f7a473bacec5ee01b9ff3f55308aacc%40%3Cusers.kafka.apache.org%3E",
-                      "https://lists.apache.org/thread.html/rbf4ce74b0d1fa9810dec50ba3ace0caeea677af7c27a97111c06ccb7%40%3Cdev.kafka.apache.org%3E",
-                      "https://lists.apache.org/thread.html/rbf4ce74b0d1fa9810dec50ba3ace0caeea677af7c27a97111c06ccb7%40%3Cusers.kafka.apache.org%3E",
-                      "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FRUCW2UVNYUDZF72DQLFQR4PJEC6CF7V/",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2021-22922",
-                      "https://security.gentoo.org/glsa/202212-01",
-                      "https://security.netapp.com/advisory/ntap-20210902-0003/",
-                      "https://www.cve.org/CVERecord?id=CVE-2021-22922",
-                      "https://www.oracle.com/security-alerts/cpuoct2021.html"
-                    ],
-                    "severity": "LOW",
-                    "suppressed": false,
-                    "title": "curl: Content not matching hash in Metalink is not being discarded"
-                  },
-                  {
-                    "cve": "CVE-2021-22923",
-                    "cvss": {
-                      "nvd": {
-                        "v3score": "5.3",
-                        "v3vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N"
-                      },
-                      "redhat": {
-                        "v3score": "5.7",
-                        "v3vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-319",
-                      "CWE-522"
-                    ],
-                    "description": "When curl is instructed to get content using the metalink feature, and a user name and password are used to download the metalink XML file, those same credentials are then subsequently passed on to each of the servers from which curl will download or try to download the contents from. Often contrary to the user's expectations and intentions and without telling the user it happened.",
-                    "diffID": "sha256:2f458857553769636f3c149c0c8d41acc63c9e24282823b0ea26869a635e9f48",
-                    "installedVersion": "7.74.0-1.3+deb11u11",
-                    "packageName": "curl",
-                    "purl": "pkg:deb/debian/curl@7.74.0-1.3%2Bdeb11u11?arch=arm64&distro=debian-11.9",
-                    "references": [
-                      "https://access.redhat.com/security/cve/CVE-2021-22923",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=1981435",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=1981438",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=1981460",
-                      "https://cert-portal.siemens.com/productcert/pdf/ssa-389290.pdf",
-                      "https://curl.se/docs/CVE-2021-22923.html",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-22922",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-22923",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-22924",
-                      "https://errata.rockylinux.org/RLSA-2021:3582",
-                      "https://hackerone.com/reports/1213181",
-                      "https://linux.oracle.com/cve/CVE-2021-22923.html",
-                      "https://linux.oracle.com/errata/ELSA-2021-3582.html",
-                      "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FRUCW2UVNYUDZF72DQLFQR4PJEC6CF7V/",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2021-22923",
-                      "https://security.gentoo.org/glsa/202212-01",
-                      "https://security.netapp.com/advisory/ntap-20210902-0003/",
-                      "https://www.cve.org/CVERecord?id=CVE-2021-22923",
-                      "https://www.oracle.com/security-alerts/cpuoct2021.html"
-                    ],
-                    "severity": "LOW",
-                    "suppressed": false,
-                    "title": "curl: Metalink download sends credentials"
-                  },
-                  {
-                    "cve": "CVE-2023-28320",
-                    "cvss": {
-                      "nvd": {
-                        "v3score": "5.9",
-                        "v3vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H"
-                      },
-                      "redhat": {
-                        "v3score": "3.7",
-                        "v3vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-400",
-                      "CWE-362"
-                    ],
-                    "description": "A denial of service vulnerability exists in curl <v8.1.0 in the way libcurl provides several different backends for resolving host names, selected at build time. If it is built to use the synchronous resolver, it allows name resolves to time-out slow operations using `alarm()` and `siglongjmp()`. When doing this, libcurl used a global buffer that was not mutex protected and a multi-threaded application might therefore crash or otherwise misbehave.",
-                    "diffID": "sha256:2f458857553769636f3c149c0c8d41acc63c9e24282823b0ea26869a635e9f48",
-                    "installedVersion": "7.74.0-1.3+deb11u11",
-                    "packageName": "curl",
-                    "purl": "pkg:deb/debian/curl@7.74.0-1.3%2Bdeb11u11?arch=arm64&distro=debian-11.9",
-                    "references": [
-                      "http://seclists.org/fulldisclosure/2023/Jul/47",
-                      "http://seclists.org/fulldisclosure/2023/Jul/48",
-                      "http://seclists.org/fulldisclosure/2023/Jul/52",
-                      "https://access.redhat.com/security/cve/CVE-2023-28320",
-                      "https://curl.se/docs/CVE-2023-28320.html",
-                      "https://hackerone.com/reports/1929597",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2023-28320",
-                      "https://security.gentoo.org/glsa/202310-12",
-                      "https://security.netapp.com/advisory/ntap-20230609-0009/",
-                      "https://support.apple.com/kb/HT213843",
-                      "https://support.apple.com/kb/HT213844",
-                      "https://support.apple.com/kb/HT213845",
-                      "https://www.cve.org/CVERecord?id=CVE-2023-28320"
-                    ],
-                    "severity": "LOW",
-                    "suppressed": false,
-                    "title": "curl: siglongjmp race condition may lead to crash"
-                  },
-                  {
-                    "cve": "CVE-2024-2379",
-                    "cvss": {
-                      "redhat": {
-                        "v3score": "5.4",
-                        "v3vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-295"
-                    ],
-                    "description": "libcurl skips the certificate verification for a QUIC connection under certain conditions, when built to use wolfSSL. If told to use an unknown/bad cipher or curve, the error path accidentally skips the verification and returns OK, thus ignoring any certificate problems.",
-                    "diffID": "sha256:2f458857553769636f3c149c0c8d41acc63c9e24282823b0ea26869a635e9f48",
-                    "installedVersion": "7.74.0-1.3+deb11u11",
-                    "packageName": "curl",
-                    "purl": "pkg:deb/debian/curl@7.74.0-1.3%2Bdeb11u11?arch=arm64&distro=debian-11.9",
-                    "references": [
-                      "http://seclists.org/fulldisclosure/2024/Jul/18",
-                      "http://seclists.org/fulldisclosure/2024/Jul/19",
-                      "http://seclists.org/fulldisclosure/2024/Jul/20",
-                      "http://www.openwall.com/lists/oss-security/2024/03/27/2",
-                      "https://access.redhat.com/security/cve/CVE-2024-2379",
-                      "https://curl.se/docs/CVE-2024-2379.html",
-                      "https://curl.se/docs/CVE-2024-2379.json",
-                      "https://hackerone.com/reports/2410774",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2024-2379",
-                      "https://security.netapp.com/advisory/ntap-20240531-0001/",
-                      "https://support.apple.com/kb/HT214118",
-                      "https://support.apple.com/kb/HT214119",
-                      "https://support.apple.com/kb/HT214120",
-                      "https://www.cve.org/CVERecord?id=CVE-2024-2379"
-                    ],
-                    "severity": "LOW",
-                    "suppressed": false,
-                    "title": "curl: QUIC certificate check bypass with wolfSSL"
-                  },
-                  {
-                    "cve": "CVE-2025-0725",
-                    "cvss": {
-                      "redhat": {
-                        "v3score": "4",
-                        "v3vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-120"
-                    ],
-                    "description": "When libcurl is asked to perform automatic gzip decompression of\ncontent-encoded HTTP responses with the `CURLOPT_ACCEPT_ENCODING` option,\n**using zlib 1.2.0.3 or older**, an attacker-controlled integer overflow would\nmake libcurl perform a buffer overflow.",
-                    "diffID": "sha256:2f458857553769636f3c149c0c8d41acc63c9e24282823b0ea26869a635e9f48",
-                    "installedVersion": "7.74.0-1.3+deb11u11",
-                    "packageName": "curl",
-                    "purl": "pkg:deb/debian/curl@7.74.0-1.3%2Bdeb11u11?arch=arm64&distro=debian-11.9",
-                    "references": [
-                      "http://www.openwall.com/lists/oss-security/2025/02/05/3",
-                      "http://www.openwall.com/lists/oss-security/2025/02/06/2",
-                      "http://www.openwall.com/lists/oss-security/2025/02/06/4",
-                      "https://access.redhat.com/security/cve/CVE-2025-0725",
-                      "https://curl.se/docs/CVE-2025-0725.html",
-                      "https://curl.se/docs/CVE-2025-0725.json",
-                      "https://github.com/curl/curl/commit/76f83f0db23846e254d940ec7",
-                      "https://hackerone.com/reports/2956023",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2025-0725",
-                      "https://security.netapp.com/advisory/ntap-20250306-0009/",
-                      "https://www.cve.org/CVERecord?id=CVE-2025-0725"
-                    ],
-                    "severity": "LOW",
-                    "suppressed": false,
-                    "title": "libcurl: Buffer Overflow in libcurl via zlib Integer Overflow"
-                  },
-                  {
-                    "cve": "CVE-2025-10966",
-                    "cvss": {
-                      "redhat": {
-                        "v3score": "5.9",
-                        "v3vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N"
-                      }
-                    },
-                    "description": "curl's code for managing SSH connections when SFTP was done using the wolfSSH\npowered backend was flawed and missed host verification mechanisms.\n\nThis prevents curl from detecting MITM attackers and more.",
-                    "diffID": "sha256:2f458857553769636f3c149c0c8d41acc63c9e24282823b0ea26869a635e9f48",
-                    "installedVersion": "7.74.0-1.3+deb11u11",
-                    "packageName": "curl",
-                    "purl": "pkg:deb/debian/curl@7.74.0-1.3%2Bdeb11u11?arch=arm64&distro=debian-11.9",
-                    "references": [
-                      "http://www.openwall.com/lists/oss-security/2025/11/05/2",
-                      "https://access.redhat.com/security/cve/CVE-2025-10966",
-                      "https://curl.se/docs/CVE-2025-10966.html",
-                      "https://curl.se/docs/CVE-2025-10966.json",
-                      "https://github.com/curl/curl/commit/b011e3fcfb06d6c027859",
-                      "https://hackerone.com/reports/3355218",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2025-10966",
-                      "https://www.cve.org/CVERecord?id=CVE-2025-10966"
-                    ],
-                    "severity": "LOW",
-                    "suppressed": false,
-                    "title": "curl: Curl missing SFTP host verification with wolfSSH backend"
-                  },
-                  {
-                    "cve": "CVE-2025-14017",
-                    "cvss": {
-                      "redhat": {
-                        "v3score": "4.8",
-                        "v3vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N"
-                      }
-                    },
-                    "description": "When doing multi-threaded LDAPS transfers (LDAP over TLS) with libcurl,\nchanging TLS options in one thread would inadvertently change them globally\nand therefore possibly also affect other concurrently setup transfers.\n\nDisabling certificate verification for a specific transfer could\nunintentionally disable the feature for other threads as well.",
-                    "diffID": "sha256:2f458857553769636f3c149c0c8d41acc63c9e24282823b0ea26869a635e9f48",
-                    "installedVersion": "7.74.0-1.3+deb11u11",
-                    "packageName": "curl",
-                    "purl": "pkg:deb/debian/curl@7.74.0-1.3%2Bdeb11u11?arch=arm64&distro=debian-11.9",
-                    "references": [
-                      "http://www.openwall.com/lists/oss-security/2026/01/07/3",
-                      "https://access.redhat.com/security/cve/CVE-2025-14017",
-                      "https://curl.se/docs/CVE-2025-14017.html",
-                      "https://curl.se/docs/CVE-2025-14017.json",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2025-14017",
-                      "https://www.cve.org/CVERecord?id=CVE-2025-14017"
-                    ],
-                    "severity": "LOW",
-                    "suppressed": false,
-                    "title": "curl: curl: Security bypass due to global TLS option changes in multi-threaded LDAPS transfers"
-                  },
-                  {
-                    "cve": "CVE-2025-14524",
-                    "cwes": [
-                      "CWE-601"
-                    ],
-                    "description": "When an OAuth2 bearer token is used for an HTTP(S) transfer, and that transfer\nperforms a cross-protocol redirect to a second URL that uses an IMAP, LDAP,\nPOP3 or SMTP scheme, curl might wrongly pass on the bearer token to the new\ntarget host.",
-                    "diffID": "sha256:2f458857553769636f3c149c0c8d41acc63c9e24282823b0ea26869a635e9f48",
-                    "installedVersion": "7.74.0-1.3+deb11u11",
-                    "packageName": "curl",
-                    "purl": "pkg:deb/debian/curl@7.74.0-1.3%2Bdeb11u11?arch=arm64&distro=debian-11.9",
-                    "references": [
-                      "http://www.openwall.com/lists/oss-security/2026/01/07/4",
-                      "https://curl.se/docs/CVE-2025-14524.html",
-                      "https://curl.se/docs/CVE-2025-14524.json",
-                      "https://hackerone.com/reports/3459417",
-                      "https://www.cve.org/CVERecord?id=CVE-2025-14524"
-                    ],
-                    "severity": "LOW",
-                    "suppressed": false,
-                    "title": "When an OAuth2 bearer token is used for an HTTP(S) transfer, and that  ..."
-                  },
-                  {
-                    "cve": "CVE-2025-15079",
-                    "cwes": [
-                      "CWE-297"
-                    ],
-                    "description": "When doing SSH-based transfers using either SCP or SFTP, and setting the\nknown_hosts file, libcurl could still mistakenly accept connecting to hosts\n*not present* in the specified file if they were added as recognized in the\nlibssh *global* known_hosts file.",
-                    "diffID": "sha256:2f458857553769636f3c149c0c8d41acc63c9e24282823b0ea26869a635e9f48",
-                    "installedVersion": "7.74.0-1.3+deb11u11",
-                    "packageName": "curl",
-                    "purl": "pkg:deb/debian/curl@7.74.0-1.3%2Bdeb11u11?arch=arm64&distro=debian-11.9",
-                    "references": [
-                      "http://www.openwall.com/lists/oss-security/2026/01/07/6",
-                      "https://curl.se/docs/CVE-2025-15079.html",
-                      "https://curl.se/docs/CVE-2025-15079.json",
-                      "https://hackerone.com/reports/3477116",
-                      "https://www.cve.org/CVERecord?id=CVE-2025-15079"
-                    ],
-                    "severity": "LOW",
-                    "suppressed": false,
-                    "title": "When doing SSH-based transfers using either SCP or SFTP, and setting t ..."
-                  },
-                  {
-                    "cve": "CVE-2025-15224",
-                    "cwes": [
-                      "CWE-287"
-                    ],
-                    "description": "When doing SSH-based transfers using either SCP or SFTP, and asked to do\npublic key authentication, curl would wrongly still ask and authenticate using\na locally running SSH agent.",
-                    "diffID": "sha256:2f458857553769636f3c149c0c8d41acc63c9e24282823b0ea26869a635e9f48",
-                    "installedVersion": "7.74.0-1.3+deb11u11",
-                    "packageName": "curl",
-                    "purl": "pkg:deb/debian/curl@7.74.0-1.3%2Bdeb11u11?arch=arm64&distro=debian-11.9",
-                    "references": [
-                      "http://www.openwall.com/lists/oss-security/2026/01/07/7",
-                      "https://curl.se/docs/CVE-2025-15224.html",
-                      "https://curl.se/docs/CVE-2025-15224.json",
-                      "https://hackerone.com/reports/3480925",
-                      "https://www.cve.org/CVERecord?id=CVE-2025-15224"
-                    ],
-                    "severity": "LOW",
-                    "suppressed": false,
-                    "title": "When doing SSH-based transfers using either SCP or SFTP, and asked to  ..."
-                  },
-                  {
-                    "cve": "DLA-4213-1",
-                    "diffID": "sha256:2f458857553769636f3c149c0c8d41acc63c9e24282823b0ea26869a635e9f48",
-                    "fixedVersions": [
-                      "7.74.0-1.3+deb11u15"
-                    ],
-                    "installedVersion": "7.74.0-1.3+deb11u11",
-                    "packageName": "curl",
-                    "purl": "pkg:deb/debian/curl@7.74.0-1.3%2Bdeb11u11?arch=arm64&distro=debian-11.9",
-                    "severity": "UNKNOWN",
-                    "suppressed": false,
-                    "title": "curl - regression update"
-                  },
-                  {
-                    "cve": "DLA-4432-1",
-                    "diffID": "sha256:2f458857553769636f3c149c0c8d41acc63c9e24282823b0ea26869a635e9f48",
-                    "fixedVersions": [
-                      "7.74.0-1.3+deb11u16"
-                    ],
-                    "installedVersion": "7.74.0-1.3+deb11u11",
-                    "packageName": "curl",
-                    "purl": "pkg:deb/debian/curl@7.74.0-1.3%2Bdeb11u11?arch=arm64&distro=debian-11.9",
-                    "severity": "UNKNOWN",
-                    "suppressed": false,
-                    "title": "curl - security update"
-                  },
-                  {
-                    "cve": "CVE-2025-6297",
-                    "cwes": [
-                      "CWE-400",
-                      "CWE-732"
-                    ],
-                    "description": "It was discovered that dpkg-deb does not properly sanitize directory permissions when extracting a control member into a temporary directory, which is\ndocumented as being a safe operation even on untrusted data. This may result in leaving temporary files behind on cleanup. Given automated and repeated execution of dpkg-deb commands on\nadversarial .deb packages or with well compressible files, placed\ninside a directory with permissions not allowing removal by a non-root\nuser, this can end up in a DoS scenario due to causing disk quota\nexhaustion or disk full conditions.",
-                    "diffID": "sha256:a499da141b419b2e97ed40192951a05fc37fadec129a55e1de03773e23fff97b",
-                    "installedVersion": "1.20.13",
-                    "packageName": "dpkg",
-                    "purl": "pkg:deb/debian/dpkg@1.20.13?arch=arm64&distro=debian-11.9",
-                    "references": [
-                      "https://git.dpkg.org/cgit/dpkg/dpkg.git/commit/?id=ed6bbd445dd8800308c67236ba35d08004c98e82",
-                      "https://ubuntu.com/security/notices/USN-7768-1",
-                      "https://www.cve.org/CVERecord?id=CVE-2025-6297"
-                    ],
-                    "severity": "LOW",
-                    "suppressed": false,
-                    "title": "It was discovered that dpkg-deb does not properly sanitize directory p ..."
-                  },
-                  {
-                    "cve": "CVE-2022-1304",
-                    "cvss": {
-                      "nvd": {
-                        "v3score": "7.8",
-                        "v3vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H"
-                      },
-                      "redhat": {
-                        "v3score": "5.8",
-                        "v3vector": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:H"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-125",
-                      "CWE-787"
-                    ],
-                    "description": "An out-of-bounds read/write vulnerability was found in e2fsprogs 1.46.5. This issue leads to a segmentation fault and possibly arbitrary code execution via a specially crafted filesystem.",
-                    "diffID": "sha256:a499da141b419b2e97ed40192951a05fc37fadec129a55e1de03773e23fff97b",
-                    "fixedVersions": [
-                      "1.46.2-2+deb11u1"
-                    ],
-                    "installedVersion": "1.46.2-2",
-                    "packageName": "e2fsprogs",
-                    "purl": "pkg:deb/debian/e2fsprogs@1.46.2-2?arch=arm64&distro=debian-11.9",
-                    "references": [
-                      "https://access.redhat.com/errata/RHSA-2022:7720",
-                      "https://access.redhat.com/security/cve/CVE-2022-1304",
-                      "https://bugzilla.redhat.com/2069726",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2069726",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-1304",
-                      "https://errata.almalinux.org/8/ALSA-2022-7720.html",
-                      "https://errata.rockylinux.org/RLSA-2022:8361",
-                      "https://linux.oracle.com/cve/CVE-2022-1304.html",
-                      "https://linux.oracle.com/errata/ELSA-2024-12731.html",
-                      "https://lists.debian.org/debian-lts-announce/2024/10/msg00001.html",
-                      "https://marc.info/?l=linux-ext4&m=165056234501732&w=2",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2022-1304",
-                      "https://security.netapp.com/advisory/ntap-20241122-0010/",
-                      "https://ubuntu.com/security/notices/USN-5464-1",
-                      "https://www.cve.org/CVERecord?id=CVE-2022-1304"
-                    ],
-                    "severity": "HIGH",
-                    "suppressed": false,
-                    "title": "e2fsprogs: out-of-bounds read/write via crafted filesystem"
-                  },
-                  {
-                    "cve": "CVE-2023-4039",
-                    "cvss": {
-                      "nvd": {
-                        "v3score": "4.8",
-                        "v3vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-693"
-                    ],
-                    "description": "**DISPUTED**A failure in the -fstack-protector feature in GCC-based toolchains \nthat target AArch64 allows an attacker to exploit an existing buffer \noverflow in dynamically-sized local variables in your application \nwithout this being detected. This stack-protector failure only applies \nto C99-style dynamically-sized local variables or those created using \nalloca(). The stack-protector operates as intended for statically-sized \nlocal variables.\n\nThe default behavior when the stack-protector \ndetects an overflow is to terminate your application, resulting in \ncontrolled loss of availability. An attacker who can exploit a buffer \noverflow without triggering the stack-protector might be able to change \nprogram flow control to cause an uncontrolled loss of availability or to\n go further and affect confidentiality or integrity. NOTE: The GCC project argues that this is a missed hardening bug and not a vulnerability by itself.",
-                    "diffID": "sha256:a499da141b419b2e97ed40192951a05fc37fadec129a55e1de03773e23fff97b",
-                    "installedVersion": "10.2.1-6",
-                    "packageName": "gcc-10-base",
-                    "purl": "pkg:deb/debian/gcc-10-base@10.2.1-6?arch=arm64&distro=debian-11.9",
-                    "references": [
-                      "https://access.redhat.com/security/cve/CVE-2023-4039",
-                      "https://developer.arm.com/Arm%20Security%20Center/GCC%20Stack%20Protector%20Vulnerability%20AArch64",
-                      "https://gcc.gnu.org/git/?p=gcc.git;a=blob_plain;f=SECURITY.txt",
-                      "https://gcc.gnu.org/pipermail/gcc-patches/2023-October/634066.html",
-                      "https://github.com/metaredteam/external-disclosures/security/advisories/GHSA-x7ch-h5rf-w2mf",
-                      "https://inbox.sourceware.org/gcc-patches/46cfa37b-56eb-344d-0745-e0d35393392d@gotplt.org",
-                      "https://linux.oracle.com/cve/CVE-2023-4039.html",
-                      "https://linux.oracle.com/errata/ELSA-2023-28766.html",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2023-4039",
-                      "https://rtx.meta.security/mitigation/2023/09/12/CVE-2023-4039.html",
-                      "https://ubuntu.com/security/notices/USN-7700-1",
-                      "https://www.cve.org/CVERecord?id=CVE-2023-4039"
-                    ],
-                    "severity": "LOW",
-                    "suppressed": false,
-                    "title": "gcc: -fstack-protector fails to guard dynamic stack allocations on ARM64"
-                  },
-                  {
-                    "cve": "CVE-2023-4039",
-                    "cvss": {
-                      "nvd": {
-                        "v3score": "4.8",
-                        "v3vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-693"
-                    ],
-                    "description": "**DISPUTED**A failure in the -fstack-protector feature in GCC-based toolchains \nthat target AArch64 allows an attacker to exploit an existing buffer \noverflow in dynamically-sized local variables in your application \nwithout this being detected. This stack-protector failure only applies \nto C99-style dynamically-sized local variables or those created using \nalloca(). The stack-protector operates as intended for statically-sized \nlocal variables.\n\nThe default behavior when the stack-protector \ndetects an overflow is to terminate your application, resulting in \ncontrolled loss of availability. An attacker who can exploit a buffer \noverflow without triggering the stack-protector might be able to change \nprogram flow control to cause an uncontrolled loss of availability or to\n go further and affect confidentiality or integrity. NOTE: The GCC project argues that this is a missed hardening bug and not a vulnerability by itself.",
-                    "diffID": "sha256:a499da141b419b2e97ed40192951a05fc37fadec129a55e1de03773e23fff97b",
-                    "installedVersion": "9.3.0-22",
-                    "packageName": "gcc-9-base",
-                    "purl": "pkg:deb/debian/gcc-9-base@9.3.0-22?arch=arm64&distro=debian-11.9",
-                    "references": [
-                      "https://access.redhat.com/security/cve/CVE-2023-4039",
-                      "https://developer.arm.com/Arm%20Security%20Center/GCC%20Stack%20Protector%20Vulnerability%20AArch64",
-                      "https://gcc.gnu.org/git/?p=gcc.git;a=blob_plain;f=SECURITY.txt",
-                      "https://gcc.gnu.org/pipermail/gcc-patches/2023-October/634066.html",
-                      "https://github.com/metaredteam/external-disclosures/security/advisories/GHSA-x7ch-h5rf-w2mf",
-                      "https://inbox.sourceware.org/gcc-patches/46cfa37b-56eb-344d-0745-e0d35393392d@gotplt.org",
-                      "https://linux.oracle.com/cve/CVE-2023-4039.html",
-                      "https://linux.oracle.com/errata/ELSA-2023-28766.html",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2023-4039",
-                      "https://rtx.meta.security/mitigation/2023/09/12/CVE-2023-4039.html",
-                      "https://ubuntu.com/security/notices/USN-7700-1",
-                      "https://www.cve.org/CVERecord?id=CVE-2023-4039"
-                    ],
-                    "severity": "LOW",
-                    "suppressed": false,
-                    "title": "gcc: -fstack-protector fails to guard dynamic stack allocations on ARM64"
-                  },
-                  {
-                    "cve": "CVE-2025-68973",
-                    "cvss": {
-                      "nvd": {
-                        "v3score": "7",
-                        "v3vector": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H"
-                      },
-                      "redhat": {
-                        "v3score": "7.8",
-                        "v3vector": "CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:N"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-675",
-                      "CWE-787"
-                    ],
-                    "description": "In GnuPG before 2.4.9, armor_filter in g10/armor.c has two increments of an index variable where one is intended, leading to an out-of-bounds write for crafted input. (For ExtendedLTS, 2.2.51 and later are fixed versions.)",
-                    "diffID": "sha256:a499da141b419b2e97ed40192951a05fc37fadec129a55e1de03773e23fff97b",
-                    "fixedVersions": [
-                      "2.2.27-2+deb11u3"
-                    ],
-                    "installedVersion": "2.2.27-2+deb11u2",
-                    "packageName": "gpgv",
-                    "purl": "pkg:deb/debian/gpgv@2.2.27-2%2Bdeb11u2?arch=arm64&distro=debian-11.9",
-                    "references": [
-                      "http://www.openwall.com/lists/oss-security/2025/12/29/11",
-                      "https://access.redhat.com/errata/RHSA-2026:0728",
-                      "https://access.redhat.com/security/cve/CVE-2025-68973",
-                      "https://bugzilla.redhat.com/2425966",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2425966",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-68973",
-                      "https://dev.gnupg.org/T7906",
-                      "https://dev.gnupg.org/T8001",
-                      "https://errata.almalinux.org/8/ALSA-2026-0728.html",
-                      "https://errata.rockylinux.org/RLSA-2026:0719",
-                      "https://github.com/gpg/gnupg/blob/ff30683418695f5d2cc9e6cf8c9418e09378ebe4/g10/armor.c#L1305-L1306",
-                      "https://github.com/gpg/gnupg/commit/115d138ba599328005c5321c0ef9f00355838ca9",
-                      "https://github.com/gpg/gnupg/commit/115d138ba599328005c5321c0ef9f00355838ca9 (gnupg-2.5.14)",
-                      "https://github.com/gpg/gnupg/commit/1e929abd20fa2e4be3797a137caca63a971d5372 (gnupg-2.2.51)",
-                      "https://github.com/gpg/gnupg/commit/4ecc5122f20e10c17172ed72f4fa46c784b5fb48 (gnupg-2.4.9)",
-                      "https://github.com/gpg/gnupg/compare/gnupg-2.2.50...gnupg-2.2.51",
-                      "https://gpg.fail/memcpy",
-                      "https://linux.oracle.com/cve/CVE-2025-68973.html",
-                      "https://linux.oracle.com/errata/ELSA-2026-0728.html",
-                      "https://lists.debian.org/debian-lts-announce/2026/01/msg00008.html",
-                      "https://media.ccc.de/v/39c3-to-sign-or-not-to-sign-practical-vulnerabilities-i",
-                      "https://news.ycombinator.com/item?id=46403200",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2025-68973",
-                      "https://ubuntu.com/security/notices/USN-7946-1",
-                      "https://ubuntu.com/security/notices/USN-7946-2",
-                      "https://www.cve.org/CVERecord?id=CVE-2025-68973",
-                      "https://www.openwall.com/lists/oss-security/2025/12/28/5"
-                    ],
-                    "severity": "HIGH",
-                    "suppressed": false,
-                    "title": "GnuPG: GnuPG: Information disclosure and potential arbitrary code execution via out-of-bounds write"
-                  },
-                  {
-                    "cve": "CVE-2025-30258",
-                    "cvss": {
-                      "nvd": {
-                        "v3score": "4.7",
-                        "v3vector": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H"
-                      },
-                      "redhat": {
-                        "v3score": "2.7",
-                        "v3vector": "CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:C/C:N/I:N/A:L"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-754"
-                    ],
-                    "description": "In GnuPG before 2.5.5, if a user chooses to import a certificate with certain crafted subkey data that lacks a valid backsig or that has incorrect usage flags, the user loses the ability to verify signatures made from certain other signing keys, aka a \"verification DoS.\"",
-                    "diffID": "sha256:a499da141b419b2e97ed40192951a05fc37fadec129a55e1de03773e23fff97b",
-                    "installedVersion": "2.2.27-2+deb11u2",
-                    "packageName": "gpgv",
-                    "purl": "pkg:deb/debian/gpgv@2.2.27-2%2Bdeb11u2?arch=arm64&distro=debian-11.9",
-                    "references": [
-                      "https://access.redhat.com/security/cve/CVE-2025-30258",
-                      "https://dev.gnupg.org/T7527",
-                      "https://dev.gnupg.org/rG48978ccb4e20866472ef18436a32744350a65158",
-                      "https://lists.gnupg.org/pipermail/gnupg-announce/2025q1/000491.html",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2025-30258",
-                      "https://ubuntu.com/security/notices/USN-7412-1",
-                      "https://ubuntu.com/security/notices/USN-7412-3",
-                      "https://www.cve.org/CVERecord?id=CVE-2025-30258"
-                    ],
-                    "severity": "MEDIUM",
-                    "suppressed": false,
-                    "title": "gnupg: verification DoS due to a malicious subkey in the keyring"
-                  },
-                  {
-                    "cve": "CVE-2025-68972",
-                    "cvss": {
-                      "nvd": {
-                        "v3score": "4.7",
-                        "v3vector": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:N"
-                      },
-                      "redhat": {
-                        "v3score": "5.9",
-                        "v3vector": "CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:N/I:H/A:N"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-347"
-                    ],
-                    "description": "In GnuPG through 2.4.8, if a signed message has \\f at the end of a plaintext line, an adversary can construct a modified message that places additional text after the signed material, such that signature verification of the modified message succeeds (although an \"invalid armor\" message is printed during verification). This is related to use of \\f as a marker to denote truncation of a long plaintext line.",
-                    "diffID": "sha256:a499da141b419b2e97ed40192951a05fc37fadec129a55e1de03773e23fff97b",
-                    "installedVersion": "2.2.27-2+deb11u2",
-                    "packageName": "gpgv",
-                    "purl": "pkg:deb/debian/gpgv@2.2.27-2%2Bdeb11u2?arch=arm64&distro=debian-11.9",
-                    "references": [
-                      "https://access.redhat.com/security/cve/CVE-2025-68972",
-                      "https://gpg.fail/formfeed",
-                      "https://media.ccc.de/v/39c3-to-sign-or-not-to-sign-practical-vulnerabilities-i",
-                      "https://news.ycombinator.com/item?id=46404339",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2025-68972",
-                      "https://www.cve.org/CVERecord?id=CVE-2025-68972"
-                    ],
-                    "severity": "MEDIUM",
-                    "suppressed": false,
-                    "title": "gnupg: GnuPG: Signature bypass via form feed character in signed messages"
-                  },
-                  {
-                    "cve": "CVE-2022-3219",
-                    "cvss": {
-                      "nvd": {
-                        "v3score": "3.3",
-                        "v3vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L"
-                      },
-                      "redhat": {
-                        "v3score": "6.2",
-                        "v3vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-787"
-                    ],
-                    "description": "GnuPG can be made to spin on a relatively small input by (for example) crafting a public key with thousands of signatures attached, compressed down to just a few KB.",
-                    "diffID": "sha256:a499da141b419b2e97ed40192951a05fc37fadec129a55e1de03773e23fff97b",
-                    "installedVersion": "2.2.27-2+deb11u2",
-                    "packageName": "gpgv",
-                    "purl": "pkg:deb/debian/gpgv@2.2.27-2%2Bdeb11u2?arch=arm64&distro=debian-11.9",
-                    "references": [
-                      "https://access.redhat.com/security/cve/CVE-2022-3219",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2127010",
-                      "https://dev.gnupg.org/D556",
-                      "https://dev.gnupg.org/T5993",
-                      "https://marc.info/?l=oss-security&m=165696590211434&w=4",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2022-3219",
-                      "https://security.netapp.com/advisory/ntap-20230324-0001/",
-                      "https://www.cve.org/CVERecord?id=CVE-2022-3219"
-                    ],
-                    "severity": "LOW",
-                    "suppressed": false,
-                    "title": "gnupg: denial of service issue (resource consumption) using compressed packets"
-                  },
-                  {
-                    "cve": "CVE-2011-3374",
-                    "cvss": {
-                      "nvd": {
-                        "v3score": "3.7",
-                        "v3vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-347"
-                    ],
-                    "description": "It was found that apt-key in apt, all versions, do not correctly validate gpg keys with the master keyring, leading to a potential man-in-the-middle attack.",
-                    "diffID": "sha256:a499da141b419b2e97ed40192951a05fc37fadec129a55e1de03773e23fff97b",
-                    "installedVersion": "2.2.4",
-                    "packageName": "libapt-pkg6.0",
-                    "purl": "pkg:deb/debian/libapt-pkg6.0@2.2.4?arch=arm64&distro=debian-11.9",
-                    "references": [
-                      "https://access.redhat.com/security/cve/cve-2011-3374",
-                      "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=642480",
-                      "https://people.canonical.com/~ubuntu-security/cve/2011/CVE-2011-3374.html",
-                      "https://seclists.org/fulldisclosure/2011/Sep/221",
-                      "https://security-tracker.debian.org/tracker/CVE-2011-3374",
-                      "https://snyk.io/vuln/SNYK-LINUX-APT-116518",
-                      "https://ubuntu.com/security/CVE-2011-3374"
-                    ],
-                    "severity": "LOW",
-                    "suppressed": false,
-                    "title": "It was found that apt-key in apt, all versions, do not correctly valid ..."
-                  },
-                  {
-                    "cve": "CVE-2025-14104",
-                    "cvss": {
-                      "redhat": {
-                        "v3score": "6.1",
-                        "v3vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-125"
-                    ],
-                    "description": "A flaw was found in util-linux. This vulnerability allows a heap buffer overread when processing 256-byte usernames, specifically within the `setpwnam()` function, affecting SUID (Set User ID) login-utils utilities writing to the password database.",
-                    "diffID": "sha256:a499da141b419b2e97ed40192951a05fc37fadec129a55e1de03773e23fff97b",
-                    "installedVersion": "2.36.1-8+deb11u2",
-                    "packageName": "libblkid1",
-                    "purl": "pkg:deb/debian/libblkid1@2.36.1-8%2Bdeb11u2?arch=arm64&distro=debian-11.9",
-                    "references": [
-                      "https://access.redhat.com/errata/RHSA-2026:1696",
-                      "https://access.redhat.com/errata/RHSA-2026:1852",
-                      "https://access.redhat.com/errata/RHSA-2026:1913",
-                      "https://access.redhat.com/security/cve/CVE-2025-14104",
-                      "https://bugzilla.redhat.com/2419369",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2419369",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-14104",
-                      "https://errata.almalinux.org/10/ALSA-2026-1696.html",
-                      "https://errata.rockylinux.org/RLSA-2026:1913",
-                      "https://linux.oracle.com/cve/CVE-2025-14104.html",
-                      "https://linux.oracle.com/errata/ELSA-2026-1913.html",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2025-14104",
-                      "https://www.cve.org/CVERecord?id=CVE-2025-14104"
-                    ],
-                    "severity": "MEDIUM",
-                    "suppressed": false,
-                    "title": "util-linux: util-linux: Heap buffer overread in setpwnam() when processing 256-byte usernames"
-                  },
-                  {
-                    "cve": "CVE-2022-0563",
-                    "cvss": {
-                      "nvd": {
-                        "v3score": "5.5",
-                        "v3vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N"
-                      },
-                      "redhat": {
-                        "v3score": "5.5",
-                        "v3vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-209"
-                    ],
-                    "description": "A flaw was found in the util-linux chfn and chsh utilities when compiled with Readline support. The Readline library uses an \"INPUTRC\" environment variable to get a path to the library config file. When the library cannot parse the specified file, it prints an error message containing data from the file. This flaw allows an unprivileged user to read root-owned files, potentially leading to privilege escalation. This flaw affects util-linux versions prior to 2.37.4.",
-                    "diffID": "sha256:a499da141b419b2e97ed40192951a05fc37fadec129a55e1de03773e23fff97b",
-                    "installedVersion": "2.36.1-8+deb11u2",
-                    "packageName": "libblkid1",
-                    "purl": "pkg:deb/debian/libblkid1@2.36.1-8%2Bdeb11u2?arch=arm64&distro=debian-11.9",
-                    "references": [
-                      "https://access.redhat.com/security/cve/CVE-2022-0563",
-                      "https://blog.trailofbits.com/2023/02/16/suid-logic-bug-linux-readline/",
-                      "https://lore.kernel.org/util-linux/20220214110609.msiwlm457ngoic6w%40ws.net.home/T/#u",
-                      "https://lore.kernel.org/util-linux/20220214110609.msiwlm457ngoic6w@ws.net.home/T/#u",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2022-0563",
-                      "https://security.gentoo.org/glsa/202401-08",
-                      "https://security.netapp.com/advisory/ntap-20220331-0002/",
-                      "https://www.cve.org/CVERecord?id=CVE-2022-0563"
-                    ],
-                    "severity": "LOW",
-                    "suppressed": false,
-                    "title": "util-linux: partial disclosure of arbitrary files in chfn and chsh when compiled with libreadline"
-                  },
-                  {
-                    "cve": "CVE-2024-2961",
-                    "cvss": {
-                      "redhat": {
-                        "v3score": "8.8",
-                        "v3vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-787"
-                    ],
-                    "description": "The iconv() function in the GNU C Library versions 2.39 and older may overflow the output buffer passed to it by up to 4 bytes when converting strings to the ISO-2022-CN-EXT character set, which may be used to crash an application or overwrite a neighbouring variable.",
-                    "diffID": "sha256:a499da141b419b2e97ed40192951a05fc37fadec129a55e1de03773e23fff97b",
-                    "fixedVersions": [
-                      "2.31-13+deb11u9"
-                    ],
-                    "installedVersion": "2.31-13+deb11u8",
-                    "packageName": "libc-bin",
-                    "purl": "pkg:deb/debian/libc-bin@2.31-13%2Bdeb11u8?arch=arm64&distro=debian-11.9",
-                    "references": [
-                      "http://www.openwall.com/lists/oss-security/2024/04/17/9",
-                      "http://www.openwall.com/lists/oss-security/2024/04/18/4",
-                      "http://www.openwall.com/lists/oss-security/2024/04/24/2",
-                      "http://www.openwall.com/lists/oss-security/2024/05/27/1",
-                      "http://www.openwall.com/lists/oss-security/2024/05/27/2",
-                      "http://www.openwall.com/lists/oss-security/2024/05/27/3",
-                      "http://www.openwall.com/lists/oss-security/2024/05/27/4",
-                      "http://www.openwall.com/lists/oss-security/2024/05/27/5",
-                      "http://www.openwall.com/lists/oss-security/2024/05/27/6",
-                      "http://www.openwall.com/lists/oss-security/2024/07/22/5",
-                      "https://access.redhat.com/errata/RHSA-2024:3269",
-                      "https://access.redhat.com/security/cve/CVE-2024-2961",
-                      "https://bugzilla.redhat.com/2273404",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2273404",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2277202",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2277204",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2277205",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2277206",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-2961",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-33599",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-33600",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-33601",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-33602",
-                      "https://errata.almalinux.org/8/ALSA-2024-3269.html",
-                      "https://errata.rockylinux.org/RLSA-2024:3339",
-                      "https://linux.oracle.com/cve/CVE-2024-2961.html",
-                      "https://linux.oracle.com/errata/ELSA-2024-3588.html",
-                      "https://lists.debian.org/debian-lts-announce/2024/05/msg00001.html",
-                      "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/BTJFBGHDYG5PEIFD5WSSSKSFZ2AZWC5N/",
-                      "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/P3I4KYS6EU6S7QZ47WFNTPVAHFIUQNEL/",
-                      "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/YAMJQI3Y6BHWV3CUTYBXOZONCUJNOB2Z/",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2024-2961",
-                      "https://security.netapp.com/advisory/ntap-20240531-0002/",
-                      "https://sourceware.org/git/?p=glibc.git;a=blob;f=advisories/GLIBC-SA-2024-0004",
-                      "https://ubuntu.com/security/notices/USN-6737-1",
-                      "https://ubuntu.com/security/notices/USN-6737-2",
-                      "https://ubuntu.com/security/notices/USN-6762-1",
-                      "https://www.ambionics.io/blog/iconv-cve-2024-2961-p1",
-                      "https://www.ambionics.io/blog/iconv-cve-2024-2961-p2",
-                      "https://www.ambionics.io/blog/iconv-cve-2024-2961-p3",
-                      "https://www.cve.org/CVERecord?id=CVE-2024-2961",
-                      "https://www.openwall.com/lists/oss-security/2024/04/17/9"
-                    ],
-                    "severity": "HIGH",
-                    "suppressed": false,
-                    "title": "glibc: Out of bounds write in iconv may lead to remote code execution"
-                  },
-                  {
-                    "cve": "CVE-2024-33599",
-                    "cvss": {
-                      "redhat": {
-                        "v3score": "7.6",
-                        "v3vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-121"
-                    ],
-                    "description": "nscd: Stack-based buffer overflow in netgroup cache\n\nIf the Name Service Cache Daemon's (nscd) fixed size cache is exhausted\nby client requests then a subsequent client request for netgroup data\nmay result in a stack-based buffer overflow.  This flaw was introduced\nin glibc 2.15 when the cache was added to nscd.\n\nThis vulnerability is only present in the nscd binary.",
-                    "diffID": "sha256:a499da141b419b2e97ed40192951a05fc37fadec129a55e1de03773e23fff97b",
-                    "fixedVersions": [
-                      "2.31-13+deb11u10"
-                    ],
-                    "installedVersion": "2.31-13+deb11u8",
-                    "packageName": "libc-bin",
-                    "purl": "pkg:deb/debian/libc-bin@2.31-13%2Bdeb11u8?arch=arm64&distro=debian-11.9",
-                    "references": [
-                      "http://www.openwall.com/lists/oss-security/2024/07/22/5",
-                      "https://access.redhat.com/errata/RHSA-2024:3344",
-                      "https://access.redhat.com/security/cve/CVE-2024-33599",
-                      "https://bugzilla.redhat.com/2277202",
-                      "https://bugzilla.redhat.com/2277204",
-                      "https://bugzilla.redhat.com/2277205",
-                      "https://bugzilla.redhat.com/2277206",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2273404",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2277202",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2277204",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2277205",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2277206",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-2961",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-33599",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-33600",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-33601",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-33602",
-                      "https://errata.almalinux.org/8/ALSA-2024-3344.html",
-                      "https://errata.rockylinux.org/RLSA-2024:3339",
-                      "https://inbox.sourceware.org/libc-alpha/cover.1713974801.git.fweimer@redhat.com/",
-                      "https://linux.oracle.com/cve/CVE-2024-33599.html",
-                      "https://linux.oracle.com/errata/ELSA-2024-3588.html",
-                      "https://lists.debian.org/debian-lts-announce/2024/06/msg00026.html",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2024-33599",
-                      "https://security.netapp.com/advisory/ntap-20240524-0011/",
-                      "https://sourceware.org/git/?p=glibc.git;a=blob;f=advisories/GLIBC-SA-2024-0005",
-                      "https://ubuntu.com/security/notices/USN-6804-1",
-                      "https://www.cve.org/CVERecord?id=CVE-2024-33599",
-                      "https://www.openwall.com/lists/oss-security/2024/04/24/2"
-                    ],
-                    "severity": "HIGH",
-                    "suppressed": false,
-                    "title": "glibc: stack-based buffer overflow in netgroup cache"
-                  },
-                  {
-                    "cve": "CVE-2025-4802",
-                    "cvss": {
-                      "redhat": {
-                        "v3score": "7",
-                        "v3vector": "CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-426"
-                    ],
-                    "description": "Untrusted LD_LIBRARY_PATH environment variable vulnerability in the GNU C Library version 2.27 to 2.38 allows attacker controlled loading of dynamically shared library in statically compiled setuid binaries that call dlopen (including internal dlopen calls after setlocale or calls to NSS functions such as getaddrinfo).",
-                    "diffID": "sha256:a499da141b419b2e97ed40192951a05fc37fadec129a55e1de03773e23fff97b",
-                    "fixedVersions": [
-                      "2.31-13+deb11u13"
-                    ],
-                    "installedVersion": "2.31-13+deb11u8",
-                    "packageName": "libc-bin",
-                    "purl": "pkg:deb/debian/libc-bin@2.31-13%2Bdeb11u8?arch=arm64&distro=debian-11.9",
-                    "references": [
-                      "http://www.openwall.com/lists/oss-security/2025/05/16/7",
-                      "http://www.openwall.com/lists/oss-security/2025/05/17/2",
-                      "https://access.redhat.com/errata/RHSA-2025:8686",
-                      "https://access.redhat.com/security/cve/CVE-2025-4802",
-                      "https://bugzilla.redhat.com/2367468",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2367468",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-4802",
-                      "https://errata.almalinux.org/8/ALSA-2025-8686.html",
-                      "https://errata.rockylinux.org/RLSA-2025:8655",
-                      "https://linux.oracle.com/cve/CVE-2025-4802.html",
-                      "https://linux.oracle.com/errata/ELSA-2025-8686.html",
-                      "https://lists.debian.org/debian-lts-announce/2025/05/msg00033.html",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2025-4802",
-                      "https://sourceware.org/bugzilla/show_bug.cgi?id=32976",
-                      "https://sourceware.org/cgit/glibc/commit/?id=1e18586c5820e329f741d5c710275e165581380e",
-                      "https://sourceware.org/cgit/glibc/commit/?id=5451fa962cd0a90a0e2ec1d8910a559ace02bba0",
-                      "https://ubuntu.com/security/notices/USN-7541-1",
-                      "https://www.cve.org/CVERecord?id=CVE-2025-4802",
-                      "https://www.openwall.com/lists/oss-security/2025/05/16/7",
-                      "https://www.openwall.com/lists/oss-security/2025/05/17/2"
-                    ],
-                    "severity": "HIGH",
-                    "suppressed": false,
-                    "title": "glibc: static setuid binary dlopen may incorrectly search LD_LIBRARY_PATH"
-                  },
-                  {
-                    "cve": "CVE-2026-0861",
-                    "cvss": {
-                      "redhat": {
-                        "v3score": "8.1",
-                        "v3vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-190"
-                    ],
-                    "description": "Passing too large an alignment to the memalign suite of functions (memalign, posix_memalign, aligned_alloc) in the GNU C Library version 2.30 to 2.42 may result in an integer overflow, which could consequently result in a heap corruption.\n\nNote that the attacker must have control over both, the size as well as the alignment arguments of the memalign function to be able to exploit this.  The size parameter must be close enough to PTRDIFF_MAX so as to overflow size_t along with the large alignment argument.  This limits the malicious inputs for the alignment for memalign to the range [1<<62+ 1, 1<<63] and exactly 1<<63 for posix_memalign and aligned_alloc.\n\nTypically the alignment argument passed to such functions is a known constrained quantity (e.g. page size, block size, struct sizes) and is not attacker controlled, because of which this may not be easily exploitable in practice.  An application bug could potentially result in the input alignment being too large, e.g. due to a different buffer overflow or integer overflow in the application or its dependent libraries, but that is again an uncommon usage pattern given typical sources of alignments.",
-                    "diffID": "sha256:a499da141b419b2e97ed40192951a05fc37fadec129a55e1de03773e23fff97b",
-                    "installedVersion": "2.31-13+deb11u8",
-                    "packageName": "libc-bin",
-                    "purl": "pkg:deb/debian/libc-bin@2.31-13%2Bdeb11u8?arch=arm64&distro=debian-11.9",
-                    "references": [
-                      "http://www.openwall.com/lists/oss-security/2026/01/16/5",
-                      "https://access.redhat.com/errata/RHSA-2026:1334",
-                      "https://access.redhat.com/security/cve/CVE-2026-0861",
-                      "https://bugzilla.redhat.com/2429771",
-                      "https://bugzilla.redhat.com/2430201",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2429771",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430201",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-0861",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-0915",
-                      "https://errata.almalinux.org/10/ALSA-2026-1334.html",
-                      "https://errata.rockylinux.org/RLSA-2026:1334",
-                      "https://linux.oracle.com/cve/CVE-2026-0861.html",
-                      "https://linux.oracle.com/errata/ELSA-2026-50078.html",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2026-0861",
-                      "https://sourceware.org/bugzilla/show_bug.cgi?id=33796",
-                      "https://sourceware.org/git/?p=glibc.git;a=blob_plain;f=advisories/GLIBC-SA-2026-0001",
-                      "https://ubuntu.com/security/notices/USN-8005-1",
-                      "https://www.cve.org/CVERecord?id=CVE-2026-0861"
-                    ],
-                    "severity": "HIGH",
-                    "suppressed": false,
-                    "title": "glibc: Integer overflow in memalign leads to heap corruption"
-                  },
-                  {
-                    "cve": "CVE-2023-4806",
-                    "cvss": {
-                      "nvd": {
-                        "v3score": "5.9",
-                        "v3vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H"
-                      },
-                      "redhat": {
-                        "v3score": "5.9",
-                        "v3vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-416"
-                    ],
-                    "description": "A flaw has been identified in glibc. In an extremely rare situation, the getaddrinfo function may access memory that has been freed, resulting in an application crash. This issue is only exploitable when a NSS module implements only the _nss_*_gethostbyname2_r and _nss_*_getcanonname_r hooks without implementing the _nss_*_gethostbyname3_r hook. The resolved name should return a large number of IPv6 and IPv4, and the call to the getaddrinfo function should have the AF_INET6 address family with AI_CANONNAME, AI_ALL and AI_V4MAPPED as flags.",
-                    "diffID": "sha256:a499da141b419b2e97ed40192951a05fc37fadec129a55e1de03773e23fff97b",
-                    "installedVersion": "2.31-13+deb11u8",
-                    "packageName": "libc-bin",
-                    "purl": "pkg:deb/debian/libc-bin@2.31-13%2Bdeb11u8?arch=arm64&distro=debian-11.9",
-                    "references": [
-                      "http://www.openwall.com/lists/oss-security/2023/10/03/4",
-                      "http://www.openwall.com/lists/oss-security/2023/10/03/5",
-                      "http://www.openwall.com/lists/oss-security/2023/10/03/6",
-                      "http://www.openwall.com/lists/oss-security/2023/10/03/8",
-                      "https://access.redhat.com/errata/RHBA-2024:2413",
-                      "https://access.redhat.com/errata/RHSA-2023:5453",
-                      "https://access.redhat.com/errata/RHSA-2023:5455",
-                      "https://access.redhat.com/errata/RHSA-2023:7409",
-                      "https://access.redhat.com/security/cve/CVE-2023-4806",
-                      "https://bugzilla.redhat.com/2234712",
-                      "https://bugzilla.redhat.com/2237782",
-                      "https://bugzilla.redhat.com/2237798",
-                      "https://bugzilla.redhat.com/2238352",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2234712",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2237782",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2237798",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2238352",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-4527",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-4806",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-4813",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-4911",
-                      "https://errata.almalinux.org/8/ALSA-2023-5455.html",
-                      "https://errata.rockylinux.org/RLSA-2023:5455",
-                      "https://linux.oracle.com/cve/CVE-2023-4806.html",
-                      "https://linux.oracle.com/errata/ELSA-2023-5455.html",
-                      "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/4DBUQRRPB47TC3NJOUIBVWUGFHBJAFDL/",
-                      "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/DFG4P76UHHZEWQ26FWBXG76N2QLKKPZA/",
-                      "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/NDAQWHTSVOCOZ5K6KPIWKRT3JX4RTZUR/",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2023-4806",
-                      "https://security.gentoo.org/glsa/202310-03",
-                      "https://security.netapp.com/advisory/ntap-20240125-0008/",
-                      "https://ubuntu.com/security/notices/USN-6541-1",
-                      "https://ubuntu.com/security/notices/USN-6541-2",
-                      "https://www.cve.org/CVERecord?id=CVE-2023-4806"
-                    ],
-                    "severity": "MEDIUM",
-                    "suppressed": false,
-                    "title": "glibc: potential use-after-free in getaddrinfo()"
-                  },
-                  {
-                    "cve": "CVE-2023-4813",
-                    "cvss": {
-                      "nvd": {
-                        "v3score": "5.9",
-                        "v3vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H"
-                      },
-                      "redhat": {
-                        "v3score": "5.9",
-                        "v3vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-416"
-                    ],
-                    "description": "A flaw has been identified in glibc. In an uncommon situation, the gaih_inet function may use memory that has been freed, resulting in an application crash. This issue is only exploitable when the getaddrinfo function is called and the hosts database in /etc/nsswitch.conf is configured with SUCCESS=continue or SUCCESS=merge.",
-                    "diffID": "sha256:a499da141b419b2e97ed40192951a05fc37fadec129a55e1de03773e23fff97b",
-                    "installedVersion": "2.31-13+deb11u8",
-                    "packageName": "libc-bin",
-                    "purl": "pkg:deb/debian/libc-bin@2.31-13%2Bdeb11u8?arch=arm64&distro=debian-11.9",
-                    "references": [
-                      "http://www.openwall.com/lists/oss-security/2023/10/03/8",
-                      "https://access.redhat.com/errata/RHBA-2024:2413",
-                      "https://access.redhat.com/errata/RHSA-2023:5453",
-                      "https://access.redhat.com/errata/RHSA-2023:5455",
-                      "https://access.redhat.com/errata/RHSA-2023:7409",
-                      "https://access.redhat.com/security/cve/CVE-2023-4813",
-                      "https://bugzilla.redhat.com/2234712",
-                      "https://bugzilla.redhat.com/2237782",
-                      "https://bugzilla.redhat.com/2237798",
-                      "https://bugzilla.redhat.com/2238352",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2234712",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2237782",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2237798",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2238352",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-4527",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-4806",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-4813",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-4911",
-                      "https://errata.almalinux.org/8/ALSA-2023-5455.html",
-                      "https://errata.rockylinux.org/RLSA-2023:5455",
-                      "https://linux.oracle.com/cve/CVE-2023-4813.html",
-                      "https://linux.oracle.com/errata/ELSA-2023-5455.html",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2023-4813",
-                      "https://security.netapp.com/advisory/ntap-20231110-0003/",
-                      "https://ubuntu.com/security/notices/USN-6541-1",
-                      "https://ubuntu.com/security/notices/USN-6541-2",
-                      "https://www.cve.org/CVERecord?id=CVE-2023-4813"
-                    ],
-                    "severity": "MEDIUM",
-                    "suppressed": false,
-                    "title": "glibc: potential use-after-free in gaih_inet()"
-                  },
-                  {
-                    "cve": "CVE-2024-33600",
-                    "cvss": {
-                      "redhat": {
-                        "v3score": "5.3",
-                        "v3vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-476"
-                    ],
-                    "description": "nscd: Null pointer crashes after notfound response\n\nIf the Name Service Cache Daemon's (nscd) cache fails to add a not-found\nnetgroup response to the cache, the client request can result in a null\npointer dereference.  This flaw was introduced in glibc 2.15 when the\ncache was added to nscd.\n\nThis vulnerability is only present in the nscd binary.",
-                    "diffID": "sha256:a499da141b419b2e97ed40192951a05fc37fadec129a55e1de03773e23fff97b",
-                    "fixedVersions": [
-                      "2.31-13+deb11u10"
-                    ],
-                    "installedVersion": "2.31-13+deb11u8",
-                    "packageName": "libc-bin",
-                    "purl": "pkg:deb/debian/libc-bin@2.31-13%2Bdeb11u8?arch=arm64&distro=debian-11.9",
-                    "references": [
-                      "http://www.openwall.com/lists/oss-security/2024/07/22/5",
-                      "https://access.redhat.com/errata/RHSA-2024:3344",
-                      "https://access.redhat.com/security/cve/CVE-2024-33600",
-                      "https://bugzilla.redhat.com/2277202",
-                      "https://bugzilla.redhat.com/2277204",
-                      "https://bugzilla.redhat.com/2277205",
-                      "https://bugzilla.redhat.com/2277206",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2273404",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2277202",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2277204",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2277205",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2277206",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-2961",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-33599",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-33600",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-33601",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-33602",
-                      "https://errata.almalinux.org/8/ALSA-2024-3344.html",
-                      "https://errata.rockylinux.org/RLSA-2024:3339",
-                      "https://inbox.sourceware.org/libc-alpha/cover.1713974801.git.fweimer@redhat.com/",
-                      "https://linux.oracle.com/cve/CVE-2024-33600.html",
-                      "https://linux.oracle.com/errata/ELSA-2024-3588.html",
-                      "https://lists.debian.org/debian-lts-announce/2024/06/msg00026.html",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2024-33600",
-                      "https://security.netapp.com/advisory/ntap-20240524-0013/",
-                      "https://sourceware.org/git/?p=glibc.git;a=blob;f=advisories/GLIBC-SA-2024-0006",
-                      "https://ubuntu.com/security/notices/USN-6804-1",
-                      "https://www.cve.org/CVERecord?id=CVE-2024-33600",
-                      "https://www.openwall.com/lists/oss-security/2024/04/24/2"
-                    ],
-                    "severity": "MEDIUM",
-                    "suppressed": false,
-                    "title": "glibc: null pointer dereferences after failed netgroup cache insertion"
-                  },
-                  {
-                    "cve": "CVE-2024-33601",
-                    "cvss": {
-                      "redhat": {
-                        "v3score": "4",
-                        "v3vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-617"
-                    ],
-                    "description": "nscd: netgroup cache may terminate daemon on memory allocation failure\n\nThe Name Service Cache Daemon's (nscd) netgroup cache uses xmalloc or\nxrealloc and these functions may terminate the process due to a memory\nallocation failure resulting in a denial of service to the clients.  The\nflaw was introduced in glibc 2.15 when the cache was added to nscd.\n\nThis vulnerability is only present in the nscd binary.",
-                    "diffID": "sha256:a499da141b419b2e97ed40192951a05fc37fadec129a55e1de03773e23fff97b",
-                    "fixedVersions": [
-                      "2.31-13+deb11u10"
-                    ],
-                    "installedVersion": "2.31-13+deb11u8",
-                    "packageName": "libc-bin",
-                    "purl": "pkg:deb/debian/libc-bin@2.31-13%2Bdeb11u8?arch=arm64&distro=debian-11.9",
-                    "references": [
-                      "http://www.openwall.com/lists/oss-security/2024/07/22/5",
-                      "https://access.redhat.com/errata/RHSA-2024:3344",
-                      "https://access.redhat.com/security/cve/CVE-2024-33601",
-                      "https://bugzilla.redhat.com/2277202",
-                      "https://bugzilla.redhat.com/2277204",
-                      "https://bugzilla.redhat.com/2277205",
-                      "https://bugzilla.redhat.com/2277206",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2273404",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2277202",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2277204",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2277205",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2277206",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-2961",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-33599",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-33600",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-33601",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-33602",
-                      "https://errata.almalinux.org/8/ALSA-2024-3344.html",
-                      "https://errata.rockylinux.org/RLSA-2024:3339",
-                      "https://inbox.sourceware.org/libc-alpha/cover.1713974801.git.fweimer@redhat.com/",
-                      "https://linux.oracle.com/cve/CVE-2024-33601.html",
-                      "https://linux.oracle.com/errata/ELSA-2024-3588.html",
-                      "https://lists.debian.org/debian-lts-announce/2024/06/msg00026.html",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2024-33601",
-                      "https://security.netapp.com/advisory/ntap-20240524-0014/",
-                      "https://sourceware.org/git/?p=glibc.git;a=blob;f=advisories/GLIBC-SA-2024-0007",
-                      "https://ubuntu.com/security/notices/USN-6804-1",
-                      "https://www.cve.org/CVERecord?id=CVE-2024-33601",
-                      "https://www.openwall.com/lists/oss-security/2024/04/24/2"
-                    ],
-                    "severity": "MEDIUM",
-                    "suppressed": false,
-                    "title": "glibc: netgroup cache may terminate daemon on memory allocation failure"
-                  },
-                  {
-                    "cve": "CVE-2024-33602",
-                    "cvss": {
-                      "redhat": {
-                        "v3score": "4",
-                        "v3vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-466"
-                    ],
-                    "description": "nscd: netgroup cache assumes NSS callback uses in-buffer strings\n\nThe Name Service Cache Daemon's (nscd) netgroup cache can corrupt memory\nwhen the NSS callback does not store all strings in the provided buffer.\nThe flaw was introduced in glibc 2.15 when the cache was added to nscd.\n\nThis vulnerability is only present in the nscd binary.",
-                    "diffID": "sha256:a499da141b419b2e97ed40192951a05fc37fadec129a55e1de03773e23fff97b",
-                    "fixedVersions": [
-                      "2.31-13+deb11u10"
-                    ],
-                    "installedVersion": "2.31-13+deb11u8",
-                    "packageName": "libc-bin",
-                    "purl": "pkg:deb/debian/libc-bin@2.31-13%2Bdeb11u8?arch=arm64&distro=debian-11.9",
-                    "references": [
-                      "http://www.openwall.com/lists/oss-security/2024/07/22/5",
-                      "https://access.redhat.com/errata/RHSA-2024:3344",
-                      "https://access.redhat.com/security/cve/CVE-2024-33602",
-                      "https://bugzilla.redhat.com/2277202",
-                      "https://bugzilla.redhat.com/2277204",
-                      "https://bugzilla.redhat.com/2277205",
-                      "https://bugzilla.redhat.com/2277206",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2273404",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2277202",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2277204",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2277205",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2277206",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-2961",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-33599",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-33600",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-33601",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-33602",
-                      "https://errata.almalinux.org/8/ALSA-2024-3344.html",
-                      "https://errata.rockylinux.org/RLSA-2024:3339",
-                      "https://inbox.sourceware.org/libc-alpha/cover.1713974801.git.fweimer@redhat.com/",
-                      "https://linux.oracle.com/cve/CVE-2024-33602.html",
-                      "https://linux.oracle.com/errata/ELSA-2024-3588.html",
-                      "https://lists.debian.org/debian-lts-announce/2024/06/msg00026.html",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2024-33602",
-                      "https://security.netapp.com/advisory/ntap-20240524-0012/",
-                      "https://sourceware.org/bugzilla/show_bug.cgi?id=31680",
-                      "https://sourceware.org/git/?p=glibc.git;a=blob;f=advisories/GLIBC-SA-2024-0008",
-                      "https://ubuntu.com/security/notices/USN-6804-1",
-                      "https://www.cve.org/CVERecord?id=CVE-2024-33602",
-                      "https://www.openwall.com/lists/oss-security/2024/04/24/2"
-                    ],
-                    "severity": "MEDIUM",
-                    "suppressed": false,
-                    "title": "glibc: netgroup cache assumes NSS callback uses in-buffer strings"
-                  },
-                  {
-                    "cve": "CVE-2025-0395",
-                    "cvss": {
-                      "redhat": {
-                        "v3score": "5.5",
-                        "v3vector": "CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:L/I:L/A:H"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-131"
-                    ],
-                    "description": "When the assert() function in the GNU C Library versions 2.13 to 2.40 fails, it does not allocate enough space for the assertion failure message string and size information, which may lead to a buffer overflow if the message string size aligns to page size.",
-                    "diffID": "sha256:a499da141b419b2e97ed40192951a05fc37fadec129a55e1de03773e23fff97b",
-                    "fixedVersions": [
-                      "2.31-13+deb11u12"
-                    ],
-                    "installedVersion": "2.31-13+deb11u8",
-                    "packageName": "libc-bin",
-                    "purl": "pkg:deb/debian/libc-bin@2.31-13%2Bdeb11u8?arch=arm64&distro=debian-11.9",
-                    "references": [
-                      "http://www.openwall.com/lists/oss-security/2025/01/22/4",
-                      "http://www.openwall.com/lists/oss-security/2025/01/23/2",
-                      "http://www.openwall.com/lists/oss-security/2025/04/13/1",
-                      "http://www.openwall.com/lists/oss-security/2025/04/24/7",
-                      "https://access.redhat.com/errata/RHSA-2025:3828",
-                      "https://access.redhat.com/security/cve/CVE-2025-0395",
-                      "https://bugzilla.redhat.com/2339460",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2339460",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-0395",
-                      "https://errata.almalinux.org/8/ALSA-2025-3828.html",
-                      "https://errata.rockylinux.org/RLSA-2025:4244",
-                      "https://linux.oracle.com/cve/CVE-2025-0395.html",
-                      "https://linux.oracle.com/errata/ELSA-2025-4244.html",
-                      "https://lists.debian.org/debian-lts-announce/2025/04/msg00039.html",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2025-0395",
-                      "https://security.netapp.com/advisory/ntap-20250228-0006/",
-                      "https://sourceware.org/bugzilla/show_bug.cgi?id=32582",
-                      "https://sourceware.org/git/?p=glibc.git;a=blob;f=advisories/GLIBC-SA-2025-0001",
-                      "https://sourceware.org/pipermail/libc-announce/2025/000044.html",
-                      "https://ubuntu.com/security/notices/USN-7259-1",
-                      "https://ubuntu.com/security/notices/USN-7259-2",
-                      "https://ubuntu.com/security/notices/USN-7259-3",
-                      "https://www.cve.org/CVERecord?id=CVE-2025-0395",
-                      "https://www.openwall.com/lists/oss-security/2025/01/22/4"
-                    ],
-                    "severity": "MEDIUM",
-                    "suppressed": false,
-                    "title": "glibc: buffer overflow in the GNU C Library's assert()"
-                  },
-                  {
-                    "cve": "CVE-2025-15281",
-                    "cvss": {
-                      "redhat": {
-                        "v3score": "5.9",
-                        "v3vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-908"
-                    ],
-                    "description": "Calling wordexp with WRDE_REUSE in conjunction with WRDE_APPEND in the GNU C Library version 2.0 to version 2.42 may cause the interface to return uninitialized memory in the we_wordv member, which on subsequent calls to wordfree may abort the process.",
-                    "diffID": "sha256:a499da141b419b2e97ed40192951a05fc37fadec129a55e1de03773e23fff97b",
-                    "installedVersion": "2.31-13+deb11u8",
-                    "packageName": "libc-bin",
-                    "purl": "pkg:deb/debian/libc-bin@2.31-13%2Bdeb11u8?arch=arm64&distro=debian-11.9",
-                    "references": [
-                      "http://www.openwall.com/lists/oss-security/2026/01/20/3",
-                      "https://access.redhat.com/security/cve/CVE-2025-15281",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2025-15281",
-                      "https://sourceware.org/bugzilla/show_bug.cgi?id=33814",
-                      "https://ubuntu.com/security/notices/USN-8005-1",
-                      "https://www.cve.org/CVERecord?id=CVE-2025-15281",
-                      "https://www.openwall.com/lists/oss-security/2026/01/20/3"
-                    ],
-                    "severity": "MEDIUM",
-                    "suppressed": false,
-                    "title": "glibc: wordexp with WRDE_REUSE and WRDE_APPEND may return uninitialized memory"
-                  },
-                  {
-                    "cve": "CVE-2025-8058",
-                    "cvss": {
-                      "redhat": {
-                        "v3score": "4.2",
-                        "v3vector": "CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:L/I:L/A:L"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-415"
-                    ],
-                    "description": "The regcomp function in the GNU C library version from 2.4 to 2.41 is \nsubject to a double free if some previous allocation fails. It can be \naccomplished either by a malloc failure or by using an interposed malloc\n that injects random malloc failures. The double free can allow buffer \nmanipulation depending of how the regex is constructed. This issue \naffects all architectures and ABIs supported by the GNU C library.",
-                    "diffID": "sha256:a499da141b419b2e97ed40192951a05fc37fadec129a55e1de03773e23fff97b",
-                    "installedVersion": "2.31-13+deb11u8",
-                    "packageName": "libc-bin",
-                    "purl": "pkg:deb/debian/libc-bin@2.31-13%2Bdeb11u8?arch=arm64&distro=debian-11.9",
-                    "references": [
-                      "http://www.openwall.com/lists/oss-security/2025/07/23/1",
-                      "https://access.redhat.com/errata/RHSA-2025:12980",
-                      "https://access.redhat.com/security/cve/CVE-2025-8058",
-                      "https://bugzilla.redhat.com/2383146",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2383146",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-8058",
-                      "https://errata.almalinux.org/8/ALSA-2025-12980.html",
-                      "https://errata.rockylinux.org/RLSA-2025:12748",
-                      "https://linux.oracle.com/cve/CVE-2025-8058.html",
-                      "https://linux.oracle.com/errata/ELSA-2025-28054.html",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2025-8058",
-                      "https://sourceware.org/bugzilla/show_bug.cgi?id=33185",
-                      "https://sourceware.org/git/?p=glibc.git;a=blob_plain;f=advisories/GLIBC-SA-2025-0005",
-                      "https://sourceware.org/git/?p=glibc.git;a=commit;h=3ff17af18c38727b88d9115e536c069e6b5d601f",
-                      "https://ubuntu.com/security/notices/USN-7760-1",
-                      "https://ubuntu.com/security/notices/USN-8005-1",
-                      "https://www.cve.org/CVERecord?id=CVE-2025-8058"
-                    ],
-                    "severity": "MEDIUM",
-                    "suppressed": false,
-                    "title": "glibc: Double free in glibc"
-                  },
-                  {
-                    "cve": "CVE-2026-0915",
-                    "cvss": {
-                      "redhat": {
-                        "v3score": "5.3",
-                        "v3vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-908"
-                    ],
-                    "description": "Calling getnetbyaddr or getnetbyaddr_r with a configured nsswitch.conf that specifies the library's DNS backend for networks and queries for a zero-valued network in the GNU C Library version 2.0 to version 2.42 can leak stack contents to the configured DNS resolver.",
-                    "diffID": "sha256:a499da141b419b2e97ed40192951a05fc37fadec129a55e1de03773e23fff97b",
-                    "installedVersion": "2.31-13+deb11u8",
-                    "packageName": "libc-bin",
-                    "purl": "pkg:deb/debian/libc-bin@2.31-13%2Bdeb11u8?arch=arm64&distro=debian-11.9",
-                    "references": [
-                      "http://www.openwall.com/lists/oss-security/2026/01/16/6",
-                      "https://access.redhat.com/errata/RHSA-2026:1334",
-                      "https://access.redhat.com/security/cve/CVE-2026-0915",
-                      "https://bugzilla.redhat.com/2429771",
-                      "https://bugzilla.redhat.com/2430201",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2429771",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430201",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-0861",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-0915",
-                      "https://errata.almalinux.org/10/ALSA-2026-1334.html",
-                      "https://errata.rockylinux.org/RLSA-2026:1334",
-                      "https://linux.oracle.com/cve/CVE-2026-0915.html",
-                      "https://linux.oracle.com/errata/ELSA-2026-50078.html",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2026-0915",
-                      "https://sourceware.org/bugzilla/show_bug.cgi?id=33802",
-                      "https://ubuntu.com/security/notices/USN-8005-1",
-                      "https://www.cve.org/CVERecord?id=CVE-2026-0915",
-                      "https://www.openwall.com/lists/oss-security/2026/01/16/6"
-                    ],
-                    "severity": "MEDIUM",
-                    "suppressed": false,
-                    "title": "glibc: glibc: Information disclosure via zero-valued network query"
-                  },
-                  {
-                    "cve": "CVE-2010-4756",
-                    "cvss": {
-                      "nvd": {
-                        "v3score": "0",
-                        "v3vector": ""
-                      },
-                      "redhat": {
-                        "v3score": "0",
-                        "v3vector": ""
-                      }
-                    },
-                    "cwes": [
-                      "CWE-399"
-                    ],
-                    "description": "The glob implementation in the GNU C Library (aka glibc or libc6) allows remote authenticated users to cause a denial of service (CPU and memory consumption) via crafted glob expressions that do not match any pathnames, as demonstrated by glob expressions in STAT commands to an FTP daemon, a different vulnerability than CVE-2010-2632.",
-                    "diffID": "sha256:a499da141b419b2e97ed40192951a05fc37fadec129a55e1de03773e23fff97b",
-                    "installedVersion": "2.31-13+deb11u8",
-                    "packageName": "libc-bin",
-                    "purl": "pkg:deb/debian/libc-bin@2.31-13%2Bdeb11u8?arch=arm64&distro=debian-11.9",
-                    "references": [
-                      "http://cxib.net/stuff/glob-0day.c",
-                      "http://securityreason.com/achievement_securityalert/89",
-                      "http://securityreason.com/exploitalert/9223",
-                      "https://access.redhat.com/security/cve/CVE-2010-4756",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=681681",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2010-4756",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2010-4756",
-                      "https://security.netapp.com/advisory/ntap-20241108-0002/",
-                      "https://www.cve.org/CVERecord?id=CVE-2010-4756"
-                    ],
-                    "severity": "LOW",
-                    "suppressed": false,
-                    "title": "glibc: glob implementation can cause excessive CPU and memory consumption due to crafted glob expressions"
-                  },
-                  {
-                    "cve": "CVE-2018-20796",
-                    "cvss": {
-                      "nvd": {
-                        "v3score": "7.5",
-                        "v3vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"
-                      },
-                      "redhat": {
-                        "v3score": "5.3",
-                        "v3vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-674"
-                    ],
-                    "description": "In the GNU C Library (aka glibc or libc6) through 2.29, check_dst_limits_calc_pos_1 in posix/regexec.c has Uncontrolled Recursion, as demonstrated by '(\\227|)(\\\\1\\\\1|t1|\\\\\\2537)+' in grep.",
-                    "diffID": "sha256:a499da141b419b2e97ed40192951a05fc37fadec129a55e1de03773e23fff97b",
-                    "installedVersion": "2.31-13+deb11u8",
-                    "packageName": "libc-bin",
-                    "purl": "pkg:deb/debian/libc-bin@2.31-13%2Bdeb11u8?arch=arm64&distro=debian-11.9",
-                    "references": [
-                      "http://www.securityfocus.com/bid/107160",
-                      "https://access.redhat.com/security/cve/CVE-2018-20796",
-                      "https://debbugs.gnu.org/cgi/bugreport.cgi?bug=34141",
-                      "https://lists.gnu.org/archive/html/bug-gnulib/2019-01/msg00108.html",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2018-20796",
-                      "https://security.netapp.com/advisory/ntap-20190315-0002/",
-                      "https://support.f5.com/csp/article/K26346590?utm_source=f5support&amp%3Butm_medium=RSS",
-                      "https://www.cve.org/CVERecord?id=CVE-2018-20796"
-                    ],
-                    "severity": "LOW",
-                    "suppressed": false,
-                    "title": "glibc: uncontrolled recursion in function check_dst_limits_calc_pos_1 in posix/regexec.c"
-                  },
-                  {
-                    "cve": "CVE-2019-1010022",
-                    "cvss": {
-                      "nvd": {
-                        "v3score": "9.8",
-                        "v3vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-119"
-                    ],
-                    "description": "GNU Libc current is affected by: Mitigation bypass. The impact is: Attacker may bypass stack guard protection. The component is: nptl. The attack vector is: Exploit stack buffer overflow vulnerability and use this bypass vulnerability to bypass stack guard. NOTE: Upstream comments indicate \"this is being treated as a non-security bug and no real threat.",
-                    "diffID": "sha256:a499da141b419b2e97ed40192951a05fc37fadec129a55e1de03773e23fff97b",
-                    "installedVersion": "2.31-13+deb11u8",
-                    "packageName": "libc-bin",
-                    "purl": "pkg:deb/debian/libc-bin@2.31-13%2Bdeb11u8?arch=arm64&distro=debian-11.9",
-                    "references": [
-                      "https://access.redhat.com/security/cve/CVE-2019-1010022",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2019-1010022",
-                      "https://security-tracker.debian.org/tracker/CVE-2019-1010022",
-                      "https://sourceware.org/bugzilla/show_bug.cgi?id=22850",
-                      "https://sourceware.org/bugzilla/show_bug.cgi?id=22850#c3",
-                      "https://ubuntu.com/security/CVE-2019-1010022",
-                      "https://www.cve.org/CVERecord?id=CVE-2019-1010022"
-                    ],
-                    "severity": "LOW",
-                    "suppressed": false,
-                    "title": "glibc: stack guard protection bypass"
-                  },
-                  {
-                    "cve": "CVE-2019-1010023",
-                    "cvss": {
-                      "nvd": {
-                        "v3score": "8.8",
-                        "v3vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H"
-                      },
-                      "redhat": {
-                        "v3score": "7.8",
-                        "v3vector": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H"
-                      }
-                    },
-                    "description": "GNU Libc current is affected by: Re-mapping current loaded library with malicious ELF file. The impact is: In worst case attacker may evaluate privileges. The component is: libld. The attack vector is: Attacker sends 2 ELF files to victim and asks to run ldd on it. ldd execute code. NOTE: Upstream comments indicate \"this is being treated as a non-security bug and no real threat.",
-                    "diffID": "sha256:a499da141b419b2e97ed40192951a05fc37fadec129a55e1de03773e23fff97b",
-                    "installedVersion": "2.31-13+deb11u8",
-                    "packageName": "libc-bin",
-                    "purl": "pkg:deb/debian/libc-bin@2.31-13%2Bdeb11u8?arch=arm64&distro=debian-11.9",
-                    "references": [
-                      "http://www.securityfocus.com/bid/109167",
-                      "https://access.redhat.com/security/cve/CVE-2019-1010023",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2019-1010023",
-                      "https://security-tracker.debian.org/tracker/CVE-2019-1010023",
-                      "https://sourceware.org/bugzilla/show_bug.cgi?id=22851",
-                      "https://support.f5.com/csp/article/K11932200?utm_source=f5support&amp%3Butm_medium=RSS",
-                      "https://ubuntu.com/security/CVE-2019-1010023",
-                      "https://www.cve.org/CVERecord?id=CVE-2019-1010023"
-                    ],
-                    "severity": "LOW",
-                    "suppressed": false,
-                    "title": "glibc: running ldd on malicious ELF leads to code execution because of wrong size computation"
-                  },
-                  {
-                    "cve": "CVE-2019-1010024",
-                    "cvss": {
-                      "nvd": {
-                        "v3score": "5.3",
-                        "v3vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N"
-                      },
-                      "redhat": {
-                        "v3score": "5.3",
-                        "v3vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-200"
-                    ],
-                    "description": "GNU Libc current is affected by: Mitigation bypass. The impact is: Attacker may bypass ASLR using cache of thread stack and heap. The component is: glibc. NOTE: Upstream comments indicate \"this is being treated as a non-security bug and no real threat.",
-                    "diffID": "sha256:a499da141b419b2e97ed40192951a05fc37fadec129a55e1de03773e23fff97b",
-                    "installedVersion": "2.31-13+deb11u8",
-                    "packageName": "libc-bin",
-                    "purl": "pkg:deb/debian/libc-bin@2.31-13%2Bdeb11u8?arch=arm64&distro=debian-11.9",
-                    "references": [
-                      "http://www.securityfocus.com/bid/109162",
-                      "https://access.redhat.com/security/cve/CVE-2019-1010024",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2019-1010024",
-                      "https://security-tracker.debian.org/tracker/CVE-2019-1010024",
-                      "https://sourceware.org/bugzilla/show_bug.cgi?id=22852",
-                      "https://support.f5.com/csp/article/K06046097",
-                      "https://support.f5.com/csp/article/K06046097?utm_source=f5support&amp%3Butm_medium=RSS",
-                      "https://ubuntu.com/security/CVE-2019-1010024",
-                      "https://www.cve.org/CVERecord?id=CVE-2019-1010024"
-                    ],
-                    "severity": "LOW",
-                    "suppressed": false,
-                    "title": "glibc: ASLR bypass using cache of thread stack and heap"
-                  },
-                  {
-                    "cve": "CVE-2019-1010025",
-                    "cvss": {
-                      "nvd": {
-                        "v3score": "5.3",
-                        "v3vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N"
-                      },
-                      "redhat": {
-                        "v3score": "2.9",
-                        "v3vector": "CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-330"
-                    ],
-                    "description": "GNU Libc current is affected by: Mitigation bypass. The impact is: Attacker may guess the heap addresses of pthread_created thread. The component is: glibc. NOTE: the vendor's position is \"ASLR bypass itself is not a vulnerability.",
-                    "diffID": "sha256:a499da141b419b2e97ed40192951a05fc37fadec129a55e1de03773e23fff97b",
-                    "installedVersion": "2.31-13+deb11u8",
-                    "packageName": "libc-bin",
-                    "purl": "pkg:deb/debian/libc-bin@2.31-13%2Bdeb11u8?arch=arm64&distro=debian-11.9",
-                    "references": [
-                      "https://access.redhat.com/security/cve/CVE-2019-1010025",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2019-1010025",
-                      "https://security-tracker.debian.org/tracker/CVE-2019-1010025",
-                      "https://sourceware.org/bugzilla/show_bug.cgi?id=22853",
-                      "https://support.f5.com/csp/article/K06046097",
-                      "https://support.f5.com/csp/article/K06046097?utm_source=f5support&amp%3Butm_medium=RSS",
-                      "https://ubuntu.com/security/CVE-2019-1010025",
-                      "https://www.cve.org/CVERecord?id=CVE-2019-1010025"
-                    ],
-                    "severity": "LOW",
-                    "suppressed": false,
-                    "title": "glibc: information disclosure of heap addresses of pthread_created thread"
-                  },
-                  {
-                    "cve": "CVE-2019-9192",
-                    "cvss": {
-                      "nvd": {
-                        "v3score": "7.5",
-                        "v3vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"
-                      },
-                      "redhat": {
-                        "v3score": "2.8",
-                        "v3vector": "CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:L"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-674"
-                    ],
-                    "description": "In the GNU C Library (aka glibc or libc6) through 2.29, check_dst_limits_calc_pos_1 in posix/regexec.c has Uncontrolled Recursion, as demonstrated by '(|)(\\\\1\\\\1)*' in grep, a different issue than CVE-2018-20796. NOTE: the software maintainer disputes that this is a vulnerability because the behavior occurs only with a crafted pattern",
-                    "diffID": "sha256:a499da141b419b2e97ed40192951a05fc37fadec129a55e1de03773e23fff97b",
-                    "installedVersion": "2.31-13+deb11u8",
-                    "packageName": "libc-bin",
-                    "purl": "pkg:deb/debian/libc-bin@2.31-13%2Bdeb11u8?arch=arm64&distro=debian-11.9",
-                    "references": [
-                      "https://access.redhat.com/security/cve/CVE-2019-9192",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2019-9192",
-                      "https://sourceware.org/bugzilla/show_bug.cgi?id=24269",
-                      "https://support.f5.com/csp/article/K26346590?utm_source=f5support&amp%3Butm_medium=RSS",
-                      "https://www.cve.org/CVERecord?id=CVE-2019-9192"
-                    ],
-                    "severity": "LOW",
-                    "suppressed": false,
-                    "title": "glibc: uncontrolled recursion in function check_dst_limits_calc_pos_1 in posix/regexec.c"
-                  },
-                  {
-                    "cve": "CVE-2024-2961",
-                    "cvss": {
-                      "redhat": {
-                        "v3score": "8.8",
-                        "v3vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-787"
-                    ],
-                    "description": "The iconv() function in the GNU C Library versions 2.39 and older may overflow the output buffer passed to it by up to 4 bytes when converting strings to the ISO-2022-CN-EXT character set, which may be used to crash an application or overwrite a neighbouring variable.",
-                    "diffID": "sha256:a499da141b419b2e97ed40192951a05fc37fadec129a55e1de03773e23fff97b",
-                    "fixedVersions": [
-                      "2.31-13+deb11u9"
-                    ],
-                    "installedVersion": "2.31-13+deb11u8",
-                    "packageName": "libc6",
-                    "purl": "pkg:deb/debian/libc6@2.31-13%2Bdeb11u8?arch=arm64&distro=debian-11.9",
-                    "references": [
-                      "http://www.openwall.com/lists/oss-security/2024/04/17/9",
-                      "http://www.openwall.com/lists/oss-security/2024/04/18/4",
-                      "http://www.openwall.com/lists/oss-security/2024/04/24/2",
-                      "http://www.openwall.com/lists/oss-security/2024/05/27/1",
-                      "http://www.openwall.com/lists/oss-security/2024/05/27/2",
-                      "http://www.openwall.com/lists/oss-security/2024/05/27/3",
-                      "http://www.openwall.com/lists/oss-security/2024/05/27/4",
-                      "http://www.openwall.com/lists/oss-security/2024/05/27/5",
-                      "http://www.openwall.com/lists/oss-security/2024/05/27/6",
-                      "http://www.openwall.com/lists/oss-security/2024/07/22/5",
-                      "https://access.redhat.com/errata/RHSA-2024:3269",
-                      "https://access.redhat.com/security/cve/CVE-2024-2961",
-                      "https://bugzilla.redhat.com/2273404",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2273404",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2277202",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2277204",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2277205",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2277206",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-2961",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-33599",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-33600",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-33601",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-33602",
-                      "https://errata.almalinux.org/8/ALSA-2024-3269.html",
-                      "https://errata.rockylinux.org/RLSA-2024:3339",
-                      "https://linux.oracle.com/cve/CVE-2024-2961.html",
-                      "https://linux.oracle.com/errata/ELSA-2024-3588.html",
-                      "https://lists.debian.org/debian-lts-announce/2024/05/msg00001.html",
-                      "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/BTJFBGHDYG5PEIFD5WSSSKSFZ2AZWC5N/",
-                      "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/P3I4KYS6EU6S7QZ47WFNTPVAHFIUQNEL/",
-                      "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/YAMJQI3Y6BHWV3CUTYBXOZONCUJNOB2Z/",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2024-2961",
-                      "https://security.netapp.com/advisory/ntap-20240531-0002/",
-                      "https://sourceware.org/git/?p=glibc.git;a=blob;f=advisories/GLIBC-SA-2024-0004",
-                      "https://ubuntu.com/security/notices/USN-6737-1",
-                      "https://ubuntu.com/security/notices/USN-6737-2",
-                      "https://ubuntu.com/security/notices/USN-6762-1",
-                      "https://www.ambionics.io/blog/iconv-cve-2024-2961-p1",
-                      "https://www.ambionics.io/blog/iconv-cve-2024-2961-p2",
-                      "https://www.ambionics.io/blog/iconv-cve-2024-2961-p3",
-                      "https://www.cve.org/CVERecord?id=CVE-2024-2961",
-                      "https://www.openwall.com/lists/oss-security/2024/04/17/9"
-                    ],
-                    "severity": "HIGH",
-                    "suppressed": false,
-                    "title": "glibc: Out of bounds write in iconv may lead to remote code execution"
-                  },
-                  {
-                    "cve": "CVE-2024-33599",
-                    "cvss": {
-                      "redhat": {
-                        "v3score": "7.6",
-                        "v3vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-121"
-                    ],
-                    "description": "nscd: Stack-based buffer overflow in netgroup cache\n\nIf the Name Service Cache Daemon's (nscd) fixed size cache is exhausted\nby client requests then a subsequent client request for netgroup data\nmay result in a stack-based buffer overflow.  This flaw was introduced\nin glibc 2.15 when the cache was added to nscd.\n\nThis vulnerability is only present in the nscd binary.",
-                    "diffID": "sha256:a499da141b419b2e97ed40192951a05fc37fadec129a55e1de03773e23fff97b",
-                    "fixedVersions": [
-                      "2.31-13+deb11u10"
-                    ],
-                    "installedVersion": "2.31-13+deb11u8",
-                    "packageName": "libc6",
-                    "purl": "pkg:deb/debian/libc6@2.31-13%2Bdeb11u8?arch=arm64&distro=debian-11.9",
-                    "references": [
-                      "http://www.openwall.com/lists/oss-security/2024/07/22/5",
-                      "https://access.redhat.com/errata/RHSA-2024:3344",
-                      "https://access.redhat.com/security/cve/CVE-2024-33599",
-                      "https://bugzilla.redhat.com/2277202",
-                      "https://bugzilla.redhat.com/2277204",
-                      "https://bugzilla.redhat.com/2277205",
-                      "https://bugzilla.redhat.com/2277206",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2273404",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2277202",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2277204",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2277205",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2277206",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-2961",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-33599",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-33600",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-33601",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-33602",
-                      "https://errata.almalinux.org/8/ALSA-2024-3344.html",
-                      "https://errata.rockylinux.org/RLSA-2024:3339",
-                      "https://inbox.sourceware.org/libc-alpha/cover.1713974801.git.fweimer@redhat.com/",
-                      "https://linux.oracle.com/cve/CVE-2024-33599.html",
-                      "https://linux.oracle.com/errata/ELSA-2024-3588.html",
-                      "https://lists.debian.org/debian-lts-announce/2024/06/msg00026.html",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2024-33599",
-                      "https://security.netapp.com/advisory/ntap-20240524-0011/",
-                      "https://sourceware.org/git/?p=glibc.git;a=blob;f=advisories/GLIBC-SA-2024-0005",
-                      "https://ubuntu.com/security/notices/USN-6804-1",
-                      "https://www.cve.org/CVERecord?id=CVE-2024-33599",
-                      "https://www.openwall.com/lists/oss-security/2024/04/24/2"
-                    ],
-                    "severity": "HIGH",
-                    "suppressed": false,
-                    "title": "glibc: stack-based buffer overflow in netgroup cache"
-                  },
-                  {
-                    "cve": "CVE-2025-4802",
-                    "cvss": {
-                      "redhat": {
-                        "v3score": "7",
-                        "v3vector": "CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-426"
-                    ],
-                    "description": "Untrusted LD_LIBRARY_PATH environment variable vulnerability in the GNU C Library version 2.27 to 2.38 allows attacker controlled loading of dynamically shared library in statically compiled setuid binaries that call dlopen (including internal dlopen calls after setlocale or calls to NSS functions such as getaddrinfo).",
-                    "diffID": "sha256:a499da141b419b2e97ed40192951a05fc37fadec129a55e1de03773e23fff97b",
-                    "fixedVersions": [
-                      "2.31-13+deb11u13"
-                    ],
-                    "installedVersion": "2.31-13+deb11u8",
-                    "packageName": "libc6",
-                    "purl": "pkg:deb/debian/libc6@2.31-13%2Bdeb11u8?arch=arm64&distro=debian-11.9",
-                    "references": [
-                      "http://www.openwall.com/lists/oss-security/2025/05/16/7",
-                      "http://www.openwall.com/lists/oss-security/2025/05/17/2",
-                      "https://access.redhat.com/errata/RHSA-2025:8686",
-                      "https://access.redhat.com/security/cve/CVE-2025-4802",
-                      "https://bugzilla.redhat.com/2367468",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2367468",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-4802",
-                      "https://errata.almalinux.org/8/ALSA-2025-8686.html",
-                      "https://errata.rockylinux.org/RLSA-2025:8655",
-                      "https://linux.oracle.com/cve/CVE-2025-4802.html",
-                      "https://linux.oracle.com/errata/ELSA-2025-8686.html",
-                      "https://lists.debian.org/debian-lts-announce/2025/05/msg00033.html",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2025-4802",
-                      "https://sourceware.org/bugzilla/show_bug.cgi?id=32976",
-                      "https://sourceware.org/cgit/glibc/commit/?id=1e18586c5820e329f741d5c710275e165581380e",
-                      "https://sourceware.org/cgit/glibc/commit/?id=5451fa962cd0a90a0e2ec1d8910a559ace02bba0",
-                      "https://ubuntu.com/security/notices/USN-7541-1",
-                      "https://www.cve.org/CVERecord?id=CVE-2025-4802",
-                      "https://www.openwall.com/lists/oss-security/2025/05/16/7",
-                      "https://www.openwall.com/lists/oss-security/2025/05/17/2"
-                    ],
-                    "severity": "HIGH",
-                    "suppressed": false,
-                    "title": "glibc: static setuid binary dlopen may incorrectly search LD_LIBRARY_PATH"
-                  },
-                  {
-                    "cve": "CVE-2026-0861",
-                    "cvss": {
-                      "redhat": {
-                        "v3score": "8.1",
-                        "v3vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-190"
-                    ],
-                    "description": "Passing too large an alignment to the memalign suite of functions (memalign, posix_memalign, aligned_alloc) in the GNU C Library version 2.30 to 2.42 may result in an integer overflow, which could consequently result in a heap corruption.\n\nNote that the attacker must have control over both, the size as well as the alignment arguments of the memalign function to be able to exploit this.  The size parameter must be close enough to PTRDIFF_MAX so as to overflow size_t along with the large alignment argument.  This limits the malicious inputs for the alignment for memalign to the range [1<<62+ 1, 1<<63] and exactly 1<<63 for posix_memalign and aligned_alloc.\n\nTypically the alignment argument passed to such functions is a known constrained quantity (e.g. page size, block size, struct sizes) and is not attacker controlled, because of which this may not be easily exploitable in practice.  An application bug could potentially result in the input alignment being too large, e.g. due to a different buffer overflow or integer overflow in the application or its dependent libraries, but that is again an uncommon usage pattern given typical sources of alignments.",
-                    "diffID": "sha256:a499da141b419b2e97ed40192951a05fc37fadec129a55e1de03773e23fff97b",
-                    "installedVersion": "2.31-13+deb11u8",
-                    "packageName": "libc6",
-                    "purl": "pkg:deb/debian/libc6@2.31-13%2Bdeb11u8?arch=arm64&distro=debian-11.9",
-                    "references": [
-                      "http://www.openwall.com/lists/oss-security/2026/01/16/5",
-                      "https://access.redhat.com/errata/RHSA-2026:1334",
-                      "https://access.redhat.com/security/cve/CVE-2026-0861",
-                      "https://bugzilla.redhat.com/2429771",
-                      "https://bugzilla.redhat.com/2430201",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2429771",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430201",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-0861",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-0915",
-                      "https://errata.almalinux.org/10/ALSA-2026-1334.html",
-                      "https://errata.rockylinux.org/RLSA-2026:1334",
-                      "https://linux.oracle.com/cve/CVE-2026-0861.html",
-                      "https://linux.oracle.com/errata/ELSA-2026-50078.html",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2026-0861",
-                      "https://sourceware.org/bugzilla/show_bug.cgi?id=33796",
-                      "https://sourceware.org/git/?p=glibc.git;a=blob_plain;f=advisories/GLIBC-SA-2026-0001",
-                      "https://ubuntu.com/security/notices/USN-8005-1",
-                      "https://www.cve.org/CVERecord?id=CVE-2026-0861"
-                    ],
-                    "severity": "HIGH",
-                    "suppressed": false,
-                    "title": "glibc: Integer overflow in memalign leads to heap corruption"
-                  },
-                  {
-                    "cve": "CVE-2023-4806",
-                    "cvss": {
-                      "nvd": {
-                        "v3score": "5.9",
-                        "v3vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H"
-                      },
-                      "redhat": {
-                        "v3score": "5.9",
-                        "v3vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-416"
-                    ],
-                    "description": "A flaw has been identified in glibc. In an extremely rare situation, the getaddrinfo function may access memory that has been freed, resulting in an application crash. This issue is only exploitable when a NSS module implements only the _nss_*_gethostbyname2_r and _nss_*_getcanonname_r hooks without implementing the _nss_*_gethostbyname3_r hook. The resolved name should return a large number of IPv6 and IPv4, and the call to the getaddrinfo function should have the AF_INET6 address family with AI_CANONNAME, AI_ALL and AI_V4MAPPED as flags.",
-                    "diffID": "sha256:a499da141b419b2e97ed40192951a05fc37fadec129a55e1de03773e23fff97b",
-                    "installedVersion": "2.31-13+deb11u8",
-                    "packageName": "libc6",
-                    "purl": "pkg:deb/debian/libc6@2.31-13%2Bdeb11u8?arch=arm64&distro=debian-11.9",
-                    "references": [
-                      "http://www.openwall.com/lists/oss-security/2023/10/03/4",
-                      "http://www.openwall.com/lists/oss-security/2023/10/03/5",
-                      "http://www.openwall.com/lists/oss-security/2023/10/03/6",
-                      "http://www.openwall.com/lists/oss-security/2023/10/03/8",
-                      "https://access.redhat.com/errata/RHBA-2024:2413",
-                      "https://access.redhat.com/errata/RHSA-2023:5453",
-                      "https://access.redhat.com/errata/RHSA-2023:5455",
-                      "https://access.redhat.com/errata/RHSA-2023:7409",
-                      "https://access.redhat.com/security/cve/CVE-2023-4806",
-                      "https://bugzilla.redhat.com/2234712",
-                      "https://bugzilla.redhat.com/2237782",
-                      "https://bugzilla.redhat.com/2237798",
-                      "https://bugzilla.redhat.com/2238352",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2234712",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2237782",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2237798",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2238352",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-4527",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-4806",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-4813",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-4911",
-                      "https://errata.almalinux.org/8/ALSA-2023-5455.html",
-                      "https://errata.rockylinux.org/RLSA-2023:5455",
-                      "https://linux.oracle.com/cve/CVE-2023-4806.html",
-                      "https://linux.oracle.com/errata/ELSA-2023-5455.html",
-                      "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/4DBUQRRPB47TC3NJOUIBVWUGFHBJAFDL/",
-                      "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/DFG4P76UHHZEWQ26FWBXG76N2QLKKPZA/",
-                      "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/NDAQWHTSVOCOZ5K6KPIWKRT3JX4RTZUR/",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2023-4806",
-                      "https://security.gentoo.org/glsa/202310-03",
-                      "https://security.netapp.com/advisory/ntap-20240125-0008/",
-                      "https://ubuntu.com/security/notices/USN-6541-1",
-                      "https://ubuntu.com/security/notices/USN-6541-2",
-                      "https://www.cve.org/CVERecord?id=CVE-2023-4806"
-                    ],
-                    "severity": "MEDIUM",
-                    "suppressed": false,
-                    "title": "glibc: potential use-after-free in getaddrinfo()"
-                  },
-                  {
-                    "cve": "CVE-2023-4813",
-                    "cvss": {
-                      "nvd": {
-                        "v3score": "5.9",
-                        "v3vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H"
-                      },
-                      "redhat": {
-                        "v3score": "5.9",
-                        "v3vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-416"
-                    ],
-                    "description": "A flaw has been identified in glibc. In an uncommon situation, the gaih_inet function may use memory that has been freed, resulting in an application crash. This issue is only exploitable when the getaddrinfo function is called and the hosts database in /etc/nsswitch.conf is configured with SUCCESS=continue or SUCCESS=merge.",
-                    "diffID": "sha256:a499da141b419b2e97ed40192951a05fc37fadec129a55e1de03773e23fff97b",
-                    "installedVersion": "2.31-13+deb11u8",
-                    "packageName": "libc6",
-                    "purl": "pkg:deb/debian/libc6@2.31-13%2Bdeb11u8?arch=arm64&distro=debian-11.9",
-                    "references": [
-                      "http://www.openwall.com/lists/oss-security/2023/10/03/8",
-                      "https://access.redhat.com/errata/RHBA-2024:2413",
-                      "https://access.redhat.com/errata/RHSA-2023:5453",
-                      "https://access.redhat.com/errata/RHSA-2023:5455",
-                      "https://access.redhat.com/errata/RHSA-2023:7409",
-                      "https://access.redhat.com/security/cve/CVE-2023-4813",
-                      "https://bugzilla.redhat.com/2234712",
-                      "https://bugzilla.redhat.com/2237782",
-                      "https://bugzilla.redhat.com/2237798",
-                      "https://bugzilla.redhat.com/2238352",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2234712",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2237782",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2237798",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2238352",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-4527",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-4806",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-4813",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-4911",
-                      "https://errata.almalinux.org/8/ALSA-2023-5455.html",
-                      "https://errata.rockylinux.org/RLSA-2023:5455",
-                      "https://linux.oracle.com/cve/CVE-2023-4813.html",
-                      "https://linux.oracle.com/errata/ELSA-2023-5455.html",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2023-4813",
-                      "https://security.netapp.com/advisory/ntap-20231110-0003/",
-                      "https://ubuntu.com/security/notices/USN-6541-1",
-                      "https://ubuntu.com/security/notices/USN-6541-2",
-                      "https://www.cve.org/CVERecord?id=CVE-2023-4813"
-                    ],
-                    "severity": "MEDIUM",
-                    "suppressed": false,
-                    "title": "glibc: potential use-after-free in gaih_inet()"
-                  },
-                  {
-                    "cve": "CVE-2024-33600",
-                    "cvss": {
-                      "redhat": {
-                        "v3score": "5.3",
-                        "v3vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-476"
-                    ],
-                    "description": "nscd: Null pointer crashes after notfound response\n\nIf the Name Service Cache Daemon's (nscd) cache fails to add a not-found\nnetgroup response to the cache, the client request can result in a null\npointer dereference.  This flaw was introduced in glibc 2.15 when the\ncache was added to nscd.\n\nThis vulnerability is only present in the nscd binary.",
-                    "diffID": "sha256:a499da141b419b2e97ed40192951a05fc37fadec129a55e1de03773e23fff97b",
-                    "fixedVersions": [
-                      "2.31-13+deb11u10"
-                    ],
-                    "installedVersion": "2.31-13+deb11u8",
-                    "packageName": "libc6",
-                    "purl": "pkg:deb/debian/libc6@2.31-13%2Bdeb11u8?arch=arm64&distro=debian-11.9",
-                    "references": [
-                      "http://www.openwall.com/lists/oss-security/2024/07/22/5",
-                      "https://access.redhat.com/errata/RHSA-2024:3344",
-                      "https://access.redhat.com/security/cve/CVE-2024-33600",
-                      "https://bugzilla.redhat.com/2277202",
-                      "https://bugzilla.redhat.com/2277204",
-                      "https://bugzilla.redhat.com/2277205",
-                      "https://bugzilla.redhat.com/2277206",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2273404",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2277202",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2277204",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2277205",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2277206",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-2961",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-33599",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-33600",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-33601",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-33602",
-                      "https://errata.almalinux.org/8/ALSA-2024-3344.html",
-                      "https://errata.rockylinux.org/RLSA-2024:3339",
-                      "https://inbox.sourceware.org/libc-alpha/cover.1713974801.git.fweimer@redhat.com/",
-                      "https://linux.oracle.com/cve/CVE-2024-33600.html",
-                      "https://linux.oracle.com/errata/ELSA-2024-3588.html",
-                      "https://lists.debian.org/debian-lts-announce/2024/06/msg00026.html",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2024-33600",
-                      "https://security.netapp.com/advisory/ntap-20240524-0013/",
-                      "https://sourceware.org/git/?p=glibc.git;a=blob;f=advisories/GLIBC-SA-2024-0006",
-                      "https://ubuntu.com/security/notices/USN-6804-1",
-                      "https://www.cve.org/CVERecord?id=CVE-2024-33600",
-                      "https://www.openwall.com/lists/oss-security/2024/04/24/2"
-                    ],
-                    "severity": "MEDIUM",
-                    "suppressed": false,
-                    "title": "glibc: null pointer dereferences after failed netgroup cache insertion"
-                  },
-                  {
-                    "cve": "CVE-2024-33601",
-                    "cvss": {
-                      "redhat": {
-                        "v3score": "4",
-                        "v3vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-617"
-                    ],
-                    "description": "nscd: netgroup cache may terminate daemon on memory allocation failure\n\nThe Name Service Cache Daemon's (nscd) netgroup cache uses xmalloc or\nxrealloc and these functions may terminate the process due to a memory\nallocation failure resulting in a denial of service to the clients.  The\nflaw was introduced in glibc 2.15 when the cache was added to nscd.\n\nThis vulnerability is only present in the nscd binary.",
-                    "diffID": "sha256:a499da141b419b2e97ed40192951a05fc37fadec129a55e1de03773e23fff97b",
-                    "fixedVersions": [
-                      "2.31-13+deb11u10"
-                    ],
-                    "installedVersion": "2.31-13+deb11u8",
-                    "packageName": "libc6",
-                    "purl": "pkg:deb/debian/libc6@2.31-13%2Bdeb11u8?arch=arm64&distro=debian-11.9",
-                    "references": [
-                      "http://www.openwall.com/lists/oss-security/2024/07/22/5",
-                      "https://access.redhat.com/errata/RHSA-2024:3344",
-                      "https://access.redhat.com/security/cve/CVE-2024-33601",
-                      "https://bugzilla.redhat.com/2277202",
-                      "https://bugzilla.redhat.com/2277204",
-                      "https://bugzilla.redhat.com/2277205",
-                      "https://bugzilla.redhat.com/2277206",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2273404",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2277202",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2277204",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2277205",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2277206",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-2961",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-33599",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-33600",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-33601",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-33602",
-                      "https://errata.almalinux.org/8/ALSA-2024-3344.html",
-                      "https://errata.rockylinux.org/RLSA-2024:3339",
-                      "https://inbox.sourceware.org/libc-alpha/cover.1713974801.git.fweimer@redhat.com/",
-                      "https://linux.oracle.com/cve/CVE-2024-33601.html",
-                      "https://linux.oracle.com/errata/ELSA-2024-3588.html",
-                      "https://lists.debian.org/debian-lts-announce/2024/06/msg00026.html",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2024-33601",
-                      "https://security.netapp.com/advisory/ntap-20240524-0014/",
-                      "https://sourceware.org/git/?p=glibc.git;a=blob;f=advisories/GLIBC-SA-2024-0007",
-                      "https://ubuntu.com/security/notices/USN-6804-1",
-                      "https://www.cve.org/CVERecord?id=CVE-2024-33601",
-                      "https://www.openwall.com/lists/oss-security/2024/04/24/2"
-                    ],
-                    "severity": "MEDIUM",
-                    "suppressed": false,
-                    "title": "glibc: netgroup cache may terminate daemon on memory allocation failure"
-                  },
-                  {
-                    "cve": "CVE-2024-33602",
-                    "cvss": {
-                      "redhat": {
-                        "v3score": "4",
-                        "v3vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-466"
-                    ],
-                    "description": "nscd: netgroup cache assumes NSS callback uses in-buffer strings\n\nThe Name Service Cache Daemon's (nscd) netgroup cache can corrupt memory\nwhen the NSS callback does not store all strings in the provided buffer.\nThe flaw was introduced in glibc 2.15 when the cache was added to nscd.\n\nThis vulnerability is only present in the nscd binary.",
-                    "diffID": "sha256:a499da141b419b2e97ed40192951a05fc37fadec129a55e1de03773e23fff97b",
-                    "fixedVersions": [
-                      "2.31-13+deb11u10"
-                    ],
-                    "installedVersion": "2.31-13+deb11u8",
-                    "packageName": "libc6",
-                    "purl": "pkg:deb/debian/libc6@2.31-13%2Bdeb11u8?arch=arm64&distro=debian-11.9",
-                    "references": [
-                      "http://www.openwall.com/lists/oss-security/2024/07/22/5",
-                      "https://access.redhat.com/errata/RHSA-2024:3344",
-                      "https://access.redhat.com/security/cve/CVE-2024-33602",
-                      "https://bugzilla.redhat.com/2277202",
-                      "https://bugzilla.redhat.com/2277204",
-                      "https://bugzilla.redhat.com/2277205",
-                      "https://bugzilla.redhat.com/2277206",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2273404",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2277202",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2277204",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2277205",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2277206",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-2961",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-33599",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-33600",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-33601",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-33602",
-                      "https://errata.almalinux.org/8/ALSA-2024-3344.html",
-                      "https://errata.rockylinux.org/RLSA-2024:3339",
-                      "https://inbox.sourceware.org/libc-alpha/cover.1713974801.git.fweimer@redhat.com/",
-                      "https://linux.oracle.com/cve/CVE-2024-33602.html",
-                      "https://linux.oracle.com/errata/ELSA-2024-3588.html",
-                      "https://lists.debian.org/debian-lts-announce/2024/06/msg00026.html",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2024-33602",
-                      "https://security.netapp.com/advisory/ntap-20240524-0012/",
-                      "https://sourceware.org/bugzilla/show_bug.cgi?id=31680",
-                      "https://sourceware.org/git/?p=glibc.git;a=blob;f=advisories/GLIBC-SA-2024-0008",
-                      "https://ubuntu.com/security/notices/USN-6804-1",
-                      "https://www.cve.org/CVERecord?id=CVE-2024-33602",
-                      "https://www.openwall.com/lists/oss-security/2024/04/24/2"
-                    ],
-                    "severity": "MEDIUM",
-                    "suppressed": false,
-                    "title": "glibc: netgroup cache assumes NSS callback uses in-buffer strings"
-                  },
-                  {
-                    "cve": "CVE-2025-0395",
-                    "cvss": {
-                      "redhat": {
-                        "v3score": "5.5",
-                        "v3vector": "CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:L/I:L/A:H"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-131"
-                    ],
-                    "description": "When the assert() function in the GNU C Library versions 2.13 to 2.40 fails, it does not allocate enough space for the assertion failure message string and size information, which may lead to a buffer overflow if the message string size aligns to page size.",
-                    "diffID": "sha256:a499da141b419b2e97ed40192951a05fc37fadec129a55e1de03773e23fff97b",
-                    "fixedVersions": [
-                      "2.31-13+deb11u12"
-                    ],
-                    "installedVersion": "2.31-13+deb11u8",
-                    "packageName": "libc6",
-                    "purl": "pkg:deb/debian/libc6@2.31-13%2Bdeb11u8?arch=arm64&distro=debian-11.9",
-                    "references": [
-                      "http://www.openwall.com/lists/oss-security/2025/01/22/4",
-                      "http://www.openwall.com/lists/oss-security/2025/01/23/2",
-                      "http://www.openwall.com/lists/oss-security/2025/04/13/1",
-                      "http://www.openwall.com/lists/oss-security/2025/04/24/7",
-                      "https://access.redhat.com/errata/RHSA-2025:3828",
-                      "https://access.redhat.com/security/cve/CVE-2025-0395",
-                      "https://bugzilla.redhat.com/2339460",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2339460",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-0395",
-                      "https://errata.almalinux.org/8/ALSA-2025-3828.html",
-                      "https://errata.rockylinux.org/RLSA-2025:4244",
-                      "https://linux.oracle.com/cve/CVE-2025-0395.html",
-                      "https://linux.oracle.com/errata/ELSA-2025-4244.html",
-                      "https://lists.debian.org/debian-lts-announce/2025/04/msg00039.html",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2025-0395",
-                      "https://security.netapp.com/advisory/ntap-20250228-0006/",
-                      "https://sourceware.org/bugzilla/show_bug.cgi?id=32582",
-                      "https://sourceware.org/git/?p=glibc.git;a=blob;f=advisories/GLIBC-SA-2025-0001",
-                      "https://sourceware.org/pipermail/libc-announce/2025/000044.html",
-                      "https://ubuntu.com/security/notices/USN-7259-1",
-                      "https://ubuntu.com/security/notices/USN-7259-2",
-                      "https://ubuntu.com/security/notices/USN-7259-3",
-                      "https://www.cve.org/CVERecord?id=CVE-2025-0395",
-                      "https://www.openwall.com/lists/oss-security/2025/01/22/4"
-                    ],
-                    "severity": "MEDIUM",
-                    "suppressed": false,
-                    "title": "glibc: buffer overflow in the GNU C Library's assert()"
-                  },
-                  {
-                    "cve": "CVE-2025-15281",
-                    "cvss": {
-                      "redhat": {
-                        "v3score": "5.9",
-                        "v3vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-908"
-                    ],
-                    "description": "Calling wordexp with WRDE_REUSE in conjunction with WRDE_APPEND in the GNU C Library version 2.0 to version 2.42 may cause the interface to return uninitialized memory in the we_wordv member, which on subsequent calls to wordfree may abort the process.",
-                    "diffID": "sha256:a499da141b419b2e97ed40192951a05fc37fadec129a55e1de03773e23fff97b",
-                    "installedVersion": "2.31-13+deb11u8",
-                    "packageName": "libc6",
-                    "purl": "pkg:deb/debian/libc6@2.31-13%2Bdeb11u8?arch=arm64&distro=debian-11.9",
-                    "references": [
-                      "http://www.openwall.com/lists/oss-security/2026/01/20/3",
-                      "https://access.redhat.com/security/cve/CVE-2025-15281",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2025-15281",
-                      "https://sourceware.org/bugzilla/show_bug.cgi?id=33814",
-                      "https://ubuntu.com/security/notices/USN-8005-1",
-                      "https://www.cve.org/CVERecord?id=CVE-2025-15281",
-                      "https://www.openwall.com/lists/oss-security/2026/01/20/3"
-                    ],
-                    "severity": "MEDIUM",
-                    "suppressed": false,
-                    "title": "glibc: wordexp with WRDE_REUSE and WRDE_APPEND may return uninitialized memory"
-                  },
-                  {
-                    "cve": "CVE-2025-8058",
-                    "cvss": {
-                      "redhat": {
-                        "v3score": "4.2",
-                        "v3vector": "CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:L/I:L/A:L"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-415"
-                    ],
-                    "description": "The regcomp function in the GNU C library version from 2.4 to 2.41 is \nsubject to a double free if some previous allocation fails. It can be \naccomplished either by a malloc failure or by using an interposed malloc\n that injects random malloc failures. The double free can allow buffer \nmanipulation depending of how the regex is constructed. This issue \naffects all architectures and ABIs supported by the GNU C library.",
-                    "diffID": "sha256:a499da141b419b2e97ed40192951a05fc37fadec129a55e1de03773e23fff97b",
-                    "installedVersion": "2.31-13+deb11u8",
-                    "packageName": "libc6",
-                    "purl": "pkg:deb/debian/libc6@2.31-13%2Bdeb11u8?arch=arm64&distro=debian-11.9",
-                    "references": [
-                      "http://www.openwall.com/lists/oss-security/2025/07/23/1",
-                      "https://access.redhat.com/errata/RHSA-2025:12980",
-                      "https://access.redhat.com/security/cve/CVE-2025-8058",
-                      "https://bugzilla.redhat.com/2383146",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2383146",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-8058",
-                      "https://errata.almalinux.org/8/ALSA-2025-12980.html",
-                      "https://errata.rockylinux.org/RLSA-2025:12748",
-                      "https://linux.oracle.com/cve/CVE-2025-8058.html",
-                      "https://linux.oracle.com/errata/ELSA-2025-28054.html",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2025-8058",
-                      "https://sourceware.org/bugzilla/show_bug.cgi?id=33185",
-                      "https://sourceware.org/git/?p=glibc.git;a=blob_plain;f=advisories/GLIBC-SA-2025-0005",
-                      "https://sourceware.org/git/?p=glibc.git;a=commit;h=3ff17af18c38727b88d9115e536c069e6b5d601f",
-                      "https://ubuntu.com/security/notices/USN-7760-1",
-                      "https://ubuntu.com/security/notices/USN-8005-1",
-                      "https://www.cve.org/CVERecord?id=CVE-2025-8058"
-                    ],
-                    "severity": "MEDIUM",
-                    "suppressed": false,
-                    "title": "glibc: Double free in glibc"
-                  },
-                  {
-                    "cve": "CVE-2026-0915",
-                    "cvss": {
-                      "redhat": {
-                        "v3score": "5.3",
-                        "v3vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-908"
-                    ],
-                    "description": "Calling getnetbyaddr or getnetbyaddr_r with a configured nsswitch.conf that specifies the library's DNS backend for networks and queries for a zero-valued network in the GNU C Library version 2.0 to version 2.42 can leak stack contents to the configured DNS resolver.",
-                    "diffID": "sha256:a499da141b419b2e97ed40192951a05fc37fadec129a55e1de03773e23fff97b",
-                    "installedVersion": "2.31-13+deb11u8",
-                    "packageName": "libc6",
-                    "purl": "pkg:deb/debian/libc6@2.31-13%2Bdeb11u8?arch=arm64&distro=debian-11.9",
-                    "references": [
-                      "http://www.openwall.com/lists/oss-security/2026/01/16/6",
-                      "https://access.redhat.com/errata/RHSA-2026:1334",
-                      "https://access.redhat.com/security/cve/CVE-2026-0915",
-                      "https://bugzilla.redhat.com/2429771",
-                      "https://bugzilla.redhat.com/2430201",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2429771",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430201",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-0861",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-0915",
-                      "https://errata.almalinux.org/10/ALSA-2026-1334.html",
-                      "https://errata.rockylinux.org/RLSA-2026:1334",
-                      "https://linux.oracle.com/cve/CVE-2026-0915.html",
-                      "https://linux.oracle.com/errata/ELSA-2026-50078.html",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2026-0915",
-                      "https://sourceware.org/bugzilla/show_bug.cgi?id=33802",
-                      "https://ubuntu.com/security/notices/USN-8005-1",
-                      "https://www.cve.org/CVERecord?id=CVE-2026-0915",
-                      "https://www.openwall.com/lists/oss-security/2026/01/16/6"
-                    ],
-                    "severity": "MEDIUM",
-                    "suppressed": false,
-                    "title": "glibc: glibc: Information disclosure via zero-valued network query"
-                  },
-                  {
-                    "cve": "CVE-2010-4756",
-                    "cvss": {
-                      "nvd": {
-                        "v3score": "0",
-                        "v3vector": ""
-                      },
-                      "redhat": {
-                        "v3score": "0",
-                        "v3vector": ""
-                      }
-                    },
-                    "cwes": [
-                      "CWE-399"
-                    ],
-                    "description": "The glob implementation in the GNU C Library (aka glibc or libc6) allows remote authenticated users to cause a denial of service (CPU and memory consumption) via crafted glob expressions that do not match any pathnames, as demonstrated by glob expressions in STAT commands to an FTP daemon, a different vulnerability than CVE-2010-2632.",
-                    "diffID": "sha256:a499da141b419b2e97ed40192951a05fc37fadec129a55e1de03773e23fff97b",
-                    "installedVersion": "2.31-13+deb11u8",
-                    "packageName": "libc6",
-                    "purl": "pkg:deb/debian/libc6@2.31-13%2Bdeb11u8?arch=arm64&distro=debian-11.9",
-                    "references": [
-                      "http://cxib.net/stuff/glob-0day.c",
-                      "http://securityreason.com/achievement_securityalert/89",
-                      "http://securityreason.com/exploitalert/9223",
-                      "https://access.redhat.com/security/cve/CVE-2010-4756",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=681681",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2010-4756",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2010-4756",
-                      "https://security.netapp.com/advisory/ntap-20241108-0002/",
-                      "https://www.cve.org/CVERecord?id=CVE-2010-4756"
-                    ],
-                    "severity": "LOW",
-                    "suppressed": false,
-                    "title": "glibc: glob implementation can cause excessive CPU and memory consumption due to crafted glob expressions"
-                  },
-                  {
-                    "cve": "CVE-2018-20796",
-                    "cvss": {
-                      "nvd": {
-                        "v3score": "7.5",
-                        "v3vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"
-                      },
-                      "redhat": {
-                        "v3score": "5.3",
-                        "v3vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-674"
-                    ],
-                    "description": "In the GNU C Library (aka glibc or libc6) through 2.29, check_dst_limits_calc_pos_1 in posix/regexec.c has Uncontrolled Recursion, as demonstrated by '(\\227|)(\\\\1\\\\1|t1|\\\\\\2537)+' in grep.",
-                    "diffID": "sha256:a499da141b419b2e97ed40192951a05fc37fadec129a55e1de03773e23fff97b",
-                    "installedVersion": "2.31-13+deb11u8",
-                    "packageName": "libc6",
-                    "purl": "pkg:deb/debian/libc6@2.31-13%2Bdeb11u8?arch=arm64&distro=debian-11.9",
-                    "references": [
-                      "http://www.securityfocus.com/bid/107160",
-                      "https://access.redhat.com/security/cve/CVE-2018-20796",
-                      "https://debbugs.gnu.org/cgi/bugreport.cgi?bug=34141",
-                      "https://lists.gnu.org/archive/html/bug-gnulib/2019-01/msg00108.html",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2018-20796",
-                      "https://security.netapp.com/advisory/ntap-20190315-0002/",
-                      "https://support.f5.com/csp/article/K26346590?utm_source=f5support&amp%3Butm_medium=RSS",
-                      "https://www.cve.org/CVERecord?id=CVE-2018-20796"
-                    ],
-                    "severity": "LOW",
-                    "suppressed": false,
-                    "title": "glibc: uncontrolled recursion in function check_dst_limits_calc_pos_1 in posix/regexec.c"
-                  },
-                  {
-                    "cve": "CVE-2019-1010022",
-                    "cvss": {
-                      "nvd": {
-                        "v3score": "9.8",
-                        "v3vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-119"
-                    ],
-                    "description": "GNU Libc current is affected by: Mitigation bypass. The impact is: Attacker may bypass stack guard protection. The component is: nptl. The attack vector is: Exploit stack buffer overflow vulnerability and use this bypass vulnerability to bypass stack guard. NOTE: Upstream comments indicate \"this is being treated as a non-security bug and no real threat.",
-                    "diffID": "sha256:a499da141b419b2e97ed40192951a05fc37fadec129a55e1de03773e23fff97b",
-                    "installedVersion": "2.31-13+deb11u8",
-                    "packageName": "libc6",
-                    "purl": "pkg:deb/debian/libc6@2.31-13%2Bdeb11u8?arch=arm64&distro=debian-11.9",
-                    "references": [
-                      "https://access.redhat.com/security/cve/CVE-2019-1010022",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2019-1010022",
-                      "https://security-tracker.debian.org/tracker/CVE-2019-1010022",
-                      "https://sourceware.org/bugzilla/show_bug.cgi?id=22850",
-                      "https://sourceware.org/bugzilla/show_bug.cgi?id=22850#c3",
-                      "https://ubuntu.com/security/CVE-2019-1010022",
-                      "https://www.cve.org/CVERecord?id=CVE-2019-1010022"
-                    ],
-                    "severity": "LOW",
-                    "suppressed": false,
-                    "title": "glibc: stack guard protection bypass"
-                  },
-                  {
-                    "cve": "CVE-2019-1010023",
-                    "cvss": {
-                      "nvd": {
-                        "v3score": "8.8",
-                        "v3vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H"
-                      },
-                      "redhat": {
-                        "v3score": "7.8",
-                        "v3vector": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H"
-                      }
-                    },
-                    "description": "GNU Libc current is affected by: Re-mapping current loaded library with malicious ELF file. The impact is: In worst case attacker may evaluate privileges. The component is: libld. The attack vector is: Attacker sends 2 ELF files to victim and asks to run ldd on it. ldd execute code. NOTE: Upstream comments indicate \"this is being treated as a non-security bug and no real threat.",
-                    "diffID": "sha256:a499da141b419b2e97ed40192951a05fc37fadec129a55e1de03773e23fff97b",
-                    "installedVersion": "2.31-13+deb11u8",
-                    "packageName": "libc6",
-                    "purl": "pkg:deb/debian/libc6@2.31-13%2Bdeb11u8?arch=arm64&distro=debian-11.9",
-                    "references": [
-                      "http://www.securityfocus.com/bid/109167",
-                      "https://access.redhat.com/security/cve/CVE-2019-1010023",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2019-1010023",
-                      "https://security-tracker.debian.org/tracker/CVE-2019-1010023",
-                      "https://sourceware.org/bugzilla/show_bug.cgi?id=22851",
-                      "https://support.f5.com/csp/article/K11932200?utm_source=f5support&amp%3Butm_medium=RSS",
-                      "https://ubuntu.com/security/CVE-2019-1010023",
-                      "https://www.cve.org/CVERecord?id=CVE-2019-1010023"
-                    ],
-                    "severity": "LOW",
-                    "suppressed": false,
-                    "title": "glibc: running ldd on malicious ELF leads to code execution because of wrong size computation"
-                  },
-                  {
-                    "cve": "CVE-2019-1010024",
-                    "cvss": {
-                      "nvd": {
-                        "v3score": "5.3",
-                        "v3vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N"
-                      },
-                      "redhat": {
-                        "v3score": "5.3",
-                        "v3vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-200"
-                    ],
-                    "description": "GNU Libc current is affected by: Mitigation bypass. The impact is: Attacker may bypass ASLR using cache of thread stack and heap. The component is: glibc. NOTE: Upstream comments indicate \"this is being treated as a non-security bug and no real threat.",
-                    "diffID": "sha256:a499da141b419b2e97ed40192951a05fc37fadec129a55e1de03773e23fff97b",
-                    "installedVersion": "2.31-13+deb11u8",
-                    "packageName": "libc6",
-                    "purl": "pkg:deb/debian/libc6@2.31-13%2Bdeb11u8?arch=arm64&distro=debian-11.9",
-                    "references": [
-                      "http://www.securityfocus.com/bid/109162",
-                      "https://access.redhat.com/security/cve/CVE-2019-1010024",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2019-1010024",
-                      "https://security-tracker.debian.org/tracker/CVE-2019-1010024",
-                      "https://sourceware.org/bugzilla/show_bug.cgi?id=22852",
-                      "https://support.f5.com/csp/article/K06046097",
-                      "https://support.f5.com/csp/article/K06046097?utm_source=f5support&amp%3Butm_medium=RSS",
-                      "https://ubuntu.com/security/CVE-2019-1010024",
-                      "https://www.cve.org/CVERecord?id=CVE-2019-1010024"
-                    ],
-                    "severity": "LOW",
-                    "suppressed": false,
-                    "title": "glibc: ASLR bypass using cache of thread stack and heap"
-                  },
-                  {
-                    "cve": "CVE-2019-1010025",
-                    "cvss": {
-                      "nvd": {
-                        "v3score": "5.3",
-                        "v3vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N"
-                      },
-                      "redhat": {
-                        "v3score": "2.9",
-                        "v3vector": "CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-330"
-                    ],
-                    "description": "GNU Libc current is affected by: Mitigation bypass. The impact is: Attacker may guess the heap addresses of pthread_created thread. The component is: glibc. NOTE: the vendor's position is \"ASLR bypass itself is not a vulnerability.",
-                    "diffID": "sha256:a499da141b419b2e97ed40192951a05fc37fadec129a55e1de03773e23fff97b",
-                    "installedVersion": "2.31-13+deb11u8",
-                    "packageName": "libc6",
-                    "purl": "pkg:deb/debian/libc6@2.31-13%2Bdeb11u8?arch=arm64&distro=debian-11.9",
-                    "references": [
-                      "https://access.redhat.com/security/cve/CVE-2019-1010025",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2019-1010025",
-                      "https://security-tracker.debian.org/tracker/CVE-2019-1010025",
-                      "https://sourceware.org/bugzilla/show_bug.cgi?id=22853",
-                      "https://support.f5.com/csp/article/K06046097",
-                      "https://support.f5.com/csp/article/K06046097?utm_source=f5support&amp%3Butm_medium=RSS",
-                      "https://ubuntu.com/security/CVE-2019-1010025",
-                      "https://www.cve.org/CVERecord?id=CVE-2019-1010025"
-                    ],
-                    "severity": "LOW",
-                    "suppressed": false,
-                    "title": "glibc: information disclosure of heap addresses of pthread_created thread"
-                  },
-                  {
-                    "cve": "CVE-2019-9192",
-                    "cvss": {
-                      "nvd": {
-                        "v3score": "7.5",
-                        "v3vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"
-                      },
-                      "redhat": {
-                        "v3score": "2.8",
-                        "v3vector": "CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:L"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-674"
-                    ],
-                    "description": "In the GNU C Library (aka glibc or libc6) through 2.29, check_dst_limits_calc_pos_1 in posix/regexec.c has Uncontrolled Recursion, as demonstrated by '(|)(\\\\1\\\\1)*' in grep, a different issue than CVE-2018-20796. NOTE: the software maintainer disputes that this is a vulnerability because the behavior occurs only with a crafted pattern",
-                    "diffID": "sha256:a499da141b419b2e97ed40192951a05fc37fadec129a55e1de03773e23fff97b",
-                    "installedVersion": "2.31-13+deb11u8",
-                    "packageName": "libc6",
-                    "purl": "pkg:deb/debian/libc6@2.31-13%2Bdeb11u8?arch=arm64&distro=debian-11.9",
-                    "references": [
-                      "https://access.redhat.com/security/cve/CVE-2019-9192",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2019-9192",
-                      "https://sourceware.org/bugzilla/show_bug.cgi?id=24269",
-                      "https://support.f5.com/csp/article/K26346590?utm_source=f5support&amp%3Butm_medium=RSS",
-                      "https://www.cve.org/CVERecord?id=CVE-2019-9192"
-                    ],
-                    "severity": "LOW",
-                    "suppressed": false,
-                    "title": "glibc: uncontrolled recursion in function check_dst_limits_calc_pos_1 in posix/regexec.c"
-                  },
-                  {
-                    "cve": "CVE-2022-1304",
-                    "cvss": {
-                      "nvd": {
-                        "v3score": "7.8",
-                        "v3vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H"
-                      },
-                      "redhat": {
-                        "v3score": "5.8",
-                        "v3vector": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:H"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-125",
-                      "CWE-787"
-                    ],
-                    "description": "An out-of-bounds read/write vulnerability was found in e2fsprogs 1.46.5. This issue leads to a segmentation fault and possibly arbitrary code execution via a specially crafted filesystem.",
-                    "diffID": "sha256:a499da141b419b2e97ed40192951a05fc37fadec129a55e1de03773e23fff97b",
-                    "fixedVersions": [
-                      "1.46.2-2+deb11u1"
-                    ],
-                    "installedVersion": "1.46.2-2",
-                    "packageName": "libcom-err2",
-                    "purl": "pkg:deb/debian/libcom-err2@1.46.2-2?arch=arm64&distro=debian-11.9",
-                    "references": [
-                      "https://access.redhat.com/errata/RHSA-2022:7720",
-                      "https://access.redhat.com/security/cve/CVE-2022-1304",
-                      "https://bugzilla.redhat.com/2069726",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2069726",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-1304",
-                      "https://errata.almalinux.org/8/ALSA-2022-7720.html",
-                      "https://errata.rockylinux.org/RLSA-2022:8361",
-                      "https://linux.oracle.com/cve/CVE-2022-1304.html",
-                      "https://linux.oracle.com/errata/ELSA-2024-12731.html",
-                      "https://lists.debian.org/debian-lts-announce/2024/10/msg00001.html",
-                      "https://marc.info/?l=linux-ext4&m=165056234501732&w=2",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2022-1304",
-                      "https://security.netapp.com/advisory/ntap-20241122-0010/",
-                      "https://ubuntu.com/security/notices/USN-5464-1",
-                      "https://www.cve.org/CVERecord?id=CVE-2022-1304"
-                    ],
-                    "severity": "HIGH",
-                    "suppressed": false,
-                    "title": "e2fsprogs: out-of-bounds read/write via crafted filesystem"
-                  },
-                  {
-                    "cve": "CVE-2023-23914",
-                    "cvss": {
-                      "nvd": {
-                        "v3score": "9.1",
-                        "v3vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N"
-                      },
-                      "redhat": {
-                        "v3score": "6.5",
-                        "v3vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-319"
-                    ],
-                    "description": "A cleartext transmission of sensitive information vulnerability exists in curl <v7.88.0 that could cause HSTS functionality fail when multiple URLs are requested serially. Using its HSTS support, curl can be instructed to use HTTPS instead of usingan insecure clear-text HTTP step even when HTTP is provided in the URL. ThisHSTS mechanism would however surprisingly be ignored by subsequent transferswhen done on the same command line because the state would not be properlycarried on.",
-                    "diffID": "sha256:2f458857553769636f3c149c0c8d41acc63c9e24282823b0ea26869a635e9f48",
-                    "installedVersion": "7.74.0-1.3+deb11u11",
-                    "packageName": "libcurl4",
-                    "purl": "pkg:deb/debian/libcurl4@7.74.0-1.3%2Bdeb11u11?arch=arm64&distro=debian-11.9",
-                    "references": [
-                      "https://access.redhat.com/security/cve/CVE-2023-23914",
-                      "https://curl.se/docs/CVE-2023-23914.html",
-                      "https://hackerone.com/reports/1813864",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2023-23914",
-                      "https://security.gentoo.org/glsa/202310-12",
-                      "https://security.netapp.com/advisory/ntap-20230309-0006/",
-                      "https://ubuntu.com/security/notices/USN-5891-1",
-                      "https://www.cve.org/CVERecord?id=CVE-2023-23914"
-                    ],
-                    "severity": "CRITICAL",
-                    "suppressed": false,
-                    "title": "curl: HSTS ignored on multiple requests"
-                  },
-                  {
-                    "cve": "CVE-2022-42916",
-                    "cvss": {
-                      "nvd": {
-                        "v3score": "7.5",
-                        "v3vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N"
-                      },
-                      "redhat": {
-                        "v3score": "7.5",
-                        "v3vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-319"
-                    ],
-                    "description": "In curl before 7.86.0, the HSTS check could be bypassed to trick it into staying with HTTP. Using its HSTS support, curl can be instructed to use HTTPS directly (instead of using an insecure cleartext HTTP step) even when HTTP is provided in the URL. This mechanism could be bypassed if the host name in the given URL uses IDN characters that get replaced with ASCII counterparts as part of the IDN conversion, e.g., using the character UTF-8 U+3002 (IDEOGRAPHIC FULL STOP) instead of the common ASCII full stop of U+002E (.). The earliest affected version is 7.77.0 2021-05-26.",
-                    "diffID": "sha256:2f458857553769636f3c149c0c8d41acc63c9e24282823b0ea26869a635e9f48",
-                    "installedVersion": "7.74.0-1.3+deb11u11",
-                    "packageName": "libcurl4",
-                    "purl": "pkg:deb/debian/libcurl4@7.74.0-1.3%2Bdeb11u11?arch=arm64&distro=debian-11.9",
-                    "references": [
-                      "http://seclists.org/fulldisclosure/2023/Jan/19",
-                      "http://seclists.org/fulldisclosure/2023/Jan/20",
-                      "http://www.openwall.com/lists/oss-security/2022/12/21/1",
-                      "https://access.redhat.com/security/cve/CVE-2022-42916",
-                      "https://curl.se/docs/CVE-2022-42916.html",
-                      "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/37YEVVC6NAF6H7UHH6YAUY5QEVY6LIH2/",
-                      "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/HVU3IMZCKR4VE6KJ4GCWRL2ILLC6OV76/",
-                      "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/Q27V5YYMXUVI6PRZQVECON32XPVWTKDK/",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2022-42916",
-                      "https://security.gentoo.org/glsa/202212-01",
-                      "https://security.netapp.com/advisory/ntap-20221209-0010/",
-                      "https://support.apple.com/kb/HT213604",
-                      "https://support.apple.com/kb/HT213605",
-                      "https://ubuntu.com/security/notices/USN-5702-1",
-                      "https://www.cve.org/CVERecord?id=CVE-2022-42916"
-                    ],
-                    "severity": "HIGH",
-                    "suppressed": false,
-                    "title": "curl: HSTS bypass via IDN"
-                  },
-                  {
-                    "cve": "CVE-2022-43551",
-                    "cvss": {
-                      "nvd": {
-                        "v3score": "7.5",
-                        "v3vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N"
-                      },
-                      "redhat": {
-                        "v3score": "7.5",
-                        "v3vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-319"
-                    ],
-                    "description": "A vulnerability exists in curl <7.87.0 HSTS check that could be bypassed to trick it to keep using HTTP. Using its HSTS support, curl can be instructed to use HTTPS instead of using an insecure clear-text HTTP step even when HTTP is provided in the URL. However, the HSTS mechanism could be bypassed if the host name in the given URL first uses IDN characters that get replaced to ASCII counterparts as part of the IDN conversion. Like using the character UTF-8 U+3002 (IDEOGRAPHIC FULL STOP) instead of the common ASCII full stop (U+002E) `.`. Then in a subsequent request, it does not detect the HSTS state and makes a clear text transfer. Because it would store the info IDN encoded but look for it IDN decoded.",
-                    "diffID": "sha256:2f458857553769636f3c149c0c8d41acc63c9e24282823b0ea26869a635e9f48",
-                    "installedVersion": "7.74.0-1.3+deb11u11",
-                    "packageName": "libcurl4",
-                    "purl": "pkg:deb/debian/libcurl4@7.74.0-1.3%2Bdeb11u11?arch=arm64&distro=debian-11.9",
-                    "references": [
-                      "https://access.redhat.com/security/cve/CVE-2022-43551",
-                      "https://curl.se/docs/CVE-2022-43551.html",
-                      "https://hackerone.com/reports/1755083",
-                      "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/TVWZW5CNSJ7UYAF2BGSYAWAEXDJYUBHA/",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2022-43551",
-                      "https://security.gentoo.org/glsa/202310-12",
-                      "https://security.netapp.com/advisory/ntap-20230427-0007/",
-                      "https://ubuntu.com/security/notices/USN-5788-1",
-                      "https://www.cve.org/CVERecord?id=CVE-2022-43551"
-                    ],
-                    "severity": "HIGH",
-                    "suppressed": false,
-                    "title": "curl: HSTS bypass via IDN"
-                  },
-                  {
-                    "cve": "CVE-2024-2398",
-                    "cvss": {
-                      "redhat": {
-                        "v3score": "7.5",
-                        "v3vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-772"
-                    ],
-                    "description": "When an application tells libcurl it wants to allow HTTP/2 server push, and the amount of received headers for the push surpasses the maximum allowed limit (1000), libcurl aborts the server push. When aborting, libcurl inadvertently does not free all the previously allocated headers and instead leaks the memory.  Further, this error condition fails silently and is therefore not easily detected by an application.",
-                    "diffID": "sha256:2f458857553769636f3c149c0c8d41acc63c9e24282823b0ea26869a635e9f48",
-                    "fixedVersions": [
-                      "7.74.0-1.3+deb11u12"
-                    ],
-                    "installedVersion": "7.74.0-1.3+deb11u11",
-                    "packageName": "libcurl4",
-                    "purl": "pkg:deb/debian/libcurl4@7.74.0-1.3%2Bdeb11u11?arch=arm64&distro=debian-11.9",
-                    "references": [
-                      "http://seclists.org/fulldisclosure/2024/Jul/18",
-                      "http://seclists.org/fulldisclosure/2024/Jul/19",
-                      "http://seclists.org/fulldisclosure/2024/Jul/20",
-                      "http://www.openwall.com/lists/oss-security/2024/03/27/3",
-                      "https://access.redhat.com/errata/RHSA-2024:5654",
-                      "https://access.redhat.com/security/cve/CVE-2024-2398",
-                      "https://bugzilla.redhat.com/2270498",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2270498",
-                      "https://curl.se/docs/CVE-2024-2398.html",
-                      "https://curl.se/docs/CVE-2024-2398.json",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-2398",
-                      "https://errata.almalinux.org/8/ALSA-2024-5654.html",
-                      "https://errata.rockylinux.org/RLSA-2024:5654",
-                      "https://hackerone.com/reports/2402845",
-                      "https://linux.oracle.com/cve/CVE-2024-2398.html",
-                      "https://linux.oracle.com/errata/ELSA-2024-5654.html",
-                      "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/2D44YLAUFJU6BZ4XFG2FYV7SBKXB5IZ6/",
-                      "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/GMD6UYKCCRCYETWQZUJ65ZRFULT6SHLI/",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2024-2398",
-                      "https://security.netapp.com/advisory/ntap-20240503-0009/",
-                      "https://support.apple.com/kb/HT214118",
-                      "https://support.apple.com/kb/HT214119",
-                      "https://support.apple.com/kb/HT214120",
-                      "https://ubuntu.com/security/notices/USN-6718-1",
-                      "https://ubuntu.com/security/notices/USN-6718-2",
-                      "https://ubuntu.com/security/notices/USN-6718-3",
-                      "https://www.cve.org/CVERecord?id=CVE-2024-2398"
-                    ],
-                    "severity": "HIGH",
-                    "suppressed": false,
-                    "title": "curl: HTTP/2 push headers memory-leak"
-                  },
-                  {
-                    "cve": "CVE-2023-23915",
-                    "cvss": {
-                      "nvd": {
-                        "v3score": "6.5",
-                        "v3vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N"
-                      },
-                      "redhat": {
-                        "v3score": "4.2",
-                        "v3vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-319"
-                    ],
-                    "description": "A cleartext transmission of sensitive information vulnerability exists in curl <v7.88.0 that could cause HSTS functionality to behave incorrectly when multiple URLs are requested in parallel. Using its HSTS support, curl can be instructed to use HTTPS instead of using an insecure clear-text HTTP step even when HTTP is provided in the URL. This HSTS mechanism would however surprisingly fail when multiple transfers are done in parallel as the HSTS cache file gets overwritten by the most recentlycompleted transfer. A later HTTP-only transfer to the earlier host name would then *not* get upgraded properly to HSTS.",
-                    "diffID": "sha256:2f458857553769636f3c149c0c8d41acc63c9e24282823b0ea26869a635e9f48",
-                    "installedVersion": "7.74.0-1.3+deb11u11",
-                    "packageName": "libcurl4",
-                    "purl": "pkg:deb/debian/libcurl4@7.74.0-1.3%2Bdeb11u11?arch=arm64&distro=debian-11.9",
-                    "references": [
-                      "https://access.redhat.com/security/cve/CVE-2023-23915",
-                      "https://curl.se/docs/CVE-2023-23915.html",
-                      "https://hackerone.com/reports/1826048",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2023-23915",
-                      "https://security.gentoo.org/glsa/202310-12",
-                      "https://security.netapp.com/advisory/ntap-20230309-0006/",
-                      "https://ubuntu.com/security/notices/USN-5891-1",
-                      "https://www.cve.org/CVERecord?id=CVE-2023-23915"
-                    ],
-                    "severity": "MEDIUM",
-                    "suppressed": false,
-                    "title": "curl: HSTS amnesia with --parallel"
-                  },
-                  {
-                    "cve": "CVE-2023-46219",
-                    "cvss": {
-                      "nvd": {
-                        "v3score": "5.3",
-                        "v3vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N"
-                      },
-                      "redhat": {
-                        "v3score": "5.3",
-                        "v3vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-311"
-                    ],
-                    "description": "When saving HSTS data to an excessively long file name, curl could end up\nremoving all contents, making subsequent requests using that file unaware of\nthe HSTS status they should otherwise use.",
-                    "diffID": "sha256:2f458857553769636f3c149c0c8d41acc63c9e24282823b0ea26869a635e9f48",
-                    "installedVersion": "7.74.0-1.3+deb11u11",
-                    "packageName": "libcurl4",
-                    "purl": "pkg:deb/debian/libcurl4@7.74.0-1.3%2Bdeb11u11?arch=arm64&distro=debian-11.9",
-                    "references": [
-                      "https://access.redhat.com/security/cve/CVE-2023-46219",
-                      "https://curl.se/docs/CVE-2023-46219.html",
-                      "https://hackerone.com/reports/2236133",
-                      "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/3ZX3VW67N4ACRAPMV2QS2LVYGD7H2MVE/",
-                      "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/UOGXU25FMMT2X6UUITQ7EZZYMJ42YWWD/",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2023-46219",
-                      "https://security.netapp.com/advisory/ntap-20240119-0007/",
-                      "https://ubuntu.com/security/notices/USN-6535-1",
-                      "https://www.cve.org/CVERecord?id=CVE-2023-46219",
-                      "https://www.debian.org/security/2023/dsa-5587"
-                    ],
-                    "severity": "MEDIUM",
-                    "suppressed": false,
-                    "title": "curl: excessively long file name may lead to unknown HSTS status"
-                  },
-                  {
-                    "cve": "CVE-2024-7264",
-                    "cvss": {
-                      "nvd": {
-                        "v3score": "6.5",
-                        "v3vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H"
-                      },
-                      "redhat": {
-                        "v3score": "5.3",
-                        "v3vector": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:H"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-125"
-                    ],
-                    "description": "libcurl's ASN1 parser code has the `GTime2str()` function, used for parsing an\nASN.1 Generalized Time field. If given an syntactically incorrect field, the\nparser might end up using -1 for the length of the *time fraction*, leading to\na `strlen()` getting performed on a pointer to a heap buffer area that is not\n(purposely) null terminated.\n\nThis flaw most likely leads to a crash, but can also lead to heap contents\ngetting returned to the application when\n[CURLINFO_CERTINFO](https://curl.se/libcurl/c/CURLINFO_CERTINFO.html) is used.",
-                    "diffID": "sha256:2f458857553769636f3c149c0c8d41acc63c9e24282823b0ea26869a635e9f48",
-                    "fixedVersions": [
-                      "7.74.0-1.3+deb11u13"
-                    ],
-                    "installedVersion": "7.74.0-1.3+deb11u11",
-                    "packageName": "libcurl4",
-                    "purl": "pkg:deb/debian/libcurl4@7.74.0-1.3%2Bdeb11u11?arch=arm64&distro=debian-11.9",
-                    "references": [
-                      "http://www.openwall.com/lists/oss-security/2024/07/31/1",
-                      "https://access.redhat.com/errata/RHSA-2025:1673",
-                      "https://access.redhat.com/security/cve/CVE-2024-7264",
-                      "https://bugzilla.redhat.com/2294581",
-                      "https://bugzilla.redhat.com/2294676",
-                      "https://bugzilla.redhat.com/2301888",
-                      "https://bugzilla.redhat.com/2318857",
-                      "https://bugzilla.redhat.com/2318858",
-                      "https://bugzilla.redhat.com/2318870",
-                      "https://bugzilla.redhat.com/2318873",
-                      "https://bugzilla.redhat.com/2318874",
-                      "https://bugzilla.redhat.com/2318876",
-                      "https://bugzilla.redhat.com/2318882",
-                      "https://bugzilla.redhat.com/2318883",
-                      "https://bugzilla.redhat.com/2318884",
-                      "https://bugzilla.redhat.com/2318885",
-                      "https://bugzilla.redhat.com/2318886",
-                      "https://bugzilla.redhat.com/2318897",
-                      "https://bugzilla.redhat.com/2318900",
-                      "https://bugzilla.redhat.com/2318905",
-                      "https://bugzilla.redhat.com/2318914",
-                      "https://bugzilla.redhat.com/2318922",
-                      "https://bugzilla.redhat.com/2318923",
-                      "https://bugzilla.redhat.com/2318925",
-                      "https://bugzilla.redhat.com/2318926",
-                      "https://bugzilla.redhat.com/2318927",
-                      "https://bugzilla.redhat.com/2331191",
-                      "https://bugzilla.redhat.com/2339218",
-                      "https://bugzilla.redhat.com/2339220",
-                      "https://bugzilla.redhat.com/2339221",
-                      "https://bugzilla.redhat.com/2339226",
-                      "https://bugzilla.redhat.com/2339231",
-                      "https://bugzilla.redhat.com/2339236",
-                      "https://bugzilla.redhat.com/2339238",
-                      "https://bugzilla.redhat.com/2339243",
-                      "https://bugzilla.redhat.com/2339247",
-                      "https://bugzilla.redhat.com/2339252",
-                      "https://bugzilla.redhat.com/2339259",
-                      "https://bugzilla.redhat.com/2339266",
-                      "https://bugzilla.redhat.com/2339270",
-                      "https://bugzilla.redhat.com/2339271",
-                      "https://bugzilla.redhat.com/2339275",
-                      "https://bugzilla.redhat.com/2339277",
-                      "https://bugzilla.redhat.com/2339281",
-                      "https://bugzilla.redhat.com/2339284",
-                      "https://bugzilla.redhat.com/2339291",
-                      "https://bugzilla.redhat.com/2339293",
-                      "https://bugzilla.redhat.com/2339295",
-                      "https://bugzilla.redhat.com/2339299",
-                      "https://bugzilla.redhat.com/2339300",
-                      "https://bugzilla.redhat.com/2339304",
-                      "https://bugzilla.redhat.com/2339305",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2294581",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2294676",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2301888",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2318857",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2318858",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2318870",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2318873",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2318874",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2318876",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2318882",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2318883",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2318884",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2318885",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2318886",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2318897",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2318900",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2318905",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2318914",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2318922",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2318923",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2318925",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2318926",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2318927",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2331191",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2339218",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2339220",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2339221",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2339226",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2339231",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2339236",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2339238",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2339243",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2339247",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2339252",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2339259",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2339266",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2339270",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2339271",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2339275",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2339277",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2339281",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2339284",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2339291",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2339293",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2339295",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2339299",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2339300",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2339304",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2339305",
-                      "https://curl.se/docs/CVE-2024-7264.html",
-                      "https://curl.se/docs/CVE-2024-7264.json",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-11053",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-21193",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-21194",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-21196",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-21197",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-21198",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-21199",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-21201",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-21203",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-21212",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-21213",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-21218",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-21219",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-21230",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-21231",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-21236",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-21237",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-21238",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-21239",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-21241",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-21247",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-37371",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-5535",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-7264",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21490",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21491",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21494",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21497",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21500",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21501",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21503",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21504",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21505",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21518",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21519",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21520",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21521",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21522",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21523",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21525",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21529",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21531",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21534",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21536",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21540",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21543",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21546",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21555",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21559",
-                      "https://errata.almalinux.org/8/ALSA-2025-1673.html",
-                      "https://errata.rockylinux.org/RLSA-2025:1671",
-                      "https://github.com/curl/curl/commit/27959ecce75cdb2809c0bdb3286e60e08fadb519",
-                      "https://hackerone.com/reports/2629968",
-                      "https://linux.oracle.com/cve/CVE-2024-7264.html",
-                      "https://linux.oracle.com/errata/ELSA-2025-1673.html",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2024-7264",
-                      "https://security.netapp.com/advisory/ntap-20240828-0008/",
-                      "https://security.netapp.com/advisory/ntap-20241025-0006/",
-                      "https://security.netapp.com/advisory/ntap-20241025-0010/",
-                      "https://ubuntu.com/security/notices/USN-6944-1",
-                      "https://ubuntu.com/security/notices/USN-6944-2",
-                      "https://www.cve.org/CVERecord?id=CVE-2024-7264",
-                      "https://www.oracle.com/security-alerts/cpuoct2024.html#AppendixMSQL"
-                    ],
-                    "severity": "MEDIUM",
-                    "suppressed": false,
-                    "title": "curl: libcurl: ASN.1 date parser overread"
-                  },
-                  {
-                    "cve": "CVE-2024-8096",
-                    "cvss": {
-                      "redhat": {
-                        "v3score": "6.5",
-                        "v3vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-295"
-                    ],
-                    "description": "When curl is told to use the Certificate Status Request TLS extension, often referred to as OCSP stapling, to verify that the server certificate is valid, it might fail to detect some OCSP problems and instead wrongly consider the response as fine.  If the returned status reports another error than 'revoked' (like for example 'unauthorized') it is not treated as a bad certficate.",
-                    "diffID": "sha256:2f458857553769636f3c149c0c8d41acc63c9e24282823b0ea26869a635e9f48",
-                    "fixedVersions": [
-                      "7.74.0-1.3+deb11u14"
-                    ],
-                    "installedVersion": "7.74.0-1.3+deb11u11",
-                    "packageName": "libcurl4",
-                    "purl": "pkg:deb/debian/libcurl4@7.74.0-1.3%2Bdeb11u11?arch=arm64&distro=debian-11.9",
-                    "references": [
-                      "http://www.openwall.com/lists/oss-security/2024/09/11/1",
-                      "https://access.redhat.com/security/cve/CVE-2024-8096",
-                      "https://curl.se/docs/CVE-2024-8096.html",
-                      "https://curl.se/docs/CVE-2024-8096.json",
-                      "https://hackerone.com/reports/2669852",
-                      "https://lists.debian.org/debian-lts-announce/2024/11/msg00008.html",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2024-8096",
-                      "https://security.netapp.com/advisory/ntap-20241011-0005/",
-                      "https://ubuntu.com/security/notices/USN-7012-1",
-                      "https://www.cve.org/CVERecord?id=CVE-2024-8096"
-                    ],
-                    "severity": "MEDIUM",
-                    "suppressed": false,
-                    "title": "curl: OCSP stapling bypass with GnuTLS"
-                  },
-                  {
-                    "cve": "CVE-2024-9681",
-                    "cvss": {
-                      "nvd": {
-                        "v3score": "6.5",
-                        "v3vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:L"
-                      },
-                      "redhat": {
-                        "v3score": "3.9",
-                        "v3vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:L"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-697"
-                    ],
-                    "description": "When curl is asked to use HSTS, the expiry time for a subdomain might\noverwrite a parent domain's cache entry, making it end sooner or later than\notherwise intended.\n\nThis affects curl using applications that enable HSTS and use URLs with the\ninsecure `HTTP://` scheme and perform transfers with hosts like\n`x.example.com` as well as `example.com` where the first host is a subdomain\nof the second host.\n\n(The HSTS cache either needs to have been populated manually or there needs to\nhave been previous HTTPS accesses done as the cache needs to have entries for\nthe domains involved to trigger this problem.)\n\nWhen `x.example.com` responds with `Strict-Transport-Security:` headers, this\nbug can make the subdomain's expiry timeout *bleed over* and get set for the\nparent domain `example.com` in curl's HSTS cache.\n\nThe result of a triggered bug is that HTTP accesses to `example.com` get\nconverted to HTTPS for a different period of time than what was asked for by\nthe origin server. If `example.com` for example stops supporting HTTPS at its\nexpiry time, curl might then fail to access `http://example.com` until the\n(wrongly set) timeout expires. This bug can also expire the parent's entry\n*earlier*, thus making curl inadvertently switch back to insecure HTTP earlier\nthan otherwise intended.",
-                    "diffID": "sha256:2f458857553769636f3c149c0c8d41acc63c9e24282823b0ea26869a635e9f48",
-                    "installedVersion": "7.74.0-1.3+deb11u11",
-                    "packageName": "libcurl4",
-                    "purl": "pkg:deb/debian/libcurl4@7.74.0-1.3%2Bdeb11u11?arch=arm64&distro=debian-11.9",
-                    "references": [
-                      "http://seclists.org/fulldisclosure/2025/Apr/10",
-                      "http://seclists.org/fulldisclosure/2025/Apr/11",
-                      "http://seclists.org/fulldisclosure/2025/Apr/12",
-                      "http://seclists.org/fulldisclosure/2025/Apr/13",
-                      "http://seclists.org/fulldisclosure/2025/Apr/4",
-                      "http://seclists.org/fulldisclosure/2025/Apr/5",
-                      "http://seclists.org/fulldisclosure/2025/Apr/8",
-                      "http://seclists.org/fulldisclosure/2025/Apr/9",
-                      "http://www.openwall.com/lists/oss-security/2024/11/06/2",
-                      "https://access.redhat.com/security/cve/CVE-2024-9681",
-                      "https://curl.se/docs/CVE-2024-9681.html",
-                      "https://curl.se/docs/CVE-2024-9681.json",
-                      "https://hackerone.com/reports/2764830",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2024-9681",
-                      "https://security.netapp.com/advisory/ntap-20241213-0006/",
-                      "https://ubuntu.com/security/notices/USN-7104-1",
-                      "https://www.cve.org/CVERecord?id=CVE-2024-9681"
-                    ],
-                    "severity": "MEDIUM",
-                    "suppressed": false,
-                    "title": "curl: HSTS subdomain overwrites parent cache entry"
-                  },
-                  {
-                    "cve": "CVE-2021-22922",
-                    "cvss": {
-                      "nvd": {
-                        "v3score": "6.5",
-                        "v3vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N"
-                      },
-                      "redhat": {
-                        "v3score": "6.5",
-                        "v3vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-840",
-                      "CWE-755"
-                    ],
-                    "description": "When curl is instructed to download content using the metalink feature, thecontents is verified against a hash provided in the metalink XML file.The metalink XML file points out to the client how to get the same contentfrom a set of different URLs, potentially hosted by different servers and theclient can then download the file from one or several of them. In a serial orparallel manner.If one of the servers hosting the contents has been breached and the contentsof the specific file on that server is replaced with a modified payload, curlshould detect this when the hash of the file mismatches after a completeddownload. It should remove the contents and instead try getting the contentsfrom another URL. This is not done, and instead such a hash mismatch is onlymentioned in text and the potentially malicious content is kept in the file ondisk.",
-                    "diffID": "sha256:2f458857553769636f3c149c0c8d41acc63c9e24282823b0ea26869a635e9f48",
-                    "installedVersion": "7.74.0-1.3+deb11u11",
-                    "packageName": "libcurl4",
-                    "purl": "pkg:deb/debian/libcurl4@7.74.0-1.3%2Bdeb11u11?arch=arm64&distro=debian-11.9",
-                    "references": [
-                      "https://access.redhat.com/security/cve/CVE-2021-22922",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=1981435",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=1981438",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=1981460",
-                      "https://cert-portal.siemens.com/productcert/pdf/ssa-389290.pdf",
-                      "https://curl.se/docs/CVE-2021-22922.html",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-22922",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-22923",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-22924",
-                      "https://errata.rockylinux.org/RLSA-2021:3582",
-                      "https://hackerone.com/reports/1213175",
-                      "https://linux.oracle.com/cve/CVE-2021-22922.html",
-                      "https://linux.oracle.com/errata/ELSA-2021-3582.html",
-                      "https://lists.apache.org/thread.html/r61db8e7dcb56dc000a5387a88f7a473bacec5ee01b9ff3f55308aacc%40%3Cdev.kafka.apache.org%3E",
-                      "https://lists.apache.org/thread.html/r61db8e7dcb56dc000a5387a88f7a473bacec5ee01b9ff3f55308aacc%40%3Cusers.kafka.apache.org%3E",
-                      "https://lists.apache.org/thread.html/rbf4ce74b0d1fa9810dec50ba3ace0caeea677af7c27a97111c06ccb7%40%3Cdev.kafka.apache.org%3E",
-                      "https://lists.apache.org/thread.html/rbf4ce74b0d1fa9810dec50ba3ace0caeea677af7c27a97111c06ccb7%40%3Cusers.kafka.apache.org%3E",
-                      "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FRUCW2UVNYUDZF72DQLFQR4PJEC6CF7V/",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2021-22922",
-                      "https://security.gentoo.org/glsa/202212-01",
-                      "https://security.netapp.com/advisory/ntap-20210902-0003/",
-                      "https://www.cve.org/CVERecord?id=CVE-2021-22922",
-                      "https://www.oracle.com/security-alerts/cpuoct2021.html"
-                    ],
-                    "severity": "LOW",
-                    "suppressed": false,
-                    "title": "curl: Content not matching hash in Metalink is not being discarded"
-                  },
-                  {
-                    "cve": "CVE-2021-22923",
-                    "cvss": {
-                      "nvd": {
-                        "v3score": "5.3",
-                        "v3vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N"
-                      },
-                      "redhat": {
-                        "v3score": "5.7",
-                        "v3vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-319",
-                      "CWE-522"
-                    ],
-                    "description": "When curl is instructed to get content using the metalink feature, and a user name and password are used to download the metalink XML file, those same credentials are then subsequently passed on to each of the servers from which curl will download or try to download the contents from. Often contrary to the user's expectations and intentions and without telling the user it happened.",
-                    "diffID": "sha256:2f458857553769636f3c149c0c8d41acc63c9e24282823b0ea26869a635e9f48",
-                    "installedVersion": "7.74.0-1.3+deb11u11",
-                    "packageName": "libcurl4",
-                    "purl": "pkg:deb/debian/libcurl4@7.74.0-1.3%2Bdeb11u11?arch=arm64&distro=debian-11.9",
-                    "references": [
-                      "https://access.redhat.com/security/cve/CVE-2021-22923",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=1981435",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=1981438",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=1981460",
-                      "https://cert-portal.siemens.com/productcert/pdf/ssa-389290.pdf",
-                      "https://curl.se/docs/CVE-2021-22923.html",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-22922",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-22923",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-22924",
-                      "https://errata.rockylinux.org/RLSA-2021:3582",
-                      "https://hackerone.com/reports/1213181",
-                      "https://linux.oracle.com/cve/CVE-2021-22923.html",
-                      "https://linux.oracle.com/errata/ELSA-2021-3582.html",
-                      "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FRUCW2UVNYUDZF72DQLFQR4PJEC6CF7V/",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2021-22923",
-                      "https://security.gentoo.org/glsa/202212-01",
-                      "https://security.netapp.com/advisory/ntap-20210902-0003/",
-                      "https://www.cve.org/CVERecord?id=CVE-2021-22923",
-                      "https://www.oracle.com/security-alerts/cpuoct2021.html"
-                    ],
-                    "severity": "LOW",
-                    "suppressed": false,
-                    "title": "curl: Metalink download sends credentials"
-                  },
-                  {
-                    "cve": "CVE-2023-28320",
-                    "cvss": {
-                      "nvd": {
-                        "v3score": "5.9",
-                        "v3vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H"
-                      },
-                      "redhat": {
-                        "v3score": "3.7",
-                        "v3vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-400",
-                      "CWE-362"
-                    ],
-                    "description": "A denial of service vulnerability exists in curl <v8.1.0 in the way libcurl provides several different backends for resolving host names, selected at build time. If it is built to use the synchronous resolver, it allows name resolves to time-out slow operations using `alarm()` and `siglongjmp()`. When doing this, libcurl used a global buffer that was not mutex protected and a multi-threaded application might therefore crash or otherwise misbehave.",
-                    "diffID": "sha256:2f458857553769636f3c149c0c8d41acc63c9e24282823b0ea26869a635e9f48",
-                    "installedVersion": "7.74.0-1.3+deb11u11",
-                    "packageName": "libcurl4",
-                    "purl": "pkg:deb/debian/libcurl4@7.74.0-1.3%2Bdeb11u11?arch=arm64&distro=debian-11.9",
-                    "references": [
-                      "http://seclists.org/fulldisclosure/2023/Jul/47",
-                      "http://seclists.org/fulldisclosure/2023/Jul/48",
-                      "http://seclists.org/fulldisclosure/2023/Jul/52",
-                      "https://access.redhat.com/security/cve/CVE-2023-28320",
-                      "https://curl.se/docs/CVE-2023-28320.html",
-                      "https://hackerone.com/reports/1929597",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2023-28320",
-                      "https://security.gentoo.org/glsa/202310-12",
-                      "https://security.netapp.com/advisory/ntap-20230609-0009/",
-                      "https://support.apple.com/kb/HT213843",
-                      "https://support.apple.com/kb/HT213844",
-                      "https://support.apple.com/kb/HT213845",
-                      "https://www.cve.org/CVERecord?id=CVE-2023-28320"
-                    ],
-                    "severity": "LOW",
-                    "suppressed": false,
-                    "title": "curl: siglongjmp race condition may lead to crash"
-                  },
-                  {
-                    "cve": "CVE-2024-2379",
-                    "cvss": {
-                      "redhat": {
-                        "v3score": "5.4",
-                        "v3vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-295"
-                    ],
-                    "description": "libcurl skips the certificate verification for a QUIC connection under certain conditions, when built to use wolfSSL. If told to use an unknown/bad cipher or curve, the error path accidentally skips the verification and returns OK, thus ignoring any certificate problems.",
-                    "diffID": "sha256:2f458857553769636f3c149c0c8d41acc63c9e24282823b0ea26869a635e9f48",
-                    "installedVersion": "7.74.0-1.3+deb11u11",
-                    "packageName": "libcurl4",
-                    "purl": "pkg:deb/debian/libcurl4@7.74.0-1.3%2Bdeb11u11?arch=arm64&distro=debian-11.9",
-                    "references": [
-                      "http://seclists.org/fulldisclosure/2024/Jul/18",
-                      "http://seclists.org/fulldisclosure/2024/Jul/19",
-                      "http://seclists.org/fulldisclosure/2024/Jul/20",
-                      "http://www.openwall.com/lists/oss-security/2024/03/27/2",
-                      "https://access.redhat.com/security/cve/CVE-2024-2379",
-                      "https://curl.se/docs/CVE-2024-2379.html",
-                      "https://curl.se/docs/CVE-2024-2379.json",
-                      "https://hackerone.com/reports/2410774",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2024-2379",
-                      "https://security.netapp.com/advisory/ntap-20240531-0001/",
-                      "https://support.apple.com/kb/HT214118",
-                      "https://support.apple.com/kb/HT214119",
-                      "https://support.apple.com/kb/HT214120",
-                      "https://www.cve.org/CVERecord?id=CVE-2024-2379"
-                    ],
-                    "severity": "LOW",
-                    "suppressed": false,
-                    "title": "curl: QUIC certificate check bypass with wolfSSL"
-                  },
-                  {
-                    "cve": "CVE-2025-0725",
-                    "cvss": {
-                      "redhat": {
-                        "v3score": "4",
-                        "v3vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-120"
-                    ],
-                    "description": "When libcurl is asked to perform automatic gzip decompression of\ncontent-encoded HTTP responses with the `CURLOPT_ACCEPT_ENCODING` option,\n**using zlib 1.2.0.3 or older**, an attacker-controlled integer overflow would\nmake libcurl perform a buffer overflow.",
-                    "diffID": "sha256:2f458857553769636f3c149c0c8d41acc63c9e24282823b0ea26869a635e9f48",
-                    "installedVersion": "7.74.0-1.3+deb11u11",
-                    "packageName": "libcurl4",
-                    "purl": "pkg:deb/debian/libcurl4@7.74.0-1.3%2Bdeb11u11?arch=arm64&distro=debian-11.9",
-                    "references": [
-                      "http://www.openwall.com/lists/oss-security/2025/02/05/3",
-                      "http://www.openwall.com/lists/oss-security/2025/02/06/2",
-                      "http://www.openwall.com/lists/oss-security/2025/02/06/4",
-                      "https://access.redhat.com/security/cve/CVE-2025-0725",
-                      "https://curl.se/docs/CVE-2025-0725.html",
-                      "https://curl.se/docs/CVE-2025-0725.json",
-                      "https://github.com/curl/curl/commit/76f83f0db23846e254d940ec7",
-                      "https://hackerone.com/reports/2956023",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2025-0725",
-                      "https://security.netapp.com/advisory/ntap-20250306-0009/",
-                      "https://www.cve.org/CVERecord?id=CVE-2025-0725"
-                    ],
-                    "severity": "LOW",
-                    "suppressed": false,
-                    "title": "libcurl: Buffer Overflow in libcurl via zlib Integer Overflow"
-                  },
-                  {
-                    "cve": "CVE-2025-10966",
-                    "cvss": {
-                      "redhat": {
-                        "v3score": "5.9",
-                        "v3vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N"
-                      }
-                    },
-                    "description": "curl's code for managing SSH connections when SFTP was done using the wolfSSH\npowered backend was flawed and missed host verification mechanisms.\n\nThis prevents curl from detecting MITM attackers and more.",
-                    "diffID": "sha256:2f458857553769636f3c149c0c8d41acc63c9e24282823b0ea26869a635e9f48",
-                    "installedVersion": "7.74.0-1.3+deb11u11",
-                    "packageName": "libcurl4",
-                    "purl": "pkg:deb/debian/libcurl4@7.74.0-1.3%2Bdeb11u11?arch=arm64&distro=debian-11.9",
-                    "references": [
-                      "http://www.openwall.com/lists/oss-security/2025/11/05/2",
-                      "https://access.redhat.com/security/cve/CVE-2025-10966",
-                      "https://curl.se/docs/CVE-2025-10966.html",
-                      "https://curl.se/docs/CVE-2025-10966.json",
-                      "https://github.com/curl/curl/commit/b011e3fcfb06d6c027859",
-                      "https://hackerone.com/reports/3355218",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2025-10966",
-                      "https://www.cve.org/CVERecord?id=CVE-2025-10966"
-                    ],
-                    "severity": "LOW",
-                    "suppressed": false,
-                    "title": "curl: Curl missing SFTP host verification with wolfSSH backend"
-                  },
-                  {
-                    "cve": "CVE-2025-14017",
-                    "cvss": {
-                      "redhat": {
-                        "v3score": "4.8",
-                        "v3vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N"
-                      }
-                    },
-                    "description": "When doing multi-threaded LDAPS transfers (LDAP over TLS) with libcurl,\nchanging TLS options in one thread would inadvertently change them globally\nand therefore possibly also affect other concurrently setup transfers.\n\nDisabling certificate verification for a specific transfer could\nunintentionally disable the feature for other threads as well.",
-                    "diffID": "sha256:2f458857553769636f3c149c0c8d41acc63c9e24282823b0ea26869a635e9f48",
-                    "installedVersion": "7.74.0-1.3+deb11u11",
-                    "packageName": "libcurl4",
-                    "purl": "pkg:deb/debian/libcurl4@7.74.0-1.3%2Bdeb11u11?arch=arm64&distro=debian-11.9",
-                    "references": [
-                      "http://www.openwall.com/lists/oss-security/2026/01/07/3",
-                      "https://access.redhat.com/security/cve/CVE-2025-14017",
-                      "https://curl.se/docs/CVE-2025-14017.html",
-                      "https://curl.se/docs/CVE-2025-14017.json",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2025-14017",
-                      "https://www.cve.org/CVERecord?id=CVE-2025-14017"
-                    ],
-                    "severity": "LOW",
-                    "suppressed": false,
-                    "title": "curl: curl: Security bypass due to global TLS option changes in multi-threaded LDAPS transfers"
-                  },
-                  {
-                    "cve": "CVE-2025-14524",
-                    "cwes": [
-                      "CWE-601"
-                    ],
-                    "description": "When an OAuth2 bearer token is used for an HTTP(S) transfer, and that transfer\nperforms a cross-protocol redirect to a second URL that uses an IMAP, LDAP,\nPOP3 or SMTP scheme, curl might wrongly pass on the bearer token to the new\ntarget host.",
-                    "diffID": "sha256:2f458857553769636f3c149c0c8d41acc63c9e24282823b0ea26869a635e9f48",
-                    "installedVersion": "7.74.0-1.3+deb11u11",
-                    "packageName": "libcurl4",
-                    "purl": "pkg:deb/debian/libcurl4@7.74.0-1.3%2Bdeb11u11?arch=arm64&distro=debian-11.9",
-                    "references": [
-                      "http://www.openwall.com/lists/oss-security/2026/01/07/4",
-                      "https://curl.se/docs/CVE-2025-14524.html",
-                      "https://curl.se/docs/CVE-2025-14524.json",
-                      "https://hackerone.com/reports/3459417",
-                      "https://www.cve.org/CVERecord?id=CVE-2025-14524"
-                    ],
-                    "severity": "LOW",
-                    "suppressed": false,
-                    "title": "When an OAuth2 bearer token is used for an HTTP(S) transfer, and that  ..."
-                  },
-                  {
-                    "cve": "CVE-2025-15079",
-                    "cwes": [
-                      "CWE-297"
-                    ],
-                    "description": "When doing SSH-based transfers using either SCP or SFTP, and setting the\nknown_hosts file, libcurl could still mistakenly accept connecting to hosts\n*not present* in the specified file if they were added as recognized in the\nlibssh *global* known_hosts file.",
-                    "diffID": "sha256:2f458857553769636f3c149c0c8d41acc63c9e24282823b0ea26869a635e9f48",
-                    "installedVersion": "7.74.0-1.3+deb11u11",
-                    "packageName": "libcurl4",
-                    "purl": "pkg:deb/debian/libcurl4@7.74.0-1.3%2Bdeb11u11?arch=arm64&distro=debian-11.9",
-                    "references": [
-                      "http://www.openwall.com/lists/oss-security/2026/01/07/6",
-                      "https://curl.se/docs/CVE-2025-15079.html",
-                      "https://curl.se/docs/CVE-2025-15079.json",
-                      "https://hackerone.com/reports/3477116",
-                      "https://www.cve.org/CVERecord?id=CVE-2025-15079"
-                    ],
-                    "severity": "LOW",
-                    "suppressed": false,
-                    "title": "When doing SSH-based transfers using either SCP or SFTP, and setting t ..."
-                  },
-                  {
-                    "cve": "CVE-2025-15224",
-                    "cwes": [
-                      "CWE-287"
-                    ],
-                    "description": "When doing SSH-based transfers using either SCP or SFTP, and asked to do\npublic key authentication, curl would wrongly still ask and authenticate using\na locally running SSH agent.",
-                    "diffID": "sha256:2f458857553769636f3c149c0c8d41acc63c9e24282823b0ea26869a635e9f48",
-                    "installedVersion": "7.74.0-1.3+deb11u11",
-                    "packageName": "libcurl4",
-                    "purl": "pkg:deb/debian/libcurl4@7.74.0-1.3%2Bdeb11u11?arch=arm64&distro=debian-11.9",
-                    "references": [
-                      "http://www.openwall.com/lists/oss-security/2026/01/07/7",
-                      "https://curl.se/docs/CVE-2025-15224.html",
-                      "https://curl.se/docs/CVE-2025-15224.json",
-                      "https://hackerone.com/reports/3480925",
-                      "https://www.cve.org/CVERecord?id=CVE-2025-15224"
-                    ],
-                    "severity": "LOW",
-                    "suppressed": false,
-                    "title": "When doing SSH-based transfers using either SCP or SFTP, and asked to  ..."
-                  },
-                  {
-                    "cve": "DLA-4213-1",
-                    "diffID": "sha256:2f458857553769636f3c149c0c8d41acc63c9e24282823b0ea26869a635e9f48",
-                    "fixedVersions": [
-                      "7.74.0-1.3+deb11u15"
-                    ],
-                    "installedVersion": "7.74.0-1.3+deb11u11",
-                    "packageName": "libcurl4",
-                    "purl": "pkg:deb/debian/libcurl4@7.74.0-1.3%2Bdeb11u11?arch=arm64&distro=debian-11.9",
-                    "severity": "UNKNOWN",
-                    "suppressed": false,
-                    "title": "curl - regression update"
-                  },
-                  {
-                    "cve": "DLA-4432-1",
-                    "diffID": "sha256:2f458857553769636f3c149c0c8d41acc63c9e24282823b0ea26869a635e9f48",
-                    "fixedVersions": [
-                      "7.74.0-1.3+deb11u16"
-                    ],
-                    "installedVersion": "7.74.0-1.3+deb11u11",
-                    "packageName": "libcurl4",
-                    "purl": "pkg:deb/debian/libcurl4@7.74.0-1.3%2Bdeb11u11?arch=arm64&distro=debian-11.9",
-                    "severity": "UNKNOWN",
-                    "suppressed": false,
-                    "title": "curl - security update"
-                  },
-                  {
-                    "cve": "CVE-2019-8457",
-                    "cvss": {
-                      "nvd": {
-                        "v3score": "9.8",
-                        "v3vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"
-                      },
-                      "redhat": {
-                        "v3score": "7.5",
-                        "v3vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-125"
-                    ],
-                    "description": "SQLite3 from 3.6.0 to and including 3.27.2 is vulnerable to heap out-of-bound read in the rtreenode() function when handling invalid rtree tables.",
-                    "diffID": "sha256:a499da141b419b2e97ed40192951a05fc37fadec129a55e1de03773e23fff97b",
-                    "installedVersion": "5.3.28+dfsg1-0.8",
-                    "packageName": "libdb5.3",
-                    "purl": "pkg:deb/debian/libdb5.3@5.3.28%2Bdfsg1-0.8?arch=arm64&distro=debian-11.9",
-                    "references": [
-                      "http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00074.html",
-                      "https://access.redhat.com/security/cve/CVE-2019-8457",
-                      "https://kc.mcafee.com/corporate/index?page=content&id=SB10365",
-                      "https://linux.oracle.com/cve/CVE-2019-8457.html",
-                      "https://linux.oracle.com/errata/ELSA-2020-1810.html",
-                      "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/OPKYSWCOM3CL66RI76TYVIG6TJ263RXH/",
-                      "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/SJPFGA45DI4F5MCF2OAACGH3HQOF4G3M/",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2019-8457",
-                      "https://security.netapp.com/advisory/ntap-20190606-0002/",
-                      "https://ubuntu.com/security/notices/USN-4004-1",
-                      "https://ubuntu.com/security/notices/USN-4004-2",
-                      "https://ubuntu.com/security/notices/USN-4019-1",
-                      "https://ubuntu.com/security/notices/USN-4019-2",
-                      "https://usn.ubuntu.com/4004-1/",
-                      "https://usn.ubuntu.com/4004-2/",
-                      "https://usn.ubuntu.com/4019-1/",
-                      "https://usn.ubuntu.com/4019-2/",
-                      "https://www.cve.org/CVERecord?id=CVE-2019-8457",
-                      "https://www.oracle.com/security-alerts/cpuapr2020.html",
-                      "https://www.oracle.com/security-alerts/cpujan2020.html",
-                      "https://www.oracle.com/security-alerts/cpujul2020.html",
-                      "https://www.oracle.com/technetwork/security-advisory/cpuoct2019-5072832.html",
-                      "https://www.sqlite.org/releaselog/3_28_0.html",
-                      "https://www.sqlite.org/src/info/90acdbfce9c08858"
-                    ],
-                    "severity": "CRITICAL",
-                    "suppressed": false,
-                    "title": "sqlite: heap out-of-bound read in function rtreenode()"
-                  },
-                  {
-                    "cve": "CVE-2024-45491",
-                    "cvss": {
-                      "nvd": {
-                        "v3score": "9.8",
-                        "v3vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"
-                      },
-                      "redhat": {
-                        "v3score": "7.5",
-                        "v3vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-190"
-                    ],
-                    "description": "An issue was discovered in libexpat before 2.6.3. dtdCopy in xmlparse.c can have an integer overflow for nDefaultAtts on 32-bit platforms (where UINT_MAX equals SIZE_MAX).",
-                    "diffID": "sha256:2f458857553769636f3c149c0c8d41acc63c9e24282823b0ea26869a635e9f48",
-                    "fixedVersions": [
-                      "2.2.10-2+deb11u6"
-                    ],
-                    "installedVersion": "2.2.10-2+deb11u5",
-                    "packageName": "libexpat1",
-                    "purl": "pkg:deb/debian/libexpat1@2.2.10-2%2Bdeb11u5?arch=arm64&distro=debian-11.9",
-                    "references": [
-                      "https://access.redhat.com/errata/RHSA-2024:8859",
-                      "https://access.redhat.com/security/cve/CVE-2024-45491",
-                      "https://bugzilla.redhat.com/2308616",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2308615",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2308616",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2308617",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-45490",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-45491",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-45492",
-                      "https://errata.almalinux.org/8/ALSA-2024-8859.html",
-                      "https://errata.rockylinux.org/RLSA-2024:6754",
-                      "https://github.com/libexpat/libexpat/blob/R_2_6_3/expat/Changes",
-                      "https://github.com/libexpat/libexpat/issues/888",
-                      "https://github.com/libexpat/libexpat/pull/891",
-                      "https://linux.oracle.com/cve/CVE-2024-45491.html",
-                      "https://linux.oracle.com/errata/ELSA-2024-8859.html",
-                      "https://lists.debian.org/debian-lts-announce/2024/09/msg00036.html",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2024-45491",
-                      "https://security.netapp.com/advisory/ntap-20241018-0003/",
-                      "https://ubuntu.com/security/notices/USN-7000-1",
-                      "https://ubuntu.com/security/notices/USN-7000-2",
-                      "https://ubuntu.com/security/notices/USN-7001-1",
-                      "https://ubuntu.com/security/notices/USN-7001-2",
-                      "https://www.cve.org/CVERecord?id=CVE-2024-45491"
-                    ],
-                    "severity": "CRITICAL",
-                    "suppressed": false,
-                    "title": "libexpat: Integer Overflow or Wraparound"
-                  },
-                  {
-                    "cve": "CVE-2024-45492",
-                    "cvss": {
-                      "nvd": {
-                        "v3score": "9.8",
-                        "v3vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"
-                      },
-                      "redhat": {
-                        "v3score": "6.2",
-                        "v3vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-190"
-                    ],
-                    "description": "An issue was discovered in libexpat before 2.6.3. nextScaffoldPart in xmlparse.c can have an integer overflow for m_groupSize on 32-bit platforms (where UINT_MAX equals SIZE_MAX).",
-                    "diffID": "sha256:2f458857553769636f3c149c0c8d41acc63c9e24282823b0ea26869a635e9f48",
-                    "fixedVersions": [
-                      "2.2.10-2+deb11u6"
-                    ],
-                    "installedVersion": "2.2.10-2+deb11u5",
-                    "packageName": "libexpat1",
-                    "purl": "pkg:deb/debian/libexpat1@2.2.10-2%2Bdeb11u5?arch=arm64&distro=debian-11.9",
-                    "references": [
-                      "https://access.redhat.com/errata/RHSA-2024:6989",
-                      "https://access.redhat.com/security/cve/CVE-2024-45492",
-                      "https://bugzilla.redhat.com/2308615",
-                      "https://bugzilla.redhat.com/2308616",
-                      "https://bugzilla.redhat.com/2308617",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2308615",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2308616",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2308617",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-45490",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-45491",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-45492",
-                      "https://errata.almalinux.org/8/ALSA-2024-6989.html",
-                      "https://errata.rockylinux.org/RLSA-2024:6754",
-                      "https://github.com/libexpat/libexpat/blob/R_2_6_3/expat/Changes",
-                      "https://github.com/libexpat/libexpat/issues/889",
-                      "https://github.com/libexpat/libexpat/pull/892",
-                      "https://linux.oracle.com/cve/CVE-2024-45492.html",
-                      "https://linux.oracle.com/errata/ELSA-2024-6989.html",
-                      "https://lists.debian.org/debian-lts-announce/2024/09/msg00036.html",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2024-45492",
-                      "https://security.netapp.com/advisory/ntap-20241018-0005/",
-                      "https://ubuntu.com/security/notices/USN-7000-1",
-                      "https://ubuntu.com/security/notices/USN-7000-2",
-                      "https://www.cve.org/CVERecord?id=CVE-2024-45492"
-                    ],
-                    "severity": "CRITICAL",
-                    "suppressed": false,
-                    "title": "libexpat: integer overflow"
-                  },
-                  {
-                    "cve": "CVE-2023-52425",
-                    "cvss": {
-                      "nvd": {
-                        "v3score": "7.5",
-                        "v3vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"
-                      },
-                      "redhat": {
-                        "v3score": "7.5",
-                        "v3vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-400"
-                    ],
-                    "description": "libexpat through 2.5.0 allows a denial of service (resource consumption) because many full reparsings are required in the case of a large token for which multiple buffer fills are needed.",
-                    "diffID": "sha256:2f458857553769636f3c149c0c8d41acc63c9e24282823b0ea26869a635e9f48",
-                    "fixedVersions": [
-                      "2.2.10-2+deb11u6"
-                    ],
-                    "installedVersion": "2.2.10-2+deb11u5",
-                    "packageName": "libexpat1",
-                    "purl": "pkg:deb/debian/libexpat1@2.2.10-2%2Bdeb11u5?arch=arm64&distro=debian-11.9",
-                    "references": [
-                      "http://www.openwall.com/lists/oss-security/2024/03/20/5",
-                      "https://access.redhat.com/errata/RHSA-2024:4259",
-                      "https://access.redhat.com/security/cve/CVE-2023-52425",
-                      "https://bugzilla.redhat.com/2262877",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2262877",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52425",
-                      "https://errata.almalinux.org/8/ALSA-2024-4259.html",
-                      "https://errata.rockylinux.org/RLSA-2024:1615",
-                      "https://github.com/libexpat/libexpat/pull/789",
-                      "https://linux.oracle.com/cve/CVE-2023-52425.html",
-                      "https://linux.oracle.com/errata/ELSA-2024-4259.html",
-                      "https://lists.debian.org/debian-lts-announce/2024/04/msg00006.html",
-                      "https://lists.debian.org/debian-lts-announce/2024/09/msg00036.html",
-                      "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PNRIHC7DVVRAIWFRGV23Y6UZXFBXSQDB/",
-                      "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WNUBSGZFEZOBHJFTAD42SAN4ATW2VEMV/",
-                      "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/PNRIHC7DVVRAIWFRGV23Y6UZXFBXSQDB/",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2023-52425",
-                      "https://security.netapp.com/advisory/ntap-20240614-0003/",
-                      "https://ubuntu.com/security/notices/USN-6694-1",
-                      "https://www.cve.org/CVERecord?id=CVE-2023-52425"
-                    ],
-                    "severity": "HIGH",
-                    "suppressed": false,
-                    "title": "expat: parsing large tokens can trigger a denial of service"
-                  },
-                  {
-                    "cve": "CVE-2024-45490",
-                    "cvss": {
-                      "nvd": {
-                        "v3score": "7.5",
-                        "v3vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"
-                      },
-                      "redhat": {
-                        "v3score": "7.5",
-                        "v3vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-611",
-                      "CWE-190"
-                    ],
-                    "description": "An issue was discovered in libexpat before 2.6.3. xmlparse.c does not reject a negative length for XML_ParseBuffer.",
-                    "diffID": "sha256:2f458857553769636f3c149c0c8d41acc63c9e24282823b0ea26869a635e9f48",
-                    "fixedVersions": [
-                      "2.2.10-2+deb11u6"
-                    ],
-                    "installedVersion": "2.2.10-2+deb11u5",
-                    "packageName": "libexpat1",
-                    "purl": "pkg:deb/debian/libexpat1@2.2.10-2%2Bdeb11u5?arch=arm64&distro=debian-11.9",
-                    "references": [
-                      "http://seclists.org/fulldisclosure/2024/Dec/10",
-                      "http://seclists.org/fulldisclosure/2024/Dec/12",
-                      "http://seclists.org/fulldisclosure/2024/Dec/6",
-                      "http://seclists.org/fulldisclosure/2024/Dec/7",
-                      "http://seclists.org/fulldisclosure/2024/Dec/8",
-                      "https://access.redhat.com/errata/RHSA-2024:6989",
-                      "https://access.redhat.com/security/cve/CVE-2024-45490",
-                      "https://bugzilla.redhat.com/2308615",
-                      "https://bugzilla.redhat.com/2308616",
-                      "https://bugzilla.redhat.com/2308617",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2308615",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2308616",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2308617",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-45490",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-45491",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-45492",
-                      "https://errata.almalinux.org/8/ALSA-2024-6989.html",
-                      "https://errata.rockylinux.org/RLSA-2024:6754",
-                      "https://github.com/libexpat/libexpat/blob/R_2_6_3/expat/Changes",
-                      "https://github.com/libexpat/libexpat/issues/887",
-                      "https://github.com/libexpat/libexpat/pull/890",
-                      "https://linux.oracle.com/cve/CVE-2024-45490.html",
-                      "https://linux.oracle.com/errata/ELSA-2024-6989.html",
-                      "https://lists.debian.org/debian-lts-announce/2024/09/msg00036.html",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2024-45490",
-                      "https://security.netapp.com/advisory/ntap-20241018-0004/",
-                      "https://ubuntu.com/security/notices/USN-7000-1",
-                      "https://ubuntu.com/security/notices/USN-7000-2",
-                      "https://ubuntu.com/security/notices/USN-7001-1",
-                      "https://ubuntu.com/security/notices/USN-7001-2",
-                      "https://www.cve.org/CVERecord?id=CVE-2024-45490"
-                    ],
-                    "severity": "HIGH",
-                    "suppressed": false,
-                    "title": "libexpat: Negative Length Parsing Vulnerability in libexpat"
-                  },
-                  {
-                    "cve": "CVE-2024-8176",
-                    "cvss": {
-                      "redhat": {
-                        "v3score": "7.5",
-                        "v3vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-674"
-                    ],
-                    "description": "A stack overflow vulnerability exists in the libexpat library due to the way it handles recursive entity expansion in XML documents. When parsing an XML document with deeply nested entity references, libexpat can be forced to recurse indefinitely, exhausting the stack space and causing a crash. This issue could lead to denial of service (DoS) or, in some cases, exploitable memory corruption, depending on the environment and library usage.",
-                    "diffID": "sha256:2f458857553769636f3c149c0c8d41acc63c9e24282823b0ea26869a635e9f48",
-                    "installedVersion": "2.2.10-2+deb11u5",
-                    "packageName": "libexpat1",
-                    "purl": "pkg:deb/debian/libexpat1@2.2.10-2%2Bdeb11u5?arch=arm64&distro=debian-11.9",
-                    "references": [
-                      "http://seclists.org/fulldisclosure/2025/May/10",
-                      "http://seclists.org/fulldisclosure/2025/May/11",
-                      "http://seclists.org/fulldisclosure/2025/May/12",
-                      "http://seclists.org/fulldisclosure/2025/May/6",
-                      "http://seclists.org/fulldisclosure/2025/May/7",
-                      "http://seclists.org/fulldisclosure/2025/May/8",
-                      "http://www.openwall.com/lists/oss-security/2025/03/15/1",
-                      "http://www.openwall.com/lists/oss-security/2025/09/24/11",
-                      "https://access.redhat.com/errata/RHSA-2025:13681",
-                      "https://access.redhat.com/errata/RHSA-2025:22033",
-                      "https://access.redhat.com/errata/RHSA-2025:22034",
-                      "https://access.redhat.com/errata/RHSA-2025:22035",
-                      "https://access.redhat.com/errata/RHSA-2025:22607",
-                      "https://access.redhat.com/errata/RHSA-2025:22785",
-                      "https://access.redhat.com/errata/RHSA-2025:22842",
-                      "https://access.redhat.com/errata/RHSA-2025:22871",
-                      "https://access.redhat.com/errata/RHSA-2025:3531",
-                      "https://access.redhat.com/errata/RHSA-2025:3734",
-                      "https://access.redhat.com/errata/RHSA-2025:3913",
-                      "https://access.redhat.com/errata/RHSA-2025:4048",
-                      "https://access.redhat.com/errata/RHSA-2025:4446",
-                      "https://access.redhat.com/errata/RHSA-2025:4447",
-                      "https://access.redhat.com/errata/RHSA-2025:4448",
-                      "https://access.redhat.com/errata/RHSA-2025:4449",
-                      "https://access.redhat.com/errata/RHSA-2025:7444",
-                      "https://access.redhat.com/errata/RHSA-2025:7512",
-                      "https://access.redhat.com/errata/RHSA-2025:8385",
-                      "https://access.redhat.com/security/cve/CVE-2024-8176",
-                      "https://blog.hartwork.org/posts/expat-2-7-0-released/",
-                      "https://bugzilla.redhat.com/2310137",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2310137",
-                      "https://bugzilla.suse.com/show_bug.cgi?id=1239618",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-8176",
-                      "https://errata.almalinux.org/8/ALSA-2025-3913.html",
-                      "https://errata.rockylinux.org/RLSA-2025:7444",
-                      "https://github.com/libexpat/libexpat/blob/R_2_7_0/expat/Changes#L40-L52",
-                      "https://github.com/libexpat/libexpat/issues/893",
-                      "https://gitlab.alpinelinux.org/alpine/aports/-/commit/d068c3ff36fc6f4789988a09c69b434db757db53",
-                      "https://linux.oracle.com/cve/CVE-2024-8176.html",
-                      "https://linux.oracle.com/errata/ELSA-2025-7512.html",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2024-8176",
-                      "https://security-tracker.debian.org/tracker/CVE-2024-8176",
-                      "https://security.netapp.com/advisory/ntap-20250328-0009/",
-                      "https://ubuntu.com/security/CVE-2024-8176",
-                      "https://ubuntu.com/security/notices/USN-7424-1",
-                      "https://www.cve.org/CVERecord?id=CVE-2024-8176",
-                      "https://www.kb.cert.org/vuls/id/760160"
-                    ],
-                    "severity": "HIGH",
-                    "suppressed": false,
-                    "title": "libexpat: expat: Improper Restriction of XML Entity Expansion Depth in libexpat"
-                  },
-                  {
-                    "cve": "CVE-2024-50602",
-                    "cvss": {
-                      "bitnami": {
-                        "v3score": "5.9",
-                        "v3vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H"
-                      },
-                      "redhat": {
-                        "v3score": "5.9",
-                        "v3vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-754"
-                    ],
-                    "description": "An issue was discovered in libexpat before 2.6.4. There is a crash within the XML_ResumeParser function because XML_StopParser can stop/suspend an unstarted parser.",
-                    "diffID": "sha256:2f458857553769636f3c149c0c8d41acc63c9e24282823b0ea26869a635e9f48",
-                    "fixedVersions": [
-                      "2.2.10-2+deb11u7"
-                    ],
-                    "installedVersion": "2.2.10-2+deb11u5",
-                    "packageName": "libexpat1",
-                    "purl": "pkg:deb/debian/libexpat1@2.2.10-2%2Bdeb11u5?arch=arm64&distro=debian-11.9",
-                    "references": [
-                      "https://access.redhat.com/errata/RHSA-2024:9502",
-                      "https://access.redhat.com/security/cve/CVE-2024-50602",
-                      "https://bugzilla.redhat.com/2321987",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2321987",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-50602",
-                      "https://errata.almalinux.org/8/ALSA-2024-9502.html",
-                      "https://errata.rockylinux.org/RLSA-2024:9502",
-                      "https://github.com/libexpat/libexpat/pull/915",
-                      "https://linux.oracle.com/cve/CVE-2024-50602.html",
-                      "https://linux.oracle.com/errata/ELSA-2024-9541.html",
-                      "https://lists.debian.org/debian-lts-announce/2025/04/msg00040.html",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2024-50602",
-                      "https://security.netapp.com/advisory/ntap-20250404-0008/",
-                      "https://ubuntu.com/security/notices/USN-7145-1",
-                      "https://www.cve.org/CVERecord?id=CVE-2024-50602"
-                    ],
-                    "severity": "MEDIUM",
-                    "suppressed": false,
-                    "title": "libexpat: expat: DoS via XML_ResumeParser"
-                  },
-                  {
-                    "cve": "CVE-2025-59375",
-                    "cvss": {
-                      "redhat": {
-                        "v3score": "5.3",
-                        "v3vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-770"
-                    ],
-                    "description": "libexpat in Expat before 2.7.2 allows attackers to trigger large dynamic memory allocations via a small document that is submitted for parsing.",
-                    "diffID": "sha256:2f458857553769636f3c149c0c8d41acc63c9e24282823b0ea26869a635e9f48",
-                    "installedVersion": "2.2.10-2+deb11u5",
-                    "packageName": "libexpat1",
-                    "purl": "pkg:deb/debian/libexpat1@2.2.10-2%2Bdeb11u5?arch=arm64&distro=debian-11.9",
-                    "references": [
-                      "http://www.openwall.com/lists/oss-security/2025/09/16/2",
-                      "https://access.redhat.com/errata/RHSA-2025:21974",
-                      "https://access.redhat.com/security/cve/CVE-2025-59375",
-                      "https://bugzilla.redhat.com/2395108",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2395108",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-59375",
-                      "https://errata.almalinux.org/8/ALSA-2025-21974.html",
-                      "https://errata.rockylinux.org/RLSA-2025:22175",
-                      "https://github.com/libexpat/libexpat/blob/676a4c531ec768732fac215da9730b5f50fbd2bf/expat/Changes#L45-L74",
-                      "https://github.com/libexpat/libexpat/blob/R_2_7_2/expat/Changes",
-                      "https://github.com/libexpat/libexpat/issues/1018",
-                      "https://github.com/libexpat/libexpat/pull/1034",
-                      "https://issues.oss-fuzz.com/issues/439133977",
-                      "https://linux.oracle.com/cve/CVE-2025-59375.html",
-                      "https://linux.oracle.com/errata/ELSA-2025-22175.html",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2025-59375",
-                      "https://www.cve.org/CVERecord?id=CVE-2025-59375"
-                    ],
-                    "severity": "MEDIUM",
-                    "suppressed": false,
-                    "title": "expat: libexpat in Expat allows attackers to trigger large dynamic memory allocations via a small document that is submitted for parsing"
-                  },
-                  {
-                    "cve": "CVE-2025-66382",
-                    "cvss": {
-                      "nvd": {
-                        "v3score": "5.5",
-                        "v3vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H"
-                      },
-                      "redhat": {
-                        "v3score": "2.9",
-                        "v3vector": "CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-407"
-                    ],
-                    "description": "In libexpat through 2.7.3, a crafted file with an approximate size of 2 MiB can lead to dozens of seconds of processing time.",
-                    "diffID": "sha256:2f458857553769636f3c149c0c8d41acc63c9e24282823b0ea26869a635e9f48",
-                    "installedVersion": "2.2.10-2+deb11u5",
-                    "packageName": "libexpat1",
-                    "purl": "pkg:deb/debian/libexpat1@2.2.10-2%2Bdeb11u5?arch=arm64&distro=debian-11.9",
-                    "references": [
-                      "http://www.openwall.com/lists/oss-security/2025/12/02/1",
-                      "https://access.redhat.com/security/cve/CVE-2025-66382",
-                      "https://github.com/libexpat/libexpat/issues/1076",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2025-66382",
-                      "https://www.cve.org/CVERecord?id=CVE-2025-66382"
-                    ],
-                    "severity": "MEDIUM",
-                    "suppressed": false,
-                    "title": "libexpat: libexpat: Denial of service via crafted file processing"
-                  },
-                  {
-                    "cve": "CVE-2026-25210",
-                    "cvss": {
-                      "redhat": {
-                        "v3score": "6.9",
-                        "v3vector": "CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-190"
-                    ],
-                    "description": "In libexpat before 2.7.4, the doContent function does not properly determine the buffer size bufSize because there is no integer overflow check for tag buffer reallocation.",
-                    "diffID": "sha256:2f458857553769636f3c149c0c8d41acc63c9e24282823b0ea26869a635e9f48",
-                    "installedVersion": "2.2.10-2+deb11u5",
-                    "packageName": "libexpat1",
-                    "purl": "pkg:deb/debian/libexpat1@2.2.10-2%2Bdeb11u5?arch=arm64&distro=debian-11.9",
-                    "references": [
-                      "https://access.redhat.com/security/cve/CVE-2026-25210",
-                      "https://github.com/libexpat/libexpat/pull/1075",
-                      "https://github.com/libexpat/libexpat/pull/1075/commits/9c2d990389e6abe2e44527eeaa8b39f16fe859c7",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2026-25210",
-                      "https://www.cve.org/CVERecord?id=CVE-2026-25210"
-                    ],
-                    "severity": "MEDIUM",
-                    "suppressed": false,
-                    "title": "libexpat: libexpat: Information disclosure and data integrity issues due to integer overflow in buffer reallocation"
-                  },
-                  {
-                    "cve": "CVE-2013-0340",
-                    "cvss": {
-                      "nvd": {
-                        "v3score": "0",
-                        "v3vector": ""
-                      },
-                      "redhat": {
-                        "v3score": "0",
-                        "v3vector": ""
-                      }
-                    },
-                    "cwes": [
-                      "CWE-611"
-                    ],
-                    "description": "expat before version 2.4.0 does not properly handle entities expansion unless an application developer uses the XML_SetEntityDeclHandler function, which allows remote attackers to cause a denial of service (resource consumption), send HTTP requests to intranet servers, or read arbitrary files via a crafted XML document, aka an XML External Entity (XXE) issue.  NOTE: it could be argued that because expat already provides the ability to disable external entity expansion, the responsibility for resolving this issue lies with application developers; according to this argument, this entry should be REJECTed, and each affected application would need its own CVE.",
-                    "diffID": "sha256:2f458857553769636f3c149c0c8d41acc63c9e24282823b0ea26869a635e9f48",
-                    "installedVersion": "2.2.10-2+deb11u5",
-                    "packageName": "libexpat1",
-                    "purl": "pkg:deb/debian/libexpat1@2.2.10-2%2Bdeb11u5?arch=arm64&distro=debian-11.9",
-                    "references": [
-                      "http://openwall.com/lists/oss-security/2013/02/22/3",
-                      "http://seclists.org/fulldisclosure/2021/Oct/61",
-                      "http://seclists.org/fulldisclosure/2021/Oct/62",
-                      "http://seclists.org/fulldisclosure/2021/Oct/63",
-                      "http://seclists.org/fulldisclosure/2021/Sep/33",
-                      "http://seclists.org/fulldisclosure/2021/Sep/34",
-                      "http://seclists.org/fulldisclosure/2021/Sep/35",
-                      "http://seclists.org/fulldisclosure/2021/Sep/38",
-                      "http://seclists.org/fulldisclosure/2021/Sep/39",
-                      "http://seclists.org/fulldisclosure/2021/Sep/40",
-                      "http://securitytracker.com/id?1028213",
-                      "http://www.openwall.com/lists/oss-security/2013/04/12/6",
-                      "http://www.openwall.com/lists/oss-security/2021/10/07/4",
-                      "http://www.osvdb.org/90634",
-                      "http://www.securityfocus.com/bid/58233",
-                      "https://access.redhat.com/security/cve/CVE-2013-0340",
-                      "https://github.com/libexpat/libexpat/blob/R_2_4_1/expat/Changes",
-                      "https://lists.apache.org/thread.html/r41eca5f4f09e74436cbb05dec450fc2bef37b5d3e966aa7cc5fada6d%40%3Cannounce.apache.org%3E",
-                      "https://lists.apache.org/thread.html/rfb2c193360436e230b85547e85a41bea0916916f96c501f5b6fc4702%40%3Cusers.openoffice.apache.org%3E",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2013-0340",
-                      "https://security.gentoo.org/glsa/201701-21",
-                      "https://support.apple.com/kb/HT212804",
-                      "https://support.apple.com/kb/HT212805",
-                      "https://support.apple.com/kb/HT212807",
-                      "https://support.apple.com/kb/HT212814",
-                      "https://support.apple.com/kb/HT212815",
-                      "https://support.apple.com/kb/HT212819",
-                      "https://www.cve.org/CVERecord?id=CVE-2013-0340"
-                    ],
-                    "severity": "LOW",
-                    "suppressed": false,
-                    "title": "expat: internal entity expansion"
-                  },
-                  {
-                    "cve": "CVE-2023-52426",
-                    "cvss": {
-                      "nvd": {
-                        "v3score": "5.5",
-                        "v3vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H"
-                      },
-                      "redhat": {
-                        "v3score": "5.5",
-                        "v3vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-776"
-                    ],
-                    "description": "libexpat through 2.5.0 allows recursive XML Entity Expansion if XML_DTD is undefined at compile time.",
-                    "diffID": "sha256:2f458857553769636f3c149c0c8d41acc63c9e24282823b0ea26869a635e9f48",
-                    "installedVersion": "2.2.10-2+deb11u5",
-                    "packageName": "libexpat1",
-                    "purl": "pkg:deb/debian/libexpat1@2.2.10-2%2Bdeb11u5?arch=arm64&distro=debian-11.9",
-                    "references": [
-                      "https://access.redhat.com/security/cve/CVE-2023-52426",
-                      "https://cwe.mitre.org/data/definitions/776.html",
-                      "https://github.com/libexpat/libexpat/commit/0f075ec8ecb5e43f8fdca5182f8cca4703da0404",
-                      "https://github.com/libexpat/libexpat/pull/777",
-                      "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PNRIHC7DVVRAIWFRGV23Y6UZXFBXSQDB/",
-                      "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WNUBSGZFEZOBHJFTAD42SAN4ATW2VEMV/",
-                      "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/PNRIHC7DVVRAIWFRGV23Y6UZXFBXSQDB/",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2023-52426",
-                      "https://security.netapp.com/advisory/ntap-20240307-0005/",
-                      "https://www.cve.org/CVERecord?id=CVE-2023-52426"
-                    ],
-                    "severity": "LOW",
-                    "suppressed": false,
-                    "title": "expat: recursive XML entity expansion vulnerability"
-                  },
-                  {
-                    "cve": "CVE-2024-28757",
-                    "cvss": {
-                      "nvd": {
-                        "v3score": "7.5",
-                        "v3vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"
-                      },
-                      "redhat": {
-                        "v3score": "7.5",
-                        "v3vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-776"
-                    ],
-                    "description": "libexpat through 2.6.1 allows an XML Entity Expansion attack when there is isolated use of external parsers (created via XML_ExternalEntityParserCreate).",
-                    "diffID": "sha256:2f458857553769636f3c149c0c8d41acc63c9e24282823b0ea26869a635e9f48",
-                    "installedVersion": "2.2.10-2+deb11u5",
-                    "packageName": "libexpat1",
-                    "purl": "pkg:deb/debian/libexpat1@2.2.10-2%2Bdeb11u5?arch=arm64&distro=debian-11.9",
-                    "references": [
-                      "http://www.openwall.com/lists/oss-security/2024/03/15/1",
-                      "https://access.redhat.com/errata/RHSA-2024:1530",
-                      "https://access.redhat.com/security/cve/CVE-2024-28757",
-                      "https://bugzilla.redhat.com/2262877",
-                      "https://bugzilla.redhat.com/2268766",
-                      "https://errata.almalinux.org/9/ALSA-2024-1530.html",
-                      "https://github.com/libexpat/libexpat/issues/839",
-                      "https://github.com/libexpat/libexpat/pull/842",
-                      "https://linux.oracle.com/cve/CVE-2024-28757.html",
-                      "https://linux.oracle.com/errata/ELSA-2024-1530.html",
-                      "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FPLC6WDSRDUYS7F7JWAOVOHFNOUQ43DD/",
-                      "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LKJ7V5F6LJCEQJXDBWGT27J7NAP3E3N7/",
-                      "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VK2O34GH43NTHBZBN7G5Y6YKJKPUCTBE/",
-                      "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/FPLC6WDSRDUYS7F7JWAOVOHFNOUQ43DD/",
-                      "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/LKJ7V5F6LJCEQJXDBWGT27J7NAP3E3N7/",
-                      "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/VK2O34GH43NTHBZBN7G5Y6YKJKPUCTBE/",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2024-28757",
-                      "https://security.netapp.com/advisory/ntap-20240322-0001/",
-                      "https://ubuntu.com/security/notices/USN-6694-1",
-                      "https://www.cve.org/CVERecord?id=CVE-2024-28757"
-                    ],
-                    "severity": "LOW",
-                    "suppressed": false,
-                    "title": "expat: XML Entity Expansion"
-                  },
-                  {
-                    "cve": "CVE-2026-24515",
-                    "cvss": {
-                      "nvd": {
-                        "v3score": "2.5",
-                        "v3vector": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L"
-                      },
-                      "redhat": {
-                        "v3score": "2.9",
-                        "v3vector": "CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-476"
-                    ],
-                    "description": "In libexpat before 2.7.4, XML_ExternalEntityParserCreate does not copy unknown encoding handler user data.",
-                    "diffID": "sha256:2f458857553769636f3c149c0c8d41acc63c9e24282823b0ea26869a635e9f48",
-                    "installedVersion": "2.2.10-2+deb11u5",
-                    "packageName": "libexpat1",
-                    "purl": "pkg:deb/debian/libexpat1@2.2.10-2%2Bdeb11u5?arch=arm64&distro=debian-11.9",
-                    "references": [
-                      "https://access.redhat.com/security/cve/CVE-2026-24515",
-                      "https://github.com/libexpat/libexpat/pull/1131",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2026-24515",
-                      "https://www.cve.org/CVERecord?id=CVE-2026-24515"
-                    ],
-                    "severity": "LOW",
-                    "suppressed": false,
-                    "title": "libexpat: libexpat null pointer dereference"
-                  },
-                  {
-                    "cve": "CVE-2022-1304",
-                    "cvss": {
-                      "nvd": {
-                        "v3score": "7.8",
-                        "v3vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H"
-                      },
-                      "redhat": {
-                        "v3score": "5.8",
-                        "v3vector": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:H"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-125",
-                      "CWE-787"
-                    ],
-                    "description": "An out-of-bounds read/write vulnerability was found in e2fsprogs 1.46.5. This issue leads to a segmentation fault and possibly arbitrary code execution via a specially crafted filesystem.",
-                    "diffID": "sha256:a499da141b419b2e97ed40192951a05fc37fadec129a55e1de03773e23fff97b",
-                    "fixedVersions": [
-                      "1.46.2-2+deb11u1"
-                    ],
-                    "installedVersion": "1.46.2-2",
-                    "packageName": "libext2fs2",
-                    "purl": "pkg:deb/debian/libext2fs2@1.46.2-2?arch=arm64&distro=debian-11.9",
-                    "references": [
-                      "https://access.redhat.com/errata/RHSA-2022:7720",
-                      "https://access.redhat.com/security/cve/CVE-2022-1304",
-                      "https://bugzilla.redhat.com/2069726",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2069726",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-1304",
-                      "https://errata.almalinux.org/8/ALSA-2022-7720.html",
-                      "https://errata.rockylinux.org/RLSA-2022:8361",
-                      "https://linux.oracle.com/cve/CVE-2022-1304.html",
-                      "https://linux.oracle.com/errata/ELSA-2024-12731.html",
-                      "https://lists.debian.org/debian-lts-announce/2024/10/msg00001.html",
-                      "https://marc.info/?l=linux-ext4&m=165056234501732&w=2",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2022-1304",
-                      "https://security.netapp.com/advisory/ntap-20241122-0010/",
-                      "https://ubuntu.com/security/notices/USN-5464-1",
-                      "https://www.cve.org/CVERecord?id=CVE-2022-1304"
-                    ],
-                    "severity": "HIGH",
-                    "suppressed": false,
-                    "title": "e2fsprogs: out-of-bounds read/write via crafted filesystem"
-                  },
-                  {
-                    "cve": "CVE-2025-27363",
-                    "cvss": {
-                      "nvd": {
-                        "v3score": "8.1",
-                        "v3vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H"
-                      },
-                      "redhat": {
-                        "v3score": "8.1",
-                        "v3vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-787"
-                    ],
-                    "description": "An out of bounds write exists in FreeType versions 2.13.0 and below (newer versions of FreeType are not vulnerable) when attempting to parse font subglyph structures related to TrueType GX and variable font files. The vulnerable code assigns a signed short value to an unsigned long and then adds a static value causing it to wrap around and allocate too small of a heap buffer. The code then writes up to 6 signed long integers out of bounds relative to this buffer. This may result in arbitrary code execution. This vulnerability may have been exploited in the wild.",
-                    "diffID": "sha256:2f458857553769636f3c149c0c8d41acc63c9e24282823b0ea26869a635e9f48",
-                    "fixedVersions": [
-                      "2.10.4+dfsg-1+deb11u2"
-                    ],
-                    "installedVersion": "2.10.4+dfsg-1+deb11u1",
-                    "packageName": "libfreetype6",
-                    "purl": "pkg:deb/debian/libfreetype6@2.10.4%2Bdfsg-1%2Bdeb11u1?arch=arm64&distro=debian-11.9",
-                    "references": [
-                      "http://www.openwall.com/lists/oss-security/2025/03/13/1",
-                      "http://www.openwall.com/lists/oss-security/2025/03/13/11",
-                      "http://www.openwall.com/lists/oss-security/2025/03/13/12",
-                      "http://www.openwall.com/lists/oss-security/2025/03/13/2",
-                      "http://www.openwall.com/lists/oss-security/2025/03/13/3",
-                      "http://www.openwall.com/lists/oss-security/2025/03/13/8",
-                      "http://www.openwall.com/lists/oss-security/2025/03/14/1",
-                      "http://www.openwall.com/lists/oss-security/2025/03/14/2",
-                      "http://www.openwall.com/lists/oss-security/2025/03/14/3",
-                      "http://www.openwall.com/lists/oss-security/2025/03/14/4",
-                      "http://www.openwall.com/lists/oss-security/2025/05/06/3",
-                      "https://access.redhat.com/errata/RHSA-2025:8292",
-                      "https://access.redhat.com/security/cve/CVE-2025-27363",
-                      "https://bugzilla.redhat.com/2351357",
-                      "https://bugzilla.redhat.com/2357067",
-                      "https://bugzilla.redhat.com/2357069",
-                      "https://bugzilla.redhat.com/2357070",
-                      "https://bugzilla.redhat.com/2359341",
-                      "https://bugzilla.redhat.com/2359342",
-                      "https://bugzilla.redhat.com/2359353",
-                      "https://bugzilla.redhat.com/2359354",
-                      "https://bugzilla.redhat.com/2359355",
-                      "https://bugzilla.redhat.com/2359357",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2351357",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-27363",
-                      "https://errata.almalinux.org/8/ALSA-2025-8292.html",
-                      "https://errata.rockylinux.org/RLSA-2025:3407",
-                      "https://linux.oracle.com/cve/CVE-2025-27363.html",
-                      "https://linux.oracle.com/errata/ELSA-2025-8292.html",
-                      "https://lists.debian.org/debian-lts-announce/2025/03/msg00030.html",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2025-27363",
-                      "https://source.android.com/docs/security/bulletin/2025-05-01",
-                      "https://ubuntu.com/security/notices/USN-7352-1",
-                      "https://ubuntu.com/security/notices/USN-7352-2",
-                      "https://www.cisa.gov/known-exploited-vulnerabilities-catalog",
-                      "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2025-27363",
-                      "https://www.cve.org/CVERecord?id=CVE-2025-27363",
-                      "https://www.facebook.com/security/advisories/cve-2025-27363"
-                    ],
-                    "severity": "HIGH",
-                    "suppressed": false,
-                    "title": "freetype: OOB write when attempting to parse font subglyph structures related to TrueType GX and variable font files"
-                  },
-                  {
-                    "cve": "CVE-2022-31782",
-                    "cvss": {
-                      "nvd": {
-                        "v3score": "7.8",
-                        "v3vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-787"
-                    ],
-                    "description": "ftbench.c in FreeType Demo Programs through 2.12.1 has a heap-based buffer overflow.",
-                    "diffID": "sha256:2f458857553769636f3c149c0c8d41acc63c9e24282823b0ea26869a635e9f48",
-                    "installedVersion": "2.10.4+dfsg-1+deb11u1",
-                    "packageName": "libfreetype6",
-                    "purl": "pkg:deb/debian/libfreetype6@2.10.4%2Bdfsg-1%2Bdeb11u1?arch=arm64&distro=debian-11.9",
-                    "references": [
-                      "https://gitlab.freedesktop.org/freetype/freetype-demos/-/issues/8",
-                      "https://ubuntu.com/security/notices/USN-5528-1",
-                      "https://www.cve.org/CVERecord?id=CVE-2022-31782"
-                    ],
-                    "severity": "LOW",
-                    "suppressed": false,
-                    "title": "ftbench.c in FreeType Demo Programs through 2.12.1 has a heap-based bu ..."
-                  },
-                  {
-                    "cve": "CVE-2023-4039",
-                    "cvss": {
-                      "nvd": {
-                        "v3score": "4.8",
-                        "v3vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-693"
-                    ],
-                    "description": "**DISPUTED**A failure in the -fstack-protector feature in GCC-based toolchains \nthat target AArch64 allows an attacker to exploit an existing buffer \noverflow in dynamically-sized local variables in your application \nwithout this being detected. This stack-protector failure only applies \nto C99-style dynamically-sized local variables or those created using \nalloca(). The stack-protector operates as intended for statically-sized \nlocal variables.\n\nThe default behavior when the stack-protector \ndetects an overflow is to terminate your application, resulting in \ncontrolled loss of availability. An attacker who can exploit a buffer \noverflow without triggering the stack-protector might be able to change \nprogram flow control to cause an uncontrolled loss of availability or to\n go further and affect confidentiality or integrity. NOTE: The GCC project argues that this is a missed hardening bug and not a vulnerability by itself.",
-                    "diffID": "sha256:a499da141b419b2e97ed40192951a05fc37fadec129a55e1de03773e23fff97b",
-                    "installedVersion": "10.2.1-6",
-                    "packageName": "libgcc-s1",
-                    "purl": "pkg:deb/debian/libgcc-s1@10.2.1-6?arch=arm64&distro=debian-11.9",
-                    "references": [
-                      "https://access.redhat.com/security/cve/CVE-2023-4039",
-                      "https://developer.arm.com/Arm%20Security%20Center/GCC%20Stack%20Protector%20Vulnerability%20AArch64",
-                      "https://gcc.gnu.org/git/?p=gcc.git;a=blob_plain;f=SECURITY.txt",
-                      "https://gcc.gnu.org/pipermail/gcc-patches/2023-October/634066.html",
-                      "https://github.com/metaredteam/external-disclosures/security/advisories/GHSA-x7ch-h5rf-w2mf",
-                      "https://inbox.sourceware.org/gcc-patches/46cfa37b-56eb-344d-0745-e0d35393392d@gotplt.org",
-                      "https://linux.oracle.com/cve/CVE-2023-4039.html",
-                      "https://linux.oracle.com/errata/ELSA-2023-28766.html",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2023-4039",
-                      "https://rtx.meta.security/mitigation/2023/09/12/CVE-2023-4039.html",
-                      "https://ubuntu.com/security/notices/USN-7700-1",
-                      "https://www.cve.org/CVERecord?id=CVE-2023-4039"
-                    ],
-                    "severity": "LOW",
-                    "suppressed": false,
-                    "title": "gcc: -fstack-protector fails to guard dynamic stack allocations on ARM64"
-                  },
-                  {
-                    "cve": "CVE-2021-33560",
-                    "cvss": {
-                      "nvd": {
-                        "v3score": "7.5",
-                        "v3vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N"
-                      },
-                      "redhat": {
-                        "v3score": "7.5",
-                        "v3vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-203",
-                      "CWE-325"
-                    ],
-                    "description": "Libgcrypt before 1.8.8 and 1.9.x before 1.9.3 mishandles ElGamal encryption because it lacks exponent blinding to address a side-channel attack against mpi_powm, and the window size is not chosen appropriately. This, for example, affects use of ElGamal in OpenPGP.",
-                    "diffID": "sha256:a499da141b419b2e97ed40192951a05fc37fadec129a55e1de03773e23fff97b",
-                    "installedVersion": "1.8.7-6",
-                    "packageName": "libgcrypt20",
-                    "purl": "pkg:deb/debian/libgcrypt20@1.8.7-6?arch=arm64&distro=debian-11.9",
-                    "references": [
-                      "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2021-33560.json",
-                      "https://access.redhat.com/security/cve/CVE-2021-33560",
-                      "https://dev.gnupg.org/T5305",
-                      "https://dev.gnupg.org/T5328",
-                      "https://dev.gnupg.org/T5466",
-                      "https://dev.gnupg.org/rCe8b7f10be275bcedb5fc05ed4837a89bfd605c61",
-                      "https://eprint.iacr.org/2021/923",
-                      "https://errata.almalinux.org/8/ALSA-2021-4409.html",
-                      "https://linux.oracle.com/cve/CVE-2021-33560.html",
-                      "https://linux.oracle.com/errata/ELSA-2022-9263.html",
-                      "https://lists.debian.org/debian-lts-announce/2021/06/msg00021.html",
-                      "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BKKTOIGFW2SGN3DO2UHHVZ7MJSYN4AAB/",
-                      "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/R7OAPCUGPF3VLA7QAJUQSL255D4ITVTL/",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2021-33560",
-                      "https://security.gentoo.org/glsa/202210-13",
-                      "https://ubuntu.com/security/notices/USN-5080-1",
-                      "https://ubuntu.com/security/notices/USN-5080-2",
-                      "https://www.cve.org/CVERecord?id=CVE-2021-33560",
-                      "https://www.oracle.com/security-alerts/cpuapr2022.html",
-                      "https://www.oracle.com/security-alerts/cpujan2022.html",
-                      "https://www.oracle.com/security-alerts/cpujul2022.html",
-                      "https://www.oracle.com/security-alerts/cpuoct2021.html"
-                    ],
-                    "severity": "HIGH",
-                    "suppressed": false,
-                    "title": "libgcrypt: mishandles ElGamal encryption because it lacks exponent blinding to address a side-channel attack against mpi_powm"
-                  },
-                  {
-                    "cve": "CVE-2018-6829",
-                    "cvss": {
-                      "nvd": {
-                        "v3score": "7.5",
-                        "v3vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N"
-                      },
-                      "redhat": {
-                        "v3score": "5.3",
-                        "v3vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-327"
-                    ],
-                    "description": "cipher/elgamal.c in Libgcrypt through 1.8.2, when used to encrypt messages directly, improperly encodes plaintexts, which allows attackers to obtain sensitive information by reading ciphertext data (i.e., it does not have semantic security in face of a ciphertext-only attack). The Decisional Diffie-Hellman (DDH) assumption does not hold for Libgcrypt's ElGamal implementation.",
-                    "diffID": "sha256:a499da141b419b2e97ed40192951a05fc37fadec129a55e1de03773e23fff97b",
-                    "installedVersion": "1.8.7-6",
-                    "packageName": "libgcrypt20",
-                    "purl": "pkg:deb/debian/libgcrypt20@1.8.7-6?arch=arm64&distro=debian-11.9",
-                    "references": [
-                      "https://access.redhat.com/security/cve/CVE-2018-6829",
-                      "https://github.com/weikengchen/attack-on-libgcrypt-elgamal",
-                      "https://github.com/weikengchen/attack-on-libgcrypt-elgamal/wiki",
-                      "https://lists.gnupg.org/pipermail/gcrypt-devel/2018-February/004394.html",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2018-6829",
-                      "https://www.cve.org/CVERecord?id=CVE-2018-6829",
-                      "https://www.oracle.com/security-alerts/cpujan2020.html"
-                    ],
-                    "severity": "LOW",
-                    "suppressed": false,
-                    "title": "libgcrypt: ElGamal implementation doesn't have semantic security due to incorrectly encoded plaintexts possibly allowing to obtain sensitive information"
-                  },
-                  {
-                    "cve": "CVE-2024-2236",
-                    "cvss": {
-                      "redhat": {
-                        "v3score": "5.9",
-                        "v3vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-208"
-                    ],
-                    "description": "A timing-based side-channel flaw was found in libgcrypt's RSA implementation. This issue may allow a remote attacker to initiate a Bleichenbacher-style attack, which can lead to the decryption of RSA ciphertexts.",
-                    "diffID": "sha256:a499da141b419b2e97ed40192951a05fc37fadec129a55e1de03773e23fff97b",
-                    "installedVersion": "1.8.7-6",
-                    "packageName": "libgcrypt20",
-                    "purl": "pkg:deb/debian/libgcrypt20@1.8.7-6?arch=arm64&distro=debian-11.9",
-                    "references": [
-                      "https://access.redhat.com/errata/RHSA-2024:9404",
-                      "https://access.redhat.com/errata/RHSA-2025:3530",
-                      "https://access.redhat.com/errata/RHSA-2025:3534",
-                      "https://access.redhat.com/security/cve/CVE-2024-2236",
-                      "https://bugzilla.redhat.com/2245218",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2245218",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2268268",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-2236",
-                      "https://dev.gnupg.org/T7136",
-                      "https://errata.almalinux.org/9/ALSA-2024-9404.html",
-                      "https://errata.rockylinux.org/RLSA-2024:9404",
-                      "https://github.com/tomato42/marvin-toolkit/tree/master/example/libgcrypt",
-                      "https://gitlab.com/redhat-crypto/libgcrypt/libgcrypt-mirror/-/merge_requests/17",
-                      "https://linux.oracle.com/cve/CVE-2024-2236.html",
-                      "https://linux.oracle.com/errata/ELSA-2024-9404.html",
-                      "https://lists.gnupg.org/pipermail/gcrypt-devel/2024-March/005607.html",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2024-2236",
-                      "https://www.cve.org/CVERecord?id=CVE-2024-2236"
-                    ],
-                    "severity": "LOW",
-                    "suppressed": false,
-                    "title": "libgcrypt: vulnerable to Marvin Attack"
-                  },
-                  {
-                    "cve": "CVE-2021-40145",
-                    "cvss": {
-                      "nvd": {
-                        "v3score": "7.5",
-                        "v3vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-415"
-                    ],
-                    "description": "gdImageGd2Ptr in gd_gd2.c in the GD Graphics Library (aka LibGD) through 2.3.2 has a double free. NOTE: the vendor's position is \"The GD2 image format is a proprietary image format of libgd. It has to be regarded as being obsolete, and should only be used for development and testing purposes.",
-                    "diffID": "sha256:2f458857553769636f3c149c0c8d41acc63c9e24282823b0ea26869a635e9f48",
-                    "fixedVersions": [
-                      "2.3.0-2+deb11u1"
-                    ],
-                    "installedVersion": "2.3.0-2",
-                    "packageName": "libgd3",
-                    "purl": "pkg:deb/debian/libgd3@2.3.0-2?arch=arm64&distro=debian-11.9",
-                    "references": [
-                      "https://github.com/libgd/libgd/commit/c5fd25ce0e48fd5618a972ca9f5e28d6d62006af",
-                      "https://github.com/libgd/libgd/issues/700",
-                      "https://github.com/libgd/libgd/pull/713",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2021-40145",
-                      "https://ubuntu.com/security/notices/USN-5068-1",
-                      "https://www.cve.org/CVERecord?id=CVE-2021-40145"
-                    ],
-                    "severity": "HIGH",
-                    "suppressed": false,
-                    "title": "gdImageGd2Ptr in gd_gd2.c in the GD Graphics Library (aka LibGD) throu ..."
-                  },
-                  {
-                    "cve": "CVE-2021-38115",
-                    "cvss": {
-                      "nvd": {
-                        "v3score": "6.5",
-                        "v3vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-125"
-                    ],
-                    "description": "read_header_tga in gd_tga.c in the GD Graphics Library (aka LibGD) through 2.3.2 allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted TGA file.",
-                    "diffID": "sha256:2f458857553769636f3c149c0c8d41acc63c9e24282823b0ea26869a635e9f48",
-                    "fixedVersions": [
-                      "2.3.0-2+deb11u1"
-                    ],
-                    "installedVersion": "2.3.0-2",
-                    "packageName": "libgd3",
-                    "purl": "pkg:deb/debian/libgd3@2.3.0-2?arch=arm64&distro=debian-11.9",
-                    "references": [
-                      "https://github.com/libgd/libgd/commit/8b111b2b4a4842179be66db68d84dda91a246032",
-                      "https://github.com/libgd/libgd/issues/697",
-                      "https://github.com/libgd/libgd/pull/711/commits/8b111b2b4a4842179be66db68d84dda91a246032",
-                      "https://lists.debian.org/debian-lts-announce/2024/04/msg00003.html",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2021-38115",
-                      "https://ubuntu.com/security/notices/USN-5068-1",
-                      "https://www.cve.org/CVERecord?id=CVE-2021-38115"
-                    ],
-                    "severity": "MEDIUM",
-                    "suppressed": false,
-                    "title": "read_header_tga in gd_tga.c in the GD Graphics Library (aka LibGD) thr ..."
-                  },
-                  {
-                    "cve": "CVE-2021-40812",
-                    "cvss": {
-                      "nvd": {
-                        "v3score": "6.5",
-                        "v3vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-125"
-                    ],
-                    "description": "The GD Graphics Library (aka LibGD) through 2.3.2 has an out-of-bounds read because of the lack of certain gdGetBuf and gdPutBuf return value checks.",
-                    "diffID": "sha256:2f458857553769636f3c149c0c8d41acc63c9e24282823b0ea26869a635e9f48",
-                    "fixedVersions": [
-                      "2.3.0-2+deb11u1"
-                    ],
-                    "installedVersion": "2.3.0-2",
-                    "packageName": "libgd3",
-                    "purl": "pkg:deb/debian/libgd3@2.3.0-2?arch=arm64&distro=debian-11.9",
-                    "references": [
-                      "https://github.com/libgd/libgd/commit/6f5136821be86e7068fcdf651ae9420b5d42e9a9",
-                      "https://github.com/libgd/libgd/issues/750#issuecomment-914872385",
-                      "https://lists.debian.org/debian-lts-announce/2024/04/msg00003.html",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2021-40812",
-                      "https://ubuntu.com/security/notices/USN-7112-1",
-                      "https://www.cve.org/CVERecord?id=CVE-2021-40812"
-                    ],
-                    "severity": "MEDIUM",
-                    "suppressed": false,
-                    "title": "The GD Graphics Library (aka LibGD) through 2.3.2 has an out-of-bounds ..."
-                  },
-                  {
-                    "cve": "CVE-2024-0553",
-                    "cvss": {
-                      "nvd": {
-                        "v3score": "7.5",
-                        "v3vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N"
-                      },
-                      "redhat": {
-                        "v3score": "7.5",
-                        "v3vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-203"
-                    ],
-                    "description": "A vulnerability was found in GnuTLS. The response times to malformed ciphertexts in RSA-PSK ClientKeyExchange differ from the response times of ciphertexts with correct PKCS#1 v1.5 padding. This issue may allow a remote attacker to perform a timing side-channel attack in the RSA-PSK key exchange, potentially leading to the leakage of sensitive data. CVE-2024-0553 is designated as an incomplete resolution for CVE-2023-5981.",
-                    "diffID": "sha256:a499da141b419b2e97ed40192951a05fc37fadec129a55e1de03773e23fff97b",
-                    "fixedVersions": [
-                      "3.7.1-5+deb11u5"
-                    ],
-                    "installedVersion": "3.7.1-5+deb11u4",
-                    "packageName": "libgnutls30",
-                    "purl": "pkg:deb/debian/libgnutls30@3.7.1-5%2Bdeb11u4?arch=arm64&distro=debian-11.9",
-                    "references": [
-                      "http://www.openwall.com/lists/oss-security/2024/01/19/3",
-                      "https://access.redhat.com/errata/RHSA-2024:0533",
-                      "https://access.redhat.com/errata/RHSA-2024:0627",
-                      "https://access.redhat.com/errata/RHSA-2024:0796",
-                      "https://access.redhat.com/errata/RHSA-2024:1082",
-                      "https://access.redhat.com/errata/RHSA-2024:1108",
-                      "https://access.redhat.com/errata/RHSA-2024:1383",
-                      "https://access.redhat.com/errata/RHSA-2024:2094",
-                      "https://access.redhat.com/security/cve/CVE-2024-0553",
-                      "https://bugzilla.redhat.com/2258412",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2258412",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-0553",
-                      "https://errata.almalinux.org/8/ALSA-2024-0627.html",
-                      "https://errata.rockylinux.org/RLSA-2024:0627",
-                      "https://gitlab.com/gnutls/gnutls/-/issues/1522",
-                      "https://gnutls.org/security-new.html#GNUTLS-SA-2024-01-14",
-                      "https://linux.oracle.com/cve/CVE-2024-0553.html",
-                      "https://linux.oracle.com/errata/ELSA-2024-12336.html",
-                      "https://lists.debian.org/debian-lts-announce/2024/02/msg00010.html",
-                      "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/7ZEIOLORQ7N6WRPFXZSYDL2MC4LP7VFV/",
-                      "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/GNXKVR5YNUEBNHAHM5GSYKBZX4W2HMN2/",
-                      "https://lists.gnupg.org/pipermail/gnutls-help/2024-January/004841.html",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2024-0553",
-                      "https://security.netapp.com/advisory/ntap-20240202-0011/",
-                      "https://ubuntu.com/security/notices/USN-6593-1",
-                      "https://www.cve.org/CVERecord?id=CVE-2024-0553"
-                    ],
-                    "severity": "HIGH",
-                    "suppressed": false,
-                    "title": "gnutls: incomplete fix for CVE-2023-5981"
-                  },
-                  {
-                    "cve": "CVE-2024-0567",
-                    "cvss": {
-                      "nvd": {
-                        "v3score": "7.5",
-                        "v3vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"
-                      },
-                      "redhat": {
-                        "v3score": "7.5",
-                        "v3vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-347"
-                    ],
-                    "description": "A vulnerability was found in GnuTLS, where a cockpit (which uses gnuTLS) rejects a certificate chain with distributed trust. This issue occurs when validating a certificate chain with cockpit-certificate-ensure. This flaw allows an unauthenticated, remote client or attacker to initiate a denial of service attack.",
-                    "diffID": "sha256:a499da141b419b2e97ed40192951a05fc37fadec129a55e1de03773e23fff97b",
-                    "fixedVersions": [
-                      "3.7.1-5+deb11u5"
-                    ],
-                    "installedVersion": "3.7.1-5+deb11u4",
-                    "packageName": "libgnutls30",
-                    "purl": "pkg:deb/debian/libgnutls30@3.7.1-5%2Bdeb11u4?arch=arm64&distro=debian-11.9",
-                    "references": [
-                      "http://www.openwall.com/lists/oss-security/2024/01/19/3",
-                      "https://access.redhat.com/errata/RHSA-2024:0533",
-                      "https://access.redhat.com/errata/RHSA-2024:1082",
-                      "https://access.redhat.com/errata/RHSA-2024:1383",
-                      "https://access.redhat.com/errata/RHSA-2024:2094",
-                      "https://access.redhat.com/security/cve/CVE-2024-0567",
-                      "https://bugzilla.redhat.com/2248445",
-                      "https://bugzilla.redhat.com/2258412",
-                      "https://bugzilla.redhat.com/2258544",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2258544",
-                      "https://errata.almalinux.org/9/ALSA-2024-0533.html",
-                      "https://gitlab.com/gnutls/gnutls/-/issues/1521",
-                      "https://gnutls.org/security-new.html#GNUTLS-SA-2024-01-09",
-                      "https://linux.oracle.com/cve/CVE-2024-0567.html",
-                      "https://linux.oracle.com/errata/ELSA-2024-12336.html",
-                      "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/7ZEIOLORQ7N6WRPFXZSYDL2MC4LP7VFV/",
-                      "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/GNXKVR5YNUEBNHAHM5GSYKBZX4W2HMN2/",
-                      "https://lists.gnupg.org/pipermail/gnutls-help/2024-January/004841.html",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2024-0567",
-                      "https://security.netapp.com/advisory/ntap-20240202-0011/",
-                      "https://ubuntu.com/security/notices/USN-6593-1",
-                      "https://www.cve.org/CVERecord?id=CVE-2024-0567"
-                    ],
-                    "severity": "HIGH",
-                    "suppressed": false,
-                    "title": "gnutls: rejects certificate chain with distributed trust"
-                  },
-                  {
-                    "cve": "CVE-2025-32988",
-                    "cvss": {
-                      "nvd": {
-                        "v3score": "8.2",
-                        "v3vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H"
-                      },
-                      "redhat": {
-                        "v3score": "6.5",
-                        "v3vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-415"
-                    ],
-                    "description": "A flaw was found in GnuTLS. A double-free vulnerability exists in GnuTLS due to incorrect ownership handling in the export logic of Subject Alternative Name (SAN) entries containing an otherName. If the type-id OID is invalid or malformed, GnuTLS will call asn1_delete_structure() on an ASN.1 node it does not own, leading to a double-free condition when the parent function or caller later attempts to free the same structure.\n\nThis vulnerability can be triggered using only public GnuTLS APIs and may result in denial of service or memory corruption, depending on allocator behavior.",
-                    "diffID": "sha256:a499da141b419b2e97ed40192951a05fc37fadec129a55e1de03773e23fff97b",
-                    "fixedVersions": [
-                      "3.7.1-5+deb11u8"
-                    ],
-                    "installedVersion": "3.7.1-5+deb11u4",
-                    "packageName": "libgnutls30",
-                    "purl": "pkg:deb/debian/libgnutls30@3.7.1-5%2Bdeb11u4?arch=arm64&distro=debian-11.9",
-                    "references": [
-                      "http://www.openwall.com/lists/oss-security/2025/07/11/3",
-                      "https://access.redhat.com/errata/RHSA-2025:16115",
-                      "https://access.redhat.com/errata/RHSA-2025:16116",
-                      "https://access.redhat.com/errata/RHSA-2025:17181",
-                      "https://access.redhat.com/errata/RHSA-2025:17348",
-                      "https://access.redhat.com/errata/RHSA-2025:17361",
-                      "https://access.redhat.com/errata/RHSA-2025:17415",
-                      "https://access.redhat.com/errata/RHSA-2025:19088",
-                      "https://access.redhat.com/errata/RHSA-2025:22529",
-                      "https://access.redhat.com/security/cve/CVE-2025-32988",
-                      "https://bugzilla.redhat.com/2359620",
-                      "https://bugzilla.redhat.com/2359622",
-                      "https://bugzilla.redhat.com/2376755",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2359620",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2359621",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2359622",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2376755",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-32988",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-32989",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-32990",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-6395",
-                      "https://errata.almalinux.org/8/ALSA-2025-17415.html",
-                      "https://errata.rockylinux.org/RLSA-2025:16116",
-                      "https://linux.oracle.com/cve/CVE-2025-32988.html",
-                      "https://linux.oracle.com/errata/ELSA-2025-20606.html",
-                      "https://lists.debian.org/debian-lts-announce/2025/08/msg00005.html",
-                      "https://lists.gnupg.org/pipermail/gnutls-help/2025-July/004883.html",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2025-32988",
-                      "https://ubuntu.com/security/notices/USN-7635-1",
-                      "https://ubuntu.com/security/notices/USN-7742-1",
-                      "https://www.cve.org/CVERecord?id=CVE-2025-32988"
-                    ],
-                    "severity": "HIGH",
-                    "suppressed": false,
-                    "title": "gnutls: Vulnerability in GnuTLS otherName SAN export"
-                  },
-                  {
-                    "cve": "CVE-2025-32990",
-                    "cvss": {
-                      "nvd": {
-                        "v3score": "8.2",
-                        "v3vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H"
-                      },
-                      "redhat": {
-                        "v3score": "6.5",
-                        "v3vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-122"
-                    ],
-                    "description": "A heap-buffer-overflow (off-by-one) flaw was found in the GnuTLS software in the template parsing logic within the certtool utility. When it reads certain settings from a template file, it allows an attacker to cause an out-of-bounds (OOB) NULL pointer write, resulting in memory corruption and a denial-of-service (DoS) that could potentially crash the system.",
-                    "diffID": "sha256:a499da141b419b2e97ed40192951a05fc37fadec129a55e1de03773e23fff97b",
-                    "fixedVersions": [
-                      "3.7.1-5+deb11u8"
-                    ],
-                    "installedVersion": "3.7.1-5+deb11u4",
-                    "packageName": "libgnutls30",
-                    "purl": "pkg:deb/debian/libgnutls30@3.7.1-5%2Bdeb11u4?arch=arm64&distro=debian-11.9",
-                    "references": [
-                      "http://www.openwall.com/lists/oss-security/2025/07/11/3",
-                      "https://access.redhat.com/errata/RHSA-2025:16115",
-                      "https://access.redhat.com/errata/RHSA-2025:16116",
-                      "https://access.redhat.com/errata/RHSA-2025:17181",
-                      "https://access.redhat.com/errata/RHSA-2025:17348",
-                      "https://access.redhat.com/errata/RHSA-2025:17361",
-                      "https://access.redhat.com/errata/RHSA-2025:17415",
-                      "https://access.redhat.com/errata/RHSA-2025:19088",
-                      "https://access.redhat.com/errata/RHSA-2025:22529",
-                      "https://access.redhat.com/security/cve/CVE-2025-32990",
-                      "https://bugzilla.redhat.com/2359620",
-                      "https://bugzilla.redhat.com/2359622",
-                      "https://bugzilla.redhat.com/2376755",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2359620",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2359621",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2359622",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2376755",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-32988",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-32989",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-32990",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-6395",
-                      "https://errata.almalinux.org/8/ALSA-2025-17415.html",
-                      "https://errata.rockylinux.org/RLSA-2025:16116",
-                      "https://linux.oracle.com/cve/CVE-2025-32990.html",
-                      "https://linux.oracle.com/errata/ELSA-2025-20606.html",
-                      "https://lists.debian.org/debian-lts-announce/2025/08/msg00005.html",
-                      "https://lists.gnupg.org/pipermail/gnutls-help/2025-July/004883.html",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2025-32990",
-                      "https://ubuntu.com/security/notices/USN-7635-1",
-                      "https://ubuntu.com/security/notices/USN-7742-1",
-                      "https://www.cve.org/CVERecord?id=CVE-2025-32990"
-                    ],
-                    "severity": "HIGH",
-                    "suppressed": false,
-                    "title": "gnutls: Vulnerability in GnuTLS certtool template parsing"
-                  },
-                  {
-                    "cve": "CVE-2024-12243",
-                    "cvss": {
-                      "redhat": {
-                        "v3score": "5.3",
-                        "v3vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-407"
-                    ],
-                    "description": "A flaw was found in GnuTLS, which relies on libtasn1 for ASN.1 data processing. Due to an inefficient algorithm in libtasn1, decoding certain DER-encoded certificate data can take excessive time, leading to increased resource consumption. This flaw allows a remote attacker to send a specially crafted certificate, causing GnuTLS to become unresponsive or slow, resulting in a denial-of-service condition.",
-                    "diffID": "sha256:a499da141b419b2e97ed40192951a05fc37fadec129a55e1de03773e23fff97b",
-                    "fixedVersions": [
-                      "3.7.1-5+deb11u7"
-                    ],
-                    "installedVersion": "3.7.1-5+deb11u4",
-                    "packageName": "libgnutls30",
-                    "purl": "pkg:deb/debian/libgnutls30@3.7.1-5%2Bdeb11u4?arch=arm64&distro=debian-11.9",
-                    "references": [
-                      "https://access.redhat.com/errata/RHSA-2025:17361",
-                      "https://access.redhat.com/errata/RHSA-2025:4051",
-                      "https://access.redhat.com/errata/RHSA-2025:7076",
-                      "https://access.redhat.com/errata/RHSA-2025:8020",
-                      "https://access.redhat.com/errata/RHSA-2025:8385",
-                      "https://access.redhat.com/security/cve/CVE-2024-12243",
-                      "https://bugzilla.redhat.com/2344615",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2344615",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-12243",
-                      "https://errata.almalinux.org/8/ALSA-2025-4051.html",
-                      "https://errata.rockylinux.org/RLSA-2025:7076",
-                      "https://gitlab.com/gnutls/libtasn1/-/issues/52",
-                      "https://linux.oracle.com/cve/CVE-2024-12243.html",
-                      "https://linux.oracle.com/errata/ELSA-2025-7076.html",
-                      "https://lists.debian.org/debian-lts-announce/2025/02/msg00027.html",
-                      "https://lists.gnupg.org/pipermail/gnutls-help/2025-February/004875.html",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2024-12243",
-                      "https://security.netapp.com/advisory/ntap-20250523-0002/",
-                      "https://ubuntu.com/security/notices/USN-7281-1",
-                      "https://www.cve.org/CVERecord?id=CVE-2024-12243",
-                      "https://www.gnutls.org/security-new.html#GNUTLS-SA-2025-02-07"
-                    ],
-                    "severity": "MEDIUM",
-                    "suppressed": false,
-                    "title": "gnutls: GnuTLS Impacted by Inefficient DER Decoding in libtasn1 Leading to Remote DoS"
-                  },
-                  {
-                    "cve": "CVE-2024-28834",
-                    "cvss": {
-                      "redhat": {
-                        "v3score": "5.3",
-                        "v3vector": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-327"
-                    ],
-                    "description": "A flaw was found in GnuTLS. The Minerva attack is a cryptographic vulnerability that exploits deterministic behavior in systems like GnuTLS, leading to side-channel leaks. In specific scenarios, such as when using the GNUTLS_PRIVKEY_FLAG_REPRODUCIBLE flag, it can result in a noticeable step in nonce size from 513 to 512 bits, exposing a potential timing side-channel.",
-                    "diffID": "sha256:a499da141b419b2e97ed40192951a05fc37fadec129a55e1de03773e23fff97b",
-                    "fixedVersions": [
-                      "3.7.1-5+deb11u6"
-                    ],
-                    "installedVersion": "3.7.1-5+deb11u4",
-                    "packageName": "libgnutls30",
-                    "purl": "pkg:deb/debian/libgnutls30@3.7.1-5%2Bdeb11u4?arch=arm64&distro=debian-11.9",
-                    "references": [
-                      "http://www.openwall.com/lists/oss-security/2024/03/22/1",
-                      "http://www.openwall.com/lists/oss-security/2024/03/22/2",
-                      "https://access.redhat.com/errata/RHSA-2024:1784",
-                      "https://access.redhat.com/errata/RHSA-2024:1879",
-                      "https://access.redhat.com/errata/RHSA-2024:1997",
-                      "https://access.redhat.com/errata/RHSA-2024:2044",
-                      "https://access.redhat.com/errata/RHSA-2024:2570",
-                      "https://access.redhat.com/errata/RHSA-2024:2889",
-                      "https://access.redhat.com/security/cve/CVE-2024-28834",
-                      "https://bugzilla.redhat.com/2269228",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2269084",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2269228",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-28834",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-28835",
-                      "https://errata.almalinux.org/8/ALSA-2024-1784.html",
-                      "https://errata.rockylinux.org/RLSA-2024:2570",
-                      "https://linux.oracle.com/cve/CVE-2024-28834.html",
-                      "https://linux.oracle.com/errata/ELSA-2024-2570.html",
-                      "https://lists.debian.org/debian-lts-announce/2024/09/msg00019.html",
-                      "https://lists.gnupg.org/pipermail/gnutls-help/2024-March/004845.html",
-                      "https://minerva.crocs.fi.muni.cz/",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2024-28834",
-                      "https://people.redhat.com/~hkario/marvin/",
-                      "https://security.netapp.com/advisory/ntap-20240524-0004/",
-                      "https://ubuntu.com/security/notices/USN-6733-1",
-                      "https://ubuntu.com/security/notices/USN-6733-2",
-                      "https://www.cve.org/CVERecord?id=CVE-2024-28834",
-                      "https://www.gnutls.org/security-new.html#GNUTLS-SA-2023-12-04"
-                    ],
-                    "severity": "MEDIUM",
-                    "suppressed": false,
-                    "title": "gnutls: vulnerable to Minerva side-channel information leak"
-                  },
-                  {
-                    "cve": "CVE-2024-28835",
-                    "cvss": {
-                      "redhat": {
-                        "v3score": "5",
-                        "v3vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:H"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-248"
-                    ],
-                    "description": "A flaw has been discovered in GnuTLS where an application crash can be induced when attempting to verify a specially crafted .pem bundle using the \"certtool --verify-chain\" command.",
-                    "diffID": "sha256:a499da141b419b2e97ed40192951a05fc37fadec129a55e1de03773e23fff97b",
-                    "fixedVersions": [
-                      "3.7.1-5+deb11u6"
-                    ],
-                    "installedVersion": "3.7.1-5+deb11u4",
-                    "packageName": "libgnutls30",
-                    "purl": "pkg:deb/debian/libgnutls30@3.7.1-5%2Bdeb11u4?arch=arm64&distro=debian-11.9",
-                    "references": [
-                      "http://www.openwall.com/lists/oss-security/2024/03/22/1",
-                      "http://www.openwall.com/lists/oss-security/2024/03/22/2",
-                      "https://access.redhat.com/errata/RHSA-2024:1879",
-                      "https://access.redhat.com/errata/RHSA-2024:2570",
-                      "https://access.redhat.com/errata/RHSA-2024:2889",
-                      "https://access.redhat.com/security/cve/CVE-2024-28835",
-                      "https://bugzilla.redhat.com/2269084",
-                      "https://bugzilla.redhat.com/2269228",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2269084",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-28834",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-28835",
-                      "https://errata.almalinux.org/9/ALSA-2024-2570.html",
-                      "https://errata.rockylinux.org/RLSA-2024:2570",
-                      "https://linux.oracle.com/cve/CVE-2024-28835.html",
-                      "https://linux.oracle.com/errata/ELSA-2024-2570.html",
-                      "https://lists.debian.org/debian-lts-announce/2024/09/msg00019.html",
-                      "https://lists.gnupg.org/pipermail/gnutls-help/2024-March/004845.html",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2024-28835",
-                      "https://security.netapp.com/advisory/ntap-20241122-0009/",
-                      "https://ubuntu.com/security/notices/USN-6733-1",
-                      "https://ubuntu.com/security/notices/USN-6733-2",
-                      "https://www.cve.org/CVERecord?id=CVE-2024-28835",
-                      "https://www.gnutls.org/security-new.html#GNUTLS-SA-2024-01-23"
-                    ],
-                    "severity": "MEDIUM",
-                    "suppressed": false,
-                    "title": "gnutls: potential crash during chain building/verification"
-                  },
-                  {
-                    "cve": "CVE-2025-6395",
-                    "cvss": {
-                      "redhat": {
-                        "v3score": "6.5",
-                        "v3vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-476"
-                    ],
-                    "description": "A NULL pointer dereference flaw was found in the GnuTLS software in _gnutls_figure_common_ciphersuite().",
-                    "diffID": "sha256:a499da141b419b2e97ed40192951a05fc37fadec129a55e1de03773e23fff97b",
-                    "fixedVersions": [
-                      "3.7.1-5+deb11u8"
-                    ],
-                    "installedVersion": "3.7.1-5+deb11u4",
-                    "packageName": "libgnutls30",
-                    "purl": "pkg:deb/debian/libgnutls30@3.7.1-5%2Bdeb11u4?arch=arm64&distro=debian-11.9",
-                    "references": [
-                      "http://www.openwall.com/lists/oss-security/2025/07/11/3",
-                      "https://access.redhat.com/errata/RHSA-2025:16115",
-                      "https://access.redhat.com/errata/RHSA-2025:16116",
-                      "https://access.redhat.com/errata/RHSA-2025:17181",
-                      "https://access.redhat.com/errata/RHSA-2025:17348",
-                      "https://access.redhat.com/errata/RHSA-2025:17361",
-                      "https://access.redhat.com/errata/RHSA-2025:17415",
-                      "https://access.redhat.com/errata/RHSA-2025:19088",
-                      "https://access.redhat.com/errata/RHSA-2025:22529",
-                      "https://access.redhat.com/security/cve/CVE-2025-6395",
-                      "https://bugzilla.redhat.com/2359620",
-                      "https://bugzilla.redhat.com/2359622",
-                      "https://bugzilla.redhat.com/2376755",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2359620",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2359621",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2359622",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2376755",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-32988",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-32989",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-32990",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-6395",
-                      "https://errata.almalinux.org/8/ALSA-2025-17415.html",
-                      "https://errata.rockylinux.org/RLSA-2025:16116",
-                      "https://linux.oracle.com/cve/CVE-2025-6395.html",
-                      "https://linux.oracle.com/errata/ELSA-2025-20606.html",
-                      "https://lists.debian.org/debian-lts-announce/2025/08/msg00005.html",
-                      "https://lists.gnupg.org/pipermail/gnutls-help/2025-July/004883.html",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2025-6395",
-                      "https://ubuntu.com/security/notices/USN-7635-1",
-                      "https://ubuntu.com/security/notices/USN-7742-1",
-                      "https://www.cve.org/CVERecord?id=CVE-2025-6395"
-                    ],
-                    "severity": "MEDIUM",
-                    "suppressed": false,
-                    "title": "gnutls: NULL pointer dereference in _gnutls_figure_common_ciphersuite()"
-                  },
-                  {
-                    "cve": "CVE-2025-9820",
-                    "cvss": {
-                      "redhat": {
-                        "v3score": "4",
-                        "v3vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-121"
-                    ],
-                    "description": "A flaw was found in the GnuTLS library, specifically in the gnutls_pkcs11_token_init() function that handles PKCS#11 token initialization. When a token label longer than expected is processed, the function writes past the end of a fixed-size stack buffer. This programming error can cause the application using GnuTLS to crash or, in certain conditions, be exploited for code execution. As a result, systems or applications relying on GnuTLS may be vulnerable to a denial of service or local privilege escalation attacks.",
-                    "diffID": "sha256:a499da141b419b2e97ed40192951a05fc37fadec129a55e1de03773e23fff97b",
-                    "installedVersion": "3.7.1-5+deb11u4",
-                    "packageName": "libgnutls30",
-                    "purl": "pkg:deb/debian/libgnutls30@3.7.1-5%2Bdeb11u4?arch=arm64&distro=debian-11.9",
-                    "references": [
-                      "http://www.openwall.com/lists/oss-security/2025/11/20/2",
-                      "https://access.redhat.com/security/cve/CVE-2025-9820",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2392528",
-                      "https://gitlab.com/gnutls/gnutls/-/commit/1d56f96f6ab5034d677136b9d50b5a75dff0faf5",
-                      "https://gitlab.com/gnutls/gnutls/-/issues/1732",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2025-9820",
-                      "https://www.cve.org/CVERecord?id=CVE-2025-9820",
-                      "https://www.gnutls.org/security-new.html#GNUTLS-SA-2025-11-18"
-                    ],
-                    "severity": "MEDIUM",
-                    "suppressed": false,
-                    "title": "gnutls: Stack-based Buffer Overflow in gnutls_pkcs11_token_init() Function"
-                  },
-                  {
-                    "cve": "CVE-2011-3389",
-                    "cvss": {
-                      "nvd": {
-                        "v3score": "0",
-                        "v3vector": ""
-                      },
-                      "redhat": {
-                        "v3score": "0",
-                        "v3vector": ""
-                      }
-                    },
-                    "cwes": [
-                      "CWE-326"
-                    ],
-                    "description": "The SSL protocol, as used in certain configurations in Microsoft Windows and Microsoft Internet Explorer, Mozilla Firefox, Google Chrome, Opera, and other products, encrypts data by using CBC mode with chained initialization vectors, which allows man-in-the-middle attackers to obtain plaintext HTTP headers via a blockwise chosen-boundary attack (BCBA) on an HTTPS session, in conjunction with JavaScript code that uses (1) the HTML5 WebSocket API, (2) the Java URLConnection API, or (3) the Silverlight WebClient API, aka a \"BEAST\" attack.",
-                    "diffID": "sha256:a499da141b419b2e97ed40192951a05fc37fadec129a55e1de03773e23fff97b",
-                    "installedVersion": "3.7.1-5+deb11u4",
-                    "packageName": "libgnutls30",
-                    "purl": "pkg:deb/debian/libgnutls30@3.7.1-5%2Bdeb11u4?arch=arm64&distro=debian-11.9",
-                    "references": [
-                      "http://arcticdog.wordpress.com/2012/08/29/beast-openssl-and-apache/",
-                      "http://blog.mozilla.com/security/2011/09/27/attack-against-tls-protected-communications/",
-                      "http://blogs.technet.com/b/msrc/archive/2011/09/26/microsoft-releases-security-advisory-2588513.aspx",
-                      "http://blogs.technet.com/b/srd/archive/2011/09/26/is-ssl-broken-more-about-security-advisory-2588513.aspx",
-                      "http://curl.haxx.se/docs/adv_20120124B.html",
-                      "http://downloads.asterisk.org/pub/security/AST-2016-001.html",
-                      "http://ekoparty.org/2011/juliano-rizzo.php",
-                      "http://eprint.iacr.org/2004/111",
-                      "http://eprint.iacr.org/2006/136",
-                      "http://googlechromereleases.blogspot.com/2011/10/chrome-stable-release.html",
-                      "http://isc.sans.edu/diary/SSL+TLS+part+3+/11635",
-                      "http://lists.apple.com/archives/Security-announce/2011//Oct/msg00001.html",
-                      "http://lists.apple.com/archives/Security-announce/2011//Oct/msg00002.html",
-                      "http://lists.apple.com/archives/security-announce/2012/Feb/msg00000.html",
-                      "http://lists.apple.com/archives/security-announce/2012/Jul/msg00001.html",
-                      "http://lists.apple.com/archives/security-announce/2012/May/msg00001.html",
-                      "http://lists.apple.com/archives/security-announce/2012/Sep/msg00004.html",
-                      "http://lists.apple.com/archives/security-announce/2013/Oct/msg00004.html",
-                      "http://lists.opensuse.org/opensuse-security-announce/2012-01/msg00049.html",
-                      "http://lists.opensuse.org/opensuse-security-announce/2012-01/msg00051.html",
-                      "http://lists.opensuse.org/opensuse-security-announce/2012-05/msg00009.html",
-                      "http://lists.opensuse.org/opensuse-security-announce/2020-01/msg00040.html",
-                      "http://marc.info/?l=bugtraq&m=132750579901589&w=2",
-                      "http://marc.info/?l=bugtraq&m=132872385320240&w=2",
-                      "http://marc.info/?l=bugtraq&m=133365109612558&w=2",
-                      "http://marc.info/?l=bugtraq&m=133728004526190&w=2",
-                      "http://marc.info/?l=bugtraq&m=134254866602253&w=2",
-                      "http://marc.info/?l=bugtraq&m=134254957702612&w=2",
-                      "http://my.opera.com/securitygroup/blog/2011/09/28/the-beast-ssl-tls-issue",
-                      "http://osvdb.org/74829",
-                      "http://rhn.redhat.com/errata/RHSA-2012-0508.html",
-                      "http://rhn.redhat.com/errata/RHSA-2013-1455.html",
-                      "http://secunia.com/advisories/45791",
-                      "http://secunia.com/advisories/47998",
-                      "http://secunia.com/advisories/48256",
-                      "http://secunia.com/advisories/48692",
-                      "http://secunia.com/advisories/48915",
-                      "http://secunia.com/advisories/48948",
-                      "http://secunia.com/advisories/49198",
-                      "http://secunia.com/advisories/55322",
-                      "http://secunia.com/advisories/55350",
-                      "http://secunia.com/advisories/55351",
-                      "http://security.gentoo.org/glsa/glsa-201203-02.xml",
-                      "http://security.gentoo.org/glsa/glsa-201406-32.xml",
-                      "http://support.apple.com/kb/HT4999",
-                      "http://support.apple.com/kb/HT5001",
-                      "http://support.apple.com/kb/HT5130",
-                      "http://support.apple.com/kb/HT5281",
-                      "http://support.apple.com/kb/HT5501",
-                      "http://support.apple.com/kb/HT6150",
-                      "http://technet.microsoft.com/security/advisory/2588513",
-                      "http://vnhacker.blogspot.com/2011/09/beast.html",
-                      "http://www.apcmedia.com/salestools/SJHN-7RKGNM/SJHN-7RKGNM_R4_EN.pdf",
-                      "http://www.debian.org/security/2012/dsa-2398",
-                      "http://www.educatedguesswork.org/2011/09/security_impact_of_the_rizzodu.html",
-                      "http://www.ibm.com/developerworks/java/jdk/alerts/",
-                      "http://www.imperialviolet.org/2011/09/23/chromeandbeast.html",
-                      "http://www.insecure.cl/Beast-SSL.rar",
-                      "http://www.kb.cert.org/vuls/id/864643",
-                      "http://www.mandriva.com/security/advisories?name=MDVSA-2012:058",
-                      "http://www.opera.com/docs/changelogs/mac/1151/",
-                      "http://www.opera.com/docs/changelogs/mac/1160/",
-                      "http://www.opera.com/docs/changelogs/unix/1151/",
-                      "http://www.opera.com/docs/changelogs/unix/1160/",
-                      "http://www.opera.com/docs/changelogs/windows/1151/",
-                      "http://www.opera.com/docs/changelogs/windows/1160/",
-                      "http://www.opera.com/support/kb/view/1004/",
-                      "http://www.oracle.com/technetwork/topics/security/cpujan2015-1972971.html",
-                      "http://www.oracle.com/technetwork/topics/security/cpujul2015-2367936.html",
-                      "http://www.oracle.com/technetwork/topics/security/javacpuoct2011-443431.html",
-                      "http://www.redhat.com/support/errata/RHSA-2011-1384.html",
-                      "http://www.redhat.com/support/errata/RHSA-2012-0006.html",
-                      "http://www.securityfocus.com/bid/49388",
-                      "http://www.securityfocus.com/bid/49778",
-                      "http://www.securitytracker.com/id/1029190",
-                      "http://www.securitytracker.com/id?1025997",
-                      "http://www.securitytracker.com/id?1026103",
-                      "http://www.securitytracker.com/id?1026704",
-                      "http://www.ubuntu.com/usn/USN-1263-1",
-                      "http://www.us-cert.gov/cas/techalerts/TA12-010A.html",
-                      "https://access.redhat.com/security/cve/CVE-2011-3389",
-                      "https://blogs.oracle.com/sunsecurity/entry/multiple_vulnerabilities_in_fetchmail",
-                      "https://bugzilla.novell.com/show_bug.cgi?id=719047",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=737506",
-                      "https://cert-portal.siemens.com/productcert/pdf/ssa-556833.pdf",
-                      "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2012/ms12-006",
-                      "https://h20564.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c03839862",
-                      "https://hermes.opensuse.org/messages/13154861",
-                      "https://hermes.opensuse.org/messages/13155432",
-                      "https://ics-cert.us-cert.gov/advisories/ICSMA-18-058-02",
-                      "https://linux.oracle.com/cve/CVE-2011-3389.html",
-                      "https://linux.oracle.com/errata/ELSA-2011-1380.html",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2011-3389",
-                      "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14752",
-                      "https://ubuntu.com/security/notices/USN-1263-1",
-                      "https://www.cve.org/CVERecord?id=CVE-2011-3389"
-                    ],
-                    "severity": "LOW",
-                    "suppressed": false,
-                    "title": "HTTPS: block-wise chosen-plaintext attack against SSL/TLS (BEAST)"
-                  },
-                  {
-                    "cve": "CVE-2024-37371",
-                    "cvss": {
-                      "nvd": {
-                        "v3score": "9.1",
-                        "v3vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H"
-                      },
-                      "redhat": {
-                        "v3score": "6.5",
-                        "v3vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-125"
-                    ],
-                    "description": "In MIT Kerberos 5 (aka krb5) before 1.21.3, an attacker can cause invalid memory reads during GSS message token handling by sending message tokens with invalid length fields.",
-                    "diffID": "sha256:a499da141b419b2e97ed40192951a05fc37fadec129a55e1de03773e23fff97b",
-                    "fixedVersions": [
-                      "1.18.3-6+deb11u5"
-                    ],
-                    "installedVersion": "1.18.3-6+deb11u4",
-                    "packageName": "libgssapi-krb5-2",
-                    "purl": "pkg:deb/debian/libgssapi-krb5-2@1.18.3-6%2Bdeb11u4?arch=arm64&distro=debian-11.9",
-                    "references": [
-                      "https://access.redhat.com/errata/RHSA-2025:1673",
-                      "https://access.redhat.com/security/cve/CVE-2024-37371",
-                      "https://bugzilla.redhat.com/2294581",
-                      "https://bugzilla.redhat.com/2294676",
-                      "https://bugzilla.redhat.com/2301888",
-                      "https://bugzilla.redhat.com/2318857",
-                      "https://bugzilla.redhat.com/2318858",
-                      "https://bugzilla.redhat.com/2318870",
-                      "https://bugzilla.redhat.com/2318873",
-                      "https://bugzilla.redhat.com/2318874",
-                      "https://bugzilla.redhat.com/2318876",
-                      "https://bugzilla.redhat.com/2318882",
-                      "https://bugzilla.redhat.com/2318883",
-                      "https://bugzilla.redhat.com/2318884",
-                      "https://bugzilla.redhat.com/2318885",
-                      "https://bugzilla.redhat.com/2318886",
-                      "https://bugzilla.redhat.com/2318897",
-                      "https://bugzilla.redhat.com/2318900",
-                      "https://bugzilla.redhat.com/2318905",
-                      "https://bugzilla.redhat.com/2318914",
-                      "https://bugzilla.redhat.com/2318922",
-                      "https://bugzilla.redhat.com/2318923",
-                      "https://bugzilla.redhat.com/2318925",
-                      "https://bugzilla.redhat.com/2318926",
-                      "https://bugzilla.redhat.com/2318927",
-                      "https://bugzilla.redhat.com/2331191",
-                      "https://bugzilla.redhat.com/2339218",
-                      "https://bugzilla.redhat.com/2339220",
-                      "https://bugzilla.redhat.com/2339221",
-                      "https://bugzilla.redhat.com/2339226",
-                      "https://bugzilla.redhat.com/2339231",
-                      "https://bugzilla.redhat.com/2339236",
-                      "https://bugzilla.redhat.com/2339238",
-                      "https://bugzilla.redhat.com/2339243",
-                      "https://bugzilla.redhat.com/2339247",
-                      "https://bugzilla.redhat.com/2339252",
-                      "https://bugzilla.redhat.com/2339259",
-                      "https://bugzilla.redhat.com/2339266",
-                      "https://bugzilla.redhat.com/2339270",
-                      "https://bugzilla.redhat.com/2339271",
-                      "https://bugzilla.redhat.com/2339275",
-                      "https://bugzilla.redhat.com/2339277",
-                      "https://bugzilla.redhat.com/2339281",
-                      "https://bugzilla.redhat.com/2339284",
-                      "https://bugzilla.redhat.com/2339291",
-                      "https://bugzilla.redhat.com/2339293",
-                      "https://bugzilla.redhat.com/2339295",
-                      "https://bugzilla.redhat.com/2339299",
-                      "https://bugzilla.redhat.com/2339300",
-                      "https://bugzilla.redhat.com/2339304",
-                      "https://bugzilla.redhat.com/2339305",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2294581",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2294676",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2301888",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2318857",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2318858",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2318870",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2318873",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2318874",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2318876",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2318882",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2318883",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2318884",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2318885",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2318886",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2318897",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2318900",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2318905",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2318914",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2318922",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2318923",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2318925",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2318926",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2318927",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2331191",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2339218",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2339220",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2339221",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2339226",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2339231",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2339236",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2339238",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2339243",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2339247",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2339252",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2339259",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2339266",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2339270",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2339271",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2339275",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2339277",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2339281",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2339284",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2339291",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2339293",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2339295",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2339299",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2339300",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2339304",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2339305",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-11053",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-21193",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-21194",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-21196",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-21197",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-21198",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-21199",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-21201",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-21203",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-21212",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-21213",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-21218",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-21219",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-21230",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-21231",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-21236",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-21237",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-21238",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-21239",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-21241",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-21247",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-37371",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-5535",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-7264",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21490",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21491",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21494",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21497",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21500",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21501",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21503",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21504",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21505",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21518",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21519",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21520",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21521",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21522",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21523",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21525",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21529",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21531",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21534",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21536",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21540",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21543",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21546",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21555",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21559",
-                      "https://errata.almalinux.org/8/ALSA-2025-1673.html",
-                      "https://errata.rockylinux.org/RLSA-2025:1671",
-                      "https://github.com/krb5/krb5/commit/55fbf435edbe2e92dd8101669b1ce7144bc96fef",
-                      "https://linux.oracle.com/cve/CVE-2024-37371.html",
-                      "https://linux.oracle.com/errata/ELSA-2025-1673.html",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2024-37371",
-                      "https://security.netapp.com/advisory/ntap-20241108-0009/",
-                      "https://security.netapp.com/advisory/ntap-20250124-0010/",
-                      "https://ubuntu.com/security/notices/USN-6947-1",
-                      "https://web.mit.edu/kerberos/www/advisories/",
-                      "https://web.mit.edu/kerberos/www/krb5-1.21/",
-                      "https://www.cve.org/CVERecord?id=CVE-2024-37371",
-                      "https://www.oracle.com/security-alerts/cpujan2025.html#AppendixMSQL"
-                    ],
-                    "severity": "CRITICAL",
-                    "suppressed": false,
-                    "title": "krb5: GSS message token handling"
-                  },
-                  {
-                    "cve": "CVE-2024-37370",
-                    "cvss": {
-                      "nvd": {
-                        "v3score": "7.5",
-                        "v3vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N"
-                      },
-                      "redhat": {
-                        "v3score": "7.5",
-                        "v3vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-345"
-                    ],
-                    "description": "In MIT Kerberos 5 (aka krb5) before 1.21.3, an attacker can modify the plaintext Extra Count field of a confidential GSS krb5 wrap token, causing the unwrapped token to appear truncated to the application.",
-                    "diffID": "sha256:a499da141b419b2e97ed40192951a05fc37fadec129a55e1de03773e23fff97b",
-                    "fixedVersions": [
-                      "1.18.3-6+deb11u5"
-                    ],
-                    "installedVersion": "1.18.3-6+deb11u4",
-                    "packageName": "libgssapi-krb5-2",
-                    "purl": "pkg:deb/debian/libgssapi-krb5-2@1.18.3-6%2Bdeb11u4?arch=arm64&distro=debian-11.9",
-                    "references": [
-                      "https://access.redhat.com/errata/RHSA-2024:5312",
-                      "https://access.redhat.com/security/cve/CVE-2024-37370",
-                      "https://bugzilla.redhat.com/2294676",
-                      "https://bugzilla.redhat.com/2294677",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2294676",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2294677",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-37370",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-37371",
-                      "https://errata.almalinux.org/8/ALSA-2024-5312.html",
-                      "https://errata.rockylinux.org/RLSA-2024:5312",
-                      "https://github.com/krb5/krb5/commit/55fbf435edbe2e92dd8101669b1ce7144bc96fef",
-                      "https://linux.oracle.com/cve/CVE-2024-37370.html",
-                      "https://linux.oracle.com/errata/ELSA-2024-6166.html",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2024-37370",
-                      "https://security.netapp.com/advisory/ntap-20241108-0007/",
-                      "https://ubuntu.com/security/notices/USN-6947-1",
-                      "https://web.mit.edu/kerberos/www/advisories/",
-                      "https://web.mit.edu/kerberos/www/krb5-1.21/",
-                      "https://www.cve.org/CVERecord?id=CVE-2024-37370"
-                    ],
-                    "severity": "HIGH",
-                    "suppressed": false,
-                    "title": "krb5: GSS message token handling"
-                  },
-                  {
-                    "cve": "CVE-2025-24528",
-                    "cvss": {
-                      "redhat": {
-                        "v3score": "6.5",
-                        "v3vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-190"
-                    ],
-                    "description": "In MIT Kerberos 5 (aka krb5) before 1.22 (with incremental propagation), there is an integer overflow for a large update size to resize() in kdb_log.c. An authenticated attacker can cause an out-of-bounds write and kadmind daemon crash.",
-                    "diffID": "sha256:a499da141b419b2e97ed40192951a05fc37fadec129a55e1de03773e23fff97b",
-                    "fixedVersions": [
-                      "1.18.3-6+deb11u6"
-                    ],
-                    "installedVersion": "1.18.3-6+deb11u4",
-                    "packageName": "libgssapi-krb5-2",
-                    "purl": "pkg:deb/debian/libgssapi-krb5-2@1.18.3-6%2Bdeb11u4?arch=arm64&distro=debian-11.9",
-                    "references": [
-                      "https://access.redhat.com/errata/RHSA-2025:2722",
-                      "https://access.redhat.com/security/cve/CVE-2025-24528",
-                      "https://bugzilla.redhat.com/2342796",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2342796",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-24528",
-                      "https://errata.almalinux.org/8/ALSA-2025-2722.html",
-                      "https://errata.rockylinux.org/RLSA-2025:7067",
-                      "https://github.com/krb5/krb5/commit/78ceba024b64d49612375be4a12d1c066b0bfbd0",
-                      "https://github.com/krb5/krb5/compare/krb5-1.21.3-final...krb5-1.22-final",
-                      "https://linux.oracle.com/cve/CVE-2025-24528.html",
-                      "https://linux.oracle.com/errata/ELSA-2025-7067.html",
-                      "https://lists.debian.org/debian-lts-announce/2025/02/msg00029.html",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2025-24528",
-                      "https://ubuntu.com/security/notices/USN-7314-1",
-                      "https://www.cve.org/CVERecord?id=CVE-2025-24528"
-                    ],
-                    "severity": "MEDIUM",
-                    "suppressed": false,
-                    "title": "krb5: overflow when calculating ulog block size"
-                  },
-                  {
-                    "cve": "CVE-2025-3576",
-                    "cvss": {
-                      "redhat": {
-                        "v3score": "5.9",
-                        "v3vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-328"
-                    ],
-                    "description": "A vulnerability in the MIT Kerberos implementation allows GSSAPI-protected messages using RC4-HMAC-MD5 to be spoofed due to weaknesses in the MD5 checksum design. If RC4 is preferred over stronger encryption types, an attacker could exploit MD5 collisions to forge message integrity codes. This may lead to unauthorized message tampering.",
-                    "diffID": "sha256:a499da141b419b2e97ed40192951a05fc37fadec129a55e1de03773e23fff97b",
-                    "fixedVersions": [
-                      "1.18.3-6+deb11u7"
-                    ],
-                    "installedVersion": "1.18.3-6+deb11u4",
-                    "packageName": "libgssapi-krb5-2",
-                    "purl": "pkg:deb/debian/libgssapi-krb5-2@1.18.3-6%2Bdeb11u4?arch=arm64&distro=debian-11.9",
-                    "references": [
-                      "https://access.redhat.com/errata/RHSA-2025:11487",
-                      "https://access.redhat.com/errata/RHSA-2025:13664",
-                      "https://access.redhat.com/errata/RHSA-2025:13777",
-                      "https://access.redhat.com/errata/RHSA-2025:15000",
-                      "https://access.redhat.com/errata/RHSA-2025:15001",
-                      "https://access.redhat.com/errata/RHSA-2025:15002",
-                      "https://access.redhat.com/errata/RHSA-2025:15003",
-                      "https://access.redhat.com/errata/RHSA-2025:15004",
-                      "https://access.redhat.com/errata/RHSA-2025:8411",
-                      "https://access.redhat.com/errata/RHSA-2025:9418",
-                      "https://access.redhat.com/errata/RHSA-2025:9430",
-                      "https://access.redhat.com/security/cve/CVE-2025-3576",
-                      "https://bugzilla.redhat.com/2359465",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2359465",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-3576",
-                      "https://errata.almalinux.org/8/ALSA-2025-8411.html",
-                      "https://errata.rockylinux.org/RLSA-2025:9430",
-                      "https://linux.oracle.com/cve/CVE-2025-3576.html",
-                      "https://linux.oracle.com/errata/ELSA-2025-9430.html",
-                      "https://lists.debian.org/debian-lts-announce/2025/05/msg00047.html",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2025-3576",
-                      "https://ubuntu.com/security/notices/USN-7542-1",
-                      "https://web.mit.edu/kerberos/krb5-1.22/krb5-1.22.html",
-                      "https://www.cve.org/CVERecord?id=CVE-2025-3576"
-                    ],
-                    "severity": "MEDIUM",
-                    "suppressed": false,
-                    "title": "krb5: Kerberos RC4-HMAC-MD5 Checksum Vulnerability Enabling Message Spoofing via MD5 Collisions"
-                  },
-                  {
-                    "cve": "CVE-2018-5709",
-                    "cvss": {
-                      "nvd": {
-                        "v3score": "7.5",
-                        "v3vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N"
-                      },
-                      "redhat": {
-                        "v3score": "6.3",
-                        "v3vector": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-190"
-                    ],
-                    "description": "An issue was discovered in MIT Kerberos 5 (aka krb5) through 1.16. There is a variable \"dbentry->n_key_data\" in kadmin/dbutil/dump.c that can store 16-bit data but unknowingly the developer has assigned a \"u4\" variable to it, which is for 32-bit data. An attacker can use this vulnerability to affect other artifacts of the database as we know that a Kerberos database dump file contains trusted data.",
-                    "diffID": "sha256:a499da141b419b2e97ed40192951a05fc37fadec129a55e1de03773e23fff97b",
-                    "installedVersion": "1.18.3-6+deb11u4",
-                    "packageName": "libgssapi-krb5-2",
-                    "purl": "pkg:deb/debian/libgssapi-krb5-2@1.18.3-6%2Bdeb11u4?arch=arm64&distro=debian-11.9",
-                    "references": [
-                      "https://access.redhat.com/security/cve/CVE-2018-5709",
-                      "https://github.com/poojamnit/Kerberos-V5-1.16-Vulnerabilities/tree/master/Integer%20Overflow",
-                      "https://lists.apache.org/thread.html/rf9fa47ab66495c78bb4120b0754dd9531ca2ff0430f6685ac9b07772%40%3Cdev.mina.apache.org%3E",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2018-5709",
-                      "https://www.cve.org/CVERecord?id=CVE-2018-5709"
-                    ],
-                    "severity": "LOW",
-                    "suppressed": false,
-                    "title": "krb5: integer overflow in dbentry->n_key_data in kadmin/dbutil/dump.c"
-                  },
-                  {
-                    "cve": "CVE-2024-26458",
-                    "cvss": {
-                      "redhat": {
-                        "v3score": "5.9",
-                        "v3vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-401"
-                    ],
-                    "description": "Kerberos 5 (aka krb5) 1.21.2 contains a memory leak in /krb5/src/lib/rpc/pmap_rmt.c.",
-                    "diffID": "sha256:a499da141b419b2e97ed40192951a05fc37fadec129a55e1de03773e23fff97b",
-                    "installedVersion": "1.18.3-6+deb11u4",
-                    "packageName": "libgssapi-krb5-2",
-                    "purl": "pkg:deb/debian/libgssapi-krb5-2@1.18.3-6%2Bdeb11u4?arch=arm64&distro=debian-11.9",
-                    "references": [
-                      "https://access.redhat.com/errata/RHSA-2024:3268",
-                      "https://access.redhat.com/security/cve/CVE-2024-26458",
-                      "https://bugzilla.redhat.com/2266731",
-                      "https://bugzilla.redhat.com/2266740",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2266731",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2266740",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26458",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26461",
-                      "https://errata.almalinux.org/8/ALSA-2024-3268.html",
-                      "https://errata.rockylinux.org/RLSA-2024:3268",
-                      "https://github.com/LuMingYinDetect/krb5_defects/blob/main/krb5_detect_1.md",
-                      "https://linux.oracle.com/cve/CVE-2024-26458.html",
-                      "https://linux.oracle.com/errata/ELSA-2024-9331.html",
-                      "https://mailman.mit.edu/pipermail/kerberos/2024-March/023095.html",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2024-26458",
-                      "https://security.netapp.com/advisory/ntap-20240415-0010/",
-                      "https://ubuntu.com/security/notices/USN-7314-1",
-                      "https://www.cve.org/CVERecord?id=CVE-2024-26458"
-                    ],
-                    "severity": "LOW",
-                    "suppressed": false,
-                    "title": "krb5: Memory leak at /krb5/src/lib/rpc/pmap_rmt.c"
-                  },
-                  {
-                    "cve": "CVE-2024-26461",
-                    "cvss": {
-                      "redhat": {
-                        "v3score": "5.9",
-                        "v3vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-770"
-                    ],
-                    "description": "Kerberos 5 (aka krb5) 1.21.2 contains a memory leak vulnerability in /krb5/src/lib/gssapi/krb5/k5sealv3.c.",
-                    "diffID": "sha256:a499da141b419b2e97ed40192951a05fc37fadec129a55e1de03773e23fff97b",
-                    "installedVersion": "1.18.3-6+deb11u4",
-                    "packageName": "libgssapi-krb5-2",
-                    "purl": "pkg:deb/debian/libgssapi-krb5-2@1.18.3-6%2Bdeb11u4?arch=arm64&distro=debian-11.9",
-                    "references": [
-                      "https://access.redhat.com/errata/RHSA-2024:3268",
-                      "https://access.redhat.com/security/cve/CVE-2024-26461",
-                      "https://bugzilla.redhat.com/2266731",
-                      "https://bugzilla.redhat.com/2266740",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2266731",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2266740",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26458",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26461",
-                      "https://errata.almalinux.org/8/ALSA-2024-3268.html",
-                      "https://errata.rockylinux.org/RLSA-2024:3268",
-                      "https://github.com/LuMingYinDetect/krb5_defects/blob/main/krb5_detect_2.md",
-                      "https://linux.oracle.com/cve/CVE-2024-26461.html",
-                      "https://linux.oracle.com/errata/ELSA-2024-9331.html",
-                      "https://mailman.mit.edu/pipermail/kerberos/2024-March/023095.html",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2024-26461",
-                      "https://security.netapp.com/advisory/ntap-20240415-0011/",
-                      "https://ubuntu.com/security/notices/USN-7314-1",
-                      "https://www.cve.org/CVERecord?id=CVE-2024-26461"
-                    ],
-                    "severity": "LOW",
-                    "suppressed": false,
-                    "title": "krb5: Memory leak at /krb5/src/lib/gssapi/krb5/k5sealv3.c"
-                  },
-                  {
-                    "cve": "CVE-2025-5222",
-                    "cvss": {
-                      "redhat": {
-                        "v3score": "7",
-                        "v3vector": "CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-120"
-                    ],
-                    "description": "A stack buffer overflow was found in Internationl components for unicode (ICU ). While running the genrb binary, the 'subtag' struct overflowed at the SRBRoot::addTag function. This issue may lead to memory corruption and local arbitrary code execution.",
-                    "diffID": "sha256:2f458857553769636f3c149c0c8d41acc63c9e24282823b0ea26869a635e9f48",
-                    "fixedVersions": [
-                      "67.1-7+deb11u1"
-                    ],
-                    "installedVersion": "67.1-7",
-                    "packageName": "libicu67",
-                    "purl": "pkg:deb/debian/libicu67@67.1-7?arch=arm64&distro=debian-11.9",
-                    "references": [
-                      "https://access.redhat.com/errata/RHSA-2025:11888",
-                      "https://access.redhat.com/errata/RHSA-2025:12083",
-                      "https://access.redhat.com/errata/RHSA-2025:12331",
-                      "https://access.redhat.com/errata/RHSA-2025:12332",
-                      "https://access.redhat.com/errata/RHSA-2025:12333",
-                      "https://access.redhat.com/security/cve/CVE-2025-5222",
-                      "https://bugzilla.redhat.com/2368600",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2368600",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-5222",
-                      "https://errata.almalinux.org/9/ALSA-2025-12083.html",
-                      "https://errata.rockylinux.org/RLSA-2025:12083",
-                      "https://linux.oracle.com/cve/CVE-2025-5222.html",
-                      "https://linux.oracle.com/errata/ELSA-2025-12083.html",
-                      "https://lists.debian.org/debian-lts-announce/2025/06/msg00015.html",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2025-5222",
-                      "https://www.cve.org/CVERecord?id=CVE-2025-5222"
-                    ],
-                    "severity": "HIGH",
-                    "suppressed": false,
-                    "title": "icu: Stack buffer overflow in the SRBRoot::addTag function"
-                  },
-                  {
-                    "cve": "CVE-2017-9937",
-                    "cvss": {
-                      "nvd": {
-                        "v3score": "6.5",
-                        "v3vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H"
-                      },
-                      "redhat": {
-                        "v3score": "3.3",
-                        "v3vector": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-119"
-                    ],
-                    "description": "In LibTIFF 4.0.8, there is a memory malloc failure in tif_jbig.c. A crafted TIFF document can lead to an abort resulting in a remote denial of service attack.",
-                    "diffID": "sha256:2f458857553769636f3c149c0c8d41acc63c9e24282823b0ea26869a635e9f48",
-                    "installedVersion": "2.1-3.1+b2",
-                    "packageName": "libjbig0",
-                    "purl": "pkg:deb/debian/libjbig0@2.1-3.1%2Bb2?arch=arm64&distro=debian-11.9",
-                    "references": [
-                      "http://bugzilla.maptools.org/show_bug.cgi?id=2707",
-                      "http://www.securityfocus.com/bid/99304",
-                      "https://access.redhat.com/security/cve/CVE-2017-9937",
-                      "https://lists.apache.org/thread.html/rf9fa47ab66495c78bb4120b0754dd9531ca2ff0430f6685ac9b07772%40%3Cdev.mina.apache.org%3E",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2017-9937",
-                      "https://ubuntu.com/security/notices/USN-5742-1",
-                      "https://www.cve.org/CVERecord?id=CVE-2017-9937"
-                    ],
-                    "severity": "LOW",
-                    "suppressed": false,
-                    "title": "libtiff: memory malloc failure in tif_jbig.c could cause DOS."
-                  },
-                  {
-                    "cve": "CVE-2021-46822",
-                    "cvss": {
-                      "nvd": {
-                        "v3score": "5.5",
-                        "v3vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H"
-                      },
-                      "redhat": {
-                        "v3score": "5.5",
-                        "v3vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-787"
-                    ],
-                    "description": "The PPM reader in libjpeg-turbo through 2.0.90 mishandles use of tjLoadImage for loading a 16-bit binary PPM file into a grayscale buffer and loading a 16-bit binary PGM file into an RGB buffer. This is related to a heap-based buffer overflow in the get_word_rgb_row function in rdppm.c.",
-                    "diffID": "sha256:2f458857553769636f3c149c0c8d41acc63c9e24282823b0ea26869a635e9f48",
-                    "installedVersion": "1:2.0.6-4",
-                    "packageName": "libjpeg62-turbo",
-                    "purl": "pkg:deb/debian/libjpeg62-turbo@2.0.6-4?arch=arm64&distro=debian-11.9&epoch=1",
-                    "references": [
-                      "https://access.redhat.com/errata/RHSA-2023:1068",
-                      "https://access.redhat.com/security/cve/CVE-2021-46822",
-                      "https://bugzilla.redhat.com/2100044",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2100044",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-46822",
-                      "https://errata.almalinux.org/9/ALSA-2023-1068.html",
-                      "https://errata.rockylinux.org/RLSA-2023:1068",
-                      "https://exchange.xforce.ibmcloud.com/vulnerabilities/221567",
-                      "https://github.com/libjpeg-turbo/libjpeg-turbo/commit/f35fd27ec641c42d6b115bfa595e483ec58188d2",
-                      "https://linux.oracle.com/cve/CVE-2021-46822.html",
-                      "https://linux.oracle.com/errata/ELSA-2023-1068.html",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2021-46822",
-                      "https://ubuntu.com/security/notices/USN-5631-1",
-                      "https://www.cve.org/CVERecord?id=CVE-2021-46822"
-                    ],
-                    "severity": "MEDIUM",
-                    "suppressed": false,
-                    "title": "libjpeg-turbo: heap buffer overflow in get_word_rgb_row() in rdppm.c"
-                  },
-                  {
-                    "cve": "CVE-2024-37371",
-                    "cvss": {
-                      "nvd": {
-                        "v3score": "9.1",
-                        "v3vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H"
-                      },
-                      "redhat": {
-                        "v3score": "6.5",
-                        "v3vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-125"
-                    ],
-                    "description": "In MIT Kerberos 5 (aka krb5) before 1.21.3, an attacker can cause invalid memory reads during GSS message token handling by sending message tokens with invalid length fields.",
-                    "diffID": "sha256:a499da141b419b2e97ed40192951a05fc37fadec129a55e1de03773e23fff97b",
-                    "fixedVersions": [
-                      "1.18.3-6+deb11u5"
-                    ],
-                    "installedVersion": "1.18.3-6+deb11u4",
-                    "packageName": "libk5crypto3",
-                    "purl": "pkg:deb/debian/libk5crypto3@1.18.3-6%2Bdeb11u4?arch=arm64&distro=debian-11.9",
-                    "references": [
-                      "https://access.redhat.com/errata/RHSA-2025:1673",
-                      "https://access.redhat.com/security/cve/CVE-2024-37371",
-                      "https://bugzilla.redhat.com/2294581",
-                      "https://bugzilla.redhat.com/2294676",
-                      "https://bugzilla.redhat.com/2301888",
-                      "https://bugzilla.redhat.com/2318857",
-                      "https://bugzilla.redhat.com/2318858",
-                      "https://bugzilla.redhat.com/2318870",
-                      "https://bugzilla.redhat.com/2318873",
-                      "https://bugzilla.redhat.com/2318874",
-                      "https://bugzilla.redhat.com/2318876",
-                      "https://bugzilla.redhat.com/2318882",
-                      "https://bugzilla.redhat.com/2318883",
-                      "https://bugzilla.redhat.com/2318884",
-                      "https://bugzilla.redhat.com/2318885",
-                      "https://bugzilla.redhat.com/2318886",
-                      "https://bugzilla.redhat.com/2318897",
-                      "https://bugzilla.redhat.com/2318900",
-                      "https://bugzilla.redhat.com/2318905",
-                      "https://bugzilla.redhat.com/2318914",
-                      "https://bugzilla.redhat.com/2318922",
-                      "https://bugzilla.redhat.com/2318923",
-                      "https://bugzilla.redhat.com/2318925",
-                      "https://bugzilla.redhat.com/2318926",
-                      "https://bugzilla.redhat.com/2318927",
-                      "https://bugzilla.redhat.com/2331191",
-                      "https://bugzilla.redhat.com/2339218",
-                      "https://bugzilla.redhat.com/2339220",
-                      "https://bugzilla.redhat.com/2339221",
-                      "https://bugzilla.redhat.com/2339226",
-                      "https://bugzilla.redhat.com/2339231",
-                      "https://bugzilla.redhat.com/2339236",
-                      "https://bugzilla.redhat.com/2339238",
-                      "https://bugzilla.redhat.com/2339243",
-                      "https://bugzilla.redhat.com/2339247",
-                      "https://bugzilla.redhat.com/2339252",
-                      "https://bugzilla.redhat.com/2339259",
-                      "https://bugzilla.redhat.com/2339266",
-                      "https://bugzilla.redhat.com/2339270",
-                      "https://bugzilla.redhat.com/2339271",
-                      "https://bugzilla.redhat.com/2339275",
-                      "https://bugzilla.redhat.com/2339277",
-                      "https://bugzilla.redhat.com/2339281",
-                      "https://bugzilla.redhat.com/2339284",
-                      "https://bugzilla.redhat.com/2339291",
-                      "https://bugzilla.redhat.com/2339293",
-                      "https://bugzilla.redhat.com/2339295",
-                      "https://bugzilla.redhat.com/2339299",
-                      "https://bugzilla.redhat.com/2339300",
-                      "https://bugzilla.redhat.com/2339304",
-                      "https://bugzilla.redhat.com/2339305",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2294581",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2294676",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2301888",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2318857",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2318858",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2318870",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2318873",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2318874",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2318876",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2318882",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2318883",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2318884",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2318885",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2318886",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2318897",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2318900",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2318905",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2318914",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2318922",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2318923",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2318925",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2318926",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2318927",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2331191",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2339218",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2339220",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2339221",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2339226",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2339231",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2339236",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2339238",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2339243",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2339247",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2339252",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2339259",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2339266",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2339270",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2339271",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2339275",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2339277",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2339281",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2339284",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2339291",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2339293",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2339295",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2339299",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2339300",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2339304",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2339305",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-11053",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-21193",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-21194",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-21196",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-21197",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-21198",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-21199",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-21201",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-21203",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-21212",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-21213",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-21218",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-21219",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-21230",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-21231",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-21236",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-21237",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-21238",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-21239",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-21241",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-21247",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-37371",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-5535",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-7264",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21490",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21491",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21494",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21497",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21500",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21501",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21503",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21504",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21505",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21518",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21519",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21520",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21521",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21522",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21523",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21525",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21529",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21531",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21534",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21536",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21540",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21543",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21546",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21555",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21559",
-                      "https://errata.almalinux.org/8/ALSA-2025-1673.html",
-                      "https://errata.rockylinux.org/RLSA-2025:1671",
-                      "https://github.com/krb5/krb5/commit/55fbf435edbe2e92dd8101669b1ce7144bc96fef",
-                      "https://linux.oracle.com/cve/CVE-2024-37371.html",
-                      "https://linux.oracle.com/errata/ELSA-2025-1673.html",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2024-37371",
-                      "https://security.netapp.com/advisory/ntap-20241108-0009/",
-                      "https://security.netapp.com/advisory/ntap-20250124-0010/",
-                      "https://ubuntu.com/security/notices/USN-6947-1",
-                      "https://web.mit.edu/kerberos/www/advisories/",
-                      "https://web.mit.edu/kerberos/www/krb5-1.21/",
-                      "https://www.cve.org/CVERecord?id=CVE-2024-37371",
-                      "https://www.oracle.com/security-alerts/cpujan2025.html#AppendixMSQL"
-                    ],
-                    "severity": "CRITICAL",
-                    "suppressed": false,
-                    "title": "krb5: GSS message token handling"
-                  },
-                  {
-                    "cve": "CVE-2024-37370",
-                    "cvss": {
-                      "nvd": {
-                        "v3score": "7.5",
-                        "v3vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N"
-                      },
-                      "redhat": {
-                        "v3score": "7.5",
-                        "v3vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-345"
-                    ],
-                    "description": "In MIT Kerberos 5 (aka krb5) before 1.21.3, an attacker can modify the plaintext Extra Count field of a confidential GSS krb5 wrap token, causing the unwrapped token to appear truncated to the application.",
-                    "diffID": "sha256:a499da141b419b2e97ed40192951a05fc37fadec129a55e1de03773e23fff97b",
-                    "fixedVersions": [
-                      "1.18.3-6+deb11u5"
-                    ],
-                    "installedVersion": "1.18.3-6+deb11u4",
-                    "packageName": "libk5crypto3",
-                    "purl": "pkg:deb/debian/libk5crypto3@1.18.3-6%2Bdeb11u4?arch=arm64&distro=debian-11.9",
-                    "references": [
-                      "https://access.redhat.com/errata/RHSA-2024:5312",
-                      "https://access.redhat.com/security/cve/CVE-2024-37370",
-                      "https://bugzilla.redhat.com/2294676",
-                      "https://bugzilla.redhat.com/2294677",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2294676",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2294677",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-37370",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-37371",
-                      "https://errata.almalinux.org/8/ALSA-2024-5312.html",
-                      "https://errata.rockylinux.org/RLSA-2024:5312",
-                      "https://github.com/krb5/krb5/commit/55fbf435edbe2e92dd8101669b1ce7144bc96fef",
-                      "https://linux.oracle.com/cve/CVE-2024-37370.html",
-                      "https://linux.oracle.com/errata/ELSA-2024-6166.html",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2024-37370",
-                      "https://security.netapp.com/advisory/ntap-20241108-0007/",
-                      "https://ubuntu.com/security/notices/USN-6947-1",
-                      "https://web.mit.edu/kerberos/www/advisories/",
-                      "https://web.mit.edu/kerberos/www/krb5-1.21/",
-                      "https://www.cve.org/CVERecord?id=CVE-2024-37370"
-                    ],
-                    "severity": "HIGH",
-                    "suppressed": false,
-                    "title": "krb5: GSS message token handling"
-                  },
-                  {
-                    "cve": "CVE-2025-24528",
-                    "cvss": {
-                      "redhat": {
-                        "v3score": "6.5",
-                        "v3vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-190"
-                    ],
-                    "description": "In MIT Kerberos 5 (aka krb5) before 1.22 (with incremental propagation), there is an integer overflow for a large update size to resize() in kdb_log.c. An authenticated attacker can cause an out-of-bounds write and kadmind daemon crash.",
-                    "diffID": "sha256:a499da141b419b2e97ed40192951a05fc37fadec129a55e1de03773e23fff97b",
-                    "fixedVersions": [
-                      "1.18.3-6+deb11u6"
-                    ],
-                    "installedVersion": "1.18.3-6+deb11u4",
-                    "packageName": "libk5crypto3",
-                    "purl": "pkg:deb/debian/libk5crypto3@1.18.3-6%2Bdeb11u4?arch=arm64&distro=debian-11.9",
-                    "references": [
-                      "https://access.redhat.com/errata/RHSA-2025:2722",
-                      "https://access.redhat.com/security/cve/CVE-2025-24528",
-                      "https://bugzilla.redhat.com/2342796",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2342796",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-24528",
-                      "https://errata.almalinux.org/8/ALSA-2025-2722.html",
-                      "https://errata.rockylinux.org/RLSA-2025:7067",
-                      "https://github.com/krb5/krb5/commit/78ceba024b64d49612375be4a12d1c066b0bfbd0",
-                      "https://github.com/krb5/krb5/compare/krb5-1.21.3-final...krb5-1.22-final",
-                      "https://linux.oracle.com/cve/CVE-2025-24528.html",
-                      "https://linux.oracle.com/errata/ELSA-2025-7067.html",
-                      "https://lists.debian.org/debian-lts-announce/2025/02/msg00029.html",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2025-24528",
-                      "https://ubuntu.com/security/notices/USN-7314-1",
-                      "https://www.cve.org/CVERecord?id=CVE-2025-24528"
-                    ],
-                    "severity": "MEDIUM",
-                    "suppressed": false,
-                    "title": "krb5: overflow when calculating ulog block size"
-                  },
-                  {
-                    "cve": "CVE-2025-3576",
-                    "cvss": {
-                      "redhat": {
-                        "v3score": "5.9",
-                        "v3vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-328"
-                    ],
-                    "description": "A vulnerability in the MIT Kerberos implementation allows GSSAPI-protected messages using RC4-HMAC-MD5 to be spoofed due to weaknesses in the MD5 checksum design. If RC4 is preferred over stronger encryption types, an attacker could exploit MD5 collisions to forge message integrity codes. This may lead to unauthorized message tampering.",
-                    "diffID": "sha256:a499da141b419b2e97ed40192951a05fc37fadec129a55e1de03773e23fff97b",
-                    "fixedVersions": [
-                      "1.18.3-6+deb11u7"
-                    ],
-                    "installedVersion": "1.18.3-6+deb11u4",
-                    "packageName": "libk5crypto3",
-                    "purl": "pkg:deb/debian/libk5crypto3@1.18.3-6%2Bdeb11u4?arch=arm64&distro=debian-11.9",
-                    "references": [
-                      "https://access.redhat.com/errata/RHSA-2025:11487",
-                      "https://access.redhat.com/errata/RHSA-2025:13664",
-                      "https://access.redhat.com/errata/RHSA-2025:13777",
-                      "https://access.redhat.com/errata/RHSA-2025:15000",
-                      "https://access.redhat.com/errata/RHSA-2025:15001",
-                      "https://access.redhat.com/errata/RHSA-2025:15002",
-                      "https://access.redhat.com/errata/RHSA-2025:15003",
-                      "https://access.redhat.com/errata/RHSA-2025:15004",
-                      "https://access.redhat.com/errata/RHSA-2025:8411",
-                      "https://access.redhat.com/errata/RHSA-2025:9418",
-                      "https://access.redhat.com/errata/RHSA-2025:9430",
-                      "https://access.redhat.com/security/cve/CVE-2025-3576",
-                      "https://bugzilla.redhat.com/2359465",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2359465",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-3576",
-                      "https://errata.almalinux.org/8/ALSA-2025-8411.html",
-                      "https://errata.rockylinux.org/RLSA-2025:9430",
-                      "https://linux.oracle.com/cve/CVE-2025-3576.html",
-                      "https://linux.oracle.com/errata/ELSA-2025-9430.html",
-                      "https://lists.debian.org/debian-lts-announce/2025/05/msg00047.html",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2025-3576",
-                      "https://ubuntu.com/security/notices/USN-7542-1",
-                      "https://web.mit.edu/kerberos/krb5-1.22/krb5-1.22.html",
-                      "https://www.cve.org/CVERecord?id=CVE-2025-3576"
-                    ],
-                    "severity": "MEDIUM",
-                    "suppressed": false,
-                    "title": "krb5: Kerberos RC4-HMAC-MD5 Checksum Vulnerability Enabling Message Spoofing via MD5 Collisions"
-                  },
-                  {
-                    "cve": "CVE-2018-5709",
-                    "cvss": {
-                      "nvd": {
-                        "v3score": "7.5",
-                        "v3vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N"
-                      },
-                      "redhat": {
-                        "v3score": "6.3",
-                        "v3vector": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-190"
-                    ],
-                    "description": "An issue was discovered in MIT Kerberos 5 (aka krb5) through 1.16. There is a variable \"dbentry->n_key_data\" in kadmin/dbutil/dump.c that can store 16-bit data but unknowingly the developer has assigned a \"u4\" variable to it, which is for 32-bit data. An attacker can use this vulnerability to affect other artifacts of the database as we know that a Kerberos database dump file contains trusted data.",
-                    "diffID": "sha256:a499da141b419b2e97ed40192951a05fc37fadec129a55e1de03773e23fff97b",
-                    "installedVersion": "1.18.3-6+deb11u4",
-                    "packageName": "libk5crypto3",
-                    "purl": "pkg:deb/debian/libk5crypto3@1.18.3-6%2Bdeb11u4?arch=arm64&distro=debian-11.9",
-                    "references": [
-                      "https://access.redhat.com/security/cve/CVE-2018-5709",
-                      "https://github.com/poojamnit/Kerberos-V5-1.16-Vulnerabilities/tree/master/Integer%20Overflow",
-                      "https://lists.apache.org/thread.html/rf9fa47ab66495c78bb4120b0754dd9531ca2ff0430f6685ac9b07772%40%3Cdev.mina.apache.org%3E",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2018-5709",
-                      "https://www.cve.org/CVERecord?id=CVE-2018-5709"
-                    ],
-                    "severity": "LOW",
-                    "suppressed": false,
-                    "title": "krb5: integer overflow in dbentry->n_key_data in kadmin/dbutil/dump.c"
-                  },
-                  {
-                    "cve": "CVE-2024-26458",
-                    "cvss": {
-                      "redhat": {
-                        "v3score": "5.9",
-                        "v3vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-401"
-                    ],
-                    "description": "Kerberos 5 (aka krb5) 1.21.2 contains a memory leak in /krb5/src/lib/rpc/pmap_rmt.c.",
-                    "diffID": "sha256:a499da141b419b2e97ed40192951a05fc37fadec129a55e1de03773e23fff97b",
-                    "installedVersion": "1.18.3-6+deb11u4",
-                    "packageName": "libk5crypto3",
-                    "purl": "pkg:deb/debian/libk5crypto3@1.18.3-6%2Bdeb11u4?arch=arm64&distro=debian-11.9",
-                    "references": [
-                      "https://access.redhat.com/errata/RHSA-2024:3268",
-                      "https://access.redhat.com/security/cve/CVE-2024-26458",
-                      "https://bugzilla.redhat.com/2266731",
-                      "https://bugzilla.redhat.com/2266740",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2266731",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2266740",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26458",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26461",
-                      "https://errata.almalinux.org/8/ALSA-2024-3268.html",
-                      "https://errata.rockylinux.org/RLSA-2024:3268",
-                      "https://github.com/LuMingYinDetect/krb5_defects/blob/main/krb5_detect_1.md",
-                      "https://linux.oracle.com/cve/CVE-2024-26458.html",
-                      "https://linux.oracle.com/errata/ELSA-2024-9331.html",
-                      "https://mailman.mit.edu/pipermail/kerberos/2024-March/023095.html",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2024-26458",
-                      "https://security.netapp.com/advisory/ntap-20240415-0010/",
-                      "https://ubuntu.com/security/notices/USN-7314-1",
-                      "https://www.cve.org/CVERecord?id=CVE-2024-26458"
-                    ],
-                    "severity": "LOW",
-                    "suppressed": false,
-                    "title": "krb5: Memory leak at /krb5/src/lib/rpc/pmap_rmt.c"
-                  },
-                  {
-                    "cve": "CVE-2024-26461",
-                    "cvss": {
-                      "redhat": {
-                        "v3score": "5.9",
-                        "v3vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-770"
-                    ],
-                    "description": "Kerberos 5 (aka krb5) 1.21.2 contains a memory leak vulnerability in /krb5/src/lib/gssapi/krb5/k5sealv3.c.",
-                    "diffID": "sha256:a499da141b419b2e97ed40192951a05fc37fadec129a55e1de03773e23fff97b",
-                    "installedVersion": "1.18.3-6+deb11u4",
-                    "packageName": "libk5crypto3",
-                    "purl": "pkg:deb/debian/libk5crypto3@1.18.3-6%2Bdeb11u4?arch=arm64&distro=debian-11.9",
-                    "references": [
-                      "https://access.redhat.com/errata/RHSA-2024:3268",
-                      "https://access.redhat.com/security/cve/CVE-2024-26461",
-                      "https://bugzilla.redhat.com/2266731",
-                      "https://bugzilla.redhat.com/2266740",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2266731",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2266740",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26458",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26461",
-                      "https://errata.almalinux.org/8/ALSA-2024-3268.html",
-                      "https://errata.rockylinux.org/RLSA-2024:3268",
-                      "https://github.com/LuMingYinDetect/krb5_defects/blob/main/krb5_detect_2.md",
-                      "https://linux.oracle.com/cve/CVE-2024-26461.html",
-                      "https://linux.oracle.com/errata/ELSA-2024-9331.html",
-                      "https://mailman.mit.edu/pipermail/kerberos/2024-March/023095.html",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2024-26461",
-                      "https://security.netapp.com/advisory/ntap-20240415-0011/",
-                      "https://ubuntu.com/security/notices/USN-7314-1",
-                      "https://www.cve.org/CVERecord?id=CVE-2024-26461"
-                    ],
-                    "severity": "LOW",
-                    "suppressed": false,
-                    "title": "krb5: Memory leak at /krb5/src/lib/gssapi/krb5/k5sealv3.c"
-                  },
-                  {
-                    "cve": "CVE-2024-37371",
-                    "cvss": {
-                      "nvd": {
-                        "v3score": "9.1",
-                        "v3vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H"
-                      },
-                      "redhat": {
-                        "v3score": "6.5",
-                        "v3vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-125"
-                    ],
-                    "description": "In MIT Kerberos 5 (aka krb5) before 1.21.3, an attacker can cause invalid memory reads during GSS message token handling by sending message tokens with invalid length fields.",
-                    "diffID": "sha256:a499da141b419b2e97ed40192951a05fc37fadec129a55e1de03773e23fff97b",
-                    "fixedVersions": [
-                      "1.18.3-6+deb11u5"
-                    ],
-                    "installedVersion": "1.18.3-6+deb11u4",
-                    "packageName": "libkrb5-3",
-                    "purl": "pkg:deb/debian/libkrb5-3@1.18.3-6%2Bdeb11u4?arch=arm64&distro=debian-11.9",
-                    "references": [
-                      "https://access.redhat.com/errata/RHSA-2025:1673",
-                      "https://access.redhat.com/security/cve/CVE-2024-37371",
-                      "https://bugzilla.redhat.com/2294581",
-                      "https://bugzilla.redhat.com/2294676",
-                      "https://bugzilla.redhat.com/2301888",
-                      "https://bugzilla.redhat.com/2318857",
-                      "https://bugzilla.redhat.com/2318858",
-                      "https://bugzilla.redhat.com/2318870",
-                      "https://bugzilla.redhat.com/2318873",
-                      "https://bugzilla.redhat.com/2318874",
-                      "https://bugzilla.redhat.com/2318876",
-                      "https://bugzilla.redhat.com/2318882",
-                      "https://bugzilla.redhat.com/2318883",
-                      "https://bugzilla.redhat.com/2318884",
-                      "https://bugzilla.redhat.com/2318885",
-                      "https://bugzilla.redhat.com/2318886",
-                      "https://bugzilla.redhat.com/2318897",
-                      "https://bugzilla.redhat.com/2318900",
-                      "https://bugzilla.redhat.com/2318905",
-                      "https://bugzilla.redhat.com/2318914",
-                      "https://bugzilla.redhat.com/2318922",
-                      "https://bugzilla.redhat.com/2318923",
-                      "https://bugzilla.redhat.com/2318925",
-                      "https://bugzilla.redhat.com/2318926",
-                      "https://bugzilla.redhat.com/2318927",
-                      "https://bugzilla.redhat.com/2331191",
-                      "https://bugzilla.redhat.com/2339218",
-                      "https://bugzilla.redhat.com/2339220",
-                      "https://bugzilla.redhat.com/2339221",
-                      "https://bugzilla.redhat.com/2339226",
-                      "https://bugzilla.redhat.com/2339231",
-                      "https://bugzilla.redhat.com/2339236",
-                      "https://bugzilla.redhat.com/2339238",
-                      "https://bugzilla.redhat.com/2339243",
-                      "https://bugzilla.redhat.com/2339247",
-                      "https://bugzilla.redhat.com/2339252",
-                      "https://bugzilla.redhat.com/2339259",
-                      "https://bugzilla.redhat.com/2339266",
-                      "https://bugzilla.redhat.com/2339270",
-                      "https://bugzilla.redhat.com/2339271",
-                      "https://bugzilla.redhat.com/2339275",
-                      "https://bugzilla.redhat.com/2339277",
-                      "https://bugzilla.redhat.com/2339281",
-                      "https://bugzilla.redhat.com/2339284",
-                      "https://bugzilla.redhat.com/2339291",
-                      "https://bugzilla.redhat.com/2339293",
-                      "https://bugzilla.redhat.com/2339295",
-                      "https://bugzilla.redhat.com/2339299",
-                      "https://bugzilla.redhat.com/2339300",
-                      "https://bugzilla.redhat.com/2339304",
-                      "https://bugzilla.redhat.com/2339305",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2294581",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2294676",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2301888",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2318857",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2318858",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2318870",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2318873",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2318874",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2318876",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2318882",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2318883",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2318884",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2318885",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2318886",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2318897",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2318900",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2318905",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2318914",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2318922",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2318923",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2318925",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2318926",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2318927",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2331191",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2339218",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2339220",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2339221",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2339226",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2339231",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2339236",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2339238",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2339243",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2339247",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2339252",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2339259",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2339266",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2339270",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2339271",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2339275",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2339277",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2339281",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2339284",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2339291",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2339293",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2339295",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2339299",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2339300",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2339304",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2339305",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-11053",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-21193",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-21194",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-21196",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-21197",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-21198",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-21199",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-21201",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-21203",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-21212",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-21213",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-21218",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-21219",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-21230",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-21231",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-21236",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-21237",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-21238",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-21239",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-21241",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-21247",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-37371",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-5535",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-7264",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21490",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21491",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21494",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21497",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21500",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21501",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21503",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21504",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21505",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21518",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21519",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21520",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21521",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21522",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21523",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21525",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21529",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21531",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21534",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21536",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21540",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21543",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21546",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21555",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21559",
-                      "https://errata.almalinux.org/8/ALSA-2025-1673.html",
-                      "https://errata.rockylinux.org/RLSA-2025:1671",
-                      "https://github.com/krb5/krb5/commit/55fbf435edbe2e92dd8101669b1ce7144bc96fef",
-                      "https://linux.oracle.com/cve/CVE-2024-37371.html",
-                      "https://linux.oracle.com/errata/ELSA-2025-1673.html",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2024-37371",
-                      "https://security.netapp.com/advisory/ntap-20241108-0009/",
-                      "https://security.netapp.com/advisory/ntap-20250124-0010/",
-                      "https://ubuntu.com/security/notices/USN-6947-1",
-                      "https://web.mit.edu/kerberos/www/advisories/",
-                      "https://web.mit.edu/kerberos/www/krb5-1.21/",
-                      "https://www.cve.org/CVERecord?id=CVE-2024-37371",
-                      "https://www.oracle.com/security-alerts/cpujan2025.html#AppendixMSQL"
-                    ],
-                    "severity": "CRITICAL",
-                    "suppressed": false,
-                    "title": "krb5: GSS message token handling"
-                  },
-                  {
-                    "cve": "CVE-2024-37370",
-                    "cvss": {
-                      "nvd": {
-                        "v3score": "7.5",
-                        "v3vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N"
-                      },
-                      "redhat": {
-                        "v3score": "7.5",
-                        "v3vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-345"
-                    ],
-                    "description": "In MIT Kerberos 5 (aka krb5) before 1.21.3, an attacker can modify the plaintext Extra Count field of a confidential GSS krb5 wrap token, causing the unwrapped token to appear truncated to the application.",
-                    "diffID": "sha256:a499da141b419b2e97ed40192951a05fc37fadec129a55e1de03773e23fff97b",
-                    "fixedVersions": [
-                      "1.18.3-6+deb11u5"
-                    ],
-                    "installedVersion": "1.18.3-6+deb11u4",
-                    "packageName": "libkrb5-3",
-                    "purl": "pkg:deb/debian/libkrb5-3@1.18.3-6%2Bdeb11u4?arch=arm64&distro=debian-11.9",
-                    "references": [
-                      "https://access.redhat.com/errata/RHSA-2024:5312",
-                      "https://access.redhat.com/security/cve/CVE-2024-37370",
-                      "https://bugzilla.redhat.com/2294676",
-                      "https://bugzilla.redhat.com/2294677",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2294676",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2294677",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-37370",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-37371",
-                      "https://errata.almalinux.org/8/ALSA-2024-5312.html",
-                      "https://errata.rockylinux.org/RLSA-2024:5312",
-                      "https://github.com/krb5/krb5/commit/55fbf435edbe2e92dd8101669b1ce7144bc96fef",
-                      "https://linux.oracle.com/cve/CVE-2024-37370.html",
-                      "https://linux.oracle.com/errata/ELSA-2024-6166.html",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2024-37370",
-                      "https://security.netapp.com/advisory/ntap-20241108-0007/",
-                      "https://ubuntu.com/security/notices/USN-6947-1",
-                      "https://web.mit.edu/kerberos/www/advisories/",
-                      "https://web.mit.edu/kerberos/www/krb5-1.21/",
-                      "https://www.cve.org/CVERecord?id=CVE-2024-37370"
-                    ],
-                    "severity": "HIGH",
-                    "suppressed": false,
-                    "title": "krb5: GSS message token handling"
-                  },
-                  {
-                    "cve": "CVE-2025-24528",
-                    "cvss": {
-                      "redhat": {
-                        "v3score": "6.5",
-                        "v3vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-190"
-                    ],
-                    "description": "In MIT Kerberos 5 (aka krb5) before 1.22 (with incremental propagation), there is an integer overflow for a large update size to resize() in kdb_log.c. An authenticated attacker can cause an out-of-bounds write and kadmind daemon crash.",
-                    "diffID": "sha256:a499da141b419b2e97ed40192951a05fc37fadec129a55e1de03773e23fff97b",
-                    "fixedVersions": [
-                      "1.18.3-6+deb11u6"
-                    ],
-                    "installedVersion": "1.18.3-6+deb11u4",
-                    "packageName": "libkrb5-3",
-                    "purl": "pkg:deb/debian/libkrb5-3@1.18.3-6%2Bdeb11u4?arch=arm64&distro=debian-11.9",
-                    "references": [
-                      "https://access.redhat.com/errata/RHSA-2025:2722",
-                      "https://access.redhat.com/security/cve/CVE-2025-24528",
-                      "https://bugzilla.redhat.com/2342796",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2342796",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-24528",
-                      "https://errata.almalinux.org/8/ALSA-2025-2722.html",
-                      "https://errata.rockylinux.org/RLSA-2025:7067",
-                      "https://github.com/krb5/krb5/commit/78ceba024b64d49612375be4a12d1c066b0bfbd0",
-                      "https://github.com/krb5/krb5/compare/krb5-1.21.3-final...krb5-1.22-final",
-                      "https://linux.oracle.com/cve/CVE-2025-24528.html",
-                      "https://linux.oracle.com/errata/ELSA-2025-7067.html",
-                      "https://lists.debian.org/debian-lts-announce/2025/02/msg00029.html",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2025-24528",
-                      "https://ubuntu.com/security/notices/USN-7314-1",
-                      "https://www.cve.org/CVERecord?id=CVE-2025-24528"
-                    ],
-                    "severity": "MEDIUM",
-                    "suppressed": false,
-                    "title": "krb5: overflow when calculating ulog block size"
-                  },
-                  {
-                    "cve": "CVE-2025-3576",
-                    "cvss": {
-                      "redhat": {
-                        "v3score": "5.9",
-                        "v3vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-328"
-                    ],
-                    "description": "A vulnerability in the MIT Kerberos implementation allows GSSAPI-protected messages using RC4-HMAC-MD5 to be spoofed due to weaknesses in the MD5 checksum design. If RC4 is preferred over stronger encryption types, an attacker could exploit MD5 collisions to forge message integrity codes. This may lead to unauthorized message tampering.",
-                    "diffID": "sha256:a499da141b419b2e97ed40192951a05fc37fadec129a55e1de03773e23fff97b",
-                    "fixedVersions": [
-                      "1.18.3-6+deb11u7"
-                    ],
-                    "installedVersion": "1.18.3-6+deb11u4",
-                    "packageName": "libkrb5-3",
-                    "purl": "pkg:deb/debian/libkrb5-3@1.18.3-6%2Bdeb11u4?arch=arm64&distro=debian-11.9",
-                    "references": [
-                      "https://access.redhat.com/errata/RHSA-2025:11487",
-                      "https://access.redhat.com/errata/RHSA-2025:13664",
-                      "https://access.redhat.com/errata/RHSA-2025:13777",
-                      "https://access.redhat.com/errata/RHSA-2025:15000",
-                      "https://access.redhat.com/errata/RHSA-2025:15001",
-                      "https://access.redhat.com/errata/RHSA-2025:15002",
-                      "https://access.redhat.com/errata/RHSA-2025:15003",
-                      "https://access.redhat.com/errata/RHSA-2025:15004",
-                      "https://access.redhat.com/errata/RHSA-2025:8411",
-                      "https://access.redhat.com/errata/RHSA-2025:9418",
-                      "https://access.redhat.com/errata/RHSA-2025:9430",
-                      "https://access.redhat.com/security/cve/CVE-2025-3576",
-                      "https://bugzilla.redhat.com/2359465",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2359465",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-3576",
-                      "https://errata.almalinux.org/8/ALSA-2025-8411.html",
-                      "https://errata.rockylinux.org/RLSA-2025:9430",
-                      "https://linux.oracle.com/cve/CVE-2025-3576.html",
-                      "https://linux.oracle.com/errata/ELSA-2025-9430.html",
-                      "https://lists.debian.org/debian-lts-announce/2025/05/msg00047.html",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2025-3576",
-                      "https://ubuntu.com/security/notices/USN-7542-1",
-                      "https://web.mit.edu/kerberos/krb5-1.22/krb5-1.22.html",
-                      "https://www.cve.org/CVERecord?id=CVE-2025-3576"
-                    ],
-                    "severity": "MEDIUM",
-                    "suppressed": false,
-                    "title": "krb5: Kerberos RC4-HMAC-MD5 Checksum Vulnerability Enabling Message Spoofing via MD5 Collisions"
-                  },
-                  {
-                    "cve": "CVE-2018-5709",
-                    "cvss": {
-                      "nvd": {
-                        "v3score": "7.5",
-                        "v3vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N"
-                      },
-                      "redhat": {
-                        "v3score": "6.3",
-                        "v3vector": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-190"
-                    ],
-                    "description": "An issue was discovered in MIT Kerberos 5 (aka krb5) through 1.16. There is a variable \"dbentry->n_key_data\" in kadmin/dbutil/dump.c that can store 16-bit data but unknowingly the developer has assigned a \"u4\" variable to it, which is for 32-bit data. An attacker can use this vulnerability to affect other artifacts of the database as we know that a Kerberos database dump file contains trusted data.",
-                    "diffID": "sha256:a499da141b419b2e97ed40192951a05fc37fadec129a55e1de03773e23fff97b",
-                    "installedVersion": "1.18.3-6+deb11u4",
-                    "packageName": "libkrb5-3",
-                    "purl": "pkg:deb/debian/libkrb5-3@1.18.3-6%2Bdeb11u4?arch=arm64&distro=debian-11.9",
-                    "references": [
-                      "https://access.redhat.com/security/cve/CVE-2018-5709",
-                      "https://github.com/poojamnit/Kerberos-V5-1.16-Vulnerabilities/tree/master/Integer%20Overflow",
-                      "https://lists.apache.org/thread.html/rf9fa47ab66495c78bb4120b0754dd9531ca2ff0430f6685ac9b07772%40%3Cdev.mina.apache.org%3E",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2018-5709",
-                      "https://www.cve.org/CVERecord?id=CVE-2018-5709"
-                    ],
-                    "severity": "LOW",
-                    "suppressed": false,
-                    "title": "krb5: integer overflow in dbentry->n_key_data in kadmin/dbutil/dump.c"
-                  },
-                  {
-                    "cve": "CVE-2024-26458",
-                    "cvss": {
-                      "redhat": {
-                        "v3score": "5.9",
-                        "v3vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-401"
-                    ],
-                    "description": "Kerberos 5 (aka krb5) 1.21.2 contains a memory leak in /krb5/src/lib/rpc/pmap_rmt.c.",
-                    "diffID": "sha256:a499da141b419b2e97ed40192951a05fc37fadec129a55e1de03773e23fff97b",
-                    "installedVersion": "1.18.3-6+deb11u4",
-                    "packageName": "libkrb5-3",
-                    "purl": "pkg:deb/debian/libkrb5-3@1.18.3-6%2Bdeb11u4?arch=arm64&distro=debian-11.9",
-                    "references": [
-                      "https://access.redhat.com/errata/RHSA-2024:3268",
-                      "https://access.redhat.com/security/cve/CVE-2024-26458",
-                      "https://bugzilla.redhat.com/2266731",
-                      "https://bugzilla.redhat.com/2266740",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2266731",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2266740",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26458",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26461",
-                      "https://errata.almalinux.org/8/ALSA-2024-3268.html",
-                      "https://errata.rockylinux.org/RLSA-2024:3268",
-                      "https://github.com/LuMingYinDetect/krb5_defects/blob/main/krb5_detect_1.md",
-                      "https://linux.oracle.com/cve/CVE-2024-26458.html",
-                      "https://linux.oracle.com/errata/ELSA-2024-9331.html",
-                      "https://mailman.mit.edu/pipermail/kerberos/2024-March/023095.html",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2024-26458",
-                      "https://security.netapp.com/advisory/ntap-20240415-0010/",
-                      "https://ubuntu.com/security/notices/USN-7314-1",
-                      "https://www.cve.org/CVERecord?id=CVE-2024-26458"
-                    ],
-                    "severity": "LOW",
-                    "suppressed": false,
-                    "title": "krb5: Memory leak at /krb5/src/lib/rpc/pmap_rmt.c"
-                  },
-                  {
-                    "cve": "CVE-2024-26461",
-                    "cvss": {
-                      "redhat": {
-                        "v3score": "5.9",
-                        "v3vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-770"
-                    ],
-                    "description": "Kerberos 5 (aka krb5) 1.21.2 contains a memory leak vulnerability in /krb5/src/lib/gssapi/krb5/k5sealv3.c.",
-                    "diffID": "sha256:a499da141b419b2e97ed40192951a05fc37fadec129a55e1de03773e23fff97b",
-                    "installedVersion": "1.18.3-6+deb11u4",
-                    "packageName": "libkrb5-3",
-                    "purl": "pkg:deb/debian/libkrb5-3@1.18.3-6%2Bdeb11u4?arch=arm64&distro=debian-11.9",
-                    "references": [
-                      "https://access.redhat.com/errata/RHSA-2024:3268",
-                      "https://access.redhat.com/security/cve/CVE-2024-26461",
-                      "https://bugzilla.redhat.com/2266731",
-                      "https://bugzilla.redhat.com/2266740",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2266731",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2266740",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26458",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26461",
-                      "https://errata.almalinux.org/8/ALSA-2024-3268.html",
-                      "https://errata.rockylinux.org/RLSA-2024:3268",
-                      "https://github.com/LuMingYinDetect/krb5_defects/blob/main/krb5_detect_2.md",
-                      "https://linux.oracle.com/cve/CVE-2024-26461.html",
-                      "https://linux.oracle.com/errata/ELSA-2024-9331.html",
-                      "https://mailman.mit.edu/pipermail/kerberos/2024-March/023095.html",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2024-26461",
-                      "https://security.netapp.com/advisory/ntap-20240415-0011/",
-                      "https://ubuntu.com/security/notices/USN-7314-1",
-                      "https://www.cve.org/CVERecord?id=CVE-2024-26461"
-                    ],
-                    "severity": "LOW",
-                    "suppressed": false,
-                    "title": "krb5: Memory leak at /krb5/src/lib/gssapi/krb5/k5sealv3.c"
-                  },
-                  {
-                    "cve": "CVE-2024-37371",
-                    "cvss": {
-                      "nvd": {
-                        "v3score": "9.1",
-                        "v3vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H"
-                      },
-                      "redhat": {
-                        "v3score": "6.5",
-                        "v3vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-125"
-                    ],
-                    "description": "In MIT Kerberos 5 (aka krb5) before 1.21.3, an attacker can cause invalid memory reads during GSS message token handling by sending message tokens with invalid length fields.",
-                    "diffID": "sha256:a499da141b419b2e97ed40192951a05fc37fadec129a55e1de03773e23fff97b",
-                    "fixedVersions": [
-                      "1.18.3-6+deb11u5"
-                    ],
-                    "installedVersion": "1.18.3-6+deb11u4",
-                    "packageName": "libkrb5support0",
-                    "purl": "pkg:deb/debian/libkrb5support0@1.18.3-6%2Bdeb11u4?arch=arm64&distro=debian-11.9",
-                    "references": [
-                      "https://access.redhat.com/errata/RHSA-2025:1673",
-                      "https://access.redhat.com/security/cve/CVE-2024-37371",
-                      "https://bugzilla.redhat.com/2294581",
-                      "https://bugzilla.redhat.com/2294676",
-                      "https://bugzilla.redhat.com/2301888",
-                      "https://bugzilla.redhat.com/2318857",
-                      "https://bugzilla.redhat.com/2318858",
-                      "https://bugzilla.redhat.com/2318870",
-                      "https://bugzilla.redhat.com/2318873",
-                      "https://bugzilla.redhat.com/2318874",
-                      "https://bugzilla.redhat.com/2318876",
-                      "https://bugzilla.redhat.com/2318882",
-                      "https://bugzilla.redhat.com/2318883",
-                      "https://bugzilla.redhat.com/2318884",
-                      "https://bugzilla.redhat.com/2318885",
-                      "https://bugzilla.redhat.com/2318886",
-                      "https://bugzilla.redhat.com/2318897",
-                      "https://bugzilla.redhat.com/2318900",
-                      "https://bugzilla.redhat.com/2318905",
-                      "https://bugzilla.redhat.com/2318914",
-                      "https://bugzilla.redhat.com/2318922",
-                      "https://bugzilla.redhat.com/2318923",
-                      "https://bugzilla.redhat.com/2318925",
-                      "https://bugzilla.redhat.com/2318926",
-                      "https://bugzilla.redhat.com/2318927",
-                      "https://bugzilla.redhat.com/2331191",
-                      "https://bugzilla.redhat.com/2339218",
-                      "https://bugzilla.redhat.com/2339220",
-                      "https://bugzilla.redhat.com/2339221",
-                      "https://bugzilla.redhat.com/2339226",
-                      "https://bugzilla.redhat.com/2339231",
-                      "https://bugzilla.redhat.com/2339236",
-                      "https://bugzilla.redhat.com/2339238",
-                      "https://bugzilla.redhat.com/2339243",
-                      "https://bugzilla.redhat.com/2339247",
-                      "https://bugzilla.redhat.com/2339252",
-                      "https://bugzilla.redhat.com/2339259",
-                      "https://bugzilla.redhat.com/2339266",
-                      "https://bugzilla.redhat.com/2339270",
-                      "https://bugzilla.redhat.com/2339271",
-                      "https://bugzilla.redhat.com/2339275",
-                      "https://bugzilla.redhat.com/2339277",
-                      "https://bugzilla.redhat.com/2339281",
-                      "https://bugzilla.redhat.com/2339284",
-                      "https://bugzilla.redhat.com/2339291",
-                      "https://bugzilla.redhat.com/2339293",
-                      "https://bugzilla.redhat.com/2339295",
-                      "https://bugzilla.redhat.com/2339299",
-                      "https://bugzilla.redhat.com/2339300",
-                      "https://bugzilla.redhat.com/2339304",
-                      "https://bugzilla.redhat.com/2339305",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2294581",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2294676",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2301888",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2318857",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2318858",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2318870",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2318873",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2318874",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2318876",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2318882",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2318883",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2318884",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2318885",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2318886",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2318897",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2318900",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2318905",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2318914",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2318922",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2318923",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2318925",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2318926",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2318927",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2331191",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2339218",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2339220",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2339221",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2339226",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2339231",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2339236",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2339238",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2339243",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2339247",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2339252",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2339259",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2339266",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2339270",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2339271",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2339275",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2339277",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2339281",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2339284",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2339291",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2339293",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2339295",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2339299",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2339300",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2339304",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2339305",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-11053",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-21193",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-21194",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-21196",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-21197",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-21198",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-21199",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-21201",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-21203",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-21212",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-21213",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-21218",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-21219",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-21230",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-21231",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-21236",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-21237",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-21238",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-21239",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-21241",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-21247",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-37371",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-5535",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-7264",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21490",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21491",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21494",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21497",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21500",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21501",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21503",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21504",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21505",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21518",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21519",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21520",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21521",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21522",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21523",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21525",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21529",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21531",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21534",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21536",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21540",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21543",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21546",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21555",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21559",
-                      "https://errata.almalinux.org/8/ALSA-2025-1673.html",
-                      "https://errata.rockylinux.org/RLSA-2025:1671",
-                      "https://github.com/krb5/krb5/commit/55fbf435edbe2e92dd8101669b1ce7144bc96fef",
-                      "https://linux.oracle.com/cve/CVE-2024-37371.html",
-                      "https://linux.oracle.com/errata/ELSA-2025-1673.html",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2024-37371",
-                      "https://security.netapp.com/advisory/ntap-20241108-0009/",
-                      "https://security.netapp.com/advisory/ntap-20250124-0010/",
-                      "https://ubuntu.com/security/notices/USN-6947-1",
-                      "https://web.mit.edu/kerberos/www/advisories/",
-                      "https://web.mit.edu/kerberos/www/krb5-1.21/",
-                      "https://www.cve.org/CVERecord?id=CVE-2024-37371",
-                      "https://www.oracle.com/security-alerts/cpujan2025.html#AppendixMSQL"
-                    ],
-                    "severity": "CRITICAL",
-                    "suppressed": false,
-                    "title": "krb5: GSS message token handling"
-                  },
-                  {
-                    "cve": "CVE-2024-37370",
-                    "cvss": {
-                      "nvd": {
-                        "v3score": "7.5",
-                        "v3vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N"
-                      },
-                      "redhat": {
-                        "v3score": "7.5",
-                        "v3vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-345"
-                    ],
-                    "description": "In MIT Kerberos 5 (aka krb5) before 1.21.3, an attacker can modify the plaintext Extra Count field of a confidential GSS krb5 wrap token, causing the unwrapped token to appear truncated to the application.",
-                    "diffID": "sha256:a499da141b419b2e97ed40192951a05fc37fadec129a55e1de03773e23fff97b",
-                    "fixedVersions": [
-                      "1.18.3-6+deb11u5"
-                    ],
-                    "installedVersion": "1.18.3-6+deb11u4",
-                    "packageName": "libkrb5support0",
-                    "purl": "pkg:deb/debian/libkrb5support0@1.18.3-6%2Bdeb11u4?arch=arm64&distro=debian-11.9",
-                    "references": [
-                      "https://access.redhat.com/errata/RHSA-2024:5312",
-                      "https://access.redhat.com/security/cve/CVE-2024-37370",
-                      "https://bugzilla.redhat.com/2294676",
-                      "https://bugzilla.redhat.com/2294677",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2294676",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2294677",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-37370",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-37371",
-                      "https://errata.almalinux.org/8/ALSA-2024-5312.html",
-                      "https://errata.rockylinux.org/RLSA-2024:5312",
-                      "https://github.com/krb5/krb5/commit/55fbf435edbe2e92dd8101669b1ce7144bc96fef",
-                      "https://linux.oracle.com/cve/CVE-2024-37370.html",
-                      "https://linux.oracle.com/errata/ELSA-2024-6166.html",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2024-37370",
-                      "https://security.netapp.com/advisory/ntap-20241108-0007/",
-                      "https://ubuntu.com/security/notices/USN-6947-1",
-                      "https://web.mit.edu/kerberos/www/advisories/",
-                      "https://web.mit.edu/kerberos/www/krb5-1.21/",
-                      "https://www.cve.org/CVERecord?id=CVE-2024-37370"
-                    ],
-                    "severity": "HIGH",
-                    "suppressed": false,
-                    "title": "krb5: GSS message token handling"
-                  },
-                  {
-                    "cve": "CVE-2025-24528",
-                    "cvss": {
-                      "redhat": {
-                        "v3score": "6.5",
-                        "v3vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-190"
-                    ],
-                    "description": "In MIT Kerberos 5 (aka krb5) before 1.22 (with incremental propagation), there is an integer overflow for a large update size to resize() in kdb_log.c. An authenticated attacker can cause an out-of-bounds write and kadmind daemon crash.",
-                    "diffID": "sha256:a499da141b419b2e97ed40192951a05fc37fadec129a55e1de03773e23fff97b",
-                    "fixedVersions": [
-                      "1.18.3-6+deb11u6"
-                    ],
-                    "installedVersion": "1.18.3-6+deb11u4",
-                    "packageName": "libkrb5support0",
-                    "purl": "pkg:deb/debian/libkrb5support0@1.18.3-6%2Bdeb11u4?arch=arm64&distro=debian-11.9",
-                    "references": [
-                      "https://access.redhat.com/errata/RHSA-2025:2722",
-                      "https://access.redhat.com/security/cve/CVE-2025-24528",
-                      "https://bugzilla.redhat.com/2342796",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2342796",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-24528",
-                      "https://errata.almalinux.org/8/ALSA-2025-2722.html",
-                      "https://errata.rockylinux.org/RLSA-2025:7067",
-                      "https://github.com/krb5/krb5/commit/78ceba024b64d49612375be4a12d1c066b0bfbd0",
-                      "https://github.com/krb5/krb5/compare/krb5-1.21.3-final...krb5-1.22-final",
-                      "https://linux.oracle.com/cve/CVE-2025-24528.html",
-                      "https://linux.oracle.com/errata/ELSA-2025-7067.html",
-                      "https://lists.debian.org/debian-lts-announce/2025/02/msg00029.html",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2025-24528",
-                      "https://ubuntu.com/security/notices/USN-7314-1",
-                      "https://www.cve.org/CVERecord?id=CVE-2025-24528"
-                    ],
-                    "severity": "MEDIUM",
-                    "suppressed": false,
-                    "title": "krb5: overflow when calculating ulog block size"
-                  },
-                  {
-                    "cve": "CVE-2025-3576",
-                    "cvss": {
-                      "redhat": {
-                        "v3score": "5.9",
-                        "v3vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-328"
-                    ],
-                    "description": "A vulnerability in the MIT Kerberos implementation allows GSSAPI-protected messages using RC4-HMAC-MD5 to be spoofed due to weaknesses in the MD5 checksum design. If RC4 is preferred over stronger encryption types, an attacker could exploit MD5 collisions to forge message integrity codes. This may lead to unauthorized message tampering.",
-                    "diffID": "sha256:a499da141b419b2e97ed40192951a05fc37fadec129a55e1de03773e23fff97b",
-                    "fixedVersions": [
-                      "1.18.3-6+deb11u7"
-                    ],
-                    "installedVersion": "1.18.3-6+deb11u4",
-                    "packageName": "libkrb5support0",
-                    "purl": "pkg:deb/debian/libkrb5support0@1.18.3-6%2Bdeb11u4?arch=arm64&distro=debian-11.9",
-                    "references": [
-                      "https://access.redhat.com/errata/RHSA-2025:11487",
-                      "https://access.redhat.com/errata/RHSA-2025:13664",
-                      "https://access.redhat.com/errata/RHSA-2025:13777",
-                      "https://access.redhat.com/errata/RHSA-2025:15000",
-                      "https://access.redhat.com/errata/RHSA-2025:15001",
-                      "https://access.redhat.com/errata/RHSA-2025:15002",
-                      "https://access.redhat.com/errata/RHSA-2025:15003",
-                      "https://access.redhat.com/errata/RHSA-2025:15004",
-                      "https://access.redhat.com/errata/RHSA-2025:8411",
-                      "https://access.redhat.com/errata/RHSA-2025:9418",
-                      "https://access.redhat.com/errata/RHSA-2025:9430",
-                      "https://access.redhat.com/security/cve/CVE-2025-3576",
-                      "https://bugzilla.redhat.com/2359465",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2359465",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-3576",
-                      "https://errata.almalinux.org/8/ALSA-2025-8411.html",
-                      "https://errata.rockylinux.org/RLSA-2025:9430",
-                      "https://linux.oracle.com/cve/CVE-2025-3576.html",
-                      "https://linux.oracle.com/errata/ELSA-2025-9430.html",
-                      "https://lists.debian.org/debian-lts-announce/2025/05/msg00047.html",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2025-3576",
-                      "https://ubuntu.com/security/notices/USN-7542-1",
-                      "https://web.mit.edu/kerberos/krb5-1.22/krb5-1.22.html",
-                      "https://www.cve.org/CVERecord?id=CVE-2025-3576"
-                    ],
-                    "severity": "MEDIUM",
-                    "suppressed": false,
-                    "title": "krb5: Kerberos RC4-HMAC-MD5 Checksum Vulnerability Enabling Message Spoofing via MD5 Collisions"
-                  },
-                  {
-                    "cve": "CVE-2018-5709",
-                    "cvss": {
-                      "nvd": {
-                        "v3score": "7.5",
-                        "v3vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N"
-                      },
-                      "redhat": {
-                        "v3score": "6.3",
-                        "v3vector": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-190"
-                    ],
-                    "description": "An issue was discovered in MIT Kerberos 5 (aka krb5) through 1.16. There is a variable \"dbentry->n_key_data\" in kadmin/dbutil/dump.c that can store 16-bit data but unknowingly the developer has assigned a \"u4\" variable to it, which is for 32-bit data. An attacker can use this vulnerability to affect other artifacts of the database as we know that a Kerberos database dump file contains trusted data.",
-                    "diffID": "sha256:a499da141b419b2e97ed40192951a05fc37fadec129a55e1de03773e23fff97b",
-                    "installedVersion": "1.18.3-6+deb11u4",
-                    "packageName": "libkrb5support0",
-                    "purl": "pkg:deb/debian/libkrb5support0@1.18.3-6%2Bdeb11u4?arch=arm64&distro=debian-11.9",
-                    "references": [
-                      "https://access.redhat.com/security/cve/CVE-2018-5709",
-                      "https://github.com/poojamnit/Kerberos-V5-1.16-Vulnerabilities/tree/master/Integer%20Overflow",
-                      "https://lists.apache.org/thread.html/rf9fa47ab66495c78bb4120b0754dd9531ca2ff0430f6685ac9b07772%40%3Cdev.mina.apache.org%3E",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2018-5709",
-                      "https://www.cve.org/CVERecord?id=CVE-2018-5709"
-                    ],
-                    "severity": "LOW",
-                    "suppressed": false,
-                    "title": "krb5: integer overflow in dbentry->n_key_data in kadmin/dbutil/dump.c"
-                  },
-                  {
-                    "cve": "CVE-2024-26458",
-                    "cvss": {
-                      "redhat": {
-                        "v3score": "5.9",
-                        "v3vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-401"
-                    ],
-                    "description": "Kerberos 5 (aka krb5) 1.21.2 contains a memory leak in /krb5/src/lib/rpc/pmap_rmt.c.",
-                    "diffID": "sha256:a499da141b419b2e97ed40192951a05fc37fadec129a55e1de03773e23fff97b",
-                    "installedVersion": "1.18.3-6+deb11u4",
-                    "packageName": "libkrb5support0",
-                    "purl": "pkg:deb/debian/libkrb5support0@1.18.3-6%2Bdeb11u4?arch=arm64&distro=debian-11.9",
-                    "references": [
-                      "https://access.redhat.com/errata/RHSA-2024:3268",
-                      "https://access.redhat.com/security/cve/CVE-2024-26458",
-                      "https://bugzilla.redhat.com/2266731",
-                      "https://bugzilla.redhat.com/2266740",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2266731",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2266740",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26458",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26461",
-                      "https://errata.almalinux.org/8/ALSA-2024-3268.html",
-                      "https://errata.rockylinux.org/RLSA-2024:3268",
-                      "https://github.com/LuMingYinDetect/krb5_defects/blob/main/krb5_detect_1.md",
-                      "https://linux.oracle.com/cve/CVE-2024-26458.html",
-                      "https://linux.oracle.com/errata/ELSA-2024-9331.html",
-                      "https://mailman.mit.edu/pipermail/kerberos/2024-March/023095.html",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2024-26458",
-                      "https://security.netapp.com/advisory/ntap-20240415-0010/",
-                      "https://ubuntu.com/security/notices/USN-7314-1",
-                      "https://www.cve.org/CVERecord?id=CVE-2024-26458"
-                    ],
-                    "severity": "LOW",
-                    "suppressed": false,
-                    "title": "krb5: Memory leak at /krb5/src/lib/rpc/pmap_rmt.c"
-                  },
-                  {
-                    "cve": "CVE-2024-26461",
-                    "cvss": {
-                      "redhat": {
-                        "v3score": "5.9",
-                        "v3vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-770"
-                    ],
-                    "description": "Kerberos 5 (aka krb5) 1.21.2 contains a memory leak vulnerability in /krb5/src/lib/gssapi/krb5/k5sealv3.c.",
-                    "diffID": "sha256:a499da141b419b2e97ed40192951a05fc37fadec129a55e1de03773e23fff97b",
-                    "installedVersion": "1.18.3-6+deb11u4",
-                    "packageName": "libkrb5support0",
-                    "purl": "pkg:deb/debian/libkrb5support0@1.18.3-6%2Bdeb11u4?arch=arm64&distro=debian-11.9",
-                    "references": [
-                      "https://access.redhat.com/errata/RHSA-2024:3268",
-                      "https://access.redhat.com/security/cve/CVE-2024-26461",
-                      "https://bugzilla.redhat.com/2266731",
-                      "https://bugzilla.redhat.com/2266740",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2266731",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2266740",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26458",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26461",
-                      "https://errata.almalinux.org/8/ALSA-2024-3268.html",
-                      "https://errata.rockylinux.org/RLSA-2024:3268",
-                      "https://github.com/LuMingYinDetect/krb5_defects/blob/main/krb5_detect_2.md",
-                      "https://linux.oracle.com/cve/CVE-2024-26461.html",
-                      "https://linux.oracle.com/errata/ELSA-2024-9331.html",
-                      "https://mailman.mit.edu/pipermail/kerberos/2024-March/023095.html",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2024-26461",
-                      "https://security.netapp.com/advisory/ntap-20240415-0011/",
-                      "https://ubuntu.com/security/notices/USN-7314-1",
-                      "https://www.cve.org/CVERecord?id=CVE-2024-26461"
-                    ],
-                    "severity": "LOW",
-                    "suppressed": false,
-                    "title": "krb5: Memory leak at /krb5/src/lib/gssapi/krb5/k5sealv3.c"
-                  },
-                  {
-                    "cve": "CVE-2023-2953",
-                    "cvss": {
-                      "bitnami": {
-                        "v3score": "7.5",
-                        "v3vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"
-                      },
-                      "nvd": {
-                        "v3score": "7.5",
-                        "v3vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"
-                      },
-                      "redhat": {
-                        "v3score": "7.1",
-                        "v3vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:H"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-476"
-                    ],
-                    "description": "A vulnerability was found in openldap. This security flaw causes a null pointer dereference in ber_memalloc_x() function.",
-                    "diffID": "sha256:2f458857553769636f3c149c0c8d41acc63c9e24282823b0ea26869a635e9f48",
-                    "installedVersion": "2.4.57+dfsg-3+deb11u1",
-                    "packageName": "libldap-2.4-2",
-                    "purl": "pkg:deb/debian/libldap-2.4-2@2.4.57%2Bdfsg-3%2Bdeb11u1?arch=arm64&distro=debian-11.9",
-                    "references": [
-                      "http://seclists.org/fulldisclosure/2023/Jul/47",
-                      "http://seclists.org/fulldisclosure/2023/Jul/48",
-                      "http://seclists.org/fulldisclosure/2023/Jul/52",
-                      "https://access.redhat.com/errata/RHSA-2024:4264",
-                      "https://access.redhat.com/security/cve/CVE-2023-2953",
-                      "https://bugs.openldap.org/show_bug.cgi?id=9904",
-                      "https://bugzilla.redhat.com/2210651",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2210651",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-2953",
-                      "https://errata.almalinux.org/8/ALSA-2024-4264.html",
-                      "https://errata.rockylinux.org/RLSA-2024:4264",
-                      "https://linux.oracle.com/cve/CVE-2023-2953.html",
-                      "https://linux.oracle.com/errata/ELSA-2024-4264.html",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2023-2953",
-                      "https://security.netapp.com/advisory/ntap-20230703-0005/",
-                      "https://support.apple.com/kb/HT213843",
-                      "https://support.apple.com/kb/HT213844",
-                      "https://support.apple.com/kb/HT213845",
-                      "https://ubuntu.com/security/notices/USN-6197-1",
-                      "https://ubuntu.com/security/notices/USN-6616-1",
-                      "https://www.cve.org/CVERecord?id=CVE-2023-2953"
-                    ],
-                    "severity": "HIGH",
-                    "suppressed": false,
-                    "title": "openldap: null pointer dereference in  ber_memalloc_x  function"
-                  },
-                  {
-                    "cve": "CVE-2015-3276",
-                    "cvss": {
-                      "nvd": {
-                        "v3score": "7.5",
-                        "v3vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N"
-                      },
-                      "redhat": {
-                        "v3score": "0",
-                        "v3vector": ""
-                      }
-                    },
-                    "description": "The nss_parse_ciphers function in libraries/libldap/tls_m.c in OpenLDAP does not properly parse OpenSSL-style multi-keyword mode cipher strings, which might cause a weaker than intended cipher to be used and allow remote attackers to have unspecified impact via unknown vectors.",
-                    "diffID": "sha256:2f458857553769636f3c149c0c8d41acc63c9e24282823b0ea26869a635e9f48",
-                    "installedVersion": "2.4.57+dfsg-3+deb11u1",
-                    "packageName": "libldap-2.4-2",
-                    "purl": "pkg:deb/debian/libldap-2.4-2@2.4.57%2Bdfsg-3%2Bdeb11u1?arch=arm64&distro=debian-11.9",
-                    "references": [
-                      "http://rhn.redhat.com/errata/RHSA-2015-2131.html",
-                      "http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html",
-                      "http://www.securitytracker.com/id/1034221",
-                      "https://access.redhat.com/security/cve/CVE-2015-3276",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=1238322",
-                      "https://linux.oracle.com/cve/CVE-2015-3276.html",
-                      "https://linux.oracle.com/errata/ELSA-2015-2131.html",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2015-3276",
-                      "https://www.cve.org/CVERecord?id=CVE-2015-3276"
-                    ],
-                    "severity": "LOW",
-                    "suppressed": false,
-                    "title": "openldap: incorrect multi-keyword mode cipherstring parsing"
-                  },
-                  {
-                    "cve": "CVE-2017-14159",
-                    "cvss": {
-                      "nvd": {
-                        "v3score": "4.7",
-                        "v3vector": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H"
-                      },
-                      "redhat": {
-                        "v3score": "4.4",
-                        "v3vector": "CVSS:3.0/AV:L/AC:H/PR:L/UI:R/S:U/C:N/I:N/A:H"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-665"
-                    ],
-                    "description": "slapd in OpenLDAP 2.4.45 and earlier creates a PID file after dropping privileges to a non-root account, which might allow local users to kill arbitrary processes by leveraging access to this non-root account for PID file modification before a root script executes a \"kill `cat /pathname`\" command, as demonstrated by openldap-initscript.",
-                    "diffID": "sha256:2f458857553769636f3c149c0c8d41acc63c9e24282823b0ea26869a635e9f48",
-                    "installedVersion": "2.4.57+dfsg-3+deb11u1",
-                    "packageName": "libldap-2.4-2",
-                    "purl": "pkg:deb/debian/libldap-2.4-2@2.4.57%2Bdfsg-3%2Bdeb11u1?arch=arm64&distro=debian-11.9",
-                    "references": [
-                      "http://www.openldap.org/its/index.cgi?findid=8703",
-                      "https://access.redhat.com/security/cve/CVE-2017-14159",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2017-14159",
-                      "https://www.cve.org/CVERecord?id=CVE-2017-14159",
-                      "https://www.oracle.com/security-alerts/cpuapr2022.html"
-                    ],
-                    "severity": "LOW",
-                    "suppressed": false,
-                    "title": "openldap: Privilege escalation via PID file manipulation"
-                  },
-                  {
-                    "cve": "CVE-2017-17740",
-                    "cvss": {
-                      "nvd": {
-                        "v3score": "7.5",
-                        "v3vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"
-                      },
-                      "redhat": {
-                        "v3score": "5.9",
-                        "v3vector": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-119"
-                    ],
-                    "description": "contrib/slapd-modules/nops/nops.c in OpenLDAP through 2.4.45, when both the nops module and the memberof overlay are enabled, attempts to free a buffer that was allocated on the stack, which allows remote attackers to cause a denial of service (slapd crash) via a member MODDN operation.",
-                    "diffID": "sha256:2f458857553769636f3c149c0c8d41acc63c9e24282823b0ea26869a635e9f48",
-                    "installedVersion": "2.4.57+dfsg-3+deb11u1",
-                    "packageName": "libldap-2.4-2",
-                    "purl": "pkg:deb/debian/libldap-2.4-2@2.4.57%2Bdfsg-3%2Bdeb11u1?arch=arm64&distro=debian-11.9",
-                    "references": [
-                      "http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00053.html",
-                      "http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00058.html",
-                      "http://www.openldap.org/its/index.cgi/Incoming?id=8759",
-                      "https://access.redhat.com/security/cve/CVE-2017-17740",
-                      "https://kc.mcafee.com/corporate/index?page=content&id=SB10365",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2017-17740",
-                      "https://www.cve.org/CVERecord?id=CVE-2017-17740",
-                      "https://www.oracle.com/security-alerts/cpuapr2022.html"
-                    ],
-                    "severity": "LOW",
-                    "suppressed": false,
-                    "title": "openldap: contrib/slapd-modules/nops/nops.c attempts to free stack buffer allowing remote attackers to cause a denial of service"
-                  },
-                  {
-                    "cve": "CVE-2020-15719",
-                    "cvss": {
-                      "bitnami": {
-                        "v3score": "4.2",
-                        "v3vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N"
-                      },
-                      "nvd": {
-                        "v3score": "4.2",
-                        "v3vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N"
-                      },
-                      "redhat": {
-                        "v3score": "4.2",
-                        "v3vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-295"
-                    ],
-                    "description": "libldap in certain third-party OpenLDAP packages has a certificate-validation flaw when the third-party package is asserting RFC6125 support. It considers CN even when there is a non-matching subjectAltName (SAN). This is fixed in, for example, openldap-2.4.46-10.el8 in Red Hat Enterprise Linux.",
-                    "diffID": "sha256:2f458857553769636f3c149c0c8d41acc63c9e24282823b0ea26869a635e9f48",
-                    "installedVersion": "2.4.57+dfsg-3+deb11u1",
-                    "packageName": "libldap-2.4-2",
-                    "purl": "pkg:deb/debian/libldap-2.4-2@2.4.57%2Bdfsg-3%2Bdeb11u1?arch=arm64&distro=debian-11.9",
-                    "references": [
-                      "http://lists.opensuse.org/opensuse-security-announce/2020-09/msg00033.html",
-                      "http://lists.opensuse.org/opensuse-security-announce/2020-09/msg00059.html",
-                      "https://access.redhat.com/errata/RHBA-2019:3674",
-                      "https://access.redhat.com/security/cve/CVE-2020-15719",
-                      "https://bugs.openldap.org/show_bug.cgi?id=9266",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=1740070",
-                      "https://kc.mcafee.com/corporate/index?page=content&id=SB10365",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2020-15719",
-                      "https://www.cve.org/CVERecord?id=CVE-2020-15719",
-                      "https://www.oracle.com/security-alerts/cpuapr2022.html"
-                    ],
-                    "severity": "LOW",
-                    "suppressed": false,
-                    "title": "openldap: Certificate validation incorrectly matches name against CN-ID"
-                  },
-                  {
-                    "cve": "CVE-2026-22185",
-                    "cvss": {
-                      "redhat": {
-                        "v3score": "6.8",
-                        "v3vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-125",
-                      "CWE-191"
-                    ],
-                    "description": "OpenLDAP Lightning Memory-Mapped Database (LMDB) versions up to and including 0.9.14, prior to commit 8e1fda8, contain a heap buffer underflow in the readline() function of mdb_load. When processing malformed input containing an embedded NUL byte, an unsigned offset calculation can underflow and cause an out-of-bounds read of one byte before the allocated heap buffer. This can cause mdb_load to crash, leading to a limited denial-of-service condition.",
-                    "diffID": "sha256:2f458857553769636f3c149c0c8d41acc63c9e24282823b0ea26869a635e9f48",
-                    "installedVersion": "2.4.57+dfsg-3+deb11u1",
-                    "packageName": "libldap-2.4-2",
-                    "purl": "pkg:deb/debian/libldap-2.4-2@2.4.57%2Bdfsg-3%2Bdeb11u1?arch=arm64&distro=debian-11.9",
-                    "references": [
-                      "https://access.redhat.com/security/cve/CVE-2026-22185",
-                      "https://bugs.openldap.org/show_bug.cgi?id=10421",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2026-22185",
-                      "https://seclists.org/fulldisclosure/2026/Jan/5",
-                      "https://seclists.org/fulldisclosure/2026/Jan/8",
-                      "https://www.cve.org/CVERecord?id=CVE-2026-22185",
-                      "https://www.openldap.org/",
-                      "https://www.vulncheck.com/advisories/openldap-lmdb-mdb-load-heap-buffer-underflow-in-readline"
-                    ],
-                    "severity": "LOW",
-                    "suppressed": false,
-                    "title": "OpenLDAP: OpenLDAP LMDB: Denial of Service and Information Disclosure via Heap Buffer Underflow"
-                  },
-                  {
-                    "cve": "CVE-2025-14104",
-                    "cvss": {
-                      "redhat": {
-                        "v3score": "6.1",
-                        "v3vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-125"
-                    ],
-                    "description": "A flaw was found in util-linux. This vulnerability allows a heap buffer overread when processing 256-byte usernames, specifically within the `setpwnam()` function, affecting SUID (Set User ID) login-utils utilities writing to the password database.",
-                    "diffID": "sha256:a499da141b419b2e97ed40192951a05fc37fadec129a55e1de03773e23fff97b",
-                    "installedVersion": "2.36.1-8+deb11u2",
-                    "packageName": "libmount1",
-                    "purl": "pkg:deb/debian/libmount1@2.36.1-8%2Bdeb11u2?arch=arm64&distro=debian-11.9",
-                    "references": [
-                      "https://access.redhat.com/errata/RHSA-2026:1696",
-                      "https://access.redhat.com/errata/RHSA-2026:1852",
-                      "https://access.redhat.com/errata/RHSA-2026:1913",
-                      "https://access.redhat.com/security/cve/CVE-2025-14104",
-                      "https://bugzilla.redhat.com/2419369",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2419369",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-14104",
-                      "https://errata.almalinux.org/10/ALSA-2026-1696.html",
-                      "https://errata.rockylinux.org/RLSA-2026:1913",
-                      "https://linux.oracle.com/cve/CVE-2025-14104.html",
-                      "https://linux.oracle.com/errata/ELSA-2026-1913.html",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2025-14104",
-                      "https://www.cve.org/CVERecord?id=CVE-2025-14104"
-                    ],
-                    "severity": "MEDIUM",
-                    "suppressed": false,
-                    "title": "util-linux: util-linux: Heap buffer overread in setpwnam() when processing 256-byte usernames"
-                  },
-                  {
-                    "cve": "CVE-2022-0563",
-                    "cvss": {
-                      "nvd": {
-                        "v3score": "5.5",
-                        "v3vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N"
-                      },
-                      "redhat": {
-                        "v3score": "5.5",
-                        "v3vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-209"
-                    ],
-                    "description": "A flaw was found in the util-linux chfn and chsh utilities when compiled with Readline support. The Readline library uses an \"INPUTRC\" environment variable to get a path to the library config file. When the library cannot parse the specified file, it prints an error message containing data from the file. This flaw allows an unprivileged user to read root-owned files, potentially leading to privilege escalation. This flaw affects util-linux versions prior to 2.37.4.",
-                    "diffID": "sha256:a499da141b419b2e97ed40192951a05fc37fadec129a55e1de03773e23fff97b",
-                    "installedVersion": "2.36.1-8+deb11u2",
-                    "packageName": "libmount1",
-                    "purl": "pkg:deb/debian/libmount1@2.36.1-8%2Bdeb11u2?arch=arm64&distro=debian-11.9",
-                    "references": [
-                      "https://access.redhat.com/security/cve/CVE-2022-0563",
-                      "https://blog.trailofbits.com/2023/02/16/suid-logic-bug-linux-readline/",
-                      "https://lore.kernel.org/util-linux/20220214110609.msiwlm457ngoic6w%40ws.net.home/T/#u",
-                      "https://lore.kernel.org/util-linux/20220214110609.msiwlm457ngoic6w@ws.net.home/T/#u",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2022-0563",
-                      "https://security.gentoo.org/glsa/202401-08",
-                      "https://security.netapp.com/advisory/ntap-20220331-0002/",
-                      "https://www.cve.org/CVERecord?id=CVE-2022-0563"
-                    ],
-                    "severity": "LOW",
-                    "suppressed": false,
-                    "title": "util-linux: partial disclosure of arbitrary files in chfn and chsh when compiled with libreadline"
-                  },
-                  {
-                    "cve": "CVE-2024-28182",
-                    "cvss": {
-                      "redhat": {
-                        "v3score": "5.3",
-                        "v3vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-770"
-                    ],
-                    "description": "nghttp2 is an implementation of the Hypertext Transfer Protocol version 2 in C. The nghttp2 library prior to version 1.61.0 keeps reading the unbounded number of HTTP/2 CONTINUATION frames even after a stream is reset to keep HPACK context in sync.  This causes excessive CPU usage to decode HPACK stream. nghttp2 v1.61.0 mitigates this vulnerability by limiting the number of CONTINUATION frames it accepts per stream. There is no workaround for this vulnerability.",
-                    "diffID": "sha256:2f458857553769636f3c149c0c8d41acc63c9e24282823b0ea26869a635e9f48",
-                    "fixedVersions": [
-                      "1.43.0-1+deb11u2"
-                    ],
-                    "installedVersion": "1.43.0-1+deb11u1",
-                    "packageName": "libnghttp2-14",
-                    "purl": "pkg:deb/debian/libnghttp2-14@1.43.0-1%2Bdeb11u1?arch=arm64&distro=debian-11.9",
-                    "references": [
-                      "http://www.openwall.com/lists/oss-security/2024/04/03/16",
-                      "https://access.redhat.com/errata/RHSA-2024:4252",
-                      "https://access.redhat.com/security/cve/CVE-2024-28182",
-                      "https://bugzilla.redhat.com/2268639",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2268639",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-28182",
-                      "https://errata.almalinux.org/8/ALSA-2024-4252.html",
-                      "https://errata.rockylinux.org/RLSA-2024:3501",
-                      "https://github.com/nghttp2/nghttp2/commit/00201ecd8f982da3b67d4f6868af72a1b03b14e0",
-                      "https://github.com/nghttp2/nghttp2/commit/d71a4668c6bead55805d18810d633fbb98315af9",
-                      "https://github.com/nghttp2/nghttp2/security/advisories/GHSA-x6x3-gv8h-m57q",
-                      "https://linux.oracle.com/cve/CVE-2024-28182.html",
-                      "https://linux.oracle.com/errata/ELSA-2024-4252.html",
-                      "https://lists.debian.org/debian-lts-announce/2024/04/msg00026.html",
-                      "https://lists.debian.org/debian-lts-announce/2024/09/msg00041.html",
-                      "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/AGOME6ZXJG7664IPQNVE3DL67E3YP3HY/",
-                      "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/J6ZMXUGB66VAXDW5J6QSTHM5ET25FGSA/",
-                      "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/PXJO2EASHM2OQQLGVDY5ZSO7UVDVHTDK/",
-                      "https://nowotarski.info/http2-continuation-flood/",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2024-28182",
-                      "https://ubuntu.com/security/notices/USN-6754-1",
-                      "https://ubuntu.com/security/notices/USN-6754-2",
-                      "https://www.cve.org/CVERecord?id=CVE-2024-28182",
-                      "https://www.kb.cert.org/vuls/id/421644"
-                    ],
-                    "severity": "MEDIUM",
-                    "suppressed": false,
-                    "title": "nghttp2: CONTINUATION frames DoS"
-                  },
-                  {
-                    "cve": "CVE-2025-6020",
-                    "cvss": {
-                      "redhat": {
-                        "v3score": "7.8",
-                        "v3vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-22"
-                    ],
-                    "description": "A flaw was found in linux-pam. The module pam_namespace may use access user-controlled paths without proper protection, allowing local users to elevate their privileges to root via multiple symlink attacks and race conditions.",
-                    "diffID": "sha256:a499da141b419b2e97ed40192951a05fc37fadec129a55e1de03773e23fff97b",
-                    "fixedVersions": [
-                      "1.4.0-9+deb11u2"
-                    ],
-                    "installedVersion": "1.4.0-9+deb11u1",
-                    "packageName": "libpam-modules",
-                    "purl": "pkg:deb/debian/libpam-modules@1.4.0-9%2Bdeb11u1?arch=arm64&distro=debian-11.9",
-                    "references": [
-                      "http://www.openwall.com/lists/oss-security/2025/06/17/1",
-                      "https://access.redhat.com/errata/RHSA-2025:10024",
-                      "https://access.redhat.com/errata/RHSA-2025:10027",
-                      "https://access.redhat.com/errata/RHSA-2025:10180",
-                      "https://access.redhat.com/errata/RHSA-2025:10354",
-                      "https://access.redhat.com/errata/RHSA-2025:10357",
-                      "https://access.redhat.com/errata/RHSA-2025:10358",
-                      "https://access.redhat.com/errata/RHSA-2025:10359",
-                      "https://access.redhat.com/errata/RHSA-2025:10361",
-                      "https://access.redhat.com/errata/RHSA-2025:10362",
-                      "https://access.redhat.com/errata/RHSA-2025:10735",
-                      "https://access.redhat.com/errata/RHSA-2025:10823",
-                      "https://access.redhat.com/errata/RHSA-2025:11386",
-                      "https://access.redhat.com/errata/RHSA-2025:11487",
-                      "https://access.redhat.com/errata/RHSA-2025:14557",
-                      "https://access.redhat.com/errata/RHSA-2025:15099",
-                      "https://access.redhat.com/errata/RHSA-2025:15709",
-                      "https://access.redhat.com/errata/RHSA-2025:15827",
-                      "https://access.redhat.com/errata/RHSA-2025:15828",
-                      "https://access.redhat.com/errata/RHSA-2025:16524",
-                      "https://access.redhat.com/errata/RHSA-2025:17181",
-                      "https://access.redhat.com/errata/RHSA-2025:18219",
-                      "https://access.redhat.com/errata/RHSA-2025:20181",
-                      "https://access.redhat.com/errata/RHSA-2025:21885",
-                      "https://access.redhat.com/errata/RHSA-2025:22019",
-                      "https://access.redhat.com/errata/RHSA-2025:9526",
-                      "https://access.redhat.com/errata/RHSA-2026:0934",
-                      "https://access.redhat.com/security/cve/CVE-2025-6020",
-                      "https://bugzilla.redhat.com/2372512",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2372512",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-6020",
-                      "https://errata.almalinux.org/8/ALSA-2025-14557.html",
-                      "https://errata.rockylinux.org/RLSA-2025:9526",
-                      "https://linux.oracle.com/cve/CVE-2025-6020.html",
-                      "https://linux.oracle.com/errata/ELSA-2025-9526.html",
-                      "https://lists.debian.org/debian-lts-announce/2025/09/msg00021.html",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2025-6020",
-                      "https://ubuntu.com/security/notices/USN-7580-1",
-                      "https://www.cve.org/CVERecord?id=CVE-2025-6020",
-                      "https://www.openwall.com/lists/oss-security/2025/06/17/1"
-                    ],
-                    "severity": "HIGH",
-                    "suppressed": false,
-                    "title": "linux-pam: Linux-pam directory Traversal"
-                  },
-                  {
-                    "cve": "CVE-2024-10041",
-                    "cvss": {
-                      "redhat": {
-                        "v3score": "4.7",
-                        "v3vector": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-922"
-                    ],
-                    "description": "A vulnerability was found in PAM. The secret information is stored in memory, where the attacker can trigger the victim program to execute by sending characters to its standard input (stdin). As this occurs, the attacker can train the branch predictor to execute an ROP chain speculatively. This flaw could result in leaked passwords, such as those found in /etc/shadow while performing authentications.",
-                    "diffID": "sha256:a499da141b419b2e97ed40192951a05fc37fadec129a55e1de03773e23fff97b",
-                    "installedVersion": "1.4.0-9+deb11u1",
-                    "packageName": "libpam-modules",
-                    "purl": "pkg:deb/debian/libpam-modules@1.4.0-9%2Bdeb11u1?arch=arm64&distro=debian-11.9",
-                    "references": [
-                      "https://access.redhat.com/errata/RHSA-2024:10379",
-                      "https://access.redhat.com/errata/RHSA-2024:11250",
-                      "https://access.redhat.com/errata/RHSA-2024:9941",
-                      "https://access.redhat.com/security/cve/CVE-2024-10041",
-                      "https://bugzilla.redhat.com/2319212",
-                      "https://bugzilla.redhat.com/2324291",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2319212",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2324291",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-10041",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-10963",
-                      "https://errata.almalinux.org/8/ALSA-2024-10379.html",
-                      "https://errata.rockylinux.org/RLSA-2024:10379",
-                      "https://linux.oracle.com/cve/CVE-2024-10041.html",
-                      "https://linux.oracle.com/errata/ELSA-2024-11250.html",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2024-10041",
-                      "https://www.cve.org/CVERecord?id=CVE-2024-10041"
-                    ],
-                    "severity": "MEDIUM",
-                    "suppressed": false,
-                    "title": "pam: libpam: Libpam vulnerable to read hashed password"
-                  },
-                  {
-                    "cve": "CVE-2024-22365",
-                    "cvss": {
-                      "nvd": {
-                        "v3score": "5.5",
-                        "v3vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H"
-                      },
-                      "redhat": {
-                        "v3score": "5.5",
-                        "v3vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-664"
-                    ],
-                    "description": "linux-pam (aka Linux PAM) before 1.6.0 allows attackers to cause a denial of service (blocked login process) via mkfifo because the openat call (for protect_dir) lacks O_DIRECTORY.",
-                    "diffID": "sha256:a499da141b419b2e97ed40192951a05fc37fadec129a55e1de03773e23fff97b",
-                    "fixedVersions": [
-                      "1.4.0-9+deb11u2"
-                    ],
-                    "installedVersion": "1.4.0-9+deb11u1",
-                    "packageName": "libpam-modules",
-                    "purl": "pkg:deb/debian/libpam-modules@1.4.0-9%2Bdeb11u1?arch=arm64&distro=debian-11.9",
-                    "references": [
-                      "http://www.openwall.com/lists/oss-security/2024/01/18/3",
-                      "https://access.redhat.com/errata/RHSA-2024:3163",
-                      "https://access.redhat.com/security/cve/CVE-2024-22365",
-                      "https://bugzilla.redhat.com/2257722",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2257722",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-22365",
-                      "https://errata.almalinux.org/8/ALSA-2024-3163.html",
-                      "https://errata.rockylinux.org/RLSA-2024:3163",
-                      "https://github.com/linux-pam/linux-pam",
-                      "https://github.com/linux-pam/linux-pam/commit/031bb5a5d0d950253b68138b498dc93be69a64cb",
-                      "https://github.com/linux-pam/linux-pam/releases/tag/v1.6.0",
-                      "https://linux.oracle.com/cve/CVE-2024-22365.html",
-                      "https://linux.oracle.com/errata/ELSA-2024-3163.html",
-                      "https://lists.debian.org/debian-lts-announce/2025/09/msg00021.html",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2024-22365",
-                      "https://ubuntu.com/security/notices/USN-6588-1",
-                      "https://ubuntu.com/security/notices/USN-6588-2",
-                      "https://www.cve.org/CVERecord?id=CVE-2024-22365",
-                      "https://www.openwall.com/lists/oss-security/2024/01/18/3"
-                    ],
-                    "severity": "MEDIUM",
-                    "suppressed": false,
-                    "title": "pam: allowing unprivileged user to block another user namespace"
-                  },
-                  {
-                    "cve": "CVE-2025-6020",
-                    "cvss": {
-                      "redhat": {
-                        "v3score": "7.8",
-                        "v3vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-22"
-                    ],
-                    "description": "A flaw was found in linux-pam. The module pam_namespace may use access user-controlled paths without proper protection, allowing local users to elevate their privileges to root via multiple symlink attacks and race conditions.",
-                    "diffID": "sha256:a499da141b419b2e97ed40192951a05fc37fadec129a55e1de03773e23fff97b",
-                    "fixedVersions": [
-                      "1.4.0-9+deb11u2"
-                    ],
-                    "installedVersion": "1.4.0-9+deb11u1",
-                    "packageName": "libpam-modules-bin",
-                    "purl": "pkg:deb/debian/libpam-modules-bin@1.4.0-9%2Bdeb11u1?arch=arm64&distro=debian-11.9",
-                    "references": [
-                      "http://www.openwall.com/lists/oss-security/2025/06/17/1",
-                      "https://access.redhat.com/errata/RHSA-2025:10024",
-                      "https://access.redhat.com/errata/RHSA-2025:10027",
-                      "https://access.redhat.com/errata/RHSA-2025:10180",
-                      "https://access.redhat.com/errata/RHSA-2025:10354",
-                      "https://access.redhat.com/errata/RHSA-2025:10357",
-                      "https://access.redhat.com/errata/RHSA-2025:10358",
-                      "https://access.redhat.com/errata/RHSA-2025:10359",
-                      "https://access.redhat.com/errata/RHSA-2025:10361",
-                      "https://access.redhat.com/errata/RHSA-2025:10362",
-                      "https://access.redhat.com/errata/RHSA-2025:10735",
-                      "https://access.redhat.com/errata/RHSA-2025:10823",
-                      "https://access.redhat.com/errata/RHSA-2025:11386",
-                      "https://access.redhat.com/errata/RHSA-2025:11487",
-                      "https://access.redhat.com/errata/RHSA-2025:14557",
-                      "https://access.redhat.com/errata/RHSA-2025:15099",
-                      "https://access.redhat.com/errata/RHSA-2025:15709",
-                      "https://access.redhat.com/errata/RHSA-2025:15827",
-                      "https://access.redhat.com/errata/RHSA-2025:15828",
-                      "https://access.redhat.com/errata/RHSA-2025:16524",
-                      "https://access.redhat.com/errata/RHSA-2025:17181",
-                      "https://access.redhat.com/errata/RHSA-2025:18219",
-                      "https://access.redhat.com/errata/RHSA-2025:20181",
-                      "https://access.redhat.com/errata/RHSA-2025:21885",
-                      "https://access.redhat.com/errata/RHSA-2025:22019",
-                      "https://access.redhat.com/errata/RHSA-2025:9526",
-                      "https://access.redhat.com/errata/RHSA-2026:0934",
-                      "https://access.redhat.com/security/cve/CVE-2025-6020",
-                      "https://bugzilla.redhat.com/2372512",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2372512",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-6020",
-                      "https://errata.almalinux.org/8/ALSA-2025-14557.html",
-                      "https://errata.rockylinux.org/RLSA-2025:9526",
-                      "https://linux.oracle.com/cve/CVE-2025-6020.html",
-                      "https://linux.oracle.com/errata/ELSA-2025-9526.html",
-                      "https://lists.debian.org/debian-lts-announce/2025/09/msg00021.html",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2025-6020",
-                      "https://ubuntu.com/security/notices/USN-7580-1",
-                      "https://www.cve.org/CVERecord?id=CVE-2025-6020",
-                      "https://www.openwall.com/lists/oss-security/2025/06/17/1"
-                    ],
-                    "severity": "HIGH",
-                    "suppressed": false,
-                    "title": "linux-pam: Linux-pam directory Traversal"
-                  },
-                  {
-                    "cve": "CVE-2024-10041",
-                    "cvss": {
-                      "redhat": {
-                        "v3score": "4.7",
-                        "v3vector": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-922"
-                    ],
-                    "description": "A vulnerability was found in PAM. The secret information is stored in memory, where the attacker can trigger the victim program to execute by sending characters to its standard input (stdin). As this occurs, the attacker can train the branch predictor to execute an ROP chain speculatively. This flaw could result in leaked passwords, such as those found in /etc/shadow while performing authentications.",
-                    "diffID": "sha256:a499da141b419b2e97ed40192951a05fc37fadec129a55e1de03773e23fff97b",
-                    "installedVersion": "1.4.0-9+deb11u1",
-                    "packageName": "libpam-modules-bin",
-                    "purl": "pkg:deb/debian/libpam-modules-bin@1.4.0-9%2Bdeb11u1?arch=arm64&distro=debian-11.9",
-                    "references": [
-                      "https://access.redhat.com/errata/RHSA-2024:10379",
-                      "https://access.redhat.com/errata/RHSA-2024:11250",
-                      "https://access.redhat.com/errata/RHSA-2024:9941",
-                      "https://access.redhat.com/security/cve/CVE-2024-10041",
-                      "https://bugzilla.redhat.com/2319212",
-                      "https://bugzilla.redhat.com/2324291",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2319212",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2324291",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-10041",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-10963",
-                      "https://errata.almalinux.org/8/ALSA-2024-10379.html",
-                      "https://errata.rockylinux.org/RLSA-2024:10379",
-                      "https://linux.oracle.com/cve/CVE-2024-10041.html",
-                      "https://linux.oracle.com/errata/ELSA-2024-11250.html",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2024-10041",
-                      "https://www.cve.org/CVERecord?id=CVE-2024-10041"
-                    ],
-                    "severity": "MEDIUM",
-                    "suppressed": false,
-                    "title": "pam: libpam: Libpam vulnerable to read hashed password"
-                  },
-                  {
-                    "cve": "CVE-2024-22365",
-                    "cvss": {
-                      "nvd": {
-                        "v3score": "5.5",
-                        "v3vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H"
-                      },
-                      "redhat": {
-                        "v3score": "5.5",
-                        "v3vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-664"
-                    ],
-                    "description": "linux-pam (aka Linux PAM) before 1.6.0 allows attackers to cause a denial of service (blocked login process) via mkfifo because the openat call (for protect_dir) lacks O_DIRECTORY.",
-                    "diffID": "sha256:a499da141b419b2e97ed40192951a05fc37fadec129a55e1de03773e23fff97b",
-                    "fixedVersions": [
-                      "1.4.0-9+deb11u2"
-                    ],
-                    "installedVersion": "1.4.0-9+deb11u1",
-                    "packageName": "libpam-modules-bin",
-                    "purl": "pkg:deb/debian/libpam-modules-bin@1.4.0-9%2Bdeb11u1?arch=arm64&distro=debian-11.9",
-                    "references": [
-                      "http://www.openwall.com/lists/oss-security/2024/01/18/3",
-                      "https://access.redhat.com/errata/RHSA-2024:3163",
-                      "https://access.redhat.com/security/cve/CVE-2024-22365",
-                      "https://bugzilla.redhat.com/2257722",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2257722",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-22365",
-                      "https://errata.almalinux.org/8/ALSA-2024-3163.html",
-                      "https://errata.rockylinux.org/RLSA-2024:3163",
-                      "https://github.com/linux-pam/linux-pam",
-                      "https://github.com/linux-pam/linux-pam/commit/031bb5a5d0d950253b68138b498dc93be69a64cb",
-                      "https://github.com/linux-pam/linux-pam/releases/tag/v1.6.0",
-                      "https://linux.oracle.com/cve/CVE-2024-22365.html",
-                      "https://linux.oracle.com/errata/ELSA-2024-3163.html",
-                      "https://lists.debian.org/debian-lts-announce/2025/09/msg00021.html",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2024-22365",
-                      "https://ubuntu.com/security/notices/USN-6588-1",
-                      "https://ubuntu.com/security/notices/USN-6588-2",
-                      "https://www.cve.org/CVERecord?id=CVE-2024-22365",
-                      "https://www.openwall.com/lists/oss-security/2024/01/18/3"
-                    ],
-                    "severity": "MEDIUM",
-                    "suppressed": false,
-                    "title": "pam: allowing unprivileged user to block another user namespace"
-                  },
-                  {
-                    "cve": "CVE-2025-6020",
-                    "cvss": {
-                      "redhat": {
-                        "v3score": "7.8",
-                        "v3vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-22"
-                    ],
-                    "description": "A flaw was found in linux-pam. The module pam_namespace may use access user-controlled paths without proper protection, allowing local users to elevate their privileges to root via multiple symlink attacks and race conditions.",
-                    "diffID": "sha256:a499da141b419b2e97ed40192951a05fc37fadec129a55e1de03773e23fff97b",
-                    "fixedVersions": [
-                      "1.4.0-9+deb11u2"
-                    ],
-                    "installedVersion": "1.4.0-9+deb11u1",
-                    "packageName": "libpam-runtime",
-                    "purl": "pkg:deb/debian/libpam-runtime@1.4.0-9%2Bdeb11u1?arch=all&distro=debian-11.9",
-                    "references": [
-                      "http://www.openwall.com/lists/oss-security/2025/06/17/1",
-                      "https://access.redhat.com/errata/RHSA-2025:10024",
-                      "https://access.redhat.com/errata/RHSA-2025:10027",
-                      "https://access.redhat.com/errata/RHSA-2025:10180",
-                      "https://access.redhat.com/errata/RHSA-2025:10354",
-                      "https://access.redhat.com/errata/RHSA-2025:10357",
-                      "https://access.redhat.com/errata/RHSA-2025:10358",
-                      "https://access.redhat.com/errata/RHSA-2025:10359",
-                      "https://access.redhat.com/errata/RHSA-2025:10361",
-                      "https://access.redhat.com/errata/RHSA-2025:10362",
-                      "https://access.redhat.com/errata/RHSA-2025:10735",
-                      "https://access.redhat.com/errata/RHSA-2025:10823",
-                      "https://access.redhat.com/errata/RHSA-2025:11386",
-                      "https://access.redhat.com/errata/RHSA-2025:11487",
-                      "https://access.redhat.com/errata/RHSA-2025:14557",
-                      "https://access.redhat.com/errata/RHSA-2025:15099",
-                      "https://access.redhat.com/errata/RHSA-2025:15709",
-                      "https://access.redhat.com/errata/RHSA-2025:15827",
-                      "https://access.redhat.com/errata/RHSA-2025:15828",
-                      "https://access.redhat.com/errata/RHSA-2025:16524",
-                      "https://access.redhat.com/errata/RHSA-2025:17181",
-                      "https://access.redhat.com/errata/RHSA-2025:18219",
-                      "https://access.redhat.com/errata/RHSA-2025:20181",
-                      "https://access.redhat.com/errata/RHSA-2025:21885",
-                      "https://access.redhat.com/errata/RHSA-2025:22019",
-                      "https://access.redhat.com/errata/RHSA-2025:9526",
-                      "https://access.redhat.com/errata/RHSA-2026:0934",
-                      "https://access.redhat.com/security/cve/CVE-2025-6020",
-                      "https://bugzilla.redhat.com/2372512",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2372512",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-6020",
-                      "https://errata.almalinux.org/8/ALSA-2025-14557.html",
-                      "https://errata.rockylinux.org/RLSA-2025:9526",
-                      "https://linux.oracle.com/cve/CVE-2025-6020.html",
-                      "https://linux.oracle.com/errata/ELSA-2025-9526.html",
-                      "https://lists.debian.org/debian-lts-announce/2025/09/msg00021.html",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2025-6020",
-                      "https://ubuntu.com/security/notices/USN-7580-1",
-                      "https://www.cve.org/CVERecord?id=CVE-2025-6020",
-                      "https://www.openwall.com/lists/oss-security/2025/06/17/1"
-                    ],
-                    "severity": "HIGH",
-                    "suppressed": false,
-                    "title": "linux-pam: Linux-pam directory Traversal"
-                  },
-                  {
-                    "cve": "CVE-2024-10041",
-                    "cvss": {
-                      "redhat": {
-                        "v3score": "4.7",
-                        "v3vector": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-922"
-                    ],
-                    "description": "A vulnerability was found in PAM. The secret information is stored in memory, where the attacker can trigger the victim program to execute by sending characters to its standard input (stdin). As this occurs, the attacker can train the branch predictor to execute an ROP chain speculatively. This flaw could result in leaked passwords, such as those found in /etc/shadow while performing authentications.",
-                    "diffID": "sha256:a499da141b419b2e97ed40192951a05fc37fadec129a55e1de03773e23fff97b",
-                    "installedVersion": "1.4.0-9+deb11u1",
-                    "packageName": "libpam-runtime",
-                    "purl": "pkg:deb/debian/libpam-runtime@1.4.0-9%2Bdeb11u1?arch=all&distro=debian-11.9",
-                    "references": [
-                      "https://access.redhat.com/errata/RHSA-2024:10379",
-                      "https://access.redhat.com/errata/RHSA-2024:11250",
-                      "https://access.redhat.com/errata/RHSA-2024:9941",
-                      "https://access.redhat.com/security/cve/CVE-2024-10041",
-                      "https://bugzilla.redhat.com/2319212",
-                      "https://bugzilla.redhat.com/2324291",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2319212",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2324291",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-10041",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-10963",
-                      "https://errata.almalinux.org/8/ALSA-2024-10379.html",
-                      "https://errata.rockylinux.org/RLSA-2024:10379",
-                      "https://linux.oracle.com/cve/CVE-2024-10041.html",
-                      "https://linux.oracle.com/errata/ELSA-2024-11250.html",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2024-10041",
-                      "https://www.cve.org/CVERecord?id=CVE-2024-10041"
-                    ],
-                    "severity": "MEDIUM",
-                    "suppressed": false,
-                    "title": "pam: libpam: Libpam vulnerable to read hashed password"
-                  },
-                  {
-                    "cve": "CVE-2024-22365",
-                    "cvss": {
-                      "nvd": {
-                        "v3score": "5.5",
-                        "v3vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H"
-                      },
-                      "redhat": {
-                        "v3score": "5.5",
-                        "v3vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-664"
-                    ],
-                    "description": "linux-pam (aka Linux PAM) before 1.6.0 allows attackers to cause a denial of service (blocked login process) via mkfifo because the openat call (for protect_dir) lacks O_DIRECTORY.",
-                    "diffID": "sha256:a499da141b419b2e97ed40192951a05fc37fadec129a55e1de03773e23fff97b",
-                    "fixedVersions": [
-                      "1.4.0-9+deb11u2"
-                    ],
-                    "installedVersion": "1.4.0-9+deb11u1",
-                    "packageName": "libpam-runtime",
-                    "purl": "pkg:deb/debian/libpam-runtime@1.4.0-9%2Bdeb11u1?arch=all&distro=debian-11.9",
-                    "references": [
-                      "http://www.openwall.com/lists/oss-security/2024/01/18/3",
-                      "https://access.redhat.com/errata/RHSA-2024:3163",
-                      "https://access.redhat.com/security/cve/CVE-2024-22365",
-                      "https://bugzilla.redhat.com/2257722",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2257722",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-22365",
-                      "https://errata.almalinux.org/8/ALSA-2024-3163.html",
-                      "https://errata.rockylinux.org/RLSA-2024:3163",
-                      "https://github.com/linux-pam/linux-pam",
-                      "https://github.com/linux-pam/linux-pam/commit/031bb5a5d0d950253b68138b498dc93be69a64cb",
-                      "https://github.com/linux-pam/linux-pam/releases/tag/v1.6.0",
-                      "https://linux.oracle.com/cve/CVE-2024-22365.html",
-                      "https://linux.oracle.com/errata/ELSA-2024-3163.html",
-                      "https://lists.debian.org/debian-lts-announce/2025/09/msg00021.html",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2024-22365",
-                      "https://ubuntu.com/security/notices/USN-6588-1",
-                      "https://ubuntu.com/security/notices/USN-6588-2",
-                      "https://www.cve.org/CVERecord?id=CVE-2024-22365",
-                      "https://www.openwall.com/lists/oss-security/2024/01/18/3"
-                    ],
-                    "severity": "MEDIUM",
-                    "suppressed": false,
-                    "title": "pam: allowing unprivileged user to block another user namespace"
-                  },
-                  {
-                    "cve": "CVE-2025-6020",
-                    "cvss": {
-                      "redhat": {
-                        "v3score": "7.8",
-                        "v3vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-22"
-                    ],
-                    "description": "A flaw was found in linux-pam. The module pam_namespace may use access user-controlled paths without proper protection, allowing local users to elevate their privileges to root via multiple symlink attacks and race conditions.",
-                    "diffID": "sha256:a499da141b419b2e97ed40192951a05fc37fadec129a55e1de03773e23fff97b",
-                    "fixedVersions": [
-                      "1.4.0-9+deb11u2"
-                    ],
-                    "installedVersion": "1.4.0-9+deb11u1",
-                    "packageName": "libpam0g",
-                    "purl": "pkg:deb/debian/libpam0g@1.4.0-9%2Bdeb11u1?arch=arm64&distro=debian-11.9",
-                    "references": [
-                      "http://www.openwall.com/lists/oss-security/2025/06/17/1",
-                      "https://access.redhat.com/errata/RHSA-2025:10024",
-                      "https://access.redhat.com/errata/RHSA-2025:10027",
-                      "https://access.redhat.com/errata/RHSA-2025:10180",
-                      "https://access.redhat.com/errata/RHSA-2025:10354",
-                      "https://access.redhat.com/errata/RHSA-2025:10357",
-                      "https://access.redhat.com/errata/RHSA-2025:10358",
-                      "https://access.redhat.com/errata/RHSA-2025:10359",
-                      "https://access.redhat.com/errata/RHSA-2025:10361",
-                      "https://access.redhat.com/errata/RHSA-2025:10362",
-                      "https://access.redhat.com/errata/RHSA-2025:10735",
-                      "https://access.redhat.com/errata/RHSA-2025:10823",
-                      "https://access.redhat.com/errata/RHSA-2025:11386",
-                      "https://access.redhat.com/errata/RHSA-2025:11487",
-                      "https://access.redhat.com/errata/RHSA-2025:14557",
-                      "https://access.redhat.com/errata/RHSA-2025:15099",
-                      "https://access.redhat.com/errata/RHSA-2025:15709",
-                      "https://access.redhat.com/errata/RHSA-2025:15827",
-                      "https://access.redhat.com/errata/RHSA-2025:15828",
-                      "https://access.redhat.com/errata/RHSA-2025:16524",
-                      "https://access.redhat.com/errata/RHSA-2025:17181",
-                      "https://access.redhat.com/errata/RHSA-2025:18219",
-                      "https://access.redhat.com/errata/RHSA-2025:20181",
-                      "https://access.redhat.com/errata/RHSA-2025:21885",
-                      "https://access.redhat.com/errata/RHSA-2025:22019",
-                      "https://access.redhat.com/errata/RHSA-2025:9526",
-                      "https://access.redhat.com/errata/RHSA-2026:0934",
-                      "https://access.redhat.com/security/cve/CVE-2025-6020",
-                      "https://bugzilla.redhat.com/2372512",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2372512",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-6020",
-                      "https://errata.almalinux.org/8/ALSA-2025-14557.html",
-                      "https://errata.rockylinux.org/RLSA-2025:9526",
-                      "https://linux.oracle.com/cve/CVE-2025-6020.html",
-                      "https://linux.oracle.com/errata/ELSA-2025-9526.html",
-                      "https://lists.debian.org/debian-lts-announce/2025/09/msg00021.html",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2025-6020",
-                      "https://ubuntu.com/security/notices/USN-7580-1",
-                      "https://www.cve.org/CVERecord?id=CVE-2025-6020",
-                      "https://www.openwall.com/lists/oss-security/2025/06/17/1"
-                    ],
-                    "severity": "HIGH",
-                    "suppressed": false,
-                    "title": "linux-pam: Linux-pam directory Traversal"
-                  },
-                  {
-                    "cve": "CVE-2024-10041",
-                    "cvss": {
-                      "redhat": {
-                        "v3score": "4.7",
-                        "v3vector": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-922"
-                    ],
-                    "description": "A vulnerability was found in PAM. The secret information is stored in memory, where the attacker can trigger the victim program to execute by sending characters to its standard input (stdin). As this occurs, the attacker can train the branch predictor to execute an ROP chain speculatively. This flaw could result in leaked passwords, such as those found in /etc/shadow while performing authentications.",
-                    "diffID": "sha256:a499da141b419b2e97ed40192951a05fc37fadec129a55e1de03773e23fff97b",
-                    "installedVersion": "1.4.0-9+deb11u1",
-                    "packageName": "libpam0g",
-                    "purl": "pkg:deb/debian/libpam0g@1.4.0-9%2Bdeb11u1?arch=arm64&distro=debian-11.9",
-                    "references": [
-                      "https://access.redhat.com/errata/RHSA-2024:10379",
-                      "https://access.redhat.com/errata/RHSA-2024:11250",
-                      "https://access.redhat.com/errata/RHSA-2024:9941",
-                      "https://access.redhat.com/security/cve/CVE-2024-10041",
-                      "https://bugzilla.redhat.com/2319212",
-                      "https://bugzilla.redhat.com/2324291",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2319212",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2324291",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-10041",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-10963",
-                      "https://errata.almalinux.org/8/ALSA-2024-10379.html",
-                      "https://errata.rockylinux.org/RLSA-2024:10379",
-                      "https://linux.oracle.com/cve/CVE-2024-10041.html",
-                      "https://linux.oracle.com/errata/ELSA-2024-11250.html",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2024-10041",
-                      "https://www.cve.org/CVERecord?id=CVE-2024-10041"
-                    ],
-                    "severity": "MEDIUM",
-                    "suppressed": false,
-                    "title": "pam: libpam: Libpam vulnerable to read hashed password"
-                  },
-                  {
-                    "cve": "CVE-2024-22365",
-                    "cvss": {
-                      "nvd": {
-                        "v3score": "5.5",
-                        "v3vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H"
-                      },
-                      "redhat": {
-                        "v3score": "5.5",
-                        "v3vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-664"
-                    ],
-                    "description": "linux-pam (aka Linux PAM) before 1.6.0 allows attackers to cause a denial of service (blocked login process) via mkfifo because the openat call (for protect_dir) lacks O_DIRECTORY.",
-                    "diffID": "sha256:a499da141b419b2e97ed40192951a05fc37fadec129a55e1de03773e23fff97b",
-                    "fixedVersions": [
-                      "1.4.0-9+deb11u2"
-                    ],
-                    "installedVersion": "1.4.0-9+deb11u1",
-                    "packageName": "libpam0g",
-                    "purl": "pkg:deb/debian/libpam0g@1.4.0-9%2Bdeb11u1?arch=arm64&distro=debian-11.9",
-                    "references": [
-                      "http://www.openwall.com/lists/oss-security/2024/01/18/3",
-                      "https://access.redhat.com/errata/RHSA-2024:3163",
-                      "https://access.redhat.com/security/cve/CVE-2024-22365",
-                      "https://bugzilla.redhat.com/2257722",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2257722",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-22365",
-                      "https://errata.almalinux.org/8/ALSA-2024-3163.html",
-                      "https://errata.rockylinux.org/RLSA-2024:3163",
-                      "https://github.com/linux-pam/linux-pam",
-                      "https://github.com/linux-pam/linux-pam/commit/031bb5a5d0d950253b68138b498dc93be69a64cb",
-                      "https://github.com/linux-pam/linux-pam/releases/tag/v1.6.0",
-                      "https://linux.oracle.com/cve/CVE-2024-22365.html",
-                      "https://linux.oracle.com/errata/ELSA-2024-3163.html",
-                      "https://lists.debian.org/debian-lts-announce/2025/09/msg00021.html",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2024-22365",
-                      "https://ubuntu.com/security/notices/USN-6588-1",
-                      "https://ubuntu.com/security/notices/USN-6588-2",
-                      "https://www.cve.org/CVERecord?id=CVE-2024-22365",
-                      "https://www.openwall.com/lists/oss-security/2024/01/18/3"
-                    ],
-                    "severity": "MEDIUM",
-                    "suppressed": false,
-                    "title": "pam: allowing unprivileged user to block another user namespace"
-                  },
-                  {
-                    "cve": "CVE-2022-41409",
-                    "cvss": {
-                      "nvd": {
-                        "v3score": "7.5",
-                        "v3vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"
-                      },
-                      "redhat": {
-                        "v3score": "5.3",
-                        "v3vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-190"
-                    ],
-                    "description": "Integer overflow vulnerability in pcre2test before 10.41 allows attackers to cause a denial of service or other unspecified impacts via negative input.",
-                    "diffID": "sha256:a499da141b419b2e97ed40192951a05fc37fadec129a55e1de03773e23fff97b",
-                    "installedVersion": "10.36-2+deb11u1",
-                    "packageName": "libpcre2-8-0",
-                    "purl": "pkg:deb/debian/libpcre2-8-0@10.36-2%2Bdeb11u1?arch=arm64&distro=debian-11.9",
-                    "references": [
-                      "https://access.redhat.com/security/cve/CVE-2022-41409",
-                      "https://github.com/PCRE2Project/pcre2/commit/94e1c001761373b7d9450768aa15d04c25547a35",
-                      "https://github.com/PCRE2Project/pcre2/issues/141",
-                      "https://github.com/advisories/GHSA-4qfx-v7wh-3q4j",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2022-41409",
-                      "https://www.cve.org/CVERecord?id=CVE-2022-41409"
-                    ],
-                    "severity": "LOW",
-                    "suppressed": false,
-                    "title": "pcre2: negative repeat value in a pcre2test subject line leads to inifinite loop"
-                  },
-                  {
-                    "cve": "CVE-2017-11164",
-                    "cvss": {
-                      "nvd": {
-                        "v3score": "7.5",
-                        "v3vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"
-                      },
-                      "redhat": {
-                        "v3score": "3.3",
-                        "v3vector": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-674"
-                    ],
-                    "description": "In PCRE 8.41, the OP_KETRMAX feature in the match function in pcre_exec.c allows stack exhaustion (uncontrolled recursion) when processing a crafted regular expression.",
-                    "diffID": "sha256:a499da141b419b2e97ed40192951a05fc37fadec129a55e1de03773e23fff97b",
-                    "installedVersion": "2:8.39-13",
-                    "packageName": "libpcre3",
-                    "purl": "pkg:deb/debian/libpcre3@8.39-13?arch=arm64&distro=debian-11.9&epoch=2",
-                    "references": [
-                      "http://openwall.com/lists/oss-security/2017/07/11/3",
-                      "http://www.openwall.com/lists/oss-security/2023/04/11/1",
-                      "http://www.openwall.com/lists/oss-security/2023/04/12/1",
-                      "http://www.securityfocus.com/bid/99575",
-                      "https://access.redhat.com/security/cve/CVE-2017-11164",
-                      "https://lists.apache.org/thread.html/rf9fa47ab66495c78bb4120b0754dd9531ca2ff0430f6685ac9b07772%40%3Cdev.mina.apache.org%3E",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2017-11164",
-                      "https://www.cve.org/CVERecord?id=CVE-2017-11164"
-                    ],
-                    "severity": "LOW",
-                    "suppressed": false,
-                    "title": "pcre: OP_KETRMAX feature in the match function in pcre_exec.c"
-                  },
-                  {
-                    "cve": "CVE-2017-16231",
-                    "cvss": {
-                      "nvd": {
-                        "v3score": "5.5",
-                        "v3vector": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H"
-                      },
-                      "redhat": {
-                        "v3score": "5.5",
-                        "v3vector": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-119"
-                    ],
-                    "description": "In PCRE 8.41, after compiling, a pcretest load test PoC produces a crash overflow in the function match() in pcre_exec.c because of a self-recursive call. NOTE: third parties dispute the relevance of this report, noting that there are options that can be used to limit the amount of stack that is used",
-                    "diffID": "sha256:a499da141b419b2e97ed40192951a05fc37fadec129a55e1de03773e23fff97b",
-                    "installedVersion": "2:8.39-13",
-                    "packageName": "libpcre3",
-                    "purl": "pkg:deb/debian/libpcre3@8.39-13?arch=arm64&distro=debian-11.9&epoch=2",
-                    "references": [
-                      "http://packetstormsecurity.com/files/150897/PCRE-8.41-Buffer-Overflow.html",
-                      "http://seclists.org/fulldisclosure/2018/Dec/33",
-                      "http://www.openwall.com/lists/oss-security/2017/11/01/11",
-                      "http://www.openwall.com/lists/oss-security/2017/11/01/3",
-                      "http://www.openwall.com/lists/oss-security/2017/11/01/7",
-                      "http://www.openwall.com/lists/oss-security/2017/11/01/8",
-                      "http://www.securityfocus.com/bid/101688",
-                      "https://access.redhat.com/security/cve/CVE-2017-16231",
-                      "https://bugs.exim.org/show_bug.cgi?id=2047",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2017-16231",
-                      "https://www.cve.org/CVERecord?id=CVE-2017-16231"
-                    ],
-                    "severity": "LOW",
-                    "suppressed": false,
-                    "title": "pcre: self-recursive call in match() in pcre_exec.c leads to denial of service"
-                  },
-                  {
-                    "cve": "CVE-2017-7245",
-                    "cvss": {
-                      "nvd": {
-                        "v3score": "7.8",
-                        "v3vector": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H"
-                      },
-                      "redhat": {
-                        "v3score": "3.7",
-                        "v3vector": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-119"
-                    ],
-                    "description": "Stack-based buffer overflow in the pcre32_copy_substring function in pcre_get.c in libpcre1 in PCRE 8.40 allows remote attackers to cause a denial of service (WRITE of size 4) or possibly have unspecified other impact via a crafted file.",
-                    "diffID": "sha256:a499da141b419b2e97ed40192951a05fc37fadec129a55e1de03773e23fff97b",
-                    "installedVersion": "2:8.39-13",
-                    "packageName": "libpcre3",
-                    "purl": "pkg:deb/debian/libpcre3@8.39-13?arch=arm64&distro=debian-11.9&epoch=2",
-                    "references": [
-                      "http://www.securityfocus.com/bid/97067",
-                      "https://access.redhat.com/errata/RHSA-2018:2486",
-                      "https://access.redhat.com/security/cve/CVE-2017-7245",
-                      "https://blogs.gentoo.org/ago/2017/03/20/libpcre-two-stack-based-buffer-overflow-write-in-pcre32_copy_substring-pcre_get-c/",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2017-7245",
-                      "https://security.gentoo.org/glsa/201710-25",
-                      "https://www.cve.org/CVERecord?id=CVE-2017-7245"
-                    ],
-                    "severity": "LOW",
-                    "suppressed": false,
-                    "title": "pcre: stack-based buffer overflow write in pcre32_copy_substring"
-                  },
-                  {
-                    "cve": "CVE-2017-7246",
-                    "cvss": {
-                      "nvd": {
-                        "v3score": "7.8",
-                        "v3vector": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H"
-                      },
-                      "redhat": {
-                        "v3score": "3.7",
-                        "v3vector": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-119"
-                    ],
-                    "description": "Stack-based buffer overflow in the pcre32_copy_substring function in pcre_get.c in libpcre1 in PCRE 8.40 allows remote attackers to cause a denial of service (WRITE of size 268) or possibly have unspecified other impact via a crafted file.",
-                    "diffID": "sha256:a499da141b419b2e97ed40192951a05fc37fadec129a55e1de03773e23fff97b",
-                    "installedVersion": "2:8.39-13",
-                    "packageName": "libpcre3",
-                    "purl": "pkg:deb/debian/libpcre3@8.39-13?arch=arm64&distro=debian-11.9&epoch=2",
-                    "references": [
-                      "http://www.securityfocus.com/bid/97067",
-                      "https://access.redhat.com/errata/RHSA-2018:2486",
-                      "https://access.redhat.com/security/cve/CVE-2017-7246",
-                      "https://blogs.gentoo.org/ago/2017/03/20/libpcre-two-stack-based-buffer-overflow-write-in-pcre32_copy_substring-pcre_get-c/",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2017-7246",
-                      "https://security.gentoo.org/glsa/201710-25",
-                      "https://www.cve.org/CVERecord?id=CVE-2017-7246"
-                    ],
-                    "severity": "LOW",
-                    "suppressed": false,
-                    "title": "pcre: stack-based buffer overflow write in pcre32_copy_substring"
-                  },
-                  {
-                    "cve": "CVE-2019-20838",
-                    "cvss": {
-                      "nvd": {
-                        "v3score": "7.5",
-                        "v3vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"
-                      },
-                      "redhat": {
-                        "v3score": "7.5",
-                        "v3vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-125"
-                    ],
-                    "description": "libpcre in PCRE before 8.43 allows a subject buffer over-read in JIT when UTF is disabled, and \\X or \\R has more than one fixed quantifier, a related issue to CVE-2019-20454.",
-                    "diffID": "sha256:a499da141b419b2e97ed40192951a05fc37fadec129a55e1de03773e23fff97b",
-                    "installedVersion": "2:8.39-13",
-                    "packageName": "libpcre3",
-                    "purl": "pkg:deb/debian/libpcre3@8.39-13?arch=arm64&distro=debian-11.9&epoch=2",
-                    "references": [
-                      "http://seclists.org/fulldisclosure/2020/Dec/32",
-                      "http://seclists.org/fulldisclosure/2021/Feb/14",
-                      "https://access.redhat.com/security/cve/CVE-2019-20838",
-                      "https://bugs.gentoo.org/717920",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=1848436",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=1848444",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-20838",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-14155",
-                      "https://errata.almalinux.org/8/ALSA-2021-4373.html",
-                      "https://errata.rockylinux.org/RLSA-2021:4373",
-                      "https://linux.oracle.com/cve/CVE-2019-20838.html",
-                      "https://linux.oracle.com/errata/ELSA-2021-4373.html",
-                      "https://lists.apache.org/thread.html/rf9fa47ab66495c78bb4120b0754dd9531ca2ff0430f6685ac9b07772%40%3Cdev.mina.apache.org%3E",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2019-20838",
-                      "https://support.apple.com/kb/HT211931",
-                      "https://support.apple.com/kb/HT212147",
-                      "https://ubuntu.com/security/notices/USN-5425-1",
-                      "https://www.cve.org/CVERecord?id=CVE-2019-20838",
-                      "https://www.pcre.org/original/changelog.txt"
-                    ],
-                    "severity": "LOW",
-                    "suppressed": false,
-                    "title": "pcre: Buffer over-read in JIT when UTF is disabled and \\X or \\R has fixed quantifier greater than 1"
-                  },
-                  {
-                    "cve": "CVE-2025-64720",
-                    "cvss": {
-                      "redhat": {
-                        "v3score": "7.1",
-                        "v3vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:H"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-125"
-                    ],
-                    "description": "LIBPNG is a reference library for use in applications that read, create, and manipulate PNG (Portable Network Graphics) raster image files. From version 1.6.0 to before 1.6.51, an out-of-bounds read vulnerability exists in png_image_read_composite when processing palette images with PNG_FLAG_OPTIMIZE_ALPHA enabled. The palette compositing code in png_init_read_transformations incorrectly applies background compositing during premultiplication, violating the invariant component \u2264 alpha \u00d7 257 required by the simplified PNG API. This issue has been patched in version 1.6.51.",
-                    "diffID": "sha256:2f458857553769636f3c149c0c8d41acc63c9e24282823b0ea26869a635e9f48",
-                    "fixedVersions": [
-                      "1.6.37-3+deb11u1"
-                    ],
-                    "installedVersion": "1.6.37-3",
-                    "packageName": "libpng16-16",
-                    "purl": "pkg:deb/debian/libpng16-16@1.6.37-3?arch=arm64&distro=debian-11.9",
-                    "references": [
-                      "https://access.redhat.com/errata/RHSA-2026:0932",
-                      "https://access.redhat.com/security/cve/CVE-2025-64720",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2416904",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2416907",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2418711",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-64720",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-65018",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-66293",
-                      "https://errata.almalinux.org/8/ALSA-2026-0932.html",
-                      "https://errata.rockylinux.org/RLSA-2026:0238",
-                      "https://github.com/pnggroup/libpng/commit/08da33b4c88cfcd36e5a706558a8d7e0e4773643",
-                      "https://github.com/pnggroup/libpng/commit/08da33b4c88cfcd36e5a706558a8d7e0e4773643 (v1.6.51)",
-                      "https://github.com/pnggroup/libpng/issues/686",
-                      "https://github.com/pnggroup/libpng/pull/751",
-                      "https://github.com/pnggroup/libpng/security/advisories/GHSA-hfc7-ph9c-wcww",
-                      "https://linux.oracle.com/cve/CVE-2025-64720.html",
-                      "https://linux.oracle.com/errata/ELSA-2026-0932.html",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2025-64720",
-                      "https://ubuntu.com/security/notices/USN-7924-1",
-                      "https://www.cve.org/CVERecord?id=CVE-2025-64720",
-                      "https://www.openwall.com/lists/oss-security/2025/11/22/1"
-                    ],
-                    "severity": "HIGH",
-                    "suppressed": false,
-                    "title": "libpng: LIBPNG buffer overflow"
-                  },
-                  {
-                    "cve": "CVE-2025-65018",
-                    "cvss": {
-                      "redhat": {
-                        "v3score": "7.1",
-                        "v3vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:H"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-122",
-                      "CWE-787"
-                    ],
-                    "description": "LIBPNG is a reference library for use in applications that read, create, and manipulate PNG (Portable Network Graphics) raster image files. From version 1.6.0 to before 1.6.51, there is a heap buffer overflow vulnerability in the libpng simplified API function png_image_finish_read when processing 16-bit interlaced PNGs with 8-bit output format. Attacker-crafted interlaced PNG files cause heap writes beyond allocated buffer bounds. This issue has been patched in version 1.6.51.",
-                    "diffID": "sha256:2f458857553769636f3c149c0c8d41acc63c9e24282823b0ea26869a635e9f48",
-                    "fixedVersions": [
-                      "1.6.37-3+deb11u1"
-                    ],
-                    "installedVersion": "1.6.37-3",
-                    "packageName": "libpng16-16",
-                    "purl": "pkg:deb/debian/libpng16-16@1.6.37-3?arch=arm64&distro=debian-11.9",
-                    "references": [
-                      "https://access.redhat.com/errata/RHSA-2026:0932",
-                      "https://access.redhat.com/security/cve/CVE-2025-65018",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2416904",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2416907",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2418711",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-64720",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-65018",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-66293",
-                      "https://errata.almalinux.org/8/ALSA-2026-0932.html",
-                      "https://errata.rockylinux.org/RLSA-2026:0238",
-                      "https://github.com/pnggroup/libpng/commit/16b5e3823918840aae65c0a6da57c78a5a496a4d",
-                      "https://github.com/pnggroup/libpng/commit/16b5e3823918840aae65c0a6da57c78a5a496a4d (v1.6.51)",
-                      "https://github.com/pnggroup/libpng/commit/218612ddd6b17944e21eda56caf8b4bf7779d1ea",
-                      "https://github.com/pnggroup/libpng/commit/218612ddd6b17944e21eda56caf8b4bf7779d1ea (v1.6.51)",
-                      "https://github.com/pnggroup/libpng/issues/755",
-                      "https://github.com/pnggroup/libpng/pull/757",
-                      "https://github.com/pnggroup/libpng/security/advisories/GHSA-7wv6-48j4-hj3g",
-                      "https://linux.oracle.com/cve/CVE-2025-65018.html",
-                      "https://linux.oracle.com/errata/ELSA-2026-0932.html",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2025-65018",
-                      "https://ubuntu.com/security/notices/USN-7924-1",
-                      "https://www.cve.org/CVERecord?id=CVE-2025-65018",
-                      "https://www.openwall.com/lists/oss-security/2025/11/22/1"
-                    ],
-                    "severity": "HIGH",
-                    "suppressed": false,
-                    "title": "libpng: LIBPNG heap buffer overflow"
-                  },
-                  {
-                    "cve": "CVE-2025-66293",
-                    "cvss": {
-                      "redhat": {
-                        "v3score": "7.1",
-                        "v3vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:H"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-125"
-                    ],
-                    "description": "LIBPNG is a reference library for use in applications that read, create, and manipulate PNG (Portable Network Graphics) raster image files. Prior to 1.6.52, an out-of-bounds read vulnerability in libpng's simplified API allows reading up to 1012 bytes beyond the png_sRGB_base[512] array when processing valid palette PNG images with partial transparency and gamma correction. The PNG files that trigger this vulnerability are valid per the PNG specification; the bug is in libpng's internal state management. Upgrade to libpng 1.6.52 or later.",
-                    "diffID": "sha256:2f458857553769636f3c149c0c8d41acc63c9e24282823b0ea26869a635e9f48",
-                    "fixedVersions": [
-                      "1.6.37-3+deb11u1"
-                    ],
-                    "installedVersion": "1.6.37-3",
-                    "packageName": "libpng16-16",
-                    "purl": "pkg:deb/debian/libpng16-16@1.6.37-3?arch=arm64&distro=debian-11.9",
-                    "references": [
-                      "http://www.openwall.com/lists/oss-security/2025/12/03/6",
-                      "http://www.openwall.com/lists/oss-security/2025/12/03/7",
-                      "http://www.openwall.com/lists/oss-security/2025/12/03/8",
-                      "https://access.redhat.com/errata/RHSA-2026:0241",
-                      "https://access.redhat.com/security/cve/CVE-2025-66293",
-                      "https://bugzilla.redhat.com/2416904",
-                      "https://bugzilla.redhat.com/2416907",
-                      "https://bugzilla.redhat.com/2418711",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2416904",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2416907",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2418711",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-64720",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-65018",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-66293",
-                      "https://errata.almalinux.org/8/ALSA-2026-0241.html",
-                      "https://errata.rockylinux.org/RLSA-2026:0238",
-                      "https://github.com/pnggroup/libpng/commit/788a624d7387a758ffd5c7ab010f1870dea753a1",
-                      "https://github.com/pnggroup/libpng/commit/a05a48b756de63e3234ea6b3b938b8f5f862484a",
-                      "https://github.com/pnggroup/libpng/issues/764",
-                      "https://github.com/pnggroup/libpng/security/advisories/GHSA-9mpm-9pxh-mg4f",
-                      "https://linux.oracle.com/cve/CVE-2025-66293.html",
-                      "https://linux.oracle.com/errata/ELSA-2026-0241.html",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2025-66293",
-                      "https://ubuntu.com/security/notices/USN-7963-1",
-                      "https://www.cve.org/CVERecord?id=CVE-2025-66293"
-                    ],
-                    "severity": "HIGH",
-                    "suppressed": false,
-                    "title": "libpng: LIBPNG out-of-bounds read in png_image_read_composite"
-                  },
-                  {
-                    "cve": "CVE-2026-22695",
-                    "cvss": {
-                      "nvd": {
-                        "v3score": "7.1",
-                        "v3vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H"
-                      },
-                      "redhat": {
-                        "v3score": "6.1",
-                        "v3vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:H"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-125"
-                    ],
-                    "description": "LIBPNG is a reference library for use in applications that read, create, and manipulate PNG (Portable Network Graphics) raster image files. From 1.6.51 to 1.6.53, there is a heap buffer over-read in the libpng simplified API function png_image_finish_read when processing interlaced 16-bit PNGs with 8-bit output format and non-minimal row stride. This is a regression introduced by the fix for CVE-2025-65018. This vulnerability is fixed in 1.6.54.",
-                    "diffID": "sha256:2f458857553769636f3c149c0c8d41acc63c9e24282823b0ea26869a635e9f48",
-                    "installedVersion": "1.6.37-3",
-                    "packageName": "libpng16-16",
-                    "purl": "pkg:deb/debian/libpng16-16@1.6.37-3?arch=arm64&distro=debian-11.9",
-                    "references": [
-                      "https://access.redhat.com/security/cve/CVE-2026-22695",
-                      "https://github.com/pnggroup/libpng/commit/218612ddd6b17944e21eda56caf8b4bf7779d1ea",
-                      "https://github.com/pnggroup/libpng/commit/e4f7ad4ea2",
-                      "https://github.com/pnggroup/libpng/issues/778",
-                      "https://github.com/pnggroup/libpng/security/advisories/GHSA-mmq5-27w3-rxpp",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2026-22695",
-                      "https://ubuntu.com/security/notices/USN-7963-1",
-                      "https://www.cve.org/CVERecord?id=CVE-2026-22695",
-                      "https://www.openwall.com/lists/oss-security/2026/01/12/7"
-                    ],
-                    "severity": "HIGH",
-                    "suppressed": false,
-                    "title": "libpng: libpng: Denial of service and information disclosure via heap buffer over-read in png_image_finish_read"
-                  },
-                  {
-                    "cve": "CVE-2026-22801",
-                    "cvss": {
-                      "nvd": {
-                        "v3score": "7.8",
-                        "v3vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"
-                      },
-                      "redhat": {
-                        "v3score": "6.8",
-                        "v3vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-125",
-                      "CWE-190"
-                    ],
-                    "description": "LIBPNG is a reference library for use in applications that read, create, and manipulate PNG (Portable Network Graphics) raster image files. From 1.6.26 to 1.6.53, there is an integer truncation in the libpng simplified write API functions png_write_image_16bit and png_write_image_8bit causes heap buffer over-read when the caller provides a negative row stride (for bottom-up image layouts) or a stride exceeding 65535 bytes. The bug was introduced in libpng 1.6.26 (October 2016) by casts added to silence compiler warnings on 16-bit systems. This vulnerability is fixed in 1.6.54.",
-                    "diffID": "sha256:2f458857553769636f3c149c0c8d41acc63c9e24282823b0ea26869a635e9f48",
-                    "installedVersion": "1.6.37-3",
-                    "packageName": "libpng16-16",
-                    "purl": "pkg:deb/debian/libpng16-16@1.6.37-3?arch=arm64&distro=debian-11.9",
-                    "references": [
-                      "https://access.redhat.com/security/cve/CVE-2026-22801",
-                      "https://github.com/pnggroup/libpng/security/advisories/GHSA-vgjq-8cw5-ggw8",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2026-22801",
-                      "https://ubuntu.com/security/notices/USN-7963-1",
-                      "https://www.cve.org/CVERecord?id=CVE-2026-22801",
-                      "https://www.openwall.com/lists/oss-security/2026/01/12/7"
-                    ],
-                    "severity": "HIGH",
-                    "suppressed": false,
-                    "title": "libpng: libpng: Information disclosure and denial of service via integer truncation in simplified write API"
-                  },
-                  {
-                    "cve": "CVE-2025-64505",
-                    "cvss": {
-                      "redhat": {
-                        "v3score": "4.4",
-                        "v3vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-125"
-                    ],
-                    "description": "LIBPNG is a reference library for use in applications that read, create, and manipulate PNG (Portable Network Graphics) raster image files. Prior to version 1.6.51, a heap buffer over-read vulnerability exists in libpng's png_do_quantize function when processing PNG files with malformed palette indices. The vulnerability occurs when palette_lookup array bounds are not validated against externally-supplied image data, allowing an attacker to craft a PNG file with out-of-range palette indices that trigger out-of-bounds memory access. This issue has been patched in version 1.6.51.",
-                    "diffID": "sha256:2f458857553769636f3c149c0c8d41acc63c9e24282823b0ea26869a635e9f48",
-                    "fixedVersions": [
-                      "1.6.37-3+deb11u1"
-                    ],
-                    "installedVersion": "1.6.37-3",
-                    "packageName": "libpng16-16",
-                    "purl": "pkg:deb/debian/libpng16-16@1.6.37-3?arch=arm64&distro=debian-11.9",
-                    "references": [
-                      "https://access.redhat.com/security/cve/CVE-2025-64505",
-                      "https://github.com/pnggroup/libpng/commit/6a528eb5fd0dd7f6de1c39d30de0e41473431c37",
-                      "https://github.com/pnggroup/libpng/commit/6a528eb5fd0dd7f6de1c39d30de0e41473431c37 (v1.6.51)",
-                      "https://github.com/pnggroup/libpng/pull/748",
-                      "https://github.com/pnggroup/libpng/security/advisories/GHSA-4952-h5wq-4m42",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2025-64505",
-                      "https://ubuntu.com/security/notices/USN-7924-1",
-                      "https://www.cve.org/CVERecord?id=CVE-2025-64505",
-                      "https://www.openwall.com/lists/oss-security/2025/11/22/1"
-                    ],
-                    "severity": "MEDIUM",
-                    "suppressed": false,
-                    "title": "libpng: LIBPNG heap buffer overflow via malformed palette index"
-                  },
-                  {
-                    "cve": "CVE-2025-64506",
-                    "cvss": {
-                      "redhat": {
-                        "v3score": "6.1",
-                        "v3vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:H"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-125"
-                    ],
-                    "description": "LIBPNG is a reference library for use in applications that read, create, and manipulate PNG (Portable Network Graphics) raster image files. From version 1.6.0 to before 1.6.51, a heap buffer over-read vulnerability exists in libpng's png_write_image_8bit function when processing 8-bit images through the simplified write API with convert_to_8bit enabled. The vulnerability affects 8-bit grayscale+alpha, RGB/RGBA, and images with incomplete row data. A conditional guard incorrectly allows 8-bit input to enter code expecting 16-bit input, causing reads up to 2 bytes beyond allocated buffer boundaries. This issue has been patched in version 1.6.51.",
-                    "diffID": "sha256:2f458857553769636f3c149c0c8d41acc63c9e24282823b0ea26869a635e9f48",
-                    "fixedVersions": [
-                      "1.6.37-3+deb11u1"
-                    ],
-                    "installedVersion": "1.6.37-3",
-                    "packageName": "libpng16-16",
-                    "purl": "pkg:deb/debian/libpng16-16@1.6.37-3?arch=arm64&distro=debian-11.9",
-                    "references": [
-                      "https://access.redhat.com/security/cve/CVE-2025-64506",
-                      "https://github.com/pnggroup/libpng/commit/2bd84c019c300b78e811743fbcddb67c9d9bf821",
-                      "https://github.com/pnggroup/libpng/commit/2bd84c019c300b78e811743fbcddb67c9d9bf821 (v1.6.51)",
-                      "https://github.com/pnggroup/libpng/pull/749",
-                      "https://github.com/pnggroup/libpng/security/advisories/GHSA-qpr4-xm66-hww6",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2025-64506",
-                      "https://ubuntu.com/security/notices/USN-7924-1",
-                      "https://www.cve.org/CVERecord?id=CVE-2025-64506",
-                      "https://www.openwall.com/lists/oss-security/2025/11/22/1"
-                    ],
-                    "severity": "MEDIUM",
-                    "suppressed": false,
-                    "title": "libpng: LIBPNG heap buffer over-read"
-                  },
-                  {
-                    "cve": "CVE-2019-6129",
-                    "cvss": {
-                      "nvd": {
-                        "v3score": "6.5",
-                        "v3vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H"
-                      },
-                      "redhat": {
-                        "v3score": "3.3",
-                        "v3vector": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-401"
-                    ],
-                    "description": "png_create_info_struct in png.c in libpng 1.6.36 has a memory leak, as demonstrated by pngcp. NOTE: a third party has stated \"I don't think it is libpng's job to free this buffer.",
-                    "diffID": "sha256:2f458857553769636f3c149c0c8d41acc63c9e24282823b0ea26869a635e9f48",
-                    "installedVersion": "1.6.37-3",
-                    "packageName": "libpng16-16",
-                    "purl": "pkg:deb/debian/libpng16-16@1.6.37-3?arch=arm64&distro=debian-11.9",
-                    "references": [
-                      "https://access.redhat.com/security/cve/CVE-2019-6129",
-                      "https://github.com/glennrp/libpng/issues/269",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2019-6129",
-                      "https://www.cve.org/CVERecord?id=CVE-2019-6129",
-                      "https://www.oracle.com/technetwork/security-advisory/cpujul2019-5072835.html"
-                    ],
-                    "severity": "LOW",
-                    "suppressed": false,
-                    "title": "libpng: memory leak of png_info struct in pngcp.c"
-                  },
-                  {
-                    "cve": "CVE-2021-4214",
-                    "cvss": {
-                      "nvd": {
-                        "v3score": "5.5",
-                        "v3vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H"
-                      },
-                      "redhat": {
-                        "v3score": "5.5",
-                        "v3vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-120",
-                      "CWE-787"
-                    ],
-                    "description": "A heap overflow flaw was found in libpngs' pngimage.c program. This flaw allows an attacker with local network access to pass a specially crafted PNG file to the pngimage utility, causing an application to crash, leading to a denial of service.",
-                    "diffID": "sha256:2f458857553769636f3c149c0c8d41acc63c9e24282823b0ea26869a635e9f48",
-                    "installedVersion": "1.6.37-3",
-                    "packageName": "libpng16-16",
-                    "purl": "pkg:deb/debian/libpng16-16@1.6.37-3?arch=arm64&distro=debian-11.9",
-                    "references": [
-                      "https://access.redhat.com/security/cve/CVE-2021-4214",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2043393",
-                      "https://github.com/glennrp/libpng/issues/302",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2021-4214",
-                      "https://security-tracker.debian.org/tracker/CVE-2021-4214",
-                      "https://security.netapp.com/advisory/ntap-20221020-0001/",
-                      "https://www.cve.org/CVERecord?id=CVE-2021-4214"
-                    ],
-                    "severity": "LOW",
-                    "suppressed": false,
-                    "title": "libpng: hardcoded value leads to heap-overflow"
-                  },
-                  {
-                    "cve": "CVE-2025-28162",
-                    "cvss": {
-                      "redhat": {
-                        "v3score": "6.2",
-                        "v3vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-120"
-                    ],
-                    "description": "Buffer Overflow vulnerability in libpng 1.6.43-1.6.46 allows a local attacker to cause a denial of service via the pngimage with AddressSanitizer (ASan), the program leaks memory in various locations, eventually leading to high memory usage and causing the program to become unresponsive",
-                    "diffID": "sha256:2f458857553769636f3c149c0c8d41acc63c9e24282823b0ea26869a635e9f48",
-                    "installedVersion": "1.6.37-3",
-                    "packageName": "libpng16-16",
-                    "purl": "pkg:deb/debian/libpng16-16@1.6.37-3?arch=arm64&distro=debian-11.9",
-                    "references": [
-                      "https://access.redhat.com/security/cve/CVE-2025-28162",
-                      "https://gist.github.com/kittener/fbfdb9b5610c6b3db0d5dea045a07c60",
-                      "https://github.com/pnggroup/libpng/issues/656",
-                      "https://github.com/pnggroup/libpng/pull/657",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2025-28162",
-                      "https://ubuntu.com/security/notices/USN-7993-1",
-                      "https://www.cve.org/CVERecord?id=CVE-2025-28162"
-                    ],
-                    "severity": "LOW",
-                    "suppressed": false,
-                    "title": "libpng: libpng: Denial of Service via buffer overflow in pngimage utility"
-                  },
-                  {
-                    "cve": "CVE-2025-28164",
-                    "cvss": {
-                      "redhat": {
-                        "v3score": "5",
-                        "v3vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:H"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-120"
-                    ],
-                    "description": "Buffer Overflow vulnerability in libpng 1.6.43-1.6.46 allows a local attacker to cause a denial of service via png_create_read_struct() function.",
-                    "diffID": "sha256:2f458857553769636f3c149c0c8d41acc63c9e24282823b0ea26869a635e9f48",
-                    "installedVersion": "1.6.37-3",
-                    "packageName": "libpng16-16",
-                    "purl": "pkg:deb/debian/libpng16-16@1.6.37-3?arch=arm64&distro=debian-11.9",
-                    "references": [
-                      "https://access.redhat.com/security/cve/CVE-2025-28164",
-                      "https://gist.github.com/kittener/506516f8c22178005b4379c8b2a7de20",
-                      "https://github.com/pnggroup/libpng/issues/655",
-                      "https://github.com/pnggroup/libpng/pull/657",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2025-28164",
-                      "https://ubuntu.com/security/notices/USN-7993-1",
-                      "https://www.cve.org/CVERecord?id=CVE-2025-28164"
-                    ],
-                    "severity": "LOW",
-                    "suppressed": false,
-                    "title": "libpng: libpng: Denial of Service via buffer overflow in png_create_read_struct() function"
-                  },
-                  {
-                    "cve": "CVE-2021-36084",
-                    "cvss": {
-                      "nvd": {
-                        "v3score": "3.3",
-                        "v3vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L"
-                      },
-                      "redhat": {
-                        "v3score": "3.3",
-                        "v3vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-416"
-                    ],
-                    "description": "The CIL compiler in SELinux 3.2 has a use-after-free in __cil_verify_classperms (called from __cil_verify_classpermission and __cil_pre_verify_helper).",
-                    "diffID": "sha256:a499da141b419b2e97ed40192951a05fc37fadec129a55e1de03773e23fff97b",
-                    "fixedVersions": [
-                      "3.1-1+deb11u1"
-                    ],
-                    "installedVersion": "3.1-1",
-                    "packageName": "libsepol1",
-                    "purl": "pkg:deb/debian/libsepol1@3.1-1?arch=arm64&distro=debian-11.9",
-                    "references": [
-                      "https://access.redhat.com/security/cve/CVE-2021-36084",
-                      "https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=31065",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=1979662",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=1979664",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=1979666",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=1979668",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-36084",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-36085",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-36086",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-36087",
-                      "https://errata.almalinux.org/8/ALSA-2021-4513.html",
-                      "https://errata.rockylinux.org/RLSA-2021:4513",
-                      "https://github.com/SELinuxProject/selinux/commit/f34d3d30c8325e4847a6b696fe7a3936a8a361f3",
-                      "https://github.com/google/oss-fuzz-vulns/blob/main/vulns/selinux/OSV-2021-417.yaml",
-                      "https://linux.oracle.com/cve/CVE-2021-36084.html",
-                      "https://linux.oracle.com/errata/ELSA-2021-4513.html",
-                      "https://lists.debian.org/debian-lts-announce/2024/10/msg00021.html",
-                      "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/U7ZYR3PIJ75N6U2IONJWCKZ5L2NKJTGR/",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2021-36084",
-                      "https://security.netapp.com/advisory/ntap-20250207-0004/",
-                      "https://ubuntu.com/security/notices/USN-5391-1",
-                      "https://www.cve.org/CVERecord?id=CVE-2021-36084"
-                    ],
-                    "severity": "LOW",
-                    "suppressed": false,
-                    "title": "libsepol: use-after-free in __cil_verify_classperms()"
-                  },
-                  {
-                    "cve": "CVE-2021-36085",
-                    "cvss": {
-                      "nvd": {
-                        "v3score": "3.3",
-                        "v3vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L"
-                      },
-                      "redhat": {
-                        "v3score": "3.3",
-                        "v3vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-416"
-                    ],
-                    "description": "The CIL compiler in SELinux 3.2 has a use-after-free in __cil_verify_classperms (called from __verify_map_perm_classperms and hashtab_map).",
-                    "diffID": "sha256:a499da141b419b2e97ed40192951a05fc37fadec129a55e1de03773e23fff97b",
-                    "fixedVersions": [
-                      "3.1-1+deb11u1"
-                    ],
-                    "installedVersion": "3.1-1",
-                    "packageName": "libsepol1",
-                    "purl": "pkg:deb/debian/libsepol1@3.1-1?arch=arm64&distro=debian-11.9",
-                    "references": [
-                      "https://access.redhat.com/security/cve/CVE-2021-36085",
-                      "https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=31124",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=1979662",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=1979664",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=1979666",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=1979668",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-36084",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-36085",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-36086",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-36087",
-                      "https://errata.almalinux.org/8/ALSA-2021-4513.html",
-                      "https://errata.rockylinux.org/RLSA-2021:4513",
-                      "https://github.com/SELinuxProject/selinux/commit/2d35fcc7e9e976a2346b1de20e54f8663e8a6cba",
-                      "https://github.com/google/oss-fuzz-vulns/blob/main/vulns/selinux/OSV-2021-421.yaml",
-                      "https://linux.oracle.com/cve/CVE-2021-36085.html",
-                      "https://linux.oracle.com/errata/ELSA-2021-4513.html",
-                      "https://lists.debian.org/debian-lts-announce/2024/10/msg00021.html",
-                      "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/U7ZYR3PIJ75N6U2IONJWCKZ5L2NKJTGR/",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2021-36085",
-                      "https://security.netapp.com/advisory/ntap-20250207-0004/",
-                      "https://ubuntu.com/security/notices/USN-5391-1",
-                      "https://www.cve.org/CVERecord?id=CVE-2021-36085"
-                    ],
-                    "severity": "LOW",
-                    "suppressed": false,
-                    "title": "libsepol: use-after-free in __cil_verify_classperms()"
-                  },
-                  {
-                    "cve": "CVE-2021-36086",
-                    "cvss": {
-                      "nvd": {
-                        "v3score": "3.3",
-                        "v3vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L"
-                      },
-                      "redhat": {
-                        "v3score": "3.3",
-                        "v3vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-416"
-                    ],
-                    "description": "The CIL compiler in SELinux 3.2 has a use-after-free in cil_reset_classpermission (called from cil_reset_classperms_set and cil_reset_classperms_list).",
-                    "diffID": "sha256:a499da141b419b2e97ed40192951a05fc37fadec129a55e1de03773e23fff97b",
-                    "fixedVersions": [
-                      "3.1-1+deb11u1"
-                    ],
-                    "installedVersion": "3.1-1",
-                    "packageName": "libsepol1",
-                    "purl": "pkg:deb/debian/libsepol1@3.1-1?arch=arm64&distro=debian-11.9",
-                    "references": [
-                      "https://access.redhat.com/security/cve/CVE-2021-36086",
-                      "https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=32177",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=1979662",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=1979664",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=1979666",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=1979668",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-36084",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-36085",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-36086",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-36087",
-                      "https://errata.almalinux.org/8/ALSA-2021-4513.html",
-                      "https://errata.rockylinux.org/RLSA-2021:4513",
-                      "https://github.com/SELinuxProject/selinux/commit/c49a8ea09501ad66e799ea41b8154b6770fec2c8",
-                      "https://github.com/google/oss-fuzz-vulns/blob/main/vulns/selinux/OSV-2021-536.yaml",
-                      "https://linux.oracle.com/cve/CVE-2021-36086.html",
-                      "https://linux.oracle.com/errata/ELSA-2021-4513.html",
-                      "https://lists.debian.org/debian-lts-announce/2024/10/msg00021.html",
-                      "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/U7ZYR3PIJ75N6U2IONJWCKZ5L2NKJTGR/",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2021-36086",
-                      "https://security.netapp.com/advisory/ntap-20250207-0004/",
-                      "https://ubuntu.com/security/notices/USN-5391-1",
-                      "https://www.cve.org/CVERecord?id=CVE-2021-36086"
-                    ],
-                    "severity": "LOW",
-                    "suppressed": false,
-                    "title": "libsepol: use-after-free in cil_reset_classpermission()"
-                  },
-                  {
-                    "cve": "CVE-2021-36087",
-                    "cvss": {
-                      "nvd": {
-                        "v3score": "3.3",
-                        "v3vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L"
-                      },
-                      "redhat": {
-                        "v3score": "3.3",
-                        "v3vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-125"
-                    ],
-                    "description": "The CIL compiler in SELinux 3.2 has a heap-based buffer over-read in ebitmap_match_any (called indirectly from cil_check_neverallow). This occurs because there is sometimes a lack of checks for invalid statements in an optional block.",
-                    "diffID": "sha256:a499da141b419b2e97ed40192951a05fc37fadec129a55e1de03773e23fff97b",
-                    "fixedVersions": [
-                      "3.1-1+deb11u1"
-                    ],
-                    "installedVersion": "3.1-1",
-                    "packageName": "libsepol1",
-                    "purl": "pkg:deb/debian/libsepol1@3.1-1?arch=arm64&distro=debian-11.9",
-                    "references": [
-                      "https://access.redhat.com/security/cve/CVE-2021-36087",
-                      "https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=32675",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=1979662",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=1979664",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=1979666",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=1979668",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-36084",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-36085",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-36086",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-36087",
-                      "https://errata.almalinux.org/8/ALSA-2021-4513.html",
-                      "https://errata.rockylinux.org/RLSA-2021:4513",
-                      "https://github.com/SELinuxProject/selinux/commit/340f0eb7f3673e8aacaf0a96cbfcd4d12a405521",
-                      "https://github.com/google/oss-fuzz-vulns/blob/main/vulns/selinux/OSV-2021-585.yaml",
-                      "https://linux.oracle.com/cve/CVE-2021-36087.html",
-                      "https://linux.oracle.com/errata/ELSA-2021-4513.html",
-                      "https://lists.debian.org/debian-lts-announce/2024/10/msg00021.html",
-                      "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/U7ZYR3PIJ75N6U2IONJWCKZ5L2NKJTGR/",
-                      "https://lore.kernel.org/selinux/CAEN2sdqJKHvDzPnxS-J8grU8fSf32DDtx=kyh84OsCq_Vm+yaQ%40mail.gmail.com/T/",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2021-36087",
-                      "https://security.netapp.com/advisory/ntap-20250207-0004/",
-                      "https://ubuntu.com/security/notices/USN-5391-1",
-                      "https://www.cve.org/CVERecord?id=CVE-2021-36087"
-                    ],
-                    "severity": "LOW",
-                    "suppressed": false,
-                    "title": "libsepol: heap-based buffer overflow in ebitmap_match_any()"
-                  },
-                  {
-                    "cve": "CVE-2025-14104",
-                    "cvss": {
-                      "redhat": {
-                        "v3score": "6.1",
-                        "v3vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-125"
-                    ],
-                    "description": "A flaw was found in util-linux. This vulnerability allows a heap buffer overread when processing 256-byte usernames, specifically within the `setpwnam()` function, affecting SUID (Set User ID) login-utils utilities writing to the password database.",
-                    "diffID": "sha256:a499da141b419b2e97ed40192951a05fc37fadec129a55e1de03773e23fff97b",
-                    "installedVersion": "2.36.1-8+deb11u2",
-                    "packageName": "libsmartcols1",
-                    "purl": "pkg:deb/debian/libsmartcols1@2.36.1-8%2Bdeb11u2?arch=arm64&distro=debian-11.9",
-                    "references": [
-                      "https://access.redhat.com/errata/RHSA-2026:1696",
-                      "https://access.redhat.com/errata/RHSA-2026:1852",
-                      "https://access.redhat.com/errata/RHSA-2026:1913",
-                      "https://access.redhat.com/security/cve/CVE-2025-14104",
-                      "https://bugzilla.redhat.com/2419369",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2419369",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-14104",
-                      "https://errata.almalinux.org/10/ALSA-2026-1696.html",
-                      "https://errata.rockylinux.org/RLSA-2026:1913",
-                      "https://linux.oracle.com/cve/CVE-2025-14104.html",
-                      "https://linux.oracle.com/errata/ELSA-2026-1913.html",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2025-14104",
-                      "https://www.cve.org/CVERecord?id=CVE-2025-14104"
-                    ],
-                    "severity": "MEDIUM",
-                    "suppressed": false,
-                    "title": "util-linux: util-linux: Heap buffer overread in setpwnam() when processing 256-byte usernames"
-                  },
-                  {
-                    "cve": "CVE-2022-0563",
-                    "cvss": {
-                      "nvd": {
-                        "v3score": "5.5",
-                        "v3vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N"
-                      },
-                      "redhat": {
-                        "v3score": "5.5",
-                        "v3vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-209"
-                    ],
-                    "description": "A flaw was found in the util-linux chfn and chsh utilities when compiled with Readline support. The Readline library uses an \"INPUTRC\" environment variable to get a path to the library config file. When the library cannot parse the specified file, it prints an error message containing data from the file. This flaw allows an unprivileged user to read root-owned files, potentially leading to privilege escalation. This flaw affects util-linux versions prior to 2.37.4.",
-                    "diffID": "sha256:a499da141b419b2e97ed40192951a05fc37fadec129a55e1de03773e23fff97b",
-                    "installedVersion": "2.36.1-8+deb11u2",
-                    "packageName": "libsmartcols1",
-                    "purl": "pkg:deb/debian/libsmartcols1@2.36.1-8%2Bdeb11u2?arch=arm64&distro=debian-11.9",
-                    "references": [
-                      "https://access.redhat.com/security/cve/CVE-2022-0563",
-                      "https://blog.trailofbits.com/2023/02/16/suid-logic-bug-linux-readline/",
-                      "https://lore.kernel.org/util-linux/20220214110609.msiwlm457ngoic6w%40ws.net.home/T/#u",
-                      "https://lore.kernel.org/util-linux/20220214110609.msiwlm457ngoic6w@ws.net.home/T/#u",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2022-0563",
-                      "https://security.gentoo.org/glsa/202401-08",
-                      "https://security.netapp.com/advisory/ntap-20220331-0002/",
-                      "https://www.cve.org/CVERecord?id=CVE-2022-0563"
-                    ],
-                    "severity": "LOW",
-                    "suppressed": false,
-                    "title": "util-linux: partial disclosure of arbitrary files in chfn and chsh when compiled with libreadline"
-                  },
-                  {
-                    "cve": "CVE-2022-1304",
-                    "cvss": {
-                      "nvd": {
-                        "v3score": "7.8",
-                        "v3vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H"
-                      },
-                      "redhat": {
-                        "v3score": "5.8",
-                        "v3vector": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:H"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-125",
-                      "CWE-787"
-                    ],
-                    "description": "An out-of-bounds read/write vulnerability was found in e2fsprogs 1.46.5. This issue leads to a segmentation fault and possibly arbitrary code execution via a specially crafted filesystem.",
-                    "diffID": "sha256:a499da141b419b2e97ed40192951a05fc37fadec129a55e1de03773e23fff97b",
-                    "fixedVersions": [
-                      "1.46.2-2+deb11u1"
-                    ],
-                    "installedVersion": "1.46.2-2",
-                    "packageName": "libss2",
-                    "purl": "pkg:deb/debian/libss2@1.46.2-2?arch=arm64&distro=debian-11.9",
-                    "references": [
-                      "https://access.redhat.com/errata/RHSA-2022:7720",
-                      "https://access.redhat.com/security/cve/CVE-2022-1304",
-                      "https://bugzilla.redhat.com/2069726",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2069726",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-1304",
-                      "https://errata.almalinux.org/8/ALSA-2022-7720.html",
-                      "https://errata.rockylinux.org/RLSA-2022:8361",
-                      "https://linux.oracle.com/cve/CVE-2022-1304.html",
-                      "https://linux.oracle.com/errata/ELSA-2024-12731.html",
-                      "https://lists.debian.org/debian-lts-announce/2024/10/msg00001.html",
-                      "https://marc.info/?l=linux-ext4&m=165056234501732&w=2",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2022-1304",
-                      "https://security.netapp.com/advisory/ntap-20241122-0010/",
-                      "https://ubuntu.com/security/notices/USN-5464-1",
-                      "https://www.cve.org/CVERecord?id=CVE-2022-1304"
-                    ],
-                    "severity": "HIGH",
-                    "suppressed": false,
-                    "title": "e2fsprogs: out-of-bounds read/write via crafted filesystem"
-                  },
-                  {
-                    "cve": "CVE-2020-22218",
-                    "cvss": {
-                      "nvd": {
-                        "v3score": "7.5",
-                        "v3vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"
-                      },
-                      "redhat": {
-                        "v3score": "7.5",
-                        "v3vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-787"
-                    ],
-                    "description": "An issue was discovered in function _libssh2_packet_add in libssh2 1.10.0 allows attackers to access out of bounds memory.",
-                    "diffID": "sha256:2f458857553769636f3c149c0c8d41acc63c9e24282823b0ea26869a635e9f48",
-                    "fixedVersions": [
-                      "1.9.0-2+deb11u1"
-                    ],
-                    "installedVersion": "1.9.0-2",
-                    "packageName": "libssh2-1",
-                    "purl": "pkg:deb/debian/libssh2-1@1.9.0-2?arch=arm64&distro=debian-11.9",
-                    "references": [
-                      "https://access.redhat.com/security/cve/CVE-2020-22218",
-                      "https://github.com/libssh2/libssh2/pull/476",
-                      "https://linux.oracle.com/cve/CVE-2020-22218.html",
-                      "https://linux.oracle.com/errata/ELSA-2023-5615.html",
-                      "https://lists.debian.org/debian-lts-announce/2023/09/msg00006.html",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2020-22218",
-                      "https://security.netapp.com/advisory/ntap-20231006-0002/",
-                      "https://ubuntu.com/security/notices/USN-6371-1",
-                      "https://www.cve.org/CVERecord?id=CVE-2020-22218"
-                    ],
-                    "severity": "HIGH",
-                    "suppressed": false,
-                    "title": "libssh2: use-of-uninitialized-value in _libssh2_transport_read"
-                  },
-                  {
-                    "cve": "CVE-2025-69419",
-                    "cvss": {
-                      "redhat": {
-                        "v3score": "7.4",
-                        "v3vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-787"
-                    ],
-                    "description": "Issue summary: Calling PKCS12_get_friendlyname() function on a maliciously\ncrafted PKCS#12 file with a BMPString (UTF-16BE) friendly name containing\nnon-ASCII BMP code point can trigger a one byte write before the allocated\nbuffer.\n\nImpact summary: The out-of-bounds write can cause a memory corruption\nwhich can have various consequences including a Denial of Service.\n\nThe OPENSSL_uni2utf8() function performs a two-pass conversion of a PKCS#12\nBMPString (UTF-16BE) to UTF-8. In the second pass, when emitting UTF-8 bytes,\nthe helper function bmp_to_utf8() incorrectly forwards the remaining UTF-16\nsource byte count as the destination buffer capacity to UTF8_putc(). For BMP\ncode points above U+07FF, UTF-8 requires three bytes, but the forwarded\ncapacity can be just two bytes. UTF8_putc() then returns -1, and this negative\nvalue is added to the output length without validation, causing the\nlength to become negative. The subsequent trailing NUL byte is then written\nat a negative offset, causing write outside of heap allocated buffer.\n\nThe vulnerability is reachable via the public PKCS12_get_friendlyname() API\nwhen parsing attacker-controlled PKCS#12 files. While PKCS12_parse() uses a\ndifferent code path that avoids this issue, PKCS12_get_friendlyname() directly\ninvokes the vulnerable function. Exploitation requires an attacker to provide\na malicious PKCS#12 file to be parsed by the application and the attacker\ncan just trigger a one zero byte write before the allocated buffer.\nFor that reason the issue was assessed as Low severity according to our\nSecurity Policy.\n\nThe FIPS modules in 3.6, 3.5, 3.4, 3.3 and 3.0 are not affected by this issue,\nas the PKCS#12 implementation is outside the OpenSSL FIPS module boundary.\n\nOpenSSL 3.6, 3.5, 3.4, 3.3, 3.0 and 1.1.1 are vulnerable to this issue.\n\nOpenSSL 1.0.2 is not affected by this issue.",
-                    "diffID": "sha256:a499da141b419b2e97ed40192951a05fc37fadec129a55e1de03773e23fff97b",
-                    "installedVersion": "1.1.1w-0+deb11u1",
-                    "packageName": "libssl1.1",
-                    "purl": "pkg:deb/debian/libssl1.1@1.1.1w-0%2Bdeb11u1?arch=arm64&distro=debian-11.9",
-                    "references": [
-                      "https://access.redhat.com/errata/RHSA-2026:1472",
-                      "https://access.redhat.com/security/cve/CVE-2025-69419",
-                      "https://bugzilla.redhat.com/2430375",
-                      "https://bugzilla.redhat.com/2430376",
-                      "https://bugzilla.redhat.com/2430377",
-                      "https://bugzilla.redhat.com/2430378",
-                      "https://bugzilla.redhat.com/2430379",
-                      "https://bugzilla.redhat.com/2430380",
-                      "https://bugzilla.redhat.com/2430381",
-                      "https://bugzilla.redhat.com/2430386",
-                      "https://bugzilla.redhat.com/2430387",
-                      "https://bugzilla.redhat.com/2430388",
-                      "https://bugzilla.redhat.com/2430389",
-                      "https://bugzilla.redhat.com/2430390",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430375",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430376",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430377",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430378",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430379",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430380",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430381",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430386",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430387",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430388",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430389",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430390",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-11187",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-15467",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-15468",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-15469",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-66199",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-68160",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-69418",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-69419",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-69420",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-69421",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-22795",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-22796",
-                      "https://errata.almalinux.org/10/ALSA-2026-1472.html",
-                      "https://errata.rockylinux.org/RLSA-2026:1473",
-                      "https://github.com/openssl/openssl/commit/41be0f216404f14457bbf3b9cc488dba60b49296",
-                      "https://github.com/openssl/openssl/commit/7e9cac9832e4705b91987c2474ed06a37a93cecb",
-                      "https://github.com/openssl/openssl/commit/a26a90d38edec3748566129d824e664b54bee2e2",
-                      "https://github.com/openssl/openssl/commit/cda12de3bc0e333ea8d2c6fd15001dbdaf280015",
-                      "https://github.com/openssl/openssl/commit/ff628933755075446bca8307e8417c14d164b535",
-                      "https://linux.oracle.com/cve/CVE-2025-69419.html",
-                      "https://linux.oracle.com/errata/ELSA-2026-50081.html",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2025-69419",
-                      "https://openssl-library.org/news/secadv/20260127.txt",
-                      "https://ubuntu.com/security/notices/USN-7980-1",
-                      "https://ubuntu.com/security/notices/USN-7980-2",
-                      "https://www.cve.org/CVERecord?id=CVE-2025-69419"
-                    ],
-                    "severity": "HIGH",
-                    "suppressed": false,
-                    "title": "openssl: OpenSSL: Arbitrary code execution due to out-of-bounds write in PKCS#12 processing"
-                  },
-                  {
-                    "cve": "CVE-2025-69421",
-                    "cvss": {
-                      "nvd": {
-                        "v3score": "7.5",
-                        "v3vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"
-                      },
-                      "redhat": {
-                        "v3score": "6.5",
-                        "v3vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-476"
-                    ],
-                    "description": "Issue summary: Processing a malformed PKCS#12 file can trigger a NULL pointer\ndereference in the PKCS12_item_decrypt_d2i_ex() function.\n\nImpact summary: A NULL pointer dereference can trigger a crash which leads to\nDenial of Service for an application processing PKCS#12 files.\n\nThe PKCS12_item_decrypt_d2i_ex() function does not check whether the oct\nparameter is NULL before dereferencing it. When called from\nPKCS12_unpack_p7encdata() with a malformed PKCS#12 file, this parameter can\nbe NULL, causing a crash. The vulnerability is limited to Denial of Service\nand cannot be escalated to achieve code execution or memory disclosure.\n\nExploiting this issue requires an attacker to provide a malformed PKCS#12 file\nto an application that processes it. For that reason the issue was assessed as\nLow severity according to our Security Policy.\n\nThe FIPS modules in 3.6, 3.5, 3.4, 3.3 and 3.0 are not affected by this issue,\nas the PKCS#12 implementation is outside the OpenSSL FIPS module boundary.\n\nOpenSSL 3.6, 3.5, 3.4, 3.3, 3.0, 1.1.1 and 1.0.2 are vulnerable to this issue.",
-                    "diffID": "sha256:a499da141b419b2e97ed40192951a05fc37fadec129a55e1de03773e23fff97b",
-                    "installedVersion": "1.1.1w-0+deb11u1",
-                    "packageName": "libssl1.1",
-                    "purl": "pkg:deb/debian/libssl1.1@1.1.1w-0%2Bdeb11u1?arch=arm64&distro=debian-11.9",
-                    "references": [
-                      "https://access.redhat.com/errata/RHSA-2026:1472",
-                      "https://access.redhat.com/security/cve/CVE-2025-69421",
-                      "https://bugzilla.redhat.com/2430375",
-                      "https://bugzilla.redhat.com/2430376",
-                      "https://bugzilla.redhat.com/2430377",
-                      "https://bugzilla.redhat.com/2430378",
-                      "https://bugzilla.redhat.com/2430379",
-                      "https://bugzilla.redhat.com/2430380",
-                      "https://bugzilla.redhat.com/2430381",
-                      "https://bugzilla.redhat.com/2430386",
-                      "https://bugzilla.redhat.com/2430387",
-                      "https://bugzilla.redhat.com/2430388",
-                      "https://bugzilla.redhat.com/2430389",
-                      "https://bugzilla.redhat.com/2430390",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430375",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430376",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430377",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430378",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430379",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430380",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430381",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430386",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430387",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430388",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430389",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430390",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-11187",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-15467",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-15468",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-15469",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-66199",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-68160",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-69418",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-69419",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-69420",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-69421",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-22795",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-22796",
-                      "https://errata.almalinux.org/10/ALSA-2026-1472.html",
-                      "https://errata.rockylinux.org/RLSA-2026:1473",
-                      "https://github.com/openssl/openssl/commit/3524a29271f8191b8fd8a5257eb05173982a097b",
-                      "https://github.com/openssl/openssl/commit/36ecb4960872a4ce04bf6f1e1f4e78d75ec0c0c7",
-                      "https://github.com/openssl/openssl/commit/4bbc8d41a72c842ce4077a8a3eccd1109aaf74bd",
-                      "https://github.com/openssl/openssl/commit/643986985cd1c21221f941129d76fe0c2785aeb3",
-                      "https://github.com/openssl/openssl/commit/a2dbc539f0f9cc63832709fa5aa33ad9495eb19c",
-                      "https://linux.oracle.com/cve/CVE-2025-69421.html",
-                      "https://linux.oracle.com/errata/ELSA-2026-50081.html",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2025-69421",
-                      "https://openssl-library.org/news/secadv/20260127.txt",
-                      "https://ubuntu.com/security/notices/USN-7980-1",
-                      "https://ubuntu.com/security/notices/USN-7980-2",
-                      "https://www.cve.org/CVERecord?id=CVE-2025-69421"
-                    ],
-                    "severity": "HIGH",
-                    "suppressed": false,
-                    "title": "openssl: OpenSSL: Denial of Service via malformed PKCS#12 file processing"
-                  },
-                  {
-                    "cve": "CVE-2023-5678",
-                    "cvss": {
-                      "nvd": {
-                        "v3score": "5.3",
-                        "v3vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L"
-                      },
-                      "redhat": {
-                        "v3score": "5.3",
-                        "v3vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-606",
-                      "CWE-754"
-                    ],
-                    "description": "Issue summary: Generating excessively long X9.42 DH keys or checking\nexcessively long X9.42 DH keys or parameters may be very slow.\n\nImpact summary: Applications that use the functions DH_generate_key() to\ngenerate an X9.42 DH key may experience long delays.  Likewise, applications\nthat use DH_check_pub_key(), DH_check_pub_key_ex() or EVP_PKEY_public_check()\nto check an X9.42 DH key or X9.42 DH parameters may experience long delays.\nWhere the key or parameters that are being checked have been obtained from\nan untrusted source this may lead to a Denial of Service.\n\nWhile DH_check() performs all the necessary checks (as of CVE-2023-3817),\nDH_check_pub_key() doesn't make any of these checks, and is therefore\nvulnerable for excessively large P and Q parameters.\n\nLikewise, while DH_generate_key() performs a check for an excessively large\nP, it doesn't check for an excessively large Q.\n\nAn application that calls DH_generate_key() or DH_check_pub_key() and\nsupplies a key or parameters obtained from an untrusted source could be\nvulnerable to a Denial of Service attack.\n\nDH_generate_key() and DH_check_pub_key() are also called by a number of\nother OpenSSL functions.  An application calling any of those other\nfunctions may similarly be affected.  The other functions affected by this\nare DH_check_pub_key_ex(), EVP_PKEY_public_check(), and EVP_PKEY_generate().\n\nAlso vulnerable are the OpenSSL pkey command line application when using the\n\"-pubcheck\" option, as well as the OpenSSL genpkey command line application.\n\nThe OpenSSL SSL/TLS implementation is not affected by this issue.\n\nThe OpenSSL 3.0 and 3.1 FIPS providers are not affected by this issue.",
-                    "diffID": "sha256:a499da141b419b2e97ed40192951a05fc37fadec129a55e1de03773e23fff97b",
-                    "fixedVersions": [
-                      "1.1.1w-0+deb11u2"
-                    ],
-                    "installedVersion": "1.1.1w-0+deb11u1",
-                    "packageName": "libssl1.1",
-                    "purl": "pkg:deb/debian/libssl1.1@1.1.1w-0%2Bdeb11u1?arch=arm64&distro=debian-11.9",
-                    "references": [
-                      "http://www.openwall.com/lists/oss-security/2024/03/11/1",
-                      "https://access.redhat.com/errata/RHSA-2023:7877",
-                      "https://access.redhat.com/security/cve/CVE-2023-5678",
-                      "https://bugzilla.redhat.com/2224962",
-                      "https://bugzilla.redhat.com/2227852",
-                      "https://bugzilla.redhat.com/2248616",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2224962",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2227852",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2248616",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2270358",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3446",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3817",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-5678",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-2408",
-                      "https://errata.almalinux.org/8/ALSA-2023-7877.html",
-                      "https://errata.rockylinux.org/RLSA-2023:7877",
-                      "https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=34efaef6c103d636ab507a0cc34dca4d3aecc055",
-                      "https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=710fee740904b6290fef0dd5536fbcedbc38ff0c",
-                      "https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=db925ae2e65d0d925adef429afc37f75bd1c2017",
-                      "https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=ddeb4b6c6d527e54ce9a99cba785c0f7776e54b6",
-                      "https://linux.oracle.com/cve/CVE-2023-5678.html",
-                      "https://linux.oracle.com/errata/ELSA-2024-2447.html",
-                      "https://lists.debian.org/debian-lts-announce/2024/10/msg00033.html",
-                      "https://lists.debian.org/debian-lts-announce/2024/11/msg00000.html",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2023-5678",
-                      "https://security.netapp.com/advisory/ntap-20231130-0010/",
-                      "https://ubuntu.com/security/notices/USN-6622-1",
-                      "https://ubuntu.com/security/notices/USN-6632-1",
-                      "https://ubuntu.com/security/notices/USN-6709-1",
-                      "https://ubuntu.com/security/notices/USN-7894-1",
-                      "https://www.cve.org/CVERecord?id=CVE-2023-5678",
-                      "https://www.openssl.org/news/secadv/20231106.txt"
-                    ],
-                    "severity": "MEDIUM",
-                    "suppressed": false,
-                    "title": "openssl: Generating excessively long X9.42 DH keys or checking excessively long X9.42 DH keys or parameters may be very slow"
-                  },
-                  {
-                    "cve": "CVE-2024-0727",
-                    "cvss": {
-                      "ghsa": {
-                        "v3score": "5.5",
-                        "v3vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H"
-                      },
-                      "nvd": {
-                        "v3score": "5.5",
-                        "v3vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H"
-                      },
-                      "redhat": {
-                        "v3score": "5.5",
-                        "v3vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-476"
-                    ],
-                    "description": "Issue summary: Processing a maliciously formatted PKCS12 file may lead OpenSSL\nto crash leading to a potential Denial of Service attack\n\nImpact summary: Applications loading files in the PKCS12 format from untrusted\nsources might terminate abruptly.\n\nA file in PKCS12 format can contain certificates and keys and may come from an\nuntrusted source. The PKCS12 specification allows certain fields to be NULL, but\nOpenSSL does not correctly check for this case. This can lead to a NULL pointer\ndereference that results in OpenSSL crashing. If an application processes PKCS12\nfiles from an untrusted source using the OpenSSL APIs then that application will\nbe vulnerable to this issue.\n\nOpenSSL APIs that are vulnerable to this are: PKCS12_parse(),\nPKCS12_unpack_p7data(), PKCS12_unpack_p7encdata(), PKCS12_unpack_authsafes()\nand PKCS12_newpass().\n\nWe have also fixed a similar issue in SMIME_write_PKCS7(). However since this\nfunction is related to writing data we do not consider it security significant.\n\nThe FIPS modules in 3.2, 3.1 and 3.0 are not affected by this issue.",
-                    "diffID": "sha256:a499da141b419b2e97ed40192951a05fc37fadec129a55e1de03773e23fff97b",
-                    "fixedVersions": [
-                      "1.1.1w-0+deb11u2"
-                    ],
-                    "installedVersion": "1.1.1w-0+deb11u1",
-                    "packageName": "libssl1.1",
-                    "purl": "pkg:deb/debian/libssl1.1@1.1.1w-0%2Bdeb11u1?arch=arm64&distro=debian-11.9",
-                    "references": [
-                      "http://www.openwall.com/lists/oss-security/2024/03/11/1",
-                      "https://access.redhat.com/errata/RHSA-2024:9088",
-                      "https://access.redhat.com/security/cve/CVE-2024-0727",
-                      "https://bugzilla.redhat.com/2257571",
-                      "https://bugzilla.redhat.com/2258502",
-                      "https://bugzilla.redhat.com/2259944",
-                      "https://bugzilla.redhat.com/2284243",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2257571",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2258502",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2259944",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2284243",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-6129",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-6237",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-0727",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-1298",
-                      "https://errata.almalinux.org/9/ALSA-2024-9088.html",
-                      "https://errata.rockylinux.org/RLSA-2024:9088",
-                      "https://github.com/alexcrichton/openssl-src-rs/commit/add20f73b6b42be7451af2e1044d4e0e778992b2",
-                      "https://github.com/github/advisory-database/pull/3472",
-                      "https://github.com/openssl/openssl/commit/09df4395b5071217b76dc7d3d2e630eb8c5a79c2",
-                      "https://github.com/openssl/openssl/commit/775acfdbd0c6af9ac855f34969cdab0c0c90844a",
-                      "https://github.com/openssl/openssl/commit/d135eeab8a5dbf72b3da5240bab9ddb7678dbd2c",
-                      "https://github.com/openssl/openssl/pull/23362",
-                      "https://github.com/pyca/cryptography/commit/3519591d255d4506fbcd0d04037d45271903c64d",
-                      "https://github.openssl.org/openssl/extended-releases/commit/03b3941d60c4bce58fab69a0c22377ab439bc0e8",
-                      "https://github.openssl.org/openssl/extended-releases/commit/aebaa5883e31122b404e450732dc833dc9dee539",
-                      "https://linux.oracle.com/cve/CVE-2024-0727.html",
-                      "https://linux.oracle.com/errata/ELSA-2024-9088.html",
-                      "https://lists.debian.org/debian-lts-announce/2024/10/msg00033.html",
-                      "https://lists.debian.org/debian-lts-announce/2024/11/msg00000.html",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2024-0727",
-                      "https://security.netapp.com/advisory/ntap-20240208-0006",
-                      "https://security.netapp.com/advisory/ntap-20240208-0006/",
-                      "https://ubuntu.com/security/notices/USN-6622-1",
-                      "https://ubuntu.com/security/notices/USN-6632-1",
-                      "https://ubuntu.com/security/notices/USN-6709-1",
-                      "https://ubuntu.com/security/notices/USN-7018-1",
-                      "https://ubuntu.com/security/notices/USN-7894-1",
-                      "https://www.cve.org/CVERecord?id=CVE-2024-0727",
-                      "https://www.openssl.org/news/secadv/20240125.txt"
-                    ],
-                    "severity": "MEDIUM",
-                    "suppressed": false,
-                    "title": "openssl: denial of service via null dereference"
-                  },
-                  {
-                    "cve": "CVE-2024-13176",
-                    "cvss": {
-                      "redhat": {
-                        "v3score": "4.7",
-                        "v3vector": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-385"
-                    ],
-                    "description": "Issue summary: A timing side-channel which could potentially allow recovering\nthe private key exists in the ECDSA signature computation.\n\nImpact summary: A timing side-channel in ECDSA signature computations\ncould allow recovering the private key by an attacker. However, measuring\nthe timing would require either local access to the signing application or\na very fast network connection with low latency.\n\nThere is a timing signal of around 300 nanoseconds when the top word of\nthe inverted ECDSA nonce value is zero. This can happen with significant\nprobability only for some of the supported elliptic curves. In particular\nthe NIST P-521 curve is affected. To be able to measure this leak, the attacker\nprocess must either be located in the same physical computer or must\nhave a very fast network connection with low latency. For that reason\nthe severity of this vulnerability is Low.\n\nThe FIPS modules in 3.4, 3.3, 3.2, 3.1 and 3.0 are affected by this issue.",
-                    "diffID": "sha256:a499da141b419b2e97ed40192951a05fc37fadec129a55e1de03773e23fff97b",
-                    "fixedVersions": [
-                      "1.1.1w-0+deb11u3"
-                    ],
-                    "installedVersion": "1.1.1w-0+deb11u1",
-                    "packageName": "libssl1.1",
-                    "purl": "pkg:deb/debian/libssl1.1@1.1.1w-0%2Bdeb11u1?arch=arm64&distro=debian-11.9",
-                    "references": [
-                      "http://www.openwall.com/lists/oss-security/2025/01/20/2",
-                      "https://access.redhat.com/errata/RHSA-2025:15699",
-                      "https://access.redhat.com/security/cve/CVE-2024-13176",
-                      "https://bugzilla.redhat.com/2359885",
-                      "https://bugzilla.redhat.com/2359888",
-                      "https://bugzilla.redhat.com/2359892",
-                      "https://bugzilla.redhat.com/2359894",
-                      "https://bugzilla.redhat.com/2359895",
-                      "https://bugzilla.redhat.com/2359899",
-                      "https://bugzilla.redhat.com/2359900",
-                      "https://bugzilla.redhat.com/2359902",
-                      "https://bugzilla.redhat.com/2359903",
-                      "https://bugzilla.redhat.com/2359911",
-                      "https://bugzilla.redhat.com/2359918",
-                      "https://bugzilla.redhat.com/2359920",
-                      "https://bugzilla.redhat.com/2359924",
-                      "https://bugzilla.redhat.com/2359928",
-                      "https://bugzilla.redhat.com/2359930",
-                      "https://bugzilla.redhat.com/2359932",
-                      "https://bugzilla.redhat.com/2359934",
-                      "https://bugzilla.redhat.com/2359938",
-                      "https://bugzilla.redhat.com/2359940",
-                      "https://bugzilla.redhat.com/2359943",
-                      "https://bugzilla.redhat.com/2359944",
-                      "https://bugzilla.redhat.com/2359945",
-                      "https://bugzilla.redhat.com/2359947",
-                      "https://bugzilla.redhat.com/2359950",
-                      "https://bugzilla.redhat.com/2359963",
-                      "https://bugzilla.redhat.com/2359964",
-                      "https://bugzilla.redhat.com/2359972",
-                      "https://bugzilla.redhat.com/2370920",
-                      "https://bugzilla.redhat.com/2380264",
-                      "https://bugzilla.redhat.com/2380273",
-                      "https://bugzilla.redhat.com/2380274",
-                      "https://bugzilla.redhat.com/2380278",
-                      "https://bugzilla.redhat.com/2380280",
-                      "https://bugzilla.redhat.com/2380283",
-                      "https://bugzilla.redhat.com/2380284",
-                      "https://bugzilla.redhat.com/2380290",
-                      "https://bugzilla.redhat.com/2380291",
-                      "https://bugzilla.redhat.com/2380295",
-                      "https://bugzilla.redhat.com/2380298",
-                      "https://bugzilla.redhat.com/2380306",
-                      "https://bugzilla.redhat.com/2380308",
-                      "https://bugzilla.redhat.com/2380309",
-                      "https://bugzilla.redhat.com/2380310",
-                      "https://bugzilla.redhat.com/2380312",
-                      "https://bugzilla.redhat.com/2380313",
-                      "https://bugzilla.redhat.com/2380320",
-                      "https://bugzilla.redhat.com/2380321",
-                      "https://bugzilla.redhat.com/2380322",
-                      "https://bugzilla.redhat.com/2380326",
-                      "https://bugzilla.redhat.com/2380327",
-                      "https://bugzilla.redhat.com/2380334",
-                      "https://bugzilla.redhat.com/2380335",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2338999",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2359885",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2359888",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2359892",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2359894",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2359895",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2359899",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2359900",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2359902",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2359903",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2359911",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2359918",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2359920",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2359924",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2359928",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2359930",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2359932",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2359934",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2359938",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2359940",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2359943",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2359944",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2359945",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2359947",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2359950",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2359963",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2359964",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2359972",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2370920",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2380264",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2380273",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2380274",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2380278",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2380280",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2380283",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2380284",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2380290",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2380291",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2380295",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2380298",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2380306",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2380308",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2380309",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2380310",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2380312",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2380313",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2380320",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2380321",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2380322",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2380326",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2380327",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2380334",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2380335",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-13176",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21574",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21575",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21577",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21579",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21580",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21581",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21584",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21585",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21588",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30681",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30682",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30683",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30684",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30685",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30687",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30688",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30689",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30693",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30695",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30696",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30699",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30703",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30704",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30705",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30715",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30721",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30722",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50077",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50078",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50079",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50080",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50081",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50082",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50083",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50084",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50085",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50086",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50087",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50088",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50091",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50092",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50093",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50094",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50096",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50097",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50098",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50099",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50100",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50101",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50102",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50104",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-5399",
-                      "https://errata.almalinux.org/10/ALSA-2025-15699.html",
-                      "https://errata.rockylinux.org/RLSA-2025:15699",
-                      "https://github.com/openssl/openssl/commit/07272b05b04836a762b4baa874958af51d513844",
-                      "https://github.com/openssl/openssl/commit/2af62e74fb59bc469506bc37eb2990ea408d9467",
-                      "https://github.com/openssl/openssl/commit/392dcb336405a0c94486aa6655057f59fd3a0902",
-                      "https://github.com/openssl/openssl/commit/4b1cb94a734a7d4ec363ac0a215a25c181e11f65",
-                      "https://github.com/openssl/openssl/commit/77c608f4c8857e63e98e66444e2e761c9627916f",
-                      "https://github.openssl.org/openssl/extended-releases/commit/0d5fd1ab987f7571e2c955d8d8b638fc0fb54ded",
-                      "https://github.openssl.org/openssl/extended-releases/commit/a2639000db19878d5d89586ae7b725080592ae86",
-                      "https://linux.oracle.com/cve/CVE-2024-13176.html",
-                      "https://linux.oracle.com/errata/ELSA-2025-16046.html",
-                      "https://lists.debian.org/debian-lts-announce/2025/05/msg00028.html",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2024-13176",
-                      "https://openssl-library.org/news/secadv/20250120.txt",
-                      "https://security.netapp.com/advisory/ntap-20250124-0005/",
-                      "https://security.netapp.com/advisory/ntap-20250418-0010/",
-                      "https://security.netapp.com/advisory/ntap-20250502-0006/",
-                      "https://ubuntu.com/security/notices/USN-7264-1",
-                      "https://ubuntu.com/security/notices/USN-7278-1",
-                      "https://ubuntu.com/security/notices/USN-7894-1",
-                      "https://www.cve.org/CVERecord?id=CVE-2024-13176",
-                      "https://www.oracle.com/security-alerts/cpuapr2025.html#AppendixMSQL"
-                    ],
-                    "severity": "MEDIUM",
-                    "suppressed": false,
-                    "title": "openssl: Timing side-channel in ECDSA signature computation"
-                  },
-                  {
-                    "cve": "CVE-2024-4741",
-                    "cvss": {
-                      "redhat": {
-                        "v3score": "5.6",
-                        "v3vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-416"
-                    ],
-                    "description": "Issue summary: Calling the OpenSSL API function SSL_free_buffers may cause\nmemory to be accessed that was previously freed in some situations\n\nImpact summary: A use after free can have a range of potential consequences such\nas the corruption of valid data, crashes or execution of arbitrary code.\nHowever, only applications that directly call the SSL_free_buffers function are\naffected by this issue. Applications that do not call this function are not\nvulnerable. Our investigations indicate that this function is rarely used by\napplications.\n\nThe SSL_free_buffers function is used to free the internal OpenSSL buffer used\nwhen processing an incoming record from the network. The call is only expected\nto succeed if the buffer is not currently in use. However, two scenarios have\nbeen identified where the buffer is freed even when still in use.\n\nThe first scenario occurs where a record header has been received from the\nnetwork and processed by OpenSSL, but the full record body has not yet arrived.\nIn this case calling SSL_free_buffers will succeed even though a record has only\nbeen partially processed and the buffer is still in use.\n\nThe second scenario occurs where a full record containing application data has\nbeen received and processed by OpenSSL but the application has only read part of\nthis data. Again a call to SSL_free_buffers will succeed even though the buffer\nis still in use.\n\nWhile these scenarios could occur accidentally during normal operation a\nmalicious attacker could attempt to engineer a stituation where this occurs.\nWe are not aware of this issue being actively exploited.\n\nThe FIPS modules in 3.3, 3.2, 3.1 and 3.0 are not affected by this issue.",
-                    "diffID": "sha256:a499da141b419b2e97ed40192951a05fc37fadec129a55e1de03773e23fff97b",
-                    "fixedVersions": [
-                      "1.1.1w-0+deb11u2"
-                    ],
-                    "installedVersion": "1.1.1w-0+deb11u1",
-                    "packageName": "libssl1.1",
-                    "purl": "pkg:deb/debian/libssl1.1@1.1.1w-0%2Bdeb11u1?arch=arm64&distro=debian-11.9",
-                    "references": [
-                      "https://access.redhat.com/errata/RHSA-2024:9333",
-                      "https://access.redhat.com/security/cve/CVE-2024-4741",
-                      "https://bugzilla.redhat.com/2274020",
-                      "https://bugzilla.redhat.com/2281029",
-                      "https://bugzilla.redhat.com/2283757",
-                      "https://bugzilla.redhat.com/2294581",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2274020",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2281029",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2283757",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2294581",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-2511",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-4603",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-4741",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-5535",
-                      "https://errata.almalinux.org/9/ALSA-2024-9333.html",
-                      "https://errata.rockylinux.org/RLSA-2024:9333",
-                      "https://github.com/openssl/openssl/commit/704f725b96aa373ee45ecfb23f6abfe8be8d9177",
-                      "https://github.com/openssl/openssl/commit/b3f0eb0a295f58f16ba43ba99dad70d4ee5c437d",
-                      "https://github.com/openssl/openssl/commit/c88c3de51020c37e8706bf7a682a162593053aac",
-                      "https://github.com/openssl/openssl/commit/e5093133c35ca82874ad83697af76f4b0f7e3bd8",
-                      "https://github.openssl.org/openssl/extended-releases/commit/f7a045f3143fc6da2ee66bf52d8df04829590dd4",
-                      "https://linux.oracle.com/cve/CVE-2024-4741.html",
-                      "https://linux.oracle.com/errata/ELSA-2024-9333.html",
-                      "https://lists.debian.org/debian-lts-announce/2024/10/msg00033.html",
-                      "https://lists.debian.org/debian-lts-announce/2024/11/msg00000.html",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2024-4741",
-                      "https://security.netapp.com/advisory/ntap-20240621-0004/",
-                      "https://ubuntu.com/security/notices/USN-6937-1",
-                      "https://ubuntu.com/security/notices/USN-7894-1",
-                      "https://www.cve.org/CVERecord?id=CVE-2024-4741",
-                      "https://www.openssl.org/news/secadv/20240528.txt"
-                    ],
-                    "severity": "MEDIUM",
-                    "suppressed": false,
-                    "title": "openssl: Use After Free with SSL_free_buffers"
-                  },
-                  {
-                    "cve": "CVE-2024-5535",
-                    "cvss": {
-                      "redhat": {
-                        "v3score": "5.9",
-                        "v3vector": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-125"
-                    ],
-                    "description": "Issue summary: Calling the OpenSSL API function SSL_select_next_proto with an\nempty supported client protocols buffer may cause a crash or memory contents to\nbe sent to the peer.\n\nImpact summary: A buffer overread can have a range of potential consequences\nsuch as unexpected application beahviour or a crash. In particular this issue\ncould result in up to 255 bytes of arbitrary private data from memory being sent\nto the peer leading to a loss of confidentiality. However, only applications\nthat directly call the SSL_select_next_proto function with a 0 length list of\nsupported client protocols are affected by this issue. This would normally never\nbe a valid scenario and is typically not under attacker control but may occur by\naccident in the case of a configuration or programming error in the calling\napplication.\n\nThe OpenSSL API function SSL_select_next_proto is typically used by TLS\napplications that support ALPN (Application Layer Protocol Negotiation) or NPN\n(Next Protocol Negotiation). NPN is older, was never standardised and\nis deprecated in favour of ALPN. We believe that ALPN is significantly more\nwidely deployed than NPN. The SSL_select_next_proto function accepts a list of\nprotocols from the server and a list of protocols from the client and returns\nthe first protocol that appears in the server list that also appears in the\nclient list. In the case of no overlap between the two lists it returns the\nfirst item in the client list. In either case it will signal whether an overlap\nbetween the two lists was found. In the case where SSL_select_next_proto is\ncalled with a zero length client list it fails to notice this condition and\nreturns the memory immediately following the client list pointer (and reports\nthat there was no overlap in the lists).\n\nThis function is typically called from a server side application callback for\nALPN or a client side application callback for NPN. In the case of ALPN the list\nof protocols supplied by the client is guaranteed by libssl to never be zero in\nlength. The list of server protocols comes from the application and should never\nnormally be expected to be of zero length. In this case if the\nSSL_select_next_proto function has been called as expected (with the list\nsupplied by the client passed in the client/client_len parameters), then the\napplication will not be vulnerable to this issue. If the application has\naccidentally been configured with a zero length server list, and has\naccidentally passed that zero length server list in the client/client_len\nparameters, and has additionally failed to correctly handle a \"no overlap\"\nresponse (which would normally result in a handshake failure in ALPN) then it\nwill be vulnerable to this problem.\n\nIn the case of NPN, the protocol permits the client to opportunistically select\na protocol when there is no overlap. OpenSSL returns the first client protocol\nin the no overlap case in support of this. The list of client protocols comes\nfrom the application and should never normally be expected to be of zero length.\nHowever if the SSL_select_next_proto function is accidentally called with a\nclient_len of 0 then an invalid memory pointer will be returned instead. If the\napplication uses this output as the opportunistic protocol then the loss of\nconfidentiality will occur.\n\nThis issue has been assessed as Low severity because applications are most\nlikely to be vulnerable if they are using NPN instead of ALPN - but NPN is not\nwidely used. It also requires an application configuration or programming error.\nFinally, this issue would not typically be under attacker control making active\nexploitation unlikely.\n\nThe FIPS modules in 3.3, 3.2, 3.1 and 3.0 are not affected by this issue.\n\nDue to the low severity of this issue we are not issuing new releases of\nOpenSSL at this time. The fix will be included in the next releases when they\nbecome available.",
-                    "diffID": "sha256:a499da141b419b2e97ed40192951a05fc37fadec129a55e1de03773e23fff97b",
-                    "fixedVersions": [
-                      "1.1.1w-0+deb11u2"
-                    ],
-                    "installedVersion": "1.1.1w-0+deb11u1",
-                    "packageName": "libssl1.1",
-                    "purl": "pkg:deb/debian/libssl1.1@1.1.1w-0%2Bdeb11u1?arch=arm64&distro=debian-11.9",
-                    "references": [
-                      "http://www.openwall.com/lists/oss-security/2024/06/27/1",
-                      "http://www.openwall.com/lists/oss-security/2024/06/28/4",
-                      "http://www.openwall.com/lists/oss-security/2024/08/15/1",
-                      "https://access.redhat.com/errata/RHSA-2025:1673",
-                      "https://access.redhat.com/security/cve/CVE-2024-5535",
-                      "https://bugzilla.redhat.com/2294581",
-                      "https://bugzilla.redhat.com/2294676",
-                      "https://bugzilla.redhat.com/2301888",
-                      "https://bugzilla.redhat.com/2318857",
-                      "https://bugzilla.redhat.com/2318858",
-                      "https://bugzilla.redhat.com/2318870",
-                      "https://bugzilla.redhat.com/2318873",
-                      "https://bugzilla.redhat.com/2318874",
-                      "https://bugzilla.redhat.com/2318876",
-                      "https://bugzilla.redhat.com/2318882",
-                      "https://bugzilla.redhat.com/2318883",
-                      "https://bugzilla.redhat.com/2318884",
-                      "https://bugzilla.redhat.com/2318885",
-                      "https://bugzilla.redhat.com/2318886",
-                      "https://bugzilla.redhat.com/2318897",
-                      "https://bugzilla.redhat.com/2318900",
-                      "https://bugzilla.redhat.com/2318905",
-                      "https://bugzilla.redhat.com/2318914",
-                      "https://bugzilla.redhat.com/2318922",
-                      "https://bugzilla.redhat.com/2318923",
-                      "https://bugzilla.redhat.com/2318925",
-                      "https://bugzilla.redhat.com/2318926",
-                      "https://bugzilla.redhat.com/2318927",
-                      "https://bugzilla.redhat.com/2331191",
-                      "https://bugzilla.redhat.com/2339218",
-                      "https://bugzilla.redhat.com/2339220",
-                      "https://bugzilla.redhat.com/2339221",
-                      "https://bugzilla.redhat.com/2339226",
-                      "https://bugzilla.redhat.com/2339231",
-                      "https://bugzilla.redhat.com/2339236",
-                      "https://bugzilla.redhat.com/2339238",
-                      "https://bugzilla.redhat.com/2339243",
-                      "https://bugzilla.redhat.com/2339247",
-                      "https://bugzilla.redhat.com/2339252",
-                      "https://bugzilla.redhat.com/2339259",
-                      "https://bugzilla.redhat.com/2339266",
-                      "https://bugzilla.redhat.com/2339270",
-                      "https://bugzilla.redhat.com/2339271",
-                      "https://bugzilla.redhat.com/2339275",
-                      "https://bugzilla.redhat.com/2339277",
-                      "https://bugzilla.redhat.com/2339281",
-                      "https://bugzilla.redhat.com/2339284",
-                      "https://bugzilla.redhat.com/2339291",
-                      "https://bugzilla.redhat.com/2339293",
-                      "https://bugzilla.redhat.com/2339295",
-                      "https://bugzilla.redhat.com/2339299",
-                      "https://bugzilla.redhat.com/2339300",
-                      "https://bugzilla.redhat.com/2339304",
-                      "https://bugzilla.redhat.com/2339305",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2274020",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2281029",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2283757",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2294581",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-2511",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-4603",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-4741",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-5535",
-                      "https://errata.almalinux.org/8/ALSA-2025-1673.html",
-                      "https://errata.rockylinux.org/RLSA-2024:9333",
-                      "https://github.com/openssl/openssl/commit/4ada436a1946cbb24db5ab4ca082b69c1bc10f37",
-                      "https://github.com/openssl/openssl/commit/99fb785a5f85315b95288921a321a935ea29a51e",
-                      "https://github.com/openssl/openssl/commit/cf6f91f6121f4db167405db2f0de410a456f260c",
-                      "https://github.com/openssl/openssl/commit/e86ac436f0bd54d4517745483e2315650fae7b2c",
-                      "https://github.openssl.org/openssl/extended-releases/commit/9947251413065a05189a63c9b7a6c1d4e224c21c",
-                      "https://github.openssl.org/openssl/extended-releases/commit/b78ec0824da857223486660177d3b1f255c65d87",
-                      "https://linux.oracle.com/cve/CVE-2024-5535.html",
-                      "https://linux.oracle.com/errata/ELSA-2025-1673.html",
-                      "https://lists.debian.org/debian-lts-announce/2024/10/msg00033.html",
-                      "https://lists.debian.org/debian-lts-announce/2024/11/msg00000.html",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2024-5535",
-                      "https://openssl.org/news/secadv/20240627.txt",
-                      "https://security.netapp.com/advisory/ntap-20240712-0005/",
-                      "https://security.netapp.com/advisory/ntap-20241025-0006/",
-                      "https://security.netapp.com/advisory/ntap-20241025-0010/",
-                      "https://ubuntu.com/security/notices/USN-6937-1",
-                      "https://ubuntu.com/security/notices/USN-7894-1",
-                      "https://www.cve.org/CVERecord?id=CVE-2024-5535",
-                      "https://www.openssl.org/news/secadv/20240627.txt",
-                      "https://www.oracle.com/security-alerts/cpuoct2024.html#AppendixMSQL"
-                    ],
-                    "severity": "MEDIUM",
-                    "suppressed": false,
-                    "title": "openssl: SSL_select_next_proto buffer overread"
-                  },
-                  {
-                    "cve": "CVE-2025-68160",
-                    "cvss": {
-                      "redhat": {
-                        "v3score": "4.7",
-                        "v3vector": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-787"
-                    ],
-                    "description": "Issue summary: Writing large, newline-free data into a BIO chain using the\nline-buffering filter where the next BIO performs short writes can trigger\na heap-based out-of-bounds write.\n\nImpact summary: This out-of-bounds write can cause memory corruption which\ntypically results in a crash, leading to Denial of Service for an application.\n\nThe line-buffering BIO filter (BIO_f_linebuffer) is not used by default in\nTLS/SSL data paths. In OpenSSL command-line applications, it is typically\nonly pushed onto stdout/stderr on VMS systems. Third-party applications that\nexplicitly use this filter with a BIO chain that can short-write and that\nwrite large, newline-free data influenced by an attacker would be affected.\nHowever, the circumstances where this could happen are unlikely to be under\nattacker control, and BIO_f_linebuffer is unlikely to be handling non-curated\ndata controlled by an attacker. For that reason the issue was assessed as\nLow severity.\n\nThe FIPS modules in 3.6, 3.5, 3.4, 3.3 and 3.0 are not affected by this issue,\nas the BIO implementation is outside the OpenSSL FIPS module boundary.\n\nOpenSSL 3.6, 3.5, 3.4, 3.3, 3.0, 1.1.1 and 1.0.2 are vulnerable to this issue.",
-                    "diffID": "sha256:a499da141b419b2e97ed40192951a05fc37fadec129a55e1de03773e23fff97b",
-                    "installedVersion": "1.1.1w-0+deb11u1",
-                    "packageName": "libssl1.1",
-                    "purl": "pkg:deb/debian/libssl1.1@1.1.1w-0%2Bdeb11u1?arch=arm64&distro=debian-11.9",
-                    "references": [
-                      "https://access.redhat.com/errata/RHSA-2026:1472",
-                      "https://access.redhat.com/security/cve/CVE-2025-68160",
-                      "https://bugzilla.redhat.com/2430375",
-                      "https://bugzilla.redhat.com/2430376",
-                      "https://bugzilla.redhat.com/2430377",
-                      "https://bugzilla.redhat.com/2430378",
-                      "https://bugzilla.redhat.com/2430379",
-                      "https://bugzilla.redhat.com/2430380",
-                      "https://bugzilla.redhat.com/2430381",
-                      "https://bugzilla.redhat.com/2430386",
-                      "https://bugzilla.redhat.com/2430387",
-                      "https://bugzilla.redhat.com/2430388",
-                      "https://bugzilla.redhat.com/2430389",
-                      "https://bugzilla.redhat.com/2430390",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430375",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430376",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430377",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430378",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430379",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430380",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430381",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430386",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430387",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430388",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430389",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430390",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-11187",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-15467",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-15468",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-15469",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-66199",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-68160",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-69418",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-69419",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-69420",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-69421",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-22795",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-22796",
-                      "https://errata.almalinux.org/10/ALSA-2026-1472.html",
-                      "https://errata.rockylinux.org/RLSA-2026:1473",
-                      "https://github.com/openssl/openssl/commit/384011202af92605d926fafe4a0bcd6b65d162ad",
-                      "https://github.com/openssl/openssl/commit/475c466ef2fbd8fc1df6fae1c3eed9c813fc8ff6",
-                      "https://github.com/openssl/openssl/commit/4c96fbba618e1940f038012506ee9e21d32ee12c",
-                      "https://github.com/openssl/openssl/commit/6845c3b6460a98b1ec4e463baa2ea1a63a32d7c0",
-                      "https://github.com/openssl/openssl/commit/68a7cd2e2816c3a02f4d45a2ce43fc04fac97096",
-                      "https://linux.oracle.com/cve/CVE-2025-68160.html",
-                      "https://linux.oracle.com/errata/ELSA-2026-50081.html",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2025-68160",
-                      "https://openssl-library.org/news/secadv/20260127.txt",
-                      "https://ubuntu.com/security/notices/USN-7980-1",
-                      "https://ubuntu.com/security/notices/USN-7980-2",
-                      "https://www.cve.org/CVERecord?id=CVE-2025-68160"
-                    ],
-                    "severity": "MEDIUM",
-                    "suppressed": false,
-                    "title": "openssl: OpenSSL: Denial of Service due to out-of-bounds write in BIO filter"
-                  },
-                  {
-                    "cve": "CVE-2025-69418",
-                    "cvss": {
-                      "redhat": {
-                        "v3score": "4",
-                        "v3vector": "CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-325"
-                    ],
-                    "description": "Issue summary: When using the low-level OCB API directly with AES-NI or<br>other hardware-accelerated code paths, inputs whose length is not a multiple<br>of 16 bytes can leave the final partial block unencrypted and unauthenticated.<br><br>Impact summary: The trailing 1-15 bytes of a message may be exposed in<br>cleartext on encryption and are not covered by the authentication tag,<br>allowing an attacker to read or tamper with those bytes without detection.<br><br>The low-level OCB encrypt and decrypt routines in the hardware-accelerated<br>stream path process full 16-byte blocks but do not advance the input/output<br>pointers. The subsequent tail-handling code then operates on the original<br>base pointers, effectively reprocessing the beginning of the buffer while<br>leaving the actual trailing bytes unprocessed. The authentication checksum<br>also excludes the true tail bytes.<br><br>However, typical OpenSSL consumers using EVP are not affected because the<br>higher-level EVP and provider OCB implementations split inputs so that full<br>blocks and trailing partial blocks are processed in separate calls, avoiding<br>the problematic code path. Additionally, TLS does not use OCB ciphersuites.<br>The vulnerability only affects applications that call the low-level<br>CRYPTO_ocb128_encrypt() or CRYPTO_ocb128_decrypt() functions directly with<br>non-block-aligned lengths in a single call on hardware-accelerated builds.<br>For these reasons the issue was assessed as Low severity.<br><br>The FIPS modules in 3.6, 3.5, 3.4, 3.3, 3.2, 3.1 and 3.0 are not affected<br>by this issue, as OCB mode is not a FIPS-approved algorithm.<br><br>OpenSSL 3.6, 3.5, 3.4, 3.3, 3.0 and 1.1.1 are vulnerable to this issue.<br><br>OpenSSL 1.0.2 is not affected by this issue.",
-                    "diffID": "sha256:a499da141b419b2e97ed40192951a05fc37fadec129a55e1de03773e23fff97b",
-                    "installedVersion": "1.1.1w-0+deb11u1",
-                    "packageName": "libssl1.1",
-                    "purl": "pkg:deb/debian/libssl1.1@1.1.1w-0%2Bdeb11u1?arch=arm64&distro=debian-11.9",
-                    "references": [
-                      "https://access.redhat.com/errata/RHSA-2026:1472",
-                      "https://access.redhat.com/security/cve/CVE-2025-69418",
-                      "https://bugzilla.redhat.com/2430375",
-                      "https://bugzilla.redhat.com/2430376",
-                      "https://bugzilla.redhat.com/2430377",
-                      "https://bugzilla.redhat.com/2430378",
-                      "https://bugzilla.redhat.com/2430379",
-                      "https://bugzilla.redhat.com/2430380",
-                      "https://bugzilla.redhat.com/2430381",
-                      "https://bugzilla.redhat.com/2430386",
-                      "https://bugzilla.redhat.com/2430387",
-                      "https://bugzilla.redhat.com/2430388",
-                      "https://bugzilla.redhat.com/2430389",
-                      "https://bugzilla.redhat.com/2430390",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430375",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430376",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430377",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430378",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430379",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430380",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430381",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430386",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430387",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430388",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430389",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430390",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-11187",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-15467",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-15468",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-15469",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-66199",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-68160",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-69418",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-69419",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-69420",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-69421",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-22795",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-22796",
-                      "https://errata.almalinux.org/10/ALSA-2026-1472.html",
-                      "https://errata.rockylinux.org/RLSA-2026:1473",
-                      "https://github.com/openssl/openssl/commit/372fc5c77529695b05b4f5b5187691a57ef5dffc",
-                      "https://github.com/openssl/openssl/commit/4016975d4469cd6b94927c607f7c511385f928d8",
-                      "https://github.com/openssl/openssl/commit/52d23c86a54adab5ee9f80e48b242b52c4cc2347",
-                      "https://github.com/openssl/openssl/commit/a7589230356d908c0eca4b969ec4f62106f4f5ae",
-                      "https://github.com/openssl/openssl/commit/ed40856d7d4ba6cb42779b6770666a65f19cb977",
-                      "https://linux.oracle.com/cve/CVE-2025-69418.html",
-                      "https://linux.oracle.com/errata/ELSA-2026-50081.html",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2025-69418",
-                      "https://openssl-library.org/news/secadv/20260127.txt",
-                      "https://ubuntu.com/security/notices/USN-7980-1",
-                      "https://ubuntu.com/security/notices/USN-7980-2",
-                      "https://www.cve.org/CVERecord?id=CVE-2025-69418"
-                    ],
-                    "severity": "MEDIUM",
-                    "suppressed": false,
-                    "title": "openssl: OpenSSL: Information disclosure and data tampering via specific low-level OCB encryption/decryption calls"
-                  },
-                  {
-                    "cve": "CVE-2025-69420",
-                    "cvss": {
-                      "redhat": {
-                        "v3score": "5.9",
-                        "v3vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-754"
-                    ],
-                    "description": "Issue summary: A type confusion vulnerability exists in the TimeStamp Response\nverification code where an ASN1_TYPE union member is accessed without first\nvalidating the type, causing an invalid or NULL pointer dereference when\nprocessing a malformed TimeStamp Response file.\n\nImpact summary: An application calling TS_RESP_verify_response() with a\nmalformed TimeStamp Response can be caused to dereference an invalid or\nNULL pointer when reading, resulting in a Denial of Service.\n\nThe functions ossl_ess_get_signing_cert() and ossl_ess_get_signing_cert_v2()\naccess the signing cert attribute value without validating its type.\nWhen the type is not V_ASN1_SEQUENCE, this results in accessing invalid memory\nthrough the ASN1_TYPE union, causing a crash.\n\nExploiting this vulnerability requires an attacker to provide a malformed\nTimeStamp Response to an application that verifies timestamp responses. The\nTimeStamp protocol (RFC 3161) is not widely used and the impact of the\nexploit is just a Denial of Service. For these reasons the issue was\nassessed as Low severity.\n\nThe FIPS modules in 3.5, 3.4, 3.3 and 3.0 are not affected by this issue,\nas the TimeStamp Response implementation is outside the OpenSSL FIPS module\nboundary.\n\nOpenSSL 3.6, 3.5, 3.4, 3.3, 3.0 and 1.1.1 are vulnerable to this issue.\n\nOpenSSL 1.0.2 is not affected by this issue.",
-                    "diffID": "sha256:a499da141b419b2e97ed40192951a05fc37fadec129a55e1de03773e23fff97b",
-                    "installedVersion": "1.1.1w-0+deb11u1",
-                    "packageName": "libssl1.1",
-                    "purl": "pkg:deb/debian/libssl1.1@1.1.1w-0%2Bdeb11u1?arch=arm64&distro=debian-11.9",
-                    "references": [
-                      "https://access.redhat.com/errata/RHSA-2026:1472",
-                      "https://access.redhat.com/security/cve/CVE-2025-69420",
-                      "https://bugzilla.redhat.com/2430375",
-                      "https://bugzilla.redhat.com/2430376",
-                      "https://bugzilla.redhat.com/2430377",
-                      "https://bugzilla.redhat.com/2430378",
-                      "https://bugzilla.redhat.com/2430379",
-                      "https://bugzilla.redhat.com/2430380",
-                      "https://bugzilla.redhat.com/2430381",
-                      "https://bugzilla.redhat.com/2430386",
-                      "https://bugzilla.redhat.com/2430387",
-                      "https://bugzilla.redhat.com/2430388",
-                      "https://bugzilla.redhat.com/2430389",
-                      "https://bugzilla.redhat.com/2430390",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430375",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430376",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430377",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430378",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430379",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430380",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430381",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430386",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430387",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430388",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430389",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430390",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-11187",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-15467",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-15468",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-15469",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-66199",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-68160",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-69418",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-69419",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-69420",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-69421",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-22795",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-22796",
-                      "https://errata.almalinux.org/10/ALSA-2026-1472.html",
-                      "https://errata.rockylinux.org/RLSA-2026:1473",
-                      "https://github.com/openssl/openssl/commit/27c7012c91cc986a598d7540f3079dfde2416eb9",
-                      "https://github.com/openssl/openssl/commit/4e254b48ad93cc092be3dd62d97015f33f73133a",
-                      "https://github.com/openssl/openssl/commit/564fd9c73787f25693bf9e75faf7bf6bb1305d4e",
-                      "https://github.com/openssl/openssl/commit/5eb0770ffcf11b785cf374ff3c19196245e54f1b",
-                      "https://github.com/openssl/openssl/commit/a99349ebfc519999edc50620abe24d599b9eb085",
-                      "https://linux.oracle.com/cve/CVE-2025-69420.html",
-                      "https://linux.oracle.com/errata/ELSA-2026-50081.html",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2025-69420",
-                      "https://openssl-library.org/news/secadv/20260127.txt",
-                      "https://ubuntu.com/security/notices/USN-7980-1",
-                      "https://ubuntu.com/security/notices/USN-7980-2",
-                      "https://www.cve.org/CVERecord?id=CVE-2025-69420"
-                    ],
-                    "severity": "MEDIUM",
-                    "suppressed": false,
-                    "title": "openssl: OpenSSL: Denial of Service via malformed TimeStamp Response"
-                  },
-                  {
-                    "cve": "CVE-2025-9230",
-                    "cvss": {
-                      "redhat": {
-                        "v3score": "5.6",
-                        "v3vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-125",
-                      "CWE-787"
-                    ],
-                    "description": "Issue summary: An application trying to decrypt CMS messages encrypted using\npassword based encryption can trigger an out-of-bounds read and write.\n\nImpact summary: This out-of-bounds read may trigger a crash which leads to\nDenial of Service for an application. The out-of-bounds write can cause\na memory corruption which can have various consequences including\na Denial of Service or Execution of attacker-supplied code.\n\nAlthough the consequences of a successful exploit of this vulnerability\ncould be severe, the probability that the attacker would be able to\nperform it is low. Besides, password based (PWRI) encryption support in CMS\nmessages is very rarely used. For that reason the issue was assessed as\nModerate severity according to our Security Policy.\n\nThe FIPS modules in 3.5, 3.4, 3.3, 3.2, 3.1 and 3.0 are not affected by this\nissue, as the CMS implementation is outside the OpenSSL FIPS module\nboundary.",
-                    "diffID": "sha256:a499da141b419b2e97ed40192951a05fc37fadec129a55e1de03773e23fff97b",
-                    "fixedVersions": [
-                      "1.1.1w-0+deb11u4"
-                    ],
-                    "installedVersion": "1.1.1w-0+deb11u1",
-                    "packageName": "libssl1.1",
-                    "purl": "pkg:deb/debian/libssl1.1@1.1.1w-0%2Bdeb11u1?arch=arm64&distro=debian-11.9",
-                    "references": [
-                      "http://www.openwall.com/lists/oss-security/2025/09/30/5",
-                      "https://access.redhat.com/errata/RHSA-2026:0337",
-                      "https://access.redhat.com/security/cve/CVE-2025-9230",
-                      "https://bugzilla.redhat.com/2396054",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2396054",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-9230",
-                      "https://errata.almalinux.org/8/ALSA-2026-0337.html",
-                      "https://errata.rockylinux.org/RLSA-2025:21255",
-                      "https://github.com/openssl/openssl/commit/5965ea5dd6960f36d8b7f74f8eac67a8eb8f2b45",
-                      "https://github.com/openssl/openssl/commit/9e91358f365dee6c446dcdcdb01c04d2743fd280",
-                      "https://github.com/openssl/openssl/commit/a79c4ce559c6a3a8fd4109e9f33c1185d5bf2def",
-                      "https://github.com/openssl/openssl/commit/b5282d677551afda7d20e9c00e09561b547b2dfd",
-                      "https://github.com/openssl/openssl/commit/bae259a211ada6315dc50900686daaaaaa55f482",
-                      "https://github.openssl.org/openssl/extended-releases/commit/c2b96348bfa662f25f4fabf81958ae822063dae3",
-                      "https://github.openssl.org/openssl/extended-releases/commit/dfbaf161d8dafc1132dd88cd48ad990ed9b4c8ba",
-                      "https://linux.oracle.com/cve/CVE-2025-9230.html",
-                      "https://linux.oracle.com/errata/ELSA-2026-50077.html",
-                      "https://lists.debian.org/debian-lts-announce/2025/10/msg00001.html",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2025-9230",
-                      "https://openssl-library.org/news/secadv/20250930.txt",
-                      "https://ubuntu.com/security/notices/USN-7786-1",
-                      "https://www.cve.org/CVERecord?id=CVE-2025-9230"
-                    ],
-                    "severity": "MEDIUM",
-                    "suppressed": false,
-                    "title": "openssl: Out-of-bounds read & write in RFC 3211 KEK Unwrap"
-                  },
-                  {
-                    "cve": "CVE-2026-22795",
-                    "cvss": {
-                      "redhat": {
-                        "v3score": "5.5",
-                        "v3vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-754"
-                    ],
-                    "description": "Issue summary: An invalid or NULL pointer dereference can happen in\nan application processing a malformed PKCS#12 file.\n\nImpact summary: An application processing a malformed PKCS#12 file can be\ncaused to dereference an invalid or NULL pointer on memory read, resulting\nin a Denial of Service.\n\nA type confusion vulnerability exists in PKCS#12 parsing code where\nan ASN1_TYPE union member is accessed without first validating the type,\ncausing an invalid pointer read.\n\nThe location is constrained to a 1-byte address space, meaning any\nattempted pointer manipulation can only target addresses between 0x00 and 0xFF.\nThis range corresponds to the zero page, which is unmapped on most modern\noperating systems and will reliably result in a crash, leading only to a\nDenial of Service. Exploiting this issue also requires a user or application\nto process a maliciously crafted PKCS#12 file. It is uncommon to accept\nuntrusted PKCS#12 files in applications as they are usually used to store\nprivate keys which are trusted by definition. For these reasons, the issue\nwas assessed as Low severity.\n\nThe FIPS modules in 3.5, 3.4, 3.3 and 3.0 are not affected by this issue,\nas the PKCS12 implementation is outside the OpenSSL FIPS module boundary.\n\nOpenSSL 3.6, 3.5, 3.4, 3.3, 3.0 and 1.1.1 are vulnerable to this issue.\n\nOpenSSL 1.0.2 is not affected by this issue.",
-                    "diffID": "sha256:a499da141b419b2e97ed40192951a05fc37fadec129a55e1de03773e23fff97b",
-                    "installedVersion": "1.1.1w-0+deb11u1",
-                    "packageName": "libssl1.1",
-                    "purl": "pkg:deb/debian/libssl1.1@1.1.1w-0%2Bdeb11u1?arch=arm64&distro=debian-11.9",
-                    "references": [
-                      "https://access.redhat.com/errata/RHSA-2026:1472",
-                      "https://access.redhat.com/security/cve/CVE-2026-22795",
-                      "https://bugzilla.redhat.com/2430375",
-                      "https://bugzilla.redhat.com/2430376",
-                      "https://bugzilla.redhat.com/2430377",
-                      "https://bugzilla.redhat.com/2430378",
-                      "https://bugzilla.redhat.com/2430379",
-                      "https://bugzilla.redhat.com/2430380",
-                      "https://bugzilla.redhat.com/2430381",
-                      "https://bugzilla.redhat.com/2430386",
-                      "https://bugzilla.redhat.com/2430387",
-                      "https://bugzilla.redhat.com/2430388",
-                      "https://bugzilla.redhat.com/2430389",
-                      "https://bugzilla.redhat.com/2430390",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430375",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430376",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430377",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430378",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430379",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430380",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430381",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430386",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430387",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430388",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430389",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430390",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-11187",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-15467",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-15468",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-15469",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-66199",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-68160",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-69418",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-69419",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-69420",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-69421",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-22795",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-22796",
-                      "https://errata.almalinux.org/10/ALSA-2026-1472.html",
-                      "https://errata.rockylinux.org/RLSA-2026:1473",
-                      "https://github.com/openssl/openssl/commit/2502e7b7d4c0cf4f972a881641fe09edc67aeec4",
-                      "https://github.com/openssl/openssl/commit/572844beca95068394c916626a6d3a490f831a49",
-                      "https://github.com/openssl/openssl/commit/7bbca05be55b129651d9df4bdb92becc45002c12",
-                      "https://github.com/openssl/openssl/commit/eeee3cbd4d682095ed431052f00403004596373e",
-                      "https://github.com/openssl/openssl/commit/ef2fb66ec571564d64d1c74a12e388a2a54d05d2",
-                      "https://linux.oracle.com/cve/CVE-2026-22795.html",
-                      "https://linux.oracle.com/errata/ELSA-2026-50081.html",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2026-22795",
-                      "https://openssl-library.org/news/secadv/20260127.txt",
-                      "https://ubuntu.com/security/notices/USN-7980-1",
-                      "https://ubuntu.com/security/notices/USN-7980-2",
-                      "https://www.cve.org/CVERecord?id=CVE-2026-22795"
-                    ],
-                    "severity": "MEDIUM",
-                    "suppressed": false,
-                    "title": "openssl: OpenSSL: Denial of Service due to type confusion in PKCS#12 file processing"
-                  },
-                  {
-                    "cve": "CVE-2026-22796",
-                    "cvss": {
-                      "redhat": {
-                        "v3score": "5.9",
-                        "v3vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-754"
-                    ],
-                    "description": "Issue summary: A type confusion vulnerability exists in the signature\nverification of signed PKCS#7 data where an ASN1_TYPE union member is\naccessed without first validating the type, causing an invalid or NULL\npointer dereference when processing malformed PKCS#7 data.\n\nImpact summary: An application performing signature verification of PKCS#7\ndata or calling directly the PKCS7_digest_from_attributes() function can be\ncaused to dereference an invalid or NULL pointer when reading, resulting in\na Denial of Service.\n\nThe function PKCS7_digest_from_attributes() accesses the message digest attribute\nvalue without validating its type. When the type is not V_ASN1_OCTET_STRING,\nthis results in accessing invalid memory through the ASN1_TYPE union, causing\na crash.\n\nExploiting this vulnerability requires an attacker to provide a malformed\nsigned PKCS#7 to an application that verifies it. The impact of the\nexploit is just a Denial of Service, the PKCS7 API is legacy and applications\nshould be using the CMS API instead. For these reasons the issue was\nassessed as Low severity.\n\nThe FIPS modules in 3.5, 3.4, 3.3 and 3.0 are not affected by this issue,\nas the PKCS#7 parsing implementation is outside the OpenSSL FIPS module\nboundary.\n\nOpenSSL 3.6, 3.5, 3.4, 3.3, 3.0, 1.1.1 and 1.0.2 are vulnerable to this issue.",
-                    "diffID": "sha256:a499da141b419b2e97ed40192951a05fc37fadec129a55e1de03773e23fff97b",
-                    "installedVersion": "1.1.1w-0+deb11u1",
-                    "packageName": "libssl1.1",
-                    "purl": "pkg:deb/debian/libssl1.1@1.1.1w-0%2Bdeb11u1?arch=arm64&distro=debian-11.9",
-                    "references": [
-                      "https://access.redhat.com/errata/RHSA-2026:1472",
-                      "https://access.redhat.com/security/cve/CVE-2026-22796",
-                      "https://bugzilla.redhat.com/2430375",
-                      "https://bugzilla.redhat.com/2430376",
-                      "https://bugzilla.redhat.com/2430377",
-                      "https://bugzilla.redhat.com/2430378",
-                      "https://bugzilla.redhat.com/2430379",
-                      "https://bugzilla.redhat.com/2430380",
-                      "https://bugzilla.redhat.com/2430381",
-                      "https://bugzilla.redhat.com/2430386",
-                      "https://bugzilla.redhat.com/2430387",
-                      "https://bugzilla.redhat.com/2430388",
-                      "https://bugzilla.redhat.com/2430389",
-                      "https://bugzilla.redhat.com/2430390",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430375",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430376",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430377",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430378",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430379",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430380",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430381",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430386",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430387",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430388",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430389",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430390",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-11187",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-15467",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-15468",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-15469",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-66199",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-68160",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-69418",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-69419",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-69420",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-69421",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-22795",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-22796",
-                      "https://errata.almalinux.org/10/ALSA-2026-1472.html",
-                      "https://errata.rockylinux.org/RLSA-2026:1473",
-                      "https://github.com/openssl/openssl/commit/2502e7b7d4c0cf4f972a881641fe09edc67aeec4",
-                      "https://github.com/openssl/openssl/commit/572844beca95068394c916626a6d3a490f831a49",
-                      "https://github.com/openssl/openssl/commit/7bbca05be55b129651d9df4bdb92becc45002c12",
-                      "https://github.com/openssl/openssl/commit/eeee3cbd4d682095ed431052f00403004596373e",
-                      "https://github.com/openssl/openssl/commit/ef2fb66ec571564d64d1c74a12e388a2a54d05d2",
-                      "https://linux.oracle.com/cve/CVE-2026-22796.html",
-                      "https://linux.oracle.com/errata/ELSA-2026-50081.html",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2026-22796",
-                      "https://openssl-library.org/news/secadv/20260127.txt",
-                      "https://ubuntu.com/security/notices/USN-7980-1",
-                      "https://ubuntu.com/security/notices/USN-7980-2",
-                      "https://www.cve.org/CVERecord?id=CVE-2026-22796"
-                    ],
-                    "severity": "MEDIUM",
-                    "suppressed": false,
-                    "title": "openssl: OpenSSL: Denial of Service via type confusion in PKCS#7 signature verification"
-                  },
-                  {
-                    "cve": "CVE-2024-2511",
-                    "cvss": {
-                      "redhat": {
-                        "v3score": "3.7",
-                        "v3vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-1325"
-                    ],
-                    "description": "Issue summary: Some non-default TLS server configurations can cause unbounded\nmemory growth when processing TLSv1.3 sessions\n\nImpact summary: An attacker may exploit certain server configurations to trigger\nunbounded memory growth that would lead to a Denial of Service\n\nThis problem can occur in TLSv1.3 if the non-default SSL_OP_NO_TICKET option is\nbeing used (but not if early_data support is also configured and the default\nanti-replay protection is in use). In this case, under certain conditions, the\nsession cache can get into an incorrect state and it will fail to flush properly\nas it fills. The session cache will continue to grow in an unbounded manner. A\nmalicious client could deliberately create the scenario for this failure to\nforce a Denial of Service. It may also happen by accident in normal operation.\n\nThis issue only affects TLS servers supporting TLSv1.3. It does not affect TLS\nclients.\n\nThe FIPS modules in 3.2, 3.1 and 3.0 are not affected by this issue. OpenSSL\n1.0.2 is also not affected by this issue.",
-                    "diffID": "sha256:a499da141b419b2e97ed40192951a05fc37fadec129a55e1de03773e23fff97b",
-                    "fixedVersions": [
-                      "1.1.1w-0+deb11u2"
-                    ],
-                    "installedVersion": "1.1.1w-0+deb11u1",
-                    "packageName": "libssl1.1",
-                    "purl": "pkg:deb/debian/libssl1.1@1.1.1w-0%2Bdeb11u1?arch=arm64&distro=debian-11.9",
-                    "references": [
-                      "http://www.openwall.com/lists/oss-security/2024/04/08/5",
-                      "https://access.redhat.com/errata/RHSA-2024:9333",
-                      "https://access.redhat.com/security/cve/CVE-2024-2511",
-                      "https://bugzilla.redhat.com/2274020",
-                      "https://bugzilla.redhat.com/2281029",
-                      "https://bugzilla.redhat.com/2283757",
-                      "https://bugzilla.redhat.com/2294581",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2274020",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2281029",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2283757",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2294581",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-2511",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-4603",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-4741",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-5535",
-                      "https://errata.almalinux.org/9/ALSA-2024-9333.html",
-                      "https://errata.rockylinux.org/RLSA-2024:9333",
-                      "https://github.com/openssl/openssl/commit/7e4d731b1c07201ad9374c1cd9ac5263bdf35bce",
-                      "https://github.com/openssl/openssl/commit/b52867a9f618bb955bed2a3ce3db4d4f97ed8e5d",
-                      "https://github.com/openssl/openssl/commit/e9d7083e241670332e0443da0f0d4ffb52829f08",
-                      "https://github.openssl.org/openssl/extended-releases/commit/5f8d25770ae6437db119dfc951e207271a326640",
-                      "https://linux.oracle.com/cve/CVE-2024-2511.html",
-                      "https://linux.oracle.com/errata/ELSA-2024-9333.html",
-                      "https://lists.debian.org/debian-lts-announce/2024/10/msg00033.html",
-                      "https://lists.debian.org/debian-lts-announce/2024/11/msg00000.html",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2024-2511",
-                      "https://security.netapp.com/advisory/ntap-20240503-0013/",
-                      "https://ubuntu.com/security/notices/USN-6937-1",
-                      "https://ubuntu.com/security/notices/USN-7894-1",
-                      "https://www.cve.org/CVERecord?id=CVE-2024-2511",
-                      "https://www.openssl.org/news/secadv/20240408.txt",
-                      "https://www.openssl.org/news/vulnerabilities.html"
-                    ],
-                    "severity": "LOW",
-                    "suppressed": false,
-                    "title": "openssl: Unbounded memory growth with session handling in TLSv1.3"
-                  },
-                  {
-                    "cve": "CVE-2024-9143",
-                    "cvss": {
-                      "redhat": {
-                        "v3score": "3.7",
-                        "v3vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-125",
-                      "CWE-787"
-                    ],
-                    "description": "Issue summary: Use of the low-level GF(2^m) elliptic curve APIs with untrusted\nexplicit values for the field polynomial can lead to out-of-bounds memory reads\nor writes.\n\nImpact summary: Out of bound memory writes can lead to an application crash or\neven a possibility of a remote code execution, however, in all the protocols\ninvolving Elliptic Curve Cryptography that we're aware of, either only \"named\ncurves\" are supported, or, if explicit curve parameters are supported, they\nspecify an X9.62 encoding of binary (GF(2^m)) curves that can't represent\nproblematic input values. Thus the likelihood of existence of a vulnerable\napplication is low.\n\nIn particular, the X9.62 encoding is used for ECC keys in X.509 certificates,\nso problematic inputs cannot occur in the context of processing X.509\ncertificates.  Any problematic use-cases would have to be using an \"exotic\"\ncurve encoding.\n\nThe affected APIs include: EC_GROUP_new_curve_GF2m(), EC_GROUP_new_from_params(),\nand various supporting BN_GF2m_*() functions.\n\nApplications working with \"exotic\" explicit binary (GF(2^m)) curve parameters,\nthat make it possible to represent invalid field polynomials with a zero\nconstant term, via the above or similar APIs, may terminate abruptly as a\nresult of reading or writing outside of array bounds.  Remote code execution\ncannot easily be ruled out.\n\nThe FIPS modules in 3.3, 3.2, 3.1 and 3.0 are not affected by this issue.",
-                    "diffID": "sha256:a499da141b419b2e97ed40192951a05fc37fadec129a55e1de03773e23fff97b",
-                    "fixedVersions": [
-                      "1.1.1w-0+deb11u2"
-                    ],
-                    "installedVersion": "1.1.1w-0+deb11u1",
-                    "packageName": "libssl1.1",
-                    "purl": "pkg:deb/debian/libssl1.1@1.1.1w-0%2Bdeb11u1?arch=arm64&distro=debian-11.9",
-                    "references": [
-                      "http://www.openwall.com/lists/oss-security/2024/10/16/1",
-                      "http://www.openwall.com/lists/oss-security/2024/10/23/1",
-                      "http://www.openwall.com/lists/oss-security/2024/10/24/1",
-                      "https://access.redhat.com/security/cve/CVE-2024-9143",
-                      "https://github.com/openssl/openssl/commit/72ae83ad214d2eef262461365a1975707f862712",
-                      "https://github.com/openssl/openssl/commit/bc7e04d7c8d509fb78fc0e285aa948fb0da04700",
-                      "https://github.com/openssl/openssl/commit/c0d3e4d32d2805f49bec30547f225bc4d092e1f4",
-                      "https://github.com/openssl/openssl/commit/fdf6723362ca51bd883295efe206cb5b1cfa5154",
-                      "https://github.openssl.org/openssl/extended-releases/commit/8efc0cbaa8ebba8e116f7b81a876a4123594d86a",
-                      "https://github.openssl.org/openssl/extended-releases/commit/9d576994cec2b7aa37a91740ea7e680810957e41",
-                      "https://lists.debian.org/debian-lts-announce/2024/10/msg00033.html",
-                      "https://lists.debian.org/debian-lts-announce/2024/11/msg00000.html",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2024-9143",
-                      "https://openssl-library.org/news/secadv/20241016.txt",
-                      "https://security.netapp.com/advisory/ntap-20241101-0001/",
-                      "https://ubuntu.com/security/notices/USN-7264-1",
-                      "https://ubuntu.com/security/notices/USN-7278-1",
-                      "https://ubuntu.com/security/notices/USN-7894-1",
-                      "https://www.cve.org/CVERecord?id=CVE-2024-9143"
-                    ],
-                    "severity": "LOW",
-                    "suppressed": false,
-                    "title": "openssl: Low-level invalid GF(2^m) parameters lead to OOB memory access"
-                  },
-                  {
-                    "cve": "CVE-2025-27587",
-                    "cwes": [
-                      "CWE-385"
-                    ],
-                    "description": "OpenSSL 3.0.0 through 3.3.2 on the PowerPC architecture is vulnerable to a Minerva attack, exploitable by measuring the time of signing of random messages using the EVP_DigestSign API, and then using the private key to extract the K value (nonce) from the signatures. Next, based on the bit size of the extracted nonce, one can compare the signing time of full-sized nonces to signatures that used smaller nonces, via statistical tests. There is a side-channel in the P-364 curve that allows private key extraction (also, there is a dependency between the bit size of K and the size of the side channel). NOTE: This CVE is disputed because the OpenSSL security policy explicitly notes that any side channels which require same physical system to be detected are outside of the threat model for the software. The timing signal is so small that it is infeasible to be detected without having the attacking process running on the same physical system.",
-                    "diffID": "sha256:a499da141b419b2e97ed40192951a05fc37fadec129a55e1de03773e23fff97b",
-                    "installedVersion": "1.1.1w-0+deb11u1",
-                    "packageName": "libssl1.1",
-                    "purl": "pkg:deb/debian/libssl1.1@1.1.1w-0%2Bdeb11u1?arch=arm64&distro=debian-11.9",
-                    "references": [
-                      "https://github.com/openssl/openssl/issues/24253",
-                      "https://minerva.crocs.fi.muni.cz"
-                    ],
-                    "severity": "LOW",
-                    "suppressed": false,
-                    "title": "OpenSSL 3.0.0 through 3.3.2 on the PowerPC architecture is vulnerable  ..."
-                  },
-                  {
-                    "cve": "CVE-2023-4039",
-                    "cvss": {
-                      "nvd": {
-                        "v3score": "4.8",
-                        "v3vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-693"
-                    ],
-                    "description": "**DISPUTED**A failure in the -fstack-protector feature in GCC-based toolchains \nthat target AArch64 allows an attacker to exploit an existing buffer \noverflow in dynamically-sized local variables in your application \nwithout this being detected. This stack-protector failure only applies \nto C99-style dynamically-sized local variables or those created using \nalloca(). The stack-protector operates as intended for statically-sized \nlocal variables.\n\nThe default behavior when the stack-protector \ndetects an overflow is to terminate your application, resulting in \ncontrolled loss of availability. An attacker who can exploit a buffer \noverflow without triggering the stack-protector might be able to change \nprogram flow control to cause an uncontrolled loss of availability or to\n go further and affect confidentiality or integrity. NOTE: The GCC project argues that this is a missed hardening bug and not a vulnerability by itself.",
-                    "diffID": "sha256:a499da141b419b2e97ed40192951a05fc37fadec129a55e1de03773e23fff97b",
-                    "installedVersion": "10.2.1-6",
-                    "packageName": "libstdc++6",
-                    "purl": "pkg:deb/debian/libstdc%2B%2B6@10.2.1-6?arch=arm64&distro=debian-11.9",
-                    "references": [
-                      "https://access.redhat.com/security/cve/CVE-2023-4039",
-                      "https://developer.arm.com/Arm%20Security%20Center/GCC%20Stack%20Protector%20Vulnerability%20AArch64",
-                      "https://gcc.gnu.org/git/?p=gcc.git;a=blob_plain;f=SECURITY.txt",
-                      "https://gcc.gnu.org/pipermail/gcc-patches/2023-October/634066.html",
-                      "https://github.com/metaredteam/external-disclosures/security/advisories/GHSA-x7ch-h5rf-w2mf",
-                      "https://inbox.sourceware.org/gcc-patches/46cfa37b-56eb-344d-0745-e0d35393392d@gotplt.org",
-                      "https://linux.oracle.com/cve/CVE-2023-4039.html",
-                      "https://linux.oracle.com/errata/ELSA-2023-28766.html",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2023-4039",
-                      "https://rtx.meta.security/mitigation/2023/09/12/CVE-2023-4039.html",
-                      "https://ubuntu.com/security/notices/USN-7700-1",
-                      "https://www.cve.org/CVERecord?id=CVE-2023-4039"
-                    ],
-                    "severity": "LOW",
-                    "suppressed": false,
-                    "title": "gcc: -fstack-protector fails to guard dynamic stack allocations on ARM64"
-                  },
-                  {
-                    "cve": "CVE-2023-50387",
-                    "cvss": {
-                      "nvd": {
-                        "v3score": "7.5",
-                        "v3vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"
-                      },
-                      "redhat": {
-                        "v3score": "7.5",
-                        "v3vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-770"
-                    ],
-                    "description": "Certain DNSSEC aspects of the DNS protocol (in RFC 4033, 4034, 4035, 6840, and related RFCs) allow remote attackers to cause a denial of service (CPU consumption) via one or more DNSSEC responses, aka the \"KeyTrap\" issue. One of the concerns is that, when there is a zone with many DNSKEY and RRSIG records, the protocol specification implies that an algorithm must evaluate all combinations of DNSKEY and RRSIG records.",
-                    "diffID": "sha256:a499da141b419b2e97ed40192951a05fc37fadec129a55e1de03773e23fff97b",
-                    "fixedVersions": [
-                      "247.3-7+deb11u6"
-                    ],
-                    "installedVersion": "247.3-7+deb11u4",
-                    "packageName": "libsystemd0",
-                    "purl": "pkg:deb/debian/libsystemd0@247.3-7%2Bdeb11u4?arch=arm64&distro=debian-11.9",
-                    "references": [
-                      "http://www.openwall.com/lists/oss-security/2024/02/16/2",
-                      "http://www.openwall.com/lists/oss-security/2024/02/16/3",
-                      "https://access.redhat.com/errata/RHSA-2024:3271",
-                      "https://access.redhat.com/security/cve/CVE-2023-50387",
-                      "https://blog.powerdns.com/2024/02/13/powerdns-recursor-4-8-6-4-9-3-5-0-2-released",
-                      "https://bugzilla.redhat.com/2263896",
-                      "https://bugzilla.redhat.com/2263914",
-                      "https://bugzilla.redhat.com/2263917",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2263896",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2263897",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2263909",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2263911",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2263914",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2263917",
-                      "https://bugzilla.suse.com/show_bug.cgi?id=1219823",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-4408",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-50387",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-50868",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-5517",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-5679",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-6516",
-                      "https://docs.powerdns.com/recursor/security-advisories/powerdns-advisory-2024-01.html",
-                      "https://errata.almalinux.org/8/ALSA-2024-3271.html",
-                      "https://errata.rockylinux.org/RLSA-2024:2551",
-                      "https://gitlab.nic.cz/knot/knot-resolver/-/releases/v5.7.1",
-                      "https://kb.isc.org/docs/cve-2023-50387",
-                      "https://linux.oracle.com/cve/CVE-2023-50387.html",
-                      "https://linux.oracle.com/errata/ELSA-2024-3741.html",
-                      "https://lists.debian.org/debian-lts-announce/2024/02/msg00006.html",
-                      "https://lists.debian.org/debian-lts-announce/2024/05/msg00011.html",
-                      "https://lists.debian.org/debian-lts-announce/2024/09/msg00001.html",
-                      "https://lists.debian.org/debian-lts-announce/2024/11/msg00035.html",
-                      "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6FV5O347JTX7P5OZA6NGO4MKTXRXMKOZ/",
-                      "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BUIP7T7Z4T3UHLXFWG6XIVDP4GYPD3AI/",
-                      "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/HVRDSJVZKMCXKKPP6PNR62T7RWZ3YSDZ/",
-                      "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/IGSLGKUAQTW5JPPZCMF5YPEYALLRUZZ6/",
-                      "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PNNHZSZPG2E7NBMBNYPGHCFI4V4XRWNQ/",
-                      "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/RGS7JN6FZXUSTC2XKQHH27574XOULYYJ/",
-                      "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/SVYA42BLXUCIDLD35YIJPJSHDIADNYMP/",
-                      "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/TEXGOYGW7DBS3N2QSSQONZ4ENIRQEAPG/",
-                      "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQESRWMJCF4JEYJEAKLRM6CT55GLJAB7/",
-                      "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZDZFMEKQTZ4L7RY46FCENWFB5MDT263R/",
-                      "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/BUIP7T7Z4T3UHLXFWG6XIVDP4GYPD3AI/",
-                      "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/HVRDSJVZKMCXKKPP6PNR62T7RWZ3YSDZ/",
-                      "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/RGS7JN6FZXUSTC2XKQHH27574XOULYYJ/",
-                      "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ZDZFMEKQTZ4L7RY46FCENWFB5MDT263R/",
-                      "https://lists.thekelleys.org.uk/pipermail/dnsmasq-discuss/2024q1/017430.html",
-                      "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-50387",
-                      "https://news.ycombinator.com/item?id=39367411",
-                      "https://news.ycombinator.com/item?id=39372384",
-                      "https://nlnetlabs.nl/downloads/unbound/CVE-2023-50387_CVE-2023-50868.txt",
-                      "https://nlnetlabs.nl/news/2024/Feb/13/unbound-1.19.1-released/",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2023-50387",
-                      "https://security.netapp.com/advisory/ntap-20240307-0007/",
-                      "https://ubuntu.com/security/notices/USN-6633-1",
-                      "https://ubuntu.com/security/notices/USN-6642-1",
-                      "https://ubuntu.com/security/notices/USN-6657-1",
-                      "https://ubuntu.com/security/notices/USN-6657-2",
-                      "https://ubuntu.com/security/notices/USN-6665-1",
-                      "https://ubuntu.com/security/notices/USN-6723-1",
-                      "https://www.athene-center.de/aktuelles/key-trap",
-                      "https://www.athene-center.de/fileadmin/content/PDF/Technical_Report_KeyTrap.pdf",
-                      "https://www.cve.org/CVERecord?id=CVE-2023-50387",
-                      "https://www.isc.org/blogs/2024-bind-security-release/",
-                      "https://www.knot-resolver.cz/2024-02-13-knot-resolver-5.7.1.html",
-                      "https://www.securityweek.com/keytrap-dns-attack-could-disable-large-parts-of-internet-researchers/",
-                      "https://www.theregister.com/2024/02/13/dnssec_vulnerability_internet/"
-                    ],
-                    "severity": "HIGH",
-                    "suppressed": false,
-                    "title": "bind9: KeyTrap - Extreme CPU consumption in DNSSEC validator"
-                  },
-                  {
-                    "cve": "CVE-2023-50868",
-                    "cvss": {
-                      "nvd": {
-                        "v3score": "7.5",
-                        "v3vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"
-                      },
-                      "redhat": {
-                        "v3score": "7.5",
-                        "v3vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-400"
-                    ],
-                    "description": "The Closest Encloser Proof aspect of the DNS protocol (in RFC 5155 when RFC 9276 guidance is skipped) allows remote attackers to cause a denial of service (CPU consumption for SHA-1 computations) via DNSSEC responses in a random subdomain attack, aka the \"NSEC3\" issue. The RFC 5155 specification implies that an algorithm must perform thousands of iterations of a hash function in certain situations.",
-                    "diffID": "sha256:a499da141b419b2e97ed40192951a05fc37fadec129a55e1de03773e23fff97b",
-                    "fixedVersions": [
-                      "247.3-7+deb11u6"
-                    ],
-                    "installedVersion": "247.3-7+deb11u4",
-                    "packageName": "libsystemd0",
-                    "purl": "pkg:deb/debian/libsystemd0@247.3-7%2Bdeb11u4?arch=arm64&distro=debian-11.9",
-                    "references": [
-                      "http://www.openwall.com/lists/oss-security/2024/02/16/2",
-                      "http://www.openwall.com/lists/oss-security/2024/02/16/3",
-                      "https://access.redhat.com/errata/RHSA-2024:3271",
-                      "https://access.redhat.com/security/cve/CVE-2023-50868",
-                      "https://blog.powerdns.com/2024/02/13/powerdns-recursor-4-8-6-4-9-3-5-0-2-released",
-                      "https://bugzilla.redhat.com/2263896",
-                      "https://bugzilla.redhat.com/2263914",
-                      "https://bugzilla.redhat.com/2263917",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2263896",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2263897",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2263909",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2263911",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2263914",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2263917",
-                      "https://bugzilla.suse.com/show_bug.cgi?id=1219826",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-4408",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-50387",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-50868",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-5517",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-5679",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-6516",
-                      "https://datatracker.ietf.org/doc/html/rfc5155",
-                      "https://docs.powerdns.com/recursor/security-advisories/powerdns-advisory-2024-01.html",
-                      "https://errata.almalinux.org/8/ALSA-2024-3271.html",
-                      "https://errata.rockylinux.org/RLSA-2024:2551",
-                      "https://gitlab.nic.cz/knot/knot-resolver/-/releases/v5.7.1",
-                      "https://kb.isc.org/docs/cve-2023-50868",
-                      "https://linux.oracle.com/cve/CVE-2023-50868.html",
-                      "https://linux.oracle.com/errata/ELSA-2024-3741.html",
-                      "https://lists.debian.org/debian-lts-announce/2024/02/msg00006.html",
-                      "https://lists.debian.org/debian-lts-announce/2024/05/msg00011.html",
-                      "https://lists.debian.org/debian-lts-announce/2024/09/msg00001.html",
-                      "https://lists.debian.org/debian-lts-announce/2024/11/msg00035.html",
-                      "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6FV5O347JTX7P5OZA6NGO4MKTXRXMKOZ/",
-                      "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BUIP7T7Z4T3UHLXFWG6XIVDP4GYPD3AI/",
-                      "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/HVRDSJVZKMCXKKPP6PNR62T7RWZ3YSDZ/",
-                      "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/IGSLGKUAQTW5JPPZCMF5YPEYALLRUZZ6/",
-                      "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PNNHZSZPG2E7NBMBNYPGHCFI4V4XRWNQ/",
-                      "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/RGS7JN6FZXUSTC2XKQHH27574XOULYYJ/",
-                      "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/SVYA42BLXUCIDLD35YIJPJSHDIADNYMP/",
-                      "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/TEXGOYGW7DBS3N2QSSQONZ4ENIRQEAPG/",
-                      "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQESRWMJCF4JEYJEAKLRM6CT55GLJAB7/",
-                      "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZDZFMEKQTZ4L7RY46FCENWFB5MDT263R/",
-                      "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/BUIP7T7Z4T3UHLXFWG6XIVDP4GYPD3AI/",
-                      "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/HVRDSJVZKMCXKKPP6PNR62T7RWZ3YSDZ/",
-                      "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ZDZFMEKQTZ4L7RY46FCENWFB5MDT263R/",
-                      "https://lists.thekelleys.org.uk/pipermail/dnsmasq-discuss/2024q1/017430.html",
-                      "https://nlnetlabs.nl/downloads/unbound/CVE-2023-50387_CVE-2023-50868.txt",
-                      "https://nlnetlabs.nl/news/2024/Feb/13/unbound-1.19.1-released/",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2023-50868",
-                      "https://security.netapp.com/advisory/ntap-20240307-0008/",
-                      "https://ubuntu.com/security/notices/USN-6633-1",
-                      "https://ubuntu.com/security/notices/USN-6642-1",
-                      "https://ubuntu.com/security/notices/USN-6657-1",
-                      "https://ubuntu.com/security/notices/USN-6657-2",
-                      "https://ubuntu.com/security/notices/USN-6665-1",
-                      "https://ubuntu.com/security/notices/USN-6723-1",
-                      "https://www.cve.org/CVERecord?id=CVE-2023-50868",
-                      "https://www.isc.org/blogs/2024-bind-security-release/",
-                      "https://www.knot-resolver.cz/2024-02-13-knot-resolver-5.7.1.html"
-                    ],
-                    "severity": "HIGH",
-                    "suppressed": false,
-                    "title": "bind9: Preparing an NSEC3 closest encloser proof can exhaust CPU resources"
-                  },
-                  {
-                    "cve": "CVE-2023-7008",
-                    "cvss": {
-                      "nvd": {
-                        "v3score": "5.9",
-                        "v3vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N"
-                      },
-                      "redhat": {
-                        "v3score": "5.9",
-                        "v3vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-300"
-                    ],
-                    "description": "A vulnerability was found in systemd-resolved. This issue may allow systemd-resolved to accept records of DNSSEC-signed domains even when they have no signature, allowing man-in-the-middles (or the upstream DNS resolver) to manipulate records.",
-                    "diffID": "sha256:a499da141b419b2e97ed40192951a05fc37fadec129a55e1de03773e23fff97b",
-                    "fixedVersions": [
-                      "247.3-7+deb11u6"
-                    ],
-                    "installedVersion": "247.3-7+deb11u4",
-                    "packageName": "libsystemd0",
-                    "purl": "pkg:deb/debian/libsystemd0@247.3-7%2Bdeb11u4?arch=arm64&distro=debian-11.9",
-                    "references": [
-                      "https://access.redhat.com/errata/RHSA-2024:2463",
-                      "https://access.redhat.com/errata/RHSA-2024:3203",
-                      "https://access.redhat.com/security/cve/CVE-2023-7008",
-                      "https://bugzilla.redhat.com/2222672",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2222261",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2222672",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-7008",
-                      "https://errata.almalinux.org/8/ALSA-2024-3203.html",
-                      "https://errata.rockylinux.org/RLSA-2024:2463",
-                      "https://github.com/systemd/systemd/issues/25676",
-                      "https://linux.oracle.com/cve/CVE-2023-7008.html",
-                      "https://linux.oracle.com/errata/ELSA-2024-3203.html",
-                      "https://lists.debian.org/debian-lts-announce/2024/09/msg00001.html",
-                      "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/4GMDEG5PKONWNHOEYSUDRT6JEOISRMN2/",
-                      "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/QHNBXGKJWISJETTTDTZKTBFIBJUOSLKL/",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2023-7008",
-                      "https://security.netapp.com/advisory/ntap-20241122-0004/",
-                      "https://www.cve.org/CVERecord?id=CVE-2023-7008"
-                    ],
-                    "severity": "MEDIUM",
-                    "suppressed": false,
-                    "title": "systemd-resolved: Unsigned name response in signed zone is not refused when DNSSEC=yes"
-                  },
-                  {
-                    "cve": "CVE-2025-4598",
-                    "cvss": {
-                      "redhat": {
-                        "v3score": "4.7",
-                        "v3vector": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-364"
-                    ],
-                    "description": "A vulnerability was found in systemd-coredump. This flaw allows an attacker to force a SUID process to crash and replace it with a non-SUID binary to access the original's privileged process coredump, allowing the attacker to read sensitive data, such as /etc/shadow content, loaded by the original process.\n\nA SUID binary or process has a special type of permission, which allows the process to run with the file owner's permissions, regardless of the user executing the binary. This allows the process to access more restricted data than unprivileged users or processes would be able to. An attacker can leverage this flaw by forcing a SUID process to crash and force the Linux kernel to recycle the process PID before systemd-coredump can analyze the /proc/pid/auxv file. If the attacker wins the race condition, they gain access to the original's SUID process coredump file. They can read sensitive content loaded into memory by the original binary, affecting data confidentiality.",
-                    "diffID": "sha256:a499da141b419b2e97ed40192951a05fc37fadec129a55e1de03773e23fff97b",
-                    "fixedVersions": [
-                      "247.3-7+deb11u7"
-                    ],
-                    "installedVersion": "247.3-7+deb11u4",
-                    "packageName": "libsystemd0",
-                    "purl": "pkg:deb/debian/libsystemd0@247.3-7%2Bdeb11u4?arch=arm64&distro=debian-11.9",
-                    "references": [
-                      "http://seclists.org/fulldisclosure/2025/Jun/9",
-                      "http://www.openwall.com/lists/oss-security/2025/06/05/1",
-                      "http://www.openwall.com/lists/oss-security/2025/06/05/3",
-                      "http://www.openwall.com/lists/oss-security/2025/08/18/3",
-                      "https://access.redhat.com/errata/RHSA-2025:22660",
-                      "https://access.redhat.com/errata/RHSA-2025:22868",
-                      "https://access.redhat.com/errata/RHSA-2025:23227",
-                      "https://access.redhat.com/errata/RHSA-2025:23234",
-                      "https://access.redhat.com/errata/RHSA-2026:0414",
-                      "https://access.redhat.com/errata/RHSA-2026:1652",
-                      "https://access.redhat.com/security/cve/CVE-2025-4598",
-                      "https://blogs.oracle.com/linux/post/analysis-of-cve-2025-4598",
-                      "https://bugzilla.redhat.com/2369242",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2369242",
-                      "https://ciq.com/blog/the-real-danger-of-systemd-coredump-cve-2025-4598/",
-                      "https://errata.almalinux.org/9/ALSA-2025-22660.html",
-                      "https://git.kernel.org/linus/b5325b2a270fcaf7b2a9a0f23d422ca8a5a8bdea",
-                      "https://github.com/systemd/systemd/commit/0c49e0049b7665bb7769a13ef346fef92e1ad4d6 (main)",
-                      "https://github.com/systemd/systemd/commit/13902e025321242b1d95c6d8b4e482b37f58cdef (main)",
-                      "https://github.com/systemd/systemd/commit/49f1f2d4a7612bbed5211a73d11d6a94fbe3bb69 (main)",
-                      "https://github.com/systemd/systemd/commit/76e0ab49c47965877c19772a2b3bf55f6417ca39 (main)",
-                      "https://github.com/systemd/systemd/commit/868d95577ec9f862580ad365726515459be582fc (main)",
-                      "https://github.com/systemd/systemd/commit/8fc7b2a211eb13ef1a94250b28e1c79cab8bdcb9 (main)",
-                      "https://github.com/systemd/systemd/commit/9ce8e3e449def92c75ada41b7d10c5bc3946be77 (main)",
-                      "https://github.com/systemd/systemd/commit/e6a8687b939ab21854f12f59a3cce703e32768cf (main)",
-                      "https://linux.oracle.com/cve/CVE-2025-4598.html",
-                      "https://linux.oracle.com/errata/ELSA-2025-22660.html",
-                      "https://lists.debian.org/debian-lts-announce/2025/07/msg00022.html",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2025-4598",
-                      "https://ubuntu.com/security/notices/USN-7559-1",
-                      "https://www.cve.org/CVERecord?id=CVE-2025-4598",
-                      "https://www.openwall.com/lists/oss-security/2025/05/29/3",
-                      "https://www.openwall.com/lists/oss-security/2025/08/18/3",
-                      "https://www.qualys.com/2025/05/29/apport-coredump/apport-coredump.txt"
-                    ],
-                    "severity": "MEDIUM",
-                    "suppressed": false,
-                    "title": "systemd-coredump: race condition that allows a local attacker to crash a SUID program and gain read access to the resulting core dump"
-                  },
-                  {
-                    "cve": "CVE-2013-4392",
-                    "cvss": {
-                      "nvd": {
-                        "v3score": "0",
-                        "v3vector": ""
-                      },
-                      "redhat": {
-                        "v3score": "0",
-                        "v3vector": ""
-                      }
-                    },
-                    "cwes": [
-                      "CWE-59"
-                    ],
-                    "description": "systemd, when updating file permissions, allows local users to change the permissions and SELinux security contexts for arbitrary files via a symlink attack on unspecified files.",
-                    "diffID": "sha256:a499da141b419b2e97ed40192951a05fc37fadec129a55e1de03773e23fff97b",
-                    "installedVersion": "247.3-7+deb11u4",
-                    "packageName": "libsystemd0",
-                    "purl": "pkg:deb/debian/libsystemd0@247.3-7%2Bdeb11u4?arch=arm64&distro=debian-11.9",
-                    "references": [
-                      "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=725357",
-                      "http://www.openwall.com/lists/oss-security/2013/10/01/9",
-                      "https://access.redhat.com/security/cve/CVE-2013-4392",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=859060",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2013-4392",
-                      "https://www.cve.org/CVERecord?id=CVE-2013-4392"
-                    ],
-                    "severity": "LOW",
-                    "suppressed": false,
-                    "title": "systemd: TOCTOU race condition when updating file permissions and SELinux security contexts"
-                  },
-                  {
-                    "cve": "CVE-2020-13529",
-                    "cvss": {
-                      "nvd": {
-                        "v3score": "6.1",
-                        "v3vector": "CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:C/C:N/I:N/A:H"
-                      },
-                      "redhat": {
-                        "v3score": "6.1",
-                        "v3vector": "CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:C/C:N/I:N/A:H"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-290"
-                    ],
-                    "description": "An exploitable denial-of-service vulnerability exists in Systemd 245. A specially crafted DHCP FORCERENEW packet can cause a server running the DHCP client to be vulnerable to a DHCP ACK spoofing attack. An attacker can forge a pair of FORCERENEW and DCHP ACK packets to reconfigure the server.",
-                    "diffID": "sha256:a499da141b419b2e97ed40192951a05fc37fadec129a55e1de03773e23fff97b",
-                    "installedVersion": "247.3-7+deb11u4",
-                    "packageName": "libsystemd0",
-                    "purl": "pkg:deb/debian/libsystemd0@247.3-7%2Bdeb11u4?arch=arm64&distro=debian-11.9",
-                    "references": [
-                      "http://www.openwall.com/lists/oss-security/2021/08/04/2",
-                      "http://www.openwall.com/lists/oss-security/2021/08/17/3",
-                      "http://www.openwall.com/lists/oss-security/2021/09/07/3",
-                      "https://access.redhat.com/security/cve/CVE-2020-13529",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=1791212",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=1820770",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=1825666",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=1832112",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=1832273",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=1847125",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=1847894",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=1852317",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=1890234",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=1899372",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=1907960",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=1912236",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=1912423",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=1915276",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=1915278",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=1928078",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=1933719",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=1934122",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=1934291",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=1934465",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=1935842",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=1936610",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=1940435",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=1940504",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=1940934",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=1942331",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=1945282",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=1955101",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=1959397",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=1959461",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=1959934",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=1959961",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=1970335",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=1971527",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=1973199",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=1977984",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=1979192",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=1979387",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=1982403",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=1988751",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2004212",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-13529",
-                      "https://errata.rockylinux.org/RLSA-2021:4361",
-                      "https://linux.oracle.com/cve/CVE-2020-13529.html",
-                      "https://linux.oracle.com/errata/ELSA-2021-4361.html",
-                      "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/42TMJVNYRY65B4QCJICBYOEIVZV3KUYI/",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2020-13529",
-                      "https://security.gentoo.org/glsa/202107-48",
-                      "https://security.netapp.com/advisory/ntap-20210625-0005/",
-                      "https://talosintelligence.com/vulnerability_reports/TALOS-2020-1142",
-                      "https://ubuntu.com/security/notices/USN-5013-1",
-                      "https://ubuntu.com/security/notices/USN-5013-2",
-                      "https://www.cve.org/CVERecord?id=CVE-2020-13529"
-                    ],
-                    "severity": "LOW",
-                    "suppressed": false,
-                    "title": "systemd: DHCP FORCERENEW authentication not implemented can cause a system running the DHCP client to have its network reconfigured"
-                  },
-                  {
-                    "cve": "CVE-2023-31437",
-                    "cvss": {
-                      "nvd": {
-                        "v3score": "5.3",
-                        "v3vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-354"
-                    ],
-                    "description": "An issue was discovered in systemd 253. An attacker can modify a sealed log file such that, in some views, not all existing and sealed log messages are displayed. NOTE: the vendor reportedly sent \"a reply denying that any of the finding was a security vulnerability.\"",
-                    "diffID": "sha256:a499da141b419b2e97ed40192951a05fc37fadec129a55e1de03773e23fff97b",
-                    "installedVersion": "247.3-7+deb11u4",
-                    "packageName": "libsystemd0",
-                    "purl": "pkg:deb/debian/libsystemd0@247.3-7%2Bdeb11u4?arch=arm64&distro=debian-11.9",
-                    "references": [
-                      "https://github.com/kastel-security/Journald",
-                      "https://github.com/kastel-security/Journald/blob/main/journald-publication.pdf",
-                      "https://github.com/systemd/systemd/releases"
-                    ],
-                    "severity": "LOW",
-                    "suppressed": false,
-                    "title": "An issue was discovered in systemd 253. An attacker can modify a seale ..."
-                  },
-                  {
-                    "cve": "CVE-2023-31438",
-                    "cvss": {
-                      "nvd": {
-                        "v3score": "5.3",
-                        "v3vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-354"
-                    ],
-                    "description": "An issue was discovered in systemd 253. An attacker can truncate a sealed log file and then resume log sealing such that checking the integrity shows no error, despite modifications. NOTE: the vendor reportedly sent \"a reply denying that any of the finding was a security vulnerability.\"",
-                    "diffID": "sha256:a499da141b419b2e97ed40192951a05fc37fadec129a55e1de03773e23fff97b",
-                    "installedVersion": "247.3-7+deb11u4",
-                    "packageName": "libsystemd0",
-                    "purl": "pkg:deb/debian/libsystemd0@247.3-7%2Bdeb11u4?arch=arm64&distro=debian-11.9",
-                    "references": [
-                      "https://github.com/kastel-security/Journald",
-                      "https://github.com/kastel-security/Journald/blob/main/journald-publication.pdf",
-                      "https://github.com/systemd/systemd/pull/28886",
-                      "https://github.com/systemd/systemd/releases"
-                    ],
-                    "severity": "LOW",
-                    "suppressed": false,
-                    "title": "An issue was discovered in systemd 253. An attacker can truncate a sea ..."
-                  },
-                  {
-                    "cve": "CVE-2023-31439",
-                    "cvss": {
-                      "nvd": {
-                        "v3score": "5.3",
-                        "v3vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-354"
-                    ],
-                    "description": "An issue was discovered in systemd 253. An attacker can modify the contents of past events in a sealed log file and then adjust the file such that checking the integrity shows no error, despite modifications. NOTE: the vendor reportedly sent \"a reply denying that any of the finding was a security vulnerability.\"",
-                    "diffID": "sha256:a499da141b419b2e97ed40192951a05fc37fadec129a55e1de03773e23fff97b",
-                    "installedVersion": "247.3-7+deb11u4",
-                    "packageName": "libsystemd0",
-                    "purl": "pkg:deb/debian/libsystemd0@247.3-7%2Bdeb11u4?arch=arm64&distro=debian-11.9",
-                    "references": [
-                      "https://github.com/kastel-security/Journald",
-                      "https://github.com/kastel-security/Journald/blob/main/journald-publication.pdf",
-                      "https://github.com/systemd/systemd/pull/28885",
-                      "https://github.com/systemd/systemd/releases"
-                    ],
-                    "severity": "LOW",
-                    "suppressed": false,
-                    "title": "An issue was discovered in systemd 253. An attacker can modify the con ..."
-                  },
-                  {
-                    "cve": "CVE-2024-12133",
-                    "cvss": {
-                      "redhat": {
-                        "v3score": "5.3",
-                        "v3vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-407"
-                    ],
-                    "description": "A flaw in libtasn1 causes inefficient handling of specific certificate data. When processing a large number of elements in a certificate, libtasn1 takes much longer than expected, which can slow down or even crash the system. This flaw allows an attacker to send a specially crafted certificate, causing a denial of service attack.",
-                    "diffID": "sha256:a499da141b419b2e97ed40192951a05fc37fadec129a55e1de03773e23fff97b",
-                    "fixedVersions": [
-                      "4.16.0-2+deb11u2"
-                    ],
-                    "installedVersion": "4.16.0-2+deb11u1",
-                    "packageName": "libtasn1-6",
-                    "purl": "pkg:deb/debian/libtasn1-6@4.16.0-2%2Bdeb11u1?arch=arm64&distro=debian-11.9",
-                    "references": [
-                      "http://www.openwall.com/lists/oss-security/2025/02/06/6",
-                      "https://access.redhat.com/errata/RHSA-2025:17347",
-                      "https://access.redhat.com/errata/RHSA-2025:4049",
-                      "https://access.redhat.com/errata/RHSA-2025:7077",
-                      "https://access.redhat.com/errata/RHSA-2025:8021",
-                      "https://access.redhat.com/errata/RHSA-2025:8385",
-                      "https://access.redhat.com/security/cve/CVE-2024-12133",
-                      "https://bugzilla.redhat.com/2344611",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2344611",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-12133",
-                      "https://errata.almalinux.org/9/ALSA-2025-7077.html",
-                      "https://errata.rockylinux.org/RLSA-2025:7077",
-                      "https://gitlab.com/gnutls/libtasn1/-/blob/master/doc/security/CVE-2024-12133.md?ref_type=heads",
-                      "https://gitlab.com/gnutls/libtasn1/-/issues/52",
-                      "https://linux.oracle.com/cve/CVE-2024-12133.html",
-                      "https://linux.oracle.com/errata/ELSA-2025-7077.html",
-                      "https://lists.debian.org/debian-lts-announce/2025/02/msg00025.html",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2024-12133",
-                      "https://security.netapp.com/advisory/ntap-20250523-0003/",
-                      "https://ubuntu.com/security/notices/USN-7275-1",
-                      "https://ubuntu.com/security/notices/USN-7275-2",
-                      "https://www.cve.org/CVERecord?id=CVE-2024-12133"
-                    ],
-                    "severity": "MEDIUM",
-                    "suppressed": false,
-                    "title": "libtasn1: Inefficient DER Decoding in libtasn1 Leading to Potential Remote DoS"
-                  },
-                  {
-                    "cve": "CVE-2025-13151",
-                    "cvss": {
-                      "redhat": {
-                        "v3score": "5.9",
-                        "v3vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-787"
-                    ],
-                    "description": "Stack-based buffer overflow in libtasn1 version: v4.20.0. The function fails to validate the size of input data resulting in a buffer overflow in asn1_expend_octet_string.",
-                    "diffID": "sha256:a499da141b419b2e97ed40192951a05fc37fadec129a55e1de03773e23fff97b",
-                    "installedVersion": "4.16.0-2+deb11u1",
-                    "packageName": "libtasn1-6",
-                    "purl": "pkg:deb/debian/libtasn1-6@4.16.0-2%2Bdeb11u1?arch=arm64&distro=debian-11.9",
-                    "references": [
-                      "http://www.openwall.com/lists/oss-security/2026/01/08/5",
-                      "https://access.redhat.com/security/cve/CVE-2025-13151",
-                      "https://gitlab.com/gnutls/libtasn1",
-                      "https://gitlab.com/gnutls/libtasn1/-/merge_requests/121",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2025-13151",
-                      "https://ubuntu.com/security/notices/USN-7954-1",
-                      "https://www.cve.org/CVERecord?id=CVE-2025-13151",
-                      "https://www.kb.cert.org/vuls/id/271649"
-                    ],
-                    "severity": "MEDIUM",
-                    "suppressed": false,
-                    "title": "libtasn1: libtasn1: Denial of Service via stack-based buffer overflow in asn1_expend_octet_string"
-                  },
-                  {
-                    "cve": "CVE-2023-52355",
-                    "cvss": {
-                      "nvd": {
-                        "v3score": "7.5",
-                        "v3vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"
-                      },
-                      "redhat": {
-                        "v3score": "7.5",
-                        "v3vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-787"
-                    ],
-                    "description": "An out-of-memory flaw was found in libtiff that could be triggered by passing a crafted tiff file to the TIFFRasterScanlineSize64() API. This flaw allows a remote attacker to cause a denial of service via a crafted input with a size smaller than 379 KB.",
-                    "diffID": "sha256:2f458857553769636f3c149c0c8d41acc63c9e24282823b0ea26869a635e9f48",
-                    "installedVersion": "4.2.0-1+deb11u5",
-                    "packageName": "libtiff5",
-                    "purl": "pkg:deb/debian/libtiff5@4.2.0-1%2Bdeb11u5?arch=arm64&distro=debian-11.9",
-                    "references": [
-                      "https://access.redhat.com/errata/RHSA-2025:20801",
-                      "https://access.redhat.com/errata/RHSA-2025:21994",
-                      "https://access.redhat.com/errata/RHSA-2025:23078",
-                      "https://access.redhat.com/errata/RHSA-2025:23079",
-                      "https://access.redhat.com/errata/RHSA-2025:23080",
-                      "https://access.redhat.com/security/cve/CVE-2023-52355",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2251326",
-                      "https://gitlab.com/libtiff/libtiff/-/issues/621",
-                      "https://linux.oracle.com/cve/CVE-2023-52355.html",
-                      "https://linux.oracle.com/errata/ELSA-2025-20801.html",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2023-52355",
-                      "https://www.cve.org/CVERecord?id=CVE-2023-52355"
-                    ],
-                    "severity": "HIGH",
-                    "suppressed": false,
-                    "title": "libtiff: TIFFRasterScanlineSize64 produce too-big size and could cause OOM"
-                  },
-                  {
-                    "cve": "CVE-2023-52356",
-                    "cvss": {
-                      "nvd": {
-                        "v3score": "7.5",
-                        "v3vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"
-                      },
-                      "redhat": {
-                        "v3score": "7.5",
-                        "v3vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-122",
-                      "CWE-787"
-                    ],
-                    "description": "A segment fault (SEGV) flaw was found in libtiff that could be triggered by passing a crafted tiff file to the TIFFReadRGBATileExt() API. This flaw allows a remote attacker to cause a heap-buffer overflow, leading to a denial of service.",
-                    "diffID": "sha256:2f458857553769636f3c149c0c8d41acc63c9e24282823b0ea26869a635e9f48",
-                    "fixedVersions": [
-                      "4.2.0-1+deb11u6"
-                    ],
-                    "installedVersion": "4.2.0-1+deb11u5",
-                    "packageName": "libtiff5",
-                    "purl": "pkg:deb/debian/libtiff5@4.2.0-1%2Bdeb11u5?arch=arm64&distro=debian-11.9",
-                    "references": [
-                      "http://seclists.org/fulldisclosure/2024/Jul/16",
-                      "http://seclists.org/fulldisclosure/2024/Jul/17",
-                      "http://seclists.org/fulldisclosure/2024/Jul/18",
-                      "http://seclists.org/fulldisclosure/2024/Jul/19",
-                      "http://seclists.org/fulldisclosure/2024/Jul/20",
-                      "http://seclists.org/fulldisclosure/2024/Jul/21",
-                      "http://seclists.org/fulldisclosure/2024/Jul/22",
-                      "http://seclists.org/fulldisclosure/2024/Jul/23",
-                      "https://access.redhat.com/errata/RHSA-2024:5079",
-                      "https://access.redhat.com/errata/RHSA-2025:20801",
-                      "https://access.redhat.com/errata/RHSA-2025:21994",
-                      "https://access.redhat.com/errata/RHSA-2025:23078",
-                      "https://access.redhat.com/errata/RHSA-2025:23079",
-                      "https://access.redhat.com/errata/RHSA-2025:23080",
-                      "https://access.redhat.com/security/cve/CVE-2023-52356",
-                      "https://bugzilla.redhat.com/1614051",
-                      "https://bugzilla.redhat.com/2218744",
-                      "https://bugzilla.redhat.com/2240995",
-                      "https://bugzilla.redhat.com/2251344",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=1614051",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2218744",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2240995",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2251344",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-15209",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-25433",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52356",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-6228",
-                      "https://errata.almalinux.org/8/ALSA-2024-5079.html",
-                      "https://errata.rockylinux.org/RLSA-2024:5079",
-                      "https://gitlab.com/libtiff/libtiff/-/issues/622",
-                      "https://gitlab.com/libtiff/libtiff/-/merge_requests/546",
-                      "https://linux.oracle.com/cve/CVE-2023-52356.html",
-                      "https://linux.oracle.com/errata/ELSA-2025-20801.html",
-                      "https://lists.debian.org/debian-lts-announce/2024/03/msg00011.html",
-                      "https://lists.debian.org/debian-lts-announce/2025/01/msg00019.html",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2023-52356",
-                      "https://support.apple.com/kb/HT214116",
-                      "https://support.apple.com/kb/HT214117",
-                      "https://support.apple.com/kb/HT214118",
-                      "https://support.apple.com/kb/HT214119",
-                      "https://support.apple.com/kb/HT214120",
-                      "https://support.apple.com/kb/HT214122",
-                      "https://support.apple.com/kb/HT214123",
-                      "https://support.apple.com/kb/HT214124",
-                      "https://ubuntu.com/security/notices/USN-6644-1",
-                      "https://ubuntu.com/security/notices/USN-6644-2",
-                      "https://www.cve.org/CVERecord?id=CVE-2023-52356"
-                    ],
-                    "severity": "HIGH",
-                    "suppressed": false,
-                    "title": "libtiff: Segment fault in libtiff  in TIFFReadRGBATileExt() leading to denial of service"
-                  },
-                  {
-                    "cve": "CVE-2024-7006",
-                    "cvss": {
-                      "nvd": {
-                        "v3score": "7.5",
-                        "v3vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"
-                      },
-                      "redhat": {
-                        "v3score": "7.5",
-                        "v3vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-476"
-                    ],
-                    "description": "A null pointer dereference flaw was found in Libtiff via `tif_dirinfo.c`. This issue may allow an attacker to trigger memory allocation failures through certain means, such as restricting the heap space size or injecting faults, causing a segmentation fault. This can cause an application crash, eventually leading to a denial of service.",
-                    "diffID": "sha256:2f458857553769636f3c149c0c8d41acc63c9e24282823b0ea26869a635e9f48",
-                    "fixedVersions": [
-                      "4.2.0-1+deb11u6"
-                    ],
-                    "installedVersion": "4.2.0-1+deb11u5",
-                    "packageName": "libtiff5",
-                    "purl": "pkg:deb/debian/libtiff5@4.2.0-1%2Bdeb11u5?arch=arm64&distro=debian-11.9",
-                    "references": [
-                      "https://access.redhat.com/errata/RHSA-2024:6360",
-                      "https://access.redhat.com/errata/RHSA-2024:8833",
-                      "https://access.redhat.com/errata/RHSA-2024:8914",
-                      "https://access.redhat.com/security/cve/CVE-2024-7006",
-                      "https://bugzilla.redhat.com/2302996",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2302996",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-7006",
-                      "https://errata.almalinux.org/8/ALSA-2024-8833.html",
-                      "https://errata.rockylinux.org/RLSA-2024:8914",
-                      "https://gitlab.com/libtiff/libtiff/-/merge_requests/559",
-                      "https://linux.oracle.com/cve/CVE-2024-7006.html",
-                      "https://linux.oracle.com/errata/ELSA-2024-8914.html",
-                      "https://lists.debian.org/debian-lts-announce/2025/01/msg00019.html",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2024-7006",
-                      "https://security.netapp.com/advisory/ntap-20240920-0001/",
-                      "https://ubuntu.com/security/notices/USN-6997-1",
-                      "https://ubuntu.com/security/notices/USN-6997-2",
-                      "https://www.cve.org/CVERecord?id=CVE-2024-7006"
-                    ],
-                    "severity": "HIGH",
-                    "suppressed": false,
-                    "title": "libtiff: NULL pointer dereference in tif_dirinfo.c"
-                  },
-                  {
-                    "cve": "CVE-2025-9900",
-                    "cvss": {
-                      "redhat": {
-                        "v3score": "8.8",
-                        "v3vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-123"
-                    ],
-                    "description": "A flaw was found in Libtiff. This vulnerability is a \"write-what-where\" condition, triggered when the library processes a specially crafted TIFF image file.\n\nBy providing an abnormally large image height value in the file's metadata, an attacker can trick the library into writing attacker-controlled color data to an arbitrary memory location. This memory corruption can be exploited to cause a denial of service (application crash) or to achieve arbitrary code execution with the permissions of the user.",
-                    "diffID": "sha256:2f458857553769636f3c149c0c8d41acc63c9e24282823b0ea26869a635e9f48",
-                    "fixedVersions": [
-                      "4.2.0-1+deb11u7"
-                    ],
-                    "installedVersion": "4.2.0-1+deb11u5",
-                    "packageName": "libtiff5",
-                    "purl": "pkg:deb/debian/libtiff5@4.2.0-1%2Bdeb11u5?arch=arm64&distro=debian-11.9",
-                    "references": [
-                      "http://www.openwall.com/lists/oss-security/2025/09/26/3",
-                      "https://access.redhat.com/errata/RHSA-2025:17651",
-                      "https://access.redhat.com/errata/RHSA-2025:17675",
-                      "https://access.redhat.com/errata/RHSA-2025:17710",
-                      "https://access.redhat.com/errata/RHSA-2025:17738",
-                      "https://access.redhat.com/errata/RHSA-2025:17739",
-                      "https://access.redhat.com/errata/RHSA-2025:17740",
-                      "https://access.redhat.com/errata/RHSA-2025:19113",
-                      "https://access.redhat.com/errata/RHSA-2025:19156",
-                      "https://access.redhat.com/errata/RHSA-2025:19276",
-                      "https://access.redhat.com/errata/RHSA-2025:19906",
-                      "https://access.redhat.com/errata/RHSA-2025:19947",
-                      "https://access.redhat.com/errata/RHSA-2025:20956",
-                      "https://access.redhat.com/errata/RHSA-2025:20998",
-                      "https://access.redhat.com/errata/RHSA-2025:21060",
-                      "https://access.redhat.com/errata/RHSA-2025:21061",
-                      "https://access.redhat.com/errata/RHSA-2025:21062",
-                      "https://access.redhat.com/errata/RHSA-2025:21407",
-                      "https://access.redhat.com/errata/RHSA-2025:21506",
-                      "https://access.redhat.com/errata/RHSA-2025:21507",
-                      "https://access.redhat.com/errata/RHSA-2025:21508",
-                      "https://access.redhat.com/errata/RHSA-2025:21994",
-                      "https://access.redhat.com/errata/RHSA-2025:23078",
-                      "https://access.redhat.com/errata/RHSA-2025:23079",
-                      "https://access.redhat.com/errata/RHSA-2025:23080",
-                      "https://access.redhat.com/errata/RHSA-2026:0001",
-                      "https://access.redhat.com/errata/RHSA-2026:0076",
-                      "https://access.redhat.com/errata/RHSA-2026:0077",
-                      "https://access.redhat.com/errata/RHSA-2026:0078",
-                      "https://access.redhat.com/security/cve/CVE-2025-9900",
-                      "https://bugzilla.redhat.com/2383598",
-                      "https://bugzilla.redhat.com/2392784",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2383598",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2392784",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-8176",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-9900",
-                      "https://errata.almalinux.org/8/ALSA-2025-19906.html",
-                      "https://errata.rockylinux.org/RLSA-2025:19113",
-                      "https://github.com/SexyShoelessGodofWar/LibTiff-4.7.0-Write-What-Where?tab=readme-ov-file",
-                      "https://gitlab.com/libtiff/libtiff/-/commit/3e0dcf0ec651638b2bd849b2e6f3124b36890d99 (v4.7.1rc1)",
-                      "https://gitlab.com/libtiff/libtiff/-/issues/704",
-                      "https://gitlab.com/libtiff/libtiff/-/merge_requests/732",
-                      "https://libtiff.gitlab.io/libtiff/releases/v4.7.1.html",
-                      "https://linux.oracle.com/cve/CVE-2025-9900.html",
-                      "https://linux.oracle.com/errata/ELSA-2025-21407.html",
-                      "https://lists.debian.org/debian-lts-announce/2025/09/msg00031.html",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2025-9900",
-                      "https://ubuntu.com/security/notices/USN-7783-1",
-                      "https://www.cve.org/CVERecord?id=CVE-2025-9900"
-                    ],
-                    "severity": "HIGH",
-                    "suppressed": false,
-                    "title": "libtiff: Libtiff Write-What-Where"
-                  },
-                  {
-                    "cve": "CVE-2022-40090",
-                    "cvss": {
-                      "nvd": {
-                        "v3score": "6.5",
-                        "v3vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H"
-                      },
-                      "redhat": {
-                        "v3score": "6.5",
-                        "v3vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-835"
-                    ],
-                    "description": "An issue was discovered in function TIFFReadDirectory libtiff before 4.4.0 allows attackers to cause a denial of service via crafted TIFF file.",
-                    "diffID": "sha256:2f458857553769636f3c149c0c8d41acc63c9e24282823b0ea26869a635e9f48",
-                    "installedVersion": "4.2.0-1+deb11u5",
-                    "packageName": "libtiff5",
-                    "purl": "pkg:deb/debian/libtiff5@4.2.0-1%2Bdeb11u5?arch=arm64&distro=debian-11.9",
-                    "references": [
-                      "https://access.redhat.com/errata/RHSA-2024:2289",
-                      "https://access.redhat.com/security/cve/CVE-2022-40090",
-                      "https://bugzilla.redhat.com/2215865",
-                      "https://bugzilla.redhat.com/2234970",
-                      "https://bugzilla.redhat.com/2235264",
-                      "https://bugzilla.redhat.com/2235265",
-                      "https://bugzilla.redhat.com/2240995",
-                      "https://errata.almalinux.org/9/ALSA-2024-2289.html",
-                      "https://gitlab.com/libtiff/libtiff/-/commit/d093eb5d961e21ba51420bc22382c514683a4d91 (v4.5.0rc1)",
-                      "https://gitlab.com/libtiff/libtiff/-/issues/455",
-                      "https://gitlab.com/libtiff/libtiff/-/merge_requests/386",
-                      "https://linux.oracle.com/cve/CVE-2022-40090.html",
-                      "https://linux.oracle.com/errata/ELSA-2024-2289.html",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2022-40090",
-                      "https://ubuntu.com/security/notices/USN-6512-1",
-                      "https://www.cve.org/CVERecord?id=CVE-2022-40090"
-                    ],
-                    "severity": "MEDIUM",
-                    "suppressed": false,
-                    "title": "libtiff: infinite loop via a crafted TIFF file"
-                  },
-                  {
-                    "cve": "CVE-2023-25433",
-                    "cvss": {
-                      "nvd": {
-                        "v3score": "5.5",
-                        "v3vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H"
-                      },
-                      "redhat": {
-                        "v3score": "5.5",
-                        "v3vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-120"
-                    ],
-                    "description": "libtiff 4.5.0 is vulnerable to Buffer Overflow via /libtiff/tools/tiffcrop.c:8499. Incorrect updating of buffer size after rotateImage() in tiffcrop cause heap-buffer-overflow and SEGV.",
-                    "diffID": "sha256:2f458857553769636f3c149c0c8d41acc63c9e24282823b0ea26869a635e9f48",
-                    "fixedVersions": [
-                      "4.2.0-1+deb11u6"
-                    ],
-                    "installedVersion": "4.2.0-1+deb11u5",
-                    "packageName": "libtiff5",
-                    "purl": "pkg:deb/debian/libtiff5@4.2.0-1%2Bdeb11u5?arch=arm64&distro=debian-11.9",
-                    "references": [
-                      "https://access.redhat.com/errata/RHSA-2024:5079",
-                      "https://access.redhat.com/security/cve/CVE-2023-25433",
-                      "https://bugzilla.redhat.com/1614051",
-                      "https://bugzilla.redhat.com/2218744",
-                      "https://bugzilla.redhat.com/2240995",
-                      "https://bugzilla.redhat.com/2251344",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=1614051",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2218744",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2240995",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2251344",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-15209",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-25433",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52356",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-6228",
-                      "https://errata.almalinux.org/8/ALSA-2024-5079.html",
-                      "https://errata.rockylinux.org/RLSA-2024:5079",
-                      "https://gitlab.com/libtiff/libtiff/-/issues/520",
-                      "https://gitlab.com/libtiff/libtiff/-/merge_requests/467",
-                      "https://linux.oracle.com/cve/CVE-2023-25433.html",
-                      "https://linux.oracle.com/errata/ELSA-2024-5079.html",
-                      "https://lists.debian.org/debian-lts-announce/2023/07/msg00034.html",
-                      "https://lists.debian.org/debian-lts-announce/2025/01/msg00019.html",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2023-25433",
-                      "https://ubuntu.com/security/notices/USN-6229-1",
-                      "https://ubuntu.com/security/notices/USN-6290-1",
-                      "https://www.cve.org/CVERecord?id=CVE-2023-25433"
-                    ],
-                    "severity": "MEDIUM",
-                    "suppressed": false,
-                    "title": "libtiff: Buffer Overflow via /libtiff/tools/tiffcrop.c"
-                  },
-                  {
-                    "cve": "CVE-2023-26965",
-                    "cvss": {
-                      "nvd": {
-                        "v3score": "5.5",
-                        "v3vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H"
-                      },
-                      "redhat": {
-                        "v3score": "5.5",
-                        "v3vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-787"
-                    ],
-                    "description": "loadImage() in tools/tiffcrop.c in LibTIFF through 4.5.0 has a heap-based use after free via a crafted TIFF image.",
-                    "diffID": "sha256:2f458857553769636f3c149c0c8d41acc63c9e24282823b0ea26869a635e9f48",
-                    "fixedVersions": [
-                      "4.2.0-1+deb11u6"
-                    ],
-                    "installedVersion": "4.2.0-1+deb11u5",
-                    "packageName": "libtiff5",
-                    "purl": "pkg:deb/debian/libtiff5@4.2.0-1%2Bdeb11u5?arch=arm64&distro=debian-11.9",
-                    "references": [
-                      "https://access.redhat.com/errata/RHSA-2023:6575",
-                      "https://access.redhat.com/security/cve/CVE-2023-26965",
-                      "https://bugzilla.redhat.com/2207635",
-                      "https://bugzilla.redhat.com/2215206",
-                      "https://bugzilla.redhat.com/2216080",
-                      "https://bugzilla.redhat.com/2218749",
-                      "https://bugzilla.redhat.com/2219340",
-                      "https://errata.almalinux.org/9/ALSA-2023-6575.html",
-                      "https://gitlab.com/libtiff/libtiff/-/merge_requests/472",
-                      "https://linux.oracle.com/cve/CVE-2023-26965.html",
-                      "https://linux.oracle.com/errata/ELSA-2023-6575.html",
-                      "https://lists.debian.org/debian-lts-announce/2023/07/msg00034.html",
-                      "https://lists.debian.org/debian-lts-announce/2025/01/msg00019.html",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2023-26965",
-                      "https://security.netapp.com/advisory/ntap-20230706-0009/",
-                      "https://ubuntu.com/security/notices/USN-6229-1",
-                      "https://ubuntu.com/security/notices/USN-6290-1",
-                      "https://www.cve.org/CVERecord?id=CVE-2023-26965"
-                    ],
-                    "severity": "MEDIUM",
-                    "suppressed": false,
-                    "title": "libtiff: heap-based use after free via a crafted TIFF image in loadImage() in tiffcrop.c"
-                  },
-                  {
-                    "cve": "CVE-2023-26966",
-                    "cvss": {
-                      "nvd": {
-                        "v3score": "5.5",
-                        "v3vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H"
-                      },
-                      "redhat": {
-                        "v3score": "5.5",
-                        "v3vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-120"
-                    ],
-                    "description": "libtiff 4.5.0 is vulnerable to Buffer Overflow in uv_encode() when libtiff reads a corrupted little-endian TIFF file and specifies the output to be big-endian.",
-                    "diffID": "sha256:2f458857553769636f3c149c0c8d41acc63c9e24282823b0ea26869a635e9f48",
-                    "fixedVersions": [
-                      "4.2.0-1+deb11u6"
-                    ],
-                    "installedVersion": "4.2.0-1+deb11u5",
-                    "packageName": "libtiff5",
-                    "purl": "pkg:deb/debian/libtiff5@4.2.0-1%2Bdeb11u5?arch=arm64&distro=debian-11.9",
-                    "references": [
-                      "https://access.redhat.com/errata/RHSA-2023:6575",
-                      "https://access.redhat.com/security/cve/CVE-2023-26966",
-                      "https://bugzilla.redhat.com/2207635",
-                      "https://bugzilla.redhat.com/2215206",
-                      "https://bugzilla.redhat.com/2216080",
-                      "https://bugzilla.redhat.com/2218749",
-                      "https://bugzilla.redhat.com/2219340",
-                      "https://errata.almalinux.org/9/ALSA-2023-6575.html",
-                      "https://gitlab.com/libtiff/libtiff/-/commit/b0e1c25dd1d065200c8d8f59ad0afe014861a1b9 (v4.5.1rc1)",
-                      "https://gitlab.com/libtiff/libtiff/-/issues/530",
-                      "https://gitlab.com/libtiff/libtiff/-/merge_requests/473",
-                      "https://linux.oracle.com/cve/CVE-2023-26966.html",
-                      "https://linux.oracle.com/errata/ELSA-2023-6575.html",
-                      "https://lists.debian.org/debian-lts-announce/2023/07/msg00034.html",
-                      "https://lists.debian.org/debian-lts-announce/2025/01/msg00019.html",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2023-26966",
-                      "https://ubuntu.com/security/notices/USN-6229-1",
-                      "https://ubuntu.com/security/notices/USN-6290-1",
-                      "https://www.cve.org/CVERecord?id=CVE-2023-26966"
-                    ],
-                    "severity": "MEDIUM",
-                    "suppressed": false,
-                    "title": "libtiff: Buffer Overflow in uv_encode()"
-                  },
-                  {
-                    "cve": "CVE-2023-2908",
-                    "cvss": {
-                      "nvd": {
-                        "v3score": "5.5",
-                        "v3vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H"
-                      },
-                      "redhat": {
-                        "v3score": "5.5",
-                        "v3vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-476"
-                    ],
-                    "description": "A null pointer dereference issue was found in Libtiff's tif_dir.c file. This issue may allow an attacker to pass a crafted TIFF image file to the tiffcp utility which triggers a runtime error that causes undefined behavior. This will result in an application crash, eventually leading to a denial of service.",
-                    "diffID": "sha256:2f458857553769636f3c149c0c8d41acc63c9e24282823b0ea26869a635e9f48",
-                    "fixedVersions": [
-                      "4.2.0-1+deb11u6"
-                    ],
-                    "installedVersion": "4.2.0-1+deb11u5",
-                    "packageName": "libtiff5",
-                    "purl": "pkg:deb/debian/libtiff5@4.2.0-1%2Bdeb11u5?arch=arm64&distro=debian-11.9",
-                    "references": [
-                      "https://access.redhat.com/security/cve/CVE-2023-2908",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2218830",
-                      "https://gitlab.com/libtiff/libtiff/-/commit/9bd48f0dbd64fb94dc2b5b05238fde0bfdd4ff3f",
-                      "https://gitlab.com/libtiff/libtiff/-/merge_requests/479",
-                      "https://lists.debian.org/debian-lts-announce/2023/07/msg00034.html",
-                      "https://lists.debian.org/debian-lts-announce/2025/01/msg00019.html",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2023-2908",
-                      "https://security.netapp.com/advisory/ntap-20230731-0004/",
-                      "https://ubuntu.com/security/notices/USN-6290-1",
-                      "https://www.cve.org/CVERecord?id=CVE-2023-2908"
-                    ],
-                    "severity": "MEDIUM",
-                    "suppressed": false,
-                    "title": "libtiff: null pointer dereference in tif_dir.c"
-                  },
-                  {
-                    "cve": "CVE-2023-3316",
-                    "cvss": {
-                      "nvd": {
-                        "v3score": "6.5",
-                        "v3vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H"
-                      },
-                      "redhat": {
-                        "v3score": "5.5",
-                        "v3vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-476"
-                    ],
-                    "description": "A NULL pointer dereference in TIFFClose() is caused by a failure to open an output file (non-existent path or a path that requires permissions like /dev/null) while specifying zones.",
-                    "diffID": "sha256:2f458857553769636f3c149c0c8d41acc63c9e24282823b0ea26869a635e9f48",
-                    "fixedVersions": [
-                      "4.2.0-1+deb11u6"
-                    ],
-                    "installedVersion": "4.2.0-1+deb11u5",
-                    "packageName": "libtiff5",
-                    "purl": "pkg:deb/debian/libtiff5@4.2.0-1%2Bdeb11u5?arch=arm64&distro=debian-11.9",
-                    "references": [
-                      "https://access.redhat.com/errata/RHSA-2023:6575",
-                      "https://access.redhat.com/security/cve/CVE-2023-3316",
-                      "https://bugzilla.redhat.com/2207635",
-                      "https://bugzilla.redhat.com/2215206",
-                      "https://bugzilla.redhat.com/2216080",
-                      "https://bugzilla.redhat.com/2218749",
-                      "https://bugzilla.redhat.com/2219340",
-                      "https://errata.almalinux.org/9/ALSA-2023-6575.html",
-                      "https://gitlab.com/libtiff/libtiff/-/issues/515",
-                      "https://gitlab.com/libtiff/libtiff/-/merge_requests/468",
-                      "https://linux.oracle.com/cve/CVE-2023-3316.html",
-                      "https://linux.oracle.com/errata/ELSA-2023-6575.html",
-                      "https://lists.debian.org/debian-lts-announce/2023/07/msg00034.html",
-                      "https://lists.debian.org/debian-lts-announce/2025/01/msg00019.html",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2023-3316",
-                      "https://research.jfrog.com/vulnerabilities/libtiff-nullderef-dos-xray-522144/",
-                      "https://ubuntu.com/security/notices/USN-6229-1",
-                      "https://ubuntu.com/security/notices/USN-6290-1",
-                      "https://www.cve.org/CVERecord?id=CVE-2023-3316"
-                    ],
-                    "severity": "MEDIUM",
-                    "suppressed": false,
-                    "title": "libtiff: tiffcrop: null pointer dereference in TIFFClose()"
-                  },
-                  {
-                    "cve": "CVE-2023-3618",
-                    "cvss": {
-                      "nvd": {
-                        "v3score": "6.5",
-                        "v3vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H"
-                      },
-                      "redhat": {
-                        "v3score": "6.5",
-                        "v3vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-120"
-                    ],
-                    "description": "A flaw was found in libtiff. A specially crafted tiff file can lead to a segmentation fault due to a buffer overflow in the Fax3Encode function in libtiff/tif_fax3.c, resulting in a denial of service.",
-                    "diffID": "sha256:2f458857553769636f3c149c0c8d41acc63c9e24282823b0ea26869a635e9f48",
-                    "fixedVersions": [
-                      "4.2.0-1+deb11u6"
-                    ],
-                    "installedVersion": "4.2.0-1+deb11u5",
-                    "packageName": "libtiff5",
-                    "purl": "pkg:deb/debian/libtiff5@4.2.0-1%2Bdeb11u5?arch=arm64&distro=debian-11.9",
-                    "references": [
-                      "https://access.redhat.com/errata/RHSA-2024:2289",
-                      "https://access.redhat.com/security/cve/CVE-2023-3618",
-                      "https://bugzilla.redhat.com/2215865",
-                      "https://bugzilla.redhat.com/2234970",
-                      "https://bugzilla.redhat.com/2235264",
-                      "https://bugzilla.redhat.com/2235265",
-                      "https://bugzilla.redhat.com/2240995",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2215865",
-                      "https://errata.almalinux.org/9/ALSA-2024-2289.html",
-                      "https://gitlab.com/libtiff/libtiff/-/commit/8a4f6b587be4fa7bb39fe17f5f9dec52182ab26e",
-                      "https://gitlab.com/libtiff/libtiff/-/issues/529",
-                      "https://linux.oracle.com/cve/CVE-2023-3618.html",
-                      "https://linux.oracle.com/errata/ELSA-2024-2289.html",
-                      "https://lists.debian.org/debian-lts-announce/2023/07/msg00034.html",
-                      "https://lists.debian.org/debian-lts-announce/2025/01/msg00019.html",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2023-3618",
-                      "https://security.netapp.com/advisory/ntap-20230824-0012/",
-                      "https://support.apple.com/kb/HT214036",
-                      "https://support.apple.com/kb/HT214037",
-                      "https://support.apple.com/kb/HT214038",
-                      "https://ubuntu.com/security/notices/USN-6290-1",
-                      "https://www.cve.org/CVERecord?id=CVE-2023-3618"
-                    ],
-                    "severity": "MEDIUM",
-                    "suppressed": false,
-                    "title": "libtiff: segmentation fault in Fax3Encode in libtiff/tif_fax3.c"
-                  },
-                  {
-                    "cve": "CVE-2023-6277",
-                    "cvss": {
-                      "nvd": {
-                        "v3score": "6.5",
-                        "v3vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H"
-                      },
-                      "redhat": {
-                        "v3score": "6.5",
-                        "v3vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-400"
-                    ],
-                    "description": "An out-of-memory flaw was found in libtiff. Passing a crafted tiff file to TIFFOpen() API may allow a remote attacker to cause a denial of service via a craft input with size smaller than 379 KB.",
-                    "diffID": "sha256:2f458857553769636f3c149c0c8d41acc63c9e24282823b0ea26869a635e9f48",
-                    "installedVersion": "4.2.0-1+deb11u5",
-                    "packageName": "libtiff5",
-                    "purl": "pkg:deb/debian/libtiff5@4.2.0-1%2Bdeb11u5?arch=arm64&distro=debian-11.9",
-                    "references": [
-                      "http://seclists.org/fulldisclosure/2024/Jul/16",
-                      "http://seclists.org/fulldisclosure/2024/Jul/17",
-                      "http://seclists.org/fulldisclosure/2024/Jul/18",
-                      "http://seclists.org/fulldisclosure/2024/Jul/19",
-                      "http://seclists.org/fulldisclosure/2024/Jul/20",
-                      "http://seclists.org/fulldisclosure/2024/Jul/21",
-                      "http://seclists.org/fulldisclosure/2024/Jul/22",
-                      "http://seclists.org/fulldisclosure/2024/Jul/23",
-                      "https://access.redhat.com/security/cve/CVE-2023-6277",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2251311",
-                      "https://gitlab.com/libtiff/libtiff/-/issues/614",
-                      "https://gitlab.com/libtiff/libtiff/-/merge_requests/545",
-                      "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/WJIN6DTSL3VODZUGWEUXLEL5DR53EZMV/",
-                      "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/Y7ZGN2MZXJ6E57W3L4YBM3ZPAU3T7T5C/",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2023-6277",
-                      "https://security.netapp.com/advisory/ntap-20240119-0002/",
-                      "https://support.apple.com/kb/HT214116",
-                      "https://support.apple.com/kb/HT214117",
-                      "https://support.apple.com/kb/HT214118",
-                      "https://support.apple.com/kb/HT214119",
-                      "https://support.apple.com/kb/HT214120",
-                      "https://support.apple.com/kb/HT214122",
-                      "https://support.apple.com/kb/HT214123",
-                      "https://support.apple.com/kb/HT214124",
-                      "https://ubuntu.com/security/notices/USN-6644-1",
-                      "https://ubuntu.com/security/notices/USN-6644-2",
-                      "https://www.cve.org/CVERecord?id=CVE-2023-6277"
-                    ],
-                    "severity": "MEDIUM",
-                    "suppressed": false,
-                    "title": "libtiff: Out-of-memory in TIFFOpen via a craft file"
-                  },
-                  {
-                    "cve": "CVE-2017-16232",
-                    "cvss": {
-                      "nvd": {
-                        "v3score": "7.5",
-                        "v3vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"
-                      },
-                      "redhat": {
-                        "v3score": "3.3",
-                        "v3vector": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-772"
-                    ],
-                    "description": "LibTIFF 4.0.8 has multiple memory leak vulnerabilities, which allow attackers to cause a denial of service (memory consumption), as demonstrated by tif_open.c, tif_lzw.c, and tif_aux.c. NOTE: Third parties were unable to reproduce the issue",
-                    "diffID": "sha256:2f458857553769636f3c149c0c8d41acc63c9e24282823b0ea26869a635e9f48",
-                    "installedVersion": "4.2.0-1+deb11u5",
-                    "packageName": "libtiff5",
-                    "purl": "pkg:deb/debian/libtiff5@4.2.0-1%2Bdeb11u5?arch=arm64&distro=debian-11.9",
-                    "references": [
-                      "http://lists.opensuse.org/opensuse-security-announce/2018-01/msg00036.html",
-                      "http://lists.opensuse.org/opensuse-security-announce/2018-01/msg00041.html",
-                      "http://packetstormsecurity.com/files/150896/LibTIFF-4.0.8-Memory-Leak.html",
-                      "http://seclists.org/fulldisclosure/2018/Dec/32",
-                      "http://seclists.org/fulldisclosure/2018/Dec/47",
-                      "http://www.openwall.com/lists/oss-security/2017/11/01/11",
-                      "http://www.openwall.com/lists/oss-security/2017/11/01/3",
-                      "http://www.openwall.com/lists/oss-security/2017/11/01/7",
-                      "http://www.openwall.com/lists/oss-security/2017/11/01/8",
-                      "http://www.securityfocus.com/bid/101696",
-                      "https://access.redhat.com/security/cve/CVE-2017-16232",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2017-16232",
-                      "https://www.cve.org/CVERecord?id=CVE-2017-16232"
-                    ],
-                    "severity": "LOW",
-                    "suppressed": false,
-                    "title": "libtiff: Memory leaks in tif_open.c, tif_lzw.c, and tif_aux.c"
-                  },
-                  {
-                    "cve": "CVE-2018-10126",
-                    "cvss": {
-                      "nvd": {
-                        "v3score": "6.5",
-                        "v3vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H"
-                      },
-                      "redhat": {
-                        "v3score": "3.3",
-                        "v3vector": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-476"
-                    ],
-                    "description": "ijg-libjpeg before 9d, as used in tiff2pdf (from LibTIFF) and other products, does not check for a NULL pointer at a certain place in jpeg_fdct_16x16 in jfdctint.c.",
-                    "diffID": "sha256:2f458857553769636f3c149c0c8d41acc63c9e24282823b0ea26869a635e9f48",
-                    "installedVersion": "4.2.0-1+deb11u5",
-                    "packageName": "libtiff5",
-                    "purl": "pkg:deb/debian/libtiff5@4.2.0-1%2Bdeb11u5?arch=arm64&distro=debian-11.9",
-                    "references": [
-                      "http://bugzilla.maptools.org/show_bug.cgi?id=2786",
-                      "https://access.redhat.com/security/cve/CVE-2018-10126",
-                      "https://gitlab.com/libtiff/libtiff/-/issues/128",
-                      "https://lists.apache.org/thread.html/rf9fa47ab66495c78bb4120b0754dd9531ca2ff0430f6685ac9b07772%40%3Cdev.mina.apache.org%3E",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2018-10126",
-                      "https://www.cve.org/CVERecord?id=CVE-2018-10126"
-                    ],
-                    "severity": "LOW",
-                    "suppressed": false,
-                    "title": "libtiff: NULL pointer dereference in the jpeg_fdct_16x16 function in jfdctint.c"
-                  },
-                  {
-                    "cve": "CVE-2022-1056",
-                    "cvss": {
-                      "nvd": {
-                        "v3score": "5.5",
-                        "v3vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H"
-                      },
-                      "redhat": {
-                        "v3score": "5.5",
-                        "v3vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-125"
-                    ],
-                    "description": "Out-of-bounds Read error in tiffcrop in libtiff 4.3.0 allows attackers to cause a denial-of-service via a crafted tiff file. For users that compile libtiff from sources, the fix is available with commit 46dc8fcd.",
-                    "diffID": "sha256:2f458857553769636f3c149c0c8d41acc63c9e24282823b0ea26869a635e9f48",
-                    "installedVersion": "4.2.0-1+deb11u5",
-                    "packageName": "libtiff5",
-                    "purl": "pkg:deb/debian/libtiff5@4.2.0-1%2Bdeb11u5?arch=arm64&distro=debian-11.9",
-                    "references": [
-                      "https://access.redhat.com/security/cve/CVE-2022-1056",
-                      "https://gitlab.com/gitlab-org/cves/-/blob/master/2022/CVE-2022-1056.json",
-                      "https://gitlab.com/libtiff/libtiff/-/commit/232282fd8f9c21eefe8d2d2b96cdbbb172fe7b7c",
-                      "https://gitlab.com/libtiff/libtiff/-/issues/391",
-                      "https://gitlab.com/libtiff/libtiff/-/merge_requests/307",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2022-1056",
-                      "https://security.gentoo.org/glsa/202210-10",
-                      "https://security.netapp.com/advisory/ntap-20221228-0008/",
-                      "https://www.cve.org/CVERecord?id=CVE-2022-1056"
-                    ],
-                    "severity": "LOW",
-                    "suppressed": false,
-                    "title": "libtiff: heap-based buffer overflow in _TIFFmemcpy() in tif_unix.c"
-                  },
-                  {
-                    "cve": "CVE-2022-1210",
-                    "cvss": {
-                      "nvd": {
-                        "v3score": "6.5",
-                        "v3vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H"
-                      },
-                      "redhat": {
-                        "v3score": "4.3",
-                        "v3vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-400",
-                      "CWE-404"
-                    ],
-                    "description": "A vulnerability classified as problematic was found in LibTIFF 4.3.0. Affected by this vulnerability is the TIFF File Handler of tiff2ps. Opening a malicious file leads to a denial of service. The attack can be launched remotely but requires user interaction. The exploit has been disclosed to the public and may be used.",
-                    "diffID": "sha256:2f458857553769636f3c149c0c8d41acc63c9e24282823b0ea26869a635e9f48",
-                    "installedVersion": "4.2.0-1+deb11u5",
-                    "packageName": "libtiff5",
-                    "purl": "pkg:deb/debian/libtiff5@4.2.0-1%2Bdeb11u5?arch=arm64&distro=debian-11.9",
-                    "references": [
-                      "https://access.redhat.com/security/cve/CVE-2022-1210",
-                      "https://gitlab.com/libtiff/libtiff/-/issues/402",
-                      "https://gitlab.com/libtiff/libtiff/uploads/c3da94e53cf1e1e8e6d4d3780dc8c42f/example.tiff",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2022-1210",
-                      "https://security.gentoo.org/glsa/202210-10",
-                      "https://security.netapp.com/advisory/ntap-20220513-0005/",
-                      "https://vuldb.com/?id.196363",
-                      "https://www.cve.org/CVERecord?id=CVE-2022-1210"
-                    ],
-                    "severity": "LOW",
-                    "suppressed": false,
-                    "title": "tiff: Malicious file leads to a denial of service in TIFF File Handler"
-                  },
-                  {
-                    "cve": "CVE-2023-1916",
-                    "cvss": {
-                      "nvd": {
-                        "v3score": "6.1",
-                        "v3vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:H"
-                      },
-                      "redhat": {
-                        "v3score": "6.1",
-                        "v3vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:H"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-125"
-                    ],
-                    "description": "A flaw was found in tiffcrop, a program distributed by the libtiff package. A specially crafted tiff file can lead to an out-of-bounds read in the extractImageSection function in tools/tiffcrop.c, resulting in a denial of service and limited information disclosure. This issue affects libtiff versions 4.x.",
-                    "diffID": "sha256:2f458857553769636f3c149c0c8d41acc63c9e24282823b0ea26869a635e9f48",
-                    "installedVersion": "4.2.0-1+deb11u5",
-                    "packageName": "libtiff5",
-                    "purl": "pkg:deb/debian/libtiff5@4.2.0-1%2Bdeb11u5?arch=arm64&distro=debian-11.9",
-                    "references": [
-                      "https://access.redhat.com/security/cve/CVE-2023-1916",
-                      "https://gitlab.com/libtiff/libtiff/-/issues/536",
-                      "https://gitlab.com/libtiff/libtiff/-/issues/536%2C",
-                      "https://gitlab.com/libtiff/libtiff/-/issues/536,",
-                      "https://gitlab.com/libtiff/libtiff/-/issues/537",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2023-1916",
-                      "https://support.apple.com/kb/HT213844",
-                      "https://ubuntu.com/security/notices/USN-6428-1",
-                      "https://www.cve.org/CVERecord?id=CVE-2023-1916"
-                    ],
-                    "severity": "LOW",
-                    "suppressed": false,
-                    "title": "libtiff: out-of-bounds read in extractImageSection() in tools/tiffcrop.c"
-                  },
-                  {
-                    "cve": "CVE-2023-30775",
-                    "cvss": {
-                      "nvd": {
-                        "v3score": "5.5",
-                        "v3vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H"
-                      },
-                      "redhat": {
-                        "v3score": "6.2",
-                        "v3vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-119",
-                      "CWE-787"
-                    ],
-                    "description": "A vulnerability was found in the libtiff library. This security flaw causes a heap buffer overflow in extractContigSamples32bits, tiffcrop.c.",
-                    "diffID": "sha256:2f458857553769636f3c149c0c8d41acc63c9e24282823b0ea26869a635e9f48",
-                    "installedVersion": "4.2.0-1+deb11u5",
-                    "packageName": "libtiff5",
-                    "purl": "pkg:deb/debian/libtiff5@4.2.0-1%2Bdeb11u5?arch=arm64&distro=debian-11.9",
-                    "references": [
-                      "https://access.redhat.com/errata/RHSA-2023:2340",
-                      "https://access.redhat.com/security/cve/CVE-2023-30775",
-                      "https://bugzilla.redhat.com/2142734",
-                      "https://bugzilla.redhat.com/2142736",
-                      "https://bugzilla.redhat.com/2142738",
-                      "https://bugzilla.redhat.com/2142740",
-                      "https://bugzilla.redhat.com/2142741",
-                      "https://bugzilla.redhat.com/2142742",
-                      "https://bugzilla.redhat.com/2148918",
-                      "https://bugzilla.redhat.com/2176220",
-                      "https://bugzilla.redhat.com/2187139",
-                      "https://bugzilla.redhat.com/2187141",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2187141",
-                      "https://errata.almalinux.org/9/ALSA-2023-2340.html",
-                      "https://gitlab.com/libtiff/libtiff/-/commit/afd7086090dafd3949afd172822cbcec4ed17d56 (v4.5.0rc1)",
-                      "https://gitlab.com/libtiff/libtiff/-/issues/464",
-                      "https://linux.oracle.com/cve/CVE-2023-30775.html",
-                      "https://linux.oracle.com/errata/ELSA-2023-2340.html",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2023-30775",
-                      "https://security.netapp.com/advisory/ntap-20230703-0002/",
-                      "https://www.cve.org/CVERecord?id=CVE-2023-30775"
-                    ],
-                    "severity": "LOW",
-                    "suppressed": false,
-                    "title": "libtiff: Heap buffer overflow in extractContigSamples32bits, tiffcrop.c"
-                  },
-                  {
-                    "cve": "CVE-2023-3164",
-                    "cvss": {
-                      "nvd": {
-                        "v3score": "5.5",
-                        "v3vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H"
-                      },
-                      "redhat": {
-                        "v3score": "5.5",
-                        "v3vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-120",
-                      "CWE-787"
-                    ],
-                    "description": "A heap-buffer-overflow vulnerability was found in LibTIFF, in extractImageSection() at tools/tiffcrop.c:7916 and tools/tiffcrop.c:7801. This flaw allows attackers to cause a denial of service via a crafted tiff file.",
-                    "diffID": "sha256:2f458857553769636f3c149c0c8d41acc63c9e24282823b0ea26869a635e9f48",
-                    "installedVersion": "4.2.0-1+deb11u5",
-                    "packageName": "libtiff5",
-                    "purl": "pkg:deb/debian/libtiff5@4.2.0-1%2Bdeb11u5?arch=arm64&distro=debian-11.9",
-                    "references": [
-                      "https://access.redhat.com/security/cve/CVE-2023-3164",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2213531",
-                      "https://gitlab.com/libtiff/libtiff/-/issues/542",
-                      "https://gitlab.com/libtiff/libtiff/-/merge_requests/595",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2023-3164",
-                      "https://ubuntu.com/security/notices/USN-6827-1",
-                      "https://www.cve.org/CVERecord?id=CVE-2023-3164"
-                    ],
-                    "severity": "LOW",
-                    "suppressed": false,
-                    "title": "libtiff: heap-buffer-overflow in extractImageSection()"
-                  },
-                  {
-                    "cve": "CVE-2023-6228",
-                    "cvss": {
-                      "nvd": {
-                        "v3score": "5.5",
-                        "v3vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H"
-                      },
-                      "redhat": {
-                        "v3score": "3.3",
-                        "v3vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-787"
-                    ],
-                    "description": "An issue was found in the tiffcp utility distributed by the libtiff package where a crafted TIFF file on processing may cause a heap-based buffer overflow leads to an application crash.",
-                    "diffID": "sha256:2f458857553769636f3c149c0c8d41acc63c9e24282823b0ea26869a635e9f48",
-                    "installedVersion": "4.2.0-1+deb11u5",
-                    "packageName": "libtiff5",
-                    "purl": "pkg:deb/debian/libtiff5@4.2.0-1%2Bdeb11u5?arch=arm64&distro=debian-11.9",
-                    "references": [
-                      "https://access.redhat.com/errata/RHSA-2024:2289",
-                      "https://access.redhat.com/errata/RHSA-2024:5079",
-                      "https://access.redhat.com/security/cve/CVE-2023-6228",
-                      "https://bugzilla.redhat.com/1614051",
-                      "https://bugzilla.redhat.com/2218744",
-                      "https://bugzilla.redhat.com/2240995",
-                      "https://bugzilla.redhat.com/2251344",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=1614051",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2218744",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2240995",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2251344",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-15209",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-25433",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52356",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-6228",
-                      "https://errata.almalinux.org/8/ALSA-2024-5079.html",
-                      "https://errata.rockylinux.org/RLSA-2024:5079",
-                      "https://linux.oracle.com/cve/CVE-2023-6228.html",
-                      "https://linux.oracle.com/errata/ELSA-2024-5079.html",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2023-6228",
-                      "https://ubuntu.com/security/notices/USN-6644-1",
-                      "https://ubuntu.com/security/notices/USN-6644-2",
-                      "https://www.cve.org/CVERecord?id=CVE-2023-6228"
-                    ],
-                    "severity": "LOW",
-                    "suppressed": false,
-                    "title": "libtiff: heap-based buffer overflow in cpStripToTile() in tools/tiffcp.c"
-                  },
-                  {
-                    "cve": "CVE-2024-13978",
-                    "cvss": {
-                      "redhat": {
-                        "v3score": "2.5",
-                        "v3vector": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-404",
-                      "CWE-476"
-                    ],
-                    "description": "A vulnerability was found in LibTIFF up to 4.7.0. It has been declared as problematic. Affected by this vulnerability is the function t2p_read_tiff_init of the file tools/tiff2pdf.c of the component fax2ps. The manipulation leads to null pointer dereference. The attack needs to be approached locally. The complexity of an attack is rather high. The exploitation appears to be difficult. The patch is named 2ebfffb0e8836bfb1cd7d85c059cd285c59761a4. It is recommended to apply a patch to fix this issue.",
-                    "diffID": "sha256:2f458857553769636f3c149c0c8d41acc63c9e24282823b0ea26869a635e9f48",
-                    "fixedVersions": [
-                      "4.2.0-1+deb11u7"
-                    ],
-                    "installedVersion": "4.2.0-1+deb11u5",
-                    "packageName": "libtiff5",
-                    "purl": "pkg:deb/debian/libtiff5@4.2.0-1%2Bdeb11u5?arch=arm64&distro=debian-11.9",
-                    "references": [
-                      "http://www.libtiff.org/",
-                      "https://access.redhat.com/security/cve/CVE-2024-13978",
-                      "https://gitlab.com/libtiff/libtiff/-/commit/2ebfffb0e8836bfb1cd7d85c059cd285c59761a4",
-                      "https://gitlab.com/libtiff/libtiff/-/issues/649",
-                      "https://gitlab.com/libtiff/libtiff/-/merge_requests/667",
-                      "https://lists.debian.org/debian-lts-announce/2025/09/msg00031.html",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2024-13978",
-                      "https://vuldb.com/?ctiid.318355",
-                      "https://vuldb.com/?id.318355",
-                      "https://vuldb.com/?submit.624562",
-                      "https://www.cve.org/CVERecord?id=CVE-2024-13978"
-                    ],
-                    "severity": "LOW",
-                    "suppressed": false,
-                    "title": "libtiff: LibTIFF Null Pointer Dereference"
-                  },
-                  {
-                    "cve": "CVE-2025-8176",
-                    "cvss": {
-                      "nvd": {
-                        "v3score": "7.8",
-                        "v3vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"
-                      },
-                      "redhat": {
-                        "v3score": "7.8",
-                        "v3vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-119",
-                      "CWE-416"
-                    ],
-                    "description": "A vulnerability was found in LibTIFF up to 4.7.0. It has been declared as critical. This vulnerability affects the function get_histogram of the file tools/tiffmedian.c. The manipulation leads to use after free. The attack needs to be approached locally. The exploit has been disclosed to the public and may be used. The patch is identified as fe10872e53efba9cc36c66ac4ab3b41a839d5172. It is recommended to apply a patch to fix this issue.",
-                    "diffID": "sha256:2f458857553769636f3c149c0c8d41acc63c9e24282823b0ea26869a635e9f48",
-                    "installedVersion": "4.2.0-1+deb11u5",
-                    "packageName": "libtiff5",
-                    "purl": "pkg:deb/debian/libtiff5@4.2.0-1%2Bdeb11u5?arch=arm64&distro=debian-11.9",
-                    "references": [
-                      "http://www.libtiff.org/",
-                      "https://access.redhat.com/errata/RHSA-2025:20034",
-                      "https://access.redhat.com/security/cve/CVE-2025-8176",
-                      "https://bugzilla.redhat.com/2383598",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2383598",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2392784",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-8176",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-9900",
-                      "https://errata.almalinux.org/8/ALSA-2025-20034.html",
-                      "https://errata.rockylinux.org/RLSA-2025:19113",
-                      "https://gitlab.com/libtiff/libtiff/-/commit/fe10872e53efba9cc36c66ac4ab3b41a839d5172",
-                      "https://gitlab.com/libtiff/libtiff/-/issues/707",
-                      "https://gitlab.com/libtiff/libtiff/-/merge_requests/727",
-                      "https://linux.oracle.com/cve/CVE-2025-8176.html",
-                      "https://linux.oracle.com/errata/ELSA-2025-21407.html",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2025-8176",
-                      "https://ubuntu.com/security/notices/USN-7707-1",
-                      "https://vuldb.com/?ctiid.317590",
-                      "https://vuldb.com/?id.317590",
-                      "https://vuldb.com/?submit.621796",
-                      "https://www.cve.org/CVERecord?id=CVE-2025-8176"
-                    ],
-                    "severity": "LOW",
-                    "suppressed": false,
-                    "title": "libtiff: LibTIFF Use-After-Free Vulnerability"
-                  },
-                  {
-                    "cve": "CVE-2025-8177",
-                    "cvss": {
-                      "nvd": {
-                        "v3score": "7.8",
-                        "v3vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"
-                      },
-                      "redhat": {
-                        "v3score": "7.8",
-                        "v3vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-119",
-                      "CWE-120"
-                    ],
-                    "description": "A vulnerability was found in LibTIFF up to 4.7.0. It has been rated as critical. This issue affects the function setrow of the file tools/thumbnail.c. The manipulation leads to buffer overflow. An attack has to be approached locally. The patch is named e8c9d6c616b19438695fd829e58ae4fde5bfbc22. It is recommended to apply a patch to fix this issue. This vulnerability only affects products that are no longer supported by the maintainer.",
-                    "diffID": "sha256:2f458857553769636f3c149c0c8d41acc63c9e24282823b0ea26869a635e9f48",
-                    "installedVersion": "4.2.0-1+deb11u5",
-                    "packageName": "libtiff5",
-                    "purl": "pkg:deb/debian/libtiff5@4.2.0-1%2Bdeb11u5?arch=arm64&distro=debian-11.9",
-                    "references": [
-                      "http://www.libtiff.org/",
-                      "https://access.redhat.com/security/cve/CVE-2025-8177",
-                      "https://gitlab.com/libtiff/libtiff/-/commit/e8c9d6c616b19438695fd829e58ae4fde5bfbc22",
-                      "https://gitlab.com/libtiff/libtiff/-/issues/715",
-                      "https://gitlab.com/libtiff/libtiff/-/merge_requests/737",
-                      "https://linux.oracle.com/cve/CVE-2025-8177.html",
-                      "https://linux.oracle.com/errata/ELSA-2025-21407.html",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2025-8177",
-                      "https://ubuntu.com/security/notices/USN-7707-1",
-                      "https://vuldb.com/?ctiid.317591",
-                      "https://vuldb.com/?id.317591",
-                      "https://vuldb.com/?submit.621797",
-                      "https://www.cve.org/CVERecord?id=CVE-2025-8177"
-                    ],
-                    "severity": "LOW",
-                    "suppressed": false,
-                    "title": "libtiff: LibTIFF Buffer Overflow"
-                  },
-                  {
-                    "cve": "CVE-2025-8534",
-                    "cvss": {
-                      "redhat": {
-                        "v3score": "2.5",
-                        "v3vector": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-404",
-                      "CWE-476"
-                    ],
-                    "description": "A vulnerability classified as problematic was found in libtiff 4.6.0. This vulnerability affects the function PS_Lvl2page of the file tools/tiff2ps.c of the component tiff2ps. The manipulation leads to null pointer dereference. It is possible to launch the attack on the local host. The complexity of an attack is rather high. The exploitation appears to be difficult. The exploit has been disclosed to the public and may be used. The name of the patch is 6ba36f159fd396ad11bf6b7874554197736ecc8b. It is recommended to apply a patch to fix this issue. One of the maintainers explains, that \"[t]his error only occurs if DEFER_STRILE_LOAD (defer-strile-load:BOOL=ON) or TIFFOpen( .. \"rD\") option is used.\"",
-                    "diffID": "sha256:2f458857553769636f3c149c0c8d41acc63c9e24282823b0ea26869a635e9f48",
-                    "installedVersion": "4.2.0-1+deb11u5",
-                    "packageName": "libtiff5",
-                    "purl": "pkg:deb/debian/libtiff5@4.2.0-1%2Bdeb11u5?arch=arm64&distro=debian-11.9",
-                    "references": [
-                      "http://www.libtiff.org/",
-                      "https://access.redhat.com/security/cve/CVE-2025-8534",
-                      "https://drive.google.com/file/d/15JPA3kLYiYD-nRNJ8y8HmnYjhv9NE7k6/view?usp=drive_link",
-                      "https://gitlab.com/libtiff/libtiff/-/commit/6ba36f159fd396ad11bf6b7874554197736ecc8b",
-                      "https://gitlab.com/libtiff/libtiff/-/issues/718",
-                      "https://gitlab.com/libtiff/libtiff/-/merge_requests/746",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2025-8534",
-                      "https://ubuntu.com/security/notices/USN-7707-1",
-                      "https://vuldb.com/?ctiid.318664",
-                      "https://vuldb.com/?id.318664",
-                      "https://vuldb.com/?submit.617831",
-                      "https://www.cve.org/CVERecord?id=CVE-2025-8534"
-                    ],
-                    "severity": "LOW",
-                    "suppressed": false,
-                    "title": "libtiff: Libtiff Null Pointer Dereference Vulnerability"
-                  },
-                  {
-                    "cve": "CVE-2025-8851",
-                    "cvss": {
-                      "redhat": {
-                        "v3score": "5.3",
-                        "v3vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-119",
-                      "CWE-121"
-                    ],
-                    "description": "A vulnerability was determined in LibTIFF up to 4.5.1. Affected by this issue is the function readSeparateStripsetoBuffer of the file tools/tiffcrop.c of the component tiffcrop. The manipulation leads to stack-based buffer overflow. Local access is required to approach this attack. The patch is identified as 8a7a48d7a645992ca83062b3a1873c951661e2b3. It is recommended to apply a patch to fix this issue.",
-                    "diffID": "sha256:2f458857553769636f3c149c0c8d41acc63c9e24282823b0ea26869a635e9f48",
-                    "installedVersion": "4.2.0-1+deb11u5",
-                    "packageName": "libtiff5",
-                    "purl": "pkg:deb/debian/libtiff5@4.2.0-1%2Bdeb11u5?arch=arm64&distro=debian-11.9",
-                    "references": [
-                      "http://www.libtiff.org/",
-                      "https://access.redhat.com/security/cve/CVE-2025-8851",
-                      "https://gitlab.com/libtiff/libtiff/-/commit/8a7a48d7a645992ca83062b3a1873c951661e2b3",
-                      "https://gitlab.com/libtiff/libtiff/-/commit/8a7a48d7a645992ca83062b3a1873c951661e2b3 (v4.7.0rc1)",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2025-8851",
-                      "https://ubuntu.com/security/notices/USN-7707-1",
-                      "https://vuldb.com/?ctiid.319382",
-                      "https://vuldb.com/?id.319382",
-                      "https://vuldb.com/?submit.624604",
-                      "https://www.cve.org/CVERecord?id=CVE-2025-8851"
-                    ],
-                    "severity": "LOW",
-                    "suppressed": false,
-                    "title": "libtiff: LibTIFF Stack-based buffer overflow"
-                  },
-                  {
-                    "cve": "CVE-2025-8961",
-                    "cvss": {
-                      "redhat": {
-                        "v3score": "3.3",
-                        "v3vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-119"
-                    ],
-                    "description": "A weakness has been identified in LibTIFF 4.7.0. This affects the function main of the file tiffcrop.c of the component tiffcrop. Executing manipulation can lead to memory corruption. The attack can only be executed locally. The exploit has been made available to the public and could be exploited.",
-                    "diffID": "sha256:2f458857553769636f3c149c0c8d41acc63c9e24282823b0ea26869a635e9f48",
-                    "installedVersion": "4.2.0-1+deb11u5",
-                    "packageName": "libtiff5",
-                    "purl": "pkg:deb/debian/libtiff5@4.2.0-1%2Bdeb11u5?arch=arm64&distro=debian-11.9",
-                    "references": [
-                      "http://www.libtiff.org/",
-                      "https://access.redhat.com/security/cve/CVE-2025-8961",
-                      "https://drive.google.com/file/d/15L4q2eD8GX3Aj3z6SWC3_FbqaM1ChUx2/view?usp=sharing",
-                      "https://gitlab.com/libtiff/libtiff/-/issues/721",
-                      "https://gitlab.com/libtiff/libtiff/-/issues/721#note_2670686960",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2025-8961",
-                      "https://ubuntu.com/security/notices/USN-7783-1",
-                      "https://vuldb.com/?ctiid.319955",
-                      "https://vuldb.com/?id.319955",
-                      "https://vuldb.com/?submit.627957",
-                      "https://www.cve.org/CVERecord?id=CVE-2025-8961"
-                    ],
-                    "severity": "LOW",
-                    "suppressed": false,
-                    "title": "libtiff: LibTIFF memory corruption"
-                  },
-                  {
-                    "cve": "CVE-2025-9165",
-                    "cvss": {
-                      "redhat": {
-                        "v3score": "3.3",
-                        "v3vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-401",
-                      "CWE-404"
-                    ],
-                    "description": "A flaw has been found in LibTIFF 4.7.0. This affects the function _TIFFmallocExt/_TIFFCheckRealloc/TIFFHashSetNew/InitCCITTFax3 of the file tools/tiffcmp.c of the component tiffcmp. Executing manipulation can lead to memory leak. The attack is restricted to local execution. This attack is characterized by high complexity. It is indicated that the exploitability is difficult. The exploit has been published and may be used. There is ongoing doubt regarding the real existence of this vulnerability. This patch is called ed141286a37f6e5ddafb5069347ff5d587e7a4e0. It is best practice to apply a patch to resolve this issue. A researcher disputes the security impact of this issue, because \"this is a memory leak on a command line tool that is about to exit anyway\". In the reply the project maintainer declares this issue as \"a simple 'bug' when leaving the command line tool and (...) not a security issue at all\".",
-                    "diffID": "sha256:2f458857553769636f3c149c0c8d41acc63c9e24282823b0ea26869a635e9f48",
-                    "installedVersion": "4.2.0-1+deb11u5",
-                    "packageName": "libtiff5",
-                    "purl": "pkg:deb/debian/libtiff5@4.2.0-1%2Bdeb11u5?arch=arm64&distro=debian-11.9",
-                    "references": [
-                      "http://www.libtiff.org/",
-                      "https://access.redhat.com/security/cve/CVE-2025-9165",
-                      "https://drive.google.com/file/d/1FWhmkzksH8-qU0ZM6seBzGNB3aPnX3G8/view?usp=sharing",
-                      "https://gitlab.com/libtiff/libtiff/-/commit/ed141286a37f6e5ddafb5069347ff5d587e7a4e0",
-                      "https://gitlab.com/libtiff/libtiff/-/issues/728",
-                      "https://gitlab.com/libtiff/libtiff/-/issues/728#note_2709263214",
-                      "https://gitlab.com/libtiff/libtiff/-/merge_requests/747",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2025-9165",
-                      "https://ubuntu.com/security/notices/USN-7783-1",
-                      "https://vuldb.com/?ctiid.320543",
-                      "https://vuldb.com/?id.320543",
-                      "https://vuldb.com/?submit.630506",
-                      "https://vuldb.com/?submit.630507",
-                      "https://www.cve.org/CVERecord?id=CVE-2025-9165"
-                    ],
-                    "severity": "LOW",
-                    "suppressed": false,
-                    "title": "libtiff: LibTIFF memory leak"
-                  },
-                  {
-                    "cve": "CVE-2023-50495",
-                    "cvss": {
-                      "nvd": {
-                        "v3score": "6.5",
-                        "v3vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H"
-                      },
-                      "redhat": {
-                        "v3score": "6.5",
-                        "v3vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H"
-                      }
-                    },
-                    "description": "NCurse v6.4-20230418 was discovered to contain a segmentation fault via the component _nc_wrap_entry().",
-                    "diffID": "sha256:a499da141b419b2e97ed40192951a05fc37fadec129a55e1de03773e23fff97b",
-                    "installedVersion": "6.2+20201114-2+deb11u2",
-                    "packageName": "libtinfo6",
-                    "purl": "pkg:deb/debian/libtinfo6@6.2%2B20201114-2%2Bdeb11u2?arch=arm64&distro=debian-11.9",
-                    "references": [
-                      "https://access.redhat.com/security/cve/CVE-2023-50495",
-                      "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LU4MYMKFEZQ5VSCVLRIZGDQOUW3T44GT/",
-                      "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/LU4MYMKFEZQ5VSCVLRIZGDQOUW3T44GT/",
-                      "https://lists.gnu.org/archive/html/bug-ncurses/2023-04/msg00020.html",
-                      "https://lists.gnu.org/archive/html/bug-ncurses/2023-04/msg00029.html",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2023-50495",
-                      "https://security.netapp.com/advisory/ntap-20240119-0008/",
-                      "https://ubuntu.com/security/notices/USN-6684-1",
-                      "https://www.cve.org/CVERecord?id=CVE-2023-50495"
-                    ],
-                    "severity": "MEDIUM",
-                    "suppressed": false,
-                    "title": "ncurses: segmentation fault via _nc_wrap_entry()"
-                  },
-                  {
-                    "cve": "CVE-2025-6141",
-                    "cvss": {
-                      "redhat": {
-                        "v3score": "3.3",
-                        "v3vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-119",
-                      "CWE-121"
-                    ],
-                    "description": "A vulnerability has been found in GNU ncurses up to 6.5-20250322 and classified as problematic. This vulnerability affects the function postprocess_termcap of the file tinfo/parse_entry.c. The manipulation leads to stack-based buffer overflow. The attack needs to be approached locally. Upgrading to version 6.5-20250329 is able to address this issue. It is recommended to upgrade the affected component.",
-                    "diffID": "sha256:a499da141b419b2e97ed40192951a05fc37fadec129a55e1de03773e23fff97b",
-                    "installedVersion": "6.2+20201114-2+deb11u2",
-                    "packageName": "libtinfo6",
-                    "purl": "pkg:deb/debian/libtinfo6@6.2%2B20201114-2%2Bdeb11u2?arch=arm64&distro=debian-11.9",
-                    "references": [
-                      "https://access.redhat.com/security/cve/CVE-2025-6141",
-                      "https://invisible-island.net/ncurses/NEWS.html#index-t20250329",
-                      "https://lists.gnu.org/archive/html/bug-ncurses/2025-03/msg00107.html",
-                      "https://lists.gnu.org/archive/html/bug-ncurses/2025-03/msg00109.html",
-                      "https://lists.gnu.org/archive/html/bug-ncurses/2025-03/msg00114.html",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2025-6141",
-                      "https://vuldb.com/?ctiid.312610",
-                      "https://vuldb.com/?id.312610",
-                      "https://vuldb.com/?submit.593000",
-                      "https://www.cve.org/CVERecord?id=CVE-2025-6141",
-                      "https://www.gnu.org/"
-                    ],
-                    "severity": "LOW",
-                    "suppressed": false,
-                    "title": "gnu-ncurses: ncurses Stack Buffer Overflow"
-                  },
-                  {
-                    "cve": "CVE-2023-50387",
-                    "cvss": {
-                      "nvd": {
-                        "v3score": "7.5",
-                        "v3vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"
-                      },
-                      "redhat": {
-                        "v3score": "7.5",
-                        "v3vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-770"
-                    ],
-                    "description": "Certain DNSSEC aspects of the DNS protocol (in RFC 4033, 4034, 4035, 6840, and related RFCs) allow remote attackers to cause a denial of service (CPU consumption) via one or more DNSSEC responses, aka the \"KeyTrap\" issue. One of the concerns is that, when there is a zone with many DNSKEY and RRSIG records, the protocol specification implies that an algorithm must evaluate all combinations of DNSKEY and RRSIG records.",
-                    "diffID": "sha256:a499da141b419b2e97ed40192951a05fc37fadec129a55e1de03773e23fff97b",
-                    "fixedVersions": [
-                      "247.3-7+deb11u6"
-                    ],
-                    "installedVersion": "247.3-7+deb11u4",
-                    "packageName": "libudev1",
-                    "purl": "pkg:deb/debian/libudev1@247.3-7%2Bdeb11u4?arch=arm64&distro=debian-11.9",
-                    "references": [
-                      "http://www.openwall.com/lists/oss-security/2024/02/16/2",
-                      "http://www.openwall.com/lists/oss-security/2024/02/16/3",
-                      "https://access.redhat.com/errata/RHSA-2024:3271",
-                      "https://access.redhat.com/security/cve/CVE-2023-50387",
-                      "https://blog.powerdns.com/2024/02/13/powerdns-recursor-4-8-6-4-9-3-5-0-2-released",
-                      "https://bugzilla.redhat.com/2263896",
-                      "https://bugzilla.redhat.com/2263914",
-                      "https://bugzilla.redhat.com/2263917",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2263896",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2263897",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2263909",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2263911",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2263914",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2263917",
-                      "https://bugzilla.suse.com/show_bug.cgi?id=1219823",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-4408",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-50387",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-50868",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-5517",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-5679",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-6516",
-                      "https://docs.powerdns.com/recursor/security-advisories/powerdns-advisory-2024-01.html",
-                      "https://errata.almalinux.org/8/ALSA-2024-3271.html",
-                      "https://errata.rockylinux.org/RLSA-2024:2551",
-                      "https://gitlab.nic.cz/knot/knot-resolver/-/releases/v5.7.1",
-                      "https://kb.isc.org/docs/cve-2023-50387",
-                      "https://linux.oracle.com/cve/CVE-2023-50387.html",
-                      "https://linux.oracle.com/errata/ELSA-2024-3741.html",
-                      "https://lists.debian.org/debian-lts-announce/2024/02/msg00006.html",
-                      "https://lists.debian.org/debian-lts-announce/2024/05/msg00011.html",
-                      "https://lists.debian.org/debian-lts-announce/2024/09/msg00001.html",
-                      "https://lists.debian.org/debian-lts-announce/2024/11/msg00035.html",
-                      "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6FV5O347JTX7P5OZA6NGO4MKTXRXMKOZ/",
-                      "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BUIP7T7Z4T3UHLXFWG6XIVDP4GYPD3AI/",
-                      "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/HVRDSJVZKMCXKKPP6PNR62T7RWZ3YSDZ/",
-                      "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/IGSLGKUAQTW5JPPZCMF5YPEYALLRUZZ6/",
-                      "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PNNHZSZPG2E7NBMBNYPGHCFI4V4XRWNQ/",
-                      "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/RGS7JN6FZXUSTC2XKQHH27574XOULYYJ/",
-                      "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/SVYA42BLXUCIDLD35YIJPJSHDIADNYMP/",
-                      "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/TEXGOYGW7DBS3N2QSSQONZ4ENIRQEAPG/",
-                      "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQESRWMJCF4JEYJEAKLRM6CT55GLJAB7/",
-                      "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZDZFMEKQTZ4L7RY46FCENWFB5MDT263R/",
-                      "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/BUIP7T7Z4T3UHLXFWG6XIVDP4GYPD3AI/",
-                      "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/HVRDSJVZKMCXKKPP6PNR62T7RWZ3YSDZ/",
-                      "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/RGS7JN6FZXUSTC2XKQHH27574XOULYYJ/",
-                      "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ZDZFMEKQTZ4L7RY46FCENWFB5MDT263R/",
-                      "https://lists.thekelleys.org.uk/pipermail/dnsmasq-discuss/2024q1/017430.html",
-                      "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-50387",
-                      "https://news.ycombinator.com/item?id=39367411",
-                      "https://news.ycombinator.com/item?id=39372384",
-                      "https://nlnetlabs.nl/downloads/unbound/CVE-2023-50387_CVE-2023-50868.txt",
-                      "https://nlnetlabs.nl/news/2024/Feb/13/unbound-1.19.1-released/",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2023-50387",
-                      "https://security.netapp.com/advisory/ntap-20240307-0007/",
-                      "https://ubuntu.com/security/notices/USN-6633-1",
-                      "https://ubuntu.com/security/notices/USN-6642-1",
-                      "https://ubuntu.com/security/notices/USN-6657-1",
-                      "https://ubuntu.com/security/notices/USN-6657-2",
-                      "https://ubuntu.com/security/notices/USN-6665-1",
-                      "https://ubuntu.com/security/notices/USN-6723-1",
-                      "https://www.athene-center.de/aktuelles/key-trap",
-                      "https://www.athene-center.de/fileadmin/content/PDF/Technical_Report_KeyTrap.pdf",
-                      "https://www.cve.org/CVERecord?id=CVE-2023-50387",
-                      "https://www.isc.org/blogs/2024-bind-security-release/",
-                      "https://www.knot-resolver.cz/2024-02-13-knot-resolver-5.7.1.html",
-                      "https://www.securityweek.com/keytrap-dns-attack-could-disable-large-parts-of-internet-researchers/",
-                      "https://www.theregister.com/2024/02/13/dnssec_vulnerability_internet/"
-                    ],
-                    "severity": "HIGH",
-                    "suppressed": false,
-                    "title": "bind9: KeyTrap - Extreme CPU consumption in DNSSEC validator"
-                  },
-                  {
-                    "cve": "CVE-2023-50868",
-                    "cvss": {
-                      "nvd": {
-                        "v3score": "7.5",
-                        "v3vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"
-                      },
-                      "redhat": {
-                        "v3score": "7.5",
-                        "v3vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-400"
-                    ],
-                    "description": "The Closest Encloser Proof aspect of the DNS protocol (in RFC 5155 when RFC 9276 guidance is skipped) allows remote attackers to cause a denial of service (CPU consumption for SHA-1 computations) via DNSSEC responses in a random subdomain attack, aka the \"NSEC3\" issue. The RFC 5155 specification implies that an algorithm must perform thousands of iterations of a hash function in certain situations.",
-                    "diffID": "sha256:a499da141b419b2e97ed40192951a05fc37fadec129a55e1de03773e23fff97b",
-                    "fixedVersions": [
-                      "247.3-7+deb11u6"
-                    ],
-                    "installedVersion": "247.3-7+deb11u4",
-                    "packageName": "libudev1",
-                    "purl": "pkg:deb/debian/libudev1@247.3-7%2Bdeb11u4?arch=arm64&distro=debian-11.9",
-                    "references": [
-                      "http://www.openwall.com/lists/oss-security/2024/02/16/2",
-                      "http://www.openwall.com/lists/oss-security/2024/02/16/3",
-                      "https://access.redhat.com/errata/RHSA-2024:3271",
-                      "https://access.redhat.com/security/cve/CVE-2023-50868",
-                      "https://blog.powerdns.com/2024/02/13/powerdns-recursor-4-8-6-4-9-3-5-0-2-released",
-                      "https://bugzilla.redhat.com/2263896",
-                      "https://bugzilla.redhat.com/2263914",
-                      "https://bugzilla.redhat.com/2263917",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2263896",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2263897",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2263909",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2263911",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2263914",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2263917",
-                      "https://bugzilla.suse.com/show_bug.cgi?id=1219826",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-4408",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-50387",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-50868",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-5517",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-5679",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-6516",
-                      "https://datatracker.ietf.org/doc/html/rfc5155",
-                      "https://docs.powerdns.com/recursor/security-advisories/powerdns-advisory-2024-01.html",
-                      "https://errata.almalinux.org/8/ALSA-2024-3271.html",
-                      "https://errata.rockylinux.org/RLSA-2024:2551",
-                      "https://gitlab.nic.cz/knot/knot-resolver/-/releases/v5.7.1",
-                      "https://kb.isc.org/docs/cve-2023-50868",
-                      "https://linux.oracle.com/cve/CVE-2023-50868.html",
-                      "https://linux.oracle.com/errata/ELSA-2024-3741.html",
-                      "https://lists.debian.org/debian-lts-announce/2024/02/msg00006.html",
-                      "https://lists.debian.org/debian-lts-announce/2024/05/msg00011.html",
-                      "https://lists.debian.org/debian-lts-announce/2024/09/msg00001.html",
-                      "https://lists.debian.org/debian-lts-announce/2024/11/msg00035.html",
-                      "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6FV5O347JTX7P5OZA6NGO4MKTXRXMKOZ/",
-                      "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BUIP7T7Z4T3UHLXFWG6XIVDP4GYPD3AI/",
-                      "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/HVRDSJVZKMCXKKPP6PNR62T7RWZ3YSDZ/",
-                      "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/IGSLGKUAQTW5JPPZCMF5YPEYALLRUZZ6/",
-                      "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PNNHZSZPG2E7NBMBNYPGHCFI4V4XRWNQ/",
-                      "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/RGS7JN6FZXUSTC2XKQHH27574XOULYYJ/",
-                      "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/SVYA42BLXUCIDLD35YIJPJSHDIADNYMP/",
-                      "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/TEXGOYGW7DBS3N2QSSQONZ4ENIRQEAPG/",
-                      "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQESRWMJCF4JEYJEAKLRM6CT55GLJAB7/",
-                      "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZDZFMEKQTZ4L7RY46FCENWFB5MDT263R/",
-                      "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/BUIP7T7Z4T3UHLXFWG6XIVDP4GYPD3AI/",
-                      "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/HVRDSJVZKMCXKKPP6PNR62T7RWZ3YSDZ/",
-                      "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ZDZFMEKQTZ4L7RY46FCENWFB5MDT263R/",
-                      "https://lists.thekelleys.org.uk/pipermail/dnsmasq-discuss/2024q1/017430.html",
-                      "https://nlnetlabs.nl/downloads/unbound/CVE-2023-50387_CVE-2023-50868.txt",
-                      "https://nlnetlabs.nl/news/2024/Feb/13/unbound-1.19.1-released/",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2023-50868",
-                      "https://security.netapp.com/advisory/ntap-20240307-0008/",
-                      "https://ubuntu.com/security/notices/USN-6633-1",
-                      "https://ubuntu.com/security/notices/USN-6642-1",
-                      "https://ubuntu.com/security/notices/USN-6657-1",
-                      "https://ubuntu.com/security/notices/USN-6657-2",
-                      "https://ubuntu.com/security/notices/USN-6665-1",
-                      "https://ubuntu.com/security/notices/USN-6723-1",
-                      "https://www.cve.org/CVERecord?id=CVE-2023-50868",
-                      "https://www.isc.org/blogs/2024-bind-security-release/",
-                      "https://www.knot-resolver.cz/2024-02-13-knot-resolver-5.7.1.html"
-                    ],
-                    "severity": "HIGH",
-                    "suppressed": false,
-                    "title": "bind9: Preparing an NSEC3 closest encloser proof can exhaust CPU resources"
-                  },
-                  {
-                    "cve": "CVE-2023-7008",
-                    "cvss": {
-                      "nvd": {
-                        "v3score": "5.9",
-                        "v3vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N"
-                      },
-                      "redhat": {
-                        "v3score": "5.9",
-                        "v3vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-300"
-                    ],
-                    "description": "A vulnerability was found in systemd-resolved. This issue may allow systemd-resolved to accept records of DNSSEC-signed domains even when they have no signature, allowing man-in-the-middles (or the upstream DNS resolver) to manipulate records.",
-                    "diffID": "sha256:a499da141b419b2e97ed40192951a05fc37fadec129a55e1de03773e23fff97b",
-                    "fixedVersions": [
-                      "247.3-7+deb11u6"
-                    ],
-                    "installedVersion": "247.3-7+deb11u4",
-                    "packageName": "libudev1",
-                    "purl": "pkg:deb/debian/libudev1@247.3-7%2Bdeb11u4?arch=arm64&distro=debian-11.9",
-                    "references": [
-                      "https://access.redhat.com/errata/RHSA-2024:2463",
-                      "https://access.redhat.com/errata/RHSA-2024:3203",
-                      "https://access.redhat.com/security/cve/CVE-2023-7008",
-                      "https://bugzilla.redhat.com/2222672",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2222261",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2222672",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-7008",
-                      "https://errata.almalinux.org/8/ALSA-2024-3203.html",
-                      "https://errata.rockylinux.org/RLSA-2024:2463",
-                      "https://github.com/systemd/systemd/issues/25676",
-                      "https://linux.oracle.com/cve/CVE-2023-7008.html",
-                      "https://linux.oracle.com/errata/ELSA-2024-3203.html",
-                      "https://lists.debian.org/debian-lts-announce/2024/09/msg00001.html",
-                      "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/4GMDEG5PKONWNHOEYSUDRT6JEOISRMN2/",
-                      "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/QHNBXGKJWISJETTTDTZKTBFIBJUOSLKL/",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2023-7008",
-                      "https://security.netapp.com/advisory/ntap-20241122-0004/",
-                      "https://www.cve.org/CVERecord?id=CVE-2023-7008"
-                    ],
-                    "severity": "MEDIUM",
-                    "suppressed": false,
-                    "title": "systemd-resolved: Unsigned name response in signed zone is not refused when DNSSEC=yes"
-                  },
-                  {
-                    "cve": "CVE-2025-4598",
-                    "cvss": {
-                      "redhat": {
-                        "v3score": "4.7",
-                        "v3vector": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-364"
-                    ],
-                    "description": "A vulnerability was found in systemd-coredump. This flaw allows an attacker to force a SUID process to crash and replace it with a non-SUID binary to access the original's privileged process coredump, allowing the attacker to read sensitive data, such as /etc/shadow content, loaded by the original process.\n\nA SUID binary or process has a special type of permission, which allows the process to run with the file owner's permissions, regardless of the user executing the binary. This allows the process to access more restricted data than unprivileged users or processes would be able to. An attacker can leverage this flaw by forcing a SUID process to crash and force the Linux kernel to recycle the process PID before systemd-coredump can analyze the /proc/pid/auxv file. If the attacker wins the race condition, they gain access to the original's SUID process coredump file. They can read sensitive content loaded into memory by the original binary, affecting data confidentiality.",
-                    "diffID": "sha256:a499da141b419b2e97ed40192951a05fc37fadec129a55e1de03773e23fff97b",
-                    "fixedVersions": [
-                      "247.3-7+deb11u7"
-                    ],
-                    "installedVersion": "247.3-7+deb11u4",
-                    "packageName": "libudev1",
-                    "purl": "pkg:deb/debian/libudev1@247.3-7%2Bdeb11u4?arch=arm64&distro=debian-11.9",
-                    "references": [
-                      "http://seclists.org/fulldisclosure/2025/Jun/9",
-                      "http://www.openwall.com/lists/oss-security/2025/06/05/1",
-                      "http://www.openwall.com/lists/oss-security/2025/06/05/3",
-                      "http://www.openwall.com/lists/oss-security/2025/08/18/3",
-                      "https://access.redhat.com/errata/RHSA-2025:22660",
-                      "https://access.redhat.com/errata/RHSA-2025:22868",
-                      "https://access.redhat.com/errata/RHSA-2025:23227",
-                      "https://access.redhat.com/errata/RHSA-2025:23234",
-                      "https://access.redhat.com/errata/RHSA-2026:0414",
-                      "https://access.redhat.com/errata/RHSA-2026:1652",
-                      "https://access.redhat.com/security/cve/CVE-2025-4598",
-                      "https://blogs.oracle.com/linux/post/analysis-of-cve-2025-4598",
-                      "https://bugzilla.redhat.com/2369242",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2369242",
-                      "https://ciq.com/blog/the-real-danger-of-systemd-coredump-cve-2025-4598/",
-                      "https://errata.almalinux.org/9/ALSA-2025-22660.html",
-                      "https://git.kernel.org/linus/b5325b2a270fcaf7b2a9a0f23d422ca8a5a8bdea",
-                      "https://github.com/systemd/systemd/commit/0c49e0049b7665bb7769a13ef346fef92e1ad4d6 (main)",
-                      "https://github.com/systemd/systemd/commit/13902e025321242b1d95c6d8b4e482b37f58cdef (main)",
-                      "https://github.com/systemd/systemd/commit/49f1f2d4a7612bbed5211a73d11d6a94fbe3bb69 (main)",
-                      "https://github.com/systemd/systemd/commit/76e0ab49c47965877c19772a2b3bf55f6417ca39 (main)",
-                      "https://github.com/systemd/systemd/commit/868d95577ec9f862580ad365726515459be582fc (main)",
-                      "https://github.com/systemd/systemd/commit/8fc7b2a211eb13ef1a94250b28e1c79cab8bdcb9 (main)",
-                      "https://github.com/systemd/systemd/commit/9ce8e3e449def92c75ada41b7d10c5bc3946be77 (main)",
-                      "https://github.com/systemd/systemd/commit/e6a8687b939ab21854f12f59a3cce703e32768cf (main)",
-                      "https://linux.oracle.com/cve/CVE-2025-4598.html",
-                      "https://linux.oracle.com/errata/ELSA-2025-22660.html",
-                      "https://lists.debian.org/debian-lts-announce/2025/07/msg00022.html",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2025-4598",
-                      "https://ubuntu.com/security/notices/USN-7559-1",
-                      "https://www.cve.org/CVERecord?id=CVE-2025-4598",
-                      "https://www.openwall.com/lists/oss-security/2025/05/29/3",
-                      "https://www.openwall.com/lists/oss-security/2025/08/18/3",
-                      "https://www.qualys.com/2025/05/29/apport-coredump/apport-coredump.txt"
-                    ],
-                    "severity": "MEDIUM",
-                    "suppressed": false,
-                    "title": "systemd-coredump: race condition that allows a local attacker to crash a SUID program and gain read access to the resulting core dump"
-                  },
-                  {
-                    "cve": "CVE-2013-4392",
-                    "cvss": {
-                      "nvd": {
-                        "v3score": "0",
-                        "v3vector": ""
-                      },
-                      "redhat": {
-                        "v3score": "0",
-                        "v3vector": ""
-                      }
-                    },
-                    "cwes": [
-                      "CWE-59"
-                    ],
-                    "description": "systemd, when updating file permissions, allows local users to change the permissions and SELinux security contexts for arbitrary files via a symlink attack on unspecified files.",
-                    "diffID": "sha256:a499da141b419b2e97ed40192951a05fc37fadec129a55e1de03773e23fff97b",
-                    "installedVersion": "247.3-7+deb11u4",
-                    "packageName": "libudev1",
-                    "purl": "pkg:deb/debian/libudev1@247.3-7%2Bdeb11u4?arch=arm64&distro=debian-11.9",
-                    "references": [
-                      "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=725357",
-                      "http://www.openwall.com/lists/oss-security/2013/10/01/9",
-                      "https://access.redhat.com/security/cve/CVE-2013-4392",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=859060",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2013-4392",
-                      "https://www.cve.org/CVERecord?id=CVE-2013-4392"
-                    ],
-                    "severity": "LOW",
-                    "suppressed": false,
-                    "title": "systemd: TOCTOU race condition when updating file permissions and SELinux security contexts"
-                  },
-                  {
-                    "cve": "CVE-2020-13529",
-                    "cvss": {
-                      "nvd": {
-                        "v3score": "6.1",
-                        "v3vector": "CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:C/C:N/I:N/A:H"
-                      },
-                      "redhat": {
-                        "v3score": "6.1",
-                        "v3vector": "CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:C/C:N/I:N/A:H"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-290"
-                    ],
-                    "description": "An exploitable denial-of-service vulnerability exists in Systemd 245. A specially crafted DHCP FORCERENEW packet can cause a server running the DHCP client to be vulnerable to a DHCP ACK spoofing attack. An attacker can forge a pair of FORCERENEW and DCHP ACK packets to reconfigure the server.",
-                    "diffID": "sha256:a499da141b419b2e97ed40192951a05fc37fadec129a55e1de03773e23fff97b",
-                    "installedVersion": "247.3-7+deb11u4",
-                    "packageName": "libudev1",
-                    "purl": "pkg:deb/debian/libudev1@247.3-7%2Bdeb11u4?arch=arm64&distro=debian-11.9",
-                    "references": [
-                      "http://www.openwall.com/lists/oss-security/2021/08/04/2",
-                      "http://www.openwall.com/lists/oss-security/2021/08/17/3",
-                      "http://www.openwall.com/lists/oss-security/2021/09/07/3",
-                      "https://access.redhat.com/security/cve/CVE-2020-13529",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=1791212",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=1820770",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=1825666",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=1832112",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=1832273",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=1847125",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=1847894",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=1852317",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=1890234",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=1899372",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=1907960",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=1912236",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=1912423",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=1915276",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=1915278",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=1928078",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=1933719",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=1934122",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=1934291",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=1934465",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=1935842",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=1936610",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=1940435",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=1940504",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=1940934",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=1942331",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=1945282",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=1955101",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=1959397",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=1959461",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=1959934",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=1959961",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=1970335",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=1971527",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=1973199",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=1977984",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=1979192",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=1979387",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=1982403",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=1988751",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2004212",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-13529",
-                      "https://errata.rockylinux.org/RLSA-2021:4361",
-                      "https://linux.oracle.com/cve/CVE-2020-13529.html",
-                      "https://linux.oracle.com/errata/ELSA-2021-4361.html",
-                      "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/42TMJVNYRY65B4QCJICBYOEIVZV3KUYI/",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2020-13529",
-                      "https://security.gentoo.org/glsa/202107-48",
-                      "https://security.netapp.com/advisory/ntap-20210625-0005/",
-                      "https://talosintelligence.com/vulnerability_reports/TALOS-2020-1142",
-                      "https://ubuntu.com/security/notices/USN-5013-1",
-                      "https://ubuntu.com/security/notices/USN-5013-2",
-                      "https://www.cve.org/CVERecord?id=CVE-2020-13529"
-                    ],
-                    "severity": "LOW",
-                    "suppressed": false,
-                    "title": "systemd: DHCP FORCERENEW authentication not implemented can cause a system running the DHCP client to have its network reconfigured"
-                  },
-                  {
-                    "cve": "CVE-2023-31437",
-                    "cvss": {
-                      "nvd": {
-                        "v3score": "5.3",
-                        "v3vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-354"
-                    ],
-                    "description": "An issue was discovered in systemd 253. An attacker can modify a sealed log file such that, in some views, not all existing and sealed log messages are displayed. NOTE: the vendor reportedly sent \"a reply denying that any of the finding was a security vulnerability.\"",
-                    "diffID": "sha256:a499da141b419b2e97ed40192951a05fc37fadec129a55e1de03773e23fff97b",
-                    "installedVersion": "247.3-7+deb11u4",
-                    "packageName": "libudev1",
-                    "purl": "pkg:deb/debian/libudev1@247.3-7%2Bdeb11u4?arch=arm64&distro=debian-11.9",
-                    "references": [
-                      "https://github.com/kastel-security/Journald",
-                      "https://github.com/kastel-security/Journald/blob/main/journald-publication.pdf",
-                      "https://github.com/systemd/systemd/releases"
-                    ],
-                    "severity": "LOW",
-                    "suppressed": false,
-                    "title": "An issue was discovered in systemd 253. An attacker can modify a seale ..."
-                  },
-                  {
-                    "cve": "CVE-2023-31438",
-                    "cvss": {
-                      "nvd": {
-                        "v3score": "5.3",
-                        "v3vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-354"
-                    ],
-                    "description": "An issue was discovered in systemd 253. An attacker can truncate a sealed log file and then resume log sealing such that checking the integrity shows no error, despite modifications. NOTE: the vendor reportedly sent \"a reply denying that any of the finding was a security vulnerability.\"",
-                    "diffID": "sha256:a499da141b419b2e97ed40192951a05fc37fadec129a55e1de03773e23fff97b",
-                    "installedVersion": "247.3-7+deb11u4",
-                    "packageName": "libudev1",
-                    "purl": "pkg:deb/debian/libudev1@247.3-7%2Bdeb11u4?arch=arm64&distro=debian-11.9",
-                    "references": [
-                      "https://github.com/kastel-security/Journald",
-                      "https://github.com/kastel-security/Journald/blob/main/journald-publication.pdf",
-                      "https://github.com/systemd/systemd/pull/28886",
-                      "https://github.com/systemd/systemd/releases"
-                    ],
-                    "severity": "LOW",
-                    "suppressed": false,
-                    "title": "An issue was discovered in systemd 253. An attacker can truncate a sea ..."
-                  },
-                  {
-                    "cve": "CVE-2023-31439",
-                    "cvss": {
-                      "nvd": {
-                        "v3score": "5.3",
-                        "v3vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-354"
-                    ],
-                    "description": "An issue was discovered in systemd 253. An attacker can modify the contents of past events in a sealed log file and then adjust the file such that checking the integrity shows no error, despite modifications. NOTE: the vendor reportedly sent \"a reply denying that any of the finding was a security vulnerability.\"",
-                    "diffID": "sha256:a499da141b419b2e97ed40192951a05fc37fadec129a55e1de03773e23fff97b",
-                    "installedVersion": "247.3-7+deb11u4",
-                    "packageName": "libudev1",
-                    "purl": "pkg:deb/debian/libudev1@247.3-7%2Bdeb11u4?arch=arm64&distro=debian-11.9",
-                    "references": [
-                      "https://github.com/kastel-security/Journald",
-                      "https://github.com/kastel-security/Journald/blob/main/journald-publication.pdf",
-                      "https://github.com/systemd/systemd/pull/28885",
-                      "https://github.com/systemd/systemd/releases"
-                    ],
-                    "severity": "LOW",
-                    "suppressed": false,
-                    "title": "An issue was discovered in systemd 253. An attacker can modify the con ..."
-                  },
-                  {
-                    "cve": "CVE-2025-14104",
-                    "cvss": {
-                      "redhat": {
-                        "v3score": "6.1",
-                        "v3vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-125"
-                    ],
-                    "description": "A flaw was found in util-linux. This vulnerability allows a heap buffer overread when processing 256-byte usernames, specifically within the `setpwnam()` function, affecting SUID (Set User ID) login-utils utilities writing to the password database.",
-                    "diffID": "sha256:a499da141b419b2e97ed40192951a05fc37fadec129a55e1de03773e23fff97b",
-                    "installedVersion": "2.36.1-8+deb11u2",
-                    "packageName": "libuuid1",
-                    "purl": "pkg:deb/debian/libuuid1@2.36.1-8%2Bdeb11u2?arch=arm64&distro=debian-11.9",
-                    "references": [
-                      "https://access.redhat.com/errata/RHSA-2026:1696",
-                      "https://access.redhat.com/errata/RHSA-2026:1852",
-                      "https://access.redhat.com/errata/RHSA-2026:1913",
-                      "https://access.redhat.com/security/cve/CVE-2025-14104",
-                      "https://bugzilla.redhat.com/2419369",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2419369",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-14104",
-                      "https://errata.almalinux.org/10/ALSA-2026-1696.html",
-                      "https://errata.rockylinux.org/RLSA-2026:1913",
-                      "https://linux.oracle.com/cve/CVE-2025-14104.html",
-                      "https://linux.oracle.com/errata/ELSA-2026-1913.html",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2025-14104",
-                      "https://www.cve.org/CVERecord?id=CVE-2025-14104"
-                    ],
-                    "severity": "MEDIUM",
-                    "suppressed": false,
-                    "title": "util-linux: util-linux: Heap buffer overread in setpwnam() when processing 256-byte usernames"
-                  },
-                  {
-                    "cve": "CVE-2022-0563",
-                    "cvss": {
-                      "nvd": {
-                        "v3score": "5.5",
-                        "v3vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N"
-                      },
-                      "redhat": {
-                        "v3score": "5.5",
-                        "v3vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-209"
-                    ],
-                    "description": "A flaw was found in the util-linux chfn and chsh utilities when compiled with Readline support. The Readline library uses an \"INPUTRC\" environment variable to get a path to the library config file. When the library cannot parse the specified file, it prints an error message containing data from the file. This flaw allows an unprivileged user to read root-owned files, potentially leading to privilege escalation. This flaw affects util-linux versions prior to 2.37.4.",
-                    "diffID": "sha256:a499da141b419b2e97ed40192951a05fc37fadec129a55e1de03773e23fff97b",
-                    "installedVersion": "2.36.1-8+deb11u2",
-                    "packageName": "libuuid1",
-                    "purl": "pkg:deb/debian/libuuid1@2.36.1-8%2Bdeb11u2?arch=arm64&distro=debian-11.9",
-                    "references": [
-                      "https://access.redhat.com/security/cve/CVE-2022-0563",
-                      "https://blog.trailofbits.com/2023/02/16/suid-logic-bug-linux-readline/",
-                      "https://lore.kernel.org/util-linux/20220214110609.msiwlm457ngoic6w%40ws.net.home/T/#u",
-                      "https://lore.kernel.org/util-linux/20220214110609.msiwlm457ngoic6w@ws.net.home/T/#u",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2022-0563",
-                      "https://security.gentoo.org/glsa/202401-08",
-                      "https://security.netapp.com/advisory/ntap-20220331-0002/",
-                      "https://www.cve.org/CVERecord?id=CVE-2022-0563"
-                    ],
-                    "severity": "LOW",
-                    "suppressed": false,
-                    "title": "util-linux: partial disclosure of arbitrary files in chfn and chsh when compiled with libreadline"
-                  },
-                  {
-                    "cve": "CVE-2024-56171",
-                    "cvss": {
-                      "nvd": {
-                        "v3score": "9.8",
-                        "v3vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"
-                      },
-                      "redhat": {
-                        "v3score": "8.1",
-                        "v3vector": "CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-416"
-                    ],
-                    "description": "libxml2 before 2.12.10 and 2.13.x before 2.13.6 has a use-after-free in xmlSchemaIDCFillNodeTables and xmlSchemaBubbleIDCNodeTables in xmlschemas.c. To exploit this, a crafted XML document must be validated against an XML schema with certain identity constraints, or a crafted XML schema must be used.",
-                    "diffID": "sha256:2f458857553769636f3c149c0c8d41acc63c9e24282823b0ea26869a635e9f48",
-                    "fixedVersions": [
-                      "2.9.10+dfsg-6.7+deb11u6"
-                    ],
-                    "installedVersion": "2.9.10+dfsg-6.7+deb11u4",
-                    "packageName": "libxml2",
-                    "purl": "pkg:deb/debian/libxml2@2.9.10%2Bdfsg-6.7%2Bdeb11u4?arch=arm64&distro=debian-11.9",
-                    "references": [
-                      "http://seclists.org/fulldisclosure/2025/Apr/10",
-                      "http://seclists.org/fulldisclosure/2025/Apr/11",
-                      "http://seclists.org/fulldisclosure/2025/Apr/12",
-                      "http://seclists.org/fulldisclosure/2025/Apr/13",
-                      "http://seclists.org/fulldisclosure/2025/Apr/4",
-                      "http://seclists.org/fulldisclosure/2025/Apr/5",
-                      "http://seclists.org/fulldisclosure/2025/Apr/8",
-                      "http://seclists.org/fulldisclosure/2025/Apr/9",
-                      "https://access.redhat.com/errata/RHSA-2025:2686",
-                      "https://access.redhat.com/security/cve/CVE-2024-56171",
-                      "https://bugzilla.redhat.com/2346416",
-                      "https://bugzilla.redhat.com/2346421",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2346416",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2346421",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-56171",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-24928",
-                      "https://errata.almalinux.org/8/ALSA-2025-2686.html",
-                      "https://errata.rockylinux.org/RLSA-2025:2679",
-                      "https://gitlab.gnome.org/GNOME/libxml2/-/issues/828",
-                      "https://linux.oracle.com/cve/CVE-2024-56171.html",
-                      "https://linux.oracle.com/errata/ELSA-2025-2686.html",
-                      "https://lists.debian.org/debian-lts-announce/2025/02/msg00028.html",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2024-56171",
-                      "https://security.netapp.com/advisory/ntap-20250328-0010/",
-                      "https://ubuntu.com/security/notices/USN-7302-1",
-                      "https://www.cve.org/CVERecord?id=CVE-2024-56171",
-                      "https://www.openwall.com/lists/oss-security/2025/02/18/2"
-                    ],
-                    "severity": "CRITICAL",
-                    "suppressed": false,
-                    "title": "libxml2: Use-After-Free in libxml2"
-                  },
-                  {
-                    "cve": "CVE-2025-49794",
-                    "cvss": {
-                      "redhat": {
-                        "v3score": "9.1",
-                        "v3vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-825"
-                    ],
-                    "description": "A use-after-free vulnerability was found in libxml2. This issue occurs when parsing XPath elements under certain circumstances when the XML schematron has the <sch:name path=\"...\"/> schema elements. This flaw allows a malicious actor to craft a malicious XML document used as input for libxml, resulting in the program's crash using libxml or other possible undefined behaviors.",
-                    "diffID": "sha256:2f458857553769636f3c149c0c8d41acc63c9e24282823b0ea26869a635e9f48",
-                    "fixedVersions": [
-                      "2.9.10+dfsg-6.7+deb11u8"
-                    ],
-                    "installedVersion": "2.9.10+dfsg-6.7+deb11u4",
-                    "packageName": "libxml2",
-                    "purl": "pkg:deb/debian/libxml2@2.9.10%2Bdfsg-6.7%2Bdeb11u4?arch=arm64&distro=debian-11.9",
-                    "references": [
-                      "https://access.redhat.com/errata/RHSA-2025:10630",
-                      "https://access.redhat.com/errata/RHSA-2025:10698",
-                      "https://access.redhat.com/errata/RHSA-2025:10699",
-                      "https://access.redhat.com/errata/RHSA-2025:11580",
-                      "https://access.redhat.com/errata/RHSA-2025:12098",
-                      "https://access.redhat.com/errata/RHSA-2025:12099",
-                      "https://access.redhat.com/errata/RHSA-2025:12199",
-                      "https://access.redhat.com/errata/RHSA-2025:12237",
-                      "https://access.redhat.com/errata/RHSA-2025:12239",
-                      "https://access.redhat.com/errata/RHSA-2025:12240",
-                      "https://access.redhat.com/errata/RHSA-2025:12241",
-                      "https://access.redhat.com/errata/RHSA-2025:13335",
-                      "https://access.redhat.com/errata/RHSA-2025:15397",
-                      "https://access.redhat.com/errata/RHSA-2025:15827",
-                      "https://access.redhat.com/errata/RHSA-2025:15828",
-                      "https://access.redhat.com/errata/RHSA-2025:18217",
-                      "https://access.redhat.com/errata/RHSA-2025:18218",
-                      "https://access.redhat.com/errata/RHSA-2025:18219",
-                      "https://access.redhat.com/errata/RHSA-2025:18240",
-                      "https://access.redhat.com/errata/RHSA-2025:19020",
-                      "https://access.redhat.com/errata/RHSA-2025:19041",
-                      "https://access.redhat.com/errata/RHSA-2025:19046",
-                      "https://access.redhat.com/errata/RHSA-2025:19894",
-                      "https://access.redhat.com/errata/RHSA-2025:21913",
-                      "https://access.redhat.com/errata/RHSA-2026:0934",
-                      "https://access.redhat.com/security/cve/CVE-2025-49794",
-                      "https://bugzilla.redhat.com/2372373",
-                      "https://bugzilla.redhat.com/2372385",
-                      "https://bugzilla.redhat.com/2372406",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2372373",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2372385",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2372406",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-49794",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-49796",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-6021",
-                      "https://errata.almalinux.org/8/ALSA-2025-10698.html",
-                      "https://errata.rockylinux.org/RLSA-2025:10699",
-                      "https://gitlab.gnome.org/GNOME/libxml2/-/issues/931",
-                      "https://linux.oracle.com/cve/CVE-2025-49794.html",
-                      "https://linux.oracle.com/errata/ELSA-2025-12240.html",
-                      "https://lists.debian.org/debian-lts-announce/2025/07/msg00014.html",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2025-49794",
-                      "https://ubuntu.com/security/notices/USN-7694-1",
-                      "https://www.cve.org/CVERecord?id=CVE-2025-49794"
-                    ],
-                    "severity": "CRITICAL",
-                    "suppressed": false,
-                    "title": "libxml: Heap use after free (UAF) leads to Denial of service (DoS)"
-                  },
-                  {
-                    "cve": "CVE-2025-49796",
-                    "cvss": {
-                      "redhat": {
-                        "v3score": "9.1",
-                        "v3vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-125"
-                    ],
-                    "description": "A vulnerability was found in libxml2. Processing certain sch:name elements from the input XML file can trigger a memory corruption issue. This flaw allows an attacker to craft a malicious XML input file that can lead libxml to crash, resulting in a denial of service or other possible undefined behavior due to sensitive data being corrupted in memory.",
-                    "diffID": "sha256:2f458857553769636f3c149c0c8d41acc63c9e24282823b0ea26869a635e9f48",
-                    "fixedVersions": [
-                      "2.9.10+dfsg-6.7+deb11u8"
-                    ],
-                    "installedVersion": "2.9.10+dfsg-6.7+deb11u4",
-                    "packageName": "libxml2",
-                    "purl": "pkg:deb/debian/libxml2@2.9.10%2Bdfsg-6.7%2Bdeb11u4?arch=arm64&distro=debian-11.9",
-                    "references": [
-                      "https://access.redhat.com/errata/RHSA-2025:10630",
-                      "https://access.redhat.com/errata/RHSA-2025:10698",
-                      "https://access.redhat.com/errata/RHSA-2025:10699",
-                      "https://access.redhat.com/errata/RHSA-2025:11580",
-                      "https://access.redhat.com/errata/RHSA-2025:12098",
-                      "https://access.redhat.com/errata/RHSA-2025:12099",
-                      "https://access.redhat.com/errata/RHSA-2025:12199",
-                      "https://access.redhat.com/errata/RHSA-2025:12237",
-                      "https://access.redhat.com/errata/RHSA-2025:12239",
-                      "https://access.redhat.com/errata/RHSA-2025:12240",
-                      "https://access.redhat.com/errata/RHSA-2025:12241",
-                      "https://access.redhat.com/errata/RHSA-2025:13267",
-                      "https://access.redhat.com/errata/RHSA-2025:13335",
-                      "https://access.redhat.com/errata/RHSA-2025:15397",
-                      "https://access.redhat.com/errata/RHSA-2025:15827",
-                      "https://access.redhat.com/errata/RHSA-2025:15828",
-                      "https://access.redhat.com/errata/RHSA-2025:18217",
-                      "https://access.redhat.com/errata/RHSA-2025:18218",
-                      "https://access.redhat.com/errata/RHSA-2025:18219",
-                      "https://access.redhat.com/errata/RHSA-2025:18240",
-                      "https://access.redhat.com/errata/RHSA-2025:19020",
-                      "https://access.redhat.com/errata/RHSA-2025:19041",
-                      "https://access.redhat.com/errata/RHSA-2025:19046",
-                      "https://access.redhat.com/errata/RHSA-2025:19894",
-                      "https://access.redhat.com/errata/RHSA-2025:21913",
-                      "https://access.redhat.com/errata/RHSA-2026:0934",
-                      "https://access.redhat.com/security/cve/CVE-2025-49796",
-                      "https://bugzilla.redhat.com/2372373",
-                      "https://bugzilla.redhat.com/2372385",
-                      "https://bugzilla.redhat.com/2372406",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2372373",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2372385",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2372406",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-49794",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-49796",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-6021",
-                      "https://errata.almalinux.org/8/ALSA-2025-10698.html",
-                      "https://errata.rockylinux.org/RLSA-2025:10699",
-                      "https://gitlab.gnome.org/GNOME/libxml2/-/issues/933",
-                      "https://linux.oracle.com/cve/CVE-2025-49796.html",
-                      "https://linux.oracle.com/errata/ELSA-2025-12240.html",
-                      "https://lists.debian.org/debian-lts-announce/2025/07/msg00014.html",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2025-49796",
-                      "https://ubuntu.com/security/notices/USN-7694-1",
-                      "https://www.cve.org/CVERecord?id=CVE-2025-49796"
-                    ],
-                    "severity": "CRITICAL",
-                    "suppressed": false,
-                    "title": "libxml: Type confusion leads to Denial of service (DoS)"
-                  },
-                  {
-                    "cve": "CVE-2022-2309",
-                    "cvss": {
-                      "ghsa": {
-                        "v3score": "5.3",
-                        "v3vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L"
-                      },
-                      "nvd": {
-                        "v3score": "7.5",
-                        "v3vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"
-                      },
-                      "redhat": {
-                        "v3score": "7.5",
-                        "v3vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-476"
-                    ],
-                    "description": "NULL Pointer Dereference allows attackers to cause a denial of service (or application crash). This only applies when lxml is used together with libxml2 2.9.10 through 2.9.14. libxml2 2.9.9 and earlier are not affected. It allows triggering crashes through forged input data, given a vulnerable code sequence in the application. The vulnerability is caused by the iterwalk function (also used by the canonicalize function). Such code shouldn't be in wide-spread use, given that parsing + iterwalk would usually be replaced with the more efficient iterparse function. However, an XML converter that serialises to C14N would also be vulnerable, for example, and there are legitimate use cases for this code sequence. If untrusted input is received (also remotely) and processed via iterwalk function, a crash can be triggered.",
-                    "diffID": "sha256:2f458857553769636f3c149c0c8d41acc63c9e24282823b0ea26869a635e9f48",
-                    "fixedVersions": [
-                      "2.9.10+dfsg-6.7+deb11u5"
-                    ],
-                    "installedVersion": "2.9.10+dfsg-6.7+deb11u4",
-                    "packageName": "libxml2",
-                    "purl": "pkg:deb/debian/libxml2@2.9.10%2Bdfsg-6.7%2Bdeb11u4?arch=arm64&distro=debian-11.9",
-                    "references": [
-                      "https://access.redhat.com/errata/RHSA-2022:8226",
-                      "https://access.redhat.com/security/cve/CVE-2022-2309",
-                      "https://bugzilla.redhat.com/2107571",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2107571",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-2309",
-                      "https://errata.almalinux.org/9/ALSA-2022-8226.html",
-                      "https://errata.rockylinux.org/RLSA-2022:8226",
-                      "https://github.com/advisories/GHSA-wrxv-2j5q-m38w",
-                      "https://github.com/lxml/lxml",
-                      "https://github.com/lxml/lxml/blob/master/CHANGES.txt",
-                      "https://github.com/lxml/lxml/commit/86368e9cf70a0ad23cccd5ee32de847149af0c6f",
-                      "https://github.com/lxml/lxml/commit/86368e9cf70a0ad23cccd5ee32de847149af0c6f (lxml-4.9.1)",
-                      "https://github.com/pypa/advisory-database/tree/main/vulns/lxml/PYSEC-2022-230.yaml",
-                      "https://gitlab.gnome.org/GNOME/libxml2/-/issues/378",
-                      "https://huntr.dev/bounties/8264e74f-edda-4c40-9956-49de635105ba",
-                      "https://huntr.dev/bounties/8264e74f-edda-4c40-9956-49de635105ba/",
-                      "https://linux.oracle.com/cve/CVE-2022-2309.html",
-                      "https://linux.oracle.com/errata/ELSA-2022-8226.html",
-                      "https://lists.debian.org/debian-lts-announce/2024/09/msg00021.html",
-                      "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/HGYC6L7ENH5VEGN3YWFBYMGKX6WNS7HZ",
-                      "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/HGYC6L7ENH5VEGN3YWFBYMGKX6WNS7HZ/",
-                      "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/URHHSIBTPTALXMECRLAC2EVDNAFSR5NO",
-                      "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/URHHSIBTPTALXMECRLAC2EVDNAFSR5NO/",
-                      "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/HGYC6L7ENH5VEGN3YWFBYMGKX6WNS7HZ",
-                      "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/URHHSIBTPTALXMECRLAC2EVDNAFSR5NO",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2022-2309",
-                      "https://security.gentoo.org/glsa/202208-06",
-                      "https://security.netapp.com/advisory/ntap-20220915-0006",
-                      "https://security.netapp.com/advisory/ntap-20220915-0006/",
-                      "https://ubuntu.com/security/notices/USN-5760-1",
-                      "https://ubuntu.com/security/notices/USN-6028-2",
-                      "https://www.cve.org/CVERecord?id=CVE-2022-2309"
-                    ],
-                    "severity": "HIGH",
-                    "suppressed": false,
-                    "title": "lxml: NULL Pointer Dereference in lxml"
-                  },
-                  {
-                    "cve": "CVE-2022-49043",
-                    "cvss": {
-                      "nvd": {
-                        "v3score": "7.8",
-                        "v3vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"
-                      },
-                      "redhat": {
-                        "v3score": "5.9",
-                        "v3vector": "CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:N/I:N/A:H"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-416"
-                    ],
-                    "description": "xmlXIncludeAddNode in xinclude.c in libxml2 before 2.11.0 has a use-after-free.",
-                    "diffID": "sha256:2f458857553769636f3c149c0c8d41acc63c9e24282823b0ea26869a635e9f48",
-                    "fixedVersions": [
-                      "2.9.10+dfsg-6.7+deb11u6"
-                    ],
-                    "installedVersion": "2.9.10+dfsg-6.7+deb11u4",
-                    "packageName": "libxml2",
-                    "purl": "pkg:deb/debian/libxml2@2.9.10%2Bdfsg-6.7%2Bdeb11u4?arch=arm64&distro=debian-11.9",
-                    "references": [
-                      "https://access.redhat.com/errata/RHSA-2025:1517",
-                      "https://access.redhat.com/security/cve/CVE-2022-49043",
-                      "https://bugzilla.redhat.com/2342118",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2342118",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-49043",
-                      "https://errata.almalinux.org/8/ALSA-2025-1517.html",
-                      "https://errata.rockylinux.org/RLSA-2025:1517",
-                      "https://github.com/php/php-src/issues/17467",
-                      "https://gitlab.gnome.org/GNOME/libxml2/-/commit/5a19e21605398cef6a8b1452477a8705cb41562b",
-                      "https://linux.oracle.com/cve/CVE-2022-49043.html",
-                      "https://linux.oracle.com/errata/ELSA-2025-1517.html",
-                      "https://lists.debian.org/debian-lts-announce/2025/02/msg00028.html",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2022-49043",
-                      "https://ubuntu.com/security/notices/USN-7240-1",
-                      "https://ubuntu.com/security/notices/USN-7302-1",
-                      "https://www.cve.org/CVERecord?id=CVE-2022-49043"
-                    ],
-                    "severity": "HIGH",
-                    "suppressed": false,
-                    "title": "libxml: use-after-free in xmlXIncludeAddNode"
-                  },
-                  {
-                    "cve": "CVE-2024-25062",
-                    "cvss": {
-                      "nvd": {
-                        "v3score": "7.5",
-                        "v3vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"
-                      },
-                      "redhat": {
-                        "v3score": "7.5",
-                        "v3vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-416"
-                    ],
-                    "description": "An issue was discovered in libxml2 before 2.11.7 and 2.12.x before 2.12.5. When using the XML Reader interface with DTD validation and XInclude expansion enabled, processing crafted XML documents can lead to an xmlValidatePopElement use-after-free.",
-                    "diffID": "sha256:2f458857553769636f3c149c0c8d41acc63c9e24282823b0ea26869a635e9f48",
-                    "fixedVersions": [
-                      "2.9.10+dfsg-6.7+deb11u6"
-                    ],
-                    "installedVersion": "2.9.10+dfsg-6.7+deb11u4",
-                    "packageName": "libxml2",
-                    "purl": "pkg:deb/debian/libxml2@2.9.10%2Bdfsg-6.7%2Bdeb11u4?arch=arm64&distro=debian-11.9",
-                    "references": [
-                      "https://access.redhat.com/errata/RHSA-2024:3626",
-                      "https://access.redhat.com/security/cve/CVE-2024-25062",
-                      "https://bugzilla.redhat.com/2262726",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2262726",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-25062",
-                      "https://errata.almalinux.org/8/ALSA-2024-3626.html",
-                      "https://errata.rockylinux.org/RLSA-2024:2679",
-                      "https://gitlab.gnome.org/GNOME/libxml2/-/issues/604",
-                      "https://gitlab.gnome.org/GNOME/libxml2/-/tags",
-                      "https://linux.oracle.com/cve/CVE-2024-25062.html",
-                      "https://linux.oracle.com/errata/ELSA-2024-3626.html",
-                      "https://lists.debian.org/debian-lts-announce/2025/02/msg00028.html",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2024-25062",
-                      "https://security.netapp.com/advisory/ntap-20241018-0009/",
-                      "https://ubuntu.com/security/notices/USN-6658-1",
-                      "https://ubuntu.com/security/notices/USN-6658-2",
-                      "https://www.cve.org/CVERecord?id=CVE-2024-25062"
-                    ],
-                    "severity": "HIGH",
-                    "suppressed": false,
-                    "title": "libxml2: use-after-free in XMLReader"
-                  },
-                  {
-                    "cve": "CVE-2025-24928",
-                    "cvss": {
-                      "nvd": {
-                        "v3score": "7.7",
-                        "v3vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N"
-                      },
-                      "redhat": {
-                        "v3score": "7.8",
-                        "v3vector": "CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:N"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-121"
-                    ],
-                    "description": "libxml2 before 2.12.10 and 2.13.x before 2.13.6 has a stack-based buffer overflow in xmlSnprintfElements in valid.c. To exploit this, DTD validation must occur for an untrusted document or untrusted DTD. NOTE: this is similar to CVE-2017-9047.",
-                    "diffID": "sha256:2f458857553769636f3c149c0c8d41acc63c9e24282823b0ea26869a635e9f48",
-                    "fixedVersions": [
-                      "2.9.10+dfsg-6.7+deb11u6"
-                    ],
-                    "installedVersion": "2.9.10+dfsg-6.7+deb11u4",
-                    "packageName": "libxml2",
-                    "purl": "pkg:deb/debian/libxml2@2.9.10%2Bdfsg-6.7%2Bdeb11u4?arch=arm64&distro=debian-11.9",
-                    "references": [
-                      "https://access.redhat.com/errata/RHSA-2025:2686",
-                      "https://access.redhat.com/security/cve/CVE-2025-24928",
-                      "https://bugzilla.redhat.com/2346416",
-                      "https://bugzilla.redhat.com/2346421",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2346416",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2346421",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-56171",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-24928",
-                      "https://errata.almalinux.org/8/ALSA-2025-2686.html",
-                      "https://errata.rockylinux.org/RLSA-2025:2679",
-                      "https://gitlab.gnome.org/GNOME/libxml2/-/issues/847",
-                      "https://issues.oss-fuzz.com/issues/392687022",
-                      "https://linux.oracle.com/cve/CVE-2025-24928.html",
-                      "https://linux.oracle.com/errata/ELSA-2025-2686.html",
-                      "https://lists.debian.org/debian-lts-announce/2025/02/msg00028.html",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2025-24928",
-                      "https://security.netapp.com/advisory/ntap-20250321-0006/",
-                      "https://ubuntu.com/security/notices/USN-7302-1",
-                      "https://www.cve.org/CVERecord?id=CVE-2025-24928",
-                      "https://www.openwall.com/lists/oss-security/2025/02/18/2"
-                    ],
-                    "severity": "HIGH",
-                    "suppressed": false,
-                    "title": "libxml2: Stack-based buffer overflow in xmlSnprintfElements of libxml2"
-                  },
-                  {
-                    "cve": "CVE-2025-27113",
-                    "cvss": {
-                      "nvd": {
-                        "v3score": "7.5",
-                        "v3vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"
-                      },
-                      "redhat": {
-                        "v3score": "3.1",
-                        "v3vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-476"
-                    ],
-                    "description": "libxml2 before 2.12.10 and 2.13.x before 2.13.6 has a NULL pointer dereference in xmlPatMatch in pattern.c.",
-                    "diffID": "sha256:2f458857553769636f3c149c0c8d41acc63c9e24282823b0ea26869a635e9f48",
-                    "fixedVersions": [
-                      "2.9.10+dfsg-6.7+deb11u6"
-                    ],
-                    "installedVersion": "2.9.10+dfsg-6.7+deb11u4",
-                    "packageName": "libxml2",
-                    "purl": "pkg:deb/debian/libxml2@2.9.10%2Bdfsg-6.7%2Bdeb11u4?arch=arm64&distro=debian-11.9",
-                    "references": [
-                      "http://seclists.org/fulldisclosure/2025/Apr/10",
-                      "http://seclists.org/fulldisclosure/2025/Apr/11",
-                      "http://seclists.org/fulldisclosure/2025/Apr/12",
-                      "http://seclists.org/fulldisclosure/2025/Apr/13",
-                      "http://seclists.org/fulldisclosure/2025/Apr/4",
-                      "http://seclists.org/fulldisclosure/2025/Apr/5",
-                      "http://seclists.org/fulldisclosure/2025/Apr/8",
-                      "http://seclists.org/fulldisclosure/2025/Apr/9",
-                      "https://access.redhat.com/security/cve/CVE-2025-27113",
-                      "https://gitlab.gnome.org/GNOME/libxml2/-/issues/861",
-                      "https://lists.debian.org/debian-lts-announce/2025/02/msg00028.html",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2025-27113",
-                      "https://security.netapp.com/advisory/ntap-20250306-0004/",
-                      "https://ubuntu.com/security/notices/USN-7302-1",
-                      "https://www.cve.org/CVERecord?id=CVE-2025-27113",
-                      "https://www.openwall.com/lists/oss-security/2025/02/18/2"
-                    ],
-                    "severity": "HIGH",
-                    "suppressed": false,
-                    "title": "libxml2: NULL Pointer Dereference in libxml2 xmlPatMatch"
-                  },
-                  {
-                    "cve": "CVE-2025-32414",
-                    "cvss": {
-                      "nvd": {
-                        "v3score": "7.5",
-                        "v3vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"
-                      },
-                      "redhat": {
-                        "v3score": "5.6",
-                        "v3vector": "CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:L/I:L/A:L"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-393",
-                      "CWE-252"
-                    ],
-                    "description": "In libxml2 before 2.13.8 and 2.14.x before 2.14.2, out-of-bounds memory access can occur in the Python API (Python bindings) because of an incorrect return value. This occurs in xmlPythonFileRead and xmlPythonFileReadRaw because of a difference between bytes and characters.",
-                    "diffID": "sha256:2f458857553769636f3c149c0c8d41acc63c9e24282823b0ea26869a635e9f48",
-                    "fixedVersions": [
-                      "2.9.10+dfsg-6.7+deb11u7"
-                    ],
-                    "installedVersion": "2.9.10+dfsg-6.7+deb11u4",
-                    "packageName": "libxml2",
-                    "purl": "pkg:deb/debian/libxml2@2.9.10%2Bdfsg-6.7%2Bdeb11u4?arch=arm64&distro=debian-11.9",
-                    "references": [
-                      "https://access.redhat.com/errata/RHSA-2025:8958",
-                      "https://access.redhat.com/security/cve/CVE-2025-32414",
-                      "https://bugzilla.redhat.com/2358121",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2358121",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2360768",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-32414",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-32415",
-                      "https://errata.almalinux.org/8/ALSA-2025-8958.html",
-                      "https://errata.rockylinux.org/RLSA-2025:13428",
-                      "https://gitlab.gnome.org/GNOME/libxml2/-/issues/889",
-                      "https://linux.oracle.com/cve/CVE-2025-32414.html",
-                      "https://linux.oracle.com/errata/ELSA-2025-8958.html",
-                      "https://lists.debian.org/debian-lts-announce/2025/04/msg00041.html",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2025-32414",
-                      "https://ubuntu.com/security/notices/USN-7467-1",
-                      "https://ubuntu.com/security/notices/USN-7467-2",
-                      "https://ubuntu.com/security/notices/USN-7896-1",
-                      "https://www.cve.org/CVERecord?id=CVE-2025-32414"
-                    ],
-                    "severity": "HIGH",
-                    "suppressed": false,
-                    "title": "libxml2: Out-of-Bounds Read in libxml2"
-                  },
-                  {
-                    "cve": "CVE-2025-32415",
-                    "cvss": {
-                      "nvd": {
-                        "v3score": "7.5",
-                        "v3vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"
-                      },
-                      "redhat": {
-                        "v3score": "7.5",
-                        "v3vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-1284",
-                      "CWE-125"
-                    ],
-                    "description": "In libxml2 before 2.13.8 and 2.14.x before 2.14.2, xmlSchemaIDCFillNodeTables in xmlschemas.c has a heap-based buffer under-read. To exploit this, a crafted XML document must be validated against an XML schema with certain identity constraints, or a crafted XML schema must be used.",
-                    "diffID": "sha256:2f458857553769636f3c149c0c8d41acc63c9e24282823b0ea26869a635e9f48",
-                    "fixedVersions": [
-                      "2.9.10+dfsg-6.7+deb11u7"
-                    ],
-                    "installedVersion": "2.9.10+dfsg-6.7+deb11u4",
-                    "packageName": "libxml2",
-                    "purl": "pkg:deb/debian/libxml2@2.9.10%2Bdfsg-6.7%2Bdeb11u4?arch=arm64&distro=debian-11.9",
-                    "references": [
-                      "https://access.redhat.com/errata/RHSA-2025:13203",
-                      "https://access.redhat.com/security/cve/CVE-2025-32415",
-                      "https://bugzilla.redhat.com/2360768",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2358121",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2360768",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-32414",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-32415",
-                      "https://errata.almalinux.org/8/ALSA-2025-13203.html",
-                      "https://errata.rockylinux.org/RLSA-2025:13428",
-                      "https://gitlab.gnome.org/GNOME/libxml2/-/issues/890",
-                      "https://linux.oracle.com/cve/CVE-2025-32415.html",
-                      "https://linux.oracle.com/errata/ELSA-2025-13789.html",
-                      "https://lists.debian.org/debian-lts-announce/2025/04/msg00041.html",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2025-32415",
-                      "https://ubuntu.com/security/notices/USN-7467-1",
-                      "https://ubuntu.com/security/notices/USN-7467-2",
-                      "https://ubuntu.com/security/notices/USN-7896-1",
-                      "https://www.cve.org/CVERecord?id=CVE-2025-32415"
-                    ],
-                    "severity": "HIGH",
-                    "suppressed": false,
-                    "title": "libxml2: Out-of-bounds Read in xmlSchemaIDCFillNodeTables"
-                  },
-                  {
-                    "cve": "CVE-2025-6021",
-                    "cvss": {
-                      "redhat": {
-                        "v3score": "7.5",
-                        "v3vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-190",
-                      "CWE-787"
-                    ],
-                    "description": "A flaw was found in libxml2's xmlBuildQName function, where integer overflows in buffer size calculations can lead to a stack-based buffer overflow. This issue can result in memory corruption or a denial of service when processing crafted input.",
-                    "diffID": "sha256:2f458857553769636f3c149c0c8d41acc63c9e24282823b0ea26869a635e9f48",
-                    "fixedVersions": [
-                      "2.9.10+dfsg-6.7+deb11u8"
-                    ],
-                    "installedVersion": "2.9.10+dfsg-6.7+deb11u4",
-                    "packageName": "libxml2",
-                    "purl": "pkg:deb/debian/libxml2@2.9.10%2Bdfsg-6.7%2Bdeb11u4?arch=arm64&distro=debian-11.9",
-                    "references": [
-                      "https://access.redhat.com/errata/RHSA-2025:10630",
-                      "https://access.redhat.com/errata/RHSA-2025:10698",
-                      "https://access.redhat.com/errata/RHSA-2025:10699",
-                      "https://access.redhat.com/errata/RHSA-2025:11580",
-                      "https://access.redhat.com/errata/RHSA-2025:11673",
-                      "https://access.redhat.com/errata/RHSA-2025:12098",
-                      "https://access.redhat.com/errata/RHSA-2025:12099",
-                      "https://access.redhat.com/errata/RHSA-2025:12199",
-                      "https://access.redhat.com/errata/RHSA-2025:12237",
-                      "https://access.redhat.com/errata/RHSA-2025:12239",
-                      "https://access.redhat.com/errata/RHSA-2025:12240",
-                      "https://access.redhat.com/errata/RHSA-2025:12241",
-                      "https://access.redhat.com/errata/RHSA-2025:13267",
-                      "https://access.redhat.com/errata/RHSA-2025:13289",
-                      "https://access.redhat.com/errata/RHSA-2025:13325",
-                      "https://access.redhat.com/errata/RHSA-2025:13335",
-                      "https://access.redhat.com/errata/RHSA-2025:13336",
-                      "https://access.redhat.com/errata/RHSA-2025:14059",
-                      "https://access.redhat.com/errata/RHSA-2025:14396",
-                      "https://access.redhat.com/errata/RHSA-2025:15308",
-                      "https://access.redhat.com/errata/RHSA-2025:15672",
-                      "https://access.redhat.com/errata/RHSA-2025:19020",
-                      "https://access.redhat.com/security/cve/CVE-2025-6021",
-                      "https://bugzilla.redhat.com/2372373",
-                      "https://bugzilla.redhat.com/2372385",
-                      "https://bugzilla.redhat.com/2372406",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2372373",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2372385",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2372406",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-49794",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-49796",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-6021",
-                      "https://errata.almalinux.org/8/ALSA-2025-10698.html",
-                      "https://errata.rockylinux.org/RLSA-2025:10699",
-                      "https://gitlab.gnome.org/GNOME/libxml2/-/issues/926",
-                      "https://linux.oracle.com/cve/CVE-2025-6021.html",
-                      "https://linux.oracle.com/errata/ELSA-2025-12240.html",
-                      "https://lists.debian.org/debian-lts-announce/2025/07/msg00014.html",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2025-6021",
-                      "https://ubuntu.com/security/notices/USN-7694-1",
-                      "https://www.cve.org/CVERecord?id=CVE-2025-6021"
-                    ],
-                    "severity": "HIGH",
-                    "suppressed": false,
-                    "title": "libxml2: Integer Overflow in xmlBuildQName() Leads to Stack Buffer Overflow in libxml2"
-                  },
-                  {
-                    "cve": "CVE-2016-3709",
-                    "cvss": {
-                      "nvd": {
-                        "v3score": "6.1",
-                        "v3vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N"
-                      },
-                      "redhat": {
-                        "v3score": "6.1",
-                        "v3vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-79"
-                    ],
-                    "description": "Possible cross-site scripting vulnerability in libxml after commit 960f0e2.",
-                    "diffID": "sha256:2f458857553769636f3c149c0c8d41acc63c9e24282823b0ea26869a635e9f48",
-                    "fixedVersions": [
-                      "2.9.10+dfsg-6.7+deb11u5"
-                    ],
-                    "installedVersion": "2.9.10+dfsg-6.7+deb11u4",
-                    "packageName": "libxml2",
-                    "purl": "pkg:deb/debian/libxml2@2.9.10%2Bdfsg-6.7%2Bdeb11u4?arch=arm64&distro=debian-11.9",
-                    "references": [
-                      "https://access.redhat.com/errata/RHSA-2022:7715",
-                      "https://access.redhat.com/security/cve/CVE-2016-3709",
-                      "https://bugzilla.redhat.com/2112766",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2112766",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-3709",
-                      "https://errata.almalinux.org/8/ALSA-2022-7715.html",
-                      "https://errata.rockylinux.org/RLSA-2022:7715",
-                      "https://linux.oracle.com/cve/CVE-2016-3709.html",
-                      "https://linux.oracle.com/errata/ELSA-2022-7715.html",
-                      "https://lists.debian.org/debian-lts-announce/2024/09/msg00021.html",
-                      "https://mail.gnome.org/archives/xml/2018-January/msg00010.html",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2016-3709",
-                      "https://ubuntu.com/security/notices/USN-5548-1",
-                      "https://www.cve.org/CVERecord?id=CVE-2016-3709"
-                    ],
-                    "severity": "MEDIUM",
-                    "suppressed": false,
-                    "title": "libxml2: Incorrect server side include parsing can lead to XSS"
-                  },
-                  {
-                    "cve": "CVE-2023-39615",
-                    "cvss": {
-                      "nvd": {
-                        "v3score": "6.5",
-                        "v3vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H"
-                      },
-                      "redhat": {
-                        "v3score": "6.5",
-                        "v3vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-119"
-                    ],
-                    "description": "Xmlsoft Libxml2 v2.11.0 was discovered to contain an out-of-bounds read via the xmlSAX2StartElement() function at /libxml2/SAX2.c. This vulnerability allows attackers to cause a Denial of Service (DoS) via supplying a crafted XML file. NOTE: the vendor's position is that the product does not support the legacy SAX1 interface with custom callbacks; there is a crash even without crafted input.",
-                    "diffID": "sha256:2f458857553769636f3c149c0c8d41acc63c9e24282823b0ea26869a635e9f48",
-                    "fixedVersions": [
-                      "2.9.10+dfsg-6.7+deb11u6"
-                    ],
-                    "installedVersion": "2.9.10+dfsg-6.7+deb11u4",
-                    "packageName": "libxml2",
-                    "purl": "pkg:deb/debian/libxml2@2.9.10%2Bdfsg-6.7%2Bdeb11u4?arch=arm64&distro=debian-11.9",
-                    "references": [
-                      "https://access.redhat.com/errata/RHSA-2024:0119",
-                      "https://access.redhat.com/security/cve/CVE-2023-39615",
-                      "https://bugzilla.redhat.com/2235864",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2235864",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-39615",
-                      "https://errata.almalinux.org/8/ALSA-2024-0119.html",
-                      "https://errata.rockylinux.org/RLSA-2024:0119",
-                      "https://gitlab.gnome.org/GNOME/libxml2/-/issues/535",
-                      "https://linux.oracle.com/cve/CVE-2023-39615.html",
-                      "https://linux.oracle.com/errata/ELSA-2024-0119.html",
-                      "https://lists.debian.org/debian-lts-announce/2025/02/msg00028.html",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2023-39615",
-                      "https://www.cve.org/CVERecord?id=CVE-2023-39615"
-                    ],
-                    "severity": "MEDIUM",
-                    "suppressed": false,
-                    "title": "libxml2: crafted xml can cause global buffer overflow"
-                  },
-                  {
-                    "cve": "CVE-2023-45322",
-                    "cvss": {
-                      "nvd": {
-                        "v3score": "6.5",
-                        "v3vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H"
-                      },
-                      "redhat": {
-                        "v3score": "5.9",
-                        "v3vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-416"
-                    ],
-                    "description": "libxml2 through 2.11.5 has a use-after-free that can only occur after a certain memory allocation fails. This occurs in xmlUnlinkNode in tree.c. NOTE: the vendor's position is \"I don't think these issues are critical enough to warrant a CVE ID ... because an attacker typically can't control when memory allocations fail.\"",
-                    "diffID": "sha256:2f458857553769636f3c149c0c8d41acc63c9e24282823b0ea26869a635e9f48",
-                    "fixedVersions": [
-                      "2.9.10+dfsg-6.7+deb11u6"
-                    ],
-                    "installedVersion": "2.9.10+dfsg-6.7+deb11u4",
-                    "packageName": "libxml2",
-                    "purl": "pkg:deb/debian/libxml2@2.9.10%2Bdfsg-6.7%2Bdeb11u4?arch=arm64&distro=debian-11.9",
-                    "references": [
-                      "http://www.openwall.com/lists/oss-security/2023/10/06/5",
-                      "https://access.redhat.com/security/cve/CVE-2023-45322",
-                      "https://gitlab.gnome.org/GNOME/libxml2/-/issues/344",
-                      "https://gitlab.gnome.org/GNOME/libxml2/-/issues/583",
-                      "https://lists.debian.org/debian-lts-announce/2025/02/msg00028.html",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2023-45322",
-                      "https://www.cve.org/CVERecord?id=CVE-2023-45322"
-                    ],
-                    "severity": "MEDIUM",
-                    "suppressed": false,
-                    "title": "libxml2: use-after-free in xmlUnlinkNode() in tree.c"
-                  },
-                  {
-                    "cve": "CVE-2024-34459",
-                    "cvss": {
-                      "redhat": {
-                        "v3score": "5.5",
-                        "v3vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-122"
-                    ],
-                    "description": "An issue was discovered in xmllint (from libxml2) before 2.11.8 and 2.12.x before 2.12.7. Formatting error messages with xmllint --htmlout can result in a buffer over-read in xmlHTMLPrintFileContext in xmllint.c.",
-                    "diffID": "sha256:2f458857553769636f3c149c0c8d41acc63c9e24282823b0ea26869a635e9f48",
-                    "fixedVersions": [
-                      "2.9.10+dfsg-6.7+deb11u8"
-                    ],
-                    "installedVersion": "2.9.10+dfsg-6.7+deb11u4",
-                    "packageName": "libxml2",
-                    "purl": "pkg:deb/debian/libxml2@2.9.10%2Bdfsg-6.7%2Bdeb11u4?arch=arm64&distro=debian-11.9",
-                    "references": [
-                      "https://access.redhat.com/security/cve/CVE-2024-34459",
-                      "https://gitlab.gnome.org/GNOME/libxml2/-/issues/720",
-                      "https://gitlab.gnome.org/GNOME/libxml2/-/releases/v2.11.8",
-                      "https://gitlab.gnome.org/GNOME/libxml2/-/releases/v2.12.7",
-                      "https://lists.debian.org/debian-lts-announce/2025/07/msg00014.html",
-                      "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/5HVUXKYTBWT3G5DEEQX62STJQBY367NL/",
-                      "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/INKSSLW5VMZIXHRPZBAW4TJUX5SQKARG/",
-                      "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VRDJCNQP32LV56KESUQ5SNZKAJWSZZRI/",
-                      "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/5HVUXKYTBWT3G5DEEQX62STJQBY367NL/",
-                      "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/INKSSLW5VMZIXHRPZBAW4TJUX5SQKARG/",
-                      "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/VRDJCNQP32LV56KESUQ5SNZKAJWSZZRI/",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2024-34459",
-                      "https://ubuntu.com/security/notices/USN-7240-1",
-                      "https://ubuntu.com/security/notices/USN-7302-1",
-                      "https://www.cve.org/CVERecord?id=CVE-2024-34459"
-                    ],
-                    "severity": "MEDIUM",
-                    "suppressed": false,
-                    "title": "libxml2: buffer over-read in xmlHTMLPrintFileContext in xmllint.c"
-                  },
-                  {
-                    "cve": "CVE-2025-9714",
-                    "cvss": {
-                      "nvd": {
-                        "v3score": "5.5",
-                        "v3vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H"
-                      },
-                      "redhat": {
-                        "v3score": "6.2",
-                        "v3vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-674"
-                    ],
-                    "description": "Uncontrolled recursion in XPath evaluation in libxml2 up to and including version 2.9.14 allows a local attacker to cause a stack overflow via crafted expressions. XPath processing functions `xmlXPathRunEval`, `xmlXPathCtxtCompile`, and `xmlXPathEvalExpr` were resetting recursion depth to zero before making potentially recursive calls. When such functions were called recursively this could allow for uncontrolled recursion and lead to a stack overflow. These functions now preserve recursion depth across recursive calls, allowing recursion depth to be controlled.",
-                    "diffID": "sha256:2f458857553769636f3c149c0c8d41acc63c9e24282823b0ea26869a635e9f48",
-                    "fixedVersions": [
-                      "2.9.10+dfsg-6.7+deb11u9"
-                    ],
-                    "installedVersion": "2.9.10+dfsg-6.7+deb11u4",
-                    "packageName": "libxml2",
-                    "purl": "pkg:deb/debian/libxml2@2.9.10%2Bdfsg-6.7%2Bdeb11u4?arch=arm64&distro=debian-11.9",
-                    "references": [
-                      "https://access.redhat.com/errata/RHSA-2025:22376",
-                      "https://access.redhat.com/security/cve/CVE-2025-9714",
-                      "https://bugzilla.redhat.com/2392605",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2392605",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-9714",
-                      "https://errata.almalinux.org/9/ALSA-2025-22376.html",
-                      "https://errata.rockylinux.org/RLSA-2025:22376",
-                      "https://gitlab.gnome.org/GNOME/libxml2/-/commit/677a42645ef22b5a50741bad5facf9d8a8bc6d21",
-                      "https://gitlab.gnome.org/GNOME/libxslt/-/issues/148",
-                      "https://linux.oracle.com/cve/CVE-2025-9714.html",
-                      "https://linux.oracle.com/errata/ELSA-2025-22376.html",
-                      "https://lists.debian.org/debian-lts-announce/2025/09/msg00035.html",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2025-9714",
-                      "https://ubuntu.com/security/notices/USN-7743-1",
-                      "https://www.cve.org/CVERecord?id=CVE-2025-9714"
-                    ],
-                    "severity": "MEDIUM",
-                    "suppressed": false,
-                    "title": "libxslt: libxml2: Inifinite recursion at exsltDynMapFunction function in libexslt/dynamic.c"
-                  },
-                  {
-                    "cve": "CVE-2026-0990",
-                    "cvss": {
-                      "redhat": {
-                        "v3score": "5.9",
-                        "v3vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-674"
-                    ],
-                    "description": "A flaw was found in libxml2, an XML parsing library. This uncontrolled recursion vulnerability occurs in the xmlCatalogXMLResolveURI function when an XML catalog contains a delegate URI entry that references itself. A remote attacker could exploit this configuration-dependent issue by providing a specially crafted XML catalog, leading to infinite recursion and call stack exhaustion. This ultimately results in a segmentation fault, causing a Denial of Service (DoS) by crashing affected applications.",
-                    "diffID": "sha256:2f458857553769636f3c149c0c8d41acc63c9e24282823b0ea26869a635e9f48",
-                    "installedVersion": "2.9.10+dfsg-6.7+deb11u4",
-                    "packageName": "libxml2",
-                    "purl": "pkg:deb/debian/libxml2@2.9.10%2Bdfsg-6.7%2Bdeb11u4?arch=arm64&distro=debian-11.9",
-                    "references": [
-                      "https://access.redhat.com/security/cve/CVE-2026-0990",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2429959",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2026-0990",
-                      "https://ubuntu.com/security/notices/USN-7974-1",
-                      "https://www.cve.org/CVERecord?id=CVE-2026-0990"
-                    ],
-                    "severity": "MEDIUM",
-                    "suppressed": false,
-                    "title": "libxml2: libxml2: Denial of Service via uncontrolled recursion in XML catalog processing"
-                  },
-                  {
-                    "cve": "CVE-2025-6170",
-                    "cvss": {
-                      "nvd": {
-                        "v3score": "2.5",
-                        "v3vector": "CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L"
-                      },
-                      "redhat": {
-                        "v3score": "2.5",
-                        "v3vector": "CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-121"
-                    ],
-                    "description": "A flaw was found in the interactive shell of the xmllint command-line tool, used for parsing XML files. When a user inputs an overly long command, the program does not check the input size properly, which can cause it to crash. This issue might allow attackers to run harmful code in rare configurations without modern protections.",
-                    "diffID": "sha256:2f458857553769636f3c149c0c8d41acc63c9e24282823b0ea26869a635e9f48",
-                    "fixedVersions": [
-                      "2.9.10+dfsg-6.7+deb11u8"
-                    ],
-                    "installedVersion": "2.9.10+dfsg-6.7+deb11u4",
-                    "packageName": "libxml2",
-                    "purl": "pkg:deb/debian/libxml2@2.9.10%2Bdfsg-6.7%2Bdeb11u4?arch=arm64&distro=debian-11.9",
-                    "references": [
-                      "https://access.redhat.com/security/cve/CVE-2025-6170",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2372952",
-                      "https://gitlab.gnome.org/GNOME/libxml2/-/issues/941",
-                      "https://lists.debian.org/debian-lts-announce/2025/07/msg00014.html",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2025-6170",
-                      "https://ubuntu.com/security/notices/USN-7694-1",
-                      "https://www.cve.org/CVERecord?id=CVE-2025-6170"
-                    ],
-                    "severity": "LOW",
-                    "suppressed": false,
-                    "title": "libxml2: Stack Buffer Overflow in xmllint Interactive Shell Command Handling"
-                  },
-                  {
-                    "cve": "CVE-2025-8732",
-                    "cvss": {
-                      "redhat": {
-                        "v3score": "3.3",
-                        "v3vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-404",
-                      "CWE-674"
-                    ],
-                    "description": "A vulnerability was found in libxml2 up to 2.14.5. It has been declared as problematic. This vulnerability affects the function xmlParseSGMLCatalog of the component xmlcatalog. The manipulation leads to uncontrolled recursion. Attacking locally is a requirement. The exploit has been disclosed to the public and may be used. The real existence of this vulnerability is still doubted at the moment. The code maintainer explains, that \"[t]he issue can only be triggered with untrusted SGML catalogs and it makes absolutely no sense to use untrusted catalogs. I also doubt that anyone is still using SGML catalogs at all.\"",
-                    "diffID": "sha256:2f458857553769636f3c149c0c8d41acc63c9e24282823b0ea26869a635e9f48",
-                    "installedVersion": "2.9.10+dfsg-6.7+deb11u4",
-                    "packageName": "libxml2",
-                    "purl": "pkg:deb/debian/libxml2@2.9.10%2Bdfsg-6.7%2Bdeb11u4?arch=arm64&distro=debian-11.9",
-                    "references": [
-                      "https://access.redhat.com/security/cve/CVE-2025-8732",
-                      "https://drive.google.com/file/d/1woIeYVcSQB_NwfEhaVnX6MedpWJ_nqWl/view?usp=drive_link",
-                      "https://gitlab.gnome.org/GNOME/libxml2/-/issues/958",
-                      "https://gitlab.gnome.org/GNOME/libxml2/-/issues/958#note_2505853",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2025-8732",
-                      "https://ubuntu.com/security/notices/USN-7974-1",
-                      "https://vuldb.com/?ctiid.319228",
-                      "https://vuldb.com/?id.319228",
-                      "https://vuldb.com/?submit.622285",
-                      "https://www.cve.org/CVERecord?id=CVE-2025-8732"
-                    ],
-                    "severity": "LOW",
-                    "suppressed": false,
-                    "title": "libxml2: libxml2: Uncontrolled Recursion Vulnerability"
-                  },
-                  {
-                    "cve": "CVE-2026-0989",
-                    "cvss": {
-                      "redhat": {
-                        "v3score": "3.7",
-                        "v3vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-674"
-                    ],
-                    "description": "A flaw was identified in the RelaxNG parser of libxml2 related to how external schema inclusions are handled. The parser does not enforce a limit on inclusion depth when resolving nested <include> directives. Specially crafted or overly complex schemas can cause excessive recursion during parsing. This may lead to stack exhaustion and application crashes, creating a denial-of-service risk.",
-                    "diffID": "sha256:2f458857553769636f3c149c0c8d41acc63c9e24282823b0ea26869a635e9f48",
-                    "installedVersion": "2.9.10+dfsg-6.7+deb11u4",
-                    "packageName": "libxml2",
-                    "purl": "pkg:deb/debian/libxml2@2.9.10%2Bdfsg-6.7%2Bdeb11u4?arch=arm64&distro=debian-11.9",
-                    "references": [
-                      "https://access.redhat.com/security/cve/CVE-2026-0989",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2429933",
-                      "https://gitlab.gnome.org/GNOME/libxml2/-/merge_requests/374",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2026-0989",
-                      "https://ubuntu.com/security/notices/USN-7974-1",
-                      "https://www.cve.org/CVERecord?id=CVE-2026-0989"
-                    ],
-                    "severity": "LOW",
-                    "suppressed": false,
-                    "title": "libxml2: Unbounded RelaxNG Include Recursion Leading to Stack Overflow"
-                  },
-                  {
-                    "cve": "CVE-2026-0992",
-                    "cvss": {
-                      "redhat": {
-                        "v3score": "2.9",
-                        "v3vector": "CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-400"
-                    ],
-                    "description": "A flaw was found in the libxml2 library. This uncontrolled resource consumption vulnerability occurs when processing XML catalogs that contain repeated <nextCatalog> elements pointing to the same downstream catalog. A remote attacker can exploit this by supplying crafted catalogs, causing the parser to redundantly traverse catalog chains. This leads to excessive CPU consumption and degrades application availability, resulting in a denial-of-service condition.",
-                    "diffID": "sha256:2f458857553769636f3c149c0c8d41acc63c9e24282823b0ea26869a635e9f48",
-                    "installedVersion": "2.9.10+dfsg-6.7+deb11u4",
-                    "packageName": "libxml2",
-                    "purl": "pkg:deb/debian/libxml2@2.9.10%2Bdfsg-6.7%2Bdeb11u4?arch=arm64&distro=debian-11.9",
-                    "references": [
-                      "https://access.redhat.com/security/cve/CVE-2026-0992",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2429975",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2026-0992",
-                      "https://ubuntu.com/security/notices/USN-7974-1",
-                      "https://www.cve.org/CVERecord?id=CVE-2026-0992"
-                    ],
-                    "severity": "LOW",
-                    "suppressed": false,
-                    "title": "libxml2: libxml2: Denial of Service via crafted XML catalogs"
-                  },
-                  {
-                    "cve": "CVE-2026-1757",
-                    "cvss": {
-                      "redhat": {
-                        "v3score": "6.2",
-                        "v3vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-401"
-                    ],
-                    "description": "A flaw was identified in the interactive shell of the xmllint utility, part of the libxml2 project, where memory allocated for user input is not properly released under certain conditions. When a user submits input consisting only of whitespace, the program skips command execution but fails to free the allocated buffer. Repeating this action causes memory to continuously accumulate. Over time, this can exhaust system memory and terminate the xmllint process, creating a denial-of-service condition on the local system.",
-                    "diffID": "sha256:2f458857553769636f3c149c0c8d41acc63c9e24282823b0ea26869a635e9f48",
-                    "installedVersion": "2.9.10+dfsg-6.7+deb11u4",
-                    "packageName": "libxml2",
-                    "purl": "pkg:deb/debian/libxml2@2.9.10%2Bdfsg-6.7%2Bdeb11u4?arch=arm64&distro=debian-11.9",
-                    "references": [
-                      "https://access.redhat.com/security/cve/CVE-2026-1757",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2435940",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2026-1757",
-                      "https://www.cve.org/CVERecord?id=CVE-2026-1757"
-                    ],
-                    "severity": "LOW",
-                    "suppressed": false,
-                    "title": "libxml2: Memory Leak Leading to Local Denial of Service in xmllint Interactive Shell"
-                  },
-                  {
-                    "cve": "CVE-2024-55549",
-                    "cvss": {
-                      "nvd": {
-                        "v3score": "7.8",
-                        "v3vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"
-                      },
-                      "redhat": {
-                        "v3score": "7.8",
-                        "v3vector": "CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:N/I:H/A:H"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-416"
-                    ],
-                    "description": "xsltGetInheritedNsList in libxslt before 1.1.43 has a use-after-free issue related to exclusion of result prefixes.",
-                    "diffID": "sha256:2f458857553769636f3c149c0c8d41acc63c9e24282823b0ea26869a635e9f48",
-                    "fixedVersions": [
-                      "1.1.34-4+deb11u2"
-                    ],
-                    "installedVersion": "1.1.34-4+deb11u1",
-                    "packageName": "libxslt1.1",
-                    "purl": "pkg:deb/debian/libxslt1.1@1.1.34-4%2Bdeb11u1?arch=arm64&distro=debian-11.9",
-                    "references": [
-                      "https://access.redhat.com/errata/RHSA-2025:3615",
-                      "https://access.redhat.com/security/cve/CVE-2024-55549",
-                      "https://bugzilla.redhat.com/2352483",
-                      "https://bugzilla.redhat.com/2352484",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2352484",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-55549",
-                      "https://errata.almalinux.org/8/ALSA-2025-3615.html",
-                      "https://errata.rockylinux.org/RLSA-2025:7410",
-                      "https://gitlab.gnome.org/GNOME/libxslt/-/issues/127",
-                      "https://linux.oracle.com/cve/CVE-2024-55549.html",
-                      "https://linux.oracle.com/errata/ELSA-2025-7496.html",
-                      "https://lists.debian.org/debian-lts-announce/2025/03/msg00015.html",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2024-55549",
-                      "https://ubuntu.com/security/notices/USN-7357-1",
-                      "https://ubuntu.com/security/notices/USN-7787-1",
-                      "https://www.cve.org/CVERecord?id=CVE-2024-55549"
-                    ],
-                    "severity": "HIGH",
-                    "suppressed": false,
-                    "title": "libxslt: Use-After-Free in libxslt (xsltGetInheritedNsList)"
-                  },
-                  {
-                    "cve": "CVE-2025-24855",
-                    "cvss": {
-                      "nvd": {
-                        "v3score": "7.8",
-                        "v3vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"
-                      },
-                      "redhat": {
-                        "v3score": "7.8",
-                        "v3vector": "CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:N/I:H/A:H"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-416"
-                    ],
-                    "description": "numbers.c in libxslt before 1.1.43 has a use-after-free because, in nested XPath evaluations, an XPath context node can be modified but never restored. This is related to xsltNumberFormatGetValue, xsltEvalXPathPredicate, xsltEvalXPathStringNs, and xsltComputeSortResultInternal.",
-                    "diffID": "sha256:2f458857553769636f3c149c0c8d41acc63c9e24282823b0ea26869a635e9f48",
-                    "fixedVersions": [
-                      "1.1.34-4+deb11u2"
-                    ],
-                    "installedVersion": "1.1.34-4+deb11u1",
-                    "packageName": "libxslt1.1",
-                    "purl": "pkg:deb/debian/libxslt1.1@1.1.34-4%2Bdeb11u1?arch=arm64&distro=debian-11.9",
-                    "references": [
-                      "https://access.redhat.com/errata/RHSA-2025:3615",
-                      "https://access.redhat.com/security/cve/CVE-2025-24855",
-                      "https://bugzilla.redhat.com/2352483",
-                      "https://bugzilla.redhat.com/2352484",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2352483",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2352484",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-55549",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-24855",
-                      "https://errata.almalinux.org/8/ALSA-2025-3615.html",
-                      "https://errata.rockylinux.org/RLSA-2025:3615",
-                      "https://gitlab.gnome.org/GNOME/libxslt/-/issues/128",
-                      "https://linux.oracle.com/cve/CVE-2025-24855.html",
-                      "https://linux.oracle.com/errata/ELSA-2025-7496.html",
-                      "https://lists.debian.org/debian-lts-announce/2025/03/msg00015.html",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2025-24855",
-                      "https://ubuntu.com/security/notices/USN-7361-1",
-                      "https://ubuntu.com/security/notices/USN-7787-1",
-                      "https://www.cve.org/CVERecord?id=CVE-2025-24855"
-                    ],
-                    "severity": "HIGH",
-                    "suppressed": false,
-                    "title": "libxslt: Use-After-Free in libxslt numbers.c"
-                  },
-                  {
-                    "cve": "CVE-2025-7424",
-                    "cvss": {
-                      "nvd": {
-                        "v3score": "7.5",
-                        "v3vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"
-                      },
-                      "redhat": {
-                        "v3score": "7.5",
-                        "v3vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-843"
-                    ],
-                    "description": "A flaw was found in the libxslt library. The same memory field, psvi, is used for both stylesheet and input data, which can lead to type confusion during XML transformations. This vulnerability allows an attacker to crash the application or corrupt memory. In some cases, it may lead to denial of service or unexpected behavior.",
-                    "diffID": "sha256:2f458857553769636f3c149c0c8d41acc63c9e24282823b0ea26869a635e9f48",
-                    "fixedVersions": [
-                      "1.1.34-4+deb11u3"
-                    ],
-                    "installedVersion": "1.1.34-4+deb11u1",
-                    "packageName": "libxslt1.1",
-                    "purl": "pkg:deb/debian/libxslt1.1@1.1.34-4%2Bdeb11u1?arch=arm64&distro=debian-11.9",
-                    "references": [
-                      "http://seclists.org/fulldisclosure/2025/Aug/0",
-                      "http://seclists.org/fulldisclosure/2025/Jul/30",
-                      "http://seclists.org/fulldisclosure/2025/Jul/32",
-                      "http://seclists.org/fulldisclosure/2025/Jul/33",
-                      "http://seclists.org/fulldisclosure/2025/Jul/35",
-                      "http://seclists.org/fulldisclosure/2025/Jul/37",
-                      "http://www.openwall.com/lists/oss-security/2025/07/11/2",
-                      "https://access.redhat.com/security/cve/CVE-2025-7424",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2379228",
-                      "https://lists.debian.org/debian-lts-announce/2025/09/msg00024.html",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2025-7424",
-                      "https://ubuntu.com/security/notices/USN-7945-1",
-                      "https://www.cve.org/CVERecord?id=CVE-2025-7424"
-                    ],
-                    "severity": "HIGH",
-                    "suppressed": false,
-                    "title": "libxslt: Type confusion in xmlNode.psvi between stylesheet and source nodes"
-                  },
-                  {
-                    "cve": "CVE-2025-7425",
-                    "cvss": {
-                      "redhat": {
-                        "v3score": "7.8",
-                        "v3vector": "CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:N/I:H/A:H"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-416"
-                    ],
-                    "description": "A flaw was found in libxslt where the attribute type, atype, flags are modified in a way that corrupts internal memory management. When XSLT functions, such as the key() process, result in tree fragments, this corruption prevents the proper cleanup of ID attributes. As a result, the system may access freed memory, causing crashes or enabling attackers to trigger heap corruption.",
-                    "diffID": "sha256:2f458857553769636f3c149c0c8d41acc63c9e24282823b0ea26869a635e9f48",
-                    "installedVersion": "1.1.34-4+deb11u1",
-                    "packageName": "libxslt1.1",
-                    "purl": "pkg:deb/debian/libxslt1.1@1.1.34-4%2Bdeb11u1?arch=arm64&distro=debian-11.9",
-                    "references": [
-                      "http://seclists.org/fulldisclosure/2025/Aug/0",
-                      "http://seclists.org/fulldisclosure/2025/Jul/30",
-                      "http://seclists.org/fulldisclosure/2025/Jul/32",
-                      "http://seclists.org/fulldisclosure/2025/Jul/35",
-                      "http://seclists.org/fulldisclosure/2025/Jul/37",
-                      "http://www.openwall.com/lists/oss-security/2025/07/11/2",
-                      "https://access.redhat.com/errata/RHSA-2025:12447",
-                      "https://access.redhat.com/errata/RHSA-2025:12450",
-                      "https://access.redhat.com/errata/RHSA-2025:13267",
-                      "https://access.redhat.com/errata/RHSA-2025:13308",
-                      "https://access.redhat.com/errata/RHSA-2025:13309",
-                      "https://access.redhat.com/errata/RHSA-2025:13310",
-                      "https://access.redhat.com/errata/RHSA-2025:13311",
-                      "https://access.redhat.com/errata/RHSA-2025:13312",
-                      "https://access.redhat.com/errata/RHSA-2025:13313",
-                      "https://access.redhat.com/errata/RHSA-2025:13314",
-                      "https://access.redhat.com/errata/RHSA-2025:13335",
-                      "https://access.redhat.com/errata/RHSA-2025:13464",
-                      "https://access.redhat.com/errata/RHSA-2025:13622",
-                      "https://access.redhat.com/errata/RHSA-2025:14059",
-                      "https://access.redhat.com/errata/RHSA-2025:14396",
-                      "https://access.redhat.com/errata/RHSA-2025:14818",
-                      "https://access.redhat.com/errata/RHSA-2025:14819",
-                      "https://access.redhat.com/errata/RHSA-2025:14853",
-                      "https://access.redhat.com/errata/RHSA-2025:14858",
-                      "https://access.redhat.com/errata/RHSA-2025:15308",
-                      "https://access.redhat.com/errata/RHSA-2025:15672",
-                      "https://access.redhat.com/errata/RHSA-2025:15827",
-                      "https://access.redhat.com/errata/RHSA-2025:15828",
-                      "https://access.redhat.com/errata/RHSA-2025:18219",
-                      "https://access.redhat.com/errata/RHSA-2025:21885",
-                      "https://access.redhat.com/errata/RHSA-2025:21913",
-                      "https://access.redhat.com/errata/RHSA-2026:0934",
-                      "https://access.redhat.com/security/cve/CVE-2025-7425",
-                      "https://bugzilla.redhat.com/2379274",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2379274",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-7425",
-                      "https://errata.almalinux.org/8/ALSA-2025-12450.html",
-                      "https://errata.rockylinux.org/RLSA-2025:12447",
-                      "https://gitlab.gnome.org/GNOME/libxslt/-/issues/140",
-                      "https://linux.oracle.com/cve/CVE-2025-7425.html",
-                      "https://linux.oracle.com/errata/ELSA-2025-13464.html",
-                      "https://lists.debian.org/debian-lts-announce/2025/09/msg00035.html",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2025-7425",
-                      "https://ubuntu.com/security/notices/USN-7852-1",
-                      "https://ubuntu.com/security/notices/USN-7852-2",
-                      "https://ubuntu.com/security/notices/USN-7896-1",
-                      "https://www.cve.org/CVERecord?id=CVE-2025-7425"
-                    ],
-                    "severity": "HIGH",
-                    "suppressed": false,
-                    "title": "libxslt: Heap Use-After-Free in libxslt caused by atype corruption in xmlAttrPtr"
-                  },
-                  {
-                    "cve": "CVE-2023-40403",
-                    "cvss": {
-                      "nvd": {
-                        "v3score": "6.5",
-                        "v3vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N"
-                      },
-                      "redhat": {
-                        "v3score": "6.5",
-                        "v3vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N"
-                      }
-                    },
-                    "description": "The issue was addressed with improved memory handling. This issue is fixed in macOS Ventura 13.6, tvOS 17, iOS 16.7 and iPadOS 16.7, macOS Monterey 12.7, watchOS 10, iOS 17 and iPadOS 17, macOS Sonoma 14. Processing web content may disclose sensitive information.",
-                    "diffID": "sha256:2f458857553769636f3c149c0c8d41acc63c9e24282823b0ea26869a635e9f48",
-                    "fixedVersions": [
-                      "1.1.34-4+deb11u3"
-                    ],
-                    "installedVersion": "1.1.34-4+deb11u1",
-                    "packageName": "libxslt1.1",
-                    "purl": "pkg:deb/debian/libxslt1.1@1.1.34-4%2Bdeb11u1?arch=arm64&distro=debian-11.9",
-                    "references": [
-                      "http://seclists.org/fulldisclosure/2023/Oct/10",
-                      "http://seclists.org/fulldisclosure/2023/Oct/3",
-                      "http://seclists.org/fulldisclosure/2023/Oct/4",
-                      "http://seclists.org/fulldisclosure/2023/Oct/5",
-                      "http://seclists.org/fulldisclosure/2023/Oct/6",
-                      "http://seclists.org/fulldisclosure/2023/Oct/8",
-                      "http://seclists.org/fulldisclosure/2023/Oct/9",
-                      "https://access.redhat.com/errata/RHSA-2025:8676",
-                      "https://access.redhat.com/security/cve/CVE-2023-40403",
-                      "https://bugs.chromium.org/p/chromium/issues/detail?id=1356211",
-                      "https://bugzilla.gnome.org/show_bug.cgi?id=751621",
-                      "https://bugzilla.redhat.com/2349766",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2349766",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-40403",
-                      "https://errata.almalinux.org/8/ALSA-2025-8676.html",
-                      "https://errata.rockylinux.org/RLSA-2025:8676",
-                      "https://gitlab.gnome.org/GNOME/libxslt/-/issues/94",
-                      "https://linux.oracle.com/cve/CVE-2023-40403.html",
-                      "https://linux.oracle.com/errata/ELSA-2025-8676.html",
-                      "https://lists.debian.org/debian-lts-announce/2025/09/msg00024.html",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2023-40403",
-                      "https://support.apple.com/en-us/HT213927",
-                      "https://support.apple.com/en-us/HT213931",
-                      "https://support.apple.com/en-us/HT213932",
-                      "https://support.apple.com/en-us/HT213936",
-                      "https://support.apple.com/en-us/HT213937",
-                      "https://support.apple.com/en-us/HT213938",
-                      "https://support.apple.com/en-us/HT213940",
-                      "https://support.apple.com/kb/HT213931",
-                      "https://support.apple.com/kb/HT213932",
-                      "https://support.apple.com/kb/HT213936",
-                      "https://support.apple.com/kb/HT213937",
-                      "https://support.apple.com/kb/HT213938",
-                      "https://support.apple.com/kb/HT213940",
-                      "https://ubuntu.com/security/notices/USN-7600-1",
-                      "https://www.cve.org/CVERecord?id=CVE-2023-40403"
-                    ],
-                    "severity": "MEDIUM",
-                    "suppressed": false,
-                    "title": "libxslt: Processing web content may disclose sensitive information"
-                  },
-                  {
-                    "cve": "CVE-2025-10911",
-                    "cvss": {
-                      "redhat": {
-                        "v3score": "5.5",
-                        "v3vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-825"
-                    ],
-                    "description": "A use-after-free vulnerability was found in libxslt while parsing xsl nodes that may lead to the dereference of expired pointers and application crash.",
-                    "diffID": "sha256:2f458857553769636f3c149c0c8d41acc63c9e24282823b0ea26869a635e9f48",
-                    "installedVersion": "1.1.34-4+deb11u1",
-                    "packageName": "libxslt1.1",
-                    "purl": "pkg:deb/debian/libxslt1.1@1.1.34-4%2Bdeb11u1?arch=arm64&distro=debian-11.9",
-                    "references": [
-                      "https://access.redhat.com/security/cve/CVE-2025-10911",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2397838",
-                      "https://gitlab.gnome.org/GNOME/libxslt/-/issues/144",
-                      "https://gitlab.gnome.org/GNOME/libxslt/-/merge_requests/77",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2025-10911",
-                      "https://www.cve.org/CVERecord?id=CVE-2025-10911"
-                    ],
-                    "severity": "MEDIUM",
-                    "suppressed": false,
-                    "title": "libxslt: use-after-free with key data stored cross-RVT"
-                  },
-                  {
-                    "cve": "CVE-2015-9019",
-                    "cvss": {
-                      "nvd": {
-                        "v3score": "5.3",
-                        "v3vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N"
-                      },
-                      "redhat": {
-                        "v3score": "4",
-                        "v3vector": "CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-330"
-                    ],
-                    "description": "In libxslt 1.1.29 and earlier, the EXSLT math.random function was not initialized with a random seed during startup, which could cause usage of this function to produce predictable outputs.",
-                    "diffID": "sha256:2f458857553769636f3c149c0c8d41acc63c9e24282823b0ea26869a635e9f48",
-                    "installedVersion": "1.1.34-4+deb11u1",
-                    "packageName": "libxslt1.1",
-                    "purl": "pkg:deb/debian/libxslt1.1@1.1.34-4%2Bdeb11u1?arch=arm64&distro=debian-11.9",
-                    "references": [
-                      "https://access.redhat.com/security/cve/CVE-2015-9019",
-                      "https://bugzilla.gnome.org/show_bug.cgi?id=758400",
-                      "https://bugzilla.suse.com/show_bug.cgi?id=934119",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2015-9019",
-                      "https://www.cve.org/CVERecord?id=CVE-2015-9019"
-                    ],
-                    "severity": "LOW",
-                    "suppressed": false,
-                    "title": "libxslt: math.random() in xslt uses unseeded randomness"
-                  },
-                  {
-                    "cve": "CVE-2025-11731",
-                    "cvss": {
-                      "redhat": {
-                        "v3score": "3.1",
-                        "v3vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-843"
-                    ],
-                    "description": "A flaw was found in the exsltFuncResultComp() function of libxslt, which handles EXSLT <func:result> elements during stylesheet parsing. Due to improper type handling, the function may treat an XML document node as a regular XML element node, resulting in a type confusion. This can cause unexpected memory reads and potential crashes. While difficult to exploit, the flaw could lead to application instability or denial of service.",
-                    "diffID": "sha256:2f458857553769636f3c149c0c8d41acc63c9e24282823b0ea26869a635e9f48",
-                    "installedVersion": "1.1.34-4+deb11u1",
-                    "packageName": "libxslt1.1",
-                    "purl": "pkg:deb/debian/libxslt1.1@1.1.34-4%2Bdeb11u1?arch=arm64&distro=debian-11.9",
-                    "references": [
-                      "https://access.redhat.com/security/cve/CVE-2025-11731",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2403688",
-                      "https://gitlab.gnome.org/GNOME/libxslt/-/merge_requests/78",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2025-11731",
-                      "https://www.cve.org/CVERecord?id=CVE-2025-11731"
-                    ],
-                    "severity": "LOW",
-                    "suppressed": false,
-                    "title": "libxslt: Type Confusion in exsltFuncResultCompfunction of libxslt"
-                  },
-                  {
-                    "cve": "CVE-2022-4899",
-                    "cvss": {
-                      "ghsa": {
-                        "v3score": "7.5",
-                        "v3vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"
-                      },
-                      "nvd": {
-                        "v3score": "7.5",
-                        "v3vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"
-                      },
-                      "redhat": {
-                        "v3score": "7.5",
-                        "v3vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-400"
-                    ],
-                    "description": "A vulnerability was found in zstd v1.4.10, where an attacker can supply empty string as an argument to the command line tool to cause buffer overrun.",
-                    "diffID": "sha256:a499da141b419b2e97ed40192951a05fc37fadec129a55e1de03773e23fff97b",
-                    "installedVersion": "1.4.8+dfsg-2.1",
-                    "packageName": "libzstd1",
-                    "purl": "pkg:deb/debian/libzstd1@1.4.8%2Bdfsg-2.1?arch=arm64&distro=debian-11.9",
-                    "references": [
-                      "https://access.redhat.com/errata/RHSA-2024:0894",
-                      "https://access.redhat.com/security/cve/CVE-2022-4899",
-                      "https://bugzilla.redhat.com/2179864",
-                      "https://bugzilla.redhat.com/2188109",
-                      "https://bugzilla.redhat.com/2188113",
-                      "https://bugzilla.redhat.com/2188115",
-                      "https://bugzilla.redhat.com/2188116",
-                      "https://bugzilla.redhat.com/2188117",
-                      "https://bugzilla.redhat.com/2188118",
-                      "https://bugzilla.redhat.com/2188119",
-                      "https://bugzilla.redhat.com/2188120",
-                      "https://bugzilla.redhat.com/2188121",
-                      "https://bugzilla.redhat.com/2188122",
-                      "https://bugzilla.redhat.com/2188123",
-                      "https://bugzilla.redhat.com/2188124",
-                      "https://bugzilla.redhat.com/2188125",
-                      "https://bugzilla.redhat.com/2188127",
-                      "https://bugzilla.redhat.com/2188128",
-                      "https://bugzilla.redhat.com/2188129",
-                      "https://bugzilla.redhat.com/2188130",
-                      "https://bugzilla.redhat.com/2188131",
-                      "https://bugzilla.redhat.com/2188132",
-                      "https://bugzilla.redhat.com/2224211",
-                      "https://bugzilla.redhat.com/2224212",
-                      "https://bugzilla.redhat.com/2224213",
-                      "https://bugzilla.redhat.com/2224214",
-                      "https://bugzilla.redhat.com/2224215",
-                      "https://bugzilla.redhat.com/2224216",
-                      "https://bugzilla.redhat.com/2224217",
-                      "https://bugzilla.redhat.com/2224218",
-                      "https://bugzilla.redhat.com/2224219",
-                      "https://bugzilla.redhat.com/2224220",
-                      "https://bugzilla.redhat.com/2224221",
-                      "https://bugzilla.redhat.com/2224222",
-                      "https://bugzilla.redhat.com/2245014",
-                      "https://bugzilla.redhat.com/2245015",
-                      "https://bugzilla.redhat.com/2245016",
-                      "https://bugzilla.redhat.com/2245017",
-                      "https://bugzilla.redhat.com/2245018",
-                      "https://bugzilla.redhat.com/2245019",
-                      "https://bugzilla.redhat.com/2245020",
-                      "https://bugzilla.redhat.com/2245021",
-                      "https://bugzilla.redhat.com/2245022",
-                      "https://bugzilla.redhat.com/2245023",
-                      "https://bugzilla.redhat.com/2245024",
-                      "https://bugzilla.redhat.com/2245026",
-                      "https://bugzilla.redhat.com/2245027",
-                      "https://bugzilla.redhat.com/2245028",
-                      "https://bugzilla.redhat.com/2245029",
-                      "https://bugzilla.redhat.com/2245030",
-                      "https://bugzilla.redhat.com/2245031",
-                      "https://bugzilla.redhat.com/2245032",
-                      "https://bugzilla.redhat.com/2245033",
-                      "https://bugzilla.redhat.com/2245034",
-                      "https://bugzilla.redhat.com/2258771",
-                      "https://bugzilla.redhat.com/2258772",
-                      "https://bugzilla.redhat.com/2258773",
-                      "https://bugzilla.redhat.com/2258774",
-                      "https://bugzilla.redhat.com/2258775",
-                      "https://bugzilla.redhat.com/2258776",
-                      "https://bugzilla.redhat.com/2258777",
-                      "https://bugzilla.redhat.com/2258778",
-                      "https://bugzilla.redhat.com/2258779",
-                      "https://bugzilla.redhat.com/2258780",
-                      "https://bugzilla.redhat.com/2258781",
-                      "https://bugzilla.redhat.com/2258782",
-                      "https://bugzilla.redhat.com/2258783",
-                      "https://bugzilla.redhat.com/2258784",
-                      "https://bugzilla.redhat.com/2258785",
-                      "https://bugzilla.redhat.com/2258787",
-                      "https://bugzilla.redhat.com/2258788",
-                      "https://bugzilla.redhat.com/2258789",
-                      "https://bugzilla.redhat.com/2258790",
-                      "https://bugzilla.redhat.com/2258791",
-                      "https://bugzilla.redhat.com/2258792",
-                      "https://bugzilla.redhat.com/2258793",
-                      "https://bugzilla.redhat.com/2258794",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2179864",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2188109",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2188113",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2188115",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2188116",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2188117",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2188118",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2188119",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2188120",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2188121",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2188122",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2188123",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2188124",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2188125",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2188127",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2188128",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2188129",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2188130",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2188131",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2188132",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2224211",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2224212",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2224213",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2224214",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2224215",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2224216",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2224217",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2224218",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2224219",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2224220",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2224221",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2224222",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2245014",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2245015",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2245016",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2245017",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2245018",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2245019",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2245020",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2245021",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2245022",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2245023",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2245024",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2245026",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2245027",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2245028",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2245029",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2245030",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2245031",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2245032",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2245033",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2245034",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2258771",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2258772",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2258773",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2258774",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2258775",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2258776",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2258777",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2258778",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2258779",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2258780",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2258781",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2258782",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2258783",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2258784",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2258785",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2258787",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2258788",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2258789",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2258790",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2258791",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2258792",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2258793",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2258794",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4899",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-21911",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-21919",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-21920",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-21929",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-21933",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-21935",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-21940",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-21945",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-21946",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-21947",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-21953",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-21955",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-21962",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-21966",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-21972",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-21976",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-21977",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-21980",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-21982",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-22005",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-22007",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-22008",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-22032",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-22033",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-22038",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-22046",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-22048",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-22053",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-22054",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-22056",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-22057",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-22058",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-22059",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-22064",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-22065",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-22066",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-22068",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-22070",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-22078",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-22079",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-22084",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-22092",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-22097",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-22103",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-22104",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-22110",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-22111",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-22112",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-22113",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-22114",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-22115",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-20960",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-20961",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-20962",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-20963",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-20964",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-20965",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-20966",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-20967",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-20968",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-20969",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-20970",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-20971",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-20972",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-20973",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-20974",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-20976",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-20977",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-20978",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-20981",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-20982",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-20983",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-20984",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-20985",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-20993",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-21049",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-21050",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-21051",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-21052",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-21053",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-21055",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-21056",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-21057",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-21061",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-21137",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-21200",
-                      "https://errata.almalinux.org/8/ALSA-2024-0894.html",
-                      "https://errata.rockylinux.org/RLSA-2024:0894",
-                      "https://github.com/facebook/zstd",
-                      "https://github.com/facebook/zstd/issues/3200",
-                      "https://github.com/facebook/zstd/pull/3220",
-                      "https://github.com/pypa/advisory-database/tree/main/vulns/zstd/PYSEC-2023-121.yaml",
-                      "https://github.com/sergey-dryabzhinsky/python-zstd/commit/c8a619aebdbd6b838fbfef6e19325a70f631a4c6",
-                      "https://linux.oracle.com/cve/CVE-2022-4899.html",
-                      "https://linux.oracle.com/errata/ELSA-2024-1141.html",
-                      "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/C63HAGVLQA6FJNDCHR7CNZZL6VSLILB2/",
-                      "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JEHRBBYYTPA4DETOM5XAKGCP37NUTLOA/",
-                      "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/QYLDK6ODVC4LJSDULLX6Q2YHTFOWABCN/",
-                      "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/C63HAGVLQA6FJNDCHR7CNZZL6VSLILB2",
-                      "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/JEHRBBYYTPA4DETOM5XAKGCP37NUTLOA",
-                      "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/QYLDK6ODVC4LJSDULLX6Q2YHTFOWABCN",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2022-4899",
-                      "https://security.netapp.com/advisory/ntap-20230725-0005",
-                      "https://security.netapp.com/advisory/ntap-20230725-0005/",
-                      "https://www.cve.org/CVERecord?id=CVE-2022-4899"
-                    ],
-                    "severity": "HIGH",
-                    "suppressed": false,
-                    "title": "zstd: mysql: buffer overrun in util.c"
-                  },
-                  {
-                    "cve": "CVE-2023-4641",
-                    "cvss": {
-                      "nvd": {
-                        "v3score": "5.5",
-                        "v3vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N"
-                      },
-                      "redhat": {
-                        "v3score": "4.7",
-                        "v3vector": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-303",
-                      "CWE-287"
-                    ],
-                    "description": "A flaw was found in shadow-utils. When asking for a new password, shadow-utils asks the password twice. If the password fails on the second attempt, shadow-utils fails in cleaning the buffer used to store the first entry. This may allow an attacker with enough access to retrieve the password from the memory.",
-                    "diffID": "sha256:a499da141b419b2e97ed40192951a05fc37fadec129a55e1de03773e23fff97b",
-                    "fixedVersions": [
-                      "1:4.8.1-1+deb11u1"
-                    ],
-                    "installedVersion": "1:4.8.1-1",
-                    "packageName": "login",
-                    "purl": "pkg:deb/debian/login@4.8.1-1?arch=arm64&distro=debian-11.9&epoch=1",
-                    "references": [
-                      "https://access.redhat.com/errata/RHSA-2023:6632",
-                      "https://access.redhat.com/errata/RHSA-2023:7112",
-                      "https://access.redhat.com/errata/RHSA-2024:0417",
-                      "https://access.redhat.com/errata/RHSA-2024:2577",
-                      "https://access.redhat.com/security/cve/CVE-2023-4641",
-                      "https://bugzilla.redhat.com/2215945",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2215945",
-                      "https://errata.almalinux.org/8/ALSA-2023-7112.html",
-                      "https://linux.oracle.com/cve/CVE-2023-4641.html",
-                      "https://linux.oracle.com/errata/ELSA-2023-7112.html",
-                      "https://lists.debian.org/debian-lts-announce/2025/04/msg00026.html",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2023-4641",
-                      "https://ubuntu.com/security/notices/USN-6640-1",
-                      "https://www.cve.org/CVERecord?id=CVE-2023-4641"
-                    ],
-                    "severity": "MEDIUM",
-                    "suppressed": false,
-                    "title": "shadow-utils: possible password leak during passwd(1) change"
-                  },
-                  {
-                    "cve": "CVE-2007-5686",
-                    "cvss": {
-                      "nvd": {
-                        "v3score": "0",
-                        "v3vector": ""
-                      }
-                    },
-                    "cwes": [
-                      "CWE-264"
-                    ],
-                    "description": "initscripts in rPath Linux 1 sets insecure permissions for the /var/log/btmp file, which allows local users to obtain sensitive information regarding authentication attempts.  NOTE: because sshd detects the insecure permissions and does not log certain events, this also prevents sshd from logging failed authentication attempts by remote attackers.",
-                    "diffID": "sha256:a499da141b419b2e97ed40192951a05fc37fadec129a55e1de03773e23fff97b",
-                    "installedVersion": "1:4.8.1-1",
-                    "packageName": "login",
-                    "purl": "pkg:deb/debian/login@4.8.1-1?arch=arm64&distro=debian-11.9&epoch=1",
-                    "references": [
-                      "http://secunia.com/advisories/27215",
-                      "http://www.securityfocus.com/archive/1/482129/100/100/threaded",
-                      "http://www.securityfocus.com/archive/1/482857/100/0/threaded",
-                      "http://www.securityfocus.com/bid/26048",
-                      "http://www.vupen.com/english/advisories/2007/3474",
-                      "https://issues.rpath.com/browse/RPL-1825"
-                    ],
-                    "severity": "LOW",
-                    "suppressed": false,
-                    "title": "initscripts in rPath Linux 1 sets insecure permissions for the /var/lo ..."
-                  },
-                  {
-                    "cve": "CVE-2013-4235",
-                    "cvss": {
-                      "nvd": {
-                        "v3score": "4.7",
-                        "v3vector": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:N"
-                      },
-                      "redhat": {
-                        "v3score": "4.4",
-                        "v3vector": "CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:N/I:H/A:N"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-367"
-                    ],
-                    "description": "shadow: TOCTOU (time-of-check time-of-use) race condition when copying and removing directory trees",
-                    "diffID": "sha256:a499da141b419b2e97ed40192951a05fc37fadec129a55e1de03773e23fff97b",
-                    "installedVersion": "1:4.8.1-1",
-                    "packageName": "login",
-                    "purl": "pkg:deb/debian/login@4.8.1-1?arch=arm64&distro=debian-11.9&epoch=1",
-                    "references": [
-                      "https://access.redhat.com/security/cve/CVE-2013-4235",
-                      "https://access.redhat.com/security/cve/cve-2013-4235",
-                      "https://bugs.launchpad.net/ubuntu/+source/shadow/+bug/1998169",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2013-4235",
-                      "https://github.com/shadow-maint/shadow/issues/317",
-                      "https://github.com/shadow-maint/shadow/pull/545",
-                      "https://lists.apache.org/thread.html/rf9fa47ab66495c78bb4120b0754dd9531ca2ff0430f6685ac9b07772%40%3Cdev.mina.apache.org%3E",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2013-4235",
-                      "https://security-tracker.debian.org/tracker/CVE-2013-4235",
-                      "https://security.gentoo.org/glsa/202210-26",
-                      "https://ubuntu.com/security/notices/USN-5745-1",
-                      "https://ubuntu.com/security/notices/USN-5745-2",
-                      "https://www.cve.org/CVERecord?id=CVE-2013-4235"
-                    ],
-                    "severity": "LOW",
-                    "suppressed": false,
-                    "title": "shadow-utils: TOCTOU race conditions by copying and removing directory trees"
-                  },
-                  {
-                    "cve": "CVE-2023-29383",
-                    "cvss": {
-                      "nvd": {
-                        "v3score": "3.3",
-                        "v3vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N"
-                      },
-                      "redhat": {
-                        "v3score": "5.5",
-                        "v3vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-74",
-                      "CWE-125"
-                    ],
-                    "description": "In Shadow 4.13, it is possible to inject control characters into fields provided to the SUID program chfn (change finger). Although it is not possible to exploit this directly (e.g., adding a new user fails because \\n is in the block list), it is possible to misrepresent the /etc/passwd file when viewed. Use of \\r manipulations and Unicode characters to work around blocking of the : character make it possible to give the impression that a new user has been added. In other words, an adversary may be able to convince a system administrator to take the system offline (an indirect, social-engineered denial of service) by demonstrating that \"cat /etc/passwd\" shows a rogue user account.",
-                    "diffID": "sha256:a499da141b419b2e97ed40192951a05fc37fadec129a55e1de03773e23fff97b",
-                    "fixedVersions": [
-                      "1:4.8.1-1+deb11u1"
-                    ],
-                    "installedVersion": "1:4.8.1-1",
-                    "packageName": "login",
-                    "purl": "pkg:deb/debian/login@4.8.1-1?arch=arm64&distro=debian-11.9&epoch=1",
-                    "references": [
-                      "https://access.redhat.com/security/cve/CVE-2023-29383",
-                      "https://github.com/shadow-maint/shadow/commit/e5905c4b84d4fb90aefcd96ee618411ebfac663d",
-                      "https://github.com/shadow-maint/shadow/pull/687",
-                      "https://lists.debian.org/debian-lts-announce/2025/04/msg00026.html",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2023-29383",
-                      "https://www.cve.org/CVERecord?id=CVE-2023-29383",
-                      "https://www.trustwave.com/en-us/resources/blogs/spiderlabs-blog/cve-2023-29383-abusing-linux-chfn-to-misrepresent-etc-passwd/",
-                      "https://www.trustwave.com/en-us/resources/security-resources/security-advisories/?fid=31797"
-                    ],
-                    "severity": "LOW",
-                    "suppressed": false,
-                    "title": "shadow: Improper input validation in shadow-utils package utility chfn"
-                  },
-                  {
-                    "cve": "CVE-2024-56433",
-                    "cvss": {
-                      "redhat": {
-                        "v3score": "3.6",
-                        "v3vector": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:N"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-1188"
-                    ],
-                    "description": "shadow-utils (aka shadow) 4.4 through 4.17.0 establishes a default /etc/subuid behavior (e.g., uid 100000 through 165535 for the first user account) that can realistically conflict with the uids of users defined on locally administered networks, potentially leading to account takeover, e.g., by leveraging newuidmap for access to an NFS home directory (or same-host resources in the case of remote logins by these local network users). NOTE: it may also be argued that system administrators should not have assigned uids, within local networks, that are within the range that can occur in /etc/subuid.",
-                    "diffID": "sha256:a499da141b419b2e97ed40192951a05fc37fadec129a55e1de03773e23fff97b",
-                    "installedVersion": "1:4.8.1-1",
-                    "packageName": "login",
-                    "purl": "pkg:deb/debian/login@4.8.1-1?arch=arm64&distro=debian-11.9&epoch=1",
-                    "references": [
-                      "https://access.redhat.com/errata/RHSA-2025:20145",
-                      "https://access.redhat.com/security/cve/CVE-2024-56433",
-                      "https://bugzilla.redhat.com/2334165",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2334165",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-56433",
-                      "https://errata.almalinux.org/10/ALSA-2025-20145.html",
-                      "https://errata.rockylinux.org/RLSA-2025:20559",
-                      "https://github.com/shadow-maint/shadow/blob/e2512d5741d4a44bdd81a8c2d0029b6222728cf0/etc/login.defs#L238-L241",
-                      "https://github.com/shadow-maint/shadow/issues/1157",
-                      "https://github.com/shadow-maint/shadow/releases/tag/4.4",
-                      "https://linux.oracle.com/cve/CVE-2024-56433.html",
-                      "https://linux.oracle.com/errata/ELSA-2025-20559-0.html",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2024-56433",
-                      "https://www.cve.org/CVERecord?id=CVE-2024-56433"
-                    ],
-                    "severity": "LOW",
-                    "suppressed": false,
-                    "title": "shadow-utils: Default subordinate ID configuration in /etc/login.defs could lead to compromise"
-                  },
-                  {
-                    "cve": "TEMP-0628843-DBAD28",
-                    "diffID": "sha256:a499da141b419b2e97ed40192951a05fc37fadec129a55e1de03773e23fff97b",
-                    "installedVersion": "1:4.8.1-1",
-                    "packageName": "login",
-                    "purl": "pkg:deb/debian/login@4.8.1-1?arch=arm64&distro=debian-11.9&epoch=1",
-                    "severity": "LOW",
-                    "suppressed": false,
-                    "title": "[more related to CVE-2005-4890]"
-                  },
-                  {
-                    "cve": "CVE-2022-1304",
-                    "cvss": {
-                      "nvd": {
-                        "v3score": "7.8",
-                        "v3vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H"
-                      },
-                      "redhat": {
-                        "v3score": "5.8",
-                        "v3vector": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:H"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-125",
-                      "CWE-787"
-                    ],
-                    "description": "An out-of-bounds read/write vulnerability was found in e2fsprogs 1.46.5. This issue leads to a segmentation fault and possibly arbitrary code execution via a specially crafted filesystem.",
-                    "diffID": "sha256:a499da141b419b2e97ed40192951a05fc37fadec129a55e1de03773e23fff97b",
-                    "fixedVersions": [
-                      "1.46.2-2+deb11u1"
-                    ],
-                    "installedVersion": "1.46.2-2",
-                    "packageName": "logsave",
-                    "purl": "pkg:deb/debian/logsave@1.46.2-2?arch=arm64&distro=debian-11.9",
-                    "references": [
-                      "https://access.redhat.com/errata/RHSA-2022:7720",
-                      "https://access.redhat.com/security/cve/CVE-2022-1304",
-                      "https://bugzilla.redhat.com/2069726",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2069726",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-1304",
-                      "https://errata.almalinux.org/8/ALSA-2022-7720.html",
-                      "https://errata.rockylinux.org/RLSA-2022:8361",
-                      "https://linux.oracle.com/cve/CVE-2022-1304.html",
-                      "https://linux.oracle.com/errata/ELSA-2024-12731.html",
-                      "https://lists.debian.org/debian-lts-announce/2024/10/msg00001.html",
-                      "https://marc.info/?l=linux-ext4&m=165056234501732&w=2",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2022-1304",
-                      "https://security.netapp.com/advisory/ntap-20241122-0010/",
-                      "https://ubuntu.com/security/notices/USN-5464-1",
-                      "https://www.cve.org/CVERecord?id=CVE-2022-1304"
-                    ],
-                    "severity": "HIGH",
-                    "suppressed": false,
-                    "title": "e2fsprogs: out-of-bounds read/write via crafted filesystem"
-                  },
-                  {
-                    "cve": "CVE-2025-14104",
-                    "cvss": {
-                      "redhat": {
-                        "v3score": "6.1",
-                        "v3vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-125"
-                    ],
-                    "description": "A flaw was found in util-linux. This vulnerability allows a heap buffer overread when processing 256-byte usernames, specifically within the `setpwnam()` function, affecting SUID (Set User ID) login-utils utilities writing to the password database.",
-                    "diffID": "sha256:a499da141b419b2e97ed40192951a05fc37fadec129a55e1de03773e23fff97b",
-                    "installedVersion": "2.36.1-8+deb11u2",
-                    "packageName": "mount",
-                    "purl": "pkg:deb/debian/mount@2.36.1-8%2Bdeb11u2?arch=arm64&distro=debian-11.9",
-                    "references": [
-                      "https://access.redhat.com/errata/RHSA-2026:1696",
-                      "https://access.redhat.com/errata/RHSA-2026:1852",
-                      "https://access.redhat.com/errata/RHSA-2026:1913",
-                      "https://access.redhat.com/security/cve/CVE-2025-14104",
-                      "https://bugzilla.redhat.com/2419369",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2419369",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-14104",
-                      "https://errata.almalinux.org/10/ALSA-2026-1696.html",
-                      "https://errata.rockylinux.org/RLSA-2026:1913",
-                      "https://linux.oracle.com/cve/CVE-2025-14104.html",
-                      "https://linux.oracle.com/errata/ELSA-2026-1913.html",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2025-14104",
-                      "https://www.cve.org/CVERecord?id=CVE-2025-14104"
-                    ],
-                    "severity": "MEDIUM",
-                    "suppressed": false,
-                    "title": "util-linux: util-linux: Heap buffer overread in setpwnam() when processing 256-byte usernames"
-                  },
-                  {
-                    "cve": "CVE-2022-0563",
-                    "cvss": {
-                      "nvd": {
-                        "v3score": "5.5",
-                        "v3vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N"
-                      },
-                      "redhat": {
-                        "v3score": "5.5",
-                        "v3vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-209"
-                    ],
-                    "description": "A flaw was found in the util-linux chfn and chsh utilities when compiled with Readline support. The Readline library uses an \"INPUTRC\" environment variable to get a path to the library config file. When the library cannot parse the specified file, it prints an error message containing data from the file. This flaw allows an unprivileged user to read root-owned files, potentially leading to privilege escalation. This flaw affects util-linux versions prior to 2.37.4.",
-                    "diffID": "sha256:a499da141b419b2e97ed40192951a05fc37fadec129a55e1de03773e23fff97b",
-                    "installedVersion": "2.36.1-8+deb11u2",
-                    "packageName": "mount",
-                    "purl": "pkg:deb/debian/mount@2.36.1-8%2Bdeb11u2?arch=arm64&distro=debian-11.9",
-                    "references": [
-                      "https://access.redhat.com/security/cve/CVE-2022-0563",
-                      "https://blog.trailofbits.com/2023/02/16/suid-logic-bug-linux-readline/",
-                      "https://lore.kernel.org/util-linux/20220214110609.msiwlm457ngoic6w%40ws.net.home/T/#u",
-                      "https://lore.kernel.org/util-linux/20220214110609.msiwlm457ngoic6w@ws.net.home/T/#u",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2022-0563",
-                      "https://security.gentoo.org/glsa/202401-08",
-                      "https://security.netapp.com/advisory/ntap-20220331-0002/",
-                      "https://www.cve.org/CVERecord?id=CVE-2022-0563"
-                    ],
-                    "severity": "LOW",
-                    "suppressed": false,
-                    "title": "util-linux: partial disclosure of arbitrary files in chfn and chsh when compiled with libreadline"
-                  },
-                  {
-                    "cve": "CVE-2023-50495",
-                    "cvss": {
-                      "nvd": {
-                        "v3score": "6.5",
-                        "v3vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H"
-                      },
-                      "redhat": {
-                        "v3score": "6.5",
-                        "v3vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H"
-                      }
-                    },
-                    "description": "NCurse v6.4-20230418 was discovered to contain a segmentation fault via the component _nc_wrap_entry().",
-                    "diffID": "sha256:a499da141b419b2e97ed40192951a05fc37fadec129a55e1de03773e23fff97b",
-                    "installedVersion": "6.2+20201114-2+deb11u2",
-                    "packageName": "ncurses-base",
-                    "purl": "pkg:deb/debian/ncurses-base@6.2%2B20201114-2%2Bdeb11u2?arch=all&distro=debian-11.9",
-                    "references": [
-                      "https://access.redhat.com/security/cve/CVE-2023-50495",
-                      "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LU4MYMKFEZQ5VSCVLRIZGDQOUW3T44GT/",
-                      "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/LU4MYMKFEZQ5VSCVLRIZGDQOUW3T44GT/",
-                      "https://lists.gnu.org/archive/html/bug-ncurses/2023-04/msg00020.html",
-                      "https://lists.gnu.org/archive/html/bug-ncurses/2023-04/msg00029.html",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2023-50495",
-                      "https://security.netapp.com/advisory/ntap-20240119-0008/",
-                      "https://ubuntu.com/security/notices/USN-6684-1",
-                      "https://www.cve.org/CVERecord?id=CVE-2023-50495"
-                    ],
-                    "severity": "MEDIUM",
-                    "suppressed": false,
-                    "title": "ncurses: segmentation fault via _nc_wrap_entry()"
-                  },
-                  {
-                    "cve": "CVE-2025-6141",
-                    "cvss": {
-                      "redhat": {
-                        "v3score": "3.3",
-                        "v3vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-119",
-                      "CWE-121"
-                    ],
-                    "description": "A vulnerability has been found in GNU ncurses up to 6.5-20250322 and classified as problematic. This vulnerability affects the function postprocess_termcap of the file tinfo/parse_entry.c. The manipulation leads to stack-based buffer overflow. The attack needs to be approached locally. Upgrading to version 6.5-20250329 is able to address this issue. It is recommended to upgrade the affected component.",
-                    "diffID": "sha256:a499da141b419b2e97ed40192951a05fc37fadec129a55e1de03773e23fff97b",
-                    "installedVersion": "6.2+20201114-2+deb11u2",
-                    "packageName": "ncurses-base",
-                    "purl": "pkg:deb/debian/ncurses-base@6.2%2B20201114-2%2Bdeb11u2?arch=all&distro=debian-11.9",
-                    "references": [
-                      "https://access.redhat.com/security/cve/CVE-2025-6141",
-                      "https://invisible-island.net/ncurses/NEWS.html#index-t20250329",
-                      "https://lists.gnu.org/archive/html/bug-ncurses/2025-03/msg00107.html",
-                      "https://lists.gnu.org/archive/html/bug-ncurses/2025-03/msg00109.html",
-                      "https://lists.gnu.org/archive/html/bug-ncurses/2025-03/msg00114.html",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2025-6141",
-                      "https://vuldb.com/?ctiid.312610",
-                      "https://vuldb.com/?id.312610",
-                      "https://vuldb.com/?submit.593000",
-                      "https://www.cve.org/CVERecord?id=CVE-2025-6141",
-                      "https://www.gnu.org/"
-                    ],
-                    "severity": "LOW",
-                    "suppressed": false,
-                    "title": "gnu-ncurses: ncurses Stack Buffer Overflow"
-                  },
-                  {
-                    "cve": "CVE-2023-50495",
-                    "cvss": {
-                      "nvd": {
-                        "v3score": "6.5",
-                        "v3vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H"
-                      },
-                      "redhat": {
-                        "v3score": "6.5",
-                        "v3vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H"
-                      }
-                    },
-                    "description": "NCurse v6.4-20230418 was discovered to contain a segmentation fault via the component _nc_wrap_entry().",
-                    "diffID": "sha256:a499da141b419b2e97ed40192951a05fc37fadec129a55e1de03773e23fff97b",
-                    "installedVersion": "6.2+20201114-2+deb11u2",
-                    "packageName": "ncurses-bin",
-                    "purl": "pkg:deb/debian/ncurses-bin@6.2%2B20201114-2%2Bdeb11u2?arch=arm64&distro=debian-11.9",
-                    "references": [
-                      "https://access.redhat.com/security/cve/CVE-2023-50495",
-                      "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LU4MYMKFEZQ5VSCVLRIZGDQOUW3T44GT/",
-                      "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/LU4MYMKFEZQ5VSCVLRIZGDQOUW3T44GT/",
-                      "https://lists.gnu.org/archive/html/bug-ncurses/2023-04/msg00020.html",
-                      "https://lists.gnu.org/archive/html/bug-ncurses/2023-04/msg00029.html",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2023-50495",
-                      "https://security.netapp.com/advisory/ntap-20240119-0008/",
-                      "https://ubuntu.com/security/notices/USN-6684-1",
-                      "https://www.cve.org/CVERecord?id=CVE-2023-50495"
-                    ],
-                    "severity": "MEDIUM",
-                    "suppressed": false,
-                    "title": "ncurses: segmentation fault via _nc_wrap_entry()"
-                  },
-                  {
-                    "cve": "CVE-2025-6141",
-                    "cvss": {
-                      "redhat": {
-                        "v3score": "3.3",
-                        "v3vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-119",
-                      "CWE-121"
-                    ],
-                    "description": "A vulnerability has been found in GNU ncurses up to 6.5-20250322 and classified as problematic. This vulnerability affects the function postprocess_termcap of the file tinfo/parse_entry.c. The manipulation leads to stack-based buffer overflow. The attack needs to be approached locally. Upgrading to version 6.5-20250329 is able to address this issue. It is recommended to upgrade the affected component.",
-                    "diffID": "sha256:a499da141b419b2e97ed40192951a05fc37fadec129a55e1de03773e23fff97b",
-                    "installedVersion": "6.2+20201114-2+deb11u2",
-                    "packageName": "ncurses-bin",
-                    "purl": "pkg:deb/debian/ncurses-bin@6.2%2B20201114-2%2Bdeb11u2?arch=arm64&distro=debian-11.9",
-                    "references": [
-                      "https://access.redhat.com/security/cve/CVE-2025-6141",
-                      "https://invisible-island.net/ncurses/NEWS.html#index-t20250329",
-                      "https://lists.gnu.org/archive/html/bug-ncurses/2025-03/msg00107.html",
-                      "https://lists.gnu.org/archive/html/bug-ncurses/2025-03/msg00109.html",
-                      "https://lists.gnu.org/archive/html/bug-ncurses/2025-03/msg00114.html",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2025-6141",
-                      "https://vuldb.com/?ctiid.312610",
-                      "https://vuldb.com/?id.312610",
-                      "https://vuldb.com/?submit.593000",
-                      "https://www.cve.org/CVERecord?id=CVE-2025-6141",
-                      "https://www.gnu.org/"
-                    ],
-                    "severity": "LOW",
-                    "suppressed": false,
-                    "title": "gnu-ncurses: ncurses Stack Buffer Overflow"
-                  },
-                  {
-                    "cve": "CVE-2026-1642",
-                    "cvss": {
-                      "redhat": {
-                        "v3score": "5.9",
-                        "v3vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-349"
-                    ],
-                    "description": "A vulnerability exists in NGINX OSS and NGINX Plus when configured to proxy to upstream Transport Layer Security (TLS) servers. An attacker with a man-in-the-middle (MITM) position on the upstream server side\u2014along with conditions beyond the attacker's control\u2014may be able to inject plain text data into the response from an upstream proxied server.  Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.",
-                    "diffID": "sha256:2f458857553769636f3c149c0c8d41acc63c9e24282823b0ea26869a635e9f48",
-                    "installedVersion": "1.24.0-1~bullseye",
-                    "packageName": "nginx",
-                    "purl": "pkg:deb/debian/nginx@1.24.0-1~bullseye?arch=arm64&distro=debian-11.9",
-                    "references": [
-                      "http://www.openwall.com/lists/oss-security/2026/02/05/1",
-                      "https://access.redhat.com/security/cve/CVE-2026-1642",
-                      "https://my.f5.com/manage/s/article/K000159824",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2026-1642",
-                      "https://www.cve.org/CVERecord?id=CVE-2026-1642"
-                    ],
-                    "severity": "MEDIUM",
-                    "suppressed": false,
-                    "title": "nginx: NGINX: Data injection via man-in-the-middle attack on TLS proxied connections"
-                  },
-                  {
-                    "cve": "CVE-2009-4487",
-                    "cvss": {
-                      "nvd": {
-                        "v3score": "0",
-                        "v3vector": ""
-                      },
-                      "redhat": {
-                        "v3score": "0",
-                        "v3vector": ""
-                      }
-                    },
-                    "description": "nginx 0.7.64 writes data to a log file without sanitizing non-printable characters, which might allow remote attackers to modify a window's title, or possibly execute arbitrary commands or overwrite files, via an HTTP request containing an escape sequence for a terminal emulator.",
-                    "diffID": "sha256:2f458857553769636f3c149c0c8d41acc63c9e24282823b0ea26869a635e9f48",
-                    "installedVersion": "1.24.0-1~bullseye",
-                    "packageName": "nginx",
-                    "purl": "pkg:deb/debian/nginx@1.24.0-1~bullseye?arch=arm64&distro=debian-11.9",
-                    "references": [
-                      "http://www.securityfocus.com/archive/1/508830/100/0/threaded",
-                      "http://www.securityfocus.com/bid/37711",
-                      "http://www.ush.it/team/ush/hack_httpd_escape/adv.txt",
-                      "https://access.redhat.com/security/cve/CVE-2009-4487",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2009-4487",
-                      "https://www.cve.org/CVERecord?id=CVE-2009-4487"
-                    ],
-                    "severity": "LOW",
-                    "suppressed": false,
-                    "title": "nginx: Absent sanitation of escape sequences in web server log"
-                  },
-                  {
-                    "cve": "CVE-2013-0337",
-                    "cvss": {
-                      "nvd": {
-                        "v3score": "0",
-                        "v3vector": ""
-                      }
-                    },
-                    "cwes": [
-                      "CWE-264"
-                    ],
-                    "description": "The default configuration of nginx, possibly 1.3.13 and earlier, uses world-readable permissions for the (1) access.log and (2) error.log files, which allows local users to obtain sensitive information by reading the files.",
-                    "diffID": "sha256:2f458857553769636f3c149c0c8d41acc63c9e24282823b0ea26869a635e9f48",
-                    "installedVersion": "1.24.0-1~bullseye",
-                    "packageName": "nginx",
-                    "purl": "pkg:deb/debian/nginx@1.24.0-1~bullseye?arch=arm64&distro=debian-11.9",
-                    "references": [
-                      "http://secunia.com/advisories/55181",
-                      "http://security.gentoo.org/glsa/glsa-201310-04.xml",
-                      "http://www.openwall.com/lists/oss-security/2013/02/21/15",
-                      "http://www.openwall.com/lists/oss-security/2013/02/22/1",
-                      "http://www.openwall.com/lists/oss-security/2013/02/24/1"
-                    ],
-                    "severity": "LOW",
-                    "suppressed": false,
-                    "title": "The default configuration of nginx, possibly 1.3.13 and earlier, uses  ..."
-                  },
-                  {
-                    "cve": "CVE-2023-44487",
-                    "cvss": {
-                      "bitnami": {
-                        "v3score": "7.5",
-                        "v3vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"
-                      },
-                      "ghsa": {
-                        "v3score": "5.3",
-                        "v3vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L/E:H"
-                      },
-                      "nvd": {
-                        "v3score": "7.5",
-                        "v3vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"
-                      },
-                      "redhat": {
-                        "v3score": "7.5",
-                        "v3vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-400"
-                    ],
-                    "description": "The HTTP/2 protocol allows a denial of service (server resource consumption) because request cancellation can reset many streams quickly, as exploited in the wild in August through October 2023.",
-                    "diffID": "sha256:2f458857553769636f3c149c0c8d41acc63c9e24282823b0ea26869a635e9f48",
-                    "installedVersion": "1.24.0-1~bullseye",
-                    "packageName": "nginx",
-                    "purl": "pkg:deb/debian/nginx@1.24.0-1~bullseye?arch=arm64&distro=debian-11.9",
-                    "references": [
-                      "http://www.openwall.com/lists/oss-security/2023/10/10/6",
-                      "http://www.openwall.com/lists/oss-security/2023/10/10/7",
-                      "http://www.openwall.com/lists/oss-security/2023/10/13/4",
-                      "http://www.openwall.com/lists/oss-security/2023/10/13/9",
-                      "http://www.openwall.com/lists/oss-security/2023/10/18/4",
-                      "http://www.openwall.com/lists/oss-security/2023/10/18/8",
-                      "http://www.openwall.com/lists/oss-security/2023/10/19/6",
-                      "http://www.openwall.com/lists/oss-security/2023/10/20/8",
-                      "http://www.openwall.com/lists/oss-security/2025/08/13/6",
-                      "https://access.redhat.com/errata/RHSA-2024:1444",
-                      "https://access.redhat.com/security/cve/CVE-2023-44487",
-                      "https://access.redhat.com/security/cve/cve-2023-44487",
-                      "https://akka.io/security/akka-http-cve-2023-44487.html",
-                      "https://arstechnica.com/security/2023/10/how-ddosers-used-the-http-2-protocol-to-deliver-attacks-of-unprecedented-size",
-                      "https://arstechnica.com/security/2023/10/how-ddosers-used-the-http-2-protocol-to-deliver-attacks-of-unprecedented-size/",
-                      "https://aws.amazon.com/security/security-bulletins/AWS-2023-011",
-                      "https://aws.amazon.com/security/security-bulletins/AWS-2023-011/",
-                      "https://blog.cloudflare.com/technical-breakdown-http2-rapid-reset-ddos-attack",
-                      "https://blog.cloudflare.com/technical-breakdown-http2-rapid-reset-ddos-attack/",
-                      "https://blog.cloudflare.com/zero-day-rapid-reset-http2-record-breaking-ddos-attack",
-                      "https://blog.cloudflare.com/zero-day-rapid-reset-http2-record-breaking-ddos-attack/",
-                      "https://blog.litespeedtech.com/2023/10/11/rapid-reset-http-2-vulnerablilty",
-                      "https://blog.litespeedtech.com/2023/10/11/rapid-reset-http-2-vulnerablilty/",
-                      "https://blog.powerdns.com/2024/02/16/powerdns-dnsdist-1.9.0-released",
-                      "https://blog.qualys.com/vulnerabilities-threat-research/2023/10/10/cve-2023-44487-http-2-rapid-reset-attack",
-                      "https://blog.vespa.ai/cve-2023-44487",
-                      "https://blog.vespa.ai/cve-2023-44487/",
-                      "https://bugzilla.proxmox.com/show_bug.cgi?id=4988",
-                      "https://bugzilla.redhat.com/2242803",
-                      "https://bugzilla.redhat.com/2264574",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2242803",
-                      "https://bugzilla.suse.com/show_bug.cgi?id=1216123",
-                      "https://cgit.freebsd.org/ports/commit/?id=c64c329c2c1752f46b73e3e6ce9f4329be6629f9",
-                      "https://chaos.social/@icing/111210915918780532",
-                      "https://cloud.google.com/blog/products/identity-security/google-cloud-mitigated-largest-ddos-attack-peaking-above-398-million-rps",
-                      "https://cloud.google.com/blog/products/identity-security/google-cloud-mitigated-largest-ddos-attack-peaking-above-398-million-rps/",
-                      "https://cloud.google.com/blog/products/identity-security/how-it-works-the-novel-http2-rapid-reset-ddos-attack",
-                      "https://community.traefik.io/t/is-traefik-vulnerable-to-cve-2023-44487/20125",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-44487",
-                      "https://devblogs.microsoft.com/dotnet/october-2023-updates/",
-                      "https://discuss.hashicorp.com/t/hcsec-2023-32-vault-consul-and-boundary-affected-by-http-2-rapid-reset-denial-of-service-vulnerability-cve-2023-44487/59715",
-                      "https://edg.io/lp/blog/resets-leaks-ddos-and-the-tale-of-a-hidden-cve",
-                      "https://errata.almalinux.org/8/ALSA-2024-1444.html",
-                      "https://errata.rockylinux.org/RLSA-2023:5838",
-                      "https://forums.swift.org/t/swift-nio-http2-security-update-cve-2023-44487-http-2-dos/67764",
-                      "https://gist.github.com/adulau/7c2bfb8e9cdbe4b35a5e131c66a0c088",
-                      "https://github.com/Azure/AKS/issues/3947",
-                      "https://github.com/Kong/kong/discussions/11741",
-                      "https://github.com/advisories/GHSA-qppj-fm5r-hxr3",
-                      "https://github.com/advisories/GHSA-vx74-f528-fxqg",
-                      "https://github.com/advisories/GHSA-xpw8-rcwv-8f8p",
-                      "https://github.com/akka/akka-http/issues/4323",
-                      "https://github.com/akka/akka-http/pull/4324",
-                      "https://github.com/akka/akka-http/pull/4325",
-                      "https://github.com/alibaba/tengine/issues/1872",
-                      "https://github.com/apache/apisix/issues/10320",
-                      "https://github.com/apache/httpd-site/pull/10",
-                      "https://github.com/apache/httpd/blob/afcdbeebbff4b0c50ea26cdd16e178c0d1f24152/modules/http2/h2_mplx.c#L1101-L1113",
-                      "https://github.com/apache/tomcat/commit/944332bb15bd2f3bf76ec2caeb1ff0a58a3bc628",
-                      "https://github.com/apache/tomcat/tree/main/java/org/apache/coyote/http2",
-                      "https://github.com/apache/trafficserver/pull/10564",
-                      "https://github.com/apple/swift-nio-http2",
-                      "https://github.com/apple/swift-nio-http2/security/advisories/GHSA-qppj-fm5r-hxr3",
-                      "https://github.com/arkrwn/PoC/tree/main/CVE-2023-44487",
-                      "https://github.com/bcdannyboy/CVE-2023-44487",
-                      "https://github.com/caddyserver/caddy/issues/5877",
-                      "https://github.com/caddyserver/caddy/releases/tag/v2.7.5",
-                      "https://github.com/dotnet/announcements/issues/277",
-                      "https://github.com/dotnet/core/blob/e4613450ea0da7fd2fc6b61dfb2c1c1dec1ce9ec/release-notes/6.0/6.0.23/6.0.23.md?plain=1#L73",
-                      "https://github.com/eclipse/jetty.project/issues/10679",
-                      "https://github.com/envoyproxy/envoy/pull/30055",
-                      "https://github.com/etcd-io/etcd/issues/16740",
-                      "https://github.com/facebook/proxygen/pull/466",
-                      "https://github.com/golang/go/issues/63417",
-                      "https://github.com/grpc/grpc-go/pull/6703",
-                      "https://github.com/grpc/grpc-go/releases",
-                      "https://github.com/grpc/grpc/releases/tag/v1.59.2",
-                      "https://github.com/h2o/h2o/pull/3291",
-                      "https://github.com/h2o/h2o/security/advisories/GHSA-2m7v-gc89-fjqf",
-                      "https://github.com/haproxy/haproxy/issues/2312",
-                      "https://github.com/hyperium/hyper/issues/3337",
-                      "https://github.com/icing/mod_h2/blob/0a864782af0a942aa2ad4ed960a6b32cd35bcf0a/mod_http2/README.md?plain=1#L239-L244",
-                      "https://github.com/junkurihara/rust-rpxy/issues/97",
-                      "https://github.com/kazu-yamamoto/http2/commit/f61d41a502bd0f60eb24e1ce14edc7b6df6722a1",
-                      "https://github.com/kazu-yamamoto/http2/issues/93",
-                      "https://github.com/kubernetes/kubernetes/pull/121120",
-                      "https://github.com/line/armeria/pull/5232",
-                      "https://github.com/linkerd/website/pull/1695/commits/4b9c6836471bc8270ab48aae6fd2181bc73fd632",
-                      "https://github.com/micrictor/http2-rst-stream",
-                      "https://github.com/microsoft/CBL-Mariner/pull/6381",
-                      "https://github.com/netty/netty/commit/58f75f665aa81a8cbcf6ffa74820042a285c5e61",
-                      "https://github.com/nghttp2/nghttp2/pull/1961",
-                      "https://github.com/nghttp2/nghttp2/releases/tag/v1.57.0",
-                      "https://github.com/ninenines/cowboy/issues/1615",
-                      "https://github.com/nodejs/node/pull/50121",
-                      "https://github.com/openresty/openresty/issues/930",
-                      "https://github.com/opensearch-project/data-prepper/issues/3474",
-                      "https://github.com/oqtane/oqtane.framework/discussions/3367",
-                      "https://github.com/projectcontour/contour/pull/5826",
-                      "https://github.com/tempesta-tech/tempesta/issues/1986",
-                      "https://github.com/varnishcache/varnish-cache/issues/3996",
-                      "https://go.dev/cl/534215",
-                      "https://go.dev/cl/534235",
-                      "https://go.dev/issue/63417",
-                      "https://groups.google.com/g/golang-announce/c/iNNxDTCjZvo",
-                      "https://groups.google.com/g/golang-announce/c/iNNxDTCjZvo/m/UDd7VKQuAAAJ",
-                      "https://istio.io/latest/news/security/istio-security-2023-004",
-                      "https://istio.io/latest/news/security/istio-security-2023-004/",
-                      "https://linkerd.io/2023/10/12/linkerd-cve-2023-44487",
-                      "https://linkerd.io/2023/10/12/linkerd-cve-2023-44487/",
-                      "https://linux.oracle.com/cve/CVE-2023-44487.html",
-                      "https://linux.oracle.com/errata/ELSA-2024-1444.html",
-                      "https://lists.apache.org/thread/5py8h42mxfsn8l1wy6o41xwhsjlsd87q",
-                      "https://lists.debian.org/debian-lts-announce/2023/10/msg00020.html",
-                      "https://lists.debian.org/debian-lts-announce/2023/10/msg00023.html",
-                      "https://lists.debian.org/debian-lts-announce/2023/10/msg00024.html",
-                      "https://lists.debian.org/debian-lts-announce/2023/10/msg00045.html",
-                      "https://lists.debian.org/debian-lts-announce/2023/10/msg00047.html",
-                      "https://lists.debian.org/debian-lts-announce/2023/11/msg00001.html",
-                      "https://lists.debian.org/debian-lts-announce/2023/11/msg00012.html",
-                      "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/2MBEPPC36UBVOZZNAXFHKLFGSLCMN5LI",
-                      "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/2MBEPPC36UBVOZZNAXFHKLFGSLCMN5LI/",
-                      "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/3N4NJ7FR4X4FPZUGNTQAPSTVB2HB2Y4A",
-                      "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/3N4NJ7FR4X4FPZUGNTQAPSTVB2HB2Y4A/",
-                      "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BFQD3KUEMFBHPAPBGLWQC34L4OWL5HAZ",
-                      "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BFQD3KUEMFBHPAPBGLWQC34L4OWL5HAZ/",
-                      "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CLB4TW7KALB3EEQWNWCN7OUIWWVWWCG2",
-                      "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CLB4TW7KALB3EEQWNWCN7OUIWWVWWCG2/",
-                      "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/E72T67UPDRXHIDLO3OROR25YAMN4GGW5",
-                      "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/E72T67UPDRXHIDLO3OROR25YAMN4GGW5/",
-                      "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FNA62Q767CFAFHBCDKYNPBMZWB7TWYVU",
-                      "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FNA62Q767CFAFHBCDKYNPBMZWB7TWYVU/",
-                      "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/HT7T2R4MQKLIF4ODV4BDLPARWFPCJ5CZ",
-                      "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/HT7T2R4MQKLIF4ODV4BDLPARWFPCJ5CZ/",
-                      "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JIZSEFC3YKCGABA2BZW6ZJRMDZJMB7PJ",
-                      "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JIZSEFC3YKCGABA2BZW6ZJRMDZJMB7PJ/",
-                      "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JMEXY22BFG5Q64HQCM5CK2Q7KDKVV4TY",
-                      "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JMEXY22BFG5Q64HQCM5CK2Q7KDKVV4TY/",
-                      "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/KSEGD2IWKNUO3DWY4KQGUQM5BISRWHQE",
-                      "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/KSEGD2IWKNUO3DWY4KQGUQM5BISRWHQE/",
-                      "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LKYHSZQFDNR7RSA7LHVLLIAQMVYCUGBG",
-                      "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LKYHSZQFDNR7RSA7LHVLLIAQMVYCUGBG/",
-                      "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LNMZJCDHGLJJLXO4OXWJMTVQRNWOC7UL",
-                      "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LNMZJCDHGLJJLXO4OXWJMTVQRNWOC7UL/",
-                      "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VHUHTSXLXGXS7JYKBXTA3VINUPHTNGVU",
-                      "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VHUHTSXLXGXS7JYKBXTA3VINUPHTNGVU/",
-                      "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VSRDIV77HNKUSM7SJC5BKE5JSHLHU2NK",
-                      "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VSRDIV77HNKUSM7SJC5BKE5JSHLHU2NK/",
-                      "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WE2I52RHNNU42PX6NZ2RBUHSFFJ2LVZX",
-                      "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WE2I52RHNNU42PX6NZ2RBUHSFFJ2LVZX/",
-                      "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WLPRQ5TWUQQXYWBJM7ECYDAIL2YVKIUH",
-                      "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WLPRQ5TWUQQXYWBJM7ECYDAIL2YVKIUH/",
-                      "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/X6QXN4ORIVF6XBW4WWFE7VNPVC74S45Y",
-                      "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/X6QXN4ORIVF6XBW4WWFE7VNPVC74S45Y/",
-                      "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/XFOIBB4YFICHDM7IBOP7PWXW3FX4HLL2",
-                      "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/XFOIBB4YFICHDM7IBOP7PWXW3FX4HLL2/",
-                      "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZB43REMKRQR62NJEI7I5NQ4FSXNLBKRT",
-                      "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZB43REMKRQR62NJEI7I5NQ4FSXNLBKRT/",
-                      "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZKQSIKIAT5TJ3WSLU3RDBQ35YX4GY4V3",
-                      "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZKQSIKIAT5TJ3WSLU3RDBQ35YX4GY4V3/",
-                      "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZLU6U2R2IC2K64NDPNMV55AUAO65MAF4",
-                      "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZLU6U2R2IC2K64NDPNMV55AUAO65MAF4/",
-                      "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/2MBEPPC36UBVOZZNAXFHKLFGSLCMN5LI",
-                      "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/2MBEPPC36UBVOZZNAXFHKLFGSLCMN5LI/",
-                      "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/3N4NJ7FR4X4FPZUGNTQAPSTVB2HB2Y4A",
-                      "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/3N4NJ7FR4X4FPZUGNTQAPSTVB2HB2Y4A/",
-                      "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/BFQD3KUEMFBHPAPBGLWQC34L4OWL5HAZ",
-                      "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/BFQD3KUEMFBHPAPBGLWQC34L4OWL5HAZ/",
-                      "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/CLB4TW7KALB3EEQWNWCN7OUIWWVWWCG2",
-                      "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/CLB4TW7KALB3EEQWNWCN7OUIWWVWWCG2/",
-                      "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/E72T67UPDRXHIDLO3OROR25YAMN4GGW5",
-                      "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/E72T67UPDRXHIDLO3OROR25YAMN4GGW5/",
-                      "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/FNA62Q767CFAFHBCDKYNPBMZWB7TWYVU",
-                      "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/FNA62Q767CFAFHBCDKYNPBMZWB7TWYVU/",
-                      "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/HT7T2R4MQKLIF4ODV4BDLPARWFPCJ5CZ",
-                      "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/HT7T2R4MQKLIF4ODV4BDLPARWFPCJ5CZ/",
-                      "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/JIZSEFC3YKCGABA2BZW6ZJRMDZJMB7PJ",
-                      "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/JIZSEFC3YKCGABA2BZW6ZJRMDZJMB7PJ/",
-                      "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/JMEXY22BFG5Q64HQCM5CK2Q7KDKVV4TY",
-                      "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/JMEXY22BFG5Q64HQCM5CK2Q7KDKVV4TY/",
-                      "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/KSEGD2IWKNUO3DWY4KQGUQM5BISRWHQE",
-                      "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/KSEGD2IWKNUO3DWY4KQGUQM5BISRWHQE/",
-                      "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/LKYHSZQFDNR7RSA7LHVLLIAQMVYCUGBG",
-                      "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/LKYHSZQFDNR7RSA7LHVLLIAQMVYCUGBG/",
-                      "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/LNMZJCDHGLJJLXO4OXWJMTVQRNWOC7UL",
-                      "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/LNMZJCDHGLJJLXO4OXWJMTVQRNWOC7UL/",
-                      "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/VHUHTSXLXGXS7JYKBXTA3VINUPHTNGVU",
-                      "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/VHUHTSXLXGXS7JYKBXTA3VINUPHTNGVU/",
-                      "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/VSRDIV77HNKUSM7SJC5BKE5JSHLHU2NK",
-                      "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/VSRDIV77HNKUSM7SJC5BKE5JSHLHU2NK/",
-                      "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/WE2I52RHNNU42PX6NZ2RBUHSFFJ2LVZX",
-                      "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/WE2I52RHNNU42PX6NZ2RBUHSFFJ2LVZX/",
-                      "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/WLPRQ5TWUQQXYWBJM7ECYDAIL2YVKIUH",
-                      "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/WLPRQ5TWUQQXYWBJM7ECYDAIL2YVKIUH/",
-                      "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/X6QXN4ORIVF6XBW4WWFE7VNPVC74S45Y",
-                      "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/X6QXN4ORIVF6XBW4WWFE7VNPVC74S45Y/",
-                      "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/XFOIBB4YFICHDM7IBOP7PWXW3FX4HLL2",
-                      "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/XFOIBB4YFICHDM7IBOP7PWXW3FX4HLL2/",
-                      "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ZB43REMKRQR62NJEI7I5NQ4FSXNLBKRT",
-                      "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ZB43REMKRQR62NJEI7I5NQ4FSXNLBKRT/",
-                      "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ZKQSIKIAT5TJ3WSLU3RDBQ35YX4GY4V3",
-                      "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ZKQSIKIAT5TJ3WSLU3RDBQ35YX4GY4V3/",
-                      "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ZLU6U2R2IC2K64NDPNMV55AUAO65MAF4",
-                      "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ZLU6U2R2IC2K64NDPNMV55AUAO65MAF4/",
-                      "https://lists.w3.org/Archives/Public/ietf-http-wg/2023OctDec/0025.html",
-                      "https://mailman.nginx.org/pipermail/nginx-devel/2023-October/S36Q5HBXR7CAIMPLLPRSSSYR4PCMWILK.html",
-                      "https://mailman.powerdns.com/pipermail/dnsdist/2023-October/001409.html",
-                      "https://martinthomson.github.io/h2-stream-limits/draft-thomson-httpbis-h2-stream-limits.html",
-                      "https://msrc.microsoft.com/blog/2023/10/microsoft-response-to-distributed-denial-of-service-ddos-attacks-against-http/2",
-                      "https://msrc.microsoft.com/blog/2023/10/microsoft-response-to-distributed-denial-of-service-ddos-attacks-against-http/2/",
-                      "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-44487",
-                      "https://my.f5.com/manage/s/article/K000137106",
-                      "https://netty.io/news/2023/10/10/4-1-100-Final.html",
-                      "https://news.ycombinator.com/item?id=37830987",
-                      "https://news.ycombinator.com/item?id=37830998",
-                      "https://news.ycombinator.com/item?id=37831062",
-                      "https://news.ycombinator.com/item?id=37837043",
-                      "https://nodejs.org/en/blog/vulnerability/october-2023-security-releases",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2023-44487",
-                      "https://openssf.org/blog/2023/10/10/http-2-rapid-reset-vulnerability-highlights-need-for-rapid-response",
-                      "https://openssf.org/blog/2023/10/10/http-2-rapid-reset-vulnerability-highlights-need-for-rapid-response/",
-                      "https://pkg.go.dev/vuln/GO-2023-2102",
-                      "https://seanmonstar.com/post/730794151136935936/hyper-http2-rapid-reset-unaffected",
-                      "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-http2-reset-d8Kf32vZ",
-                      "https://security.gentoo.org/glsa/202311-09",
-                      "https://security.netapp.com/advisory/ntap-20231016-0001",
-                      "https://security.netapp.com/advisory/ntap-20231016-0001/",
-                      "https://security.netapp.com/advisory/ntap-20240426-0007",
-                      "https://security.netapp.com/advisory/ntap-20240426-0007/",
-                      "https://security.netapp.com/advisory/ntap-20240621-0006",
-                      "https://security.netapp.com/advisory/ntap-20240621-0006/",
-                      "https://security.netapp.com/advisory/ntap-20240621-0007",
-                      "https://security.netapp.com/advisory/ntap-20240621-0007/",
-                      "https://security.paloaltonetworks.com/CVE-2023-44487",
-                      "https://tomcat.apache.org/security-10.html#Fixed_in_Apache_Tomcat_10.1.14",
-                      "https://tomcat.apache.org/security-11.html#Fixed_in_Apache_Tomcat_11.0.0-M12",
-                      "https://tomcat.apache.org/security-8.html",
-                      "https://tomcat.apache.org/security-8.html#Fixed_in_Apache_Tomcat_8.5.94",
-                      "https://tomcat.apache.org/security-9.html#Fixed_in_Apache_Tomcat_9.0.81",
-                      "https://ubuntu.com/security/CVE-2023-44487",
-                      "https://ubuntu.com/security/notices/USN-6427-1",
-                      "https://ubuntu.com/security/notices/USN-6427-2",
-                      "https://ubuntu.com/security/notices/USN-6438-1",
-                      "https://ubuntu.com/security/notices/USN-6505-1",
-                      "https://ubuntu.com/security/notices/USN-6574-1",
-                      "https://ubuntu.com/security/notices/USN-6754-1",
-                      "https://ubuntu.com/security/notices/USN-6994-1",
-                      "https://ubuntu.com/security/notices/USN-7067-1",
-                      "https://ubuntu.com/security/notices/USN-7410-1",
-                      "https://ubuntu.com/security/notices/USN-7469-1",
-                      "https://ubuntu.com/security/notices/USN-7469-2",
-                      "https://ubuntu.com/security/notices/USN-7469-3",
-                      "https://ubuntu.com/security/notices/USN-7469-4",
-                      "https://ubuntu.com/security/notices/USN-7892-1",
-                      "https://www.bleepingcomputer.com/news/security/new-http-2-rapid-reset-zero-day-attack-breaks-ddos-records",
-                      "https://www.bleepingcomputer.com/news/security/new-http-2-rapid-reset-zero-day-attack-breaks-ddos-records/",
-                      "https://www.cisa.gov/known-exploited-vulnerabilities-catalog",
-                      "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2023-44487",
-                      "https://www.cisa.gov/news-events/alerts/2023/10/10/http2-rapid-reset-vulnerability-cve-2023-44487",
-                      "https://www.cve.org/CVERecord?id=CVE-2023-44487",
-                      "https://www.darkreading.com/cloud/internet-wide-zero-day-bug-fuels-largest-ever-ddos-event",
-                      "https://www.debian.org/security/2023/dsa-5521",
-                      "https://www.debian.org/security/2023/dsa-5522",
-                      "https://www.debian.org/security/2023/dsa-5540",
-                      "https://www.debian.org/security/2023/dsa-5549",
-                      "https://www.debian.org/security/2023/dsa-5558",
-                      "https://www.debian.org/security/2023/dsa-5570",
-                      "https://www.eclipse.org/lists/jetty-announce/msg00181.html",
-                      "https://www.haproxy.com/blog/haproxy-is-not-affected-by-the-http-2-rapid-reset-attack-cve-2023-44487",
-                      "https://www.mail-archive.com/haproxy@formilux.org/msg44134.html",
-                      "https://www.netlify.com/blog/netlify-successfully-mitigates-cve-2023-44487",
-                      "https://www.netlify.com/blog/netlify-successfully-mitigates-cve-2023-44487/",
-                      "https://www.nginx.com/blog/http-2-rapid-reset-attack-impacting-f5-nginx-products",
-                      "https://www.nginx.com/blog/http-2-rapid-reset-attack-impacting-f5-nginx-products/",
-                      "https://www.openwall.com/lists/oss-security/2023/10/10/6",
-                      "https://www.phoronix.com/news/HTTP2-Rapid-Reset-Attack",
-                      "https://www.theregister.com/2023/10/10/http2_rapid_reset_zeroday",
-                      "https://www.theregister.com/2023/10/10/http2_rapid_reset_zeroday/",
-                      "https://www.vicarius.io/vsociety/posts/rapid-reset-cve-2023-44487-dos-in-http2-understanding-the-root-cause"
-                    ],
-                    "severity": "LOW",
-                    "suppressed": false,
-                    "title": "HTTP/2: Multiple HTTP/2 enabled web servers are vulnerable to a DDoS attack (Rapid Reset Attack)"
-                  },
-                  {
-                    "cve": "CVE-2025-53859",
-                    "cvss": {
-                      "redhat": {
-                        "v3score": "3.7",
-                        "v3vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-125"
-                    ],
-                    "description": "NGINX Open Source and NGINX Plus have a vulnerability in the ngx_mail_smtp_module that might allow an unauthenticated attacker to over-read NGINX SMTP authentication process memory; as a result, the server side may leak arbitrary bytes sent in a request to the authentication server. This issue happens during the NGINX SMTP authentication process and requires the attacker to make preparations against the target system to extract the leaked data. The issue affects NGINX only if (1) it is built with the ngx_mail_smtp_module, (2) the smtp_auth directive is configured with method \"none,\" and (3) the authentication server returns the \"Auth-Wait\" response header.\n\n\n\n\nNote: Software versions which have reached End of Technical Support (EoTS) are not evaluated.",
-                    "diffID": "sha256:2f458857553769636f3c149c0c8d41acc63c9e24282823b0ea26869a635e9f48",
-                    "installedVersion": "1.24.0-1~bullseye",
-                    "packageName": "nginx",
-                    "purl": "pkg:deb/debian/nginx@1.24.0-1~bullseye?arch=arm64&distro=debian-11.9",
-                    "references": [
-                      "http://www.openwall.com/lists/oss-security/2025/08/13/5",
-                      "https://access.redhat.com/security/cve/CVE-2025-53859",
-                      "https://my.f5.com/manage/s/article/K000152786",
-                      "https://nginx.org/download/patch.2025.smtp.txt",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2025-53859",
-                      "https://ubuntu.com/security/notices/USN-7715-1",
-                      "https://www.cve.org/CVERecord?id=CVE-2025-53859",
-                      "https://www.openwall.com/lists/oss-security/2025/08/13/5"
-                    ],
-                    "severity": "LOW",
-                    "suppressed": false,
-                    "title": "nginx: NGINX ngx_mail_smtp_module vulnerability"
-                  },
-                  {
-                    "cve": "CVE-2025-69419",
-                    "cvss": {
-                      "redhat": {
-                        "v3score": "7.4",
-                        "v3vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-787"
-                    ],
-                    "description": "Issue summary: Calling PKCS12_get_friendlyname() function on a maliciously\ncrafted PKCS#12 file with a BMPString (UTF-16BE) friendly name containing\nnon-ASCII BMP code point can trigger a one byte write before the allocated\nbuffer.\n\nImpact summary: The out-of-bounds write can cause a memory corruption\nwhich can have various consequences including a Denial of Service.\n\nThe OPENSSL_uni2utf8() function performs a two-pass conversion of a PKCS#12\nBMPString (UTF-16BE) to UTF-8. In the second pass, when emitting UTF-8 bytes,\nthe helper function bmp_to_utf8() incorrectly forwards the remaining UTF-16\nsource byte count as the destination buffer capacity to UTF8_putc(). For BMP\ncode points above U+07FF, UTF-8 requires three bytes, but the forwarded\ncapacity can be just two bytes. UTF8_putc() then returns -1, and this negative\nvalue is added to the output length without validation, causing the\nlength to become negative. The subsequent trailing NUL byte is then written\nat a negative offset, causing write outside of heap allocated buffer.\n\nThe vulnerability is reachable via the public PKCS12_get_friendlyname() API\nwhen parsing attacker-controlled PKCS#12 files. While PKCS12_parse() uses a\ndifferent code path that avoids this issue, PKCS12_get_friendlyname() directly\ninvokes the vulnerable function. Exploitation requires an attacker to provide\na malicious PKCS#12 file to be parsed by the application and the attacker\ncan just trigger a one zero byte write before the allocated buffer.\nFor that reason the issue was assessed as Low severity according to our\nSecurity Policy.\n\nThe FIPS modules in 3.6, 3.5, 3.4, 3.3 and 3.0 are not affected by this issue,\nas the PKCS#12 implementation is outside the OpenSSL FIPS module boundary.\n\nOpenSSL 3.6, 3.5, 3.4, 3.3, 3.0 and 1.1.1 are vulnerable to this issue.\n\nOpenSSL 1.0.2 is not affected by this issue.",
-                    "diffID": "sha256:2f458857553769636f3c149c0c8d41acc63c9e24282823b0ea26869a635e9f48",
-                    "installedVersion": "1.1.1w-0+deb11u1",
-                    "packageName": "openssl",
-                    "purl": "pkg:deb/debian/openssl@1.1.1w-0%2Bdeb11u1?arch=arm64&distro=debian-11.9",
-                    "references": [
-                      "https://access.redhat.com/errata/RHSA-2026:1472",
-                      "https://access.redhat.com/security/cve/CVE-2025-69419",
-                      "https://bugzilla.redhat.com/2430375",
-                      "https://bugzilla.redhat.com/2430376",
-                      "https://bugzilla.redhat.com/2430377",
-                      "https://bugzilla.redhat.com/2430378",
-                      "https://bugzilla.redhat.com/2430379",
-                      "https://bugzilla.redhat.com/2430380",
-                      "https://bugzilla.redhat.com/2430381",
-                      "https://bugzilla.redhat.com/2430386",
-                      "https://bugzilla.redhat.com/2430387",
-                      "https://bugzilla.redhat.com/2430388",
-                      "https://bugzilla.redhat.com/2430389",
-                      "https://bugzilla.redhat.com/2430390",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430375",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430376",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430377",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430378",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430379",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430380",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430381",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430386",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430387",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430388",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430389",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430390",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-11187",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-15467",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-15468",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-15469",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-66199",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-68160",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-69418",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-69419",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-69420",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-69421",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-22795",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-22796",
-                      "https://errata.almalinux.org/10/ALSA-2026-1472.html",
-                      "https://errata.rockylinux.org/RLSA-2026:1473",
-                      "https://github.com/openssl/openssl/commit/41be0f216404f14457bbf3b9cc488dba60b49296",
-                      "https://github.com/openssl/openssl/commit/7e9cac9832e4705b91987c2474ed06a37a93cecb",
-                      "https://github.com/openssl/openssl/commit/a26a90d38edec3748566129d824e664b54bee2e2",
-                      "https://github.com/openssl/openssl/commit/cda12de3bc0e333ea8d2c6fd15001dbdaf280015",
-                      "https://github.com/openssl/openssl/commit/ff628933755075446bca8307e8417c14d164b535",
-                      "https://linux.oracle.com/cve/CVE-2025-69419.html",
-                      "https://linux.oracle.com/errata/ELSA-2026-50081.html",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2025-69419",
-                      "https://openssl-library.org/news/secadv/20260127.txt",
-                      "https://ubuntu.com/security/notices/USN-7980-1",
-                      "https://ubuntu.com/security/notices/USN-7980-2",
-                      "https://www.cve.org/CVERecord?id=CVE-2025-69419"
-                    ],
-                    "severity": "HIGH",
-                    "suppressed": false,
-                    "title": "openssl: OpenSSL: Arbitrary code execution due to out-of-bounds write in PKCS#12 processing"
-                  },
-                  {
-                    "cve": "CVE-2025-69421",
-                    "cvss": {
-                      "nvd": {
-                        "v3score": "7.5",
-                        "v3vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"
-                      },
-                      "redhat": {
-                        "v3score": "6.5",
-                        "v3vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-476"
-                    ],
-                    "description": "Issue summary: Processing a malformed PKCS#12 file can trigger a NULL pointer\ndereference in the PKCS12_item_decrypt_d2i_ex() function.\n\nImpact summary: A NULL pointer dereference can trigger a crash which leads to\nDenial of Service for an application processing PKCS#12 files.\n\nThe PKCS12_item_decrypt_d2i_ex() function does not check whether the oct\nparameter is NULL before dereferencing it. When called from\nPKCS12_unpack_p7encdata() with a malformed PKCS#12 file, this parameter can\nbe NULL, causing a crash. The vulnerability is limited to Denial of Service\nand cannot be escalated to achieve code execution or memory disclosure.\n\nExploiting this issue requires an attacker to provide a malformed PKCS#12 file\nto an application that processes it. For that reason the issue was assessed as\nLow severity according to our Security Policy.\n\nThe FIPS modules in 3.6, 3.5, 3.4, 3.3 and 3.0 are not affected by this issue,\nas the PKCS#12 implementation is outside the OpenSSL FIPS module boundary.\n\nOpenSSL 3.6, 3.5, 3.4, 3.3, 3.0, 1.1.1 and 1.0.2 are vulnerable to this issue.",
-                    "diffID": "sha256:2f458857553769636f3c149c0c8d41acc63c9e24282823b0ea26869a635e9f48",
-                    "installedVersion": "1.1.1w-0+deb11u1",
-                    "packageName": "openssl",
-                    "purl": "pkg:deb/debian/openssl@1.1.1w-0%2Bdeb11u1?arch=arm64&distro=debian-11.9",
-                    "references": [
-                      "https://access.redhat.com/errata/RHSA-2026:1472",
-                      "https://access.redhat.com/security/cve/CVE-2025-69421",
-                      "https://bugzilla.redhat.com/2430375",
-                      "https://bugzilla.redhat.com/2430376",
-                      "https://bugzilla.redhat.com/2430377",
-                      "https://bugzilla.redhat.com/2430378",
-                      "https://bugzilla.redhat.com/2430379",
-                      "https://bugzilla.redhat.com/2430380",
-                      "https://bugzilla.redhat.com/2430381",
-                      "https://bugzilla.redhat.com/2430386",
-                      "https://bugzilla.redhat.com/2430387",
-                      "https://bugzilla.redhat.com/2430388",
-                      "https://bugzilla.redhat.com/2430389",
-                      "https://bugzilla.redhat.com/2430390",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430375",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430376",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430377",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430378",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430379",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430380",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430381",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430386",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430387",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430388",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430389",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430390",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-11187",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-15467",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-15468",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-15469",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-66199",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-68160",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-69418",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-69419",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-69420",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-69421",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-22795",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-22796",
-                      "https://errata.almalinux.org/10/ALSA-2026-1472.html",
-                      "https://errata.rockylinux.org/RLSA-2026:1473",
-                      "https://github.com/openssl/openssl/commit/3524a29271f8191b8fd8a5257eb05173982a097b",
-                      "https://github.com/openssl/openssl/commit/36ecb4960872a4ce04bf6f1e1f4e78d75ec0c0c7",
-                      "https://github.com/openssl/openssl/commit/4bbc8d41a72c842ce4077a8a3eccd1109aaf74bd",
-                      "https://github.com/openssl/openssl/commit/643986985cd1c21221f941129d76fe0c2785aeb3",
-                      "https://github.com/openssl/openssl/commit/a2dbc539f0f9cc63832709fa5aa33ad9495eb19c",
-                      "https://linux.oracle.com/cve/CVE-2025-69421.html",
-                      "https://linux.oracle.com/errata/ELSA-2026-50081.html",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2025-69421",
-                      "https://openssl-library.org/news/secadv/20260127.txt",
-                      "https://ubuntu.com/security/notices/USN-7980-1",
-                      "https://ubuntu.com/security/notices/USN-7980-2",
-                      "https://www.cve.org/CVERecord?id=CVE-2025-69421"
-                    ],
-                    "severity": "HIGH",
-                    "suppressed": false,
-                    "title": "openssl: OpenSSL: Denial of Service via malformed PKCS#12 file processing"
-                  },
-                  {
-                    "cve": "CVE-2023-5678",
-                    "cvss": {
-                      "nvd": {
-                        "v3score": "5.3",
-                        "v3vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L"
-                      },
-                      "redhat": {
-                        "v3score": "5.3",
-                        "v3vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-606",
-                      "CWE-754"
-                    ],
-                    "description": "Issue summary: Generating excessively long X9.42 DH keys or checking\nexcessively long X9.42 DH keys or parameters may be very slow.\n\nImpact summary: Applications that use the functions DH_generate_key() to\ngenerate an X9.42 DH key may experience long delays.  Likewise, applications\nthat use DH_check_pub_key(), DH_check_pub_key_ex() or EVP_PKEY_public_check()\nto check an X9.42 DH key or X9.42 DH parameters may experience long delays.\nWhere the key or parameters that are being checked have been obtained from\nan untrusted source this may lead to a Denial of Service.\n\nWhile DH_check() performs all the necessary checks (as of CVE-2023-3817),\nDH_check_pub_key() doesn't make any of these checks, and is therefore\nvulnerable for excessively large P and Q parameters.\n\nLikewise, while DH_generate_key() performs a check for an excessively large\nP, it doesn't check for an excessively large Q.\n\nAn application that calls DH_generate_key() or DH_check_pub_key() and\nsupplies a key or parameters obtained from an untrusted source could be\nvulnerable to a Denial of Service attack.\n\nDH_generate_key() and DH_check_pub_key() are also called by a number of\nother OpenSSL functions.  An application calling any of those other\nfunctions may similarly be affected.  The other functions affected by this\nare DH_check_pub_key_ex(), EVP_PKEY_public_check(), and EVP_PKEY_generate().\n\nAlso vulnerable are the OpenSSL pkey command line application when using the\n\"-pubcheck\" option, as well as the OpenSSL genpkey command line application.\n\nThe OpenSSL SSL/TLS implementation is not affected by this issue.\n\nThe OpenSSL 3.0 and 3.1 FIPS providers are not affected by this issue.",
-                    "diffID": "sha256:2f458857553769636f3c149c0c8d41acc63c9e24282823b0ea26869a635e9f48",
-                    "fixedVersions": [
-                      "1.1.1w-0+deb11u2"
-                    ],
-                    "installedVersion": "1.1.1w-0+deb11u1",
-                    "packageName": "openssl",
-                    "purl": "pkg:deb/debian/openssl@1.1.1w-0%2Bdeb11u1?arch=arm64&distro=debian-11.9",
-                    "references": [
-                      "http://www.openwall.com/lists/oss-security/2024/03/11/1",
-                      "https://access.redhat.com/errata/RHSA-2023:7877",
-                      "https://access.redhat.com/security/cve/CVE-2023-5678",
-                      "https://bugzilla.redhat.com/2224962",
-                      "https://bugzilla.redhat.com/2227852",
-                      "https://bugzilla.redhat.com/2248616",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2224962",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2227852",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2248616",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2270358",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3446",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3817",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-5678",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-2408",
-                      "https://errata.almalinux.org/8/ALSA-2023-7877.html",
-                      "https://errata.rockylinux.org/RLSA-2023:7877",
-                      "https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=34efaef6c103d636ab507a0cc34dca4d3aecc055",
-                      "https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=710fee740904b6290fef0dd5536fbcedbc38ff0c",
-                      "https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=db925ae2e65d0d925adef429afc37f75bd1c2017",
-                      "https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=ddeb4b6c6d527e54ce9a99cba785c0f7776e54b6",
-                      "https://linux.oracle.com/cve/CVE-2023-5678.html",
-                      "https://linux.oracle.com/errata/ELSA-2024-2447.html",
-                      "https://lists.debian.org/debian-lts-announce/2024/10/msg00033.html",
-                      "https://lists.debian.org/debian-lts-announce/2024/11/msg00000.html",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2023-5678",
-                      "https://security.netapp.com/advisory/ntap-20231130-0010/",
-                      "https://ubuntu.com/security/notices/USN-6622-1",
-                      "https://ubuntu.com/security/notices/USN-6632-1",
-                      "https://ubuntu.com/security/notices/USN-6709-1",
-                      "https://ubuntu.com/security/notices/USN-7894-1",
-                      "https://www.cve.org/CVERecord?id=CVE-2023-5678",
-                      "https://www.openssl.org/news/secadv/20231106.txt"
-                    ],
-                    "severity": "MEDIUM",
-                    "suppressed": false,
-                    "title": "openssl: Generating excessively long X9.42 DH keys or checking excessively long X9.42 DH keys or parameters may be very slow"
-                  },
-                  {
-                    "cve": "CVE-2024-0727",
-                    "cvss": {
-                      "ghsa": {
-                        "v3score": "5.5",
-                        "v3vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H"
-                      },
-                      "nvd": {
-                        "v3score": "5.5",
-                        "v3vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H"
-                      },
-                      "redhat": {
-                        "v3score": "5.5",
-                        "v3vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-476"
-                    ],
-                    "description": "Issue summary: Processing a maliciously formatted PKCS12 file may lead OpenSSL\nto crash leading to a potential Denial of Service attack\n\nImpact summary: Applications loading files in the PKCS12 format from untrusted\nsources might terminate abruptly.\n\nA file in PKCS12 format can contain certificates and keys and may come from an\nuntrusted source. The PKCS12 specification allows certain fields to be NULL, but\nOpenSSL does not correctly check for this case. This can lead to a NULL pointer\ndereference that results in OpenSSL crashing. If an application processes PKCS12\nfiles from an untrusted source using the OpenSSL APIs then that application will\nbe vulnerable to this issue.\n\nOpenSSL APIs that are vulnerable to this are: PKCS12_parse(),\nPKCS12_unpack_p7data(), PKCS12_unpack_p7encdata(), PKCS12_unpack_authsafes()\nand PKCS12_newpass().\n\nWe have also fixed a similar issue in SMIME_write_PKCS7(). However since this\nfunction is related to writing data we do not consider it security significant.\n\nThe FIPS modules in 3.2, 3.1 and 3.0 are not affected by this issue.",
-                    "diffID": "sha256:2f458857553769636f3c149c0c8d41acc63c9e24282823b0ea26869a635e9f48",
-                    "fixedVersions": [
-                      "1.1.1w-0+deb11u2"
-                    ],
-                    "installedVersion": "1.1.1w-0+deb11u1",
-                    "packageName": "openssl",
-                    "purl": "pkg:deb/debian/openssl@1.1.1w-0%2Bdeb11u1?arch=arm64&distro=debian-11.9",
-                    "references": [
-                      "http://www.openwall.com/lists/oss-security/2024/03/11/1",
-                      "https://access.redhat.com/errata/RHSA-2024:9088",
-                      "https://access.redhat.com/security/cve/CVE-2024-0727",
-                      "https://bugzilla.redhat.com/2257571",
-                      "https://bugzilla.redhat.com/2258502",
-                      "https://bugzilla.redhat.com/2259944",
-                      "https://bugzilla.redhat.com/2284243",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2257571",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2258502",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2259944",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2284243",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-6129",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-6237",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-0727",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-1298",
-                      "https://errata.almalinux.org/9/ALSA-2024-9088.html",
-                      "https://errata.rockylinux.org/RLSA-2024:9088",
-                      "https://github.com/alexcrichton/openssl-src-rs/commit/add20f73b6b42be7451af2e1044d4e0e778992b2",
-                      "https://github.com/github/advisory-database/pull/3472",
-                      "https://github.com/openssl/openssl/commit/09df4395b5071217b76dc7d3d2e630eb8c5a79c2",
-                      "https://github.com/openssl/openssl/commit/775acfdbd0c6af9ac855f34969cdab0c0c90844a",
-                      "https://github.com/openssl/openssl/commit/d135eeab8a5dbf72b3da5240bab9ddb7678dbd2c",
-                      "https://github.com/openssl/openssl/pull/23362",
-                      "https://github.com/pyca/cryptography/commit/3519591d255d4506fbcd0d04037d45271903c64d",
-                      "https://github.openssl.org/openssl/extended-releases/commit/03b3941d60c4bce58fab69a0c22377ab439bc0e8",
-                      "https://github.openssl.org/openssl/extended-releases/commit/aebaa5883e31122b404e450732dc833dc9dee539",
-                      "https://linux.oracle.com/cve/CVE-2024-0727.html",
-                      "https://linux.oracle.com/errata/ELSA-2024-9088.html",
-                      "https://lists.debian.org/debian-lts-announce/2024/10/msg00033.html",
-                      "https://lists.debian.org/debian-lts-announce/2024/11/msg00000.html",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2024-0727",
-                      "https://security.netapp.com/advisory/ntap-20240208-0006",
-                      "https://security.netapp.com/advisory/ntap-20240208-0006/",
-                      "https://ubuntu.com/security/notices/USN-6622-1",
-                      "https://ubuntu.com/security/notices/USN-6632-1",
-                      "https://ubuntu.com/security/notices/USN-6709-1",
-                      "https://ubuntu.com/security/notices/USN-7018-1",
-                      "https://ubuntu.com/security/notices/USN-7894-1",
-                      "https://www.cve.org/CVERecord?id=CVE-2024-0727",
-                      "https://www.openssl.org/news/secadv/20240125.txt"
-                    ],
-                    "severity": "MEDIUM",
-                    "suppressed": false,
-                    "title": "openssl: denial of service via null dereference"
-                  },
-                  {
-                    "cve": "CVE-2024-13176",
-                    "cvss": {
-                      "redhat": {
-                        "v3score": "4.7",
-                        "v3vector": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-385"
-                    ],
-                    "description": "Issue summary: A timing side-channel which could potentially allow recovering\nthe private key exists in the ECDSA signature computation.\n\nImpact summary: A timing side-channel in ECDSA signature computations\ncould allow recovering the private key by an attacker. However, measuring\nthe timing would require either local access to the signing application or\na very fast network connection with low latency.\n\nThere is a timing signal of around 300 nanoseconds when the top word of\nthe inverted ECDSA nonce value is zero. This can happen with significant\nprobability only for some of the supported elliptic curves. In particular\nthe NIST P-521 curve is affected. To be able to measure this leak, the attacker\nprocess must either be located in the same physical computer or must\nhave a very fast network connection with low latency. For that reason\nthe severity of this vulnerability is Low.\n\nThe FIPS modules in 3.4, 3.3, 3.2, 3.1 and 3.0 are affected by this issue.",
-                    "diffID": "sha256:2f458857553769636f3c149c0c8d41acc63c9e24282823b0ea26869a635e9f48",
-                    "fixedVersions": [
-                      "1.1.1w-0+deb11u3"
-                    ],
-                    "installedVersion": "1.1.1w-0+deb11u1",
-                    "packageName": "openssl",
-                    "purl": "pkg:deb/debian/openssl@1.1.1w-0%2Bdeb11u1?arch=arm64&distro=debian-11.9",
-                    "references": [
-                      "http://www.openwall.com/lists/oss-security/2025/01/20/2",
-                      "https://access.redhat.com/errata/RHSA-2025:15699",
-                      "https://access.redhat.com/security/cve/CVE-2024-13176",
-                      "https://bugzilla.redhat.com/2359885",
-                      "https://bugzilla.redhat.com/2359888",
-                      "https://bugzilla.redhat.com/2359892",
-                      "https://bugzilla.redhat.com/2359894",
-                      "https://bugzilla.redhat.com/2359895",
-                      "https://bugzilla.redhat.com/2359899",
-                      "https://bugzilla.redhat.com/2359900",
-                      "https://bugzilla.redhat.com/2359902",
-                      "https://bugzilla.redhat.com/2359903",
-                      "https://bugzilla.redhat.com/2359911",
-                      "https://bugzilla.redhat.com/2359918",
-                      "https://bugzilla.redhat.com/2359920",
-                      "https://bugzilla.redhat.com/2359924",
-                      "https://bugzilla.redhat.com/2359928",
-                      "https://bugzilla.redhat.com/2359930",
-                      "https://bugzilla.redhat.com/2359932",
-                      "https://bugzilla.redhat.com/2359934",
-                      "https://bugzilla.redhat.com/2359938",
-                      "https://bugzilla.redhat.com/2359940",
-                      "https://bugzilla.redhat.com/2359943",
-                      "https://bugzilla.redhat.com/2359944",
-                      "https://bugzilla.redhat.com/2359945",
-                      "https://bugzilla.redhat.com/2359947",
-                      "https://bugzilla.redhat.com/2359950",
-                      "https://bugzilla.redhat.com/2359963",
-                      "https://bugzilla.redhat.com/2359964",
-                      "https://bugzilla.redhat.com/2359972",
-                      "https://bugzilla.redhat.com/2370920",
-                      "https://bugzilla.redhat.com/2380264",
-                      "https://bugzilla.redhat.com/2380273",
-                      "https://bugzilla.redhat.com/2380274",
-                      "https://bugzilla.redhat.com/2380278",
-                      "https://bugzilla.redhat.com/2380280",
-                      "https://bugzilla.redhat.com/2380283",
-                      "https://bugzilla.redhat.com/2380284",
-                      "https://bugzilla.redhat.com/2380290",
-                      "https://bugzilla.redhat.com/2380291",
-                      "https://bugzilla.redhat.com/2380295",
-                      "https://bugzilla.redhat.com/2380298",
-                      "https://bugzilla.redhat.com/2380306",
-                      "https://bugzilla.redhat.com/2380308",
-                      "https://bugzilla.redhat.com/2380309",
-                      "https://bugzilla.redhat.com/2380310",
-                      "https://bugzilla.redhat.com/2380312",
-                      "https://bugzilla.redhat.com/2380313",
-                      "https://bugzilla.redhat.com/2380320",
-                      "https://bugzilla.redhat.com/2380321",
-                      "https://bugzilla.redhat.com/2380322",
-                      "https://bugzilla.redhat.com/2380326",
-                      "https://bugzilla.redhat.com/2380327",
-                      "https://bugzilla.redhat.com/2380334",
-                      "https://bugzilla.redhat.com/2380335",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2338999",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2359885",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2359888",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2359892",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2359894",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2359895",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2359899",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2359900",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2359902",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2359903",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2359911",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2359918",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2359920",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2359924",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2359928",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2359930",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2359932",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2359934",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2359938",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2359940",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2359943",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2359944",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2359945",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2359947",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2359950",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2359963",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2359964",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2359972",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2370920",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2380264",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2380273",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2380274",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2380278",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2380280",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2380283",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2380284",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2380290",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2380291",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2380295",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2380298",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2380306",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2380308",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2380309",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2380310",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2380312",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2380313",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2380320",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2380321",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2380322",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2380326",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2380327",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2380334",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2380335",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-13176",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21574",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21575",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21577",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21579",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21580",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21581",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21584",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21585",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21588",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30681",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30682",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30683",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30684",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30685",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30687",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30688",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30689",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30693",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30695",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30696",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30699",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30703",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30704",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30705",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30715",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30721",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30722",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50077",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50078",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50079",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50080",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50081",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50082",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50083",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50084",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50085",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50086",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50087",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50088",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50091",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50092",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50093",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50094",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50096",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50097",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50098",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50099",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50100",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50101",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50102",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50104",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-5399",
-                      "https://errata.almalinux.org/10/ALSA-2025-15699.html",
-                      "https://errata.rockylinux.org/RLSA-2025:15699",
-                      "https://github.com/openssl/openssl/commit/07272b05b04836a762b4baa874958af51d513844",
-                      "https://github.com/openssl/openssl/commit/2af62e74fb59bc469506bc37eb2990ea408d9467",
-                      "https://github.com/openssl/openssl/commit/392dcb336405a0c94486aa6655057f59fd3a0902",
-                      "https://github.com/openssl/openssl/commit/4b1cb94a734a7d4ec363ac0a215a25c181e11f65",
-                      "https://github.com/openssl/openssl/commit/77c608f4c8857e63e98e66444e2e761c9627916f",
-                      "https://github.openssl.org/openssl/extended-releases/commit/0d5fd1ab987f7571e2c955d8d8b638fc0fb54ded",
-                      "https://github.openssl.org/openssl/extended-releases/commit/a2639000db19878d5d89586ae7b725080592ae86",
-                      "https://linux.oracle.com/cve/CVE-2024-13176.html",
-                      "https://linux.oracle.com/errata/ELSA-2025-16046.html",
-                      "https://lists.debian.org/debian-lts-announce/2025/05/msg00028.html",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2024-13176",
-                      "https://openssl-library.org/news/secadv/20250120.txt",
-                      "https://security.netapp.com/advisory/ntap-20250124-0005/",
-                      "https://security.netapp.com/advisory/ntap-20250418-0010/",
-                      "https://security.netapp.com/advisory/ntap-20250502-0006/",
-                      "https://ubuntu.com/security/notices/USN-7264-1",
-                      "https://ubuntu.com/security/notices/USN-7278-1",
-                      "https://ubuntu.com/security/notices/USN-7894-1",
-                      "https://www.cve.org/CVERecord?id=CVE-2024-13176",
-                      "https://www.oracle.com/security-alerts/cpuapr2025.html#AppendixMSQL"
-                    ],
-                    "severity": "MEDIUM",
-                    "suppressed": false,
-                    "title": "openssl: Timing side-channel in ECDSA signature computation"
-                  },
-                  {
-                    "cve": "CVE-2024-4741",
-                    "cvss": {
-                      "redhat": {
-                        "v3score": "5.6",
-                        "v3vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-416"
-                    ],
-                    "description": "Issue summary: Calling the OpenSSL API function SSL_free_buffers may cause\nmemory to be accessed that was previously freed in some situations\n\nImpact summary: A use after free can have a range of potential consequences such\nas the corruption of valid data, crashes or execution of arbitrary code.\nHowever, only applications that directly call the SSL_free_buffers function are\naffected by this issue. Applications that do not call this function are not\nvulnerable. Our investigations indicate that this function is rarely used by\napplications.\n\nThe SSL_free_buffers function is used to free the internal OpenSSL buffer used\nwhen processing an incoming record from the network. The call is only expected\nto succeed if the buffer is not currently in use. However, two scenarios have\nbeen identified where the buffer is freed even when still in use.\n\nThe first scenario occurs where a record header has been received from the\nnetwork and processed by OpenSSL, but the full record body has not yet arrived.\nIn this case calling SSL_free_buffers will succeed even though a record has only\nbeen partially processed and the buffer is still in use.\n\nThe second scenario occurs where a full record containing application data has\nbeen received and processed by OpenSSL but the application has only read part of\nthis data. Again a call to SSL_free_buffers will succeed even though the buffer\nis still in use.\n\nWhile these scenarios could occur accidentally during normal operation a\nmalicious attacker could attempt to engineer a stituation where this occurs.\nWe are not aware of this issue being actively exploited.\n\nThe FIPS modules in 3.3, 3.2, 3.1 and 3.0 are not affected by this issue.",
-                    "diffID": "sha256:2f458857553769636f3c149c0c8d41acc63c9e24282823b0ea26869a635e9f48",
-                    "fixedVersions": [
-                      "1.1.1w-0+deb11u2"
-                    ],
-                    "installedVersion": "1.1.1w-0+deb11u1",
-                    "packageName": "openssl",
-                    "purl": "pkg:deb/debian/openssl@1.1.1w-0%2Bdeb11u1?arch=arm64&distro=debian-11.9",
-                    "references": [
-                      "https://access.redhat.com/errata/RHSA-2024:9333",
-                      "https://access.redhat.com/security/cve/CVE-2024-4741",
-                      "https://bugzilla.redhat.com/2274020",
-                      "https://bugzilla.redhat.com/2281029",
-                      "https://bugzilla.redhat.com/2283757",
-                      "https://bugzilla.redhat.com/2294581",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2274020",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2281029",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2283757",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2294581",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-2511",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-4603",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-4741",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-5535",
-                      "https://errata.almalinux.org/9/ALSA-2024-9333.html",
-                      "https://errata.rockylinux.org/RLSA-2024:9333",
-                      "https://github.com/openssl/openssl/commit/704f725b96aa373ee45ecfb23f6abfe8be8d9177",
-                      "https://github.com/openssl/openssl/commit/b3f0eb0a295f58f16ba43ba99dad70d4ee5c437d",
-                      "https://github.com/openssl/openssl/commit/c88c3de51020c37e8706bf7a682a162593053aac",
-                      "https://github.com/openssl/openssl/commit/e5093133c35ca82874ad83697af76f4b0f7e3bd8",
-                      "https://github.openssl.org/openssl/extended-releases/commit/f7a045f3143fc6da2ee66bf52d8df04829590dd4",
-                      "https://linux.oracle.com/cve/CVE-2024-4741.html",
-                      "https://linux.oracle.com/errata/ELSA-2024-9333.html",
-                      "https://lists.debian.org/debian-lts-announce/2024/10/msg00033.html",
-                      "https://lists.debian.org/debian-lts-announce/2024/11/msg00000.html",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2024-4741",
-                      "https://security.netapp.com/advisory/ntap-20240621-0004/",
-                      "https://ubuntu.com/security/notices/USN-6937-1",
-                      "https://ubuntu.com/security/notices/USN-7894-1",
-                      "https://www.cve.org/CVERecord?id=CVE-2024-4741",
-                      "https://www.openssl.org/news/secadv/20240528.txt"
-                    ],
-                    "severity": "MEDIUM",
-                    "suppressed": false,
-                    "title": "openssl: Use After Free with SSL_free_buffers"
-                  },
-                  {
-                    "cve": "CVE-2024-5535",
-                    "cvss": {
-                      "redhat": {
-                        "v3score": "5.9",
-                        "v3vector": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-125"
-                    ],
-                    "description": "Issue summary: Calling the OpenSSL API function SSL_select_next_proto with an\nempty supported client protocols buffer may cause a crash or memory contents to\nbe sent to the peer.\n\nImpact summary: A buffer overread can have a range of potential consequences\nsuch as unexpected application beahviour or a crash. In particular this issue\ncould result in up to 255 bytes of arbitrary private data from memory being sent\nto the peer leading to a loss of confidentiality. However, only applications\nthat directly call the SSL_select_next_proto function with a 0 length list of\nsupported client protocols are affected by this issue. This would normally never\nbe a valid scenario and is typically not under attacker control but may occur by\naccident in the case of a configuration or programming error in the calling\napplication.\n\nThe OpenSSL API function SSL_select_next_proto is typically used by TLS\napplications that support ALPN (Application Layer Protocol Negotiation) or NPN\n(Next Protocol Negotiation). NPN is older, was never standardised and\nis deprecated in favour of ALPN. We believe that ALPN is significantly more\nwidely deployed than NPN. The SSL_select_next_proto function accepts a list of\nprotocols from the server and a list of protocols from the client and returns\nthe first protocol that appears in the server list that also appears in the\nclient list. In the case of no overlap between the two lists it returns the\nfirst item in the client list. In either case it will signal whether an overlap\nbetween the two lists was found. In the case where SSL_select_next_proto is\ncalled with a zero length client list it fails to notice this condition and\nreturns the memory immediately following the client list pointer (and reports\nthat there was no overlap in the lists).\n\nThis function is typically called from a server side application callback for\nALPN or a client side application callback for NPN. In the case of ALPN the list\nof protocols supplied by the client is guaranteed by libssl to never be zero in\nlength. The list of server protocols comes from the application and should never\nnormally be expected to be of zero length. In this case if the\nSSL_select_next_proto function has been called as expected (with the list\nsupplied by the client passed in the client/client_len parameters), then the\napplication will not be vulnerable to this issue. If the application has\naccidentally been configured with a zero length server list, and has\naccidentally passed that zero length server list in the client/client_len\nparameters, and has additionally failed to correctly handle a \"no overlap\"\nresponse (which would normally result in a handshake failure in ALPN) then it\nwill be vulnerable to this problem.\n\nIn the case of NPN, the protocol permits the client to opportunistically select\na protocol when there is no overlap. OpenSSL returns the first client protocol\nin the no overlap case in support of this. The list of client protocols comes\nfrom the application and should never normally be expected to be of zero length.\nHowever if the SSL_select_next_proto function is accidentally called with a\nclient_len of 0 then an invalid memory pointer will be returned instead. If the\napplication uses this output as the opportunistic protocol then the loss of\nconfidentiality will occur.\n\nThis issue has been assessed as Low severity because applications are most\nlikely to be vulnerable if they are using NPN instead of ALPN - but NPN is not\nwidely used. It also requires an application configuration or programming error.\nFinally, this issue would not typically be under attacker control making active\nexploitation unlikely.\n\nThe FIPS modules in 3.3, 3.2, 3.1 and 3.0 are not affected by this issue.\n\nDue to the low severity of this issue we are not issuing new releases of\nOpenSSL at this time. The fix will be included in the next releases when they\nbecome available.",
-                    "diffID": "sha256:2f458857553769636f3c149c0c8d41acc63c9e24282823b0ea26869a635e9f48",
-                    "fixedVersions": [
-                      "1.1.1w-0+deb11u2"
-                    ],
-                    "installedVersion": "1.1.1w-0+deb11u1",
-                    "packageName": "openssl",
-                    "purl": "pkg:deb/debian/openssl@1.1.1w-0%2Bdeb11u1?arch=arm64&distro=debian-11.9",
-                    "references": [
-                      "http://www.openwall.com/lists/oss-security/2024/06/27/1",
-                      "http://www.openwall.com/lists/oss-security/2024/06/28/4",
-                      "http://www.openwall.com/lists/oss-security/2024/08/15/1",
-                      "https://access.redhat.com/errata/RHSA-2025:1673",
-                      "https://access.redhat.com/security/cve/CVE-2024-5535",
-                      "https://bugzilla.redhat.com/2294581",
-                      "https://bugzilla.redhat.com/2294676",
-                      "https://bugzilla.redhat.com/2301888",
-                      "https://bugzilla.redhat.com/2318857",
-                      "https://bugzilla.redhat.com/2318858",
-                      "https://bugzilla.redhat.com/2318870",
-                      "https://bugzilla.redhat.com/2318873",
-                      "https://bugzilla.redhat.com/2318874",
-                      "https://bugzilla.redhat.com/2318876",
-                      "https://bugzilla.redhat.com/2318882",
-                      "https://bugzilla.redhat.com/2318883",
-                      "https://bugzilla.redhat.com/2318884",
-                      "https://bugzilla.redhat.com/2318885",
-                      "https://bugzilla.redhat.com/2318886",
-                      "https://bugzilla.redhat.com/2318897",
-                      "https://bugzilla.redhat.com/2318900",
-                      "https://bugzilla.redhat.com/2318905",
-                      "https://bugzilla.redhat.com/2318914",
-                      "https://bugzilla.redhat.com/2318922",
-                      "https://bugzilla.redhat.com/2318923",
-                      "https://bugzilla.redhat.com/2318925",
-                      "https://bugzilla.redhat.com/2318926",
-                      "https://bugzilla.redhat.com/2318927",
-                      "https://bugzilla.redhat.com/2331191",
-                      "https://bugzilla.redhat.com/2339218",
-                      "https://bugzilla.redhat.com/2339220",
-                      "https://bugzilla.redhat.com/2339221",
-                      "https://bugzilla.redhat.com/2339226",
-                      "https://bugzilla.redhat.com/2339231",
-                      "https://bugzilla.redhat.com/2339236",
-                      "https://bugzilla.redhat.com/2339238",
-                      "https://bugzilla.redhat.com/2339243",
-                      "https://bugzilla.redhat.com/2339247",
-                      "https://bugzilla.redhat.com/2339252",
-                      "https://bugzilla.redhat.com/2339259",
-                      "https://bugzilla.redhat.com/2339266",
-                      "https://bugzilla.redhat.com/2339270",
-                      "https://bugzilla.redhat.com/2339271",
-                      "https://bugzilla.redhat.com/2339275",
-                      "https://bugzilla.redhat.com/2339277",
-                      "https://bugzilla.redhat.com/2339281",
-                      "https://bugzilla.redhat.com/2339284",
-                      "https://bugzilla.redhat.com/2339291",
-                      "https://bugzilla.redhat.com/2339293",
-                      "https://bugzilla.redhat.com/2339295",
-                      "https://bugzilla.redhat.com/2339299",
-                      "https://bugzilla.redhat.com/2339300",
-                      "https://bugzilla.redhat.com/2339304",
-                      "https://bugzilla.redhat.com/2339305",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2274020",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2281029",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2283757",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2294581",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-2511",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-4603",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-4741",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-5535",
-                      "https://errata.almalinux.org/8/ALSA-2025-1673.html",
-                      "https://errata.rockylinux.org/RLSA-2024:9333",
-                      "https://github.com/openssl/openssl/commit/4ada436a1946cbb24db5ab4ca082b69c1bc10f37",
-                      "https://github.com/openssl/openssl/commit/99fb785a5f85315b95288921a321a935ea29a51e",
-                      "https://github.com/openssl/openssl/commit/cf6f91f6121f4db167405db2f0de410a456f260c",
-                      "https://github.com/openssl/openssl/commit/e86ac436f0bd54d4517745483e2315650fae7b2c",
-                      "https://github.openssl.org/openssl/extended-releases/commit/9947251413065a05189a63c9b7a6c1d4e224c21c",
-                      "https://github.openssl.org/openssl/extended-releases/commit/b78ec0824da857223486660177d3b1f255c65d87",
-                      "https://linux.oracle.com/cve/CVE-2024-5535.html",
-                      "https://linux.oracle.com/errata/ELSA-2025-1673.html",
-                      "https://lists.debian.org/debian-lts-announce/2024/10/msg00033.html",
-                      "https://lists.debian.org/debian-lts-announce/2024/11/msg00000.html",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2024-5535",
-                      "https://openssl.org/news/secadv/20240627.txt",
-                      "https://security.netapp.com/advisory/ntap-20240712-0005/",
-                      "https://security.netapp.com/advisory/ntap-20241025-0006/",
-                      "https://security.netapp.com/advisory/ntap-20241025-0010/",
-                      "https://ubuntu.com/security/notices/USN-6937-1",
-                      "https://ubuntu.com/security/notices/USN-7894-1",
-                      "https://www.cve.org/CVERecord?id=CVE-2024-5535",
-                      "https://www.openssl.org/news/secadv/20240627.txt",
-                      "https://www.oracle.com/security-alerts/cpuoct2024.html#AppendixMSQL"
-                    ],
-                    "severity": "MEDIUM",
-                    "suppressed": false,
-                    "title": "openssl: SSL_select_next_proto buffer overread"
-                  },
-                  {
-                    "cve": "CVE-2025-68160",
-                    "cvss": {
-                      "redhat": {
-                        "v3score": "4.7",
-                        "v3vector": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-787"
-                    ],
-                    "description": "Issue summary: Writing large, newline-free data into a BIO chain using the\nline-buffering filter where the next BIO performs short writes can trigger\na heap-based out-of-bounds write.\n\nImpact summary: This out-of-bounds write can cause memory corruption which\ntypically results in a crash, leading to Denial of Service for an application.\n\nThe line-buffering BIO filter (BIO_f_linebuffer) is not used by default in\nTLS/SSL data paths. In OpenSSL command-line applications, it is typically\nonly pushed onto stdout/stderr on VMS systems. Third-party applications that\nexplicitly use this filter with a BIO chain that can short-write and that\nwrite large, newline-free data influenced by an attacker would be affected.\nHowever, the circumstances where this could happen are unlikely to be under\nattacker control, and BIO_f_linebuffer is unlikely to be handling non-curated\ndata controlled by an attacker. For that reason the issue was assessed as\nLow severity.\n\nThe FIPS modules in 3.6, 3.5, 3.4, 3.3 and 3.0 are not affected by this issue,\nas the BIO implementation is outside the OpenSSL FIPS module boundary.\n\nOpenSSL 3.6, 3.5, 3.4, 3.3, 3.0, 1.1.1 and 1.0.2 are vulnerable to this issue.",
-                    "diffID": "sha256:2f458857553769636f3c149c0c8d41acc63c9e24282823b0ea26869a635e9f48",
-                    "installedVersion": "1.1.1w-0+deb11u1",
-                    "packageName": "openssl",
-                    "purl": "pkg:deb/debian/openssl@1.1.1w-0%2Bdeb11u1?arch=arm64&distro=debian-11.9",
-                    "references": [
-                      "https://access.redhat.com/errata/RHSA-2026:1472",
-                      "https://access.redhat.com/security/cve/CVE-2025-68160",
-                      "https://bugzilla.redhat.com/2430375",
-                      "https://bugzilla.redhat.com/2430376",
-                      "https://bugzilla.redhat.com/2430377",
-                      "https://bugzilla.redhat.com/2430378",
-                      "https://bugzilla.redhat.com/2430379",
-                      "https://bugzilla.redhat.com/2430380",
-                      "https://bugzilla.redhat.com/2430381",
-                      "https://bugzilla.redhat.com/2430386",
-                      "https://bugzilla.redhat.com/2430387",
-                      "https://bugzilla.redhat.com/2430388",
-                      "https://bugzilla.redhat.com/2430389",
-                      "https://bugzilla.redhat.com/2430390",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430375",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430376",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430377",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430378",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430379",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430380",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430381",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430386",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430387",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430388",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430389",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430390",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-11187",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-15467",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-15468",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-15469",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-66199",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-68160",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-69418",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-69419",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-69420",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-69421",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-22795",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-22796",
-                      "https://errata.almalinux.org/10/ALSA-2026-1472.html",
-                      "https://errata.rockylinux.org/RLSA-2026:1473",
-                      "https://github.com/openssl/openssl/commit/384011202af92605d926fafe4a0bcd6b65d162ad",
-                      "https://github.com/openssl/openssl/commit/475c466ef2fbd8fc1df6fae1c3eed9c813fc8ff6",
-                      "https://github.com/openssl/openssl/commit/4c96fbba618e1940f038012506ee9e21d32ee12c",
-                      "https://github.com/openssl/openssl/commit/6845c3b6460a98b1ec4e463baa2ea1a63a32d7c0",
-                      "https://github.com/openssl/openssl/commit/68a7cd2e2816c3a02f4d45a2ce43fc04fac97096",
-                      "https://linux.oracle.com/cve/CVE-2025-68160.html",
-                      "https://linux.oracle.com/errata/ELSA-2026-50081.html",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2025-68160",
-                      "https://openssl-library.org/news/secadv/20260127.txt",
-                      "https://ubuntu.com/security/notices/USN-7980-1",
-                      "https://ubuntu.com/security/notices/USN-7980-2",
-                      "https://www.cve.org/CVERecord?id=CVE-2025-68160"
-                    ],
-                    "severity": "MEDIUM",
-                    "suppressed": false,
-                    "title": "openssl: OpenSSL: Denial of Service due to out-of-bounds write in BIO filter"
-                  },
-                  {
-                    "cve": "CVE-2025-69418",
-                    "cvss": {
-                      "redhat": {
-                        "v3score": "4",
-                        "v3vector": "CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-325"
-                    ],
-                    "description": "Issue summary: When using the low-level OCB API directly with AES-NI or<br>other hardware-accelerated code paths, inputs whose length is not a multiple<br>of 16 bytes can leave the final partial block unencrypted and unauthenticated.<br><br>Impact summary: The trailing 1-15 bytes of a message may be exposed in<br>cleartext on encryption and are not covered by the authentication tag,<br>allowing an attacker to read or tamper with those bytes without detection.<br><br>The low-level OCB encrypt and decrypt routines in the hardware-accelerated<br>stream path process full 16-byte blocks but do not advance the input/output<br>pointers. The subsequent tail-handling code then operates on the original<br>base pointers, effectively reprocessing the beginning of the buffer while<br>leaving the actual trailing bytes unprocessed. The authentication checksum<br>also excludes the true tail bytes.<br><br>However, typical OpenSSL consumers using EVP are not affected because the<br>higher-level EVP and provider OCB implementations split inputs so that full<br>blocks and trailing partial blocks are processed in separate calls, avoiding<br>the problematic code path. Additionally, TLS does not use OCB ciphersuites.<br>The vulnerability only affects applications that call the low-level<br>CRYPTO_ocb128_encrypt() or CRYPTO_ocb128_decrypt() functions directly with<br>non-block-aligned lengths in a single call on hardware-accelerated builds.<br>For these reasons the issue was assessed as Low severity.<br><br>The FIPS modules in 3.6, 3.5, 3.4, 3.3, 3.2, 3.1 and 3.0 are not affected<br>by this issue, as OCB mode is not a FIPS-approved algorithm.<br><br>OpenSSL 3.6, 3.5, 3.4, 3.3, 3.0 and 1.1.1 are vulnerable to this issue.<br><br>OpenSSL 1.0.2 is not affected by this issue.",
-                    "diffID": "sha256:2f458857553769636f3c149c0c8d41acc63c9e24282823b0ea26869a635e9f48",
-                    "installedVersion": "1.1.1w-0+deb11u1",
-                    "packageName": "openssl",
-                    "purl": "pkg:deb/debian/openssl@1.1.1w-0%2Bdeb11u1?arch=arm64&distro=debian-11.9",
-                    "references": [
-                      "https://access.redhat.com/errata/RHSA-2026:1472",
-                      "https://access.redhat.com/security/cve/CVE-2025-69418",
-                      "https://bugzilla.redhat.com/2430375",
-                      "https://bugzilla.redhat.com/2430376",
-                      "https://bugzilla.redhat.com/2430377",
-                      "https://bugzilla.redhat.com/2430378",
-                      "https://bugzilla.redhat.com/2430379",
-                      "https://bugzilla.redhat.com/2430380",
-                      "https://bugzilla.redhat.com/2430381",
-                      "https://bugzilla.redhat.com/2430386",
-                      "https://bugzilla.redhat.com/2430387",
-                      "https://bugzilla.redhat.com/2430388",
-                      "https://bugzilla.redhat.com/2430389",
-                      "https://bugzilla.redhat.com/2430390",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430375",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430376",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430377",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430378",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430379",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430380",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430381",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430386",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430387",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430388",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430389",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430390",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-11187",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-15467",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-15468",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-15469",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-66199",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-68160",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-69418",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-69419",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-69420",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-69421",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-22795",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-22796",
-                      "https://errata.almalinux.org/10/ALSA-2026-1472.html",
-                      "https://errata.rockylinux.org/RLSA-2026:1473",
-                      "https://github.com/openssl/openssl/commit/372fc5c77529695b05b4f5b5187691a57ef5dffc",
-                      "https://github.com/openssl/openssl/commit/4016975d4469cd6b94927c607f7c511385f928d8",
-                      "https://github.com/openssl/openssl/commit/52d23c86a54adab5ee9f80e48b242b52c4cc2347",
-                      "https://github.com/openssl/openssl/commit/a7589230356d908c0eca4b969ec4f62106f4f5ae",
-                      "https://github.com/openssl/openssl/commit/ed40856d7d4ba6cb42779b6770666a65f19cb977",
-                      "https://linux.oracle.com/cve/CVE-2025-69418.html",
-                      "https://linux.oracle.com/errata/ELSA-2026-50081.html",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2025-69418",
-                      "https://openssl-library.org/news/secadv/20260127.txt",
-                      "https://ubuntu.com/security/notices/USN-7980-1",
-                      "https://ubuntu.com/security/notices/USN-7980-2",
-                      "https://www.cve.org/CVERecord?id=CVE-2025-69418"
-                    ],
-                    "severity": "MEDIUM",
-                    "suppressed": false,
-                    "title": "openssl: OpenSSL: Information disclosure and data tampering via specific low-level OCB encryption/decryption calls"
-                  },
-                  {
-                    "cve": "CVE-2025-69420",
-                    "cvss": {
-                      "redhat": {
-                        "v3score": "5.9",
-                        "v3vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-754"
-                    ],
-                    "description": "Issue summary: A type confusion vulnerability exists in the TimeStamp Response\nverification code where an ASN1_TYPE union member is accessed without first\nvalidating the type, causing an invalid or NULL pointer dereference when\nprocessing a malformed TimeStamp Response file.\n\nImpact summary: An application calling TS_RESP_verify_response() with a\nmalformed TimeStamp Response can be caused to dereference an invalid or\nNULL pointer when reading, resulting in a Denial of Service.\n\nThe functions ossl_ess_get_signing_cert() and ossl_ess_get_signing_cert_v2()\naccess the signing cert attribute value without validating its type.\nWhen the type is not V_ASN1_SEQUENCE, this results in accessing invalid memory\nthrough the ASN1_TYPE union, causing a crash.\n\nExploiting this vulnerability requires an attacker to provide a malformed\nTimeStamp Response to an application that verifies timestamp responses. The\nTimeStamp protocol (RFC 3161) is not widely used and the impact of the\nexploit is just a Denial of Service. For these reasons the issue was\nassessed as Low severity.\n\nThe FIPS modules in 3.5, 3.4, 3.3 and 3.0 are not affected by this issue,\nas the TimeStamp Response implementation is outside the OpenSSL FIPS module\nboundary.\n\nOpenSSL 3.6, 3.5, 3.4, 3.3, 3.0 and 1.1.1 are vulnerable to this issue.\n\nOpenSSL 1.0.2 is not affected by this issue.",
-                    "diffID": "sha256:2f458857553769636f3c149c0c8d41acc63c9e24282823b0ea26869a635e9f48",
-                    "installedVersion": "1.1.1w-0+deb11u1",
-                    "packageName": "openssl",
-                    "purl": "pkg:deb/debian/openssl@1.1.1w-0%2Bdeb11u1?arch=arm64&distro=debian-11.9",
-                    "references": [
-                      "https://access.redhat.com/errata/RHSA-2026:1472",
-                      "https://access.redhat.com/security/cve/CVE-2025-69420",
-                      "https://bugzilla.redhat.com/2430375",
-                      "https://bugzilla.redhat.com/2430376",
-                      "https://bugzilla.redhat.com/2430377",
-                      "https://bugzilla.redhat.com/2430378",
-                      "https://bugzilla.redhat.com/2430379",
-                      "https://bugzilla.redhat.com/2430380",
-                      "https://bugzilla.redhat.com/2430381",
-                      "https://bugzilla.redhat.com/2430386",
-                      "https://bugzilla.redhat.com/2430387",
-                      "https://bugzilla.redhat.com/2430388",
-                      "https://bugzilla.redhat.com/2430389",
-                      "https://bugzilla.redhat.com/2430390",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430375",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430376",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430377",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430378",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430379",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430380",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430381",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430386",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430387",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430388",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430389",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430390",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-11187",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-15467",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-15468",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-15469",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-66199",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-68160",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-69418",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-69419",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-69420",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-69421",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-22795",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-22796",
-                      "https://errata.almalinux.org/10/ALSA-2026-1472.html",
-                      "https://errata.rockylinux.org/RLSA-2026:1473",
-                      "https://github.com/openssl/openssl/commit/27c7012c91cc986a598d7540f3079dfde2416eb9",
-                      "https://github.com/openssl/openssl/commit/4e254b48ad93cc092be3dd62d97015f33f73133a",
-                      "https://github.com/openssl/openssl/commit/564fd9c73787f25693bf9e75faf7bf6bb1305d4e",
-                      "https://github.com/openssl/openssl/commit/5eb0770ffcf11b785cf374ff3c19196245e54f1b",
-                      "https://github.com/openssl/openssl/commit/a99349ebfc519999edc50620abe24d599b9eb085",
-                      "https://linux.oracle.com/cve/CVE-2025-69420.html",
-                      "https://linux.oracle.com/errata/ELSA-2026-50081.html",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2025-69420",
-                      "https://openssl-library.org/news/secadv/20260127.txt",
-                      "https://ubuntu.com/security/notices/USN-7980-1",
-                      "https://ubuntu.com/security/notices/USN-7980-2",
-                      "https://www.cve.org/CVERecord?id=CVE-2025-69420"
-                    ],
-                    "severity": "MEDIUM",
-                    "suppressed": false,
-                    "title": "openssl: OpenSSL: Denial of Service via malformed TimeStamp Response"
-                  },
-                  {
-                    "cve": "CVE-2025-9230",
-                    "cvss": {
-                      "redhat": {
-                        "v3score": "5.6",
-                        "v3vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-125",
-                      "CWE-787"
-                    ],
-                    "description": "Issue summary: An application trying to decrypt CMS messages encrypted using\npassword based encryption can trigger an out-of-bounds read and write.\n\nImpact summary: This out-of-bounds read may trigger a crash which leads to\nDenial of Service for an application. The out-of-bounds write can cause\na memory corruption which can have various consequences including\na Denial of Service or Execution of attacker-supplied code.\n\nAlthough the consequences of a successful exploit of this vulnerability\ncould be severe, the probability that the attacker would be able to\nperform it is low. Besides, password based (PWRI) encryption support in CMS\nmessages is very rarely used. For that reason the issue was assessed as\nModerate severity according to our Security Policy.\n\nThe FIPS modules in 3.5, 3.4, 3.3, 3.2, 3.1 and 3.0 are not affected by this\nissue, as the CMS implementation is outside the OpenSSL FIPS module\nboundary.",
-                    "diffID": "sha256:2f458857553769636f3c149c0c8d41acc63c9e24282823b0ea26869a635e9f48",
-                    "fixedVersions": [
-                      "1.1.1w-0+deb11u4"
-                    ],
-                    "installedVersion": "1.1.1w-0+deb11u1",
-                    "packageName": "openssl",
-                    "purl": "pkg:deb/debian/openssl@1.1.1w-0%2Bdeb11u1?arch=arm64&distro=debian-11.9",
-                    "references": [
-                      "http://www.openwall.com/lists/oss-security/2025/09/30/5",
-                      "https://access.redhat.com/errata/RHSA-2026:0337",
-                      "https://access.redhat.com/security/cve/CVE-2025-9230",
-                      "https://bugzilla.redhat.com/2396054",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2396054",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-9230",
-                      "https://errata.almalinux.org/8/ALSA-2026-0337.html",
-                      "https://errata.rockylinux.org/RLSA-2025:21255",
-                      "https://github.com/openssl/openssl/commit/5965ea5dd6960f36d8b7f74f8eac67a8eb8f2b45",
-                      "https://github.com/openssl/openssl/commit/9e91358f365dee6c446dcdcdb01c04d2743fd280",
-                      "https://github.com/openssl/openssl/commit/a79c4ce559c6a3a8fd4109e9f33c1185d5bf2def",
-                      "https://github.com/openssl/openssl/commit/b5282d677551afda7d20e9c00e09561b547b2dfd",
-                      "https://github.com/openssl/openssl/commit/bae259a211ada6315dc50900686daaaaaa55f482",
-                      "https://github.openssl.org/openssl/extended-releases/commit/c2b96348bfa662f25f4fabf81958ae822063dae3",
-                      "https://github.openssl.org/openssl/extended-releases/commit/dfbaf161d8dafc1132dd88cd48ad990ed9b4c8ba",
-                      "https://linux.oracle.com/cve/CVE-2025-9230.html",
-                      "https://linux.oracle.com/errata/ELSA-2026-50077.html",
-                      "https://lists.debian.org/debian-lts-announce/2025/10/msg00001.html",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2025-9230",
-                      "https://openssl-library.org/news/secadv/20250930.txt",
-                      "https://ubuntu.com/security/notices/USN-7786-1",
-                      "https://www.cve.org/CVERecord?id=CVE-2025-9230"
-                    ],
-                    "severity": "MEDIUM",
-                    "suppressed": false,
-                    "title": "openssl: Out-of-bounds read & write in RFC 3211 KEK Unwrap"
-                  },
-                  {
-                    "cve": "CVE-2026-22795",
-                    "cvss": {
-                      "redhat": {
-                        "v3score": "5.5",
-                        "v3vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-754"
-                    ],
-                    "description": "Issue summary: An invalid or NULL pointer dereference can happen in\nan application processing a malformed PKCS#12 file.\n\nImpact summary: An application processing a malformed PKCS#12 file can be\ncaused to dereference an invalid or NULL pointer on memory read, resulting\nin a Denial of Service.\n\nA type confusion vulnerability exists in PKCS#12 parsing code where\nan ASN1_TYPE union member is accessed without first validating the type,\ncausing an invalid pointer read.\n\nThe location is constrained to a 1-byte address space, meaning any\nattempted pointer manipulation can only target addresses between 0x00 and 0xFF.\nThis range corresponds to the zero page, which is unmapped on most modern\noperating systems and will reliably result in a crash, leading only to a\nDenial of Service. Exploiting this issue also requires a user or application\nto process a maliciously crafted PKCS#12 file. It is uncommon to accept\nuntrusted PKCS#12 files in applications as they are usually used to store\nprivate keys which are trusted by definition. For these reasons, the issue\nwas assessed as Low severity.\n\nThe FIPS modules in 3.5, 3.4, 3.3 and 3.0 are not affected by this issue,\nas the PKCS12 implementation is outside the OpenSSL FIPS module boundary.\n\nOpenSSL 3.6, 3.5, 3.4, 3.3, 3.0 and 1.1.1 are vulnerable to this issue.\n\nOpenSSL 1.0.2 is not affected by this issue.",
-                    "diffID": "sha256:2f458857553769636f3c149c0c8d41acc63c9e24282823b0ea26869a635e9f48",
-                    "installedVersion": "1.1.1w-0+deb11u1",
-                    "packageName": "openssl",
-                    "purl": "pkg:deb/debian/openssl@1.1.1w-0%2Bdeb11u1?arch=arm64&distro=debian-11.9",
-                    "references": [
-                      "https://access.redhat.com/errata/RHSA-2026:1472",
-                      "https://access.redhat.com/security/cve/CVE-2026-22795",
-                      "https://bugzilla.redhat.com/2430375",
-                      "https://bugzilla.redhat.com/2430376",
-                      "https://bugzilla.redhat.com/2430377",
-                      "https://bugzilla.redhat.com/2430378",
-                      "https://bugzilla.redhat.com/2430379",
-                      "https://bugzilla.redhat.com/2430380",
-                      "https://bugzilla.redhat.com/2430381",
-                      "https://bugzilla.redhat.com/2430386",
-                      "https://bugzilla.redhat.com/2430387",
-                      "https://bugzilla.redhat.com/2430388",
-                      "https://bugzilla.redhat.com/2430389",
-                      "https://bugzilla.redhat.com/2430390",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430375",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430376",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430377",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430378",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430379",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430380",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430381",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430386",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430387",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430388",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430389",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430390",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-11187",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-15467",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-15468",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-15469",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-66199",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-68160",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-69418",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-69419",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-69420",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-69421",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-22795",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-22796",
-                      "https://errata.almalinux.org/10/ALSA-2026-1472.html",
-                      "https://errata.rockylinux.org/RLSA-2026:1473",
-                      "https://github.com/openssl/openssl/commit/2502e7b7d4c0cf4f972a881641fe09edc67aeec4",
-                      "https://github.com/openssl/openssl/commit/572844beca95068394c916626a6d3a490f831a49",
-                      "https://github.com/openssl/openssl/commit/7bbca05be55b129651d9df4bdb92becc45002c12",
-                      "https://github.com/openssl/openssl/commit/eeee3cbd4d682095ed431052f00403004596373e",
-                      "https://github.com/openssl/openssl/commit/ef2fb66ec571564d64d1c74a12e388a2a54d05d2",
-                      "https://linux.oracle.com/cve/CVE-2026-22795.html",
-                      "https://linux.oracle.com/errata/ELSA-2026-50081.html",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2026-22795",
-                      "https://openssl-library.org/news/secadv/20260127.txt",
-                      "https://ubuntu.com/security/notices/USN-7980-1",
-                      "https://ubuntu.com/security/notices/USN-7980-2",
-                      "https://www.cve.org/CVERecord?id=CVE-2026-22795"
-                    ],
-                    "severity": "MEDIUM",
-                    "suppressed": false,
-                    "title": "openssl: OpenSSL: Denial of Service due to type confusion in PKCS#12 file processing"
-                  },
-                  {
-                    "cve": "CVE-2026-22796",
-                    "cvss": {
-                      "redhat": {
-                        "v3score": "5.9",
-                        "v3vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-754"
-                    ],
-                    "description": "Issue summary: A type confusion vulnerability exists in the signature\nverification of signed PKCS#7 data where an ASN1_TYPE union member is\naccessed without first validating the type, causing an invalid or NULL\npointer dereference when processing malformed PKCS#7 data.\n\nImpact summary: An application performing signature verification of PKCS#7\ndata or calling directly the PKCS7_digest_from_attributes() function can be\ncaused to dereference an invalid or NULL pointer when reading, resulting in\na Denial of Service.\n\nThe function PKCS7_digest_from_attributes() accesses the message digest attribute\nvalue without validating its type. When the type is not V_ASN1_OCTET_STRING,\nthis results in accessing invalid memory through the ASN1_TYPE union, causing\na crash.\n\nExploiting this vulnerability requires an attacker to provide a malformed\nsigned PKCS#7 to an application that verifies it. The impact of the\nexploit is just a Denial of Service, the PKCS7 API is legacy and applications\nshould be using the CMS API instead. For these reasons the issue was\nassessed as Low severity.\n\nThe FIPS modules in 3.5, 3.4, 3.3 and 3.0 are not affected by this issue,\nas the PKCS#7 parsing implementation is outside the OpenSSL FIPS module\nboundary.\n\nOpenSSL 3.6, 3.5, 3.4, 3.3, 3.0, 1.1.1 and 1.0.2 are vulnerable to this issue.",
-                    "diffID": "sha256:2f458857553769636f3c149c0c8d41acc63c9e24282823b0ea26869a635e9f48",
-                    "installedVersion": "1.1.1w-0+deb11u1",
-                    "packageName": "openssl",
-                    "purl": "pkg:deb/debian/openssl@1.1.1w-0%2Bdeb11u1?arch=arm64&distro=debian-11.9",
-                    "references": [
-                      "https://access.redhat.com/errata/RHSA-2026:1472",
-                      "https://access.redhat.com/security/cve/CVE-2026-22796",
-                      "https://bugzilla.redhat.com/2430375",
-                      "https://bugzilla.redhat.com/2430376",
-                      "https://bugzilla.redhat.com/2430377",
-                      "https://bugzilla.redhat.com/2430378",
-                      "https://bugzilla.redhat.com/2430379",
-                      "https://bugzilla.redhat.com/2430380",
-                      "https://bugzilla.redhat.com/2430381",
-                      "https://bugzilla.redhat.com/2430386",
-                      "https://bugzilla.redhat.com/2430387",
-                      "https://bugzilla.redhat.com/2430388",
-                      "https://bugzilla.redhat.com/2430389",
-                      "https://bugzilla.redhat.com/2430390",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430375",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430376",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430377",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430378",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430379",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430380",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430381",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430386",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430387",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430388",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430389",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2430390",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-11187",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-15467",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-15468",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-15469",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-66199",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-68160",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-69418",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-69419",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-69420",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-69421",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-22795",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-22796",
-                      "https://errata.almalinux.org/10/ALSA-2026-1472.html",
-                      "https://errata.rockylinux.org/RLSA-2026:1473",
-                      "https://github.com/openssl/openssl/commit/2502e7b7d4c0cf4f972a881641fe09edc67aeec4",
-                      "https://github.com/openssl/openssl/commit/572844beca95068394c916626a6d3a490f831a49",
-                      "https://github.com/openssl/openssl/commit/7bbca05be55b129651d9df4bdb92becc45002c12",
-                      "https://github.com/openssl/openssl/commit/eeee3cbd4d682095ed431052f00403004596373e",
-                      "https://github.com/openssl/openssl/commit/ef2fb66ec571564d64d1c74a12e388a2a54d05d2",
-                      "https://linux.oracle.com/cve/CVE-2026-22796.html",
-                      "https://linux.oracle.com/errata/ELSA-2026-50081.html",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2026-22796",
-                      "https://openssl-library.org/news/secadv/20260127.txt",
-                      "https://ubuntu.com/security/notices/USN-7980-1",
-                      "https://ubuntu.com/security/notices/USN-7980-2",
-                      "https://www.cve.org/CVERecord?id=CVE-2026-22796"
-                    ],
-                    "severity": "MEDIUM",
-                    "suppressed": false,
-                    "title": "openssl: OpenSSL: Denial of Service via type confusion in PKCS#7 signature verification"
-                  },
-                  {
-                    "cve": "CVE-2024-2511",
-                    "cvss": {
-                      "redhat": {
-                        "v3score": "3.7",
-                        "v3vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-1325"
-                    ],
-                    "description": "Issue summary: Some non-default TLS server configurations can cause unbounded\nmemory growth when processing TLSv1.3 sessions\n\nImpact summary: An attacker may exploit certain server configurations to trigger\nunbounded memory growth that would lead to a Denial of Service\n\nThis problem can occur in TLSv1.3 if the non-default SSL_OP_NO_TICKET option is\nbeing used (but not if early_data support is also configured and the default\nanti-replay protection is in use). In this case, under certain conditions, the\nsession cache can get into an incorrect state and it will fail to flush properly\nas it fills. The session cache will continue to grow in an unbounded manner. A\nmalicious client could deliberately create the scenario for this failure to\nforce a Denial of Service. It may also happen by accident in normal operation.\n\nThis issue only affects TLS servers supporting TLSv1.3. It does not affect TLS\nclients.\n\nThe FIPS modules in 3.2, 3.1 and 3.0 are not affected by this issue. OpenSSL\n1.0.2 is also not affected by this issue.",
-                    "diffID": "sha256:2f458857553769636f3c149c0c8d41acc63c9e24282823b0ea26869a635e9f48",
-                    "fixedVersions": [
-                      "1.1.1w-0+deb11u2"
-                    ],
-                    "installedVersion": "1.1.1w-0+deb11u1",
-                    "packageName": "openssl",
-                    "purl": "pkg:deb/debian/openssl@1.1.1w-0%2Bdeb11u1?arch=arm64&distro=debian-11.9",
-                    "references": [
-                      "http://www.openwall.com/lists/oss-security/2024/04/08/5",
-                      "https://access.redhat.com/errata/RHSA-2024:9333",
-                      "https://access.redhat.com/security/cve/CVE-2024-2511",
-                      "https://bugzilla.redhat.com/2274020",
-                      "https://bugzilla.redhat.com/2281029",
-                      "https://bugzilla.redhat.com/2283757",
-                      "https://bugzilla.redhat.com/2294581",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2274020",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2281029",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2283757",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2294581",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-2511",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-4603",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-4741",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-5535",
-                      "https://errata.almalinux.org/9/ALSA-2024-9333.html",
-                      "https://errata.rockylinux.org/RLSA-2024:9333",
-                      "https://github.com/openssl/openssl/commit/7e4d731b1c07201ad9374c1cd9ac5263bdf35bce",
-                      "https://github.com/openssl/openssl/commit/b52867a9f618bb955bed2a3ce3db4d4f97ed8e5d",
-                      "https://github.com/openssl/openssl/commit/e9d7083e241670332e0443da0f0d4ffb52829f08",
-                      "https://github.openssl.org/openssl/extended-releases/commit/5f8d25770ae6437db119dfc951e207271a326640",
-                      "https://linux.oracle.com/cve/CVE-2024-2511.html",
-                      "https://linux.oracle.com/errata/ELSA-2024-9333.html",
-                      "https://lists.debian.org/debian-lts-announce/2024/10/msg00033.html",
-                      "https://lists.debian.org/debian-lts-announce/2024/11/msg00000.html",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2024-2511",
-                      "https://security.netapp.com/advisory/ntap-20240503-0013/",
-                      "https://ubuntu.com/security/notices/USN-6937-1",
-                      "https://ubuntu.com/security/notices/USN-7894-1",
-                      "https://www.cve.org/CVERecord?id=CVE-2024-2511",
-                      "https://www.openssl.org/news/secadv/20240408.txt",
-                      "https://www.openssl.org/news/vulnerabilities.html"
-                    ],
-                    "severity": "LOW",
-                    "suppressed": false,
-                    "title": "openssl: Unbounded memory growth with session handling in TLSv1.3"
-                  },
-                  {
-                    "cve": "CVE-2024-9143",
-                    "cvss": {
-                      "redhat": {
-                        "v3score": "3.7",
-                        "v3vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-125",
-                      "CWE-787"
-                    ],
-                    "description": "Issue summary: Use of the low-level GF(2^m) elliptic curve APIs with untrusted\nexplicit values for the field polynomial can lead to out-of-bounds memory reads\nor writes.\n\nImpact summary: Out of bound memory writes can lead to an application crash or\neven a possibility of a remote code execution, however, in all the protocols\ninvolving Elliptic Curve Cryptography that we're aware of, either only \"named\ncurves\" are supported, or, if explicit curve parameters are supported, they\nspecify an X9.62 encoding of binary (GF(2^m)) curves that can't represent\nproblematic input values. Thus the likelihood of existence of a vulnerable\napplication is low.\n\nIn particular, the X9.62 encoding is used for ECC keys in X.509 certificates,\nso problematic inputs cannot occur in the context of processing X.509\ncertificates.  Any problematic use-cases would have to be using an \"exotic\"\ncurve encoding.\n\nThe affected APIs include: EC_GROUP_new_curve_GF2m(), EC_GROUP_new_from_params(),\nand various supporting BN_GF2m_*() functions.\n\nApplications working with \"exotic\" explicit binary (GF(2^m)) curve parameters,\nthat make it possible to represent invalid field polynomials with a zero\nconstant term, via the above or similar APIs, may terminate abruptly as a\nresult of reading or writing outside of array bounds.  Remote code execution\ncannot easily be ruled out.\n\nThe FIPS modules in 3.3, 3.2, 3.1 and 3.0 are not affected by this issue.",
-                    "diffID": "sha256:2f458857553769636f3c149c0c8d41acc63c9e24282823b0ea26869a635e9f48",
-                    "fixedVersions": [
-                      "1.1.1w-0+deb11u2"
-                    ],
-                    "installedVersion": "1.1.1w-0+deb11u1",
-                    "packageName": "openssl",
-                    "purl": "pkg:deb/debian/openssl@1.1.1w-0%2Bdeb11u1?arch=arm64&distro=debian-11.9",
-                    "references": [
-                      "http://www.openwall.com/lists/oss-security/2024/10/16/1",
-                      "http://www.openwall.com/lists/oss-security/2024/10/23/1",
-                      "http://www.openwall.com/lists/oss-security/2024/10/24/1",
-                      "https://access.redhat.com/security/cve/CVE-2024-9143",
-                      "https://github.com/openssl/openssl/commit/72ae83ad214d2eef262461365a1975707f862712",
-                      "https://github.com/openssl/openssl/commit/bc7e04d7c8d509fb78fc0e285aa948fb0da04700",
-                      "https://github.com/openssl/openssl/commit/c0d3e4d32d2805f49bec30547f225bc4d092e1f4",
-                      "https://github.com/openssl/openssl/commit/fdf6723362ca51bd883295efe206cb5b1cfa5154",
-                      "https://github.openssl.org/openssl/extended-releases/commit/8efc0cbaa8ebba8e116f7b81a876a4123594d86a",
-                      "https://github.openssl.org/openssl/extended-releases/commit/9d576994cec2b7aa37a91740ea7e680810957e41",
-                      "https://lists.debian.org/debian-lts-announce/2024/10/msg00033.html",
-                      "https://lists.debian.org/debian-lts-announce/2024/11/msg00000.html",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2024-9143",
-                      "https://openssl-library.org/news/secadv/20241016.txt",
-                      "https://security.netapp.com/advisory/ntap-20241101-0001/",
-                      "https://ubuntu.com/security/notices/USN-7264-1",
-                      "https://ubuntu.com/security/notices/USN-7278-1",
-                      "https://ubuntu.com/security/notices/USN-7894-1",
-                      "https://www.cve.org/CVERecord?id=CVE-2024-9143"
-                    ],
-                    "severity": "LOW",
-                    "suppressed": false,
-                    "title": "openssl: Low-level invalid GF(2^m) parameters lead to OOB memory access"
-                  },
-                  {
-                    "cve": "CVE-2025-27587",
-                    "cwes": [
-                      "CWE-385"
-                    ],
-                    "description": "OpenSSL 3.0.0 through 3.3.2 on the PowerPC architecture is vulnerable to a Minerva attack, exploitable by measuring the time of signing of random messages using the EVP_DigestSign API, and then using the private key to extract the K value (nonce) from the signatures. Next, based on the bit size of the extracted nonce, one can compare the signing time of full-sized nonces to signatures that used smaller nonces, via statistical tests. There is a side-channel in the P-364 curve that allows private key extraction (also, there is a dependency between the bit size of K and the size of the side channel). NOTE: This CVE is disputed because the OpenSSL security policy explicitly notes that any side channels which require same physical system to be detected are outside of the threat model for the software. The timing signal is so small that it is infeasible to be detected without having the attacking process running on the same physical system.",
-                    "diffID": "sha256:2f458857553769636f3c149c0c8d41acc63c9e24282823b0ea26869a635e9f48",
-                    "installedVersion": "1.1.1w-0+deb11u1",
-                    "packageName": "openssl",
-                    "purl": "pkg:deb/debian/openssl@1.1.1w-0%2Bdeb11u1?arch=arm64&distro=debian-11.9",
-                    "references": [
-                      "https://github.com/openssl/openssl/issues/24253",
-                      "https://minerva.crocs.fi.muni.cz"
-                    ],
-                    "severity": "LOW",
-                    "suppressed": false,
-                    "title": "OpenSSL 3.0.0 through 3.3.2 on the PowerPC architecture is vulnerable  ..."
-                  },
-                  {
-                    "cve": "CVE-2023-4641",
-                    "cvss": {
-                      "nvd": {
-                        "v3score": "5.5",
-                        "v3vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N"
-                      },
-                      "redhat": {
-                        "v3score": "4.7",
-                        "v3vector": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-303",
-                      "CWE-287"
-                    ],
-                    "description": "A flaw was found in shadow-utils. When asking for a new password, shadow-utils asks the password twice. If the password fails on the second attempt, shadow-utils fails in cleaning the buffer used to store the first entry. This may allow an attacker with enough access to retrieve the password from the memory.",
-                    "diffID": "sha256:a499da141b419b2e97ed40192951a05fc37fadec129a55e1de03773e23fff97b",
-                    "fixedVersions": [
-                      "1:4.8.1-1+deb11u1"
-                    ],
-                    "installedVersion": "1:4.8.1-1",
-                    "packageName": "passwd",
-                    "purl": "pkg:deb/debian/passwd@4.8.1-1?arch=arm64&distro=debian-11.9&epoch=1",
-                    "references": [
-                      "https://access.redhat.com/errata/RHSA-2023:6632",
-                      "https://access.redhat.com/errata/RHSA-2023:7112",
-                      "https://access.redhat.com/errata/RHSA-2024:0417",
-                      "https://access.redhat.com/errata/RHSA-2024:2577",
-                      "https://access.redhat.com/security/cve/CVE-2023-4641",
-                      "https://bugzilla.redhat.com/2215945",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2215945",
-                      "https://errata.almalinux.org/8/ALSA-2023-7112.html",
-                      "https://linux.oracle.com/cve/CVE-2023-4641.html",
-                      "https://linux.oracle.com/errata/ELSA-2023-7112.html",
-                      "https://lists.debian.org/debian-lts-announce/2025/04/msg00026.html",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2023-4641",
-                      "https://ubuntu.com/security/notices/USN-6640-1",
-                      "https://www.cve.org/CVERecord?id=CVE-2023-4641"
-                    ],
-                    "severity": "MEDIUM",
-                    "suppressed": false,
-                    "title": "shadow-utils: possible password leak during passwd(1) change"
-                  },
-                  {
-                    "cve": "CVE-2007-5686",
-                    "cvss": {
-                      "nvd": {
-                        "v3score": "0",
-                        "v3vector": ""
-                      }
-                    },
-                    "cwes": [
-                      "CWE-264"
-                    ],
-                    "description": "initscripts in rPath Linux 1 sets insecure permissions for the /var/log/btmp file, which allows local users to obtain sensitive information regarding authentication attempts.  NOTE: because sshd detects the insecure permissions and does not log certain events, this also prevents sshd from logging failed authentication attempts by remote attackers.",
-                    "diffID": "sha256:a499da141b419b2e97ed40192951a05fc37fadec129a55e1de03773e23fff97b",
-                    "installedVersion": "1:4.8.1-1",
-                    "packageName": "passwd",
-                    "purl": "pkg:deb/debian/passwd@4.8.1-1?arch=arm64&distro=debian-11.9&epoch=1",
-                    "references": [
-                      "http://secunia.com/advisories/27215",
-                      "http://www.securityfocus.com/archive/1/482129/100/100/threaded",
-                      "http://www.securityfocus.com/archive/1/482857/100/0/threaded",
-                      "http://www.securityfocus.com/bid/26048",
-                      "http://www.vupen.com/english/advisories/2007/3474",
-                      "https://issues.rpath.com/browse/RPL-1825"
-                    ],
-                    "severity": "LOW",
-                    "suppressed": false,
-                    "title": "initscripts in rPath Linux 1 sets insecure permissions for the /var/lo ..."
-                  },
-                  {
-                    "cve": "CVE-2013-4235",
-                    "cvss": {
-                      "nvd": {
-                        "v3score": "4.7",
-                        "v3vector": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:N"
-                      },
-                      "redhat": {
-                        "v3score": "4.4",
-                        "v3vector": "CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:N/I:H/A:N"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-367"
-                    ],
-                    "description": "shadow: TOCTOU (time-of-check time-of-use) race condition when copying and removing directory trees",
-                    "diffID": "sha256:a499da141b419b2e97ed40192951a05fc37fadec129a55e1de03773e23fff97b",
-                    "installedVersion": "1:4.8.1-1",
-                    "packageName": "passwd",
-                    "purl": "pkg:deb/debian/passwd@4.8.1-1?arch=arm64&distro=debian-11.9&epoch=1",
-                    "references": [
-                      "https://access.redhat.com/security/cve/CVE-2013-4235",
-                      "https://access.redhat.com/security/cve/cve-2013-4235",
-                      "https://bugs.launchpad.net/ubuntu/+source/shadow/+bug/1998169",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2013-4235",
-                      "https://github.com/shadow-maint/shadow/issues/317",
-                      "https://github.com/shadow-maint/shadow/pull/545",
-                      "https://lists.apache.org/thread.html/rf9fa47ab66495c78bb4120b0754dd9531ca2ff0430f6685ac9b07772%40%3Cdev.mina.apache.org%3E",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2013-4235",
-                      "https://security-tracker.debian.org/tracker/CVE-2013-4235",
-                      "https://security.gentoo.org/glsa/202210-26",
-                      "https://ubuntu.com/security/notices/USN-5745-1",
-                      "https://ubuntu.com/security/notices/USN-5745-2",
-                      "https://www.cve.org/CVERecord?id=CVE-2013-4235"
-                    ],
-                    "severity": "LOW",
-                    "suppressed": false,
-                    "title": "shadow-utils: TOCTOU race conditions by copying and removing directory trees"
-                  },
-                  {
-                    "cve": "CVE-2023-29383",
-                    "cvss": {
-                      "nvd": {
-                        "v3score": "3.3",
-                        "v3vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N"
-                      },
-                      "redhat": {
-                        "v3score": "5.5",
-                        "v3vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-74",
-                      "CWE-125"
-                    ],
-                    "description": "In Shadow 4.13, it is possible to inject control characters into fields provided to the SUID program chfn (change finger). Although it is not possible to exploit this directly (e.g., adding a new user fails because \\n is in the block list), it is possible to misrepresent the /etc/passwd file when viewed. Use of \\r manipulations and Unicode characters to work around blocking of the : character make it possible to give the impression that a new user has been added. In other words, an adversary may be able to convince a system administrator to take the system offline (an indirect, social-engineered denial of service) by demonstrating that \"cat /etc/passwd\" shows a rogue user account.",
-                    "diffID": "sha256:a499da141b419b2e97ed40192951a05fc37fadec129a55e1de03773e23fff97b",
-                    "fixedVersions": [
-                      "1:4.8.1-1+deb11u1"
-                    ],
-                    "installedVersion": "1:4.8.1-1",
-                    "packageName": "passwd",
-                    "purl": "pkg:deb/debian/passwd@4.8.1-1?arch=arm64&distro=debian-11.9&epoch=1",
-                    "references": [
-                      "https://access.redhat.com/security/cve/CVE-2023-29383",
-                      "https://github.com/shadow-maint/shadow/commit/e5905c4b84d4fb90aefcd96ee618411ebfac663d",
-                      "https://github.com/shadow-maint/shadow/pull/687",
-                      "https://lists.debian.org/debian-lts-announce/2025/04/msg00026.html",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2023-29383",
-                      "https://www.cve.org/CVERecord?id=CVE-2023-29383",
-                      "https://www.trustwave.com/en-us/resources/blogs/spiderlabs-blog/cve-2023-29383-abusing-linux-chfn-to-misrepresent-etc-passwd/",
-                      "https://www.trustwave.com/en-us/resources/security-resources/security-advisories/?fid=31797"
-                    ],
-                    "severity": "LOW",
-                    "suppressed": false,
-                    "title": "shadow: Improper input validation in shadow-utils package utility chfn"
-                  },
-                  {
-                    "cve": "CVE-2024-56433",
-                    "cvss": {
-                      "redhat": {
-                        "v3score": "3.6",
-                        "v3vector": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:N"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-1188"
-                    ],
-                    "description": "shadow-utils (aka shadow) 4.4 through 4.17.0 establishes a default /etc/subuid behavior (e.g., uid 100000 through 165535 for the first user account) that can realistically conflict with the uids of users defined on locally administered networks, potentially leading to account takeover, e.g., by leveraging newuidmap for access to an NFS home directory (or same-host resources in the case of remote logins by these local network users). NOTE: it may also be argued that system administrators should not have assigned uids, within local networks, that are within the range that can occur in /etc/subuid.",
-                    "diffID": "sha256:a499da141b419b2e97ed40192951a05fc37fadec129a55e1de03773e23fff97b",
-                    "installedVersion": "1:4.8.1-1",
-                    "packageName": "passwd",
-                    "purl": "pkg:deb/debian/passwd@4.8.1-1?arch=arm64&distro=debian-11.9&epoch=1",
-                    "references": [
-                      "https://access.redhat.com/errata/RHSA-2025:20145",
-                      "https://access.redhat.com/security/cve/CVE-2024-56433",
-                      "https://bugzilla.redhat.com/2334165",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2334165",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-56433",
-                      "https://errata.almalinux.org/10/ALSA-2025-20145.html",
-                      "https://errata.rockylinux.org/RLSA-2025:20559",
-                      "https://github.com/shadow-maint/shadow/blob/e2512d5741d4a44bdd81a8c2d0029b6222728cf0/etc/login.defs#L238-L241",
-                      "https://github.com/shadow-maint/shadow/issues/1157",
-                      "https://github.com/shadow-maint/shadow/releases/tag/4.4",
-                      "https://linux.oracle.com/cve/CVE-2024-56433.html",
-                      "https://linux.oracle.com/errata/ELSA-2025-20559-0.html",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2024-56433",
-                      "https://www.cve.org/CVERecord?id=CVE-2024-56433"
-                    ],
-                    "severity": "LOW",
-                    "suppressed": false,
-                    "title": "shadow-utils: Default subordinate ID configuration in /etc/login.defs could lead to compromise"
-                  },
-                  {
-                    "cve": "TEMP-0628843-DBAD28",
-                    "diffID": "sha256:a499da141b419b2e97ed40192951a05fc37fadec129a55e1de03773e23fff97b",
-                    "installedVersion": "1:4.8.1-1",
-                    "packageName": "passwd",
-                    "purl": "pkg:deb/debian/passwd@4.8.1-1?arch=arm64&distro=debian-11.9&epoch=1",
-                    "severity": "LOW",
-                    "suppressed": false,
-                    "title": "[more related to CVE-2005-4890]"
-                  },
-                  {
-                    "cve": "CVE-2020-16156",
-                    "cvss": {
-                      "nvd": {
-                        "v3score": "7.8",
-                        "v3vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H"
-                      },
-                      "redhat": {
-                        "v3score": "7.8",
-                        "v3vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-347"
-                    ],
-                    "description": "CPAN 2.28 allows Signature Verification Bypass.",
-                    "diffID": "sha256:a499da141b419b2e97ed40192951a05fc37fadec129a55e1de03773e23fff97b",
-                    "fixedVersions": [
-                      "5.32.1-4+deb11u4"
-                    ],
-                    "installedVersion": "5.32.1-4+deb11u3",
-                    "packageName": "perl-base",
-                    "purl": "pkg:deb/debian/perl-base@5.32.1-4%2Bdeb11u3?arch=arm64&distro=debian-11.9",
-                    "references": [
-                      "http://blogs.perl.org/users/neilb/2021/11/addressing-cpan-vulnerabilities-related-to-checksums.html",
-                      "https://access.redhat.com/errata/RHSA-2025:8432",
-                      "https://access.redhat.com/security/cve/CVE-2020-16156",
-                      "https://blog.hackeriet.no/cpan-signature-verification-vulnerabilities/",
-                      "https://bugzilla.redhat.com/2035273",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2035273",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-16156",
-                      "https://errata.almalinux.org/8/ALSA-2025-8432.html",
-                      "https://errata.rockylinux.org/RLSA-2025:8432",
-                      "https://linux.oracle.com/cve/CVE-2020-16156.html",
-                      "https://linux.oracle.com/errata/ELSA-2025-8432.html",
-                      "https://lists.debian.org/debian-lts-announce/2024/10/msg00017.html",
-                      "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/SD6RYOJII7HRJ6WVORFNVTYNOFY5JDXN/",
-                      "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/SZ32AJIV4RHJMLWLU5QULGKMMIHYOMDC/",
-                      "https://metacpan.org/pod/distribution/CPAN/scripts/cpan",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2020-16156",
-                      "https://ubuntu.com/security/notices/USN-5689-1",
-                      "https://ubuntu.com/security/notices/USN-5689-2",
-                      "https://www.cve.org/CVERecord?id=CVE-2020-16156"
-                    ],
-                    "severity": "HIGH",
-                    "suppressed": false,
-                    "title": "perl-CPAN: Bypass of verification of signatures in CHECKSUMS files"
-                  },
-                  {
-                    "cve": "CVE-2023-31484",
-                    "cvss": {
-                      "nvd": {
-                        "v3score": "8.1",
-                        "v3vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H"
-                      },
-                      "redhat": {
-                        "v3score": "7.4",
-                        "v3vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-295"
-                    ],
-                    "description": "CPAN.pm before 2.35 does not verify TLS certificates when downloading distributions over HTTPS.",
-                    "diffID": "sha256:a499da141b419b2e97ed40192951a05fc37fadec129a55e1de03773e23fff97b",
-                    "fixedVersions": [
-                      "5.32.1-4+deb11u4"
-                    ],
-                    "installedVersion": "5.32.1-4+deb11u3",
-                    "packageName": "perl-base",
-                    "purl": "pkg:deb/debian/perl-base@5.32.1-4%2Bdeb11u3?arch=arm64&distro=debian-11.9",
-                    "references": [
-                      "http://www.openwall.com/lists/oss-security/2023/04/29/1",
-                      "http://www.openwall.com/lists/oss-security/2023/05/03/3",
-                      "http://www.openwall.com/lists/oss-security/2023/05/03/5",
-                      "http://www.openwall.com/lists/oss-security/2023/05/07/2",
-                      "https://access.redhat.com/errata/RHSA-2024:3094",
-                      "https://access.redhat.com/security/cve/CVE-2023-31484",
-                      "https://blog.hackeriet.no/perl-http-tiny-insecure-tls-default-affects-cpan-modules/",
-                      "https://bugzilla.redhat.com/2218667",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2218667",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-31484",
-                      "https://errata.almalinux.org/8/ALSA-2024-3094.html",
-                      "https://errata.rockylinux.org/RLSA-2023:6539",
-                      "https://github.com/andk/cpanpm/commit/9c98370287f4e709924aee7c58ef21c85289a7f0 (2.35-TRIAL)",
-                      "https://github.com/andk/cpanpm/pull/175",
-                      "https://linux.oracle.com/cve/CVE-2023-31484.html",
-                      "https://linux.oracle.com/errata/ELSA-2026-0079.html",
-                      "https://lists.debian.org/debian-lts-announce/2024/10/msg00017.html",
-                      "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BM6UW55CNFUTNGD5ZRKGUKKKFDJGMFHL/",
-                      "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LEGCEOKFJVBJ2QQ6S2H4NAEWTUERC7SB/",
-                      "https://metacpan.org/dist/CPAN/changes",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2023-31484",
-                      "https://security.netapp.com/advisory/ntap-20240621-0007/",
-                      "https://ubuntu.com/security/notices/USN-6112-1",
-                      "https://ubuntu.com/security/notices/USN-6112-2",
-                      "https://www.cve.org/CVERecord?id=CVE-2023-31484",
-                      "https://www.openwall.com/lists/oss-security/2023/04/18/14"
-                    ],
-                    "severity": "HIGH",
-                    "suppressed": false,
-                    "title": "perl: CPAN.pm does not verify TLS certificates when downloading distributions over HTTPS"
-                  },
-                  {
-                    "cve": "CVE-2025-40909",
-                    "cvss": {
-                      "redhat": {
-                        "v3score": "5.9",
-                        "v3vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-426",
-                      "CWE-689"
-                    ],
-                    "description": "Perl threads have a working directory race condition where file operations may target unintended paths.\n\nIf a directory handle is open at thread creation, the process-wide current working directory is temporarily changed in order to clone that handle for the new thread, which is visible from any third (or more) thread already running. \n\nThis may lead to unintended operations such as loading code or accessing files from unexpected locations, which a local attacker may be able to exploit.\n\nThe bug was introduced in commit 11a11ecf4bea72b17d250cfb43c897be1341861e and released in Perl version 5.13.6",
-                    "diffID": "sha256:a499da141b419b2e97ed40192951a05fc37fadec129a55e1de03773e23fff97b",
-                    "installedVersion": "5.32.1-4+deb11u3",
-                    "packageName": "perl-base",
-                    "purl": "pkg:deb/debian/perl-base@5.32.1-4%2Bdeb11u3?arch=arm64&distro=debian-11.9",
-                    "references": [
-                      "http://seclists.org/fulldisclosure/2025/Sep/53",
-                      "http://seclists.org/fulldisclosure/2025/Sep/54",
-                      "http://seclists.org/fulldisclosure/2025/Sep/55",
-                      "http://www.openwall.com/lists/oss-security/2025/05/23/1",
-                      "http://www.openwall.com/lists/oss-security/2025/05/30/4",
-                      "http://www.openwall.com/lists/oss-security/2025/06/02/2",
-                      "http://www.openwall.com/lists/oss-security/2025/06/02/5",
-                      "http://www.openwall.com/lists/oss-security/2025/06/02/6",
-                      "http://www.openwall.com/lists/oss-security/2025/06/02/7",
-                      "http://www.openwall.com/lists/oss-security/2025/06/03/1",
-                      "https://access.redhat.com/errata/RHSA-2025:11805",
-                      "https://access.redhat.com/security/cve/CVE-2025-40909",
-                      "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1098226",
-                      "https://bugzilla.redhat.com/2369407",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2369407",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-40909",
-                      "https://errata.almalinux.org/8/ALSA-2025-11805.html",
-                      "https://errata.rockylinux.org/RLSA-2025:11804",
-                      "https://github.com/Perl/perl5/commit/11a11ecf4bea72b17d250cfb43c897be1341861e",
-                      "https://github.com/Perl/perl5/commit/918bfff86ca8d6d4e4ec5b30994451e0bd74aba9.patch",
-                      "https://github.com/Perl/perl5/issues/10387",
-                      "https://github.com/Perl/perl5/issues/23010",
-                      "https://linux.oracle.com/cve/CVE-2025-40909.html",
-                      "https://linux.oracle.com/errata/ELSA-2025-12056.html",
-                      "https://lists.security.metacpan.org/cve-announce/msg/30017499/",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2025-40909",
-                      "https://perldoc.perl.org/5.14.0/perl5136delta#Directory-handles-not-copied-to-threads",
-                      "https://ubuntu.com/security/notices/USN-7678-1",
-                      "https://www.cve.org/CVERecord?id=CVE-2025-40909",
-                      "https://www.openwall.com/lists/oss-security/2025/05/22/2"
-                    ],
-                    "severity": "MEDIUM",
-                    "suppressed": false,
-                    "title": "perl: Perl threads have a working directory race condition where file operations may target unintended paths"
-                  },
-                  {
-                    "cve": "CVE-2011-4116",
-                    "cvss": {
-                      "nvd": {
-                        "v3score": "3.3",
-                        "v3vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N"
-                      },
-                      "redhat": {
-                        "v3score": "0",
-                        "v3vector": ""
-                      }
-                    },
-                    "cwes": [
-                      "CWE-59"
-                    ],
-                    "description": "_is_safe in the File::Temp module for Perl does not properly handle symlinks.",
-                    "diffID": "sha256:a499da141b419b2e97ed40192951a05fc37fadec129a55e1de03773e23fff97b",
-                    "installedVersion": "5.32.1-4+deb11u3",
-                    "packageName": "perl-base",
-                    "purl": "pkg:deb/debian/perl-base@5.32.1-4%2Bdeb11u3?arch=arm64&distro=debian-11.9",
-                    "references": [
-                      "http://www.openwall.com/lists/oss-security/2011/11/04/2",
-                      "http://www.openwall.com/lists/oss-security/2011/11/04/4",
-                      "https://access.redhat.com/security/cve/CVE-2011-4116",
-                      "https://github.com/Perl-Toolchain-Gang/File-Temp/issues/14",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2011-4116",
-                      "https://rt.cpan.org/Public/Bug/Display.html?id=69106",
-                      "https://seclists.org/oss-sec/2011/q4/238",
-                      "https://www.cve.org/CVERecord?id=CVE-2011-4116"
-                    ],
-                    "severity": "LOW",
-                    "suppressed": false,
-                    "title": "perl: File:: Temp insecure temporary file handling"
-                  },
-                  {
-                    "cve": "CVE-2023-31486",
-                    "cvss": {
-                      "nvd": {
-                        "v3score": "8.1",
-                        "v3vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H"
-                      },
-                      "redhat": {
-                        "v3score": "8.1",
-                        "v3vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-295"
-                    ],
-                    "description": "HTTP::Tiny before 0.083, a Perl core module since 5.13.9 and available standalone on CPAN, has an insecure default TLS configuration where users must opt in to verify certificates.",
-                    "diffID": "sha256:a499da141b419b2e97ed40192951a05fc37fadec129a55e1de03773e23fff97b",
-                    "installedVersion": "5.32.1-4+deb11u3",
-                    "packageName": "perl-base",
-                    "purl": "pkg:deb/debian/perl-base@5.32.1-4%2Bdeb11u3?arch=arm64&distro=debian-11.9",
-                    "references": [
-                      "http://www.openwall.com/lists/oss-security/2023/04/29/1",
-                      "http://www.openwall.com/lists/oss-security/2023/05/03/3",
-                      "http://www.openwall.com/lists/oss-security/2023/05/03/5",
-                      "http://www.openwall.com/lists/oss-security/2023/05/07/2",
-                      "https://access.redhat.com/errata/RHSA-2023:7174",
-                      "https://access.redhat.com/security/cve/CVE-2023-31486",
-                      "https://blog.hackeriet.no/perl-http-tiny-insecure-tls-default-affects-cpan-modules/",
-                      "https://bugzilla.redhat.com/2228392",
-                      "https://errata.almalinux.org/8/ALSA-2023-7174.html",
-                      "https://github.com/chansen/p5-http-tiny/pull/153",
-                      "https://hackeriet.github.io/cpan-http-tiny-overview/",
-                      "https://linux.oracle.com/cve/CVE-2023-31486.html",
-                      "https://linux.oracle.com/errata/ELSA-2023-7174.html",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2023-31486",
-                      "https://security.netapp.com/advisory/ntap-20241129-0011/",
-                      "https://www.cve.org/CVERecord?id=CVE-2023-31486",
-                      "https://www.openwall.com/lists/oss-security/2023/04/18/14",
-                      "https://www.openwall.com/lists/oss-security/2023/05/03/4",
-                      "https://www.reddit.com/r/perl/comments/111tadi/psa_httptiny_disabled_ssl_verification_by_default/"
-                    ],
-                    "severity": "LOW",
-                    "suppressed": false,
-                    "title": "http-tiny: insecure TLS cert default"
-                  },
-                  {
-                    "cve": "TEMP-0517018-A83CE6",
-                    "diffID": "sha256:a499da141b419b2e97ed40192951a05fc37fadec129a55e1de03773e23fff97b",
-                    "installedVersion": "2.96-7+deb11u1",
-                    "packageName": "sysvinit-utils",
-                    "purl": "pkg:deb/debian/sysvinit-utils@2.96-7%2Bdeb11u1?arch=arm64&distro=debian-11.9",
-                    "severity": "LOW",
-                    "suppressed": false,
-                    "title": "[sysvinit: no-root option in expert installer exposes locally exploitable security flaw]"
-                  },
-                  {
-                    "cve": "CVE-2005-2541",
-                    "cvss": {
-                      "nvd": {
-                        "v3score": "0",
-                        "v3vector": ""
-                      },
-                      "redhat": {
-                        "v3score": "7",
-                        "v3vector": "CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H"
-                      }
-                    },
-                    "description": "Tar 1.15.1 does not properly warn the user when extracting setuid or setgid files, which may allow local users or remote attackers to gain privileges.",
-                    "diffID": "sha256:a499da141b419b2e97ed40192951a05fc37fadec129a55e1de03773e23fff97b",
-                    "installedVersion": "1.34+dfsg-1+deb11u1",
-                    "packageName": "tar",
-                    "purl": "pkg:deb/debian/tar@1.34%2Bdfsg-1%2Bdeb11u1?arch=arm64&distro=debian-11.9",
-                    "references": [
-                      "http://marc.info/?l=bugtraq&m=112327628230258&w=2",
-                      "https://access.redhat.com/security/cve/CVE-2005-2541",
-                      "https://lists.apache.org/thread.html/rc713534b10f9daeee2e0990239fa407e2118e4aa9e88a7041177497c%40%3Cissues.guacamole.apache.org%3E",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2005-2541",
-                      "https://www.cve.org/CVERecord?id=CVE-2005-2541"
-                    ],
-                    "severity": "LOW",
-                    "suppressed": false,
-                    "title": "tar: does not properly warn the user when extracting setuid or setgid files"
-                  },
-                  {
-                    "cve": "TEMP-0290435-0B57B5",
-                    "diffID": "sha256:a499da141b419b2e97ed40192951a05fc37fadec129a55e1de03773e23fff97b",
-                    "installedVersion": "1.34+dfsg-1+deb11u1",
-                    "packageName": "tar",
-                    "purl": "pkg:deb/debian/tar@1.34%2Bdfsg-1%2Bdeb11u1?arch=arm64&distro=debian-11.9",
-                    "severity": "LOW",
-                    "suppressed": false,
-                    "title": "[tar's rmt command may have undesired side effects]"
-                  },
-                  {
-                    "cve": "DLA-3972-1",
-                    "diffID": "sha256:a499da141b419b2e97ed40192951a05fc37fadec129a55e1de03773e23fff97b",
-                    "fixedVersions": [
-                      "2024b-0+deb11u1"
-                    ],
-                    "installedVersion": "2024a-0+deb11u1",
-                    "packageName": "tzdata",
-                    "purl": "pkg:deb/debian/tzdata@2024a-0%2Bdeb11u1?arch=all&distro=debian-11.9",
-                    "severity": "UNKNOWN",
-                    "suppressed": false,
-                    "title": "tzdata - new timezone database"
-                  },
-                  {
-                    "cve": "DLA-4085-1",
-                    "diffID": "sha256:a499da141b419b2e97ed40192951a05fc37fadec129a55e1de03773e23fff97b",
-                    "fixedVersions": [
-                      "2025a-0+deb11u1"
-                    ],
-                    "installedVersion": "2024a-0+deb11u1",
-                    "packageName": "tzdata",
-                    "purl": "pkg:deb/debian/tzdata@2024a-0%2Bdeb11u1?arch=all&distro=debian-11.9",
-                    "severity": "UNKNOWN",
-                    "suppressed": false,
-                    "title": "tzdata - new timezone database"
-                  },
-                  {
-                    "cve": "DLA-4105-1",
-                    "diffID": "sha256:a499da141b419b2e97ed40192951a05fc37fadec129a55e1de03773e23fff97b",
-                    "fixedVersions": [
-                      "2025b-0+deb11u1"
-                    ],
-                    "installedVersion": "2024a-0+deb11u1",
-                    "packageName": "tzdata",
-                    "purl": "pkg:deb/debian/tzdata@2024a-0%2Bdeb11u1?arch=all&distro=debian-11.9",
-                    "severity": "UNKNOWN",
-                    "suppressed": false,
-                    "title": "tzdata - new timezone database"
-                  },
-                  {
-                    "cve": "DLA-4403-1",
-                    "diffID": "sha256:a499da141b419b2e97ed40192951a05fc37fadec129a55e1de03773e23fff97b",
-                    "fixedVersions": [
-                      "2025b-0+deb11u2"
-                    ],
-                    "installedVersion": "2024a-0+deb11u1",
-                    "packageName": "tzdata",
-                    "purl": "pkg:deb/debian/tzdata@2024a-0%2Bdeb11u1?arch=all&distro=debian-11.9",
-                    "severity": "UNKNOWN",
-                    "suppressed": false,
-                    "title": "tzdata - new timezone database"
-                  },
-                  {
-                    "cve": "DLA-4016-1",
-                    "diffID": "sha256:2f458857553769636f3c149c0c8d41acc63c9e24282823b0ea26869a635e9f48",
-                    "fixedVersions": [
-                      "3.0043+deb11u2"
-                    ],
-                    "installedVersion": "3.0043",
-                    "packageName": "ucf",
-                    "purl": "pkg:deb/debian/ucf@3.0043?arch=all&distro=debian-11.9",
-                    "severity": "UNKNOWN",
-                    "suppressed": false,
-                    "title": "ucf - security update"
-                  },
-                  {
-                    "cve": "CVE-2025-14104",
-                    "cvss": {
-                      "redhat": {
-                        "v3score": "6.1",
-                        "v3vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-125"
-                    ],
-                    "description": "A flaw was found in util-linux. This vulnerability allows a heap buffer overread when processing 256-byte usernames, specifically within the `setpwnam()` function, affecting SUID (Set User ID) login-utils utilities writing to the password database.",
-                    "diffID": "sha256:a499da141b419b2e97ed40192951a05fc37fadec129a55e1de03773e23fff97b",
-                    "installedVersion": "2.36.1-8+deb11u2",
-                    "packageName": "util-linux",
-                    "purl": "pkg:deb/debian/util-linux@2.36.1-8%2Bdeb11u2?arch=arm64&distro=debian-11.9",
-                    "references": [
-                      "https://access.redhat.com/errata/RHSA-2026:1696",
-                      "https://access.redhat.com/errata/RHSA-2026:1852",
-                      "https://access.redhat.com/errata/RHSA-2026:1913",
-                      "https://access.redhat.com/security/cve/CVE-2025-14104",
-                      "https://bugzilla.redhat.com/2419369",
-                      "https://bugzilla.redhat.com/show_bug.cgi?id=2419369",
-                      "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-14104",
-                      "https://errata.almalinux.org/10/ALSA-2026-1696.html",
-                      "https://errata.rockylinux.org/RLSA-2026:1913",
-                      "https://linux.oracle.com/cve/CVE-2025-14104.html",
-                      "https://linux.oracle.com/errata/ELSA-2026-1913.html",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2025-14104",
-                      "https://www.cve.org/CVERecord?id=CVE-2025-14104"
-                    ],
-                    "severity": "MEDIUM",
-                    "suppressed": false,
-                    "title": "util-linux: util-linux: Heap buffer overread in setpwnam() when processing 256-byte usernames"
-                  },
-                  {
-                    "cve": "CVE-2022-0563",
-                    "cvss": {
-                      "nvd": {
-                        "v3score": "5.5",
-                        "v3vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N"
-                      },
-                      "redhat": {
-                        "v3score": "5.5",
-                        "v3vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-209"
-                    ],
-                    "description": "A flaw was found in the util-linux chfn and chsh utilities when compiled with Readline support. The Readline library uses an \"INPUTRC\" environment variable to get a path to the library config file. When the library cannot parse the specified file, it prints an error message containing data from the file. This flaw allows an unprivileged user to read root-owned files, potentially leading to privilege escalation. This flaw affects util-linux versions prior to 2.37.4.",
-                    "diffID": "sha256:a499da141b419b2e97ed40192951a05fc37fadec129a55e1de03773e23fff97b",
-                    "installedVersion": "2.36.1-8+deb11u2",
-                    "packageName": "util-linux",
-                    "purl": "pkg:deb/debian/util-linux@2.36.1-8%2Bdeb11u2?arch=arm64&distro=debian-11.9",
-                    "references": [
-                      "https://access.redhat.com/security/cve/CVE-2022-0563",
-                      "https://blog.trailofbits.com/2023/02/16/suid-logic-bug-linux-readline/",
-                      "https://lore.kernel.org/util-linux/20220214110609.msiwlm457ngoic6w%40ws.net.home/T/#u",
-                      "https://lore.kernel.org/util-linux/20220214110609.msiwlm457ngoic6w@ws.net.home/T/#u",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2022-0563",
-                      "https://security.gentoo.org/glsa/202401-08",
-                      "https://security.netapp.com/advisory/ntap-20220331-0002/",
-                      "https://www.cve.org/CVERecord?id=CVE-2022-0563"
-                    ],
-                    "severity": "LOW",
-                    "suppressed": false,
-                    "title": "util-linux: partial disclosure of arbitrary files in chfn and chsh when compiled with libreadline"
-                  },
-                  {
-                    "cve": "CVE-2023-45853",
-                    "cvss": {
-                      "ghsa": {
-                        "v3score": "9.8",
-                        "v3vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"
-                      },
-                      "nvd": {
-                        "v3score": "9.8",
-                        "v3vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"
-                      },
-                      "redhat": {
-                        "v3score": "5.3",
-                        "v3vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L"
-                      }
-                    },
-                    "cwes": [
-                      "CWE-190"
-                    ],
-                    "description": "MiniZip in zlib through 1.3 has an integer overflow and resultant heap-based buffer overflow in zipOpenNewFileInZip4_64 via a long filename, comment, or extra field. NOTE: MiniZip is not a supported part of the zlib product. NOTE: pyminizip through 0.2.6 is also vulnerable because it bundles an affected zlib version, and exposes the applicable MiniZip code through its compress API.",
-                    "diffID": "sha256:a499da141b419b2e97ed40192951a05fc37fadec129a55e1de03773e23fff97b",
-                    "installedVersion": "1:1.2.11.dfsg-2+deb11u2",
-                    "packageName": "zlib1g",
-                    "purl": "pkg:deb/debian/zlib1g@1.2.11.dfsg-2%2Bdeb11u2?arch=arm64&distro=debian-11.9&epoch=1",
-                    "references": [
-                      "http://www.openwall.com/lists/oss-security/2023/10/20/9",
-                      "http://www.openwall.com/lists/oss-security/2024/01/24/10",
-                      "https://access.redhat.com/security/cve/CVE-2023-45853",
-                      "https://chromium.googlesource.com/chromium/src/+/d709fb23806858847131027da95ef4c548813356",
-                      "https://chromium.googlesource.com/chromium/src/+/de29dd6c7151d3cd37cb4cf0036800ddfb1d8b61",
-                      "https://github.com/madler/zlib/blob/ac8f12c97d1afd9bafa9c710f827d40a407d3266/contrib/README.contrib#L1-L4",
-                      "https://github.com/madler/zlib/commit/73331a6a0481067628f065ffe87bb1d8f787d10c",
-                      "https://github.com/madler/zlib/pull/843",
-                      "https://github.com/smihica/pyminizip",
-                      "https://github.com/smihica/pyminizip/blob/master/zlib-1.2.11/contrib/minizip/zip.c",
-                      "https://lists.debian.org/debian-lts-announce/2023/11/msg00026.html",
-                      "https://nvd.nist.gov/vuln/detail/CVE-2023-45853",
-                      "https://pypi.org/project/pyminizip/#history",
-                      "https://security.gentoo.org/glsa/202401-18",
-                      "https://security.netapp.com/advisory/ntap-20231130-0009",
-                      "https://security.netapp.com/advisory/ntap-20231130-0009/",
-                      "https://ubuntu.com/security/notices/USN-7107-1",
-                      "https://www.cve.org/CVERecord?id=CVE-2023-45853",
-                      "https://www.winimage.com/zLibDll/minizip.html"
-                    ],
-                    "severity": "CRITICAL",
-                    "suppressed": false,
-                    "title": "zlib: integer overflow and resultant heap-based buffer overflow in zipOpenNewFileInZip4_6"
-                  }
-                ]
-              }
-            ],
-            "summary": {
-              "critical": 13,
-              "high": 74,
-              "low": 153,
-              "medium": 119,
-              "suppressed": 0,
-              "unknown": 9
-            }
-          }
-        }
-      ]
-    }
-  ],
-  "kind": "WorkloadScanReport",
-  "metadata": {
-    "creationTimestamp": "2026-02-09T08:28:06Z",
-    "labels": {
-      "app.kubernetes.io/managed-by": "sbomscanner"
-    },
-    "name": "deployment-nginx-with-dummy-init",
-    "namespace": "cnpg-system",//"test",
-    "ownerReferences": [
-      {
-        "apiVersion": "apps/v1",
-        "blockOwnerDeletion": true,
-        "controller": true,
-        "kind": "Deployment",
-        "name": "cnpg-cloudnative-pg",//"nginx-with-dummy-init",
-        "uid": "cac35639-218b-4275-b8dc-96302a240989"
-      }
-    ],
-    "resourceVersion": "2483",
-    "uid": "db545f7b-8810-4dde-9e2f-35b271d4f833"
-  },
-  "spec": {
-    "containers": [
-      {
-        "imageRef": {
-          "namespace": "sbomscanner",
-          "registry": "workloadscan-ghcr-io",
-          "repository": "tarampampam/curl",
-          "tag": "8.14.1-alpine"
-        },
-        "name": "init"
-      },
-      {
-        "imageRef": {
-          "namespace": "sbomscanner",
-          "registry": "workloadscan-ghcr-io",
-          "repository": "nginxinc/nginx-unprivileged",
-          "tag": "1.24"
-        },
-        "name": "nginx"
-      }
-    ]
-  },
-  "status": {
-    "containerStatuses": [
-      {
-        "name": "init",
-        "scanStatus": "ScanComplete"
-      },
-      {
-        "name": "nginx",
-        "scanStatus": "ScanComplete"
-      }
-    ]
-  },
-  "summary": {
-    "critical": 15,
-    "high": 78,
-    "low": 161,
-    "medium": 144,
-    "suppressed": 0,
-    "unknown": 11
-  }
-};
\ No newline at end of file